for user-mode, assert that the hidden IOBPT flags are not set
while attempting to generate io_bpt helpers.
Signed-off-by: Claudio Fontana <cfontana@suse.de>
Cc: Paolo Bonzini <pbonzini@redhat.com>
---
target/i386/helper.h | 7 +
target/i386/tcg/helper-tcg.h | 3 +
target/i386/tcg/bpt_helper.c | 276 -------------------------
target/i386/tcg/softmmu/bpt_helper.c | 293 +++++++++++++++++++++++++++
target/i386/tcg/translate.c | 8 +-
target/i386/tcg/softmmu/meson.build | 1 +
6 files changed, 311 insertions(+), 277 deletions(-)
create mode 100644 target/i386/tcg/softmmu/bpt_helper.c
diff --git a/target/i386/helper.h b/target/i386/helper.h
index 8ffda4cdc6..095520f81f 100644
--- a/target/i386/helper.h
+++ b/target/i386/helper.h
@@ -46,7 +46,11 @@ DEF_HELPER_2(read_crN, tl, env, int)
DEF_HELPER_3(write_crN, void, env, int, tl)
DEF_HELPER_2(lmsw, void, env, tl)
DEF_HELPER_1(clts, void, env)
+
+#ifndef CONFIG_USER_ONLY
DEF_HELPER_FLAGS_3(set_dr, TCG_CALL_NO_WG, void, env, int, tl)
+#endif /* !CONFIG_USER_ONLY */
+
DEF_HELPER_FLAGS_2(get_dr, TCG_CALL_NO_WG, tl, env, int)
DEF_HELPER_2(invlpg, void, env, tl)
@@ -100,7 +104,10 @@ DEF_HELPER_3(outw, void, env, i32, i32)
DEF_HELPER_2(inw, tl, env, i32)
DEF_HELPER_3(outl, void, env, i32, i32)
DEF_HELPER_2(inl, tl, env, i32)
+
+#ifndef CONFIG_USER_ONLY
DEF_HELPER_FLAGS_4(bpt_io, TCG_CALL_NO_WG, void, env, i32, i32, tl)
+#endif /* !CONFIG_USER_ONLY */
DEF_HELPER_3(svm_check_intercept_param, void, env, i32, i64)
DEF_HELPER_4(svm_check_io, void, env, i32, i32, i32)
diff --git a/target/i386/tcg/helper-tcg.h b/target/i386/tcg/helper-tcg.h
index c133c63555..b420b3356d 100644
--- a/target/i386/tcg/helper-tcg.h
+++ b/target/i386/tcg/helper-tcg.h
@@ -92,4 +92,7 @@ void do_interrupt_x86_hardirq(CPUX86State *env, int intno, int is_hw);
/* smm_helper.c */
void do_smm_enter(X86CPU *cpu);
+/* bpt_helper.c */
+bool check_hw_breakpoints(CPUX86State *env, bool force_dr6_update);
+
#endif /* I386_HELPER_TCG_H */
diff --git a/target/i386/tcg/bpt_helper.c b/target/i386/tcg/bpt_helper.c
index 979230ac12..fb2a65ac9c 100644
--- a/target/i386/tcg/bpt_helper.c
+++ b/target/i386/tcg/bpt_helper.c
@@ -19,223 +19,9 @@
#include "qemu/osdep.h"
#include "cpu.h"
-#include "exec/exec-all.h"
#include "exec/helper-proto.h"
#include "helper-tcg.h"
-
-#ifndef CONFIG_USER_ONLY
-static inline bool hw_local_breakpoint_enabled(unsigned long dr7, int index)
-{
- return (dr7 >> (index * 2)) & 1;
-}
-
-static inline bool hw_global_breakpoint_enabled(unsigned long dr7, int index)
-{
- return (dr7 >> (index * 2)) & 2;
-
-}
-static inline bool hw_breakpoint_enabled(unsigned long dr7, int index)
-{
- return hw_global_breakpoint_enabled(dr7, index) ||
- hw_local_breakpoint_enabled(dr7, index);
-}
-
-static inline int hw_breakpoint_type(unsigned long dr7, int index)
-{
- return (dr7 >> (DR7_TYPE_SHIFT + (index * 4))) & 3;
-}
-
-static inline int hw_breakpoint_len(unsigned long dr7, int index)
-{
- int len = ((dr7 >> (DR7_LEN_SHIFT + (index * 4))) & 3);
- return (len == 2) ? 8 : len + 1;
-}
-
-static int hw_breakpoint_insert(CPUX86State *env, int index)
-{
- CPUState *cs = env_cpu(env);
- target_ulong dr7 = env->dr[7];
- target_ulong drN = env->dr[index];
- int err = 0;
-
- switch (hw_breakpoint_type(dr7, index)) {
- case DR7_TYPE_BP_INST:
- if (hw_breakpoint_enabled(dr7, index)) {
- err = cpu_breakpoint_insert(cs, drN, BP_CPU,
- &env->cpu_breakpoint[index]);
- }
- break;
-
- case DR7_TYPE_IO_RW:
- /* Notice when we should enable calls to bpt_io. */
- return hw_breakpoint_enabled(env->dr[7], index)
- ? HF_IOBPT_MASK : 0;
-
- case DR7_TYPE_DATA_WR:
- if (hw_breakpoint_enabled(dr7, index)) {
- err = cpu_watchpoint_insert(cs, drN,
- hw_breakpoint_len(dr7, index),
- BP_CPU | BP_MEM_WRITE,
- &env->cpu_watchpoint[index]);
- }
- break;
-
- case DR7_TYPE_DATA_RW:
- if (hw_breakpoint_enabled(dr7, index)) {
- err = cpu_watchpoint_insert(cs, drN,
- hw_breakpoint_len(dr7, index),
- BP_CPU | BP_MEM_ACCESS,
- &env->cpu_watchpoint[index]);
- }
- break;
- }
- if (err) {
- env->cpu_breakpoint[index] = NULL;
- }
- return 0;
-}
-
-static void hw_breakpoint_remove(CPUX86State *env, int index)
-{
- CPUState *cs = env_cpu(env);
-
- switch (hw_breakpoint_type(env->dr[7], index)) {
- case DR7_TYPE_BP_INST:
- if (env->cpu_breakpoint[index]) {
- cpu_breakpoint_remove_by_ref(cs, env->cpu_breakpoint[index]);
- env->cpu_breakpoint[index] = NULL;
- }
- break;
-
- case DR7_TYPE_DATA_WR:
- case DR7_TYPE_DATA_RW:
