Home | History | Annotate | Line # | Download | only in arm32
db_interface.c revision 1.52.4.1
      1  1.52.4.1    martin /*	$NetBSD: db_interface.c,v 1.52.4.1 2014/11/09 16:05:25 martin Exp $	*/
      2       1.1      matt 
      3      1.50     skrll /*
      4       1.1      matt  * Copyright (c) 1996 Scott K. Stevens
      5       1.1      matt  *
      6       1.1      matt  * Mach Operating System
      7       1.1      matt  * Copyright (c) 1991,1990 Carnegie Mellon University
      8       1.1      matt  * All Rights Reserved.
      9      1.50     skrll  *
     10       1.1      matt  * Permission to use, copy, modify and distribute this software and its
     11       1.1      matt  * documentation is hereby granted, provided that both the copyright
     12       1.1      matt  * notice and this permission notice appear in all copies of the
     13       1.1      matt  * software, derivative works or modified versions, and any portions
     14       1.1      matt  * thereof, and that both notices appear in supporting documentation.
     15      1.50     skrll  *
     16       1.1      matt  * CARNEGIE MELLON ALLOWS FREE USE OF THIS SOFTWARE IN ITS "AS IS"
     17       1.1      matt  * CONDITION.  CARNEGIE MELLON DISCLAIMS ANY LIABILITY OF ANY KIND FOR
     18       1.1      matt  * ANY DAMAGES WHATSOEVER RESULTING FROM THE USE OF THIS SOFTWARE.
     19      1.50     skrll  *
     20       1.1      matt  * Carnegie Mellon requests users of this software to return to
     21      1.50     skrll  *
     22       1.1      matt  *  Software Distribution Coordinator  or  Software.Distribution (at) CS.CMU.EDU
     23       1.1      matt  *  School of Computer Science
     24       1.1      matt  *  Carnegie Mellon University
     25       1.1      matt  *  Pittsburgh PA 15213-3890
     26      1.50     skrll  *
     27       1.1      matt  * any improvements or extensions that they make and grant Carnegie the
     28       1.1      matt  * rights to redistribute these changes.
     29       1.1      matt  *
     30       1.1      matt  *	From: db_interface.c,v 2.4 1991/02/05 17:11:13 mrt (CMU)
     31       1.1      matt  */
     32       1.1      matt 
     33       1.1      matt /*
     34       1.1      matt  * Interface to new debugger.
     35       1.1      matt  */
     36      1.32     lukem 
     37      1.32     lukem #include <sys/cdefs.h>
     38  1.52.4.1    martin __KERNEL_RCSID(0, "$NetBSD: db_interface.c,v 1.52.4.1 2014/11/09 16:05:25 martin Exp $");
     39      1.32     lukem 
     40       1.1      matt #include "opt_ddb.h"
     41      1.24    briggs #include "opt_kgdb.h"
     42  1.52.4.1    martin #include "opt_multiprocessor.h"
     43       1.1      matt 
     44       1.1      matt #include <sys/param.h>
     45       1.1      matt #include <sys/proc.h>
     46       1.1      matt #include <sys/reboot.h>
     47       1.1      matt #include <sys/systm.h>	/* just for boothowto */
     48       1.1      matt #include <sys/exec.h>
     49      1.51      matt #include <sys/atomic.h>
     50      1.51      matt #include <sys/intr.h>
     51       1.1      matt 
     52       1.1      matt #include <uvm/uvm_extern.h>
     53       1.1      matt 
     54      1.13     chris #include <arm/arm32/db_machdep.h>
     55       1.9   thorpej #include <arm/arm32/katelib.h>
     56      1.11   thorpej #include <arm/undefined.h>
     57      1.13     chris #include <ddb/db_access.h>
     58       1.1      matt #include <ddb/db_command.h>
     59       1.1      matt #include <ddb/db_output.h>
     60       1.1      matt #include <ddb/db_variables.h>
     61       1.1      matt #include <ddb/db_sym.h>
