2 * Copyright (c) 1992 Terrence R. Lambert.
3 * Copyright (c) 1982, 1987, 1990 The Regents of the University of California.
6 * This code is derived from software contributed to Berkeley by
9 * Redistribution and use in source and binary forms, with or without
10 * modification, are permitted provided that the following conditions
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
14 * 2. Redistributions in binary form must reproduce the above copyright
15 * notice, this list of conditions and the following disclaimer in the
16 * documentation and/or other materials provided with the distribution.
17 * 3. All advertising materials mentioning features or use of this software
18 * must display the following acknowledgement:
19 * This product includes software developed by the University of
20 * California, Berkeley and its contributors.
21 * 4. Neither the name of the University nor the names of its contributors
22 * may be used to endorse or promote products derived from this software
23 * without specific prior written permission.
25 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
26 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
27 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
28 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
29 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
30 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
31 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
32 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
33 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
34 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
37 * from: @(#)machdep.c 7.4 (Berkeley) 6/3/91
38 * $Id: machdep.c,v 1.354 1999/07/08 06:05:48 mckusick Exp $
44 #include "opt_atalk.h"
49 #include "opt_maxmem.h"
50 #include "opt_msgbuf.h"
51 #include "opt_perfmon.h"
53 #include "opt_sysvipc.h"
54 #include "opt_user_ldt.h"
55 #include "opt_userconfig.h"
57 #include <sys/param.h>
58 #include <sys/systm.h>
59 #include <sys/sysproto.h>
60 #include <sys/signalvar.h>
61 #include <sys/kernel.h>
62 #include <sys/linker.h>
65 #include <sys/reboot.h>
66 #include <sys/callout.h>
67 #include <sys/malloc.h>
69 #include <sys/msgbuf.h>
70 #include <sys/sysent.h>
71 #include <sys/sysctl.h>
72 #include <sys/vmmeter.h>
88 #include <vm/vm_param.h>
89 #include <vm/vm_prot.h>
91 #include <vm/vm_kern.h>
92 #include <vm/vm_object.h>
93 #include <vm/vm_page.h>
94 #include <vm/vm_map.h>
95 #include <vm/vm_pager.h>
96 #include <vm/vm_extern.h>
103 #include <net/netisr.h>
105 #include <machine/cpu.h>
106 #include <machine/reg.h>
107 #include <machine/clock.h>
108 #include <machine/specialreg.h>
109 #include <machine/cons.h>
110 #include <machine/bootinfo.h>
111 #include <machine/ipl.h>
112 #include <machine/md_var.h>
113 #include <machine/pcb_ext.h> /* pcb.h included via sys/user.h */
115 #include <machine/smp.h>
116 #include <machine/globaldata.h>
119 #include <machine/perfmon.h>
123 #include <i386/isa/isa_device.h>
125 #include <i386/isa/intr_machdep.h>
127 #include <machine/vm86.h>
128 #include <machine/random.h>
129 #include <sys/ptrace.h>
131 extern void init386 __P((int first));
132 extern void dblfault_handler __P((void));
134 extern void printcpuinfo(void); /* XXX header file */
135 extern void earlysetcpuclass(void); /* same header file */
136 extern void finishidentcpu(void);
137 extern void panicifcpuunsupported(void);
138 extern void initializecpu(void);
140 static void cpu_startup __P((void *));
141 SYSINIT(cpu, SI_SUB_CPU, SI_ORDER_FIRST, cpu_startup, NULL)
143 static MALLOC_DEFINE(M_MBUF, "mbuf", "mbuf");
145 int _udatasel, _ucodesel;
148 #if defined(SWTCH_OPTIM_STATS)
149 extern int swtch_optim_stats;
150 SYSCTL_INT(_debug, OID_AUTO, swtch_optim_stats,
151 CTLFLAG_RD, &swtch_optim_stats, 0, "");
152 SYSCTL_INT(_debug, OID_AUTO, tlb_flush_count,
153 CTLFLAG_RD, &tlb_flush_count, 0, "");
157 static int ispc98 = 1;
159 static int ispc98 = 0;
161 SYSCTL_INT(_machdep, OID_AUTO, ispc98, CTLFLAG_RD, &ispc98, 0, "");
167 sysctl_hw_physmem SYSCTL_HANDLER_ARGS
169 int error = sysctl_handle_int(oidp, 0, ctob(physmem), req);
173 SYSCTL_PROC(_hw, HW_PHYSMEM, physmem, CTLTYPE_INT|CTLFLAG_RD,
174 0, 0, sysctl_hw_physmem, "I", "");
177 sysctl_hw_usermem SYSCTL_HANDLER_ARGS
179 int error = sysctl_handle_int(oidp, 0,
180 ctob(physmem - cnt.v_wire_count), req);
184 SYSCTL_PROC(_hw, HW_USERMEM, usermem, CTLTYPE_INT|CTLFLAG_RD,
185 0, 0, sysctl_hw_usermem, "I", "");
188 sysctl_hw_availpages SYSCTL_HANDLER_ARGS
190 int error = sysctl_handle_int(oidp, 0,
191 i386_btop(avail_end - avail_start), req);
195 SYSCTL_PROC(_hw, OID_AUTO, availpages, CTLTYPE_INT|CTLFLAG_RD,
196 0, 0, sysctl_hw_availpages, "I", "");
199 sysctl_machdep_msgbuf SYSCTL_HANDLER_ARGS
203 /* Unwind the buffer, so that it's linear (possibly starting with
204 * some initial nulls).
206 error=sysctl_handle_opaque(oidp,msgbufp->msg_ptr+msgbufp->msg_bufr,
207 msgbufp->msg_size-msgbufp->msg_bufr,req);
208 if(error) return(error);
209 if(msgbufp->msg_bufr>0) {
210 error=sysctl_handle_opaque(oidp,msgbufp->msg_ptr,
211 msgbufp->msg_bufr,req);
216 SYSCTL_PROC(_machdep, OID_AUTO, msgbuf, CTLTYPE_STRING|CTLFLAG_RD,
217 0, 0, sysctl_machdep_msgbuf, "A","Contents of kernel message buffer");
219 static int msgbuf_clear;
222 sysctl_machdep_msgbuf_clear SYSCTL_HANDLER_ARGS
225 error = sysctl_handle_int(oidp, oidp->oid_arg1, oidp->oid_arg2,
227 if (!error && req->newptr) {
228 /* Clear the buffer and reset write pointer */
229 bzero(msgbufp->msg_ptr,msgbufp->msg_size);
230 msgbufp->msg_bufr=msgbufp->msg_bufx=0;
236 SYSCTL_PROC(_machdep, OID_AUTO, msgbuf_clear, CTLTYPE_INT|CTLFLAG_RW,
237 &msgbuf_clear, 0, sysctl_machdep_msgbuf_clear, "I",
238 "Clear kernel message buffer");
240 int bootverbose = 0, Maxmem = 0;
243 vm_offset_t phys_avail[10];
245 /* must be 2 less so 0 0 can signal end of chunks */
246 #define PHYS_AVAIL_ARRAY_END ((sizeof(phys_avail) / sizeof(vm_offset_t)) - 2)
248 static vm_offset_t buffer_sva, buffer_eva;
249 vm_offset_t clean_sva, clean_eva;
250 static vm_offset_t pager_sva, pager_eva;
252 #define offsetof(type, member) ((size_t)(&((type *)0)->member))
265 if (boothowto & RB_VERBOSE)
269 * Good {morning,afternoon,evening,night}.
275 panicifcpuunsupported();
279 printf("real memory = %u (%uK bytes)\n", ptoa(Maxmem), ptoa(Maxmem) / 1024);
281 * Display any holes after the first chunk of extended memory.
286 printf("Physical memory chunk(s):\n");
287 for (indx = 0; phys_avail[indx + 1] != 0; indx += 2) {
288 int size1 = phys_avail[indx + 1] - phys_avail[indx];
290 printf("0x%08x - 0x%08x, %u bytes (%u pages)\n",
291 phys_avail[indx], phys_avail[indx + 1] - 1, size1,
297 * Calculate callout wheel size
299 for (callwheelsize = 1, callwheelbits = 0;
300 callwheelsize < ncallout;
301 callwheelsize <<= 1, ++callwheelbits)
303 callwheelmask = callwheelsize - 1;
306 * Allocate space for system data structures.
307 * The first available kernel virtual address is in "v".
308 * As pages of kernel virtual memory are allocated, "v" is incremented.
309 * As pages of memory are allocated and cleared,
310 * "firstaddr" is incremented.
311 * An index into the kernel page table corresponding to the
312 * virtual memory address maintained in "v" is kept in "mapaddr".
