1 /*
2  *    Stack-less Just-In-Time compiler
3  *
4  *    Copyright Zoltan Herczeg (hzmester@freemail.hu). All rights reserved.
5  *
6  * Redistribution and use in source and binary forms, with or without modification, are
7  * permitted provided that the following conditions are met:
8  *
9  *   1. Redistributions of source code must retain the above copyright notice, this list of
10  *      conditions and the following disclaimer.
11  *
12  *   2. Redistributions in binary form must reproduce the above copyright notice, this list
13  *      of conditions and the following disclaimer in the documentation and/or other materials
14  *      provided with the distribution.
15  *
16  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDER(S) AND CONTRIBUTORS ``AS IS'' AND ANY
17  * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
18  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT
19  * SHALL THE COPYRIGHT HOLDER(S) OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
20  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
21  * TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
22  * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
23  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
24  * ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
25  */
26 
27 /* x86 32-bit arch dependent functions. */
28 
emit_do_imm(struct sljit_compiler * compiler,sljit_u8 opcode,sljit_sw imm)29 static sljit_s32 emit_do_imm(struct sljit_compiler *compiler, sljit_u8 opcode, sljit_sw imm)
30 {
31 	sljit_u8 *inst;
32 
33 	inst = (sljit_u8*)ensure_buf(compiler, 1 + 1 + sizeof(sljit_sw));
34 	FAIL_IF(!inst);
35 	INC_SIZE(1 + sizeof(sljit_sw));
36 	*inst++ = opcode;
37 	sljit_unaligned_store_sw(inst, imm);
38 	return SLJIT_SUCCESS;
39 }
40 
generate_far_jump_code(struct sljit_jump * jump,sljit_u8 * code_ptr,sljit_sw executable_offset)41 static sljit_u8* generate_far_jump_code(struct sljit_jump *jump, sljit_u8 *code_ptr, sljit_sw executable_offset)
42 {
43 	sljit_s32 type = jump->flags >> TYPE_SHIFT;
44 
45 	if (type == SLJIT_JUMP) {
46 		*code_ptr++ = JMP_i32;
47 		jump->addr++;
48 	}
49 	else if (type >= SLJIT_FAST_CALL) {
50 		*code_ptr++ = CALL_i32;
51 		jump->addr++;
52 	}
53 	else {
54 		*code_ptr++ = GROUP_0F;
55 		*code_ptr++ = get_jump_code(type);
56 		jump->addr += 2;
57 	}
58 
59 	if (jump->flags & JUMP_LABEL)
60 		jump->flags |= PATCH_MW;
61 	else
62 		sljit_unaligned_store_sw(code_ptr, jump->u.target - (jump->addr + 4) - (sljit_uw)executable_offset);
63 	code_ptr += 4;
64 
65 	return code_ptr;
66 }
67 
sljit_emit_enter(struct sljit_compiler * compiler,sljit_s32 options,sljit_s32 arg_types,sljit_s32 scratches,sljit_s32 saveds,sljit_s32 fscratches,sljit_s32 fsaveds,sljit_s32 local_size)68 SLJIT_API_FUNC_ATTRIBUTE sljit_s32 sljit_emit_enter(struct sljit_compiler *compiler,
69 	sljit_s32 options, sljit_s32 arg_types, sljit_s32 scratches, sljit_s32 saveds,
70 	sljit_s32 fscratches, sljit_s32 fsaveds, sljit_s32 local_size)
71 {
72 	sljit_s32 args, size;
