4 * Copyright (c) 2003 Fabrice Bellard
5 * Copyright (c) 2006 Pierre d'Herbemont
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License as published by
9 * the Free Software Foundation; either version 2 of the License, or
10 * (at your option) any later version.
12 * This program is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 * GNU General Public License for more details.
17 * You should have received a copy of the GNU General Public License
18 * along with this program; if not, write to the Free Software
19 * Foundation, Inc., 51 Franklin Street - Fifth Floor, Boston,
29 #include <sys/syscall.h>
34 #define DEBUG_LOGFILE "/tmp/qemu.log"
37 #include <crt_externs.h>
38 # define environ (*_NSGetEnviron())
41 #include <mach/mach_init.h>
42 #include <mach/vm_map.h>
44 const char *interp_prefix = "";
46 asm(".zerofill __STD_PROG_ZONE, __STD_PROG_ZONE, __std_prog_zone, 0x0dfff000");
48 /* XXX: on x86 MAP_GROWSDOWN only works if ESP <= address + 32, so
49 we allocate a bigger stack. Need a better solution, for example
50 by remapping the process stack directly at the right place */
51 unsigned long stack_size = 512 * 1024;
53 void qerror(const char *fmt, ...)
58 vfprintf(stderr, fmt, ap);
60 fprintf(stderr, "\n");
64 void gemu_log(const char *fmt, ...)
69 vfprintf(stderr, fmt, ap);
73 void cpu_outb(CPUState *env, int addr, int val)
75 fprintf(stderr, "outb: port=0x%04x, data=%02x\n", addr, val);
78 void cpu_outw(CPUState *env, int addr, int val)
80 fprintf(stderr, "outw: port=0x%04x, data=%04x\n", addr, val);
83 void cpu_outl(CPUState *env, int addr, int val)
85 fprintf(stderr, "outl: port=0x%04x, data=%08x\n", addr, val);
88 int cpu_inb(CPUState *env, int addr)
90 fprintf(stderr, "inb: port=0x%04x\n", addr);
94 int cpu_inw(CPUState *env, int addr)
96 fprintf(stderr, "inw: port=0x%04x\n", addr);
100 int cpu_inl(CPUState *env, int addr)
102 fprintf(stderr, "inl: port=0x%04x\n", addr);
106 int cpu_get_pic_interrupt(CPUState *env)
112 static inline uint64_t cpu_ppc_get_tb (CPUState *env)
118 uint32_t cpu_ppc_load_tbl (CPUState *env)
120 return cpu_ppc_get_tb(env) & 0xFFFFFFFF;
123 uint32_t cpu_ppc_load_tbu (CPUState *env)
125 return cpu_ppc_get_tb(env) >> 32;
128 uint32_t cpu_ppc_load_atbl (CPUState *env)
130 return cpu_ppc_get_tb(env) & 0xFFFFFFFF;
133 uint32_t cpu_ppc_load_atbu (CPUState *env)
135 return cpu_ppc_get_tb(env) >> 32;
138 uint32_t cpu_ppc601_load_rtcu (CPUState *env)
140 cpu_ppc_load_tbu(env);
143 uint32_t cpu_ppc601_load_rtcl (CPUState *env)
145 return cpu_ppc_load_tbl(env) & 0x3FFFFF80;
148 /* XXX: to be fixed */
149 int ppc_dcr_read (ppc_dcr_t *dcr_env, int dcrn, target_ulong *valp)
154 int ppc_dcr_write (ppc_dcr_t *dcr_env, int dcrn, target_ulong val)
159 #define EXCP_DUMP(env, fmt, args...) \
161 fprintf(stderr, fmt , ##args); \
162 cpu_dump_state(env, stderr, fprintf, 0); \
163 qemu_log(fmt, ##args); \
164 log_cpu_state(env, 0); \
167 void cpu_loop(CPUPPCState *env)
171 target_siginfo_t info;
174 trapnr = cpu_ppc_exec(env);
176 case POWERPC_EXCP_NONE:
179 case POWERPC_EXCP_CRITICAL: /* Critical input */
