| /* | 
 |  * Copyright (c) 2011 - 2019, Max Filippov, Open Source and Linux Lab. | 
 |  * All rights reserved. | 
 |  * | 
 |  * Redistribution and use in source and binary forms, with or without | 
 |  * modification, are permitted provided that the following conditions are met: | 
 |  *     * Redistributions of source code must retain the above copyright | 
 |  *       notice, this list of conditions and the following disclaimer. | 
 |  *     * Redistributions in binary form must reproduce the above copyright | 
 |  *       notice, this list of conditions and the following disclaimer in the | 
 |  *       documentation and/or other materials provided with the distribution. | 
 |  *     * Neither the name of the Open Source and Linux Lab nor the | 
 |  *       names of its contributors may be used to endorse or promote products | 
 |  *       derived from this software without specific prior written permission. | 
 |  * | 
 |  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" | 
 |  * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | 
 |  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | 
 |  * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY | 
 |  * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES | 
 |  * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | 
 |  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND | 
 |  * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT | 
 |  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS | 
 |  * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | 
 |  */ | 
 |  | 
 | #include "qemu/osdep.h" | 
 | #include "qemu/log.h" | 
 | #include "qemu/qemu-print.h" | 
 | #include "qemu/units.h" | 
 | #include "cpu.h" | 
 | #include "exec/helper-proto.h" | 
 | #include "qemu/host-utils.h" | 
 | #include "exec/exec-all.h" | 
 | #include "exec/page-protection.h" | 
 |  | 
 | #define XTENSA_MPU_SEGMENT_MASK 0x0000001f | 
 | #define XTENSA_MPU_ACC_RIGHTS_MASK 0x00000f00 | 
 | #define XTENSA_MPU_ACC_RIGHTS_SHIFT 8 | 
 | #define XTENSA_MPU_MEM_TYPE_MASK 0x001ff000 | 
 | #define XTENSA_MPU_MEM_TYPE_SHIFT 12 | 
 | #define XTENSA_MPU_ATTR_MASK 0x001fff00 | 
 |  | 
 | #define XTENSA_MPU_PROBE_B 0x40000000 | 
 | #define XTENSA_MPU_PROBE_V 0x80000000 | 
 |  | 
 | #define XTENSA_MPU_SYSTEM_TYPE_DEVICE 0x0001 | 
 | #define XTENSA_MPU_SYSTEM_TYPE_NC     0x0002 | 
 | #define XTENSA_MPU_SYSTEM_TYPE_C      0x0003 | 
 | #define XTENSA_MPU_SYSTEM_TYPE_MASK   0x0003 | 
 |  | 
 | #define XTENSA_MPU_TYPE_SYS_C     0x0010 | 
 | #define XTENSA_MPU_TYPE_SYS_W     0x0020 | 
 | #define XTENSA_MPU_TYPE_SYS_R     0x0040 | 
 | #define XTENSA_MPU_TYPE_CPU_C     0x0100 | 
 | #define XTENSA_MPU_TYPE_CPU_W     0x0200 | 
 | #define XTENSA_MPU_TYPE_CPU_R     0x0400 | 
 | #define XTENSA_MPU_TYPE_CPU_CACHE 0x0800 | 
 | #define XTENSA_MPU_TYPE_B         0x1000 | 
 | #define XTENSA_MPU_TYPE_INT       0x2000 | 
 |  | 
 | void HELPER(itlb_hit_test)(CPUXtensaState *env, uint32_t vaddr) | 
 | { | 
 |     /* | 
 |      * Probe the memory; we don't care about the result but | 
 |      * only the side-effects (ie any MMU or other exception) | 
 |      */ | 
 |     probe_access(env, vaddr, 1, MMU_INST_FETCH, | 
 |                  cpu_mmu_index(env_cpu(env), true), GETPC()); | 
 | } | 
 |  | 
 | void HELPER(wsr_rasid)(CPUXtensaState *env, uint32_t v) | 
 | { | 
 |     v = (v & 0xffffff00) | 0x1; | 
 |     if (v != env->sregs[RASID]) { | 
 |         env->sregs[RASID] = v; | 
 |         tlb_flush(env_cpu(env)); | 
 |     } | 
 | } | 
 |  | 
 | static uint32_t get_page_size(const CPUXtensaState *env, | 
 |                               bool dtlb, uint32_t way) | 
 | { | 
 |     uint32_t tlbcfg = env->sregs[dtlb ? DTLBCFG : ITLBCFG]; | 
 |  | 
 |     switch (way) { | 
 |     case 4: | 
 |         return (tlbcfg >> 16) & 0x3; | 
 |  | 
 |     case 5: | 
 |         return (tlbcfg >> 20) & 0x1; | 
 |  | 
 |     case 6: | 
 |         return (tlbcfg >> 24) & 0x1; | 
 |  | 
 |     default: | 
 |         return 0; | 
 |     } | 
 | } | 
 |  | 
 | /*! | 
 |  * Get bit mask for the virtual address bits translated by the TLB way | 
 |  */ | 
 | static uint32_t xtensa_tlb_get_addr_mask(const CPUXtensaState *env, | 
 |                                          bool dtlb, uint32_t way) | 
 | { | 
 |     if (xtensa_option_enabled(env->config, XTENSA_OPTION_MMU)) { | 
 |         bool varway56 = dtlb ? | 
 |             env->config->dtlb.varway56 : | 
 |             env->config->itlb.varway56; | 
 |  | 
 |         switch (way) { | 
 |         case 4: | 
 |             return 0xfff00000 << get_page_size(env, dtlb, way) * 2; | 
 |  | 
 |         case 5: | 
 |             if (varway56) { | 
 |                 return 0xf8000000 << get_page_size(env, dtlb, way); | 
 |             } else { | 
 |                 return 0xf8000000; | 
 |             } | 
 |  | 
 |         case 6: | 
 |             if (varway56) { | 
 |                 return 0xf0000000 << (1 - get_page_size(env, dtlb, way)); | 
 |             } else { | 
 |                 return 0xf0000000; | 
 |             } | 
 |  | 
 |         default: | 
 |             return 0xfffff000; | 
 |         } | 
 |     } else { | 
 |         return REGION_PAGE_MASK; | 
 |     } | 
 | } | 
 |  | 
 | /*! | 
 |  * Get bit mask for the 'VPN without index' field. | 
 |  * See ISA, 4.6.5.6, data format for RxTLB0 | 
 |  */ | 
 | static uint32_t get_vpn_mask(const CPUXtensaState *env, bool dtlb, uint32_t way) | 
 | { | 
 |     if (way < 4) { | 
 |         bool is32 = (dtlb ? | 
 |                 env->config->dtlb.nrefillentries : | 
 |                 env->config->itlb.nrefillentries) == 32; | 
 |         return is32 ? 0xffff8000 : 0xffffc000; | 
 |     } else if (way == 4) { | 
