2 /* Simulator for the MIPS architecture.
4 This file is part of the MIPS sim
6 THIS SOFTWARE IS NOT COPYRIGHTED
8 Cygnus offers the following for use in the public domain. Cygnus
9 makes no warranty with regard to the software or it's performance
10 and the user accepts the software "AS IS" with all faults.
12 CYGNUS DISCLAIMS ANY WARRANTIES, EXPRESS OR IMPLIED, WITH REGARD TO
13 THIS SOFTWARE INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
14 MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
21 The IDT monitor (found on the VR4300 board), seems to lie about
22 register contents. It seems to treat the registers as sign-extended
23 32-bit values. This cause *REAL* problems when single-stepping 64-bit
28 /* The TRACE manifests enable the provision of extra features. If they
29 are not defined then a simpler (quicker) simulator is constructed
30 without the required run-time checks, etc. */
31 #if 1 /* 0 to allow user build selection, 1 to force inclusion */
37 #include "sim-utils.h"
38 #include "sim-options.h"
39 #include "sim-assert.h"
65 #include "libiberty.h"
67 #include "callback.h" /* GDB simulator callback interface */
68 #include "remote-sim.h" /* GDB simulator interface */
76 char* pr_addr
PARAMS ((SIM_ADDR addr
));
77 char* pr_uword64
PARAMS ((uword64 addr
));
80 /* Within interp.c we refer to the sim_state and sim_cpu directly. */
85 /* The following reserved instruction value is used when a simulator
86 trap is required. NOTE: Care must be taken, since this value may be
87 used in later revisions of the MIPS ISA. */
89 #define RSVD_INSTRUCTION (0x00000005)
90 #define RSVD_INSTRUCTION_MASK (0xFC00003F)
92 #define RSVD_INSTRUCTION_ARG_SHIFT 6
93 #define RSVD_INSTRUCTION_ARG_MASK 0xFFFFF
96 /* Bits in the Debug register */
97 #define Debug_DBD 0x80000000 /* Debug Branch Delay */
98 #define Debug_DM 0x40000000 /* Debug Mode */
99 #define Debug_DBp 0x00000002 /* Debug Breakpoint indicator */
101 /*---------------------------------------------------------------------------*/
102 /*-- GDB simulator interface ------------------------------------------------*/
103 /*---------------------------------------------------------------------------*/
105 static void ColdReset
PARAMS((SIM_DESC sd
));
107 /*---------------------------------------------------------------------------*/
111 #define DELAYSLOT() {\
112 if (STATE & simDELAYSLOT)\
113 sim_io_eprintf(sd,"Delay slot already activated (branch in delay slot?)\n");\
114 STATE |= simDELAYSLOT;\
117 #define JALDELAYSLOT() {\
119 STATE |= simJALDELAYSLOT;\
123 STATE &= ~simDELAYSLOT;\
124 STATE |= simSKIPNEXT;\
127 #define CANCELDELAYSLOT() {\
129 STATE &= ~(simDELAYSLOT | simJALDELAYSLOT);\
132 #define INDELAYSLOT() ((STATE & simDELAYSLOT) != 0)
133 #define INJALDELAYSLOT() ((STATE & simJALDELAYSLOT) != 0)
135 /* Note that the monitor code essentially assumes this layout of memory.
136 If you change these, change the monitor code, too. */
137 #define K0BASE (0x80000000)
138 #define K0SIZE (0x20000000)
139 #define K1BASE (0xA0000000)
140 #define K1SIZE (0x20000000)
142 /* Simple run-time monitor support.
144 We emulate the monitor by placing magic reserved instructions at
145 the monitor's entry points; when we hit these instructions, instead
146 of raising an exception (as we would normally), we look at the
147 instruction and perform the appropriate monitory operation.
149 `*_monitor_base' are the physical addresses at which the corresponding
150 monitor vectors are located. `0' means none. By default,
152 The RSVD_INSTRUCTION... macros specify the magic instructions we
153 use at the monitor entry points. */
154 static int firmware_option_p
= 0;
155 static SIM_ADDR idt_monitor_base
= 0xBFC00000;
156 static SIM_ADDR pmon_monitor_base
= 0xBFC00500;
157 static SIM_ADDR lsipmon_monitor_base
= 0xBFC00200;
159 static SIM_RC
sim_firmware_command (SIM_DESC sd
, char* arg
);
162 #define MEM_SIZE (2 << 20)
166 static char *tracefile
= "trace.din"; /* default filename for trace log */
167 FILE *tracefh
= NULL
;
168 static void open_trace
PARAMS((SIM_DESC sd
));
171 static const char * get_insn_name (sim_cpu
*, int);
173 /* simulation target board. NULL=canonical */
174 static char* board
= NULL
;
177 static DECLARE_OPTION_HANDLER (mips_option_handler
);
180 OPTION_DINERO_TRACE
= OPTION_START
,
188 mips_option_handler (sd
, cpu
, opt
, arg
, is_command
)
198 case OPTION_DINERO_TRACE
: /* ??? */
200 /* Eventually the simTRACE flag could be treated as a toggle, to
201 allow external control of the program points being traced
202 (i.e. only from main onwards, excluding the run-time setup,
204 for (cpu_nr
= 0; cpu_nr
< MAX_NR_PROCESSORS
; cpu_nr
++)
206 sim_cpu
*cpu
= STATE_CPU (sd
, cpu_nr
);
209 else if (strcmp (arg
, "yes") == 0)
211 else if (strcmp (arg
, "no") == 0)
213 else if (strcmp (arg
, "on") == 0)
215 else if (strcmp (arg
, "off") == 0)
219 fprintf (stderr
, "Unrecognized dinero-trace option `%s'\n", arg
);
226 Simulator constructed without dinero tracing support (for performance).\n\
227 Re-compile simulator with \"-DTRACE\" to enable this option.\n");
231 case OPTION_DINERO_FILE
:
233 if (optarg
!= NULL
) {
235 tmp
= (char *)malloc(strlen(optarg
) + 1);
238 sim_io_printf(sd
,"Failed to allocate buffer for tracefile name \"%s\"\n",optarg
);
244 sim_io_printf(sd
,"Placing trace information into file \"%s\"\n",tracefile
);
250 case OPTION_FIRMWARE
:
251 return sim_firmware_command (sd
, arg
);
257 board
= zalloc(strlen(arg
) + 1);
268 static const OPTION mips_options
[] =
270 { {"dinero-trace", optional_argument
, NULL
, OPTION_DINERO_TRACE
},
271 '\0', "on|off", "Enable dinero tracing",
272 mips_option_handler
},
273 { {"dinero-file", required_argument
, NULL
, OPTION_DINERO_FILE
},
274 '\0', "FILE", "Write dinero trace to FILE",
275 mips_option_handler
},
276 { {"firmware", required_argument
, NULL
, OPTION_FIRMWARE
},
277 '\0', "[idt|pmon|lsipmon|none][@ADDRESS]", "Emulate ROM monitor",
278 mips_option_handler
},
279 { {"board", required_argument
, NULL
, OPTION_BOARD
},
280 '\0', "none" /* rely on compile-time string concatenation for other options */
282 #define BOARD_JMR3904 "jmr3904"
284 #define BOARD_JMR3904_PAL "jmr3904pal"
285 "|" BOARD_JMR3904_PAL
286 #define BOARD_JMR3904_DEBUG "jmr3904debug"
287 "|" BOARD_JMR3904_DEBUG
288 #define BOARD_BSP "bsp"
291 , "Customize simulation for a particular board.", mips_option_handler
},
293 { {NULL
, no_argument
, NULL
, 0}, '\0', NULL
, NULL
, NULL
}
297 int interrupt_pending
;
300 interrupt_event (SIM_DESC sd
, void *data
)
302 sim_cpu
*cpu
= STATE_CPU (sd
, 0); /* FIXME */
303 address_word cia
= CIA_GET (cpu
);
306 interrupt_pending
= 0;
307 SignalExceptionInterrupt (1); /* interrupt "1" */
309 else if (!interrupt_pending
)
310 sim_events_schedule (sd
, 1, interrupt_event
, data
);
314 /*---------------------------------------------------------------------------*/
315 /*-- Device registration hook -----------------------------------------------*/
316 /*---------------------------------------------------------------------------*/
317 static void device_init(SIM_DESC sd
) {
319 extern void register_devices(SIM_DESC
);
320 register_devices(sd
);
324 /*---------------------------------------------------------------------------*/
325 /*-- GDB simulator interface ------------------------------------------------*/
326 /*---------------------------------------------------------------------------*/
329 sim_open (kind
, cb
, abfd
, argv
)
335 SIM_DESC sd
= sim_state_alloc (kind
, cb
);
336 sim_cpu
*cpu
= STATE_CPU (sd
, 0); /* FIXME */
338 SIM_ASSERT (STATE_MAGIC (sd
) == SIM_MAGIC_NUMBER
);
340 /* FIXME: watchpoints code shouldn't need this */
341 STATE_WATCHPOINTS (sd
)->pc
= &(PC
);
342 STATE_WATCHPOINTS (sd
)->sizeof_pc
= sizeof (PC
);
343 STATE_WATCHPOINTS (sd
)->interrupt_handler
= interrupt_event
;
345 /* Initialize the mechanism for doing insn profiling. */
346 CPU_INSN_NAME (cpu
) = get_insn_name
;
347 CPU_MAX_INSNS (cpu
) = nr_itable_entries
;
351 if (sim_pre_argv_init (sd
, argv
[0]) != SIM_RC_OK
)
353 sim_add_option_table (sd
, NULL
, mips_options
);
356 /* getopt will print the error message so we just have to exit if this fails.
