1/* 2 * This file contains miscellaneous low-level functions. 3 * Copyright (C) 1995-1996 Gary Thomas (gdt@linuxppc.org) 4 * 5 * Largely rewritten by Cort Dougan (cort@cs.nmt.edu) 6 * and Paul Mackerras. 7 * Adapted for iSeries by Mike Corrigan (mikejc@us.ibm.com) 8 * PPC64 updates by Dave Engebretsen (engebret@us.ibm.com) 9 * 10 * This program is free software; you can redistribute it and/or 11 * modify it under the terms of the GNU General Public License 12 * as published by the Free Software Foundation; either version 13 * 2 of the License, or (at your option) any later version. 14 * 15 */ 16 17#include <linux/sys.h> 18#include <asm/unistd.h> 19#include <asm/errno.h> 20#include <asm/processor.h> 21#include <asm/page.h> 22#include <asm/cache.h> 23#include <asm/ppc_asm.h> 24#include <asm/asm-offsets.h> 25#include <asm/cputable.h> 26#include <asm/thread_info.h> 27#include <asm/kexec.h> 28#include <asm/ptrace.h> 29 30 .text 31 32_GLOBAL(call_do_softirq) 33 mflr r0 34 std r0,16(r1) 35 stdu r1,THREAD_SIZE-STACK_FRAME_OVERHEAD(r3) 36 mr r1,r3 37 bl .__do_softirq 38 ld r1,0(r1) 39 ld r0,16(r1) 40 mtlr r0 41 blr 42 43_GLOBAL(call_handle_irq) 44 ld r8,0(r6) 45 mflr r0 46 std r0,16(r1) 47 mtctr r8 48 stdu r1,THREAD_SIZE-STACK_FRAME_OVERHEAD(r5) 49 mr r1,r5 50 bctrl 51 ld r1,0(r1) 52 ld r0,16(r1) 53 mtlr r0 54 blr 55 56 .section ".toc","aw" 57PPC64_CACHES: 58 .tc ppc64_caches[TC],ppc64_caches 59 .section ".text" 60 61/* 62 * Write any modified data cache blocks out to memory 63 * and invalidate the corresponding instruction cache blocks. 64 * 65 * flush_icache_range(unsigned long start, unsigned long stop) 66 * 67 * flush all bytes from start through stop-1 inclusive 68 */ 69 70_KPROBE(__flush_icache_range) 71 72/* 73 * Flush the data cache to memory 74 * 75 * Different systems have different cache line sizes 76 * and in some cases i-cache and d-cache line sizes differ from 77 * each other. 78 */ 79 ld r10,PPC64_CACHES@toc(r2) 80 lwz r7,DCACHEL1LINESIZE(r10)/* Get cache line size */ 81 addi r5,r7,-1 82 andc r6,r3,r5 /* round low to line bdy */ 83 subf r8,r6,r4 /* compute length */ 84 add r8,r8,r5 /* ensure we get enough */ 85 lwz r9,DCACHEL1LOGLINESIZE(r10) /* Get log-2 of cache line size */ 86 srw. r8,r8,r9 /* compute line count */ 87 beqlr /* nothing to do? */ 88 mtctr r8 891: dcbst 0,r6 90 add r6,r6,r7 91 bdnz 1b 92 sync 93 94/* Now invalidate the instruction cache */ 95 96 lwz r7,ICACHEL1LINESIZE(r10) /* Get Icache line size */ 97 addi r5,r7,-1 98 andc r6,r3,r5 /* round low to line bdy */ 99 subf r8,r6,r4 /* compute length */ 100 add r8,r8,r5 101 lwz r9,ICACHEL1LOGLINESIZE(r10) /* Get log-2 of Icache line size */ 102 srw. r8,r8,r9 /* compute line count */ 103 beqlr /* nothing to do? */ 104 mtctr r8 1052: icbi 0,r6 106 add r6,r6,r7 107 bdnz 2b 108 isync 109 blr 110 .previous .text 111/* 112 * Like above, but only do the D-cache. 