21bf9b06cb
According to the specification "Semihosting for AArch32 and Aarch64", the SYS_OPEN operation should return: - A nonzero handle if the call is successful - -1 if the call is not successful So, it should never return 0. Prior to commit35e9a0a8ce
("target/arm/arm-semi: Make semihosting code hand out its own file descriptors"), the guest fd matched to the host fd. It returned a nonzero handle on success since the fd 0 is already used for stdin. Now that the guest fd is the index of guestfd_array, it starts from 0. I noticed this issue particularly because Trusted Firmware-A built with PLAT=qemu is no longer working. Its io_semihosting driver only handles a positive return value as a valid filehandle. Basically, there are two ways to fix this: - Use (guestfd - 1) as the index of guestfs_arrary. We need to insert increment/decrement to convert the guestfd and the array index back and forth. - Keep using guestfd as the index of guestfs_array. The first entry of guestfs_array is left unused. I thought the latter is simpler. We end up with wasting a small piece of memory for the unused first entry of guestfd_array, but this is probably not a big deal. Fixes:35e9a0a8ce
("target/arm/arm-semi: Make semihosting code hand out its own file descriptors") Cc: qemu-stable@nongnu.org Signed-off-by: Masahiro Yamada <masahiroy@kernel.org> Reviewed-by: Richard Henderson <richard.henderson@linaro.org> Message-id: 20200109041228.10131-1-masahiroy@kernel.org Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
1108 lines
32 KiB
C
1108 lines
32 KiB
C
/*
|
|
* Arm "Angel" semihosting syscalls
|
|
*
|
|
* Copyright (c) 2005, 2007 CodeSourcery.
|
|
* Copyright (c) 2019 Linaro
|
|
* Written by Paul Brook.
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
* ARM Semihosting is documented in:
|
|
* Semihosting for AArch32 and AArch64 Release 2.0
|
|
* https://static.docs.arm.com/100863/0200/semihosting.pdf
|
|
*/
|
|
|
|
#include "qemu/osdep.h"
|
|
|
|
#include "cpu.h"
|
|
#include "hw/semihosting/semihost.h"
|
|
#include "hw/semihosting/console.h"
|
|
#include "qemu/log.h"
|
|
#ifdef CONFIG_USER_ONLY
|
|
#include "qemu.h"
|
|
|
|
#define ARM_ANGEL_HEAP_SIZE (128 * 1024 * 1024)
|
|
#else
|
|
#include "exec/gdbstub.h"
|
|
#include "qemu/cutils.h"
|
|
#endif
|
|
|
|
#define TARGET_SYS_OPEN 0x01
|
|
#define TARGET_SYS_CLOSE 0x02
|
|
#define TARGET_SYS_WRITEC 0x03
|
|
#define TARGET_SYS_WRITE0 0x04
|
|
#define TARGET_SYS_WRITE 0x05
|
|
#define TARGET_SYS_READ 0x06
|
|
#define TARGET_SYS_READC 0x07
|
|
#define TARGET_SYS_ISTTY 0x09
|
|
#define TARGET_SYS_SEEK 0x0a
|
|
#define TARGET_SYS_FLEN 0x0c
|
|
#define TARGET_SYS_TMPNAM 0x0d
|
|
#define TARGET_SYS_REMOVE 0x0e
|
|
#define TARGET_SYS_RENAME 0x0f
|
|
#define TARGET_SYS_CLOCK 0x10
|
|
#define TARGET_SYS_TIME 0x11
|
|
#define TARGET_SYS_SYSTEM 0x12
|
|
#define TARGET_SYS_ERRNO 0x13
|
|
#define TARGET_SYS_GET_CMDLINE 0x15
|
|
#define TARGET_SYS_HEAPINFO 0x16
|
|
#define TARGET_SYS_EXIT 0x18
|
|
#define TARGET_SYS_SYNCCACHE 0x19
|
|
#define TARGET_SYS_EXIT_EXTENDED 0x20
|
|
|
|
/* ADP_Stopped_ApplicationExit is used for exit(0),
|
|
* anything else is implemented as exit(1) */
|
|
#define ADP_Stopped_ApplicationExit (0x20026)
|
|
|
|
#ifndef O_BINARY
|
|
#define O_BINARY 0
|
|
#endif
|
|
|
|
#define GDB_O_RDONLY 0x000
|
|
#define GDB_O_WRONLY 0x001
|
|
#define GDB_O_RDWR 0x002
|
|
#define GDB_O_APPEND 0x008
|
|
#define GDB_O_CREAT 0x200
|
|
#define GDB_O_TRUNC 0x400
|
|
#define GDB_O_BINARY 0
|
|
|
|
static int gdb_open_modeflags[12] = {
|
|
GDB_O_RDONLY,
|
|
GDB_O_RDONLY | GDB_O_BINARY,
|
|
GDB_O_RDWR,
|
|
GDB_O_RDWR | GDB_O_BINARY,
|
|
GDB_O_WRONLY | GDB_O_CREAT | GDB_O_TRUNC,
|
|
GDB_O_WRONLY | GDB_O_CREAT | GDB_O_TRUNC | GDB_O_BINARY,
|
|
GDB_O_RDWR | GDB_O_CREAT | GDB_O_TRUNC,
|
|
GDB_O_RDWR | GDB_O_CREAT | GDB_O_TRUNC | GDB_O_BINARY,
|
|
GDB_O_WRONLY | GDB_O_CREAT | GDB_O_APPEND,
|
|
GDB_O_WRONLY | GDB_O_CREAT | GDB_O_APPEND | GDB_O_BINARY,
|
|
GDB_O_RDWR | GDB_O_CREAT | GDB_O_APPEND,
|
|
GDB_O_RDWR | GDB_O_CREAT | GDB_O_APPEND | GDB_O_BINARY
|
|
};
|
|
|
|
static int open_modeflags[12] = {
|
|
O_RDONLY,
|
|
O_RDONLY | O_BINARY,
|
|
O_RDWR,
|
|
O_RDWR | O_BINARY,
|
|
O_WRONLY | O_CREAT | O_TRUNC,
|
|
O_WRONLY | O_CREAT | O_TRUNC | O_BINARY,
|
|
O_RDWR | O_CREAT | O_TRUNC,
|
|
O_RDWR | O_CREAT | O_TRUNC | O_BINARY,
|
|
O_WRONLY | O_CREAT | O_APPEND,
|
|
O_WRONLY | O_CREAT | O_APPEND | O_BINARY,
|
|
O_RDWR | O_CREAT | O_APPEND,
|
|
O_RDWR | O_CREAT | O_APPEND | O_BINARY
|
|
};
|
|
|
|
typedef enum GuestFDType {
|
|
GuestFDUnused = 0,
|
|
GuestFDHost = 1,
|
|
GuestFDGDB = 2,
|
|
GuestFDFeatureFile = 3,
|
|
} GuestFDType;
|
|
|
|
/*
|
|
* Guest file descriptors are integer indexes into an array of
|
|
* these structures (we will dynamically resize as necessary).
