3 * Copyright (C) 1995-1996 Gary Thomas (gdt@linuxppc.org)
4 * Rewritten by Cort Dougan (cort@fsmlabs.com) for PReP
5 * Copyright (C) 1996 Cort Dougan <cort@fsmlabs.com>
6 * Adapted for Power Macintosh by Paul Mackerras.
7 * Low-level exception handlers and MMU support
8 * rewritten by Paul Mackerras.
9 * Copyright (C) 1996 Paul Mackerras.
10 * MPC8xx modifications Copyright (C) 1997 Dan Malek (dmalek@jlc.net).
12 * This file contains the system call entry code, context switch
13 * code, and exception/interrupt return code for PowerPC.
15 * This program is free software; you can redistribute it and/or
16 * modify it under the terms of the GNU General Public License
17 * as published by the Free Software Foundation; either version
18 * 2 of the License, or (at your option) any later version.
22 #include <linux/errno.h>
23 #include <linux/err.h>
24 #include <linux/sys.h>
25 #include <linux/threads.h>
29 #include <asm/cputable.h>
30 #include <asm/thread_info.h>
31 #include <asm/ppc_asm.h>
32 #include <asm/asm-offsets.h>
33 #include <asm/unistd.h>
34 #include <asm/ftrace.h>
35 #include <asm/ptrace.h>
38 * MSR_KERNEL is > 0x10000 on 4xx/Book-E since it include MSR_CE.
40 #if MSR_KERNEL >= 0x10000
41 #define LOAD_MSR_KERNEL(r, x) lis r,(x)@h; ori r,r,(x)@l
43 #define LOAD_MSR_KERNEL(r, x) li r,(x)
47 .globl mcheck_transfer_to_handler
48 mcheck_transfer_to_handler:
55 .globl debug_transfer_to_handler
56 debug_transfer_to_handler:
63 .globl crit_transfer_to_handler
64 crit_transfer_to_handler:
65 #ifdef CONFIG_PPC_BOOK3E_MMU
76 #ifdef CONFIG_PHYS_64BIT
79 #endif /* CONFIG_PHYS_64BIT */
80 #endif /* CONFIG_PPC_BOOK3E_MMU */
90 /* set the stack limit to the current stack
91 * and set the limit to protect the thread_info
94 mfspr r8,SPRN_SPRG_THREAD
96 stw r0,SAVED_KSP_LIMIT(r11)
97 rlwimi r0,r1,0,0,(31-THREAD_SHIFT)
103 .globl crit_transfer_to_handler
104 crit_transfer_to_handler:
110 stw r0,crit_srr0@l(0)
112 stw r0,crit_srr1@l(0)
114 /* set the stack limit to the current stack
115 * and set the limit to protect the thread_info
118 mfspr r8,SPRN_SPRG_THREAD
120 stw r0,saved_ksp_limit@l(0)
121 rlwimi r0,r1,0,0,(31-THREAD_SHIFT)
127 * This code finishes saving the registers to the exception frame
128 * and jumps to the appropriate handler for the exception, turning
129 * on address translation.
130 * Note that we rely on the caller having set cr0.eq iff the exception
131 * occurred in kernel mode (i.e. MSR:PR = 0).
133 .globl transfer_to_handler_full
134 transfer_to_handler_full:
138 .globl transfer_to_handler
148 mfspr r12,SPRN_SPRG_THREAD
150 tovirt(r2,r2) /* set r2 to current */
151 beq 2f /* if from user, fix up THREAD.regs */
152 addi r11,r1,STACK_FRAME_OVERHEAD
154 #if defined(CONFIG_40x) || defined(CONFIG_BOOKE)
155 /* Check to see if the dbcr0 register is set up to debug. Use the
156 internal debug mode bit to do this. */
157 lwz r12,THREAD_DBCR0(r12)
158 andis. r12,r12,DBCR0_IDM@h
160 /* From user and task is ptraced - load up global dbcr0 */
161 li r12,-1 /* clear all pending debug events */
163 lis r11,global_dbcr0@ha
165 addi r11,r11,global_dbcr0@l
167 CURRENT_THREAD_INFO(r9, r1)
180 2: /* if from kernel, check interrupted DOZE/NAP mode and
181 * check for stack overflow
183 lwz r9,KSP_LIMIT(r12)
184 cmplw r1,r9 /* if r1 <= ksp_limit */
185 ble- stack_ovf /* then the kernel stack overflowed */
187 #if defined(CONFIG_6xx) || defined(CONFIG_E500)
188 CURRENT_THREAD_INFO(r9, r1)
189 tophys(r9,r9) /* check local flags */
190 lwz r12,TI_LOCAL_FLAGS(r9)
192 bt- 31-TLF_NAPPING,4f
193 bt- 31-TLF_SLEEPING,7f
194 #endif /* CONFIG_6xx || CONFIG_E500 */
195 .globl transfer_to_handler_cont
196 transfer_to_handler_cont:
199 lwz r11,0(r9) /* virtual address of handler */
200 lwz r9,4(r9) /* where to go when done */
201 #ifdef CONFIG_TRACE_IRQFLAGS
202 lis r12,reenable_mmu@h
203 ori r12,r12,reenable_mmu@l
208 reenable_mmu: /* re-enable mmu so we can */
212 andi. r10,r10,MSR_EE /* Did EE change? */
216 * The trace_hardirqs_off will use CALLER_ADDR0 and CALLER_ADDR1.
