4
* Copyright (c) 2003 Fabrice Bellard
5
* Copyright (c) 2006 Pierre d'Herbemont
7
* This program is free software; you can redistribute it and/or modify
8
* it under the terms of the GNU General Public License as published by
9
* the Free Software Foundation; either version 2 of the License, or
10
* (at your option) any later version.
12
* This program is distributed in the hope that it will be useful,
13
* but WITHOUT ANY WARRANTY; without even the implied warranty of
14
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15
* GNU General Public License for more details.
17
* You should have received a copy of the GNU General Public License
18
* along with this program; if not, write to the Free Software
19
* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
28
#include <sys/syscall.h>
33
#define DEBUG_LOGFILE "/tmp/qemu.log"
36
#include <crt_externs.h>
37
# define environ (*_NSGetEnviron())
40
#include <mach/mach_init.h>
41
#include <mach/vm_map.h>
43
const char *interp_prefix = "";
45
asm(".zerofill __STD_PROG_ZONE, __STD_PROG_ZONE, __std_prog_zone, 0x0dfff000");
47
/* XXX: on x86 MAP_GROWSDOWN only works if ESP <= address + 32, so
48
we allocate a bigger stack. Need a better solution, for example
49
by remapping the process stack directly at the right place */
50
unsigned long stack_size = 512 * 1024;
52
void qerror(const char *fmt, ...)
57
vfprintf(stderr, fmt, ap);
59
fprintf(stderr, "\n");
63
void gemu_log(const char *fmt, ...)
68
vfprintf(stderr, fmt, ap);
72
void cpu_outb(CPUState *env, int addr, int val)
74
fprintf(stderr, "outb: port=0x%04x, data=%02x\n", addr, val);
77
void cpu_outw(CPUState *env, int addr, int val)
79
fprintf(stderr, "outw: port=0x%04x, data=%04x\n", addr, val);
82
void cpu_outl(CPUState *env, int addr, int val)
84
fprintf(stderr, "outl: port=0x%04x, data=%08x\n", addr, val);
87
int cpu_inb(CPUState *env, int addr)
89
fprintf(stderr, "inb: port=0x%04x\n", addr);
93
int cpu_inw(CPUState *env, int addr)
95
fprintf(stderr, "inw: port=0x%04x\n", addr);
99
int cpu_inl(CPUState *env, int addr)
101
fprintf(stderr, "inl: port=0x%04x\n", addr);
105
int cpu_get_pic_interrupt(CPUState *env)
111
static inline uint64_t cpu_ppc_get_tb (CPUState *env)
117
uint32_t cpu_ppc_load_tbl (CPUState *env)
119
return cpu_ppc_get_tb(env) & 0xFFFFFFFF;
122
uint32_t cpu_ppc_load_tbu (CPUState *env)
124
return cpu_ppc_get_tb(env) >> 32;
127
uint32_t cpu_ppc_load_atbl (CPUState *env)
129
return cpu_ppc_get_tb(env) & 0xFFFFFFFF;
132
uint32_t cpu_ppc_load_atbu (CPUState *env)
134
return cpu_ppc_get_tb(env) >> 32;
137
uint32_t cpu_ppc601_load_rtcu (CPUState *env)
139
cpu_ppc_load_tbu(env);
142
uint32_t cpu_ppc601_load_rtcl (CPUState *env)
144
return cpu_ppc_load_tbl(env) & 0x3FFFFF80;
147
/* XXX: to be fixed */
148
int ppc_dcr_read (ppc_dcr_t *dcr_env, int dcrn, target_ulong *valp)
153
int ppc_dcr_write (ppc_dcr_t *dcr_env, int dcrn, target_ulong val)
158
#define EXCP_DUMP(env, fmt, args...) \
160
fprintf(stderr, fmt , ##args); \
161
cpu_dump_state(env, stderr, fprintf, 0); \
162
if (loglevel != 0) { \
163
fprintf(logfile, fmt , ##args); \
164
cpu_dump_state(env, logfile, fprintf, 0); \
168
void cpu_loop(CPUPPCState *env)
172
