2 * arch/xtensa/kernel/vectors.S
4 * This file contains all exception vectors (user, kernel, and double),
5 * as well as the window vectors (overflow and underflow), and the debug
6 * vector. These are the primary vectors executed by the processor if an
9 * This file is subject to the terms and conditions of the GNU General
10 * Public License. See the file "COPYING" in the main directory of
11 * this archive for more details.
13 * Copyright (C) 2005 - 2008 Tensilica, Inc.
15 * Chris Zankel <chris@zankel.net>
20 * We use a two-level table approach. The user and kernel exception vectors
21 * use a first-level dispatch table to dispatch the exception to a registered
22 * fast handler or the default handler, if no fast handler was registered.
23 * The default handler sets up a C-stack and dispatches the exception to a
24 * registerd C handler in the second-level dispatch table.
26 * Fast handler entry condition:
28 * a0: trashed, original value saved on stack (PT_AREG0)
30 * a2: new stack pointer, original value in depc
32 * depc: a2, original value saved on stack (PT_DEPC)
35 * The value for PT_DEPC saved to stack also functions as a boolean to
36 * indicate that the exception is either a double or a regular exception:
38 * PT_DEPC >= VALID_DOUBLE_EXCEPTION_ADDRESS: double exception
39 * < VALID_DOUBLE_EXCEPTION_ADDRESS: regular exception
41 * Note: Neither the kernel nor the user exception handler generate literals.
45 #include <linux/linkage.h>
46 #include <linux/pgtable.h>
47 #include <asm/asmmacro.h>
48 #include <asm/ptrace.h>
49 #include <asm/current.h>
50 #include <asm/asm-offsets.h>
51 #include <asm/processor.h>
53 #include <asm/thread_info.h>
54 #include <asm/vectors.h>
56 #define WINDOW_VECTORS_SIZE 0x180
60 * User exception vector. (Exceptions with PS.UM == 1, PS.EXCM == 0)
62 * We get here when an exception occurred while we were in userland.
63 * We switch to the kernel stack and jump to the first level handler
64 * associated to the exception cause.
66 * Note: the saved kernel stack pointer (EXC_TABLE_KSTK) is already
67 * decremented by PT_USER_SIZE.
70 .section .UserExceptionVector.text, "ax"
72 ENTRY(_UserExceptionVector)
74 xsr a3, excsave1 # save a3 and get dispatch table
75 wsr a2, depc # save a2
76 l32i a2, a3, EXC_TABLE_KSTK # load kernel stack to a2
77 s32i a0, a2, PT_AREG0 # save a0 to ESF
78 rsr a0, exccause # retrieve exception cause
79 s32i a0, a2, PT_DEPC # mark it as a regular exception
80 addx4 a0, a0, a3 # find entry in table
81 l32i a0, a0, EXC_TABLE_FAST_USER # load handler
82 xsr a3, excsave1 # restore a3 and dispatch table
85 ENDPROC(_UserExceptionVector)
88 * Kernel exception vector. (Exceptions with PS.UM == 0, PS.EXCM == 0)
90 * We get this exception when we were already in kernel space.
91 * We decrement the current stack pointer (kernel) by PT_SIZE and
92 * jump to the first-level handler associated with the exception cause.
94 * Note: we need to preserve space for the spill region.
97 .section .KernelExceptionVector.text, "ax"
99 ENTRY(_KernelExceptionVector)
101 xsr a3, excsave1 # save a3, and get dispatch table
102 wsr a2, depc # save a2
103 addi a2, a1, -16-PT_SIZE # adjust stack pointer
104 s32i a0, a2, PT_AREG0 # save a0 to ESF
105 rsr a0, exccause # retrieve exception cause
106 s32i a0, a2, PT_DEPC # mark it as a regular exception
107 addx4 a0, a0, a3 # find entry in table
108 l32i a0, a0, EXC_TABLE_FAST_KERNEL # load handler address
109 xsr a3, excsave1 # restore a3 and dispatch table
112 ENDPROC(_KernelExceptionVector)
115 * Double exception vector (Exceptions with PS.EXCM == 1)
116 * We get this exception when another exception occurs while were are
117 * already in an exception, such as window overflow/underflow exception,
118 * or 'expected' exceptions, for example memory exception when we were trying
119 * to read data from an invalid address in user space.
121 * Note that this vector is never invoked for level-1 interrupts, because such
122 * interrupts are disabled (masked) when PS.EXCM is set.
