2 * This file is subject to the terms and conditions of the GNU General Public
3 * License. See the file "COPYING" in the main directory of this archive
6 * Unified implementation of memcpy, memmove and the __copy_user backend.
8 * Copyright (C) 1998, 99, 2000, 01, 2002 Ralf Baechle (ralf@gnu.org)
9 * Copyright (C) 1999, 2000, 01, 2002 Silicon Graphics, Inc.
10 * Copyright (C) 2002 Broadcom, Inc.
11 * memcpy/copy_user author: Mark Vandevoorde
12 * Copyright (C) 2007 Maciej W. Rozycki
13 * Copyright (C) 2014 Imagination Technologies Ltd.
15 * Mnemonic names for arguments to memcpy/__copy_user
19 * Hack to resolve longstanding prefetch issue
21 * Prefetching may be fatal on some systems if we're prefetching beyond the
22 * end of memory on some systems. It's also a seriously bad idea on non
23 * dma-coherent systems.
25 #ifdef CONFIG_DMA_NONCOHERENT
26 #undef CONFIG_CPU_HAS_PREFETCH
28 #ifdef CONFIG_MIPS_MALTA
29 #undef CONFIG_CPU_HAS_PREFETCH
33 #include <asm/asm-offsets.h>
34 #include <asm/regdef.h>
43 * memcpy copies len bytes from src to dst and sets v0 to dst.
45 * - src and dst don't overlap
48 * memcpy uses the standard calling convention
50 * __copy_user copies up to len bytes from src to dst and sets a2 (len) to
51 * the number of uncopied bytes due to an exception caused by a read or write.
52 * __copy_user assumes that src and dst don't overlap, and that the call is
53 * implementing one of the following:
55 * - src is readable (no exceptions when reading src)
57 * - dst is writable (no exceptions when writing dst)
58 * __copy_user uses a non-standard calling convention; see
59 * include/asm-mips/uaccess.h
61 * When an exception happens on a load, the handler must
62 # ensure that all of the destination buffer is overwritten to prevent
63 * leaking information to user mode programs.
71 * The exception handler for loads requires that:
72 * 1- AT contain the address of the byte just past the end of the source
74 * 2- src_entry <= src < AT, and
75 * 3- (dst - src) == (dst_entry - src_entry),
76 * The _entry suffix denotes values when __copy_user was called.
78 * (1) is set up up by uaccess.h and maintained by not writing AT in copy_user
79 * (2) is met by incrementing src by the number of bytes copied
80 * (3) is met by not doing loads between a pair of increments of dst and src
82 * The exception handlers for stores adjust len (if necessary) and return.
83 * These handlers do not need to overwrite any data.
85 * For __rmemcpy and memmove an exception is always a kernel bug, therefore
86 * they're not protected.
89 /* Instruction type */
93 #define SRC_PREFETCH 1
94 #define DST_PREFETCH 2
101 * Wrapper to add an entry in the exception table
102 * in case the insn causes a memory exception.
104 * insn : Load/store instruction
105 * type : Instruction type
108 * handler : Exception handler
111 #define EXC(insn, type, reg, addr, handler) \
112 .if \mode == LEGACY_MODE; \
114 .section __ex_table,"a"; \
117 /* This is assembled in EVA mode */ \
119 /* If loading from user or storing to user */ \
120 .if ((\from == USEROP) && (type == LD_INSN)) || \
121 ((\to == USEROP) && (type == ST_INSN)); \
122 9: __BUILD_EVA_INSN(insn##e, reg, addr); \
123 .section __ex_table,"a"; \
128 * Still in EVA, but no need for \
129 * exception handler or EVA insn \
136 * Only on the 64-bit kernel we can made use of 64-bit registers.
