2 * Copyright (c) 1992 Terrence R. Lambert.
3 * Copyright (c) 1982, 1987, 1990 The Regents of the University of California.
6 * This code is derived from software contributed to Berkeley by
9 * Redistribution and use in source and binary forms, with or without
10 * modification, are permitted provided that the following conditions
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
14 * 2. Redistributions in binary form must reproduce the above copyright
15 * notice, this list of conditions and the following disclaimer in the
16 * documentation and/or other materials provided with the distribution.
17 * 3. All advertising materials mentioning features or use of this software
18 * must display the following acknowledgement:
19 * This product includes software developed by the University of
20 * California, Berkeley and its contributors.
21 * 4. Neither the name of the University nor the names of its contributors
22 * may be used to endorse or promote products derived from this software
23 * without specific prior written permission.
25 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
26 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
27 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
28 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
29 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
30 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
31 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
32 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
33 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
34 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
37 * from: @(#)machdep.c 7.4 (Berkeley) 6/3/91
38 * $Id: machdep.c,v 1.341 1999/06/13 19:20:25 alc Exp $
44 #include "opt_atalk.h"
49 #include "opt_maxmem.h"
50 #include "opt_msgbuf.h"
51 #include "opt_perfmon.h"
53 #include "opt_sysvipc.h"
54 #include "opt_user_ldt.h"
55 #include "opt_userconfig.h"
57 #include <sys/param.h>
58 #include <sys/systm.h>
59 #include <sys/sysproto.h>
60 #include <sys/signalvar.h>
61 #include <sys/kernel.h>
62 #include <sys/linker.h>
65 #include <sys/reboot.h>
66 #include <sys/callout.h>
67 #include <sys/malloc.h>
69 #include <sys/msgbuf.h>
70 #include <sys/sysent.h>
71 #include <sys/sysctl.h>
72 #include <sys/vmmeter.h>
88 #include <vm/vm_param.h>
89 #include <vm/vm_prot.h>
91 #include <vm/vm_kern.h>
92 #include <vm/vm_object.h>
93 #include <vm/vm_page.h>
94 #include <vm/vm_map.h>
95 #include <vm/vm_pager.h>
96 #include <vm/vm_extern.h>
103 #include <net/netisr.h>
105 #include <machine/cpu.h>
106 #include <machine/reg.h>
107 #include <machine/clock.h>
108 #include <machine/specialreg.h>
109 #include <machine/cons.h>
110 #include <machine/bootinfo.h>
111 #include <machine/ipl.h>
112 #include <machine/md_var.h>
113 #include <machine/pcb_ext.h> /* pcb.h included via sys/user.h */
115 #include <machine/smp.h>
116 #include <machine/globaldata.h>
119 #include <machine/perfmon.h>
123 #include <i386/isa/isa_device.h>
125 #include <i386/isa/intr_machdep.h>
127 #include <machine/vm86.h>
128 #include <machine/random.h>
129 #include <sys/ptrace.h>
131 extern void init386 __P((int first));
132 extern void dblfault_handler __P((void));
134 extern void printcpuinfo(void); /* XXX header file */
135 extern void earlysetcpuclass(void); /* same header file */
136 extern void finishidentcpu(void);
137 extern void panicifcpuunsupported(void);
138 extern void initializecpu(void);
140 static void cpu_startup __P((void *));
141 SYSINIT(cpu, SI_SUB_CPU, SI_ORDER_FIRST, cpu_startup, NULL)
143 static MALLOC_DEFINE(M_MBUF, "mbuf", "mbuf");
145 int _udatasel, _ucodesel;
148 #if defined(SWTCH_OPTIM_STATS)
149 extern int swtch_optim_stats;
150 SYSCTL_INT(_debug, OID_AUTO, swtch_optim_stats,
151 CTLFLAG_RD, &swtch_optim_stats, 0, "");
152 SYSCTL_INT(_debug, OID_AUTO, tlb_flush_count,
153 CTLFLAG_RD, &tlb_flush_count, 0, "");
157 static int ispc98 = 1;
159 static int ispc98 = 0;
161 SYSCTL_INT(_machdep, OID_AUTO, ispc98, CTLFLAG_RD, &ispc98, 0, "");
167 sysctl_hw_physmem SYSCTL_HANDLER_ARGS
169 int error = sysctl_handle_int(oidp, 0, ctob(physmem), req);
173 SYSCTL_PROC(_hw, HW_PHYSMEM, physmem, CTLTYPE_INT|CTLFLAG_RD,
174 0, 0, sysctl_hw_physmem, "I", "");
177 sysctl_hw_usermem SYSCTL_HANDLER_ARGS
179 int error = sysctl_handle_int(oidp, 0,
180 ctob(physmem - cnt.v_wire_count), req);
184 SYSCTL_PROC(_hw, HW_USERMEM, usermem, CTLTYPE_INT|CTLFLAG_RD,
185 0, 0, sysctl_hw_usermem, "I", "");
188 sysctl_hw_availpages SYSCTL_HANDLER_ARGS
190 int error = sysctl_handle_int(oidp, 0,
191 i386_btop(avail_end - avail_start), req);
195 SYSCTL_PROC(_hw, OID_AUTO, availpages, CTLTYPE_INT|CTLFLAG_RD,
196 0, 0, sysctl_hw_availpages, "I", "");
199 sysctl_machdep_msgbuf SYSCTL_HANDLER_ARGS
203 /* Unwind the buffer, so that it's linear (possibly starting with
204 * some initial nulls).
206 error=sysctl_handle_opaque(oidp,msgbufp->msg_ptr+msgbufp->msg_bufr,
207 msgbufp->msg_size-msgbufp->msg_bufr,req);
208 if(error) return(error);
209 if(msgbufp->msg_bufr>0) {
210 error=sysctl_handle_opaque(oidp,msgbufp->msg_ptr,
211 msgbufp->msg_bufr,req);
216 SYSCTL_PROC(_machdep, OID_AUTO, msgbuf, CTLTYPE_STRING|CTLFLAG_RD,
217 0, 0, sysctl_machdep_msgbuf, "A","Contents of kernel message buffer");
219 static int msgbuf_clear;
222 sysctl_machdep_msgbuf_clear SYSCTL_HANDLER_ARGS
225 error = sysctl_handle_int(oidp, oidp->oid_arg1, oidp->oid_arg2,
227 if (!error && req->newptr) {
228 /* Clear the buffer and reset write pointer */
229 bzero(msgbufp->msg_ptr,msgbufp->msg_size);
230 msgbufp->msg_bufr=msgbufp->msg_bufx=0;
236 SYSCTL_PROC(_machdep, OID_AUTO, msgbuf_clear, CTLTYPE_INT|CTLFLAG_RW,
237 &msgbuf_clear, 0, sysctl_machdep_msgbuf_clear, "I",
238 "Clear kernel message buffer");
240 int bootverbose = 0, Maxmem = 0;
243 vm_offset_t phys_avail[10];
245 /* must be 2 less so 0 0 can signal end of chunks */
246 #define PHYS_AVAIL_ARRAY_END ((sizeof(phys_avail) / sizeof(vm_offset_t)) - 2)
248 static vm_offset_t buffer_sva, buffer_eva;
249 vm_offset_t clean_sva, clean_eva;
250 static vm_offset_t pager_sva, pager_eva;
252 extern struct isa_driver npxdriver;
255 #define offsetof(type, member) ((size_t)(&((type *)0)->member))
268 if (boothowto & RB_VERBOSE)
272 * Good {morning,afternoon,evening,night}.
278 panicifcpuunsupported();
282 printf("real memory = %u (%uK bytes)\n", ptoa(Maxmem), ptoa(Maxmem) / 1024);
284 * Display any holes after the first chunk of extended memory.
289 printf("Physical memory chunk(s):\n");
290 for (indx = 0; phys_avail[indx + 1] != 0; indx += 2) {
291 int size1 = phys_avail[indx + 1] - phys_avail[indx];
293 printf("0x%08x - 0x%08x, %u bytes (%u pages)\n",
294 phys_avail[indx], phys_avail[indx + 1] - 1, size1,
300 * Calculate callout wheel size
302 for (callwheelsize = 1, callwheelbits = 0;
303 callwheelsize < ncallout;
304 callwheelsize <<= 1, ++callwheelbits)
306 callwheelmask = callwheelsize - 1;
309 * Allocate space for system data structures.
