1b3e22b23SPaolo Bonzini /* 2b3e22b23SPaolo Bonzini * Decode table flags, mostly based on Intel SDM. 3b3e22b23SPaolo Bonzini * 4b3e22b23SPaolo Bonzini * Copyright (c) 2022 Red Hat, Inc. 5b3e22b23SPaolo Bonzini * 6b3e22b23SPaolo Bonzini * Author: Paolo Bonzini <pbonzini@redhat.com> 7b3e22b23SPaolo Bonzini * 8b3e22b23SPaolo Bonzini * This library is free software; you can redistribute it and/or 9b3e22b23SPaolo Bonzini * modify it under the terms of the GNU Lesser General Public 10b3e22b23SPaolo Bonzini * License as published by the Free Software Foundation; either 11b3e22b23SPaolo Bonzini * version 2.1 of the License, or (at your option) any later version. 12b3e22b23SPaolo Bonzini * 13b3e22b23SPaolo Bonzini * This library is distributed in the hope that it will be useful, 14b3e22b23SPaolo Bonzini * but WITHOUT ANY WARRANTY; without even the implied warranty of 15b3e22b23SPaolo Bonzini * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU 16b3e22b23SPaolo Bonzini * Lesser General Public License for more details. 17b3e22b23SPaolo Bonzini * 18b3e22b23SPaolo Bonzini * You should have received a copy of the GNU Lesser General Public 19b3e22b23SPaolo Bonzini * License along with this library; if not, see <http://www.gnu.org/licenses/>. 20b3e22b23SPaolo Bonzini */ 21b3e22b23SPaolo Bonzini 22b3e22b23SPaolo Bonzini typedef enum X86OpType { 23b3e22b23SPaolo Bonzini X86_TYPE_None, 24b3e22b23SPaolo Bonzini 25b3e22b23SPaolo Bonzini X86_TYPE_A, /* Implicit */ 26b3e22b23SPaolo Bonzini X86_TYPE_B, /* VEX.vvvv selects a GPR */ 27b3e22b23SPaolo Bonzini X86_TYPE_C, /* REG in the modrm byte selects a control register */ 28b3e22b23SPaolo Bonzini X86_TYPE_D, /* REG in the modrm byte selects a debug register */ 29b3e22b23SPaolo Bonzini X86_TYPE_E, /* ALU modrm operand */ 30b3e22b23SPaolo Bonzini X86_TYPE_F, /* EFLAGS/RFLAGS */ 31b3e22b23SPaolo Bonzini X86_TYPE_G, /* REG in the modrm byte selects a GPR */ 32b3e22b23SPaolo Bonzini X86_TYPE_H, /* For AVX, VEX.vvvv selects an XMM/YMM register */ 33b3e22b23SPaolo Bonzini X86_TYPE_I, /* Immediate */ 34b3e22b23SPaolo Bonzini X86_TYPE_J, /* Relative offset for a jump */ 35b3e22b23SPaolo Bonzini X86_TYPE_L, /* The upper 4 bits of the immediate select a 128-bit register */ 36b3e22b23SPaolo Bonzini X86_TYPE_M, /* modrm byte selects a memory operand */ 37b3e22b23SPaolo Bonzini X86_TYPE_N, /* R/M in the modrm byte selects an MMX register */ 38b3e22b23SPaolo Bonzini X86_TYPE_O, /* Absolute address encoded in the instruction */ 39b3e22b23SPaolo Bonzini X86_TYPE_P, /* reg in the modrm byte selects an MMX register */ 40b3e22b23SPaolo Bonzini X86_TYPE_Q, /* MMX modrm operand */ 41b3e22b23SPaolo Bonzini X86_TYPE_R, /* R/M in the modrm byte selects a register */ 42b3e22b23SPaolo Bonzini X86_TYPE_S, /* reg selects a segment register */ 