Home | History | Annotate | Line # | Download | only in arm32
db_interface.c revision 1.33
      1  1.33      mrg /*	$NetBSD: db_interface.c,v 1.33 2003/08/25 04:51:10 mrg Exp $	*/
      2   1.1     matt 
      3   1.1     matt /*
      4   1.1     matt  * Copyright (c) 1996 Scott K. Stevens
      5   1.1     matt  *
      6   1.1     matt  * Mach Operating System
      7   1.1     matt  * Copyright (c) 1991,1990 Carnegie Mellon University
      8   1.1     matt  * All Rights Reserved.
      9   1.1     matt  *
     10   1.1     matt  * Permission to use, copy, modify and distribute this software and its
     11   1.1     matt  * documentation is hereby granted, provided that both the copyright
     12   1.1     matt  * notice and this permission notice appear in all copies of the
     13   1.1     matt  * software, derivative works or modified versions, and any portions
     14   1.1     matt  * thereof, and that both notices appear in supporting documentation.
     15   1.1     matt  *
     16   1.1     matt  * CARNEGIE MELLON ALLOWS FREE USE OF THIS SOFTWARE IN ITS "AS IS"
     17   1.1     matt  * CONDITION.  CARNEGIE MELLON DISCLAIMS ANY LIABILITY OF ANY KIND FOR
     18   1.1     matt  * ANY DAMAGES WHATSOEVER RESULTING FROM THE USE OF THIS SOFTWARE.
     19   1.1     matt  *
     20   1.1     matt  * Carnegie Mellon requests users of this software to return to
     21   1.1     matt  *
     22   1.1     matt  *  Software Distribution Coordinator  or  Software.Distribution (at) CS.CMU.EDU
     23   1.1     matt  *  School of Computer Science
     24   1.1     matt  *  Carnegie Mellon University
     25   1.1     matt  *  Pittsburgh PA 15213-3890
     26   1.1     matt  *
     27   1.1     matt  * any improvements or extensions that they make and grant Carnegie the
     28   1.1     matt  * rights to redistribute these changes.
     29   1.1     matt  *
     30   1.1     matt  *	From: db_interface.c,v 2.4 1991/02/05 17:11:13 mrt (CMU)
     31   1.1     matt  */
     32   1.1     matt 
     33   1.1     matt /*
     34   1.1     matt  * Interface to new debugger.
     35   1.1     matt  */
     36  1.32    lukem 
     37  1.32    lukem #include <sys/cdefs.h>
     38  1.33      mrg __KERNEL_RCSID(0, "$NetBSD: db_interface.c,v 1.33 2003/08/25 04:51:10 mrg Exp $");
     39  1.32    lukem 
     40   1.1     matt #include "opt_ddb.h"
     41  1.24   briggs #include "opt_kgdb.h"
     42   1.1     matt 
     43   1.1     matt #include <sys/param.h>
     44   1.1     matt #include <sys/proc.h>
     45   1.1     matt #include <sys/reboot.h>
     46   1.1     matt #include <sys/systm.h>	/* just for boothowto */
     47   1.1     matt #include <sys/exec.h>
     48   1.1     matt 
     49   1.1     matt #include <uvm/uvm_extern.h>
     50   1.1     matt 
     51  1.13    chris #include <arm/arm32/db_machdep.h>
     52   1.9  thorpej #include <arm/arm32/katelib.h>
     53  1.11  thorpej #include <arm/undefined.h>
     54  1.13    chris #include <ddb/db_access.h>
     55   1.1     matt #include <ddb/db_command.h>
     56   1.1     matt #include <ddb/db_output.h>
     57   1.1     matt #include <ddb/db_variables.h>
