1 // SPDX-License-Identifier: GPL-2.0
3 * Instruction-patching support.
5 * Copyright (C) 2003 Hewlett-Packard Co
6 * David Mosberger-Tang <davidm@hpl.hp.com>
8 #include <linux/init.h>
9 #include <linux/string.h>
11 #include <asm/patch.h>
12 #include <asm/processor.h>
13 #include <asm/sections.h>
14 #include <asm/unistd.h>
17 * This was adapted from code written by Tony Luck:
19 * The 64-bit value in a "movl reg=value" is scattered between the two words of the bundle
23 * 3210987654321098765432109876543210987654321098765432109876543210
24 * ABBBBBBBBBBBBBBBBBBBBBBBCCCCCCCCCCCCCCCCCCDEEEEEFFFFFFFFFGGGGGGG
26 * CCCCCCCCCCCCCCCCCCxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
27 * xxxxAFFFFFFFFFEEEEEDxGGGGGGGxxxxxxxxxxxxxBBBBBBBBBBBBBBBBBBBBBBB
30 get_imm64 (u64 insn_addr
)
32 u64
*p
= (u64
*) (insn_addr
& -16); /* mask out slot number */
34 return ( (p
[1] & 0x0800000000000000UL
) << 4) | /*A*/
35 ((p
[1] & 0x00000000007fffffUL
) << 40) | /*B*/
36 ((p
[0] & 0xffffc00000000000UL
) >> 24) | /*C*/
37 ((p
[1] & 0x0000100000000000UL
) >> 23) | /*D*/
38 ((p
[1] & 0x0003e00000000000UL
) >> 29) | /*E*/
39 ((p
[1] & 0x07fc000000000000UL
) >> 43) | /*F*/
40 ((p
[1] & 0x000007f000000000UL
) >> 36); /*G*/
43 /* Patch instruction with "val" where "mask" has 1 bits. */
45 ia64_patch (u64 insn_addr
, u64 mask
, u64 val
)
47 u64 m0
, m1
, v0
, v1
, b0
, b1
, *b
= (u64
*) (insn_addr
& -16);
48 # define insn_mask ((1UL << 41) - 1)
52 shift
= 5 + 41 * (insn_addr
% 16); /* 5 bits of template, then 3 x 41-bit instructions */
54 m1
= mask
<< (shift
- 64);
55 v1
= val
<< (shift
- 64);
57 m0
= mask
<< shift
; m1
= mask
>> (64 - shift
);
58 v0
= val
<< shift
; v1
= val
>> (64 - shift
);
59 b
[0] = (b0
& ~m0
) | (v0
& m0
);
61 b
[1] = (b1
& ~m1
) | (v1
& m1
);
65 ia64_patch_imm64 (u64 insn_addr
, u64 val
)
67 /* The assembler may generate offset pointing to either slot 1
68 or slot 2 for a long (2-slot) instruction, occupying slots 1
71 ia64_patch(insn_addr
+ 2,
72 0x01fffefe000UL
, ( ((val
& 0x8000000000000000UL
) >> 27) /* bit 63 -> 36 */
73 | ((val
& 0x0000000000200000UL
) << 0) /* bit 21 -> 21 */
74 | ((val
& 0x00000000001f0000UL
) << 6) /* bit 16 -> 22 */
75 | ((val
& 0x000000000000ff80UL
) << 20) /* bit 7 -> 27 */
76 | ((val
& 0x000000000000007fUL
) << 13) /* bit 0 -> 13 */));
77 ia64_patch(insn_addr
+ 1, 0x1ffffffffffUL
, val
>> 22);
81 ia64_patch_imm60 (u64 insn_addr
, u64 val
)
83 /* The assembler may generate offset pointing to either slot 1
84 or slot 2 for a long (2-slot) instruction, occupying slots 1
87 ia64_patch(insn_addr
+ 2,
88 0x011ffffe000UL
, ( ((val
& 0x0800000000000000UL
) >> 23) /* bit 59 -> 36 */
89 | ((val
& 0x00000000000fffffUL
) << 13) /* bit 0 -> 13 */));
90 ia64_patch(insn_addr
+ 1, 0x1fffffffffcUL
, val
>> 18);
94 * We need sometimes to load the physical address of a kernel
95 * object. Often we can convert the virtual address to physical
96 * at execution time, but sometimes (either for performance reasons
97 * or during error recovery) we cannot to this. Patch the marked
98 * bundles to load the physical address.
