1 //===- PPC.cpp ------------------------------------------------------------===// 2 // 3 // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions. 4 // See https://llvm.org/LICENSE.txt for license information. 5 // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception 6 // 7 //===----------------------------------------------------------------------===// 8 9 #include "OutputSections.h" 10 #include "Symbols.h" 11 #include "SyntheticSections.h" 12 #include "Target.h" 13 #include "Thunks.h" 14 #include "lld/Common/ErrorHandler.h" 15 #include "llvm/Support/Endian.h" 16 17 using namespace llvm; 18 using namespace llvm::support::endian; 19 using namespace llvm::ELF; 20 21 namespace lld { 22 namespace elf { 23 24 namespace { 25 class PPC final : public TargetInfo { 26 public: 27 PPC(); 28 RelExpr getRelExpr(RelType type, const Symbol &s, 29 const uint8_t *loc) const override; 30 RelType getDynRel(RelType type) const override; 31 void writeGotHeader(uint8_t *buf) const override; 32 void writePltHeader(uint8_t *buf) const override { 33 llvm_unreachable("should call writePPC32GlinkSection() instead"); 34 } 35 void writePlt(uint8_t *buf, const Symbol &sym, 36 uint64_t pltEntryAddr) const override { 37 llvm_unreachable("should call writePPC32GlinkSection() instead"); 38 } 39 void writeIplt(uint8_t *buf, const Symbol &sym, 40 uint64_t pltEntryAddr) const override; 41 void writeGotPlt(uint8_t *buf, const Symbol &s) const override; 42 bool needsThunk(RelExpr expr, RelType relocType, const InputFile *file, 43 uint64_t branchAddr, const Symbol &s, 44 int64_t a) const override; 45 uint32_t getThunkSectionSpacing() const override; 46 bool inBranchRange(RelType type, uint64_t src, uint64_t dst) const override; 47 void relocateOne(uint8_t *loc, RelType type, uint64_t val) const override; 48 RelExpr adjustRelaxExpr(RelType type, const uint8_t *data, 49 RelExpr expr) const override; 50 int getTlsGdRelaxSkip(RelType type) const override; 51 void relaxTlsGdToIe(uint8_t *loc, RelType type, uint64_t val) const override; 52 void relaxTlsGdToLe(uint8_t *loc, RelType type, uint64_t val) const override; 53 void relaxTlsLdToLe(uint8_t *loc, RelType type, uint64_t val) const override; 54 void relaxTlsIeToLe(uint8_t *loc, RelType type, uint64_t val) const override; 55 }; 56 } // namespace 57 58 static uint16_t lo(uint32_t v) { return v; } 59 static uint16_t ha(uint32_t v) { return (v + 0x8000) >> 16; } 60 61 static uint32_t readFromHalf16(const uint8_t *loc) { 62 return read32(config->isLE ? loc : loc - 2); 63 } 64 65 static void writeFromHalf16(uint8_t *loc, uint32_t insn) { 66 write32(config->isLE ? loc : loc - 2, insn); 67 } 68 69 void writePPC32GlinkSection(uint8_t *buf, size_t numEntries) { 70 // On PPC Secure PLT ABI, bl foo@plt jumps to a call stub, which loads an 71 // absolute address from a specific .plt slot (usually called .got.plt on 72 // other targets) and jumps there. 73 // 74 // a) With immediate binding (BIND_NOW), the .plt entry is resolved at load 75 // time. The .glink section is not used. 76 // b) With lazy binding, the .plt entry points to a `b PLTresolve` 77 // instruction in .glink, filled in by PPC::writeGotPlt(). 