qemu-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Qemu-devel] [PATCH for 2.13 4/5] linux-user: cleanup cpu_loop()


From: Philippe Mathieu-Daudé
Subject: Re: [Qemu-devel] [PATCH for 2.13 4/5] linux-user: cleanup cpu_loop()
Date: Thu, 22 Mar 2018 23:21:01 -0300
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0

On 03/22/2018 06:58 PM, Laurent Vivier wrote:
> move all target specific cpu_loop parts to
> cpu_loop.inc.c in arch directory
> 
> Signed-off-by: Laurent Vivier <address@hidden>

Reviewed-by: Philippe Mathieu-Daudé <address@hidden>

> ---
>  linux-user/aarch64/cpu_loop.inc.c    |    1 +
>  linux-user/alpha/cpu_loop.inc.c      |  191 ++
>  linux-user/arm/cpu_loop.inc.c        |  488 +++++
>  linux-user/cris/cpu_loop.inc.c       |   67 +
>  linux-user/hppa/cpu_loop.inc.c       |  178 ++
>  linux-user/i386/cpu_loop.inc.c       |  229 ++
>  linux-user/m68k/cpu_loop.inc.c       |  115 +
>  linux-user/main.c                    | 3918 
> +---------------------------------
>  linux-user/microblaze/cpu_loop.inc.c |  116 +
>  linux-user/mips/cpu_loop.inc.c       |  695 ++++++
>  linux-user/mips64/cpu_loop.inc.c     |    1 +
>  linux-user/nios2/cpu_loop.inc.c      |   98 +
>  linux-user/openrisc/cpu_loop.inc.c   |   81 +
>  linux-user/ppc/cpu_loop.inc.c        |  538 +++++
>  linux-user/riscv/cpu_loop.inc.c      |   89 +
>  linux-user/s390x/cpu_loop.inc.c      |  132 ++
>  linux-user/sh4/cpu_loop.inc.c        |   78 +
>  linux-user/sparc/cpu_loop.inc.c      |  271 +++
>  linux-user/sparc64/cpu_loop.inc.c    |    1 +
>  linux-user/tilegx/cpu_loop.inc.c     |  251 +++
>  linux-user/x86_64/cpu_loop.inc.c     |    1 +
>  linux-user/xtensa/cpu_loop.inc.c     |  231 ++
>  22 files changed, 3853 insertions(+), 3917 deletions(-)
>  create mode 100644 linux-user/aarch64/cpu_loop.inc.c
>  create mode 100644 linux-user/alpha/cpu_loop.inc.c
>  create mode 100644 linux-user/arm/cpu_loop.inc.c
>  create mode 100644 linux-user/cris/cpu_loop.inc.c
>  create mode 100644 linux-user/hppa/cpu_loop.inc.c
>  create mode 100644 linux-user/i386/cpu_loop.inc.c
>  create mode 100644 linux-user/m68k/cpu_loop.inc.c
>  create mode 100644 linux-user/microblaze/cpu_loop.inc.c
>  create mode 100644 linux-user/mips/cpu_loop.inc.c
>  create mode 100644 linux-user/mips64/cpu_loop.inc.c
>  create mode 100644 linux-user/nios2/cpu_loop.inc.c
>  create mode 100644 linux-user/openrisc/cpu_loop.inc.c
>  create mode 100644 linux-user/ppc/cpu_loop.inc.c
>  create mode 100644 linux-user/riscv/cpu_loop.inc.c
>  create mode 100644 linux-user/s390x/cpu_loop.inc.c
>  create mode 100644 linux-user/sh4/cpu_loop.inc.c
>  create mode 100644 linux-user/sparc/cpu_loop.inc.c
>  create mode 100644 linux-user/sparc64/cpu_loop.inc.c
>  create mode 100644 linux-user/tilegx/cpu_loop.inc.c
>  create mode 100644 linux-user/x86_64/cpu_loop.inc.c
>  create mode 100644 linux-user/xtensa/cpu_loop.inc.c
> 
> diff --git a/linux-user/aarch64/cpu_loop.inc.c 
> b/linux-user/aarch64/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..a9a57861e7
> --- /dev/null
> +++ b/linux-user/aarch64/cpu_loop.inc.c
> @@ -0,0 +1 @@
> +#include "../arm/cpu_loop.inc.c"
> diff --git a/linux-user/alpha/cpu_loop.inc.c b/linux-user/alpha/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..e9426bdb1a
> --- /dev/null
> +++ b/linux-user/alpha/cpu_loop.inc.c
> @@ -0,0 +1,191 @@
> +void cpu_loop(CPUAlphaState *env)
> +{
> +    CPUState *cs = CPU(alpha_env_get_cpu(env));
> +    int trapnr;
> +    target_siginfo_t info;
> +    abi_long sysret;
> +
> +    while (1) {
> +        bool arch_interrupt = true;
> +
> +        cpu_exec_start(cs);
> +        trapnr = cpu_exec(cs);
> +        cpu_exec_end(cs);
> +        process_queued_cpu_work(cs);
> +
> +        switch (trapnr) {
> +        case EXCP_RESET:
> +            fprintf(stderr, "Reset requested. Exit\n");
> +            exit(EXIT_FAILURE);
> +            break;
> +        case EXCP_MCHK:
> +            fprintf(stderr, "Machine check exception. Exit\n");
> +            exit(EXIT_FAILURE);
> +            break;
> +        case EXCP_SMP_INTERRUPT:
> +        case EXCP_CLK_INTERRUPT:
> +        case EXCP_DEV_INTERRUPT:
> +            fprintf(stderr, "External interrupt. Exit\n");
> +            exit(EXIT_FAILURE);
> +            break;
> +        case EXCP_MMFAULT:
> +            info.si_signo = TARGET_SIGSEGV;
> +            info.si_errno = 0;
> +            info.si_code = (page_get_flags(env->trap_arg0) & PAGE_VALID
> +                            ? TARGET_SEGV_ACCERR : TARGET_SEGV_MAPERR);
> +            info._sifields._sigfault._addr = env->trap_arg0;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_UNALIGN:
> +            info.si_signo = TARGET_SIGBUS;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_BUS_ADRALN;
> +            info._sifields._sigfault._addr = env->trap_arg0;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_OPCDEC:
> +        do_sigill:
> +            info.si_signo = TARGET_SIGILL;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_ILL_ILLOPC;
> +            info._sifields._sigfault._addr = env->pc;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_ARITH:
> +            info.si_signo = TARGET_SIGFPE;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_FPE_FLTINV;
> +            info._sifields._sigfault._addr = env->pc;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_FEN:
> +            /* No-op.  Linux simply re-enables the FPU.  */
> +            break;
> +        case EXCP_CALL_PAL:
> +            switch (env->error_code) {
> +            case 0x80:
> +                /* BPT */
> +                info.si_signo = TARGET_SIGTRAP;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_TRAP_BRKPT;
> +                info._sifields._sigfault._addr = env->pc;
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                break;
> +            case 0x81:
> +                /* BUGCHK */
> +                info.si_signo = TARGET_SIGTRAP;
> +                info.si_errno = 0;
> +                info.si_code = 0;
> +                info._sifields._sigfault._addr = env->pc;
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                break;
> +            case 0x83:
> +                /* CALLSYS */
> +                trapnr = env->ir[IR_V0];
> +                sysret = do_syscall(env, trapnr,
> +                                    env->ir[IR_A0], env->ir[IR_A1],
> +                                    env->ir[IR_A2], env->ir[IR_A3],
> +                                    env->ir[IR_A4], env->ir[IR_A5],
> +                                    0, 0);
> +                if (sysret == -TARGET_ERESTARTSYS) {
> +                    env->pc -= 4;
> +                    break;
> +                }
> +                if (sysret == -TARGET_QEMU_ESIGRETURN) {
> +                    break;
> +                }
> +                /* Syscall writes 0 to V0 to bypass error check, similar
> +                   to how this is handled internal to Linux kernel.
> +                   (Ab)use trapnr temporarily as boolean indicating error.  
> */
> +                trapnr = (env->ir[IR_V0] != 0 && sysret < 0);
> +                env->ir[IR_V0] = (trapnr ? -sysret : sysret);
> +                env->ir[IR_A3] = trapnr;
> +                break;
> +            case 0x86:
> +                /* IMB */
> +                /* ??? We can probably elide the code using page_unprotect
> +                   that is checking for self-modifying code.  Instead we
> +                   could simply call tb_flush here.  Until we work out the
> +                   changes required to turn off the extra write protection,
> +                   this can be a no-op.  */
> +                break;
> +            case 0x9E:
> +                /* RDUNIQUE */
> +                /* Handled in the translator for usermode.  */
> +                abort();
> +            case 0x9F:
> +                /* WRUNIQUE */
> +                /* Handled in the translator for usermode.  */
> +                abort();
> +            case 0xAA:
> +                /* GENTRAP */
> +                info.si_signo = TARGET_SIGFPE;
> +                switch (env->ir[IR_A0]) {
> +                case TARGET_GEN_INTOVF:
> +                    info.si_code = TARGET_FPE_INTOVF;
> +                    break;
> +                case TARGET_GEN_INTDIV:
> +                    info.si_code = TARGET_FPE_INTDIV;
> +                    break;
> +                case TARGET_GEN_FLTOVF:
> +                    info.si_code = TARGET_FPE_FLTOVF;
> +                    break;
> +                case TARGET_GEN_FLTUND:
> +                    info.si_code = TARGET_FPE_FLTUND;
> +                    break;
> +                case TARGET_GEN_FLTINV:
> +                    info.si_code = TARGET_FPE_FLTINV;
> +                    break;
> +                case TARGET_GEN_FLTINE:
> +                    info.si_code = TARGET_FPE_FLTRES;
> +                    break;
> +                case TARGET_GEN_ROPRAND:
> +                    info.si_code = 0;
> +                    break;
> +                default:
> +                    info.si_signo = TARGET_SIGTRAP;
> +                    info.si_code = 0;
> +                    break;
> +                }
> +                info.si_errno = 0;
> +                info._sifields._sigfault._addr = env->pc;
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                break;
> +            default:
> +                goto do_sigill;
> +            }
> +            break;
> +        case EXCP_DEBUG:
> +            info.si_signo = gdb_handlesig(cs, TARGET_SIGTRAP);
> +            if (info.si_signo) {
> +                info.si_errno = 0;
> +                info.si_code = TARGET_TRAP_BRKPT;
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            } else {
> +                arch_interrupt = false;
> +            }
> +            break;
> +        case EXCP_INTERRUPT:
> +            /* Just indicate that signals should be handled asap.  */
> +            break;
> +        case EXCP_ATOMIC:
> +            cpu_exec_step_atomic(cs);
> +            arch_interrupt = false;
> +            break;
> +        default:
> +            printf ("Unhandled trap: 0x%x\n", trapnr);
> +            cpu_dump_state(cs, stderr, fprintf, 0);
> +            exit(EXIT_FAILURE);
> +        }
> +        process_pending_signals (env);
> +
> +        /* Most of the traps imply a transition through PALcode, which
> +           implies an REI instruction has been executed.  Which means
> +           that RX and LOCK_ADDR should be cleared.  But there are a
> +           few exceptions for traps internal to QEMU.  */
> +        if (arch_interrupt) {
> +            env->flags &= ~ENV_FLAG_RX_FLAG;
> +            env->lock_addr = -1;
> +        }
> +    }
> +}
> diff --git a/linux-user/arm/cpu_loop.inc.c b/linux-user/arm/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..887381d6bd
> --- /dev/null
> +++ b/linux-user/arm/cpu_loop.inc.c
> @@ -0,0 +1,488 @@
> +#define get_user_code_u32(x, gaddr, env)                \
> +    ({ abi_long __r = get_user_u32((x), (gaddr));       \
> +        if (!__r && bswap_code(arm_sctlr_b(env))) {     \
> +            (x) = bswap32(x);                           \
> +        }                                               \
> +        __r;                                            \
> +    })
> +
> +#define get_user_code_u16(x, gaddr, env)                \
> +    ({ abi_long __r = get_user_u16((x), (gaddr));       \
> +        if (!__r && bswap_code(arm_sctlr_b(env))) {     \
> +            (x) = bswap16(x);                           \
> +        }                                               \
> +        __r;                                            \
> +    })
> +
> +#define get_user_data_u32(x, gaddr, env)                \
> +    ({ abi_long __r = get_user_u32((x), (gaddr));       \
> +        if (!__r && arm_cpu_bswap_data(env)) {          \
> +            (x) = bswap32(x);                           \
> +        }                                               \
> +        __r;                                            \
> +    })
> +
> +#define get_user_data_u16(x, gaddr, env)                \
> +    ({ abi_long __r = get_user_u16((x), (gaddr));       \
> +        if (!__r && arm_cpu_bswap_data(env)) {          \
> +            (x) = bswap16(x);                           \
> +        }                                               \
> +        __r;                                            \
> +    })
> +
> +#define put_user_data_u32(x, gaddr, env)                \
> +    ({ typeof(x) __x = (x);                             \
> +        if (arm_cpu_bswap_data(env)) {                  \
> +            __x = bswap32(__x);                         \
> +        }                                               \
> +        put_user_u32(__x, (gaddr));                     \
> +    })
> +
> +#define put_user_data_u16(x, gaddr, env)                \
> +    ({ typeof(x) __x = (x);                             \
> +        if (arm_cpu_bswap_data(env)) {                  \
> +            __x = bswap16(__x);                         \
> +        }                                               \
> +        put_user_u16(__x, (gaddr));                     \
> +    })
> +
> +#ifdef TARGET_ABI32
> +/* Commpage handling -- there is no commpage for AArch64 */
> +
> +/*
> + * See the Linux kernel's Documentation/arm/kernel_user_helpers.txt
> + * Input:
> + * r0 = pointer to oldval
> + * r1 = pointer to newval
> + * r2 = pointer to target value
> + *
> + * Output:
> + * r0 = 0 if *ptr was changed, non-0 if no exchange happened
> + * C set if *ptr was changed, clear if no exchange happened
> + *
> + * Note segv's in kernel helpers are a bit tricky, we can set the
> + * data address sensibly but the PC address is just the entry point.
> + */
> +static void arm_kernel_cmpxchg64_helper(CPUARMState *env)
> +{
> +    uint64_t oldval, newval, val;
> +    uint32_t addr, cpsr;
> +    target_siginfo_t info;
> +
> +    /* Based on the 32 bit code in do_kernel_trap */
> +
> +    /* XXX: This only works between threads, not between processes.
> +       It's probably possible to implement this with native host
> +       operations. However things like ldrex/strex are much harder so
> +       there's not much point trying.  */
> +    start_exclusive();
> +    cpsr = cpsr_read(env);
> +    addr = env->regs[2];
> +
> +    if (get_user_u64(oldval, env->regs[0])) {
> +        env->exception.vaddress = env->regs[0];
> +        goto segv;
> +    };
> +
> +    if (get_user_u64(newval, env->regs[1])) {
> +        env->exception.vaddress = env->regs[1];
> +        goto segv;
> +    };
> +
> +    if (get_user_u64(val, addr)) {
> +        env->exception.vaddress = addr;
> +        goto segv;
> +    }
> +
> +    if (val == oldval) {
> +        val = newval;
> +
> +        if (put_user_u64(val, addr)) {
> +            env->exception.vaddress = addr;
> +            goto segv;
> +        };
> +
> +        env->regs[0] = 0;
> +        cpsr |= CPSR_C;
> +    } else {
> +        env->regs[0] = -1;
> +        cpsr &= ~CPSR_C;
> +    }
> +    cpsr_write(env, cpsr, CPSR_C, CPSRWriteByInstr);
> +    end_exclusive();
> +    return;
> +
> +segv:
> +    end_exclusive();
> +    /* We get the PC of the entry address - which is as good as anything,
> +       on a real kernel what you get depends on which mode it uses. */
> +    info.si_signo = TARGET_SIGSEGV;
> +    info.si_errno = 0;
> +    /* XXX: check env->error_code */
> +    info.si_code = TARGET_SEGV_MAPERR;
> +    info._sifields._sigfault._addr = env->exception.vaddress;
> +    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +}
> +
> +/* Handle a jump to the kernel code page.  */
> +static int
> +do_kernel_trap(CPUARMState *env)
> +{
> +    uint32_t addr;
> +    uint32_t cpsr;
> +    uint32_t val;
> +
> +    switch (env->regs[15]) {
> +    case 0xffff0fa0: /* __kernel_memory_barrier */
> +        /* ??? No-op. Will need to do better for SMP.  */
> +        break;
> +    case 0xffff0fc0: /* __kernel_cmpxchg */
> +         /* XXX: This only works between threads, not between processes.
> +            It's probably possible to implement this with native host
> +            operations. However things like ldrex/strex are much harder so
> +            there's not much point trying.  */
> +        start_exclusive();
> +        cpsr = cpsr_read(env);
> +        addr = env->regs[2];
> +        /* FIXME: This should SEGV if the access fails.  */
> +        if (get_user_u32(val, addr))
> +            val = ~env->regs[0];
> +        if (val == env->regs[0]) {
> +            val = env->regs[1];
> +            /* FIXME: Check for segfaults.  */
> +            put_user_u32(val, addr);
> +            env->regs[0] = 0;
> +            cpsr |= CPSR_C;
> +        } else {
> +            env->regs[0] = -1;
> +            cpsr &= ~CPSR_C;
> +        }
> +        cpsr_write(env, cpsr, CPSR_C, CPSRWriteByInstr);
> +        end_exclusive();
> +        break;
> +    case 0xffff0fe0: /* __kernel_get_tls */
> +        env->regs[0] = cpu_get_tls(env);
> +        break;
> +    case 0xffff0f60: /* __kernel_cmpxchg64 */
> +        arm_kernel_cmpxchg64_helper(env);
> +        break;
> +
> +    default:
> +        return 1;
> +    }
> +    /* Jump back to the caller.  */
> +    addr = env->regs[14];
> +    if (addr & 1) {
> +        env->thumb = 1;
> +        addr &= ~1;
> +    }
> +    env->regs[15] = addr;
> +
> +    return 0;
> +}
> +
> +void cpu_loop(CPUARMState *env)
> +{
> +    CPUState *cs = CPU(arm_env_get_cpu(env));
> +    int trapnr;
> +    unsigned int n, insn;
> +    target_siginfo_t info;
> +    uint32_t addr;
> +    abi_ulong ret;
> +
> +    for(;;) {
> +        cpu_exec_start(cs);
> +        trapnr = cpu_exec(cs);
> +        cpu_exec_end(cs);
> +        process_queued_cpu_work(cs);
> +
> +        switch(trapnr) {
> +        case EXCP_UDEF:
> +        case EXCP_NOCP:
> +        case EXCP_INVSTATE:
> +            {
> +                TaskState *ts = cs->opaque;
> +                uint32_t opcode;
> +                int rc;
> +
> +                /* we handle the FPU emulation here, as Linux */
> +                /* we get the opcode */
> +                /* FIXME - what to do if get_user() fails? */
> +                get_user_code_u32(opcode, env->regs[15], env);
> +
> +                rc = EmulateAll(opcode, &ts->fpa, env);
> +                if (rc == 0) { /* illegal instruction */
> +                    info.si_signo = TARGET_SIGILL;
> +                    info.si_errno = 0;
> +                    info.si_code = TARGET_ILL_ILLOPN;
> +                    info._sifields._sigfault._addr = env->regs[15];
> +                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                } else if (rc < 0) { /* FP exception */
> +                    int arm_fpe=0;
> +
> +                    /* translate softfloat flags to FPSR flags */
> +                    if (-rc & float_flag_invalid)
> +                      arm_fpe |= BIT_IOC;
> +                    if (-rc & float_flag_divbyzero)
> +                      arm_fpe |= BIT_DZC;
> +                    if (-rc & float_flag_overflow)
> +                      arm_fpe |= BIT_OFC;
> +                    if (-rc & float_flag_underflow)
> +                      arm_fpe |= BIT_UFC;
> +                    if (-rc & float_flag_inexact)
> +                      arm_fpe |= BIT_IXC;
> +
> +                    FPSR fpsr = ts->fpa.fpsr;
> +                    //printf("fpsr 0x%x, arm_fpe 0x%x\n",fpsr,arm_fpe);
> +
> +                    if (fpsr & (arm_fpe << 16)) { /* exception enabled? */
> +                      info.si_signo = TARGET_SIGFPE;
> +                      info.si_errno = 0;
> +
> +                      /* ordered by priority, least first */
> +                      if (arm_fpe & BIT_IXC) info.si_code = 
> TARGET_FPE_FLTRES;
> +                      if (arm_fpe & BIT_UFC) info.si_code = 
> TARGET_FPE_FLTUND;
> +                      if (arm_fpe & BIT_OFC) info.si_code = 
> TARGET_FPE_FLTOVF;
> +                      if (arm_fpe & BIT_DZC) info.si_code = 
> TARGET_FPE_FLTDIV;
> +                      if (arm_fpe & BIT_IOC) info.si_code = 
> TARGET_FPE_FLTINV;
> +
> +                      info._sifields._sigfault._addr = env->regs[15];
> +                      queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                    } else {
> +                      env->regs[15] += 4;
> +                    }
> +
> +                    /* accumulate unenabled exceptions */
> +                    if ((!(fpsr & BIT_IXE)) && (arm_fpe & BIT_IXC))
> +                      fpsr |= BIT_IXC;
> +                    if ((!(fpsr & BIT_UFE)) && (arm_fpe & BIT_UFC))
> +                      fpsr |= BIT_UFC;
> +                    if ((!(fpsr & BIT_OFE)) && (arm_fpe & BIT_OFC))
> +                      fpsr |= BIT_OFC;
> +                    if ((!(fpsr & BIT_DZE)) && (arm_fpe & BIT_DZC))
> +                      fpsr |= BIT_DZC;
> +                    if ((!(fpsr & BIT_IOE)) && (arm_fpe & BIT_IOC))
> +                      fpsr |= BIT_IOC;
> +                    ts->fpa.fpsr=fpsr;
> +                } else { /* everything OK */
> +                    /* increment PC */
> +                    env->regs[15] += 4;
> +                }
> +            }
> +            break;
> +        case EXCP_SWI:
> +        case EXCP_BKPT:
> +            {
> +                env->eabi = 1;
> +                /* system call */
> +                if (trapnr == EXCP_BKPT) {
> +                    if (env->thumb) {
> +                        /* FIXME - what to do if get_user() fails? */
> +                        get_user_code_u16(insn, env->regs[15], env);
> +                        n = insn & 0xff;
> +                        env->regs[15] += 2;
> +                    } else {
> +                        /* FIXME - what to do if get_user() fails? */
> +                        get_user_code_u32(insn, env->regs[15], env);
> +                        n = (insn & 0xf) | ((insn >> 4) & 0xff0);
> +                        env->regs[15] += 4;
> +                    }
> +                } else {
> +                    if (env->thumb) {
> +                        /* FIXME - what to do if get_user() fails? */
> +                        get_user_code_u16(insn, env->regs[15] - 2, env);
> +                        n = insn & 0xff;
> +                    } else {
> +                        /* FIXME - what to do if get_user() fails? */
> +                        get_user_code_u32(insn, env->regs[15] - 4, env);
> +                        n = insn & 0xffffff;
> +                    }
> +                }
> +
> +                if (n == ARM_NR_cacheflush) {
> +                    /* nop */
> +                } else if (n == ARM_NR_semihosting
> +                           || n == ARM_NR_thumb_semihosting) {
> +                    env->regs[0] = do_arm_semihosting (env);
> +                } else if (n == 0 || n >= ARM_SYSCALL_BASE || env->thumb) {
> +                    /* linux syscall */
> +                    if (env->thumb || n == 0) {
> +                        n = env->regs[7];
> +                    } else {
> +                        n -= ARM_SYSCALL_BASE;
> +                        env->eabi = 0;
> +                    }
> +                    if ( n > ARM_NR_BASE) {
> +                        switch (n) {
> +                        case ARM_NR_cacheflush:
> +                            /* nop */
> +                            break;
> +                        case ARM_NR_set_tls:
> +                            cpu_set_tls(env, env->regs[0]);
> +                            env->regs[0] = 0;
> +                            break;
> +                        case ARM_NR_breakpoint:
> +                            env->regs[15] -= env->thumb ? 2 : 4;
> +                            goto excp_debug;
> +                        default:
> +                            gemu_log("qemu: Unsupported ARM syscall: 0x%x\n",
> +                                     n);
> +                            env->regs[0] = -TARGET_ENOSYS;
> +                            break;
> +                        }
> +                    } else {
> +                        ret = do_syscall(env,
> +                                         n,
> +                                         env->regs[0],
> +                                         env->regs[1],
> +                                         env->regs[2],
> +                                         env->regs[3],
> +                                         env->regs[4],
> +                                         env->regs[5],
> +                                         0, 0);
> +                        if (ret == -TARGET_ERESTARTSYS) {
> +                            env->regs[15] -= env->thumb ? 2 : 4;
> +                        } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> +                            env->regs[0] = ret;
> +                        }
> +                    }
> +                } else {
> +                    goto error;
> +                }
> +            }
> +            break;
> +        case EXCP_SEMIHOST:
> +            env->regs[0] = do_arm_semihosting(env);
> +            break;
> +        case EXCP_INTERRUPT:
> +            /* just indicate that signals should be handled asap */
> +            break;
> +        case EXCP_PREFETCH_ABORT:
> +        case EXCP_DATA_ABORT:
> +            addr = env->exception.vaddress;
> +            {
> +                info.si_signo = TARGET_SIGSEGV;
> +                info.si_errno = 0;
> +                /* XXX: check env->error_code */
> +                info.si_code = TARGET_SEGV_MAPERR;
> +                info._sifields._sigfault._addr = addr;
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            }
> +            break;
> +        case EXCP_DEBUG:
> +        excp_debug:
> +            {
> +                int sig;
> +
> +                sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> +                if (sig)
> +                  {
> +                    info.si_signo = sig;
> +                    info.si_errno = 0;
> +                    info.si_code = TARGET_TRAP_BRKPT;
> +                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                  }
> +            }
> +            break;
> +        case EXCP_KERNEL_TRAP:
> +            if (do_kernel_trap(env))
> +              goto error;
> +            break;
> +        case EXCP_YIELD:
> +            /* nothing to do here for user-mode, just resume guest code */
> +            break;
> +        case EXCP_ATOMIC:
> +            cpu_exec_step_atomic(cs);
> +            break;
> +        default:
> +        error:
> +            EXCP_DUMP(env, "qemu: unhandled CPU exception 0x%x - 
> aborting\n", trapnr);
> +            abort();
> +        }
> +        process_pending_signals(env);
> +    }
> +}
> +
> +#else
> +
> +/* AArch64 main loop */
> +void cpu_loop(CPUARMState *env)
> +{
> +    CPUState *cs = CPU(arm_env_get_cpu(env));
> +    int trapnr, sig;
> +    abi_long ret;
> +    target_siginfo_t info;
> +
> +    for (;;) {
> +        cpu_exec_start(cs);
> +        trapnr = cpu_exec(cs);
> +        cpu_exec_end(cs);
> +        process_queued_cpu_work(cs);
> +
> +        switch (trapnr) {
> +        case EXCP_SWI:
> +            ret = do_syscall(env,
> +                             env->xregs[8],
> +                             env->xregs[0],
> +                             env->xregs[1],
> +                             env->xregs[2],
> +                             env->xregs[3],
> +                             env->xregs[4],
> +                             env->xregs[5],
> +                             0, 0);
> +            if (ret == -TARGET_ERESTARTSYS) {
> +                env->pc -= 4;
> +            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> +                env->xregs[0] = ret;
> +            }
> +            break;
> +        case EXCP_INTERRUPT:
> +            /* just indicate that signals should be handled asap */
> +            break;
> +        case EXCP_UDEF:
> +            info.si_signo = TARGET_SIGILL;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_ILL_ILLOPN;
> +            info._sifields._sigfault._addr = env->pc;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_PREFETCH_ABORT:
> +        case EXCP_DATA_ABORT:
> +            info.si_signo = TARGET_SIGSEGV;
> +            info.si_errno = 0;
> +            /* XXX: check env->error_code */
> +            info.si_code = TARGET_SEGV_MAPERR;
> +            info._sifields._sigfault._addr = env->exception.vaddress;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_DEBUG:
> +        case EXCP_BKPT:
> +            sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> +            if (sig) {
> +                info.si_signo = sig;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_TRAP_BRKPT;
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            }
> +            break;
> +        case EXCP_SEMIHOST:
> +            env->xregs[0] = do_arm_semihosting(env);
> +            break;
> +        case EXCP_YIELD:
> +            /* nothing to do here for user-mode, just resume guest code */
> +            break;
> +        case EXCP_ATOMIC:
> +            cpu_exec_step_atomic(cs);
> +            break;
> +        default:
> +            EXCP_DUMP(env, "qemu: unhandled CPU exception 0x%x - 
> aborting\n", trapnr);
> +            abort();
> +        }
> +        process_pending_signals(env);
> +        /* Exception return on AArch64 always clears the exclusive monitor,
> +         * so any return to running guest code implies this.