316 * Make two passes. The first pass calculates how much memory is
317 * needed and allocates it. The second pass assigns virtual
318 * addresses to the various data structures.
322 v = (caddr_t)firstaddr;
324 #define valloc(name, type, num) \
325 (name) = (type *)v; v = (caddr_t)((name)+(num))
326 #define valloclim(name, type, num, lim) \
327 (name) = (type *)v; v = (caddr_t)((lim) = ((name)+(num)))
329 valloc(callout, struct callout, ncallout);
330 valloc(callwheel, struct callout_tailq, callwheelsize);
332 valloc(shmsegs, struct shmid_ds, shminfo.shmmni);
335 valloc(sema, struct semid_ds, seminfo.semmni);
336 valloc(sem, struct sem, seminfo.semmns);
337 /* This is pretty disgusting! */
338 valloc(semu, int, (seminfo.semmnu * seminfo.semusz) / sizeof(int));
341 valloc(msgpool, char, msginfo.msgmax);
342 valloc(msgmaps, struct msgmap, msginfo.msgseg);
343 valloc(msghdrs, struct msg, msginfo.msgtql);
344 valloc(msqids, struct msqid_ds, msginfo.msgmni);
350 nbuf += min((physmem - 1024) / 8, 2048);
352 nbuf += (physmem - 65536) / 20;
354 nswbuf = max(min(nbuf/4, 256), 16);
356 valloc(swbuf, struct buf, nswbuf);
357 valloc(buf, struct buf, nbuf);
361 * End of first pass, size has been calculated so allocate memory
363 if (firstaddr == 0) {
364 size = (vm_size_t)(v - firstaddr);
365 firstaddr = (int)kmem_alloc(kernel_map, round_page(size));
367 panic("startup: no room for tables");
372 * End of second pass, addresses have been assigned
374 if ((vm_size_t)(v - firstaddr) != size)
375 panic("startup: table size inconsistency");
377 clean_map = kmem_suballoc(kernel_map, &clean_sva, &clean_eva,
378 (nbuf*BKVASIZE) + (nswbuf*MAXPHYS) + pager_map_size);
379 buffer_map = kmem_suballoc(clean_map, &buffer_sva, &buffer_eva,
381 pager_map = kmem_suballoc(clean_map, &pager_sva, &pager_eva,
382 (nswbuf*MAXPHYS) + pager_map_size);
383 pager_map->system_map = 1;
384 exec_map = kmem_suballoc(kernel_map, &minaddr, &maxaddr,
385 (16*(ARG_MAX+(PAGE_SIZE*3))));
388 * Finally, allocate mbuf pool. Since mclrefcnt is an off-size
389 * we use the more space efficient malloc in place of kmem_alloc.
392 vm_offset_t mb_map_size;
394 mb_map_size = nmbufs * MSIZE + nmbclusters * MCLBYTES;
395 mb_map_size = roundup2(mb_map_size, max(MCLBYTES, PAGE_SIZE));
396 mclrefcnt = malloc(mb_map_size / MCLBYTES, M_MBUF, M_NOWAIT);
397 bzero(mclrefcnt, mb_map_size / MCLBYTES);
398 mb_map = kmem_suballoc(kmem_map, (vm_offset_t *)&mbutl, &maxaddr,
400 mb_map->system_map = 1;
404 * Initialize callouts
406 SLIST_INIT(&callfree);
407 for (i = 0; i < ncallout; i++) {
408 callout_init(&callout[i]);
409 callout[i].c_flags = CALLOUT_LOCAL_ALLOC;
410 SLIST_INSERT_HEAD(&callfree, &callout[i], c_links.sle);
413 for (i = 0; i < callwheelsize; i++) {
414 TAILQ_INIT(&callwheel[i]);
417 #if defined(USERCONFIG)
419 cninit(); /* the preferred console may have changed */
422 printf("avail memory = %u (%uK bytes)\n", ptoa(cnt.v_free_count),
423 ptoa(cnt.v_free_count) / 1024);
426 * Set up buffers, so they can be used to read disk labels.
429 vm_pager_bufferinit();
433 * OK, enough kmem_alloc/malloc state should be up, lets get on with it!
435 mp_start(); /* fire up the APs and APICs */
441 register_netisr(num, handler)
446 if (num < 0 || num >= (sizeof(netisrs)/sizeof(*netisrs)) ) {
447 printf("register_netisr: bad isr number: %d\n", num);
450 netisrs[num] = handler;
458 const struct netisrtab *nit;
460 nit = (const struct netisrtab *)data;
461 register_netisr(nit->nit_num, nit->nit_isr);
465 * Send an interrupt to process.
467 * Stack is set up to allow sigcode stored
468 * at top to call routine, followed by kcall
469 * to sigreturn routine below. After sigreturn
470 * resets the signal mask, the stack, and the
471 * frame pointer, it returns to the user
475 sendsig(catcher, sig, mask, code)
480 register struct proc *p = curproc;
481 register struct trapframe *regs;
482 register struct sigframe *fp;
484 struct sigacts *psp = p->p_sigacts;
487 regs = p->p_md.md_regs;
488 oonstack = psp->ps_sigstk.ss_flags & SS_ONSTACK;
490 * Allocate and validate space for the signal handler context.
492 if ((psp->ps_flags & SAS_ALTSTACK) && !oonstack &&
493 (psp->ps_sigonstack & sigmask(sig))) {
494 fp = (struct sigframe *)(psp->ps_sigstk.ss_sp +
495 psp->ps_sigstk.ss_size - sizeof(struct sigframe));
496 psp->ps_sigstk.ss_flags |= SS_ONSTACK;
498 fp = (struct sigframe *)regs->tf_esp - 1;
502 * grow() will return FALSE if the fp will not fit inside the stack
503 * and the stack can not be grown. useracc will return FALSE
504 * if access is denied.
506 if ((grow_stack (p, (int)fp) == FALSE) ||
507 (useracc((caddr_t)fp, sizeof(struct sigframe), B_WRITE) == FALSE)) {
509 * Process has trashed its stack; give it an illegal
510 * instruction to halt it in its tracks.
513 printf("process %d has trashed its stack\n", p->p_pid);
515 SIGACTION(p, SIGILL) = SIG_DFL;
516 sig = sigmask(SIGILL);
517 p->p_sigignore &= ~sig;
518 p->p_sigcatch &= ~sig;
519 p->p_sigmask &= ~sig;
525 * Build the argument list for the signal handler.
527 if (p->p_sysent->sv_sigtbl) {
528 if (sig < p->p_sysent->sv_sigsize)
529 sig = p->p_sysent->sv_sigtbl[sig];
531 sig = p->p_sysent->sv_sigsize + 1;
534 sf.sf_scp = (register_t)&fp->sf_siginfo.si_sc;
535 if (p->p_sigacts->ps_siginfo & sigmask(sig)) {
537 * Signal handler installed with SA_SIGINFO.
539 sf.sf_arg2 = (register_t)&fp->sf_siginfo;
540 sf.sf_siginfo.si_signo = sig;
541 sf.sf_siginfo.si_code = code;
542 sf.sf_ahu.sf_action = (__siginfohandler_t *)catcher;
545 * Old FreeBSD-style arguments.
548 sf.sf_ahu.sf_handler = catcher;
551 sf.sf_addr = (char *) regs->tf_err;
553 /* save scratch registers */
554 sf.sf_siginfo.si_sc.sc_eax = regs->tf_eax;
555 sf.sf_siginfo.si_sc.sc_ebx = regs->tf_ebx;
556 sf.sf_siginfo.si_sc.sc_ecx = regs->tf_ecx;
557 sf.sf_siginfo.si_sc.sc_edx = regs->tf_edx;
558 sf.sf_siginfo.si_sc.sc_esi = regs->tf_esi;
559 sf.sf_siginfo.si_sc.sc_edi = regs->tf_edi;
560 sf.sf_siginfo.si_sc.sc_cs = regs->tf_cs;
561 sf.sf_siginfo.si_sc.sc_ds = regs->tf_ds;
562 sf.sf_siginfo.si_sc.sc_ss = regs->tf_ss;
563 sf.sf_siginfo.si_sc.sc_es = regs->tf_es;
564 sf.sf_siginfo.si_sc.sc_fs = regs->tf_fs;
565 sf.sf_siginfo.si_sc.sc_isp = regs->tf_isp;
568 * Build the signal context to be used by sigreturn.
570 sf.sf_siginfo.si_sc.sc_onstack = oonstack;
571 sf.sf_siginfo.si_sc.sc_mask = mask;
572 sf.sf_siginfo.si_sc.sc_sp = regs->tf_esp;
573 sf.sf_siginfo.si_sc.sc_fp = regs->tf_ebp;
574 sf.sf_siginfo.si_sc.sc_pc = regs->tf_eip;
575 sf.sf_siginfo.si_sc.sc_ps = regs->tf_eflags;
576 sf.sf_siginfo.si_sc.sc_trapno = regs->tf_trapno;
577 sf.sf_siginfo.si_sc.sc_err = regs->tf_err;
580 * If we're a vm86 process, we want to save the segment registers.
