]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/blob - sys/powerpc/powerpc/trap.c
MFV r329803:
[FreeBSD/FreeBSD.git] / sys / powerpc / powerpc / trap.c
1 /*-
2  * Copyright (C) 1995, 1996 Wolfgang Solfrank.
3  * Copyright (C) 1995, 1996 TooLs GmbH.
4  * All rights reserved.
5  *
6  * Redistribution and use in source and binary forms, with or without
7  * modification, are permitted provided that the following conditions
8  * are met:
9  * 1. Redistributions of source code must retain the above copyright
10  *    notice, this list of conditions and the following disclaimer.
11  * 2. Redistributions in binary form must reproduce the above copyright
12  *    notice, this list of conditions and the following disclaimer in the
13  *    documentation and/or other materials provided with the distribution.
14  * 3. All advertising materials mentioning features or use of this software
15  *    must display the following acknowledgement:
16  *      This product includes software developed by TooLs GmbH.
17  * 4. The name of TooLs GmbH may not be used to endorse or promote products
18  *    derived from this software without specific prior written permission.
19  *
20  * THIS SOFTWARE IS PROVIDED BY TOOLS GMBH ``AS IS'' AND ANY EXPRESS OR
21  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
22  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
23  * IN NO EVENT SHALL TOOLS GMBH BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
24  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
25  * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
26  * OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
27  * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
28  * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
29  * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
30  *
31  * $NetBSD: trap.c,v 1.58 2002/03/04 04:07:35 dbj Exp $
32  */
33
34 #include <sys/cdefs.h>
35 __FBSDID("$FreeBSD$");
36
37 #include <sys/param.h>
38 #include <sys/kdb.h>
39 #include <sys/proc.h>
40 #include <sys/ktr.h>
41 #include <sys/lock.h>
42 #include <sys/mutex.h>
43 #include <sys/pioctl.h>
44 #include <sys/ptrace.h>
45 #include <sys/reboot.h>
46 #include <sys/syscall.h>
47 #include <sys/sysent.h>
48 #include <sys/systm.h>
49 #include <sys/kernel.h>
50 #include <sys/uio.h>
51 #include <sys/signalvar.h>
52 #include <sys/vmmeter.h>
53
54 #include <security/audit/audit.h>
55
56 #include <vm/vm.h>
57 #include <vm/pmap.h>
58 #include <vm/vm_extern.h>
59 #include <vm/vm_param.h>
60 #include <vm/vm_kern.h>
61 #include <vm/vm_map.h>
62 #include <vm/vm_page.h>
63
64 #include <machine/_inttypes.h>
65 #include <machine/altivec.h>
66 #include <machine/cpu.h>
67 #include <machine/db_machdep.h>
68 #include <machine/fpu.h>
69 #include <machine/frame.h>
70 #include <machine/pcb.h>
71 #include <machine/psl.h>
72 #include <machine/trap.h>
73 #include <machine/spr.h>
74 #include <machine/sr.h>
75
76 /* Below matches setjmp.S */
77 #define FAULTBUF_LR     21
78 #define FAULTBUF_R1     1
79 #define FAULTBUF_R2     2
80 #define FAULTBUF_CR     22
81 #define FAULTBUF_R14    3
82
83 #define MOREARGS(sp)    ((caddr_t)((uintptr_t)(sp) + \
84     sizeof(struct callframe) - 3*sizeof(register_t))) /* more args go here */
85
86 static void     trap_fatal(struct trapframe *frame);
87 static void     printtrap(u_int vector, struct trapframe *frame, int isfatal,
88                     int user);
89 static int      trap_pfault(struct trapframe *frame, int user);
90 static int      fix_unaligned(struct thread *td, struct trapframe *frame);
91 static int      handle_onfault(struct trapframe *frame);
92 static void     syscall(struct trapframe *frame);
93
94 #if defined(__powerpc64__) && defined(AIM)
95        void     handle_kernel_slb_spill(int, register_t, register_t);
96 static int      handle_user_slb_spill(pmap_t pm, vm_offset_t addr);
97 extern int      n_slbs;
98 #endif
99
100 extern vm_offset_t __startkernel;
101
102 #ifdef KDB
103 int db_trap_glue(struct trapframe *);           /* Called from trap_subr.S */
104 #endif
105
106 struct powerpc_exception {
107         u_int   vector;
108         char    *name;
109 };
110
111 #ifdef KDTRACE_HOOKS
112 #include <sys/dtrace_bsd.h>
113
114 int (*dtrace_invop_jump_addr)(struct trapframe *);
115 #endif
116
117 static struct powerpc_exception powerpc_exceptions[] = {
118         { EXC_CRIT,     "critical input" },
119         { EXC_RST,      "system reset" },
120         { EXC_MCHK,     "machine check" },
121         { EXC_DSI,      "data storage interrupt" },