> +         */
> +        env->exclusive_addr = -1;
> +    }
> +}
> +#endif /* ndef TARGET_ABI32 */
> diff --git a/linux-user/cris/cpu_loop.inc.c b/linux-user/cris/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..e5fc51922d
> --- /dev/null
> +++ b/linux-user/cris/cpu_loop.inc.c
> @@ -0,0 +1,67 @@
> +void cpu_loop(CPUCRISState *env)
> +{
> +    CPUState *cs = CPU(cris_env_get_cpu(env));
> +    int trapnr, ret;
> +    target_siginfo_t info;
> +
> +    while (1) {
> +        cpu_exec_start(cs);
> +        trapnr = cpu_exec(cs);
> +        cpu_exec_end(cs);
> +        process_queued_cpu_work(cs);
> +
> +        switch (trapnr) {
> +        case 0xaa:
> +            {
> +                info.si_signo = TARGET_SIGSEGV;
> +                info.si_errno = 0;
> +                /* XXX: check env->error_code */
> +                info.si_code = TARGET_SEGV_MAPERR;
> +                info._sifields._sigfault._addr = env->pregs[PR_EDA];
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            }
> +            break;
> +     case EXCP_INTERRUPT:
> +       /* just indicate that signals should be handled asap */
> +       break;
> +        case EXCP_BREAK:
> +            ret = do_syscall(env,
> +                             env->regs[9],
> +                             env->regs[10],
> +                             env->regs[11],
> +                             env->regs[12],
> +                             env->regs[13],
> +                             env->pregs[7],
> +                             env->pregs[11],
> +                             0, 0);
> +            if (ret == -TARGET_ERESTARTSYS) {
> +                env->pc -= 2;
> +            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> +                env->regs[10] = ret;
> +            }
> +            break;
> +        case EXCP_DEBUG:
> +            {
> +                int sig;
> +
> +                sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> +                if (sig)
> +                  {
> +                    info.si_signo = sig;
> +                    info.si_errno = 0;
> +                    info.si_code = TARGET_TRAP_BRKPT;
> +                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                  }
> +            }
> +            break;
> +        case EXCP_ATOMIC:
> +            cpu_exec_step_atomic(cs);
> +            break;
> +        default:
> +            printf ("Unhandled trap: 0x%x\n", trapnr);
> +            cpu_dump_state(cs, stderr, fprintf, 0);
> +            exit(EXIT_FAILURE);
> +        }
> +        process_pending_signals (env);
> +    }
> +}
> diff --git a/linux-user/hppa/cpu_loop.inc.c b/linux-user/hppa/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..99a4443e8f
> --- /dev/null
> +++ b/linux-user/hppa/cpu_loop.inc.c
> @@ -0,0 +1,178 @@
> +static abi_ulong hppa_lws(CPUHPPAState *env)
> +{
> +    uint32_t which = env->gr[20];
> +    abi_ulong addr = env->gr[26];
> +    abi_ulong old = env->gr[25];
> +    abi_ulong new = env->gr[24];
> +    abi_ulong size, ret;
> +
> +    switch (which) {
> +    default:
> +        return -TARGET_ENOSYS;
> +
> +    case 0: /* elf32 atomic 32bit cmpxchg */
> +        if ((addr & 3) || !access_ok(VERIFY_WRITE, addr, 4)) {
> +            return -TARGET_EFAULT;
> +        }
> +        old = tswap32(old);
> +        new = tswap32(new);
> +        ret = atomic_cmpxchg((uint32_t *)g2h(addr), old, new);
> +        ret = tswap32(ret);
> +        break;
> +
> +    case 2: /* elf32 atomic "new" cmpxchg */
> +        size = env->gr[23];
> +        if (size >= 4) {
> +            return -TARGET_ENOSYS;
> +        }
> +        if (((addr | old | new) & ((1 << size) - 1))
> +            || !access_ok(VERIFY_WRITE, addr, 1 << size)
> +            || !access_ok(VERIFY_READ, old, 1 << size)
> +            || !access_ok(VERIFY_READ, new, 1 << size)) {
> +            return -TARGET_EFAULT;
> +        }
> +        /* Note that below we use host-endian loads so that the cmpxchg
> +           can be host-endian as well.  */
> +        switch (size) {
> +        case 0:
> +            old = *(uint8_t *)g2h(old);
> +            new = *(uint8_t *)g2h(new);
> +            ret = atomic_cmpxchg((uint8_t *)g2h(addr), old, new);
> +            ret = ret != old;
> +            break;
> +        case 1:
> +            old = *(uint16_t *)g2h(old);
> +            new = *(uint16_t *)g2h(new);
> +            ret = atomic_cmpxchg((uint16_t *)g2h(addr), old, new);
> +            ret = ret != old;
> +            break;
> +        case 2:
> +            old = *(uint32_t *)g2h(old);
> +            new = *(uint32_t *)g2h(new);
> +            ret = atomic_cmpxchg((uint32_t *)g2h(addr), old, new);
> +            ret = ret != old;
> +            break;
> +        case 3:
> +            {
> +                uint64_t o64, n64, r64;
> +                o64 = *(uint64_t *)g2h(old);
> +                n64 = *(uint64_t *)g2h(new);
> +#ifdef CONFIG_ATOMIC64
> +                r64 = atomic_cmpxchg__nocheck((uint64_t *)g2h(addr), o64, 
> n64);
> +                ret = r64 != o64;
> +#else
> +                start_exclusive();
> +                r64 = *(uint64_t *)g2h(addr);
> +                ret = 1;
> +                if (r64 == o64) {
> +                    *(uint64_t *)g2h(addr) = n64;
> +                    ret = 0;
> +                }
> +                end_exclusive();
> +#endif
> +            }
> +            break;
> +        }
> +        break;
> +    }
> +
> +    env->gr[28] = ret;
> +    return 0;
> +}
> +
> +void cpu_loop(CPUHPPAState *env)
> +{
> +    CPUState *cs = CPU(hppa_env_get_cpu(env));
> +    target_siginfo_t info;
> +    abi_ulong ret;
> +    int trapnr;
> +
> +    while (1) {
> +        cpu_exec_start(cs);
> +        trapnr = cpu_exec(cs);
> +        cpu_exec_end(cs);
> +        process_queued_cpu_work(cs);
> +
> +        switch (trapnr) {
> +        case EXCP_SYSCALL:
> +            ret = do_syscall(env, env->gr[20],
> +                             env->gr[26], env->gr[25],
> +                             env->gr[24], env->gr[23],
> +                             env->gr[22], env->gr[21], 0, 0);
> +            switch (ret) {
> +            default:
> +                env->gr[28] = ret;
> +                /* We arrived here by faking the gateway page.  Return.  */
> +                env->iaoq_f = env->gr[31];
> +                env->iaoq_b = env->gr[31] + 4;
> +                break;
> +            case -TARGET_ERESTARTSYS:
> +            case -TARGET_QEMU_ESIGRETURN:
> +                break;
> +            }
> +            break;
> +        case EXCP_SYSCALL_LWS:
> +            env->gr[21] = hppa_lws(env);
> +            /* We arrived here by faking the gateway page.  Return.  */
> +            env->iaoq_f = env->gr[31];
> +            env->iaoq_b = env->gr[31] + 4;
> +            break;
> +        case EXCP_ITLB_MISS:
> +        case EXCP_DTLB_MISS:
> +        case EXCP_NA_ITLB_MISS:
> +        case EXCP_NA_DTLB_MISS:
> +        case EXCP_IMP:
> +        case EXCP_DMP:
> +        case EXCP_DMB:
> +        case EXCP_PAGE_REF:
> +        case EXCP_DMAR:
> +        case EXCP_DMPI:
> +            info.si_signo = TARGET_SIGSEGV;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_SEGV_ACCERR;
> +            info._sifields._sigfault._addr = env->cr[CR_IOR];
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_UNALIGN:
> +            info.si_signo = TARGET_SIGBUS;
> +            info.si_errno = 0;
> +            info.si_code = 0;
> +            info._sifields._sigfault._addr = env->cr[CR_IOR];
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_ILL:
> +        case EXCP_PRIV_OPR:
> +        case EXCP_PRIV_REG:
> +            info.si_signo = TARGET_SIGILL;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_ILL_ILLOPN;
> +            info._sifields._sigfault._addr = env->iaoq_f;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_OVERFLOW:
> +        case EXCP_COND:
> +        case EXCP_ASSIST:
> +            info.si_signo = TARGET_SIGFPE;
> +            info.si_errno = 0;
> +            info.si_code = 0;
> +            info._sifields._sigfault._addr = env->iaoq_f;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_DEBUG:
> +            trapnr = gdb_handlesig(cs, TARGET_SIGTRAP);
> +            if (trapnr) {
> +                info.si_signo = trapnr;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_TRAP_BRKPT;
> +                queue_signal(env, trapnr, QEMU_SI_FAULT, &info);
> +            }
> +            break;
> +        case EXCP_INTERRUPT:
> +            /* just indicate that signals should be handled asap */
> +            break;
> +        default:
> +            g_assert_not_reached();
> +        }
> +        process_pending_signals(env);
> +    }
> +}
> diff --git a/linux-user/i386/cpu_loop.inc.c b/linux-user/i386/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..8f9b6a8278
> --- /dev/null
> +++ b/linux-user/i386/cpu_loop.inc.c
> @@ -0,0 +1,229 @@
> +/***********************************************************/
> +/* CPUX86 core interface */
> +
> +uint64_t cpu_get_tsc(CPUX86State *env)
> +{
> +    return cpu_get_host_ticks();
> +}
> +
> +static void write_dt(void *ptr, unsigned long addr, unsigned long limit,
> +                     int flags)
> +{
> +    unsigned int e1, e2;
> +    uint32_t *p;
> +    e1 = (addr << 16) | (limit & 0xffff);
> +    e2 = ((addr >> 16) & 0xff) | (addr & 0xff000000) | (limit & 0x000f0000);
> +    e2 |= flags;
> +    p = ptr;
> +    p[0] = tswap32(e1);
> +    p[1] = tswap32(e2);
> +}
> +
> +static uint64_t *idt_table;
> +#ifdef TARGET_X86_64
> +static void set_gate64(void *ptr, unsigned int type, unsigned int dpl,
> +                       uint64_t addr, unsigned int sel)
> +{
> +    uint32_t *p, e1, e2;
> +    e1 = (addr & 0xffff) | (sel << 16);
> +    e2 = (addr & 0xffff0000) | 0x8000 | (dpl << 13) | (type << 8);
> +    p = ptr;
> +    p[0] = tswap32(e1);
> +    p[1] = tswap32(e2);
> +    p[2] = tswap32(addr >> 32);
> +    p[3] = 0;
> +}
> +/* only dpl matters as we do only user space emulation */
> +static void set_idt(int n, unsigned int dpl)
> +{
> +    set_gate64(idt_table + n * 2, 0, dpl, 0, 0);
> +}
> +#else
> +static void set_gate(void *ptr, unsigned int type, unsigned int dpl,
> +                     uint32_t addr, unsigned int sel)
> +{
> +    uint32_t *p, e1, e2;
> +    e1 = (addr & 0xffff) | (sel << 16);
> +    e2 = (addr & 0xffff0000) | 0x8000 | (dpl << 13) | (type << 8);
> +    p = ptr;
> +    p[0] = tswap32(e1);
> +    p[1] = tswap32(e2);
> +}
> +
> +/* only dpl matters as we do only user space emulation */
> +static void set_idt(int n, unsigned int dpl)
> +{
> +    set_gate(idt_table + n, 0, dpl, 0, 0);
> +}
> +#endif
> +
> +void cpu_loop(CPUX86State *env)
> +{
> +    CPUState *cs = CPU(x86_env_get_cpu(env));
> +    int trapnr;
> +    abi_ulong pc;
> +    abi_ulong ret;
> +    target_siginfo_t info;
> +
> +    for(;;) {
> +        cpu_exec_start(cs);
> +        trapnr = cpu_exec(cs);
> +        cpu_exec_end(cs);
> +        process_queued_cpu_work(cs);
> +
> +        switch(trapnr) {
> +        case 0x80:
> +            /* linux syscall from int $0x80 */
> +            ret = do_syscall(env,
> +                             env->regs[R_EAX],
> +                             env->regs[R_EBX],
> +                             env->regs[R_ECX],
> +                             env->regs[R_EDX],
> +                             env->regs[R_ESI],
> +                             env->regs[R_EDI],
> +                             env->regs[R_EBP],
> +                             0, 0);
> +            if (ret == -TARGET_ERESTARTSYS) {
> +                env->eip -= 2;
> +            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> +                env->regs[R_EAX] = ret;
> +            }
> +            break;
> +#ifndef TARGET_ABI32
> +        case EXCP_SYSCALL:
> +            /* linux syscall from syscall instruction */
> +            ret = do_syscall(env,
> +                             env->regs[R_EAX],
> +                             env->regs[R_EDI],
> +                             env->regs[R_ESI],
> +                             env->regs[R_EDX],
> +                             env->regs[10],
> +                             env->regs[8],
> +                             env->regs[9],
> +                             0, 0);
> +            if (ret == -TARGET_ERESTARTSYS) {
> +                env->eip -= 2;
> +            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> +                env->regs[R_EAX] = ret;
> +            }
> +            break;
> +#endif
> +        case EXCP0B_NOSEG:
> +        case EXCP0C_STACK:
> +            info.si_signo = TARGET_SIGBUS;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_SI_KERNEL;
> +            info._sifields._sigfault._addr = 0;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP0D_GPF:
> +            /* XXX: potential problem if ABI32 */
> +#ifndef TARGET_X86_64
> +            if (env->eflags & VM_MASK) {
> +                handle_vm86_fault(env);
> +            } else
> +#endif
> +            {
> +                info.si_signo = TARGET_SIGSEGV;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_SI_KERNEL;
> +                info._sifields._sigfault._addr = 0;
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            }
> +            break;
> +        case EXCP0E_PAGE:
> +            info.si_signo = TARGET_SIGSEGV;
> +            info.si_errno = 0;
> +            if (!(env->error_code & 1))
> +                info.si_code = TARGET_SEGV_MAPERR;
> +            else
> +                info.si_code = TARGET_SEGV_ACCERR;
> +            info._sifields._sigfault._addr = env->cr[2];
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP00_DIVZ:
> +#ifndef TARGET_X86_64
> +            if (env->eflags & VM_MASK) {
> +                handle_vm86_trap(env, trapnr);
> +            } else
> +#endif
> +            {
> +                /* division by zero */
> +                info.si_signo = TARGET_SIGFPE;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_FPE_INTDIV;
> +                info._sifields._sigfault._addr = env->eip;
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            }
> +            break;
> +        case EXCP01_DB:
> +        case EXCP03_INT3:
> +#ifndef TARGET_X86_64
> +            if (env->eflags & VM_MASK) {
> +                handle_vm86_trap(env, trapnr);
> +            } else
> +#endif
> +            {
> +                info.si_signo = TARGET_SIGTRAP;
> +                info.si_errno = 0;
> +                if (trapnr == EXCP01_DB) {
> +                    info.si_code = TARGET_TRAP_BRKPT;
> +                    info._sifields._sigfault._addr = env->eip;
> +                } else {
> +                    info.si_code = TARGET_SI_KERNEL;
> +                    info._sifields._sigfault._addr = 0;
> +                }
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            }
> +            break;
> +        case EXCP04_INTO:
> +        case EXCP05_BOUND:
> +#ifndef TARGET_X86_64
> +            if (env->eflags & VM_MASK) {
> +                handle_vm86_trap(env, trapnr);
> +            } else
> +#endif
> +            {
> +                info.si_signo = TARGET_SIGSEGV;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_SI_KERNEL;
> +                info._sifields._sigfault._addr = 0;
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            }
> +            break;
> +        case EXCP06_ILLOP:
> +            info.si_signo = TARGET_SIGILL;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_ILL_ILLOPN;
> +            info._sifields._sigfault._addr = env->eip;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_INTERRUPT:
> +            /* just indicate that signals should be handled asap */
> +            break;
> +        case EXCP_DEBUG:
> +            {
> +                int sig;
> +
> +                sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> +                if (sig)
> +                  {
> +                    info.si_signo = sig;
> +                    info.si_errno = 0;
> +                    info.si_code = TARGET_TRAP_BRKPT;
> +                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                  }
> +            }
> +            break;
> +        case EXCP_ATOMIC:
> +            cpu_exec_step_atomic(cs);
> +            break;
> +        default:
> +            pc = env->segs[R_CS].base + env->eip;
> +            EXCP_DUMP(env, "qemu: 0x%08lx: unhandled CPU exception 0x%x - 
> aborting\n",
> +                      (long)pc, trapnr);
> +            abort();
> +        }
> +        process_pending_signals(env);
> +    }
> +}
> diff --git a/linux-user/m68k/cpu_loop.inc.c b/linux-user/m68k/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..196ac16be1
> --- /dev/null
> +++ b/linux-user/m68k/cpu_loop.inc.c
> @@ -0,0 +1,115 @@
> +void cpu_loop(CPUM68KState *env)
> +{
> +    CPUState *cs = CPU(m68k_env_get_cpu(env));
> +    int trapnr;
> +    unsigned int n;
> +    target_siginfo_t info;
> +    TaskState *ts = cs->opaque;
> +
> +    for(;;) {
> +        cpu_exec_start(cs);
> +        trapnr = cpu_exec(cs);
> +        cpu_exec_end(cs);
> +        process_queued_cpu_work(cs);
> +
> +        switch(trapnr) {
> +        case EXCP_ILLEGAL:
> +            {
> +                if (ts->sim_syscalls) {
> +                    uint16_t nr;
> +                    get_user_u16(nr, env->pc + 2);
> +                    env->pc += 4;
> +                    do_m68k_simcall(env, nr);
> +                } else {
> +                    goto do_sigill;
> +                }
> +            }
> +            break;
> +        case EXCP_HALT_INSN:
> +            /* Semihosing syscall.  */
> +            env->pc += 4;
> +            do_m68k_semihosting(env, env->dregs[0]);
> +            break;
> +        case EXCP_LINEA:
> +        case EXCP_LINEF:
> +        case EXCP_UNSUPPORTED:
> +        do_sigill:
> +            info.si_signo = TARGET_SIGILL;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_ILL_ILLOPN;
> +            info._sifields._sigfault._addr = env->pc;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_CHK:
> +            info.si_signo = TARGET_SIGFPE;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_FPE_INTOVF;
> +            info._sifields._sigfault._addr = env->pc;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_DIV0:
> +            info.si_signo = TARGET_SIGFPE;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_FPE_INTDIV;
> +            info._sifields._sigfault._addr = env->pc;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_TRAP0:
> +            {
> +                abi_long ret;
> +                ts->sim_syscalls = 0;
> +                n = env->dregs[0];
> +                env->pc += 2;
> +                ret = do_syscall(env,
> +                                 n,
> +                                 env->dregs[1],
> +                                 env->dregs[2],
> +                                 env->dregs[3],
> +                                 env->dregs[4],
> +                                 env->dregs[5],
> +                                 env->aregs[0],
> +                                 0, 0);
> +                if (ret == -TARGET_ERESTARTSYS) {
> +                    env->pc -= 2;
> +                } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> +                    env->dregs[0] = ret;
> +                }
> +            }
> +            break;
> +        case EXCP_INTERRUPT:
> +            /* just indicate that signals should be handled asap */
> +            break;
> +        case EXCP_ACCESS:
> +            {
> +                info.si_signo = TARGET_SIGSEGV;
> +                info.si_errno = 0;
> +                /* XXX: check env->error_code */
> +                info.si_code = TARGET_SEGV_MAPERR;
> +                info._sifields._sigfault._addr = env->mmu.ar;
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            }
> +            break;
> +        case EXCP_DEBUG:
> +            {
> +                int sig;
> +
> +                sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> +                if (sig)
> +                  {
> +                    info.si_signo = sig;
> +                    info.si_errno = 0;
> +                    info.si_code = TARGET_TRAP_BRKPT;
> +                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                  }
> +            }
> +            break;
> +        case EXCP_ATOMIC:
> +            cpu_exec_step_atomic(cs);
> +            break;
> +        default:
> +            EXCP_DUMP(env, "qemu: unhandled CPU exception 0x%x - 
> aborting\n", trapnr);
> +            abort();
> +        }
> +        process_pending_signals(env);
> +    }
> +}
> diff --git a/linux-user/main.c b/linux-user/main.c
> index ba09b7d0c8..fd71113855 100644
> --- a/linux-user/main.c
> +++ b/linux-user/main.c
> @@ -160,3923 +160,7 @@ void fork_end(int child)
>      }
>  }
>  
> -#ifdef TARGET_I386
> -/***********************************************************/
> -/* CPUX86 core interface */
> -
> -uint64_t cpu_get_tsc(CPUX86State *env)
> -{
> -    return cpu_get_host_ticks();
> -}
> -
> -static void write_dt(void *ptr, unsigned long addr, unsigned long limit,
> -                     int flags)
> -{
> -    unsigned int e1, e2;
> -    uint32_t *p;
> -    e1 = (addr << 16) | (limit & 0xffff);
> -    e2 = ((addr >> 16) & 0xff) | (addr & 0xff000000) | (limit & 0x000f0000);
> -    e2 |= flags;
> -    p = ptr;
> -    p[0] = tswap32(e1);
> -    p[1] = tswap32(e2);
> -}
> -
> -static uint64_t *idt_table;
> -#ifdef TARGET_X86_64
> -static void set_gate64(void *ptr, unsigned int type, unsigned int dpl,
> -                       uint64_t addr, unsigned int sel)
> -{
> -    uint32_t *p, e1, e2;
> -    e1 = (addr & 0xffff) | (sel << 16);
> -    e2 = (addr & 0xffff0000) | 0x8000 | (dpl << 13) | (type << 8);
> -    p = ptr;
> -    p[0] = tswap32(e1);
> -    p[1] = tswap32(e2);
> -    p[2] = tswap32(addr >> 32);
> -    p[3] = 0;
> -}
> -/* only dpl matters as we do only user space emulation */
> -static void set_idt(int n, unsigned int dpl)
> -{
> -    set_gate64(idt_table + n * 2, 0, dpl, 0, 0);
> -}
> -#else
> -static void set_gate(void *ptr, unsigned int type, unsigned int dpl,
> -                     uint32_t addr, unsigned int sel)
> -{
> -    uint32_t *p, e1, e2;
> -    e1 = (addr & 0xffff) | (sel << 16);
> -    e2 = (addr & 0xffff0000) | 0x8000 | (dpl << 13) | (type << 8);
> -    p = ptr;
> -    p[0] = tswap32(e1);
> -    p[1] = tswap32(e2);
> -}
> -
> -/* only dpl matters as we do only user space emulation */
> -static void set_idt(int n, unsigned int dpl)
> -{
> -    set_gate(idt_table + n, 0, dpl, 0, 0);
> -}
> -#endif
> -
> -void cpu_loop(CPUX86State *env)
> -{
> -    CPUState *cs = CPU(x86_env_get_cpu(env));
> -    int trapnr;
> -    abi_ulong pc;
> -    abi_ulong ret;
> -    target_siginfo_t info;
> -
> -    for(;;) {
> -        cpu_exec_start(cs);
> -        trapnr = cpu_exec(cs);
> -        cpu_exec_end(cs);
> -        process_queued_cpu_work(cs);
> -
> -        switch(trapnr) {
> -        case 0x80:
> -            /* linux syscall from int $0x80 */
> -            ret = do_syscall(env,
> -                             env->regs[R_EAX],
> -                             env->regs[R_EBX],
> -                             env->regs[R_ECX],
> -                             env->regs[R_EDX],
> -                             env->regs[R_ESI],
> -                             env->regs[R_EDI],
> -                             env->regs[R_EBP],
> -                             0, 0);
> -            if (ret == -TARGET_ERESTARTSYS) {
> -                env->eip -= 2;
> -            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> -                env->regs[R_EAX] = ret;
> -            }
> -            break;
> -#ifndef TARGET_ABI32
> -        case EXCP_SYSCALL:
> -            /* linux syscall from syscall instruction */
> -            ret = do_syscall(env,
> -                             env->regs[R_EAX],
> -                             env->regs[R_EDI],
> -                             env->regs[R_ESI],
> -                             env->regs[R_EDX],
> -                             env->regs[10],
> -                             env->regs[8],
> -                             env->regs[9],
> -                             0, 0);
> -            if (ret == -TARGET_ERESTARTSYS) {
> -                env->eip -= 2;
> -            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> -                env->regs[R_EAX] = ret;
> -            }
> -            break;
> -#endif
> -        case EXCP0B_NOSEG:
> -        case EXCP0C_STACK:
> -            info.si_signo = TARGET_SIGBUS;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_SI_KERNEL;
> -            info._sifields._sigfault._addr = 0;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP0D_GPF:
> -            /* XXX: potential problem if ABI32 */
> -#ifndef TARGET_X86_64
> -            if (env->eflags & VM_MASK) {
> -                handle_vm86_fault(env);
> -            } else
> -#endif
> -            {
> -                info.si_signo = TARGET_SIGSEGV;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_SI_KERNEL;
> -                info._sifields._sigfault._addr = 0;
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            }
> -            break;
> -        case EXCP0E_PAGE:
> -            info.si_signo = TARGET_SIGSEGV;
> -            info.si_errno = 0;
> -            if (!(env->error_code & 1))
> -                info.si_code = TARGET_SEGV_MAPERR;
> -            else
> -                info.si_code = TARGET_SEGV_ACCERR;
> -            info._sifields._sigfault._addr = env->cr[2];
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP00_DIVZ:
> -#ifndef TARGET_X86_64
> -            if (env->eflags & VM_MASK) {
> -                handle_vm86_trap(env, trapnr);
> -            } else
> -#endif
> -            {
> -                /* division by zero */
> -                info.si_signo = TARGET_SIGFPE;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_FPE_INTDIV;
> -                info._sifields._sigfault._addr = env->eip;
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            }
> -            break;
> -        case EXCP01_DB:
> -        case EXCP03_INT3:
> -#ifndef TARGET_X86_64
> -            if (env->eflags & VM_MASK) {
> -                handle_vm86_trap(env, trapnr);
> -            } else
> -#endif
> -            {
> -                info.si_signo = TARGET_SIGTRAP;
> -                info.si_errno = 0;
> -                if (trapnr == EXCP01_DB) {
> -                    info.si_code = TARGET_TRAP_BRKPT;
> -                    info._sifields._sigfault._addr = env->eip;
> -                } else {
> -                    info.si_code = TARGET_SI_KERNEL;
> -                    info._sifields._sigfault._addr = 0;
> -                }
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            }
> -            break;
> -        case EXCP04_INTO:
> -        case EXCP05_BOUND:
> -#ifndef TARGET_X86_64
> -            if (env->eflags & VM_MASK) {
> -                handle_vm86_trap(env, trapnr);
> -            } else
> -#endif
> -            {
> -                info.si_signo = TARGET_SIGSEGV;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_SI_KERNEL;
> -                info._sifields._sigfault._addr = 0;
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            }
> -            break;
> -        case EXCP06_ILLOP:
> -            info.si_signo = TARGET_SIGILL;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_ILL_ILLOPN;
> -            info._sifields._sigfault._addr = env->eip;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_INTERRUPT:
> -            /* just indicate that signals should be handled asap */
> -            break;
> -        case EXCP_DEBUG:
> -            {
> -                int sig;
> -
> -                sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> -                if (sig)
> -                  {
> -                    info.si_signo = sig;
> -                    info.si_errno = 0;
> -                    info.si_code = TARGET_TRAP_BRKPT;
> -                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                  }
> -            }
> -            break;
> -        case EXCP_ATOMIC:
> -            cpu_exec_step_atomic(cs);
> -            break;
> -        default:
> -            pc = env->segs[R_CS].base + env->eip;
> -            EXCP_DUMP(env, "qemu: 0x%08lx: unhandled CPU exception 0x%x - 
> aborting\n",
> -                      (long)pc, trapnr);
> -            abort();
> -        }
> -        process_pending_signals(env);
> -    }
> -}
> -#endif
> -
> -#ifdef TARGET_ARM
> -
> -#define get_user_code_u32(x, gaddr, env)                \
> -    ({ abi_long __r = get_user_u32((x), (gaddr));       \
> -        if (!__r && bswap_code(arm_sctlr_b(env))) {     \
> -            (x) = bswap32(x);                           \
> -        }                                               \
> -        __r;                                            \
> -    })
> -
> -#define get_user_code_u16(x, gaddr, env)                \
> -    ({ abi_long __r = get_user_u16((x), (gaddr));       \
> -        if (!__r && bswap_code(arm_sctlr_b(env))) {     \
> -            (x) = bswap16(x);                           \
> -        }                                               \
> -        __r;                                            \
> -    })
> -
> -#define get_user_data_u32(x, gaddr, env)                \
> -    ({ abi_long __r = get_user_u32((x), (gaddr));       \
> -        if (!__r && arm_cpu_bswap_data(env)) {          \
> -            (x) = bswap32(x);                           \
> -        }                                               \
> -        __r;                                            \
> -    })
> -
> -#define get_user_data_u16(x, gaddr, env)                \
> -    ({ abi_long __r = get_user_u16((x), (gaddr));       \
> -        if (!__r && arm_cpu_bswap_data(env)) {          \
> -            (x) = bswap16(x);                           \
> -        }                                               \
> -        __r;                                            \
> -    })
> -
> -#define put_user_data_u32(x, gaddr, env)                \
> -    ({ typeof(x) __x = (x);                             \
> -        if (arm_cpu_bswap_data(env)) {                  \
> -            __x = bswap32(__x);                         \
> -        }                                               \
> -        put_user_u32(__x, (gaddr));                     \
> -    })
> -
> -#define put_user_data_u16(x, gaddr, env)                \
> -    ({ typeof(x) __x = (x);                             \
> -        if (arm_cpu_bswap_data(env)) {                  \
> -            __x = bswap16(__x);                         \
> -        }                                               \
> -        put_user_u16(__x, (gaddr));                     \
> -    })
> -
> -#ifdef TARGET_ABI32
> -/* Commpage handling -- there is no commpage for AArch64 */
> -
> -/*
> - * See the Linux kernel's Documentation/arm/kernel_user_helpers.txt
> - * Input:
> - * r0 = pointer to oldval
> - * r1 = pointer to newval
> - * r2 = pointer to target value
> - *
> - * Output:
> - * r0 = 0 if *ptr was changed, non-0 if no exchange happened
> - * C set if *ptr was changed, clear if no exchange happened
> - *
> - * Note segv's in kernel helpers are a bit tricky, we can set the
> - * data address sensibly but the PC address is just the entry point.
> - */
> -static void arm_kernel_cmpxchg64_helper(CPUARMState *env)
> -{
> -    uint64_t oldval, newval, val;
> -    uint32_t addr, cpsr;
> -    target_siginfo_t info;
> -
> -    /* Based on the 32 bit code in do_kernel_trap */
> -
> -    /* XXX: This only works between threads, not between processes.
> -       It's probably possible to implement this with native host
> -       operations. However things like ldrex/strex are much harder so
> -       there's not much point trying.  */
> -    start_exclusive();
> -    cpsr = cpsr_read(env);
> -    addr = env->regs[2];
> -
> -    if (get_user_u64(oldval, env->regs[0])) {
> -        env->exception.vaddress = env->regs[0];
> -        goto segv;
> -    };
> -
> -    if (get_user_u64(newval, env->regs[1])) {
> -        env->exception.vaddress = env->regs[1];
> -        goto segv;
> -    };
> -
> -    if (get_user_u64(val, addr)) {
> -        env->exception.vaddress = addr;
> -        goto segv;
> -    }
> -
> -    if (val == oldval) {
> -        val = newval;
> -
> -        if (put_user_u64(val, addr)) {
> -            env->exception.vaddress = addr;
> -            goto segv;
> -        };
> -
> -        env->regs[0] = 0;
> -        cpsr |= CPSR_C;
> -    } else {
> -        env->regs[0] = -1;
> -        cpsr &= ~CPSR_C;
> -    }
> -    cpsr_write(env, cpsr, CPSR_C, CPSRWriteByInstr);
> -    end_exclusive();
> -    return;
> -
> -segv:
> -    end_exclusive();
> -    /* We get the PC of the entry address - which is as good as anything,
> -       on a real kernel what you get depends on which mode it uses. */
> -    info.si_signo = TARGET_SIGSEGV;
> -    info.si_errno = 0;
> -    /* XXX: check env->error_code */
> -    info.si_code = TARGET_SEGV_MAPERR;
> -    info._sifields._sigfault._addr = env->exception.vaddress;
> -    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -}
> -
> -/* Handle a jump to the kernel code page.  */
> -static int
> -do_kernel_trap(CPUARMState *env)
> -{
> -    uint32_t addr;
> -    uint32_t cpsr;
> -    uint32_t val;
> -
> -    switch (env->regs[15]) {
> -    case 0xffff0fa0: /* __kernel_memory_barrier */
> -        /* ??? No-op. Will need to do better for SMP.  */
> -        break;
> -    case 0xffff0fc0: /* __kernel_cmpxchg */
> -         /* XXX: This only works between threads, not between processes.
> -            It's probably possible to implement this with native host
> -            operations. However things like ldrex/strex are much harder so
> -            there's not much point trying.  */
> -        start_exclusive();
> -        cpsr = cpsr_read(env);
> -        addr = env->regs[2];
> -        /* FIXME: This should SEGV if the access fails.  */
> -        if (get_user_u32(val, addr))
> -            val = ~env->regs[0];
> -        if (val == env->regs[0]) {
> -            val = env->regs[1];
> -            /* FIXME: Check for segfaults.  */
> -            put_user_u32(val, addr);
> -            env->regs[0] = 0;
> -            cpsr |= CPSR_C;
> -        } else {
> -            env->regs[0] = -1;
> -            cpsr &= ~CPSR_C;
> -        }
> -        cpsr_write(env, cpsr, CPSR_C, CPSRWriteByInstr);
> -        end_exclusive();
> -        break;
> -    case 0xffff0fe0: /* __kernel_get_tls */
> -        env->regs[0] = cpu_get_tls(env);
> -        break;
> -    case 0xffff0f60: /* __kernel_cmpxchg64 */
> -        arm_kernel_cmpxchg64_helper(env);
> -        break;
> -
> -    default:
> -        return 1;
> -    }
> -    /* Jump back to the caller.  */
> -    addr = env->regs[14];
> -    if (addr & 1) {
> -        env->thumb = 1;
> -        addr &= ~1;
> -    }
> -    env->regs[15] = addr;
> -
> -    return 0;
> -}
> -
> -void cpu_loop(CPUARMState *env)
> -{
> -    CPUState *cs = CPU(arm_env_get_cpu(env));
> -    int trapnr;
> -    unsigned int n, insn;
> -    target_siginfo_t info;
> -    uint32_t addr;
> -    abi_ulong ret;
> -
> -    for(;;) {
> -        cpu_exec_start(cs);
> -        trapnr = cpu_exec(cs);
> -        cpu_exec_end(cs);
> -        process_queued_cpu_work(cs);
> -
> -        switch(trapnr) {
> -        case EXCP_UDEF:
> -        case EXCP_NOCP:
> -        case EXCP_INVSTATE:
> -            {
> -                TaskState *ts = cs->opaque;
> -                uint32_t opcode;
> -                int rc;
> -
> -                /* we handle the FPU emulation here, as Linux */
> -                /* we get the opcode */
> -                /* FIXME - what to do if get_user() fails? */
> -                get_user_code_u32(opcode, env->regs[15], env);
> -
> -                rc = EmulateAll(opcode, &ts->fpa, env);
> -                if (rc == 0) { /* illegal instruction */
> -                    info.si_signo = TARGET_SIGILL;
> -                    info.si_errno = 0;
> -                    info.si_code = TARGET_ILL_ILLOPN;
> -                    info._sifields._sigfault._addr = env->regs[15];
> -                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                } else if (rc < 0) { /* FP exception */
> -                    int arm_fpe=0;
> -
> -                    /* translate softfloat flags to FPSR flags */
> -                    if (-rc & float_flag_invalid)
> -                      arm_fpe |= BIT_IOC;
> -                    if (-rc & float_flag_divbyzero)
> -                      arm_fpe |= BIT_DZC;
> -                    if (-rc & float_flag_overflow)
> -                      arm_fpe |= BIT_OFC;
> -                    if (-rc & float_flag_underflow)
> -                      arm_fpe |= BIT_UFC;
> -                    if (-rc & float_flag_inexact)
> -                      arm_fpe |= BIT_IXC;
> -
> -                    FPSR fpsr = ts->fpa.fpsr;
> -                    //printf("fpsr 0x%x, arm_fpe 0x%x\n",fpsr,arm_fpe);
> -
> -                    if (fpsr & (arm_fpe << 16)) { /* exception enabled? */
> -                      info.si_signo = TARGET_SIGFPE;
> -                      info.si_errno = 0;
> -
> -                      /* ordered by priority, least first */
> -                      if (arm_fpe & BIT_IXC) info.si_code = 
> TARGET_FPE_FLTRES;
> -                      if (arm_fpe & BIT_UFC) info.si_code = 
> TARGET_FPE_FLTUND;
> -                      if (arm_fpe & BIT_OFC) info.si_code = 
> TARGET_FPE_FLTOVF;
> -                      if (arm_fpe & BIT_DZC) info.si_code = 
> TARGET_FPE_FLTDIV;
> -                      if (arm_fpe & BIT_IOC) info.si_code = 
> TARGET_FPE_FLTINV;
> -
> -                      info._sifields._sigfault._addr = env->regs[15];
> -                      queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                    } else {
> -                      env->regs[15] += 4;
> -                    }
> -
> -                    /* accumulate unenabled exceptions */
> -                    if ((!(fpsr & BIT_IXE)) && (arm_fpe & BIT_IXC))
> -                      fpsr |= BIT_IXC;
> -                    if ((!(fpsr & BIT_UFE)) && (arm_fpe & BIT_UFC))
> -                      fpsr |= BIT_UFC;
> -                    if ((!(fpsr & BIT_OFE)) && (arm_fpe & BIT_OFC))
> -                      fpsr |= BIT_OFC;
> -                    if ((!(fpsr & BIT_DZE)) && (arm_fpe & BIT_DZC))
> -                      fpsr |= BIT_DZC;
> -                    if ((!(fpsr & BIT_IOE)) && (arm_fpe & BIT_IOC))
> -                      fpsr |= BIT_IOC;
> -                    ts->fpa.fpsr=fpsr;
> -                } else { /* everything OK */
> -                    /* increment PC */
> -                    env->regs[15] += 4;
> -                }
> -            }
> -            break;
> -        case EXCP_SWI:
> -        case EXCP_BKPT:
> -            {
> -                env->eabi = 1;
> -                /* system call */
> -                if (trapnr == EXCP_BKPT) {
> -                    if (env->thumb) {
> -                        /* FIXME - what to do if get_user() fails? */
> -                        get_user_code_u16(insn, env->regs[15], env);
> -                        n = insn & 0xff;
> -                        env->regs[15] += 2;
> -                    } else {
> -                        /* FIXME - what to do if get_user() fails? */
> -                        get_user_code_u32(insn, env->regs[15], env);
> -                        n = (insn & 0xf) | ((insn >> 4) & 0xff0);
> -                        env->regs[15] += 4;
> -                    }
> -                } else {
> -                    if (env->thumb) {
> -                        /* FIXME - what to do if get_user() fails? */
> -                        get_user_code_u16(insn, env->regs[15] - 2, env);
> -                        n = insn & 0xff;
> -                    } else {
> -                        /* FIXME - what to do if get_user() fails? */
> -                        get_user_code_u32(insn, env->regs[15] - 4, env);
> -                        n = insn & 0xffffff;
> -                    }
> -                }
> -
> -                if (n == ARM_NR_cacheflush) {
> -                    /* nop */
> -                } else if (n == ARM_NR_semihosting
> -                           || n == ARM_NR_thumb_semihosting) {
> -                    env->regs[0] = do_arm_semihosting (env);
> -                } else if (n == 0 || n >= ARM_SYSCALL_BASE || env->thumb) {
> -                    /* linux syscall */
> -                    if (env->thumb || n == 0) {
> -                        n = env->regs[7];
> -                    } else {
> -                        n -= ARM_SYSCALL_BASE;
> -                        env->eabi = 0;
> -                    }
> -                    if ( n > ARM_NR_BASE) {
> -                        switch (n) {
> -                        case ARM_NR_cacheflush:
> -                            /* nop */
> -                            break;
> -                        case ARM_NR_set_tls:
> -                            cpu_set_tls(env, env->regs[0]);
> -                            env->regs[0] = 0;
> -                            break;
> -                        case ARM_NR_breakpoint:
> -                            env->regs[15] -= env->thumb ? 2 : 4;
> -                            goto excp_debug;
> -                        default:
> -                            gemu_log("qemu: Unsupported ARM syscall: 0x%x\n",
> -                                     n);
> -                            env->regs[0] = -TARGET_ENOSYS;
> -                            break;
> -                        }
> -                    } else {
> -                        ret = do_syscall(env,
> -                                         n,
> -                                         env->regs[0],
> -                                         env->regs[1],
> -                                         env->regs[2],
> -                                         env->regs[3],
> -                                         env->regs[4],
> -                                         env->regs[5],
> -                                         0, 0);
> -                        if (ret == -TARGET_ERESTARTSYS) {
> -                            env->regs[15] -= env->thumb ? 2 : 4;
> -                        } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> -                            env->regs[0] = ret;
> -                        }
> -                    }
> -                } else {
> -                    goto error;
> -                }
> -            }
> -            break;
> -        case EXCP_SEMIHOST:
> -            env->regs[0] = do_arm_semihosting(env);
> -            break;
> -        case EXCP_INTERRUPT:
> -            /* just indicate that signals should be handled asap */
> -            break;
> -        case EXCP_PREFETCH_ABORT:
> -        case EXCP_DATA_ABORT:
> -            addr = env->exception.vaddress;
> -            {
> -                info.si_signo = TARGET_SIGSEGV;
> -                info.si_errno = 0;
> -                /* XXX: check env->error_code */
> -                info.si_code = TARGET_SEGV_MAPERR;
> -                info._sifields._sigfault._addr = addr;
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            }
> -            break;
> -        case EXCP_DEBUG:
> -        excp_debug:
> -            {
> -                int sig;
> -
> -                sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> -                if (sig)
> -                  {
> -                    info.si_signo = sig;
> -                    info.si_errno = 0;
> -                    info.si_code = TARGET_TRAP_BRKPT;
> -                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                  }
> -            }
> -            break;
> -        case EXCP_KERNEL_TRAP:
> -            if (do_kernel_trap(env))
> -              goto error;
> -            break;
> -        case EXCP_YIELD:
> -            /* nothing to do here for user-mode, just resume guest code */
> -            break;
> -        case EXCP_ATOMIC:
> -            cpu_exec_step_atomic(cs);
> -            break;
> -        default:
> -        error:
> -            EXCP_DUMP(env, "qemu: unhandled CPU exception 0x%x - 
> aborting\n", trapnr);
> -            abort();
> -        }
> -        process_pending_signals(env);
> -    }
> -}
> -
> -#else
> -
> -/* AArch64 main loop */
> -void cpu_loop(CPUARMState *env)
> -{
> -    CPUState *cs = CPU(arm_env_get_cpu(env));
> -    int trapnr, sig;
> -    abi_long ret;
> -    target_siginfo_t info;
> -
> -    for (;;) {
> -        cpu_exec_start(cs);
> -        trapnr = cpu_exec(cs);
> -        cpu_exec_end(cs);
> -        process_queued_cpu_work(cs);
> -
> -        switch (trapnr) {
> -        case EXCP_SWI:
> -            ret = do_syscall(env,
> -                             env->xregs[8],
> -                             env->xregs[0],
> -                             env->xregs[1],
> -                             env->xregs[2],
> -                             env->xregs[3],
> -                             env->xregs[4],
> -                             env->xregs[5],
> -                             0, 0);
> -            if (ret == -TARGET_ERESTARTSYS) {
> -                env->pc -= 4;
> -            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> -                env->xregs[0] = ret;
> -            }
> -            break;
> -        case EXCP_INTERRUPT:
> -            /* just indicate that signals should be handled asap */
> -            break;
> -        case EXCP_UDEF:
> -            info.si_signo = TARGET_SIGILL;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_ILL_ILLOPN;
> -            info._sifields._sigfault._addr = env->pc;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_PREFETCH_ABORT:
> -        case EXCP_DATA_ABORT:
> -            info.si_signo = TARGET_SIGSEGV;
> -            info.si_errno = 0;
> -            /* XXX: check env->error_code */
> -            info.si_code = TARGET_SEGV_MAPERR;
> -            info._sifields._sigfault._addr = env->exception.vaddress;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_DEBUG:
> -        case EXCP_BKPT:
> -            sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> -            if (sig) {
> -                info.si_signo = sig;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_TRAP_BRKPT;
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            }
> -            break;
> -        case EXCP_SEMIHOST:
> -            env->xregs[0] = do_arm_semihosting(env);
> -            break;
> -        case EXCP_YIELD:
> -            /* nothing to do here for user-mode, just resume guest code */
> -            break;
> -        case EXCP_ATOMIC:
> -            cpu_exec_step_atomic(cs);
> -            break;
> -        default:
> -            EXCP_DUMP(env, "qemu: unhandled CPU exception 0x%x - 
> aborting\n", trapnr);
> -            abort();
> -        }
> -        process_pending_signals(env);
> -        /* Exception return on AArch64 always clears the exclusive monitor,
> -         * so any return to running guest code implies this.