 |         return xtensa_tlb_get_addr_mask(env, dtlb, way) << 2; | 
 |     } else if (way <= 6) { | 
 |         uint32_t mask = xtensa_tlb_get_addr_mask(env, dtlb, way); | 
 |         bool varway56 = dtlb ? | 
 |             env->config->dtlb.varway56 : | 
 |             env->config->itlb.varway56; | 
 |  | 
 |         if (varway56) { | 
 |             return mask << (way == 5 ? 2 : 3); | 
 |         } else { | 
 |             return mask << 1; | 
 |         } | 
 |     } else { | 
 |         return 0xfffff000; | 
 |     } | 
 | } | 
 |  | 
 | /*! | 
 |  * Split virtual address into VPN (with index) and entry index | 
 |  * for the given TLB way | 
 |  */ | 
 | static void split_tlb_entry_spec_way(const CPUXtensaState *env, uint32_t v, | 
 |                                      bool dtlb, uint32_t *vpn, | 
 |                                      uint32_t wi, uint32_t *ei) | 
 | { | 
 |     bool varway56 = dtlb ? | 
 |         env->config->dtlb.varway56 : | 
 |         env->config->itlb.varway56; | 
 |  | 
 |     if (!dtlb) { | 
 |         wi &= 7; | 
 |     } | 
 |  | 
 |     if (wi < 4) { | 
 |         bool is32 = (dtlb ? | 
 |                 env->config->dtlb.nrefillentries : | 
 |                 env->config->itlb.nrefillentries) == 32; | 
 |         *ei = (v >> 12) & (is32 ? 0x7 : 0x3); | 
 |     } else { | 
 |         switch (wi) { | 
 |         case 4: | 
 |             { | 
 |                 uint32_t eibase = 20 + get_page_size(env, dtlb, wi) * 2; | 
 |                 *ei = (v >> eibase) & 0x3; | 
 |             } | 
 |             break; | 
 |  | 
 |         case 5: | 
 |             if (varway56) { | 
 |                 uint32_t eibase = 27 + get_page_size(env, dtlb, wi); | 
 |                 *ei = (v >> eibase) & 0x3; | 
 |             } else { | 
 |                 *ei = (v >> 27) & 0x1; | 
 |             } | 
 |             break; | 
 |  | 
 |         case 6: | 
 |             if (varway56) { | 
 |                 uint32_t eibase = 29 - get_page_size(env, dtlb, wi); | 
 |                 *ei = (v >> eibase) & 0x7; | 
 |             } else { | 
 |                 *ei = (v >> 28) & 0x1; | 
 |             } | 
 |             break; | 
 |  | 
 |         default: | 
 |             *ei = 0; | 
 |             break; | 
 |         } | 
 |     } | 
 |     *vpn = v & xtensa_tlb_get_addr_mask(env, dtlb, wi); | 
 | } | 
 |  | 
 | /*! | 
 |  * Split TLB address into TLB way, entry index and VPN (with index). | 
 |  * See ISA, 4.6.5.5 - 4.6.5.8 for the TLB addressing format | 
 |  */ | 
 | static bool split_tlb_entry_spec(CPUXtensaState *env, uint32_t v, bool dtlb, | 
 |                                  uint32_t *vpn, uint32_t *wi, uint32_t *ei) | 
 | { | 
 |     if (xtensa_option_enabled(env->config, XTENSA_OPTION_MMU)) { | 
 |         *wi = v & (dtlb ? 0xf : 0x7); | 
 |         if (*wi < (dtlb ? env->config->dtlb.nways : env->config->itlb.nways)) { | 
 |             split_tlb_entry_spec_way(env, v, dtlb, vpn, *wi, ei); | 
 |             return true; | 
 |         } else { | 
 |             return false; | 
 |         } | 
 |     } else { | 
 |         *vpn = v & REGION_PAGE_MASK; | 
 |         *wi = 0; | 
 |         *ei = (v >> 29) & 0x7; | 
 |         return true; | 
 |     } | 
 | } | 
 |  | 
 | static xtensa_tlb_entry *xtensa_tlb_get_entry(CPUXtensaState *env, bool dtlb, | 
 |                                               unsigned wi, unsigned ei) | 
 | { | 
 |     const xtensa_tlb *tlb = dtlb ? &env->config->dtlb : &env->config->itlb; | 
 |  | 
 |     assert(wi < tlb->nways && ei < tlb->way_size[wi]); | 
 |     return dtlb ? | 
 |         env->dtlb[wi] + ei : | 
 |         env->itlb[wi] + ei; | 
 | } | 
 |  | 
 | static xtensa_tlb_entry *get_tlb_entry(CPUXtensaState *env, | 
 |         uint32_t v, bool dtlb, uint32_t *pwi) | 
 | { | 
 |     uint32_t vpn; | 
 |     uint32_t wi; | 
 |     uint32_t ei; | 
 |  | 
 |     if (split_tlb_entry_spec(env, v, dtlb, &vpn, &wi, &ei)) { | 
 |         if (pwi) { | 
 |             *pwi = wi; | 
 |         } | 
 |         return xtensa_tlb_get_entry(env, dtlb, wi, ei); | 
 |     } else { | 
 |         return NULL; | 
 |     } | 
 | } | 
 |  | 
 | static void xtensa_tlb_set_entry_mmu(const CPUXtensaState *env, | 
 |                                      xtensa_tlb_entry *entry, bool dtlb, | 
 |                                      unsigned wi, unsigned ei, uint32_t vpn, | 
 |                                      uint32_t pte) | 
 | { | 
 |     entry->vaddr = vpn; | 
 |     entry->paddr = pte & xtensa_tlb_get_addr_mask(env, dtlb, wi); | 
 |     entry->asid = (env->sregs[RASID] >> ((pte >> 1) & 0x18)) & 0xff; | 
 |     entry->attr = pte & 0xf; | 
 | } | 
 |  | 
 | static void xtensa_tlb_set_entry(CPUXtensaState *env, bool dtlb, | 
 |                                  unsigned wi, unsigned ei, | 
 |                                  uint32_t vpn, uint32_t pte) | 
 | { | 
 |     CPUState *cs = env_cpu(env); | 
 |     xtensa_tlb_entry *entry = xtensa_tlb_get_entry(env, dtlb, wi, ei); | 
 |  | 
 |     if (xtensa_option_enabled(env->config, XTENSA_OPTION_MMU)) { | 
 |         if (entry->variable) { | 
 |             if (entry->asid) { | 
 |                 tlb_flush_page(cs, entry->vaddr); | 
 |             } | 
 |             xtensa_tlb_set_entry_mmu(env, entry, dtlb, wi, ei, vpn, pte); | 
 |             tlb_flush_page(cs, entry->vaddr); | 
 |         } else { | 
 |             qemu_log_mask(LOG_GUEST_ERROR, | 
 |                           "%s %d, %d, %d trying to set immutable entry\n", | 
 |                           __func__, dtlb, wi, ei); | 
 |         } | 
 |     } else { | 
 |         tlb_flush_page(cs, entry->vaddr); | 
 |         if (xtensa_option_enabled(env->config, | 
 |                     XTENSA_OPTION_REGION_TRANSLATION)) { | 
