Home | History | Annotate | Line # | Download | only in arm32
db_interface.c revision 1.56
      1  1.56     skrll /*	$NetBSD: db_interface.c,v 1.56 2017/06/30 08:10:50 skrll Exp $	*/
      2   1.1      matt 
      3  1.50     skrll /*
      4   1.1      matt  * Copyright (c) 1996 Scott K. Stevens
      5   1.1      matt  *
      6   1.1      matt  * Mach Operating System
      7   1.1      matt  * Copyright (c) 1991,1990 Carnegie Mellon University
      8   1.1      matt  * All Rights Reserved.
      9  1.50     skrll  *
     10   1.1      matt  * Permission to use, copy, modify and distribute this software and its
     11   1.1      matt  * documentation is hereby granted, provided that both the copyright
     12   1.1      matt  * notice and this permission notice appear in all copies of the
     13   1.1      matt  * software, derivative works or modified versions, and any portions
     14   1.1      matt  * thereof, and that both notices appear in supporting documentation.
     15  1.50     skrll  *
     16   1.1      matt  * CARNEGIE MELLON ALLOWS FREE USE OF THIS SOFTWARE IN ITS "AS IS"
     17   1.1      matt  * CONDITION.  CARNEGIE MELLON DISCLAIMS ANY LIABILITY OF ANY KIND FOR
     18   1.1      matt  * ANY DAMAGES WHATSOEVER RESULTING FROM THE USE OF THIS SOFTWARE.
     19  1.50     skrll  *
     20   1.1      matt  * Carnegie Mellon requests users of this software to return to
     21  1.50     skrll  *
     22   1.1      matt  *  Software Distribution Coordinator  or  Software.Distribution (at) CS.CMU.EDU
     23   1.1      matt  *  School of Computer Science
     24   1.1      matt  *  Carnegie Mellon University
     25   1.1      matt  *  Pittsburgh PA 15213-3890
     26  1.50     skrll  *
     27   1.1      matt  * any improvements or extensions that they make and grant Carnegie the
     28   1.1      matt  * rights to redistribute these changes.
     29   1.1      matt  *
     30   1.1      matt  *	From: db_interface.c,v 2.4 1991/02/05 17:11:13 mrt (CMU)
     31   1.1      matt  */
     32   1.1      matt 
     33   1.1      matt /*
     34   1.1      matt  * Interface to new debugger.
     35   1.1      matt  */
     36  1.32     lukem 
     37  1.32     lukem #include <sys/cdefs.h>
     38  1.56     skrll __KERNEL_RCSID(0, "$NetBSD: db_interface.c,v 1.56 2017/06/30 08:10:50 skrll Exp $");
     39  1.32     lukem 
     40   1.1      matt #include "opt_ddb.h"
     41  1.24    briggs #include "opt_kgdb.h"
     42  1.54     skrll #include "opt_multiprocessor.h"
     43   1.1      matt 
     44   1.1      matt #include <sys/param.h>
     45   1.1      matt #include <sys/proc.h>
     46   1.1      matt #include <sys/reboot.h>
     47   1.1      matt #include <sys/systm.h>	/* just for boothowto */
     48   1.1      matt #include <sys/exec.h>
     49  1.51      matt #include <sys/atomic.h>
     50  1.51      matt #include <sys/intr.h>
     51   1.1      matt 
     52   1.1      matt #include <uvm/uvm_extern.h>
     53   1.1      matt 
     54  1.13     chris #include <arm/arm32/db_machdep.h>
     55  1.11   thorpej #include <arm/undefined.h>
     56  1.13     chris #include <ddb/db_access.h>
     57   1.1      matt #include <ddb/db_command.h>
     58   1.1      matt #include <ddb/db_output.h>
     59   1.1      matt #include <ddb/db_variables.h>
     60   1.1      matt #include <ddb/db_sym.h>
     61   1.1      matt #include <ddb/db_extern.h>
