923 lines
30 KiB
C
923 lines
30 KiB
C
|
/*
|
||
|
|
* qemu user main
|
||
|
|
*
|
||
|
|
* Copyright (c) 2003 Fabrice Bellard
|
||
|
|
* Copyright (c) 2006 Pierre d'Herbemont
|
||
|
|
*
|
||
|
|
* This program is free software; you can redistribute it and/or modify
|
||
|
|
* it under the terms of the GNU General Public License as published by
|
||
|
|
* the Free Software Foundation; either version 2 of the License, or
|
||
|
|
* (at your option) any later version.
|
||
|
|
*
|
||
|
|
* This program is distributed in the hope that it will be useful,
|
||
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
|
|
* GNU General Public License for more details.
|
||
|
|
*
|
||
|
|
* You should have received a copy of the GNU General Public License
|
||
|
|
* along with this program; if not, write to the Free Software
|
||
|
|
* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
||
|
|
*/
|
||
|
|
#include <stdlib.h>
|
||
|
|
#include <stdio.h>
|
||
|
|
#include <stdarg.h>
|
||
|
|
#include <string.h>
|
||
|
|
#include <errno.h>
|
||
|
|
#include <unistd.h>
|
||
|
|
|
||
|
|
#include <sys/syscall.h>
|
||
|
|
#include <sys/mman.h>
|
||
|
|
|
||
|
|
#include "qemu.h"
|
||
|
|
|
||
|
|
#define DEBUG_LOGFILE "/tmp/qemu.log"
|
||
|
|
|
||
|
|
#ifdef __APPLE__
|
||
|
|
#include <crt_externs.h>
|
||
|
|
# define environ (*_NSGetEnviron())
|
||
|
|
#endif
|
||
|
|
|
||
|
|
#include <mach/mach_init.h>
|
||
|
|
#include <mach/vm_map.h>
|
||
|
|
|
||
|
|
const char *interp_prefix = "";
|
||
|
|
|
||
|
|
asm(".zerofill __STD_PROG_ZONE, __STD_PROG_ZONE, __std_prog_zone, 0x0dfff000");
|
||
|
|
|
||
|
|
/* XXX: on x86 MAP_GROWSDOWN only works if ESP <= address + 32, so
|
||
|
|
we allocate a bigger stack. Need a better solution, for example
|
||
|
|
by remapping the process stack directly at the right place */
|
||
|
|
unsigned long stack_size = 512 * 1024;
|
||
|
|
|
||
|
|
void qerror(const char *fmt, ...)
|
||
|
|
{
|
||
|
|
va_list ap;
|
||
|
|
|
||
|
|
va_start(ap, fmt);
|
||
|
|
vfprintf(stderr, fmt, ap);
|
||
|
|
va_end(ap);
|
||
|
|
fprintf(stderr, "\n");
|
||
|
|
exit(1);
|
||
|
|
}
|
||
|
|
|
||
|
|
void gemu_log(const char *fmt, ...)
|
||
|
|
{
|
||
|
|
va_list ap;
|
||
|
|
|
||
|
|
va_start(ap, fmt);
|
||
|
|
vfprintf(stderr, fmt, ap);
|
||
|
|
va_end(ap);
|
||
|
|
}
|
||
|
|
|
||
|
|
void cpu_outb(CPUState *env, int addr, int val)
|
||
|
|
{
|
||
|
|
fprintf(stderr, "outb: port=0x%04x, data=%02x\n", addr, val);
|
||
|
|
}
|
||
|
|
|
||
|
|
void cpu_outw(CPUState *env, int addr, int val)
|
||
|
|
{
|
||
|
|
fprintf(stderr, "outw: port=0x%04x, data=%04x\n", addr, val);
|
||
|
|
}
|
||
|
|
|
||
|
|
void cpu_outl(CPUState *env, int addr, int val)
|
||
|
|
{
|
||
|
|
fprintf(stderr, "outl: port=0x%04x, data=%08x\n", addr, val);
|
||
|
|
}
|
||
|
|
|
||
|
|
int cpu_inb(CPUState *env, int addr)
|
||
|
|
{
|
||
|
|
fprintf(stderr, "inb: port=0x%04x\n", addr);
|
||
|
|
return 0;
|
||
|
|
}
|
||
|
|
|
||
|
|
int cpu_inw(CPUState *env, int addr)
|
||
|
|
{
|
||
|
|
fprintf(stderr, "inw: port=0x%04x\n", addr);
|
||
|
|
return 0;
|
||
|
|
}
|
||
|
|
|
||
|
|
int cpu_inl(CPUState *env, int addr)
|
||
|
|
{
|
||
|
|
fprintf(stderr, "inl: port=0x%04x\n", addr);
|
||
|
|
return 0;
|
||
|
|
}
|
||
|
|
|
||
|
|
int cpu_get_pic_interrupt(CPUState *env)
|
||
|
|
{
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
#ifdef TARGET_PPC
|
||
|
|
|
||
|
|
static inline uint64_t cpu_ppc_get_tb (CPUState *env)
|
||
|
|
{
|
||
|
|
/* TO FIX */
|
||
|
|
return 0;
|
||
|
|
}
|
||
|
|
|
||
|
|
uint32_t cpu_ppc_load_tbl (CPUState *env)
|
||
|
|
{
|
||
|
|
return cpu_ppc_get_tb(env) & 0xFFFFFFFF;
|
||
|
|
}
|
||
|
|
|
||
|
|
uint32_t cpu_ppc_load_tbu (CPUState *env)
|
||
|
|
{
|
||
|
|
return cpu_ppc_get_tb(env) >> 32;
|
||
|
|
}
|
||
|
|
|
||
|
|