> -         */
> -        env->exclusive_addr = -1;
> -    }
> -}
> -#endif /* ndef TARGET_ABI32 */
> -
> -#endif
> -
> -#ifdef TARGET_SPARC
> -#define SPARC64_STACK_BIAS 2047
> -
> -//#define DEBUG_WIN
> -
> -/* WARNING: dealing with register windows _is_ complicated. More info
> -   can be found at http://www.sics.se/~psm/sparcstack.html */
> -static inline int get_reg_index(CPUSPARCState *env, int cwp, int index)
> -{
> -    index = (index + cwp * 16) % (16 * env->nwindows);
> -    /* wrap handling : if cwp is on the last window, then we use the
> -       registers 'after' the end */
> -    if (index < 8 && env->cwp == env->nwindows - 1)
> -        index += 16 * env->nwindows;
> -    return index;
> -}
> -
> -/* save the register window 'cwp1' */
> -static inline void save_window_offset(CPUSPARCState *env, int cwp1)
> -{
> -    unsigned int i;
> -    abi_ulong sp_ptr;
> -
> -    sp_ptr = env->regbase[get_reg_index(env, cwp1, 6)];
> -#ifdef TARGET_SPARC64
> -    if (sp_ptr & 3)
> -        sp_ptr += SPARC64_STACK_BIAS;
> -#endif
> -#if defined(DEBUG_WIN)
> -    printf("win_overflow: sp_ptr=0x" TARGET_ABI_FMT_lx " save_cwp=%d\n",
> -           sp_ptr, cwp1);
> -#endif
> -    for(i = 0; i < 16; i++) {
> -        /* FIXME - what to do if put_user() fails? */
> -        put_user_ual(env->regbase[get_reg_index(env, cwp1, 8 + i)], sp_ptr);
> -        sp_ptr += sizeof(abi_ulong);
> -    }
> -}
> -
> -static void save_window(CPUSPARCState *env)
> -{
> -#ifndef TARGET_SPARC64
> -    unsigned int new_wim;
> -    new_wim = ((env->wim >> 1) | (env->wim << (env->nwindows - 1))) &
> -        ((1LL << env->nwindows) - 1);
> -    save_window_offset(env, cpu_cwp_dec(env, env->cwp - 2));
> -    env->wim = new_wim;
> -#else
> -    save_window_offset(env, cpu_cwp_dec(env, env->cwp - 2));
> -    env->cansave++;
> -    env->canrestore--;
> -#endif
> -}
> -
> -static void restore_window(CPUSPARCState *env)
> -{
> -#ifndef TARGET_SPARC64
> -    unsigned int new_wim;
> -#endif
> -    unsigned int i, cwp1;
> -    abi_ulong sp_ptr;
> -
> -#ifndef TARGET_SPARC64
> -    new_wim = ((env->wim << 1) | (env->wim >> (env->nwindows - 1))) &
> -        ((1LL << env->nwindows) - 1);
> -#endif
> -
> -    /* restore the invalid window */
> -    cwp1 = cpu_cwp_inc(env, env->cwp + 1);
> -    sp_ptr = env->regbase[get_reg_index(env, cwp1, 6)];
> -#ifdef TARGET_SPARC64
> -    if (sp_ptr & 3)
> -        sp_ptr += SPARC64_STACK_BIAS;
> -#endif
> -#if defined(DEBUG_WIN)
> -    printf("win_underflow: sp_ptr=0x" TARGET_ABI_FMT_lx " load_cwp=%d\n",
> -           sp_ptr, cwp1);
> -#endif
> -    for(i = 0; i < 16; i++) {
> -        /* FIXME - what to do if get_user() fails? */
> -        get_user_ual(env->regbase[get_reg_index(env, cwp1, 8 + i)], sp_ptr);
> -        sp_ptr += sizeof(abi_ulong);
> -    }
> -#ifdef TARGET_SPARC64
> -    env->canrestore++;
> -    if (env->cleanwin < env->nwindows - 1)
> -        env->cleanwin++;
> -    env->cansave--;
> -#else
> -    env->wim = new_wim;
> -#endif
> -}
> -
> -static void flush_windows(CPUSPARCState *env)
> -{
> -    int offset, cwp1;
> -
> -    offset = 1;
> -    for(;;) {
> -        /* if restore would invoke restore_window(), then we can stop */
> -        cwp1 = cpu_cwp_inc(env, env->cwp + offset);
> -#ifndef TARGET_SPARC64
> -        if (env->wim & (1 << cwp1))
> -            break;
> -#else
> -        if (env->canrestore == 0)
> -            break;
> -        env->cansave++;
> -        env->canrestore--;
> -#endif
> -        save_window_offset(env, cwp1);
> -        offset++;
> -    }
> -    cwp1 = cpu_cwp_inc(env, env->cwp + 1);
> -#ifndef TARGET_SPARC64
> -    /* set wim so that restore will reload the registers */
> -    env->wim = 1 << cwp1;
> -#endif
> -#if defined(DEBUG_WIN)
> -    printf("flush_windows: nb=%d\n", offset - 1);
> -#endif
> -}
> -
> -void cpu_loop (CPUSPARCState *env)
> -{
> -    CPUState *cs = CPU(sparc_env_get_cpu(env));
> -    int trapnr;
> -    abi_long ret;
> -    target_siginfo_t info;
> -
> -    while (1) {
> -        cpu_exec_start(cs);
> -        trapnr = cpu_exec(cs);
> -        cpu_exec_end(cs);
> -        process_queued_cpu_work(cs);
> -
> -        /* Compute PSR before exposing state.  */
> -        if (env->cc_op != CC_OP_FLAGS) {
> -            cpu_get_psr(env);
> -        }
> -
> -        switch (trapnr) {
> -#ifndef TARGET_SPARC64
> -        case 0x88:
> -        case 0x90:
> -#else
> -        case 0x110:
> -        case 0x16d:
> -#endif
> -            ret = do_syscall (env, env->gregs[1],
> -                              env->regwptr[0], env->regwptr[1],
> -                              env->regwptr[2], env->regwptr[3],
> -                              env->regwptr[4], env->regwptr[5],
> -                              0, 0);
> -            if (ret == -TARGET_ERESTARTSYS || ret == 
> -TARGET_QEMU_ESIGRETURN) {
> -                break;
> -            }
> -            if ((abi_ulong)ret >= (abi_ulong)(-515)) {
> -#if defined(TARGET_SPARC64) && !defined(TARGET_ABI32)
> -                env->xcc |= PSR_CARRY;
> -#else
> -                env->psr |= PSR_CARRY;
> -#endif
> -                ret = -ret;
> -            } else {
> -#if defined(TARGET_SPARC64) && !defined(TARGET_ABI32)
> -                env->xcc &= ~PSR_CARRY;
> -#else
> -                env->psr &= ~PSR_CARRY;
> -#endif
> -            }
> -            env->regwptr[0] = ret;
> -            /* next instruction */
> -            env->pc = env->npc;
> -            env->npc = env->npc + 4;
> -            break;
> -        case 0x83: /* flush windows */
> -#ifdef TARGET_ABI32
> -        case 0x103:
> -#endif
> -            flush_windows(env);
> -            /* next instruction */
> -            env->pc = env->npc;
> -            env->npc = env->npc + 4;
> -            break;
> -#ifndef TARGET_SPARC64
> -        case TT_WIN_OVF: /* window overflow */
> -            save_window(env);
> -            break;
> -        case TT_WIN_UNF: /* window underflow */
> -            restore_window(env);
> -            break;
> -        case TT_TFAULT:
> -        case TT_DFAULT:
> -            {
> -                info.si_signo = TARGET_SIGSEGV;
> -                info.si_errno = 0;
> -                /* XXX: check env->error_code */
> -                info.si_code = TARGET_SEGV_MAPERR;
> -                info._sifields._sigfault._addr = env->mmuregs[4];
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            }
> -            break;
> -#else
> -        case TT_SPILL: /* window overflow */
> -            save_window(env);
> -            break;
> -        case TT_FILL: /* window underflow */
> -            restore_window(env);
> -            break;
> -        case TT_TFAULT:
> -        case TT_DFAULT:
> -            {
> -                info.si_signo = TARGET_SIGSEGV;
> -                info.si_errno = 0;
> -                /* XXX: check env->error_code */
> -                info.si_code = TARGET_SEGV_MAPERR;
> -                if (trapnr == TT_DFAULT)
> -                    info._sifields._sigfault._addr = env->dmmu.mmuregs[4];
> -                else
> -                    info._sifields._sigfault._addr = cpu_tsptr(env)->tpc;
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            }
> -            break;
> -#ifndef TARGET_ABI32
> -        case 0x16e:
> -            flush_windows(env);
> -            sparc64_get_context(env);
> -            break;
> -        case 0x16f:
> -            flush_windows(env);
> -            sparc64_set_context(env);
> -            break;
> -#endif
> -#endif
> -        case EXCP_INTERRUPT:
> -            /* just indicate that signals should be handled asap */
> -            break;
> -        case TT_ILL_INSN:
> -            {
> -                info.si_signo = TARGET_SIGILL;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_ILL_ILLOPC;
> -                info._sifields._sigfault._addr = env->pc;
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            }
> -            break;
> -        case EXCP_DEBUG:
> -            {
> -                int sig;
> -
> -                sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> -                if (sig)
> -                  {
> -                    info.si_signo = sig;
> -                    info.si_errno = 0;
> -                    info.si_code = TARGET_TRAP_BRKPT;
> -                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                  }
> -            }
> -            break;
> -        case EXCP_ATOMIC:
> -            cpu_exec_step_atomic(cs);
> -            break;
> -        default:
> -            printf ("Unhandled trap: 0x%x\n", trapnr);
> -            cpu_dump_state(cs, stderr, fprintf, 0);
> -            exit(EXIT_FAILURE);
> -        }
> -        process_pending_signals (env);
> -    }
> -}
> -
> -#endif
> -
> -#ifdef TARGET_PPC
> -static inline uint64_t cpu_ppc_get_tb(CPUPPCState *env)
> -{
> -    return cpu_get_host_ticks();
> -}
> -
> -uint64_t cpu_ppc_load_tbl(CPUPPCState *env)
> -{
> -    return cpu_ppc_get_tb(env);
> -}
> -
> -uint32_t cpu_ppc_load_tbu(CPUPPCState *env)
> -{
> -    return cpu_ppc_get_tb(env) >> 32;
> -}
> -
> -uint64_t cpu_ppc_load_atbl(CPUPPCState *env)
> -{
> -    return cpu_ppc_get_tb(env);
> -}
> -
> -uint32_t cpu_ppc_load_atbu(CPUPPCState *env)
> -{
> -    return cpu_ppc_get_tb(env) >> 32;
> -}
> -
> -uint32_t cpu_ppc601_load_rtcu(CPUPPCState *env)
> -__attribute__ (( alias ("cpu_ppc_load_tbu") ));
> -
> -uint32_t cpu_ppc601_load_rtcl(CPUPPCState *env)
> -{
> -    return cpu_ppc_load_tbl(env) & 0x3FFFFF80;
> -}
> -
> -/* XXX: to be fixed */
> -int ppc_dcr_read (ppc_dcr_t *dcr_env, int dcrn, uint32_t *valp)
> -{
> -    return -1;
> -}
> -
> -int ppc_dcr_write (ppc_dcr_t *dcr_env, int dcrn, uint32_t val)
> -{
> -    return -1;
> -}
> -
> -static int do_store_exclusive(CPUPPCState *env)
> -{
> -    target_ulong addr;
> -    target_ulong page_addr;
> -    target_ulong val, val2 __attribute__((unused)) = 0;
> -    int flags;
> -    int segv = 0;
> -
> -    addr = env->reserve_ea;
> -    page_addr = addr & TARGET_PAGE_MASK;
> -    start_exclusive();
> -    mmap_lock();
> -    flags = page_get_flags(page_addr);
> -    if ((flags & PAGE_READ) == 0) {
> -        segv = 1;
> -    } else {
> -        int reg = env->reserve_info & 0x1f;
> -        int size = env->reserve_info >> 5;
> -        int stored = 0;
> -
> -        if (addr == env->reserve_addr) {
> -            switch (size) {
> -            case 1: segv = get_user_u8(val, addr); break;
> -            case 2: segv = get_user_u16(val, addr); break;
> -            case 4: segv = get_user_u32(val, addr); break;
> -#if defined(TARGET_PPC64)
> -            case 8: segv = get_user_u64(val, addr); break;
> -            case 16: {
> -                segv = get_user_u64(val, addr);
> -                if (!segv) {
> -                    segv = get_user_u64(val2, addr + 8);
> -                }
> -                break;
> -            }
> -#endif
> -            default: abort();
> -            }
> -            if (!segv && val == env->reserve_val) {
> -                val = env->gpr[reg];
> -                switch (size) {
> -                case 1: segv = put_user_u8(val, addr); break;
> -                case 2: segv = put_user_u16(val, addr); break;
> -                case 4: segv = put_user_u32(val, addr); break;
> -#if defined(TARGET_PPC64)
> -                case 8: segv = put_user_u64(val, addr); break;
> -                case 16: {
> -                    if (val2 == env->reserve_val2) {
> -                        if (msr_le) {
> -                            val2 = val;
> -                            val = env->gpr[reg+1];
> -                        } else {
> -                            val2 = env->gpr[reg+1];
> -                        }
> -                        segv = put_user_u64(val, addr);
> -                        if (!segv) {
> -                            segv = put_user_u64(val2, addr + 8);
> -                        }
> -                    }
> -                    break;
> -                }
> -#endif
> -                default: abort();
> -                }
> -                if (!segv) {
> -                    stored = 1;
> -                }
> -            }
> -        }
> -        env->crf[0] = (stored << 1) | xer_so;
> -        env->reserve_addr = (target_ulong)-1;
> -    }
> -    if (!segv) {
> -        env->nip += 4;
> -    }
> -    mmap_unlock();
> -    end_exclusive();
> -    return segv;
> -}
> -
> -void cpu_loop(CPUPPCState *env)
> -{
> -    CPUState *cs = CPU(ppc_env_get_cpu(env));
> -    target_siginfo_t info;
> -    int trapnr;
> -    target_ulong ret;
> -
> -    for(;;) {
> -        cpu_exec_start(cs);
> -        trapnr = cpu_exec(cs);
> -        cpu_exec_end(cs);
> -        process_queued_cpu_work(cs);
> -
> -        switch(trapnr) {
> -        case POWERPC_EXCP_NONE:
> -            /* Just go on */
> -            break;
> -        case POWERPC_EXCP_CRITICAL: /* Critical input                        
> */
> -            cpu_abort(cs, "Critical interrupt while in user mode. "
> -                      "Aborting\n");
> -            break;
> -        case POWERPC_EXCP_MCHECK:   /* Machine check exception               
> */
> -            cpu_abort(cs, "Machine check exception while in user mode. "
> -                      "Aborting\n");
> -            break;
> -        case POWERPC_EXCP_DSI:      /* Data storage exception                
> */
> -            /* XXX: check this. Seems bugged */
> -            switch (env->error_code & 0xFF000000) {
> -            case 0x40000000:
> -            case 0x42000000:
> -                info.si_signo = TARGET_SIGSEGV;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_SEGV_MAPERR;
> -                break;
> -            case 0x04000000:
> -                info.si_signo = TARGET_SIGILL;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_ILL_ILLADR;
> -                break;
> -            case 0x08000000:
> -                info.si_signo = TARGET_SIGSEGV;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_SEGV_ACCERR;
> -                break;
> -            default:
> -                /* Let's send a regular segfault... */
> -                EXCP_DUMP(env, "Invalid segfault errno (%02x)\n",
> -                          env->error_code);
> -                info.si_signo = TARGET_SIGSEGV;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_SEGV_MAPERR;
> -                break;
> -            }
> -            info._sifields._sigfault._addr = env->spr[SPR_DAR];
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case POWERPC_EXCP_ISI:      /* Instruction storage exception         
> */
> -            /* XXX: check this */
> -            switch (env->error_code & 0xFF000000) {
> -            case 0x40000000:
> -                info.si_signo = TARGET_SIGSEGV;
> -            info.si_errno = 0;
> -                info.si_code = TARGET_SEGV_MAPERR;
> -                break;
> -            case 0x10000000:
> -            case 0x08000000:
> -                info.si_signo = TARGET_SIGSEGV;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_SEGV_ACCERR;
> -                break;
> -            default:
> -                /* Let's send a regular segfault... */
> -                EXCP_DUMP(env, "Invalid segfault errno (%02x)\n",
> -                          env->error_code);
> -                info.si_signo = TARGET_SIGSEGV;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_SEGV_MAPERR;
> -                break;
> -            }
> -            info._sifields._sigfault._addr = env->nip - 4;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case POWERPC_EXCP_EXTERNAL: /* External input                        
> */
> -            cpu_abort(cs, "External interrupt while in user mode. "
> -                      "Aborting\n");
> -            break;
> -        case POWERPC_EXCP_ALIGN:    /* Alignment exception                   
> */
> -            /* XXX: check this */
> -            info.si_signo = TARGET_SIGBUS;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_BUS_ADRALN;
> -            info._sifields._sigfault._addr = env->nip;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case POWERPC_EXCP_PROGRAM:  /* Program exception                     
> */
> -        case POWERPC_EXCP_HV_EMU:   /* HV emulation                          
> */
> -            /* XXX: check this */
> -            switch (env->error_code & ~0xF) {
> -            case POWERPC_EXCP_FP:
> -                info.si_signo = TARGET_SIGFPE;
> -                info.si_errno = 0;
> -                switch (env->error_code & 0xF) {
> -                case POWERPC_EXCP_FP_OX:
> -                    info.si_code = TARGET_FPE_FLTOVF;
> -                    break;
> -                case POWERPC_EXCP_FP_UX:
> -                    info.si_code = TARGET_FPE_FLTUND;
> -                    break;
> -                case POWERPC_EXCP_FP_ZX:
> -                case POWERPC_EXCP_FP_VXZDZ:
> -                    info.si_code = TARGET_FPE_FLTDIV;
> -                    break;
> -                case POWERPC_EXCP_FP_XX:
> -                    info.si_code = TARGET_FPE_FLTRES;
> -                    break;
> -                case POWERPC_EXCP_FP_VXSOFT:
> -                    info.si_code = TARGET_FPE_FLTINV;
> -                    break;
> -                case POWERPC_EXCP_FP_VXSNAN:
> -                case POWERPC_EXCP_FP_VXISI:
> -                case POWERPC_EXCP_FP_VXIDI:
> -                case POWERPC_EXCP_FP_VXIMZ:
> -                case POWERPC_EXCP_FP_VXVC:
> -                case POWERPC_EXCP_FP_VXSQRT:
> -                case POWERPC_EXCP_FP_VXCVI:
> -                    info.si_code = TARGET_FPE_FLTSUB;
> -                    break;
> -                default:
> -                    EXCP_DUMP(env, "Unknown floating point exception 
> (%02x)\n",
> -                              env->error_code);
> -                    break;
> -                }
> -                break;
> -            case POWERPC_EXCP_INVAL:
> -                info.si_signo = TARGET_SIGILL;
> -                info.si_errno = 0;
> -                switch (env->error_code & 0xF) {
> -                case POWERPC_EXCP_INVAL_INVAL:
> -                    info.si_code = TARGET_ILL_ILLOPC;
> -                    break;
> -                case POWERPC_EXCP_INVAL_LSWX:
> -                    info.si_code = TARGET_ILL_ILLOPN;
> -                    break;
> -                case POWERPC_EXCP_INVAL_SPR:
> -                    info.si_code = TARGET_ILL_PRVREG;
> -                    break;
> -                case POWERPC_EXCP_INVAL_FP:
> -                    info.si_code = TARGET_ILL_COPROC;
> -                    break;
> -                default:
> -                    EXCP_DUMP(env, "Unknown invalid operation (%02x)\n",
> -                              env->error_code & 0xF);
> -                    info.si_code = TARGET_ILL_ILLADR;
> -                    break;
> -                }
> -                break;
> -            case POWERPC_EXCP_PRIV:
> -                info.si_signo = TARGET_SIGILL;
> -                info.si_errno = 0;
> -                switch (env->error_code & 0xF) {
> -                case POWERPC_EXCP_PRIV_OPC:
> -                    info.si_code = TARGET_ILL_PRVOPC;
> -                    break;
> -                case POWERPC_EXCP_PRIV_REG:
> -                    info.si_code = TARGET_ILL_PRVREG;
> -                    break;
> -                default:
> -                    EXCP_DUMP(env, "Unknown privilege violation (%02x)\n",
> -                              env->error_code & 0xF);
> -                    info.si_code = TARGET_ILL_PRVOPC;
> -                    break;
> -                }
> -                break;
> -            case POWERPC_EXCP_TRAP:
> -                cpu_abort(cs, "Tried to call a TRAP\n");
> -                break;
> -            default:
> -                /* Should not happen ! */
> -                cpu_abort(cs, "Unknown program exception (%02x)\n",
> -                          env->error_code);
> -                break;
> -            }
> -            info._sifields._sigfault._addr = env->nip;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case POWERPC_EXCP_FPU:      /* Floating-point unavailable exception  
> */
> -            info.si_signo = TARGET_SIGILL;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_ILL_COPROC;
> -            info._sifields._sigfault._addr = env->nip;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case POWERPC_EXCP_SYSCALL:  /* System call exception                 
> */
> -            cpu_abort(cs, "Syscall exception while in user mode. "
> -                      "Aborting\n");
> -            break;
> -        case POWERPC_EXCP_APU:      /* Auxiliary processor unavailable       
> */
> -            info.si_signo = TARGET_SIGILL;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_ILL_COPROC;
> -            info._sifields._sigfault._addr = env->nip;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case POWERPC_EXCP_DECR:     /* Decrementer exception                 
> */
> -            cpu_abort(cs, "Decrementer interrupt while in user mode. "
> -                      "Aborting\n");
> -            break;
> -        case POWERPC_EXCP_FIT:      /* Fixed-interval timer interrupt        
> */
> -            cpu_abort(cs, "Fix interval timer interrupt while in user mode. "
> -                      "Aborting\n");
> -            break;
> -        case POWERPC_EXCP_WDT:      /* Watchdog timer interrupt              
> */
> -            cpu_abort(cs, "Watchdog timer interrupt while in user mode. "
> -                      "Aborting\n");
> -            break;
> -        case POWERPC_EXCP_DTLB:     /* Data TLB error                        
> */
> -            cpu_abort(cs, "Data TLB exception while in user mode. "
> -                      "Aborting\n");
> -            break;
> -        case POWERPC_EXCP_ITLB:     /* Instruction TLB error                 
> */
> -            cpu_abort(cs, "Instruction TLB exception while in user mode. "
> -                      "Aborting\n");
> -            break;
> -        case POWERPC_EXCP_SPEU:     /* SPE/embedded floating-point unavail.  
> */
> -            info.si_signo = TARGET_SIGILL;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_ILL_COPROC;
> -            info._sifields._sigfault._addr = env->nip;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case POWERPC_EXCP_EFPDI:    /* Embedded floating-point data IRQ      
> */
> -            cpu_abort(cs, "Embedded floating-point data IRQ not handled\n");
> -            break;
> -        case POWERPC_EXCP_EFPRI:    /* Embedded floating-point round IRQ     
> */
> -            cpu_abort(cs, "Embedded floating-point round IRQ not handled\n");
> -            break;
> -        case POWERPC_EXCP_EPERFM:   /* Embedded performance monitor IRQ      
> */
> -            cpu_abort(cs, "Performance monitor exception not handled\n");
> -            break;
> -        case POWERPC_EXCP_DOORI:    /* Embedded doorbell interrupt           
> */
> -            cpu_abort(cs, "Doorbell interrupt while in user mode. "
> -                       "Aborting\n");
> -            break;
> -        case POWERPC_EXCP_DOORCI:   /* Embedded doorbell critical interrupt  
> */
> -            cpu_abort(cs, "Doorbell critical interrupt while in user mode. "
> -                      "Aborting\n");
> -            break;
> -        case POWERPC_EXCP_RESET:    /* System reset exception                
> */
> -            cpu_abort(cs, "Reset interrupt while in user mode. "
> -                      "Aborting\n");
> -            break;
> -        case POWERPC_EXCP_DSEG:     /* Data segment exception                
> */
> -            cpu_abort(cs, "Data segment exception while in user mode. "
> -                      "Aborting\n");
> -            break;
> -        case POWERPC_EXCP_ISEG:     /* Instruction segment exception         
> */
> -            cpu_abort(cs, "Instruction segment exception "
> -                      "while in user mode. Aborting\n");
> -            break;
> -        /* PowerPC 64 with hypervisor mode support */
> -        case POWERPC_EXCP_HDECR:    /* Hypervisor decrementer exception      
> */
> -            cpu_abort(cs, "Hypervisor decrementer interrupt "
> -                      "while in user mode. Aborting\n");
> -            break;
> -        case POWERPC_EXCP_TRACE:    /* Trace exception                       
> */
> -            /* Nothing to do:
> -             * we use this exception to emulate step-by-step execution mode.
> -             */
> -            break;
> -        /* PowerPC 64 with hypervisor mode support */
> -        case POWERPC_EXCP_HDSI:     /* Hypervisor data storage exception     
> */
> -            cpu_abort(cs, "Hypervisor data storage exception "
> -                      "while in user mode. Aborting\n");
> -            break;
> -        case POWERPC_EXCP_HISI:     /* Hypervisor instruction storage excp   
> */
> -            cpu_abort(cs, "Hypervisor instruction storage exception "
> -                      "while in user mode. Aborting\n");
> -            break;
> -        case POWERPC_EXCP_HDSEG:    /* Hypervisor data segment exception     
> */
> -            cpu_abort(cs, "Hypervisor data segment exception "
> -                      "while in user mode. Aborting\n");
> -            break;
> -        case POWERPC_EXCP_HISEG:    /* Hypervisor instruction segment excp   
> */
> -            cpu_abort(cs, "Hypervisor instruction segment exception "
> -                      "while in user mode. Aborting\n");
> -            break;
> -        case POWERPC_EXCP_VPU:      /* Vector unavailable exception          
> */
> -            info.si_signo = TARGET_SIGILL;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_ILL_COPROC;
> -            info._sifields._sigfault._addr = env->nip;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case POWERPC_EXCP_PIT:      /* Programmable interval timer IRQ       
> */
> -            cpu_abort(cs, "Programmable interval timer interrupt "
> -                      "while in user mode. Aborting\n");
> -            break;
> -        case POWERPC_EXCP_IO:       /* IO error exception                    
> */
> -            cpu_abort(cs, "IO error exception while in user mode. "
> -                      "Aborting\n");
> -            break;
> -        case POWERPC_EXCP_RUNM:     /* Run mode exception                    
> */
> -            cpu_abort(cs, "Run mode exception while in user mode. "
> -                      "Aborting\n");
> -            break;
> -        case POWERPC_EXCP_EMUL:     /* Emulation trap exception              
> */
> -            cpu_abort(cs, "Emulation trap exception not handled\n");
> -            break;
> -        case POWERPC_EXCP_IFTLB:    /* Instruction fetch TLB error           
> */
> -            cpu_abort(cs, "Instruction fetch TLB exception "
> -                      "while in user-mode. Aborting");
> -            break;
> -        case POWERPC_EXCP_DLTLB:    /* Data load TLB miss                    
> */
> -            cpu_abort(cs, "Data load TLB exception while in user-mode. "
> -                      "Aborting");
> -            break;
> -        case POWERPC_EXCP_DSTLB:    /* Data store TLB miss                   
> */
> -            cpu_abort(cs, "Data store TLB exception while in user-mode. "
> -                      "Aborting");
> -            break;
> -        case POWERPC_EXCP_FPA:      /* Floating-point assist exception       
> */
> -            cpu_abort(cs, "Floating-point assist exception not handled\n");
> -            break;
> -        case POWERPC_EXCP_IABR:     /* Instruction address breakpoint        
> */
> -            cpu_abort(cs, "Instruction address breakpoint exception "
> -                      "not handled\n");
> -            break;
> -        case POWERPC_EXCP_SMI:      /* System management interrupt           
> */
> -            cpu_abort(cs, "System management interrupt while in user mode. "
> -                      "Aborting\n");
> -            break;
> -        case POWERPC_EXCP_THERM:    /* Thermal interrupt                     
> */
> -            cpu_abort(cs, "Thermal interrupt interrupt while in user mode. "
> -                      "Aborting\n");
> -            break;
> -        case POWERPC_EXCP_PERFM:   /* Embedded performance monitor IRQ      
> */
> -            cpu_abort(cs, "Performance monitor exception not handled\n");
> -            break;
> -        case POWERPC_EXCP_VPUA:     /* Vector assist exception               
> */
> -            cpu_abort(cs, "Vector assist exception not handled\n");
> -            break;
> -        case POWERPC_EXCP_SOFTP:    /* Soft patch exception                  
> */
> -            cpu_abort(cs, "Soft patch exception not handled\n");
> -            break;
> -        case POWERPC_EXCP_MAINT:    /* Maintenance exception                 
> */
> -            cpu_abort(cs, "Maintenance exception while in user mode. "
> -                      "Aborting\n");
> -            break;
> -        case POWERPC_EXCP_STOP:     /* stop translation                      
> */
> -            /* We did invalidate the instruction cache. Go on */
> -            break;
> -        case POWERPC_EXCP_BRANCH:   /* branch instruction:                   
> */
> -            /* We just stopped because of a branch. Go on */
> -            break;
> -        case POWERPC_EXCP_SYSCALL_USER:
> -            /* system call in user-mode emulation */
> -            /* WARNING:
> -             * PPC ABI uses overflow flag in cr0 to signal an error
> -             * in syscalls.
> -             */
> -            env->crf[0] &= ~0x1;
> -            env->nip += 4;
> -            ret = do_syscall(env, env->gpr[0], env->gpr[3], env->gpr[4],
> -                             env->gpr[5], env->gpr[6], env->gpr[7],
> -                             env->gpr[8], 0, 0);
> -            if (ret == -TARGET_ERESTARTSYS) {
> -                env->nip -= 4;
> -                break;
> -            }
> -            if (ret == (target_ulong)(-TARGET_QEMU_ESIGRETURN)) {
> -                /* Returning from a successful sigreturn syscall.
> -                   Avoid corrupting register state.  */
> -                break;
> -            }
> -            if (ret > (target_ulong)(-515)) {
> -                env->crf[0] |= 0x1;
> -                ret = -ret;
> -            }
> -            env->gpr[3] = ret;
> -            break;
> -        case POWERPC_EXCP_STCX:
> -            if (do_store_exclusive(env)) {
> -                info.si_signo = TARGET_SIGSEGV;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_SEGV_MAPERR;
> -                info._sifields._sigfault._addr = env->nip;
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            }
> -            break;
> -        case EXCP_DEBUG:
> -            {
> -                int sig;
> -
> -                sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> -                if (sig) {
> -                    info.si_signo = sig;
> -                    info.si_errno = 0;
> -                    info.si_code = TARGET_TRAP_BRKPT;
> -                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                  }
> -            }
> -            break;
> -        case EXCP_INTERRUPT:
> -            /* just indicate that signals should be handled asap */
> -            break;
> -        case EXCP_ATOMIC:
> -            cpu_exec_step_atomic(cs);
> -            break;
> -        default:
> -            cpu_abort(cs, "Unknown exception 0x%x. Aborting\n", trapnr);
> -            break;
> -        }
> -        process_pending_signals(env);
> -    }
> -}
> -#endif
> -
> -#ifdef TARGET_MIPS
> -
> -# ifdef TARGET_ABI_MIPSO32
> -#  define MIPS_SYS(name, args) args,
> -static const uint8_t mips_syscall_args[] = {
> -     MIPS_SYS(sys_syscall    , 8)    /* 4000 */
> -     MIPS_SYS(sys_exit       , 1)
> -     MIPS_SYS(sys_fork       , 0)
> -     MIPS_SYS(sys_read       , 3)
> -     MIPS_SYS(sys_write      , 3)
> -     MIPS_SYS(sys_open       , 3)    /* 4005 */
> -     MIPS_SYS(sys_close      , 1)
> -     MIPS_SYS(sys_waitpid    , 3)
> -     MIPS_SYS(sys_creat      , 2)
> -     MIPS_SYS(sys_link       , 2)
> -     MIPS_SYS(sys_unlink     , 1)    /* 4010 */
> -     MIPS_SYS(sys_execve     , 0)
> -     MIPS_SYS(sys_chdir      , 1)
> -     MIPS_SYS(sys_time       , 1)
> -     MIPS_SYS(sys_mknod      , 3)
> -     MIPS_SYS(sys_chmod      , 2)    /* 4015 */
> -     MIPS_SYS(sys_lchown     , 3)
> -     MIPS_SYS(sys_ni_syscall , 0)
> -     MIPS_SYS(sys_ni_syscall , 0)    /* was sys_stat */
> -     MIPS_SYS(sys_lseek      , 3)
> -     MIPS_SYS(sys_getpid     , 0)    /* 4020 */
> -     MIPS_SYS(sys_mount      , 5)
> -     MIPS_SYS(sys_umount     , 1)
> -     MIPS_SYS(sys_setuid     , 1)
> -     MIPS_SYS(sys_getuid     , 0)
> -     MIPS_SYS(sys_stime      , 1)    /* 4025 */
> -     MIPS_SYS(sys_ptrace     , 4)
> -     MIPS_SYS(sys_alarm      , 1)
> -     MIPS_SYS(sys_ni_syscall , 0)    /* was sys_fstat */
> -     MIPS_SYS(sys_pause      , 0)
> -     MIPS_SYS(sys_utime      , 2)    /* 4030 */
> -     MIPS_SYS(sys_ni_syscall , 0)
> -     MIPS_SYS(sys_ni_syscall , 0)
> -     MIPS_SYS(sys_access     , 2)
> -     MIPS_SYS(sys_nice       , 1)
> -     MIPS_SYS(sys_ni_syscall , 0)    /* 4035 */
> -     MIPS_SYS(sys_sync       , 0)
> -     MIPS_SYS(sys_kill       , 2)
> -     MIPS_SYS(sys_rename     , 2)
> -     MIPS_SYS(sys_mkdir      , 2)
> -     MIPS_SYS(sys_rmdir      , 1)    /* 4040 */
> -     MIPS_SYS(sys_dup                , 1)
> -     MIPS_SYS(sys_pipe       , 0)
> -     MIPS_SYS(sys_times      , 1)
> -     MIPS_SYS(sys_ni_syscall , 0)
> -     MIPS_SYS(sys_brk                , 1)    /* 4045 */
> -     MIPS_SYS(sys_setgid     , 1)
> -     MIPS_SYS(sys_getgid     , 0)
> -     MIPS_SYS(sys_ni_syscall , 0)    /* was signal(2) */
> -     MIPS_SYS(sys_geteuid    , 0)
> -     MIPS_SYS(sys_getegid    , 0)    /* 4050 */
> -     MIPS_SYS(sys_acct       , 0)
> -     MIPS_SYS(sys_umount2    , 2)
> -     MIPS_SYS(sys_ni_syscall , 0)
> -     MIPS_SYS(sys_ioctl      , 3)
> -     MIPS_SYS(sys_fcntl      , 3)    /* 4055 */
> -     MIPS_SYS(sys_ni_syscall , 2)
> -     MIPS_SYS(sys_setpgid    , 2)
> -     MIPS_SYS(sys_ni_syscall , 0)
> -     MIPS_SYS(sys_olduname   , 1)
> -     MIPS_SYS(sys_umask      , 1)    /* 4060 */
> -     MIPS_SYS(sys_chroot     , 1)
> -     MIPS_SYS(sys_ustat      , 2)
> -     MIPS_SYS(sys_dup2       , 2)
> -     MIPS_SYS(sys_getppid    , 0)
> -     MIPS_SYS(sys_getpgrp    , 0)    /* 4065 */
> -     MIPS_SYS(sys_setsid     , 0)
> -     MIPS_SYS(sys_sigaction  , 3)
> -     MIPS_SYS(sys_sgetmask   , 0)
> -     MIPS_SYS(sys_ssetmask   , 1)
> -     MIPS_SYS(sys_setreuid   , 2)    /* 4070 */
> -     MIPS_SYS(sys_setregid   , 2)
> -     MIPS_SYS(sys_sigsuspend , 0)
> -     MIPS_SYS(sys_sigpending , 1)
> -     MIPS_SYS(sys_sethostname        , 2)
> -     MIPS_SYS(sys_setrlimit  , 2)    /* 4075 */
> -     MIPS_SYS(sys_getrlimit  , 2)
> -     MIPS_SYS(sys_getrusage  , 2)
> -     MIPS_SYS(sys_gettimeofday, 2)
> -     MIPS_SYS(sys_settimeofday, 2)
> -     MIPS_SYS(sys_getgroups  , 2)    /* 4080 */
> -     MIPS_SYS(sys_setgroups  , 2)
> -     MIPS_SYS(sys_ni_syscall , 0)    /* old_select */
> -     MIPS_SYS(sys_symlink    , 2)
> -     MIPS_SYS(sys_ni_syscall , 0)    /* was sys_lstat */
> -     MIPS_SYS(sys_readlink   , 3)    /* 4085 */
> -     MIPS_SYS(sys_uselib     , 1)
> -     MIPS_SYS(sys_swapon     , 2)
> -     MIPS_SYS(sys_reboot     , 3)
> -     MIPS_SYS(old_readdir    , 3)
> -     MIPS_SYS(old_mmap       , 6)    /* 4090 */
> -     MIPS_SYS(sys_munmap     , 2)
> -     MIPS_SYS(sys_truncate   , 2)
> -     MIPS_SYS(sys_ftruncate  , 2)
> -     MIPS_SYS(sys_fchmod     , 2)
> -     MIPS_SYS(sys_fchown     , 3)    /* 4095 */
> -     MIPS_SYS(sys_getpriority        , 2)
> -     MIPS_SYS(sys_setpriority        , 3)
> -     MIPS_SYS(sys_ni_syscall , 0)
> -     MIPS_SYS(sys_statfs     , 2)
> -     MIPS_SYS(sys_fstatfs    , 2)    /* 4100 */
> -     MIPS_SYS(sys_ni_syscall , 0)    /* was ioperm(2) */
> -     MIPS_SYS(sys_socketcall , 2)
> -     MIPS_SYS(sys_syslog     , 3)
> -     MIPS_SYS(sys_setitimer  , 3)
