sys/powerpc/powerpc/trap.c

   1 /*-
   2  * Copyright (C) 1995, 1996 Wolfgang Solfrank.
   3  * Copyright (C) 1995, 1996 TooLs GmbH.
   4  * All rights reserved.
   5  *
   6  * Redistribution and use in source and binary forms, with or without
   7  * modification, are permitted provided that the following conditions
   8  * are met:
   9  * 1. Redistributions of source code must retain the above copyright
  10  *    notice, this list of conditions and the following disclaimer.
  11  * 2. Redistributions in binary form must reproduce the above copyright
  12  *    notice, this list of conditions and the following disclaimer in the
  13  *    documentation and/or other materials provided with the distribution.
  14  * 3. All advertising materials mentioning features or use of this software
  15  *    must display the following acknowledgement:
  16  *      This product includes software developed by TooLs GmbH.
  17  * 4. The name of TooLs GmbH may not be used to endorse or promote products
  18  *    derived from this software without specific prior written permission.
  19  *
  20  * THIS SOFTWARE IS PROVIDED BY TOOLS GMBH ``AS IS'' AND ANY EXPRESS OR
  21  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
  22  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
  23  * IN NO EVENT SHALL TOOLS GMBH BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  24  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
  25  * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
  26  * OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
  27  * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
  28  * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
  29  * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  30  *
  31  * $NetBSD: trap.c,v 1.58 2002/03/04 04:07:35 dbj Exp $
  32  */
  33
  34 #include <sys/cdefs.h>
  35 __FBSDID("$FreeBSD$");
  36
  37 #include <sys/param.h>
  38 #include <sys/kdb.h>
  39 #include <sys/proc.h>
  40 #include <sys/ktr.h>
  41 #include <sys/lock.h>
  42 #include <sys/mutex.h>
  43 #include <sys/pioctl.h>
  44 #include <sys/ptrace.h>
  45 #include <sys/reboot.h>
  46 #include <sys/syscall.h>
  47 #include <sys/sysent.h>
  48 #include <sys/systm.h>
  49 #include <sys/kernel.h>
  50 #include <sys/uio.h>
  51 #include <sys/signalvar.h>
  52 #include <sys/vmmeter.h>
  53
  54 #include <security/audit/audit.h>
  55
  56 #include <vm/vm.h>
  57 #include <vm/pmap.h>
  58 #include <vm/vm_extern.h>
  59 #include <vm/vm_param.h>
  60 #include <vm/vm_kern.h>
  61 #include <vm/vm_map.h>
  62 #include <vm/vm_page.h>
  63
  64 #include <machine/_inttypes.h>
  65 #include <machine/altivec.h>
  66 #include <machine/cpu.h>
  67 #include <machine/db_machdep.h>
  68 #include <machine/fpu.h>
  69 #include <machine/frame.h>
  70 #include <machine/pcb.h>
  71 #include <machine/pmap.h>
  72 #include <machine/psl.h>
  73 #include <machine/trap.h>
  74 #include <machine/spr.h>
  75 #include <machine/sr.h>
  76
  77 #define FAULTBUF_LR     0
  78 #define FAULTBUF_R1     1
  79 #define FAULTBUF_R2     2
  80 #define FAULTBUF_CR     3
  81 #define FAULTBUF_R13    4
  82
  83 static void     trap_fatal(struct trapframe *frame);
  84 static void     printtrap(u_int vector, struct trapframe *frame, int isfatal,
  85                     int user);
  86 static int      trap_pfault(struct trapframe *frame, int user);
  87 static int      fix_unaligned(struct thread *td, struct trapframe *frame);
  88 static int      handle_onfault(struct trapframe *frame);
  89 static void     syscall(struct trapframe *frame);
  90
  91 #ifdef __powerpc64__
  92        void     handle_kernel_slb_spill(int, register_t, register_t);