target_siginfo_t info;
175
trapnr = cpu_ppc_exec(env);
177
case POWERPC_EXCP_NONE:
180
case POWERPC_EXCP_CRITICAL: /* Critical input */
181
cpu_abort(env, "Critical interrupt while in user mode. "
184
case POWERPC_EXCP_MCHECK: /* Machine check exception */
185
cpu_abort(env, "Machine check exception while in user mode. "
188
case POWERPC_EXCP_DSI: /* Data storage exception */
190
/* To deal with multiple qemu header version as host for the darwin-user code */
193
EXCP_DUMP(env, "Invalid data memory access: 0x" ADDRX "\n",
195
/* Handle this via the gdb */
196
gdb_handlesig (env, SIGSEGV);
198
info.si_addr = (void*)env->nip;
199
queue_signal(info.si_signo, &info);
201
case POWERPC_EXCP_ISI: /* Instruction storage exception */
202
EXCP_DUMP(env, "Invalid instruction fetch: 0x\n" ADDRX "\n",
204
/* Handle this via the gdb */
205
gdb_handlesig (env, SIGSEGV);
207
info.si_addr = (void*)(env->nip - 4);
208
queue_signal(info.si_signo, &info);
210
case POWERPC_EXCP_EXTERNAL: /* External input */
211
cpu_abort(env, "External interrupt while in user mode. "
214
case POWERPC_EXCP_ALIGN: /* Alignment exception */
215
EXCP_DUMP(env, "Unaligned memory access\n");
217
info.si_code = BUS_ADRALN;
218
info.si_addr = (void*)(env->nip - 4);
219
queue_signal(info.si_signo, &info);
221
case POWERPC_EXCP_PROGRAM: /* Program exception */
222
/* XXX: check this */
223
switch (env->error_code & ~0xF) {
224
case POWERPC_EXCP_FP:
225
EXCP_DUMP(env, "Floating point program exception\n");
227
info.si_signo = SIGFPE;
229
switch (env->error_code & 0xF) {
230
case POWERPC_EXCP_FP_OX:
231
info.si_code = FPE_FLTOVF;
233
case POWERPC_EXCP_FP_UX:
234
info.si_code = FPE_FLTUND;
236
case POWERPC_EXCP_FP_ZX:
237
case POWERPC_EXCP_FP_VXZDZ:
238
info.si_code = FPE_FLTDIV;
240
case POWERPC_EXCP_FP_XX:
241
info.si_code = FPE_FLTRES;
243
case POWERPC_EXCP_FP_VXSOFT:
244
info.si_code = FPE_FLTINV;
246
case POWERPC_EXCP_FP_VXSNAN:
247
case POWERPC_EXCP_FP_VXISI:
248
case POWERPC_EXCP_FP_VXIDI:
249
case POWERPC_EXCP_FP_VXIMZ:
250
case POWERPC_EXCP_FP_VXVC:
251
case POWERPC_EXCP_FP_VXSQRT:
252
case POWERPC_EXCP_FP_VXCVI:
253
info.si_code = FPE_FLTSUB;
256
EXCP_DUMP(env, "Unknown floating point exception (%02x)\n",
261
case POWERPC_EXCP_INVAL:
262
EXCP_DUMP(env, "Invalid instruction\n");
263
info.si_signo = SIGILL;
265
switch (env->error_code & 0xF) {
266
case POWERPC_EXCP_INVAL_INVAL:
267
info.si_code = ILL_ILLOPC;
269
case POWERPC_EXCP_INVAL_LSWX:
270
info.si_code = ILL_ILLOPN;
272
case POWERPC_EXCP_INVAL_SPR:
273
info.si_code = ILL_PRVREG;
275
case POWERPC_EXCP_INVAL_FP:
276
info.si_code = ILL_COPROC;
279
EXCP_DUMP(env, "Unknown invalid operation (%02x)\n",
280
env->error_code & 0xF);
281
info.si_code = ILL_ILLADR;
284
/* Handle this via the gdb */
285
gdb_handlesig (env, SIGSEGV);
287
case POWERPC_EXCP_PRIV:
288
EXCP_DUMP(env, "Privilege violation\n");
289
info.si_signo = SIGILL;
291
switch (env->error_code & 0xF) {
292
case POWERPC_EXCP_PRIV_OPC:
293
info.si_code = ILL_PRVOPC;
295
case POWERPC_EXCP_PRIV_REG:
296
info.si_code = ILL_PRVREG;
299
EXCP_DUMP(env, "Unknown privilege violation (%02x)\n",
300
env->error_code & 0xF);
301
info.si_code = ILL_PRVOPC;
305
case POWERPC_EXCP_TRAP:
