1 // SPDX-License-Identifier: GPL-2.0
2 /*---------------------------------------------------------------------------+
5 | This file contains most of the code to interpret the FPU instructions |
6 | which load and store from user memory. |
8 | Copyright (C) 1992,1993,1994,1997 |
9 | W. Metzenthen, 22 Parker St, Ormond, Vic 3163, |
10 | Australia. E-mail billm@suburbia.net |
13 +---------------------------------------------------------------------------*/
15 /*---------------------------------------------------------------------------+
17 | The file contains code which accesses user memory. |
18 | Emulator static data may change when user memory is accessed, due to |
19 | other processes using the emulator while swapping is in progress. |
20 +---------------------------------------------------------------------------*/
22 #include <linux/uaccess.h>
24 #include "fpu_system.h"
25 #include "exception.h"
28 #include "control_w.h"
30 #define _NONE_ 0 /* st0_ptr etc not needed */
31 #define _REG0_ 1 /* Will be storing st(0) */
32 #define _PUSH_ 3 /* Need to check for space to push onto stack */
33 #define _null_ 4 /* Function illegal or not implemented */
35 #define pop_0() { FPU_settag0(TAG_Empty); top++; }
37 /* index is a 5-bit value: (3-bit FPU_modrm.reg field | opcode[2,1]) */
38 static u_char const type_table[32] = {
39 _PUSH_, _PUSH_, _PUSH_, _PUSH_, /* /0: d9:fld f32, db:fild m32, dd:fld f64, df:fild m16 */
40 _null_, _REG0_, _REG0_, _REG0_, /* /1: d9:undef, db,dd,df:fisttp m32/64/16 */
41 _REG0_, _REG0_, _REG0_, _REG0_, /* /2: d9:fst f32, db:fist m32, dd:fst f64, df:fist m16 */
42 _REG0_, _REG0_, _REG0_, _REG0_, /* /3: d9:fstp f32, db:fistp m32, dd:fstp f64, df:fistp m16 */
43 _NONE_, _null_, _NONE_, _PUSH_,
44 _NONE_, _PUSH_, _null_, _PUSH_,
45 _NONE_, _null_, _NONE_, _REG0_,
46 _NONE_, _REG0_, _NONE_, _REG0_
49 u_char const data_sizes_16[32] = {
51 0, 4, 8, 2, /* /1: d9:undef, db,dd,df:fisttp */
54 14, 0, 94, 10, 2, 10, 0, 8,
55 14, 0, 94, 10, 2, 10, 2, 8
58 static u_char const data_sizes_32[32] = {
60 0, 4, 8, 2, /* /1: d9:undef, db,dd,df:fisttp */
63 28, 0, 108, 10, 2, 10, 0, 8,
64 28, 0, 108, 10, 2, 10, 2, 8
67 int FPU_load_store(u_char type, fpu_addr_modes addr_modes,
68 void __user * data_address)
72 u_char st0_tag = TAG_Empty; /* This is just to stop a gcc warning. */
76 st0_ptr = NULL; /* Initialized just to stop compiler warnings. */
78 if (addr_modes.default_mode & PROTECTED) {
79 if (addr_modes.default_mode == SEG32) {
80 if (access_limit < data_sizes_32[type])
81 math_abort(FPU_info, SIGSEGV);
82 } else if (addr_modes.default_mode == PM16) {
83 if (access_limit < data_sizes_16[type])
84 math_abort(FPU_info, SIGSEGV);
88 EXCEPTION(EX_INTERNAL | 0x140);
92 switch (type_table[type]) {
96 st0_ptr = &st(0); /* Some of these instructions pop after
98 st0_tag = FPU_gettag0();
102 if (FPU_gettagi(-1) != TAG_Empty) {
103 FPU_stack_overflow();
115 EXCEPTION(EX_INTERNAL | 0x141);
117 #endif /* PARANOID */
121 /* type is a 5-bit value: (3-bit FPU_modrm.reg field | opcode[2,1]) */
122 case 000: /* fld m32real (d9 /0) */
125 FPU_load_single((float __user *)data_address, &loaded_data);
126 if ((loaded_tag == TAG_Special)
127 && isNaN(&loaded_data)
128 && (real_1op_NaN(&loaded_data) < 0)) {
132 FPU_copy_to_reg0(&loaded_data, loaded_tag);
134 case 001: /* fild m32int (db /0) */
137 FPU_load_int32((long __user *)data_address, &loaded_data);
138 FPU_copy_to_reg0(&loaded_data, loaded_tag);
140 case 002: /* fld m64real (dd /0) */
143 FPU_load_double((double __user *)data_address,
145 if ((loaded_tag == TAG_Special)
146 && isNaN(&loaded_data)
147 && (real_1op_NaN(&loaded_data) < 0)) {
151 FPU_copy_to_reg0(&loaded_data, loaded_tag);
153 case 003: /* fild m16int (df /0) */
156 FPU_load_int16((short __user *)data_address, &loaded_data);
157 FPU_copy_to_reg0(&loaded_data, loaded_tag);
159 /* case 004: undefined (d9 /1) */
160 /* fisttp are enabled if CPUID(1).ECX(0) "sse3" is set */
161 case 005: /* fisttp m32int (db /1) */
163 sv_cw = control_word;
164 control_word |= RC_CHOP;
166 (st0_ptr, st0_tag, (long __user *)data_address))
167 pop_0(); /* pop only if the number was actually stored