78 79 // Write N `b PLTresolve` first. 80 for (size_t i = 0; i != numEntries; ++i) 81 write32(buf + 4 * i, 0x48000000 | 4 * (numEntries - i)); 82 buf += 4 * numEntries; 83 84 // Then write PLTresolve(), which has two forms: PIC and non-PIC. PLTresolve() 85 // computes the PLT index (by computing the distance from the landing b to 86 // itself) and calls _dl_runtime_resolve() (in glibc). 87 uint32_t got = in.got->getVA(); 88 uint32_t glink = in.plt->getVA(); // VA of .glink 89 const uint8_t *end = buf + 64; 90 if (config->isPic) { 91 uint32_t afterBcl = in.plt->getSize() - target->pltHeaderSize + 12; 92 uint32_t gotBcl = got + 4 - (glink + afterBcl); 93 write32(buf + 0, 0x3d6b0000 | ha(afterBcl)); // addis r11,r11,1f-glink@ha 94 write32(buf + 4, 0x7c0802a6); // mflr r0 95 write32(buf + 8, 0x429f0005); // bcl 20,30,.+4 96 write32(buf + 12, 0x396b0000 | lo(afterBcl)); // 1: addi r11,r11,1b-.glink@l 97 write32(buf + 16, 0x7d8802a6); // mflr r12 98 write32(buf + 20, 0x7c0803a6); // mtlr r0 99 write32(buf + 24, 0x7d6c5850); // sub r11,r11,r12 100 write32(buf + 28, 0x3d8c0000 | ha(gotBcl)); // addis 12,12,GOT+4-1b@ha 101 if (ha(gotBcl) == ha(gotBcl + 4)) { 102 write32(buf + 32, 0x800c0000 | lo(gotBcl)); // lwz r0,r12,GOT+4-1b@l(r12) 103 write32(buf + 36, 104 0x818c0000 | lo(gotBcl + 4)); // lwz r12,r12,GOT+8-1b@l(r12) 105 } else { 106 write32(buf + 32, 0x840c0000 | lo(gotBcl)); // lwzu r0,r12,GOT+4-1b@l(r12) 107 write32(buf + 36, 0x818c0000 | 4); // lwz r12,r12,4(r12) 108 } 109 write32(buf + 40, 0x7c0903a6); // mtctr 0 110 write32(buf + 44, 0x7c0b5a14); // add r0,11,11 111 write32(buf + 48, 0x7d605a14); // add r11,0,11 112 write32(buf + 52, 0x4e800420); // bctr 113 buf += 56; 114 } else { 115 write32(buf + 0, 0x3d800000 | ha(got + 4)); // lis r12,GOT+4@ha 116 write32(buf + 4, 0x3d6b0000 | ha(-glink)); // addis r11,r11,-Glink@ha 117 if (ha(got + 4) == ha(got + 8)) 118 write32(buf + 8, 0x800c0000 | lo(got + 4)); // lwz r0,GOT+4@l(r12) 119 else 120 write32(buf + 8, 0x840c0000 | lo(got + 4)); // lwzu r0,GOT+4@l(r12) 121 write32(buf + 12, 0x396b0000 | lo(-glink)); // addi r11,r11,-Glink@l 122 write32(buf + 16, 0x7c0903a6); // mtctr r0 123 write32(buf + 20, 0x7c0b5a14); // add r0,r11,r11 124 if (ha(got + 4) == ha(got + 8)) 125 write32(buf + 24, 0x818c0000 | lo(got + 8)); // lwz r12,GOT+8@ha(r12) 126 else 127 write32(buf + 24, 0x818c0000 | 4); // lwz r12,4(r12) 128 write32(buf + 28, 0x7d605a14); // add r11,r0,r11 129 write32(buf + 32, 0x4e800420); // bctr 130 buf += 36; 131 } 132 133 // Pad with nop. They should not be executed. 