2 * Copyright (c) 1990 The Regents of the University of California.
5 * This code is derived from software contributed to Berkeley by
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
11 * 1. Redistributions of source code must retain the above copyright
12 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
16 * 3. All advertising materials mentioning features or use of this software
17 * must display the following acknowledgement:
18 * This product includes software developed by the University of
19 * California, Berkeley and its contributors.
20 * 4. Neither the name of the University nor the names of its contributors
21 * may be used to endorse or promote products derived from this software
22 * without specific prior written permission.
24 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
25 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
26 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
27 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
28 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
29 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
30 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
31 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
32 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
33 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36 * from: @(#)locore.s 7.3 (Berkeley) 5/13/91
37 * $FreeBSD: src/sys/i386/i386/locore.s,v 1.132.2.10 2003/02/03 20:54:49 jhb Exp $
38 * $DragonFly: src/sys/platform/pc32/i386/locore.s,v 1.5 2003/07/01 20:30:40 dillon Exp $
40 * originally from: locore.s, by William F. Jolitz
42 * Substantially rewritten by David Greenman, Rod Grimes,
43 * Bruce Evans, Wolfgang Solfrank, Poul-Henning Kamp
47 #include "opt_bootp.h"
48 #include "opt_nfsroot.h"
50 #include <sys/syscall.h>
51 #include <sys/reboot.h>
53 #include <machine/asmacros.h>
54 #include <machine/cputypes.h>
55 #include <machine/psl.h>
56 #include <machine/pmap.h>
57 #include <machine/specialreg.h>
64 * Note: This version greatly munged to avoid various assembler errors
65 * that may be fixed in newer versions of gas. Perhaps newer versions
66 * will have more pleasant appearance.
70 * PTmap is recursive pagemap at top of virtual address space.
71 * Within PTmap, the page directory can be found (third indirection).
73 .globl PTmap,PTD,PTDpde
74 .set PTmap,(PTDPTDI << PDRSHIFT)
75 .set PTD,PTmap + (PTDPTDI * PAGE_SIZE)
76 .set PTDpde,PTD + (PTDPTDI * PDESIZE)
79 * APTmap, APTD is the alternate recursive pagemap.
80 * It's used when modifying another process's page tables.
82 .globl APTmap,APTD,APTDpde
83 .set APTmap,APTDPTDI << PDRSHIFT
84 .set APTD,APTmap + (APTDPTDI * PAGE_SIZE)
85 .set APTDpde,PTD + (APTDPTDI * PDESIZE)
88 * Compiled KERNBASE location
91 .set kernbase,KERNBASE
97 ALIGN_DATA /* just to be sure */
99 .globl HIDENAME(tmpstk)
100 .space 0x2000 /* space for tmpstk - temporary stack */
103 .globl boothowto,bootdev
105 .globl cpu,cpu_vendor,cpu_id,bootinfo
106 .globl cpu_high, cpu_feature, cpu_procinfo
108 cpu: .long 0 /* are we 386, 386sx, or 486 */
109 cpu_id: .long 0 /* stepping ID */
110 cpu_high: .long 0 /* highest arg to CPUID */
111 cpu_feature: .long 0 /* features */
112 cpu_procinfo: .long 0 /* brand index / HTT info */
113 cpu_vendor: .space 20 /* CPU origin code */
114 bootinfo: .space BOOTINFO_SIZE /* bootinfo buffer space */
116 KERNend: .long 0 /* phys addr end of kernel (just after bss) */
117 physfree: .long 0 /* phys addr of next free page */
120 cpu0pp: .long 0 /* phys addr cpu0 private pg */
121 cpu0prvpage: .long 0 /* relocated version */
122 cpu0idlestk: .long 0 /* stack for the idle thread */
125 SMPptpa: .long 0 /* phys addr SMP page table */
126 SMPpt: .long 0 /* relocated version */
129 IdlePTD: .long 0 /* phys addr of kernel PTD */
132 KPTphys: .long 0 /* PA of kernel page tables */
135 proc0paddr: .long 0 /* VA of proc 0 address space */
136 p0upa: .long 0 /* PA of proc0's UPAGES */
138 vm86phystk: .long 0 /* PA of vm86/bios stack */
140 .globl vm86paddr, vm86pa
141 vm86paddr: .long 0 /* address of vm86 region */
142 vm86pa: .long 0 /* phys addr of vm86 region */
145 .globl bdb_exists /* BDE debugger is present */
150 .globl pc98_system_parameter
151 pc98_system_parameter:
155 /**********************************************************************
161 #define R(foo) ((foo)-KERNBASE)
163 #define ALLOCPAGES(foo) \
164 movl R(physfree), %esi ; \
165 movl $((foo)*PAGE_SIZE), %eax ; \
167 movl %eax, R(physfree) ; \
169 movl $((foo)*PAGE_SIZE),%ecx ; \
177 * eax = page frame address
178 * ebx = index into page table
179 * ecx = how many pages to map
180 * base = base address of page dir/table
181 * prot = protection bits
183 #define fillkpt(base, prot) \
188 1: movl %eax,(%ebx) ; \
189 addl $PAGE_SIZE,%eax ; /* increment physical address */ \
190 addl $4,%ebx ; /* next pte */ \
195 * eax = physical address
196 * ecx = how many pages to map
197 * prot = protection bits
199 #define fillkptphys(prot) \
201 shrl $PAGE_SHIFT, %ebx ; \
202 fillkpt(R(KPTphys), prot)
205 /**********************************************************************
207 * This is where the bootblocks start us, set the ball rolling...