144 #define LOADK ld /* No exception */
145 #define LOAD(reg, addr, handler) EXC(ld, LD_INSN, reg, addr, handler)
146 #define LOADL(reg, addr, handler) EXC(ldl, LD_INSN, reg, addr, handler)
147 #define LOADR(reg, addr, handler) EXC(ldr, LD_INSN, reg, addr, handler)
148 #define STOREL(reg, addr, handler) EXC(sdl, ST_INSN, reg, addr, handler)
149 #define STORER(reg, addr, handler) EXC(sdr, ST_INSN, reg, addr, handler)
150 #define STORE(reg, addr, handler) EXC(sd, ST_INSN, reg, addr, handler)
162 * As we are sharing code base with the mips32 tree (which use the o32 ABI
163 * register definitions). We need to redefine the register definitions from
164 * the n64 ABI register naming to the o32 ABI register naming.
181 #define LOADK lw /* No exception */
182 #define LOAD(reg, addr, handler) EXC(lw, LD_INSN, reg, addr, handler)
183 #define LOADL(reg, addr, handler) EXC(lwl, LD_INSN, reg, addr, handler)
184 #define LOADR(reg, addr, handler) EXC(lwr, LD_INSN, reg, addr, handler)
185 #define STOREL(reg, addr, handler) EXC(swl, ST_INSN, reg, addr, handler)
186 #define STORER(reg, addr, handler) EXC(swr, ST_INSN, reg, addr, handler)
187 #define STORE(reg, addr, handler) EXC(sw, ST_INSN, reg, addr, handler)
198 #endif /* USE_DOUBLE */
200 #define LOADB(reg, addr, handler) EXC(lb, LD_INSN, reg, addr, handler)
201 #define STOREB(reg, addr, handler) EXC(sb, ST_INSN, reg, addr, handler)
203 #define _PREF(hint, addr, type) \
204 .if \mode == LEGACY_MODE; \
207 .if ((\from == USEROP) && (type == SRC_PREFETCH)) || \
208 ((\to == USEROP) && (type == DST_PREFETCH)); \
210 * PREFE has only 9 bits for the offset \
211 * compared to PREF which has 16, so it may \
212 * need to use the $at register but this \
213 * register should remain intact because it's \
214 * used later on. Therefore use $v1. \
224 #define PREFS(hint, addr) _PREF(hint, addr, SRC_PREFETCH)
225 #define PREFD(hint, addr) _PREF(hint, addr, DST_PREFETCH)
227 #ifdef CONFIG_CPU_LITTLE_ENDIAN
228 #define LDFIRST LOADR
230 #define STFIRST STORER
231 #define STREST STOREL
232 #define SHIFT_DISCARD SLLV
234 #define LDFIRST LOADL
236 #define STFIRST STOREL
237 #define STREST STORER
238 #define SHIFT_DISCARD SRLV
241 #define FIRST(unit) ((unit)*NBYTES)
242 #define REST(unit) (FIRST(unit)+NBYTES-1)
243 #define UNIT(unit) FIRST(unit)
245 #define ADDRMASK (NBYTES-1)
249 #ifndef CONFIG_CPU_DADDI_WORKAROUNDS
258 * Macro to build the __copy_user common code
260 * mode : LEGACY_MODE or EVA_MODE
261 * from : Source operand. USEROP or KERNELOP
262 * to : Destination operand. USEROP or KERNELOP
264 .macro __BUILD_COPY_USER mode, from, to
266 /* initialize __memcpy if this the first time we execute this macro */
269 .hidden __memcpy /* make sure it does not leak */
273 * Note: dst & src may be unaligned, len may be 0
280 * The "issue break"s below are very approximate.
281 * Issue delays for dcache fills will perturb the schedule, as will
282 * load queue full replay traps, etc.
284 * If len < NBYTES use byte operations.