217 * If from user mode there is only one stack frame on the stack, and
218 * accessing CALLER_ADDR1 will cause oops. So we need create a dummy
219 * stack frame to make trace_hardirqs_off happy.
221 * This is handy because we also need to save a bunch of GPRs,
222 * r3 can be different from GPR3(r1) at this point, r9 and r11
223 * contains the old MSR and handler address respectively,
224 * r4 & r5 can contain page fault arguments that need to be passed
225 * along as well. r12, CCR, CTR, XER etc... are left clobbered as
226 * they aren't useful past this point (aren't syscall arguments),
227 * the rest is restored from the exception frame.
235 bl trace_hardirqs_off
248 bctr /* jump to handler */
249 #else /* CONFIG_TRACE_IRQFLAGS */
254 RFI /* jump to handler, enable MMU */
255 #endif /* CONFIG_TRACE_IRQFLAGS */
257 #if defined (CONFIG_6xx) || defined(CONFIG_E500)
258 4: rlwinm r12,r12,0,~_TLF_NAPPING
259 stw r12,TI_LOCAL_FLAGS(r9)
260 b power_save_ppc32_restore
262 7: rlwinm r12,r12,0,~_TLF_SLEEPING
263 stw r12,TI_LOCAL_FLAGS(r9)
264 lwz r9,_MSR(r11) /* if sleeping, clear MSR.EE */
265 rlwinm r9,r9,0,~MSR_EE
266 lwz r12,_LINK(r11) /* and return to address in LR */
267 b fast_exception_return
271 * On kernel stack overflow, load up an initial stack pointer
272 * and call StackOverflow(regs), which should not return.
275 /* sometimes we use a statically-allocated stack, which is OK. */
279 ble 5b /* r1 <= &_end is OK */
281 addi r3,r1,STACK_FRAME_OVERHEAD
282 lis r1,init_thread_union@ha
283 addi r1,r1,init_thread_union@l
284 addi r1,r1,THREAD_SIZE-STACK_FRAME_OVERHEAD
285 lis r9,StackOverflow@ha
286 addi r9,r9,StackOverflow@l
287 LOAD_MSR_KERNEL(r10,MSR_KERNEL)
295 * Handle a system call.
297 .stabs "arch/powerpc/kernel/",N_SO,0,0,0f
298 .stabs "entry_32.S",N_SO,0,0,0f
305 lwz r11,_CCR(r1) /* Clear SO bit in CR */
308 #ifdef CONFIG_TRACE_IRQFLAGS
309 /* Return from syscalls can (and generally will) hard enable
310 * interrupts. You aren't supposed to call a syscall with
311 * interrupts disabled in the first place. However, to ensure
312 * that we get it right vs. lockdep if it happens, we force
313 * that hard enable here with appropriate tracing if we see
314 * that we have been called with interrupts off
319 /* We came in with interrupts disabled, we enable them now */
332 #endif /* CONFIG_TRACE_IRQFLAGS */
333 CURRENT_THREAD_INFO(r10, r1)
334 lwz r11,TI_FLAGS(r10)
335 andi. r11,r11,_TIF_SYSCALL_DOTRACE
337 syscall_dotrace_cont:
338 cmplwi 0,r0,NR_syscalls
339 lis r10,sys_call_table@h
340 ori r10,r10,sys_call_table@l
343 lwzx r10,r10,r0 /* Fetch system call handler [ptr] */
345 addi r9,r1,STACK_FRAME_OVERHEAD
347 blrl /* Call handler */
348 .globl ret_from_syscall
351 CURRENT_THREAD_INFO(r12, r1)
352 /* disable interrupts so current_thread_info()->flags can't change */
353 LOAD_MSR_KERNEL(r10,MSR_KERNEL) /* doesn't include MSR_EE */
354 /* Note: We don't bother telling lockdep about it */
359 andi. r0,r9,(_TIF_SYSCALL_DOTRACE|_TIF_SINGLESTEP|_TIF_USER_WORK_MASK|_TIF_PERSYSCALL_MASK)
360 bne- syscall_exit_work
362 blt+ syscall_exit_cont
363 lwz r11,_CCR(r1) /* Load CR */
365 oris r11,r11,0x1000 /* Set SO bit in CR */
369 #ifdef CONFIG_TRACE_IRQFLAGS
370 /* If we are going to return from the syscall with interrupts
371 * off, we trace that here. It shouldn't happen though but we
372 * want to catch the bugger if it does right ?
