| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | | | 
 | 2 | |	bugfix.sa 3.2 1/31/91 | 
 | 3 | | | 
 | 4 | | | 
 | 5 | |	This file contains workarounds for bugs in the 040 | 
 | 6 | |	relating to the Floating-Point Software Package (FPSP) | 
 | 7 | | | 
 | 8 | |	Fixes for bugs: 1238 | 
 | 9 | | | 
 | 10 | |	Bug: 1238 | 
 | 11 | | | 
 | 12 | | | 
 | 13 | |    /* The following dirty_bit clear should be left in | 
 | 14 | |     * the handler permanently to improve throughput. | 
 | 15 | |     * The dirty_bits are located at bits [23:16] in | 
 | 16 | |     * longword $08 in the busy frame $4x60.  Bit 16 | 
 | 17 | |     * corresponds to FP0, bit 17 corresponds to FP1, | 
 | 18 | |     * and so on. | 
 | 19 | |     */ | 
 | 20 | |    if  (E3_exception_just_serviced)   { | 
 | 21 | |         dirty_bit[cmdreg3b[9:7]] = 0; | 
 | 22 | |         } | 
 | 23 | | | 
 | 24 | |    if  (fsave_format_version != $40)  {goto NOFIX} | 
 | 25 | | | 
 | 26 | |    if !(E3_exception_just_serviced)   {goto NOFIX} | 
 | 27 | |    if  (cupc == 0000000)              {goto NOFIX} | 
 | 28 | |    if  ((cmdreg1b[15:13] != 000) && | 
 | 29 | |         (cmdreg1b[15:10] != 010001))  {goto NOFIX} | 
 | 30 | |    if (((cmdreg1b[15:13] != 000) || ((cmdreg1b[12:10] != cmdreg2b[9:7]) && | 
 | 31 | |				      (cmdreg1b[12:10] != cmdreg3b[9:7]))  ) && | 
 | 32 | |	 ((cmdreg1b[ 9: 7] != cmdreg2b[9:7]) && | 
 | 33 | |	  (cmdreg1b[ 9: 7] != cmdreg3b[9:7])) )  {goto NOFIX} | 
 | 34 | | | 
 | 35 | |    /* Note: for 6d43b or 8d43b, you may want to add the following code | 
 | 36 | |     * to get better coverage.  (If you do not insert this code, the part | 
 | 37 | |     * won't lock up; it will simply get the wrong answer.) | 
 | 38 | |     * Do NOT insert this code for 10d43b or later parts. | 
 | 39 | |     * | 
 | 40 | |     *  if (fpiarcu == integer stack return address) { | 
 | 41 | |     *       cupc = 0000000; | 
 | 42 | |     *       goto NOFIX; | 
 | 43 | |     *       } | 
 | 44 | |     */ | 
 | 45 | | | 
 | 46 | |    if (cmdreg1b[15:13] != 000)   {goto FIX_OPCLASS2} | 
 | 47 | |    FIX_OPCLASS0: | 
 | 48 | |    if (((cmdreg1b[12:10] == cmdreg2b[9:7]) || | 
 | 49 | |	 (cmdreg1b[ 9: 7] == cmdreg2b[9:7])) && | 
 | 50 | |	(cmdreg1b[12:10] != cmdreg3b[9:7]) && | 
 | 51 | |	(cmdreg1b[ 9: 7] != cmdreg3b[9:7]))  {  /* xu conflict only */ | 
 | 52 | |	/* We execute the following code if there is an | 
 | 53 | |	   xu conflict and NOT an nu conflict */ | 
 | 54 | | | 
 | 55 | |	/* first save some values on the fsave frame */ | 
 | 56 | |	stag_temp     = STAG[fsave_frame]; | 
 | 57 | |	cmdreg1b_temp = CMDREG1B[fsave_frame]; | 
 | 58 | |	dtag_temp     = DTAG[fsave_frame]; | 
 | 59 | |	ete15_temp    = ETE15[fsave_frame]; | 
 | 60 | | | 
 | 61 | |	CUPC[fsave_frame] = 0000000; | 
 | 62 | |	FRESTORE | 
 | 63 | |	FSAVE | 
 | 64 | | | 