289 and t1, dst, ADDRMASK
290 PREFS( 0, 1*32(src) )
291 PREFD( 1, 1*32(dst) )
292 bnez t2, .Lcopy_bytes_checklen\@
293 and t0, src, ADDRMASK
294 PREFS( 0, 2*32(src) )
295 PREFD( 1, 2*32(dst) )
296 bnez t1, .Ldst_unaligned\@
298 bnez t0, .Lsrc_unaligned_dst_aligned\@
300 * use delay slot for fall-through
301 * src and dst are aligned; need to compute rem
304 SRL t0, len, LOG_NBYTES+3 # +3 for 8 units/iter
305 beqz t0, .Lcleanup_both_aligned\@ # len < 8*NBYTES
306 and rem, len, (8*NBYTES-1) # rem = len % (8*NBYTES)
307 PREFS( 0, 3*32(src) )
308 PREFD( 1, 3*32(dst) )
312 LOAD(t0, UNIT(0)(src), .Ll_exc\@)
313 LOAD(t1, UNIT(1)(src), .Ll_exc_copy\@)
314 LOAD(t2, UNIT(2)(src), .Ll_exc_copy\@)
315 LOAD(t3, UNIT(3)(src), .Ll_exc_copy\@)
316 SUB len, len, 8*NBYTES
317 LOAD(t4, UNIT(4)(src), .Ll_exc_copy\@)
318 LOAD(t7, UNIT(5)(src), .Ll_exc_copy\@)
319 STORE(t0, UNIT(0)(dst), .Ls_exc_p8u\@)
320 STORE(t1, UNIT(1)(dst), .Ls_exc_p7u\@)
321 LOAD(t0, UNIT(6)(src), .Ll_exc_copy\@)
322 LOAD(t1, UNIT(7)(src), .Ll_exc_copy\@)
323 ADD src, src, 8*NBYTES
324 ADD dst, dst, 8*NBYTES
325 STORE(t2, UNIT(-6)(dst), .Ls_exc_p6u\@)
326 STORE(t3, UNIT(-5)(dst), .Ls_exc_p5u\@)
327 STORE(t4, UNIT(-4)(dst), .Ls_exc_p4u\@)
328 STORE(t7, UNIT(-3)(dst), .Ls_exc_p3u\@)
329 STORE(t0, UNIT(-2)(dst), .Ls_exc_p2u\@)
330 STORE(t1, UNIT(-1)(dst), .Ls_exc_p1u\@)
331 PREFS( 0, 8*32(src) )
332 PREFD( 1, 8*32(dst) )
337 * len == rem == the number of bytes left to copy < 8*NBYTES
339 .Lcleanup_both_aligned\@:
341 sltu t0, len, 4*NBYTES
342 bnez t0, .Lless_than_4units\@
343 and rem, len, (NBYTES-1) # rem = len % NBYTES
347 LOAD( t0, UNIT(0)(src), .Ll_exc\@)
348 LOAD( t1, UNIT(1)(src), .Ll_exc_copy\@)
349 LOAD( t2, UNIT(2)(src), .Ll_exc_copy\@)
350 LOAD( t3, UNIT(3)(src), .Ll_exc_copy\@)
351 SUB len, len, 4*NBYTES
352 ADD src, src, 4*NBYTES
354 STORE(t0, UNIT(0)(dst), .Ls_exc_p4u\@)
355 STORE(t1, UNIT(1)(dst), .Ls_exc_p3u\@)
356 STORE(t2, UNIT(2)(dst), .Ls_exc_p2u\@)
357 STORE(t3, UNIT(3)(dst), .Ls_exc_p1u\@)
358 .set reorder /* DADDI_WAR */
359 ADD dst, dst, 4*NBYTES
362 .Lless_than_4units\@:
366 beq rem, len, .Lcopy_bytes\@
370 LOAD(t0, 0(src), .Ll_exc\@)
373 STORE(t0, 0(dst), .Ls_exc_p1u\@)
374 .set reorder /* DADDI_WAR */
380 * src and dst are aligned, need to copy rem bytes (rem < NBYTES)
381 * A loop would do only a byte at a time with possible branch
382 * mispredicts. Can't do an explicit LOAD dst,mask,or,STORE
383 * because can't assume read-access to dst. Instead, use
384 * STREST dst, which doesn't require read access to dst.
386 * This code should perform better than a simple loop on modern,
387 * wide-issue mips processors because the code has fewer branches and
388 * more instruction-level parallelism.
