traps.c 27 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068
  1. /*
  2. * Copyright (C) 1995-1996 Gary Thomas (gdt@linuxppc.org)
  3. *
  4. * This program is free software; you can redistribute it and/or
  5. * modify it under the terms of the GNU General Public License
  6. * as published by the Free Software Foundation; either version
  7. * 2 of the License, or (at your option) any later version.
  8. *
  9. * Modified by Cort Dougan (cort@cs.nmt.edu)
  10. * and Paul Mackerras (paulus@samba.org)
  11. */
  12. /*
  13. * This file handles the architecture-dependent parts of hardware exceptions
  14. */
  15. #include <linux/errno.h>
  16. #include <linux/sched.h>
  17. #include <linux/kernel.h>
  18. #include <linux/mm.h>
  19. #include <linux/stddef.h>
  20. #include <linux/unistd.h>
  21. #include <linux/ptrace.h>
  22. #include <linux/slab.h>
  23. #include <linux/user.h>
  24. #include <linux/a.out.h>
  25. #include <linux/interrupt.h>
  26. #include <linux/init.h>
  27. #include <linux/module.h>
  28. #include <linux/prctl.h>
  29. #include <linux/delay.h>
  30. #include <linux/kprobes.h>
  31. #include <linux/kexec.h>
  32. #include <linux/backlight.h>
  33. #include <linux/bug.h>
  34. #include <asm/kdebug.h>
  35. #include <asm/pgtable.h>
  36. #include <asm/uaccess.h>
  37. #include <asm/system.h>
  38. #include <asm/io.h>
  39. #include <asm/machdep.h>
  40. #include <asm/rtas.h>
  41. #include <asm/pmc.h>
  42. #ifdef CONFIG_PPC32
  43. #include <asm/reg.h>
  44. #endif
  45. #ifdef CONFIG_PMAC_BACKLIGHT
  46. #include <asm/backlight.h>
  47. #endif
  48. #ifdef CONFIG_PPC64
  49. #include <asm/firmware.h>
  50. #include <asm/processor.h>
  51. #endif
  52. #include <asm/kexec.h>
  53. #ifdef CONFIG_DEBUGGER
  54. int (*__debugger)(struct pt_regs *regs);
  55. int (*__debugger_ipi)(struct pt_regs *regs);
  56. int (*__debugger_bpt)(struct pt_regs *regs);
  57. int (*__debugger_sstep)(struct pt_regs *regs);
  58. int (*__debugger_iabr_match)(struct pt_regs *regs);
  59. int (*__debugger_dabr_match)(struct pt_regs *regs);
  60. int (*__debugger_fault_handler)(struct pt_regs *regs);
  61. EXPORT_SYMBOL(__debugger);
  62. EXPORT_SYMBOL(__debugger_ipi);
  63. EXPORT_SYMBOL(__debugger_bpt);
  64. EXPORT_SYMBOL(__debugger_sstep);
  65. EXPORT_SYMBOL(__debugger_iabr_match);
  66. EXPORT_SYMBOL(__debugger_dabr_match);
  67. EXPORT_SYMBOL(__debugger_fault_handler);
  68. #endif
  69. ATOMIC_NOTIFIER_HEAD(powerpc_die_chain);
  70. int register_die_notifier(struct notifier_block *nb)
  71. {
  72. return atomic_notifier_chain_register(&powerpc_die_chain, nb);
  73. }
  74. EXPORT_SYMBOL(register_die_notifier);
  75. int unregister_die_notifier(struct notifier_block *nb)
  76. {
  77. return atomic_notifier_chain_unregister(&powerpc_die_chain, nb);
  78. }
  79. EXPORT_SYMBOL(unregister_die_notifier);
  80. /*
  81. * Trap & Exception support
  82. */
  83. static DEFINE_SPINLOCK(die_lock);
  84. int die(const char *str, struct pt_regs *regs, long err)
  85. {
  86. static int die_counter;
  87. if (debugger(regs))
  88. return 1;
  89. console_verbose();
  90. spin_lock_irq(&die_lock);
  91. bust_spinlocks(1);
  92. #ifdef CONFIG_PMAC_BACKLIGHT
  93. mutex_lock(&pmac_backlight_mutex);
  94. if (machine_is(powermac) && pmac_backlight) {
  95. struct backlight_properties *props;
  96. down(&pmac_backlight->sem);
  97. props = pmac_backlight->props;
  98. props->brightness = props->max_brightness;
  99. props->power = FB_BLANK_UNBLANK;
  100. props->update_status(pmac_backlight);
  101. up(&pmac_backlight->sem);
  102. }
  103. mutex_unlock(&pmac_backlight_mutex);
  104. #endif
  105. printk("Oops: %s, sig: %ld [#%d]\n", str, err, ++die_counter);
  106. #ifdef CONFIG_PREEMPT
  107. printk("PREEMPT ");
  108. #endif
  109. #ifdef CONFIG_SMP
  110. printk("SMP NR_CPUS=%d ", NR_CPUS);
  111. #endif
  112. #ifdef CONFIG_DEBUG_PAGEALLOC
  113. printk("DEBUG_PAGEALLOC ");
  114. #endif
  115. #ifdef CONFIG_NUMA
  116. printk("NUMA ");
  117. #endif
  118. printk("%s\n", ppc_md.name ? "" : ppc_md.name);
  119. print_modules();
  120. show_regs(regs);
  121. bust_spinlocks(0);
  122. spin_unlock_irq(&die_lock);
  123. if (kexec_should_crash(current) ||
  124. kexec_sr_activated(smp_processor_id()))
  125. crash_kexec(regs);
  126. crash_kexec_secondary(regs);
  127. if (in_interrupt())
  128. panic("Fatal exception in interrupt");
  129. if (panic_on_oops)
  130. panic("Fatal exception");
  131. do_exit(err);
  132. return 0;
  133. }
  134. void _exception(int signr, struct pt_regs *regs, int code, unsigned long addr)
  135. {
  136. siginfo_t info;
  137. if (!user_mode(regs)) {
  138. if (die("Exception in kernel mode", regs, signr))
  139. return;
  140. }
  141. memset(&info, 0, sizeof(info));
  142. info.si_signo = signr;
  143. info.si_code = code;
  144. info.si_addr = (void __user *) addr;
  145. force_sig_info(signr, &info, current);
  146. /*
  147. * Init gets no signals that it doesn't have a handler for.
