patch.c 6.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236
  1. /*
  2. * Instruction-patching support.
  3. *
  4. * Copyright (C) 2003 Hewlett-Packard Co
  5. * David Mosberger-Tang <davidm@hpl.hp.com>
  6. */
  7. #include <linux/init.h>
  8. #include <linux/string.h>
  9. #include <asm/patch.h>
  10. #include <asm/processor.h>
  11. #include <asm/sections.h>
  12. #include <asm/unistd.h>
  13. /*
  14. * This was adapted from code written by Tony Luck:
  15. *
  16. * The 64-bit value in a "movl reg=value" is scattered between the two words of the bundle
  17. * like this:
  18. *
  19. * 6 6 5 4 3 2 1
  20. * 3210987654321098765432109876543210987654321098765432109876543210
  21. * ABBBBBBBBBBBBBBBBBBBBBBBCCCCCCCCCCCCCCCCCCDEEEEEFFFFFFFFFGGGGGGG
  22. *
  23. * CCCCCCCCCCCCCCCCCCxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
  24. * xxxxAFFFFFFFFFEEEEEDxGGGGGGGxxxxxxxxxxxxxBBBBBBBBBBBBBBBBBBBBBBB
  25. */
  26. static u64
  27. get_imm64 (u64 insn_addr)
  28. {
  29. u64 *p = (u64 *) (insn_addr & -16); /* mask out slot number */
  30. return ( (p[1] & 0x0800000000000000UL) << 4) | /*A*/
  31. ((p[1] & 0x00000000007fffffUL) << 40) | /*B*/
  32. ((p[0] & 0xffffc00000000000UL) >> 24) | /*C*/
  33. ((p[1] & 0x0000100000000000UL) >> 23) | /*D*/
  34. ((p[1] & 0x0003e00000000000UL) >> 29) | /*E*/
  35. ((p[1] & 0x07fc000000000000UL) >> 43) | /*F*/
  36. ((p[1] & 0x000007f000000000UL) >> 36); /*G*/
  37. }
  38. /* Patch instruction with "val" where "mask" has 1 bits. */
  39. void
  40. ia64_patch (u64 insn_addr, u64 mask, u64 val)
  41. {
  42. u64 m0, m1, v0, v1, b0, b1, *b = (u64 *) (insn_addr & -16);
  43. # define insn_mask ((1UL << 41) - 1)
  44. unsigned long shift;
  45. b0 = b[0]; b1 = b[1];
  46. shift = 5 + 41 * (insn_addr % 16); /* 5 bits of template, then 3 x 41-bit instructions */
  47. if (shift >= 64) {
  48. m1 = mask << (shift - 64);
  49. v1 = val << (shift - 64);
  50. } else {
  51. m0 = mask << shift; m1 = mask >> (64 - shift);
  52. v0 = val << shift; v1 = val >> (64 - shift);
  53. b[0] = (b0 & ~m0) | (v0 & m0);
  54. }
  55. b[1] = (b1 & ~m1) | (v1 & m1);
  56. }
  57. void
  58. ia64_patch_imm64 (u64 insn_addr, u64 val)
  59. {
  60. /* The assembler may generate offset pointing to either slot 1
  61. or slot 2 for a long (2-slot) instruction, occupying slots 1
  62. and 2. */
  63. insn_addr &= -16UL;
  64. ia64_patch(insn_addr + 2,
  65. 0x01fffefe000UL, ( ((val & 0x8000000000000000UL) >> 27) /* bit 63 -> 36 */
  66. | ((val & 0x0000000000200000UL) << 0) /* bit 21 -> 21 */
  67. | ((val & 0x00000000001f0000UL) << 6) /* bit 16 -> 22 */
  68. | ((val & 0x000000000000ff80UL) << 20) /* bit 7 -> 27 */
  69. | ((val & 0x000000000000007fUL) << 13) /* bit 0 -> 13 */));
  70. ia64_patch(insn_addr + 1, 0x1ffffffffffUL, val >> 22);
  71. }
  72. void
  73. ia64_patch_imm60 (u64 insn_addr, u64 val)
  74. {
  75. /* The assembler may generate offset pointing to either slot 1
  76. or slot 2 for a long (2-slot) instruction, occupying slots 1
  77. and 2. */
  78. insn_addr &= -16UL;
  79. ia64_patch(insn_addr + 2,
  80. 0x011ffffe000UL, ( ((val & 0x0800000000000000UL) >> 23) /* bit 59 -> 36 */
  81. | ((val & 0x00000000000fffffUL) << 13) /* bit 0 -> 13 */));
  82. ia64_patch(insn_addr + 1, 0x1fffffffffcUL, val >> 18);
  83. }
  84. /*
  85. * We need sometimes to load the physical address of a kernel
  86. * object. Often we can convert the virtual address to physical
  87. * at execution time, but sometimes (either for performance reasons
  88. * or during error recovery) we cannot to this. Patch the marked
  89. * bundles to load the physical address.
