xref: /openbmc/qemu/target/m68k/helper.c (revision b61af9b0)
1 /*
2  *  m68k op helpers
3  *
4  *  Copyright (c) 2006-2007 CodeSourcery
5  *  Written by Paul Brook
6  *
7  * This library is free software; you can redistribute it and/or
8  * modify it under the terms of the GNU Lesser General Public
9  * License as published by the Free Software Foundation; either
10  * version 2.1 of the License, or (at your option) any later version.
11  *
12  * This library is distributed in the hope that it will be useful,
13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
15  * Lesser General Public License for more details.
16  *
17  * You should have received a copy of the GNU Lesser General Public
18  * License along with this library; if not, see <http://www.gnu.org/licenses/>.
19  */
20 
21 #include "qemu/osdep.h"
22 #include "cpu.h"
23 #include "exec/exec-all.h"
24 #include "exec/gdbstub.h"
25 #include "exec/helper-proto.h"
26 #include "gdbstub/helpers.h"
27 #include "fpu/softfloat.h"
28 #include "qemu/qemu-print.h"
29 
30 #define SIGNBIT (1u << 31)
31 
32 static int cf_fpu_gdb_get_reg(CPUState *cs, GByteArray *mem_buf, int n)
33 {
34     M68kCPU *cpu = M68K_CPU(cs);
35     CPUM68KState *env = &cpu->env;
36 
37     if (n < 8) {
38         float_status s;
39         return gdb_get_reg64(mem_buf, floatx80_to_float64(env->fregs[n].d, &s));
40     }
41     switch (n) {
42     case 8: /* fpcontrol */
43         return gdb_get_reg32(mem_buf, env->fpcr);
44     case 9: /* fpstatus */
45         return gdb_get_reg32(mem_buf, env->fpsr);
46     case 10: /* fpiar, not implemented */
47         return gdb_get_reg32(mem_buf, 0);
48     }
49     return 0;
50 }
51 
52 static int cf_fpu_gdb_set_reg(CPUState *cs, uint8_t *mem_buf, int n)
53 {
54     M68kCPU *cpu = M68K_CPU(cs);
55     CPUM68KState *env = &cpu->env;
56 
57     if (n < 8) {
58         float_status s;
59         env->fregs[n].d = float64_to_floatx80(ldq_p(mem_buf), &s);
60         return 8;
61     }
62     switch (n) {
63     case 8: /* fpcontrol */
64         cpu_m68k_set_fpcr(env, ldl_p(mem_buf));
65         return 4;
66     case 9: /* fpstatus */
67         env->fpsr = ldl_p(mem_buf);
68         return 4;
69     case 10: /* fpiar, not implemented */
70         return 4;
71     }
72     return 0;
73 }
74 
75 static int m68k_fpu_gdb_get_reg(CPUState *cs, GByteArray *mem_buf, int n)
76 {
77     M68kCPU *cpu = M68K_CPU(cs);
78     CPUM68KState *env = &cpu->env;
79 
80     if (n < 8) {
81         int len = gdb_get_reg16(mem_buf, env->fregs[n].l.upper);
82         len += gdb_get_reg16(mem_buf, 0);
83         len += gdb_get_reg64(mem_buf, env->fregs[n].l.lower);
84         return len;
85     }
86     switch (n) {
87     case 8: /* fpcontrol */
88         return gdb_get_reg32(mem_buf, env->fpcr);
89     case 9: /* fpstatus */
90         return gdb_get_reg32(mem_buf, env->fpsr);
91     case 10: /* fpiar, not implemented */
92         return gdb_get_reg32(mem_buf, 0);
93     }
94     return 0;
95 }
96 
97 static int m68k_fpu_gdb_set_reg(CPUState *cs, uint8_t *mem_buf, int n)
98 {
99     M68kCPU *cpu = M68K_CPU(cs);
100     CPUM68KState *env = &cpu->env;
101 
102     if (n < 8) {
103         env->fregs[n].l.upper = lduw_be_p(mem_buf);
104         env->fregs[n].l.lower = ldq_be_p(mem_buf + 4);
105         return 12;
106     }
107     switch (n) {
108     case 8: /* fpcontrol */
109         cpu_m68k_set_fpcr(env, ldl_p(mem_buf));
110         return 4;
111     case 9: /* fpstatus */
112         env->fpsr = ldl_p(mem_buf);
113         return 4;
114     case 10: /* fpiar, not implemented */
115         return 4;
116     }
117     return 0;
118 }
119 
120 void m68k_cpu_init_gdb(M68kCPU *cpu)
121 {
122     CPUState *cs = CPU(cpu);
123     CPUM68KState *env = &cpu->env;
124 
125     if (m68k_feature(env, M68K_FEATURE_CF_FPU)) {
126         gdb_register_coprocessor(cs, cf_fpu_gdb_get_reg, cf_fpu_gdb_set_reg,
127                                  gdb_find_static_feature("cf-fp.xml"), 18);
128     } else if (m68k_feature(env, M68K_FEATURE_FPU)) {
129         gdb_register_coprocessor(cs, m68k_fpu_gdb_get_reg, m68k_fpu_gdb_set_reg,
130                                  gdb_find_static_feature("m68k-fp.xml"), 18);
131     }
132     /* TODO: Add [E]MAC registers.  */
133 }
134 
135 void HELPER(cf_movec_to)(CPUM68KState *env, uint32_t reg, uint32_t val)
136 {
137     switch (reg) {
138     case M68K_CR_CACR:
139         env->cacr = val;
140         m68k_switch_sp(env);
141         break;
142     case M68K_CR_ACR0:
143     case M68K_CR_ACR1:
144     case M68K_CR_ACR2:
145     case M68K_CR_ACR3:
146         /* TODO: Implement Access Control Registers.  */
147         break;
148     case M68K_CR_VBR:
149         env->vbr = val;
150         break;
151     /* TODO: Implement control registers.  */
152     default:
153         cpu_abort(env_cpu(env),
154                   "Unimplemented control register write 0x%x = 0x%x\n",
155                   reg, val);
156     }
157 }
158 
159 static void raise_exception_ra(CPUM68KState *env, int tt, uintptr_t raddr)
160 {
161     CPUState *cs = env_cpu(env);
162 
163     cs->exception_index = tt;
164     cpu_loop_exit_restore(cs, raddr);
165 }
166 
167 void HELPER(m68k_movec_to)(CPUM68KState *env, uint32_t reg, uint32_t val)
168 {
169     switch (reg) {
170     /* MC680[12346]0 */
171     case M68K_CR_SFC:
172         env->sfc = val & 7;
173         return;
174     /* MC680[12346]0 */
175     case M68K_CR_DFC:
176         env->dfc = val & 7;
177         return;
178     /* MC680[12346]0 */
179     case M68K_CR_VBR:
180         env->vbr = val;
181         return;
182     /* MC680[2346]0 */
183     case M68K_CR_CACR:
184         if (m68k_feature(env, M68K_FEATURE_M68020)) {
185             env->cacr = val & 0x0000000f;
186         } else if (m68k_feature(env, M68K_FEATURE_M68030)) {
187             env->cacr = val & 0x00003f1f;
188         } else if (m68k_feature(env, M68K_FEATURE_M68040)) {
189             env->cacr = val & 0x80008000;
190         } else if (m68k_feature(env, M68K_FEATURE_M68060)) {
191             env->cacr = val & 0xf8e0e000;
192         } else {
193             break;
194         }
195         m68k_switch_sp(env);
196         return;
197     /* MC680[46]0 */
198     case M68K_CR_TC:
199         if (m68k_feature(env, M68K_FEATURE_M68040)
