2 /* Simulator for the MIPS architecture.
4 This file is part of the MIPS sim
6 THIS SOFTWARE IS NOT COPYRIGHTED
8 Cygnus offers the following for use in the public domain. Cygnus
9 makes no warranty with regard to the software or it's performance
10 and the user accepts the software "AS IS" with all faults.
12 CYGNUS DISCLAIMS ANY WARRANTIES, EXPRESS OR IMPLIED, WITH REGARD TO
13 THIS SOFTWARE INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
14 MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
18 The IDT monitor (found on the VR4300 board), seems to lie about
19 register contents. It seems to treat the registers as sign-extended
20 32-bit values. This cause *REAL* problems when single-stepping 64-bit
25 /* The TRACE manifests enable the provision of extra features. If they
26 are not defined then a simpler (quicker) simulator is constructed
27 without the required run-time checks, etc. */
28 #if 1 /* 0 to allow user build selection, 1 to force inclusion */
34 #include "sim-utils.h"
35 #include "sim-options.h"
36 #include "sim-assert.h"
62 #include "libiberty.h"
64 #include "callback.h" /* GDB simulator callback interface */
65 #include "remote-sim.h" /* GDB simulator interface */
73 char* pr_addr
PARAMS ((SIM_ADDR addr
));
74 char* pr_uword64
PARAMS ((uword64 addr
));
77 /* Within interp.c we refer to the sim_state and sim_cpu directly. */
82 /* The following reserved instruction value is used when a simulator
83 trap is required. NOTE: Care must be taken, since this value may be
84 used in later revisions of the MIPS ISA. */
86 #define RSVD_INSTRUCTION (0x00000005)
87 #define RSVD_INSTRUCTION_MASK (0xFC00003F)
89 #define RSVD_INSTRUCTION_ARG_SHIFT 6
90 #define RSVD_INSTRUCTION_ARG_MASK 0xFFFFF
93 /* Bits in the Debug register */
94 #define Debug_DBD 0x80000000 /* Debug Branch Delay */
95 #define Debug_DM 0x40000000 /* Debug Mode */
96 #define Debug_DBp 0x00000002 /* Debug Breakpoint indicator */
98 /*---------------------------------------------------------------------------*/
99 /*-- GDB simulator interface ------------------------------------------------*/
100 /*---------------------------------------------------------------------------*/
102 static void ColdReset
PARAMS((SIM_DESC sd
));
104 /*---------------------------------------------------------------------------*/
108 #define DELAYSLOT() {\
109 if (STATE & simDELAYSLOT)\
110 sim_io_eprintf(sd,"Delay slot already activated (branch in delay slot?)\n");\
111 STATE |= simDELAYSLOT;\
114 #define JALDELAYSLOT() {\
116 STATE |= simJALDELAYSLOT;\
120 STATE &= ~simDELAYSLOT;\
121 STATE |= simSKIPNEXT;\
124 #define CANCELDELAYSLOT() {\
126 STATE &= ~(simDELAYSLOT | simJALDELAYSLOT);\
129 #define INDELAYSLOT() ((STATE & simDELAYSLOT) != 0)
130 #define INJALDELAYSLOT() ((STATE & simJALDELAYSLOT) != 0)
132 /* Note that the monitor code essentially assumes this layout of memory.
133 If you change these, change the monitor code, too. */
134 #define K0BASE (0x80000000)
135 #define K0SIZE (0x20000000)
136 #define K1BASE (0xA0000000)
137 #define K1SIZE (0x20000000)
139 /* Simple run-time monitor support.
141 We emulate the monitor by placing magic reserved instructions at
142 the monitor's entry points; when we hit these instructions, instead
143 of raising an exception (as we would normally), we look at the
144 instruction and perform the appropriate monitory operation.
146 `*_monitor_base' are the physical addresses at which the corresponding
147 monitor vectors are located. `0' means none. By default,
149 The RSVD_INSTRUCTION... macros specify the magic instructions we
150 use at the monitor entry points. */
151 static int firmware_option_p
= 0;
152 static SIM_ADDR idt_monitor_base
= 0xBFC00000;
153 static SIM_ADDR pmon_monitor_base
= 0xBFC00500;
154 static SIM_ADDR lsipmon_monitor_base
= 0xBFC00200;
156 static SIM_RC
sim_firmware_command (SIM_DESC sd
, char* arg
);
159 #define MEM_SIZE (2 << 20)
163 static char *tracefile
= "trace.din"; /* default filename for trace log */
164 FILE *tracefh
= NULL
;
165 static void open_trace
PARAMS((SIM_DESC sd
));
168 static const char * get_insn_name (sim_cpu
*, int);
170 /* simulation target board. NULL=canonical */
171 static char* board
= NULL
;
174 static DECLARE_OPTION_HANDLER (mips_option_handler
);
177 OPTION_DINERO_TRACE
= OPTION_START
,
185 mips_option_handler (sd
, cpu
, opt
, arg
, is_command
)
195 case OPTION_DINERO_TRACE
: /* ??? */
197 /* Eventually the simTRACE flag could be treated as a toggle, to
198 allow external control of the program points being traced
199 (i.e. only from main onwards, excluding the run-time setup,
201 for (cpu_nr
= 0; cpu_nr
< MAX_NR_PROCESSORS
; cpu_nr
++)
203 sim_cpu
*cpu
= STATE_CPU (sd
, cpu_nr
);
206 else if (strcmp (arg
, "yes") == 0)
208 else if (strcmp (arg
, "no") == 0)
210 else if (strcmp (arg
, "on") == 0)
212 else if (strcmp (arg
, "off") == 0)
216 fprintf (stderr
, "Unrecognized dinero-trace option `%s'\n", arg
);
223 Simulator constructed without dinero tracing support (for performance).\n\
224 Re-compile simulator with \"-DTRACE\" to enable this option.\n");
228 case OPTION_DINERO_FILE
:
230 if (optarg
!= NULL
) {
232 tmp
= (char *)malloc(strlen(optarg
) + 1);
235 sim_io_printf(sd
,"Failed to allocate buffer for tracefile name \"%s\"\n",optarg
);
241 sim_io_printf(sd
,"Placing trace information into file \"%s\"\n",tracefile
);
247 case OPTION_FIRMWARE
:
248 return sim_firmware_command (sd
, arg
);
254 board
= zalloc(strlen(arg
) + 1);
265 static const OPTION mips_options
[] =
267 { {"dinero-trace", optional_argument
, NULL
, OPTION_DINERO_TRACE
},
268 '\0', "on|off", "Enable dinero tracing",
269 mips_option_handler
},
270 { {"dinero-file", required_argument
, NULL
, OPTION_DINERO_FILE
},
271 '\0', "FILE", "Write dinero trace to FILE",
272 mips_option_handler
},
273 { {"firmware", required_argument
, NULL
, OPTION_FIRMWARE
},
274 '\0', "[idt|pmon|lsipmon|none][@ADDRESS]", "Emulate ROM monitor",
275 mips_option_handler
},
276 { {"board", required_argument
, NULL
, OPTION_BOARD
},
277 '\0', "none" /* rely on compile-time string concatenation for other options */
279 #define BOARD_JMR3904 "jmr3904"
281 #define BOARD_JMR3904_PAL "jmr3904pal"
282 "|" BOARD_JMR3904_PAL
283 #define BOARD_JMR3904_DEBUG "jmr3904debug"
284 "|" BOARD_JMR3904_DEBUG
285 #define BOARD_BSP "bsp"
288 , "Customize simulation for a particular board.", mips_option_handler
},
290 { {NULL
, no_argument
, NULL
, 0}, '\0', NULL
, NULL
, NULL
}
294 int interrupt_pending
;
297 interrupt_event (SIM_DESC sd
, void *data
)
299 sim_cpu
*cpu
= STATE_CPU (sd
, 0); /* FIXME */
300 address_word cia
= CIA_GET (cpu
);
303 interrupt_pending
= 0;
304 SignalExceptionInterrupt (1); /* interrupt "1" */
306 else if (!interrupt_pending
)
307 sim_events_schedule (sd
, 1, interrupt_event
, data
);
311 /*---------------------------------------------------------------------------*/
312 /*-- Device registration hook -----------------------------------------------*/
313 /*---------------------------------------------------------------------------*/
314 static void device_init(SIM_DESC sd
) {
316 extern void register_devices(SIM_DESC
);
317 register_devices(sd
);
321 /*---------------------------------------------------------------------------*/
322 /*-- GDB simulator interface ------------------------------------------------*/
323 /*---------------------------------------------------------------------------*/
326 sim_open (kind
, cb
, abfd
, argv
)
332 SIM_DESC sd
= sim_state_alloc (kind
, cb
);
333 sim_cpu
*cpu
= STATE_CPU (sd
, 0); /* FIXME */
335 SIM_ASSERT (STATE_MAGIC (sd
) == SIM_MAGIC_NUMBER
);
337 /* FIXME: watchpoints code shouldn't need this */
338 STATE_WATCHPOINTS (sd
)->pc
= &(PC
);
339 STATE_WATCHPOINTS (sd
)->sizeof_pc
= sizeof (PC
);
340 STATE_WATCHPOINTS (sd
)->interrupt_handler
= interrupt_event
;
342 /* Initialize the mechanism for doing insn profiling. */
343 CPU_INSN_NAME (cpu
) = get_insn_name
;
344 CPU_MAX_INSNS (cpu
) = nr_itable_entries
;
348 if (sim_pre_argv_init (sd
, argv
[0]) != SIM_RC_OK
)
350 sim_add_option_table (sd
, NULL
, mips_options
);
353 /* getopt will print the error message so we just have to exit if this fails.