180 cpu_abort(env, "Critical interrupt while in user mode. "
183 case POWERPC_EXCP_MCHECK: /* Machine check exception */
184 cpu_abort(env, "Machine check exception while in user mode. "
187 case POWERPC_EXCP_DSI: /* Data storage exception */
189 /* To deal with multiple qemu header version as host for the darwin-user code */
192 EXCP_DUMP(env, "Invalid data memory access: 0x" ADDRX "\n",
194 /* Handle this via the gdb */
195 gdb_handlesig (env, SIGSEGV);
197 info.si_addr = (void*)env->nip;
198 queue_signal(info.si_signo, &info);
200 case POWERPC_EXCP_ISI: /* Instruction storage exception */
201 EXCP_DUMP(env, "Invalid instruction fetch: 0x\n" ADDRX "\n",
203 /* Handle this via the gdb */
204 gdb_handlesig (env, SIGSEGV);
206 info.si_addr = (void*)(env->nip - 4);
207 queue_signal(info.si_signo, &info);
209 case POWERPC_EXCP_EXTERNAL: /* External input */
210 cpu_abort(env, "External interrupt while in user mode. "
213 case POWERPC_EXCP_ALIGN: /* Alignment exception */
214 EXCP_DUMP(env, "Unaligned memory access\n");
216 info.si_code = BUS_ADRALN;
217 info.si_addr = (void*)(env->nip - 4);
218 queue_signal(info.si_signo, &info);
220 case POWERPC_EXCP_PROGRAM: /* Program exception */
221 /* XXX: check this */
222 switch (env->error_code & ~0xF) {
223 case POWERPC_EXCP_FP:
224 EXCP_DUMP(env, "Floating point program exception\n");
226 info.si_signo = SIGFPE;
228 switch (env->error_code & 0xF) {
229 case POWERPC_EXCP_FP_OX:
230 info.si_code = FPE_FLTOVF;
232 case POWERPC_EXCP_FP_UX:
233 info.si_code = FPE_FLTUND;
235 case POWERPC_EXCP_FP_ZX:
236 case POWERPC_EXCP_FP_VXZDZ:
237 info.si_code = FPE_FLTDIV;
239 case POWERPC_EXCP_FP_XX:
240 info.si_code = FPE_FLTRES;
242 case POWERPC_EXCP_FP_VXSOFT:
243 info.si_code = FPE_FLTINV;
245 case POWERPC_EXCP_FP_VXSNAN:
246 case POWERPC_EXCP_FP_VXISI:
247 case POWERPC_EXCP_FP_VXIDI:
248 case POWERPC_EXCP_FP_VXIMZ:
249 case POWERPC_EXCP_FP_VXVC:
250 case POWERPC_EXCP_FP_VXSQRT:
251 case POWERPC_EXCP_FP_VXCVI:
252 info.si_code = FPE_FLTSUB;
255 EXCP_DUMP(env, "Unknown floating point exception (%02x)\n",
260 case POWERPC_EXCP_INVAL:
261 EXCP_DUMP(env, "Invalid instruction\n");
262 info.si_signo = SIGILL;
264 switch (env->error_code & 0xF) {
265 case POWERPC_EXCP_INVAL_INVAL:
266 info.si_code = ILL_ILLOPC;
268 case POWERPC_EXCP_INVAL_LSWX:
269 info.si_code = ILL_ILLOPN;
271 case POWERPC_EXCP_INVAL_SPR:
272 info.si_code = ILL_PRVREG;
274 case POWERPC_EXCP_INVAL_FP:
275 info.si_code = ILL_COPROC;
278 EXCP_DUMP(env, "Unknown invalid operation (%02x)\n",
279 env->error_code & 0xF);
280 info.si_code = ILL_ILLADR;
283 /* Handle this via the gdb */
284 gdb_handlesig (env, SIGSEGV);
286 case POWERPC_EXCP_PRIV:
287 EXCP_DUMP(env, "Privilege violation\n");
288 info.si_signo = SIGILL;
290 switch (env->error_code & 0xF) {
291 case POWERPC_EXCP_PRIV_OPC:
292 info.si_code = ILL_PRVOPC;
294 case POWERPC_EXCP_PRIV_REG:
295 info.si_code = ILL_PRVREG;
298 EXCP_DUMP(env, "Unknown privilege violation (%02x)\n",
299 env->error_code & 0xF);
300 info.si_code = ILL_PRVOPC;
304 case POWERPC_EXCP_TRAP:
305 cpu_abort(env, "Tried to call a TRAP\n");
308 /* Should not happen ! */
