| /* |
| * qemu user main |
| * |
| * Copyright (c) 2003 Fabrice Bellard |
| * Copyright (c) 2006 Pierre d'Herbemont |
| * |
| * This program is free software; you can redistribute it and/or modify |
| * it under the terms of the GNU General Public License as published by |
| * the Free Software Foundation; either version 2 of the License, or |
| * (at your option) any later version. |
| * |
| * This program is distributed in the hope that it will be useful, |
| * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| * GNU General Public License for more details. |
| * |
| * You should have received a copy of the GNU General Public License |
| * along with this program; if not, write to the Free Software |
| * Foundation, Inc., 51 Franklin Street - Fifth Floor, Boston, |
| * MA 02110-1301, USA. |
| */ |
| #include <stdlib.h> |
| #include <stdio.h> |
| #include <stdarg.h> |
| #include <string.h> |
| #include <errno.h> |
| #include <unistd.h> |
| |
| #include <sys/syscall.h> |
| #include <sys/mman.h> |
| |
| #include "qemu.h" |
| |
| #define DEBUG_LOGFILE "/tmp/qemu.log" |
| |
| #ifdef __APPLE__ |
| #include <crt_externs.h> |
| # define environ (*_NSGetEnviron()) |
| #endif |
| |
| #include <mach/mach_init.h> |
| #include <mach/vm_map.h> |
| |
| const char *interp_prefix = ""; |
| |
| asm(".zerofill __STD_PROG_ZONE, __STD_PROG_ZONE, __std_prog_zone, 0x0dfff000"); |
| |
| /* XXX: on x86 MAP_GROWSDOWN only works if ESP <= address + 32, so |
| we allocate a bigger stack. Need a better solution, for example |
| by remapping the process stack directly at the right place */ |
| unsigned long stack_size = 512 * 1024; |
| |
| void qerror(const char *fmt, ...) |
| { |
| va_list ap; |
| |
| va_start(ap, fmt); |
| vfprintf(stderr, fmt, ap); |
| va_end(ap); |
| fprintf(stderr, "\n"); |
| exit(1); |
| } |
| |
| void gemu_log(const char *fmt, ...) |
| { |
| va_list ap; |
| |
| va_start(ap, fmt); |
| vfprintf(stderr, fmt, ap); |
| va_end(ap); |
| } |
| |
| void cpu_outb(CPUState *env, int addr, int val) |
| { |
| fprintf(stderr, "outb: port=0x%04x, data=%02x\n", addr, val); |
| } |
| |
| void cpu_outw(CPUState *env, int addr, int val) |
| { |
| fprintf(stderr, "outw: port=0x%04x, data=%04x\n", addr, val); |
| } |
| |
| void cpu_outl(CPUState *env, int addr, int val) |
| { |
| fprintf(stderr, "outl: port=0x%04x, data=%08x\n", addr, val); |
| } |
| |
| int cpu_inb(CPUState *env, int addr) |
| { |
| fprintf(stderr, "inb: port=0x%04x\n", addr); |
| return 0; |
| } |
| |
| int cpu_inw(CPUState *env, int addr) |
| { |
| fprintf(stderr, "inw: port=0x%04x\n", addr); |
| return 0; |
| } |
| |
| int cpu_inl(CPUState *env, int addr) |
| { |
| fprintf(stderr, "inl: port=0x%04x\n", addr); |
| return 0; |
| } |
| |
| int cpu_get_pic_interrupt(CPUState *env) |
| { |
| return -1; |
| } |
| #ifdef TARGET_PPC |
| |
| static inline uint64_t cpu_ppc_get_tb (CPUState *env) |
| { |
| /* TO FIX */ |
| return 0; |
| } |
| |
| uint32_t cpu_ppc_load_tbl (CPUState *env) |
| { |
| return cpu_ppc_get_tb(env) & 0xFFFFFFFF; |
| } |
| |
| uint32_t cpu_ppc_load_tbu (CPUState *env) |
| { |
| return cpu_ppc_get_tb(env) >> 32; |
| } |
| |
| uint32_t cpu_ppc_load_atbl (CPUState *env) |
| { |
| return cpu_ppc_get_tb(env) & 0xFFFFFFFF; |
| } |
| |
| uint32_t cpu_ppc_load_atbu (CPUState *env) |
| { |
| return cpu_ppc_get_tb(env) >> 32; |
| } |
| |
| uint32_t cpu_ppc601_load_rtcu (CPUState *env) |
| { |
| cpu_ppc_load_tbu(env); |
| } |
| |
| uint32_t cpu_ppc601_load_rtcl (CPUState *env) |
| { |
| return cpu_ppc_load_tbl(env) & 0x3FFFFF80; |
| } |
| |
| /* XXX: to be fixed */ |
| int ppc_dcr_read (ppc_dcr_t *dcr_env, int dcrn, target_ulong *valp) |
| { |
| return -1; |
| } |
| |
| int ppc_dcr_write (ppc_dcr_t *dcr_env, int dcrn, target_ulong val) |
| { |
| return -1; |
| } |
| |