 |             entry->paddr = pte & REGION_PAGE_MASK; | 
 |         } | 
 |         entry->attr = pte & 0xf; | 
 |     } | 
 | } | 
 |  | 
 | hwaddr xtensa_cpu_get_phys_page_debug(CPUState *cs, vaddr addr) | 
 | { | 
 |     XtensaCPU *cpu = XTENSA_CPU(cs); | 
 |     uint32_t paddr; | 
 |     uint32_t page_size; | 
 |     unsigned access; | 
 |  | 
 |     if (xtensa_get_physical_addr(&cpu->env, false, addr, 0, 0, | 
 |                 &paddr, &page_size, &access) == 0) { | 
 |         return paddr; | 
 |     } | 
 |     if (xtensa_get_physical_addr(&cpu->env, false, addr, 2, 0, | 
 |                 &paddr, &page_size, &access) == 0) { | 
 |         return paddr; | 
 |     } | 
 |     return ~0; | 
 | } | 
 |  | 
 | static void reset_tlb_mmu_all_ways(CPUXtensaState *env, | 
 |                                    const xtensa_tlb *tlb, | 
 |                                    xtensa_tlb_entry entry[][MAX_TLB_WAY_SIZE]) | 
 | { | 
 |     unsigned wi, ei; | 
 |  | 
 |     for (wi = 0; wi < tlb->nways; ++wi) { | 
 |         for (ei = 0; ei < tlb->way_size[wi]; ++ei) { | 
 |             entry[wi][ei].asid = 0; | 
 |             entry[wi][ei].variable = true; | 
 |         } | 
 |     } | 
 | } | 
 |  | 
 | static void reset_tlb_mmu_ways56(CPUXtensaState *env, | 
 |                                  const xtensa_tlb *tlb, | 
 |                                  xtensa_tlb_entry entry[][MAX_TLB_WAY_SIZE]) | 
 | { | 
 |     if (!tlb->varway56) { | 
 |         static const xtensa_tlb_entry way5[] = { | 
 |             { | 
 |                 .vaddr = 0xd0000000, | 
 |                 .paddr = 0, | 
 |                 .asid = 1, | 
 |                 .attr = 7, | 
 |                 .variable = false, | 
 |             }, { | 
 |                 .vaddr = 0xd8000000, | 
 |                 .paddr = 0, | 
 |                 .asid = 1, | 
 |                 .attr = 3, | 
 |                 .variable = false, | 
 |             } | 
 |         }; | 
 |         static const xtensa_tlb_entry way6[] = { | 
 |             { | 
 |                 .vaddr = 0xe0000000, | 
 |                 .paddr = 0xf0000000, | 
 |                 .asid = 1, | 
 |                 .attr = 7, | 
 |                 .variable = false, | 
 |             }, { | 
 |                 .vaddr = 0xf0000000, | 
 |                 .paddr = 0xf0000000, | 
 |                 .asid = 1, | 
 |                 .attr = 3, | 
 |                 .variable = false, | 
 |             } | 
 |         }; | 
 |         memcpy(entry[5], way5, sizeof(way5)); | 
 |         memcpy(entry[6], way6, sizeof(way6)); | 
 |     } else { | 
 |         uint32_t ei; | 
 |         for (ei = 0; ei < 8; ++ei) { | 
 |             entry[6][ei].vaddr = ei << 29; | 
 |             entry[6][ei].paddr = ei << 29; | 
 |             entry[6][ei].asid = 1; | 
 |             entry[6][ei].attr = 3; | 
 |         } | 
 |     } | 
 | } | 
 |  | 
 | static void reset_tlb_region_way0(CPUXtensaState *env, | 
 |                                   xtensa_tlb_entry entry[][MAX_TLB_WAY_SIZE]) | 
 | { | 
 |     unsigned ei; | 
 |  | 
 |     for (ei = 0; ei < 8; ++ei) { | 
 |         entry[0][ei].vaddr = ei << 29; | 
 |         entry[0][ei].paddr = ei << 29; | 
 |         entry[0][ei].asid = 1; | 
 |         entry[0][ei].attr = 2; | 
 |         entry[0][ei].variable = true; | 
 |     } | 
 | } | 
 |  | 
 | void reset_mmu(CPUXtensaState *env) | 
 | { | 
 |     if (xtensa_option_enabled(env->config, XTENSA_OPTION_MMU)) { | 
 |         env->sregs[RASID] = 0x04030201; | 
 |         env->sregs[ITLBCFG] = 0; | 
 |         env->sregs[DTLBCFG] = 0; | 
 |         env->autorefill_idx = 0; | 
 |         reset_tlb_mmu_all_ways(env, &env->config->itlb, env->itlb); | 
 |         reset_tlb_mmu_all_ways(env, &env->config->dtlb, env->dtlb); | 
 |         reset_tlb_mmu_ways56(env, &env->config->itlb, env->itlb); | 
 |         reset_tlb_mmu_ways56(env, &env->config->dtlb, env->dtlb); | 
 |     } else if (xtensa_option_enabled(env->config, XTENSA_OPTION_MPU)) { | 
 |         unsigned i; | 
 |  | 
 |         env->sregs[MPUENB] = 0; | 
 |         env->sregs[MPUCFG] = env->config->n_mpu_fg_segments; | 
 |         env->sregs[CACHEADRDIS] = 0; | 
 |         assert(env->config->n_mpu_bg_segments > 0 && | 
 |                env->config->mpu_bg[0].vaddr == 0); | 
 |         for (i = 1; i < env->config->n_mpu_bg_segments; ++i) { | 
 |             assert(env->config->mpu_bg[i].vaddr >= | 
 |                    env->config->mpu_bg[i - 1].vaddr); | 
 |         } | 
 |     } else { | 
 |         env->sregs[CACHEATTR] = 0x22222222; | 
 |         reset_tlb_region_way0(env, env->itlb); | 
 |         reset_tlb_region_way0(env, env->dtlb); | 
 |     } | 
 | } | 
 |  | 
 | static unsigned get_ring(const CPUXtensaState *env, uint8_t asid) | 
 | { | 
 |     unsigned i; | 
 |     for (i = 0; i < 4; ++i) { | 
 |         if (((env->sregs[RASID] >> i * 8) & 0xff) == asid) { | 
 |             return i; | 
 |         } | 
 |     } | 
 |     return 0xff; | 
 | } | 
 |  | 
 | /*! | 
 |  * Lookup xtensa TLB for the given virtual address. | 
 |  * See ISA, 4.6.2.2 | 
 |  * | 
 |  * \param pwi: [out] way index | 
 |  * \param pei: [out] entry index | 
 |  * \param pring: [out] access ring | 
 |  * \return 0 if ok, exception cause code otherwise | 
 |  */ | 
 | static int xtensa_tlb_lookup(const CPUXtensaState *env, | 
 |                              uint32_t addr, bool dtlb, | 
 |                              uint32_t *pwi, uint32_t *pei, uint8_t *pring) | 
 | { | 
 |     const xtensa_tlb *tlb = dtlb ? | 
 |         &env->config->dtlb : &env->config->itlb; | 
 |     const xtensa_tlb_entry (*entry)[MAX_TLB_WAY_SIZE] = dtlb ? | 
 |         env->dtlb : env->itlb; | 
 |  | 
 |     int nhits = 0; | 
