1 /* SPDX-License-Identifier: GPL-2.0-or-later */
4 * Copyright (C) 1995-1996 Gary Thomas (gdt@linuxppc.org)
5 * Rewritten by Cort Dougan (cort@fsmlabs.com) for PReP
6 * Copyright (C) 1996 Cort Dougan <cort@fsmlabs.com>
7 * Adapted for Power Macintosh by Paul Mackerras.
8 * Low-level exception handlers and MMU support
9 * rewritten by Paul Mackerras.
10 * Copyright (C) 1996 Paul Mackerras.
11 * MPC8xx modifications Copyright (C) 1997 Dan Malek (dmalek@jlc.net).
13 * This file contains the system call entry code, context switch
14 * code, and exception/interrupt return code for PowerPC.
17 #include <linux/errno.h>
18 #include <linux/err.h>
19 #include <linux/sys.h>
20 #include <linux/threads.h>
24 #include <asm/cputable.h>
25 #include <asm/thread_info.h>
26 #include <asm/ppc_asm.h>
27 #include <asm/asm-offsets.h>
28 #include <asm/unistd.h>
29 #include <asm/ptrace.h>
30 #include <asm/export.h>
31 #include <asm/asm-405.h>
32 #include <asm/feature-fixups.h>
33 #include <asm/barrier.h>
40 * Align to 4k in order to ensure that all functions modyfing srr0/srr1
41 * fit into one page in order to not encounter a TLB miss between the
42 * modification of srr0/srr1 and the associated rfi.
47 .globl mcheck_transfer_to_handler
48 mcheck_transfer_to_handler:
55 .globl debug_transfer_to_handler
56 debug_transfer_to_handler:
63 .globl crit_transfer_to_handler
64 crit_transfer_to_handler:
65 #ifdef CONFIG_PPC_BOOK3E_MMU
76 #ifdef CONFIG_PHYS_64BIT
79 #endif /* CONFIG_PHYS_64BIT */
80 #endif /* CONFIG_PPC_BOOK3E_MMU */
90 /* set the stack limit to the current stack */
91 mfspr r8,SPRN_SPRG_THREAD
93 stw r0,SAVED_KSP_LIMIT(r11)
94 rlwinm r0,r1,0,0,(31 - THREAD_SHIFT)
100 .globl crit_transfer_to_handler
101 crit_transfer_to_handler:
107 stw r0,crit_srr0@l(0)
109 stw r0,crit_srr1@l(0)
111 /* set the stack limit to the current stack */
112 mfspr r8,SPRN_SPRG_THREAD
114 stw r0,saved_ksp_limit@l(0)
115 rlwinm r0,r1,0,0,(31 - THREAD_SHIFT)
121 * This code finishes saving the registers to the exception frame
122 * and jumps to the appropriate handler for the exception, turning
123 * on address translation.
124 * Note that we rely on the caller having set cr0.eq iff the exception
125 * occurred in kernel mode (i.e. MSR:PR = 0).
127 .globl transfer_to_handler_full
128 transfer_to_handler_full:
132 .globl transfer_to_handler
142 mfspr r12,SPRN_SPRG_THREAD
143 beq 2f /* if from user, fix up THREAD.regs */
144 addi r2, r12, -THREAD
145 addi r11,r1,STACK_FRAME_OVERHEAD
147 #if defined(CONFIG_40x) || defined(CONFIG_BOOKE)
148 /* Check to see if the dbcr0 register is set up to debug. Use the
149 internal debug mode bit to do this. */
150 lwz r12,THREAD_DBCR0(r12)
151 andis. r12,r12,DBCR0_IDM@h
153 ACCOUNT_CPU_USER_ENTRY(r2, r11, r12)
154 #ifdef CONFIG_PPC_BOOK3S_32
157 #if defined(CONFIG_40x) || defined(CONFIG_BOOKE)
159 /* From user and task is ptraced - load up global dbcr0 */
160 li r12,-1 /* clear all pending debug events */
162 lis r11,global_dbcr0@ha
164 addi r11,r11,global_dbcr0@l
179 2: /* if from kernel, check interrupted DOZE/NAP mode and
180 * check for stack overflow
182 kuap_save_and_lock r11, r12, r9, r2, r0
183 addi r2, r12, -THREAD
184 lwz r9,KSP_LIMIT(r12)
185 cmplw r1,r9 /* if r1 <= ksp_limit */
186 ble- stack_ovf /* then the kernel stack overflowed */
188 #if defined(CONFIG_PPC_BOOK3S_32) || defined(CONFIG_E500)
189 lwz r12,TI_LOCAL_FLAGS(r2)
191 bt- 31-TLF_NAPPING,4f
192 bt- 31-TLF_SLEEPING,7f
193 #endif /* CONFIG_PPC_BOOK3S_32 || CONFIG_E500 */
194 .globl transfer_to_handler_cont
195 transfer_to_handler_cont:
198 tovirt(r2, r2) /* set r2 to current */
199 lwz r11,0(r9) /* virtual address of handler */
200 lwz r9,4(r9) /* where to go when done */
201 #if defined(CONFIG_PPC_8xx) && defined(CONFIG_PERF_EVENTS)
204 #ifdef CONFIG_TRACE_IRQFLAGS
206 * When tracing IRQ state (lockdep) we enable the MMU before we call
207 * the IRQ tracing functions as they might access vmalloc space or
208 * perform IOs for console output.