- if (env->cpu_breakpoint[index]) {
- cpu_watchpoint_remove_by_ref(cs, env->cpu_watchpoint[index]);
- env->cpu_breakpoint[index] = NULL;
- }
- break;
-
- case DR7_TYPE_IO_RW:
- /* HF_IOBPT_MASK cleared elsewhere. */
- break;
- }
-}
-
-void cpu_x86_update_dr7(CPUX86State *env, uint32_t new_dr7)
-{
- target_ulong old_dr7 = env->dr[7];
- int iobpt = 0;
- int i;
-
- new_dr7 |= DR7_FIXED_1;
-
- /* If nothing is changing except the global/local enable bits,
- then we can make the change more efficient. */
- if (((old_dr7 ^ new_dr7) & ~0xff) == 0) {
- /* Fold the global and local enable bits together into the
- global fields, then xor to show which registers have
- changed collective enable state. */
- int mod = ((old_dr7 | old_dr7 * 2) ^ (new_dr7 | new_dr7 * 2)) & 0xff;
-
- for (i = 0; i < DR7_MAX_BP; i++) {
- if ((mod & (2 << i * 2)) && !hw_breakpoint_enabled(new_dr7, i)) {
- hw_breakpoint_remove(env, i);
- }
- }
- env->dr[7] = new_dr7;
- for (i = 0; i < DR7_MAX_BP; i++) {
- if (mod & (2 << i * 2) && hw_breakpoint_enabled(new_dr7, i)) {
- iobpt |= hw_breakpoint_insert(env, i);
- } else if (hw_breakpoint_type(new_dr7, i) == DR7_TYPE_IO_RW
- && hw_breakpoint_enabled(new_dr7, i)) {
- iobpt |= HF_IOBPT_MASK;
- }
- }
- } else {
- for (i = 0; i < DR7_MAX_BP; i++) {
- hw_breakpoint_remove(env, i);
- }
- env->dr[7] = new_dr7;
- for (i = 0; i < DR7_MAX_BP; i++) {
- iobpt |= hw_breakpoint_insert(env, i);
- }
- }
-
- env->hflags = (env->hflags & ~HF_IOBPT_MASK) | iobpt;
-}
-
-static bool check_hw_breakpoints(CPUX86State *env, bool force_dr6_update)
-{
- target_ulong dr6;
- int reg;
- bool hit_enabled = false;
-
- dr6 = env->dr[6] & ~0xf;
- for (reg = 0; reg < DR7_MAX_BP; reg++) {
- bool bp_match = false;
- bool wp_match = false;
-
- switch (hw_breakpoint_type(env->dr[7], reg)) {
- case DR7_TYPE_BP_INST:
- if (env->dr[reg] == env->eip) {
- bp_match = true;
- }
- break;
- case DR7_TYPE_DATA_WR:
- case DR7_TYPE_DATA_RW:
- if (env->cpu_watchpoint[reg] &&
- env->cpu_watchpoint[reg]->flags & BP_WATCHPOINT_HIT) {
- wp_match = true;
- }
- break;
- case DR7_TYPE_IO_RW:
- break;
- }
- if (bp_match || wp_match) {
- dr6 |= 1 << reg;
- if (hw_breakpoint_enabled(env->dr[7], reg)) {
- hit_enabled = true;
- }
- }
- }
-
- if (hit_enabled || force_dr6_update) {
- env->dr[6] = dr6;
- }
-
- return hit_enabled;
-}
-
-void breakpoint_handler(CPUState *cs)
-{
- X86CPU *cpu = X86_CPU(cs);
- CPUX86State *env = &cpu->env;
- CPUBreakpoint *bp;
-
- if (cs->watchpoint_hit) {
- if (cs->watchpoint_hit->flags & BP_CPU) {
- cs->watchpoint_hit = NULL;
- if (check_hw_breakpoints(env, false)) {
- raise_exception(env, EXCP01_DB);
- } else {
- cpu_loop_exit_noexc(cs);
- }
- }
- } else {
- QTAILQ_FOREACH(bp, &cs->breakpoints, entry) {
- if (bp->pc == env->eip) {
- if (bp->flags & BP_CPU) {
- check_hw_breakpoints(env, true);
- raise_exception(env, EXCP01_DB);
- }
- break;
- }
- }
- }
-}
-#endif
-
void helper_single_step(CPUX86State *env)
{
#ifndef CONFIG_USER_ONLY
@@ -252,41 +38,6 @@ void helper_rechecking_single_step(CPUX86State *env)
}
}
-void helper_set_dr(CPUX86State *env, int reg, target_ulong t0)
-{
-#ifndef CONFIG_USER_ONLY
- switch (reg) {
- case 0: case 1: case 2: case 3:
- if (hw_breakpoint_enabled(env->dr[7], reg)
- && hw_breakpoint_type(env->dr[7], reg) != DR7_TYPE_IO_RW) {
- hw_breakpoint_remove(env, reg);
- env->dr[reg] = t0;
- hw_breakpoint_insert(env, reg);
- } else {
- env->dr[reg] = t0;
- }
- return;
- case 4:
- if (env->cr[4] & CR4_DE_MASK) {
- break;
- }
- /* fallthru */
- case 6:
- env->dr[6] = t0 | DR6_FIXED_1;
- return;
- case 5:
- if (env->cr[4] & CR4_DE_MASK) {
- break;
- }
- /* fallthru */
- case 7:
- cpu_x86_update_dr7(env, t0);
- return;
- }
- raise_exception_err_ra(env, EXCP06_ILLOP, 0, GETPC());
-#endif
-}
-
target_ulong helper_get_dr(CPUX86State *env, int reg)
{
switch (reg) {
@@ -307,30 +58,3 @@ target_ulong helper_get_dr(CPUX86State *env, int reg)
}
raise_exception_err_ra(env, EXCP06_ILLOP, 0, GETPC());
}
-
-/* Check if Port I/O is trapped by a breakpoint. */
-void helper_bpt_io(CPUX86State *env, uint32_t port,
- uint32_t size, target_ulong next_eip)
-{
-#ifndef CONFIG_USER_ONLY
- target_ulong dr7 = env->dr[7];
- int i, hit = 0;
-
- for (i = 0; i < DR7_MAX_BP; ++i) {
- if (hw_breakpoint_type(dr7, i) == DR7_TYPE_IO_RW
- && hw_breakpoint_enabled(dr7, i)) {
- int bpt_len = hw_breakpoint_len(dr7, i);
- if (port + size - 1 >= env->dr[i]
- && port <= env->dr[i] + bpt_len - 1) {
- hit |= 1 << i;