|
|
*/
|
|
typedef struct GuestFD {
|
|
GuestFDType type;
|
|
union {
|
|
int hostfd;
|
|
target_ulong featurefile_offset;
|
|
};
|
|
} GuestFD;
|
|
|
|
static GArray *guestfd_array;
|
|
|
|
/*
|
|
* Allocate a new guest file descriptor and return it; if we
|
|
* couldn't allocate a new fd then return -1.
|
|
* This is a fairly simplistic implementation because we don't
|
|
* expect that most semihosting guest programs will make very
|
|
* heavy use of opening and closing fds.
|
|
*/
|
|
static int alloc_guestfd(void)
|
|
{
|
|
guint i;
|
|
|
|
if (!guestfd_array) {
|
|
/* New entries zero-initialized, i.e. type GuestFDUnused */
|
|
guestfd_array = g_array_new(FALSE, TRUE, sizeof(GuestFD));
|
|
}
|
|
|
|
/* SYS_OPEN should return nonzero handle on success. Start guestfd from 1 */
|
|
for (i = 1; i < guestfd_array->len; i++) {
|
|
GuestFD *gf = &g_array_index(guestfd_array, GuestFD, i);
|
|
|
|
if (gf->type == GuestFDUnused) {
|
|
return i;
|
|
}
|
|
}
|
|
|
|
/* All elements already in use: expand the array */
|
|
g_array_set_size(guestfd_array, i + 1);
|
|
return i;
|
|
}
|
|
|
|
/*
|
|
* Look up the guestfd in the data structure; return NULL
|
|
* for out of bounds, but don't check whether the slot is unused.
|
|
* This is used internally by the other guestfd functions.
|
|
*/
|
|
static GuestFD *do_get_guestfd(int guestfd)
|
|
{
|
|
if (!guestfd_array) {
|
|
return NULL;
|
|
}
|
|
|
|
if (guestfd <= 0 || guestfd >= guestfd_array->len) {
|
|
return NULL;
|
|
}
|
|
|
|
return &g_array_index(guestfd_array, GuestFD, guestfd);
|
|
}
|
|
|
|
/*
|
|
* Associate the specified guest fd (which must have been
|
|
* allocated via alloc_fd() and not previously used) with
|
|
* the specified host/gdb fd.
|
|
*/
|
|
static void associate_guestfd(int guestfd, int hostfd)
|
|
{
|
|
GuestFD *gf = do_get_guestfd(guestfd);
|
|
|
|
assert(gf);
|
|
gf->type = use_gdb_syscalls() ? GuestFDGDB : GuestFDHost;
|
|
gf->hostfd = hostfd;
|
|
}
|
|
|
|
/*
|
|
* Deallocate the specified guest file descriptor. This doesn't
|
|
* close the host fd, it merely undoes the work of alloc_fd().
|
|
*/
|
|
static void dealloc_guestfd(int guestfd)
|
|
{
|
|
GuestFD *gf = do_get_guestfd(guestfd);
|
|
|
|
assert(gf);
|
|
gf->type = GuestFDUnused;
|
|
}
|
|
|
|
/*
|
|
* Given a guest file descriptor, get the associated struct.
|
|
* If the fd is not valid, return NULL. This is the function
|
|
* used by the various semihosting calls to validate a handle
|
|
* from the guest.
|
|
* Note: calling alloc_guestfd() or dealloc_guestfd() will
|
|
* invalidate any GuestFD* obtained by calling this function.
|
|
*/
|
|
static GuestFD *get_guestfd(int guestfd)
|
|
{
|
|
GuestFD *gf = do_get_guestfd(guestfd);
|
|
|
|
if (!gf || gf->type == GuestFDUnused) {
|
|
return NULL;
|
|
}
|
|
return gf;
|
|
}
|
|
|
|
/*
|
|
* The semihosting API has no concept of its errno being thread-safe,
|
|
* as the API design predates SMP CPUs and was intended as a simple
|
|
* real-hardware set of debug functionality. For QEMU, we make the
|
|
* errno be per-thread in linux-user mode; in softmmu it is a simple
|
|
* global, and we assume that the guest takes care of avoiding any races.