310 * The first available kernel virtual address is in "v".
311 * As pages of kernel virtual memory are allocated, "v" is incremented.
312 * As pages of memory are allocated and cleared,
313 * "firstaddr" is incremented.
314 * An index into the kernel page table corresponding to the
315 * virtual memory address maintained in "v" is kept in "mapaddr".
319 * Make two passes. The first pass calculates how much memory is
320 * needed and allocates it. The second pass assigns virtual
321 * addresses to the various data structures.
325 v = (caddr_t)firstaddr;
327 #define valloc(name, type, num) \
328 (name) = (type *)v; v = (caddr_t)((name)+(num))
329 #define valloclim(name, type, num, lim) \
330 (name) = (type *)v; v = (caddr_t)((lim) = ((name)+(num)))
332 valloc(callout, struct callout, ncallout);
333 valloc(callwheel, struct callout_tailq, callwheelsize);
335 valloc(shmsegs, struct shmid_ds, shminfo.shmmni);
338 valloc(sema, struct semid_ds, seminfo.semmni);
339 valloc(sem, struct sem, seminfo.semmns);
340 /* This is pretty disgusting! */
341 valloc(semu, int, (seminfo.semmnu * seminfo.semusz) / sizeof(int));
344 valloc(msgpool, char, msginfo.msgmax);
345 valloc(msgmaps, struct msgmap, msginfo.msgseg);
346 valloc(msghdrs, struct msg, msginfo.msgtql);
347 valloc(msqids, struct msqid_ds, msginfo.msgmni);
353 nbuf += min((physmem - 1024) / 8, 2048);
355 nswbuf = max(min(nbuf/4, 64), 16);
357 valloc(swbuf, struct buf, nswbuf);
358 valloc(buf, struct buf, nbuf);
362 * End of first pass, size has been calculated so allocate memory
364 if (firstaddr == 0) {
365 size = (vm_size_t)(v - firstaddr);
366 firstaddr = (int)kmem_alloc(kernel_map, round_page(size));
368 panic("startup: no room for tables");
373 * End of second pass, addresses have been assigned
375 if ((vm_size_t)(v - firstaddr) != size)
376 panic("startup: table size inconsistency");
378 clean_map = kmem_suballoc(kernel_map, &clean_sva, &clean_eva,
379 (nbuf*BKVASIZE) + (nswbuf*MAXPHYS) + pager_map_size);
380 buffer_map = kmem_suballoc(clean_map, &buffer_sva, &buffer_eva,
382 pager_map = kmem_suballoc(clean_map, &pager_sva, &pager_eva,
383 (nswbuf*MAXPHYS) + pager_map_size);
384 pager_map->system_map = 1;
385 exec_map = kmem_suballoc(kernel_map, &minaddr, &maxaddr,
386 (16*(ARG_MAX+(PAGE_SIZE*3))));
389 * Finally, allocate mbuf pool. Since mclrefcnt is an off-size
390 * we use the more space efficient malloc in place of kmem_alloc.
393 vm_offset_t mb_map_size;
396 /* Allow override of NMBCLUSTERS from the kernel environment */
397 if (getenv_int("kern.ipc.nmbclusters", &xclusters) &&
398 xclusters > nmbclusters)
399 nmbclusters = xclusters;
401 mb_map_size = nmbufs * MSIZE + nmbclusters * MCLBYTES;
402 mb_map_size = roundup2(mb_map_size, max(MCLBYTES, PAGE_SIZE));
403 mclrefcnt = malloc(mb_map_size / MCLBYTES, M_MBUF, M_NOWAIT);
404 bzero(mclrefcnt, mb_map_size / MCLBYTES);
405 mb_map = kmem_suballoc(kmem_map, (vm_offset_t *)&mbutl, &maxaddr,
407 mb_map->system_map = 1;
411 * Initialize callouts
413 SLIST_INIT(&callfree);
414 for (i = 0; i < ncallout; i++) {
415 callout_init(&callout[i]);
416 callout[i].c_flags = CALLOUT_LOCAL_ALLOC;
417 SLIST_INSERT_HEAD(&callfree, &callout[i], c_links.sle);
420 for (i = 0; i < callwheelsize; i++) {
421 TAILQ_INIT(&callwheel[i]);
424 #if defined(USERCONFIG)
426 cninit(); /* the preferred console may have changed */
429 printf("avail memory = %u (%uK bytes)\n", ptoa(cnt.v_free_count),
430 ptoa(cnt.v_free_count) / 1024);
433 * Set up buffers, so they can be used to read disk labels.
436 vm_pager_bufferinit();
440 * OK, enough kmem_alloc/malloc state should be up, lets get on with it!
442 mp_start(); /* fire up the APs and APICs */
448 register_netisr(num, handler)
453 if (num < 0 || num >= (sizeof(netisrs)/sizeof(*netisrs)) ) {
454 printf("register_netisr: bad isr number: %d\n", num);
457 netisrs[num] = handler;
465 const struct netisrtab *nit;
467 nit = (const struct netisrtab *)data;
468 register_netisr(nit->nit_num, nit->nit_isr);
472 * Send an interrupt to process.
474 * Stack is set up to allow sigcode stored
475 * at top to call routine, followed by kcall
476 * to sigreturn routine below. After sigreturn
477 * resets the signal mask, the stack, and the
478 * frame pointer, it returns to the user
482 sendsig(catcher, sig, mask, code)
487 register struct proc *p = curproc;
488 register struct trapframe *regs;
489 register struct sigframe *fp;
491 struct sigacts *psp = p->p_sigacts;
494 regs = p->p_md.md_regs;
495 oonstack = psp->ps_sigstk.ss_flags & SS_ONSTACK;
497 * Allocate and validate space for the signal handler context.
499 if ((psp->ps_flags & SAS_ALTSTACK) && !oonstack &&
500 (psp->ps_sigonstack & sigmask(sig))) {
501 fp = (struct sigframe *)(psp->ps_sigstk.ss_sp +
502 psp->ps_sigstk.ss_size - sizeof(struct sigframe));
503 psp->ps_sigstk.ss_flags |= SS_ONSTACK;
505 fp = (struct sigframe *)regs->tf_esp - 1;
509 * grow() will return FALSE if the fp will not fit inside the stack
510 * and the stack can not be grown. useracc will return FALSE
511 * if access is denied.
513 if ((grow_stack (p, (int)fp) == FALSE) ||
514 (useracc((caddr_t)fp, sizeof(struct sigframe), B_WRITE) == FALSE)) {
516 * Process has trashed its stack; give it an illegal
517 * instruction to halt it in its tracks.
519 SIGACTION(p, SIGILL) = SIG_DFL;
520 sig = sigmask(SIGILL);
521 p->p_sigignore &= ~sig;
522 p->p_sigcatch &= ~sig;
523 p->p_sigmask &= ~sig;
529 * Build the argument list for the signal handler.
531 if (p->p_sysent->sv_sigtbl) {
532 if (sig < p->p_sysent->sv_sigsize)
533 sig = p->p_sysent->sv_sigtbl[sig];
535 sig = p->p_sysent->sv_sigsize + 1;
539 sf.sf_scp = &fp->sf_sc;
540 sf.sf_addr = (char *) regs->tf_err;
541 sf.sf_handler = catcher;
543 /* save scratch registers */
544 sf.sf_sc.sc_eax = regs->tf_eax;
545 sf.sf_sc.sc_ebx = regs->tf_ebx;
546 sf.sf_sc.sc_ecx = regs->tf_ecx;
547 sf.sf_sc.sc_edx = regs->tf_edx;
548 sf.sf_sc.sc_esi = regs->tf_esi;
549 sf.sf_sc.sc_edi = regs->tf_edi;
550 sf.sf_sc.sc_cs = regs->tf_cs;
551 sf.sf_sc.sc_ds = regs->tf_ds;
552 sf.sf_sc.sc_ss = regs->tf_ss;
553 sf.sf_sc.sc_es = regs->tf_es;
554 sf.sf_sc.sc_fs = regs->tf_fs;
555 sf.sf_sc.sc_isp = regs->tf_isp;
558 * Build the signal context to be used by sigreturn.
