1 /* SPDX-License-Identifier: GPL-2.0-only */
3 * Based on arch/arm/include/asm/assembler.h, arch/arm/mm/proc-macros.S
5 * Copyright (C) 1996-2000 Russell King
6 * Copyright (C) 2012 ARM Ltd.
9 #error "Only include this from assembly code"
12 #ifndef __ASM_ASSEMBLER_H
13 #define __ASM_ASSEMBLER_H
15 #include <asm-generic/export.h>
17 #include <asm/alternative.h>
18 #include <asm/asm-bug.h>
19 #include <asm/asm-extable.h>
20 #include <asm/asm-offsets.h>
21 #include <asm/cpufeature.h>
22 #include <asm/cputype.h>
23 #include <asm/debug-monitors.h>
25 #include <asm/pgtable-hwdef.h>
26 #include <asm/ptrace.h>
27 #include <asm/thread_info.h>
30 * Provide a wxN alias for each wN register so what we can paste a xN
31 * reference after a 'w' to obtain the 32-bit version.
33 .irp n,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
46 * Save/restore interrupts.
48 .macro save_and_disable_irq, flags
53 .macro restore_irq, flags
61 .macro disable_step_tsk, flgs, tmp
62 tbz \flgs, #TIF_SINGLESTEP, 9990f
64 bic \tmp, \tmp, #DBG_MDSCR_SS
66 isb // Synchronise with enable_dbg
70 /* call with daif masked */
71 .macro enable_step_tsk, flgs, tmp
72 tbz \flgs, #TIF_SINGLESTEP, 9990f
74 orr \tmp, \tmp, #DBG_MDSCR_SS
80 * RAS Error Synchronization barrier
83 #ifdef CONFIG_ARM64_RAS_EXTN
91 * Value prediction barrier
98 * Clear Branch History instruction
105 * Speculation barrier
108 alternative_if_not ARM64_HAS_SB
129 lr .req x30 // link register
140 * Select code when configured for BE.
142 #ifdef CONFIG_CPU_BIG_ENDIAN
143 #define CPU_BE(code...) code
145 #define CPU_BE(code...)
149 * Select code when configured for LE.
151 #ifdef CONFIG_CPU_BIG_ENDIAN
152 #define CPU_LE(code...)
154 #define CPU_LE(code...) code
158 * Define a macro that constructs a 64-bit value by concatenating two
159 * 32-bit registers. Note that on big endian systems the order of the
160 * registers is swapped.
162 #ifndef CONFIG_CPU_BIG_ENDIAN
163 .macro regs_to_64, rd, lbits, hbits
165 .macro regs_to_64, rd, hbits, lbits
167 orr \rd, \lbits, \hbits, lsl #32
171 * Pseudo-ops for PC-relative adr/ldr/str <reg>, <symbol> where
172 * <symbol> is within the range +/- 4 GB of the PC.
175 * @dst: destination register (64 bit wide)
176 * @sym: name of the symbol
178 .macro adr_l, dst, sym
180 add \dst, \dst, :lo12:\sym
184 * @dst: destination register (32 or 64 bit wide)
185 * @sym: name of the symbol
186 * @tmp: optional 64-bit scratch register to be used if <dst> is a
187 * 32-bit wide register, in which case it cannot be used to hold
190 .macro ldr_l, dst, sym, tmp=
193 ldr \dst, [\dst, :lo12:\sym]
196 ldr \dst, [\tmp, :lo12:\sym]
201 * @src: source register (32 or 64 bit wide)
202 * @sym: name of the symbol
203 * @tmp: mandatory 64-bit scratch register to calculate the address
204 * while <src> needs to be preserved.
