xref: /openbmc/qemu/target/i386/cpu.h (revision 3f53bc61)
1 /*
2  * i386 virtual CPU header
3  *
4  *  Copyright (c) 2003 Fabrice Bellard
5  *
6  * This library is free software; you can redistribute it and/or
7  * modify it under the terms of the GNU Lesser General Public
8  * License as published by the Free Software Foundation; either
9  * version 2 of the License, or (at your option) any later version.
10  *
11  * This library is distributed in the hope that it will be useful,
12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
14  * Lesser General Public License for more details.
15  *
16  * You should have received a copy of the GNU Lesser General Public
17  * License along with this library; if not, see <http://www.gnu.org/licenses/>.
18  */
19 
20 #ifndef I386_CPU_H
21 #define I386_CPU_H
22 
23 #include "qemu-common.h"
24 #include "cpu-qom.h"
25 #include "standard-headers/asm-x86/hyperv.h"
26 
27 #ifdef TARGET_X86_64
28 #define TARGET_LONG_BITS 64
29 #else
30 #define TARGET_LONG_BITS 32
31 #endif
32 
33 /* The x86 has a strong memory model with some store-after-load re-ordering */
34 #define TCG_GUEST_DEFAULT_MO      (TCG_MO_ALL & ~TCG_MO_ST_LD)
35 
36 /* Maximum instruction code size */
37 #define TARGET_MAX_INSN_SIZE 16
38 
39 /* support for self modifying code even if the modified instruction is
40    close to the modifying instruction */
41 #define TARGET_HAS_PRECISE_SMC
42 
43 #ifdef TARGET_X86_64
44 #define I386_ELF_MACHINE  EM_X86_64
45 #define ELF_MACHINE_UNAME "x86_64"
46 #else
47 #define I386_ELF_MACHINE  EM_386
48 #define ELF_MACHINE_UNAME "i686"
49 #endif
50 
51 #define CPUArchState struct CPUX86State
52 
53 #include "exec/cpu-defs.h"
54 
55 #include "fpu/softfloat.h"
56 
57 #define R_EAX 0
58 #define R_ECX 1
59 #define R_EDX 2
60 #define R_EBX 3
61 #define R_ESP 4
62 #define R_EBP 5
63 #define R_ESI 6
64 #define R_EDI 7
65 
66 #define R_AL 0
67 #define R_CL 1
68 #define R_DL 2
69 #define R_BL 3
70 #define R_AH 4
71 #define R_CH 5
72 #define R_DH 6
73 #define R_BH 7
74 
75 #define R_ES 0
76 #define R_CS 1
77 #define R_SS 2
78 #define R_DS 3
79 #define R_FS 4
80 #define R_GS 5
81 
82 /* segment descriptor fields */
83 #define DESC_G_MASK     (1 << 23)
84 #define DESC_B_SHIFT    22
85 #define DESC_B_MASK     (1 << DESC_B_SHIFT)
86 #define DESC_L_SHIFT    21 /* x86_64 only : 64 bit code segment */
87 #define DESC_L_MASK     (1 << DESC_L_SHIFT)
88 #define DESC_AVL_MASK   (1 << 20)
89 #define DESC_P_MASK     (1 << 15)
90 #define DESC_DPL_SHIFT  13
91 #define DESC_DPL_MASK   (3 << DESC_DPL_SHIFT)
92 #define DESC_S_MASK     (1 << 12)
93 #define DESC_TYPE_SHIFT 8
94 #define DESC_TYPE_MASK  (15 << DESC_TYPE_SHIFT)
95 #define DESC_A_MASK     (1 << 8)
96 
97 #define DESC_CS_MASK    (1 << 11) /* 1=code segment 0=data segment */
98 #define DESC_C_MASK     (1 << 10) /* code: conforming */
99 #define DESC_R_MASK     (1 << 9)  /* code: readable */
100 
101 #define DESC_E_MASK     (1 << 10) /* data: expansion direction */
102 #define DESC_W_MASK     (1 << 9)  /* data: writable */
103 
104 #define DESC_TSS_BUSY_MASK (1 << 9)
105 
106 /* eflags masks */
107 #define CC_C    0x0001
108 #define CC_P    0x0004
109 #define CC_A    0x0010
110 #define CC_Z    0x0040
111 #define CC_S    0x0080
112 #define CC_O    0x0800
113 
114 #define TF_SHIFT   8
115 #define IOPL_SHIFT 12
116 #define VM_SHIFT   17
117 
118 #define TF_MASK                 0x00000100
119 #define IF_MASK                 0x00000200
120 #define DF_MASK                 0x00000400
121 #define IOPL_MASK               0x00003000
122 #define NT_MASK                 0x00004000
123 #define RF_MASK                 0x00010000
124 #define VM_MASK                 0x00020000
125 #define AC_MASK                 0x00040000
126 #define VIF_MASK                0x00080000
127 #define VIP_MASK                0x00100000
128 #define ID_MASK                 0x00200000
129 
130 /* hidden flags - used internally by qemu to represent additional cpu
131    states. Only the INHIBIT_IRQ, SMM and SVMI are not redundant. We
132    avoid using the IOPL_MASK, TF_MASK, VM_MASK and AC_MASK bit
133    positions to ease oring with eflags. */
134 /* current cpl */
135 #define HF_CPL_SHIFT         0
136 /* true if hardware interrupts must be disabled for next instruction */
137 #define HF_INHIBIT_IRQ_SHIFT 3
138 /* 16 or 32 segments */
139 #define HF_CS32_SHIFT        4
140 #define HF_SS32_SHIFT        5
141 /* zero base for DS, ES and SS : can be '0' only in 32 bit CS segment */
142 #define HF_ADDSEG_SHIFT      6
143 /* copy of CR0.PE (protected mode) */
144 #define HF_PE_SHIFT          7
145 #define HF_TF_SHIFT          8 /* must be same as eflags */
146 #define HF_MP_SHIFT          9 /* the order must be MP, EM, TS */
147 #define HF_EM_SHIFT         10
148 #define HF_TS_SHIFT         11
149 #define HF_IOPL_SHIFT       12 /* must be same as eflags */
150 #define HF_LMA_SHIFT        14 /* only used on x86_64: long mode active */
151 #define HF_CS64_SHIFT       15 /* only used on x86_64: 64 bit code segment  */
152 #define HF_RF_SHIFT         16 /* must be same as eflags */
153 #define HF_VM_SHIFT         17 /* must be same as eflags */
154 #define HF_AC_SHIFT         18 /* must be same as eflags */
155 #define HF_SMM_SHIFT        19 /* CPU in SMM mode */
156 #define HF_SVME_SHIFT       20 /* SVME enabled (copy of EFER.SVME) */
157 #define HF_SVMI_SHIFT       21 /* SVM intercepts are active */
158 #define HF_OSFXSR_SHIFT     22 /* CR4.OSFXSR */
159 #define HF_SMAP_SHIFT       23 /* CR4.SMAP */
160 #define HF_IOBPT_SHIFT      24 /* an io breakpoint enabled */
161 #define HF_MPX_EN_SHIFT     25 /* MPX Enabled (CR4+XCR0+BNDCFGx) */
162 #define HF_MPX_IU_SHIFT     26 /* BND registers in-use */
163 
164 #define HF_CPL_MASK          (3 << HF_CPL_SHIFT)
165 #define HF_INHIBIT_IRQ_MASK  (1 << HF_INHIBIT_IRQ_SHIFT)
166 #define HF_CS32_MASK         (1 << HF_CS32_SHIFT)
167 #define HF_SS32_MASK         (1 << HF_SS32_SHIFT)
168 #define HF_ADDSEG_MASK       (1 << HF_ADDSEG_SHIFT)
169 #define HF_PE_MASK           (1 << HF_PE_SHIFT)
170 #define HF_TF_MASK           (1 << HF_TF_SHIFT)
171 #define HF_MP_MASK           (1 << HF_MP_SHIFT)
172 #define HF_EM_MASK           (1 << HF_EM_SHIFT)
173 #define HF_TS_MASK           (1 << HF_TS_SHIFT)
174 #define HF_IOPL_MASK         (3 << HF_IOPL_SHIFT)
175 #define HF_LMA_MASK          (1 << HF_LMA_SHIFT)
176 #define HF_CS64_MASK         (1 << HF_CS64_SHIFT)
177 #define HF_RF_MASK           (1 << HF_RF_SHIFT)
178 #define HF_VM_MASK           (1 << HF_VM_SHIFT)
179 #define HF_AC_MASK           (1 << HF_AC_SHIFT)
180 #define HF_SMM_MASK          (1 << HF_SMM_SHIFT)
181 #define HF_SVME_MASK         (1 << HF_SVME_SHIFT)
182 #define HF_SVMI_MASK         (1 << HF_SVMI_SHIFT)
183 #define HF_OSFXSR_MASK       (1 << HF_OSFXSR_SHIFT)
184 #define HF_SMAP_MASK         (1 << HF_SMAP_SHIFT)
185 #define HF_IOBPT_MASK        (1 << HF_IOBPT_SHIFT)
186 #define HF_MPX_EN_MASK       (1 << HF_MPX_EN_SHIFT)
187 #define HF_MPX_IU_MASK       (1 << HF_MPX_IU_SHIFT)
188 
189 /* hflags2 */
190 
191 #define HF2_GIF_SHIFT            0 /* if set CPU takes interrupts */
192 #define HF2_HIF_SHIFT            1 /* value of IF_MASK when entering SVM */
193 #define HF2_NMI_SHIFT            2 /* CPU serving NMI */
194 #define HF2_VINTR_SHIFT          3 /* value of V_INTR_MASKING bit */
195 #define HF2_SMM_INSIDE_NMI_SHIFT 4 /* CPU serving SMI nested inside NMI */