560 sf.sf_sc.sc_onstack = oonstack;
561 sf.sf_sc.sc_mask = mask;
562 sf.sf_sc.sc_sp = regs->tf_esp;
563 sf.sf_sc.sc_fp = regs->tf_ebp;
564 sf.sf_sc.sc_pc = regs->tf_eip;
565 sf.sf_sc.sc_ps = regs->tf_eflags;
566 sf.sf_sc.sc_trapno = regs->tf_trapno;
567 sf.sf_sc.sc_err = regs->tf_err;
570 * If we're a vm86 process, we want to save the segment registers.
571 * We also change eflags to be our emulated eflags, not the actual
574 if (regs->tf_eflags & PSL_VM) {
575 struct trapframe_vm86 *tf = (struct trapframe_vm86 *)regs;
576 struct vm86_kernel *vm86 = &p->p_addr->u_pcb.pcb_ext->ext_vm86;
578 sf.sf_sc.sc_gs = tf->tf_vm86_gs;
579 sf.sf_sc.sc_fs = tf->tf_vm86_fs;
580 sf.sf_sc.sc_es = tf->tf_vm86_es;
581 sf.sf_sc.sc_ds = tf->tf_vm86_ds;
583 if (vm86->vm86_has_vme == 0)
584 sf.sf_sc.sc_ps = (tf->tf_eflags & ~(PSL_VIF | PSL_VIP))
585 | (vm86->vm86_eflags & (PSL_VIF | PSL_VIP));
588 * We should never have PSL_T set when returning from vm86
589 * mode. It may be set here if we deliver a signal before
590 * getting to vm86 mode, so turn it off.
592 * Clear PSL_NT to inhibit T_TSSFLT faults on return from
593 * syscalls made by the signal handler. This just avoids
594 * wasting time for our lazy fixup of such faults. PSL_NT
595 * does nothing in vm86 mode, but vm86 programs can set it
596 * almost legitimately in probes for old cpu types.
598 tf->tf_eflags &= ~(PSL_VM | PSL_NT | PSL_T | PSL_VIF | PSL_VIP);
602 * Copy the sigframe out to the user's stack.
604 if (copyout(&sf, fp, sizeof(struct sigframe)) != 0) {
606 * Something is wrong with the stack pointer.
607 * ...Kill the process.
612 regs->tf_esp = (int)fp;
613 regs->tf_eip = PS_STRINGS - *(p->p_sysent->sv_szsigcode);
614 regs->tf_cs = _ucodesel;
615 regs->tf_ds = _udatasel;
616 regs->tf_es = _udatasel;
617 regs->tf_fs = _udatasel;
618 regs->tf_ss = _udatasel;
622 * System call to cleanup state after a signal
623 * has been taken. Reset signal mask and
624 * stack state from context left by sendsig (above).
625 * Return to previous pc and psl as specified by
626 * context left by sendsig. Check carefully to
627 * make sure that the user has not modified the
628 * state to gain improper privileges.
633 struct sigreturn_args /* {
634 struct sigcontext *sigcntxp;
637 register struct sigcontext *scp;
638 register struct sigframe *fp;
639 register struct trapframe *regs = p->p_md.md_regs;
643 * (XXX old comment) regs->tf_esp points to the return address.
644 * The user scp pointer is above that.
645 * The return address is faked in the signal trampoline code
649 fp = (struct sigframe *)
650 ((caddr_t)scp - offsetof(struct sigframe, sf_sc));
652 if (useracc((caddr_t)fp, sizeof (*fp), B_WRITE) == 0)
656 if (eflags & PSL_VM) {
657 struct trapframe_vm86 *tf = (struct trapframe_vm86 *)regs;
658 struct vm86_kernel *vm86;
661 * if pcb_ext == 0 or vm86_inited == 0, the user hasn't
662 * set up the vm86 area, and we can't enter vm86 mode.
664 if (p->p_addr->u_pcb.pcb_ext == 0)
666 vm86 = &p->p_addr->u_pcb.pcb_ext->ext_vm86;
667 if (vm86->vm86_inited == 0)
670 /* go back to user mode if both flags are set */
671 if ((eflags & PSL_VIP) && (eflags & PSL_VIF))
672 trapsignal(p, SIGBUS, 0);
674 if (vm86->vm86_has_vme) {
675 eflags = (tf->tf_eflags & ~VME_USERCHANGE) |
676 (eflags & VME_USERCHANGE) | PSL_VM;
678 vm86->vm86_eflags = eflags; /* save VIF, VIP */
679 eflags = (tf->tf_eflags & ~VM_USERCHANGE) | (eflags & VM_USERCHANGE) | PSL_VM;
681 tf->tf_vm86_ds = scp->sc_ds;
682 tf->tf_vm86_es = scp->sc_es;
683 tf->tf_vm86_fs = scp->sc_fs;
684 tf->tf_vm86_gs = scp->sc_gs;
685 tf->tf_ds = _udatasel;
686 tf->tf_es = _udatasel;
687 tf->tf_fs = _udatasel;
690 * Don't allow users to change privileged or reserved flags.
692 #define EFLAGS_SECURE(ef, oef) ((((ef) ^ (oef)) & ~PSL_USERCHANGE) == 0)
694 * XXX do allow users to change the privileged flag PSL_RF.
695 * The cpu sets PSL_RF in tf_eflags for faults. Debuggers
696 * should sometimes set it there too. tf_eflags is kept in
697 * the signal context during signal handling and there is no
698 * other place to remember it, so the PSL_RF bit may be
699 * corrupted by the signal handler without us knowing.
700 * Corruption of the PSL_RF bit at worst causes one more or
701 * one less debugger trap, so allowing it is fairly harmless.
703 if (!EFLAGS_SECURE(eflags & ~PSL_RF, regs->tf_eflags & ~PSL_RF)) {
705 printf("sigreturn: eflags = 0x%x\n", eflags);
711 * Don't allow users to load a valid privileged %cs. Let the
712 * hardware check for invalid selectors, excess privilege in
713 * other selectors, invalid %eip's and invalid %esp's.
715 #define CS_SECURE(cs) (ISPL(cs) == SEL_UPL)
716 if (!CS_SECURE(scp->sc_cs)) {
718 printf("sigreturn: cs = 0x%x\n", scp->sc_cs);
720 trapsignal(p, SIGBUS, T_PROTFLT);
723 regs->tf_ds = scp->sc_ds;
724 regs->tf_es = scp->sc_es;
725 regs->tf_fs = scp->sc_fs;
728 /* restore scratch registers */
729 regs->tf_eax = scp->sc_eax;
730 regs->tf_ebx = scp->sc_ebx;
731 regs->tf_ecx = scp->sc_ecx;
732 regs->tf_edx = scp->sc_edx;
733 regs->tf_esi = scp->sc_esi;
734 regs->tf_edi = scp->sc_edi;
735 regs->tf_cs = scp->sc_cs;
736 regs->tf_ss = scp->sc_ss;
737 regs->tf_isp = scp->sc_isp;
739 if (useracc((caddr_t)scp, sizeof (*scp), B_WRITE) == 0)
742 if (scp->sc_onstack & 01)
743 p->p_sigacts->ps_sigstk.ss_flags |= SS_ONSTACK;
745 p->p_sigacts->ps_sigstk.ss_flags &= ~SS_ONSTACK;
746 p->p_sigmask = scp->sc_mask & ~sigcantmask;
747 regs->tf_ebp = scp->sc_fp;
748 regs->tf_esp = scp->sc_sp;
749 regs->tf_eip = scp->sc_pc;
750 regs->tf_eflags = eflags;
755 * Machine dependent boot() routine
757 * I haven't seen anything to put here yet
758 * Possibly some stuff might be grafted back here from boot()
766 * Shutdown the CPU as much as possible
776 * Clear registers on exec
779 setregs(p, entry, stack, ps_strings)
785 struct trapframe *regs = p->p_md.md_regs;
786 struct pcb *pcb = &p->p_addr->u_pcb;
789 /* was i386_user_cleanup() in NetBSD */
793 currentldt = _default_ldt;
795 kmem_free(kernel_map, (vm_offset_t)pcb->pcb_ldt,
796 pcb->pcb_ldt_len * sizeof(union descriptor));
797 pcb->pcb_ldt_len = (int)pcb->pcb_ldt = 0;
801 bzero((char *)regs, sizeof(struct trapframe));
802 regs->tf_eip = entry;
803 regs->tf_esp = stack;
804 regs->tf_eflags = PSL_USER | (regs->tf_eflags & PSL_T);
805 regs->tf_ss = _udatasel;
806 regs->tf_ds = _udatasel;
807 regs->tf_es = _udatasel;
808 regs->tf_fs = _udatasel;
809 regs->tf_cs = _ucodesel;
811 /* PS_STRINGS value for BSD/OS binaries. It is 0 for non-BSD/OS. */
812 regs->tf_ebx = ps_strings;
814 /* reset %gs as well */
815 pcb->pcb_gs = _udatasel;
821 * Initialize the math emulator (if any) for the current process.