357 FIXME: Hmmm... in the case of gdb we need getopt to call
359 if (sim_parse_args (sd
, argv
) != SIM_RC_OK
)
361 /* Uninstall the modules to avoid memory leaks,
362 file descriptor leaks, etc. */
363 sim_module_uninstall (sd
);
367 /* handle board-specific memory maps */
370 /* Allocate core managed memory */
373 /* For compatibility with the old code - under this (at level one)
374 are the kernel spaces K0 & K1. Both of these map to a single
375 smaller sub region */
376 sim_do_command(sd
," memory region 0x7fff8000,0x8000") ; /* MTZ- 32 k stack */
377 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx%%0x%lx,0x%0x",
379 MEM_SIZE
, /* actual size */
384 else if (board
!= NULL
385 && (strcmp(board
, BOARD_BSP
) == 0))
389 STATE_ENVIRONMENT (sd
) = OPERATING_ENVIRONMENT
;
391 /* ROM: 0x9FC0_0000 - 0x9FFF_FFFF and 0xBFC0_0000 - 0xBFFF_FFFF */
392 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx,0x%0x",
394 4 * 1024 * 1024, /* 4 MB */
397 /* SRAM: 0x8000_0000 - 0x803F_FFFF and 0xA000_0000 - 0xA03F_FFFF */
398 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx,0x%0x",
400 4 * 1024 * 1024, /* 4 MB */
403 /* DRAM: 0x8800_0000 - 0x89FF_FFFF and 0xA800_0000 - 0xA9FF_FFFF */
404 for (i
=0; i
<8; i
++) /* 32 MB total */
406 unsigned size
= 4 * 1024 * 1024; /* 4 MB */
407 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx,0x%0x",
408 0x88000000 + (i
* size
),
410 0xA8000000 + (i
* size
));
414 else if (board
!= NULL
415 && (strcmp(board
, BOARD_JMR3904
) == 0 ||
416 strcmp(board
, BOARD_JMR3904_PAL
) == 0 ||
417 strcmp(board
, BOARD_JMR3904_DEBUG
) == 0))
419 /* match VIRTUAL memory layout of JMR-TX3904 board */
422 /* --- disable monitor unless forced on by user --- */
424 if (! firmware_option_p
)
426 idt_monitor_base
= 0;
427 pmon_monitor_base
= 0;
428 lsipmon_monitor_base
= 0;
431 /* --- environment --- */
433 STATE_ENVIRONMENT (sd
) = OPERATING_ENVIRONMENT
;
437 /* ROM: 0x9FC0_0000 - 0x9FFF_FFFF and 0xBFC0_0000 - 0xBFFF_FFFF */
438 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx,0x%0x",
440 4 * 1024 * 1024, /* 4 MB */
443 /* SRAM: 0x8000_0000 - 0x803F_FFFF and 0xA000_0000 - 0xA03F_FFFF */
444 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx,0x%0x",
446 4 * 1024 * 1024, /* 4 MB */
449 /* DRAM: 0x8800_0000 - 0x89FF_FFFF and 0xA800_0000 - 0xA9FF_FFFF */
450 for (i
=0; i
<8; i
++) /* 32 MB total */
452 unsigned size
= 4 * 1024 * 1024; /* 4 MB */
453 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx,0x%0x",
454 0x88000000 + (i
* size
),
456 0xA8000000 + (i
* size
));
459 /* Dummy memory regions for unsimulated devices */
461 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx", 0xFFFFE010, 0x00c); /* EBIF */
462 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx", 0xFFFF9000, 0x200); /* EBIF */
463 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx", 0xFFFFF500, 0x300); /* PIO */
465 /* --- simulated devices --- */
466 sim_hw_parse (sd
, "/tx3904irc@0xffffc000/reg 0xffffc000 0x20");
467 sim_hw_parse (sd
, "/tx3904cpu");
468 sim_hw_parse (sd
, "/tx3904tmr@0xfffff000/reg 0xfffff000 0x100");
469 sim_hw_parse (sd
, "/tx3904tmr@0xfffff100/reg 0xfffff100 0x100");
470 sim_hw_parse (sd
, "/tx3904tmr@0xfffff200/reg 0xfffff200 0x100");
471 sim_hw_parse (sd
, "/tx3904sio@0xfffff300/reg 0xfffff300 0x100");
473 /* FIXME: poking at dv-sockser internals, use tcp backend if
474 --sockser_addr option was given.*/
475 extern char* sockser_addr
;
476 if(sockser_addr
== NULL
)
477 sim_hw_parse (sd
, "/tx3904sio@0xfffff300/backend stdio");
479 sim_hw_parse (sd
, "/tx3904sio@0xfffff300/backend tcp");
481 sim_hw_parse (sd
, "/tx3904sio@0xfffff400/reg 0xfffff400 0x100");
482 sim_hw_parse (sd
, "/tx3904sio@0xfffff400/backend stdio");
484 /* -- device connections --- */
485 sim_hw_parse (sd
, "/tx3904irc > ip level /tx3904cpu");
486 sim_hw_parse (sd
, "/tx3904tmr@0xfffff000 > int tmr0 /tx3904irc");
487 sim_hw_parse (sd
, "/tx3904tmr@0xfffff100 > int tmr1 /tx3904irc");
488 sim_hw_parse (sd
, "/tx3904tmr@0xfffff200 > int tmr2 /tx3904irc");
489 sim_hw_parse (sd
, "/tx3904sio@0xfffff300 > int sio0 /tx3904irc");
490 sim_hw_parse (sd
, "/tx3904sio@0xfffff400 > int sio1 /tx3904irc");
492 /* add PAL timer & I/O module */
493 if(! strcmp(board
, BOARD_JMR3904_PAL
))
496 sim_hw_parse (sd
, "/pal@0xffff0000");
497 sim_hw_parse (sd
, "/pal@0xffff0000/reg 0xffff0000 64");
499 /* wire up interrupt ports to irc */
500 sim_hw_parse (sd
, "/pal@0x31000000 > countdown tmr0 /tx3904irc");
501 sim_hw_parse (sd
, "/pal@0x31000000 > timer tmr1 /tx3904irc");
502 sim_hw_parse (sd
, "/pal@0x31000000 > int int0 /tx3904irc");
505 if(! strcmp(board
, BOARD_JMR3904_DEBUG
))
507 /* -- DEBUG: glue interrupt generators --- */
508 sim_hw_parse (sd
, "/glue@0xffff0000/reg 0xffff0000 0x50");
509 sim_hw_parse (sd
, "/glue@0xffff0000 > int0 int0 /tx3904irc");
510 sim_hw_parse (sd
, "/glue@0xffff0000 > int1 int1 /tx3904irc");
511 sim_hw_parse (sd
, "/glue@0xffff0000 > int2 int2 /tx3904irc");
512 sim_hw_parse (sd
, "/glue@0xffff0000 > int3 int3 /tx3904irc");
513 sim_hw_parse (sd
, "/glue@0xffff0000 > int4 int4 /tx3904irc");
514 sim_hw_parse (sd
, "/glue@0xffff0000 > int5 int5 /tx3904irc");
515 sim_hw_parse (sd
, "/glue@0xffff0000 > int6 int6 /tx3904irc");
516 sim_hw_parse (sd
, "/glue@0xffff0000 > int7 int7 /tx3904irc");
517 sim_hw_parse (sd
, "/glue@0xffff0000 > int8 dmac0 /tx3904irc");
518 sim_hw_parse (sd
, "/glue@0xffff0000 > int9 dmac1 /tx3904irc");
519 sim_hw_parse (sd
, "/glue@0xffff0000 > int10 dmac2 /tx3904irc");
520 sim_hw_parse (sd
, "/glue@0xffff0000 > int11 dmac3 /tx3904irc");
521 sim_hw_parse (sd
, "/glue@0xffff0000 > int12 sio0 /tx3904irc");
522 sim_hw_parse (sd
, "/glue@0xffff0000 > int13 sio1 /tx3904irc");
523 sim_hw_parse (sd
, "/glue@0xffff0000 > int14 tmr0 /tx3904irc");
524 sim_hw_parse (sd
, "/glue@0xffff0000 > int15 tmr1 /tx3904irc");
525 sim_hw_parse (sd
, "/glue@0xffff0000 > int16 tmr2 /tx3904irc");
526 sim_hw_parse (sd
, "/glue@0xffff0000 > int17 nmi /tx3904cpu");
534 /* check for/establish the a reference program image */
535 if (sim_analyze_program (sd
,
536 (STATE_PROG_ARGV (sd
) != NULL
537 ? *STATE_PROG_ARGV (sd
)
541 sim_module_uninstall (sd
);
545 /* Configure/verify the target byte order and other runtime
546 configuration options */
547 if (sim_config (sd
) != SIM_RC_OK
)
549 sim_module_uninstall (sd
);
553 if (sim_post_argv_init (sd
) != SIM_RC_OK
)
555 /* Uninstall the modules to avoid memory leaks,
556 file descriptor leaks, etc. */
557 sim_module_uninstall (sd
);
561 /* verify assumptions the simulator made about the host type system.
562 This macro does not return if there is a problem */
563 SIM_ASSERT (sizeof(int) == (4 * sizeof(char)));
564 SIM_ASSERT (sizeof(word64
) == (8 * sizeof(char)));
566 /* This is NASTY, in that we are assuming the size of specific
570 for (rn
= 0; (rn
< (LAST_EMBED_REGNUM
+ 1)); rn
++)
573 cpu
->register_widths
[rn
] = WITH_TARGET_WORD_BITSIZE
;
574 else if ((rn
>= FGRIDX
) && (rn
< (FGRIDX
+ NR_FGR
)))
575 cpu
->register_widths
[rn
] = WITH_TARGET_FLOATING_POINT_BITSIZE
;
576 else if ((rn
>= 33) && (rn
<= 37))
577 cpu
->register_widths
[rn
] = WITH_TARGET_WORD_BITSIZE
;
578 else if ((rn
== SRIDX
)
581 || ((rn
>= 72) && (rn
<= 89)))
582 cpu
->register_widths
[rn
] = 32;
584 cpu
->register_widths
[rn
] = 0;
591 if (STATE
& simTRACE
)
596 sim_io_eprintf (sd, "idt@%x pmon@%x lsipmon@%x\n",
599 lsipmon_monitor_base);
602 /* Write the monitor trap address handlers into the monitor (eeprom)
603 address space. This can only be done once the target endianness
604 has been determined. */
605 if (idt_monitor_base
!= 0)
608 unsigned idt_monitor_size
= 1 << 11;
610 /* the default monitor region */
611 sim_do_commandf (sd
, "memory region 0x%x,0x%x",
612 idt_monitor_base
, idt_monitor_size
);
614 /* Entry into the IDT monitor is via fixed address vectors, and
615 not using machine instructions. To avoid clashing with use of
616 the MIPS TRAP system, we place our own (simulator specific)
617 "undefined" instructions into the relevant vector slots. */
618 for (loop
= 0; (loop
< idt_monitor_size
); loop
+= 4)
620 address_word vaddr
= (idt_monitor_base
+ loop
);
621 unsigned32 insn
= (RSVD_INSTRUCTION
|
622 (((loop
>> 2) & RSVD_INSTRUCTION_ARG_MASK
)
623 << RSVD_INSTRUCTION_ARG_SHIFT
));
625 sim_write (sd
, vaddr
, (char *)&insn
, sizeof (insn
));
629 if ((pmon_monitor_base
!= 0) || (lsipmon_monitor_base
!= 0))
631 /* The PMON monitor uses the same address space, but rather than
632 branching into it the address of a routine is loaded. We can
633 cheat for the moment, and direct the PMON routine to IDT style
634 instructions within the monitor space. This relies on the IDT
635 monitor not using the locations from 0xBFC00500 onwards as its
638 for (loop
= 0; (loop
< 24); loop
++)
640 unsigned32 value
= ((0x500 - 8) / 8); /* default UNDEFINED reason code */
656 value
= ((0x500 - 16) / 8); /* not an IDT reason code */
658 case 8: /* cliexit */
661 case 11: /* flush_cache */
666 SIM_ASSERT (idt_monitor_base
!= 0);
667 value
= ((unsigned int) idt_monitor_base
+ (value
* 8));
670 if (pmon_monitor_base
!= 0)
672 address_word vaddr
= (pmon_monitor_base
+ (loop
* 4));
673 sim_write (sd
, vaddr
, (char *)&value
, sizeof (value
));
676 if (lsipmon_monitor_base
!= 0)
678 address_word vaddr
= (lsipmon_monitor_base
+ (loop
* 4));
679 sim_write (sd
, vaddr
, (char *)&value
, sizeof (value
));
683 /* Write an abort sequence into the TRAP (common) exception vector
684 addresses. This is to catch code executing a TRAP (et.al.)