210 NON_GPROF_ENTRY(btext)
213 /* save SYSTEM PARAMETER for resume (NS/T or other) */
215 movl $R(pc98_system_parameter),%edi
222 #ifdef BIOS_STEALS_3K
223 cmpl $0x0375c339,0x95504
225 cmpl $0x0375c339,0x96104 /* XXX - debugger signature */
228 movb $1,R(bdb_exists)
231 /* Tell the bios to warmboot next time */
235 /* Set up a real frame in case the double return in newboot is executed. */
239 /* Don't trust what the BIOS gives for eflags. */
244 * Don't trust what the BIOS gives for %fs and %gs. Trust the bootstrap
245 * to set %cs, %ds, %es and %ss.
251 call recover_bootinfo
253 /* Get onto a stack that we can trust. */
255 * XXX this step is delayed in case recover_bootinfo needs to return via
256 * the old stack, but it need not be, since recover_bootinfo actually
257 * returns via the old frame.
259 movl $R(HIDENAME(tmpstk)),%esp
262 /* pc98_machine_type & M_EPSON_PC98 */
263 testb $0x02,R(_pc98_system_parameter)+220
265 /* epson_machine_id <= 0x0b */
266 cmpb $0x0b,R(_pc98_system_parameter)+224
269 /* count up memory */
270 movl $0x100000,%eax /* next, talley remaining memory */
271 movl $0xFFF-0x100,%ecx
272 1: movl 0(%eax),%ebx /* save location to check */
273 movl $0xa55a5aa5,0(%eax) /* write test pattern */
274 cmpl $0xa55a5aa5,0(%eax) /* does not check yet for rollover */
276 movl %ebx,0(%eax) /* restore memory */
279 2: subl $0x100000,%eax
281 movb %al,R(_pc98_system_parameter)+1
284 movw R(_pc98_system_parameter+0x86),%ax
292 * XXX this should be done a little earlier.
294 * XXX we don't check that there is memory for our bss and page tables
297 * XXX the boot program somewhat bogusly clears the bss. We still have
298 * to do it in case we were unzipped by kzipboot. Then the boot program
299 * only clears kzipboot's bss.
301 * XXX the gdt and idt are still somewhere in the boot program. We
302 * depend on the convention that the boot program is below 1MB and we
303 * are above 1MB to keep the gdt and idt away from the bss and page
304 * tables. The idt is only used if BDE_DEBUGGER is enabled.
314 call create_pagetables
317 * If the CPU has support for VME, turn it on.
319 testl $CPUID_VME, R(cpu_feature)
328 * Adjust as much as possible for paging before enabling paging so that the
329 * adjustments can be traced.