  148. * That's all very well, but if it has caused a synchronous
  149. * exception and we ignore the resulting signal, it will just
  150. * generate the same exception over and over again and we get
  151. * nowhere. Better to kill it and let the kernel panic.
  152. */
  153. if (is_init(current)) {
  154. __sighandler_t handler;
  155. spin_lock_irq(&current->sighand->siglock);
  156. handler = current->sighand->action[signr-1].sa.sa_handler;
  157. spin_unlock_irq(&current->sighand->siglock);
  158. if (handler == SIG_DFL) {
  159. /* init has generated a synchronous exception
  160. and it doesn't have a handler for the signal */
  161. printk(KERN_CRIT "init has generated signal %d "
  162. "but has no handler for it\n", signr);
  163. do_exit(signr);
  164. }
  165. }
  166. }
  167. #ifdef CONFIG_PPC64
  168. void system_reset_exception(struct pt_regs *regs)
  169. {
  170. /* See if any machine dependent calls */
  171. if (ppc_md.system_reset_exception) {
  172. if (ppc_md.system_reset_exception(regs))
  173. return;
  174. }
  175. #ifdef CONFIG_KEXEC
  176. cpu_set(smp_processor_id(), cpus_in_sr);
  177. #endif
  178. die("System Reset", regs, SIGABRT);
  179. /*
  180. * Some CPUs when released from the debugger will execute this path.
  181. * These CPUs entered the debugger via a soft-reset. If the CPU was
  182. * hung before entering the debugger it will return to the hung
  183. * state when exiting this function. This causes a problem in
  184. * kdump since the hung CPU(s) will not respond to the IPI sent
  185. * from kdump. To prevent the problem we call crash_kexec_secondary()
  186. * here. If a kdump had not been initiated or we exit the debugger
  187. * with the "exit and recover" command (x) crash_kexec_secondary()
  188. * will return after 5ms and the CPU returns to its previous state.
  189. */
  190. crash_kexec_secondary(regs);
  191. /* Must die if the interrupt is not recoverable */
  192. if (!(regs->msr & MSR_RI))
  193. panic("Unrecoverable System Reset");
  194. /* What should we do here? We could issue a shutdown or hard reset. */
  195. }
  196. #endif
  197. /*
  198. * I/O accesses can cause machine checks on powermacs.
  199. * Check if the NIP corresponds to the address of a sync
  200. * instruction for which there is an entry in the exception
  201. * table.
  202. * Note that the 601 only takes a machine check on TEA
  203. * (transfer error ack) signal assertion, and does not
  204. * set any of the top 16 bits of SRR1.
  205. * -- paulus.
  206. */
  207. static inline int check_io_access(struct pt_regs *regs)
  208. {
  209. #ifdef CONFIG_PPC32
  210. unsigned long msr = regs->msr;
  211. const struct exception_table_entry *entry;
  212. unsigned int *nip = (unsigned int *)regs->nip;
  213. if (((msr & 0xffff0000) == 0 || (msr & (0x80000 | 0x40000)))
  214. && (entry = search_exception_tables(regs->nip)) != NULL) {
  215. /*
  216. * Check that it's a sync instruction, or somewhere
  217. * in the twi; isync; nop sequence that inb/inw/inl uses.
  218. * As the address is in the exception table
  219. * we should be able to read the instr there.
  220. * For the debug message, we look at the preceding
  221. * load or store.