685 instruction without installing a trap handler. */
686 if ((idt_monitor_base
!= 0) ||
687 (pmon_monitor_base
!= 0) ||
688 (lsipmon_monitor_base
!= 0))
690 unsigned32 halt
[2] = { 0x2404002f /* addiu r4, r0, 47 */,
691 HALT_INSTRUCTION
/* BREAK */ };
694 sim_write (sd
, 0x80000000, (char *) halt
, sizeof (halt
));
695 sim_write (sd
, 0x80000180, (char *) halt
, sizeof (halt
));
696 sim_write (sd
, 0x80000200, (char *) halt
, sizeof (halt
));
697 /* XXX: Write here unconditionally? */
698 sim_write (sd
, 0xBFC00200, (char *) halt
, sizeof (halt
));
699 sim_write (sd
, 0xBFC00380, (char *) halt
, sizeof (halt
));
700 sim_write (sd
, 0xBFC00400, (char *) halt
, sizeof (halt
));
714 tracefh
= fopen(tracefile
,"wb+");
717 sim_io_eprintf(sd
,"Failed to create file \"%s\", writing trace information to stderr.\n",tracefile
);
723 /* Return name of an insn, used by insn profiling. */
725 get_insn_name (sim_cpu
*cpu
, int i
)
727 return itable
[i
].name
;
731 sim_close (sd
, quitting
)
736 printf("DBG: sim_close: entered (quitting = %d)\n",quitting
);
740 /* "quitting" is non-zero if we cannot hang on errors */
742 /* shut down modules */
743 sim_module_uninstall (sd
);
745 /* Ensure that any resources allocated through the callback
746 mechanism are released: */
747 sim_io_shutdown (sd
);
750 if (tracefh
!= NULL
&& tracefh
!= stderr
)
755 /* FIXME - free SD */
762 sim_write (sd
,addr
,buffer
,size
)
765 unsigned char *buffer
;
769 sim_cpu
*cpu
= STATE_CPU (sd
, 0); /* FIXME */
771 /* Return the number of bytes written, or zero if error. */
773 sim_io_printf(sd
,"sim_write(0x%s,buffer,%d);\n",pr_addr(addr
),size
);
776 /* We use raw read and write routines, since we do not want to count
777 the GDB memory accesses in our statistics gathering. */
779 for (index
= 0; index
< size
; index
++)
781 address_word vaddr
= (address_word
)addr
+ index
;
784 if (!address_translation (SD
, CPU
, NULL_CIA
, vaddr
, isDATA
, isSTORE
, &paddr
, &cca
, isRAW
))
786 if (sim_core_write_buffer (SD
, CPU
, read_map
, buffer
+ index
, paddr
, 1) != 1)
794 sim_read (sd
,addr
,buffer
,size
)
797 unsigned char *buffer
;
801 sim_cpu
*cpu
= STATE_CPU (sd
, 0); /* FIXME */
803 /* Return the number of bytes read, or zero if error. */
805 sim_io_printf(sd
,"sim_read(0x%s,buffer,%d);\n",pr_addr(addr
),size
);
808 for (index
= 0; (index
< size
); index
++)
810 address_word vaddr
= (address_word
)addr
+ index
;
813 if (!address_translation (SD
, CPU
, NULL_CIA
, vaddr
, isDATA
, isLOAD
, &paddr
, &cca
, isRAW
))
815 if (sim_core_read_buffer (SD
, CPU
, read_map
, buffer
+ index
, paddr
, 1) != 1)
823 sim_store_register (sd
,rn
,memory
,length
)
826 unsigned char *memory
;
829 sim_cpu
*cpu
= STATE_CPU (sd
, 0); /* FIXME */
830 /* NOTE: gdb (the client) stores registers in target byte order
831 while the simulator uses host byte order */
833 sim_io_printf(sd
,"sim_store_register(%d,*memory=0x%s);\n",rn
,pr_addr(*((SIM_ADDR
*)memory
)));
836 /* Unfortunately this suffers from the same problem as the register
837 numbering one. We need to know what the width of each logical
838 register number is for the architecture being simulated. */
840 if (cpu
->register_widths
[rn
] == 0)
842 sim_io_eprintf(sd
,"Invalid register width for %d (register store ignored)\n",rn
);
848 if (rn
>= FGRIDX
&& rn
< FGRIDX
+ NR_FGR
)
850 cpu
->fpr_state
[rn
- FGRIDX
] = fmt_uninterpreted
;
851 if (cpu
->register_widths
[rn
] == 32)
855 cpu
->fgr
[rn
- FGRIDX
] =
856 (unsigned32
) T2H_8 (*(unsigned64
*)memory
);
861 cpu
->fgr
[rn
- FGRIDX
] = T2H_4 (*(unsigned32
*)memory
);
867 cpu
->fgr
[rn
- FGRIDX
] = T2H_8 (*(unsigned64
*)memory
);
872 if (cpu
->register_widths
[rn
] == 32)
877 (unsigned32
) T2H_8 (*(unsigned64
*)memory
);
882 cpu
->registers
[rn
] = T2H_4 (*(unsigned32
*)memory
);
888 cpu
->registers
[rn
] = T2H_8 (*(unsigned64
*)memory
);
896 sim_fetch_register (sd
,rn
,memory
,length
)
899 unsigned char *memory
;
902 sim_cpu
*cpu
= STATE_CPU (sd
, 0); /* FIXME */
903 /* NOTE: gdb (the client) stores registers in target byte order
904 while the simulator uses host byte order */
906 #if 0 /* FIXME: doesn't compile */
907 sim_io_printf(sd
,"sim_fetch_register(%d=0x%s,mem) : place simulator registers into memory\n",rn
,pr_addr(registers
[rn
]));
911 if (cpu
->register_widths
[rn
] == 0)
913 sim_io_eprintf (sd
, "Invalid register width for %d (register fetch ignored)\n",rn
);
919 /* Any floating point register */
920 if (rn
>= FGRIDX
&& rn
< FGRIDX
+ NR_FGR
)
922 if (cpu
->register_widths
[rn
] == 32)
926 *(unsigned64
*)memory
=
927 H2T_8 ((unsigned32
) (cpu
->fgr
[rn
- FGRIDX
]));
932 *(unsigned32
*)memory
= H2T_4 (cpu
->fgr
[rn
- FGRIDX
]);
938 *(unsigned64
*)memory
= H2T_8 (cpu
->fgr
[rn
- FGRIDX
]);
943 if (cpu
->register_widths
[rn
] == 32)
947 *(unsigned64
*)memory
=
948 H2T_8 ((unsigned32
) (cpu
->registers
[rn
]));
953 *(unsigned32
*)memory
= H2T_4 ((unsigned32
)(cpu
->registers
[rn
]));
959 *(unsigned64
*)memory
= H2T_8 ((unsigned64
)(cpu
->registers
[rn
]));
968 sim_create_inferior (sd
, abfd
, argv
,env
)
976 #if 0 /* FIXME: doesn't compile */
977 printf("DBG: sim_create_inferior entered: start_address = 0x%s\n",
986 /* override PC value set by ColdReset () */
988 for (cpu_nr
= 0; cpu_nr
< sim_engine_nr_cpus (sd
); cpu_nr
++)
990 sim_cpu
*cpu
= STATE_CPU (sd
, cpu_nr
);
991 CIA_SET (cpu
, (unsigned64
) bfd_get_start_address (abfd
));
995 #if 0 /* def DEBUG */
998 /* We should really place the argv slot values into the argument
999 registers, and onto the stack as required. However, this
1000 assumes that we have a stack defined, which is not
1001 necessarily true at the moment. */
1003 sim_io_printf(sd
,"sim_create_inferior() : passed arguments ignored\n");
1004 for (cptr
= argv
; (cptr
&& *cptr
); cptr
++)
1005 printf("DBG: arg \"%s\"\n",*cptr
);
1013 sim_do_command (sd
,cmd
)
1017 if (sim_args_command (sd
, cmd
) != SIM_RC_OK
)
1018 sim_io_printf (sd
, "Error: \"%s\" is not a valid MIPS simulator command.\n",
1022 /*---------------------------------------------------------------------------*/
1023 /*-- Private simulator support interface ------------------------------------*/
1024 /*---------------------------------------------------------------------------*/
1026 /* Read a null terminated string from memory, return in a buffer */
1028 fetch_str (SIM_DESC sd
,
1034 while (sim_read (sd
, addr
+ nr
, &null
, 1) == 1 && null
!= 0)
1036 buf
= NZALLOC (char, nr
+ 1);
1037 sim_read (sd
, addr
, buf
, nr
);
1042 /* Implements the "sim firmware" command:
1043 sim firmware NAME[@ADDRESS] --- emulate ROM monitor named NAME.
1044 NAME can be idt, pmon, or lsipmon. If omitted, ADDRESS
1045 defaults to the normal address for that monitor.
