2 * Copyright (c) 2010-2013, 2016, 2019 ARM Limited
5 * The license below extends only to copyright in the software and shall
6 * not be construed as granting a license to any other intellectual
7 * property including but not limited to intellectual property relating
8 * to a hardware implementation of the functionality of the software
9 * licensed hereunder. You may use the software subject to the license
10 * terms below provided that you ensure that this notice is replicated
11 * unmodified and in its entirety in all distributions of the software,
12 * modified or unmodified, in source code or in binary form.
14 * Copyright (c) 2001-2005 The Regents of The University of Michigan
15 * All rights reserved.
17 * Redistribution and use in source and binary forms, with or without
18 * modification, are permitted provided that the following conditions are
19 * met: redistributions of source code must retain the above copyright
20 * notice, this list of conditions and the following disclaimer;
21 * redistributions in binary form must reproduce the above copyright
22 * notice, this list of conditions and the following disclaimer in the
23 * documentation and/or other materials provided with the distribution;
24 * neither the name of the copyright holders nor the names of its
25 * contributors may be used to endorse or promote products derived from
26 * this software without specific prior written permission.
28 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
29 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
30 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
31 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
32 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
33 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
34 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
35 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
36 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
37 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
38 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
43 #ifndef __ARCH_ARM_TLB_HH__
44 #define __ARCH_ARM_TLB_HH__
47 #include "arch/arm/isa_traits.hh"
48 #include "arch/arm/pagetable.hh"
49 #include "arch/arm/utility.hh"
50 #include "arch/arm/vtophys.hh"
51 #include "arch/generic/tlb.hh"
52 #include "base/statistics.hh"
53 #include "mem/request.hh"
54 #include "params/ArmTLB.hh"
55 #include "sim/probe/pmu.hh"
66 class TlbTestInterface
70 virtual ~TlbTestInterface() {}
73 * Check if a TLB translation should be forced to fail.
75 * @param req Request requiring a translation.
76 * @param is_priv Access from a privileged mode (i.e., not EL0)
77 * @param mode Access type
78 * @param domain Domain type
80 virtual Fault translationCheck(const RequestPtr &req, bool is_priv,
82 TlbEntry::DomainType domain) = 0;
85 * Check if a page table walker access should be forced to fail.
87 * @param pa Physical address the walker is accessing
88 * @param size Walker access size
89 * @param va Virtual address that initiated the walk
90 * @param is_secure Access from secure state
91 * @param is_priv Access from a privileged mode (i.e., not EL0)
92 * @param mode Access type
93 * @param domain Domain type
94 * @param lookup_level Page table walker level
96 virtual Fault walkCheck(Addr pa, Addr size, Addr va, bool is_secure,
97 Addr is_priv, BaseTLB::Mode mode,
98 TlbEntry::DomainType domain,
99 LookupLevel lookup_level) = 0;
102 class TLB : public BaseTLB
111 AlignDoubleWord = 0x3,
115 AllowUnaligned = 0x8,
116 // Priv code operating as if it wasn't
118 // Because zero otherwise looks like a valid setting and may be used
119 // accidentally, this bit must be non-zero to show it was used on
124 enum ArmTranslationType {
128 // Secure code operating as if it wasn't (required by some Address
129 // Translate operations)
131 // Address translation instructions (eg AT S1E0R_Xt) need to be handled
132 // in special ways during translation because they could need to act
133 // like a different EL than the current EL. The following flags are
134 // for these instructions
144 * Determine the EL to use for the purpose of a translation given
145 * a specific translation type. If the translation type doesn't
146 * specify an EL, we use the current EL.
148 static ExceptionLevel tranTypeEL(CPSR cpsr, ArmTranslationType type);
151 TlbEntry* table; // the Page Table
152 int size; // TLB Size
153 bool isStage2; // Indicates this TLB is part of the second stage MMU
154 bool stage2Req; // Indicates whether a stage 2 lookup is also required
155 // Indicates whether a stage 2 lookup of the table descriptors is required.
156 // Certain address translation instructions will intercept the IPA but the
157 // table descriptors still need to be translated by the stage2.