43b3e22b23SPaolo Bonzini X86_TYPE_U, /* R/M in the modrm byte selects an XMM/YMM register */ 44b3e22b23SPaolo Bonzini X86_TYPE_V, /* reg in the modrm byte selects an XMM/YMM register */ 45b3e22b23SPaolo Bonzini X86_TYPE_W, /* XMM/YMM modrm operand */ 46b3e22b23SPaolo Bonzini X86_TYPE_X, /* string source */ 47b3e22b23SPaolo Bonzini X86_TYPE_Y, /* string destination */ 48b3e22b23SPaolo Bonzini 49b3e22b23SPaolo Bonzini /* Custom */ 50d7c41a60SPaolo Bonzini X86_TYPE_EM, /* modrm byte selects an ALU memory operand */ 516bbeb98dSPaolo Bonzini X86_TYPE_WM, /* modrm byte selects an XMM/YMM memory operand */ 525e9e21bcSPaolo Bonzini X86_TYPE_I_unsigned, /* Immediate, zero-extended */ 533fabbe0bSPaolo Bonzini X86_TYPE_nop, /* modrm operand decoded but not loaded into s->T{0,1} */ 54b3e22b23SPaolo Bonzini X86_TYPE_2op, /* 2-operand RMW instruction */ 55b3e22b23SPaolo Bonzini X86_TYPE_LoBits, /* encoded in bits 0-2 of the operand + REX.B */ 56b3e22b23SPaolo Bonzini X86_TYPE_0, /* Hard-coded GPRs (RAX..RDI) */ 57b3e22b23SPaolo Bonzini X86_TYPE_1, 58b3e22b23SPaolo Bonzini X86_TYPE_2, 59b3e22b23SPaolo Bonzini X86_TYPE_3, 60b3e22b23SPaolo Bonzini X86_TYPE_4, 61b3e22b23SPaolo Bonzini X86_TYPE_5, 62b3e22b23SPaolo Bonzini X86_TYPE_6, 63b3e22b23SPaolo Bonzini X86_TYPE_7, 64b3e22b23SPaolo Bonzini X86_TYPE_ES, /* Hard-coded segment registers */ 65b3e22b23SPaolo Bonzini X86_TYPE_CS, 66b3e22b23SPaolo Bonzini X86_TYPE_SS, 67b3e22b23SPaolo Bonzini X86_TYPE_DS, 68b3e22b23SPaolo Bonzini X86_TYPE_FS, 69b3e22b23SPaolo Bonzini X86_TYPE_GS, 70b3e22b23SPaolo Bonzini } X86OpType; 71b3e22b23SPaolo Bonzini 72b3e22b23SPaolo Bonzini typedef enum X86OpSize { 73b3e22b23SPaolo Bonzini X86_SIZE_None, 74b3e22b23SPaolo Bonzini 75b3e22b23SPaolo Bonzini X86_SIZE_a, /* BOUND operand */ 76b3e22b23SPaolo Bonzini X86_SIZE_b, /* byte */ 77b3e22b23SPaolo Bonzini X86_SIZE_d, /* 32-bit */ 78b3e22b23SPaolo Bonzini X86_SIZE_dq, /* SSE/AVX 128-bit */ 79b3e22b23SPaolo Bonzini X86_SIZE_p, /* Far pointer */ 80b3e22b23SPaolo Bonzini X86_SIZE_pd, /* SSE/AVX packed double precision */ 81b3e22b23SPaolo Bonzini X86_SIZE_pi, /* MMX */ 82b3e22b23SPaolo Bonzini X86_SIZE_ps, /* SSE/AVX packed single precision */ 83b3e22b23SPaolo Bonzini X86_SIZE_q, /* 64-bit */ 84b3e22b23SPaolo Bonzini X86_SIZE_qq, /* AVX 256-bit */ 85b3e22b23SPaolo Bonzini X86_SIZE_s, /* Descriptor */ 86b3e22b23SPaolo Bonzini X86_SIZE_sd, /* SSE/AVX scalar double precision */ 87b3e22b23SPaolo Bonzini X86_SIZE_ss, /* SSE/AVX scalar single precision */ 88b3e22b23SPaolo Bonzini X86_SIZE_si, /* 32-bit GPR */ 89b3e22b23SPaolo Bonzini X86_SIZE_v, /* 16/32/64-bit, based on operand size */ 90b3e22b23SPaolo Bonzini X86_SIZE_w, /* 16-bit */ 91b3e22b23SPaolo Bonzini X86_SIZE_x, /* 128/256-bit, based on operand size */ 92b3e22b23SPaolo Bonzini X86_SIZE_y, /* 