309 cpu_abort(env, "Unknown program exception (%02x)\n",
313 info.si_addr = (void*)(env->nip - 4);
314 queue_signal(info.si_signo, &info);
316 case POWERPC_EXCP_FPU: /* Floating-point unavailable exception */
317 EXCP_DUMP(env, "No floating point allowed\n");
318 info.si_signo = SIGILL;
320 info.si_code = ILL_COPROC;
321 info.si_addr = (void*)(env->nip - 4);
322 queue_signal(info.si_signo, &info);
324 case POWERPC_EXCP_SYSCALL: /* System call exception */
325 cpu_abort(env, "Syscall exception while in user mode. "
328 case POWERPC_EXCP_APU: /* Auxiliary processor unavailable */
329 EXCP_DUMP(env, "No APU instruction allowed\n");
330 info.si_signo = SIGILL;
332 info.si_code = ILL_COPROC;
333 info.si_addr = (void*)(env->nip - 4);
334 queue_signal(info.si_signo, &info);
336 case POWERPC_EXCP_DECR: /* Decrementer exception */
337 cpu_abort(env, "Decrementer interrupt while in user mode. "
340 case POWERPC_EXCP_FIT: /* Fixed-interval timer interrupt */
341 cpu_abort(env, "Fix interval timer interrupt while in user mode. "
344 case POWERPC_EXCP_WDT: /* Watchdog timer interrupt */
345 cpu_abort(env, "Watchdog timer interrupt while in user mode. "
348 case POWERPC_EXCP_DTLB: /* Data TLB error */
349 cpu_abort(env, "Data TLB exception while in user mode. "
352 case POWERPC_EXCP_ITLB: /* Instruction TLB error */
353 cpu_abort(env, "Instruction TLB exception while in user mode. "
356 case POWERPC_EXCP_DEBUG: /* Debug interrupt */
357 gdb_handlesig (env, SIGTRAP);
359 case POWERPC_EXCP_SPEU: /* SPE/embedded floating-point unavail. */
360 EXCP_DUMP(env, "No SPE/floating-point instruction allowed\n");
361 info.si_signo = SIGILL;
363 info.si_code = ILL_COPROC;
364 info.si_addr = (void*)(env->nip - 4);
365 queue_signal(info.si_signo, &info);
367 case POWERPC_EXCP_EFPDI: /* Embedded floating-point data IRQ */
368 cpu_abort(env, "Embedded floating-point data IRQ not handled\n");
370 case POWERPC_EXCP_EFPRI: /* Embedded floating-point round IRQ */
371 cpu_abort(env, "Embedded floating-point round IRQ not handled\n");
373 case POWERPC_EXCP_EPERFM: /* Embedded performance monitor IRQ */
374 cpu_abort(env, "Performance monitor exception not handled\n");
376 case POWERPC_EXCP_DOORI: /* Embedded doorbell interrupt */
377 cpu_abort(env, "Doorbell interrupt while in user mode. "
380 case POWERPC_EXCP_DOORCI: /* Embedded doorbell critical interrupt */
381 cpu_abort(env, "Doorbell critical interrupt while in user mode. "
384 case POWERPC_EXCP_RESET: /* System reset exception */
385 cpu_abort(env, "Reset interrupt while in user mode. "
388 case POWERPC_EXCP_DSEG: /* Data segment exception */
389 cpu_abort(env, "Data segment exception while in user mode. "
392 case POWERPC_EXCP_ISEG: /* Instruction segment exception */
393 cpu_abort(env, "Instruction segment exception "
394 "while in user mode. Aborting\n");
396 case POWERPC_EXCP_HDECR: /* Hypervisor decrementer exception */
397 cpu_abort(env, "Hypervisor decrementer interrupt "
398 "while in user mode. Aborting\n");
400 case POWERPC_EXCP_TRACE: /* Trace exception */
402 * we use this exception to emulate step-by-step execution mode.