 | 65 | |	/* If the xu instruction is exceptional, we punt. | 
 | 66 | |	 * Otherwise, we would have to include OVFL/UNFL handler | 
 | 67 | |	 * code here to get the correct answer. | 
 | 68 | |	 */ | 
 | 69 | |	if (fsave_frame_format == $4060) {goto KILL_PROCESS} | 
 | 70 | | | 
 | 71 | |	fsave_frame = /* build a long frame of all zeros */ | 
 | 72 | |	fsave_frame_format = $4060;  /* label it as long frame */ | 
 | 73 | | | 
 | 74 | |	/* load it with the temps we saved */ | 
 | 75 | |	STAG[fsave_frame]     =  stag_temp; | 
 | 76 | |	CMDREG1B[fsave_frame] =  cmdreg1b_temp; | 
 | 77 | |	DTAG[fsave_frame]     =  dtag_temp; | 
 | 78 | |	ETE15[fsave_frame]    =  ete15_temp; | 
 | 79 | | | 
 | 80 | |	/* Make sure that the cmdreg3b dest reg is not going to | 
 | 81 | |	 * be destroyed by a FMOVEM at the end of all this code. | 
 | 82 | |	 * If it is, you should move the current value of the reg | 
 | 83 | |	 * onto the stack so that the reg will loaded with that value. | 
 | 84 | |	 */ | 
 | 85 | | | 
 | 86 | |	/* All done.  Proceed with the code below */ | 
 | 87 | |    } | 
 | 88 | | | 
 | 89 | |    etemp  = FP_reg_[cmdreg1b[12:10]]; | 
 | 90 | |    ete15  = ~ete14; | 
 | 91 | |    cmdreg1b[15:10] = 010010; | 
 | 92 | |    clear(bug_flag_procIDxxxx); | 
 | 93 | |    FRESTORE and return; | 
 | 94 | | | 
 | 95 | | | 
 | 96 | |    FIX_OPCLASS2: | 
 | 97 | |    if ((cmdreg1b[9:7] == cmdreg2b[9:7]) && | 
 | 98 | |	(cmdreg1b[9:7] != cmdreg3b[9:7]))  {  /* xu conflict only */ | 
 | 99 | |	/* We execute the following code if there is an | 
 | 100 | |	   xu conflict and NOT an nu conflict */ | 
 | 101 | | | 
 | 102 | |	/* first save some values on the fsave frame */ | 
 | 103 | |	stag_temp     = STAG[fsave_frame]; | 
 | 104 | |	cmdreg1b_temp = CMDREG1B[fsave_frame]; | 
 | 105 | |	dtag_temp     = DTAG[fsave_frame]; | 
 | 106 | |	ete15_temp    = ETE15[fsave_frame]; | 
 | 107 | |	etemp_temp    = ETEMP[fsave_frame]; | 
 | 108 | | | 
 | 109 | |	CUPC[fsave_frame] = 0000000; | 
 | 110 | |	FRESTORE | 
 | 111 | |	FSAVE | 
 | 112 | | | 
 | 113 | | | 
 | 114 | |	/* If the xu instruction is exceptional, we punt. | 
 | 115 | |	 * Otherwise, we would have to include OVFL/UNFL handler | 
 | 116 | |	 * code here to get the correct answer. | 
 | 117 | |	 */ | 
 | 118 | |	if (fsave_frame_format == $4060) {goto KILL_PROCESS} | 
 | 119 | | | 
 | 120 | |	fsave_frame = /* build a long frame of all zeros */ | 
 | 121 | |	fsave_frame_format = $4060;  /* label it as long frame */ | 
 | 122 | | | 
 | 123 | |	/* load it with the temps we saved */ | 
 | 124 | |	STAG[fsave_frame]     =  stag_temp; | 
 | 125 | |	CMDREG1B[fsave_frame] =  cmdreg1b_temp; | 
 | 126 | |	DTAG[fsave_frame]     =  dtag_temp; | 
 | 127 | |	ETE15[fsave_frame]    =  ete15_temp; | 
 | 128 | |	ETEMP[fsave_frame]    =  etemp_temp; | 
 | 129 | | | 
 | 130 | |	/* Make sure that the cmdreg3b dest reg is not going to | 
