traps.c 29 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109
  1. /*
  2. * Copyright (C) 1995-1996 Gary Thomas (gdt@linuxppc.org)
  3. *
  4. * This program is free software; you can redistribute it and/or
  5. * modify it under the terms of the GNU General Public License
  6. * as published by the Free Software Foundation; either version
  7. * 2 of the License, or (at your option) any later version.
  8. *
  9. * Modified by Cort Dougan (cort@cs.nmt.edu)
  10. * and Paul Mackerras (paulus@samba.org)
  11. */
  12. /*
  13. * This file handles the architecture-dependent parts of hardware exceptions
  14. */
  15. #include <linux/errno.h>
  16. #include <linux/sched.h>
  17. #include <linux/kernel.h>
  18. #include <linux/mm.h>
  19. #include <linux/stddef.h>
  20. #include <linux/unistd.h>
  21. #include <linux/ptrace.h>
  22. #include <linux/slab.h>
  23. #include <linux/user.h>
  24. #include <linux/a.out.h>
  25. #include <linux/interrupt.h>
  26. #include <linux/init.h>
  27. #include <linux/module.h>
  28. #include <linux/prctl.h>
  29. #include <linux/delay.h>
  30. #include <linux/kprobes.h>
  31. #include <linux/kexec.h>
  32. #include <linux/backlight.h>
  33. #include <asm/kdebug.h>
  34. #include <asm/pgtable.h>
  35. #include <asm/uaccess.h>
  36. #include <asm/system.h>
  37. #include <asm/io.h>
  38. #include <asm/machdep.h>
  39. #include <asm/rtas.h>
  40. #include <asm/pmc.h>
  41. #ifdef CONFIG_PPC32
  42. #include <asm/reg.h>
  43. #endif
  44. #ifdef CONFIG_PMAC_BACKLIGHT
  45. #include <asm/backlight.h>
  46. #endif
  47. #ifdef CONFIG_PPC64
  48. #include <asm/firmware.h>
  49. #include <asm/processor.h>
  50. #endif
  51. #include <asm/kexec.h>
  52. #ifdef CONFIG_PPC64 /* XXX */
  53. #define _IO_BASE pci_io_base
  54. #endif
  55. #ifdef CONFIG_DEBUGGER
  56. int (*__debugger)(struct pt_regs *regs);
  57. int (*__debugger_ipi)(struct pt_regs *regs);
  58. int (*__debugger_bpt)(struct pt_regs *regs);
  59. int (*__debugger_sstep)(struct pt_regs *regs);
  60. int (*__debugger_iabr_match)(struct pt_regs *regs);
  61. int (*__debugger_dabr_match)(struct pt_regs *regs);
  62. int (*__debugger_fault_handler)(struct pt_regs *regs);
  63. EXPORT_SYMBOL(__debugger);
  64. EXPORT_SYMBOL(__debugger_ipi);
  65. EXPORT_SYMBOL(__debugger_bpt);
  66. EXPORT_SYMBOL(__debugger_sstep);
  67. EXPORT_SYMBOL(__debugger_iabr_match);
  68. EXPORT_SYMBOL(__debugger_dabr_match);
  69. EXPORT_SYMBOL(__debugger_fault_handler);
  70. #endif
  71. ATOMIC_NOTIFIER_HEAD(powerpc_die_chain);
  72. int register_die_notifier(struct notifier_block *nb)
  73. {
  74. return atomic_notifier_chain_register(&powerpc_die_chain, nb);
  75. }
  76. EXPORT_SYMBOL(register_die_notifier);
  77. int unregister_die_notifier(struct notifier_block *nb)
  78. {
  79. return atomic_notifier_chain_unregister(&powerpc_die_chain, nb);
  80. }
  81. EXPORT_SYMBOL(unregister_die_notifier);
  82. /*
  83. * Trap & Exception support
  84. */
  85. static DEFINE_SPINLOCK(die_lock);
  86. int die(const char *str, struct pt_regs *regs, long err)
  87. {
  88. static int die_counter;
  89. if (debugger(regs))
  90. return 1;
  91. console_verbose();
  92. spin_lock_irq(&die_lock);
  93. bust_spinlocks(1);
  94. #ifdef CONFIG_PMAC_BACKLIGHT
  95. mutex_lock(&pmac_backlight_mutex);
  96. if (machine_is(powermac) && pmac_backlight) {
  97. struct backlight_properties *props;
  98. down(&pmac_backlight->sem);
  99. props = pmac_backlight->props;
  100. props->brightness = props->max_brightness;
  101. props->power = FB_BLANK_UNBLANK;
  102. props->update_status(pmac_backlight);
  103. up(&pmac_backlight->sem);
  104. }
  105. mutex_unlock(&pmac_backlight_mutex);
  106. #endif
  107. printk("Oops: %s, sig: %ld [#%d]\n", str, err, ++die_counter);
  108. #ifdef CONFIG_PREEMPT
  109. printk("PREEMPT ");
  110. #endif
  111. #ifdef CONFIG_SMP
  112. printk("SMP NR_CPUS=%d ", NR_CPUS);
  113. #endif
  114. #ifdef CONFIG_DEBUG_PAGEALLOC
  115. printk("DEBUG_PAGEALLOC ");
  116. #endif
  117. #ifdef CONFIG_NUMA
  118. printk("NUMA ");
  119. #endif
  120. printk("%s\n", ppc_md.name ? "" : ppc_md.name);
  121. print_modules();
  122. show_regs(regs);
  123. bust_spinlocks(0);
  124. spin_unlock_irq(&die_lock);
  125. if (kexec_should_crash(current) ||
  126. kexec_sr_activated(smp_processor_id()))
  127. crash_kexec(regs);
  128. crash_kexec_secondary(regs);
  129. if (in_interrupt())
  130. panic("Fatal exception in interrupt");
  131. if (panic_on_oops)
  132. panic("Fatal exception");
  133. do_exit(err);
  134. return 0;
  135. }
  136. void _exception(int signr, struct pt_regs *regs, int code, unsigned long addr)
  137. {
  138. siginfo_t info;
  139. if (!user_mode(regs)) {
  140. if (die("Exception in kernel mode", regs, signr))
  141. return;
  142. }
  143. memset(&info, 0, sizeof(info));
  144. info.si_signo = signr;
  145. info.si_code = code;
  146. info.si_addr = (void __user *) addr;
  147. force_sig_info(signr, &info, current);
  148. /*
  149. * Init gets no signals that it doesn't have a handler for.