206 .macro str_l, src, sym, tmp
208 str \src, [\tmp, :lo12:\sym]
212 * @dst: destination register
214 #if defined(__KVM_NVHE_HYPERVISOR__) || defined(__KVM_VHE_HYPERVISOR__)
215 .macro get_this_cpu_offset, dst
219 .macro get_this_cpu_offset, dst
220 alternative_if_not ARM64_HAS_VIRT_HOST_EXTN
227 .macro set_this_cpu_offset, src
228 alternative_if_not ARM64_HAS_VIRT_HOST_EXTN
237 * @dst: Result of per_cpu(sym, smp_processor_id()) (can be SP)
238 * @sym: The name of the per-cpu variable
239 * @tmp: scratch register
241 .macro adr_this_cpu, dst, sym, tmp
243 add \dst, \tmp, #:lo12:\sym
244 get_this_cpu_offset \tmp
249 * @dst: Result of READ_ONCE(per_cpu(sym, smp_processor_id()))
250 * @sym: The name of the per-cpu variable
251 * @tmp: scratch register
253 .macro ldr_this_cpu dst, sym, tmp
255 get_this_cpu_offset \tmp
256 ldr \dst, [\dst, \tmp]
260 * vma_vm_mm - get mm pointer from vma pointer (vma->vm_mm)
262 .macro vma_vm_mm, rd, rn
263 ldr \rd, [\rn, #VMA_VM_MM]
267 * read_ctr - read CTR_EL0. If the system has mismatched register fields,
268 * provide the system wide safe value from arm64_ftr_reg_ctrel0.sys_val
271 #ifndef __KVM_NVHE_HYPERVISOR__
272 alternative_if_not ARM64_MISMATCHED_CACHE_TYPE
273 mrs \reg, ctr_el0 // read CTR
276 ldr_l \reg, arm64_ftr_reg_ctrel0 + ARM64_FTR_SYSVAL
279 alternative_if_not ARM64_KVM_PROTECTED_MODE
281 alternative_else_nop_endif
282 alternative_cb ARM64_ALWAYS_SYSTEM, kvm_compute_final_ctr_el0
284 movk \reg, #0, lsl #16
285 movk \reg, #0, lsl #32
286 movk \reg, #0, lsl #48
293 * raw_dcache_line_size - get the minimum D-cache line size on this CPU
294 * from the CTR register.
296 .macro raw_dcache_line_size, reg, tmp
297 mrs \tmp, ctr_el0 // read CTR
298 ubfm \tmp, \tmp, #16, #19 // cache line size encoding
299 mov \reg, #4 // bytes per word
300 lsl \reg, \reg, \tmp // actual cache line size
304 * dcache_line_size - get the safe D-cache line size across all CPUs
306 .macro dcache_line_size, reg, tmp
308 ubfm \tmp, \tmp, #16, #19 // cache line size encoding
309 mov \reg, #4 // bytes per word
310 lsl \reg, \reg, \tmp // actual cache line size
314 * raw_icache_line_size - get the minimum I-cache line size on this CPU
315 * from the CTR register.
317 .macro raw_icache_line_size, reg, tmp
318 mrs \tmp, ctr_el0 // read CTR
319 and \tmp, \tmp, #0xf // cache line size encoding
320 mov \reg, #4 // bytes per word
321 lsl \reg, \reg, \tmp // actual cache line size
325 * icache_line_size - get the safe I-cache line size across all CPUs
327 .macro icache_line_size, reg, tmp
329 and \tmp, \tmp, #0xf // cache line size encoding
330 mov \reg, #4 // bytes per word
331 lsl \reg, \reg, \tmp // actual cache line size
335 * tcr_set_t0sz - update TCR.T0SZ so that we can load the ID map
337 .macro tcr_set_t0sz, valreg, t0sz
338 bfi \valreg, \t0sz, #TCR_T0SZ_OFFSET, #TCR_TxSZ_WIDTH
342 * tcr_set_t1sz - update TCR.T1SZ
344 .macro tcr_set_t1sz, valreg, t1sz
345 bfi \valreg, \t1sz, #TCR_T1SZ_OFFSET, #TCR_TxSZ_WIDTH
349 * idmap_get_t0sz - get the T0SZ value needed to cover the ID map
351 * Calculate the maximum allowed value for TCR_EL1.T0SZ so that the
352 * entire ID map region can be mapped. As T0SZ == (64 - #bits used),
353 * this number conveniently equals the number of leading zeroes in
354 * the physical address of _end.