200          || m68k_feature(env, M68K_FEATURE_M68060)) {
201             env->mmu.tcr = val;
202             return;
203         }
204         break;
205     /* MC68040 */
206     case M68K_CR_MMUSR:
207         if (m68k_feature(env, M68K_FEATURE_M68040)) {
208             env->mmu.mmusr = val;
209             return;
210         }
211         break;
212     /* MC680[46]0 */
213     case M68K_CR_SRP:
214         if (m68k_feature(env, M68K_FEATURE_M68040)
215          || m68k_feature(env, M68K_FEATURE_M68060)) {
216             env->mmu.srp = val;
217             return;
218         }
219         break;
220     /* MC680[46]0 */
221     case M68K_CR_URP:
222         if (m68k_feature(env, M68K_FEATURE_M68040)
223          || m68k_feature(env, M68K_FEATURE_M68060)) {
224             env->mmu.urp = val;
225             return;
226         }
227         break;
228     /* MC680[12346]0 */
229     case M68K_CR_USP:
230         env->sp[M68K_USP] = val;
231         return;
232     /* MC680[234]0 */
233     case M68K_CR_MSP:
234         if (m68k_feature(env, M68K_FEATURE_M68020)
235          || m68k_feature(env, M68K_FEATURE_M68030)
236          || m68k_feature(env, M68K_FEATURE_M68040)) {
237             env->sp[M68K_SSP] = val;
238             return;
239         }
240         break;
241     /* MC680[234]0 */
242     case M68K_CR_ISP:
243         if (m68k_feature(env, M68K_FEATURE_M68020)
244          || m68k_feature(env, M68K_FEATURE_M68030)
245          || m68k_feature(env, M68K_FEATURE_M68040)) {
246             env->sp[M68K_ISP] = val;
247             return;
248         }
249         break;
250     /* MC68040/MC68LC040 */
251     case M68K_CR_ITT0: /* MC68EC040 only: M68K_CR_IACR0 */
252         if (m68k_feature(env, M68K_FEATURE_M68040)) {
253             env->mmu.ttr[M68K_ITTR0] = val;
254             return;
255         }
256         break;
257     /* MC68040/MC68LC040 */
258     case M68K_CR_ITT1: /* MC68EC040 only: M68K_CR_IACR1 */
259         if (m68k_feature(env, M68K_FEATURE_M68040)) {
260             env->mmu.ttr[M68K_ITTR1] = val;
261             return;
262         }
263         break;
264     /* MC68040/MC68LC040 */
265     case M68K_CR_DTT0: /* MC68EC040 only: M68K_CR_DACR0 */
266         if (m68k_feature(env, M68K_FEATURE_M68040)) {
267             env->mmu.ttr[M68K_DTTR0] = val;
268             return;
269         }
270         break;
271     /* MC68040/MC68LC040 */
272     case M68K_CR_DTT1: /* MC68EC040 only: M68K_CR_DACR1 */
273         if (m68k_feature(env, M68K_FEATURE_M68040)) {
274             env->mmu.ttr[M68K_DTTR1] = val;
275             return;
276         }
277         break;
278     /* Unimplemented Registers */
279     case M68K_CR_CAAR:
280     case M68K_CR_PCR:
281     case M68K_CR_BUSCR:
282         cpu_abort(env_cpu(env),
283                   "Unimplemented control register write 0x%x = 0x%x\n",
284                   reg, val);
285     }
286 
287     /* Invalid control registers will generate an exception. */
288     raise_exception_ra(env, EXCP_ILLEGAL, 0);
289     return;
290 }
291 
292 uint32_t HELPER(m68k_movec_from)(CPUM68KState *env, uint32_t reg)
293 {
294     switch (reg) {
295     /* MC680[12346]0 */
296     case M68K_CR_SFC:
297         return env->sfc;
298     /* MC680[12346]0 */
299     case M68K_CR_DFC:
300         return env->dfc;
301     /* MC680[12346]0 */
302     case M68K_CR_VBR:
303         return env->vbr;
304     /* MC680[2346]0 */
305     case M68K_CR_CACR:
306         if (m68k_feature(env, M68K_FEATURE_M68020)
307          || m68k_feature(env, M68K_FEATURE_M68030)
308          || m68k_feature(env, M68K_FEATURE_M68040)
309          || m68k_feature(env, M68K_FEATURE_M68060)) {
310             return env->cacr;
311         }
312         break;
313     /* MC680[46]0 */
314     case M68K_CR_TC:
315         if (m68k_feature(env, M68K_FEATURE_M68040)
316          || m68k_feature(env, M68K_FEATURE_M68060)) {
317             return env->mmu.tcr;
318         }
319         break;
320     /* MC68040 */
321     case M68K_CR_MMUSR:
322         if (m68k_feature(env, M68K_FEATURE_M68040)) {
323             return env->mmu.mmusr;
324         }
325         break;
326     /* MC680[46]0 */
327     case M68K_CR_SRP:
328         if (m68k_feature(env, M68K_FEATURE_M68040)
329          || m68k_feature(env, M68K_FEATURE_M68060)) {
330             return env->mmu.srp;
331         }
332         break;
333     /* MC68040/MC68LC040 */
334     case M68K_CR_URP:
335         if (m68k_feature(env, M68K_FEATURE_M68040)
336          || m68k_feature(env, M68K_FEATURE_M68060)) {
337             return env->mmu.urp;
338         }
339         break;
340     /* MC680[46]0 */
341     case M68K_CR_USP:
342         return env->sp[M68K_USP];
343     /* MC680[234]0 */
344     case M68K_CR_MSP:
345         if (m68k_feature(env, M68K_FEATURE_M68020)
346          || m68k_feature(env, M68K_FEATURE_M68030)
347          || m68k_feature(env, M68K_FEATURE_M68040)) {
348             return env->sp[M68K_SSP];
349         }
350         break;
351     /* MC680[234]0 */
352     case M68K_CR_ISP:
353         if (m68k_feature(env, M68K_FEATURE_M68020)
354          || m68k_feature(env, M68K_FEATURE_M68030)
355          || m68k_feature(env, M68K_FEATURE_M68040)) {
356             return env->sp[M68K_ISP];
357         }
358         break;
359     /* MC68040/MC68LC040 */
360     case M68K_CR_ITT0: /* MC68EC040 only: M68K_CR_IACR0 */
361         if (m68k_feature(env, M68K_FEATURE_M68040)) {
362             return env->mmu.ttr[M68K_ITTR0];
363         }
364         break;
365     /* MC68040/MC68LC040 */
366     case M68K_CR_ITT1: /* MC68EC040 only: M68K_CR_IACR1 */
367         if (m68k_feature(env, M68K_FEATURE_M68040)) {
368             return env->mmu.ttr[M68K_ITTR1];
369         }
370         break;
371     /* MC68040/MC68LC040 */
372     case M68K_CR_DTT0: /* MC68EC040 only: M68K_CR_DACR0 */
373         if (m68k_feature(env, M68K_FEATURE_M68040)) {
374             return env->mmu.ttr[M68K_DTTR0];
375         }
376         break;
377     /* MC68040/MC68LC040 */
378     case M68K_CR_DTT1: /* MC68EC040 only: M68K_CR_DACR1 */
379         if (m68k_feature(env, M68K_FEATURE_M68040)) {
380             return env->mmu.ttr[M68K_DTTR1];
381         }
382         break;
383     /* Unimplemented Registers */