134 for (; buf < end; buf += 4) 135 write32(buf, 0x60000000); 136 } 137 138 PPC::PPC() { 139 gotRel = R_PPC_GLOB_DAT; 140 noneRel = R_PPC_NONE; 141 pltRel = R_PPC_JMP_SLOT; 142 relativeRel = R_PPC_RELATIVE; 143 iRelativeRel = R_PPC_IRELATIVE; 144 symbolicRel = R_PPC_ADDR32; 145 gotBaseSymInGotPlt = false; 146 gotHeaderEntriesNum = 3; 147 gotPltHeaderEntriesNum = 0; 148 pltHeaderSize = 64; // size of PLTresolve in .glink 149 pltEntrySize = 4; 150 ipltEntrySize = 16; 151 152 needsThunks = true; 153 154 tlsModuleIndexRel = R_PPC_DTPMOD32; 155 tlsOffsetRel = R_PPC_DTPREL32; 156 tlsGotRel = R_PPC_TPREL32; 157 158 defaultMaxPageSize = 65536; 159 defaultImageBase = 0x10000000; 160 161 write32(trapInstr.data(), 0x7fe00008); 162 } 163 164 void PPC::writeIplt(uint8_t *buf, const Symbol &sym, 165 uint64_t /*pltEntryAddr*/) const { 166 // In -pie or -shared mode, assume r30 points to .got2+0x8000, and use a 167 // .got2.plt_pic32. thunk. 168 writePPC32PltCallStub(buf, sym.getGotPltVA(), sym.file, 0x8000); 169 } 170 171 void PPC::writeGotHeader(uint8_t *buf) const { 172 // _GLOBAL_OFFSET_TABLE_[0] = _DYNAMIC 173 // glibc stores _dl_runtime_resolve in _GLOBAL_OFFSET_TABLE_[1], 174 // link_map in _GLOBAL_OFFSET_TABLE_[2]. 175 write32(buf, mainPart->dynamic->getVA()); 176 } 177 178 void PPC::writeGotPlt(uint8_t *buf, const Symbol &s) const { 179 // Address of the symbol resolver stub in .glink . 180 write32(buf, in.plt->getVA() + 4 * s.pltIndex); 181 } 182 183 bool PPC::needsThunk(RelExpr expr, RelType type, const InputFile *file, 184 uint64_t branchAddr, const Symbol &s, int64_t /*a*/) const { 185 if (type != R_PPC_REL24 && type != R_PPC_PLTREL24) 186 return false; 187 if (s.isInPlt()) 188 return true; 189 if (s.isUndefWeak()) 190 return false; 191 return !(expr == R_PC && PPC::inBranchRange(type, branchAddr, s.getVA())); 192 } 193 194 uint32_t PPC::getThunkSectionSpacing() const { return 0x2000000; } 195 196 bool PPC::inBranchRange(RelType type, uint64_t src, uint64_t dst) const { 197 uint64_t offset = dst - src; 198 if (type == R_PPC_REL24 || type == R_PPC_PLTREL24) 199 return isInt<26>(offset); 200 llvm_unreachable("unsupported relocation type used in branch"); 201 } 202 203 RelExpr PPC::getRelExpr(RelType type, const Symbol &s, 204 const uint8_t *loc) const { 205 switch (type) { 206 case R_PPC_NONE: 207 return R_NONE; 208 case R_PPC_ADDR16_HA: 209 case R_PPC_ADDR16_HI: 210 case R_PPC_ADDR16_LO: 211 case R_PPC_ADDR32: 212 return R_ABS; 213 case R_PPC_DTPREL16: 214 case R_PPC_DTPREL16_HA: 215 case R_PPC_DTPREL16_HI: 216 case R_PPC_DTPREL16_LO: 217 case R_PPC_DTPREL32: 218 return R_DTPREL; 219 case R_PPC_REL14: 220 case R_PPC_REL32: 221 case R_PPC_LOCAL24PC: 222 case R_PPC_REL16_LO: 223 case R_PPC_REL16_HI: 224 case R_PPC_REL16_HA: 225 return R_PC; 226 case R_PPC_GOT16: 227 return R_GOT_OFF; 228 case R_PPC_REL24: 229 return R_PLT_PC; 230 case R_PPC_PLTREL24: 231 return R_PPC32_PLTREL; 232 case R_PPC_GOT_TLSGD16: 233 return R_TLSGD_GOT; 234 case R_PPC_GOT_TLSLD16: 235 return R_TLSLD_GOT; 236 case R_PPC_GOT_TPREL16: 237 return R_GOT_OFF; 238 case R_PPC_TLS: 239 return R_TLSIE_HINT; 240 case R_PPC_TLSGD: 241 return R_TLSDESC_CALL; 242 case R_PPC_TLSLD: 243 return R_TLSLD_HINT; 244 case R_PPC_TPREL16: 245 case R_PPC_TPREL16_HA: 246 case R_PPC_TPREL16_LO: 247 case R_PPC_TPREL16_HI: 248 return R_TLS; 249 default: 250 error(getErrorLocation(loc) + "unknown