159 uint64_t _attr; // Memory attributes for last accessed TLB entry
160 bool directToStage2; // Indicates whether all translation requests should
161 // be routed directly to the stage 2 TLB
163 TableWalker *tableWalker;
165 Stage2MMU *stage2Mmu;
167 TlbTestInterface *test;
170 mutable Stats::Scalar instHits;
171 mutable Stats::Scalar instMisses;
172 mutable Stats::Scalar readHits;
173 mutable Stats::Scalar readMisses;
174 mutable Stats::Scalar writeHits;
175 mutable Stats::Scalar writeMisses;
176 mutable Stats::Scalar inserts;
177 mutable Stats::Scalar flushTlb;
178 mutable Stats::Scalar flushTlbMva;
179 mutable Stats::Scalar flushTlbMvaAsid;
180 mutable Stats::Scalar flushTlbAsid;
181 mutable Stats::Scalar flushedEntries;
182 mutable Stats::Scalar alignFaults;
183 mutable Stats::Scalar prefetchFaults;
184 mutable Stats::Scalar domainFaults;
185 mutable Stats::Scalar permsFaults;
187 Stats::Formula readAccesses;
188 Stats::Formula writeAccesses;
189 Stats::Formula instAccesses;
191 Stats::Formula misses;
192 Stats::Formula accesses;
194 /** PMU probe for TLB refills */
195 ProbePoints::PMUUPtr ppRefills;
197 int rangeMRU; //On lookup, only move entries ahead when outside rangeMRU
200 TLB(const ArmTLBParams *p);
201 TLB(const Params *p, int _size, TableWalker *_walker);
203 /** Lookup an entry in the TLB
204 * @param vpn virtual address
205 * @param asn context id/address space id to use
206 * @param vmid The virtual machine ID used for stage 2 translation
207 * @param secure if the lookup is secure
208 * @param hyp if the lookup is done from hyp mode
209 * @param functional if the lookup should modify state
210 * @param ignore_asn if on lookup asn should be ignored
211 * @return pointer to TLB entry if it exists
213 TlbEntry *lookup(Addr vpn, uint16_t asn, uint8_t vmid, bool hyp,
214 bool secure, bool functional,
215 bool ignore_asn, ExceptionLevel target_el);
219 void takeOverFrom(BaseTLB *otlb) override;
221 /// setup all the back pointers
222 void init() override;
224 void setTestInterface(SimObject *ti);
226 TableWalker *getTableWalker() { return tableWalker; }
228 void setMMU(Stage2MMU *m, MasterID master_id);
230 int getsize() const { return size; }
232 void insert(Addr vaddr, TlbEntry &pte);
234 Fault getTE(TlbEntry **te, const RequestPtr &req,
235 ThreadContext *tc, Mode mode,
236 Translation *translation, bool timing, bool functional,
237 bool is_secure, ArmTranslationType tranType);
239 Fault getResultTe(TlbEntry **te, const RequestPtr &req,
240 ThreadContext *tc, Mode mode,
241 Translation *translation, bool timing,
242 bool functional, TlbEntry *mergeTe);
244 Fault checkPermissions(TlbEntry *te, const RequestPtr &req, Mode mode);
245 Fault checkPermissions64(TlbEntry *te, const RequestPtr &req, Mode mode,
247 bool checkPAN(ThreadContext *tc, uint8_t ap, const RequestPtr &req,
251 /** Reset the entire TLB
252 * @param secure_lookup if the operation affects the secure world
254 void flushAllSecurity(bool secure_lookup, ExceptionLevel target_el,
255 bool ignore_el = false);
257 /** Remove all entries in the non secure world, depending on whether they
258 * were allocated in hyp mode or not
260 void flushAllNs(ExceptionLevel target_el, bool ignore_el = false);
263 /** Reset the entire TLB. Used for CPU switching to prevent stale
264 * translations after multiple switches
266 void flushAll() override
268 flushAllSecurity(false, EL0, true);
269 flushAllSecurity(true, EL0, true);
272 /** Remove any entries that match both a va and asn
273 * @param mva virtual address to flush
274 * @param asn contextid/asn to flush on match
275 * @param secure_lookup if the operation affects the secure world
277 void flushMvaAsid(Addr mva, uint64_t asn, bool secure_lookup,
278 ExceptionLevel target_el);
280 /** Remove any entries that match the asn
281 * @param asn contextid/asn to flush on match
282 * @param secure_lookup if the operation affects the secure world
284 void flushAsid(uint64_t asn, bool secure_lookup,
285 ExceptionLevel target_el);
287 /** Remove all entries that match the va regardless of asn
288 * @param mva address to flush from cache
289 * @param secure_lookup if the operation affects the secure world
291 void flushMva(Addr mva, bool secure_lookup, ExceptionLevel target_el);
294 * Invalidate all entries in the stage 2 TLB that match the given ipa
295 * and the current VMID
296 * @param ipa the address to invalidate
297 * @param secure_lookup if the operation affects the secure world
299 void flushIpaVmid(Addr ipa, bool secure_lookup, ExceptionLevel target_el);
301 Fault trickBoxCheck(const RequestPtr &req, Mode mode,
302 TlbEntry::DomainType domain);
304 Fault walkTrickBoxCheck(Addr pa, bool is_secure, Addr va, Addr sz,
305 bool is_exec, bool is_write,
306 TlbEntry::DomainType domain,
307 LookupLevel lookup_level);
309 void printTlb() const;
311 void demapPage(Addr vaddr, uint64_t asn) override
313 // needed for x86 only
314 panic("demapPage() is not implemented.\n");
318 * Do a functional lookup on the TLB (for debugging)
319 * and don't modify any internal state
320 * @param tc thread context to get the context id from
321 * @param vaddr virtual address to translate
322 * @param pa returned physical address
323 * @return if the translation was successful
325 bool translateFunctional(ThreadContext *tc, Addr vaddr, Addr &paddr);
328 * Do a functional lookup on the TLB (for checker cpu) that
329 * behaves like a normal lookup without modifying any page table state.
