/* * linux/arch/m68k/kernel/traps.c * * Copyright (C) 1993, 1994 by Hamish Macdonald * * 68040 fixes by Michael Rausch * 68040 fixes by Martin Apel * 68040 fixes and writeback by Richard Zidlicky * 68060 fixes by Roman Hodek * 68060 fixes by Jesper Skov * * This file is subject to the terms and conditions of the GNU General Public * License. See the file COPYING in the main directory of this archive * for more details. */ /* * Sets up all exception vectors */ #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static const char *vec_names[] = { [VEC_RESETSP] = "RESET SP", [VEC_RESETPC] = "RESET PC", [VEC_BUSERR] = "BUS ERROR", [VEC_ADDRERR] = "ADDRESS ERROR", [VEC_ILLEGAL] = "ILLEGAL INSTRUCTION", [VEC_ZERODIV] = "ZERO DIVIDE", [VEC_CHK] = "CHK", [VEC_TRAP] = "TRAPcc", [VEC_PRIV] = "PRIVILEGE VIOLATION", [VEC_TRACE] = "TRACE", [VEC_LINE10] = "LINE 1010", [VEC_LINE11] = "LINE 1111", [VEC_RESV12] = "UNASSIGNED RESERVED 12", [VEC_COPROC] = "COPROCESSOR PROTOCOL VIOLATION", [VEC_FORMAT] = "FORMAT ERROR", [VEC_UNINT] = "UNINITIALIZED INTERRUPT", [VEC_RESV16] = "UNASSIGNED RESERVED 16", [VEC_RESV17] = "UNASSIGNED RESERVED 17", [VEC_RESV18] = "UNASSIGNED RESERVED 18", [VEC_RESV19] = "UNASSIGNED RESERVED 19", [VEC_RESV20] = "UNASSIGNED RESERVED 20", [VEC_RESV21] = "UNASSIGNED RESERVED 21", [VEC_RESV22] = "UNASSIGNED RESERVED 22", [VEC_RESV23] = "UNASSIGNED RESERVED 23", [VEC_SPUR] = "SPURIOUS INTERRUPT", [VEC_INT1] = "LEVEL 1 INT", [VEC_INT2] = "LEVEL 2 INT", [VEC_INT3] = "LEVEL 3 INT", [VEC_INT4] = "LEVEL 4 INT", [VEC_INT5] = "LEVEL 5 INT", [VEC_INT6] = "LEVEL 6 INT", [VEC_INT7] = "LEVEL 7 INT", [VEC_SYS] = "SYSCALL", [VEC_TRAP1] = "TRAP #1", [VEC_TRAP2] = "TRAP #2", [VEC_TRAP3] = "TRAP #3", [VEC_TRAP4] = "TRAP #4", [VEC_TRAP5] = "TRAP #5", [VEC_TRAP6] = "TRAP #6", [VEC_TRAP7] = "TRAP #7", [VEC_TRAP8] = "TRAP #8", [VEC_TRAP9] = "TRAP #9", [VEC_TRAP10] = "TRAP #10", [VEC_TRAP11] = "TRAP #11", [VEC_TRAP12] = "TRAP #12", [VEC_TRAP13] = "TRAP #13", [VEC_TRAP14] = "TRAP #14", [VEC_TRAP15] = "TRAP #15", [VEC_FPBRUC] = "FPCP BSUN", [VEC_FPIR] = "FPCP INEXACT", [VEC_FPDIVZ] = "FPCP DIV BY 0", [VEC_FPUNDER] = "FPCP UNDERFLOW", [VEC_FPOE] = "FPCP OPERAND ERROR", [VEC_FPOVER] = "FPCP OVERFLOW", [VEC_FPNAN] = "FPCP SNAN", [VEC_FPUNSUP] = "FPCP UNSUPPORTED OPERATION", [VEC_MMUCFG] = "MMU CONFIGURATION ERROR", [VEC_MMUILL] = "MMU ILLEGAL OPERATION ERROR", [VEC_MMUACC] = "MMU ACCESS LEVEL VIOLATION ERROR", [VEC_RESV59] = "UNASSIGNED RESERVED 59", [VEC_UNIMPEA] = "UNASSIGNED RESERVED 60", [VEC_UNIMPII] = "UNASSIGNED RESERVED 61", [VEC_RESV62] = "UNASSIGNED RESERVED 62", [VEC_RESV63] = "UNASSIGNED RESERVED 63", }; static const char *space_names[] = { [0] = "Space 0", [USER_DATA] = "User Data", [USER_PROGRAM] = "User Program", #ifndef CONFIG_SUN3 [3] = "Space 3", #else [FC_CONTROL] = "Control", #endif [4] = "Space 4", [SUPER_DATA] = "Super Data", [SUPER_PROGRAM] = "Super Program", [CPU_SPACE] = "CPU" }; void die_if_kernel(char *,struct pt_regs *,int); asmlinkage int do_page_fault(struct pt_regs *regs, unsigned long address, unsigned long error_code); int send_fault_sig(struct pt_regs *regs); asmlinkage void trap_c(struct frame *fp); #if defined (CONFIG_M68060) static inline void access_error060 (struct frame *fp) { unsigned long fslw = fp->un.fmt4.pc; /* is really FSLW for access error */ pr_debug("fslw=%#lx, fa=%#lx\n", fslw, fp->un.fmt4.effaddr); if (fslw & MMU060_BPE) { /* branch prediction error -> clear branch cache */ __asm__ __volatile__ ("movec %/cacr,%/d0\n\t" "orl #0x00400000,%/d0\n\t" "movec %/d0,%/cacr" : : : "d0" ); /* return if there's no other error */ if (!