1046 sim firmware none --- don't emulate any ROM monitor. Useful
1047 if you need a clean address space. */
1049 sim_firmware_command (SIM_DESC sd
, char *arg
)
1051 int address_present
= 0;
1054 /* Signal occurrence of this option. */
1055 firmware_option_p
= 1;
1057 /* Parse out the address, if present. */
1059 char *p
= strchr (arg
, '@');
1063 address_present
= 1;
1064 p
++; /* skip over @ */
1066 address
= strtoul (p
, &q
, 0);
1069 sim_io_printf (sd
, "Invalid address given to the"
1070 "`sim firmware NAME@ADDRESS' command: %s\n",
1076 address_present
= 0;
1079 if (! strncmp (arg
, "idt", 3))
1081 idt_monitor_base
= address_present
? address
: 0xBFC00000;
1082 pmon_monitor_base
= 0;
1083 lsipmon_monitor_base
= 0;
1085 else if (! strncmp (arg
, "pmon", 4))
1087 /* pmon uses indirect calls. Hook into implied idt. */
1088 pmon_monitor_base
= address_present
? address
: 0xBFC00500;
1089 idt_monitor_base
= pmon_monitor_base
- 0x500;
1090 lsipmon_monitor_base
= 0;
1092 else if (! strncmp (arg
, "lsipmon", 7))
1094 /* lsipmon uses indirect calls. Hook into implied idt. */
1095 pmon_monitor_base
= 0;
1096 lsipmon_monitor_base
= address_present
? address
: 0xBFC00200;
1097 idt_monitor_base
= lsipmon_monitor_base
- 0x200;
1099 else if (! strncmp (arg
, "none", 4))
1101 if (address_present
)
1104 "The `sim firmware none' command does "
1105 "not take an `ADDRESS' argument.\n");
1108 idt_monitor_base
= 0;
1109 pmon_monitor_base
= 0;
1110 lsipmon_monitor_base
= 0;
1114 sim_io_printf (sd
, "\
1115 Unrecognized name given to the `sim firmware NAME' command: %s\n\
1116 Recognized firmware names are: `idt', `pmon', `lsipmon', and `none'.\n",
1126 /* Simple monitor interface (currently setup for the IDT and PMON monitors) */
1128 sim_monitor (SIM_DESC sd
,
1131 unsigned int reason
)
1134 printf("DBG: sim_monitor: entered (reason = %d)\n",reason
);
1137 /* The IDT monitor actually allows two instructions per vector
1138 slot. However, the simulator currently causes a trap on each
1139 individual instruction. We cheat, and lose the bottom bit. */
1142 /* The following callback functions are available, however the
1143 monitor we are simulating does not make use of them: get_errno,
1144 isatty, lseek, rename, system, time and unlink */
1148 case 6: /* int open(char *path,int flags) */
1150 char *path
= fetch_str (sd
, A0
);
1151 V0
= sim_io_open (sd
, path
, (int)A1
);
1156 case 7: /* int read(int file,char *ptr,int len) */
1160 char *buf
= zalloc (nr
);
1161 V0
= sim_io_read (sd
, fd
, buf
, nr
);
1162 sim_write (sd
, A1
, buf
, nr
);
1167 case 8: /* int write(int file,char *ptr,int len) */
1171 char *buf
= zalloc (nr
);
1172 sim_read (sd
, A1
, buf
, nr
);
1173 V0
= sim_io_write (sd
, fd
, buf
, nr
);
1178 case 10: /* int close(int file) */
1180 V0
= sim_io_close (sd
, (int)A0
);
1184 case 2: /* Densan monitor: char inbyte(int waitflag) */
1186 if (A0
== 0) /* waitflag == NOWAIT */
1187 V0
= (unsigned_word
)-1;
1189 /* Drop through to case 11 */
1191 case 11: /* char inbyte(void) */
1194 /* ensure that all output has gone... */
1195 sim_io_flush_stdout (sd
);
1196 if (sim_io_read_stdin (sd
, &tmp
, sizeof(char)) != sizeof(char))
1198 sim_io_error(sd
,"Invalid return from character read");
1199 V0
= (unsigned_word
)-1;
1202 V0
= (unsigned_word
)tmp
;
1206 case 3: /* Densan monitor: void co(char chr) */
1207 case 12: /* void outbyte(char chr) : write a byte to "stdout" */
1209 char tmp
= (char)(A0
& 0xFF);
1210 sim_io_write_stdout (sd
, &tmp
, sizeof(char));
1214 case 17: /* void _exit() */
1216 sim_io_eprintf (sd
, "sim_monitor(17): _exit(int reason) to be coded\n");
1217 sim_engine_halt (SD
, CPU
, NULL
, NULL_CIA
, sim_exited
,
1218 (unsigned int)(A0
& 0xFFFFFFFF));
1222 case 28 : /* PMON flush_cache */
1225 case 55: /* void get_mem_info(unsigned int *ptr) */
1226 /* in: A0 = pointer to three word memory location */
1227 /* out: [A0 + 0] = size */
1228 /* [A0 + 4] = instruction cache size */
1229 /* [A0 + 8] = data cache size */
1231 unsigned_4 value
= MEM_SIZE
/* FIXME STATE_MEM_SIZE (sd) */;
1232 unsigned_4 zero
= 0;
1234 sim_write (sd
, A0
+ 0, (char *)&value
, 4);
1235 sim_write (sd
, A0
+ 4, (char *)&zero
, 4);
1236 sim_write (sd
, A0
+ 8, (char *)&zero
, 4);
1237 /* sim_io_eprintf (sd, "sim: get_mem_info() depreciated\n"); */
1241 case 158 : /* PMON printf */
1242 /* in: A0 = pointer to format string */
1243 /* A1 = optional argument 1 */
1244 /* A2 = optional argument 2 */
1245 /* A3 = optional argument 3 */
1247 /* The following is based on the PMON printf source */
1249 address_word s
= A0
;
1251 signed_word
*ap
= &A1
; /* 1st argument */
1252 /* This isn't the quickest way, since we call the host print
1253 routine for every character almost. But it does avoid
1254 having to allocate and manage a temporary string buffer. */
1255 /* TODO: Include check that we only use three arguments (A1,
1257 while (sim_read (sd
, s
++, &c
, 1) && c
!= '\0')
1262 enum {FMT_RJUST
, FMT_LJUST
, FMT_RJUST0
, FMT_CENTER
} fmt
= FMT_RJUST
;
1263 int width
= 0, trunc
= 0, haddot
= 0, longlong
= 0;
1264 while (sim_read (sd
, s
++, &c
, 1) && c
!= '\0')
1266 if (strchr ("dobxXulscefg%", c
))
1281 else if (c
>= '1' && c
<= '9')
1285 while (sim_read (sd
, s
++, &c
, 1) == 1 && isdigit (c
))
1288 n
= (unsigned int)strtol(tmp
,NULL
,10);
1301 sim_io_printf (sd
, "%%");
1306 address_word p
= *ap
++;
1308 while (sim_read (sd
, p
++, &ch
, 1) == 1 && ch
!= '\0')
1309 sim_io_printf(sd
, "%c", ch
);
1312 sim_io_printf(sd
,"(null)");
1315 sim_io_printf (sd
, "%c", (int)*ap
++);
1320 sim_read (sd
, s
++, &c
, 1);
1324 sim_read (sd
, s
++, &c
, 1);
1327 if (strchr ("dobxXu", c
))
1329 word64 lv
= (word64
) *ap
++;
1331 sim_io_printf(sd
,"<binary not supported>");
1334 sprintf (tmp
, "%%%s%c", longlong
? "ll" : "", c
);
1336 sim_io_printf(sd
, tmp
, lv
);
1338 sim_io_printf(sd
, tmp
, (int)lv
);
1341 else if (strchr ("eEfgG", c
))
1343 double dbl
= *(double*)(ap
++);
1344 sprintf (tmp
, "%%%d.%d%c", width
, trunc
, c
);
1345 sim_io_printf (sd
, tmp
, dbl
);
1351 sim_io_printf(sd
, "%c", c
);
1357 sim_io_error (sd
, "TODO: sim_monitor(%d) : PC = 0x%s\n",
1358 reason
, pr_addr(cia
));
1364 /* Store a word into memory. */
1367 store_word (SIM_DESC sd
,
1376 if ((vaddr
& 3) != 0)
1377 SignalExceptionAddressStore ();
1380 if (AddressTranslation (vaddr
, isDATA
, isSTORE
, &paddr
, &uncached
,
1383 const uword64 mask
= 7;
1387 paddr
= (paddr
& ~mask
) | ((paddr
& mask
) ^ (ReverseEndian
<< 2));
1388 byte
= (vaddr
& mask
) ^ (BigEndianCPU
<< 2);
1389 memval
= ((uword64
) val
) << (8 * byte
);
1390 StoreMemory (uncached
, AccessLength_WORD
, memval
, 0, paddr
, vaddr
,
1396 /* Load a word from memory. */
1399 load_word (SIM_DESC sd
,
1404 if ((vaddr
& 3) != 0)
1406 SIM_CORE_SIGNAL (SD
, cpu
, cia
, read_map
, AccessLength_WORD
+1, vaddr
, read_transfer
, sim_core_unaligned_signal
);
1413 if (AddressTranslation (vaddr
, isDATA
, isLOAD
, &paddr
, &uncached
,
1416 const uword64 mask
= 0x7;
1417 const unsigned int reverse
= ReverseEndian
? 1 : 0;
1418 const unsigned int bigend
= BigEndianCPU
? 1 : 0;
1422 paddr
= (paddr
& ~mask
) | ((paddr
& mask
) ^ (reverse
<< 2));
1423 LoadMemory (&memval
,NULL
,uncached
, AccessLength_WORD
, paddr
, vaddr
,
1425 byte
= (vaddr
& mask
) ^ (bigend
<< 2);
1426 return SIGNEXTEND (((memval
>> (8 * byte
)) & 0xffffffff), 32);
1433 /* Simulate the mips16 entry and exit pseudo-instructions. These
1434 would normally be handled by the reserved instruction exception
1435 code, but for ease of simulation we just handle them directly. */
1438 mips16_entry (SIM_DESC sd
,
1443 int aregs
, sregs
, rreg
;
1446 printf("DBG: mips16_entry: entered (insn = 0x%08X)\n",insn
);
1449 aregs
= (insn
& 0x700) >> 8;
1450 sregs
= (insn
& 0x0c0) >> 6;
1451 rreg
= (insn
& 0x020) >> 5;
1453 /* This should be checked by the caller. */
1462 /* This is the entry pseudo-instruction. */
1464 for (i
= 0; i
< aregs
; i
++)
1465 store_word (SD
, CPU
, cia
, (uword64
) (SP
+ 4 * i
), GPR
[i
+ 4]);
1473 store_word (SD
, CPU
, cia
, (uword64
) tsp
, RA
);
1476 for (i
= 0; i
< sregs
; i
++)
1479 store_word (SD
, CPU
, cia
, (uword64
) tsp
, GPR
[16 + i
]);
1487 /* This is the exit pseudo-instruction. */
1494 RA
= load_word (SD
, CPU
, cia
, (uword64
) tsp
);
1497 for (i
= 0; i
< sregs
; i
++)
1500 GPR
[i
+ 16] = load_word (SD
, CPU
, cia
, (uword64
) tsp
);
1505 if (CURRENT_FLOATING_POINT
== HARD_FLOATING_POINT
)
1509 FGR
[0] = WORD64LO (GPR
[4]);
1510 FPR_STATE
[0] = fmt_uninterpreted
;
1512 else if (aregs
== 6)
1514 FGR
[0] = WORD64LO (GPR
[5]);
1515 FGR
[1] = WORD64LO (GPR
[4]);
1516 FPR_STATE
[0] = fmt_uninterpreted
;
1517 FPR_STATE
[1] = fmt_uninterpreted
;
1526 /*-- trace support ----------------------------------------------------------*/
1528 /* The TRACE support is provided (if required) in the memory accessing
1529 routines. Since we are also providing the architecture specific
1530 features, the architecture simulation code can also deal with
1531 notifying the TRACE world of cache flushes, etc. Similarly we do
1532 not need to provide profiling support in the simulator engine,
1533 since we can sample in the instruction fetch control loop. By
1534 defining the TRACE manifest, we add tracing as a run-time
1538 /* Tracing by default produces "din" format (as required by
1539 dineroIII). Each line of such a trace file *MUST* have a din label
1540 and address field. The rest of the line is ignored, so comments can
1541 be included if desired. The first field is the label which must be
1542 one of the following values:
1547 3 escape record (treated as unknown access type)
1548 4 escape record (causes cache flush)
1550 The address field is a 32bit (lower-case) hexadecimal address
1551 value. The address should *NOT* be preceded by "0x".
