head.S 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590
  1. /*
  2. * Low-level CPU initialisation
  3. * Based on arch/arm/kernel/head.S
  4. *
  5. * Copyright (C) 1994-2002 Russell King
  6. * Copyright (C) 2003-2012 ARM Ltd.
  7. * Authors: Catalin Marinas <catalin.marinas@arm.com>
  8. * Will Deacon <will.deacon@arm.com>
  9. *
  10. * This program is free software; you can redistribute it and/or modify
  11. * it under the terms of the GNU General Public License version 2 as
  12. * published by the Free Software Foundation.
  13. *
  14. * This program is distributed in the hope that it will be useful,
  15. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  16. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  17. * GNU General Public License for more details.
  18. *
  19. * You should have received a copy of the GNU General Public License
  20. * along with this program. If not, see <http://www.gnu.org/licenses/>.
  21. */
  22. #include <linux/linkage.h>
  23. #include <linux/init.h>
  24. #include <asm/assembler.h>
  25. #include <asm/ptrace.h>
  26. #include <asm/asm-offsets.h>
  27. #include <asm/cputype.h>
  28. #include <asm/memory.h>
  29. #include <asm/thread_info.h>
  30. #include <asm/pgtable-hwdef.h>
  31. #include <asm/pgtable.h>
  32. #include <asm/page.h>
  33. #include <asm/virt.h>
  34. /*
  35. * swapper_pg_dir is the virtual address of the initial page table. We place
  36. * the page tables 3 * PAGE_SIZE below KERNEL_RAM_VADDR. The idmap_pg_dir has
  37. * 2 pages and is placed below swapper_pg_dir.
  38. */
  39. #define KERNEL_RAM_VADDR (PAGE_OFFSET + TEXT_OFFSET)
  40. #if (KERNEL_RAM_VADDR & 0xfffff) != 0x80000
  41. #error KERNEL_RAM_VADDR must start at 0xXXX80000
  42. #endif
  43. #define SWAPPER_DIR_SIZE (3 * PAGE_SIZE)
  44. #define IDMAP_DIR_SIZE (2 * PAGE_SIZE)
  45. .globl swapper_pg_dir
  46. .equ swapper_pg_dir, KERNEL_RAM_VADDR - SWAPPER_DIR_SIZE
  47. .globl idmap_pg_dir
  48. .equ idmap_pg_dir, swapper_pg_dir - IDMAP_DIR_SIZE
  49. .macro pgtbl, ttb0, ttb1, phys
  50. add \ttb1, \phys, #TEXT_OFFSET - SWAPPER_DIR_SIZE
  51. sub \ttb0, \ttb1, #IDMAP_DIR_SIZE
  52. .endm
  53. #ifdef CONFIG_ARM64_64K_PAGES
  54. #define BLOCK_SHIFT PAGE_SHIFT
  55. #define BLOCK_SIZE PAGE_SIZE
  56. #else
  57. #define BLOCK_SHIFT SECTION_SHIFT
  58. #define BLOCK_SIZE SECTION_SIZE
  59. #endif
  60. #define KERNEL_START KERNEL_RAM_VADDR
  61. #define KERNEL_END _end
  62. /*
  63. * Initial memory map attributes.
  64. */
  65. #ifndef CONFIG_SMP
  66. #define PTE_FLAGS PTE_TYPE_PAGE | PTE_AF
  67. #define PMD_FLAGS PMD_TYPE_SECT | PMD_SECT_AF
  68. #else
  69. #define PTE_FLAGS PTE_TYPE_PAGE | PTE_AF | PTE_SHARED
  70. #define PMD_FLAGS PMD_TYPE_SECT | PMD_SECT_AF | PMD_SECT_S
  71. #endif
  72. #ifdef CONFIG_ARM64_64K_PAGES
  73. #define MM_MMUFLAGS PTE_ATTRINDX(MT_NORMAL) | PTE_FLAGS
  74. #else
  75. #define MM_MMUFLAGS PMD_ATTRINDX(MT_NORMAL) | PMD_FLAGS
  76. #endif
  77. /*
  78. * Kernel startup entry point.