 |     unsigned wi; | 
 |  | 
 |     for (wi = 0; wi < tlb->nways; ++wi) { | 
 |         uint32_t vpn; | 
 |         uint32_t ei; | 
 |         split_tlb_entry_spec_way(env, addr, dtlb, &vpn, wi, &ei); | 
 |         if (entry[wi][ei].vaddr == vpn && entry[wi][ei].asid) { | 
 |             unsigned ring = get_ring(env, entry[wi][ei].asid); | 
 |             if (ring < 4) { | 
 |                 if (++nhits > 1) { | 
 |                     return dtlb ? | 
 |                         LOAD_STORE_TLB_MULTI_HIT_CAUSE : | 
 |                         INST_TLB_MULTI_HIT_CAUSE; | 
 |                 } | 
 |                 *pwi = wi; | 
 |                 *pei = ei; | 
 |                 *pring = ring; | 
 |             } | 
 |         } | 
 |     } | 
 |     return nhits ? 0 : | 
 |         (dtlb ? LOAD_STORE_TLB_MISS_CAUSE : INST_TLB_MISS_CAUSE); | 
 | } | 
 |  | 
 | uint32_t HELPER(rtlb0)(CPUXtensaState *env, uint32_t v, uint32_t dtlb) | 
 | { | 
 |     if (xtensa_option_enabled(env->config, XTENSA_OPTION_MMU)) { | 
 |         uint32_t wi; | 
 |         const xtensa_tlb_entry *entry = get_tlb_entry(env, v, dtlb, &wi); | 
 |  | 
 |         if (entry) { | 
 |             return (entry->vaddr & get_vpn_mask(env, dtlb, wi)) | entry->asid; | 
 |         } else { | 
 |             return 0; | 
 |         } | 
 |     } else { | 
 |         return v & REGION_PAGE_MASK; | 
 |     } | 
 | } | 
 |  | 
 | uint32_t HELPER(rtlb1)(CPUXtensaState *env, uint32_t v, uint32_t dtlb) | 
 | { | 
 |     const xtensa_tlb_entry *entry = get_tlb_entry(env, v, dtlb, NULL); | 
 |  | 
 |     if (entry) { | 
 |         return entry->paddr | entry->attr; | 
 |     } else { | 
 |         return 0; | 
 |     } | 
 | } | 
 |  | 
 | void HELPER(itlb)(CPUXtensaState *env, uint32_t v, uint32_t dtlb) | 
 | { | 
 |     if (xtensa_option_enabled(env->config, XTENSA_OPTION_MMU)) { | 
 |         uint32_t wi; | 
 |         xtensa_tlb_entry *entry = get_tlb_entry(env, v, dtlb, &wi); | 
 |         if (entry && entry->variable && entry->asid) { | 
 |             tlb_flush_page(env_cpu(env), entry->vaddr); | 
 |             entry->asid = 0; | 
 |         } | 
 |     } | 
 | } | 
 |  | 
 | uint32_t HELPER(ptlb)(CPUXtensaState *env, uint32_t v, uint32_t dtlb) | 
 | { | 
 |     if (xtensa_option_enabled(env->config, XTENSA_OPTION_MMU)) { | 
 |         uint32_t wi; | 
 |         uint32_t ei; | 
 |         uint8_t ring; | 
 |         int res = xtensa_tlb_lookup(env, v, dtlb, &wi, &ei, &ring); | 
 |  | 
 |         switch (res) { | 
 |         case 0: | 
 |             if (ring >= xtensa_get_ring(env)) { | 
 |                 return (v & 0xfffff000) | wi | (dtlb ? 0x10 : 0x8); | 
 |             } | 
 |             break; | 
 |  | 
 |         case INST_TLB_MULTI_HIT_CAUSE: | 
 |         case LOAD_STORE_TLB_MULTI_HIT_CAUSE: | 
 |             HELPER(exception_cause_vaddr)(env, env->pc, res, v); | 
 |             break; | 
 |         } | 
 |         return 0; | 
 |     } else { | 
 |         return (v & REGION_PAGE_MASK) | 0x1; | 
 |     } | 
 | } | 
 |  | 
 | void HELPER(wtlb)(CPUXtensaState *env, uint32_t p, uint32_t v, uint32_t dtlb) | 
 | { | 
 |     uint32_t vpn; | 
 |     uint32_t wi; | 
 |     uint32_t ei; | 
 |     if (split_tlb_entry_spec(env, v, dtlb, &vpn, &wi, &ei)) { | 
 |         xtensa_tlb_set_entry(env, dtlb, wi, ei, vpn, p); | 
 |     } | 
 | } | 
 |  | 
 | /*! | 
 |  * Convert MMU ATTR to PAGE_{READ,WRITE,EXEC} mask. | 
 |  * See ISA, 4.6.5.10 | 
 |  */ | 
 | static unsigned mmu_attr_to_access(uint32_t attr) | 
 | { | 
 |     unsigned access = 0; | 
 |  | 
 |     if (attr < 12) { | 
 |         access |= PAGE_READ; | 
 |         if (attr & 0x1) { | 
 |             access |= PAGE_EXEC; | 
 |         } | 
 |         if (attr & 0x2) { | 
 |             access |= PAGE_WRITE; | 
 |         } | 
 |  | 
 |         switch (attr & 0xc) { | 
 |         case 0: | 
 |             access |= PAGE_CACHE_BYPASS; | 
 |             break; | 
 |  | 
 |         case 4: | 
 |             access |= PAGE_CACHE_WB; | 
 |             break; | 
 |  | 
 |         case 8: | 
 |             access |= PAGE_CACHE_WT; | 
 |             break; | 
 |         } | 
 |     } else if (attr == 13) { | 
 |         access |= PAGE_READ | PAGE_WRITE | PAGE_CACHE_ISOLATE; | 
 |     } | 
 |     return access; | 
 | } | 
 |  | 
 | /*! | 
 |  * Convert region protection ATTR to PAGE_{READ,WRITE,EXEC} mask. | 
 |  * See ISA, 4.6.3.3 | 
 |  */ | 
 | static unsigned region_attr_to_access(uint32_t attr) | 
 | { | 
 |     static const unsigned access[16] = { | 
 |          [0] = PAGE_READ | PAGE_WRITE             | PAGE_CACHE_WT, | 
 |          [1] = PAGE_READ | PAGE_WRITE | PAGE_EXEC | PAGE_CACHE_WT, | 
 |          [2] = PAGE_READ | PAGE_WRITE | PAGE_EXEC | PAGE_CACHE_BYPASS, | 
 |          [3] =                          PAGE_EXEC | PAGE_CACHE_WB, | 
 |          [4] = PAGE_READ | PAGE_WRITE | PAGE_EXEC | PAGE_CACHE_WB, | 
 |          [5] = PAGE_READ | PAGE_WRITE | PAGE_EXEC | PAGE_CACHE_WB, | 
 |         [14] = PAGE_READ | PAGE_WRITE             | PAGE_CACHE_ISOLATE, | 
 |     }; | 
 |  | 
 |     return access[attr & 0xf]; | 
 | } | 
 |  | 
 | /*! | 
 |  * Convert cacheattr to PAGE_{READ,WRITE,EXEC} mask. | 
 |  * See ISA, A.2.14 The Cache Attribute Register | 
 |  */ | 
 | static unsigned cacheattr_attr_to_access(uint32_t attr) | 
 | { | 
 |     static const unsigned access[16] = { | 
 |          [0] = PAGE_READ | PAGE_WRITE             | PAGE_CACHE_WT, | 
 |          [1] = PAGE_READ | PAGE_WRITE | PAGE_EXEC | PAGE_CACHE_WT, | 
 |          [2] = PAGE_READ | PAGE_WRITE | PAGE_EXEC | PAGE_CACHE_BYPASS, | 
 |          [3] =                          PAGE_EXEC | PAGE_CACHE_WB, | 
 |          [4] = PAGE_READ | PAGE_WRITE | PAGE_EXEC | PAGE_CACHE_WB, | 
