xref: /openbmc/linux/arch/arm/kernel/entry-armv.S (revision 63dc02bd)
1/*
2 *  linux/arch/arm/kernel/entry-armv.S
3 *
4 *  Copyright (C) 1996,1997,1998 Russell King.
5 *  ARM700 fix by Matthew Godbolt (linux-user@willothewisp.demon.co.uk)
6 *  nommu support by Hyok S. Choi (hyok.choi@samsung.com)
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License version 2 as
10 * published by the Free Software Foundation.
11 *
12 *  Low-level vector interface routines
13 *
14 *  Note:  there is a StrongARM bug in the STMIA rn, {regs}^ instruction
15 *  that causes it to save wrong values...  Be aware!
16 */
17
18#include <asm/assembler.h>
19#include <asm/memory.h>
20#include <asm/glue-df.h>
21#include <asm/glue-pf.h>
22#include <asm/vfpmacros.h>
23#ifndef CONFIG_MULTI_IRQ_HANDLER
24#include <mach/entry-macro.S>
25#endif
26#include <asm/thread_notify.h>
27#include <asm/unwind.h>
28#include <asm/unistd.h>
29#include <asm/tls.h>
30#include <asm/system_info.h>
31
32#include "entry-header.S"
33#include <asm/entry-macro-multi.S>
34
35/*
36 * Interrupt handling.
37 */
38	.macro	irq_handler
39#ifdef CONFIG_MULTI_IRQ_HANDLER
40	ldr	r1, =handle_arch_irq
41	mov	r0, sp
42	adr	lr, BSYM(9997f)
43	ldr	pc, [r1]
44#else
45	arch_irq_handler_default
46#endif
479997:
48	.endm
49
50	.macro	pabt_helper
51	@ PABORT handler takes pt_regs in r2, fault address in r4 and psr in r5
52#ifdef MULTI_PABORT
53	ldr	ip, .LCprocfns
54	mov	lr, pc
55	ldr	pc, [ip, #PROCESSOR_PABT_FUNC]
56#else
57	bl	CPU_PABORT_HANDLER
58#endif
59	.endm
60
61	.macro	dabt_helper
62
63	@
64	@ Call the processor-specific abort handler:
65	@
66	@  r2 - pt_regs
67	@  r4 - aborted context pc
68	@  r5 - aborted context psr
69	@
70	@ The abort handler must return the aborted address in r0, and
71	@ the fault status register in r1.  r9 must be preserved.
72	@
73#ifdef MULTI_DABORT
74	ldr	ip, .LCprocfns
75	mov	lr, pc
76	ldr	pc, [ip, #PROCESSOR_DABT_FUNC]
77#else
78	bl	CPU_DABORT_HANDLER
79#endif
80	.endm
81
82#ifdef CONFIG_KPROBES
83	.section	.kprobes.text,"ax",%progbits
84#else
85	.text
86#endif
87
88/*
89 * Invalid mode handlers
90 */
91	.macro	inv_entry, reason
92	sub	sp, sp, #S_FRAME_SIZE
93 ARM(	stmib	sp, {r1 - lr}		)
94 THUMB(	stmia	sp, {r0 - r12}		)
95 THUMB(	str	sp, [sp, #S_SP]		)
96 THUMB(	str	lr, [sp, #S_LR]		)
97	mov	r1, #\reason
98	.endm
99
100__pabt_invalid:
101	inv_entry BAD_PREFETCH
102	b	common_invalid
103ENDPROC(__pabt_invalid)
104
105__dabt_invalid:
106	inv_entry BAD_DATA
107	b	common_invalid
108ENDPROC(__dabt_invalid)
109
110__irq_invalid:
111	inv_entry BAD_IRQ
112	b	common_invalid
113ENDPROC(__irq_invalid)
114
115__und_invalid:
116	inv_entry BAD_UNDEFINSTR
117
118	@
119	@ XXX fall through to common_invalid
120	@
121
122@
123@ common_invalid - generic code for failed exception (re-entrant version of handlers)
124@
125common_invalid:
126	zero_fp
127
128	ldmia	r0, {r4 - r6}
129	add	r0, sp, #S_PC		@ here for interlock avoidance
130	mov	r7, #-1			@  ""   ""    ""        ""
131	str	r4, [sp]		@ save preserved r0
132	stmia	r0, {r5 - r7}		@ lr_<exception>,
133					@ cpsr_<exception>, "old_r0"
134
135	mov	r0, sp
136	b	bad_mode
137ENDPROC(__und_invalid)
138
139/*
140 * SVC mode handlers
141 */
142
143#if defined(CONFIG_AEABI) && (__LINUX_ARM_ARCH__ >= 5)
144#define SPFIX(code...) code
145#else
146#define SPFIX(code...)