     58   1.1     matt #include <ddb/db_sym.h>
     59   1.1     matt #include <ddb/db_extern.h>
     60   1.1     matt #include <ddb/db_interface.h>
     61   1.1     matt #include <dev/cons.h>
     62   1.1     matt 
     63  1.24   briggs #if defined(KGDB) || !defined(DDB)
     64  1.24   briggs #define db_printf	printf
     65  1.24   briggs #endif
     66  1.24   briggs 
     67  1.33      mrg static long nil;
     68   1.1     matt 
     69   1.1     matt int db_access_und_sp __P((const struct db_variable *, db_expr_t *, int));
     70   1.1     matt int db_access_abt_sp __P((const struct db_variable *, db_expr_t *, int));
     71   1.1     matt int db_access_irq_sp __P((const struct db_variable *, db_expr_t *, int));
     72   1.1     matt u_int db_fetch_reg __P((int, db_regs_t *));
     73   1.1     matt 
     74  1.15  thorpej int db_trapper __P((u_int, u_int, trapframe_t *, int));
     75  1.13    chris 
     76   1.1     matt const struct db_variable db_regs[] = {
     77   1.1     matt 	{ "spsr", (long *)&DDB_REGS->tf_spsr, FCN_NULL, },
     78   1.1     matt 	{ "r0", (long *)&DDB_REGS->tf_r0, FCN_NULL, },
     79   1.1     matt 	{ "r1", (long *)&DDB_REGS->tf_r1, FCN_NULL, },
     80   1.1     matt 	{ "r2", (long *)&DDB_REGS->tf_r2, FCN_NULL, },
     81   1.1     matt 	{ "r3", (long *)&DDB_REGS->tf_r3, FCN_NULL, },
     82   1.1     matt 	{ "r4", (long *)&DDB_REGS->tf_r4, FCN_NULL, },
     83   1.1     matt 	{ "r5", (long *)&DDB_REGS->tf_r5, FCN_NULL, },
     84   1.1     matt 	{ "r6", (long *)&DDB_REGS->tf_r6, FCN_NULL, },
     85   1.1     matt 	{ "r7", (long *)&DDB_REGS->tf_r7, FCN_NULL, },
     86   1.1     matt 	{ "r8", (long *)&DDB_REGS->tf_r8, FCN_NULL, },
     87   1.1     matt 	{ "r9", (long *)&DDB_REGS->tf_r9, FCN_NULL, },
     88   1.1     matt 	{ "r10", (long *)&DDB_REGS->tf_r10, FCN_NULL, },
     89   1.1     matt 	{ "r11", (long *)&DDB_REGS->tf_r11, FCN_NULL, },
     90   1.1     matt 	{ "r12", (long *)&DDB_REGS->tf_r12, FCN_NULL, },
     91   1.1     matt 	{ "usr_sp", (long *)&DDB_REGS->tf_usr_sp, FCN_NULL, },
     92   1.1     matt 	{ "usr_lr", (long *)&DDB_REGS->tf_usr_lr, FCN_NULL, },
     93   1.1     matt 	{ "svc_sp", (long *)&DDB_REGS->tf_svc_sp, FCN_NULL, },
     94   1.1     matt 	{ "svc_lr", (long *)&DDB_REGS->tf_svc_lr, FCN_NULL, },
     95   1.1     matt 	{ "pc", (long *)&DDB_REGS->tf_pc, FCN_NULL, },
     96  1.33      mrg 	{ "und_sp", &nil, db_access_und_sp, },
     97  1.33      mrg 	{ "abt_sp", &nil, db_access_abt_sp, },
     98  1.33      mrg 	{ "irq_sp", &nil, db_access_irq_sp, },
     99   1.1     matt };
    100   1.1     matt 
    101   1.1     matt const struct db_variable * const db_eregs = db_regs + sizeof(db_regs)/sizeof(db_regs[0]);
    102   1.1     matt 
    103   1.1     matt int	db_active = 0;
    104   1.1     matt 
    105  1.15  thorpej int
    106  1.15  thorpej db_access_und_sp(const struct db_variable *vp, db_expr_t *valp, int rw)
    107   1.1     matt {
    108  1.15  thorpej 
    109   1.1     matt 	if (rw == DB_VAR_GET)
    110   1.1     matt 		*valp = get_stackptr(PSR_UND32_MODE);
    111   1.1     matt 	return(0);
    112   1.1     matt }
    113   1.1     matt 
