1318 lines
34 KiB
C
1318 lines
34 KiB
C
/*
|
|
* i386 on i386 translation
|
|
*
|
|
* Copyright (c) 2003 Fabrice Bellard
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation; either
|
|
* version 2 of the License, or (at your option) any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
*/
|
|
#include "config.h"
|
|
|
|
#include <stdarg.h>
|
|
#include <stdlib.h>
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
#include <inttypes.h>
|
|
#include <assert.h>
|
|
|
|
#include "cpu.h"
|
|
#include "exec-all.h"
|
|
#include "disas.h"
|
|
|
|
#ifdef USE_CODE_COPY
|
|
|
|
#include <signal.h>
|
|
#include <sys/mman.h>
|
|
#include <sys/ucontext.h>
|
|
|
|
extern char exec_loop;
|
|
|
|
/* operand size */
|
|
enum {
|
|
OT_BYTE = 0,
|
|
OT_WORD,
|
|
OT_LONG,
|
|
OT_QUAD,
|
|
};
|
|
|
|
#define PREFIX_REPZ 0x01
|
|
#define PREFIX_REPNZ 0x02
|
|
#define PREFIX_LOCK 0x04
|
|
#define PREFIX_DATA 0x08
|
|
#define PREFIX_ADR 0x10
|
|
|
|
typedef struct DisasContext {
|
|
/* current insn context */
|
|
int override; /* -1 if no override */
|
|
int prefix;
|
|
int aflag, dflag;
|
|
uint8_t *pc; /* pc = eip + cs_base */
|
|
int is_jmp; /* 1 = means jump (stop translation), 2 means CPU
|
|
static state change (stop translation) */
|
|
/* code output */
|
|
uint8_t *gen_code_ptr;
|
|
uint8_t *gen_code_start;
|
|
|
|
/* current block context */
|
|
uint8_t *cs_base; /* base of CS segment */
|
|
int pe; /* protected mode */
|
|
int code32; /* 32 bit code segment */
|
|
int f_st; /* currently unused */
|
|
int vm86; /* vm86 mode */
|
|
int cpl;
|
|
int iopl;
|
|
int flags;
|
|
struct TranslationBlock *tb;
|
|
} DisasContext;
|
|
|
|
#define CPU_FIELD_OFFSET(field) offsetof(CPUState, field)
|
|
|
|
#define CPU_SEG 0x64 /* fs override */
|
|
|
|
static inline void gb(DisasContext *s, uint32_t val)
|
|
{
|
|
*s->gen_code_ptr++ = val;
|
|
}
|
|
|
|
static inline void gw(DisasContext *s, uint32_t val)
|
|
{
|
|
*s->gen_code_ptr++ = val;
|
|
*s->gen_code_ptr++ = val >> 8;
|
|
}
|
|
|
|
static inline void gl(DisasContext *s, uint32_t val)
|
|
{
|
|
*s->gen_code_ptr++ = val;
|
|
*s->gen_code_ptr++ = val >> 8;
|
|
*s->gen_code_ptr++ = val >> 16;
|
|
*s->gen_code_ptr++ = val >> 24;
|
|
}
|
|
|
|
static inline void gjmp(DisasContext *s, long val)
|
|
{
|
|
gb(s, 0xe9); /* jmp */
|
|
gl(s, val - (long)(s->gen_code_ptr + 4));
|
|
}
|
|
|
|
static inline void gen_movl_addr_im(DisasContext *s,
|
|
uint32_t addr, uint32_t val)
|
|
{
|
|
gb(s, CPU_SEG); /* seg movl im, addr */
|
|
gb(s, 0xc7);
|
|
gb(s, 0x05);
|
|
gl(s, addr);
|
|
gl(s, val);
|
|
}
|
|
|
|
static inline void gen_movw_addr_im(DisasContext *s,
|
|
uint32_t addr, uint32_t val)
|
|
{
|
|
gb(s, CPU_SEG); /* seg movl im, addr */
|
|
gb(s, 0x66);
|
|
gb(s, 0xc7);
|
|
gb(s, 0x05);
|
|
gl(s, addr);
|
|
gw(s, val);
|
|
}
|
|
|
|
|
|
static void gen_jmp(DisasContext *s, uint32_t target_eip)
|
|
{
|
|
TranslationBlock *tb = s->tb;
|
|
|
|
gb(s, 0xe9); /* jmp */
|
|
tb->tb_jmp_offset[0] = s->gen_code_ptr - s->gen_code_start;
|
|
gl(s, 0);
|
|
|
|
tb->tb_next_offset[0] = s->gen_code_ptr - s->gen_code_start;
|
|
gen_movl_addr_im(s, CPU_FIELD_OFFSET(eip), target_eip);
|
|
gen_movl_addr_im(s, CPU_FIELD_OFFSET(tmp0), (uint32_t)tb);
|
|
gjmp(s, (long)&exec_loop);
|
|
|
|
s->is_jmp = 1;
|
|
}
|
|
|
|
static void gen_jcc(DisasContext *s, int op,
|
|
uint32_t target_eip, uint32_t next_eip)
|
|
{
|
|
TranslationBlock *tb = s->tb;
|
|
|
|
gb(s, 0x0f); /* jcc */
|
|
gb(s, 0x80 + op);
|
|
tb->tb_jmp_offset[0] = s->gen_code_ptr - s->gen_code_start;
|
|
gl(s, 0);
|
|
gb(s, 0xe9); /* jmp */
|
|
tb->tb_jmp_offset[1] = s->gen_code_ptr - s->gen_code_start;
|
|
gl(s, 0);
|
|
|
|
tb->tb_next_offset[0] = s->gen_code_ptr - s->gen_code_start;