  222. */
  223. if (*nip == 0x60000000) /* nop */
  224. nip -= 2;
  225. else if (*nip == 0x4c00012c) /* isync */
  226. --nip;
  227. if (*nip == 0x7c0004ac || (*nip >> 26) == 3) {
  228. /* sync or twi */
  229. unsigned int rb;
  230. --nip;
  231. rb = (*nip >> 11) & 0x1f;
  232. printk(KERN_DEBUG "%s bad port %lx at %p\n",
  233. (*nip & 0x100)? "OUT to": "IN from",
  234. regs->gpr[rb] - _IO_BASE, nip);
  235. regs->msr |= MSR_RI;
  236. regs->nip = entry->fixup;
  237. return 1;
  238. }
  239. }
  240. #endif /* CONFIG_PPC32 */
  241. return 0;
  242. }
  243. #if defined(CONFIG_4xx) || defined(CONFIG_BOOKE)
  244. /* On 4xx, the reason for the machine check or program exception
  245. is in the ESR. */
  246. #define get_reason(regs) ((regs)->dsisr)
  247. #ifndef CONFIG_FSL_BOOKE
  248. #define get_mc_reason(regs) ((regs)->dsisr)
  249. #else
  250. #define get_mc_reason(regs) (mfspr(SPRN_MCSR))
  251. #endif
  252. #define REASON_FP ESR_FP
  253. #define REASON_ILLEGAL (ESR_PIL | ESR_PUO)
  254. #define REASON_PRIVILEGED ESR_PPR
  255. #define REASON_TRAP ESR_PTR
  256. /* single-step stuff */
  257. #define single_stepping(regs) (current->thread.dbcr0 & DBCR0_IC)
  258. #define clear_single_step(regs) (current->thread.dbcr0 &= ~DBCR0_IC)
  259. #else
  260. /* On non-4xx, the reason for the machine check or program
  261. exception is in the MSR. */
  262. #define get_reason(regs) ((regs)->msr)
  263. #define get_mc_reason(regs) ((regs)->msr)
  264. #define REASON_FP 0x100000
  265. #define REASON_ILLEGAL 0x80000
  266. #define REASON_PRIVILEGED 0x40000
  267. #define REASON_TRAP 0x20000
  268. #define single_stepping(regs) ((regs)->msr & MSR_SE)
  269. #define clear_single_step(regs) ((regs)->msr &= ~MSR_SE)
  270. #endif
  271. /*
  272. * This is "fall-back" implementation for configurations
  273. * which don't provide platform-specific machine check info
  274. */
  275. void __attribute__ ((weak))
  276. platform_machine_check(struct pt_regs *regs)
  277. {
  278. }
  279. void machine_check_exception(struct pt_regs *regs)
  280. {
  281. int recover = 0;
  282. unsigned long reason = get_mc_reason(regs);
  283. /* See if any machine dependent calls */
  284. if (ppc_md.machine_check_exception)
  285. recover = ppc_md.machine_check_exception(regs);
  286. if (recover)
  287. return;
  288. if (user_mode(regs)) {
  289. regs->msr |= MSR_RI;
  290. _exception(SIGBUS, regs, BUS_ADRERR, regs->nip);
  291. return;
  292. }
  293. #if defined(CONFIG_8xx) && defined(CONFIG_PCI)
  294. /* the qspan pci read routines can cause machine checks -- Cort */
  295. bad_page_fault(regs, regs->dar, SIGBUS);
  296. return;
  297. #endif
  298. if (debugger_fault_handler(regs)) {
  299. regs->msr |= MSR_RI;
  300. return;
  301. }
  302. if (check_io_access(regs))
  303. return;
  304. #if defined(CONFIG_4xx) && !defined(CONFIG_440A)
  305. if (reason & ESR_IMCP) {
  306. printk("Instruction");
  307. mtspr(SPRN_ESR, reason & ~ESR_IMCP);
  308. } else
  309. printk("Data");
  310. printk(" machine check in kernel mode.\n");
  311. #elif defined(CONFIG_440A)
  312. printk("Machine check in kernel mode.\n");
  313. if (reason & ESR_IMCP){
  314. printk("Instruction Synchronous Machine Check exception\n");
  315. mtspr(SPRN_ESR, reason & ~ESR_IMCP);
  316. }
  317. else {
  318. u32 mcsr = mfspr(SPRN_MCSR);
  319. if (mcsr & MCSR_IB)
  320. printk("Instruction Read PLB Error\n");
  321. if (mcsr & MCSR_DRB)
  322. printk("Data Read PLB Error\n");
  323. if (mcsr & MCSR_DWB)
  324. printk("Data Write PLB Error\n");
  325. if (mcsr & MCSR_TLBP)
  326. printk("TLB Parity Error\n");
  327. if (mcsr & MCSR_ICP){
  328. flush_instruction_cache();
  329. printk("I-Cache Parity Error\n");
  330. }
  331. if (mcsr & MCSR_DCSP)
  332. printk("D-Cache Search Parity Error\n");
  333. if (mcsr & MCSR_DCFP)
  334. printk("D-Cache Flush Parity Error\n");
  335. if (mcsr & MCSR_IMPE)
  336. printk("Machine Check exception is imprecise\n");
  337. /* Clear MCSR */
  338. mtspr(SPRN_MCSR, mcsr);
  339. }
  340. #elif defined (CONFIG_E500)
  341. printk("Machine check in kernel mode.\n");