- }
- }
- }
-
- if (hit) {
- env->dr[6] = (env->dr[6] & ~0xf) | hit;
- env->eip = next_eip;
- raise_exception(env, EXCP01_DB);
- }
-#endif
-}
diff --git a/target/i386/tcg/softmmu/bpt_helper.c b/target/i386/tcg/softmmu/bpt_helper.c
new file mode 100644
index 0000000000..1f3dd09cad
--- /dev/null
+++ b/target/i386/tcg/softmmu/bpt_helper.c
@@ -0,0 +1,293 @@
+/*
+ * i386 breakpoint helpers - softmmu-only code
+ *
+ * Copyright (c) 2003 Fabrice Bellard
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License as published by the Free Software Foundation; either
+ * version 2.1 of the License, or (at your option) any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public
+ * License along with this library; if not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "qemu/osdep.h"
+#include "cpu.h"
+#include "exec/exec-all.h"
+#include "exec/helper-proto.h"
+#include "tcg/helper-tcg.h"
+
+
+static inline bool hw_local_breakpoint_enabled(unsigned long dr7, int index)
+{
+ return (dr7 >> (index * 2)) & 1;
+}
+
+static inline bool hw_global_breakpoint_enabled(unsigned long dr7, int index)
+{
+ return (dr7 >> (index * 2)) & 2;
+
+}
+static inline bool hw_breakpoint_enabled(unsigned long dr7, int index)
+{
+ return hw_global_breakpoint_enabled(dr7, index) ||
+ hw_local_breakpoint_enabled(dr7, index);
+}
+
+static inline int hw_breakpoint_type(unsigned long dr7, int index)
+{
+ return (dr7 >> (DR7_TYPE_SHIFT + (index * 4))) & 3;
+}
+
+static inline int hw_breakpoint_len(unsigned long dr7, int index)
+{
+ int len = ((dr7 >> (DR7_LEN_SHIFT + (index * 4))) & 3);
+ return (len == 2) ? 8 : len + 1;
+}
+
+static int hw_breakpoint_insert(CPUX86State *env, int index)
+{
+ CPUState *cs = env_cpu(env);
+ target_ulong dr7 = env->dr[7];
+ target_ulong drN = env->dr[index];
+ int err = 0;
+
+ switch (hw_breakpoint_type(dr7, index)) {
+ case DR7_TYPE_BP_INST:
+ if (hw_breakpoint_enabled(dr7, index)) {
+ err = cpu_breakpoint_insert(cs, drN, BP_CPU,
+ &env->cpu_breakpoint[index]);
+ }
+ break;
+
+ case DR7_TYPE_IO_RW:
+ /* Notice when we should enable calls to bpt_io. */
+ return hw_breakpoint_enabled(env->dr[7], index)
+ ? HF_IOBPT_MASK : 0;
+
+ case DR7_TYPE_DATA_WR:
+ if (hw_breakpoint_enabled(dr7, index)) {
+ err = cpu_watchpoint_insert(cs, drN,
+ hw_breakpoint_len(dr7, index),
+ BP_CPU | BP_MEM_WRITE,
+ &env->cpu_watchpoint[index]);
+ }
+ break;
+
+ case DR7_TYPE_DATA_RW:
+ if (hw_breakpoint_enabled(dr7, index)) {
+ err = cpu_watchpoint_insert(cs, drN,
+ hw_breakpoint_len(dr7, index),
+ BP_CPU | BP_MEM_ACCESS,
+ &env->cpu_watchpoint[index]);
+ }
+ break;
+ }
+ if (err) {
+ env->cpu_breakpoint[index] = NULL;
+ }
+ return 0;
+}
+
+static void hw_breakpoint_remove(CPUX86State *env, int index)
+{
+ CPUState *cs = env_cpu(env);
+
+ switch (hw_breakpoint_type(env->dr[7], index)) {
+ case DR7_TYPE_BP_INST:
+ if (env->cpu_breakpoint[index]) {
+ cpu_breakpoint_remove_by_ref(cs, env->cpu_breakpoint[index]);
+ env->cpu_breakpoint[index] = NULL;
+ }
+ break;
+
+ case DR7_TYPE_DATA_WR:
+ case DR7_TYPE_DATA_RW:
+ if (env->cpu_breakpoint[index]) {
+ cpu_watchpoint_remove_by_ref(cs, env->cpu_watchpoint[index]);
+ env->cpu_breakpoint[index] = NULL;
+ }
+ break;
+
+ case DR7_TYPE_IO_RW:
+ /* HF_IOBPT_MASK cleared elsewhere. */
+ break;
+ }
+}
+
+void cpu_x86_update_dr7(CPUX86State *env, uint32_t new_dr7)
+{
+ target_ulong old_dr7 = env->dr[7];
+ int iobpt = 0;
+ int i;
+
+ new_dr7 |= DR7_FIXED_1;
+
+ /* If nothing is changing except the global/local enable bits,
+ then we can make the change more efficient. */
+ if (((old_dr7 ^ new_dr7) & ~0xff) == 0) {
+ /* Fold the global and local enable bits together into the
+ global fields, then xor to show which registers have
+ changed collective enable state. */
+ int mod = ((old_dr7 | old_dr7 * 2) ^ (new_dr7 | new_dr7 * 2)) & 0xff;
+
+ for (i = 0; i < DR7_MAX_BP; i++) {
+ if ((mod & (2 << i * 2)) && !hw_breakpoint_enabled(new_dr7, i)) {
+ hw_breakpoint_remove(env, i);
+ }
+ }
+ env->dr[7] = new_dr7;
+ for (i = 0; i < DR7_MAX_BP; i++) {
+ if (mod & (2 << i * 2) && hw_breakpoint_enabled(new_dr7, i)) {
+ iobpt |= hw_breakpoint_insert(env, i);
+ } else if (hw_breakpoint_type(new_dr7, i) == DR7_TYPE_IO_RW
+ && hw_breakpoint_enabled(new_dr7, i)) {
+ iobpt |= HF_IOBPT_MASK;
+ }
+ }
+ } else {
+ for (i = 0; i < DR7_MAX_BP; i++) {
+ hw_breakpoint_remove(env, i);
+ }
+ env->dr[7] = new_dr7;
+ for (i = 0; i < DR7_MAX_BP; i++) {
+ iobpt |= hw_breakpoint_insert(env, i);