384     case M68K_CR_CAAR:
385     case M68K_CR_PCR:
386     case M68K_CR_BUSCR:
387         cpu_abort(env_cpu(env), "Unimplemented control register read 0x%x\n",
388                   reg);
389     }
390 
391     /* Invalid control registers will generate an exception. */
392     raise_exception_ra(env, EXCP_ILLEGAL, 0);
393 
394     return 0;
395 }
396 
397 void HELPER(set_macsr)(CPUM68KState *env, uint32_t val)
398 {
399     uint32_t acc;
400     int8_t exthigh;
401     uint8_t extlow;
402     uint64_t regval;
403     int i;
404     if ((env->macsr ^ val) & (MACSR_FI | MACSR_SU)) {
405         for (i = 0; i < 4; i++) {
406             regval = env->macc[i];
407             exthigh = regval >> 40;
408             if (env->macsr & MACSR_FI) {
409                 acc = regval >> 8;
410                 extlow = regval;
411             } else {
412                 acc = regval;
413                 extlow = regval >> 32;
414             }
415             if (env->macsr & MACSR_FI) {
416                 regval = (((uint64_t)acc) << 8) | extlow;
417                 regval |= ((int64_t)exthigh) << 40;
418             } else if (env->macsr & MACSR_SU) {
419                 regval = acc | (((int64_t)extlow) << 32);
420                 regval |= ((int64_t)exthigh) << 40;
421             } else {
422                 regval = acc | (((uint64_t)extlow) << 32);
423                 regval |= ((uint64_t)(uint8_t)exthigh) << 40;
424             }
425             env->macc[i] = regval;
426         }
427     }
428     env->macsr = val;
429 }
430 
431 void m68k_switch_sp(CPUM68KState *env)
432 {
433     int new_sp;
434 
435     env->sp[env->current_sp] = env->aregs[7];
436     if (m68k_feature(env, M68K_FEATURE_M68K)) {
437         if (env->sr & SR_S) {
438             /* SR:Master-Mode bit unimplemented then ISP is not available */
439             if (!m68k_feature(env, M68K_FEATURE_MSP) || env->sr & SR_M) {
440                 new_sp = M68K_SSP;
441             } else {
442                 new_sp = M68K_ISP;
443             }
444         } else {
445             new_sp = M68K_USP;
446         }
447     } else {
448         new_sp = (env->sr & SR_S && env->cacr & M68K_CACR_EUSP)
449                  ? M68K_SSP : M68K_USP;
450     }
451     env->aregs[7] = env->sp[new_sp];
452     env->current_sp = new_sp;
453 }
454 
455 #if !defined(CONFIG_USER_ONLY)
456 /* MMU: 68040 only */
457 
458 static void print_address_zone(uint32_t logical, uint32_t physical,
459                                uint32_t size, int attr)
460 {
461     qemu_printf("%08x - %08x -> %08x - %08x %c ",
462                 logical, logical + size - 1,
463                 physical, physical + size - 1,
464                 attr & 4 ? 'W' : '-');
465     size >>= 10;
466     if (size < 1024) {
467         qemu_printf("(%d KiB)\n", size);
468     } else {
469         size >>= 10;
470         if (size < 1024) {
471             qemu_printf("(%d MiB)\n", size);
472         } else {
473             size >>= 10;
474             qemu_printf("(%d GiB)\n", size);
475         }
476     }
477 }
478 
479 static void dump_address_map(CPUM68KState *env, uint32_t root_pointer)
480 {
481     int i, j, k;
482     int tic_size, tic_shift;
483     uint32_t tib_mask;
484     uint32_t tia, tib, tic;
485     uint32_t logical = 0xffffffff, physical = 0xffffffff;
486     uint32_t first_logical = 0xffffffff, first_physical = 0xffffffff;
487     uint32_t last_logical, last_physical;
488     int32_t size;
489     int last_attr = -1, attr = -1;
490     CPUState *cs = env_cpu(env);
491     MemTxResult txres;
492 
493     if (env->mmu.tcr & M68K_TCR_PAGE_8K) {
494         /* 8k page */
495         tic_size = 32;
496         tic_shift = 13;
497         tib_mask = M68K_8K_PAGE_MASK;
498     } else {
499         /* 4k page */
500         tic_size = 64;
501         tic_shift = 12;
502         tib_mask = M68K_4K_PAGE_MASK;
503     }
504     for (i = 0; i < M68K_ROOT_POINTER_ENTRIES; i++) {
505         tia = address_space_ldl(cs->as, M68K_POINTER_BASE(root_pointer) + i * 4,
506                                 MEMTXATTRS_UNSPECIFIED, &txres);
507         if (txres != MEMTX_OK || !M68K_UDT_VALID(tia)) {
508             continue;
509         }
510         for (j = 0; j < M68K_ROOT_POINTER_ENTRIES; j++) {
511             tib = address_space_ldl(cs->as, M68K_POINTER_BASE(tia) + j * 4,
512                                     MEMTXATTRS_UNSPECIFIED, &txres);
513             if (txres != MEMTX_OK || !M68K_UDT_VALID(tib)) {
514                 continue;
515             }
516             for (k = 0; k < tic_size; k++) {
517                 tic = address_space_ldl(cs->as, (tib & tib_mask) + k * 4,
518                                         MEMTXATTRS_UNSPECIFIED, &txres);
519                 if (txres != MEMTX_OK || !M68K_PDT_VALID(tic)) {
520                     continue;
521                 }
522                 if (M68K_PDT_INDIRECT(tic)) {
523                     tic = address_space_ldl(cs->as, M68K_INDIRECT_POINTER(tic),
524                                             MEMTXATTRS_UNSPECIFIED, &txres);
525                     if (txres != MEMTX_OK) {
526                         continue;
527                     }
528                 }
529 
530                 last_logical = logical;
531                 logical = (i << M68K_TTS_ROOT_SHIFT) |
532                           (j << M68K_TTS_POINTER_SHIFT) |
533                           (k << tic_shift);
534 
535                 last_physical = physical;
536                 physical = tic & ~((1 << tic_shift) - 1);
537 
538                 last_attr = attr;
539                 attr = tic & ((1 << tic_shift) - 1);
540 
541                 if ((logical != (last_logical + (1 << tic_shift))) ||
542                     (physical != (last_physical + (1 << tic_shift))) ||
543                     (attr & 4) != (last_attr & 4)) {
544 
545                     if (first_logical != 0xffffffff) {
546                         size = last_logical + (1 << tic_shift) -
547                                first_logical;
548                         print_address_zone(first_logical,
549                                            first_physical, size, last_attr);
550                     }
551                     first_logical = logical;