 | 131 | |	 * be destroyed by a FMOVEM at the end of all this code. | 
 | 132 | |	 * If it is, you should move the current value of the reg | 
 | 133 | |	 * onto the stack so that the reg will loaded with that value. | 
 | 134 | |	 */ | 
 | 135 | | | 
 | 136 | |	/* All done.  Proceed with the code below */ | 
 | 137 | |    } | 
 | 138 | | | 
 | 139 | |    if (etemp_exponent == min_sgl)   etemp_exponent = min_dbl; | 
 | 140 | |    if (etemp_exponent == max_sgl)   etemp_exponent = max_dbl; | 
 | 141 | |    cmdreg1b[15:10] = 010101; | 
 | 142 | |    clear(bug_flag_procIDxxxx); | 
 | 143 | |    FRESTORE and return; | 
 | 144 | | | 
 | 145 | | | 
 | 146 | |    NOFIX: | 
 | 147 | |    clear(bug_flag_procIDxxxx); | 
 | 148 | |    FRESTORE and return; | 
 | 149 | | | 
 | 150 |  | 
 | 151 |  | 
 | 152 | |		Copyright (C) Motorola, Inc. 1990 | 
 | 153 | |			All Rights Reserved | 
 | 154 | | | 
| Matt Waddel | e00d82d | 2006-02-11 17:55:48 -0800 | [diff] [blame] | 155 | |       For details on the license for this file, please see the | 
 | 156 | |       file, README, in this same directory. | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 157 |  | 
 | 158 | |BUGFIX    idnt    2,1 | Motorola 040 Floating Point Software Package | 
 | 159 |  | 
 | 160 | 	|section	8 | 
 | 161 |  | 
 | 162 | #include "fpsp.h" | 
 | 163 |  | 
 | 164 | 	|xref	fpsp_fmt_error | 
 | 165 |  | 
 | 166 | 	.global	b1238_fix | 
 | 167 | b1238_fix: | 
 | 168 | | | 
 | 169 | | This code is entered only on completion of the handling of an | 
 | 170 | | nu-generated ovfl, unfl, or inex exception.  If the version | 
 | 171 | | number of the fsave is not $40, this handler is not necessary. | 
 | 172 | | Simply branch to fix_done and exit normally. | 
 | 173 | | | 
 | 174 | 	cmpib	#VER_40,4(%a7) | 
 | 175 | 	bne	fix_done | 
 | 176 | | | 
 | 177 | | Test for cu_savepc equal to zero.  If not, this is not a bug | 
 | 178 | | #1238 case. | 
 | 179 | | | 
 | 180 | 	moveb	CU_SAVEPC(%a6),%d0 | 
 | 181 | 	andib	#0xFE,%d0 | 
 | 182 | 	beq	fix_done	|if zero, this is not bug #1238 | 
 | 183 |  | 
 | 184 | | | 
 | 185 | | Test the register conflict aspect.  If opclass0, check for | 
 | 186 | | cu src equal to xu dest or equal to nu dest.  If so, go to | 
 | 187 | | op0.  Else, or if opclass2, check for cu dest equal to | 
 | 188 | | xu dest or equal to nu dest.  If so, go to tst_opcl.  Else, | 
 | 189 | | exit, it is not the bug case. | 
 | 190 | | | 
 | 191 | | Check for opclass 0.  If not, go and check for opclass 2 and sgl. | 
 | 192 | | | 
 | 193 | 	movew	CMDREG1B(%a6),%d0 | 
 | 194 | 	andiw	#0xE000,%d0		|strip all but opclass | 
 | 195 | 	bne	op2sgl			|not opclass 0, check op2 | 
 | 196 | | | 
 | 197 | | Check for cu and nu register conflict.  If one exists, this takes | 
 | 198 | | priority over a cu and xu conflict. | 
 | 199 | | | 