+ }
+ }
+
+ env->hflags = (env->hflags & ~HF_IOBPT_MASK) | iobpt;
+}
+
+bool check_hw_breakpoints(CPUX86State *env, bool force_dr6_update)
+{
+ target_ulong dr6;
+ int reg;
+ bool hit_enabled = false;
+
+ dr6 = env->dr[6] & ~0xf;
+ for (reg = 0; reg < DR7_MAX_BP; reg++) {
+ bool bp_match = false;
+ bool wp_match = false;
+
+ switch (hw_breakpoint_type(env->dr[7], reg)) {
+ case DR7_TYPE_BP_INST:
+ if (env->dr[reg] == env->eip) {
+ bp_match = true;
+ }
+ break;
+ case DR7_TYPE_DATA_WR:
+ case DR7_TYPE_DATA_RW:
+ if (env->cpu_watchpoint[reg] &&
+ env->cpu_watchpoint[reg]->flags & BP_WATCHPOINT_HIT) {
+ wp_match = true;
+ }
+ break;
+ case DR7_TYPE_IO_RW:
+ break;
+ }
+ if (bp_match || wp_match) {
+ dr6 |= 1 << reg;
+ if (hw_breakpoint_enabled(env->dr[7], reg)) {
+ hit_enabled = true;
+ }
+ }
+ }
+
+ if (hit_enabled || force_dr6_update) {
+ env->dr[6] = dr6;
+ }
+
+ return hit_enabled;
+}
+
+void breakpoint_handler(CPUState *cs)
+{
+ X86CPU *cpu = X86_CPU(cs);
+ CPUX86State *env = &cpu->env;
+ CPUBreakpoint *bp;
+
+ if (cs->watchpoint_hit) {
+ if (cs->watchpoint_hit->flags & BP_CPU) {
+ cs->watchpoint_hit = NULL;
+ if (check_hw_breakpoints(env, false)) {
+ raise_exception(env, EXCP01_DB);
+ } else {
+ cpu_loop_exit_noexc(cs);
+ }
+ }
+ } else {
+ QTAILQ_FOREACH(bp, &cs->breakpoints, entry) {
+ if (bp->pc == env->eip) {
+ if (bp->flags & BP_CPU) {
+ check_hw_breakpoints(env, true);
+ raise_exception(env, EXCP01_DB);
+ }
+ break;
+ }
+ }
+ }
+}
+
+void helper_set_dr(CPUX86State *env, int reg, target_ulong t0)
+{
+ switch (reg) {
+ case 0: case 1: case 2: case 3:
+ if (hw_breakpoint_enabled(env->dr[7], reg)
+ && hw_breakpoint_type(env->dr[7], reg) != DR7_TYPE_IO_RW) {
+ hw_breakpoint_remove(env, reg);
+ env->dr[reg] = t0;
+ hw_breakpoint_insert(env, reg);
+ } else {
+ env->dr[reg] = t0;
+ }
+ return;
+ case 4:
+ if (env->cr[4] & CR4_DE_MASK) {
+ break;
+ }
+ /* fallthru */
+ case 6:
+ env->dr[6] = t0 | DR6_FIXED_1;
+ return;
+ case 5:
+ if (env->cr[4] & CR4_DE_MASK) {
+ break;
+ }
+ /* fallthru */
+ case 7:
+ cpu_x86_update_dr7(env, t0);
+ return;
+ }
+ raise_exception_err_ra(env, EXCP06_ILLOP, 0, GETPC());
+}
+
+/* Check if Port I/O is trapped by a breakpoint. */
+void helper_bpt_io(CPUX86State *env, uint32_t port,
+ uint32_t size, target_ulong next_eip)
+{
+ target_ulong dr7 = env->dr[7];
+ int i, hit = 0;
+
+ for (i = 0; i < DR7_MAX_BP; ++i) {
+ if (hw_breakpoint_type(dr7, i) == DR7_TYPE_IO_RW
+ && hw_breakpoint_enabled(dr7, i)) {
+ int bpt_len = hw_breakpoint_len(dr7, i);
+ if (port + size - 1 >= env->dr[i]
+ && port <= env->dr[i] + bpt_len - 1) {
+ hit |= 1 << i;
+ }
+ }
+ }
+
+ if (hit) {
+ env->dr[6] = (env->dr[6] & ~0xf) | hit;
+ env->eip = next_eip;
+ raise_exception(env, EXCP01_DB);
+ }
+}
diff --git a/target/i386/tcg/translate.c b/target/i386/tcg/translate.c
index b882041ef0..911e3ee79a 100644
--- a/target/i386/tcg/translate.c
+++ b/target/i386/tcg/translate.c
@@ -1117,16 +1117,20 @@ static inline void gen_cmps(DisasContext *s, MemOp ot)
static void gen_bpt_io(DisasContext *s, TCGv_i32 t_port, int ot)
{
if (s->flags & HF_IOBPT_MASK) {
+#ifdef CONFIG_USER_ONLY
+ /* user-mode cpu should not be in IOBPT mode */
+ g_assert_not_reached();
+#else
TCGv_i32 t_size = tcg_const_i32(1 << ot);
TCGv t_next = tcg_const_tl(s->pc - s->cs_base);
gen_helper_bpt_io(cpu_env, t_port, t_size, t_next);
tcg_temp_free_i32(t_size);
tcg_temp_free(t_next);
+#endif /* CONFIG_USER_ONLY */
}
}
-
static inline void gen_ins(DisasContext *s, MemOp ot)
{
gen_string_movl_A0_EDI(s);
@@ -8074,7 +8078,9 @@ static target_ulong disas_insn(DisasContext *s, CPUState *cpu)
gen_svm_check_intercept(s, pc_start, SVM_EXIT_WRITE_DR0 + reg);
gen_op_mov_v_reg(s, ot, s->T0, rm);
tcg_gen_movi_i32(s->tmp2_i32, reg);
+#ifndef CONFIG_USER_ONLY
gen_helper_set_dr(cpu_env, s->tmp2_i32, s->T0);
+#endif /* CONFIG_USER_ONLY */
gen_jmp_im(s, s->pc - s->cs_base);
gen_eob(s);
} else {
diff --git a/target/i386/tcg/softmmu/meson.build b/target/i386/tcg/softmmu/meson.build
index 6d0a0a0fee..1580950141 100644
--- a/target/i386/tcg/softmmu/meson.build
+++ b/target/i386/tcg/softmmu/meson.build
@@ -2,4 +2,5 @@ i386_softmmu_ss.add(when: ['CONFIG_TCG', 'CONFIG_SOFTMMU'], if_true: files(
'tcg-cpu.c',
'smm_helper.c',
'excp_helper.c',
+ 'bpt_helper.c',
))
--
2.26.2
On 2/16/21 11:46 AM, Claudio Fontana wrote:
> for user-mode, assert that the hidden IOBPT flags are not set
> while attempting to generate io_bpt helpers.
