2 * linux/arch/parisc/traps.c
4 * Copyright (C) 1991, 1992 Linus Torvalds
5 * Copyright (C) 1999, 2000 Philipp Rumpf <prumpf@tux.org>
9 * 'Traps.c' handles hardware traps and faults after we have saved some
13 #include <linux/config.h>
14 #include <linux/sched.h>
15 #include <linux/kernel.h>
16 #include <linux/string.h>
17 #include <linux/errno.h>
18 #include <linux/ptrace.h>
19 #include <linux/timer.h>
21 #include <linux/module.h>
22 #include <linux/smp.h>
23 #include <linux/smp_lock.h>
24 #include <linux/spinlock.h>
25 #include <linux/init.h>
26 #include <linux/interrupt.h>
27 #include <linux/console.h>
28 #include <linux/kallsyms.h>
30 #include <asm/assembly.h>
31 #include <asm/system.h>
32 #include <asm/uaccess.h>
35 #include <asm/traps.h>
36 #include <asm/unaligned.h>
37 #include <asm/atomic.h>
40 #include <asm/pdc_chassis.h>
41 #include <asm/unwind.h>
43 #include "../math-emu/math-emu.h" /* for handle_fpe() */
45 #define PRINT_USER_FAULTS /* (turn this on if you want user faults to be */
46 /* dumped to the console via printk) */
48 #if defined(CONFIG_SMP) || defined(CONFIG_DEBUG_SPINLOCK)
49 DEFINE_SPINLOCK(pa_dbit_lock);
52 int printbinary(char *buf, unsigned long x, int nbits)
54 unsigned long mask = 1UL << (nbits - 1);
56 *buf++ = (mask & x ? '1' : '0');
70 void show_regs(struct pt_regs *regs)
77 /* carlos says that gcc understands better memory in a struct,
78 * and it makes our life easier with fpregs -- T-Bone */
79 struct { u32 sw[2]; } s;
81 level = user_mode(regs) ? KERN_DEBUG : KERN_CRIT;
83 printk("%s\n", level); /* don't want to have that pretty register dump messed up */
85 printk("%s YZrvWESTHLNXBCVMcbcbcbcbOGFRQPDI\n", level);
86 printbinary(buf, regs->gr[0], 32);
87 printk("%sPSW: %s %s\n", level, buf, print_tainted());
89 for (i = 0; i < 32; i += 4) {
92 p += sprintf(p, "%sr%02d-%02d ", level, i, i + 3);
93 for (j = 0; j < 4; j++) {
94 p += sprintf(p, " " RFMT, (i+j) == 0 ? 0 : regs->gr[i + j]);
99 for (i = 0; i < 8; i += 4) {
102 p += sprintf(p, "%ssr%d-%d ", level, i, i + 3);
103 for (j = 0; j < 4; j++) {
104 p += sprintf(p, " " RFMT, regs->sr[i + j]);
109 /* FR are 64bit everywhere. Need to use asm to get the content
110 * of fpsr/fper1, and we assume that we won't have a FP Identify
111 * in our way, otherwise we're screwed.
112 * The fldd is used to restore the T-bit if there was one, as the
113 * store clears it anyway.
114 * BTW, PA2.0 book says "thou shall not use fstw on FPSR/FPERs". */
116 "fstd %%fr0,0(%1) \n\t"
117 "fldd 0(%1),%%fr0 \n\t"
118 : "=m" (s) : "r" (&s) : "%r0"
121 printk("%s\n", level);
122 printk("%s VZOUICununcqcqcqcqcqcrmunTDVZOUI\n", level);
123 printbinary(buf, s.sw[0], 32);
124 printk("%sFPSR: %s\n", level, buf);
125 printk("%sFPER1: %08x\n", level, s.sw[1]);
127 /* here we'll print fr0 again, tho it'll be meaningless */
128 for (i = 0; i < 32; i += 4) {
131 p += sprintf(p, "%sfr%02d-%02d ", level, i, i + 3);
132 for (j = 0; j < 4; j++)
133 p += sprintf(p, " %016llx", (i+j) == 0 ? 0 : regs->fr[i+j]);
139 printk("%s\n", level);
140 printk("%sIASQ: " RFMT " " RFMT " IAOQ: " RFMT " " RFMT "\n",
141 level, regs->iasq[0], regs->iasq[1], regs->iaoq[0], regs->iaoq[1]);
142 printk("%s IIR: %08lx ISR: " RFMT " IOR: " RFMT "\n",
143 level, regs->iir, regs->isr, regs->ior);
144 printk("%s CPU: %8d CR30: " RFMT " CR31: " RFMT "\n",
145 level, current_thread_info()->cpu, cr30, cr31);
146 printk("%s ORIG_R28: " RFMT "\n", level, regs->orig_r28);
148 print_symbol(" IAOQ[0]: %s\n", regs->iaoq[0]);
150 print_symbol(" IAOQ[1]: %s\n", regs->iaoq[1]);
152 print_symbol(" RP(r2): %s\n", regs->gr[2]);
156 void dump_stack(void)
158 show_stack(NULL, NULL);
161 EXPORT_SYMBOL(dump_stack);
