// SPDX-License-Identifier: GPL-2.0
/*
 * Instruction-patching support.
 *
 * Copyright (C) 2003 Hewlett-Packard Co
 *      David Mosberger-Tang <davidm@hpl.hp.com>
 */
#include <linux/init.h>
#include <linux/string.h>

#include <asm/patch.h>
#include <asm/processor.h>
#include <asm/sections.h>
#include <asm/unistd.h>

/*
 * This was adapted from code written by Tony Luck:
 *
 * The 64-bit value in a "movl reg=value" is scattered between the two words of the bundle
 * like this:
 *
 * 6  6         5         4         3         2         1
 * 3210987654321098765432109876543210987654321098765432109876543210
 * ABBBBBBBBBBBBBBBBBBBBBBBCCCCCCCCCCCCCCCCCCDEEEEEFFFFFFFFFGGGGGGG
 *
 * CCCCCCCCCCCCCCCCCCxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 * xxxxAFFFFFFFFFEEEEEDxGGGGGGGxxxxxxxxxxxxxBBBBBBBBBBBBBBBBBBBBBBB
 */
static u64
get_imm64 (u64 insn_addr)
{
        u64 *p = (u64 *) (insn_addr & -16);     /* mask out slot number */

        return ( (p[1] & 0x0800000000000000UL) << 4)  | /*A*/
                ((p[1] & 0x00000000007fffffUL) << 40) | /*B*/
                ((p[0] & 0xffffc00000000000UL) >> 24) | /*C*/
                ((p[1] & 0x0000100000000000UL) >> 23) | /*D*/
                ((p[1] & 0x0003e00000000000UL) >> 29) | /*E*/
                ((p[1] & 0x07fc000000000000UL) >> 43) | /*F*/
                ((p[1] & 0x000007f000000000UL) >> 36);  /*G*/
}

/* Patch instruction with "val" where "mask" has 1 bits. */
void
ia64_patch (u64 insn_addr, u64 mask, u64 val)
{
        u64 m0, m1, v0, v1, b0, b1, *b = (u64 *) (insn_addr & -16);
#       define insn_mask ((1UL << 41) - 1)
        unsigned long shift;

        b0 = b[0]; b1 = b[1];
        shift = 5 + 41 * (insn_addr % 16); /* 5 bits of template, then 3 x 41-bit instructions */
        if (shift >= 64) {
                m1 = mask << (shift - 64);
                v1 = val << (shift - 64);
        } else {
                m0 = mask << shift; m1 = mask >> (64 - shift);
                v0 = val  << shift; v1 = val >> (64 - shift);
                b[0] = (b0 & ~m0) | (v0 & m0);
        }
        b[1] = (b1 & ~m1) | (v1 & m1);
}

void
ia64_patch_imm64 (u64 insn_addr, u64 val)
{
        /* The assembler may generate offset pointing to either slot 1
           or slot 2 for a long (2-slot) instruction, occupying slots 1
           and 2.  */
        insn_addr &= -16UL;
        ia64_patch(insn_addr + 2,
                   0x01fffefe000UL, (  ((val & 0x8000000000000000UL) >> 27) /* bit 63 -> 36 */
                                     | ((val & 0x0000000000200000UL) <<  0) /* bit 21 -> 21 */
                                     | ((val & 0x00000000001f0000UL) <<  6) /* bit 16 -> 22 */
                                     | ((val & 0x000000000000ff80UL) << 20) /* bit  7 -> 27 */
                                     | ((val & 0x000000000000007fUL) << 13) /* bit  0 -> 13 */));
        ia64_patch(insn_addr + 1, 0x1ffffffffffUL, val >> 22);
}

void
ia64_patch_imm60 (u64 insn_addr, u64 val)
{
        /* The assembler may generate offset pointing to either slot 1
           or slot 2 for a long (2-slot) instruction, occupying slots 1
           and 2.  */
        insn_addr &= -16UL;
        ia64_patch(insn_addr + 2,
                   0x011ffffe000UL, (  ((val & 0x0800000000000000UL) >> 23) /* bit 59 -> 36 */
                                     | ((val & 0x00000000000fffffUL) << 13) /* bit  0 -> 13 */));
        ia64_patch(insn_addr + 1, 0x1fffffffffcUL, val >> 18);
}

/*
 * We need sometimes to load the physical address of a kernel
 * object.  Often we can convert the virtual address to physical
 * at execution time, but sometimes (either for performance reasons
 * or during error recovery) we cannot to this.  Patch the marked
 * bundles to load the physical address.
 */
void __init
ia64_patch_vtop (unsigned long start, unsigned long end)
{
        s32 *offp = (s32 *) start;
        u64 ip;

        while (offp < (s32 *) end) {
                ip = (u64) offp + *offp;