1553 The size of the memory transfer is not important when dealing with
1554 cache lines (as long as no more than a cache line can be
1555 transferred in a single operation :-), however more information
1556 could be given following the dineroIII requirement to allow more
1557 complete memory and cache simulators to provide better
1558 results. i.e. the University of Pisa has a cache simulator that can
1559 also take bus size and speed as (variable) inputs to calculate
1560 complete system performance (a much more useful ability when trying
1561 to construct an end product, rather than a processor). They
1562 currently have an ARM version of their tool called ChARM. */
1566 dotrace (SIM_DESC sd
,
1574 if (STATE
& simTRACE
) {
1576 fprintf(tracefh
,"%d %s ; width %d ; ",
1580 va_start(ap
,comment
);
1581 vfprintf(tracefh
,comment
,ap
);
1583 fprintf(tracefh
,"\n");
1585 /* NOTE: Since the "din" format will only accept 32bit addresses, and
1586 we may be generating 64bit ones, we should put the hi-32bits of the
1587 address into the comment field. */
1589 /* TODO: Provide a buffer for the trace lines. We can then avoid
1590 performing writes until the buffer is filled, or the file is
1593 /* NOTE: We could consider adding a comment field to the "din" file
1594 produced using type 3 markers (unknown access). This would then
1595 allow information about the program that the "din" is for, and
1596 the MIPs world that was being simulated, to be placed into the
1603 /*---------------------------------------------------------------------------*/
1604 /*-- simulator engine -------------------------------------------------------*/
1605 /*---------------------------------------------------------------------------*/
1608 ColdReset (SIM_DESC sd
)
1611 for (cpu_nr
= 0; cpu_nr
< sim_engine_nr_cpus (sd
); cpu_nr
++)
1613 sim_cpu
*cpu
= STATE_CPU (sd
, cpu_nr
);
1614 /* RESET: Fixed PC address: */
1615 PC
= (unsigned_word
) UNSIGNED64 (0xFFFFFFFFBFC00000);
1616 /* The reset vector address is in the unmapped, uncached memory space. */
1618 SR
&= ~(status_SR
| status_TS
| status_RP
);
1619 SR
|= (status_ERL
| status_BEV
);
1621 /* Cheat and allow access to the complete register set immediately */
1622 if (CURRENT_FLOATING_POINT
== HARD_FLOATING_POINT
1623 && WITH_TARGET_WORD_BITSIZE
== 64)
1624 SR
|= status_FR
; /* 64bit registers */
1626 /* Ensure that any instructions with pending register updates are
1628 PENDING_INVALIDATE();
1630 /* Initialise the FPU registers to the unknown state */
1631 if (CURRENT_FLOATING_POINT
== HARD_FLOATING_POINT
)
1634 for (rn
= 0; (rn
< 32); rn
++)
1635 FPR_STATE
[rn
] = fmt_uninterpreted
;
1644 /* Description from page A-26 of the "MIPS IV Instruction Set" manual (revision 3.1) */
1645 /* Signal an exception condition. This will result in an exception
1646 that aborts the instruction. The instruction operation pseudocode
1647 will never see a return from this function call. */
1650 signal_exception (SIM_DESC sd
,
1658 sim_io_printf(sd
,"DBG: SignalException(%d) PC = 0x%s\n",exception
,pr_addr(cia
));
1661 /* Ensure that any active atomic read/modify/write operation will fail: */
1664 /* Save registers before interrupt dispatching */
1665 #ifdef SIM_CPU_EXCEPTION_TRIGGER
1666 SIM_CPU_EXCEPTION_TRIGGER(sd
, cpu
, cia
);
1669 switch (exception
) {
1671 case DebugBreakPoint
:
1672 if (! (Debug
& Debug_DM
))
1678 Debug
|= Debug_DBD
; /* signaled from within in delay slot */
1679 DEPC
= cia
- 4; /* reference the branch instruction */
1683 Debug
&= ~Debug_DBD
; /* not signaled from within a delay slot */
1687 Debug
|= Debug_DM
; /* in debugging mode */
1688 Debug
|= Debug_DBp
; /* raising a DBp exception */
1690 sim_engine_restart (SD
, CPU
, NULL
, NULL_CIA
);
1694 case ReservedInstruction
:
1697 unsigned int instruction
;
1698 va_start(ap
,exception
);
1699 instruction
= va_arg(ap
,unsigned int);
1701 /* Provide simple monitor support using ReservedInstruction
1702 exceptions. The following code simulates the fixed vector
1703 entry points into the IDT monitor by causing a simulator
1704 trap, performing the monitor operation, and returning to
1705 the address held in the $ra register (standard PCS return
1706 address). This means we only need to pre-load the vector
1707 space with suitable instruction values. For systems were
1708 actual trap instructions are used, we would not need to
1709 perform this magic. */
1710 if ((instruction
& RSVD_INSTRUCTION_MASK
) == RSVD_INSTRUCTION
)
1712 sim_monitor (SD
, CPU
, cia
, ((instruction
>> RSVD_INSTRUCTION_ARG_SHIFT
) & RSVD_INSTRUCTION_ARG_MASK
) );
1713 /* NOTE: This assumes that a branch-and-link style
1714 instruction was used to enter the vector (which is the
1715 case with the current IDT monitor). */
1716 sim_engine_restart (SD
, CPU
, NULL
, RA
);
1718 /* Look for the mips16 entry and exit instructions, and
1719 simulate a handler for them. */
1720 else if ((cia
& 1) != 0
1721 && (instruction
& 0xf81f) == 0xe809
1722 && (instruction
& 0x0c0) != 0x0c0)
1724 mips16_entry (SD
, CPU
, cia
, instruction
);
1725 sim_engine_restart (sd
, NULL
, NULL
, NULL_CIA
);
1727 /* else fall through to normal exception processing */
1728 sim_io_eprintf(sd
,"ReservedInstruction at PC = 0x%s\n", pr_addr (cia
));
1732 /* Store exception code into current exception id variable (used
1735 /* TODO: If not simulating exceptions then stop the simulator
1736 execution. At the moment we always stop the simulation. */
1738 #ifdef SUBTARGET_R3900
1739 /* update interrupt-related registers */
1741 /* insert exception code in bits 6:2 */
1742 CAUSE
= LSMASKED32(CAUSE
, 31, 7) | LSINSERTED32(exception
, 6, 2);
1743 /* shift IE/KU history bits left */
1744 SR
= LSMASKED32(SR
, 31, 4) | LSINSERTED32(LSEXTRACTED32(SR
, 3, 0), 5, 2);
1746 if (STATE
& simDELAYSLOT
)
1748 STATE
&= ~simDELAYSLOT
;
1750 EPC
= (cia
- 4); /* reference the branch instruction */
1755 if (SR
& status_BEV
)
1756 PC
= (signed)0xBFC00000 + 0x180;
1758 PC
= (signed)0x80000000 + 0x080;
1760 /* See figure 5-17 for an outline of the code below */
1761 if (! (SR
& status_EXL
))
1763 CAUSE
= (exception
<< 2);
1764 if (STATE
& simDELAYSLOT
)
1766 STATE
&= ~simDELAYSLOT
;
1768 EPC
= (cia
- 4); /* reference the branch instruction */
1772 /* FIXME: TLB et.al. */
1773 /* vector = 0x180; */
1777 CAUSE
= (exception
<< 2);
1778 /* vector = 0x180; */
1781 /* Store exception code into current exception id variable (used
1784 if (SR
& status_BEV
)
1785 PC
= (signed)0xBFC00200 + 0x180;
1787 PC
= (signed)0x80000000 + 0x180;
1790 switch ((CAUSE
>> 2) & 0x1F)
1793 /* Interrupts arrive during event processing, no need to
1799 #ifdef SUBTARGET_3900
1800 /* Exception vector: BEV=0 BFC00000 / BEF=1 BFC00000 */
1801 PC
= (signed)0xBFC00000;
1802 #endif SUBTARGET_3900
1805 case TLBModification
:
1810 case InstructionFetch
:
1812 /* The following is so that the simulator will continue from the
1813 exception handler address. */
1814 sim_engine_halt (SD
, CPU
, NULL
, PC
,
1815 sim_stopped
, SIM_SIGBUS
);
1817 case ReservedInstruction
:
1818 case CoProcessorUnusable
:
1820 sim_engine_halt (SD
, CPU
, NULL
, PC
,
1821 sim_stopped
, SIM_SIGILL
);
1823 case IntegerOverflow
:
1825 sim_engine_halt (SD
, CPU
, NULL
, PC
,
1826 sim_stopped
, SIM_SIGFPE
);
1829 sim_engine_halt (SD
, CPU
, NULL
, PC
, sim_stopped
, SIM_SIGTRAP
);
1834 sim_engine_restart (SD
, CPU
, NULL
, PC
);
1839 sim_engine_halt (SD
, CPU
, NULL
, PC
,
1840 sim_stopped
, SIM_SIGTRAP
);
1842 default : /* Unknown internal exception */
1844 sim_engine_halt (SD
, CPU
, NULL
, PC
,
1845 sim_stopped
, SIM_SIGABRT
);
1849 case SimulatorFault
:
1853 va_start(ap
,exception
);
1854 msg
= va_arg(ap
,char *);
1856 sim_engine_abort (SD
, CPU
, NULL_CIA
,
1857 "FATAL: Simulator error \"%s\"\n",msg
);
1866 #if defined(WARN_RESULT)
1867 /* Description from page A-26 of the "MIPS IV Instruction Set" manual (revision 3.1) */
1868 /* This function indicates that the result of the operation is
1869 undefined. However, this should not affect the instruction
1870 stream. All that is meant to happen is that the destination
1871 register is set to an undefined result. To keep the simulator
1872 simple, we just don't bother updating the destination register, so
1873 the overall result will be undefined. If desired we can stop the
1874 simulator by raising a pseudo-exception. */
1875 #define UndefinedResult() undefined_result (sd,cia)
1877 undefined_result(sd
,cia
)
1881 sim_io_eprintf(sd
,"UndefinedResult: PC = 0x%s\n",pr_addr(cia
));
1882 #if 0 /* Disabled for the moment, since it actually happens a lot at the moment. */
1887 #endif /* WARN_RESULT */
1889 /*-- FPU support routines ---------------------------------------------------*/