356 .macro idmap_get_t0sz, reg
358 orr \reg, \reg, #(1 << VA_BITS_MIN) - 1
363 * tcr_compute_pa_size - set TCR.(I)PS to the highest supported
364 * ID_AA64MMFR0_EL1.PARange value
366 * tcr: register with the TCR_ELx value to be updated
367 * pos: IPS or PS bitfield position
368 * tmp{0,1}: temporary registers
370 .macro tcr_compute_pa_size, tcr, pos, tmp0, tmp1
371 mrs \tmp0, ID_AA64MMFR0_EL1
372 // Narrow PARange to fit the PS field in TCR_ELx
373 ubfx \tmp0, \tmp0, #ID_AA64MMFR0_EL1_PARANGE_SHIFT, #3
374 mov \tmp1, #ID_AA64MMFR0_EL1_PARANGE_MAX
376 csel \tmp0, \tmp1, \tmp0, hi
377 bfi \tcr, \tmp0, \pos, #3
380 .macro __dcache_op_workaround_clean_cache, op, addr
381 alternative_if_not ARM64_WORKAROUND_CLEAN_CACHE
389 * Macro to perform a data cache maintenance for the interval
390 * [start, end) with dcache line size explicitly provided.
392 * op: operation passed to dc instruction
393 * domain: domain used in dsb instruciton
394 * start: starting virtual address of the region
395 * end: end virtual address of the region
396 * linesz: dcache line size
397 * fixup: optional label to branch to on user fault
398 * Corrupts: start, end, tmp
400 .macro dcache_by_myline_op op, domain, start, end, linesz, tmp, fixup
401 sub \tmp, \linesz, #1
402 bic \start, \start, \tmp
405 __dcache_op_workaround_clean_cache \op, \start
408 __dcache_op_workaround_clean_cache \op, \start
411 sys 3, c7, c12, 1, \start // dc cvap
414 sys 3, c7, c13, 1, \start // dc cvadp
421 add \start, \start, \linesz
426 _cond_uaccess_extable .Ldcache_op\@, \fixup
430 * Macro to perform a data cache maintenance for the interval
433 * op: operation passed to dc instruction
434 * domain: domain used in dsb instruciton
435 * start: starting virtual address of the region
436 * end: end virtual address of the region
437 * fixup: optional label to branch to on user fault
438 * Corrupts: start, end, tmp1, tmp2
440 .macro dcache_by_line_op op, domain, start, end, tmp1, tmp2, fixup
441 dcache_line_size \tmp1, \tmp2
442 dcache_by_myline_op \op, \domain, \start, \end, \tmp1, \tmp2, \fixup
446 * Macro to perform an instruction cache maintenance for the interval
449 * start, end: virtual addresses describing the region
450 * fixup: optional label to branch to on user fault
451 * Corrupts: tmp1, tmp2
453 .macro invalidate_icache_by_line start, end, tmp1, tmp2, fixup
454 icache_line_size \tmp1, \tmp2
456 bic \tmp2, \start, \tmp2
458 ic ivau, \tmp2 // invalidate I line PoU
459 add \tmp2, \tmp2, \tmp1
465 _cond_uaccess_extable .Licache_op\@, \fixup
469 * load_ttbr1 - install @pgtbl as a TTBR1 page table
471 * tmp1/tmp2 clobbered, either may overlap with pgtbl
473 .macro load_ttbr1, pgtbl, tmp1, tmp2
474 phys_to_ttbr \tmp1, \pgtbl
475 offset_ttbr1 \tmp1, \tmp2
481 * To prevent the possibility of old and new partial table walks being visible
482 * in the tlb, switch the ttbr to a zero page when we invalidate the old
483 * records. D4.7.1 'General TLB maintenance requirements' in ARM DDI 0487A.i
484 * Even switching to our copied tables will cause a changed output address at
485 * each stage of the walk.