581 * We also change eflags to be our emulated eflags, not the actual
584 if (regs->tf_eflags & PSL_VM) {
585 struct trapframe_vm86 *tf = (struct trapframe_vm86 *)regs;
586 struct vm86_kernel *vm86 = &p->p_addr->u_pcb.pcb_ext->ext_vm86;
588 sf.sf_siginfo.si_sc.sc_gs = tf->tf_vm86_gs;
589 sf.sf_siginfo.si_sc.sc_fs = tf->tf_vm86_fs;
590 sf.sf_siginfo.si_sc.sc_es = tf->tf_vm86_es;
591 sf.sf_siginfo.si_sc.sc_ds = tf->tf_vm86_ds;
593 if (vm86->vm86_has_vme == 0)
594 sf.sf_siginfo.si_sc.sc_ps = (tf->tf_eflags & ~(PSL_VIF | PSL_VIP))
595 | (vm86->vm86_eflags & (PSL_VIF | PSL_VIP));
598 * We should never have PSL_T set when returning from vm86
599 * mode. It may be set here if we deliver a signal before
600 * getting to vm86 mode, so turn it off.
602 * Clear PSL_NT to inhibit T_TSSFLT faults on return from
603 * syscalls made by the signal handler. This just avoids
604 * wasting time for our lazy fixup of such faults. PSL_NT
605 * does nothing in vm86 mode, but vm86 programs can set it
606 * almost legitimately in probes for old cpu types.
608 tf->tf_eflags &= ~(PSL_VM | PSL_NT | PSL_T | PSL_VIF | PSL_VIP);
612 * Copy the sigframe out to the user's stack.
614 if (copyout(&sf, fp, sizeof(struct sigframe)) != 0) {
616 * Something is wrong with the stack pointer.
617 * ...Kill the process.
622 regs->tf_esp = (int)fp;
623 regs->tf_eip = PS_STRINGS - *(p->p_sysent->sv_szsigcode);
624 regs->tf_cs = _ucodesel;
625 regs->tf_ds = _udatasel;
626 regs->tf_es = _udatasel;
627 regs->tf_fs = _udatasel;
628 regs->tf_ss = _udatasel;
632 * System call to cleanup state after a signal
633 * has been taken. Reset signal mask and
634 * stack state from context left by sendsig (above).
635 * Return to previous pc and psl as specified by
636 * context left by sendsig. Check carefully to
637 * make sure that the user has not modified the
638 * state to gain improper privileges.
643 struct sigreturn_args /* {
644 struct sigcontext *sigcntxp;
647 register struct sigcontext *scp;
648 register struct sigframe *fp;
649 register struct trapframe *regs = p->p_md.md_regs;
653 * (XXX old comment) regs->tf_esp points to the return address.
654 * The user scp pointer is above that.
655 * The return address is faked in the signal trampoline code
659 fp = (struct sigframe *)
660 ((caddr_t)scp - offsetof(struct sigframe, sf_siginfo.si_sc));
662 if (useracc((caddr_t)fp, sizeof (*fp), B_WRITE) == 0)
666 if (eflags & PSL_VM) {
667 struct trapframe_vm86 *tf = (struct trapframe_vm86 *)regs;
668 struct vm86_kernel *vm86;
671 * if pcb_ext == 0 or vm86_inited == 0, the user hasn't
672 * set up the vm86 area, and we can't enter vm86 mode.
674 if (p->p_addr->u_pcb.pcb_ext == 0)
676 vm86 = &p->p_addr->u_pcb.pcb_ext->ext_vm86;
677 if (vm86->vm86_inited == 0)
680 /* go back to user mode if both flags are set */
681 if ((eflags & PSL_VIP) && (eflags & PSL_VIF))
682 trapsignal(p, SIGBUS, 0);
684 if (vm86->vm86_has_vme) {
685 eflags = (tf->tf_eflags & ~VME_USERCHANGE) |
686 (eflags & VME_USERCHANGE) | PSL_VM;
688 vm86->vm86_eflags = eflags; /* save VIF, VIP */
689 eflags = (tf->tf_eflags & ~VM_USERCHANGE) | (eflags & VM_USERCHANGE) | PSL_VM;
691 tf->tf_vm86_ds = scp->sc_ds;
692 tf->tf_vm86_es = scp->sc_es;
693 tf->tf_vm86_fs = scp->sc_fs;
694 tf->tf_vm86_gs = scp->sc_gs;
695 tf->tf_ds = _udatasel;
696 tf->tf_es = _udatasel;
697 tf->tf_fs = _udatasel;
700 * Don't allow users to change privileged or reserved flags.
702 #define EFLAGS_SECURE(ef, oef) ((((ef) ^ (oef)) & ~PSL_USERCHANGE) == 0)
704 * XXX do allow users to change the privileged flag PSL_RF.
705 * The cpu sets PSL_RF in tf_eflags for faults. Debuggers
706 * should sometimes set it there too. tf_eflags is kept in
707 * the signal context during signal handling and there is no
708 * other place to remember it, so the PSL_RF bit may be
709 * corrupted by the signal handler without us knowing.
710 * Corruption of the PSL_RF bit at worst causes one more or
711 * one less debugger trap, so allowing it is fairly harmless.
713 if (!EFLAGS_SECURE(eflags & ~PSL_RF, regs->tf_eflags & ~PSL_RF)) {
715 printf("sigreturn: eflags = 0x%x\n", eflags);
721 * Don't allow users to load a valid privileged %cs. Let the
722 * hardware check for invalid selectors, excess privilege in
723 * other selectors, invalid %eip's and invalid %esp's.
725 #define CS_SECURE(cs) (ISPL(cs) == SEL_UPL)
726 if (!CS_SECURE(scp->sc_cs)) {
728 printf("sigreturn: cs = 0x%x\n", scp->sc_cs);
730 trapsignal(p, SIGBUS, T_PROTFLT);
733 regs->tf_ds = scp->sc_ds;
734 regs->tf_es = scp->sc_es;
735 regs->tf_fs = scp->sc_fs;
738 /* restore scratch registers */
739 regs->tf_eax = scp->sc_eax;
740 regs->tf_ebx = scp->sc_ebx;
741 regs->tf_ecx = scp->sc_ecx;
742 regs->tf_edx = scp->sc_edx;
743 regs->tf_esi = scp->sc_esi;
744 regs->tf_edi = scp->sc_edi;
745 regs->tf_cs = scp->sc_cs;
746 regs->tf_ss = scp->sc_ss;
747 regs->tf_isp = scp->sc_isp;
749 if (useracc((caddr_t)scp, sizeof (*scp), B_WRITE) == 0)
752 if (scp->sc_onstack & 01)
753 p->p_sigacts->ps_sigstk.ss_flags |= SS_ONSTACK;
755 p->p_sigacts->ps_sigstk.ss_flags &= ~SS_ONSTACK;
756 p->p_sigmask = scp->sc_mask & ~sigcantmask;
757 regs->tf_ebp = scp->sc_fp;
758 regs->tf_esp = scp->sc_sp;
759 regs->tf_eip = scp->sc_pc;
760 regs->tf_eflags = eflags;
765 * Machine dependent boot() routine
767 * I haven't seen anything to put here yet
768 * Possibly some stuff might be grafted back here from boot()
776 * Shutdown the CPU as much as possible
786 * Clear registers on exec
789 setregs(p, entry, stack, ps_strings)
795 struct trapframe *regs = p->p_md.md_regs;
796 struct pcb *pcb = &p->p_addr->u_pcb;
799 /* was i386_user_cleanup() in NetBSD */
803 currentldt = _default_ldt;
805 kmem_free(kernel_map, (vm_offset_t)pcb->pcb_ldt,
806 pcb->pcb_ldt_len * sizeof(union descriptor));
807 pcb->pcb_ldt_len = (int)pcb->pcb_ldt = 0;
811 bzero((char *)regs, sizeof(struct trapframe));
812 regs->tf_eip = entry;
813 regs->tf_esp = stack;
814 regs->tf_eflags = PSL_USER | (regs->tf_eflags & PSL_T);
815 regs->tf_ss = _udatasel;
816 regs->tf_ds = _udatasel;
817 regs->tf_es = _udatasel;
818 regs->tf_fs = _udatasel;
819 regs->tf_cs = _ucodesel;
821 /* PS_STRINGS value for BSD/OS binaries. It is 0 for non-BSD/OS. */
822 regs->tf_ebx = ps_strings;
824 /* reset %gs as well */
825 pcb->pcb_gs = _udatasel;
831 * Initialize the math emulator (if any) for the current process.