822 * Actually, just clear the bit that says that the emulator has
823 * been initialized. Initialization is delayed until the process
824 * traps to the emulator (if it is done at all) mainly because
825 * emulators don't provide an entry point for initialization.
827 p->p_addr->u_pcb.pcb_flags &= ~FP_SOFTFP;
830 * Arrange to trap the next npx or `fwait' instruction (see npx.c
831 * for why fwait must be trapped at least if there is an npx or an
832 * emulator). This is mainly to handle the case where npx0 is not
833 * configured, since the npx routines normally set up the trap
834 * otherwise. It should be done only at boot time, but doing it
835 * here allows modifying `npx_exists' for testing the emulator on
836 * systems with an npx.
838 load_cr0(rcr0() | CR0_MP | CR0_TS);
841 /* Initialize the npx (if any) for the current process. */
842 npxinit(__INITIAL_NPXCW__);
846 * XXX - Linux emulator
847 * Make sure sure edx is 0x0 on entry. Linux binaries depend
854 sysctl_machdep_adjkerntz SYSCTL_HANDLER_ARGS
857 error = sysctl_handle_int(oidp, oidp->oid_arg1, oidp->oid_arg2,
859 if (!error && req->newptr)
864 SYSCTL_PROC(_machdep, CPU_ADJKERNTZ, adjkerntz, CTLTYPE_INT|CTLFLAG_RW,
865 &adjkerntz, 0, sysctl_machdep_adjkerntz, "I", "");
867 SYSCTL_INT(_machdep, CPU_DISRTCSET, disable_rtc_set,
868 CTLFLAG_RW, &disable_rtc_set, 0, "");
870 SYSCTL_STRUCT(_machdep, CPU_BOOTINFO, bootinfo,
871 CTLFLAG_RD, &bootinfo, bootinfo, "");
873 SYSCTL_INT(_machdep, CPU_WALLCLOCK, wall_cmos_clock,
874 CTLFLAG_RW, &wall_cmos_clock, 0, "");
877 * Initialize 386 and configure to run kernel
881 * Initialize segments & interrupt table
886 union descriptor gdt[NGDT * NCPU]; /* global descriptor table */
888 union descriptor gdt[NGDT]; /* global descriptor table */
890 static struct gate_descriptor idt0[NIDT];
891 struct gate_descriptor *idt = &idt0[0]; /* interrupt descriptor table */
892 union descriptor ldt[NLDT]; /* local descriptor table */
894 /* table descriptors - used to load tables by microp */
895 struct region_descriptor r_gdt, r_idt;
899 extern struct segment_descriptor common_tssd, *tss_gdt;
901 int private_tss; /* flag indicating private tss */
903 #if defined(I586_CPU) && !defined(NO_F00F_HACK)
904 extern int has_f00f_bug;
907 static struct i386tss dblfault_tss;
908 static char dblfault_stack[PAGE_SIZE];
910 extern struct user *proc0paddr;
913 /* software prototypes -- in more palatable form */
914 struct soft_segment_descriptor gdt_segs[] = {
915 /* GNULL_SEL 0 Null Descriptor */
916 { 0x0, /* segment base address */
918 0, /* segment type */
919 0, /* segment descriptor priority level */
920 0, /* segment descriptor present */
922 0, /* default 32 vs 16 bit size */
923 0 /* limit granularity (byte/page units)*/ },
924 /* GCODE_SEL 1 Code Descriptor for kernel */
925 { 0x0, /* segment base address */
926 0xfffff, /* length - all address space */
927 SDT_MEMERA, /* segment type */
928 0, /* segment descriptor priority level */
929 1, /* segment descriptor present */
931 1, /* default 32 vs 16 bit size */
932 1 /* limit granularity (byte/page units)*/ },
933 /* GDATA_SEL 2 Data Descriptor for kernel */
934 { 0x0, /* segment base address */
935 0xfffff, /* length - all address space */
936 SDT_MEMRWA, /* segment type */
937 0, /* segment descriptor priority level */
938 1, /* segment descriptor present */
940 1, /* default 32 vs 16 bit size */
941 1 /* limit granularity (byte/page units)*/ },
942 /* GPRIV_SEL 3 SMP Per-Processor Private Data Descriptor */
943 { 0x0, /* segment base address */
944 0xfffff, /* length - all address space */
945 SDT_MEMRWA, /* segment type */
946 0, /* segment descriptor priority level */
947 1, /* segment descriptor present */
949 1, /* default 32 vs 16 bit size */
950 1 /* limit granularity (byte/page units)*/ },
951 /* GPROC0_SEL 4 Proc 0 Tss Descriptor */
953 0x0, /* segment base address */
954 sizeof(struct i386tss)-1,/* length - all address space */
955 SDT_SYS386TSS, /* segment type */
956 0, /* segment descriptor priority level */
957 1, /* segment descriptor present */
959 0, /* unused - default 32 vs 16 bit size */
960 0 /* limit granularity (byte/page units)*/ },
961 /* GLDT_SEL 5 LDT Descriptor */
962 { (int) ldt, /* segment base address */
963 sizeof(ldt)-1, /* length - all address space */
964 SDT_SYSLDT, /* segment type */
965 SEL_UPL, /* segment descriptor priority level */
966 1, /* segment descriptor present */
968 0, /* unused - default 32 vs 16 bit size */
969 0 /* limit granularity (byte/page units)*/ },
970 /* GUSERLDT_SEL 6 User LDT Descriptor per process */
971 { (int) ldt, /* segment base address */
972 (512 * sizeof(union descriptor)-1), /* length */
973 SDT_SYSLDT, /* segment type */
974 0, /* segment descriptor priority level */
975 1, /* segment descriptor present */
977 0, /* unused - default 32 vs 16 bit size */
978 0 /* limit granularity (byte/page units)*/ },
979 /* GTGATE_SEL 7 Null Descriptor - Placeholder */
980 { 0x0, /* segment base address */
981 0x0, /* length - all address space */
982 0, /* segment type */
983 0, /* segment descriptor priority level */
984 0, /* segment descriptor present */
986 0, /* default 32 vs 16 bit size */
987 0 /* limit granularity (byte/page units)*/ },
988 /* GPANIC_SEL 8 Panic Tss Descriptor */
989 { (int) &dblfault_tss, /* segment base address */
990 sizeof(struct i386tss)-1,/* length - all address space */
991 SDT_SYS386TSS, /* segment type */
992 0, /* segment descriptor priority level */
993 1, /* segment descriptor present */
995 0, /* unused - default 32 vs 16 bit size */
996 0 /* limit granularity (byte/page units)*/ },
997 /* GAPMCODE32_SEL 9 APM BIOS 32-bit interface (32bit Code) */
998 { 0, /* segment base address (overwritten by APM) */
999 0xfffff, /* length */
1000 SDT_MEMERA, /* segment type */
1001 0, /* segment descriptor priority level */
1002 1, /* segment descriptor present */
1004 1, /* default 32 vs 16 bit size */
1005 1 /* limit granularity (byte/page units)*/ },
1006 /* GAPMCODE16_SEL 10 APM BIOS 32-bit interface (16bit Code) */
1007 { 0, /* segment base address (overwritten by APM) */
1008 0xfffff, /* length */
1009 SDT_MEMERA, /* segment type */
1010 0, /* segment descriptor priority level */
1011 1, /* segment descriptor present */
1013 0, /* default 32 vs 16 bit size */
1014 1 /* limit granularity (byte/page units)*/ },
1015 /* GAPMDATA_SEL 11 APM BIOS 32-bit interface (Data) */
1016 { 0, /* segment base address (overwritten by APM) */
1017 0xfffff, /* length */
1018 SDT_MEMRWA, /* segment type */
1019 0, /* segment descriptor priority level */
1020 1, /* segment descriptor present */
1022 1, /* default 32 vs 16 bit size */
