xref: /openbmc/qemu/target/m68k/helper.c (revision 7d87775f)
1 /*
2  *  m68k op helpers
3  *
4  *  Copyright (c) 2006-2007 CodeSourcery
5  *  Written by Paul Brook
6  *
7  * This library is free software; you can redistribute it and/or
8  * modify it under the terms of the GNU Lesser General Public
9  * License as published by the Free Software Foundation; either
10  * version 2.1 of the License, or (at your option) any later version.
11  *
12  * This library is distributed in the hope that it will be useful,
13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
15  * Lesser General Public License for more details.
16  *
17  * You should have received a copy of the GNU Lesser General Public
18  * License along with this library; if not, see <http://www.gnu.org/licenses/>.
19  */
20 
21 #include "qemu/osdep.h"
22 #include "cpu.h"
23 #include "exec/exec-all.h"
24 #include "exec/page-protection.h"
25 #include "exec/gdbstub.h"
26 #include "exec/helper-proto.h"
27 #include "gdbstub/helpers.h"
28 #include "fpu/softfloat.h"
29 #include "qemu/qemu-print.h"
30 
31 #define SIGNBIT (1u << 31)
32 
33 static int cf_fpu_gdb_get_reg(CPUState *cs, GByteArray *mem_buf, int n)
34 {
35     M68kCPU *cpu = M68K_CPU(cs);
36     CPUM68KState *env = &cpu->env;
37 
38     if (n < 8) {
39         float_status s = {};
40         return gdb_get_reg64(mem_buf, floatx80_to_float64(env->fregs[n].d, &s));
41     }
42     switch (n) {
43     case 8: /* fpcontrol */
44         return gdb_get_reg32(mem_buf, env->fpcr);
45     case 9: /* fpstatus */
46         return gdb_get_reg32(mem_buf, env->fpsr);
47     case 10: /* fpiar, not implemented */
48         return gdb_get_reg32(mem_buf, 0);
49     }
50     return 0;
51 }
52 
53 static int cf_fpu_gdb_set_reg(CPUState *cs, uint8_t *mem_buf, int n)
54 {
55     M68kCPU *cpu = M68K_CPU(cs);
56     CPUM68KState *env = &cpu->env;
57 
58     if (n < 8) {
59         float_status s = {};
60         env->fregs[n].d = float64_to_floatx80(ldq_be_p(mem_buf), &s);
61         return 8;
62     }
63     switch (n) {
64     case 8: /* fpcontrol */
65         cpu_m68k_set_fpcr(env, ldl_be_p(mem_buf));
66         return 4;
67     case 9: /* fpstatus */
68         env->fpsr = ldl_be_p(mem_buf);
69         return 4;
70     case 10: /* fpiar, not implemented */
71         return 4;
72     }
73     return 0;
74 }
75 
76 static int m68k_fpu_gdb_get_reg(CPUState *cs, GByteArray *mem_buf, int n)
77 {
78     M68kCPU *cpu = M68K_CPU(cs);
79     CPUM68KState *env = &cpu->env;
80 
81     if (n < 8) {
82         int len = gdb_get_reg16(mem_buf, env->fregs[n].l.upper);
83         len += gdb_get_reg16(mem_buf, 0);
84         len += gdb_get_reg64(mem_buf, env->fregs[n].l.lower);
85         return len;
86     }
87     switch (n) {
88     case 8: /* fpcontrol */
89         return gdb_get_reg32(mem_buf, env->fpcr);
90     case 9: /* fpstatus */
91         return gdb_get_reg32(mem_buf, cpu_m68k_get_fpsr(env));
92     case 10: /* fpiar, not implemented */
93         return gdb_get_reg32(mem_buf, 0);
94     }
95     return 0;
96 }
97 
98 static int m68k_fpu_gdb_set_reg(CPUState *cs, uint8_t *mem_buf, int n)
99 {
100     M68kCPU *cpu = M68K_CPU(cs);
101     CPUM68KState *env = &cpu->env;
102 
103     if (n < 8) {
104         env->fregs[n].l.upper = lduw_be_p(mem_buf);
105         env->fregs[n].l.lower = ldq_be_p(mem_buf + 4);
106         return 12;
107     }
108     switch (n) {
109     case 8: /* fpcontrol */
110         cpu_m68k_set_fpcr(env, ldl_be_p(mem_buf));
111         return 4;
112     case 9: /* fpstatus */
113         cpu_m68k_set_fpsr(env, ldl_be_p(mem_buf));
114         return 4;
115     case 10: /* fpiar, not implemented */
116         return 4;
117     }
118     return 0;
119 }
120 
121 void m68k_cpu_init_gdb(M68kCPU *cpu)
122 {
123     CPUState *cs = CPU(cpu);
124     CPUM68KState *env = &cpu->env;
125 
126     if (m68k_feature(env, M68K_FEATURE_CF_FPU)) {
127         gdb_register_coprocessor(cs, cf_fpu_gdb_get_reg, cf_fpu_gdb_set_reg,
128                                  gdb_find_static_feature("cf-fp.xml"), 18);
129     } else if (m68k_feature(env, M68K_FEATURE_FPU)) {
130         gdb_register_coprocessor(cs, m68k_fpu_gdb_get_reg, m68k_fpu_gdb_set_reg,
131                                  gdb_find_static_feature("m68k-fp.xml"), 18);
132     }
133     /* TODO: Add [E]MAC registers.  */
134 }
135 
136 void HELPER(cf_movec_to)(CPUM68KState *env, uint32_t reg, uint32_t val)
137 {
138     switch (reg) {
139     case M68K_CR_CACR:
140         env->cacr = val;
141         m68k_switch_sp(env);
142         break;
143     case M68K_CR_ACR0:
144     case M68K_CR_ACR1:
145     case M68K_CR_ACR2:
146     case M68K_CR_ACR3:
147         /* TODO: Implement Access Control Registers.  */
148         break;
149     case M68K_CR_VBR:
150         env->vbr = val;
151         break;
152     /* TODO: Implement control registers.  */
153     default:
154         cpu_abort(env_cpu(env),
155                   "Unimplemented control register write 0x%x = 0x%x\n",
156                   reg, val);
157     }
158 }
159 
160 static void raise_exception_ra(CPUM68KState *env, int tt, uintptr_t raddr)
161 {
162     CPUState *cs = env_cpu(env);
163 
164     cs->exception_index = tt;
165     cpu_loop_exit_restore(cs, raddr);
166 }
167 
168 void HELPER(m68k_movec_to)(CPUM68KState *env, uint32_t reg, uint32_t val)
169 {
170     switch (reg) {
171     /* MC680[12346]0 */
172     case M68K_CR_SFC:
173         env->sfc = val & 7;
174         return;
175     /* MC680[12346]0 */
176     case M68K_CR_DFC:
177         env->dfc = val & 7;
178         return;
179     /* MC680[12346]0 */
180     case M68K_CR_VBR:
181         env->vbr = val;
182         return;
183     /* MC680[2346]0 */
184     case M68K_CR_CACR:
185         if (m68k_feature(env, M68K_FEATURE_M68020)) {
186             env->cacr = val & 0x0000000f;
187         } else if (m68k_feature(env, M68K_FEATURE_M68030)) {
188             env->cacr = val & 0x00003f1f;
189         } else if (m68k_feature(env, M68K_FEATURE_M68040)) {
190             env->cacr = val & 0x80008000;
191         } else if (m68k_feature(env, M68K_FEATURE_M68060)) {
192             env->cacr = val & 0xf8e0e000;
193         } else {
194             break;
195         }
196         m68k_switch_sp(env);
197         return;
