2 * Instruction-patching support.
4 * Copyright (C) 2003 Hewlett-Packard Co
5 * David Mosberger-Tang <davidm@hpl.hp.com>
7 #include <linux/init.h>
8 #include <linux/string.h>
10 #include <asm/patch.h>
11 #include <asm/processor.h>
12 #include <asm/sections.h>
13 #include <asm/unistd.h>
16 * This was adapted from code written by Tony Luck:
18 * The 64-bit value in a "movl reg=value" is scattered between the two words of the bundle
22 * 3210987654321098765432109876543210987654321098765432109876543210
23 * ABBBBBBBBBBBBBBBBBBBBBBBCCCCCCCCCCCCCCCCCCDEEEEEFFFFFFFFFGGGGGGG
25 * CCCCCCCCCCCCCCCCCCxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
26 * xxxxAFFFFFFFFFEEEEEDxGGGGGGGxxxxxxxxxxxxxBBBBBBBBBBBBBBBBBBBBBBB
29 get_imm64 (u64 insn_addr
)
31 u64
*p
= (u64
*) (insn_addr
& -16); /* mask out slot number */
33 return ( (p
[1] & 0x0800000000000000UL
) << 4) | /*A*/
34 ((p
[1] & 0x00000000007fffffUL
) << 40) | /*B*/
35 ((p
[0] & 0xffffc00000000000UL
) >> 24) | /*C*/
36 ((p
[1] & 0x0000100000000000UL
) >> 23) | /*D*/
37 ((p
[1] & 0x0003e00000000000UL
) >> 29) | /*E*/
38 ((p
[1] & 0x07fc000000000000UL
) >> 43) | /*F*/
39 ((p
[1] & 0x000007f000000000UL
) >> 36); /*G*/
42 /* Patch instruction with "val" where "mask" has 1 bits. */
44 ia64_patch (u64 insn_addr
, u64 mask
, u64 val
)
46 u64 m0
, m1
, v0
, v1
, b0
, b1
, *b
= (u64
*) (insn_addr
& -16);
47 # define insn_mask ((1UL << 41) - 1)
51 shift
= 5 + 41 * (insn_addr
% 16); /* 5 bits of template, then 3 x 41-bit instructions */
53 m1
= mask
<< (shift
- 64);
54 v1
= val
<< (shift
- 64);
56 m0
= mask
<< shift
; m1
= mask
>> (64 - shift
);
57 v0
= val
<< shift
; v1
= val
>> (64 - shift
);
58 b
[0] = (b0
& ~m0
) | (v0
& m0
);
60 b
[1] = (b1
& ~m1
) | (v1
& m1
);
64 ia64_patch_imm64 (u64 insn_addr
, u64 val
)
66 /* The assembler may generate offset pointing to either slot 1
67 or slot 2 for a long (2-slot) instruction, occupying slots 1
70 ia64_patch(insn_addr
+ 2,
71 0x01fffefe000UL
, ( ((val
& 0x8000000000000000UL
) >> 27) /* bit 63 -> 36 */
72 | ((val
& 0x0000000000200000UL
) << 0) /* bit 21 -> 21 */
73 | ((val
& 0x00000000001f0000UL
) << 6) /* bit 16 -> 22 */
74 | ((val
& 0x000000000000ff80UL
) << 20) /* bit 7 -> 27 */
75 | ((val
& 0x000000000000007fUL
) << 13) /* bit 0 -> 13 */));
76 ia64_patch(insn_addr
+ 1, 0x1ffffffffffUL
, val
>> 22);
80 ia64_patch_imm60 (u64 insn_addr
, u64 val
)
82 /* The assembler may generate offset pointing to either slot 1
83 or slot 2 for a long (2-slot) instruction, occupying slots 1
86 ia64_patch(insn_addr
+ 2,
87 0x011ffffe000UL
, ( ((val
& 0x0800000000000000UL
) >> 23) /* bit 59 -> 36 */
88 | ((val
& 0x00000000000fffffUL
) << 13) /* bit 0 -> 13 */));
89 ia64_patch(insn_addr
+ 1, 0x1fffffffffcUL
, val
>> 18);
93 * We need sometimes to load the physical address of a kernel
94 * object. Often we can convert the virtual address to physical
95 * at execution time, but sometimes (either for performance reasons
96 * or during error recovery) we cannot to this. Patch the marked
97 * bundles to load the physical address.