(fslw & MMU060_ERR_BITS) && !(fslw & MMU060_SEE)) return; } if (fslw & (MMU060_DESC_ERR | MMU060_WP | MMU060_SP)) { unsigned long errorcode; unsigned long addr = fp->un.fmt4.effaddr; if (fslw & MMU060_MA) addr = (addr + PAGE_SIZE - 1) & PAGE_MASK; errorcode = 1; if (fslw & MMU060_DESC_ERR) { __flush_tlb040_one(addr); errorcode = 0; } if (fslw & MMU060_W) errorcode |= 2; pr_debug("errorcode = %ld\n", errorcode); do_page_fault(&fp->ptregs, addr, errorcode); } else if (fslw & (MMU060_SEE)){ /* Software Emulation Error. * fault during mem_read/mem_write in ifpsp060/os.S */ send_fault_sig(&fp->ptregs); } else if (!(fslw & (MMU060_RE|MMU060_WE)) || send_fault_sig(&fp->ptregs) > 0) { pr_err("pc=%#lx, fa=%#lx\n", fp->ptregs.pc, fp->un.fmt4.effaddr); pr_err("68060 access error, fslw=%lx\n", fslw); trap_c( fp ); } } #endif /* CONFIG_M68060 */ #if defined (CONFIG_M68040) static inline unsigned long probe040(int iswrite, unsigned long addr, int wbs) { unsigned long mmusr; mm_segment_t old_fs = get_fs(); set_fs(MAKE_MM_SEG(wbs)); if (iswrite) asm volatile (".chip 68040; ptestw (%0); .chip 68k" : : "a" (addr)); else asm volatile (".chip 68040; ptestr (%0); .chip 68k" : : "a" (addr)); asm volatile (".chip 68040; movec %%mmusr,%0; .chip 68k" : "=r" (mmusr)); set_fs(old_fs); return mmusr; } static inline int do_040writeback1(unsigned short wbs, unsigned long wba, unsigned long wbd) { int res = 0; mm_segment_t old_fs = get_fs(); /* set_fs can not be moved, otherwise put_user() may oops */ set_fs(MAKE_MM_SEG(wbs)); switch (wbs & WBSIZ_040) { case BA_SIZE_BYTE: res = put_user(wbd & 0xff, (char __user *)wba); break; case BA_SIZE_WORD: res = put_user(wbd & 0xffff, (short __user *)wba); break; case BA_SIZE_LONG: res = put_user(wbd, (int __user *)wba); break; } /* set_fs can not be moved, otherwise put_user() may oops */ set_fs(old_fs); pr_debug("do_040writeback1, res=%d\n", res); return res; } /* after an exception in a writeback the stack frame corresponding * to that exception is discarded, set a few bits in the old frame * to simulate what it should look like */ static inline void fix_xframe040(struct frame *fp, unsigned long wba, unsigned short wbs) { fp->un.fmt7.faddr = wba; fp->un.fmt7.ssw = wbs & 0xff; if (wba != current->thread.faddr) fp->un.fmt7.ssw |= MA_040; } static inline void do_040writebacks(struct frame *fp) { int res = 0; #if 0 if (fp->un.fmt7.wb1s & WBV_040) pr_err("access_error040: cannot handle 1st writeback. oops.\n"); #endif if ((fp->un.fmt7.wb2s & WBV_040) && !(fp->un.fmt7.wb2s & WBTT_040)) { res = do_040writeback1(fp->un.fmt7.wb2s, fp->un.fmt7.wb2a, fp->un.fmt7.wb2d); if (res) fix_xframe040(fp, fp->un.fmt7.wb2a, fp->un.fmt7.wb2s); else fp->un.fmt7.wb2s = 0; } /* do the 2nd wb only if the first one was successful (except for a kernel wb) */ if (fp->un.fmt7.wb3s & WBV_040 && (!res || fp->un.fmt7.wb3s & 4)) { res = do_040writeback1(fp->un.fmt7.wb3s, fp->un.fmt7.wb3a, fp->un.fmt7.wb3d); if (res) { fix_xframe040(fp, fp->un.fmt7.wb3a, fp->un.fmt7.wb3s); fp->un.fmt7.wb2s = fp->un.fmt7.wb3s; fp->un.fmt7.wb3s &= (~WBV_040); fp->un.fmt7.wb2a = fp->un.fmt7.wb3a; fp->un.fmt7.wb2d = fp->un.fmt7.wb3d; } else fp->un.fmt7.wb3s = 0; } if (res) send_fault_sig(&fp->ptregs); } /* * called from sigreturn(), must ensure userspace code didn't * manipulate exception frame to circumvent protection, then complete * pending writebacks * we just clear TM2 to turn it into a userspace access */ asmlinkage void berr_040cleanup(struct frame *fp) { fp->un.fmt7.wb2s &= ~4; fp->un.fmt7.wb3s &= ~4; do_040writebacks(fp); } static inline void access_error040(struct frame *fp) { unsigned short ssw = fp->un.fmt7.ssw; unsigned long mmusr; pr_debug("ssw=%#x, fa=%#lx\n", ssw, fp->un.fmt7.faddr); pr_debug("wb1s=%#x, wb2s=%#x, wb3s=%#x\n", fp->un.fmt7.wb1s, fp->un.fmt7.wb2s, fp->un.fmt7.wb3s); pr_debug("wb2a=%lx, wb3a=%lx, wb2d=%lx, wb3d=%lx\n", fp->un.fmt7.wb2a, fp->un.fmt7.wb3a, fp->un.fmt7.wb2d, fp->un.fmt7.wb3d); if (ssw & ATC_040) { unsigned long addr = fp->un.fmt7.faddr; unsigned long errorcode; /* * The MMU status has to be determined AFTER the address * has been corrected if there was a misaligned access (MA). */ if (ssw & MA_040) addr = (addr + 7) & -8; /* MMU error, get the MMUSR info for this access */ mmusr = probe040(!(ssw & RW_040), addr, ssw); pr_debug("mmusr = %lx\n", mmusr); errorcode = 1; if (!(mmusr & MMU_R_040)) { /* clear the invalid atc entry */ __flush_tlb040_one(addr); errorcode = 0; } /* despite what documentation seems to say, RMW * accesses have always both the LK and RW bits set */ if (!(ssw & RW_040) || (ssw & LK_040)) errorcode |= 2; if (do_page_fault(&fp->ptregs, addr, errorcode)) { pr_debug("do_page_fault() !=0\n"); if (user_mode(&fp->ptregs)){ /* delay writebacks after signal delivery */ pr_debug(".. was usermode - return\n"); return; } /* disable writeback into user space from kernel * (if do_page_fault didn't fix the mapping, * the writeback won't do good) */ disable_wb: pr_debug(".. disabling wb2\n"); if (fp->un.fmt7.wb2a == fp->un.fmt7.faddr) fp->un.fmt7.wb2s &= ~WBV_040; if (fp->un.fmt7.wb3a == fp->un.fmt7.faddr) fp->un.fmt7.wb3s &= ~WBV_040; } } else { /* In case of a bus error we either kill the process or expect * the kernel to catch the fault, which then is also responsible * for cleaning up the mess. */ current->thread.signo = SIGBUS; current->thread.faddr = fp->un.fmt7.faddr; if (send_fault_sig(&fp->ptregs) >= 0) pr_err("68040 bus error (ssw=%x, faddr=%lx)\n", ssw, fp->un.fmt7.faddr); goto disable_wb; } do_040writebacks(fp); } #endif /* CONFIG_M68040 */ #if defined(CONFIG_SUN3) #include extern int mmu_emu_handle_fault (unsigned long, int, int); /* sun3 version of bus_error030 */ static inline void bus_error030 (struct frame *fp) { unsigned char buserr_type = sun3_get_buserr (); unsigned long addr, errorcode; unsigned short ssw = fp->un.fmtb.ssw; extern unsigned long _sun3_map_test_start, _sun3_map_test_end; if (ssw & (FC | FB)) pr_debug("Instruction fault at %#010lx\n", ssw & FC ? fp->ptregs.format == 0xa ? fp->ptregs.pc + 2 : fp->un.fmtb.baddr - 2 : fp->ptregs.format == 0xa ? fp->ptregs.pc + 4 : fp->un.fmtb.baddr); if (ssw & DF) pr_debug("Data %s fault at %#010lx in %s (pc=%#lx)\n", ssw & RW ? "read" : "write", fp->un.fmtb.daddr, space_names[ssw & DFC], fp->ptregs.pc); /* * Check if this page should be demand-mapped. This needs to go before * the testing for a bad kernel-space access (demand-mapping applies * to kernel accesses too). */ if ((ssw & DF) && (buserr_type & (SUN3_BUSERR_PROTERR | SUN3_BUSERR_INVALID))) { if (mmu_emu_handle_fault (fp->un.fmtb.daddr, ssw & RW, 0)) return; } /* Check for kernel-space pagefault (BAD). */ if (fp->ptregs.sr & PS_S) { /* kernel fault must be a data fault to user space */ if (! ((ssw & DF) && ((ssw & DFC) == USER_DATA))) { // try checking the kernel mappings before