|
|
gen_movl_addr_im(s, CPU_FIELD_OFFSET(eip), target_eip);
|
|
gen_movl_addr_im(s, CPU_FIELD_OFFSET(tmp0), (uint32_t)tb);
|
|
gjmp(s, (long)&exec_loop);
|
|
|
|
tb->tb_next_offset[1] = s->gen_code_ptr - s->gen_code_start;
|
|
gen_movl_addr_im(s, CPU_FIELD_OFFSET(eip), next_eip);
|
|
gen_movl_addr_im(s, CPU_FIELD_OFFSET(tmp0), (uint32_t)tb | 1);
|
|
gjmp(s, (long)&exec_loop);
|
|
|
|
s->is_jmp = 1;
|
|
}
|
|
|
|
static void gen_eob(DisasContext *s)
|
|
{
|
|
gen_movl_addr_im(s, CPU_FIELD_OFFSET(tmp0), 0);
|
|
gjmp(s, (long)&exec_loop);
|
|
|
|
s->is_jmp = 1;
|
|
}
|
|
|
|
static inline void gen_lea_modrm(DisasContext *s, int modrm)
|
|
{
|
|
int havesib;
|
|
int base, disp;
|
|
int index;
|
|
int scale;
|
|
int mod, rm, code;
|
|
|
|
mod = (modrm >> 6) & 3;
|
|
rm = modrm & 7;
|
|
|
|
if (s->aflag) {
|
|
|
|
havesib = 0;
|
|
base = rm;
|
|
index = 0;
|
|
scale = 0;
|
|
|
|
if (base == 4) {
|
|
havesib = 1;
|
|
code = ldub_code(s->pc++);
|
|
scale = (code >> 6) & 3;
|
|
index = (code >> 3) & 7;
|
|
base = code & 7;
|
|
}
|
|
|
|
switch (mod) {
|
|
case 0:
|
|
if (base == 5) {
|
|
base = -1;
|
|
disp = ldl_code(s->pc);
|
|
s->pc += 4;
|
|
} else {
|
|
disp = 0;
|
|
}
|
|
break;
|
|
case 1:
|
|
disp = (int8_t)ldub_code(s->pc++);
|
|
break;
|
|
default:
|
|
case 2:
|
|
disp = ldl_code(s->pc);
|
|
s->pc += 4;
|
|
break;
|
|
}
|
|
|
|
} else {
|
|
switch (mod) {
|
|
case 0:
|
|
if (rm == 6) {
|
|
disp = lduw_code(s->pc);
|
|
s->pc += 2;
|
|
} else {
|
|
disp = 0;
|
|
}
|
|
break;
|
|
case 1:
|
|
disp = (int8_t)ldub_code(s->pc++);
|
|
break;
|
|
default:
|
|
case 2:
|
|
disp = lduw_code(s->pc);
|
|
s->pc += 2;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
static inline void parse_modrm(DisasContext *s, int modrm)
|
|
{
|
|
if ((modrm & 0xc0) != 0xc0)
|
|
gen_lea_modrm(s, modrm);
|
|
}
|
|
|
|
static inline uint32_t insn_get(DisasContext *s, int ot)
|
|
{
|
|
uint32_t ret;
|
|
|
|
switch(ot) {
|
|
case OT_BYTE:
|
|
ret = ldub_code(s->pc);
|
|
s->pc++;
|
|
break;
|
|
case OT_WORD:
|
|
ret = lduw_code(s->pc);
|
|
s->pc += 2;
|
|
break;
|
|
default:
|
|
case OT_LONG:
|
|
ret = ldl_code(s->pc);
|
|
s->pc += 4;
|
|
break;
|
|
}
|
|
return ret;
|
|
}
|
|
|
|
/* convert one instruction. s->is_jmp is set if the translation must
|
|
be stopped. */
|
|
static int disas_insn(DisasContext *s)
|
|
{
|
|
uint8_t *pc_start, *pc_tmp, *pc_start_insn;
|
|
int b, prefixes, aflag, dflag, next_eip, val;
|
|
int ot;
|
|
int modrm, mod, op, rm;
|
|
|
|
pc_start = s->pc;
|
|
prefixes = 0;
|
|
aflag = s->code32;
|
|
dflag = s->code32;
|
|
s->override = -1;
|
|
next_byte:
|
|
b = ldub_code(s->pc);
|
|
s->pc++;
|
|
/* check prefixes */
|
|
switch (b) {
|
|
case 0xf3:
|
|
prefixes |= PREFIX_REPZ;
|
|
goto next_byte;
|
|
case 0xf2:
|
|
prefixes |= PREFIX_REPNZ;
|
|
goto next_byte;
|
|
case 0xf0:
|
|
prefixes |= PREFIX_LOCK;
|
|
goto next_byte;
|
|
case 0x2e:
|
|
s->override = R_CS;
|
|
goto next_byte;
|
|
case 0x36:
|
|
s->override = R_SS;
|
|
goto next_byte;
|
|
case 0x3e:
|
|
s->override = R_DS;
|
|
goto next_byte;
|
|
case 0x26:
|
|
s->override = R_ES;
|
|
goto next_byte;
|
|
case 0x64:
|
|
s->override = R_FS;
|
|
goto next_byte;
|
|
case 0x65:
|
|
s->override = R_GS;
|
|
goto next_byte;
|
|
case 0x66:
|
|
prefixes |= PREFIX_DATA;
|
|
goto next_byte;
|
|
case 0x67:
|
|
prefixes |= PREFIX_ADR;
|
|
goto next_byte;
|
|
}
|
|
|
|
if (prefixes & PREFIX_DATA)
|
|
dflag ^= 1;
|
|
if (prefixes & PREFIX_ADR)
|
|
aflag ^= 1;
|
|
|
|
s->prefix = prefixes;
|
|
s->aflag = aflag;
|
|
s->dflag = dflag;
|
|
|
|
/* lock generation */
|
|
if (prefixes & PREFIX_LOCK)
|
|
goto unsupported_op;
|
|
if (s->override == R_FS || s->override == R_GS || s->override == R_CS)