     62       1.1      matt #include <ddb/db_extern.h>
     63       1.1      matt #include <ddb/db_interface.h>
     64       1.1      matt #include <dev/cons.h>
     65       1.1      matt 
     66      1.24    briggs #if defined(KGDB) || !defined(DDB)
     67      1.24    briggs #define db_printf	printf
     68      1.24    briggs #endif
     69      1.24    briggs 
     70      1.46       dsl u_int db_fetch_reg(int, db_regs_t *);
     71       1.1      matt 
     72      1.46       dsl int db_trapper(u_int, u_int, trapframe_t *, int);
     73      1.13     chris 
     74       1.1      matt int	db_active = 0;
     75      1.52     skrll db_regs_t ddb_regs;	/* register state */
     76      1.52     skrll db_regs_t *ddb_regp;
     77      1.52     skrll 
     78      1.51      matt #ifdef MULTIPROCESSOR
     79      1.51      matt volatile struct cpu_info *db_onproc;
     80      1.51      matt volatile struct cpu_info *db_newcpu;
     81      1.51      matt #endif
     82      1.51      matt 
     83      1.51      matt 
     84       1.1      matt 
     85       1.1      matt 
     86      1.24    briggs #ifdef DDB
     87       1.1      matt /*
     88       1.1      matt  *  kdb_trap - field a TRACE or BPT trap
     89       1.1      matt  */
     90       1.1      matt int
     91      1.15   thorpej kdb_trap(int type, db_regs_t *regs)
     92       1.1      matt {
     93      1.51      matt 	struct cpu_info * const ci = curcpu();
     94      1.52     skrll 	db_regs_t dbreg;
     95       1.1      matt 	int s;
     96       1.1      matt 
     97       1.1      matt 	switch (type) {
     98       1.1      matt 	case T_BREAKPOINT:	/* breakpoint */
     99       1.1      matt 	case -1:		/* keyboard interrupt */
    100       1.1      matt 		break;
    101      1.51      matt #ifdef MULTIPROCESSOR
    102      1.51      matt 	case -2:
    103      1.51      matt 		/*
    104      1.51      matt 		 * We called to enter ddb from another process but by the time
    105      1.51      matt 		 * we got here, no one was in ddb.  So ignore the request.
    106      1.51      matt 		 */
    107      1.51      matt 		if (db_onproc == NULL)
    108      1.51      matt 			return 1;
    109      1.51      matt 		break;
    110      1.51      matt #endif
    111       1.1      matt 	default:
    112       1.1      matt 		if (db_recover != 0) {
    113      1.31   thorpej 			/* This will longjmp back into db_command_loop() */
    114       1.1      matt 			db_error("Faulted in DDB; continuing...\n");
    115       1.1      matt 			/*NOTREACHED*/
    116       1.1      matt 		}
    117       1.1      matt 	}
    118       1.1      matt 
    119       1.1      matt 	/* Should switch to kdb`s own stack here. */
    120       1.1      matt 
    121      1.51      matt #ifdef MULTIPROCESSOR
    122      1.51      matt 	const bool is_mp_p = ncpu > 1;
    123      1.51      matt 	if (is_mp_p) {
    124      1.51      matt 		/*
    125      1.51      matt 		 * Try to take ownership of DDB.  If we do, tell all other
    126      1.51      matt 		 * CPUs to enter DDB too.
    127      1.51      matt 		 */
    128      1.51      matt 		if (atomic_cas_ptr(&db_onproc, NULL, ci) == NULL) {
    129      1.51      matt 			intr_ipi_send(NULL, IPI_DDB);
    130      1.51      matt 		}
    131      1.51      matt 	}
    132      1.51      matt 	for (;;) {
    133      1.51      matt 		if (is_mp_p) {
    134      1.51      matt 			/*
    135      1.51      matt 			 * While we aren't the master, wait until the master
    136      1.51      matt 			 * gives control to us or exits.  If it exited, we
    137      1.51      matt 			 * just exit to.  Otherwise this cpu will enter DDB.