> -     MIPS_SYS(sys_getitimer  , 2)    /* 4105 */
> -     MIPS_SYS(sys_newstat    , 2)
> -     MIPS_SYS(sys_newlstat   , 2)
> -     MIPS_SYS(sys_newfstat   , 2)
> -     MIPS_SYS(sys_uname      , 1)
> -     MIPS_SYS(sys_ni_syscall , 0)    /* 4110 was iopl(2) */
> -     MIPS_SYS(sys_vhangup    , 0)
> -     MIPS_SYS(sys_ni_syscall , 0)    /* was sys_idle() */
> -     MIPS_SYS(sys_ni_syscall , 0)    /* was sys_vm86 */
> -     MIPS_SYS(sys_wait4      , 4)
> -     MIPS_SYS(sys_swapoff    , 1)    /* 4115 */
> -     MIPS_SYS(sys_sysinfo    , 1)
> -     MIPS_SYS(sys_ipc                , 6)
> -     MIPS_SYS(sys_fsync      , 1)
> -     MIPS_SYS(sys_sigreturn  , 0)
> -     MIPS_SYS(sys_clone      , 6)    /* 4120 */
> -     MIPS_SYS(sys_setdomainname, 2)
> -     MIPS_SYS(sys_newuname   , 1)
> -     MIPS_SYS(sys_ni_syscall , 0)    /* sys_modify_ldt */
> -     MIPS_SYS(sys_adjtimex   , 1)
> -     MIPS_SYS(sys_mprotect   , 3)    /* 4125 */
> -     MIPS_SYS(sys_sigprocmask        , 3)
> -     MIPS_SYS(sys_ni_syscall , 0)    /* was create_module */
> -     MIPS_SYS(sys_init_module        , 5)
> -     MIPS_SYS(sys_delete_module, 1)
> -     MIPS_SYS(sys_ni_syscall , 0)    /* 4130 was get_kernel_syms */
> -     MIPS_SYS(sys_quotactl   , 0)
> -     MIPS_SYS(sys_getpgid    , 1)
> -     MIPS_SYS(sys_fchdir     , 1)
> -     MIPS_SYS(sys_bdflush    , 2)
> -     MIPS_SYS(sys_sysfs      , 3)    /* 4135 */
> -     MIPS_SYS(sys_personality        , 1)
> -     MIPS_SYS(sys_ni_syscall , 0)    /* for afs_syscall */
> -     MIPS_SYS(sys_setfsuid   , 1)
> -     MIPS_SYS(sys_setfsgid   , 1)
> -     MIPS_SYS(sys_llseek     , 5)    /* 4140 */
> -     MIPS_SYS(sys_getdents   , 3)
> -     MIPS_SYS(sys_select     , 5)
> -     MIPS_SYS(sys_flock      , 2)
> -     MIPS_SYS(sys_msync      , 3)
> -     MIPS_SYS(sys_readv      , 3)    /* 4145 */
> -     MIPS_SYS(sys_writev     , 3)
> -     MIPS_SYS(sys_cacheflush , 3)
> -     MIPS_SYS(sys_cachectl   , 3)
> -     MIPS_SYS(sys_sysmips    , 4)
> -     MIPS_SYS(sys_ni_syscall , 0)    /* 4150 */
> -     MIPS_SYS(sys_getsid     , 1)
> -     MIPS_SYS(sys_fdatasync  , 0)
> -     MIPS_SYS(sys_sysctl     , 1)
> -     MIPS_SYS(sys_mlock      , 2)
> -     MIPS_SYS(sys_munlock    , 2)    /* 4155 */
> -     MIPS_SYS(sys_mlockall   , 1)
> -     MIPS_SYS(sys_munlockall , 0)
> -     MIPS_SYS(sys_sched_setparam, 2)
> -     MIPS_SYS(sys_sched_getparam, 2)
> -     MIPS_SYS(sys_sched_setscheduler, 3)     /* 4160 */
> -     MIPS_SYS(sys_sched_getscheduler, 1)
> -     MIPS_SYS(sys_sched_yield        , 0)
> -     MIPS_SYS(sys_sched_get_priority_max, 1)
> -     MIPS_SYS(sys_sched_get_priority_min, 1)
> -     MIPS_SYS(sys_sched_rr_get_interval, 2)  /* 4165 */
> -     MIPS_SYS(sys_nanosleep, 2)
> -     MIPS_SYS(sys_mremap     , 5)
> -     MIPS_SYS(sys_accept     , 3)
> -     MIPS_SYS(sys_bind       , 3)
> -     MIPS_SYS(sys_connect    , 3)    /* 4170 */
> -     MIPS_SYS(sys_getpeername        , 3)
> -     MIPS_SYS(sys_getsockname        , 3)
> -     MIPS_SYS(sys_getsockopt , 5)
> -     MIPS_SYS(sys_listen     , 2)
> -     MIPS_SYS(sys_recv       , 4)    /* 4175 */
> -     MIPS_SYS(sys_recvfrom   , 6)
> -     MIPS_SYS(sys_recvmsg    , 3)
> -     MIPS_SYS(sys_send       , 4)
> -     MIPS_SYS(sys_sendmsg    , 3)
> -     MIPS_SYS(sys_sendto     , 6)    /* 4180 */
> -     MIPS_SYS(sys_setsockopt , 5)
> -     MIPS_SYS(sys_shutdown   , 2)
> -     MIPS_SYS(sys_socket     , 3)
> -     MIPS_SYS(sys_socketpair , 4)
> -     MIPS_SYS(sys_setresuid  , 3)    /* 4185 */
> -     MIPS_SYS(sys_getresuid  , 3)
> -     MIPS_SYS(sys_ni_syscall , 0)    /* was sys_query_module */
> -     MIPS_SYS(sys_poll       , 3)
> -     MIPS_SYS(sys_nfsservctl , 3)
> -     MIPS_SYS(sys_setresgid  , 3)    /* 4190 */
> -     MIPS_SYS(sys_getresgid  , 3)
> -     MIPS_SYS(sys_prctl      , 5)
> -     MIPS_SYS(sys_rt_sigreturn, 0)
> -     MIPS_SYS(sys_rt_sigaction, 4)
> -     MIPS_SYS(sys_rt_sigprocmask, 4) /* 4195 */
> -     MIPS_SYS(sys_rt_sigpending, 2)
> -     MIPS_SYS(sys_rt_sigtimedwait, 4)
> -     MIPS_SYS(sys_rt_sigqueueinfo, 3)
> -     MIPS_SYS(sys_rt_sigsuspend, 0)
> -     MIPS_SYS(sys_pread64    , 6)    /* 4200 */
> -     MIPS_SYS(sys_pwrite64   , 6)
> -     MIPS_SYS(sys_chown      , 3)
> -     MIPS_SYS(sys_getcwd     , 2)
> -     MIPS_SYS(sys_capget     , 2)
> -     MIPS_SYS(sys_capset     , 2)    /* 4205 */
> -     MIPS_SYS(sys_sigaltstack        , 2)
> -     MIPS_SYS(sys_sendfile   , 4)
> -     MIPS_SYS(sys_ni_syscall , 0)
> -     MIPS_SYS(sys_ni_syscall , 0)
> -     MIPS_SYS(sys_mmap2      , 6)    /* 4210 */
> -     MIPS_SYS(sys_truncate64 , 4)
> -     MIPS_SYS(sys_ftruncate64        , 4)
> -     MIPS_SYS(sys_stat64     , 2)
> -     MIPS_SYS(sys_lstat64    , 2)
> -     MIPS_SYS(sys_fstat64    , 2)    /* 4215 */
> -     MIPS_SYS(sys_pivot_root , 2)
> -     MIPS_SYS(sys_mincore    , 3)
> -     MIPS_SYS(sys_madvise    , 3)
> -     MIPS_SYS(sys_getdents64 , 3)
> -     MIPS_SYS(sys_fcntl64    , 3)    /* 4220 */
> -     MIPS_SYS(sys_ni_syscall , 0)
> -     MIPS_SYS(sys_gettid     , 0)
> -     MIPS_SYS(sys_readahead  , 5)
> -     MIPS_SYS(sys_setxattr   , 5)
> -     MIPS_SYS(sys_lsetxattr  , 5)    /* 4225 */
> -     MIPS_SYS(sys_fsetxattr  , 5)
> -     MIPS_SYS(sys_getxattr   , 4)
> -     MIPS_SYS(sys_lgetxattr  , 4)
> -     MIPS_SYS(sys_fgetxattr  , 4)
> -     MIPS_SYS(sys_listxattr  , 3)    /* 4230 */
> -     MIPS_SYS(sys_llistxattr , 3)
> -     MIPS_SYS(sys_flistxattr , 3)
> -     MIPS_SYS(sys_removexattr        , 2)
> -     MIPS_SYS(sys_lremovexattr, 2)
> -     MIPS_SYS(sys_fremovexattr, 2)   /* 4235 */
> -     MIPS_SYS(sys_tkill      , 2)
> -     MIPS_SYS(sys_sendfile64 , 5)
> -     MIPS_SYS(sys_futex      , 6)
> -     MIPS_SYS(sys_sched_setaffinity, 3)
> -     MIPS_SYS(sys_sched_getaffinity, 3)      /* 4240 */
> -     MIPS_SYS(sys_io_setup   , 2)
> -     MIPS_SYS(sys_io_destroy , 1)
> -     MIPS_SYS(sys_io_getevents, 5)
> -     MIPS_SYS(sys_io_submit  , 3)
> -     MIPS_SYS(sys_io_cancel  , 3)    /* 4245 */
> -     MIPS_SYS(sys_exit_group , 1)
> -     MIPS_SYS(sys_lookup_dcookie, 3)
> -     MIPS_SYS(sys_epoll_create, 1)
> -     MIPS_SYS(sys_epoll_ctl  , 4)
> -     MIPS_SYS(sys_epoll_wait , 3)    /* 4250 */
> -     MIPS_SYS(sys_remap_file_pages, 5)
> -     MIPS_SYS(sys_set_tid_address, 1)
> -     MIPS_SYS(sys_restart_syscall, 0)
> -     MIPS_SYS(sys_fadvise64_64, 7)
> -     MIPS_SYS(sys_statfs64   , 3)    /* 4255 */
> -     MIPS_SYS(sys_fstatfs64  , 2)
> -     MIPS_SYS(sys_timer_create, 3)
> -     MIPS_SYS(sys_timer_settime, 4)
> -     MIPS_SYS(sys_timer_gettime, 2)
> -     MIPS_SYS(sys_timer_getoverrun, 1)       /* 4260 */
> -     MIPS_SYS(sys_timer_delete, 1)
> -     MIPS_SYS(sys_clock_settime, 2)
> -     MIPS_SYS(sys_clock_gettime, 2)
> -     MIPS_SYS(sys_clock_getres, 2)
> -     MIPS_SYS(sys_clock_nanosleep, 4)        /* 4265 */
> -     MIPS_SYS(sys_tgkill     , 3)
> -     MIPS_SYS(sys_utimes     , 2)
> -     MIPS_SYS(sys_mbind      , 4)
> -     MIPS_SYS(sys_ni_syscall , 0)    /* sys_get_mempolicy */
> -     MIPS_SYS(sys_ni_syscall , 0)    /* 4270 sys_set_mempolicy */
> -     MIPS_SYS(sys_mq_open    , 4)
> -     MIPS_SYS(sys_mq_unlink  , 1)
> -     MIPS_SYS(sys_mq_timedsend, 5)
> -     MIPS_SYS(sys_mq_timedreceive, 5)
> -     MIPS_SYS(sys_mq_notify  , 2)    /* 4275 */
> -     MIPS_SYS(sys_mq_getsetattr, 3)
> -     MIPS_SYS(sys_ni_syscall , 0)    /* sys_vserver */
> -     MIPS_SYS(sys_waitid     , 4)
> -     MIPS_SYS(sys_ni_syscall , 0)    /* available, was setaltroot */
> -     MIPS_SYS(sys_add_key    , 5)
> -     MIPS_SYS(sys_request_key, 4)
> -     MIPS_SYS(sys_keyctl     , 5)
> -     MIPS_SYS(sys_set_thread_area, 1)
> -     MIPS_SYS(sys_inotify_init, 0)
> -     MIPS_SYS(sys_inotify_add_watch, 3) /* 4285 */
> -     MIPS_SYS(sys_inotify_rm_watch, 2)
> -     MIPS_SYS(sys_migrate_pages, 4)
> -     MIPS_SYS(sys_openat, 4)
> -     MIPS_SYS(sys_mkdirat, 3)
> -     MIPS_SYS(sys_mknodat, 4)        /* 4290 */
> -     MIPS_SYS(sys_fchownat, 5)
> -     MIPS_SYS(sys_futimesat, 3)
> -     MIPS_SYS(sys_fstatat64, 4)
> -     MIPS_SYS(sys_unlinkat, 3)
> -     MIPS_SYS(sys_renameat, 4)       /* 4295 */
> -     MIPS_SYS(sys_linkat, 5)
> -     MIPS_SYS(sys_symlinkat, 3)
> -     MIPS_SYS(sys_readlinkat, 4)
> -     MIPS_SYS(sys_fchmodat, 3)
> -     MIPS_SYS(sys_faccessat, 3)      /* 4300 */
> -     MIPS_SYS(sys_pselect6, 6)
> -     MIPS_SYS(sys_ppoll, 5)
> -     MIPS_SYS(sys_unshare, 1)
> -     MIPS_SYS(sys_splice, 6)
> -     MIPS_SYS(sys_sync_file_range, 7) /* 4305 */
> -     MIPS_SYS(sys_tee, 4)
> -     MIPS_SYS(sys_vmsplice, 4)
> -     MIPS_SYS(sys_move_pages, 6)
> -     MIPS_SYS(sys_set_robust_list, 2)
> -     MIPS_SYS(sys_get_robust_list, 3) /* 4310 */
> -     MIPS_SYS(sys_kexec_load, 4)
> -     MIPS_SYS(sys_getcpu, 3)
> -     MIPS_SYS(sys_epoll_pwait, 6)
> -     MIPS_SYS(sys_ioprio_set, 3)
> -     MIPS_SYS(sys_ioprio_get, 2)
> -        MIPS_SYS(sys_utimensat, 4)
> -        MIPS_SYS(sys_signalfd, 3)
> -        MIPS_SYS(sys_ni_syscall, 0)     /* was timerfd */
> -        MIPS_SYS(sys_eventfd, 1)
> -        MIPS_SYS(sys_fallocate, 6)      /* 4320 */
> -        MIPS_SYS(sys_timerfd_create, 2)
> -        MIPS_SYS(sys_timerfd_gettime, 2)
> -        MIPS_SYS(sys_timerfd_settime, 4)
> -        MIPS_SYS(sys_signalfd4, 4)
> -        MIPS_SYS(sys_eventfd2, 2)       /* 4325 */
> -        MIPS_SYS(sys_epoll_create1, 1)
> -        MIPS_SYS(sys_dup3, 3)
> -        MIPS_SYS(sys_pipe2, 2)
> -        MIPS_SYS(sys_inotify_init1, 1)
> -        MIPS_SYS(sys_preadv, 5)         /* 4330 */
> -        MIPS_SYS(sys_pwritev, 5)
> -        MIPS_SYS(sys_rt_tgsigqueueinfo, 4)
> -        MIPS_SYS(sys_perf_event_open, 5)
> -        MIPS_SYS(sys_accept4, 4)
> -        MIPS_SYS(sys_recvmmsg, 5)       /* 4335 */
> -        MIPS_SYS(sys_fanotify_init, 2)
> -        MIPS_SYS(sys_fanotify_mark, 6)
> -        MIPS_SYS(sys_prlimit64, 4)
> -        MIPS_SYS(sys_name_to_handle_at, 5)
> -        MIPS_SYS(sys_open_by_handle_at, 3) /* 4340 */
> -        MIPS_SYS(sys_clock_adjtime, 2)
> -        MIPS_SYS(sys_syncfs, 1)
> -        MIPS_SYS(sys_sendmmsg, 4)
> -        MIPS_SYS(sys_setns, 2)
> -        MIPS_SYS(sys_process_vm_readv, 6) /* 345 */
> -        MIPS_SYS(sys_process_vm_writev, 6)
> -        MIPS_SYS(sys_kcmp, 5)
> -        MIPS_SYS(sys_finit_module, 3)
> -        MIPS_SYS(sys_sched_setattr, 2)
> -        MIPS_SYS(sys_sched_getattr, 3)  /* 350 */
> -        MIPS_SYS(sys_renameat2, 5)
> -        MIPS_SYS(sys_seccomp, 3)
> -        MIPS_SYS(sys_getrandom, 3)
> -        MIPS_SYS(sys_memfd_create, 2)
> -        MIPS_SYS(sys_bpf, 3)            /* 355 */
> -        MIPS_SYS(sys_execveat, 5)
> -        MIPS_SYS(sys_userfaultfd, 1)
> -        MIPS_SYS(sys_membarrier, 2)
> -        MIPS_SYS(sys_mlock2, 3)
> -        MIPS_SYS(sys_copy_file_range, 6) /* 360 */
> -        MIPS_SYS(sys_preadv2, 6)
> -        MIPS_SYS(sys_pwritev2, 6)
> -};
> -#  undef MIPS_SYS
> -# endif /* O32 */
> -
> -static int do_store_exclusive(CPUMIPSState *env)
> -{
> -    target_ulong addr;
> -    target_ulong page_addr;
> -    target_ulong val;
> -    int flags;
> -    int segv = 0;
> -    int reg;
> -    int d;
> -
> -    addr = env->lladdr;
> -    page_addr = addr & TARGET_PAGE_MASK;
> -    start_exclusive();
> -    mmap_lock();
> -    flags = page_get_flags(page_addr);
> -    if ((flags & PAGE_READ) == 0) {
> -        segv = 1;
> -    } else {
> -        reg = env->llreg & 0x1f;
> -        d = (env->llreg & 0x20) != 0;
> -        if (d) {
> -            segv = get_user_s64(val, addr);
> -        } else {
> -            segv = get_user_s32(val, addr);
> -        }
> -        if (!segv) {
> -            if (val != env->llval) {
> -                env->active_tc.gpr[reg] = 0;
> -            } else {
> -                if (d) {
> -                    segv = put_user_u64(env->llnewval, addr);
> -                } else {
> -                    segv = put_user_u32(env->llnewval, addr);
> -                }
> -                if (!segv) {
> -                    env->active_tc.gpr[reg] = 1;
> -                }
> -            }
> -        }
> -    }
> -    env->lladdr = -1;
> -    if (!segv) {
> -        env->active_tc.PC += 4;
> -    }
> -    mmap_unlock();
> -    end_exclusive();
> -    return segv;
> -}
> -
> -/* Break codes */
> -enum {
> -    BRK_OVERFLOW = 6,
> -    BRK_DIVZERO = 7
> -};
> -
> -static int do_break(CPUMIPSState *env, target_siginfo_t *info,
> -                    unsigned int code)
> -{
> -    int ret = -1;
> -
> -    switch (code) {
> -    case BRK_OVERFLOW:
> -    case BRK_DIVZERO:
> -        info->si_signo = TARGET_SIGFPE;
> -        info->si_errno = 0;
> -        info->si_code = (code == BRK_OVERFLOW) ? FPE_INTOVF : FPE_INTDIV;
> -        queue_signal(env, info->si_signo, QEMU_SI_FAULT, &*info);
> -        ret = 0;
> -        break;
> -    default:
> -        info->si_signo = TARGET_SIGTRAP;
> -        info->si_errno = 0;
> -        queue_signal(env, info->si_signo, QEMU_SI_FAULT, &*info);
> -        ret = 0;
> -        break;
> -    }
> -
> -    return ret;
> -}
> -
> -void cpu_loop(CPUMIPSState *env)
> -{
> -    CPUState *cs = CPU(mips_env_get_cpu(env));
> -    target_siginfo_t info;
> -    int trapnr;
> -    abi_long ret;
> -# ifdef TARGET_ABI_MIPSO32
> -    unsigned int syscall_num;
> -# endif
> -
> -    for(;;) {
> -        cpu_exec_start(cs);
> -        trapnr = cpu_exec(cs);
> -        cpu_exec_end(cs);
> -        process_queued_cpu_work(cs);
> -
> -        switch(trapnr) {
> -        case EXCP_SYSCALL:
> -            env->active_tc.PC += 4;
> -# ifdef TARGET_ABI_MIPSO32
> -            syscall_num = env->active_tc.gpr[2] - 4000;
> -            if (syscall_num >= sizeof(mips_syscall_args)) {
> -                ret = -TARGET_ENOSYS;
> -            } else {
> -                int nb_args;
> -                abi_ulong sp_reg;
> -                abi_ulong arg5 = 0, arg6 = 0, arg7 = 0, arg8 = 0;
> -
> -                nb_args = mips_syscall_args[syscall_num];
> -                sp_reg = env->active_tc.gpr[29];
> -                switch (nb_args) {
> -                /* these arguments are taken from the stack */
> -                case 8:
> -                    if ((ret = get_user_ual(arg8, sp_reg + 28)) != 0) {
> -                        goto done_syscall;
> -                    }
> -                case 7:
> -                    if ((ret = get_user_ual(arg7, sp_reg + 24)) != 0) {
> -                        goto done_syscall;
> -                    }
> -                case 6:
> -                    if ((ret = get_user_ual(arg6, sp_reg + 20)) != 0) {
> -                        goto done_syscall;
> -                    }
> -                case 5:
> -                    if ((ret = get_user_ual(arg5, sp_reg + 16)) != 0) {
> -                        goto done_syscall;
> -                    }
> -                default:
> -                    break;
> -                }
> -                ret = do_syscall(env, env->active_tc.gpr[2],
> -                                 env->active_tc.gpr[4],
> -                                 env->active_tc.gpr[5],
> -                                 env->active_tc.gpr[6],
> -                                 env->active_tc.gpr[7],
> -                                 arg5, arg6, arg7, arg8);
> -            }
> -done_syscall:
> -# else
> -            ret = do_syscall(env, env->active_tc.gpr[2],
> -                             env->active_tc.gpr[4], env->active_tc.gpr[5],
> -                             env->active_tc.gpr[6], env->active_tc.gpr[7],
> -                             env->active_tc.gpr[8], env->active_tc.gpr[9],
> -                             env->active_tc.gpr[10], env->active_tc.gpr[11]);
> -# endif /* O32 */
> -            if (ret == -TARGET_ERESTARTSYS) {
> -                env->active_tc.PC -= 4;
> -                break;
> -            }
> -            if (ret == -TARGET_QEMU_ESIGRETURN) {
> -                /* Returning from a successful sigreturn syscall.
> -                   Avoid clobbering register state.  */
> -                break;
> -            }
> -            if ((abi_ulong)ret >= (abi_ulong)-1133) {
> -                env->active_tc.gpr[7] = 1; /* error flag */
> -                ret = -ret;
> -            } else {
> -                env->active_tc.gpr[7] = 0; /* error flag */
> -            }
> -            env->active_tc.gpr[2] = ret;
> -            break;
> -        case EXCP_TLBL:
> -        case EXCP_TLBS:
> -        case EXCP_AdEL:
> -        case EXCP_AdES:
> -            info.si_signo = TARGET_SIGSEGV;
> -            info.si_errno = 0;
> -            /* XXX: check env->error_code */
> -            info.si_code = TARGET_SEGV_MAPERR;
> -            info._sifields._sigfault._addr = env->CP0_BadVAddr;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_CpU:
> -        case EXCP_RI:
> -            info.si_signo = TARGET_SIGILL;
> -            info.si_errno = 0;
> -            info.si_code = 0;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_INTERRUPT:
> -            /* just indicate that signals should be handled asap */
> -            break;
> -        case EXCP_DEBUG:
> -            {
> -                int sig;
> -
> -                sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> -                if (sig)
> -                  {
> -                    info.si_signo = sig;
> -                    info.si_errno = 0;
> -                    info.si_code = TARGET_TRAP_BRKPT;
> -                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                  }
> -            }
> -            break;
> -        case EXCP_SC:
> -            if (do_store_exclusive(env)) {
> -                info.si_signo = TARGET_SIGSEGV;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_SEGV_MAPERR;
> -                info._sifields._sigfault._addr = env->active_tc.PC;
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            }
> -            break;
> -        case EXCP_DSPDIS:
> -            info.si_signo = TARGET_SIGILL;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_ILL_ILLOPC;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        /* The code below was inspired by the MIPS Linux kernel trap
> -         * handling code in arch/mips/kernel/traps.c.
> -         */
> -        case EXCP_BREAK:
> -            {
> -                abi_ulong trap_instr;
> -                unsigned int code;
> -
> -                if (env->hflags & MIPS_HFLAG_M16) {
> -                    if (env->insn_flags & ASE_MICROMIPS) {
> -                        /* microMIPS mode */
> -                        ret = get_user_u16(trap_instr, env->active_tc.PC);
> -                        if (ret != 0) {
> -                            goto error;
> -                        }
> -
> -                        if ((trap_instr >> 10) == 0x11) {
> -                            /* 16-bit instruction */
> -                            code = trap_instr & 0xf;
> -                        } else {
> -                            /* 32-bit instruction */
> -                            abi_ulong instr_lo;
> -
> -                            ret = get_user_u16(instr_lo,
> -                                               env->active_tc.PC + 2);
> -                            if (ret != 0) {
> -                                goto error;
> -                            }
> -                            trap_instr = (trap_instr << 16) | instr_lo;
> -                            code = ((trap_instr >> 6) & ((1 << 20) - 1));
> -                            /* Unfortunately, microMIPS also suffers from
> -                               the old assembler bug...  */
> -                            if (code >= (1 << 10)) {
> -                                code >>= 10;
> -                            }
> -                        }
> -                    } else {
> -                        /* MIPS16e mode */
> -                        ret = get_user_u16(trap_instr, env->active_tc.PC);
> -                        if (ret != 0) {
> -                            goto error;
> -                        }
> -                        code = (trap_instr >> 6) & 0x3f;
> -                    }
> -                } else {
> -                    ret = get_user_u32(trap_instr, env->active_tc.PC);
> -                    if (ret != 0) {
> -                        goto error;
> -                    }
> -
> -                    /* As described in the original Linux kernel code, the
> -                     * below checks on 'code' are to work around an old
> -                     * assembly bug.
> -                     */
> -                    code = ((trap_instr >> 6) & ((1 << 20) - 1));
> -                    if (code >= (1 << 10)) {
> -                        code >>= 10;
> -                    }
> -                }
> -
> -                if (do_break(env, &info, code) != 0) {
> -                    goto error;
> -                }
> -            }
> -            break;
> -        case EXCP_TRAP:
> -            {
> -                abi_ulong trap_instr;
> -                unsigned int code = 0;
> -
> -                if (env->hflags & MIPS_HFLAG_M16) {
> -                    /* microMIPS mode */
> -                    abi_ulong instr[2];
> -
> -                    ret = get_user_u16(instr[0], env->active_tc.PC) ||
> -                          get_user_u16(instr[1], env->active_tc.PC + 2);
> -
> -                    trap_instr = (instr[0] << 16) | instr[1];
> -                } else {
> -                    ret = get_user_u32(trap_instr, env->active_tc.PC);
> -                }
> -
> -                if (ret != 0) {
> -                    goto error;
> -                }
> -
> -                /* The immediate versions don't provide a code.  */
> -                if (!(trap_instr & 0xFC000000)) {
> -                    if (env->hflags & MIPS_HFLAG_M16) {
> -                        /* microMIPS mode */
> -                        code = ((trap_instr >> 12) & ((1 << 4) - 1));
> -                    } else {
> -                        code = ((trap_instr >> 6) & ((1 << 10) - 1));
> -                    }
> -                }
> -
> -                if (do_break(env, &info, code) != 0) {
> -                    goto error;
> -                }
> -            }
> -            break;
> -        case EXCP_ATOMIC:
> -            cpu_exec_step_atomic(cs);
> -            break;
> -        default:
> -error:
> -            EXCP_DUMP(env, "qemu: unhandled CPU exception 0x%x - 
> aborting\n", trapnr);
> -            abort();
> -        }
> -        process_pending_signals(env);
> -    }
> -}
> -#endif
> -
> -#ifdef TARGET_NIOS2
> -
> -void cpu_loop(CPUNios2State *env)
> -{
> -    CPUState *cs = ENV_GET_CPU(env);
> -    Nios2CPU *cpu = NIOS2_CPU(cs);
> -    target_siginfo_t info;
> -    int trapnr, gdbsig, ret;
> -
> -    for (;;) {
> -        cpu_exec_start(cs);
> -        trapnr = cpu_exec(cs);
> -        cpu_exec_end(cs);
> -        gdbsig = 0;
> -
> -        switch (trapnr) {
> -        case EXCP_INTERRUPT:
> -            /* just indicate that signals should be handled asap */
> -            break;
> -        case EXCP_TRAP:
> -            if (env->regs[R_AT] == 0) {
> -                abi_long ret;
> -                qemu_log_mask(CPU_LOG_INT, "\nSyscall\n");
> -
> -                ret = do_syscall(env, env->regs[2],
> -                                 env->regs[4], env->regs[5], env->regs[6],
> -                                 env->regs[7], env->regs[8], env->regs[9],
> -                                 0, 0);
> -
> -                if (env->regs[2] == 0) {    /* FIXME: syscall 0 workaround */
> -                    ret = 0;
> -                }
> -
> -                env->regs[2] = abs(ret);
> -                /* Return value is 0..4096 */
> -                env->regs[7] = (ret > 0xfffffffffffff000ULL);
> -                env->regs[CR_ESTATUS] = env->regs[CR_STATUS];
> -                env->regs[CR_STATUS] &= ~0x3;
> -                env->regs[R_EA] = env->regs[R_PC] + 4;
> -                env->regs[R_PC] += 4;
> -                break;
> -            } else {
> -                qemu_log_mask(CPU_LOG_INT, "\nTrap\n");
> -
> -                env->regs[CR_ESTATUS] = env->regs[CR_STATUS];
> -                env->regs[CR_STATUS] &= ~0x3;
> -                env->regs[R_EA] = env->regs[R_PC] + 4;
> -                env->regs[R_PC] = cpu->exception_addr;
> -
> -                gdbsig = TARGET_SIGTRAP;
> -                break;
> -            }
> -        case 0xaa:
> -            switch (env->regs[R_PC]) {
> -            /*case 0x1000:*/  /* TODO:__kuser_helper_version */
> -            case 0x1004:      /* __kuser_cmpxchg */
> -                start_exclusive();
> -                if (env->regs[4] & 0x3) {
> -                    goto kuser_fail;
> -                }
> -                ret = get_user_u32(env->regs[2], env->regs[4]);
> -                if (ret) {
> -                    end_exclusive();
> -                    goto kuser_fail;
> -                }
> -                env->regs[2] -= env->regs[5];
> -                if (env->regs[2] == 0) {
> -                    put_user_u32(env->regs[6], env->regs[4]);
> -                }
> -                end_exclusive();
> -                env->regs[R_PC] = env->regs[R_RA];
> -                break;
> -            /*case 0x1040:*/  /* TODO:__kuser_sigtramp */
> -            default:
> -                ;
> -kuser_fail:
> -                info.si_signo = TARGET_SIGSEGV;
> -                info.si_errno = 0;
> -                /* TODO: check env->error_code */
> -                info.si_code = TARGET_SEGV_MAPERR;
> -                info._sifields._sigfault._addr = env->regs[R_PC];
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            }
> -            break;
> -        default:
> -            EXCP_DUMP(env, "\nqemu: unhandled CPU exception %#x - 
> aborting\n",
> -                     trapnr);
> -            gdbsig = TARGET_SIGILL;
> -            break;
> -        }
> -        if (gdbsig) {
> -            gdb_handlesig(cs, gdbsig);
> -            if (gdbsig != TARGET_SIGTRAP) {
> -                exit(EXIT_FAILURE);
> -            }
> -        }
> -
> -        process_pending_signals(env);
> -    }
> -}
> -
> -#endif /* TARGET_NIOS2 */
> -
> -#ifdef TARGET_OPENRISC
> -
> -void cpu_loop(CPUOpenRISCState *env)
> -{
> -    CPUState *cs = CPU(openrisc_env_get_cpu(env));
> -    int trapnr;
> -    abi_long ret;
> -    target_siginfo_t info;
> -
> -    for (;;) {
> -        cpu_exec_start(cs);
> -        trapnr = cpu_exec(cs);
> -        cpu_exec_end(cs);
> -        process_queued_cpu_work(cs);
> -
> -        switch (trapnr) {
> -        case EXCP_SYSCALL:
> -            env->pc += 4;   /* 0xc00; */
> -            ret = do_syscall(env,
> -                             cpu_get_gpr(env, 11), /* return value       */
> -                             cpu_get_gpr(env, 3),  /* r3 - r7 are params */
> -                             cpu_get_gpr(env, 4),
> -                             cpu_get_gpr(env, 5),
> -                             cpu_get_gpr(env, 6),
> -                             cpu_get_gpr(env, 7),
> -                             cpu_get_gpr(env, 8), 0, 0);
> -            if (ret == -TARGET_ERESTARTSYS) {
> -                env->pc -= 4;
> -            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> -                cpu_set_gpr(env, 11, ret);
> -            }
> -            break;
> -        case EXCP_DPF:
> -        case EXCP_IPF:
> -        case EXCP_RANGE:
> -            info.si_signo = TARGET_SIGSEGV;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_SEGV_MAPERR;
> -            info._sifields._sigfault._addr = env->pc;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_ALIGN:
> -            info.si_signo = TARGET_SIGBUS;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_BUS_ADRALN;
> -            info._sifields._sigfault._addr = env->pc;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_ILLEGAL:
> -            info.si_signo = TARGET_SIGILL;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_ILL_ILLOPC;
> -            info._sifields._sigfault._addr = env->pc;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_FPE:
> -            info.si_signo = TARGET_SIGFPE;
> -            info.si_errno = 0;
> -            info.si_code = 0;
> -            info._sifields._sigfault._addr = env->pc;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_INTERRUPT:
> -            /* We processed the pending cpu work above.  */
> -            break;
> -        case EXCP_DEBUG:
> -            trapnr = gdb_handlesig(cs, TARGET_SIGTRAP);
> -            if (trapnr) {
> -                info.si_signo = trapnr;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_TRAP_BRKPT;
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            }
> -            break;
> -        case EXCP_ATOMIC:
> -            cpu_exec_step_atomic(cs);
> -            break;
> -        default:
> -            g_assert_not_reached();
> -        }
> -        process_pending_signals(env);
> -    }
> -}
> -
> -#endif /* TARGET_OPENRISC */
> -
> -#ifdef TARGET_SH4
> -void cpu_loop(CPUSH4State *env)
> -{
> -    CPUState *cs = CPU(sh_env_get_cpu(env));
> -    int trapnr, ret;
> -    target_siginfo_t info;
> -
> -    while (1) {
> -        bool arch_interrupt = true;
> -
> -        cpu_exec_start(cs);
> -        trapnr = cpu_exec(cs);
> -        cpu_exec_end(cs);
> -        process_queued_cpu_work(cs);
> -
> -        switch (trapnr) {
> -        case 0x160:
> -            env->pc += 2;
> -            ret = do_syscall(env,
> -                             env->gregs[3],
> -                             env->gregs[4],
> -                             env->gregs[5],
> -                             env->gregs[6],
> -                             env->gregs[7],
> -                             env->gregs[0],
> -                             env->gregs[1],
> -                             0, 0);
> -            if (ret == -TARGET_ERESTARTSYS) {
> -                env->pc -= 2;
> -            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> -                env->gregs[0] = ret;
> -            }
> -            break;
> -        case EXCP_INTERRUPT:
> -            /* just indicate that signals should be handled asap */
> -            break;
> -        case EXCP_DEBUG:
> -            {
> -                int sig;
> -
> -                sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> -                if (sig) {
> -                    info.si_signo = sig;
> -                    info.si_errno = 0;
> -                    info.si_code = TARGET_TRAP_BRKPT;
> -                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                } else {
> -                    arch_interrupt = false;
> -                }
> -            }
> -            break;
> -     case 0xa0:
> -     case 0xc0:
> -            info.si_signo = TARGET_SIGSEGV;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_SEGV_MAPERR;
> -            info._sifields._sigfault._addr = env->tea;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -         break;
> -        case EXCP_ATOMIC:
> -            cpu_exec_step_atomic(cs);
> -            arch_interrupt = false;
> -            break;
> -        default:
> -            printf ("Unhandled trap: 0x%x\n", trapnr);
> -            cpu_dump_state(cs, stderr, fprintf, 0);
> -            exit(EXIT_FAILURE);
> -        }
> -        process_pending_signals (env);
> -
> -        /* Most of the traps imply an exception or interrupt, which
> -           implies an REI instruction has been executed.  Which means
> -           that LDST (aka LOK_ADDR) should be cleared.  But there are
> -           a few exceptions for traps internal to QEMU.  */
> -        if (arch_interrupt) {
> -            env->lock_addr = -1;
> -        }
> -    }
> -}
> -#endif
> -
> -#ifdef TARGET_CRIS
> -void cpu_loop(CPUCRISState *env)
> -{
> -    CPUState *cs = CPU(cris_env_get_cpu(env));
> -    int trapnr, ret;
> -    target_siginfo_t info;
> -    
> -    while (1) {
> -        cpu_exec_start(cs);
> -        trapnr = cpu_exec(cs);
> -        cpu_exec_end(cs);
> -        process_queued_cpu_work(cs);
> -
> -        switch (trapnr) {
> -        case 0xaa:
> -            {
> -                info.si_signo = TARGET_SIGSEGV;
> -                info.si_errno = 0;
> -                /* XXX: check env->error_code */
> -                info.si_code = TARGET_SEGV_MAPERR;
> -                info._sifields._sigfault._addr = env->pregs[PR_EDA];
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            }
> -            break;
> -     case EXCP_INTERRUPT:
> -       /* just indicate that signals should be handled asap */
> -       break;
> -        case EXCP_BREAK:
> -            ret = do_syscall(env, 
> -                             env->regs[9], 
> -                             env->regs[10], 
> -                             env->regs[11], 
> -                             env->regs[12], 
> -                             env->regs[13], 
> -                             env->pregs[7], 
> -                             env->pregs[11],
> -                             0, 0);
> -            if (ret == -TARGET_ERESTARTSYS) {
> -                env->pc -= 2;
> -            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> -                env->regs[10] = ret;
> -            }
> -            break;
> -        case EXCP_DEBUG:
> -            {
> -                int sig;
> -
> -                sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> -                if (sig)
> -                  {
> -                    info.si_signo = sig;
> -                    info.si_errno = 0;
> -                    info.si_code = TARGET_TRAP_BRKPT;
> -                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                  }
> -            }
> -            break;
> -        case EXCP_ATOMIC:
> -            cpu_exec_step_atomic(cs);
> -            break;
> -        default:
> -            printf ("Unhandled trap: 0x%x\n", trapnr);
> -            cpu_dump_state(cs, stderr, fprintf, 0);
> -            exit(EXIT_FAILURE);
> -        }
> -        process_pending_signals (env);
> -    }
> -}
> -#endif
> -
> -#ifdef TARGET_MICROBLAZE
> -void cpu_loop(CPUMBState *env)
> -{
> -    CPUState *cs = CPU(mb_env_get_cpu(env));
> -    int trapnr, ret;
> -    target_siginfo_t info;
> -    
> -    while (1) {
> -        cpu_exec_start(cs);
> -        trapnr = cpu_exec(cs);
> -        cpu_exec_end(cs);
> -        process_queued_cpu_work(cs);
> -
> -        switch (trapnr) {
> -        case 0xaa:
> -            {
> -                info.si_signo = TARGET_SIGSEGV;
> -                info.si_errno = 0;
> -                /* XXX: check env->error_code */
> -                info.si_code = TARGET_SEGV_MAPERR;
> -                info._sifields._sigfault._addr = 0;
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            }
> -            break;
> -     case EXCP_INTERRUPT:
> -       /* just indicate that signals should be handled asap */
> -       break;
> -        case EXCP_BREAK:
> -            /* Return address is 4 bytes after the call.  */
> -            env->regs[14] += 4;
> -            env->sregs[SR_PC] = env->regs[14];
> -            ret = do_syscall(env, 
> -                             env->regs[12], 
> -                             env->regs[5], 
> -                             env->regs[6], 
> -                             env->regs[7], 
> -                             env->regs[8], 
> -                             env->regs[9], 
> -                             env->regs[10],
> -                             0, 0);
> -            if (ret == -TARGET_ERESTARTSYS) {
> -                /* Wind back to before the syscall. */
> -                env->sregs[SR_PC] -= 4;
> -            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> -                env->regs[3] = ret;
> -            }
> -            /* All syscall exits result in guest r14 being equal to the
> -             * PC we return to, because the kernel syscall exit "rtbd" does
> -             * this. (This is true even for sigreturn(); note that r14 is
> -             * not a userspace-usable register, as the kernel may clobber it
> -             * at any point.)