377 bl trace_hardirqs_off
380 #endif /* CONFIG_TRACE_IRQFLAGS */
381 #if defined(CONFIG_4xx) || defined(CONFIG_BOOKE)
382 /* If the process has its own DBCR0 value, load it up. The internal
383 debug mode bit tells us that dbcr0 should be loaded. */
384 lwz r0,THREAD+THREAD_DBCR0(r2)
385 andis. r10,r0,DBCR0_IDM@h
389 BEGIN_MMU_FTR_SECTION
390 lis r4,icache_44x_need_flush@ha
391 lwz r5,icache_44x_need_flush@l(r4)
395 END_MMU_FTR_SECTION_IFCLR(MMU_FTR_TYPE_47x)
396 #endif /* CONFIG_44x */
399 END_FTR_SECTION_IFSET(CPU_FTR_NEED_PAIRED_STWCX)
400 stwcx. r0,0,r1 /* to clear the reservation */
416 stw r7,icache_44x_need_flush@l(r4)
418 #endif /* CONFIG_44x */
430 .globl ret_from_kernel_thread
431 ret_from_kernel_thread:
441 /* Traced system call support */
446 addi r3,r1,STACK_FRAME_OVERHEAD
447 bl do_syscall_trace_enter
449 * Restore argument registers possibly just changed.
450 * We use the return value of do_syscall_trace_enter
451 * for call number to look up in the table (r0).
462 cmplwi r0,NR_syscalls
463 /* Return code is already in r3 thanks to do_syscall_trace_enter() */
464 bge- ret_from_syscall
465 b syscall_dotrace_cont
468 andi. r0,r9,_TIF_RESTOREALL
474 andi. r0,r9,_TIF_NOERROR
476 lwz r11,_CCR(r1) /* Load CR */
478 oris r11,r11,0x1000 /* Set SO bit in CR */
481 1: stw r6,RESULT(r1) /* Save result */
482 stw r3,GPR3(r1) /* Update return value */
483 2: andi. r0,r9,(_TIF_PERSYSCALL_MASK)
486 /* Clear per-syscall TIF flags if any are set. */
488 li r11,_TIF_PERSYSCALL_MASK
489 addi r12,r12,TI_FLAGS
492 #ifdef CONFIG_IBM405_ERR77
497 subi r12,r12,TI_FLAGS
499 4: /* Anything which requires enabling interrupts? */
500 andi. r0,r9,(_TIF_SYSCALL_DOTRACE|_TIF_SINGLESTEP)
503 /* Re-enable interrupts. There is no need to trace that with
504 * lockdep as we are supposed to have IRQs on at this point
510 /* Save NVGPRS if they're not saved already */
518 addi r3,r1,STACK_FRAME_OVERHEAD
519 bl do_syscall_trace_leave
520 b ret_from_except_full
523 * The fork/clone functions need to copy the full register set into
524 * the child process. Therefore we need to save all the nonvolatile
525 * registers (r13 - r31) before calling the C code.
531 rlwinm r0,r0,0,0,30 /* clear LSB to indicate full */
532 stw r0,_TRAP(r1) /* register set saved */
539 rlwinm r0,r0,0,0,30 /* clear LSB to indicate full */
540 stw r0,_TRAP(r1) /* register set saved */
547 rlwinm r0,r0,0,0,30 /* clear LSB to indicate full */
548 stw r0,_TRAP(r1) /* register set saved */
551 .globl ppc_swapcontext
555 rlwinm r0,r0,0,0,30 /* clear LSB to indicate full */
556 stw r0,_TRAP(r1) /* register set saved */
560 * Top-level page fault handling.
561 * This is in assembler because if do_page_fault tells us that
562 * it is a bad kernel page fault, we want to save the non-volatile
563 * registers before calling bad_page_fault.
