xref: /llvm-project-15.0.7/lld/ELF/Arch/PPC64.cpp (revision 9aeab53e)
1 //===- PPC64.cpp ----------------------------------------------------------===//
2 //
3 // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
4 // See https://llvm.org/LICENSE.txt for license information.
5 // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
6 //
7 //===----------------------------------------------------------------------===//
8 
9 #include "Symbols.h"
10 #include "SyntheticSections.h"
11 #include "Target.h"
12 #include "lld/Common/ErrorHandler.h"
13 #include "llvm/Support/Endian.h"
14 
15 using namespace llvm;
16 using namespace llvm::object;
17 using namespace llvm::support::endian;
18 using namespace llvm::ELF;
19 using namespace lld;
20 using namespace lld::elf;
21 
22 static uint64_t ppc64TocOffset = 0x8000;
23 static uint64_t dynamicThreadPointerOffset = 0x8000;
24 
25 // The instruction encoding of bits 21-30 from the ISA for the Xform and Dform
26 // instructions that can be used as part of the initial exec TLS sequence.
27 enum XFormOpcd {
28   LBZX = 87,
29   LHZX = 279,
30   LWZX = 23,
31   LDX = 21,
32   STBX = 215,
33   STHX = 407,
34   STWX = 151,
35   STDX = 149,
36   ADD = 266,
37 };
38 
39 enum DFormOpcd {
40   LBZ = 34,
41   LBZU = 35,
42   LHZ = 40,
43   LHZU = 41,
44   LHAU = 43,
45   LWZ = 32,
46   LWZU = 33,
47   LFSU = 49,
48   LD = 58,
49   LFDU = 51,
50   STB = 38,
51   STBU = 39,
52   STH = 44,
53   STHU = 45,
54   STW = 36,
55   STWU = 37,
56   STFSU = 53,
57   STFDU = 55,
58   STD = 62,
59   ADDI = 14
60 };
61 
62 uint64_t elf::getPPC64TocBase() {
63   // The TOC consists of sections .got, .toc, .tocbss, .plt in that order. The
64   // TOC starts where the first of these sections starts. We always create a
65   // .got when we see a relocation that uses it, so for us the start is always
66   // the .got.
67   uint64_t tocVA = in.got->getVA();
68 
69   // Per the ppc64-elf-linux ABI, The TOC base is TOC value plus 0x8000
70   // thus permitting a full 64 Kbytes segment. Note that the glibc startup
71   // code (crt1.o) assumes that you can get from the TOC base to the
72   // start of the .toc section with only a single (signed) 16-bit relocation.
73   return tocVA + ppc64TocOffset;
74 }
75 
76 unsigned elf::getPPC64GlobalEntryToLocalEntryOffset(uint8_t stOther) {
77   // The offset is encoded into the 3 most significant bits of the st_other
78   // field, with some special values described in section 3.4.1 of the ABI:
79   // 0   --> Zero offset between the GEP and LEP, and the function does NOT use
80   //         the TOC pointer (r2). r2 will hold the same value on returning from
81   //         the function as it did on entering the function.
82   // 1   --> Zero offset between the GEP and LEP, and r2 should be treated as a
83   //         caller-saved register for all callers.
84   // 2-6 --> The  binary logarithm of the offset eg:
85   //         2 --> 2^2 = 4 bytes -->  1 instruction.
86   //         6 --> 2^6 = 64 bytes --> 16 instructions.
87   // 7   --> Reserved.
88   uint8_t gepToLep = (stOther >> 5) & 7;
89   if (gepToLep < 2)
90     return 0;
91 
92   // The value encoded in the st_other bits is the
93   // log-base-2(offset).
94   if (gepToLep < 7)
95     return 1 << gepToLep;
96 
97   error("reserved value of 7 in the 3 most-significant-bits of st_other");
98   return 0;
99 }
100 
101 bool elf::isPPC64SmallCodeModelTocReloc(RelType type) {
102   // The only small code model relocations that access the .toc section.
103   return type == R_PPC64_TOC16 || type == R_PPC64_TOC16_DS;
104 }
105 
106 // Find the R_PPC64_ADDR64 in .rela.toc with matching offset.
107 template <typename ELFT>
108 static std::pair<Defined *, int64_t>
109 getRelaTocSymAndAddend(InputSectionBase *tocSec, uint64_t offset) {
110   if (tocSec->numRelocations == 0)
111     return {};
112 
113   // .rela.toc contains exclusively R_PPC64_ADDR64 relocations sorted by
114   // r_offset: 0, 8, 16, etc. For a given Offset, Offset / 8 gives us the
115   // relocation index in most cases.
116   //
117   // In rare cases a TOC entry may store a constant that doesn't need an
118   // R_PPC64_ADDR64, the corresponding r_offset is therefore missing. Offset / 8
119   // points to a relocation with larger r_offset. Do a linear probe then.
120   // Constants are extremely uncommon in .toc and the extra number of array
121   // accesses can be seen as a small constant.
122   ArrayRef<typename ELFT::Rela> relas = tocSec->template relas<ELFT>();
123   uint64_t index = std::min<uint64_t>(offset / 8, relas.size() - 1);
124   for (;;) {
125     if (relas[index].r_offset == offset) {
126       Symbol &sym = tocSec->getFile<ELFT>()->getRelocTargetSym(relas[index]);
127       return {dyn_cast<Defined>(&sym), getAddend<ELFT>(relas[index])};
128     }
129     if (relas[index].r_offset < offset || index == 0)
130       break;
131     --index;
132   }
133   return {};
134 }
135 
136 // When accessing a symbol defined in another translation unit, compilers
137 // reserve a .toc entry, allocate a local label and generate toc-indirect
138 // instuctions:
139 //
140 //   addis 3, 2, .LC0@toc@ha  # R_PPC64_TOC16_HA
141 //   ld    3, .LC0@toc@l(3)   # R_PPC64_TOC16_LO_DS, load the address from a .toc entry
142 //   ld/lwa 3, 0(3)           # load the value from the address
143 //
144 //   .section .toc,"aw",@progbits
145 //   .LC0: .tc var[TC],var
146 //
147 // If var is defined, non-preemptable and addressable with a 32-bit signed
148 // offset from the toc base, the address of var can be computed by adding an
149 // offset to the toc base, saving a load.