832 * Actually, just clear the bit that says that the emulator has
833 * been initialized. Initialization is delayed until the process
834 * traps to the emulator (if it is done at all) mainly because
835 * emulators don't provide an entry point for initialization.
837 p->p_addr->u_pcb.pcb_flags &= ~FP_SOFTFP;
840 * Arrange to trap the next npx or `fwait' instruction (see npx.c
841 * for why fwait must be trapped at least if there is an npx or an
842 * emulator). This is mainly to handle the case where npx0 is not
843 * configured, since the npx routines normally set up the trap
844 * otherwise. It should be done only at boot time, but doing it
845 * here allows modifying `npx_exists' for testing the emulator on
846 * systems with an npx.
848 load_cr0(rcr0() | CR0_MP | CR0_TS);
851 /* Initialize the npx (if any) for the current process. */
852 npxinit(__INITIAL_NPXCW__);
856 * XXX - Linux emulator
857 * Make sure sure edx is 0x0 on entry. Linux binaries depend
864 sysctl_machdep_adjkerntz SYSCTL_HANDLER_ARGS
867 error = sysctl_handle_int(oidp, oidp->oid_arg1, oidp->oid_arg2,
869 if (!error && req->newptr)
874 SYSCTL_PROC(_machdep, CPU_ADJKERNTZ, adjkerntz, CTLTYPE_INT|CTLFLAG_RW,
875 &adjkerntz, 0, sysctl_machdep_adjkerntz, "I", "");
877 SYSCTL_INT(_machdep, CPU_DISRTCSET, disable_rtc_set,
878 CTLFLAG_RW, &disable_rtc_set, 0, "");
880 SYSCTL_STRUCT(_machdep, CPU_BOOTINFO, bootinfo,
881 CTLFLAG_RD, &bootinfo, bootinfo, "");
883 SYSCTL_INT(_machdep, CPU_WALLCLOCK, wall_cmos_clock,
884 CTLFLAG_RW, &wall_cmos_clock, 0, "");
887 * Initialize 386 and configure to run kernel
891 * Initialize segments & interrupt table
896 union descriptor gdt[NGDT * NCPU]; /* global descriptor table */
898 union descriptor gdt[NGDT]; /* global descriptor table */
900 static struct gate_descriptor idt0[NIDT];
901 struct gate_descriptor *idt = &idt0[0]; /* interrupt descriptor table */
902 union descriptor ldt[NLDT]; /* local descriptor table */
904 /* table descriptors - used to load tables by microp */
905 struct region_descriptor r_gdt, r_idt;
909 extern struct segment_descriptor common_tssd, *tss_gdt;
911 int private_tss; /* flag indicating private tss */
913 #if defined(I586_CPU) && !defined(NO_F00F_HACK)
914 extern int has_f00f_bug;
917 static struct i386tss dblfault_tss;
918 static char dblfault_stack[PAGE_SIZE];
920 extern struct user *proc0paddr;
923 /* software prototypes -- in more palatable form */
924 struct soft_segment_descriptor gdt_segs[] = {
925 /* GNULL_SEL 0 Null Descriptor */
926 { 0x0, /* segment base address */
928 0, /* segment type */
929 0, /* segment descriptor priority level */
930 0, /* segment descriptor present */
932 0, /* default 32 vs 16 bit size */
933 0 /* limit granularity (byte/page units)*/ },
934 /* GCODE_SEL 1 Code Descriptor for kernel */
935 { 0x0, /* segment base address */
936 0xfffff, /* length - all address space */
937 SDT_MEMERA, /* segment type */
938 0, /* segment descriptor priority level */
939 1, /* segment descriptor present */
941 1, /* default 32 vs 16 bit size */
942 1 /* limit granularity (byte/page units)*/ },
943 /* GDATA_SEL 2 Data Descriptor for kernel */
944 { 0x0, /* segment base address */
945 0xfffff, /* length - all address space */
946 SDT_MEMRWA, /* segment type */
947 0, /* segment descriptor priority level */
948 1, /* segment descriptor present */
950 1, /* default 32 vs 16 bit size */
951 1 /* limit granularity (byte/page units)*/ },
952 /* GPRIV_SEL 3 SMP Per-Processor Private Data Descriptor */
953 { 0x0, /* segment base address */
954 0xfffff, /* length - all address space */
955 SDT_MEMRWA, /* segment type */
956 0, /* segment descriptor priority level */
957 1, /* segment descriptor present */
959 1, /* default 32 vs 16 bit size */
960 1 /* limit granularity (byte/page units)*/ },
961 /* GPROC0_SEL 4 Proc 0 Tss Descriptor */
963 0x0, /* segment base address */
964 sizeof(struct i386tss)-1,/* length - all address space */
965 SDT_SYS386TSS, /* segment type */
966 0, /* segment descriptor priority level */
967 1, /* segment descriptor present */
969 0, /* unused - default 32 vs 16 bit size */
970 0 /* limit granularity (byte/page units)*/ },
971 /* GLDT_SEL 5 LDT Descriptor */
972 { (int) ldt, /* segment base address */
973 sizeof(ldt)-1, /* length - all address space */
974 SDT_SYSLDT, /* segment type */
975 SEL_UPL, /* segment descriptor priority level */
976 1, /* segment descriptor present */
978 0, /* unused - default 32 vs 16 bit size */
979 0 /* limit granularity (byte/page units)*/ },
980 /* GUSERLDT_SEL 6 User LDT Descriptor per process */
981 { (int) ldt, /* segment base address */
982 (512 * sizeof(union descriptor)-1), /* length */
983 SDT_SYSLDT, /* segment type */
984 0, /* segment descriptor priority level */
985 1, /* segment descriptor present */
987 0, /* unused - default 32 vs 16 bit size */
988 0 /* limit granularity (byte/page units)*/ },
989 /* GTGATE_SEL 7 Null Descriptor - Placeholder */
990 { 0x0, /* segment base address */
991 0x0, /* length - all address space */
992 0, /* segment type */
993 0, /* segment descriptor priority level */
994 0, /* segment descriptor present */
996 0, /* default 32 vs 16 bit size */
997 0 /* limit granularity (byte/page units)*/ },
998 /* GPANIC_SEL 8 Panic Tss Descriptor */
999 { (int) &dblfault_tss, /* segment base address */
1000 sizeof(struct i386tss)-1,/* length - all address space */
1001 SDT_SYS386TSS, /* segment type */
1002 0, /* segment descriptor priority level */
1003 1, /* segment descriptor present */
1005 0, /* unused - default 32 vs 16 bit size */
1006 0 /* limit granularity (byte/page units)*/ },
1007 /* GAPMCODE32_SEL 9 APM BIOS 32-bit interface (32bit Code) */
1008 { 0, /* segment base address (overwritten by APM) */
1009 0xfffff, /* length */
1010 SDT_MEMERA, /* segment type */
1011 0, /* segment descriptor priority level */
1012 1, /* segment descriptor present */
1014 1, /* default 32 vs 16 bit size */
1015 1 /* limit granularity (byte/page units)*/ },
1016 /* GAPMCODE16_SEL 10 APM BIOS 32-bit interface (16bit Code) */
1017 { 0, /* segment base address (overwritten by APM) */
1018 0xfffff, /* length */
1019 SDT_MEMERA, /* segment type */
1020 0, /* segment descriptor priority level */
1021 1, /* segment descriptor present */
1023 0, /* default 32 vs 16 bit size */
1024 1 /* limit granularity (byte/page units)*/ },
1025 /* GAPMDATA_SEL 11 APM BIOS 32-bit interface (Data) */
1026 { 0, /* segment base address (overwritten by APM) */
1027 0xfffff, /* length */
1028 SDT_MEMRWA, /* segment type */
1029 0, /* segment descriptor priority level */
1030 1, /* segment descriptor present */
1032 1, /* default 32 vs 16 bit size */
1033 1 /* limit granularity (byte/page units)*/ },
1036 static struct soft_segment_descriptor ldt_segs[] = {
1037 /* Null Descriptor - overwritten by call gate */
1038 { 0x0, /* segment base address */
1039 0x0, /* length - all address space */
1040 0, /* segment type */
1041 0, /* segment descriptor priority level */