210 * To speed up the syscall path where interrupts stay on, let's check
211 * first if we are changing the MSR value at all.
218 /* MSR isn't changing, just transition directly */
224 RFI /* jump to handler, enable MMU */
226 #ifdef CONFIG_TRACE_IRQFLAGS
227 1: /* MSR is changing, re-enable MMU so we can notify lockdep. We need to
228 * keep interrupts disabled at this point otherwise we might risk
229 * taking an interrupt before we tell lockdep they are enabled.
231 lis r12,reenable_mmu@h
232 ori r12,r12,reenable_mmu@l
233 LOAD_REG_IMMEDIATE(r0, MSR_KERNEL)
241 * We save a bunch of GPRs,
242 * r3 can be different from GPR3(r1) at this point, r9 and r11
243 * contains the old MSR and handler address respectively,
244 * r4 & r5 can contain page fault arguments that need to be passed
245 * along as well. r12, CCR, CTR, XER etc... are left clobbered as
246 * they aren't useful past this point (aren't syscall arguments),
247 * the rest is restored from the exception frame.
257 /* If we are disabling interrupts (normal case), simply log it with
260 1: bl trace_hardirqs_off
273 bctr /* jump to handler */
274 #endif /* CONFIG_TRACE_IRQFLAGS */
276 #if defined (CONFIG_PPC_BOOK3S_32) || defined(CONFIG_E500)
277 4: rlwinm r12,r12,0,~_TLF_NAPPING
278 stw r12,TI_LOCAL_FLAGS(r2)
279 b power_save_ppc32_restore
281 7: rlwinm r12,r12,0,~_TLF_SLEEPING
282 stw r12,TI_LOCAL_FLAGS(r2)
283 lwz r9,_MSR(r11) /* if sleeping, clear MSR.EE */
284 rlwinm r9,r9,0,~MSR_EE
285 lwz r12,_LINK(r11) /* and return to address in LR */
286 kuap_restore r11, r2, r3, r4, r5
287 b fast_exception_return
291 * On kernel stack overflow, load up an initial stack pointer
292 * and call StackOverflow(regs), which should not return.
295 /* sometimes we use a statically-allocated stack, which is OK. */
299 ble 5b /* r1 <= &_end is OK */
301 addi r3,r1,STACK_FRAME_OVERHEAD
302 lis r1,init_thread_union@ha
303 addi r1,r1,init_thread_union@l
304 addi r1,r1,THREAD_SIZE-STACK_FRAME_OVERHEAD
305 lis r9,StackOverflow@ha
306 addi r9,r9,StackOverflow@l
307 LOAD_REG_IMMEDIATE(r10,MSR_KERNEL)
308 #if defined(CONFIG_PPC_8xx) && defined(CONFIG_PERF_EVENTS)
316 #ifdef CONFIG_TRACE_IRQFLAGS
317 trace_syscall_entry_irq_off:
319 * Syscall shouldn't happen while interrupts are disabled,
320 * so let's do a warning here.
323 EMIT_BUG_ENTRY 0b,__FILE__,__LINE__, BUGFLAG_WARNING
326 /* Now enable for real */
327 LOAD_REG_IMMEDIATE(r10, MSR_KERNEL | MSR_EE)
334 #endif /* CONFIG_TRACE_IRQFLAGS */
336 .globl transfer_to_syscall
338 #ifdef CONFIG_TRACE_IRQFLAGS
340 beq- trace_syscall_entry_irq_off
341 #endif /* CONFIG_TRACE_IRQFLAGS */
344 * Handle a system call.