150 //
151 //   addis 3,2,var@toc@ha     # this may be relaxed to a nop,
152 //   addi  3,3,var@toc@l      # then this becomes addi 3,2,var@toc
153 //   ld/lwa 3, 0(3)           # load the value from the address
154 //
155 // Returns true if the relaxation is performed.
156 bool elf::tryRelaxPPC64TocIndirection(RelType type, const Relocation &rel,
157                                       uint8_t *bufLoc) {
158   assert(config->tocOptimize);
159   if (rel.addend < 0)
160     return false;
161 
162   // If the symbol is not the .toc section, this isn't a toc-indirection.
163   Defined *defSym = dyn_cast<Defined>(rel.sym);
164   if (!defSym || !defSym->isSection() || defSym->section->name != ".toc")
165     return false;
166 
167   Defined *d;
168   int64_t addend;
169   auto *tocISB = cast<InputSectionBase>(defSym->section);
170   std::tie(d, addend) =
171       config->isLE ? getRelaTocSymAndAddend<ELF64LE>(tocISB, rel.addend)
172                    : getRelaTocSymAndAddend<ELF64BE>(tocISB, rel.addend);
173 
174   // Only non-preemptable defined symbols can be relaxed.
175   if (!d || d->isPreemptible)
176     return false;
177 
178   // Two instructions can materialize a 32-bit signed offset from the toc base.
179   uint64_t tocRelative = d->getVA(addend) - getPPC64TocBase();
180   if (!isInt<32>(tocRelative))
181     return false;
182 
183   // Add PPC64TocOffset that will be subtracted by relocateOne().
184   target->relaxGot(bufLoc, type, tocRelative + ppc64TocOffset);
185   return true;
186 }
187 
188 namespace {
189 class PPC64 final : public TargetInfo {
190 public:
191   PPC64();
192   int getTlsGdRelaxSkip(RelType type) const override;
193   uint32_t calcEFlags() const override;
194   RelExpr getRelExpr(RelType type, const Symbol &s,
195                      const uint8_t *loc) const override;
196   RelType getDynRel(RelType type) const override;
197   void writePltHeader(uint8_t *buf) const override;
198   void writePlt(uint8_t *buf, uint64_t gotPltEntryAddr, uint64_t pltEntryAddr,
199                 int32_t index, unsigned relOff) const override;
200   void relocateOne(uint8_t *loc, RelType type, uint64_t val) const override;
201   void writeGotHeader(uint8_t *buf) const override;
202   bool needsThunk(RelExpr expr, RelType type, const InputFile *file,
203                   uint64_t branchAddr, const Symbol &s) const override;
204   uint32_t getThunkSectionSpacing() const override;
205   bool inBranchRange(RelType type, uint64_t src, uint64_t dst) const override;
206   RelExpr adjustRelaxExpr(RelType type, const uint8_t *data,
207                           RelExpr expr) const override;
208   void relaxGot(uint8_t *loc, RelType type, uint64_t val) const override;
209   void relaxTlsGdToIe(uint8_t *loc, RelType type, uint64_t val) const override;
210   void relaxTlsGdToLe(uint8_t *loc, RelType type, uint64_t val) const override;
211   void relaxTlsLdToLe(uint8_t *loc, RelType type, uint64_t val) const override;
212   void relaxTlsIeToLe(uint8_t *loc, RelType type, uint64_t val) const override;
213 
214   bool adjustPrologueForCrossSplitStack(uint8_t *loc, uint8_t *end,
215                                         uint8_t stOther) const override;
216 };
217 } // namespace
218 
219 // Relocation masks following the #lo(value), #hi(value), #ha(value),
220 // #higher(value), #highera(value), #highest(value), and #highesta(value)
221 // macros defined in section 4.5.1. Relocation Types of the PPC-elf64abi
222 // document.
223 static uint16_t lo(uint64_t v) { return v; }
224 static uint16_t hi(uint64_t v) { return v >> 16; }
225 static uint16_t ha(uint64_t v) { return (v + 0x8000) >> 16; }
226 static uint16_t higher(uint64_t v) { return v >> 32; }
227 static uint16_t highera(uint64_t v) { return (v + 0x8000) >> 32; }
228 static uint16_t highest(uint64_t v) { return v >> 48; }
229 static uint16_t highesta(uint64_t v) { return (v + 0x8000) >> 48; }
230 
231 // Extracts the 'PO' field of an instruction encoding.
232 static uint8_t getPrimaryOpCode(uint32_t encoding) { return (encoding >> 26); }
233 
234 static bool isDQFormInstruction(uint32_t encoding) {
235   switch (getPrimaryOpCode(encoding)) {
236   default:
237     return false;
238   case 56:
239     // The only instruction with a primary opcode of 56 is `lq`.
240     return true;
241   case 61:
242     // There are both DS and DQ instruction forms with this primary opcode.
243     // Namely `lxv` and `stxv` are the DQ-forms that use it.
244     // The DS 'XO' bits being set to 01 is restricted to DQ form.
245     return (encoding & 3) == 0x1;
246   }
247 }
248 
249 static bool isInstructionUpdateForm(uint32_t encoding) {
250   switch (getPrimaryOpCode(encoding)) {
251   default:
252     return false;
253   case LBZU:
254   case LHAU:
255   case LHZU:
256   case LWZU:
257   case LFSU:
258   case LFDU:
259   case STBU:
260   case STHU:
261   case STWU:
262   case STFSU:
263   case STFDU:
264     return true;
265     // LWA has the same opcode as LD, and the DS bits is what differentiates
266     // between LD/LDU/LWA
267   case LD:
268   case STD:
269     return (encoding & 3) == 1;
270   }
271 }
272 
273 // There are a number of places when we either want to read or write an
274 // instruction when handling a half16 relocation type. On big-endian the buffer
275 // pointer is pointing into the middle of the word we want to extract, and on
276 // little-endian it is pointing to the start of the word. These 2 helpers are to
277 // simplify reading and writing in that context.