122         { EXC_DSE,      "data segment exception" },
123         { EXC_ISI,      "instruction storage interrupt" },
124         { EXC_ISE,      "instruction segment exception" },
125         { EXC_EXI,      "external interrupt" },
126         { EXC_ALI,      "alignment" },
127         { EXC_PGM,      "program" },
128         { EXC_HEA,      "hypervisor emulation assistance" },
129         { EXC_FPU,      "floating-point unavailable" },
130         { EXC_APU,      "auxiliary proc unavailable" },
131         { EXC_DECR,     "decrementer" },
132         { EXC_FIT,      "fixed-interval timer" },
133         { EXC_WDOG,     "watchdog timer" },
134         { EXC_SC,       "system call" },
135         { EXC_TRC,      "trace" },
136         { EXC_FPA,      "floating-point assist" },
137         { EXC_DEBUG,    "debug" },
138         { EXC_PERF,     "performance monitoring" },
139         { EXC_VEC,      "altivec unavailable" },
140         { EXC_VSX,      "vsx unavailable" },
141         { EXC_FAC,      "facility unavailable" },
142         { EXC_ITMISS,   "instruction tlb miss" },
143         { EXC_DLMISS,   "data load tlb miss" },
144         { EXC_DSMISS,   "data store tlb miss" },
145         { EXC_BPT,      "instruction breakpoint" },
146         { EXC_SMI,      "system management" },
147         { EXC_VECAST_G4,        "altivec assist" },
148         { EXC_THRM,     "thermal management" },
149         { EXC_RUNMODETRC,       "run mode/trace" },
150         { EXC_LAST,     NULL }
151 };
152
153 #define ESR_BITMASK                                                     \
154     "\20"                                                               \
155     "\040b0\037b1\036b2\035b3\034PIL\033PRR\032PTR\031FP"               \
156     "\030ST\027b9\026DLK\025ILK\024b12\023b13\022BO\021PIE"             \
157     "\020b16\017b17\016b18\015b19\014b20\013b21\012b22\011b23"          \
158     "\010SPE\007EPID\006b26\005b27\004b28\003b29\002b30\001b31"
159 #define MCSR_BITMASK                                                    \
160     "\20"                                                               \
161     "\040MCP\037ICERR\036DCERR\035TLBPERR\034L2MMU_MHIT\033b5\032b6\031b7"      \
162     "\030b8\027b9\026b10\025NMI\024MAV\023MEA\022b14\021IF"             \
163     "\020LD\017ST\016LDG\015b19\014b20\013b21\012b22\011b23"            \
164     "\010b24\007b25\006b26\005b27\004b28\003b29\002TLBSYNC\001BSL2_ERR"
165 #define MSSSR_BITMASK                                                   \
166     "\20"                                                               \
167     "\040b0\037b1\036b2\035b3\034b4\033b5\032b6\031b7"                  \
168     "\030b8\027b9\026b10\025b11\024b12\023L2TAG\022L2DAT\021L3TAG"      \
169     "\020L3DAT\017APE\016DPE\015TEA\014b20\013b21\012b22\011b23"        \
170     "\010b24\007b25\006b26\005b27\004b28\003b29\002b30\001b31"
171
172
173 static const char *
174 trapname(u_int vector)
175 {
176         struct  powerpc_exception *pe;
177
178         for (pe = powerpc_exceptions; pe->vector != EXC_LAST; pe++) {
179                 if (pe->vector == vector)
180                         return (pe->name);
181         }
182
183         return ("unknown");
184 }
185
186 static inline bool
187 frame_is_trap_inst(struct trapframe *frame)
188 {
189 #ifdef AIM
190         return (frame->exc == EXC_PGM && frame->srr1 & EXC_PGM_TRAP);
191 #else
192         return (frame->exc == EXC_DEBUG || frame->cpu.booke.esr & ESR_PTR);
193 #endif
194 }
195
196 void
197 trap(struct trapframe *frame)
198 {
199         struct thread   *td;
200         struct proc     *p;
201 #ifdef KDTRACE_HOOKS
202         uint32_t inst;
203 #endif
204         int             sig, type, user;
205         u_int           ucode;
206         ksiginfo_t      ksi;
207
208         VM_CNT_INC(v_trap);
209
210         td = curthread;
211         p = td->td_proc;
212
213         type = ucode = frame->exc;
214         sig = 0;
215         user = frame->srr1 & PSL_PR;
216
217         CTR3(KTR_TRAP, "trap: %s type=%s (%s)", td->td_name,
218             trapname(type), user ? "user" : "kernel");
219
220 #ifdef KDTRACE_HOOKS
221         /*
222          * A trap can occur while DTrace executes a probe. Before
223          * executing the probe, DTrace blocks re-scheduling and sets
224          * a flag in its per-cpu flags to indicate that it doesn't
225          * want to fault. On returning from the probe, the no-fault
226          * flag is cleared and finally re-scheduling is enabled.