196 #define HF2_MPX_PR_SHIFT         5 /* BNDCFGx.BNDPRESERVE */
197 
198 #define HF2_GIF_MASK            (1 << HF2_GIF_SHIFT)
199 #define HF2_HIF_MASK            (1 << HF2_HIF_SHIFT)
200 #define HF2_NMI_MASK            (1 << HF2_NMI_SHIFT)
201 #define HF2_VINTR_MASK          (1 << HF2_VINTR_SHIFT)
202 #define HF2_SMM_INSIDE_NMI_MASK (1 << HF2_SMM_INSIDE_NMI_SHIFT)
203 #define HF2_MPX_PR_MASK         (1 << HF2_MPX_PR_SHIFT)
204 
205 #define CR0_PE_SHIFT 0
206 #define CR0_MP_SHIFT 1
207 
208 #define CR0_PE_MASK  (1U << 0)
209 #define CR0_MP_MASK  (1U << 1)
210 #define CR0_EM_MASK  (1U << 2)
211 #define CR0_TS_MASK  (1U << 3)
212 #define CR0_ET_MASK  (1U << 4)
213 #define CR0_NE_MASK  (1U << 5)
214 #define CR0_WP_MASK  (1U << 16)
215 #define CR0_AM_MASK  (1U << 18)
216 #define CR0_PG_MASK  (1U << 31)
217 
218 #define CR4_VME_MASK  (1U << 0)
219 #define CR4_PVI_MASK  (1U << 1)
220 #define CR4_TSD_MASK  (1U << 2)
221 #define CR4_DE_MASK   (1U << 3)
222 #define CR4_PSE_MASK  (1U << 4)
223 #define CR4_PAE_MASK  (1U << 5)
224 #define CR4_MCE_MASK  (1U << 6)
225 #define CR4_PGE_MASK  (1U << 7)
226 #define CR4_PCE_MASK  (1U << 8)
227 #define CR4_OSFXSR_SHIFT 9
228 #define CR4_OSFXSR_MASK (1U << CR4_OSFXSR_SHIFT)
229 #define CR4_OSXMMEXCPT_MASK  (1U << 10)
230 #define CR4_LA57_MASK   (1U << 12)
231 #define CR4_VMXE_MASK   (1U << 13)
232 #define CR4_SMXE_MASK   (1U << 14)
233 #define CR4_FSGSBASE_MASK (1U << 16)
234 #define CR4_PCIDE_MASK  (1U << 17)
235 #define CR4_OSXSAVE_MASK (1U << 18)
236 #define CR4_SMEP_MASK   (1U << 20)
237 #define CR4_SMAP_MASK   (1U << 21)
238 #define CR4_PKE_MASK   (1U << 22)
239 
240 #define DR6_BD          (1 << 13)
241 #define DR6_BS          (1 << 14)
242 #define DR6_BT          (1 << 15)
243 #define DR6_FIXED_1     0xffff0ff0
244 
245 #define DR7_GD          (1 << 13)
246 #define DR7_TYPE_SHIFT  16
247 #define DR7_LEN_SHIFT   18
248 #define DR7_FIXED_1     0x00000400
249 #define DR7_GLOBAL_BP_MASK   0xaa
250 #define DR7_LOCAL_BP_MASK    0x55
251 #define DR7_MAX_BP           4
252 #define DR7_TYPE_BP_INST     0x0
253 #define DR7_TYPE_DATA_WR     0x1
254 #define DR7_TYPE_IO_RW       0x2
255 #define DR7_TYPE_DATA_RW     0x3
256 
257 #define PG_PRESENT_BIT  0
258 #define PG_RW_BIT       1
259 #define PG_USER_BIT     2
260 #define PG_PWT_BIT      3
261 #define PG_PCD_BIT      4
262 #define PG_ACCESSED_BIT 5
263 #define PG_DIRTY_BIT    6
264 #define PG_PSE_BIT      7
265 #define PG_GLOBAL_BIT   8
266 #define PG_PSE_PAT_BIT  12
267 #define PG_PKRU_BIT     59
268 #define PG_NX_BIT       63
269 
270 #define PG_PRESENT_MASK  (1 << PG_PRESENT_BIT)
271 #define PG_RW_MASK       (1 << PG_RW_BIT)
272 #define PG_USER_MASK     (1 << PG_USER_BIT)
273 #define PG_PWT_MASK      (1 << PG_PWT_BIT)
274 #define PG_PCD_MASK      (1 << PG_PCD_BIT)
275 #define PG_ACCESSED_MASK (1 << PG_ACCESSED_BIT)
276 #define PG_DIRTY_MASK    (1 << PG_DIRTY_BIT)
277 #define PG_PSE_MASK      (1 << PG_PSE_BIT)
278 #define PG_GLOBAL_MASK   (1 << PG_GLOBAL_BIT)
279 #define PG_PSE_PAT_MASK  (1 << PG_PSE_PAT_BIT)
280 #define PG_ADDRESS_MASK  0x000ffffffffff000LL
281 #define PG_HI_RSVD_MASK  (PG_ADDRESS_MASK & ~PHYS_ADDR_MASK)
282 #define PG_HI_USER_MASK  0x7ff0000000000000LL
283 #define PG_PKRU_MASK     (15ULL << PG_PKRU_BIT)
284 #define PG_NX_MASK       (1ULL << PG_NX_BIT)
285 
286 #define PG_ERROR_W_BIT     1
287 
288 #define PG_ERROR_P_MASK    0x01
289 #define PG_ERROR_W_MASK    (1 << PG_ERROR_W_BIT)
290 #define PG_ERROR_U_MASK    0x04
291 #define PG_ERROR_RSVD_MASK 0x08
292 #define PG_ERROR_I_D_MASK  0x10
293 #define PG_ERROR_PK_MASK   0x20
294 
295 #define MCG_CTL_P       (1ULL<<8)   /* MCG_CAP register available */
296 #define MCG_SER_P       (1ULL<<24) /* MCA recovery/new status bits */
297 #define MCG_LMCE_P      (1ULL<<27) /* Local Machine Check Supported */
298 
299 #define MCE_CAP_DEF     (MCG_CTL_P|MCG_SER_P)
300 #define MCE_BANKS_DEF   10
301 
302 #define MCG_CAP_BANKS_MASK 0xff
303 
304 #define MCG_STATUS_RIPV (1ULL<<0)   /* restart ip valid */
305 #define MCG_STATUS_EIPV (1ULL<<1)   /* ip points to correct instruction */
306 #define MCG_STATUS_MCIP (1ULL<<2)   /* machine check in progress */
307 #define MCG_STATUS_LMCE (1ULL<<3)   /* Local MCE signaled */
308 
309 #define MCG_EXT_CTL_LMCE_EN (1ULL<<0) /* Local MCE enabled */
310 
311 #define MCI_STATUS_VAL   (1ULL<<63)  /* valid error */
312 #define MCI_STATUS_OVER  (1ULL<<62)  /* previous errors lost */
313 #define MCI_STATUS_UC    (1ULL<<61)  /* uncorrected error */
314 #define MCI_STATUS_EN    (1ULL<<60)  /* error enabled */
315 #define MCI_STATUS_MISCV (1ULL<<59)  /* misc error reg. valid */
316 #define MCI_STATUS_ADDRV (1ULL<<58)  /* addr reg. valid */
317 #define MCI_STATUS_PCC   (1ULL<<57)  /* processor context corrupt */
318 #define MCI_STATUS_S     (1ULL<<56)  /* Signaled machine check */
319 #define MCI_STATUS_AR    (1ULL<<55)  /* Action required */
320 
321 /* MISC register defines */
322 #define MCM_ADDR_SEGOFF  0      /* segment offset */
323 #define MCM_ADDR_LINEAR  1      /* linear address */
324 #define MCM_ADDR_PHYS    2      /* physical address */
325 #define MCM_ADDR_MEM     3      /* memory address */
326 #define MCM_ADDR_GENERIC 7      /* generic */
327 
328 #define MSR_IA32_TSC                    0x10
329 #define MSR_IA32_APICBASE               0x1b
330 #define MSR_IA32_APICBASE_BSP           (1<<8)
331 #define MSR_IA32_APICBASE_ENABLE        (1<<11)
332 #define MSR_IA32_APICBASE_EXTD          (1 << 10)
333 #define MSR_IA32_APICBASE_BASE          (0xfffffU<<12)
334 #define MSR_IA32_FEATURE_CONTROL        0x0000003a
335 #define MSR_TSC_ADJUST                  0x0000003b
336 #define MSR_IA32_TSCDEADLINE            0x6e0
337 
338 #define FEATURE_CONTROL_LOCKED                    (1<<0)
339 #define FEATURE_CONTROL_VMXON_ENABLED_OUTSIDE_SMX (1<<2)
340 #define FEATURE_CONTROL_LMCE                      (1<<20)
341 
342 #define MSR_P6_PERFCTR0                 0xc1
343 
344 #define MSR_IA32_SMBASE                 0x9e
345 #define MSR_MTRRcap                     0xfe
346 #define MSR_MTRRcap_VCNT                8
347 #define MSR_MTRRcap_FIXRANGE_SUPPORT    (1 << 8)
348 #define MSR_MTRRcap_WC_SUPPORTED        (1 << 10)
349 
350 #define MSR_IA32_SYSENTER_CS            0x174
351 #define MSR_IA32_SYSENTER_ESP           0x175
352 #define MSR_IA32_SYSENTER_EIP           0x176
353 
354 #define MSR_MCG_CAP                     0x179
355 #define MSR_MCG_STATUS                  0x17a
356 #define MSR_MCG_CTL                     0x17b
357 #define MSR_MCG_EXT_CTL                 0x4d0
358 
359 #define MSR_P6_EVNTSEL0                 0x186
360 
361 #define MSR_IA32_PERF_STATUS            0x198
362 
363 #define MSR_IA32_MISC_ENABLE            0x1a0
364 /* Indicates good rep/movs microcode on some processors: */
365 #define MSR_IA32_MISC_ENABLE_DEFAULT    1
366 
367 #define MSR_MTRRphysBase(reg)           (0x200 + 2 * (reg))
368 #define MSR_MTRRphysMask(reg)           (0x200 + 2 * (reg) + 1)
369 
370 #define MSR_MTRRphysIndex(addr)         ((((addr) & ~1u) - 0x200) / 2)
371 
372 #define MSR_MTRRfix64K_00000            0x250
373 #define MSR_MTRRfix16K_80000            0x258
374 #define MSR_MTRRfix16K_A0000            0x259
375 #define MSR_MTRRfix4K_C0000             0x268
376 #define MSR_MTRRfix4K_C8000             0x269
377 #define MSR_MTRRfix4K_D0000             0x26a
378 #define MSR_MTRRfix4K_D8000             0x26b