306
cpu_abort(env, "Tried to call a TRAP\n");
309
/* Should not happen ! */
310
cpu_abort(env, "Unknown program exception (%02x)\n",
314
info.si_addr = (void*)(env->nip - 4);
315
queue_signal(info.si_signo, &info);
317
case POWERPC_EXCP_FPU: /* Floating-point unavailable exception */
318
EXCP_DUMP(env, "No floating point allowed\n");
319
info.si_signo = SIGILL;
321
info.si_code = ILL_COPROC;
322
info.si_addr = (void*)(env->nip - 4);
323
queue_signal(info.si_signo, &info);
325
case POWERPC_EXCP_SYSCALL: /* System call exception */
326
cpu_abort(env, "Syscall exception while in user mode. "
329
case POWERPC_EXCP_APU: /* Auxiliary processor unavailable */
330
EXCP_DUMP(env, "No APU instruction allowed\n");
331
info.si_signo = SIGILL;
333
info.si_code = ILL_COPROC;
334
info.si_addr = (void*)(env->nip - 4);
335
queue_signal(info.si_signo, &info);
337
case POWERPC_EXCP_DECR: /* Decrementer exception */
338
cpu_abort(env, "Decrementer interrupt while in user mode. "
341
case POWERPC_EXCP_FIT: /* Fixed-interval timer interrupt */
342
cpu_abort(env, "Fix interval timer interrupt while in user mode. "
345
case POWERPC_EXCP_WDT: /* Watchdog timer interrupt */
346
cpu_abort(env, "Watchdog timer interrupt while in user mode. "
349
case POWERPC_EXCP_DTLB: /* Data TLB error */
350
cpu_abort(env, "Data TLB exception while in user mode. "
353
case POWERPC_EXCP_ITLB: /* Instruction TLB error */
354
cpu_abort(env, "Instruction TLB exception while in user mode. "
357
case POWERPC_EXCP_DEBUG: /* Debug interrupt */
358
gdb_handlesig (env, SIGTRAP);
360
case POWERPC_EXCP_SPEU: /* SPE/embedded floating-point unavail. */
361
EXCP_DUMP(env, "No SPE/floating-point instruction allowed\n");
362
info.si_signo = SIGILL;
364
info.si_code = ILL_COPROC;
365
info.si_addr = (void*)(env->nip - 4);
366
queue_signal(info.si_signo, &info);
368
case POWERPC_EXCP_EFPDI: /* Embedded floating-point data IRQ */
369
cpu_abort(env, "Embedded floating-point data IRQ not handled\n");
371
case POWERPC_EXCP_EFPRI: /* Embedded floating-point round IRQ */
372
cpu_abort(env, "Embedded floating-point round IRQ not handled\n");
374
case POWERPC_EXCP_EPERFM: /* Embedded performance monitor IRQ */
375
cpu_abort(env, "Performance monitor exception not handled\n");
377
case POWERPC_EXCP_DOORI: /* Embedded doorbell interrupt */
378
cpu_abort(env, "Doorbell interrupt while in user mode. "
381
case POWERPC_EXCP_DOORCI: /* Embedded doorbell critical interrupt */
382
cpu_abort(env, "Doorbell critical interrupt while in user mode. "
385
case POWERPC_EXCP_RESET: /* System reset exception */
386
cpu_abort(env, "Reset interrupt while in user mode. "
389
case POWERPC_EXCP_DSEG: /* Data segment exception */
390
cpu_abort(env, "Data segment exception while in user mode. "
393
case POWERPC_EXCP_ISEG: /* Instruction segment exception */
394
cpu_abort(env, "Instruction segment exception "
395
"while in user mode. Aborting\n");
397
case POWERPC_EXCP_HDECR: /* Hypervisor decrementer exception */
398
cpu_abort(env, "Hypervisor decrementer interrupt "
399
"while in user mode. Aborting\n");
401
case POWERPC_EXCP_TRACE: /* Trace exception */
403
* we use this exception to emulate step-by-step execution mode.