227          *
228          * If the DTrace kernel module has registered a trap handler,
229          * call it and if it returns non-zero, assume that it has
230          * handled the trap and modified the trap frame so that this
231          * function can return normally.
232          */
233         if (dtrace_trap_func != NULL && (*dtrace_trap_func)(frame, type) != 0)
234                 return;
235 #endif
236
237         if (user) {
238                 td->td_pticks = 0;
239                 td->td_frame = frame;
240                 if (td->td_cowgen != p->p_cowgen)
241                         thread_cow_update(td);
242
243                 /* User Mode Traps */
244                 switch (type) {
245                 case EXC_RUNMODETRC:
246                 case EXC_TRC:
247                         frame->srr1 &= ~PSL_SE;
248                         sig = SIGTRAP;
249                         ucode = TRAP_TRACE;
250                         break;
251
252 #if defined(__powerpc64__) && defined(AIM)
253                 case EXC_ISE:
254                 case EXC_DSE:
255                         if (handle_user_slb_spill(&p->p_vmspace->vm_pmap,
256                             (type == EXC_ISE) ? frame->srr0 : frame->dar) != 0){
257                                 sig = SIGSEGV;
258                                 ucode = SEGV_MAPERR;
259                         }
260                         break;
261 #endif
262                 case EXC_DSI:
263                 case EXC_ISI:
264                         sig = trap_pfault(frame, 1);
265                         if (sig == SIGSEGV)
266                                 ucode = SEGV_MAPERR;
267                         break;
268
269                 case EXC_SC:
270                         syscall(frame);
271                         break;
272
273                 case EXC_FPU:
274                         KASSERT((td->td_pcb->pcb_flags & PCB_FPU) != PCB_FPU,
275                             ("FPU already enabled for thread"));
276                         enable_fpu(td);
277                         break;
278
279                 case EXC_VEC:
280                         KASSERT((td->td_pcb->pcb_flags & PCB_VEC) != PCB_VEC,
281                             ("Altivec already enabled for thread"));
282                         enable_vec(td);
283                         break;
284
285                 case EXC_VSX:
286                         KASSERT((td->td_pcb->pcb_flags & PCB_VSX) != PCB_VSX,
287                             ("VSX already enabled for thread"));
288                         if (!(td->td_pcb->pcb_flags & PCB_VEC))
289                                 enable_vec(td);
290                         if (!(td->td_pcb->pcb_flags & PCB_FPU))
291                                 save_fpu(td);
292                         td->td_pcb->pcb_flags |= PCB_VSX;
293                         enable_fpu(td);
294                         break;
295
296                 case EXC_FAC:
297                 case EXC_HEA:
298                         sig = SIGILL;
299                         ucode = ILL_ILLOPC;
300                         break;
301
302                 case EXC_VECAST_E:
303                 case EXC_VECAST_G4:
304                 case EXC_VECAST_G5:
305                         /*
306                          * We get a VPU assist exception for IEEE mode
307                          * vector operations on denormalized floats.
308                          * Emulating this is a giant pain, so for now,
309                          * just switch off IEEE mode and treat them as
310                          * zero.