relocation (" + Twine(type) + 251 ") against symbol " + toString(s)); 252 return R_NONE; 253 } 254 } 255 256 RelType PPC::getDynRel(RelType type) const { 257 if (type == R_PPC_ADDR32) 258 return type; 259 return R_PPC_NONE; 260 } 261 262 static std::pair<RelType, uint64_t> fromDTPREL(RelType type, uint64_t val) { 263 uint64_t dtpBiasedVal = val - 0x8000; 264 switch (type) { 265 case R_PPC_DTPREL16: 266 return {R_PPC64_ADDR16, dtpBiasedVal}; 267 case R_PPC_DTPREL16_HA: 268 return {R_PPC_ADDR16_HA, dtpBiasedVal}; 269 case R_PPC_DTPREL16_HI: 270 return {R_PPC_ADDR16_HI, dtpBiasedVal}; 271 case R_PPC_DTPREL16_LO: 272 return {R_PPC_ADDR16_LO, dtpBiasedVal}; 273 case R_PPC_DTPREL32: 274 return {R_PPC_ADDR32, dtpBiasedVal}; 275 default: 276 return {type, val}; 277 } 278 } 279 280 void PPC::relocateOne(uint8_t *loc, RelType type, uint64_t val) const { 281 RelType newType; 282 std::tie(newType, val) = fromDTPREL(type, val); 283 switch (newType) { 284 case R_PPC_ADDR16: 285 checkIntUInt(loc, val, 16, type); 286 write16(loc, val); 287 break; 288 case R_PPC_GOT16: 289 case R_PPC_GOT_TLSGD16: 290 case R_PPC_GOT_TLSLD16: 291 case R_PPC_GOT_TPREL16: 292 case R_PPC_TPREL16: 293 checkInt(loc, val, 16, type); 294 write16(loc, val); 295 break; 296 case R_PPC_ADDR16_HA: 297 case R_PPC_DTPREL16_HA: 298 case R_PPC_GOT_TLSGD16_HA: 299 case R_PPC_GOT_TLSLD16_HA: 300 case R_PPC_GOT_TPREL16_HA: 301 case R_PPC_REL16_HA: 302 case R_PPC_TPREL16_HA: 303 write16(loc, ha(val)); 304 break; 305 case R_PPC_ADDR16_HI: 306 case R_PPC_DTPREL16_HI: 307 case R_PPC_GOT_TLSGD16_HI: 308 case R_PPC_GOT_TLSLD16_HI: 309 case R_PPC_GOT_TPREL16_HI: 310 case R_PPC_REL16_HI: 311 case R_PPC_TPREL16_HI: 312 write16(loc, val >> 16); 313 break; 314 case R_PPC_ADDR16_LO: 315 case R_PPC_DTPREL16_LO: 316 case R_PPC_GOT_TLSGD16_LO: 317 case R_PPC_GOT_TLSLD16_LO: 318 case R_PPC_GOT_TPREL16_LO: 319 case R_PPC_REL16_LO: 320 case R_PPC_TPREL16_LO: 321 write16(loc, val); 322 break; 323 case R_PPC_ADDR32: 324 case R_PPC_REL32: 325 write32(loc, val); 326 break; 327 case R_PPC_REL14: { 328 uint32_t mask = 0x0000FFFC; 329 checkInt(loc, val, 16, type); 330 checkAlignment(loc, val, 4, type); 331 write32(loc, (read32(loc) & ~mask) | (val & mask)); 332 break; 333 } 334 case R_PPC_REL24: 335 case R_PPC_LOCAL24PC: 336 case R_PPC_PLTREL24: { 337 uint32_t mask = 0x03FFFFFC; 338 checkInt(loc, val, 26, type); 339 checkAlignment(loc, val, 4, type); 340 write32(loc, (read32(loc) & ~mask) | (val & mask)); 341 break; 342 } 343 default: 344 llvm_unreachable("unknown relocation"); 345 } 346 } 347 348 RelExpr PPC::adjustRelaxExpr(RelType type, const uint8_t *data, 349 RelExpr expr) const { 350 if (expr == R_RELAX_TLS_GD_TO_IE) 351 return R_RELAX_TLS_GD_TO_IE_GOT_OFF; 352 if (expr == R_RELAX_TLS_LD_TO_LE) 353 return R_RELAX_TLS_LD_TO_LE_ABS; 354 return expr; 355 } 356 357 int PPC::getTlsGdRelaxSkip(RelType type) const { 358 // A __tls_get_addr call instruction is marked with 2 relocations: 359 // 360 // R_PPC_TLSGD / R_PPC_TLSLD: marker relocation 361 // R_PPC_REL24: __tls_get_addr 362 // 363 // After the relaxation we no longer call __tls_get_addr and should skip both 364 // relocations to not create a false dependence on __tls_get_addr being 365 // defined. 