 |         [14] = PAGE_READ | PAGE_WRITE             | PAGE_CACHE_ISOLATE, | 
 |     }; | 
 |  | 
 |     return access[attr & 0xf]; | 
 | } | 
 |  | 
 | struct attr_pattern { | 
 |     uint32_t mask; | 
 |     uint32_t value; | 
 | }; | 
 |  | 
 | static int attr_pattern_match(uint32_t attr, | 
 |                               const struct attr_pattern *pattern, | 
 |                               size_t n) | 
 | { | 
 |     size_t i; | 
 |  | 
 |     for (i = 0; i < n; ++i) { | 
 |         if ((attr & pattern[i].mask) == pattern[i].value) { | 
 |             return 1; | 
 |         } | 
 |     } | 
 |     return 0; | 
 | } | 
 |  | 
 | static unsigned mpu_attr_to_cpu_cache(uint32_t attr) | 
 | { | 
 |     static const struct attr_pattern cpu_c[] = { | 
 |         { .mask = 0x18f, .value = 0x089 }, | 
 |         { .mask = 0x188, .value = 0x080 }, | 
 |         { .mask = 0x180, .value = 0x180 }, | 
 |     }; | 
 |  | 
 |     unsigned type = 0; | 
 |  | 
 |     if (attr_pattern_match(attr, cpu_c, ARRAY_SIZE(cpu_c))) { | 
 |         type |= XTENSA_MPU_TYPE_CPU_CACHE; | 
 |         if (attr & 0x10) { | 
 |             type |= XTENSA_MPU_TYPE_CPU_C; | 
 |         } | 
 |         if (attr & 0x20) { | 
 |             type |= XTENSA_MPU_TYPE_CPU_W; | 
 |         } | 
 |         if (attr & 0x40) { | 
 |             type |= XTENSA_MPU_TYPE_CPU_R; | 
 |         } | 
 |     } | 
 |     return type; | 
 | } | 
 |  | 
 | static unsigned mpu_attr_to_type(uint32_t attr) | 
 | { | 
 |     static const struct attr_pattern device_type[] = { | 
 |         { .mask = 0x1f6, .value = 0x000 }, | 
 |         { .mask = 0x1f6, .value = 0x006 }, | 
 |     }; | 
 |     static const struct attr_pattern sys_nc_type[] = { | 
 |         { .mask = 0x1fe, .value = 0x018 }, | 
 |         { .mask = 0x1fe, .value = 0x01e }, | 
 |         { .mask = 0x18f, .value = 0x089 }, | 
 |     }; | 
 |     static const struct attr_pattern sys_c_type[] = { | 
 |         { .mask = 0x1f8, .value = 0x010 }, | 
 |         { .mask = 0x188, .value = 0x080 }, | 
 |         { .mask = 0x1f0, .value = 0x030 }, | 
 |         { .mask = 0x180, .value = 0x180 }, | 
 |     }; | 
 |     static const struct attr_pattern b[] = { | 
 |         { .mask = 0x1f7, .value = 0x001 }, | 
 |         { .mask = 0x1f7, .value = 0x007 }, | 
 |         { .mask = 0x1ff, .value = 0x019 }, | 
 |         { .mask = 0x1ff, .value = 0x01f }, | 
 |     }; | 
 |  | 
 |     unsigned type = 0; | 
 |  | 
 |     attr = (attr & XTENSA_MPU_MEM_TYPE_MASK) >> XTENSA_MPU_MEM_TYPE_SHIFT; | 
 |     if (attr_pattern_match(attr, device_type, ARRAY_SIZE(device_type))) { | 
 |         type |= XTENSA_MPU_SYSTEM_TYPE_DEVICE; | 
 |         if (attr & 0x80) { | 
 |             type |= XTENSA_MPU_TYPE_INT; | 
 |         } | 
 |     } | 
 |     if (attr_pattern_match(attr, sys_nc_type, ARRAY_SIZE(sys_nc_type))) { | 
 |         type |= XTENSA_MPU_SYSTEM_TYPE_NC; | 
 |     } | 
 |     if (attr_pattern_match(attr, sys_c_type, ARRAY_SIZE(sys_c_type))) { | 
 |         type |= XTENSA_MPU_SYSTEM_TYPE_C; | 
 |         if (attr & 0x1) { | 
 |             type |= XTENSA_MPU_TYPE_SYS_C; | 
 |         } | 
 |         if (attr & 0x2) { | 
 |             type |= XTENSA_MPU_TYPE_SYS_W; | 
 |         } | 
 |         if (attr & 0x4) { | 
 |             type |= XTENSA_MPU_TYPE_SYS_R; | 
 |         } | 
 |     } | 
 |     if (attr_pattern_match(attr, b, ARRAY_SIZE(b))) { | 
 |         type |= XTENSA_MPU_TYPE_B; | 
 |     } | 
 |     type |= mpu_attr_to_cpu_cache(attr); | 
 |  | 
 |     return type; | 
 | } | 
 |  | 
 | static unsigned mpu_attr_to_access(uint32_t attr, unsigned ring) | 
 | { | 
 |     static const unsigned access[2][16] = { | 
 |         [0] = { | 
 |              [4] = PAGE_READ, | 
 |              [5] = PAGE_READ              | PAGE_EXEC, | 
 |              [6] = PAGE_READ | PAGE_WRITE, | 
 |              [7] = PAGE_READ | PAGE_WRITE | PAGE_EXEC, | 
 |              [8] =             PAGE_WRITE, | 
 |              [9] = PAGE_READ | PAGE_WRITE, | 
 |             [10] = PAGE_READ | PAGE_WRITE, | 
 |             [11] = PAGE_READ | PAGE_WRITE | PAGE_EXEC, | 
 |             [12] = PAGE_READ, | 
 |             [13] = PAGE_READ              | PAGE_EXEC, | 
 |             [14] = PAGE_READ | PAGE_WRITE, | 
 |             [15] = PAGE_READ | PAGE_WRITE | PAGE_EXEC, | 
 |         }, | 
 |         [1] = { | 
 |              [8] =             PAGE_WRITE, | 
 |              [9] = PAGE_READ | PAGE_WRITE | PAGE_EXEC, | 
 |             [10] = PAGE_READ, | 
 |             [11] = PAGE_READ              | PAGE_EXEC, | 
 |             [12] = PAGE_READ, | 
 |             [13] = PAGE_READ              | PAGE_EXEC, | 
 |             [14] = PAGE_READ | PAGE_WRITE, | 
 |             [15] = PAGE_READ | PAGE_WRITE | PAGE_EXEC, | 
 |         }, | 
 |     }; | 
 |     unsigned rv; | 
 |     unsigned type; | 
 |  | 
 |     type = mpu_attr_to_cpu_cache(attr); | 
 |     rv = access[ring != 0][(attr & XTENSA_MPU_ACC_RIGHTS_MASK) >> | 
 |         XTENSA_MPU_ACC_RIGHTS_SHIFT]; | 
 |  | 
 |     if (type & XTENSA_MPU_TYPE_CPU_CACHE) { | 
 |         rv |= (type & XTENSA_MPU_TYPE_CPU_C) ? PAGE_CACHE_WB : PAGE_CACHE_WT; | 
 |     } else { | 
 |         rv |= PAGE_CACHE_BYPASS; | 
 |     } | 
 |     return rv; | 
 | } | 
 |  | 
 | static bool is_access_granted(unsigned access, int is_write) | 
 | { | 
 |     switch (is_write) { | 
 |     case 0: | 
 |         return access & PAGE_READ; | 
 |  | 
 |     case 1: | 
 |         return access & PAGE_WRITE; | 
 |  | 
 |     case 2: | 
 |         return access & PAGE_EXEC; | 
 |  | 
 |     default: | 
 |         return 0; | 
 |     } | 
 | } | 
 |  | 
 | static bool get_pte(CPUXtensaState *env, uint32_t vaddr, uint32_t *pte); | 
 |  | 