311                          */
312
313                         save_vec(td);
314                         td->td_pcb->pcb_vec.vscr |= ALTIVEC_VSCR_NJ;
315                         enable_vec(td);
316                         break;
317
318                 case EXC_ALI:
319                         if (fix_unaligned(td, frame) != 0) {
320                                 sig = SIGBUS;
321                                 ucode = BUS_ADRALN;
322                         }
323                         else
324                                 frame->srr0 += 4;
325                         break;
326
327                 case EXC_DEBUG: /* Single stepping */
328                         mtspr(SPR_DBSR, mfspr(SPR_DBSR));
329                         frame->srr1 &= ~PSL_DE;
330                         frame->cpu.booke.dbcr0 &= ~(DBCR0_IDM | DBCR0_IC);
331                         sig = SIGTRAP;
332                         ucode = TRAP_TRACE;
333                         break;
334
335                 case EXC_PGM:
336                         /* Identify the trap reason */
337                         if (frame_is_trap_inst(frame)) {
338 #ifdef KDTRACE_HOOKS
339                                 inst = fuword32((const void *)frame->srr0);
340                                 if (inst == 0x0FFFDDDD &&
341                                     dtrace_pid_probe_ptr != NULL) {
342                                         (*dtrace_pid_probe_ptr)(frame);
343                                         break;
344                                 }
345 #endif
346                                 sig = SIGTRAP;
347                                 ucode = TRAP_BRKPT;
348                         } else {
349                                 sig = ppc_instr_emulate(frame, td->td_pcb);
350                                 if (sig == SIGILL) {
351                                         if (frame->srr1 & EXC_PGM_PRIV)
352                                                 ucode = ILL_PRVOPC;
353                                         else if (frame->srr1 & EXC_PGM_ILLEGAL)
354                                                 ucode = ILL_ILLOPC;
355                                 } else if (sig == SIGFPE)
356                                         ucode = FPE_FLTINV;     /* Punt for now, invalid operation. */
357                         }
358                         break;
359
360                 case EXC_MCHK:
361                         /*
362                          * Note that this may not be recoverable for the user
363                          * process, depending on the type of machine check,
364                          * but it at least prevents the kernel from dying.
365                          */
366                         sig = SIGBUS;
367                         ucode = BUS_OBJERR;
368                         break;
369
370                 default:
371                         trap_fatal(frame);
372                 }
373         } else {
374                 /* Kernel Mode Traps */
375
376                 KASSERT(cold || td->td_ucred != NULL,
377                     ("kernel trap doesn't have ucred"));
378                 switch (type) {
379                 case EXC_PGM:
380 #ifdef KDTRACE_HOOKS
381                         if (frame_is_trap_inst(frame)) {
382                                 if (*(uint32_t *)frame->srr0 == EXC_DTRACE) {
383                                         if (dtrace_invop_jump_addr != NULL) {
384                                                 dtrace_invop_jump_addr(frame);
385                                                 return;
386                                         }
387                                 }
388                         }
389 #endif
390 #ifdef KDB
391                         if (db_trap_glue(frame))
392                                 return;
393 #endif
394                         break;
395 #if defined(__powerpc64__) && defined(AIM)
396                 case EXC_DSE:
397                         if (td->td_pcb->pcb_cpu.aim.usr_vsid != 0 &&
398                             (frame->dar & SEGMENT_MASK) == USER_ADDR) {
399                                 __asm __volatile ("slbmte %0, %1" ::
400                                         "r"(td->td_pcb->pcb_cpu.aim.usr_vsid),
401                                         "r"(USER_SLB_SLBE));
402                                 return;