163 static void do_show_stack(struct unwind_frame_info *info)
167 printk("Backtrace:\n");
169 if (unwind_once(info) < 0 || info->ip == 0)
172 if (__kernel_text_address(info->ip)) {
173 printk(" [<" RFMT ">] ", info->ip);
174 #ifdef CONFIG_KALLSYMS
175 print_symbol("%s\n", info->ip);
186 void show_stack(struct task_struct *task, unsigned long *s)
188 struct unwind_frame_info info;
195 asm volatile ("copy %%r30, %0" : "=r"(sp));
196 r = (struct pt_regs *)kmalloc(sizeof(struct pt_regs), GFP_KERNEL);
199 memset(r, 0, sizeof(struct pt_regs));
200 r->iaoq[0] = (unsigned long)&&HERE;
201 r->gr[2] = (unsigned long)__builtin_return_address(0);
203 unwind_frame_init(&info, current, r);
206 unwind_frame_init_from_blocked_task(&info, task);
209 do_show_stack(&info);
212 void die_if_kernel(char *str, struct pt_regs *regs, long err)
214 if (user_mode(regs)) {
218 printk(KERN_CRIT "%s (pid %d): %s (code %ld) at " RFMT "\n",
219 current->comm, current->pid, str, err, regs->iaoq[0]);
220 #ifdef PRINT_USER_FAULTS
221 /* XXX for debugging only */
227 oops_in_progress = 1;
229 /* Amuse the user in a SPARC fashion */
231 " _______________________________ \n"
232 " < Your System ate a SPARC! Gah! >\n"
233 " ------------------------------- \n"
235 " \\ (xx)\\_______\n"
240 /* unlock the pdc lock if necessary */
241 pdc_emergency_unlock();
243 /* maybe the kernel hasn't booted very far yet and hasn't been able
244 * to initialize the serial or STI console. In that case we should
245 * re-enable the pdc console, so that the user will be able to
246 * identify the problem. */
247 if (!console_drivers)
248 pdc_console_restart();
250 printk(KERN_CRIT "%s (pid %d): %s (code %ld)\n",
251 current->comm, current->pid, str, err);
254 /* Wot's wrong wif bein' racy? */
255 if (current->thread.flags & PARISC_KERNEL_DEATH) {
256 printk(KERN_CRIT "%s() recursion detected.\n", __FUNCTION__);
261 current->thread.flags |= PARISC_KERNEL_DEATH;
265 int syscall_ipi(int (*syscall) (struct pt_regs *), struct pt_regs *regs)
267 return syscall(regs);
270 /* gdb uses break 4,8 */
271 #define GDB_BREAK_INSN 0x10004
272 void handle_gdb_break(struct pt_regs *regs, int wot)
277 si.si_addr = (void __user *) (regs->iaoq[0] & ~3);
278 si.si_signo = SIGTRAP;
280 force_sig_info(SIGTRAP, &si, current);
283 void handle_break(unsigned iir, struct pt_regs *regs)
289 #ifdef PRINT_USER_FAULTS
290 printk(KERN_DEBUG "break 0,0: pid=%d command='%s'\n",
291 current->pid, current->comm);
293 die_if_kernel("Breakpoint", regs, 0);
294 #ifdef PRINT_USER_FAULTS
297 si.si_code = TRAP_BRKPT;
298 si.si_addr = (void __user *) (regs->iaoq[0] & ~3);
299 si.si_signo = SIGTRAP;
300 force_sig_info(SIGTRAP, &si, current);
304 die_if_kernel("Breakpoint", regs, 0);
305 handle_gdb_break(regs, TRAP_BRKPT);
309 #ifdef PRINT_USER_FAULTS
310 printk(KERN_DEBUG "break %#08x: pid=%d command='%s'\n",
311 iir, current->pid, current->comm);
314 si.si_signo = SIGTRAP;
315 si.si_code = TRAP_BRKPT;
316 si.si_addr = (void __user *) (regs->iaoq[0] & ~3);
317 force_sig_info(SIGTRAP, &si, current);
325 printk(KERN_CRIT "TOC call.\n");
329 static void default_trap(int code, struct pt_regs *regs)
331 printk(KERN_ERR "Trap %d on CPU %d\n", code, smp_processor_id());
335 void (*cpu_lpmc) (int code, struct pt_regs *regs) = default_trap;
338 void transfer_pim_to_trap_frame(struct pt_regs *regs)
341 extern unsigned int hpmc_pim_data[];
342 struct pdc_hpmc_pim_11 *pim_narrow;
343 struct pdc_hpmc_pim_20 *pim_wide;
345 if (boot_cpu_data.cpu_type >= pcxu) {
347 pim_wide = (struct pdc_hpmc_pim_20 *)hpmc_pim_data;
350 * Note: The following code will probably generate a
351 * bunch of truncation error warnings from the compiler.