  150. * That's all very well, but if it has caused a synchronous
  151. * exception and we ignore the resulting signal, it will just
  152. * generate the same exception over and over again and we get
  153. * nowhere. Better to kill it and let the kernel panic.
  154. */
  155. if (current->pid == 1) {
  156. __sighandler_t handler;
  157. spin_lock_irq(&current->sighand->siglock);
  158. handler = current->sighand->action[signr-1].sa.sa_handler;
  159. spin_unlock_irq(&current->sighand->siglock);
  160. if (handler == SIG_DFL) {
  161. /* init has generated a synchronous exception
  162. and it doesn't have a handler for the signal */
  163. printk(KERN_CRIT "init has generated signal %d "
  164. "but has no handler for it\n", signr);
  165. do_exit(signr);
  166. }
  167. }
  168. }
  169. #ifdef CONFIG_PPC64
  170. void system_reset_exception(struct pt_regs *regs)
  171. {
  172. /* See if any machine dependent calls */
  173. if (ppc_md.system_reset_exception) {
  174. if (ppc_md.system_reset_exception(regs))
  175. return;
  176. }
  177. #ifdef CONFIG_KEXEC
  178. cpu_set(smp_processor_id(), cpus_in_sr);
  179. #endif
  180. die("System Reset", regs, SIGABRT);
  181. /*
  182. * Some CPUs when released from the debugger will execute this path.
  183. * These CPUs entered the debugger via a soft-reset. If the CPU was
  184. * hung before entering the debugger it will return to the hung
  185. * state when exiting this function. This causes a problem in
  186. * kdump since the hung CPU(s) will not respond to the IPI sent
  187. * from kdump. To prevent the problem we call crash_kexec_secondary()
  188. * here. If a kdump had not been initiated or we exit the debugger
  189. * with the "exit and recover" command (x) crash_kexec_secondary()
  190. * will return after 5ms and the CPU returns to its previous state.
  191. */
  192. crash_kexec_secondary(regs);
  193. /* Must die if the interrupt is not recoverable */
  194. if (!(regs->msr & MSR_RI))
  195. panic("Unrecoverable System Reset");
  196. /* What should we do here? We could issue a shutdown or hard reset. */
  197. }
  198. #endif
  199. /*
  200. * I/O accesses can cause machine checks on powermacs.
  201. * Check if the NIP corresponds to the address of a sync
  202. * instruction for which there is an entry in the exception
  203. * table.
  204. * Note that the 601 only takes a machine check on TEA
  205. * (transfer error ack) signal assertion, and does not
  206. * set any of the top 16 bits of SRR1.
  207. * -- paulus.
  208. */
  209. static inline int check_io_access(struct pt_regs *regs)
  210. {
  211. #if defined(CONFIG_PPC_PMAC) && defined(CONFIG_PPC32)
  212. unsigned long msr = regs->msr;
  213. const struct exception_table_entry *entry;
  214. unsigned int *nip = (unsigned int *)regs->nip;
  215. if (((msr & 0xffff0000) == 0 || (msr & (0x80000 | 0x40000)))
  216. && (entry = search_exception_tables(regs->nip)) != NULL) {
  217. /*
  218. * Check that it's a sync instruction, or somewhere
  219. * in the twi; isync; nop sequence that inb/inw/inl uses.
  220. * As the address is in the exception table
  221. * we should be able to read the instr there.
  222. * For the debug message, we look at the preceding
  223. * load or store.