198     /* MC680[46]0 */
199     case M68K_CR_TC:
200         if (m68k_feature(env, M68K_FEATURE_M68040)
201          || m68k_feature(env, M68K_FEATURE_M68060)) {
202             env->mmu.tcr = val;
203             return;
204         }
205         break;
206     /* MC68040 */
207     case M68K_CR_MMUSR:
208         if (m68k_feature(env, M68K_FEATURE_M68040)) {
209             env->mmu.mmusr = val;
210             return;
211         }
212         break;
213     /* MC680[46]0 */
214     case M68K_CR_SRP:
215         if (m68k_feature(env, M68K_FEATURE_M68040)
216          || m68k_feature(env, M68K_FEATURE_M68060)) {
217             env->mmu.srp = val;
218             return;
219         }
220         break;
221     /* MC680[46]0 */
222     case M68K_CR_URP:
223         if (m68k_feature(env, M68K_FEATURE_M68040)
224          || m68k_feature(env, M68K_FEATURE_M68060)) {
225             env->mmu.urp = val;
226             return;
227         }
228         break;
229     /* MC680[12346]0 */
230     case M68K_CR_USP:
231         env->sp[M68K_USP] = val;
232         return;
233     /* MC680[234]0 */
234     case M68K_CR_MSP:
235         if (m68k_feature(env, M68K_FEATURE_M68020)
236          || m68k_feature(env, M68K_FEATURE_M68030)
237          || m68k_feature(env, M68K_FEATURE_M68040)) {
238             env->sp[M68K_SSP] = val;
239             return;
240         }
241         break;
242     /* MC680[234]0 */
243     case M68K_CR_ISP:
244         if (m68k_feature(env, M68K_FEATURE_M68020)
245          || m68k_feature(env, M68K_FEATURE_M68030)
246          || m68k_feature(env, M68K_FEATURE_M68040)) {
247             env->sp[M68K_ISP] = val;
248             return;
249         }
250         break;
251     /* MC68040/MC68LC040 */
252     case M68K_CR_ITT0: /* MC68EC040 only: M68K_CR_IACR0 */
253         if (m68k_feature(env, M68K_FEATURE_M68040)) {
254             env->mmu.ttr[M68K_ITTR0] = val;
255             return;
256         }
257         break;
258     /* MC68040/MC68LC040 */
259     case M68K_CR_ITT1: /* MC68EC040 only: M68K_CR_IACR1 */
260         if (m68k_feature(env, M68K_FEATURE_M68040)) {
261             env->mmu.ttr[M68K_ITTR1] = val;
262             return;
263         }
264         break;
265     /* MC68040/MC68LC040 */
266     case M68K_CR_DTT0: /* MC68EC040 only: M68K_CR_DACR0 */
267         if (m68k_feature(env, M68K_FEATURE_M68040)) {
268             env->mmu.ttr[M68K_DTTR0] = val;
269             return;
270         }
271         break;
272     /* MC68040/MC68LC040 */
273     case M68K_CR_DTT1: /* MC68EC040 only: M68K_CR_DACR1 */
274         if (m68k_feature(env, M68K_FEATURE_M68040)) {
275             env->mmu.ttr[M68K_DTTR1] = val;
276             return;
277         }
278         break;
279     /* Unimplemented Registers */
280     case M68K_CR_CAAR:
281     case M68K_CR_PCR:
282     case M68K_CR_BUSCR:
283         cpu_abort(env_cpu(env),
284                   "Unimplemented control register write 0x%x = 0x%x\n",
285                   reg, val);
286     }
287 
288     /* Invalid control registers will generate an exception. */
289     raise_exception_ra(env, EXCP_ILLEGAL, 0);
290     return;
291 }
292 
293 uint32_t HELPER(m68k_movec_from)(CPUM68KState *env, uint32_t reg)
294 {
295     switch (reg) {
296     /* MC680[12346]0 */
297     case M68K_CR_SFC:
298         return env->sfc;
299     /* MC680[12346]0 */
300     case M68K_CR_DFC:
301         return env->dfc;
302     /* MC680[12346]0 */
303     case M68K_CR_VBR:
304         return env->vbr;
305     /* MC680[2346]0 */
306     case M68K_CR_CACR:
307         if (m68k_feature(env, M68K_FEATURE_M68020)
308          || m68k_feature(env, M68K_FEATURE_M68030)
309          || m68k_feature(env, M68K_FEATURE_M68040)
310          || m68k_feature(env, M68K_FEATURE_M68060)) {
311             return env->cacr;
312         }
313         break;
314     /* MC680[46]0 */
315     case M68K_CR_TC:
316         if (m68k_feature(env, M68K_FEATURE_M68040)
317          || m68k_feature(env, M68K_FEATURE_M68060)) {
318             return env->mmu.tcr;
319         }
320         break;
321     /* MC68040 */
322     case M68K_CR_MMUSR:
323         if (m68k_feature(env, M68K_FEATURE_M68040)) {
324             return env->mmu.mmusr;
325         }
326         break;
327     /* MC680[46]0 */
328     case M68K_CR_SRP:
329         if (m68k_feature(env, M68K_FEATURE_M68040)
330          || m68k_feature(env, M68K_FEATURE_M68060)) {
331             return env->mmu.srp;
332         }
333         break;
334     /* MC68040/MC68LC040 */
335     case M68K_CR_URP:
336         if (m68k_feature(env, M68K_FEATURE_M68040)
337          || m68k_feature(env, M68K_FEATURE_M68060)) {
338             return env->mmu.urp;
339         }
340         break;
341     /* MC680[46]0 */
342     case M68K_CR_USP:
343         return env->sp[M68K_USP];
344     /* MC680[234]0 */
345     case M68K_CR_MSP:
346         if (m68k_feature(env, M68K_FEATURE_M68020)
347          || m68k_feature(env, M68K_FEATURE_M68030)
348          || m68k_feature(env, M68K_FEATURE_M68040)) {
349             return env->sp[M68K_SSP];
350         }
351         break;
352     /* MC680[234]0 */
353     case M68K_CR_ISP:
354         if (m68k_feature(env, M68K_FEATURE_M68020)
355          || m68k_feature(env, M68K_FEATURE_M68030)
356          || m68k_feature(env, M68K_FEATURE_M68040)) {
357             return env->sp[M68K_ISP];
358         }
359         break;
360     /* MC68040/MC68LC040 */
361     case M68K_CR_ITT0: /* MC68EC040 only: M68K_CR_IACR0 */
362         if (m68k_feature(env, M68K_FEATURE_M68040)) {
363             return env->mmu.ttr[M68K_ITTR0];
364         }
365         break;
366     /* MC68040/MC68LC040 */
367     case M68K_CR_ITT1: /* MC68EC040 only: M68K_CR_IACR1 */
368         if (m68k_feature(env, M68K_FEATURE_M68040)) {
369             return env->mmu.ttr[M68K_ITTR1];
370         }
371         break;
372     /* MC68040/MC68LC040 */
373     case M68K_CR_DTT0: /* MC68EC040 only: M68K_CR_DACR0 */
374         if (m68k_feature(env, M68K_FEATURE_M68040)) {
375             return env->mmu.ttr[M68K_DTTR0];
376         }
377         break;
378     /* MC68040/MC68LC040 */
379     case M68K_CR_DTT1: /* MC68EC040 only: M68K_CR_DACR1 */
380         if (m68k_feature(env, M68K_FEATURE_M68040)) {
381             return env->mmu.ttr[M68K_DTTR1];