surrender if (mmu_emu_handle_fault (fp->un.fmtb.daddr, ssw & RW, 1)) return; /* instruction fault or kernel data fault! */ if (ssw & (FC | FB)) pr_err("Instruction fault at %#010lx\n", fp->ptregs.pc); if (ssw & DF) { /* was this fault incurred testing bus mappings? */ if((fp->ptregs.pc >= (unsigned long)&_sun3_map_test_start) && (fp->ptregs.pc <= (unsigned long)&_sun3_map_test_end)) { send_fault_sig(&fp->ptregs); return; } pr_err("Data %s fault at %#010lx in %s (pc=%#lx)\n", ssw & RW ? "read" : "write", fp->un.fmtb.daddr, space_names[ssw & DFC], fp->ptregs.pc); } pr_err("BAD KERNEL BUSERR\n"); die_if_kernel("Oops", &fp->ptregs,0); force_sig(SIGKILL); return; } } else { /* user fault */ if (!(ssw & (FC | FB)) && !(ssw & DF)) /* not an instruction fault or data fault! BAD */ panic ("USER BUSERR w/o instruction or data fault"); } /* First handle the data fault, if any. */ if (ssw & DF) { addr = fp->un.fmtb.daddr; // errorcode bit 0: 0 -> no page 1 -> protection fault // errorcode bit 1: 0 -> read fault 1 -> write fault // (buserr_type & SUN3_BUSERR_PROTERR) -> protection fault // (buserr_type & SUN3_BUSERR_INVALID) -> invalid page fault if (buserr_type & SUN3_BUSERR_PROTERR) errorcode = 0x01; else if (buserr_type & SUN3_BUSERR_INVALID) errorcode = 0x00; else { pr_debug("*** unexpected busfault type=%#04x\n", buserr_type); pr_debug("invalid %s access at %#lx from pc %#lx\n", !(ssw & RW) ? "write" : "read", addr, fp->ptregs.pc); die_if_kernel ("Oops", &fp->ptregs, buserr_type); force_sig (SIGBUS); return; } //todo: wtf is RM bit? --m if (!(ssw & RW) || ssw & RM) errorcode |= 0x02; /* Handle page fault. */ do_page_fault (&fp->ptregs, addr, errorcode); /* Retry the data fault now. */ return; } /* Now handle the instruction fault. */ /* Get the fault address. */ if (fp->ptregs.format == 0xA) addr = fp->ptregs.pc + 4; else addr = fp->un.fmtb.baddr; if (ssw & FC) addr -= 2; if (buserr_type & SUN3_BUSERR_INVALID) { if (!mmu_emu_handle_fault(addr, 1, 0)) do_page_fault (&fp->ptregs, addr, 0); } else { pr_debug("protection fault on insn access (segv).\n"); force_sig (SIGSEGV); } } #else #if defined(CPU_M68020_OR_M68030) static inline void bus_error030 (struct frame *fp) { volatile unsigned short temp; unsigned short mmusr; unsigned long addr, errorcode; unsigned short ssw = fp->un.fmtb.ssw; #ifdef DEBUG unsigned long desc; #endif pr_debug("pid = %x ", current->pid); pr_debug("SSW=%#06x ", ssw); if (ssw & (FC | FB)) pr_debug("Instruction fault at %#010lx\n", ssw & FC ? fp->ptregs.format == 0xa ? fp->ptregs.pc + 2 : fp->un.fmtb.baddr - 2 : fp->ptregs.format == 0xa ? fp->ptregs.pc + 4 : fp->un.fmtb.baddr); if (ssw & DF) pr_debug("Data %s fault at %#010lx in %s (pc=%#lx)\n", ssw & RW ? "read" : "write", fp->un.fmtb.daddr, space_names[ssw & DFC], fp->ptregs.pc); /* ++andreas: If a data fault and an instruction fault happen at the same time map in both pages. */ /* First handle the data fault, if any. */ if (ssw & DF) { addr = fp->un.fmtb.daddr; #ifdef DEBUG asm volatile ("ptestr %3,%2@,#7,%0\n\t" "pmove %%psr,%1" : "=a&" (desc), "=m" (temp) : "a" (addr), "d" (ssw)); pr_debug("mmusr is %#x for addr %#lx in task %p\n", temp, addr, current); pr_debug("descriptor address is 0x%p, contents %#lx\n", __va(desc), *(unsigned long *)__va(desc)); #else asm volatile ("ptestr %2,%1@,#7\n\t" "pmove %%psr,%0" : "=m" (temp) : "a" (addr), "d" (ssw)); #endif mmusr = temp; errorcode = (mmusr & MMU_I) ? 0 : 1; if (!