487 .macro break_before_make_ttbr_switch zero_page, page_table, tmp, tmp2
488 phys_to_ttbr \tmp, \zero_page
493 load_ttbr1 \page_table, \tmp, \tmp2
497 * reset_pmuserenr_el0 - reset PMUSERENR_EL0 if PMUv3 present
499 .macro reset_pmuserenr_el0, tmpreg
500 mrs \tmpreg, id_aa64dfr0_el1
501 sbfx \tmpreg, \tmpreg, #ID_AA64DFR0_EL1_PMUVer_SHIFT, #4
502 cmp \tmpreg, #1 // Skip if no PMU present
504 msr pmuserenr_el0, xzr // Disable PMU access from EL0
509 * reset_amuserenr_el0 - reset AMUSERENR_EL0 if AMUv1 present
511 .macro reset_amuserenr_el0, tmpreg
512 mrs \tmpreg, id_aa64pfr0_el1 // Check ID_AA64PFR0_EL1
513 ubfx \tmpreg, \tmpreg, #ID_AA64PFR0_EL1_AMU_SHIFT, #4
514 cbz \tmpreg, .Lskip_\@ // Skip if no AMU present
515 msr_s SYS_AMUSERENR_EL0, xzr // Disable AMU access from EL0
519 * copy_page - copy src to dest using temp registers t1-t8
521 .macro copy_page dest:req src:req t1:req t2:req t3:req t4:req t5:req t6:req t7:req t8:req
522 9998: ldp \t1, \t2, [\src]
523 ldp \t3, \t4, [\src, #16]
524 ldp \t5, \t6, [\src, #32]
525 ldp \t7, \t8, [\src, #48]
527 stnp \t1, \t2, [\dest]
528 stnp \t3, \t4, [\dest, #16]
529 stnp \t5, \t6, [\dest, #32]
530 stnp \t7, \t8, [\dest, #48]
531 add \dest, \dest, #64
532 tst \src, #(PAGE_SIZE - 1)
537 * Annotate a function as being unsuitable for kprobes.
539 #ifdef CONFIG_KPROBES
540 #define NOKPROBE(x) \
541 .pushsection "_kprobe_blacklist", "aw"; \
548 #if defined(CONFIG_KASAN_GENERIC) || defined(CONFIG_KASAN_SW_TAGS)
549 #define EXPORT_SYMBOL_NOKASAN(name)
551 #define EXPORT_SYMBOL_NOKASAN(name) EXPORT_SYMBOL(name)
555 * Emit a 64-bit absolute little endian symbol reference in a way that
556 * ensures that it will be resolved at build time, even when building a
557 * PIE binary. This requires cooperation from the linker script, which
558 * must emit the lo32/hi32 halves individually.
566 * mov_q - move an immediate constant into a 64-bit register using
567 * between 2 and 4 movz/movk instructions (depending on the
568 * magnitude and sign of the operand)
570 .macro mov_q, reg, val
571 .if (((\val) >> 31) == 0 || ((\val) >> 31) == 0x1ffffffff)
572 movz \reg, :abs_g1_s:\val
574 .if (((\val) >> 47) == 0 || ((\val) >> 47) == 0x1ffff)
575 movz \reg, :abs_g2_s:\val
577 movz \reg, :abs_g3:\val
578 movk \reg, :abs_g2_nc:\val
580 movk \reg, :abs_g1_nc:\val
582 movk \reg, :abs_g0_nc:\val
586 * Return the current task_struct.
588 .macro get_current_task, rd
593 * Offset ttbr1 to allow for 48-bit kernel VAs set with 52-bit PTRS_PER_PGD.
594 * orr is used as it can cover the immediate value (and is idempotent).
595 * In future this may be nop'ed out when dealing with 52-bit kernel VAs.
596 * ttbr: Value of ttbr to set, modified.
598 .macro offset_ttbr1, ttbr, tmp
599 #ifdef CONFIG_ARM64_VA_BITS_52
600 mrs_s \tmp, SYS_ID_AA64MMFR2_EL1
601 and \tmp, \tmp, #(0xf << ID_AA64MMFR2_EL1_VARange_SHIFT)
602 cbnz \tmp, .Lskipoffs_\@
603 orr \ttbr, \ttbr, #TTBR1_BADDR_4852_OFFSET
609 * Arrange a physical address in a TTBR register, taking care of 52-bit
612 * phys: physical address, preserved
613 * ttbr: returns the TTBR value
615 .macro phys_to_ttbr, ttbr, phys
616 #ifdef CONFIG_ARM64_PA_BITS_52
617 orr \ttbr, \phys, \phys, lsr #46
618 and \ttbr, \ttbr, #TTBR_BADDR_MASK_52
624 .macro phys_to_pte, pte, phys
625 #ifdef CONFIG_ARM64_PA_BITS_52
627 * We assume \phys is 64K aligned and this is guaranteed by only
628 * supporting this configuration with 64K pages.