| #define EXCP_DUMP(env, fmt, args...) \ |
| do { \ |
| fprintf(stderr, fmt , ##args); \ |
| cpu_dump_state(env, stderr, fprintf, 0); \ |
| qemu_log(fmt, ##args); \ |
| log_cpu_state(env, 0); \ |
| } while (0) |
| |
| void cpu_loop(CPUPPCState *env) |
| { |
| int trapnr; |
| uint32_t ret; |
| target_siginfo_t info; |
| |
| for(;;) { |
| trapnr = cpu_ppc_exec(env); |
| switch(trapnr) { |
| case POWERPC_EXCP_NONE: |
| /* Just go on */ |
| break; |
| case POWERPC_EXCP_CRITICAL: /* Critical input */ |
| cpu_abort(env, "Critical interrupt while in user mode. " |
| "Aborting\n"); |
| break; |
| case POWERPC_EXCP_MCHECK: /* Machine check exception */ |
| cpu_abort(env, "Machine check exception while in user mode. " |
| "Aborting\n"); |
| break; |
| case POWERPC_EXCP_DSI: /* Data storage exception */ |
| #ifndef DAR |
| /* To deal with multiple qemu header version as host for the darwin-user code */ |
| # define DAR SPR_DAR |
| #endif |
| EXCP_DUMP(env, "Invalid data memory access: 0x" ADDRX "\n", |
| env->spr[SPR_DAR]); |
| /* Handle this via the gdb */ |
| gdb_handlesig (env, SIGSEGV); |
| |
| info.si_addr = (void*)env->nip; |
| queue_signal(info.si_signo, &info); |
| break; |
| case POWERPC_EXCP_ISI: /* Instruction storage exception */ |
| EXCP_DUMP(env, "Invalid instruction fetch: 0x\n" ADDRX "\n", |
| env->spr[SPR_DAR]); |
| /* Handle this via the gdb */ |
| gdb_handlesig (env, SIGSEGV); |
| |
| info.si_addr = (void*)(env->nip - 4); |
| queue_signal(info.si_signo, &info); |
| break; |
| case POWERPC_EXCP_EXTERNAL: /* External input */ |
| cpu_abort(env, "External interrupt while in user mode. " |
| "Aborting\n"); |
| break; |
| case POWERPC_EXCP_ALIGN: /* Alignment exception */ |
| EXCP_DUMP(env, "Unaligned memory access\n"); |
| info.si_errno = 0; |
| info.si_code = BUS_ADRALN; |
| info.si_addr = (void*)(env->nip - 4); |
| queue_signal(info.si_signo, &info); |
| break; |
| case POWERPC_EXCP_PROGRAM: /* Program exception */ |
| /* XXX: check this */ |
| switch (env->error_code & ~0xF) { |
| case POWERPC_EXCP_FP: |
| EXCP_DUMP(env, "Floating point program exception\n"); |
| /* Set FX */ |
| info.si_signo = SIGFPE; |
| info.si_errno = 0; |
| switch (env->error_code & 0xF) { |
| case POWERPC_EXCP_FP_OX: |
| info.si_code = FPE_FLTOVF; |
| break; |
| case POWERPC_EXCP_FP_UX: |
| info.si_code = FPE_FLTUND; |
| break; |
| case POWERPC_EXCP_FP_ZX: |
| case POWERPC_EXCP_FP_VXZDZ: |
| info.si_code = FPE_FLTDIV; |
| break; |
| case POWERPC_EXCP_FP_XX: |
| info.si_code = FPE_FLTRES; |
| break; |
| case POWERPC_EXCP_FP_VXSOFT: |
| info.si_code = FPE_FLTINV; |
| break; |
| case POWERPC_EXCP_FP_VXSNAN: |
| case POWERPC_EXCP_FP_VXISI: |
| case POWERPC_EXCP_FP_VXIDI: |
| case POWERPC_EXCP_FP_VXIMZ: |
| case POWERPC_EXCP_FP_VXVC: |
| case POWERPC_EXCP_FP_VXSQRT: |
| case POWERPC_EXCP_FP_VXCVI: |
| info.si_code = FPE_FLTSUB; |
| break; |
| default: |
| EXCP_DUMP(env, "Unknown floating point exception (%02x)\n", |
| env->error_code); |
| break; |
| } |
| break; |
| case POWERPC_EXCP_INVAL: |
| EXCP_DUMP(env, "Invalid instruction\n"); |
| info.si_signo = SIGILL; |
| info.si_errno = 0; |
| switch (env->error_code & 0xF) { |
| case POWERPC_EXCP_INVAL_INVAL: |
| info.si_code = ILL_ILLOPC; |
| break; |
| case POWERPC_EXCP_INVAL_LSWX: |
| info.si_code = ILL_ILLOPN; |
| break; |
| case POWERPC_EXCP_INVAL_SPR: |
| info.si_code = ILL_PRVREG; |
| break; |
| case POWERPC_EXCP_INVAL_FP: |
| info.si_code = ILL_COPROC; |
| break; |
| default: |
| EXCP_DUMP(env, "Unknown invalid operation (%02x)\n", |
| env->error_code & 0xF); |
| info.si_code = ILL_ILLADR; |
| break; |
| } |
| /* Handle this via the gdb */ |
| gdb_handlesig (env, SIGSEGV); |
| break; |
| case POWERPC_EXCP_PRIV: |
| EXCP_DUMP(env, "Privilege violation\n"); |
| info.si_signo = SIGILL; |
| info.si_errno = 0; |