124 * We decode the exception and take the appropriate action. However, the
125 * double exception vector is much more careful, because a lot more error
126 * cases go through the double exception vector than through the user and
127 * kernel exception vectors.
129 * Occasionally, the kernel expects a double exception to occur. This usually
130 * happens when accessing user-space memory with the user's permissions
131 * (l32e/s32e instructions). The kernel state, though, is not always suitable
132 * for immediate transfer of control to handle_double, where "normal" exception
133 * processing occurs. Also in kernel mode, TLB misses can occur if accessing
134 * vmalloc memory, possibly requiring repair in a double exception handler.
136 * The variable at TABLE_FIXUP offset from the pointer in EXCSAVE_1 doubles as
137 * a boolean variable and a pointer to a fixup routine. If the variable
138 * EXC_TABLE_FIXUP is non-zero, this handler jumps to that address. A value of
139 * zero indicates to use the default kernel/user exception handler.
140 * There is only one exception, when the value is identical to the exc_table
141 * label, the kernel is in trouble. This mechanism is used to protect critical
142 * sections, mainly when the handler writes to the stack to assert the stack
143 * pointer is valid. Once the fixup/default handler leaves that area, the
144 * EXC_TABLE_FIXUP variable is reset to the fixup handler or zero.
146 * Procedures wishing to use this mechanism should set EXC_TABLE_FIXUP to the
147 * nonzero address of a fixup routine before it could cause a double exception
148 * and reset it before it returns.
150 * Some other things to take care of when a fast exception handler doesn't
151 * specify a particular fixup handler but wants to use the default handlers:
153 * - The original stack pointer (in a1) must not be modified. The fast
154 * exception handler should only use a2 as the stack pointer.
156 * - If the fast handler manipulates the stack pointer (in a2), it has to
157 * register a valid fixup handler and cannot use the default handlers.
159 * - The handler can use any other generic register from a3 to a15, but it
160 * must save the content of these registers to stack (PT_AREG3...PT_AREGx)
162 * - These registers must be saved before a double exception can occur.
164 * - If we ever implement handling signals while in double exceptions, the
165 * number of registers a fast handler has saved (excluding a0 and a1) must
166 * be written to PT_AREG1. (1 if only a3 is used, 2 for a3 and a4, etc. )
168 * The fixup handlers are special handlers:
170 * - Fixup entry conditions differ from regular exceptions:
174 * a2: trashed, original value in EXC_TABLE_DOUBLE_SAVE
179 * - When the kernel enters the fixup handler, it still assumes it is in a
180 * critical section, so EXC_TABLE_FIXUP variable is set to exc_table.
181 * The fixup handler, therefore, has to re-register itself as the fixup
182 * handler before it returns from the double exception.
184 * - Fixup handler can share the same exception frame with the fast handler.
185 * The kernel stack pointer is not changed when entering the fixup handler.
187 * - Fixup handlers can jump to the default kernel and user exception
188 * handlers. Before it jumps, though, it has to setup a exception frame
189 * on stack. Because the default handler resets the register fixup handler
190 * the fixup handler must make sure that the default handler returns to
191 * it instead of the exception address, so it can re-register itself as
194 * In case of a critical condition where the kernel cannot recover, we jump
195 * to unrecoverable_exception with the following entry conditions.
196 * All registers a0...a15 are unchanged from the last exception, except:
198 * a0: last address before we jumped to the unrecoverable_exception.
202 * See the handle_alloca_user and spill_registers routines for example clients.
204 * FIXME: Note: we currently don't allow signal handling coming from a double
205 * exception, so the item markt with (*) is not required.
208 .section .DoubleExceptionVector.text, "ax"
210 ENTRY(_DoubleExceptionVector)
213 s32i a2, a3, EXC_TABLE_DOUBLE_SAVE
215 /* Check for kernel double exception (usually fatal). */
218 _bbsi.l a2, PS_UM_BIT, 1f
224 /* Check if we are currently handling a window exception. */
225 /* Note: We don't need to indicate that we enter a critical section. */
227 xsr a0, depc # get DEPC, save a0
229 movi a2, WINDOW_VECTORS_VADDR
230 _bltu a0, a2, .Lfixup
231 addi a2, a2, WINDOW_VECTORS_SIZE
232 _bgeu a0, a2, .Lfixup
234 /* Window overflow/underflow exception. Get stack pointer. */
236 l32i a2, a3, EXC_TABLE_KSTK
238 /* Check for overflow/underflow exception, jump if overflow. */
240 bbci.l a0, 6, _DoubleExceptionVector_WindowOverflow
243 * Restart window underflow exception.