630 orr \pte, \phys, \phys, lsr #36
631 and \pte, \pte, #PTE_ADDR_MASK
637 .macro pte_to_phys, phys, pte
638 and \phys, \pte, #PTE_ADDR_MASK
639 #ifdef CONFIG_ARM64_PA_BITS_52
640 orr \phys, \phys, \phys, lsl #PTE_ADDR_HIGH_SHIFT
641 and \phys, \phys, GENMASK_ULL(PHYS_MASK_SHIFT - 1, PAGE_SHIFT)
646 * tcr_clear_errata_bits - Clear TCR bits that trigger an errata on this CPU.
648 .macro tcr_clear_errata_bits, tcr, tmp1, tmp2
649 #ifdef CONFIG_FUJITSU_ERRATUM_010001
652 mov_q \tmp2, MIDR_FUJITSU_ERRATUM_010001_MASK
653 and \tmp1, \tmp1, \tmp2
654 mov_q \tmp2, MIDR_FUJITSU_ERRATUM_010001
658 mov_q \tmp2, TCR_CLEAR_FUJITSU_ERRATUM_010001
659 bic \tcr, \tcr, \tmp2
661 #endif /* CONFIG_FUJITSU_ERRATUM_010001 */
665 * Errata workaround prior to disable MMU. Insert an ISB immediately prior
666 * to executing the MSR that will change SCTLR_ELn[M] from a value of 1 to 0.
668 .macro pre_disable_mmu_workaround
669 #ifdef CONFIG_QCOM_FALKOR_ERRATUM_E1041
675 * frame_push - Push @regcount callee saved registers to the stack,
676 * starting at x19, as well as x29/x30, and set x29 to
677 * the new value of sp. Add @extra bytes of stack space
680 .macro frame_push, regcount:req, extra
681 __frame st, \regcount, \extra
685 * frame_pop - Pop the callee saved registers from the stack that were
686 * pushed in the most recent call to frame_push, as well
687 * as x29/x30 and any extra stack space that may have been
694 .macro __frame_regs, reg1, reg2, op, num
695 .if .Lframe_regcount == \num
696 \op\()r \reg1, [sp, #(\num + 1) * 8]
697 .elseif .Lframe_regcount > \num
698 \op\()p \reg1, \reg2, [sp, #(\num + 1) * 8]
702 .macro __frame, op, regcount, extra=0
704 .if (\regcount) < 0 || (\regcount) > 10
705 .error "regcount should be in the range [0 ... 10]"
707 .if ((\extra) % 16) != 0
708 .error "extra should be a multiple of 16 bytes"
710 .ifdef .Lframe_regcount
711 .if .Lframe_regcount != -1
712 .error "frame_push/frame_pop may not be nested"
715 .set .Lframe_regcount, \regcount
716 .set .Lframe_extra, \extra
717 .set .Lframe_local_offset, ((\regcount + 3) / 2) * 16
718 stp x29, x30, [sp, #-.Lframe_local_offset - .Lframe_extra]!
722 __frame_regs x19, x20, \op, 1
723 __frame_regs x21, x22, \op, 3
724 __frame_regs x23, x24, \op, 5
725 __frame_regs x25, x26, \op, 7
726 __frame_regs x27, x28, \op, 9
729 .if .Lframe_regcount == -1
730 .error "frame_push/frame_pop may not be nested"
732 ldp x29, x30, [sp], #.Lframe_local_offset + .Lframe_extra
733 .set .Lframe_regcount, -1
738 * Set SCTLR_ELx to the @reg value, and invalidate the local icache
739 * in the process. This is called when setting the MMU on.
741 .macro set_sctlr, sreg, reg
745 * Invalidate the local I-cache so that any instructions fetched
746 * speculatively from the PoC are discarded, since they may have
747 * been dynamically patched at the PoU.
754 .macro set_sctlr_el1, reg
755 set_sctlr sctlr_el1, \reg
758 .macro set_sctlr_el2, reg
759 set_sctlr sctlr_el2, \reg
763 * Check whether preempt/bh-disabled asm code should yield as soon as
764 * it is able. This is the case if we are currently running in task
765 * context, and either a softirq is pending, or the TIF_NEED_RESCHED
766 * flag is set and re-enabling preemption a single time would result in
767 * a preempt count of zero. (Note that the TIF_NEED_RESCHED flag is
768 * stored negated in the top word of the thread_info::preempt_count
771 .macro cond_yield, lbl:req, tmp:req, tmp2:req
772 get_current_task \tmp
773 ldr \tmp, [\tmp, #TSK_TI_PREEMPT]
775 * If we are serving a softirq, there is no point in yielding: the
776 * softirq will not be preempted no matter what we do, so we should
777 * run to completion as quickly as we can.