    138      1.51      matt 			 */
    139      1.51      matt 			membar_consumer();
    140      1.51      matt 			while (db_onproc != ci) {
    141      1.51      matt 				if (db_onproc == NULL)
    142      1.51      matt 					return 1;
    143      1.51      matt #ifdef _ARM_ARCH_6
    144      1.51      matt 				__asm __volatile("wfe");
    145      1.51      matt 				membar_consumer();
    146      1.51      matt #endif
    147      1.51      matt 				if (db_onproc == ci) {
    148      1.51      matt 					printf("%s: switching to %s\n",
    149      1.51      matt 					    __func__, ci->ci_cpuname);
    150      1.51      matt 				}
    151      1.51      matt 			}
    152      1.51      matt 		}
    153      1.51      matt #endif
    154       1.1      matt 
    155      1.51      matt 		s = splhigh();
    156      1.52     skrll 		ci->ci_ddb_regs = &dbreg;
    157      1.52     skrll 		ddb_regp = &dbreg;
    158      1.52     skrll 		ddb_regs = *regs;
    159      1.52     skrll 
    160      1.51      matt 		atomic_inc_32(&db_active);
    161      1.51      matt 		cnpollc(true);
    162      1.51      matt 		db_trap(type, 0/*code*/);
    163      1.51      matt 		cnpollc(false);
    164      1.51      matt 		atomic_dec_32(&db_active);
    165      1.52     skrll 
    166      1.51      matt 		ci->ci_ddb_regs = NULL;
    167      1.52     skrll 		ddb_regp = &dbreg;
    168      1.52     skrll 		*regs = ddb_regs;
    169      1.51      matt 		splx(s);
    170      1.51      matt 
    171      1.51      matt #ifdef MULTIPROCESSOR
    172      1.51      matt 		if (is_mp_p && db_newcpu != NULL) {
    173      1.51      matt 			db_onproc = db_newcpu;
    174      1.51      matt 			db_newcpu = NULL;
    175      1.51      matt #ifdef _ARM_ARCH_6
    176      1.51      matt 			membar_producer();
    177      1.51      matt 			__asm __volatile("sev; sev");
    178      1.51      matt #endif
    179      1.51      matt 			continue;
    180      1.51      matt 		}
    181      1.51      matt 		break;
    182      1.51      matt 	}
    183       1.1      matt 
    184      1.51      matt 	if (is_mp_p) {
    185      1.51      matt 		/*
    186      1.51      matt 		 * We are exiting DDB so there is noone onproc.  Tell
    187      1.51      matt 		 * the other CPUs to exit.
    188      1.51      matt 		 */
    189      1.51      matt 		db_onproc = NULL;
    190      1.51      matt #ifdef _ARM_ARCH_6
    191      1.51      matt 		__asm __volatile("sev; sev");
    192      1.51      matt #endif
    193      1.51      matt 	}
    194      1.51      matt #endif
    195       1.1      matt 
    196       1.1      matt 	return (1);
    197       1.1      matt }
    198      1.24    briggs #endif
    199       1.1      matt 
    200      1.24    briggs int
    201      1.15   thorpej db_validate_address(vaddr_t addr)
    202       1.1      matt {
    203       1.1      matt 	struct proc *p = curproc;
    204      1.14   thorpej 	struct pmap *pmap;
    205       1.1      matt 
    206      1.23       scw 	if (!p || !p->p_vmspace || !p->p_vmspace->vm_map.pmap ||
    207      1.23       scw #ifndef ARM32_NEW_VM_LAYOUT
    208      1.29   thorpej 	    addr >= VM_MAXUSER_ADDRESS
    209      1.23       scw #else
    210      1.29   thorpej 	    addr >= VM_MIN_KERNEL_ADDRESS
    211      1.23       scw #endif
    212      1.29   thorpej 	   )
    213      1.14   thorpej 		pmap = pmap_kernel();
    214       1.1      matt 	else
    215      1.14   thorpej 		pmap = p->p_vmspace->vm_map.pmap;
    216       1.1      matt 
    217      1.42   thorpej 	return (pmap_extract(pmap, addr, NULL) == false);
    218       1.1      matt }
    219       1.1      matt 
    220       1.1      matt /*
    221       1.1      matt  * Read bytes from kernel address space for debugger.