 | 200 | 	bfextu	CMDREG1B(%a6){#3:#3},%d0	|get 1st src | 
 | 201 | 	bfextu	CMDREG3B(%a6){#6:#3},%d1	|get 3rd dest | 
 | 202 | 	cmpb	%d0,%d1 | 
 | 203 | 	beqs	op0			|if equal, continue bugfix | 
 | 204 | | | 
 | 205 | | Check for cu dest equal to nu dest.  If so, go and fix the | 
 | 206 | | bug condition.  Otherwise, exit. | 
 | 207 | | | 
 | 208 | 	bfextu	CMDREG1B(%a6){#6:#3},%d0	|get 1st dest | 
 | 209 | 	cmpb	%d0,%d1			|cmp 1st dest with 3rd dest | 
 | 210 | 	beqs	op0			|if equal, continue bugfix | 
 | 211 | | | 
 | 212 | | Check for cu and xu register conflict. | 
 | 213 | | | 
 | 214 | 	bfextu	CMDREG2B(%a6){#6:#3},%d1	|get 2nd dest | 
 | 215 | 	cmpb	%d0,%d1			|cmp 1st dest with 2nd dest | 
 | 216 | 	beqs	op0_xu			|if equal, continue bugfix | 
 | 217 | 	bfextu	CMDREG1B(%a6){#3:#3},%d0	|get 1st src | 
 | 218 | 	cmpb	%d0,%d1			|cmp 1st src with 2nd dest | 
 | 219 | 	beq	op0_xu | 
 | 220 | 	bne	fix_done		|if the reg checks fail, exit | 
 | 221 | | | 
 | 222 | | We have the opclass 0 situation. | 
 | 223 | | | 
 | 224 | op0: | 
 | 225 | 	bfextu	CMDREG1B(%a6){#3:#3},%d0	|get source register no | 
 | 226 | 	movel	#7,%d1 | 
 | 227 | 	subl	%d0,%d1 | 
 | 228 | 	clrl	%d0 | 
 | 229 | 	bsetl	%d1,%d0 | 
 | 230 | 	fmovemx %d0,ETEMP(%a6)		|load source to ETEMP | 
 | 231 |  | 
 | 232 | 	moveb	#0x12,%d0 | 
 | 233 | 	bfins	%d0,CMDREG1B(%a6){#0:#6}	|opclass 2, extended | 
 | 234 | | | 
 | 235 | |	Set ETEMP exponent bit 15 as the opposite of ete14 | 
 | 236 | | | 
 | 237 | 	btst	#6,ETEMP_EX(%a6)		|check etemp exponent bit 14 | 
 | 238 | 	beq	setete15 | 
 | 239 | 	bclr	#etemp15_bit,STAG(%a6) | 
 | 240 | 	bra	finish | 
 | 241 | setete15: | 
 | 242 | 	bset	#etemp15_bit,STAG(%a6) | 
 | 243 | 	bra	finish | 
 | 244 |  | 
 | 245 | | | 
 | 246 | | We have the case in which a conflict exists between the cu src or | 
 | 247 | | dest and the dest of the xu.  We must clear the instruction in | 
 | 248 | | the cu and restore the state, allowing the instruction in the | 
 | 249 | | xu to complete.  Remember, the instruction in the nu | 
 | 250 | | was exceptional, and was completed by the appropriate handler. | 
 | 251 | | If the result of the xu instruction is not exceptional, we can | 
 | 252 | | restore the instruction from the cu to the frame and continue | 
 | 253 | | processing the original exception.  If the result is also | 
 | 254 | | exceptional, we choose to kill the process. | 
 | 255 | | | 
 | 256 | |	Items saved from the stack: | 
 | 257 | | | 
 | 258 | |		$3c stag     - L_SCR1 | 
 | 259 | |		$40 cmdreg1b - L_SCR2 | 
 | 260 | |		$44 dtag     - L_SCR3 | 
 | 261 | | | 
 | 262 | | The cu savepc is set to zero, and the frame is restored to the | 
 | 263 | | fpu. | 
 | 264 | | | 
 | 265 | op0_xu: | 
 | 266 | 	movel	STAG(%a6),L_SCR1(%a6) | 
 | 267 | 	movel	CMDREG1B(%a6),L_SCR2(%a6) | 
 | 268 | 	movel	DTAG(%a6),L_SCR3(%a6) | 
 | 269 | 	andil	#0xe0000000,L_SCR3(%a6) | 