    114  1.15  thorpej int
    115  1.15  thorpej db_access_abt_sp(const struct db_variable *vp, db_expr_t *valp, int rw)
    116   1.1     matt {
    117  1.15  thorpej 
    118   1.1     matt 	if (rw == DB_VAR_GET)
    119   1.1     matt 		*valp = get_stackptr(PSR_ABT32_MODE);
    120   1.1     matt 	return(0);
    121   1.1     matt }
    122   1.1     matt 
    123  1.15  thorpej int
    124  1.15  thorpej db_access_irq_sp(const struct db_variable *vp, db_expr_t *valp, int rw)
    125   1.1     matt {
    126  1.15  thorpej 
    127   1.1     matt 	if (rw == DB_VAR_GET)
    128   1.1     matt 		*valp = get_stackptr(PSR_IRQ32_MODE);
    129   1.1     matt 	return(0);
    130   1.1     matt }
    131   1.1     matt 
    132  1.24   briggs #ifdef DDB
    133   1.1     matt /*
    134   1.1     matt  *  kdb_trap - field a TRACE or BPT trap
    135   1.1     matt  */
    136   1.1     matt int
    137  1.15  thorpej kdb_trap(int type, db_regs_t *regs)
    138   1.1     matt {
    139   1.1     matt 	int s;
    140   1.1     matt 
    141   1.1     matt 	switch (type) {
    142   1.1     matt 	case T_BREAKPOINT:	/* breakpoint */
    143   1.1     matt 	case -1:		/* keyboard interrupt */
    144   1.1     matt 		break;
    145   1.1     matt 	default:
    146   1.1     matt 		if (db_recover != 0) {
    147  1.31  thorpej 			/* This will longjmp back into db_command_loop() */
    148   1.1     matt 			db_error("Faulted in DDB; continuing...\n");
    149   1.1     matt 			/*NOTREACHED*/
    150   1.1     matt 		}
    151   1.1     matt 	}
    152   1.1     matt 
    153   1.1     matt 	/* Should switch to kdb`s own stack here. */
    154   1.1     matt 
    155   1.1     matt 	ddb_regs = *regs;
    156   1.1     matt 
    157   1.1     matt 	s = splhigh();
    158   1.1     matt 	db_active++;
    159   1.1     matt 	cnpollc(TRUE);
    160   1.1     matt 	db_trap(type, 0/*code*/);
    161   1.1     matt 	cnpollc(FALSE);
    162   1.1     matt 	db_active--;
    163   1.1     matt 	splx(s);
    164   1.1     matt 
    165   1.1     matt 	*regs = ddb_regs;
    166   1.1     matt 
    167   1.1     matt 	return (1);
    168   1.1     matt }
    169  1.24   briggs #endif
    170   1.1     matt 
    171  1.24   briggs int
    172  1.15  thorpej db_validate_address(vaddr_t addr)
    173   1.1     matt {
    174   1.1     matt 	struct proc *p = curproc;
    175  1.14  thorpej 	struct pmap *pmap;
    176   1.1     matt 
    177  1.23      scw 	if (!p || !p->p_vmspace || !p->p_vmspace->vm_map.pmap ||
    178  1.23      scw #ifndef ARM32_NEW_VM_LAYOUT
    179  1.29  thorpej 	    addr >= VM_MAXUSER_ADDRESS
    180  1.23      scw #else
    181  1.29  thorpej 	    addr >= VM_MIN_KERNEL_ADDRESS
    182  1.23      scw #endif
    183  1.29  thorpej 	   )
    184  1.14  thorpej 		pmap = pmap_kernel();
    185   1.1     matt 	else
    186  1.14  thorpej 		pmap = p->p_vmspace->vm_map.pmap;
    187   1.1     matt 
    188  1.14  thorpej 	return (pmap_extract(pmap, addr, NULL) == FALSE);
    189   1.1     matt }
    190   1.1     matt 
    191   1.1     matt /*
    192   1.1     matt  * Read bytes from kernel address space for debugger.