    222       1.1      matt  */
    223       1.1      matt void
    224      1.47       dsl db_read_bytes(vaddr_t addr, size_t size, char *data)
    225       1.1      matt {
    226      1.30       scw 	char	*src = (char *)addr;
    227       1.1      matt 
    228      1.30       scw 	if (db_validate_address((u_int)src)) {
    229      1.30       scw 		db_printf("address %p is invalid\n", src);
    230      1.30       scw 		return;
    231      1.30       scw 	}
    232      1.30       scw 
    233      1.30       scw 	if (size == 4 && (addr & 3) == 0 && ((uintptr_t)data & 3) == 0) {
    234      1.30       scw 		*((int*)data) = *((int*)src);
    235      1.30       scw 		return;
    236      1.30       scw 	}
    237      1.30       scw 
    238      1.30       scw 	if (size == 2 && (addr & 1) == 0 && ((uintptr_t)data & 1) == 0) {
    239      1.30       scw 		*((short*)data) = *((short*)src);
    240      1.30       scw 		return;
    241      1.30       scw 	}
    242      1.14   thorpej 
    243      1.14   thorpej 	while (size-- > 0) {
    244       1.1      matt 		if (db_validate_address((u_int)src)) {
    245       1.1      matt 			db_printf("address %p is invalid\n", src);
    246       1.1      matt 			return;
    247       1.1      matt 		}
    248       1.1      matt 		*data++ = *src++;
    249       1.1      matt 	}
    250       1.1      matt }
    251       1.1      matt 
    252       1.1      matt static void
    253      1.37       uwe db_write_text(vaddr_t addr, size_t size, const char *data)
    254      1.50     skrll {
    255      1.15   thorpej 	struct pmap *pmap = pmap_kernel();
    256      1.15   thorpej 	pd_entry_t *pde, oldpde, tmppde;
    257      1.15   thorpej 	pt_entry_t *pte, oldpte, tmppte;
    258      1.15   thorpej 	vaddr_t pgva;
    259      1.15   thorpej 	size_t limit, savesize;
    260      1.15   thorpej 	char *dst;
    261      1.34     chris 
    262      1.34     chris 	/* XXX: gcc */
    263      1.34     chris 	oldpte = 0;
    264       1.1      matt 
    265      1.15   thorpej 	if ((savesize = size) == 0)
    266      1.15   thorpej 		return;
    267      1.15   thorpej 
    268      1.15   thorpej 	dst = (char *) addr;
    269       1.1      matt 
    270      1.15   thorpej 	do {
    271      1.15   thorpej 		/* Get the PDE of the current VA. */
    272      1.42   thorpej 		if (pmap_get_pde_pte(pmap, (vaddr_t) dst, &pde, &pte) == false)
    273      1.23       scw 			goto no_mapping;
    274      1.18   thorpej 		switch ((oldpde = *pde) & L1_TYPE_MASK) {
    275      1.18   thorpej 		case L1_TYPE_S:
    276      1.18   thorpej 			pgva = (vaddr_t)dst & L1_S_FRAME;
    277      1.18   thorpej 			limit = L1_S_SIZE - ((vaddr_t)dst & L1_S_OFFSET);
    278      1.15   thorpej 
    279      1.48  jmcneill 			tmppde = l1pte_set_writable(oldpde);
    280      1.15   thorpej 			*pde = tmppde;
    281      1.22   thorpej 			PTE_SYNC(pde);
    282      1.15   thorpej 			break;
    283      1.15   thorpej 
    284      1.18   thorpej 		case L1_TYPE_C:
    285      1.18   thorpej 			pgva = (vaddr_t)dst & L2_S_FRAME;
    286      1.18   thorpej 			limit = L2_S_SIZE - ((vaddr_t)dst & L2_S_OFFSET);
    287      1.15   thorpej 
    288      1.23       scw 			if (pte == NULL)
    289      1.23       scw 				goto no_mapping;
    290      1.15   thorpej 			oldpte = *pte;
    291      1.48  jmcneill 			tmppte = l2pte_set_writable(oldpte);
    292      1.15   thorpej 			*pte = tmppte;
    293      1.22   thorpej 			PTE_SYNC(pte);
    294      1.15   thorpej 			break;
    295      1.15   thorpej 
    296      1.15   thorpej 		default:
    297      1.23       scw 		no_mapping:
    298      1.15   thorpej 			printf(" address 0x%08lx not a valid page\n",
    299      1.15   thorpej 			    (vaddr_t) dst);
    300      1.15   thorpej 			return;
    301      1.15   thorpej 		}
    302      1.15   thorpej 		cpu_tlb_flushD_SE(pgva);
    303      1.16   thorpej 		cpu_cpwait();
    304       1.1      matt 
    305      1.15   thorpej 		if (limit > size)
    306      1.15   thorpej 			limit = size;
    307      1.15   thorpej 		size -= limit;
    308       1.1      matt 
    309      1.15   thorpej 		/*
    310      1.15   thorpej 		 * Page is now writable.  Do as much access as we
    311      1.15   thorpej 		 * can in this page.