100 ia64_patch_vtop (unsigned long start
, unsigned long end
)
102 s32
*offp
= (s32
*) start
;
105 while (offp
< (s32
*) end
) {
106 ip
= (u64
) offp
+ *offp
;
108 /* replace virtual address with corresponding physical address: */
109 ia64_patch_imm64(ip
, ia64_tpa(get_imm64(ip
)));
110 ia64_fc((void *) ip
);
118 * Disable the RSE workaround by turning the conditional branch
119 * that we tagged in each place the workaround was used into an
120 * unconditional branch.
123 ia64_patch_rse (unsigned long start
, unsigned long end
)
125 s32
*offp
= (s32
*) start
;
128 while (offp
< (s32
*) end
) {
129 ip
= (u64
) offp
+ *offp
;
131 b
= (u64
*)(ip
& -16);
133 ia64_fc((void *) ip
);
141 ia64_patch_mckinley_e9 (unsigned long start
, unsigned long end
)
143 static int first_time
= 1;
145 s32
*offp
= (s32
*) start
;
148 need_workaround
= (local_cpu_data
->family
== 0x1f && local_cpu_data
->model
== 0);
153 printk(KERN_INFO
"Leaving McKinley Errata 9 workaround enabled\n");
158 while (offp
< (s32
*) end
) {
159 wp
= (u64
*) ia64_imva((char *) offp
+ *offp
);
160 wp
[0] = 0x0000000100000011UL
; /* nop.m 0; nop.i 0; br.ret.sptk.many b6 */
161 wp
[1] = 0x0084006880000200UL
;
162 wp
[2] = 0x0000000100000000UL
; /* nop.m 0; nop.i 0; nop.i 0 */
163 wp
[3] = 0x0004000000000200UL
;
164 ia64_fc(wp
); ia64_fc(wp
+ 2);
172 patch_fsyscall_table (unsigned long start
, unsigned long end
)
174 extern unsigned long fsyscall_table
[NR_syscalls
];
175 s32
*offp
= (s32
*) start
;
178 while (offp
< (s32
*) end
) {
179 ip
= (u64
) ia64_imva((char *) offp
+ *offp
);
180 ia64_patch_imm64(ip
, (u64
) fsyscall_table
);
181 ia64_fc((void *) ip
);
189 patch_brl_fsys_bubble_down (unsigned long start
, unsigned long end
)
191 extern char fsys_bubble_down
[];
192 s32
*offp
= (s32
*) start
;
195 while (offp
< (s32
*) end
) {
196 ip
= (u64
) offp
+ *offp
;
197 ia64_patch_imm60((u64
) ia64_imva((void *) ip
),
198 (u64
) (fsys_bubble_down
- (ip
& -16)) / 16);
199 ia64_fc((void *) ip
);
207 ia64_patch_gate (void)
209 # define START(name) ((unsigned long) __start_gate_##name##_patchlist)
210 # define END(name) ((unsigned long)__end_gate_##name##_patchlist)
212 patch_fsyscall_table(START(fsyscall
), END(fsyscall
));
213 patch_brl_fsys_bubble_down(START(brl_fsys_bubble_down
), END(brl_fsys_bubble_down
));
214 ia64_patch_vtop(START(vtop
), END(vtop
));
215 ia64_patch_mckinley_e9(START(mckinley_e9
), END(mckinley_e9
));
218 void ia64_patch_phys_stack_reg(unsigned long val
)
220 s32
* offp
= (s32
*) __start___phys_stack_reg_patchlist
;
221 s32
* end
= (s32
*) __end___phys_stack_reg_patchlist
;
224 /* see instruction format A4: adds r1 = imm13, r3 */
225 mask
= (0x3fUL
<< 27) | (0x7f << 13);
226 imm
= (((val
>> 7) & 0x3f) << 27) | (val
& 0x7f) << 13;
229 ip
= (u64
) offp
+ *offp
;
230 ia64_patch(ip
, mask
, imm
);