|
|
goto unsupported_op;
|
|
|
|
pc_start_insn = s->pc - 1;
|
|
/* now check op code */
|
|
reswitch:
|
|
switch(b) {
|
|
case 0x0f:
|
|
/**************************/
|
|
/* extended op code */
|
|
b = ldub_code(s->pc++) | 0x100;
|
|
goto reswitch;
|
|
|
|
/**************************/
|
|
/* arith & logic */
|
|
case 0x00 ... 0x05:
|
|
case 0x08 ... 0x0d:
|
|
case 0x10 ... 0x15:
|
|
case 0x18 ... 0x1d:
|
|
case 0x20 ... 0x25:
|
|
case 0x28 ... 0x2d:
|
|
case 0x30 ... 0x35:
|
|
case 0x38 ... 0x3d:
|
|
{
|
|
int f;
|
|
f = (b >> 1) & 3;
|
|
|
|
if ((b & 1) == 0)
|
|
ot = OT_BYTE;
|
|
else
|
|
ot = dflag ? OT_LONG : OT_WORD;
|
|
|
|
switch(f) {
|
|
case 0: /* OP Ev, Gv */
|
|
modrm = ldub_code(s->pc++);
|
|
parse_modrm(s, modrm);
|
|
break;
|
|
case 1: /* OP Gv, Ev */
|
|
modrm = ldub_code(s->pc++);
|
|
parse_modrm(s, modrm);
|
|
break;
|
|
case 2: /* OP A, Iv */
|
|
insn_get(s, ot);
|
|
break;
|
|
}
|
|
}
|
|
break;
|
|
|
|
case 0x80: /* GRP1 */
|
|
case 0x81:
|
|
case 0x83:
|
|
{
|
|
if ((b & 1) == 0)
|
|
ot = OT_BYTE;
|
|
else
|
|
ot = dflag ? OT_LONG : OT_WORD;
|
|
|
|
modrm = ldub_code(s->pc++);
|
|
parse_modrm(s, modrm);
|
|
|
|
switch(b) {
|
|
default:
|
|
case 0x80:
|
|
case 0x81:
|
|
insn_get(s, ot);
|
|
break;
|
|
case 0x83:
|
|
insn_get(s, OT_BYTE);
|
|
break;
|
|
}
|
|
}
|
|
break;
|
|
|
|
/**************************/
|
|
/* inc, dec, and other misc arith */
|
|
case 0x40 ... 0x47: /* inc Gv */
|
|
break;
|
|
case 0x48 ... 0x4f: /* dec Gv */
|
|
break;
|
|
case 0xf6: /* GRP3 */
|
|
case 0xf7:
|
|
if ((b & 1) == 0)
|
|
ot = OT_BYTE;
|
|
else
|
|
ot = dflag ? OT_LONG : OT_WORD;
|
|
|
|
modrm = ldub_code(s->pc++);
|
|
op = (modrm >> 3) & 7;
|
|
parse_modrm(s, modrm);
|
|
|
|
switch(op) {
|
|
case 0: /* test */
|
|
insn_get(s, ot);
|
|
break;
|
|
case 2: /* not */
|
|
break;
|
|
case 3: /* neg */
|
|
break;
|
|
case 4: /* mul */
|
|
break;
|
|
case 5: /* imul */
|
|
break;
|
|
case 6: /* div */
|
|
break;
|
|
case 7: /* idiv */
|
|
break;
|
|
default:
|
|
goto illegal_op;
|
|
}
|
|
break;
|
|
|
|
case 0xfe: /* GRP4 */
|
|
case 0xff: /* GRP5 */
|
|
if ((b & 1) == 0)
|
|
ot = OT_BYTE;
|
|
else
|
|
ot = dflag ? OT_LONG : OT_WORD;
|
|
|
|
modrm = ldub_code(s->pc++);
|
|
mod = (modrm >> 6) & 3;
|
|
op = (modrm >> 3) & 7;
|
|
if (op >= 2 && b == 0xfe) {
|
|
goto illegal_op;
|
|
}
|
|
pc_tmp = s->pc;
|
|
parse_modrm(s, modrm);
|
|
|
|
switch(op) {
|
|
case 0: /* inc Ev */
|
|
break;
|
|
case 1: /* dec Ev */
|
|
break;
|
|
case 2: /* call Ev */
|
|
/* XXX: optimize and handle MEM exceptions specifically
|
|
fs movl %eax, regs[0]
|
|
movl Ev, %eax
|
|
pushl next_eip
|
|
fs movl %eax, eip
|
|
*/
|
|
goto unsupported_op;
|
|
case 3: /* lcall Ev */
|
|
goto unsupported_op;
|
|
case 4: /* jmp Ev */
|
|
/* XXX: optimize and handle MEM exceptions specifically
|
|
fs movl %eax, regs[0]
|
|
movl Ev, %eax
|
|
fs movl %eax, eip
|
|
*/
|
|
goto unsupported_op;
|
|
case 5: /* ljmp Ev */
|
|
goto unsupported_op;
|
|
case 6: /* push Ev */
|
|
break;
|
|
default:
|
|
goto illegal_op;
|
|
}
|
|
break;
|
|
case 0xa8: /* test eAX, Iv */
|
|
case 0xa9:
|
|
if ((b & 1) == 0)
|
|
ot = OT_BYTE;
|
|
else
|
|
ot = dflag ? OT_LONG : OT_WORD;
|
|
insn_get(s, ot);
|
|
break;
|
|
|
|
case 0x98: /* CWDE/CBW */
|
|
break;
|
|
case 0x99: /* CDQ/CWD */
|
|
break;
|
|
case 0x1af: /* imul Gv, Ev */
|
|
case 0x69: /* imul Gv, Ev, I */
|
|
case 0x6b:
|
|
ot = dflag ? OT_LONG : OT_WORD;
|
|
modrm = ldub_code(s->pc++);
|
|
parse_modrm(s, modrm);
|
|
if (b == 0x69) {
|
|
insn_get(s, ot);
|
|
} else if (b == 0x6b) {
|
|
insn_get(s, OT_BYTE);
|
|
} else {
|
|
}
|
|
break;
|
|
|
|
case 0x84: /* test Ev, Gv */
|
|
case 0x85:
|
|
|
|