  93 static int      handle_user_slb_spill(pmap_t pm, vm_offset_t addr);
  94 extern int      n_slbs;
  95 #endif
  96
  97 struct powerpc_exception {
  98         u_int   vector;
  99         char    *name;
 100 };
 101
 102 #ifdef KDTRACE_HOOKS
 103 #include <sys/dtrace_bsd.h>
 104
 105 int (*dtrace_invop_jump_addr)(struct trapframe *);
 106 #endif
 107
 108 static struct powerpc_exception powerpc_exceptions[] = {
 109         { EXC_CRIT,     "critical input" },
 110         { EXC_RST,      "system reset" },
 111         { EXC_MCHK,     "machine check" },
 112         { EXC_DSI,      "data storage interrupt" },
 113         { EXC_DSE,      "data segment exception" },
 114         { EXC_ISI,      "instruction storage interrupt" },
 115         { EXC_ISE,      "instruction segment exception" },
 116         { EXC_EXI,      "external interrupt" },
 117         { EXC_ALI,      "alignment" },
 118         { EXC_PGM,      "program" },
 119         { EXC_FPU,      "floating-point unavailable" },
 120         { EXC_APU,      "auxiliary proc unavailable" },
 121         { EXC_DECR,     "decrementer" },
 122         { EXC_FIT,      "fixed-interval timer" },
 123         { EXC_WDOG,     "watchdog timer" },
 124         { EXC_SC,       "system call" },
 125         { EXC_TRC,      "trace" },
 126         { EXC_FPA,      "floating-point assist" },
 127         { EXC_DEBUG,    "debug" },
 128         { EXC_PERF,     "performance monitoring" },
 129         { EXC_VEC,      "altivec unavailable" },
 130         { EXC_VSX,      "vsx unavailable" },
 131         { EXC_ITMISS,   "instruction tlb miss" },
 132         { EXC_DLMISS,   "data load tlb miss" },
 133         { EXC_DSMISS,   "data store tlb miss" },
 134         { EXC_BPT,      "instruction breakpoint" },
 135         { EXC_SMI,      "system management" },
 136         { EXC_VECAST_G4,        "altivec assist" },
 137         { EXC_THRM,     "thermal management" },
 138         { EXC_RUNMODETRC,       "run mode/trace" },
 139         { EXC_LAST,     NULL }
 140 };
 141
 142 static const char *
 143 trapname(u_int vector)
 144 {
 145         struct  powerpc_exception *pe;
 146
 147         for (pe = powerpc_exceptions; pe->vector != EXC_LAST; pe++) {
 148                 if (pe->vector == vector)
 149                         return (pe->name);
 150         }
 151
 152         return ("unknown");
 153 }
 154
 155 void
 156 trap(struct trapframe *frame)
 157 {
 158         struct thread   *td;
 159         struct proc     *p;
 160 #ifdef KDTRACE_HOOKS
 161         uint32_t inst;
 162 #endif
 163         int             sig, type, user;
 164         u_int           ucode;
 165         ksiginfo_t      ksi;
 166
 167         PCPU_INC(cnt.v_trap);
 168
 169         td = curthread;
 170         p = td->td_proc;
 171
 172         type = ucode = frame->exc;
 173         sig = 0;
 174         user = frame->srr1 & PSL_PR;
 175
 176         CTR3(KTR_TRAP, "trap: %s type=%s (%s)", td->td_name,
 177             trapname(type), user ? "user" : "kernel");
 178
 179 #ifdef KDTRACE_HOOKS
 180         /*
 181          * A trap can occur while DTrace executes a probe. Before
 182          * executing the probe, DTrace blocks re-scheduling and sets
 183          * a flag in its per-cpu flags to indicate that it doesn't
 184          * want to fault. On returning from the probe, the no-fault
 185          * flag is cleared and finally re-scheduling is enabled.
 186          *
 187          * If the DTrace kernel module has registered a trap handler,
 188          * call it and if it returns non-zero, assume that it has
 189          * handled the trap and modified the trap frame so that this
 190          * function can return normally.
