2 * i386 virtual CPU header
4 * Copyright (c) 2003 Fabrice Bellard
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, write to the Free Software
18 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
26 #define TARGET_LONG_BITS 64
28 #define TARGET_LONG_BITS 32
31 /* target supports implicit self modifying code */
32 #define TARGET_HAS_SMC
33 /* support for self modifying code even if the modified instruction is
34 close to the modifying instruction */
35 #define TARGET_HAS_PRECISE_SMC
39 #if defined(__i386__) && !defined(CONFIG_SOFTMMU)
42 #if defined(CONFIG_KQEMU) && defined(__linux__) && defined(CONFIG_SOFTMMU) && defined(__i386__) && !defined(TARGET_X86_64)
71 /* segment descriptor fields */
72 #define DESC_G_MASK (1 << 23)
73 #define DESC_B_SHIFT 22
74 #define DESC_B_MASK (1 << DESC_B_SHIFT)
75 #define DESC_L_SHIFT 21 /* x86_64 only : 64 bit code segment */
76 #define DESC_L_MASK (1 << DESC_L_SHIFT)
77 #define DESC_AVL_MASK (1 << 20)
78 #define DESC_P_MASK (1 << 15)
79 #define DESC_DPL_SHIFT 13
80 #define DESC_S_MASK (1 << 12)
81 #define DESC_TYPE_SHIFT 8
82 #define DESC_A_MASK (1 << 8)
84 #define DESC_CS_MASK (1 << 11) /* 1=code segment 0=data segment */
85 #define DESC_C_MASK (1 << 10) /* code: conforming */
86 #define DESC_R_MASK (1 << 9) /* code: readable */
88 #define DESC_E_MASK (1 << 10) /* data: expansion direction */
89 #define DESC_W_MASK (1 << 9) /* data: writable */
91 #define DESC_TSS_BUSY_MASK (1 << 9)
102 #define IOPL_SHIFT 12
105 #define TF_MASK 0x00000100
106 #define IF_MASK 0x00000200
107 #define DF_MASK 0x00000400
108 #define IOPL_MASK 0x00003000
109 #define NT_MASK 0x00004000
110 #define RF_MASK 0x00010000
111 #define VM_MASK 0x00020000
112 #define AC_MASK 0x00040000
113 #define VIF_MASK 0x00080000
114 #define VIP_MASK 0x00100000
115 #define ID_MASK 0x00200000
117 /* hidden flags - used internally by qemu to represent additionnal cpu
118 states. Only the CPL and INHIBIT_IRQ are not redundant. We avoid
119 using the IOPL_MASK, TF_MASK and VM_MASK bit position to ease oring
122 #define HF_CPL_SHIFT 0
123 /* true if soft mmu is being used */
124 #define HF_SOFTMMU_SHIFT 2
125 /* true if hardware interrupts must be disabled for next instruction */
126 #define HF_INHIBIT_IRQ_SHIFT 3
127 /* 16 or 32 segments */
128 #define HF_CS32_SHIFT 4
129 #define HF_SS32_SHIFT 5
130 /* zero base for DS, ES and SS : can be '0' only in 32 bit CS segment */
131 #define HF_ADDSEG_SHIFT 6
132 /* copy of CR0.PE (protected mode) */
133 #define HF_PE_SHIFT 7
134 #define HF_TF_SHIFT 8 /* must be same as eflags */
135 #define HF_MP_SHIFT 9 /* the order must be MP, EM, TS */
136 #define HF_EM_SHIFT 10
137 #define HF_TS_SHIFT 11
138 #define HF_IOPL_SHIFT 12 /* must be same as eflags */
139 #define HF_LMA_SHIFT 14 /* only used on x86_64: long mode active */
140 #define HF_CS64_SHIFT 15 /* only used on x86_64: 64 bit code segment */
141 #define HF_OSFXSR_SHIFT 16 /* CR4.OSFXSR */