382         }
383         break;
384     /* Unimplemented Registers */
385     case M68K_CR_CAAR:
386     case M68K_CR_PCR:
387     case M68K_CR_BUSCR:
388         cpu_abort(env_cpu(env), "Unimplemented control register read 0x%x\n",
389                   reg);
390     }
391 
392     /* Invalid control registers will generate an exception. */
393     raise_exception_ra(env, EXCP_ILLEGAL, 0);
394 
395     return 0;
396 }
397 
398 void HELPER(set_macsr)(CPUM68KState *env, uint32_t val)
399 {
400     uint32_t acc;
401     int8_t exthigh;
402     uint8_t extlow;
403     uint64_t regval;
404     int i;
405     if ((env->macsr ^ val) & (MACSR_FI | MACSR_SU)) {
406         for (i = 0; i < 4; i++) {
407             regval = env->macc[i];
408             exthigh = regval >> 40;
409             if (env->macsr & MACSR_FI) {
410                 acc = regval >> 8;
411                 extlow = regval;
412             } else {
413                 acc = regval;
414                 extlow = regval >> 32;
415             }
416             if (env->macsr & MACSR_FI) {
417                 regval = (((uint64_t)acc) << 8) | extlow;
418                 regval |= ((int64_t)exthigh) << 40;
419             } else if (env->macsr & MACSR_SU) {
420                 regval = acc | (((int64_t)extlow) << 32);
421                 regval |= ((int64_t)exthigh) << 40;
422             } else {
423                 regval = acc | (((uint64_t)extlow) << 32);
424                 regval |= ((uint64_t)(uint8_t)exthigh) << 40;
425             }
426             env->macc[i] = regval;
427         }
428     }
429     env->macsr = val;
430 }
431 
432 void m68k_switch_sp(CPUM68KState *env)
433 {
434     int new_sp;
435 
436     env->sp[env->current_sp] = env->aregs[7];
437     if (m68k_feature(env, M68K_FEATURE_M68K)) {
438         if (env->sr & SR_S) {
439             /* SR:Master-Mode bit unimplemented then ISP is not available */
440             if (!m68k_feature(env, M68K_FEATURE_MSP) || env->sr & SR_M) {
441                 new_sp = M68K_SSP;
442             } else {
443                 new_sp = M68K_ISP;
444             }
445         } else {
446             new_sp = M68K_USP;
447         }
448     } else {
449         new_sp = (env->sr & SR_S && env->cacr & M68K_CACR_EUSP)
450                  ? M68K_SSP : M68K_USP;
451     }
452     env->aregs[7] = env->sp[new_sp];
453     env->current_sp = new_sp;
454 }
455 
456 #if !defined(CONFIG_USER_ONLY)
457 /* MMU: 68040 only */
458 
459 static void print_address_zone(uint32_t logical, uint32_t physical,
460                                uint32_t size, int attr)
461 {
462     qemu_printf("%08x - %08x -> %08x - %08x %c ",
463                 logical, logical + size - 1,
464                 physical, physical + size - 1,
465                 attr & 4 ? 'W' : '-');
466     size >>= 10;
467     if (size < 1024) {
468         qemu_printf("(%d KiB)\n", size);
469     } else {
470         size >>= 10;
471         if (size < 1024) {
472             qemu_printf("(%d MiB)\n", size);
473         } else {
474             size >>= 10;
475             qemu_printf("(%d GiB)\n", size);
476         }
477     }
478 }
479 
480 static void dump_address_map(CPUM68KState *env, uint32_t root_pointer)
481 {
482     int tic_size, tic_shift;
483     uint32_t tib_mask;
484     uint32_t tia, tib, tic;
485     uint32_t logical = 0xffffffff, physical = 0xffffffff;
486     uint32_t first_logical = 0xffffffff, first_physical = 0xffffffff;
487     uint32_t last_logical, last_physical;
488     int32_t size;
489     int last_attr = -1, attr = -1;
490     CPUState *cs = env_cpu(env);
491     MemTxResult txres;
492 
493     if (env->mmu.tcr & M68K_TCR_PAGE_8K) {
494         /* 8k page */
495         tic_size = 32;
496         tic_shift = 13;
497         tib_mask = M68K_8K_PAGE_MASK;
498     } else {
499         /* 4k page */
500         tic_size = 64;
501         tic_shift = 12;
502         tib_mask = M68K_4K_PAGE_MASK;
503     }
504     for (unsigned i = 0; i < M68K_ROOT_POINTER_ENTRIES; i++) {
505         tia = address_space_ldl(cs->as, M68K_POINTER_BASE(root_pointer) + i * 4,
506                                 MEMTXATTRS_UNSPECIFIED, &txres);
507         if (txres != MEMTX_OK || !M68K_UDT_VALID(tia)) {
508             continue;
509         }
510         for (unsigned j = 0; j < M68K_ROOT_POINTER_ENTRIES; j++) {
511             tib = address_space_ldl(cs->as, M68K_POINTER_BASE(tia) + j * 4,
512                                     MEMTXATTRS_UNSPECIFIED, &txres);
513             if (txres != MEMTX_OK || !M68K_UDT_VALID(tib)) {
514                 continue;
515             }
516             for (unsigned k = 0; k < tic_size; k++) {
517                 tic = address_space_ldl(cs->as, (tib & tib_mask) + k * 4,
518                                         MEMTXATTRS_UNSPECIFIED, &txres);
519                 if (txres != MEMTX_OK || !M68K_PDT_VALID(tic)) {
520                     continue;
521                 }
522                 if (M68K_PDT_INDIRECT(tic)) {
523                     tic = address_space_ldl(cs->as, M68K_INDIRECT_POINTER(tic),
524                                             MEMTXATTRS_UNSPECIFIED, &txres);
525                     if (txres != MEMTX_OK) {
526                         continue;
527                     }
528                 }
529 
530                 last_logical = logical;
531                 logical = (i << M68K_TTS_ROOT_SHIFT) |
532                           (j << M68K_TTS_POINTER_SHIFT) |
533                           (k << tic_shift);
534 
535                 last_physical = physical;
536                 physical = tic & ~((1 << tic_shift) - 1);
537 
538                 last_attr = attr;
539                 attr = tic & ((1 << tic_shift) - 1);
540 
541                 if ((logical != (last_logical + (1 << tic_shift))) ||
542                     (physical != (last_physical + (1 << tic_shift))) ||
543                     (attr & 4) != (last_attr & 4)) {
544 
545                     if (first_logical != 0xffffffff) {
546                         size = last_logical + (1 << tic_shift) -
547                                first_logical;
548                         print_address_zone(first_logical,
549                                            first_physical, size, last_attr);
550                     }