565 .globl handle_page_fault
568 addi r3,r1,STACK_FRAME_OVERHEAD
577 addi r3,r1,STACK_FRAME_OVERHEAD
580 b ret_from_except_full
583 * This routine switches between two different tasks. The process
584 * state of one is saved on its kernel stack. Then the state
585 * of the other is restored from its kernel stack. The memory
586 * management hardware is updated to the second process's state.
587 * Finally, we can return to the second process.
588 * On entry, r3 points to the THREAD for the current task, r4
589 * points to the THREAD for the new task.
591 * This routine is always called with interrupts disabled.
593 * Note: there are two ways to get to the "going out" portion
594 * of this code; either by coming in via the entry (_switch)
595 * or via "fork" which must set up an environment equivalent
596 * to the "_switch" path. If you change this , you'll have to
597 * change the fork code also.
599 * The code which creates the new task context is in 'copy_thread'
600 * in arch/ppc/kernel/process.c
603 stwu r1,-INT_FRAME_SIZE(r1)
605 stw r0,INT_FRAME_SIZE+4(r1)
606 /* r3-r12 are caller saved -- Cort */
608 stw r0,_NIP(r1) /* Return to switch caller */
610 li r0,MSR_FP /* Disable floating-point */
611 #ifdef CONFIG_ALTIVEC
613 oris r0,r0,MSR_VEC@h /* Disable altivec */
614 mfspr r12,SPRN_VRSAVE /* save vrsave register value */
615 stw r12,THREAD+THREAD_VRSAVE(r2)
616 END_FTR_SECTION_IFSET(CPU_FTR_ALTIVEC)
617 #endif /* CONFIG_ALTIVEC */
620 oris r0,r0,MSR_SPE@h /* Disable SPE */
621 mfspr r12,SPRN_SPEFSCR /* save spefscr register value */
622 stw r12,THREAD+THREAD_SPEFSCR(r2)
623 END_FTR_SECTION_IFSET(CPU_FTR_SPE)
624 #endif /* CONFIG_SPE */
625 and. r0,r0,r11 /* FP or altivec or SPE enabled? */
633 stw r1,KSP(r3) /* Set old stack pointer */
636 /* We need a sync somewhere here to make sure that if the
637 * previous task gets rescheduled on another CPU, it sees all
638 * stores it has performed on this one.
641 #endif /* CONFIG_SMP */
645 mtspr SPRN_SPRG_THREAD,r0 /* Update current THREAD phys addr */
646 lwz r1,KSP(r4) /* Load new stack pointer */
648 /* save the old current 'last' for return value */
650 addi r2,r4,-THREAD /* Update current */
652 #ifdef CONFIG_ALTIVEC
654 lwz r0,THREAD+THREAD_VRSAVE(r2)
655 mtspr SPRN_VRSAVE,r0 /* if G4, restore VRSAVE reg */
656 END_FTR_SECTION_IFSET(CPU_FTR_ALTIVEC)
657 #endif /* CONFIG_ALTIVEC */
660 lwz r0,THREAD+THREAD_SPEFSCR(r2)
661 mtspr SPRN_SPEFSCR,r0 /* restore SPEFSCR reg */
662 END_FTR_SECTION_IFSET(CPU_FTR_SPE)
663 #endif /* CONFIG_SPE */
667 /* r3-r12 are destroyed -- Cort */
670 lwz r4,_NIP(r1) /* Return to _switch caller in new task */
672 addi r1,r1,INT_FRAME_SIZE
675 .globl fast_exception_return
676 fast_exception_return:
677 #if !(defined(CONFIG_4xx) || defined(CONFIG_BOOKE))
678 andi. r10,r9,MSR_RI /* check for recoverable interrupt */
679 beq 1f /* if not, we've got problems */
682 2: REST_4GPRS(3, r11)
697 #if !(defined(CONFIG_4xx) || defined(CONFIG_BOOKE))
698 /* check if the exception happened in a restartable section */
699 1: lis r3,exc_exit_restart_end@ha
700 addi r3,r3,exc_exit_restart_end@l
703 lis r4,exc_exit_restart@ha
704 addi r4,r4,exc_exit_restart@l
707 lis r3,fee_restarts@ha
709 lwz r5,fee_restarts@l(r3)
711 stw r5,fee_restarts@l(r3)
712 mr r12,r4 /* restart at exc_exit_restart */
721 /* aargh, a nonrecoverable interrupt, panic */
722 /* aargh, we don't know which trap this is */
723 /* but the 601 doesn't implement the RI bit, so assume it's OK */
727 END_FTR_SECTION_IFSET(CPU_FTR_601)
730 addi r3,r1,STACK_FRAME_OVERHEAD
732 ori r10,r10,MSR_KERNEL@l
733 bl transfer_to_handler_full
734 .long nonrecoverable_exception
735 .long ret_from_except