                /* replace virtual address with corresponding physical address: */
                ia64_patch_imm64(ip, ia64_tpa(get_imm64(ip)));
                ia64_fc((void *) ip);
                ++offp;
        }
        ia64_sync_i();
        ia64_srlz_i();
}

/*
 * Disable the RSE workaround by turning the conditional branch
 * that we tagged in each place the workaround was used into an
 * unconditional branch.
 */
void __init
ia64_patch_rse (unsigned long start, unsigned long end)
{
        s32 *offp = (s32 *) start;
        u64 ip, *b;

        while (offp < (s32 *) end) {
                ip = (u64) offp + *offp;

                b = (u64 *)(ip & -16);
                b[1] &= ~0xf800000L;
                ia64_fc((void *) ip);
                ++offp;
        }
        ia64_sync_i();
        ia64_srlz_i();
}

void __init
ia64_patch_mckinley_e9 (unsigned long start, unsigned long end)
{
        static int first_time = 1;
        int need_workaround;
        s32 *offp = (s32 *) start;
        u64 *wp;

        need_workaround = (local_cpu_data->family == 0x1f && local_cpu_data->model == 0);

        if (first_time) {
                first_time = 0;
                if (need_workaround)
                        printk(KERN_INFO "Leaving McKinley Errata 9 workaround enabled\n");
        }
        if (need_workaround)
                return;

        while (offp < (s32 *) end) {
                wp = (u64 *) ia64_imva((char *) offp + *offp);
                wp[0] = 0x0000000100000011UL; /* nop.m 0; nop.i 0; br.ret.sptk.many b6 */
                wp[1] = 0x0084006880000200UL;
                wp[2] = 0x0000000100000000UL; /* nop.m 0; nop.i 0; nop.i 0 */
                wp[3] = 0x0004000000000200UL;
                ia64_fc(wp); ia64_fc(wp + 2);
                ++offp;
        }
        ia64_sync_i();
        ia64_srlz_i();
}

static void __init
patch_fsyscall_table (unsigned long start, unsigned long end)
{
        extern unsigned long fsyscall_table[NR_syscalls];
        s32 *offp = (s32 *) start;
        u64 ip;

        while (offp < (s32 *) end) {
                ip = (u64) ia64_imva((char *) offp + *offp);
                ia64_patch_imm64(ip, (u64) fsyscall_table);
                ia64_fc((void *) ip);
                ++offp;
        }
        ia64_sync_i();
        ia64_srlz_i();
}

static void __init
patch_brl_fsys_bubble_down (unsigned long start, unsigned long end)
{
        extern char fsys_bubble_down[];
        s32 *offp = (s32 *) start;
        u64 ip;

        while (offp < (s32 *) end) {
                ip = (u64) offp + *offp;
                ia64_patch_imm60((u64) ia64_imva((void *) ip),
                                 (u64) (fsys_bubble_down - (ip & -16)) / 16);
                ia64_fc((void *) ip);
                ++offp;
        }
        ia64_sync_i();
        ia64_srlz_i();
}

void __init
ia64_patch_gate (void)
{
#       define START(name)      ((unsigned long) __start_gate_##name##_patchlist)
#       define END(name)        ((unsigned long)__end_gate_##name##_patchlist)

        patch_fsyscall_table(START(fsyscall), END(fsyscall));
        patch_brl_fsys_bubble_down(START(brl_fsys_bubble_down), END(brl_fsys_bubble_down));
        ia64_patch_vtop(START(vtop), END(vtop));
        ia64_patch_mckinley_e9(START(mckinley_e9), END(mckinley_e9));
}

void ia64_patch_phys_stack_reg(unsigned long val)
{
        s32 * offp = (s32 *) __start___phys_stack_reg_patchlist;
        s32 * end = (s32 *) __end___phys_stack_reg_patchlist;
        u64 ip, mask, imm;

        /* see instruction format A4: adds r1 = imm13, r3 */
        mask = (0x3fUL << 27) | (0x7f << 13);
        imm = (((val >> 7) & 0x3f) << 27) | (val & 0x7f) << 13;

        while (offp < end) {
                ip = (u64) offp + *offp;
                ia64_patch(ip, mask, imm);
                ia64_fc((void *)ip);
                ++offp;
        }
        ia64_sync_i();
        ia64_srlz_i();
}