147#endif
148
149	.macro	svc_entry, stack_hole=0
150 UNWIND(.fnstart		)
151 UNWIND(.save {r0 - pc}		)
152	sub	sp, sp, #(S_FRAME_SIZE + \stack_hole - 4)
153#ifdef CONFIG_THUMB2_KERNEL
154 SPFIX(	str	r0, [sp]	)	@ temporarily saved
155 SPFIX(	mov	r0, sp		)
156 SPFIX(	tst	r0, #4		)	@ test original stack alignment
157 SPFIX(	ldr	r0, [sp]	)	@ restored
158#else
159 SPFIX(	tst	sp, #4		)
160#endif
161 SPFIX(	subeq	sp, sp, #4	)
162	stmia	sp, {r1 - r12}
163
164	ldmia	r0, {r3 - r5}
165	add	r7, sp, #S_SP - 4	@ here for interlock avoidance
166	mov	r6, #-1			@  ""  ""      ""       ""
167	add	r2, sp, #(S_FRAME_SIZE + \stack_hole - 4)
168 SPFIX(	addeq	r2, r2, #4	)
169	str	r3, [sp, #-4]!		@ save the "real" r0 copied
170					@ from the exception stack
171
172	mov	r3, lr
173
174	@
175	@ We are now ready to fill in the remaining blanks on the stack:
176	@
177	@  r2 - sp_svc
178	@  r3 - lr_svc
179	@  r4 - lr_<exception>, already fixed up for correct return/restart
180	@  r5 - spsr_<exception>
181	@  r6 - orig_r0 (see pt_regs definition in ptrace.h)
182	@
183	stmia	r7, {r2 - r6}
184
185#ifdef CONFIG_TRACE_IRQFLAGS
186	bl	trace_hardirqs_off
187#endif
188	.endm
189
190	.align	5
191__dabt_svc:
192	svc_entry
193	mov	r2, sp
194	dabt_helper
195
196	@
197	@ IRQs off again before pulling preserved data off the stack
198	@
199	disable_irq_notrace
200
201#ifdef CONFIG_TRACE_IRQFLAGS
202	tst	r5, #PSR_I_BIT
203	bleq	trace_hardirqs_on
204	tst	r5, #PSR_I_BIT
205	blne	trace_hardirqs_off
206#endif
207	svc_exit r5				@ return from exception
208 UNWIND(.fnend		)
209ENDPROC(__dabt_svc)
210
211	.align	5
212__irq_svc:
213	svc_entry
214	irq_handler
215
216#ifdef CONFIG_PREEMPT
217	get_thread_info tsk
218	ldr	r8, [tsk, #TI_PREEMPT]		@ get preempt count
219	ldr	r0, [tsk, #TI_FLAGS]		@ get flags
220	teq	r8, #0				@ if preempt count != 0
221	movne	r0, #0				@ force flags to 0
222	tst	r0, #_TIF_NEED_RESCHED
223	blne	svc_preempt
224#endif
225
226#ifdef CONFIG_TRACE_IRQFLAGS
227	@ The parent context IRQs must have been enabled to get here in
228	@ the first place, so there's no point checking the PSR I bit.
229	bl	trace_hardirqs_on
230#endif
231	svc_exit r5				@ return from exception
232 UNWIND(.fnend		)
233ENDPROC(__irq_svc)
234
235	.ltorg
236
237#ifdef CONFIG_PREEMPT
238svc_preempt:
239	mov	r8, lr
2401:	bl	preempt_schedule_irq		@ irq en/disable is done inside
241	ldr	r0, [tsk, #TI_FLAGS]		@ get new tasks TI_FLAGS
242	tst	r0, #_TIF_NEED_RESCHED
243	moveq	pc, r8				@ go again
244	b	1b
245#endif
246
247	.align	5
248__und_svc:
249#ifdef CONFIG_KPROBES
250	@ If a kprobe is about to simulate a "stmdb sp..." instruction,
251	@ it obviously needs free stack space which then will belong to
252	@ the saved context.
253	svc_entry 64
254#else
255	svc_entry
256#endif
257	@
258	@ call emulation code, which returns using r9 if it has emulated
259	@ the instruction, or the more conventional lr if we are to treat
260	@ this as a real undefined instruction
261	@
262	@  r0 - instruction
263	@
264#ifndef	CONFIG_THUMB2_KERNEL
265	ldr	r0, [r4, #-4]
266#else
267	ldrh	r0, [r4, #-2]			@ Thumb instruction at LR - 2
268	cmp	r0, #0xe800			@ 32-bit instruction if xx >= 0
269	ldrhhs	r9, [r4]			@ bottom 16 bits
270	orrhs	r0, r9, r0, lsl #16
271#endif
272	adr	r9, BSYM(1f)
273	mov	r2, r4
274	bl	call_fpe
275
276	mov	r0, sp				@ struct pt_regs *regs
277	bl	do_undefinstr
278
279	@
280	@ IRQs off again before pulling preserved data off the stack
281	@
2821:	disable_irq_notrace
283
284	@
285	@ restore SPSR and restart the instruction
286	@
287	ldr	r5, [sp, #S_PSR]		@ Get SVC cpsr
288#ifdef CONFIG_TRACE_IRQFLAGS
289	tst	r5, #PSR_I_BIT
290	bleq	trace_hardirqs_on
291	tst	r5, #PSR_I_BIT
292	blne	trace_hardirqs_off
293#endif
294	svc_exit r5				@ return from exception
295 UNWIND(.fnend		)
296ENDPROC(__und_svc)
297
298	.align	5
299__pabt_svc:
300	svc_entry
301	mov	r2, sp				@ regs
302	pabt_helper
303
304	@
305	@ IRQs off again before pulling preserved data off the stack
306	@
307	disable_irq_notrace
308
309#ifdef CONFIG_TRACE_IRQFLAGS
310	tst	r5, #PSR_I_BIT
311	bleq	trace_hardirqs_on
312	tst	r5, #PSR_I_BIT
313	blne	trace_hardirqs_off
314#endif
315	svc_exit r5				@ return from exception
316 UNWIND(.fnend		)
317ENDPROC(__pabt_svc)
318
319	.align	5
320.LCcralign:
321	.word	cr_alignment
322#ifdef MULTI_DABORT
323.LCprocfns:
324	.word	processor
325#endif
326.LCfp:
327	.word	fp_enter
328
329/*
330 * User mode handlers
331 *
332 * EABI note: sp_svc is always 64-bit aligned here, so should S_FRAME_SIZE