738 .globl ret_from_except_full
739 ret_from_except_full:
743 .globl ret_from_except
745 /* Hard-disable interrupts so that current_thread_info()->flags
746 * can't change between when we test it and when we return
747 * from the interrupt. */
748 /* Note: We don't bother telling lockdep about it */
749 LOAD_MSR_KERNEL(r10,MSR_KERNEL)
750 SYNC /* Some chip revs have problems here... */
751 MTMSRD(r10) /* disable interrupts */
753 lwz r3,_MSR(r1) /* Returning to user mode? */
757 user_exc_return: /* r10 contains MSR_KERNEL here */
758 /* Check current_thread_info()->flags */
759 CURRENT_THREAD_INFO(r9, r1)
761 andi. r0,r9,_TIF_USER_WORK_MASK
765 #if defined(CONFIG_4xx) || defined(CONFIG_BOOKE)
766 /* Check whether this process has its own DBCR0 value. The internal
767 debug mode bit tells us that dbcr0 should be loaded. */
768 lwz r0,THREAD+THREAD_DBCR0(r2)
769 andis. r10,r0,DBCR0_IDM@h
775 /* N.B. the only way to get here is from the beq following ret_from_except. */
777 /* check current_thread_info, _TIF_EMULATE_STACK_STORE */
778 CURRENT_THREAD_INFO(r9, r1)
780 andis. r0,r8,_TIF_EMULATE_STACK_STORE@h
783 addi r8,r1,INT_FRAME_SIZE /* Get the kprobed function entry */
786 subi r3,r3,INT_FRAME_SIZE /* dst: Allocate a trampoline exception frame */
787 mr r4,r1 /* src: current exception frame */
788 mr r1,r3 /* Reroute the trampoline frame to r1 */
790 /* Copy from the original to the trampoline. */
791 li r5,INT_FRAME_SIZE/4 /* size: INT_FRAME_SIZE */
792 li r6,0 /* start offset: 0 */
799 /* Do real store operation to complete stwu */
803 /* Clear _TIF_EMULATE_STACK_STORE flag */
804 lis r11,_TIF_EMULATE_STACK_STORE@h
808 #ifdef CONFIG_IBM405_ERR77
815 #ifdef CONFIG_PREEMPT
816 /* check current_thread_info->preempt_count */
817 lwz r0,TI_PREEMPT(r9)
818 cmpwi 0,r0,0 /* if non-zero, just restore regs and return */
820 andi. r8,r8,_TIF_NEED_RESCHED
823 andi. r0,r3,MSR_EE /* interrupts off? */
824 beq restore /* don't schedule if so */
825 #ifdef CONFIG_TRACE_IRQFLAGS
826 /* Lockdep thinks irqs are enabled, we need to call
827 * preempt_schedule_irq with IRQs off, so we inform lockdep
828 * now that we -did- turn them off already
830 bl trace_hardirqs_off
832 1: bl preempt_schedule_irq
833 CURRENT_THREAD_INFO(r9, r1)
835 andi. r0,r3,_TIF_NEED_RESCHED
837 #ifdef CONFIG_TRACE_IRQFLAGS
838 /* And now, to properly rebalance the above, we tell lockdep they
839 * are being turned back on, which will happen when we return
843 #endif /* CONFIG_PREEMPT */
845 /* interrupts are hard-disabled at this point */
848 BEGIN_MMU_FTR_SECTION
850 END_MMU_FTR_SECTION_IFSET(MMU_FTR_TYPE_47x)
851 lis r4,icache_44x_need_flush@ha
852 lwz r5,icache_44x_need_flush@l(r4)
857 stw r6,icache_44x_need_flush@l(r4)
859 #endif /* CONFIG_44x */
862 #ifdef CONFIG_TRACE_IRQFLAGS
863 /* Lockdep doesn't know about the fact that IRQs are temporarily turned
864 * off in this assembly code while peeking at TI_FLAGS() and such. However
865 * we need to inform it if the exception turned interrupts off, and we
866 * are about to trun them back on.
868 * The problem here sadly is that we don't know whether the exceptions was
869 * one that turned interrupts off or not. So we always tell lockdep about
870 * turning them on here when we go back to wherever we came from with EE
871 * on, even if that may meen some redudant calls being tracked. Maybe later
872 * we could encode what the exception did somewhere or test the exception
873 * type in the pt_regs but that sounds overkill
878 * Since the ftrace irqsoff latency trace checks CALLER_ADDR1,
879 * which is the stack frame here, we need to force a stack frame
880 * in case we came from user space.
