diff options
Diffstat (limited to 'target-cris')
| -rw-r--r-- | target-cris/Makefile.objs | 3 | ||||
| -rw-r--r-- | target-cris/cpu-qom.h | 89 | ||||
| -rw-r--r-- | target-cris/cpu.c | 340 | ||||
| -rw-r--r-- | target-cris/cpu.h | 271 | ||||
| -rw-r--r-- | target-cris/crisv10-decode.h | 107 | ||||
| -rw-r--r-- | target-cris/crisv32-decode.h | 132 | ||||
| -rw-r--r-- | target-cris/gdbstub.c | 130 | ||||
| -rw-r--r-- | target-cris/helper.c | 317 | ||||
| -rw-r--r-- | target-cris/helper.h | 25 | ||||
| -rw-r--r-- | target-cris/machine.c | 90 | ||||
| -rw-r--r-- | target-cris/mmu.c | 363 | ||||
| -rw-r--r-- | target-cris/mmu.h | 17 | ||||
| -rw-r--r-- | target-cris/op_helper.c | 642 | ||||
| -rw-r--r-- | target-cris/opcode-cris.h | 355 | ||||
| -rw-r--r-- | target-cris/translate.c | 3462 | ||||
| -rw-r--r-- | target-cris/translate_v10.c | 1301 | 
16 files changed, 7644 insertions, 0 deletions
diff --git a/target-cris/Makefile.objs b/target-cris/Makefile.objs new file mode 100644 index 00000000..7779227f --- /dev/null +++ b/target-cris/Makefile.objs @@ -0,0 +1,3 @@ +obj-y += translate.o op_helper.o helper.o cpu.o +obj-y += gdbstub.o +obj-$(CONFIG_SOFTMMU) += mmu.o machine.o diff --git a/target-cris/cpu-qom.h b/target-cris/cpu-qom.h new file mode 100644 index 00000000..6fc30c20 --- /dev/null +++ b/target-cris/cpu-qom.h @@ -0,0 +1,89 @@ +/* + * QEMU CRIS CPU + * + * Copyright (c) 2012 SUSE LINUX Products GmbH + * + * This library is free software; you can redistribute it and/or + * modify it under the terms of the GNU Lesser General Public + * License as published by the Free Software Foundation; either + * version 2.1 of the License, or (at your option) any later version. + * + * This library is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this library; if not, see + * <http://www.gnu.org/licenses/lgpl-2.1.html> + */ +#ifndef QEMU_CRIS_CPU_QOM_H +#define QEMU_CRIS_CPU_QOM_H + +#include "qom/cpu.h" + +#define TYPE_CRIS_CPU "cris-cpu" + +#define CRIS_CPU_CLASS(klass) \ +    OBJECT_CLASS_CHECK(CRISCPUClass, (klass), TYPE_CRIS_CPU) +#define CRIS_CPU(obj) \ +    OBJECT_CHECK(CRISCPU, (obj), TYPE_CRIS_CPU) +#define CRIS_CPU_GET_CLASS(obj) \ +    OBJECT_GET_CLASS(CRISCPUClass, (obj), TYPE_CRIS_CPU) + +/** + * CRISCPUClass: + * @parent_realize: The parent class' realize handler. + * @parent_reset: The parent class' reset handler. + * @vr: Version Register value. + * + * A CRIS CPU model. + */ +typedef struct CRISCPUClass { +    /*< private >*/ +    CPUClass parent_class; +    /*< public >*/ + +    DeviceRealize parent_realize; +    void (*parent_reset)(CPUState *cpu); + +    uint32_t vr; +} CRISCPUClass; + +/** + * CRISCPU: + * @env: #CPUCRISState + * + * A CRIS CPU. + */ +typedef struct CRISCPU { +    /*< private >*/ +    CPUState parent_obj; +    /*< public >*/ + +    CPUCRISState env; +} CRISCPU; + +static inline CRISCPU *cris_env_get_cpu(CPUCRISState *env) +{ +    return container_of(env, CRISCPU, env); +} + +#define ENV_GET_CPU(e) CPU(cris_env_get_cpu(e)) + +#define ENV_OFFSET offsetof(CRISCPU, env) + +void cris_cpu_do_interrupt(CPUState *cpu); +void crisv10_cpu_do_interrupt(CPUState *cpu); +bool cris_cpu_exec_interrupt(CPUState *cpu, int int_req); + +void cris_cpu_dump_state(CPUState *cs, FILE *f, fprintf_function cpu_fprintf, +                         int flags); + +hwaddr cris_cpu_get_phys_page_debug(CPUState *cpu, vaddr addr); + +int crisv10_cpu_gdb_read_register(CPUState *cpu, uint8_t *buf, int reg); +int cris_cpu_gdb_read_register(CPUState *cpu, uint8_t *buf, int reg); +int cris_cpu_gdb_write_register(CPUState *cpu, uint8_t *buf, int reg); + +#endif diff --git a/target-cris/cpu.c b/target-cris/cpu.c new file mode 100644 index 00000000..aa5e1c57 --- /dev/null +++ b/target-cris/cpu.c @@ -0,0 +1,340 @@ +/* + * QEMU CRIS CPU + * + * Copyright (c) 2008 AXIS Communications AB + * Written by Edgar E. Iglesias. + * + * Copyright (c) 2012 SUSE LINUX Products GmbH + * + * This library is free software; you can redistribute it and/or + * modify it under the terms of the GNU Lesser General Public + * License as published by the Free Software Foundation; either + * version 2.1 of the License, or (at your option) any later version. + * + * This library is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this library; if not, see + * <http://www.gnu.org/licenses/lgpl-2.1.html> + */ + +#include "cpu.h" +#include "qemu-common.h" +#include "mmu.h" + + +static void cris_cpu_set_pc(CPUState *cs, vaddr value) +{ +    CRISCPU *cpu = CRIS_CPU(cs); + +    cpu->env.pc = value; +} + +static bool cris_cpu_has_work(CPUState *cs) +{ +    return cs->interrupt_request & (CPU_INTERRUPT_HARD | CPU_INTERRUPT_NMI); +} + +/* CPUClass::reset() */ +static void cris_cpu_reset(CPUState *s) +{ +    CRISCPU *cpu = CRIS_CPU(s); +    CRISCPUClass *ccc = CRIS_CPU_GET_CLASS(cpu); +    CPUCRISState *env = &cpu->env; +    uint32_t vr; + +    ccc->parent_reset(s); + +    vr = env->pregs[PR_VR]; +    memset(env, 0, offsetof(CPUCRISState, load_info)); +    env->pregs[PR_VR] = vr; +    tlb_flush(s, 1); + +#if defined(CONFIG_USER_ONLY) +    /* start in user mode with interrupts enabled.  */ +    env->pregs[PR_CCS] |= U_FLAG | I_FLAG | P_FLAG; +#else +    cris_mmu_init(env); +    env->pregs[PR_CCS] = 0; +#endif +} + +static ObjectClass *cris_cpu_class_by_name(const char *cpu_model) +{ +    ObjectClass *oc; +    char *typename; + +    if (cpu_model == NULL) { +        return NULL; +    } + +#if defined(CONFIG_USER_ONLY) +    if (strcasecmp(cpu_model, "any") == 0) { +        return object_class_by_name("crisv32-" TYPE_CRIS_CPU); +    } +#endif + +    typename = g_strdup_printf("%s-" TYPE_CRIS_CPU, cpu_model); +    oc = object_class_by_name(typename); +    g_free(typename); +    if (oc != NULL && (!object_class_dynamic_cast(oc, TYPE_CRIS_CPU) || +                       object_class_is_abstract(oc))) { +        oc = NULL; +    } +    return oc; +} + +CRISCPU *cpu_cris_init(const char *cpu_model) +{ +    return CRIS_CPU(cpu_generic_init(TYPE_CRIS_CPU, cpu_model)); +} + +/* Sort alphabetically by VR. */ +static gint cris_cpu_list_compare(gconstpointer a, gconstpointer b) +{ +    CRISCPUClass *ccc_a = CRIS_CPU_CLASS(a); +    CRISCPUClass *ccc_b = CRIS_CPU_CLASS(b); + +    /*  */ +    if (ccc_a->vr > ccc_b->vr) { +        return 1; +    } else if (ccc_a->vr < ccc_b->vr) { +        return -1; +    } else { +        return 0; +    } +} + +static void cris_cpu_list_entry(gpointer data, gpointer user_data) +{ +    ObjectClass *oc = data; +    CPUListState *s = user_data; +    const char *typename = object_class_get_name(oc); +    char *name; + +    name = g_strndup(typename, strlen(typename) - strlen("-" TYPE_CRIS_CPU)); +    (*s->cpu_fprintf)(s->file, "  %s\n", name); +    g_free(name); +} + +void cris_cpu_list(FILE *f, fprintf_function cpu_fprintf) +{ +    CPUListState s = { +        .file = f, +        .cpu_fprintf = cpu_fprintf, +    }; +    GSList *list; + +    list = object_class_get_list(TYPE_CRIS_CPU, false); +    list = g_slist_sort(list, cris_cpu_list_compare); +    (*cpu_fprintf)(f, "Available CPUs:\n"); +    g_slist_foreach(list, cris_cpu_list_entry, &s); +    g_slist_free(list); +} + +static void cris_cpu_realizefn(DeviceState *dev, Error **errp) +{ +    CPUState *cs = CPU(dev); +    CRISCPUClass *ccc = CRIS_CPU_GET_CLASS(dev); + +    cpu_reset(cs); +    qemu_init_vcpu(cs); + +    ccc->parent_realize(dev, errp); +} + +#ifndef CONFIG_USER_ONLY +static void cris_cpu_set_irq(void *opaque, int irq, int level) +{ +    CRISCPU *cpu = opaque; +    CPUState *cs = CPU(cpu); +    int type = irq == CRIS_CPU_IRQ ? CPU_INTERRUPT_HARD : CPU_INTERRUPT_NMI; + +    if (level) { +        cpu_interrupt(cs, type); +    } else { +        cpu_reset_interrupt(cs, type); +    } +} +#endif + +static void cris_disas_set_info(CPUState *cpu, disassemble_info *info) +{ +    CRISCPU *cc = CRIS_CPU(cpu); +    CPUCRISState *env = &cc->env; + +    if (env->pregs[PR_VR] != 32) { +        info->mach = bfd_mach_cris_v0_v10; +        info->print_insn = print_insn_crisv10; +    } else { +        info->mach = bfd_mach_cris_v32; +        info->print_insn = print_insn_crisv32; +    } +} + +static void cris_cpu_initfn(Object *obj) +{ +    CPUState *cs = CPU(obj); +    CRISCPU *cpu = CRIS_CPU(obj); +    CRISCPUClass *ccc = CRIS_CPU_GET_CLASS(obj); +    CPUCRISState *env = &cpu->env; +    static bool tcg_initialized; + +    cs->env_ptr = env; +    cpu_exec_init(cs, &error_abort); + +    env->pregs[PR_VR] = ccc->vr; + +#ifndef CONFIG_USER_ONLY +    /* IRQ and NMI lines.  */ +    qdev_init_gpio_in(DEVICE(cpu), cris_cpu_set_irq, 2); +#endif + +    if (tcg_enabled() && !tcg_initialized) { +        tcg_initialized = true; +        if (env->pregs[PR_VR] < 32) { +            cris_initialize_crisv10_tcg(); +        } else { +            cris_initialize_tcg(); +        } +    } +} + +static void crisv8_cpu_class_init(ObjectClass *oc, void *data) +{ +    CPUClass *cc = CPU_CLASS(oc); +    CRISCPUClass *ccc = CRIS_CPU_CLASS(oc); + +    ccc->vr = 8; +    cc->do_interrupt = crisv10_cpu_do_interrupt; +    cc->gdb_read_register = crisv10_cpu_gdb_read_register; +} + +static void crisv9_cpu_class_init(ObjectClass *oc, void *data) +{ +    CPUClass *cc = CPU_CLASS(oc); +    CRISCPUClass *ccc = CRIS_CPU_CLASS(oc); + +    ccc->vr = 9; +    cc->do_interrupt = crisv10_cpu_do_interrupt; +    cc->gdb_read_register = crisv10_cpu_gdb_read_register; +} + +static void crisv10_cpu_class_init(ObjectClass *oc, void *data) +{ +    CPUClass *cc = CPU_CLASS(oc); +    CRISCPUClass *ccc = CRIS_CPU_CLASS(oc); + +    ccc->vr = 10; +    cc->do_interrupt = crisv10_cpu_do_interrupt; +    cc->gdb_read_register = crisv10_cpu_gdb_read_register; +} + +static void crisv11_cpu_class_init(ObjectClass *oc, void *data) +{ +    CPUClass *cc = CPU_CLASS(oc); +    CRISCPUClass *ccc = CRIS_CPU_CLASS(oc); + +    ccc->vr = 11; +    cc->do_interrupt = crisv10_cpu_do_interrupt; +    cc->gdb_read_register = crisv10_cpu_gdb_read_register; +} + +static void crisv32_cpu_class_init(ObjectClass *oc, void *data) +{ +    CRISCPUClass *ccc = CRIS_CPU_CLASS(oc); + +    ccc->vr = 32; +} + +#define TYPE(model) model "-" TYPE_CRIS_CPU + +static const TypeInfo cris_cpu_model_type_infos[] = { +    { +        .name = TYPE("crisv8"), +        .parent = TYPE_CRIS_CPU, +        .class_init = crisv8_cpu_class_init, +    }, { +        .name = TYPE("crisv9"), +        .parent = TYPE_CRIS_CPU, +        .class_init = crisv9_cpu_class_init, +    }, { +        .name = TYPE("crisv10"), +        .parent = TYPE_CRIS_CPU, +        .class_init = crisv10_cpu_class_init, +    }, { +        .name = TYPE("crisv11"), +        .parent = TYPE_CRIS_CPU, +        .class_init = crisv11_cpu_class_init, +    }, { +        .name = TYPE("crisv32"), +        .parent = TYPE_CRIS_CPU, +        .class_init = crisv32_cpu_class_init, +    } +}; + +#undef TYPE + +static void cris_cpu_class_init(ObjectClass *oc, void *data) +{ +    DeviceClass *dc = DEVICE_CLASS(oc); +    CPUClass *cc = CPU_CLASS(oc); +    CRISCPUClass *ccc = CRIS_CPU_CLASS(oc); + +    ccc->parent_realize = dc->realize; +    dc->realize = cris_cpu_realizefn; + +    ccc->parent_reset = cc->reset; +    cc->reset = cris_cpu_reset; + +    cc->class_by_name = cris_cpu_class_by_name; +    cc->has_work = cris_cpu_has_work; +    cc->do_interrupt = cris_cpu_do_interrupt; +    cc->cpu_exec_interrupt = cris_cpu_exec_interrupt; +    cc->dump_state = cris_cpu_dump_state; +    cc->set_pc = cris_cpu_set_pc; +    cc->gdb_read_register = cris_cpu_gdb_read_register; +    cc->gdb_write_register = cris_cpu_gdb_write_register; +#ifdef CONFIG_USER_ONLY +    cc->handle_mmu_fault = cris_cpu_handle_mmu_fault; +#else +    cc->get_phys_page_debug = cris_cpu_get_phys_page_debug; +#endif + +    cc->gdb_num_core_regs = 49; +    cc->gdb_stop_before_watchpoint = true; + +    cc->disas_set_info = cris_disas_set_info; + +    /* +     * Reason: cris_cpu_initfn() calls cpu_exec_init(), which saves +     * the object in cpus -> dangling pointer after final +     * object_unref(). +     */ +    dc->cannot_destroy_with_object_finalize_yet = true; +} + +static const TypeInfo cris_cpu_type_info = { +    .name = TYPE_CRIS_CPU, +    .parent = TYPE_CPU, +    .instance_size = sizeof(CRISCPU), +    .instance_init = cris_cpu_initfn, +    .abstract = true, +    .class_size = sizeof(CRISCPUClass), +    .class_init = cris_cpu_class_init, +}; + +static void cris_cpu_register_types(void) +{ +    int i; + +    type_register_static(&cris_cpu_type_info); +    for (i = 0; i < ARRAY_SIZE(cris_cpu_model_type_infos); i++) { +        type_register_static(&cris_cpu_model_type_infos[i]); +    } +} + +type_init(cris_cpu_register_types) diff --git a/target-cris/cpu.h b/target-cris/cpu.h new file mode 100644 index 00000000..d422e357 --- /dev/null +++ b/target-cris/cpu.h @@ -0,0 +1,271 @@ +/* + *  CRIS virtual CPU header + * + *  Copyright (c) 2007 AXIS Communications AB + *  Written by Edgar E. Iglesias + * + * This library is free software; you can redistribute it and/or + * modify it under the terms of the GNU Lesser General Public + * License as published by the Free Software Foundation; either + * version 2 of the License, or (at your option) any later version. + * + * This library is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this library; if not, see <http://www.gnu.org/licenses/>. + */ +#ifndef CPU_CRIS_H +#define CPU_CRIS_H + +#include "config.h" +#include "qemu-common.h" + +#define TARGET_LONG_BITS 32 + +#define CPUArchState struct CPUCRISState + +#include "exec/cpu-defs.h" + +#define ELF_MACHINE	EM_CRIS + +#define EXCP_NMI        1 +#define EXCP_GURU       2 +#define EXCP_BUSFAULT   3 +#define EXCP_IRQ        4 +#define EXCP_BREAK      5 + +/* CRIS-specific interrupt pending bits.  */ +#define CPU_INTERRUPT_NMI       CPU_INTERRUPT_TGT_EXT_3 + +/* CRUS CPU device objects interrupt lines.  */ +#define CRIS_CPU_IRQ 0 +#define CRIS_CPU_NMI 1 + +/* Register aliases. R0 - R15 */ +#define R_FP  8 +#define R_SP  14 +#define R_ACR 15 + +/* Support regs, P0 - P15  */ +#define PR_BZ  0 +#define PR_VR  1 +#define PR_PID 2 +#define PR_SRS 3 +#define PR_WZ  4 +#define PR_EXS 5 +#define PR_EDA 6 +#define PR_PREFIX 6    /* On CRISv10 P6 is reserved, we use it as prefix.  */ +#define PR_MOF 7 +#define PR_DZ  8 +#define PR_EBP 9 +#define PR_ERP 10 +#define PR_SRP 11 +#define PR_NRP 12 +#define PR_CCS 13 +#define PR_USP 14 +#define PRV10_BRP 14 +#define PR_SPC 15 + +/* CPU flags.  */ +#define Q_FLAG 0x80000000 +#define M_FLAG_V32 0x40000000 +#define PFIX_FLAG 0x800      /* CRISv10 Only.  */ +#define F_FLAG_V10 0x400 +#define P_FLAG_V10 0x200 +#define S_FLAG 0x200 +#define R_FLAG 0x100 +#define P_FLAG 0x80 +#define M_FLAG_V10 0x80 +#define U_FLAG 0x40 +#define I_FLAG 0x20 +#define X_FLAG 0x10 +#define N_FLAG 0x08 +#define Z_FLAG 0x04 +#define V_FLAG 0x02 +#define C_FLAG 0x01 +#define ALU_FLAGS 0x1F + +/* Condition codes.  */ +#define CC_CC   0 +#define CC_CS   1 +#define CC_NE   2 +#define CC_EQ   3 +#define CC_VC   4 +#define CC_VS   5 +#define CC_PL   6 +#define CC_MI   7 +#define CC_LS   8 +#define CC_HI   9 +#define CC_GE  10 +#define CC_LT  11 +#define CC_GT  12 +#define CC_LE  13 +#define CC_A   14 +#define CC_P   15 + +#define NB_MMU_MODES 2 + +typedef struct CPUCRISState { +	uint32_t regs[16]; +	/* P0 - P15 are referred to as special registers in the docs.  */ +	uint32_t pregs[16]; + +	/* Pseudo register for the PC. Not directly accessible on CRIS.  */ +	uint32_t pc; + +	/* Pseudo register for the kernel stack.  */ +	uint32_t ksp; + +	/* Branch.  */ +	int dslot; +	int btaken; +	uint32_t btarget; + +	/* Condition flag tracking.  */ +	uint32_t cc_op; +	uint32_t cc_mask; +	uint32_t cc_dest; +	uint32_t cc_src; +	uint32_t cc_result; +	/* size of the operation, 1 = byte, 2 = word, 4 = dword.  */ +	int cc_size; +	/* X flag at the time of cc snapshot.  */ +	int cc_x; + +	/* CRIS has certain insns that lockout interrupts.  */ +	int locked_irq; +	int interrupt_vector; +	int fault_vector; +	int trap_vector; + +	/* FIXME: add a check in the translator to avoid writing to support +	   register sets beyond the 4th. The ISA allows up to 256! but in +	   practice there is no core that implements more than 4. + +	   Support function registers are used to control units close to the +	   core. Accesses do not pass down the normal hierarchy. +	*/ +	uint32_t sregs[4][16]; + +	/* Linear feedback shift reg in the mmu. Used to provide pseudo +	   randomness for the 'hint' the mmu gives to sw for chosing valid +	   sets on TLB refills.  */ +	uint32_t mmu_rand_lfsr; + +	/* +	 * We just store the stores to the tlbset here for later evaluation +	 * when the hw needs access to them. +	 * +	 * One for I and another for D. +	 */ +	struct +	{ +		uint32_t hi; +		uint32_t lo; +	} tlbsets[2][4][16]; + +	CPU_COMMON + +    /* Members from load_info on are preserved across resets.  */ +    void *load_info; +} CPUCRISState; + +#include "cpu-qom.h" + +CRISCPU *cpu_cris_init(const char *cpu_model); +int cpu_cris_exec(CPUState *cpu); +/* you can call this signal handler from your SIGBUS and SIGSEGV +   signal handlers to inform the virtual CPU of exceptions. non zero +   is returned if the signal was handled by the virtual CPU.  */ +int cpu_cris_signal_handler(int host_signum, void *pinfo, +                           void *puc); + +void cris_initialize_tcg(void); +void cris_initialize_crisv10_tcg(void); + +enum { +    CC_OP_DYNAMIC, /* Use env->cc_op  */ +    CC_OP_FLAGS, +    CC_OP_CMP, +    CC_OP_MOVE, +    CC_OP_ADD, +    CC_OP_ADDC, +    CC_OP_MCP, +    CC_OP_ADDU, +    CC_OP_SUB, +    CC_OP_SUBU, +    CC_OP_NEG, +    CC_OP_BTST, +    CC_OP_MULS, +    CC_OP_MULU, +    CC_OP_DSTEP, +    CC_OP_MSTEP, +    CC_OP_BOUND, + +    CC_OP_OR, +    CC_OP_AND, +    CC_OP_XOR, +    CC_OP_LSL, +    CC_OP_LSR, +    CC_OP_ASR, +    CC_OP_LZ +}; + +/* CRIS uses 8k pages.  */ +#define TARGET_PAGE_BITS 13 +#define MMAP_SHIFT TARGET_PAGE_BITS + +#define TARGET_PHYS_ADDR_SPACE_BITS 32 +#define TARGET_VIRT_ADDR_SPACE_BITS 32 + +#define cpu_init(cpu_model) CPU(cpu_cris_init(cpu_model)) + +#define cpu_exec cpu_cris_exec +#define cpu_gen_code cpu_cris_gen_code +#define cpu_signal_handler cpu_cris_signal_handler + +#define CPU_SAVE_VERSION 1 + +/* MMU modes definitions */ +#define MMU_MODE0_SUFFIX _kernel +#define MMU_MODE1_SUFFIX _user +#define MMU_USER_IDX 1 +static inline int cpu_mmu_index (CPUCRISState *env) +{ +	return !!(env->pregs[PR_CCS] & U_FLAG); +} + +int cris_cpu_handle_mmu_fault(CPUState *cpu, vaddr address, int rw, +                              int mmu_idx); + +/* Support function regs.  */ +#define SFR_RW_GC_CFG      0][0 +#define SFR_RW_MM_CFG      env->pregs[PR_SRS]][0 +#define SFR_RW_MM_KBASE_LO env->pregs[PR_SRS]][1 +#define SFR_RW_MM_KBASE_HI env->pregs[PR_SRS]][2 +#define SFR_R_MM_CAUSE     env->pregs[PR_SRS]][3 +#define SFR_RW_MM_TLB_SEL  env->pregs[PR_SRS]][4 +#define SFR_RW_MM_TLB_LO   env->pregs[PR_SRS]][5 +#define SFR_RW_MM_TLB_HI   env->pregs[PR_SRS]][6 + +#include "exec/cpu-all.h" + +static inline void cpu_get_tb_cpu_state(CPUCRISState *env, target_ulong *pc, +                                        target_ulong *cs_base, int *flags) +{ +    *pc = env->pc; +    *cs_base = 0; +    *flags = env->dslot | +            (env->pregs[PR_CCS] & (S_FLAG | P_FLAG | U_FLAG +				     | X_FLAG | PFIX_FLAG)); +} + +#define cpu_list cris_cpu_list +void cris_cpu_list(FILE *f, fprintf_function cpu_fprintf); + +#include "exec/exec-all.h" + +#endif diff --git a/target-cris/crisv10-decode.h b/target-cris/crisv10-decode.h new file mode 100644 index 00000000..587fbdd2 --- /dev/null +++ b/target-cris/crisv10-decode.h @@ -0,0 +1,107 @@ +/* + *  CRISv10 insn decoding macros. + * + *  Copyright (c) 2010 AXIS Communications AB + *  Written by Edgar E. Iglesias. + * + * This library is free software; you can redistribute it and/or + * modify it under the terms of the GNU Lesser General Public + * License as published by the Free Software Foundation; either + * version 2 of the License, or (at your option) any later version. + * + * This library is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this library; if not, see <http://www.gnu.org/licenses/>. + */ + +#define CRISV10_MODE_QIMMEDIATE  0 +#define CRISV10_MODE_REG         1 +#define CRISV10_MODE_INDIRECT    2 +#define CRISV10_MODE_AUTOINC     3 + +/* Quick Immediate.  */ +#define CRISV10_QIMM_BCC_R0      0 +#define CRISV10_QIMM_BCC_R1      1 +#define CRISV10_QIMM_BCC_R2      2 +#define CRISV10_QIMM_BCC_R3      3 + +#define CRISV10_QIMM_BDAP_R0     4 +#define CRISV10_QIMM_BDAP_R1     5 +#define CRISV10_QIMM_BDAP_R2     6 +#define CRISV10_QIMM_BDAP_R3     7 + +#define CRISV10_QIMM_ADDQ        8 +#define CRISV10_QIMM_MOVEQ       9 +#define CRISV10_QIMM_SUBQ       10 +#define CRISV10_QIMM_CMPQ       11 +#define CRISV10_QIMM_ANDQ       12 +#define CRISV10_QIMM_ORQ        13 +#define CRISV10_QIMM_ASHQ       14 +#define CRISV10_QIMM_LSHQ       15 + + +#define CRISV10_REG_ADDX         0 +#define CRISV10_REG_MOVX         1 +#define CRISV10_REG_SUBX         2 +#define CRISV10_REG_LSL          3 +#define CRISV10_REG_ADDI         4 +#define CRISV10_REG_BIAP         5 +#define CRISV10_REG_NEG          6 +#define CRISV10_REG_BOUND        7 +#define CRISV10_REG_ADD          8 +#define CRISV10_REG_MOVE_R       9 +#define CRISV10_REG_MOVE_SPR_R   9 +#define CRISV10_REG_MOVE_R_SPR   8 +#define CRISV10_REG_SUB         10 +#define CRISV10_REG_CMP         11 +#define CRISV10_REG_AND         12 +#define CRISV10_REG_OR          13 +#define CRISV10_REG_ASR         14 +#define CRISV10_REG_LSR         15 + +#define CRISV10_REG_BTST         3 +#define CRISV10_REG_SCC          4 +#define CRISV10_REG_SETF         6 +#define CRISV10_REG_CLEARF       7 +#define CRISV10_REG_BIAP         5 +#define CRISV10_REG_ABS         10 +#define CRISV10_REG_DSTEP       11 +#define CRISV10_REG_LZ          12 +#define CRISV10_REG_NOT         13 +#define CRISV10_REG_SWAP        13 +#define CRISV10_REG_XOR         14 +#define CRISV10_REG_MSTEP       15 + +/* Indirect, var size.  */ +#define CRISV10_IND_TEST        14 +#define CRISV10_IND_MUL          4 +#define CRISV10_IND_BDAP_M       5 +#define CRISV10_IND_ADD          8 +#define CRISV10_IND_MOVE_M_R     9 + + +/* indirect fixed size.  */ +#define CRISV10_IND_ADDX         0 +#define CRISV10_IND_MOVX         1 +#define CRISV10_IND_SUBX         2 +#define CRISV10_IND_CMPX         3 +#define CRISV10_IND_JUMP_M       4 +#define CRISV10_IND_DIP          5 +#define CRISV10_IND_JUMP_R       6 +#define CRISV10_IND_BOUND        7 +#define CRISV10_IND_BCC_M        7 +#define CRISV10_IND_MOVE_M_SPR   8 +#define CRISV10_IND_MOVE_SPR_M   9 +#define CRISV10_IND_SUB         10 +#define CRISV10_IND_CMP         11 +#define CRISV10_IND_AND         12 +#define CRISV10_IND_OR          13 +#define CRISV10_IND_MOVE_R_M    15 + +#define CRISV10_IND_MOVEM_M_R    14 +#define CRISV10_IND_MOVEM_R_M    15 + diff --git a/target-cris/crisv32-decode.h b/target-cris/crisv32-decode.h new file mode 100644 index 00000000..cdba3778 --- /dev/null +++ b/target-cris/crisv32-decode.h @@ -0,0 +1,132 @@ +/* + *  CRIS insn decoding macros. + * + *  Copyright (c) 2007 AXIS Communications AB + *  Written by Edgar E. Iglesias. + * + * This library is free software; you can redistribute it and/or + * modify it under the terms of the GNU Lesser General Public + * License as published by the Free Software Foundation; either + * version 2 of the License, or (at your option) any later version. + * + * This library is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this library; if not, see <http://www.gnu.org/licenses/>. + */ +#ifndef CRISV32_DECODE_H +#define CRISV32_DECODE_H 1 + +/* Convenient binary macros.  */ +#define HEX__(n) 0x##n##LU +#define B8__(x) ((x&0x0000000FLU)?1:0) \ +                 + ((x&0x000000F0LU)?2:0) \ +                 + ((x&0x00000F00LU)?4:0) \ +                 + ((x&0x0000F000LU)?8:0) \ +                 + ((x&0x000F0000LU)?16:0) \ +                 + ((x&0x00F00000LU)?32:0) \ +                 + ((x&0x0F000000LU)?64:0) \ +                 + ((x&0xF0000000LU)?128:0) +#define B8(d) ((unsigned char)B8__(HEX__(d))) + +/* Quick imm.  */ +#define DEC_BCCQ     {B8(00000000), B8(11110000)} +#define DEC_ADDOQ    {B8(00010000), B8(11110000)} +#define DEC_ADDQ     {B8(00100000), B8(11111100)} +#define DEC_MOVEQ    {B8(00100100), B8(11111100)} +#define DEC_SUBQ     {B8(00101000), B8(11111100)} +#define DEC_CMPQ     {B8(00101100), B8(11111100)} +#define DEC_ANDQ     {B8(00110000), B8(11111100)} +#define DEC_ORQ      {B8(00110100), B8(11111100)} +#define DEC_BTSTQ    {B8(00111000), B8(11111110)} +#define DEC_ASRQ     {B8(00111010), B8(11111110)} +#define DEC_LSLQ     {B8(00111100), B8(11111110)} +#define DEC_LSRQ     {B8(00111110), B8(11111110)} + +/* Register.  */ +#define DEC_MOVU_R   {B8(01000100), B8(11111110)} +#define DEC_MOVU_R   {B8(01000100), B8(11111110)} +#define DEC_MOVS_R   {B8(01000110), B8(11111110)} +#define DEC_MOVE_R   {B8(01100100), B8(11111100)} +#define DEC_MOVE_RP  {B8(01100011), B8(11111111)} +#define DEC_MOVE_PR  {B8(01100111), B8(11111111)} +#define DEC_DSTEP_R  {B8(01101111), B8(11111111)} +#define DEC_MOVE_RS  {B8(10110111), B8(11111111)} +#define DEC_MOVE_SR  {B8(11110111), B8(11111111)} +#define DEC_ADDU_R   {B8(01000000), B8(11111110)} +#define DEC_ADDS_R   {B8(01000010), B8(11111110)} +#define DEC_ADD_R    {B8(01100000), B8(11111100)} +#define DEC_ADDI_R   {B8(01010000), B8(11111100)} +#define DEC_MULS_R   {B8(11010000), B8(11111100)} +#define DEC_MULU_R   {B8(10010000), B8(11111100)} +#define DEC_ADDI_ACR {B8(01010100), B8(11111100)} +#define DEC_NEG_R    {B8(01011000), B8(11111100)} +#define DEC_BOUND_R  {B8(01011100), B8(11111100)} +#define DEC_SUBU_R   {B8(01001000), B8(11111110)} +#define DEC_SUBS_R   {B8(01001010), B8(11111110)} +#define DEC_SUB_R    {B8(01101000), B8(11111100)} +#define DEC_CMP_R    {B8(01101100), B8(11111100)} +#define DEC_AND_R    {B8(01110000), B8(11111100)} +#define DEC_ABS_R    {B8(01101011), B8(11111111)} +#define DEC_LZ_R     {B8(01110011), B8(11111111)} +#define DEC_MCP_R    {B8(01111111), B8(11111111)} +#define DEC_SWAP_R   {B8(01110111), B8(11111111)} +#define DEC_XOR_R    {B8(01111011), B8(11111111)} +#define DEC_LSL_R    {B8(01001100), B8(11111100)} +#define DEC_LSR_R    {B8(01111100), B8(11111100)} +#define DEC_ASR_R    {B8(01111000), B8(11111100)} +#define DEC_OR_R     {B8(01110100), B8(11111100)} +#define DEC_BTST_R   {B8(01001111), B8(11111111)} + +/* Fixed.  */ +#define DEC_SETF     {B8(01011011), B8(11111111)} +#define DEC_CLEARF   {B8(01011111), B8(11111111)} + +/* Memory.  */ +#define DEC_ADDU_M   {B8(10000000), B8(10111110)} +#define DEC_ADDS_M   {B8(10000010), B8(10111110)} +#define DEC_MOVU_M   {B8(10000100), B8(10111110)} +#define DEC_MOVS_M   {B8(10000110), B8(10111110)} +#define DEC_SUBU_M   {B8(10001000), B8(10111110)} +#define DEC_SUBS_M   {B8(10001010), B8(10111110)} +#define DEC_CMPU_M   {B8(10001100), B8(10111110)} +#define DEC_CMPS_M   {B8(10001110), B8(10111110)} +#define DEC_ADDO_M   {B8(10010100), B8(10111100)} +#define DEC_BOUND_M  {B8(10011100), B8(10111100)} +#define DEC_ADD_M    {B8(10100000), B8(10111100)} +#define DEC_MOVE_MR  {B8(10100100), B8(10111100)} +#define DEC_SUB_M    {B8(10101000), B8(10111100)} +#define DEC_CMP_M    {B8(10101100), B8(10111100)} +#define DEC_AND_M    {B8(10110000), B8(10111100)} +#define DEC_OR_M     {B8(10110100), B8(10111100)} +#define DEC_TEST_M   {B8(10111000), B8(10111100)} +#define DEC_MOVE_RM  {B8(10111100), B8(10111100)} + +#define DEC_ADDC_R   {B8(01010111), B8(11111111)} +#define DEC_ADDC_MR  {B8(10011010), B8(10111111)} +#define DEC_LAPCQ    {B8(10010111), B8(11111111)} +#define DEC_LAPC_IM  {B8(11010111), B8(11111111)} + +#define DEC_MOVE_MP  {B8(10100011), B8(10111111)} +#define DEC_MOVE_PM  {B8(10100111), B8(10111111)} + +#define DEC_SCC_R    {B8(01010011), B8(11111111)} +#define DEC_RFE_ETC  {B8(10010011), B8(11111111)} +#define DEC_JUMP_P   {B8(10011111), B8(11111111)} +#define DEC_BCC_IM   {B8(11011111), B8(11111111)} +#define DEC_JAS_R    {B8(10011011), B8(11111111)} +#define DEC_JASC_R   {B8(10110011), B8(11111111)} +#define DEC_JAS_IM   {B8(11011011), B8(11111111)} +#define DEC_JASC_IM  {B8(11110011), B8(11111111)} +#define DEC_BAS_IM   {B8(11101011), B8(11111111)} +#define DEC_BASC_IM  {B8(11101111), B8(11111111)} +#define DEC_MOVEM_MR {B8(10111011), B8(10111111)} +#define DEC_MOVEM_RM {B8(10111111), B8(10111111)} + +#define DEC_FTAG_FIDX_D_M {B8(10101011), B8(11111111)} +#define DEC_FTAG_FIDX_I_M {B8(11010011), B8(11111111)} + +#endif diff --git a/target-cris/gdbstub.c b/target-cris/gdbstub.c new file mode 100644 index 00000000..5db3683a --- /dev/null +++ b/target-cris/gdbstub.c @@ -0,0 +1,130 @@ +/* + * CRIS gdb server stub + * + * Copyright (c) 2003-2005 Fabrice Bellard + * Copyright (c) 2013 SUSE LINUX Products GmbH + * + * This library is free software; you can redistribute it and/or + * modify it under the terms of the GNU Lesser General Public + * License as published by the Free Software Foundation; either + * version 2 of the License, or (at your option) any later version. + * + * This library is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this library; if not, see <http://www.gnu.org/licenses/>. + */ +#include "config.h" +#include "qemu-common.h" +#include "exec/gdbstub.h" + +int crisv10_cpu_gdb_read_register(CPUState *cs, uint8_t *mem_buf, int n) +{ +    CRISCPU *cpu = CRIS_CPU(cs); +    CPUCRISState *env = &cpu->env; + +    if (n < 15) { +        return gdb_get_reg32(mem_buf, env->regs[n]); +    } + +    if (n == 15) { +        return gdb_get_reg32(mem_buf, env->pc); +    } + +    if (n < 32) { +        switch (n) { +        case 16: +            return gdb_get_reg8(mem_buf, env->pregs[n - 16]); +        case 17: +            return gdb_get_reg8(mem_buf, env->pregs[n - 16]); +        case 20: +        case 21: +            return gdb_get_reg16(mem_buf, env->pregs[n - 16]); +        default: +            if (n >= 23) { +                return gdb_get_reg32(mem_buf, env->pregs[n - 16]); +            } +            break; +        } +    } +    return 0; +} + +int cris_cpu_gdb_read_register(CPUState *cs, uint8_t *mem_buf, int n) +{ +    CRISCPU *cpu = CRIS_CPU(cs); +    CPUCRISState *env = &cpu->env; +    uint8_t srs; + +    srs = env->pregs[PR_SRS]; +    if (n < 16) { +        return gdb_get_reg32(mem_buf, env->regs[n]); +    } + +    if (n >= 21 && n < 32) { +        return gdb_get_reg32(mem_buf, env->pregs[n - 16]); +    } +    if (n >= 33 && n < 49) { +        return gdb_get_reg32(mem_buf, env->sregs[srs][n - 33]); +    } +    switch (n) { +    case 16: +        return gdb_get_reg8(mem_buf, env->pregs[0]); +    case 17: +        return gdb_get_reg8(mem_buf, env->pregs[1]); +    case 18: +        return gdb_get_reg32(mem_buf, env->pregs[2]); +    case 19: +        return gdb_get_reg8(mem_buf, srs); +    case 20: +        return gdb_get_reg16(mem_buf, env->pregs[4]); +    case 32: +        return gdb_get_reg32(mem_buf, env->pc); +    } + +    return 0; +} + +int cris_cpu_gdb_write_register(CPUState *cs, uint8_t *mem_buf, int n) +{ +    CRISCPU *cpu = CRIS_CPU(cs); +    CPUCRISState *env = &cpu->env; +    uint32_t tmp; + +    if (n > 49) { +        return 0; +    } + +    tmp = ldl_p(mem_buf); + +    if (n < 16) { +        env->regs[n] = tmp; +    } + +    if (n >= 21 && n < 32) { +        env->pregs[n - 16] = tmp; +    } + +    /* FIXME: Should support function regs be writable?  */ +    switch (n) { +    case 16: +        return 1; +    case 17: +        return 1; +    case 18: +        env->pregs[PR_PID] = tmp; +        break; +    case 19: +        return 1; +    case 20: +        return 2; +    case 32: +        env->pc = tmp; +        break; +    } + +    return 4; +} diff --git a/target-cris/helper.c b/target-cris/helper.c new file mode 100644 index 00000000..df6c9fdc --- /dev/null +++ b/target-cris/helper.c @@ -0,0 +1,317 @@ +/* + *  CRIS helper routines. + * + *  Copyright (c) 2007 AXIS Communications AB + *  Written by Edgar E. Iglesias. + * + * This library is free software; you can redistribute it and/or + * modify it under the terms of the GNU Lesser General Public + * License as published by the Free Software Foundation; either + * version 2 of the License, or (at your option) any later version. + * + * This library is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this library; if not, see <http://www.gnu.org/licenses/>. + */ + +#include "cpu.h" +#include "mmu.h" +#include "qemu/host-utils.h" +#include "exec/cpu_ldst.h" + + +//#define CRIS_HELPER_DEBUG + + +#ifdef CRIS_HELPER_DEBUG +#define D(x) x +#define D_LOG(...) qemu_log(__VA_ARGS__) +#else +#define D(x) +#define D_LOG(...) do { } while (0) +#endif + +#if defined(CONFIG_USER_ONLY) + +void cris_cpu_do_interrupt(CPUState *cs) +{ +    CRISCPU *cpu = CRIS_CPU(cs); +    CPUCRISState *env = &cpu->env; + +    cs->exception_index = -1; +    env->pregs[PR_ERP] = env->pc; +} + +void crisv10_cpu_do_interrupt(CPUState *cs) +{ +    cris_cpu_do_interrupt(cs); +} + +int cris_cpu_handle_mmu_fault(CPUState *cs, vaddr address, int rw, +                              int mmu_idx) +{ +    CRISCPU *cpu = CRIS_CPU(cs); + +    cs->exception_index = 0xaa; +    cpu->env.pregs[PR_EDA] = address; +    cpu_dump_state(cs, stderr, fprintf, 0); +    return 1; +} + +#else /* !CONFIG_USER_ONLY */ + + +static void cris_shift_ccs(CPUCRISState *env) +{ +    uint32_t ccs; +    /* Apply the ccs shift.  */ +    ccs = env->pregs[PR_CCS]; +    ccs = ((ccs & 0xc0000000) | ((ccs << 12) >> 2)) & ~0x3ff; +    env->pregs[PR_CCS] = ccs; +} + +int cris_cpu_handle_mmu_fault(CPUState *cs, vaddr address, int rw, +                              int mmu_idx) +{ +    CRISCPU *cpu = CRIS_CPU(cs); +    CPUCRISState *env = &cpu->env; +    struct cris_mmu_result res; +    int prot, miss; +    int r = -1; +    target_ulong phy; + +    qemu_log_mask(CPU_LOG_MMU, "%s addr=%" VADDR_PRIx " pc=%x rw=%x\n", +            __func__, address, env->pc, rw); +    miss = cris_mmu_translate(&res, env, address & TARGET_PAGE_MASK, +                              rw, mmu_idx, 0); +    if (miss) { +        if (cs->exception_index == EXCP_BUSFAULT) { +            cpu_abort(cs, +                      "CRIS: Illegal recursive bus fault." +                      "addr=%" VADDR_PRIx " rw=%d\n", +                      address, rw); +        } + +        env->pregs[PR_EDA] = address; +        cs->exception_index = EXCP_BUSFAULT; +        env->fault_vector = res.bf_vec; +        r = 1; +    } else { +        /* +         * Mask off the cache selection bit. The ETRAX busses do not +         * see the top bit. +         */ +        phy = res.phy & ~0x80000000; +        prot = res.prot; +        tlb_set_page(cs, address & TARGET_PAGE_MASK, phy, +                     prot, mmu_idx, TARGET_PAGE_SIZE); +        r = 0; +    } +    if (r > 0) { +        qemu_log_mask(CPU_LOG_MMU, +                "%s returns %d irqreq=%x addr=%" VADDR_PRIx " phy=%x vec=%x" +                " pc=%x\n", __func__, r, cs->interrupt_request, address, +                res.phy, res.bf_vec, env->pc); +    } +    return r; +} + +void crisv10_cpu_do_interrupt(CPUState *cs) +{ +    CRISCPU *cpu = CRIS_CPU(cs); +    CPUCRISState *env = &cpu->env; +    int ex_vec = -1; + +    D_LOG("exception index=%d interrupt_req=%d\n", +          cs->exception_index, +          cs->interrupt_request); + +    if (env->dslot) { +        /* CRISv10 never takes interrupts while in a delay-slot.  */ +        cpu_abort(cs, "CRIS: Interrupt on delay-slot\n"); +    } + +    assert(!(env->pregs[PR_CCS] & PFIX_FLAG)); +    switch (cs->exception_index) { +    case EXCP_BREAK: +        /* These exceptions are genereated by the core itself. +           ERP should point to the insn following the brk.  */ +        ex_vec = env->trap_vector; +        env->pregs[PRV10_BRP] = env->pc; +        break; + +    case EXCP_NMI: +        /* NMI is hardwired to vector zero.  */ +        ex_vec = 0; +        env->pregs[PR_CCS] &= ~M_FLAG_V10; +        env->pregs[PRV10_BRP] = env->pc; +        break; + +    case EXCP_BUSFAULT: +        cpu_abort(cs, "Unhandled busfault"); +        break; + +    default: +        /* The interrupt controller gives us the vector.  */ +        ex_vec = env->interrupt_vector; +        /* Normal interrupts are taken between +           TB's.  env->pc is valid here.  */ +        env->pregs[PR_ERP] = env->pc; +        break; +    } + +    if (env->pregs[PR_CCS] & U_FLAG) { +        /* Swap stack pointers.  */ +        env->pregs[PR_USP] = env->regs[R_SP]; +        env->regs[R_SP] = env->ksp; +    } + +    /* Now that we are in kernel mode, load the handlers address.  */ +    env->pc = cpu_ldl_code(env, env->pregs[PR_EBP] + ex_vec * 4); +    env->locked_irq = 1; +    env->pregs[PR_CCS] |= F_FLAG_V10; /* set F.  */ + +    qemu_log_mask(CPU_LOG_INT, "%s isr=%x vec=%x ccs=%x pid=%d erp=%x\n", +                  __func__, env->pc, ex_vec, +                  env->pregs[PR_CCS], +                  env->pregs[PR_PID], +                  env->pregs[PR_ERP]); +} + +void cris_cpu_do_interrupt(CPUState *cs) +{ +    CRISCPU *cpu = CRIS_CPU(cs); +    CPUCRISState *env = &cpu->env; +    int ex_vec = -1; + +    D_LOG("exception index=%d interrupt_req=%d\n", +          cs->exception_index, +          cs->interrupt_request); + +    switch (cs->exception_index) { +    case EXCP_BREAK: +        /* These exceptions are genereated by the core itself. +           ERP should point to the insn following the brk.  */ +        ex_vec = env->trap_vector; +        env->pregs[PR_ERP] = env->pc; +        break; + +    case EXCP_NMI: +        /* NMI is hardwired to vector zero.  */ +        ex_vec = 0; +        env->pregs[PR_CCS] &= ~M_FLAG_V32; +        env->pregs[PR_NRP] = env->pc; +        break; + +    case EXCP_BUSFAULT: +        ex_vec = env->fault_vector; +        env->pregs[PR_ERP] = env->pc; +        break; + +    default: +        /* The interrupt controller gives us the vector.  */ +        ex_vec = env->interrupt_vector; +        /* Normal interrupts are taken between +           TB's.  env->pc is valid here.  */ +        env->pregs[PR_ERP] = env->pc; +        break; +    } + +    /* Fill in the IDX field.  */ +    env->pregs[PR_EXS] = (ex_vec & 0xff) << 8; + +    if (env->dslot) { +        D_LOG("excp isr=%x PC=%x ds=%d SP=%x" +              " ERP=%x pid=%x ccs=%x cc=%d %x\n", +              ex_vec, env->pc, env->dslot, +              env->regs[R_SP], +              env->pregs[PR_ERP], env->pregs[PR_PID], +              env->pregs[PR_CCS], +              env->cc_op, env->cc_mask); +        /* We loose the btarget, btaken state here so rexec the +           branch.  */ +        env->pregs[PR_ERP] -= env->dslot; +        /* Exception starts with dslot cleared.  */ +        env->dslot = 0; +    } +	 +    if (env->pregs[PR_CCS] & U_FLAG) { +        /* Swap stack pointers.  */ +        env->pregs[PR_USP] = env->regs[R_SP]; +        env->regs[R_SP] = env->ksp; +    } + +    /* Apply the CRIS CCS shift. Clears U if set.  */ +    cris_shift_ccs(env); + +    /* Now that we are in kernel mode, load the handlers address. +       This load may not fault, real hw leaves that behaviour as +       undefined.  */ +    env->pc = cpu_ldl_code(env, env->pregs[PR_EBP] + ex_vec * 4); + +    /* Clear the excption_index to avoid spurios hw_aborts for recursive +       bus faults.  */ +    cs->exception_index = -1; + +    D_LOG("%s isr=%x vec=%x ccs=%x pid=%d erp=%x\n", +          __func__, env->pc, ex_vec, +          env->pregs[PR_CCS], +          env->pregs[PR_PID], +          env->pregs[PR_ERP]); +} + +hwaddr cris_cpu_get_phys_page_debug(CPUState *cs, vaddr addr) +{ +    CRISCPU *cpu = CRIS_CPU(cs); +    uint32_t phy = addr; +    struct cris_mmu_result res; +    int miss; + +    miss = cris_mmu_translate(&res, &cpu->env, addr, 0, 0, 1); +    /* If D TLB misses, try I TLB.  */ +    if (miss) { +        miss = cris_mmu_translate(&res, &cpu->env, addr, 2, 0, 1); +    } + +    if (!miss) { +        phy = res.phy; +    } +    D(fprintf(stderr, "%s %x -> %x\n", __func__, addr, phy)); +    return phy; +} +#endif + +bool cris_cpu_exec_interrupt(CPUState *cs, int interrupt_request) +{ +    CPUClass *cc = CPU_GET_CLASS(cs); +    CRISCPU *cpu = CRIS_CPU(cs); +    CPUCRISState *env = &cpu->env; +    bool ret = false; + +    if (interrupt_request & CPU_INTERRUPT_HARD +        && (env->pregs[PR_CCS] & I_FLAG) +        && !env->locked_irq) { +        cs->exception_index = EXCP_IRQ; +        cc->do_interrupt(cs); +        ret = true; +    } +    if (interrupt_request & CPU_INTERRUPT_NMI) { +        unsigned int m_flag_archval; +        if (env->pregs[PR_VR] < 32) { +            m_flag_archval = M_FLAG_V10; +        } else { +            m_flag_archval = M_FLAG_V32; +        } +        if ((env->pregs[PR_CCS] & m_flag_archval)) { +            cs->exception_index = EXCP_NMI; +            cc->do_interrupt(cs); +            ret = true; +        } +    } + +    return ret; +} diff --git a/target-cris/helper.h b/target-cris/helper.h new file mode 100644 index 00000000..0b383b25 --- /dev/null +++ b/target-cris/helper.h @@ -0,0 +1,25 @@ +DEF_HELPER_2(raise_exception, void, env, i32) +DEF_HELPER_2(tlb_flush_pid, void, env, i32) +DEF_HELPER_2(spc_write, void, env, i32) +DEF_HELPER_3(dump, void, i32, i32, i32) +DEF_HELPER_1(rfe, void, env) +DEF_HELPER_1(rfn, void, env) + +DEF_HELPER_3(movl_sreg_reg, void, env, i32, i32) +DEF_HELPER_3(movl_reg_sreg, void, env, i32, i32) + +DEF_HELPER_FLAGS_1(lz, TCG_CALL_NO_SE, i32, i32) +DEF_HELPER_FLAGS_4(btst, TCG_CALL_NO_SE, i32, env, i32, i32, i32) + +DEF_HELPER_FLAGS_4(evaluate_flags_muls, TCG_CALL_NO_SE, i32, env, i32, i32, i32) +DEF_HELPER_FLAGS_4(evaluate_flags_mulu, TCG_CALL_NO_SE, i32, env, i32, i32, i32) +DEF_HELPER_FLAGS_5(evaluate_flags_mcp, TCG_CALL_NO_SE, i32, env, +                                                      i32, i32, i32, i32) +DEF_HELPER_FLAGS_5(evaluate_flags_alu_4, TCG_CALL_NO_SE, i32, env, +                                                        i32, i32, i32, i32) +DEF_HELPER_FLAGS_5(evaluate_flags_sub_4, TCG_CALL_NO_SE, i32, env, +                                                        i32, i32, i32, i32) +DEF_HELPER_FLAGS_3(evaluate_flags_move_4, TCG_CALL_NO_SE, i32, env, i32, i32) +DEF_HELPER_FLAGS_3(evaluate_flags_move_2, TCG_CALL_NO_SE, i32, env, i32, i32) +DEF_HELPER_1(evaluate_flags, void, env) +DEF_HELPER_1(top_evaluate_flags, void, env) diff --git a/target-cris/machine.c b/target-cris/machine.c new file mode 100644 index 00000000..8f9c0dd5 --- /dev/null +++ b/target-cris/machine.c @@ -0,0 +1,90 @@ +#include "hw/hw.h" +#include "hw/boards.h" + +void cpu_save(QEMUFile *f, void *opaque) +{ +    CPUCRISState *env = opaque; +    int i; +    int s; +    int mmu; + +    for (i = 0; i < 16; i++) +        qemu_put_be32(f, env->regs[i]); +    for (i = 0; i < 16; i++) +        qemu_put_be32(f, env->pregs[i]); + +    qemu_put_be32(f, env->pc); +    qemu_put_be32(f, env->ksp); + +    qemu_put_be32(f, env->dslot); +    qemu_put_be32(f, env->btaken); +    qemu_put_be32(f, env->btarget); + +    qemu_put_be32(f, env->cc_op); +    qemu_put_be32(f, env->cc_mask); +    qemu_put_be32(f, env->cc_dest); +    qemu_put_be32(f, env->cc_src); +    qemu_put_be32(f, env->cc_result); +    qemu_put_be32(f, env->cc_size); +    qemu_put_be32(f, env->cc_x); + +    for (s = 0; s < 4; s++) { +        for (i = 0; i < 16; i++) +            qemu_put_be32(f, env->sregs[s][i]); +    } + +    qemu_put_be32(f, env->mmu_rand_lfsr); +    for (mmu = 0; mmu < 2; mmu++) { +        for (s = 0; s < 4; s++) { +            for (i = 0; i < 16; i++) { +                qemu_put_be32(f, env->tlbsets[mmu][s][i].lo); +                qemu_put_be32(f, env->tlbsets[mmu][s][i].hi); +            } +        } +    } +} + +int cpu_load(QEMUFile *f, void *opaque, int version_id) +{ +	CPUCRISState *env = opaque; +    int i; +    int s; +    int mmu; + +    for (i = 0; i < 16; i++) +        env->regs[i] = qemu_get_be32(f); +    for (i = 0; i < 16; i++) +        env->pregs[i] = qemu_get_be32(f); + +    env->pc = qemu_get_be32(f); +    env->ksp = qemu_get_be32(f); + +    env->dslot = qemu_get_be32(f); +    env->btaken = qemu_get_be32(f); +    env->btarget = qemu_get_be32(f); + +    env->cc_op = qemu_get_be32(f); +    env->cc_mask = qemu_get_be32(f); +    env->cc_dest = qemu_get_be32(f); +    env->cc_src = qemu_get_be32(f); +    env->cc_result = qemu_get_be32(f); +    env->cc_size = qemu_get_be32(f); +    env->cc_x = qemu_get_be32(f); + +    for (s = 0; s < 4; s++) { +        for (i = 0; i < 16; i++) +            env->sregs[s][i] = qemu_get_be32(f); +    } + +    env->mmu_rand_lfsr = qemu_get_be32(f); +    for (mmu = 0; mmu < 2; mmu++) { +        for (s = 0; s < 4; s++) { +            for (i = 0; i < 16; i++) { +                env->tlbsets[mmu][s][i].lo = qemu_get_be32(f); +                env->tlbsets[mmu][s][i].hi = qemu_get_be32(f); +            } +        } +    } + +    return 0; +} diff --git a/target-cris/mmu.c b/target-cris/mmu.c new file mode 100644 index 00000000..1c95a415 --- /dev/null +++ b/target-cris/mmu.c @@ -0,0 +1,363 @@ +/* + *  CRIS mmu emulation. + * + *  Copyright (c) 2007 AXIS Communications AB + *  Written by Edgar E. Iglesias. + * + * This library is free software; you can redistribute it and/or + * modify it under the terms of the GNU Lesser General Public + * License as published by the Free Software Foundation; either + * version 2 of the License, or (at your option) any later version. + * + * This library is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this library; if not, see <http://www.gnu.org/licenses/>. + */ + +#ifndef CONFIG_USER_ONLY + +#include "cpu.h" +#include "mmu.h" + +#ifdef DEBUG +#define D(x) x +#define D_LOG(...) qemu_log(__VA_ARGS__) +#else +#define D(x) do { } while (0) +#define D_LOG(...) do { } while (0) +#endif + +void cris_mmu_init(CPUCRISState *env) +{ +	env->mmu_rand_lfsr = 0xcccc; +} + +#define SR_POLYNOM 0x8805 +static inline unsigned int compute_polynom(unsigned int sr) +{ +	unsigned int i; +	unsigned int f; + +	f = 0; +	for (i = 0; i < 16; i++) +		f += ((SR_POLYNOM >> i) & 1) & ((sr >> i) & 1); + +	return f; +} + +static void cris_mmu_update_rand_lfsr(CPUCRISState *env) +{ +	unsigned int f; + +	/* Update lfsr at every fault.  */ +	f = compute_polynom(env->mmu_rand_lfsr); +	env->mmu_rand_lfsr >>= 1; +	env->mmu_rand_lfsr |= (f << 15); +	env->mmu_rand_lfsr &= 0xffff; +} + +static inline int cris_mmu_enabled(uint32_t rw_gc_cfg) +{ +	return (rw_gc_cfg & 12) != 0; +} + +static inline int cris_mmu_segmented_addr(int seg, uint32_t rw_mm_cfg) +{ +	return (1 << seg) & rw_mm_cfg; +} + +static uint32_t cris_mmu_translate_seg(CPUCRISState *env, int seg) +{ +	uint32_t base; +	int i; + +	if (seg < 8) +		base = env->sregs[SFR_RW_MM_KBASE_LO]; +	else +		base = env->sregs[SFR_RW_MM_KBASE_HI]; + +	i = seg & 7; +	base >>= i * 4; +	base &= 15; + +	base <<= 28; +	return base; +} +/* Used by the tlb decoder.  */ +#define EXTRACT_FIELD(src, start, end) \ +	    (((src) >> start) & ((1 << (end - start + 1)) - 1)) + +static inline void set_field(uint32_t *dst, unsigned int val,  +			     unsigned int offset, unsigned int width) +{ +	uint32_t mask; + +	mask = (1 << width) - 1; +	mask <<= offset; +	val <<= offset; + +	val &= mask; +	*dst &= ~(mask); +	*dst |= val; +} + +#ifdef DEBUG +static void dump_tlb(CPUCRISState *env, int mmu) +{ +	int set; +	int idx; +	uint32_t hi, lo, tlb_vpn, tlb_pfn; + +	for (set = 0; set < 4; set++) { +		for (idx = 0; idx < 16; idx++) { +			lo = env->tlbsets[mmu][set][idx].lo; +			hi = env->tlbsets[mmu][set][idx].hi; +			tlb_vpn = EXTRACT_FIELD(hi, 13, 31); +			tlb_pfn = EXTRACT_FIELD(lo, 13, 31); + +			printf ("TLB: [%d][%d] hi=%x lo=%x v=%x p=%x\n",  +					set, idx, hi, lo, tlb_vpn, tlb_pfn); +		} +	} +} +#endif + +/* rw 0 = read, 1 = write, 2 = exec.  */ +static int cris_mmu_translate_page(struct cris_mmu_result *res, +				   CPUCRISState *env, uint32_t vaddr, +				   int rw, int usermode, int debug) +{ +	unsigned int vpage; +	unsigned int idx; +	uint32_t pid, lo, hi; +	uint32_t tlb_vpn, tlb_pfn = 0; +	int tlb_pid, tlb_g, tlb_v, tlb_k, tlb_w, tlb_x; +	int cfg_v, cfg_k, cfg_w, cfg_x;	 +	int set, match = 0; +	uint32_t r_cause; +	uint32_t r_cfg; +	int rwcause; +	int mmu = 1; /* Data mmu is default.  */ +	int vect_base; + +	r_cause = env->sregs[SFR_R_MM_CAUSE]; +	r_cfg = env->sregs[SFR_RW_MM_CFG]; +	pid = env->pregs[PR_PID] & 0xff; + +	switch (rw) { +		case 2: rwcause = CRIS_MMU_ERR_EXEC; mmu = 0; break; +		case 1: rwcause = CRIS_MMU_ERR_WRITE; break; +		default: +		case 0: rwcause = CRIS_MMU_ERR_READ; break; +	} + +	/* I exception vectors 4 - 7, D 8 - 11.  */ +	vect_base = (mmu + 1) * 4; + +	vpage = vaddr >> 13; + +	/* We know the index which to check on each set. +	   Scan both I and D.  */ +#if 0 +	for (set = 0; set < 4; set++) { +		for (idx = 0; idx < 16; idx++) { +			lo = env->tlbsets[mmu][set][idx].lo; +			hi = env->tlbsets[mmu][set][idx].hi; +			tlb_vpn = EXTRACT_FIELD(hi, 13, 31); +			tlb_pfn = EXTRACT_FIELD(lo, 13, 31); + +			printf ("TLB: [%d][%d] hi=%x lo=%x v=%x p=%x\n",  +					set, idx, hi, lo, tlb_vpn, tlb_pfn); +		} +	} +#endif + +	idx = vpage & 15; +	for (set = 0; set < 4; set++) +	{ +		lo = env->tlbsets[mmu][set][idx].lo; +		hi = env->tlbsets[mmu][set][idx].hi; + +		tlb_vpn = hi >> 13; +		tlb_pid = EXTRACT_FIELD(hi, 0, 7); +		tlb_g  = EXTRACT_FIELD(lo, 4, 4); + +		D_LOG("TLB[%d][%d][%d] v=%x vpage=%x lo=%x hi=%x\n",  +			 mmu, set, idx, tlb_vpn, vpage, lo, hi); +		if ((tlb_g || (tlb_pid == pid)) +		    && tlb_vpn == vpage) { +			match = 1; +			break; +		} +	} + +	res->bf_vec = vect_base; +	if (match) { +		cfg_w  = EXTRACT_FIELD(r_cfg, 19, 19); +		cfg_k  = EXTRACT_FIELD(r_cfg, 18, 18); +		cfg_x  = EXTRACT_FIELD(r_cfg, 17, 17); +		cfg_v  = EXTRACT_FIELD(r_cfg, 16, 16); + +		tlb_pfn = EXTRACT_FIELD(lo, 13, 31); +		tlb_v = EXTRACT_FIELD(lo, 3, 3); +		tlb_k = EXTRACT_FIELD(lo, 2, 2); +		tlb_w = EXTRACT_FIELD(lo, 1, 1); +		tlb_x = EXTRACT_FIELD(lo, 0, 0); + +		/* +		set_exception_vector(0x04, i_mmu_refill); +		set_exception_vector(0x05, i_mmu_invalid); +		set_exception_vector(0x06, i_mmu_access); +		set_exception_vector(0x07, i_mmu_execute); +		set_exception_vector(0x08, d_mmu_refill); +		set_exception_vector(0x09, d_mmu_invalid); +		set_exception_vector(0x0a, d_mmu_access); +		set_exception_vector(0x0b, d_mmu_write); +		*/ +		if (cfg_k && tlb_k && usermode) { +			D(printf ("tlb: kernel protected %x lo=%x pc=%x\n",  +				  vaddr, lo, env->pc)); +			match = 0; +			res->bf_vec = vect_base + 2; +		} else if (rw == 1 && cfg_w && !tlb_w) { +			D(printf ("tlb: write protected %x lo=%x pc=%x\n",  +				  vaddr, lo, env->pc)); +			match = 0; +			/* write accesses never go through the I mmu.  */ +			res->bf_vec = vect_base + 3; +		} else if (rw == 2 && cfg_x && !tlb_x) { +			D(printf ("tlb: exec protected %x lo=%x pc=%x\n",  +				 vaddr, lo, env->pc)); +			match = 0; +			res->bf_vec = vect_base + 3; +		} else if (cfg_v && !tlb_v) { +			D(printf ("tlb: invalid %x\n", vaddr)); +			match = 0; +			res->bf_vec = vect_base + 1; +		} + +		res->prot = 0; +		if (match) { +			res->prot |= PAGE_READ; +			if (tlb_w) +				res->prot |= PAGE_WRITE; +			if (mmu == 0 && (cfg_x || tlb_x)) +				res->prot |= PAGE_EXEC; +		} +		else +			D(dump_tlb(env, mmu)); +	} else { +		/* If refill, provide a randomized set.  */ +		set = env->mmu_rand_lfsr & 3; +	} + +	if (!match && !debug) { +		cris_mmu_update_rand_lfsr(env); + +		/* Compute index.  */ +		idx = vpage & 15; + +		/* Update RW_MM_TLB_SEL.  */ +		env->sregs[SFR_RW_MM_TLB_SEL] = 0; +		set_field(&env->sregs[SFR_RW_MM_TLB_SEL], idx, 0, 4); +		set_field(&env->sregs[SFR_RW_MM_TLB_SEL], set, 4, 2); + +		/* Update RW_MM_CAUSE.  */ +		set_field(&r_cause, rwcause, 8, 2); +		set_field(&r_cause, vpage, 13, 19); +		set_field(&r_cause, pid, 0, 8); +		env->sregs[SFR_R_MM_CAUSE] = r_cause; +		D(printf("refill vaddr=%x pc=%x\n", vaddr, env->pc)); +	} + +	D(printf ("%s rw=%d mtch=%d pc=%x va=%x vpn=%x tlbvpn=%x pfn=%x pid=%x" +		  " %x cause=%x sel=%x sp=%x %x %x\n", +		  __func__, rw, match, env->pc, +		  vaddr, vpage, +		  tlb_vpn, tlb_pfn, tlb_pid,  +		  pid, +		  r_cause, +		  env->sregs[SFR_RW_MM_TLB_SEL], +		  env->regs[R_SP], env->pregs[PR_USP], env->ksp)); + +	res->phy = tlb_pfn << TARGET_PAGE_BITS; +	return !match; +} + +void cris_mmu_flush_pid(CPUCRISState *env, uint32_t pid) +{ +    CRISCPU *cpu = cris_env_get_cpu(env); +	target_ulong vaddr; +	unsigned int idx; +	uint32_t lo, hi; +	uint32_t tlb_vpn; +	int tlb_pid, tlb_g, tlb_v; +	unsigned int set; +	unsigned int mmu; + +	pid &= 0xff; +	for (mmu = 0; mmu < 2; mmu++) { +		for (set = 0; set < 4; set++) +		{ +			for (idx = 0; idx < 16; idx++) { +				lo = env->tlbsets[mmu][set][idx].lo; +				hi = env->tlbsets[mmu][set][idx].hi; +				 +				tlb_vpn = EXTRACT_FIELD(hi, 13, 31); +				tlb_pid = EXTRACT_FIELD(hi, 0, 7); +				tlb_g  = EXTRACT_FIELD(lo, 4, 4); +				tlb_v = EXTRACT_FIELD(lo, 3, 3); + +				if (tlb_v && !tlb_g && (tlb_pid == pid)) { +					vaddr = tlb_vpn << TARGET_PAGE_BITS; +					D_LOG("flush pid=%x vaddr=%x\n",  +						  pid, vaddr); +                    tlb_flush_page(CPU(cpu), vaddr); +				} +			} +		} +	} +} + +int cris_mmu_translate(struct cris_mmu_result *res, +		       CPUCRISState *env, uint32_t vaddr, +		       int rw, int mmu_idx, int debug) +{ +	int seg; +	int miss = 0; +	int is_user = mmu_idx == MMU_USER_IDX; +	uint32_t old_srs; + +	old_srs= env->pregs[PR_SRS]; + +	/* rw == 2 means exec, map the access to the insn mmu.  */ +	env->pregs[PR_SRS] = rw == 2 ? 