     62   1.1      matt #include <ddb/db_interface.h>
     63   1.1      matt #include <dev/cons.h>
     64   1.1      matt 
     65  1.24    briggs #if defined(KGDB) || !defined(DDB)
     66  1.24    briggs #define db_printf	printf
     67  1.24    briggs #endif
     68  1.24    briggs 
     69  1.46       dsl u_int db_fetch_reg(int, db_regs_t *);
     70   1.1      matt 
     71  1.46       dsl int db_trapper(u_int, u_int, trapframe_t *, int);
     72  1.13     chris 
     73   1.1      matt int	db_active = 0;
     74  1.52     skrll db_regs_t ddb_regs;	/* register state */
     75  1.52     skrll db_regs_t *ddb_regp;
     76  1.52     skrll 
     77  1.51      matt #ifdef MULTIPROCESSOR
     78  1.51      matt volatile struct cpu_info *db_onproc;
     79  1.51      matt volatile struct cpu_info *db_newcpu;
     80  1.51      matt #endif
     81  1.51      matt 
     82  1.51      matt 
     83   1.1      matt 
     84   1.1      matt 
     85  1.24    briggs #ifdef DDB
     86   1.1      matt /*
     87   1.1      matt  *  kdb_trap - field a TRACE or BPT trap
     88   1.1      matt  */
     89   1.1      matt int
     90  1.15   thorpej kdb_trap(int type, db_regs_t *regs)
     91   1.1      matt {
     92  1.51      matt 	struct cpu_info * const ci = curcpu();
     93  1.52     skrll 	db_regs_t dbreg;
     94   1.1      matt 	int s;
     95   1.1      matt 
     96   1.1      matt 	switch (type) {
     97   1.1      matt 	case T_BREAKPOINT:	/* breakpoint */
     98   1.1      matt 	case -1:		/* keyboard interrupt */
     99   1.1      matt 		break;
    100  1.51      matt #ifdef MULTIPROCESSOR
    101  1.51      matt 	case -2:
    102  1.51      matt 		/*
    103  1.51      matt 		 * We called to enter ddb from another process but by the time
    104  1.51      matt 		 * we got here, no one was in ddb.  So ignore the request.
    105  1.51      matt 		 */
    106  1.51      matt 		if (db_onproc == NULL)
    107  1.51      matt 			return 1;
    108  1.51      matt 		break;
    109  1.51      matt #endif
    110   1.1      matt 	default:
    111   1.1      matt 		if (db_recover != 0) {
    112  1.31   thorpej 			/* This will longjmp back into db_command_loop() */
    113   1.1      matt 			db_error("Faulted in DDB; continuing...\n");
    114   1.1      matt 			/*NOTREACHED*/
    115   1.1      matt 		}
    116   1.1      matt 	}
    117   1.1      matt 
    118   1.1      matt 	/* Should switch to kdb`s own stack here. */
    119   1.1      matt 
    120  1.51      matt #ifdef MULTIPROCESSOR
    121  1.51      matt 	const bool is_mp_p = ncpu > 1;
    122  1.51      matt 	if (is_mp_p) {
    123  1.51      matt 		/*
    124  1.51      matt 		 * Try to take ownership of DDB.  If we do, tell all other
    125  1.51      matt 		 * CPUs to enter DDB too.
    126  1.51      matt 		 */
    127  1.51      matt 		if (atomic_cas_ptr(&db_onproc, NULL, ci) == NULL) {
    128  1.51      matt 			intr_ipi_send(NULL, IPI_DDB);
    129  1.51      matt 		}
    130  1.51      matt 	}
    131  1.51      matt 	for (;;) {
    132  1.51      matt 		if (is_mp_p) {
    133  1.51      matt 			/*
    134  1.51      matt 			 * While we aren't the master, wait until the master
    135  1.51      matt 			 * gives control to us or exits.  If it exited, we
    136  1.55     skrll 			 * just exit too.  Otherwise this cpu will enter DDB.