392 ADD t1, dst, len # t1 is just past last byte of dst
394 SLL rem, len, 3 # rem = number of bits to keep
395 LOAD(t0, 0(src), .Ll_exc\@)
396 SUB bits, bits, rem # bits = number of bits to discard
397 SHIFT_DISCARD t0, t0, bits
398 STREST(t0, -1(t1), .Ls_exc\@)
404 * t0 = src & ADDRMASK
405 * t1 = dst & ADDRMASK; T1 > 0
408 * Copy enough bytes to align dst
409 * Set match = (src and dst have same alignment)
412 LDFIRST(t3, FIRST(0)(src), .Ll_exc\@)
414 LDREST(t3, REST(0)(src), .Ll_exc_copy\@)
415 SUB t2, t2, t1 # t2 = number of bytes copied
418 STFIRST(t3, FIRST(0)(dst), .Ls_exc\@)
419 beq len, t2, .Ldone\@
422 beqz match, .Lboth_aligned\@
425 .Lsrc_unaligned_dst_aligned\@:
426 SRL t0, len, LOG_NBYTES+2 # +2 for 4 units/iter
427 PREFS( 0, 3*32(src) )
428 beqz t0, .Lcleanup_src_unaligned\@
429 and rem, len, (4*NBYTES-1) # rem = len % 4*NBYTES
430 PREFD( 1, 3*32(dst) )
433 * Avoid consecutive LD*'s to the same register since some mips
434 * implementations can't issue them in the same cycle.
435 * It's OK to load FIRST(N+1) before REST(N) because the two addresses
436 * are to the same unit (unless src is aligned, but it's not).
439 LDFIRST(t0, FIRST(0)(src), .Ll_exc\@)
440 LDFIRST(t1, FIRST(1)(src), .Ll_exc_copy\@)
441 SUB len, len, 4*NBYTES
442 LDREST(t0, REST(0)(src), .Ll_exc_copy\@)
443 LDREST(t1, REST(1)(src), .Ll_exc_copy\@)
444 LDFIRST(t2, FIRST(2)(src), .Ll_exc_copy\@)
445 LDFIRST(t3, FIRST(3)(src), .Ll_exc_copy\@)
446 LDREST(t2, REST(2)(src), .Ll_exc_copy\@)
447 LDREST(t3, REST(3)(src), .Ll_exc_copy\@)
448 PREFS( 0, 9*32(src) ) # 0 is PREF_LOAD (not streamed)
449 ADD src, src, 4*NBYTES
450 #ifdef CONFIG_CPU_SB1
451 nop # improves slotting
453 STORE(t0, UNIT(0)(dst), .Ls_exc_p4u\@)
454 STORE(t1, UNIT(1)(dst), .Ls_exc_p3u\@)
455 STORE(t2, UNIT(2)(dst), .Ls_exc_p2u\@)
456 STORE(t3, UNIT(3)(dst), .Ls_exc_p1u\@)
457 PREFD( 1, 9*32(dst) ) # 1 is PREF_STORE (not streamed)
458 .set reorder /* DADDI_WAR */
459 ADD dst, dst, 4*NBYTES
463 .Lcleanup_src_unaligned\@:
465 and rem, len, NBYTES-1 # rem = len % NBYTES
466 beq rem, len, .Lcopy_bytes\@
470 LDFIRST(t0, FIRST(0)(src), .Ll_exc\@)
471 LDREST(t0, REST(0)(src), .Ll_exc_copy\@)
474 STORE(t0, 0(dst), .Ls_exc_p1u\@)
475 .set reorder /* DADDI_WAR */
480 .Lcopy_bytes_checklen\@:
484 /* 0 < len < NBYTES */
486 #define COPY_BYTE(N) \
487 LOADB(t0, N(src), .Ll_exc\@); \
489 beqz len, .Ldone\@; \
490 STOREB(t0, N(dst), .Ls_exc_p1\@)
500 LOADB(t0, NBYTES-2(src), .Ll_exc\@)
503 STOREB(t0, NBYTES-2(dst), .Ls_exc_p1\@)
514 * Copy bytes from src until faulting load address (or until a
517 * When reached by a faulting LDFIRST/LDREST, THREAD_BUADDR($28)
518 * may be more than a byte beyond the last address.