case 0x1c0:
|
|
case 0x1c1: /* xadd Ev, Gv */
|
|
|
|
case 0x1b0:
|
|
case 0x1b1: /* cmpxchg Ev, Gv */
|
|
|
|
case 0x8f: /* pop Ev */
|
|
|
|
case 0x88:
|
|
case 0x89: /* mov Gv, Ev */
|
|
|
|
case 0x8a:
|
|
case 0x8b: /* mov Ev, Gv */
|
|
|
|
case 0x1b6: /* movzbS Gv, Eb */
|
|
case 0x1b7: /* movzwS Gv, Eb */
|
|
case 0x1be: /* movsbS Gv, Eb */
|
|
case 0x1bf: /* movswS Gv, Eb */
|
|
|
|
case 0x86:
|
|
case 0x87: /* xchg Ev, Gv */
|
|
|
|
case 0xd0:
|
|
case 0xd1: /* shift Ev,1 */
|
|
|
|
case 0xd2:
|
|
case 0xd3: /* shift Ev,cl */
|
|
|
|
case 0x1a5: /* shld cl */
|
|
case 0x1ad: /* shrd cl */
|
|
|
|
case 0x190 ... 0x19f: /* setcc Gv */
|
|
|
|
/* XXX: emulate cmov if not available ? */
|
|
case 0x140 ... 0x14f: /* cmov Gv, Ev */
|
|
|
|
case 0x1a3: /* bt Gv, Ev */
|
|
case 0x1ab: /* bts */
|
|
case 0x1b3: /* btr */
|
|
case 0x1bb: /* btc */
|
|
|
|
case 0x1bc: /* bsf */
|
|
case 0x1bd: /* bsr */
|
|
|
|
modrm = ldub_code(s->pc++);
|
|
parse_modrm(s, modrm);
|
|
break;
|
|
|
|
case 0x1c7: /* cmpxchg8b */
|
|
modrm = ldub_code(s->pc++);
|
|
mod = (modrm >> 6) & 3;
|
|
if (mod == 3)
|
|
goto illegal_op;
|
|
parse_modrm(s, modrm);
|
|
break;
|
|
|
|
/**************************/
|
|
/* push/pop */
|
|
case 0x50 ... 0x57: /* push */
|
|
case 0x58 ... 0x5f: /* pop */
|
|
case 0x60: /* pusha */
|
|
case 0x61: /* popa */
|
|
break;
|
|
|
|
case 0x68: /* push Iv */
|
|
case 0x6a:
|
|
ot = dflag ? OT_LONG : OT_WORD;
|
|
if (b == 0x68)
|
|
insn_get(s, ot);
|
|
else
|
|
insn_get(s, OT_BYTE);
|
|
break;
|
|
case 0xc8: /* enter */
|
|
lduw_code(s->pc);
|
|
s->pc += 2;
|
|
ldub_code(s->pc++);
|
|
break;
|
|
case 0xc9: /* leave */
|
|
break;
|
|
|
|
case 0x06: /* push es */
|
|
case 0x0e: /* push cs */
|
|
case 0x16: /* push ss */
|
|
case 0x1e: /* push ds */
|
|
/* XXX: optimize:
|
|
push segs[n].selector
|
|
*/
|
|
goto unsupported_op;
|
|
case 0x1a0: /* push fs */
|
|
case 0x1a8: /* push gs */
|
|
goto unsupported_op;
|
|
case 0x07: /* pop es */
|
|
case 0x17: /* pop ss */
|
|
case 0x1f: /* pop ds */
|
|
goto unsupported_op;
|
|
case 0x1a1: /* pop fs */
|
|
case 0x1a9: /* pop gs */
|
|
goto unsupported_op;
|
|
case 0x8e: /* mov seg, Gv */
|
|
/* XXX: optimize:
|
|
fs movl r, regs[]
|
|
movl segs[].selector, r
|
|
mov r, Gv
|
|
fs movl regs[], r
|
|
*/
|
|
goto unsupported_op;
|
|
case 0x8c: /* mov Gv, seg */
|
|
goto unsupported_op;
|
|
case 0xc4: /* les Gv */
|
|
op = R_ES;
|
|
goto do_lxx;
|
|
case 0xc5: /* lds Gv */
|
|
op = R_DS;
|
|
goto do_lxx;
|
|
case 0x1b2: /* lss Gv */
|
|
op = R_SS;
|
|
goto do_lxx;
|
|
case 0x1b4: /* lfs Gv */
|
|
op = R_FS;
|
|
goto do_lxx;
|
|
case 0x1b5: /* lgs Gv */
|
|
op = R_GS;
|
|
do_lxx:
|
|
goto unsupported_op;
|
|
/************************/
|
|
/* floats */
|
|
case 0xd8 ... 0xdf:
|
|
#if 1
|
|
/* currently not stable enough */
|
|
goto unsupported_op;
|
|
#else
|
|
if (s->flags & (HF_EM_MASK | HF_TS_MASK))
|
|
goto unsupported_op;
|
|
#endif
|
|
#if 0
|
|
/* for testing FPU context switch */
|
|
{
|
|
static int count;
|
|
count = (count + 1) % 3;
|
|
if (count != 0)
|
|
goto unsupported_op;
|
|
}
|
|
#endif
|
|
modrm = ldub_code(s->pc++);
|
|
mod = (modrm >> 6) & 3;
|
|
rm = modrm & 7;
|
|
op = ((b & 7) << 3) | ((modrm >> 3) & 7);
|
|
if (mod != 3) {
|
|
/* memory op */
|
|
parse_modrm(s, modrm);
|
|
switch(op) {
|
|
case 0x00 ... 0x07: /* fxxxs */
|
|
case 0x10 ... 0x17: /* fixxxl */
|
|
case 0x20 ... 0x27: /* fxxxl */
|
|
case 0x30 ... 0x37: /* fixxx */
|
|
break;
|
|
case 0x08: /* flds */
|
|
case 0x0a: /* fsts */
|
|
case 0x0b: /* fstps */
|
|
case 0x18: /* fildl */
|
|
case 0x1a: /* fistl */
|
|
case 0x1b: /* fistpl */
|
|
case 0x28: /* fldl */
|
|
case 0x2a: /* fstl */
|
|
case 0x2b: /* fstpl */