405 case POWERPC_EXCP_HDSI: /* Hypervisor data storage exception */
406 cpu_abort(env, "Hypervisor data storage exception "
407 "while in user mode. Aborting\n");
409 case POWERPC_EXCP_HISI: /* Hypervisor instruction storage excp */
410 cpu_abort(env, "Hypervisor instruction storage exception "
411 "while in user mode. Aborting\n");
413 case POWERPC_EXCP_HDSEG: /* Hypervisor data segment exception */
414 cpu_abort(env, "Hypervisor data segment exception "
415 "while in user mode. Aborting\n");
417 case POWERPC_EXCP_HISEG: /* Hypervisor instruction segment excp */
418 cpu_abort(env, "Hypervisor instruction segment exception "
419 "while in user mode. Aborting\n");
421 case POWERPC_EXCP_VPU: /* Vector unavailable exception */
422 EXCP_DUMP(env, "No Altivec instructions allowed\n");
423 info.si_signo = SIGILL;
425 info.si_code = ILL_COPROC;
426 info.si_addr = (void*)(env->nip - 4);
427 queue_signal(info.si_signo, &info);
429 case POWERPC_EXCP_PIT: /* Programmable interval timer IRQ */
430 cpu_abort(env, "Programable interval timer interrupt "
431 "while in user mode. Aborting\n");
433 case POWERPC_EXCP_IO: /* IO error exception */
434 cpu_abort(env, "IO error exception while in user mode. "
437 case POWERPC_EXCP_RUNM: /* Run mode exception */
438 cpu_abort(env, "Run mode exception while in user mode. "
441 case POWERPC_EXCP_EMUL: /* Emulation trap exception */
442 cpu_abort(env, "Emulation trap exception not handled\n");
444 case POWERPC_EXCP_IFTLB: /* Instruction fetch TLB error */
445 cpu_abort(env, "Instruction fetch TLB exception "
446 "while in user-mode. Aborting");
448 case POWERPC_EXCP_DLTLB: /* Data load TLB miss */
449 cpu_abort(env, "Data load TLB exception while in user-mode. "
452 case POWERPC_EXCP_DSTLB: /* Data store TLB miss */
453 cpu_abort(env, "Data store TLB exception while in user-mode. "
456 case POWERPC_EXCP_FPA: /* Floating-point assist exception */
457 cpu_abort(env, "Floating-point assist exception not handled\n");
459 case POWERPC_EXCP_IABR: /* Instruction address breakpoint */
460 cpu_abort(env, "Instruction address breakpoint exception "
463 case POWERPC_EXCP_SMI: /* System management interrupt */
464 cpu_abort(env, "System management interrupt while in user mode. "
467 case POWERPC_EXCP_THERM: /* Thermal interrupt */
468 cpu_abort(env, "Thermal interrupt interrupt while in user mode. "
471 case POWERPC_EXCP_PERFM: /* Embedded performance monitor IRQ */
472 cpu_abort(env, "Performance monitor exception not handled\n");
474 case POWERPC_EXCP_VPUA: /* Vector assist exception */
475 cpu_abort(env, "Vector assist exception not handled\n");
477 case POWERPC_EXCP_SOFTP: /* Soft patch exception */
478 cpu_abort(env, "Soft patch exception not handled\n");
480 case POWERPC_EXCP_MAINT: /* Maintenance exception */
481 cpu_abort(env, "Maintenance exception while in user mode. "
484 case POWERPC_EXCP_STOP: /* stop translation */