> -             */
> -            env->regs[14] = env->sregs[SR_PC];
> -            break;
> -        case EXCP_HW_EXCP:
> -            env->regs[17] = env->sregs[SR_PC] + 4;
> -            if (env->iflags & D_FLAG) {
> -                env->sregs[SR_ESR] |= 1 << 12;
> -                env->sregs[SR_PC] -= 4;
> -                /* FIXME: if branch was immed, replay the imm as well.  */
> -            }
> -
> -            env->iflags &= ~(IMM_FLAG | D_FLAG);
> -
> -            switch (env->sregs[SR_ESR] & 31) {
> -                case ESR_EC_DIVZERO:
> -                    info.si_signo = TARGET_SIGFPE;
> -                    info.si_errno = 0;
> -                    info.si_code = TARGET_FPE_FLTDIV;
> -                    info._sifields._sigfault._addr = 0;
> -                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                    break;
> -                case ESR_EC_FPU:
> -                    info.si_signo = TARGET_SIGFPE;
> -                    info.si_errno = 0;
> -                    if (env->sregs[SR_FSR] & FSR_IO) {
> -                        info.si_code = TARGET_FPE_FLTINV;
> -                    }
> -                    if (env->sregs[SR_FSR] & FSR_DZ) {
> -                        info.si_code = TARGET_FPE_FLTDIV;
> -                    }
> -                    info._sifields._sigfault._addr = 0;
> -                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                    break;
> -                default:
> -                    printf ("Unhandled hw-exception: 0x%x\n",
> -                            env->sregs[SR_ESR] & ESR_EC_MASK);
> -                    cpu_dump_state(cs, stderr, fprintf, 0);
> -                    exit(EXIT_FAILURE);
> -                    break;
> -            }
> -            break;
> -        case EXCP_DEBUG:
> -            {
> -                int sig;
> -
> -                sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> -                if (sig)
> -                  {
> -                    info.si_signo = sig;
> -                    info.si_errno = 0;
> -                    info.si_code = TARGET_TRAP_BRKPT;
> -                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                  }
> -            }
> -            break;
> -        case EXCP_ATOMIC:
> -            cpu_exec_step_atomic(cs);
> -            break;
> -        default:
> -            printf ("Unhandled trap: 0x%x\n", trapnr);
> -            cpu_dump_state(cs, stderr, fprintf, 0);
> -            exit(EXIT_FAILURE);
> -        }
> -        process_pending_signals (env);
> -    }
> -}
> -#endif
> -
> -#ifdef TARGET_M68K
> -
> -void cpu_loop(CPUM68KState *env)
> -{
> -    CPUState *cs = CPU(m68k_env_get_cpu(env));
> -    int trapnr;
> -    unsigned int n;
> -    target_siginfo_t info;
> -    TaskState *ts = cs->opaque;
> -
> -    for(;;) {
> -        cpu_exec_start(cs);
> -        trapnr = cpu_exec(cs);
> -        cpu_exec_end(cs);
> -        process_queued_cpu_work(cs);
> -
> -        switch(trapnr) {
> -        case EXCP_ILLEGAL:
> -            {
> -                if (ts->sim_syscalls) {
> -                    uint16_t nr;
> -                    get_user_u16(nr, env->pc + 2);
> -                    env->pc += 4;
> -                    do_m68k_simcall(env, nr);
> -                } else {
> -                    goto do_sigill;
> -                }
> -            }
> -            break;
> -        case EXCP_HALT_INSN:
> -            /* Semihosing syscall.  */
> -            env->pc += 4;
> -            do_m68k_semihosting(env, env->dregs[0]);
> -            break;
> -        case EXCP_LINEA:
> -        case EXCP_LINEF:
> -        case EXCP_UNSUPPORTED:
> -        do_sigill:
> -            info.si_signo = TARGET_SIGILL;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_ILL_ILLOPN;
> -            info._sifields._sigfault._addr = env->pc;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_CHK:
> -            info.si_signo = TARGET_SIGFPE;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_FPE_INTOVF;
> -            info._sifields._sigfault._addr = env->pc;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_DIV0:
> -            info.si_signo = TARGET_SIGFPE;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_FPE_INTDIV;
> -            info._sifields._sigfault._addr = env->pc;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_TRAP0:
> -            {
> -                abi_long ret;
> -                ts->sim_syscalls = 0;
> -                n = env->dregs[0];
> -                env->pc += 2;
> -                ret = do_syscall(env,
> -                                 n,
> -                                 env->dregs[1],
> -                                 env->dregs[2],
> -                                 env->dregs[3],
> -                                 env->dregs[4],
> -                                 env->dregs[5],
> -                                 env->aregs[0],
> -                                 0, 0);
> -                if (ret == -TARGET_ERESTARTSYS) {
> -                    env->pc -= 2;
> -                } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> -                    env->dregs[0] = ret;
> -                }
> -            }
> -            break;
> -        case EXCP_INTERRUPT:
> -            /* just indicate that signals should be handled asap */
> -            break;
> -        case EXCP_ACCESS:
> -            {
> -                info.si_signo = TARGET_SIGSEGV;
> -                info.si_errno = 0;
> -                /* XXX: check env->error_code */
> -                info.si_code = TARGET_SEGV_MAPERR;
> -                info._sifields._sigfault._addr = env->mmu.ar;
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            }
> -            break;
> -        case EXCP_DEBUG:
> -            {
> -                int sig;
> -
> -                sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> -                if (sig)
> -                  {
> -                    info.si_signo = sig;
> -                    info.si_errno = 0;
> -                    info.si_code = TARGET_TRAP_BRKPT;
> -                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                  }
> -            }
> -            break;
> -        case EXCP_ATOMIC:
> -            cpu_exec_step_atomic(cs);
> -            break;
> -        default:
> -            EXCP_DUMP(env, "qemu: unhandled CPU exception 0x%x - 
> aborting\n", trapnr);
> -            abort();
> -        }
> -        process_pending_signals(env);
> -    }
> -}
> -#endif /* TARGET_M68K */
> -
> -#ifdef TARGET_ALPHA
> -void cpu_loop(CPUAlphaState *env)
> -{
> -    CPUState *cs = CPU(alpha_env_get_cpu(env));
> -    int trapnr;
> -    target_siginfo_t info;
> -    abi_long sysret;
> -
> -    while (1) {
> -        bool arch_interrupt = true;
> -
> -        cpu_exec_start(cs);
> -        trapnr = cpu_exec(cs);
> -        cpu_exec_end(cs);
> -        process_queued_cpu_work(cs);
> -
> -        switch (trapnr) {
> -        case EXCP_RESET:
> -            fprintf(stderr, "Reset requested. Exit\n");
> -            exit(EXIT_FAILURE);
> -            break;
> -        case EXCP_MCHK:
> -            fprintf(stderr, "Machine check exception. Exit\n");
> -            exit(EXIT_FAILURE);
> -            break;
> -        case EXCP_SMP_INTERRUPT:
> -        case EXCP_CLK_INTERRUPT:
> -        case EXCP_DEV_INTERRUPT:
> -            fprintf(stderr, "External interrupt. Exit\n");
> -            exit(EXIT_FAILURE);
> -            break;
> -        case EXCP_MMFAULT:
> -            info.si_signo = TARGET_SIGSEGV;
> -            info.si_errno = 0;
> -            info.si_code = (page_get_flags(env->trap_arg0) & PAGE_VALID
> -                            ? TARGET_SEGV_ACCERR : TARGET_SEGV_MAPERR);
> -            info._sifields._sigfault._addr = env->trap_arg0;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_UNALIGN:
> -            info.si_signo = TARGET_SIGBUS;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_BUS_ADRALN;
> -            info._sifields._sigfault._addr = env->trap_arg0;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_OPCDEC:
> -        do_sigill:
> -            info.si_signo = TARGET_SIGILL;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_ILL_ILLOPC;
> -            info._sifields._sigfault._addr = env->pc;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_ARITH:
> -            info.si_signo = TARGET_SIGFPE;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_FPE_FLTINV;
> -            info._sifields._sigfault._addr = env->pc;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_FEN:
> -            /* No-op.  Linux simply re-enables the FPU.  */
> -            break;
> -        case EXCP_CALL_PAL:
> -            switch (env->error_code) {
> -            case 0x80:
> -                /* BPT */
> -                info.si_signo = TARGET_SIGTRAP;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_TRAP_BRKPT;
> -                info._sifields._sigfault._addr = env->pc;
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                break;
> -            case 0x81:
> -                /* BUGCHK */
> -                info.si_signo = TARGET_SIGTRAP;
> -                info.si_errno = 0;
> -                info.si_code = 0;
> -                info._sifields._sigfault._addr = env->pc;
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                break;
> -            case 0x83:
> -                /* CALLSYS */
> -                trapnr = env->ir[IR_V0];
> -                sysret = do_syscall(env, trapnr,
> -                                    env->ir[IR_A0], env->ir[IR_A1],
> -                                    env->ir[IR_A2], env->ir[IR_A3],
> -                                    env->ir[IR_A4], env->ir[IR_A5],
> -                                    0, 0);
> -                if (sysret == -TARGET_ERESTARTSYS) {
> -                    env->pc -= 4;
> -                    break;
> -                }
> -                if (sysret == -TARGET_QEMU_ESIGRETURN) {
> -                    break;
> -                }
> -                /* Syscall writes 0 to V0 to bypass error check, similar
> -                   to how this is handled internal to Linux kernel.
> -                   (Ab)use trapnr temporarily as boolean indicating error.  
> */
> -                trapnr = (env->ir[IR_V0] != 0 && sysret < 0);
> -                env->ir[IR_V0] = (trapnr ? -sysret : sysret);
> -                env->ir[IR_A3] = trapnr;
> -                break;
> -            case 0x86:
> -                /* IMB */
> -                /* ??? We can probably elide the code using page_unprotect
> -                   that is checking for self-modifying code.  Instead we
> -                   could simply call tb_flush here.  Until we work out the
> -                   changes required to turn off the extra write protection,
> -                   this can be a no-op.  */
> -                break;
> -            case 0x9E:
> -                /* RDUNIQUE */
> -                /* Handled in the translator for usermode.  */
> -                abort();
> -            case 0x9F:
> -                /* WRUNIQUE */
> -                /* Handled in the translator for usermode.  */
> -                abort();
> -            case 0xAA:
> -                /* GENTRAP */
> -                info.si_signo = TARGET_SIGFPE;
> -                switch (env->ir[IR_A0]) {
> -                case TARGET_GEN_INTOVF:
> -                    info.si_code = TARGET_FPE_INTOVF;
> -                    break;
> -                case TARGET_GEN_INTDIV:
> -                    info.si_code = TARGET_FPE_INTDIV;
> -                    break;
> -                case TARGET_GEN_FLTOVF:
> -                    info.si_code = TARGET_FPE_FLTOVF;
> -                    break;
> -                case TARGET_GEN_FLTUND:
> -                    info.si_code = TARGET_FPE_FLTUND;
> -                    break;
> -                case TARGET_GEN_FLTINV:
> -                    info.si_code = TARGET_FPE_FLTINV;
> -                    break;
> -                case TARGET_GEN_FLTINE:
> -                    info.si_code = TARGET_FPE_FLTRES;
> -                    break;
> -                case TARGET_GEN_ROPRAND:
> -                    info.si_code = 0;
> -                    break;
> -                default:
> -                    info.si_signo = TARGET_SIGTRAP;
> -                    info.si_code = 0;
> -                    break;
> -                }
> -                info.si_errno = 0;
> -                info._sifields._sigfault._addr = env->pc;
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                break;
> -            default:
> -                goto do_sigill;
> -            }
> -            break;
> -        case EXCP_DEBUG:
> -            info.si_signo = gdb_handlesig(cs, TARGET_SIGTRAP);
> -            if (info.si_signo) {
> -                info.si_errno = 0;
> -                info.si_code = TARGET_TRAP_BRKPT;
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            } else {
> -                arch_interrupt = false;
> -            }
> -            break;
> -        case EXCP_INTERRUPT:
> -            /* Just indicate that signals should be handled asap.  */
> -            break;
> -        case EXCP_ATOMIC:
> -            cpu_exec_step_atomic(cs);
> -            arch_interrupt = false;
> -            break;
> -        default:
> -            printf ("Unhandled trap: 0x%x\n", trapnr);
> -            cpu_dump_state(cs, stderr, fprintf, 0);
> -            exit(EXIT_FAILURE);
> -        }
> -        process_pending_signals (env);
> -
> -        /* Most of the traps imply a transition through PALcode, which
> -           implies an REI instruction has been executed.  Which means
> -           that RX and LOCK_ADDR should be cleared.  But there are a
> -           few exceptions for traps internal to QEMU.  */
> -        if (arch_interrupt) {
> -            env->flags &= ~ENV_FLAG_RX_FLAG;
> -            env->lock_addr = -1;
> -        }
> -    }
> -}
> -#endif /* TARGET_ALPHA */
> -
> -#ifdef TARGET_S390X
> -
> -/* s390x masks the fault address it reports in si_addr for SIGSEGV and 
> SIGBUS */
> -#define S390X_FAIL_ADDR_MASK -4096LL
> -
> -void cpu_loop(CPUS390XState *env)
> -{
> -    CPUState *cs = CPU(s390_env_get_cpu(env));
> -    int trapnr, n, sig;
> -    target_siginfo_t info;
> -    target_ulong addr;
> -    abi_long ret;
> -
> -    while (1) {
> -        cpu_exec_start(cs);
> -        trapnr = cpu_exec(cs);
> -        cpu_exec_end(cs);
> -        process_queued_cpu_work(cs);
> -
> -        switch (trapnr) {
> -        case EXCP_INTERRUPT:
> -            /* Just indicate that signals should be handled asap.  */
> -            break;
> -
> -        case EXCP_SVC:
> -            n = env->int_svc_code;
> -            if (!n) {
> -                /* syscalls > 255 */
> -                n = env->regs[1];
> -            }
> -            env->psw.addr += env->int_svc_ilen;
> -            ret = do_syscall(env, n, env->regs[2], env->regs[3],
> -                             env->regs[4], env->regs[5],
> -                             env->regs[6], env->regs[7], 0, 0);
> -            if (ret == -TARGET_ERESTARTSYS) {
> -                env->psw.addr -= env->int_svc_ilen;
> -            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> -                env->regs[2] = ret;
> -            }
> -            break;
> -
> -        case EXCP_DEBUG:
> -            sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> -            if (sig) {
> -                n = TARGET_TRAP_BRKPT;
> -                goto do_signal_pc;
> -            }
> -            break;
> -        case EXCP_PGM:
> -            n = env->int_pgm_code;
> -            switch (n) {
> -            case PGM_OPERATION:
> -            case PGM_PRIVILEGED:
> -                sig = TARGET_SIGILL;
> -                n = TARGET_ILL_ILLOPC;
> -                goto do_signal_pc;
> -            case PGM_PROTECTION:
> -            case PGM_ADDRESSING:
> -                sig = TARGET_SIGSEGV;
> -                /* XXX: check env->error_code */
> -                n = TARGET_SEGV_MAPERR;
> -                addr = env->__excp_addr & S390X_FAIL_ADDR_MASK;
> -                goto do_signal;
> -            case PGM_EXECUTE:
> -            case PGM_SPECIFICATION:
> -            case PGM_SPECIAL_OP:
> -            case PGM_OPERAND:
> -            do_sigill_opn:
> -                sig = TARGET_SIGILL;
> -                n = TARGET_ILL_ILLOPN;
> -                goto do_signal_pc;
> -
> -            case PGM_FIXPT_OVERFLOW:
> -                sig = TARGET_SIGFPE;
> -                n = TARGET_FPE_INTOVF;
> -                goto do_signal_pc;
> -            case PGM_FIXPT_DIVIDE:
> -                sig = TARGET_SIGFPE;
> -                n = TARGET_FPE_INTDIV;
> -                goto do_signal_pc;
> -
> -            case PGM_DATA:
> -                n = (env->fpc >> 8) & 0xff;
> -                if (n == 0xff) {
> -                    /* compare-and-trap */
> -                    goto do_sigill_opn;
> -                } else {
> -                    /* An IEEE exception, simulated or otherwise.  */
> -                    if (n & 0x80) {
> -                        n = TARGET_FPE_FLTINV;
> -                    } else if (n & 0x40) {
> -                        n = TARGET_FPE_FLTDIV;
> -                    } else if (n & 0x20) {
> -                        n = TARGET_FPE_FLTOVF;
> -                    } else if (n & 0x10) {
> -                        n = TARGET_FPE_FLTUND;
> -                    } else if (n & 0x08) {
> -                        n = TARGET_FPE_FLTRES;
> -                    } else {
> -                        /* ??? Quantum exception; BFP, DFP error.  */
> -                        goto do_sigill_opn;
> -                    }
> -                    sig = TARGET_SIGFPE;
> -                    goto do_signal_pc;
> -                }
> -
> -            default:
> -                fprintf(stderr, "Unhandled program exception: %#x\n", n);
> -                cpu_dump_state(cs, stderr, fprintf, 0);
> -                exit(EXIT_FAILURE);
> -            }
> -            break;
> -
> -        do_signal_pc:
> -            addr = env->psw.addr;
> -        do_signal:
> -            info.si_signo = sig;
> -            info.si_errno = 0;
> -            info.si_code = n;
> -            info._sifields._sigfault._addr = addr;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -
> -        case EXCP_ATOMIC:
> -            cpu_exec_step_atomic(cs);
> -            break;
> -        default:
> -            fprintf(stderr, "Unhandled trap: 0x%x\n", trapnr);
> -            cpu_dump_state(cs, stderr, fprintf, 0);
> -            exit(EXIT_FAILURE);
> -        }
> -        process_pending_signals (env);
> -    }
> -}
> -
> -#endif /* TARGET_S390X */
> -
> -#ifdef TARGET_TILEGX
> -
> -static void gen_sigill_reg(CPUTLGState *env)
> -{
> -    target_siginfo_t info;
> -
> -    info.si_signo = TARGET_SIGILL;
> -    info.si_errno = 0;
> -    info.si_code = TARGET_ILL_PRVREG;
> -    info._sifields._sigfault._addr = env->pc;
> -    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -}
> -
> -static void do_signal(CPUTLGState *env, int signo, int sigcode)
> -{
> -    target_siginfo_t info;
> -
> -    info.si_signo = signo;
> -    info.si_errno = 0;
> -    info._sifields._sigfault._addr = env->pc;
> -
> -    if (signo == TARGET_SIGSEGV) {
> -        /* The passed in sigcode is a dummy; check for a page mapping
> -           and pass either MAPERR or ACCERR.  */
> -        target_ulong addr = env->excaddr;
> -        info._sifields._sigfault._addr = addr;
> -        if (page_check_range(addr, 1, PAGE_VALID) < 0) {
> -            sigcode = TARGET_SEGV_MAPERR;
> -        } else {
> -            sigcode = TARGET_SEGV_ACCERR;
> -        }
> -    }
> -    info.si_code = sigcode;
> -
> -    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -}
> -
> -static void gen_sigsegv_maperr(CPUTLGState *env, target_ulong addr)
> -{
> -    env->excaddr = addr;
> -    do_signal(env, TARGET_SIGSEGV, 0);
> -}
> -
> -static void set_regval(CPUTLGState *env, uint8_t reg, uint64_t val)
> -{
> -    if (unlikely(reg >= TILEGX_R_COUNT)) {
> -        switch (reg) {
> -        case TILEGX_R_SN:
> -        case TILEGX_R_ZERO:
> -            return;
> -        case TILEGX_R_IDN0:
> -        case TILEGX_R_IDN1:
> -        case TILEGX_R_UDN0:
> -        case TILEGX_R_UDN1:
> -        case TILEGX_R_UDN2:
> -        case TILEGX_R_UDN3:
> -            gen_sigill_reg(env);
> -            return;
> -        default:
> -            g_assert_not_reached();
> -        }
> -    }
> -    env->regs[reg] = val;
> -}
> -
> -/*
> - * Compare the 8-byte contents of the CmpValue SPR with the 8-byte value in
> - * memory at the address held in the first source register. If the values are
> - * not equal, then no memory operation is performed. If the values are equal,
> - * the 8-byte quantity from the second source register is written into memory
> - * at the address held in the first source register. In either case, the 
> result
> - * of the instruction is the value read from memory. The compare and write to
> - * memory are atomic and thus can be used for synchronization purposes. This
> - * instruction only operates for addresses aligned to a 8-byte boundary.
> - * Unaligned memory access causes an Unaligned Data Reference interrupt.
> - *
> - * Functional Description (64-bit)
> - *       uint64_t memVal = memoryReadDoubleWord (rf[SrcA]);
> - *       rf[Dest] = memVal;
> - *       if (memVal == SPR[CmpValueSPR])
> - *           memoryWriteDoubleWord (rf[SrcA], rf[SrcB]);
> - *
> - * Functional Description (32-bit)
> - *       uint64_t memVal = signExtend32 (memoryReadWord (rf[SrcA]));
> - *       rf[Dest] = memVal;
> - *       if (memVal == signExtend32 (SPR[CmpValueSPR]))
> - *           memoryWriteWord (rf[SrcA], rf[SrcB]);
> - *
> - *
> - * This function also processes exch and exch4 which need not process SPR.
> - */
> -static void do_exch(CPUTLGState *env, bool quad, bool cmp)
> -{
> -    target_ulong addr;
> -    target_long val, sprval;
> -
> -    start_exclusive();
> -
> -    addr = env->atomic_srca;
> -    if (quad ? get_user_s64(val, addr) : get_user_s32(val, addr)) {
> -        goto sigsegv_maperr;
> -    }
> -
> -    if (cmp) {
> -        if (quad) {
> -            sprval = env->spregs[TILEGX_SPR_CMPEXCH];
> -        } else {
> -            sprval = sextract64(env->spregs[TILEGX_SPR_CMPEXCH], 0, 32);
> -        }
> -    }
> -
> -    if (!cmp || val == sprval) {
> -        target_long valb = env->atomic_srcb;
> -        if (quad ? put_user_u64(valb, addr) : put_user_u32(valb, addr)) {
> -            goto sigsegv_maperr;
> -        }
> -    }
> -
> -    set_regval(env, env->atomic_dstr, val);
> -    end_exclusive();
> -    return;
> -
> - sigsegv_maperr:
> -    end_exclusive();
> -    gen_sigsegv_maperr(env, addr);
> -}
> -
> -static void do_fetch(CPUTLGState *env, int trapnr, bool quad)
> -{
> -    int8_t write = 1;
> -    target_ulong addr;
> -    target_long val, valb;
> -
> -    start_exclusive();
> -
> -    addr = env->atomic_srca;
> -    valb = env->atomic_srcb;
> -    if (quad ? get_user_s64(val, addr) : get_user_s32(val, addr)) {
> -        goto sigsegv_maperr;
> -    }
> -
> -    switch (trapnr) {
> -    case TILEGX_EXCP_OPCODE_FETCHADD:
> -    case TILEGX_EXCP_OPCODE_FETCHADD4:
> -        valb += val;
> -        break;
> -    case TILEGX_EXCP_OPCODE_FETCHADDGEZ:
> -        valb += val;
> -        if (valb < 0) {
> -            write = 0;
> -        }
> -        break;
> -    case TILEGX_EXCP_OPCODE_FETCHADDGEZ4:
> -        valb += val;
> -        if ((int32_t)valb < 0) {
> -            write = 0;
> -        }
> -        break;
> -    case TILEGX_EXCP_OPCODE_FETCHAND:
> -    case TILEGX_EXCP_OPCODE_FETCHAND4:
> -        valb &= val;
> -        break;
> -    case TILEGX_EXCP_OPCODE_FETCHOR:
> -    case TILEGX_EXCP_OPCODE_FETCHOR4:
> -        valb |= val;
> -        break;
> -    default:
> -        g_assert_not_reached();
> -    }
> -
> -    if (write) {
> -        if (quad ? put_user_u64(valb, addr) : put_user_u32(valb, addr)) {
> -            goto sigsegv_maperr;
> -        }
> -    }
> -
> -    set_regval(env, env->atomic_dstr, val);
> -    end_exclusive();
> -    return;
> -
> - sigsegv_maperr:
> -    end_exclusive();
> -    gen_sigsegv_maperr(env, addr);
> -}
> -
> -void cpu_loop(CPUTLGState *env)
> -{
> -    CPUState *cs = CPU(tilegx_env_get_cpu(env));
> -    int trapnr;
> -
> -    while (1) {
> -        cpu_exec_start(cs);
> -        trapnr = cpu_exec(cs);
> -        cpu_exec_end(cs);
> -        process_queued_cpu_work(cs);
> -
> -        switch (trapnr) {
> -        case TILEGX_EXCP_SYSCALL:
> -        {
> -            abi_ulong ret = do_syscall(env, env->regs[TILEGX_R_NR],
> -                                       env->regs[0], env->regs[1],
> -                                       env->regs[2], env->regs[3],
> -                                       env->regs[4], env->regs[5],
> -                                       env->regs[6], env->regs[7]);
> -            if (ret == -TARGET_ERESTARTSYS) {
> -                env->pc -= 8;
> -            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> -                env->regs[TILEGX_R_RE] = ret;
> -                env->regs[TILEGX_R_ERR] = TILEGX_IS_ERRNO(ret) ? -ret : 0;
> -            }
> -            break;
> -        }
> -        case TILEGX_EXCP_OPCODE_EXCH:
> -            do_exch(env, true, false);
> -            break;
> -        case TILEGX_EXCP_OPCODE_EXCH4:
> -            do_exch(env, false, false);
> -            break;
> -        case TILEGX_EXCP_OPCODE_CMPEXCH:
> -            do_exch(env, true, true);
> -            break;
> -        case TILEGX_EXCP_OPCODE_CMPEXCH4:
> -            do_exch(env, false, true);
> -            break;
> -        case TILEGX_EXCP_OPCODE_FETCHADD:
> -        case TILEGX_EXCP_OPCODE_FETCHADDGEZ:
> -        case TILEGX_EXCP_OPCODE_FETCHAND:
> -        case TILEGX_EXCP_OPCODE_FETCHOR:
> -            do_fetch(env, trapnr, true);
> -            break;
> -        case TILEGX_EXCP_OPCODE_FETCHADD4:
> -        case TILEGX_EXCP_OPCODE_FETCHADDGEZ4:
> -        case TILEGX_EXCP_OPCODE_FETCHAND4:
> -        case TILEGX_EXCP_OPCODE_FETCHOR4:
> -            do_fetch(env, trapnr, false);
> -            break;
> -        case TILEGX_EXCP_SIGNAL:
> -            do_signal(env, env->signo, env->sigcode);
> -            break;
> -        case TILEGX_EXCP_REG_IDN_ACCESS:
> -        case TILEGX_EXCP_REG_UDN_ACCESS:
> -            gen_sigill_reg(env);
> -            break;
> -        case EXCP_ATOMIC:
> -            cpu_exec_step_atomic(cs);
> -            break;
> -        default:
> -            fprintf(stderr, "trapnr is %d[0x%x].\n", trapnr, trapnr);
> -            g_assert_not_reached();
> -        }
> -        process_pending_signals(env);
> -    }
> -}
> -
> -#endif
> -
> -#ifdef TARGET_RISCV
> -
> -void cpu_loop(CPURISCVState *env)
> -{
> -    CPUState *cs = CPU(riscv_env_get_cpu(env));
> -    int trapnr, signum, sigcode;
> -    target_ulong sigaddr;
> -    target_ulong ret;
> -
> -    for (;;) {
> -        cpu_exec_start(cs);
> -        trapnr = cpu_exec(cs);
> -        cpu_exec_end(cs);
> -        process_queued_cpu_work(cs);
> -
> -        signum = 0;
> -        sigcode = 0;
> -        sigaddr = 0;
> -
> -        switch (trapnr) {
> -        case EXCP_INTERRUPT:
> -            /* just indicate that signals should be handled asap */
> -            break;
> -        case EXCP_ATOMIC:
> -            cpu_exec_step_atomic(cs);
> -            break;
> -        case RISCV_EXCP_U_ECALL:
> -            env->pc += 4;
> -            if (env->gpr[xA7] == TARGET_NR_arch_specific_syscall + 15) {
> -                /* riscv_flush_icache_syscall is a no-op in QEMU as
> -                   self-modifying code is automatically detected */
> -                ret = 0;
> -            } else {
> -                ret = do_syscall(env,
> -                                 env->gpr[xA7],
> -                                 env->gpr[xA0],
> -                                 env->gpr[xA1],
> -                                 env->gpr[xA2],
> -                                 env->gpr[xA3],
> -                                 env->gpr[xA4],
> -                                 env->gpr[xA5],
> -                                 0, 0);
> -            }
> -            if (ret == -TARGET_ERESTARTSYS) {
> -                env->pc -= 4;
> -            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> -                env->gpr[xA0] = ret;
> -            }
> -            if (cs->singlestep_enabled) {
> -                goto gdbstep;
> -            }
> -            break;
> -        case RISCV_EXCP_ILLEGAL_INST:
> -            signum = TARGET_SIGILL;
> -            sigcode = TARGET_ILL_ILLOPC;
> -            break;
> -        case RISCV_EXCP_BREAKPOINT:
> -            signum = TARGET_SIGTRAP;
> -            sigcode = TARGET_TRAP_BRKPT;
> -            sigaddr = env->pc;
> -            break;
> -        case RISCV_EXCP_INST_PAGE_FAULT:
> -        case RISCV_EXCP_LOAD_PAGE_FAULT:
> -        case RISCV_EXCP_STORE_PAGE_FAULT:
> -            signum = TARGET_SIGSEGV;
> -            sigcode = TARGET_SEGV_MAPERR;
> -            break;
> -        case EXCP_DEBUG:
> -        gdbstep:
> -            signum = gdb_handlesig(cs, TARGET_SIGTRAP);
> -            sigcode = TARGET_TRAP_BRKPT;
> -            break;
> -        default:
> -            EXCP_DUMP(env, "\nqemu: unhandled CPU exception %#x - 
> aborting\n",
> -                     trapnr);
> -            exit(EXIT_FAILURE);
> -        }
> -
> -        if (signum) {
> -            target_siginfo_t info = {
> -                .si_signo = signum,
> -                .si_errno = 0,
> -                .si_code = sigcode,
> -                ._sifields._sigfault._addr = sigaddr
> -            };
> -            queue_signal(env, info.si_signo, QEMU_SI_KILL, &info);
> -        }
> -
> -        process_pending_signals(env);
> -    }
> -}
> -
> -#endif /* TARGET_RISCV */
> -
> -#ifdef TARGET_HPPA
> -
> -static abi_ulong hppa_lws(CPUHPPAState *env)
> -{
> -    uint32_t which = env->gr[20];
> -    abi_ulong addr = env->gr[26];
> -    abi_ulong old = env->gr[25];
> -    abi_ulong new = env->gr[24];
> -    abi_ulong size, ret;
> -
> -    switch (which) {
> -    default:
> -        return -TARGET_ENOSYS;
> -
> -    case 0: /* elf32 atomic 32bit cmpxchg */
> -        if ((addr & 3) || !access_ok(VERIFY_WRITE, addr, 4)) {
> -            return -TARGET_EFAULT;
> -        }
> -        old = tswap32(old);
> -        new = tswap32(new);
> -        ret = atomic_cmpxchg((uint32_t *)g2h(addr), old, new);
> -        ret = tswap32(ret);
> -        break;
> -
> -    case 2: /* elf32 atomic "new" cmpxchg */
> -        size = env->gr[23];
> -        if (size >= 4) {
> -            return -TARGET_ENOSYS;
> -        }
> -        if (((addr | old | new) & ((1 << size) - 1))
> -            || !access_ok(VERIFY_WRITE, addr, 1 << size)
> -            || !access_ok(VERIFY_READ, old, 1 << size)
> -            || !access_ok(VERIFY_READ, new, 1 << size)) {
> -            return -TARGET_EFAULT;
> -        }
> -        /* Note that below we use host-endian loads so that the cmpxchg
> -           can be host-endian as well.  */
> -        switch (size) {
> -        case 0:
> -            old = *(uint8_t *)g2h(old);
> -            new = *(uint8_t *)g2h(new);
> -            ret = atomic_cmpxchg((uint8_t *)g2h(addr), old, new);
> -            ret = ret != old;
> -            break;
> -        case 1:
> -            old = *(uint16_t *)g2h(old);
> -            new = *(uint16_t *)g2h(new);
> -            ret = atomic_cmpxchg((uint16_t *)g2h(addr), old, new);
> -            ret = ret != old;
> -            break;
> -        case 2:
> -            old = *(uint32_t *)g2h(old);
> -            new = *(uint32_t *)g2h(new);
> -            ret = atomic_cmpxchg((uint32_t *)g2h(addr), old, new);
> -            ret = ret != old;
> -            break;
> -        case 3:
> -            {
> -                uint64_t o64, n64, r64;
> -                o64 = *(uint64_t *)g2h(old);
> -                n64 = *(uint64_t *)g2h(new);
> -#ifdef CONFIG_ATOMIC64
> -                r64 = atomic_cmpxchg__nocheck((uint64_t *)g2h(addr), o64, 
> n64);
> -                ret = r64 != o64;
> -#else
> -                start_exclusive();
> -                r64 = *(uint64_t *)g2h(addr);
> -                ret = 1;
> -                if (r64 == o64) {
> -                    *(uint64_t *)g2h(addr) = n64;
> -                    ret = 0;
> -                }
> -                end_exclusive();
> -#endif
> -            }
> -            break;
> -        }
> -        break;
> -    }
> -
> -    env->gr[28] = ret;
> -    return 0;
> -}
> -
> -void cpu_loop(CPUHPPAState *env)
> -{
> -    CPUState *cs = CPU(hppa_env_get_cpu(env));
> -    target_siginfo_t info;
> -    abi_ulong ret;
> -    int trapnr;
> -
> -    while (1) {
> -        cpu_exec_start(cs);
> -        trapnr = cpu_exec(cs);
> -        cpu_exec_end(cs);
> -        process_queued_cpu_work(cs);
> -
> -        switch (trapnr) {
> -        case EXCP_SYSCALL:
> -            ret = do_syscall(env, env->gr[20],
> -                             env->gr[26], env->gr[25],
> -                             env->gr[24], env->gr[23],
> -                             env->gr[22], env->gr[21], 0, 0);
> -            switch (ret) {
> -            default:
> -                env->gr[28] = ret;
> -                /* We arrived here by faking the gateway page.  Return.  */
> -                env->iaoq_f = env->gr[31];
> -                env->iaoq_b = env->gr[31] + 4;
> -                break;
> -            case -TARGET_ERESTARTSYS:
> -            case -TARGET_QEMU_ESIGRETURN:
> -                break;
> -            }
> -            break;
> -        case EXCP_SYSCALL_LWS:
> -            env->gr[21] = hppa_lws(env);
> -            /* We arrived here by faking the gateway page.  Return.  */
> -            env->iaoq_f = env->gr[31];
> -            env->iaoq_b = env->gr[31] + 4;
> -            break;
> -        case EXCP_ITLB_MISS:
> -        case EXCP_DTLB_MISS:
> -        case EXCP_NA_ITLB_MISS:
> -        case EXCP_NA_DTLB_MISS:
> -        case EXCP_IMP:
> -        case EXCP_DMP:
> -        case EXCP_DMB:
> -        case EXCP_PAGE_REF:
> -        case EXCP_DMAR:
> -        case EXCP_DMPI:
> -            info.si_signo = TARGET_SIGSEGV;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_SEGV_ACCERR;
> -            info._sifields._sigfault._addr = env->cr[CR_IOR];
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_UNALIGN:
> -            info.si_signo = TARGET_SIGBUS;
> -            info.si_errno = 0;
> -            info.si_code = 0;
> -            info._sifields._sigfault._addr = env->cr[CR_IOR];
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_ILL:
> -        case EXCP_PRIV_OPR:
> -        case EXCP_PRIV_REG:
> -            info.si_signo = TARGET_SIGILL;
> -            info.si_errno = 0;
> -            info.si_code = TARGET_ILL_ILLOPN;
> -            info._sifields._sigfault._addr = env->iaoq_f;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_OVERFLOW:
> -        case EXCP_COND:
> -        case EXCP_ASSIST:
> -            info.si_signo = TARGET_SIGFPE;
> -            info.si_errno = 0;
> -            info.si_code = 0;
> -            info._sifields._sigfault._addr = env->iaoq_f;
> -            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -            break;
> -        case EXCP_DEBUG:
> -            trapnr = gdb_handlesig(cs, TARGET_SIGTRAP);
> -            if (trapnr) {
> -                info.si_signo = trapnr;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_TRAP_BRKPT;
> -                queue_signal(env, trapnr, QEMU_SI_FAULT, &info);
> -            }
> -            break;
> -        case EXCP_INTERRUPT:
> -            /* just indicate that signals should be handled asap */
> -            break;
> -        default:
> -            g_assert_not_reached();
> -        }
> -        process_pending_signals(env);
> -    }
> -}
> -
> -#endif /* TARGET_HPPA */
> -
> -#ifdef TARGET_XTENSA
> -
> -static void xtensa_rfw(CPUXtensaState *env)
> -{
> -    xtensa_restore_owb(env);
> -    env->pc = env->sregs[EPC1];
> -}
> -
> -static void xtensa_rfwu(CPUXtensaState *env)
> -{
> -    env->sregs[WINDOW_START] |= (1 << env->sregs[WINDOW_BASE]);
> -    xtensa_rfw(env);
> -}
> -
> -static void xtensa_rfwo(CPUXtensaState *env)
> -{
> -    env->sregs[WINDOW_START] &= ~(1 << env->sregs[WINDOW_BASE]);
> -    xtensa_rfw(env);
> -}
> -
> -static void xtensa_overflow4(CPUXtensaState *env)
> -{
> -    put_user_ual(env->regs[0], env->regs[5] - 16);
> -    put_user_ual(env->regs[1], env->regs[5] - 12);
> -    put_user_ual(env->regs[2], env->regs[5] -  8);
> -    put_user_ual(env->regs[3], env->regs[5] -  4);
> -    xtensa_rfwo(env);
> -}
> -
> -static void xtensa_underflow4(CPUXtensaState *env)
> -{
> -    get_user_ual(env->regs[0], env->regs[5] - 16);
> -    get_user_ual(env->regs[1], env->regs[5] - 12);
> -    get_user_ual(env->regs[2], env->regs[5] -  8);
> -    get_user_ual(env->regs[3], env->regs[5] -  4);
> -    xtensa_rfwu(env);
> -}
> -
> -static void xtensa_overflow8(CPUXtensaState *env)
> -{
> -    put_user_ual(env->regs[0], env->regs[9] - 16);
> -    get_user_ual(env->regs[0], env->regs[1] - 12);
> -    put_user_ual(env->regs[1], env->regs[9] - 12);
> -    put_user_ual(env->regs[2], env->regs[9] -  8);
> -    put_user_ual(env->regs[3], env->regs[9] -  4);
> -    put_user_ual(env->regs[4], env->regs[0] - 32);
> -    put_user_ual(env->regs[5], env->regs[0] - 28);
> -    put_user_ual(env->regs[6], env->regs[0] - 24);
> -    put_user_ual(env->regs[7], env->regs[0] - 20);
> -    xtensa_rfwo(env);
> -}
> -
> -static void xtensa_underflow8(CPUXtensaState *env)
> -{
> -    get_user_ual(env->regs[0], env->regs[9] - 16);
> -    get_user_ual(env->regs[1], env->regs[9] - 12);
> -    get_user_ual(env->regs[2], env->regs[9] -  8);
> -    get_user_ual(env->regs[7], env->regs[1] - 12);
> -    get_user_ual(env->regs[3], env->regs[9] -  4);
> -    get_user_ual(env->regs[4], env->regs[7] - 32);
> -    get_user_ual(env->regs[5], env->regs[7] - 28);
> -    get_user_ual(env->regs[6], env->regs[7] - 24);
> -    get_user_ual(env->regs[7], env->regs[7] - 20);
> -    xtensa_rfwu(env);
> -}
> -
> -static void xtensa_overflow12(CPUXtensaState *env)
> -{
> -    put_user_ual(env->regs[0],  env->regs[13] - 16);
> -    get_user_ual(env->regs[0],  env->regs[1]  - 12);
> -    put_user_ual(env->regs[1],  env->regs[13] - 12);
> -    put_user_ual(env->regs[2],  env->regs[13] -  8);
> -    put_user_ual(env->regs[3],  env->regs[13] -  4);
> -    put_user_ual(env->regs[4],  env->regs[0]  - 48);
> -    put_user_ual(env->regs[5],  env->regs[0]  - 44);
> -    put_user_ual(env->regs[6],  env->regs[0]  - 40);
> -    put_user_ual(env->regs[7],  env->regs[0]  - 36);
> -    put_user_ual(env->regs[8],  env->regs[0]  - 32);
> -    put_user_ual(env->regs[9],  env->regs[0]  - 28);
> -    put_user_ual(env->regs[10], env->regs[0]  - 24);
> -    put_user_ual(env->regs[11], env->regs[0]  - 20);
> -    xtensa_rfwo(env);
> -}
> -
> -static void xtensa_underflow12(CPUXtensaState *env)
> -{
> -    get_user_ual(env->regs[0],  env->regs[13] - 16);
> -    get_user_ual(env->regs[1],  env->regs[13] - 12);
> -    get_user_ual(env->regs[2],  env->regs[13] -  8);
> -    get_user_ual(env->regs[11], env->regs[1]  - 12);
> -    get_user_ual(env->regs[3],  env->regs[13] -  4);
> -    get_user_ual(env->regs[4],  env->regs[11] - 48);
> -    get_user_ual(env->regs[5],  env->regs[11] - 44);
> -    get_user_ual(env->regs[6],  env->regs[11] - 40);
> -    get_user_ual(env->regs[7],  env->regs[11] - 36);
> -    get_user_ual(env->regs[8],  env->regs[11] - 32);
> -    get_user_ual(env->regs[9],  env->regs[11] - 28);
> -    get_user_ual(env->regs[10], env->regs[11] - 24);
> -    get_user_ual(env->regs[11], env->regs[11] - 20);
> -    xtensa_rfwu(env);
> -}
> -
> -void cpu_loop(CPUXtensaState *env)
> -{
> -    CPUState *cs = CPU(xtensa_env_get_cpu(env));
> -    target_siginfo_t info;
> -    abi_ulong ret;
> -    int trapnr;
> -
> -    while (1) {
> -        cpu_exec_start(cs);
> -        trapnr = cpu_exec(cs);
> -        cpu_exec_end(cs);
> -        process_queued_cpu_work(cs);
> -
> -        env->sregs[PS] &= ~PS_EXCM;
> -        switch (trapnr) {
> -        case EXCP_INTERRUPT:
> -            break;
> -
> -        case EXC_WINDOW_OVERFLOW4:
> -            xtensa_overflow4(env);
> -            break;
> -        case EXC_WINDOW_UNDERFLOW4:
> -            xtensa_underflow4(env);
> -            break;
> -        case EXC_WINDOW_OVERFLOW8:
> -            xtensa_overflow8(env);
> -            break;
> -        case EXC_WINDOW_UNDERFLOW8:
> -            xtensa_underflow8(env);
> -            break;
> -        case EXC_WINDOW_OVERFLOW12:
> -            xtensa_overflow12(env);
> -            break;
> -        case EXC_WINDOW_UNDERFLOW12:
> -            xtensa_underflow12(env);
> -            break;
> -
> -        case EXC_USER:
> -            switch (env->sregs[EXCCAUSE]) {
> -            case ILLEGAL_INSTRUCTION_CAUSE:
> -            case PRIVILEGED_CAUSE:
> -                info.si_signo = TARGET_SIGILL;
> -                info.si_errno = 0;
> -                info.si_code =
> -                    env->sregs[EXCCAUSE] == ILLEGAL_INSTRUCTION_CAUSE ?