  342. printk("Caused by (from MCSR=%lx): ", reason);
  343. if (reason & MCSR_MCP)
  344. printk("Machine Check Signal\n");
  345. if (reason & MCSR_ICPERR)
  346. printk("Instruction Cache Parity Error\n");
  347. if (reason & MCSR_DCP_PERR)
  348. printk("Data Cache Push Parity Error\n");
  349. if (reason & MCSR_DCPERR)
  350. printk("Data Cache Parity Error\n");
  351. if (reason & MCSR_GL_CI)
  352. printk("Guarded Load or Cache-Inhibited stwcx.\n");
  353. if (reason & MCSR_BUS_IAERR)
  354. printk("Bus - Instruction Address Error\n");
  355. if (reason & MCSR_BUS_RAERR)
  356. printk("Bus - Read Address Error\n");
  357. if (reason & MCSR_BUS_WAERR)
  358. printk("Bus - Write Address Error\n");
  359. if (reason & MCSR_BUS_IBERR)
  360. printk("Bus - Instruction Data Error\n");
  361. if (reason & MCSR_BUS_RBERR)
  362. printk("Bus - Read Data Bus Error\n");
  363. if (reason & MCSR_BUS_WBERR)
  364. printk("Bus - Read Data Bus Error\n");
  365. if (reason & MCSR_BUS_IPERR)
  366. printk("Bus - Instruction Parity Error\n");
  367. if (reason & MCSR_BUS_RPERR)
  368. printk("Bus - Read Parity Error\n");
  369. #elif defined (CONFIG_E200)
  370. printk("Machine check in kernel mode.\n");
  371. printk("Caused by (from MCSR=%lx): ", reason);
  372. if (reason & MCSR_MCP)
  373. printk("Machine Check Signal\n");
  374. if (reason & MCSR_CP_PERR)
  375. printk("Cache Push Parity Error\n");
  376. if (reason & MCSR_CPERR)
  377. printk("Cache Parity Error\n");
  378. if (reason & MCSR_EXCP_ERR)
  379. printk("ISI, ITLB, or Bus Error on first instruction fetch for an exception handler\n");
  380. if (reason & MCSR_BUS_IRERR)
  381. printk("Bus - Read Bus Error on instruction fetch\n");
  382. if (reason & MCSR_BUS_DRERR)
  383. printk("Bus - Read Bus Error on data load\n");
  384. if (reason & MCSR_BUS_WRERR)
  385. printk("Bus - Write Bus Error on buffered store or cache line push\n");
  386. #else /* !CONFIG_4xx && !CONFIG_E500 && !CONFIG_E200 */
  387. printk("Machine check in kernel mode.\n");
  388. printk("Caused by (from SRR1=%lx): ", reason);
  389. switch (reason & 0x601F0000) {
  390. case 0x80000:
  391. printk("Machine check signal\n");
  392. break;
  393. case 0: /* for 601 */
  394. case 0x40000:
  395. case 0x140000: /* 7450 MSS error and TEA */
  396. printk("Transfer error ack signal\n");
  397. break;
  398. case 0x20000:
  399. printk("Data parity error signal\n");
  400. break;
  401. case 0x10000:
  402. printk("Address parity error signal\n");
  403. break;
  404. case 0x20000000:
  405. printk("L1 Data Cache error\n");
  406. break;
  407. case 0x40000000:
  408. printk("L1 Instruction Cache error\n");
  409. break;
  410. case 0x00100000:
  411. printk("L2 data cache parity error\n");
  412. break;
  413. default:
  414. printk("Unknown values in msr\n");
  415. }
  416. #endif /* CONFIG_4xx */
  417. /*
  418. * Optional platform-provided routine to print out
  419. * additional info, e.g. bus error registers.
  420. */
  421. platform_machine_check(regs);
  422. if (debugger_fault_handler(regs))
  423. return;
  424. die("Machine check", regs, SIGBUS);
  425. /* Must die if the interrupt is not recoverable */
  426. if (!(regs->msr & MSR_RI))
  427. panic("Unrecoverable Machine check");
  428. }
  429. void SMIException(struct pt_regs *regs)
  430. {
  431. die("System Management Interrupt", regs, SIGABRT);
  432. }
  433. void unknown_exception(struct pt_regs *regs)
  434. {
  435. printk("Bad trap at PC: %lx, SR: %lx, vector=%lx\n",
  436. regs->nip, regs->msr, regs->trap);
  437. _exception(SIGTRAP, regs, 0, 0);
  438. }
  439. void instruction_breakpoint_exception(struct pt_regs *regs)
  440. {
  441. if (notify_die(DIE_IABR_MATCH, "iabr_match", regs, 5,
  442. 5, SIGTRAP) == NOTIFY_STOP)
  443. return;
  444. if (debugger_iabr_match(regs))
  445. return;
  446. _exception(SIGTRAP, regs, TRAP_BRKPT, regs->nip);
  447. }
  448. void RunModeException(struct pt_regs *regs)
  449. {
  450. _exception(SIGTRAP, regs, 0, 0);
  451. }
  452. void __kprobes single_step_exception(struct pt_regs *regs)
  453. {