551                     first_logical = logical;
552                     first_physical = physical;
553                 }
554             }
555         }
556     }
557     if (first_logical != logical || (attr & 4) != (last_attr & 4)) {
558         size = logical + (1 << tic_shift) - first_logical;
559         print_address_zone(first_logical, first_physical, size, last_attr);
560     }
561 }
562 
563 #define DUMP_CACHEFLAGS(a) \
564     switch (a & M68K_DESC_CACHEMODE) { \
565     case M68K_DESC_CM_WRTHRU: /* cacheable, write-through */ \
566         qemu_printf("T"); \
567         break; \
568     case M68K_DESC_CM_COPYBK: /* cacheable, copyback */ \
569         qemu_printf("C"); \
570         break; \
571     case M68K_DESC_CM_SERIAL: /* noncachable, serialized */ \
572         qemu_printf("S"); \
573         break; \
574     case M68K_DESC_CM_NCACHE: /* noncachable */ \
575         qemu_printf("N"); \
576         break; \
577     }
578 
579 static void dump_ttr(uint32_t ttr)
580 {
581     if ((ttr & M68K_TTR_ENABLED) == 0) {
582         qemu_printf("disabled\n");
583         return;
584     }
585     qemu_printf("Base: 0x%08x Mask: 0x%08x Control: ",
586                 ttr & M68K_TTR_ADDR_BASE,
587                 (ttr & M68K_TTR_ADDR_MASK) << M68K_TTR_ADDR_MASK_SHIFT);
588     switch (ttr & M68K_TTR_SFIELD) {
589     case M68K_TTR_SFIELD_USER:
590         qemu_printf("U");
591         break;
592     case M68K_TTR_SFIELD_SUPER:
593         qemu_printf("S");
594         break;
595     default:
596         qemu_printf("*");
597         break;
598     }
599     DUMP_CACHEFLAGS(ttr);
600     if (ttr & M68K_DESC_WRITEPROT) {
601         qemu_printf("R");
602     } else {
603         qemu_printf("W");
604     }
605     qemu_printf(" U: %d\n", (ttr & M68K_DESC_USERATTR) >>
606                                M68K_DESC_USERATTR_SHIFT);
607 }
608 
609 void dump_mmu(CPUM68KState *env)
610 {
611     if ((env->mmu.tcr & M68K_TCR_ENABLED) == 0) {
612         qemu_printf("Translation disabled\n");
613         return;
614     }
615     qemu_printf("Page Size: ");
616     if (env->mmu.tcr & M68K_TCR_PAGE_8K) {
617         qemu_printf("8kB\n");
618     } else {
619         qemu_printf("4kB\n");
620     }
621 
622     qemu_printf("MMUSR: ");
623     if (env->mmu.mmusr & M68K_MMU_B_040) {
624         qemu_printf("BUS ERROR\n");
625     } else {
626         qemu_printf("Phy=%08x Flags: ", env->mmu.mmusr & 0xfffff000);
627         /* flags found on the page descriptor */
628         if (env->mmu.mmusr & M68K_MMU_G_040) {
629             qemu_printf("G"); /* Global */
630         } else {
631             qemu_printf(".");
632         }
633         if (env->mmu.mmusr & M68K_MMU_S_040) {
634             qemu_printf("S"); /* Supervisor */
635         } else {
636             qemu_printf(".");
637         }
638         if (env->mmu.mmusr & M68K_MMU_M_040) {
639             qemu_printf("M"); /* Modified */
640         } else {
641             qemu_printf(".");
642         }
643         if (env->mmu.mmusr & M68K_MMU_WP_040) {
644             qemu_printf("W"); /* Write protect */
645         } else {
646             qemu_printf(".");
647         }
648         if (env->mmu.mmusr & M68K_MMU_T_040) {
649             qemu_printf("T"); /* Transparent */
650         } else {
651             qemu_printf(".");
652         }
653         if (env->mmu.mmusr & M68K_MMU_R_040) {
654             qemu_printf("R"); /* Resident */
655         } else {
656             qemu_printf(".");
657         }
658         qemu_printf(" Cache: ");
659         DUMP_CACHEFLAGS(env->mmu.mmusr);
660         qemu_printf(" U: %d\n", (env->mmu.mmusr >> 8) & 3);
661         qemu_printf("\n");
662     }
663 
664     qemu_printf("ITTR0: ");
665     dump_ttr(env->mmu.ttr[M68K_ITTR0]);
666     qemu_printf("ITTR1: ");
667     dump_ttr(env->mmu.ttr[M68K_ITTR1]);
668     qemu_printf("DTTR0: ");
669     dump_ttr(env->mmu.ttr[M68K_DTTR0]);
670     qemu_printf("DTTR1: ");
671     dump_ttr(env->mmu.ttr[M68K_DTTR1]);
672 
673     qemu_printf("SRP: 0x%08x\n", env->mmu.srp);
674     dump_address_map(env, env->mmu.srp);
675 
676     qemu_printf("URP: 0x%08x\n", env->mmu.urp);
677     dump_address_map(env, env->mmu.urp);
678 }
679 
680 static int check_TTR(uint32_t ttr, int *prot, target_ulong addr,
681                      int access_type)
682 {
683     uint32_t base, mask;
684 
685     /* check if transparent translation is enabled */
686     if ((ttr & M68K_TTR_ENABLED) == 0) {
687         return 0;
688     }
689 
690     /* check mode access */
691     switch (ttr & M68K_TTR_SFIELD) {
692     case M68K_TTR_SFIELD_USER:
693         /* match only if user */
694         if ((access_type & ACCESS_SUPER) != 0) {
695             return 0;
696         }
697         break;
698     case M68K_TTR_SFIELD_SUPER:
699         /* match only if supervisor */
700         if ((access_type & ACCESS_SUPER) == 0) {
701             return 0;
702         }
703         break;
704     default:
705         /* all other values disable mode matching (FC2) */
706         break;
707     }
708 
709     /* check address matching */
710 
711     base = ttr & M68K_TTR_ADDR_BASE;
712     mask = (ttr & M68K_TTR_ADDR_MASK) ^ M68K_TTR_ADDR_MASK;
713     mask <<= M68K_TTR_ADDR_MASK_SHIFT;
714 
715     if ((addr & mask) != (base & mask)) {
716         return 0;
717     }
718 
719     *prot = PAGE_READ | PAGE_EXEC;
720     if ((ttr & M68K_DESC_WRITEPROT) == 0) {
721         *prot |= PAGE_WRITE;
722     }
723 
724     return 1;
725 }
726 
727 static int get_physical_address(CPUM68KState *env, hwaddr *physical,
728                                 int *prot, target_ulong address,
729                                 int access_type, target_ulong *page_size)
730 {
731     CPUState *cs = env_cpu(env);
732     uint32_t entry;
733     uint32_t next;
734     target_ulong page_mask;
735     bool debug = access_type & ACCESS_DEBUG;
736     int page_bits;
737     int i;
738     MemTxResult txres;
739 
740     /* Transparent Translation (physical = logical) */
741     for (i = 0; i < M68K_MAX_TTR; i++) {
742         if (check_TTR(env->mmu.TTR(access_type, i),
743                       prot, address, access_type)) {
744             if (access_type & ACCESS_PTEST) {
745                 /* Transparent Translation Register bit */