>
> Signed-off-by: Claudio Fontana <cfontana@suse.de>
> Cc: Paolo Bonzini <pbonzini@redhat.com>
> ---
> target/i386/helper.h | 7 +
> target/i386/tcg/helper-tcg.h | 3 +
> target/i386/tcg/bpt_helper.c | 276 -------------------------
> target/i386/tcg/softmmu/bpt_helper.c | 293 +++++++++++++++++++++++++++
> target/i386/tcg/translate.c | 8 +-
> target/i386/tcg/softmmu/meson.build | 1 +
> 6 files changed, 311 insertions(+), 277 deletions(-)
> create mode 100644 target/i386/tcg/softmmu/bpt_helper.c
>
> diff --git a/target/i386/helper.h b/target/i386/helper.h
> index 8ffda4cdc6..095520f81f 100644
> --- a/target/i386/helper.h
> +++ b/target/i386/helper.h
> @@ -46,7 +46,11 @@ DEF_HELPER_2(read_crN, tl, env, int)
> DEF_HELPER_3(write_crN, void, env, int, tl)
> DEF_HELPER_2(lmsw, void, env, tl)
> DEF_HELPER_1(clts, void, env)
> +
> +#ifndef CONFIG_USER_ONLY
> DEF_HELPER_FLAGS_3(set_dr, TCG_CALL_NO_WG, void, env, int, tl)
> +#endif /* !CONFIG_USER_ONLY */
> +
> DEF_HELPER_FLAGS_2(get_dr, TCG_CALL_NO_WG, tl, env, int)
> DEF_HELPER_2(invlpg, void, env, tl)
>
> @@ -100,7 +104,10 @@ DEF_HELPER_3(outw, void, env, i32, i32)
> DEF_HELPER_2(inw, tl, env, i32)
> DEF_HELPER_3(outl, void, env, i32, i32)
> DEF_HELPER_2(inl, tl, env, i32)
> +
> +#ifndef CONFIG_USER_ONLY
> DEF_HELPER_FLAGS_4(bpt_io, TCG_CALL_NO_WG, void, env, i32, i32, tl)
> +#endif /* !CONFIG_USER_ONLY */
>
> DEF_HELPER_3(svm_check_intercept_param, void, env, i32, i64)
> DEF_HELPER_4(svm_check_io, void, env, i32, i32, i32)
> diff --git a/target/i386/tcg/helper-tcg.h b/target/i386/tcg/helper-tcg.h
> index c133c63555..b420b3356d 100644
> --- a/target/i386/tcg/helper-tcg.h
> +++ b/target/i386/tcg/helper-tcg.h
> @@ -92,4 +92,7 @@ void do_interrupt_x86_hardirq(CPUX86State *env, int intno, int is_hw);
> /* smm_helper.c */
> void do_smm_enter(X86CPU *cpu);
>
> +/* bpt_helper.c */
> +bool check_hw_breakpoints(CPUX86State *env, bool force_dr6_update);
> +
> #endif /* I386_HELPER_TCG_H */
> diff --git a/target/i386/tcg/bpt_helper.c b/target/i386/tcg/bpt_helper.c
> index 979230ac12..fb2a65ac9c 100644
> --- a/target/i386/tcg/bpt_helper.c
> +++ b/target/i386/tcg/bpt_helper.c
> @@ -19,223 +19,9 @@
>
> #include "qemu/osdep.h"
> #include "cpu.h"
> -#include "exec/exec-all.h"
> #include "exec/helper-proto.h"
> #include "helper-tcg.h"
>
> -
> -#ifndef CONFIG_USER_ONLY
> -static inline bool hw_local_breakpoint_enabled(unsigned long dr7, int index)
> -{
> - return (dr7 >> (index * 2)) & 1;
> -}
> -
> -static inline bool hw_global_breakpoint_enabled(unsigned long dr7, int index)
> -{
> - return (dr7 >> (index * 2)) & 2;
> -
> -}
> -static inline bool hw_breakpoint_enabled(unsigned long dr7, int index)
> -{
> - return hw_global_breakpoint_enabled(dr7, index) ||
> - hw_local_breakpoint_enabled(dr7, index);
> -}
> -
> -static inline int hw_breakpoint_type(unsigned long dr7, int index)
> -{
> - return (dr7 >> (DR7_TYPE_SHIFT + (index * 4))) & 3;
> -}
> -
> -static inline int hw_breakpoint_len(unsigned long dr7, int index)
> -{
> - int len = ((dr7 >> (DR7_LEN_SHIFT + (index * 4))) & 3);
> - return (len == 2) ? 8 : len + 1;
> -}
> -
> -static int hw_breakpoint_insert(CPUX86State *env, int index)
> -{
> - CPUState *cs = env_cpu(env);
> - target_ulong dr7 = env->dr[7];
> - target_ulong drN = env->dr[index];
> - int err = 0;
> -
> - switch (hw_breakpoint_type(dr7, index)) {
> - case DR7_TYPE_BP_INST:
> - if (hw_breakpoint_enabled(dr7, index)) {
> - err = cpu_breakpoint_insert(cs, drN, BP_CPU,
> - &env->cpu_breakpoint[index]);
> - }
> - break;
> -
> - case DR7_TYPE_IO_RW:
> - /* Notice when we should enable calls to bpt_io. */
> - return hw_breakpoint_enabled(env->dr[7], index)
> - ? HF_IOBPT_MASK : 0;
> -
> - case DR7_TYPE_DATA_WR:
> - if (hw_breakpoint_enabled(dr7, index)) {
> - err = cpu_watchpoint_insert(cs, drN,
> - hw_breakpoint_len(dr7, index),
> - BP_CPU | BP_MEM_WRITE,
> - &env->cpu_watchpoint[index]);
> - }
> - break;
> -
> - case DR7_TYPE_DATA_RW:
> - if (hw_breakpoint_enabled(dr7, index)) {
> - err = cpu_watchpoint_insert(cs, drN,
> - hw_breakpoint_len(dr7, index),
> - BP_CPU | BP_MEM_ACCESS,
> - &env->cpu_watchpoint[index]);
> - }
> - break;
> - }
> - if (err) {
> - env->cpu_breakpoint[index] = NULL;
> - }
> - return 0;
> -}
> -
> -static void hw_breakpoint_remove(CPUX86State *env, int index)
> -{
> - CPUState *cs = env_cpu(env);
> -
> - switch (hw_breakpoint_type(env->dr[7], index)) {
> - case DR7_TYPE_BP_INST:
> - if (env->cpu_breakpoint[index]) {
> - cpu_breakpoint_remove_by_ref(cs, env->cpu_breakpoint[index]);
> - env->cpu_breakpoint[index] = NULL;
> - }
> - break;
> -
> - case DR7_TYPE_DATA_WR:
> - case DR7_TYPE_DATA_RW:
> - if (env->cpu_breakpoint[index]) {
> - cpu_watchpoint_remove_by_ref(cs, env->cpu_watchpoint[index]);
> - env->cpu_breakpoint[index] = NULL;
> - }
> - break;
> -
> - case DR7_TYPE_IO_RW:
> - /* HF_IOBPT_MASK cleared elsewhere. */
> - break;
> - }
> -}
> -
> -void cpu_x86_update_dr7(CPUX86State *env, uint32_t new_dr7)
> -{
> - target_ulong old_dr7 = env->dr[7];
> - int iobpt = 0;
> - int i;
> -
> - new_dr7 |= DR7_FIXED_1;
> -
> - /* If nothing is changing except the global/local enable bits,
> - then we can make the change more efficient. */
> - if (((old_dr7 ^ new_dr7) & ~0xff) == 0) {
> - /* Fold the global and local enable bits together into the
> - global fields, then xor to show which registers have