|
|
*/
|
|
#ifndef CONFIG_USER_ONLY
|
|
static target_ulong syscall_err;
|
|
|
|
#include "exec/softmmu-semi.h"
|
|
#endif
|
|
|
|
static inline uint32_t set_swi_errno(CPUARMState *env, uint32_t code)
|
|
{
|
|
if (code == (uint32_t)-1) {
|
|
#ifdef CONFIG_USER_ONLY
|
|
CPUState *cs = env_cpu(env);
|
|
TaskState *ts = cs->opaque;
|
|
|
|
ts->swi_errno = errno;
|
|
#else
|
|
syscall_err = errno;
|
|
#endif
|
|
}
|
|
return code;
|
|
}
|
|
|
|
static inline uint32_t get_swi_errno(CPUARMState *env)
|
|
{
|
|
#ifdef CONFIG_USER_ONLY
|
|
CPUState *cs = env_cpu(env);
|
|
TaskState *ts = cs->opaque;
|
|
|
|
return ts->swi_errno;
|
|
#else
|
|
return syscall_err;
|
|
#endif
|
|
}
|
|
|
|
static target_ulong arm_semi_syscall_len;
|
|
|
|
static void arm_semi_cb(CPUState *cs, target_ulong ret, target_ulong err)
|
|
{
|
|
ARMCPU *cpu = ARM_CPU(cs);
|
|
CPUARMState *env = &cpu->env;
|
|
target_ulong reg0 = is_a64(env) ? env->xregs[0] : env->regs[0];
|
|
|
|
if (ret == (target_ulong)-1) {
|
|
errno = err;
|
|
set_swi_errno(env, -1);
|
|
reg0 = ret;
|
|
} else {
|
|
/* Fixup syscalls that use nonstardard return conventions. */
|
|
switch (reg0) {
|
|
case TARGET_SYS_WRITE:
|
|
case TARGET_SYS_READ:
|
|
reg0 = arm_semi_syscall_len - ret;
|
|
break;
|
|
case TARGET_SYS_SEEK:
|
|
reg0 = 0;
|
|
break;
|
|
default:
|
|
reg0 = ret;
|
|
break;
|
|
}
|
|
}
|
|
if (is_a64(env)) {
|
|
env->xregs[0] = reg0;
|
|
} else {
|
|
env->regs[0] = reg0;
|
|
}
|
|
}
|
|
|
|
static target_ulong arm_flen_buf(ARMCPU *cpu)
|
|
{
|
|
/* Return an address in target memory of 64 bytes where the remote
|
|
* gdb should write its stat struct. (The format of this structure
|
|
* is defined by GDB's remote protocol and is not target-specific.)
|
|
* We put this on the guest's stack just below SP.
|
|
*/
|
|
CPUARMState *env = &cpu->env;
|
|
target_ulong sp;
|
|
|
|
if (is_a64(env)) {
|
|
sp = env->xregs[31];
|
|
} else {
|
|
sp = env->regs[13];
|
|
}
|
|
|
|
return sp - 64;
|
|
}
|
|
|
|
static void arm_semi_flen_cb(CPUState *cs, target_ulong ret, target_ulong err)
|
|
{
|
|
ARMCPU *cpu = ARM_CPU(cs);
|
|
CPUARMState *env = &cpu->env;
|
|
/* The size is always stored in big-endian order, extract
|
|
the value. We assume the size always fit in 32 bits. */
|
|
uint32_t size;
|
|
cpu_memory_rw_debug(cs, arm_flen_buf(cpu) + 32, (uint8_t *)&size, 4, 0);
|
|
size = be32_to_cpu(size);
|
|
if (is_a64(env)) {
|
|
env->xregs[0] = size;
|
|
} else {
|
|
env->regs[0] = size;
|
|
}
|
|
errno = err;
|
|
set_swi_errno(env, -1);
|
|
}
|
|
|
|
static int arm_semi_open_guestfd;
|
|
|
|
static void arm_semi_open_cb(CPUState *cs, target_ulong ret, target_ulong err)
|
|
{
|
|
ARMCPU *cpu = ARM_CPU(cs);
|
|
CPUARMState *env = &cpu->env;
|
|
if (ret == (target_ulong)-1) {
|
|
errno = err;
|
|
set_swi_errno(env, -1);
|
|
dealloc_guestfd(arm_semi_open_guestfd);
|
|
} else {
|
|
associate_guestfd(arm_semi_open_guestfd, ret);
|
|
ret = arm_semi_open_guestfd;
|
|
}
|
|
|
|
if (is_a64(env)) {
|
|
env->xregs[0] = ret;
|
|
} else {
|
|
env->regs[0] = ret;
|
|
}
|
|
}
|
|
|
|
static target_ulong arm_gdb_syscall(ARMCPU *cpu, gdb_syscall_complete_cb cb,
|
|
const char *fmt, ...)
|
|
{
|
|
va_list va;
|
|
CPUARMState *env = &cpu->env;
|
|
|
|
va_start(va, fmt);
|
|
gdb_do_syscallv(cb, fmt, va);
|
|
va_end(va);
|
|
|
|
/*
|
|
* FIXME: in softmmu mode, the gdbstub will schedule our callback
|
|
* to occur, but will not actually call it to complete the syscall
|
|
* until after this function has returned and we are back in the
|
|
* CPU main loop. Therefore callers to this function must not
|
|
* do anything with its return value, because it is not necessarily
|
|
* the result of the syscall, but could just be the old value of X0.
|
|
* The only thing safe to do with this is that the callers of
|
|
* do_arm_semihosting() will write it straight back into X0.
|
|
* (In linux-user mode, the callback will have happened before
|
|
* gdb_do_syscallv() returns.)
|
|
*
|
|
* We should tidy this up so neither this function nor
|
|
* do_arm_semihosting() return a value, so the mistake of
|
|
* doing something with the return value is not possible to make.