 | 270 | 	moveb	#0,CU_SAVEPC(%a6) | 
 | 271 | 	movel	(%a7)+,%d1		|save return address from bsr | 
 | 272 | 	frestore (%a7)+ | 
 | 273 | 	fsave	-(%a7) | 
 | 274 | | | 
 | 275 | | Check if the instruction which just completed was exceptional. | 
 | 276 | | | 
 | 277 | 	cmpw	#0x4060,(%a7) | 
 | 278 | 	beq	op0_xb | 
 | 279 | | | 
 | 280 | | It is necessary to isolate the result of the instruction in the | 
 | 281 | | xu if it is to fp0 - fp3 and write that value to the USER_FPn | 
 | 282 | | locations on the stack.  The correct destination register is in | 
 | 283 | | cmdreg2b. | 
 | 284 | | | 
 | 285 | 	bfextu	CMDREG2B(%a6){#6:#3},%d0	|get dest register no | 
 | 286 | 	cmpil	#3,%d0 | 
 | 287 | 	bgts	op0_xi | 
 | 288 | 	beqs	op0_fp3 | 
 | 289 | 	cmpil	#1,%d0 | 
 | 290 | 	blts	op0_fp0 | 
 | 291 | 	beqs	op0_fp1 | 
 | 292 | op0_fp2: | 
 | 293 | 	fmovemx %fp2-%fp2,USER_FP2(%a6) | 
 | 294 | 	bras	op0_xi | 
 | 295 | op0_fp1: | 
 | 296 | 	fmovemx %fp1-%fp1,USER_FP1(%a6) | 
 | 297 | 	bras	op0_xi | 
 | 298 | op0_fp0: | 
 | 299 | 	fmovemx %fp0-%fp0,USER_FP0(%a6) | 
 | 300 | 	bras	op0_xi | 
 | 301 | op0_fp3: | 
 | 302 | 	fmovemx %fp3-%fp3,USER_FP3(%a6) | 
 | 303 | | | 
 | 304 | | The frame returned is idle.  We must build a busy frame to hold | 
 | 305 | | the cu state information and setup etemp. | 
 | 306 | | | 
 | 307 | op0_xi: | 
 | 308 | 	movel	#22,%d0		|clear 23 lwords | 
 | 309 | 	clrl	(%a7) | 
 | 310 | op0_loop: | 
 | 311 | 	clrl	-(%a7) | 
 | 312 | 	dbf	%d0,op0_loop | 
 | 313 | 	movel	#0x40600000,-(%a7) | 
 | 314 | 	movel	L_SCR1(%a6),STAG(%a6) | 
 | 315 | 	movel	L_SCR2(%a6),CMDREG1B(%a6) | 
 | 316 | 	movel	L_SCR3(%a6),DTAG(%a6) | 
 | 317 | 	moveb	#0x6,CU_SAVEPC(%a6) | 
 | 318 | 	movel	%d1,-(%a7)		|return bsr return address | 
 | 319 | 	bfextu	CMDREG1B(%a6){#3:#3},%d0	|get source register no | 
 | 320 | 	movel	#7,%d1 | 
 | 321 | 	subl	%d0,%d1 | 
 | 322 | 	clrl	%d0 | 
 | 323 | 	bsetl	%d1,%d0 | 
 | 324 | 	fmovemx %d0,ETEMP(%a6)		|load source to ETEMP | 
 | 325 |  | 
 | 326 | 	moveb	#0x12,%d0 | 
 | 327 | 	bfins	%d0,CMDREG1B(%a6){#0:#6}	|opclass 2, extended | 
 | 328 | | | 
 | 329 | |	Set ETEMP exponent bit 15 as the opposite of ete14 | 
 | 330 | | | 
 | 331 | 	btst	#6,ETEMP_EX(%a6)		|check etemp exponent bit 14 | 
 | 332 | 	beq	op0_sete15 | 
 | 333 | 	bclr	#etemp15_bit,STAG(%a6) | 
 | 334 | 	bra	finish | 
 | 335 | op0_sete15: | 
 | 336 | 	bset	#etemp15_bit,STAG(%a6) | 
 | 337 | 	bra	finish | 
 | 338 |  | 
 | 339 | | | 
 | 340 | | The frame returned is busy.  It is not possible to reconstruct | 
 | 341 | | the code sequence to allow completion.  We will jump to | 
 | 342 | | fpsp_fmt_error and allow the kernel to kill the process. | 
 | 343 | | | 
 | 344 | op0_xb: | 
 | 345 | 	jmp	fpsp_fmt_error | 
 | 346 |  | 
 | 347 | | | 
 | 348 | | Check for opclass 2 and single size.  If not both, exit. | 
 | 349 | | | 