1891 /* Numbers are held in normalized form. The SINGLE and DOUBLE binary
1892 formats conform to ANSI/IEEE Std 754-1985. */
1893 /* SINGLE precision floating:
1894 * seeeeeeeefffffffffffffffffffffff
1896 * e = 8bits = exponent
1897 * f = 23bits = fraction
1899 /* SINGLE precision fixed:
1900 * siiiiiiiiiiiiiiiiiiiiiiiiiiiiiii
1902 * i = 31bits = integer
1904 /* DOUBLE precision floating:
1905 * seeeeeeeeeeeffffffffffffffffffffffffffffffffffffffffffffffffffff
1907 * e = 11bits = exponent
1908 * f = 52bits = fraction
1910 /* DOUBLE precision fixed:
1911 * siiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiii
1913 * i = 63bits = integer
1916 /* Extract sign-bit: */
1917 #define FP_S_s(v) (((v) & ((unsigned)1 << 31)) ? 1 : 0)
1918 #define FP_D_s(v) (((v) & ((uword64)1 << 63)) ? 1 : 0)
1919 /* Extract biased exponent: */
1920 #define FP_S_be(v) (((v) >> 23) & 0xFF)
1921 #define FP_D_be(v) (((v) >> 52) & 0x7FF)
1922 /* Extract unbiased Exponent: */
1923 #define FP_S_e(v) (FP_S_be(v) - 0x7F)
1924 #define FP_D_e(v) (FP_D_be(v) - 0x3FF)
1925 /* Extract complete fraction field: */
1926 #define FP_S_f(v) ((v) & ~((unsigned)0x1FF << 23))
1927 #define FP_D_f(v) ((v) & ~((uword64)0xFFF << 52))
1928 /* Extract numbered fraction bit: */
1929 #define FP_S_fb(b,v) (((v) & (1 << (23 - (b)))) ? 1 : 0)
1930 #define FP_D_fb(b,v) (((v) & (1 << (52 - (b)))) ? 1 : 0)
1932 /* Explicit QNaN values used when value required: */
1933 #define FPQNaN_SINGLE (0x7FBFFFFF)
1934 #define FPQNaN_WORD (0x7FFFFFFF)
1935 #define FPQNaN_DOUBLE (((uword64)0x7FF7FFFF << 32) | 0xFFFFFFFF)
1936 #define FPQNaN_LONG (((uword64)0x7FFFFFFF << 32) | 0xFFFFFFFF)
1938 /* Explicit Infinity values used when required: */
1939 #define FPINF_SINGLE (0x7F800000)
1940 #define FPINF_DOUBLE (((uword64)0x7FF00000 << 32) | 0x00000000)
1942 #define RMMODE(v) (((v) == FP_RM_NEAREST) ? "Round" : (((v) == FP_RM_TOZERO) ? "Trunc" : (((v) == FP_RM_TOPINF) ? "Ceil" : "Floor")))
1943 #define DOFMT(v) (((v) == fmt_single) ? "single" : (((v) == fmt_double) ? "double" : (((v) == fmt_word) ? "word" : (((v) == fmt_long) ? "long" : (((v) == fmt_unknown) ? "<unknown>" : (((v) == fmt_uninterpreted) ? "<uninterpreted>" : (((v) == fmt_uninterpreted_32) ? "<uninterpreted_32>" : (((v) == fmt_uninterpreted_64) ? "<uninterpreted_64>" : "<format error>"))))))))
1946 value_fpr (SIM_DESC sd
,
1955 /* Treat unused register values, as fixed-point 64bit values: */
1956 if ((fmt
== fmt_uninterpreted
) || (fmt
== fmt_unknown
))
1958 /* If request to read data as "uninterpreted", then use the current
1960 fmt
= FPR_STATE
[fpr
];
1965 /* For values not yet accessed, set to the desired format: */
1966 if (FPR_STATE
[fpr
] == fmt_uninterpreted
) {
1967 FPR_STATE
[fpr
] = fmt
;
1969 printf("DBG: Register %d was fmt_uninterpreted. Now %s\n",fpr
,DOFMT(fmt
));
1972 if (fmt
!= FPR_STATE
[fpr
]) {
1973 sim_io_eprintf(sd
,"FPR %d (format %s) being accessed with format %s - setting to unknown (PC = 0x%s)\n",fpr
,DOFMT(FPR_STATE
[fpr
]),DOFMT(fmt
),pr_addr(cia
));
1974 FPR_STATE
[fpr
] = fmt_unknown
;
1977 if (FPR_STATE
[fpr
] == fmt_unknown
) {
1978 /* Set QNaN value: */
1981 value
= FPQNaN_SINGLE
;
1985 value
= FPQNaN_DOUBLE
;
1989 value
= FPQNaN_WORD
;
1993 value
= FPQNaN_LONG
;
2000 } else if (SizeFGR() == 64) {
2004 value
= (FGR
[fpr
] & 0xFFFFFFFF);
2007 case fmt_uninterpreted
:
2021 value
= (FGR
[fpr
] & 0xFFFFFFFF);
2024 case fmt_uninterpreted
:
2027 if ((fpr
& 1) == 0) { /* even registers only */
2029 printf("DBG: ValueFPR: FGR[%d] = %s, FGR[%d] = %s\n",
2030 fpr
+1, pr_uword64( (uword64
) FGR
[fpr
+1] ),
2031 fpr
, pr_uword64( (uword64
) FGR
[fpr
] ));
2033 value
= ((((uword64
)FGR
[fpr
+1]) << 32) | (FGR
[fpr
] & 0xFFFFFFFF));
2035 SignalException(ReservedInstruction
,0);
2046 SignalExceptionSimulatorFault ("Unrecognised FP format in ValueFPR()");
2049 printf("DBG: ValueFPR: fpr = %d, fmt = %s, value = 0x%s : PC = 0x%s : SizeFGR() = %d\n",fpr
,DOFMT(fmt
),pr_uword64(value
),pr_addr(cia
),SizeFGR());
2056 store_fpr (SIM_DESC sd
,
2066 printf("DBG: StoreFPR: fpr = %d, fmt = %s, value = 0x%s : PC = 0x%s : SizeFGR() = %d,\n",fpr
,DOFMT(fmt
),pr_uword64(value
),pr_addr(cia
),SizeFGR());
2069 if (SizeFGR() == 64) {
2071 case fmt_uninterpreted_32
:
2072 fmt
= fmt_uninterpreted
;
2075 FGR
[fpr
] = (((uword64
)0xDEADC0DE << 32) | (value
& 0xFFFFFFFF));
2076 FPR_STATE
[fpr
] = fmt
;
2079 case fmt_uninterpreted_64
:
2080 fmt
= fmt_uninterpreted
;
2081 case fmt_uninterpreted
:
2085 FPR_STATE
[fpr
] = fmt
;
2089 FPR_STATE
[fpr
] = fmt_unknown
;
2095 case fmt_uninterpreted_32
:
2096 fmt
= fmt_uninterpreted
;
2099 FGR
[fpr
] = (value
& 0xFFFFFFFF);
2100 FPR_STATE
[fpr
] = fmt
;
2103 case fmt_uninterpreted_64
:
2104 fmt
= fmt_uninterpreted
;
2105 case fmt_uninterpreted
:
2108 if ((fpr
& 1) == 0) { /* even register number only */
2109 FGR
[fpr
+1] = (value
>> 32);
2110 FGR
[fpr
] = (value
& 0xFFFFFFFF);
2111 FPR_STATE
[fpr
+ 1] = fmt
;
2112 FPR_STATE
[fpr
] = fmt
;
2114 FPR_STATE
[fpr
] = fmt_unknown
;
2115 FPR_STATE
[fpr
+ 1] = fmt_unknown
;
2116 SignalException(ReservedInstruction
,0);
2121 FPR_STATE
[fpr
] = fmt_unknown
;
2126 #if defined(WARN_RESULT)
2129 #endif /* WARN_RESULT */
2132 SignalExceptionSimulatorFault ("Unrecognised FP format in StoreFPR()");
2135 printf("DBG: StoreFPR: fpr[%d] = 0x%s (format %s)\n",fpr
,pr_uword64(FGR
[fpr
]),DOFMT(fmt
));
2152 sim_fpu_32to (&wop
, op
);
2153 boolean
= sim_fpu_is_nan (&wop
);
2160 sim_fpu_64to (&wop
, op
);
2161 boolean
= sim_fpu_is_nan (&wop
);
2165 fprintf (stderr
, "Bad switch\n");
2170 printf("DBG: NaN: returning %d for 0x%s (format = %s)\n",boolean
,pr_addr(op
),DOFMT(fmt
));
2184 printf("DBG: Infinity: format %s 0x%s\n",DOFMT(fmt
),pr_addr(op
));
2191 sim_fpu_32to (&wop
, op
);
2192 boolean
= sim_fpu_is_infinity (&wop
);
2198 sim_fpu_64to (&wop
, op
);
2199 boolean
= sim_fpu_is_infinity (&wop
);
2203 printf("DBG: TODO: unrecognised format (%s) for Infinity check\n",DOFMT(fmt
));
2208 printf("DBG: Infinity: returning %d for 0x%s (format = %s)\n",boolean
,pr_addr(op
),DOFMT(fmt
));
2222 /* Argument checking already performed by the FPCOMPARE code */
2225 printf("DBG: Less: %s: op1 = 0x%s : op2 = 0x%s\n",DOFMT(fmt
),pr_addr(op1
),pr_addr(op2
));
2228 /* The format type should already have been checked: */
2234 sim_fpu_32to (&wop1
, op1
);
2235 sim_fpu_32to (&wop2
, op2
);
2236 boolean
= sim_fpu_is_lt (&wop1
, &wop2
);
2243 sim_fpu_64to (&wop1
, op1
);
2244 sim_fpu_64to (&wop2
, op2
);
2245 boolean
= sim_fpu_is_lt (&wop1
, &wop2
);
2249 fprintf (stderr
, "Bad switch\n");
2254 printf("DBG: Less: returning %d (format = %s)\n",boolean
,DOFMT(fmt
));
2268 /* Argument checking already performed by the FPCOMPARE code */
2271 printf("DBG: Equal: %s: op1 = 0x%s : op2 = 0x%s\n",DOFMT(fmt
),pr_addr(op1
),pr_addr(op2
));
2274 /* The format type should already have been checked: */
2280 sim_fpu_32to (&wop1
, op1
);
2281 sim_fpu_32to (&wop2
, op2
);
2282 boolean
= sim_fpu_is_eq (&wop1
, &wop2
);
2289 sim_fpu_64to (&wop1
, op1
);
2290 sim_fpu_64to (&wop2
, op2
);
2291 boolean
= sim_fpu_is_eq (&wop1
, &wop2
);
2295 fprintf (stderr
, "Bad switch\n");
2300 printf("DBG: Equal: returning %d (format = %s)\n",boolean
,DOFMT(fmt
));
2307 AbsoluteValue(op
,fmt
)
2314 printf("DBG: AbsoluteValue: %s: op = 0x%s\n",DOFMT(fmt
),pr_addr(op
));
2317 /* The format type should already have been checked: */
2323 sim_fpu_32to (&wop
, op
);
2324 sim_fpu_abs (&wop
, &wop
);
2325 sim_fpu_to32 (&ans
, &wop
);
2333 sim_fpu_64to (&wop
, op
);
2334 sim_fpu_abs (&wop
, &wop
);
2335 sim_fpu_to64 (&ans
, &wop
);
2340 fprintf (stderr
, "Bad switch\n");
2355 printf("DBG: Negate: %s: op = 0x%s\n",DOFMT(fmt
),pr_addr(op
));
2358 /* The format type should already have been checked: */
2364 sim_fpu_32to (&wop
, op
);
2365 sim_fpu_neg (&wop
, &wop
);
2366 sim_fpu_to32 (&ans
, &wop
);
2374 sim_fpu_64to (&wop
, op
);
2375 sim_fpu_neg (&wop
, &wop
);
2376 sim_fpu_to64 (&ans
, &wop
);
2381 fprintf (stderr
, "Bad switch\n");
2397 printf("DBG: Add: %s: op1 = 0x%s : op2 = 0x%s\n",DOFMT(fmt
),pr_addr(op1
),pr_addr(op2
));
2400 /* The registers must specify FPRs valid for operands of type
2401 "fmt". If they are not valid, the result is undefined. */
2403 /* The format type should already have been checked: */
2411 sim_fpu_32to (&wop1
, op1
);
2412 sim_fpu_32to (&wop2
, op2
);
2413 sim_fpu_add (&ans
, &wop1
, &wop2
);
2414 sim_fpu_to32 (&res
, &ans
);
2424 sim_fpu_64to (&wop1
, op1
);
2425 sim_fpu_64to (&wop2
, op2
);
2426 sim_fpu_add (&ans
, &wop1
, &wop2
);
2427 sim_fpu_to64 (&res
, &ans
);
2432 fprintf (stderr
, "Bad switch\n");
2437 printf("DBG: Add: returning 0x%s (format = %s)\n",pr_addr(result
),DOFMT(fmt
));
2452 printf("DBG: Sub: %s: op1 = 0x%s : op2 = 0x%s\n",DOFMT(fmt