891 #endif /* CONFIG_TRACE_IRQFLAGS */
906 END_FTR_SECTION_IFSET(CPU_FTR_NEED_PAIRED_STWCX)
907 stwcx. r0,0,r1 /* to clear the reservation */
909 #if !(defined(CONFIG_4xx) || defined(CONFIG_BOOKE))
910 andi. r10,r9,MSR_RI /* check if this exception occurred */
911 beql nonrecoverable /* at a bad place (MSR:RI = 0) */
919 * Once we put values in SRR0 and SRR1, we are in a state
920 * where exceptions are not recoverable, since taking an
921 * exception will trash SRR0 and SRR1. Therefore we clear the
922 * MSR:RI bit to indicate this. If we do take an exception,
923 * we can't return to the point of the exception but we
924 * can restart the exception exit path at the label
925 * exc_exit_restart below. -- paulus
927 LOAD_MSR_KERNEL(r10,MSR_KERNEL & ~MSR_RI)
929 MTMSRD(r10) /* clear the RI bit */
930 .globl exc_exit_restart
938 .globl exc_exit_restart_end
939 exc_exit_restart_end:
943 #else /* !(CONFIG_4xx || CONFIG_BOOKE) */
945 * This is a bit different on 4xx/Book-E because it doesn't have
946 * the RI bit in the MSR.
947 * The TLB miss handler checks if we have interrupted
948 * the exception exit path and restarts it if so
949 * (well maybe one day it will... :).
956 .globl exc_exit_restart
965 .globl exc_exit_restart_end
966 exc_exit_restart_end:
969 b . /* prevent prefetch past rfi */
972 * Returning from a critical interrupt in user mode doesn't need
973 * to be any different from a normal exception. For a critical
974 * interrupt in the kernel, we just return (without checking for
975 * preemption) since the interrupt may have happened at some crucial
976 * place (e.g. inside the TLB miss handler), and because we will be
977 * running with r1 pointing into critical_stack, not the current
978 * process's kernel stack (and therefore current_thread_info() will
979 * give the wrong answer).
980 * We have to restore various SPRs that may have been in use at the
981 * time of the critical interrupt.
985 #define PPC_40x_TURN_OFF_MSR_DR \
986 /* avoid any possible TLB misses here by turning off MSR.DR, we \
987 * assume the instructions here are mapped by a pinned TLB entry */ \
993 #define PPC_40x_TURN_OFF_MSR_DR
996 #define RET_FROM_EXC_LEVEL(exc_lvl_srr0, exc_lvl_srr1, exc_lvl_rfi) \
999 andi. r3,r3,MSR_PR; \
1000 LOAD_MSR_KERNEL(r10,MSR_KERNEL); \
1001 bne user_exc_return; \
1004 REST_4GPRS(3, r1); \
1005 REST_2GPRS(7, r1); \
1008 mtspr SPRN_XER,r10; \
1010 PPC405_ERR77(0,r1); \
1011 stwcx. r0,0,r1; /* to clear the reservation */ \
1012 lwz r11,_LINK(r1); \
1016 PPC_40x_TURN_OFF_MSR_DR; \
1019 mtspr SPRN_DEAR,r9; \
1020 mtspr SPRN_ESR,r10; \
1023 mtspr exc_lvl_srr0,r11; \
1024 mtspr exc_lvl_srr1,r12; \
1026 lwz r12,GPR12(r1); \
1027 lwz r10,GPR10(r1); \
1028 lwz r11,GPR11(r1); \
1030 PPC405_ERR77_SYNC; \
1032 b .; /* prevent prefetch past exc_lvl_rfi */
1034 #define RESTORE_xSRR(exc_lvl_srr0, exc_lvl_srr1) \
1035 lwz r9,_##exc_lvl_srr0(r1); \
1036 lwz r10,_##exc_lvl_srr1(r1); \
1037 mtspr SPRN_##exc_lvl_srr0,r9; \
1038 mtspr SPRN_##exc_lvl_srr1,r10;
1040 #if defined(CONFIG_PPC_BOOK3E_MMU)
1041 #ifdef CONFIG_PHYS_64BIT
1042 #define RESTORE_MAS7 \
1044 mtspr SPRN_MAS7,r11;
1046 #define RESTORE_MAS7