 191          */
 192         if (dtrace_trap_func != NULL && (*dtrace_trap_func)(frame, type) != 0)
 193                 return;
 194 #endif
 195
 196         if (user) {
 197                 td->td_pticks = 0;
 198                 td->td_frame = frame;
 199                 if (td->td_cowgen != p->p_cowgen)
 200                         thread_cow_update(td);
 201
 202                 /* User Mode Traps */
 203                 switch (type) {
 204                 case EXC_RUNMODETRC:
 205                 case EXC_TRC:
 206                         frame->srr1 &= ~PSL_SE;
 207                         sig = SIGTRAP;
 208                         ucode = TRAP_TRACE;
 209                         break;
 210
 211 #ifdef __powerpc64__
 212                 case EXC_ISE:
 213                 case EXC_DSE:
 214                         if (handle_user_slb_spill(&p->p_vmspace->vm_pmap,
 215                             (type == EXC_ISE) ? frame->srr0 : frame->dar) != 0){
 216                                 sig = SIGSEGV;
 217                                 ucode = SEGV_MAPERR;
 218                         }
 219                         break;
 220 #endif
 221                 case EXC_DSI:
 222                 case EXC_ISI:
 223                         sig = trap_pfault(frame, 1);
 224                         if (sig == SIGSEGV)
 225                                 ucode = SEGV_MAPERR;
 226                         break;
 227
 228                 case EXC_SC:
 229                         syscall(frame);
 230                         break;
 231
 232                 case EXC_FPU:
 233                         KASSERT((td->td_pcb->pcb_flags & PCB_FPU) != PCB_FPU,
 234                             ("FPU already enabled for thread"));
 235                         enable_fpu(td);
 236                         break;
 237
 238                 case EXC_VEC:
 239                         KASSERT((td->td_pcb->pcb_flags & PCB_VEC) != PCB_VEC,
 240                             ("Altivec already enabled for thread"));
 241                         enable_vec(td);
 242                         break;
 243
 244                 case EXC_VSX:
 245                         KASSERT((td->td_pcb->pcb_flags & PCB_VSX) != PCB_VSX,
 246                             ("VSX already enabled for thread"));
 247                         if (!(td->td_pcb->pcb_flags & PCB_VEC))
 248                                 enable_vec(td);
 249                         if (!(td->td_pcb->pcb_flags & PCB_FPU))
 250                                 save_fpu(td);
 251                         td->td_pcb->pcb_flags |= PCB_VSX;
 252                         enable_fpu(td);
 253                         break;
 254
 255                 case EXC_VECAST_G4:
 256                 case EXC_VECAST_G5:
 257                         /*
 258                          * We get a VPU assist exception for IEEE mode
 259                          * vector operations on denormalized floats.
 260                          * Emulating this is a giant pain, so for now,
 261                          * just switch off IEEE mode and treat them as
 262                          * zero.
 263                          */
 264
 265                         save_vec(td);
 266                         td->td_pcb->pcb_vec.vscr |= ALTIVEC_VSCR_NJ;
 267                         enable_vec(td);
 268                         break;
 269
 270                 case EXC_ALI:
 271                         if (fix_unaligned(td, frame) != 0) {
 272                                 sig = SIGBUS;
 273                                 ucode = BUS_ADRALN;
 274                         }
 275                         else
 276                                 frame->srr0 += 4;
 277                         break;
 278
 279                 case EXC_DEBUG: /* Single stepping */
 280                         mtspr(SPR_DBSR, mfspr(SPR_DBSR));
 281                         frame->srr1 &= ~PSL_DE;
 282                         frame->cpu.booke.dbcr0 &= ~(DBCR0_IDM || DBCR0_IC);
 283                         sig = SIGTRAP;
 284                         ucode = TRAP_TRACE;
 285                         break;
 286
 287                 case EXC_PGM:
 288                         /* Identify the trap reason */
 289 #ifdef AIM
 290                         if (frame->srr1 & EXC_PGM_TRAP) {
 291 #else
 292                         if (frame->cpu.booke.esr & ESR_PTR) {
 293 #endif
 294 #ifdef KDTRACE_HOOKS
 295                                 inst = fuword32((const void *)frame->srr0);
 296                                 if (inst == 0x0FFFDDDD &&
 297                                     dtrace_pid_probe_ptr != NULL) {
 298                                         struct reg regs;
 299                                         fill_regs(td, &regs);
 300                                         (*dtrace_pid_probe_ptr)(&regs);
 301                                         break;
 302                                 }
 303 #endif
 304                                 sig = SIGTRAP;
 305                                 ucode = TRAP_BRKPT;
 306                         } else {
 307                                 sig = ppc_instr_emulate(frame, td->td_pcb);
 308                                 if (sig == SIGILL) {
 309                                         if (frame->srr1 & EXC_PGM_PRIV)
 310                                                 ucode = ILL_PRVOPC;
 311                                         else if (frame->srr1 & EXC_PGM_ILLEGAL)
 312                                                 ucode = ILL_ILLOPC;
 313                                 } else if (sig == SIGFPE)
 314                                         ucode = FPE_FLTINV;     /* Punt for now, invalid operation. */
 315                         }
 316                         break;
 317
 318                 case EXC_MCHK:
 319                         /*
 320                          * Note that this may not be recoverable for the user
 321                          * process, depending on the type of machine check,
 322                          * but it at least prevents the kernel from dying.