32/64-bit, based on operand size */ 93b3e22b23SPaolo Bonzini X86_SIZE_z, /* 16-bit for 16-bit operand size, else 32-bit */ 94d7c41a60SPaolo Bonzini X86_SIZE_z_f64, /* 32-bit for 32-bit operand size or 64-bit mode, else 16-bit */ 95b3e22b23SPaolo Bonzini 96b3e22b23SPaolo Bonzini /* Custom */ 97b3e22b23SPaolo Bonzini X86_SIZE_d64, 98b3e22b23SPaolo Bonzini X86_SIZE_f64, 99a48b2697SPaolo Bonzini X86_SIZE_xh, /* SSE/AVX packed half register */ 100b3e22b23SPaolo Bonzini } X86OpSize; 101b3e22b23SPaolo Bonzini 102caa01fadSPaolo Bonzini typedef enum X86CPUIDFeature { 103caa01fadSPaolo Bonzini X86_FEAT_None, 10471a0891dSPaolo Bonzini X86_FEAT_3DNOW, 105caa01fadSPaolo Bonzini X86_FEAT_ADX, 106caa01fadSPaolo Bonzini X86_FEAT_AES, 107caa01fadSPaolo Bonzini X86_FEAT_AVX, 108caa01fadSPaolo Bonzini X86_FEAT_AVX2, 109caa01fadSPaolo Bonzini X86_FEAT_BMI1, 110caa01fadSPaolo Bonzini X86_FEAT_BMI2, 1112b8046f3SPaolo Bonzini X86_FEAT_CMOV, 112405c7c07SPaolo Bonzini X86_FEAT_CMPCCXADD, 113cf5ec664SPaolo Bonzini X86_FEAT_F16C, 1142872b0f3SPaolo Bonzini X86_FEAT_FMA, 115caa01fadSPaolo Bonzini X86_FEAT_MOVBE, 116caa01fadSPaolo Bonzini X86_FEAT_PCLMULQDQ, 117e582b629SPaolo Bonzini X86_FEAT_SHA_NI, 118caa01fadSPaolo Bonzini X86_FEAT_SSE, 119caa01fadSPaolo Bonzini X86_FEAT_SSE2, 120caa01fadSPaolo Bonzini X86_FEAT_SSE3, 121caa01fadSPaolo Bonzini X86_FEAT_SSSE3, 122caa01fadSPaolo Bonzini X86_FEAT_SSE41, 123caa01fadSPaolo Bonzini X86_FEAT_SSE42, 124caa01fadSPaolo Bonzini X86_FEAT_SSE4A, 125caa01fadSPaolo Bonzini } X86CPUIDFeature; 126caa01fadSPaolo Bonzini 127b3e22b23SPaolo Bonzini /* Execution flags */ 128b3e22b23SPaolo Bonzini 129b3e22b23SPaolo Bonzini typedef enum X86OpUnit { 130b3e22b23SPaolo Bonzini X86_OP_SKIP, /* not valid or managed by emission function */ 131b3e22b23SPaolo Bonzini X86_OP_SEG, /* segment selector */ 132b3e22b23SPaolo Bonzini X86_OP_CR, /* control register */ 133b3e22b23SPaolo Bonzini X86_OP_DR, /* debug register */ 134b3e22b23SPaolo Bonzini X86_OP_INT, /* loaded into/stored from s->T0/T1 */ 135b3e22b23SPaolo Bonzini X86_OP_IMM, /* immediate */ 136b3e22b23SPaolo Bonzini X86_OP_SSE, /* address in either s->ptrX or s->A0 depending on has_ea */ 137b3e22b23SPaolo Bonzini X86_OP_MMX, /* address in either s->ptrX or s->A0 depending on has_ea */ 138b3e22b23SPaolo Bonzini } X86OpUnit; 139b3e22b23SPaolo Bonzini 140183e6679SPaolo Bonzini typedef enum X86InsnCheck { 141183e6679SPaolo Bonzini /* Illegal or exclusive to 64-bit mode */ 142183e6679SPaolo Bonzini X86_CHECK_i64 = 1, 143183e6679SPaolo Bonzini X86_CHECK_o64 = 2, 144183e6679SPaolo Bonzini 145183e6679SPaolo Bonzini /* Fault outside protected mode */ 146183e6679SPaolo Bonzini X86_CHECK_prot = 4, 147183e6679SPaolo Bonzini 148183e6679SPaolo Bonzini /* Privileged instruction checks */ 149183e6679SPaolo Bonzini X86_CHECK_cpl0 = 8, 150183e6679SPaolo Bonzini X86_CHECK_vm86_iopl = 16, 151183e6679SPaolo Bonzini X86_CHECK_cpl_iopl = 32, 152183e6679SPaolo Bonzini X86_CHECK_iopl = X86_CHECK_cpl_iopl | X86_CHECK_vm86_iopl, 153183e6679SPaolo Bonzini 154183e6679SPaolo Bonzini /* Fault if VEX.L=1 */ 155183e6679SPaolo Bonzini X86_CHECK_VEX128 = 64, 156e000687fSPaolo Bonzini 157e000687fSPaolo Bonzini /* Fault if VEX.W=1 */ 158e000687fSPaolo Bonzini X86_CHECK_W0 = 128, 159e000687fSPaolo Bonzini 160e000687fSPaolo Bonzini /* Fault if VEX.W=0 */ 161e000687fSPaolo Bonzini X86_CHECK_W1 = 256, 162183e6679SPaolo Bonzini } X86InsnCheck; 163183e6679SPaolo Bonzini 164b3e22b23SPaolo Bonzini typedef enum X86InsnSpecial { 165b3e22b23SPaolo Bonzini X86_SPECIAL_None, 166b3e22b23SPaolo Bonzini 167b609db94SPaolo Bonzini /* Accepts LOCK prefix; LOCKed operations do not load or writeback operand 0 */ 168b609db94SPaolo Bonzini X86_SPECIAL_HasLock, 169b609db94SPaolo Bonzini 170b3e22b23SPaolo Bonzini /* Always locked if it has a memory operand (XCHG) */ 171b3e22b23SPaolo Bonzini X86_SPECIAL_Locked, 172b3e22b23SPaolo Bonzini 1735e9e21bcSPaolo Bonzini /* Do not apply segment base to effective address */ 1745e9e21bcSPaolo Bonzini X86_SPECIAL_NoSeg, 175b3e22b23SPaolo Bonzini /* 1765baf5641SPaolo Bonzini * Rd/Mb or Rd/Mw in the manual: register operand 0 is treated as 32 bits 1775baf5641SPaolo Bonzini * (and writeback zero-extends it to 64 bits if applicable). PREFIX_DATA 1785baf5641SPaolo Bonzini * does not trigger 16-bit writeback and, as a side effect, high-byte 1795baf5641SPaolo Bonzini * registers are never used. 180b3e22b23SPaolo Bonzini */ 1815baf5641SPaolo Bonzini X86_SPECIAL_Op0_Rd, 1825baf5641SPaolo Bonzini 1835baf5641SPaolo Bonzini /* 1845baf5641SPaolo Bonzini * Ry/Mb in the manual (PINSRB). However, the high bits are never used by 1855baf5641SPaolo Bonzini * the instruction in either the register or memory cases; the *real* effect 1865baf5641SPaolo Bonzini * of this modifier is that high-byte registers are never used, even without 1875baf5641SPaolo Bonzini * a REX prefix. Therefore, PINSRW does not need it despite having Ry/Mw. 1885baf5641SPaolo Bonzini */ 1895baf5641SPaolo Bonzini X86_SPECIAL_Op2_Ry, 190b3e22b23SPaolo Bonzini 191b3e22b23SPaolo Bonzini /* 19216fc5726SPaolo Bonzini * Register operand 2 is extended to full width, while a memory operand 19316fc5726SPaolo Bonzini * is doubled in size if VEX.L=1. 19416fc5726SPaolo Bonzini */ 19516fc5726SPaolo Bonzini X86_SPECIAL_AVXExtMov, 19616fc5726SPaolo Bonzini 19716fc5726SPaolo Bonzini /* 198b3e22b23SPaolo Bonzini * MMX instruction exists with no prefix; if there is no prefix, V/H/W/U operands 199b3e22b23SPaolo Bonzini * become P/P/Q/N, and size "x" becomes "q". 