278 static void writeFromHalf16(uint8_t *loc, uint32_t insn) {
279   write32(config->isLE ? loc : loc - 2, insn);
280 }
281 
282 static uint32_t readFromHalf16(const uint8_t *loc) {
283   return read32(config->isLE ? loc : loc - 2);
284 }
285 
286 PPC64::PPC64() {
287   gotRel = R_PPC64_GLOB_DAT;
288   noneRel = R_PPC64_NONE;
289   pltRel = R_PPC64_JMP_SLOT;
290   relativeRel = R_PPC64_RELATIVE;
291   iRelativeRel = R_PPC64_IRELATIVE;
292   symbolicRel = R_PPC64_ADDR64;
293   pltEntrySize = 4;
294   gotBaseSymInGotPlt = false;
295   gotHeaderEntriesNum = 1;
296   gotPltHeaderEntriesNum = 2;
297   pltHeaderSize = 60;
298   needsThunks = true;
299 
300   tlsModuleIndexRel = R_PPC64_DTPMOD64;
301   tlsOffsetRel = R_PPC64_DTPREL64;
302 
303   tlsGotRel = R_PPC64_TPREL64;
304 
305   needsMoreStackNonSplit = false;
306 
307   // We need 64K pages (at least under glibc/Linux, the loader won't
308   // set different permissions on a finer granularity than that).
309   defaultMaxPageSize = 65536;
310 
311   // The PPC64 ELF ABI v1 spec, says:
312   //
313   //   It is normally desirable to put segments with different characteristics
314   //   in separate 256 Mbyte portions of the address space, to give the
315   //   operating system full paging flexibility in the 64-bit address space.
316   //
317   // And because the lowest non-zero 256M boundary is 0x10000000, PPC64 linkers
318   // use 0x10000000 as the starting address.
319   defaultImageBase = 0x10000000;
320 
321   write32(trapInstr.data(), 0x7fe00008);
322 }
323 
324 int PPC64::getTlsGdRelaxSkip(RelType type) const {
325   // A __tls_get_addr call instruction is marked with 2 relocations:
326   //
327   //   R_PPC64_TLSGD / R_PPC64_TLSLD: marker relocation
328   //   R_PPC64_REL24: __tls_get_addr
329   //
330   // After the relaxation we no longer call __tls_get_addr and should skip both
331   // relocations to not create a false dependence on __tls_get_addr being
332   // defined.
333   if (type == R_PPC64_TLSGD || type == R_PPC64_TLSLD)
334     return 2;
335   return 1;
336 }
337 
338 static uint32_t getEFlags(InputFile *file) {
339   if (config->ekind == ELF64BEKind)
340     return cast<ObjFile<ELF64BE>>(file)->getObj().getHeader()->e_flags;
341   return cast<ObjFile<ELF64LE>>(file)->getObj().getHeader()->e_flags;
342 }
343 
344 // This file implements v2 ABI. This function makes sure that all
345 // object files have v2 or an unspecified version as an ABI version.
346 uint32_t PPC64::calcEFlags() const {
347   for (InputFile *f : objectFiles) {
348     uint32_t flag = getEFlags(f);
349     if (flag == 1)
350       error(toString(f) + ": ABI version 1 is not supported");
351     else if (flag > 2)
352       error(toString(f) + ": unrecognized e_flags: " + Twine(flag));
353   }
354   return 2;
355 }
356 
357 void PPC64::relaxGot(uint8_t *loc, RelType type, uint64_t val) const {
358   switch (type) {
359   case R_PPC64_TOC16_HA:
360     // Convert "addis reg, 2, .LC0@toc@h" to "addis reg, 2, var@toc@h" or "nop".
361     relocateOne(loc, type, val);
362     break;
363   case R_PPC64_TOC16_LO_DS: {
364     // Convert "ld reg, .LC0@toc@l(reg)" to "addi reg, reg, var@toc@l" or
365     // "addi reg, 2, var@toc".
366     uint32_t insn = readFromHalf16(loc);
367     if (getPrimaryOpCode(insn) != LD)
368       error("expected a 'ld' for got-indirect to toc-relative relaxing");
369     writeFromHalf16(loc, (insn & 0x03ffffff) | 0x38000000);
370     relocateOne(loc, R_PPC64_TOC16_LO, val);
371     break;
372   }
373   default:
374     llvm_unreachable("unexpected relocation type");
375   }
376 }
377 
378 void PPC64::relaxTlsGdToLe(uint8_t *loc, RelType type, uint64_t val) const {
379   // Reference: 3.7.4.2 of the 64-bit ELF V2 abi supplement.
380   // The general dynamic code sequence for a global `x` will look like:
381   // Instruction                    Relocation                Symbol
382   // addis r3, r2, x@got@tlsgd@ha   R_PPC64_GOT_TLSGD16_HA      x
383   // addi  r3, r3, x@got@tlsgd@l    R_PPC64_GOT_TLSGD16_LO      x
384   // bl __tls_get_addr(x@tlsgd)     R_PPC64_TLSGD               x
385   //                                R_PPC64_REL24               __tls_get_addr
386   // nop                            None                       None
387 
388   // Relaxing to local exec entails converting:
389   // addis r3, r2, x@got@tlsgd@ha    into      nop
390   // addi  r3, r3, x@got@tlsgd@l     into      addis r3, r13, x@tprel@ha
391   // bl __tls_get_addr(x@tlsgd)      into      nop
392   // nop                             into      addi r3, r3, x@tprel@l
393 
394   switch (type) {
395   case R_PPC64_GOT_TLSGD16_HA:
396     writeFromHalf16(loc, 0x60000000); // nop
397     break;
398   case R_PPC64_GOT_TLSGD16:
399   case R_PPC64_GOT_TLSGD16_LO:
400     writeFromHalf16(loc, 0x3c6d0000); // addis r3, r13
401     relocateOne(loc, R_PPC64_TPREL16_HA, val);
402     break;
403   case R_PPC64_TLSGD:
404     write32(loc, 0x60000000);     // nop
405     write32(loc + 4, 0x38630000); // addi r3, r3
406     // Since we are relocating a half16 type relocation and Loc + 4 points to
407     // the start of an instruction we need to advance the buffer by an extra
408     // 2 bytes on BE.
409     relocateOne(loc + 4 + (config->ekind == ELF64BEKind ? 2 : 0),
410                 R_PPC64_TPREL16_LO, val);
411     break;
412   default:
413     llvm_unreachable("unsupported relocation for TLS GD to LE relaxation");
414   }
415 }
416 
417 void PPC64::relaxTlsLdToLe(uint8_t *loc, RelType type, uint64_t val) const {
418   // Reference: 3.7.4.3 of the 64-bit ELF V2 abi supplement.