| switch (env->error_code & 0xF) { |
| case POWERPC_EXCP_PRIV_OPC: |
| info.si_code = ILL_PRVOPC; |
| break; |
| case POWERPC_EXCP_PRIV_REG: |
| info.si_code = ILL_PRVREG; |
| break; |
| default: |
| EXCP_DUMP(env, "Unknown privilege violation (%02x)\n", |
| env->error_code & 0xF); |
| info.si_code = ILL_PRVOPC; |
| break; |
| } |
| break; |
| case POWERPC_EXCP_TRAP: |
| cpu_abort(env, "Tried to call a TRAP\n"); |
| break; |
| default: |
| /* Should not happen ! */ |
| cpu_abort(env, "Unknown program exception (%02x)\n", |
| env->error_code); |
| break; |
| } |
| info.si_addr = (void*)(env->nip - 4); |
| queue_signal(info.si_signo, &info); |
| break; |
| case POWERPC_EXCP_FPU: /* Floating-point unavailable exception */ |
| EXCP_DUMP(env, "No floating point allowed\n"); |
| info.si_signo = SIGILL; |
| info.si_errno = 0; |
| info.si_code = ILL_COPROC; |
| info.si_addr = (void*)(env->nip - 4); |
| queue_signal(info.si_signo, &info); |
| break; |
| case POWERPC_EXCP_SYSCALL: /* System call exception */ |
| cpu_abort(env, "Syscall exception while in user mode. " |
| "Aborting\n"); |
| break; |
| case POWERPC_EXCP_APU: /* Auxiliary processor unavailable */ |
| EXCP_DUMP(env, "No APU instruction allowed\n"); |
| info.si_signo = SIGILL; |
| info.si_errno = 0; |
| info.si_code = ILL_COPROC; |
| info.si_addr = (void*)(env->nip - 4); |
| queue_signal(info.si_signo, &info); |
| break; |
| case POWERPC_EXCP_DECR: /* Decrementer exception */ |
| cpu_abort(env, "Decrementer interrupt while in user mode. " |
| "Aborting\n"); |
| break; |
| case POWERPC_EXCP_FIT: /* Fixed-interval timer interrupt */ |
| cpu_abort(env, "Fix interval timer interrupt while in user mode. " |
| "Aborting\n"); |
| break; |
| case POWERPC_EXCP_WDT: /* Watchdog timer interrupt */ |
| cpu_abort(env, "Watchdog timer interrupt while in user mode. " |
| "Aborting\n"); |
| break; |
| case POWERPC_EXCP_DTLB: /* Data TLB error */ |
| cpu_abort(env, "Data TLB exception while in user mode. " |
| "Aborting\n"); |
| break; |
| case POWERPC_EXCP_ITLB: /* Instruction TLB error */ |
| cpu_abort(env, "Instruction TLB exception while in user mode. " |
| "Aborting\n"); |
| break; |
| case POWERPC_EXCP_DEBUG: /* Debug interrupt */ |
| gdb_handlesig (env, SIGTRAP); |
| break; |
| case POWERPC_EXCP_SPEU: /* SPE/embedded floating-point unavail. */ |
| EXCP_DUMP(env, "No SPE/floating-point instruction allowed\n"); |
| info.si_signo = SIGILL; |
| info.si_errno = 0; |
| info.si_code = ILL_COPROC; |
| info.si_addr = (void*)(env->nip - 4); |
| queue_signal(info.si_signo, &info); |
| break; |
| case POWERPC_EXCP_EFPDI: /* Embedded floating-point data IRQ */ |
| cpu_abort(env, "Embedded floating-point data IRQ not handled\n"); |
| break; |
| case POWERPC_EXCP_EFPRI: /* Embedded floating-point round IRQ */ |
| cpu_abort(env, "Embedded floating-point round IRQ not handled\n"); |
| break; |
| case POWERPC_EXCP_EPERFM: /* Embedded performance monitor IRQ */ |
| cpu_abort(env, "Performance monitor exception not handled\n"); |
| break; |
| case POWERPC_EXCP_DOORI: /* Embedded doorbell interrupt */ |
| cpu_abort(env, "Doorbell interrupt while in user mode. " |
| "Aborting\n"); |
| break; |
| case POWERPC_EXCP_DOORCI: /* Embedded doorbell critical interrupt */ |
| cpu_abort(env, "Doorbell critical interrupt while in user mode. " |
| "Aborting\n"); |
| break; |
| case POWERPC_EXCP_RESET: /* System reset exception */ |
| cpu_abort(env, "Reset interrupt while in user mode. " |
| "Aborting\n"); |
| break; |
| case POWERPC_EXCP_DSEG: /* Data segment exception */ |
| cpu_abort(env, "Data segment exception while in user mode. " |
| "Aborting\n"); |
| break; |
| case POWERPC_EXCP_ISEG: /* Instruction segment exception */ |
| cpu_abort(env, "Instruction segment exception " |
| "while in user mode. Aborting\n"); |