366 if (type == R_PPC_TLSGD || type == R_PPC_TLSLD) 367 return 2; 368 return 1; 369 } 370 371 void PPC::relaxTlsGdToIe(uint8_t *loc, RelType type, uint64_t val) const { 372 switch (type) { 373 case R_PPC_GOT_TLSGD16: { 374 // addi rT, rA, x@got@tlsgd --> lwz rT, x@got@tprel(rA) 375 uint32_t insn = readFromHalf16(loc); 376 writeFromHalf16(loc, 0x80000000 | (insn & 0x03ff0000)); 377 relocateOne(loc, R_PPC_GOT_TPREL16, val); 378 break; 379 } 380 case R_PPC_TLSGD: 381 // bl __tls_get_addr(x@tldgd) --> add r3, r3, r2 382 write32(loc, 0x7c631214); 383 break; 384 default: 385 llvm_unreachable("unsupported relocation for TLS GD to IE relaxation"); 386 } 387 } 388 389 void PPC::relaxTlsGdToLe(uint8_t *loc, RelType type, uint64_t val) const { 390 switch (type) { 391 case R_PPC_GOT_TLSGD16: 392 // addi r3, r31, x@got@tlsgd --> addis r3, r2, x@tprel@ha 393 writeFromHalf16(loc, 0x3c620000 | ha(val)); 394 break; 395 case R_PPC_TLSGD: 396 // bl __tls_get_addr(x@tldgd) --> add r3, r3, x@tprel@l 397 write32(loc, 0x38630000 | lo(val)); 398 break; 399 default: 400 llvm_unreachable("unsupported relocation for TLS GD to LE relaxation"); 401 } 402 } 403 404 void PPC::relaxTlsLdToLe(uint8_t *loc, RelType type, uint64_t val) const { 405 switch (type) { 406 case R_PPC_GOT_TLSLD16: 407 // addi r3, rA, x@got@tlsgd --> addis r3, r2, 0 408 writeFromHalf16(loc, 0x3c620000); 409 break; 410 case R_PPC_TLSLD: 411 // r3+x@dtprel computes r3+x-0x8000, while we want it to compute r3+x@tprel 412 // = r3+x-0x7000, so add 4096 to r3. 413 // bl __tls_get_addr(x@tlsld) --> addi r3, r3, 4096 414 write32(loc, 0x38631000); 415 break; 416 case R_PPC_DTPREL16: 417 case R_PPC_DTPREL16_HA: 418 case R_PPC_DTPREL16_HI: 419 case R_PPC_DTPREL16_LO: 420 relocateOne(loc, type, val); 421 break; 422 default: 423 llvm_unreachable("unsupported relocation for TLS LD to LE relaxation"); 424 } 425 } 426 427 void PPC::relaxTlsIeToLe(uint8_t *loc, RelType type, uint64_t val) const { 428 switch (type) { 429 case R_PPC_GOT_TPREL16: { 430 // lwz rT, x@got@tprel(rA) --> addis rT, r2, x@tprel@ha 431 uint32_t rt = readFromHalf16(loc) & 0x03e00000; 432 writeFromHalf16(loc, 0x3c020000 | rt | ha(val)); 433 break; 434 } 435 case R_PPC_TLS: { 436 uint32_t insn = read32(loc); 437 if (insn >> 26 != 31) 438 error("unrecognized instruction for IE to LE R_PPC_TLS"); 439 // addi rT, rT, x@tls --> addi rT, rT, x@tprel@l 440 uint32_t dFormOp = getPPCDFormOp((read32(loc) & 0x000007fe) >> 1); 441 if (dFormOp == 0) 442 error("unrecognized instruction for IE to LE R_PPC_TLS"); 443 write32(loc, (dFormOp << 26) | (insn & 0x03ff0000) | lo(val)); 444 break; 445 } 446 default: 447 llvm_unreachable("unsupported relocation for TLS IE to LE relaxation"); 448 } 449 } 450 451 TargetInfo *getPPCTargetInfo() { 452 static PPC target; 453 return ⌖ 454 } 455 456 } // namespace elf 457 } // namespace lld 458