406
case POWERPC_EXCP_HDSI: /* Hypervisor data storage exception */
407
cpu_abort(env, "Hypervisor data storage exception "
408
"while in user mode. Aborting\n");
410
case POWERPC_EXCP_HISI: /* Hypervisor instruction storage excp */
411
cpu_abort(env, "Hypervisor instruction storage exception "
412
"while in user mode. Aborting\n");
414
case POWERPC_EXCP_HDSEG: /* Hypervisor data segment exception */
415
cpu_abort(env, "Hypervisor data segment exception "
416
"while in user mode. Aborting\n");
418
case POWERPC_EXCP_HISEG: /* Hypervisor instruction segment excp */
419
cpu_abort(env, "Hypervisor instruction segment exception "
420
"while in user mode. Aborting\n");
422
case POWERPC_EXCP_VPU: /* Vector unavailable exception */
423
EXCP_DUMP(env, "No Altivec instructions allowed\n");
424
info.si_signo = SIGILL;
426
info.si_code = ILL_COPROC;
427
info.si_addr = (void*)(env->nip - 4);
428
queue_signal(info.si_signo, &info);
430
case POWERPC_EXCP_PIT: /* Programmable interval timer IRQ */
431
cpu_abort(env, "Programable interval timer interrupt "
432
"while in user mode. Aborting\n");
434
case POWERPC_EXCP_IO: /* IO error exception */
435
cpu_abort(env, "IO error exception while in user mode. "
438
case POWERPC_EXCP_RUNM: /* Run mode exception */
439
cpu_abort(env, "Run mode exception while in user mode. "
442
case POWERPC_EXCP_EMUL: /* Emulation trap exception */
443
cpu_abort(env, "Emulation trap exception not handled\n");
445
case POWERPC_EXCP_IFTLB: /* Instruction fetch TLB error */
446
cpu_abort(env, "Instruction fetch TLB exception "
447
"while in user-mode. Aborting");
449
case POWERPC_EXCP_DLTLB: /* Data load TLB miss */
450
cpu_abort(env, "Data load TLB exception while in user-mode. "
453
case POWERPC_EXCP_DSTLB: /* Data store TLB miss */
454
cpu_abort(env, "Data store TLB exception while in user-mode. "
457
case POWERPC_EXCP_FPA: /* Floating-point assist exception */
458
cpu_abort(env, "Floating-point assist exception not handled\n");
460
case POWERPC_EXCP_IABR: /* Instruction address breakpoint */
461
cpu_abort(env, "Instruction address breakpoint exception "
464
case POWERPC_EXCP_SMI: /* System management interrupt */
465
cpu_abort(env, "System management interrupt while in user mode. "
468
case POWERPC_EXCP_THERM: /* Thermal interrupt */
469
cpu_abort(env, "Thermal interrupt interrupt while in user mode. "
472
case POWERPC_EXCP_PERFM: /* Embedded performance monitor IRQ */
473
cpu_abort(env, "Performance monitor exception not handled\n");
475
case POWERPC_EXCP_VPUA: /* Vector assist exception */
476
cpu_abort(env, "Vector assist exception not handled\n");
478
case POWERPC_EXCP_SOFTP: /* Soft patch exception */
479
cpu_abort(env, "Soft patch exception not handled\n");
481
case POWERPC_EXCP_MAINT: /* Maintenance exception */
482
cpu_abort(env, "Maintenance exception while in user mode. "
485
case POWERPC_EXCP_STOP: /* stop translation */
486