    137  1.51      matt 			 */
    138  1.51      matt 			membar_consumer();
    139  1.51      matt 			while (db_onproc != ci) {
    140  1.51      matt 				if (db_onproc == NULL)
    141  1.51      matt 					return 1;
    142  1.51      matt #ifdef _ARM_ARCH_6
    143  1.51      matt 				__asm __volatile("wfe");
    144  1.51      matt 				membar_consumer();
    145  1.51      matt #endif
    146  1.51      matt 				if (db_onproc == ci) {
    147  1.51      matt 					printf("%s: switching to %s\n",
    148  1.51      matt 					    __func__, ci->ci_cpuname);
    149  1.51      matt 				}
    150  1.51      matt 			}
    151  1.51      matt 		}
    152  1.51      matt #endif
    153   1.1      matt 
    154  1.51      matt 		s = splhigh();
    155  1.52     skrll 		ci->ci_ddb_regs = &dbreg;
    156  1.52     skrll 		ddb_regp = &dbreg;
    157  1.52     skrll 		ddb_regs = *regs;
    158  1.52     skrll 
    159  1.51      matt 		atomic_inc_32(&db_active);
    160  1.51      matt 		cnpollc(true);
    161  1.51      matt 		db_trap(type, 0/*code*/);
    162  1.51      matt 		cnpollc(false);
    163  1.51      matt 		atomic_dec_32(&db_active);
    164  1.52     skrll 
    165  1.51      matt 		ci->ci_ddb_regs = NULL;
    166  1.52     skrll 		ddb_regp = &dbreg;
    167  1.52     skrll 		*regs = ddb_regs;
    168  1.51      matt 		splx(s);
    169  1.51      matt 
    170  1.51      matt #ifdef MULTIPROCESSOR
    171  1.51      matt 		if (is_mp_p && db_newcpu != NULL) {
    172  1.51      matt 			db_onproc = db_newcpu;
    173  1.51      matt 			db_newcpu = NULL;
    174  1.51      matt #ifdef _ARM_ARCH_6
    175  1.51      matt 			membar_producer();
    176  1.51      matt 			__asm __volatile("sev; sev");
    177  1.51      matt #endif
    178  1.51      matt 			continue;
    179  1.51      matt 		}
    180  1.51      matt 		break;
    181  1.51      matt 	}
    182   1.1      matt 
    183  1.51      matt 	if (is_mp_p) {
    184  1.51      matt 		/*
    185  1.51      matt 		 * We are exiting DDB so there is noone onproc.  Tell
    186  1.51      matt 		 * the other CPUs to exit.
    187  1.51      matt 		 */
    188  1.51      matt 		db_onproc = NULL;
    189  1.51      matt #ifdef _ARM_ARCH_6
    190  1.51      matt 		__asm __volatile("sev; sev");
    191  1.51      matt #endif
    192  1.51      matt 	}
    193  1.51      matt #endif
    194   1.1      matt 
    195  1.56     skrll 	return 1;
    196   1.1      matt }
    197  1.24    briggs #endif
    198   1.1      matt 
    199  1.24    briggs int
    200  1.15   thorpej db_validate_address(vaddr_t addr)
    201   1.1      matt {
    202   1.1      matt 	struct proc *p = curproc;
    203  1.14   thorpej 	struct pmap *pmap;
    204   1.1      matt 
    205  1.23       scw 	if (!p || !p->p_vmspace || !p->p_vmspace->vm_map.pmap ||
    206  1.23       scw #ifndef ARM32_NEW_VM_LAYOUT
    207  1.29   thorpej 	    addr >= VM_MAXUSER_ADDRESS
    208  1.23       scw #else
    209  1.29   thorpej 	    addr >= VM_MIN_KERNEL_ADDRESS
    210  1.23       scw #endif
    211  1.29   thorpej 	   )
    212  1.14   thorpej 		pmap = pmap_kernel();
    213   1.1      matt 	else
    214  1.14   thorpej 		pmap = p->p_vmspace->vm_map.pmap;
    215   1.1      matt 
    216  1.42   thorpej 	return (pmap_extract(pmap, addr, NULL) == false);
    217   1.1      matt }
    218   1.1      matt 
    219   1.1      matt /*
    220   1.1      matt  * Read bytes from kernel address space for debugger.