200b3e22b23SPaolo Bonzini */ 201b3e22b23SPaolo Bonzini X86_SPECIAL_MMX, 2028a36bbcfSPaolo Bonzini 2038a36bbcfSPaolo Bonzini /* When loaded into s->T0, register operand 1 is zero/sign extended. */ 2048a36bbcfSPaolo Bonzini X86_SPECIAL_SExtT0, 2058a36bbcfSPaolo Bonzini X86_SPECIAL_ZExtT0, 206*0683fff1SXinyu Li 207*0683fff1SXinyu Li /* Memory operand size of MOV from segment register is MO_16 */ 208*0683fff1SXinyu Li X86_SPECIAL_Op0_Mw, 209b3e22b23SPaolo Bonzini } X86InsnSpecial; 210b3e22b23SPaolo Bonzini 21120581aadSPaolo Bonzini /* 21220581aadSPaolo Bonzini * Special cases for instructions that operate on XMM/YMM registers. Intel 21320581aadSPaolo Bonzini * retconned all of them to have VEX exception classes other than 0 and 13, so 21420581aadSPaolo Bonzini * all these only matter for instructions that have a VEX exception class. 21520581aadSPaolo Bonzini * Based on tables in the "AVX and SSE Instruction Exception Specification" 21620581aadSPaolo Bonzini * section of the manual. 21720581aadSPaolo Bonzini */ 21820581aadSPaolo Bonzini typedef enum X86VEXSpecial { 21920581aadSPaolo Bonzini /* Legacy SSE instructions that allow unaligned operands */ 22020581aadSPaolo Bonzini X86_VEX_SSEUnaligned, 22120581aadSPaolo Bonzini 22220581aadSPaolo Bonzini /* 22320581aadSPaolo Bonzini * Used for instructions that distinguish the XMM operand type with an 22420581aadSPaolo Bonzini * instruction prefix; legacy SSE encodings will allow unaligned operands 22520581aadSPaolo Bonzini * for scalar operands only (identified by a REP prefix). In this case, 22620581aadSPaolo Bonzini * the decoding table uses "x" for the vector operands instead of specifying 22720581aadSPaolo Bonzini * pd/ps/sd/ss individually. 22820581aadSPaolo Bonzini */ 22920581aadSPaolo Bonzini X86_VEX_REPScalar, 23020581aadSPaolo Bonzini 23120581aadSPaolo Bonzini /* 23220581aadSPaolo Bonzini * VEX instructions that only support 256-bit operands with AVX2 (Table 2-17 23320581aadSPaolo Bonzini * column 3). Columns 2 and 4 (instructions limited to 256- and 127-bit 23420581aadSPaolo Bonzini * operands respectively) are implicit in the presence of dq and qq 23520581aadSPaolo Bonzini * operands, and thus handled by decode_op_size. 23620581aadSPaolo Bonzini */ 23720581aadSPaolo Bonzini X86_VEX_AVX2_256, 23820581aadSPaolo Bonzini } X86VEXSpecial; 23920581aadSPaolo Bonzini 24020581aadSPaolo Bonzini 241b3e22b23SPaolo Bonzini typedef struct X86OpEntry X86OpEntry; 242b3e22b23SPaolo Bonzini typedef struct X86DecodedInsn X86DecodedInsn; 243b3e22b23SPaolo Bonzini 244b3e22b23SPaolo Bonzini /* Decode function for multibyte opcodes. */ 245b3e22b23SPaolo Bonzini typedef void (*X86DecodeFunc)(DisasContext *s, CPUX86State *env, X86OpEntry *entry, uint8_t *b); 246b3e22b23SPaolo Bonzini 247b3e22b23SPaolo Bonzini /* Code generation function. */ 248b3e22b23SPaolo Bonzini typedef void (*X86GenFunc)(DisasContext *s, CPUX86State *env, X86DecodedInsn *decode); 249b3e22b23SPaolo Bonzini 250b3e22b23SPaolo Bonzini struct X86OpEntry { 251b3e22b23SPaolo Bonzini /* Based on the is_decode flags. */ 252b3e22b23SPaolo Bonzini union { 253b3e22b23SPaolo Bonzini X86GenFunc gen; 254b3e22b23SPaolo Bonzini X86DecodeFunc decode; 255b3e22b23SPaolo Bonzini }; 256b3e22b23SPaolo Bonzini /* op0 is always written, op1 and op2 are always read. */ 257b3e22b23SPaolo Bonzini X86OpType op0:8; 258b3e22b23SPaolo Bonzini X86OpSize s0:8; 259b3e22b23SPaolo Bonzini X86OpType op1:8; 260b3e22b23SPaolo Bonzini X86OpSize s1:8; 261b3e22b23SPaolo Bonzini X86OpType op2:8; 262b3e22b23SPaolo Bonzini X86OpSize s2:8; 263b3e22b23SPaolo Bonzini /* Must be I and b respectively if present. */ 264b3e22b23SPaolo Bonzini X86OpType op3:8; 265b3e22b23SPaolo Bonzini X86OpSize s3:8; 266b3e22b23SPaolo Bonzini 267b3e22b23SPaolo Bonzini X86InsnSpecial special:8; 268caa01fadSPaolo Bonzini X86CPUIDFeature cpuid:8; 26920581aadSPaolo Bonzini unsigned vex_class:8; 27020581aadSPaolo Bonzini X86VEXSpecial vex_special:8; 271183e6679SPaolo Bonzini unsigned valid_prefix:16; 272183e6679SPaolo Bonzini unsigned check:16; 273183e6679SPaolo Bonzini unsigned intercept:8; 274b3e22b23SPaolo Bonzini bool is_decode:1; 275b3e22b23SPaolo Bonzini }; 276b3e22b23SPaolo Bonzini 277b3e22b23SPaolo Bonzini typedef struct X86DecodedOp { 278b3e22b23SPaolo Bonzini int8_t n; 279b3e22b23SPaolo Bonzini MemOp ot; /* For b/c/d/p/s/q/v/w/y/z */ 280b3e22b23SPaolo Bonzini X86OpUnit unit; 281b3e22b23SPaolo Bonzini bool has_ea; 2826ba13999SPaolo Bonzini int offset; /* For MMX and SSE */ 2836ba13999SPaolo Bonzini 2842666fbd2SPaolo Bonzini union { 2852666fbd2SPaolo Bonzini target_ulong imm; 2866ba13999SPaolo Bonzini /* 2876ba13999SPaolo Bonzini * This field is used internally by macros OP0_PTR/OP1_PTR/OP2_PTR, 2886ba13999SPaolo Bonzini * do not access directly! 2896ba13999SPaolo Bonzini */ 2906ba13999SPaolo Bonzini TCGv_ptr v_ptr; 2912666fbd2SPaolo Bonzini }; 292b3e22b23SPaolo Bonzini } X86DecodedOp; 293b3e22b23SPaolo Bonzini 294b3e22b23SPaolo Bonzini struct X86DecodedInsn { 295b3e22b23SPaolo Bonzini X86OpEntry e; 296b3e22b23SPaolo Bonzini X86DecodedOp op[3]; 2972666fbd2SPaolo Bonzini /* 2982666fbd2SPaolo Bonzini * Rightmost immediate, for convenience since most instructions have 2992666fbd2SPaolo Bonzini * one (and also for 4-operand instructions). 3002666fbd2SPaolo Bonzini */ 301b3e22b23SPaolo Bonzini target_ulong immediate; 302b3e22b23SPaolo Bonzini AddressParts mem; 303b3e22b23SPaolo Bonzini 304e7bbb7cbSPaolo Bonzini TCGv cc_dst, cc_src, cc_src2; 305e7bbb7cbSPaolo Bonzini TCGv_i32 cc_op_dynamic; 306e7bbb7cbSPaolo Bonzini int8_t cc_op; 307e7bbb7cbSPaolo Bonzini 308b3e22b23SPaolo Bonzini uint8_t b; 309b3e22b23SPaolo Bonzini }; 310b3e22b23SPaolo Bonzini 311