1042 0, /* segment descriptor present */
1044 0, /* default 32 vs 16 bit size */
1045 0 /* limit granularity (byte/page units)*/ },
1046 /* Null Descriptor - overwritten by call gate */
1047 { 0x0, /* segment base address */
1048 0x0, /* length - all address space */
1049 0, /* segment type */
1050 0, /* segment descriptor priority level */
1051 0, /* segment descriptor present */
1053 0, /* default 32 vs 16 bit size */
1054 0 /* limit granularity (byte/page units)*/ },
1055 /* Null Descriptor - overwritten by call gate */
1056 { 0x0, /* segment base address */
1057 0x0, /* length - all address space */
1058 0, /* segment type */
1059 0, /* segment descriptor priority level */
1060 0, /* segment descriptor present */
1062 0, /* default 32 vs 16 bit size */
1063 0 /* limit granularity (byte/page units)*/ },
1064 /* Code Descriptor for user */
1065 { 0x0, /* segment base address */
1066 0xfffff, /* length - all address space */
1067 SDT_MEMERA, /* segment type */
1068 SEL_UPL, /* segment descriptor priority level */
1069 1, /* segment descriptor present */
1071 1, /* default 32 vs 16 bit size */
1072 1 /* limit granularity (byte/page units)*/ },
1073 /* Null Descriptor - overwritten by call gate */
1074 { 0x0, /* segment base address */
1075 0x0, /* length - all address space */
1076 0, /* segment type */
1077 0, /* segment descriptor priority level */
1078 0, /* segment descriptor present */
1080 0, /* default 32 vs 16 bit size */
1081 0 /* limit granularity (byte/page units)*/ },
1082 /* Data Descriptor for user */
1083 { 0x0, /* segment base address */
1084 0xfffff, /* length - all address space */
1085 SDT_MEMRWA, /* segment type */
1086 SEL_UPL, /* segment descriptor priority level */
1087 1, /* segment descriptor present */
1089 1, /* default 32 vs 16 bit size */
1090 1 /* limit granularity (byte/page units)*/ },
1094 setidt(idx, func, typ, dpl, selec)
1101 struct gate_descriptor *ip;
1104 ip->gd_looffset = (int)func;
1105 ip->gd_selector = selec;
1111 ip->gd_hioffset = ((int)func)>>16 ;
1114 #define IDTVEC(name) __CONCAT(X,name)
1117 IDTVEC(div), IDTVEC(dbg), IDTVEC(nmi), IDTVEC(bpt), IDTVEC(ofl),
1118 IDTVEC(bnd), IDTVEC(ill), IDTVEC(dna), IDTVEC(fpusegm),
1119 IDTVEC(tss), IDTVEC(missing), IDTVEC(stk), IDTVEC(prot),
1120 IDTVEC(page), IDTVEC(mchk), IDTVEC(rsvd), IDTVEC(fpu), IDTVEC(align),
1121 IDTVEC(syscall), IDTVEC(int0x80_syscall);
1125 struct segment_descriptor *sd;
1126 struct soft_segment_descriptor *ssd;
1128 ssd->ssd_base = (sd->sd_hibase << 24) | sd->sd_lobase;
1129 ssd->ssd_limit = (sd->sd_hilimit << 16) | sd->sd_lolimit;
1130 ssd->ssd_type = sd->sd_type;
1131 ssd->ssd_dpl = sd->sd_dpl;
1132 ssd->ssd_p = sd->sd_p;
1133 ssd->ssd_def32 = sd->sd_def32;
1134 ssd->ssd_gran = sd->sd_gran;
1137 #define PHYSMAP_SIZE (2 * 8)
1140 * Populate the (physmap) array with base/bound pairs describing the
1141 * available physical memory in the system, then test this memory and
1142 * build the phys_avail array describing the actually-available memory.
1144 * If we cannot accurately determine the physical memory map, then use
1145 * value from the 0xE801 call, and failing that, the RTC.
1147 * Total memory size may be set by the kernel environment variable
1148 * hw.physmem or the compile-time define MAXMEM.
1151 getmemsize(int first)
1153 int i, physmap_idx, pa_indx;
1154 u_int basemem, extmem;
1155 struct vm86frame vmf;
1156 struct vm86context vmc;
1157 vm_offset_t pa, physmap[PHYSMAP_SIZE];
1166 bzero(&vmf, sizeof(struct vm86frame));
1167 bzero(physmap, sizeof(physmap));
1170 * Perform "base memory" related probes & setup
1172 vm86_intcall(0x12, &vmf);
1173 basemem = vmf.vmf_ax;
1174 if (basemem > 640) {
1175 printf("Preposterous BIOS basemem of %uK, truncating to 640K\n",
1181 * XXX if biosbasemem is now < 640, there is a `hole'
1182 * between the end of base memory and the start of
1183 * ISA memory. The hole may be empty or it may
1184 * contain BIOS code or data. Map it read/write so
1185 * that the BIOS can write to it. (Memory from 0 to
1186 * the physical end of the kernel is mapped read-only
1187 * to begin with and then parts of it are remapped.
1188 * The parts that aren't remapped form holes that
1189 * remain read-only and are unused by the kernel.
1190 * The base memory area is below the physical end of
1191 * the kernel and right now forms a read-only hole.
1192 * The part of it from PAGE_SIZE to
1193 * (trunc_page(biosbasemem * 1024) - 1) will be
1194 * remapped and used by the kernel later.)
1196 * This code is similar to the code used in
1197 * pmap_mapdev, but since no memory needs to be
1198 * allocated we simply change the mapping.
1200 for (pa = trunc_page(basemem * 1024);
1201 pa < ISA_HOLE_START; pa += PAGE_SIZE) {
1202 pte = (pt_entry_t)vtopte(pa + KERNBASE);
1203 *pte = pa | PG_RW | PG_V;
1207 * if basemem != 640, map pages r/w into vm86 page table so
1208 * that the bios can scribble on it.
1210 pte = (pt_entry_t)vm86paddr;
1211 for (i = basemem / 4; i < 160; i++)
1212 pte[i] = (i << PAGE_SHIFT) | PG_V | PG_RW | PG_U;
1215 * map page 1 R/W into the kernel page table so we can use it
1216 * as a buffer. The kernel will unmap this page later.
1218 pte = (pt_entry_t)vtopte(KERNBASE + (1 << PAGE_SHIFT));
1219 *pte = (1 << PAGE_SHIFT) | PG_RW | PG_V;
1222 * get memory map with INT 15:E820
1224 #define SMAPSIZ sizeof(*smap)
1225 #define SMAP_SIG 0x534D4150 /* 'SMAP' */
1228 smap = (void *)vm86_addpage(&vmc, 1, KERNBASE + (1 << PAGE_SHIFT));
1229 vm86_getptr(&vmc, (vm_offset_t)smap, &vmf.vmf_es, &vmf.vmf_di);
1234 vmf.vmf_eax = 0xE820;
1235 vmf.vmf_edx = SMAP_SIG;
1236 vmf.vmf_ecx = SMAPSIZ;
1237 i = vm86_datacall(0x15, &vmf, &vmc);
1238 if (i || vmf.vmf_eax != SMAP_SIG)
1240 if (boothowto & RB_VERBOSE)
1241 printf("SMAP type=%02x base=%08x %08x len=%08x %08x\n",
1243 *(u_int32_t *)((char *)&smap->base + 4),
1244 (u_int32_t)smap->base,
1245 *(u_int32_t *)((char *)&smap->length + 4),
1246 (u_int32_t)smap->length);
1248 if (smap->type != 0x01)
1251 if (smap->length == 0)
1254 if (smap->base >= 0xffffffff) {
1255 printf("%uK of memory above 4GB ignored\n",
1256 (u_int)(smap->length / 1024));
1260 for (i = 0; i <= physmap_idx; i += 2) {
1261 if (smap->base < physmap[i + 1]) {
1262 if (boothowto & RB_VERBOSE)
1264 "Overlapping or non-montonic memory region, ignoring second region\n");
1269 if (smap->base == physmap[physmap_idx + 1]) {
1270 physmap[physmap_idx + 1] += smap->length;
1275 if (physmap_idx == PHYSMAP_SIZE) {
1277 "Too many segments in the physical address map, giving up\n");
1280 physmap[physmap_idx] = smap->base;
1281 physmap[physmap_idx + 1] = smap->base + smap->length;
1283 } while (vmf.vmf_ebx != 0);
1285 if (physmap[1] != 0)
1289 * If we failed above, try memory map with INT 15:E801
1291 vmf.vmf_ax = 0xE801;
1292 if (vm86_intcall(0x15, &vmf) == 0) {
1293 extmem = vmf.vmf_cx + vmf.vmf_dx * 64;
1297 vm86_intcall(0x15, &vmf);
1298 extmem = vmf.vmf_ax;
1301 * Prefer the RTC value for extended memory.