73 	sljit_u8 *inst;
74 
75 	CHECK_ERROR();
76 	CHECK(check_sljit_emit_enter(compiler, options, arg_types, scratches, saveds, fscratches, fsaveds, local_size));
77 	set_emit_enter(compiler, options, arg_types, scratches, saveds, fscratches, fsaveds, local_size);
78 
79 	/* Emit ENDBR32 at function entry if needed.  */
80 	FAIL_IF(emit_endbranch(compiler));
81 
82 	args = get_arg_count(arg_types);
83 	compiler->args = args;
84 
85 	/* [esp+0] for saving temporaries and function calls. */
86 	compiler->stack_tmp_size = 2 * sizeof(sljit_sw);
87 
88 #if !(defined SLJIT_X86_32_FASTCALL && SLJIT_X86_32_FASTCALL)
89 	if (scratches > 3)
90 		compiler->stack_tmp_size = 3 * sizeof(sljit_sw);
91 #endif
92 
93 	compiler->saveds_offset = compiler->stack_tmp_size;
94 	if (scratches > 3)
95 		compiler->saveds_offset += ((scratches > (3 + 6)) ? 6 : (scratches - 3)) * sizeof(sljit_sw);
96 
97 	compiler->locals_offset = compiler->saveds_offset;
98 
99 	if (saveds > 3)
100 		compiler->locals_offset += (saveds - 3) * sizeof(sljit_sw);
101 
102 	if (options & SLJIT_F64_ALIGNMENT)
103 		compiler->locals_offset = (compiler->locals_offset + sizeof(sljit_f64) - 1) & ~(sizeof(sljit_f64) - 1);
104 
105 	size = 1 + (scratches > 9 ? (scratches - 9) : 0) + (saveds <= 3 ? saveds : 3);
106 #if (defined SLJIT_X86_32_FASTCALL && SLJIT_X86_32_FASTCALL)
107 	size += (args > 0 ? (args * 2) : 0) + (args > 2 ? 2 : 0);
108 #else
109 	size += (args > 0 ? (2 + args * 3) : 0);
110 #endif
111 	inst = (sljit_u8*)ensure_buf(compiler, 1 + size);
112 	FAIL_IF(!inst);
113 
114 	INC_SIZE(size);
115 	PUSH_REG(reg_map[TMP_REG1]);
116 #if !(defined SLJIT_X86_32_FASTCALL && SLJIT_X86_32_FASTCALL)
117 	if (args > 0) {
118 		*inst++ = MOV_r_rm;
119 		*inst++ = MOD_REG | (reg_map[TMP_REG1] << 3) | 0x4 /* esp */;
120 	}
121 #endif
122 	if (saveds > 2 || scratches > 9)
123 		PUSH_REG(reg_map[SLJIT_S2]);
124 	if (saveds > 1 || scratches > 10)
125 		PUSH_REG(reg_map[SLJIT_S1]);
126 	if (saveds > 0 || scratches > 11)
127 		PUSH_REG(reg_map[SLJIT_S0]);
128 
129 #if (defined SLJIT_X86_32_FASTCALL && SLJIT_X86_32_FASTCALL)
130 	if (args > 0) {
131 		inst[0] = MOV_r_rm;
132 		inst[1] = MOD_REG | (reg_map[SLJIT_S0] << 3) | reg_map[SLJIT_R2];
133 		inst += 2;
134 	}
135 	if (args > 1) {
136 		inst[0] = MOV_r_rm;
137 		inst[1] = MOD_REG | (reg_map[SLJIT_S1] << 3) | reg_map[SLJIT_R1];
138 		inst += 2;
139 	}
140 	if (args > 2) {
141 		inst[0] = MOV_r_rm;
142 		inst[1] = MOD_DISP8 | (reg_map[SLJIT_S2] << 3) | 0x4 /* esp */;
143 		inst[2] = 0x24;
144 		inst[3] = sizeof(sljit_sw) * (3 + 2); /* saveds >= 3 as well. */
145 	}
146 #else
147 	if (args > 0) {
148 		inst[0] = MOV_r_rm;
149 		inst[1] = MOD_DISP8 | (reg_map[SLJIT_S0] << 3) | reg_map[TMP_REG1];
150 		inst[2] = sizeof(sljit_sw) * 2;
151 		inst += 3;
152 	}
153 	if (args > 1) {
154 		inst[0] = MOV_r_rm;
155 		inst[1] = MOD_DISP8 | (reg_map[SLJIT_S1] << 3) | reg_map[TMP_REG1];
156 		inst[2] = sizeof(sljit_sw) * 3;
157 		inst += 3;
158 	}
159 	if (args > 2) {