352 * Could be handled with an ifdef, but perhaps there
356 regs->gr[0] = pim_wide->cr[22];
358 for (i = 1; i < 32; i++)
359 regs->gr[i] = pim_wide->gr[i];
361 for (i = 0; i < 32; i++)
362 regs->fr[i] = pim_wide->fr[i];
364 for (i = 0; i < 8; i++)
365 regs->sr[i] = pim_wide->sr[i];
367 regs->iasq[0] = pim_wide->cr[17];
368 regs->iasq[1] = pim_wide->iasq_back;
369 regs->iaoq[0] = pim_wide->cr[18];
370 regs->iaoq[1] = pim_wide->iaoq_back;
372 regs->sar = pim_wide->cr[11];
373 regs->iir = pim_wide->cr[19];
374 regs->isr = pim_wide->cr[20];
375 regs->ior = pim_wide->cr[21];
378 pim_narrow = (struct pdc_hpmc_pim_11 *)hpmc_pim_data;
380 regs->gr[0] = pim_narrow->cr[22];
382 for (i = 1; i < 32; i++)
383 regs->gr[i] = pim_narrow->gr[i];
385 for (i = 0; i < 32; i++)
386 regs->fr[i] = pim_narrow->fr[i];
388 for (i = 0; i < 8; i++)
389 regs->sr[i] = pim_narrow->sr[i];
391 regs->iasq[0] = pim_narrow->cr[17];
392 regs->iasq[1] = pim_narrow->iasq_back;
393 regs->iaoq[0] = pim_narrow->cr[18];
394 regs->iaoq[1] = pim_narrow->iaoq_back;
396 regs->sar = pim_narrow->cr[11];
397 regs->iir = pim_narrow->cr[19];
398 regs->isr = pim_narrow->cr[20];
399 regs->ior = pim_narrow->cr[21];
403 * The following fields only have meaning if we came through
404 * another path. So just zero them here.
414 * This routine is called as a last resort when everything else
415 * has gone clearly wrong. We get called for faults in kernel space,
418 void parisc_terminate(char *msg, struct pt_regs *regs, int code, unsigned long offset)
420 static DEFINE_SPINLOCK(terminate_lock);
422 oops_in_progress = 1;
426 spin_lock(&terminate_lock);
428 /* unlock the pdc lock if necessary */
429 pdc_emergency_unlock();
431 /* restart pdc console if necessary */
432 if (!console_drivers)
433 pdc_console_restart();
435 /* Not all paths will gutter the processor... */
439 transfer_pim_to_trap_frame(regs);
449 /* show_stack(NULL, (unsigned long *)regs->gr[30]); */
450 struct unwind_frame_info info;
451 unwind_frame_init(&info, current, regs);
452 do_show_stack(&info);
456 printk(KERN_CRIT "%s: Code=%d regs=%p (Addr=" RFMT ")\n",
457 msg, code, regs, offset);
460 spin_unlock(&terminate_lock);
462 /* put soft power button back under hardware control;
463 * if the user had pressed it once at any time, the
464 * system will shut down immediately right here. */
465 pdc_soft_power_button(0);
467 /* Call kernel panic() so reboot timeouts work properly
468 * FIXME: This function should be on the list of
469 * panic notifiers, and we should call panic
470 * directly from the location that we wish.
471 * e.g. We should not call panic from
472 * parisc_terminate, but rather the oter way around.
473 * This hack works, prints the panic message twice,
474 * and it enables reboot timers!
479 void handle_interruption(int code, struct pt_regs *regs)
481 unsigned long fault_address = 0;
482 unsigned long fault_space = 0;
486 pdc_console_restart(); /* switch back to pdc if HPMC */
491 * If the priority level is still user, and the
492 * faulting space is not equal to the active space
493 * then the user is attempting something in a space
494 * that does not belong to them. Kill the process.