746                 env->mmu.mmusr = M68K_MMU_T_040 | M68K_MMU_R_040;
747             }
748             *physical = address;
749             *page_size = TARGET_PAGE_SIZE;
750             return 0;
751         }
752     }
753 
754     /* Page Table Root Pointer */
755     *prot = PAGE_READ | PAGE_WRITE;
756     if (access_type & ACCESS_CODE) {
757         *prot |= PAGE_EXEC;
758     }
759     if (access_type & ACCESS_SUPER) {
760         next = env->mmu.srp;
761     } else {
762         next = env->mmu.urp;
763     }
764 
765     /* Root Index */
766     entry = M68K_POINTER_BASE(next) | M68K_ROOT_INDEX(address);
767 
768     next = address_space_ldl(cs->as, entry, MEMTXATTRS_UNSPECIFIED, &txres);
769     if (txres != MEMTX_OK) {
770         goto txfail;
771     }
772     if (!M68K_UDT_VALID(next)) {
773         return -1;
774     }
775     if (!(next & M68K_DESC_USED) && !debug) {
776         address_space_stl(cs->as, entry, next | M68K_DESC_USED,
777                           MEMTXATTRS_UNSPECIFIED, &txres);
778         if (txres != MEMTX_OK) {
779             goto txfail;
780         }
781     }
782     if (next & M68K_DESC_WRITEPROT) {
783         if (access_type & ACCESS_PTEST) {
784             env->mmu.mmusr |= M68K_MMU_WP_040;
785         }
786         *prot &= ~PAGE_WRITE;
787         if (access_type & ACCESS_STORE) {
788             return -1;
789         }
790     }
791 
792     /* Pointer Index */
793     entry = M68K_POINTER_BASE(next) | M68K_POINTER_INDEX(address);
794 
795     next = address_space_ldl(cs->as, entry, MEMTXATTRS_UNSPECIFIED, &txres);
796     if (txres != MEMTX_OK) {
797         goto txfail;
798     }
799     if (!M68K_UDT_VALID(next)) {
800         return -1;
801     }
802     if (!(next & M68K_DESC_USED) && !debug) {
803         address_space_stl(cs->as, entry, next | M68K_DESC_USED,
804                           MEMTXATTRS_UNSPECIFIED, &txres);
805         if (txres != MEMTX_OK) {
806             goto txfail;
807         }
808     }
809     if (next & M68K_DESC_WRITEPROT) {
810         if (access_type & ACCESS_PTEST) {
811             env->mmu.mmusr |= M68K_MMU_WP_040;
812         }
813         *prot &= ~PAGE_WRITE;
814         if (access_type & ACCESS_STORE) {
815             return -1;
816         }
817     }
818 
819     /* Page Index */
820     if (env->mmu.tcr & M68K_TCR_PAGE_8K) {
821         entry = M68K_8K_PAGE_BASE(next) | M68K_8K_PAGE_INDEX(address);
822     } else {
823         entry = M68K_4K_PAGE_BASE(next) | M68K_4K_PAGE_INDEX(address);
824     }
825 
826     next = address_space_ldl(cs->as, entry, MEMTXATTRS_UNSPECIFIED, &txres);
827     if (txres != MEMTX_OK) {
828         goto txfail;
829     }
830 
831     if (!M68K_PDT_VALID(next)) {
832         return -1;
833     }
834     if (M68K_PDT_INDIRECT(next)) {
835         next = address_space_ldl(cs->as, M68K_INDIRECT_POINTER(next),
836                                  MEMTXATTRS_UNSPECIFIED, &txres);
837         if (txres != MEMTX_OK) {
838             goto txfail;
839         }
840     }
841     if (access_type & ACCESS_STORE) {
842         if (next & M68K_DESC_WRITEPROT) {
843             if (!(next & M68K_DESC_USED) && !debug) {
844                 address_space_stl(cs->as, entry, next | M68K_DESC_USED,
845                                   MEMTXATTRS_UNSPECIFIED, &txres);
846                 if (txres != MEMTX_OK) {
847                     goto txfail;
848                 }
849             }
850         } else if ((next & (M68K_DESC_MODIFIED | M68K_DESC_USED)) !=
851                            (M68K_DESC_MODIFIED | M68K_DESC_USED) && !debug) {
852             address_space_stl(cs->as, entry,
853                               next | (M68K_DESC_MODIFIED | M68K_DESC_USED),
854                               MEMTXATTRS_UNSPECIFIED, &txres);
855             if (txres != MEMTX_OK) {
856                 goto txfail;
857             }
858         }
859     } else {
860         if (!(next & M68K_DESC_USED) && !debug) {
861             address_space_stl(cs->as, entry, next | M68K_DESC_USED,
862                               MEMTXATTRS_UNSPECIFIED, &txres);
863             if (txres != MEMTX_OK) {
864                 goto txfail;
865             }
866         }
867     }
868 
869     if (env->mmu.tcr & M68K_TCR_PAGE_8K) {
870         page_bits = 13;
871     } else {
872         page_bits = 12;
873     }
874     *page_size = 1 << page_bits;
875     page_mask = ~(*page_size - 1);
876     *physical = (next & page_mask) + (address & (*page_size - 1));
877 
878     if (access_type & ACCESS_PTEST) {
879         env->mmu.mmusr |= next & M68K_MMU_SR_MASK_040;
880         env->mmu.mmusr |= *physical & 0xfffff000;
881         env->mmu.mmusr |= M68K_MMU_R_040;
882     }
883 
884     if (next & M68K_DESC_WRITEPROT) {
885         *prot &= ~PAGE_WRITE;
886         if (access_type & ACCESS_STORE) {
887             return -1;
888         }
889     }
890     if (next & M68K_DESC_SUPERONLY) {
891         if ((access_type & ACCESS_SUPER) == 0) {
892             return -1;
893         }
894     }
895 
896     return 0;
897 
898 txfail:
899     /*
900      * A page table load/store failed. TODO: we should really raise a
901      * suitable guest fault here if this is not a debug access.
902      * For now just return that the translation failed.
903      */
904     return -1;
905 }
906 
907 hwaddr m68k_cpu_get_phys_page_debug(CPUState *cs, vaddr addr)
908 {
909     CPUM68KState *env = cpu_env(cs);
910     hwaddr phys_addr;
911     int prot;
912     int access_type;
913     target_ulong page_size;
914 
915     if ((env->mmu.tcr & M68K_TCR_ENABLED) == 0) {
916         /* MMU disabled */
917         return addr;
918     }
919 
920     access_type = ACCESS_DATA | ACCESS_DEBUG;
921     if (env->sr & SR_S) {
922         access_type |= ACCESS_SUPER;
923     }
924 
925     if (get_physical_address(env, &phys_addr, &prot,
926                              addr, access_type, &page_size) != 0) {
927         return -1;
928     }
929 
930     return phys_addr;
931 }
932 
933 /*
934  * Notify CPU of a pending interrupt.  Prioritization and vectoring should
935  * be handled by the interrupt controller.  Real hardware only requests
936  * the vector when the interrupt is acknowledged by the CPU.  For
937  * simplicity we calculate it when the interrupt is signalled.