333 */
334
335#if defined(CONFIG_AEABI) && (__LINUX_ARM_ARCH__ >= 5) && (S_FRAME_SIZE & 7)
336#error "sizeof(struct pt_regs) must be a multiple of 8"
337#endif
338
339	.macro	usr_entry
340 UNWIND(.fnstart	)
341 UNWIND(.cantunwind	)	@ don't unwind the user space
342	sub	sp, sp, #S_FRAME_SIZE
343 ARM(	stmib	sp, {r1 - r12}	)
344 THUMB(	stmia	sp, {r0 - r12}	)
345
346	ldmia	r0, {r3 - r5}
347	add	r0, sp, #S_PC		@ here for interlock avoidance
348	mov	r6, #-1			@  ""  ""     ""        ""
349
350	str	r3, [sp]		@ save the "real" r0 copied
351					@ from the exception stack
352
353	@
354	@ We are now ready to fill in the remaining blanks on the stack:
355	@
356	@  r4 - lr_<exception>, already fixed up for correct return/restart
357	@  r5 - spsr_<exception>
358	@  r6 - orig_r0 (see pt_regs definition in ptrace.h)
359	@
360	@ Also, separately save sp_usr and lr_usr
361	@
362	stmia	r0, {r4 - r6}
363 ARM(	stmdb	r0, {sp, lr}^			)
364 THUMB(	store_user_sp_lr r0, r1, S_SP - S_PC	)
365
366	@
367	@ Enable the alignment trap while in kernel mode
368	@
369	alignment_trap r0
370
371	@
372	@ Clear FP to mark the first stack frame
373	@
374	zero_fp
375
376#ifdef CONFIG_IRQSOFF_TRACER
377	bl	trace_hardirqs_off
378#endif
379	.endm
380
381	.macro	kuser_cmpxchg_check
382#if !defined(CONFIG_CPU_32v6K) && !defined(CONFIG_NEEDS_SYSCALL_FOR_CMPXCHG)
383#ifndef CONFIG_MMU
384#warning "NPTL on non MMU needs fixing"
385#else
386	@ Make sure our user space atomic helper is restarted
387	@ if it was interrupted in a critical region.  Here we
388	@ perform a quick test inline since it should be false
389	@ 99.9999% of the time.  The rest is done out of line.
390	cmp	r4, #TASK_SIZE
391	blhs	kuser_cmpxchg64_fixup
392#endif
393#endif
394	.endm
395
396	.align	5
397__dabt_usr:
398	usr_entry
399	kuser_cmpxchg_check
400	mov	r2, sp
401	dabt_helper
402	b	ret_from_exception
403 UNWIND(.fnend		)
404ENDPROC(__dabt_usr)
405
406	.align	5
407__irq_usr:
408	usr_entry
409	kuser_cmpxchg_check
410	irq_handler
411	get_thread_info tsk
412	mov	why, #0
413	b	ret_to_user_from_irq
414 UNWIND(.fnend		)
415ENDPROC(__irq_usr)
416
417	.ltorg
418
419	.align	5
420__und_usr:
421	usr_entry
422
423	mov	r2, r4
424	mov	r3, r5
425
426	@
427	@ fall through to the emulation code, which returns using r9 if
428	@ it has emulated the instruction, or the more conventional lr
429	@ if we are to treat this as a real undefined instruction
430	@
431	@  r0 - instruction
432	@
433	adr	r9, BSYM(ret_from_exception)
434	adr	lr, BSYM(__und_usr_unknown)
435	tst	r3, #PSR_T_BIT			@ Thumb mode?
436	itet	eq				@ explicit IT needed for the 1f label
437	subeq	r4, r2, #4			@ ARM instr at LR - 4
438	subne	r4, r2, #2			@ Thumb instr at LR - 2
4391:	ldreqt	r0, [r4]
440#ifdef CONFIG_CPU_ENDIAN_BE8
441	reveq	r0, r0				@ little endian instruction
442#endif
443	beq	call_fpe
444	@ Thumb instruction
445#if CONFIG_ARM_THUMB && __LINUX_ARM_ARCH__ >= 6 && CONFIG_CPU_V7
446/*
447 * Thumb-2 instruction handling.  Note that because pre-v6 and >= v6 platforms
448 * can never be supported in a single kernel, this code is not applicable at
449 * all when __LINUX_ARM_ARCH__ < 6.  This allows simplifying assumptions to be
450 * made about .arch directives.
451 */
452#if __LINUX_ARM_ARCH__ < 7
453/* If the target CPU may not be Thumb-2-capable, a run-time check is needed: */
454#define NEED_CPU_ARCHITECTURE
455	ldr	r5, .LCcpu_architecture
456	ldr	r5, [r5]
457	cmp	r5, #CPU_ARCH_ARMv7
458	blo	__und_usr_unknown
459/*
460 * The following code won't get run unless the running CPU really is v7, so
461 * coding round the lack of ldrht on older arches is pointless.  Temporarily
462 * override the assembler target arch with the minimum required instead:
463 */
464	.arch	armv6t2
465#endif
4662:
467 ARM(	ldrht	r5, [r4], #2	)
468 THUMB(	ldrht	r5, [r4]	)
469 THUMB(	add	r4, r4, #2	)
470	cmp	r5, #0xe800			@ 32bit instruction if xx != 0
471	blo	__und_usr_unknown
4723:	ldrht	r0, [r4]
473	add	r2, r2, #2			@ r2 is PC + 2, make it PC + 4
474	orr	r0, r0, r5, lsl #16
475
476#if __LINUX_ARM_ARCH__ < 7
477/* If the target arch was overridden, change it back: */
478#ifdef CONFIG_CPU_32v6K
479	.arch	armv6k
480#else
481	.arch	armv6
482#endif
483#endif /* __LINUX_ARM_ARCH__ < 7 */
484#else /* !(CONFIG_ARM_THUMB && __LINUX_ARM_ARCH__ >= 6 && CONFIG_CPU_V7) */
485	b	__und_usr_unknown
486#endif
487 UNWIND(.fnend		)
488ENDPROC(__und_usr)
489
490	@
491	@ fallthrough to call_fpe
492	@
493
494/*
495 * The out of line fixup for the ldrt above.