346 .stabs "arch/powerpc/kernel/",N_SO,0,0,0f
347 .stabs "entry_32.S",N_SO,0,0,0f
354 #ifdef CONFIG_TRACE_IRQFLAGS
355 /* Make sure interrupts are enabled */
358 /* We came in with interrupts disabled, we WARN and mark them enabled
361 EMIT_BUG_ENTRY 0b,__FILE__,__LINE__, BUGFLAG_WARNING
362 #endif /* CONFIG_TRACE_IRQFLAGS */
364 andi. r11,r11,_TIF_SYSCALL_DOTRACE
366 syscall_dotrace_cont:
367 cmplwi 0,r0,NR_syscalls
368 lis r10,sys_call_table@h
369 ori r10,r10,sys_call_table@l
375 * Prevent the load of the handler below (based on the user-passed
376 * system call number) being speculatively executed until the test
377 * against NR_syscalls and branch to .66f above has
381 lwzx r10,r10,r0 /* Fetch system call handler [ptr] */
383 addi r9,r1,STACK_FRAME_OVERHEAD
385 blrl /* Call handler */
386 .globl ret_from_syscall
388 #ifdef CONFIG_DEBUG_RSEQ
389 /* Check whether the syscall is issued inside a restartable sequence */
391 addi r3,r1,STACK_FRAME_OVERHEAD
396 /* disable interrupts so current_thread_info()->flags can't change */
397 LOAD_REG_IMMEDIATE(r10,MSR_KERNEL) /* doesn't include MSR_EE */
398 /* Note: We don't bother telling lockdep about it */
403 andi. r0,r9,(_TIF_SYSCALL_DOTRACE|_TIF_SINGLESTEP|_TIF_USER_WORK_MASK|_TIF_PERSYSCALL_MASK)
404 bne- syscall_exit_work
406 blt+ syscall_exit_cont
407 lwz r11,_CCR(r1) /* Load CR */
409 oris r11,r11,0x1000 /* Set SO bit in CR */
413 #ifdef CONFIG_TRACE_IRQFLAGS
414 /* If we are going to return from the syscall with interrupts
415 * off, we trace that here. It shouldn't normally happen.
420 bl trace_hardirqs_off
423 #endif /* CONFIG_TRACE_IRQFLAGS */
424 #if defined(CONFIG_4xx) || defined(CONFIG_BOOKE)
425 /* If the process has its own DBCR0 value, load it up. The internal
426 debug mode bit tells us that dbcr0 should be loaded. */
427 lwz r0,THREAD+THREAD_DBCR0(r2)
428 andis. r10,r0,DBCR0_IDM@h
432 BEGIN_MMU_FTR_SECTION
433 lis r4,icache_44x_need_flush@ha
434 lwz r5,icache_44x_need_flush@l(r4)
438 END_MMU_FTR_SECTION_IFCLR(MMU_FTR_TYPE_47x)
439 #endif /* CONFIG_44x */
442 END_FTR_SECTION_IFSET(CPU_FTR_NEED_PAIRED_STWCX)
443 stwcx. r0,0,r1 /* to clear the reservation */
444 ACCOUNT_CPU_USER_EXIT(r2, r5, r7)
445 #ifdef CONFIG_PPC_BOOK3S_32
456 #if defined(CONFIG_PPC_8xx) && defined(CONFIG_PERF_EVENTS)
466 stw r7,icache_44x_need_flush@l(r4)
468 #endif /* CONFIG_44x */
480 .globl ret_from_kernel_thread
481 ret_from_kernel_thread:
491 /* Traced system call support */
496 addi r3,r1,STACK_FRAME_OVERHEAD
497 bl do_syscall_trace_enter
499 * Restore argument registers possibly just changed.
500 * We use the return value of do_syscall_trace_enter
501 * for call number to look up in the table (r0).
512 cmplwi r0,NR_syscalls
513 /* Return code is already in r3 thanks to do_syscall_trace_enter() */
514 bge- ret_from_syscall
515 b syscall_dotrace_cont
518 andi. r0,r9,_TIF_RESTOREALL
524 andi. r0,r9,_TIF_NOERROR
526 lwz r11,_CCR(r1) /* Load CR */
528 oris r11,r11,0x1000 /* Set SO bit in CR */
531 1: stw r6,RESULT(r1) /* Save result */
532 stw r3,GPR3(r1) /* Update return value */
533 2: andi. r0,r9,(_TIF_PERSYSCALL_MASK)
536 /* Clear per-syscall TIF flags if any are set. */
538 li r11,_TIF_PERSYSCALL_MASK
542 #ifdef CONFIG_IBM405_ERR77
548 4: /* Anything which requires enabling interrupts? */
549 andi. r0,r9,(_TIF_SYSCALL_DOTRACE|_TIF_SINGLESTEP)
552 /* Re-enable interrupts. There is no need to trace that with
553 * lockdep as we are supposed to have IRQs on at this point
559 /* Save NVGPRS if they're not saved already */
567 addi r3,r1,STACK_FRAME_OVERHEAD
568 bl do_syscall_trace_leave
569 b ret_from_except_full
572 * The fork/clone functions need to copy the full register set into
573 * the child process. Therefore we need to save all the nonvolatile
574 * registers (r13 - r31) before calling the C code.