  454. regs->msr &= ~(MSR_SE | MSR_BE); /* Turn off 'trace' bits */
  455. if (notify_die(DIE_SSTEP, "single_step", regs, 5,
  456. 5, SIGTRAP) == NOTIFY_STOP)
  457. return;
  458. if (debugger_sstep(regs))
  459. return;
  460. _exception(SIGTRAP, regs, TRAP_TRACE, regs->nip);
  461. }
  462. /*
  463. * After we have successfully emulated an instruction, we have to
  464. * check if the instruction was being single-stepped, and if so,
  465. * pretend we got a single-step exception. This was pointed out
  466. * by Kumar Gala. -- paulus
  467. */
  468. static void emulate_single_step(struct pt_regs *regs)
  469. {
  470. if (single_stepping(regs)) {
  471. clear_single_step(regs);
  472. _exception(SIGTRAP, regs, TRAP_TRACE, 0);
  473. }
  474. }
  475. static void parse_fpe(struct pt_regs *regs)
  476. {
  477. int code = 0;
  478. unsigned long fpscr;
  479. flush_fp_to_thread(current);
  480. fpscr = current->thread.fpscr.val;
  481. /* Invalid operation */
  482. if ((fpscr & FPSCR_VE) && (fpscr & FPSCR_VX))
  483. code = FPE_FLTINV;
  484. /* Overflow */
  485. else if ((fpscr & FPSCR_OE) && (fpscr & FPSCR_OX))
  486. code = FPE_FLTOVF;
  487. /* Underflow */
  488. else if ((fpscr & FPSCR_UE) && (fpscr & FPSCR_UX))
  489. code = FPE_FLTUND;
  490. /* Divide by zero */
  491. else if ((fpscr & FPSCR_ZE) && (fpscr & FPSCR_ZX))
  492. code = FPE_FLTDIV;
  493. /* Inexact result */
  494. else if ((fpscr & FPSCR_XE) && (fpscr & FPSCR_XX))
  495. code = FPE_FLTRES;
  496. _exception(SIGFPE, regs, code, regs->nip);
  497. }
  498. /*
  499. * Illegal instruction emulation support. Originally written to
  500. * provide the PVR to user applications using the mfspr rd, PVR.
  501. * Return non-zero if we can't emulate, or -EFAULT if the associated
  502. * memory access caused an access fault. Return zero on success.
  503. *
  504. * There are a couple of ways to do this, either "decode" the instruction
  505. * or directly match lots of bits. In this case, matching lots of
  506. * bits is faster and easier.
  507. *
  508. */
  509. #define INST_MFSPR_PVR 0x7c1f42a6
  510. #define INST_MFSPR_PVR_MASK 0xfc1fffff
  511. #define INST_DCBA 0x7c0005ec
  512. #define INST_DCBA_MASK 0xfc0007fe
  513. #define INST_MCRXR 0x7c000400
  514. #define INST_MCRXR_MASK 0xfc0007fe
  515. #define INST_STRING 0x7c00042a
  516. #define INST_STRING_MASK 0xfc0007fe
  517. #define INST_STRING_GEN_MASK 0xfc00067e
  518. #define INST_LSWI 0x7c0004aa
  519. #define INST_LSWX 0x7c00042a
  520. #define INST_STSWI 0x7c0005aa
  521. #define INST_STSWX 0x7c00052a
  522. #define INST_POPCNTB 0x7c0000f4
  523. #define INST_POPCNTB_MASK 0xfc0007fe
  524. static int emulate_string_inst(struct pt_regs *regs, u32 instword)
  525. {
  526. u8 rT = (instword >> 21) & 0x1f;
  527. u8 rA = (instword >> 16) & 0x1f;
  528. u8 NB_RB = (instword >> 11) & 0x1f;
  529. u32 num_bytes;
  530. unsigned long EA;
  531. int pos = 0;
  532. /* Early out if we are an invalid form of lswx */
  533. if ((instword & INST_STRING_MASK) == INST_LSWX)
  534. if ((rT == rA) || (rT == NB_RB))
  535. return -EINVAL;
  536. EA = (rA == 0) ? 0 : regs->gpr[rA];
  537. switch (instword & INST_STRING_MASK) {
  538. case INST_LSWX:
  539. case INST_STSWX:
  540. EA += NB_RB;
  541. num_bytes = regs->xer & 0x7f;
  542. break;
  543. case INST_LSWI:
  544. case INST_STSWI:
  545. num_bytes = (NB_RB == 0) ? 32 : NB_RB;
  546. break;
  547. default:
  548. return -EINVAL;
  549. }
  550. while (num_bytes != 0)
  551. {
  552. u8 val;
  553. u32 shift = 8 * (3 - (pos & 0x3));
  554. switch ((instword & INST_STRING_MASK)) {
  555. case INST_LSWX:
  556. case INST_LSWI:
  557. if (get_user(val, (u8 __user *)EA))
  558. return -EFAULT;
  559. /* first time updating this reg,
  560. * zero it out */
  561. if (pos == 0)
  562. regs->gpr[rT] = 0;
  563. regs->gpr[rT] |= val << shift;
  564. break;
  565. case INST_STSWI:
  566. case INST_STSWX:
  567. val = regs->gpr[rT] >> shift;
  568. if (put_user(val, (u8 __user *)EA))
  569. return -EFAULT;
  570. break;
  571. }
  572. /* move EA to next address */
  573. EA += 1;
  574. num_bytes--;
  575. /* manage our position within the register */