419   // The local dynamic code sequence for a global `x` will look like:
420   // Instruction                    Relocation                Symbol
421   // addis r3, r2, x@got@tlsld@ha   R_PPC64_GOT_TLSLD16_HA      x
422   // addi  r3, r3, x@got@tlsld@l    R_PPC64_GOT_TLSLD16_LO      x
423   // bl __tls_get_addr(x@tlsgd)     R_PPC64_TLSLD               x
424   //                                R_PPC64_REL24               __tls_get_addr
425   // nop                            None                       None
426 
427   // Relaxing to local exec entails converting:
428   // addis r3, r2, x@got@tlsld@ha   into      nop
429   // addi  r3, r3, x@got@tlsld@l    into      addis r3, r13, 0
430   // bl __tls_get_addr(x@tlsgd)     into      nop
431   // nop                            into      addi r3, r3, 4096
432 
433   switch (type) {
434   case R_PPC64_GOT_TLSLD16_HA:
435     writeFromHalf16(loc, 0x60000000); // nop
436     break;
437   case R_PPC64_GOT_TLSLD16_LO:
438     writeFromHalf16(loc, 0x3c6d0000); // addis r3, r13, 0
439     break;
440   case R_PPC64_TLSLD:
441     write32(loc, 0x60000000);     // nop
442     write32(loc + 4, 0x38631000); // addi r3, r3, 4096
443     break;
444   case R_PPC64_DTPREL16:
445   case R_PPC64_DTPREL16_HA:
446   case R_PPC64_DTPREL16_HI:
447   case R_PPC64_DTPREL16_DS:
448   case R_PPC64_DTPREL16_LO:
449   case R_PPC64_DTPREL16_LO_DS:
450     relocateOne(loc, type, val);
451     break;
452   default:
453     llvm_unreachable("unsupported relocation for TLS LD to LE relaxation");
454   }
455 }
456 
457 unsigned elf::getPPCDFormOp(unsigned secondaryOp) {
458   switch (secondaryOp) {
459   case LBZX:
460     return LBZ;
461   case LHZX:
462     return LHZ;
463   case LWZX:
464     return LWZ;
465   case LDX:
466     return LD;
467   case STBX:
468     return STB;
469   case STHX:
470     return STH;
471   case STWX:
472     return STW;
473   case STDX:
474     return STD;
475   case ADD:
476     return ADDI;
477   default:
478     return 0;
479   }
480 }
481 
482 void PPC64::relaxTlsIeToLe(uint8_t *loc, RelType type, uint64_t val) const {
483   // The initial exec code sequence for a global `x` will look like:
484   // Instruction                    Relocation                Symbol
485   // addis r9, r2, x@got@tprel@ha   R_PPC64_GOT_TPREL16_HA      x
486   // ld    r9, x@got@tprel@l(r9)    R_PPC64_GOT_TPREL16_LO_DS   x
487   // add r9, r9, x@tls              R_PPC64_TLS                 x
488 
489   // Relaxing to local exec entails converting:
490   // addis r9, r2, x@got@tprel@ha       into        nop
491   // ld r9, x@got@tprel@l(r9)           into        addis r9, r13, x@tprel@ha
492   // add r9, r9, x@tls                  into        addi r9, r9, x@tprel@l
493 
494   // x@tls R_PPC64_TLS is a relocation which does not compute anything,
495   // it is replaced with r13 (thread pointer).
496 
497   // The add instruction in the initial exec sequence has multiple variations
498   // that need to be handled. If we are building an address it will use an add
499   // instruction, if we are accessing memory it will use any of the X-form
500   // indexed load or store instructions.
501 
502   unsigned offset = (config->ekind == ELF64BEKind) ? 2 : 0;
503   switch (type) {
504   case R_PPC64_GOT_TPREL16_HA:
505     write32(loc - offset, 0x60000000); // nop
506     break;
507   case R_PPC64_GOT_TPREL16_LO_DS:
508   case R_PPC64_GOT_TPREL16_DS: {
509     uint32_t regNo = read32(loc - offset) & 0x03E00000; // bits 6-10
510     write32(loc - offset, 0x3C0D0000 | regNo);          // addis RegNo, r13
511     relocateOne(loc, R_PPC64_TPREL16_HA, val);
512     break;
513   }
514   case R_PPC64_TLS: {
515     uint32_t primaryOp = getPrimaryOpCode(read32(loc));
516     if (primaryOp != 31)
517       error("unrecognized instruction for IE to LE R_PPC64_TLS");
518     uint32_t secondaryOp = (read32(loc) & 0x000007FE) >> 1; // bits 21-30
519     uint32_t dFormOp = getPPCDFormOp(secondaryOp);
520     if (dFormOp == 0)
521       error("unrecognized instruction for IE to LE R_PPC64_TLS");
522     write32(loc, ((dFormOp << 26) | (read32(loc) & 0x03FFFFFF)));
523     relocateOne(loc + offset, R_PPC64_TPREL16_LO, val);
524     break;
525   }
526   default:
527     llvm_unreachable("unknown relocation for IE to LE");
528     break;
529   }
530 }
531 
532 RelExpr PPC64::getRelExpr(RelType type, const Symbol &s,
533                           const uint8_t *loc) const {
534   switch (type) {
535   case R_PPC64_GOT16:
536   case R_PPC64_GOT16_DS:
537   case R_PPC64_GOT16_HA:
538   case R_PPC64_GOT16_HI:
539   case R_PPC64_GOT16_LO:
540   case R_PPC64_GOT16_LO_DS:
541     return R_GOT_OFF;
542   case R_PPC64_TOC16:
543   case R_PPC64_TOC16_DS:
544   case R_PPC64_TOC16_HI:
545   case R_PPC64_TOC16_LO:
546     return R_GOTREL;
547   case R_PPC64_TOC16_HA:
548   case R_PPC64_TOC16_LO_DS:
549     return config->tocOptimize ? R_PPC64_RELAX_TOC : R_GOTREL;
550   case R_PPC64_TOC:
551     return R_PPC64_TOCBASE;
552   case R_PPC64_REL14:
553   case R_PPC64_REL24:
554     return R_PPC64_CALL_PLT;
555   case R_PPC64_REL16_LO:
556   case R_PPC64_REL16_HA:
557   case R_PPC64_REL32:
558   case R_PPC64_REL64:
559     return R_PC;
560   case R_PPC64_GOT_TLSGD16:
561   case R_PPC64_GOT_TLSGD16_HA:
562   case R_PPC64_GOT_TLSGD16_HI:
563   case R_PPC64_GOT_TLSGD16_LO:
564     return R_TLSGD_GOT;
565   case R_PPC64_GOT_TLSLD16:
566   case R_PPC64_GOT_TLSLD16_HA:
567   case R_PPC64_GOT_TLSLD16_HI:
568   case R_PPC64_GOT_TLSLD16_LO:
569     return R_TLSLD_GOT;
570   case R_PPC64_GOT_TPREL16_HA:
571   case R_PPC64_GOT_TPREL16_LO_DS:
572   case R_PPC64_GOT_TPREL16_DS:
573   case R_PPC64_GOT_TPREL16_HI:
574     return R_GOT_OFF;
575   case R_PPC64_GOT_DTPREL16_HA:
576   case R_PPC64_GOT_DTPREL16_LO_DS:
577   case R_PPC64_GOT_DTPREL16_DS:
578   case R_PPC64_GOT_DTPREL16_HI:
579     return R_TLSLD_GOT_OFF;
580   case R_PPC64_TPREL16:
581   case R_PPC64_TPREL16_HA:
582   case R_PPC64_TPREL16_LO:
583   case R_PPC64_TPREL16_HI:
584   case R_PPC64_TPREL16_DS:
585   case R_PPC64_TPREL16_LO_DS:
586   case R_PPC64_TPREL16_HIGHER:
587   case R_PPC64_TPREL16_HIGHERA:
588   case R_PPC64_TPREL16_HIGHEST:
589   case R_PPC64_TPREL16_HIGHESTA:
590     return R_TLS;
591   case R_PPC64_DTPREL16:
592   case R_PPC64_DTPREL16_DS:
593   case R_PPC64_DTPREL16_HA:
594   case R_PPC64_DTPREL16_HI:
595   case R_PPC64_DTPREL16_HIGHER:
596   case R_PPC64_DTPREL16_HIGHERA:
597   case R_PPC64_DTPREL16_HIGHEST:
598   case R_PPC64_DTPREL16_HIGHESTA:
599   case R_PPC64_DTPREL16_LO:
600   case R_PPC64_DTPREL16_LO_DS:
601   case R_PPC64_DTPREL64:
602     return R_DTPREL;
603   case R_PPC64_TLSGD:
604     return R_TLSDESC_CALL;
605   case R_PPC64_TLSLD:
606     return R_TLSLD_HINT;
607   case R_PPC64_TLS:
608     return R_TLSIE_HINT;
609   default:
610     return R_ABS;
611   }
612 }
613 
614 RelType PPC64::getDynRel(RelType type) const {
615   if (type == R_PPC64_ADDR64 || type == R_PPC64_TOC)
616     return R_PPC64_ADDR64;
617   return R_PPC64_NONE;
618 }
619 
620 void PPC64::writeGotHeader(uint8_t *buf) const {
621   write64(buf, getPPC64TocBase());
622 }
623 
624 void PPC64::writePltHeader(uint8_t *buf) const {
625   // The generic resolver stub goes first.
626   write32(buf +  0, 0x7c0802a6); // mflr r0
627   write32(buf +  4, 0x429f0005); // bcl  20,4*cr7+so,8 <_glink+0x8>
628   write32(buf +  8, 0x7d6802a6); // mflr r11
629   write32(buf + 12, 0x7c0803a6); // mtlr r0
630   write32(buf + 16, 0x7d8b6050); // subf r12, r11, r12
631   write32(buf + 20, 0x380cffcc); // subi r0,r12,52
632   write32(buf + 24, 0x7800f082); // srdi r0,r0,62,2
633   write32(buf + 28, 0xe98b002c); // ld   r12,44(r11)
634   write32(buf + 32, 0x7d6c5a14); // add  r11,r12,r11
635   write32(buf + 36, 0xe98b0000); // ld   r12,0(r11)
636   write32(buf + 40, 0xe96b0008); // ld   r11,8(r11)
637   write32(buf + 44, 0x7d8903a6); // mtctr   r12
638   write32(buf + 48, 0x4e800420); // bctr
639 
640   // The 'bcl' instruction will set the link register to the address of the
641   // following instruction ('mflr r11'). Here we store the offset from that
642   // instruction  to the first entry in the GotPlt section.
643   int64_t gotPltOffset = in.gotPlt->getVA() - (in.plt->getVA() + 8);
644   write64(buf + 52, gotPltOffset);
645 }
646 
647 void PPC64::writePlt(uint8_t *buf, uint64_t gotPltEntryAddr,
648                      uint64_t pltEntryAddr, int32_t index,
649                      unsigned relOff) const {
650   int32_t offset = pltHeaderSize + index * pltEntrySize;
651   // bl __glink_PLTresolve
652   write32(buf, 0x48000000 | ((-offset) & 0x03FFFFFc));
653 }
654 
655 static std::pair<RelType, uint64_t> toAddr16Rel(RelType type, uint64_t val) {
656   // Relocations relative to the toc-base need to be adjusted by the Toc offset.
657   uint64_t tocBiasedVal = val - ppc64TocOffset;
658   // Relocations relative to dtv[dtpmod] need to be adjusted by the DTP offset.
659   uint64_t dtpBiasedVal = val - dynamicThreadPointerOffset;
660 
661   switch (type) {
662   // TOC biased relocation.