379 #define MSR_MTRRfix4K_E0000             0x26c
380 #define MSR_MTRRfix4K_E8000             0x26d
381 #define MSR_MTRRfix4K_F0000             0x26e
382 #define MSR_MTRRfix4K_F8000             0x26f
383 
384 #define MSR_PAT                         0x277
385 
386 #define MSR_MTRRdefType                 0x2ff
387 
388 #define MSR_CORE_PERF_FIXED_CTR0        0x309
389 #define MSR_CORE_PERF_FIXED_CTR1        0x30a
390 #define MSR_CORE_PERF_FIXED_CTR2        0x30b
391 #define MSR_CORE_PERF_FIXED_CTR_CTRL    0x38d
392 #define MSR_CORE_PERF_GLOBAL_STATUS     0x38e
393 #define MSR_CORE_PERF_GLOBAL_CTRL       0x38f
394 #define MSR_CORE_PERF_GLOBAL_OVF_CTRL   0x390
395 
396 #define MSR_MC0_CTL                     0x400
397 #define MSR_MC0_STATUS                  0x401
398 #define MSR_MC0_ADDR                    0x402
399 #define MSR_MC0_MISC                    0x403
400 
401 #define MSR_EFER                        0xc0000080
402 
403 #define MSR_EFER_SCE   (1 << 0)
404 #define MSR_EFER_LME   (1 << 8)
405 #define MSR_EFER_LMA   (1 << 10)
406 #define MSR_EFER_NXE   (1 << 11)
407 #define MSR_EFER_SVME  (1 << 12)
408 #define MSR_EFER_FFXSR (1 << 14)
409 
410 #define MSR_STAR                        0xc0000081
411 #define MSR_LSTAR                       0xc0000082
412 #define MSR_CSTAR                       0xc0000083
413 #define MSR_FMASK                       0xc0000084
414 #define MSR_FSBASE                      0xc0000100
415 #define MSR_GSBASE                      0xc0000101
416 #define MSR_KERNELGSBASE                0xc0000102
417 #define MSR_TSC_AUX                     0xc0000103
418 
419 #define MSR_VM_HSAVE_PA                 0xc0010117
420 
421 #define MSR_IA32_BNDCFGS                0x00000d90
422 #define MSR_IA32_XSS                    0x00000da0
423 
424 #define XSTATE_FP_BIT                   0
425 #define XSTATE_SSE_BIT                  1
426 #define XSTATE_YMM_BIT                  2
427 #define XSTATE_BNDREGS_BIT              3
428 #define XSTATE_BNDCSR_BIT               4
429 #define XSTATE_OPMASK_BIT               5
430 #define XSTATE_ZMM_Hi256_BIT            6
431 #define XSTATE_Hi16_ZMM_BIT             7
432 #define XSTATE_PKRU_BIT                 9
433 
434 #define XSTATE_FP_MASK                  (1ULL << XSTATE_FP_BIT)
435 #define XSTATE_SSE_MASK                 (1ULL << XSTATE_SSE_BIT)
436 #define XSTATE_YMM_MASK                 (1ULL << XSTATE_YMM_BIT)
437 #define XSTATE_BNDREGS_MASK             (1ULL << XSTATE_BNDREGS_BIT)
438 #define XSTATE_BNDCSR_MASK              (1ULL << XSTATE_BNDCSR_BIT)
439 #define XSTATE_OPMASK_MASK              (1ULL << XSTATE_OPMASK_BIT)
440 #define XSTATE_ZMM_Hi256_MASK           (1ULL << XSTATE_ZMM_Hi256_BIT)
441 #define XSTATE_Hi16_ZMM_MASK            (1ULL << XSTATE_Hi16_ZMM_BIT)
442 #define XSTATE_PKRU_MASK                (1ULL << XSTATE_PKRU_BIT)
443 
444 /* CPUID feature words */
445 typedef enum FeatureWord {
446     FEAT_1_EDX,         /* CPUID[1].EDX */
447     FEAT_1_ECX,         /* CPUID[1].ECX */
448     FEAT_7_0_EBX,       /* CPUID[EAX=7,ECX=0].EBX */
449     FEAT_7_0_ECX,       /* CPUID[EAX=7,ECX=0].ECX */
450     FEAT_7_0_EDX,       /* CPUID[EAX=7,ECX=0].EDX */
451     FEAT_8000_0001_EDX, /* CPUID[8000_0001].EDX */
452     FEAT_8000_0001_ECX, /* CPUID[8000_0001].ECX */
453     FEAT_8000_0007_EDX, /* CPUID[8000_0007].EDX */
454     FEAT_C000_0001_EDX, /* CPUID[C000_0001].EDX */
455     FEAT_KVM,           /* CPUID[4000_0001].EAX (KVM_CPUID_FEATURES) */
456     FEAT_HYPERV_EAX,    /* CPUID[4000_0003].EAX */
457     FEAT_HYPERV_EBX,    /* CPUID[4000_0003].EBX */
458     FEAT_HYPERV_EDX,    /* CPUID[4000_0003].EDX */
459     FEAT_SVM,           /* CPUID[8000_000A].EDX */
460     FEAT_XSAVE,         /* CPUID[EAX=0xd,ECX=1].EAX */
461     FEAT_6_EAX,         /* CPUID[6].EAX */
462     FEAT_XSAVE_COMP_LO, /* CPUID[EAX=0xd,ECX=0].EAX */
463     FEAT_XSAVE_COMP_HI, /* CPUID[EAX=0xd,ECX=0].EDX */
464     FEATURE_WORDS,
465 } FeatureWord;
466 
467 typedef uint32_t FeatureWordArray[FEATURE_WORDS];
468 
469 /* cpuid_features bits */
470 #define CPUID_FP87 (1U << 0)
471 #define CPUID_VME  (1U << 1)
472 #define CPUID_DE   (1U << 2)
473 #define CPUID_PSE  (1U << 3)
474 #define CPUID_TSC  (1U << 4)
475 #define CPUID_MSR  (1U << 5)
476 #define CPUID_PAE  (1U << 6)
477 #define CPUID_MCE  (1U << 7)
478 #define CPUID_CX8  (1U << 8)
479 #define CPUID_APIC (1U << 9)
480 #define CPUID_SEP  (1U << 11) /* sysenter/sysexit */
481 #define CPUID_MTRR (1U << 12)
482 #define CPUID_PGE  (1U << 13)
483 #define CPUID_MCA  (1U << 14)
484 #define CPUID_CMOV (1U << 15)
485 #define CPUID_PAT  (1U << 16)
486 #define CPUID_PSE36   (1U << 17)
487 #define CPUID_PN   (1U << 18)
488 #define CPUID_CLFLUSH (1U << 19)
489 #define CPUID_DTS (1U << 21)
490 #define CPUID_ACPI (1U << 22)
491 #define CPUID_MMX  (1U << 23)
492 #define CPUID_FXSR (1U << 24)
493 #define CPUID_SSE  (1U << 25)
494 #define CPUID_SSE2 (1U << 26)
495 #define CPUID_SS (1U << 27)
496 #define CPUID_HT (1U << 28)
497 #define CPUID_TM (1U << 29)
498 #define CPUID_IA64 (1U << 30)
499 #define CPUID_PBE (1U << 31)
500 
501 #define CPUID_EXT_SSE3     (1U << 0)
502 #define CPUID_EXT_PCLMULQDQ (1U << 1)
503 #define CPUID_EXT_DTES64   (1U << 2)
504 #define CPUID_EXT_MONITOR  (1U << 3)
505 #define CPUID_EXT_DSCPL    (1U << 4)
506 #define CPUID_EXT_VMX      (1U << 5)
507 #define CPUID_EXT_SMX      (1U << 6)
508 #define CPUID_EXT_EST      (1U << 7)
509 #define CPUID_EXT_TM2      (1U << 8)
510 #define CPUID_EXT_SSSE3    (1U << 9)
511 #define CPUID_EXT_CID      (1U << 10)
512 #define CPUID_EXT_FMA      (1U << 12)
513 #define CPUID_EXT_CX16     (1U << 13)
514 #define CPUID_EXT_XTPR     (1U << 14)
515 #define CPUID_EXT_PDCM     (1U << 15)
516 #define CPUID_EXT_PCID     (1U << 17)
517 #define CPUID_EXT_DCA      (1U << 18)
518 #define CPUID_EXT_SSE41    (1U << 19)
519 #define CPUID_EXT_SSE42    (1U << 20)
520 #define CPUID_EXT_X2APIC   (1U << 21)
521 #define CPUID_EXT_MOVBE    (1U << 22)
522 #define CPUID_EXT_POPCNT   (1U << 23)
523 #define CPUID_EXT_TSC_DEADLINE_TIMER (1U << 24)
524 #define CPUID_EXT_AES      (1U << 25)
525 #define CPUID_EXT_XSAVE    (1U << 26)
526 #define CPUID_EXT_OSXSAVE  (1U << 27)
527 #define CPUID_EXT_AVX      (1U << 28)
528 #define CPUID_EXT_F16C     (1U << 29)
529 #define CPUID_EXT_RDRAND   (1U << 30)
530 #define CPUID_EXT_HYPERVISOR  (1U << 31)
531 
532 #define CPUID_EXT2_FPU     (1U << 0)
533 #define CPUID_EXT2_VME     (1U << 1)
534 #define CPUID_EXT2_DE      (1U << 2)
535 #define CPUID_EXT2_PSE     (1U << 3)
536 #define CPUID_EXT2_TSC     (1U << 4)
537 #define CPUID_EXT2_MSR     (1U << 5)
538 #define CPUID_EXT2_PAE     (1U << 6)
539 #define CPUID_EXT2_MCE     (1U << 7)
540 #define CPUID_EXT2_CX8     (1U << 8)
541 #define CPUID_EXT2_APIC    (1U << 9)
542 #define CPUID_EXT2_SYSCALL (1U << 11)
543 #define CPUID_EXT2_MTRR    (1U << 12)
544 #define CPUID_EXT2_PGE     (1U << 13)
545 #define CPUID_EXT2_MCA     (1U << 14)
546 #define CPUID_EXT2_CMOV    (1U << 15)
547 #define CPUID_EXT2_PAT     (1U << 16)
548 #define CPUID_EXT2_PSE36   (1U << 17)
549 #define CPUID_EXT2_MP      (1U << 19)
550 #define CPUID_EXT2_NX      (1U << 20)
551 #define CPUID_EXT2_MMXEXT  (1U << 22)
552 #define CPUID_EXT2_MMX     (1U << 23)
553 #define CPUID_EXT2_FXSR    (1U << 24)
554 #define CPUID_EXT2_FFXSR   (1U << 25)
555 #define CPUID_EXT2_PDPE1GB (1U << 26)
556 #define CPUID_EXT2_RDTSCP  (1U << 27)
