2 * i386 virtual CPU header
4 * Copyright (c) 2003 Fabrice Bellard
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, write to the Free Software
18 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
26 #define TARGET_LONG_BITS 64
28 #define TARGET_LONG_BITS 32
31 /* target supports implicit self modifying code */
32 #define TARGET_HAS_SMC
33 /* support for self modifying code even if the modified instruction is
34 close to the modifying instruction */
35 #define TARGET_HAS_PRECISE_SMC
39 #if defined(__i386__) && !defined(CONFIG_SOFTMMU)
68 /* segment descriptor fields */
69 #define DESC_G_MASK (1 << 23)
70 #define DESC_B_SHIFT 22
71 #define DESC_B_MASK (1 << DESC_B_SHIFT)
72 #define DESC_L_SHIFT 21 /* x86_64 only : 64 bit code segment */
73 #define DESC_L_MASK (1 << DESC_L_SHIFT)
74 #define DESC_AVL_MASK (1 << 20)
75 #define DESC_P_MASK (1 << 15)
76 #define DESC_DPL_SHIFT 13
77 #define DESC_S_MASK (1 << 12)
78 #define DESC_TYPE_SHIFT 8
79 #define DESC_A_MASK (1 << 8)
81 #define DESC_CS_MASK (1 << 11) /* 1=code segment 0=data segment */
82 #define DESC_C_MASK (1 << 10) /* code: conforming */
83 #define DESC_R_MASK (1 << 9) /* code: readable */
85 #define DESC_E_MASK (1 << 10) /* data: expansion direction */
86 #define DESC_W_MASK (1 << 9) /* data: writable */
88 #define DESC_TSS_BUSY_MASK (1 << 9)
102 #define TF_MASK 0x00000100
103 #define IF_MASK 0x00000200
104 #define DF_MASK 0x00000400
105 #define IOPL_MASK 0x00003000
106 #define NT_MASK 0x00004000
107 #define RF_MASK 0x00010000
108 #define VM_MASK 0x00020000
109 #define AC_MASK 0x00040000
110 #define VIF_MASK 0x00080000
111 #define VIP_MASK 0x00100000
112 #define ID_MASK 0x00200000
114 /* hidden flags - used internally by qemu to represent additionnal cpu
115 states. Only the CPL and INHIBIT_IRQ are not redundant. We avoid
116 using the IOPL_MASK, TF_MASK and VM_MASK bit position to ease oring
119 #define HF_CPL_SHIFT 0
120 /* true if soft mmu is being used */
121 #define HF_SOFTMMU_SHIFT 2
122 /* true if hardware interrupts must be disabled for next instruction */
123 #define HF_INHIBIT_IRQ_SHIFT 3
124 /* 16 or 32 segments */
125 #define HF_CS32_SHIFT 4
126 #define HF_SS32_SHIFT 5
127 /* zero base for DS, ES and SS : can be '0' only in 32 bit CS segment */
128 #define HF_ADDSEG_SHIFT 6
129 /* copy of CR0.PE (protected mode) */
130 #define HF_PE_SHIFT 7
131 #define HF_TF_SHIFT 8 /* must be same as eflags */
132 #define HF_MP_SHIFT 9 /* the order must be MP, EM, TS */
133 #define HF_EM_SHIFT 10
134 #define HF_TS_SHIFT 11
135 #define HF_IOPL_SHIFT 12 /* must be same as eflags */
136 #define HF_LMA_SHIFT 14 /* only used on x86_64: long mode active */
137 #define HF_CS64_SHIFT 15 /* only used on x86_64: 64 bit code segment */
138 #define HF_OSFXSR_SHIFT 16 /* CR4.OSFXSR */
139 #define HF_VM_SHIFT 17 /* must be same as eflags */
141 #define HF_CPL_MASK (3 << HF_CPL_SHIFT)