552                     first_physical = physical;
553                 }
554             }
555         }
556     }
557     if (first_logical != logical || (attr & 4) != (last_attr & 4)) {
558         size = logical + (1 << tic_shift) - first_logical;
559         print_address_zone(first_logical, first_physical, size, last_attr);
560     }
561 }
562 
563 #define DUMP_CACHEFLAGS(a) \
564     switch (a & M68K_DESC_CACHEMODE) { \
565     case M68K_DESC_CM_WRTHRU: /* cacheable, write-through */ \
566         qemu_printf("T"); \
567         break; \
568     case M68K_DESC_CM_COPYBK: /* cacheable, copyback */ \
569         qemu_printf("C"); \
570         break; \
571     case M68K_DESC_CM_SERIAL: /* noncachable, serialized */ \
572         qemu_printf("S"); \
573         break; \
574     case M68K_DESC_CM_NCACHE: /* noncachable */ \
575         qemu_printf("N"); \
576         break; \
577     }
578 
579 static void dump_ttr(uint32_t ttr)
580 {
581     if ((ttr & M68K_TTR_ENABLED) == 0) {
582         qemu_printf("disabled\n");
583         return;
584     }
585     qemu_printf("Base: 0x%08x Mask: 0x%08x Control: ",
586                 ttr & M68K_TTR_ADDR_BASE,
587                 (ttr & M68K_TTR_ADDR_MASK) << M68K_TTR_ADDR_MASK_SHIFT);
588     switch (ttr & M68K_TTR_SFIELD) {
589     case M68K_TTR_SFIELD_USER:
590         qemu_printf("U");
591         break;
592     case M68K_TTR_SFIELD_SUPER:
593         qemu_printf("S");
594         break;
595     default:
596         qemu_printf("*");
597         break;
598     }
599     DUMP_CACHEFLAGS(ttr);
600     if (ttr & M68K_DESC_WRITEPROT) {
601         qemu_printf("R");
602     } else {
603         qemu_printf("W");
604     }
605     qemu_printf(" U: %d\n", (ttr & M68K_DESC_USERATTR) >>
606                                M68K_DESC_USERATTR_SHIFT);
607 }
608 
609 void dump_mmu(CPUM68KState *env)
610 {
611     if ((env->mmu.tcr & M68K_TCR_ENABLED) == 0) {
612         qemu_printf("Translation disabled\n");
613         return;
614     }
615     qemu_printf("Page Size: ");
616     if (env->mmu.tcr & M68K_TCR_PAGE_8K) {
617         qemu_printf("8kB\n");
618     } else {
619         qemu_printf("4kB\n");
620     }
621 
622     qemu_printf("MMUSR: ");
623     if (env->mmu.mmusr & M68K_MMU_B_040) {
624         qemu_printf("BUS ERROR\n");
625     } else {
626         qemu_printf("Phy=%08x Flags: ", env->mmu.mmusr & 0xfffff000);
627         /* flags found on the page descriptor */
628         if (env->mmu.mmusr & M68K_MMU_G_040) {
629             qemu_printf("G"); /* Global */
630         } else {
631             qemu_printf(".");
632         }
633         if (env->mmu.mmusr & M68K_MMU_S_040) {
634             qemu_printf("S"); /* Supervisor */
635         } else {
636             qemu_printf(".");
637         }
638         if (env->mmu.mmusr & M68K_MMU_M_040) {
639             qemu_printf("M"); /* Modified */
640         } else {
641             qemu_printf(".");
642         }
643         if (env->mmu.mmusr & M68K_MMU_WP_040) {
644             qemu_printf("W"); /* Write protect */
645         } else {
646             qemu_printf(".");
647         }
648         if (env->mmu.mmusr & M68K_MMU_T_040) {
649             qemu_printf("T"); /* Transparent */
650         } else {
651             qemu_printf(".");
652         }
653         if (env->mmu.mmusr & M68K_MMU_R_040) {
654             qemu_printf("R"); /* Resident */
655         } else {
656             qemu_printf(".");
657         }
658         qemu_printf(" Cache: ");
659         DUMP_CACHEFLAGS(env->mmu.mmusr);
660         qemu_printf(" U: %d\n", (env->mmu.mmusr >> 8) & 3);
661         qemu_printf("\n");
662     }
663 
664     qemu_printf("ITTR0: ");
665     dump_ttr(env->mmu.ttr[M68K_ITTR0]);
666     qemu_printf("ITTR1: ");
667     dump_ttr(env->mmu.ttr[M68K_ITTR1]);
668     qemu_printf("DTTR0: ");
669     dump_ttr(env->mmu.ttr[M68K_DTTR0]);
670     qemu_printf("DTTR1: ");
671     dump_ttr(env->mmu.ttr[M68K_DTTR1]);
672 
673     qemu_printf("SRP: 0x%08x\n", env->mmu.srp);
674     dump_address_map(env, env->mmu.srp);
675 
676     qemu_printf("URP: 0x%08x\n", env->mmu.urp);
677     dump_address_map(env, env->mmu.urp);
678 }
679 
680 static int check_TTR(uint32_t ttr, int *prot, target_ulong addr,
681                      int access_type)
682 {
683     uint32_t base, mask;
684 
685     /* check if transparent translation is enabled */
686     if ((ttr & M68K_TTR_ENABLED) == 0) {
687         return 0;
688     }
689 
690     /* check mode access */
691     switch (ttr & M68K_TTR_SFIELD) {
692     case M68K_TTR_SFIELD_USER:
693         /* match only if user */
694         if ((access_type & ACCESS_SUPER) != 0) {
695             return 0;
696         }
697         break;
698     case M68K_TTR_SFIELD_SUPER:
699         /* match only if supervisor */
700         if ((access_type & ACCESS_SUPER) == 0) {
701             return 0;
702         }
703         break;
704     default:
705         /* all other values disable mode matching (FC2) */
706         break;
707     }
708 
709     /* check address matching */
710 
711     base = ttr & M68K_TTR_ADDR_BASE;
712     mask = (ttr & M68K_TTR_ADDR_MASK) ^ M68K_TTR_ADDR_MASK;
713     mask <<= M68K_TTR_ADDR_MASK_SHIFT;
714 
715     if ((addr & mask) != (base & mask)) {
716         return 0;
717     }
718 
719     *prot = PAGE_READ | PAGE_EXEC;
720     if ((ttr & M68K_DESC_WRITEPROT) == 0) {
721         *prot |= PAGE_WRITE;
722     }
723 
724     return 1;
725 }
726 
727 static int get_physical_address(CPUM68KState *env, hwaddr *physical,
728                                 int *prot, target_ulong address,
729                                 int access_type, target_ulong *page_size)
730 {
731     CPUState *cs = env_cpu(env);
732     uint32_t entry;
733     uint32_t next;
734     target_ulong page_mask;
735     bool debug = access_type & ACCESS_DEBUG;
736     int page_bits;
737     int i;
738     MemTxResult txres;
739 
740     /* Transparent Translation (physical = logical) */
741     for (i = 0; i < M68K_MAX_TTR; i++) {
742         if (check_TTR(env->mmu.TTR(access_type, i),
743                       prot, address, access_type)) {
744             if (access_type & ACCESS_PTEST) {
745                 /* Transparent Translation Register bit */
746                 env->mmu.mmusr = M68K_MMU_T_040 | M68K_MMU_R_040;