485 /* We did invalidate the instruction cache. Go on */
487 case POWERPC_EXCP_BRANCH: /* branch instruction: */
488 /* We just stopped because of a branch. Go on */
490 case POWERPC_EXCP_SYSCALL_USER:
491 /* system call in user-mode emulation */
493 if(((int)env->gpr[0]) <= SYS_MAXSYSCALL && ((int)env->gpr[0])>0)
494 ret = do_unix_syscall(env, env->gpr[0]/*, env->gpr[3], env->gpr[4],
495 env->gpr[5], env->gpr[6], env->gpr[7],
496 env->gpr[8], env->gpr[9], env->gpr[10]*/);
497 else if(((int)env->gpr[0])<0)
498 ret = do_mach_syscall(env, env->gpr[0], env->gpr[3], env->gpr[4],
499 env->gpr[5], env->gpr[6], env->gpr[7],
500 env->gpr[8], env->gpr[9], env->gpr[10]);
502 ret = do_thread_syscall(env, env->gpr[0], env->gpr[3], env->gpr[4],
503 env->gpr[5], env->gpr[6], env->gpr[7],
504 env->gpr[8], env->gpr[9], env->gpr[10]);
506 /* Unix syscall error signaling */
507 if(((int)env->gpr[0]) <= SYS_MAXSYSCALL && ((int)env->gpr[0])>0)
519 /* just indicate that signals should be handled asap */
522 cpu_abort(env, "Unknown exception 0x%d. Aborting\n", trapnr);
525 process_pending_signals(env);
533 /***********************************************************/
534 /* CPUX86 core interface */
536 uint64_t cpu_get_tsc(CPUX86State *env)
538 return cpu_get_real_ticks();
542 write_dt(void *ptr, unsigned long addr, unsigned long limit,
546 e1 = (addr << 16) | (limit & 0xffff);
547 e2 = ((addr >> 16) & 0xff) | (addr & 0xff000000) | (limit & 0x000f0000);
549 stl((uint8_t *)ptr, e1);
550 stl((uint8_t *)ptr + 4, e2);
553 static void set_gate(void *ptr, unsigned int type, unsigned int dpl,
554 unsigned long addr, unsigned int sel)
557 e1 = (addr & 0xffff) | (sel << 16);
558 e2 = (addr & 0xffff0000) | 0x8000 | (dpl << 13) | (type << 8);
559 stl((uint8_t *)ptr, e1);
560 stl((uint8_t *)ptr + 4, e2);
563 #define GDT_TABLE_SIZE 14
564 #define LDT_TABLE_SIZE 15
565 #define IDT_TABLE_SIZE 256
567 uint64_t gdt_table[GDT_TABLE_SIZE];
568 uint64_t ldt_table[LDT_TABLE_SIZE];
569 uint64_t idt_table[IDT_TABLE_SIZE];
570 uint32_t tss[TSS_SIZE];
572 /* only dpl matters as we do only user space emulation */
573 static void set_idt(int n, unsigned int dpl)
575 set_gate(idt_table + n, 0, dpl, 0, 0);
578 /* ABI convention: after a syscall if there was an error the CF flag is set */
579 static inline void set_error(CPUX86State *env, int ret)
582 env->eflags = env->eflags | 0x1;
585 env->regs[R_EAX] = ret;
588 void cpu_loop(CPUX86State *env)
593 target_siginfo_t info;
596 trapnr = cpu_x86_exec(env);
597 uint32_t *params = (uint32_t *)env->regs[R_ESP];
599 case 0x79: /* Our commpage hack back door exit is here */
600 do_commpage(env, env->eip, *(params + 1), *(params + 2),
601 *(params + 3), *(params + 4),
602 *(params + 5), *(params + 6),
603 *(params + 7), *(params + 8));
605 case 0x81: /* mach syscall */
607 ret = do_mach_syscall(env, env->regs[R_EAX],
608 *(params + 1), *(params + 2),
609 *(params + 3), *(params + 4),