1 : 2; + +	if (!cris_mmu_enabled(env->sregs[SFR_RW_GC_CFG])) { +		res->phy = vaddr; +		res->prot = PAGE_BITS; +		goto done; +	} + +	seg = vaddr >> 28; +	if (!is_user && cris_mmu_segmented_addr(seg, env->sregs[SFR_RW_MM_CFG])) +	{ +		uint32_t base; + +		miss = 0; +		base = cris_mmu_translate_seg(env, seg); +                res->phy = base | (0x0fffffff & vaddr); +		res->prot = PAGE_BITS; +	} else { +		miss = cris_mmu_translate_page(res, env, vaddr, rw, +					       is_user, debug); +	} +  done: +	env->pregs[PR_SRS] = old_srs; +	return miss; +} +#endif diff --git a/target-cris/mmu.h b/target-cris/mmu.h new file mode 100644 index 00000000..8e249e81 --- /dev/null +++ b/target-cris/mmu.h @@ -0,0 +1,17 @@ +#define CRIS_MMU_ERR_EXEC  0 +#define CRIS_MMU_ERR_READ  1 +#define CRIS_MMU_ERR_WRITE 2 +#define CRIS_MMU_ERR_FLUSH 3 + +struct cris_mmu_result +{ +	uint32_t phy; +	int prot; +	int bf_vec; +}; + +void cris_mmu_init(CPUCRISState *env); +void cris_mmu_flush_pid(CPUCRISState *env, uint32_t pid); +int cris_mmu_translate(struct cris_mmu_result *res, +		       CPUCRISState *env, uint32_t vaddr, +		       int rw, int mmu_idx, int debug); diff --git a/target-cris/op_helper.c b/target-cris/op_helper.c new file mode 100644 index 00000000..5c0c14d9 --- /dev/null +++ b/target-cris/op_helper.c @@ -0,0 +1,642 @@ +/* + *  CRIS helper routines + * + *  Copyright (c) 2007 AXIS Communications + *  Written by Edgar E. Iglesias + * + * This library is free software; you can redistribute it and/or + * modify it under the terms of the GNU Lesser General Public + * License as published by the Free Software Foundation; either + * version 2 of the License, or (at your option) any later version. + * + * This library is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this library; if not, see <http://www.gnu.org/licenses/>. + */ + +#include "cpu.h" +#include "mmu.h" +#include "exec/helper-proto.h" +#include "qemu/host-utils.h" +#include "exec/cpu_ldst.h" + +//#define CRIS_OP_HELPER_DEBUG + + +#ifdef CRIS_OP_HELPER_DEBUG +#define D(x) x +#define D_LOG(...) qemu_log(__VA_ARGS__) +#else +#define D(x) +#define D_LOG(...) do { } while (0) +#endif + +#if !defined(CONFIG_USER_ONLY) +/* Try to fill the TLB and return an exception if error. If retaddr is +   NULL, it means that the function was called in C code (i.e. not +   from generated code or from helper.c) */ +void tlb_fill(CPUState *cs, target_ulong addr, int is_write, int mmu_idx, +              uintptr_t retaddr) +{ +    CRISCPU *cpu = CRIS_CPU(cs); +    CPUCRISState *env = &cpu->env; +    int ret; + +    D_LOG("%s pc=%x tpc=%x ra=%p\n", __func__, +          env->pc, env->pregs[PR_EDA], (void *)retaddr); +    ret = cris_cpu_handle_mmu_fault(cs, addr, is_write, mmu_idx); +    if (unlikely(ret)) { +        if (retaddr) { +            /* now we have a real cpu fault */ +            if (cpu_restore_state(cs, retaddr)) { +		/* Evaluate flags after retranslation.  */ +                helper_top_evaluate_flags(env); +            } +        } +        cpu_loop_exit(cs); +    } +} + +#endif + +void helper_raise_exception(CPUCRISState *env, uint32_t index) +{ +    CPUState *cs = CPU(cris_env_get_cpu(env)); + +    cs->exception_index = index; +    cpu_loop_exit(cs); +} + +void helper_tlb_flush_pid(CPUCRISState *env, uint32_t pid) +{ +#if !defined(CONFIG_USER_ONLY) +	pid &= 0xff; +	if (pid != (env->pregs[PR_PID] & 0xff)) +		cris_mmu_flush_pid(env, env->pregs[PR_PID]); +#endif +} + +void helper_spc_write(CPUCRISState *env, uint32_t new_spc) +{ +#if !defined(CONFIG_USER_ONLY) +    CRISCPU *cpu = cris_env_get_cpu(env); +    CPUState *cs = CPU(cpu); + +    tlb_flush_page(cs, env->pregs[PR_SPC]); +    tlb_flush_page(cs, new_spc); +#endif +} + +void helper_dump(uint32_t a0, uint32_t a1, uint32_t a2) +{ +	qemu_log("%s: a0=%x a1=%x\n", __func__, a0, a1); +} + +/* Used by the tlb decoder.  */ +#define EXTRACT_FIELD(src, start, end) \ +	    (((src) >> start) & ((1 << (end - start + 1)) - 1)) + +void helper_movl_sreg_reg(CPUCRISState *env, uint32_t sreg, uint32_t reg) +{ +#if !defined(CONFIG_USER_ONLY) +    CRISCPU *cpu = cris_env_get_cpu(env); +#endif +	uint32_t srs; +	srs = env->pregs[PR_SRS]; +	srs &= 3; +	env->sregs[srs][sreg] = env->regs[reg]; + +#if !defined(CONFIG_USER_ONLY) +	if (srs == 1 || srs == 2) { +		if (sreg == 6) { +			/* Writes to tlb-hi write to mm_cause as a side  +			   effect.  */ +			env->sregs[SFR_RW_MM_TLB_HI] = env->regs[reg]; +			env->sregs[SFR_R_MM_CAUSE] = env->regs[reg]; +		} +		else if (sreg == 5) { +			uint32_t set; +			uint32_t idx; +			uint32_t lo, hi; +			uint32_t vaddr; +			int tlb_v; + +			idx = set = env->sregs[SFR_RW_MM_TLB_SEL]; +			set >>= 4; +			set &= 3; + +			idx &= 15; +			/* We've just made a write to tlb_lo.  */ +			lo = env->sregs[SFR_RW_MM_TLB_LO]; +			/* Writes are done via r_mm_cause.  */ +			hi = env->sregs[SFR_R_MM_CAUSE]; + +			vaddr = EXTRACT_FIELD(env->tlbsets[srs-1][set][idx].hi, +					      13, 31); +			vaddr <<= TARGET_PAGE_BITS; +			tlb_v = EXTRACT_FIELD(env->tlbsets[srs-1][set][idx].lo, +					    3, 3); +			env->tlbsets[srs - 1][set][idx].lo = lo; +			env->tlbsets[srs - 1][set][idx].hi = hi; + +			D_LOG("tlb flush vaddr=%x v=%d pc=%x\n",  +				  vaddr, tlb_v, env->pc); +			if (tlb_v) { +                tlb_flush_page(CPU(cpu), vaddr); +			} +		} +	} +#endif +} + +void helper_movl_reg_sreg(CPUCRISState *env, uint32_t reg, uint32_t sreg) +{ +	uint32_t srs; +	env->pregs[PR_SRS] &= 3; +	srs = env->pregs[PR_SRS]; +	 +#if !defined(CONFIG_USER_ONLY) +	if (srs == 1 || srs == 2) +	{ +		uint32_t set; +		uint32_t idx; +		uint32_t lo, hi; + +		idx = set = env->sregs[SFR_RW_MM_TLB_SEL]; +		set >>= 4; +		set &= 3; +		idx &= 15; + +		/* Update the mirror regs.  */ +		hi = env->tlbsets[srs - 1][set][idx].hi; +		lo = env->tlbsets[srs - 1][set][idx].lo; +		env->sregs[SFR_RW_MM_TLB_HI] = hi; +		env->sregs[SFR_RW_MM_TLB_LO] = lo; +	} +#endif +	env->regs[reg] = env->sregs[srs][sreg]; +} + +static void cris_ccs_rshift(CPUCRISState *env) +{ +	uint32_t ccs; + +	/* Apply the ccs shift.  */ +	ccs = env->pregs[PR_CCS]; +	ccs = (ccs & 0xc0000000) | ((ccs & 0x0fffffff) >> 10); +	if (ccs & U_FLAG) +	{ +		/* Enter user mode.  */ +		env->ksp = env->regs[R_SP]; +		env->regs[R_SP] = env->pregs[PR_USP]; +	} + +	env->pregs[PR_CCS] = ccs; +} + +void helper_rfe(CPUCRISState *env) +{ +	int rflag = env->pregs[PR_CCS] & R_FLAG; + +	D_LOG("rfe: erp=%x pid=%x ccs=%x btarget=%x\n",  +		 env->pregs[PR_ERP], env->pregs[PR_PID], +		 env->pregs[PR_CCS], +		 env->btarget); + +	cris_ccs_rshift(env); + +	/* RFE sets the P_FLAG only if the R_FLAG is not set.  */ +	if (!rflag) +		env->pregs[PR_CCS] |= P_FLAG; +} + +void helper_rfn(CPUCRISState *env) +{ +	int rflag = env->pregs[PR_CCS] & R_FLAG; + +	D_LOG("rfn: erp=%x pid=%x ccs=%x btarget=%x\n",  +		 env->pregs[PR_ERP], env->pregs[PR_PID], +		 env->pregs[PR_CCS], +		 env->btarget); + +	cris_ccs_rshift(env); + +	/* Set the P_FLAG only if the R_FLAG is not set.  */ +	if (!rflag) +		env->pregs[PR_CCS] |= P_FLAG; + +	/* Always set the M flag.  */ +	env->pregs[PR_CCS] |= M_FLAG_V32; +} + +uint32_t helper_lz(uint32_t t0) +{ +	return clz32(t0); +} + +uint32_t helper_btst(CPUCRISState *env, uint32_t t0, uint32_t t1, uint32_t ccs) +{ +	/* FIXME: clean this up.  */ + +	/* des ref: +	   The N flag is set according to the selected bit in the dest reg. +	   The Z flag is set if the selected bit and all bits to the right are +	   zero. +	   The X flag is cleared. +	   Other flags are left untouched. +	   The destination reg is not affected.*/ +	unsigned int fz, sbit, bset, mask, masked_t0; + +	sbit = t1 & 31; +	bset = !!(t0 & (1 << sbit)); +	mask = sbit == 31 ? -1 : (1 << (sbit + 1)) - 1; +	masked_t0 = t0 & mask; +	fz = !(masked_t0 | bset); + +	/* Clear the X, N and Z flags.  */ +	ccs = ccs & ~(X_FLAG | N_FLAG | Z_FLAG); +	if (env->pregs[PR_VR] < 32) +		ccs &= ~(V_FLAG | C_FLAG); +	/* Set the N and Z flags accordingly.  */ +	ccs |= (bset << 3) | (fz << 2); +	return ccs; +} + +static inline uint32_t evaluate_flags_writeback(CPUCRISState *env, +                                                uint32_t flags, uint32_t ccs) +{ +	unsigned int x, z, mask; + +	/* Extended arithmetics, leave the z flag alone.  */ +	x = env->cc_x; +	mask = env->cc_mask | X_FLAG; +        if (x) { +		z = flags & Z_FLAG; +		mask = mask & ~z; +	} +	flags &= mask; + +	/* all insn clear the x-flag except setf or clrf.  */ +	ccs &= ~mask; +	ccs |= flags; +	return ccs; +} + +uint32_t helper_evaluate_flags_muls(CPUCRISState *env, +                                    uint32_t ccs, uint32_t res, uint32_t mof) +{ +	uint32_t flags = 0; +	int64_t tmp; +	int dneg; + +	dneg = ((int32_t)res) < 0; + +	tmp = mof; +	tmp <<= 32; +	tmp |= res; +	if (tmp == 0) +		flags |= Z_FLAG; +	else if (tmp < 0) +		flags |= N_FLAG; +	if ((dneg && mof != -1) +	    || (!dneg && mof != 0)) +		flags |= V_FLAG; +        return evaluate_flags_writeback(env, flags, ccs); +} + +uint32_t helper_evaluate_flags_mulu(CPUCRISState *env, +                                    uint32_t ccs, uint32_t res, uint32_t mof) +{ +	uint32_t flags = 0; +	uint64_t tmp; + +	tmp = mof; +	tmp <<= 32; +	tmp |= res; +	if (tmp == 0) +		flags |= Z_FLAG; +	else if (tmp >> 63) +		flags |= N_FLAG; +	if (mof) +		flags |= V_FLAG; + +        return evaluate_flags_writeback(env, flags, ccs); +} + +uint32_t helper_evaluate_flags_mcp(CPUCRISState *env, uint32_t ccs, +				   uint32_t src, uint32_t dst, uint32_t res) +{ +	uint32_t flags = 0; + +	src = src & 0x80000000; +	dst = dst & 0x80000000; + +	if ((res & 0x80000000L) != 0L) +	{ +		flags |= N_FLAG; +		if (!src && !dst) +			flags |= V_FLAG; +		else if (src & dst) +			flags |= R_FLAG; +	} +	else +	{ +		if (res == 0L) +			flags |= Z_FLAG; +		if (src & dst)  +			flags |= V_FLAG; +		if (dst | src)  +			flags |= R_FLAG; +	} + +        return evaluate_flags_writeback(env, flags, ccs); +} + +uint32_t helper_evaluate_flags_alu_4(CPUCRISState *env, uint32_t ccs, +				     uint32_t src, uint32_t dst, uint32_t res) +{ +	uint32_t flags = 0; + +	src = src & 0x80000000; +	dst = dst & 0x80000000; + +	if ((res & 0x80000000L) != 0L) +	{ +		flags |= N_FLAG; +		if (!src && !dst) +			flags |= V_FLAG; +		else if (src & dst) +			flags |= C_FLAG; +	} +	else +	{ +		if (res == 0L) +			flags |= Z_FLAG; +		if (src & dst)  +			flags |= V_FLAG; +		if (dst | src)  +			flags |= C_FLAG; +	} + +        return evaluate_flags_writeback(env, flags, ccs); +} + +uint32_t helper_evaluate_flags_sub_4(CPUCRISState *env, uint32_t ccs, +				     uint32_t src, uint32_t dst, uint32_t res) +{ +	uint32_t flags = 0; + +	src = (~src) & 0x80000000; +	dst = dst & 0x80000000; + +	if ((res & 0x80000000L) != 0L) +	{ +		flags |= N_FLAG; +		if (!src && !dst) +			flags |= V_FLAG; +		else if (src & dst) +			flags |= C_FLAG; +	} +	else +	{ +		if (res == 0L) +			flags |= Z_FLAG; +		if (src & dst)  +			flags |= V_FLAG; +		if (dst | src)  +			flags |= C_FLAG; +	} + +	flags ^= C_FLAG; +        return evaluate_flags_writeback(env, flags, ccs); +} + +uint32_t helper_evaluate_flags_move_4(CPUCRISState *env, +                                      uint32_t ccs, uint32_t res) +{ +	uint32_t flags = 0; + +	if ((int32_t)res < 0) +		flags |= N_FLAG; +	else if (res == 0L) +		flags |= Z_FLAG; + +        return evaluate_flags_writeback(env, flags, ccs); +} +uint32_t helper_evaluate_flags_move_2(CPUCRISState *env, +                                      uint32_t ccs, uint32_t res) +{ +	uint32_t flags = 0; + +	if ((int16_t)res < 0L) +		flags |= N_FLAG; +	else if (res == 0) +		flags |= Z_FLAG; + +        return evaluate_flags_writeback(env, flags, ccs); +} + +/* TODO: This is expensive. We could split things up and only evaluate part of +   CCR on a need to know basis. For now, we simply re-evaluate everything.  */ +void helper_evaluate_flags(CPUCRISState *env) +{ +	uint32_t src, dst, res; +	uint32_t flags = 0; + +	src = env->cc_src; +	dst = env->cc_dest; +	res = env->cc_result; + +	if (env->cc_op == CC_OP_SUB || env->cc_op == CC_OP_CMP) +		src = ~src; + +	/* Now, evaluate the flags. This stuff is based on +	   Per Zander's CRISv10 simulator.  */ +	switch (env->cc_size) +	{ +		case 1: +			if ((res & 0x80L) != 0L) +			{ +				flags |= N_FLAG; +				if (((src & 0x80L) == 0L) +				    && ((dst & 0x80L) == 0L)) +				{ +					flags |= V_FLAG; +				} +				else if (((src & 0x80L) != 0L) +					 && ((dst & 0x80L) != 0L)) +				{ +					flags |= C_FLAG; +				} +			} +			else +			{ +				if ((res & 0xFFL) == 0L) +				{ +					flags |= Z_FLAG; +				} +				if (((src & 0x80L) != 0L) +				    && ((dst & 0x80L) != 0L)) +				{ +					flags |= V_FLAG; +				} +				if ((dst & 0x80L) != 0L +				    || (src & 0x80L) != 0L) +				{ +					flags |= C_FLAG; +				} +			} +			break; +		case 2: +			if ((res & 0x8000L) != 0L) +			{ +				flags |= N_FLAG; +				if (((src & 0x8000L) == 0L) +				    && ((dst & 0x8000L) == 0L)) +				{ +					flags |= V_FLAG; +				} +				else if (((src & 0x8000L) != 0L) +					 && ((dst & 0x8000L) != 0L)) +				{ +					flags |= C_FLAG; +				} +			} +			else +			{ +				if ((res & 0xFFFFL) == 0L) +				{ +					flags |= Z_FLAG; +				} +				if (((src & 0x8000L) != 0L) +				    && ((dst & 0x8000L) != 0L)) +				{ +					flags |= V_FLAG; +				} +				if ((dst & 0x8000L) != 0L +				    || (src & 0x8000L) != 0L) +				{ +					flags |= C_FLAG; +				} +			} +			break; +		case 4: +			if ((res & 0x80000000L) != 0L) +			{ +				flags |= N_FLAG; +				if (((src & 0x80000000L) == 0L) +				    && ((dst & 0x80000000L) == 0L)) +				{ +					flags |= V_FLAG; +				} +				else if (((src & 0x80000000L) != 0L) && +					 ((dst & 0x80000000L) != 0L)) +				{ +					flags |= C_FLAG; +				} +			} +			else +			{ +				if (res == 0L) +					flags |= Z_FLAG; +				if (((src & 0x80000000L) != 0L) +				    && ((dst & 0x80000000L) != 0L)) +					flags |= V_FLAG; +				if ((dst & 0x80000000L) != 0L +				    || (src & 0x80000000L) != 0L) +					flags |= C_FLAG; +			} +			break; +		default: +			break; +	} + +	if (env->cc_op == CC_OP_SUB || env->cc_op == CC_OP_CMP) +		flags ^= C_FLAG; + +        env->pregs[PR_CCS] = evaluate_flags_writeback(env, flags, +                                                      env->pregs[PR_CCS]); +} + +void helper_top_evaluate_flags(CPUCRISState *env) +{ +	switch (env->cc_op) +	{ +		case CC_OP_MCP: +                        env->pregs[PR_CCS] = helper_evaluate_flags_mcp(env, +					env->pregs[PR_CCS], env->cc_src, +					env->cc_dest, env->cc_result); +			break; +		case CC_OP_MULS: +                        env->pregs[PR_CCS] = helper_evaluate_flags_muls(env, +					env->pregs[PR_CCS], env->cc_result, +					env->pregs[PR_MOF]); +			break; +		case CC_OP_MULU: +                        env->pregs[PR_CCS] = helper_evaluate_flags_mulu(env, +					env->pregs[PR_CCS], env->cc_result, +					env->pregs[PR_MOF]); +			break; +		case CC_OP_MOVE: +		case CC_OP_AND: +		case CC_OP_OR: +		case CC_OP_XOR: +		case CC_OP_ASR: +		case CC_OP_LSR: +		case CC_OP_LSL: +		switch (env->cc_size) +		{ +			case 4: +				env->pregs[PR_CCS] = +                                        helper_evaluate_flags_move_4(env, +							env->pregs[PR_CCS], +							env->cc_result); +				break; +			case 2: +				env->pregs[PR_CCS] = +                                        helper_evaluate_flags_move_2(env, +							env->pregs[PR_CCS], +							env->cc_result); +				break; +			default: +                                helper_evaluate_flags(env); +				break; +		} +		break; +		case CC_OP_FLAGS: +			/* live.  */ +			break; +		case CC_OP_SUB: +		case CC_OP_CMP: +			if (env->cc_size == 4) +				env->pregs[PR_CCS] = +                                        helper_evaluate_flags_sub_4(env, +						env->pregs[PR_CCS], +						env->cc_src, env->cc_dest, +						env->cc_result); +			else +                                helper_evaluate_flags(env); +			break; +		default: +		{ +			switch (env->cc_size) +			{ +			case 4: +				env->pregs[PR_CCS] = +                                        helper_evaluate_flags_alu_4(env, +						env->pregs[PR_CCS], +						env->cc_src, env->cc_dest, +						env->cc_result); +				break; +			default: +                                helper_evaluate_flags(env); +				break; +			} +		} +		break; +	} +} diff --git a/target-cris/opcode-cris.h b/target-cris/opcode-cris.h new file mode 100644 index 00000000..e7ebb98c --- /dev/null +++ b/target-cris/opcode-cris.h @@ -0,0 +1,355 @@ +/* cris.h -- Header file for CRIS opcode and register tables. +   Copyright (C) 2000, 2001, 2004 Free Software Foundation, Inc. +   Contributed by Axis Communications AB, Lund, Sweden. +   Originally written for GAS 1.38.1 by Mikael Asker. +   Updated, BFDized and GNUified by Hans-Peter Nilsson. + +This file is part of GAS, GDB and the GNU binutils. + +GAS, GDB, and GNU binutils is free software; you can redistribute it +and/or modify it under the terms of the GNU General Public License as +published by the Free Software Foundation; either version 2, or (at your +option) any later version. + +GAS, GDB, and GNU binutils are distributed in the hope that they will be +useful, but WITHOUT ANY WARRANTY; without even the implied warranty of +MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the +GNU General Public License for more details. + +You should have received a copy of the GNU General Public License +along with this program; if not, see <http://www.gnu.org/licenses/>.  */ + +#ifndef __CRIS_H_INCLUDED_ +#define __CRIS_H_INCLUDED_ + +#if !defined(__STDC__) && !defined(const) +#define const +#endif + + +/* Registers.  */ +#define MAX_REG (15) +#define CRIS_REG_SP (14) +#define CRIS_REG_PC (15) + +/* CPU version control of disassembly and assembly of instructions. +   May affect how the instruction is assembled, at least the size of +   immediate operands.  */ +enum cris_insn_version_usage +{ +  /* Any version.  */ +  cris_ver_version_all=0, + +  /* Indeterminate (intended for disassembly only, or obsolete).  */ +  cris_ver_warning, + +  /* Only for v0..3 (Etrax 1..4).  */ +  cris_ver_v0_3, + +  /* Only for v3 or higher (ETRAX 4 and beyond).  */ +  cris_ver_v3p, + +  /* Only for v8 (Etrax 100).  */ +  cris_ver_v8, + +  /* Only for v8 or higher (ETRAX 100, ETRAX 100 LX).  */ +  cris_ver_v8p, + +  /* Only for v0..10.  FIXME: Not sure what to do with this.  */ +  cris_ver_sim_v0_10, + +  /* Only for v0..10.  */ +  cris_ver_v0_10, + +  /* Only for v3..10.  (ETRAX 4, ETRAX 100 and ETRAX 100 LX).  */ +  cris_ver_v3_10, + +  /* Only for v8..10 (ETRAX 100 and ETRAX 100 LX).  */ +  cris_ver_v8_10, + +  /* Only for v10 (ETRAX 100 LX) and same series.  */ +  cris_ver_v10, + +  /* Only for v10 (ETRAX 100 LX) and same series.  */ +  cris_ver_v10p, + +  /* Only for v32 or higher (codename GUINNESS). +     Of course some or all these of may change to cris_ver_v32p if/when +     there's a new revision. */ +  cris_ver_v32p +}; + + +/* Special registers.  */ +struct cris_spec_reg +{ +  const char *const name; +  unsigned int number; + +  /* The size of the register.  */ +  unsigned int reg_size; + +  /* What CPU version the special register of that name is implemented +     in.  If cris_ver_warning, emit an unimplemented-warning.  */ +  enum cris_insn_version_usage applicable_version; + +  /* There might be a specific warning for using a special register +     here.  */ +  const char *const warning; +}; +extern const struct cris_spec_reg cris_spec_regs[]; + + +/* Support registers (kind of special too, but not named as such).  */ +struct cris_support_reg +{ +  const char *const name; +  unsigned int number; +}; +extern const struct cris_support_reg cris_support_regs[]; + +/* Opcode-dependent constants.  */ +#define AUTOINCR_BIT (0x04) + +/* Prefixes.  */ +#define BDAP_QUICK_OPCODE (0x0100) +#define BDAP_QUICK_Z_BITS (0x0e00) + +#define BIAP_OPCODE	  (0x0540) +#define BIAP_Z_BITS	  (0x0a80) + +#define DIP_OPCODE	  (0x0970) +#define DIP_Z_BITS	  (0xf280) + +#define BDAP_INDIR_LOW	  (0x40) +#define BDAP_INDIR_LOW_Z  (0x80) +#define BDAP_INDIR_HIGH	  (0x09) +#define BDAP_INDIR_HIGH_Z (0x02) + +#define BDAP_INDIR_OPCODE (BDAP_INDIR_HIGH * 0x0100 + BDAP_INDIR_LOW) +#define BDAP_INDIR_Z_BITS (BDAP_INDIR_HIGH_Z * 0x100 + BDAP_INDIR_LOW_Z) +#define BDAP_PC_LOW	  (BDAP_INDIR_LOW + CRIS_REG_PC) +#define BDAP_INCR_HIGH	  (BDAP_INDIR_HIGH + AUTOINCR_BIT) + +/* No prefix must have this code for its "match" bits in the +   opcode-table.  "BCC .+2" will do nicely.  */ +#define NO_CRIS_PREFIX 0 + +/* Definitions for condition codes.  */ +#define CC_CC  0x0 +#define CC_HS  0x0 +#define CC_CS  0x1 +#define CC_LO  0x1 +#define CC_NE  0x2 +#define CC_EQ  0x3 +#define CC_VC  0x4 +#define CC_VS  0x5 +#define CC_PL  0x6 +#define CC_MI  0x7 +#define CC_LS  0x8 +#define CC_HI  0x9 +#define CC_GE  0xA +#define CC_LT  0xB +#define CC_GT  0xC +#define CC_LE  0xD +#define CC_A   0xE +#define CC_EXT 0xF + +/* A table of strings "cc", "cs"... indexed with condition code +   values as above.  */ +extern const char *const cris_cc_strings[]; + +/* Bcc quick.  */ +#define BRANCH_QUICK_LOW  (0) +#define BRANCH_QUICK_HIGH (0) +#define BRANCH_QUICK_OPCODE (BRANCH_QUICK_HIGH * 0x0100 + BRANCH_QUICK_LOW) +#define BRANCH_QUICK_Z_BITS (0x0F00) + +/* BA quick.  */ +#define BA_QUICK_HIGH (BRANCH_QUICK_HIGH + CC_A * 0x10) +#define BA_QUICK_OPCODE (BA_QUICK_HIGH * 0x100 + BRANCH_QUICK_LOW) + +/* Bcc [PC+].  */ +#define BRANCH_PC_LOW	 (0xFF) +#define BRANCH_INCR_HIGH (0x0D) +#define BA_PC_INCR_OPCODE \ + ((BRANCH_INCR_HIGH + CC_A * 0x10) * 0x0100 + BRANCH_PC_LOW) + +/* Jump.  */ +/* Note that old versions generated special register 8 (in high bits) +   and not-that-old versions recognized it as a jump-instruction. +   That opcode now belongs to JUMPU.  */ +#define JUMP_INDIR_OPCODE (0x0930) +#define JUMP_INDIR_Z_BITS (0xf2c0) +#define JUMP_PC_INCR_OPCODE \ + (JUMP_INDIR_OPCODE + AUTOINCR_BIT * 0x0100 + CRIS_REG_PC) + +#define MOVE_M_TO_PREG_OPCODE 0x0a30 +#define MOVE_M_TO_PREG_ZBITS 0x01c0 + +/* BDAP.D N,PC.  */ +#define MOVE_PC_INCR_OPCODE_PREFIX \ + (((BDAP_INCR_HIGH | (CRIS_REG_PC << 4)) << 8) | BDAP_PC_LOW | (2 << 4)) +#define MOVE_PC_INCR_OPCODE_SUFFIX \ + (MOVE_M_TO_PREG_OPCODE | CRIS_REG_PC | (AUTOINCR_BIT << 8)) + +#define JUMP_PC_INCR_OPCODE_V32 (0x0DBF) + +/* BA DWORD (V32).  */ +#define BA_DWORD_OPCODE (0x0EBF) + +/* Nop.  */ +#define NOP_OPCODE (0x050F) +#define NOP_Z_BITS (0xFFFF ^ NOP_OPCODE) + +#define NOP_OPCODE_V32 (0x05B0) +#define NOP_Z_BITS_V32 (0xFFFF ^ NOP_OPCODE_V32) + +/* For the compatibility mode, let's use "MOVE R0,P0".  Doesn't affect +   registers or flags.  Unfortunately shuts off interrupts for one cycle +   for < v32, but there doesn't seem to be any alternative without that +   effect.  */ +#define NOP_OPCODE_COMMON (0x630) +#define NOP_OPCODE_ZBITS_COMMON (0xffff & ~NOP_OPCODE_COMMON) + +/* LAPC.D  */ +#define LAPC_DWORD_OPCODE (0x0D7F) +#define LAPC_DWORD_Z_BITS (0x0fff & ~LAPC_DWORD_OPCODE) + +/* Structure of an opcode table entry.  */ +enum cris_imm_oprnd_size_type +{ +  /* No size is applicable.  */ +  SIZE_NONE, + +  /* Always 32 bits.  */ +  SIZE_FIX_32, + +  /* Indicated by size of special register.  */ +  SIZE_SPEC_REG, + +  /* Indicated by size field, signed.  */ +  SIZE_FIELD_SIGNED, + +  /* Indicated by size field, unsigned.  */ +  SIZE_FIELD_UNSIGNED, + +  /* Indicated by size field, no sign implied.  */ +  SIZE_FIELD +}; + +/* For GDB.  FIXME: Is this the best way to handle opcode +   interpretation?  */ +enum cris_op_type +{ +  cris_not_implemented_op = 0, +  cris_abs_op, +  cris_addi_op, +  cris_asr_op, +  cris_asrq_op, +  cris_ax_ei_setf_op, +  cris_bdap_prefix, +  cris_biap_prefix, +  cris_break_op, +  cris_btst_nop_op, +  cris_clearf_di_op, +  cris_dip_prefix, +  cris_dstep_logshift_mstep_neg_not_op, +  cris_eight_bit_offset_branch_op, +  cris_move_mem_to_reg_movem_op, +  cris_move_reg_to_mem_movem_op, +  cris_move_to_preg_op, +  cris_muls_op, +  cris_mulu_op, +  cris_none_reg_mode_add_sub_cmp_and_or_move_op, +  cris_none_reg_mode_clear_test_op, +  cris_none_reg_mode_jump_op, +  cris_none_reg_mode_move_from_preg_op, +  cris_quick_mode_add_sub_op, +  cris_quick_mode_and_cmp_move_or_op, +  cris_quick_mode_bdap_prefix, +  cris_reg_mode_add_sub_cmp_and_or_move_op, +  cris_reg_mode_clear_op, +  cris_reg_mode_jump_op, +  cris_reg_mode_move_from_preg_op, +  cris_reg_mode_test_op, +  cris_scc_op, +  cris_sixteen_bit_offset_branch_op, +  cris_three_operand_add_sub_cmp_and_or_op, +  cris_three_operand_bound_op, +  cris_two_operand_bound_op, +  cris_xor_op +}; + +struct cris_opcode +{ +  /* The name of the insn.  */ +  const char *name; + +  /* Bits that must be 1 for a match.  */ +  unsigned int match; + +  /* Bits that must be 0 for a match.  */ +  unsigned int lose; + +  /* See the table in "opcodes/cris-opc.c".  */ +  const char *args; + +  /* Nonzero if this is a delayed branch instruction.  */ +  char delayed; + +  /* Size of immediate operands.  */ +  enum cris_imm_oprnd_size_type imm_oprnd_size; + +  /* Indicates which version this insn was first implemented in.  */ +  enum cris_insn_version_usage applicable_version; + +  /* What kind of operation this is.  */ +  enum cris_op_type op; +}; +extern const struct cris_opcode cris_opcodes[]; + + +/* These macros are for the target-specific flags in disassemble_info +   used at disassembly.  */ + +/* This insn accesses memory.  This flag is more trustworthy than +   checking insn_type for "dis_dref" which does not work for +   e.g. "JSR [foo]".  */ +#define CRIS_DIS_FLAG_MEMREF (1 << 0) + +/* The "target" field holds a register number.  */ +#define CRIS_DIS_FLAG_MEM_TARGET_IS_REG (1 << 1) + +/* The "target2" field holds a register number; add it to "target".  */ +#define CRIS_DIS_FLAG_MEM_TARGET2_IS_REG (1 << 2) + +/* Yet another add-on: the register in "target2" must be multiplied +   by 2 before adding to "target".  */ +#define CRIS_DIS_FLAG_MEM_TARGET2_MULT2 (1 << 3) + +/* Yet another add-on: the register in "target2" must be multiplied +   by 4 (mutually exclusive with .._MULT2).  */ +#define CRIS_DIS_FLAG_MEM_TARGET2_MULT4 (1 << 4) + +/* The register in "target2" is an indirect memory reference (of the +   register there), add to "target".  Assumed size is dword (mutually +   exclusive with .._MULT[24]).  */ +#define CRIS_DIS_FLAG_MEM_TARGET2_MEM (1 << 5) + +/* Add-on to CRIS_DIS_FLAG_MEM_TARGET2_MEM; the memory access is "byte"; +   sign-extended before adding to "target".  */ +#define CRIS_DIS_FLAG_MEM_TARGET2_MEM_BYTE (1 << 6) + +/* Add-on to CRIS_DIS_FLAG_MEM_TARGET2_MEM; the memory access is "word"; +   sign-extended before adding to "target".  */ +#define CRIS_DIS_FLAG_MEM_TARGET2_MEM_WORD (1 << 7) + +#endif /* __CRIS_H_INCLUDED_ */ + +/* + * Local variables: + * eval: (c-set-style "gnu") + * indent-tabs-mode: t + * End: + */ diff --git a/target-cris/translate.c b/target-cris/translate.c new file mode 100644 index 00000000..3e59601e --- /dev/null +++ b/target-cris/translate.c @@ -0,0 +1,3462 @@ +/* + *  CRIS emulation for qemu: main translation routines. + * + *  Copyright (c) 2008 AXIS Communications AB + *  Written by Edgar E. Iglesias. + * + * This library is free software; you can redistribute it and/or + * modify it under the terms of the GNU Lesser General Public + * License as published by the Free Software Foundation; either + * version 2 of the License, or (at your option) any later version. + * + * This library is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this library; if not, see <http://www.gnu.org/licenses/>. + */ + +/* + * FIXME: + * The condition code translation is in need of attention. + */ + +#include "cpu.h" +#include "disas/disas.h" +#include "tcg-op.h" +#include "exec/helper-proto.h" +#include "mmu.h" +#include "exec/cpu_ldst.h" +#include "crisv32-decode.h" + +#include "exec/helper-gen.h" + +#include "trace-tcg.h" + + +#define DISAS_CRIS 0 +#if DISAS_CRIS +#  define LOG_DIS(...) qemu_log_mask(CPU_LOG_TB_IN_ASM, ## __VA_ARGS__) +#else +#  define LOG_DIS(...) do { } while (0) +#endif + +#define D(x) +#define BUG() (gen_BUG(dc, __FILE__, __LINE__)) +#define BUG_ON(x) ({if (x) BUG();}) + +#define DISAS_SWI 5 + +/* Used by the decoder.  */ +#define EXTRACT_FIELD(src, start, end) \ +            (((src) >> start) & ((1 << (end - start + 1)) - 1)) + +#define CC_MASK_NZ 0xc +#define CC_MASK_NZV 0xe +#define CC_MASK_NZVC 0xf +#define CC_MASK_RNZV 0x10e + +static TCGv_ptr cpu_env; +static TCGv cpu_R[16]; +static TCGv cpu_PR[16]; +static TCGv cc_x; +static TCGv cc_src; +static TCGv cc_dest; +static TCGv cc_result; +static TCGv cc_op; +static TCGv cc_size; +static TCGv cc_mask; + +static TCGv env_btaken; +static TCGv env_btarget; +static TCGv env_pc; + +#include "exec/gen-icount.h" + +/* This is the state at translation time.  */ +typedef struct DisasContext { +    CRISCPU *cpu; +    target_ulong pc, ppc; + +    /* Decoder.  */ +        unsigned int (*decoder)(CPUCRISState *env, struct DisasContext *dc); +    uint32_t ir; +    uint32_t opcode; +    unsigned int op1; +    unsigned int op2; +    unsigned int zsize, zzsize; +    unsigned int mode; +    unsigned int postinc; + +    unsigned int size; +    unsigned int src; +    unsigned int dst; +    unsigned int cond; + +    int update_cc; +    int cc_op; +    int cc_size; +    uint32_t cc_mask; + +    int cc_size_uptodate; /* -1 invalid or last written value.  */ + +    int cc_x_uptodate;  /* 1 - ccs, 2 - known | X_FLAG. 0 not uptodate.  */ +    int flags_uptodate; /* Wether or not $ccs is uptodate.  */ +    int flagx_known; /* Wether or not flags_x has the x flag known at +                translation time.  */ +    int flags_x; + +    int clear_x; /* Clear x after this insn?  */ +    int clear_prefix; /* Clear prefix after this insn?  */ +    int clear_locked_irq; /* Clear the irq lockout.  */ +    int cpustate_changed; +    unsigned int tb_flags; /* tb dependent flags.  */ +    int is_jmp; + +#define JMP_NOJMP     0 +#define JMP_DIRECT    1 +#define JMP_DIRECT_CC 2 +#define JMP_INDIRECT  3 +    int jmp; /* 0=nojmp, 1=direct, 2=indirect.  */ +    uint32_t jmp_pc; + +    int delayed_branch; + +    struct TranslationBlock *tb; +    int singlestep_enabled; +} DisasContext; + +static void gen_BUG(DisasContext *dc, const char *file, int line) +{ +    printf("BUG: pc=%x %s %d\n", dc->pc, file, line); +    qemu_log("BUG: pc=%x %s %d\n", dc->pc, file, line); +    cpu_abort(CPU(dc->cpu), "%s:%d\n", file, line); +} + +static const char *regnames[] = +{ +    "$r0", "$r1", "$r2", "$r3", +    "$r4", "$r5", "$r6", "$r7", +    "$r8", "$r9", "$r10", "$r11", +    "$r12", "$r13", "$sp", "$acr", +}; +static const char *pregnames[] = +{ +    "$bz", "$vr", "$pid", "$srs", +    "$wz", "$exs", "$eda", "$mof", +    "$dz", "$ebp", "$erp", "$srp", +    "$nrp", "$ccs", "$usp", "$spc", +}; + +/* We need this table to handle preg-moves with implicit width.  */ +static int preg_sizes[] = { +    1, /* bz.  */ +    1, /* vr.  */ +    4, /* pid.  */ +    1, /* srs.  */ +    2, /* wz.  */ +    4, 4, 4, +    4, 4, 4, 4, +    4, 4, 4, 4, +}; + +#define t_gen_mov_TN_env(tn, member) \ +    tcg_gen_ld_tl(tn, cpu_env, offsetof(CPUCRISState, member)) +#define t_gen_mov_env_TN(member, tn) \ +    tcg_gen_st_tl(tn, cpu_env, offsetof(CPUCRISState, member)) + +static inline void t_gen_mov_TN_preg(TCGv tn, int r) +{ +    assert(r >= 0 && r <= 15); +    if (r == PR_BZ || r == PR_WZ || r == PR_DZ) { +        tcg_gen_mov_tl(tn, tcg_const_tl(0)); +    } else if (r == PR_VR) { +        tcg_gen_mov_tl(tn, tcg_const_tl(32)); +    } else { +        tcg_gen_mov_tl(tn, cpu_PR[r]); +    } +} +static inline void t_gen_mov_preg_TN(DisasContext *dc, int r, TCGv tn) +{ +    assert(r >= 0 && r <= 15); +    if (r == PR_BZ || r == PR_WZ || r == PR_DZ) { +        return; +    } else if (r == PR_SRS) { +        tcg_gen_andi_tl(cpu_PR[r], tn, 3); +    } else { +        if (r == PR_PID) { +            gen_helper_tlb_flush_pid(cpu_env, tn); +        } +        if (dc->tb_flags & S_FLAG && r == PR_SPC) { +            gen_helper_spc_write(cpu_env, tn); +        } else if (r == PR_CCS) { +            dc->cpustate_changed = 1; +        } +        tcg_gen_mov_tl(cpu_PR[r], tn); +    } +} + +/* Sign extend at translation time.  */ +static int sign_extend(unsigned int val, unsigned int width) +{ +    int sval; + +    /* LSL.  */ +    val <<= 31 - width; +    sval = val; +    /* ASR.  */ +    sval >>= 31 - width; +    return sval; +} + +static int cris_fetch(CPUCRISState *env, DisasContext *dc, uint32_t addr, +              unsigned int size, unsigned int sign) +{ +    int r; + +    switch (size) { +    case 4: +    { +        r = cpu_ldl_code(env, addr); +        break; +    } +    case 2: +    { +        if (sign) { +            r = cpu_ldsw_code(env, addr); +        } else { +            r = cpu_lduw_code(env, addr); +        } +        break; +    } +    case 1: +    { +        if (sign) { +            r = cpu_ldsb_code(env, addr); +        } else { +            r = cpu_ldub_code(env, addr); +        } +        break; +    } +    default: +        cpu_abort(CPU(dc->cpu), "Invalid fetch size %d\n", size); +        break; +    } +    return r; +} + +static void cris_lock_irq(DisasContext *dc) +{ +    dc->clear_locked_irq = 0; +    t_gen_mov_env_TN(locked_irq, tcg_const_tl(1)); +} + +static inline void t_gen_raise_exception(uint32_t index) +{ +        TCGv_i32 tmp = tcg_const_i32(index); +        gen_helper_raise_exception(cpu_env, tmp); +        tcg_temp_free_i32(tmp); +} + +static void t_gen_lsl(TCGv d, TCGv a, TCGv b) +{ +    TCGv t0, t_31; + +    t0 = tcg_temp_new(); +    t_31 = tcg_const_tl(31); +    tcg_gen_shl_tl(d, a, b); + +    tcg_gen_sub_tl(t0, t_31, b); +    tcg_gen_sar_tl(t0, t0, t_31); +    tcg_gen_and_tl(t0, t0, d); +    tcg_gen_xor_tl(d, d, t0); +    tcg_temp_free(t0); +    tcg_temp_free(t_31); +} + +static void t_gen_lsr(TCGv d, TCGv a, TCGv b) +{ +    TCGv t0, t_31; + +    t0 = tcg_temp_new(); +    t_31 = tcg_temp_new(); +    tcg_gen_shr_tl(d, a, b); + +    tcg_gen_movi_tl(t_31, 31); +    tcg_gen_sub_tl(t0, t_31, b); +    tcg_gen_sar_tl(t0, t0, t_31); +    tcg_gen_and_tl(t0, t0, d); +    tcg_gen_xor_tl(d, d, t0); +    tcg_temp_free(t0); +    tcg_temp_free(t_31); +} + +static void t_gen_asr(TCGv d, TCGv a, TCGv b) +{ +    TCGv t0, t_31; + +    t0 = tcg_temp_new(); +    t_31 = tcg_temp_new(); +    tcg_gen_sar_tl(d, a, b); + +    tcg_gen_movi_tl(t_31, 31); +    tcg_gen_sub_tl(t0, t_31, b); +    tcg_gen_sar_tl(t0, t0, t_31); +    tcg_gen_or_tl(d, d, t0); +    tcg_temp_free(t0); +    tcg_temp_free(t_31); +} + +static void t_gen_cris_dstep(TCGv d, TCGv a, TCGv b) +{ +    TCGLabel *l1 = gen_new_label(); + +    /* +     * d <<= 1 +     * if (d >= s) +     *    d -= s; +     */ +    tcg_gen_shli_tl(d, a, 1); +    tcg_gen_brcond_tl(TCG_COND_LTU, d, b, l1); +    tcg_gen_sub_tl(d, d, b); +    gen_set_label(l1); +} + +static void t_gen_cris_mstep(TCGv d, TCGv a, TCGv b, TCGv ccs) +{ +    TCGv t; + +    /* +     * d <<= 1 +     * if (n) +     *    d += s; +     */ +    t = tcg_temp_new(); +    tcg_gen_shli_tl(d, a, 1); +    tcg_gen_shli_tl(t, ccs, 31 - 3); +    tcg_gen_sari_tl(t, t, 31); +    tcg_gen_and_tl(t, t, b); +    tcg_gen_add_tl(d, d, t); +    tcg_temp_free(t); +} + +/* Extended arithmetics on CRIS.  */ +static inline void t_gen_add_flag(TCGv d, int flag) +{ +    TCGv c; + +    c = tcg_temp_new(); +    t_gen_mov_TN_preg(c, PR_CCS); +    /* Propagate carry into d.  */ +    tcg_gen_andi_tl(c, c, 1 << flag); +    if (flag) { +        tcg_gen_shri_tl(c, c, flag); +    } +    tcg_gen_add_tl(d, d, c); +    tcg_temp_free(c); +} + +static inline void t_gen_addx_carry(DisasContext *dc, TCGv d) +{ +    if (dc->flagx_known) { +        if (dc->flags_x) { +            TCGv c; +             +            c = tcg_temp_new(); +            t_gen_mov_TN_preg(c, PR_CCS); +            /* C flag is already at bit 0.  */ +            tcg_gen_andi_tl(c, c, C_FLAG); +            tcg_gen_add_tl(d, d, c); +            tcg_temp_free(c); +        } +    } else { +        TCGv x, c; + +        x = tcg_temp_new(); +        c = tcg_temp_new(); +        t_gen_mov_TN_preg(x, PR_CCS); +        tcg_gen_mov_tl(c, x); + +        /* Propagate carry into d if X is set. Branch free.  */ +        tcg_gen_andi_tl(c, c, C_FLAG); +        tcg_gen_andi_tl(x, x, X_FLAG); +        tcg_gen_shri_tl(x, x, 4); + +        tcg_gen_and_tl(x, x, c); +        tcg_gen_add_tl(d, d, x); +        tcg_temp_free(x); +        tcg_temp_free(c); +    } +} + +static inline void t_gen_subx_carry(DisasContext *dc, TCGv d) +{ +    if (dc->flagx_known) { +        if (dc->flags_x) { +            TCGv c; +             +            c = tcg_temp_new(); +            t_gen_mov_TN_preg(c, PR_CCS); +            /* C flag is already at bit 0.  */ +            tcg_gen_andi_tl(c, c, C_FLAG); +            tcg_gen_sub_tl(d, d, c); +            tcg_temp_free(c); +        } +    } else { +        TCGv x, c; + +        x = tcg_temp_new(); +        c = tcg_temp_new(); +        t_gen_mov_TN_preg(x, PR_CCS); +        tcg_gen_mov_tl(c, x); + +        /* Propagate carry into d if X is set. Branch free.  */ +        tcg_gen_andi_tl(c, c, C_FLAG); +        tcg_gen_andi_tl(x, x, X_FLAG); +        tcg_gen_shri_tl(x, x, 4); + +        tcg_gen_and_tl(x, x, c); +        tcg_gen_sub_tl(d, d, x); +        tcg_temp_free(x); +        tcg_temp_free(c); +    } +} + +/* Swap the two bytes within each half word of the s operand. +   T0 = ((T0 << 8) & 0xff00ff00) | ((T0 >> 8) & 0x00ff00ff)  */ +static inline void t_gen_swapb(TCGv d, TCGv s) +{ +    TCGv t, org_s; + +    t = tcg_temp_new(); +    org_s = tcg_temp_new(); + +    /* d and s may refer to the same object.  */ +    tcg_gen_mov_tl(org_s, s); +    tcg_gen_shli_tl(t, org_s, 8); +    tcg_gen_andi_tl(d, t, 0xff00ff00); +    tcg_gen_shri_tl(t, org_s, 8); +    tcg_gen_andi_tl(t, t, 0x00ff00ff); +    tcg_gen_or_tl(d, d, t); +    tcg_temp_free(t); +    tcg_temp_free(org_s); +} + +/* Swap the halfwords of the s operand.  */ +static inline void t_gen_swapw(TCGv d, TCGv s) +{ +    TCGv t; +    /* d and s refer the same object.  */ +    t = tcg_temp_new(); +    tcg_gen_mov_tl(t, s); +    tcg_gen_shli_tl(d, t, 16); +    tcg_gen_shri_tl(t, t, 16); +    tcg_gen_or_tl(d, d, t); +    tcg_temp_free(t); +} + +/* Reverse the within each byte. +   T0 = (((T0 << 7) & 0x80808080) | +   ((T0 << 5) & 0x40404040) | +   ((T0 << 3) & 0x20202020) | +   ((T0 << 1) & 0x10101010) | +   ((T0 >> 1) & 0x08080808) | +   ((T0 >> 3) & 0x04040404) | +   ((T0 >> 5) & 0x02020202) | +   ((T0 >> 7) & 0x01010101)); + */ +static inline void t_gen_swapr(TCGv d, TCGv s) +{ +    struct { +        int shift; /* LSL when positive, LSR when negative.  */ +        uint32_t mask; +    } bitrev[] = { +        {7, 0x80808080}, +        {5, 0x40404040}, +        {3, 0x20202020}, +        {1, 0x10101010}, +        {-1, 0x08080808}, +        {-3, 0x04040404}, +        {-5, 0x02020202}, +        {-7, 0x01010101} +    }; +    int i; +    TCGv t, org_s; + +    /* d and s refer the same object.  */ +    t = tcg_temp_new(); +    org_s = tcg_temp_new(); +    tcg_gen_mov_tl(org_s, s); + +    tcg_gen_shli_tl(t, org_s,  bitrev[0].shift); +    tcg_gen_andi_tl(d, t,  bitrev[0].mask); +    for (i = 1; i < ARRAY_SIZE(bitrev); i++) { +        if (bitrev[i].shift >= 0) { +            tcg_gen_shli_tl(t, org_s,  bitrev[i].shift); +        } else { +            tcg_gen_shri_tl(t, org_s,  -bitrev[i].shift); +        } +        tcg_gen_andi_tl(t, t,  bitrev[i].mask); +        tcg_gen_or_tl(d, d, t); +    } +    tcg_temp_free(t); +    tcg_temp_free(org_s); +} + +static void t_gen_cc_jmp(TCGv pc_true, TCGv pc_false) +{ +    TCGLabel *l1 = gen_new_label(); + +    /* Conditional jmp.  */ +    tcg_gen_mov_tl(env_pc, pc_false); +    tcg_gen_brcondi_tl(TCG_COND_EQ, env_btaken, 0, l1); +    tcg_gen_mov_tl(env_pc, pc_true); +    gen_set_label(l1); +} + +static void gen_goto_tb(DisasContext *dc, int n, target_ulong dest) +{ +    TranslationBlock *tb; +    tb = dc->tb; +    if ((tb->pc & TARGET_PAGE_MASK) == (dest & TARGET_PAGE_MASK)) { +        tcg_gen_goto_tb(n); +        tcg_gen_movi_tl(env_pc, dest); +                tcg_gen_exit_tb((uintptr_t)tb + n); +    } else { +        tcg_gen_movi_tl(env_pc, dest); +        tcg_gen_exit_tb(0); +    } +} + +static inline void cris_clear_x_flag(DisasContext *dc) +{ +    if (dc->flagx_known && dc->flags_x) { +        dc->flags_uptodate = 0; +    } + +    dc->flagx_known = 1; +    dc->flags_x = 0; +} + +static void cris_flush_cc_state(DisasContext *dc) +{ +    if (dc->cc_size_uptodate != dc->cc_size) { +        tcg_gen_movi_tl(cc_size, dc->cc_size); +        dc->cc_size_uptodate = dc->cc_size; +    } +    tcg_gen_movi_tl(cc_op, dc->cc_op); +    tcg_gen_movi_tl(cc_mask, dc->cc_mask); +} + +static void cris_evaluate_flags(DisasContext *dc) +{ +    if (dc->flags_uptodate) { +        return; +    } + +    cris_flush_cc_state(dc); + +    switch (dc->cc_op) { +    case CC_OP_MCP: +        gen_helper_evaluate_flags_mcp(cpu_PR[PR_CCS], cpu_env, +                cpu_PR[PR_CCS], cc_src, +                cc_dest, cc_result); +        break; +    case CC_OP_MULS: +        gen_helper_evaluate_flags_muls(cpu_PR[PR_CCS], cpu_env, +                cpu_PR[PR_CCS], cc_result, +                cpu_PR[PR_MOF]); +        break; +    case CC_OP_MULU: +        gen_helper_evaluate_flags_mulu(cpu_PR[PR_CCS], cpu_env, +                cpu_PR[PR_CCS], cc_result, +                cpu_PR[PR_MOF]); +        break; +    case CC_OP_MOVE: +    case CC_OP_AND: +    case CC_OP_OR: +    case CC_OP_XOR: +    case CC_OP_ASR: +    case CC_OP_LSR: +    case CC_OP_LSL: +        switch (dc->cc_size) { +        case 4: +            gen_helper_evaluate_flags_move_4(cpu_PR[PR_CCS], +                    cpu_env, cpu_PR[PR_CCS], cc_result); +            break; +        case 2: +            gen_helper_evaluate_flags_move_2(cpu_PR[PR_CCS], +                    cpu_env, cpu_PR[PR_CCS], cc_result); +            break; +        default: +            gen_helper_evaluate_flags(cpu_env); +            break; +        } +        break; +    case CC_OP_FLAGS: +        /* live.  */ +        break; +    case CC_OP_SUB: +    case CC_OP_CMP: +        if (dc->cc_size == 4) { +            gen_helper_evaluate_flags_sub_4(cpu_PR[PR_CCS], cpu_env, +                    cpu_PR[PR_CCS], cc_src, cc_dest, cc_result); +        } else { +            gen_helper_evaluate_flags(cpu_env); +        } + +        break; +    default: +        switch (dc->cc_size) { +        case 4: +            gen_helper_evaluate_flags_alu_4(cpu_PR[PR_CCS], cpu_env, +                    cpu_PR[PR_CCS], cc_src, cc_dest, cc_result); +            break; +        default: +            gen_helper_evaluate_flags(cpu_env); +            break; +        } +        break; +    } + +    if (dc->flagx_known) { +        if (dc->flags_x) { +            tcg_gen_ori_tl(cpu_PR[PR_CCS], cpu_PR[PR_CCS], X_FLAG); +        } else if (dc->cc_op == CC_OP_FLAGS) { +            tcg_gen_andi_tl(cpu_PR[PR_CCS], cpu_PR[PR_CCS], ~X_FLAG); +        } +    } +    dc->flags_uptodate = 1; +} + +static void cris_cc_mask(DisasContext *dc, unsigned int mask) +{ +    uint32_t ovl; + +    if (!mask) { +        dc->update_cc = 0; +        return; +    } + +    /* Check if we need to evaluate the condition codes due to +       CC overlaying.  */ +    ovl = (dc->cc_mask ^ mask) & ~mask; +    if (ovl) { +        /* TODO: optimize this case. It trigs all the time.  */ +        cris_evaluate_flags(dc); +    } +    dc->cc_mask = mask; +    dc->update_cc = 1; +} + +static void cris_update_cc_op(DisasContext *dc, int op, int size) +{ +    dc->cc_op = op; +    dc->cc_size = size; +    dc->flags_uptodate = 0; +} + +static inline void cris_update_cc_x(DisasContext *dc) +{ +    /* Save the x flag state at the time of the cc snapshot.  */ +    if (dc->flagx_known) { +        if (dc->cc_x_uptodate == (2 | dc->flags_x)) { +            return; +        } +        tcg_gen_movi_tl(cc_x, dc->flags_x); +        dc->cc_x_uptodate = 2 | dc->flags_x; +    } else { +        tcg_gen_andi_tl(cc_x, cpu_PR[PR_CCS], X_FLAG); +        dc->cc_x_uptodate = 1; +    } +} + +/* Update cc prior to executing ALU op. Needs source operands untouched.  */ +static void cris_pre_alu_update_cc(DisasContext *dc, int op,  +                   TCGv dst, TCGv src, int size) +{ +    if (dc->update_cc) { +        cris_update_cc_op(dc, op, size); +        tcg_gen_mov_tl(cc_src, src); + +        if (op != CC_OP_MOVE +            && op != CC_OP_AND +            && op != CC_OP_OR +            && op != CC_OP_XOR +            && op != CC_OP_ASR +            && op != CC_OP_LSR +            && op != CC_OP_LSL) { +            tcg_gen_mov_tl(cc_dest, dst); +        } + +        cris_update_cc_x(dc); +    } +} + +/* Update cc after executing ALU op. needs the result.  */ +static inline void cris_update_result(DisasContext *dc, TCGv res) +{ +    if (dc->update_cc) { +        tcg_gen_mov_tl(cc_result, res); +    } +} + +/* Returns one if the write back stage should execute.  */ +static void cris_alu_op_exec(DisasContext *dc, int op,  +                   TCGv dst, TCGv a, TCGv b, int size) +{ +    /* Emit the ALU insns.  */ +    switch (op) { +    case CC_OP_ADD: +        tcg_gen_add_tl(dst, a, b); +        /* Extended arithmetics.  */ +        t_gen_addx_carry(dc, dst); +        break; +    case CC_OP_ADDC: +        tcg_gen_add_tl(dst, a, b); +        t_gen_add_flag(dst, 0); /* C_FLAG.  */ +        break; +    case CC_OP_MCP: +        tcg_gen_add_tl(dst, a, b); +        t_gen_add_flag(dst, 8); /* R_FLAG.  */ +        break; +    case CC_OP_SUB: +        tcg_gen_sub_tl(dst, a, b); +        /* Extended arithmetics.  */ +        t_gen_subx_carry(dc, dst); +        break; +    case CC_OP_MOVE: +        tcg_gen_mov_tl(dst, b); +        break; +    case CC_OP_OR: +        tcg_gen_or_tl(dst, a, b); +        break; +    case CC_OP_AND: +        tcg_gen_and_tl(dst, a, b); +        break; +    case CC_OP_XOR: +        tcg_gen_xor_tl(dst, a, b); +        break; +    case CC_OP_LSL: +        t_gen_lsl(dst, a, b); +        break; +    case CC_OP_LSR: +        t_gen_lsr(dst, a, b); +        break; +    case CC_OP_ASR: +        t_gen_asr(dst, a, b); +        break; +    case CC_OP_NEG: +        tcg_gen_neg_tl(dst, b); +        /* Extended arithmetics.  */ +        t_gen_subx_carry(dc, dst); +        break; +    case CC_OP_LZ: +        gen_helper_lz(dst, b); +        break; +    case CC_OP_MULS: +        tcg_gen_muls2_tl(dst, cpu_PR[PR_MOF], a, b); +        break; +    case CC_OP_MULU: +        tcg_gen_mulu2_tl(dst, cpu_PR[PR_MOF], a, b); +        break; +    case CC_OP_DSTEP: +        t_gen_cris_dstep(dst, a, b); +        break; +    case CC_OP_MSTEP: +        t_gen_cris_mstep(dst, a, b, cpu_PR[PR_CCS]); +        break; +    case CC_OP_BOUND: +    { +        TCGLabel *l1 = gen_new_label(); +        tcg_gen_mov_tl(dst, a); +        tcg_gen_brcond_tl(TCG_COND_LEU, a, b, l1); +        tcg_gen_mov_tl(dst, b); +        gen_set_label(l1); +    } +        break; +    case CC_OP_CMP: +        tcg_gen_sub_tl(dst, a, b); +        /* Extended arithmetics.  */ +        t_gen_subx_carry(dc, dst); +        break; +    default: +        qemu_log("illegal ALU op.\n"); +        BUG(); +        break; +    } + +    if (size == 1) { +        tcg_gen_andi_tl(dst, dst, 0xff); +    } else if (size == 2) { +        tcg_gen_andi_tl(dst, dst, 0xffff); +    } +} + +static void cris_alu(DisasContext *dc, int op, +                   TCGv d, TCGv op_a, TCGv op_b, int size) +{ +    TCGv tmp; +    int writeback; + +    writeback = 1; + +    if (op == CC_OP_CMP) { +        tmp = tcg_temp_new(); +        writeback = 0; +    } else if (size == 4) { +        tmp = d; +        writeback = 0; +    } else { +        tmp = tcg_temp_new(); +    } + + +    cris_pre_alu_update_cc(dc, op, op_a, op_b, size); +    cris_alu_op_exec(dc, op, tmp, op_a, op_b, size); +    cris_update_result(dc, tmp); + +    /* Writeback.  */ +    if (writeback) { +        if (size == 1) { +            tcg_gen_andi_tl(d, d, ~0xff); +        } else { +            tcg_gen_andi_tl(d, d, ~0xffff); +        } +        tcg_gen_or_tl(d, d, tmp); +    } +    if (!TCGV_EQUAL(tmp, d)) { +        tcg_temp_free(tmp); +    } +} + +static int arith_cc(DisasContext *dc) +{ +    if (dc->update_cc) { +        switch (dc->cc_op) { +        case CC_OP_ADDC: return 1; +        case CC_OP_ADD: return 1; +        case CC_OP_SUB: return 1; +        case CC_OP_DSTEP: return 1; +        case CC_OP_LSL: return 1; +        case CC_OP_LSR: return 1; +        case CC_OP_ASR: return 1; +        case CC_OP_CMP: return 1; +        case CC_OP_NEG: return 1; +        case CC_OP_OR: return 1; +        case CC_OP_AND: return 1; +        case CC_OP_XOR: return 1; +        case CC_OP_MULU: return 1; +        case CC_OP_MULS: return 1; +        default: +            return 0; +        } +    } +    return 0; +} + +static void gen_tst_cc (DisasContext *dc, TCGv cc, int cond) +{ +    int arith_opt, move_opt; + +    /* TODO: optimize more condition codes.  */ + +    /* +     * If the flags are live, we've gotta look into the bits of CCS. +     * Otherwise, if we just did an arithmetic operation we try to +     * evaluate the condition code faster. +     * +     * When this function is done, T0 should be non-zero if the condition +     * code is true. +     */ +    arith_opt = arith_cc(dc) && !dc->flags_uptodate; +    move_opt = (dc->cc_op == CC_OP_MOVE); +    switch (cond) { +    case CC_EQ: +        if ((arith_opt || move_opt) +                && dc->cc_x_uptodate != (2 | X_FLAG)) { +            tcg_gen_setcond_tl(TCG_COND_EQ, cc, +                    cc_result, tcg_const_tl(0)); +        } else { +            cris_evaluate_flags(dc); +            tcg_gen_andi_tl(cc, +                    cpu_PR[PR_CCS], Z_FLAG); +        } +        break; +    case CC_NE: +        if ((arith_opt || move_opt) +                && dc->cc_x_uptodate != (2 | X_FLAG)) { +            tcg_gen_mov_tl(cc, cc_result); +        } else { +            cris_evaluate_flags(dc); +            tcg_gen_xori_tl(cc, cpu_PR[PR_CCS], +                    Z_FLAG); +            tcg_gen_andi_tl(cc, cc, Z_FLAG); +        } +        break; +    case CC_CS: +        cris_evaluate_flags(dc); +        tcg_gen_andi_tl(cc, cpu_PR[PR_CCS], C_FLAG); +        break; +    case CC_CC: +        cris_evaluate_flags(dc); +        tcg_gen_xori_tl(cc, cpu_PR[PR_CCS], C_FLAG); +        tcg_gen_andi_tl(cc, cc, C_FLAG); +        break; +    case CC_VS: +        cris_evaluate_flags(dc); +        tcg_gen_andi_tl(cc, cpu_PR[PR_CCS], V_FLAG); +        break; +    case CC_VC: +        cris_evaluate_flags(dc); +        tcg_gen_xori_tl(cc, cpu_PR[PR_CCS], +                V_FLAG); +        tcg_gen_andi_tl(cc, cc, V_FLAG); +        break; +    case CC_PL: +        if (arith_opt || move_opt) { +            int bits = 31; + +            if (dc->cc_size == 1) { +                bits = 7; +            } else if (dc->cc_size == 2) { +                bits = 15; +            } + +            tcg_gen_shri_tl(cc, cc_result, bits); +            tcg_gen_xori_tl(cc, cc, 1); +        } else { +            cris_evaluate_flags(dc); +            tcg_gen_xori_tl(cc, cpu_PR[PR_CCS], +                    N_FLAG); +            tcg_gen_andi_tl(cc, cc, N_FLAG); +        } +        break; +    case CC_MI: +        if (arith_opt || move_opt) { +            int bits = 31; + +            if (dc->cc_size == 1) { +                bits = 7; +            } else if (dc->cc_size == 2) { +                bits = 15; +            } + +            tcg_gen_shri_tl(cc, cc_result, bits); +            tcg_gen_andi_tl(cc, cc, 1); +        } else { +            cris_evaluate_flags(dc); +            tcg_gen_andi_tl(cc, cpu_PR[PR_CCS], +                    N_FLAG); +        } +        break; +    case CC_LS: +        cris_evaluate_flags(dc); +        tcg_gen_andi_tl(cc, cpu_PR[PR_CCS], +                C_FLAG | Z_FLAG); +        break; +    case CC_HI: +        cris_evaluate_flags(dc); +        { +            TCGv tmp; + +            tmp = tcg_temp_new(); +            tcg_gen_xori_tl(tmp, cpu_PR[PR_CCS], +                    C_FLAG | Z_FLAG); +            /* Overlay the C flag on top of the Z.  */ +            tcg_gen_shli_tl(cc, tmp, 2); +            tcg_gen_and_tl(cc, tmp, cc); +            tcg_gen_andi_tl(cc, cc, Z_FLAG); + +            tcg_temp_free(tmp); +        } +        break; +    case CC_GE: +        cris_evaluate_flags(dc); +        /* Overlay the V flag on top of the N.  */ +        tcg_gen_shli_tl(cc, cpu_PR[PR_CCS], 2); +        tcg_gen_xor_tl(cc, +                cpu_PR[PR_CCS], cc); +        tcg_gen_andi_tl(cc, cc, N_FLAG); +        tcg_gen_xori_tl(cc, cc, N_FLAG); +        break; +    case CC_LT: +        cris_evaluate_flags(dc); +        /* Overlay the V flag on top of the N.  */ +        tcg_gen_shli_tl(cc, cpu_PR[PR_CCS], 2); +        tcg_gen_xor_tl(cc, +                cpu_PR[PR_CCS], cc); +        tcg_gen_andi_tl(cc, cc, N_FLAG); +        break; +    case CC_GT: +        cris_evaluate_flags(dc); +        { +            TCGv n, z; + +            n = tcg_temp_new(); +            z = tcg_temp_new(); + +            /* To avoid a shift we overlay everything on +                   the V flag.  */ +            tcg_gen_shri_tl(n, cpu_PR[PR_CCS], 2); +            tcg_gen_shri_tl(z, cpu_PR[PR_CCS], 1); +            /* invert Z.  */ +            tcg_gen_xori_tl(z, z, 2); + +            tcg_gen_xor_tl(n, n, cpu_PR[PR_CCS]); +            tcg_gen_xori_tl(n, n, 2); +            tcg_gen_and_tl(cc, z, n); +            tcg_gen_andi_tl(cc, cc, 2); + +            tcg_temp_free(n); +            tcg_temp_free(z); +        } +        break; +    case CC_LE: +        cris_evaluate_flags(dc); +        { +            TCGv n, z; + +            n = tcg_temp_new(); +            z = tcg_temp_new(); + +            /* To avoid a shift we overlay everything on +                   the V flag.  */ +            tcg_gen_shri_tl(n, cpu_PR[PR_CCS], 2); +            tcg_gen_shri_tl(z, cpu_PR[PR_CCS], 1); + +            tcg_gen_xor_tl(n, n, cpu_PR[PR_CCS]); +            tcg_gen_or_tl(cc, z, n); +            tcg_gen_andi_tl(cc, cc, 2); + +            tcg_temp_free(n); +            tcg_temp_free(z); +        } +        break; +    case CC_P: +        cris_evaluate_flags(dc); +        tcg_gen_andi_tl(cc, cpu_PR[PR_CCS], P_FLAG); +        break; +    case CC_A: +        tcg_gen_movi_tl(cc, 1); +        break; +    default: +        BUG(); +        break; +    }; +} + +static void cris_store_direct_jmp(DisasContext *dc) +{ +    /* Store the direct jmp state into the cpu-state.  */ +    if (dc->jmp == JMP_DIRECT || dc->jmp == JMP_DIRECT_CC) { +        if (dc->jmp == JMP_DIRECT) { +            tcg_gen_movi_tl(env_btaken, 1); +        } +        tcg_gen_movi_tl(env_btarget, dc->jmp_pc); +        dc->jmp = JMP_INDIRECT; +    } +} + +static void cris_prepare_cc_branch (DisasContext *dc,  +                    int offset, int cond) +{ +    /* This helps us re-schedule the micro-code to insns in delay-slots +       before the actual jump.  */ +    dc->delayed_branch = 2; +    dc->jmp = JMP_DIRECT_CC; +    dc->jmp_pc = dc->pc + offset; + +    gen_tst_cc(dc, env_btaken, cond); +    tcg_gen_movi_tl(env_btarget, dc->jmp_pc); +} + + +/* jumps, when the dest is in a live reg for example. Direct should be set +   when the dest addr is constant to allow tb chaining.  */ +static inline void cris_prepare_jmp (DisasContext *dc, unsigned int type) +{ +    /* This helps us re-schedule the micro-code to insns in delay-slots +       before the actual jump.  */ +    dc->delayed_branch = 2; +    dc->jmp = type; +    if (type == JMP_INDIRECT) { +        tcg_gen_movi_tl(env_btaken, 1); +    } +} + +static void gen_load64(DisasContext *dc, TCGv_i64 dst, TCGv addr) +{ +    int mem_index = cpu_mmu_index(&dc->cpu->env); + +    /* If we get a fault on a delayslot we must keep the jmp state in +       the cpu-state to be able to re-execute the jmp.  */ +    if (dc->delayed_branch == 1) { +        cris_store_direct_jmp(dc); +    } + +    tcg_gen_qemu_ld_i64(dst, addr, mem_index, MO_TEQ); +} + +static void gen_load(DisasContext *dc, TCGv dst, TCGv addr,  +             unsigned int size, int sign) +{ +    int mem_index = cpu_mmu_index(&dc->cpu->env); + +    /* If we get a fault on a delayslot we must keep the jmp state in +       the cpu-state to be able to re-execute the jmp.  */ +    if (dc->delayed_branch == 1) { +        cris_store_direct_jmp(dc); +    } + +    tcg_gen_qemu_ld_tl(dst, addr, mem_index, +                       MO_TE + ctz32(size) + (sign ? MO_SIGN : 0)); +} + +static void gen_store (DisasContext *dc, TCGv addr, TCGv val, +               unsigned int size) +{ +    int mem_index = cpu_mmu_index(&dc->cpu->env); + +    /* If we get a fault on a delayslot we must keep the jmp state in +       the cpu-state to be able to re-execute the jmp.  */ +    if (dc->delayed_branch == 1) { +        cris_store_direct_jmp(dc); +    } + + +    /* Conditional writes. We only support the kind were X and P are known +       at translation time.  */ +    if (dc->flagx_known && dc->flags_x && (dc->tb_flags & P_FLAG)) { +        dc->postinc = 0; +        cris_evaluate_flags(dc); +        tcg_gen_ori_tl(cpu_PR[PR_CCS], cpu_PR[PR_CCS], C_FLAG); +        return; +    } + +    tcg_gen_qemu_st_tl(val, addr, mem_index, MO_TE + ctz32(size)); + +    if (dc->flagx_known && dc->flags_x) { +        cris_evaluate_flags(dc); +        tcg_gen_andi_tl(cpu_PR[PR_CCS], cpu_PR[PR_CCS], ~C_FLAG); +    } +} + +static inline void t_gen_sext(TCGv d, TCGv s, int size) +{ +    if (size == 1) { +        tcg_gen_ext8s_i32(d, s); +    } else if (size == 2) { +        tcg_gen_ext16s_i32(d, s); +    } else if (!TCGV_EQUAL(d, s)) { +        tcg_gen_mov_tl(d, s); +    } +} + +static inline void t_gen_zext(TCGv d, TCGv s, int size) +{ +    if (size == 1) { +        tcg_gen_ext8u_i32(d, s); +    } else if (size == 2) { +        tcg_gen_ext16u_i32(d, s); +    } else if (!TCGV_EQUAL(d, s)) { +        tcg_gen_mov_tl(d, s); +    } +} + +#if DISAS_CRIS +static char memsize_char(int size) +{ +    switch (size) { +    case 1: return 'b';  break; +    case 2: return 'w';  break; +    case 4: return 'd';  break; +    default: +        return 'x'; +        break; +    } +} +#endif + +static inline unsigned int memsize_z(DisasContext *dc) +{ +    return dc->zsize + 1; +} + +static inline unsigned int memsize_zz(DisasContext *dc) +{ +    switch (dc->zzsize) { +    case 0: return 1; +    case 1: return 2; +    default: +        return 4; +    } +} + +static inline void do_postinc (DisasContext *dc, int size) +{ +    if (dc->postinc) { +        tcg_gen_addi_tl(cpu_R[dc->op1], cpu_R[dc->op1], size); +    } +} + +static inline void dec_prep_move_r(DisasContext *dc, int rs, int rd, +                   int size, int s_ext, TCGv dst) +{ +    if (s_ext) { +        t_gen_sext(dst, cpu_R[rs], size); +    } else { +        t_gen_zext(dst, cpu_R[rs], size); +    } +} + +/* Prepare T0 and T1 for a register alu operation. +   s_ext decides if the operand1 should be sign-extended or zero-extended when +   needed.  */ +static void dec_prep_alu_r(DisasContext *dc, int rs, int rd, +              int size, int s_ext, TCGv dst, TCGv src) +{ +    dec_prep_move_r(dc, rs, rd, size, s_ext, src); + +    if (s_ext) { +        t_gen_sext(dst, cpu_R[rd], size); +    } else { +        t_gen_zext(dst, cpu_R[rd], size); +    } +} + +static int dec_prep_move_m(CPUCRISState *env, DisasContext *dc, +                           int s_ext, int memsize, TCGv dst) +{ +    unsigned int rs; +    uint32_t imm; +    int is_imm; +    int insn_len = 2; + +    rs = dc->op1; +    is_imm = rs == 15 && dc->postinc; + +    /* Load [$rs] onto T1.  */ +    if (is_imm) { +        insn_len = 2 + memsize; +        if (memsize == 1) { +            insn_len++; +        } + +        imm = cris_fetch(env, dc, dc->pc + 2, memsize, s_ext); +        tcg_gen_movi_tl(dst, imm); +        dc->postinc = 0; +    } else { +        cris_flush_cc_state(dc); +        gen_load(dc, dst, cpu_R[rs], memsize, 0); +        if (s_ext) { +            t_gen_sext(dst, dst, memsize); +        } else { +            t_gen_zext(dst, dst, memsize); +        } +    } +    return insn_len; +} + +/* Prepare T0 and T1 for a memory + alu operation. +   s_ext decides if the operand1 should be sign-extended or zero-extended when +   needed.  */ +static int dec_prep_alu_m(CPUCRISState *env, DisasContext *dc, +                          int s_ext, int memsize, TCGv dst, TCGv src) +{ +    int insn_len; + +    insn_len = dec_prep_move_m(env, dc, s_ext, memsize, src); +    tcg_gen_mov_tl(dst, cpu_R[dc->op2]); +    return insn_len; +} + +#if DISAS_CRIS +static const char *cc_name(int cc) +{ +    static const char *cc_names[16] = { +        "cc", "cs", "ne", "eq", "vc", "vs", "pl", "mi", +        "ls", "hi", "ge", "lt", "gt", "le", "a", "p" +    }; +    assert(cc < 16); +    return cc_names[cc]; +} +#endif + +/* Start of insn decoders.  */ + +static int dec_bccq(CPUCRISState *env, DisasContext *dc) +{ +    int32_t offset; +    int sign; +    uint32_t cond = dc->op2; + +    offset = EXTRACT_FIELD(dc->ir, 1, 7); +    sign = EXTRACT_FIELD(dc->ir, 0, 0); + +    offset *= 2; +    offset |= sign << 8; +    offset = sign_extend(offset, 8); + +    LOG_DIS("b%s %x\n", cc_name(cond), dc->pc + offset); + +    /* op2 holds the condition-code.  */ +    cris_cc_mask(dc, 0); +    cris_prepare_cc_branch(dc, offset, cond); +    return 2; +} +static int dec_addoq(CPUCRISState *env, DisasContext *dc) +{ +    int32_t imm; + +    dc->op1 = EXTRACT_FIELD(dc->ir, 0, 7); +    imm = sign_extend(dc->op1, 7); + +    LOG_DIS("addoq %d, $r%u\n", imm, dc->op2); +    cris_cc_mask(dc, 0); +    /* Fetch register operand,  */ +    tcg_gen_addi_tl(cpu_R[R_ACR], cpu_R[dc->op2], imm); + +    return 2; +} +static int dec_addq(CPUCRISState *env, DisasContext *dc) +{ +    LOG_DIS("addq %u, $r%u\n", dc->op1, dc->op2); + +    dc->op1 = EXTRACT_FIELD(dc->ir, 0, 5); + +    cris_cc_mask(dc, CC_MASK_NZVC); + +    cris_alu(dc, CC_OP_ADD, +            cpu_R[dc->op2], cpu_R[dc->op2], tcg_const_tl(dc->op1), 4); +    return 2; +} +static int dec_moveq(CPUCRISState *env, DisasContext *dc) +{ +    uint32_t imm; + +    dc->op1 = EXTRACT_FIELD(dc->ir, 0, 5); +    imm = sign_extend(dc->op1, 5); +    LOG_DIS("moveq %d, $r%u\n", imm, dc->op2); + +    tcg_gen_movi_tl(cpu_R[dc->op2], imm); +    return 2; +} +static int dec_subq(CPUCRISState *env, DisasContext *dc) +{ +    dc->op1 = EXTRACT_FIELD(dc->ir, 0, 5); + +    LOG_DIS("subq %u, $r%u\n", dc->op1, dc->op2); + +    cris_cc_mask(dc, CC_MASK_NZVC); +    cris_alu(dc, CC_OP_SUB, +            cpu_R[dc->op2], cpu_R[dc->op2], tcg_const_tl(dc->op1), 4); +    return 2; +} +static int dec_cmpq(CPUCRISState *env, DisasContext *dc) +{ +    uint32_t imm; +    dc->op1 = EXTRACT_FIELD(dc->ir, 0, 5); +    imm = sign_extend(dc->op1, 5); + +    LOG_DIS("cmpq %d, $r%d\n", imm, dc->op2); +    cris_cc_mask(dc, CC_MASK_NZVC); + +    cris_alu(dc, CC_OP_CMP, +            cpu_R[dc->op2], cpu_R[dc->op2], tcg_const_tl(imm), 4); +    return 2; +} +static int dec_andq(CPUCRISState *env, DisasContext *dc) +{ +    uint32_t imm; +    dc->op1 = EXTRACT_FIELD(dc->ir, 0, 5); +    imm = sign_extend(dc->op1, 5); + +    LOG_DIS("andq %d, $r%d\n", imm, dc->op2); +    cris_cc_mask(dc, CC_MASK_NZ); + +    cris_alu(dc, CC_OP_AND, +            cpu_R[dc->op2], cpu_R[dc->op2], tcg_const_tl(imm), 4); +    return 2; +} +static int dec_orq(CPUCRISState *env, DisasContext *dc) +{ +    uint32_t imm; +    dc->op1 = EXTRACT_FIELD(dc->ir, 0, 5); +    imm = sign_extend(dc->op1, 5); +    LOG_DIS("orq %d, $r%d\n", imm, dc->op2); +    cris_cc_mask(dc, CC_MASK_NZ); + +    cris_alu(dc, CC_OP_OR, +            cpu_R[dc->op2], cpu_R[dc->op2], tcg_const_tl(imm), 4); +    return 2; +} +static int dec_btstq(CPUCRISState *env, DisasContext *dc) +{ +    dc->op1 = EXTRACT_FIELD(dc->ir, 0, 4); +    LOG_DIS("btstq %u, $r%d\n", dc->op1, dc->op2); + +    cris_cc_mask(dc, CC_MASK_NZ); +    cris_evaluate_flags(dc); +        gen_helper_btst(cpu_PR[PR_CCS], cpu_env, cpu_R[dc->op2], +            tcg_const_tl(dc->op1), cpu_PR[PR_CCS]); +    cris_alu(dc, CC_OP_MOVE, +         cpu_R[dc->op2], cpu_R[dc->op2], cpu_R[dc->op2], 4); +    cris_update_cc_op(dc, CC_OP_FLAGS, 4); +    dc->flags_uptodate = 1; +    return 2; +} +static int dec_asrq(CPUCRISState *env, DisasContext *dc) +{ +    dc->op1 = EXTRACT_FIELD(dc->ir, 0, 4); +    LOG_DIS("asrq %u, $r%d\n", dc->op1, dc->op2); +    cris_cc_mask(dc, CC_MASK_NZ); + +    tcg_gen_sari_tl(cpu_R[dc->op2], cpu_R[dc->op2], dc->op1); +    cris_alu(dc, CC_OP_MOVE, +            cpu_R[dc->op2], +            cpu_R[dc->op2], cpu_R[dc->op2], 4); +    return 2; +} +static int dec_lslq(CPUCRISState *env, DisasContext *dc) +{ +    dc->op1 = EXTRACT_FIELD(dc->ir, 0, 4); +    LOG_DIS("lslq %u, $r%d\n", dc->op1, dc->op2); + +    cris_cc_mask(dc, CC_MASK_NZ); + +    tcg_gen_shli_tl(cpu_R[dc->op2], cpu_R[dc->op2], dc->op1); + +    cris_alu(dc, CC_OP_MOVE, +            cpu_R[dc->op2], +            cpu_R[dc->op2], cpu_R[dc->op2], 4); +    return 2; +} +static int dec_lsrq(CPUCRISState *env, DisasContext *dc) +{ +    dc->op1 = EXTRACT_FIELD(dc->ir, 0, 4); +    LOG_DIS("lsrq %u, $r%d\n", dc->op1, dc->op2); + +    cris_cc_mask(dc, CC_MASK_NZ); + +    tcg_gen_shri_tl(cpu_R[dc->op2], cpu_R[dc->op2], dc->op1); +    cris_alu(dc, CC_OP_MOVE, +            cpu_R[dc->op2], +            cpu_R[dc->op2], cpu_R[dc->op2], 4); +    return 2; +} + +static int dec_move_r(CPUCRISState *env, DisasContext *dc) +{ +    int size = memsize_zz(dc); + +    LOG_DIS("move.%c $r%u, $r%u\n", +            memsize_char(size), dc->op1, dc->op2); + +    cris_cc_mask(dc, CC_MASK_NZ); +    if (size == 4) { +        dec_prep_move_r(dc, dc->op1, dc->op2, size, 0, cpu_R[dc->op2]); +        cris_cc_mask(dc, CC_MASK_NZ); +        cris_update_cc_op(dc, CC_OP_MOVE, 4); +        cris_update_cc_x(dc); +        cris_update_result(dc, cpu_R[dc->op2]); +    } else { +        TCGv t0; + +        t0 = tcg_temp_new(); +        dec_prep_move_r(dc, dc->op1, dc->op2, size, 0, t0); +        cris_alu(dc, CC_OP_MOVE, +             cpu_R[dc->op2], +             cpu_R[dc->op2], t0, size); +        tcg_temp_free(t0); +    } +    return 2; +} + +static int dec_scc_r(CPUCRISState *env, DisasContext *dc) +{ +    int cond = dc->op2; + +    LOG_DIS("s%s $r%u\n", +            cc_name(cond), dc->op1); + +    if (cond != CC_A) { +        TCGLabel *l1 = gen_new_label(); +        gen_tst_cc(dc, cpu_R[dc->op1], cond); +        tcg_gen_brcondi_tl(TCG_COND_EQ, cpu_R[dc->op1], 0, l1); +        tcg_gen_movi_tl(cpu_R[dc->op1], 1); +        gen_set_label(l1); +    } else { +        tcg_gen_movi_tl(cpu_R[dc->op1], 1); +    } + +    cris_cc_mask(dc, 0); +    return 2; +} + +static inline void cris_alu_alloc_temps(DisasContext *dc, int size, TCGv *t) +{ +    if (size == 4) { +        t[0] = cpu_R[dc->op2]; +        t[1] = cpu_R[dc->op1]; +    } else { +        t[0] = tcg_temp_new(); +        t[1] = tcg_temp_new(); +    } +} + +static inline void cris_alu_free_temps(DisasContext *dc, int size, TCGv *t) +{ +    if (size != 4) { +        tcg_temp_free(t[0]); +        tcg_temp_free(t[1]); +    } +} + +static int dec_and_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int size = memsize_zz(dc); + +    LOG_DIS("and.%c $r%u, $r%u\n", +            memsize_char(size), dc->op1, dc->op2); + +    cris_cc_mask(dc, CC_MASK_NZ); + +    cris_alu_alloc_temps(dc, size, t); +    dec_prep_alu_r(dc, dc->op1, dc->op2, size, 0, t[0], t[1]); +    cris_alu(dc, CC_OP_AND, cpu_R[dc->op2], t[0], t[1], size); +    cris_alu_free_temps(dc, size, t); +    return 2; +} + +static int dec_lz_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t0; +    LOG_DIS("lz $r%u, $r%u\n", +            dc->op1, dc->op2); +    cris_cc_mask(dc, CC_MASK_NZ); +    t0 = tcg_temp_new(); +    dec_prep_alu_r(dc, dc->op1, dc->op2, 4, 0, cpu_R[dc->op2], t0); +    cris_alu(dc, CC_OP_LZ, cpu_R[dc->op2], cpu_R[dc->op2], t0, 4); +    tcg_temp_free(t0); +    return 2; +} + +static int dec_lsl_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int size = memsize_zz(dc); + +    LOG_DIS("lsl.%c $r%u, $r%u\n", +            memsize_char(size), dc->op1, dc->op2); + +    cris_cc_mask(dc, CC_MASK_NZ); +    cris_alu_alloc_temps(dc, size, t); +    dec_prep_alu_r(dc, dc->op1, dc->op2, size, 0, t[0], t[1]); +    tcg_gen_andi_tl(t[1], t[1], 63); +    cris_alu(dc, CC_OP_LSL, cpu_R[dc->op2], t[0], t[1], size); +    cris_alu_alloc_temps(dc, size, t); +    return 2; +} + +static int dec_lsr_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int size = memsize_zz(dc); + +    LOG_DIS("lsr.%c $r%u, $r%u\n", +            memsize_char(size), dc->op1, dc->op2); + +    cris_cc_mask(dc, CC_MASK_NZ); +    cris_alu_alloc_temps(dc, size, t); +    dec_prep_alu_r(dc, dc->op1, dc->op2, size, 0, t[0], t[1]); +    tcg_gen_andi_tl(t[1], t[1], 63); +    cris_alu(dc, CC_OP_LSR, cpu_R[dc->op2], t[0], t[1], size); +    cris_alu_free_temps(dc, size, t); +    return 2; +} + +static int dec_asr_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int size = memsize_zz(dc); + +    LOG_DIS("asr.%c $r%u, $r%u\n", +            memsize_char(size), dc->op1, dc->op2); + +    cris_cc_mask(dc, CC_MASK_NZ); +    cris_alu_alloc_temps(dc, size, t); +    dec_prep_alu_r(dc, dc->op1, dc->op2, size, 1, t[0], t[1]); +    tcg_gen_andi_tl(t[1], t[1], 63); +    cris_alu(dc, CC_OP_ASR, cpu_R[dc->op2], t[0], t[1], size); +    cris_alu_free_temps(dc, size, t); +    return 2; +} + +static int dec_muls_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int size = memsize_zz(dc); + +    LOG_DIS("muls.%c $r%u, $r%u\n", +            memsize_char(size), dc->op1, dc->op2); +    cris_cc_mask(dc, CC_MASK_NZV); +    cris_alu_alloc_temps(dc, size, t); +    dec_prep_alu_r(dc, dc->op1, dc->op2, size, 1, t[0], t[1]); + +    cris_alu(dc, CC_OP_MULS, cpu_R[dc->op2], t[0], t[1], 4); +    cris_alu_free_temps(dc, size, t); +    return 2; +} + +static int dec_mulu_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int size = memsize_zz(dc); + +    LOG_DIS("mulu.%c $r%u, $r%u\n", +            memsize_char(size), dc->op1, dc->op2); +    cris_cc_mask(dc, CC_MASK_NZV); +    cris_alu_alloc_temps(dc, size, t); +    dec_prep_alu_r(dc, dc->op1, dc->op2, size, 0, t[0], t[1]); + +    cris_alu(dc, CC_OP_MULU, cpu_R[dc->op2], t[0], t[1], 4); +    cris_alu_alloc_temps(dc, size, t); +    return 2; +} + + +static int dec_dstep_r(CPUCRISState *env, DisasContext *dc) +{ +    LOG_DIS("dstep $r%u, $r%u\n", dc->op1, dc->op2); +    cris_cc_mask(dc, CC_MASK_NZ); +    cris_alu(dc, CC_OP_DSTEP, +            cpu_R[dc->op2], cpu_R[dc->op2], cpu_R[dc->op1], 4); +    return 2; +} + +static int dec_xor_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int size = memsize_zz(dc); +    LOG_DIS("xor.%c $r%u, $r%u\n", +            memsize_char(size), dc->op1, dc->op2); +    BUG_ON(size != 4); /* xor is dword.  */ +    cris_cc_mask(dc, CC_MASK_NZ); +    cris_alu_alloc_temps(dc, size, t); +    dec_prep_alu_r(dc, dc->op1, dc->op2, size, 0, t[0], t[1]); + +    cris_alu(dc, CC_OP_XOR, cpu_R[dc->op2], t[0], t[1], 4); +    cris_alu_free_temps(dc, size, t); +    return 2; +} + +static int dec_bound_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv l0; +    int size = memsize_zz(dc); +    LOG_DIS("bound.%c $r%u, $r%u\n", +            memsize_char(size), dc->op1, dc->op2); +    cris_cc_mask(dc, CC_MASK_NZ); +    l0 = tcg_temp_local_new(); +    dec_prep_move_r(dc, dc->op1, dc->op2, size, 0, l0); +    cris_alu(dc, CC_OP_BOUND, cpu_R[dc->op2], cpu_R[dc->op2], l0, 4); +    tcg_temp_free(l0); +    return 2; +} + +static int dec_cmp_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int size = memsize_zz(dc); +    LOG_DIS("cmp.%c $r%u, $r%u\n", +            memsize_char(size), dc->op1, dc->op2); +    cris_cc_mask(dc, CC_MASK_NZVC); +    cris_alu_alloc_temps(dc, size, t); +    dec_prep_alu_r(dc, dc->op1, dc->op2, size, 0, t[0], t[1]); + +    cris_alu(dc, CC_OP_CMP, cpu_R[dc->op2], t[0], t[1], size); +    cris_alu_free_temps(dc, size, t); +    return 2; +} + +static int dec_abs_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t0; + +    LOG_DIS("abs $r%u, $r%u\n", +            dc->op1, dc->op2); +    cris_cc_mask(dc, CC_MASK_NZ); + +    t0 = tcg_temp_new(); +    tcg_gen_sari_tl(t0, cpu_R[dc->op1], 31); +    tcg_gen_xor_tl(cpu_R[dc->op2], cpu_R[dc->op1], t0); +    tcg_gen_sub_tl(cpu_R[dc->op2], cpu_R[dc->op2], t0); +    tcg_temp_free(t0); + +    cris_alu(dc, CC_OP_MOVE, +            cpu_R[dc->op2], cpu_R[dc->op2], cpu_R[dc->op2], 4); +    return 2; +} + +static int dec_add_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int size = memsize_zz(dc); +    LOG_DIS("add.%c $r%u, $r%u\n", +            memsize_char(size), dc->op1, dc->op2); +    cris_cc_mask(dc, CC_MASK_NZVC); +    cris_alu_alloc_temps(dc, size, t); +    dec_prep_alu_r(dc, dc->op1, dc->op2, size, 0, t[0], t[1]); + +    cris_alu(dc, CC_OP_ADD, cpu_R[dc->op2], t[0], t[1], size); +    cris_alu_free_temps(dc, size, t); +    return 2; +} + +static int dec_addc_r(CPUCRISState *env, DisasContext *dc) +{ +    LOG_DIS("addc $r%u, $r%u\n", +            dc->op1, dc->op2); +    cris_evaluate_flags(dc); +    /* Set for this insn.  */ +    dc->flagx_known = 1; +    dc->flags_x = X_FLAG; + +    cris_cc_mask(dc, CC_MASK_NZVC); +    cris_alu(dc, CC_OP_ADDC, +         cpu_R[dc->op2], cpu_R[dc->op2], cpu_R[dc->op1], 4); +    return 2; +} + +static int dec_mcp_r(CPUCRISState *env, DisasContext *dc) +{ +    LOG_DIS("mcp $p%u, $r%u\n", +             dc->op2, dc->op1); +    cris_evaluate_flags(dc); +    cris_cc_mask(dc, CC_MASK_RNZV); +    cris_alu(dc, CC_OP_MCP, +            cpu_R[dc->op1], cpu_R[dc->op1], cpu_PR[dc->op2], 4); +    return 2; +} + +#if DISAS_CRIS +static char * swapmode_name(int mode, char *modename) { +    int i = 0; +    if (mode & 8) { +        modename[i++] = 'n'; +    } +    if (mode & 4) { +        modename[i++] = 'w'; +    } +    if (mode & 2) { +        modename[i++] = 'b'; +    } +    if (mode & 1) { +        modename[i++] = 'r'; +    } +    modename[i++] = 0; +    return modename; +} +#endif + +static int dec_swap_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t0; +#if DISAS_CRIS +    char modename[4]; +#endif +    LOG_DIS("swap%s $r%u\n", +             swapmode_name(dc->op2, modename), dc->op1); + +    cris_cc_mask(dc, CC_MASK_NZ); +    t0 = tcg_temp_new(); +    tcg_gen_mov_tl(t0, cpu_R[dc->op1]); +    if (dc->op2 & 8) { +        tcg_gen_not_tl(t0, t0); +    } +    if (dc->op2 & 4) { +        t_gen_swapw(t0, t0); +    } +    if (dc->op2 & 2) { +        t_gen_swapb(t0, t0); +    } +    if (dc->op2 & 1) { +        t_gen_swapr(t0, t0); +    } +    cris_alu(dc, CC_OP_MOVE, cpu_R[dc->op1], cpu_R[dc->op1], t0, 4); +    tcg_temp_free(t0); +    return 2; +} + +static int dec_or_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int size = memsize_zz(dc); +    LOG_DIS("or.%c $r%u, $r%u\n", +            memsize_char(size), dc->op1, dc->op2); +    cris_cc_mask(dc, CC_MASK_NZ); +    cris_alu_alloc_temps(dc, size, t); +    dec_prep_alu_r(dc, dc->op1, dc->op2, size, 0, t[0], t[1]); +    cris_alu(dc, CC_OP_OR, cpu_R[dc->op2], t[0], t[1], size); +    cris_alu_free_temps(dc, size, t); +    return 2; +} + +static int dec_addi_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t0; +    LOG_DIS("addi.%c $r%u, $r%u\n", +            memsize_char(memsize_zz(dc)), dc->op2, dc->op1); +    cris_cc_mask(dc, 0); +    t0 = tcg_temp_new(); +    tcg_gen_shl_tl(t0, cpu_R[dc->op2], tcg_const_tl(dc->zzsize)); +    tcg_gen_add_tl(cpu_R[dc->op1], cpu_R[dc->op1], t0); +    tcg_temp_free(t0); +    return 2; +} + +static int dec_addi_acr(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t0; +    LOG_DIS("addi.%c $r%u, $r%u, $acr\n", +          memsize_char(memsize_zz(dc)), dc->op2, dc->op1); +    cris_cc_mask(dc, 0); +    t0 = tcg_temp_new(); +    tcg_gen_shl_tl(t0, cpu_R[dc->op2], tcg_const_tl(dc->zzsize)); +    tcg_gen_add_tl(cpu_R[R_ACR], cpu_R[dc->op1], t0); +    tcg_temp_free(t0); +    return 2; +} + +static int dec_neg_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int size = memsize_zz(dc); +    LOG_DIS("neg.%c $r%u, $r%u\n", +            memsize_char(size), dc->op1, dc->op2); +    cris_cc_mask(dc, CC_MASK_NZVC); +    cris_alu_alloc_temps(dc, size, t); +    dec_prep_alu_r(dc, dc->op1, dc->op2, size, 0, t[0], t[1]); + +    cris_alu(dc, CC_OP_NEG, cpu_R[dc->op2], t[0], t[1], size); +    cris_alu_free_temps(dc, size, t); +    return 2; +} + +static int dec_btst_r(CPUCRISState *env, DisasContext *dc) +{ +    LOG_DIS("btst $r%u, $r%u\n", +            dc->op1, dc->op2); +    cris_cc_mask(dc, CC_MASK_NZ); +    cris_evaluate_flags(dc); +        gen_helper_btst(cpu_PR[PR_CCS], cpu_env, cpu_R[dc->op2], +            cpu_R[dc->op1], cpu_PR[PR_CCS]); +    cris_alu(dc, CC_OP_MOVE, cpu_R[dc->op2], +         cpu_R[dc->op2], cpu_R[dc->op2], 4); +    cris_update_cc_op(dc, CC_OP_FLAGS, 4); +    dc->flags_uptodate = 1; +    return 2; +} + +static int dec_sub_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int size = memsize_zz(dc); +    LOG_DIS("sub.%c $r%u, $r%u\n", +            memsize_char(size), dc->op1, dc->op2); +    cris_cc_mask(dc, CC_MASK_NZVC); +    cris_alu_alloc_temps(dc, size, t); +    dec_prep_alu_r(dc, dc->op1, dc->op2, size, 0, t[0], t[1]); +    cris_alu(dc, CC_OP_SUB, cpu_R[dc->op2], t[0], t[1], size); +    cris_alu_free_temps(dc, size, t); +    return 2; +} + +/* Zero extension. From size to dword.  */ +static int dec_movu_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t0; +    int size = memsize_z(dc); +    LOG_DIS("movu.%c $r%u, $r%u\n", +            memsize_char(size), +            dc->op1, dc->op2); + +    cris_cc_mask(dc, CC_MASK_NZ); +    t0 = tcg_temp_new(); +    dec_prep_move_r(dc, dc->op1, dc->op2, size, 0, t0); +    cris_alu(dc, CC_OP_MOVE, cpu_R[dc->op2], cpu_R[dc->op2], t0, 4); +    tcg_temp_free(t0); +    return 2; +} + +/* Sign extension. From size to dword.  */ +static int dec_movs_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t0; +    int size = memsize_z(dc); +    LOG_DIS("movs.%c $r%u, $r%u\n", +            memsize_char(size), +            dc->op1, dc->op2); + +    cris_cc_mask(dc, CC_MASK_NZ); +    t0 = tcg_temp_new(); +    /* Size can only be qi or hi.  */ +    t_gen_sext(t0, cpu_R[dc->op1], size); +    cris_alu(dc, CC_OP_MOVE, +            cpu_R[dc->op2], cpu_R[dc->op1], t0, 4); +    tcg_temp_free(t0); +    return 2; +} + +/* zero extension. From size to dword.  */ +static int dec_addu_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t0; +    int size = memsize_z(dc); +    LOG_DIS("addu.%c $r%u, $r%u\n", +            memsize_char(size), +            dc->op1, dc->op2); + +    cris_cc_mask(dc, CC_MASK_NZVC); +    t0 = tcg_temp_new(); +    /* Size can only be qi or hi.  */ +    t_gen_zext(t0, cpu_R[dc->op1], size); +    cris_alu(dc, CC_OP_ADD, cpu_R[dc->op2], cpu_R[dc->op2], t0, 4); +    tcg_temp_free(t0); +    return 2; +} + +/* Sign extension. From size to dword.  */ +static int dec_adds_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t0; +    int size = memsize_z(dc); +    LOG_DIS("adds.%c $r%u, $r%u\n", +            memsize_char(size), +            dc->op1, dc->op2); + +    cris_cc_mask(dc, CC_MASK_NZVC); +    t0 = tcg_temp_new(); +    /* Size can only be qi or hi.  */ +    t_gen_sext(t0, cpu_R[dc->op1], size); +    cris_alu(dc, CC_OP_ADD, +            cpu_R[dc->op2], cpu_R[dc->op2], t0, 4); +    tcg_temp_free(t0); +    return 2; +} + +/* Zero extension. From size to dword.  */ +static int dec_subu_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t0; +    int size = memsize_z(dc); +    LOG_DIS("subu.%c $r%u, $r%u\n", +            memsize_char(size), +            dc->op1, dc->op2); + +    cris_cc_mask(dc, CC_MASK_NZVC); +    t0 = tcg_temp_new(); +    /* Size can only be qi or hi.  */ +    t_gen_zext(t0, cpu_R[dc->op1], size); +    cris_alu(dc, CC_OP_SUB, +            cpu_R[dc->op2], cpu_R[dc->op2], t0, 4); +    tcg_temp_free(t0); +    return 2; +} + +/* Sign extension. From size to dword.  */ +static int dec_subs_r(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t0; +    int size = memsize_z(dc); +    LOG_DIS("subs.%c $r%u, $r%u\n", +            memsize_char(size), +            dc->op1, dc->op2); + +    cris_cc_mask(dc, CC_MASK_NZVC); +    t0 = tcg_temp_new(); +    /* Size can only be qi or hi.  */ +    t_gen_sext(t0, cpu_R[dc->op1], size); +    cris_alu(dc, CC_OP_SUB, +            cpu_R[dc->op2], cpu_R[dc->op2], t0, 4); +    tcg_temp_free(t0); +    return 2; +} + +static int dec_setclrf(CPUCRISState *env, DisasContext *dc) +{ +    uint32_t flags; +    int set = (~dc->opcode >> 2) & 1; + + +    flags = (EXTRACT_FIELD(dc->ir, 12, 15) << 4) +        | EXTRACT_FIELD(dc->ir, 0, 3); +    if (set && flags == 0) { +        LOG_DIS("nop\n"); +        return 2; +    } else if (!set && (flags & 0x20)) { +        LOG_DIS("di\n"); +    } else { +        LOG_DIS("%sf %x\n", set ? "set" : "clr", flags); +    } + +    /* User space is not allowed to touch these. Silently ignore.  */ +    if (dc->tb_flags & U_FLAG) { +        flags &= ~(S_FLAG | I_FLAG | U_FLAG); +    } + +    if (flags & X_FLAG) { +        dc->flagx_known = 1; +        if (set) { +            dc->flags_x = X_FLAG; +        } else { +            dc->flags_x = 0; +        } +    } + +    /* Break the TB if any of the SPI flag changes.  */ +    if (flags & (P_FLAG | S_FLAG)) { +        tcg_gen_movi_tl(env_pc, dc->pc + 2); +        dc->is_jmp = DISAS_UPDATE; +        dc->cpustate_changed = 1; +    } + +    /* For the I flag, only act on posedge.  */ +    if ((flags & I_FLAG)) { +        tcg_gen_movi_tl(env_pc, dc->pc + 2); +        dc->is_jmp = DISAS_UPDATE; +        dc->cpustate_changed = 1; +    } + + +    /* Simply decode the flags.  */ +    cris_evaluate_flags(dc); +    cris_update_cc_op(dc, CC_OP_FLAGS, 4); +    cris_update_cc_x(dc); +    tcg_gen_movi_tl(cc_op, dc->cc_op); + +    if (set) { +        if (!(dc->tb_flags & U_FLAG) && (flags & U_FLAG)) { +            /* Enter user mode.  */ +            t_gen_mov_env_TN(ksp, cpu_R[R_SP]); +            tcg_gen_mov_tl(cpu_R[R_SP], cpu_PR[PR_USP]); +            dc->cpustate_changed = 1; +        } +        tcg_gen_ori_tl(cpu_PR[PR_CCS], cpu_PR[PR_CCS], flags); +    } else { +        tcg_gen_andi_tl(cpu_PR[PR_CCS], cpu_PR[PR_CCS], ~flags); +    } + +    dc->flags_uptodate = 1; +    dc->clear_x = 0; +    return 2; +} + +static int dec_move_rs(CPUCRISState *env, DisasContext *dc) +{ +    LOG_DIS("move $r%u, $s%u\n", dc->op1, dc->op2); +    cris_cc_mask(dc, 0); +        gen_helper_movl_sreg_reg(cpu_env, tcg_const_tl(dc->op2), +                                 tcg_const_tl(dc->op1)); +    return 2; +} +static int dec_move_sr(CPUCRISState *env, DisasContext *dc) +{ +    LOG_DIS("move $s%u, $r%u\n", dc->op2, dc->op1); +    cris_cc_mask(dc, 0); +        gen_helper_movl_reg_sreg(cpu_env, tcg_const_tl(dc->op1), +                                 tcg_const_tl(dc->op2)); +    return 2; +} + +static int dec_move_rp(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    LOG_DIS("move $r%u, $p%u\n", dc->op1, dc->op2); +    cris_cc_mask(dc, 0); + +    t[0] = tcg_temp_new(); +    if (dc->op2 == PR_CCS) { +        cris_evaluate_flags(dc); +        tcg_gen_mov_tl(t[0], cpu_R[dc->op1]); +        if (dc->tb_flags & U_FLAG) { +            t[1] = tcg_temp_new(); +            /* User space is not allowed to touch all flags.  */ +            tcg_gen_andi_tl(t[0], t[0], 0x39f); +            tcg_gen_andi_tl(t[1], cpu_PR[PR_CCS], ~0x39f); +            tcg_gen_or_tl(t[0], t[1], t[0]); +            tcg_temp_free(t[1]); +        } +    } else { +        tcg_gen_mov_tl(t[0], cpu_R[dc->op1]); +    } + +    t_gen_mov_preg_TN(dc, dc->op2, t[0]); +    if (dc->op2 == PR_CCS) { +        cris_update_cc_op(dc, CC_OP_FLAGS, 4); +        dc->flags_uptodate = 1; +    } +    tcg_temp_free(t[0]); +    return 2; +} +static int dec_move_pr(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t0; +    LOG_DIS("move $p%u, $r%u\n", dc->op2, dc->op1); +    cris_cc_mask(dc, 0); + +    if (dc->op2 == PR_CCS) { +        cris_evaluate_flags(dc); +    } + +    if (dc->op2 == PR_DZ) { +        tcg_gen_movi_tl(cpu_R[dc->op1], 0); +    } else { +        t0 = tcg_temp_new(); +        t_gen_mov_TN_preg(t0, dc->op2); +        cris_alu(dc, CC_OP_MOVE, +                cpu_R[dc->op1], cpu_R[dc->op1], t0, +                preg_sizes[dc->op2]); +        tcg_temp_free(t0); +    } +    return 2; +} + +static int dec_move_mr(CPUCRISState *env, DisasContext *dc) +{ +    int memsize = memsize_zz(dc); +    int insn_len; +    LOG_DIS("move.%c [$r%u%s, $r%u\n", +            memsize_char(memsize), +            dc->op1, dc->postinc ? "+]" : "]", +                    dc->op2); + +    if (memsize == 4) { +        insn_len = dec_prep_move_m(env, dc, 0, 4, cpu_R[dc->op2]); +        cris_cc_mask(dc, CC_MASK_NZ); +        cris_update_cc_op(dc, CC_OP_MOVE, 4); +        cris_update_cc_x(dc); +        cris_update_result(dc, cpu_R[dc->op2]); +    } else { +        TCGv t0; + +        t0 = tcg_temp_new(); +        insn_len = dec_prep_move_m(env, dc, 0, memsize, t0); +        cris_cc_mask(dc, CC_MASK_NZ); +        cris_alu(dc, CC_OP_MOVE, +                cpu_R[dc->op2], cpu_R[dc->op2], t0, memsize); +        tcg_temp_free(t0); +    } +    do_postinc(dc, memsize); +    return insn_len; +} + +static inline void cris_alu_m_alloc_temps(TCGv *t) +{ +    t[0] = tcg_temp_new(); +    t[1] = tcg_temp_new(); +} + +static inline void cris_alu_m_free_temps(TCGv *t) +{ +    tcg_temp_free(t[0]); +    tcg_temp_free(t[1]); +} + +static int dec_movs_m(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int memsize = memsize_z(dc); +    int insn_len; +    LOG_DIS("movs.%c [$r%u%s, $r%u\n", +            memsize_char(memsize), +            dc->op1, dc->postinc ? "+]" : "]", +            dc->op2); + +    cris_alu_m_alloc_temps(t); +    /* sign extend.  */ +        insn_len = dec_prep_alu_m(env, dc, 1, memsize, t[0], t[1]); +    cris_cc_mask(dc, CC_MASK_NZ); +    cris_alu(dc, CC_OP_MOVE, +            cpu_R[dc->op2], cpu_R[dc->op2], t[1], 4); +    do_postinc(dc, memsize); +    cris_alu_m_free_temps(t); +    return insn_len; +} + +static int dec_addu_m(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int memsize = memsize_z(dc); +    int insn_len; +    LOG_DIS("addu.%c [$r%u%s, $r%u\n", +            memsize_char(memsize), +            dc->op1, dc->postinc ? "+]" : "]", +            dc->op2); + +    cris_alu_m_alloc_temps(t); +    /* sign extend.  */ +        insn_len = dec_prep_alu_m(env, dc, 0, memsize, t[0], t[1]); +    cris_cc_mask(dc, CC_MASK_NZVC); +    cris_alu(dc, CC_OP_ADD, +            cpu_R[dc->op2], cpu_R[dc->op2], t[1], 4); +    do_postinc(dc, memsize); +    cris_alu_m_free_temps(t); +    return insn_len; +} + +static int dec_adds_m(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int memsize = memsize_z(dc); +    int insn_len; +    LOG_DIS("adds.%c [$r%u%s, $r%u\n", +            memsize_char(memsize), +            dc->op1, dc->postinc ? "+]" : "]", +            dc->op2); + +    cris_alu_m_alloc_temps(t); +    /* sign extend.  */ +        insn_len = dec_prep_alu_m(env, dc, 1, memsize, t[0], t[1]); +    cris_cc_mask(dc, CC_MASK_NZVC); +    cris_alu(dc, CC_OP_ADD, cpu_R[dc->op2], cpu_R[dc->op2], t[1], 4); +    do_postinc(dc, memsize); +    cris_alu_m_free_temps(t); +    return insn_len; +} + +static int dec_subu_m(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int memsize = memsize_z(dc); +    int insn_len; +    LOG_DIS("subu.%c [$r%u%s, $r%u\n", +            memsize_char(memsize), +            dc->op1, dc->postinc ? "+]" : "]", +            dc->op2); + +    cris_alu_m_alloc_temps(t); +    /* sign extend.  */ +        insn_len = dec_prep_alu_m(env, dc, 0, memsize, t[0], t[1]); +    cris_cc_mask(dc, CC_MASK_NZVC); +    cris_alu(dc, CC_OP_SUB, cpu_R[dc->op2], cpu_R[dc->op2], t[1], 4); +    do_postinc(dc, memsize); +    cris_alu_m_free_temps(t); +    return insn_len; +} + +static int dec_subs_m(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int memsize = memsize_z(dc); +    int insn_len; +    LOG_DIS("subs.%c [$r%u%s, $r%u\n", +            memsize_char(memsize), +            dc->op1, dc->postinc ? "+]" : "]", +            dc->op2); + +    cris_alu_m_alloc_temps(t); +    /* sign extend.  */ +        insn_len = dec_prep_alu_m(env, dc, 1, memsize, t[0], t[1]); +    cris_cc_mask(dc, CC_MASK_NZVC); +    cris_alu(dc, CC_OP_SUB, cpu_R[dc->op2], cpu_R[dc->op2], t[1], 4); +    do_postinc(dc, memsize); +    cris_alu_m_free_temps(t); +    return insn_len; +} + +static int dec_movu_m(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int memsize = memsize_z(dc); +    int insn_len; + +    LOG_DIS("movu.%c [$r%u%s, $r%u\n", +            memsize_char(memsize), +            dc->op1, dc->postinc ? "+]" : "]", +            dc->op2); + +    cris_alu_m_alloc_temps(t); +        insn_len = dec_prep_alu_m(env, dc, 0, memsize, t[0], t[1]); +    cris_cc_mask(dc, CC_MASK_NZ); +    cris_alu(dc, CC_OP_MOVE, cpu_R[dc->op2], cpu_R[dc->op2], t[1], 4); +    do_postinc(dc, memsize); +    cris_alu_m_free_temps(t); +    return insn_len; +} + +static int dec_cmpu_m(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int memsize = memsize_z(dc); +    int insn_len; +    LOG_DIS("cmpu.%c [$r%u%s, $r%u\n", +            memsize_char(memsize), +            dc->op1, dc->postinc ? "+]" : "]", +            dc->op2); + +    cris_alu_m_alloc_temps(t); +        insn_len = dec_prep_alu_m(env, dc, 0, memsize, t[0], t[1]); +    cris_cc_mask(dc, CC_MASK_NZVC); +    cris_alu(dc, CC_OP_CMP, cpu_R[dc->op2], cpu_R[dc->op2], t[1], 4); +    do_postinc(dc, memsize); +    cris_alu_m_free_temps(t); +    return insn_len; +} + +static int dec_cmps_m(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int memsize = memsize_z(dc); +    int insn_len; +    LOG_DIS("cmps.%c [$r%u%s, $r%u\n", +            memsize_char(memsize), +            dc->op1, dc->postinc ? "+]" : "]", +            dc->op2); + +    cris_alu_m_alloc_temps(t); +        insn_len = dec_prep_alu_m(env, dc, 1, memsize, t[0], t[1]); +    cris_cc_mask(dc, CC_MASK_NZVC); +    cris_alu(dc, CC_OP_CMP, +            cpu_R[dc->op2], cpu_R[dc->op2], t[1], +            memsize_zz(dc)); +    do_postinc(dc, memsize); +    cris_alu_m_free_temps(t); +    return insn_len; +} + +static int dec_cmp_m(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int memsize = memsize_zz(dc); +    int insn_len; +    LOG_DIS("cmp.%c [$r%u%s, $r%u\n", +            memsize_char(memsize), +            dc->op1, dc->postinc ? "+]" : "]", +            dc->op2); + +    cris_alu_m_alloc_temps(t); +        insn_len = dec_prep_alu_m(env, dc, 0, memsize, t[0], t[1]); +    cris_cc_mask(dc, CC_MASK_NZVC); +    cris_alu(dc, CC_OP_CMP, +            cpu_R[dc->op2], cpu_R[dc->op2], t[1], +            memsize_zz(dc)); +    do_postinc(dc, memsize); +    cris_alu_m_free_temps(t); +    return insn_len; +} + +static int dec_test_m(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int memsize = memsize_zz(dc); +    int insn_len; +    LOG_DIS("test.%c [$r%u%s] op2=%x\n", +            memsize_char(memsize), +            dc->op1, dc->postinc ? "+]" : "]", +            dc->op2); + +    cris_evaluate_flags(dc); + +    cris_alu_m_alloc_temps(t); +        insn_len = dec_prep_alu_m(env, dc, 0, memsize, t[0], t[1]); +    cris_cc_mask(dc, CC_MASK_NZ); +    tcg_gen_andi_tl(cpu_PR[PR_CCS], cpu_PR[PR_CCS], ~3); + +    cris_alu(dc, CC_OP_CMP, +         cpu_R[dc->op2], t[1], tcg_const_tl(0), memsize_zz(dc)); +    do_postinc(dc, memsize); +    cris_alu_m_free_temps(t); +    return insn_len; +} + +static int dec_and_m(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int memsize = memsize_zz(dc); +    int insn_len; +    LOG_DIS("and.%c [$r%u%s, $r%u\n", +            memsize_char(memsize), +            dc->op1, dc->postinc ? "+]" : "]", +            dc->op2); + +    cris_alu_m_alloc_temps(t); +        insn_len = dec_prep_alu_m(env, dc, 0, memsize, t[0], t[1]); +    cris_cc_mask(dc, CC_MASK_NZ); +    cris_alu(dc, CC_OP_AND, cpu_R[dc->op2], t[0], t[1], memsize_zz(dc)); +    do_postinc(dc, memsize); +    cris_alu_m_free_temps(t); +    return insn_len; +} + +static int dec_add_m(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int memsize = memsize_zz(dc); +    int insn_len; +    LOG_DIS("add.%c [$r%u%s, $r%u\n", +            memsize_char(memsize), +            dc->op1, dc->postinc ? "+]" : "]", +            dc->op2); + +    cris_alu_m_alloc_temps(t); +        insn_len = dec_prep_alu_m(env, dc, 0, memsize, t[0], t[1]); +    cris_cc_mask(dc, CC_MASK_NZVC); +    cris_alu(dc, CC_OP_ADD, +         cpu_R[dc->op2], t[0], t[1], memsize_zz(dc)); +    do_postinc(dc, memsize); +    cris_alu_m_free_temps(t); +    return insn_len; +} + +static int dec_addo_m(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int memsize = memsize_zz(dc); +    int insn_len; +    LOG_DIS("add.%c [$r%u%s, $r%u\n", +            memsize_char(memsize), +            dc->op1, dc->postinc ? "+]" : "]", +            dc->op2); + +    cris_alu_m_alloc_temps(t); +        insn_len = dec_prep_alu_m(env, dc, 1, memsize, t[0], t[1]); +    cris_cc_mask(dc, 0); +    cris_alu(dc, CC_OP_ADD, cpu_R[R_ACR], t[0], t[1], 4); +    do_postinc(dc, memsize); +    cris_alu_m_free_temps(t); +    return insn_len; +} + +static int dec_bound_m(CPUCRISState *env, DisasContext *dc) +{ +    TCGv l[2]; +    int memsize = memsize_zz(dc); +    int insn_len; +    LOG_DIS("bound.%c [$r%u%s, $r%u\n", +            memsize_char(memsize), +            dc->op1, dc->postinc ? "+]" : "]", +            dc->op2); + +    l[0] = tcg_temp_local_new(); +    l[1] = tcg_temp_local_new(); +        insn_len = dec_prep_alu_m(env, dc, 0, memsize, l[0], l[1]); +    cris_cc_mask(dc, CC_MASK_NZ); +    cris_alu(dc, CC_OP_BOUND, cpu_R[dc->op2], l[0], l[1], 4); +    do_postinc(dc, memsize); +    tcg_temp_free(l[0]); +    tcg_temp_free(l[1]); +    return insn_len; +} + +static int dec_addc_mr(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int insn_len = 2; +    LOG_DIS("addc [$r%u%s, $r%u\n", +            dc->op1, dc->postinc ? "+]" : "]", +            dc->op2); + +    cris_evaluate_flags(dc); + +    /* Set for this insn.  */ +    dc->flagx_known = 1; +    dc->flags_x = X_FLAG; + +    cris_alu_m_alloc_temps(t); +        insn_len = dec_prep_alu_m(env, dc, 0, 4, t[0], t[1]); +    cris_cc_mask(dc, CC_MASK_NZVC); +    cris_alu(dc, CC_OP_ADDC, cpu_R[dc->op2], t[0], t[1], 4); +    do_postinc(dc, 4); +    cris_alu_m_free_temps(t); +    return insn_len; +} + +static int dec_sub_m(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int memsize = memsize_zz(dc); +    int insn_len; +    LOG_DIS("sub.%c [$r%u%s, $r%u ir=%x zz=%x\n", +            memsize_char(memsize), +            dc->op1, dc->postinc ? "+]" : "]", +            dc->op2, dc->ir, dc->zzsize); + +    cris_alu_m_alloc_temps(t); +        insn_len = dec_prep_alu_m(env, dc, 0, memsize, t[0], t[1]); +    cris_cc_mask(dc, CC_MASK_NZVC); +    cris_alu(dc, CC_OP_SUB, cpu_R[dc->op2], t[0], t[1], memsize); +    do_postinc(dc, memsize); +    cris_alu_m_free_temps(t); +    return insn_len; +} + +static int dec_or_m(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int memsize = memsize_zz(dc); +    int insn_len; +    LOG_DIS("or.%c [$r%u%s, $r%u pc=%x\n", +            memsize_char(memsize), +            dc->op1, dc->postinc ? "+]" : "]", +            dc->op2, dc->pc); + +    cris_alu_m_alloc_temps(t); +        insn_len = dec_prep_alu_m(env, dc, 0, memsize, t[0], t[1]); +    cris_cc_mask(dc, CC_MASK_NZ); +    cris_alu(dc, CC_OP_OR, +            cpu_R[dc->op2], t[0], t[1], memsize_zz(dc)); +    do_postinc(dc, memsize); +    cris_alu_m_free_temps(t); +    return insn_len; +} + +static int dec_move_mp(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t[2]; +    int memsize = memsize_zz(dc); +    int insn_len = 2; + +    LOG_DIS("move.%c [$r%u%s, $p%u\n", +            memsize_char(memsize), +            dc->op1, +            dc->postinc ? "+]" : "]", +            dc->op2); + +    cris_alu_m_alloc_temps(t); +        insn_len = dec_prep_alu_m(env, dc, 0, memsize, t[0], t[1]); +    cris_cc_mask(dc, 0); +    if (dc->op2 == PR_CCS) { +        cris_evaluate_flags(dc); +        if (dc->tb_flags & U_FLAG) { +            /* User space is not allowed to touch all flags.  */ +            tcg_gen_andi_tl(t[1], t[1], 0x39f); +            tcg_gen_andi_tl(t[0], cpu_PR[PR_CCS], ~0x39f); +            tcg_gen_or_tl(t[1], t[0], t[1]); +        } +    } + +    t_gen_mov_preg_TN(dc, dc->op2, t[1]); + +    do_postinc(dc, memsize); +    cris_alu_m_free_temps(t); +    return insn_len; +} + +static int dec_move_pm(CPUCRISState *env, DisasContext *dc) +{ +    TCGv t0; +    int memsize; + +    memsize = preg_sizes[dc->op2]; + +    LOG_DIS("move.%c $p%u, [$r%u%s\n", +            memsize_char(memsize), +            dc->op2, dc->op1, dc->postinc ? "+]" : "]"); + +    /* prepare store. Address in T0, value in T1.  */ +    if (dc->op2 == PR_CCS) { +        cris_evaluate_flags(dc); +    } +    t0 = tcg_temp_new(); +    t_gen_mov_TN_preg(t0, dc->op2); +    cris_flush_cc_state(dc); +    gen_store(dc, cpu_R[dc->op1], t0, memsize); +    tcg_temp_free(t0); + +    cris_cc_mask(dc, 0); +    if (dc->postinc) { +        tcg_gen_addi_tl(cpu_R[dc->op1], cpu_R[dc->op1], memsize); +    } +    return 2; +} + +static int dec_movem_mr(CPUCRISState *env, DisasContext *dc) +{ +    TCGv_i64 tmp[16]; +    TCGv tmp32; +    TCGv addr; +    int i; +    int nr = dc->op2 + 1; + +    LOG_DIS("movem [$r%u%s, $r%u\n", dc->op1, +            dc->postinc ? "+]" : "]", dc->op2); + +    addr = tcg_temp_new(); +    /* There are probably better ways of doing this.  */ +    cris_flush_cc_state(dc); +    for (i = 0; i < (nr >> 1); i++) { +        tmp[i] = tcg_temp_new_i64(); +        tcg_gen_addi_tl(addr, cpu_R[dc->op1], i * 8); +        gen_load64(dc, tmp[i], addr); +    } +    if (nr & 1) { +        tmp32 = tcg_temp_new_i32(); +        tcg_gen_addi_tl(addr, cpu_R[dc->op1], i * 8); +        gen_load(dc, tmp32, addr, 4, 0); +    } else { +        TCGV_UNUSED(tmp32); +    } +    tcg_temp_free(addr); + +    for (i = 0; i < (nr >> 1); i++) { +        tcg_gen_trunc_i64_i32(cpu_R[i * 2], tmp[i]); +        tcg_gen_shri_i64(tmp[i], tmp[i], 32); +        tcg_gen_trunc_i64_i32(cpu_R[i * 2 + 1], tmp[i]); +        tcg_temp_free_i64(tmp[i]); +    } +    if (nr & 1) { +        tcg_gen_mov_tl(cpu_R[dc->op2], tmp32); +        tcg_temp_free(tmp32); +    } + +    /* writeback the updated pointer value.  */ +    if (dc->postinc) { +        tcg_gen_addi_tl(cpu_R[dc->op1], cpu_R[dc->op1], nr * 4); +    } + +    /* gen_load might want to evaluate the previous insns flags.  */ +    cris_cc_mask(dc, 0); +    return 2; +} + +static int dec_movem_rm(CPUCRISState *env, DisasContext *dc) +{ +    TCGv tmp; +    TCGv addr; +    int i; + +    LOG_DIS("movem $r%u, [$r%u%s\n", dc->op2, dc->op1, +            dc->postinc ? "+]" : "]"); + +    cris_flush_cc_state(dc); + +    tmp = tcg_temp_new(); +    addr = tcg_temp_new(); +    tcg_gen_movi_tl(tmp, 4); +    tcg_gen_mov_tl(addr, cpu_R[dc->op1]); +    for (i = 0; i <= dc->op2; i++) { +        /* Displace addr.  */ +        /* Perform the store.  */ +        gen_store(dc, addr, cpu_R[i], 4); +        tcg_gen_add_tl(addr, addr, tmp); +    } +    if (dc->postinc) { +        tcg_gen_mov_tl(cpu_R[dc->op1], addr); +    } +    cris_cc_mask(dc, 0); +    tcg_temp_free(tmp); +    tcg_temp_free(addr); +    return 2; +} + +static int dec_move_rm(CPUCRISState *env, DisasContext *dc) +{ +    int memsize; + +    memsize = memsize_zz(dc); + +    LOG_DIS("move.%c $r%u, [$r%u]\n", +            memsize_char(memsize), dc->op2, dc->op1); + +    /* prepare store.  */ +    cris_flush_cc_state(dc); +    gen_store(dc, cpu_R[dc->op1], cpu_R[dc->op2], memsize); + +    if (dc->postinc) { +        tcg_gen_addi_tl(cpu_R[dc->op1], cpu_R[dc->op1], memsize); +    } +    cris_cc_mask(dc, 0); +    return 2; +} + +static int dec_lapcq(CPUCRISState *env, DisasContext *dc) +{ +    LOG_DIS("lapcq %x, $r%u\n", +            dc->pc + dc->op1*2, dc->op2); +    cris_cc_mask(dc, 0); +    tcg_gen_movi_tl(cpu_R[dc->op2], dc->pc + dc->op1 * 2); +    return 2; +} + +static int dec_lapc_im(CPUCRISState *env, DisasContext *dc) +{ +    unsigned int rd; +    int32_t imm; +    int32_t pc; + +    rd = dc->op2; + +    cris_cc_mask(dc, 0); +    imm = cris_fetch(env, dc, dc->pc + 2, 4, 0); +    LOG_DIS("lapc 0x%x, $r%u\n", imm + dc->pc, dc->op2); + +    pc = dc->pc; +    pc += imm; +    tcg_gen_movi_tl(cpu_R[rd], pc); +    return 6; +} + +/* Jump to special reg.  */ +static int dec_jump_p(CPUCRISState *env, DisasContext *dc) +{ +    LOG_DIS("jump $p%u\n", dc->op2); + +    if (dc->op2 == PR_CCS) { +        cris_evaluate_flags(dc); +    } +    t_gen_mov_TN_preg(env_btarget, dc->op2); +    /* rete will often have low bit set to indicate delayslot.  */ +    tcg_gen_andi_tl(env_btarget, env_btarget, ~1); +    cris_cc_mask(dc, 0); +    cris_prepare_jmp(dc, JMP_INDIRECT); +    return 2; +} + +/* Jump and save.  */ +static int dec_jas_r(CPUCRISState *env, DisasContext *dc) +{ +    LOG_DIS("jas $r%u, $p%u\n", dc->op1, dc->op2); +    cris_cc_mask(dc, 0); +    /* Store the return address in Pd.  */ +    tcg_gen_mov_tl(env_btarget, cpu_R[dc->op1]); +    if (dc->op2 > 15) { +        abort(); +    } +    t_gen_mov_preg_TN(dc, dc->op2, tcg_const_tl(dc->pc + 4)); + +    cris_prepare_jmp(dc, JMP_INDIRECT); +    return 2; +} + +static int dec_jas_im(CPUCRISState *env, DisasContext *dc) +{ +    uint32_t imm; + +    imm = cris_fetch(env, dc, dc->pc + 2, 4, 0); + +    LOG_DIS("jas 0x%x\n", imm); +    cris_cc_mask(dc, 0); +    /* Store the return address in Pd.  */ +    t_gen_mov_preg_TN(dc, dc->op2, tcg_const_tl(dc->pc + 8)); + +    dc->jmp_pc = imm; +    cris_prepare_jmp(dc, JMP_DIRECT); +    return 6; +} + +static int dec_jasc_im(CPUCRISState *env, DisasContext *dc) +{ +    uint32_t imm; + +    imm = cris_fetch(env, dc, dc->pc + 2, 4, 0); + +    LOG_DIS("jasc 0x%x\n", imm); +    cris_cc_mask(dc, 0); +    /* Store the return address in Pd.  */ +    t_gen_mov_preg_TN(dc, dc->op2, tcg_const_tl(dc->pc + 8 + 4)); + +    dc->jmp_pc = imm; +    cris_prepare_jmp(dc, JMP_DIRECT); +    return 6; +} + +static int dec_jasc_r(CPUCRISState *env, DisasContext *dc) +{ +    LOG_DIS("jasc_r $r%u, $p%u\n", dc->op1, dc->op2); +    cris_cc_mask(dc, 0); +    /* Store the return address in Pd.  */ +    tcg_gen_mov_tl(env_btarget, cpu_R[dc->op1]); +    t_gen_mov_preg_TN(dc, dc->op2, tcg_const_tl(dc->pc + 4 + 4)); +    cris_prepare_jmp(dc, JMP_INDIRECT); +    return 2; +} + +static int dec_bcc_im(CPUCRISState *env, DisasContext *dc) +{ +    int32_t offset; +    uint32_t cond = dc->op2; + +    offset = cris_fetch(env, dc, dc->pc + 2, 2, 1); + +    LOG_DIS("b%s %d pc=%x dst=%x\n", +            cc_name(cond), offset, +            dc->pc, dc->pc + offset); + +    cris_cc_mask(dc, 0); +    /* op2 holds the condition-code.  */ +    cris_prepare_cc_branch(dc, offset, cond); +    return 4; +} + +static int dec_bas_im(CPUCRISState *env, DisasContext *dc) +{ +    int32_t simm; + +    simm = cris_fetch(env, dc, dc->pc + 2, 4, 0); + +    LOG_DIS("bas 0x%x, $p%u\n", dc->pc + simm, dc->op2); +    cris_cc_mask(dc, 0); +    /* Store the return address in Pd.  */ +    t_gen_mov_preg_TN(dc, dc->op2, tcg_const_tl(dc->pc + 8)); + +    dc->jmp_pc = dc->pc + simm; +    cris_prepare_jmp(dc, JMP_DIRECT); +    return 6; +} + +static int dec_basc_im(CPUCRISState *env, DisasContext *dc) +{ +    int32_t simm; +    simm = cris_fetch(env, dc, dc->pc + 2, 4, 0); + +    LOG_DIS("basc 0x%x, $p%u\n", dc->pc + simm, dc->op2); +    cris_cc_mask(dc, 0); +    /* Store the return address in Pd.  */ +    t_gen_mov_preg_TN(dc, dc->op2, tcg_const_tl(dc->pc + 12)); + +    dc->jmp_pc = dc->pc + simm; +    cris_prepare_jmp(dc, JMP_DIRECT); +    return 6; +} + +static int dec_rfe_etc(CPUCRISState *env, DisasContext *dc) +{ +    cris_cc_mask(dc, 0); + +    if (dc->op2 == 15) { +        tcg_gen_st_i32(tcg_const_i32(1), cpu_env, +                       -offsetof(CRISCPU, env) + offsetof(CPUState, halted)); +        tcg_gen_movi_tl(env_pc, dc->pc + 2); +        t_gen_raise_exception(EXCP_HLT); +        return 2; +    } + +    switch (dc->op2 & 7) { +    case 2: +        /* rfe.  */ +        LOG_DIS("rfe\n"); +        cris_evaluate_flags(dc); +        gen_helper_rfe(cpu_env); +        dc->is_jmp = DISAS_UPDATE; +        break; +    case 5: +        /* rfn.  */ +        LOG_DIS("rfn\n"); +        cris_evaluate_flags(dc); +        gen_helper_rfn(cpu_env); +        dc->is_jmp = DISAS_UPDATE; +        break; +    case 6: +        LOG_DIS("break %d\n", dc->op1); +        cris_evaluate_flags(dc); +        /* break.  */ +        tcg_gen_movi_tl(env_pc, dc->pc + 2); + +        /* Breaks start at 16 in the exception vector.  */ +        t_gen_mov_env_TN(trap_vector, +                tcg_const_tl(dc->op1 + 16)); +        t_gen_raise_exception(EXCP_BREAK); +        dc->is_jmp = DISAS_UPDATE; +        break; +    default: +        printf("op2=%x\n", dc->op2); +        BUG(); +        break; + +    } +    return 2; +} + +static int dec_ftag_fidx_d_m(CPUCRISState *env, DisasContext *dc) +{ +    return 2; +} + +static int dec_ftag_fidx_i_m(CPUCRISState *env, DisasContext *dc) +{ +    return 2; +} + +static int dec_null(CPUCRISState *env, DisasContext *dc) +{ +    printf("unknown insn pc=%x opc=%x op1=%x op2=%x\n", +        dc->pc, dc->opcode, dc->op1, dc->op2); +    fflush(NULL); +    BUG(); +    return 2; +} + +static struct decoder_info { +    struct { +        uint32_t bits; +        uint32_t mask; +    }; +    int (*dec)(CPUCRISState *env, DisasContext *dc); +} decinfo[] = { +    /* Order matters here.  */ +    {DEC_MOVEQ, dec_moveq}, +    {DEC_BTSTQ, dec_btstq}, +    {DEC_CMPQ, dec_cmpq}, +    {DEC_ADDOQ, dec_addoq}, +    {DEC_ADDQ, dec_addq}, +    {DEC_SUBQ, dec_subq}, +    {DEC_ANDQ, dec_andq}, +    {DEC_ORQ, dec_orq}, +    {DEC_ASRQ, dec_asrq}, +    {DEC_LSLQ, dec_lslq}, +    {DEC_LSRQ, dec_lsrq}, +    {DEC_BCCQ, dec_bccq}, + +    {DEC_BCC_IM, dec_bcc_im}, +    {DEC_JAS_IM, dec_jas_im}, +    {DEC_JAS_R, dec_jas_r}, +    {DEC_JASC_IM, dec_jasc_im}, +    {DEC_JASC_R, dec_jasc_r}, +    {DEC_BAS_IM, dec_bas_im}, +    {DEC_BASC_IM, dec_basc_im}, +    {DEC_JUMP_P, dec_jump_p}, +    {DEC_LAPC_IM, dec_lapc_im}, +    {DEC_LAPCQ, dec_lapcq}, + +    {DEC_RFE_ETC, dec_rfe_etc}, +    {DEC_ADDC_MR, dec_addc_mr}, + +    {DEC_MOVE_MP, dec_move_mp}, +    {DEC_MOVE_PM, dec_move_pm}, +    {DEC_MOVEM_MR, dec_movem_mr}, +    {DEC_MOVEM_RM, dec_movem_rm}, +    {DEC_MOVE_PR, dec_move_pr}, +    {DEC_SCC_R, dec_scc_r}, +    {DEC_SETF, dec_setclrf}, +    {DEC_CLEARF, dec_setclrf}, + +    {DEC_MOVE_SR, dec_move_sr}, +    {DEC_MOVE_RP, dec_move_rp}, +    {DEC_SWAP_R, dec_swap_r}, +    {DEC_ABS_R, dec_abs_r}, +    {DEC_LZ_R, dec_lz_r}, +    {DEC_MOVE_RS, dec_move_rs}, +    {DEC_BTST_R, dec_btst_r}, +    {DEC_ADDC_R, dec_addc_r}, + +    {DEC_DSTEP_R, dec_dstep_r}, +    {DEC_XOR_R, dec_xor_r}, +    {DEC_MCP_R, dec_mcp_r}, +    {DEC_CMP_R, dec_cmp_r}, + +    {DEC_ADDI_R, dec_addi_r}, +    {DEC_ADDI_ACR, dec_addi_acr}, + +    {DEC_ADD_R, dec_add_r}, +    {DEC_SUB_R, dec_sub_r}, + +    {DEC_ADDU_R, dec_addu_r}, +    {DEC_ADDS_R, dec_adds_r}, +    {DEC_SUBU_R, dec_subu_r}, +    {DEC_SUBS_R, dec_subs_r}, +    {DEC_LSL_R, dec_lsl_r}, + +    {DEC_AND_R, dec_and_r}, +    {DEC_OR_R, dec_or_r}, +    {DEC_BOUND_R, dec_bound_r}, +    {DEC_ASR_R, dec_asr_r}, +    {DEC_LSR_R, dec_lsr_r}, + +    {DEC_MOVU_R, dec_movu_r}, +    {DEC_MOVS_R, dec_movs_r}, +    {DEC_NEG_R, dec_neg_r}, +    {DEC_MOVE_R, dec_move_r}, + +    {DEC_FTAG_FIDX_I_M, dec_ftag_fidx_i_m}, +    {DEC_FTAG_FIDX_D_M, dec_ftag_fidx_d_m}, + +    {DEC_MULS_R, dec_muls_r}, +    {DEC_MULU_R, dec_mulu_r}, + +    {DEC_ADDU_M, dec_addu_m}, +    {DEC_ADDS_M, dec_adds_m}, +    {DEC_SUBU_M, dec_subu_m}, +    {DEC_SUBS_M, dec_subs_m}, + +    {DEC_CMPU_M, dec_cmpu_m}, +    {DEC_CMPS_M, dec_cmps_m}, +    {DEC_MOVU_M, dec_movu_m}, +    {DEC_MOVS_M, dec_movs_m}, + +    {DEC_CMP_M, dec_cmp_m}, +    {DEC_ADDO_M, dec_addo_m}, +    {DEC_BOUND_M, dec_bound_m}, +    {DEC_ADD_M, dec_add_m}, +    {DEC_SUB_M, dec_sub_m}, +    {DEC_AND_M, dec_and_m}, +    {DEC_OR_M, dec_or_m}, +    {DEC_MOVE_RM, dec_move_rm}, +    {DEC_TEST_M, dec_test_m}, +    {DEC_MOVE_MR, dec_move_mr}, + +    {{0, 0}, dec_null} +}; + +static unsigned int crisv32_decoder(CPUCRISState *env, DisasContext *dc) +{ +    int insn_len = 2; +    int i; + +    if (unlikely(qemu_loglevel_mask(CPU_LOG_TB_OP | CPU_LOG_TB_OP_OPT))) { +        tcg_gen_debug_insn_start(dc->pc); +        } + +    /* Load a halfword onto the instruction register.  */ +        dc->ir = cris_fetch(env, dc, dc->pc, 2, 0); + +    /* Now decode it.  */ +    dc->opcode   = EXTRACT_FIELD(dc->ir, 4, 11); +    dc->op1      = EXTRACT_FIELD(dc->ir, 0, 3); +    dc->op2      = EXTRACT_FIELD(dc->ir, 12, 15); +    dc->zsize    = EXTRACT_FIELD(dc->ir, 4, 4); +    dc->zzsize   = EXTRACT_FIELD(dc->ir, 4, 5); +    dc->postinc  = EXTRACT_FIELD(dc->ir, 10, 10); + +    /* Large switch for all insns.  */ +    for (i = 0; i < ARRAY_SIZE(decinfo); i++) { +        if ((dc->opcode & decinfo[i].mask) == decinfo[i].bits) { +            insn_len = decinfo[i].dec(env, dc); +            break; +        } +    } + +#if !defined(CONFIG_USER_ONLY) +    /* Single-stepping ?  */ +    if (dc->tb_flags & S_FLAG) { +        TCGLabel *l1 = gen_new_label(); +        tcg_gen_brcondi_tl(TCG_COND_NE, cpu_PR[PR_SPC], dc->pc, l1); +        /* We treat SPC as a break with an odd trap vector.  */ +        cris_evaluate_flags(dc); +        t_gen_mov_env_TN(trap_vector, tcg_const_tl(3)); +        tcg_gen_movi_tl(env_pc, dc->pc + insn_len); +        tcg_gen_movi_tl(cpu_PR[PR_SPC], dc->pc + insn_len); +        t_gen_raise_exception(EXCP_BREAK); +        gen_set_label(l1); +    } +#endif +    return insn_len; +} + +static void check_breakpoint(CPUCRISState *env, DisasContext *dc) +{ +    CPUState *cs = CPU(cris_env_get_cpu(env)); +    CPUBreakpoint *bp; + +    if (unlikely(!QTAILQ_EMPTY(&cs->breakpoints))) { +        QTAILQ_FOREACH(bp, &cs->breakpoints, entry) { +            if (bp->pc == dc->pc) { +                cris_evaluate_flags(dc); +                tcg_gen_movi_tl(env_pc, dc->pc); +                t_gen_raise_exception(EXCP_DEBUG); +                dc->is_jmp = DISAS_UPDATE; +            } +        } +    } +} + +#include "translate_v10.c" + +/* + * Delay slots on QEMU/CRIS. + * + * If an exception hits on a delayslot, the core will let ERP (the Exception + * Return Pointer) point to the branch (the previous) insn and set the lsb to + * to give SW a hint that the exception actually hit on the dslot. + * + * CRIS expects all PC addresses to be 16-bit aligned. The lsb is ignored by + * the core and any jmp to an odd addresses will mask off that lsb. It is  + * simply there to let sw know there was an exception on a dslot. + * + * When the software returns from an exception, the branch will re-execute. + * On QEMU care needs to be taken when a branch+delayslot sequence is broken + * and the branch and delayslot dont share pages. + * + * The TB contaning the branch insn will set up env->btarget and evaluate  + * env->btaken. When the translation loop exits we will note that the branch  + * sequence is broken and let env->dslot be the size of the branch insn (those + * vary in length). + * + * The TB contaning the delayslot will have the PC of its real insn (i.e no lsb + * set). It will also expect to have env->dslot setup with the size of the  + * delay slot so that env->pc - env->dslot point to the branch insn. This TB  + * will execute the dslot and take the branch, either to btarget or just one  + * insn ahead. + * + * When exceptions occur, we check for env->dslot in do_interrupt to detect  + * broken branch sequences and setup $erp accordingly (i.e let it point to the + * branch and set lsb). Then env->dslot gets cleared so that the exception  + * handler can enter. When returning from exceptions (jump $erp) the lsb gets + * masked off and we will reexecute the branch insn. + * + */ + +/* generate intermediate code for basic block 'tb'.  */ +static inline void +gen_intermediate_code_internal(CRISCPU *cpu, TranslationBlock *tb, +                               bool search_pc) +{ +    CPUState *cs = CPU(cpu); +    CPUCRISState *env = &cpu->env; +    uint32_t pc_start; +    unsigned int insn_len; +    int j, lj; +    struct DisasContext ctx; +    struct DisasContext *dc = &ctx; +    uint32_t next_page_start; +    target_ulong npc; +    int num_insns; +    int max_insns; + +    if (env->pregs[PR_VR] == 32) { +        dc->decoder = crisv32_decoder; +        dc->clear_locked_irq = 0; +    } else { +        dc->decoder = crisv10_decoder; +        dc->clear_locked_irq = 1; +    } + +    /* Odd PC indicates that branch is rexecuting due to exception in the +     * delayslot, like in real hw. +     */ +    pc_start = tb->pc & ~1; +    dc->cpu = cpu; +    dc->tb = tb; + +    dc->is_jmp = DISAS_NEXT; +    dc->ppc = pc_start; +    dc->pc = pc_start; +    dc->singlestep_enabled = cs->singlestep_enabled; +    dc->flags_uptodate = 1; +    dc->flagx_known = 1; +    dc->flags_x = tb->flags & X_FLAG; +    dc->cc_x_uptodate = 0; +    dc->cc_mask = 0; +    dc->update_cc = 0; +    dc->clear_prefix = 0; + +    cris_update_cc_op(dc, CC_OP_FLAGS, 4); +    dc->cc_size_uptodate = -1; + +    /* Decode TB flags.  */ +    dc->tb_flags = tb->flags & (S_FLAG | P_FLAG | U_FLAG \ +            | X_FLAG | PFIX_FLAG); +    dc->delayed_branch = !!(tb->flags & 7); +    if (dc->delayed_branch) { +        dc->jmp = JMP_INDIRECT; +    } else { +        dc->jmp = JMP_NOJMP; +    } + +    dc->cpustate_changed = 0; + +    if (qemu_loglevel_mask(CPU_LOG_TB_IN_ASM)) { +        qemu_log( +                "srch=%d pc=%x %x flg=%" PRIx64 " bt=%x ds=%u ccs=%x\n" +                "pid=%x usp=%x\n" +                "%x.%x.%x.%x\n" +                "%x.%x.%x.%x\n" +                "%x.%x.%x.%x\n" +                "%x.%x.%x.%x\n", +                search_pc, dc->pc, dc->ppc, +                (uint64_t)tb->flags, +                env->btarget, (unsigned)tb->flags & 7, +                env->pregs[PR_CCS], +                env->pregs[PR_PID], env->pregs[PR_USP], +                env->regs[0], env->regs[1], env->regs[2], env->regs[3], +                env->regs[4], env->regs[5], env->regs[6], env->regs[7], +                env->regs[8], env->regs[9], +                env->regs[10], env->regs[11], +                env->regs[12], env->regs[13], +                env->regs[14], env->regs[15]); +        qemu_log("--------------\n"); +        qemu_log("IN: %s\n", lookup_symbol(pc_start)); +    } + +    next_page_start = (pc_start & TARGET_PAGE_MASK) + TARGET_PAGE_SIZE; +    lj = -1; +    num_insns = 0; +    max_insns = tb->cflags & CF_COUNT_MASK; +    if (max_insns == 0) { +        max_insns = CF_COUNT_MASK; +    } + +    gen_tb_start(tb); +    do { +        check_breakpoint(env, dc); + +        if (search_pc) { +            j = tcg_op_buf_count(); +            if (lj < j) { +                lj++; +                while (lj < j) { +                    tcg_ctx.gen_opc_instr_start[lj++] = 0; +                } +            } +            if (dc->delayed_branch == 1) { +                tcg_ctx.gen_opc_pc[lj] = dc->ppc | 1; +            } else { +                tcg_ctx.gen_opc_pc[lj] = dc->pc; +            } +            tcg_ctx.gen_opc_instr_start[lj] = 1; +            tcg_ctx.gen_opc_icount[lj] = num_insns; +        } + +        /* Pretty disas.  */ +        LOG_DIS("%8.8x:\t", dc->pc); + +        if (num_insns + 1 == max_insns && (tb->cflags & CF_LAST_IO)) { +            gen_io_start(); +        } +        dc->clear_x = 1; + +        insn_len = dc->decoder(env, dc); +        dc->ppc = dc->pc; +        dc->pc += insn_len; +        if (dc->clear_x) { +            cris_clear_x_flag(dc); +        } + +        num_insns++; +        /* Check for delayed branches here. If we do it before +           actually generating any host code, the simulator will just +           loop doing nothing for on this program location.  */ +        if (dc->delayed_branch) { +            dc->delayed_branch--; +            if (dc->delayed_branch == 0) { +                if (tb->flags & 7) { +                    t_gen_mov_env_TN(dslot, tcg_const_tl(0)); +                } +                if (dc->cpustate_changed || !dc->flagx_known +                    || (dc->flags_x != (tb->flags & X_FLAG))) { +                    cris_store_direct_jmp(dc); +                } + +                if (dc->clear_locked_irq) { +                    dc->clear_locked_irq = 0; +                    t_gen_mov_env_TN(locked_irq, tcg_const_tl(0)); +                } + +                if (dc->jmp == JMP_DIRECT_CC) { +                    TCGLabel *l1 = gen_new_label(); +                    cris_evaluate_flags(dc); + +                    /* Conditional jmp.  */ +                    tcg_gen_brcondi_tl(TCG_COND_EQ, +                               env_btaken, 0, l1); +                    gen_goto_tb(dc, 1, dc->jmp_pc); +                    gen_set_label(l1); +                    gen_goto_tb(dc, 0, dc->pc); +                    dc->is_jmp = DISAS_TB_JUMP; +                    dc->jmp = JMP_NOJMP; +                } else if (dc->jmp == JMP_DIRECT) { +                    cris_evaluate_flags(dc); +                    gen_goto_tb(dc, 0, dc->jmp_pc); +                    dc->is_jmp = DISAS_TB_JUMP; +                    dc->jmp = JMP_NOJMP; +                } else { +                    t_gen_cc_jmp(env_btarget, tcg_const_tl(dc->pc)); +                    dc->is_jmp = DISAS_JUMP; +                } +                break; +            } +        } + +        /* If we are rexecuting a branch due to exceptions on +           delay slots dont break.  */ +        if (!(tb->pc & 1) && cs->singlestep_enabled) { +            break; +        } +    } while (!dc->is_jmp && !dc->cpustate_changed +            && !tcg_op_buf_full() +            && !singlestep +            && (dc->pc < next_page_start) +            && num_insns < max_insns); + +    if (dc->clear_locked_irq) { +        t_gen_mov_env_TN(locked_irq, tcg_const_tl(0)); +    } + +    npc = dc->pc; + +        if (tb->cflags & CF_LAST_IO) +            gen_io_end(); +    /* Force an update if the per-tb cpu state has changed.  */ +    if (dc->is_jmp == DISAS_NEXT +        && (dc->cpustate_changed || !dc->flagx_known +        || (dc->flags_x != (tb->flags & X_FLAG)))) { +        dc->is_jmp = DISAS_UPDATE; +        tcg_gen_movi_tl(env_pc, npc); +    } +    /* Broken branch+delayslot sequence.  */ +    if (dc->delayed_branch == 1) { +        /* Set env->dslot to the size of the branch insn.  */ +        t_gen_mov_env_TN(dslot, tcg_const_tl(dc->pc - dc->ppc)); +        cris_store_direct_jmp(dc); +    } + +    cris_evaluate_flags(dc); + +    if (unlikely(cs->singlestep_enabled)) { +        if (dc->is_jmp == DISAS_NEXT) { +            tcg_gen_movi_tl(env_pc, npc); +        } +        t_gen_raise_exception(EXCP_DEBUG); +    } else { +        switch (dc->is_jmp) { +        case DISAS_NEXT: +            gen_goto_tb(dc, 1, npc); +            break; +        default: +        case DISAS_JUMP: +        case DISAS_UPDATE: +            /* indicate that the hash table must be used +                   to find the next TB */ +            tcg_gen_exit_tb(0); +            break; +        case DISAS_SWI: +        case DISAS_TB_JUMP: +            /* nothing more to generate */ +            break; +        } +    } +    gen_tb_end(tb, num_insns); + +    if (search_pc) { +        j = tcg_op_buf_count(); +        lj++; +        while (lj <= j) { +            tcg_ctx.gen_opc_instr_start[lj++] = 0; +        } +    } else { +        tb->size = dc->pc - pc_start; +        tb->icount = num_insns; +    } + +#ifdef DEBUG_DISAS +#if !DISAS_CRIS +    if (qemu_loglevel_mask(CPU_LOG_TB_IN_ASM)) { +        log_target_disas(cs, pc_start, dc->pc - pc_start, +                         env->pregs[PR_VR]); +        qemu_log("\nisize=%d osize=%d\n", +                 dc->pc - pc_start, tcg_op_buf_count()); +    } +#endif +#endif +} + +void gen_intermediate_code (CPUCRISState *env, struct TranslationBlock *tb) +{ +    gen_intermediate_code_internal(cris_env_get_cpu(env), tb, false); +} + +void gen_intermediate_code_pc (CPUCRISState *env, struct TranslationBlock *tb) +{ +    gen_intermediate_code_internal(cris_env_get_cpu(env), tb, true); +} + +void cris_cpu_dump_state(CPUState *cs, FILE *f, fprintf_function cpu_fprintf, +                         int flags) +{ +    CRISCPU *cpu = CRIS_CPU(cs); +    CPUCRISState *env = &cpu->env; +    int i; +    uint32_t srs; + +    if (!env || !f) { +        return; +    } + +    cpu_fprintf(f, "PC=%x CCS=%x btaken=%d btarget=%x\n" +            "cc_op=%d cc_src=%d cc_dest=%d cc_result=%x cc_mask=%x\n", +            env->pc, env->pregs[PR_CCS], env->btaken, env->btarget, +            env->cc_op, +            env->cc_src, env->cc_dest, env->cc_result, env->cc_mask); + + +    for (i = 0; i < 16; i++) { +        cpu_fprintf(f, "%s=%8.8x ", regnames[i], env->regs[i]); +        if ((i + 1) % 4 == 0) { +            cpu_fprintf(f, "\n"); +        } +    } +    cpu_fprintf(f, "\nspecial regs:\n"); +    for (i = 0; i < 16; i++) { +        cpu_fprintf(f, "%s=%8.8x ", pregnames[i], env->pregs[i]); +        if ((i + 1) % 4 == 0) { +            cpu_fprintf(f, "\n"); +        } +    } +    srs = env->pregs[PR_SRS]; +    cpu_fprintf(f, "\nsupport function regs bank %x:\n", srs); +    if (srs < ARRAY_SIZE(env->sregs)) { +        for (i = 0; i < 16; i++) { +            cpu_fprintf(f, "s%2.2d=%8.8x ", +                    i, env->sregs[srs][i]); +            if ((i + 1) % 4 == 0) { +                cpu_fprintf(f, "\n"); +            } +        } +    } +    cpu_fprintf(f, "\n\n"); + +} + +void cris_initialize_tcg(void) +{ +    int i; + +    cpu_env = tcg_global_reg_new_ptr(TCG_AREG0, "env"); +    cc_x = tcg_global_mem_new(TCG_AREG0, +                              offsetof(CPUCRISState, cc_x), "cc_x"); +    cc_src = tcg_global_mem_new(TCG_AREG0, +                                offsetof(CPUCRISState, cc_src), "cc_src"); +    cc_dest = tcg_global_mem_new(TCG_AREG0, +                                 offsetof(CPUCRISState, cc_dest), +                                 "cc_dest"); +    cc_result = tcg_global_mem_new(TCG_AREG0, +                                   offsetof(CPUCRISState, cc_result), +                                   "cc_result"); +    cc_op = tcg_global_mem_new(TCG_AREG0, +                               offsetof(CPUCRISState, cc_op), "cc_op"); +    cc_size = tcg_global_mem_new(TCG_AREG0, +                                 offsetof(CPUCRISState, cc_size), +                                 "cc_size"); +    cc_mask = tcg_global_mem_new(TCG_AREG0, +                                 offsetof(CPUCRISState, cc_mask), +                                 "cc_mask"); + +    env_pc = tcg_global_mem_new(TCG_AREG0, +                                offsetof(CPUCRISState, pc), +                                "pc"); +    env_btarget = tcg_global_mem_new(TCG_AREG0, +                                     offsetof(CPUCRISState, btarget), +                                     "btarget"); +    env_btaken = tcg_global_mem_new(TCG_AREG0, +                                    offsetof(CPUCRISState, btaken), +                                    "btaken"); +    for (i = 0; i < 16; i++) { +        cpu_R[i] = tcg_global_mem_new(TCG_AREG0, +                                      offsetof(CPUCRISState, regs[i]), +                                      regnames[i]); +    } +    for (i = 0; i < 16; i++) { +        cpu_PR[i] = tcg_global_mem_new(TCG_AREG0, +                                       offsetof(CPUCRISState, pregs[i]), +                                       pregnames[i]); +    } +} + +void restore_state_to_opc(CPUCRISState *env, TranslationBlock *tb, int pc_pos) +{ +    env->pc = tcg_ctx.gen_opc_pc[pc_pos]; +} diff --git a/target-cris/translate_v10.c b/target-cris/translate_v10.c new file mode 100644 index 00000000..b742c4cd --- /dev/null +++ b/target-cris/translate_v10.c @@ -0,0 +1,1301 @@ +/* + *  CRISv10 emulation for qemu: main translation routines. + * + *  Copyright (c) 2010 AXIS Communications AB + *  Written by Edgar E. Iglesias. + * + * This library is free software; you can redistribute it and/or + * modify it under the terms of the GNU Lesser General Public + * License as published by the Free Software Foundation; either + * version 2 of the License, or (at your option) any later version. + * + * This library is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this library; if not, see <http://www.gnu.org/licenses/>. + */ + +#include "crisv10-decode.h" + +static const char *regnames_v10[] = +{ +    "$r0", "$r1", "$r2", "$r3", +    "$r4", "$r5", "$r6", "$r7", +    "$r8", "$r9", "$r10", "$r11", +    "$r12", "$r13", "$sp", "$pc", +}; + +static const char *pregnames_v10[] = +{ +    "$bz", "$vr", "$p2", "$p3", +    "$wz", "$ccr", "$p6-prefix", "$mof", +    "$dz", "$ibr", "$irp", "$srp", +    "$bar", "$dccr", "$brp", "$usp", +}; + +/* We need this table to handle preg-moves with implicit width.  */ +static int preg_sizes_v10[] = { +    1, /* bz.  */ +    1, /* vr.  */ +    1, /* pid. */ +    1, /* srs. */ +    2, /* wz.  */ +    2, 2, 4, +    4, 4, 4, 4, +    4, 4, 4, 4, +}; + +static inline int dec10_size(unsigned int size) +{ +    size++; +    if (size == 3) +        size++; +    return size; +} + +static inline void cris_illegal_insn(DisasContext *dc) +{ +    qemu_log("illegal insn at pc=%x\n", dc->pc); +    t_gen_raise_exception(EXCP_BREAK); +} + +static void gen_store_v10_conditional(DisasContext *dc, TCGv addr, TCGv val, +                       unsigned int size, int mem_index) +{ +    TCGLabel *l1 = gen_new_label(); +    TCGv taddr = tcg_temp_local_new(); +    TCGv tval = tcg_temp_local_new(); +    TCGv t1 = tcg_temp_local_new(); +    dc->postinc = 0; +    cris_evaluate_flags(dc); + +    tcg_gen_mov_tl(taddr, addr); +    tcg_gen_mov_tl(tval, val); + +    /* Store only if F flag isn't set */ +    tcg_gen_andi_tl(t1, cpu_PR[PR_CCS], F_FLAG_V10); +    tcg_gen_brcondi_tl(TCG_COND_NE, t1, 0, l1); +    if (size == 1) { +        tcg_gen_qemu_st8(tval, taddr, mem_index); +    } else if (size == 2) { +        tcg_gen_qemu_st16(tval, taddr, mem_index); +    } else { +        tcg_gen_qemu_st32(tval, taddr, mem_index); +    } +    gen_set_label(l1); +    tcg_gen_shri_tl(t1, t1, 1);  /* shift F to P position */ +    tcg_gen_or_tl(cpu_PR[PR_CCS], cpu_PR[PR_CCS], t1); /*P=F*/ +    tcg_temp_free(t1); +    tcg_temp_free(tval); +    tcg_temp_free(taddr); +} + +static void gen_store_v10(DisasContext *dc, TCGv addr, TCGv val, +                       unsigned int size) +{ +    int mem_index = cpu_mmu_index(&dc->cpu->env); + +    /* If we get a fault on a delayslot we must keep the jmp state in +       the cpu-state to be able to re-execute the jmp.  */ +    if (dc->delayed_branch == 1) { +        cris_store_direct_jmp(dc); +    } + +    /* Conditional writes. We only support the kind were X is known +       at translation time.  */ +    if (dc->flagx_known && dc->flags_x) { +        gen_store_v10_conditional(dc, addr, val, size, mem_index); +        return; +    } + +    if (size == 1) { +        tcg_gen_qemu_st8(val, addr, mem_index); +    } else if (size == 2) { +        tcg_gen_qemu_st16(val, addr, mem_index); +    } else { +        tcg_gen_qemu_st32(val, addr, mem_index); +    } +} + + +/* Prefix flag and register are used to handle the more complex +   addressing modes.  */ +static void cris_set_prefix(DisasContext *dc) +{ +    dc->clear_prefix = 0; +    dc->tb_flags |= PFIX_FLAG; +    tcg_gen_ori_tl(cpu_PR[PR_CCS], cpu_PR[PR_CCS], PFIX_FLAG); + +    /* prefix insns dont clear the x flag.  */ +    dc->clear_x = 0; +    cris_lock_irq(dc); +} + +static void crisv10_prepare_memaddr(DisasContext *dc, +                                    TCGv addr, unsigned int size) +{ +    if (dc->tb_flags & PFIX_FLAG) { +        tcg_gen_mov_tl(addr, cpu_PR[PR_PREFIX]); +    } else { +        tcg_gen_mov_tl(addr, cpu_R[dc->src]); +    } +} + +static unsigned int crisv10_post_memaddr(DisasContext *dc, unsigned int size) +{ +    unsigned int insn_len = 0; + +    if (dc->tb_flags & PFIX_FLAG) { +        if (dc->mode == CRISV10_MODE_AUTOINC) { +            tcg_gen_mov_tl(cpu_R[dc->src], cpu_PR[PR_PREFIX]); +        } +    } else { +        if (dc->mode == CRISV10_MODE_AUTOINC) { +            if (dc->src == 15) { +                insn_len += size & ~1; +            } else { +                tcg_gen_addi_tl(cpu_R[dc->src], cpu_R[dc->src], size); +            } +        } +    } +    return insn_len; +} + +static int dec10_prep_move_m(CPUCRISState *env, DisasContext *dc, +                             int s_ext, int memsize, TCGv dst) +{ +    unsigned int rs; +    uint32_t imm; +    int is_imm; +    int insn_len = 0; + +    rs = dc->src; +    is_imm = rs == 15 && !(dc->tb_flags & PFIX_FLAG); +    LOG_DIS("rs=%d rd=%d is_imm=%d mode=%d pfix=%d\n", +             rs, dc->dst, is_imm, dc->mode, dc->tb_flags & PFIX_FLAG); + +    /* Load [$rs] onto T1.  */ +    if (is_imm) { +        if (memsize != 4) { +            if (s_ext) { +                if (memsize == 1) +                    imm = cpu_ldsb_code(env, dc->pc + 2); +                else +                    imm = cpu_ldsw_code(env, dc->pc + 2); +            } else { +                if (memsize == 1) +                    imm = cpu_ldub_code(env, dc->pc + 2); +                else +                    imm = cpu_lduw_code(env, dc->pc + 2); +            } +        } else +            imm = cpu_ldl_code(env, dc->pc + 2); + +        tcg_gen_movi_tl(dst, imm); + +        if (dc->mode == CRISV10_MODE_AUTOINC) { +            insn_len += memsize; +            if (memsize == 1) +                insn_len++; +            tcg_gen_addi_tl(cpu_R[15], cpu_R[15], insn_len); +        } +    } else { +        TCGv addr; + +        addr = tcg_temp_new(); +        cris_flush_cc_state(dc); +        crisv10_prepare_memaddr(dc, addr, memsize); +        gen_load(dc, dst, addr, memsize, 0); +        if (s_ext) +            t_gen_sext(dst, dst, memsize); +        else +            t_gen_zext(dst, dst, memsize); +        insn_len += crisv10_post_memaddr(dc, memsize); +        tcg_temp_free(addr); +    } + +    if (dc->mode == CRISV10_MODE_INDIRECT && (dc->tb_flags & PFIX_FLAG)) { +        dc->dst = dc->src; +    } +    return insn_len; +} + +static unsigned int dec10_quick_imm(DisasContext *dc) +{ +    int32_t imm, simm; +    int op; + +    /* sign extend.  */ +    imm = dc->ir & ((1 << 6) - 1); +    simm = (int8_t) (imm << 2); +    simm >>= 2; +    switch (dc->opcode) { +        case CRISV10_QIMM_BDAP_R0: +        case CRISV10_QIMM_BDAP_R1: +        case CRISV10_QIMM_BDAP_R2: +        case CRISV10_QIMM_BDAP_R3: +            simm = (int8_t)dc->ir; +            LOG_DIS("bdap %d $r%d\n", simm, dc->dst); +            LOG_DIS("pc=%x mode=%x quickimm %d r%d r%d\n", +                     dc->pc, dc->mode, dc->opcode, dc->src, dc->dst); +            cris_set_prefix(dc); +            if (dc->dst == 15) { +                tcg_gen_movi_tl(cpu_PR[PR_PREFIX], dc->pc + 2 + simm); +            } else { +                tcg_gen_addi_tl(cpu_PR[PR_PREFIX], cpu_R[dc->dst], simm); +            } +            break; + +        case CRISV10_QIMM_MOVEQ: +            LOG_DIS("moveq %d, $r%d\n", simm, dc->dst); + +            cris_cc_mask(dc, CC_MASK_NZVC); +            cris_alu(dc, CC_OP_MOVE, cpu_R[dc->dst], +                     cpu_R[dc->dst], tcg_const_tl(simm), 4); +            break; +        case CRISV10_QIMM_CMPQ: +            LOG_DIS("cmpq %d, $r%d\n", simm, dc->dst); + +            cris_cc_mask(dc, CC_MASK_NZVC); +            cris_alu(dc, CC_OP_CMP, cpu_R[dc->dst], +                     cpu_R[dc->dst], tcg_const_tl(simm), 4); +            break; +        case CRISV10_QIMM_ADDQ: +            LOG_DIS("addq %d, $r%d\n", imm, dc->dst); + +            cris_cc_mask(dc, CC_MASK_NZVC); +            cris_alu(dc, CC_OP_ADD, cpu_R[dc->dst], +                     cpu_R[dc->dst], tcg_const_tl(imm), 4); +            break; +        case CRISV10_QIMM_ANDQ: +            LOG_DIS("andq %d, $r%d\n", simm, dc->dst); + +            cris_cc_mask(dc, CC_MASK_NZVC); +            cris_alu(dc, CC_OP_AND, cpu_R[dc->dst], +                     cpu_R[dc->dst], tcg_const_tl(simm), 4); +            break; +        case CRISV10_QIMM_ASHQ: +            LOG_DIS("ashq %d, $r%d\n", simm, dc->dst); + +            cris_cc_mask(dc, CC_MASK_NZVC); +            op = imm & (1 << 5); +            imm &= 0x1f; +            if (op) { +                cris_alu(dc, CC_OP_ASR, cpu_R[dc->dst], +                          cpu_R[dc->dst], tcg_const_tl(imm), 4); +            } else { +                /* BTST */ +                cris_update_cc_op(dc, CC_OP_FLAGS, 4); +                gen_helper_btst(cpu_PR[PR_CCS], cpu_env, cpu_R[dc->dst], +                           tcg_const_tl(imm), cpu_PR[PR_CCS]); +            } +            break; +        case CRISV10_QIMM_LSHQ: +            LOG_DIS("lshq %d, $r%d\n", simm, dc->dst); + +            op = CC_OP_LSL; +            if (imm & (1 << 5)) { +                op = CC_OP_LSR;  +            } +            imm &= 0x1f; +            cris_cc_mask(dc, CC_MASK_NZVC); +            cris_alu(dc, op, cpu_R[dc->dst], +                     cpu_R[dc->dst], tcg_const_tl(imm), 4); +            break; +        case CRISV10_QIMM_SUBQ: +            LOG_DIS("subq %d, $r%d\n", imm, dc->dst); + +            cris_cc_mask(dc, CC_MASK_NZVC); +            cris_alu(dc, CC_OP_SUB, cpu_R[dc->dst], +                     cpu_R[dc->dst], tcg_const_tl(imm), 4); +            break; +        case CRISV10_QIMM_ORQ: +            LOG_DIS("andq %d, $r%d\n", simm, dc->dst); + +            cris_cc_mask(dc, CC_MASK_NZVC); +            cris_alu(dc, CC_OP_OR, cpu_R[dc->dst], +                     cpu_R[dc->dst], tcg_const_tl(simm), 4); +            break; + +        case CRISV10_QIMM_BCC_R0: +        case CRISV10_QIMM_BCC_R1: +        case CRISV10_QIMM_BCC_R2: +        case CRISV10_QIMM_BCC_R3: +            imm = dc->ir & 0xff; +            /* bit 0 is a sign bit.  */ +            if (imm & 1) { +                imm |= 0xffffff00;   /* sign extend.  */ +                imm &= ~1;           /* get rid of the sign bit.  */ +            } +            imm += 2; +            LOG_DIS("b%s %d\n", cc_name(dc->cond), imm); + +            cris_cc_mask(dc, 0); +            cris_prepare_cc_branch(dc, imm, dc->cond);  +            break; + +        default: +            LOG_DIS("pc=%x mode=%x quickimm %d r%d r%d\n", +                     dc->pc, dc->mode, dc->opcode, dc->src, dc->dst); +            cpu_abort(CPU(dc->cpu), "Unhandled quickimm\n"); +            break; +    } +    return 2; +} + +static unsigned int dec10_setclrf(DisasContext *dc) +{ +    uint32_t flags; +    unsigned int set = ~dc->opcode & 1; + +    flags = EXTRACT_FIELD(dc->ir, 0, 3) +            | (EXTRACT_FIELD(dc->ir, 12, 15) << 4); +    LOG_DIS("%s set=%d flags=%x\n", __func__, set, flags); + + +    if (flags & X_FLAG) { +        dc->flagx_known = 1; +        if (set) +            dc->flags_x = X_FLAG; +        else +            dc->flags_x = 0; +    } + +    cris_evaluate_flags (dc); +    cris_update_cc_op(dc, CC_OP_FLAGS, 4); +    cris_update_cc_x(dc); +    tcg_gen_movi_tl(cc_op, dc->cc_op); + +    if (set) { +        tcg_gen_ori_tl(cpu_PR[PR_CCS], cpu_PR[PR_CCS], flags); +    } else { +        tcg_gen_andi_tl(cpu_PR[PR_CCS], cpu_PR[PR_CCS], +                        ~(flags|F_FLAG_V10|P_FLAG_V10)); +    } + +    dc->flags_uptodate = 1; +    dc->clear_x = 0; +    cris_lock_irq(dc); +    return 2; +} + +static inline void dec10_reg_prep_sext(DisasContext *dc, int size, int sext, +				       TCGv dd, TCGv ds, TCGv sd, TCGv ss) +{ +    if (sext) { +        t_gen_sext(dd, sd, size); +        t_gen_sext(ds, ss, size); +    } else { +        t_gen_zext(dd, sd, size); +        t_gen_zext(ds, ss, size); +    } +} + +static void dec10_reg_alu(DisasContext *dc, int op, int size, int sext) +{ +    TCGv t[2]; + +    t[0] = tcg_temp_new(); +    t[1] = tcg_temp_new(); +    dec10_reg_prep_sext(dc, size, sext, +                        t[0], t[1], cpu_R[dc->dst], cpu_R[dc->src]); + +    if (op == CC_OP_LSL || op == CC_OP_LSR || op == CC_OP_ASR) { +        tcg_gen_andi_tl(t[1], t[1], 63); +    } + +    assert(dc->dst != 15); +    cris_alu(dc, op, cpu_R[dc->dst], t[0], t[1], size); +    tcg_temp_free(t[0]); +    tcg_temp_free(t[1]); +} + +static void dec10_reg_bound(DisasContext *dc, int size) +{ +    TCGv t; + +    t = tcg_temp_local_new(); +    t_gen_zext(t, cpu_R[dc->src], size); +    cris_alu(dc, CC_OP_BOUND, cpu_R[dc->dst], cpu_R[dc->dst], t, 4); +    tcg_temp_free(t); +} + +static void dec10_reg_mul(DisasContext *dc, int size, int sext) +{ +    int op = sext ? CC_OP_MULS : CC_OP_MULU; +    TCGv t[2]; + +    t[0] = tcg_temp_new(); +    t[1] = tcg_temp_new(); +    dec10_reg_prep_sext(dc, size, sext, +                        t[0], t[1], cpu_R[dc->dst], cpu_R[dc->src]); + +    cris_alu(dc, op, cpu_R[dc->dst], t[0], t[1], 4); + +    tcg_temp_free(t[0]); +    tcg_temp_free(t[1]); +} + + +static void dec10_reg_movs(DisasContext *dc) +{ +    int size = (dc->size & 1) + 1; +    TCGv t; + +    LOG_DIS("movx.%d $r%d, $r%d\n", size, dc->src, dc->dst); +    cris_cc_mask(dc, CC_MASK_NZVC); + +    t = tcg_temp_new(); +    if (dc->ir & 32) +        t_gen_sext(t, cpu_R[dc->src], size); +    else +        t_gen_zext(t, cpu_R[dc->src], size); + +    cris_alu(dc, CC_OP_MOVE, cpu_R[dc->dst], cpu_R[dc->dst], t, 4); +    tcg_temp_free(t); +} + +static void dec10_reg_alux(DisasContext *dc, int op) +{ +    int size = (dc->size & 1) + 1; +    TCGv t; + +    LOG_DIS("movx.