  79. * ---------------------------
  80. *
  81. * The requirements are:
  82. * MMU = off, D-cache = off, I-cache = on or off,
  83. * x0 = physical address to the FDT blob.
  84. *
  85. * This code is mostly position independent so you call this at
  86. * __pa(PAGE_OFFSET + TEXT_OFFSET).
  87. *
  88. * Note that the callee-saved registers are used for storing variables
  89. * that are useful before the MMU is enabled. The allocations are described
  90. * in the entry routines.
  91. */
  92. __HEAD
  93. /*
  94. * DO NOT MODIFY. Image header expected by Linux boot-loaders.
  95. */
  96. b stext // branch to kernel start, magic
  97. .long 0 // reserved
  98. .quad TEXT_OFFSET // Image load offset from start of RAM
  99. .quad 0 // reserved
  100. .quad 0 // reserved
  101. .quad 0 // reserved
  102. .quad 0 // reserved
  103. .quad 0 // reserved
  104. .byte 0x41 // Magic number, "ARM\x64"
  105. .byte 0x52
  106. .byte 0x4d
  107. .byte 0x64
  108. .word 0 // reserved
  109. ENTRY(stext)
  110. mov x21, x0 // x21=FDT
  111. bl el2_setup // Drop to EL1, w20=cpu_boot_mode
  112. bl __calc_phys_offset // x24=PHYS_OFFSET, x28=PHYS_OFFSET-PAGE_OFFSET
  113. bl set_cpu_boot_mode_flag
  114. mrs x22, midr_el1 // x22=cpuid
  115. mov x0, x22
  116. bl lookup_processor_type
  117. mov x23, x0 // x23=current cpu_table
  118. cbz x23, __error_p // invalid processor (x23=0)?
  119. bl __vet_fdt
  120. bl __create_page_tables // x25=TTBR0, x26=TTBR1
  121. /*
  122. * The following calls CPU specific code in a position independent
  123. * manner. See arch/arm64/mm/proc.S for details. x23 = base of
  124. * cpu_info structure selected by lookup_processor_type above.
  125. * On return, the CPU will be ready for the MMU to be turned on and
  126. * the TCR will have been set.
  127. */
  128. ldr x27, __switch_data // address to jump to after
  129. // MMU has been enabled
  130. adr lr, __enable_mmu // return (PIC) address
  131. ldr x12, [x23, #CPU_INFO_SETUP]
  132. add x12, x12, x28 // __virt_to_phys
  133. br x12 // initialise processor
  134. ENDPROC(stext)
  135. /*
  136. * If we're fortunate enough to boot at EL2, ensure that the world is
  137. * sane before dropping to EL1.
  138. *
  139. * Returns either BOOT_CPU_MODE_EL1 or BOOT_CPU_MODE_EL2 in x20 if
  140. * booted in EL1 or EL2 respectively.