static void cpu_ppc_store_tb (CPUState *env, uint64_t value)
|
||
|
|
{
|
||
|
|
/* TO FIX */
|
||
|
|
}
|
||
|
|
|
||
|
|
void cpu_ppc_store_tbu (CPUState *env, uint32_t value)
|
||
|
|
{
|
||
|
|
cpu_ppc_store_tb(env, ((uint64_t)value << 32) | cpu_ppc_load_tbl(env));
|
||
|
|
}
|
||
|
|
|
||
|
|
void cpu_ppc_store_tbl (CPUState *env, uint32_t value)
|
||
|
|
{
|
||
|
|
cpu_ppc_store_tb(env, ((uint64_t)cpu_ppc_load_tbl(env) << 32) | value);
|
||
|
|
}
|
||
|
|
|
||
|
|
uint32_t cpu_ppc_load_decr (CPUState *env)
|
||
|
|
{
|
||
|
|
/* TO FIX */
|
||
|
|
return -1;
|
||
|
|
}
|
||
|
|
|
||
|
|
void cpu_ppc_store_decr (CPUState *env, uint32_t value)
|
||
|
|
{
|
||
|
|
/* TO FIX */
|
||
|
|
}
|
||
|
|
|
||
|
|
void cpu_loop(CPUPPCState *env)
|
||
|
|
{
|
||
|
|
int trapnr;
|
||
|
|
uint32_t ret;
|
||
|
|
target_siginfo_t info;
|
||
|
|
|
||
|
|
for(;;) {
|
||
|
|
trapnr = cpu_ppc_exec(env);
|
||
|
|
if (trapnr != EXCP_SYSCALL_USER && trapnr != EXCP_BRANCH &&
|
||
|
|
trapnr != EXCP_TRACE) {
|
||
|
|
if (loglevel > 0) {
|
||
|
|
cpu_dump_state(env, logfile, fprintf, 0);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
switch(trapnr) {
|
||
|
|
case EXCP_NONE:
|
||
|
|
break;
|
||
|
|
case EXCP_SYSCALL_USER:
|
||
|
|
/* system call */
|
||
|
|
if(((int)env->gpr[0]) <= SYS_MAXSYSCALL && ((int)env->gpr[0])>0)
|
||
|
|
ret = do_unix_syscall(env, env->gpr[0]/*, env->gpr[3], env->gpr[4],
|
||
|
|
env->gpr[5], env->gpr[6], env->gpr[7],
|
||
|
|
env->gpr[8], env->gpr[9], env->gpr[10]*/);
|
||
|
|
else if(((int)env->gpr[0])<0)
|
||
|
|
ret = do_mach_syscall(env, env->gpr[0], env->gpr[3], env->gpr[4],
|
||
|
|
env->gpr[5], env->gpr[6], env->gpr[7],
|
||
|
|
env->gpr[8], env->gpr[9], env->gpr[10]);
|
||
|
|
else
|
||
|
|
ret = do_thread_syscall(env, env->gpr[0], env->gpr[3], env->gpr[4],
|
||
|
|
env->gpr[5], env->gpr[6], env->gpr[7],
|
||
|
|
env->gpr[8], env->gpr[9], env->gpr[10]);
|
||
|
|
|
||
|
|
/* Unix syscall error signaling */
|
||
|
|
if(((int)env->gpr[0]) <= SYS_MAXSYSCALL && ((int)env->gpr[0])>0)
|
||
|
|
{
|
||
|
|
if( (int)ret < 0 )
|
||
|
|
env->nip += 0;
|
||
|
|
else
|
||
|
|
env->nip += 4;
|
||
|
|
}
|
||
|
|
|
||
|
|
/* Return value */
|
||
|
|
env->gpr[3] = ret;
|
||
|
|
break;
|
||
|
|
case EXCP_RESET:
|
||
|
|
/* Should not happen ! */
|
||
|
|
fprintf(stderr, "RESET asked... Stop emulation\n");
|
||
|
|
if (loglevel)
|
||
|
|
fprintf(logfile, "RESET asked... Stop emulation\n");
|
||
|
|
abort();
|
||
|
|
case EXCP_MACHINE_CHECK:
|
||
|
|
fprintf(stderr, "Machine check exeption... Stop emulation\n");
|
||
|
|
if (loglevel)
|
||
|
|
fprintf(logfile, "RESET asked... Stop emulation\n");
|
||
|
|
info.si_signo = SIGBUS;
|
||
|
|
info.si_errno = 0;
|
||
|
|
info.si_code = BUS_OBJERR;
|
||
|
|
info.si_addr = (void*)(env->nip - 4);
|
||
|
|
queue_signal(info.si_signo, &info);
|
||
|
|
case EXCP_DSI:
|
||
|
|
#ifndef DAR
|
||
|
|
/* To deal with multiple qemu header version as host for the darwin-user code */
|
||
|
|
# define DAR SPR_DAR
|
||
|
|
#endif
|
||
|
|
fprintf(stderr, "Invalid data memory access: 0x%08x\n", env->spr[DAR]);
|
||
|
|
if (loglevel) {
|
||
|
|
fprintf(logfile, "Invalid data memory access: 0x%08x\n",
|
||
|
|
env->spr[DAR]);
|
||
|
|
}
|
||
|
|
/* Handle this via the gdb */
|
||
|
|
gdb_handlesig (env, SIGSEGV);
|
||
|
|
|
||
|
|
info.si_addr = (void*)env->nip;
|
||
|
|
queue_signal(info.si_signo, &info);
|
||
|
|
break;
|
||
|
|
case EXCP_ISI:
|
||
|
|
fprintf(stderr, "Invalid instruction fetch\n");
|
||
|
|
if (loglevel)
|
||
|
|
fprintf(logfile, "Invalid instruction fetch\n");
|
||
|
|
/* Handle this via the gdb */
|
||
|
|
gdb_handlesig (env, SIGSEGV);
|
||
|
|
|
||
|
|
info.si_addr = (void*)(env->nip - 4);
|
||
|
|
queue_signal(info.si_signo, &info);
|
||
|
|
break;
|
||
|
|
case EXCP_EXTERNAL:
|
||
|
|