519 * Hence, the lb below may get an exception.
521 * Assumes src < THREAD_BUADDR($28)
523 LOADK t0, TI_TASK($28)
525 LOADK t0, THREAD_BUADDR(t0)
527 LOADB(t1, 0(src), .Ll_exc\@)
529 sb t1, 0(dst) # can't fault -- we're copy_from_user
530 .set reorder /* DADDI_WAR */
535 LOADK t0, TI_TASK($28)
537 LOADK t0, THREAD_BUADDR(t0) # t0 is just past last good address
539 SUB len, AT, t0 # len number of uncopied bytes
540 bnez t6, .Ldone\@ /* Skip the zeroing part if inatomic */
542 * Here's where we rely on src and dst being incremented in tandem,
544 * dst += (fault addr - src) to put dst at first byte to clear
546 ADD dst, t0 # compute start address in a1
549 * Clear len bytes starting at dst. Can't call __bzero because it
550 * might modify len. An inefficient loop for these rare times...
552 .set reorder /* DADDI_WAR */
558 #ifndef CONFIG_CPU_DADDI_WORKAROUNDS
574 .set reorder; /* DADDI_WAR */ \
575 .Ls_exc_p ## n ## u\@: \
576 ADD len, len, n*NBYTES; \
590 .set reorder /* DADDI_WAR */
603 sltu t0, a1, t0 # dst + len <= src -> memcpy
604 sltu t1, a0, t1 # dst >= src + len -> memcpy
607 move v0, a0 /* return value */
611 /* fall through to __rmemcpy */
612 LEAF(__rmemcpy) /* a0=dst a1=src a2=len */
614 beqz t0, .Lr_end_bytes_up # src >= dst
616 ADD a0, a2 # dst = dst + len
617 ADD a1, a2 # src = src + len
625 .set reorder /* DADDI_WAR */
627 bnez a2, .Lr_end_bytes
640 .set reorder /* DADDI_WAR */
642 bnez a2, .Lr_end_bytes_up
650 * t6 is used as a flag to note inatomic mode.
652 LEAF(__copy_user_inatomic)
655 END(__copy_user_inatomic)
658 * A combined memcpy/__copy_user
659 * __copy_user sets len to 0 for success; else to an upper bound of
660 * the number of uncopied bytes.
661 * memcpy sets v0 to dst.
664 LEAF(memcpy) /* a0=dst a1=src a2=len */
665 move v0, dst /* return value */
668 li t6, 0 /* not inatomic */
670 /* Legacy Mode, user <-> user */
671 __BUILD_COPY_USER LEGACY_MODE USEROP USEROP
676 * For EVA we need distinct symbols for reading and writing to user space.
677 * This is because we need to use specific EVA instructions to perform the
678 * virtual <-> physical translation when a virtual address is actually in user
682 LEAF(__copy_user_inatomic_eva)
683 b __copy_from_user_common
685 END(__copy_user_inatomic_eva)
688 * __copy_from_user (EVA)
691 LEAF(__copy_from_user_eva)
692 li t6, 0 /* not inatomic */
693 __copy_from_user_common:
694 __BUILD_COPY_USER EVA_MODE USEROP KERNELOP
695 END(__copy_from_user_eva)
700 * __copy_to_user (EVA)
703 LEAF(__copy_to_user_eva)
704 __BUILD_COPY_USER EVA_MODE KERNELOP USEROP
705 END(__copy_to_user_eva)
708 * __copy_in_user (EVA)
711 LEAF(__copy_in_user_eva)
712 __BUILD_COPY_USER EVA_MODE USEROP USEROP
713 END(__copy_in_user_eva)