),pr_addr(op1
),pr_addr(op2
));
2455 /* The registers must specify FPRs valid for operands of type
2456 "fmt". If they are not valid, the result is undefined. */
2458 /* The format type should already have been checked: */
2466 sim_fpu_32to (&wop1
, op1
);
2467 sim_fpu_32to (&wop2
, op2
);
2468 sim_fpu_sub (&ans
, &wop1
, &wop2
);
2469 sim_fpu_to32 (&res
, &ans
);
2479 sim_fpu_64to (&wop1
, op1
);
2480 sim_fpu_64to (&wop2
, op2
);
2481 sim_fpu_sub (&ans
, &wop1
, &wop2
);
2482 sim_fpu_to64 (&res
, &ans
);
2487 fprintf (stderr
, "Bad switch\n");
2492 printf("DBG: Sub: returning 0x%s (format = %s)\n",pr_addr(result
),DOFMT(fmt
));
2499 Multiply(op1
,op2
,fmt
)
2507 printf("DBG: Multiply: %s: op1 = 0x%s : op2 = 0x%s\n",DOFMT(fmt
),pr_addr(op1
),pr_addr(op2
));
2510 /* The registers must specify FPRs valid for operands of type
2511 "fmt". If they are not valid, the result is undefined. */
2513 /* The format type should already have been checked: */
2521 sim_fpu_32to (&wop1
, op1
);
2522 sim_fpu_32to (&wop2
, op2
);
2523 sim_fpu_mul (&ans
, &wop1
, &wop2
);
2524 sim_fpu_to32 (&res
, &ans
);
2534 sim_fpu_64to (&wop1
, op1
);
2535 sim_fpu_64to (&wop2
, op2
);
2536 sim_fpu_mul (&ans
, &wop1
, &wop2
);
2537 sim_fpu_to64 (&res
, &ans
);
2542 fprintf (stderr
, "Bad switch\n");
2547 printf("DBG: Multiply: returning 0x%s (format = %s)\n",pr_addr(result
),DOFMT(fmt
));
2562 printf("DBG: Divide: %s: op1 = 0x%s : op2 = 0x%s\n",DOFMT(fmt
),pr_addr(op1
),pr_addr(op2
));
2565 /* The registers must specify FPRs valid for operands of type
2566 "fmt". If they are not valid, the result is undefined. */
2568 /* The format type should already have been checked: */
2576 sim_fpu_32to (&wop1
, op1
);
2577 sim_fpu_32to (&wop2
, op2
);
2578 sim_fpu_div (&ans
, &wop1
, &wop2
);
2579 sim_fpu_to32 (&res
, &ans
);
2589 sim_fpu_64to (&wop1
, op1
);
2590 sim_fpu_64to (&wop2
, op2
);
2591 sim_fpu_div (&ans
, &wop1
, &wop2
);
2592 sim_fpu_to64 (&res
, &ans
);
2597 fprintf (stderr
, "Bad switch\n");
2602 printf("DBG: Divide: returning 0x%s (format = %s)\n",pr_addr(result
),DOFMT(fmt
));
2616 printf("DBG: Recip: %s: op = 0x%s\n",DOFMT(fmt
),pr_addr(op
));
2619 /* The registers must specify FPRs valid for operands of type
2620 "fmt". If they are not valid, the result is undefined. */
2622 /* The format type should already have been checked: */
2629 sim_fpu_32to (&wop
, op
);
2630 sim_fpu_inv (&ans
, &wop
);
2631 sim_fpu_to32 (&res
, &ans
);
2640 sim_fpu_64to (&wop
, op
);
2641 sim_fpu_inv (&ans
, &wop
);
2642 sim_fpu_to64 (&res
, &ans
);
2647 fprintf (stderr
, "Bad switch\n");
2652 printf("DBG: Recip: returning 0x%s (format = %s)\n",pr_addr(result
),DOFMT(fmt
));
2666 printf("DBG: SquareRoot: %s: op = 0x%s\n",DOFMT(fmt
),pr_addr(op
));
2669 /* The registers must specify FPRs valid for operands of type
2670 "fmt". If they are not valid, the result is undefined. */
2672 /* The format type should already have been checked: */
2679 sim_fpu_32to (&wop
, op
);
2680 sim_fpu_sqrt (&ans
, &wop
);
2681 sim_fpu_to32 (&res
, &ans
);
2690 sim_fpu_64to (&wop
, op
);
2691 sim_fpu_sqrt (&ans
, &wop
);
2692 sim_fpu_to64 (&res
, &ans
);
2697 fprintf (stderr
, "Bad switch\n");
2702 printf("DBG: SquareRoot: returning 0x%s (format = %s)\n",pr_addr(result
),DOFMT(fmt
));
2718 printf("DBG: Max: %s: op1 = 0x%s : op2 = 0x%s\n",DOFMT(fmt
),pr_addr(op1
),pr_addr(op2
));
2721 /* The registers must specify FPRs valid for operands of type
2722 "fmt". If they are not valid, the result is undefined. */
2724 /* The format type should already have been checked: */
2731 sim_fpu_32to (&wop1
, op1
);
2732 sim_fpu_32to (&wop2
, op2
);
2733 cmp
= sim_fpu_cmp (&wop1
, &wop2
);
2740 sim_fpu_64to (&wop1
, op1
);
2741 sim_fpu_64to (&wop2
, op2
);
2742 cmp
= sim_fpu_cmp (&wop1
, &wop2
);
2746 fprintf (stderr
, "Bad switch\n");
2752 case SIM_FPU_IS_SNAN
:
2753 case SIM_FPU_IS_QNAN
:
2755 case SIM_FPU_IS_NINF
:
2756 case SIM_FPU_IS_NNUMBER
:
2757 case SIM_FPU_IS_NDENORM
:
2758 case SIM_FPU_IS_NZERO
:
2759 result
= op2
; /* op1 - op2 < 0 */
2760 case SIM_FPU_IS_PINF
:
2761 case SIM_FPU_IS_PNUMBER
:
2762 case SIM_FPU_IS_PDENORM
:
2763 case SIM_FPU_IS_PZERO
:
2764 result
= op1
; /* op1 - op2 > 0 */
2766 fprintf (stderr
, "Bad switch\n");
2771 printf("DBG: Max: returning 0x%s (format = %s)\n",pr_addr(result
),DOFMT(fmt
));
2788 printf("DBG: Min: %s: op1 = 0x%s : op2 = 0x%s\n",DOFMT(fmt
),pr_addr(op1
),pr_addr(op2
));
2791 /* The registers must specify FPRs valid for operands of type
2792 "fmt". If they are not valid, the result is undefined. */
2794 /* The format type should already have been checked: */
2801 sim_fpu_32to (&wop1
, op1
);
2802 sim_fpu_32to (&wop2
, op2
);
2803 cmp
= sim_fpu_cmp (&wop1
, &wop2
);
2810 sim_fpu_64to (&wop1
, op1
);
2811 sim_fpu_64to (&wop2
, op2
);
2812 cmp
= sim_fpu_cmp (&wop1
, &wop2
);
2816 fprintf (stderr
, "Bad switch\n");
2822 case SIM_FPU_IS_SNAN
:
2823 case SIM_FPU_IS_QNAN
:
2825 case SIM_FPU_IS_NINF
:
2826 case SIM_FPU_IS_NNUMBER
:
2827 case SIM_FPU_IS_NDENORM
:
2828 case SIM_FPU_IS_NZERO
:
2829 result
= op1
; /* op1 - op2 < 0 */
2830 case SIM_FPU_IS_PINF
:
2831 case SIM_FPU_IS_PNUMBER
:
2832 case SIM_FPU_IS_PDENORM
:
2833 case SIM_FPU_IS_PZERO
:
2834 result
= op2
; /* op1 - op2 > 0 */
2836 fprintf (stderr
, "Bad switch\n");
2841 printf("DBG: Min: returning 0x%s (format = %s)\n",pr_addr(result
),DOFMT(fmt
));
2849 convert (SIM_DESC sd
,
2858 sim_fpu_round round
;
2859 unsigned32 result32
;
2860 unsigned64 result64
;
2863 #if 0 /* FIXME: doesn't compile */
2864 printf("DBG: Convert: mode %s : op 0x%s : from %s : to %s : (PC = 0x%s)\n",RMMODE(rm
),pr_addr(op
),DOFMT(from
),DOFMT(to
),pr_addr(IPC
));
2871 /* Round result to nearest representable value. When two
2872 representable values are equally near, round to the value
2873 that has a least significant bit of zero (i.e. is even). */
2874 round
= sim_fpu_round_near
;
2877 /* Round result to the value closest to, and not greater in
2878 magnitude than, the result. */
2879 round
= sim_fpu_round_zero
;
2882 /* Round result to the value closest to, and not less than,
2884 round
= sim_fpu_round_up
;
2888 /* Round result to the value closest to, and not greater than,
2890 round
= sim_fpu_round_down
;
2894 fprintf (stderr
, "Bad switch\n");
2898 /* Convert the input to sim_fpu internal format */
2902 sim_fpu_64to (&wop
, op
);
2905 sim_fpu_32to (&wop
, op
);
2908 sim_fpu_i32to (&wop
, op
, round
);
2911 sim_fpu_i64to (&wop
, op
, round
);
2914 fprintf (stderr
, "Bad switch\n");
2918 /* Convert sim_fpu format into the output */
2919 /* The value WOP is converted to the destination format, rounding
2920 using mode RM. When the destination is a fixed-point format, then
2921 a source value of Infinity, NaN or one which would round to an
2922 integer outside the fixed point range then an IEEE Invalid
2923 Operation condition is raised. */
2927 sim_fpu_round_32 (&wop
, round
, 0);
2928 sim_fpu_to32 (&result32
, &wop
);
2929 result64
= result32
;
2932 sim_fpu_round_64 (&wop
, round
, 0);
2933 sim_fpu_to64 (&result64
, &wop
);
2936 sim_fpu_to32i (&result32
, &wop
, round
);
2937 result64
= result32
;
2940 sim_fpu_to64i (&result64
, &wop
, round
);
2944 fprintf (stderr
, "Bad switch\n");
2949 printf("DBG: Convert: returning 0x%s (to format = %s)\n",pr_addr(result64
),DOFMT(to
));
2956 /*-- co-processor support routines ------------------------------------------*/
2959 CoProcPresent(unsigned int coproc_number
)
2961 /* Return TRUE if simulator provides a model for the given co-processor number */
2966 cop_lw (SIM_DESC sd
,
2971 unsigned int memword
)
2976 if (CURRENT_FLOATING_POINT
== HARD_FLOATING_POINT
)
2979 printf("DBG: COP_LW: memword = 0x%08X (uword64)memword = 0x%s\n",memword
,pr_addr(memword
));
2981 StoreFPR(coproc_reg
,fmt_word
,(uword64
)memword
);
2982 FPR_STATE
[coproc_reg
] = fmt_uninterpreted
;
2987 #if 0 /* this should be controlled by a configuration option */
2988 sim_io_printf(sd
,"COP_LW(%d,%d,0x%08X) at PC = 0x%s : TODO (architecture specific)\n",coproc_num
,coproc_reg
,memword
,pr_addr(cia
));
2997 cop_ld (SIM_DESC sd
,
3006 printf("DBG: COP_LD: coproc_num = %d, coproc_reg = %d, value = 0x%s : PC = 0x%s\n", coproc_num
, coproc_reg
, pr_uword64(memword
), pr_addr(cia
) );
3009 switch (coproc_num
) {
3011 if (CURRENT_FLOATING_POINT
== HARD_FLOATING_POINT
)
3013 StoreFPR(coproc_reg
,fmt_uninterpreted
,memword
);
3018 #if 0 /* this message should be controlled by a configuration option */
3019 sim_io_printf(sd
,"COP_LD(%d,%d,0x%s) at PC = 0x%s : TODO (architecture specific)\n",coproc_num
,coproc_reg
,pr_addr(memword
),pr_addr(cia
));
3031 cop_sw (SIM_DESC sd
,
3037 unsigned int value
= 0;
3042 if (CURRENT_FLOATING_POINT
== HARD_FLOATING_POINT
)
3045 hold