557 #define CPUID_EXT2_LM      (1U << 29)
558 #define CPUID_EXT2_3DNOWEXT (1U << 30)
559 #define CPUID_EXT2_3DNOW   (1U << 31)
560 
561 /* CPUID[8000_0001].EDX bits that are aliase of CPUID[1].EDX bits on AMD CPUs */
562 #define CPUID_EXT2_AMD_ALIASES (CPUID_EXT2_FPU | CPUID_EXT2_VME | \
563                                 CPUID_EXT2_DE | CPUID_EXT2_PSE | \
564                                 CPUID_EXT2_TSC | CPUID_EXT2_MSR | \
565                                 CPUID_EXT2_PAE | CPUID_EXT2_MCE | \
566                                 CPUID_EXT2_CX8 | CPUID_EXT2_APIC | \
567                                 CPUID_EXT2_MTRR | CPUID_EXT2_PGE | \
568                                 CPUID_EXT2_MCA | CPUID_EXT2_CMOV | \
569                                 CPUID_EXT2_PAT | CPUID_EXT2_PSE36 | \
570                                 CPUID_EXT2_MMX | CPUID_EXT2_FXSR)
571 
572 #define CPUID_EXT3_LAHF_LM (1U << 0)
573 #define CPUID_EXT3_CMP_LEG (1U << 1)
574 #define CPUID_EXT3_SVM     (1U << 2)
575 #define CPUID_EXT3_EXTAPIC (1U << 3)
576 #define CPUID_EXT3_CR8LEG  (1U << 4)
577 #define CPUID_EXT3_ABM     (1U << 5)
578 #define CPUID_EXT3_SSE4A   (1U << 6)
579 #define CPUID_EXT3_MISALIGNSSE (1U << 7)
580 #define CPUID_EXT3_3DNOWPREFETCH (1U << 8)
581 #define CPUID_EXT3_OSVW    (1U << 9)
582 #define CPUID_EXT3_IBS     (1U << 10)
583 #define CPUID_EXT3_XOP     (1U << 11)
584 #define CPUID_EXT3_SKINIT  (1U << 12)
585 #define CPUID_EXT3_WDT     (1U << 13)
586 #define CPUID_EXT3_LWP     (1U << 15)
587 #define CPUID_EXT3_FMA4    (1U << 16)
588 #define CPUID_EXT3_TCE     (1U << 17)
589 #define CPUID_EXT3_NODEID  (1U << 19)
590 #define CPUID_EXT3_TBM     (1U << 21)
591 #define CPUID_EXT3_TOPOEXT (1U << 22)
592 #define CPUID_EXT3_PERFCORE (1U << 23)
593 #define CPUID_EXT3_PERFNB  (1U << 24)
594 
595 #define CPUID_SVM_NPT          (1U << 0)
596 #define CPUID_SVM_LBRV         (1U << 1)
597 #define CPUID_SVM_SVMLOCK      (1U << 2)
598 #define CPUID_SVM_NRIPSAVE     (1U << 3)
599 #define CPUID_SVM_TSCSCALE     (1U << 4)
600 #define CPUID_SVM_VMCBCLEAN    (1U << 5)
601 #define CPUID_SVM_FLUSHASID    (1U << 6)
602 #define CPUID_SVM_DECODEASSIST (1U << 7)
603 #define CPUID_SVM_PAUSEFILTER  (1U << 10)
604 #define CPUID_SVM_PFTHRESHOLD  (1U << 12)
605 
606 #define CPUID_7_0_EBX_FSGSBASE (1U << 0)
607 #define CPUID_7_0_EBX_BMI1     (1U << 3)
608 #define CPUID_7_0_EBX_HLE      (1U << 4)
609 #define CPUID_7_0_EBX_AVX2     (1U << 5)
610 #define CPUID_7_0_EBX_SMEP     (1U << 7)
611 #define CPUID_7_0_EBX_BMI2     (1U << 8)
612 #define CPUID_7_0_EBX_ERMS     (1U << 9)
613 #define CPUID_7_0_EBX_INVPCID  (1U << 10)
614 #define CPUID_7_0_EBX_RTM      (1U << 11)
615 #define CPUID_7_0_EBX_MPX      (1U << 14)
616 #define CPUID_7_0_EBX_AVX512F  (1U << 16) /* AVX-512 Foundation */
617 #define CPUID_7_0_EBX_AVX512DQ (1U << 17) /* AVX-512 Doubleword & Quadword Instrs */
618 #define CPUID_7_0_EBX_RDSEED   (1U << 18)
619 #define CPUID_7_0_EBX_ADX      (1U << 19)
620 #define CPUID_7_0_EBX_SMAP     (1U << 20)
621 #define CPUID_7_0_EBX_AVX512IFMA (1U << 21) /* AVX-512 Integer Fused Multiply Add */
622 #define CPUID_7_0_EBX_PCOMMIT  (1U << 22) /* Persistent Commit */
623 #define CPUID_7_0_EBX_CLFLUSHOPT (1U << 23) /* Flush a Cache Line Optimized */
624 #define CPUID_7_0_EBX_CLWB     (1U << 24) /* Cache Line Write Back */
625 #define CPUID_7_0_EBX_AVX512PF (1U << 26) /* AVX-512 Prefetch */
626 #define CPUID_7_0_EBX_AVX512ER (1U << 27) /* AVX-512 Exponential and Reciprocal */
627 #define CPUID_7_0_EBX_AVX512CD (1U << 28) /* AVX-512 Conflict Detection */
628 #define CPUID_7_0_EBX_SHA_NI   (1U << 29) /* SHA1/SHA256 Instruction Extensions */
629 #define CPUID_7_0_EBX_AVX512BW (1U << 30) /* AVX-512 Byte and Word Instructions */
630 #define CPUID_7_0_EBX_AVX512VL (1U << 31) /* AVX-512 Vector Length Extensions */
631 
632 #define CPUID_7_0_ECX_VBMI     (1U << 1)  /* AVX-512 Vector Byte Manipulation Instrs */
633 #define CPUID_7_0_ECX_UMIP     (1U << 2)
634 #define CPUID_7_0_ECX_PKU      (1U << 3)
635 #define CPUID_7_0_ECX_OSPKE    (1U << 4)
636 #define CPUID_7_0_ECX_AVX512_VPOPCNTDQ (1U << 14) /* POPCNT for vectors of DW/QW */
637 #define CPUID_7_0_ECX_LA57     (1U << 16)
638 #define CPUID_7_0_ECX_RDPID    (1U << 22)
639 
640 #define CPUID_7_0_EDX_AVX512_4VNNIW (1U << 2) /* AVX512 Neural Network Instructions */
641 #define CPUID_7_0_EDX_AVX512_4FMAPS (1U << 3) /* AVX512 Multiply Accumulation Single Precision */
642 
643 #define CPUID_XSAVE_XSAVEOPT   (1U << 0)
644 #define CPUID_XSAVE_XSAVEC     (1U << 1)
645 #define CPUID_XSAVE_XGETBV1    (1U << 2)
646 #define CPUID_XSAVE_XSAVES     (1U << 3)
647 
648 #define CPUID_6_EAX_ARAT       (1U << 2)
649 
650 /* CPUID[0x80000007].EDX flags: */
651 #define CPUID_APM_INVTSC       (1U << 8)
652 
653 #define CPUID_VENDOR_SZ      12
654 
655 #define CPUID_VENDOR_INTEL_1 0x756e6547 /* "Genu" */
656 #define CPUID_VENDOR_INTEL_2 0x49656e69 /* "ineI" */
657 #define CPUID_VENDOR_INTEL_3 0x6c65746e /* "ntel" */
658 #define CPUID_VENDOR_INTEL "GenuineIntel"
659 
660 #define CPUID_VENDOR_AMD_1   0x68747541 /* "Auth" */
661 #define CPUID_VENDOR_AMD_2   0x69746e65 /* "enti" */
662 #define CPUID_VENDOR_AMD_3   0x444d4163 /* "cAMD" */
663 #define CPUID_VENDOR_AMD   "AuthenticAMD"
664 
665 #define CPUID_VENDOR_VIA   "CentaurHauls"
666 
667 #define CPUID_MWAIT_IBE     (1U << 1) /* Interrupts can exit capability */
668 #define CPUID_MWAIT_EMX     (1U << 0) /* enumeration supported */
669 
670 /* CPUID[0xB].ECX level types */
671 #define CPUID_TOPOLOGY_LEVEL_INVALID  (0U << 8)
672 #define CPUID_TOPOLOGY_LEVEL_SMT      (1U << 8)
673 #define CPUID_TOPOLOGY_LEVEL_CORE     (2U << 8)
674 
675 #ifndef HYPERV_SPINLOCK_NEVER_RETRY
676 #define HYPERV_SPINLOCK_NEVER_RETRY             0xFFFFFFFF
677 #endif
678 
679 #define EXCP00_DIVZ	0
680 #define EXCP01_DB	1
681 #define EXCP02_NMI	2
682 #define EXCP03_INT3	3
683 #define EXCP04_INTO	4
684 #define EXCP05_BOUND	5
685 #define EXCP06_ILLOP	6
686 #define EXCP07_PREX	7
687 #define EXCP08_DBLE	8
688 #define EXCP09_XERR	9
689 #define EXCP0A_TSS	10
690 #define EXCP0B_NOSEG	11
691 #define EXCP0C_STACK	12
692 #define EXCP0D_GPF	13
693 #define EXCP0E_PAGE	14
694 #define EXCP10_COPR	16
695 #define EXCP11_ALGN	17
696 #define EXCP12_MCHK	18
697 
698 #define EXCP_SYSCALL    0x100 /* only happens in user only emulation
699                                  for syscall instruction */
700 #define EXCP_VMEXIT     0x100
701 
702 /* i386-specific interrupt pending bits.  */
703 #define CPU_INTERRUPT_POLL      CPU_INTERRUPT_TGT_EXT_1
704 #define CPU_INTERRUPT_SMI       CPU_INTERRUPT_TGT_EXT_2
705 #define CPU_INTERRUPT_NMI       CPU_INTERRUPT_TGT_EXT_3
706 #define CPU_INTERRUPT_MCE       CPU_INTERRUPT_TGT_EXT_4
707 #define CPU_INTERRUPT_VIRQ      CPU_INTERRUPT_TGT_INT_0
708 #define CPU_INTERRUPT_SIPI      CPU_INTERRUPT_TGT_INT_1
709 #define CPU_INTERRUPT_TPR       CPU_INTERRUPT_TGT_INT_2
710 
711 /* Use a clearer name for this.  */
712 #define CPU_INTERRUPT_INIT      CPU_INTERRUPT_RESET
713 
714 /* Instead of computing the condition codes after each x86 instruction,
715  * QEMU just stores one operand (called CC_SRC), the result
716  * (called CC_DST) and the type of operation (called CC_OP). When the
717  * condition codes are needed, the condition codes can be calculated
718  * using this information. Condition codes are not generated if they
719  * are only needed for conditional branches.