496 * This is normally the situation when the user
497 * attempts to jump into the kernel space at the
498 * wrong offset, be it at the gateway page or a
501 * We cannot normally signal the process because it
502 * could *be* on the gateway page, and processes
503 * executing on the gateway page can't have signals
506 * We merely readjust the address into the users
507 * space, at a destination address of zero, and
508 * allow processing to continue.
510 if (((unsigned long)regs->iaoq[0] & 3) &&
511 ((unsigned long)regs->iasq[0] != (unsigned long)regs->sr[7])) {
512 /* Kill the user process later */
513 regs->iaoq[0] = 0 | 3;
514 regs->iaoq[1] = regs->iaoq[0] + 4;
515 regs->iasq[0] = regs->iasq[0] = regs->sr[7];
516 regs->gr[0] &= ~PSW_B;
521 printk(KERN_CRIT "Interruption # %d\n", code);
527 /* High-priority machine check (HPMC) */
529 /* set up a new led state on systems shipped with a LED State panel */
530 pdc_chassis_send_status(PDC_CHASSIS_DIRECT_HPMC);
532 parisc_terminate("High Priority Machine Check (HPMC)",
537 /* Power failure interrupt */
538 printk(KERN_CRIT "Power failure interrupt !\n");
542 /* Recovery counter trap */
543 regs->gr[0] &= ~PSW_R;
544 if (user_space(regs))
545 handle_gdb_break(regs, TRAP_TRACE);
546 /* else this must be the start of a syscall - just let it run */
550 /* Low-priority machine check */
551 pdc_chassis_send_status(PDC_CHASSIS_DIRECT_LPMC);
558 /* Instruction TLB miss fault/Instruction page fault */
559 fault_address = regs->iaoq[0];
560 fault_space = regs->iasq[0];
564 /* Illegal instruction trap */
565 die_if_kernel("Illegal instruction", regs, code);
566 si.si_code = ILL_ILLOPC;
570 /* Break instruction trap */
571 handle_break(regs->iir,regs);
575 /* Privileged operation trap */
576 die_if_kernel("Privileged operation", regs, code);
577 si.si_code = ILL_PRVOPC;
581 /* Privileged register trap */
582 if ((regs->iir & 0xffdfffe0) == 0x034008a0) {
584 /* This is a MFCTL cr26/cr27 to gr instruction.
585 * PCXS traps on this, so we need to emulate it.
588 if (regs->iir & 0x00200000)
589 regs->gr[regs->iir & 0x1f] = mfctl(27);
591 regs->gr[regs->iir & 0x1f] = mfctl(26);
593 regs->iaoq[0] = regs->iaoq[1];
595 regs->iasq[0] = regs->iasq[1];
599 die_if_kernel("Privileged register usage", regs, code);
600 si.si_code = ILL_PRVREG;
602 si.si_signo = SIGILL;
604 si.si_addr = (void __user *) regs->iaoq[0];
605 force_sig_info(SIGILL, &si, current);
609 /* Overflow Trap, let the userland signal handler do the cleanup */
610 si.si_signo = SIGFPE;
611 si.si_code = FPE_INTOVF;
612 si.si_addr = (void __user *) regs->iaoq[0];
613 force_sig_info(SIGFPE, &si, current);
618 The condition succees in an instruction which traps
621 si.si_signo = SIGFPE;
622 /* Set to zero, and let the userspace app figure it out from
623 the insn pointed to by si_addr */
625 si.si_addr = (void __user *) regs->iaoq[0];
626 force_sig_info(SIGFPE, &si, current);