142 #define HF_VM_SHIFT 17 /* must be same as eflags */
144 #define HF_CPL_MASK (3 << HF_CPL_SHIFT)
145 #define HF_SOFTMMU_MASK (1 << HF_SOFTMMU_SHIFT)
146 #define HF_INHIBIT_IRQ_MASK (1 << HF_INHIBIT_IRQ_SHIFT)
147 #define HF_CS32_MASK (1 << HF_CS32_SHIFT)
148 #define HF_SS32_MASK (1 << HF_SS32_SHIFT)
149 #define HF_ADDSEG_MASK (1 << HF_ADDSEG_SHIFT)
150 #define HF_PE_MASK (1 << HF_PE_SHIFT)
151 #define HF_TF_MASK (1 << HF_TF_SHIFT)
152 #define HF_MP_MASK (1 << HF_MP_SHIFT)
153 #define HF_EM_MASK (1 << HF_EM_SHIFT)
154 #define HF_TS_MASK (1 << HF_TS_SHIFT)
155 #define HF_LMA_MASK (1 << HF_LMA_SHIFT)
156 #define HF_CS64_MASK (1 << HF_CS64_SHIFT)
157 #define HF_OSFXSR_MASK (1 << HF_OSFXSR_SHIFT)
159 #define CR0_PE_MASK (1 << 0)
160 #define CR0_MP_MASK (1 << 1)
161 #define CR0_EM_MASK (1 << 2)
162 #define CR0_TS_MASK (1 << 3)
163 #define CR0_ET_MASK (1 << 4)
164 #define CR0_NE_MASK (1 << 5)
165 #define CR0_WP_MASK (1 << 16)
166 #define CR0_AM_MASK (1 << 18)
167 #define CR0_PG_MASK (1 << 31)
169 #define CR4_VME_MASK (1 << 0)
170 #define CR4_PVI_MASK (1 << 1)
171 #define CR4_TSD_MASK (1 << 2)
172 #define CR4_DE_MASK (1 << 3)
173 #define CR4_PSE_MASK (1 << 4)
174 #define CR4_PAE_MASK (1 << 5)
175 #define CR4_PGE_MASK (1 << 7)
176 #define CR4_PCE_MASK (1 << 8)
177 #define CR4_OSFXSR_MASK (1 << 9)
178 #define CR4_OSXMMEXCPT_MASK (1 << 10)
180 #define PG_PRESENT_BIT 0
182 #define PG_USER_BIT 2
185 #define PG_ACCESSED_BIT 5
186 #define PG_DIRTY_BIT 6
188 #define PG_GLOBAL_BIT 8
190 #define PG_PRESENT_MASK (1 << PG_PRESENT_BIT)
191 #define PG_RW_MASK (1 << PG_RW_BIT)
192 #define PG_USER_MASK (1 << PG_USER_BIT)
193 #define PG_PWT_MASK (1 << PG_PWT_BIT)
194 #define PG_PCD_MASK (1 << PG_PCD_BIT)
195 #define PG_ACCESSED_MASK (1 << PG_ACCESSED_BIT)
196 #define PG_DIRTY_MASK (1 << PG_DIRTY_BIT)
197 #define PG_PSE_MASK (1 << PG_PSE_BIT)
198 #define PG_GLOBAL_MASK (1 << PG_GLOBAL_BIT)
200 #define PG_ERROR_W_BIT 1
202 #define PG_ERROR_P_MASK 0x01
203 #define PG_ERROR_W_MASK (1 << PG_ERROR_W_BIT)
204 #define PG_ERROR_U_MASK 0x04
205 #define PG_ERROR_RSVD_MASK 0x08
207 #define MSR_IA32_APICBASE 0x1b
208 #define MSR_IA32_APICBASE_BSP (1<<8)
209 #define MSR_IA32_APICBASE_ENABLE (1<<11)
210 #define MSR_IA32_APICBASE_BASE (0xfffff<<12)
212 #define MSR_IA32_SYSENTER_CS 0x174
213 #define MSR_IA32_SYSENTER_ESP 0x175
214 #define MSR_IA32_SYSENTER_EIP 0x176
216 #define MSR_EFER 0xc0000080
218 #define MSR_EFER_SCE (1 << 0)
219 #define MSR_EFER_LME (1 << 8)
220 #define MSR_EFER_LMA (1 << 10)
221 #define MSR_EFER_NXE (1 << 11)
222 #define MSR_EFER_FFXSR (1 << 14)
224 #define MSR_STAR 0xc0000081
225 #define MSR_LSTAR 0xc0000082
226 #define MSR_CSTAR 0xc0000083
227 #define MSR_FMASK 0xc0000084
228 #define MSR_FSBASE 0xc0000100
229 #define MSR_GSBASE 0xc0000101
230 #define MSR_KERNELGSBASE 0xc0000102
232 /* cpuid_features bits */
233 #define CPUID_FP87 (1 << 0)
234 #define CPUID_VME (1 << 1)