|
|
*/
|
|
|
|
return is_a64(env) ? env->xregs[0] : env->regs[0];
|
|
}
|
|
|
|
/*
|
|
* Types for functions implementing various semihosting calls
|
|
* for specific types of guest file descriptor. These must all
|
|
* do the work and return the required return value for the guest,
|
|
* setting the guest errno if appropriate.
|
|
*/
|
|
typedef uint32_t sys_closefn(ARMCPU *cpu, GuestFD *gf);
|
|
typedef uint32_t sys_writefn(ARMCPU *cpu, GuestFD *gf,
|
|
target_ulong buf, uint32_t len);
|
|
typedef uint32_t sys_readfn(ARMCPU *cpu, GuestFD *gf,
|
|
target_ulong buf, uint32_t len);
|
|
typedef uint32_t sys_isattyfn(ARMCPU *cpu, GuestFD *gf);
|
|
typedef uint32_t sys_seekfn(ARMCPU *cpu, GuestFD *gf,
|
|
target_ulong offset);
|
|
typedef uint32_t sys_flenfn(ARMCPU *cpu, GuestFD *gf);
|
|
|
|
static uint32_t host_closefn(ARMCPU *cpu, GuestFD *gf)
|
|
{
|
|
CPUARMState *env = &cpu->env;
|
|
|
|
return set_swi_errno(env, close(gf->hostfd));
|
|
}
|
|
|
|
static uint32_t host_writefn(ARMCPU *cpu, GuestFD *gf,
|
|
target_ulong buf, uint32_t len)
|
|
{
|
|
uint32_t ret;
|
|
CPUARMState *env = &cpu->env;
|
|
char *s = lock_user(VERIFY_READ, buf, len, 1);
|
|
if (!s) {
|
|
/* Return bytes not written on error */
|
|
return len;
|
|
}
|
|
ret = set_swi_errno(env, write(gf->hostfd, s, len));
|
|
unlock_user(s, buf, 0);
|
|
if (ret == (uint32_t)-1) {
|
|
ret = 0;
|
|
}
|
|
/* Return bytes not written */
|
|
return len - ret;
|
|
}
|
|
|
|
static uint32_t host_readfn(ARMCPU *cpu, GuestFD *gf,
|
|
target_ulong buf, uint32_t len)
|
|
{
|
|
uint32_t ret;
|
|
CPUARMState *env = &cpu->env;
|
|
char *s = lock_user(VERIFY_WRITE, buf, len, 0);
|
|
if (!s) {
|
|
/* return bytes not read */
|
|
return len;
|
|
}
|
|
do {
|
|
ret = set_swi_errno(env, read(gf->hostfd, s, len));
|
|
} while (ret == -1 && errno == EINTR);
|
|
unlock_user(s, buf, len);
|
|
if (ret == (uint32_t)-1) {
|
|
ret = 0;
|
|
}
|
|
/* Return bytes not read */
|
|
return len - ret;
|
|
}
|
|
|
|
static uint32_t host_isattyfn(ARMCPU *cpu, GuestFD *gf)
|
|
{
|
|
return isatty(gf->hostfd);
|
|
}
|
|
|
|
static uint32_t host_seekfn(ARMCPU *cpu, GuestFD *gf, target_ulong offset)
|
|
{
|
|
CPUARMState *env = &cpu->env;
|
|
uint32_t ret = set_swi_errno(env, lseek(gf->hostfd, offset, SEEK_SET));
|
|
if (ret == (uint32_t)-1) {
|
|
return -1;
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
static uint32_t host_flenfn(ARMCPU *cpu, GuestFD *gf)
|
|
{
|
|
CPUARMState *env = &cpu->env;
|
|
struct stat buf;
|
|
uint32_t ret = set_swi_errno(env, fstat(gf->hostfd, &buf));
|
|
if (ret == (uint32_t)-1) {
|
|
return -1;
|
|
}
|
|
return buf.st_size;
|
|
}
|
|
|
|
static uint32_t gdb_closefn(ARMCPU *cpu, GuestFD *gf)
|
|
{
|
|
return arm_gdb_syscall(cpu, arm_semi_cb, "close,%x", gf->hostfd);
|
|
}
|
|
|
|
static uint32_t gdb_writefn(ARMCPU *cpu, GuestFD *gf,
|
|
target_ulong buf, uint32_t len)
|
|
{
|
|
arm_semi_syscall_len = len;
|
|
return arm_gdb_syscall(cpu, arm_semi_cb, "write,%x,%x,%x",
|
|
gf->hostfd, buf, len);
|
|
}
|
|
|
|
static uint32_t gdb_readfn(ARMCPU *cpu, GuestFD *gf,
|
|
target_ulong buf, uint32_t len)
|
|
{
|
|
arm_semi_syscall_len = len;
|
|
return arm_gdb_syscall(cpu, arm_semi_cb, "read,%x,%x,%x",
|
|
gf->hostfd, buf, len);
|
|
}
|
|
|
|
static uint32_t gdb_isattyfn(ARMCPU *cpu, GuestFD *gf)
|
|
{
|
|
return arm_gdb_syscall(cpu, arm_semi_cb, "isatty,%x", gf->hostfd);
|
|
}
|
|
|
|
static uint32_t gdb_seekfn(ARMCPU *cpu, GuestFD *gf, target_ulong offset)
|
|
{
|
|
return arm_gdb_syscall(cpu, arm_semi_cb, "lseek,%x,%x,0",
|
|
gf->hostfd, offset);
|
|
}
|
|
|
|
static uint32_t gdb_flenfn(ARMCPU *cpu, GuestFD *gf)
|
|
{
|
|