331 call bdb_prepare_paging
334 /* Now enable paging */
335 movl R(IdlePTD), %eax
336 movl %eax,%cr3 /* load ptd addr into mmu */
337 movl %cr0,%eax /* get control word */
338 orl $CR0_PE|CR0_PG,%eax /* enable paging */
339 movl %eax,%cr0 /* and let's page NOW! */
344 * Complete the adjustments for paging so that we can keep tracing through
345 * initi386() after the low (physical) addresses for the gdt and idt become
348 call bdb_commit_paging
351 pushl $begin /* jump to high virtualized address */
354 /* now running relocated at KERNBASE where the system is linked to run */
358 * set up the bootstrap stack. The pcb sits at the end of the
361 /* set up bootstrap stack */
362 movl proc0paddr,%esp /* location of in-kernel pages */
363 addl $UPAGES*PAGE_SIZE-PCB_SIZE,%esp
364 xorl %eax,%eax /* mark end of frames */
366 /*movl proc0paddr,%eax*/
368 movl %esi,PCB_CR3(%esp)
370 testl $CPUID_PGE, R(cpu_feature)
378 pushl %esi /* value of first for init386(first) */
380 call init386 /* wire 386 chip for unix operation */
383 call mi_startup /* autoconfiguration, mountroot etc */
385 hlt /* never returns to here */
388 * Signal trampoline, copied to top of user stack
390 NON_GPROF_ENTRY(sigcode)
391 call *SIGF_HANDLER(%esp) /* call signal handler */
392 lea SIGF_UC(%esp),%eax /* get ucontext_t */
394 testl $PSL_VM,UC_EFLAGS(%eax)
396 movl UC_GS(%eax),%gs /* restore %gs */
398 movl $SYS_sigreturn,%eax
399 pushl %eax /* junk to fake return addr. */
400 int $0x80 /* enter kernel with args */
405 call *SIGF_HANDLER(%esp) /* call signal handler */
406 lea SIGF_SC(%esp),%eax /* get sigcontext */
408 testl $PSL_VM,SC_PS(%eax)
410 movl SC_GS(%eax),%gs /* restore %gs */
412 movl $0x01d516,SC_TRAPNO(%eax) /* magic: 0ldSiG */
413 movl $SYS_sigreturn,%eax
414 pushl %eax /* junk to fake return addr. */
415 int $0x80 /* enter kernel with args */
422 .globl szsigcode, szosigcode
424 .long esigcode - sigcode
426 .long esigcode - osigcode
429 /**********************************************************************
431 * Recover the bootinfo passed to us from the boot program
436 * This code is called in different ways depending on what loaded
437 * and started the kernel. This is used to detect how we get the
438 * arguments from the other code and what we do with them.
440 * Old disk boot blocks:
441 * (*btext)(howto, bootdev, cyloffset, esym);
442 * [return address == 0, and can NOT be returned to]
443 * [cyloffset was not supported by the FreeBSD boot code
444 * and always passed in as 0]
445 * [esym is also known as total in the boot code, and
446 * was never properly supported by the FreeBSD boot code]
448 * Old diskless netboot code:
449 * (*btext)(0,0,0,0,&nfsdiskless,0,0,0);
450 * [return address != 0, and can NOT be returned to]
451 * If we are being booted by this code it will NOT work,
452 * so we are just going to halt if we find this case.
454 * New uniform boot code:
455 * (*btext)(howto, bootdev, 0, 0, 0, &bootinfo)
456 * [return address != 0, and can be returned to]
458 * There may seem to be a lot of wasted arguments in here, but
459 * that is so the newer boot code can still load very old kernels
460 * and old boot code can load new kernels.
464 * The old style disk boot blocks fake a frame on the stack and
465 * did an lret to get here. The frame on the stack has a return
472 * We have some form of return address, so this is either the
473 * old diskless netboot code, or the new uniform code. That can
474 * be detected by looking at the 5th argument, if it is 0
475 * we are being booted by the new uniform boot code.
481 * Seems we have been loaded by the old diskless boot code, we
482 * don't stand a chance of running as the diskless structure
483 * changed considerably between the two, so just halt.
488 * We have been loaded by the new uniform boot code.
489 * Let's check the bootinfo version, and if we do not understand
490 * it we return to the loader with a status of 1 to indicate this error
493 movl 28(%ebp),%ebx /* &bootinfo.version */
494 movl BI_VERSION(%ebx),%eax
495 cmpl $1,%eax /* We only understand version 1 */
497 movl $1,%eax /* Return status */
500 * XXX this returns to our caller's caller (as is required) since
501 * we didn't set up a frame and our caller did.
507 * If we have a kernelname copy it in
509 movl BI_KERNELNAME(%ebx),%esi
511 je 2f /* No kernelname */
512 movl $MAXPATHLEN,%ecx /* Brute force!!! */
513 movl $R(kernelname),%edi
514 cmpb $'/',(%esi) /* Make sure it starts with a slash */
526 * Determine the size of the boot loader's copy of the bootinfo
527 * struct. This is impossible to do properly because old versions
528 * of the struct don't contain a size field and there are 2 old
529 * versions with the same version number.