113 * 114 * flush_dcache_range(unsigned long start, unsigned long stop) 115 * 116 * flush all bytes from start to stop-1 inclusive 117 */ 118_GLOBAL(flush_dcache_range) 119 120/* 121 * Flush the data cache to memory 122 * 123 * Different systems have different cache line sizes 124 */ 125 ld r10,PPC64_CACHES@toc(r2) 126 lwz r7,DCACHEL1LINESIZE(r10) /* Get dcache line size */ 127 addi r5,r7,-1 128 andc r6,r3,r5 /* round low to line bdy */ 129 subf r8,r6,r4 /* compute length */ 130 add r8,r8,r5 /* ensure we get enough */ 131 lwz r9,DCACHEL1LOGLINESIZE(r10) /* Get log-2 of dcache line size */ 132 srw. r8,r8,r9 /* compute line count */ 133 beqlr /* nothing to do? */ 134 mtctr r8 1350: dcbst 0,r6 136 add r6,r6,r7 137 bdnz 0b 138 sync 139 blr 140 141/* 142 * Like above, but works on non-mapped physical addresses. 143 * Use only for non-LPAR setups ! It also assumes real mode 144 * is cacheable. Used for flushing out the DART before using 145 * it as uncacheable memory 146 * 147 * flush_dcache_phys_range(unsigned long start, unsigned long stop) 148 * 149 * flush all bytes from start to stop-1 inclusive 150 */ 151_GLOBAL(flush_dcache_phys_range) 152 ld r10,PPC64_CACHES@toc(r2) 153 lwz r7,DCACHEL1LINESIZE(r10) /* Get dcache line size */ 154 addi r5,r7,-1 155 andc r6,r3,r5 /* round low to line bdy */ 156 subf r8,r6,r4 /* compute length */ 157 add r8,r8,r5 /* ensure we get enough */ 158 lwz r9,DCACHEL1LOGLINESIZE(r10) /* Get log-2 of dcache line size */ 159 srw. r8,r8,r9 /* compute line count */ 160 beqlr /* nothing to do? */ 161 mfmsr r5 /* Disable MMU Data Relocation */ 162 ori r0,r5,MSR_DR 163 xori r0,r0,MSR_DR 164 sync 165 mtmsr r0 166 sync 167 isync 168 mtctr r8 1690: dcbst 0,r6 170 add r6,r6,r7 171 bdnz 0b 172 sync 173 isync 174 mtmsr r5 /* Re-enable MMU Data Relocation */ 175 sync 176 isync 177 blr 178 179_GLOBAL(flush_inval_dcache_range) 180 ld r10,PPC64_CACHES@toc(r2) 181 lwz r7,DCACHEL1LINESIZE(r10) /* Get dcache line size */ 182 addi r5,r7,-1 183 andc r6,r3,r5 /* round low to line bdy */ 184 subf r8,r6,r4 /* compute length */ 185 add r8,r8,r5 /* ensure we get enough */ 186 lwz r9,DCACHEL1LOGLINESIZE(r10)/* Get log-2 of dcache line size */ 187 srw. r8,r8,r9 /* compute line count */ 188 beqlr /* nothing to do? */ 189 sync 190 isync 191 mtctr r8 1920: dcbf 0,r6 193 add r6,r6,r7 194 bdnz 0b 195 sync 196 isync 197 blr 198 199 200/* 201 * Flush a particular page from the data cache to RAM. 202 * Note: this is necessary because the instruction cache does *not* 203 * snoop from the data cache. 204 * 205 * void __flush_dcache_icache(void *page) 206 */ 207_GLOBAL(__flush_dcache_icache) 208/* 209 * Flush the data cache to memory 210 * 211 * Different systems have different cache line sizes 212 */ 213 214/* Flush the dcache */ 215 ld r7,PPC64_CACHES@toc(r2) 216 clrrdi r3,r3,PAGE_SHIFT /* Page align */ 217 lwz r4,DCACHEL1LINESPERPAGE(r7) /* Get # dcache lines per page */ 218 lwz r5,DCACHEL1LINESIZE(r7) /* Get dcache line size */ 219 mr r6,r3 220 mtctr r4 2210: dcbst 0,r6 222 add r6,r6,r5 223 bdnz 0b 224 sync 225 226/* Now invalidate the icache */ 227 228 lwz r4,ICACHEL1LINESPERPAGE(r7) /* Get # icache lines per page */ 229 lwz r5,ICACHEL1LINESIZE(r7) /* Get icache line size */ 