return arm_gdb_syscall(cpu, arm_semi_flen_cb, "fstat,%x,%x",
|
|
gf->hostfd, arm_flen_buf(cpu));
|
|
}
|
|
|
|
#define SHFB_MAGIC_0 0x53
|
|
#define SHFB_MAGIC_1 0x48
|
|
#define SHFB_MAGIC_2 0x46
|
|
#define SHFB_MAGIC_3 0x42
|
|
|
|
/* Feature bits reportable in feature byte 0 */
|
|
#define SH_EXT_EXIT_EXTENDED (1 << 0)
|
|
#define SH_EXT_STDOUT_STDERR (1 << 1)
|
|
|
|
static const uint8_t featurefile_data[] = {
|
|
SHFB_MAGIC_0,
|
|
SHFB_MAGIC_1,
|
|
SHFB_MAGIC_2,
|
|
SHFB_MAGIC_3,
|
|
SH_EXT_EXIT_EXTENDED | SH_EXT_STDOUT_STDERR, /* Feature byte 0 */
|
|
};
|
|
|
|
static void init_featurefile_guestfd(int guestfd)
|
|
{
|
|
GuestFD *gf = do_get_guestfd(guestfd);
|
|
|
|
assert(gf);
|
|
gf->type = GuestFDFeatureFile;
|
|
gf->featurefile_offset = 0;
|
|
}
|
|
|
|
static uint32_t featurefile_closefn(ARMCPU *cpu, GuestFD *gf)
|
|
{
|
|
/* Nothing to do */
|
|
return 0;
|
|
}
|
|
|
|
static uint32_t featurefile_writefn(ARMCPU *cpu, GuestFD *gf,
|
|
target_ulong buf, uint32_t len)
|
|
{
|
|
/* This fd can never be open for writing */
|
|
CPUARMState *env = &cpu->env;
|
|
|
|
errno = EBADF;
|
|
return set_swi_errno(env, -1);
|
|
}
|
|
|
|
static uint32_t featurefile_readfn(ARMCPU *cpu, GuestFD *gf,
|
|
target_ulong buf, uint32_t len)
|
|
{
|
|
uint32_t i;
|
|
#ifndef CONFIG_USER_ONLY
|
|
CPUARMState *env = &cpu->env;
|
|
#endif
|
|
char *s;
|
|
|
|
s = lock_user(VERIFY_WRITE, buf, len, 0);
|
|
if (!s) {
|
|
return len;
|
|
}
|
|
|
|
for (i = 0; i < len; i++) {
|
|
if (gf->featurefile_offset >= sizeof(featurefile_data)) {
|
|
break;
|
|
}
|
|
s[i] = featurefile_data[gf->featurefile_offset];
|
|
gf->featurefile_offset++;
|
|
}
|
|
|
|
unlock_user(s, buf, len);
|
|
|
|
/* Return number of bytes not read */
|
|
return len - i;
|
|
}
|
|
|
|
static uint32_t featurefile_isattyfn(ARMCPU *cpu, GuestFD *gf)
|
|
{
|
|
return 0;
|
|
}
|
|
|
|
static uint32_t featurefile_seekfn(ARMCPU *cpu, GuestFD *gf,
|
|
target_ulong offset)
|
|
{
|
|
gf->featurefile_offset = offset;
|
|
return 0;
|
|
}
|
|
|
|
static uint32_t featurefile_flenfn(ARMCPU *cpu, GuestFD *gf)
|
|
{
|
|
return sizeof(featurefile_data);
|
|
}
|
|
|
|
typedef struct GuestFDFunctions {
|
|
sys_closefn *closefn;
|
|
sys_writefn *writefn;
|
|
sys_readfn *readfn;
|
|
sys_isattyfn *isattyfn;
|
|
sys_seekfn *seekfn;
|
|
sys_flenfn *flenfn;
|
|
} GuestFDFunctions;
|
|
|
|
static const GuestFDFunctions guestfd_fns[] = {
|
|
[GuestFDHost] = {
|
|
.closefn = host_closefn,
|
|
.writefn = host_writefn,
|
|
.readfn = host_readfn,
|
|
.isattyfn = host_isattyfn,
|
|
.seekfn = host_seekfn,
|
|
.flenfn = host_flenfn,
|
|
},
|
|
[GuestFDGDB] = {
|
|
.closefn = gdb_closefn,
|
|
.writefn = gdb_writefn,
|
|
.readfn = gdb_readfn,
|
|
.isattyfn = gdb_isattyfn,
|
|
.seekfn = gdb_seekfn,
|
|
.flenfn = gdb_flenfn,
|
|
},
|
|
[GuestFDFeatureFile] = {
|
|
.closefn = featurefile_closefn,
|
|
.writefn = featurefile_writefn,
|
|
.readfn = featurefile_readfn,
|
|
.isattyfn = featurefile_isattyfn,
|
|
.seekfn = featurefile_seekfn,
|
|
.flenfn = featurefile_flenfn,
|
|
},
|
|
};
|
|
|
|
/* Read the input value from the argument block; fail the semihosting
|
|
* call if the memory read fails.
|
|
*/
|
|
#define GET_ARG(n) do { \
|
|
if (is_a64(env)) { \
|
|
if (get_user_u64(arg ## n, args + (n) * 8)) { \
|
|
errno = EFAULT; \
|
|
return set_swi_errno(env, -1); \
|
|
} \
|
|
} else { \
|
|
if (get_user_u32(arg ## n, args + (n) * 4)) { \
|
|
errno = EFAULT; \
|
|
return set_swi_errno(env, -1); \
|
|
} \
|
|
} \
|
|
} while (0)
|
|
|
|
#define SET_ARG(n, val) \
|
|
(is_a64(env) ? \
|
|
put_user_u64(val, args + (n) * 8) : \
|
|
put_user_u32(val, args + (n) * 4))
|
|
|
|
/*
|
|
* Do a semihosting call.