1023 1 /* limit granularity (byte/page units)*/ },
1026 static struct soft_segment_descriptor ldt_segs[] = {
1027 /* Null Descriptor - overwritten by call gate */
1028 { 0x0, /* segment base address */
1029 0x0, /* length - all address space */
1030 0, /* segment type */
1031 0, /* segment descriptor priority level */
1032 0, /* segment descriptor present */
1034 0, /* default 32 vs 16 bit size */
1035 0 /* limit granularity (byte/page units)*/ },
1036 /* Null Descriptor - overwritten by call gate */
1037 { 0x0, /* segment base address */
1038 0x0, /* length - all address space */
1039 0, /* segment type */
1040 0, /* segment descriptor priority level */
1041 0, /* segment descriptor present */
1043 0, /* default 32 vs 16 bit size */
1044 0 /* limit granularity (byte/page units)*/ },
1045 /* Null Descriptor - overwritten by call gate */
1046 { 0x0, /* segment base address */
1047 0x0, /* length - all address space */
1048 0, /* segment type */
1049 0, /* segment descriptor priority level */
1050 0, /* segment descriptor present */
1052 0, /* default 32 vs 16 bit size */
1053 0 /* limit granularity (byte/page units)*/ },
1054 /* Code Descriptor for user */
1055 { 0x0, /* segment base address */
1056 0xfffff, /* length - all address space */
1057 SDT_MEMERA, /* segment type */
1058 SEL_UPL, /* segment descriptor priority level */
1059 1, /* segment descriptor present */
1061 1, /* default 32 vs 16 bit size */
1062 1 /* limit granularity (byte/page units)*/ },
1063 /* Null Descriptor - overwritten by call gate */
1064 { 0x0, /* segment base address */
1065 0x0, /* length - all address space */
1066 0, /* segment type */
1067 0, /* segment descriptor priority level */
1068 0, /* segment descriptor present */
1070 0, /* default 32 vs 16 bit size */
1071 0 /* limit granularity (byte/page units)*/ },
1072 /* Data Descriptor for user */
1073 { 0x0, /* segment base address */
1074 0xfffff, /* length - all address space */
1075 SDT_MEMRWA, /* segment type */
1076 SEL_UPL, /* segment descriptor priority level */
1077 1, /* segment descriptor present */
1079 1, /* default 32 vs 16 bit size */
1080 1 /* limit granularity (byte/page units)*/ },
1084 setidt(idx, func, typ, dpl, selec)
1091 struct gate_descriptor *ip;
1094 ip->gd_looffset = (int)func;
1095 ip->gd_selector = selec;
1101 ip->gd_hioffset = ((int)func)>>16 ;
1104 #define IDTVEC(name) __CONCAT(X,name)
1107 IDTVEC(div), IDTVEC(dbg), IDTVEC(nmi), IDTVEC(bpt), IDTVEC(ofl),
1108 IDTVEC(bnd), IDTVEC(ill), IDTVEC(dna), IDTVEC(fpusegm),
1109 IDTVEC(tss), IDTVEC(missing), IDTVEC(stk), IDTVEC(prot),
1110 IDTVEC(page), IDTVEC(mchk), IDTVEC(rsvd), IDTVEC(fpu), IDTVEC(align),
1111 IDTVEC(syscall), IDTVEC(int0x80_syscall);
1115 struct segment_descriptor *sd;
1116 struct soft_segment_descriptor *ssd;
1118 ssd->ssd_base = (sd->sd_hibase << 24) | sd->sd_lobase;
1119 ssd->ssd_limit = (sd->sd_hilimit << 16) | sd->sd_lolimit;
1120 ssd->ssd_type = sd->sd_type;
1121 ssd->ssd_dpl = sd->sd_dpl;
1122 ssd->ssd_p = sd->sd_p;
1123 ssd->ssd_def32 = sd->sd_def32;
1124 ssd->ssd_gran = sd->sd_gran;
1127 #define PHYSMAP_SIZE (2 * 8)
1130 getmemsize(int first)
1132 int i, physmap_idx, pa_indx;
1133 u_int basemem, extmem;
1134 int speculative_mprobe = FALSE;
1135 struct vm86frame vmf;
1136 struct vm86context vmc;
1137 vm_offset_t pa, physmap[PHYSMAP_SIZE];
1148 bzero(&vmf, sizeof(struct vm86frame));
1149 bzero(physmap, sizeof(physmap));
1151 vm86_intcall(0x12, &vmf);
1152 basemem = vmf.vmf_ax;
1153 if (basemem > 640) {
1154 printf("Preposterous BIOS basemem of %uK, truncating to 640K\n",
1160 * XXX if biosbasemem is now < 640, there is `hole'
1161 * between the end of base memory and the start of
1162 * ISA memory. The hole may be empty or it may
1163 * contain BIOS code or data. Map it read/write so
1164 * that the BIOS can write to it. (Memory from 0 to
1165 * the physical end of the kernel is mapped read-only
1166 * to begin with and then parts of it are remapped.
1167 * The parts that aren't remapped form holes that
1168 * remain read-only and are unused by the kernel.
1169 * The base memory area is below the physical end of
1170 * the kernel and right now forms a read-only hole.
1171 * The part of it from PAGE_SIZE to
1172 * (trunc_page(biosbasemem * 1024) - 1) will be
1173 * remapped and used by the kernel later.)
1175 * This code is similar to the code used in
1176 * pmap_mapdev, but since no memory needs to be
1177 * allocated we simply change the mapping.
1179 for (pa = trunc_page(basemem * 1024);
1180 pa < ISA_HOLE_START; pa += PAGE_SIZE) {
1181 pte = (pt_entry_t)vtopte(pa + KERNBASE);
1182 *pte = pa | PG_RW | PG_V;
1186 * if basemem != 640, map pages r/w into vm86 page table so
1187 * that the bios can scribble on it.
1189 pte = (pt_entry_t)vm86paddr;
1190 for (i = basemem / 4; i < 160; i++)
1191 pte[i] = (i << PAGE_SHIFT) | PG_V | PG_RW | PG_U;
1194 * map page 1 R/W into the kernel page table so we can use it
1195 * as a buffer. The kernel will unmap this page later.
1197 pte = (pt_entry_t)vtopte(KERNBASE + (1 << PAGE_SHIFT));
1198 *pte = (1 << PAGE_SHIFT) | PG_RW | PG_V;
1201 * get memory map with INT 15:E820
1203 #define SMAPSIZ sizeof(*smap)
1204 #define SMAP_SIG 0x534D4150 /* 'SMAP' */
1207 smap = (void *)vm86_addpage(&vmc, 1, KERNBASE + (1 << PAGE_SHIFT));
1208 vm86_getptr(&vmc, (vm_offset_t)smap, &vmf.vmf_es, &vmf.vmf_di);
1213 vmf.vmf_eax = 0xE820;
1214 vmf.vmf_edx = SMAP_SIG;
1215 vmf.vmf_ecx = SMAPSIZ;
1216 i = vm86_datacall(0x15, &vmf, &vmc);
1217 if (i || vmf.vmf_eax != SMAP_SIG)
1219 if (boothowto & RB_VERBOSE)
1220 printf("SMAP type=%02x base=%08x %08x len=%08x %08x\n",
1222 *(u_int32_t *)((char *)&smap->base + 4),
1223 (u_int32_t)smap->base,
1224 *(u_int32_t *)((char *)&smap->length + 4),
1225 (u_int32_t)smap->length);
1227 if (smap->type != 0x01)
1230 if (smap->length == 0)
1233 for (i = 0; i <= physmap_idx; i += 2) {
1234 if (smap->base < physmap[i + 1]) {
1235 if (boothowto & RB_VERBOSE)
1237 "Overlapping or non-montonic memory region, ignoring second region\n");
1242 if (smap->base == physmap[physmap_idx + 1]) {
1243 physmap[physmap_idx + 1] += smap->length;
1248 if (physmap_idx == PHYSMAP_SIZE) {
1250 "Too many segments in the physical address map, giving up\n");
1253 physmap[physmap_idx] = smap->base;
1254 physmap[physmap_idx + 1] = smap->base + smap->length;
1256 } while (vmf.vmf_ebx != 0);
1258 if (physmap[1] != 0)
1262 * try memory map with INT 15:E801
1264 vmf.vmf_ax = 0xE801;
1265 if (vm86_intcall(0x15, &vmf) == 0) {
1266 extmem = vmf.vmf_cx + vmf.vmf_dx * 64;
1270 vm86_intcall(0x15, &vmf);
1271 extmem = vmf.vmf_ax;
1274 * Prefer the RTC value for extended memory.