  224. */
  225. if (*nip == 0x60000000) /* nop */
  226. nip -= 2;
  227. else if (*nip == 0x4c00012c) /* isync */
  228. --nip;
  229. if (*nip == 0x7c0004ac || (*nip >> 26) == 3) {
  230. /* sync or twi */
  231. unsigned int rb;
  232. --nip;
  233. rb = (*nip >> 11) & 0x1f;
  234. printk(KERN_DEBUG "%s bad port %lx at %p\n",
  235. (*nip & 0x100)? "OUT to": "IN from",
  236. regs->gpr[rb] - _IO_BASE, nip);
  237. regs->msr |= MSR_RI;
  238. regs->nip = entry->fixup;
  239. return 1;
  240. }
  241. }
  242. #endif /* CONFIG_PPC_PMAC && CONFIG_PPC32 */
  243. return 0;
  244. }
  245. #if defined(CONFIG_4xx) || defined(CONFIG_BOOKE)
  246. /* On 4xx, the reason for the machine check or program exception
  247. is in the ESR. */
  248. #define get_reason(regs) ((regs)->dsisr)
  249. #ifndef CONFIG_FSL_BOOKE
  250. #define get_mc_reason(regs) ((regs)->dsisr)
  251. #else
  252. #define get_mc_reason(regs) (mfspr(SPRN_MCSR))
  253. #endif
  254. #define REASON_FP ESR_FP
  255. #define REASON_ILLEGAL (ESR_PIL | ESR_PUO)
  256. #define REASON_PRIVILEGED ESR_PPR
  257. #define REASON_TRAP ESR_PTR
  258. /* single-step stuff */
  259. #define single_stepping(regs) (current->thread.dbcr0 & DBCR0_IC)
  260. #define clear_single_step(regs) (current->thread.dbcr0 &= ~DBCR0_IC)
  261. #else
  262. /* On non-4xx, the reason for the machine check or program
  263. exception is in the MSR. */
  264. #define get_reason(regs) ((regs)->msr)
  265. #define get_mc_reason(regs) ((regs)->msr)
  266. #define REASON_FP 0x100000
  267. #define REASON_ILLEGAL 0x80000
  268. #define REASON_PRIVILEGED 0x40000
  269. #define REASON_TRAP 0x20000
  270. #define single_stepping(regs) ((regs)->msr & MSR_SE)
  271. #define clear_single_step(regs) ((regs)->msr &= ~MSR_SE)
  272. #endif
  273. /*
  274. * This is "fall-back" implementation for configurations
  275. * which don't provide platform-specific machine check info
  276. */
  277. void __attribute__ ((weak))
  278. platform_machine_check(struct pt_regs *regs)
  279. {
  280. }
  281. void machine_check_exception(struct pt_regs *regs)
  282. {
  283. int recover = 0;
  284. unsigned long reason = get_mc_reason(regs);
  285. /* See if any machine dependent calls */
  286. if (ppc_md.machine_check_exception)
  287. recover = ppc_md.machine_check_exception(regs);
  288. if (recover)
  289. return;
  290. if (user_mode(regs)) {
  291. regs->msr |= MSR_RI;
  292. _exception(SIGBUS, regs, BUS_ADRERR, regs->nip);
  293. return;
  294. }
  295. #if defined(CONFIG_8xx) && defined(CONFIG_PCI)
  296. /* the qspan pci read routines can cause machine checks -- Cort */
  297. bad_page_fault(regs, regs->dar, SIGBUS);
  298. return;
  299. #endif
  300. if (debugger_fault_handler(regs)) {
  301. regs->msr |= MSR_RI;
  302. return;
  303. }
  304. if (check_io_access(regs))
  305. return;
  306. #if defined(CONFIG_4xx) && !defined(CONFIG_440A)
  307. if (reason & ESR_IMCP) {
  308. printk("Instruction");
  309. mtspr(SPRN_ESR, reason & ~ESR_IMCP);
  310. } else
  311. printk("Data");
  312. printk(" machine check in kernel mode.\n");
  313. #elif defined(CONFIG_440A)
  314. printk("Machine check in kernel mode.\n");
  315. if (reason & ESR_IMCP){
  316. printk("Instruction Synchronous Machine Check exception\n");
  317. mtspr(SPRN_ESR, reason & ~ESR_IMCP);
  318. }
  319. else {
  320. u32 mcsr = mfspr(SPRN_MCSR);
  321. if (mcsr & MCSR_IB)
  322. printk("Instruction Read PLB Error\n");
  323. if (mcsr & MCSR_DRB)
  324. printk("Data Read PLB Error\n");
  325. if (mcsr & MCSR_DWB)
  326. printk("Data Write PLB Error\n");
  327. if (mcsr & MCSR_TLBP)
  328. printk("TLB Parity Error\n");
  329. if (mcsr & MCSR_ICP){
  330. flush_instruction_cache();
  331. printk("I-Cache Parity Error\n");
  332. }
  333. if (mcsr & MCSR_DCSP)
  334. printk("D-Cache Search Parity Error\n");
  335. if (mcsr & MCSR_DCFP)
  336. printk("D-Cache Flush Parity Error\n");
  337. if (mcsr & MCSR_IMPE)
  338. printk("Machine Check exception is imprecise\n");
  339. /* Clear MCSR */
  340. mtspr(SPRN_MCSR, mcsr);
  341. }
  342. #elif defined (CONFIG_E500)
  343. printk("Machine check in kernel mode.\n");
  344. printk("Caused by (from MCSR=%lx): ", reason);
  345. if (reason & MCSR_MCP)
  346. printk("Machine Check Signal\n");
  347. if (reason & MCSR_ICPERR)
  348. printk("Instruction Cache Parity Error\n");
  349. if (reason & MCSR_DCP_PERR)
  350. printk("Data Cache Push Parity Error\n");
  351. if (reason & MCSR_DCPERR)
  352. printk("Data Cache Parity Error\n");
  353. if (reason & MCSR_GL_CI)
  354. printk("Guarded Load or Cache-Inhibited stwcx.\n");
  355. if (reason & MCSR_BUS_IAERR)
  356. printk("Bus - Instruction Address Error\n");
  357. if (reason & MCSR_BUS_RAERR)
  358. printk("Bus - Read Address Error\n");
  359. if (reason & MCSR_BUS_WAERR)
  360. printk("Bus - Write Address Error\n");
  361. if (reason & MCSR_BUS_IBERR)
  362. printk("Bus - Instruction Data Error\n");
  363. if (reason & MCSR_BUS_RBERR)