/* Should not happen ! */
|
||
|
|
fprintf(stderr, "External interruption... Stop emulation\n");
|
||
|
|
if (loglevel)
|
||
|
|
fprintf(logfile, "External interruption... Stop emulation\n");
|
||
|
|
abort();
|
||
|
|
case EXCP_ALIGN:
|
||
|
|
fprintf(stderr, "Invalid unaligned memory access\n");
|
||
|
|
if (loglevel)
|
||
|
|
fprintf(logfile, "Invalid unaligned memory access\n");
|
||
|
|
info.si_signo = SIGBUS;
|
||
|
|
info.si_errno = 0;
|
||
|
|
info.si_code = BUS_ADRALN;
|
||
|
|
info.si_addr = (void*)(env->nip - 4);
|
||
|
|
queue_signal(info.si_signo, &info);
|
||
|
|
break;
|
||
|
|
case EXCP_PROGRAM:
|
||
|
|
switch (env->error_code & ~0xF) {
|
||
|
|
case EXCP_FP:
|
||
|
|
fprintf(stderr, "Program exception\n");
|
||
|
|
if (loglevel)
|
||
|
|
fprintf(logfile, "Program exception\n");
|
||
|
|
/* Set FX */
|
||
|
|
env->fpscr[7] |= 0x8;
|
||
|
|
/* Finally, update FEX */
|
||
|
|
if ((((env->fpscr[7] & 0x3) << 3) | (env->fpscr[6] >> 1)) &
|
||
|
|
((env->fpscr[1] << 1) | (env->fpscr[0] >> 3)))
|
||
|
|
env->fpscr[7] |= 0x4;
|
||
|
|
info.si_signo = SIGFPE;
|
||
|
|
info.si_errno = 0;
|
||
|
|
switch (env->error_code & 0xF) {
|
||
|
|
case EXCP_FP_OX:
|
||
|
|
info.si_code = FPE_FLTOVF;
|
||
|
|
break;
|
||
|
|
case EXCP_FP_UX:
|
||
|
|
info.si_code = FPE_FLTUND;
|
||
|
|
break;
|
||
|
|
case EXCP_FP_ZX:
|
||
|
|
case EXCP_FP_VXZDZ:
|
||
|
|
info.si_code = FPE_FLTDIV;
|
||
|
|
break;
|
||
|
|
case EXCP_FP_XX:
|
||
|
|
info.si_code = FPE_FLTRES;
|
||
|
|
break;
|
||
|
|
case EXCP_FP_VXSOFT:
|
||
|
|
info.si_code = FPE_FLTINV;
|
||
|
|
break;
|
||
|
|
case EXCP_FP_VXNAN:
|
||
|
|
case EXCP_FP_VXISI:
|
||
|
|
case EXCP_FP_VXIDI:
|
||
|
|
case EXCP_FP_VXIMZ:
|
||
|
|
case EXCP_FP_VXVC:
|
||
|
|
case EXCP_FP_VXSQRT:
|
||
|
|
case EXCP_FP_VXCVI:
|
||
|
|
info.si_code = FPE_FLTSUB;
|
||
|
|
break;
|
||
|
|
default:
|
||
|
|
fprintf(stderr, "Unknown floating point exception "
|
||
|
|
"(%02x)\n", env->error_code);
|
||
|
|
if (loglevel) {
|
||
|
|
fprintf(logfile, "Unknown floating point exception "
|
||
|
|
"(%02x)\n", env->error_code & 0xF);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
case EXCP_INVAL:
|
||
|
|
fprintf(stderr, "Invalid instruction\n");
|
||
|
|
if (loglevel)
|
||
|
|
fprintf(logfile, "Invalid instruction\n");
|
||
|
|
info.si_signo = SIGILL;
|
||
|
|
info.si_errno = 0;
|
||
|
|
switch (env->error_code & 0xF) {
|
||
|
|
case EXCP_INVAL_INVAL:
|
||
|
|
info.si_code = ILL_ILLOPC;
|
||
|
|
break;
|
||
|
|
case EXCP_INVAL_LSWX:
|
||
|
|
info.si_code = ILL_ILLOPN;
|
||
|
|
break;
|
||
|
|
case EXCP_INVAL_SPR:
|
||
|
|
info.si_code = ILL_PRVREG;
|
||
|
|
break;
|
||
|
|
case EXCP_INVAL_FP:
|
||
|
|
info.si_code = ILL_COPROC;
|
||
|
|
break;
|
||
|
|
default:
|
||
|
|
fprintf(stderr, "Unknown invalid operation (%02x)\n",
|
||
|
|
env->error_code & 0xF);
|
||
|
|
if (loglevel) {
|
||
|
|
fprintf(logfile, "Unknown invalid operation (%02x)\n",
|
||
|
|
env->error_code & 0xF);
|
||
|
|
}
|
||
|
|
info.si_code = ILL_ILLADR;
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
/* Handle this via the gdb */
|
||
|
|
gdb_handlesig (env, SIGSEGV);
|
||
|
|
break;
|
||
|
|
case EXCP_PRIV:
|
||
|
|
fprintf(stderr, "Privilege violation\n");
|
||
|
|
if (loglevel)
|
||
|
|
fprintf(logfile, "Privilege violation\n");
|
||
|
|
info.si_signo = SIGILL;
|
||
|
|
info.si_errno = 0;
|
||
|
|
switch (env->error_code & 0xF) {
|
||
|
|
case EXCP_PRIV_OPC:
|
||
|
|
info.si_code = ILL_PRVOPC;
|
||
|
|
break;
|
||
|
|
case EXCP_PRIV_REG:
|
||
|
|
info.si_code = ILL_PRVREG;
|
||
|
|
break;
|
||
|
|
default:
|
||
|
|
fprintf(stderr, "Unknown privilege violation (%02x)\n",
|
||
|
|
env->error_code & 0xF);
|
||
|
|
info.si_code = ILL_PRVOPC;
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
case EXCP_TRAP:
|
||
|
|