  141. */
  142. ENTRY(el2_setup)
  143. mrs x0, CurrentEL
  144. cmp x0, #PSR_MODE_EL2t
  145. ccmp x0, #PSR_MODE_EL2h, #0x4, ne
  146. b.ne 1f
  147. mrs x0, sctlr_el2
  148. CPU_BE( orr x0, x0, #(1 << 25) ) // Set the EE bit for EL2
  149. CPU_LE( bic x0, x0, #(1 << 25) ) // Clear the EE bit for EL2
  150. msr sctlr_el2, x0
  151. b 2f
  152. 1: mrs x0, sctlr_el1
  153. CPU_BE( orr x0, x0, #(3 << 24) ) // Set the EE and E0E bits for EL1
  154. CPU_LE( bic x0, x0, #(3 << 24) ) // Clear the EE and E0E bits for EL1
  155. msr sctlr_el1, x0
  156. mov w20, #BOOT_CPU_MODE_EL1 // This cpu booted in EL1
  157. isb
  158. ret
  159. /* Hyp configuration. */
  160. 2: mov x0, #(1 << 31) // 64-bit EL1
  161. msr hcr_el2, x0
  162. /* Generic timers. */
  163. mrs x0, cnthctl_el2
  164. orr x0, x0, #3 // Enable EL1 physical timers
  165. msr cnthctl_el2, x0
  166. msr cntvoff_el2, xzr // Clear virtual offset
  167. /* Populate ID registers. */
  168. mrs x0, midr_el1
  169. mrs x1, mpidr_el1
  170. msr vpidr_el2, x0
  171. msr vmpidr_el2, x1
  172. /* sctlr_el1 */
  173. mov x0, #0x0800 // Set/clear RES{1,0} bits
  174. CPU_BE( movk x0, #0x33d0, lsl #16 ) // Set EE and E0E on BE systems
  175. CPU_LE( movk x0, #0x30d0, lsl #16 ) // Clear EE and E0E on LE systems
  176. msr sctlr_el1, x0
  177. /* Coprocessor traps. */
  178. mov x0, #0x33ff
  179. msr cptr_el2, x0 // Disable copro. traps to EL2
  180. #ifdef CONFIG_COMPAT
  181. msr hstr_el2, xzr // Disable CP15 traps to EL2
  182. #endif
  183. /* Stage-2 translation */
  184. msr vttbr_el2, xzr
  185. /* Hypervisor stub */
  186. adr x0, __hyp_stub_vectors
  187. msr vbar_el2, x0
  188. /* spsr */
  189. mov x0, #(PSR_F_BIT | PSR_I_BIT | PSR_A_BIT | PSR_D_BIT |\
  190. PSR_MODE_EL1h)
  191. msr spsr_el2, x0
  192. msr elr_el2, lr
  193. mov w20, #BOOT_CPU_MODE_EL2 // This CPU booted in EL2
  194. eret
  195. ENDPROC(el2_setup)
  196. /*
  197. * Sets the __boot_cpu_mode flag depending on the CPU boot mode passed
  198. * in x20. See arch/arm64/include/asm/virt.h for more info.
  199. */
  200. ENTRY(set_cpu_boot_mode_flag)
  201. ldr x1, =__boot_cpu_mode // Compute __boot_cpu_mode
  202. add x1, x1, x28
  203. cmp w20, #BOOT_CPU_MODE_EL2
  204. b.ne 1f
  205. add x1, x1, #4
  206. 1: str w20, [x1] // This CPU has booted in EL1
  207. ret
  208. ENDPROC(set_cpu_boot_mode_flag)
  209. /*
  210. * We need to find out the CPU boot mode long after boot, so we need to
  211. * store it in a writable variable.
  212. *
  213. * This is not in .bss, because we set it sufficiently early that the boot-time
  214. * zeroing of .bss would clobber it.
  215. */
  216. .pushsection .data
  217. ENTRY(__boot_cpu_mode)
  218. .long BOOT_CPU_MODE_EL2
  219. .long 0
  220. .popsection
  221. .align 3
  222. 2: .quad .
  223. .quad PAGE_OFFSET
  224. #ifdef CONFIG_SMP
  225. .align 3
  226. 1: .quad .
  227. .quad secondary_holding_pen_release
  228. /*
  229. * This provides a "holding pen" for platforms to hold all secondary
  230. * cores are held until we're ready for them to initialise.
  231. */
  232. ENTRY(secondary_holding_pen)
  233. bl el2_setup // Drop to EL1, w20=cpu_boot_mode
  234. bl __calc_phys_offset // x24=PHYS_OFFSET, x28=PHYS_OFFSET-PAGE_OFFSET
  235. bl set_cpu_boot_mode_flag
  236. mrs x0, mpidr_el1
  237. ldr x1, =MPIDR_HWID_BITMASK
  238. and x0, x0, x1
  239. adr x1, 1b
  240. ldp x2, x3, [x1]
  241. sub x1, x1, x2
  242. add x3, x3, x1
  243. pen: ldr x4, [x3]
  244. cmp x4, x0
  245. b.eq secondary_startup
  246. wfe
  247. b pen
  248. ENDPROC(secondary_holding_pen)
  249. /*
  250. * Secondary entry point that jumps straight into the kernel. Only to
  251. * be used where CPUs are brought online dynamically by the kernel.