  576. if (++pos == 4) {
  577. pos = 0;
  578. if (++rT == 32)
  579. rT = 0;
  580. }
  581. }
  582. return 0;
  583. }
  584. static int emulate_popcntb_inst(struct pt_regs *regs, u32 instword)
  585. {
  586. u32 ra,rs;
  587. unsigned long tmp;
  588. ra = (instword >> 16) & 0x1f;
  589. rs = (instword >> 21) & 0x1f;
  590. tmp = regs->gpr[rs];
  591. tmp = tmp - ((tmp >> 1) & 0x5555555555555555ULL);
  592. tmp = (tmp & 0x3333333333333333ULL) + ((tmp >> 2) & 0x3333333333333333ULL);
  593. tmp = (tmp + (tmp >> 4)) & 0x0f0f0f0f0f0f0f0fULL;
  594. regs->gpr[ra] = tmp;
  595. return 0;
  596. }
  597. static int emulate_instruction(struct pt_regs *regs)
  598. {
  599. u32 instword;
  600. u32 rd;
  601. if (!user_mode(regs) || (regs->msr & MSR_LE))
  602. return -EINVAL;
  603. CHECK_FULL_REGS(regs);
  604. if (get_user(instword, (u32 __user *)(regs->nip)))
  605. return -EFAULT;
  606. /* Emulate the mfspr rD, PVR. */
  607. if ((instword & INST_MFSPR_PVR_MASK) == INST_MFSPR_PVR) {
  608. rd = (instword >> 21) & 0x1f;
  609. regs->gpr[rd] = mfspr(SPRN_PVR);
  610. return 0;
  611. }
  612. /* Emulating the dcba insn is just a no-op. */
  613. if ((instword & INST_DCBA_MASK) == INST_DCBA)
  614. return 0;
  615. /* Emulate the mcrxr insn. */
  616. if ((instword & INST_MCRXR_MASK) == INST_MCRXR) {
  617. int shift = (instword >> 21) & 0x1c;
  618. unsigned long msk = 0xf0000000UL >> shift;
  619. regs->ccr = (regs->ccr & ~msk) | ((regs->xer >> shift) & msk);
  620. regs->xer &= ~0xf0000000UL;
  621. return 0;
  622. }
  623. /* Emulate load/store string insn. */
  624. if ((instword & INST_STRING_GEN_MASK) == INST_STRING)
  625. return emulate_string_inst(regs, instword);
  626. /* Emulate the popcntb (Population Count Bytes) instruction. */
  627. if ((instword & INST_POPCNTB_MASK) == INST_POPCNTB) {
  628. return emulate_popcntb_inst(regs, instword);
  629. }
  630. return -EINVAL;
  631. }
  632. int is_valid_bugaddr(unsigned long addr)
  633. {
  634. return is_kernel_addr(addr);
  635. }
  636. void __kprobes program_check_exception(struct pt_regs *regs)
  637. {
  638. unsigned int reason = get_reason(regs);
  639. extern int do_mathemu(struct pt_regs *regs);
  640. /* We can now get here via a FP Unavailable exception if the core
  641. * has no FPU, in that case the reason flags will be 0 */
  642. if (reason & REASON_FP) {
  643. /* IEEE FP exception */
  644. parse_fpe(regs);
  645. return;
  646. }
  647. if (reason & REASON_TRAP) {
  648. /* trap exception */
  649. if (notify_die(DIE_BPT, "breakpoint", regs, 5, 5, SIGTRAP)
  650. == NOTIFY_STOP)
  651. return;
  652. if (debugger_bpt(regs))
  653. return;
  654. if (!(regs->msr & MSR_PR) && /* not user-mode */
  655. report_bug(regs->nip) == BUG_TRAP_TYPE_WARN) {
  656. regs->nip += 4;
  657. return;
  658. }
  659. _exception(SIGTRAP, regs, TRAP_BRKPT, regs->nip);
  660. return;
  661. }
  662. local_irq_enable();
  663. #ifdef CONFIG_MATH_EMULATION
  664. /* (reason & REASON_ILLEGAL) would be the obvious thing here,
  665. * but there seems to be a hardware bug on the 405GP (RevD)
  666. * that means ESR is sometimes set incorrectly - either to
  667. * ESR_DST (!?) or 0. In the process of chasing this with the
  668. * hardware people - not sure if it can happen on any illegal
  669. * instruction or only on FP instructions, whether there is a
  670. * pattern to occurences etc. -dgibson 31/Mar/2003 */
  671. if (do_mathemu(regs) == 0) {
  672. emulate_single_step(regs);
  673. return;
  674. }
  675. #endif /* CONFIG_MATH_EMULATION */
  676. /* Try to emulate it if we should. */
  677. if (reason & (REASON_ILLEGAL | REASON_PRIVILEGED)) {
  678. switch (emulate_instruction(regs)) {
  679. case 0:
  680. regs->nip += 4;
  681. emulate_single_step(regs);
  682. return;
  683. case -EFAULT:
  684. _exception(SIGSEGV, regs, SEGV_MAPERR, regs->nip);
  685. return;
  686. }
  687. }
  688. if (reason & REASON_PRIVILEGED)
  689. _exception(SIGILL, regs, ILL_PRVOPC, regs->nip);
  690. else
  691. _exception(SIGILL, regs, ILL_ILLOPC, regs->nip);
  692. }
  693. void alignment_exception(struct pt_regs *regs)