610 *(params + 5), *(params + 6),
611 *(params + 7), *(params + 8));
615 case 0x90: /* unix backdoor */
617 /* after sysenter, stack is in R_ECX, new eip in R_EDX (sysexit will flip them back)*/
618 int saved_stack = env->regs[R_ESP];
619 env->regs[R_ESP] = env->regs[R_ECX];
621 ret = do_unix_syscall(env, env->regs[R_EAX]);
623 env->regs[R_ECX] = env->regs[R_ESP];
624 env->regs[R_ESP] = saved_stack;
629 case 0x80: /* unix syscall */
631 ret = do_unix_syscall(env, env->regs[R_EAX]/*,
632 *(params + 1), *(params + 2),
633 *(params + 3), *(params + 4),
634 *(params + 5), *(params + 6),
635 *(params + 7), *(params + 8)*/);
639 case 0x82: /* thread syscall */
641 ret = do_thread_syscall(env, env->regs[R_EAX],
642 *(params + 1), *(params + 2),
643 *(params + 3), *(params + 4),
644 *(params + 5), *(params + 6),
645 *(params + 7), *(params + 8));
651 info.si_signo = SIGBUS;
653 info.si_code = BUS_NOOP;
655 gdb_handlesig (env, SIGBUS);
656 queue_signal(info.si_signo, &info);
659 info.si_signo = SIGSEGV;
661 info.si_code = SEGV_NOOP;
663 gdb_handlesig (env, SIGSEGV);
664 queue_signal(info.si_signo, &info);
667 info.si_signo = SIGSEGV;
669 if (!(env->error_code & 1))
670 info.si_code = SEGV_MAPERR;
672 info.si_code = SEGV_ACCERR;
673 info.si_addr = (void*)env->cr[2];
674 gdb_handlesig (env, SIGSEGV);
675 queue_signal(info.si_signo, &info);
678 /* division by zero */
679 info.si_signo = SIGFPE;
681 info.si_code = FPE_INTDIV;
682 info.si_addr = (void*)env->eip;
683 gdb_handlesig (env, SIGFPE);
684 queue_signal(info.si_signo, &info);
688 info.si_signo = SIGTRAP;
690 info.si_code = TRAP_BRKPT;
691 info.si_addr = (void*)env->eip;
692 gdb_handlesig (env, SIGTRAP);
693 queue_signal(info.si_signo, &info);
697 info.si_signo = SIGSEGV;
699 info.si_code = SEGV_NOOP;
701 gdb_handlesig (env, SIGSEGV);
702 queue_signal(info.si_signo, &info);
705 info.si_signo = SIGILL;
707 info.si_code = ILL_ILLOPN;
708 info.si_addr = (void*)env->eip;
709 gdb_handlesig (env, SIGILL);
710 queue_signal(info.si_signo, &info);
713 /* just indicate that signals should be handled asap */
719 sig = gdb_handlesig (env, SIGTRAP);
724 info.si_code = TRAP_BRKPT;
725 queue_signal(info.si_signo, &info);
730 pc = (void*)(env->segs[R_CS].base + env->eip);
731 fprintf(stderr, "qemu: 0x%08lx: unhandled CPU exception 0x%x - aborting\n",
735 process_pending_signals(env);
742 printf("qemu-" TARGET_ARCH " version " QEMU_VERSION ", Copyright (c) 2003-2004 Fabrice Bellard\n"
743 "usage: qemu-" TARGET_ARCH " [-h] [-d opts] [-L path] [-s size] program [arguments...]\n"
744 "Darwin CPU emulator (compiled for %s emulation)\n"
746 "-h print this help\n"
747 "-L path set the %s library path (default='%s')\n"
748 "-s size set the stack size in bytes (default=%ld)\n"
751 "-d options activate log (logfile='%s')\n"
752 "-g wait for gdb on port 1234\n"
753 "-p pagesize set the host page size to 'pagesize'\n",