  364. printk("Bus - Read Data Bus Error\n");
  365. if (reason & MCSR_BUS_WBERR)
  366. printk("Bus - Read Data Bus Error\n");
  367. if (reason & MCSR_BUS_IPERR)
  368. printk("Bus - Instruction Parity Error\n");
  369. if (reason & MCSR_BUS_RPERR)
  370. printk("Bus - Read Parity Error\n");
  371. #elif defined (CONFIG_E200)
  372. printk("Machine check in kernel mode.\n");
  373. printk("Caused by (from MCSR=%lx): ", reason);
  374. if (reason & MCSR_MCP)
  375. printk("Machine Check Signal\n");
  376. if (reason & MCSR_CP_PERR)
  377. printk("Cache Push Parity Error\n");
  378. if (reason & MCSR_CPERR)
  379. printk("Cache Parity Error\n");
  380. if (reason & MCSR_EXCP_ERR)
  381. printk("ISI, ITLB, or Bus Error on first instruction fetch for an exception handler\n");
  382. if (reason & MCSR_BUS_IRERR)
  383. printk("Bus - Read Bus Error on instruction fetch\n");
  384. if (reason & MCSR_BUS_DRERR)
  385. printk("Bus - Read Bus Error on data load\n");
  386. if (reason & MCSR_BUS_WRERR)
  387. printk("Bus - Write Bus Error on buffered store or cache line push\n");
  388. #else /* !CONFIG_4xx && !CONFIG_E500 && !CONFIG_E200 */
  389. printk("Machine check in kernel mode.\n");
  390. printk("Caused by (from SRR1=%lx): ", reason);
  391. switch (reason & 0x601F0000) {
  392. case 0x80000:
  393. printk("Machine check signal\n");
  394. break;
  395. case 0: /* for 601 */
  396. case 0x40000:
  397. case 0x140000: /* 7450 MSS error and TEA */
  398. printk("Transfer error ack signal\n");
  399. break;
  400. case 0x20000:
  401. printk("Data parity error signal\n");
  402. break;
  403. case 0x10000:
  404. printk("Address parity error signal\n");
  405. break;
  406. case 0x20000000:
  407. printk("L1 Data Cache error\n");
  408. break;
  409. case 0x40000000:
  410. printk("L1 Instruction Cache error\n");
  411. break;
  412. case 0x00100000:
  413. printk("L2 data cache parity error\n");
  414. break;
  415. default:
  416. printk("Unknown values in msr\n");
  417. }
  418. #endif /* CONFIG_4xx */
  419. /*
  420. * Optional platform-provided routine to print out
  421. * additional info, e.g. bus error registers.
  422. */
  423. platform_machine_check(regs);
  424. if (debugger_fault_handler(regs))
  425. return;
  426. die("Machine check", regs, SIGBUS);
  427. /* Must die if the interrupt is not recoverable */
  428. if (!(regs->msr & MSR_RI))
  429. panic("Unrecoverable Machine check");
  430. }
  431. void SMIException(struct pt_regs *regs)
  432. {
  433. die("System Management Interrupt", regs, SIGABRT);
  434. }
  435. void unknown_exception(struct pt_regs *regs)
  436. {
  437. printk("Bad trap at PC: %lx, SR: %lx, vector=%lx\n",
  438. regs->nip, regs->msr, regs->trap);
  439. _exception(SIGTRAP, regs, 0, 0);
  440. }
  441. void instruction_breakpoint_exception(struct pt_regs *regs)
  442. {
  443. if (notify_die(DIE_IABR_MATCH, "iabr_match", regs, 5,
  444. 5, SIGTRAP) == NOTIFY_STOP)
  445. return;
  446. if (debugger_iabr_match(regs))
  447. return;
  448. _exception(SIGTRAP, regs, TRAP_BRKPT, regs->nip);
  449. }
  450. void RunModeException(struct pt_regs *regs)
  451. {
  452. _exception(SIGTRAP, regs, 0, 0);
  453. }
  454. void __kprobes single_step_exception(struct pt_regs *regs)
  455. {
  456. regs->msr &= ~(MSR_SE | MSR_BE); /* Turn off 'trace' bits */
  457. if (notify_die(DIE_SSTEP, "single_step", regs, 5,
  458. 5, SIGTRAP) == NOTIFY_STOP)
  459. return;
  460. if (debugger_sstep(regs))
  461. return;
  462. _exception(SIGTRAP, regs, TRAP_TRACE, regs->nip);
  463. }
  464. /*
  465. * After we have successfully emulated an instruction, we have to
  466. * check if the instruction was being single-stepped, and if so,
  467. * pretend we got a single-step exception. This was pointed out
  468. * by Kumar Gala. -- paulus
  469. */
  470. static void emulate_single_step(struct pt_regs *regs)
  471. {
  472. if (single_stepping(regs)) {
  473. clear_single_step(regs);
  474. _exception(SIGTRAP, regs, TRAP_TRACE, 0);
  475. }
  476. }
  477. static void parse_fpe(struct pt_regs *regs)
  478. {
  479. int code = 0;
  480. unsigned long fpscr;
  481. flush_fp_to_thread(current);
  482. fpscr = current->thread.fpscr.val;
  483. /* Invalid operation */
  484. if ((fpscr & FPSCR_VE) && (fpscr & FPSCR_VX))
  485. code = FPE_FLTINV;
  486. /* Overflow */
  487. else if ((fpscr & FPSCR_OE) && (fpscr & FPSCR_OX))
  488. code = FPE_FLTOVF;
  489. /* Underflow */
  490. else if ((fpscr & FPSCR_UE) && (fpscr & FPSCR_UX))
  491. code = FPE_FLTUND;
  492. /* Divide by zero */
  493. else if ((fpscr & FPSCR_ZE) && (fpscr & FPSCR_ZX))
  494. code = FPE_FLTDIV;
  495. /* Inexact result */
  496. else if ((fpscr & FPSCR_XE) && (fpscr & FPSCR_XX))
  497. code = FPE_FLTRES;
  498. _exception(SIGFPE, regs, code, regs->nip);
  499. }
  500. /*
  501. * Illegal instruction emulation support. Originally written to
  502. * provide the PVR to user applications using the mfspr rd, PVR.