235 #define CPUID_DE (1 << 2)
236 #define CPUID_PSE (1 << 3)
237 #define CPUID_TSC (1 << 4)
238 #define CPUID_MSR (1 << 5)
239 #define CPUID_PAE (1 << 6)
240 #define CPUID_MCE (1 << 7)
241 #define CPUID_CX8 (1 << 8)
242 #define CPUID_APIC (1 << 9)
243 #define CPUID_SEP (1 << 11) /* sysenter/sysexit */
244 #define CPUID_MTRR (1 << 12)
245 #define CPUID_PGE (1 << 13)
246 #define CPUID_MCA (1 << 14)
247 #define CPUID_CMOV (1 << 15)
249 #define CPUID_MMX (1 << 23)
250 #define CPUID_FXSR (1 << 24)
251 #define CPUID_SSE (1 << 25)
252 #define CPUID_SSE2 (1 << 26)
254 #define CPUID_EXT_SS3 (1 << 0)
255 #define CPUID_EXT_MONITOR (1 << 3)
256 #define CPUID_EXT_CX16 (1 << 13)
258 #define CPUID_EXT2_SYSCALL (1 << 11)
259 #define CPUID_EXT2_NX (1 << 20)
260 #define CPUID_EXT2_LM (1 << 29)
262 #define EXCP00_DIVZ 0
263 #define EXCP01_SSTP 1
265 #define EXCP03_INT3 3
266 #define EXCP04_INTO 4
267 #define EXCP05_BOUND 5
268 #define EXCP06_ILLOP 6
269 #define EXCP07_PREX 7
270 #define EXCP08_DBLE 8
271 #define EXCP09_XERR 9
272 #define EXCP0A_TSS 10
273 #define EXCP0B_NOSEG 11
274 #define EXCP0C_STACK 12
275 #define EXCP0D_GPF 13
276 #define EXCP0E_PAGE 14
277 #define EXCP10_COPR 16
278 #define EXCP11_ALGN 17
279 #define EXCP12_MCHK 18
282 CC_OP_DYNAMIC, /* must use dynamic code to get cc_op */
283 CC_OP_EFLAGS, /* all cc are explicitely computed, CC_SRC = flags */
285 CC_OP_MULB, /* modify all flags, C, O = (CC_SRC != 0) */
290 CC_OP_ADDB, /* modify all flags, CC_DST = res, CC_SRC = src1 */
295 CC_OP_ADCB, /* modify all flags, CC_DST = res, CC_SRC = src1 */
300 CC_OP_SUBB, /* modify all flags, CC_DST = res, CC_SRC = src1 */
305 CC_OP_SBBB, /* modify all flags, CC_DST = res, CC_SRC = src1 */
310 CC_OP_LOGICB, /* modify all flags, CC_DST = res */
315 CC_OP_INCB, /* modify all flags except, CC_DST = res, CC_SRC = C */
320 CC_OP_DECB, /* modify all flags except, CC_DST = res, CC_SRC = C */
325 CC_OP_SHLB, /* modify all flags, CC_DST = res, CC_SRC.msb = C */
330 CC_OP_SARB, /* modify all flags, CC_DST = res, CC_SRC.lsb = C */
338 #if (defined(__i386__) || defined(__x86_64__)) && !defined(_BSD)
339 #define USE_X86LDOUBLE
342 #ifdef USE_X86LDOUBLE
343 typedef long double CPU86_LDouble;
345 typedef double CPU86_LDouble;
348 typedef struct SegmentCache {
371 #ifdef WORDS_BIGENDIAN
372 #define XMM_B(n) _b[15 - (n)]
373 #define XMM_W(n) _w[7 - (n)]
374 #define XMM_L(n) _l[3 - (n)]
375 #define XMM_S(n) _s[3 - (n)]
376 #define XMM_Q(n) _q[1 - (n)]
377 #define XMM_D(n) _d[1 - (n)]
379 #define MMX_B(n) _b[7 - (n)]
380 #define MMX_W(n) _w[3 - (n)]
381 #define MMX_L(n) _l[1 - (n)]
383 #define XMM_B(n) _b[n]
384 #define XMM_W(n) _w[n]
385 #define XMM_L(n) _l[n]
386 #define XMM_S(n) _s[n]
387 #define XMM_Q(n) _q[n]
388 #define XMM_D(n) _d[n]
390 #define MMX_B(n) _b[n]
391 #define MMX_W(n) _w[n]
392 #define MMX_L(n) _l[n]
397 #define CPU_NB_REGS 16
399 #define CPU_NB_REGS 8
402 typedef struct CPUX86State {