1047 #endif /* CONFIG_PHYS_64BIT */
1048 #define RESTORE_MMU_REGS \
1052 mtspr SPRN_MAS0,r9; \
1054 mtspr SPRN_MAS1,r10; \
1056 mtspr SPRN_MAS2,r11; \
1057 mtspr SPRN_MAS3,r9; \
1058 mtspr SPRN_MAS6,r10; \
1060 #elif defined(CONFIG_44x)
1061 #define RESTORE_MMU_REGS \
1063 mtspr SPRN_MMUCR,r9;
1065 #define RESTORE_MMU_REGS
1069 .globl ret_from_crit_exc
1071 mfspr r9,SPRN_SPRG_THREAD
1072 lis r10,saved_ksp_limit@ha;
1073 lwz r10,saved_ksp_limit@l(r10);
1075 stw r10,KSP_LIMIT(r9)
1076 lis r9,crit_srr0@ha;
1077 lwz r9,crit_srr0@l(r9);
1078 lis r10,crit_srr1@ha;
1079 lwz r10,crit_srr1@l(r10);
1081 mtspr SPRN_SRR1,r10;
1082 RET_FROM_EXC_LEVEL(SPRN_CSRR0, SPRN_CSRR1, PPC_RFCI)
1083 #endif /* CONFIG_40x */
1086 .globl ret_from_crit_exc
1088 mfspr r9,SPRN_SPRG_THREAD
1089 lwz r10,SAVED_KSP_LIMIT(r1)
1090 stw r10,KSP_LIMIT(r9)
1091 RESTORE_xSRR(SRR0,SRR1);
1093 RET_FROM_EXC_LEVEL(SPRN_CSRR0, SPRN_CSRR1, PPC_RFCI)
1095 .globl ret_from_debug_exc
1097 mfspr r9,SPRN_SPRG_THREAD
1098 lwz r10,SAVED_KSP_LIMIT(r1)
1099 stw r10,KSP_LIMIT(r9)
1100 lwz r9,THREAD_INFO-THREAD(r9)
1101 CURRENT_THREAD_INFO(r10, r1)
1102 lwz r10,TI_PREEMPT(r10)
1103 stw r10,TI_PREEMPT(r9)
1104 RESTORE_xSRR(SRR0,SRR1);
1105 RESTORE_xSRR(CSRR0,CSRR1);
1107 RET_FROM_EXC_LEVEL(SPRN_DSRR0, SPRN_DSRR1, PPC_RFDI)
1109 .globl ret_from_mcheck_exc
1110 ret_from_mcheck_exc:
1111 mfspr r9,SPRN_SPRG_THREAD
1112 lwz r10,SAVED_KSP_LIMIT(r1)
1113 stw r10,KSP_LIMIT(r9)
1114 RESTORE_xSRR(SRR0,SRR1);
1115 RESTORE_xSRR(CSRR0,CSRR1);
1116 RESTORE_xSRR(DSRR0,DSRR1);
1118 RET_FROM_EXC_LEVEL(SPRN_MCSRR0, SPRN_MCSRR1, PPC_RFMCI)
1119 #endif /* CONFIG_BOOKE */
1122 * Load the DBCR0 value for a task that is being ptraced,
1123 * having first saved away the global DBCR0. Note that r0
1124 * has the dbcr0 value to set upon entry to this.
1127 mfmsr r10 /* first disable debug exceptions */
1128 rlwinm r10,r10,0,~MSR_DE
1131 mfspr r10,SPRN_DBCR0
1132 lis r11,global_dbcr0@ha
1133 addi r11,r11,global_dbcr0@l
1135 CURRENT_THREAD_INFO(r9, r1)
1146 mtspr SPRN_DBSR,r11 /* clear all pending debug events */
1154 #endif /* !(CONFIG_4xx || CONFIG_BOOKE) */
1156 do_work: /* r10 contains MSR_KERNEL here */
1157 andi. r0,r9,_TIF_NEED_RESCHED
1160 do_resched: /* r10 contains MSR_KERNEL here */
1161 /* Note: We don't need to inform lockdep that we are enabling
1162 * interrupts here. As far as it knows, they are already enabled
1166 MTMSRD(r10) /* hard-enable interrupts */
1169 /* Note: And we don't tell it we are disabling them again
1170 * neither. Those disable/enable cycles used to peek at
1171 * TI_FLAGS aren't advertised.
1173 LOAD_MSR_KERNEL(r10,MSR_KERNEL)
1175 MTMSRD(r10) /* disable interrupts */
1176 CURRENT_THREAD_INFO(r9, r1)
1178 andi. r0,r9,_TIF_NEED_RESCHED
1180 andi. r0,r9,_TIF_USER_WORK_MASK
1182 do_user_signal: /* r10 contains MSR_KERNEL here */
1185 MTMSRD(r10) /* hard-enable interrupts */
1186 /* save r13-r31 in the exception frame, if not already done */
1193 2: addi r3,r1,STACK_FRAME_OVERHEAD
1200 * We come here when we are at the end of handling an exception
1201 * that occurred at a place where taking an exception will lose
1202 * state information, such as the contents of SRR0 and SRR1.