    312      1.15   thorpej 		 */
    313      1.15   thorpej 		for (; limit > 0; limit--)
    314      1.15   thorpej 			*dst++ = *data++;
    315       1.1      matt 
    316      1.15   thorpej 		/*
    317      1.15   thorpej 		 * Restore old mapping permissions.
    318      1.15   thorpej 		 */
    319      1.18   thorpej 		switch (oldpde & L1_TYPE_MASK) {
    320      1.18   thorpej 		case L1_TYPE_S:
    321      1.15   thorpej 			*pde = oldpde;
    322      1.22   thorpej 			PTE_SYNC(pde);
    323      1.15   thorpej 			break;
    324      1.15   thorpej 
    325      1.18   thorpej 		case L1_TYPE_C:
    326      1.15   thorpej 			*pte = oldpte;
    327      1.22   thorpej 			PTE_SYNC(pte);
    328      1.15   thorpej 			break;
    329      1.15   thorpej 		}
    330      1.15   thorpej 		cpu_tlb_flushD_SE(pgva);
    331      1.16   thorpej 		cpu_cpwait();
    332      1.15   thorpej 	} while (size != 0);
    333       1.1      matt 
    334      1.15   thorpej 	/* Sync the I-cache. */
    335      1.17   thorpej 	cpu_icache_sync_range(addr, savesize);
    336       1.1      matt }
    337       1.1      matt 
    338       1.1      matt /*
    339       1.1      matt  * Write bytes to kernel address space for debugger.
    340       1.1      matt  */
    341       1.1      matt void
    342      1.37       uwe db_write_bytes(vaddr_t addr, size_t size, const char *data)
    343       1.1      matt {
    344      1.27   thorpej 	extern char kernel_text[];
    345      1.15   thorpej 	extern char etext[];
    346      1.15   thorpej 	char *dst;
    347      1.15   thorpej 	size_t loop;
    348      1.15   thorpej 
    349      1.15   thorpej 	/* If any part is in kernel text, use db_write_text() */
    350      1.27   thorpej 	if (addr >= (vaddr_t) kernel_text && addr < (vaddr_t) etext) {
    351      1.15   thorpej 		db_write_text(addr, size, data);
    352      1.15   thorpej 		return;
    353      1.15   thorpej 	}
    354       1.1      matt 
    355       1.1      matt 	dst = (char *)addr;
    356      1.30       scw 	if (db_validate_address((u_int)dst)) {
    357      1.30       scw 		db_printf("address %p is invalid\n", dst);
    358      1.30       scw 		return;
    359      1.30       scw 	}
    360      1.30       scw 
    361      1.30       scw 	if (size == 4 && (addr & 3) == 0 && ((uintptr_t)data & 3) == 0)
    362      1.37       uwe 		*((int*)dst) = *((const int *)data);
    363      1.30       scw 	else
    364      1.30       scw 	if (size == 2 && (addr & 1) == 0 && ((uintptr_t)data & 1) == 0)
    365      1.37       uwe 		*((short*)dst) = *((const short *)data);
    366      1.30       scw 	else {
    367      1.30       scw 		loop = size;
    368      1.30       scw 		while (loop-- > 0) {
    369      1.30       scw 			if (db_validate_address((u_int)dst)) {
    370      1.30       scw 				db_printf("address %p is invalid\n", dst);
    371      1.30       scw 				return;
    372      1.30       scw 			}
    373      1.30       scw 			*dst++ = *data++;
    374       1.1      matt 		}
    375       1.1      matt 	}
    376      1.30       scw 
    377       1.1      matt 	/* make sure the caches and memory are in sync */
    378      1.17   thorpej 	cpu_icache_sync_range(addr, size);
    379       1.1      matt 