403 #if TARGET_LONG_BITS > HOST_LONG_BITS
404 /* temporaries if we cannot store them in host registers */
405 target_ulong t0, t1, t2;
408 /* standard registers */
409 target_ulong regs[CPU_NB_REGS];
411 target_ulong eflags; /* eflags register. During CPU emulation, CC
412 flags and DF are set to zero because they are
415 /* emulator internal eflags handling */
419 int32_t df; /* D flag : 1 if D = 0, -1 if D = 1 */
420 uint32_t hflags; /* hidden flags, see HF_xxx constants */
423 SegmentCache segs[6]; /* selector values */
426 SegmentCache gdt; /* only base and limit are used */
427 SegmentCache idt; /* only base and limit are used */
429 target_ulong cr[5]; /* NOTE: cr1 is unused */
433 unsigned int fpstt; /* top of stack index */
436 uint8_t fptags[8]; /* 0 = valid, 1 = empty */
438 #ifdef USE_X86LDOUBLE
439 CPU86_LDouble d __attribute__((aligned(16)));
446 /* emulator internal variables */
456 XMMReg xmm_regs[CPU_NB_REGS];
460 /* sysenter registers */
461 uint32_t sysenter_cs;
462 uint32_t sysenter_esp;
463 uint32_t sysenter_eip;
470 target_ulong kernelgsbase;
473 /* temporary data for USE_CODE_COPY mode */
477 int native_fp_regs; /* if true, the FPU state is in the native CPU regs */
480 /* exception/interrupt handling */
484 int exception_is_int;
485 target_ulong exception_next_eip;
486 struct TranslationBlock *current_tb; /* currently executing TB */
487 target_ulong dr[8]; /* debug registers */
488 int interrupt_request;
489 int user_mode_only; /* user mode only simulation */
491 /* soft mmu support */
492 /* in order to avoid passing too many arguments to the memory
493 write helpers, we store some rarely used information in the CPU
495 unsigned long mem_write_pc; /* host pc at which the memory was
497 target_ulong mem_write_vaddr; /* target virtual addr at which the
498 memory was written */
499 /* 0 = kernel, 1 = user */
500 CPUTLBEntry tlb_read[2][CPU_TLB_SIZE];
501 CPUTLBEntry tlb_write[2][CPU_TLB_SIZE];
503 /* from this point: preserved by CPU reset */
504 /* ice debug support */
505 target_ulong breakpoints[MAX_BREAKPOINTS];
507 int singlestep_enabled;
509 /* processor features (e.g. for CPUID insn) */
510 uint32_t cpuid_vendor1;
511 uint32_t cpuid_vendor2;
512 uint32_t cpuid_vendor3;
513 uint32_t cpuid_version;
514 uint32_t cpuid_features;
515 uint32_t cpuid_ext_features;
520 /* in order to simplify APIC support, we leave this pointer to the
522 struct APICState *apic_state;
527 CPUX86State *cpu_x86_init(void);
528 int cpu_x86_exec(CPUX86State *s);
529 void cpu_x86_close(CPUX86State *s);
530 int cpu_get_pic_interrupt(CPUX86State *s);
531 /* MSDOS compatibility mode FPU exception support */
532 void cpu_set_ferr(CPUX86State *s);
534 /* this function must always be used to load data in the segment
535 cache: it synchronizes the hflags with the segment cache values */
536 static inline void cpu_x86_load_seg_cache(CPUX86State *env,
537 int seg_reg, unsigned int selector,
