//===-- EmulateInstructionARM.cpp -------------------------------*- C++ -*-===// // // The LLVM Compiler Infrastructure // // This file is distributed under the University of Illinois Open Source // License. See LICENSE.TXT for details. // //===----------------------------------------------------------------------===// #include "EmulateInstructionARM.h" #include "ARMDefines.h" #include "ARMUtils.h" using namespace lldb; using namespace lldb_private; // ARM constants used during decoding #define REG_RD 0 #define LDM_REGLIST 1 #define PC_REG 15 #define PC_REGLIST_BIT 0x8000 #define ARMv4 (1u << 0) #define ARMv4T (1u << 1) #define ARMv5T (1u << 2) #define ARMv5TE (1u << 3) #define ARMv5TEJ (1u << 4) #define ARMv6 (1u << 5) #define ARMv6K (1u << 6) #define ARMv6T2 (1u << 7) #define ARMv7 (1u << 8) #define ARMv8 (1u << 9) #define ARMvAll (0xffffffffu) typedef enum { eEncodingA1, eEncodingA2, eEncodingA3, eEncodingA4, eEncodingA5, eEncodingT1, eEncodingT2, eEncodingT3, eEncodingT4, eEncodingT5, } ARMEncoding; typedef enum { eSize16, eSize32 } ARMInstrSize; // Typedef for the callback function used during the emulation. // Pass along (ARMEncoding)encoding as the callback data. typedef bool (*EmulateCallback) (EmulateInstructionARM *emulator, ARMEncoding encoding); typedef struct { uint32_t mask; uint32_t value; uint32_t variants; ARMEncoding encoding; ARMInstrSize size; EmulateCallback callback; const char *name; } ARMOpcode; static bool emulate_push (EmulateInstructionARM *emulator, ARMEncoding encoding) { #if 0 // ARM pseudo code... if (ConditionPassed()) { EncodingSpecificOperations(); NullCheckIfThumbEE(13); address = SP - 4*BitCount(registers); for (i = 0 to 14) { if (registers == ’1’) { if i == 13 && i != LowestSetBit(registers) // Only possible for encoding A1 MemA[address,4] = bits(32) UNKNOWN; else MemA[address,4] = R[i]; address = address + 4; } } if (registers<15> == ’1’) // Only possible for encoding A1 or A2 MemA[address,4] = PCStoreValue(); SP = SP - 4*BitCount(registers); } #endif bool success = false; const uint32_t opcode = emulator->OpcodeAsUnsigned (&success); if (!success) return false; if (emulator->ConditionPassed()) { const uint32_t addr_byte_size = emulator->GetAddressByteSize(); const addr_t sp = emulator->ReadRegisterUnsigned (eRegisterKindGeneric, LLDB_REGNUM_GENERIC_SP, 0, &success); if (!success) return false; uint32_t registers = 0; uint32_t Rt; // the source register switch (encoding) { case eEncodingT1: registers = Bits32(opcode, 7, 0); // The M bit represents LR. if (Bits32(opcode, 8, 8)) registers |= 0x000eu; // if BitCount(registers) < 1 then UNPREDICTABLE; if (BitCount(registers) < 1) return false; break; case eEncodingT2: // Ignore bits 15 & 13. registers = Bits32(opcode, 15, 0) & ~0xa000; // if BitCount(registers) < 2 then UNPREDICTABLE; if (BitCount(registers) < 2) return false; break; case eEncodingT3: Rt = Bits32(opcode, 15, 12); // if BadReg(t) then UNPREDICTABLE; if (BadReg(Rt)) return false; registers = (1u << Rt); break; case eEncodingA1: registers = Bits32(opcode, 15, 0); // Instead of return false, let's handle the following case as