580 rlwinm r0,r0,0,0,30 /* clear LSB to indicate full */
581 stw r0,_TRAP(r1) /* register set saved */
588 rlwinm r0,r0,0,0,30 /* clear LSB to indicate full */
589 stw r0,_TRAP(r1) /* register set saved */
596 rlwinm r0,r0,0,0,30 /* clear LSB to indicate full */
597 stw r0,_TRAP(r1) /* register set saved */
604 rlwinm r0,r0,0,0,30 /* clear LSB to indicate full */
605 stw r0,_TRAP(r1) /* register set saved */
608 .globl ppc_swapcontext
612 rlwinm r0,r0,0,0,30 /* clear LSB to indicate full */
613 stw r0,_TRAP(r1) /* register set saved */
617 * Top-level page fault handling.
618 * This is in assembler because if do_page_fault tells us that
619 * it is a bad kernel page fault, we want to save the non-volatile
620 * registers before calling bad_page_fault.
622 .globl handle_page_fault
625 addi r3,r1,STACK_FRAME_OVERHEAD
626 #ifdef CONFIG_PPC_BOOK3S_32
627 andis. r0,r5,DSISR_DABRMATCH@h
628 bne- handle_dabr_fault
638 addi r3,r1,STACK_FRAME_OVERHEAD
641 b ret_from_except_full
643 #ifdef CONFIG_PPC_BOOK3S_32
644 /* We have a data breakpoint exception - handle it */
651 b ret_from_except_full
655 * This routine switches between two different tasks. The process
656 * state of one is saved on its kernel stack. Then the state
657 * of the other is restored from its kernel stack. The memory
658 * management hardware is updated to the second process's state.
659 * Finally, we can return to the second process.
660 * On entry, r3 points to the THREAD for the current task, r4
661 * points to the THREAD for the new task.
663 * This routine is always called with interrupts disabled.
665 * Note: there are two ways to get to the "going out" portion
666 * of this code; either by coming in via the entry (_switch)
667 * or via "fork" which must set up an environment equivalent
668 * to the "_switch" path. If you change this , you'll have to
669 * change the fork code also.
671 * The code which creates the new task context is in 'copy_thread'
672 * in arch/ppc/kernel/process.c
675 stwu r1,-INT_FRAME_SIZE(r1)
677 stw r0,INT_FRAME_SIZE+4(r1)
678 /* r3-r12 are caller saved -- Cort */
680 stw r0,_NIP(r1) /* Return to switch caller */
682 li r0,MSR_FP /* Disable floating-point */
683 #ifdef CONFIG_ALTIVEC
685 oris r0,r0,MSR_VEC@h /* Disable altivec */
686 mfspr r12,SPRN_VRSAVE /* save vrsave register value */
687 stw r12,THREAD+THREAD_VRSAVE(r2)
688 END_FTR_SECTION_IFSET(CPU_FTR_ALTIVEC)
689 #endif /* CONFIG_ALTIVEC */
692 oris r0,r0,MSR_SPE@h /* Disable SPE */
693 mfspr r12,SPRN_SPEFSCR /* save spefscr register value */
694 stw r12,THREAD+THREAD_SPEFSCR(r2)
695 END_FTR_SECTION_IFSET(CPU_FTR_SPE)
696 #endif /* CONFIG_SPE */
697 and. r0,r0,r11 /* FP or altivec or SPE enabled? */
705 stw r1,KSP(r3) /* Set old stack pointer */
709 /* We need a sync somewhere here to make sure that if the
710 * previous task gets rescheduled on another CPU, it sees all
711 * stores it has performed on this one.