> - changed collective enable state. */
> - int mod = ((old_dr7 | old_dr7 * 2) ^ (new_dr7 | new_dr7 * 2)) & 0xff;
> -
> - for (i = 0; i < DR7_MAX_BP; i++) {
> - if ((mod & (2 << i * 2)) && !hw_breakpoint_enabled(new_dr7, i)) {
> - hw_breakpoint_remove(env, i);
> - }
> - }
> - env->dr[7] = new_dr7;
> - for (i = 0; i < DR7_MAX_BP; i++) {
> - if (mod & (2 << i * 2) && hw_breakpoint_enabled(new_dr7, i)) {
> - iobpt |= hw_breakpoint_insert(env, i);
> - } else if (hw_breakpoint_type(new_dr7, i) == DR7_TYPE_IO_RW
> - && hw_breakpoint_enabled(new_dr7, i)) {
> - iobpt |= HF_IOBPT_MASK;
> - }
> - }
> - } else {
> - for (i = 0; i < DR7_MAX_BP; i++) {
> - hw_breakpoint_remove(env, i);
> - }
> - env->dr[7] = new_dr7;
> - for (i = 0; i < DR7_MAX_BP; i++) {
> - iobpt |= hw_breakpoint_insert(env, i);
> - }
> - }
> -
> - env->hflags = (env->hflags & ~HF_IOBPT_MASK) | iobpt;
> -}
> -
> -static bool check_hw_breakpoints(CPUX86State *env, bool force_dr6_update)
> -{
> - target_ulong dr6;
> - int reg;
> - bool hit_enabled = false;
> -
> - dr6 = env->dr[6] & ~0xf;
> - for (reg = 0; reg < DR7_MAX_BP; reg++) {
> - bool bp_match = false;
> - bool wp_match = false;
> -
> - switch (hw_breakpoint_type(env->dr[7], reg)) {
> - case DR7_TYPE_BP_INST:
> - if (env->dr[reg] == env->eip) {
> - bp_match = true;
> - }
> - break;
> - case DR7_TYPE_DATA_WR:
> - case DR7_TYPE_DATA_RW:
> - if (env->cpu_watchpoint[reg] &&
> - env->cpu_watchpoint[reg]->flags & BP_WATCHPOINT_HIT) {
> - wp_match = true;
> - }
> - break;
> - case DR7_TYPE_IO_RW:
> - break;
> - }
> - if (bp_match || wp_match) {
> - dr6 |= 1 << reg;
> - if (hw_breakpoint_enabled(env->dr[7], reg)) {
> - hit_enabled = true;
> - }
> - }
> - }
> -
> - if (hit_enabled || force_dr6_update) {
> - env->dr[6] = dr6;
> - }
> -
> - return hit_enabled;
> -}
> -
> -void breakpoint_handler(CPUState *cs)
> -{
> - X86CPU *cpu = X86_CPU(cs);
> - CPUX86State *env = &cpu->env;
> - CPUBreakpoint *bp;
> -
> - if (cs->watchpoint_hit) {
> - if (cs->watchpoint_hit->flags & BP_CPU) {
> - cs->watchpoint_hit = NULL;
> - if (check_hw_breakpoints(env, false)) {
> - raise_exception(env, EXCP01_DB);
> - } else {
> - cpu_loop_exit_noexc(cs);
> - }
> - }
> - } else {
> - QTAILQ_FOREACH(bp, &cs->breakpoints, entry) {
> - if (bp->pc == env->eip) {
> - if (bp->flags & BP_CPU) {
> - check_hw_breakpoints(env, true);
> - raise_exception(env, EXCP01_DB);
> - }
> - break;
> - }
> - }
> - }
> -}
> -#endif
> -
> void helper_single_step(CPUX86State *env)
> {
> #ifndef CONFIG_USER_ONLY
> @@ -252,41 +38,6 @@ void helper_rechecking_single_step(CPUX86State *env)
> }
> }
>
> -void helper_set_dr(CPUX86State *env, int reg, target_ulong t0)
> -{
> -#ifndef CONFIG_USER_ONLY
> - switch (reg) {
> - case 0: case 1: case 2: case 3:
> - if (hw_breakpoint_enabled(env->dr[7], reg)
> - && hw_breakpoint_type(env->dr[7], reg) != DR7_TYPE_IO_RW) {
> - hw_breakpoint_remove(env, reg);
> - env->dr[reg] = t0;
> - hw_breakpoint_insert(env, reg);
> - } else {
> - env->dr[reg] = t0;
> - }
> - return;
> - case 4:
> - if (env->cr[4] & CR4_DE_MASK) {
> - break;
> - }
> - /* fallthru */
> - case 6:
> - env->dr[6] = t0 | DR6_FIXED_1;
> - return;
> - case 5:
> - if (env->cr[4] & CR4_DE_MASK) {
> - break;
> - }
> - /* fallthru */
> - case 7:
> - cpu_x86_update_dr7(env, t0);
> - return;
> - }
> - raise_exception_err_ra(env, EXCP06_ILLOP, 0, GETPC());
> -#endif
> -}
> -
> target_ulong helper_get_dr(CPUX86State *env, int reg)
> {
> switch (reg) {
> @@ -307,30 +58,3 @@ target_ulong helper_get_dr(CPUX86State *env, int reg)
> }
> raise_exception_err_ra(env, EXCP06_ILLOP, 0, GETPC());
> }
> -
> -/* Check if Port I/O is trapped by a breakpoint. */
> -void helper_bpt_io(CPUX86State *env, uint32_t port,
> - uint32_t size, target_ulong next_eip)
> -{
> -#ifndef CONFIG_USER_ONLY
> - target_ulong dr7 = env->dr[7];
> - int i, hit = 0;
> -
> - for (i = 0; i < DR7_MAX_BP; ++i) {
> - if (hw_breakpoint_type(dr7, i) == DR7_TYPE_IO_RW
> - && hw_breakpoint_enabled(dr7, i)) {
> - int bpt_len = hw_breakpoint_len(dr7, i);
> - if (port + size - 1 >= env->dr[i]
> - && port <= env->dr[i] + bpt_len - 1) {
> - hit |= 1 << i;
> - }
> - }
> - }
> -
> - if (hit) {
> - env->dr[6] = (env->dr[6] & ~0xf) | hit;
> - env->eip = next_eip;
> - raise_exception(env, EXCP01_DB);
> - }
> -#endif
> -}
> diff --git a/target/i386/tcg/softmmu/bpt_helper.c b/target/i386/tcg/softmmu/bpt_helper.c
> new file mode 100644
> index 0000000000..1f3dd09cad
> --- /dev/null
> +++ b/target/i386/tcg/softmmu/bpt_helper.c
> @@ -0,0 +1,293 @@
> +/*
> + * i386 breakpoint helpers - softmmu-only code
> + *
> + * Copyright (c) 2003 Fabrice Bellard
> + *
> + * This library is free software; you can redistribute it and/or
> + * modify it under the terms of the GNU Lesser General Public
> + * License as published by the Free Software Foundation; either
> + * version 2.1 of the License, or (at your option) any later version.
> + *
> + * This library is distributed in the hope that it will be useful,
> + * but WITHOUT ANY WARRANTY; without even the implied warranty of
> + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
> + * Lesser General Public License for more details.
> + *
> + * You should have received a copy of the GNU Lesser General Public
> + * License along with this library; if not, see <http://www.gnu.org/licenses/>.