747             }
748             *physical = address;
749             *page_size = TARGET_PAGE_SIZE;
750             return 0;
751         }
752     }
753 
754     /* Page Table Root Pointer */
755     *prot = PAGE_READ | PAGE_WRITE;
756     if (access_type & ACCESS_CODE) {
757         *prot |= PAGE_EXEC;
758     }
759     if (access_type & ACCESS_SUPER) {
760         next = env->mmu.srp;
761     } else {
762         next = env->mmu.urp;
763     }
764 
765     /* Root Index */
766     entry = M68K_POINTER_BASE(next) | M68K_ROOT_INDEX(address);
767 
768     next = address_space_ldl(cs->as, entry, MEMTXATTRS_UNSPECIFIED, &txres);
769     if (txres != MEMTX_OK) {
770         goto txfail;
771     }
772     if (!M68K_UDT_VALID(next)) {
773         return -1;
774     }
775     if (!(next & M68K_DESC_USED) && !debug) {
776         address_space_stl(cs->as, entry, next | M68K_DESC_USED,
777                           MEMTXATTRS_UNSPECIFIED, &txres);
778         if (txres != MEMTX_OK) {
779             goto txfail;
780         }
781     }
782     if (next & M68K_DESC_WRITEPROT) {
783         if (access_type & ACCESS_PTEST) {
784             env->mmu.mmusr |= M68K_MMU_WP_040;
785         }
786         *prot &= ~PAGE_WRITE;
787         if (access_type & ACCESS_STORE) {
788             return -1;
789         }
790     }
791 
792     /* Pointer Index */
793     entry = M68K_POINTER_BASE(next) | M68K_POINTER_INDEX(address);
794 
795     next = address_space_ldl(cs->as, entry, MEMTXATTRS_UNSPECIFIED, &txres);
796     if (txres != MEMTX_OK) {
797         goto txfail;
798     }
799     if (!M68K_UDT_VALID(next)) {
800         return -1;
801     }
802     if (!(next & M68K_DESC_USED) && !debug) {
803         address_space_stl(cs->as, entry, next | M68K_DESC_USED,
804                           MEMTXATTRS_UNSPECIFIED, &txres);
805         if (txres != MEMTX_OK) {
806             goto txfail;
807         }
808     }
809     if (next & M68K_DESC_WRITEPROT) {
810         if (access_type & ACCESS_PTEST) {
811             env->mmu.mmusr |= M68K_MMU_WP_040;
812         }
813         *prot &= ~PAGE_WRITE;
814         if (access_type & ACCESS_STORE) {
815             return -1;
816         }
817     }
818 
819     /* Page Index */
820     if (env->mmu.tcr & M68K_TCR_PAGE_8K) {
821         entry = M68K_8K_PAGE_BASE(next) | M68K_8K_PAGE_INDEX(address);
822     } else {
823         entry = M68K_4K_PAGE_BASE(next) | M68K_4K_PAGE_INDEX(address);
824     }
825 
826     next = address_space_ldl(cs->as, entry, MEMTXATTRS_UNSPECIFIED, &txres);
827     if (txres != MEMTX_OK) {
828         goto txfail;
829     }
830 
831     if (!M68K_PDT_VALID(next)) {
832         return -1;
833     }
834     if (M68K_PDT_INDIRECT(next)) {
835         next = address_space_ldl(cs->as, M68K_INDIRECT_POINTER(next),
836                                  MEMTXATTRS_UNSPECIFIED, &txres);
837         if (txres != MEMTX_OK) {
838             goto txfail;
839         }
840     }
841     if (access_type & ACCESS_STORE) {
842         if (next & M68K_DESC_WRITEPROT) {
843             if (!(next & M68K_DESC_USED) && !debug) {
844                 address_space_stl(cs->as, entry, next | M68K_DESC_USED,
845                                   MEMTXATTRS_UNSPECIFIED, &txres);
846                 if (txres != MEMTX_OK) {
847                     goto txfail;
848                 }
849             }
850         } else if ((next & (M68K_DESC_MODIFIED | M68K_DESC_USED)) !=
851                            (M68K_DESC_MODIFIED | M68K_DESC_USED) && !debug) {
852             address_space_stl(cs->as, entry,
853                               next | (M68K_DESC_MODIFIED | M68K_DESC_USED),
854                               MEMTXATTRS_UNSPECIFIED, &txres);
855             if (txres != MEMTX_OK) {
856                 goto txfail;
857             }
858         }
859     } else {
860         if (!(next & M68K_DESC_USED) && !debug) {
861             address_space_stl(cs->as, entry, next | M68K_DESC_USED,
862                               MEMTXATTRS_UNSPECIFIED, &txres);
863             if (txres != MEMTX_OK) {
864                 goto txfail;
865             }
866         }
867     }
868 
869     if (env->mmu.tcr & M68K_TCR_PAGE_8K) {
870         page_bits = 13;
871     } else {
872         page_bits = 12;
873     }
874     *page_size = 1 << page_bits;
875     page_mask = ~(*page_size - 1);
876     *physical = (next & page_mask) + (address & (*page_size - 1));
877 
878     if (access_type & ACCESS_PTEST) {
879         env->mmu.mmusr |= next & M68K_MMU_SR_MASK_040;
880         env->mmu.mmusr |= *physical & 0xfffff000;
881         env->mmu.mmusr |= M68K_MMU_R_040;
882     }
883 
884     if (next & M68K_DESC_WRITEPROT) {
885         *prot &= ~PAGE_WRITE;
886         if (access_type & ACCESS_STORE) {
887             return -1;
888         }
889     }
890     if (next & M68K_DESC_SUPERONLY) {
891         if ((access_type & ACCESS_SUPER) == 0) {
892             return -1;
893         }
894     }
895 
896     return 0;
897 
898 txfail:
899     /*
900      * A page table load/store failed. TODO: we should really raise a
901      * suitable guest fault here if this is not a debug access.
902      * For now just return that the translation failed.
903      */
904     return -1;
905 }
906 
907 hwaddr m68k_cpu_get_phys_page_debug(CPUState *cs, vaddr addr)
908 {
909     M68kCPU *cpu = M68K_CPU(cs);
910     CPUM68KState *env = &cpu->env;
911     hwaddr phys_addr;
912     int prot;
913     int access_type;
914     target_ulong page_size;
915 
916     if ((env->mmu.tcr & M68K_TCR_ENABLED) == 0) {
917         /* MMU disabled */
918         return addr;
919     }
920 
921     access_type = ACCESS_DATA | ACCESS_DEBUG;
922     if (env->sr & SR_S) {
923         access_type |= ACCESS_SUPER;
924     }
925 
926     if (get_physical_address(env, &phys_addr, &prot,
927                              addr, access_type, &page_size) != 0) {
928         return -1;
929     }
930 
931     return phys_addr;
932 }
933 
934 /*
935  * Notify CPU of a pending interrupt.  Prioritization and vectoring should
936  * be handled by the interrupt controller.  Real hardware only requests
937  * the vector when the interrupt is acknowledged by the CPU.  For
938  * simplicity we calculate it when the interrupt is signalled.