 | static int get_physical_addr_mmu(CPUXtensaState *env, bool update_tlb, | 
 |                                  uint32_t vaddr, int is_write, int mmu_idx, | 
 |                                  uint32_t *paddr, uint32_t *page_size, | 
 |                                  unsigned *access, bool may_lookup_pt) | 
 | { | 
 |     bool dtlb = is_write != 2; | 
 |     uint32_t wi; | 
 |     uint32_t ei; | 
 |     uint8_t ring; | 
 |     uint32_t vpn; | 
 |     uint32_t pte; | 
 |     const xtensa_tlb_entry *entry = NULL; | 
 |     xtensa_tlb_entry tmp_entry; | 
 |     int ret = xtensa_tlb_lookup(env, vaddr, dtlb, &wi, &ei, &ring); | 
 |  | 
 |     if ((ret == INST_TLB_MISS_CAUSE || ret == LOAD_STORE_TLB_MISS_CAUSE) && | 
 |         may_lookup_pt && get_pte(env, vaddr, &pte)) { | 
 |         ring = (pte >> 4) & 0x3; | 
 |         wi = 0; | 
 |         split_tlb_entry_spec_way(env, vaddr, dtlb, &vpn, wi, &ei); | 
 |  | 
 |         if (update_tlb) { | 
 |             wi = ++env->autorefill_idx & 0x3; | 
 |             xtensa_tlb_set_entry(env, dtlb, wi, ei, vpn, pte); | 
 |             env->sregs[EXCVADDR] = vaddr; | 
 |             qemu_log_mask(CPU_LOG_MMU, "%s: autorefill(%08x): %08x -> %08x\n", | 
 |                           __func__, vaddr, vpn, pte); | 
 |         } else { | 
 |             xtensa_tlb_set_entry_mmu(env, &tmp_entry, dtlb, wi, ei, vpn, pte); | 
 |             entry = &tmp_entry; | 
 |         } | 
 |         ret = 0; | 
 |     } | 
 |     if (ret != 0) { | 
 |         return ret; | 
 |     } | 
 |  | 
 |     if (entry == NULL) { | 
 |         entry = xtensa_tlb_get_entry(env, dtlb, wi, ei); | 
 |     } | 
 |  | 
 |     if (ring < mmu_idx) { | 
 |         return dtlb ? | 
 |             LOAD_STORE_PRIVILEGE_CAUSE : | 
 |             INST_FETCH_PRIVILEGE_CAUSE; | 
 |     } | 
 |  | 
 |     *access = mmu_attr_to_access(entry->attr) & | 
 |         ~(dtlb ? PAGE_EXEC : PAGE_READ | PAGE_WRITE); | 
 |     if (!is_access_granted(*access, is_write)) { | 
 |         return dtlb ? | 
 |             (is_write ? | 
 |              STORE_PROHIBITED_CAUSE : | 
 |              LOAD_PROHIBITED_CAUSE) : | 
 |             INST_FETCH_PROHIBITED_CAUSE; | 
 |     } | 
 |  | 
 |     *paddr = entry->paddr | (vaddr & ~xtensa_tlb_get_addr_mask(env, dtlb, wi)); | 
 |     *page_size = ~xtensa_tlb_get_addr_mask(env, dtlb, wi) + 1; | 
 |  | 
 |     return 0; | 
 | } | 
 |  | 
 | static bool get_pte(CPUXtensaState *env, uint32_t vaddr, uint32_t *pte) | 
 | { | 
 |     CPUState *cs = env_cpu(env); | 
 |     uint32_t paddr; | 
 |     uint32_t page_size; | 
 |     unsigned access; | 
 |     uint32_t pt_vaddr = | 
 |         (env->sregs[PTEVADDR] | (vaddr >> 10)) & 0xfffffffc; | 
 |     int ret = get_physical_addr_mmu(env, false, pt_vaddr, 0, 0, | 
 |                                     &paddr, &page_size, &access, false); | 
 |  | 
 |     if (ret == 0) { | 
 |         qemu_log_mask(CPU_LOG_MMU, | 
 |                       "%s: autorefill(%08x): PTE va = %08x, pa = %08x\n", | 
 |                       __func__, vaddr, pt_vaddr, paddr); | 
 |     } else { | 
 |         qemu_log_mask(CPU_LOG_MMU, | 
 |                       "%s: autorefill(%08x): PTE va = %08x, failed (%d)\n", | 
 |                       __func__, vaddr, pt_vaddr, ret); | 
 |     } | 
 |  | 
 |     if (ret == 0) { | 
 |         MemTxResult result; | 
 |  | 
 |         *pte = address_space_ldl(cs->as, paddr, MEMTXATTRS_UNSPECIFIED, | 
 |                                  &result); | 
 |         if (result != MEMTX_OK) { | 
 |             qemu_log_mask(CPU_LOG_MMU, | 
 |                           "%s: couldn't load PTE: transaction failed (%u)\n", | 
 |                           __func__, (unsigned)result); | 
 |             ret = 1; | 
 |         } | 
 |     } | 
 |     return ret == 0; | 
 | } | 
 |  | 
 | static int get_physical_addr_region(CPUXtensaState *env, | 
 |                                     uint32_t vaddr, int is_write, int mmu_idx, | 
 |                                     uint32_t *paddr, uint32_t *page_size, | 
 |                                     unsigned *access) | 
 | { | 
 |     bool dtlb = is_write != 2; | 
 |     uint32_t wi = 0; | 
 |     uint32_t ei = (vaddr >> 29) & 0x7; | 
 |     const xtensa_tlb_entry *entry = | 
 |         xtensa_tlb_get_entry(env, dtlb, wi, ei); | 
 |  | 
 |     *access = region_attr_to_access(entry->attr); | 
 |     if (!is_access_granted(*access, is_write)) { | 
 |         return dtlb ? | 
 |             (is_write ? | 
 |              STORE_PROHIBITED_CAUSE : | 
 |              LOAD_PROHIBITED_CAUSE) : | 
 |             INST_FETCH_PROHIBITED_CAUSE; | 
 |     } | 
 |  | 
 |     *paddr = entry->paddr | (vaddr & ~REGION_PAGE_MASK); | 
 |     *page_size = ~REGION_PAGE_MASK + 1; | 
 |  | 
 |     return 0; | 
 | } | 
 |  | 
 | static int xtensa_mpu_lookup(const xtensa_mpu_entry *entry, unsigned n, | 
 |                              uint32_t vaddr, unsigned *segment) | 
 | { | 
 |     unsigned nhits = 0; | 
 |     unsigned i; | 
 |  | 
 |     for (i = 0; i < n; ++i) { | 
 |         if (vaddr >= entry[i].vaddr && | 
 |             (i == n - 1 || vaddr < entry[i + 1].vaddr)) { | 
 |             if (nhits++) { | 
 |                 break; | 
 |             } | 
 |             *segment = i; | 
 |         } | 
 |     } | 
 |     return nhits; | 
 | } | 
 |  | 
 | void HELPER(wsr_mpuenb)(CPUXtensaState *env, uint32_t v) | 
 | { | 
 |     v &= (2u << (env->config->n_mpu_fg_segments - 1)) - 1; | 
 |  | 
 |     if (v != env->sregs[MPUENB]) { | 
 |         env->sregs[MPUENB] = v; | 
 |         tlb_flush(env_cpu(env)); | 
 |     } | 
 | } | 
 |  | 
 | void HELPER(wptlb)(CPUXtensaState *env, uint32_t p, uint32_t v) | 
 | { | 
 |     unsigned segment = p & XTENSA_MPU_SEGMENT_MASK; | 
 |  | 