496 */
497	.pushsection .fixup, "ax"
4984:	mov	pc, r9
499	.popsection
500	.pushsection __ex_table,"a"
501	.long	1b, 4b
502#if CONFIG_ARM_THUMB && __LINUX_ARM_ARCH__ >= 6 && CONFIG_CPU_V7
503	.long	2b, 4b
504	.long	3b, 4b
505#endif
506	.popsection
507
508/*
509 * Check whether the instruction is a co-processor instruction.
510 * If yes, we need to call the relevant co-processor handler.
511 *
512 * Note that we don't do a full check here for the co-processor
513 * instructions; all instructions with bit 27 set are well
514 * defined.  The only instructions that should fault are the
515 * co-processor instructions.  However, we have to watch out
516 * for the ARM6/ARM7 SWI bug.
517 *
518 * NEON is a special case that has to be handled here. Not all
519 * NEON instructions are co-processor instructions, so we have
520 * to make a special case of checking for them. Plus, there's
521 * five groups of them, so we have a table of mask/opcode pairs
522 * to check against, and if any match then we branch off into the
523 * NEON handler code.
524 *
525 * Emulators may wish to make use of the following registers:
526 *  r0  = instruction opcode.
527 *  r2  = PC+4
528 *  r9  = normal "successful" return address
529 *  r10 = this threads thread_info structure.
530 *  lr  = unrecognised instruction return address
531 */
532	@
533	@ Fall-through from Thumb-2 __und_usr
534	@
535#ifdef CONFIG_NEON
536	adr	r6, .LCneon_thumb_opcodes
537	b	2f
538#endif
539call_fpe:
540#ifdef CONFIG_NEON
541	adr	r6, .LCneon_arm_opcodes
5422:
543	ldr	r7, [r6], #4			@ mask value
544	cmp	r7, #0				@ end mask?
545	beq	1f
546	and	r8, r0, r7
547	ldr	r7, [r6], #4			@ opcode bits matching in mask
548	cmp	r8, r7				@ NEON instruction?
549	bne	2b
550	get_thread_info r10
551	mov	r7, #1
552	strb	r7, [r10, #TI_USED_CP + 10]	@ mark CP#10 as used
553	strb	r7, [r10, #TI_USED_CP + 11]	@ mark CP#11 as used
554	b	do_vfp				@ let VFP handler handle this
5551:
556#endif
557	tst	r0, #0x08000000			@ only CDP/CPRT/LDC/STC have bit 27
558	tstne	r0, #0x04000000			@ bit 26 set on both ARM and Thumb-2
559#if defined(CONFIG_CPU_ARM610) || defined(CONFIG_CPU_ARM710)
560	and	r8, r0, #0x0f000000		@ mask out op-code bits
561	teqne	r8, #0x0f000000			@ SWI (ARM6/7 bug)?
562#endif
563	moveq	pc, lr
564	get_thread_info r10			@ get current thread
565	and	r8, r0, #0x00000f00		@ mask out CP number
566 THUMB(	lsr	r8, r8, #8		)
567	mov	r7, #1
568	add	r6, r10, #TI_USED_CP
569 ARM(	strb	r7, [r6, r8, lsr #8]	)	@ set appropriate used_cp[]
570 THUMB(	strb	r7, [r6, r8]		)	@ set appropriate used_cp[]
571#ifdef CONFIG_IWMMXT
572	@ Test if we need to give access to iWMMXt coprocessors
573	ldr	r5, [r10, #TI_FLAGS]
574	rsbs	r7, r8, #(1 << 8)		@ CP 0 or 1 only
575	movcss	r7, r5, lsr #(TIF_USING_IWMMXT + 1)
576	bcs	iwmmxt_task_enable
577#endif
578 ARM(	add	pc, pc, r8, lsr #6	)
579 THUMB(	lsl	r8, r8, #2		)
580 THUMB(	add	pc, r8			)
581	nop
582
583	movw_pc	lr				@ CP#0
584	W(b)	do_fpe				@ CP#1 (FPE)
585	W(b)	do_fpe				@ CP#2 (FPE)
586	movw_pc	lr				@ CP#3
587#ifdef CONFIG_CRUNCH
588	b	crunch_task_enable		@ CP#4 (MaverickCrunch)
589	b	crunch_task_enable		@ CP#5 (MaverickCrunch)
590	b	crunch_task_enable		@ CP#6 (MaverickCrunch)
591#else
592	movw_pc	lr				@ CP#4
593	movw_pc	lr				@ CP#5
594	movw_pc	lr				@ CP#6
595#endif
596	movw_pc	lr				@ CP#7
597	movw_pc	lr				@ CP#8
598	movw_pc	lr				@ CP#9
599#ifdef CONFIG_VFP
600	W(b)	do_vfp				@ CP#10 (VFP)
601	W(b)	do_vfp				@ CP#11 (VFP)
602#else
603	movw_pc	lr				@ CP#10 (VFP)
604	movw_pc	lr				@ CP#11 (VFP)
605#endif
606	movw_pc	lr				@ CP#12