    221   1.1      matt  */
    222   1.1      matt void
    223  1.47       dsl db_read_bytes(vaddr_t addr, size_t size, char *data)
    224   1.1      matt {
    225  1.30       scw 	char	*src = (char *)addr;
    226   1.1      matt 
    227  1.30       scw 	if (db_validate_address((u_int)src)) {
    228  1.30       scw 		db_printf("address %p is invalid\n", src);
    229  1.30       scw 		return;
    230  1.30       scw 	}
    231  1.30       scw 
    232  1.30       scw 	if (size == 4 && (addr & 3) == 0 && ((uintptr_t)data & 3) == 0) {
    233  1.30       scw 		*((int*)data) = *((int*)src);
    234  1.30       scw 		return;
    235  1.30       scw 	}
    236  1.30       scw 
    237  1.30       scw 	if (size == 2 && (addr & 1) == 0 && ((uintptr_t)data & 1) == 0) {
    238  1.30       scw 		*((short*)data) = *((short*)src);
    239  1.30       scw 		return;
    240  1.30       scw 	}
    241  1.14   thorpej 
    242  1.14   thorpej 	while (size-- > 0) {
    243   1.1      matt 		if (db_validate_address((u_int)src)) {
    244   1.1      matt 			db_printf("address %p is invalid\n", src);
    245   1.1      matt 			return;
    246   1.1      matt 		}
    247   1.1      matt 		*data++ = *src++;
    248   1.1      matt 	}
    249   1.1      matt }
    250   1.1      matt 
    251   1.1      matt static void
    252  1.37       uwe db_write_text(vaddr_t addr, size_t size, const char *data)
    253  1.50     skrll {
    254  1.15   thorpej 	struct pmap *pmap = pmap_kernel();
    255  1.15   thorpej 	pd_entry_t *pde, oldpde, tmppde;
    256  1.15   thorpej 	pt_entry_t *pte, oldpte, tmppte;
    257  1.15   thorpej 	vaddr_t pgva;
    258  1.15   thorpej 	size_t limit, savesize;
    259  1.15   thorpej 	char *dst;
    260  1.34     chris 
    261  1.34     chris 	/* XXX: gcc */
    262  1.34     chris 	oldpte = 0;
    263   1.1      matt 
    264  1.15   thorpej 	if ((savesize = size) == 0)
    265  1.15   thorpej 		return;
    266  1.15   thorpej 
    267  1.15   thorpej 	dst = (char *) addr;
    268   1.1      matt 
    269  1.15   thorpej 	do {
    270  1.15   thorpej 		/* Get the PDE of the current VA. */
    271  1.42   thorpej 		if (pmap_get_pde_pte(pmap, (vaddr_t) dst, &pde, &pte) == false)
    272  1.23       scw 			goto no_mapping;
    273  1.18   thorpej 		switch ((oldpde = *pde) & L1_TYPE_MASK) {
    274  1.18   thorpej 		case L1_TYPE_S:
    275  1.18   thorpej 			pgva = (vaddr_t)dst & L1_S_FRAME;
    276  1.18   thorpej 			limit = L1_S_SIZE - ((vaddr_t)dst & L1_S_OFFSET);
    277  1.15   thorpej 
    278  1.48  jmcneill 			tmppde = l1pte_set_writable(oldpde);
    279  1.15   thorpej 			*pde = tmppde;
    280  1.22   thorpej 			PTE_SYNC(pde);
    281  1.15   thorpej 			break;
    282  1.15   thorpej 
    283  1.18   thorpej 		case L1_TYPE_C:
    284  1.18   thorpej 			pgva = (vaddr_t)dst & L2_S_FRAME;
    285  1.18   thorpej 			limit = L2_S_SIZE - ((vaddr_t)dst & L2_S_OFFSET);
    286  1.15   thorpej 
    287  1.23       scw 			if (pte == NULL)
    288  1.23       scw 				goto no_mapping;
    289  1.15   thorpej 			oldpte = *pte;
    290  1.48  jmcneill 			tmppte = l2pte_set_writable(oldpte);
    291  1.15   thorpej 			*pte = tmppte;
    292  1.22   thorpej 			PTE_SYNC(pte);
    293  1.15   thorpej 			break;
    294  1.15   thorpej 
    295  1.15   thorpej 		default:
    296  1.23       scw 		no_mapping:
    297  1.15   thorpej 			printf(" address 0x%08lx not a valid page\n",
    298  1.15   thorpej 			    (vaddr_t) dst);
    299  1.15   thorpej 			return;
    300  1.15   thorpej 		}
    301  1.15   thorpej 		cpu_tlb_flushD_SE(pgva);
    302  1.16   thorpej 		cpu_cpwait();
    303   1.1      matt 
    304  1.15   thorpej 		if (limit > size)
    305  1.15   thorpej 			limit = size;
    306  1.15   thorpej 		size -= limit;
    307   1.1      matt 
    308  1.15   thorpej 		/*
    309  1.15   thorpej 		 * Page is now writable.  Do as much access as we
    310  1.15   thorpej 		 * can in this page.