fprintf(stderr, "Tried to call a TRAP\n");
|
||
|
|
if (loglevel)
|
||
|
|
fprintf(logfile, "Tried to call a TRAP\n");
|
||
|
|
abort();
|
||
|
|
default:
|
||
|
|
/* Should not happen ! */
|
||
|
|
fprintf(stderr, "Unknown program exception (%02x)\n",
|
||
|
|
env->error_code);
|
||
|
|
if (loglevel) {
|
||
|
|
fprintf(logfile, "Unknwon program exception (%02x)\n",
|
||
|
|
env->error_code);
|
||
|
|
}
|
||
|
|
abort();
|
||
|
|
}
|
||
|
|
info.si_addr = (void*)(env->nip - 4);
|
||
|
|
queue_signal(info.si_signo, &info);
|
||
|
|
break;
|
||
|
|
case EXCP_NO_FP:
|
||
|
|
fprintf(stderr, "No floating point allowed\n");
|
||
|
|
if (loglevel)
|
||
|
|
fprintf(logfile, "No floating point allowed\n");
|
||
|
|
info.si_signo = SIGILL;
|
||
|
|
info.si_errno = 0;
|
||
|
|
info.si_code = ILL_COPROC;
|
||
|
|
info.si_addr = (void*)(env->nip - 4);
|
||
|
|
queue_signal(info.si_signo, &info);
|
||
|
|
break;
|
||
|
|
case EXCP_DECR:
|
||
|
|
/* Should not happen ! */
|
||
|
|
fprintf(stderr, "Decrementer exception\n");
|
||
|
|
if (loglevel)
|
||
|
|
fprintf(logfile, "Decrementer exception\n");
|
||
|
|
abort();
|
||
|
|
case EXCP_TRACE:
|
||
|
|
/* Pass to gdb: we use this to trace execution */
|
||
|
|
gdb_handlesig (env, SIGTRAP);
|
||
|
|
break;
|
||
|
|
case EXCP_FP_ASSIST:
|
||
|
|
/* Should not happen ! */
|
||
|
|
fprintf(stderr, "Floating point assist exception\n");
|
||
|
|
if (loglevel)
|
||
|
|
fprintf(logfile, "Floating point assist exception\n");
|
||
|
|
abort();
|
||
|
|
case EXCP_MTMSR:
|
||
|
|
/* We reloaded the msr, just go on */
|
||
|
|
if (msr_pr == 0) {
|
||
|
|
fprintf(stderr, "Tried to go into supervisor mode !\n");
|
||
|
|
if (loglevel)
|
||
|
|
fprintf(logfile, "Tried to go into supervisor mode !\n");
|
||
|
|
abort();
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
case EXCP_BRANCH:
|
||
|
|
/* We stopped because of a jump... */
|
||
|
|
break;
|
||
|
|
case EXCP_INTERRUPT:
|
||
|
|
/* Don't know why this should ever happen... */
|
||
|
|
fprintf(stderr, "EXCP_INTERRUPT\n");
|
||
|
|
break;
|
||
|
|
case EXCP_DEBUG:
|
||
|
|
gdb_handlesig (env, SIGTRAP);
|
||
|
|
break;
|
||
|
|
default:
|
||
|
|
fprintf(stderr, "qemu: unhandled CPU exception 0x%x - aborting\n",
|
||
|
|
trapnr);
|
||
|
|
if (loglevel) {
|
||
|
|
fprintf(logfile, "qemu: unhandled CPU exception 0x%02x - "
|
||
|
|
"0x%02x - aborting\n", trapnr, env->error_code);
|
||
|
|
}
|
||
|
|
abort();
|
||
|
|
}
|
||
|
|
process_pending_signals(env);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
#endif
|
||
|
|
|
||
|
|
|
||
|
|
#ifdef TARGET_I386
|
||
|
|
|
||
|
|
/***********************************************************/
|
||
|
|
/* CPUX86 core interface */
|
||
|
|
|
||
|
|
uint64_t cpu_get_tsc(CPUX86State *env)
|
||
|
|
{
|
||
|
|
return cpu_get_real_ticks();
|
||
|
|
}
|
||
|
|
|
||
|
|
void
|
||
|
|
write_dt(void *ptr, unsigned long addr, unsigned long limit,
|
||
|
|
int flags)
|
||
|
|
{
|
||
|
|
unsigned int e1, e2;
|
||
|
|
e1 = (addr << 16) | (limit & 0xffff);
|
||
|
|
e2 = ((addr >> 16) & 0xff) | (addr & 0xff000000) | (limit & 0x000f0000);
|
||
|
|
e2 |= flags;
|
||
|
|
stl((uint8_t *)ptr, e1);
|
||
|
|
stl((uint8_t *)ptr + 4, e2);
|
||
|
|
}
|
||
|
|
|
||
|
|
static void set_gate(void *ptr, unsigned int type, unsigned int dpl,
|
||
|
|
unsigned long addr, unsigned int sel)
|
||
|
|
{
|
||
|
|
unsigned int e1, e2;
|
||
|
|
e1 = (addr & 0xffff) | (sel << 16);
|
||
|
|
e2 = (addr & 0xffff0000) | 0x8000 | (dpl << 13) | (type << 8);
|
||
|
|
stl((uint8_t *)ptr, e1);
|
||
|
|
stl((uint8_t *)ptr + 4, e2);
|
||
|
|
}
|
||
|
|
|
||
|
|
#define GDT_TABLE_SIZE 14
|
||
|
|
#define LDT_TABLE_SIZE 15
|
||
|
|
#define IDT_TABLE_SIZE 256
|
||
|
|
#define TSS_SIZE 104
|
||
|
|
uint64_t gdt_table[GDT_TABLE_SIZE];
|
||
|
|
uint64_t ldt_table[LDT_TABLE_SIZE];