|
|
*
|
|
* The specification always says that the "return register" either
|
|
* returns a specific value or is corrupted, so we don't need to
|
|
* report to our caller whether we are returning a value or trying to
|
|
* leave the register unchanged. We use 0xdeadbeef as the return value
|
|
* when there isn't a defined return value for the call.
|
|
*/
|
|
target_ulong do_arm_semihosting(CPUARMState *env)
|
|
{
|
|
ARMCPU *cpu = env_archcpu(env);
|
|
CPUState *cs = env_cpu(env);
|
|
target_ulong args;
|
|
target_ulong arg0, arg1, arg2, arg3;
|
|
char * s;
|
|
int nr;
|
|
uint32_t ret;
|
|
uint32_t len;
|
|
GuestFD *gf;
|
|
|
|
if (is_a64(env)) {
|
|
/* Note that the syscall number is in W0, not X0 */
|
|
nr = env->xregs[0] & 0xffffffffU;
|
|
args = env->xregs[1];
|
|
} else {
|
|
nr = env->regs[0];
|
|
args = env->regs[1];
|
|
}
|
|
|
|
switch (nr) {
|
|
case TARGET_SYS_OPEN:
|
|
{
|
|
int guestfd;
|
|
|
|
GET_ARG(0);
|
|
GET_ARG(1);
|
|
GET_ARG(2);
|
|
s = lock_user_string(arg0);
|
|
if (!s) {
|
|
errno = EFAULT;
|
|
return set_swi_errno(env, -1);
|
|
}
|
|
if (arg1 >= 12) {
|
|
unlock_user(s, arg0, 0);
|
|
errno = EINVAL;
|
|
return set_swi_errno(env, -1);
|
|
}
|
|
|
|
guestfd = alloc_guestfd();
|
|
if (guestfd < 0) {
|
|
unlock_user(s, arg0, 0);
|
|
errno = EMFILE;
|
|
return set_swi_errno(env, -1);
|
|
}
|
|
|
|
if (strcmp(s, ":tt") == 0) {
|
|
int result_fileno;
|
|
|
|
/*
|
|
* We implement SH_EXT_STDOUT_STDERR, so:
|
|
* open for read == stdin
|
|
* open for write == stdout
|
|
* open for append == stderr
|
|
*/
|
|
if (arg1 < 4) {
|
|
result_fileno = STDIN_FILENO;
|
|
} else if (arg1 < 8) {
|
|
result_fileno = STDOUT_FILENO;
|
|
} else {
|
|
result_fileno = STDERR_FILENO;
|
|
}
|
|
associate_guestfd(guestfd, result_fileno);
|
|
unlock_user(s, arg0, 0);
|
|
return guestfd;
|
|
}
|
|
if (strcmp(s, ":semihosting-features") == 0) {
|
|
unlock_user(s, arg0, 0);
|
|
/* We must fail opens for modes other than 0 ('r') or 1 ('rb') */
|
|
if (arg1 != 0 && arg1 != 1) {
|
|
dealloc_guestfd(guestfd);
|
|
errno = EACCES;
|
|
return set_swi_errno(env, -1);
|
|
}
|
|
init_featurefile_guestfd(guestfd);
|
|
return guestfd;
|
|
}
|
|
|
|
if (use_gdb_syscalls()) {
|
|
arm_semi_open_guestfd = guestfd;
|
|
ret = arm_gdb_syscall(cpu, arm_semi_open_cb, "open,%s,%x,1a4", arg0,
|
|
(int)arg2+1, gdb_open_modeflags[arg1]);
|
|
} else {
|
|
ret = set_swi_errno(env, open(s, open_modeflags[arg1], 0644));
|
|
if (ret == (uint32_t)-1) {
|
|
dealloc_guestfd(guestfd);
|
|
} else {
|
|
associate_guestfd(guestfd, ret);
|
|
ret = guestfd;
|
|
}
|
|
}
|
|
unlock_user(s, arg0, 0);
|
|
return ret;
|
|
}
|
|
case TARGET_SYS_CLOSE:
|
|
GET_ARG(0);
|
|
|
|
gf = get_guestfd(arg0);
|
|
if (!gf) {
|
|
errno = EBADF;
|
|
return set_swi_errno(env, -1);
|
|
}
|
|
|
|
ret = guestfd_fns[gf->type].closefn(cpu, gf);
|
|
dealloc_guestfd(arg0);
|
|
return ret;
|
|
case TARGET_SYS_WRITEC:
|
|
qemu_semihosting_console_outc(env, args);
|
|
return 0xdeadbeef;
|
|
case TARGET_SYS_WRITE0:
|
|
return qemu_semihosting_console_outs(env, args);
|
|
case TARGET_SYS_WRITE:
|
|
GET_ARG(0);
|
|
GET_ARG(1);
|
|
GET_ARG(2);
|
|
len = arg2;
|
|
|
|
gf = get_guestfd(arg0);
|
|
if (!gf) {
|
|
errno = EBADF;
|
|
return set_swi_errno(env, -1);
|
|
}
|
|
|
|
return guestfd_fns[gf->type].writefn(cpu, gf, arg1, len);
|
|
case TARGET_SYS_READ:
|
|
GET_ARG(0);
|
|
GET_ARG(1);
|
|
GET_ARG(2);
|
|
len = arg2;
|
|
|
|
gf = get_guestfd(arg0);
|
|
if (!gf) {
|
|
errno = EBADF;
|
|
return set_swi_errno(env, -1);
|
|
}
|
|
|
|
return guestfd_fns[gf->type].readfn(cpu, gf, arg1, len);