= FPR_STATE
[coproc_reg
];
3046 FPR_STATE
[coproc_reg
] = fmt_word
;
3047 value
= (unsigned int)ValueFPR(coproc_reg
,fmt_uninterpreted
);
3048 FPR_STATE
[coproc_reg
] = hold
;
3053 #if 0 /* should be controlled by configuration option */
3054 sim_io_printf(sd
,"COP_SW(%d,%d) at PC = 0x%s : TODO (architecture specific)\n",coproc_num
,coproc_reg
,pr_addr(cia
));
3063 cop_sd (SIM_DESC sd
,
3073 if (CURRENT_FLOATING_POINT
== HARD_FLOATING_POINT
)
3075 value
= ValueFPR(coproc_reg
,fmt_uninterpreted
);
3080 #if 0 /* should be controlled by configuration option */
3081 sim_io_printf(sd
,"COP_SD(%d,%d) at PC = 0x%s : TODO (architecture specific)\n",coproc_num
,coproc_reg
,pr_addr(cia
));
3093 decode_coproc (SIM_DESC sd
,
3096 unsigned int instruction
)
3098 int coprocnum
= ((instruction
>> 26) & 3);
3102 case 0: /* standard CPU control and cache registers */
3104 int code
= ((instruction
>> 21) & 0x1F);
3105 int rt
= ((instruction
>> 16) & 0x1F);
3106 int rd
= ((instruction
>> 11) & 0x1F);
3107 int tail
= instruction
& 0x3ff;
3108 /* R4000 Users Manual (second edition) lists the following CP0
3110 CODE><-RT><RD-><--TAIL--->
3111 DMFC0 Doubleword Move From CP0 (VR4100 = 01000000001tttttddddd00000000000)
3112 DMTC0 Doubleword Move To CP0 (VR4100 = 01000000101tttttddddd00000000000)
3113 MFC0 word Move From CP0 (VR4100 = 01000000000tttttddddd00000000000)
3114 MTC0 word Move To CP0 (VR4100 = 01000000100tttttddddd00000000000)
3115 TLBR Read Indexed TLB Entry (VR4100 = 01000010000000000000000000000001)
3116 TLBWI Write Indexed TLB Entry (VR4100 = 01000010000000000000000000000010)
3117 TLBWR Write Random TLB Entry (VR4100 = 01000010000000000000000000000110)
3118 TLBP Probe TLB for Matching Entry (VR4100 = 01000010000000000000000000001000)
3119 CACHE Cache operation (VR4100 = 101111bbbbbpppppiiiiiiiiiiiiiiii)
3120 ERET Exception return (VR4100 = 01000010000000000000000000011000)
3122 if (((code
== 0x00) || (code
== 0x04)) && tail
== 0)
3124 /* M[TF]C0 - 32 bit word */
3126 switch (rd
) /* NOTEs: Standard CP0 registers */
3128 /* 0 = Index R4000 VR4100 VR4300 */
3129 /* 1 = Random R4000 VR4100 VR4300 */
3130 /* 2 = EntryLo0 R4000 VR4100 VR4300 */
3131 /* 3 = EntryLo1 R4000 VR4100 VR4300 */
3132 /* 4 = Context R4000 VR4100 VR4300 */
3133 /* 5 = PageMask R4000 VR4100 VR4300 */
3134 /* 6 = Wired R4000 VR4100 VR4300 */
3135 /* 8 = BadVAddr R4000 VR4100 VR4300 */
3136 /* 9 = Count R4000 VR4100 VR4300 */
3137 /* 10 = EntryHi R4000 VR4100 VR4300 */
3138 /* 11 = Compare R4000 VR4100 VR4300 */
3139 /* 12 = SR R4000 VR4100 VR4300 */
3140 #ifdef SUBTARGET_R3900
3142 /* 3 = Config R3900 */
3144 /* 7 = Cache R3900 */
3146 /* 15 = PRID R3900 */
3152 /* 8 = BadVAddr R4000 VR4100 VR4300 */
3154 GPR
[rt
] = COP0_BADVADDR
;
3156 COP0_BADVADDR
= GPR
[rt
];
3159 #endif /* SUBTARGET_R3900 */
3166 /* 13 = Cause R4000 VR4100 VR4300 */
3173 /* 14 = EPC R4000 VR4100 VR4300 */
3176 GPR
[rt
] = (signed_word
) (signed_address
) EPC
;
3180 /* 15 = PRId R4000 VR4100 VR4300 */
3181 #ifdef SUBTARGET_R3900
3190 /* 16 = Config R4000 VR4100 VR4300 */
3193 GPR
[rt
] = C0_CONFIG
;
3195 C0_CONFIG
= GPR
[rt
];
3198 #ifdef SUBTARGET_R3900
3207 /* 17 = LLAddr R4000 VR4100 VR4300 */
3209 /* 18 = WatchLo R4000 VR4100 VR4300 */
3210 /* 19 = WatchHi R4000 VR4100 VR4300 */
3211 /* 20 = XContext R4000 VR4100 VR4300 */
3212 /* 26 = PErr or ECC R4000 VR4100 VR4300 */
3213 /* 27 = CacheErr R4000 VR4100 */
3214 /* 28 = TagLo R4000 VR4100 VR4300 */
3215 /* 29 = TagHi R4000 VR4100 VR4300 */
3216 /* 30 = ErrorEPC R4000 VR4100 VR4300 */
3217 GPR
[rt
] = 0xDEADC0DE; /* CPR[0,rd] */
3218 /* CPR[0,rd] = GPR[rt]; */
3221 GPR
[rt
] = (signed_word
) (signed32
) COP0_GPR
[rd
];
3223 COP0_GPR
[rd
] = GPR
[rt
];
3226 sim_io_printf(sd
,"Warning: MFC0 %d,%d ignored, PC=%08x (architecture specific)\n",rt
,rd
, (unsigned)cia
);
3228 sim_io_printf(sd
,"Warning: MTC0 %d,%d ignored, PC=%08x (architecture specific)\n",rt
,rd
, (unsigned)cia
);
3232 else if (code
== 0x10 && (tail
& 0x3f) == 0x18)
3235 if (SR
& status_ERL
)
3237 /* Oops, not yet available */
3238 sim_io_printf(sd
,"Warning: ERET when SR[ERL] set not handled yet");
3248 else if (code
== 0x10 && (tail
& 0x3f) == 0x10)
3251 #ifdef SUBTARGET_R3900
3252 /* TX39: Copy IEp/KUp -> IEc/KUc, and IEo/KUo -> IEp/KUp */
3254 /* shift IE/KU history bits right */
3255 SR
= LSMASKED32(SR
, 31, 4) | LSINSERTED32(LSEXTRACTED32(SR
, 5, 2), 3, 0);
3257 /* TODO: CACHE register */
3258 #endif /* SUBTARGET_R3900 */
3260 else if (code
== 0x10 && (tail
& 0x3f) == 0x1F)
3268 sim_io_eprintf(sd
,"Unrecognised COP0 instruction 0x%08X at PC = 0x%s : No handler present\n",instruction
,pr_addr(cia
));
3269 /* TODO: When executing an ERET or RFE instruction we should
3270 clear LLBIT, to ensure that any out-standing atomic
3271 read/modify/write sequence fails. */
3275 case 2: /* co-processor 2 */
3282 sim_io_eprintf(sd
, "COP2 instruction 0x%08X at PC = 0x%s : No handler present\n",
3283 instruction
,pr_addr(cia
));
3288 case 1: /* should not occur (FPU co-processor) */
3289 case 3: /* should not occur (FPU co-processor) */
3290 SignalException(ReservedInstruction
,instruction
);
3298 /* This code copied from gdb's utils.c. Would like to share this code,
3299 but don't know of a common place where both could get to it. */
3301 /* Temporary storage using circular buffer */
3307 static char buf
[NUMCELLS
][CELLSIZE
];
3309 if (++cell
>=NUMCELLS
) cell
=0;
3313 /* Print routines to handle variable size regs, etc */
3315 /* Eliminate warning from compiler on 32-bit systems */
3316 static int thirty_two
= 32;
3322 char *paddr_str
=get_cell();
3323 switch (sizeof(addr
))
3326 sprintf(paddr_str
,"%08lx%08lx",
3327 (unsigned long)(addr
>>thirty_two
),(unsigned long)(addr
&0xffffffff));
3330 sprintf(paddr_str
,"%08lx",(unsigned long)addr
);
3333 sprintf(paddr_str
,"%04x",(unsigned short)(addr
&0xffff));
3336 sprintf(paddr_str
,"%x",addr
);
3345 char *paddr_str
=get_cell();
3346 sprintf(paddr_str
,"%08lx%08lx",
3347 (unsigned long)(addr
>>thirty_two
),(unsigned long)(addr
&0xffffffff));
3353 mips_core_signal (SIM_DESC sd
,
3359 transfer_type transfer
,
3360 sim_core_signals sig
)
3362 const char *copy
= (transfer
== read_transfer
? "read" : "write");
3363 address_word ip
= CIA_ADDR (cia
);
3367 case sim_core_unmapped_signal
:
3368 sim_io_eprintf (sd
, "mips-core: %d byte %s to unmapped address 0x%lx at 0x%lx\n",
3370 (unsigned long) addr
, (unsigned long) ip
);
3371 COP0_BADVADDR
= addr
;
3372 SignalExceptionDataReference();
3375 case sim_core_unaligned_signal
:
3376 sim_io_eprintf (sd
, "mips-core: %d byte %s to unaligned address 0x%lx at 0x%lx\n",
3378 (unsigned long) addr
, (unsigned long) ip
);
3379 COP0_BADVADDR
= addr
;
3380 if(transfer
== read_transfer
)
3381 SignalExceptionAddressLoad();
3383 SignalExceptionAddressStore();
3387 sim_engine_abort (sd
, cpu
, cia
,
3388 "mips_core_signal - internal error - bad switch");
3394 mips_cpu_exception_trigger(SIM_DESC sd
, sim_cpu
* cpu
, address_word cia
)
3396 ASSERT(cpu
!= NULL
);
3398 if(cpu
->exc_suspended
> 0)
3399 sim_io_eprintf(sd
, "Warning, nested exception triggered (%d)\n", cpu
->exc_suspended
);
3402 memcpy(cpu
->exc_trigger_registers
, cpu
->registers
, sizeof(cpu
->exc_trigger_registers
));
3403 cpu
->exc_suspended
= 0;
3407 mips_cpu_exception_suspend(SIM_DESC sd
, sim_cpu
* cpu
, int exception
)
3409 ASSERT(cpu
!= NULL
);
3411 if(cpu
->exc_suspended
> 0)
3412 sim_io_eprintf(sd
, "Warning, nested exception signal (%d then %d)\n",
3413 cpu
->exc_suspended
, exception
);
3415 memcpy(cpu
->exc_suspend_registers
, cpu
->registers
, sizeof(cpu
->exc_suspend_registers
));
3416 memcpy(cpu
->registers
, cpu
->exc_trigger_registers
, sizeof(cpu
->registers
));
3417 cpu
->exc_suspended
= exception
;
3421 mips_cpu_exception_resume(SIM_DESC sd
, sim_cpu
* cpu
, int exception
)
3423 ASSERT(cpu
!= NULL
);
3425 if(exception
== 0 && cpu
->exc_suspended
> 0)
3427 /* warn not for breakpoints */
3428 if(cpu
->exc_suspended
!= sim_signal_to_host(sd
, SIM_SIGTRAP
))
3429 sim_io_eprintf(sd
, "Warning, resuming but ignoring pending exception signal (%d)\n",
3430 cpu
->exc_suspended
);
3432 else if(exception
!= 0 && cpu
->exc_suspended
> 0)
3434 if(exception
!= cpu
->exc_suspended
)
3435 sim_io_eprintf(sd
, "Warning, resuming with mismatched exception signal (%d vs %d)\n",
3436 cpu
->exc_suspended
, exception
);
3438 memcpy(cpu
->registers
, cpu
->exc_suspend_registers
, sizeof(cpu
->registers
));
3440 else if(exception
!= 0 && cpu
->exc_suspended
== 0)
3442 sim_io_eprintf(sd
, "Warning, ignoring spontanous exception signal (%d)\n", exception
);
3444 cpu
->exc_suspended
= 0;
3448 /*---------------------------------------------------------------------------*/
3449 /*> EOF interp.c <*/