607	movw_pc	lr				@ CP#13
608	movw_pc	lr				@ CP#14 (Debug)
609	movw_pc	lr				@ CP#15 (Control)
610
611#ifdef NEED_CPU_ARCHITECTURE
612	.align	2
613.LCcpu_architecture:
614	.word	__cpu_architecture
615#endif
616
617#ifdef CONFIG_NEON
618	.align	6
619
620.LCneon_arm_opcodes:
621	.word	0xfe000000			@ mask
622	.word	0xf2000000			@ opcode
623
624	.word	0xff100000			@ mask
625	.word	0xf4000000			@ opcode
626
627	.word	0x00000000			@ mask
628	.word	0x00000000			@ opcode
629
630.LCneon_thumb_opcodes:
631	.word	0xef000000			@ mask
632	.word	0xef000000			@ opcode
633
634	.word	0xff100000			@ mask
635	.word	0xf9000000			@ opcode
636
637	.word	0x00000000			@ mask
638	.word	0x00000000			@ opcode
639#endif
640
641do_fpe:
642	enable_irq
643	ldr	r4, .LCfp
644	add	r10, r10, #TI_FPSTATE		@ r10 = workspace
645	ldr	pc, [r4]			@ Call FP module USR entry point
646
647/*
648 * The FP module is called with these registers set:
649 *  r0  = instruction
650 *  r2  = PC+4
651 *  r9  = normal "successful" return address
652 *  r10 = FP workspace
653 *  lr  = unrecognised FP instruction return address
654 */
655
656	.pushsection .data
657ENTRY(fp_enter)
658	.word	no_fp
659	.popsection
660
661ENTRY(no_fp)
662	mov	pc, lr
663ENDPROC(no_fp)
664
665__und_usr_unknown:
666	enable_irq
667	mov	r0, sp
668	adr	lr, BSYM(ret_from_exception)
669	b	do_undefinstr
670ENDPROC(__und_usr_unknown)
671
672	.align	5
673__pabt_usr:
674	usr_entry
675	mov	r2, sp				@ regs
676	pabt_helper
677 UNWIND(.fnend		)
678	/* fall through */
679/*
680 * This is the return code to user mode for abort handlers
681 */
682ENTRY(ret_from_exception)
683 UNWIND(.fnstart	)
684 UNWIND(.cantunwind	)
685	get_thread_info tsk
686	mov	why, #0
687	b	ret_to_user
688 UNWIND(.fnend		)
689ENDPROC(__pabt_usr)
690ENDPROC(ret_from_exception)
691
692/*
693 * Register switch for ARMv3 and ARMv4 processors
694 * r0 = previous task_struct, r1 = previous thread_info, r2 = next thread_info
695 * previous and next are guaranteed not to be the same.
696 */
697ENTRY(__switch_to)
698 UNWIND(.fnstart	)
699 UNWIND(.cantunwind	)
700	add	ip, r1, #TI_CPU_SAVE
701	ldr	r3, [r2, #TI_TP_VALUE]
702 ARM(	stmia	ip!, {r4 - sl, fp, sp, lr} )	@ Store most regs on stack
703 THUMB(	stmia	ip!, {r4 - sl, fp}	   )	@ Store most regs on stack
704 THUMB(	str	sp, [ip], #4		   )
705 THUMB(	str	lr, [ip], #4		   )
706#ifdef CONFIG_CPU_USE_DOMAINS
707	ldr	r6, [r2, #TI_CPU_DOMAIN]
708#endif
709	set_tls	r3, r4, r5
710#if defined(CONFIG_CC_STACKPROTECTOR) && !defined(CONFIG_SMP)
711	ldr	r7, [r2, #TI_TASK]
712	ldr	r8, =__stack_chk_guard
713	ldr	r7, [r7, #TSK_STACK_CANARY]
714#endif
715#ifdef CONFIG_CPU_USE_DOMAINS
716	mcr	p15, 0, r6, c3, c0, 0		@ Set domain register
717#endif
718	mov	r5, r0
719	add	r4, r2, #TI_CPU_SAVE
720	ldr	r0, =thread_notify_head
721	mov	r1, #THREAD_NOTIFY_SWITCH
722	bl	atomic_notifier_call_chain
723#if defined(CONFIG_CC_STACKPROTECTOR) && !defined(CONFIG_SMP)
724	str	r7, [r8]
725#endif
726 THUMB(	mov	ip, r4			   )
727	mov	r0, r5
728 ARM(	ldmia	r4, {r4 - sl, fp, sp, pc}  )	@ Load all regs saved previously
729 THUMB(	ldmia	ip!, {r4 - sl, fp}	   )	@ Load all regs saved previously
730 THUMB(	ldr	sp, [ip], #4		   )
731 THUMB(	ldr	pc, [ip]		   )
732 UNWIND(.fnend		)
733ENDPROC(__switch_to)
734
735	__INIT
736
737/*
738 * User helpers.
739 *
740 * Each segment is 32-byte aligned and will be moved to the top of the high
741 * vector page.  New segments (if ever needed) must be added in front of
742 * existing ones.  This mechanism should be used only for things that are
743 * really small and justified, and not be abused freely.