 |     if (segment < env->config->n_mpu_fg_segments) { | 
 |         env->mpu_fg[segment].vaddr = v & -env->config->mpu_align; | 
 |         env->mpu_fg[segment].attr = p & XTENSA_MPU_ATTR_MASK; | 
 |         env->sregs[MPUENB] = deposit32(env->sregs[MPUENB], segment, 1, v); | 
 |         tlb_flush(env_cpu(env)); | 
 |     } | 
 | } | 
 |  | 
 | uint32_t HELPER(rptlb0)(CPUXtensaState *env, uint32_t s) | 
 | { | 
 |     unsigned segment = s & XTENSA_MPU_SEGMENT_MASK; | 
 |  | 
 |     if (segment < env->config->n_mpu_fg_segments) { | 
 |         return env->mpu_fg[segment].vaddr | | 
 |             extract32(env->sregs[MPUENB], segment, 1); | 
 |     } else { | 
 |         return 0; | 
 |     } | 
 | } | 
 |  | 
 | uint32_t HELPER(rptlb1)(CPUXtensaState *env, uint32_t s) | 
 | { | 
 |     unsigned segment = s & XTENSA_MPU_SEGMENT_MASK; | 
 |  | 
 |     if (segment < env->config->n_mpu_fg_segments) { | 
 |         return env->mpu_fg[segment].attr; | 
 |     } else { | 
 |         return 0; | 
 |     } | 
 | } | 
 |  | 
 | uint32_t HELPER(pptlb)(CPUXtensaState *env, uint32_t v) | 
 | { | 
 |     unsigned nhits; | 
 |     unsigned segment = XTENSA_MPU_PROBE_B; | 
 |     unsigned bg_segment; | 
 |  | 
 |     nhits = xtensa_mpu_lookup(env->mpu_fg, env->config->n_mpu_fg_segments, | 
 |                               v, &segment); | 
 |     if (nhits > 1) { | 
 |         HELPER(exception_cause_vaddr)(env, env->pc, | 
 |                                       LOAD_STORE_TLB_MULTI_HIT_CAUSE, v); | 
 |     } else if (nhits == 1 && (env->sregs[MPUENB] & (1u << segment))) { | 
 |         return env->mpu_fg[segment].attr | segment | XTENSA_MPU_PROBE_V; | 
 |     } else { | 
 |         xtensa_mpu_lookup(env->config->mpu_bg, | 
 |                           env->config->n_mpu_bg_segments, | 
 |                           v, &bg_segment); | 
 |         return env->config->mpu_bg[bg_segment].attr | segment; | 
 |     } | 
 | } | 
 |  | 
 | static int get_physical_addr_mpu(CPUXtensaState *env, | 
 |                                  uint32_t vaddr, int is_write, int mmu_idx, | 
 |                                  uint32_t *paddr, uint32_t *page_size, | 
 |                                  unsigned *access) | 
 | { | 
 |     unsigned nhits; | 
 |     unsigned segment; | 
 |     uint32_t attr; | 
 |  | 
 |     nhits = xtensa_mpu_lookup(env->mpu_fg, env->config->n_mpu_fg_segments, | 
 |                               vaddr, &segment); | 
 |     if (nhits > 1) { | 
 |         return is_write < 2 ? | 
 |             LOAD_STORE_TLB_MULTI_HIT_CAUSE : | 
 |             INST_TLB_MULTI_HIT_CAUSE; | 
 |     } else if (nhits == 1 && (env->sregs[MPUENB] & (1u << segment))) { | 
 |         attr = env->mpu_fg[segment].attr; | 
 |     } else { | 
 |         xtensa_mpu_lookup(env->config->mpu_bg, | 
 |                           env->config->n_mpu_bg_segments, | 
 |                           vaddr, &segment); | 
 |         attr = env->config->mpu_bg[segment].attr; | 
 |     } | 
 |  | 
 |     *access = mpu_attr_to_access(attr, mmu_idx); | 
 |     if (!is_access_granted(*access, is_write)) { | 
 |         return is_write < 2 ? | 
 |             (is_write ? | 
 |              STORE_PROHIBITED_CAUSE : | 
 |              LOAD_PROHIBITED_CAUSE) : | 
 |             INST_FETCH_PROHIBITED_CAUSE; | 
 |     } | 
 |     *paddr = vaddr; | 
 |     *page_size = env->config->mpu_align; | 
 |     return 0; | 
 | } | 
 |  | 
 | /*! | 
 |  * Convert virtual address to physical addr. | 
 |  * MMU may issue pagewalk and change xtensa autorefill TLB way entry. | 
 |  * | 
 |  * \return 0 if ok, exception cause code otherwise | 
 |  */ | 
 | int xtensa_get_physical_addr(CPUXtensaState *env, bool update_tlb, | 
 |                              uint32_t vaddr, int is_write, int mmu_idx, | 
 |                              uint32_t *paddr, uint32_t *page_size, | 
 |                              unsigned *access) | 
 | { | 
 |     if (xtensa_option_enabled(env->config, XTENSA_OPTION_MMU)) { | 
 |         return get_physical_addr_mmu(env, update_tlb, | 
 |                                      vaddr, is_write, mmu_idx, paddr, | 
 |                                      page_size, access, true); | 
 |     } else if (xtensa_option_bits_enabled(env->config, | 
 |                 XTENSA_OPTION_BIT(XTENSA_OPTION_REGION_PROTECTION) | | 
 |                 XTENSA_OPTION_BIT(XTENSA_OPTION_REGION_TRANSLATION))) { | 
 |         return get_physical_addr_region(env, vaddr, is_write, mmu_idx, | 
 |                                         paddr, page_size, access); | 
 |     } else if (xtensa_option_enabled(env->config, XTENSA_OPTION_MPU)) { | 
 |         return get_physical_addr_mpu(env, vaddr, is_write, mmu_idx, | 
 |                                      paddr, page_size, access); | 
 |     } else { | 
 |         *paddr = vaddr; | 
 |         *page_size = TARGET_PAGE_SIZE; | 
 |         *access = cacheattr_attr_to_access(env->sregs[CACHEATTR] >> | 
 |                                            ((vaddr & 0xe0000000) >> 27)); | 
 |         return 0; | 
 |     } | 
 | } | 
 |  | 
 | static void dump_tlb(CPUXtensaState *env, bool dtlb) | 
 | { | 
 |     unsigned wi, ei; | 
 |     const xtensa_tlb *conf = | 
 |         dtlb ? &env->config->dtlb : &env->config->itlb; | 
 |     unsigned (*attr_to_access)(uint32_t) = | 
 |         xtensa_option_enabled(env->config, XTENSA_OPTION_MMU) ? | 
 |         mmu_attr_to_access : region_attr_to_access; | 
 |  | 
 |     for (wi = 0; wi < conf->nways; ++wi) { | 
 |         uint32_t sz = ~xtensa_tlb_get_addr_mask(env, dtlb, wi) + 1; | 
 |         const char *sz_text; | 
 |         bool print_header = true; | 
 |  | 
 |         if (sz >= 0x100000) { | 
 |             sz /= MiB; | 