142 #define HF_SOFTMMU_MASK (1 << HF_SOFTMMU_SHIFT)
143 #define HF_INHIBIT_IRQ_MASK (1 << HF_INHIBIT_IRQ_SHIFT)
144 #define HF_CS32_MASK (1 << HF_CS32_SHIFT)
145 #define HF_SS32_MASK (1 << HF_SS32_SHIFT)
146 #define HF_ADDSEG_MASK (1 << HF_ADDSEG_SHIFT)
147 #define HF_PE_MASK (1 << HF_PE_SHIFT)
148 #define HF_TF_MASK (1 << HF_TF_SHIFT)
149 #define HF_MP_MASK (1 << HF_MP_SHIFT)
150 #define HF_EM_MASK (1 << HF_EM_SHIFT)
151 #define HF_TS_MASK (1 << HF_TS_SHIFT)
152 #define HF_LMA_MASK (1 << HF_LMA_SHIFT)
153 #define HF_CS64_MASK (1 << HF_CS64_SHIFT)
154 #define HF_OSFXSR_MASK (1 << HF_OSFXSR_SHIFT)
156 #define CR0_PE_MASK (1 << 0)
157 #define CR0_MP_MASK (1 << 1)
158 #define CR0_EM_MASK (1 << 2)
159 #define CR0_TS_MASK (1 << 3)
160 #define CR0_ET_MASK (1 << 4)
161 #define CR0_NE_MASK (1 << 5)
162 #define CR0_WP_MASK (1 << 16)
163 #define CR0_AM_MASK (1 << 18)
164 #define CR0_PG_MASK (1 << 31)
166 #define CR4_VME_MASK (1 << 0)
167 #define CR4_PVI_MASK (1 << 1)
168 #define CR4_TSD_MASK (1 << 2)
169 #define CR4_DE_MASK (1 << 3)
170 #define CR4_PSE_MASK (1 << 4)
171 #define CR4_PAE_MASK (1 << 5)
172 #define CR4_PGE_MASK (1 << 7)
173 #define CR4_PCE_MASK (1 << 8)
174 #define CR4_OSFXSR_MASK (1 << 9)
175 #define CR4_OSXMMEXCPT_MASK (1 << 10)
177 #define PG_PRESENT_BIT 0
179 #define PG_USER_BIT 2
182 #define PG_ACCESSED_BIT 5
183 #define PG_DIRTY_BIT 6
185 #define PG_GLOBAL_BIT 8
187 #define PG_PRESENT_MASK (1 << PG_PRESENT_BIT)
188 #define PG_RW_MASK (1 << PG_RW_BIT)
189 #define PG_USER_MASK (1 << PG_USER_BIT)
190 #define PG_PWT_MASK (1 << PG_PWT_BIT)
191 #define PG_PCD_MASK (1 << PG_PCD_BIT)
192 #define PG_ACCESSED_MASK (1 << PG_ACCESSED_BIT)
193 #define PG_DIRTY_MASK (1 << PG_DIRTY_BIT)
194 #define PG_PSE_MASK (1 << PG_PSE_BIT)
195 #define PG_GLOBAL_MASK (1 << PG_GLOBAL_BIT)
197 #define PG_ERROR_W_BIT 1
199 #define PG_ERROR_P_MASK 0x01
200 #define PG_ERROR_W_MASK (1 << PG_ERROR_W_BIT)
201 #define PG_ERROR_U_MASK 0x04
202 #define PG_ERROR_RSVD_MASK 0x08
204 #define MSR_IA32_APICBASE 0x1b
205 #define MSR_IA32_APICBASE_BSP (1<<8)
206 #define MSR_IA32_APICBASE_ENABLE (1<<11)
207 #define MSR_IA32_APICBASE_BASE (0xfffff<<12)
209 #define MSR_IA32_SYSENTER_CS 0x174
210 #define MSR_IA32_SYSENTER_ESP 0x175
211 #define MSR_IA32_SYSENTER_EIP 0x176
213 #define MSR_EFER 0xc0000080
215 #define MSR_EFER_SCE (1 << 0)
216 #define MSR_EFER_LME (1 << 8)
217 #define MSR_EFER_LMA (1 << 10)
218 #define MSR_EFER_NXE (1 << 11)
219 #define MSR_EFER_FFXSR (1 << 14)
221 #define MSR_STAR 0xc0000081
222 #define MSR_LSTAR 0xc0000082
223 #define MSR_CSTAR 0xc0000083
224 #define MSR_FMASK 0xc0000084
225 #define MSR_FSBASE 0xc0000100
226 #define MSR_GSBASE 0xc0000101
227 #define MSR_KERNELGSBASE 0xc0000102
229 /* cpuid_features bits */
230 #define CPUID_FP87 (1 << 0)
231 #define CPUID_VME (1 << 1)
232 #define CPUID_DE (1 << 2)
233 #define CPUID_PSE (1 << 3)