  503. * Return non-zero if we can't emulate, or -EFAULT if the associated
  504. * memory access caused an access fault. Return zero on success.
  505. *
  506. * There are a couple of ways to do this, either "decode" the instruction
  507. * or directly match lots of bits. In this case, matching lots of
  508. * bits is faster and easier.
  509. *
  510. */
  511. #define INST_MFSPR_PVR 0x7c1f42a6
  512. #define INST_MFSPR_PVR_MASK 0xfc1fffff
  513. #define INST_DCBA 0x7c0005ec
  514. #define INST_DCBA_MASK 0xfc0007fe
  515. #define INST_MCRXR 0x7c000400
  516. #define INST_MCRXR_MASK 0xfc0007fe
  517. #define INST_STRING 0x7c00042a
  518. #define INST_STRING_MASK 0xfc0007fe
  519. #define INST_STRING_GEN_MASK 0xfc00067e
  520. #define INST_LSWI 0x7c0004aa
  521. #define INST_LSWX 0x7c00042a
  522. #define INST_STSWI 0x7c0005aa
  523. #define INST_STSWX 0x7c00052a
  524. #define INST_POPCNTB 0x7c0000f4
  525. #define INST_POPCNTB_MASK 0xfc0007fe
  526. static int emulate_string_inst(struct pt_regs *regs, u32 instword)
  527. {
  528. u8 rT = (instword >> 21) & 0x1f;
  529. u8 rA = (instword >> 16) & 0x1f;
  530. u8 NB_RB = (instword >> 11) & 0x1f;
  531. u32 num_bytes;
  532. unsigned long EA;
  533. int pos = 0;
  534. /* Early out if we are an invalid form of lswx */
  535. if ((instword & INST_STRING_MASK) == INST_LSWX)
  536. if ((rT == rA) || (rT == NB_RB))
  537. return -EINVAL;
  538. EA = (rA == 0) ? 0 : regs->gpr[rA];
  539. switch (instword & INST_STRING_MASK) {
  540. case INST_LSWX:
  541. case INST_STSWX:
  542. EA += NB_RB;
  543. num_bytes = regs->xer & 0x7f;
  544. break;
  545. case INST_LSWI:
  546. case INST_STSWI:
  547. num_bytes = (NB_RB == 0) ? 32 : NB_RB;
  548. break;
  549. default:
  550. return -EINVAL;
  551. }
  552. while (num_bytes != 0)
  553. {
  554. u8 val;
  555. u32 shift = 8 * (3 - (pos & 0x3));
  556. switch ((instword & INST_STRING_MASK)) {
  557. case INST_LSWX:
  558. case INST_LSWI:
  559. if (get_user(val, (u8 __user *)EA))
  560. return -EFAULT;
  561. /* first time updating this reg,
  562. * zero it out */
  563. if (pos == 0)
  564. regs->gpr[rT] = 0;
  565. regs->gpr[rT] |= val << shift;
  566. break;
  567. case INST_STSWI:
  568. case INST_STSWX:
  569. val = regs->gpr[rT] >> shift;
  570. if (put_user(val, (u8 __user *)EA))
  571. return -EFAULT;
  572. break;
  573. }
  574. /* move EA to next address */
  575. EA += 1;
  576. num_bytes--;
  577. /* manage our position within the register */
  578. if (++pos == 4) {
  579. pos = 0;
  580. if (++rT == 32)
  581. rT = 0;
  582. }
  583. }
  584. return 0;
  585. }
  586. static int emulate_popcntb_inst(struct pt_regs *regs, u32 instword)
  587. {
  588. u32 ra,rs;
  589. unsigned long tmp;
  590. ra = (instword >> 16) & 0x1f;
  591. rs = (instword >> 21) & 0x1f;
  592. tmp = regs->gpr[rs];
  593. tmp = tmp - ((tmp >> 1) & 0x5555555555555555ULL);
  594. tmp = (tmp & 0x3333333333333333ULL) + ((tmp >> 2) & 0x3333333333333333ULL);
  595. tmp = (tmp + (tmp >> 4)) & 0x0f0f0f0f0f0f0f0fULL;
  596. regs->gpr[ra] = tmp;
  597. return 0;
  598. }
  599. static int emulate_instruction(struct pt_regs *regs)
  600. {
  601. u32 instword;
  602. u32 rd;
  603. if (!user_mode(regs) || (regs->msr & MSR_LE))
  604. return -EINVAL;
  605. CHECK_FULL_REGS(regs);
  606. if (get_user(instword, (u32 __user *)(regs->nip)))
  607. return -EFAULT;
  608. /* Emulate the mfspr rD, PVR. */
  609. if ((instword & INST_MFSPR_PVR_MASK) == INST_MFSPR_PVR) {
  610. rd = (instword >> 21) & 0x1f;
  611. regs->gpr[rd] = mfspr(SPRN_PVR);
  612. return 0;
  613. }
  614. /* Emulating the dcba insn is just a no-op. */
  615. if ((instword & INST_DCBA_MASK) == INST_DCBA)
  616. return 0;
  617. /* Emulate the mcrxr insn. */
  618. if ((instword & INST_MCRXR_MASK) == INST_MCRXR) {
  619. int shift = (instword >> 21) & 0x1c;
  620. unsigned long msk = 0xf0000000UL >> shift;
  621. regs->ccr = (regs->ccr & ~msk) | ((regs->xer >> shift) & msk);
  622. regs->xer &= ~0xf0000000UL;
  623. return 0;
  624. }