230 mtctr r4 2311: icbi 0,r3 232 add r3,r3,r5 233 bdnz 1b 234 isync 235 blr 236 237 238#if defined(CONFIG_PPC_PMAC) || defined(CONFIG_PPC_MAPLE) 239/* 240 * Do an IO access in real mode 241 */ 242_GLOBAL(real_readb) 243 mfmsr r7 244 ori r0,r7,MSR_DR 245 xori r0,r0,MSR_DR 246 sync 247 mtmsrd r0 248 sync 249 isync 250 mfspr r6,SPRN_HID4 251 rldicl r5,r6,32,0 252 ori r5,r5,0x100 253 rldicl r5,r5,32,0 254 sync 255 mtspr SPRN_HID4,r5 256 isync 257 slbia 258 isync 259 lbz r3,0(r3) 260 sync 261 mtspr SPRN_HID4,r6 262 isync 263 slbia 264 isync 265 mtmsrd r7 266 sync 267 isync 268 blr 269 270 /* 271 * Do an IO access in real mode 272 */ 273_GLOBAL(real_writeb) 274 mfmsr r7 275 ori r0,r7,MSR_DR 276 xori r0,r0,MSR_DR 277 sync 278 mtmsrd r0 279 sync 280 isync 281 mfspr r6,SPRN_HID4 282 rldicl r5,r6,32,0 283 ori r5,r5,0x100 284 rldicl r5,r5,32,0 285 sync 286 mtspr SPRN_HID4,r5 287 isync 288 slbia 289 isync 290 stb r3,0(r4) 291 sync 292 mtspr SPRN_HID4,r6 293 isync 294 slbia 295 isync 296 mtmsrd r7 297 sync 298 isync 299 blr 300#endif /* defined(CONFIG_PPC_PMAC) || defined(CONFIG_PPC_MAPLE) */ 301 302#ifdef CONFIG_PPC_PASEMI 303 304/* No support in all binutils for these yet, so use defines */ 305#define LBZCIX(RT,RA,RB) .long (0x7c0006aa|(RT<<21)|(RA<<16)|(RB << 11)) 306#define STBCIX(RS,RA,RB) .long (0x7c0007aa|(RS<<21)|(RA<<16)|(RB << 11)) 307 308 309_GLOBAL(real_205_readb) 310 mfmsr r7 311 ori r0,r7,MSR_DR 312 xori r0,r0,MSR_DR 313 sync 314 mtmsrd r0 315 sync 316 isync 317 LBZCIX(r3,0,r3) 318 isync 319 mtmsrd r7 320 sync 321 isync 322 blr 323 324_GLOBAL(real_205_writeb) 325 mfmsr r7 326 ori r0,r7,MSR_DR 327 xori r0,r0,MSR_DR 328 sync 329 mtmsrd r0 330 sync 331 isync 332 STBCIX(r3,0,r4) 333 isync 334 mtmsrd r7 335 sync 336 isync 337 blr 338 339#endif /* CONFIG_PPC_PASEMI */ 340 341 342#ifdef CONFIG_CPU_FREQ_PMAC64 343/* 344 * SCOM access functions for 970 (FX only for now) 345 * 346 * unsigned long scom970_read(unsigned int address); 347 * void scom970_write(unsigned int address, unsigned long value); 348 * 349 * The address passed in is the 24 bits register address. This code 350 * is 970 specific and will not check the status bits, so you should 351 * know what you are doing. 352 */ 353_GLOBAL(scom970_read) 354 /* interrupts off */ 355 mfmsr r4 356 ori r0,r4,MSR_EE 357 xori r0,r0,MSR_EE 358 mtmsrd r0,1 359 360 /* rotate 24 bits SCOM address 8 bits left and mask out it's low 8 bits 361 * (including parity). On current CPUs they must be 0'd, 362 * and finally or in RW bit 363 */ 364 rlwinm r3,r3,8,0,15 365 ori r3,r3,0x8000 366 367 /* do the actual scom read */ 368 sync 369 mtspr SPRN_SCOMC,r3 370 isync 371 mfspr r3,SPRN_SCOMD 372 isync 373 mfspr r0,SPRN_SCOMC 374 isync 375 376 /* XXX: fixup result on some buggy 970's (ouch ! we lost a bit, bah 377 * that's the best we can do). Not implemented yet as we don't use 378 * the scom on any of the bogus CPUs yet, but may have to be done 379 * ultimately 380 */ 381 382 /* restore interrupts */ 383 mtmsrd r4,1 384 blr 385 386 387_GLOBAL(scom970_write) 388 /* interrupts off */ 389 mfmsr r5 390 ori r0,r5,MSR_EE 391 xori r0,r0,MSR_EE 392 mtmsrd r0,1 393 394 /* rotate 24 bits SCOM address 8 bits left and mask out it's low 8 bits 395 * (including parity). On current CPUs they must be 0'd. 396 */ 397 398 rlwinm r3,r3,8,0,15 399 400 sync 401 mtspr SPRN_SCOMD,r4 /* write data */ 402 isync 403 mtspr SPRN_SCOMC,r3 /* write command */ 404 isync 405 mfspr 3,SPRN_SCOMC 406 isync 407 408 /* restore interrupts */ 409 mtmsrd r5,1 410 blr 411#endif /* CONFIG_CPU_FREQ_PMAC64 */ 412 413 414/* 415 * Create a kernel thread 416 * kernel_thread(fn, arg, flags) 417 */ 418_GLOBAL(kernel_thread) 419 std r29,-24(r1) 420 std r30,-16(r1) 421 stdu r1,-STACK_FRAME_OVERHEAD(r1) 422 mr r29,r3 423 mr r30,r4 424 ori r3,r5,CLONE_VM /* flags */ 425 oris r3,r3,(CLONE_UNTRACED>>16) 426 li r4,0 /* new sp (unused) */ 427 li r0,__NR_clone 428 sc 429 bns+ 1f /* did system call indicate error? */ 430 neg r3,r3 /* if so, make return code negative */ 4311: cmpdi 0,r3,0 /* parent or child? */ 432 bne 2f /* return if parent */ 433 li r0,0 434 stdu r0,-STACK_FRAME_OVERHEAD(r1) 435 ld r2,8(r29) 436 ld r29,0(r29) 437 mtlr r29 /* fn addr in lr */ 438 mr r3,r30 /* load arg and call fn */ 439 blrl 440 li r0,__NR_exit /* exit after child exits */ 441 li r3,0 442 sc 4432: addi r1,r1,STACK_FRAME_OVERHEAD 444 ld r29,-24(r1) 445 ld r30,-16(r1) 446 blr 447 448/* 449 * disable_kernel_fp() 450 * Disable the FPU. 451 */ 452_GLOBAL(disable_kernel_fp) 453 mfmsr r3 454 rldicl r0,r3,(63-MSR_FP_LG),1 455 rldicl r3,r0,(MSR_FP_LG+1),0 456 mtmsrd r3 /* disable use of fpu now */ 457 isync 458 blr 459 460/* kexec_wait(phys_cpu) 461 * 462 * wait for the flag to change, indicating this kernel is going away but 463 * the slave code for the next one is at addresses 0 to 100. 464 * 465 * This is used by all slaves. 466 * 467 * Physical (hardware) cpu id should be in r3. 468 */ 469_GLOBAL(kexec_wait) 470 bl 1f 4711: mflr r5 472 addi r5,r5,kexec_flag-1b 473 474 li r4,KEXEC_STATE_REAL_MODE 475 stb r4,PACAKEXECSTATE(r13) 476 SYNC 477 47899: HMT_LOW 479#ifdef CONFIG_KEXEC /* use no memory without kexec */ 480 lwz r4,0(r5) 481 cmpwi 0,r4,0 482 bnea 0x60 483#endif 484 b 99b 485 486/* this can be in text because we won't change it until we are 487 * running in real anyways 488 */ 489kexec_flag: 490 .long 0 491 492 493#ifdef CONFIG_KEXEC 494 495/* kexec_smp_wait(void) 496 * 497 * call with interrupts off 498 * note: this is a terminal routine, it does not save lr 499 * 500 * get phys id from paca 501 * switch to real mode 502 * join other cpus in kexec_wait(phys_id) 503 */ 504_GLOBAL(kexec_smp_wait) 505 lhz r3,PACAHWCPUID(r13) 506 bl real_mode 507 b .kexec_wait 508 509/* 510 * switch to real mode (turn mmu off) 511 * we use the early kernel trick that the hardware ignores bits 512 * 0 and 1 (big endian) of the effective address in real mode 513 * 514 * don't overwrite r3 here, it is live for kexec_wait above. 