714 #endif /* CONFIG_SMP */
717 mtspr SPRN_SPRG_THREAD,r0 /* Update current THREAD phys addr */
718 lwz r1,KSP(r4) /* Load new stack pointer */
720 /* save the old current 'last' for return value */
722 addi r2,r4,-THREAD /* Update current */
724 #ifdef CONFIG_ALTIVEC
726 lwz r0,THREAD+THREAD_VRSAVE(r2)
727 mtspr SPRN_VRSAVE,r0 /* if G4, restore VRSAVE reg */
728 END_FTR_SECTION_IFSET(CPU_FTR_ALTIVEC)
729 #endif /* CONFIG_ALTIVEC */
732 lwz r0,THREAD+THREAD_SPEFSCR(r2)
733 mtspr SPRN_SPEFSCR,r0 /* restore SPEFSCR reg */
734 END_FTR_SECTION_IFSET(CPU_FTR_SPE)
735 #endif /* CONFIG_SPE */
739 /* r3-r12 are destroyed -- Cort */
742 lwz r4,_NIP(r1) /* Return to _switch caller in new task */
744 addi r1,r1,INT_FRAME_SIZE
747 .globl fast_exception_return
748 fast_exception_return:
749 #if !(defined(CONFIG_4xx) || defined(CONFIG_BOOKE))
750 andi. r10,r9,MSR_RI /* check for recoverable interrupt */
751 beq 1f /* if not, we've got problems */
754 2: REST_4GPRS(3, r11)
760 /* Clear the exception_marker on the stack to avoid confusing stacktrace */
764 #if defined(CONFIG_PPC_8xx) && defined(CONFIG_PERF_EVENTS)
775 #if !(defined(CONFIG_4xx) || defined(CONFIG_BOOKE))
776 /* check if the exception happened in a restartable section */
777 1: lis r3,exc_exit_restart_end@ha
778 addi r3,r3,exc_exit_restart_end@l
780 #if CONFIG_PPC_BOOK3S_601
785 lis r4,exc_exit_restart@ha
786 addi r4,r4,exc_exit_restart@l
788 #if CONFIG_PPC_BOOK3S_601
793 lis r3,fee_restarts@ha
795 lwz r5,fee_restarts@l(r3)
797 stw r5,fee_restarts@l(r3)
798 mr r12,r4 /* restart at exc_exit_restart */
807 /* aargh, a nonrecoverable interrupt, panic */
808 /* aargh, we don't know which trap this is */
809 /* but the 601 doesn't implement the RI bit, so assume it's OK */
813 addi r3,r1,STACK_FRAME_OVERHEAD
815 ori r10,r10,MSR_KERNEL@l
816 bl transfer_to_handler_full
817 .long unrecoverable_exception
818 .long ret_from_except
821 .globl ret_from_except_full
822 ret_from_except_full:
826 .globl ret_from_except
828 /* Hard-disable interrupts so that current_thread_info()->flags
829 * can't change between when we test it and when we return
830 * from the interrupt. */
831 /* Note: We don't bother telling lockdep about it */
832 LOAD_REG_IMMEDIATE(r10,MSR_KERNEL)
833 SYNC /* Some chip revs have problems here... */
834 MTMSRD(r10) /* disable interrupts */
836 lwz r3,_MSR(r1) /* Returning to user mode? */
840 user_exc_return: /* r10 contains MSR_KERNEL here */
841 /* Check current_thread_info()->flags */
843 andi. r0,r9,_TIF_USER_WORK_MASK
847 #if defined(CONFIG_4xx) || defined(CONFIG_BOOKE)
848 /* Check whether this process has its own DBCR0 value. The internal
849 debug mode bit tells us that dbcr0 should be loaded. */
850 lwz r0,THREAD+THREAD_DBCR0(r2)
851 andis. r10,r0,DBCR0_IDM@h
854 ACCOUNT_CPU_USER_EXIT(r2, r10, r11)
855 #ifdef CONFIG_PPC_BOOK3S_32
861 /* N.B. the only way to get here is from the beq following ret_from_except. */
863 /* check current_thread_info, _TIF_EMULATE_STACK_STORE */
865 andis. r0,r8,_TIF_EMULATE_STACK_STORE@h
868 addi r8,r1,INT_FRAME_SIZE /* Get the kprobed function entry */
871 subi r3,r3,INT_FRAME_SIZE /* dst: Allocate a trampoline exception frame */
872 mr r4,r1 /* src: current exception frame */
873 mr r1,r3 /* Reroute the trampoline frame to r1 */
875 /* Copy from the original to the trampoline. */
876 li r5,INT_FRAME_SIZE/4 /* size: INT_FRAME_SIZE */
877 li r6,0 /* start offset: 0 */
884 /* Do real store operation to complete stwu */
888 /* Clear _TIF_EMULATE_STACK_STORE flag */