> -                    TARGET_ILL_ILLOPC : TARGET_ILL_PRVOPC;
> -                info._sifields._sigfault._addr = env->sregs[EPC1];
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                break;
> -
> -            case SYSCALL_CAUSE:
> -                env->pc += 3;
> -                ret = do_syscall(env, env->regs[2],
> -                                 env->regs[6], env->regs[3],
> -                                 env->regs[4], env->regs[5],
> -                                 env->regs[8], env->regs[9], 0, 0);
> -                switch (ret) {
> -                default:
> -                    env->regs[2] = ret;
> -                    break;
> -
> -                case -TARGET_ERESTARTSYS:
> -                case -TARGET_QEMU_ESIGRETURN:
> -                    break;
> -                }
> -                break;
> -
> -            case ALLOCA_CAUSE:
> -                env->sregs[PS] = deposit32(env->sregs[PS],
> -                                           PS_OWB_SHIFT,
> -                                           PS_OWB_LEN,
> -                                           env->sregs[WINDOW_BASE]);
> -
> -                switch (env->regs[0] & 0xc0000000) {
> -                case 0x00000000:
> -                case 0x40000000:
> -                    xtensa_rotate_window(env, -1);
> -                    xtensa_underflow4(env);
> -                    break;
> -
> -                case 0x80000000:
> -                    xtensa_rotate_window(env, -2);
> -                    xtensa_underflow8(env);
> -                    break;
> -
> -                case 0xc0000000:
> -                    xtensa_rotate_window(env, -3);
> -                    xtensa_underflow12(env);
> -                    break;
> -                }
> -                break;
> -
> -            case INTEGER_DIVIDE_BY_ZERO_CAUSE:
> -                info.si_signo = TARGET_SIGFPE;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_FPE_INTDIV;
> -                info._sifields._sigfault._addr = env->sregs[EPC1];
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                break;
> -
> -            case LOAD_PROHIBITED_CAUSE:
> -            case STORE_PROHIBITED_CAUSE:
> -                info.si_signo = TARGET_SIGSEGV;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_SEGV_ACCERR;
> -                info._sifields._sigfault._addr = env->sregs[EXCVADDR];
> -                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> -                break;
> -
> -            default:
> -                fprintf(stderr, "exccause = %d\n", env->sregs[EXCCAUSE]);
> -                g_assert_not_reached();
> -            }
> -            break;
> -        case EXCP_DEBUG:
> -            trapnr = gdb_handlesig(cs, TARGET_SIGTRAP);
> -            if (trapnr) {
> -                info.si_signo = trapnr;
> -                info.si_errno = 0;
> -                info.si_code = TARGET_TRAP_BRKPT;
> -                queue_signal(env, trapnr, QEMU_SI_FAULT, &info);
> -            }
> -            break;
> -        case EXC_DEBUG:
> -        default:
> -            fprintf(stderr, "trapnr = %d\n", trapnr);
> -            g_assert_not_reached();
> -        }
> -        process_pending_signals(env);
> -    }
> -}
> -
> -#endif /* TARGET_XTENSA */
> +#include "cpu_loop.inc.c"
>  
>  __thread CPUState *thread_cpu;
>  
> diff --git a/linux-user/microblaze/cpu_loop.inc.c 
> b/linux-user/microblaze/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..91f0e15989
> --- /dev/null
> +++ b/linux-user/microblaze/cpu_loop.inc.c
> @@ -0,0 +1,116 @@
> +void cpu_loop(CPUMBState *env)
> +{
> +    CPUState *cs = CPU(mb_env_get_cpu(env));
> +    int trapnr, ret;
> +    target_siginfo_t info;
> +
> +    while (1) {
> +        cpu_exec_start(cs);
> +        trapnr = cpu_exec(cs);
> +        cpu_exec_end(cs);
> +        process_queued_cpu_work(cs);
> +
> +        switch (trapnr) {
> +        case 0xaa:
> +            {
> +                info.si_signo = TARGET_SIGSEGV;
> +                info.si_errno = 0;
> +                /* XXX: check env->error_code */
> +                info.si_code = TARGET_SEGV_MAPERR;
> +                info._sifields._sigfault._addr = 0;
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            }
> +            break;
> +     case EXCP_INTERRUPT:
> +       /* just indicate that signals should be handled asap */
> +       break;
> +        case EXCP_BREAK:
> +            /* Return address is 4 bytes after the call.  */
> +            env->regs[14] += 4;
> +            env->sregs[SR_PC] = env->regs[14];
> +            ret = do_syscall(env,
> +                             env->regs[12],
> +                             env->regs[5],
> +                             env->regs[6],
> +                             env->regs[7],
> +                             env->regs[8],
> +                             env->regs[9],
> +                             env->regs[10],
> +                             0, 0);
> +            if (ret == -TARGET_ERESTARTSYS) {
> +                /* Wind back to before the syscall. */
> +                env->sregs[SR_PC] -= 4;
> +            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> +                env->regs[3] = ret;
> +            }
> +            /* All syscall exits result in guest r14 being equal to the
> +             * PC we return to, because the kernel syscall exit "rtbd" does
> +             * this. (This is true even for sigreturn(); note that r14 is
> +             * not a userspace-usable register, as the kernel may clobber it
> +             * at any point.)
> +             */
> +            env->regs[14] = env->sregs[SR_PC];
> +            break;
> +        case EXCP_HW_EXCP:
> +            env->regs[17] = env->sregs[SR_PC] + 4;
> +            if (env->iflags & D_FLAG) {
> +                env->sregs[SR_ESR] |= 1 << 12;
> +                env->sregs[SR_PC] -= 4;
> +                /* FIXME: if branch was immed, replay the imm as well.  */
> +            }
> +
> +            env->iflags &= ~(IMM_FLAG | D_FLAG);
> +
> +            switch (env->sregs[SR_ESR] & 31) {
> +                case ESR_EC_DIVZERO:
> +                    info.si_signo = TARGET_SIGFPE;
> +                    info.si_errno = 0;
> +                    info.si_code = TARGET_FPE_FLTDIV;
> +                    info._sifields._sigfault._addr = 0;
> +                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                    break;
> +                case ESR_EC_FPU:
> +                    info.si_signo = TARGET_SIGFPE;
> +                    info.si_errno = 0;
> +                    if (env->sregs[SR_FSR] & FSR_IO) {
> +                        info.si_code = TARGET_FPE_FLTINV;
> +                    }
> +                    if (env->sregs[SR_FSR] & FSR_DZ) {
> +                        info.si_code = TARGET_FPE_FLTDIV;
> +                    }
> +                    info._sifields._sigfault._addr = 0;
> +                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                    break;
> +                default:
> +                    printf ("Unhandled hw-exception: 0x%x\n",
> +                            env->sregs[SR_ESR] & ESR_EC_MASK);
> +                    cpu_dump_state(cs, stderr, fprintf, 0);
> +                    exit(EXIT_FAILURE);
> +                    break;
> +            }
> +            break;
> +        case EXCP_DEBUG:
> +            {
> +                int sig;
> +
> +                sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> +                if (sig)
> +                  {
> +                    info.si_signo = sig;
> +                    info.si_errno = 0;
> +                    info.si_code = TARGET_TRAP_BRKPT;
> +                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                  }
> +            }
> +            break;
> +        case EXCP_ATOMIC:
> +            cpu_exec_step_atomic(cs);
> +            break;
> +        default:
> +            printf ("Unhandled trap: 0x%x\n", trapnr);
> +            cpu_dump_state(cs, stderr, fprintf, 0);
> +            exit(EXIT_FAILURE);
> +        }
> +        process_pending_signals (env);
> +    }
> +}
> diff --git a/linux-user/mips/cpu_loop.inc.c b/linux-user/mips/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..85d793d82e
> --- /dev/null
> +++ b/linux-user/mips/cpu_loop.inc.c
> @@ -0,0 +1,695 @@
> +# ifdef TARGET_ABI_MIPSO32
> +#  define MIPS_SYS(name, args) args,
> +static const uint8_t mips_syscall_args[] = {
> +     MIPS_SYS(sys_syscall    , 8)    /* 4000 */
> +     MIPS_SYS(sys_exit       , 1)
> +     MIPS_SYS(sys_fork       , 0)
> +     MIPS_SYS(sys_read       , 3)
> +     MIPS_SYS(sys_write      , 3)
> +     MIPS_SYS(sys_open       , 3)    /* 4005 */
> +     MIPS_SYS(sys_close      , 1)
> +     MIPS_SYS(sys_waitpid    , 3)
> +     MIPS_SYS(sys_creat      , 2)
> +     MIPS_SYS(sys_link       , 2)
> +     MIPS_SYS(sys_unlink     , 1)    /* 4010 */
> +     MIPS_SYS(sys_execve     , 0)
> +     MIPS_SYS(sys_chdir      , 1)
> +     MIPS_SYS(sys_time       , 1)
> +     MIPS_SYS(sys_mknod      , 3)
> +     MIPS_SYS(sys_chmod      , 2)    /* 4015 */
> +     MIPS_SYS(sys_lchown     , 3)
> +     MIPS_SYS(sys_ni_syscall , 0)
> +     MIPS_SYS(sys_ni_syscall , 0)    /* was sys_stat */
> +     MIPS_SYS(sys_lseek      , 3)
> +     MIPS_SYS(sys_getpid     , 0)    /* 4020 */
> +     MIPS_SYS(sys_mount      , 5)
> +     MIPS_SYS(sys_umount     , 1)
> +     MIPS_SYS(sys_setuid     , 1)
> +     MIPS_SYS(sys_getuid     , 0)
> +     MIPS_SYS(sys_stime      , 1)    /* 4025 */
> +     MIPS_SYS(sys_ptrace     , 4)
> +     MIPS_SYS(sys_alarm      , 1)
> +     MIPS_SYS(sys_ni_syscall , 0)    /* was sys_fstat */
> +     MIPS_SYS(sys_pause      , 0)
> +     MIPS_SYS(sys_utime      , 2)    /* 4030 */
> +     MIPS_SYS(sys_ni_syscall , 0)
> +     MIPS_SYS(sys_ni_syscall , 0)
> +     MIPS_SYS(sys_access     , 2)
> +     MIPS_SYS(sys_nice       , 1)
> +     MIPS_SYS(sys_ni_syscall , 0)    /* 4035 */
> +     MIPS_SYS(sys_sync       , 0)
> +     MIPS_SYS(sys_kill       , 2)
> +     MIPS_SYS(sys_rename     , 2)
> +     MIPS_SYS(sys_mkdir      , 2)
> +     MIPS_SYS(sys_rmdir      , 1)    /* 4040 */
> +     MIPS_SYS(sys_dup                , 1)
> +     MIPS_SYS(sys_pipe       , 0)
> +     MIPS_SYS(sys_times      , 1)
> +     MIPS_SYS(sys_ni_syscall , 0)
> +     MIPS_SYS(sys_brk                , 1)    /* 4045 */
> +     MIPS_SYS(sys_setgid     , 1)
> +     MIPS_SYS(sys_getgid     , 0)
> +     MIPS_SYS(sys_ni_syscall , 0)    /* was signal(2) */
> +     MIPS_SYS(sys_geteuid    , 0)
> +     MIPS_SYS(sys_getegid    , 0)    /* 4050 */
> +     MIPS_SYS(sys_acct       , 0)
> +     MIPS_SYS(sys_umount2    , 2)
> +     MIPS_SYS(sys_ni_syscall , 0)
> +     MIPS_SYS(sys_ioctl      , 3)
> +     MIPS_SYS(sys_fcntl      , 3)    /* 4055 */
> +     MIPS_SYS(sys_ni_syscall , 2)
> +     MIPS_SYS(sys_setpgid    , 2)
> +     MIPS_SYS(sys_ni_syscall , 0)
> +     MIPS_SYS(sys_olduname   , 1)
> +     MIPS_SYS(sys_umask      , 1)    /* 4060 */
> +     MIPS_SYS(sys_chroot     , 1)
> +     MIPS_SYS(sys_ustat      , 2)
> +     MIPS_SYS(sys_dup2       , 2)
> +     MIPS_SYS(sys_getppid    , 0)
> +     MIPS_SYS(sys_getpgrp    , 0)    /* 4065 */
> +     MIPS_SYS(sys_setsid     , 0)
> +     MIPS_SYS(sys_sigaction  , 3)
> +     MIPS_SYS(sys_sgetmask   , 0)
> +     MIPS_SYS(sys_ssetmask   , 1)
> +     MIPS_SYS(sys_setreuid   , 2)    /* 4070 */
> +     MIPS_SYS(sys_setregid   , 2)
> +     MIPS_SYS(sys_sigsuspend , 0)
> +     MIPS_SYS(sys_sigpending , 1)
> +     MIPS_SYS(sys_sethostname        , 2)
> +     MIPS_SYS(sys_setrlimit  , 2)    /* 4075 */
> +     MIPS_SYS(sys_getrlimit  , 2)
> +     MIPS_SYS(sys_getrusage  , 2)
> +     MIPS_SYS(sys_gettimeofday, 2)
> +     MIPS_SYS(sys_settimeofday, 2)
> +     MIPS_SYS(sys_getgroups  , 2)    /* 4080 */
> +     MIPS_SYS(sys_setgroups  , 2)
> +     MIPS_SYS(sys_ni_syscall , 0)    /* old_select */
> +     MIPS_SYS(sys_symlink    , 2)
> +     MIPS_SYS(sys_ni_syscall , 0)    /* was sys_lstat */
> +     MIPS_SYS(sys_readlink   , 3)    /* 4085 */
> +     MIPS_SYS(sys_uselib     , 1)
> +     MIPS_SYS(sys_swapon     , 2)
> +     MIPS_SYS(sys_reboot     , 3)
> +     MIPS_SYS(old_readdir    , 3)
> +     MIPS_SYS(old_mmap       , 6)    /* 4090 */
> +     MIPS_SYS(sys_munmap     , 2)
> +     MIPS_SYS(sys_truncate   , 2)
> +     MIPS_SYS(sys_ftruncate  , 2)
> +     MIPS_SYS(sys_fchmod     , 2)
> +     MIPS_SYS(sys_fchown     , 3)    /* 4095 */
> +     MIPS_SYS(sys_getpriority        , 2)
> +     MIPS_SYS(sys_setpriority        , 3)
> +     MIPS_SYS(sys_ni_syscall , 0)
> +     MIPS_SYS(sys_statfs     , 2)
> +     MIPS_SYS(sys_fstatfs    , 2)    /* 4100 */
> +     MIPS_SYS(sys_ni_syscall , 0)    /* was ioperm(2) */
> +     MIPS_SYS(sys_socketcall , 2)
> +     MIPS_SYS(sys_syslog     , 3)
> +     MIPS_SYS(sys_setitimer  , 3)
> +     MIPS_SYS(sys_getitimer  , 2)    /* 4105 */
> +     MIPS_SYS(sys_newstat    , 2)
> +     MIPS_SYS(sys_newlstat   , 2)
> +     MIPS_SYS(sys_newfstat   , 2)
> +     MIPS_SYS(sys_uname      , 1)
> +     MIPS_SYS(sys_ni_syscall , 0)    /* 4110 was iopl(2) */
> +     MIPS_SYS(sys_vhangup    , 0)
> +     MIPS_SYS(sys_ni_syscall , 0)    /* was sys_idle() */
> +     MIPS_SYS(sys_ni_syscall , 0)    /* was sys_vm86 */
> +     MIPS_SYS(sys_wait4      , 4)
> +     MIPS_SYS(sys_swapoff    , 1)    /* 4115 */
> +     MIPS_SYS(sys_sysinfo    , 1)
> +     MIPS_SYS(sys_ipc                , 6)
> +     MIPS_SYS(sys_fsync      , 1)
> +     MIPS_SYS(sys_sigreturn  , 0)
> +     MIPS_SYS(sys_clone      , 6)    /* 4120 */
> +     MIPS_SYS(sys_setdomainname, 2)
> +     MIPS_SYS(sys_newuname   , 1)
> +     MIPS_SYS(sys_ni_syscall , 0)    /* sys_modify_ldt */
> +     MIPS_SYS(sys_adjtimex   , 1)
> +     MIPS_SYS(sys_mprotect   , 3)    /* 4125 */
> +     MIPS_SYS(sys_sigprocmask        , 3)
> +     MIPS_SYS(sys_ni_syscall , 0)    /* was create_module */
> +     MIPS_SYS(sys_init_module        , 5)
> +     MIPS_SYS(sys_delete_module, 1)
> +     MIPS_SYS(sys_ni_syscall , 0)    /* 4130 was get_kernel_syms */
> +     MIPS_SYS(sys_quotactl   , 0)
> +     MIPS_SYS(sys_getpgid    , 1)
> +     MIPS_SYS(sys_fchdir     , 1)
> +     MIPS_SYS(sys_bdflush    , 2)
> +     MIPS_SYS(sys_sysfs      , 3)    /* 4135 */
> +     MIPS_SYS(sys_personality        , 1)
> +     MIPS_SYS(sys_ni_syscall , 0)    /* for afs_syscall */
> +     MIPS_SYS(sys_setfsuid   , 1)
> +     MIPS_SYS(sys_setfsgid   , 1)
> +     MIPS_SYS(sys_llseek     , 5)    /* 4140 */
> +     MIPS_SYS(sys_getdents   , 3)
> +     MIPS_SYS(sys_select     , 5)
> +     MIPS_SYS(sys_flock      , 2)
> +     MIPS_SYS(sys_msync      , 3)
> +     MIPS_SYS(sys_readv      , 3)    /* 4145 */
> +     MIPS_SYS(sys_writev     , 3)
> +     MIPS_SYS(sys_cacheflush , 3)
> +     MIPS_SYS(sys_cachectl   , 3)
> +     MIPS_SYS(sys_sysmips    , 4)
> +     MIPS_SYS(sys_ni_syscall , 0)    /* 4150 */
> +     MIPS_SYS(sys_getsid     , 1)
> +     MIPS_SYS(sys_fdatasync  , 0)
> +     MIPS_SYS(sys_sysctl     , 1)
> +     MIPS_SYS(sys_mlock      , 2)
> +     MIPS_SYS(sys_munlock    , 2)    /* 4155 */
> +     MIPS_SYS(sys_mlockall   , 1)
> +     MIPS_SYS(sys_munlockall , 0)
> +     MIPS_SYS(sys_sched_setparam, 2)
> +     MIPS_SYS(sys_sched_getparam, 2)
> +     MIPS_SYS(sys_sched_setscheduler, 3)     /* 4160 */
> +     MIPS_SYS(sys_sched_getscheduler, 1)
> +     MIPS_SYS(sys_sched_yield        , 0)
> +     MIPS_SYS(sys_sched_get_priority_max, 1)
> +     MIPS_SYS(sys_sched_get_priority_min, 1)
> +     MIPS_SYS(sys_sched_rr_get_interval, 2)  /* 4165 */
> +     MIPS_SYS(sys_nanosleep, 2)
> +     MIPS_SYS(sys_mremap     , 5)
> +     MIPS_SYS(sys_accept     , 3)
> +     MIPS_SYS(sys_bind       , 3)
> +     MIPS_SYS(sys_connect    , 3)    /* 4170 */
> +     MIPS_SYS(sys_getpeername        , 3)
> +     MIPS_SYS(sys_getsockname        , 3)
> +     MIPS_SYS(sys_getsockopt , 5)
> +     MIPS_SYS(sys_listen     , 2)
> +     MIPS_SYS(sys_recv       , 4)    /* 4175 */
> +     MIPS_SYS(sys_recvfrom   , 6)
> +     MIPS_SYS(sys_recvmsg    , 3)
> +     MIPS_SYS(sys_send       , 4)
> +     MIPS_SYS(sys_sendmsg    , 3)
> +     MIPS_SYS(sys_sendto     , 6)    /* 4180 */
> +     MIPS_SYS(sys_setsockopt , 5)
> +     MIPS_SYS(sys_shutdown   , 2)
> +     MIPS_SYS(sys_socket     , 3)
> +     MIPS_SYS(sys_socketpair , 4)
> +     MIPS_SYS(sys_setresuid  , 3)    /* 4185 */
> +     MIPS_SYS(sys_getresuid  , 3)
> +     MIPS_SYS(sys_ni_syscall , 0)    /* was sys_query_module */
> +     MIPS_SYS(sys_poll       , 3)
> +     MIPS_SYS(sys_nfsservctl , 3)
> +     MIPS_SYS(sys_setresgid  , 3)    /* 4190 */
> +     MIPS_SYS(sys_getresgid  , 3)
> +     MIPS_SYS(sys_prctl      , 5)
> +     MIPS_SYS(sys_rt_sigreturn, 0)
> +     MIPS_SYS(sys_rt_sigaction, 4)
> +     MIPS_SYS(sys_rt_sigprocmask, 4) /* 4195 */
> +     MIPS_SYS(sys_rt_sigpending, 2)
> +     MIPS_SYS(sys_rt_sigtimedwait, 4)
> +     MIPS_SYS(sys_rt_sigqueueinfo, 3)
> +     MIPS_SYS(sys_rt_sigsuspend, 0)
> +     MIPS_SYS(sys_pread64    , 6)    /* 4200 */
> +     MIPS_SYS(sys_pwrite64   , 6)
> +     MIPS_SYS(sys_chown      , 3)
> +     MIPS_SYS(sys_getcwd     , 2)
> +     MIPS_SYS(sys_capget     , 2)
> +     MIPS_SYS(sys_capset     , 2)    /* 4205 */
> +     MIPS_SYS(sys_sigaltstack        , 2)
> +     MIPS_SYS(sys_sendfile   , 4)
> +     MIPS_SYS(sys_ni_syscall , 0)
> +     MIPS_SYS(sys_ni_syscall , 0)
> +     MIPS_SYS(sys_mmap2      , 6)    /* 4210 */
> +     MIPS_SYS(sys_truncate64 , 4)
> +     MIPS_SYS(sys_ftruncate64        , 4)
> +     MIPS_SYS(sys_stat64     , 2)
> +     MIPS_SYS(sys_lstat64    , 2)
> +     MIPS_SYS(sys_fstat64    , 2)    /* 4215 */
> +     MIPS_SYS(sys_pivot_root , 2)
> +     MIPS_SYS(sys_mincore    , 3)
> +     MIPS_SYS(sys_madvise    , 3)
> +     MIPS_SYS(sys_getdents64 , 3)
> +     MIPS_SYS(sys_fcntl64    , 3)    /* 4220 */
> +     MIPS_SYS(sys_ni_syscall , 0)
> +     MIPS_SYS(sys_gettid     , 0)
> +     MIPS_SYS(sys_readahead  , 5)
> +     MIPS_SYS(sys_setxattr   , 5)
> +     MIPS_SYS(sys_lsetxattr  , 5)    /* 4225 */
> +     MIPS_SYS(sys_fsetxattr  , 5)
> +     MIPS_SYS(sys_getxattr   , 4)
> +     MIPS_SYS(sys_lgetxattr  , 4)
> +     MIPS_SYS(sys_fgetxattr  , 4)
> +     MIPS_SYS(sys_listxattr  , 3)    /* 4230 */
> +     MIPS_SYS(sys_llistxattr , 3)
> +     MIPS_SYS(sys_flistxattr , 3)
> +     MIPS_SYS(sys_removexattr        , 2)
> +     MIPS_SYS(sys_lremovexattr, 2)
> +     MIPS_SYS(sys_fremovexattr, 2)   /* 4235 */
> +     MIPS_SYS(sys_tkill      , 2)
> +     MIPS_SYS(sys_sendfile64 , 5)
> +     MIPS_SYS(sys_futex      , 6)
> +     MIPS_SYS(sys_sched_setaffinity, 3)
> +     MIPS_SYS(sys_sched_getaffinity, 3)      /* 4240 */
> +     MIPS_SYS(sys_io_setup   , 2)
> +     MIPS_SYS(sys_io_destroy , 1)
> +     MIPS_SYS(sys_io_getevents, 5)
> +     MIPS_SYS(sys_io_submit  , 3)
> +     MIPS_SYS(sys_io_cancel  , 3)    /* 4245 */
> +     MIPS_SYS(sys_exit_group , 1)
> +     MIPS_SYS(sys_lookup_dcookie, 3)
> +     MIPS_SYS(sys_epoll_create, 1)
> +     MIPS_SYS(sys_epoll_ctl  , 4)
> +     MIPS_SYS(sys_epoll_wait , 3)    /* 4250 */
> +     MIPS_SYS(sys_remap_file_pages, 5)
> +     MIPS_SYS(sys_set_tid_address, 1)
> +     MIPS_SYS(sys_restart_syscall, 0)
> +     MIPS_SYS(sys_fadvise64_64, 7)
> +     MIPS_SYS(sys_statfs64   , 3)    /* 4255 */
> +     MIPS_SYS(sys_fstatfs64  , 2)
> +     MIPS_SYS(sys_timer_create, 3)
> +     MIPS_SYS(sys_timer_settime, 4)
> +     MIPS_SYS(sys_timer_gettime, 2)
> +     MIPS_SYS(sys_timer_getoverrun, 1)       /* 4260 */
> +     MIPS_SYS(sys_timer_delete, 1)
> +     MIPS_SYS(sys_clock_settime, 2)
> +     MIPS_SYS(sys_clock_gettime, 2)
> +     MIPS_SYS(sys_clock_getres, 2)
> +     MIPS_SYS(sys_clock_nanosleep, 4)        /* 4265 */
> +     MIPS_SYS(sys_tgkill     , 3)
> +     MIPS_SYS(sys_utimes     , 2)
> +     MIPS_SYS(sys_mbind      , 4)
> +     MIPS_SYS(sys_ni_syscall , 0)    /* sys_get_mempolicy */
> +     MIPS_SYS(sys_ni_syscall , 0)    /* 4270 sys_set_mempolicy */
> +     MIPS_SYS(sys_mq_open    , 4)
> +     MIPS_SYS(sys_mq_unlink  , 1)
> +     MIPS_SYS(sys_mq_timedsend, 5)
> +     MIPS_SYS(sys_mq_timedreceive, 5)
> +     MIPS_SYS(sys_mq_notify  , 2)    /* 4275 */
> +     MIPS_SYS(sys_mq_getsetattr, 3)
> +     MIPS_SYS(sys_ni_syscall , 0)    /* sys_vserver */
> +     MIPS_SYS(sys_waitid     , 4)
> +     MIPS_SYS(sys_ni_syscall , 0)    /* available, was setaltroot */
> +     MIPS_SYS(sys_add_key    , 5)
> +     MIPS_SYS(sys_request_key, 4)
> +     MIPS_SYS(sys_keyctl     , 5)
> +     MIPS_SYS(sys_set_thread_area, 1)
> +     MIPS_SYS(sys_inotify_init, 0)
> +     MIPS_SYS(sys_inotify_add_watch, 3) /* 4285 */
> +     MIPS_SYS(sys_inotify_rm_watch, 2)
> +     MIPS_SYS(sys_migrate_pages, 4)
> +     MIPS_SYS(sys_openat, 4)
> +     MIPS_SYS(sys_mkdirat, 3)
> +     MIPS_SYS(sys_mknodat, 4)        /* 4290 */
> +     MIPS_SYS(sys_fchownat, 5)
> +     MIPS_SYS(sys_futimesat, 3)
> +     MIPS_SYS(sys_fstatat64, 4)
> +     MIPS_SYS(sys_unlinkat, 3)
> +     MIPS_SYS(sys_renameat, 4)       /* 4295 */
> +     MIPS_SYS(sys_linkat, 5)
> +     MIPS_SYS(sys_symlinkat, 3)
> +     MIPS_SYS(sys_readlinkat, 4)
> +     MIPS_SYS(sys_fchmodat, 3)
> +     MIPS_SYS(sys_faccessat, 3)      /* 4300 */
> +     MIPS_SYS(sys_pselect6, 6)
> +     MIPS_SYS(sys_ppoll, 5)
> +     MIPS_SYS(sys_unshare, 1)
> +     MIPS_SYS(sys_splice, 6)
> +     MIPS_SYS(sys_sync_file_range, 7) /* 4305 */
> +     MIPS_SYS(sys_tee, 4)
> +     MIPS_SYS(sys_vmsplice, 4)
> +     MIPS_SYS(sys_move_pages, 6)
> +     MIPS_SYS(sys_set_robust_list, 2)
> +     MIPS_SYS(sys_get_robust_list, 3) /* 4310 */
> +     MIPS_SYS(sys_kexec_load, 4)
> +     MIPS_SYS(sys_getcpu, 3)
> +     MIPS_SYS(sys_epoll_pwait, 6)
> +     MIPS_SYS(sys_ioprio_set, 3)
> +     MIPS_SYS(sys_ioprio_get, 2)
> +        MIPS_SYS(sys_utimensat, 4)
> +        MIPS_SYS(sys_signalfd, 3)
> +        MIPS_SYS(sys_ni_syscall, 0)     /* was timerfd */
> +        MIPS_SYS(sys_eventfd, 1)
> +        MIPS_SYS(sys_fallocate, 6)      /* 4320 */
> +        MIPS_SYS(sys_timerfd_create, 2)
> +        MIPS_SYS(sys_timerfd_gettime, 2)
> +        MIPS_SYS(sys_timerfd_settime, 4)
> +        MIPS_SYS(sys_signalfd4, 4)
> +        MIPS_SYS(sys_eventfd2, 2)       /* 4325 */
> +        MIPS_SYS(sys_epoll_create1, 1)
> +        MIPS_SYS(sys_dup3, 3)
> +        MIPS_SYS(sys_pipe2, 2)
> +        MIPS_SYS(sys_inotify_init1, 1)
> +        MIPS_SYS(sys_preadv, 5)         /* 4330 */
> +        MIPS_SYS(sys_pwritev, 5)
> +        MIPS_SYS(sys_rt_tgsigqueueinfo, 4)
> +        MIPS_SYS(sys_perf_event_open, 5)
> +        MIPS_SYS(sys_accept4, 4)
> +        MIPS_SYS(sys_recvmmsg, 5)       /* 4335 */
> +        MIPS_SYS(sys_fanotify_init, 2)
> +        MIPS_SYS(sys_fanotify_mark, 6)
> +        MIPS_SYS(sys_prlimit64, 4)
> +        MIPS_SYS(sys_name_to_handle_at, 5)
> +        MIPS_SYS(sys_open_by_handle_at, 3) /* 4340 */
> +        MIPS_SYS(sys_clock_adjtime, 2)
> +        MIPS_SYS(sys_syncfs, 1)
> +        MIPS_SYS(sys_sendmmsg, 4)
> +        MIPS_SYS(sys_setns, 2)
> +        MIPS_SYS(sys_process_vm_readv, 6) /* 345 */
> +        MIPS_SYS(sys_process_vm_writev, 6)
> +        MIPS_SYS(sys_kcmp, 5)
> +        MIPS_SYS(sys_finit_module, 3)
> +        MIPS_SYS(sys_sched_setattr, 2)
> +        MIPS_SYS(sys_sched_getattr, 3)  /* 350 */
> +        MIPS_SYS(sys_renameat2, 5)
> +        MIPS_SYS(sys_seccomp, 3)
> +        MIPS_SYS(sys_getrandom, 3)
> +        MIPS_SYS(sys_memfd_create, 2)
> +        MIPS_SYS(sys_bpf, 3)            /* 355 */
> +        MIPS_SYS(sys_execveat, 5)
> +        MIPS_SYS(sys_userfaultfd, 1)
> +        MIPS_SYS(sys_membarrier, 2)
> +        MIPS_SYS(sys_mlock2, 3)
> +        MIPS_SYS(sys_copy_file_range, 6) /* 360 */
> +        MIPS_SYS(sys_preadv2, 6)
> +        MIPS_SYS(sys_pwritev2, 6)
> +};
> +#  undef MIPS_SYS
> +# endif /* O32 */
> +
> +static int do_store_exclusive(CPUMIPSState *env)
> +{
> +    target_ulong addr;
> +    target_ulong page_addr;
> +    target_ulong val;
> +    int flags;
> +    int segv = 0;
> +    int reg;
> +    int d;
> +
> +    addr = env->lladdr;
> +    page_addr = addr & TARGET_PAGE_MASK;
> +    start_exclusive();
> +    mmap_lock();
> +    flags = page_get_flags(page_addr);
> +    if ((flags & PAGE_READ) == 0) {
> +        segv = 1;
> +    } else {
> +        reg = env->llreg & 0x1f;
> +        d = (env->llreg & 0x20) != 0;
> +        if (d) {
> +            segv = get_user_s64(val, addr);
> +        } else {
> +            segv = get_user_s32(val, addr);
> +        }
> +        if (!segv) {
> +            if (val != env->llval) {
> +                env->active_tc.gpr[reg] = 0;
> +            } else {
> +                if (d) {
> +                    segv = put_user_u64(env->llnewval, addr);
> +                } else {
> +                    segv = put_user_u32(env->llnewval, addr);
> +                }
> +                if (!segv) {
> +                    env->active_tc.gpr[reg] = 1;
> +                }
> +            }
> +        }
> +    }
> +    env->lladdr = -1;
> +    if (!segv) {
> +        env->active_tc.PC += 4;
> +    }
> +    mmap_unlock();
> +    end_exclusive();
> +    return segv;
> +}
> +
> +/* Break codes */
> +enum {
> +    BRK_OVERFLOW = 6,
> +    BRK_DIVZERO = 7
> +};
> +
> +static int do_break(CPUMIPSState *env, target_siginfo_t *info,
> +                    unsigned int code)
> +{
> +    int ret = -1;
> +
> +    switch (code) {
> +    case BRK_OVERFLOW:
> +    case BRK_DIVZERO:
> +        info->si_signo = TARGET_SIGFPE;
> +        info->si_errno = 0;
> +        info->si_code = (code == BRK_OVERFLOW) ? FPE_INTOVF : FPE_INTDIV;
> +        queue_signal(env, info->si_signo, QEMU_SI_FAULT, &*info);
> +        ret = 0;
> +        break;
> +    default:
> +        info->si_signo = TARGET_SIGTRAP;
> +        info->si_errno = 0;
> +        queue_signal(env, info->si_signo, QEMU_SI_FAULT, &*info);
> +        ret = 0;
> +        break;
> +    }
> +
> +    return ret;
> +}
> +
> +void cpu_loop(CPUMIPSState *env)
> +{
> +    CPUState *cs = CPU(mips_env_get_cpu(env));
> +    target_siginfo_t info;
> +    int trapnr;
> +    abi_long ret;
> +# ifdef TARGET_ABI_MIPSO32
> +    unsigned int syscall_num;
> +# endif
> +
> +    for(;;) {
> +        cpu_exec_start(cs);
> +        trapnr = cpu_exec(cs);
> +        cpu_exec_end(cs);
> +        process_queued_cpu_work(cs);
> +
> +        switch(trapnr) {
> +        case EXCP_SYSCALL:
> +            env->active_tc.PC += 4;
> +# ifdef TARGET_ABI_MIPSO32
> +            syscall_num = env->active_tc.gpr[2] - 4000;
> +            if (syscall_num >= sizeof(mips_syscall_args)) {
> +                ret = -TARGET_ENOSYS;
> +            } else {
> +                int nb_args;
> +                abi_ulong sp_reg;
> +                abi_ulong arg5 = 0, arg6 = 0, arg7 = 0, arg8 = 0;
> +
> +                nb_args = mips_syscall_args[syscall_num];
> +                sp_reg = env->active_tc.gpr[29];
> +                switch (nb_args) {
> +                /* these arguments are taken from the stack */
> +                case 8:
> +                    if ((ret = get_user_ual(arg8, sp_reg + 28)) != 0) {
> +                        goto done_syscall;
> +                    }
> +                case 7:
> +                    if ((ret = get_user_ual(arg7, sp_reg + 24)) != 0) {
> +                        goto done_syscall;
> +                    }
> +                case 6:
> +                    if ((ret = get_user_ual(arg6, sp_reg + 20)) != 0) {
> +                        goto done_syscall;
> +                    }
> +                case 5:
> +                    if ((ret = get_user_ual(arg5, sp_reg + 16)) != 0) {
> +                        goto done_syscall;
> +                    }
> +                default:
> +                    break;
> +                }
> +                ret = do_syscall(env, env->active_tc.gpr[2],
> +                                 env->active_tc.gpr[4],
> +                                 env->active_tc.gpr[5],
> +                                 env->active_tc.gpr[6],
> +                                 env->active_tc.gpr[7],
> +                                 arg5, arg6, arg7, arg8);
> +            }
> +done_syscall:
> +# else
> +            ret = do_syscall(env, env->active_tc.gpr[2],
> +                             env->active_tc.gpr[4], env->active_tc.gpr[5],
> +                             env->active_tc.gpr[6], env->active_tc.gpr[7],
> +                             env->active_tc.gpr[8], env->active_tc.gpr[9],
> +                             env->active_tc.gpr[10], env->active_tc.gpr[11]);
> +# endif /* O32 */
> +            if (ret == -TARGET_ERESTARTSYS) {
> +                env->active_tc.PC -= 4;
> +                break;
> +            }
> +            if (ret == -TARGET_QEMU_ESIGRETURN) {
> +                /* Returning from a successful sigreturn syscall.