531 movl $BI_ENDCOMMON,%ecx /* prepare for sizeless version */
532 testl $RB_BOOTINFO,8(%ebp) /* bi_size (and bootinfo) valid? */
533 je got_bi_size /* no, sizeless version */
534 movl BI_SIZE(%ebx),%ecx
538 * Copy the common part of the bootinfo struct
541 movl $R(bootinfo),%edi
542 cmpl $BOOTINFO_SIZE,%ecx
543 jbe got_common_bi_size
544 movl $BOOTINFO_SIZE,%ecx
553 * If we have a nfs_diskless structure copy it in
555 movl BI_NFS_DISKLESS(%ebx),%esi
558 movl $R(nfs_diskless),%edi
559 movl $NFSDISKLESS_SIZE,%ecx
563 movl $R(nfs_diskless_valid),%edi
569 * The old style disk boot.
570 * (*btext)(howto, bootdev, cyloffset, esym);
571 * Note that the newer boot code just falls into here to pick
572 * up howto and bootdev, cyloffset and esym are no longer used
576 movl %eax,R(boothowto)
583 /**********************************************************************
585 * Identify the CPU and initialize anything special about it
590 /* Try to toggle alignment check flag; does not exist on 386. */
607 /* NexGen CPU does not have aligment check flag. */
621 movl $CPU_NX586,R(cpu)
622 movl $0x4778654e,R(cpu_vendor) # store vendor string
623 movl $0x72446e65,R(cpu_vendor+4)
624 movl $0x6e657669,R(cpu_vendor+8)
625 movl $0,R(cpu_vendor+12)
628 try486: /* Try to toggle identification flag; does not exist on early 486s. */
648 * Cyrix CPUs do not change the undefined flags following
649 * execution of the divide instruction which divides 5 by 2.
651 * Note: CPUID is enabled on M2, so it passes another way.
661 jmp 3f /* You may use Intel CPU. */
666 * IBM Bluelighting CPU also doesn't change the undefined flags.
667 * Because IBM doesn't disclose the information for Bluelighting
668 * CPU, we couldn't distinguish it from Cyrix's (including IBM
669 * brand of Cyrix CPUs).
671 movl $0x69727943,R(cpu_vendor) # store vendor string
672 movl $0x736e4978,R(cpu_vendor+4)
673 movl $0x64616574,R(cpu_vendor+8)
676 trycpuid: /* Use the `cpuid' instruction. */
679 movl %eax,R(cpu_high) # highest capability
680 movl %ebx,R(cpu_vendor) # store vendor string
681 movl %edx,R(cpu_vendor+4)
682 movl %ecx,R(cpu_vendor+8)
683 movb $0,R(cpu_vendor+12)
687 movl %eax,R(cpu_id) # store cpu_id
688 movl %ebx,R(cpu_procinfo) # store cpu_procinfo
689 movl %edx,R(cpu_feature) # store cpu_feature
690 rorl $8,%eax # extract family type
695 /* less than Pentium; must be 486 */
705 /* Greater than Pentium...call it a Pentium Pro */
711 /**********************************************************************
713 * Create the first page directory and its page tables.
719 /* Find end of kernel image (rounded up to a page boundary). */
722 /* Include symbols, if any. */
723 movl R(bootinfo+BI_ESYMTAB),%edi
728 addl %edi,R(bootinfo+BI_SYMTAB)
729 addl %edi,R(bootinfo+BI_ESYMTAB)
732 /* If we are told where the end of the kernel space is, believe it. */
733 movl R(bootinfo+BI_KERNEND),%edi
740 andl $~PAGE_MASK,%esi
741 movl %esi,R(KERNend) /* save end of kernel */
742 movl %esi,R(physfree) /* next free page is at end of kernel */
745 /* Allocate Kernel Page Tables */
749 /* Allocate Page Table Directory */
753 /* Allocate UPAGES */
757 movl %esi, R(proc0paddr)
759 ALLOCPAGES(1) /* vm86/bios stack */
760 movl %esi,R(vm86phystk)
762 ALLOCPAGES(3) /* pgtable + ext + IOPAGES */
765 movl %esi, R(vm86paddr)
767 /* Allocate cpu0's private data page */
771 movl %esi, R(cpu0prvpage) /* relocated to KVM space */
773 /* Allocate cpu0's idle stack */
775 movl %esi,R(cpu0idlestk)
777 /* Allocate SMP page table page */
781 movl %esi, R(SMPpt) /* relocated to KVM space */