/* We did invalidate the instruction cache. Go on */
488
case POWERPC_EXCP_BRANCH: /* branch instruction: */
489
/* We just stopped because of a branch. Go on */
491
case POWERPC_EXCP_SYSCALL_USER:
492
/* system call in user-mode emulation */
494
if(((int)env->gpr[0]) <= SYS_MAXSYSCALL && ((int)env->gpr[0])>0)
495
ret = do_unix_syscall(env, env->gpr[0]/*, env->gpr[3], env->gpr[4],
496
env->gpr[5], env->gpr[6], env->gpr[7],
497
env->gpr[8], env->gpr[9], env->gpr[10]*/);
498
else if(((int)env->gpr[0])<0)
499
ret = do_mach_syscall(env, env->gpr[0], env->gpr[3], env->gpr[4],
500
env->gpr[5], env->gpr[6], env->gpr[7],
501
env->gpr[8], env->gpr[9], env->gpr[10]);
503
ret = do_thread_syscall(env, env->gpr[0], env->gpr[3], env->gpr[4],
504
env->gpr[5], env->gpr[6], env->gpr[7],
505
env->gpr[8], env->gpr[9], env->gpr[10]);
507
/* Unix syscall error signaling */
508
if(((int)env->gpr[0]) <= SYS_MAXSYSCALL && ((int)env->gpr[0])>0)
520
/* just indicate that signals should be handled asap */
523
cpu_abort(env, "Unknown exception 0x%d. Aborting\n", trapnr);
526
process_pending_signals(env);
534
/***********************************************************/
535
/* CPUX86 core interface */
537
uint64_t cpu_get_tsc(CPUX86State *env)
539
return cpu_get_real_ticks();
543
write_dt(void *ptr, unsigned long addr, unsigned long limit,
547
e1 = (addr << 16) | (limit & 0xffff);
548
e2 = ((addr >> 16) & 0xff) | (addr & 0xff000000) | (limit & 0x000f0000);
550
stl((uint8_t *)ptr, e1);
551
stl((uint8_t *)ptr + 4, e2);
554
static void set_gate(void *ptr, unsigned int type, unsigned int dpl,
555
unsigned long addr, unsigned int sel)
558
e1 = (addr & 0xffff) | (sel << 16);
559
e2 = (addr & 0xffff0000) | 0x8000 | (dpl << 13) | (type << 8);
560
stl((uint8_t *)ptr, e1);
561
stl((uint8_t *)ptr + 4, e2);
564
#define GDT_TABLE_SIZE 14
565
#define LDT_TABLE_SIZE 15
566
#define IDT_TABLE_SIZE 256
568
uint64_t gdt_table[GDT_TABLE_SIZE];
569
uint64_t ldt_table[LDT_TABLE_SIZE];
570
uint64_t idt_table[IDT_TABLE_SIZE];
571
uint32_t tss[TSS_SIZE];
573
/* only dpl matters as we do only user space emulation */
574
static void set_idt(int n, unsigned int dpl)
576
set_gate(idt_table + n, 0, dpl, 0, 0);
579
/* ABI convention: after a syscall if there was an error the CF flag is set */
580
static inline void set_error(CPUX86State *env, int ret)
583
env->eflags = env->eflags | 0x1;
586
env->regs[R_EAX] = ret;
589
void cpu_loop(CPUX86State *env)
594
target_siginfo_t info;
597
trapnr = cpu_x86_exec(env);
598
uint32_t *params = (uint32_t *)env->regs[R_ESP];
600
case 0x79: /* Our commpage hack back door exit is here */
601
do_commpage(env, env->eip, *(params + 1), *(params + 2),
602
*(params + 3), *(params + 4),
603
*(params + 5), *(params + 6),
604
*(params + 7), *(params + 8));
606
case 0x81: /* mach syscall */
608
ret = do_mach_syscall(env, env->regs[R_EAX],
609
*(params + 1), *(params + 2),
610
*(params + 3), *(params + 4),