663   case R_PPC64_GOT16:
664   case R_PPC64_GOT_TLSGD16:
665   case R_PPC64_GOT_TLSLD16:
666   case R_PPC64_TOC16:
667     return {R_PPC64_ADDR16, tocBiasedVal};
668   case R_PPC64_GOT16_DS:
669   case R_PPC64_TOC16_DS:
670   case R_PPC64_GOT_TPREL16_DS:
671   case R_PPC64_GOT_DTPREL16_DS:
672     return {R_PPC64_ADDR16_DS, tocBiasedVal};
673   case R_PPC64_GOT16_HA:
674   case R_PPC64_GOT_TLSGD16_HA:
675   case R_PPC64_GOT_TLSLD16_HA:
676   case R_PPC64_GOT_TPREL16_HA:
677   case R_PPC64_GOT_DTPREL16_HA:
678   case R_PPC64_TOC16_HA:
679     return {R_PPC64_ADDR16_HA, tocBiasedVal};
680   case R_PPC64_GOT16_HI:
681   case R_PPC64_GOT_TLSGD16_HI:
682   case R_PPC64_GOT_TLSLD16_HI:
683   case R_PPC64_GOT_TPREL16_HI:
684   case R_PPC64_GOT_DTPREL16_HI:
685   case R_PPC64_TOC16_HI:
686     return {R_PPC64_ADDR16_HI, tocBiasedVal};
687   case R_PPC64_GOT16_LO:
688   case R_PPC64_GOT_TLSGD16_LO:
689   case R_PPC64_GOT_TLSLD16_LO:
690   case R_PPC64_TOC16_LO:
691     return {R_PPC64_ADDR16_LO, tocBiasedVal};
692   case R_PPC64_GOT16_LO_DS:
693   case R_PPC64_TOC16_LO_DS:
694   case R_PPC64_GOT_TPREL16_LO_DS:
695   case R_PPC64_GOT_DTPREL16_LO_DS:
696     return {R_PPC64_ADDR16_LO_DS, tocBiasedVal};
697 
698   // Dynamic Thread pointer biased relocation types.
699   case R_PPC64_DTPREL16:
700     return {R_PPC64_ADDR16, dtpBiasedVal};
701   case R_PPC64_DTPREL16_DS:
702     return {R_PPC64_ADDR16_DS, dtpBiasedVal};
703   case R_PPC64_DTPREL16_HA:
704     return {R_PPC64_ADDR16_HA, dtpBiasedVal};
705   case R_PPC64_DTPREL16_HI:
706     return {R_PPC64_ADDR16_HI, dtpBiasedVal};
707   case R_PPC64_DTPREL16_HIGHER:
708     return {R_PPC64_ADDR16_HIGHER, dtpBiasedVal};
709   case R_PPC64_DTPREL16_HIGHERA:
710     return {R_PPC64_ADDR16_HIGHERA, dtpBiasedVal};
711   case R_PPC64_DTPREL16_HIGHEST:
712     return {R_PPC64_ADDR16_HIGHEST, dtpBiasedVal};
713   case R_PPC64_DTPREL16_HIGHESTA:
714     return {R_PPC64_ADDR16_HIGHESTA, dtpBiasedVal};
715   case R_PPC64_DTPREL16_LO:
716     return {R_PPC64_ADDR16_LO, dtpBiasedVal};
717   case R_PPC64_DTPREL16_LO_DS:
718     return {R_PPC64_ADDR16_LO_DS, dtpBiasedVal};
719   case R_PPC64_DTPREL64:
720     return {R_PPC64_ADDR64, dtpBiasedVal};
721 
722   default:
723     return {type, val};
724   }
725 }
726 
727 static bool isTocOptType(RelType type) {
728   switch (type) {
729   case R_PPC64_GOT16_HA:
730   case R_PPC64_GOT16_LO_DS:
731   case R_PPC64_TOC16_HA:
732   case R_PPC64_TOC16_LO_DS:
733   case R_PPC64_TOC16_LO:
734     return true;
735   default:
736     return false;
737   }
738 }
739 
740 void PPC64::relocateOne(uint8_t *loc, RelType type, uint64_t val) const {
741   // We need to save the original relocation type to use in diagnostics, and
742   // use the original type to determine if we should toc-optimize the
743   // instructions being relocated.
744   RelType originalType = type;
745   bool shouldTocOptimize =  isTocOptType(type);
746   // For dynamic thread pointer relative, toc-relative, and got-indirect
747   // relocations, proceed in terms of the corresponding ADDR16 relocation type.
748   std::tie(type, val) = toAddr16Rel(type, val);
749 
750   switch (type) {
751   case R_PPC64_ADDR14: {
752     checkAlignment(loc, val, 4, type);
753     // Preserve the AA/LK bits in the branch instruction
754     uint8_t aalk = loc[3];
755     write16(loc + 2, (aalk & 3) | (val & 0xfffc));
756     break;
757   }
758   case R_PPC64_ADDR16:
759     checkIntUInt(loc, val, 16, originalType);
760     write16(loc, val);
761     break;
762   case R_PPC64_ADDR32:
763     checkIntUInt(loc, val, 32, originalType);
764     write32(loc, val);
765     break;
766   case R_PPC64_ADDR16_DS:
767   case R_PPC64_TPREL16_DS: {
768     checkInt(loc, val, 16, originalType);
769     // DQ-form instructions use bits 28-31 as part of the instruction encoding
770     // DS-form instructions only use bits 30-31.
771     uint16_t mask = isDQFormInstruction(readFromHalf16(loc)) ? 0xf : 0x3;
772     checkAlignment(loc, lo(val), mask + 1, originalType);
773     write16(loc, (read16(loc) & mask) | lo(val));
774   } break;
775   case R_PPC64_ADDR16_HA:
776   case R_PPC64_REL16_HA:
777   case R_PPC64_TPREL16_HA:
778     if (config->tocOptimize && shouldTocOptimize && ha(val) == 0)
779       writeFromHalf16(loc, 0x60000000);
780     else
781       write16(loc, ha(val));
782     break;
783   case R_PPC64_ADDR16_HI:
784   case R_PPC64_REL16_HI:
785   case R_PPC64_TPREL16_HI:
786     write16(loc, hi(val));
787     break;
788   case R_PPC64_ADDR16_HIGHER:
789   case R_PPC64_TPREL16_HIGHER:
790     write16(loc, higher(val));
791     break;
792   case R_PPC64_ADDR16_HIGHERA:
793   case R_PPC64_TPREL16_HIGHERA:
794     write16(loc, highera(val));
795     break;
796   case R_PPC64_ADDR16_HIGHEST:
797   case R_PPC64_TPREL16_HIGHEST:
798     write16(loc, highest(val));
799     break;
800   case R_PPC64_ADDR16_HIGHESTA:
801   case R_PPC64_TPREL16_HIGHESTA:
802     write16(loc, highesta(val));
803     break;
804   case R_PPC64_ADDR16_LO:
805   case R_PPC64_REL16_LO:
806   case R_PPC64_TPREL16_LO:
807     // When the high-adjusted part of a toc relocation evalutes to 0, it is
808     // changed into a nop. The lo part then needs to be updated to use the
809     // toc-pointer register r2, as the base register.