889 lis r11,_TIF_EMULATE_STACK_STORE@h
893 #ifdef CONFIG_IBM405_ERR77
900 #ifdef CONFIG_PREEMPTION
901 /* check current_thread_info->preempt_count */
902 lwz r0,TI_PREEMPT(r2)
903 cmpwi 0,r0,0 /* if non-zero, just restore regs and return */
905 andi. r8,r8,_TIF_NEED_RESCHED
908 andi. r0,r3,MSR_EE /* interrupts off? */
909 beq restore_kuap /* don't schedule if so */
910 #ifdef CONFIG_TRACE_IRQFLAGS
911 /* Lockdep thinks irqs are enabled, we need to call
912 * preempt_schedule_irq with IRQs off, so we inform lockdep
913 * now that we -did- turn them off already
915 bl trace_hardirqs_off
917 bl preempt_schedule_irq
918 #ifdef CONFIG_TRACE_IRQFLAGS
919 /* And now, to properly rebalance the above, we tell lockdep they
920 * are being turned back on, which will happen when we return
924 #endif /* CONFIG_PREEMPTION */
926 kuap_restore r1, r2, r9, r10, r0
928 /* interrupts are hard-disabled at this point */
931 BEGIN_MMU_FTR_SECTION
933 END_MMU_FTR_SECTION_IFSET(MMU_FTR_TYPE_47x)
934 lis r4,icache_44x_need_flush@ha
935 lwz r5,icache_44x_need_flush@l(r4)
940 stw r6,icache_44x_need_flush@l(r4)
942 #endif /* CONFIG_44x */
945 #ifdef CONFIG_TRACE_IRQFLAGS
946 /* Lockdep doesn't know about the fact that IRQs are temporarily turned
947 * off in this assembly code while peeking at TI_FLAGS() and such. However
948 * we need to inform it if the exception turned interrupts off, and we
949 * are about to trun them back on.
960 #endif /* CONFIG_TRACE_IRQFLAGS */
975 END_FTR_SECTION_IFSET(CPU_FTR_NEED_PAIRED_STWCX)
976 stwcx. r0,0,r1 /* to clear the reservation */
978 #if !(defined(CONFIG_4xx) || defined(CONFIG_BOOKE))
979 andi. r10,r9,MSR_RI /* check if this exception occurred */
980 beql nonrecoverable /* at a bad place (MSR:RI = 0) */
987 /* Clear the exception_marker on the stack to avoid confusing stacktrace */
991 * Once we put values in SRR0 and SRR1, we are in a state
992 * where exceptions are not recoverable, since taking an
993 * exception will trash SRR0 and SRR1. Therefore we clear the
994 * MSR:RI bit to indicate this. If we do take an exception,
995 * we can't return to the point of the exception but we
996 * can restart the exception exit path at the label
997 * exc_exit_restart below. -- paulus
999 LOAD_REG_IMMEDIATE(r10,MSR_KERNEL & ~MSR_RI)
1001 MTMSRD(r10) /* clear the RI bit */
1002 .globl exc_exit_restart
1009 .globl exc_exit_restart_end
1010 exc_exit_restart_end:
1014 #else /* !(CONFIG_4xx || CONFIG_BOOKE) */
1016 * This is a bit different on 4xx/Book-E because it doesn't have
1017 * the RI bit in the MSR.
1018 * The TLB miss handler checks if we have interrupted
1019 * the exception exit path and restarts it if so
1020 * (well maybe one day it will... :).
1026 /* Clear the exception_marker on the stack to avoid confusing stacktrace */
1030 .globl exc_exit_restart
1039 .globl exc_exit_restart_end
1040 exc_exit_restart_end:
1043 b . /* prevent prefetch past rfi */
1046 * Returning from a critical interrupt in user mode doesn't need
1047 * to be any different from a normal exception. For a critical
1048 * interrupt in the kernel, we just return (without checking for
1049 * preemption) since the interrupt may have happened at some crucial
1050 * place (e.g. inside the TLB miss handler), and because we will be
1051 * running with r1 pointing into critical_stack, not the current
1052 * process's kernel stack (and therefore current_thread_info() will
1053 * give the wrong answer).
1054 * We have to restore various SPRs that may have been in use at the
1055 * time of the critical interrupt.