  694. {
  695. int sig, code, fixed = 0;
  696. /* we don't implement logging of alignment exceptions */
  697. if (!(current->thread.align_ctl & PR_UNALIGN_SIGBUS))
  698. fixed = fix_alignment(regs);
  699. if (fixed == 1) {
  700. regs->nip += 4; /* skip over emulated instruction */
  701. emulate_single_step(regs);
  702. return;
  703. }
  704. /* Operand address was bad */
  705. if (fixed == -EFAULT) {
  706. sig = SIGSEGV;
  707. code = SEGV_ACCERR;
  708. } else {
  709. sig = SIGBUS;
  710. code = BUS_ADRALN;
  711. }
  712. if (user_mode(regs))
  713. _exception(sig, regs, code, regs->dar);
  714. else
  715. bad_page_fault(regs, regs->dar, sig);
  716. }
  717. void StackOverflow(struct pt_regs *regs)
  718. {
  719. printk(KERN_CRIT "Kernel stack overflow in process %p, r1=%lx\n",
  720. current, regs->gpr[1]);
  721. debugger(regs);
  722. show_regs(regs);
  723. panic("kernel stack overflow");
  724. }
  725. void nonrecoverable_exception(struct pt_regs *regs)
  726. {
  727. printk(KERN_ERR "Non-recoverable exception at PC=%lx MSR=%lx\n",
  728. regs->nip, regs->msr);
  729. debugger(regs);
  730. die("nonrecoverable exception", regs, SIGKILL);
  731. }
  732. void trace_syscall(struct pt_regs *regs)
  733. {
  734. printk("Task: %p(%d), PC: %08lX/%08lX, Syscall: %3ld, Result: %s%ld %s\n",
  735. current, current->pid, regs->nip, regs->link, regs->gpr[0],
  736. regs->ccr&0x10000000?"Error=":"", regs->gpr[3], print_tainted());
  737. }
  738. void kernel_fp_unavailable_exception(struct pt_regs *regs)
  739. {
  740. printk(KERN_EMERG "Unrecoverable FP Unavailable Exception "
  741. "%lx at %lx\n", regs->trap, regs->nip);
  742. die("Unrecoverable FP Unavailable Exception", regs, SIGABRT);
  743. }
  744. void altivec_unavailable_exception(struct pt_regs *regs)
  745. {
  746. if (user_mode(regs)) {
  747. /* A user program has executed an altivec instruction,
  748. but this kernel doesn't support altivec. */
  749. _exception(SIGILL, regs, ILL_ILLOPC, regs->nip);
  750. return;
  751. }
  752. printk(KERN_EMERG "Unrecoverable VMX/Altivec Unavailable Exception "
  753. "%lx at %lx\n", regs->trap, regs->nip);
  754. die("Unrecoverable VMX/Altivec Unavailable Exception", regs, SIGABRT);
  755. }
  756. void performance_monitor_exception(struct pt_regs *regs)
  757. {
  758. perf_irq(regs);
  759. }
  760. #ifdef CONFIG_8xx
  761. void SoftwareEmulation(struct pt_regs *regs)
  762. {
  763. extern int do_mathemu(struct pt_regs *);
  764. extern int Soft_emulate_8xx(struct pt_regs *);
  765. int errcode;
  766. CHECK_FULL_REGS(regs);
  767. if (!user_mode(regs)) {
  768. debugger(regs);
  769. die("Kernel Mode Software FPU Emulation", regs, SIGFPE);
  770. }
  771. #ifdef CONFIG_MATH_EMULATION
  772. errcode = do_mathemu(regs);
  773. #else
  774. errcode = Soft_emulate_8xx(regs);
  775. #endif
  776. if (errcode) {
  777. if (errcode > 0)
  778. _exception(SIGFPE, regs, 0, 0);
  779. else if (errcode == -EFAULT)
  780. _exception(SIGSEGV, regs, 0, 0);
  781. else
  782. _exception(SIGILL, regs, ILL_ILLOPC, regs->nip);
  783. } else
  784. emulate_single_step(regs);
  785. }
  786. #endif /* CONFIG_8xx */
  787. #if defined(CONFIG_40x) || defined(CONFIG_BOOKE)
  788. void DebugException(struct pt_regs *regs, unsigned long debug_status)
  789. {
  790. if (debug_status & DBSR_IC) { /* instruction completion */
  791. regs->msr &= ~MSR_DE;
  792. if (user_mode(regs)) {
  793. current->thread.dbcr0 &= ~DBCR0_IC;
  794. } else {
  795. /* Disable instruction completion */
  796. mtspr(SPRN_DBCR0, mfspr(SPRN_DBCR0) & ~DBCR0_IC);
  797. /* Clear the instruction completion event */
  798. mtspr(SPRN_DBSR, DBSR_IC);
  799. if (debugger_sstep(regs))
  800. return;
  801. }
  802. _exception(SIGTRAP, regs, TRAP_TRACE, 0);
  803. }
  804. }
  805. #endif /* CONFIG_4xx || CONFIG_BOOKE */
  806. #if !defined(CONFIG_TAU_INT)
  807. void TAUException(struct pt_regs *regs)
  808. {
  809. printk("TAU trap at PC: %lx, MSR: %lx, vector=%lx %s\n",
  810. regs->nip, regs->msr, regs->trap, print_tainted());
  811. }
  812. #endif /* CONFIG_INT_TAU */