720  */
721 typedef enum {
722     CC_OP_DYNAMIC, /* must use dynamic code to get cc_op */
723     CC_OP_EFLAGS,  /* all cc are explicitly computed, CC_SRC = flags */
724 
725     CC_OP_MULB, /* modify all flags, C, O = (CC_SRC != 0) */
726     CC_OP_MULW,
727     CC_OP_MULL,
728     CC_OP_MULQ,
729 
730     CC_OP_ADDB, /* modify all flags, CC_DST = res, CC_SRC = src1 */
731     CC_OP_ADDW,
732     CC_OP_ADDL,
733     CC_OP_ADDQ,
734 
735     CC_OP_ADCB, /* modify all flags, CC_DST = res, CC_SRC = src1 */
736     CC_OP_ADCW,
737     CC_OP_ADCL,
738     CC_OP_ADCQ,
739 
740     CC_OP_SUBB, /* modify all flags, CC_DST = res, CC_SRC = src1 */
741     CC_OP_SUBW,
742     CC_OP_SUBL,
743     CC_OP_SUBQ,
744 
745     CC_OP_SBBB, /* modify all flags, CC_DST = res, CC_SRC = src1 */
746     CC_OP_SBBW,
747     CC_OP_SBBL,
748     CC_OP_SBBQ,
749 
750     CC_OP_LOGICB, /* modify all flags, CC_DST = res */
751     CC_OP_LOGICW,
752     CC_OP_LOGICL,
753     CC_OP_LOGICQ,
754 
755     CC_OP_INCB, /* modify all flags except, CC_DST = res, CC_SRC = C */
756     CC_OP_INCW,
757     CC_OP_INCL,
758     CC_OP_INCQ,
759 
760     CC_OP_DECB, /* modify all flags except, CC_DST = res, CC_SRC = C  */
761     CC_OP_DECW,
762     CC_OP_DECL,
763     CC_OP_DECQ,
764 
765     CC_OP_SHLB, /* modify all flags, CC_DST = res, CC_SRC.msb = C */
766     CC_OP_SHLW,
767     CC_OP_SHLL,
768     CC_OP_SHLQ,
769 
770     CC_OP_SARB, /* modify all flags, CC_DST = res, CC_SRC.lsb = C */
771     CC_OP_SARW,
772     CC_OP_SARL,
773     CC_OP_SARQ,
774 
775     CC_OP_BMILGB, /* Z,S via CC_DST, C = SRC==0; O=0; P,A undefined */
776     CC_OP_BMILGW,
777     CC_OP_BMILGL,
778     CC_OP_BMILGQ,
779 
780     CC_OP_ADCX, /* CC_DST = C, CC_SRC = rest.  */
781     CC_OP_ADOX, /* CC_DST = O, CC_SRC = rest.  */
782     CC_OP_ADCOX, /* CC_DST = C, CC_SRC2 = O, CC_SRC = rest.  */
783 
784     CC_OP_CLR, /* Z set, all other flags clear.  */
785     CC_OP_POPCNT, /* Z via CC_SRC, all other flags clear.  */
786 
787     CC_OP_NB,
788 } CCOp;
789 
790 typedef struct SegmentCache {
791     uint32_t selector;
792     target_ulong base;
793     uint32_t limit;
794     uint32_t flags;
795 } SegmentCache;
796 
797 #define MMREG_UNION(n, bits)        \
798     union n {                       \
799         uint8_t  _b_##n[(bits)/8];  \
800         uint16_t _w_##n[(bits)/16]; \
801         uint32_t _l_##n[(bits)/32]; \
802         uint64_t _q_##n[(bits)/64]; \
803         float32  _s_##n[(bits)/32]; \
804         float64  _d_##n[(bits)/64]; \
805     }
806 
807 typedef MMREG_UNION(ZMMReg, 512) ZMMReg;
808 typedef MMREG_UNION(MMXReg, 64)  MMXReg;
809 
810 typedef struct BNDReg {
811     uint64_t lb;
812     uint64_t ub;
813 } BNDReg;
814 
815 typedef struct BNDCSReg {
816     uint64_t cfgu;
817     uint64_t sts;
818 } BNDCSReg;
819 
820 #define BNDCFG_ENABLE       1ULL
821 #define BNDCFG_BNDPRESERVE  2ULL
822 #define BNDCFG_BDIR_MASK    TARGET_PAGE_MASK
823 
824 #ifdef HOST_WORDS_BIGENDIAN
825 #define ZMM_B(n) _b_ZMMReg[63 - (n)]
826 #define ZMM_W(n) _w_ZMMReg[31 - (n)]
827 #define ZMM_L(n) _l_ZMMReg[15 - (n)]
828 #define ZMM_S(n) _s_ZMMReg[15 - (n)]
829 #define ZMM_Q(n) _q_ZMMReg[7 - (n)]
830 #define ZMM_D(n) _d_ZMMReg[7 - (n)]
831 
832 #define MMX_B(n) _b_MMXReg[7 - (n)]
833 #define MMX_W(n) _w_MMXReg[3 - (n)]
834 #define MMX_L(n) _l_MMXReg[1 - (n)]
835 #define MMX_S(n) _s_MMXReg[1 - (n)]
836 #else
837 #define ZMM_B(n) _b_ZMMReg[n]
838 #define ZMM_W(n) _w_ZMMReg[n]
839 #define ZMM_L(n) _l_ZMMReg[n]
840 #define ZMM_S(n) _s_ZMMReg[n]
841 #define ZMM_Q(n) _q_ZMMReg[n]
842 #define ZMM_D(n) _d_ZMMReg[n]
843 
844 #define MMX_B(n) _b_MMXReg[n]
845 #define MMX_W(n) _w_MMXReg[n]
846 #define MMX_L(n) _l_MMXReg[n]
847 #define MMX_S(n) _s_MMXReg[n]
848 #endif
849 #define MMX_Q(n) _q_MMXReg[n]
850 
851 typedef union {
852     floatx80 d __attribute__((aligned(16)));
853     MMXReg mmx;
854 } FPReg;
855 
856 typedef struct {
857     uint64_t base;
858     uint64_t mask;
859 } MTRRVar;
860 
861 #define CPU_NB_REGS64 16
862 #define CPU_NB_REGS32 8
863 
864 #ifdef TARGET_X86_64
865 #define CPU_NB_REGS CPU_NB_REGS64
866 #else
867 #define CPU_NB_REGS CPU_NB_REGS32
868 #endif
869 
870 #define MAX_FIXED_COUNTERS 3
871 #define MAX_GP_COUNTERS    (MSR_IA32_PERF_STATUS - MSR_P6_EVNTSEL0)
872 
873 #define NB_MMU_MODES 3
874 #define TARGET_INSN_START_EXTRA_WORDS 1
875 
876 #define NB_OPMASK_REGS 8
877 
878 /* CPU can't have 0xFFFFFFFF APIC ID, use that value to distinguish
879  * that APIC ID hasn't been set yet
880  */
881 #define UNASSIGNED_APIC_ID 0xFFFFFFFF
882 
883 typedef union X86LegacyXSaveArea {
884     struct {
885         uint16_t fcw;
886         uint16_t fsw;
887         uint8_t ftw;
888         uint8_t reserved;
889         uint16_t fpop;
890         uint64_t fpip;
891         uint64_t fpdp;
892         uint32_t mxcsr;
893         uint32_t mxcsr_mask;
894         FPReg fpregs[8];
895         uint8_t xmm_regs[16][16];
896     };
897     uint8_t data[512];
898 } X86LegacyXSaveArea;
899 
900 typedef struct X86XSaveHeader {
901     uint64_t xstate_bv;
902     uint64_t xcomp_bv;
903     uint64_t reserve0;
904     uint8_t reserved[40];
905 } X86XSaveHeader;
906 
907 /* Ext. save area 2: AVX State */
908 typedef struct XSaveAVX {
909     uint8_t ymmh[16][16];
910 } XSaveAVX;
911 
912 /* Ext. save area 3: BNDREG */
913 typedef struct XSaveBNDREG {
914     BNDReg bnd_regs[4];
915 } XSaveBNDREG;
916 
917 /* Ext. save area 4: BNDCSR */
918 typedef union XSaveBNDCSR {
919     BNDCSReg bndcsr;
920     uint8_t data[64];
921 } XSaveBNDCSR;
922 
923 /* Ext. save area 5: Opmask */
924 typedef struct XSaveOpmask {
925     uint64_t opmask_regs[NB_OPMASK_REGS];
926 } XSaveOpmask;
927 
928 /* Ext. save area 6: ZMM_Hi256 */
929 typedef struct XSaveZMM_Hi256 {
930     uint8_t zmm_hi256[16][32];
931 } XSaveZMM_Hi256;
932 
933 /* Ext. save area 7: Hi16_ZMM */
934 typedef struct XSaveHi16_ZMM {
935     uint8_t hi16_zmm[16][64];
936 } XSaveHi16_ZMM;
937 
938 /* Ext. save area 9: PKRU state */
939 typedef struct XSavePKRU {
940     uint32_t pkru;
941     uint32_t padding;
942 } XSavePKRU;
943 
944 typedef struct X86XSaveArea {
945     X86LegacyXSaveArea legacy;
946     X86XSaveHeader header;
947 
948     /* Extended save areas: */
949 
950     /* AVX State: */
951     XSaveAVX avx_state;
952     uint8_t padding[960 - 576 - sizeof(XSaveAVX)];
953     /* MPX State: */
954     XSaveBNDREG bndreg_state;
955     XSaveBNDCSR bndcsr_state;
956     /* AVX-512 State: */
957     XSaveOpmask opmask_state;
958     XSaveZMM_Hi256 zmm_hi256_state;
959     XSaveHi16_ZMM hi16_zmm_state;
960     /* PKRU State: */
961     XSavePKRU pkru_state;
962 } X86XSaveArea;
963 
964 QEMU_BUILD_BUG_ON(offsetof(X86XSaveArea, avx_state) != 0x240);
965 QEMU_BUILD_BUG_ON(sizeof(XSaveAVX) != 0x100);
966 QEMU_BUILD_BUG_ON(offsetof(X86XSaveArea, bndreg_state) != 0x3c0);
967 QEMU_BUILD_BUG_ON(sizeof(XSaveBNDREG) != 0x40);
968 QEMU_BUILD_BUG_ON(offsetof(X86XSaveArea, bndcsr_state) != 0x400);
969 QEMU_BUILD_BUG_ON(sizeof(XSaveBNDCSR) != 0x40);
970 QEMU_BUILD_BUG_ON(offsetof(X86XSaveArea, opmask_state) != 0x440);
971 QEMU_BUILD_BUG_ON(sizeof(XSaveOpmask) != 0x40);
972 QEMU_BUILD_BUG_ON(offsetof(X86XSaveArea, zmm_hi256_state) != 0x480);
973 QEMU_BUILD_BUG_ON(sizeof(XSaveZMM_Hi256) != 0x200);
974 QEMU_BUILD_BUG_ON(offsetof(X86XSaveArea, hi16_zmm_state) != 0x680);
975 QEMU_BUILD_BUG_ON(sizeof(XSaveHi16_ZMM) != 0x400);
976 QEMU_BUILD_BUG_ON(offsetof(X86XSaveArea, pkru_state) != 0xA80);
977 QEMU_BUILD_BUG_ON(sizeof(XSavePKRU) != 0x8);
978 
979 typedef enum TPRAccess {
980     TPR_ACCESS_READ,
981     TPR_ACCESS_WRITE,
982 } TPRAccess;
983 
984 typedef struct CPUX86State {
985     /* standard registers */
986     target_ulong regs[CPU_NB_REGS];
987     target_ulong eip;
988     target_ulong eflags; /* eflags register. During CPU emulation, CC
989                         flags and DF are set to zero because they are
990                         stored elsewhere */
991 
992     /* emulator internal eflags handling */