515 */ 516real_mode: /* assume normal blr return */ 5171: li r9,MSR_RI 518 li r10,MSR_DR|MSR_IR 519 mflr r11 /* return address to SRR0 */ 520 mfmsr r12 521 andc r9,r12,r9 522 andc r10,r12,r10 523 524 mtmsrd r9,1 525 mtspr SPRN_SRR1,r10 526 mtspr SPRN_SRR0,r11 527 rfid 528 529 530/* 531 * kexec_sequence(newstack, start, image, control, clear_all()) 532 * 533 * does the grungy work with stack switching and real mode switches 534 * also does simple calls to other code 535 */ 536 537_GLOBAL(kexec_sequence) 538 mflr r0 539 std r0,16(r1) 540 541 /* switch stacks to newstack -- &kexec_stack.stack */ 542 stdu r1,THREAD_SIZE-STACK_FRAME_OVERHEAD(r3) 543 mr r1,r3 544 545 li r0,0 546 std r0,16(r1) 547 548 /* save regs for local vars on new stack. 549 * yes, we won't go back, but ... 550 */ 551 std r31,-8(r1) 552 std r30,-16(r1) 553 std r29,-24(r1) 554 std r28,-32(r1) 555 std r27,-40(r1) 556 std r26,-48(r1) 557 std r25,-56(r1) 558 559 stdu r1,-STACK_FRAME_OVERHEAD-64(r1) 560 561 /* save args into preserved regs */ 562 mr r31,r3 /* newstack (both) */ 563 mr r30,r4 /* start (real) */ 564 mr r29,r5 /* image (virt) */ 565 mr r28,r6 /* control, unused */ 566 mr r27,r7 /* clear_all() fn desc */ 567 mr r26,r8 /* spare */ 568 lhz r25,PACAHWCPUID(r13) /* get our phys cpu from paca */ 569 570 /* disable interrupts, we are overwriting kernel data next */ 571 mfmsr r3 572 rlwinm r3,r3,0,17,15 573 mtmsrd r3,1 574 575 /* copy dest pages, flush whole dest image */ 576 mr r3,r29 577 bl .kexec_copy_flush /* (image) */ 578 579 /* turn off mmu */ 580 bl real_mode 581 582 /* copy 0x100 bytes starting at start to 0 */ 583 li r3,0 584 mr r4,r30 /* start, aka phys mem offset */ 585 li r5,0x100 586 li r6,0 587 bl .copy_and_flush /* (dest, src, copy limit, start offset) */ 5881: /* assume normal blr return */ 589 590 /* release other cpus to the new kernel secondary start at 0x60 */ 591 mflr r5 592 li r6,1 593 stw r6,kexec_flag-1b(5) 594 595 /* clear out hardware hash page table and tlb */ 596 ld r5,0(r27) /* deref function descriptor */ 597 mtctr r5 598 bctrl /* ppc_md.hpte_clear_all(void); */ 599 600/* 601 * kexec image calling is: 602 * the first 0x100 bytes of the entry point are copied to 0 603 * 604 * all slaves branch to slave = 0x60 (absolute) 605 * slave(phys_cpu_id); 606 * 607 * master goes to start = entry point 608 * start(phys_cpu_id, start, 0); 609 * 610 * 611 * a wrapper is needed to call existing kernels, here is an approximate 612 * description of one method: 613 * 614 * v2: (2.6.10) 615 * start will be near the boot_block (maybe 0x100 bytes before it?) 616 * it will have a 0x60, which will b to boot_block, where it will wait 617 * and 0 will store phys into struct boot-block and load r3 from there, 618 * copy kernel 0-0x100 and tell slaves to back down to 0x60 again 619 * 620 * v1: (2.6.9) 621 * boot block will have all cpus scanning device tree to see if they 622 * are the boot cpu ????? 623 * other device tree differences (prop sizes, va vs pa, etc)... 624 */ 625 mr r3,r25 # my phys cpu 626 mr r4,r30 # start, aka phys mem offset 627 mtlr 4 628 li r5,0 629 blr /* image->start(physid, image->start, 0); */ 630#endif /* CONFIG_KEXEC */ 631