well, // which amounts to pushing one reg onto the full descending stacks. // if BitCount(register_list) < 2 then SEE STMDB / STMFD; break; case eEncodingA2: Rt = Bits32(opcode, 15, 12); // if t == 13 then UNPREDICTABLE; if (Rt == dwarf_sp) return false; registers = (1u << Rt); break; default: return false; } addr_t sp_offset = addr_byte_size * BitCount (registers); addr_t addr = sp - sp_offset; uint32_t i; EmulateInstruction::Context context = { EmulateInstruction::eContextPushRegisterOnStack, eRegisterKindDWARF, 0, 0 }; for (i=0; i<15; ++i) { if (BitIsSet (registers, 1u << i)) { context.arg1 = dwarf_r0 + i; // arg1 in the context is the DWARF register number context.arg2 = addr - sp; // arg2 in the context is the stack pointer offset uint32_t reg_value = emulator->ReadRegisterUnsigned(eRegisterKindDWARF, context.arg1, 0, &success); if (!success) return false; if (!emulator->WriteMemoryUnsigned (context, addr, reg_value, addr_byte_size)) return false; addr += addr_byte_size; } } if (BitIsSet (registers, 1u << 15)) { context.arg1 = dwarf_pc; // arg1 in the context is the DWARF register number context.arg2 = addr - sp; // arg2 in the context is the stack pointer offset const uint32_t pc = emulator->ReadRegisterUnsigned(eRegisterKindGeneric, LLDB_REGNUM_GENERIC_PC, 0, &success); if (!success) return false; if (!emulator->WriteMemoryUnsigned (context, addr, pc + 8, addr_byte_size)) return false; } context.type = EmulateInstruction::eContextAdjustStackPointer; context.arg0 = eRegisterKindGeneric; context.arg1 = LLDB_REGNUM_GENERIC_SP; context.arg2 = sp_offset; if (!emulator->WriteRegisterUnsigned (context, eRegisterKindGeneric, LLDB_REGNUM_GENERIC_SP, sp - sp_offset)) return false; } return true; } // A sub operation to adjust the SP -- allocate space for local storage. static bool emulate_sub_sp_imm (EmulateInstructionARM *emulator, ARMEncoding encoding) { #if 0 // ARM pseudo code... if (ConditionPassed()) { EncodingSpecificOperations(); (result, carry, overflow) = AddWithCarry(SP, NOT(imm32), ‘1’); if d == 15 then // Can only occur for ARM encoding ALUWritePC(result); // setflags is always FALSE here else R[d] = result; if setflags then APSR.N = result<31>; APSR.Z = IsZeroBit(result); APSR.C = carry; APSR.V = overflow; } #endif bool success = false; const uint32_t opcode = emulator->OpcodeAsUnsigned (&success); if (!success) return false; if (emulator->ConditionPassed()) { const addr_t sp = emulator->ReadRegisterUnsigned (eRegisterKindGeneric, LLDB_REGNUM_GENERIC_SP, 0, &success); if (!success) return false; uint32_t imm32; switch (encoding) { case eEncodingT1: imm32 = ThumbImmScaled(opcode); // imm32 = ZeroExtend(imm7:'00', 32) case eEncodingT2: imm32 = ThumbExpandImm(opcode); // imm32 = ThumbExpandImm(i:imm3:imm8) break; case eEncodingT3: imm32 = ThumbImm12(opcode); // imm32 = ZeroExtend(i:imm3:imm8, 32) break; case eEncodingA1: imm32 = ARMExpandImm(opcode); // imm32 = ARMExpandImm(imm12) break; default: return false; } addr_t sp_offset = imm32; addr_t addr = sp - sp_offset; // the adjusted stack pointer value EmulateInstruction::Context context = { EmulateInstruction::eContextAdjustStackPointer, eRegisterKindGeneric, LLDB_REGNUM_GENERIC_SP, sp_offset }; if (!emulator->WriteRegisterUnsigned (context, eRegisterKindGeneric, LLDB_REGNUM_GENERIC_SP, addr)) return false; } return true; } // A store operation to the stacks that also updates the SP. static bool emulate_str_rt_sp (EmulateInstructionARM *emulator, ARMEncoding encoding) { #if 0 // ARM pseudo code... if (ConditionPassed()) { EncodingSpecificOperations(); offset_addr = if add then (R[n] + imm32) else (R[n] - imm32); address = if index then offset_addr else R[n]; MemU[address,4] = if t == 15 then PCStoreValue() else R[t]; if wback then R[n] = offset_addr; } #endif bool success = false; const uint32_t opcode = emulator->OpcodeAsUnsigned (&success); if (!success) return false; if (emulator->ConditionPassed()) { const uint32_t addr_byte_size = emulator->GetAddressByteSize(); const addr_t sp = emulator->ReadRegisterUnsigned (eRegisterKindGeneric, LLDB_REGNUM_GENERIC_SP, 0, &success); if (!success) return false; uint32_t Rt; // the source register uint32_t imm12; switch (encoding) { case eEncodingA1: Rt = Bits32(opcode, 15, 12); imm12 = Bits32(opcode, 11, 0); break; default: return false; } addr_t sp_offset = imm12; addr_t addr = sp - sp_offset; EmulateInstruction::Context context = { EmulateInstruction::eContextPushRegisterOnStack, eRegisterKindDWARF, 0, 0 }; if (Rt != 15) { context.arg1 = dwarf_r0 + Rt; // arg1 in the context is the DWARF register number context.arg2 = addr - sp; // arg2 in the context is the stack pointer offset uint32_t reg_value = emulator->ReadRegisterUnsigned(eRegisterKindDWARF, context.arg1, 0, &success); if (!success) return false; if (!emulator->WriteMemoryUnsigned (context, addr, reg_value, addr_byte_size)) return false; } else { context.arg1 = dwarf_pc; // arg1 in the context is the DWARF register number context.arg2 = addr - sp; // arg2 in the context is the stack pointer offset const uint32_t pc = emulator->ReadRegisterUnsigned(eRegisterKindGeneric, LLDB_REGNUM_GENERIC_PC, 0, &success); if (!success) return false; if (!emulator->WriteMemoryUnsigned (context, addr, pc + 8, addr_byte_size)) return false; } context.type = EmulateInstruction::eContextAdjustStackPointer; context.arg0 = eRegisterKindGeneric; context.arg1 = LLDB_REGNUM_GENERIC_SP; context.arg2 = sp_offset; if (!emulator->WriteRegisterUnsigned (context, eRegisterKindGeneric, LLDB_REGNUM_GENERIC_SP, sp - sp_offset)) return false; } return true; } static ARMOpcode g_arm_opcodes[] = { // push register(s) { 0x0fff0000, 0x092d0000, ARMvAll, eEncodingA1, eSize32, emulate_push, "push ; contains more than one register" }, { 0x0fff0fff, 0x052d0004, ARMvAll, eEncodingA2, eSize32, emulate_push, "push ; contains one register, " }, // adjust the stack pointer { 0x0ffff000, 0x024dd000, ARMvAll, eEncodingA1, eSize32, emulate_sub_sp_imm, "sub sp, sp, #"}, // if Rn == '1101' && imm12 == '000000000100' then SEE PUSH; { 0x0fff0000, 0x052d0000, ARMvAll, eEncodingA1, eSize32, emulate_str_rt_sp, "str Rt, [sp, #-]!" } }; static ARMOpcode g_thumb_opcodes[] = { // push register(s) { 0xfffffe00, 0x0000b400, ARMvAll, eEncodingT1, eSize16, emulate_push, "push " }, { 0xffff0000, 0xe92d0000, ARMv6T2|ARMv7, eEncodingT2, eSize32, emulate_push, "push.w ; contains more than one register" }, { 0xffff0fff, 0xf84d0d04, ARMv6T2|ARMv7, eEncodingT3, eSize32, emulate_push, "push.w ; contains one register, " }, // adjust the stack pointer { 0xffffff80, 0x0000b080, ARMvAll, eEncodingT1, eSize16, emulate_sub_sp_imm, "sub{s} sp, sp, #"}, { 0xfbef8f00, 0xf1ad0d00, ARMv6T2|ARMv7, eEncodingT2, eSize32, emulate_sub_sp_imm, "sub{s}.w sp, sp, #"}, { 0xfbff8f00, 0xf2ad0d00, ARMv6T2|ARMv7, eEncodingT3, eSize32, emulate_sub_sp_imm, "subw sp, sp, #"} }; static const size_t k_num_arm_opcodes = sizeof(g_arm_opcodes)/sizeof(ARMOpcode); static const size_t k_num_thumb_opcodes = sizeof(g_thumb_opcodes)/sizeof(ARMOpcode); bool EmulateInstructionARM::ReadInstruction () { bool success = false; m_inst_cpsr = ReadRegisterUnsigned (eRegisterKindGeneric, LLDB_REGNUM_GENERIC_FLAGS, 0, &success); if (success) { addr_t pc = ReadRegisterUnsigned (eRegisterKindGeneric, LLDB_REGNUM_GENERIC_PC, LLDB_INVALID_ADDRESS, &success); if (success) { Context read_inst_context = {eContextReadOpcode, 0, 0}; if (m_inst_cpsr & MASK_CPSR_T) { m_inst_mode = eModeThumb; uint32_t thumb_opcode = ReadMemoryUnsigned(read_inst_context, pc, 2, 0, &success); if (success) { if ((m_inst.opcode.inst16 & 0xe000) != 0xe000 || ((m_inst.opcode.inst16 & 0x1800u) == 0)) { m_inst.opcode_type = eOpcode16; m_inst.opcode.inst16 = thumb_opcode; } else { m_inst.opcode_type = eOpcode32; m_inst.opcode.inst32 = (thumb_opcode << 16) | ReadMemoryUnsigned(read_inst_context, pc + 2, 2, 0, &success); } } } else { m_inst_mode = eModeARM; m_inst.opcode_type = eOpcode32; m_inst.opcode.inst32 = ReadMemoryUnsigned(read_inst_context, pc, 4, 0, &success); } } } if (!success) { m_inst_mode = eModeInvalid; m_inst_pc = LLDB_INVALID_ADDRESS; } return success; } uint32_t EmulateInstructionARM::CurrentCond () { switch (m_inst_mode) { default: case eModeInvalid: break; case eModeARM: return UnsignedBits(m_inst.opcode.inst32, 31, 28); case eModeThumb: return 0x0000000Eu; // Return always for now, we need to handl IT instructions later } return UINT32_MAX; // Return invalid value } bool EmulateInstructionARM::ConditionPassed () { if (m_inst_cpsr == 0) return false; const uint32_t cond = CurrentCond (); if (cond == UINT32_MAX) return false; bool result = false; switch (UnsignedBits(cond, 3, 1)) { case 0: result = (m_inst_cpsr & MASK_CPSR_Z) != 0; break; case 1: result = (m_inst_cpsr & MASK_CPSR_C) != 0; break; case 2: result = (m_inst_cpsr & MASK_CPSR_N) != 0; break; case 3: result = (m_inst_cpsr & MASK_CPSR_V) != 0; break; case 4: result = ((m_inst_cpsr & MASK_CPSR_C) != 0) && ((m_inst_cpsr & MASK_CPSR_Z) == 0); break; case 5: { bool n = (m_inst_cpsr & MASK_CPSR_N); bool v = (m_inst_cpsr & MASK_CPSR_V); result = n == v; } break; case 6: { bool n = (m_inst_cpsr & MASK_CPSR_N); bool v = (m_inst_cpsr & MASK_CPSR_V); result = n == v && ((m_inst_cpsr & MASK_CPSR_Z) == 0); } break; case 7: result = true; break; } if (cond & 1) result = !result; return result; } bool EmulateInstructionARM::EvaluateInstruction () { return false; }