  90. */
  91. void __init
  92. ia64_patch_vtop (unsigned long start, unsigned long end)
  93. {
  94. s32 *offp = (s32 *) start;
  95. u64 ip;
  96. while (offp < (s32 *) end) {
  97. ip = (u64) offp + *offp;
  98. /* replace virtual address with corresponding physical address: */
  99. ia64_patch_imm64(ip, ia64_tpa(get_imm64(ip)));
  100. ia64_fc((void *) ip);
  101. ++offp;
  102. }
  103. ia64_sync_i();
  104. ia64_srlz_i();
  105. }
  106. /*
  107. * Disable the RSE workaround by turning the conditional branch
  108. * that we tagged in each place the workaround was used into an
  109. * unconditional branch.
  110. */
  111. void __init
  112. ia64_patch_rse (unsigned long start, unsigned long end)
  113. {
  114. s32 *offp = (s32 *) start;
  115. u64 ip, *b;
  116. while (offp < (s32 *) end) {
  117. ip = (u64) offp + *offp;
  118. b = (u64 *)(ip & -16);
  119. b[1] &= ~0xf800000L;
  120. ia64_fc((void *) ip);
  121. ++offp;
  122. }
  123. ia64_sync_i();
  124. ia64_srlz_i();
  125. }
  126. void __init
  127. ia64_patch_mckinley_e9 (unsigned long start, unsigned long end)
  128. {
  129. static int first_time = 1;
  130. int need_workaround;
  131. s32 *offp = (s32 *) start;
  132. u64 *wp;
  133. need_workaround = (local_cpu_data->family == 0x1f && local_cpu_data->model == 0);
  134. if (first_time) {
  135. first_time = 0;
  136. if (need_workaround)
  137. printk(KERN_INFO "Leaving McKinley Errata 9 workaround enabled\n");
  138. }
  139. if (need_workaround)
  140. return;
  141. while (offp < (s32 *) end) {
  142. wp = (u64 *) ia64_imva((char *) offp + *offp);
  143. wp[0] = 0x0000000100000011UL; /* nop.m 0; nop.i 0; br.ret.sptk.many b6 */
  144. wp[1] = 0x0084006880000200UL;
  145. wp[2] = 0x0000000100000000UL; /* nop.m 0; nop.i 0; nop.i 0 */
  146. wp[3] = 0x0004000000000200UL;
  147. ia64_fc(wp); ia64_fc(wp + 2);
  148. ++offp;
  149. }
  150. ia64_sync_i();
  151. ia64_srlz_i();
  152. }
  153. static void __init
  154. patch_fsyscall_table (unsigned long start, unsigned long end)
  155. {
  156. extern unsigned long fsyscall_table[NR_syscalls];
  157. s32 *offp = (s32 *) start;
  158. u64 ip;
  159. while (offp < (s32 *) end) {
  160. ip = (u64) ia64_imva((char *) offp + *offp);
  161. ia64_patch_imm64(ip, (u64) fsyscall_table);
  162. ia64_fc((void *) ip);
  163. ++offp;
  164. }
  165. ia64_sync_i();
  166. ia64_srlz_i();
  167. }
  168. static void __init
  169. patch_brl_fsys_bubble_down (unsigned long start, unsigned long end)
  170. {
  171. extern char fsys_bubble_down[];
  172. s32 *offp = (s32 *) start;
  173. u64 ip;
  174. while (offp < (s32 *) end) {
  175. ip = (u64) offp + *offp;
  176. ia64_patch_imm60((u64) ia64_imva((void *) ip),
  177. (u64) (fsys_bubble_down - (ip & -16)) / 16);
  178. ia64_fc((void *) ip);
  179. ++offp;
  180. }
  181. ia64_sync_i();
  182. ia64_srlz_i();
  183. }
  184. void __init
  185. ia64_patch_gate (void)
  186. {
  187. # define START(name) ((unsigned long) __start_gate_##name##_patchlist)
  188. # define END(name) ((unsigned long)__end_gate_##name##_patchlist)
  189. patch_fsyscall_table(START(fsyscall), END(fsyscall));
  190. patch_brl_fsys_bubble_down(START(brl_fsys_bubble_down), END(brl_fsys_bubble_down));
  191. ia64_patch_vtop(START(vtop), END(vtop));
  192. ia64_patch_mckinley_e9(START(mckinley_e9), END(mckinley_e9));
  193. }
  194. void ia64_patch_phys_stack_reg(unsigned long val)
  195. {
  196. s32 * offp = (s32 *) __start___phys_stack_reg_patchlist;
  197. s32 * end = (s32 *) __end___phys_stack_reg_patchlist;
  198. u64 ip, mask, imm;
  199. /* see instruction format A4: adds r1 = imm13, r3 */
  200. mask = (0x3fUL << 27) | (0x7f << 13);
  201. imm = (((val >> 7) & 0x3f) << 27) | (val & 0x7f) << 13;
  202. while (offp < end) {
  203. ip = (u64) offp + *offp;
  204. ia64_patch(ip, mask, imm);
  205. ia64_fc((void *)ip);
  206. ++offp;
  207. }
  208. ia64_sync_i();
  209. ia64_srlz_i();
  210. }