762 /* XXX: currently only used for async signals (see signal.c) */
763 CPUState *global_env;
764 /* used only if single thread */
765 CPUState *cpu_single_env = NULL;
767 /* used to free thread contexts */
768 TaskState *first_task_state;
770 int main(int argc, char **argv)
772 const char *filename;
773 struct target_pt_regs regs1, *regs = ®s1;
774 TaskState ts1, *ts = &ts1;
777 short use_gdbstub = 0;
779 const char *cpu_model;
785 cpu_set_log_filename(DEBUG_LOGFILE);
796 if (!strcmp(r, "-")) {
798 } else if (!strcmp(r, "d")) {
806 mask = cpu_str_to_log_mask(r);
808 printf("Log items (comma separated):\n");
809 for(item = cpu_log_items; item->mask != 0; item++) {
810 printf("%-10s %s\n", item->name, item->help);
815 } else if (!strcmp(r, "s")) {
817 stack_size = strtol(r, (char **)&r, 0);
821 stack_size *= 1024 * 1024;
822 else if (*r == 'k' || *r == 'K')
824 } else if (!strcmp(r, "L")) {
825 interp_prefix = argv[optind++];
826 } else if (!strcmp(r, "p")) {
827 qemu_host_page_size = atoi(argv[optind++]);
828 if (qemu_host_page_size == 0 ||
829 (qemu_host_page_size & (qemu_host_page_size - 1)) != 0) {
830 fprintf(stderr, "page size must be a power of two\n");
834 if (!strcmp(r, "g")) {
836 } else if (!strcmp(r, "cpu")) {
837 cpu_model = argv[optind++];
838 if (strcmp(cpu_model, "?") == 0) {
839 /* XXX: implement xxx_cpu_list for targets that still miss it */
840 #if defined(cpu_list)
841 cpu_list(stdout, &fprintf);
852 filename = argv[optind];
855 memset(regs, 0, sizeof(struct target_pt_regs));
857 if (cpu_model == NULL) {
858 #if defined(TARGET_I386)
860 cpu_model = "qemu64";
862 cpu_model = "qemu32";
864 #elif defined(TARGET_PPC)
871 #error unsupported CPU
875 cpu_exec_init_all(0);
876 /* NOTE: we need to init the CPU at this stage to get
877 qemu_host_page_size */
878 env = cpu_init(cpu_model);
880 printf("Starting %s with qemu\n----------------\n", filename);
884 if (mach_exec(filename, argv+optind, environ, regs) != 0) {
885 printf("Error loading %s\n", filename);
893 /* build Task State */
894 memset(ts, 0, sizeof(TaskState));
898 #if defined(TARGET_I386)
899 cpu_x86_set_cpl(env, 3);
901 env->cr[0] = CR0_PG_MASK | CR0_WP_MASK | CR0_PE_MASK;
902 env->hflags |= HF_PE_MASK;
904 if (env->cpuid_features & CPUID_SSE) {
905 env->cr[4] |= CR4_OSFXSR_MASK;
906 env->hflags |= HF_OSFXSR_MASK;
909 /* flags setup : we activate the IRQs by default as in user mode */
910 env->eflags |= IF_MASK;
912 /* darwin register setup */
913 env->regs[R_EAX] = regs->eax;
914 env->regs[R_EBX] = regs->ebx;
915 env->regs[R_ECX] = regs->ecx;
916 env->regs[R_EDX] = regs->edx;
917 env->regs[R_ESI] = regs->esi;
918 env->regs[R_EDI] = regs->edi;
919 env->regs[R_EBP] = regs->ebp;
920 env->regs[R_ESP] = regs->esp;
921 env->eip = regs->eip;
923 /* Darwin LDT setup */
924 /* 2 - User code segment
925 3 - User data segment
927 bzero(ldt_table, LDT_TABLE_SIZE * sizeof(ldt_table[0]));