    311  1.15   thorpej 		 */
    312  1.15   thorpej 		for (; limit > 0; limit--)
    313  1.15   thorpej 			*dst++ = *data++;
    314   1.1      matt 
    315  1.15   thorpej 		/*
    316  1.15   thorpej 		 * Restore old mapping permissions.
    317  1.15   thorpej 		 */
    318  1.18   thorpej 		switch (oldpde & L1_TYPE_MASK) {
    319  1.18   thorpej 		case L1_TYPE_S:
    320  1.15   thorpej 			*pde = oldpde;
    321  1.22   thorpej 			PTE_SYNC(pde);
    322  1.15   thorpej 			break;
    323  1.15   thorpej 
    324  1.18   thorpej 		case L1_TYPE_C:
    325  1.15   thorpej 			*pte = oldpte;
    326  1.22   thorpej 			PTE_SYNC(pte);
    327  1.15   thorpej 			break;
    328  1.15   thorpej 		}
    329  1.15   thorpej 		cpu_tlb_flushD_SE(pgva);
    330  1.16   thorpej 		cpu_cpwait();
    331  1.15   thorpej 	} while (size != 0);
    332   1.1      matt 
    333  1.15   thorpej 	/* Sync the I-cache. */
    334  1.17   thorpej 	cpu_icache_sync_range(addr, savesize);
    335   1.1      matt }
    336   1.1      matt 
    337   1.1      matt /*
    338   1.1      matt  * Write bytes to kernel address space for debugger.
    339   1.1      matt  */
    340   1.1      matt void
    341  1.37       uwe db_write_bytes(vaddr_t addr, size_t size, const char *data)
    342   1.1      matt {
    343  1.27   thorpej 	extern char kernel_text[];
    344  1.15   thorpej 	extern char etext[];
    345  1.15   thorpej 	char *dst;
    346  1.15   thorpej 	size_t loop;
    347  1.15   thorpej 
    348  1.15   thorpej 	/* If any part is in kernel text, use db_write_text() */
    349  1.27   thorpej 	if (addr >= (vaddr_t) kernel_text && addr < (vaddr_t) etext) {
    350  1.15   thorpej 		db_write_text(addr, size, data);
    351  1.15   thorpej 		return;
    352  1.15   thorpej 	}
    353   1.1      matt 
    354   1.1      matt 	dst = (char *)addr;
    355  1.30       scw 	if (db_validate_address((u_int)dst)) {
    356  1.30       scw 		db_printf("address %p is invalid\n", dst);
    357  1.30       scw 		return;
    358  1.30       scw 	}
    359  1.30       scw 
    360  1.30       scw 	if (size == 4 && (addr & 3) == 0 && ((uintptr_t)data & 3) == 0)
    361  1.37       uwe 		*((int*)dst) = *((const int *)data);
    362  1.30       scw 	else
    363  1.30       scw 	if (size == 2 && (addr & 1) == 0 && ((uintptr_t)data & 1) == 0)
    364  1.37       uwe 		*((short*)dst) = *((const short *)data);
    365  1.30       scw 	else {
    366  1.30       scw 		loop = size;
    367  1.30       scw 		while (loop-- > 0) {
    368  1.30       scw 			if (db_validate_address((u_int)dst)) {
    369  1.30       scw 				db_printf("address %p is invalid\n", dst);
    370  1.30       scw 				return;
    371  1.30       scw 			}
    372  1.30       scw 			*dst++ = *data++;
    373   1.1      matt 		}
    374   1.1      matt 	}
    375  1.30       scw 
    376   1.1      matt 	/* make sure the caches and memory are in sync */
    377  1.17   thorpej 	cpu_icache_sync_range(addr, size);
    378   1.1      matt 