354 FIXME: Hmmm... in the case of gdb we need getopt to call
356 if (sim_parse_args (sd
, argv
) != SIM_RC_OK
)
358 /* Uninstall the modules to avoid memory leaks,
359 file descriptor leaks, etc. */
360 sim_module_uninstall (sd
);
364 /* handle board-specific memory maps */
367 /* Allocate core managed memory */
370 /* For compatibility with the old code - under this (at level one)
371 are the kernel spaces K0 & K1. Both of these map to a single
372 smaller sub region */
373 sim_do_command(sd
," memory region 0x7fff8000,0x8000") ; /* MTZ- 32 k stack */
374 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx%%0x%lx,0x%0x",
376 MEM_SIZE
, /* actual size */
381 else if (board
!= NULL
382 && (strcmp(board
, BOARD_BSP
) == 0))
386 STATE_ENVIRONMENT (sd
) = OPERATING_ENVIRONMENT
;
388 /* ROM: 0x9FC0_0000 - 0x9FFF_FFFF and 0xBFC0_0000 - 0xBFFF_FFFF */
389 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx,0x%0x",
391 4 * 1024 * 1024, /* 4 MB */
394 /* SRAM: 0x8000_0000 - 0x803F_FFFF and 0xA000_0000 - 0xA03F_FFFF */
395 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx,0x%0x",
397 4 * 1024 * 1024, /* 4 MB */
400 /* DRAM: 0x8800_0000 - 0x89FF_FFFF and 0xA800_0000 - 0xA9FF_FFFF */
401 for (i
=0; i
<8; i
++) /* 32 MB total */
403 unsigned size
= 4 * 1024 * 1024; /* 4 MB */
404 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx,0x%0x",
405 0x88000000 + (i
* size
),
407 0xA8000000 + (i
* size
));
411 else if (board
!= NULL
412 && (strcmp(board
, BOARD_JMR3904
) == 0 ||
413 strcmp(board
, BOARD_JMR3904_PAL
) == 0 ||
414 strcmp(board
, BOARD_JMR3904_DEBUG
) == 0))
416 /* match VIRTUAL memory layout of JMR-TX3904 board */
419 /* --- disable monitor unless forced on by user --- */
421 if (! firmware_option_p
)
423 idt_monitor_base
= 0;
424 pmon_monitor_base
= 0;
425 lsipmon_monitor_base
= 0;
428 /* --- environment --- */
430 STATE_ENVIRONMENT (sd
) = OPERATING_ENVIRONMENT
;
434 /* ROM: 0x9FC0_0000 - 0x9FFF_FFFF and 0xBFC0_0000 - 0xBFFF_FFFF */
435 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx,0x%0x",
437 4 * 1024 * 1024, /* 4 MB */
440 /* SRAM: 0x8000_0000 - 0x803F_FFFF and 0xA000_0000 - 0xA03F_FFFF */
441 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx,0x%0x",
443 4 * 1024 * 1024, /* 4 MB */
446 /* DRAM: 0x8800_0000 - 0x89FF_FFFF and 0xA800_0000 - 0xA9FF_FFFF */
447 for (i
=0; i
<8; i
++) /* 32 MB total */
449 unsigned size
= 4 * 1024 * 1024; /* 4 MB */
450 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx,0x%0x",
451 0x88000000 + (i
* size
),
453 0xA8000000 + (i
* size
));
456 /* Dummy memory regions for unsimulated devices - sorted by address */
458 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx", 0xB1000000, 0x400); /* ISA I/O */
459 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx", 0xB2100000, 0x004); /* ISA ctl */
460 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx", 0xB2500000, 0x004); /* LED/switch */
461 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx", 0xB2700000, 0x004); /* RTC */
462 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx", 0xB3C00000, 0x004); /* RTC */
463 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx", 0xFFFF8000, 0x900); /* DRAMC */
464 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx", 0xFFFF9000, 0x200); /* EBIF */
465 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx", 0xFFFFE000, 0x01c); /* EBIF */
466 sim_do_commandf (sd
, "memory alias 0x%lx@1,0x%lx", 0xFFFFF500, 0x300); /* PIO */
469 /* --- simulated devices --- */
470 sim_hw_parse (sd
, "/tx3904irc@0xffffc000/reg 0xffffc000 0x20");
471 sim_hw_parse (sd
, "/tx3904cpu");
472 sim_hw_parse (sd
, "/tx3904tmr@0xfffff000/reg 0xfffff000 0x100");
473 sim_hw_parse (sd
, "/tx3904tmr@0xfffff100/reg 0xfffff100 0x100");
474 sim_hw_parse (sd
, "/tx3904tmr@0xfffff200/reg 0xfffff200 0x100");
475 sim_hw_parse (sd
, "/tx3904sio@0xfffff300/reg 0xfffff300 0x100");
477 /* FIXME: poking at dv-sockser internals, use tcp backend if
478 --sockser_addr option was given.*/
479 extern char* sockser_addr
;
480 if(sockser_addr
== NULL
)
481 sim_hw_parse (sd
, "/tx3904sio@0xfffff300/backend stdio");
483 sim_hw_parse (sd
, "/tx3904sio@0xfffff300/backend tcp");
485 sim_hw_parse (sd
, "/tx3904sio@0xfffff400/reg 0xfffff400 0x100");
486 sim_hw_parse (sd
, "/tx3904sio@0xfffff400/backend stdio");
488 /* -- device connections --- */
489 sim_hw_parse (sd
, "/tx3904irc > ip level /tx3904cpu");
490 sim_hw_parse (sd
, "/tx3904tmr@0xfffff000 > int tmr0 /tx3904irc");
491 sim_hw_parse (sd
, "/tx3904tmr@0xfffff100 > int tmr1 /tx3904irc");
492 sim_hw_parse (sd
, "/tx3904tmr@0xfffff200 > int tmr2 /tx3904irc");
493 sim_hw_parse (sd
, "/tx3904sio@0xfffff300 > int sio0 /tx3904irc");
494 sim_hw_parse (sd
, "/tx3904sio@0xfffff400 > int sio1 /tx3904irc");
496 /* add PAL timer & I/O module */
497 if(! strcmp(board
, BOARD_JMR3904_PAL
))
500 sim_hw_parse (sd
, "/pal@0xffff0000");
501 sim_hw_parse (sd
, "/pal@0xffff0000/reg 0xffff0000 64");
503 /* wire up interrupt ports to irc */
504 sim_hw_parse (sd
, "/pal@0x31000000 > countdown tmr0 /tx3904irc");
505 sim_hw_parse (sd
, "/pal@0x31000000 > timer tmr1 /tx3904irc");
506 sim_hw_parse (sd
, "/pal@0x31000000 > int int0 /tx3904irc");
509 if(! strcmp(board
, BOARD_JMR3904_DEBUG
))
511 /* -- DEBUG: glue interrupt generators --- */
512 sim_hw_parse (sd
, "/glue@0xffff0000/reg 0xffff0000 0x50");
513 sim_hw_parse (sd
, "/glue@0xffff0000 > int0 int0 /tx3904irc");
514 sim_hw_parse (sd
, "/glue@0xffff0000 > int1 int1 /tx3904irc");
515 sim_hw_parse (sd
, "/glue@0xffff0000 > int2 int2 /tx3904irc");
516 sim_hw_parse (sd
, "/glue@0xffff0000 > int3 int3 /tx3904irc");
517 sim_hw_parse (sd
, "/glue@0xffff0000 > int4 int4 /tx3904irc");
518 sim_hw_parse (sd
, "/glue@0xffff0000 > int5 int5 /tx3904irc");
519 sim_hw_parse (sd
, "/glue@0xffff0000 > int6 int6 /tx3904irc");
520 sim_hw_parse (sd
, "/glue@0xffff0000 > int7 int7 /tx3904irc");
521 sim_hw_parse (sd
, "/glue@0xffff0000 > int8 dmac0 /tx3904irc");
522 sim_hw_parse (sd
, "/glue@0xffff0000 > int9 dmac1 /tx3904irc");
523 sim_hw_parse (sd
, "/glue@0xffff0000 > int10 dmac2 /tx3904irc");
524 sim_hw_parse (sd
, "/glue@0xffff0000 > int11 dmac3 /tx3904irc");
525 sim_hw_parse (sd
, "/glue@0xffff0000 > int12 sio0 /tx3904irc");
526 sim_hw_parse (sd
, "/glue@0xffff0000 > int13 sio1 /tx3904irc");
527 sim_hw_parse (sd
, "/glue@0xffff0000 > int14 tmr0 /tx3904irc");
528 sim_hw_parse (sd
, "/glue@0xffff0000 > int15 tmr1 /tx3904irc");
529 sim_hw_parse (sd
, "/glue@0xffff0000 > int16 tmr2 /tx3904irc");
530 sim_hw_parse (sd
, "/glue@0xffff0000 > int17 nmi /tx3904cpu");
538 /* check for/establish the a reference program image */
539 if (sim_analyze_program (sd
,
540 (STATE_PROG_ARGV (sd
) != NULL
541 ? *STATE_PROG_ARGV (sd
)
545 sim_module_uninstall (sd
);
549 /* Configure/verify the target byte order and other runtime
550 configuration options */
551 if (sim_config (sd
) != SIM_RC_OK
)
553 sim_module_uninstall (sd
);
557 if (sim_post_argv_init (sd
) != SIM_RC_OK
)
559 /* Uninstall the modules to avoid memory leaks,
560 file descriptor leaks, etc. */
561 sim_module_uninstall (sd
);
565 /* verify assumptions the simulator made about the host type system.