|
|
case 0x38: /* filds */
|
|
case 0x3a: /* fists */
|
|
case 0x3b: /* fistps */
|
|
case 0x0c: /* fldenv mem */
|
|
case 0x0d: /* fldcw mem */
|
|
case 0x0e: /* fnstenv mem */
|
|
case 0x0f: /* fnstcw mem */
|
|
case 0x1d: /* fldt mem */
|
|
case 0x1f: /* fstpt mem */
|
|
case 0x2c: /* frstor mem */
|
|
case 0x2e: /* fnsave mem */
|
|
case 0x2f: /* fnstsw mem */
|
|
case 0x3c: /* fbld */
|
|
case 0x3e: /* fbstp */
|
|
case 0x3d: /* fildll */
|
|
case 0x3f: /* fistpll */
|
|
break;
|
|
default:
|
|
goto illegal_op;
|
|
}
|
|
} else {
|
|
/* register float ops */
|
|
switch(op) {
|
|
case 0x08: /* fld sti */
|
|
case 0x09: /* fxchg sti */
|
|
break;
|
|
case 0x0a: /* grp d9/2 */
|
|
switch(rm) {
|
|
case 0: /* fnop */
|
|
break;
|
|
default:
|
|
goto illegal_op;
|
|
}
|
|
break;
|
|
case 0x0c: /* grp d9/4 */
|
|
switch(rm) {
|
|
case 0: /* fchs */
|
|
case 1: /* fabs */
|
|
case 4: /* ftst */
|
|
case 5: /* fxam */
|
|
break;
|
|
default:
|
|
goto illegal_op;
|
|
}
|
|
break;
|
|
case 0x0d: /* grp d9/5 */
|
|
switch(rm) {
|
|
case 0:
|
|
case 1:
|
|
case 2:
|
|
case 3:
|
|
case 4:
|
|
case 5:
|
|
case 6:
|
|
break;
|
|
default:
|
|
goto illegal_op;
|
|
}
|
|
break;
|
|
case 0x0e: /* grp d9/6 */
|
|
break;
|
|
case 0x0f: /* grp d9/7 */
|
|
break;
|
|
case 0x00: case 0x01: case 0x04 ... 0x07: /* fxxx st, sti */
|
|
case 0x20: case 0x21: case 0x24 ... 0x27: /* fxxx sti, st */
|
|
case 0x30: case 0x31: case 0x34 ... 0x37: /* fxxxp sti, st */
|
|
break;
|
|
case 0x02: /* fcom */
|
|
break;
|
|
case 0x03: /* fcomp */
|
|
break;
|
|
case 0x15: /* da/5 */
|
|
switch(rm) {
|
|
case 1: /* fucompp */
|
|
break;
|
|
default:
|
|
goto illegal_op;
|
|
}
|
|
break;
|
|
case 0x1c:
|
|
switch(rm) {
|
|
case 0: /* feni (287 only, just do nop here) */
|
|
case 1: /* fdisi (287 only, just do nop here) */
|
|
goto unsupported_op;
|
|
case 2: /* fclex */
|
|
case 3: /* fninit */
|
|
case 4: /* fsetpm (287 only, just do nop here) */
|
|
break;
|
|
default:
|
|
goto illegal_op;
|
|
}
|
|
break;
|
|
case 0x1d: /* fucomi */
|
|
break;
|
|
case 0x1e: /* fcomi */
|
|
break;
|
|
case 0x2a: /* fst sti */
|
|
break;
|
|
case 0x2b: /* fstp sti */
|
|
break;
|
|
case 0x2c: /* fucom st(i) */
|
|
break;
|
|
case 0x2d: /* fucomp st(i) */
|
|
break;
|
|
case 0x33: /* de/3 */
|
|
switch(rm) {
|
|
case 1: /* fcompp */
|
|
break;
|
|
default:
|
|
goto illegal_op;
|
|
}
|
|
break;
|
|
case 0x3c: /* df/4 */
|
|
switch(rm) {
|
|
case 0:
|
|
break;
|
|
default:
|
|
goto illegal_op;
|
|
}
|
|
break;
|
|
case 0x3d: /* fucomip */
|
|
break;
|
|
case 0x3e: /* fcomip */
|
|
break;
|
|
case 0x10 ... 0x13: /* fcmovxx */
|
|
case 0x18 ... 0x1b:
|
|
break;
|
|
default:
|
|
goto illegal_op;
|
|
}
|
|
}
|
|
s->tb->cflags |= CF_TB_FP_USED;
|
|
break;
|
|
|
|
/**************************/
|
|
/* mov */
|
|
case 0xc6:
|
|
case 0xc7: /* mov Ev, Iv */
|
|
if ((b & 1) == 0)
|
|
ot = OT_BYTE;
|
|
else
|
|
ot = dflag ? OT_LONG : OT_WORD;
|
|
modrm = ldub_code(s->pc++);
|
|
parse_modrm(s, modrm);
|
|
insn_get(s, ot);
|
|
break;
|
|
|
|
case 0x8d: /* lea */
|
|
ot = dflag ? OT_LONG : OT_WORD;
|
|
modrm = ldub_code(s->pc++);
|
|
mod = (modrm >> 6) & 3;
|
|
if (mod == 3)
|
|
goto illegal_op;
|
|
parse_modrm(s, modrm);
|
|
break;
|
|
|
|
case 0xa0: /* mov EAX, Ov */
|
|
case 0xa1:
|
|
case 0xa2: /* mov Ov, EAX */
|
|
case 0xa3:
|
|
if ((b & 1) == 0)
|
|
ot = OT_BYTE;
|
|
else
|
|
ot = dflag ? OT_LONG : OT_WORD;
|
|
if (s->aflag)
|
|
insn_get(s, OT_LONG);
|
|
else
|
|
insn_get(s, OT_WORD);
|
|
break;
|
|
case 0xd7: /* xlat */
|
|
break;
|
|
case 0xb0 ... 0xb7: /* mov R, Ib */
|
|
insn_get(s, OT_BYTE);
|
|
break;
|
|
case 0xb8 ... 0xbf: /* mov R, Iv */
|
|
ot = dflag ? OT_LONG : OT_WORD;