| break; |
| case POWERPC_EXCP_HDECR: /* Hypervisor decrementer exception */ |
| cpu_abort(env, "Hypervisor decrementer interrupt " |
| "while in user mode. Aborting\n"); |
| break; |
| case POWERPC_EXCP_TRACE: /* Trace exception */ |
| /* Nothing to do: |
| * we use this exception to emulate step-by-step execution mode. |
| */ |
| break; |
| case POWERPC_EXCP_HDSI: /* Hypervisor data storage exception */ |
| cpu_abort(env, "Hypervisor data storage exception " |
| "while in user mode. Aborting\n"); |
| break; |
| case POWERPC_EXCP_HISI: /* Hypervisor instruction storage excp */ |
| cpu_abort(env, "Hypervisor instruction storage exception " |
| "while in user mode. Aborting\n"); |
| break; |
| case POWERPC_EXCP_HDSEG: /* Hypervisor data segment exception */ |
| cpu_abort(env, "Hypervisor data segment exception " |
| "while in user mode. Aborting\n"); |
| break; |
| case POWERPC_EXCP_HISEG: /* Hypervisor instruction segment excp */ |
| cpu_abort(env, "Hypervisor instruction segment exception " |
| "while in user mode. Aborting\n"); |
| break; |
| case POWERPC_EXCP_VPU: /* Vector unavailable exception */ |
| EXCP_DUMP(env, "No Altivec instructions allowed\n"); |
| info.si_signo = SIGILL; |
| info.si_errno = 0; |
| info.si_code = ILL_COPROC; |
| info.si_addr = (void*)(env->nip - 4); |
| queue_signal(info.si_signo, &info); |
| break; |
| case POWERPC_EXCP_PIT: /* Programmable interval timer IRQ */ |
| cpu_abort(env, "Programable interval timer interrupt " |
| "while in user mode. Aborting\n"); |
| break; |
| case POWERPC_EXCP_IO: /* IO error exception */ |
| cpu_abort(env, "IO error exception while in user mode. " |
| "Aborting\n"); |
| break; |
| case POWERPC_EXCP_RUNM: /* Run mode exception */ |
| cpu_abort(env, "Run mode exception while in user mode. " |
| "Aborting\n"); |
| break; |
| case POWERPC_EXCP_EMUL: /* Emulation trap exception */ |
| cpu_abort(env, "Emulation trap exception not handled\n"); |
| break; |
| case POWERPC_EXCP_IFTLB: /* Instruction fetch TLB error */ |
| cpu_abort(env, "Instruction fetch TLB exception " |
| "while in user-mode. Aborting"); |
| break; |
| case POWERPC_EXCP_DLTLB: /* Data load TLB miss */ |
| cpu_abort(env, "Data load TLB exception while in user-mode. " |
| "Aborting"); |
| break; |
| case POWERPC_EXCP_DSTLB: /* Data store TLB miss */ |
| cpu_abort(env, "Data store TLB exception while in user-mode. " |
| "Aborting"); |
| break; |
| case POWERPC_EXCP_FPA: /* Floating-point assist exception */ |
| cpu_abort(env, "Floating-point assist exception not handled\n"); |
| break; |
| case POWERPC_EXCP_IABR: /* Instruction address breakpoint */ |
| cpu_abort(env, "Instruction address breakpoint exception " |
| "not handled\n"); |
| break; |
| case POWERPC_EXCP_SMI: /* System management interrupt */ |
| cpu_abort(env, "System management interrupt while in user mode. " |
| "Aborting\n"); |
| break; |
| case POWERPC_EXCP_THERM: /* Thermal interrupt */ |
| cpu_abort(env, "Thermal interrupt interrupt while in user mode. " |
| "Aborting\n"); |
| break; |
| case POWERPC_EXCP_PERFM: /* Embedded performance monitor IRQ */ |
| cpu_abort(env, "Performance monitor exception not handled\n"); |
| break; |
| case POWERPC_EXCP_VPUA: /* Vector assist exception */ |
| cpu_abort(env, "Vector assist exception not handled\n"); |
| break; |
| case POWERPC_EXCP_SOFTP: /* Soft patch exception */ |
| cpu_abort(env, "Soft patch exception not handled\n"); |
| break; |
| case POWERPC_EXCP_MAINT: /* Maintenance exception */ |
| cpu_abort(env, "Maintenance exception while in user mode. " |
| "Aborting\n"); |
| break; |
| case POWERPC_EXCP_STOP: /* stop translation */ |
| /* We did invalidate the instruction cache. Go on */ |
| break; |
| case POWERPC_EXCP_BRANCH: /* branch instruction: */ |