    193   1.1     matt  */
    194   1.1     matt void
    195   1.1     matt db_read_bytes(addr, size, data)
    196  1.20  thorpej 	vaddr_t	addr;
    197  1.13    chris 	size_t	size;
    198   1.1     matt 	char	*data;
    199   1.1     matt {
    200  1.30      scw 	char	*src = (char *)addr;
    201   1.1     matt 
    202  1.30      scw 	if (db_validate_address((u_int)src)) {
    203  1.30      scw 		db_printf("address %p is invalid\n", src);
    204  1.30      scw 		return;
    205  1.30      scw 	}
    206  1.30      scw 
    207  1.30      scw 	if (size == 4 && (addr & 3) == 0 && ((uintptr_t)data & 3) == 0) {
    208  1.30      scw 		*((int*)data) = *((int*)src);
    209  1.30      scw 		return;
    210  1.30      scw 	}
    211  1.30      scw 
    212  1.30      scw 	if (size == 2 && (addr & 1) == 0 && ((uintptr_t)data & 1) == 0) {
    213  1.30      scw 		*((short*)data) = *((short*)src);
    214  1.30      scw 		return;
    215  1.30      scw 	}
    216  1.14  thorpej 
    217  1.14  thorpej 	while (size-- > 0) {
    218   1.1     matt 		if (db_validate_address((u_int)src)) {
    219   1.1     matt 			db_printf("address %p is invalid\n", src);
    220   1.1     matt 			return;
    221   1.1     matt 		}
    222   1.1     matt 		*data++ = *src++;
    223   1.1     matt 	}
    224   1.1     matt }
    225   1.1     matt 
    226   1.1     matt static void
    227  1.15  thorpej db_write_text(vaddr_t addr, size_t size, char *data)
    228   1.1     matt {
    229  1.15  thorpej 	struct pmap *pmap = pmap_kernel();
    230  1.15  thorpej 	pd_entry_t *pde, oldpde, tmppde;
    231  1.15  thorpej 	pt_entry_t *pte, oldpte, tmppte;
    232  1.15  thorpej 	vaddr_t pgva;
    233  1.15  thorpej 	size_t limit, savesize;
    234  1.15  thorpej 	char *dst;
    235   1.1     matt 
    236  1.15  thorpej 	if ((savesize = size) == 0)
    237  1.15  thorpej 		return;
    238  1.15  thorpej 
    239  1.15  thorpej 	dst = (char *) addr;
    240   1.1     matt 
    241  1.15  thorpej 	do {
    242  1.15  thorpej 		/* Get the PDE of the current VA. */
    243  1.23      scw 		if (pmap_get_pde_pte(pmap, (vaddr_t) dst, &pde, &pte) == FALSE)
    244  1.23      scw 			goto no_mapping;
    245  1.18  thorpej 		switch ((oldpde = *pde) & L1_TYPE_MASK) {
    246  1.18  thorpej 		case L1_TYPE_S:
    247  1.18  thorpej 			pgva = (vaddr_t)dst & L1_S_FRAME;
    248  1.18  thorpej 			limit = L1_S_SIZE - ((vaddr_t)dst & L1_S_OFFSET);
    249  1.15  thorpej 
    250  1.19  thorpej 			tmppde = oldpde | L1_S_PROT_W;
    251  1.15  thorpej 			*pde = tmppde;
    252  1.22  thorpej 			PTE_SYNC(pde);
    253  1.15  thorpej 			break;
    254  1.15  thorpej 
    255  1.18  thorpej 		case L1_TYPE_C:
    256  1.18  thorpej 			pgva = (vaddr_t)dst & L2_S_FRAME;
    257  1.18  thorpej 			limit = L2_S_SIZE - ((vaddr_t)dst & L2_S_OFFSET);
    258  1.15  thorpej 
    259  1.23      scw 			if (pte == NULL)
    260  1.23      scw 				goto no_mapping;
    261  1.15  thorpej 			oldpte = *pte;
    262  1.19  thorpej 			tmppte = oldpte | L2_S_PROT_W;
    263  1.15  thorpej 			*pte = tmppte;
    264  1.22  thorpej 			PTE_SYNC(pte);
    265  1.15  thorpej 			break;
    266  1.15  thorpej 
    267  1.15  thorpej 		default:
    268  1.23      scw 		no_mapping:
    269  1.15  thorpej 			printf(" address 0x%08lx not a valid page\n",
    270  1.15  thorpej 			    (vaddr_t) dst);
    271  1.15  thorpej 			return;
    272  1.15  thorpej 		}
    273  1.15  thorpej 		cpu_tlb_flushD_SE(pgva);
    274  1.16  thorpej 		cpu_cpwait();
    275   1.1     matt 
    276  1.15  thorpej 		if (limit > size)
    277  1.15  thorpej 			limit = size;
    278  1.15  thorpej 		size -= limit;
    279   1.1     matt 
    280  1.15  thorpej 		/*
    281  1.15  thorpej 		 * Page is now writable.  Do as much access as we
    282  1.15  thorpej 		 * can in this page.