  625. /* Emulate load/store string insn. */
  626. if ((instword & INST_STRING_GEN_MASK) == INST_STRING)
  627. return emulate_string_inst(regs, instword);
  628. /* Emulate the popcntb (Population Count Bytes) instruction. */
  629. if ((instword & INST_POPCNTB_MASK) == INST_POPCNTB) {
  630. return emulate_popcntb_inst(regs, instword);
  631. }
  632. return -EINVAL;
  633. }
  634. /*
  635. * Look through the list of trap instructions that are used for BUG(),
  636. * BUG_ON() and WARN_ON() and see if we hit one. At this point we know
  637. * that the exception was caused by a trap instruction of some kind.
  638. * Returns 1 if we should continue (i.e. it was a WARN_ON) or 0
  639. * otherwise.
  640. */
  641. extern struct bug_entry __start___bug_table[], __stop___bug_table[];
  642. #ifndef CONFIG_MODULES
  643. #define module_find_bug(x) NULL
  644. #endif
  645. struct bug_entry *find_bug(unsigned long bugaddr)
  646. {
  647. struct bug_entry *bug;
  648. for (bug = __start___bug_table; bug < __stop___bug_table; ++bug)
  649. if (bugaddr == bug->bug_addr)
  650. return bug;
  651. return module_find_bug(bugaddr);
  652. }
  653. static int check_bug_trap(struct pt_regs *regs)
  654. {
  655. struct bug_entry *bug;
  656. unsigned long addr;
  657. if (regs->msr & MSR_PR)
  658. return 0; /* not in kernel */
  659. addr = regs->nip; /* address of trap instruction */
  660. if (addr < PAGE_OFFSET)
  661. return 0;
  662. bug = find_bug(regs->nip);
  663. if (bug == NULL)
  664. return 0;
  665. if (bug->line & BUG_WARNING_TRAP) {
  666. /* this is a WARN_ON rather than BUG/BUG_ON */
  667. printk(KERN_ERR "Badness in %s at %s:%ld\n",
  668. bug->function, bug->file,
  669. bug->line & ~BUG_WARNING_TRAP);
  670. dump_stack();
  671. return 1;
  672. }
  673. printk(KERN_CRIT "kernel BUG in %s at %s:%ld!\n",
  674. bug->function, bug->file, bug->line);
  675. return 0;
  676. }
  677. void __kprobes program_check_exception(struct pt_regs *regs)
  678. {
  679. unsigned int reason = get_reason(regs);
  680. extern int do_mathemu(struct pt_regs *regs);
  681. #ifdef CONFIG_MATH_EMULATION
  682. /* (reason & REASON_ILLEGAL) would be the obvious thing here,
  683. * but there seems to be a hardware bug on the 405GP (RevD)
  684. * that means ESR is sometimes set incorrectly - either to
  685. * ESR_DST (!?) or 0. In the process of chasing this with the
  686. * hardware people - not sure if it can happen on any illegal
  687. * instruction or only on FP instructions, whether there is a
  688. * pattern to occurences etc. -dgibson 31/Mar/2003 */
  689. if (!(reason & REASON_TRAP) && do_mathemu(regs) == 0) {
  690. emulate_single_step(regs);
  691. return;
  692. }
  693. #endif /* CONFIG_MATH_EMULATION */
  694. if (reason & REASON_FP) {
  695. /* IEEE FP exception */
  696. parse_fpe(regs);
  697. return;
  698. }
  699. if (reason & REASON_TRAP) {
  700. /* trap exception */
  701. if (notify_die(DIE_BPT, "breakpoint", regs, 5, 5, SIGTRAP)
  702. == NOTIFY_STOP)
  703. return;
  704. if (debugger_bpt(regs))
  705. return;
  706. if (check_bug_trap(regs)) {
  707. regs->nip += 4;
  708. return;
  709. }
  710. _exception(SIGTRAP, regs, TRAP_BRKPT, regs->nip);
  711. return;
  712. }
  713. local_irq_enable();
  714. /* Try to emulate it if we should. */
  715. if (reason & (REASON_ILLEGAL | REASON_PRIVILEGED)) {
  716. switch (emulate_instruction(regs)) {
  717. case 0:
  718. regs->nip += 4;
  719. emulate_single_step(regs);
  720. return;
  721. case -EFAULT:
  722. _exception(SIGSEGV, regs, SEGV_MAPERR, regs->nip);
  723. return;
  724. }
  725. }
  726. if (reason & REASON_PRIVILEGED)
  727. _exception(SIGILL, regs, ILL_PRVOPC, regs->nip);
  728. else
  729. _exception(SIGILL, regs, ILL_ILLOPC, regs->nip);
  730. }
  731. void alignment_exception(struct pt_regs *regs)
  732. {
  733. int fixed = 0;
  734. /* we don't implement logging of alignment exceptions */
  735. if (!(current->thread.align_ctl & PR_UNALIGN_SIGBUS))
  736. fixed = fix_alignment(regs);