403                         }
404                         break;
405 #endif
406                 case EXC_DSI:
407                         if (trap_pfault(frame, 0) == 0)
408                                 return;
409                         break;
410                 case EXC_MCHK:
411                         if (handle_onfault(frame))
412                                 return;
413                         break;
414                 default:
415                         break;
416                 }
417                 trap_fatal(frame);
418         }
419
420         if (sig != 0) {
421                 if (p->p_sysent->sv_transtrap != NULL)
422                         sig = (p->p_sysent->sv_transtrap)(sig, type);
423                 ksiginfo_init_trap(&ksi);
424                 ksi.ksi_signo = sig;
425                 ksi.ksi_code = (int) ucode; /* XXX, not POSIX */
426                 /* ksi.ksi_addr = ? */
427                 ksi.ksi_trapno = type;
428                 trapsignal(td, &ksi);
429         }
430
431         userret(td, frame);
432 }
433
434 static void
435 trap_fatal(struct trapframe *frame)
436 {
437
438         printtrap(frame->exc, frame, 1, (frame->srr1 & PSL_PR));
439 #ifdef KDB
440         if ((debugger_on_panic || kdb_active) &&
441             kdb_trap(frame->exc, 0, frame))
442                 return;
443 #endif
444         panic("%s trap", trapname(frame->exc));
445 }
446
447 static void
448 cpu_printtrap(u_int vector, struct trapframe *frame, int isfatal, int user)
449 {
450 #ifdef AIM
451         uint16_t ver;
452
453         switch (vector) {
454         case EXC_DSE:
455         case EXC_DSI:
456         case EXC_DTMISS:
457                 printf("   dsisr           = 0x%lx\n",
458                     (u_long)frame->cpu.aim.dsisr);
459                 break;
460         case EXC_MCHK:
461                 ver = mfpvr() >> 16;
462                 if (MPC745X_P(ver))
463                         printf("    msssr0         = 0x%b\n",
464                             (int)mfspr(SPR_MSSSR0), MSSSR_BITMASK);
465                 break;
466         }
467 #elif defined(BOOKE)
468         vm_paddr_t pa;
469
470         switch (vector) {
471         case EXC_MCHK:
472                 pa = mfspr(SPR_MCARU);
473                 pa = (pa << 32) | (u_register_t)mfspr(SPR_MCAR);
474                 printf("   mcsr            = 0x%b\n",
475                     (int)mfspr(SPR_MCSR), MCSR_BITMASK);
476                 printf("   mcar            = 0x%jx\n", (uintmax_t)pa);
477         }
478         printf("   esr             = 0x%b\n",
479             (int)frame->cpu.booke.esr, ESR_BITMASK);
480 #endif
481 }
482
483 static void
484 printtrap(u_int vector, struct trapframe *frame, int isfatal, int user)
485 {
486
487         printf("\n");
488         printf("%s %s trap:\n", isfatal ? "fatal" : "handled",
489             user ? "user" : "kernel");
490         printf("\n");
491         printf("   exception       = 0x%x (%s)\n", vector, trapname(vector));
492         switch (vector) {
493         case EXC_DSE:
494         case EXC_DSI:
495         case EXC_DTMISS:
496                 printf("   virtual address = 0x%" PRIxPTR "\n", frame->dar);
497                 break;
498         case EXC_ISE:
499         case EXC_ISI:
500         case EXC_ITMISS:
501                 printf("   virtual address = 0x%" PRIxPTR "\n", frame->srr0);
502                 break;
503         case EXC_MCHK:
504                 break;
505         }
506         cpu_printtrap(vector, frame, isfatal, user);
507         printf("   srr0            = 0x%" PRIxPTR " (0x%" PRIxPTR ")\n",
508             frame->srr0, frame->srr0 - (register_t)(__startkernel - KERNBASE));
509         printf("   srr1            = 0x%lx\n", (u_long)frame->srr1);
510         printf("   lr              = 0x%" PRIxPTR " (0x%" PRIxPTR ")\n",
511             frame->lr, frame->lr - (register_t)(__startkernel - KERNBASE));
512         printf("   curthread       = %p\n", curthread);
513         if (curthread != NULL)
514                 printf("          pid = %d, comm = %s\n",
515                     curthread->td_proc->p_pid, curthread->td_name);
516         printf("\n");
517 }
518
519 /*
520  * Handles a fatal fault when we have onfault state to recover.  Returns
521  * non-zero if there was onfault recovery state available.