> +                   Avoid clobbering register state.  */
> +                break;
> +            }
> +            if ((abi_ulong)ret >= (abi_ulong)-1133) {
> +                env->active_tc.gpr[7] = 1; /* error flag */
> +                ret = -ret;
> +            } else {
> +                env->active_tc.gpr[7] = 0; /* error flag */
> +            }
> +            env->active_tc.gpr[2] = ret;
> +            break;
> +        case EXCP_TLBL:
> +        case EXCP_TLBS:
> +        case EXCP_AdEL:
> +        case EXCP_AdES:
> +            info.si_signo = TARGET_SIGSEGV;
> +            info.si_errno = 0;
> +            /* XXX: check env->error_code */
> +            info.si_code = TARGET_SEGV_MAPERR;
> +            info._sifields._sigfault._addr = env->CP0_BadVAddr;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_CpU:
> +        case EXCP_RI:
> +            info.si_signo = TARGET_SIGILL;
> +            info.si_errno = 0;
> +            info.si_code = 0;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_INTERRUPT:
> +            /* just indicate that signals should be handled asap */
> +            break;
> +        case EXCP_DEBUG:
> +            {
> +                int sig;
> +
> +                sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> +                if (sig)
> +                  {
> +                    info.si_signo = sig;
> +                    info.si_errno = 0;
> +                    info.si_code = TARGET_TRAP_BRKPT;
> +                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                  }
> +            }
> +            break;
> +        case EXCP_SC:
> +            if (do_store_exclusive(env)) {
> +                info.si_signo = TARGET_SIGSEGV;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_SEGV_MAPERR;
> +                info._sifields._sigfault._addr = env->active_tc.PC;
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            }
> +            break;
> +        case EXCP_DSPDIS:
> +            info.si_signo = TARGET_SIGILL;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_ILL_ILLOPC;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        /* The code below was inspired by the MIPS Linux kernel trap
> +         * handling code in arch/mips/kernel/traps.c.
> +         */
> +        case EXCP_BREAK:
> +            {
> +                abi_ulong trap_instr;
> +                unsigned int code;
> +
> +                if (env->hflags & MIPS_HFLAG_M16) {
> +                    if (env->insn_flags & ASE_MICROMIPS) {
> +                        /* microMIPS mode */
> +                        ret = get_user_u16(trap_instr, env->active_tc.PC);
> +                        if (ret != 0) {
> +                            goto error;
> +                        }
> +
> +                        if ((trap_instr >> 10) == 0x11) {
> +                            /* 16-bit instruction */
> +                            code = trap_instr & 0xf;
> +                        } else {
> +                            /* 32-bit instruction */
> +                            abi_ulong instr_lo;
> +
> +                            ret = get_user_u16(instr_lo,
> +                                               env->active_tc.PC + 2);
> +                            if (ret != 0) {
> +                                goto error;
> +                            }
> +                            trap_instr = (trap_instr << 16) | instr_lo;
> +                            code = ((trap_instr >> 6) & ((1 << 20) - 1));
> +                            /* Unfortunately, microMIPS also suffers from
> +                               the old assembler bug...  */
> +                            if (code >= (1 << 10)) {
> +                                code >>= 10;
> +                            }
> +                        }
> +                    } else {
> +                        /* MIPS16e mode */
> +                        ret = get_user_u16(trap_instr, env->active_tc.PC);
> +                        if (ret != 0) {
> +                            goto error;
> +                        }
> +                        code = (trap_instr >> 6) & 0x3f;
> +                    }
> +                } else {
> +                    ret = get_user_u32(trap_instr, env->active_tc.PC);
> +                    if (ret != 0) {
> +                        goto error;
> +                    }
> +
> +                    /* As described in the original Linux kernel code, the
> +                     * below checks on 'code' are to work around an old
> +                     * assembly bug.
> +                     */
> +                    code = ((trap_instr >> 6) & ((1 << 20) - 1));
> +                    if (code >= (1 << 10)) {
> +                        code >>= 10;
> +                    }
> +                }
> +
> +                if (do_break(env, &info, code) != 0) {
> +                    goto error;
> +                }
> +            }
> +            break;
> +        case EXCP_TRAP:
> +            {
> +                abi_ulong trap_instr;
> +                unsigned int code = 0;
> +
> +                if (env->hflags & MIPS_HFLAG_M16) {
> +                    /* microMIPS mode */
> +                    abi_ulong instr[2];
> +
> +                    ret = get_user_u16(instr[0], env->active_tc.PC) ||
> +                          get_user_u16(instr[1], env->active_tc.PC + 2);
> +
> +                    trap_instr = (instr[0] << 16) | instr[1];
> +                } else {
> +                    ret = get_user_u32(trap_instr, env->active_tc.PC);
> +                }
> +
> +                if (ret != 0) {
> +                    goto error;
> +                }
> +
> +                /* The immediate versions don't provide a code.  */
> +                if (!(trap_instr & 0xFC000000)) {
> +                    if (env->hflags & MIPS_HFLAG_M16) {
> +                        /* microMIPS mode */
> +                        code = ((trap_instr >> 12) & ((1 << 4) - 1));
> +                    } else {
> +                        code = ((trap_instr >> 6) & ((1 << 10) - 1));
> +                    }
> +                }
> +
> +                if (do_break(env, &info, code) != 0) {
> +                    goto error;
> +                }
> +            }
> +            break;
> +        case EXCP_ATOMIC:
> +            cpu_exec_step_atomic(cs);
> +            break;
> +        default:
> +error:
> +            EXCP_DUMP(env, "qemu: unhandled CPU exception 0x%x - 
> aborting\n", trapnr);
> +            abort();
> +        }
> +        process_pending_signals(env);
> +    }
> +}
> diff --git a/linux-user/mips64/cpu_loop.inc.c 
> b/linux-user/mips64/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..0eb0f9572a
> --- /dev/null
> +++ b/linux-user/mips64/cpu_loop.inc.c
> @@ -0,0 +1 @@
> +#include "../mips/cpu_loop.inc.c"
> diff --git a/linux-user/nios2/cpu_loop.inc.c b/linux-user/nios2/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..d6f318d640
> --- /dev/null
> +++ b/linux-user/nios2/cpu_loop.inc.c
> @@ -0,0 +1,98 @@
> +void cpu_loop(CPUNios2State *env)
> +{
> +    CPUState *cs = ENV_GET_CPU(env);
> +    Nios2CPU *cpu = NIOS2_CPU(cs);
> +    target_siginfo_t info;
> +    int trapnr, gdbsig, ret;
> +
> +    for (;;) {
> +        cpu_exec_start(cs);
> +        trapnr = cpu_exec(cs);
> +        cpu_exec_end(cs);
> +        gdbsig = 0;
> +
> +        switch (trapnr) {
> +        case EXCP_INTERRUPT:
> +            /* just indicate that signals should be handled asap */
> +            break;
> +        case EXCP_TRAP:
> +            if (env->regs[R_AT] == 0) {
> +                abi_long ret;
> +                qemu_log_mask(CPU_LOG_INT, "\nSyscall\n");
> +
> +                ret = do_syscall(env, env->regs[2],
> +                                 env->regs[4], env->regs[5], env->regs[6],
> +                                 env->regs[7], env->regs[8], env->regs[9],
> +                                 0, 0);
> +
> +                if (env->regs[2] == 0) {    /* FIXME: syscall 0 workaround */
> +                    ret = 0;
> +                }
> +
> +                env->regs[2] = abs(ret);
> +                /* Return value is 0..4096 */
> +                env->regs[7] = (ret > 0xfffffffffffff000ULL);
> +                env->regs[CR_ESTATUS] = env->regs[CR_STATUS];
> +                env->regs[CR_STATUS] &= ~0x3;
> +                env->regs[R_EA] = env->regs[R_PC] + 4;
> +                env->regs[R_PC] += 4;
> +                break;
> +            } else {
> +                qemu_log_mask(CPU_LOG_INT, "\nTrap\n");
> +
> +                env->regs[CR_ESTATUS] = env->regs[CR_STATUS];
> +                env->regs[CR_STATUS] &= ~0x3;
> +                env->regs[R_EA] = env->regs[R_PC] + 4;
> +                env->regs[R_PC] = cpu->exception_addr;
> +
> +                gdbsig = TARGET_SIGTRAP;
> +                break;
> +            }
> +        case 0xaa:
> +            switch (env->regs[R_PC]) {
> +            /*case 0x1000:*/  /* TODO:__kuser_helper_version */
> +            case 0x1004:      /* __kuser_cmpxchg */
> +                start_exclusive();
> +                if (env->regs[4] & 0x3) {
> +                    goto kuser_fail;
> +                }
> +                ret = get_user_u32(env->regs[2], env->regs[4]);
> +                if (ret) {
> +                    end_exclusive();
> +                    goto kuser_fail;
> +                }
> +                env->regs[2] -= env->regs[5];
> +                if (env->regs[2] == 0) {
> +                    put_user_u32(env->regs[6], env->regs[4]);
> +                }
> +                end_exclusive();
> +                env->regs[R_PC] = env->regs[R_RA];
> +                break;
> +            /*case 0x1040:*/  /* TODO:__kuser_sigtramp */
> +            default:
> +                ;
> +kuser_fail:
> +                info.si_signo = TARGET_SIGSEGV;
> +                info.si_errno = 0;
> +                /* TODO: check env->error_code */
> +                info.si_code = TARGET_SEGV_MAPERR;
> +                info._sifields._sigfault._addr = env->regs[R_PC];
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            }
> +            break;
> +        default:
> +            EXCP_DUMP(env, "\nqemu: unhandled CPU exception %#x - 
> aborting\n",
> +                     trapnr);
> +            gdbsig = TARGET_SIGILL;
> +            break;
> +        }
> +        if (gdbsig) {
> +            gdb_handlesig(cs, gdbsig);
> +            if (gdbsig != TARGET_SIGTRAP) {
> +                exit(EXIT_FAILURE);
> +            }
> +        }
> +
> +        process_pending_signals(env);
> +    }
> +}
> diff --git a/linux-user/openrisc/cpu_loop.inc.c 
> b/linux-user/openrisc/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..4cf9752142
> --- /dev/null
> +++ b/linux-user/openrisc/cpu_loop.inc.c
> @@ -0,0 +1,81 @@
> +void cpu_loop(CPUOpenRISCState *env)
> +{
> +    CPUState *cs = CPU(openrisc_env_get_cpu(env));
> +    int trapnr;
> +    abi_long ret;
> +    target_siginfo_t info;
> +
> +    for (;;) {
> +        cpu_exec_start(cs);
> +        trapnr = cpu_exec(cs);
> +        cpu_exec_end(cs);
> +        process_queued_cpu_work(cs);
> +
> +        switch (trapnr) {
> +        case EXCP_SYSCALL:
> +            env->pc += 4;   /* 0xc00; */
> +            ret = do_syscall(env,
> +                             cpu_get_gpr(env, 11), /* return value       */
> +                             cpu_get_gpr(env, 3),  /* r3 - r7 are params */
> +                             cpu_get_gpr(env, 4),
> +                             cpu_get_gpr(env, 5),
> +                             cpu_get_gpr(env, 6),
> +                             cpu_get_gpr(env, 7),
> +                             cpu_get_gpr(env, 8), 0, 0);
> +            if (ret == -TARGET_ERESTARTSYS) {
> +                env->pc -= 4;
> +            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> +                cpu_set_gpr(env, 11, ret);
> +            }
> +            break;
> +        case EXCP_DPF:
> +        case EXCP_IPF:
> +        case EXCP_RANGE:
> +            info.si_signo = TARGET_SIGSEGV;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_SEGV_MAPERR;
> +            info._sifields._sigfault._addr = env->pc;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_ALIGN:
> +            info.si_signo = TARGET_SIGBUS;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_BUS_ADRALN;
> +            info._sifields._sigfault._addr = env->pc;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_ILLEGAL:
> +            info.si_signo = TARGET_SIGILL;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_ILL_ILLOPC;
> +            info._sifields._sigfault._addr = env->pc;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_FPE:
> +            info.si_signo = TARGET_SIGFPE;
> +            info.si_errno = 0;
> +            info.si_code = 0;
> +            info._sifields._sigfault._addr = env->pc;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case EXCP_INTERRUPT:
> +            /* We processed the pending cpu work above.  */
> +            break;
> +        case EXCP_DEBUG:
> +            trapnr = gdb_handlesig(cs, TARGET_SIGTRAP);
> +            if (trapnr) {
> +                info.si_signo = trapnr;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_TRAP_BRKPT;
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            }
> +            break;
> +        case EXCP_ATOMIC:
> +            cpu_exec_step_atomic(cs);
> +            break;
> +        default:
> +            g_assert_not_reached();
> +        }
> +        process_pending_signals(env);
> +    }
> +}
> diff --git a/linux-user/ppc/cpu_loop.inc.c b/linux-user/ppc/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..008c1d603e
> --- /dev/null
> +++ b/linux-user/ppc/cpu_loop.inc.c
> @@ -0,0 +1,538 @@
> +static inline uint64_t cpu_ppc_get_tb(CPUPPCState *env)
> +{
> +    return cpu_get_host_ticks();
> +}
> +
> +uint64_t cpu_ppc_load_tbl(CPUPPCState *env)
> +{
> +    return cpu_ppc_get_tb(env);
> +}
> +
> +uint32_t cpu_ppc_load_tbu(CPUPPCState *env)
> +{
> +    return cpu_ppc_get_tb(env) >> 32;
> +}
> +
> +uint64_t cpu_ppc_load_atbl(CPUPPCState *env)
> +{
> +    return cpu_ppc_get_tb(env);
> +}
> +
> +uint32_t cpu_ppc_load_atbu(CPUPPCState *env)
> +{
> +    return cpu_ppc_get_tb(env) >> 32;
> +}
> +
> +uint32_t cpu_ppc601_load_rtcu(CPUPPCState *env)
> +__attribute__ (( alias ("cpu_ppc_load_tbu") ));
> +
> +uint32_t cpu_ppc601_load_rtcl(CPUPPCState *env)
> +{
> +    return cpu_ppc_load_tbl(env) & 0x3FFFFF80;
> +}
> +
> +/* XXX: to be fixed */
> +int ppc_dcr_read (ppc_dcr_t *dcr_env, int dcrn, uint32_t *valp)
> +{
> +    return -1;
> +}
> +
> +int ppc_dcr_write (ppc_dcr_t *dcr_env, int dcrn, uint32_t val)
> +{
> +    return -1;
> +}
> +
> +static int do_store_exclusive(CPUPPCState *env)
> +{
> +    target_ulong addr;
> +    target_ulong page_addr;
> +    target_ulong val, val2 __attribute__((unused)) = 0;
> +    int flags;
> +    int segv = 0;
> +
> +    addr = env->reserve_ea;
> +    page_addr = addr & TARGET_PAGE_MASK;
> +    start_exclusive();
> +    mmap_lock();
> +    flags = page_get_flags(page_addr);
> +    if ((flags & PAGE_READ) == 0) {
> +        segv = 1;
> +    } else {
> +        int reg = env->reserve_info & 0x1f;
> +        int size = env->reserve_info >> 5;
> +        int stored = 0;
> +
> +        if (addr == env->reserve_addr) {
> +            switch (size) {
> +            case 1: segv = get_user_u8(val, addr); break;
> +            case 2: segv = get_user_u16(val, addr); break;
> +            case 4: segv = get_user_u32(val, addr); break;
> +#if defined(TARGET_PPC64)
> +            case 8: segv = get_user_u64(val, addr); break;
> +            case 16: {
> +                segv = get_user_u64(val, addr);
> +                if (!segv) {
> +                    segv = get_user_u64(val2, addr + 8);
> +                }
> +                break;
> +            }
> +#endif
> +            default: abort();
> +            }
> +            if (!segv && val == env->reserve_val) {
> +                val = env->gpr[reg];
> +                switch (size) {
> +                case 1: segv = put_user_u8(val, addr); break;
> +                case 2: segv = put_user_u16(val, addr); break;
> +                case 4: segv = put_user_u32(val, addr); break;
> +#if defined(TARGET_PPC64)
> +                case 8: segv = put_user_u64(val, addr); break;
> +                case 16: {
> +                    if (val2 == env->reserve_val2) {
> +                        if (msr_le) {
> +                            val2 = val;
> +                            val = env->gpr[reg+1];
> +                        } else {
> +                            val2 = env->gpr[reg+1];
> +                        }
> +                        segv = put_user_u64(val, addr);
> +                        if (!segv) {
> +                            segv = put_user_u64(val2, addr + 8);
> +                        }
> +                    }
> +                    break;
> +                }
> +#endif
> +                default: abort();
> +                }
> +                if (!segv) {
> +                    stored = 1;
> +                }
> +            }
> +        }
> +        env->crf[0] = (stored << 1) | xer_so;
> +        env->reserve_addr = (target_ulong)-1;
> +    }
> +    if (!segv) {
> +        env->nip += 4;
> +    }
> +    mmap_unlock();
> +    end_exclusive();
> +    return segv;
> +}
> +
> +void cpu_loop(CPUPPCState *env)
> +{
> +    CPUState *cs = CPU(ppc_env_get_cpu(env));
> +    target_siginfo_t info;
> +    int trapnr;
> +    target_ulong ret;
> +
> +    for(;;) {
> +        cpu_exec_start(cs);
> +        trapnr = cpu_exec(cs);
> +        cpu_exec_end(cs);
> +        process_queued_cpu_work(cs);
> +
> +        switch(trapnr) {
> +        case POWERPC_EXCP_NONE:
> +            /* Just go on */
> +            break;
> +        case POWERPC_EXCP_CRITICAL: /* Critical input                        
> */
> +            cpu_abort(cs, "Critical interrupt while in user mode. "
> +                      "Aborting\n");
> +            break;
> +        case POWERPC_EXCP_MCHECK:   /* Machine check exception               
> */
> +            cpu_abort(cs, "Machine check exception while in user mode. "
> +                      "Aborting\n");
> +            break;
> +        case POWERPC_EXCP_DSI:      /* Data storage exception                
> */
> +            /* XXX: check this. Seems bugged */
> +            switch (env->error_code & 0xFF000000) {
> +            case 0x40000000:
> +            case 0x42000000:
> +                info.si_signo = TARGET_SIGSEGV;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_SEGV_MAPERR;
> +                break;
> +            case 0x04000000:
> +                info.si_signo = TARGET_SIGILL;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_ILL_ILLADR;
> +                break;
> +            case 0x08000000:
> +                info.si_signo = TARGET_SIGSEGV;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_SEGV_ACCERR;
> +                break;
> +            default:
> +                /* Let's send a regular segfault... */
> +                EXCP_DUMP(env, "Invalid segfault errno (%02x)\n",
> +                          env->error_code);
> +                info.si_signo = TARGET_SIGSEGV;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_SEGV_MAPERR;
> +                break;
> +            }
> +            info._sifields._sigfault._addr = env->spr[SPR_DAR];
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case POWERPC_EXCP_ISI:      /* Instruction storage exception         
> */
> +            /* XXX: check this */
> +            switch (env->error_code & 0xFF000000) {
> +            case 0x40000000:
> +                info.si_signo = TARGET_SIGSEGV;
> +            info.si_errno = 0;
> +                info.si_code = TARGET_SEGV_MAPERR;
> +                break;
> +            case 0x10000000:
> +            case 0x08000000:
> +                info.si_signo = TARGET_SIGSEGV;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_SEGV_ACCERR;
> +                break;
> +            default:
> +                /* Let's send a regular segfault... */
> +                EXCP_DUMP(env, "Invalid segfault errno (%02x)\n",
> +                          env->error_code);
> +                info.si_signo = TARGET_SIGSEGV;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_SEGV_MAPERR;
> +                break;
> +            }
> +            info._sifields._sigfault._addr = env->nip - 4;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case POWERPC_EXCP_EXTERNAL: /* External input                        
> */
> +            cpu_abort(cs, "External interrupt while in user mode. "
> +                      "Aborting\n");
> +            break;
> +        case POWERPC_EXCP_ALIGN:    /* Alignment exception                   
> */
> +            /* XXX: check this */
> +            info.si_signo = TARGET_SIGBUS;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_BUS_ADRALN;
> +            info._sifields._sigfault._addr = env->nip;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case POWERPC_EXCP_PROGRAM:  /* Program exception                     
> */
> +        case POWERPC_EXCP_HV_EMU:   /* HV emulation                          
> */
> +            /* XXX: check this */
> +            switch (env->error_code & ~0xF) {
> +            case POWERPC_EXCP_FP:
> +                info.si_signo = TARGET_SIGFPE;
> +                info.si_errno = 0;
> +                switch (env->error_code & 0xF) {
> +                case POWERPC_EXCP_FP_OX:
> +                    info.si_code = TARGET_FPE_FLTOVF;
> +                    break;
> +                case POWERPC_EXCP_FP_UX:
> +                    info.si_code = TARGET_FPE_FLTUND;
> +                    break;
> +                case POWERPC_EXCP_FP_ZX:
> +                case POWERPC_EXCP_FP_VXZDZ:
> +                    info.si_code = TARGET_FPE_FLTDIV;
> +                    break;
> +                case POWERPC_EXCP_FP_XX:
> +                    info.si_code = TARGET_FPE_FLTRES;
> +                    break;
> +                case POWERPC_EXCP_FP_VXSOFT:
> +                    info.si_code = TARGET_FPE_FLTINV;
> +                    break;
> +                case POWERPC_EXCP_FP_VXSNAN:
> +                case POWERPC_EXCP_FP_VXISI:
> +                case POWERPC_EXCP_FP_VXIDI:
> +                case POWERPC_EXCP_FP_VXIMZ:
> +                case POWERPC_EXCP_FP_VXVC:
> +                case POWERPC_EXCP_FP_VXSQRT:
> +                case POWERPC_EXCP_FP_VXCVI:
> +                    info.si_code = TARGET_FPE_FLTSUB;
> +                    break;
> +                default:
> +                    EXCP_DUMP(env, "Unknown floating point exception 
> (%02x)\n",
> +                              env->error_code);
> +                    break;
> +                }
> +                break;
> +            case POWERPC_EXCP_INVAL:
> +                info.si_signo = TARGET_SIGILL;
> +                info.si_errno = 0;
> +                switch (env->error_code & 0xF) {
> +                case POWERPC_EXCP_INVAL_INVAL:
> +                    info.si_code = TARGET_ILL_ILLOPC;
> +                    break;
> +                case POWERPC_EXCP_INVAL_LSWX:
> +                    info.si_code = TARGET_ILL_ILLOPN;
> +                    break;
> +                case POWERPC_EXCP_INVAL_SPR:
> +                    info.si_code = TARGET_ILL_PRVREG;
> +                    break;
> +                case POWERPC_EXCP_INVAL_FP:
> +                    info.si_code = TARGET_ILL_COPROC;
> +                    break;
> +                default:
> +                    EXCP_DUMP(env, "Unknown invalid operation (%02x)\n",
> +                              env->error_code & 0xF);
> +                    info.si_code = TARGET_ILL_ILLADR;
> +                    break;
> +                }
> +                break;
> +            case POWERPC_EXCP_PRIV:
> +                info.si_signo = TARGET_SIGILL;
> +                info.si_errno = 0;
> +                switch (env->error_code & 0xF) {
> +                case POWERPC_EXCP_PRIV_OPC:
> +                    info.si_code = TARGET_ILL_PRVOPC;
> +                    break;
> +                case POWERPC_EXCP_PRIV_REG:
> +                    info.si_code = TARGET_ILL_PRVREG;
> +                    break;
> +                default:
> +                    EXCP_DUMP(env, "Unknown privilege violation (%02x)\n",
> +                              env->error_code & 0xF);
> +                    info.si_code = TARGET_ILL_PRVOPC;
> +                    break;
> +                }
> +                break;
> +            case POWERPC_EXCP_TRAP:
> +                cpu_abort(cs, "Tried to call a TRAP\n");
> +                break;
> +            default:
> +                /* Should not happen ! */
> +                cpu_abort(cs, "Unknown program exception (%02x)\n",
> +                          env->error_code);
> +                break;
> +            }
> +            info._sifields._sigfault._addr = env->nip;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case POWERPC_EXCP_FPU:      /* Floating-point unavailable exception  
> */
> +            info.si_signo = TARGET_SIGILL;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_ILL_COPROC;
> +            info._sifields._sigfault._addr = env->nip;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case POWERPC_EXCP_SYSCALL:  /* System call exception                 
> */
> +            cpu_abort(cs, "Syscall exception while in user mode. "
> +                      "Aborting\n");
> +            break;
> +        case POWERPC_EXCP_APU:      /* Auxiliary processor unavailable       
> */
> +            info.si_signo = TARGET_SIGILL;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_ILL_COPROC;
> +            info._sifields._sigfault._addr = env->nip;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case POWERPC_EXCP_DECR:     /* Decrementer exception                 
> */
> +            cpu_abort(cs, "Decrementer interrupt while in user mode. "
> +                      "Aborting\n");
> +            break;
> +        case POWERPC_EXCP_FIT:      /* Fixed-interval timer interrupt        
> */
> +            cpu_abort(cs, "Fix interval timer interrupt while in user mode. "
> +                      "Aborting\n");
> +            break;
> +        case POWERPC_EXCP_WDT:      /* Watchdog timer interrupt              
> */
> +            cpu_abort(cs, "Watchdog timer interrupt while in user mode. "
> +                      "Aborting\n");
> +            break;
> +        case POWERPC_EXCP_DTLB:     /* Data TLB error                        
> */
> +            cpu_abort(cs, "Data TLB exception while in user mode. "
> +                      "Aborting\n");
> +            break;
> +        case POWERPC_EXCP_ITLB:     /* Instruction TLB error                 
> */
> +            cpu_abort(cs, "Instruction TLB exception while in user mode. "
> +                      "Aborting\n");
> +            break;
> +        case POWERPC_EXCP_SPEU:     /* SPE/embedded floating-point unavail.  
> */
> +            info.si_signo = TARGET_SIGILL;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_ILL_COPROC;
> +            info._sifields._sigfault._addr = env->nip;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case POWERPC_EXCP_EFPDI:    /* Embedded floating-point data IRQ      
> */
> +            cpu_abort(cs, "Embedded floating-point data IRQ not handled\n");
> +            break;
> +        case POWERPC_EXCP_EFPRI:    /* Embedded floating-point round IRQ     
> */
> +            cpu_abort(cs, "Embedded floating-point round IRQ not handled\n");
> +            break;
> +        case POWERPC_EXCP_EPERFM:   /* Embedded performance monitor IRQ      
> */
> +            cpu_abort(cs, "Performance monitor exception not handled\n");
> +            break;
> +        case POWERPC_EXCP_DOORI:    /* Embedded doorbell interrupt           
> */
> +            cpu_abort(cs, "Doorbell interrupt while in user mode. "
> +                       "Aborting\n");
> +            break;
> +        case POWERPC_EXCP_DOORCI:   /* Embedded doorbell critical interrupt  
> */
> +            cpu_abort(cs, "Doorbell critical interrupt while in user mode. "
> +                      "Aborting\n");
> +            break;
> +        case POWERPC_EXCP_RESET:    /* System reset exception                
> */
> +            cpu_abort(cs, "Reset interrupt while in user mode. "
> +                      "Aborting\n");
> +            break;
> +        case POWERPC_EXCP_DSEG:     /* Data segment exception                
> */
> +            cpu_abort(cs, "Data segment exception while in user mode. "
> +                      "Aborting\n");
> +            break;
> +        case POWERPC_EXCP_ISEG:     /* Instruction segment exception         
> */
> +            cpu_abort(cs, "Instruction segment exception "
> +                      "while in user mode. Aborting\n");
> +            break;
> +        /* PowerPC 64 with hypervisor mode support */
> +        case POWERPC_EXCP_HDECR:    /* Hypervisor decrementer exception      
> */
> +            cpu_abort(cs, "Hypervisor decrementer interrupt "
> +                      "while in user mode. Aborting\n");
> +            break;
> +        case POWERPC_EXCP_TRACE:    /* Trace exception                       
> */
> +            /* Nothing to do:
> +             * we use this exception to emulate step-by-step execution mode.
> +             */
> +            break;
> +        /* PowerPC 64 with hypervisor mode support */
> +        case POWERPC_EXCP_HDSI:     /* Hypervisor data storage exception     
> */
> +            cpu_abort(cs, "Hypervisor data storage exception "
> +                      "while in user mode. Aborting\n");
> +            break;
> +        case POWERPC_EXCP_HISI:     /* Hypervisor instruction storage excp   
> */
> +            cpu_abort(cs, "Hypervisor instruction storage exception "
> +                      "while in user mode. Aborting\n");
> +            break;
> +        case POWERPC_EXCP_HDSEG:    /* Hypervisor data segment exception     
> */
> +            cpu_abort(cs, "Hypervisor data segment exception "
> +                      "while in user mode. Aborting\n");
> +            break;
> +        case POWERPC_EXCP_HISEG:    /* Hypervisor instruction segment excp   
> */
> +            cpu_abort(cs, "Hypervisor instruction segment exception "
> +                      "while in user mode. Aborting\n");
> +            break;
> +        case POWERPC_EXCP_VPU:      /* Vector unavailable exception          
> */
> +            info.si_signo = TARGET_SIGILL;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_ILL_COPROC;
> +            info._sifields._sigfault._addr = env->nip;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +        case POWERPC_EXCP_PIT:      /* Programmable interval timer IRQ       
> */
> +            cpu_abort(cs, "Programmable interval timer interrupt "
> +                      "while in user mode. Aborting\n");
> +            break;
> +        case POWERPC_EXCP_IO:       /* IO error exception                    
> */
> +            cpu_abort(cs, "IO error exception while in user mode. "
> +                      "Aborting\n");
> +            break;
> +        case POWERPC_EXCP_RUNM:     /* Run mode exception                    
> */
> +            cpu_abort(cs, "Run mode exception while in user mode. "
> +                      "Aborting\n");
> +            break;
> +        case POWERPC_EXCP_EMUL:     /* Emulation trap exception              
> */
> +            cpu_abort(cs, "Emulation trap exception not handled\n");
> +            break;
> +        case POWERPC_EXCP_IFTLB:    /* Instruction fetch TLB error           
> */
> +            cpu_abort(cs, "Instruction fetch TLB exception "
> +                      "while in user-mode. Aborting");
> +            break;
> +        case POWERPC_EXCP_DLTLB:    /* Data load TLB miss                    
> */
> +            cpu_abort(cs, "Data load TLB exception while in user-mode. "
> +                      "Aborting");
> +            break;
> +        case POWERPC_EXCP_DSTLB:    /* Data store TLB miss                   
> */
> +            cpu_abort(cs, "Data store TLB exception while in user-mode. "
> +                      "Aborting");
> +            break;
> +        case POWERPC_EXCP_FPA:      /* Floating-point assist exception       
> */
> +            cpu_abort(cs, "Floating-point assist exception not handled\n");
> +            break;
> +        case POWERPC_EXCP_IABR:     /* Instruction address breakpoint        
> */
> +            cpu_abort(cs, "Instruction address breakpoint exception "
> +                      "not handled\n");
> +            break;
> +        case POWERPC_EXCP_SMI:      /* System management interrupt           
> */
> +            cpu_abort(cs, "System management interrupt while in user mode. "
> +                      "Aborting\n");
> +            break;
> +        case POWERPC_EXCP_THERM:    /* Thermal interrupt                     
> */
> +            cpu_abort(cs, "Thermal interrupt interrupt while in user mode. "
> +                      "Aborting\n");
> +            break;
> +        case POWERPC_EXCP_PERFM:   /* Embedded performance monitor IRQ      
> */
> +            cpu_abort(cs, "Performance monitor exception not handled\n");
> +            break;
> +        case POWERPC_EXCP_VPUA:     /* Vector assist exception               
> */
> +            cpu_abort(cs, "Vector assist exception not handled\n");
> +            break;
> +        case POWERPC_EXCP_SOFTP:    /* Soft patch exception                  
> */
> +            cpu_abort(cs, "Soft patch exception not handled\n");
> +            break;
> +        case POWERPC_EXCP_MAINT:    /* Maintenance exception                 
> */
> +            cpu_abort(cs, "Maintenance exception while in user mode. "
> +                      "Aborting\n");
> +            break;
> +        case POWERPC_EXCP_STOP:     /* stop translation                      
> */
> +            /* We did invalidate the instruction cache. Go on */
> +            break;
> +        case POWERPC_EXCP_BRANCH:   /* branch instruction:                   
> */
> +            /* We just stopped because of a branch. Go on */
> +            break;
> +        case POWERPC_EXCP_SYSCALL_USER:
> +            /* system call in user-mode emulation */
> +            /* WARNING:
> +             * PPC ABI uses overflow flag in cr0 to signal an error
> +             * in syscalls.
> +             */
> +            env->crf[0] &= ~0x1;
> +            env->nip += 4;
> +            ret = do_syscall(env, env->gpr[0], env->gpr[3], env->gpr[4],
> +                             env->gpr[5], env->gpr[6], env->gpr[7],
> +                             env->gpr[8], 0, 0);
> +            if (ret == -TARGET_ERESTARTSYS) {
> +                env->nip -= 4;
> +                break;
> +            }
> +            if (ret == (target_ulong)(-TARGET_QEMU_ESIGRETURN)) {
> +                /* Returning from a successful sigreturn syscall.