566 This macro does not return if there is a problem */
567 SIM_ASSERT (sizeof(int) == (4 * sizeof(char)));
568 SIM_ASSERT (sizeof(word64
) == (8 * sizeof(char)));
570 /* This is NASTY, in that we are assuming the size of specific
574 for (rn
= 0; (rn
< (LAST_EMBED_REGNUM
+ 1)); rn
++)
577 cpu
->register_widths
[rn
] = WITH_TARGET_WORD_BITSIZE
;
578 else if ((rn
>= FGRIDX
) && (rn
< (FGRIDX
+ NR_FGR
)))
579 cpu
->register_widths
[rn
] = WITH_TARGET_FLOATING_POINT_BITSIZE
;
580 else if ((rn
>= 33) && (rn
<= 37))
581 cpu
->register_widths
[rn
] = WITH_TARGET_WORD_BITSIZE
;
582 else if ((rn
== SRIDX
)
585 || ((rn
>= 72) && (rn
<= 89)))
586 cpu
->register_widths
[rn
] = 32;
588 cpu
->register_widths
[rn
] = 0;
595 if (STATE
& simTRACE
)
600 sim_io_eprintf (sd, "idt@%x pmon@%x lsipmon@%x\n",
603 lsipmon_monitor_base);
606 /* Write the monitor trap address handlers into the monitor (eeprom)
607 address space. This can only be done once the target endianness
608 has been determined. */
609 if (idt_monitor_base
!= 0)
612 unsigned idt_monitor_size
= 1 << 11;
614 /* the default monitor region */
615 sim_do_commandf (sd
, "memory region 0x%x,0x%x",
616 idt_monitor_base
, idt_monitor_size
);
618 /* Entry into the IDT monitor is via fixed address vectors, and
619 not using machine instructions. To avoid clashing with use of
620 the MIPS TRAP system, we place our own (simulator specific)
621 "undefined" instructions into the relevant vector slots. */
622 for (loop
= 0; (loop
< idt_monitor_size
); loop
+= 4)
624 address_word vaddr
= (idt_monitor_base
+ loop
);
625 unsigned32 insn
= (RSVD_INSTRUCTION
|
626 (((loop
>> 2) & RSVD_INSTRUCTION_ARG_MASK
)
627 << RSVD_INSTRUCTION_ARG_SHIFT
));
629 sim_write (sd
, vaddr
, (char *)&insn
, sizeof (insn
));
633 if ((pmon_monitor_base
!= 0) || (lsipmon_monitor_base
!= 0))
635 /* The PMON monitor uses the same address space, but rather than
636 branching into it the address of a routine is loaded. We can
637 cheat for the moment, and direct the PMON routine to IDT style
638 instructions within the monitor space. This relies on the IDT
639 monitor not using the locations from 0xBFC00500 onwards as its
642 for (loop
= 0; (loop
< 24); loop
++)
644 unsigned32 value
= ((0x500 - 8) / 8); /* default UNDEFINED reason code */
660 value
= ((0x500 - 16) / 8); /* not an IDT reason code */
662 case 8: /* cliexit */
665 case 11: /* flush_cache */
670 SIM_ASSERT (idt_monitor_base
!= 0);
671 value
= ((unsigned int) idt_monitor_base
+ (value
* 8));
674 if (pmon_monitor_base
!= 0)
676 address_word vaddr
= (pmon_monitor_base
+ (loop
* 4));
677 sim_write (sd
, vaddr
, (char *)&value
, sizeof (value
));
680 if (lsipmon_monitor_base
!= 0)
682 address_word vaddr
= (lsipmon_monitor_base
+ (loop
* 4));
683 sim_write (sd
, vaddr
, (char *)&value
, sizeof (value
));
687 /* Write an abort sequence into the TRAP (common) exception vector
688 addresses. This is to catch code executing a TRAP (et.al.)
689 instruction without installing a trap handler. */
690 if ((idt_monitor_base
!= 0) ||
691 (pmon_monitor_base
!= 0) ||
692 (lsipmon_monitor_base
!= 0))
694 unsigned32 halt
[2] = { 0x2404002f /* addiu r4, r0, 47 */,
695 HALT_INSTRUCTION
/* BREAK */ };
698 sim_write (sd
, 0x80000000, (char *) halt
, sizeof (halt
));
699 sim_write (sd
, 0x80000180, (char *) halt
, sizeof (halt
));
700 sim_write (sd
, 0x80000200, (char *) halt
, sizeof (halt
));
702 /* This is wrong. We're not supposed to write code to the
703 vector tables, but rather pointers to code. */
704 /* XXX: Write here unconditionally? */
705 sim_write (sd
, 0xBFC00200, (char *) halt
, sizeof (halt
));
706 sim_write (sd
, 0xBFC00380, (char *) halt
, sizeof (halt
));
707 sim_write (sd
, 0xBFC00400, (char *) halt
, sizeof (halt
));
722 tracefh
= fopen(tracefile
,"wb+");
725 sim_io_eprintf(sd
,"Failed to create file \"%s\", writing trace information to stderr.\n",tracefile
);
731 /* Return name of an insn, used by insn profiling. */
733 get_insn_name (sim_cpu
*cpu
, int i
)
735 return itable
[i
].name
;
739 sim_close (sd
, quitting
)
744 printf("DBG: sim_close: entered (quitting = %d)\n",quitting
);
748 /* "quitting" is non-zero if we cannot hang on errors */
750 /* shut down modules */
751 sim_module_uninstall (sd
);
753 /* Ensure that any resources allocated through the callback
754 mechanism are released: */
755 sim_io_shutdown (sd
);
758 if (tracefh
!= NULL
&& tracefh
!= stderr
)
763 /* FIXME - free SD */
770 sim_write (sd
,addr
,buffer
,size
)
773 unsigned char *buffer
;
777 sim_cpu
*cpu
= STATE_CPU (sd
, 0); /* FIXME */
779 /* Return the number of bytes written, or zero if error. */
781 sim_io_printf(sd
,"sim_write(0x%s,buffer,%d);\n",pr_addr(addr
),size
);
784 /* We use raw read and write routines, since we do not want to count
785 the GDB memory accesses in our statistics gathering. */
787 for (index
= 0; index
< size
; index
++)
789 address_word vaddr
= (address_word
)addr
+ index
;
792 if (!address_translation (SD
, CPU
, NULL_CIA
, vaddr
, isDATA
, isSTORE
, &paddr
, &cca
, isRAW
))
794 if (sim_core_write_buffer (SD
, CPU
, read_map
, buffer
+ index
, paddr
, 1) != 1)
802 sim_read (sd
,addr
,buffer
,size
)
805 unsigned char *buffer
;
809 sim_cpu
*cpu
= STATE_CPU (sd
, 0); /* FIXME */
811 /* Return the number of bytes read, or zero if error. */
813 sim_io_printf(sd
,"sim_read(0x%s,buffer,%d);\n",pr_addr(addr
),size
);
816 for (index
= 0; (index
< size
); index
++)
818 address_word vaddr
= (address_word
)addr
+ index
;
821 if (!address_translation (SD
, CPU
, NULL_CIA
, vaddr
, isDATA
, isLOAD
, &paddr
, &cca
, isRAW
))
823 if (sim_core_read_buffer (SD
, CPU
, read_map
, buffer
+ index
, paddr
, 1) != 1)
831 sim_store_register (sd
,rn
,memory
,length
)
834 unsigned char *memory
;
837 sim_cpu
*cpu
= STATE_CPU (sd
, 0); /* FIXME */
838 /* NOTE: gdb (the client) stores registers in target byte order
839 while the simulator uses host byte order */
841 sim_io_printf(sd
,"sim_store_register(%d,*memory=0x%s);\n",rn
,pr_addr(*((SIM_ADDR
*)memory
)));
844 /* Unfortunately this suffers from the same problem as the register
845 numbering one. We need to know what the width of each logical
846 register number is for the architecture being simulated. */
848 if (cpu
->register_widths
[rn
] == 0)
850 sim_io_eprintf(sd
,"Invalid register width for %d (register store ignored)\n",rn
);
856 if (rn
>= FGRIDX
&& rn
< FGRIDX
+ NR_FGR
)
858 cpu
->fpr_state
[rn
- FGRIDX
] = fmt_uninterpreted
;
859 if (cpu
->register_widths
[rn