522  */
523 static int
524 handle_onfault(struct trapframe *frame)
525 {
526         struct          thread *td;
527         jmp_buf         *fb;
528
529         td = curthread;
530         fb = td->td_pcb->pcb_onfault;
531         if (fb != NULL) {
532                 frame->srr0 = (*fb)->_jb[FAULTBUF_LR];
533                 frame->fixreg[1] = (*fb)->_jb[FAULTBUF_R1];
534                 frame->fixreg[2] = (*fb)->_jb[FAULTBUF_R2];
535                 frame->fixreg[3] = 1;
536                 frame->cr = (*fb)->_jb[FAULTBUF_CR];
537                 bcopy(&(*fb)->_jb[FAULTBUF_R14], &frame->fixreg[14],
538                     18 * sizeof(register_t));
539                 td->td_pcb->pcb_onfault = NULL; /* Returns twice, not thrice */
540                 return (1);
541         }
542         return (0);
543 }
544
545 int
546 cpu_fetch_syscall_args(struct thread *td)
547 {
548         struct proc *p;
549         struct trapframe *frame;
550         struct syscall_args *sa;
551         caddr_t params;
552         size_t argsz;
553         int error, n, i;
554
555         p = td->td_proc;
556         frame = td->td_frame;
557         sa = &td->td_sa;
558
559         sa->code = frame->fixreg[0];
560         params = (caddr_t)(frame->fixreg + FIRSTARG);
561         n = NARGREG;
562
563         if (sa->code == SYS_syscall) {
564                 /*
565                  * code is first argument,
566                  * followed by actual args.
567                  */
568                 sa->code = *(register_t *) params;
569                 params += sizeof(register_t);
570                 n -= 1;
571         } else if (sa->code == SYS___syscall) {
572                 /*
573                  * Like syscall, but code is a quad,
574                  * so as to maintain quad alignment
575                  * for the rest of the args.
576                  */
577                 if (SV_PROC_FLAG(p, SV_ILP32)) {
578                         params += sizeof(register_t);
579                         sa->code = *(register_t *) params;
580                         params += sizeof(register_t);
581                         n -= 2;
582                 } else {
583                         sa->code = *(register_t *) params;
584                         params += sizeof(register_t);
585                         n -= 1;
586                 }
587         }
588
589         if (p->p_sysent->sv_mask)
590                 sa->code &= p->p_sysent->sv_mask;
591         if (sa->code >= p->p_sysent->sv_size)
592                 sa->callp = &p->p_sysent->sv_table[0];
593         else
594                 sa->callp = &p->p_sysent->sv_table[sa->code];
595
596         sa->narg = sa->callp->sy_narg;
597
598         if (SV_PROC_FLAG(p, SV_ILP32)) {
599                 argsz = sizeof(uint32_t);
600
601                 for (i = 0; i < n; i++)
602                         sa->args[i] = ((u_register_t *)(params))[i] &
603                             0xffffffff;
604         } else {
605                 argsz = sizeof(uint64_t);
606
607                 for (i = 0; i < n; i++)
608                         sa->args[i] = ((u_register_t *)(params))[i];
609         }
610
611         if (sa->narg > n)
612                 error = copyin(MOREARGS(frame->fixreg[1]), sa->args + n,
613                                (sa->narg - n) * argsz);
614         else
615                 error = 0;
616
617 #ifdef __powerpc64__
618         if (SV_PROC_FLAG(p, SV_ILP32) && sa->narg > n) {
619                 /* Expand the size of arguments copied from the stack */
620
621                 for (i = sa->narg; i >= n; i--)
622                         sa->args[i] = ((uint32_t *)(&sa->args[n]))[i-n];
623         }
624 #endif
625
626         if (error == 0) {
627                 td->td_retval[0] = 0;
628                 td->td_retval[1] = frame->fixreg[FIRSTARG + 1];
629         }
630         return (error);
631 }
632
633 #include "../../kern/subr_syscall.c"
634
635 void
636 syscall(struct trapframe *frame)
637 {
638         struct thread *td;
639         int error;
640
641         td = curthread;
642         td->td_frame = frame;
643
644 #if defined(__powerpc64__) && defined(AIM)
645         /*
646          * Speculatively restore last user SLB segment, which we know is
647          * invalid already, since we are likely to do copyin()/copyout().