 | 350 | op2sgl: | 
 | 351 | 	movew	CMDREG1B(%a6),%d0 | 
 | 352 | 	andiw	#0xFC00,%d0		|strip all but opclass and size | 
 | 353 | 	cmpiw	#0x4400,%d0		|test for opclass 2 and size=sgl | 
 | 354 | 	bne	fix_done		|if not, it is not bug 1238 | 
 | 355 | | | 
 | 356 | | Check for cu dest equal to nu dest or equal to xu dest, with | 
 | 357 | | a cu and nu conflict taking priority an nu conflict.  If either, | 
 | 358 | | go and fix the bug condition.  Otherwise, exit. | 
 | 359 | | | 
 | 360 | 	bfextu	CMDREG1B(%a6){#6:#3},%d0	|get 1st dest | 
 | 361 | 	bfextu	CMDREG3B(%a6){#6:#3},%d1	|get 3rd dest | 
 | 362 | 	cmpb	%d0,%d1			|cmp 1st dest with 3rd dest | 
 | 363 | 	beq	op2_com			|if equal, continue bugfix | 
 | 364 | 	bfextu	CMDREG2B(%a6){#6:#3},%d1	|get 2nd dest | 
 | 365 | 	cmpb	%d0,%d1			|cmp 1st dest with 2nd dest | 
 | 366 | 	bne	fix_done		|if the reg checks fail, exit | 
 | 367 | | | 
 | 368 | | We have the case in which a conflict exists between the cu src or | 
 | 369 | | dest and the dest of the xu.  We must clear the instruction in | 
 | 370 | | the cu and restore the state, allowing the instruction in the | 
 | 371 | | xu to complete.  Remember, the instruction in the nu | 
 | 372 | | was exceptional, and was completed by the appropriate handler. | 
 | 373 | | If the result of the xu instruction is not exceptional, we can | 
 | 374 | | restore the instruction from the cu to the frame and continue | 
 | 375 | | processing the original exception.  If the result is also | 
 | 376 | | exceptional, we choose to kill the process. | 
 | 377 | | | 
 | 378 | |	Items saved from the stack: | 
 | 379 | | | 
 | 380 | |		$3c stag     - L_SCR1 | 
 | 381 | |		$40 cmdreg1b - L_SCR2 | 
 | 382 | |		$44 dtag     - L_SCR3 | 
 | 383 | |		etemp        - FP_SCR2 | 
 | 384 | | | 
 | 385 | | The cu savepc is set to zero, and the frame is restored to the | 
 | 386 | | fpu. | 
 | 387 | | | 
 | 388 | op2_xu: | 
 | 389 | 	movel	STAG(%a6),L_SCR1(%a6) | 
 | 390 | 	movel	CMDREG1B(%a6),L_SCR2(%a6) | 
 | 391 | 	movel	DTAG(%a6),L_SCR3(%a6) | 
 | 392 | 	andil	#0xe0000000,L_SCR3(%a6) | 
 | 393 | 	moveb	#0,CU_SAVEPC(%a6) | 
 | 394 | 	movel	ETEMP(%a6),FP_SCR2(%a6) | 
 | 395 | 	movel	ETEMP_HI(%a6),FP_SCR2+4(%a6) | 
 | 396 | 	movel	ETEMP_LO(%a6),FP_SCR2+8(%a6) | 
 | 397 | 	movel	(%a7)+,%d1		|save return address from bsr | 
 | 398 | 	frestore (%a7)+ | 
 | 399 | 	fsave	-(%a7) | 
 | 400 | | | 
 | 401 | | Check if the instruction which just completed was exceptional. | 
 | 402 | | | 
 | 403 | 	cmpw	#0x4060,(%a7) | 
 | 404 | 	beq	op2_xb | 
 | 405 | | | 
 | 406 | | It is necessary to isolate the result of the instruction in the | 
 | 407 | | xu if it is to fp0 - fp3 and write that value to the USER_FPn | 
 | 408 | | locations on the stack.  The correct destination register is in | 
 | 409 | | cmdreg2b. | 
 | 410 | | | 
 | 411 | 	bfextu	CMDREG2B(%a6){#6:#3},%d0	|get dest register no | 