611
*(params + 5), *(params + 6),
612
*(params + 7), *(params + 8));
616
case 0x90: /* unix backdoor */
618
/* after sysenter, stack is in R_ECX, new eip in R_EDX (sysexit will flip them back)*/
619
int saved_stack = env->regs[R_ESP];
620
env->regs[R_ESP] = env->regs[R_ECX];
622
ret = do_unix_syscall(env, env->regs[R_EAX]);
624
env->regs[R_ECX] = env->regs[R_ESP];
625
env->regs[R_ESP] = saved_stack;
630
case 0x80: /* unix syscall */
632
ret = do_unix_syscall(env, env->regs[R_EAX]/*,
633
*(params + 1), *(params + 2),
634
*(params + 3), *(params + 4),
635
*(params + 5), *(params + 6),
636
*(params + 7), *(params + 8)*/);
640
case 0x82: /* thread syscall */
642
ret = do_thread_syscall(env, env->regs[R_EAX],
643
*(params + 1), *(params + 2),
644
*(params + 3), *(params + 4),
645
*(params + 5), *(params + 6),
646
*(params + 7), *(params + 8));
652
info.si_signo = SIGBUS;
654
info.si_code = BUS_NOOP;
656
gdb_handlesig (env, SIGBUS);
657
queue_signal(info.si_signo, &info);
660
info.si_signo = SIGSEGV;
662
info.si_code = SEGV_NOOP;
664
gdb_handlesig (env, SIGSEGV);
665
queue_signal(info.si_signo, &info);
668
info.si_signo = SIGSEGV;
670
if (!(env->error_code & 1))
671
info.si_code = SEGV_MAPERR;
673
info.si_code = SEGV_ACCERR;
674
info.si_addr = (void*)env->cr[2];
675
gdb_handlesig (env, SIGSEGV);
676
queue_signal(info.si_signo, &info);
679
/* division by zero */
680
info.si_signo = SIGFPE;
682
info.si_code = FPE_INTDIV;
683
info.si_addr = (void*)env->eip;
684
gdb_handlesig (env, SIGFPE);
685
queue_signal(info.si_signo, &info);
689
info.si_signo = SIGTRAP;
691
info.si_code = TRAP_BRKPT;
692
info.si_addr = (void*)env->eip;
693
gdb_handlesig (env, SIGTRAP);
694
queue_signal(info.si_signo, &info);
698
info.si_signo = SIGSEGV;
700
info.si_code = SEGV_NOOP;
702
gdb_handlesig (env, SIGSEGV);
703
queue_signal(info.si_signo, &info);
706
info.si_signo = SIGILL;
708
info.si_code = ILL_ILLOPN;
709
info.si_addr = (void*)env->eip;
710
gdb_handlesig (env, SIGILL);
711
queue_signal(info.si_signo, &info);
714
/* just indicate that signals should be handled asap */
720
sig = gdb_handlesig (env, SIGTRAP);
725
info.si_code = TRAP_BRKPT;
726
queue_signal(info.si_signo, &info);
731
pc = (void*)(env->segs[R_CS].base + env->eip);
732
fprintf(stderr, "qemu: 0x%08lx: unhandled CPU exception 0x%x - aborting\n",
736
process_pending_signals(env);
743
printf("qemu-" TARGET_ARCH " version " QEMU_VERSION ", Copyright (c) 2003-2004 Fabrice Bellard\n"
744
"usage: qemu-" TARGET_ARCH " [-h] [-d opts] [-L path] [-s size] program [arguments...]\n"
745
"Darwin CPU emulator (compiled for %s emulation)\n"
747
"-h print this help\n"
748
"-L path set the %s library path (default='%s')\n"
749
"-s size set the stack size in bytes (default=%ld)\n"
752
"-d options activate log (logfile='%s')\n"
753
"-g wait for gdb on port 1234\n"
754
"-p pagesize set the host page size to 'pagesize'\n",
763