|
||
|
|
uint64_t idt_table[IDT_TABLE_SIZE];
|
||
|
|
uint32_t tss[TSS_SIZE];
|
||
|
|
|
||
|
|
/* only dpl matters as we do only user space emulation */
|
||
|
|
static void set_idt(int n, unsigned int dpl)
|
||
|
|
{
|
||
|
|
set_gate(idt_table + n, 0, dpl, 0, 0);
|
||
|
|
}
|
||
|
|
|
||
|
|
/* ABI convention: after a syscall if there was an error the CF flag is set */
|
||
|
|
static inline set_error(CPUX86State *env, int ret)
|
||
|
|
{
|
||
|
|
if(ret<0)
|
||
|
|
env->eflags = env->eflags | 0x1;
|
||
|
|
else
|
||
|
|
env->eflags &= ~0x1;
|
||
|
|
env->regs[R_EAX] = ret;
|
||
|
|
}
|
||
|
|
|
||
|
|
void cpu_loop(CPUX86State *env)
|
||
|
|
{
|
||
|
|
int trapnr;
|
||
|
|
int ret;
|
||
|
|
uint8_t *pc;
|
||
|
|
target_siginfo_t info;
|
||
|
|
|
||
|
|
for(;;) {
|
||
|
|
trapnr = cpu_x86_exec(env);
|
||
|
|
uint32_t *params = (uint32_t *)env->regs[R_ESP];
|
||
|
|
switch(trapnr) {
|
||
|
|
case 0x79: /* Our commpage hack back door exit is here */
|
||
|
|
do_commpage(env, env->eip, *(params + 1), *(params + 2),
|
||
|
|
*(params + 3), *(params + 4),
|
||
|
|
*(params + 5), *(params + 6),
|
||
|
|
*(params + 7), *(params + 8));
|
||
|
|
break;
|
||
|
|
case 0x81: /* mach syscall */
|
||
|
|
{
|
||
|
|
ret = do_mach_syscall(env, env->regs[R_EAX],
|
||
|
|
*(params + 1), *(params + 2),
|
||
|
|
*(params + 3), *(params + 4),
|
||
|
|
*(params + 5), *(params + 6),
|
||
|
|
*(params + 7), *(params + 8));
|
||
|
|
set_error(env, ret);
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
case 0x90: /* unix backdoor */
|
||
|
|
{
|
||
|
|
/* after sysenter, stack is in R_ECX, new eip in R_EDX (sysexit will flip them back)*/
|
||
|
|
int saved_stack = env->regs[R_ESP];
|
||
|
|
env->regs[R_ESP] = env->regs[R_ECX];
|
||
|
|
|
||
|
|
ret = do_unix_syscall(env, env->regs[R_EAX]);
|
||
|
|
|
||
|
|
env->regs[R_ECX] = env->regs[R_ESP];
|
||
|
|
env->regs[R_ESP] = saved_stack;
|
||
|
|
|
||
|
|
set_error(env, ret);
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
case 0x80: /* unix syscall */
|
||
|
|
{
|
||
|
|
ret = do_unix_syscall(env, env->regs[R_EAX]/*,
|
||
|
|
*(params + 1), *(params + 2),
|
||
|
|
*(params + 3), *(params + 4),
|
||
|
|
*(params + 5), *(params + 6),
|
||
|
|
*(params + 7), *(params + 8)*/);
|
||
|
|
set_error(env, ret);
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
case 0x82: /* thread syscall */
|
||
|
|
{
|
||
|
|
ret = do_thread_syscall(env, env->regs[R_EAX],
|
||
|
|
*(params + 1), *(params + 2),
|
||
|
|
*(params + 3), *(params + 4),
|
||
|
|
*(params + 5), *(params + 6),
|
||
|
|
*(params + 7), *(params + 8));
|
||
|
|
set_error(env, ret);
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
case EXCP0B_NOSEG:
|
||
|
|
case EXCP0C_STACK:
|
||
|
|
info.si_signo = SIGBUS;
|
||
|
|
info.si_errno = 0;
|
||
|
|
info.si_code = BUS_NOOP;
|
||
|
|
info.si_addr = 0;
|
||
|
|
gdb_handlesig (env, SIGBUS);
|
||
|
|
queue_signal(info.si_signo, &info);
|
||
|
|
break;
|
||
|
|
case EXCP0D_GPF:
|
||
|
|
info.si_signo = SIGSEGV;
|
||
|
|
info.si_errno = 0;
|
||
|
|
info.si_code = SEGV_NOOP;
|
||
|
|
info.si_addr = 0;
|
||
|
|
gdb_handlesig (env, SIGSEGV);
|
||
|
|
queue_signal(info.si_signo, &info);
|
||
|
|
break;
|
||
|
|
case EXCP0E_PAGE:
|
||
|
|
info.si_signo = SIGSEGV;
|
||
|
|
info.si_errno = 0;
|
||
|
|
if (!(env->error_code & 1))
|
||
|
|
info.si_code = SEGV_MAPERR;
|
||
|
|
else
|
||
|
|
info.si_code = SEGV_ACCERR;
|
||
|
|
info.si_addr = (void*)env->cr[2];
|
||
|
|
gdb_handlesig (env, SIGSEGV);
|
||
|
|
queue_signal(info.si_signo, &info);
|
||
|
|
break;
|
||
|
|
case EXCP00_DIVZ:
|
||
|
|
/* division by zero */
|
||
|
|
info.si_signo = SIGFPE;
|
||
|
|
info.si_errno = 0;
|
||
|
|
info.si_code = FPE_INTDIV;
|
||
|
|
info.si_addr = (void*)env->eip;
|
||
|
|
gdb_handlesig (env, SIGFPE);
|