928 env->ldt.base = (uint32_t) ldt_table;
929 env->ldt.limit = sizeof(ldt_table) - 1;
931 write_dt(ldt_table + 2, 0, 0xfffff,
932 DESC_G_MASK | DESC_B_MASK | DESC_P_MASK | DESC_S_MASK |
933 (3 << DESC_DPL_SHIFT) | (0xa << DESC_TYPE_SHIFT));
934 write_dt(ldt_table + 3, 0, 0xfffff,
935 DESC_G_MASK | DESC_B_MASK | DESC_P_MASK | DESC_S_MASK |
936 (3 << DESC_DPL_SHIFT) | (0x2 << DESC_TYPE_SHIFT));
937 write_dt(ldt_table + 4, 0, 0xfffff,
938 DESC_G_MASK | DESC_B_MASK | DESC_P_MASK | DESC_S_MASK |
939 (3 << DESC_DPL_SHIFT) | (0x2 << DESC_TYPE_SHIFT));
942 * has changed a lot between old Darwin/x86 (pre-Mac Intel) and Mac OS X/x86,
943 now everything is done via int 0x81(mach) int 0x82 (thread) and sysenter/sysexit(unix) */
944 bzero(gdt_table, sizeof(gdt_table));
945 env->gdt.base = (uint32_t)gdt_table;
946 env->gdt.limit = sizeof(gdt_table) - 1;
948 /* Set up a back door to handle sysenter syscalls (unix) */
949 char * syscallbackdoor = malloc(64);
950 page_set_flags((int)syscallbackdoor, (int)syscallbackdoor + 64, PROT_EXEC | PROT_READ | PAGE_VALID);
953 syscallbackdoor[i++] = 0xcd;
954 syscallbackdoor[i++] = 0x90; /* int 0x90 */
955 syscallbackdoor[i++] = 0x0F;
956 syscallbackdoor[i++] = 0x35; /* sysexit */
958 /* Darwin sysenter/sysexit setup */
959 env->sysenter_cs = 0x1; //XXX
960 env->sysenter_eip = (int)syscallbackdoor;
961 env->sysenter_esp = (int)malloc(64);
964 This must match up with GDT[4] */
965 env->tr.base = (uint32_t) tss;
966 env->tr.limit = sizeof(tss) - 1;
967 env->tr.flags = DESC_P_MASK | (0x9 << DESC_TYPE_SHIFT);
968 stw(tss + 2, 0x10); // ss0 = 0x10 = GDT[2] = Kernel Data Segment
970 /* Darwin interrupt setup */
971 bzero(idt_table, sizeof(idt_table));
972 env->idt.base = (uint32_t) idt_table;
973 env->idt.limit = sizeof(idt_table) - 1;
994 /* Syscalls are done via
995 int 0x80 (unix) (rarely used)
998 int 0x83 (diag) (not handled here)
999 sysenter/sysexit (unix) -> we redirect that to int 0x90 */
1000 set_idt(0x79, 3); /* Commpage hack, here is our backdoor interrupt */
1001 set_idt(0x80, 3); /* Unix Syscall */
1002 set_idt(0x81, 3); /* Mach Syscalls */
1003 set_idt(0x82, 3); /* thread Syscalls */
1005 set_idt(0x90, 3); /* qemu-darwin-user's Unix syscalls backdoor */
1008 cpu_x86_load_seg(env, R_CS, __USER_CS);
1009 cpu_x86_load_seg(env, R_DS, __USER_DS);
1010 cpu_x86_load_seg(env, R_ES, __USER_DS);
1011 cpu_x86_load_seg(env, R_SS, __USER_DS);
1012 cpu_x86_load_seg(env, R_FS, __USER_DS);
1013 cpu_x86_load_seg(env, R_GS, __USER_DS);
1015 #elif defined(TARGET_PPC)
1019 #if defined(TARGET_PPC64)
1020 #if defined(TARGET_ABI32)
1021 env->msr &= ~((target_ulong)1 << MSR_SF);
1023 env->msr |= (target_ulong)1 << MSR_SF;
1026 env->nip = regs->nip;
1027 for(i = 0; i < 32; i++) {
1028 env->gpr[i] = regs->gpr[i];
1032 #error unsupported target CPU
1036 printf("Waiting for gdb Connection on port 1234...\n");
1037 gdbserver_start (1234);
1038 gdb_handlesig(env, 0);