1276 extmem = rtcin(RTC_EXTLO) + (rtcin(RTC_EXTHI) << 8);
1281 * Only perform calculations in this section if there is no system
1282 * map; any system new enough that supports SMAP probably does not
1283 * need these workarounds.
1286 * Special hack for chipsets that still remap the 384k hole when
1287 * there's 16MB of memory - this really confuses people that
1288 * are trying to use bus mastering ISA controllers with the
1289 * "16MB limit"; they only have 16MB, but the remapping puts
1290 * them beyond the limit.
1293 * If extended memory is between 15-16MB (16-17MB phys address range),
1296 if ((extmem > 15 * 1024) && (extmem < 16 * 1024))
1300 physmap[1] = basemem * 1024;
1302 physmap[physmap_idx] = 0x100000;
1303 physmap[physmap_idx + 1] = physmap[physmap_idx] + extmem * 1024;
1306 * Indicate that we wish to do a speculative search for memory
1307 * beyond the end of the reported size if the indicated amount
1310 * XXX we should only do this in the RTC / 0x88 case
1312 if (extmem >= 16 * 1024)
1313 speculative_mprobe = TRUE;
1317 * Now, physmap contains a map of physical memory.
1321 /* make hole for AP bootstrap code */
1322 physmap[1] = mp_bootaddress(physmap[1] / 1024);
1326 * Maxmem isn't the "maximum memory", it's one larger than the
1327 * highest page of the physical address space. It should be
1328 * called something like "Maxphyspage".
1330 Maxmem = physmap[physmap_idx + 1] / PAGE_SIZE;
1333 * If a specific amount of memory is indicated via the MAXMEM
1334 * option or the npx0 "msize", then don't do the speculative
1338 Maxmem = MAXMEM / 4;
1339 speculative_mprobe = FALSE;
1343 if (resource_int_value("npx", 0, "msize", &msize) == 0) {
1346 speculative_mprobe = FALSE;
1352 /* look for the MP hardware - needed for apic addresses */
1355 /* call pmap initialization to make new kernel address space */
1356 pmap_bootstrap(first, 0);
1359 * Size up each available chunk of physical memory.
1361 physmap[0] = PAGE_SIZE; /* mask off page 0 */
1363 phys_avail[pa_indx++] = physmap[0];
1364 phys_avail[pa_indx] = physmap[0];
1366 pte = (pt_entry_t)vtopte(KERNBASE);
1368 pte = (pt_entry_t)CMAP1;
1372 * physmap is in bytes, so when converting to page boundaries,
1373 * round up the start address and round down the end address.
1375 for (i = 0; i <= physmap_idx; i += 2) {
1379 if (physmap[i + 1] < end)
1380 end = trunc_page(physmap[i + 1]);
1381 for (pa = round_page(physmap[i]); pa < end; pa += PAGE_SIZE) {
1386 int *ptr = (int *)CADDR1;
1390 * block out kernel memory as not available.
1392 if (pa >= 0x100000 && pa < first)
1398 * map page into kernel: valid, read/write,non-cacheable
1400 *pte = pa | PG_V | PG_RW | PG_N;
1405 * Test for alternating 1's and 0's
1407 *(volatile int *)ptr = 0xaaaaaaaa;
1408 if (*(volatile int *)ptr != 0xaaaaaaaa) {
1412 * Test for alternating 0's and 1's
1414 *(volatile int *)ptr = 0x55555555;
1415 if (*(volatile int *)ptr != 0x55555555) {
1421 *(volatile int *)ptr = 0xffffffff;
1422 if (*(volatile int *)ptr != 0xffffffff) {
1428 *(volatile int *)ptr = 0x0;
1429 if (*(volatile int *)ptr != 0x0) {
1433 * Restore original value.
1438 * Adjust array of valid/good pages.
1440 if (page_bad == TRUE) {
1444 * If this good page is a continuation of the
1445 * previous set of good pages, then just increase
1446 * the end pointer. Otherwise start a new chunk.
1447 * Note that "end" points one higher than end,
1448 * making the range >= start and < end.
1449 * If we're also doing a speculative memory
1450 * test and we at or past the end, bump up Maxmem
1451 * so that we keep going. The first bad page
1452 * will terminate the loop.
1454 if (phys_avail[pa_indx] == pa) {
1455 phys_avail[pa_indx] += PAGE_SIZE;
1456 if (speculative_mprobe == TRUE &&
1457 phys_avail[pa_indx] >= (64*1024*1024))
1461 if (pa_indx == PHYS_AVAIL_ARRAY_END) {
1462 printf("Too many holes in the physical address space, giving up\n");
1466 phys_avail[pa_indx++] = pa; /* start */
1467 phys_avail[pa_indx] = pa + PAGE_SIZE; /* end */
1477 * The last chunk must contain at least one page plus the message
1478 * buffer to avoid complicating other code (message buffer address
1479 * calculation, etc.).
1481 while (phys_avail[pa_indx - 1] + PAGE_SIZE +
1482 round_page(MSGBUF_SIZE) >= phys_avail[pa_indx]) {
1483 physmem -= atop(phys_avail[pa_indx] - phys_avail[pa_indx - 1]);
1484 phys_avail[pa_indx--] = 0;
1485 phys_avail[pa_indx--] = 0;
1488 Maxmem = atop(phys_avail[pa_indx]);
1490 /* Trim off space for the message buffer. */
1491 phys_avail[pa_indx] -= round_page(MSGBUF_SIZE);
1493 avail_end = phys_avail[pa_indx];
1501 struct gate_descriptor *gdp;
1504 /* table descriptors - used to load tables by microp */
1505 struct region_descriptor r_gdt, r_idt;
1510 * Prevent lowering of the ipl if we call tsleep() early.
1514 proc0.p_addr = proc0paddr;
1516 atdevbase = ISA_HOLE_START + KERNBASE;
1519 * make gdt memory segments, the code segment goes up to end of the
1520 * page with etext in it, the data segment goes to the end of
1524 * XXX text protection is temporarily (?) disabled. The limit was
1525 * i386_btop(round_page(etext)) - 1.
1527 gdt_segs[GCODE_SEL].ssd_limit = i386_btop(0) - 1;
1528 gdt_segs[GDATA_SEL].ssd_limit = i386_btop(0) - 1;
1530 gdt_segs[GPRIV_SEL].ssd_limit =
1531 i386_btop(sizeof(struct privatespace)) - 1;
1532 gdt_segs[GPRIV_SEL].ssd_base = (int) &SMP_prvspace[0];
1533 gdt_segs[GPROC0_SEL].ssd_base =
1534 (int) &SMP_prvspace[0].globaldata.gd_common_tss;
1535 SMP_prvspace[0].globaldata.gd_prvspace = &SMP_prvspace[0];
1537 gdt_segs[GPRIV_SEL].ssd_limit = i386_btop(0) - 1;
1538 gdt_segs[GPROC0_SEL].ssd_base = (int) &common_tss;
1541 for (x = 0; x < NGDT; x++) {
1543 /* avoid overwriting db entries with APM ones */
1544 if (x >= GAPMCODE32_SEL && x <= GAPMDATA_SEL)
1547 ssdtosd(&gdt_segs[x], &gdt[x].sd);
1550 r_gdt.rd_limit = NGDT * sizeof(gdt[0]) - 1;
1551 r_gdt.rd_base = (int) gdt;
1554 /* make ldt memory segments */
1556 * The data segment limit must not cover the user area because we
1557 * don't want the user area to be writable in copyout() etc. (page
1558 * level protection is lost in kernel mode on 386's). Also, we
1559 * don't want the user area to be writable directly (page level
1560 * protection of the user area is not available on 486's with
1561 * CR0_WP set, because there is no user-read/kernel-write mode).