247 * a2 = new sp based on KSTK from exc_table
249 * excsave_1 = orig a3
251 * We return to the instruction in user space that caused the window
252 * underflow exception. Therefore, we change window base to the value
253 * before we entered the window underflow exception and prepare the
254 * registers to return as if we were coming from a regular exception
255 * by changing depc (in a0).
256 * Note: We can trash the current window frame (a0...a3) and depc!
258 _DoubleExceptionVector_WindowUnderflow:
260 wsr a2, depc # save stack pointer temporarily
262 extui a0, a0, PS_OWB_SHIFT, PS_OWB_WIDTH
266 /* We are now in the previous window frame. Save registers again. */
268 xsr a2, depc # save a2 and get stack pointer
269 s32i a0, a2, PT_AREG0
272 s32i a0, a2, PT_DEPC # mark it as a regular exception
275 l32i a0, a0, EXC_TABLE_FAST_USER
279 * We only allow the ITLB miss exception if we are in kernel space.
280 * All other exceptions are unexpected and thus unrecoverable!
284 .extern fast_second_level_miss_double_kernel
286 .Lksp: /* a0: a0, a1: a1, a2: a2, a3: trashed, depc: depc, excsave: a3 */
289 beqi a3, EXCCAUSE_ITLB_MISS, 1f
290 addi a3, a3, -EXCCAUSE_DTLB_MISS
291 bnez a3, .Lunrecoverable
292 1: movi a3, fast_second_level_miss_double_kernel
295 .equ .Lksp, .Lunrecoverable
298 /* Critical! We can't handle this situation. PANIC! */
300 .extern unrecoverable_exception
302 .Lunrecoverable_fixup:
303 l32i a2, a3, EXC_TABLE_DOUBLE_SAVE
309 call0 unrecoverable_exception
311 .Lfixup:/* Check for a fixup handler or if we were in a critical section. */
313 /* a0: depc, a1: a1, a2: trash, a3: exctable, depc: a0, excsave1: a3 */
315 /* Enter critical section. */
317 l32i a2, a3, EXC_TABLE_FIXUP
318 s32i a3, a3, EXC_TABLE_FIXUP
319 beq a2, a3, .Lunrecoverable_fixup # critical section
320 beqz a2, .Ldflt # no handler was registered
322 /* a0: depc, a1: a1, a2: trash, a3: exctable, depc: a0, excsave: a3 */
326 .Ldflt: /* Get stack pointer. */
328 l32i a2, a3, EXC_TABLE_DOUBLE_SAVE
329 addi a2, a2, -PT_USER_SIZE
331 /* a0: depc, a1: a1, a2: kstk, a3: exctable, depc: a0, excsave: a3 */
334 l32i a0, a3, EXC_TABLE_DOUBLE_SAVE
336 s32i a0, a2, PT_AREG0
338 /* a0: avail, a1: a1, a2: kstk, a3: exctable, depc: a2, excsave: a3 */
343 l32i a0, a0, EXC_TABLE_FAST_USER
347 * Restart window OVERFLOW exception.
351 * a2 = new sp based on KSTK from exc_table
353 * excsave_1 = orig a3
355 * We return to the instruction in user space that caused the window
356 * overflow exception. Therefore, we change window base to the value
357 * before we entered the window overflow exception and prepare the
358 * registers to return as if we were coming from a regular exception
359 * by changing DEPC (in a0).
361 * NOTE: We CANNOT trash the current window frame (a0...a3), but we
364 * The tricky part here is that overflow8 and overflow12 handlers
365 * save a0, then clobber a0. To restart the handler, we have to restore
366 * a0 if the double exception was past the point where a0 was clobbered.
368 * To keep things simple, we take advantage of the fact all overflow
369 * handlers save a0 in their very first instruction. If DEPC was past
370 * that instruction, we can safely restore a0 from where it was saved
373 * a0: depc, a1: a1, a2: kstk, a3: exc_table, depc: a0, excsave1: a3
375 _DoubleExceptionVector_WindowOverflow:
376 extui a2, a0, 0, 6 # get offset into 64-byte vector handler
377 beqz a2, 1f # if at start of vector, don't restore
380 bbsi.l a0, 8, 1f # don't restore except for overflow 8 and 12
383 * This fixup handler is for the extremely unlikely case where the
384 * overflow handler's reference thru a0 gets a hardware TLB refill
385 * that bumps out the (distinct, aliasing) TLB entry that mapped its
386 * prior references thru a9/a13, and where our reference now thru
387 * a9/a13 gets a 2nd-level miss exception (not hardware TLB refill).