 323                          */
 324                         sig = SIGBUS;
 325                         ucode = BUS_OBJERR;
 326                         break;
 327
 328                 default:
 329                         trap_fatal(frame);
 330                 }
 331         } else {
 332                 /* Kernel Mode Traps */
 333
 334                 KASSERT(cold || td->td_ucred != NULL,
 335                     ("kernel trap doesn't have ucred"));
 336                 switch (type) {
 337 #ifdef KDTRACE_HOOKS
 338                 case EXC_PGM:
 339                         if (frame->srr1 & EXC_PGM_TRAP) {
 340                                 if (*(uint32_t *)frame->srr0 == EXC_DTRACE) {
 341                                         if (dtrace_invop_jump_addr != NULL) {
 342                                                 dtrace_invop_jump_addr(frame);
 343                                                 return;
 344                                         }
 345                                 }
 346                         }
 347                         break;
 348 #endif
 349 #ifdef __powerpc64__
 350                 case EXC_DSE:
 351                         if ((frame->dar & SEGMENT_MASK) == USER_ADDR) {
 352                                 __asm __volatile ("slbmte %0, %1" ::
 353                                         "r"(td->td_pcb->pcb_cpu.aim.usr_vsid),
 354                                         "r"(USER_SLB_SLBE));
 355                                 return;
 356                         }
 357                         break;
 358 #endif
 359                 case EXC_DSI:
 360                         if (trap_pfault(frame, 0) == 0)
 361                                 return;
 362                         break;
 363                 case EXC_MCHK:
 364                         if (handle_onfault(frame))
 365                                 return;
 366                         break;
 367                 default:
 368                         break;
 369                 }
 370                 trap_fatal(frame);
 371         }
 372
 373         if (sig != 0) {
 374                 if (p->p_sysent->sv_transtrap != NULL)
 375                         sig = (p->p_sysent->sv_transtrap)(sig, type);
 376                 ksiginfo_init_trap(&ksi);
 377                 ksi.ksi_signo = sig;
 378                 ksi.ksi_code = (int) ucode; /* XXX, not POSIX */
 379                 /* ksi.ksi_addr = ? */
 380                 ksi.ksi_trapno = type;
 381                 trapsignal(td, &ksi);
 382         }
 383
 384         userret(td, frame);
 385 }
 386
 387 static void
 388 trap_fatal(struct trapframe *frame)
 389 {
 390
 391         printtrap(frame->exc, frame, 1, (frame->srr1 & PSL_PR));
 392 #ifdef KDB
 393         if ((debugger_on_panic || kdb_active) &&
 394             kdb_trap(frame->exc, 0, frame))
 395                 return;
 396 #endif
 397         panic("%s trap", trapname(frame->exc));
 398 }
 399
 400 static void
 401 printtrap(u_int vector, struct trapframe *frame, int isfatal, int user)
 402 {
 403         uint16_t ver;
 404
 405         printf("\n");
 406         printf("%s %s trap:\n", isfatal ? "fatal" : "handled",
 407             user ? "user" : "kernel");
 408         printf("\n");
 409         printf("   exception       = 0x%x (%s)\n", vector, trapname(vector));
 410         switch (vector) {
 411         case EXC_DSE:
 412         case EXC_DSI:
 413         case EXC_DTMISS:
 414                 printf("   virtual address = 0x%" PRIxPTR "\n", frame->dar);
 415 #ifdef AIM
 416                 printf("   dsisr           = 0x%" PRIxPTR "\n",
 417                     frame->cpu.aim.dsisr);
 418 #endif
 419                 break;
 420         case EXC_ISE:
 421         case EXC_ISI:
 422         case EXC_ITMISS:
 423                 printf("   virtual address = 0x%" PRIxPTR "\n", frame->srr0);
 424                 break;
 425         case EXC_MCHK:
 426                 ver = mfpvr() >> 16;
 427 #if defined(AIM)
 428                 if (MPC745X_P(ver))
 429                         printf("    msssr0         = 0x%x\n",
 430                             mfspr(SPR_MSSSR0));
 431 #elif defined(BOOKE)
 432                 printf("    mcsr           = 0x%x\n",
 433                     mfspr(SPR_MCSR));
 434 #endif
 435                 break;
 436         }
 437 #ifdef BOOKE
 438         printf("   esr             = 0x%" PRIxPTR "\n",
 439             frame->cpu.booke.esr);
 440 #endif
 441         printf("   srr0            = 0x%" PRIxPTR "\n", frame->srr0);
 442         printf("   srr1            = 0x%" PRIxPTR "\n", frame->srr1);
 443         printf("   lr              = 0x%" PRIxPTR "\n", frame->lr);
 444         printf("   curthread       = %p\n", curthread);
 445         if (curthread != NULL)
 446                 printf("          pid = %d, comm = %s\n",
 447                     curthread->td_proc->p_pid, curthread->td_name);
 448         printf("\n");
 449 }
 450
 451 /*
 452  * Handles a fatal fault when we have onfault state to recover.  Returns
 453  * non-zero if there was onfault recovery state available.
 454  */
 455 static int
 456 handle_onfault(struct trapframe *frame)
 457 {
 458         struct          thread *td;
 459         faultbuf        *fb;
 460
 461         td = curthread;
 462         fb = td->td_pcb->pcb_onfault;
 463         if (fb != NULL) {
 464                 frame->srr0 = (*fb)[FAULTBUF_LR];
 465                 frame->fixreg[1] = (*fb)[FAULTBUF_R1];
 466                 frame->fixreg[2] = (*fb)[FAULTBUF_R2];
 467                 frame->fixreg[3] = 1;
 468                 frame->cr = (*fb)[FAULTBUF_CR];
 469                 bcopy(&(*fb)[FAULTBUF_R13], &frame->fixreg[13],
 470                     19 * sizeof(register_t));
 471                 return (1);
 472         }
 473         return (0);
 474 }
 475
 476 int
 477 cpu_fetch_syscall_args(struct thread *td, struct syscall_args *sa)
 478 {
 479         struct proc *p;
 480         struct trapframe *frame;
 481         caddr_t params;
 482         size_t argsz;
 483         int error, n, i;
 484
 485         p = td->td_proc;
 486         frame = td->td_frame;
 487
 488         sa->code = frame->fixreg[0];
 489         params = (caddr_t)(frame->fixreg + FIRSTARG);
 490         n = NARGREG;
 491
 492         if (sa->code == SYS_syscall) {
 493                 /*
 494                  * code is first argument,
 495                  * followed by actual args.
 496                  */
 497                 sa->code = *(register_t *) params;
 498                 params += sizeof(register_t);
 499                 n -= 1;
 500         } else if (sa->code == SYS___syscall) {
 501                 /*
 502                  * Like syscall, but code is a quad,
 503                  * so as to maintain quad alignment
 504                  * for the rest of the args.