  813. #ifdef CONFIG_ALTIVEC
  814. void altivec_assist_exception(struct pt_regs *regs)
  815. {
  816. int err;
  817. if (!user_mode(regs)) {
  818. printk(KERN_EMERG "VMX/Altivec assist exception in kernel mode"
  819. " at %lx\n", regs->nip);
  820. die("Kernel VMX/Altivec assist exception", regs, SIGILL);
  821. }
  822. flush_altivec_to_thread(current);
  823. err = emulate_altivec(regs);
  824. if (err == 0) {
  825. regs->nip += 4; /* skip emulated instruction */
  826. emulate_single_step(regs);
  827. return;
  828. }
  829. if (err == -EFAULT) {
  830. /* got an error reading the instruction */
  831. _exception(SIGSEGV, regs, SEGV_ACCERR, regs->nip);
  832. } else {
  833. /* didn't recognize the instruction */
  834. /* XXX quick hack for now: set the non-Java bit in the VSCR */
  835. if (printk_ratelimit())
  836. printk(KERN_ERR "Unrecognized altivec instruction "
  837. "in %s at %lx\n", current->comm, regs->nip);
  838. current->thread.vscr.u[3] |= 0x10000;
  839. }
  840. }
  841. #endif /* CONFIG_ALTIVEC */
  842. #ifdef CONFIG_FSL_BOOKE
  843. void CacheLockingException(struct pt_regs *regs, unsigned long address,
  844. unsigned long error_code)
  845. {
  846. /* We treat cache locking instructions from the user
  847. * as priv ops, in the future we could try to do
  848. * something smarter
  849. */
  850. if (error_code & (ESR_DLK|ESR_ILK))
  851. _exception(SIGILL, regs, ILL_PRVOPC, regs->nip);
  852. return;
  853. }
  854. #endif /* CONFIG_FSL_BOOKE */
  855. #ifdef CONFIG_SPE
  856. void SPEFloatingPointException(struct pt_regs *regs)
  857. {
  858. unsigned long spefscr;
  859. int fpexc_mode;
  860. int code = 0;
  861. spefscr = current->thread.spefscr;
  862. fpexc_mode = current->thread.fpexc_mode;
  863. /* Hardware does not neccessarily set sticky
  864. * underflow/overflow/invalid flags */
  865. if ((spefscr & SPEFSCR_FOVF) && (fpexc_mode & PR_FP_EXC_OVF)) {
  866. code = FPE_FLTOVF;
  867. spefscr |= SPEFSCR_FOVFS;
  868. }
  869. else if ((spefscr & SPEFSCR_FUNF) && (fpexc_mode & PR_FP_EXC_UND)) {
  870. code = FPE_FLTUND;
  871. spefscr |= SPEFSCR_FUNFS;
  872. }
  873. else if ((spefscr & SPEFSCR_FDBZ) && (fpexc_mode & PR_FP_EXC_DIV))
  874. code = FPE_FLTDIV;
  875. else if ((spefscr & SPEFSCR_FINV) && (fpexc_mode & PR_FP_EXC_INV)) {
  876. code = FPE_FLTINV;
  877. spefscr |= SPEFSCR_FINVS;
  878. }
  879. else if ((spefscr & (SPEFSCR_FG | SPEFSCR_FX)) && (fpexc_mode & PR_FP_EXC_RES))
  880. code = FPE_FLTRES;
  881. current->thread.spefscr = spefscr;
  882. _exception(SIGFPE, regs, code, regs->nip);
  883. return;
  884. }
  885. #endif
  886. /*
  887. * We enter here if we get an unrecoverable exception, that is, one
  888. * that happened at a point where the RI (recoverable interrupt) bit
  889. * in the MSR is 0. This indicates that SRR0/1 are live, and that
  890. * we therefore lost state by taking this exception.
  891. */
  892. void unrecoverable_exception(struct pt_regs *regs)
  893. {
  894. printk(KERN_EMERG "Unrecoverable exception %lx at %lx\n",
  895. regs->trap, regs->nip);
  896. die("Unrecoverable exception", regs, SIGABRT);
  897. }
  898. #ifdef CONFIG_BOOKE_WDT
  899. /*
  900. * Default handler for a Watchdog exception,
  901. * spins until a reboot occurs
  902. */
  903. void __attribute__ ((weak)) WatchdogHandler(struct pt_regs *regs)
  904. {
  905. /* Generic WatchdogHandler, implement your own */
  906. mtspr(SPRN_TCR, mfspr(SPRN_TCR)&(~TCR_WIE));
  907. return;
  908. }
  909. void WatchdogException(struct pt_regs *regs)
  910. {
  911. printk (KERN_EMERG "PowerPC Book-E Watchdog Exception\n");
  912. WatchdogHandler(regs);
  913. }
  914. #endif
  915. /*
  916. * We enter here if we discover during exception entry that we are
  917. * running in supervisor mode with a userspace value in the stack pointer.
  918. */
  919. void kernel_bad_stack(struct pt_regs *regs)
  920. {
  921. printk(KERN_EMERG "Bad kernel stack pointer %lx at %lx\n",
  922. regs->gpr[1], regs->nip);
  923. die("Bad kernel stack pointer", regs, SIGABRT);
  924. }
  925. void __init trap_init(void)
  926. {
  927. }