(ssw & RW) || (ssw & RM)) errorcode |= 2; if (mmusr & (MMU_I | MMU_WP)) { if (ssw & 4) { pr_err("Data %s fault at %#010lx in %s (pc=%#lx)\n", ssw & RW ? "read" : "write", fp->un.fmtb.daddr, space_names[ssw & DFC], fp->ptregs.pc); goto buserr; } /* Don't try to do anything further if an exception was handled. */ if (do_page_fault (&fp->ptregs, addr, errorcode) < 0) return; } else if (!(mmusr & MMU_I)) { /* probably a 020 cas fault */ if (!(ssw & RM) && send_fault_sig(&fp->ptregs) > 0) pr_err("unexpected bus error (%#x,%#x)\n", ssw, mmusr); } else if (mmusr & (MMU_B|MMU_L|MMU_S)) { pr_err("invalid %s access at %#lx from pc %#lx\n", !(ssw & RW) ? "write" : "read", addr, fp->ptregs.pc); die_if_kernel("Oops",&fp->ptregs,mmusr); force_sig(SIGSEGV); return; } else { #if 0 static volatile long tlong; #endif pr_err("weird %s access at %#lx from pc %#lx (ssw is %#x)\n", !(ssw & RW) ? "write" : "read", addr, fp->ptregs.pc, ssw); asm volatile ("ptestr #1,%1@,#0\n\t" "pmove %%psr,%0" : "=m" (temp) : "a" (addr)); mmusr = temp; pr_err("level 0 mmusr is %#x\n", mmusr); #if 0 asm volatile ("pmove %%tt0,%0" : "=m" (tlong)); pr_debug("tt0 is %#lx, ", tlong); asm volatile ("pmove %%tt1,%0" : "=m" (tlong)); pr_debug("tt1 is %#lx\n", tlong); #endif pr_debug("Unknown SIGSEGV - 1\n"); die_if_kernel("Oops",&fp->ptregs,mmusr); force_sig(SIGSEGV); return; } /* setup an ATC entry for the access about to be retried */ if (!(ssw & RW) || (ssw & RM)) asm volatile ("ploadw %1,%0@" : /* no outputs */ : "a" (addr), "d" (ssw)); else asm volatile ("ploadr %1,%0@" : /* no outputs */ : "a" (addr), "d" (ssw)); } /* Now handle the instruction fault. */ if (!(ssw & (FC|FB))) return; if (fp->ptregs.sr & PS_S) { pr_err("Instruction fault at %#010lx\n", fp->ptregs.pc); buserr: pr_err("BAD KERNEL BUSERR\n"); die_if_kernel("Oops",&fp->ptregs,0); force_sig(SIGKILL); return; } /* get the fault address */ if (fp->ptregs.format == 10) addr = fp->ptregs.pc + 4; else addr = fp->un.fmtb.baddr; if (ssw & FC) addr -= 2; if ((ssw & DF) && ((addr ^ fp->un.fmtb.daddr) & PAGE_MASK) == 0) /* Insn fault on same page as data fault. But we should still create the ATC entry. */ goto create_atc_entry; #ifdef DEBUG asm volatile ("ptestr #1,%2@,#7,%0\n\t" "pmove %%psr,%1" : "=a&" (desc), "=m" (temp) : "a" (addr)); pr_debug("mmusr is %#x for addr %#lx in task %p\n", temp, addr, current); pr_debug("descriptor address is 0x%p, contents %#lx\n", __va(desc), *(unsigned long *)__va(desc)); #else asm volatile ("ptestr #1,%1@,#7\n\t" "pmove %%psr,%0" : "=m" (temp) : "a" (addr)); #endif mmusr = temp; if (mmusr & MMU_I) do_page_fault (&fp->ptregs, addr, 0); else if (mmusr & (MMU_B|MMU_L|MMU_S)) { pr_err("invalid insn access at %#lx from pc %#lx\n", addr, fp->ptregs.pc); pr_debug("Unknown SIGSEGV - 2\n"); die_if_kernel("Oops",&fp->ptregs,mmusr); force_sig(SIGSEGV); return; } create_atc_entry: /* setup an ATC entry for the access about to be retried */ asm volatile ("ploadr #2,%0@" : /* no outputs */ : "a" (addr)); } #endif /* CPU_M68020_OR_M68030 */ #endif /* !CONFIG_SUN3 */ #if defined(CONFIG_COLDFIRE) && defined(CONFIG_MMU) #include /* * The following table converts the FS encoding of a ColdFire * exception stack frame into the error_code value needed by * do_fault. */ static const unsigned char fs_err_code[] = { 0, /* 0000 */ 0, /* 0001 */ 0, /* 0010 */ 0, /* 0011 */ 1, /* 0100 */ 0, /* 0101 */ 0, /* 0110 */ 0, /* 0111 */ 2, /* 1000 */ 3, /* 1001 */ 2, /* 1010 */ 0, /* 1011 */ 1, /* 1100 */ 1, /* 1101 */ 0, /* 1110 */ 0 /* 1111 */ }; static inline void access_errorcf(unsigned int fs, struct frame *fp) { unsigned long mmusr, addr; unsigned int err_code; int need_page_fault; mmusr = mmu_read(MMUSR); addr = mmu_read(MMUAR); /* * error_code: * bit 0 == 0 means no page found, 1 means protection fault * bit 1 == 0 means read, 1 means write */ switch (fs) { case 5: /* 0101 TLB opword X miss */ need_page_fault = cf_tlb_miss(&fp->ptregs, 0, 0, 0); addr = fp->ptregs.pc; break; case 6: /* 0110 TLB extension word X miss */ need_page_fault = cf_tlb_miss(&fp->ptregs, 0, 0, 1); addr = fp->ptregs.pc + sizeof(long); break; case 10: /* 1010 TLB W miss */ need_page_fault = cf_tlb_miss(&fp->ptregs, 1, 1, 0); break; case 14: /* 1110 TLB R miss */ need_page_fault = cf_tlb_miss(&fp->ptregs, 0, 1, 0); break; default: /* 0000 Normal */ /* 0001 Reserved */ /* 0010 Interrupt during debug service routine */ /* 0011 Reserved */ /* 0100 X Protection */ /* 0111 IFP in emulator mode */ /* 1000 W Protection*/ /* 1001 Write error*/ /* 1011 Reserved*/ /* 1100 R Protection*/ /* 1101 R Protection*/ /* 1111 OEP in emulator mode*/ need_page_fault = 1; break; } if (need_page_fault) { err_code = fs_err_code[fs]; if ((fs == 13) && (mmusr & MMUSR_WF)) /* rd-mod-wr access */ err_code |= 2; /* bit1 - write, bit0 - protection */ do_page_fault(&fp->ptregs, addr, err_code); } } #endif /* CONFIG_COLDFIRE CONFIG_MMU */ asmlinkage void buserr_c(struct frame *fp) { /* Only set esp0 if coming from user mode */ if (user_mode(&fp->ptregs)) current->thread.esp0 = (unsigned long) fp; pr_debug("*** Bus Error *** Format is %x\n", fp->ptregs.format); #if defined(CONFIG_COLDFIRE) && defined(CONFIG_MMU) if (CPU_IS_COLDFIRE) { unsigned int fs; fs = (fp->ptregs.vector & 0x3) | ((fp->ptregs.vector & 0xc00) >> 8); switch (fs) { case 0x5: case 0x6: case 0x7: case 0x9: case 0xa: case 0xd: case 0xe: case 0xf: access_errorcf(fs, fp); return; default: break; } } #endif /* CONFIG_COLDFIRE && CONFIG_MMU */ switch (fp->ptregs.format) { #if defined (CONFIG_M68060) case 4: /* 68060 access error */ access_error060 (fp); break; #endif #if defined (CONFIG_M68040) case 0x7: /* 68040 access error */ access_error040 (fp); break; #endif #if defined (CPU_M68020_OR_M68030) case 0xa: case 0xb: bus_error030 (fp); break; #endif default: die_if_kernel("bad frame format",&fp->ptregs,0); pr_debug("Unknown SIGSEGV - 4\n"); force_sig(SIGSEGV); } } static int kstack_depth_to_print = 48; static void show_trace(unsigned long *stack, const char *loglvl) { unsigned long *endstack; unsigned long addr; int i; printk("%sCall Trace:", loglvl); addr = (unsigned long)stack + THREAD_SIZE - 1; endstack = (unsigned long *)(addr & -THREAD_SIZE); i = 0; while (stack + 1 <= endstack) { addr = *stack++; /* * If the address is either in the text segment of the * kernel, or in the region which contains vmalloc'ed * memory, it *may* be the address of a calling * routine; if so, print it so that someone tracing * down the cause of the crash will be able to figure * out the call path that was taken. */ if (__kernel_text_address(addr)) { #ifndef CONFIG_KALLSYMS if (i % 5 == 0) pr_cont("\n "); #endif pr_cont(" [<%08lx>] %pS\n", addr, (void *)addr); i++; } } pr_cont("\n"); } void show_registers(struct pt_regs *regs) { struct frame *fp = (struct frame *)regs; mm_segment_t old_fs = get_fs(); u16 c, *cp; unsigned long addr; int i; print_modules(); pr_info("PC: [<%08lx>] %pS\n", regs->pc, (void *)regs->pc); pr_info("SR: %04x SP: %p a2: %08lx\n", regs->sr, regs, regs->a2); pr_info("d0: %08lx d1: %08lx d2: %08lx d3: %08lx\n", regs->d0, regs->d1, regs->d2, regs->d3); pr_info("d4: %08lx d5: %08lx a0: %08lx a1: %08lx\n", regs->d4, regs->d5, regs->a0, regs->a1); pr_info("Process %s (pid: %d, task=%p)\n", current->comm, task_pid_nr(current), current); addr = (unsigned long)&fp->un; pr_info("Frame format=%X ", regs->format); switch (regs->format) { case 0x2: pr_cont("instr addr=%08lx\n", fp->un.fmt2.iaddr); addr += sizeof(fp->un.fmt2); break; case 0x3: pr_cont("eff addr=%08lx\n", fp->un.fmt3.effaddr); addr += sizeof(fp->un.fmt3); break; case 0x4: if (CPU_IS_060) pr_cont("fault addr=%08lx fslw=%08lx\n", fp->un.fmt4.effaddr, fp->un.fmt4.pc); else pr_cont("eff addr=%08lx pc=%08lx\n", fp->un.fmt4.effaddr, fp->un.fmt4.pc); addr += sizeof(fp->un.fmt4); break; case 0x7: pr_cont("eff addr=%08lx ssw=%04x faddr=%08lx\n", fp->un.fmt7.effaddr, fp->un.fmt7.ssw, fp->un.fmt7.faddr); pr_info("wb 1 stat/addr/data: %04x %08lx %08lx\n", fp->un.fmt7.wb1s, fp->un.fmt7.wb1a, fp->un.fmt7.wb1dpd0); pr_info("wb 2 stat/addr/data: %04x %08lx %08lx\n", fp->un.fmt7.wb2s, fp->un.fmt7.wb2a, fp->un.fmt7.wb2d); pr_info("wb 3 stat/addr/data: %04x %08lx %08lx\n", fp->un.fmt7.wb3s, fp->un.fmt7.wb3a, fp->un.fmt7.wb3d); pr_info("push data: %08lx %08lx %08lx %08lx\n", fp->un.fmt7.wb1dpd0, fp->un.fmt7.pd1, fp->un.fmt7.pd2, fp->un.fmt7.pd3); addr += sizeof(fp->un.fmt7); break; case 0x9: pr_cont("instr addr=%08lx\n", fp->un.fmt9.iaddr); addr += sizeof(fp->un.fmt9); break; case 0xa: pr_cont("ssw=%04x isc=%04x isb=%04x daddr=%08lx dobuf=%08lx\n", fp->un.fmta.ssw, fp->un.fmta.isc, fp->un.fmta.isb, fp->un.fmta.daddr, fp->un.fmta.dobuf); addr += sizeof(fp->un.fmta); break; case 0xb: pr_cont("ssw=%04x isc=%04x isb=%04x daddr=%08lx dobuf=%08lx\n", fp->un.fmtb.ssw, fp->un.fmtb.isc, fp->un.fmtb.isb, fp->un.fmtb.daddr, fp->un.fmtb.dobuf); pr_info("baddr=%08lx dibuf=%08lx ver=%x\n", fp->un.fmtb.baddr, fp->un.fmtb.dibuf, fp->un.fmtb.ver); addr += sizeof(fp->un.fmtb); break; default: pr_cont("\n"); } show_stack(NULL, (unsigned long *)addr); pr_info("Code:"); set_fs(KERNEL_DS); cp = (u16 *)regs->pc; for (i = -8; i < 16; i++) { if (get_user(c, cp + i) && i >= 0) { pr_cont(" Bad PC value."); break; } if (i) pr_cont(" %04x", c); else pr_cont(" <%04x>", c); } set_fs(old_fs); pr_cont("\n"); } void show_stack_loglvl(struct task_struct *task, unsigned long *stack, const char *loglvl) { unsigned long *p; unsigned long *endstack; int i; if (!stack) { if (task) stack = (unsigned long *)task->thread.esp0; else stack = (unsigned long *)&stack; } endstack = (unsigned long *)(((unsigned long)stack + THREAD_SIZE - 1) & -THREAD_SIZE); printk("%sStack from %08lx:", loglvl, (unsigned long)stack); p = stack; for (i = 0; i < kstack_depth_to_print; i++) { if (p + 1 > endstack) break; if (i % 8 == 0) pr_cont("\n "); pr_cont(" %08lx", *p++); } pr_cont("\n"); show_trace(stack, loglvl); } void show_stack(struct task_struct *task, unsigned long *stack) { show_stack_loglvl(task, stack, KERN_INFO); } /* * The vector number returned in the frame pointer may also contain * the "fs" (Fault Status) bits on ColdFire. These are in the bottom * 2 bits, and upper 2 bits. So we need to mask out the real vector * number before using it in comparisons. You don't need to do this on * real 68k parts, but it won't hurt either. */ void bad_super_trap (struct frame *fp) { int vector = (fp->ptregs.vector >> 2) & 0xff; console_verbose(); if (vector < ARRAY_SIZE(vec_names)) pr_err("*** %s *** FORMAT=%X\n", vec_names[vector], fp->ptregs.format); else pr_err("*** Exception %d *** FORMAT=%X\n", vector, fp->ptregs.format); if (vector == VEC_ADDRERR && CPU_IS_020_OR_030) { unsigned short ssw = fp->un.fmtb.ssw; pr_err("SSW=%#06x ", ssw); if (ssw & RC) pr_err("Pipe stage C instruction fault at %#010lx\n", (fp->ptregs.format) == 0xA ? fp->ptregs.pc + 2 : fp->un.fmtb.baddr - 2); if (ssw & RB) pr_err("Pipe stage B instruction fault at %#010lx\n", (fp->ptregs.format) == 0xA ? fp->ptregs.pc + 4 : fp->un.fmtb.baddr); if (ssw & DF) pr_err("Data %s fault at %#010lx in %s (pc=%#lx)\n", ssw & RW ? "read" : "write", fp->un.fmtb.daddr, space_names[ssw & DFC], fp->ptregs.pc); } pr_err("Current process id is %d\n", task_pid_nr(current)); die_if_kernel("BAD KERNEL TRAP", &fp->ptregs, 0); } asmlinkage void trap_c(struct frame *fp) { int sig, si_code; void __user *addr; int vector = (fp->ptregs.vector >> 2) & 0xff; if (fp->ptregs.sr & PS_S) { if (vector == VEC_TRACE) { /* traced a trapping instruction on a 68020/30, * real exception will be executed afterwards. */ return; } #ifdef CONFIG_MMU if (fixup_exception(&fp->ptregs)) return; #endif bad_super_trap(fp); return; } /* send the appropriate signal to the user program */ switch (vector) { case VEC_ADDRERR: si_code = BUS_ADRALN; sig = SIGBUS; break; case VEC_ILLEGAL: case VEC_LINE10: case VEC_LINE11: si_code = ILL_ILLOPC; sig = SIGILL; break; case VEC_PRIV: si_code = ILL_PRVOPC; sig = SIGILL; break; case VEC_COPROC: si_code = ILL_COPROC; sig = SIGILL; break; case VEC_TRAP1: case VEC_TRAP2: case VEC_TRAP3: case VEC_TRAP4: case VEC_TRAP5: case VEC_TRAP6: case VEC_TRAP7: case VEC_TRAP8: case VEC_TRAP9: case VEC_TRAP10: case VEC_TRAP11: case VEC_TRAP12: case VEC_TRAP13: case VEC_TRAP14: si_code = ILL_ILLTRP; sig = SIGILL; break; case VEC_FPBRUC: case VEC_FPOE: case VEC_FPNAN: si_code = FPE_FLTINV; sig = SIGFPE; break; case VEC_FPIR: si_code = FPE_FLTRES; sig = SIGFPE; break; case VEC_FPDIVZ: si_code = FPE_FLTDIV; sig = SIGFPE; break; case VEC_FPUNDER: si_code = FPE_FLTUND; sig = SIGFPE; break; case VEC_FPOVER: si_code = FPE_FLTOVF; sig = SIGFPE; break; case VEC_ZERODIV: si_code = FPE_INTDIV; sig = SIGFPE; break; case VEC_CHK: case VEC_TRAP: si_code = FPE_INTOVF; sig = SIGFPE; break; case VEC_TRACE: /* ptrace single step */ si_code = TRAP_TRACE; sig = SIGTRAP; break; case VEC_TRAP15: /* breakpoint */ si_code = TRAP_BRKPT; sig = SIGTRAP; break; default: si_code = ILL_ILLOPC; sig = SIGILL; break; } switch (fp->ptregs.format) { default: addr = (void __user *) fp->ptregs.pc; break; case 2: addr = (void __user *) fp->un.fmt2.iaddr; break; case 7: addr = (void __user *) fp->un.fmt7.effaddr; break; case 9: addr = (void __user *) fp->un.fmt9.iaddr; break; case 10: addr = (void __user *) fp->un.fmta.daddr; break; case 11: addr = (void __user*) fp->un.fmtb.daddr; break; } force_sig_fault(sig, si_code, addr); } void die_if_kernel (char *str, struct pt_regs *fp, int nr) { if (!(fp->sr & PS_S)) return; console_verbose(); pr_crit("%s: %08x\n", str, nr); show_registers(fp); add_taint(TAINT_DIE, LOCKDEP_NOW_UNRELIABLE); do_exit(SIGSEGV); } asmlinkage void set_esp0(unsigned long ssp) { current->thread.esp0 = ssp; } /* * This function is called if an error occur while accessing * user-space from the fpsp040 code. */ asmlinkage void fpsp040_die(void) { do_exit(SIGSEGV); } #ifdef CONFIG_M68KFPU_EMU asmlinkage void fpemu_signal(int signal, int code, void *addr) { force_sig_fault(signal, code, addr); } #endif