  252. */
  253. ENTRY(secondary_entry)
  254. bl __calc_phys_offset // x2=phys offset
  255. bl el2_setup // Drop to EL1
  256. b secondary_startup
  257. ENDPROC(secondary_entry)
  258. ENTRY(secondary_startup)
  259. /*
  260. * Common entry point for secondary CPUs.
  261. */
  262. mrs x22, midr_el1 // x22=cpuid
  263. mov x0, x22
  264. bl lookup_processor_type
  265. mov x23, x0 // x23=current cpu_table
  266. cbz x23, __error_p // invalid processor (x23=0)?
  267. pgtbl x25, x26, x24 // x25=TTBR0, x26=TTBR1
  268. ldr x12, [x23, #CPU_INFO_SETUP]
  269. add x12, x12, x28 // __virt_to_phys
  270. blr x12 // initialise processor
  271. ldr x21, =secondary_data
  272. ldr x27, =__secondary_switched // address to jump to after enabling the MMU
  273. b __enable_mmu
  274. ENDPROC(secondary_startup)
  275. ENTRY(__secondary_switched)
  276. ldr x0, [x21] // get secondary_data.stack
  277. mov sp, x0
  278. mov x29, #0
  279. b secondary_start_kernel
  280. ENDPROC(__secondary_switched)
  281. #endif /* CONFIG_SMP */
  282. /*
  283. * Setup common bits before finally enabling the MMU. Essentially this is just
  284. * loading the page table pointer and vector base registers.
  285. *
  286. * On entry to this code, x0 must contain the SCTLR_EL1 value for turning on
  287. * the MMU.
  288. */
  289. __enable_mmu:
  290. ldr x5, =vectors
  291. msr vbar_el1, x5
  292. msr ttbr0_el1, x25 // load TTBR0
  293. msr ttbr1_el1, x26 // load TTBR1
  294. isb
  295. b __turn_mmu_on
  296. ENDPROC(__enable_mmu)
  297. /*
  298. * Enable the MMU. This completely changes the structure of the visible memory
  299. * space. You will not be able to trace execution through this.
  300. *
  301. * x0 = system control register
  302. * x27 = *virtual* address to jump to upon completion
  303. *
  304. * other registers depend on the function called upon completion
  305. */
  306. .align 6
  307. __turn_mmu_on:
  308. msr sctlr_el1, x0
  309. isb
  310. br x27
  311. ENDPROC(__turn_mmu_on)
  312. /*
  313. * Calculate the start of physical memory.
  314. */
  315. __calc_phys_offset:
  316. adr x0, 1f
  317. ldp x1, x2, [x0]
  318. sub x28, x0, x1 // x28 = PHYS_OFFSET - PAGE_OFFSET
  319. add x24, x2, x28 // x24 = PHYS_OFFSET
  320. ret
  321. ENDPROC(__calc_phys_offset)
  322. .align 3
  323. 1: .quad .
  324. .quad PAGE_OFFSET
  325. /*
  326. * Macro to populate the PGD for the corresponding block entry in the next
  327. * level (tbl) for the given virtual address.
  328. *
  329. * Preserves: pgd, tbl, virt
  330. * Corrupts: tmp1, tmp2
  331. */
  332. .macro create_pgd_entry, pgd, tbl, virt, tmp1, tmp2
  333. lsr \tmp1, \virt, #PGDIR_SHIFT
  334. and \tmp1, \tmp1, #PTRS_PER_PGD - 1 // PGD index
  335. orr \tmp2, \tbl, #3 // PGD entry table type
  336. str \tmp2, [\pgd, \tmp1, lsl #3]
  337. .endm
  338. /*
  339. * Macro to populate block entries in the page table for the start..end
  340. * virtual range (inclusive).