939  */
940 void m68k_set_irq_level(M68kCPU *cpu, int level, uint8_t vector)
941 {
942     CPUState *cs = CPU(cpu);
943     CPUM68KState *env = &cpu->env;
944 
945     env->pending_level = level;
946     env->pending_vector = vector;
947     if (level) {
948         cpu_interrupt(cs, CPU_INTERRUPT_HARD);
949     } else {
950         cpu_reset_interrupt(cs, CPU_INTERRUPT_HARD);
951     }
952 }
953 
954 bool m68k_cpu_tlb_fill(CPUState *cs, vaddr address, int size,
955                        MMUAccessType qemu_access_type, int mmu_idx,
956                        bool probe, uintptr_t retaddr)
957 {
958     M68kCPU *cpu = M68K_CPU(cs);
959     CPUM68KState *env = &cpu->env;
960     hwaddr physical;
961     int prot;
962     int access_type;
963     int ret;
964     target_ulong page_size;
965 
966     if ((env->mmu.tcr & M68K_TCR_ENABLED) == 0) {
967         /* MMU disabled */
968         tlb_set_page(cs, address & TARGET_PAGE_MASK,
969                      address & TARGET_PAGE_MASK,
970                      PAGE_READ | PAGE_WRITE | PAGE_EXEC,
971                      mmu_idx, TARGET_PAGE_SIZE);
972         return true;
973     }
974 
975     if (qemu_access_type == MMU_INST_FETCH) {
976         access_type = ACCESS_CODE;
977     } else {
978         access_type = ACCESS_DATA;
979         if (qemu_access_type == MMU_DATA_STORE) {
980             access_type |= ACCESS_STORE;
981         }
982     }
983     if (mmu_idx != MMU_USER_IDX) {
984         access_type |= ACCESS_SUPER;
985     }
986 
987     ret = get_physical_address(&cpu->env, &physical, &prot,
988                                address, access_type, &page_size);
989     if (likely(ret == 0)) {
990         tlb_set_page(cs, address & TARGET_PAGE_MASK,
991                      physical & TARGET_PAGE_MASK, prot, mmu_idx, page_size);
992         return true;
993     }
994 
995     if (probe) {
996         return false;
997     }
998 
999     /* page fault */
1000     env->mmu.ssw = M68K_ATC_040;
1001     switch (size) {
1002     case 1:
1003         env->mmu.ssw |= M68K_BA_SIZE_BYTE;
1004         break;
1005     case 2:
1006         env->mmu.ssw |= M68K_BA_SIZE_WORD;
1007         break;
1008     case 4:
1009         env->mmu.ssw |= M68K_BA_SIZE_LONG;
1010         break;
1011     }
1012     if (access_type & ACCESS_SUPER) {
1013         env->mmu.ssw |= M68K_TM_040_SUPER;
1014     }
1015     if (access_type & ACCESS_CODE) {
1016         env->mmu.ssw |= M68K_TM_040_CODE;
1017     } else {
1018         env->mmu.ssw |= M68K_TM_040_DATA;
1019     }
1020     if (!(access_type & ACCESS_STORE)) {
1021         env->mmu.ssw |= M68K_RW_040;
1022     }
1023 
1024     cs->exception_index = EXCP_ACCESS;
1025     env->mmu.ar = address;
1026     cpu_loop_exit_restore(cs, retaddr);
1027 }
1028 #endif /* !CONFIG_USER_ONLY */
1029 
1030 uint32_t HELPER(bitrev)(uint32_t x)
1031 {
1032     x = ((x >> 1) & 0x55555555u) | ((x << 1) & 0xaaaaaaaau);
1033     x = ((x >> 2) & 0x33333333u) | ((x << 2) & 0xccccccccu);
1034     x = ((x >> 4) & 0x0f0f0f0fu) | ((x << 4) & 0xf0f0f0f0u);
1035     return bswap32(x);
1036 }
1037 
1038 uint32_t HELPER(ff1)(uint32_t x)
1039 {
1040     int n;
1041     for (n = 32; x; n--)
1042         x >>= 1;
1043     return n;
1044 }
1045 
1046 uint32_t HELPER(sats)(uint32_t val, uint32_t v)
1047 {
1048     /* The result has the opposite sign to the original value.  */
1049     if ((int32_t)v < 0) {
1050         val = (((int32_t)val) >> 31) ^ SIGNBIT;
1051     }
1052     return val;
1053 }
1054 
1055 void cpu_m68k_set_sr(CPUM68KState *env, uint32_t sr)
1056 {
1057     env->sr = sr & 0xffe0;
1058     cpu_m68k_set_ccr(env, sr);
1059     m68k_switch_sp(env);
1060 }
1061 
1062 void HELPER(set_sr)(CPUM68KState *env, uint32_t val)
1063 {
1064     cpu_m68k_set_sr(env, val);
1065 }
1066 
1067 /* MAC unit.  */
1068 /*
1069  * FIXME: The MAC unit implementation is a bit of a mess.  Some helpers
1070  * take values,  others take register numbers and manipulate the contents
1071  * in-place.
1072  */
1073 void HELPER(mac_move)(CPUM68KState *env, uint32_t dest, uint32_t src)
1074 {
1075     uint32_t mask;
1076     env->macc[dest] = env->macc[src];
1077     mask = MACSR_PAV0 << dest;
1078     if (env->macsr & (MACSR_PAV0 << src))
1079         env->macsr |= mask;
1080     else
1081         env->macsr &= ~mask;
1082 }
1083 
1084 uint64_t HELPER(macmuls)(CPUM68KState *env, uint32_t op1, uint32_t op2)
1085 {
1086     int64_t product;
1087     int64_t res;
1088 
1089     product = (uint64_t)op1 * op2;
1090     res = (product << 24) >> 24;
1091     if (res != product) {
1092         env->macsr |= MACSR_V;
1093         if (env->macsr & MACSR_OMC) {
1094             /* Make sure the accumulate operation overflows.  */
1095             if (product < 0)
1096                 res = ~(1ll << 50);
1097             else
1098                 res = 1ll << 50;
1099         }
1100     }
1101     return res;
1102 }
1103 
1104 uint64_t HELPER(macmulu)(CPUM68KState *env, uint32_t op1, uint32_t op2)
1105 {
1106     uint64_t product;
1107 
1108     product = (uint64_t)op1 * op2;
1109     if (product & (0xffffffull << 40)) {
1110         env->macsr |= MACSR_V;
1111         if (env->macsr & MACSR_OMC) {
1112             /* Make sure the accumulate operation overflows.  */
1113             product = 1ll << 50;
1114         } else {
1115             product &= ((1ull << 40) - 1);
1116         }
1117     }
1118     return product;
1119 }
1120 
1121 uint64_t HELPER(macmulf)(CPUM68KState *env, uint32_t op1, uint32_t op2)
1122 {
1123     uint64_t product;
1124     uint32_t remainder;
1125 
1126     product = (uint64_t)op1 * op2;
1127     if (env->macsr & MACSR_RT) {
1128         remainder = product & 0xffffff;
1129         product >>= 24;
1130         if (remainder > 0x800000)
1131             product++;
1132         else if (remainder == 0x800000)
1133             product += (product & 1);
1134     } else {
1135         product >>= 24;
1136     }
1137     return product;
1138 }
1139 
1140 void HELPER(macsats)(CPUM68KState *env, uint32_t acc)
1141 {
1142     int64_t tmp;
1143     int64_t result;
1144     tmp = env->macc[acc];
1145     result = ((tmp << 16) >> 16);
1146     if (result != tmp) {
1147         env->macsr |= MACSR_V;
1148     }
1149     if (env->macsr & MACSR_V) {
1150         env->macsr |= MACSR_PAV0 << acc;
1151         if (env->macsr & MACSR_OMC) {
1152             /*
1153              * The result is saturated to 32 bits, despite overflow occurring
1154              * at 48 bits.  Seems weird, but that's what the hardware docs
1155              * say.