%d $r%d, $r%d\n", size, dc->src, dc->dst); +    cris_cc_mask(dc, CC_MASK_NZVC); + +    t = tcg_temp_new(); +    if (dc->ir & 32) +        t_gen_sext(t, cpu_R[dc->src], size); +    else +        t_gen_zext(t, cpu_R[dc->src], size); + +    cris_alu(dc, op, cpu_R[dc->dst], cpu_R[dc->dst], t, 4); +    tcg_temp_free(t); +} + +static void dec10_reg_mov_pr(DisasContext *dc) +{ +    LOG_DIS("move p%d r%d sz=%d\n", dc->dst, dc->src, preg_sizes_v10[dc->dst]); +    cris_lock_irq(dc); +    if (dc->src == 15) { +        tcg_gen_mov_tl(env_btarget, cpu_PR[dc->dst]); +        cris_prepare_jmp(dc, JMP_INDIRECT); +        return; +    } +    if (dc->dst == PR_CCS) { +        cris_evaluate_flags(dc);  +    } +    cris_alu(dc, CC_OP_MOVE, cpu_R[dc->src], +                 cpu_R[dc->src], cpu_PR[dc->dst], preg_sizes_v10[dc->dst]); +} + +static void dec10_reg_abs(DisasContext *dc) +{ +    TCGv t0; + +    LOG_DIS("abs $r%u, $r%u\n", dc->src, dc->dst); + +    assert(dc->dst != 15); +    t0 = tcg_temp_new(); +    tcg_gen_sari_tl(t0, cpu_R[dc->src], 31); +    tcg_gen_xor_tl(cpu_R[dc->dst], cpu_R[dc->src], t0); +    tcg_gen_sub_tl(t0, cpu_R[dc->dst], t0); + +    cris_alu(dc, CC_OP_MOVE, cpu_R[dc->dst], cpu_R[dc->dst], t0, 4); +    tcg_temp_free(t0); +} + +static void dec10_reg_swap(DisasContext *dc) +{ +    TCGv t0; + +    LOG_DIS("not $r%d, $r%d\n", dc->src, dc->dst); + +    cris_cc_mask(dc, CC_MASK_NZVC); +    t0 = tcg_temp_new(); +    tcg_gen_mov_tl(t0, cpu_R[dc->src]); +    if (dc->dst & 8) +        tcg_gen_not_tl(t0, t0); +    if (dc->dst & 4) +        t_gen_swapw(t0, t0); +    if (dc->dst & 2) +        t_gen_swapb(t0, t0); +    if (dc->dst & 1) +        t_gen_swapr(t0, t0); +    cris_alu(dc, CC_OP_MOVE, cpu_R[dc->src], cpu_R[dc->src], t0, 4); +    tcg_temp_free(t0); +} + +static void dec10_reg_scc(DisasContext *dc) +{ +    int cond = dc->dst; + +    LOG_DIS("s%s $r%u\n", cc_name(cond), dc->src); + +    if (cond != CC_A) +    { +        TCGLabel *l1 = gen_new_label(); +        gen_tst_cc (dc, cpu_R[dc->src], cond); +        tcg_gen_brcondi_tl(TCG_COND_EQ, cpu_R[dc->src], 0, l1); +        tcg_gen_movi_tl(cpu_R[dc->src], 1); +        gen_set_label(l1); +    } else { +        tcg_gen_movi_tl(cpu_R[dc->src], 1); +    } + +    cris_cc_mask(dc, 0); +} + +static unsigned int dec10_reg(DisasContext *dc) +{ +    TCGv t; +    unsigned int insn_len = 2; +    unsigned int size = dec10_size(dc->size); +    unsigned int tmp; + +    if (dc->size != 3) { +        switch (dc->opcode) { +            case CRISV10_REG_MOVE_R: +                LOG_DIS("move.%d $r%d, $r%d\n", dc->size, dc->src, dc->dst); +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_alu(dc, CC_OP_MOVE, size, 0); +                if (dc->dst == 15) { +                    tcg_gen_mov_tl(env_btarget, cpu_R[dc->dst]); +                    cris_prepare_jmp(dc, JMP_INDIRECT); +                    dc->delayed_branch = 1; +                } +                break; +            case CRISV10_REG_MOVX: +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_movs(dc); +                break; +            case CRISV10_REG_ADDX: +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_alux(dc, CC_OP_ADD); +                break; +            case CRISV10_REG_SUBX: +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_alux(dc, CC_OP_SUB); +                break; +            case CRISV10_REG_ADD: +                LOG_DIS("add $r%d, $r%d sz=%d\n", dc->src, dc->dst, size); +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_alu(dc, CC_OP_ADD, size, 0); +                break; +            case CRISV10_REG_SUB: +                LOG_DIS("sub $r%d, $r%d sz=%d\n", dc->src, dc->dst, size); +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_alu(dc, CC_OP_SUB, size, 0); +                break; +            case CRISV10_REG_CMP: +                LOG_DIS("cmp $r%d, $r%d sz=%d\n", dc->src, dc->dst, size); +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_alu(dc, CC_OP_CMP, size, 0); +                break; +            case CRISV10_REG_BOUND: +                LOG_DIS("bound $r%d, $r%d sz=%d\n", dc->src, dc->dst, size); +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_bound(dc, size); +                break; +            case CRISV10_REG_AND: +                LOG_DIS("and $r%d, $r%d sz=%d\n", dc->src, dc->dst, size); +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_alu(dc, CC_OP_AND, size, 0); +                break; +            case CRISV10_REG_ADDI: +                if (dc->src == 15) { +                    /* nop.  */ +                    return 2; +                } +                t = tcg_temp_new(); +                LOG_DIS("addi r%d r%d size=%d\n", dc->src, dc->dst, dc->size); +                tcg_gen_shli_tl(t, cpu_R[dc->dst], dc->size & 3); +                tcg_gen_add_tl(cpu_R[dc->src], cpu_R[dc->src], t); +                tcg_temp_free(t); +                break; +            case CRISV10_REG_LSL: +                LOG_DIS("lsl $r%d, $r%d sz=%d\n", dc->src, dc->dst, size); +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_alu(dc, CC_OP_LSL, size, 0); +                break; +            case CRISV10_REG_LSR: +                LOG_DIS("lsr $r%d, $r%d sz=%d\n", dc->src, dc->dst, size); +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_alu(dc, CC_OP_LSR, size, 0); +                break; +            case CRISV10_REG_ASR: +                LOG_DIS("asr $r%d, $r%d sz=%d\n", dc->src, dc->dst, size); +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_alu(dc, CC_OP_ASR, size, 1); +                break; +            case CRISV10_REG_OR: +                LOG_DIS("or $r%d, $r%d sz=%d\n", dc->src, dc->dst, size); +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_alu(dc, CC_OP_OR, size, 0); +                break; +            case CRISV10_REG_NEG: +                LOG_DIS("neg $r%d, $r%d sz=%d\n", dc->src, dc->dst, size); +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_alu(dc, CC_OP_NEG, size, 0); +                break; +            case CRISV10_REG_BIAP: +                LOG_DIS("BIAP pc=%x reg %d r%d r%d size=%d\n", dc->pc, +                         dc->opcode, dc->src, dc->dst, size); +                switch (size) { +                    case 4: tmp = 2; break; +                    case 2: tmp = 1; break; +                    case 1: tmp = 0; break; +                    default: +                        cpu_abort(CPU(dc->cpu), "Unhandled BIAP"); +                        break; +                } + +                t = tcg_temp_new(); +                tcg_gen_shli_tl(t, cpu_R[dc->dst], tmp); +                if (dc->src == 15) { +                    tcg_gen_addi_tl(cpu_PR[PR_PREFIX], t, ((dc->pc +2)| 1) + 1); +                } else { +                    tcg_gen_add_tl(cpu_PR[PR_PREFIX], cpu_R[dc->src], t); +                } +                tcg_temp_free(t); +                cris_set_prefix(dc); +                break; + +            default: +                LOG_DIS("pc=%x reg %d r%d r%d\n", dc->pc, +                         dc->opcode, dc->src, dc->dst); +                cpu_abort(CPU(dc->cpu), "Unhandled opcode"); +                break; +        } +    } else { +        switch (dc->opcode) { +            case CRISV10_REG_MOVX: +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_movs(dc); +                break; +            case CRISV10_REG_ADDX: +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_alux(dc, CC_OP_ADD); +                break; +            case CRISV10_REG_SUBX: +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_alux(dc, CC_OP_SUB); +                break; +            case CRISV10_REG_MOVE_SPR_R: +                cris_evaluate_flags(dc); +                cris_cc_mask(dc, 0); +                dec10_reg_mov_pr(dc); +                break; +            case CRISV10_REG_MOVE_R_SPR: +                LOG_DIS("move r%d p%d\n", dc->src, dc->dst); +                cris_evaluate_flags(dc); +                if (dc->src != 11) /* fast for srp.  */ +                    dc->cpustate_changed = 1; +                t_gen_mov_preg_TN(dc, dc->dst, cpu_R[dc->src]); +                break; +            case CRISV10_REG_SETF: +            case CRISV10_REG_CLEARF: +                dec10_setclrf(dc); +                break; +            case CRISV10_REG_SWAP: +                dec10_reg_swap(dc); +                break; +            case CRISV10_REG_ABS: +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_abs(dc); +                break; +            case CRISV10_REG_LZ: +                LOG_DIS("lz $r%d, $r%d sz=%d\n", dc->src, dc->dst, size); +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_alu(dc, CC_OP_LZ, 4, 0); +                break; +            case CRISV10_REG_XOR: +                LOG_DIS("xor $r%d, $r%d sz=%d\n", dc->src, dc->dst, size); +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_alu(dc, CC_OP_XOR, 4, 0); +                break; +            case CRISV10_REG_BTST: +                LOG_DIS("btst $r%d, $r%d sz=%d\n", dc->src, dc->dst, size); +                cris_cc_mask(dc, CC_MASK_NZVC); +                cris_update_cc_op(dc, CC_OP_FLAGS, 4); +                gen_helper_btst(cpu_PR[PR_CCS], cpu_env, cpu_R[dc->dst], +                           cpu_R[dc->src], cpu_PR[PR_CCS]); +                break; +            case CRISV10_REG_DSTEP: +                LOG_DIS("dstep $r%d, $r%d sz=%d\n", dc->src, dc->dst, size); +                cris_cc_mask(dc, CC_MASK_NZVC); +                cris_alu(dc, CC_OP_DSTEP, cpu_R[dc->dst], +                            cpu_R[dc->dst], cpu_R[dc->src], 4); +                break; +            case CRISV10_REG_MSTEP: +                LOG_DIS("mstep $r%d, $r%d sz=%d\n", dc->src, dc->dst, size); +                cris_evaluate_flags(dc); +                cris_cc_mask(dc, CC_MASK_NZVC); +                cris_alu(dc, CC_OP_MSTEP, cpu_R[dc->dst], +                            cpu_R[dc->dst], cpu_R[dc->src], 4); +                break; +            case CRISV10_REG_SCC: +                dec10_reg_scc(dc); +                break; +            default: +                LOG_DIS("pc=%x reg %d r%d r%d\n", dc->pc, +                         dc->opcode, dc->src, dc->dst); +                cpu_abort(CPU(dc->cpu), "Unhandled opcode"); +                break; +        } +    } +    return insn_len; +} + +static unsigned int dec10_ind_move_m_r(CPUCRISState *env, DisasContext *dc, +                                       unsigned int size) +{ +    unsigned int insn_len = 2; +    TCGv t; + +    LOG_DIS("%s: move.%d [$r%d], $r%d\n", __func__, +             size, dc->src, dc->dst); + +    cris_cc_mask(dc, CC_MASK_NZVC); +    t = tcg_temp_new(); +    insn_len += dec10_prep_move_m(env, dc, 0, size, t); +    cris_alu(dc, CC_OP_MOVE, cpu_R[dc->dst], cpu_R[dc->dst], t, size); +    if (dc->dst == 15) { +        tcg_gen_mov_tl(env_btarget, cpu_R[dc->dst]); +        cris_prepare_jmp(dc, JMP_INDIRECT); +        dc->delayed_branch = 1; +        return insn_len; +    } + +    tcg_temp_free(t); +    return insn_len; +} + +static unsigned int dec10_ind_move_r_m(DisasContext *dc, unsigned int size) +{ +    unsigned int insn_len = 2; +    TCGv addr; + +    LOG_DIS("move.%d $r%d, [$r%d]\n", dc->size, dc->src, dc->dst); +    addr = tcg_temp_new(); +    crisv10_prepare_memaddr(dc, addr, size); +    gen_store_v10(dc, addr, cpu_R[dc->dst], size); +    insn_len += crisv10_post_memaddr(dc, size); + +    return insn_len; +} + +static unsigned int dec10_ind_move_m_pr(CPUCRISState *env, DisasContext *dc) +{ +    unsigned int insn_len = 2, rd = dc->dst; +    TCGv t, addr; + +    LOG_DIS("move.%d $p%d, [$r%d]\n", dc->size, dc->dst, dc->src); +    cris_lock_irq(dc); + +    addr = tcg_temp_new(); +    t = tcg_temp_new(); +    insn_len += dec10_prep_move_m(env, dc, 0, 4, t); +    if (rd == 15) { +        tcg_gen_mov_tl(env_btarget, t); +        cris_prepare_jmp(dc, JMP_INDIRECT); +        dc->delayed_branch = 1; +        return insn_len; +    } + +    tcg_gen_mov_tl(cpu_PR[rd], t); +    dc->cpustate_changed = 1; +    tcg_temp_free(addr); +    tcg_temp_free(t); +    return insn_len; +} + +static unsigned int dec10_ind_move_pr_m(DisasContext *dc) +{ +    unsigned int insn_len = 2, size = preg_sizes_v10[dc->dst]; +    TCGv addr, t0; + +    LOG_DIS("move.%d $p%d, [$r%d]\n", dc->size, dc->dst, dc->src); + +    addr = tcg_temp_new(); +    crisv10_prepare_memaddr(dc, addr, size); +    if (dc->dst == PR_CCS) { +        t0 = tcg_temp_new(); +        cris_evaluate_flags(dc); +        tcg_gen_andi_tl(t0, cpu_PR[PR_CCS], ~PFIX_FLAG); +        gen_store_v10(dc, addr, t0, size); +        tcg_temp_free(t0); +    } else { +        gen_store_v10(dc, addr, cpu_PR[dc->dst], size); +    } +    t0 = tcg_temp_new(); +    insn_len += crisv10_post_memaddr(dc, size); +    cris_lock_irq(dc); + +    return insn_len; +} + +static void dec10_movem_r_m(DisasContext *dc) +{ +    int i, pfix = dc->tb_flags & PFIX_FLAG; +    TCGv addr, t0; + +    LOG_DIS("%s r%d, [r%d] pi=%d ir=%x\n", __func__, +              dc->dst, dc->src, dc->postinc, dc->ir); + +    addr = tcg_temp_new(); +    t0 = tcg_temp_new(); +    crisv10_prepare_memaddr(dc, addr, 4); +    tcg_gen_mov_tl(t0, addr); +    for (i = dc->dst; i >= 0; i--) { +        if ((pfix && dc->mode == CRISV10_MODE_AUTOINC) && dc->src == i) { +            gen_store_v10(dc, addr, t0, 4); +        } else { +            gen_store_v10(dc, addr, cpu_R[i], 4); +        } +        tcg_gen_addi_tl(addr, addr, 4); +    } + +    if (pfix && dc->mode == CRISV10_MODE_AUTOINC) { +        tcg_gen_mov_tl(cpu_R[dc->src], t0); +    } + +    if (!pfix && dc->mode == CRISV10_MODE_AUTOINC) { +        tcg_gen_mov_tl(cpu_R[dc->src], addr); +    } +    tcg_temp_free(addr); +    tcg_temp_free(t0); +} + +static void dec10_movem_m_r(DisasContext *dc) +{ +    int i, pfix = dc->tb_flags & PFIX_FLAG; +    TCGv addr, t0; + +    LOG_DIS("%s [r%d], r%d pi=%d ir=%x\n", __func__, +              dc->src, dc->dst, dc->postinc, dc->ir); + +    addr = tcg_temp_new(); +    t0 = tcg_temp_new(); +    crisv10_prepare_memaddr(dc, addr, 4); +    tcg_gen_mov_tl(t0, addr); +    for (i = dc->dst; i >= 0; i--) { +        gen_load(dc, cpu_R[i], addr, 4, 0); +        tcg_gen_addi_tl(addr, addr, 4); +    } + +    if (pfix && dc->mode == CRISV10_MODE_AUTOINC) { +        tcg_gen_mov_tl(cpu_R[dc->src], t0); +    } + +    if (!pfix && dc->mode == CRISV10_MODE_AUTOINC) { +        tcg_gen_mov_tl(cpu_R[dc->src], addr); +    } +    tcg_temp_free(addr); +    tcg_temp_free(t0); +} + +static int dec10_ind_alu(CPUCRISState *env, DisasContext *dc, +                         int op, unsigned int size) +{ +    int insn_len = 0; +    int rd = dc->dst; +    TCGv t[2]; + +    cris_alu_m_alloc_temps(t); +    insn_len += dec10_prep_move_m(env, dc, 0, size, t[0]); +    cris_alu(dc, op, cpu_R[dc->dst], cpu_R[rd], t[0], size); +    if (dc->dst == 15) { +        tcg_gen_mov_tl(env_btarget, cpu_R[dc->dst]); +        cris_prepare_jmp(dc, JMP_INDIRECT); +        dc->delayed_branch = 1; +        return insn_len; +    } + +    cris_alu_m_free_temps(t); + +    return insn_len; +} + +static int dec10_ind_bound(CPUCRISState *env, DisasContext *dc, +                           unsigned int size) +{ +    int insn_len = 0; +    int rd = dc->dst; +    TCGv t; + +    t = tcg_temp_local_new(); +    insn_len += dec10_prep_move_m(env, dc, 0, size, t); +    cris_alu(dc, CC_OP_BOUND, cpu_R[dc->dst], cpu_R[rd], t, 4); +    if (dc->dst == 15) { +        tcg_gen_mov_tl(env_btarget, cpu_R[dc->dst]); +        cris_prepare_jmp(dc, JMP_INDIRECT); +        dc->delayed_branch = 1; +        return insn_len; +    } + +    tcg_temp_free(t); +    return insn_len; +} + +static int dec10_alux_m(CPUCRISState *env, DisasContext *dc, int op) +{ +    unsigned int size = (dc->size & 1) ? 2 : 1; +    unsigned int sx = !!(dc->size & 2); +    int insn_len = 2; +    int rd = dc->dst; +    TCGv t; + +    LOG_DIS("addx size=%d sx=%d op=%d %d\n", size, sx, dc->src, dc->dst); + +    t = tcg_temp_new(); + +    cris_cc_mask(dc, CC_MASK_NZVC); +    insn_len += dec10_prep_move_m(env, dc, sx, size, t); +    cris_alu(dc, op, cpu_R[dc->dst], cpu_R[rd], t, 4); +    if (dc->dst == 15) { +        tcg_gen_mov_tl(env_btarget, cpu_R[dc->dst]); +        cris_prepare_jmp(dc, JMP_INDIRECT); +        dc->delayed_branch = 1; +        return insn_len; +    } + +    tcg_temp_free(t); +    return insn_len; +} + +static int dec10_dip(CPUCRISState *env, DisasContext *dc) +{ +    int insn_len = 2; +    uint32_t imm; + +    LOG_DIS("dip pc=%x opcode=%d r%d r%d\n", +              dc->pc, dc->opcode, dc->src, dc->dst); +    if (dc->src == 15) { +        imm = cpu_ldl_code(env, dc->pc + 2); +        tcg_gen_movi_tl(cpu_PR[PR_PREFIX], imm); +        if (dc->postinc) +            insn_len += 4; +        tcg_gen_addi_tl(cpu_R[15], cpu_R[15], insn_len - 2); +    } else { +        gen_load(dc, cpu_PR[PR_PREFIX], cpu_R[dc->src], 4, 0); +        if (dc->postinc) +            tcg_gen_addi_tl(cpu_R[dc->src], cpu_R[dc->src], 4); +    } + +    cris_set_prefix(dc); +    return insn_len; +} + +static int dec10_bdap_m(CPUCRISState *env, DisasContext *dc, int size) +{ +    int insn_len = 2; +    int rd = dc->dst; + +    LOG_DIS("bdap_m pc=%x opcode=%d r%d r%d sz=%d\n", +              dc->pc, dc->opcode, dc->src, dc->dst, size); + +    assert(dc->dst != 15); +#if 0 +    /* 8bit embedded offset?  */ +    if (!dc->postinc && (dc->ir & (1 << 11))) { +        int simm = dc->ir & 0xff; + +        /* cpu_abort(CPU(dc->cpu), "Unhandled opcode"); */ +        /* sign extended.  */ +        simm = (int8_t)simm; + +        tcg_gen_addi_tl(cpu_PR[PR_PREFIX], cpu_R[dc->dst], simm); + +        cris_set_prefix(dc); +        return insn_len; +    } +#endif +    /* Now the rest of the modes are truly indirect.  */ +    insn_len += dec10_prep_move_m(env, dc, 1, size, cpu_PR[PR_PREFIX]); +    tcg_gen_add_tl(cpu_PR[PR_PREFIX], cpu_PR[PR_PREFIX], cpu_R[rd]); +    cris_set_prefix(dc); +    return insn_len; +} + +static unsigned int dec10_ind(CPUCRISState *env, DisasContext *dc) +{ +    unsigned int insn_len = 2; +    unsigned int size = dec10_size(dc->size); +    uint32_t imm; +    int32_t simm; +    TCGv t[2]; + +    if (dc->size != 3) { +        switch (dc->opcode) { +            case CRISV10_IND_MOVE_M_R: +                return dec10_ind_move_m_r(env, dc, size); +                break; +            case CRISV10_IND_MOVE_R_M: +                return dec10_ind_move_r_m(dc, size); +                break; +            case CRISV10_IND_CMP: +                LOG_DIS("cmp size=%d op=%d %d\n",  size, dc->src, dc->dst); +                cris_cc_mask(dc, CC_MASK_NZVC); +                insn_len += dec10_ind_alu(env, dc, CC_OP_CMP, size); +                break; +            case CRISV10_IND_TEST: +                LOG_DIS("test size=%d op=%d %d\n",  size, dc->src, dc->dst); + +                cris_evaluate_flags(dc); +                cris_cc_mask(dc, CC_MASK_NZVC); +                cris_alu_m_alloc_temps(t); +                insn_len += dec10_prep_move_m(env, dc, 0, size, t[0]); +                tcg_gen_andi_tl(cpu_PR[PR_CCS], cpu_PR[PR_CCS], ~3); +                cris_alu(dc, CC_OP_CMP, cpu_R[dc->dst], +                         t[0], tcg_const_tl(0), size); +                cris_alu_m_free_temps(t); +                break; +            case CRISV10_IND_ADD: +                LOG_DIS("add size=%d op=%d %d\n",  size, dc->src, dc->dst); +                cris_cc_mask(dc, CC_MASK_NZVC); +                insn_len += dec10_ind_alu(env, dc, CC_OP_ADD, size); +                break; +            case CRISV10_IND_SUB: +                LOG_DIS("sub size=%d op=%d %d\n",  size, dc->src, dc->dst); +                cris_cc_mask(dc, CC_MASK_NZVC); +                insn_len += dec10_ind_alu(env, dc, CC_OP_SUB, size); +                break; +            case CRISV10_IND_BOUND: +                LOG_DIS("bound size=%d op=%d %d\n",  size, dc->src, dc->dst); +                cris_cc_mask(dc, CC_MASK_NZVC); +                insn_len += dec10_ind_bound(env, dc, size); +                break; +            case CRISV10_IND_AND: +                LOG_DIS("and size=%d op=%d %d\n",  size, dc->src, dc->dst); +                cris_cc_mask(dc, CC_MASK_NZVC); +                insn_len += dec10_ind_alu(env, dc, CC_OP_AND, size); +                break; +            case CRISV10_IND_OR: +                LOG_DIS("or size=%d op=%d %d\n",  size, dc->src, dc->dst); +                cris_cc_mask(dc, CC_MASK_NZVC); +                insn_len += dec10_ind_alu(env, dc, CC_OP_OR, size); +                break; +            case CRISV10_IND_MOVX: +                insn_len = dec10_alux_m(env, dc, CC_OP_MOVE); +                break; +            case CRISV10_IND_ADDX: +                insn_len = dec10_alux_m(env, dc, CC_OP_ADD); +                break; +            case CRISV10_IND_SUBX: +                insn_len = dec10_alux_m(env, dc, CC_OP_SUB); +                break; +            case CRISV10_IND_CMPX: +                insn_len = dec10_alux_m(env, dc, CC_OP_CMP); +                break; +            case CRISV10_IND_MUL: +                /* This is a reg insn coded in the mem indir space.  */ +                LOG_DIS("mul pc=%x opcode=%d\n", dc->pc, dc->opcode); +                cris_cc_mask(dc, CC_MASK_NZVC); +                dec10_reg_mul(dc, size, dc->ir & (1 << 10)); +                break; +            case CRISV10_IND_BDAP_M: +                insn_len = dec10_bdap_m(env, dc, size); +                break; +            default: +                LOG_DIS("pc=%x var-ind.%d %d r%d r%d\n", +                          dc->pc, size, dc->opcode, dc->src, dc->dst); +                cpu_abort(CPU(dc->cpu), "Unhandled opcode"); +                break; +        } +        return insn_len; +    } + +    switch (dc->opcode) { +        case CRISV10_IND_MOVE_M_SPR: +            insn_len = dec10_ind_move_m_pr(env, dc); +            break; +        case CRISV10_IND_MOVE_SPR_M: +            insn_len = dec10_ind_move_pr_m(dc); +            break; +        case CRISV10_IND_JUMP_M: +            if (dc->src == 15) { +                LOG_DIS("jump.%d %d r%d r%d direct\n", size, +                         dc->opcode, dc->src, dc->dst); +                imm = cpu_ldl_code(env, dc->pc + 2); +                if (dc->mode == CRISV10_MODE_AUTOINC) +                    insn_len += size; + +                t_gen_mov_preg_TN(dc, dc->dst, tcg_const_tl(dc->pc + insn_len)); +                dc->jmp_pc = imm; +                cris_prepare_jmp(dc, JMP_DIRECT); +                dc->delayed_branch--; /* v10 has no dslot here.  */ +            } else { +                if (dc->dst == 14) { +                    LOG_DIS("break %d\n", dc->src); +                    cris_evaluate_flags(dc); +                    tcg_gen_movi_tl(env_pc, dc->pc + 2); +                    t_gen_mov_env_TN(trap_vector, tcg_const_tl(dc->src + 2)); +                    t_gen_raise_exception(EXCP_BREAK); +                    dc->is_jmp = DISAS_UPDATE; +                    return insn_len; +                } +                LOG_DIS("%d: jump.%d %d r%d r%d\n", __LINE__, size, +                         dc->opcode, dc->src, dc->dst); +                t[0] = tcg_temp_new(); +                t_gen_mov_preg_TN(dc, dc->dst, tcg_const_tl(dc->pc + insn_len)); +                crisv10_prepare_memaddr(dc, t[0], size); +                gen_load(dc, env_btarget, t[0], 4, 0); +                insn_len += crisv10_post_memaddr(dc, size); +                cris_prepare_jmp(dc, JMP_INDIRECT); +                dc->delayed_branch--; /* v10 has no dslot here.  */ +                tcg_temp_free(t[0]); +            } +            break; + +        case CRISV10_IND_MOVEM_R_M: +            LOG_DIS("movem_r_m pc=%x opcode=%d r%d r%d\n", +                        dc->pc, dc->opcode, dc->dst, dc->src); +            dec10_movem_r_m(dc); +            break; +        case CRISV10_IND_MOVEM_M_R: +            LOG_DIS("movem_m_r pc=%x opcode=%d\n", dc->pc, dc->opcode); +            dec10_movem_m_r(dc); +            break; +        case CRISV10_IND_JUMP_R: +            LOG_DIS("jmp pc=%x opcode=%d r%d r%d\n", +                        dc->pc, dc->opcode, dc->dst, dc->src); +            tcg_gen_mov_tl(env_btarget, cpu_R[dc->src]); +            t_gen_mov_preg_TN(dc, dc->dst, tcg_const_tl(dc->pc + insn_len)); +            cris_prepare_jmp(dc, JMP_INDIRECT); +            dc->delayed_branch--; /* v10 has no dslot here.  */ +            break; +        case CRISV10_IND_MOVX: +            insn_len = dec10_alux_m(env, dc, CC_OP_MOVE); +            break; +        case CRISV10_IND_ADDX: +            insn_len = dec10_alux_m(env, dc, CC_OP_ADD); +            break; +        case CRISV10_IND_SUBX: +            insn_len = dec10_alux_m(env, dc, CC_OP_SUB); +            break; +        case CRISV10_IND_CMPX: +            insn_len = dec10_alux_m(env, dc, CC_OP_CMP); +            break; +        case CRISV10_IND_DIP: +            insn_len = dec10_dip(env, dc); +            break; +        case CRISV10_IND_BCC_M: + +            cris_cc_mask(dc, 0); +            imm = cpu_ldsw_code(env, dc->pc + 2); +            simm = (int16_t)imm; +            simm += 4; + +            LOG_DIS("bcc_m: b%s %x\n", cc_name(dc->cond), dc->pc + simm); +            cris_prepare_cc_branch(dc, simm, dc->cond); +            insn_len = 4; +            break; +        default: +            LOG_DIS("ERROR pc=%x opcode=%d\n", dc->pc, dc->opcode); +            cpu_abort(CPU(dc->cpu), "Unhandled opcode"); +            break; +    } + +    return insn_len; +} + +static unsigned int crisv10_decoder(CPUCRISState *env, DisasContext *dc) +{ +    unsigned int insn_len = 2; + +    if (unlikely(qemu_loglevel_mask(CPU_LOG_TB_OP))) +        tcg_gen_debug_insn_start(dc->pc); + +    /* Load a halfword onto the instruction register.  */ +    dc->ir = cpu_lduw_code(env, dc->pc); + +    /* Now decode it.  */ +    dc->opcode   = EXTRACT_FIELD(dc->ir, 6, 9); +    dc->mode     = EXTRACT_FIELD(dc->ir, 10, 11); +    dc->src      = EXTRACT_FIELD(dc->ir, 0, 3); +    dc->size     = EXTRACT_FIELD(dc->ir, 4, 5); +    dc->cond = dc->dst = EXTRACT_FIELD(dc->ir, 12, 15); +    dc->postinc  = EXTRACT_FIELD(dc->ir, 10, 10); + +    dc->clear_prefix = 1; + +    /* FIXME: What if this insn insn't 2 in length??  */ +    if (dc->src == 15 || dc->dst == 15) +        tcg_gen_movi_tl(cpu_R[15], dc->pc + 2); + +    switch (dc->mode) { +        case CRISV10_MODE_QIMMEDIATE: +            insn_len = dec10_quick_imm(dc); +            break; +        case CRISV10_MODE_REG: +            insn_len = dec10_reg(dc); +            break; +        case CRISV10_MODE_AUTOINC: +        case CRISV10_MODE_INDIRECT: +            insn_len = dec10_ind(env, dc); +            break; +    } + +    if (dc->clear_prefix && dc->tb_flags & PFIX_FLAG) { +        dc->tb_flags &= ~PFIX_FLAG; +        tcg_gen_andi_tl(cpu_PR[PR_CCS], cpu_PR[PR_CCS], ~PFIX_FLAG); +        if (dc->tb_flags != dc->tb->flags) { +            dc->cpustate_changed = 1; +        } +    } + +    /* CRISv10 locks out interrupts on dslots.  */ +    if (dc->delayed_branch == 2) { +        cris_lock_irq(dc); +    } +    return insn_len; +} + +void cris_initialize_crisv10_tcg(void) +{ +	int i; + +	cpu_env = tcg_global_reg_new_ptr(TCG_AREG0, "env"); +	cc_x = tcg_global_mem_new(TCG_AREG0, +				  offsetof(CPUCRISState, cc_x), "cc_x"); +	cc_src = tcg_global_mem_new(TCG_AREG0, +				    offsetof(CPUCRISState, cc_src), "cc_src"); +	cc_dest = tcg_global_mem_new(TCG_AREG0, +				     offsetof(CPUCRISState, cc_dest), +				     "cc_dest"); +	cc_result = tcg_global_mem_new(TCG_AREG0, +				       offsetof(CPUCRISState, cc_result), +				       "cc_result"); +	cc_op = tcg_global_mem_new(TCG_AREG0, +				   offsetof(CPUCRISState, cc_op), "cc_op"); +	cc_size = tcg_global_mem_new(TCG_AREG0, +				     offsetof(CPUCRISState, cc_size), +				     "cc_size"); +	cc_mask = tcg_global_mem_new(TCG_AREG0, +				     offsetof(CPUCRISState, cc_mask), +				     "cc_mask"); + +	env_pc = tcg_global_mem_new(TCG_AREG0,  +				    offsetof(CPUCRISState, pc), +				    "pc"); +	env_btarget = tcg_global_mem_new(TCG_AREG0, +					 offsetof(CPUCRISState, btarget), +					 "btarget"); +	env_btaken = tcg_global_mem_new(TCG_AREG0, +					 offsetof(CPUCRISState, btaken), +					 "btaken"); +	for (i = 0; i < 16; i++) { +		cpu_R[i] = tcg_global_mem_new(TCG_AREG0, +					      offsetof(CPUCRISState, regs[i]), +					      regnames_v10[i]); +	} +	for (i = 0; i < 16; i++) { +		cpu_PR[i] = tcg_global_mem_new(TCG_AREG0, +					       offsetof(CPUCRISState, pregs[i]), +					       pregnames_v10[i]); +	} +}  | 