629 /* The kernel doesn't want to handle condition codes */
633 /* Assist Exception Trap, i.e. floating point exception. */
634 die_if_kernel("Floating point exception", regs, 0); /* quiet */
639 /* Data TLB miss fault/Data page fault */
642 /* Non-access instruction TLB miss fault */
643 /* The instruction TLB entry needed for the target address of the FIC
644 is absent, and hardware can't find it, so we get to cleanup */
647 /* Non-access data TLB miss fault/Non-access data page fault */
649 Still need to add slow path emulation code here!
650 If the insn used a non-shadow register, then the tlb
651 handlers could not have their side-effect (e.g. probe
652 writing to a target register) emulated since rfir would
653 erase the changes to said register. Instead we have to
654 setup everything, call this function we are in, and emulate
655 by hand. Technically we need to emulate:
656 fdc,fdce,pdc,"fic,4f",prober,probeir,probew, probeiw
658 fault_address = regs->ior;
659 fault_space = regs->isr;
663 /* PCXS only -- later cpu's split this into types 26,27 & 28 */
664 /* Check for unaligned access */
665 if (check_unaligned(regs)) {
666 handle_unaligned(regs);
671 /* PCXL: Data memory access rights trap */
672 fault_address = regs->ior;
673 fault_space = regs->isr;
677 /* Data memory break trap */
678 regs->gr[0] |= PSW_X; /* So we can single-step over the trap */
681 /* Page reference trap */
682 handle_gdb_break(regs, TRAP_HWBKPT);
686 /* Taken branch trap */
687 regs->gr[0] &= ~PSW_T;
688 if (user_space(regs))
689 handle_gdb_break(regs, TRAP_BRANCH);
690 /* else this must be the start of a syscall - just let it
696 /* Instruction access rights */
697 /* PCXL: Instruction memory protection trap */
700 * This could be caused by either: 1) a process attempting
701 * to execute within a vma that does not have execute
702 * permission, or 2) an access rights violation caused by a
703 * flush only translation set up by ptep_get_and_clear().
704 * So we check the vma permissions to differentiate the two.
705 * If the vma indicates we have execute permission, then
706 * the cause is the latter one. In this case, we need to
707 * call do_page_fault() to fix the problem.
710 if (user_mode(regs)) {
711 struct vm_area_struct *vma;
713 down_read(¤t->mm->mmap_sem);
714 vma = find_vma(current->mm,regs->iaoq[0]);
715 if (vma && (regs->iaoq[0] >= vma->vm_start)
716 && (vma->vm_flags & VM_EXEC)) {
718 fault_address = regs->iaoq[0];
719 fault_space = regs->iasq[0];
721 up_read(¤t->mm->mmap_sem);
722 break; /* call do_page_fault() */
724 up_read(¤t->mm->mmap_sem);
728 /* Data memory protection ID trap */
729 die_if_kernel("Protection id trap", regs, code);
730 si.si_code = SEGV_MAPERR;
731 si.si_signo = SIGSEGV;
734 si.si_addr = (void __user *) regs->iaoq[0];
736 si.si_addr = (void __user *) regs->ior;
737 force_sig_info(SIGSEGV, &si, current);
741 /* Unaligned data reference trap */
742 handle_unaligned(regs);
746 if (user_mode(regs)) {
747 #ifdef PRINT_USER_FAULTS
748 printk(KERN_DEBUG "\nhandle_interruption() pid=%d command='%s'\n",
749 current->pid, current->comm);
752 /* SIGBUS, for lack of a better one. */
753 si.si_signo = SIGBUS;
754 si.si_code = BUS_OBJERR;
756 si.si_addr = (void __user *) regs->ior;
757 force_sig_info(SIGBUS, &si, current);
760 pdc_chassis_send_status(PDC_CHASSIS_DIRECT_PANIC);
762 parisc_terminate("Unexpected interruption", regs, code, 0);
766 if (user_mode(regs)) {
767 if ((fault_space >> SPACEID_SHIFT) != (regs->sr[7] >> SPACEID_SHIFT)) {
768 #ifdef PRINT_USER_FAULTS
769 if (fault_space == 0)
770 printk(KERN_DEBUG "User Fault on Kernel Space ");
772 printk(KERN_DEBUG "User Fault (long pointer) (fault %d) ",
774 printk("pid=%d command='%s'\n", current->pid, current->comm);
777 si.si_signo = SIGSEGV;
779 si.si_code = SEGV_MAPERR;
780 si.si_addr = (void __user *) regs->ior;
781 force_sig_info(SIGSEGV, &si, current);
788 * The kernel should never fault on its own address space.
791 if (fault_space == 0)
793 pdc_chassis_send_status(PDC_CHASSIS_DIRECT_PANIC);
794 parisc_terminate("Kernel Fault", regs, code, fault_address);
799 do_page_fault(regs, code, fault_address);
803 int __init check_ivt(void *iva)
810 extern void os_hpmc(void);
811 extern void os_hpmc_end(void);
813 if (strcmp((char *)iva, "cows can fly"))
818 for (i = 0; i < 8; i++)
821 /* Compute Checksum for HPMC handler */
823 length = (u32)((unsigned long)os_hpmc_end - (unsigned long)os_hpmc);
826 hpmcp = (u32 *)os_hpmc;
828 for (i=0; i<length/4; i++)
840 extern const void fault_vector_11;
842 extern const void fault_vector_20;
844 void __init trap_init(void)
848 if (boot_cpu_data.cpu_type >= pcxu)
849 iva = (void *) &fault_vector_20;
852 panic("Can't boot 64-bit OS on PA1.1 processor!");
854 iva = (void *) &fault_vector_11;
858 panic("IVT invalid");