] == 32)
863 cpu
->fgr
[rn
- FGRIDX
] =
864 (unsigned32
) T2H_8 (*(unsigned64
*)memory
);
869 cpu
->fgr
[rn
- FGRIDX
] = T2H_4 (*(unsigned32
*)memory
);
875 cpu
->fgr
[rn
- FGRIDX
] = T2H_8 (*(unsigned64
*)memory
);
880 if (cpu
->register_widths
[rn
] == 32)
885 (unsigned32
) T2H_8 (*(unsigned64
*)memory
);
890 cpu
->registers
[rn
] = T2H_4 (*(unsigned32
*)memory
);
896 cpu
->registers
[rn
] = T2H_8 (*(unsigned64
*)memory
);
904 sim_fetch_register (sd
,rn
,memory
,length
)
907 unsigned char *memory
;
910 sim_cpu
*cpu
= STATE_CPU (sd
, 0); /* FIXME */
911 /* NOTE: gdb (the client) stores registers in target byte order
912 while the simulator uses host byte order */
914 #if 0 /* FIXME: doesn't compile */
915 sim_io_printf(sd
,"sim_fetch_register(%d=0x%s,mem) : place simulator registers into memory\n",rn
,pr_addr(registers
[rn
]));
919 if (cpu
->register_widths
[rn
] == 0)
921 sim_io_eprintf (sd
, "Invalid register width for %d (register fetch ignored)\n",rn
);
927 /* Any floating point register */
928 if (rn
>= FGRIDX
&& rn
< FGRIDX
+ NR_FGR
)
930 if (cpu
->register_widths
[rn
] == 32)
934 *(unsigned64
*)memory
=
935 H2T_8 ((unsigned32
) (cpu
->fgr
[rn
- FGRIDX
]));
940 *(unsigned32
*)memory
= H2T_4 (cpu
->fgr
[rn
- FGRIDX
]);
946 *(unsigned64
*)memory
= H2T_8 (cpu
->fgr
[rn
- FGRIDX
]);
951 if (cpu
->register_widths
[rn
] == 32)
955 *(unsigned64
*)memory
=
956 H2T_8 ((unsigned32
) (cpu
->registers
[rn
]));
961 *(unsigned32
*)memory
= H2T_4 ((unsigned32
)(cpu
->registers
[rn
]));
967 *(unsigned64
*)memory
= H2T_8 ((unsigned64
)(cpu
->registers
[rn
]));
976 sim_create_inferior (sd
, abfd
, argv
,env
)
984 #if 0 /* FIXME: doesn't compile */
985 printf("DBG: sim_create_inferior entered: start_address = 0x%s\n",
994 /* override PC value set by ColdReset () */
996 for (cpu_nr
= 0; cpu_nr
< sim_engine_nr_cpus (sd
); cpu_nr
++)
998 sim_cpu
*cpu
= STATE_CPU (sd
, cpu_nr
);
999 CIA_SET (cpu
, (unsigned64
) bfd_get_start_address (abfd
));
1003 #if 0 /* def DEBUG */
1006 /* We should really place the argv slot values into the argument
1007 registers, and onto the stack as required. However, this
1008 assumes that we have a stack defined, which is not
1009 necessarily true at the moment. */
1011 sim_io_printf(sd
,"sim_create_inferior() : passed arguments ignored\n");
1012 for (cptr
= argv
; (cptr
&& *cptr
); cptr
++)
1013 printf("DBG: arg \"%s\"\n",*cptr
);
1021 sim_do_command (sd
,cmd
)
1025 if (sim_args_command (sd
, cmd
) != SIM_RC_OK
)
1026 sim_io_printf (sd
, "Error: \"%s\" is not a valid MIPS simulator command.\n",
1030 /*---------------------------------------------------------------------------*/
1031 /*-- Private simulator support interface ------------------------------------*/
1032 /*---------------------------------------------------------------------------*/
1034 /* Read a null terminated string from memory, return in a buffer */
1036 fetch_str (SIM_DESC sd
,
1042 while (sim_read (sd
, addr
+ nr
, &null
, 1) == 1 && null
!= 0)
1044 buf
= NZALLOC (char, nr
+ 1);
1045 sim_read (sd
, addr
, buf
, nr
);
1050 /* Implements the "sim firmware" command:
1051 sim firmware NAME[@ADDRESS] --- emulate ROM monitor named NAME.
1052 NAME can be idt, pmon, or lsipmon. If omitted, ADDRESS
1053 defaults to the normal address for that monitor.
1054 sim firmware none --- don't emulate any ROM monitor. Useful
1055 if you need a clean address space. */
1057 sim_firmware_command (SIM_DESC sd
, char *arg
)
1059 int address_present
= 0;
1062 /* Signal occurrence of this option. */
1063 firmware_option_p
= 1;
1065 /* Parse out the address, if present. */
1067 char *p
= strchr (arg
, '@');
1071 address_present
= 1;
1072 p
++; /* skip over @ */
1074 address
= strtoul (p
, &q
, 0);
1077 sim_io_printf (sd
, "Invalid address given to the"
1078 "`sim firmware NAME@ADDRESS' command: %s\n",
1084 address_present
= 0;
1087 if (! strncmp (arg
, "idt", 3))
1089 idt_monitor_base
= address_present
? address
: 0xBFC00000;
1090 pmon_monitor_base
= 0;
1091 lsipmon_monitor_base
= 0;
1093 else if (! strncmp (arg
, "pmon", 4))
1095 /* pmon uses indirect calls. Hook into implied idt. */
1096 pmon_monitor_base
= address_present
? address
: 0xBFC00500;
1097 idt_monitor_base
= pmon_monitor_base
- 0x500;
1098 lsipmon_monitor_base
= 0;
1100 else if (! strncmp (arg
, "lsipmon", 7))
1102 /* lsipmon uses indirect calls. Hook into implied idt. */
1103 pmon_monitor_base
= 0;
1104 lsipmon_monitor_base
= address_present
? address
: 0xBFC00200;
1105 idt_monitor_base
= lsipmon_monitor_base
- 0x200;
1107 else if (! strncmp (arg
, "none", 4))
1109 if (address_present
)
1112 "The `sim firmware none' command does "
1113 "not take an `ADDRESS' argument.\n");
1116 idt_monitor_base
= 0;
1117 pmon_monitor_base
= 0;
1118 lsipmon_monitor_base
= 0;
1122 sim_io_printf (sd
, "\
1123 Unrecognized name given to the `sim firmware NAME' command: %s\n\
1124 Recognized firmware names are: `idt', `pmon', `lsipmon', and `none'.\n",
1134 /* Simple monitor interface (currently setup for the IDT and PMON monitors) */
1136 sim_monitor (SIM_DESC sd
,
1139 unsigned int reason
)
1142 printf("DBG: sim_monitor: entered (reason = %d)\n",reason
);
1145 /* The IDT monitor actually allows two instructions per vector
1146 slot. However, the simulator currently causes a trap on each
1147 individual instruction. We cheat, and lose the bottom bit. */
1150 /* The following callback functions are available, however the
1151 monitor we are simulating does not make use of them: get_errno,
1152 isatty, lseek, rename, system, time and unlink */
1156 case 6: /* int open(char *path,int flags) */
1158 char *path
= fetch_str (sd
, A0
);
1159 V0
= sim_io_open (sd
, path
, (int)A1
);
1164 case 7: /* int read(int file,char *ptr,int len) */
1168 char *buf
= zalloc (nr
);
1169 V0
= sim_io_read (sd
, fd
, buf
, nr
);
1170 sim_write (sd
, A1
, buf
, nr
);
1175 case 8: /* int write(int file,char *ptr,int len) */
1179 char *buf
= zalloc (nr
);
1180 sim_read (sd
, A1
, buf
, nr
);
1181 V0
= sim_io_write (sd
, fd
, buf
, nr
);
1186 case 10: /* int close(int file) */
1188 V0
= sim_io_close (sd
, (int)A0
);
1192 case 2: /* Densan monitor: char inbyte(int waitflag) */
1194 if (A0
== 0) /* waitflag == NOWAIT */
1195 V0
= (unsigned_word
)-1;
1197 /* Drop through to case 11 */
1199 case 11: /* char inbyte(void) */
1202 /* ensure that all output has gone... */
1203 sim_io_flush_stdout (sd
);
1204 if (sim_io_read_stdin (sd
, &tmp
, sizeof(char)) != sizeof(char))
1206 sim_io_error(sd