160 		inst[0] = MOV_r_rm;
161 		inst[1] = MOD_DISP8 | (reg_map[SLJIT_S2] << 3) | reg_map[TMP_REG1];
162 		inst[2] = sizeof(sljit_sw) * 4;
163 	}
164 #endif
165 
166 	SLJIT_ASSERT(SLJIT_LOCALS_OFFSET > 0);
167 
168 #if defined(__APPLE__)
169 	/* Ignore pushed registers and SLJIT_LOCALS_OFFSET when computing the aligned local size. */
170 	saveds = (2 + (scratches > 9 ? (scratches - 9) : 0) + (saveds <= 3 ? saveds : 3)) * sizeof(sljit_uw);
171 	local_size = ((SLJIT_LOCALS_OFFSET + saveds + local_size + 15) & ~15) - saveds;
172 #else
173 	if (options & SLJIT_F64_ALIGNMENT)
174 		local_size = SLJIT_LOCALS_OFFSET + ((local_size + sizeof(sljit_f64) - 1) & ~(sizeof(sljit_f64) - 1));
175 	else
176 		local_size = SLJIT_LOCALS_OFFSET + ((local_size + sizeof(sljit_sw) - 1) & ~(sizeof(sljit_sw) - 1));
177 #endif
178 
179 	compiler->local_size = local_size;
180 
181 #ifdef _WIN32
182 	if (local_size > 0) {
183 		if (local_size <= 4 * 4096) {
184 			if (local_size > 4096)
185 				EMIT_MOV(compiler, TMP_REG1, 0, SLJIT_MEM1(SLJIT_SP), -4096);
186 			if (local_size > 2 * 4096)
187 				EMIT_MOV(compiler, TMP_REG1, 0, SLJIT_MEM1(SLJIT_SP), -4096 * 2);
188 			if (local_size > 3 * 4096)
189 				EMIT_MOV(compiler, TMP_REG1, 0, SLJIT_MEM1(SLJIT_SP), -4096 * 3);
190 		}
191 		else {
192 			EMIT_MOV(compiler, SLJIT_R0, 0, SLJIT_SP, 0);
193 			EMIT_MOV(compiler, SLJIT_R1, 0, SLJIT_IMM, (local_size - 1) >> 12);
194 
195 			SLJIT_ASSERT (reg_map[SLJIT_R0] == 0);
196 
197 			EMIT_MOV(compiler, TMP_REG1, 0, SLJIT_MEM1(SLJIT_R0), -4096);
198 			FAIL_IF(emit_non_cum_binary(compiler, BINARY_OPCODE(SUB),
199 				SLJIT_R0, 0, SLJIT_R0, 0, SLJIT_IMM, 4096));
200 			FAIL_IF(emit_non_cum_binary(compiler, BINARY_OPCODE(SUB),
201 				SLJIT_R1, 0, SLJIT_R1, 0, SLJIT_IMM, 1));
202 
203 			inst = (sljit_u8*)ensure_buf(compiler, 1 + 2);
204 			FAIL_IF(!inst);
205 
206 			INC_SIZE(2);
207 			inst[0] = JNE_i8;
208 			inst[1] = (sljit_s8) -16;
209 		}
210 
211 		EMIT_MOV(compiler, TMP_REG1, 0, SLJIT_MEM1(SLJIT_SP), -local_size);
212 	}
213 #endif
214 
215 	SLJIT_ASSERT(local_size > 0);
216 
217 #if !defined(__APPLE__)
218 	if (options & SLJIT_F64_ALIGNMENT) {
219 		EMIT_MOV(compiler, TMP_REG1, 0, SLJIT_SP, 0);
220 
221 		/* Some space might allocated during sljit_grow_stack() above on WIN32. */
222 		FAIL_IF(emit_non_cum_binary(compiler, BINARY_OPCODE(SUB),
223 			SLJIT_SP, 0, SLJIT_SP, 0, SLJIT_IMM, local_size + sizeof(sljit_sw)));
224 
225 #if defined _WIN32 && !(defined SLJIT_X86_32_FASTCALL && SLJIT_X86_32_FASTCALL)
226 		if (compiler->local_size > 1024)
227 			FAIL_IF(emit_cum_binary(compiler, BINARY_OPCODE(ADD),
228 				TMP_REG1, 0, TMP_REG1, 0, SLJIT_IMM, sizeof(sljit_sw)));
229 #endif
230 
231 		inst = (sljit_u8*)ensure_buf(compiler, 1 + 6);
232 		FAIL_IF(!inst);
233 
234 		INC_SIZE(6);
235 		inst[0] = GROUP_BINARY_81;
236 		inst[1] = MOD_REG | AND | reg_map[SLJIT_SP];
237 		sljit_unaligned_store_sw(inst + 2, ~(sizeof(sljit_f64) - 1));
238 
239 		/* The real local size must be used. */