|
|
insn_get(s, ot);
|
|
break;
|
|
|
|
case 0x91 ... 0x97: /* xchg R, EAX */
|
|
break;
|
|
|
|
/************************/
|
|
/* shifts */
|
|
case 0xc0:
|
|
case 0xc1: /* shift Ev,imm */
|
|
|
|
case 0x1a4: /* shld imm */
|
|
case 0x1ac: /* shrd imm */
|
|
modrm = ldub_code(s->pc++);
|
|
parse_modrm(s, modrm);
|
|
ldub_code(s->pc++);
|
|
break;
|
|
|
|
/************************/
|
|
/* string ops */
|
|
|
|
case 0xa4: /* movsS */
|
|
case 0xa5:
|
|
break;
|
|
|
|
case 0xaa: /* stosS */
|
|
case 0xab:
|
|
break;
|
|
|
|
case 0xac: /* lodsS */
|
|
case 0xad:
|
|
break;
|
|
|
|
case 0xae: /* scasS */
|
|
case 0xaf:
|
|
break;
|
|
|
|
case 0xa6: /* cmpsS */
|
|
case 0xa7:
|
|
break;
|
|
|
|
case 0x6c: /* insS */
|
|
case 0x6d:
|
|
goto unsupported_op;
|
|
|
|
case 0x6e: /* outsS */
|
|
case 0x6f:
|
|
goto unsupported_op;
|
|
|
|
/************************/
|
|
/* port I/O */
|
|
case 0xe4:
|
|
case 0xe5:
|
|
goto unsupported_op;
|
|
|
|
case 0xe6:
|
|
case 0xe7:
|
|
goto unsupported_op;
|
|
|
|
case 0xec:
|
|
case 0xed:
|
|
goto unsupported_op;
|
|
|
|
case 0xee:
|
|
case 0xef:
|
|
goto unsupported_op;
|
|
|
|
/************************/
|
|
/* control */
|
|
#if 0
|
|
case 0xc2: /* ret im */
|
|
val = ldsw_code(s->pc);
|
|
s->pc += 2;
|
|
gen_pop_T0(s);
|
|
gen_stack_update(s, val + (2 << s->dflag));
|
|
if (s->dflag == 0)
|
|
gen_op_andl_T0_ffff();
|
|
gen_op_jmp_T0();
|
|
gen_eob(s);
|
|
break;
|
|
#endif
|
|
|
|
case 0xc3: /* ret */
|
|
gb(s, CPU_SEG);
|
|
if (!s->dflag)
|
|
gb(s, 0x66); /* d16 */
|
|
gb(s, 0x8f); /* pop addr */
|
|
gb(s, 0x05);
|
|
gl(s, CPU_FIELD_OFFSET(eip));
|
|
if (!s->dflag) {
|
|
/* reset high bits of EIP */
|
|
gen_movw_addr_im(s, CPU_FIELD_OFFSET(eip) + 2, 0);
|
|
}
|
|
gen_eob(s);
|
|
goto no_copy;
|
|
case 0xca: /* lret im */
|
|
case 0xcb: /* lret */
|
|
case 0xcf: /* iret */
|
|
case 0x9a: /* lcall im */
|
|
case 0xea: /* ljmp im */
|
|
goto unsupported_op;
|
|
|
|
case 0xe8: /* call im */
|
|
ot = dflag ? OT_LONG : OT_WORD;
|
|
val = insn_get(s, ot);
|
|
next_eip = s->pc - s->cs_base;
|
|
val += next_eip;
|
|
if (s->dflag) {
|
|
gb(s, 0x68); /* pushl imm */
|
|
gl(s, next_eip);
|
|
} else {
|
|
gb(s, 0x66); /* pushw imm */
|
|
gb(s, 0x68);
|
|
gw(s, next_eip);
|
|
val &= 0xffff;
|
|
}
|
|
gen_jmp(s, val);
|
|
goto no_copy;
|
|
case 0xe9: /* jmp */
|
|
ot = dflag ? OT_LONG : OT_WORD;
|
|
val = insn_get(s, ot);
|
|
val += s->pc - s->cs_base;
|
|
if (s->dflag == 0)
|
|
val = val & 0xffff;
|
|
gen_jmp(s, val);
|
|
goto no_copy;
|
|
case 0xeb: /* jmp Jb */
|
|
val = (int8_t)insn_get(s, OT_BYTE);
|
|
val += s->pc - s->cs_base;
|
|
if (s->dflag == 0)
|
|
val = val & 0xffff;
|
|
gen_jmp(s, val);
|
|
goto no_copy;
|
|
case 0x70 ... 0x7f: /* jcc Jb */
|
|
val = (int8_t)insn_get(s, OT_BYTE);
|
|
goto do_jcc;
|
|
case 0x180 ... 0x18f: /* jcc Jv */
|
|
if (dflag) {
|
|
val = insn_get(s, OT_LONG);
|
|
} else {
|
|
val = (int16_t)insn_get(s, OT_WORD);
|
|
}
|
|
do_jcc:
|
|
next_eip = s->pc - s->cs_base;
|
|
val += next_eip;
|
|
if (s->dflag == 0)
|
|
val &= 0xffff;
|
|
gen_jcc(s, b & 0xf, val, next_eip);
|
|
goto no_copy;
|
|
|
|
/************************/
|
|
/* flags */
|
|
case 0x9c: /* pushf */
|
|
/* XXX: put specific code ? */
|
|
goto unsupported_op;
|
|
case 0x9d: /* popf */
|
|
goto unsupported_op;
|
|
|
|
case 0x9e: /* sahf */
|
|
case 0x9f: /* lahf */
|
|
case 0xf5: /* cmc */
|
|
case 0xf8: /* clc */
|
|
case 0xf9: /* stc */
|
|
case 0xfc: /* cld */
|
|
case 0xfd: /* std */
|
|
break;
|
|
|
|
/************************/
|
|
/* bit operations */
|
|
case 0x1ba: /* bt/bts/btr/btc Gv, im */
|
|
ot = dflag ? OT_LONG : OT_WORD;
|
|
modrm = ldub_code(s->pc++);
|
|
op = (modrm >> 3) & 7;
|
|