> + */
> +
> +#include "qemu/osdep.h"
> +#include "cpu.h"
> +#include "exec/exec-all.h"
> +#include "exec/helper-proto.h"
> +#include "tcg/helper-tcg.h"
> +
> +
> +static inline bool hw_local_breakpoint_enabled(unsigned long dr7, int index)
> +{
> + return (dr7 >> (index * 2)) & 1;
> +}
> +
> +static inline bool hw_global_breakpoint_enabled(unsigned long dr7, int index)
> +{
> + return (dr7 >> (index * 2)) & 2;
> +
> +}
> +static inline bool hw_breakpoint_enabled(unsigned long dr7, int index)
> +{
> + return hw_global_breakpoint_enabled(dr7, index) ||
> + hw_local_breakpoint_enabled(dr7, index);
> +}
> +
> +static inline int hw_breakpoint_type(unsigned long dr7, int index)
> +{
> + return (dr7 >> (DR7_TYPE_SHIFT + (index * 4))) & 3;
> +}
> +
> +static inline int hw_breakpoint_len(unsigned long dr7, int index)
> +{
> + int len = ((dr7 >> (DR7_LEN_SHIFT + (index * 4))) & 3);
> + return (len == 2) ? 8 : len + 1;
> +}
> +
> +static int hw_breakpoint_insert(CPUX86State *env, int index)
> +{
> + CPUState *cs = env_cpu(env);
> + target_ulong dr7 = env->dr[7];
> + target_ulong drN = env->dr[index];
> + int err = 0;
> +
> + switch (hw_breakpoint_type(dr7, index)) {
> + case DR7_TYPE_BP_INST:
> + if (hw_breakpoint_enabled(dr7, index)) {
> + err = cpu_breakpoint_insert(cs, drN, BP_CPU,
> + &env->cpu_breakpoint[index]);
> + }
> + break;
> +
> + case DR7_TYPE_IO_RW:
> + /* Notice when we should enable calls to bpt_io. */
> + return hw_breakpoint_enabled(env->dr[7], index)
> + ? HF_IOBPT_MASK : 0;
> +
> + case DR7_TYPE_DATA_WR:
> + if (hw_breakpoint_enabled(dr7, index)) {
> + err = cpu_watchpoint_insert(cs, drN,
> + hw_breakpoint_len(dr7, index),
> + BP_CPU | BP_MEM_WRITE,
> + &env->cpu_watchpoint[index]);
> + }
> + break;
> +
> + case DR7_TYPE_DATA_RW:
> + if (hw_breakpoint_enabled(dr7, index)) {
> + err = cpu_watchpoint_insert(cs, drN,
> + hw_breakpoint_len(dr7, index),
> + BP_CPU | BP_MEM_ACCESS,
> + &env->cpu_watchpoint[index]);
> + }
> + break;
> + }
> + if (err) {
> + env->cpu_breakpoint[index] = NULL;
> + }
> + return 0;
> +}
> +
> +static void hw_breakpoint_remove(CPUX86State *env, int index)
> +{
> + CPUState *cs = env_cpu(env);
> +
> + switch (hw_breakpoint_type(env->dr[7], index)) {
> + case DR7_TYPE_BP_INST:
> + if (env->cpu_breakpoint[index]) {
> + cpu_breakpoint_remove_by_ref(cs, env->cpu_breakpoint[index]);
> + env->cpu_breakpoint[index] = NULL;
> + }
> + break;
> +
> + case DR7_TYPE_DATA_WR:
> + case DR7_TYPE_DATA_RW:
> + if (env->cpu_breakpoint[index]) {
> + cpu_watchpoint_remove_by_ref(cs, env->cpu_watchpoint[index]);
> + env->cpu_breakpoint[index] = NULL;
> + }
> + break;
> +
> + case DR7_TYPE_IO_RW:
> + /* HF_IOBPT_MASK cleared elsewhere. */
> + break;
> + }
> +}
> +
> +void cpu_x86_update_dr7(CPUX86State *env, uint32_t new_dr7)
> +{
> + target_ulong old_dr7 = env->dr[7];
> + int iobpt = 0;
> + int i;
> +
> + new_dr7 |= DR7_FIXED_1;
> +
> + /* If nothing is changing except the global/local enable bits,
> + then we can make the change more efficient. */
> + if (((old_dr7 ^ new_dr7) & ~0xff) == 0) {
> + /* Fold the global and local enable bits together into the
> + global fields, then xor to show which registers have
> + changed collective enable state. */
> + int mod = ((old_dr7 | old_dr7 * 2) ^ (new_dr7 | new_dr7 * 2)) & 0xff;
> +
> + for (i = 0; i < DR7_MAX_BP; i++) {
> + if ((mod & (2 << i * 2)) && !hw_breakpoint_enabled(new_dr7, i)) {
> + hw_breakpoint_remove(env, i);
> + }
> + }
> + env->dr[7] = new_dr7;
> + for (i = 0; i < DR7_MAX_BP; i++) {
> + if (mod & (2 << i * 2) && hw_breakpoint_enabled(new_dr7, i)) {
> + iobpt |= hw_breakpoint_insert(env, i);
> + } else if (hw_breakpoint_type(new_dr7, i) == DR7_TYPE_IO_RW
> + && hw_breakpoint_enabled(new_dr7, i)) {
> + iobpt |= HF_IOBPT_MASK;
> + }
> + }
> + } else {
> + for (i = 0; i < DR7_MAX_BP; i++) {
> + hw_breakpoint_remove(env, i);
> + }
> + env->dr[7] = new_dr7;
> + for (i = 0; i < DR7_MAX_BP; i++) {
> + iobpt |= hw_breakpoint_insert(env, i);
> + }
> + }
> +
> + env->hflags = (env->hflags & ~HF_IOBPT_MASK) | iobpt;
> +}
> +
> +bool check_hw_breakpoints(CPUX86State *env, bool force_dr6_update)
> +{
> + target_ulong dr6;
> + int reg;
> + bool hit_enabled = false;
> +
> + dr6 = env->dr[6] & ~0xf;
> + for (reg = 0; reg < DR7_MAX_BP; reg++) {
> + bool bp_match = false;
> + bool wp_match = false;
> +
> + switch (hw_breakpoint_type(env->dr[7], reg)) {
> + case DR7_TYPE_BP_INST:
> + if (env->dr[reg] == env->eip) {
> + bp_match = true;
> + }
> + break;
> + case DR7_TYPE_DATA_WR:
> + case DR7_TYPE_DATA_RW:
> + if (env->cpu_watchpoint[reg] &&
> + env->cpu_watchpoint[reg]->flags & BP_WATCHPOINT_HIT) {
> + wp_match = true;
> + }
> + break;
> + case DR7_TYPE_IO_RW:
> + break;
> + }
> + if (bp_match || wp_match) {
> + dr6 |= 1 << reg;
> + if (hw_breakpoint_enabled(env->dr[7], reg)) {
> + hit_enabled = true;
> + }
> + }
> + }
> +