331 Fault translateFunctional(const RequestPtr &req, ThreadContext *tc,
332 Mode mode, ArmTranslationType tranType);
334 translateFunctional(const RequestPtr &req,
335 ThreadContext *tc, Mode mode) override
337 return translateFunctional(req, tc, mode, NormalTran);
340 /** Accessor functions for memory attributes for last accessed TLB entry
343 setAttr(uint64_t attr)
354 Fault translateFs(const RequestPtr &req, ThreadContext *tc, Mode mode,
355 Translation *translation, bool &delay,
356 bool timing, ArmTranslationType tranType, bool functional = false);
357 Fault translateSe(const RequestPtr &req, ThreadContext *tc, Mode mode,
358 Translation *translation, bool &delay, bool timing);
359 Fault translateAtomic(const RequestPtr &req, ThreadContext *tc, Mode mode,
360 ArmTranslationType tranType);
362 translateAtomic(const RequestPtr &req,
363 ThreadContext *tc, Mode mode) override
365 return translateAtomic(req, tc, mode, NormalTran);
367 void translateTiming(
368 const RequestPtr &req, ThreadContext *tc,
369 Translation *translation, Mode mode,
370 ArmTranslationType tranType);
372 translateTiming(const RequestPtr &req, ThreadContext *tc,
373 Translation *translation, Mode mode) override
375 translateTiming(req, tc, translation, mode, NormalTran);
377 Fault translateComplete(const RequestPtr &req, ThreadContext *tc,
378 Translation *translation, Mode mode, ArmTranslationType tranType,
380 Fault finalizePhysical(
381 const RequestPtr &req,
382 ThreadContext *tc, Mode mode) const override;
384 void drainResume() override;
386 void regStats() override;
388 void regProbePoints() override;
391 * Get the table walker port. This is used for migrating
392 * port connections during a CPU takeOverFrom() call. For
393 * architectures that do not have a table walker, NULL is
394 * returned, hence the use of a pointer rather than a
395 * reference. For ARM this method will always return a valid port
398 * @return A pointer to the walker master port
400 Port *getTableWalkerPort() override;
402 // Caching misc register values here.
403 // Writing to misc registers needs to invalidate them.
404 // translateFunctional/translateSe/translateFs checks if they are
405 // invalid and call updateMiscReg if necessary.
409 ExceptionLevel aarch64EL;
423 ContextID miscRegContext;
424 ArmTranslationType curTranType;
426 // Cached copies of system-level properties
428 bool haveVirtualization;
429 bool haveLargeAsid64;
433 void updateMiscReg(ThreadContext *tc,
434 ArmTranslationType tranType = NormalTran);
440 return dynamic_cast<const Params *>(_params);
442 inline void invalidateMiscReg() { miscRegValid = false; }
445 /** Remove any entries that match both a va and asn
446 * @param mva virtual address to flush
447 * @param asn contextid/asn to flush on match
448 * @param secure_lookup if the operation affects the secure world
449 * @param ignore_asn if the flush should ignore the asn
451 void _flushMva(Addr mva, uint64_t asn, bool secure_lookup,
452 bool ignore_asn, ExceptionLevel target_el);
454 public: /* Testing */
455 Fault testTranslation(const RequestPtr &req, Mode mode,
456 TlbEntry::DomainType domain);
457 Fault testWalk(Addr pa, Addr size, Addr va, bool is_secure, Mode mode,
458 TlbEntry::DomainType domain,
459 LookupLevel lookup_level);
466 auto tlb = static_cast<TLB *>(tc->getITBPtr());
475 auto tlb = static_cast<TLB *>(tc->getDTBPtr());
480 } // namespace ArmISA
482 #endif // __ARCH_ARM_TLB_HH__