parse_modrm(s, modrm);
|
|
/* load shift */
|
|
ldub_code(s->pc++);
|
|
if (op < 4)
|
|
goto illegal_op;
|
|
break;
|
|
/************************/
|
|
/* bcd */
|
|
case 0x27: /* daa */
|
|
break;
|
|
case 0x2f: /* das */
|
|
break;
|
|
case 0x37: /* aaa */
|
|
break;
|
|
case 0x3f: /* aas */
|
|
break;
|
|
case 0xd4: /* aam */
|
|
ldub_code(s->pc++);
|
|
break;
|
|
case 0xd5: /* aad */
|
|
ldub_code(s->pc++);
|
|
break;
|
|
/************************/
|
|
/* misc */
|
|
case 0x90: /* nop */
|
|
break;
|
|
case 0x9b: /* fwait */
|
|
if ((s->flags & (HF_MP_MASK | HF_TS_MASK)) ==
|
|
(HF_MP_MASK | HF_TS_MASK)) {
|
|
goto unsupported_op;
|
|
}
|
|
break;
|
|
case 0xcc: /* int3 */
|
|
goto unsupported_op;
|
|
case 0xcd: /* int N */
|
|
goto unsupported_op;
|
|
case 0xce: /* into */
|
|
goto unsupported_op;
|
|
case 0xf1: /* icebp (undocumented, exits to external debugger) */
|
|
goto unsupported_op;
|
|
case 0xfa: /* cli */
|
|
goto unsupported_op;
|
|
case 0xfb: /* sti */
|
|
goto unsupported_op;
|
|
case 0x62: /* bound */
|
|
modrm = ldub_code(s->pc++);
|
|
mod = (modrm >> 6) & 3;
|
|
if (mod == 3)
|
|
goto illegal_op;
|
|
parse_modrm(s, modrm);
|
|
break;
|
|
case 0x1c8 ... 0x1cf: /* bswap reg */
|
|
break;
|
|
case 0xd6: /* salc */
|
|
break;
|
|
case 0xe0: /* loopnz */
|
|
case 0xe1: /* loopz */
|
|
case 0xe2: /* loop */
|
|
case 0xe3: /* jecxz */
|
|
goto unsupported_op;
|
|
|
|
case 0x130: /* wrmsr */
|
|
case 0x132: /* rdmsr */
|
|
goto unsupported_op;
|
|
case 0x131: /* rdtsc */
|
|
goto unsupported_op;
|
|
case 0x1a2: /* cpuid */
|
|
goto unsupported_op;
|
|
case 0xf4: /* hlt */
|
|
goto unsupported_op;
|
|
case 0x100:
|
|
goto unsupported_op;
|
|
case 0x101:
|
|
goto unsupported_op;
|
|
case 0x108: /* invd */
|
|
case 0x109: /* wbinvd */
|
|
goto unsupported_op;
|
|
case 0x63: /* arpl */
|
|
goto unsupported_op;
|
|
case 0x102: /* lar */
|
|
case 0x103: /* lsl */
|
|
goto unsupported_op;
|
|
case 0x118:
|
|
goto unsupported_op;
|
|
case 0x120: /* mov reg, crN */
|
|
case 0x122: /* mov crN, reg */
|
|
goto unsupported_op;
|
|
case 0x121: /* mov reg, drN */
|
|
case 0x123: /* mov drN, reg */
|
|
goto unsupported_op;
|
|
case 0x106: /* clts */
|
|
goto unsupported_op;
|
|
default:
|
|
goto illegal_op;
|
|
}
|
|
|
|
/* just copy the code */
|
|
|
|
/* no override yet */
|
|
if (!s->dflag)
|
|
gb(s, 0x66);
|
|
if (!s->aflag)
|
|
gb(s, 0x67);
|
|
if (prefixes & PREFIX_REPZ)
|
|
gb(s, 0xf3);
|
|
else if (prefixes & PREFIX_REPNZ)
|
|
gb(s, 0xf2);
|
|
{
|
|
int len, i;
|
|
len = s->pc - pc_start_insn;
|
|
for(i = 0; i < len; i++) {
|
|
*s->gen_code_ptr++ = ldub_code(pc_start_insn + i);
|
|
}
|
|
}
|
|
no_copy:
|
|
return 0;
|
|
illegal_op:
|
|
unsupported_op:
|
|
/* fall back to slower code gen necessary */
|
|
s->pc = pc_start;
|
|
return -1;
|
|
}
|
|
|
|
#define GEN_CODE_MAX_SIZE 8192
|
|
#define GEN_CODE_MAX_INSN_SIZE 512
|
|
|
|
static inline int gen_intermediate_code_internal(CPUState *env,
|
|
TranslationBlock *tb,
|
|
uint8_t *gen_code_ptr,
|
|
int *gen_code_size_ptr,
|
|
int search_pc,
|
|
uint8_t *tc_ptr)
|
|
{
|
|
DisasContext dc1, *dc = &dc1;
|
|
uint8_t *pc_insn, *pc_start, *gen_code_end;
|
|
int flags, ret;
|
|
uint8_t *cs_base;
|
|
|
|
if (env->nb_breakpoints > 0 ||
|
|
env->singlestep_enabled)
|
|
return -1;
|
|
flags = tb->flags;
|
|
if (flags & (HF_TF_MASK | HF_ADDSEG_MASK |
|
|
HF_SOFTMMU_MASK | HF_INHIBIT_IRQ_MASK))
|
|
return -1;
|
|
if (!(flags & HF_SS32_MASK))
|
|
return -1;
|
|
gen_code_end = gen_code_ptr +
|
|
GEN_CODE_MAX_SIZE - GEN_CODE_MAX_INSN_SIZE;
|
|
dc->gen_code_ptr = gen_code_ptr;
|
|
dc->gen_code_start = gen_code_ptr;
|
|
|
|
/* generate intermediate code */
|
|
pc_start = (uint8_t *)tb->pc;