240 		return emit_mov(compiler, SLJIT_MEM1(SLJIT_SP), compiler->local_size, TMP_REG1, 0);
241 	}
242 #endif
243 	return emit_non_cum_binary(compiler, BINARY_OPCODE(SUB),
244 		SLJIT_SP, 0, SLJIT_SP, 0, SLJIT_IMM, local_size);
245 }
246 
sljit_set_context(struct sljit_compiler * compiler,sljit_s32 options,sljit_s32 arg_types,sljit_s32 scratches,sljit_s32 saveds,sljit_s32 fscratches,sljit_s32 fsaveds,sljit_s32 local_size)247 SLJIT_API_FUNC_ATTRIBUTE sljit_s32 sljit_set_context(struct sljit_compiler *compiler,
248 	sljit_s32 options, sljit_s32 arg_types, sljit_s32 scratches, sljit_s32 saveds,
249 	sljit_s32 fscratches, sljit_s32 fsaveds, sljit_s32 local_size)
250 {
251 	CHECK_ERROR();
252 	CHECK(check_sljit_set_context(compiler, options, arg_types, scratches, saveds, fscratches, fsaveds, local_size));
253 	set_set_context(compiler, options, arg_types, scratches, saveds, fscratches, fsaveds, local_size);
254 
255 	compiler->args = get_arg_count(arg_types);
256 
257 	/* [esp+0] for saving temporaries and function calls. */
258 	compiler->stack_tmp_size = 2 * sizeof(sljit_sw);
259 
260 #if !(defined SLJIT_X86_32_FASTCALL && SLJIT_X86_32_FASTCALL)
261 	if (scratches > 3)
262 		compiler->stack_tmp_size = 3 * sizeof(sljit_sw);
263 #endif
264 
265 	compiler->saveds_offset = compiler->stack_tmp_size;
266 	if (scratches > 3)
267 		compiler->saveds_offset += ((scratches > (3 + 6)) ? 6 : (scratches - 3)) * sizeof(sljit_sw);
268 
269 	compiler->locals_offset = compiler->saveds_offset;
270 
271 	if (saveds > 3)
272 		compiler->locals_offset += (saveds - 3) * sizeof(sljit_sw);
273 
274 	if (options & SLJIT_F64_ALIGNMENT)
275 		compiler->locals_offset = (compiler->locals_offset + sizeof(sljit_f64) - 1) & ~(sizeof(sljit_f64) - 1);
276 
277 #if defined(__APPLE__)
278 	saveds = (2 + (scratches > 9 ? (scratches - 9) : 0) + (saveds <= 3 ? saveds : 3)) * sizeof(sljit_uw);
279 	compiler->local_size = ((SLJIT_LOCALS_OFFSET + saveds + local_size + 15) & ~15) - saveds;
280 #else
281 	if (options & SLJIT_F64_ALIGNMENT)
282 		compiler->local_size = SLJIT_LOCALS_OFFSET + ((local_size + sizeof(sljit_f64) - 1) & ~(sizeof(sljit_f64) - 1));
283 	else
284 		compiler->local_size = SLJIT_LOCALS_OFFSET + ((local_size + sizeof(sljit_sw) - 1) & ~(sizeof(sljit_sw) - 1));
285 #endif
286 	return SLJIT_SUCCESS;
287 }
288 
sljit_emit_return(struct sljit_compiler * compiler,sljit_s32 op,sljit_s32 src,sljit_sw srcw)289 SLJIT_API_FUNC_ATTRIBUTE sljit_s32 sljit_emit_return(struct sljit_compiler *compiler, sljit_s32 op, sljit_s32 src, sljit_sw srcw)
290 {
291 	sljit_s32 size;
292 	sljit_u8 *inst;
293 
294 	CHECK_ERROR();
295 	CHECK(check_sljit_emit_return(compiler, op, src, srcw));
296 	SLJIT_ASSERT(compiler->args >= 0);
297 
298 	FAIL_IF(emit_mov_before_return(compiler, op, src, srcw));
299 
300 	SLJIT_ASSERT(compiler->local_size > 0);
301 
302 #if !defined(__APPLE__)
303 	if (compiler->options & SLJIT_F64_ALIGNMENT)
304 		EMIT_MOV(compiler, SLJIT_SP, 0, SLJIT_MEM1(SLJIT_SP), compiler->local_size)
305 	else