1563 * XXX - VM_MAXUSER_ADDRESS is an end address, not a max. And it
1564 * should be spelled ...MAX_USER...
1566 #define VM_END_USER_RW_ADDRESS VM_MAXUSER_ADDRESS
1568 * The code segment limit has to cover the user area until we move
1569 * the signal trampoline out of the user area. This is safe because
1570 * the code segment cannot be written to directly.
1572 #define VM_END_USER_R_ADDRESS (VM_END_USER_RW_ADDRESS + UPAGES * PAGE_SIZE)
1573 ldt_segs[LUCODE_SEL].ssd_limit = i386_btop(VM_END_USER_R_ADDRESS) - 1;
1574 ldt_segs[LUDATA_SEL].ssd_limit = i386_btop(VM_END_USER_RW_ADDRESS) - 1;
1575 for (x = 0; x < sizeof ldt_segs / sizeof ldt_segs[0]; x++)
1576 ssdtosd(&ldt_segs[x], &ldt[x].sd);
1578 _default_ldt = GSEL(GLDT_SEL, SEL_KPL);
1581 currentldt = _default_ldt;
1585 for (x = 0; x < NIDT; x++)
1586 setidt(x, &IDTVEC(rsvd), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1587 setidt(0, &IDTVEC(div), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1588 setidt(1, &IDTVEC(dbg), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1589 setidt(2, &IDTVEC(nmi), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1590 setidt(3, &IDTVEC(bpt), SDT_SYS386TGT, SEL_UPL, GSEL(GCODE_SEL, SEL_KPL));
1591 setidt(4, &IDTVEC(ofl), SDT_SYS386TGT, SEL_UPL, GSEL(GCODE_SEL, SEL_KPL));
1592 setidt(5, &IDTVEC(bnd), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1593 setidt(6, &IDTVEC(ill), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1594 setidt(7, &IDTVEC(dna), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1595 setidt(8, 0, SDT_SYSTASKGT, SEL_KPL, GSEL(GPANIC_SEL, SEL_KPL));
1596 setidt(9, &IDTVEC(fpusegm), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1597 setidt(10, &IDTVEC(tss), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1598 setidt(11, &IDTVEC(missing), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1599 setidt(12, &IDTVEC(stk), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1600 setidt(13, &IDTVEC(prot), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1601 setidt(14, &IDTVEC(page), SDT_SYS386IGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1602 setidt(15, &IDTVEC(rsvd), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1603 setidt(16, &IDTVEC(fpu), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1604 setidt(17, &IDTVEC(align), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1605 setidt(18, &IDTVEC(mchk), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1606 setidt(0x80, &IDTVEC(int0x80_syscall),
1607 SDT_SYS386TGT, SEL_UPL, GSEL(GCODE_SEL, SEL_KPL));
1609 r_idt.rd_limit = sizeof(idt0) - 1;
1610 r_idt.rd_base = (int) idt;
1614 * Initialize the console before we print anything out.
1626 if (boothowto & RB_KDB)
1627 Debugger("Boot flags requested debugger");
1630 finishidentcpu(); /* Final stage of CPU initialization */
1631 setidt(6, &IDTVEC(ill), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1632 setidt(13, &IDTVEC(prot), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1633 initializecpu(); /* Initialize CPU registers */
1635 /* make an initial tss so cpu can get interrupt stack on syscall! */
1636 common_tss.tss_esp0 = (int) proc0.p_addr + UPAGES*PAGE_SIZE - 16;
1637 common_tss.tss_ss0 = GSEL(GDATA_SEL, SEL_KPL) ;
1638 common_tss.tss_ioopt = (sizeof common_tss) << 16;
1639 gsel_tss = GSEL(GPROC0_SEL, SEL_KPL);
1642 tss_gdt = &gdt[GPROC0_SEL].sd;
1643 common_tssd = *tss_gdt;
1645 dblfault_tss.tss_esp = dblfault_tss.tss_esp0 = dblfault_tss.tss_esp1 =
1646 dblfault_tss.tss_esp2 = (int) &dblfault_stack[sizeof(dblfault_stack)];
1647 dblfault_tss.tss_ss = dblfault_tss.tss_ss0 = dblfault_tss.tss_ss1 =
1648 dblfault_tss.tss_ss2 = GSEL(GDATA_SEL, SEL_KPL);
1649 dblfault_tss.tss_cr3 = (int)IdlePTD;
1650 dblfault_tss.tss_eip = (int) dblfault_handler;
1651 dblfault_tss.tss_eflags = PSL_KERNEL;
1652 dblfault_tss.tss_ds = dblfault_tss.tss_es =
1653 dblfault_tss.tss_gs = GSEL(GDATA_SEL, SEL_KPL);
1654 dblfault_tss.tss_fs = GSEL(GPRIV_SEL, SEL_KPL);
1655 dblfault_tss.tss_cs = GSEL(GCODE_SEL, SEL_KPL);
1656 dblfault_tss.tss_ldt = GSEL(GLDT_SEL, SEL_KPL);
1661 /* now running on new page tables, configured,and u/iom is accessible */
1663 /* Map the message buffer. */
1664 for (off = 0; off < round_page(MSGBUF_SIZE); off += PAGE_SIZE)
1665 pmap_kenter((vm_offset_t)msgbufp + off, avail_end + off);
1667 msgbufinit(msgbufp, MSGBUF_SIZE);
1669 /* make a call gate to reenter kernel with */
1670 gdp = &ldt[LSYS5CALLS_SEL].gd;
1672 x = (int) &IDTVEC(syscall);
1673 gdp->gd_looffset = x++;
1674 gdp->gd_selector = GSEL(GCODE_SEL,SEL_KPL);
1676 gdp->gd_type = SDT_SYS386CGT;
1677 gdp->gd_dpl = SEL_UPL;
1679 gdp->gd_hioffset = ((int) &IDTVEC(syscall)) >>16;
1681 /* XXX does this work? */
1682 ldt[LBSDICALLS_SEL] = ldt[LSYS5CALLS_SEL];
1683 ldt[LSOL26CALLS_SEL] = ldt[LSYS5CALLS_SEL];
1685 /* transfer to user mode */
1687 _ucodesel = LSEL(LUCODE_SEL, SEL_UPL);
1688 _udatasel = LSEL(LUDATA_SEL, SEL_UPL);
1690 /* setup proc 0's pcb */
1691 proc0.p_addr->u_pcb.pcb_flags = 0;
1692 proc0.p_addr->u_pcb.pcb_cr3 = (int)IdlePTD;
1694 proc0.p_addr->u_pcb.pcb_mpnest = 1;
1696 proc0.p_addr->u_pcb.pcb_ext = 0;
1698 /* Sigh, relocate physical addresses left from bootstrap */
1699 if (bootinfo.bi_modulep) {
1700 preload_metadata = (caddr_t)bootinfo.bi_modulep + KERNBASE;
1701 preload_bootstrap_relocate(KERNBASE);
1703 if (bootinfo.bi_envp)
1704 kern_envp = (caddr_t)bootinfo.bi_envp + KERNBASE;
1707 #if defined(I586_CPU) && !defined(NO_F00F_HACK)
1708 static void f00f_hack(void *unused);
1709 SYSINIT(f00f_hack, SI_SUB_INTRINSIC, SI_ORDER_FIRST, f00f_hack, NULL);
1712 f00f_hack(void *unused) {
1713 struct gate_descriptor *new_idt;
1715 struct region_descriptor r_idt;
1722 printf("Intel Pentium detected, installing workaround for F00F bug\n");
1724 r_idt.rd_limit = sizeof(idt0) - 1;
1726 tmp = kmem_alloc(kernel_map, PAGE_SIZE * 2);
1728 panic("kmem_alloc returned 0");
1729 if (((unsigned int)tmp & (PAGE_SIZE-1)) != 0)
1730 panic("kmem_alloc returned non-page-aligned memory");
1731 /* Put the first seven entries in the lower page */
1732 new_idt = (struct gate_descriptor*)(tmp + PAGE_SIZE - (7*8));
1733 bcopy(idt, new_idt, sizeof(idt0));
1734 r_idt.rd_base = (int)new_idt;
1737 if (vm_map_protect(kernel_map, tmp, tmp + PAGE_SIZE,
1738 VM_PROT_READ, FALSE) != KERN_SUCCESS)
1739 panic("vm_map_protect failed");
1742 #endif /* defined(I586_CPU) && !NO_F00F_HACK */
1745 ptrace_set_pc(p, addr)
1749 p->p_md.md_regs->tf_eip = addr;
1754 ptrace_single_step(p)
1757 p->p_md.md_regs->tf_eflags |= PSL_T;
1761 int ptrace_read_u_check(p, addr, len)
1768 if ((vm_offset_t) (addr + len) < addr)
1770 if ((vm_offset_t) (addr + len) <= sizeof(struct user))
1773 gap = (char *) p->p_md.md_regs - (char *) p->p_addr;
1775 if ((vm_offset_t) addr < gap)
1777 if ((vm_offset_t) (addr + len) <=
1778 (vm_offset_t) (gap + sizeof(struct trapframe)))
1783 int ptrace_write_u(p, off, data)
1788 struct trapframe frame_copy;
1790 struct trapframe *tp;
1793 * Privileged kernel state is scattered all over the user area.