/* XXX: currently only used for async signals (see signal.c) */
764
CPUState *global_env;
765
/* used only if single thread */
766
CPUState *cpu_single_env = NULL;
768
/* used to free thread contexts */
769
TaskState *first_task_state;
771
int main(int argc, char **argv)
773
const char *filename;
774
struct target_pt_regs regs1, *regs = ®s1;
775
TaskState ts1, *ts = &ts1;
778
short use_gdbstub = 0;
780
const char *cpu_model;
786
cpu_set_log_filename(DEBUG_LOGFILE);
797
if (!strcmp(r, "-")) {
799
} else if (!strcmp(r, "d")) {
807
mask = cpu_str_to_log_mask(r);
809
printf("Log items (comma separated):\n");
810
for(item = cpu_log_items; item->mask != 0; item++) {
811
printf("%-10s %s\n", item->name, item->help);
816
} else if (!strcmp(r, "s")) {
818
stack_size = strtol(r, (char **)&r, 0);
822
stack_size *= 1024 * 1024;
823
else if (*r == 'k' || *r == 'K')
825
} else if (!strcmp(r, "L")) {
826
interp_prefix = argv[optind++];
827
} else if (!strcmp(r, "p")) {
828
qemu_host_page_size = atoi(argv[optind++]);
829
if (qemu_host_page_size == 0 ||
830
(qemu_host_page_size & (qemu_host_page_size - 1)) != 0) {
831
fprintf(stderr, "page size must be a power of two\n");
835
if (!strcmp(r, "g")) {
837
} else if (!strcmp(r, "cpu")) {
838
cpu_model = argv[optind++];
839
if (strcmp(cpu_model, "?") == 0) {
840
/* XXX: implement xxx_cpu_list for targets that still miss it */
841
#if defined(cpu_list)
842
cpu_list(stdout, &fprintf);
853
filename = argv[optind];
856
memset(regs, 0, sizeof(struct target_pt_regs));
858
if (cpu_model == NULL) {
859
#if defined(TARGET_I386)
861
cpu_model = "qemu64";
863
cpu_model = "qemu32";
865
#elif defined(TARGET_PPC)
872
#error unsupported CPU
876
/* NOTE: we need to init the CPU at this stage to get
877
qemu_host_page_size */
878
env = cpu_init(cpu_model);
880
printf("Starting %s with qemu\n----------------\n", filename);
884
if (mach_exec(filename, argv+optind, environ, regs) != 0) {
885
printf("Error loading %s\n", filename);
893
/* build Task State */
894
memset(ts, 0, sizeof(TaskState));
897
env->user_mode_only = 1;
899
#if defined(TARGET_I386)
900
cpu_x86_set_cpl(env, 3);
902
env->cr[0] = CR0_PG_MASK | CR0_WP_MASK | CR0_PE_MASK;
903
env->hflags |= HF_PE_MASK;
905
if (env->cpuid_features & CPUID_SSE) {
906
env->cr[4] |= CR4_OSFXSR_MASK;
907
env->hflags |= HF_OSFXSR_MASK;
910
/* flags setup : we activate the IRQs by default as in user mode */
911
env->eflags |= IF_MASK;
913
/* darwin register setup */
914
env->regs[R_EAX] = regs->eax;
915
env->regs[R_EBX] = regs->ebx;
916
env->regs[R_ECX] = regs->ecx;
917
env->regs[R_EDX] = regs->edx;
918
env->regs[R_ESI] = regs->esi;
919
env->regs[R_EDI] = regs->edi;
920
env->regs[R_EBP] = regs->ebp;
921
env->regs[R_ESP] = regs->esp;
922
env->eip = regs->eip;
924
/* Darwin LDT setup */
925
/* 2 - User code segment
926
3 - User data segment
928
bzero(ldt_table, LDT_TABLE_SIZE * sizeof(ldt_table[0]));
929