> + if (hit_enabled || force_dr6_update) {
> + env->dr[6] = dr6;
> + }
> +
> + return hit_enabled;
> +}
> +
> +void breakpoint_handler(CPUState *cs)
> +{
> + X86CPU *cpu = X86_CPU(cs);
> + CPUX86State *env = &cpu->env;
> + CPUBreakpoint *bp;
> +
> + if (cs->watchpoint_hit) {
> + if (cs->watchpoint_hit->flags & BP_CPU) {
> + cs->watchpoint_hit = NULL;
> + if (check_hw_breakpoints(env, false)) {
> + raise_exception(env, EXCP01_DB);
> + } else {
> + cpu_loop_exit_noexc(cs);
> + }
> + }
> + } else {
> + QTAILQ_FOREACH(bp, &cs->breakpoints, entry) {
> + if (bp->pc == env->eip) {
> + if (bp->flags & BP_CPU) {
> + check_hw_breakpoints(env, true);
> + raise_exception(env, EXCP01_DB);
> + }
> + break;
> + }
> + }
> + }
> +}
> +
> +void helper_set_dr(CPUX86State *env, int reg, target_ulong t0)
> +{
> + switch (reg) {
> + case 0: case 1: case 2: case 3:
> + if (hw_breakpoint_enabled(env->dr[7], reg)
> + && hw_breakpoint_type(env->dr[7], reg) != DR7_TYPE_IO_RW) {
> + hw_breakpoint_remove(env, reg);
> + env->dr[reg] = t0;
> + hw_breakpoint_insert(env, reg);
> + } else {
> + env->dr[reg] = t0;
> + }
> + return;
> + case 4:
> + if (env->cr[4] & CR4_DE_MASK) {
> + break;
> + }
> + /* fallthru */
> + case 6:
> + env->dr[6] = t0 | DR6_FIXED_1;
> + return;
> + case 5:
> + if (env->cr[4] & CR4_DE_MASK) {
> + break;
> + }
> + /* fallthru */
> + case 7:
> + cpu_x86_update_dr7(env, t0);
> + return;
> + }
> + raise_exception_err_ra(env, EXCP06_ILLOP, 0, GETPC());
> +}
> +
> +/* Check if Port I/O is trapped by a breakpoint. */
> +void helper_bpt_io(CPUX86State *env, uint32_t port,
> + uint32_t size, target_ulong next_eip)
> +{
> + target_ulong dr7 = env->dr[7];
> + int i, hit = 0;
> +
> + for (i = 0; i < DR7_MAX_BP; ++i) {
> + if (hw_breakpoint_type(dr7, i) == DR7_TYPE_IO_RW
> + && hw_breakpoint_enabled(dr7, i)) {
> + int bpt_len = hw_breakpoint_len(dr7, i);
> + if (port + size - 1 >= env->dr[i]
> + && port <= env->dr[i] + bpt_len - 1) {
> + hit |= 1 << i;
> + }
> + }
> + }
> +
> + if (hit) {
> + env->dr[6] = (env->dr[6] & ~0xf) | hit;
> + env->eip = next_eip;
> + raise_exception(env, EXCP01_DB);
> + }
> +}
> diff --git a/target/i386/tcg/translate.c b/target/i386/tcg/translate.c
> index b882041ef0..911e3ee79a 100644
> --- a/target/i386/tcg/translate.c
> +++ b/target/i386/tcg/translate.c
> @@ -1117,16 +1117,20 @@ static inline void gen_cmps(DisasContext *s, MemOp ot)
> static void gen_bpt_io(DisasContext *s, TCGv_i32 t_port, int ot)
> {
> if (s->flags & HF_IOBPT_MASK) {
> +#ifdef CONFIG_USER_ONLY
> + /* user-mode cpu should not be in IOBPT mode */
> + g_assert_not_reached();
> +#else
> TCGv_i32 t_size = tcg_const_i32(1 << ot);
> TCGv t_next = tcg_const_tl(s->pc - s->cs_base);
>
> gen_helper_bpt_io(cpu_env, t_port, t_size, t_next);
> tcg_temp_free_i32(t_size);
> tcg_temp_free(t_next);
> +#endif /* CONFIG_USER_ONLY */
> }
> }
Just highlighting this for your convenience Paolo,
as I am just flailing in the dark here looking for similar patterns.
Is it the case that we should never be in the HF_IOBPT mode when building for CONFIG_USER_ONLY ?
Thanks,
Claudio
>
> -
> static inline void gen_ins(DisasContext *s, MemOp ot)
> {
> gen_string_movl_A0_EDI(s);
> @@ -8074,7 +8078,9 @@ static target_ulong disas_insn(DisasContext *s, CPUState *cpu)
> gen_svm_check_intercept(s, pc_start, SVM_EXIT_WRITE_DR0 + reg);
> gen_op_mov_v_reg(s, ot, s->T0, rm);
> tcg_gen_movi_i32(s->tmp2_i32, reg);
> +#ifndef CONFIG_USER_ONLY
> gen_helper_set_dr(cpu_env, s->tmp2_i32, s->T0);
> +#endif /* CONFIG_USER_ONLY */
> gen_jmp_im(s, s->pc - s->cs_base);
> gen_eob(s);
> } else {
> diff --git a/target/i386/tcg/softmmu/meson.build b/target/i386/tcg/softmmu/meson.build
> index 6d0a0a0fee..1580950141 100644
> --- a/target/i386/tcg/softmmu/meson.build
> +++ b/target/i386/tcg/softmmu/meson.build
> @@ -2,4 +2,5 @@ i386_softmmu_ss.add(when: ['CONFIG_TCG', 'CONFIG_SOFTMMU'], if_true: files(
> 'tcg-cpu.c',
> 'smm_helper.c',
> 'excp_helper.c',
> + 'bpt_helper.c',
> ))
>
> > {
> > if (s->flags & HF_IOBPT_MASK) {
> > +#ifdef CONFIG_USER_ONLY
> > + /* user-mode cpu should not be in IOBPT mode */
> > + g_assert_not_reached();
> > +#else
> > TCGv_i32 t_size = tcg_const_i32(1 << ot);
> > TCGv t_next = tcg_const_tl(s->pc - s->cs_base);
> >
> > gen_helper_bpt_io(cpu_env, t_port, t_size, t_next);
> > tcg_temp_free_i32(t_size);
> > tcg_temp_free(t_next);
> > +#endif /* CONFIG_USER_ONLY */
> > }
> > }
>
> Just highlighting this for your convenience Paolo,
> as I am just flailing in the dark here looking for similar patterns.
>
> Is it the case that we should never be in the HF_IOBPT mode when building for CONFIG_USER_ONLY ?
Yes, pretty much. Maybe worth adding a qemu_assert_softmmu() (return
true for softmmu, abort for user-only), like
if ((s->flags & HF_IOBPT_MASK) && qemu_assert_softmmu()) {
}
Slightly weird API, maybe, but something along those lines.
Paolo
© 2016 - 2026 Red Hat, Inc.