 505                  */
 506                 if (SV_PROC_FLAG(p, SV_ILP32)) {
 507                         params += sizeof(register_t);
 508                         sa->code = *(register_t *) params;
 509                         params += sizeof(register_t);
 510                         n -= 2;
 511                 } else {
 512                         sa->code = *(register_t *) params;
 513                         params += sizeof(register_t);
 514                         n -= 1;
 515                 }
 516         }
 517
 518         if (p->p_sysent->sv_mask)
 519                 sa->code &= p->p_sysent->sv_mask;
 520         if (sa->code >= p->p_sysent->sv_size)
 521                 sa->callp = &p->p_sysent->sv_table[0];
 522         else
 523                 sa->callp = &p->p_sysent->sv_table[sa->code];
 524
 525         sa->narg = sa->callp->sy_narg;
 526
 527         if (SV_PROC_FLAG(p, SV_ILP32)) {
 528                 argsz = sizeof(uint32_t);
 529
 530                 for (i = 0; i < n; i++)
 531                         sa->args[i] = ((u_register_t *)(params))[i] &
 532                             0xffffffff;
 533         } else {
 534                 argsz = sizeof(uint64_t);
 535
 536                 for (i = 0; i < n; i++)
 537                         sa->args[i] = ((u_register_t *)(params))[i];
 538         }
 539
 540         if (sa->narg > n)
 541                 error = copyin(MOREARGS(frame->fixreg[1]), sa->args + n,
 542                                (sa->narg - n) * argsz);
 543         else
 544                 error = 0;
 545
 546 #ifdef __powerpc64__
 547         if (SV_PROC_FLAG(p, SV_ILP32) && sa->narg > n) {
 548                 /* Expand the size of arguments copied from the stack */
 549
 550                 for (i = sa->narg; i >= n; i--)
 551                         sa->args[i] = ((uint32_t *)(&sa->args[n]))[i-n];
 552         }
 553 #endif
 554
 555         if (error == 0) {
 556                 td->td_retval[0] = 0;
 557                 td->td_retval[1] = frame->fixreg[FIRSTARG + 1];
 558         }
 559         return (error);
 560 }
 561
 562 #include "../../kern/subr_syscall.c"
 563
 564 void
 565 syscall(struct trapframe *frame)
 566 {
 567         struct thread *td;
 568         struct syscall_args sa;
 569         int error;
 570
 571         td = curthread;
 572         td->td_frame = frame;
 573
 574 #ifdef __powerpc64__
 575         /*
 576          * Speculatively restore last user SLB segment, which we know is
 577          * invalid already, since we are likely to do copyin()/copyout().
 578          */
 579         __asm __volatile ("slbmte %0, %1; isync" ::
 580             "r"(td->td_pcb->pcb_cpu.aim.usr_vsid), "r"(USER_SLB_SLBE));
 581 #endif
 582
 583         error = syscallenter(td, &sa);
 584         syscallret(td, error, &sa);
 585 }
 586
 587 #ifdef __powerpc64__
 588 /* Handle kernel SLB faults -- runs in real mode, all seat belts off */
 589 void
 590 handle_kernel_slb_spill(int type, register_t dar, register_t srr0)
 591 {
 592         struct slb *slbcache;
 593         uint64_t slbe, slbv;
 594         uint64_t esid, addr;
 595         int i;
 596
 597         addr = (type == EXC_ISE) ? srr0 : dar;
 598         slbcache = PCPU_GET(slb);
 599         esid = (uintptr_t)addr >> ADDR_SR_SHFT;
 600         slbe = (esid << SLBE_ESID_SHIFT) | SLBE_VALID;
 601
 602         /* See if the hardware flushed this somehow (can happen in LPARs) */
 603         for (i = 0; i < n_slbs; i++)
 604                 if (slbcache[i].slbe == (slbe | (uint64_t)i))
 605                         return;
 606
 607         /* Not in the map, needs to actually be added */
 608         slbv = kernel_va_to_slbv(addr);
 609         if (slbcache[USER_SLB_SLOT].slbe == 0) {
 610                 for (i = 0; i < n_slbs; i++) {
 611                         if (i == USER_SLB_SLOT)