101 ia64_patch_vtop (unsigned long start
, unsigned long end
)
103 s32
*offp
= (s32
*) start
;
106 while (offp
< (s32
*) end
) {
107 ip
= (u64
) offp
+ *offp
;
109 /* replace virtual address with corresponding physical address: */
110 ia64_patch_imm64(ip
, ia64_tpa(get_imm64(ip
)));
111 ia64_fc((void *) ip
);
119 * Disable the RSE workaround by turning the conditional branch
120 * that we tagged in each place the workaround was used into an
121 * unconditional branch.
124 ia64_patch_rse (unsigned long start
, unsigned long end
)
126 s32
*offp
= (s32
*) start
;
129 while (offp
< (s32
*) end
) {
130 ip
= (u64
) offp
+ *offp
;
132 b
= (u64
*)(ip
& -16);
134 ia64_fc((void *) ip
);
142 ia64_patch_mckinley_e9 (unsigned long start
, unsigned long end
)
144 static int first_time
= 1;
146 s32
*offp
= (s32
*) start
;
149 need_workaround
= (local_cpu_data
->family
== 0x1f && local_cpu_data
->model
== 0);
154 printk(KERN_INFO
"Leaving McKinley Errata 9 workaround enabled\n");
159 while (offp
< (s32
*) end
) {
160 wp
= (u64
*) ia64_imva((char *) offp
+ *offp
);
161 wp
[0] = 0x0000000100000011UL
; /* nop.m 0; nop.i 0; br.ret.sptk.many b6 */
162 wp
[1] = 0x0084006880000200UL
;
163 wp
[2] = 0x0000000100000000UL
; /* nop.m 0; nop.i 0; nop.i 0 */
164 wp
[3] = 0x0004000000000200UL
;
165 ia64_fc(wp
); ia64_fc(wp
+ 2);
173 patch_fsyscall_table (unsigned long start
, unsigned long end
)
175 extern unsigned long fsyscall_table
[NR_syscalls
];
176 s32
*offp
= (s32
*) start
;
179 while (offp
< (s32
*) end
) {
180 ip
= (u64
) ia64_imva((char *) offp
+ *offp
);
181 ia64_patch_imm64(ip
, (u64
) fsyscall_table
);
182 ia64_fc((void *) ip
);
190 patch_brl_fsys_bubble_down (unsigned long start
, unsigned long end
)
192 extern char fsys_bubble_down
[];
193 s32
*offp
= (s32
*) start
;
196 while (offp
< (s32
*) end
) {
197 ip
= (u64
) offp
+ *offp
;
198 ia64_patch_imm60((u64
) ia64_imva((void *) ip
),
199 (u64
) (fsys_bubble_down
- (ip
& -16)) / 16);
200 ia64_fc((void *) ip
);
208 ia64_patch_gate (void)
210 # define START(name) ((unsigned long) __start_gate_##name##_patchlist)
211 # define END(name) ((unsigned long)__end_gate_##name##_patchlist)
213 patch_fsyscall_table(START(fsyscall
), END(fsyscall
));
214 patch_brl_fsys_bubble_down(START(brl_fsys_bubble_down
), END(brl_fsys_bubble_down
));
215 ia64_patch_vtop(START(vtop
), END(vtop
));
216 ia64_patch_mckinley_e9(START(mckinley_e9
), END(mckinley_e9
));
219 void ia64_patch_phys_stack_reg(unsigned long val
)
221 s32
* offp
= (s32
*) __start___phys_stack_reg_patchlist
;
222 s32
* end
= (s32
*) __end___phys_stack_reg_patchlist
;
225 /* see instruction format A4: adds r1 = imm13, r3 */
226 mask
= (0x3fUL
<< 27) | (0x7f << 13);
227 imm
= (((val
>> 7) & 0x3f) << 27) | (val
& 0x7f) << 13;
230 ip
= (u64
) offp
+ *offp
;
231 ia64_patch(ip
, mask
, imm
);