| /* We just stopped because of a branch. Go on */ |
| break; |
| case POWERPC_EXCP_SYSCALL_USER: |
| /* system call in user-mode emulation */ |
| /* system call */ |
| if(((int)env->gpr[0]) <= SYS_MAXSYSCALL && ((int)env->gpr[0])>0) |
| ret = do_unix_syscall(env, env->gpr[0]/*, env->gpr[3], env->gpr[4], |
| env->gpr[5], env->gpr[6], env->gpr[7], |
| env->gpr[8], env->gpr[9], env->gpr[10]*/); |
| else if(((int)env->gpr[0])<0) |
| ret = do_mach_syscall(env, env->gpr[0], env->gpr[3], env->gpr[4], |
| env->gpr[5], env->gpr[6], env->gpr[7], |
| env->gpr[8], env->gpr[9], env->gpr[10]); |
| else |
| ret = do_thread_syscall(env, env->gpr[0], env->gpr[3], env->gpr[4], |
| env->gpr[5], env->gpr[6], env->gpr[7], |
| env->gpr[8], env->gpr[9], env->gpr[10]); |
| |
| /* Unix syscall error signaling */ |
| if(((int)env->gpr[0]) <= SYS_MAXSYSCALL && ((int)env->gpr[0])>0) |
| { |
| if( (int)ret < 0 ) |
| env->nip += 0; |
| else |
| env->nip += 4; |
| } |
| |
| /* Return value */ |
| env->gpr[3] = ret; |
| break; |
| case EXCP_INTERRUPT: |
| /* just indicate that signals should be handled asap */ |
| break; |
| default: |
| cpu_abort(env, "Unknown exception 0x%d. Aborting\n", trapnr); |
| break; |
| } |
| process_pending_signals(env); |
| } |
| } |
| #endif |
| |
| |
| #ifdef TARGET_I386 |
| |
| /***********************************************************/ |
| /* CPUX86 core interface */ |
| |
| uint64_t cpu_get_tsc(CPUX86State *env) |
| { |
| return cpu_get_real_ticks(); |
| } |
| |
| void |
| write_dt(void *ptr, unsigned long addr, unsigned long limit, |
| int flags) |
| { |
| unsigned int e1, e2; |
| e1 = (addr << 16) | (limit & 0xffff); |
| e2 = ((addr >> 16) & 0xff) | (addr & 0xff000000) | (limit & 0x000f0000); |
| e2 |= flags; |
| stl((uint8_t *)ptr, e1); |
| stl((uint8_t *)ptr + 4, e2); |
| } |
| |
| static void set_gate(void *ptr, unsigned int type, unsigned int dpl, |
| unsigned long addr, unsigned int sel) |
| { |
| unsigned int e1, e2; |
| e1 = (addr & 0xffff) | (sel << 16); |
| e2 = (addr & 0xffff0000) | 0x8000 | (dpl << 13) | (type << 8); |
| stl((uint8_t *)ptr, e1); |
| stl((uint8_t *)ptr + 4, e2); |
| } |
| |
| #define GDT_TABLE_SIZE 14 |
| #define LDT_TABLE_SIZE 15 |
| #define IDT_TABLE_SIZE 256 |
| #define TSS_SIZE 104 |
| uint64_t gdt_table[GDT_TABLE_SIZE]; |
| uint64_t ldt_table[LDT_TABLE_SIZE]; |
| uint64_t idt_table[IDT_TABLE_SIZE]; |
| uint32_t tss[TSS_SIZE]; |
| |
| /* only dpl matters as we do only user space emulation */ |
| static void set_idt(int n, unsigned int dpl) |
| { |
| set_gate(idt_table + n, 0, dpl, 0, 0); |
| } |
| |
| /* ABI convention: after a syscall if there was an error the CF flag is set */ |
| static inline void set_error(CPUX86State *env, int ret) |
| { |
| if(ret<0) |
| env->eflags = env->eflags | 0x1; |
| else |
| env->eflags &= ~0x1; |
| env->regs[R_EAX] = ret; |
| } |
| |
| void cpu_loop(CPUX86State *env) |
| { |
| int trapnr; |
| int ret; |
| uint8_t *pc; |
| target_siginfo_t info; |
| |
| for(;;) { |
| trapnr = cpu_x86_exec(env); |
| uint32_t *params = (uint32_t *)env->regs[R_ESP]; |
| switch(trapnr) { |
| case 0x79: /* Our commpage hack back door exit is here */ |
| do_commpage(env, env->eip, *(params + 1), *(params + 2), |
| *(params + 3), *(params + 4), |
| *(params + 5), *(params + 6), |
| *(params + 7), *(params + 8)); |
| break; |
| case 0x81: /* mach syscall */ |
| { |
| ret = do_mach_syscall(env, env->regs[R_EAX], |
| *(params + 1), *(params + 2), |
| *(params + 3), *(params + 4), |
| *(params + 5), *(params + 6), |
| *(params + 7), *(params + 8)); |
| set_error(env, ret); |
| break; |
| } |
| case 0x90: /* unix backdoor */ |
| { |
| /* after sysenter, stack is in R_ECX, new eip in R_EDX (sysexit will flip them back)*/ |
| int saved_stack = env->regs[R_ESP]; |
| env->regs[R_ESP] = env->regs[R_ECX]; |
| |