    379   1.1      matt 	/* In case the current page tables have been modified ... */
    380   1.1      matt 	cpu_tlb_flushID();
    381  1.16   thorpej 	cpu_cpwait();
    382   1.1      matt }
    383   1.1      matt 
    384  1.28       bsh #ifdef DDB
    385   1.1      matt void
    386  1.15   thorpej cpu_Debugger(void)
    387   1.1      matt {
    388  1.39     perry 	__asm(".word	0xe7ffffff");
    389   1.1      matt }
    390   1.1      matt 
    391   1.1      matt int
    392  1.15   thorpej db_trapper(u_int addr, u_int inst, trapframe_t *frame, int fault_code)
    393   1.1      matt {
    394  1.15   thorpej 
    395   1.1      matt 	if (fault_code == 0) {
    396   1.1      matt 		if ((inst & ~INSN_COND_MASK) == (BKPT_INST & ~INSN_COND_MASK))
    397   1.1      matt 			kdb_trap(T_BREAKPOINT, frame);
    398   1.1      matt 		else
    399   1.1      matt 			kdb_trap(-1, frame);
    400   1.1      matt 	} else
    401  1.56     skrll 		return 1;
    402  1.56     skrll 	return 0;
    403   1.1      matt }
    404   1.1      matt 
    405   1.1      matt extern u_int esym;
    406   1.1      matt extern u_int end;
    407   1.1      matt 
    408   1.3     bjh21 static struct undefined_handler db_uh;
    409   1.3     bjh21 
    410   1.1      matt void
    411  1.15   thorpej db_machine_init(void)
    412   1.1      matt {
    413   1.1      matt 
    414   1.3     bjh21 	/*
    415   1.3     bjh21 	 * We get called before malloc() is available, so supply a static
    416   1.3     bjh21 	 * struct undefined_handler.
    417   1.3     bjh21 	 */
    418   1.3     bjh21 	db_uh.uh_handler = db_trapper;
    419  1.35  rearnsha 	install_coproc_handler_static(CORE_UNKNOWN_HANDLER, &db_uh);
    420   1.1      matt }
    421  1.24    briggs #endif
    422   1.1      matt 
    423   1.1      matt u_int
    424  1.36        he db_fetch_reg(int reg, db_regs_t *regs)
    425   1.1      matt {
    426   1.1      matt 
    427   1.1      matt 	switch (reg) {
    428   1.1      matt 	case 0:
    429  1.56     skrll 		return regs->tf_r0;
    430   1.1      matt 	case 1:
    431  1.56     skrll 		return regs->tf_r1;
    432   1.1      matt 	case 2:
    433  1.56     skrll 		return regs->tf_r2;
    434   1.1      matt 	case 3:
    435  1.56     skrll 		return regs->tf_r3;
    436   1.1      matt 	case 4:
    437  1.56     skrll 		return regs->tf_r4;
    438   1.1      matt 	case 5:
    439  1.56     skrll 		return regs->tf_r5;
    440   1.1      matt 	case 6:
    441  1.56     skrll 		return regs->tf_r6;
    442   1.1      matt 	case 7:
    443  1.56     skrll 		return regs->tf_r7;
    444   1.1      matt 	case 8:
    445  1.56     skrll 		return regs->tf_r8;
    446   1.1      matt 	case 9:
    447  1.56     skrll 		return regs->tf_r9;
    448   1.1      matt 	case 10:
    449  1.56     skrll 		return regs->tf_r10;
    450   1.1      matt 	case 11:
    451  1.56     skrll 		return regs->tf_r11;
    452   1.1      matt 	case 12:
    453  1.56     skrll 		return regs->tf_r12;