779 tbnz \tmp, #SOFTIRQ_SHIFT, .Lnoyield_\@
780 #ifdef CONFIG_PREEMPTION
781 sub \tmp, \tmp, #PREEMPT_DISABLE_OFFSET
784 adr_l \tmp, irq_stat + IRQ_CPUSTAT_SOFTIRQ_PENDING
785 get_this_cpu_offset \tmp2
786 ldr w\tmp, [\tmp, \tmp2]
787 cbnz w\tmp, \lbl // yield on pending softirq in task context
792 * Branch Target Identifier (BTI)
795 .equ .L__bti_targets_c, 34
796 .equ .L__bti_targets_j, 36
797 .equ .L__bti_targets_jc,38
798 hint #.L__bti_targets_\targets
802 * This macro emits a program property note section identifying
803 * architecture features which require special handling, mainly for
804 * use in assembly files included in the VDSO.
807 #define NT_GNU_PROPERTY_TYPE_0 5
808 #define GNU_PROPERTY_AARCH64_FEATURE_1_AND 0xc0000000
810 #define GNU_PROPERTY_AARCH64_FEATURE_1_BTI (1U << 0)
811 #define GNU_PROPERTY_AARCH64_FEATURE_1_PAC (1U << 1)
813 #ifdef CONFIG_ARM64_BTI_KERNEL
814 #define GNU_PROPERTY_AARCH64_FEATURE_1_DEFAULT \
815 ((GNU_PROPERTY_AARCH64_FEATURE_1_BTI | \
816 GNU_PROPERTY_AARCH64_FEATURE_1_PAC))
819 #ifdef GNU_PROPERTY_AARCH64_FEATURE_1_DEFAULT
820 .macro emit_aarch64_feature_1_and, feat=GNU_PROPERTY_AARCH64_FEATURE_1_DEFAULT
821 .pushsection .note.gnu.property, "a"
825 .long NT_GNU_PROPERTY_TYPE_0
829 3: .long GNU_PROPERTY_AARCH64_FEATURE_1_AND
833 * This is described with an array of char in the Linux API
834 * spec but the text and all other usage (including binutils,
835 * clang and GCC) treat this as a 32 bit value so no swizzling
836 * is required for big endian.
846 .macro emit_aarch64_feature_1_and, feat=0
849 #endif /* GNU_PROPERTY_AARCH64_FEATURE_1_DEFAULT */
851 .macro __mitigate_spectre_bhb_loop tmp
852 #ifdef CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY
853 alternative_cb ARM64_ALWAYS_SYSTEM, spectre_bhb_patch_loop_iter
854 mov \tmp, #32 // Patched to correct the immediate
856 .Lspectre_bhb_loop\@:
859 b.ne .Lspectre_bhb_loop\@
861 #endif /* CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY */
864 .macro mitigate_spectre_bhb_loop tmp
865 #ifdef CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY
866 alternative_cb ARM64_ALWAYS_SYSTEM, spectre_bhb_patch_loop_mitigation_enable
867 b .L_spectre_bhb_loop_done\@ // Patched to NOP
869 __mitigate_spectre_bhb_loop \tmp
870 .L_spectre_bhb_loop_done\@:
871 #endif /* CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY */
874 /* Save/restores x0-x3 to the stack */
875 .macro __mitigate_spectre_bhb_fw
876 #ifdef CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY
877 stp x0, x1, [sp, #-16]!
878 stp x2, x3, [sp, #-16]!
879 mov w0, #ARM_SMCCC_ARCH_WORKAROUND_3
880 alternative_cb ARM64_ALWAYS_SYSTEM, smccc_patch_fw_mitigation_conduit
881 nop // Patched to SMC/HVC #0
883 ldp x2, x3, [sp], #16
884 ldp x0, x1, [sp], #16
885 #endif /* CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY */
888 .macro mitigate_spectre_bhb_clear_insn
889 #ifdef CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY
890 alternative_cb ARM64_ALWAYS_SYSTEM, spectre_bhb_patch_clearbhb
891 /* Patched to NOP when not supported */
895 #endif /* CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY */
897 #endif /* __ASM_ASSEMBLER_H */