389 movi a2, window_overflow_restore_a0_fixup
390 s32i a2, a3, EXC_TABLE_FIXUP
391 l32i a2, a3, EXC_TABLE_DOUBLE_SAVE
397 * Restore a0 as saved by _WindowOverflow8().
401 wsr a0, depc # replace the saved a0
406 * Restore a0 as saved by _WindowOverflow12().
410 wsr a0, depc # replace the saved a0
414 s32i a0, a3, EXC_TABLE_FIXUP
415 s32i a2, a3, EXC_TABLE_DOUBLE_SAVE
418 * Restore WindowBase while leaving all address registers restored.
419 * We have to use ROTW for this, because WSR.WINDOWBASE requires
420 * an address register (which would prevent restore).
422 * Window Base goes from 0 ... 7 (Module 8)
423 * Window Start is 8 bits; Ex: (0b1010 1010):0x55 from series of call4s
427 extui a0, a0, PS_OWB_SHIFT, PS_OWB_WIDTH
432 l32i a2, a3, EXC_TABLE_DOUBLE_SAVE
441 * We are now in the user code's original window frame.
442 * Process the exception as a user exception as if it was
443 * taken by the user code.
445 * This is similar to the user exception vector,
446 * except that PT_DEPC isn't set to EXCCAUSE.
451 l32i a2, a3, EXC_TABLE_KSTK
452 s32i a0, a2, PT_AREG0
457 _DoubleExceptionVector_handle_exception:
458 addi a0, a0, -EXCCAUSE_UNALIGNED
461 l32i a0, a0, EXC_TABLE_FAST_USER + 4 * EXCCAUSE_UNALIGNED
465 movi a0, user_exception
479 ENDPROC(_DoubleExceptionVector)
482 * Fixup handler for TLB miss in double exception handler for window owerflow.
483 * We get here with windowbase set to the window that was being spilled and
484 * a0 trashed. a0 bit 7 determines if this is a call8 (bit clear) or call12
487 * We do the following here:
488 * - go to the original window retaining a0 value;
489 * - set up exception stack to return back to appropriate a0 restore code
490 * (we'll need to rotate window back and there's no place to save this
491 * information, use different return address for that);
492 * - handle the exception;
493 * - go to the window that was being spilled;
494 * - set up window_overflow_restore_a0_fixup as a fixup routine;
496 * - restore the original window;
497 * - reset the default fixup routine;
498 * - return to user. By the time we get to this fixup handler all information
499 * about the conditions of the original double exception that happened in
500 * the window overflow handler is lost, so we just return to userspace to
501 * retry overflow from start.
503 * a0: value of depc, original value in depc
504 * a2: trashed, original value in EXC_TABLE_DOUBLE_SAVE
505 * a3: exctable, original value in excsave1
511 ENTRY(window_overflow_restore_a0_fixup)
514 extui a0, a0, PS_OWB_SHIFT, PS_OWB_WIDTH
518 l32i a2, a3, EXC_TABLE_DOUBLE_SAVE
521 _beqi a0, 1, .Lhandle_1
522 _beqi a0, 3, .Lhandle_3
524 .macro overflow_fixup_handle_exception_pane n
531 l32i a2, a3, EXC_TABLE_KSTK
532 s32i a0, a2, PT_AREG0
534 movi a0, .Lrestore_\n
537 j _DoubleExceptionVector_handle_exception
541 overflow_fixup_handle_exception_pane 2
543 overflow_fixup_handle_exception_pane 1
545 overflow_fixup_handle_exception_pane 3
547 .macro overflow_fixup_restore_a0_pane n
550 /* Need to preserve a0 value here to be able to handle exception
551 * that may occur on a0 reload from stack. It may occur because
552 * TLB miss handler may not be atomic and pointer to page table
553 * may be lost before we get here. There are no free registers,
554 * so we need to use EXC_TABLE_DOUBLE_SAVE area.