1205 lis r10,exc_exit_restart_end@ha
1206 addi r10,r10,exc_exit_restart_end@l
1209 lis r11,exc_exit_restart@ha
1210 addi r11,r11,exc_exit_restart@l
1213 lis r10,ee_restarts@ha
1214 lwz r12,ee_restarts@l(r10)
1216 stw r12,ee_restarts@l(r10)
1217 mr r12,r11 /* restart at exc_exit_restart */
1219 3: /* OK, we can't recover, kill this process */
1220 /* but the 601 doesn't implement the RI bit, so assume it's OK */
1223 END_FTR_SECTION_IFSET(CPU_FTR_601)
1230 4: addi r3,r1,STACK_FRAME_OVERHEAD
1231 bl nonrecoverable_exception
1232 /* shouldn't return */
1242 * PROM code for specific machines follows. Put it
1243 * here so it's easy to add arch-specific sections later.
1246 #ifdef CONFIG_PPC_RTAS
1248 * On CHRP, the Run-Time Abstraction Services (RTAS) have to be
1249 * called with the MMU off.
1252 stwu r1,-INT_FRAME_SIZE(r1)
1254 stw r0,INT_FRAME_SIZE+4(r1)
1255 LOAD_REG_ADDR(r4, rtas)
1256 lis r6,1f@ha /* physical return address for rtas */
1260 lwz r8,RTASENTRY(r4)
1264 LOAD_MSR_KERNEL(r0,MSR_KERNEL)
1265 SYNC /* disable interrupts so SRR0/1 */
1266 MTMSRD(r0) /* don't get trashed */
1267 li r9,MSR_KERNEL & ~(MSR_IR|MSR_DR)
1269 mtspr SPRN_SPRG_RTAS,r7
1274 lwz r8,INT_FRAME_SIZE+4(r9) /* get return address */
1275 lwz r9,8(r9) /* original msr value */
1277 addi r1,r1,INT_FRAME_SIZE
1279 mtspr SPRN_SPRG_RTAS,r0
1282 RFI /* return to caller */
1284 .globl machine_check_in_rtas
1285 machine_check_in_rtas:
1287 /* XXX load up BATs and panic */
1289 #endif /* CONFIG_PPC_RTAS */
1291 #ifdef CONFIG_FUNCTION_TRACER
1292 #ifdef CONFIG_DYNAMIC_FTRACE
1296 * It is required that _mcount on PPC32 must preserve the
1297 * link register. But we have r0 to play with. We use r0
1298 * to push the return address back to the caller of mcount
1299 * into the ctr register, restore the link register and
1300 * then jump back using the ctr register.
1308 _GLOBAL(ftrace_caller)
1310 /* r3 ends up with link register */
1311 subi r3, r3, MCOUNT_INSN_SIZE
1316 #ifdef CONFIG_FUNCTION_GRAPH_TRACER
1317 .globl ftrace_graph_call
1320 _GLOBAL(ftrace_graph_stub)
1322 MCOUNT_RESTORE_FRAME
1323 /* old link register ends up in ctr reg */
1331 subi r3, r3, MCOUNT_INSN_SIZE
1332 LOAD_REG_ADDR(r5, ftrace_trace_function)
1339 #ifdef CONFIG_FUNCTION_GRAPH_TRACER
1340 b ftrace_graph_caller
1342 MCOUNT_RESTORE_FRAME
1346 _GLOBAL(ftrace_stub)
1349 #ifdef CONFIG_FUNCTION_GRAPH_TRACER
1350 _GLOBAL(ftrace_graph_caller)
1351 /* load r4 with local address */
1353 subi r4, r4, MCOUNT_INSN_SIZE
1355 /* Grab the LR out of the caller stack frame */
1358 bl prepare_ftrace_return
1362 * prepare_ftrace_return gives us the address we divert to.
1363 * Change the LR in the callers stack frame to this.
1367 MCOUNT_RESTORE_FRAME
1368 /* old link register ends up in ctr reg */
1371 _GLOBAL(return_to_handler)
1372 /* need to save return values */
1379 bl ftrace_return_to_handler
1382 /* return value has real return address */
1390 /* Jump back to real return address */
1392 #endif /* CONFIG_FUNCTION_GRAPH_TRACER */
1394 #endif /* CONFIG_FUNCTION_TRACER */