  341. *
  342. * Preserves: tbl, flags
  343. * Corrupts: phys, start, end, pstate
  344. */
  345. .macro create_block_map, tbl, flags, phys, start, end, idmap=0
  346. lsr \phys, \phys, #BLOCK_SHIFT
  347. .if \idmap
  348. and \start, \phys, #PTRS_PER_PTE - 1 // table index
  349. .else
  350. lsr \start, \start, #BLOCK_SHIFT
  351. and \start, \start, #PTRS_PER_PTE - 1 // table index
  352. .endif
  353. orr \phys, \flags, \phys, lsl #BLOCK_SHIFT // table entry
  354. .ifnc \start,\end
  355. lsr \end, \end, #BLOCK_SHIFT
  356. and \end, \end, #PTRS_PER_PTE - 1 // table end index
  357. .endif
  358. 9999: str \phys, [\tbl, \start, lsl #3] // store the entry
  359. .ifnc \start,\end
  360. add \start, \start, #1 // next entry
  361. add \phys, \phys, #BLOCK_SIZE // next block
  362. cmp \start, \end
  363. b.ls 9999b
  364. .endif
  365. .endm
  366. /*
  367. * Setup the initial page tables. We only setup the barest amount which is
  368. * required to get the kernel running. The following sections are required:
  369. * - identity mapping to enable the MMU (low address, TTBR0)
  370. * - first few MB of the kernel linear mapping to jump to once the MMU has
  371. * been enabled, including the FDT blob (TTBR1)
  372. * - UART mapping if CONFIG_EARLY_PRINTK is enabled (TTBR1)
  373. */
  374. __create_page_tables:
  375. pgtbl x25, x26, x24 // idmap_pg_dir and swapper_pg_dir addresses
  376. /*
  377. * Clear the idmap and swapper page tables.
  378. */
  379. mov x0, x25
  380. add x6, x26, #SWAPPER_DIR_SIZE
  381. 1: stp xzr, xzr, [x0], #16
  382. stp xzr, xzr, [x0], #16
  383. stp xzr, xzr, [x0], #16
  384. stp xzr, xzr, [x0], #16
  385. cmp x0, x6
  386. b.lo 1b
  387. ldr x7, =MM_MMUFLAGS
  388. /*
  389. * Create the identity mapping.
  390. */
  391. add x0, x25, #PAGE_SIZE // section table address
  392. adr x3, __turn_mmu_on // virtual/physical address
  393. create_pgd_entry x25, x0, x3, x5, x6
  394. create_block_map x0, x7, x3, x5, x5, idmap=1
  395. /*
  396. * Map the kernel image (starting with PHYS_OFFSET).
  397. */
  398. add x0, x26, #PAGE_SIZE // section table address
  399. mov x5, #PAGE_OFFSET
  400. create_pgd_entry x26, x0, x5, x3, x6
  401. ldr x6, =KERNEL_END - 1
  402. mov x3, x24 // phys offset
  403. create_block_map x0, x7, x3, x5, x6
  404. /*
  405. * Map the FDT blob (maximum 2MB; must be within 512MB of
  406. * PHYS_OFFSET).
  407. */
  408. mov x3, x21 // FDT phys address
  409. and x3, x3, #~((1 << 21) - 1) // 2MB aligned
  410. mov x6, #PAGE_OFFSET
  411. sub x5, x3, x24 // subtract PHYS_OFFSET
  412. tst x5, #~((1 << 29) - 1) // within 512MB?
  413. csel x21, xzr, x21, ne // zero the FDT pointer
  414. b.ne 1f
  415. add x5, x5, x6 // __va(FDT blob)
  416. add x6, x5, #1 << 21 // 2MB for the FDT blob
  417. sub x6, x6, #1 // inclusive range
  418. create_block_map x0, x7, x3, x5, x6
  419. 1:
  420. #ifdef CONFIG_EARLY_PRINTK
  421. /*
  422. * Create the pgd entry for the UART mapping. The full mapping is done
  423. * later based earlyprintk kernel parameter.