557 s32i a2, a3, EXC_TABLE_DOUBLE_SAVE
558 movi a2, window_overflow_restore_a0_fixup
559 s32i a2, a3, EXC_TABLE_FIXUP
560 l32i a2, a3, EXC_TABLE_DOUBLE_SAVE
573 overflow_fixup_restore_a0_pane 2
577 s32i a2, a3, EXC_TABLE_DOUBLE_SAVE
579 s32i a2, a3, EXC_TABLE_FIXUP
580 l32i a2, a3, EXC_TABLE_DOUBLE_SAVE
585 overflow_fixup_restore_a0_pane 1
586 j .Lset_default_fixup
588 overflow_fixup_restore_a0_pane 3
589 j .Lset_default_fixup
591 ENDPROC(window_overflow_restore_a0_fixup)
594 * Debug interrupt vector
596 * There is not much space here, so simply jump to another handler.
597 * EXCSAVE[DEBUGLEVEL] has been set to that handler.
600 .section .DebugInterruptVector.text, "ax"
602 ENTRY(_DebugInterruptVector)
604 xsr a3, SREG_EXCSAVE + XCHAL_DEBUGLEVEL
605 s32i a0, a3, DT_DEBUG_SAVE
606 l32i a0, a3, DT_DEBUG_EXCEPTION
609 ENDPROC(_DebugInterruptVector)
614 * Medium priority level interrupt vectors
616 * Each takes less than 16 (0x10) bytes, no literals, by placing
617 * the extra 8 bytes that would otherwise be required in the window
618 * vectors area where there is space. With relocatable vectors,
619 * all vectors are within ~ 4 kB range of each other, so we can
620 * simply jump (J) to another vector without having to use JX.
622 * common_exception code gets current IRQ level in PS.INTLEVEL
623 * and preserves it for the IRQ handling time.
626 .macro irq_entry_level level
628 .if XCHAL_EXCM_LEVEL >= \level
629 .section .Level\level\()InterruptVector.text, "ax"
630 ENTRY(_Level\level\()InterruptVector)
634 .if \level <= LOCKLEVEL
635 movi a0, EXCCAUSE_LEVEL1_INTERRUPT
637 movi a0, EXCCAUSE_MAPPED_NMI
641 # branch to user or kernel vector
642 j _SimulateUserKernelVectorException
654 /* Window overflow and underflow handlers.
655 * The handlers must be 64 bytes apart, first starting with the underflow
656 * handlers underflow-4 to underflow-12, then the overflow handlers
657 * overflow-4 to overflow-12.
659 * Note: We rerun the underflow handlers if we hit an exception, so
660 * we try to access any page that would cause a page fault early.
663 #define ENTRY_ALIGN64(name) \
668 .section .WindowVectors.text, "ax"
671 /* 4-Register Window Overflow Vector (Handler) */
673 ENTRY_ALIGN64(_WindowOverflow4)
681 ENDPROC(_WindowOverflow4)
684 #if XCHAL_EXCM_LEVEL >= 2
685 /* Not a window vector - but a convenient location
686 * (where we know there's space) for continuation of
687 * medium priority interrupt dispatch code.
688 * On entry here, a0 contains PS, and EPC2 contains saved a0:
691 _SimulateUserKernelVectorException:
692 addi a0, a0, (1 << PS_EXCM_BIT)
696 bbsi.l a0, PS_UM_BIT, 1f # branch if user mode
697 xsr a0, excsave2 # restore a0
698 j _KernelExceptionVector # simulate kernel vector exception
699 1: xsr a0, excsave2 # restore a0
700 j _UserExceptionVector # simulate user vector exception
704 /* 4-Register Window Underflow Vector (Handler) */
706 ENTRY_ALIGN64(_WindowUnderflow4)
714 ENDPROC(_WindowUnderflow4)
716 /* 8-Register Window Overflow Vector (Handler) */
718 ENTRY_ALIGN64(_WindowOverflow8)
731 ENDPROC(_WindowOverflow8)
733 /* 8-Register Window Underflow Vector (Handler) */
735 ENTRY_ALIGN64(_WindowUnderflow8)
748 ENDPROC(_WindowUnderflow8)
750 /* 12-Register Window Overflow Vector (Handler) */
752 ENTRY_ALIGN64(_WindowOverflow12)
769 ENDPROC(_WindowOverflow12)
771 /* 12-Register Window Underflow Vector (Handler) */
773 ENTRY_ALIGN64(_WindowUnderflow12)
790 ENDPROC(_WindowUnderflow12)