993     target_ulong cc_dst;
994     target_ulong cc_src;
995     target_ulong cc_src2;
996     uint32_t cc_op;
997     int32_t df; /* D flag : 1 if D = 0, -1 if D = 1 */
998     uint32_t hflags; /* TB flags, see HF_xxx constants. These flags
999                         are known at translation time. */
1000     uint32_t hflags2; /* various other flags, see HF2_xxx constants. */
1001 
1002     /* segments */
1003     SegmentCache segs[6]; /* selector values */
1004     SegmentCache ldt;
1005     SegmentCache tr;
1006     SegmentCache gdt; /* only base and limit are used */
1007     SegmentCache idt; /* only base and limit are used */
1008 
1009     target_ulong cr[5]; /* NOTE: cr1 is unused */
1010     int32_t a20_mask;
1011 
1012     BNDReg bnd_regs[4];
1013     BNDCSReg bndcs_regs;
1014     uint64_t msr_bndcfgs;
1015     uint64_t efer;
1016 
1017     /* Beginning of state preserved by INIT (dummy marker).  */
1018     struct {} start_init_save;
1019 
1020     /* FPU state */
1021     unsigned int fpstt; /* top of stack index */
1022     uint16_t fpus;
1023     uint16_t fpuc;
1024     uint8_t fptags[8];   /* 0 = valid, 1 = empty */
1025     FPReg fpregs[8];
1026     /* KVM-only so far */
1027     uint16_t fpop;
1028     uint64_t fpip;
1029     uint64_t fpdp;
1030 
1031     /* emulator internal variables */
1032     float_status fp_status;
1033     floatx80 ft0;
1034 
1035     float_status mmx_status; /* for 3DNow! float ops */
1036     float_status sse_status;
1037     uint32_t mxcsr;
1038     ZMMReg xmm_regs[CPU_NB_REGS == 8 ? 8 : 32];
1039     ZMMReg xmm_t0;
1040     MMXReg mmx_t0;
1041 
1042     uint64_t opmask_regs[NB_OPMASK_REGS];
1043 
1044     /* sysenter registers */
1045     uint32_t sysenter_cs;
1046     target_ulong sysenter_esp;
1047     target_ulong sysenter_eip;
1048     uint64_t star;
1049 
1050     uint64_t vm_hsave;
1051 
1052 #ifdef TARGET_X86_64
1053     target_ulong lstar;
1054     target_ulong cstar;
1055     target_ulong fmask;
1056     target_ulong kernelgsbase;
1057 #endif
1058 
1059     uint64_t tsc;
1060     uint64_t tsc_adjust;
1061     uint64_t tsc_deadline;
1062     uint64_t tsc_aux;
1063 
1064     uint64_t xcr0;
1065 
1066     uint64_t mcg_status;
1067     uint64_t msr_ia32_misc_enable;
1068     uint64_t msr_ia32_feature_control;
1069 
1070     uint64_t msr_fixed_ctr_ctrl;
1071     uint64_t msr_global_ctrl;
1072     uint64_t msr_global_status;
1073     uint64_t msr_global_ovf_ctrl;
1074     uint64_t msr_fixed_counters[MAX_FIXED_COUNTERS];
1075     uint64_t msr_gp_counters[MAX_GP_COUNTERS];
1076     uint64_t msr_gp_evtsel[MAX_GP_COUNTERS];
1077 
1078     uint64_t pat;
1079     uint32_t smbase;
1080 
1081     uint32_t pkru;
1082 
1083     /* End of state preserved by INIT (dummy marker).  */
1084     struct {} end_init_save;
1085 
1086     uint64_t system_time_msr;
1087     uint64_t wall_clock_msr;
1088     uint64_t steal_time_msr;
1089     uint64_t async_pf_en_msr;
1090     uint64_t pv_eoi_en_msr;
1091 
1092     uint64_t msr_hv_hypercall;
1093     uint64_t msr_hv_guest_os_id;
1094     uint64_t msr_hv_vapic;
1095     uint64_t msr_hv_tsc;
1096     uint64_t msr_hv_crash_params[HV_X64_MSR_CRASH_PARAMS];
1097     uint64_t msr_hv_runtime;
1098     uint64_t msr_hv_synic_control;
1099     uint64_t msr_hv_synic_version;
1100     uint64_t msr_hv_synic_evt_page;
1101     uint64_t msr_hv_synic_msg_page;
1102     uint64_t msr_hv_synic_sint[HV_SYNIC_SINT_COUNT];
1103     uint64_t msr_hv_stimer_config[HV_SYNIC_STIMER_COUNT];
1104     uint64_t msr_hv_stimer_count[HV_SYNIC_STIMER_COUNT];
1105 
1106     /* exception/interrupt handling */
1107     int error_code;
1108     int exception_is_int;
1109     target_ulong exception_next_eip;
1110     target_ulong dr[8]; /* debug registers; note dr4 and dr5 are unused */
1111     union {
1112         struct CPUBreakpoint *cpu_breakpoint[4];
1113         struct CPUWatchpoint *cpu_watchpoint[4];
1114     }; /* break/watchpoints for dr[0..3] */
1115     int old_exception;  /* exception in flight */
1116 
1117     uint64_t vm_vmcb;
1118     uint64_t tsc_offset;
1119     uint64_t intercept;
1120     uint16_t intercept_cr_read;
1121     uint16_t intercept_cr_write;
1122     uint16_t intercept_dr_read;
1123     uint16_t intercept_dr_write;
1124     uint32_t intercept_exceptions;
1125     uint8_t v_tpr;
1126 
1127     /* KVM states, automatically cleared on reset */
1128     uint8_t nmi_injected;
1129     uint8_t nmi_pending;
1130 
1131     /* Fields up to this point are cleared by a CPU reset */
1132     struct {} end_reset_fields;
1133 
1134     CPU_COMMON
1135 
1136     /* Fields after CPU_COMMON are preserved across CPU reset. */
1137 
1138     /* processor features (e.g. for CPUID insn) */
1139     /* Minimum level/xlevel/xlevel2, based on CPU model + features */
1140     uint32_t cpuid_min_level, cpuid_min_xlevel, cpuid_min_xlevel2;
1141     /* Maximum level/xlevel/xlevel2 value for auto-assignment: */
1142     uint32_t cpuid_max_level, cpuid_max_xlevel, cpuid_max_xlevel2;
1143     /* Actual level/xlevel/xlevel2 value: */
1144     uint32_t cpuid_level, cpuid_xlevel, cpuid_xlevel2;
1145     uint32_t cpuid_vendor1;
1146     uint32_t cpuid_vendor2;
1147     uint32_t cpuid_vendor3;
1148     uint32_t cpuid_version;
1149     FeatureWordArray features;
1150     uint32_t cpuid_model[12];
1151 
1152     /* MTRRs */
1153     uint64_t mtrr_fixed[11];
1154     uint64_t mtrr_deftype;
1155     MTRRVar mtrr_var[MSR_MTRRcap_VCNT];
1156 
1157     /* For KVM */
1158     uint32_t mp_state;
1159     int32_t exception_injected;
1160     int32_t interrupt_injected;
1161     uint8_t soft_interrupt;
1162     uint8_t has_error_code;
1163     uint32_t sipi_vector;
1164     bool tsc_valid;
1165     int64_t tsc_khz;
1166     int64_t user_tsc_khz; /* for sanity check only */
1167     void *kvm_xsave_buf;
1168 
1169     uint64_t mcg_cap;
1170     uint64_t mcg_ctl;
1171     uint64_t mcg_ext_ctl;
1172     uint64_t mce_banks[MCE_BANKS_DEF*4];
1173     uint64_t xstate_bv;
1174 
1175     /* vmstate */
1176     uint16_t fpus_vmstate;
1177     uint16_t fptag_vmstate;
1178     uint16_t fpregs_format_vmstate;
1179 
1180     uint64_t xss;
1181 
1182     TPRAccess tpr_access_type;
1183 } CPUX86State;
1184 
1185 struct kvm_msrs;
1186 
1187 /**
1188  * X86CPU:
1189  * @env: #CPUX86State
1190  * @migratable: If set, only migratable flags will be accepted when "enforce"
1191  * mode is used, and only migratable flags will be included in the "host"
1192  * CPU model.
1193  *
1194  * An x86 CPU.
1195  */
1196 struct X86CPU {
1197     /*< private >*/
1198     CPUState parent_obj;
1199     /*< public >*/
1200 
1201     CPUX86State env;
1202 
1203     bool hyperv_vapic;
1204     bool hyperv_relaxed_timing;
1205     int hyperv_spinlock_attempts;
1206     char *hyperv_vendor_id;
1207     bool hyperv_time;
1208     bool hyperv_crash;
1209     bool hyperv_reset;
1210     bool hyperv_vpindex;
1211     bool hyperv_runtime;
1212     bool hyperv_synic;
1213     bool hyperv_stimer;
1214     bool check_cpuid;
1215     bool enforce_cpuid;
1216     bool expose_kvm;
1217     bool migratable;
1218     bool max_features; /* Enable all supported features automatically */
1219     uint32_t apic_id;
1220 
1221     /* Enables publishing of TSC increment and Local APIC bus frequencies to
1222      * the guest OS in CPUID page 0x40000010, the same way that VMWare does. */
1223     bool vmware_cpuid_freq;
1224 
1225     /* if true the CPUID code directly forward host cache leaves to the guest */
1226     bool cache_info_passthrough;
1227 
1228     /* Features that were filtered out because of missing host capabilities */
1229     uint32_t filtered_features[FEATURE_WORDS];
1230 
1231     /* Enable PMU CPUID bits. This can't be enabled by default yet because
1232      * it doesn't have ABI stability guarantees, as it passes all PMU CPUID
1233      * bits returned by GET_SUPPORTED_CPUID (that depend on host CPU and kernel
1234      * capabilities) directly to the guest.