|
|
case TARGET_SYS_READC:
|
|
return qemu_semihosting_console_inc(env);
|
|
case TARGET_SYS_ISTTY:
|
|
GET_ARG(0);
|
|
|
|
gf = get_guestfd(arg0);
|
|
if (!gf) {
|
|
errno = EBADF;
|
|
return set_swi_errno(env, -1);
|
|
}
|
|
|
|
return guestfd_fns[gf->type].isattyfn(cpu, gf);
|
|
case TARGET_SYS_SEEK:
|
|
GET_ARG(0);
|
|
GET_ARG(1);
|
|
|
|
gf = get_guestfd(arg0);
|
|
if (!gf) {
|
|
errno = EBADF;
|
|
return set_swi_errno(env, -1);
|
|
}
|
|
|
|
return guestfd_fns[gf->type].seekfn(cpu, gf, arg1);
|
|
case TARGET_SYS_FLEN:
|
|
GET_ARG(0);
|
|
|
|
gf = get_guestfd(arg0);
|
|
if (!gf) {
|
|
errno = EBADF;
|
|
return set_swi_errno(env, -1);
|
|
}
|
|
|
|
return guestfd_fns[gf->type].flenfn(cpu, gf);
|
|
case TARGET_SYS_TMPNAM:
|
|
qemu_log_mask(LOG_UNIMP, "%s: SYS_TMPNAM not implemented", __func__);
|
|
return -1;
|
|
case TARGET_SYS_REMOVE:
|
|
GET_ARG(0);
|
|
GET_ARG(1);
|
|
if (use_gdb_syscalls()) {
|
|
ret = arm_gdb_syscall(cpu, arm_semi_cb, "unlink,%s",
|
|
arg0, (int)arg1+1);
|
|
} else {
|
|
s = lock_user_string(arg0);
|
|
if (!s) {
|
|
errno = EFAULT;
|
|
return set_swi_errno(env, -1);
|
|
}
|
|
ret = set_swi_errno(env, remove(s));
|
|
unlock_user(s, arg0, 0);
|
|
}
|
|
return ret;
|
|
case TARGET_SYS_RENAME:
|
|
GET_ARG(0);
|
|
GET_ARG(1);
|
|
GET_ARG(2);
|
|
GET_ARG(3);
|
|
if (use_gdb_syscalls()) {
|
|
return arm_gdb_syscall(cpu, arm_semi_cb, "rename,%s,%s",
|
|
arg0, (int)arg1+1, arg2, (int)arg3+1);
|
|
} else {
|
|
char *s2;
|
|
s = lock_user_string(arg0);
|
|
s2 = lock_user_string(arg2);
|
|
if (!s || !s2) {
|
|
errno = EFAULT;
|
|
ret = set_swi_errno(env, -1);
|
|
} else {
|
|
ret = set_swi_errno(env, rename(s, s2));
|
|
}
|
|
if (s2)
|
|
unlock_user(s2, arg2, 0);
|
|
if (s)
|
|
unlock_user(s, arg0, 0);
|
|
return ret;
|
|
}
|
|
case TARGET_SYS_CLOCK:
|
|
return clock() / (CLOCKS_PER_SEC / 100);
|
|
case TARGET_SYS_TIME:
|
|
return set_swi_errno(env, time(NULL));
|
|
case TARGET_SYS_SYSTEM:
|
|
GET_ARG(0);
|
|
GET_ARG(1);
|
|
if (use_gdb_syscalls()) {
|
|
return arm_gdb_syscall(cpu, arm_semi_cb, "system,%s",
|
|
arg0, (int)arg1+1);
|
|
} else {
|
|
s = lock_user_string(arg0);
|
|
if (!s) {
|
|
errno = EFAULT;
|
|
return set_swi_errno(env, -1);
|
|
}
|
|
ret = set_swi_errno(env, system(s));
|
|
unlock_user(s, arg0, 0);
|
|
return ret;
|
|
}
|
|
case TARGET_SYS_ERRNO:
|
|
return get_swi_errno(env);
|
|
case TARGET_SYS_GET_CMDLINE:
|
|
{
|
|
/* Build a command-line from the original argv.
|
|
*
|
|
* The inputs are:
|
|
* * arg0, pointer to a buffer of at least the size
|
|
* specified in arg1.
|
|
* * arg1, size of the buffer pointed to by arg0 in
|
|
* bytes.
|
|
*
|
|
* The outputs are:
|
|
* * arg0, pointer to null-terminated string of the
|
|
* command line.
|
|
* * arg1, length of the string pointed to by arg0.
|
|
*/
|
|
|
|
char *output_buffer;
|
|
size_t input_size;
|
|
size_t output_size;
|
|
int status = 0;
|
|
#if !defined(CONFIG_USER_ONLY)
|
|
const char *cmdline;
|
|
#else
|
|
TaskState *ts = cs->opaque;
|
|
#endif
|
|
GET_ARG(0);
|
|
GET_ARG(1);
|
|
input_size = arg1;
|
|
/* Compute the size of the output string. */
|
|
#if !defined(CONFIG_USER_ONLY)
|
|
cmdline = semihosting_get_cmdline();
|
|
if (cmdline == NULL) {
|
|
cmdline = ""; /* Default to an empty line. */
|
|
}
|
|
output_size = strlen(cmdline) + 1; /* Count terminating 0. */
|
|
#else
|
|
unsigned int i;
|
|
|
|
output_size = ts->info->arg_end - ts->info->arg_start;
|
|
if (!output_size) {
|
|
/*
|
|
* We special-case the "empty command line" case (argc==0).
|
|
* Just provide the terminating 0.