1156              */
1157             result = (result >> 63) ^ 0x7fffffff;
1158         }
1159     }
1160     env->macc[acc] = result;
1161 }
1162 
1163 void HELPER(macsatu)(CPUM68KState *env, uint32_t acc)
1164 {
1165     uint64_t val;
1166 
1167     val = env->macc[acc];
1168     if (val & (0xffffull << 48)) {
1169         env->macsr |= MACSR_V;
1170     }
1171     if (env->macsr & MACSR_V) {
1172         env->macsr |= MACSR_PAV0 << acc;
1173         if (env->macsr & MACSR_OMC) {
1174             if (val > (1ull << 53))
1175                 val = 0;
1176             else
1177                 val = (1ull << 48) - 1;
1178         } else {
1179             val &= ((1ull << 48) - 1);
1180         }
1181     }
1182     env->macc[acc] = val;
1183 }
1184 
1185 void HELPER(macsatf)(CPUM68KState *env, uint32_t acc)
1186 {
1187     int64_t sum;
1188     int64_t result;
1189 
1190     sum = env->macc[acc];
1191     result = (sum << 16) >> 16;
1192     if (result != sum) {
1193         env->macsr |= MACSR_V;
1194     }
1195     if (env->macsr & MACSR_V) {
1196         env->macsr |= MACSR_PAV0 << acc;
1197         if (env->macsr & MACSR_OMC) {
1198             result = (result >> 63) ^ 0x7fffffffffffll;
1199         }
1200     }
1201     env->macc[acc] = result;
1202 }
1203 
1204 void HELPER(mac_set_flags)(CPUM68KState *env, uint32_t acc)
1205 {
1206     uint64_t val;
1207     val = env->macc[acc];
1208     if (val == 0) {
1209         env->macsr |= MACSR_Z;
1210     } else if (val & (1ull << 47)) {
1211         env->macsr |= MACSR_N;
1212     }
1213     if (env->macsr & (MACSR_PAV0 << acc)) {
1214         env->macsr |= MACSR_V;
1215     }
1216     if (env->macsr & MACSR_FI) {
1217         val = ((int64_t)val) >> 40;
1218         if (val != 0 && val != -1)
1219             env->macsr |= MACSR_EV;
1220     } else if (env->macsr & MACSR_SU) {
1221         val = ((int64_t)val) >> 32;
1222         if (val != 0 && val != -1)
1223             env->macsr |= MACSR_EV;
1224     } else {
1225         if ((val >> 32) != 0)
1226             env->macsr |= MACSR_EV;
1227     }
1228 }
1229 
1230 #define EXTSIGN(val, index) (     \
1231     (index == 0) ? (int8_t)(val) : ((index == 1) ? (int16_t)(val) : (val)) \
1232 )
1233 
1234 #define COMPUTE_CCR(op, x, n, z, v, c) {                                   \
1235     switch (op) {                                                          \
1236     case CC_OP_FLAGS:                                                      \
1237         /* Everything in place.  */                                        \
1238         break;                                                             \
1239     case CC_OP_ADDB:                                                       \
1240     case CC_OP_ADDW:                                                       \
1241     case CC_OP_ADDL:                                                       \
1242         res = n;                                                           \
1243         src2 = v;                                                          \
1244         src1 = EXTSIGN(res - src2, op - CC_OP_ADDB);                       \
1245         c = x;                                                             \
1246         z = n;                                                             \
1247         v = (res ^ src1) & ~(src1 ^ src2);                                 \
1248         break;                                                             \
1249     case CC_OP_SUBB:                                                       \
1250     case CC_OP_SUBW:                                                       \
1251     case CC_OP_SUBL:                                                       \
1252         res = n;                                                           \
1253         src2 = v;                                                          \
1254         src1 = EXTSIGN(res + src2, op - CC_OP_SUBB);                       \
1255         c = x;                                                             \
1256         z = n;                                                             \
1257         v = (res ^ src1) & (src1 ^ src2);                                  \
1258         break;                                                             \
1259     case CC_OP_CMPB:                                                       \
1260     case CC_OP_CMPW:                                                       \
1261     case CC_OP_CMPL:                                                       \
1262         src1 = n;                                                          \
1263         src2 = v;                                                          \
1264         res = EXTSIGN(src1 - src2, op - CC_OP_CMPB);                       \
1265         n = res;                                                           \
1266         z = res;                                                           \
1267         c = src1 < src2;                                                   \
1268         v = (res ^ src1) & (src1 ^ src2);                                  \
1269         break;                                                             \
1270     case CC_OP_LOGIC:                                                      \
1271         c = v = 0;                                                         \
1272         z = n;                                                             \
1273         break;                                                             \
1274     default:                                                               \
1275         cpu_abort(env_cpu(env), "Bad CC_OP %d", op);                       \
1276     }                                                                      \
1277 } while (0)
1278 
1279 uint32_t cpu_m68k_get_ccr(CPUM68KState *env)
1280 {
1281     uint32_t x, c, n, z, v;
1282     uint32_t res, src1, src2;
1283 
1284     x = env->cc_x;
1285     n = env->cc_n;
1286     z = env->cc_z;
1287     v = env->cc_v;
1288     c = env->cc_c;
1289 
1290     COMPUTE_CCR(env->cc_op, x, n, z, v, c);
1291 
1292     n = n >> 31;
1293     z = (z == 0);
1294     v = v >> 31;
1295 
1296     return x * CCF_X + n * CCF_N + z * CCF_Z + v * CCF_V + c * CCF_C;
1297 }
1298 
1299 uint32_t HELPER(get_ccr)(CPUM68KState *env)