    454   1.1      matt 	case 13:
    455  1.56     skrll 		return regs->tf_svc_sp;
    456   1.1      matt 	case 14:
    457  1.56     skrll 		return regs->tf_svc_lr;
    458   1.1      matt 	case 15:
    459  1.56     skrll 		return regs->tf_pc;
    460   1.1      matt 	default:
    461   1.1      matt 		panic("db_fetch_reg: botch");
    462   1.1      matt 	}
    463   1.1      matt }
    464   1.1      matt 
    465   1.1      matt u_int
    466  1.36        he branch_taken(u_int insn, u_int pc, db_regs_t *regs)
    467   1.1      matt {
    468   1.1      matt 	u_int addr, nregs;
    469   1.1      matt 
    470   1.1      matt 	switch ((insn >> 24) & 0xf) {
    471   1.1      matt 	case 0xa:	/* b ... */
    472   1.1      matt 	case 0xb:	/* bl ... */
    473   1.1      matt 		addr = ((insn << 2) & 0x03ffffff);
    474   1.1      matt 		if (addr & 0x02000000)
    475   1.1      matt 			addr |= 0xfc000000;
    476  1.56     skrll 		return pc + 8 + addr;
    477   1.1      matt 	case 0x7:	/* ldr pc, [pc, reg, lsl #2] */
    478  1.36        he 		addr = db_fetch_reg(insn & 0xf, regs);
    479   1.1      matt 		addr = pc + 8 + (addr << 2);
    480   1.1      matt 		db_read_bytes(addr, 4, (char *)&addr);
    481  1.56     skrll 		return addr;
    482  1.41  christos 	case 0x5:	/* ldr pc, [reg] */
    483  1.41  christos 		addr = db_fetch_reg((insn >> 16) & 0xf, regs);
    484  1.41  christos 		db_read_bytes(addr, 4, (char *)&addr);
    485  1.56     skrll 		return addr;
    486   1.1      matt 	case 0x1:	/* mov pc, reg */
    487  1.36        he 		addr = db_fetch_reg(insn & 0xf, regs);
    488  1.56     skrll 		return addr;
    489   1.1      matt 	case 0x8:	/* ldmxx reg, {..., pc} */
    490   1.1      matt 	case 0x9:
    491  1.36        he 		addr = db_fetch_reg((insn >> 16) & 0xf, regs);
    492   1.1      matt 		nregs = (insn  & 0x5555) + ((insn  >> 1) & 0x5555);
    493   1.1      matt 		nregs = (nregs & 0x3333) + ((nregs >> 2) & 0x3333);
    494   1.1      matt 		nregs = (nregs + (nregs >> 4)) & 0x0f0f;
    495   1.1      matt 		nregs = (nregs + (nregs >> 8)) & 0x001f;
    496   1.1      matt 		switch ((insn >> 23) & 0x3) {
    497   1.1      matt 		case 0x0:	/* ldmda */
    498   1.1      matt 			addr = addr - 0;
    499   1.1      matt 			break;
    500   1.1      matt 		case 0x1:	/* ldmia */
    501   1.1      matt 			addr = addr + 0 + ((nregs - 1) << 2);
    502   1.1      matt 			break;
    503   1.1      matt 		case 0x2:	/* ldmdb */
    504   1.1      matt 			addr = addr - 4;
    505   1.1      matt 			break;
    506   1.1      matt 		case 0x3:	/* ldmib */
    507   1.1      matt 			addr = addr + 4 + ((nregs - 1) << 2);
    508   1.1      matt 			break;
    509   1.1      matt 		}
    510   1.1      matt 		db_read_bytes(addr, 4, (char *)&addr);
    511  1.56     skrll 		return addr;
    512   1.1      matt 	default:
    513   1.1      matt 		panic("branch_taken: botch");
    514   1.1      matt 	}
    515   1.1      matt }
    516