938  */
939 void m68k_set_irq_level(M68kCPU *cpu, int level, uint8_t vector)
940 {
941     CPUState *cs = CPU(cpu);
942     CPUM68KState *env = &cpu->env;
943 
944     env->pending_level = level;
945     env->pending_vector = vector;
946     if (level) {
947         cpu_interrupt(cs, CPU_INTERRUPT_HARD);
948     } else {
949         cpu_reset_interrupt(cs, CPU_INTERRUPT_HARD);
950     }
951 }
952 
953 bool m68k_cpu_tlb_fill(CPUState *cs, vaddr address, int size,
954                        MMUAccessType qemu_access_type, int mmu_idx,
955                        bool probe, uintptr_t retaddr)
956 {
957     CPUM68KState *env = cpu_env(cs);
958     hwaddr physical;
959     int prot;
960     int access_type;
961     int ret;
962     target_ulong page_size;
963 
964     if ((env->mmu.tcr & M68K_TCR_ENABLED) == 0) {
965         /* MMU disabled */
966         tlb_set_page(cs, address & TARGET_PAGE_MASK,
967                      address & TARGET_PAGE_MASK,
968                      PAGE_READ | PAGE_WRITE | PAGE_EXEC,
969                      mmu_idx, TARGET_PAGE_SIZE);
970         return true;
971     }
972 
973     if (qemu_access_type == MMU_INST_FETCH) {
974         access_type = ACCESS_CODE;
975     } else {
976         access_type = ACCESS_DATA;
977         if (qemu_access_type == MMU_DATA_STORE) {
978             access_type |= ACCESS_STORE;
979         }
980     }
981     if (mmu_idx != MMU_USER_IDX) {
982         access_type |= ACCESS_SUPER;
983     }
984 
985     ret = get_physical_address(env, &physical, &prot,
986                                address, access_type, &page_size);
987     if (likely(ret == 0)) {
988         tlb_set_page(cs, address & TARGET_PAGE_MASK,
989                      physical & TARGET_PAGE_MASK, prot, mmu_idx, page_size);
990         return true;
991     }
992 
993     if (probe) {
994         return false;
995     }
996 
997     /* page fault */
998     env->mmu.ssw = M68K_ATC_040;
999     switch (size) {
1000     case 1:
1001         env->mmu.ssw |= M68K_BA_SIZE_BYTE;
1002         break;
1003     case 2:
1004         env->mmu.ssw |= M68K_BA_SIZE_WORD;
1005         break;
1006     case 4:
1007         env->mmu.ssw |= M68K_BA_SIZE_LONG;
1008         break;
1009     }
1010     if (access_type & ACCESS_SUPER) {
1011         env->mmu.ssw |= M68K_TM_040_SUPER;
1012     }
1013     if (access_type & ACCESS_CODE) {
1014         env->mmu.ssw |= M68K_TM_040_CODE;
1015     } else {
1016         env->mmu.ssw |= M68K_TM_040_DATA;
1017     }
1018     if (!(access_type & ACCESS_STORE)) {
1019         env->mmu.ssw |= M68K_RW_040;
1020     }
1021 
1022     cs->exception_index = EXCP_ACCESS;
1023     env->mmu.ar = address;
1024     cpu_loop_exit_restore(cs, retaddr);
1025 }
1026 #endif /* !CONFIG_USER_ONLY */
1027 
1028 uint32_t HELPER(bitrev)(uint32_t x)
1029 {
1030     x = ((x >> 1) & 0x55555555u) | ((x << 1) & 0xaaaaaaaau);
1031     x = ((x >> 2) & 0x33333333u) | ((x << 2) & 0xccccccccu);
1032     x = ((x >> 4) & 0x0f0f0f0fu) | ((x << 4) & 0xf0f0f0f0u);
1033     return bswap32(x);
1034 }
1035 
1036 uint32_t HELPER(ff1)(uint32_t x)
1037 {
1038     int n;
1039     for (n = 32; x; n--)
1040         x >>= 1;
1041     return n;
1042 }
1043 
1044 uint32_t HELPER(sats)(uint32_t val, uint32_t v)
1045 {
1046     /* The result has the opposite sign to the original value.  */
1047     if ((int32_t)v < 0) {
1048         val = (((int32_t)val) >> 31) ^ SIGNBIT;
1049     }
1050     return val;
1051 }
1052 
1053 void cpu_m68k_set_sr(CPUM68KState *env, uint32_t sr)
1054 {
1055     env->sr = sr & 0xffe0;
1056     cpu_m68k_set_ccr(env, sr);
1057     m68k_switch_sp(env);
1058 }
1059 
1060 void HELPER(set_sr)(CPUM68KState *env, uint32_t val)
1061 {
1062     cpu_m68k_set_sr(env, val);
1063 }
1064 
1065 /* MAC unit.  */
1066 /*
1067  * FIXME: The MAC unit implementation is a bit of a mess.  Some helpers
1068  * take values,  others take register numbers and manipulate the contents
1069  * in-place.
1070  */
1071 void HELPER(mac_move)(CPUM68KState *env, uint32_t dest, uint32_t src)
1072 {
1073     uint32_t mask;
1074     env->macc[dest] = env->macc[src];
1075     mask = MACSR_PAV0 << dest;
1076     if (env->macsr & (MACSR_PAV0 << src))
1077         env->macsr |= mask;
1078     else
1079         env->macsr &= ~mask;
1080 }
1081 
1082 uint64_t HELPER(macmuls)(CPUM68KState *env, uint32_t op1, uint32_t op2)
1083 {
1084     int64_t product;
1085     int64_t res;
1086 
1087     product = (uint64_t)op1 * op2;
1088     res = (product << 24) >> 24;
1089     if (res != product) {
1090         env->macsr |= MACSR_V;
1091         if (env->macsr & MACSR_OMC) {
1092             /* Make sure the accumulate operation overflows.  */
1093             if (product < 0)
1094                 res = ~(1ll << 50);
1095             else
1096                 res = 1ll << 50;
1097         }
1098     }
1099     return res;
1100 }
1101 
1102 uint64_t HELPER(macmulu)(CPUM68KState *env, uint32_t op1, uint32_t op2)
1103 {
1104     uint64_t product;
1105 
1106     product = (uint64_t)op1 * op2;
1107     if (product & (0xffffffull << 40)) {
1108         env->macsr |= MACSR_V;
1109         if (env->macsr & MACSR_OMC) {
1110             /* Make sure the accumulate operation overflows.  */
1111             product = 1ll << 50;
1112         } else {
1113             product &= ((1ull << 40) - 1);
1114         }
1115     }
1116     return product;
1117 }
1118 
1119 uint64_t HELPER(macmulf)(CPUM68KState *env, uint32_t op1, uint32_t op2)
1120 {
1121     uint64_t product;
1122     uint32_t remainder;
1123 
1124     product = (uint64_t)op1 * op2;
1125     if (env->macsr & MACSR_RT) {
1126         remainder = product & 0xffffff;
1127         product >>= 24;
1128         if (remainder > 0x800000)
1129             product++;
1130         else if (remainder == 0x800000)
1131             product += (product & 1);
1132     } else {
1133         product >>= 24;
1134     }
1135     return product;
1136 }
1137 
1138 void HELPER(macsats)(CPUM68KState *env, uint32_t acc)
1139 {
1140     int64_t tmp;
1141     int64_t result;
1142     tmp = env->macc[acc];
1143     result = ((tmp << 16) >> 16);
1144     if (result != tmp) {
1145         env->macsr |= MACSR_V;
1146     }
1147     if (env->macsr & MACSR_V) {
1148         env->macsr |= MACSR_PAV0 << acc;
1149         if (env->macsr & MACSR_OMC) {
1150             /*
1151              * The result is saturated to 32 bits, despite overflow occurring
1152              * at 48 bits.  Seems weird, but that's what the hardware docs
1153              * say.