1235      */
1236     bool enable_pmu;
1237 
1238     /* LMCE support can be enabled/disabled via cpu option 'lmce=on/off'. It is
1239      * disabled by default to avoid breaking migration between QEMU with
1240      * different LMCE configurations.
1241      */
1242     bool enable_lmce;
1243 
1244     /* Compatibility bits for old machine types.
1245      * If true present virtual l3 cache for VM, the vcpus in the same virtual
1246      * socket share an virtual l3 cache.
1247      */
1248     bool enable_l3_cache;
1249 
1250     /* Compatibility bits for old machine types: */
1251     bool enable_cpuid_0xb;
1252 
1253     /* Enable auto level-increase for all CPUID leaves */
1254     bool full_cpuid_auto_level;
1255 
1256     /* if true fill the top bits of the MTRR_PHYSMASKn variable range */
1257     bool fill_mtrr_mask;
1258 
1259     /* if true override the phys_bits value with a value read from the host */
1260     bool host_phys_bits;
1261 
1262     /* Stop SMI delivery for migration compatibility with old machines */
1263     bool kvm_no_smi_migration;
1264 
1265     /* Number of physical address bits supported */
1266     uint32_t phys_bits;
1267 
1268     /* in order to simplify APIC support, we leave this pointer to the
1269        user */
1270     struct DeviceState *apic_state;
1271     struct MemoryRegion *cpu_as_root, *cpu_as_mem, *smram;
1272     Notifier machine_done;
1273 
1274     struct kvm_msrs *kvm_msr_buf;
1275 
1276     int32_t socket_id;
1277     int32_t core_id;
1278     int32_t thread_id;
1279 };
1280 
1281 static inline X86CPU *x86_env_get_cpu(CPUX86State *env)
1282 {
1283     return container_of(env, X86CPU, env);
1284 }
1285 
1286 #define ENV_GET_CPU(e) CPU(x86_env_get_cpu(e))
1287 
1288 #define ENV_OFFSET offsetof(X86CPU, env)
1289 
1290 #ifndef CONFIG_USER_ONLY
1291 extern struct VMStateDescription vmstate_x86_cpu;
1292 #endif
1293 
1294 /**
1295  * x86_cpu_do_interrupt:
1296  * @cpu: vCPU the interrupt is to be handled by.
1297  */
1298 void x86_cpu_do_interrupt(CPUState *cpu);
1299 bool x86_cpu_exec_interrupt(CPUState *cpu, int int_req);
1300 
1301 int x86_cpu_write_elf64_note(WriteCoreDumpFunction f, CPUState *cpu,
1302                              int cpuid, void *opaque);
1303 int x86_cpu_write_elf32_note(WriteCoreDumpFunction f, CPUState *cpu,
1304                              int cpuid, void *opaque);
1305 int x86_cpu_write_elf64_qemunote(WriteCoreDumpFunction f, CPUState *cpu,
1306                                  void *opaque);
1307 int x86_cpu_write_elf32_qemunote(WriteCoreDumpFunction f, CPUState *cpu,
1308                                  void *opaque);
1309 
1310 void x86_cpu_get_memory_mapping(CPUState *cpu, MemoryMappingList *list,
1311                                 Error **errp);
1312 
1313 void x86_cpu_dump_state(CPUState *cs, FILE *f, fprintf_function cpu_fprintf,
1314                         int flags);
1315 
1316 hwaddr x86_cpu_get_phys_page_debug(CPUState *cpu, vaddr addr);
1317 
1318 int x86_cpu_gdb_read_register(CPUState *cpu, uint8_t *buf, int reg);
1319 int x86_cpu_gdb_write_register(CPUState *cpu, uint8_t *buf, int reg);
1320 
1321 void x86_cpu_exec_enter(CPUState *cpu);
1322 void x86_cpu_exec_exit(CPUState *cpu);
1323 
1324 X86CPU *cpu_x86_init(const char *cpu_model);
1325 void x86_cpu_list(FILE *f, fprintf_function cpu_fprintf);
1326 int cpu_x86_support_mca_broadcast(CPUX86State *env);
1327 
1328 int cpu_get_pic_interrupt(CPUX86State *s);
1329 /* MSDOS compatibility mode FPU exception support */
1330 void cpu_set_ferr(CPUX86State *s);
1331 
1332 /* this function must always be used to load data in the segment
1333    cache: it synchronizes the hflags with the segment cache values */
1334 static inline void cpu_x86_load_seg_cache(CPUX86State *env,
1335                                           int seg_reg, unsigned int selector,
1336                                           target_ulong base,
1337                                           unsigned int limit,
1338                                           unsigned int flags)
1339 {
1340     SegmentCache *sc;
1341     unsigned int new_hflags;
1342 
1343     sc = &env->segs[seg_reg];
1344     sc->selector = selector;
1345     sc->base = base;
1346     sc->limit = limit;
1347     sc->flags = flags;
1348 
1349     /* update the hidden flags */
1350     {
1351         if (seg_reg == R_CS) {
1352 #ifdef TARGET_X86_64
1353             if ((env->hflags & HF_LMA_MASK) && (flags & DESC_L_MASK)) {
1354                 /* long mode */
1355                 env->hflags |= HF_CS32_MASK | HF_SS32_MASK | HF_CS64_MASK;
1356                 env->hflags &= ~(HF_ADDSEG_MASK);
1357             } else
1358 #endif
1359             {
1360                 /* legacy / compatibility case */
1361                 new_hflags = (env->segs[R_CS].flags & DESC_B_MASK)
1362                     >> (DESC_B_SHIFT - HF_CS32_SHIFT);
1363                 env->hflags = (env->hflags & ~(HF_CS32_MASK | HF_CS64_MASK)) |
1364                     new_hflags;
1365             }
1366         }
1367         if (seg_reg == R_SS) {
1368             int cpl = (flags >> DESC_DPL_SHIFT) & 3;
1369 #if HF_CPL_MASK != 3
1370 #error HF_CPL_MASK is hardcoded
1371 #endif
1372             env->hflags = (env->hflags & ~HF_CPL_MASK) | cpl;
1373         }
1374         new_hflags = (env->segs[R_SS].flags & DESC_B_MASK)
1375             >> (DESC_B_SHIFT - HF_SS32_SHIFT);
1376         if (env->hflags & HF_CS64_MASK) {
1377             /* zero base assumed for DS, ES and SS in long mode */
1378         } else if (!(env->cr[0] & CR0_PE_MASK) ||
1379                    (env->eflags & VM_MASK) ||
1380                    !(env->hflags & HF_CS32_MASK)) {
1381             /* XXX: try to avoid this test. The problem comes from the
1382                fact that is real mode or vm86 mode we only modify the
1383                'base' and 'selector' fields of the segment cache to go
1384                faster. A solution may be to force addseg to one in
1385                translate-i386.c. */
1386             new_hflags |= HF_ADDSEG_MASK;
1387         } else {
1388             new_hflags |= ((env->segs[R_DS].base |
1389                             env->segs[R_ES].base |
1390                             env->segs[R_SS].base) != 0) <<
1391                 HF_ADDSEG_SHIFT;
1392         }
1393         env->hflags = (env->hflags &
1394                        ~(HF_SS32_MASK | HF_ADDSEG_MASK)) | new_hflags;
1395     }
1396 }
1397 
1398 static inline void cpu_x86_load_seg_cache_sipi(X86CPU *cpu,
1399                                                uint8_t sipi_vector)
1400 {
1401     CPUState *cs = CPU(cpu);
1402     CPUX86State *env = &cpu->env;
1403 
1404     env->eip = 0;
1405     cpu_x86_load_seg_cache(env, R_CS, sipi_vector << 8,
1406                            sipi_vector << 12,
1407                            env->segs[R_CS].limit,
1408                            env->segs[R_CS].flags);
1409     cs->halted = 0;
1410 }
1411 
1412 int cpu_x86_get_descr_debug(CPUX86State *env, unsigned int selector,
1413                             target_ulong *base, unsigned int *limit,
1414                             unsigned int *flags);
1415 
1416 /* op_helper.c */
1417 /* used for debug or cpu save/restore */
1418 void cpu_get_fp80(uint64_t *pmant, uint16_t *pexp, floatx80 f);
1419 floatx80 cpu_set_fp80(uint64_t mant, uint16_t upper);
1420 
1421 /* cpu-exec.c */
1422 /* the following helpers are only usable in user mode simulation as
1423    they can trigger unexpected exceptions */
1424 void cpu_x86_load_seg(CPUX86State *s, int seg_reg, int selector);
1425 void cpu_x86_fsave(CPUX86State *s, target_ulong ptr, int data32);
1426 void cpu_x86_frstor(CPUX86State *s, target_ulong ptr, int data32);
1427 void cpu_x86_fxsave(CPUX86State *s, target_ulong ptr);
1428 void cpu_x86_fxrstor(CPUX86State *s, target_ulong ptr);
1429 
1430 /* you can call this signal handler from your SIGBUS and SIGSEGV
1431    signal handlers to inform the virtual CPU of exceptions. non zero
1432    is returned if the signal was handled by the virtual CPU.  */
1433 int cpu_x86_signal_handler(int host_signum, void *pinfo,
1434                            void *puc);
1435 
1436 /* cpu.c */
1437 void cpu_x86_cpuid(CPUX86State *env, uint32_t index, uint32_t count,
1438                    uint32_t *eax, uint32_t *ebx,
1439                    uint32_t *ecx, uint32_t *edx);
1440 void cpu_clear_apic_feature(CPUX86State *env);
1441 void host_cpuid(uint32_t function, uint32_t count,
1442                 uint32_t *eax, uint32_t *ebx, uint32_t *ecx, uint32_t *edx);
1443 void host_vendor_fms(char *vendor, int *family, int *model, int *stepping);
1444 
1445 /* helper.c */