    283  1.15  thorpej 		 */
    284  1.15  thorpej 		for (; limit > 0; limit--)
    285  1.15  thorpej 			*dst++ = *data++;
    286   1.1     matt 
    287  1.15  thorpej 		/*
    288  1.15  thorpej 		 * Restore old mapping permissions.
    289  1.15  thorpej 		 */
    290  1.18  thorpej 		switch (oldpde & L1_TYPE_MASK) {
    291  1.18  thorpej 		case L1_TYPE_S:
    292  1.15  thorpej 			*pde = oldpde;
    293  1.22  thorpej 			PTE_SYNC(pde);
    294  1.15  thorpej 			break;
    295  1.15  thorpej 
    296  1.18  thorpej 		case L1_TYPE_C:
    297  1.15  thorpej 			*pte = oldpte;
    298  1.22  thorpej 			PTE_SYNC(pte);
    299  1.15  thorpej 			break;
    300  1.15  thorpej 		}
    301  1.15  thorpej 		cpu_tlb_flushD_SE(pgva);
    302  1.16  thorpej 		cpu_cpwait();
    303  1.15  thorpej 	} while (size != 0);
    304   1.1     matt 
    305  1.15  thorpej 	/* Sync the I-cache. */
    306  1.17  thorpej 	cpu_icache_sync_range(addr, savesize);
    307   1.1     matt }
    308   1.1     matt 
    309   1.1     matt /*
    310   1.1     matt  * Write bytes to kernel address space for debugger.
    311   1.1     matt  */
    312   1.1     matt void
    313  1.15  thorpej db_write_bytes(vaddr_t addr, size_t size, char *data)
    314   1.1     matt {
    315  1.27  thorpej 	extern char kernel_text[];
    316  1.15  thorpej 	extern char etext[];
    317  1.15  thorpej 	char *dst;
    318  1.15  thorpej 	size_t loop;
    319  1.15  thorpej 
    320  1.15  thorpej 	/* If any part is in kernel text, use db_write_text() */
    321  1.27  thorpej 	if (addr >= (vaddr_t) kernel_text && addr < (vaddr_t) etext) {
    322  1.15  thorpej 		db_write_text(addr, size, data);
    323  1.15  thorpej 		return;
    324  1.15  thorpej 	}
    325   1.1     matt 
    326   1.1     matt 	dst = (char *)addr;
    327  1.30      scw 	if (db_validate_address((u_int)dst)) {
    328  1.30      scw 		db_printf("address %p is invalid\n", dst);
    329  1.30      scw 		return;
    330  1.30      scw 	}
    331  1.30      scw 
    332  1.30      scw 	if (size == 4 && (addr & 3) == 0 && ((uintptr_t)data & 3) == 0)
    333  1.30      scw 		*((int*)dst) = *((int*)data);
    334  1.30      scw 	else
    335  1.30      scw 	if (size == 2 && (addr & 1) == 0 && ((uintptr_t)data & 1) == 0)
    336  1.30      scw 		*((short*)dst) = *((short*)data);
    337  1.30      scw 	else {
    338  1.30      scw 		loop = size;
    339  1.30      scw 		while (loop-- > 0) {
    340  1.30      scw 			if (db_validate_address((u_int)dst)) {
    341  1.30      scw 				db_printf("address %p is invalid\n", dst);
    342  1.30      scw 				return;
    343  1.30      scw 			}
    344  1.30      scw 			*dst++ = *data++;
    345   1.1     matt 		}
    346   1.1     matt 	}
    347  1.30      scw 
    348   1.1     matt 	/* make sure the caches and memory are in sync */
    349  1.17  thorpej 	cpu_icache_sync_range(addr, size);
    350   1.1     matt 
    351   1.1     matt 	/* In case the current page tables have been modified ... */