234 #define CPUID_TSC (1 << 4)
235 #define CPUID_MSR (1 << 5)
236 #define CPUID_PAE (1 << 6)
237 #define CPUID_MCE (1 << 7)
238 #define CPUID_CX8 (1 << 8)
239 #define CPUID_APIC (1 << 9)
240 #define CPUID_SEP (1 << 11) /* sysenter/sysexit */
241 #define CPUID_MTRR (1 << 12)
242 #define CPUID_PGE (1 << 13)
243 #define CPUID_MCA (1 << 14)
244 #define CPUID_CMOV (1 << 15)
246 #define CPUID_MMX (1 << 23)
247 #define CPUID_FXSR (1 << 24)
248 #define CPUID_SSE (1 << 25)
249 #define CPUID_SSE2 (1 << 26)
251 #define EXCP00_DIVZ 0
252 #define EXCP01_SSTP 1
254 #define EXCP03_INT3 3
255 #define EXCP04_INTO 4
256 #define EXCP05_BOUND 5
257 #define EXCP06_ILLOP 6
258 #define EXCP07_PREX 7
259 #define EXCP08_DBLE 8
260 #define EXCP09_XERR 9
261 #define EXCP0A_TSS 10
262 #define EXCP0B_NOSEG 11
263 #define EXCP0C_STACK 12
264 #define EXCP0D_GPF 13
265 #define EXCP0E_PAGE 14
266 #define EXCP10_COPR 16
267 #define EXCP11_ALGN 17
268 #define EXCP12_MCHK 18
271 CC_OP_DYNAMIC, /* must use dynamic code to get cc_op */
272 CC_OP_EFLAGS, /* all cc are explicitely computed, CC_SRC = flags */
274 CC_OP_MULB, /* modify all flags, C, O = (CC_SRC != 0) */
279 CC_OP_ADDB, /* modify all flags, CC_DST = res, CC_SRC = src1 */
284 CC_OP_ADCB, /* modify all flags, CC_DST = res, CC_SRC = src1 */
289 CC_OP_SUBB, /* modify all flags, CC_DST = res, CC_SRC = src1 */
294 CC_OP_SBBB, /* modify all flags, CC_DST = res, CC_SRC = src1 */
299 CC_OP_LOGICB, /* modify all flags, CC_DST = res */
304 CC_OP_INCB, /* modify all flags except, CC_DST = res, CC_SRC = C */
309 CC_OP_DECB, /* modify all flags except, CC_DST = res, CC_SRC = C */
314 CC_OP_SHLB, /* modify all flags, CC_DST = res, CC_SRC.msb = C */
319 CC_OP_SARB, /* modify all flags, CC_DST = res, CC_SRC.lsb = C */
327 #if (defined(__i386__) || defined(__x86_64__)) && !defined(_BSD)
328 #define USE_X86LDOUBLE
331 #ifdef USE_X86LDOUBLE
332 typedef long double CPU86_LDouble;
334 typedef double CPU86_LDouble;
337 typedef struct SegmentCache {
360 #ifdef WORDS_BIGENDIAN
361 #define XMM_B(n) _b[15 - (n)]
362 #define XMM_W(n) _w[7 - (n)]
363 #define XMM_L(n) _l[3 - (n)]
364 #define XMM_S(n) _s[3 - (n)]
365 #define XMM_Q(n) _q[1 - (n)]
366 #define XMM_D(n) _d[1 - (n)]
368 #define MMX_B(n) _b[7 - (n)]
369 #define MMX_W(n) _w[3 - (n)]
370 #define MMX_L(n) _l[1 - (n)]
372 #define XMM_B(n) _b[n]
373 #define XMM_W(n) _w[n]
374 #define XMM_L(n) _l[n]
375 #define XMM_S(n) _s[n]
376 #define XMM_Q(n) _q[n]
377 #define XMM_D(n) _d[n]
379 #define MMX_B(n) _b[n]
380 #define MMX_W(n) _w[n]
381 #define MMX_L(n) _l[n]
386 #define CPU_NB_REGS 16
388 #define CPU_NB_REGS 8
391 typedef struct CPUX86State {
392 #if TARGET_LONG_BITS > HOST_LONG_BITS
393 /* temporaries if we cannot store them in host registers */
394 target_ulong t0, t1, t2;
397 /* standard registers */
398 target_ulong regs[CPU_NB_REGS];
400 target_ulong eflags; /* eflags register. During CPU emulation, CC