 | 412 | 	cmpil	#3,%d0 | 
 | 413 | 	bgts	op2_xi | 
 | 414 | 	beqs	op2_fp3 | 
 | 415 | 	cmpil	#1,%d0 | 
 | 416 | 	blts	op2_fp0 | 
 | 417 | 	beqs	op2_fp1 | 
 | 418 | op2_fp2: | 
 | 419 | 	fmovemx %fp2-%fp2,USER_FP2(%a6) | 
 | 420 | 	bras	op2_xi | 
 | 421 | op2_fp1: | 
 | 422 | 	fmovemx %fp1-%fp1,USER_FP1(%a6) | 
 | 423 | 	bras	op2_xi | 
 | 424 | op2_fp0: | 
 | 425 | 	fmovemx %fp0-%fp0,USER_FP0(%a6) | 
 | 426 | 	bras	op2_xi | 
 | 427 | op2_fp3: | 
 | 428 | 	fmovemx %fp3-%fp3,USER_FP3(%a6) | 
 | 429 | | | 
 | 430 | | The frame returned is idle.  We must build a busy frame to hold | 
 | 431 | | the cu state information and fix up etemp. | 
 | 432 | | | 
 | 433 | op2_xi: | 
 | 434 | 	movel	#22,%d0		|clear 23 lwords | 
 | 435 | 	clrl	(%a7) | 
 | 436 | op2_loop: | 
 | 437 | 	clrl	-(%a7) | 
 | 438 | 	dbf	%d0,op2_loop | 
 | 439 | 	movel	#0x40600000,-(%a7) | 
 | 440 | 	movel	L_SCR1(%a6),STAG(%a6) | 
 | 441 | 	movel	L_SCR2(%a6),CMDREG1B(%a6) | 
 | 442 | 	movel	L_SCR3(%a6),DTAG(%a6) | 
 | 443 | 	moveb	#0x6,CU_SAVEPC(%a6) | 
 | 444 | 	movel	FP_SCR2(%a6),ETEMP(%a6) | 
 | 445 | 	movel	FP_SCR2+4(%a6),ETEMP_HI(%a6) | 
 | 446 | 	movel	FP_SCR2+8(%a6),ETEMP_LO(%a6) | 
 | 447 | 	movel	%d1,-(%a7) | 
 | 448 | 	bra	op2_com | 
 | 449 |  | 
 | 450 | | | 
 | 451 | | We have the opclass 2 single source situation. | 
 | 452 | | | 
 | 453 | op2_com: | 
 | 454 | 	moveb	#0x15,%d0 | 
 | 455 | 	bfins	%d0,CMDREG1B(%a6){#0:#6}	|opclass 2, double | 
 | 456 |  | 
 | 457 | 	cmpw	#0x407F,ETEMP_EX(%a6)	|single +max | 
 | 458 | 	bnes	case2 | 
 | 459 | 	movew	#0x43FF,ETEMP_EX(%a6)	|to double +max | 
 | 460 | 	bra	finish | 
 | 461 | case2: | 
 | 462 | 	cmpw	#0xC07F,ETEMP_EX(%a6)	|single -max | 
 | 463 | 	bnes	case3 | 
 | 464 | 	movew	#0xC3FF,ETEMP_EX(%a6)	|to double -max | 
 | 465 | 	bra	finish | 
 | 466 | case3: | 
 | 467 | 	cmpw	#0x3F80,ETEMP_EX(%a6)	|single +min | 
 | 468 | 	bnes	case4 | 
 | 469 | 	movew	#0x3C00,ETEMP_EX(%a6)	|to double +min | 
 | 470 | 	bra	finish | 
 | 471 | case4: | 
 | 472 | 	cmpw	#0xBF80,ETEMP_EX(%a6)	|single -min | 
 | 473 | 	bne	fix_done | 
 | 474 | 	movew	#0xBC00,ETEMP_EX(%a6)	|to double -min | 
 | 475 | 	bra	finish | 
 | 476 | | | 
 | 477 | | The frame returned is busy.  It is not possible to reconstruct | 
 | 478 | | the code sequence to allow completion.  fpsp_fmt_error causes | 
 | 479 | | an fline illegal instruction to be executed. | 
 | 480 | | | 
 | 481 | | You should replace the jump to fpsp_fmt_error with a jump | 
 | 482 | | to the entry point used to kill a process. | 
 | 483 | | | 
 | 484 | op2_xb: | 
 | 485 | 	jmp	fpsp_fmt_error | 
 | 486 |  | 
 | 487 | | | 
 | 488 | | Enter here if the case is not of the situations affected by | 
 | 489 | | bug #1238, or if the fix is completed, and exit. | 
 | 490 | | | 
 | 491 | finish: | 
 | 492 | fix_done: | 
 | 493 | 	rts | 
 | 494 |  | 
 | 495 | 	|end |