  737. if (fixed == 1) {
  738. regs->nip += 4; /* skip over emulated instruction */
  739. emulate_single_step(regs);
  740. return;
  741. }
  742. /* Operand address was bad */
  743. if (fixed == -EFAULT) {
  744. if (user_mode(regs))
  745. _exception(SIGSEGV, regs, SEGV_ACCERR, regs->dar);
  746. else
  747. /* Search exception table */
  748. bad_page_fault(regs, regs->dar, SIGSEGV);
  749. return;
  750. }
  751. _exception(SIGBUS, regs, BUS_ADRALN, regs->dar);
  752. }
  753. void StackOverflow(struct pt_regs *regs)
  754. {
  755. printk(KERN_CRIT "Kernel stack overflow in process %p, r1=%lx\n",
  756. current, regs->gpr[1]);
  757. debugger(regs);
  758. show_regs(regs);
  759. panic("kernel stack overflow");
  760. }
  761. void nonrecoverable_exception(struct pt_regs *regs)
  762. {
  763. printk(KERN_ERR "Non-recoverable exception at PC=%lx MSR=%lx\n",
  764. regs->nip, regs->msr);
  765. debugger(regs);
  766. die("nonrecoverable exception", regs, SIGKILL);
  767. }
  768. void trace_syscall(struct pt_regs *regs)
  769. {
  770. printk("Task: %p(%d), PC: %08lX/%08lX, Syscall: %3ld, Result: %s%ld %s\n",
  771. current, current->pid, regs->nip, regs->link, regs->gpr[0],
  772. regs->ccr&0x10000000?"Error=":"", regs->gpr[3], print_tainted());
  773. }
  774. void kernel_fp_unavailable_exception(struct pt_regs *regs)
  775. {
  776. printk(KERN_EMERG "Unrecoverable FP Unavailable Exception "
  777. "%lx at %lx\n", regs->trap, regs->nip);
  778. die("Unrecoverable FP Unavailable Exception", regs, SIGABRT);
  779. }
  780. void altivec_unavailable_exception(struct pt_regs *regs)
  781. {
  782. if (user_mode(regs)) {
  783. /* A user program has executed an altivec instruction,
  784. but this kernel doesn't support altivec. */
  785. _exception(SIGILL, regs, ILL_ILLOPC, regs->nip);
  786. return;
  787. }
  788. printk(KERN_EMERG "Unrecoverable VMX/Altivec Unavailable Exception "
  789. "%lx at %lx\n", regs->trap, regs->nip);
  790. die("Unrecoverable VMX/Altivec Unavailable Exception", regs, SIGABRT);
  791. }
  792. void performance_monitor_exception(struct pt_regs *regs)
  793. {
  794. perf_irq(regs);
  795. }
  796. #ifdef CONFIG_8xx
  797. void SoftwareEmulation(struct pt_regs *regs)
  798. {
  799. extern int do_mathemu(struct pt_regs *);
  800. extern int Soft_emulate_8xx(struct pt_regs *);
  801. int errcode;
  802. CHECK_FULL_REGS(regs);
  803. if (!user_mode(regs)) {
  804. debugger(regs);
  805. die("Kernel Mode Software FPU Emulation", regs, SIGFPE);
  806. }
  807. #ifdef CONFIG_MATH_EMULATION
  808. errcode = do_mathemu(regs);
  809. #else
  810. errcode = Soft_emulate_8xx(regs);
  811. #endif
  812. if (errcode) {
  813. if (errcode > 0)
  814. _exception(SIGFPE, regs, 0, 0);
  815. else if (errcode == -EFAULT)
  816. _exception(SIGSEGV, regs, 0, 0);
  817. else
  818. _exception(SIGILL, regs, ILL_ILLOPC, regs->nip);
  819. } else
  820. emulate_single_step(regs);
  821. }
  822. #endif /* CONFIG_8xx */
  823. #if defined(CONFIG_40x) || defined(CONFIG_BOOKE)
  824. void DebugException(struct pt_regs *regs, unsigned long debug_status)
  825. {
  826. if (debug_status & DBSR_IC) { /* instruction completion */
  827. regs->msr &= ~MSR_DE;
  828. if (user_mode(regs)) {
  829. current->thread.dbcr0 &= ~DBCR0_IC;
  830. } else {
  831. /* Disable instruction completion */
  832. mtspr(SPRN_DBCR0, mfspr(SPRN_DBCR0) & ~DBCR0_IC);
  833. /* Clear the instruction completion event */
  834. mtspr(SPRN_DBSR, DBSR_IC);
  835. if (debugger_sstep(regs))
  836. return;
  837. }
  838. _exception(SIGTRAP, regs, TRAP_TRACE, 0);
  839. }
  840. }
  841. #endif /* CONFIG_4xx || CONFIG_BOOKE */
  842. #if !defined(CONFIG_TAU_INT)
  843. void TAUException(struct pt_regs *regs)
  844. {
  845. printk("TAU trap at PC: %lx, MSR: %lx, vector=%lx %s\n",
  846. regs->nip, regs->msr, regs->trap, print_tainted());
  847. }
  848. #endif /* CONFIG_INT_TAU */
  849. #ifdef CONFIG_ALTIVEC
  850. void altivec_assist_exception(struct pt_regs *regs)
  851. {