> +                   Avoid corrupting register state.  */
> +                break;
> +            }
> +            if (ret > (target_ulong)(-515)) {
> +                env->crf[0] |= 0x1;
> +                ret = -ret;
> +            }
> +            env->gpr[3] = ret;
> +            break;
> +        case POWERPC_EXCP_STCX:
> +            if (do_store_exclusive(env)) {
> +                info.si_signo = TARGET_SIGSEGV;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_SEGV_MAPERR;
> +                info._sifields._sigfault._addr = env->nip;
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            }
> +            break;
> +        case EXCP_DEBUG:
> +            {
> +                int sig;
> +
> +                sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> +                if (sig) {
> +                    info.si_signo = sig;
> +                    info.si_errno = 0;
> +                    info.si_code = TARGET_TRAP_BRKPT;
> +                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                  }
> +            }
> +            break;
> +        case EXCP_INTERRUPT:
> +            /* just indicate that signals should be handled asap */
> +            break;
> +        case EXCP_ATOMIC:
> +            cpu_exec_step_atomic(cs);
> +            break;
> +        default:
> +            cpu_abort(cs, "Unknown exception 0x%x. Aborting\n", trapnr);
> +            break;
> +        }
> +        process_pending_signals(env);
> +    }
> +}
> diff --git a/linux-user/riscv/cpu_loop.inc.c b/linux-user/riscv/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..ebb02648f8
> --- /dev/null
> +++ b/linux-user/riscv/cpu_loop.inc.c
> @@ -0,0 +1,89 @@
> +void cpu_loop(CPURISCVState *env)
> +{
> +    CPUState *cs = CPU(riscv_env_get_cpu(env));
> +    int trapnr, signum, sigcode;
> +    target_ulong sigaddr;
> +    target_ulong ret;
> +
> +    for (;;) {
> +        cpu_exec_start(cs);
> +        trapnr = cpu_exec(cs);
> +        cpu_exec_end(cs);
> +        process_queued_cpu_work(cs);
> +
> +        signum = 0;
> +        sigcode = 0;
> +        sigaddr = 0;
> +
> +        switch (trapnr) {
> +        case EXCP_INTERRUPT:
> +            /* just indicate that signals should be handled asap */
> +            break;
> +        case EXCP_ATOMIC:
> +            cpu_exec_step_atomic(cs);
> +            break;
> +        case RISCV_EXCP_U_ECALL:
> +            env->pc += 4;
> +            if (env->gpr[xA7] == TARGET_NR_arch_specific_syscall + 15) {
> +                /* riscv_flush_icache_syscall is a no-op in QEMU as
> +                   self-modifying code is automatically detected */
> +                ret = 0;
> +            } else {
> +                ret = do_syscall(env,
> +                                 env->gpr[xA7],
> +                                 env->gpr[xA0],
> +                                 env->gpr[xA1],
> +                                 env->gpr[xA2],
> +                                 env->gpr[xA3],
> +                                 env->gpr[xA4],
> +                                 env->gpr[xA5],
> +                                 0, 0);
> +            }
> +            if (ret == -TARGET_ERESTARTSYS) {
> +                env->pc -= 4;
> +            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> +                env->gpr[xA0] = ret;
> +            }
> +            if (cs->singlestep_enabled) {
> +                goto gdbstep;
> +            }
> +            break;
> +        case RISCV_EXCP_ILLEGAL_INST:
> +            signum = TARGET_SIGILL;
> +            sigcode = TARGET_ILL_ILLOPC;
> +            break;
> +        case RISCV_EXCP_BREAKPOINT:
> +            signum = TARGET_SIGTRAP;
> +            sigcode = TARGET_TRAP_BRKPT;
> +            sigaddr = env->pc;
> +            break;
> +        case RISCV_EXCP_INST_PAGE_FAULT:
> +        case RISCV_EXCP_LOAD_PAGE_FAULT:
> +        case RISCV_EXCP_STORE_PAGE_FAULT:
> +            signum = TARGET_SIGSEGV;
> +            sigcode = TARGET_SEGV_MAPERR;
> +            break;
> +        case EXCP_DEBUG:
> +        gdbstep:
> +            signum = gdb_handlesig(cs, TARGET_SIGTRAP);
> +            sigcode = TARGET_TRAP_BRKPT;
> +            break;
> +        default:
> +            EXCP_DUMP(env, "\nqemu: unhandled CPU exception %#x - 
> aborting\n",
> +                     trapnr);
> +            exit(EXIT_FAILURE);
> +        }
> +
> +        if (signum) {
> +            target_siginfo_t info = {
> +                .si_signo = signum,
> +                .si_errno = 0,
> +                .si_code = sigcode,
> +                ._sifields._sigfault._addr = sigaddr
> +            };
> +            queue_signal(env, info.si_signo, QEMU_SI_KILL, &info);
> +        }
> +
> +        process_pending_signals(env);
> +    }
> +}
> diff --git a/linux-user/s390x/cpu_loop.inc.c b/linux-user/s390x/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..ea7e6d206a
> --- /dev/null
> +++ b/linux-user/s390x/cpu_loop.inc.c
> @@ -0,0 +1,132 @@
> +/* s390x masks the fault address it reports in si_addr for SIGSEGV and 
> SIGBUS */
> +#define S390X_FAIL_ADDR_MASK -4096LL
> +
> +void cpu_loop(CPUS390XState *env)
> +{
> +    CPUState *cs = CPU(s390_env_get_cpu(env));
> +    int trapnr, n, sig;
> +    target_siginfo_t info;
> +    target_ulong addr;
> +    abi_long ret;
> +
> +    while (1) {
> +        cpu_exec_start(cs);
> +        trapnr = cpu_exec(cs);
> +        cpu_exec_end(cs);
> +        process_queued_cpu_work(cs);
> +
> +        switch (trapnr) {
> +        case EXCP_INTERRUPT:
> +            /* Just indicate that signals should be handled asap.  */
> +            break;
> +
> +        case EXCP_SVC:
> +            n = env->int_svc_code;
> +            if (!n) {
> +                /* syscalls > 255 */
> +                n = env->regs[1];
> +            }
> +            env->psw.addr += env->int_svc_ilen;
> +            ret = do_syscall(env, n, env->regs[2], env->regs[3],
> +                             env->regs[4], env->regs[5],
> +                             env->regs[6], env->regs[7], 0, 0);
> +            if (ret == -TARGET_ERESTARTSYS) {
> +                env->psw.addr -= env->int_svc_ilen;
> +            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> +                env->regs[2] = ret;
> +            }
> +            break;
> +
> +        case EXCP_DEBUG:
> +            sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> +            if (sig) {
> +                n = TARGET_TRAP_BRKPT;
> +                goto do_signal_pc;
> +            }
> +            break;
> +        case EXCP_PGM:
> +            n = env->int_pgm_code;
> +            switch (n) {
> +            case PGM_OPERATION:
> +            case PGM_PRIVILEGED:
> +                sig = TARGET_SIGILL;
> +                n = TARGET_ILL_ILLOPC;
> +                goto do_signal_pc;
> +            case PGM_PROTECTION:
> +            case PGM_ADDRESSING:
> +                sig = TARGET_SIGSEGV;
> +                /* XXX: check env->error_code */
> +                n = TARGET_SEGV_MAPERR;
> +                addr = env->__excp_addr & S390X_FAIL_ADDR_MASK;
> +                goto do_signal;
> +            case PGM_EXECUTE:
> +            case PGM_SPECIFICATION:
> +            case PGM_SPECIAL_OP:
> +            case PGM_OPERAND:
> +            do_sigill_opn:
> +                sig = TARGET_SIGILL;
> +                n = TARGET_ILL_ILLOPN;
> +                goto do_signal_pc;
> +
> +            case PGM_FIXPT_OVERFLOW:
> +                sig = TARGET_SIGFPE;
> +                n = TARGET_FPE_INTOVF;
> +                goto do_signal_pc;
> +            case PGM_FIXPT_DIVIDE:
> +                sig = TARGET_SIGFPE;
> +                n = TARGET_FPE_INTDIV;
> +                goto do_signal_pc;
> +
> +            case PGM_DATA:
> +                n = (env->fpc >> 8) & 0xff;
> +                if (n == 0xff) {
> +                    /* compare-and-trap */
> +                    goto do_sigill_opn;
> +                } else {
> +                    /* An IEEE exception, simulated or otherwise.  */
> +                    if (n & 0x80) {
> +                        n = TARGET_FPE_FLTINV;
> +                    } else if (n & 0x40) {
> +                        n = TARGET_FPE_FLTDIV;
> +                    } else if (n & 0x20) {
> +                        n = TARGET_FPE_FLTOVF;
> +                    } else if (n & 0x10) {
> +                        n = TARGET_FPE_FLTUND;
> +                    } else if (n & 0x08) {
> +                        n = TARGET_FPE_FLTRES;
> +                    } else {
> +                        /* ??? Quantum exception; BFP, DFP error.  */
> +                        goto do_sigill_opn;
> +                    }
> +                    sig = TARGET_SIGFPE;
> +                    goto do_signal_pc;
> +                }
> +
> +            default:
> +                fprintf(stderr, "Unhandled program exception: %#x\n", n);
> +                cpu_dump_state(cs, stderr, fprintf, 0);
> +                exit(EXIT_FAILURE);
> +            }
> +            break;
> +
> +        do_signal_pc:
> +            addr = env->psw.addr;
> +        do_signal:
> +            info.si_signo = sig;
> +            info.si_errno = 0;
> +            info.si_code = n;
> +            info._sifields._sigfault._addr = addr;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            break;
> +
> +        case EXCP_ATOMIC:
> +            cpu_exec_step_atomic(cs);
> +            break;
> +        default:
> +            fprintf(stderr, "Unhandled trap: 0x%x\n", trapnr);
> +            cpu_dump_state(cs, stderr, fprintf, 0);
> +            exit(EXIT_FAILURE);
> +        }
> +        process_pending_signals (env);
> +    }
> +}
> diff --git a/linux-user/sh4/cpu_loop.inc.c b/linux-user/sh4/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..768f3e8156
> --- /dev/null
> +++ b/linux-user/sh4/cpu_loop.inc.c
> @@ -0,0 +1,78 @@
> +void cpu_loop(CPUSH4State *env)
> +{
> +    CPUState *cs = CPU(sh_env_get_cpu(env));
> +    int trapnr, ret;
> +    target_siginfo_t info;
> +
> +    while (1) {
> +        bool arch_interrupt = true;
> +
> +        cpu_exec_start(cs);
> +        trapnr = cpu_exec(cs);
> +        cpu_exec_end(cs);
> +        process_queued_cpu_work(cs);
> +
> +        switch (trapnr) {
> +        case 0x160:
> +            env->pc += 2;
> +            ret = do_syscall(env,
> +                             env->gregs[3],
> +                             env->gregs[4],
> +                             env->gregs[5],
> +                             env->gregs[6],
> +                             env->gregs[7],
> +                             env->gregs[0],
> +                             env->gregs[1],
> +                             0, 0);
> +            if (ret == -TARGET_ERESTARTSYS) {
> +                env->pc -= 2;
> +            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> +                env->gregs[0] = ret;
> +            }
> +            break;
> +        case EXCP_INTERRUPT:
> +            /* just indicate that signals should be handled asap */
> +            break;
> +        case EXCP_DEBUG:
> +            {
> +                int sig;
> +
> +                sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> +                if (sig) {
> +                    info.si_signo = sig;
> +                    info.si_errno = 0;
> +                    info.si_code = TARGET_TRAP_BRKPT;
> +                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                } else {
> +                    arch_interrupt = false;
> +                }
> +            }
> +            break;
> +     case 0xa0:
> +     case 0xc0:
> +            info.si_signo = TARGET_SIGSEGV;
> +            info.si_errno = 0;
> +            info.si_code = TARGET_SEGV_MAPERR;
> +            info._sifields._sigfault._addr = env->tea;
> +            queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +         break;
> +        case EXCP_ATOMIC:
> +            cpu_exec_step_atomic(cs);
> +            arch_interrupt = false;
> +            break;
> +        default:
> +            printf ("Unhandled trap: 0x%x\n", trapnr);
> +            cpu_dump_state(cs, stderr, fprintf, 0);
> +            exit(EXIT_FAILURE);
> +        }
> +        process_pending_signals (env);
> +
> +        /* Most of the traps imply an exception or interrupt, which
> +           implies an REI instruction has been executed.  Which means
> +           that LDST (aka LOK_ADDR) should be cleared.  But there are
> +           a few exceptions for traps internal to QEMU.  */
> +        if (arch_interrupt) {
> +            env->lock_addr = -1;
> +        }
> +    }
> +}
> diff --git a/linux-user/sparc/cpu_loop.inc.c b/linux-user/sparc/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..589c7a3caa
> --- /dev/null
> +++ b/linux-user/sparc/cpu_loop.inc.c
> @@ -0,0 +1,271 @@
> +#define SPARC64_STACK_BIAS 2047
> +
> +//#define DEBUG_WIN
> +
> +/* WARNING: dealing with register windows _is_ complicated. More info
> +   can be found at http://www.sics.se/~psm/sparcstack.html */
> +static inline int get_reg_index(CPUSPARCState *env, int cwp, int index)
> +{
> +    index = (index + cwp * 16) % (16 * env->nwindows);
> +    /* wrap handling : if cwp is on the last window, then we use the
> +       registers 'after' the end */
> +    if (index < 8 && env->cwp == env->nwindows - 1)
> +        index += 16 * env->nwindows;
> +    return index;
> +}
> +
> +/* save the register window 'cwp1' */
> +static inline void save_window_offset(CPUSPARCState *env, int cwp1)
> +{
> +    unsigned int i;
> +    abi_ulong sp_ptr;
> +
> +    sp_ptr = env->regbase[get_reg_index(env, cwp1, 6)];
> +#ifdef TARGET_SPARC64
> +    if (sp_ptr & 3)
> +        sp_ptr += SPARC64_STACK_BIAS;
> +#endif
> +#if defined(DEBUG_WIN)
> +    printf("win_overflow: sp_ptr=0x" TARGET_ABI_FMT_lx " save_cwp=%d\n",
> +           sp_ptr, cwp1);
> +#endif
> +    for(i = 0; i < 16; i++) {
> +        /* FIXME - what to do if put_user() fails? */
> +        put_user_ual(env->regbase[get_reg_index(env, cwp1, 8 + i)], sp_ptr);
> +        sp_ptr += sizeof(abi_ulong);
> +    }
> +}
> +
> +static void save_window(CPUSPARCState *env)
> +{
> +#ifndef TARGET_SPARC64
> +    unsigned int new_wim;
> +    new_wim = ((env->wim >> 1) | (env->wim << (env->nwindows - 1))) &
> +        ((1LL << env->nwindows) - 1);
> +    save_window_offset(env, cpu_cwp_dec(env, env->cwp - 2));
> +    env->wim = new_wim;
> +#else
> +    save_window_offset(env, cpu_cwp_dec(env, env->cwp - 2));
> +    env->cansave++;
> +    env->canrestore--;
> +#endif
> +}
> +
> +static void restore_window(CPUSPARCState *env)
> +{
> +#ifndef TARGET_SPARC64
> +    unsigned int new_wim;
> +#endif
> +    unsigned int i, cwp1;
> +    abi_ulong sp_ptr;
> +
> +#ifndef TARGET_SPARC64
> +    new_wim = ((env->wim << 1) | (env->wim >> (env->nwindows - 1))) &
> +        ((1LL << env->nwindows) - 1);
> +#endif
> +
> +    /* restore the invalid window */
> +    cwp1 = cpu_cwp_inc(env, env->cwp + 1);
> +    sp_ptr = env->regbase[get_reg_index(env, cwp1, 6)];
> +#ifdef TARGET_SPARC64
> +    if (sp_ptr & 3)
> +        sp_ptr += SPARC64_STACK_BIAS;
> +#endif
> +#if defined(DEBUG_WIN)
> +    printf("win_underflow: sp_ptr=0x" TARGET_ABI_FMT_lx " load_cwp=%d\n",
> +           sp_ptr, cwp1);
> +#endif
> +    for(i = 0; i < 16; i++) {
> +        /* FIXME - what to do if get_user() fails? */
> +        get_user_ual(env->regbase[get_reg_index(env, cwp1, 8 + i)], sp_ptr);
> +        sp_ptr += sizeof(abi_ulong);
> +    }
> +#ifdef TARGET_SPARC64
> +    env->canrestore++;
> +    if (env->cleanwin < env->nwindows - 1)
> +        env->cleanwin++;
> +    env->cansave--;
> +#else
> +    env->wim = new_wim;
> +#endif
> +}
> +
> +static void flush_windows(CPUSPARCState *env)
> +{
> +    int offset, cwp1;
> +
> +    offset = 1;
> +    for(;;) {
> +        /* if restore would invoke restore_window(), then we can stop */
> +        cwp1 = cpu_cwp_inc(env, env->cwp + offset);
> +#ifndef TARGET_SPARC64
> +        if (env->wim & (1 << cwp1))
> +            break;
> +#else
> +        if (env->canrestore == 0)
> +            break;
> +        env->cansave++;
> +        env->canrestore--;
> +#endif
> +        save_window_offset(env, cwp1);
> +        offset++;
> +    }
> +    cwp1 = cpu_cwp_inc(env, env->cwp + 1);
> +#ifndef TARGET_SPARC64
> +    /* set wim so that restore will reload the registers */
> +    env->wim = 1 << cwp1;
> +#endif
> +#if defined(DEBUG_WIN)
> +    printf("flush_windows: nb=%d\n", offset - 1);
> +#endif
> +}
> +
> +void cpu_loop (CPUSPARCState *env)
> +{
> +    CPUState *cs = CPU(sparc_env_get_cpu(env));
> +    int trapnr;
> +    abi_long ret;
> +    target_siginfo_t info;
> +
> +    while (1) {
> +        cpu_exec_start(cs);
> +        trapnr = cpu_exec(cs);
> +        cpu_exec_end(cs);
> +        process_queued_cpu_work(cs);
> +
> +        /* Compute PSR before exposing state.  */
> +        if (env->cc_op != CC_OP_FLAGS) {
> +            cpu_get_psr(env);
> +        }
> +
> +        switch (trapnr) {
> +#ifndef TARGET_SPARC64
> +        case 0x88:
> +        case 0x90:
> +#else
> +        case 0x110:
> +        case 0x16d:
> +#endif
> +            ret = do_syscall (env, env->gregs[1],
> +                              env->regwptr[0], env->regwptr[1],
> +                              env->regwptr[2], env->regwptr[3],
> +                              env->regwptr[4], env->regwptr[5],
> +                              0, 0);
> +            if (ret == -TARGET_ERESTARTSYS || ret == 
> -TARGET_QEMU_ESIGRETURN) {
> +                break;
> +            }
> +            if ((abi_ulong)ret >= (abi_ulong)(-515)) {
> +#if defined(TARGET_SPARC64) && !defined(TARGET_ABI32)
> +                env->xcc |= PSR_CARRY;
> +#else
> +                env->psr |= PSR_CARRY;
> +#endif
> +                ret = -ret;
> +            } else {
> +#if defined(TARGET_SPARC64) && !defined(TARGET_ABI32)
> +                env->xcc &= ~PSR_CARRY;
> +#else
> +                env->psr &= ~PSR_CARRY;
> +#endif
> +            }
> +            env->regwptr[0] = ret;
> +            /* next instruction */
> +            env->pc = env->npc;
> +            env->npc = env->npc + 4;
> +            break;
> +        case 0x83: /* flush windows */
> +#ifdef TARGET_ABI32
> +        case 0x103:
> +#endif
> +            flush_windows(env);
> +            /* next instruction */
> +            env->pc = env->npc;
> +            env->npc = env->npc + 4;
> +            break;
> +#ifndef TARGET_SPARC64
> +        case TT_WIN_OVF: /* window overflow */
> +            save_window(env);
> +            break;
> +        case TT_WIN_UNF: /* window underflow */
> +            restore_window(env);
> +            break;
> +        case TT_TFAULT:
> +        case TT_DFAULT:
> +            {
> +                info.si_signo = TARGET_SIGSEGV;
> +                info.si_errno = 0;
> +                /* XXX: check env->error_code */
> +                info.si_code = TARGET_SEGV_MAPERR;
> +                info._sifields._sigfault._addr = env->mmuregs[4];
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            }
> +            break;
> +#else
> +        case TT_SPILL: /* window overflow */
> +            save_window(env);
> +            break;
> +        case TT_FILL: /* window underflow */
> +            restore_window(env);
> +            break;
> +        case TT_TFAULT:
> +        case TT_DFAULT:
> +            {
> +                info.si_signo = TARGET_SIGSEGV;
> +                info.si_errno = 0;
> +                /* XXX: check env->error_code */
> +                info.si_code = TARGET_SEGV_MAPERR;
> +                if (trapnr == TT_DFAULT)
> +                    info._sifields._sigfault._addr = env->dmmu.mmuregs[4];
> +                else
> +                    info._sifields._sigfault._addr = cpu_tsptr(env)->tpc;
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            }
> +            break;
> +#ifndef TARGET_ABI32
> +        case 0x16e:
> +            flush_windows(env);
> +            sparc64_get_context(env);
> +            break;
> +        case 0x16f:
> +            flush_windows(env);
> +            sparc64_set_context(env);
> +            break;
> +#endif
> +#endif
> +        case EXCP_INTERRUPT:
> +            /* just indicate that signals should be handled asap */
> +            break;
> +        case TT_ILL_INSN:
> +            {
> +                info.si_signo = TARGET_SIGILL;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_ILL_ILLOPC;
> +                info._sifields._sigfault._addr = env->pc;
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +            }
> +            break;
> +        case EXCP_DEBUG:
> +            {
> +                int sig;
> +
> +                sig = gdb_handlesig(cs, TARGET_SIGTRAP);
> +                if (sig)
> +                  {
> +                    info.si_signo = sig;
> +                    info.si_errno = 0;
> +                    info.si_code = TARGET_TRAP_BRKPT;
> +                    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                  }
> +            }
> +            break;
> +        case EXCP_ATOMIC:
> +            cpu_exec_step_atomic(cs);
> +            break;
> +        default:
> +            printf ("Unhandled trap: 0x%x\n", trapnr);
> +            cpu_dump_state(cs, stderr, fprintf, 0);
> +            exit(EXIT_FAILURE);
> +        }
> +        process_pending_signals (env);
> +    }
> +}
> diff --git a/linux-user/sparc64/cpu_loop.inc.c 
> b/linux-user/sparc64/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..ba4765b4db
> --- /dev/null
> +++ b/linux-user/sparc64/cpu_loop.inc.c
> @@ -0,0 +1 @@
> +#include "../sparc/cpu_loop.inc.c"
> diff --git a/linux-user/tilegx/cpu_loop.inc.c 
> b/linux-user/tilegx/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..afde8103bb
> --- /dev/null
> +++ b/linux-user/tilegx/cpu_loop.inc.c
> @@ -0,0 +1,251 @@
> +static void gen_sigill_reg(CPUTLGState *env)
> +{
> +    target_siginfo_t info;
> +
> +    info.si_signo = TARGET_SIGILL;
> +    info.si_errno = 0;
> +    info.si_code = TARGET_ILL_PRVREG;
> +    info._sifields._sigfault._addr = env->pc;
> +    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +}
> +
> +static void do_signal(CPUTLGState *env, int signo, int sigcode)
> +{
> +    target_siginfo_t info;
> +
> +    info.si_signo = signo;
> +    info.si_errno = 0;
> +    info._sifields._sigfault._addr = env->pc;
> +
> +    if (signo == TARGET_SIGSEGV) {
> +        /* The passed in sigcode is a dummy; check for a page mapping
> +           and pass either MAPERR or ACCERR.  */
> +        target_ulong addr = env->excaddr;
> +        info._sifields._sigfault._addr = addr;
> +        if (page_check_range(addr, 1, PAGE_VALID) < 0) {
> +            sigcode = TARGET_SEGV_MAPERR;
> +        } else {
> +            sigcode = TARGET_SEGV_ACCERR;
> +        }
> +    }
> +    info.si_code = sigcode;
> +
> +    queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +}
> +
> +static void gen_sigsegv_maperr(CPUTLGState *env, target_ulong addr)
> +{
> +    env->excaddr = addr;
> +    do_signal(env, TARGET_SIGSEGV, 0);
> +}
> +
> +static void set_regval(CPUTLGState *env, uint8_t reg, uint64_t val)
> +{
> +    if (unlikely(reg >= TILEGX_R_COUNT)) {
> +        switch (reg) {
> +        case TILEGX_R_SN:
> +        case TILEGX_R_ZERO:
> +            return;
> +        case TILEGX_R_IDN0:
> +        case TILEGX_R_IDN1:
> +        case TILEGX_R_UDN0:
> +        case TILEGX_R_UDN1:
> +        case TILEGX_R_UDN2:
> +        case TILEGX_R_UDN3:
> +            gen_sigill_reg(env);
> +            return;
> +        default:
> +            g_assert_not_reached();
> +        }
> +    }
> +    env->regs[reg] = val;
> +}
> +
> +/*
> + * Compare the 8-byte contents of the CmpValue SPR with the 8-byte value in
> + * memory at the address held in the first source register. If the values are
> + * not equal, then no memory operation is performed. If the values are equal,
> + * the 8-byte quantity from the second source register is written into memory
> + * at the address held in the first source register. In either case, the 
> result
> + * of the instruction is the value read from memory. The compare and write to
> + * memory are atomic and thus can be used for synchronization purposes. This
> + * instruction only operates for addresses aligned to a 8-byte boundary.
> + * Unaligned memory access causes an Unaligned Data Reference interrupt.
> + *
> + * Functional Description (64-bit)
> + *       uint64_t memVal = memoryReadDoubleWord (rf[SrcA]);
> + *       rf[Dest] = memVal;
> + *       if (memVal == SPR[CmpValueSPR])
> + *           memoryWriteDoubleWord (rf[SrcA], rf[SrcB]);
> + *
> + * Functional Description (32-bit)
> + *       uint64_t memVal = signExtend32 (memoryReadWord (rf[SrcA]));
> + *       rf[Dest] = memVal;
> + *       if (memVal == signExtend32 (SPR[CmpValueSPR]))
> + *           memoryWriteWord (rf[SrcA], rf[SrcB]);
> + *
> + *
> + * This function also processes exch and exch4 which need not process SPR.
> + */
> +static void do_exch(CPUTLGState *env, bool quad, bool cmp)
> +{
> +    target_ulong addr;
> +    target_long val, sprval;
> +
> +    start_exclusive();
> +
> +    addr = env->atomic_srca;
> +    if (quad ? get_user_s64(val, addr) : get_user_s32(val, addr)) {
> +        goto sigsegv_maperr;
> +    }
> +
> +    if (cmp) {
> +        if (quad) {
> +            sprval = env->spregs[TILEGX_SPR_CMPEXCH];
> +        } else {
> +            sprval = sextract64(env->spregs[TILEGX_SPR_CMPEXCH], 0, 32);
> +        }
> +    }
> +
> +    if (!cmp || val == sprval) {
> +        target_long valb = env->atomic_srcb;
> +        if (quad ? put_user_u64(valb, addr) : put_user_u32(valb, addr)) {
> +            goto sigsegv_maperr;
> +        }
> +    }
> +
> +    set_regval(env, env->atomic_dstr, val);
> +    end_exclusive();
> +    return;
> +
> + sigsegv_maperr:
> +    end_exclusive();
> +    gen_sigsegv_maperr(env, addr);
> +}
> +
> +static void do_fetch(CPUTLGState *env, int trapnr, bool quad)
> +{
> +    int8_t write = 1;
> +    target_ulong addr;
> +    target_long val, valb;
> +
> +    start_exclusive();
> +
> +    addr = env->atomic_srca;
> +    valb = env->atomic_srcb;
> +    if (quad ? get_user_s64(val, addr) : get_user_s32(val, addr)) {
> +        goto sigsegv_maperr;
> +    }
> +
> +    switch (trapnr) {
> +    case TILEGX_EXCP_OPCODE_FETCHADD:
> +    case TILEGX_EXCP_OPCODE_FETCHADD4:
> +        valb += val;
> +        break;
> +    case TILEGX_EXCP_OPCODE_FETCHADDGEZ:
> +        valb += val;
> +        if (valb < 0) {
> +            write = 0;
> +        }
> +        break;
> +    case TILEGX_EXCP_OPCODE_FETCHADDGEZ4:
> +        valb += val;
> +        if ((int32_t)valb < 0) {
> +            write = 0;
> +        }
> +        break;
> +    case TILEGX_EXCP_OPCODE_FETCHAND:
> +    case TILEGX_EXCP_OPCODE_FETCHAND4:
> +        valb &= val;
> +        break;
> +    case TILEGX_EXCP_OPCODE_FETCHOR:
> +    case TILEGX_EXCP_OPCODE_FETCHOR4:
> +        valb |= val;
> +        break;
> +    default:
> +        g_assert_not_reached();
> +    }
> +
> +    if (write) {
> +        if (quad ? put_user_u64(valb, addr) : put_user_u32(valb, addr)) {
> +            goto sigsegv_maperr;
> +        }
> +    }
> +
> +    set_regval(env, env->atomic_dstr, val);
> +    end_exclusive();
> +    return;
> +
> + sigsegv_maperr:
> +    end_exclusive();
> +    gen_sigsegv_maperr(env, addr);
> +}
> +
> +void cpu_loop(CPUTLGState *env)
> +{
> +    CPUState *cs = CPU(tilegx_env_get_cpu(env));
> +    int trapnr;
> +
> +    while (1) {
> +        cpu_exec_start(cs);
> +        trapnr = cpu_exec(cs);
> +        cpu_exec_end(cs);
> +        process_queued_cpu_work(cs);
> +
> +        switch (trapnr) {
> +        case TILEGX_EXCP_SYSCALL:
> +        {
> +            abi_ulong ret = do_syscall(env, env->regs[TILEGX_R_NR],
> +                                       env->regs[0], env->regs[1],
> +                                       env->regs[2], env->regs[3],
> +                                       env->regs[4], env->regs[5],
> +                                       env->regs[6], env->regs[7]);
> +            if (ret == -TARGET_ERESTARTSYS) {
> +                env->pc -= 8;
> +            } else if (ret != -TARGET_QEMU_ESIGRETURN) {
> +                env->regs[TILEGX_R_RE] = ret;
> +                env->regs[TILEGX_R_ERR] = TILEGX_IS_ERRNO(ret) ? -ret : 0;
> +            }
> +            break;
> +        }
> +        case TILEGX_EXCP_OPCODE_EXCH:
> +            do_exch(env, true, false);
> +            break;
> +        case TILEGX_EXCP_OPCODE_EXCH4:
> +            do_exch(env, false, false);
> +            break;
> +        case TILEGX_EXCP_OPCODE_CMPEXCH:
> +            do_exch(env, true, true);
> +            break;
> +        case TILEGX_EXCP_OPCODE_CMPEXCH4:
> +            do_exch(env, false, true);
> +            break;
> +        case TILEGX_EXCP_OPCODE_FETCHADD:
> +        case TILEGX_EXCP_OPCODE_FETCHADDGEZ:
> +        case TILEGX_EXCP_OPCODE_FETCHAND:
> +        case TILEGX_EXCP_OPCODE_FETCHOR:
> +            do_fetch(env, trapnr, true);
> +            break;
> +        case TILEGX_EXCP_OPCODE_FETCHADD4:
> +        case TILEGX_EXCP_OPCODE_FETCHADDGEZ4:
> +        case TILEGX_EXCP_OPCODE_FETCHAND4:
> +        case TILEGX_EXCP_OPCODE_FETCHOR4:
> +            do_fetch(env, trapnr, false);
> +            break;
> +        case TILEGX_EXCP_SIGNAL:
> +            do_signal(env, env->signo, env->sigcode);
> +            break;
> +        case TILEGX_EXCP_REG_IDN_ACCESS:
> +        case TILEGX_EXCP_REG_UDN_ACCESS:
> +            gen_sigill_reg(env);
> +            break;
> +        case EXCP_ATOMIC:
> +            cpu_exec_step_atomic(cs);
> +            break;
> +        default:
> +            fprintf(stderr, "trapnr is %d[0x%x].\n", trapnr, trapnr);
> +            g_assert_not_reached();
> +        }
> +        process_pending_signals(env);
> +    }
> +}
> diff --git a/linux-user/x86_64/cpu_loop.inc.c 
> b/linux-user/x86_64/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..b62e12ef9b
> --- /dev/null
> +++ b/linux-user/x86_64/cpu_loop.inc.c
> @@ -0,0 +1 @@
> +#include "../i386/cpu_loop.inc.c"
> diff --git a/linux-user/xtensa/cpu_loop.inc.c 
> b/linux-user/xtensa/cpu_loop.inc.c
> new file mode 100644
> index 0000000000..ca8e014959
> --- /dev/null
> +++ b/linux-user/xtensa/cpu_loop.inc.c
> @@ -0,0 +1,231 @@
> +static void xtensa_rfw(CPUXtensaState *env)
> +{
> +    xtensa_restore_owb(env);
> +    env->pc = env->sregs[EPC1];
> +}
> +
> +static void xtensa_rfwu(CPUXtensaState *env)
> +{
> +    env->sregs[WINDOW_START] |= (1 << env->sregs[WINDOW_BASE]);
> +    xtensa_rfw(env);
> +}
> +
> +static void xtensa_rfwo(CPUXtensaState *env)
> +{
> +    env->sregs[WINDOW_START] &= ~(1 << env->sregs[WINDOW_BASE]);
> +    xtensa_rfw(env);
> +}
> +
> +static void xtensa_overflow4(CPUXtensaState *env)
> +{
> +    put_user_ual(env->regs[0], env->regs[5] - 16);
> +    put_user_ual(env->regs[1], env->regs[5] - 12);
> +    put_user_ual(env->regs[2], env->regs[5] -  8);
> +    put_user_ual(env->regs[3], env->regs[5] -  4);
> +    xtensa_rfwo(env);
> +}
> +
> +static void xtensa_underflow4(CPUXtensaState *env)
> +{
> +    get_user_ual(env->regs[0], env->regs[5] - 16);
> +    get_user_ual(env->regs[1], env->regs[5] - 12);
> +    get_user_ual(env->regs[2], env->regs[5] -  8);
> +    get_user_ual(env->regs[3], env->regs[5] -  4);
> +    xtensa_rfwu(env);
> +}
> +
> +static void xtensa_overflow8(CPUXtensaState *env)
> +{
> +    put_user_ual(env->regs[0], env->regs[9] - 16);
> +    get_user_ual(env->regs[0], env->regs[1] - 12);
> +    put_user_ual(env->regs[1], env->regs[9] - 12);
> +    put_user_ual(env->regs[2], env->regs[9] -  8);
> +    put_user_ual(env->regs[3], env->regs[9] -  4);
> +    put_user_ual(env->regs[4], env->regs[0] - 32);
> +    put_user_ual(env->regs[5], env->regs[0] - 28);
> +    put_user_ual(env->regs[6], env->regs[0] - 24);
> +    put_user_ual(env->regs[7], env->regs[0] - 20);
> +    xtensa_rfwo(env);
> +}
> +
> +static void xtensa_underflow8(CPUXtensaState *env)
> +{
> +    get_user_ual(env->regs[0], env->regs[9] - 16);
> +    get_user_ual(env->regs[1], env->regs[9] - 12);
> +    get_user_ual(env->regs[2], env->regs[9] -  8);
> +    get_user_ual(env->regs[7], env->regs[1] - 12);
> +    get_user_ual(env->regs[3], env->regs[9] -  4);
> +    get_user_ual(env->regs[4], env->regs[7] - 32);
> +    get_user_ual(env->regs[5], env->regs[7] - 28);
> +    get_user_ual(env->regs[6], env->regs[7] - 24);
> +    get_user_ual(env->regs[7], env->regs[7] - 20);
> +    xtensa_rfwu(env);
> +}
> +
> +static void xtensa_overflow12(CPUXtensaState *env)
> +{
> +    put_user_ual(env->regs[0],  env->regs[13] - 16);
> +    get_user_ual(env->regs[0],  env->regs[1]  - 12);
> +    put_user_ual(env->regs[1],  env->regs[13] - 12);
> +    put_user_ual(env->regs[2],  env->regs[13] -  8);
> +    put_user_ual(env->regs[3],  env->regs[13] -  4);
> +    put_user_ual(env->regs[4],  env->regs[0]  - 48);
> +    put_user_ual(env->regs[5],  env->regs[0]  - 44);
> +    put_user_ual(env->regs[6],  env->regs[0]  - 40);
> +    put_user_ual(env->regs[7],  env->regs[0]  - 36);
> +    put_user_ual(env->regs[8],  env->regs[0]  - 32);
> +    put_user_ual(env->regs[9],  env->regs[0]  - 28);
> +    put_user_ual(env->regs[10], env->regs[0]  - 24);
> +    put_user_ual(env->regs[11], env->regs[0]  - 20);
> +    xtensa_rfwo(env);
> +}
> +
> +static void xtensa_underflow12(CPUXtensaState *env)
> +{
> +    get_user_ual(env->regs[0],  env->regs[13] - 16);
> +    get_user_ual(env->regs[1],  env->regs[13] - 12);
> +    get_user_ual(env->regs[2],  env->regs[13] -  8);
> +    get_user_ual(env->regs[11], env->regs[1]  - 12);
> +    get_user_ual(env->regs[3],  env->regs[13] -  4);
> +    get_user_ual(env->regs[4],  env->regs[11] - 48);
> +    get_user_ual(env->regs[5],  env->regs[11] - 44);
> +    get_user_ual(env->regs[6],  env->regs[11] - 40);
> +    get_user_ual(env->regs[7],  env->regs[11] - 36);
> +    get_user_ual(env->regs[8],  env->regs[11] - 32);
> +    get_user_ual(env->regs[9],  env->regs[11] - 28);
> +    get_user_ual(env->regs[10], env->regs[11] - 24);
> +    get_user_ual(env->regs[11], env->regs[11] - 20);
> +    xtensa_rfwu(env);
> +}
> +
> +void cpu_loop(CPUXtensaState *env)
> +{
> +    CPUState *cs = CPU(xtensa_env_get_cpu(env));
> +    target_siginfo_t info;
> +    abi_ulong ret;
> +    int trapnr;
> +
> +    while (1) {
> +        cpu_exec_start(cs);
> +        trapnr = cpu_exec(cs);
> +        cpu_exec_end(cs);
> +        process_queued_cpu_work(cs);
> +
> +        env->sregs[PS] &= ~PS_EXCM;
> +        switch (trapnr) {
> +        case EXCP_INTERRUPT:
> +            break;
> +
> +        case EXC_WINDOW_OVERFLOW4:
> +            xtensa_overflow4(env);
> +            break;
> +        case EXC_WINDOW_UNDERFLOW4:
> +            xtensa_underflow4(env);
> +            break;
> +        case EXC_WINDOW_OVERFLOW8:
> +            xtensa_overflow8(env);
> +            break;
> +        case EXC_WINDOW_UNDERFLOW8:
> +            xtensa_underflow8(env);
> +            break;
> +        case EXC_WINDOW_OVERFLOW12:
> +            xtensa_overflow12(env);
> +            break;
> +        case EXC_WINDOW_UNDERFLOW12:
> +            xtensa_underflow12(env);
> +            break;
> +
> +        case EXC_USER:
> +            switch (env->sregs[EXCCAUSE]) {
> +            case ILLEGAL_INSTRUCTION_CAUSE:
> +            case PRIVILEGED_CAUSE:
> +                info.si_signo = TARGET_SIGILL;
> +                info.si_errno = 0;
> +                info.si_code =
> +                    env->sregs[EXCCAUSE] == ILLEGAL_INSTRUCTION_CAUSE ?
> +                    TARGET_ILL_ILLOPC : TARGET_ILL_PRVOPC;
> +                info._sifields._sigfault._addr = env->sregs[EPC1];
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                break;
> +
> +            case SYSCALL_CAUSE:
> +                env->pc += 3;
> +                ret = do_syscall(env, env->regs[2],
> +                                 env->regs[6], env->regs[3],
> +                                 env->regs[4], env->regs[5],
> +                                 env->regs[8], env->regs[9], 0, 0);
> +                switch (ret) {
> +                default:
> +                    env->regs[2] = ret;
> +                    break;
> +
> +                case -TARGET_ERESTARTSYS:
> +                case -TARGET_QEMU_ESIGRETURN:
> +                    break;
> +                }
> +                break;
> +
> +            case ALLOCA_CAUSE:
> +                env->sregs[PS] = deposit32(env->sregs[PS],
> +                                           PS_OWB_SHIFT,
> +                                           PS_OWB_LEN,
> +                                           env->sregs[WINDOW_BASE]);
> +
> +                switch (env->regs[0] & 0xc0000000) {
> +                case 0x00000000:
> +                case 0x40000000:
> +                    xtensa_rotate_window(env, -1);
> +                    xtensa_underflow4(env);
> +                    break;
> +
> +                case 0x80000000:
> +                    xtensa_rotate_window(env, -2);
> +                    xtensa_underflow8(env);
> +                    break;
> +
> +                case 0xc0000000:
> +                    xtensa_rotate_window(env, -3);
> +                    xtensa_underflow12(env);
> +                    break;
> +                }
> +                break;
> +
> +            case INTEGER_DIVIDE_BY_ZERO_CAUSE:
> +                info.si_signo = TARGET_SIGFPE;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_FPE_INTDIV;
> +                info._sifields._sigfault._addr = env->sregs[EPC1];
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                break;
> +
> +            case LOAD_PROHIBITED_CAUSE:
> +            case STORE_PROHIBITED_CAUSE:
> +                info.si_signo = TARGET_SIGSEGV;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_SEGV_ACCERR;
> +                info._sifields._sigfault._addr = env->sregs[EXCVADDR];
> +                queue_signal(env, info.si_signo, QEMU_SI_FAULT, &info);
> +                break;
> +
> +            default:
> +                fprintf(stderr, "exccause = %d\n", env->sregs[EXCCAUSE]);
> +                g_assert_not_reached();
> +            }
> +            break;
> +        case EXCP_DEBUG:
> +            trapnr = gdb_handlesig(cs, TARGET_SIGTRAP);
> +            if (trapnr) {
> +                info.si_signo = trapnr;
> +                info.si_errno = 0;
> +                info.si_code = TARGET_TRAP_BRKPT;
> +                queue_signal(env, trapnr, QEMU_SI_FAULT, &info);
> +            }
> +            break;
> +        case EXC_DEBUG:
> +        default:
> +            fprintf(stderr, "trapnr = %d\n", trapnr);
> +            g_assert_not_reached();
> +        }
> +        process_pending_signals(env);
> +    }
> +}
> 



reply via email to

[Prev in Thread] Current Thread [Next in Thread]