1154              */
1155             result = (result >> 63) ^ 0x7fffffff;
1156         }
1157     }
1158     env->macc[acc] = result;
1159 }
1160 
1161 void HELPER(macsatu)(CPUM68KState *env, uint32_t acc)
1162 {
1163     uint64_t val;
1164 
1165     val = env->macc[acc];
1166     if (val & (0xffffull << 48)) {
1167         env->macsr |= MACSR_V;
1168     }
1169     if (env->macsr & MACSR_V) {
1170         env->macsr |= MACSR_PAV0 << acc;
1171         if (env->macsr & MACSR_OMC) {
1172             if (val > (1ull << 53))
1173                 val = 0;
1174             else
1175                 val = (1ull << 48) - 1;
1176         } else {
1177             val &= ((1ull << 48) - 1);
1178         }
1179     }
1180     env->macc[acc] = val;
1181 }
1182 
1183 void HELPER(macsatf)(CPUM68KState *env, uint32_t acc)
1184 {
1185     int64_t sum;
1186     int64_t result;
1187 
1188     sum = env->macc[acc];
1189     result = (sum << 16) >> 16;
1190     if (result != sum) {
1191         env->macsr |= MACSR_V;
1192     }
1193     if (env->macsr & MACSR_V) {
1194         env->macsr |= MACSR_PAV0 << acc;
1195         if (env->macsr & MACSR_OMC) {
1196             result = (result >> 63) ^ 0x7fffffffffffll;
1197         }
1198     }
1199     env->macc[acc] = result;
1200 }
1201 
1202 void HELPER(mac_set_flags)(CPUM68KState *env, uint32_t acc)
1203 {
1204     uint64_t val;
1205     val = env->macc[acc];
1206     if (val == 0) {
1207         env->macsr |= MACSR_Z;
1208     } else if (val & (1ull << 47)) {
1209         env->macsr |= MACSR_N;
1210     }
1211     if (env->macsr & (MACSR_PAV0 << acc)) {
1212         env->macsr |= MACSR_V;
1213     }
1214     if (env->macsr & MACSR_FI) {
1215         val = ((int64_t)val) >> 40;
1216         if (val != 0 && val != -1)
1217             env->macsr |= MACSR_EV;
1218     } else if (env->macsr & MACSR_SU) {
1219         val = ((int64_t)val) >> 32;
1220         if (val != 0 && val != -1)
1221             env->macsr |= MACSR_EV;
1222     } else {
1223         if ((val >> 32) != 0)
1224             env->macsr |= MACSR_EV;
1225     }
1226 }
1227 
1228 #define EXTSIGN(val, index) (     \
1229     (index == 0) ? (int8_t)(val) : ((index == 1) ? (int16_t)(val) : (val)) \
1230 )
1231 
1232 #define COMPUTE_CCR(op, x, n, z, v, c) {                                   \
1233     switch (op) {                                                          \
1234     case CC_OP_FLAGS:                                                      \
1235         /* Everything in place.  */                                        \
1236         break;                                                             \
1237     case CC_OP_ADDB:                                                       \
1238     case CC_OP_ADDW:                                                       \
1239     case CC_OP_ADDL:                                                       \
1240         res = n;                                                           \
1241         src2 = v;                                                          \
1242         src1 = EXTSIGN(res - src2, op - CC_OP_ADDB);                       \
1243         c = x;                                                             \
1244         z = n;                                                             \
1245         v = (res ^ src1) & ~(src1 ^ src2);                                 \
1246         break;                                                             \
1247     case CC_OP_SUBB:                                                       \
1248     case CC_OP_SUBW:                                                       \
1249     case CC_OP_SUBL:                                                       \
1250         res = n;                                                           \
1251         src2 = v;                                                          \
1252         src1 = EXTSIGN(res + src2, op - CC_OP_SUBB);                       \
1253         c = x;                                                             \
1254         z = n;                                                             \
1255         v = (res ^ src1) & (src1 ^ src2);                                  \
1256         break;                                                             \
1257     case CC_OP_CMPB:                                                       \
1258     case CC_OP_CMPW:                                                       \
1259     case CC_OP_CMPL:                                                       \
1260         src1 = n;                                                          \
1261         src2 = v;                                                          \
1262         res = EXTSIGN(src1 - src2, op - CC_OP_CMPB);                       \
1263         n = res;                                                           \
1264         z = res;                                                           \
1265         c = src1 < src2;                                                   \
1266         v = (res ^ src1) & (src1 ^ src2);                                  \
1267         break;                                                             \
1268     case CC_OP_LOGIC:                                                      \
1269         c = v = 0;                                                         \
1270         z = n;                                                             \
1271         break;                                                             \
1272     default:                                                               \
1273         cpu_abort(env_cpu(env), "Bad CC_OP %d", op);                       \
1274     }                                                                      \
1275 } while (0)
1276 
1277 uint32_t cpu_m68k_get_ccr(CPUM68KState *env)
1278 {
1279     uint32_t x, c, n, z, v;
1280     uint32_t res, src1, src2;
1281 
1282     x = env->cc_x;
1283     n = env->cc_n;
1284     z = env->cc_z;
1285     v = env->cc_v;
1286     c = env->cc_c;
1287 
1288     COMPUTE_CCR(env->cc_op, x, n, z, v, c);
1289 
1290     n = n >> 31;
1291     z = (z == 0);
1292     v = v >> 31;
1293 
1294     return x * CCF_X + n * CCF_N + z * CCF_Z + v * CCF_V + c * CCF_C;
1295 }
1296 
1297 uint32_t HELPER(get_ccr)(CPUM68KState *env)