744 *
745 * See Documentation/arm/kernel_user_helpers.txt for formal definitions.
746 */
747 THUMB(	.arm	)
748
749	.macro	usr_ret, reg
750#ifdef CONFIG_ARM_THUMB
751	bx	\reg
752#else
753	mov	pc, \reg
754#endif
755	.endm
756
757	.align	5
758	.globl	__kuser_helper_start
759__kuser_helper_start:
760
761/*
762 * Due to the length of some sequences, __kuser_cmpxchg64 spans 2 regular
763 * kuser "slots", therefore 0xffff0f80 is not used as a valid entry point.
764 */
765
766__kuser_cmpxchg64:				@ 0xffff0f60
767
768#if defined(CONFIG_NEEDS_SYSCALL_FOR_CMPXCHG)
769
770	/*
771	 * Poor you.  No fast solution possible...
772	 * The kernel itself must perform the operation.
773	 * A special ghost syscall is used for that (see traps.c).
774	 */
775	stmfd	sp!, {r7, lr}
776	ldr	r7, 1f			@ it's 20 bits
777	swi	__ARM_NR_cmpxchg64
778	ldmfd	sp!, {r7, pc}
7791:	.word	__ARM_NR_cmpxchg64
780
781#elif defined(CONFIG_CPU_32v6K)
782
783	stmfd	sp!, {r4, r5, r6, r7}
784	ldrd	r4, r5, [r0]			@ load old val
785	ldrd	r6, r7, [r1]			@ load new val
786	smp_dmb	arm
7871:	ldrexd	r0, r1, [r2]			@ load current val
788	eors	r3, r0, r4			@ compare with oldval (1)
789	eoreqs	r3, r1, r5			@ compare with oldval (2)
790	strexdeq r3, r6, r7, [r2]		@ store newval if eq
791	teqeq	r3, #1				@ success?
792	beq	1b				@ if no then retry
793	smp_dmb	arm
794	rsbs	r0, r3, #0			@ set returned val and C flag
795	ldmfd	sp!, {r4, r5, r6, r7}
796	usr_ret	lr
797
798#elif !defined(CONFIG_SMP)
799
800#ifdef CONFIG_MMU
801
802	/*
803	 * The only thing that can break atomicity in this cmpxchg64
804	 * implementation is either an IRQ or a data abort exception
805	 * causing another process/thread to be scheduled in the middle of
806	 * the critical sequence.  The same strategy as for cmpxchg is used.
807	 */
808	stmfd	sp!, {r4, r5, r6, lr}
809	ldmia	r0, {r4, r5}			@ load old val
810	ldmia	r1, {r6, lr}			@ load new val
8111:	ldmia	r2, {r0, r1}			@ load current val
812	eors	r3, r0, r4			@ compare with oldval (1)
813	eoreqs	r3, r1, r5			@ compare with oldval (2)
8142:	stmeqia	r2, {r6, lr}			@ store newval if eq
815	rsbs	r0, r3, #0			@ set return val and C flag
816	ldmfd	sp!, {r4, r5, r6, pc}
817
818	.text
819kuser_cmpxchg64_fixup:
820	@ Called from kuser_cmpxchg_fixup.
821	@ r4 = address of interrupted insn (must be preserved).
822	@ sp = saved regs. r7 and r8 are clobbered.
823	@ 1b = first critical insn, 2b = last critical insn.
824	@ If r4 >= 1b and r4 <= 2b then saved pc_usr is set to 1b.
825	mov	r7, #0xffff0fff
826	sub	r7, r7, #(0xffff0fff - (0xffff0f60 + (1b - __kuser_cmpxchg64)))
827	subs	r8, r4, r7
828	rsbcss	r8, r8, #(2b - 1b)
829	strcs	r7, [sp, #S_PC]
830#if __LINUX_ARM_ARCH__ < 6
831	bcc	kuser_cmpxchg32_fixup
832#endif
833	mov	pc, lr
834	.previous
835
836#else
837#warning "NPTL on non MMU needs fixing"
838	mov	r0, #-1
839	adds	r0, r0, #0
840	usr_ret	lr
841#endif
842
843#else
844#error "incoherent kernel configuration"
845#endif
846
847	/* pad to next slot */
848	.rept	(16 - (. - __kuser_cmpxchg64)/4)
849	.word	0
850	.endr
851
852	.align	5
853
854__kuser_memory_barrier:				@ 0xffff0fa0
855	smp_dmb	arm
856	usr_ret	lr
857
858	.align	5
859
860__kuser_cmpxchg:				@ 0xffff0fc0
861
862#if defined(CONFIG_NEEDS_SYSCALL_FOR_CMPXCHG)
863
864	/*
865	 * Poor you.  No fast solution possible...
866	 * The kernel itself must perform the operation.
867	 * A special ghost syscall is used for that (see traps.c).
868	 */
869	stmfd	sp!, {r7, lr}
870	ldr	r7, 1f			@ it's 20 bits
871	swi	__ARM_NR_cmpxchg
872	ldmfd	sp!, {r7, pc}
8731:	.word	__ARM_NR_cmpxchg
874
875#elif __LINUX_ARM_ARCH__ < 6
876
877#ifdef CONFIG_MMU
878
879	/*
880	 * The only thing that can break atomicity in this cmpxchg
881	 * implementation is either an IRQ or a data abort exception
882	 * causing another process/thread to be scheduled in the middle
883	 * of the critical sequence.  To prevent this, code is added to
884	 * the IRQ and data abort exception handlers to set the pc back
885	 * to the beginning of the critical section if it is found to be
886	 * within that critical section (see kuser_cmpxchg_fixup).