  852. int err;
  853. if (!user_mode(regs)) {
  854. printk(KERN_EMERG "VMX/Altivec assist exception in kernel mode"
  855. " at %lx\n", regs->nip);
  856. die("Kernel VMX/Altivec assist exception", regs, SIGILL);
  857. }
  858. flush_altivec_to_thread(current);
  859. err = emulate_altivec(regs);
  860. if (err == 0) {
  861. regs->nip += 4; /* skip emulated instruction */
  862. emulate_single_step(regs);
  863. return;
  864. }
  865. if (err == -EFAULT) {
  866. /* got an error reading the instruction */
  867. _exception(SIGSEGV, regs, SEGV_ACCERR, regs->nip);
  868. } else {
  869. /* didn't recognize the instruction */
  870. /* XXX quick hack for now: set the non-Java bit in the VSCR */
  871. if (printk_ratelimit())
  872. printk(KERN_ERR "Unrecognized altivec instruction "
  873. "in %s at %lx\n", current->comm, regs->nip);
  874. current->thread.vscr.u[3] |= 0x10000;
  875. }
  876. }
  877. #endif /* CONFIG_ALTIVEC */
  878. #ifdef CONFIG_FSL_BOOKE
  879. void CacheLockingException(struct pt_regs *regs, unsigned long address,
  880. unsigned long error_code)
  881. {
  882. /* We treat cache locking instructions from the user
  883. * as priv ops, in the future we could try to do
  884. * something smarter
  885. */
  886. if (error_code & (ESR_DLK|ESR_ILK))
  887. _exception(SIGILL, regs, ILL_PRVOPC, regs->nip);
  888. return;
  889. }
  890. #endif /* CONFIG_FSL_BOOKE */
  891. #ifdef CONFIG_SPE
  892. void SPEFloatingPointException(struct pt_regs *regs)
  893. {
  894. unsigned long spefscr;
  895. int fpexc_mode;
  896. int code = 0;
  897. spefscr = current->thread.spefscr;
  898. fpexc_mode = current->thread.fpexc_mode;
  899. /* Hardware does not neccessarily set sticky
  900. * underflow/overflow/invalid flags */
  901. if ((spefscr & SPEFSCR_FOVF) && (fpexc_mode & PR_FP_EXC_OVF)) {
  902. code = FPE_FLTOVF;
  903. spefscr |= SPEFSCR_FOVFS;
  904. }
  905. else if ((spefscr & SPEFSCR_FUNF) && (fpexc_mode & PR_FP_EXC_UND)) {
  906. code = FPE_FLTUND;
  907. spefscr |= SPEFSCR_FUNFS;
  908. }
  909. else if ((spefscr & SPEFSCR_FDBZ) && (fpexc_mode & PR_FP_EXC_DIV))
  910. code = FPE_FLTDIV;
  911. else if ((spefscr & SPEFSCR_FINV) && (fpexc_mode & PR_FP_EXC_INV)) {
  912. code = FPE_FLTINV;
  913. spefscr |= SPEFSCR_FINVS;
  914. }
  915. else if ((spefscr & (SPEFSCR_FG | SPEFSCR_FX)) && (fpexc_mode & PR_FP_EXC_RES))
  916. code = FPE_FLTRES;
  917. current->thread.spefscr = spefscr;
  918. _exception(SIGFPE, regs, code, regs->nip);
  919. return;
  920. }
  921. #endif
  922. /*
  923. * We enter here if we get an unrecoverable exception, that is, one
  924. * that happened at a point where the RI (recoverable interrupt) bit
  925. * in the MSR is 0. This indicates that SRR0/1 are live, and that
  926. * we therefore lost state by taking this exception.
  927. */
  928. void unrecoverable_exception(struct pt_regs *regs)
  929. {
  930. printk(KERN_EMERG "Unrecoverable exception %lx at %lx\n",
  931. regs->trap, regs->nip);
  932. die("Unrecoverable exception", regs, SIGABRT);
  933. }
  934. #ifdef CONFIG_BOOKE_WDT
  935. /*
  936. * Default handler for a Watchdog exception,
  937. * spins until a reboot occurs
  938. */
  939. void __attribute__ ((weak)) WatchdogHandler(struct pt_regs *regs)
  940. {
  941. /* Generic WatchdogHandler, implement your own */
  942. mtspr(SPRN_TCR, mfspr(SPRN_TCR)&(~TCR_WIE));
  943. return;
  944. }
  945. void WatchdogException(struct pt_regs *regs)
  946. {
  947. printk (KERN_EMERG "PowerPC Book-E Watchdog Exception\n");
  948. WatchdogHandler(regs);
  949. }
  950. #endif
  951. /*
  952. * We enter here if we discover during exception entry that we are
  953. * running in supervisor mode with a userspace value in the stack pointer.
  954. */
  955. void kernel_bad_stack(struct pt_regs *regs)
  956. {
  957. printk(KERN_EMERG "Bad kernel stack pointer %lx at %lx\n",
  958. regs->gpr[1], regs->nip);
  959. die("Bad kernel stack pointer", regs, SIGABRT);
  960. }
  961. void __init trap_init(void)
  962. {
  963. }