| ret = do_unix_syscall(env, env->regs[R_EAX]); |
| |
| env->regs[R_ECX] = env->regs[R_ESP]; |
| env->regs[R_ESP] = saved_stack; |
| |
| set_error(env, ret); |
| break; |
| } |
| case 0x80: /* unix syscall */ |
| { |
| ret = do_unix_syscall(env, env->regs[R_EAX]/*, |
| *(params + 1), *(params + 2), |
| *(params + 3), *(params + 4), |
| *(params + 5), *(params + 6), |
| *(params + 7), *(params + 8)*/); |
| set_error(env, ret); |
| break; |
| } |
| case 0x82: /* thread syscall */ |
| { |
| ret = do_thread_syscall(env, env->regs[R_EAX], |
| *(params + 1), *(params + 2), |
| *(params + 3), *(params + 4), |
| *(params + 5), *(params + 6), |
| *(params + 7), *(params + 8)); |
| set_error(env, ret); |
| break; |
| } |
| case EXCP0B_NOSEG: |
| case EXCP0C_STACK: |
| info.si_signo = SIGBUS; |
| info.si_errno = 0; |
| info.si_code = BUS_NOOP; |
| info.si_addr = 0; |
| gdb_handlesig (env, SIGBUS); |
| queue_signal(info.si_signo, &info); |
| break; |
| case EXCP0D_GPF: |
| info.si_signo = SIGSEGV; |
| info.si_errno = 0; |
| info.si_code = SEGV_NOOP; |
| info.si_addr = 0; |
| gdb_handlesig (env, SIGSEGV); |
| queue_signal(info.si_signo, &info); |
| break; |
| case EXCP0E_PAGE: |
| info.si_signo = SIGSEGV; |
| info.si_errno = 0; |
| if (!(env->error_code & 1)) |
| info.si_code = SEGV_MAPERR; |
| else |
| info.si_code = SEGV_ACCERR; |
| info.si_addr = (void*)env->cr[2]; |
| gdb_handlesig (env, SIGSEGV); |
| queue_signal(info.si_signo, &info); |
| break; |
| case EXCP00_DIVZ: |
| /* division by zero */ |
| info.si_signo = SIGFPE; |
| info.si_errno = 0; |
| info.si_code = FPE_INTDIV; |
| info.si_addr = (void*)env->eip; |
| gdb_handlesig (env, SIGFPE); |
| queue_signal(info.si_signo, &info); |
| break; |
| case EXCP01_SSTP: |
| case EXCP03_INT3: |
| info.si_signo = SIGTRAP; |
| info.si_errno = 0; |
| info.si_code = TRAP_BRKPT; |
| info.si_addr = (void*)env->eip; |
| gdb_handlesig (env, SIGTRAP); |
| queue_signal(info.si_signo, &info); |
| break; |
| case EXCP04_INTO: |
| case EXCP05_BOUND: |
| info.si_signo = SIGSEGV; |
| info.si_errno = 0; |
| info.si_code = SEGV_NOOP; |
| info.si_addr = 0; |
| gdb_handlesig (env, SIGSEGV); |
| queue_signal(info.si_signo, &info); |
| break; |
| case EXCP06_ILLOP: |
| info.si_signo = SIGILL; |
| info.si_errno = 0; |
| info.si_code = ILL_ILLOPN; |
| info.si_addr = (void*)env->eip; |
| gdb_handlesig (env, SIGILL); |
| queue_signal(info.si_signo, &info); |
| break; |
| case EXCP_INTERRUPT: |
| /* just indicate that signals should be handled asap */ |
| break; |
| case EXCP_DEBUG: |
| { |
| int sig; |
| |
| sig = gdb_handlesig (env, SIGTRAP); |
| if (sig) |
| { |
| info.si_signo = sig; |
| info.si_errno = 0; |
| info.si_code = TRAP_BRKPT; |
| queue_signal(info.si_signo, &info); |
| } |
| } |
| break; |
| default: |
| pc = (void*)(env->segs[R_CS].base + env->eip); |
| fprintf(stderr, "qemu: 0x%08lx: unhandled CPU exception 0x%x - aborting\n", |
| (long)pc, trapnr); |
| abort(); |
| } |
| process_pending_signals(env); |
| } |
| } |
| #endif |
| |
| void usage(void) |
| { |
| printf("qemu-" TARGET_ARCH " version " QEMU_VERSION ", Copyright (c) 2003-2004 Fabrice Bellard\n" |
| "usage: qemu-" TARGET_ARCH " [-h] [-d opts] [-L path] [-s size] program [arguments...]\n" |
| "Darwin CPU emulator (compiled for %s emulation)\n" |
| "\n" |
| "-h print this help\n" |
| "-L path set the %s library path (default='%s')\n" |
| "-s size set the stack size in bytes (default=%ld)\n" |
| "\n" |
| "debug options:\n" |
| "-d options activate log (logfile='%s')\n" |
| "-g wait for gdb on port 1234\n" |
| "-p pagesize set the host page size to 'pagesize'\n", |
| TARGET_ARCH, |
| TARGET_ARCH, |
| interp_prefix, |
| stack_size, |
| DEBUG_LOGFILE); |
| exit(1); |
| } |
| |
| /* XXX: currently only used for async signals (see signal.c) */ |