887	 */
8881:	ldr	r3, [r2]			@ load current val
889	subs	r3, r3, r0			@ compare with oldval
8902:	streq	r1, [r2]			@ store newval if eq
891	rsbs	r0, r3, #0			@ set return val and C flag
892	usr_ret	lr
893
894	.text
895kuser_cmpxchg32_fixup:
896	@ Called from kuser_cmpxchg_check macro.
897	@ r4 = address of interrupted insn (must be preserved).
898	@ sp = saved regs. r7 and r8 are clobbered.
899	@ 1b = first critical insn, 2b = last critical insn.
900	@ If r4 >= 1b and r4 <= 2b then saved pc_usr is set to 1b.
901	mov	r7, #0xffff0fff
902	sub	r7, r7, #(0xffff0fff - (0xffff0fc0 + (1b - __kuser_cmpxchg)))
903	subs	r8, r4, r7
904	rsbcss	r8, r8, #(2b - 1b)
905	strcs	r7, [sp, #S_PC]
906	mov	pc, lr
907	.previous
908
909#else
910#warning "NPTL on non MMU needs fixing"
911	mov	r0, #-1
912	adds	r0, r0, #0
913	usr_ret	lr
914#endif
915
916#else
917
918	smp_dmb	arm
9191:	ldrex	r3, [r2]
920	subs	r3, r3, r0
921	strexeq	r3, r1, [r2]
922	teqeq	r3, #1
923	beq	1b
924	rsbs	r0, r3, #0
925	/* beware -- each __kuser slot must be 8 instructions max */
926	ALT_SMP(b	__kuser_memory_barrier)
927	ALT_UP(usr_ret	lr)
928
929#endif
930
931	.align	5
932
933__kuser_get_tls:				@ 0xffff0fe0
934	ldr	r0, [pc, #(16 - 8)]	@ read TLS, set in kuser_get_tls_init
935	usr_ret	lr
936	mrc	p15, 0, r0, c13, c0, 3	@ 0xffff0fe8 hardware TLS code
937	.rep	4
938	.word	0			@ 0xffff0ff0 software TLS value, then
939	.endr				@ pad up to __kuser_helper_version
940
941__kuser_helper_version:				@ 0xffff0ffc
942	.word	((__kuser_helper_end - __kuser_helper_start) >> 5)
943
944	.globl	__kuser_helper_end
945__kuser_helper_end:
946
947 THUMB(	.thumb	)
948
949/*
950 * Vector stubs.
951 *
952 * This code is copied to 0xffff0200 so we can use branches in the
953 * vectors, rather than ldr's.  Note that this code must not
954 * exceed 0x300 bytes.
955 *
956 * Common stub entry macro:
957 *   Enter in IRQ mode, spsr = SVC/USR CPSR, lr = SVC/USR PC
958 *
959 * SP points to a minimal amount of processor-private memory, the address
960 * of which is copied into r0 for the mode specific abort handler.
961 */
962	.macro	vector_stub, name, mode, correction=0
963	.align	5
964
965vector_\name:
966	.if \correction
967	sub	lr, lr, #\correction
968	.endif
969
970	@
971	@ Save r0, lr_<exception> (parent PC) and spsr_<exception>
972	@ (parent CPSR)
973	@
974	stmia	sp, {r0, lr}		@ save r0, lr
975	mrs	lr, spsr
976	str	lr, [sp, #8]		@ save spsr
977
978	@
979	@ Prepare for SVC32 mode.  IRQs remain disabled.
980	@
981	mrs	r0, cpsr
982	eor	r0, r0, #(\mode ^ SVC_MODE | PSR_ISETSTATE)
983	msr	spsr_cxsf, r0
984
985	@
986	@ the branch table must immediately follow this code
987	@
988	and	lr, lr, #0x0f
989 THUMB(	adr	r0, 1f			)
990 THUMB(	ldr	lr, [r0, lr, lsl #2]	)
991	mov	r0, sp
992 ARM(	ldr	lr, [pc, lr, lsl #2]	)
993	movs	pc, lr			@ branch to handler in SVC mode
994ENDPROC(vector_\name)
995
996	.align	2
997	@ handler addresses follow this label
9981:
999	.endm
1000
1001	.globl	__stubs_start
1002__stubs_start:
1003/*
1004 * Interrupt dispatcher
1005 */
1006	vector_stub	irq, IRQ_MODE, 4
1007
1008	.long	__irq_usr			@  0  (USR_26 / USR_32)
1009	.long	__irq_invalid			@  1  (FIQ_26 / FIQ_32)
1010	.long	__irq_invalid			@  2  (IRQ_26 / IRQ_32)
1011	.long	__irq_svc			@  3  (SVC_26 / SVC_32)
1012	.long	__irq_invalid			@  4
1013	.long	__irq_invalid			@  5
1014	.long	__irq_invalid			@  6
1015	.long	__irq_invalid			@  7
1016	.long	__irq_invalid			@  8
1017	.long	__irq_invalid			@  9
1018	.long	__irq_invalid			@  a
1019	.long	__irq_invalid			@  b
1020	.long	__irq_invalid			@  c
1021	.long	__irq_invalid			@  d
1022	.long	__irq_invalid			@  e
1023	.long	__irq_invalid			@  f
1024
1025/*
1026 * Data abort dispatcher
1027 * Enter in ABT mode, spsr = USR CPSR, lr = USR PC
1028 */
1029	vector_stub	dabt, ABT_MODE, 8
1030
1031	.long	__dabt_usr			@  0  (USR_26 / USR_32)
1032	.long	__dabt_invalid			@  1  (FIQ_26 / FIQ_32)
1033	.long	__dabt_invalid			@  2  (IRQ_26 / IRQ_32)