1794 * Only allow write access to parts of regs and to fpregs.
1796 min = (char *)p->p_md.md_regs - (char *)p->p_addr;
1797 if (off >= min && off <= min + sizeof(struct trapframe) - sizeof(int)) {
1798 tp = p->p_md.md_regs;
1800 *(int *)((char *)&frame_copy + (off - min)) = data;
1801 if (!EFLAGS_SECURE(frame_copy.tf_eflags, tp->tf_eflags) ||
1802 !CS_SECURE(frame_copy.tf_cs))
1804 *(int*)((char *)p->p_addr + off) = data;
1807 min = offsetof(struct user, u_pcb) + offsetof(struct pcb, pcb_savefpu);
1808 if (off >= min && off <= min + sizeof(struct save87) - sizeof(int)) {
1809 *(int*)((char *)p->p_addr + off) = data;
1821 struct trapframe *tp;
1823 tp = p->p_md.md_regs;
1824 regs->r_fs = tp->tf_fs;
1825 regs->r_es = tp->tf_es;
1826 regs->r_ds = tp->tf_ds;
1827 regs->r_edi = tp->tf_edi;
1828 regs->r_esi = tp->tf_esi;
1829 regs->r_ebp = tp->tf_ebp;
1830 regs->r_ebx = tp->tf_ebx;
1831 regs->r_edx = tp->tf_edx;
1832 regs->r_ecx = tp->tf_ecx;
1833 regs->r_eax = tp->tf_eax;
1834 regs->r_eip = tp->tf_eip;
1835 regs->r_cs = tp->tf_cs;
1836 regs->r_eflags = tp->tf_eflags;
1837 regs->r_esp = tp->tf_esp;
1838 regs->r_ss = tp->tf_ss;
1839 pcb = &p->p_addr->u_pcb;
1840 regs->r_gs = pcb->pcb_gs;
1850 struct trapframe *tp;
1852 tp = p->p_md.md_regs;
1853 if (!EFLAGS_SECURE(regs->r_eflags, tp->tf_eflags) ||
1854 !CS_SECURE(regs->r_cs))
1856 tp->tf_fs = regs->r_fs;
1857 tp->tf_es = regs->r_es;
1858 tp->tf_ds = regs->r_ds;
1859 tp->tf_edi = regs->r_edi;
1860 tp->tf_esi = regs->r_esi;
1861 tp->tf_ebp = regs->r_ebp;
1862 tp->tf_ebx = regs->r_ebx;
1863 tp->tf_edx = regs->r_edx;
1864 tp->tf_ecx = regs->r_ecx;
1865 tp->tf_eax = regs->r_eax;
1866 tp->tf_eip = regs->r_eip;
1867 tp->tf_cs = regs->r_cs;
1868 tp->tf_eflags = regs->r_eflags;
1869 tp->tf_esp = regs->r_esp;
1870 tp->tf_ss = regs->r_ss;
1871 pcb = &p->p_addr->u_pcb;
1872 pcb->pcb_gs = regs->r_gs;
1877 fill_fpregs(p, fpregs)
1879 struct fpreg *fpregs;
1881 bcopy(&p->p_addr->u_pcb.pcb_savefpu, fpregs, sizeof *fpregs);
1886 set_fpregs(p, fpregs)
1888 struct fpreg *fpregs;
1890 bcopy(fpregs, &p->p_addr->u_pcb.pcb_savefpu, sizeof *fpregs);
1896 Debugger(const char *msg)
1898 printf("Debugger(\"%s\") called.\n", msg);
1902 #include <sys/disklabel.h>
1905 * Determine the size of the transfer, and make sure it is
1906 * within the boundaries of the partition. Adjust transfer
1907 * if needed, and signal errors or early completion.
1910 bounds_check_with_label(struct buf *bp, struct disklabel *lp, int wlabel)
1912 struct partition *p = lp->d_partitions + dkpart(bp->b_dev);
1913 int labelsect = lp->d_partitions[0].p_offset;
1914 int maxsz = p->p_size,
1915 sz = (bp->b_bcount + DEV_BSIZE - 1) >> DEV_BSHIFT;
1917 /* overwriting disk label ? */
1918 /* XXX should also protect bootstrap in first 8K */
1919 if (bp->b_blkno + p->p_offset <= LABELSECTOR + labelsect &&
1920 #if LABELSECTOR != 0
1921 bp->b_blkno + p->p_offset + sz > LABELSECTOR + labelsect &&
1923 (bp->b_flags & B_READ) == 0 && wlabel == 0) {
1924 bp->b_error = EROFS;
1928 #if defined(DOSBBSECTOR) && defined(notyet)
1929 /* overwriting master boot record? */
1930 if (bp->b_blkno + p->p_offset <= DOSBBSECTOR &&
1931 (bp->b_flags & B_READ) == 0 && wlabel == 0) {
1932 bp->b_error = EROFS;
1937 /* beyond partition? */
1938 if (bp->b_blkno < 0 || bp->b_blkno + sz > maxsz) {
1939 /* if exactly at end of disk, return an EOF */
1940 if (bp->b_blkno == maxsz) {
1941 bp->b_resid = bp->b_bcount;
1944 /* or truncate if part of it fits */
1945 sz = maxsz - bp->b_blkno;
1947 bp->b_error = EINVAL;
1950 bp->b_bcount = sz << DEV_BSHIFT;
1953 bp->b_pblkno = bp->b_blkno + p->p_offset;
1957 bp->b_flags |= B_ERROR;
1964 * Provide inb() and outb() as functions. They are normally only
1965 * available as macros calling inlined functions, thus cannot be
1966 * called inside DDB.
1968 * The actual code is stolen from <machine/cpufunc.h>, and de-inlined.
1974 /* silence compiler warnings */
1976 void outb(u_int, u_char);
1983 * We use %%dx and not %1 here because i/o is done at %dx and not at
1984 * %edx, while gcc generates inferior code (movw instead of movl)
1985 * if we tell it to load (u_short) port.
1987 __asm __volatile("inb %%dx,%0" : "=a" (data) : "d" (port));
1992 outb(u_int port, u_char data)
1996 * Use an unnecessary assignment to help gcc's register allocator.
1997 * This make a large difference for gcc-1.40 and a tiny difference
1998 * for gcc-2.6.0. For gcc-1.40, al had to be ``asm("ax")'' for
1999 * best results. gcc-2.6.0 can't handle this.
2002 __asm __volatile("outb %0,%%dx" : : "a" (al), "d" (port));