| CPUState *global_env; |
| /* used only if single thread */ |
| CPUState *cpu_single_env = NULL; |
| |
| /* used to free thread contexts */ |
| TaskState *first_task_state; |
| |
| int main(int argc, char **argv) |
| { |
| const char *filename; |
| struct target_pt_regs regs1, *regs = ®s1; |
| TaskState ts1, *ts = &ts1; |
| CPUState *env; |
| int optind; |
| short use_gdbstub = 0; |
| const char *r; |
| const char *cpu_model; |
| |
| if (argc <= 1) |
| usage(); |
| |
| /* init debug */ |
| cpu_set_log_filename(DEBUG_LOGFILE); |
| |
| optind = 1; |
| for(;;) { |
| if (optind >= argc) |
| break; |
| r = argv[optind]; |
| if (r[0] != '-') |
| break; |
| optind++; |
| r++; |
| if (!strcmp(r, "-")) { |
| break; |
| } else if (!strcmp(r, "d")) { |
| int mask; |
| CPULogItem *item; |
| |
| if (optind >= argc) |
| break; |
| |
| r = argv[optind++]; |
| mask = cpu_str_to_log_mask(r); |
| if (!mask) { |
| printf("Log items (comma separated):\n"); |
| for(item = cpu_log_items; item->mask != 0; item++) { |
| printf("%-10s %s\n", item->name, item->help); |
| } |
| exit(1); |
| } |
| cpu_set_log(mask); |
| } else if (!strcmp(r, "s")) { |
| r = argv[optind++]; |
| stack_size = strtol(r, (char **)&r, 0); |
| if (stack_size <= 0) |
| usage(); |
| if (*r == 'M') |
| stack_size *= 1024 * 1024; |
| else if (*r == 'k' || *r == 'K') |
| stack_size *= 1024; |
| } else if (!strcmp(r, "L")) { |
| interp_prefix = argv[optind++]; |
| } else if (!strcmp(r, "p")) { |
| qemu_host_page_size = atoi(argv[optind++]); |
| if (qemu_host_page_size == 0 || |
| (qemu_host_page_size & (qemu_host_page_size - 1)) != 0) { |
| fprintf(stderr, "page size must be a power of two\n"); |
| exit(1); |
| } |
| } else |
| if (!strcmp(r, "g")) { |
| use_gdbstub = 1; |
| } else if (!strcmp(r, "cpu")) { |
| cpu_model = argv[optind++]; |
| if (strcmp(cpu_model, "?") == 0) { |
| /* XXX: implement xxx_cpu_list for targets that still miss it */ |
| #if defined(cpu_list) |
| cpu_list(stdout, &fprintf); |
| #endif |
| exit(1); |
| } |
| } else |
| { |
| usage(); |
| } |
| } |
| if (optind >= argc) |
| usage(); |
| filename = argv[optind]; |
| |
| /* Zero out regs */ |
| memset(regs, 0, sizeof(struct target_pt_regs)); |
| |
| if (cpu_model == NULL) { |
| #if defined(TARGET_I386) |
| #ifdef TARGET_X86_64 |
| cpu_model = "qemu64"; |
| #else |
| cpu_model = "qemu32"; |
| #endif |
| #elif defined(TARGET_PPC) |
| #ifdef TARGET_PPC64 |
| cpu_model = "970"; |
| #else |
| cpu_model = "750"; |
| #endif |
| #else |
| #error unsupported CPU |
| #endif |
| } |
| |
| cpu_exec_init_all(0); |
| /* NOTE: we need to init the CPU at this stage to get |
| qemu_host_page_size */ |
| env = cpu_init(cpu_model); |
| |
| printf("Starting %s with qemu\n----------------\n", filename); |
| |
| commpage_init(); |
| |
| if (mach_exec(filename, argv+optind, environ, regs) != 0) { |
| printf("Error loading %s\n", filename); |
| _exit(1); |
| } |
| |
| syscall_init(); |
| signal_init(); |
| global_env = env; |
| |
| /* build Task State */ |
| memset(ts, 0, sizeof(TaskState)); |
| env->opaque = ts; |
| ts->used = 1; |
| |
| #if defined(TARGET_I386) |
| cpu_x86_set_cpl(env, 3); |
| |
| env->cr[0] = CR0_PG_MASK | CR0_WP_MASK | CR0_PE_MASK; |
| env->hflags |= HF_PE_MASK; |
| |
| if (env->cpuid_features & CPUID_SSE) { |
| env->cr[4] |= CR4_OSFXSR_MASK; |
| env->hflags |= HF_OSFXSR_MASK; |
| } |
| |
| /* flags setup : we activate the IRQs by default as in user mode */ |
| env->eflags |= IF_MASK; |
| |
| /* darwin register setup */ |
| env->regs[R_EAX] = regs->eax; |
| env->regs[R_EBX] = regs->ebx; |
| env->regs[R_ECX] = regs->ecx; |
| env->regs[R_EDX] = regs->edx; |
| env->regs[R_ESI] = regs->esi; |
| env->regs[R_EDI] = regs->edi; |
| env->regs[R_EBP] = regs->ebp; |
| env->regs[R_ESP] = regs->esp; |
| env->eip = regs->eip; |