306 		FAIL_IF(emit_cum_binary(compiler, BINARY_OPCODE(ADD),
307 			SLJIT_SP, 0, SLJIT_SP, 0, SLJIT_IMM, compiler->local_size));
308 #else
309 	FAIL_IF(emit_cum_binary(compiler, BINARY_OPCODE(ADD),
310 		SLJIT_SP, 0, SLJIT_SP, 0, SLJIT_IMM, compiler->local_size));
311 #endif
312 
313 	size = 2 + (compiler->scratches > 9 ? (compiler->scratches - 9) : 0) +
314 		(compiler->saveds <= 3 ? compiler->saveds : 3);
315 #if (defined SLJIT_X86_32_FASTCALL && SLJIT_X86_32_FASTCALL)
316 	if (compiler->args > 2)
317 		size += 2;
318 #endif
319 	inst = (sljit_u8*)ensure_buf(compiler, 1 + size);
320 	FAIL_IF(!inst);
321 
322 	INC_SIZE(size);
323 
324 	if (compiler->saveds > 0 || compiler->scratches > 11)
325 		POP_REG(reg_map[SLJIT_S0]);
326 	if (compiler->saveds > 1 || compiler->scratches > 10)
327 		POP_REG(reg_map[SLJIT_S1]);
328 	if (compiler->saveds > 2 || compiler->scratches > 9)
329 		POP_REG(reg_map[SLJIT_S2]);
330 	POP_REG(reg_map[TMP_REG1]);
331 #if (defined SLJIT_X86_32_FASTCALL && SLJIT_X86_32_FASTCALL)
332 	if (compiler->args > 2)
333 		RET_I16(sizeof(sljit_sw));
334 	else
335 		RET();
336 #else
337 	RET();
338 #endif
339 
340 	return SLJIT_SUCCESS;
341 }
342 
343 /* --------------------------------------------------------------------- */
344 /*  Operators                                                            */
345 /* --------------------------------------------------------------------- */
346 
347 /* Size contains the flags as well. */
emit_x86_instruction(struct sljit_compiler * compiler,sljit_s32 size,sljit_s32 a,sljit_sw imma,sljit_s32 b,sljit_sw immb)348 static sljit_u8* emit_x86_instruction(struct sljit_compiler *compiler, sljit_s32 size,
349 	/* The register or immediate operand. */
350 	sljit_s32 a, sljit_sw imma,
351 	/* The general operand (not immediate). */
352 	sljit_s32 b, sljit_sw immb)
353 {
354 	sljit_u8 *inst;
355 	sljit_u8 *buf_ptr;
356 	sljit_s32 flags = size & ~0xf;
357 	sljit_s32 inst_size;
358 
359 	/* Both cannot be switched on. */
360 	SLJIT_ASSERT((flags & (EX86_BIN_INS | EX86_SHIFT_INS)) != (EX86_BIN_INS | EX86_SHIFT_INS));
361 	/* Size flags not allowed for typed instructions. */
362 	SLJIT_ASSERT(!(flags & (EX86_BIN_INS | EX86_SHIFT_INS)) || (flags & (EX86_BYTE_ARG | EX86_HALF_ARG)) == 0);
363 	/* Both size flags cannot be switched on. */
364 	SLJIT_ASSERT((flags & (EX86_BYTE_ARG | EX86_HALF_ARG)) != (EX86_BYTE_ARG | EX86_HALF_ARG));
365 	/* SSE2 and immediate is not possible. */
366 	SLJIT_ASSERT(!(a & SLJIT_IMM) || !(flags & EX86_SSE2));
367 	SLJIT_ASSERT((flags & (EX86_PREF_F2 | EX86_PREF_F3)) != (EX86_PREF_F2 | EX86_PREF_F3)
368 		&& (flags & (EX86_PREF_F2 | EX86_PREF_66)) != (EX86_PREF_F2 | EX86_PREF_66)
369 		&& (flags & (EX86_PREF_F3 | EX86_PREF_66)) != (EX86_PREF_F3 | EX86_PREF_66));
370 	/* We don't support (%ebp). */
371 	SLJIT_ASSERT(!(b & SLJIT_MEM) || immb || reg_map[b & REG_MASK] != 5);
372 
373 	size &= 0xf;
374 	inst_size = size;
375 
376 	if (flags & (EX86_PREF_F2 | EX86_PREF_F3))
377 		inst_size++;
378 	if (flags & EX86_PREF_66)
