From: "Laurent Desnogues" <laurent.desnogues@gmail.com>
To: qemu-devel@nongnu.org
Subject: Re: [Qemu-devel] [5514] Fix ARMv6 translation table base address calculation.
Date: Thu, 23 Oct 2008 16:39:12 +0200 [thread overview]
Message-ID: <761ea48b0810230739v43fc9224pd4f42e27c5cd2f88@mail.gmail.com> (raw)
In-Reply-To: <E1KsjHr-0001km-8Q@cvs.savannah.gnu.org>
On Wed, Oct 22, 2008 at 9:22 PM, Paul Brook <paul@nowt.org> wrote:
> Revision: 5514
> http://svn.sv.gnu.org/viewvc/?view=rev&root=qemu&revision=5514
> Author: pbrook
> Date: 2008-10-22 19:22:30 +0000 (Wed, 22 Oct 2008)
>
> Log Message:
> -----------
> Fix ARMv6 translation table base address calculation.
Quick note: c2_control and c2_base1 are not available on pre-v6 and
so their use should be protected.
Laurent
>
> Signed-off-by: Paul Brook <paul@codesourcery.com>
>
> Modified Paths:
> --------------
> trunk/target-arm/cpu.h
> trunk/target-arm/helper.c
>
> Modified: trunk/target-arm/cpu.h
> ===================================================================
> --- trunk/target-arm/cpu.h 2008-10-22 18:20:20 UTC (rev 5513)
> +++ trunk/target-arm/cpu.h 2008-10-22 19:22:30 UTC (rev 5514)
> @@ -107,7 +107,9 @@
> uint32_t c1_xscaleauxcr; /* XScale auxiliary control register. */
> uint32_t c2_base0; /* MMU translation table base 0. */
> uint32_t c2_base1; /* MMU translation table base 1. */
> - uint32_t c2_mask; /* MMU translation table base mask. */
> + uint32_t c2_control; /* MMU translation table base control. */
> + uint32_t c2_mask; /* MMU translation table base selection mask. */
> + uint32_t c2_base_mask; /* MMU translation table base 0 mask. */
> uint32_t c2_data; /* MPU data cachable bits. */
> uint32_t c2_insn; /* MPU instruction cachable bits. */
> uint32_t c3; /* MMU domain access control register
>
> Modified: trunk/target-arm/helper.c
> ===================================================================
> --- trunk/target-arm/helper.c 2008-10-22 18:20:20 UTC (rev 5513)
> +++ trunk/target-arm/helper.c 2008-10-22 19:22:30 UTC (rev 5514)
> @@ -168,6 +168,7 @@
> if (IS_M(env))
> env->uncached_cpsr &= ~CPSR_I;
> env->vfp.xregs[ARM_VFP_FPEXC] = 0;
> + env->cp15.c2_base_mask = 0xffffc000u;
> #endif
> env->regs[15] = 0;
> tlb_flush(env, 1);
> @@ -910,6 +911,19 @@
> }
> }
>
> +static uint32_t get_level1_table_address(CPUState *env, uint32_t address)
> +{
> + uint32_t table;
> +
> + if (address & env->cp15.c2_mask)
> + table = env->cp15.c2_base1 & 0xffffc000;
> + else
> + table = env->cp15.c2_base0 & env->cp15.c2_base_mask;
> +
> + table |= (address >> 18) & 0x3ffc;
> + return table;
> +}
> +
> static int get_phys_addr_v5(CPUState *env, uint32_t address, int access_type,
> int is_user, uint32_t *phys_ptr, int *prot)
> {
> @@ -923,11 +937,7 @@
>
> /* Pagetable walk. */
> /* Lookup l1 descriptor. */
> - if (address & env->cp15.c2_mask)
> - table = env->cp15.c2_base1;
> - else
> - table = env->cp15.c2_base0;
> - table = (table & 0xffffc000) | ((address >> 18) & 0x3ffc);
> + table = get_level1_table_address(env, address);
> desc = ldl_phys(table);
> type = (desc & 3);
> domain = (env->cp15.c3 >> ((desc >> 4) & 0x1e)) & 3;
> @@ -1015,11 +1025,7 @@
>
> /* Pagetable walk. */
> /* Lookup l1 descriptor. */
> - if (address & env->cp15.c2_mask)
> - table = env->cp15.c2_base1;
> - else
> - table = env->cp15.c2_base0;
> - table = (table & 0xffffc000) | ((address >> 18) & 0x3ffc);
> + table = get_level1_table_address(env, address);
> desc = ldl_phys(table);
> type = (desc & 3);
> if (type == 0) {
> @@ -1365,7 +1371,10 @@
> env->cp15.c2_base1 = val;
> break;
> case 2:
> + val &= 7;
> + env->cp15.c2_control = val;
> env->cp15.c2_mask = ~(((uint32_t)0xffffffffu) >> val);
> + env->cp15.c2_base_mask = ~((uint32_t)0x3fffu >> val);
> break;
> default:
> goto bad_reg;
> @@ -1683,17 +1692,7 @@
> case 1:
> return env->cp15.c2_base1;
> case 2:
> - {
> - int n;
> - uint32_t mask;
> - n = 0;
> - mask = env->cp15.c2_mask;
> - while (mask) {
> - n++;
> - mask <<= 1;
> - }
> - return n;
> - }
> + return env->cp15.c2_control;
> default:
> goto bad_reg;
> }
>
>
>
>
>
prev parent reply other threads:[~2008-10-23 14:39 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-10-22 19:22 [Qemu-devel] [5514] Fix ARMv6 translation table base address calculation Paul Brook
2008-10-23 14:39 ` Laurent Desnogues [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=761ea48b0810230739v43fc9224pd4f42e27c5cd2f88@mail.gmail.com \
--to=laurent.desnogues@gmail.com \
--cc=qemu-devel@nongnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).