1303 extmem = rtcin(RTC_EXTLO) + (rtcin(RTC_EXTHI) << 8);
1308 * Special hack for chipsets that still remap the 384k hole when
1309 * there's 16MB of memory - this really confuses people that
1310 * are trying to use bus mastering ISA controllers with the
1311 * "16MB limit"; they only have 16MB, but the remapping puts
1312 * them beyond the limit.
1314 * If extended memory is between 15-16MB (16-17MB phys address range),
1317 if ((extmem > 15 * 1024) && (extmem < 16 * 1024))
1321 physmap[1] = basemem * 1024;
1323 physmap[physmap_idx] = 0x100000;
1324 physmap[physmap_idx + 1] = physmap[physmap_idx] + extmem * 1024;
1328 * Now, physmap contains a map of physical memory.
1332 /* make hole for AP bootstrap code */
1333 physmap[1] = mp_bootaddress(physmap[1] / 1024);
1335 /* look for the MP hardware - needed for apic addresses */
1340 * Maxmem isn't the "maximum memory", it's one larger than the
1341 * highest page of the physical address space. It should be
1342 * called something like "Maxphyspage". We may adjust this
1343 * based on ``hw.physmem'' and the results of the memory test.
1345 Maxmem = atop(physmap[physmap_idx + 1]);
1348 Maxmem = MAXMEM / 4;
1352 * hw.maxmem is a size in bytes; we also allow k, m, and g suffixes
1353 * for the appropriate modifiers. This overrides MAXMEM.
1355 if ((cp = getenv("hw.physmem")) != NULL) {
1356 u_int64_t AllowMem, sanity;
1359 sanity = AllowMem = strtouq(cp, &ep, 0);
1360 if ((ep != cp) && (*ep != 0)) {
1373 AllowMem = sanity = 0;
1375 if (AllowMem < sanity)
1379 printf("Ignoring invalid memory size of '%s'\n", cp);
1381 Maxmem = atop(AllowMem);
1384 if (atop(physmap[physmap_idx + 1]) != Maxmem &&
1385 (boothowto & RB_VERBOSE))
1386 printf("Physical memory use set to %uK\n", Maxmem * 4);
1389 * If Maxmem has been increased beyond what the system has detected,
1390 * extend the last memory segment to the new limit.
1392 if (atop(physmap[physmap_idx + 1]) < Maxmem)
1393 physmap[physmap_idx + 1] = ptoa(Maxmem);
1395 /* call pmap initialization to make new kernel address space */
1396 pmap_bootstrap(first, 0);
1399 * Size up each available chunk of physical memory.
1401 physmap[0] = PAGE_SIZE; /* mask off page 0 */
1403 phys_avail[pa_indx++] = physmap[0];
1404 phys_avail[pa_indx] = physmap[0];
1406 pte = (pt_entry_t)vtopte(KERNBASE);
1408 pte = (pt_entry_t)CMAP1;
1412 * physmap is in bytes, so when converting to page boundaries,
1413 * round up the start address and round down the end address.
1415 for (i = 0; i <= physmap_idx; i += 2) {
1419 if (physmap[i + 1] < end)
1420 end = trunc_page(physmap[i + 1]);
1421 for (pa = round_page(physmap[i]); pa < end; pa += PAGE_SIZE) {
1426 int *ptr = (int *)CADDR1;
1430 * block out kernel memory as not available.
1432 if (pa >= 0x100000 && pa < first)
1438 * map page into kernel: valid, read/write,non-cacheable
1440 *pte = pa | PG_V | PG_RW | PG_N;
1445 * Test for alternating 1's and 0's
1447 *(volatile int *)ptr = 0xaaaaaaaa;
1448 if (*(volatile int *)ptr != 0xaaaaaaaa) {
1452 * Test for alternating 0's and 1's
1454 *(volatile int *)ptr = 0x55555555;
1455 if (*(volatile int *)ptr != 0x55555555) {
1461 *(volatile int *)ptr = 0xffffffff;
1462 if (*(volatile int *)ptr != 0xffffffff) {
1468 *(volatile int *)ptr = 0x0;
1469 if (*(volatile int *)ptr != 0x0) {
1473 * Restore original value.
1478 * Adjust array of valid/good pages.
1480 if (page_bad == TRUE) {
1484 * If this good page is a continuation of the
1485 * previous set of good pages, then just increase
1486 * the end pointer. Otherwise start a new chunk.
1487 * Note that "end" points one higher than end,
1488 * making the range >= start and < end.
1489 * If we're also doing a speculative memory
1490 * test and we at or past the end, bump up Maxmem
1491 * so that we keep going. The first bad page
1492 * will terminate the loop.
1494 if (phys_avail[pa_indx] == pa) {
1495 phys_avail[pa_indx] += PAGE_SIZE;
1498 if (pa_indx == PHYS_AVAIL_ARRAY_END) {
1499 printf("Too many holes in the physical address space, giving up\n");
1503 phys_avail[pa_indx++] = pa; /* start */
1504 phys_avail[pa_indx] = pa + PAGE_SIZE; /* end */
1514 * The last chunk must contain at least one page plus the message
1515 * buffer to avoid complicating other code (message buffer address
1516 * calculation, etc.).
1518 while (phys_avail[pa_indx - 1] + PAGE_SIZE +
1519 round_page(MSGBUF_SIZE) >= phys_avail[pa_indx]) {
1520 physmem -= atop(phys_avail[pa_indx] - phys_avail[pa_indx - 1]);
1521 phys_avail[pa_indx--] = 0;
1522 phys_avail[pa_indx--] = 0;
1525 Maxmem = atop(phys_avail[pa_indx]);
1527 /* Trim off space for the message buffer. */
1528 phys_avail[pa_indx] -= round_page(MSGBUF_SIZE);
1530 avail_end = phys_avail[pa_indx];
1538 struct gate_descriptor *gdp;
1541 /* table descriptors - used to load tables by microp */
1542 struct region_descriptor r_gdt, r_idt;
1547 * Prevent lowering of the ipl if we call tsleep() early.
1551 proc0.p_addr = proc0paddr;
1553 atdevbase = ISA_HOLE_START + KERNBASE;
1555 if (bootinfo.bi_modulep) {
1556 preload_metadata = (caddr_t)bootinfo.bi_modulep + KERNBASE;
1557 preload_bootstrap_relocate(KERNBASE);
1559 if (bootinfo.bi_envp)
1560 kern_envp = (caddr_t)bootinfo.bi_envp + KERNBASE;
1563 * make gdt memory segments, the code segment goes up to end of the
1564 * page with etext in it, the data segment goes to the end of
1568 * XXX text protection is temporarily (?) disabled. The limit was
1569 * i386_btop(round_page(etext)) - 1.
1571 gdt_segs[GCODE_SEL].ssd_limit = i386_btop(0) - 1;
1572 gdt_segs[GDATA_SEL].ssd_limit = i386_btop(0) - 1;
1574 gdt_segs[GPRIV_SEL].ssd_limit =
1575 i386_btop(sizeof(struct privatespace)) - 1;
1576 gdt_segs[GPRIV_SEL].ssd_base = (int) &SMP_prvspace[0];
1577 gdt_segs[GPROC0_SEL].ssd_base =
1578 (int) &SMP_prvspace[0].globaldata.gd_common_tss;
1579 SMP_prvspace[0].globaldata.gd_prvspace = &SMP_prvspace[0];
1581 gdt_segs[GPRIV_SEL].ssd_limit = i386_btop(0) - 1;
1582 gdt_segs[GPROC0_SEL].ssd_base = (int) &common_tss;
1585 for (x = 0; x < NGDT; x++) {
1587 /* avoid overwriting db entries with APM ones */
1588 if (x >= GAPMCODE32_SEL && x <= GAPMDATA_SEL)
1591 ssdtosd(&gdt_segs[x], &gdt[x].sd);
1594 r_gdt.rd_limit = NGDT * sizeof(gdt[0]) - 1;
1595 r_gdt.rd_base = (int) gdt;
1598 /* make ldt memory segments */
1600 * The data segment limit must not cover the user area because we
1601 * don't want the user area to be writable in copyout() etc. (page
1602 * level protection is lost in kernel mode on 386's). Also, we
1603 * don't want the user area to be writable directly (page level
1604 * protection of the user area is not available on 486's with
1605 * CR0_WP set, because there is no user-read/kernel-write mode).
1607 * XXX - VM_MAXUSER_ADDRESS is an end address, not a max. And it
1608 * should be spelled ...MAX_USER...
1610 #define VM_END_USER_RW_ADDRESS VM_MAXUSER_ADDRESS
1612 * The code segment limit has to cover the user area until we move
1613 * the signal trampoline out of the user area. This is safe because
1614 * the code segment cannot be written to directly.