||
|
|
queue_signal(info.si_signo, &info);
|
||
|
|
break;
|
||
|
|
case EXCP01_SSTP:
|
||
|
|
case EXCP03_INT3:
|
||
|
|
info.si_signo = SIGTRAP;
|
||
|
|
info.si_errno = 0;
|
||
|
|
info.si_code = TRAP_BRKPT;
|
||
|
|
info.si_addr = (void*)env->eip;
|
||
|
|
gdb_handlesig (env, SIGTRAP);
|
||
|
|
queue_signal(info.si_signo, &info);
|
||
|
|
break;
|
||
|
|
case EXCP04_INTO:
|
||
|
|
case EXCP05_BOUND:
|
||
|
|
info.si_signo = SIGSEGV;
|
||
|
|
info.si_errno = 0;
|
||
|
|
info.si_code = SEGV_NOOP;
|
||
|
|
info.si_addr = 0;
|
||
|
|
gdb_handlesig (env, SIGSEGV);
|
||
|
|
queue_signal(info.si_signo, &info);
|
||
|
|
break;
|
||
|
|
case EXCP06_ILLOP:
|
||
|
|
info.si_signo = SIGILL;
|
||
|
|
info.si_errno = 0;
|
||
|
|
info.si_code = ILL_ILLOPN;
|
||
|
|
info.si_addr = (void*)env->eip;
|
||
|
|
gdb_handlesig (env, SIGILL);
|
||
|
|
queue_signal(info.si_signo, &info);
|
||
|
|
break;
|
||
|
|
case EXCP_INTERRUPT:
|
||
|
|
/* just indicate that signals should be handled asap */
|
||
|
|
break;
|
||
|
|
case EXCP_DEBUG:
|
||
|
|
{
|
||
|
|
int sig;
|
||
|
|
|
||
|
|
sig = gdb_handlesig (env, SIGTRAP);
|
||
|
|
if (sig)
|
||
|
|
{
|
||
|
|
info.si_signo = sig;
|
||
|
|
info.si_errno = 0;
|
||
|
|
info.si_code = TRAP_BRKPT;
|
||
|
|
queue_signal(info.si_signo, &info);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
default:
|
||
|
|
pc = (void*)(env->segs[R_CS].base + env->eip);
|
||
|
|
fprintf(stderr, "qemu: 0x%08lx: unhandled CPU exception 0x%x - aborting\n",
|
||
|
|
(long)pc, trapnr);
|
||
|
|
abort();
|
||
|
|
}
|
||
|
|
process_pending_signals(env);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
#endif
|
||
|
|
|
||
|
|
void usage(void)
|
||
|
|
{
|
||
|
|
printf("qemu-" TARGET_ARCH " version " QEMU_VERSION ", Copyright (c) 2003-2004 Fabrice Bellard\n"
|
||
|
|
"usage: qemu-" TARGET_ARCH " [-h] [-d opts] [-L path] [-s size] program [arguments...]\n"
|
||
|
|
"Darwin CPU emulator (compiled for %s emulation)\n"
|
||
|
|
"\n"
|
||
|
|
"-h print this help\n"
|
||
|
|
"-L path set the elf interpreter prefix (default=%s)\n"
|
||
|
|
"-s size set the stack size in bytes (default=%ld)\n"
|
||
|
|
"\n"
|
||
|
|
"debug options:\n"
|
||
|
|
#ifdef USE_CODE_COPY
|
||
|
|
"-no-code-copy disable code copy acceleration\n"
|
||
|
|
#endif
|
||
|
|
"-d options activate log (logfile=%s)\n"
|
||
|
|
"-g wait for gdb on port 1234\n"
|
||
|
|
"-p pagesize set the host page size to 'pagesize'\n",
|
||
|
|
TARGET_ARCH,
|
||
|
|
interp_prefix,
|
||
|
|
stack_size,
|
||
|
|
DEBUG_LOGFILE);
|
||
|
|
_exit(1);
|
||
|
|
}
|
||
|
|
|
||
|
|
/* XXX: currently only used for async signals (see signal.c) */
|
||
|
|
CPUState *global_env;
|
||
|
|
/* used only if single thread */
|
||
|
|
CPUState *cpu_single_env = NULL;
|
||
|
|
|
||
|
|
/* used to free thread contexts */
|
||
|
|
TaskState *first_task_state;
|
||
|
|
|
||
|
|
int main(int argc, char **argv)
|
||
|
|
{
|
||
|
|
const char *filename;
|
||
|
|
struct target_pt_regs regs1, *regs = ®s1;
|
||
|
|
TaskState ts1, *ts = &ts1;
|
||
|
|
CPUState *env;
|
||
|
|
int optind;
|
||
|
|
short use_gdbstub = 0;
|
||
|
|
const char *r;
|
||
|
|
|
||
|
|
if (argc <= 1)
|
||
|
|
usage();
|
||
|
|
|
||
|
|
/* init debug */
|
||
|
|
cpu_set_log_filename(DEBUG_LOGFILE);
|
||
|
|
|
||
|
|
optind = 1;
|
||
|
|
for(;;) {
|
||
|
|
if (optind >= argc)
|
||
|
|
break;
|
||
|
|
r = argv[optind];
|
||
|
|
if (r[0] != '-')
|
||
|
|
break;
|
||
|
|
optind++;
|
||
|
|
r++;
|
||
|
|
if (!strcmp(r, "-")) {
|
||
|
|
break;
|
||
|
|
} else if (!strcmp(r, "d")) {
|
||
|
|
int mask;
|
||
|
|
CPULogItem *item;
|
||
|
|
|
||
|
|
if (optind >= argc)
|
||
|
|
break;
|
||
|
|
|
||
|
|
r = argv[optind++];
|
||
|
|
mask = cpu_str_to_log_mask(r);
|
||
|
|
if (!mask) {
|
||
|
|
printf("Log items (comma separated):\n");
|
||