    352   1.1     matt 	cpu_tlb_flushID();
    353  1.16  thorpej 	cpu_cpwait();
    354   1.1     matt }
    355   1.1     matt 
    356  1.28      bsh #ifdef DDB
    357   1.1     matt void
    358  1.15  thorpej cpu_Debugger(void)
    359   1.1     matt {
    360   1.1     matt 	asm(".word	0xe7ffffff");
    361   1.1     matt }
    362   1.1     matt 
    363   1.1     matt const struct db_command db_machine_command_table[] = {
    364   1.1     matt 	{ "frame",	db_show_frame_cmd,	0, NULL },
    365   1.1     matt 	{ "panic",	db_show_panic_cmd,	0, NULL },
    366   1.2     matt #ifdef ARM32_DB_COMMANDS
    367   1.2     matt 	ARM32_DB_COMMANDS,
    368   1.2     matt #endif
    369   1.1     matt 	{ NULL, 	NULL, 			0, NULL }
    370   1.1     matt };
    371   1.1     matt 
    372   1.1     matt int
    373  1.15  thorpej db_trapper(u_int addr, u_int inst, trapframe_t *frame, int fault_code)
    374   1.1     matt {
    375  1.15  thorpej 
    376   1.1     matt 	if (fault_code == 0) {
    377   1.1     matt 		if ((inst & ~INSN_COND_MASK) == (BKPT_INST & ~INSN_COND_MASK))
    378   1.1     matt 			kdb_trap(T_BREAKPOINT, frame);
    379   1.1     matt 		else
    380   1.1     matt 			kdb_trap(-1, frame);
    381   1.1     matt 	} else
    382   1.1     matt 		return (1);
    383   1.1     matt 	return (0);
    384   1.1     matt }
    385   1.1     matt 
    386   1.1     matt extern u_int esym;
    387   1.1     matt extern u_int end;
    388   1.1     matt 
    389   1.3    bjh21 static struct undefined_handler db_uh;
    390   1.3    bjh21 
    391   1.1     matt void
    392  1.15  thorpej db_machine_init(void)
    393   1.1     matt {
    394   1.1     matt 
    395   1.3    bjh21 	/*
    396   1.3    bjh21 	 * We get called before malloc() is available, so supply a static
    397   1.3    bjh21 	 * struct undefined_handler.
    398   1.3    bjh21 	 */
    399   1.3    bjh21 	db_uh.uh_handler = db_trapper;
    400   1.3    bjh21 	install_coproc_handler_static(0, &db_uh);
    401   1.1     matt }
    402  1.24   briggs #endif
    403   1.1     matt 
    404   1.1     matt u_int
    405  1.15  thorpej db_fetch_reg(int reg, db_regs_t *db_regs)
    406   1.1     matt {
    407   1.1     matt 
    408   1.1     matt 	switch (reg) {
    409   1.1     matt 	case 0:
    410   1.1     matt 		return (db_regs->tf_r0);
    411   1.1     matt 	case 1:
    412   1.1     matt 		return (db_regs->tf_r1);
    413   1.1     matt 	case 2:
    414   1.1     matt 		return (db_regs->tf_r2);
    415   1.1     matt 	case 3:
    416   1.1     matt 		return (db_regs->tf_r3);
    417   1.1     matt 	case 4:
    418   1.1     matt 		return (db_regs->tf_r4);
    419   1.1     matt 	case 5:
    420   1.1     matt 		return (db_regs->tf_r5);
    421   1.1     matt 	case 6:
    422   1.1     matt 		return (db_regs->tf_r6);
    423   1.1     matt 	case 7:
    424   1.1     matt 		return (db_regs->tf_r7);
    425   1.1     matt 	case 8:
    426   1.1     matt 		return (db_regs->tf_r8);
    427   1.1     matt 	case 9:
    428   1.1     matt 		return (db_regs->tf_r9);
    429   1.1     matt 	case 10:
    430   1.1     matt 		return (db_regs->tf_r10);
    431   1.1     matt 	case 11:
    432   1.1     matt 		return (db_regs->tf_r11);
    433   1.1     matt 	case 12:
    434   1.1     matt 		return (db_regs->tf_r12);
    435   1.1     matt 	case 13:
    436   1.1     matt 		return (db_regs->tf_svc_sp);
    437   1.1     matt 	case 14:
    438   1.1     matt 		return (db_regs->tf_svc_lr);
    439   1.1     matt 	case 15:
    440   1.1     matt 		return (db_regs->tf_pc);
    441   1.1     matt 	default:
    442   1.1     matt 		panic("db_fetch_reg: botch");
    443   1.1     matt 	}
    444   1.1     matt }
    445   1.1     matt 
    446   1.1     matt u_int
    447  1.15  thorpej branch_taken(u_int insn, u_int pc, db_regs_t *db_regs)
    448   1.1     matt {
    449   1.1     matt 	u_int addr, nregs;
    450   1.1     matt 
    451   1.1     matt 	switch ((insn >> 24) & 0xf) {
    452   1.1     matt 	case 0xa:	/* b ... */
    453   1.1     matt 	case 0xb:	/* bl ... */
    454   1.1     matt 		addr = ((insn << 2) & 0x03ffffff);
    455   1.1     matt 		if (addr & 0x02000000)
    456   1.1     matt 			addr |= 0xfc000000;
    457   1.1     matt 		return (pc + 8 + addr);
    458   1.1     matt 	case 0x7:	/* ldr pc, [pc, reg, lsl #2] */
    459   1.1     matt 		addr = db_fetch_reg(insn & 0xf, db_regs);
    460   1.1     matt 		addr = pc + 8 + (addr << 2);
    461   1.1     matt 		db_read_bytes(addr, 4, (char *)&addr);
    462   1.1     matt 		return (addr);
    463   1.1     matt 	case 0x1:	/* mov pc, reg */
    464   1.1     matt 		addr = db_fetch_reg(insn & 0xf, db_regs);
    465   1.1     matt 		return (addr);
    466   1.1     matt 	case 0x8:	/* ldmxx reg, {..., pc} */
    467   1.1     matt 	case 0x9:
    468   1.1     matt 		addr = db_fetch_reg((insn >> 16) & 0xf, db_regs);
    469   1.1     matt 		nregs = (insn  & 0x5555) + ((insn  >> 1) & 0x5555);
    470   1.1     matt 		nregs = (nregs & 0x3333) + ((nregs >> 2) & 0x3333);
    471   1.1     matt 		nregs = (nregs + (nregs >> 4)) & 0x0f0f;
    472   1.1     matt 		nregs = (nregs + (nregs >> 8)) & 0x001f;
    473   1.1     matt 		switch ((insn >> 23) & 0x3) {
    474   1.1     matt 		case 0x0:	/* ldmda */
    475   1.1     matt 			addr = addr - 0;
    476   1.1     matt 			break;
    477   1.1     matt 		case 0x1:	/* ldmia */
    478   1.1     matt 			addr = addr + 0 + ((nregs - 1) << 2);
    479   1.1     matt 			break;
    480   1.1     matt 		case 0x2:	/* ldmdb */
    481   1.1     matt 			addr = addr - 4;
    482   1.1     matt 			break;
    483   1.1     matt 		case 0x3:	/* ldmib */
    484   1.1     matt 			addr = addr + 4 + ((nregs - 1) << 2);
    485   1.1     matt 			break;
    486   1.1     matt 		}
    487   1.1     matt 		db_read_bytes(addr, 4, (char *)&addr);
    488   1.1     matt 		return (addr);
    489   1.1     matt 	default:
    490   1.1     matt 		panic("branch_taken: botch");
    491   1.1     matt 	}
    492   1.1     matt }
    493