  424. */
  425. ldr x5, =EARLYCON_IOBASE // UART virtual address
  426. add x0, x26, #2 * PAGE_SIZE // section table address
  427. create_pgd_entry x26, x0, x5, x6, x7
  428. #endif
  429. ret
  430. ENDPROC(__create_page_tables)
  431. .ltorg
  432. .align 3
  433. .type __switch_data, %object
  434. __switch_data:
  435. .quad __mmap_switched
  436. .quad __data_loc // x4
  437. .quad _data // x5
  438. .quad __bss_start // x6
  439. .quad _end // x7
  440. .quad processor_id // x4
  441. .quad __fdt_pointer // x5
  442. .quad memstart_addr // x6
  443. .quad init_thread_union + THREAD_START_SP // sp
  444. /*
  445. * The following fragment of code is executed with the MMU on in MMU mode, and
  446. * uses absolute addresses; this is not position independent.
  447. */
  448. __mmap_switched:
  449. adr x3, __switch_data + 8
  450. ldp x4, x5, [x3], #16
  451. ldp x6, x7, [x3], #16
  452. cmp x4, x5 // Copy data segment if needed
  453. 1: ccmp x5, x6, #4, ne
  454. b.eq 2f
  455. ldr x16, [x4], #8
  456. str x16, [x5], #8
  457. b 1b
  458. 2:
  459. 1: cmp x6, x7
  460. b.hs 2f
  461. str xzr, [x6], #8 // Clear BSS
  462. b 1b
  463. 2:
  464. ldp x4, x5, [x3], #16
  465. ldr x6, [x3], #8
  466. ldr x16, [x3]
  467. mov sp, x16
  468. str x22, [x4] // Save processor ID
  469. str x21, [x5] // Save FDT pointer
  470. str x24, [x6] // Save PHYS_OFFSET
  471. mov x29, #0
  472. b start_kernel
  473. ENDPROC(__mmap_switched)
  474. /*
  475. * Exception handling. Something went wrong and we can't proceed. We ought to
  476. * tell the user, but since we don't have any guarantee that we're even
  477. * running on the right architecture, we do virtually nothing.
  478. */
  479. __error_p:
  480. ENDPROC(__error_p)
  481. __error:
  482. 1: nop
  483. b 1b
  484. ENDPROC(__error)
  485. /*
  486. * This function gets the processor ID in w0 and searches the cpu_table[] for
  487. * a match. It returns a pointer to the struct cpu_info it found. The
  488. * cpu_table[] must end with an empty (all zeros) structure.
  489. *
  490. * This routine can be called via C code and it needs to work with the MMU
  491. * both disabled and enabled (the offset is calculated automatically).
  492. */
  493. ENTRY(lookup_processor_type)
  494. adr x1, __lookup_processor_type_data
  495. ldp x2, x3, [x1]
  496. sub x1, x1, x2 // get offset between VA and PA
  497. add x3, x3, x1 // convert VA to PA
  498. 1:
  499. ldp w5, w6, [x3] // load cpu_id_val and cpu_id_mask
  500. cbz w5, 2f // end of list?
  501. and w6, w6, w0
  502. cmp w5, w6
  503. b.eq 3f
  504. add x3, x3, #CPU_INFO_SZ
  505. b 1b
  506. 2:
  507. mov x3, #0 // unknown processor
  508. 3:
  509. mov x0, x3
  510. ret
  511. ENDPROC(lookup_processor_type)
  512. .align 3
  513. .type __lookup_processor_type_data, %object
  514. __lookup_processor_type_data:
  515. .quad .
  516. .quad cpu_table
  517. .size __lookup_processor_type_data, . - __lookup_processor_type_data
  518. /*
  519. * Determine validity of the x21 FDT pointer.
  520. * The dtb must be 8-byte aligned and live in the first 512M of memory.
  521. */
  522. __vet_fdt:
  523. tst x21, #0x7
  524. b.ne 1f
  525. cmp x21, x24
  526. b.lt 1f
  527. mov x0, #(1 << 29)
  528. add x0, x0, x24
  529. cmp x21, x0
  530. b.ge 1f
  531. ret
  532. 1:
  533. mov x21, #0
  534. ret
  535. ENDPROC(__vet_fdt)