1446 int x86_cpu_handle_mmu_fault(CPUState *cpu, vaddr addr,
1447                              int is_write, int mmu_idx);
1448 void x86_cpu_set_a20(X86CPU *cpu, int a20_state);
1449 
1450 #ifndef CONFIG_USER_ONLY
1451 uint8_t x86_ldub_phys(CPUState *cs, hwaddr addr);
1452 uint32_t x86_lduw_phys(CPUState *cs, hwaddr addr);
1453 uint32_t x86_ldl_phys(CPUState *cs, hwaddr addr);
1454 uint64_t x86_ldq_phys(CPUState *cs, hwaddr addr);
1455 void x86_stb_phys(CPUState *cs, hwaddr addr, uint8_t val);
1456 void x86_stl_phys_notdirty(CPUState *cs, hwaddr addr, uint32_t val);
1457 void x86_stw_phys(CPUState *cs, hwaddr addr, uint32_t val);
1458 void x86_stl_phys(CPUState *cs, hwaddr addr, uint32_t val);
1459 void x86_stq_phys(CPUState *cs, hwaddr addr, uint64_t val);
1460 #endif
1461 
1462 void breakpoint_handler(CPUState *cs);
1463 
1464 /* will be suppressed */
1465 void cpu_x86_update_cr0(CPUX86State *env, uint32_t new_cr0);
1466 void cpu_x86_update_cr3(CPUX86State *env, target_ulong new_cr3);
1467 void cpu_x86_update_cr4(CPUX86State *env, uint32_t new_cr4);
1468 void cpu_x86_update_dr7(CPUX86State *env, uint32_t new_dr7);
1469 
1470 /* hw/pc.c */
1471 uint64_t cpu_get_tsc(CPUX86State *env);
1472 
1473 #define TARGET_PAGE_BITS 12
1474 
1475 #ifdef TARGET_X86_64
1476 #define TARGET_PHYS_ADDR_SPACE_BITS 52
1477 /* ??? This is really 48 bits, sign-extended, but the only thing
1478    accessible to userland with bit 48 set is the VSYSCALL, and that
1479    is handled via other mechanisms.  */
1480 #define TARGET_VIRT_ADDR_SPACE_BITS 47
1481 #else
1482 #define TARGET_PHYS_ADDR_SPACE_BITS 36
1483 #define TARGET_VIRT_ADDR_SPACE_BITS 32
1484 #endif
1485 
1486 /* XXX: This value should match the one returned by CPUID
1487  * and in exec.c */
1488 # if defined(TARGET_X86_64)
1489 # define TCG_PHYS_ADDR_BITS 40
1490 # else
1491 # define TCG_PHYS_ADDR_BITS 36
1492 # endif
1493 
1494 #define PHYS_ADDR_MASK MAKE_64BIT_MASK(0, TCG_PHYS_ADDR_BITS)
1495 
1496 #define cpu_init(cpu_model) CPU(cpu_x86_init(cpu_model))
1497 
1498 #define cpu_signal_handler cpu_x86_signal_handler
1499 #define cpu_list x86_cpu_list
1500 
1501 /* MMU modes definitions */
1502 #define MMU_MODE0_SUFFIX _ksmap
1503 #define MMU_MODE1_SUFFIX _user
1504 #define MMU_MODE2_SUFFIX _knosmap /* SMAP disabled or CPL<3 && AC=1 */
1505 #define MMU_KSMAP_IDX   0
1506 #define MMU_USER_IDX    1
1507 #define MMU_KNOSMAP_IDX 2
1508 static inline int cpu_mmu_index(CPUX86State *env, bool ifetch)
1509 {
1510     return (env->hflags & HF_CPL_MASK) == 3 ? MMU_USER_IDX :
1511         (!(env->hflags & HF_SMAP_MASK) || (env->eflags & AC_MASK))
1512         ? MMU_KNOSMAP_IDX : MMU_KSMAP_IDX;
1513 }
1514 
1515 static inline int cpu_mmu_index_kernel(CPUX86State *env)
1516 {
1517     return !(env->hflags & HF_SMAP_MASK) ? MMU_KNOSMAP_IDX :
1518         ((env->hflags & HF_CPL_MASK) < 3 && (env->eflags & AC_MASK))
1519         ? MMU_KNOSMAP_IDX : MMU_KSMAP_IDX;
1520 }
1521 
1522 #define CC_DST  (env->cc_dst)
1523 #define CC_SRC  (env->cc_src)
1524 #define CC_SRC2 (env->cc_src2)
1525 #define CC_OP   (env->cc_op)
1526 
1527 /* n must be a constant to be efficient */
1528 static inline target_long lshift(target_long x, int n)
1529 {
1530     if (n >= 0) {
1531         return x << n;
1532     } else {
1533         return x >> (-n);
1534     }
1535 }
1536 
1537 /* float macros */
1538 #define FT0    (env->ft0)
1539 #define ST0    (env->fpregs[env->fpstt].d)
1540 #define ST(n)  (env->fpregs[(env->fpstt + (n)) & 7].d)
1541 #define ST1    ST(1)
1542 
1543 /* translate.c */
1544 void tcg_x86_init(void);
1545 
1546 #include "exec/cpu-all.h"
1547 #include "svm.h"
1548 
1549 #if !defined(CONFIG_USER_ONLY)
1550 #include "hw/i386/apic.h"
1551 #endif
1552 
1553 static inline void cpu_get_tb_cpu_state(CPUX86State *env, target_ulong *pc,
1554                                         target_ulong *cs_base, uint32_t *flags)
1555 {
1556     *cs_base = env->segs[R_CS].base;
1557     *pc = *cs_base + env->eip;
1558     *flags = env->hflags |
1559         (env->eflags & (IOPL_MASK | TF_MASK | RF_MASK | VM_MASK | AC_MASK));
1560 }
1561 
1562 void do_cpu_init(X86CPU *cpu);
1563 void do_cpu_sipi(X86CPU *cpu);
1564 
1565 #define MCE_INJECT_BROADCAST    1
1566 #define MCE_INJECT_UNCOND_AO    2
1567 
1568 void cpu_x86_inject_mce(Monitor *mon, X86CPU *cpu, int bank,
1569                         uint64_t status, uint64_t mcg_status, uint64_t addr,
1570                         uint64_t misc, int flags);
1571 
1572 /* excp_helper.c */
1573 void QEMU_NORETURN raise_exception(CPUX86State *env, int exception_index);
1574 void QEMU_NORETURN raise_exception_ra(CPUX86State *env, int exception_index,
1575                                       uintptr_t retaddr);
1576 void QEMU_NORETURN raise_exception_err(CPUX86State *env, int exception_index,
1577                                        int error_code);
1578 void QEMU_NORETURN raise_exception_err_ra(CPUX86State *env, int exception_index,
1579                                           int error_code, uintptr_t retaddr);
1580 void QEMU_NORETURN raise_interrupt(CPUX86State *nenv, int intno, int is_int,
1581                                    int error_code, int next_eip_addend);
1582 
1583 /* cc_helper.c */
1584 extern const uint8_t parity_table[256];
1585 uint32_t cpu_cc_compute_all(CPUX86State *env1, int op);
1586 void update_fp_status(CPUX86State *env);
1587 
1588 static inline uint32_t cpu_compute_eflags(CPUX86State *env)
1589 {
1590     return env->eflags | cpu_cc_compute_all(env, CC_OP) | (env->df & DF_MASK);
1591 }
1592 
1593 /* NOTE: the translator must set DisasContext.cc_op to CC_OP_EFLAGS
1594  * after generating a call to a helper that uses this.
1595  */
1596 static inline void cpu_load_eflags(CPUX86State *env, int eflags,
1597                                    int update_mask)
1598 {
1599     CC_SRC = eflags & (CC_O | CC_S | CC_Z | CC_A | CC_P | CC_C);
1600     CC_OP = CC_OP_EFLAGS;
1601     env->df = 1 - (2 * ((eflags >> 10) & 1));
1602     env->eflags = (env->eflags & ~update_mask) |
1603         (eflags & update_mask) | 0x2;
1604 }
1605 
1606 /* load efer and update the corresponding hflags. XXX: do consistency
1607    checks with cpuid bits? */
1608 static inline void cpu_load_efer(CPUX86State *env, uint64_t val)
1609 {
1610     env->efer = val;
1611     env->hflags &= ~(HF_LMA_MASK | HF_SVME_MASK);
1612     if (env->efer & MSR_EFER_LMA) {
1613         env->hflags |= HF_LMA_MASK;
1614     }
1615     if (env->efer & MSR_EFER_SVME) {
1616         env->hflags |= HF_SVME_MASK;
1617     }
1618 }
1619 
1620 static inline MemTxAttrs cpu_get_mem_attrs(CPUX86State *env)
1621 {
1622     return ((MemTxAttrs) { .secure = (env->hflags & HF_SMM_MASK) != 0 });
1623 }
1624 
1625 /* fpu_helper.c */
1626 void cpu_set_mxcsr(CPUX86State *env, uint32_t val);
1627 void cpu_set_fpuc(CPUX86State *env, uint16_t val);
1628 
1629 /* mem_helper.c */
1630 void helper_lock_init(void);
1631 
1632 /* svm_helper.c */
1633 void cpu_svm_check_intercept_param(CPUX86State *env1, uint32_t type,
1634                                    uint64_t param, uintptr_t retaddr);
1635 void cpu_vmexit(CPUX86State *nenv, uint32_t exit_code, uint64_t exit_info_1,
1636                 uintptr_t retaddr);
1637 void do_vmexit(CPUX86State *env, uint32_t exit_code, uint64_t exit_info_1);
1638 
1639 /* seg_helper.c */
1640 void do_interrupt_x86_hardirq(CPUX86State *env, int intno, int is_hw);
1641 
1642 /* smm_helper.c */
1643 void do_smm_enter(X86CPU *cpu);
1644 void cpu_smm_update(X86CPU *cpu);
1645 
1646 /* apic.c */
1647 void cpu_report_tpr_access(CPUX86State *env, TPRAccess access);
1648 void apic_handle_tpr_access_report(DeviceState *d, target_ulong ip,
1649                                    TPRAccess access);
1650 
1651 
1652 /* Change the value of a KVM-specific default
1653  *
1654  * If value is NULL, no default will be set and the original
1655  * value from the CPU model table will be kept.
1656  *
1657  * It is valid to call this function only for properties that
1658  * are already present in the kvm_default_props table.
1659  */
1660 void x86_cpu_change_kvm_default(const char *prop, const char *value);
1661 
1662 /* mpx_helper.c */
1663 void cpu_sync_bndcs_hflags(CPUX86State *env);
1664 
1665 /* Return name of 32-bit register, from a R_* constant */
1666 const char *get_register_name_32(unsigned int reg);
1667 
1668 void enable_compat_apic_id_mode(void);
1669 
1670 #define APIC_DEFAULT_ADDRESS 0xfee00000
1671 #define APIC_SPACE_SIZE      0x100000
1672 
1673 void x86_cpu_dump_local_apic_state(CPUState *cs, FILE *f,
1674                                    fprintf_function cpu_fprintf, int flags);
1675 
1676 /* cpu.c */
1677 bool cpu_is_bsp(X86CPU *cpu);
1678 
1679 #endif /* I386_CPU_H */
1680