|
|
cs_base = (uint8_t *)tb->cs_base;
|
|
dc->pc = pc_start;
|
|
dc->cs_base = cs_base;
|
|
dc->pe = (flags >> HF_PE_SHIFT) & 1;
|
|
dc->code32 = (flags >> HF_CS32_SHIFT) & 1;
|
|
dc->f_st = 0;
|
|
dc->vm86 = (flags >> VM_SHIFT) & 1;
|
|
dc->cpl = (flags >> HF_CPL_SHIFT) & 3;
|
|
dc->iopl = (flags >> IOPL_SHIFT) & 3;
|
|
dc->tb = tb;
|
|
dc->flags = flags;
|
|
|
|
dc->is_jmp = 0;
|
|
|
|
for(;;) {
|
|
pc_insn = dc->pc;
|
|
ret = disas_insn(dc);
|
|
if (ret < 0) {
|
|
/* unsupported insn */
|
|
if (dc->pc == pc_start) {
|
|
/* if first instruction, signal that no copying was done */
|
|
return -1;
|
|
} else {
|
|
gen_jmp(dc, dc->pc - dc->cs_base);
|
|
dc->is_jmp = 1;
|
|
}
|
|
}
|
|
if (search_pc) {
|
|
/* search pc mode */
|
|
if (tc_ptr < dc->gen_code_ptr) {
|
|
env->eip = pc_insn - cs_base;
|
|
return 0;
|
|
}
|
|
}
|
|
/* stop translation if indicated */
|
|
if (dc->is_jmp)
|
|
break;
|
|
/* if too long translation, stop generation */
|
|
if (dc->gen_code_ptr >= gen_code_end ||
|
|
(dc->pc - pc_start) >= (TARGET_PAGE_SIZE - 32)) {
|
|
gen_jmp(dc, dc->pc - dc->cs_base);
|
|
break;
|
|
}
|
|
}
|
|
|
|
#ifdef DEBUG_DISAS
|
|
if (loglevel & CPU_LOG_TB_IN_ASM) {
|
|
fprintf(logfile, "----------------\n");
|
|
fprintf(logfile, "IN: COPY: %s fpu=%d\n",
|
|
lookup_symbol(pc_start),
|
|
tb->cflags & CF_TB_FP_USED ? 1 : 0);
|
|
disas(logfile, pc_start, dc->pc - pc_start, 0, !dc->code32);
|
|
fprintf(logfile, "\n");
|
|
}
|
|
#endif
|
|
|
|
if (!search_pc) {
|
|
*gen_code_size_ptr = dc->gen_code_ptr - dc->gen_code_start;
|
|
tb->size = dc->pc - pc_start;
|
|
tb->cflags |= CF_CODE_COPY;
|
|
return 0;
|
|
} else {
|
|
return -1;
|
|
}
|
|
}
|
|
|
|
/* generate code by just copying data. Return -1 if cannot generate
|
|
any code. Return 0 if code was generated */
|
|
int cpu_gen_code_copy(CPUState *env, TranslationBlock *tb,
|
|
int max_code_size, int *gen_code_size_ptr)
|
|
{
|
|
/* generate machine code */
|
|
tb->tb_next_offset[0] = 0xffff;
|
|
tb->tb_next_offset[1] = 0xffff;
|
|
#ifdef USE_DIRECT_JUMP
|
|
/* the following two entries are optional (only used for string ops) */
|
|
tb->tb_jmp_offset[2] = 0xffff;
|
|
tb->tb_jmp_offset[3] = 0xffff;
|
|
#endif
|
|
return gen_intermediate_code_internal(env, tb,
|
|
tb->tc_ptr, gen_code_size_ptr,
|
|
0, NULL);
|
|
}
|
|
|
|
static uint8_t dummy_gen_code_buf[GEN_CODE_MAX_SIZE];
|
|
|
|
int cpu_restore_state_copy(TranslationBlock *tb,
|
|
CPUState *env, unsigned long searched_pc,
|
|
void *puc)
|
|
{
|
|
struct ucontext *uc = puc;
|
|
int ret, eflags;
|
|
|
|
/* find opc index corresponding to search_pc */
|
|
if (searched_pc < (unsigned long)tb->tc_ptr)
|
|
return -1;
|
|
searched_pc = searched_pc - (long)tb->tc_ptr + (long)dummy_gen_code_buf;
|
|
ret = gen_intermediate_code_internal(env, tb,
|
|
dummy_gen_code_buf, NULL,
|
|
1, (uint8_t *)searched_pc);
|
|
if (ret < 0)
|
|
return ret;
|
|
/* restore all the CPU state from the CPU context from the
|
|
signal. The FPU context stays in the host CPU. */
|
|
|
|
env->regs[R_EAX] = uc->uc_mcontext.gregs[REG_EAX];
|
|
env->regs[R_ECX] = uc->uc_mcontext.gregs[REG_ECX];
|
|
env->regs[R_EDX] = uc->uc_mcontext.gregs[REG_EDX];
|
|
env->regs[R_EBX] = uc->uc_mcontext.gregs[REG_EBX];
|
|
env->regs[R_ESP] = uc->uc_mcontext.gregs[REG_ESP];
|
|
env->regs[R_EBP] = uc->uc_mcontext.gregs[REG_EBP];
|
|
env->regs[R_ESI] = uc->uc_mcontext.gregs[REG_ESI];
|
|
env->regs[R_EDI] = uc->uc_mcontext.gregs[REG_EDI];
|
|
eflags = uc->uc_mcontext.gregs[REG_EFL];
|
|
env->df = 1 - (2 * ((eflags >> 10) & 1));
|
|
env->cc_src = eflags & (CC_O | CC_S | CC_Z | CC_A | CC_P | CC_C);
|
|
env->cc_op = CC_OP_EFLAGS;
|
|
return 0;
|
|
}
|
|
|
|
#endif /* USE_CODE_COPY */
|