168 (see the 80486 manual p16-28) */
169 control_word = sv_cw;
171 case 006: /* fisttp m64int (dd /1) */
173 sv_cw = control_word;
174 control_word |= RC_CHOP;
176 (st0_ptr, st0_tag, (long long __user *)data_address))
177 pop_0(); /* pop only if the number was actually stored
178 (see the 80486 manual p16-28) */
179 control_word = sv_cw;
181 case 007: /* fisttp m16int (df /1) */
183 sv_cw = control_word;
184 control_word |= RC_CHOP;
186 (st0_ptr, st0_tag, (short __user *)data_address))
187 pop_0(); /* pop only if the number was actually stored
188 (see the 80486 manual p16-28) */
189 control_word = sv_cw;
191 case 010: /* fst m32real */
193 FPU_store_single(st0_ptr, st0_tag,
194 (float __user *)data_address);
196 case 011: /* fist m32int */
198 FPU_store_int32(st0_ptr, st0_tag, (long __user *)data_address);
200 case 012: /* fst m64real */
202 FPU_store_double(st0_ptr, st0_tag,
203 (double __user *)data_address);
205 case 013: /* fist m16int */
207 FPU_store_int16(st0_ptr, st0_tag, (short __user *)data_address);
209 case 014: /* fstp m32real */
212 (st0_ptr, st0_tag, (float __user *)data_address))
213 pop_0(); /* pop only if the number was actually stored
214 (see the 80486 manual p16-28) */
216 case 015: /* fistp m32int */
219 (st0_ptr, st0_tag, (long __user *)data_address))
220 pop_0(); /* pop only if the number was actually stored
221 (see the 80486 manual p16-28) */
223 case 016: /* fstp m64real */
226 (st0_ptr, st0_tag, (double __user *)data_address))
227 pop_0(); /* pop only if the number was actually stored
228 (see the 80486 manual p16-28) */
230 case 017: /* fistp m16int */
233 (st0_ptr, st0_tag, (short __user *)data_address))
234 pop_0(); /* pop only if the number was actually stored
235 (see the 80486 manual p16-28) */
237 case 020: /* fldenv m14/28byte */
238 fldenv(addr_modes, (u_char __user *) data_address);
239 /* Ensure that the values just loaded are not changed by
240 fix-up operations. */
242 case 022: /* frstor m94/108byte */
243 frstor(addr_modes, (u_char __user *) data_address);
244 /* Ensure that the values just loaded are not changed by
245 fix-up operations. */
247 case 023: /* fbld m80dec */
249 loaded_tag = FPU_load_bcd((u_char __user *) data_address);
250 FPU_settag0(loaded_tag);
252 case 024: /* fldcw */
253 RE_ENTRANT_CHECK_OFF;
254 FPU_access_ok(VERIFY_READ, data_address, 2);
255 FPU_get_user(control_word,
256 (unsigned short __user *)data_address);
258 if (partial_status & ~control_word & CW_Exceptions)
259 partial_status |= (SW_Summary | SW_Backward);
261 partial_status &= ~(SW_Summary | SW_Backward);
263 control_word |= 0x40; /* An 80486 appears to always set this bit */
264 #endif /* PECULIAR_486 */
266 case 025: /* fld m80real */
269 FPU_load_extended((long double __user *)data_address, 0);
270 FPU_settag0(loaded_tag);
272 case 027: /* fild m64int */
274 loaded_tag = FPU_load_int64((long long __user *)data_address);
275 if (loaded_tag == TAG_Error)
277 FPU_settag0(loaded_tag);
279 case 030: /* fstenv m14/28byte */
280 fstenv(addr_modes, (u_char __user *) data_address);
282 case 032: /* fsave */
283 fsave(addr_modes, (u_char __user *) data_address);
285 case 033: /* fbstp m80dec */
288 (st0_ptr, st0_tag, (u_char __user *) data_address))
289 pop_0(); /* pop only if the number was actually stored
290 (see the 80486 manual p16-28) */
292 case 034: /* fstcw m16int */
293 RE_ENTRANT_CHECK_OFF;
294 FPU_access_ok(VERIFY_WRITE, data_address, 2);
295 FPU_put_user(control_word,
296 (unsigned short __user *)data_address);
299 case 035: /* fstp m80real */
301 if (FPU_store_extended
302 (st0_ptr, st0_tag, (long double __user *)data_address))
303 pop_0(); /* pop only if the number was actually stored
304 (see the 80486 manual p16-28) */
306 case 036: /* fstsw m2byte */
307 RE_ENTRANT_CHECK_OFF;
308 FPU_access_ok(VERIFY_WRITE, data_address, 2);
309 FPU_put_user(status_word(),
310 (unsigned short __user *)data_address);
313 case 037: /* fistp m64int */
316 (st0_ptr, st0_tag, (long long __user *)data_address))
317 pop_0(); /* pop only if the number was actually stored
318 (see the 80486 manual p16-28) */