1298 {
1299     return cpu_m68k_get_ccr(env);
1300 }
1301 
1302 void cpu_m68k_set_ccr(CPUM68KState *env, uint32_t ccr)
1303 {
1304     env->cc_x = (ccr & CCF_X ? 1 : 0);
1305     env->cc_n = (ccr & CCF_N ? -1 : 0);
1306     env->cc_z = (ccr & CCF_Z ? 0 : 1);
1307     env->cc_v = (ccr & CCF_V ? -1 : 0);
1308     env->cc_c = (ccr & CCF_C ? 1 : 0);
1309     env->cc_op = CC_OP_FLAGS;
1310 }
1311 
1312 void HELPER(set_ccr)(CPUM68KState *env, uint32_t ccr)
1313 {
1314     cpu_m68k_set_ccr(env, ccr);
1315 }
1316 
1317 void HELPER(flush_flags)(CPUM68KState *env, uint32_t cc_op)
1318 {
1319     uint32_t res, src1, src2;
1320 
1321     COMPUTE_CCR(cc_op, env->cc_x, env->cc_n, env->cc_z, env->cc_v, env->cc_c);
1322     env->cc_op = CC_OP_FLAGS;
1323 }
1324 
1325 uint32_t HELPER(get_macf)(CPUM68KState *env, uint64_t val)
1326 {
1327     int rem;
1328     uint32_t result;
1329 
1330     if (env->macsr & MACSR_SU) {
1331         /* 16-bit rounding.  */
1332         rem = val & 0xffffff;
1333         val = (val >> 24) & 0xffffu;
1334         if (rem > 0x800000)
1335             val++;
1336         else if (rem == 0x800000)
1337             val += (val & 1);
1338     } else if (env->macsr & MACSR_RT) {
1339         /* 32-bit rounding.  */
1340         rem = val & 0xff;
1341         val >>= 8;
1342         if (rem > 0x80)
1343             val++;
1344         else if (rem == 0x80)
1345             val += (val & 1);
1346     } else {
1347         /* No rounding.  */
1348         val >>= 8;
1349     }
1350     if (env->macsr & MACSR_OMC) {
1351         /* Saturate.  */
1352         if (env->macsr & MACSR_SU) {
1353             if (val != (uint16_t) val) {
1354                 result = ((val >> 63) ^ 0x7fff) & 0xffff;
1355             } else {
1356                 result = val & 0xffff;
1357             }
1358         } else {
1359             if (val != (uint32_t)val) {
1360                 result = ((uint32_t)(val >> 63) & 0x7fffffff);
1361             } else {
1362                 result = (uint32_t)val;
1363             }
1364         }
1365     } else {
1366         /* No saturation.  */
1367         if (env->macsr & MACSR_SU) {
1368             result = val & 0xffff;
1369         } else {
1370             result = (uint32_t)val;
1371         }
1372     }
1373     return result;
1374 }
1375 
1376 uint32_t HELPER(get_macs)(uint64_t val)
1377 {
1378     if (val == (int32_t)val) {
1379         return (int32_t)val;
1380     } else {
1381         return (val >> 61) ^ ~SIGNBIT;
1382     }
1383 }
1384 
1385 uint32_t HELPER(get_macu)(uint64_t val)
1386 {
1387     if ((val >> 32) == 0) {
1388         return (uint32_t)val;
1389     } else {
1390         return 0xffffffffu;
1391     }
1392 }
1393 
1394 uint32_t HELPER(get_mac_extf)(CPUM68KState *env, uint32_t acc)
1395 {
1396     uint32_t val;
1397     val = env->macc[acc] & 0x00ff;
1398     val |= (env->macc[acc] >> 32) & 0xff00;
1399     val |= (env->macc[acc + 1] << 16) & 0x00ff0000;
1400     val |= (env->macc[acc + 1] >> 16) & 0xff000000;
1401     return val;
1402 }
1403 
1404 uint32_t HELPER(get_mac_exti)(CPUM68KState *env, uint32_t acc)
1405 {
1406     uint32_t val;
1407     val = (env->macc[acc] >> 32) & 0xffff;
1408     val |= (env->macc[acc + 1] >> 16) & 0xffff0000;
1409     return val;
1410 }
1411 
1412 void HELPER(set_mac_extf)(CPUM68KState *env, uint32_t val, uint32_t acc)
1413 {
1414     int64_t res;
1415     int32_t tmp;
1416     res = env->macc[acc] & 0xffffffff00ull;
1417     tmp = (int16_t)(val & 0xff00);
1418     res |= ((int64_t)tmp) << 32;
1419     res |= val & 0xff;
1420     env->macc[acc] = res;
1421     res = env->macc[acc + 1] & 0xffffffff00ull;
1422     tmp = (val & 0xff000000);
1423     res |= ((int64_t)tmp) << 16;
1424     res |= (val >> 16) & 0xff;
1425     env->macc[acc + 1] = res;
1426 }
1427 
1428 void HELPER(set_mac_exts)(CPUM68KState *env, uint32_t val, uint32_t acc)
1429 {
1430     int64_t res;
1431     int32_t tmp;
1432     res = (uint32_t)env->macc[acc];
1433     tmp = (int16_t)val;
1434     res |= ((int64_t)tmp) << 32;
1435     env->macc[acc] = res;
1436     res = (uint32_t)env->macc[acc + 1];
1437     tmp = val & 0xffff0000;
1438     res |= (int64_t)tmp << 16;
1439     env->macc[acc + 1] = res;
1440 }
1441 
1442 void HELPER(set_mac_extu)(CPUM68KState *env, uint32_t val, uint32_t acc)
1443 {
1444     uint64_t res;
1445     res = (uint32_t)env->macc[acc];
1446     res |= ((uint64_t)(val & 0xffff)) << 32;
1447     env->macc[acc] = res;
1448     res = (uint32_t)env->macc[acc + 1];
1449     res |= (uint64_t)(val & 0xffff0000) << 16;
1450     env->macc[acc + 1] = res;
1451 }
1452 
1453 #if !defined(CONFIG_USER_ONLY)
1454 void HELPER(ptest)(CPUM68KState *env, uint32_t addr, uint32_t is_read)
1455 {
1456     hwaddr physical;
1457     int access_type;
1458     int prot;
1459     int ret;
1460     target_ulong page_size;
1461 
1462     access_type = ACCESS_PTEST;
1463     if (env->dfc & 4) {
1464         access_type |= ACCESS_SUPER;
1465     }
1466     if ((env->dfc & 3) == 2) {
1467         access_type |= ACCESS_CODE;
1468     }
1469     if (!is_read) {
1470         access_type |= ACCESS_STORE;
1471     }
1472 
1473     env->mmu.mmusr = 0;
1474     env->mmu.ssw = 0;
1475     ret = get_physical_address(env, &physical, &prot, addr,
1476                                access_type, &page_size);
1477     if (ret == 0) {
1478         tlb_set_page(env_cpu(env), addr & TARGET_PAGE_MASK,
1479                      physical & TARGET_PAGE_MASK,
1480                      prot, access_type & ACCESS_SUPER ?
1481                      MMU_KERNEL_IDX : MMU_USER_IDX, page_size);
1482     }
1483 }
1484 
1485 void HELPER(pflush)(CPUM68KState *env, uint32_t addr, uint32_t opmode)
1486 {
1487     CPUState *cs = env_cpu(env);
1488 
1489     switch (opmode) {
1490     case 0: /* Flush page entry if not global */
1491     case 1: /* Flush page entry */
1492         tlb_flush_page(cs, addr);
1493         break;
1494     case 2: /* Flush all except global entries */
1495         tlb_flush(cs);
1496         break;
1497     case 3: /* Flush all entries */
1498         tlb_flush(cs);
1499         break;
1500     }
1501 }
1502 
1503 void HELPER(reset)(CPUM68KState *env)
1504 {
1505     /* FIXME: reset all except CPU */
1506 }
1507 #endif /* !CONFIG_USER_ONLY */
1508