1300 {
1301     return cpu_m68k_get_ccr(env);
1302 }
1303 
1304 void cpu_m68k_set_ccr(CPUM68KState *env, uint32_t ccr)
1305 {
1306     env->cc_x = (ccr & CCF_X ? 1 : 0);
1307     env->cc_n = (ccr & CCF_N ? -1 : 0);
1308     env->cc_z = (ccr & CCF_Z ? 0 : 1);
1309     env->cc_v = (ccr & CCF_V ? -1 : 0);
1310     env->cc_c = (ccr & CCF_C ? 1 : 0);
1311     env->cc_op = CC_OP_FLAGS;
1312 }
1313 
1314 void HELPER(set_ccr)(CPUM68KState *env, uint32_t ccr)
1315 {
1316     cpu_m68k_set_ccr(env, ccr);
1317 }
1318 
1319 void HELPER(flush_flags)(CPUM68KState *env, uint32_t cc_op)
1320 {
1321     uint32_t res, src1, src2;
1322 
1323     COMPUTE_CCR(cc_op, env->cc_x, env->cc_n, env->cc_z, env->cc_v, env->cc_c);
1324     env->cc_op = CC_OP_FLAGS;
1325 }
1326 
1327 uint32_t HELPER(get_macf)(CPUM68KState *env, uint64_t val)
1328 {
1329     int rem;
1330     uint32_t result;
1331 
1332     if (env->macsr & MACSR_SU) {
1333         /* 16-bit rounding.  */
1334         rem = val & 0xffffff;
1335         val = (val >> 24) & 0xffffu;
1336         if (rem > 0x800000)
1337             val++;
1338         else if (rem == 0x800000)
1339             val += (val & 1);
1340     } else if (env->macsr & MACSR_RT) {
1341         /* 32-bit rounding.  */
1342         rem = val & 0xff;
1343         val >>= 8;
1344         if (rem > 0x80)
1345             val++;
1346         else if (rem == 0x80)
1347             val += (val & 1);
1348     } else {
1349         /* No rounding.  */
1350         val >>= 8;
1351     }
1352     if (env->macsr & MACSR_OMC) {
1353         /* Saturate.  */
1354         if (env->macsr & MACSR_SU) {
1355             if (val != (uint16_t) val) {
1356                 result = ((val >> 63) ^ 0x7fff) & 0xffff;
1357             } else {
1358                 result = val & 0xffff;
1359             }
1360         } else {
1361             if (val != (uint32_t)val) {
1362                 result = ((uint32_t)(val >> 63) & 0x7fffffff);
1363             } else {
1364                 result = (uint32_t)val;
1365             }
1366         }
1367     } else {
1368         /* No saturation.  */
1369         if (env->macsr & MACSR_SU) {
1370             result = val & 0xffff;
1371         } else {
1372             result = (uint32_t)val;
1373         }
1374     }
1375     return result;
1376 }
1377 
1378 uint32_t HELPER(get_macs)(uint64_t val)
1379 {
1380     if (val == (int32_t)val) {
1381         return (int32_t)val;
1382     } else {
1383         return (val >> 61) ^ ~SIGNBIT;
1384     }
1385 }
1386 
1387 uint32_t HELPER(get_macu)(uint64_t val)
1388 {
1389     if ((val >> 32) == 0) {
1390         return (uint32_t)val;
1391     } else {
1392         return 0xffffffffu;
1393     }
1394 }
1395 
1396 uint32_t HELPER(get_mac_extf)(CPUM68KState *env, uint32_t acc)
1397 {
1398     uint32_t val;
1399     val = env->macc[acc] & 0x00ff;
1400     val |= (env->macc[acc] >> 32) & 0xff00;
1401     val |= (env->macc[acc + 1] << 16) & 0x00ff0000;
1402     val |= (env->macc[acc + 1] >> 16) & 0xff000000;
1403     return val;
1404 }
1405 
1406 uint32_t HELPER(get_mac_exti)(CPUM68KState *env, uint32_t acc)
1407 {
1408     uint32_t val;
1409     val = (env->macc[acc] >> 32) & 0xffff;
1410     val |= (env->macc[acc + 1] >> 16) & 0xffff0000;
1411     return val;
1412 }
1413 
1414 void HELPER(set_mac_extf)(CPUM68KState *env, uint32_t val, uint32_t acc)
1415 {
1416     int64_t res;
1417     int32_t tmp;
1418     res = env->macc[acc] & 0xffffffff00ull;
1419     tmp = (int16_t)(val & 0xff00);
1420     res |= ((int64_t)tmp) << 32;
1421     res |= val & 0xff;
1422     env->macc[acc] = res;
1423     res = env->macc[acc + 1] & 0xffffffff00ull;
1424     tmp = (val & 0xff000000);
1425     res |= ((int64_t)tmp) << 16;
1426     res |= (val >> 16) & 0xff;
1427     env->macc[acc + 1] = res;
1428 }
1429 
1430 void HELPER(set_mac_exts)(CPUM68KState *env, uint32_t val, uint32_t acc)
1431 {
1432     int64_t res;
1433     int32_t tmp;
1434     res = (uint32_t)env->macc[acc];
1435     tmp = (int16_t)val;
1436     res |= ((int64_t)tmp) << 32;
1437     env->macc[acc] = res;
1438     res = (uint32_t)env->macc[acc + 1];
1439     tmp = val & 0xffff0000;
1440     res |= (int64_t)tmp << 16;
1441     env->macc[acc + 1] = res;
1442 }
1443 
1444 void HELPER(set_mac_extu)(CPUM68KState *env, uint32_t val, uint32_t acc)
1445 {
1446     uint64_t res;
1447     res = (uint32_t)env->macc[acc];
1448     res |= ((uint64_t)(val & 0xffff)) << 32;
1449     env->macc[acc] = res;
1450     res = (uint32_t)env->macc[acc + 1];
1451     res |= (uint64_t)(val & 0xffff0000) << 16;
1452     env->macc[acc + 1] = res;
1453 }
1454 
1455 #if !defined(CONFIG_USER_ONLY)
1456 void HELPER(ptest)(CPUM68KState *env, uint32_t addr, uint32_t is_read)
1457 {
1458     hwaddr physical;
1459     int access_type;
1460     int prot;
1461     int ret;
1462     target_ulong page_size;
1463 
1464     access_type = ACCESS_PTEST;
1465     if (env->dfc & 4) {
1466         access_type |= ACCESS_SUPER;
1467     }
1468     if ((env->dfc & 3) == 2) {
1469         access_type |= ACCESS_CODE;
1470     }
1471     if (!is_read) {
1472         access_type |= ACCESS_STORE;
1473     }
1474 
1475     env->mmu.mmusr = 0;
1476     env->mmu.ssw = 0;
1477     ret = get_physical_address(env, &physical, &prot, addr,
1478                                access_type, &page_size);
1479     if (ret == 0) {
1480         tlb_set_page(env_cpu(env), addr & TARGET_PAGE_MASK,
1481                      physical & TARGET_PAGE_MASK,
1482                      prot, access_type & ACCESS_SUPER ?
1483                      MMU_KERNEL_IDX : MMU_USER_IDX, page_size);
1484     }
1485 }
1486 
1487 void HELPER(pflush)(CPUM68KState *env, uint32_t addr, uint32_t opmode)
1488 {
1489     CPUState *cs = env_cpu(env);
1490 
1491     switch (opmode) {
1492     case 0: /* Flush page entry if not global */
1493     case 1: /* Flush page entry */
1494         tlb_flush_page(cs, addr);
1495         break;
1496     case 2: /* Flush all except global entries */
1497         tlb_flush(cs);
1498         break;
1499     case 3: /* Flush all entries */
1500         tlb_flush(cs);
1501         break;
1502     }
1503 }
1504 
1505 void HELPER(reset)(CPUM68KState *env)
1506 {
1507     /* FIXME: reset all except CPU */
1508 }
1509 #endif /* !CONFIG_USER_ONLY */
1510