1034	.long	__dabt_svc			@  3  (SVC_26 / SVC_32)
1035	.long	__dabt_invalid			@  4
1036	.long	__dabt_invalid			@  5
1037	.long	__dabt_invalid			@  6
1038	.long	__dabt_invalid			@  7
1039	.long	__dabt_invalid			@  8
1040	.long	__dabt_invalid			@  9
1041	.long	__dabt_invalid			@  a
1042	.long	__dabt_invalid			@  b
1043	.long	__dabt_invalid			@  c
1044	.long	__dabt_invalid			@  d
1045	.long	__dabt_invalid			@  e
1046	.long	__dabt_invalid			@  f
1047
1048/*
1049 * Prefetch abort dispatcher
1050 * Enter in ABT mode, spsr = USR CPSR, lr = USR PC
1051 */
1052	vector_stub	pabt, ABT_MODE, 4
1053
1054	.long	__pabt_usr			@  0 (USR_26 / USR_32)
1055	.long	__pabt_invalid			@  1 (FIQ_26 / FIQ_32)
1056	.long	__pabt_invalid			@  2 (IRQ_26 / IRQ_32)
1057	.long	__pabt_svc			@  3 (SVC_26 / SVC_32)
1058	.long	__pabt_invalid			@  4
1059	.long	__pabt_invalid			@  5
1060	.long	__pabt_invalid			@  6
1061	.long	__pabt_invalid			@  7
1062	.long	__pabt_invalid			@  8
1063	.long	__pabt_invalid			@  9
1064	.long	__pabt_invalid			@  a
1065	.long	__pabt_invalid			@  b
1066	.long	__pabt_invalid			@  c
1067	.long	__pabt_invalid			@  d
1068	.long	__pabt_invalid			@  e
1069	.long	__pabt_invalid			@  f
1070
1071/*
1072 * Undef instr entry dispatcher
1073 * Enter in UND mode, spsr = SVC/USR CPSR, lr = SVC/USR PC
1074 */
1075	vector_stub	und, UND_MODE
1076
1077	.long	__und_usr			@  0 (USR_26 / USR_32)
1078	.long	__und_invalid			@  1 (FIQ_26 / FIQ_32)
1079	.long	__und_invalid			@  2 (IRQ_26 / IRQ_32)
1080	.long	__und_svc			@  3 (SVC_26 / SVC_32)
1081	.long	__und_invalid			@  4
1082	.long	__und_invalid			@  5
1083	.long	__und_invalid			@  6
1084	.long	__und_invalid			@  7
1085	.long	__und_invalid			@  8
1086	.long	__und_invalid			@  9
1087	.long	__und_invalid			@  a
1088	.long	__und_invalid			@  b
1089	.long	__und_invalid			@  c
1090	.long	__und_invalid			@  d
1091	.long	__und_invalid			@  e
1092	.long	__und_invalid			@  f
1093
1094	.align	5
1095
1096/*=============================================================================
1097 * Undefined FIQs
1098 *-----------------------------------------------------------------------------
1099 * Enter in FIQ mode, spsr = ANY CPSR, lr = ANY PC
1100 * MUST PRESERVE SVC SPSR, but need to switch to SVC mode to show our msg.
1101 * Basically to switch modes, we *HAVE* to clobber one register...  brain
1102 * damage alert!  I don't think that we can execute any code in here in any
1103 * other mode than FIQ...  Ok you can switch to another mode, but you can't
1104 * get out of that mode without clobbering one register.
1105 */
1106vector_fiq:
1107	subs	pc, lr, #4
1108
1109/*=============================================================================
1110 * Address exception handler
1111 *-----------------------------------------------------------------------------
1112 * These aren't too critical.
1113 * (they're not supposed to happen, and won't happen in 32-bit data mode).
1114 */
1115
1116vector_addrexcptn:
1117	b	vector_addrexcptn
1118
1119/*
1120 * We group all the following data together to optimise
1121 * for CPUs with separate I & D caches.
1122 */
1123	.align	5
1124
1125.LCvswi:
1126	.word	vector_swi
1127
1128	.globl	__stubs_end
1129__stubs_end:
1130
1131	.equ	stubs_offset, __vectors_start + 0x200 - __stubs_start
1132
1133	.globl	__vectors_start
1134__vectors_start:
1135 ARM(	swi	SYS_ERROR0	)
1136 THUMB(	svc	#0		)
1137 THUMB(	nop			)
1138	W(b)	vector_und + stubs_offset
1139	W(ldr)	pc, .LCvswi + stubs_offset
1140	W(b)	vector_pabt + stubs_offset
1141	W(b)	vector_dabt + stubs_offset
1142	W(b)	vector_addrexcptn + stubs_offset
1143	W(b)	vector_irq + stubs_offset
1144	W(b)	vector_fiq + stubs_offset
1145
1146	.globl	__vectors_end
1147__vectors_end:
1148
1149	.data
1150
1151	.globl	cr_alignment
1152	.globl	cr_no_alignment
1153cr_alignment:
1154	.space	4
1155cr_no_alignment:
1156	.space	4
1157
1158#ifdef CONFIG_MULTI_IRQ_HANDLER
1159	.globl	handle_arch_irq
1160handle_arch_irq:
1161	.space	4
1162#endif
1163