1059 #define PPC_40x_TURN_OFF_MSR_DR \
1060 /* avoid any possible TLB misses here by turning off MSR.DR, we \
1061 * assume the instructions here are mapped by a pinned TLB entry */ \
1067 #define PPC_40x_TURN_OFF_MSR_DR
1070 #define RET_FROM_EXC_LEVEL(exc_lvl_srr0, exc_lvl_srr1, exc_lvl_rfi) \
1073 andi. r3,r3,MSR_PR; \
1074 LOAD_REG_IMMEDIATE(r10,MSR_KERNEL); \
1075 bne user_exc_return; \
1078 REST_4GPRS(3, r1); \
1079 REST_2GPRS(7, r1); \
1082 mtspr SPRN_XER,r10; \
1084 PPC405_ERR77(0,r1); \
1085 stwcx. r0,0,r1; /* to clear the reservation */ \
1086 lwz r11,_LINK(r1); \
1090 PPC_40x_TURN_OFF_MSR_DR; \
1093 mtspr SPRN_DEAR,r9; \
1094 mtspr SPRN_ESR,r10; \
1097 mtspr exc_lvl_srr0,r11; \
1098 mtspr exc_lvl_srr1,r12; \
1100 lwz r12,GPR12(r1); \
1101 lwz r10,GPR10(r1); \
1102 lwz r11,GPR11(r1); \
1104 PPC405_ERR77_SYNC; \
1106 b .; /* prevent prefetch past exc_lvl_rfi */
1108 #define RESTORE_xSRR(exc_lvl_srr0, exc_lvl_srr1) \
1109 lwz r9,_##exc_lvl_srr0(r1); \
1110 lwz r10,_##exc_lvl_srr1(r1); \
1111 mtspr SPRN_##exc_lvl_srr0,r9; \
1112 mtspr SPRN_##exc_lvl_srr1,r10;
1114 #if defined(CONFIG_PPC_BOOK3E_MMU)
1115 #ifdef CONFIG_PHYS_64BIT
1116 #define RESTORE_MAS7 \
1118 mtspr SPRN_MAS7,r11;
1120 #define RESTORE_MAS7
1121 #endif /* CONFIG_PHYS_64BIT */
1122 #define RESTORE_MMU_REGS \
1126 mtspr SPRN_MAS0,r9; \
1128 mtspr SPRN_MAS1,r10; \
1130 mtspr SPRN_MAS2,r11; \
1131 mtspr SPRN_MAS3,r9; \
1132 mtspr SPRN_MAS6,r10; \
1134 #elif defined(CONFIG_44x)
1135 #define RESTORE_MMU_REGS \
1137 mtspr SPRN_MMUCR,r9;
1139 #define RESTORE_MMU_REGS
1143 .globl ret_from_crit_exc
1145 mfspr r9,SPRN_SPRG_THREAD
1146 lis r10,saved_ksp_limit@ha;
1147 lwz r10,saved_ksp_limit@l(r10);
1149 stw r10,KSP_LIMIT(r9)
1150 lis r9,crit_srr0@ha;
1151 lwz r9,crit_srr0@l(r9);
1152 lis r10,crit_srr1@ha;
1153 lwz r10,crit_srr1@l(r10);
1155 mtspr SPRN_SRR1,r10;
1156 RET_FROM_EXC_LEVEL(SPRN_CSRR0, SPRN_CSRR1, PPC_RFCI)
1157 #endif /* CONFIG_40x */
1160 .globl ret_from_crit_exc
1162 mfspr r9,SPRN_SPRG_THREAD
1163 lwz r10,SAVED_KSP_LIMIT(r1)
1164 stw r10,KSP_LIMIT(r9)
1165 RESTORE_xSRR(SRR0,SRR1);
1167 RET_FROM_EXC_LEVEL(SPRN_CSRR0, SPRN_CSRR1, PPC_RFCI)
1169 .globl ret_from_debug_exc
1171 mfspr r9,SPRN_SPRG_THREAD
1172 lwz r10,SAVED_KSP_LIMIT(r1)
1173 stw r10,KSP_LIMIT(r9)
1174 RESTORE_xSRR(SRR0,SRR1);
1175 RESTORE_xSRR(CSRR0,CSRR1);
1177 RET_FROM_EXC_LEVEL(SPRN_DSRR0, SPRN_DSRR1, PPC_RFDI)
1179 .globl ret_from_mcheck_exc
1180 ret_from_mcheck_exc:
1181 mfspr r9,SPRN_SPRG_THREAD
1182 lwz r10,SAVED_KSP_LIMIT(r1)
1183 stw r10,KSP_LIMIT(r9)
1184 RESTORE_xSRR(SRR0,SRR1);
1185 RESTORE_xSRR(CSRR0,CSRR1);
1186 RESTORE_xSRR(DSRR0,DSRR1);
1188 RET_FROM_EXC_LEVEL(SPRN_MCSRR0, SPRN_MCSRR1, PPC_RFMCI)
1189 #endif /* CONFIG_BOOKE */
1192 * Load the DBCR0 value for a task that is being ptraced,
1193 * having first saved away the global DBCR0. Note that r0
1194 * has the dbcr0 value to set upon entry to this.