 |             sz_text = "MB"; | 
 |         } else { | 
 |             sz /= KiB; | 
 |             sz_text = "KB"; | 
 |         } | 
 |  | 
 |         for (ei = 0; ei < conf->way_size[wi]; ++ei) { | 
 |             const xtensa_tlb_entry *entry = | 
 |                 xtensa_tlb_get_entry(env, dtlb, wi, ei); | 
 |  | 
 |             if (entry->asid) { | 
 |                 static const char * const cache_text[8] = { | 
 |                     [PAGE_CACHE_BYPASS >> PAGE_CACHE_SHIFT] = "Bypass", | 
 |                     [PAGE_CACHE_WT >> PAGE_CACHE_SHIFT] = "WT", | 
 |                     [PAGE_CACHE_WB >> PAGE_CACHE_SHIFT] = "WB", | 
 |                     [PAGE_CACHE_ISOLATE >> PAGE_CACHE_SHIFT] = "Isolate", | 
 |                 }; | 
 |                 unsigned access = attr_to_access(entry->attr); | 
 |                 unsigned cache_idx = (access & PAGE_CACHE_MASK) >> | 
 |                     PAGE_CACHE_SHIFT; | 
 |  | 
 |                 if (print_header) { | 
 |                     print_header = false; | 
 |                     qemu_printf("Way %u (%d %s)\n", wi, sz, sz_text); | 
 |                     qemu_printf("\tVaddr       Paddr       ASID  Attr RWX Cache\n" | 
 |                                 "\t----------  ----------  ----  ---- --- -------\n"); | 
 |                 } | 
 |                 qemu_printf("\t0x%08x  0x%08x  0x%02x  0x%02x %c%c%c %s\n", | 
 |                             entry->vaddr, | 
 |                             entry->paddr, | 
 |                             entry->asid, | 
 |                             entry->attr, | 
 |                             (access & PAGE_READ) ? 'R' : '-', | 
 |                             (access & PAGE_WRITE) ? 'W' : '-', | 
 |                             (access & PAGE_EXEC) ? 'X' : '-', | 
 |                             cache_text[cache_idx] ? | 
 |                             cache_text[cache_idx] : "Invalid"); | 
 |             } | 
 |         } | 
 |     } | 
 | } | 
 |  | 
 | static void dump_mpu(CPUXtensaState *env, | 
 |                      const xtensa_mpu_entry *entry, unsigned n) | 
 | { | 
 |     unsigned i; | 
 |  | 
 |     qemu_printf("\t%s  Vaddr       Attr        Ring0  Ring1  System Type    CPU cache\n" | 
 |                 "\t%s  ----------  ----------  -----  -----  -------------  ---------\n", | 
 |                 env ? "En" : "  ", | 
 |                 env ? "--" : "  "); | 
 |  | 
 |     for (i = 0; i < n; ++i) { | 
 |         uint32_t attr = entry[i].attr; | 
 |         unsigned access0 = mpu_attr_to_access(attr, 0); | 
 |         unsigned access1 = mpu_attr_to_access(attr, 1); | 
 |         unsigned type = mpu_attr_to_type(attr); | 
 |         char cpu_cache = (type & XTENSA_MPU_TYPE_CPU_CACHE) ? '-' : ' '; | 
 |  | 
 |         qemu_printf("\t %c  0x%08x  0x%08x   %c%c%c    %c%c%c   ", | 
 |                     env ? | 
 |                     ((env->sregs[MPUENB] & (1u << i)) ? '+' : '-') : ' ', | 
 |                     entry[i].vaddr, attr, | 
 |                     (access0 & PAGE_READ) ? 'R' : '-', | 
 |                     (access0 & PAGE_WRITE) ? 'W' : '-', | 
 |                     (access0 & PAGE_EXEC) ? 'X' : '-', | 
 |                     (access1 & PAGE_READ) ? 'R' : '-', | 
 |                     (access1 & PAGE_WRITE) ? 'W' : '-', | 
 |                     (access1 & PAGE_EXEC) ? 'X' : '-'); | 
 |  | 
 |         switch (type & XTENSA_MPU_SYSTEM_TYPE_MASK) { | 
 |         case XTENSA_MPU_SYSTEM_TYPE_DEVICE: | 
 |             qemu_printf("Device %cB %3s\n", | 
 |                         (type & XTENSA_MPU_TYPE_B) ? ' ' : 'n', | 
 |                         (type & XTENSA_MPU_TYPE_INT) ? "int" : ""); | 
 |             break; | 
 |         case XTENSA_MPU_SYSTEM_TYPE_NC: | 
 |             qemu_printf("Sys NC %cB      %c%c%c\n", | 
 |                         (type & XTENSA_MPU_TYPE_B) ? ' ' : 'n', | 
 |                         (type & XTENSA_MPU_TYPE_CPU_R) ? 'r' : cpu_cache, | 
 |                         (type & XTENSA_MPU_TYPE_CPU_W) ? 'w' : cpu_cache, | 
 |                         (type & XTENSA_MPU_TYPE_CPU_C) ? 'c' : cpu_cache); | 
 |             break; | 
 |         case XTENSA_MPU_SYSTEM_TYPE_C: | 
 |             qemu_printf("Sys  C %c%c%c     %c%c%c\n", | 
 |                         (type & XTENSA_MPU_TYPE_SYS_R) ? 'R' : '-', | 
 |                         (type & XTENSA_MPU_TYPE_SYS_W) ? 'W' : '-', | 
 |                         (type & XTENSA_MPU_TYPE_SYS_C) ? 'C' : '-', | 
 |                         (type & XTENSA_MPU_TYPE_CPU_R) ? 'r' : cpu_cache, | 
 |                         (type & XTENSA_MPU_TYPE_CPU_W) ? 'w' : cpu_cache, | 
 |                         (type & XTENSA_MPU_TYPE_CPU_C) ? 'c' : cpu_cache); | 
 |             break; | 
 |         default: | 
 |             qemu_printf("Unknown\n"); | 
 |             break; | 
 |         } | 
 |     } | 
 | } | 
 |  | 
 | void dump_mmu(CPUXtensaState *env) | 
 | { | 
 |     if (xtensa_option_bits_enabled(env->config, | 
 |                 XTENSA_OPTION_BIT(XTENSA_OPTION_REGION_PROTECTION) | | 
 |                 XTENSA_OPTION_BIT(XTENSA_OPTION_REGION_TRANSLATION) | | 
 |                 XTENSA_OPTION_BIT(XTENSA_OPTION_MMU))) { | 
 |  | 
 |         qemu_printf("ITLB:\n"); | 
 |         dump_tlb(env, false); | 
 |         qemu_printf("\nDTLB:\n"); | 
 |         dump_tlb(env, true); | 
 |     } else if (xtensa_option_enabled(env->config, XTENSA_OPTION_MPU)) { | 
 |         qemu_printf("Foreground map:\n"); | 
 |         dump_mpu(env, env->mpu_fg, env->config->n_mpu_fg_segments); | 
 |         qemu_printf("\nBackground map:\n"); | 
 |         dump_mpu(NULL, env->config->mpu_bg, env->config->n_mpu_bg_segments); | 
 |     } else { | 
 |         qemu_printf("No TLB for this CPU core\n"); | 
 |     } | 
 | } |