401 flags and DF are set to zero because they are
404 /* emulator internal eflags handling */
408 int32_t df; /* D flag : 1 if D = 0, -1 if D = 1 */
409 uint32_t hflags; /* hidden flags, see HF_xxx constants */
412 unsigned int fpstt; /* top of stack index */
415 uint8_t fptags[8]; /* 0 = valid, 1 = empty */
417 #ifdef USE_X86LDOUBLE
418 CPU86_LDouble d __attribute__((aligned(16)));
425 /* emulator internal variables */
435 SegmentCache segs[6]; /* selector values */
438 SegmentCache gdt; /* only base and limit are used */
439 SegmentCache idt; /* only base and limit are used */
442 XMMReg xmm_regs[CPU_NB_REGS];
446 /* sysenter registers */
447 uint32_t sysenter_cs;
448 uint32_t sysenter_esp;
449 uint32_t sysenter_eip;
456 target_ulong kernelgsbase;
459 /* temporary data for USE_CODE_COPY mode */
463 int native_fp_regs; /* if true, the FPU state is in the native CPU regs */
466 /* exception/interrupt handling */
470 int exception_is_int;
471 target_ulong exception_next_eip;
472 struct TranslationBlock *current_tb; /* currently executing TB */
473 target_ulong cr[5]; /* NOTE: cr1 is unused */
474 target_ulong dr[8]; /* debug registers */
475 int interrupt_request;
476 int user_mode_only; /* user mode only simulation */
480 /* soft mmu support */
481 /* in order to avoid passing too many arguments to the memory
482 write helpers, we store some rarely used information in the CPU
484 unsigned long mem_write_pc; /* host pc at which the memory was
486 target_ulong mem_write_vaddr; /* target virtual addr at which the
487 memory was written */
488 /* 0 = kernel, 1 = user */
489 CPUTLBEntry tlb_read[2][CPU_TLB_SIZE];
490 CPUTLBEntry tlb_write[2][CPU_TLB_SIZE];
492 /* from this point: preserved by CPU reset */
493 /* ice debug support */
494 target_ulong breakpoints[MAX_BREAKPOINTS];
496 int singlestep_enabled;
498 /* processor features (e.g. for CPUID insn) */
499 uint32_t cpuid_vendor1;
500 uint32_t cpuid_vendor2;
501 uint32_t cpuid_vendor3;
502 uint32_t cpuid_version;
503 uint32_t cpuid_features;
505 /* in order to simplify APIC support, we leave this pointer to the
507 struct APICState *apic_state;
513 void cpu_x86_outb(CPUX86State *env, int addr, int val);
514 void cpu_x86_outw(CPUX86State *env, int addr, int val);
515 void cpu_x86_outl(CPUX86State *env, int addr, int val);
516 int cpu_x86_inb(CPUX86State *env, int addr);
517 int cpu_x86_inw(CPUX86State *env, int addr);
518 int cpu_x86_inl(CPUX86State *env, int addr);
521 CPUX86State *cpu_x86_init(void);
522 int cpu_x86_exec(CPUX86State *s);
523 void cpu_x86_close(CPUX86State *s);
524 int cpu_get_pic_interrupt(CPUX86State *s);
525 /* MSDOS compatibility mode FPU exception support */
526 void cpu_set_ferr(CPUX86State *s);
528 /* this function must always be used to load data in the segment
529 cache: it synchronizes the hflags with the segment cache values */