,"Invalid return from character read");
1207 V0
= (unsigned_word
)-1;
1210 V0
= (unsigned_word
)tmp
;
1214 case 3: /* Densan monitor: void co(char chr) */
1215 case 12: /* void outbyte(char chr) : write a byte to "stdout" */
1217 char tmp
= (char)(A0
& 0xFF);
1218 sim_io_write_stdout (sd
, &tmp
, sizeof(char));
1222 case 17: /* void _exit() */
1224 sim_io_eprintf (sd
, "sim_monitor(17): _exit(int reason) to be coded\n");
1225 sim_engine_halt (SD
, CPU
, NULL
, NULL_CIA
, sim_exited
,
1226 (unsigned int)(A0
& 0xFFFFFFFF));
1230 case 28 : /* PMON flush_cache */
1233 case 55: /* void get_mem_info(unsigned int *ptr) */
1234 /* in: A0 = pointer to three word memory location */
1235 /* out: [A0 + 0] = size */
1236 /* [A0 + 4] = instruction cache size */
1237 /* [A0 + 8] = data cache size */
1239 unsigned_4 value
= MEM_SIZE
/* FIXME STATE_MEM_SIZE (sd) */;
1240 unsigned_4 zero
= 0;
1242 sim_write (sd
, A0
+ 0, (char *)&value
, 4);
1243 sim_write (sd
, A0
+ 4, (char *)&zero
, 4);
1244 sim_write (sd
, A0
+ 8, (char *)&zero
, 4);
1245 /* sim_io_eprintf (sd, "sim: get_mem_info() depreciated\n"); */
1249 case 158 : /* PMON printf */
1250 /* in: A0 = pointer to format string */
1251 /* A1 = optional argument 1 */
1252 /* A2 = optional argument 2 */
1253 /* A3 = optional argument 3 */
1255 /* The following is based on the PMON printf source */
1257 address_word s
= A0
;
1259 signed_word
*ap
= &A1
; /* 1st argument */
1260 /* This isn't the quickest way, since we call the host print
1261 routine for every character almost. But it does avoid
1262 having to allocate and manage a temporary string buffer. */
1263 /* TODO: Include check that we only use three arguments (A1,
1265 while (sim_read (sd
, s
++, &c
, 1) && c
!= '\0')
1270 enum {FMT_RJUST
, FMT_LJUST
, FMT_RJUST0
, FMT_CENTER
} fmt
= FMT_RJUST
;
1271 int width
= 0, trunc
= 0, haddot
= 0, longlong
= 0;
1272 while (sim_read (sd
, s
++, &c
, 1) && c
!= '\0')
1274 if (strchr ("dobxXulscefg%", c
))
1289 else if (c
>= '1' && c
<= '9')
1293 while (sim_read (sd
, s
++, &c
, 1) == 1 && isdigit (c
))
1296 n
= (unsigned int)strtol(tmp
,NULL
,10);
1309 sim_io_printf (sd
, "%%");
1314 address_word p
= *ap
++;
1316 while (sim_read (sd
, p
++, &ch
, 1) == 1 && ch
!= '\0')
1317 sim_io_printf(sd
, "%c", ch
);
1320 sim_io_printf(sd
,"(null)");
1323 sim_io_printf (sd
, "%c", (int)*ap
++);
1328 sim_read (sd
, s
++, &c
, 1);
1332 sim_read (sd
, s
++, &c
, 1);
1335 if (strchr ("dobxXu", c
))
1337 word64 lv
= (word64
) *ap
++;
1339 sim_io_printf(sd
,"<binary not supported>");
1342 sprintf (tmp
, "%%%s%c", longlong
? "ll" : "", c
);
1344 sim_io_printf(sd
, tmp
, lv
);
1346 sim_io_printf(sd
, tmp
, (int)lv
);
1349 else if (strchr ("eEfgG", c
))
1351 double dbl
= *(double*)(ap
++);
1352 sprintf (tmp
, "%%%d.%d%c", width
, trunc
, c
);
1353 sim_io_printf (sd
, tmp
, dbl
);
1359 sim_io_printf(sd
, "%c", c
);
1365 /* Unknown reason. */
1371 /* Store a word into memory. */
1374 store_word (SIM_DESC sd
,
1383 if ((vaddr
& 3) != 0)
1384 SignalExceptionAddressStore ();
1387 if (AddressTranslation (vaddr
, isDATA
, isSTORE
, &paddr
, &uncached
,
1390 const uword64 mask
= 7;
1394 paddr
= (paddr
& ~mask
) | ((paddr
& mask
) ^ (ReverseEndian
<< 2));
1395 byte
= (vaddr
& mask
) ^ (BigEndianCPU
<< 2);
1396 memval
= ((uword64
) val
) << (8 * byte
);
1397 StoreMemory (uncached
, AccessLength_WORD
, memval
, 0, paddr
, vaddr
,
1403 /* Load a word from memory. */
1406 load_word (SIM_DESC sd
,
1411 if ((vaddr
& 3) != 0)
1413 SIM_CORE_SIGNAL (SD
, cpu
, cia
, read_map
, AccessLength_WORD
+1, vaddr
, read_transfer
, sim_core_unaligned_signal
);
1420 if (AddressTranslation (vaddr
, isDATA
, isLOAD
, &paddr
, &uncached
,
1423 const uword64 mask
= 0x7;
1424 const unsigned int reverse
= ReverseEndian
? 1 : 0;
1425 const unsigned int bigend
= BigEndianCPU
? 1 : 0;
1429 paddr
= (paddr
& ~mask
) | ((paddr
& mask
) ^ (reverse
<< 2));
1430 LoadMemory (&memval
,NULL
,uncached
, AccessLength_WORD
, paddr
, vaddr
,
1432 byte
= (vaddr
& mask
) ^ (bigend
<< 2);
1433 return EXTEND32 (memval
>> (8 * byte
));
1440 /* Simulate the mips16 entry and exit pseudo-instructions. These
1441 would normally be handled by the reserved instruction exception
1442 code, but for ease of simulation we just handle them directly. */
1445 mips16_entry (SIM_DESC sd
,
1450 int aregs
, sregs
, rreg
;
1453 printf("DBG: mips16_entry: entered (insn = 0x%08X)\n",insn
);
1456 aregs
= (insn
& 0x700) >> 8;
1457 sregs
= (insn
& 0x0c0) >> 6;
1458 rreg
= (insn
& 0x020) >> 5;
1460 /* This should be checked by the caller. */
1469 /* This is the entry pseudo-instruction. */
1471 for (i
= 0; i
< aregs
; i
++)
1472 store_word (SD
, CPU
, cia
, (uword64
) (SP
+ 4 * i
), GPR
[i
+ 4]);
1480 store_word (SD
, CPU
, cia
, (uword64
) tsp
, RA
);
1483 for (i
= 0; i
< sregs
; i
++)
1486 store_word (SD
, CPU
, cia
, (uword64
) tsp
, GPR
[16 + i
]);
1494 /* This is the exit pseudo-instruction. */
1501 RA
= load_word (SD
, CPU
, cia
, (uword64
) tsp
);
1504 for (i
= 0; i
< sregs
; i
++)
1507 GPR
[i
+ 16] = load_word (SD
, CPU
, cia
, (uword64
) tsp
);
1512 if (CURRENT_FLOATING_POINT
== HARD_FLOATING_POINT
)
1516 FGR
[0] = WORD64LO (GPR
[4]);
1517 FPR_STATE
[0] = fmt_uninterpreted
;
1519 else if (aregs
== 6)
1521 FGR
[0] = WORD64LO (GPR
[5]);
1522 FGR
[1] = WORD64LO (GPR
[4]);
1523 FPR_STATE
[0] = fmt_uninterpreted
;
1524 FPR_STATE
[1] = fmt_uninterpreted
;
1533 /*-- trace support ----------------------------------------------------------*/
1535 /* The TRACE support is provided (if required) in the memory accessing
1536 routines. Since we are also providing the architecture specific
1537 features, the architecture simulation code can also deal with
1538 notifying the TRACE world of cache flushes, etc. Similarly we do
1539 not need to provide profiling support in the simulator engine,
1540 since we can sample in the instruction fetch control loop. By
1541 defining the TRACE manifest, we add tracing as a run-time
1545 /* Tracing by default produces "din" format (as required by
1546 dineroIII). Each line of such a trace file *MUST* have a din label
1547 and address field. The rest of the line is ignored, so comments can
1548 be included if desired. The first field is the label which must be
1549 one of the following values:
1554 3 escape record (treated as unknown access type)
1555 4 escape record (causes cache flush)
1557 The address field is a 32bit (lower-case) hexadecimal address
1558 value. The address should *NOT* be preceded by "0x".