810     if (config->tocOptimize && shouldTocOptimize && ha(val) == 0) {
811       uint32_t insn = readFromHalf16(loc);
812       if (isInstructionUpdateForm(insn))
813         error(getErrorLocation(loc) +
814               "can't toc-optimize an update instruction: 0x" +
815               utohexstr(insn));
816       writeFromHalf16(loc, (insn & 0xffe00000) | 0x00020000 | lo(val));
817     } else {
818       write16(loc, lo(val));
819     }
820     break;
821   case R_PPC64_ADDR16_LO_DS:
822   case R_PPC64_TPREL16_LO_DS: {
823     // DQ-form instructions use bits 28-31 as part of the instruction encoding
824     // DS-form instructions only use bits 30-31.
825     uint32_t insn = readFromHalf16(loc);
826     uint16_t mask = isDQFormInstruction(insn) ? 0xf : 0x3;
827     checkAlignment(loc, lo(val), mask + 1, originalType);
828     if (config->tocOptimize && shouldTocOptimize && ha(val) == 0) {
829       // When the high-adjusted part of a toc relocation evalutes to 0, it is
830       // changed into a nop. The lo part then needs to be updated to use the toc
831       // pointer register r2, as the base register.
832       if (isInstructionUpdateForm(insn))
833         error(getErrorLocation(loc) +
834               "Can't toc-optimize an update instruction: 0x" +
835               Twine::utohexstr(insn));
836       insn &= 0xffe00000 | mask;
837       writeFromHalf16(loc, insn | 0x00020000 | lo(val));
838     } else {
839       write16(loc, (read16(loc) & mask) | lo(val));
840     }
841   } break;
842   case R_PPC64_TPREL16:
843     checkInt(loc, val, 16, originalType);
844     write16(loc, val);
845     break;
846   case R_PPC64_REL32:
847     checkInt(loc, val, 32, type);
848     write32(loc, val);
849     break;
850   case R_PPC64_ADDR64:
851   case R_PPC64_REL64:
852   case R_PPC64_TOC:
853     write64(loc, val);
854     break;
855   case R_PPC64_REL14: {
856     uint32_t mask = 0x0000FFFC;
857     checkInt(loc, val, 16, type);
858     checkAlignment(loc, val, 4, type);
859     write32(loc, (read32(loc) & ~mask) | (val & mask));
860     break;
861   }
862   case R_PPC64_REL24: {
863     uint32_t mask = 0x03FFFFFC;
864     checkInt(loc, val, 26, type);
865     checkAlignment(loc, val, 4, type);
866     write32(loc, (read32(loc) & ~mask) | (val & mask));
867     break;
868   }
869   case R_PPC64_DTPREL64:
870     write64(loc, val - dynamicThreadPointerOffset);
871     break;
872   default:
873     error(getErrorLocation(loc) + "unrecognized relocation " + toString(type));
874   }
875 }
876 
877 bool PPC64::needsThunk(RelExpr expr, RelType type, const InputFile *file,
878                        uint64_t branchAddr, const Symbol &s) const {
879   if (type != R_PPC64_REL14 && type != R_PPC64_REL24)
880     return false;
881 
882   // If a function is in the Plt it needs to be called with a call-stub.
883   if (s.isInPlt())
884     return true;
885 
886   // If a symbol is a weak undefined and we are compiling an executable
887   // it doesn't need a range-extending thunk since it can't be called.
888   if (s.isUndefWeak() && !config->shared)
889     return false;
890 
891   // If the offset exceeds the range of the branch type then it will need
892   // a range-extending thunk.
893   // See the comment in getRelocTargetVA() about R_PPC64_CALL.
894   return !inBranchRange(type, branchAddr,
895                         s.getVA() +
896                             getPPC64GlobalEntryToLocalEntryOffset(s.stOther));
897 }
898 
899 uint32_t PPC64::getThunkSectionSpacing() const {
900   // See comment in Arch/ARM.cpp for a more detailed explanation of
901   // getThunkSectionSpacing(). For PPC64 we pick the constant here based on
902   // R_PPC64_REL24, which is used by unconditional branch instructions.
903   // 0x2000000 = (1 << 24-1) * 4
904   return 0x2000000;
905 }
906 
907 bool PPC64::inBranchRange(RelType type, uint64_t src, uint64_t dst) const {
908   int64_t offset = dst - src;
909   if (type == R_PPC64_REL14)
910     return isInt<16>(offset);
911   if (type == R_PPC64_REL24)
912     return isInt<26>(offset);
913   llvm_unreachable("unsupported relocation type used in branch");
914 }
915 
916 RelExpr PPC64::adjustRelaxExpr(RelType type, const uint8_t *data,
917                                RelExpr expr) const {
918   if (expr == R_RELAX_TLS_GD_TO_IE)
919     return R_RELAX_TLS_GD_TO_IE_GOT_OFF;
920   if (expr == R_RELAX_TLS_LD_TO_LE)
921     return R_RELAX_TLS_LD_TO_LE_ABS;
922   return expr;
923 }
924 
925 // Reference: 3.7.4.1 of the 64-bit ELF V2 abi supplement.
926 // The general dynamic code sequence for a global `x` uses 4 instructions.
927 // Instruction                    Relocation                Symbol
928 // addis r3, r2, x@got@tlsgd@ha   R_PPC64_GOT_TLSGD16_HA      x
929 // addi  r3, r3, x@got@tlsgd@l    R_PPC64_GOT_TLSGD16_LO      x
930 // bl __tls_get_addr(x@tlsgd)     R_PPC64_TLSGD               x
931 //                                R_PPC64_REL24               __tls_get_addr
932 // nop                            None                       None
933 //
934 // Relaxing to initial-exec entails:
935 // 1) Convert the addis/addi pair that builds the address of the tls_index
936 //    struct for 'x' to an addis/ld pair that loads an offset from a got-entry.
937 // 2) Convert the call to __tls_get_addr to a nop.
938 // 3) Convert the nop following the call to an add of the loaded offset to the
939 //    thread pointer.
940 // Since the nop must directly follow the call, the R_PPC64_TLSGD relocation is
941 // used as the relaxation hint for both steps 2 and 3.
942 void PPC64::relaxTlsGdToIe(uint8_t *loc, RelType type, uint64_t val) const {
943   switch (type) {
944   case R_PPC64_GOT_TLSGD16_HA:
945     // This is relaxed from addis rT, r2, sym@got@tlsgd@ha to
946     //                      addis rT, r2, sym@got@tprel@ha.