|
|
for(item = cpu_log_items; item->mask != 0; item++) {
|
||
|
|
printf("%-10s %s\n", item->name, item->help);
|
||
|
|
}
|
||
|
|
exit(1);
|
||
|
|
}
|
||
|
|
cpu_set_log(mask);
|
||
|
|
} else if (!strcmp(r, "s")) {
|
||
|
|
r = argv[optind++];
|
||
|
|
stack_size = strtol(r, (char **)&r, 0);
|
||
|
|
if (stack_size <= 0)
|
||
|
|
usage();
|
||
|
|
if (*r == 'M')
|
||
|
|
stack_size *= 1024 * 1024;
|
||
|
|
else if (*r == 'k' || *r == 'K')
|
||
|
|
stack_size *= 1024;
|
||
|
|
} else if (!strcmp(r, "L")) {
|
||
|
|
interp_prefix = argv[optind++];
|
||
|
|
} else if (!strcmp(r, "p")) {
|
||
|
|
qemu_host_page_size = atoi(argv[optind++]);
|
||
|
|
if (qemu_host_page_size == 0 ||
|
||
|
|
(qemu_host_page_size & (qemu_host_page_size - 1)) != 0) {
|
||
|
|
fprintf(stderr, "page size must be a power of two\n");
|
||
|
|
exit(1);
|
||
|
|
}
|
||
|
|
} else
|
||
|
|
if (!strcmp(r, "g")) {
|
||
|
|
use_gdbstub = 1;
|
||
|
|
} else
|
||
|
|
#ifdef USE_CODE_COPY
|
||
|
|
if (!strcmp(r, "no-code-copy")) {
|
||
|
|
code_copy_enabled = 0;
|
||
|
|
} else
|
||
|
|
#endif
|
||
|
|
{
|
||
|
|
usage();
|
||
|
|
}
|
||
|
|
}
|
||
|
|
if (optind >= argc)
|
||
|
|
usage();
|
||
|
|
filename = argv[optind];
|
||
|
|
|
||
|
|
/* Zero out regs */
|
||
|
|
memset(regs, 0, sizeof(struct target_pt_regs));
|
||
|
|
|
||
|
|
#if 0
|
||
|
|
/* Scan interp_prefix dir for replacement files. */
|
||
|
|
init_paths(interp_prefix);
|
||
|
|
#endif
|
||
|
|
|
||
|
|
/* NOTE: we need to init the CPU at this stage to get
|
||
|
|
qemu_host_page_size */
|
||
|
|
env = cpu_init();
|
||
|
|
|
||
|
|
printf("Starting %s with qemu\n----------------\n", filename);
|
||
|
|
|
||
|
|
commpage_init();
|
||
|
|
|
||
|
|
if (mach_exec(filename, argv+optind, environ, regs) != 0) {
|
||
|
|
printf("Error loading %s\n", filename);
|
||
|
|
_exit(1);
|
||
|
|
}
|
||
|
|
|
||
|
|
syscall_init();
|
||
|
|
signal_init();
|
||
|
|
global_env = env;
|
||
|
|
|
||
|
|
/* build Task State */
|
||
|
|
memset(ts, 0, sizeof(TaskState));
|
||
|
|
env->opaque = ts;
|
||
|
|
ts->used = 1;
|
||
|
|
env->user_mode_only = 1;
|
||
|
|
|
||
|
|
#if defined(TARGET_I386)
|
||
|
|
cpu_x86_set_cpl(env, 3);
|
||
|
|
|
||
|
|
env->cr[0] = CR0_PG_MASK | CR0_WP_MASK | CR0_PE_MASK;
|
||
|
|
env->hflags |= HF_PE_MASK;
|
||
|
|
|
||
|
|
if (env->cpuid_features & CPUID_SSE) {
|
||
|
|
env->cr[4] |= CR4_OSFXSR_MASK;
|
||
|
|
env->hflags |= HF_OSFXSR_MASK;
|
||
|
|
}
|
||
|
|
|
||
|
|
/* flags setup : we activate the IRQs by default as in user mode */
|
||
|
|
env->eflags |= IF_MASK;
|
||
|
|
|
||
|
|
/* darwin register setup */
|
||
|
|
env->regs[R_EAX] = regs->eax;
|
||
|
|
env->regs[R_EBX] = regs->ebx;
|
||
|
|
env->regs[R_ECX] = regs->ecx;
|
||
|
|
env->regs[R_EDX] = regs->edx;
|
||
|
|
env->regs[R_ESI] = regs->esi;
|
||
|
|
env->regs[R_EDI] = regs->edi;
|
||
|
|
env->regs[R_EBP] = regs->ebp;
|
||
|
|
env->regs[R_ESP] = regs->esp;
|
||
|
|
env->eip = regs->eip;
|
||
|
|
|
||
|
|
/* Darwin LDT setup */
|
||
|
|
/* 2 - User code segment
|
||
|
|
3 - User data segment
|
||
|
|
4 - User cthread */
|
||
|
|
bzero(ldt_table, LDT_TABLE_SIZE * sizeof(ldt_table[0]));
|
||
|
|
env->ldt.base = (uint32_t) ldt_table;
|
||
|
|
env->ldt.limit = sizeof(ldt_table) - 1;
|
||
|
|
|
||
|
|
write_dt(ldt_table + 2, 0, 0xfffff,
|
||
|
|
DESC_G_MASK | DESC_B_MASK | DESC_P_MASK | DESC_S_MASK |
|
||
|
|
(3 << DESC_DPL_SHIFT) | (0xa << DESC_TYPE_SHIFT));
|
||
|
|
write_dt(ldt_table + 3, 0, 0xfffff,
|
||
|
|
DESC_G_MASK | DESC_B_MASK | DESC_P_MASK | DESC_S_MASK |
|
||
|
|
(3 << DESC_DPL_SHIFT) | (0x2 << DESC_TYPE_SHIFT));
|
||
|
|
write_dt(ldt_table + 4, 0, 0xfffff,
|
||
|
|
DESC_G_MASK | DESC_B_MASK | DESC_P_MASK | DESC_S_MASK |
|
||
|
|
(3 << DESC_DPL_SHIFT) | (0x2 << DESC_TYPE_SHIFT));
|
||
|
|
|
||
|
|
/* Darwin GDT setup.