1616 #define VM_END_USER_R_ADDRESS (VM_END_USER_RW_ADDRESS + UPAGES * PAGE_SIZE)
1617 ldt_segs[LUCODE_SEL].ssd_limit = i386_btop(VM_END_USER_R_ADDRESS) - 1;
1618 ldt_segs[LUDATA_SEL].ssd_limit = i386_btop(VM_END_USER_RW_ADDRESS) - 1;
1619 for (x = 0; x < sizeof ldt_segs / sizeof ldt_segs[0]; x++)
1620 ssdtosd(&ldt_segs[x], &ldt[x].sd);
1622 _default_ldt = GSEL(GLDT_SEL, SEL_KPL);
1625 currentldt = _default_ldt;
1629 for (x = 0; x < NIDT; x++)
1630 setidt(x, &IDTVEC(rsvd), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1631 setidt(0, &IDTVEC(div), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1632 setidt(1, &IDTVEC(dbg), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1633 setidt(2, &IDTVEC(nmi), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1634 setidt(3, &IDTVEC(bpt), SDT_SYS386TGT, SEL_UPL, GSEL(GCODE_SEL, SEL_KPL));
1635 setidt(4, &IDTVEC(ofl), SDT_SYS386TGT, SEL_UPL, GSEL(GCODE_SEL, SEL_KPL));
1636 setidt(5, &IDTVEC(bnd), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1637 setidt(6, &IDTVEC(ill), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1638 setidt(7, &IDTVEC(dna), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1639 setidt(8, 0, SDT_SYSTASKGT, SEL_KPL, GSEL(GPANIC_SEL, SEL_KPL));
1640 setidt(9, &IDTVEC(fpusegm), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1641 setidt(10, &IDTVEC(tss), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1642 setidt(11, &IDTVEC(missing), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1643 setidt(12, &IDTVEC(stk), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1644 setidt(13, &IDTVEC(prot), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1645 setidt(14, &IDTVEC(page), SDT_SYS386IGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1646 setidt(15, &IDTVEC(rsvd), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1647 setidt(16, &IDTVEC(fpu), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1648 setidt(17, &IDTVEC(align), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1649 setidt(18, &IDTVEC(mchk), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1650 setidt(0x80, &IDTVEC(int0x80_syscall),
1651 SDT_SYS386TGT, SEL_UPL, GSEL(GCODE_SEL, SEL_KPL));
1653 r_idt.rd_limit = sizeof(idt0) - 1;
1654 r_idt.rd_base = (int) idt;
1658 * Initialize the console before we print anything out.
1670 if (boothowto & RB_KDB)
1671 Debugger("Boot flags requested debugger");
1674 finishidentcpu(); /* Final stage of CPU initialization */
1675 setidt(6, &IDTVEC(ill), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1676 setidt(13, &IDTVEC(prot), SDT_SYS386TGT, SEL_KPL, GSEL(GCODE_SEL, SEL_KPL));
1677 initializecpu(); /* Initialize CPU registers */
1679 /* make an initial tss so cpu can get interrupt stack on syscall! */
1680 common_tss.tss_esp0 = (int) proc0.p_addr + UPAGES*PAGE_SIZE - 16;
1681 common_tss.tss_ss0 = GSEL(GDATA_SEL, SEL_KPL) ;
1682 gsel_tss = GSEL(GPROC0_SEL, SEL_KPL);
1684 tss_gdt = &gdt[GPROC0_SEL].sd;
1685 common_tssd = *tss_gdt;
1686 common_tss.tss_ioopt = (sizeof common_tss) << 16;
1689 dblfault_tss.tss_esp = dblfault_tss.tss_esp0 = dblfault_tss.tss_esp1 =
1690 dblfault_tss.tss_esp2 = (int) &dblfault_stack[sizeof(dblfault_stack)];
1691 dblfault_tss.tss_ss = dblfault_tss.tss_ss0 = dblfault_tss.tss_ss1 =
1692 dblfault_tss.tss_ss2 = GSEL(GDATA_SEL, SEL_KPL);
1693 dblfault_tss.tss_cr3 = (int)IdlePTD;
1694 dblfault_tss.tss_eip = (int) dblfault_handler;
1695 dblfault_tss.tss_eflags = PSL_KERNEL;
1696 dblfault_tss.tss_ds = dblfault_tss.tss_es =
1697 dblfault_tss.tss_gs = GSEL(GDATA_SEL, SEL_KPL);
1698 dblfault_tss.tss_fs = GSEL(GPRIV_SEL, SEL_KPL);
1699 dblfault_tss.tss_cs = GSEL(GCODE_SEL, SEL_KPL);
1700 dblfault_tss.tss_ldt = GSEL(GLDT_SEL, SEL_KPL);
1705 /* now running on new page tables, configured,and u/iom is accessible */
1707 /* Map the message buffer. */
1708 for (off = 0; off < round_page(MSGBUF_SIZE); off += PAGE_SIZE)
1709 pmap_kenter((vm_offset_t)msgbufp + off, avail_end + off);
1711 msgbufinit(msgbufp, MSGBUF_SIZE);
1713 /* make a call gate to reenter kernel with */
1714 gdp = &ldt[LSYS5CALLS_SEL].gd;
1716 x = (int) &IDTVEC(syscall);
1717 gdp->gd_looffset = x++;
1718 gdp->gd_selector = GSEL(GCODE_SEL,SEL_KPL);
1720 gdp->gd_type = SDT_SYS386CGT;
1721 gdp->gd_dpl = SEL_UPL;
1723 gdp->gd_hioffset = ((int) &IDTVEC(syscall)) >>16;
1725 /* XXX does this work? */
1726 ldt[LBSDICALLS_SEL] = ldt[LSYS5CALLS_SEL];
1727 ldt[LSOL26CALLS_SEL] = ldt[LSYS5CALLS_SEL];
1729 /* transfer to user mode */
1731 _ucodesel = LSEL(LUCODE_SEL, SEL_UPL);
1732 _udatasel = LSEL(LUDATA_SEL, SEL_UPL);
1734 /* setup proc 0's pcb */
1735 proc0.p_addr->u_pcb.pcb_flags = 0;
1736 proc0.p_addr->u_pcb.pcb_cr3 = (int)IdlePTD;
1738 proc0.p_addr->u_pcb.pcb_mpnest = 1;
1740 proc0.p_addr->u_pcb.pcb_ext = 0;
1743 #if defined(I586_CPU) && !defined(NO_F00F_HACK)
1744 static void f00f_hack(void *unused);
1745 SYSINIT(f00f_hack, SI_SUB_INTRINSIC, SI_ORDER_FIRST, f00f_hack, NULL);
1748 f00f_hack(void *unused) {
1749 struct gate_descriptor *new_idt;
1751 struct region_descriptor r_idt;
1758 printf("Intel Pentium detected, installing workaround for F00F bug\n");
1760 r_idt.rd_limit = sizeof(idt0) - 1;
1762 tmp = kmem_alloc(kernel_map, PAGE_SIZE * 2);
1764 panic("kmem_alloc returned 0");
1765 if (((unsigned int)tmp & (PAGE_SIZE-1)) != 0)
1766 panic("kmem_alloc returned non-page-aligned memory");
1767 /* Put the first seven entries in the lower page */
1768 new_idt = (struct gate_descriptor*)(tmp + PAGE_SIZE - (7*8));
1769 bcopy(idt, new_idt, sizeof(idt0));
1770 r_idt.rd_base = (int)new_idt;
1773 if (vm_map_protect(kernel_map, tmp, tmp + PAGE_SIZE,
1774 VM_PROT_READ, FALSE) != KERN_SUCCESS)
1775 panic("vm_map_protect failed");
1778 #endif /* defined(I586_CPU) && !NO_F00F_HACK */
1781 ptrace_set_pc(p, addr)
1785 p->p_md.md_regs->tf_eip = addr;
1790 ptrace_single_step(p)
1793 p->p_md.md_regs->tf_eflags |= PSL_T;
1797 int ptrace_read_u_check(p, addr, len)
1804 if ((vm_offset_t) (addr + len) < addr)
1806 if ((vm_offset_t) (addr + len) <= sizeof(struct user))
1809 gap = (char *) p->p_md.md_regs - (char *) p->p_addr;
1811 if ((vm_offset_t) addr < gap)
1813 if ((vm_offset_t) (addr + len) <=
1814 (vm_offset_t) (gap + sizeof(struct trapframe)))
1819 int ptrace_write_u(p, off, data)
1824 struct trapframe frame_copy;
1826 struct trapframe *tp;
1829 * Privileged kernel state is scattered all over the user area.
1830 * Only allow write access to parts of regs and to fpregs.