| |
| /* Darwin LDT setup */ |
| /* 2 - User code segment |
| 3 - User data segment |
| 4 - User cthread */ |
| bzero(ldt_table, LDT_TABLE_SIZE * sizeof(ldt_table[0])); |
| env->ldt.base = (uint32_t) ldt_table; |
| env->ldt.limit = sizeof(ldt_table) - 1; |
| |
| write_dt(ldt_table + 2, 0, 0xfffff, |
| DESC_G_MASK | DESC_B_MASK | DESC_P_MASK | DESC_S_MASK | |
| (3 << DESC_DPL_SHIFT) | (0xa << DESC_TYPE_SHIFT)); |
| write_dt(ldt_table + 3, 0, 0xfffff, |
| DESC_G_MASK | DESC_B_MASK | DESC_P_MASK | DESC_S_MASK | |
| (3 << DESC_DPL_SHIFT) | (0x2 << DESC_TYPE_SHIFT)); |
| write_dt(ldt_table + 4, 0, 0xfffff, |
| DESC_G_MASK | DESC_B_MASK | DESC_P_MASK | DESC_S_MASK | |
| (3 << DESC_DPL_SHIFT) | (0x2 << DESC_TYPE_SHIFT)); |
| |
| /* Darwin GDT setup. |
| * has changed a lot between old Darwin/x86 (pre-Mac Intel) and Mac OS X/x86, |
| now everything is done via int 0x81(mach) int 0x82 (thread) and sysenter/sysexit(unix) */ |
| bzero(gdt_table, sizeof(gdt_table)); |
| env->gdt.base = (uint32_t)gdt_table; |
| env->gdt.limit = sizeof(gdt_table) - 1; |
| |
| /* Set up a back door to handle sysenter syscalls (unix) */ |
| char * syscallbackdoor = malloc(64); |
| page_set_flags((int)syscallbackdoor, (int)syscallbackdoor + 64, PROT_EXEC | PROT_READ | PAGE_VALID); |
| |
| int i = 0; |
| syscallbackdoor[i++] = 0xcd; |
| syscallbackdoor[i++] = 0x90; /* int 0x90 */ |
| syscallbackdoor[i++] = 0x0F; |
| syscallbackdoor[i++] = 0x35; /* sysexit */ |
| |
| /* Darwin sysenter/sysexit setup */ |
| env->sysenter_cs = 0x1; //XXX |
| env->sysenter_eip = (int)syscallbackdoor; |
| env->sysenter_esp = (int)malloc(64); |
| |
| /* Darwin TSS setup |
| This must match up with GDT[4] */ |
| env->tr.base = (uint32_t) tss; |
| env->tr.limit = sizeof(tss) - 1; |
| env->tr.flags = DESC_P_MASK | (0x9 << DESC_TYPE_SHIFT); |
| stw(tss + 2, 0x10); // ss0 = 0x10 = GDT[2] = Kernel Data Segment |
| |
| /* Darwin interrupt setup */ |
| bzero(idt_table, sizeof(idt_table)); |
| env->idt.base = (uint32_t) idt_table; |
| env->idt.limit = sizeof(idt_table) - 1; |
| set_idt(0, 0); |
| set_idt(1, 0); |
| set_idt(2, 0); |
| set_idt(3, 3); |
| set_idt(4, 3); |
| set_idt(5, 3); |
| set_idt(6, 0); |
| set_idt(7, 0); |
| set_idt(8, 0); |
| set_idt(9, 0); |
| set_idt(10, 0); |
| set_idt(11, 0); |
| set_idt(12, 0); |
| set_idt(13, 0); |
| set_idt(14, 0); |
| set_idt(15, 0); |
| set_idt(16, 0); |
| set_idt(17, 0); |
| set_idt(18, 0); |
| set_idt(19, 0); |
| /* Syscalls are done via |
| int 0x80 (unix) (rarely used) |
| int 0x81 (mach) |
| int 0x82 (thread) |
| int 0x83 (diag) (not handled here) |
| sysenter/sysexit (unix) -> we redirect that to int 0x90 */ |
| set_idt(0x79, 3); /* Commpage hack, here is our backdoor interrupt */ |
| set_idt(0x80, 3); /* Unix Syscall */ |
| set_idt(0x81, 3); /* Mach Syscalls */ |
| set_idt(0x82, 3); /* thread Syscalls */ |
| |
| set_idt(0x90, 3); /* qemu-darwin-user's Unix syscalls backdoor */ |
| |
| |
| cpu_x86_load_seg(env, R_CS, __USER_CS); |
| cpu_x86_load_seg(env, R_DS, __USER_DS); |
| cpu_x86_load_seg(env, R_ES, __USER_DS); |
| cpu_x86_load_seg(env, R_SS, __USER_DS); |
| cpu_x86_load_seg(env, R_FS, __USER_DS); |
| cpu_x86_load_seg(env, R_GS, __USER_DS); |
| |
| #elif defined(TARGET_PPC) |
| { |
| int i; |
| |
| #if defined(TARGET_PPC64) |
| #if defined(TARGET_ABI32) |
| env->msr &= ~((target_ulong)1 << MSR_SF); |
| #else |
| env->msr |= (target_ulong)1 << MSR_SF; |
| #endif |
| #endif |
| env->nip = regs->nip; |
| for(i = 0; i < 32; i++) { |
| env->gpr[i] = regs->gpr[i]; |
| } |
| } |
| #else |
| #error unsupported target CPU |
| #endif |
| |
| if (use_gdbstub) { |
| printf("Waiting for gdb Connection on port 1234...\n"); |
| gdbserver_start (1234); |
| gdb_handlesig(env, 0); |
| } |
| |
| cpu_loop(env); |
| /* never exits */ |
| return 0; |
| } |