|
|
*/
|
|
output_size = 1;
|
|
}
|
|
#endif
|
|
|
|
if (output_size > input_size) {
|
|
/* Not enough space to store command-line arguments. */
|
|
errno = E2BIG;
|
|
return set_swi_errno(env, -1);
|
|
}
|
|
|
|
/* Adjust the command-line length. */
|
|
if (SET_ARG(1, output_size - 1)) {
|
|
/* Couldn't write back to argument block */
|
|
errno = EFAULT;
|
|
return set_swi_errno(env, -1);
|
|
}
|
|
|
|
/* Lock the buffer on the ARM side. */
|
|
output_buffer = lock_user(VERIFY_WRITE, arg0, output_size, 0);
|
|
if (!output_buffer) {
|
|
errno = EFAULT;
|
|
return set_swi_errno(env, -1);
|
|
}
|
|
|
|
/* Copy the command-line arguments. */
|
|
#if !defined(CONFIG_USER_ONLY)
|
|
pstrcpy(output_buffer, output_size, cmdline);
|
|
#else
|
|
if (output_size == 1) {
|
|
/* Empty command-line. */
|
|
output_buffer[0] = '\0';
|
|
goto out;
|
|
}
|
|
|
|
if (copy_from_user(output_buffer, ts->info->arg_start,
|
|
output_size)) {
|
|
errno = EFAULT;
|
|
status = set_swi_errno(env, -1);
|
|
goto out;
|
|
}
|
|
|
|
/* Separate arguments by white spaces. */
|
|
for (i = 0; i < output_size - 1; i++) {
|
|
if (output_buffer[i] == 0) {
|
|
output_buffer[i] = ' ';
|
|
}
|
|
}
|
|
out:
|
|
#endif
|
|
/* Unlock the buffer on the ARM side. */
|
|
unlock_user(output_buffer, arg0, output_size);
|
|
|
|
return status;
|
|
}
|
|
case TARGET_SYS_HEAPINFO:
|
|
{
|
|
target_ulong retvals[4];
|
|
target_ulong limit;
|
|
int i;
|
|
#ifdef CONFIG_USER_ONLY
|
|
TaskState *ts = cs->opaque;
|
|
#endif
|
|
|
|
GET_ARG(0);
|
|
|
|
#ifdef CONFIG_USER_ONLY
|
|
/*
|
|
* Some C libraries assume the heap immediately follows .bss, so
|
|
* allocate it using sbrk.
|
|
*/
|
|
if (!ts->heap_limit) {
|
|
abi_ulong ret;
|
|
|
|
ts->heap_base = do_brk(0);
|
|
limit = ts->heap_base + ARM_ANGEL_HEAP_SIZE;
|
|
/* Try a big heap, and reduce the size if that fails. */
|
|
for (;;) {
|
|
ret = do_brk(limit);
|
|
if (ret >= limit) {
|
|
break;
|
|
}
|
|
limit = (ts->heap_base >> 1) + (limit >> 1);
|
|
}
|
|
ts->heap_limit = limit;
|
|
}
|
|
|
|
retvals[0] = ts->heap_base;
|
|
retvals[1] = ts->heap_limit;
|
|
retvals[2] = ts->stack_base;
|
|
retvals[3] = 0; /* Stack limit. */
|
|
#else
|
|
limit = ram_size;
|
|
/* TODO: Make this use the limit of the loaded application. */
|
|
retvals[0] = limit / 2;
|
|
retvals[1] = limit;
|
|
retvals[2] = limit; /* Stack base */
|
|
retvals[3] = 0; /* Stack limit. */
|
|
#endif
|
|
|
|
for (i = 0; i < ARRAY_SIZE(retvals); i++) {
|
|
bool fail;
|
|
|
|
if (is_a64(env)) {
|
|
fail = put_user_u64(retvals[i], arg0 + i * 8);
|
|
} else {
|
|
fail = put_user_u32(retvals[i], arg0 + i * 4);
|
|
}
|
|
|
|
if (fail) {
|
|
/* Couldn't write back to argument block */
|
|
errno = EFAULT;
|
|
return set_swi_errno(env, -1);
|
|
}
|
|
}
|
|
return 0;
|
|
}
|
|
case TARGET_SYS_EXIT:
|
|
case TARGET_SYS_EXIT_EXTENDED:
|
|
if (nr == TARGET_SYS_EXIT_EXTENDED || is_a64(env)) {
|
|
/*
|
|
* The A64 version of SYS_EXIT takes a parameter block,
|
|
* so the application-exit type can return a subcode which
|
|
* is the exit status code from the application.
|
|
* SYS_EXIT_EXTENDED is an a new-in-v2.0 optional function
|
|
* which allows A32/T32 guests to also provide a status code.
|
|
*/
|
|
GET_ARG(0);
|
|
GET_ARG(1);
|
|
|
|
if (arg0 == ADP_Stopped_ApplicationExit) {
|
|
ret = arg1;
|
|
} else {
|
|
ret = 1;
|
|
}
|
|
} else {
|
|
/*
|
|
* The A32/T32 version of SYS_EXIT specifies only
|
|
* Stopped_ApplicationExit as normal exit, but does not
|
|
* allow the guest to specify the exit status code.
|
|
* Everything else is considered an error.
|
|
*/
|
|
ret = (args == ADP_Stopped_ApplicationExit) ? 0 : 1;
|
|
}
|
|
gdb_exit(env, ret);
|
|
exit(ret);
|
|
case TARGET_SYS_SYNCCACHE:
|
|
/*
|
|
* Clean the D-cache and invalidate the I-cache for the specified
|
|
* virtual address range. This is a nop for us since we don't
|
|
* implement caches. This is only present on A64.
|
|
*/
|
|
if (is_a64(env)) {
|
|
return 0;
|
|
}
|
|
/* fall through -- invalid for A32/T32 */
|
|
default:
|
|
fprintf(stderr, "qemu: Unsupported SemiHosting SWI 0x%02x\n", nr);
|
|
cpu_dump_state(cs, stderr, 0);
|
|
abort();
|
|
}
|
|
}
|