1560 The size of the memory transfer is not important when dealing with
1561 cache lines (as long as no more than a cache line can be
1562 transferred in a single operation :-), however more information
1563 could be given following the dineroIII requirement to allow more
1564 complete memory and cache simulators to provide better
1565 results. i.e. the University of Pisa has a cache simulator that can
1566 also take bus size and speed as (variable) inputs to calculate
1567 complete system performance (a much more useful ability when trying
1568 to construct an end product, rather than a processor). They
1569 currently have an ARM version of their tool called ChARM. */
1573 dotrace (SIM_DESC sd
,
1581 if (STATE
& simTRACE
) {
1583 fprintf(tracefh
,"%d %s ; width %d ; ",
1587 va_start(ap
,comment
);
1588 vfprintf(tracefh
,comment
,ap
);
1590 fprintf(tracefh
,"\n");
1592 /* NOTE: Since the "din" format will only accept 32bit addresses, and
1593 we may be generating 64bit ones, we should put the hi-32bits of the
1594 address into the comment field. */
1596 /* TODO: Provide a buffer for the trace lines. We can then avoid
1597 performing writes until the buffer is filled, or the file is
1600 /* NOTE: We could consider adding a comment field to the "din" file
1601 produced using type 3 markers (unknown access). This would then
1602 allow information about the program that the "din" is for, and
1603 the MIPs world that was being simulated, to be placed into the
1610 /*---------------------------------------------------------------------------*/
1611 /*-- simulator engine -------------------------------------------------------*/
1612 /*---------------------------------------------------------------------------*/
1615 ColdReset (SIM_DESC sd
)
1618 for (cpu_nr
= 0; cpu_nr
< sim_engine_nr_cpus (sd
); cpu_nr
++)
1620 sim_cpu
*cpu
= STATE_CPU (sd
, cpu_nr
);
1621 /* RESET: Fixed PC address: */
1622 PC
= (unsigned_word
) UNSIGNED64 (0xFFFFFFFFBFC00000);
1623 /* The reset vector address is in the unmapped, uncached memory space. */
1625 SR
&= ~(status_SR
| status_TS
| status_RP
);
1626 SR
|= (status_ERL
| status_BEV
);
1628 /* Cheat and allow access to the complete register set immediately */
1629 if (CURRENT_FLOATING_POINT
== HARD_FLOATING_POINT
1630 && WITH_TARGET_WORD_BITSIZE
== 64)
1631 SR
|= status_FR
; /* 64bit registers */
1633 /* Ensure that any instructions with pending register updates are
1635 PENDING_INVALIDATE();
1637 /* Initialise the FPU registers to the unknown state */
1638 if (CURRENT_FLOATING_POINT
== HARD_FLOATING_POINT
)
1641 for (rn
= 0; (rn
< 32); rn
++)
1642 FPR_STATE
[rn
] = fmt_uninterpreted
;
1651 /* Description from page A-26 of the "MIPS IV Instruction Set" manual (revision 3.1) */
1652 /* Signal an exception condition. This will result in an exception
1653 that aborts the instruction. The instruction operation pseudocode
1654 will never see a return from this function call. */
1657 signal_exception (SIM_DESC sd
,
1665 sim_io_printf(sd
,"DBG: SignalException(%d) PC = 0x%s\n",exception
,pr_addr(cia
));
1668 /* Ensure that any active atomic read/modify/write operation will fail: */
1671 /* Save registers before interrupt dispatching */
1672 #ifdef SIM_CPU_EXCEPTION_TRIGGER
1673 SIM_CPU_EXCEPTION_TRIGGER(sd
, cpu
, cia
);
1676 switch (exception
) {
1678 case DebugBreakPoint
:
1679 if (! (Debug
& Debug_DM
))
1685 Debug
|= Debug_DBD
; /* signaled from within in delay slot */
1686 DEPC
= cia
- 4; /* reference the branch instruction */
1690 Debug
&= ~Debug_DBD
; /* not signaled from within a delay slot */
1694 Debug
|= Debug_DM
; /* in debugging mode */
1695 Debug
|= Debug_DBp
; /* raising a DBp exception */
1697 sim_engine_restart (SD
, CPU
, NULL
, NULL_CIA
);
1701 case ReservedInstruction
:
1704 unsigned int instruction
;
1705 va_start(ap
,exception
);
1706 instruction
= va_arg(ap
,unsigned int);
1708 /* Provide simple monitor support using ReservedInstruction
1709 exceptions. The following code simulates the fixed vector
1710 entry points into the IDT monitor by causing a simulator
1711 trap, performing the monitor operation, and returning to
1712 the address held in the $ra register (standard PCS return
1713 address). This means we only need to pre-load the vector
1714 space with suitable instruction values. For systems were
1715 actual trap instructions are used, we would not need to
1716 perform this magic. */
1717 if ((instruction
& RSVD_INSTRUCTION_MASK
) == RSVD_INSTRUCTION
)
1719 int reason
= (instruction
>> RSVD_INSTRUCTION_ARG_SHIFT
) & RSVD_INSTRUCTION_ARG_MASK
;
1720 if (!sim_monitor (SD
, CPU
, cia
, reason
))
1721 sim_io_error (sd
, "sim_monitor: unhandled reason = %d, pc = 0x%s\n", reason
, pr_addr (cia
));
1723 /* NOTE: This assumes that a branch-and-link style
1724 instruction was used to enter the vector (which is the
1725 case with the current IDT monitor). */
1726 sim_engine_restart (SD
, CPU
, NULL
, RA
);
1728 /* Look for the mips16 entry and exit instructions, and
1729 simulate a handler for them. */
1730 else if ((cia
& 1) != 0
1731 && (instruction
& 0xf81f) == 0xe809
1732 && (instruction
& 0x0c0) != 0x0c0)
1734 mips16_entry (SD
, CPU
, cia
, instruction
);
1735 sim_engine_restart (sd
, NULL
, NULL
, NULL_CIA
);
1737 /* else fall through to normal exception processing */
1738 sim_io_eprintf(sd
,"ReservedInstruction at PC = 0x%s\n", pr_addr (cia
));
1742 /* Store exception code into current exception id variable (used
1745 /* TODO: If not simulating exceptions then stop the simulator
1746 execution. At the moment we always stop the simulation. */
1748 #ifdef SUBTARGET_R3900
1749 /* update interrupt-related registers */
1751 /* insert exception code in bits 6:2 */
1752 CAUSE
= LSMASKED32(CAUSE
, 31, 7) | LSINSERTED32(exception
, 6, 2);
1753 /* shift IE/KU history bits left */
1754 SR
= LSMASKED32(SR
, 31, 4) | LSINSERTED32(LSEXTRACTED32(SR
, 3, 0), 5, 2);
1756 if (STATE
& simDELAYSLOT
)
1758 STATE
&= ~simDELAYSLOT
;
1760 EPC
= (cia
- 4); /* reference the branch instruction */
1765 if (SR
& status_BEV
)
1766 PC
= (signed)0xBFC00000 + 0x180;
1768 PC
= (signed)0x80000000 + 0x080;
1770 /* See figure 5-17 for an outline of the code below */
1771 if (! (SR
& status_EXL
))
1773 CAUSE
= (exception
<< 2);
1774 if (STATE
& simDELAYSLOT
)
1776 STATE
&= ~simDELAYSLOT
;
1778 EPC
= (cia
- 4); /* reference the branch instruction */
1782 /* FIXME: TLB et.al. */