530 static inline void cpu_x86_load_seg_cache(CPUX86State *env,
531 int seg_reg, unsigned int selector,
532 uint32_t base, unsigned int limit,
536 unsigned int new_hflags;
538 sc = &env->segs[seg_reg];
539 sc->selector = selector;
544 /* update the hidden flags */
546 if (seg_reg == R_CS) {
548 if ((env->hflags & HF_LMA_MASK) && (flags & DESC_L_MASK)) {
550 env->hflags |= HF_CS32_MASK | HF_SS32_MASK | HF_CS64_MASK;
551 env->hflags &= ~(HF_ADDSEG_MASK);
555 /* legacy / compatibility case */
556 new_hflags = (env->segs[R_CS].flags & DESC_B_MASK)
557 >> (DESC_B_SHIFT - HF_CS32_SHIFT);
558 env->hflags = (env->hflags & ~(HF_CS32_MASK | HF_CS64_MASK)) |
562 new_hflags = (env->segs[R_SS].flags & DESC_B_MASK)
563 >> (DESC_B_SHIFT - HF_SS32_SHIFT);
564 if (env->hflags & HF_CS64_MASK) {
565 /* zero base assumed for DS, ES and SS in long mode */
566 } else if (!(env->cr[0] & CR0_PE_MASK) ||
567 (env->eflags & VM_MASK) ||
568 !(env->hflags & HF_CS32_MASK)) {
569 /* XXX: try to avoid this test. The problem comes from the
570 fact that is real mode or vm86 mode we only modify the
571 'base' and 'selector' fields of the segment cache to go
572 faster. A solution may be to force addseg to one in
574 new_hflags |= HF_ADDSEG_MASK;
576 new_hflags |= ((env->segs[R_DS].base |
577 env->segs[R_ES].base |
578 env->segs[R_SS].base) != 0) <<
581 env->hflags = (env->hflags &
582 ~(HF_SS32_MASK | HF_ADDSEG_MASK)) | new_hflags;
586 /* wrapper, just in case memory mappings must be changed */
587 static inline void cpu_x86_set_cpl(CPUX86State *s, int cpl)
590 s->hflags = (s->hflags & ~HF_CPL_MASK) | cpl;
592 #error HF_CPL_MASK is hardcoded
596 /* used for debug or cpu save/restore */
597 void cpu_get_fp80(uint64_t *pmant, uint16_t *pexp, CPU86_LDouble f);
598 CPU86_LDouble cpu_set_fp80(uint64_t mant, uint16_t upper);
600 /* the following helpers are only usable in user mode simulation as
601 they can trigger unexpected exceptions */
602 void cpu_x86_load_seg(CPUX86State *s, int seg_reg, int selector);
603 void cpu_x86_fsave(CPUX86State *s, uint8_t *ptr, int data32);
604 void cpu_x86_frstor(CPUX86State *s, uint8_t *ptr, int data32);
606 /* you can call this signal handler from your SIGBUS and SIGSEGV
607 signal handlers to inform the virtual CPU of exceptions. non zero
608 is returned if the signal was handled by the virtual CPU. */
610 int cpu_x86_signal_handler(int host_signum, struct siginfo *info,
612 void cpu_x86_set_a20(CPUX86State *env, int a20_state);
614 uint64_t cpu_get_tsc(CPUX86State *env);
616 void cpu_set_apic_base(CPUX86State *env, uint64_t val);
617 uint64_t cpu_get_apic_base(CPUX86State *env);
619 /* will be suppressed */
620 void cpu_x86_update_cr0(CPUX86State *env, uint32_t new_cr0);
623 #define X86_DUMP_FPU 0x0001 /* dump FPU state too */
624 #define X86_DUMP_CCOP 0x0002 /* dump qemu flag cache */
626 #define TARGET_PAGE_BITS 12
629 #endif /* CPU_I386_H */