 612                                 continue;
 613                         if (!(slbcache[i].slbe & SLBE_VALID))
 614                                 goto fillkernslb;
 615                 }
 616
 617                 if (i == n_slbs)
 618                         slbcache[USER_SLB_SLOT].slbe = 1;
 619         }
 620
 621         /* Sacrifice a random SLB entry that is not the user entry */
 622         i = mftb() % n_slbs;
 623         if (i == USER_SLB_SLOT)
 624                 i = (i+1) % n_slbs;
 625
 626 fillkernslb:
 627         /* Write new entry */
 628         slbcache[i].slbv = slbv;
 629         slbcache[i].slbe = slbe | (uint64_t)i;
 630
 631         /* Trap handler will restore from cache on exit */
 632 }
 633
 634 static int
 635 handle_user_slb_spill(pmap_t pm, vm_offset_t addr)
 636 {
 637         struct slb *user_entry;
 638         uint64_t esid;
 639         int i;
 640
 641         esid = (uintptr_t)addr >> ADDR_SR_SHFT;
 642
 643         PMAP_LOCK(pm);
 644         user_entry = user_va_to_slb_entry(pm, addr);
 645
 646         if (user_entry == NULL) {
 647                 /* allocate_vsid auto-spills it */
 648                 (void)allocate_user_vsid(pm, esid, 0);
 649         } else {
 650                 /*
 651                  * Check that another CPU has not already mapped this.
 652                  * XXX: Per-thread SLB caches would be better.
 653                  */
 654                 for (i = 0; i < pm->pm_slb_len; i++)
 655                         if (pm->pm_slb[i] == user_entry)
 656                                 break;
 657
 658                 if (i == pm->pm_slb_len)
 659                         slb_insert_user(pm, user_entry);
 660         }
 661         PMAP_UNLOCK(pm);
 662
 663         return (0);
 664 }
 665 #endif
 666
 667 static int
 668 trap_pfault(struct trapframe *frame, int user)
 669 {
 670         vm_offset_t     eva, va;
 671         struct          thread *td;
 672         struct          proc *p;
 673         vm_map_t        map;
 674         vm_prot_t       ftype;
 675         int             rv;
 676 #ifdef AIM
 677         register_t      user_sr;
 678 #endif
 679
 680         td = curthread;
 681         p = td->td_proc;
 682         if (frame->exc == EXC_ISI) {
 683                 eva = frame->srr0;
 684                 ftype = VM_PROT_EXECUTE;
 685                 if (frame->srr1 & SRR1_ISI_PFAULT)
 686                         ftype |= VM_PROT_READ;
 687         } else {
 688                 eva = frame->dar;
 689 #ifdef BOOKE
 690                 if (frame->cpu.booke.esr & ESR_ST)
 691 #else
 692                 if (frame->cpu.aim.dsisr & DSISR_STORE)
 693 #endif
 694                         ftype = VM_PROT_WRITE;
 695                 else
 696                         ftype = VM_PROT_READ;
 697         }
 698
 699         if (user) {
 700                 KASSERT(p->p_vmspace != NULL, ("trap_pfault: vmspace  NULL"));
 701                 map = &p->p_vmspace->vm_map;
 702         } else {
 703 #ifdef BOOKE
 704                 if (eva < VM_MAXUSER_ADDRESS) {
 705 #else
 706                 if ((eva >> ADDR_SR_SHFT) == (USER_ADDR >> ADDR_SR_SHFT)) {
 707 #endif
 708                         if (p->p_vmspace == NULL)
 709                                 return (SIGSEGV);
 710
 711                         map = &p->p_vmspace->vm_map;
 712
 713 #ifdef AIM
 714                         user_sr = td->td_pcb->pcb_cpu.aim.usr_segm;
 715                         eva &= ADDR_PIDX | ADDR_POFF;
 716                         eva |= user_sr << ADDR_SR_SHFT;
 717 #endif
 718                 } else {
 719                         map = kernel_map;
 720                 }
 721         }
 722         va = trunc_page(eva);
 723
 724         if (map != kernel_map) {
 725                 /*
 726                  * Keep swapout from messing with us during this
 727                  *      critical time.