648          */
649         if (td->td_pcb->pcb_cpu.aim.usr_vsid != 0)
650                 __asm __volatile ("slbmte %0, %1; isync" ::
651                     "r"(td->td_pcb->pcb_cpu.aim.usr_vsid), "r"(USER_SLB_SLBE));
652 #endif
653
654         error = syscallenter(td);
655         syscallret(td, error);
656 }
657
658 #if defined(__powerpc64__) && defined(AIM)
659 /* Handle kernel SLB faults -- runs in real mode, all seat belts off */
660 void
661 handle_kernel_slb_spill(int type, register_t dar, register_t srr0)
662 {
663         struct slb *slbcache;
664         uint64_t slbe, slbv;
665         uint64_t esid, addr;
666         int i;
667
668         addr = (type == EXC_ISE) ? srr0 : dar;
669         slbcache = PCPU_GET(aim.slb);
670         esid = (uintptr_t)addr >> ADDR_SR_SHFT;
671         slbe = (esid << SLBE_ESID_SHIFT) | SLBE_VALID;
672         
673         /* See if the hardware flushed this somehow (can happen in LPARs) */
674         for (i = 0; i < n_slbs; i++)
675                 if (slbcache[i].slbe == (slbe | (uint64_t)i))
676                         return;
677
678         /* Not in the map, needs to actually be added */
679         slbv = kernel_va_to_slbv(addr);
680         if (slbcache[USER_SLB_SLOT].slbe == 0) {
681                 for (i = 0; i < n_slbs; i++) {
682                         if (i == USER_SLB_SLOT)
683                                 continue;
684                         if (!(slbcache[i].slbe & SLBE_VALID))
685                                 goto fillkernslb;
686                 }
687
688                 if (i == n_slbs)
689                         slbcache[USER_SLB_SLOT].slbe = 1;
690         }
691
692         /* Sacrifice a random SLB entry that is not the user entry */
693         i = mftb() % n_slbs;
694         if (i == USER_SLB_SLOT)
695                 i = (i+1) % n_slbs;
696
697 fillkernslb:
698         /* Write new entry */
699         slbcache[i].slbv = slbv;
700         slbcache[i].slbe = slbe | (uint64_t)i;
701
702         /* Trap handler will restore from cache on exit */
703 }
704
705 static int 
706 handle_user_slb_spill(pmap_t pm, vm_offset_t addr)
707 {
708         struct slb *user_entry;
709         uint64_t esid;
710         int i;
711
712         if (pm->pm_slb == NULL)
713                 return (-1);
714
715         esid = (uintptr_t)addr >> ADDR_SR_SHFT;
716
717         PMAP_LOCK(pm);
718         user_entry = user_va_to_slb_entry(pm, addr);
719
720         if (user_entry == NULL) {
721                 /* allocate_vsid auto-spills it */
722                 (void)allocate_user_vsid(pm, esid, 0);
723         } else {
724                 /*
725                  * Check that another CPU has not already mapped this.
726                  * XXX: Per-thread SLB caches would be better.
727                  */
728                 for (i = 0; i < pm->pm_slb_len; i++)
729                         if (pm->pm_slb[i] == user_entry)
730                                 break;
731
732                 if (i == pm->pm_slb_len)
733                         slb_insert_user(pm, user_entry);
734         }
735         PMAP_UNLOCK(pm);
736
737         return (0);
738 }
739 #endif
740
741 static int
742 trap_pfault(struct trapframe *frame, int user)
743 {
744         vm_offset_t     eva, va;
745         struct          thread *td;
746         struct          proc *p;
747         vm_map_t        map;
748         vm_prot_t       ftype;
749         int             rv, is_user;
750
751         td = curthread;
752         p = td->td_proc;
753         if (frame->exc == EXC_ISI) {
754                 eva = frame->srr0;
755                 ftype = VM_PROT_EXECUTE;
756                 if (frame->srr1 & SRR1_ISI_PFAULT)
757                         ftype |= VM_PROT_READ;
758         } else {
759                 eva = frame->dar;
760 #ifdef BOOKE
761                 if (frame->cpu.booke.esr & ESR_ST)
762 #else
763                 if (frame->cpu.aim.dsisr & DSISR_STORE)
764 #endif
765                         ftype = VM_PROT_WRITE;
766                 else
767                         ftype = VM_PROT_READ;
768         }
769
770         if (user) {
771                 KASSERT(p->p_vmspace != NULL, ("trap_pfault: vmspace  NULL"));
772                 map = &p->p_vmspace->vm_map;
773         } else {
774                 rv = pmap_decode_kernel_ptr(eva, &is_user, &eva);
775                 if (rv != 0)
776                         return (SIGSEGV);
777
778                 if (is_user)
779                         map = &p->p_vmspace->vm_map;
780                 else
781                         map = kernel_map;
782         }
783         va = trunc_page(eva);
784
785         /* Fault in the page. */
786         rv = vm_fault(map, va, ftype, VM_FAULT_NORMAL);
787         /*
788          * XXXDTRACE: add dtrace_doubletrap_func here?