env->ldt.base = (uint32_t) ldt_table;
930
env->ldt.limit = sizeof(ldt_table) - 1;
932
write_dt(ldt_table + 2, 0, 0xfffff,
933
DESC_G_MASK | DESC_B_MASK | DESC_P_MASK | DESC_S_MASK |
934
(3 << DESC_DPL_SHIFT) | (0xa << DESC_TYPE_SHIFT));
935
write_dt(ldt_table + 3, 0, 0xfffff,
936
DESC_G_MASK | DESC_B_MASK | DESC_P_MASK | DESC_S_MASK |
937
(3 << DESC_DPL_SHIFT) | (0x2 << DESC_TYPE_SHIFT));
938
write_dt(ldt_table + 4, 0, 0xfffff,
939
DESC_G_MASK | DESC_B_MASK | DESC_P_MASK | DESC_S_MASK |
940
(3 << DESC_DPL_SHIFT) | (0x2 << DESC_TYPE_SHIFT));
943
* has changed a lot between old Darwin/x86 (pre-Mac Intel) and Mac OS X/x86,
944
now everything is done via int 0x81(mach) int 0x82 (thread) and sysenter/sysexit(unix) */
945
bzero(gdt_table, sizeof(gdt_table));
946
env->gdt.base = (uint32_t)gdt_table;
947
env->gdt.limit = sizeof(gdt_table) - 1;
949
/* Set up a back door to handle sysenter syscalls (unix) */
950
char * syscallbackdoor = malloc(64);
951
page_set_flags((int)syscallbackdoor, (int)syscallbackdoor + 64, PROT_EXEC | PROT_READ | PAGE_VALID);
954
syscallbackdoor[i++] = 0xcd;
955
syscallbackdoor[i++] = 0x90; /* int 0x90 */
956
syscallbackdoor[i++] = 0x0F;
957
syscallbackdoor[i++] = 0x35; /* sysexit */
959
/* Darwin sysenter/sysexit setup */
960
env->sysenter_cs = 0x1; //XXX
961
env->sysenter_eip = (int)syscallbackdoor;
962
env->sysenter_esp = (int)malloc(64);
965
This must match up with GDT[4] */
966
env->tr.base = (uint32_t) tss;
967
env->tr.limit = sizeof(tss) - 1;
968
env->tr.flags = DESC_P_MASK | (0x9 << DESC_TYPE_SHIFT);
969
stw(tss + 2, 0x10); // ss0 = 0x10 = GDT[2] = Kernel Data Segment
971
/* Darwin interrupt setup */
972
bzero(idt_table, sizeof(idt_table));
973
env->idt.base = (uint32_t) idt_table;
974
env->idt.limit = sizeof(idt_table) - 1;
995
/* Syscalls are done via
996
int 0x80 (unix) (rarely used)
999
int 0x83 (diag) (not handled here)
1000
sysenter/sysexit (unix) -> we redirect that to int 0x90 */
1001
set_idt(0x79, 3); /* Commpage hack, here is our backdoor interrupt */
1002
set_idt(0x80, 3); /* Unix Syscall */
1003
set_idt(0x81, 3); /* Mach Syscalls */
1004
set_idt(0x82, 3); /* thread Syscalls */
1006
set_idt(0x90, 3); /* qemu-darwin-user's Unix syscalls backdoor */
1009
cpu_x86_load_seg(env, R_CS, __USER_CS);
1010
cpu_x86_load_seg(env, R_DS, __USER_DS);
1011
cpu_x86_load_seg(env, R_ES, __USER_DS);
1012
cpu_x86_load_seg(env, R_SS, __USER_DS);
1013
cpu_x86_load_seg(env, R_FS, __USER_DS);
1014
cpu_x86_load_seg(env, R_GS, __USER_DS);
1016
#elif defined(TARGET_PPC)
1020
#if defined(TARGET_PPC64)
1021
#if defined(TARGET_ABI32)
1022
env->msr &= ~((target_ulong)1 << MSR_SF);
1024
env->msr |= (target_ulong)1 << MSR_SF;
1027
env->nip = regs->nip;
1028
for(i = 0; i < 32; i++) {
1029
env->gpr[i] = regs->gpr[i];
1033
#error unsupported target CPU
1037
printf("Waiting for gdb Connection on port 1234...\n");
1038
gdbserver_start (1234);
1039
gdb_handlesig(env, 0);