538 uint32_t base, unsigned int limit,
542 unsigned int new_hflags;
544 sc = &env->segs[seg_reg];
545 sc->selector = selector;
550 /* update the hidden flags */
552 if (seg_reg == R_CS) {
554 if ((env->hflags & HF_LMA_MASK) && (flags & DESC_L_MASK)) {
556 env->hflags |= HF_CS32_MASK | HF_SS32_MASK | HF_CS64_MASK;
557 env->hflags &= ~(HF_ADDSEG_MASK);
561 /* legacy / compatibility case */
562 new_hflags = (env->segs[R_CS].flags & DESC_B_MASK)
563 >> (DESC_B_SHIFT - HF_CS32_SHIFT);
564 env->hflags = (env->hflags & ~(HF_CS32_MASK | HF_CS64_MASK)) |
568 new_hflags = (env->segs[R_SS].flags & DESC_B_MASK)
569 >> (DESC_B_SHIFT - HF_SS32_SHIFT);
570 if (env->hflags & HF_CS64_MASK) {
571 /* zero base assumed for DS, ES and SS in long mode */
572 } else if (!(env->cr[0] & CR0_PE_MASK) ||
573 (env->eflags & VM_MASK) ||
574 !(env->hflags & HF_CS32_MASK)) {
575 /* XXX: try to avoid this test. The problem comes from the
576 fact that is real mode or vm86 mode we only modify the
577 'base' and 'selector' fields of the segment cache to go
578 faster. A solution may be to force addseg to one in
580 new_hflags |= HF_ADDSEG_MASK;
582 new_hflags |= ((env->segs[R_DS].base |
583 env->segs[R_ES].base |
584 env->segs[R_SS].base) != 0) <<
587 env->hflags = (env->hflags &
588 ~(HF_SS32_MASK | HF_ADDSEG_MASK)) | new_hflags;
592 /* wrapper, just in case memory mappings must be changed */
593 static inline void cpu_x86_set_cpl(CPUX86State *s, int cpl)
596 s->hflags = (s->hflags & ~HF_CPL_MASK) | cpl;
598 #error HF_CPL_MASK is hardcoded
602 /* used for debug or cpu save/restore */
603 void cpu_get_fp80(uint64_t *pmant, uint16_t *pexp, CPU86_LDouble f);
604 CPU86_LDouble cpu_set_fp80(uint64_t mant, uint16_t upper);
606 /* the following helpers are only usable in user mode simulation as
607 they can trigger unexpected exceptions */
608 void cpu_x86_load_seg(CPUX86State *s, int seg_reg, int selector);
609 void cpu_x86_fsave(CPUX86State *s, uint8_t *ptr, int data32);
610 void cpu_x86_frstor(CPUX86State *s, uint8_t *ptr, int data32);
612 /* you can call this signal handler from your SIGBUS and SIGSEGV
613 signal handlers to inform the virtual CPU of exceptions. non zero
614 is returned if the signal was handled by the virtual CPU. */
616 int cpu_x86_signal_handler(int host_signum, struct siginfo *info,
618 void cpu_x86_set_a20(CPUX86State *env, int a20_state);
620 uint64_t cpu_get_tsc(CPUX86State *env);
622 void cpu_set_apic_base(CPUX86State *env, uint64_t val);
623 uint64_t cpu_get_apic_base(CPUX86State *env);
624 void cpu_set_apic_tpr(CPUX86State *env, uint8_t val);
625 #ifndef NO_CPU_IO_DEFS
626 uint8_t cpu_get_apic_tpr(CPUX86State *env);
629 /* will be suppressed */
630 void cpu_x86_update_cr0(CPUX86State *env, uint32_t new_cr0);
633 #define X86_DUMP_FPU 0x0001 /* dump FPU state too */
634 #define X86_DUMP_CCOP 0x0002 /* dump qemu flag cache */
636 #define TARGET_PAGE_BITS 12
639 #endif /* CPU_I386_H */