789          */
790
791         if (rv == KERN_SUCCESS)
792                 return (0);
793
794         if (!user && handle_onfault(frame))
795                 return (0);
796
797         return (SIGSEGV);
798 }
799
800 /*
801  * For now, this only deals with the particular unaligned access case
802  * that gcc tends to generate.  Eventually it should handle all of the
803  * possibilities that can happen on a 32-bit PowerPC in big-endian mode.
804  */
805
806 static int
807 fix_unaligned(struct thread *td, struct trapframe *frame)
808 {
809         struct thread   *fputhread;
810 #ifdef  __SPE__
811         uint32_t        inst;
812 #endif
813         int             indicator, reg;
814         double          *fpr;
815
816 #ifdef __SPE__
817         indicator = (frame->cpu.booke.esr & (ESR_ST|ESR_SPE));
818         if (indicator & ESR_SPE) {
819                 if (copyin((void *)frame->srr0, &inst, sizeof(inst)) != 0)
820                         return (-1);
821                 reg = EXC_ALI_SPE_REG(inst);
822                 fpr = (double *)td->td_pcb->pcb_vec.vr[reg];
823                 fputhread = PCPU_GET(vecthread);
824
825                 /* Juggle the SPE to ensure that we've initialized
826                  * the registers, and that their current state is in
827                  * the PCB.
828                  */
829                 if (fputhread != td) {
830                         if (fputhread)
831                                 save_vec(fputhread);
832                         enable_vec(td);
833                 }
834                 save_vec(td);
835
836                 if (!(indicator & ESR_ST)) {
837                         if (copyin((void *)frame->dar, fpr,
838                             sizeof(double)) != 0)
839                                 return (-1);
840                         frame->fixreg[reg] = td->td_pcb->pcb_vec.vr[reg][1];
841                         enable_vec(td);
842                 } else {
843                         td->td_pcb->pcb_vec.vr[reg][1] = frame->fixreg[reg];
844                         if (copyout(fpr, (void *)frame->dar,
845                             sizeof(double)) != 0)
846                                 return (-1);
847                 }
848                 return (0);
849         }
850 #else
851         indicator = EXC_ALI_OPCODE_INDICATOR(frame->cpu.aim.dsisr);
852
853         switch (indicator) {
854         case EXC_ALI_LFD:
855         case EXC_ALI_STFD:
856                 reg = EXC_ALI_RST(frame->cpu.aim.dsisr);
857                 fpr = &td->td_pcb->pcb_fpu.fpr[reg].fpr;
858                 fputhread = PCPU_GET(fputhread);
859
860                 /* Juggle the FPU to ensure that we've initialized
861                  * the FPRs, and that their current state is in
862                  * the PCB.
863                  */
864                 if (fputhread != td) {
865                         if (fputhread)
866                                 save_fpu(fputhread);
867                         enable_fpu(td);
868                 }
869                 save_fpu(td);
870
871                 if (indicator == EXC_ALI_LFD) {
872                         if (copyin((void *)frame->dar, fpr,
873                             sizeof(double)) != 0)
874                                 return (-1);
875                         enable_fpu(td);
876                 } else {
877                         if (copyout(fpr, (void *)frame->dar,
878                             sizeof(double)) != 0)
879                                 return (-1);
880                 }
881                 return (0);
882                 break;
883         }
884 #endif
885
886         return (-1);
887 }
888
889 #ifdef KDB
890 int
891 db_trap_glue(struct trapframe *frame)
892 {
893
894         if (!(frame->srr1 & PSL_PR)
895             && (frame->exc == EXC_TRC || frame->exc == EXC_RUNMODETRC
896                 || frame_is_trap_inst(frame)
897                 || frame->exc == EXC_BPT
898                 || frame->exc == EXC_DSI)) {
899                 int type = frame->exc;
900
901                 /* Ignore DTrace traps. */
902                 if (*(uint32_t *)frame->srr0 == EXC_DTRACE)
903                         return (0);
904                 if (frame_is_trap_inst(frame)) {
905                         type = T_BREAKPOINT;
906                 }
907                 return (kdb_trap(type, 0, frame));
908         }
909
910         return (0);
911 }
912 #endif