1832 min = (char *)p->p_md.md_regs - (char *)p->p_addr;
1833 if (off >= min && off <= min + sizeof(struct trapframe) - sizeof(int)) {
1834 tp = p->p_md.md_regs;
1836 *(int *)((char *)&frame_copy + (off - min)) = data;
1837 if (!EFLAGS_SECURE(frame_copy.tf_eflags, tp->tf_eflags) ||
1838 !CS_SECURE(frame_copy.tf_cs))
1840 *(int*)((char *)p->p_addr + off) = data;
1843 min = offsetof(struct user, u_pcb) + offsetof(struct pcb, pcb_savefpu);
1844 if (off >= min && off <= min + sizeof(struct save87) - sizeof(int)) {
1845 *(int*)((char *)p->p_addr + off) = data;
1857 struct trapframe *tp;
1859 tp = p->p_md.md_regs;
1860 regs->r_fs = tp->tf_fs;
1861 regs->r_es = tp->tf_es;
1862 regs->r_ds = tp->tf_ds;
1863 regs->r_edi = tp->tf_edi;
1864 regs->r_esi = tp->tf_esi;
1865 regs->r_ebp = tp->tf_ebp;
1866 regs->r_ebx = tp->tf_ebx;
1867 regs->r_edx = tp->tf_edx;
1868 regs->r_ecx = tp->tf_ecx;
1869 regs->r_eax = tp->tf_eax;
1870 regs->r_eip = tp->tf_eip;
1871 regs->r_cs = tp->tf_cs;
1872 regs->r_eflags = tp->tf_eflags;
1873 regs->r_esp = tp->tf_esp;
1874 regs->r_ss = tp->tf_ss;
1875 pcb = &p->p_addr->u_pcb;
1876 regs->r_gs = pcb->pcb_gs;
1886 struct trapframe *tp;
1888 tp = p->p_md.md_regs;
1889 if (!EFLAGS_SECURE(regs->r_eflags, tp->tf_eflags) ||
1890 !CS_SECURE(regs->r_cs))
1892 tp->tf_fs = regs->r_fs;
1893 tp->tf_es = regs->r_es;
1894 tp->tf_ds = regs->r_ds;
1895 tp->tf_edi = regs->r_edi;
1896 tp->tf_esi = regs->r_esi;
1897 tp->tf_ebp = regs->r_ebp;
1898 tp->tf_ebx = regs->r_ebx;
1899 tp->tf_edx = regs->r_edx;
1900 tp->tf_ecx = regs->r_ecx;
1901 tp->tf_eax = regs->r_eax;
1902 tp->tf_eip = regs->r_eip;
1903 tp->tf_cs = regs->r_cs;
1904 tp->tf_eflags = regs->r_eflags;
1905 tp->tf_esp = regs->r_esp;
1906 tp->tf_ss = regs->r_ss;
1907 pcb = &p->p_addr->u_pcb;
1908 pcb->pcb_gs = regs->r_gs;
1913 fill_fpregs(p, fpregs)
1915 struct fpreg *fpregs;
1917 bcopy(&p->p_addr->u_pcb.pcb_savefpu, fpregs, sizeof *fpregs);
1922 set_fpregs(p, fpregs)
1924 struct fpreg *fpregs;
1926 bcopy(fpregs, &p->p_addr->u_pcb.pcb_savefpu, sizeof *fpregs);
1931 fill_dbregs(p, dbregs)
1933 struct dbreg *dbregs;
1937 pcb = &p->p_addr->u_pcb;
1938 dbregs->dr0 = pcb->pcb_dr0;
1939 dbregs->dr1 = pcb->pcb_dr1;
1940 dbregs->dr2 = pcb->pcb_dr2;
1941 dbregs->dr3 = pcb->pcb_dr3;
1944 dbregs->dr6 = pcb->pcb_dr6;
1945 dbregs->dr7 = pcb->pcb_dr7;
1950 set_dbregs(p, dbregs)
1952 struct dbreg *dbregs;
1956 pcb = &p->p_addr->u_pcb;
1959 * Don't let a process set a breakpoint that is not within the
1960 * process's address space. If a process could do this, it
1961 * could halt the system by setting a breakpoint in the kernel
1962 * (if ddb was enabled). Thus, we need to check to make sure
1963 * that no breakpoints are being enabled for addresses outside
1964 * process's address space, unless, perhaps, we were called by
1967 * XXX - what about when the watched area of the user's
1968 * address space is written into from within the kernel
1969 * ... wouldn't that still cause a breakpoint to be generated
1970 * from within kernel mode?
1973 if (p->p_cred->pc_ucred->cr_uid != 0) {
1974 if (dbregs->dr7 & 0x3) {
1975 /* dr0 is enabled */
1976 if (dbregs->dr0 >= VM_MAXUSER_ADDRESS)
1980 if (dbregs->dr7 & (0x3<<2)) {
1981 /* dr1 is enabled */
1982 if (dbregs->dr1 >= VM_MAXUSER_ADDRESS)
1986 if (dbregs->dr7 & (0x3<<4)) {
1987 /* dr2 is enabled */
1988 if (dbregs->dr2 >= VM_MAXUSER_ADDRESS)
1992 if (dbregs->dr7 & (0x3<<6)) {
1993 /* dr3 is enabled */
1994 if (dbregs->dr3 >= VM_MAXUSER_ADDRESS)
1999 pcb->pcb_dr0 = dbregs->dr0;
2000 pcb->pcb_dr1 = dbregs->dr1;
2001 pcb->pcb_dr2 = dbregs->dr2;
2002 pcb->pcb_dr3 = dbregs->dr3;
2003 pcb->pcb_dr6 = dbregs->dr6;
2004 pcb->pcb_dr7 = dbregs->dr7;
2006 pcb->pcb_flags |= PCB_DBREGS;
2013 Debugger(const char *msg)
2015 printf("Debugger(\"%s\") called.\n", msg);
2019 #include <sys/disklabel.h>
2022 * Determine the size of the transfer, and make sure it is
2023 * within the boundaries of the partition. Adjust transfer
2024 * if needed, and signal errors or early completion.
2027 bounds_check_with_label(struct buf *bp, struct disklabel *lp, int wlabel)
2029 struct partition *p = lp->d_partitions + dkpart(bp->b_dev);
2030 int labelsect = lp->d_partitions[0].p_offset;
2031 int maxsz = p->p_size,
2032 sz = (bp->b_bcount + DEV_BSIZE - 1) >> DEV_BSHIFT;
2034 /* overwriting disk label ? */
2035 /* XXX should also protect bootstrap in first 8K */
2036 if (bp->b_blkno + p->p_offset <= LABELSECTOR + labelsect &&
2037 #if LABELSECTOR != 0
2038 bp->b_blkno + p->p_offset + sz > LABELSECTOR + labelsect &&
2040 (bp->b_flags & B_READ) == 0 && wlabel == 0) {
2041 bp->b_error = EROFS;
2045 #if defined(DOSBBSECTOR) && defined(notyet)
2046 /* overwriting master boot record? */
2047 if (bp->b_blkno + p->p_offset <= DOSBBSECTOR &&
2048 (bp->b_flags & B_READ) == 0 && wlabel == 0) {
2049 bp->b_error = EROFS;
2054 /* beyond partition? */
2055 if (bp->b_blkno < 0 || bp->b_blkno + sz > maxsz) {
2056 /* if exactly at end of disk, return an EOF */
2057 if (bp->b_blkno == maxsz) {
2058 bp->b_resid = bp->b_bcount;
2061 /* or truncate if part of it fits */
2062 sz = maxsz - bp->b_blkno;
2064 bp->b_error = EINVAL;
2067 bp->b_bcount = sz << DEV_BSHIFT;
2070 bp->b_pblkno = bp->b_blkno + p->p_offset;
2074 bp->b_flags |= B_ERROR;
2081 * Provide inb() and outb() as functions. They are normally only
2082 * available as macros calling inlined functions, thus cannot be
2083 * called inside DDB.
2085 * The actual code is stolen from <machine/cpufunc.h>, and de-inlined.
2091 /* silence compiler warnings */
2093 void outb(u_int, u_char);
2100 * We use %%dx and not %1 here because i/o is done at %dx and not at
2101 * %edx, while gcc generates inferior code (movw instead of movl)
2102 * if we tell it to load (u_short) port.
2104 __asm __volatile("inb %%dx,%0" : "=a" (data) : "d" (port));
2109 outb(u_int port, u_char data)
2113 * Use an unnecessary assignment to help gcc's register allocator.
2114 * This make a large difference for gcc-1.40 and a tiny difference
2115 * for gcc-2.6.0. For gcc-1.40, al had to be ``asm("ax")'' for
2116 * best results. gcc-2.6.0 can't handle this.
2119 __asm __volatile("outb %0,%%dx" : : "a" (al), "d" (port));