1783 /* vector = 0x180; */
1787 CAUSE
= (exception
<< 2);
1788 /* vector = 0x180; */
1791 /* Store exception code into current exception id variable (used
1794 if (SR
& status_BEV
)
1795 PC
= (signed)0xBFC00200 + 0x180;
1797 PC
= (signed)0x80000000 + 0x180;
1800 switch ((CAUSE
>> 2) & 0x1F)
1803 /* Interrupts arrive during event processing, no need to
1809 #ifdef SUBTARGET_3900
1810 /* Exception vector: BEV=0 BFC00000 / BEF=1 BFC00000 */
1811 PC
= (signed)0xBFC00000;
1812 #endif /* SUBTARGET_3900 */
1815 case TLBModification
:
1820 case InstructionFetch
:
1822 /* The following is so that the simulator will continue from the
1823 exception handler address. */
1824 sim_engine_halt (SD
, CPU
, NULL
, PC
,
1825 sim_stopped
, SIM_SIGBUS
);
1827 case ReservedInstruction
:
1828 case CoProcessorUnusable
:
1830 sim_engine_halt (SD
, CPU
, NULL
, PC
,
1831 sim_stopped
, SIM_SIGILL
);
1833 case IntegerOverflow
:
1835 sim_engine_halt (SD
, CPU
, NULL
, PC
,
1836 sim_stopped
, SIM_SIGFPE
);
1839 sim_engine_halt (SD
, CPU
, NULL
, PC
, sim_stopped
, SIM_SIGTRAP
);
1844 sim_engine_restart (SD
, CPU
, NULL
, PC
);
1849 sim_engine_halt (SD
, CPU
, NULL
, PC
,
1850 sim_stopped
, SIM_SIGTRAP
);
1852 default : /* Unknown internal exception */
1854 sim_engine_halt (SD
, CPU
, NULL
, PC
,
1855 sim_stopped
, SIM_SIGABRT
);
1859 case SimulatorFault
:
1863 va_start(ap
,exception
);
1864 msg
= va_arg(ap
,char *);
1866 sim_engine_abort (SD
, CPU
, NULL_CIA
,
1867 "FATAL: Simulator error \"%s\"\n",msg
);
1876 #if defined(WARN_RESULT)
1877 /* Description from page A-26 of the "MIPS IV Instruction Set" manual (revision 3.1) */
1878 /* This function indicates that the result of the operation is
1879 undefined. However, this should not affect the instruction
1880 stream. All that is meant to happen is that the destination
1881 register is set to an undefined result. To keep the simulator
1882 simple, we just don't bother updating the destination register, so
1883 the overall result will be undefined. If desired we can stop the
1884 simulator by raising a pseudo-exception. */
1885 #define UndefinedResult() undefined_result (sd,cia)
1887 undefined_result(sd
,cia
)
1891 sim_io_eprintf(sd
,"UndefinedResult: PC = 0x%s\n",pr_addr(cia
));
1892 #if 0 /* Disabled for the moment, since it actually happens a lot at the moment. */
1897 #endif /* WARN_RESULT */
1900 /*-- co-processor support routines ------------------------------------------*/
1903 CoProcPresent(unsigned int coproc_number
)
1905 /* Return TRUE if simulator provides a model for the given co-processor number */
1910 cop_lw (SIM_DESC sd
,
1915 unsigned int memword
)
1920 if (CURRENT_FLOATING_POINT
== HARD_FLOATING_POINT
)
1923 printf("DBG: COP_LW: memword = 0x%08X (uword64)memword = 0x%s\n",memword
,pr_addr(memword
));
1925 StoreFPR(coproc_reg
,fmt_word
,(uword64
)memword
);
1926 FPR_STATE
[coproc_reg
] = fmt_uninterpreted
;
1931 #if 0 /* this should be controlled by a configuration option */
1932 sim_io_printf(sd
,"COP_LW(%d,%d,0x%08X) at PC = 0x%s : TODO (architecture specific)\n",coproc_num
,coproc_reg
,memword
,pr_addr(cia
));
1941 cop_ld (SIM_DESC sd
,
1950 printf("DBG: COP_LD: coproc_num = %d, coproc_reg = %d, value = 0x%s : PC = 0x%s\n", coproc_num
, coproc_reg
, pr_uword64(memword
), pr_addr(cia
) );
1953 switch (coproc_num
) {
1955 if (CURRENT_FLOATING_POINT
== HARD_FLOATING_POINT
)
1957 StoreFPR(coproc_reg
,fmt_uninterpreted
,memword
);
1962 #if 0 /* this message should be controlled by a configuration option */
1963 sim_io_printf(sd
,"COP_LD(%d,%d,0x%s) at PC = 0x%s : TODO (architecture specific)\n",coproc_num
,coproc_reg
,pr_addr(memword
),pr_addr(cia
));
1975 cop_sw (SIM_DESC sd
,
1981 unsigned int value
= 0;
1986 if (CURRENT_FLOATING_POINT
== HARD_FLOATING_POINT
)
1989 hold
= FPR_STATE
[coproc_reg
];
1990 FPR_STATE
[coproc_reg
] = fmt_word
;
1991 value
= (unsigned int)ValueFPR(coproc_reg
,fmt_uninterpreted
);
1992 FPR_STATE
[coproc_reg
] = hold
;
1997 #if 0 /* should be controlled by configuration option */
1998 sim_io_printf(sd
,"COP_SW(%d,%d) at PC = 0x%s : TODO (architecture specific)\n",coproc_num
,coproc_reg
,pr_addr(cia
));
2007 cop_sd (SIM_DESC sd
,
2017 if (CURRENT_FLOATING_POINT
== HARD_FLOATING_POINT
)
2019 value
= ValueFPR(coproc_reg
,fmt_uninterpreted
);
2024 #if 0 /* should be controlled by configuration option */
2025 sim_io_printf(sd
,"COP_SD(%d,%d) at PC = 0x%s : TODO (architecture specific)\n",coproc_num
,coproc_reg
,pr_addr(cia
));
2037 decode_coproc (SIM_DESC sd
,
2040 unsigned int instruction
)
2042 int coprocnum
= ((instruction
>> 26) & 3);
2046 case 0: /* standard CPU control and cache registers */
2048 int code
= ((instruction
>> 21) & 0x1F);
2049 int rt
= ((instruction
>> 16) & 0x1F);
2050 int rd
= ((instruction
>> 11) & 0x1F);
2051 int tail
= instruction
& 0x3ff;
2052 /* R4000 Users Manual (second edition) lists the following CP0
2054 CODE><-RT><RD-><--TAIL--->
2055 DMFC0 Doubleword Move From CP0 (VR4100 = 01000000001tttttddddd00000000000)
2056 DMTC0 Doubleword Move To CP0 (VR4100 = 01000000101tttttddddd00000000000)
2057 MFC0 word Move From CP0 (VR4100 = 01000000000tttttddddd00000000000)
2058 MTC0 word Move To CP0 (VR4100 = 01000000100tttttddddd00000000000)
2059 TLBR Read Indexed TLB Entry (VR4100 = 01000010000000000000000000000001)
2060 TLBWI Write Indexed TLB Entry (VR4100 = 01000010000000000000000000000010)
2061 TLBWR Write Random TLB Entry (VR4100 = 01000010000000000000000000000110)
2062 TLBP Probe TLB for Matching Entry (VR4100 = 01000010000000000000000000001000)
2063 CACHE Cache operation (VR4100 = 101111bbbbbpppppiiiiiiiiiiiiiiii)
2064 ERET Exception return (VR4100 = 01000010000000000000000000011000)
2066 if (((code
== 0x00) || (code
== 0x04) /* MFC0 / MTC0 */
2067 || (code
== 0x01) || (code
== 0x05)) /* DMFC0 / DMTC0 */
2070 /* Clear double/single coprocessor move bit. */
2073 /* M[TF]C0 (32 bits) | DM[TF]C0 (64 bits) */
2075 switch (rd
) /* NOTEs: Standard CP0 registers */
2077 /* 0 = Index R4000 VR4100 VR4300 */
2078 /* 1 = Random R4000 VR4100 VR4300 */
2079 /* 2 = EntryLo0 R4000 VR4100 VR4300 */
2080 /* 3 = EntryLo1 R4000 VR4100 VR4300 */
2081 /* 4 = Context R4000 VR4100 VR4300 */
2082 /* 5 = PageMask R4000 VR4100 VR4300 */
2083 /* 6 = Wired R4000 VR4100 VR4300 */
2084 /* 8 = BadVAddr R4000 VR4100 VR4300 */
2085 /* 9 = Count R4000 VR4100 VR4300 */
2086 /* 10 = EntryHi R4000 VR4100 VR4300 */