783 /* Map read-only from zero to the end of the kernel text section */
786 /* If the debugger is present, actually map everything read-write. */
787 cmpl $0,R(bdb_exists)
793 testl $CPUID_PGE, R(cpu_feature)
798 2: movl $R(etext),%ecx
800 shrl $PAGE_SHIFT,%ecx
803 /* Map read-write, data, bss and symbols */
805 addl $PAGE_MASK, %eax
806 andl $~PAGE_MASK, %eax
810 testl $CPUID_PGE, R(cpu_feature)
815 1: movl R(KERNend),%ecx
817 shrl $PAGE_SHIFT,%ecx
820 /* Map page directory. */
821 movl R(IdlePTD), %eax
825 /* Map proc0's UPAGES in the physical way ... */
831 movl $ISA_HOLE_START, %eax
832 movl $ISA_HOLE_LENGTH>>PAGE_SHIFT, %ecx
835 /* Map space for the vm86 region */
836 movl R(vm86phystk), %eax
840 /* Map page 0 into the vm86 page table */
844 fillkpt(R(vm86pa), $PG_RW|PG_U)
846 /* ...likewise for the ISA hole */
847 movl $ISA_HOLE_START, %eax
848 movl $ISA_HOLE_START>>PAGE_SHIFT, %ebx
849 movl $ISA_HOLE_LENGTH>>PAGE_SHIFT, %ecx
850 fillkpt(R(vm86pa), $PG_RW|PG_U)
852 /* Map cpu0's private page into global kmem (4K @ cpu0prvpage) */
857 /* Map SMP page table page into global kmem FWIW */
858 movl R(SMPptpa), %eax
862 /* Map the private page into the SMP page table */
864 movl $0, %ebx /* pte offset = 0 */
865 movl $1, %ecx /* one private page coming right up */
866 fillkpt(R(SMPptpa), $PG_RW)
868 /* Map the cpu0's idle thread stack */
869 movl R(cpu0idlestk), %eax
870 movl $PS_IDLESTACK_PAGE, %ebx
872 fillkpt(R(SMPptpa), $PG_RW)
874 /* ... and put the page table table in the pde. */
875 movl R(SMPptpa), %eax
878 fillkpt(R(IdlePTD), $PG_RW)
880 /* Fakeup VA for the local apic to allow early traps. */
883 movl $(NPTEPG-1), %ebx /* pte offset = NTEPG-1 */
884 movl $1, %ecx /* one private pt coming right up */
885 fillkpt(R(SMPptpa), $PG_RW)
888 /* Initialize mp lock to allow early traps */
892 /* install a pde for temporary double map of bottom of VA */
893 movl R(KPTphys), %eax
896 fillkpt(R(IdlePTD), $PG_RW)
898 /* install pde's for pt's */
899 movl R(KPTphys), %eax
902 fillkpt(R(IdlePTD), $PG_RW)
904 /* install a pde recursively mapping page directory as a page table */
905 movl R(IdlePTD), %eax
908 fillkpt(R(IdlePTD), $PG_RW)
914 cmpl $0,R(bdb_exists)
915 je bdb_prepare_paging_exit
920 * Copy and convert debugger entries from the bootstrap gdt and idt
921 * to the kernel gdt and idt. Everything is still in low memory.
922 * Tracing continues to work after paging is enabled because the
923 * low memory addresses remain valid until everything is relocated.
924 * However, tracing through the setidt() that initializes the trace
928 movl 2(%esp),%esi /* base address of bootstrap gdt */
930 movl %edi,2(%esp) /* prepare to load kernel gdt */
935 movl $R(gdt),-8+2(%edi) /* adjust gdt self-ptr */
936 movb $0x92,-8+5(%edi)
940 movl 2(%esp),%esi /* base address of current idt */
941 movl 8+4(%esi),%eax /* convert dbg descriptor to ... */
943 movl %eax,R(bdb_dbg_ljmp+1) /* ... immediate offset ... */
945 movw %ax,R(bdb_dbg_ljmp+5) /* ... and selector for ljmp */
946 movl 24+4(%esi),%eax /* same for bpt descriptor */
948 movl %eax,R(bdb_bpt_ljmp+1)
950 movw %ax,R(bdb_bpt_ljmp+5)
952 movl %edi,2(%esp) /* prepare to load kernel idt */
961 bdb_prepare_paging_exit:
964 /* Relocate debugger gdt entries and gdt and idt pointers. */
967 je bdb_commit_paging_exit
969 movl $_gdt+8*9,%eax /* adjust slots 9-17 */
972 movb $KERNBASE>>24,7(%eax) /* top byte of base addresses, was 0, */
973 addl $8,%eax /* now KERNBASE>>24 */
978 addl $KERNBASE,2(%esp)
981 addl $KERNBASE,2(%esp)
987 bdb_commit_paging_exit:
990 #endif /* BDE_DEBUGGER */