947     relocateOne(loc, R_PPC64_GOT_TPREL16_HA, val);
948     return;
949   case R_PPC64_GOT_TLSGD16:
950   case R_PPC64_GOT_TLSGD16_LO: {
951     // Relax from addi  r3, rA, sym@got@tlsgd@l to
952     //            ld r3, sym@got@tprel@l(rA)
953     uint32_t ra = (readFromHalf16(loc) & (0x1f << 16));
954     writeFromHalf16(loc, 0xe8600000 | ra);
955     relocateOne(loc, R_PPC64_GOT_TPREL16_LO_DS, val);
956     return;
957   }
958   case R_PPC64_TLSGD:
959     write32(loc, 0x60000000);     // bl __tls_get_addr(sym@tlsgd) --> nop
960     write32(loc + 4, 0x7c636A14); // nop --> add r3, r3, r13
961     return;
962   default:
963     llvm_unreachable("unsupported relocation for TLS GD to IE relaxation");
964   }
965 }
966 
967 // The prologue for a split-stack function is expected to look roughly
968 // like this:
969 //    .Lglobal_entry_point:
970 //      # TOC pointer initalization.
971 //      ...
972 //    .Llocal_entry_point:
973 //      # load the __private_ss member of the threads tcbhead.
974 //      ld r0,-0x7000-64(r13)
975 //      # subtract the functions stack size from the stack pointer.
976 //      addis r12, r1, ha(-stack-frame size)
977 //      addi  r12, r12, l(-stack-frame size)
978 //      # compare needed to actual and branch to allocate_more_stack if more
979 //      # space is needed, otherwise fallthrough to 'normal' function body.
980 //      cmpld cr7,r12,r0
981 //      blt- cr7, .Lallocate_more_stack
982 //
983 // -) The allocate_more_stack block might be placed after the split-stack
984 //    prologue and the `blt-` replaced with a `bge+ .Lnormal_func_body`
985 //    instead.
986 // -) If either the addis or addi is not needed due to the stack size being
987 //    smaller then 32K or a multiple of 64K they will be replaced with a nop,
988 //    but there will always be 2 instructions the linker can overwrite for the
989 //    adjusted stack size.
990 //
991 // The linkers job here is to increase the stack size used in the addis/addi
992 // pair by split-stack-size-adjust.
993 // addis r12, r1, ha(-stack-frame size - split-stack-adjust-size)
994 // addi  r12, r12, l(-stack-frame size - split-stack-adjust-size)
995 bool PPC64::adjustPrologueForCrossSplitStack(uint8_t *loc, uint8_t *end,
996                                              uint8_t stOther) const {
997   // If the caller has a global entry point adjust the buffer past it. The start
998   // of the split-stack prologue will be at the local entry point.
999   loc += getPPC64GlobalEntryToLocalEntryOffset(stOther);
1000 
1001   // At the very least we expect to see a load of some split-stack data from the
1002   // tcb, and 2 instructions that calculate the ending stack address this
1003   // function will require. If there is not enough room for at least 3
1004   // instructions it can't be a split-stack prologue.
1005   if (loc + 12 >= end)
1006     return false;
1007 
1008   // First instruction must be `ld r0, -0x7000-64(r13)`
1009   if (read32(loc) != 0xe80d8fc0)
1010     return false;
1011 
1012   int16_t hiImm = 0;
1013   int16_t loImm = 0;
1014   // First instruction can be either an addis if the frame size is larger then
1015   // 32K, or an addi if the size is less then 32K.
1016   int32_t firstInstr = read32(loc + 4);
1017   if (getPrimaryOpCode(firstInstr) == 15) {
1018     hiImm = firstInstr & 0xFFFF;
1019   } else if (getPrimaryOpCode(firstInstr) == 14) {
1020     loImm = firstInstr & 0xFFFF;
1021   } else {
1022     return false;
1023   }
1024 
1025   // Second instruction is either an addi or a nop. If the first instruction was
1026   // an addi then LoImm is set and the second instruction must be a nop.
1027   uint32_t secondInstr = read32(loc + 8);
1028   if (!loImm && getPrimaryOpCode(secondInstr) == 14) {
1029     loImm = secondInstr & 0xFFFF;
1030   } else if (secondInstr != 0x60000000) {
1031     return false;
1032   }
1033 
1034   // The register operands of the first instruction should be the stack-pointer
1035   // (r1) as the input (RA) and r12 as the output (RT). If the second
1036   // instruction is not a nop, then it should use r12 as both input and output.
1037   auto checkRegOperands = [](uint32_t instr, uint8_t expectedRT,
1038                              uint8_t expectedRA) {
1039     return ((instr & 0x3E00000) >> 21 == expectedRT) &&
1040            ((instr & 0x1F0000) >> 16 == expectedRA);
1041   };
1042   if (!checkRegOperands(firstInstr, 12, 1))
1043     return false;
1044   if (secondInstr != 0x60000000 && !checkRegOperands(secondInstr, 12, 12))
1045     return false;
1046 
1047   int32_t stackFrameSize = (hiImm * 65536) + loImm;
1048   // Check that the adjusted size doesn't overflow what we can represent with 2
1049   // instructions.
1050   if (stackFrameSize < config->splitStackAdjustSize + INT32_MIN) {
1051     error(getErrorLocation(loc) + "split-stack prologue adjustment overflows");
1052     return false;
1053   }
1054 
1055   int32_t adjustedStackFrameSize =
1056       stackFrameSize - config->splitStackAdjustSize;
1057 
1058   loImm = adjustedStackFrameSize & 0xFFFF;
1059   hiImm = (adjustedStackFrameSize + 0x8000) >> 16;
1060   if (hiImm) {
1061     write32(loc + 4, 0x3D810000 | (uint16_t)hiImm);
1062     // If the low immediate is zero the second instruction will be a nop.
1063     secondInstr = loImm ? 0x398C0000 | (uint16_t)loImm : 0x60000000;
1064     write32(loc + 8, secondInstr);
1065   } else {
1066     // addi r12, r1, imm
1067     write32(loc + 4, (0x39810000) | (uint16_t)loImm);
1068     write32(loc + 8, 0x60000000);
1069   }
1070 
1071   return true;
1072 }
1073 
1074 TargetInfo *elf::getPPC64TargetInfo() {
1075   static PPC64 target;
1076   return &target;
1077 }
1078