|
||
|
|
* has changed a lot between old Darwin/x86 (pre-Mac Intel) and Mac OS X/x86,
|
||
|
|
now everything is done via int 0x81(mach) int 0x82 (thread) and sysenter/sysexit(unix) */
|
||
|
|
bzero(gdt_table, sizeof(gdt_table));
|
||
|
|
env->gdt.base = (uint32_t)gdt_table;
|
||
|
|
env->gdt.limit = sizeof(gdt_table) - 1;
|
||
|
|
|
||
|
|
/* Set up a back door to handle sysenter syscalls (unix) */
|
||
|
|
char * syscallbackdoor = malloc(64);
|
||
|
|
page_set_flags((int)syscallbackdoor, (int)syscallbackdoor + 64, PROT_EXEC | PROT_READ | PAGE_VALID);
|
||
|
|
|
||
|
|
int i = 0;
|
||
|
|
syscallbackdoor[i++] = 0xcd;
|
||
|
|
syscallbackdoor[i++] = 0x90; /* int 0x90 */
|
||
|
|
syscallbackdoor[i++] = 0x0F;
|
||
|
|
syscallbackdoor[i++] = 0x35; /* sysexit */
|
||
|
|
|
||
|
|
/* Darwin sysenter/sysexit setup */
|
||
|
|
env->sysenter_cs = 0x1; //XXX
|
||
|
|
env->sysenter_eip = (int)syscallbackdoor;
|
||
|
|
env->sysenter_esp = (int)malloc(64);
|
||
|
|
|
||
|
|
/* Darwin TSS setup
|
||
|
|
This must match up with GDT[4] */
|
||
|
|
env->tr.base = (uint32_t) tss;
|
||
|
|
env->tr.limit = sizeof(tss) - 1;
|
||
|
|
env->tr.flags = DESC_P_MASK | (0x9 << DESC_TYPE_SHIFT);
|
||
|
|
stw(tss + 2, 0x10); // ss0 = 0x10 = GDT[2] = Kernel Data Segment
|
||
|
|
|
||
|
|
/* Darwin interrupt setup */
|
||
|
|
bzero(idt_table, sizeof(idt_table));
|
||
|
|
env->idt.base = (uint32_t) idt_table;
|
||
|
|
env->idt.limit = sizeof(idt_table) - 1;
|
||
|
|
set_idt(0, 0);
|
||
|
|
set_idt(1, 0);
|
||
|
|
set_idt(2, 0);
|
||
|
|
set_idt(3, 3);
|
||
|
|
set_idt(4, 3);
|
||
|
|
set_idt(5, 3);
|
||
|
|
set_idt(6, 0);
|
||
|
|
set_idt(7, 0);
|
||
|
|
set_idt(8, 0);
|
||
|
|
set_idt(9, 0);
|
||
|
|
set_idt(10, 0);
|
||
|
|
set_idt(11, 0);
|
||
|
|
set_idt(12, 0);
|
||
|
|
set_idt(13, 0);
|
||
|
|
set_idt(14, 0);
|
||
|
|
set_idt(15, 0);
|
||
|
|
set_idt(16, 0);
|
||
|
|
set_idt(17, 0);
|
||
|
|
set_idt(18, 0);
|
||
|
|
set_idt(19, 0);
|
||
|
|
/* Syscalls are done via
|
||
|
|
int 0x80 (unix) (rarely used)
|
||
|
|
int 0x81 (mach)
|
||
|
|
int 0x82 (thread)
|
||
|
|
int 0x83 (diag) (not handled here)
|
||
|
|
sysenter/sysexit (unix) -> we redirect that to int 0x90 */
|
||
|
|
set_idt(0x79, 3); /* Commpage hack, here is our backdoor interrupt */
|
||
|
|
set_idt(0x80, 3); /* Unix Syscall */
|
||
|
|
set_idt(0x81, 3); /* Mach Syscalls */
|
||
|
|
set_idt(0x82, 3); /* thread Syscalls */
|
||
|
|
|
||
|
|
set_idt(0x90, 3); /* Unix Syscall backdoor */
|
||
|
|
|
||
|
|
|
||
|
|
cpu_x86_load_seg(env, R_CS, __USER_CS);
|
||
|
|
cpu_x86_load_seg(env, R_DS, __USER_DS);
|
||
|
|
cpu_x86_load_seg(env, R_ES, __USER_DS);
|
||
|
|
cpu_x86_load_seg(env, R_SS, __USER_DS);
|
||
|
|
cpu_x86_load_seg(env, R_FS, __USER_DS);
|
||
|
|
cpu_x86_load_seg(env, R_GS, __USER_DS);
|
||
|
|
|
||
|
|
#elif defined(TARGET_PPC)
|
||
|
|
{
|
||
|
|
int i;
|
||
|
|
env->nip = regs->nip;
|
||
|
|
for(i = 0; i < 32; i++) {
|
||
|
|
env->gpr[i] = regs->gpr[i];
|
||
|
|
}
|
||
|
|
}
|
||
|
|
#else
|
||
|
|
#error unsupported target CPU
|
||
|
|
#endif
|
||
|
|
|
||
|
|
if (use_gdbstub) {
|
||
|
|
printf("Waiting for gdb Connection on port 1234...\n");
|
||
|
|
gdbserver_start (1234);
|
||
|
|
gdb_handlesig(env, 0);
|
||
|
|
}
|
||
|
|
|
||
|
|
cpu_loop(env);
|
||
|
|
/* never exits */
|
||
|
|
return 0;
|
||
|
|
}
|