 728                  */
 729                 PROC_LOCK(p);
 730                 ++p->p_lock;
 731                 PROC_UNLOCK(p);
 732
 733                 /* Fault in the user page: */
 734                 rv = vm_fault(map, va, ftype, VM_FAULT_NORMAL);
 735
 736                 PROC_LOCK(p);
 737                 --p->p_lock;
 738                 PROC_UNLOCK(p);
 739                 /*
 740                  * XXXDTRACE: add dtrace_doubletrap_func here?
 741                  */
 742         } else {
 743                 /*
 744                  * Don't have to worry about process locking or stacks in the
 745                  * kernel.
 746                  */
 747                 rv = vm_fault(map, va, ftype, VM_FAULT_NORMAL);
 748         }
 749
 750         if (rv == KERN_SUCCESS)
 751                 return (0);
 752
 753         if (!user && handle_onfault(frame))
 754                 return (0);
 755
 756         return (SIGSEGV);
 757 }
 758
 759 /*
 760  * For now, this only deals with the particular unaligned access case
 761  * that gcc tends to generate.  Eventually it should handle all of the
 762  * possibilities that can happen on a 32-bit PowerPC in big-endian mode.
 763  */
 764
 765 static int
 766 fix_unaligned(struct thread *td, struct trapframe *frame)
 767 {
 768         struct thread   *fputhread;
 769         int             indicator, reg;
 770         double          *fpr;
 771
 772         indicator = EXC_ALI_OPCODE_INDICATOR(frame->cpu.aim.dsisr);
 773
 774         switch (indicator) {
 775         case EXC_ALI_LFD:
 776         case EXC_ALI_STFD:
 777                 reg = EXC_ALI_RST(frame->cpu.aim.dsisr);
 778                 fpr = &td->td_pcb->pcb_fpu.fpr[reg].fpr;
 779                 fputhread = PCPU_GET(fputhread);
 780
 781                 /* Juggle the FPU to ensure that we've initialized
 782                  * the FPRs, and that their current state is in
 783                  * the PCB.
 784                  */
 785                 if (fputhread != td) {
 786                         if (fputhread)
 787                                 save_fpu(fputhread);
 788                         enable_fpu(td);
 789                 }
 790                 save_fpu(td);
 791
 792                 if (indicator == EXC_ALI_LFD) {
 793                         if (copyin((void *)frame->dar, fpr,
 794                             sizeof(double)) != 0)
 795                                 return (-1);
 796                         enable_fpu(td);
 797                 } else {
 798                         if (copyout(fpr, (void *)frame->dar,
 799                             sizeof(double)) != 0)
 800                                 return (-1);
 801                 }
 802                 return (0);
 803                 break;
 804         }
 805
 806         return (-1);
 807 }
 808
 809 #ifdef KDB
 810 int db_trap_glue(struct trapframe *);           /* Called from trap_subr.S */
 811
 812 int
 813 db_trap_glue(struct trapframe *frame)
 814 {
 815         if (!(frame->srr1 & PSL_PR)
 816             && (frame->exc == EXC_TRC || frame->exc == EXC_RUNMODETRC
 817 #ifdef AIM
 818                 || (frame->exc == EXC_PGM
 819                     && (frame->srr1 & 0x20000))
 820 #else
 821                 || (frame->exc == EXC_DEBUG)
 822 #endif
 823                 || frame->exc == EXC_BPT
 824                 || frame->exc == EXC_DSI)) {
 825                 int type = frame->exc;
 826
 827                 /* Ignore DTrace traps. */
 828                 if (*(uint32_t *)frame->srr0 == EXC_DTRACE)
 829                         return (0);
 830 #ifdef AIM
 831                 if (type == EXC_PGM && (frame->srr1 & 0x20000)) {
 832 #else
 833                 if (frame->cpu.booke.esr & ESR_PTR) {
 834 #endif
 835                         type = T_BREAKPOINT;
 836                 }
 837                 return (kdb_trap(type, 0, frame));
 838         }
 839
 840         return (0);
 841 }
 842 #endif