2087 /* 11 = Compare R4000 VR4100 VR4300 */
2088 /* 12 = SR R4000 VR4100 VR4300 */
2089 #ifdef SUBTARGET_R3900
2091 /* 3 = Config R3900 */
2093 /* 7 = Cache R3900 */
2095 /* 15 = PRID R3900 */
2101 /* 8 = BadVAddr R4000 VR4100 VR4300 */
2103 GPR
[rt
] = COP0_BADVADDR
;
2105 COP0_BADVADDR
= GPR
[rt
];
2108 #endif /* SUBTARGET_R3900 */
2115 /* 13 = Cause R4000 VR4100 VR4300 */
2122 /* 14 = EPC R4000 VR4100 VR4300 */
2125 GPR
[rt
] = (signed_word
) (signed_address
) EPC
;
2129 /* 15 = PRId R4000 VR4100 VR4300 */
2130 #ifdef SUBTARGET_R3900
2139 /* 16 = Config R4000 VR4100 VR4300 */
2142 GPR
[rt
] = C0_CONFIG
;
2144 C0_CONFIG
= GPR
[rt
];
2147 #ifdef SUBTARGET_R3900
2156 /* 17 = LLAddr R4000 VR4100 VR4300 */
2158 /* 18 = WatchLo R4000 VR4100 VR4300 */
2159 /* 19 = WatchHi R4000 VR4100 VR4300 */
2160 /* 20 = XContext R4000 VR4100 VR4300 */
2161 /* 26 = PErr or ECC R4000 VR4100 VR4300 */
2162 /* 27 = CacheErr R4000 VR4100 */
2163 /* 28 = TagLo R4000 VR4100 VR4300 */
2164 /* 29 = TagHi R4000 VR4100 VR4300 */
2165 /* 30 = ErrorEPC R4000 VR4100 VR4300 */
2166 if (STATE_VERBOSE_P(SD
))
2168 "Warning: PC 0x%lx:interp.c decode_coproc DEADC0DE\n",
2169 (unsigned long)cia
);
2170 GPR
[rt
] = 0xDEADC0DE; /* CPR[0,rd] */
2171 /* CPR[0,rd] = GPR[rt]; */
2174 GPR
[rt
] = (signed_word
) (signed32
) COP0_GPR
[rd
];
2176 COP0_GPR
[rd
] = GPR
[rt
];
2179 sim_io_printf(sd
,"Warning: MFC0 %d,%d ignored, PC=%08x (architecture specific)\n",rt
,rd
, (unsigned)cia
);
2181 sim_io_printf(sd
,"Warning: MTC0 %d,%d ignored, PC=%08x (architecture specific)\n",rt
,rd
, (unsigned)cia
);
2185 else if (code
== 0x10 && (tail
& 0x3f) == 0x18)
2188 if (SR
& status_ERL
)
2190 /* Oops, not yet available */
2191 sim_io_printf(sd
,"Warning: ERET when SR[ERL] set not handled yet");
2201 else if (code
== 0x10 && (tail
& 0x3f) == 0x10)
2204 #ifdef SUBTARGET_R3900
2205 /* TX39: Copy IEp/KUp -> IEc/KUc, and IEo/KUo -> IEp/KUp */
2207 /* shift IE/KU history bits right */
2208 SR
= LSMASKED32(SR
, 31, 4) | LSINSERTED32(LSEXTRACTED32(SR
, 5, 2), 3, 0);
2210 /* TODO: CACHE register */
2211 #endif /* SUBTARGET_R3900 */
2213 else if (code
== 0x10 && (tail
& 0x3f) == 0x1F)
2221 sim_io_eprintf(sd
,"Unrecognised COP0 instruction 0x%08X at PC = 0x%s : No handler present\n",instruction
,pr_addr(cia
));
2222 /* TODO: When executing an ERET or RFE instruction we should
2223 clear LLBIT, to ensure that any out-standing atomic
2224 read/modify/write sequence fails. */
2228 case 2: /* co-processor 2 */
2235 sim_io_eprintf(sd
, "COP2 instruction 0x%08X at PC = 0x%s : No handler present\n",
2236 instruction
,pr_addr(cia
));
2241 case 1: /* should not occur (FPU co-processor) */
2242 case 3: /* should not occur (FPU co-processor) */
2243 SignalException(ReservedInstruction
,instruction
);
2251 /* This code copied from gdb's utils.c. Would like to share this code,
2252 but don't know of a common place where both could get to it. */
2254 /* Temporary storage using circular buffer */
2260 static char buf
[NUMCELLS
][CELLSIZE
];
2262 if (++cell
>=NUMCELLS
) cell
=0;
2266 /* Print routines to handle variable size regs, etc */
2268 /* Eliminate warning from compiler on 32-bit systems */
2269 static int thirty_two
= 32;
2275 char *paddr_str
=get_cell();
2276 switch (sizeof(addr
))
2279 sprintf(paddr_str
,"%08lx%08lx",
2280 (unsigned long)(addr
>>thirty_two
),(unsigned long)(addr
&0xffffffff));
2283 sprintf(paddr_str
,"%08lx",(unsigned long)addr
);
2286 sprintf(paddr_str
,"%04x",(unsigned short)(addr
&0xffff));
2289 sprintf(paddr_str
,"%x",addr
);
2298 char *paddr_str
=get_cell();
2299 sprintf(paddr_str
,"%08lx%08lx",
2300 (unsigned long)(addr
>>thirty_two
),(unsigned long)(addr
&0xffffffff));
2306 mips_core_signal (SIM_DESC sd
,
2312 transfer_type transfer
,
2313 sim_core_signals sig
)
2315 const char *copy
= (transfer
== read_transfer
? "read" : "write");
2316 address_word ip
= CIA_ADDR (cia
);
2320 case sim_core_unmapped_signal
:
2321 sim_io_eprintf (sd
, "mips-core: %d byte %s to unmapped address 0x%lx at 0x%lx\n",
2323 (unsigned long) addr
, (unsigned long) ip
);
2324 COP0_BADVADDR
= addr
;
2325 SignalExceptionDataReference();
2328 case sim_core_unaligned_signal
:
2329 sim_io_eprintf (sd
, "mips-core: %d byte %s to unaligned address 0x%lx at 0x%lx\n",
2331 (unsigned long) addr
, (unsigned long) ip
);
2332 COP0_BADVADDR
= addr
;
2333 if(transfer
== read_transfer
)
2334 SignalExceptionAddressLoad();
2336 SignalExceptionAddressStore();
2340 sim_engine_abort (sd
, cpu
, cia
,
2341 "mips_core_signal - internal error - bad switch");
2347 mips_cpu_exception_trigger(SIM_DESC sd
, sim_cpu
* cpu
, address_word cia
)
2349 ASSERT(cpu
!= NULL
);
2351 if(cpu
->exc_suspended
> 0)
2352 sim_io_eprintf(sd
, "Warning, nested exception triggered (%d)\n", cpu
->exc_suspended
);
2355 memcpy(cpu
->exc_trigger_registers
, cpu
->registers
, sizeof(cpu
->exc_trigger_registers
));
2356 cpu
->exc_suspended
= 0;
2360 mips_cpu_exception_suspend(SIM_DESC sd
, sim_cpu
* cpu
, int exception
)
2362 ASSERT(cpu
!= NULL
);
2364 if(cpu
->exc_suspended
> 0)
2365 sim_io_eprintf(sd
, "Warning, nested exception signal (%d then %d)\n",
2366 cpu
->exc_suspended
, exception
);
2368 memcpy(cpu
->exc_suspend_registers
, cpu
->registers
, sizeof(cpu
->exc_suspend_registers
));
2369 memcpy(cpu
->registers
, cpu
->exc_trigger_registers
, sizeof(cpu
->registers
));
2370 cpu
->exc_suspended
= exception
;
2374 mips_cpu_exception_resume(SIM_DESC sd
, sim_cpu
* cpu
, int exception
)
2376 ASSERT(cpu
!= NULL
);
2378 if(exception
== 0 && cpu
->exc_suspended
> 0)
2380 /* warn not for breakpoints */
2381 if(cpu
->exc_suspended
!= sim_signal_to_host(sd
, SIM_SIGTRAP
))
2382 sim_io_eprintf(sd
, "Warning, resuming but ignoring pending exception signal (%d)\n",
2383 cpu
->exc_suspended
);
2385 else if(exception
!= 0 && cpu
->exc_suspended
> 0)
2387 if(exception
!= cpu
->exc_suspended
)
2388 sim_io_eprintf(sd
, "Warning, resuming with mismatched exception signal (%d vs %d)\n",
2389 cpu
->exc_suspended
, exception
);
2391 memcpy(cpu
->registers
, cpu
->exc_suspend_registers
, sizeof(cpu
->registers
));
2393 else if(exception
!= 0 && cpu
->exc_suspended
== 0)
2395 sim_io_eprintf(sd
, "Warning, ignoring spontanous exception signal (%d)\n", exception
);
2397 cpu
->exc_suspended
= 0;
2401 /*---------------------------------------------------------------------------*/
2402 /*> EOF interp.c <*/