1197 mfmsr r10 /* first disable debug exceptions */
1198 rlwinm r10,r10,0,~MSR_DE
1201 mfspr r10,SPRN_DBCR0
1202 lis r11,global_dbcr0@ha
1203 addi r11,r11,global_dbcr0@l
1215 mtspr SPRN_DBSR,r11 /* clear all pending debug events */
1220 .global global_dbcr0
1224 #endif /* !(CONFIG_4xx || CONFIG_BOOKE) */
1226 do_work: /* r10 contains MSR_KERNEL here */
1227 andi. r0,r9,_TIF_NEED_RESCHED
1230 do_resched: /* r10 contains MSR_KERNEL here */
1231 #ifdef CONFIG_TRACE_IRQFLAGS
1232 bl trace_hardirqs_on
1237 MTMSRD(r10) /* hard-enable interrupts */
1240 /* Note: And we don't tell it we are disabling them again
1241 * neither. Those disable/enable cycles used to peek at
1242 * TI_FLAGS aren't advertised.
1244 LOAD_REG_IMMEDIATE(r10,MSR_KERNEL)
1246 MTMSRD(r10) /* disable interrupts */
1248 andi. r0,r9,_TIF_NEED_RESCHED
1250 andi. r0,r9,_TIF_USER_WORK_MASK
1252 do_user_signal: /* r10 contains MSR_KERNEL here */
1255 MTMSRD(r10) /* hard-enable interrupts */
1256 /* save r13-r31 in the exception frame, if not already done */
1263 2: addi r3,r1,STACK_FRAME_OVERHEAD
1270 * We come here when we are at the end of handling an exception
1271 * that occurred at a place where taking an exception will lose
1272 * state information, such as the contents of SRR0 and SRR1.
1275 lis r10,exc_exit_restart_end@ha
1276 addi r10,r10,exc_exit_restart_end@l
1278 #ifdef CONFIG_PPC_BOOK3S_601
1283 lis r11,exc_exit_restart@ha
1284 addi r11,r11,exc_exit_restart@l
1286 #ifdef CONFIG_PPC_BOOK3S_601
1291 lis r10,ee_restarts@ha
1292 lwz r12,ee_restarts@l(r10)
1294 stw r12,ee_restarts@l(r10)
1295 mr r12,r11 /* restart at exc_exit_restart */
1297 3: /* OK, we can't recover, kill this process */
1298 /* but the 601 doesn't implement the RI bit, so assume it's OK */
1305 5: mfspr r2,SPRN_SPRG_THREAD
1307 tovirt(r2,r2) /* set back r2 to current */
1308 4: addi r3,r1,STACK_FRAME_OVERHEAD
1309 bl unrecoverable_exception
1310 /* shouldn't return */
1320 * PROM code for specific machines follows. Put it
1321 * here so it's easy to add arch-specific sections later.
1324 #ifdef CONFIG_PPC_RTAS
1326 * On CHRP, the Run-Time Abstraction Services (RTAS) have to be
1327 * called with the MMU off.
1330 stwu r1,-INT_FRAME_SIZE(r1)
1332 stw r0,INT_FRAME_SIZE+4(r1)
1333 LOAD_REG_ADDR(r4, rtas)
1334 lis r6,1f@ha /* physical return address for rtas */
1338 lwz r8,RTASENTRY(r4)
1342 LOAD_REG_IMMEDIATE(r0,MSR_KERNEL)
1343 SYNC /* disable interrupts so SRR0/1 */
1344 MTMSRD(r0) /* don't get trashed */
1345 li r9,MSR_KERNEL & ~(MSR_IR|MSR_DR)
1347 stw r7, THREAD + RTAS_SP(r2)
1352 lwz r8,INT_FRAME_SIZE+4(r9) /* get return address */
1353 lwz r9,8(r9) /* original msr value */
1354 addi r1,r1,INT_FRAME_SIZE
1357 stw r0, THREAD + RTAS_SP(r7)
1360 RFI /* return to caller */
1362 .globl machine_check_in_rtas
1363 machine_check_in_rtas:
1365 /* XXX load up BATs and panic */
1367 #endif /* CONFIG_PPC_RTAS */