    380       1.1      matt 	/* In case the current page tables have been modified ... */
    381       1.1      matt 	cpu_tlb_flushID();
    382      1.16   thorpej 	cpu_cpwait();
    383       1.1      matt }
    384       1.1      matt 
    385      1.28       bsh #ifdef DDB
    386       1.1      matt void
    387      1.15   thorpej cpu_Debugger(void)
    388       1.1      matt {
    389      1.39     perry 	__asm(".word	0xe7ffffff");
    390       1.1      matt }
    391       1.1      matt 
    392       1.1      matt int
    393      1.15   thorpej db_trapper(u_int addr, u_int inst, trapframe_t *frame, int fault_code)
    394       1.1      matt {
    395      1.15   thorpej 
    396       1.1      matt 	if (fault_code == 0) {
    397       1.1      matt 		if ((inst & ~INSN_COND_MASK) == (BKPT_INST & ~INSN_COND_MASK))
    398       1.1      matt 			kdb_trap(T_BREAKPOINT, frame);
    399       1.1      matt 		else
    400       1.1      matt 			kdb_trap(-1, frame);
    401       1.1      matt 	} else
    402       1.1      matt 		return (1);
    403       1.1      matt 	return (0);
    404       1.1      matt }
    405       1.1      matt 
    406       1.1      matt extern u_int esym;
    407       1.1      matt extern u_int end;
    408       1.1      matt 
    409       1.3     bjh21 static struct undefined_handler db_uh;
    410       1.3     bjh21 
    411       1.1      matt void
    412      1.15   thorpej db_machine_init(void)
    413       1.1      matt {
    414       1.1      matt 
    415       1.3     bjh21 	/*
    416       1.3     bjh21 	 * We get called before malloc() is available, so supply a static
    417       1.3     bjh21 	 * struct undefined_handler.
    418       1.3     bjh21 	 */
    419       1.3     bjh21 	db_uh.uh_handler = db_trapper;
    420      1.35  rearnsha 	install_coproc_handler_static(CORE_UNKNOWN_HANDLER, &db_uh);
    421       1.1      matt }
    422      1.24    briggs #endif
    423       1.1      matt 
    424       1.1      matt u_int
    425      1.36        he db_fetch_reg(int reg, db_regs_t *regs)
    426       1.1      matt {
    427       1.1      matt 
    428       1.1      matt 	switch (reg) {
    429       1.1      matt 	case 0:
    430      1.36        he 		return (regs->tf_r0);
    431       1.1      matt 	case 1:
    432      1.36        he 		return (regs->tf_r1);
    433       1.1      matt 	case 2:
    434      1.36        he 		return (regs->tf_r2);
    435       1.1      matt 	case 3:
    436      1.36        he 		return (regs->tf_r3);
    437       1.1      matt 	case 4:
    438      1.36        he 		return (regs->tf_r4);
    439       1.1      matt 	case 5:
    440      1.36        he 		return (regs->tf_r5);
    441       1.1      matt 	case 6:
    442      1.36        he 		return (regs->tf_r6);
    443       1.1      matt 	case 7:
    444      1.36        he 		return (regs->tf_r7);
    445       1.1      matt 	case 8:
    446      1.36        he 		return (regs->tf_r8);
    447       1.1      matt 	case 9:
    448      1.36        he 		return (regs->tf_r9);
    449       1.1      matt 	case 10:
    450      1.36        he 		return (regs->tf_r10);
    451       1.1      matt 	case 11:
    452      1.36        he 		return (regs->tf_r11);
    453       1.1      matt 	case 12:
    454      1.36        he 		return (regs->tf_r12);
    455       1.1      matt 	case 13:
    456      1.36        he 		return (regs->tf_svc_sp);
    457       1.1      matt 	case 14:
    458      1.36        he 		return (regs->tf_svc_lr);
    459       1.1      matt 	case 15:
    460      1.36        he 		return (regs->tf_pc);
    461       1.1      matt 	default:
    462       1.1      matt 		panic("db_fetch_reg: botch");
    463       1.1      matt 	}
    464       1.1      matt }
    465       1.1      matt 
    466       1.1      matt u_int
    467      1.36        he branch_taken(u_int insn, u_int pc, db_regs_t *regs)
    468       1.1      matt {
    469       1.1      matt 	u_int addr, nregs;
    470       1.1      matt 
    471       1.1      matt 	switch ((insn >> 24) & 0xf) {
    472       1.1      matt 	case 0xa:	/* b ... */
    473       1.1      matt 	case 0xb:	/* bl ... */
    474       1.1      matt 		addr = ((insn << 2) & 0x03ffffff);
    475       1.1      matt 		if (addr & 0x02000000)
    476       1.1      matt 			addr |= 0xfc000000;
    477       1.1      matt 		return (pc + 8 + addr);
    478       1.1      matt 	case 0x7:	/* ldr pc, [pc, reg, lsl #2] */
    479      1.36        he 		addr = db_fetch_reg(insn & 0xf, regs);
    480       1.1      matt 		addr = pc + 8 + (addr << 2);
    481       1.1      matt 		db_read_bytes(addr, 4, (char *)&addr);
    482       1.1      matt 		return (addr);
    483      1.41  christos 	case 0x5:	/* ldr pc, [reg] */
    484      1.41  christos 		addr = db_fetch_reg((insn >> 16) & 0xf, regs);
    485      1.41  christos 		db_read_bytes(addr, 4, (char *)&addr);
    486      1.41  christos 		return (addr);
    487       1.1      matt 	case 0x1:	/* mov pc, reg */
    488      1.36        he 		addr = db_fetch_reg(insn & 0xf, regs);
    489       1.1      matt 		return (addr);
    490       1.1      matt 	case 0x8:	/* ldmxx reg, {..., pc} */
    491       1.1      matt 	case 0x9:
    492      1.36        he 		addr = db_fetch_reg((insn >> 16) & 0xf, regs);
    493       1.1      matt 		nregs = (insn  & 0x5555) + ((insn  >> 1) & 0x5555);
    494       1.1      matt 		nregs = (nregs & 0x3333) + ((nregs >> 2) & 0x3333);
    495       1.1      matt 		nregs = (nregs + (nregs >> 4)) & 0x0f0f;
    496       1.1      matt 		nregs = (nregs + (nregs >> 8)) & 0x001f;
    497       1.1      matt 		switch ((insn >> 23) & 0x3) {
    498       1.1      matt 		case 0x0:	/* ldmda */
    499       1.1      matt 			addr = addr - 0;
    500       1.1      matt 			break;
    501       1.1      matt 		case 0x1:	/* ldmia */
    502       1.1      matt 			addr = addr + 0 + ((nregs - 1) << 2);
    503       1.1      matt 			break;
    504       1.1      matt 		case 0x2:	/* ldmdb */
    505       1.1      matt 			addr = addr - 4;
    506       1.1      matt 			break;
    507       1.1      matt 		case 0x3:	/* ldmib */
    508       1.1      matt 			addr = addr + 4 + ((nregs - 1) << 2);
    509       1.1      matt 			break;
    510       1.1      matt 		}
    511       1.1      matt 		db_read_bytes(addr, 4, (char *)&addr);
    512       1.1      matt 		return (addr);
    513       1.1      matt 	default:
    514       1.1      matt 		panic("branch_taken: botch");
    515       1.1      matt 	}
    516       1.1      matt }
    517