379 		inst_size++;
380 
381 	/* Calculate size of b. */
382 	inst_size += 1; /* mod r/m byte. */
383 	if (b & SLJIT_MEM) {
384 		if ((b & REG_MASK) == SLJIT_UNUSED)
385 			inst_size += sizeof(sljit_sw);
386 		else if (immb != 0 && !(b & OFFS_REG_MASK)) {
387 			/* Immediate operand. */
388 			if (immb <= 127 && immb >= -128)
389 				inst_size += sizeof(sljit_s8);
390 			else
391 				inst_size += sizeof(sljit_sw);
392 		}
393 
394 		if ((b & REG_MASK) == SLJIT_SP && !(b & OFFS_REG_MASK))
395 			b |= TO_OFFS_REG(SLJIT_SP);
396 
397 		if ((b & OFFS_REG_MASK) != SLJIT_UNUSED)
398 			inst_size += 1; /* SIB byte. */
399 	}
400 
401 	/* Calculate size of a. */
402 	if (a & SLJIT_IMM) {
403 		if (flags & EX86_BIN_INS) {
404 			if (imma <= 127 && imma >= -128) {
405 				inst_size += 1;
406 				flags |= EX86_BYTE_ARG;
407 			} else
408 				inst_size += 4;
409 		}
410 		else if (flags & EX86_SHIFT_INS) {
411 			imma &= 0x1f;
412 			if (imma != 1) {
413 				inst_size ++;
414 				flags |= EX86_BYTE_ARG;
415 			}
416 		} else if (flags & EX86_BYTE_ARG)
417 			inst_size++;
418 		else if (flags & EX86_HALF_ARG)
419 			inst_size += sizeof(short);
420 		else
421 			inst_size += sizeof(sljit_sw);
422 	}
423 	else
424 		SLJIT_ASSERT(!(flags & EX86_SHIFT_INS) || a == SLJIT_PREF_SHIFT_REG);
425 
426 	inst = (sljit_u8*)ensure_buf(compiler, 1 + inst_size);
427 	PTR_FAIL_IF(!inst);
428 
429 	/* Encoding the byte. */
430 	INC_SIZE(inst_size);
431 	if (flags & EX86_PREF_F2)
432 		*inst++ = 0xf2;
433 	if (flags & EX86_PREF_F3)
434 		*inst++ = 0xf3;
435 	if (flags & EX86_PREF_66)
436 		*inst++ = 0x66;
437 
438 	buf_ptr = inst + size;
439 
440 	/* Encode mod/rm byte. */
441 	if (!(flags & EX86_SHIFT_INS)) {
442 		if ((flags & EX86_BIN_INS) && (a & SLJIT_IMM))
443 			*inst = (flags & EX86_BYTE_ARG) ? GROUP_BINARY_83 : GROUP_BINARY_81;
444 
445 		if (a & SLJIT_IMM)
446 			*buf_ptr = 0;
447 		else if (!(flags & EX86_SSE2_OP1))
448 			*buf_ptr = reg_map[a] << 3;
449 		else
450 			*buf_ptr = a << 3;
451 	}
452 	else {
453 		if (a & SLJIT_IMM) {
454 			if (imma == 1)
455 				*inst = GROUP_SHIFT_1;
456 			else
457 				*inst = GROUP_SHIFT_N;
458 		} else
459 			*inst = GROUP_SHIFT_CL;
460 		*buf_ptr = 0;
461 	}
462 
463 	if (!(b & SLJIT_MEM))
464 		*buf_ptr++ |= MOD_REG + ((!(flags & EX86_SSE2_OP2)) ? reg_map[b] : b);
465 	else if ((b & REG_MASK) != SLJIT_UNUSED) {
466 		if ((b & OFFS_REG_MASK) == SLJIT_UNUSED || (b & OFFS_REG_MASK) == TO_OFFS_REG(SLJIT_SP)) {
467 			if (immb != 0) {
468 				if (immb <= 127 && immb >= -128)
469 					*buf_ptr |= 0x40;
470 				else
471 					*buf_ptr |= 0x80;
472 			}
473 
474 			if ((b & OFFS_REG_MASK) == SLJIT_UNUSED)
475 				*buf_ptr++ |= reg_map[b & REG_MASK];
476 			else {
477 				*buf_ptr++ |= 0x04;
478 				*buf_ptr++ = reg_map[b & REG_MASK] | (reg_map[OFFS_REG(b)] << 3);
479 			}
480 
481 			if (immb != 0) {
482 				if (immb <= 127 && immb >= -128)
483 					*buf_ptr++ = immb; /* 8 bit displacement. */
484 				else {
485 					sljit_unaligned_store_sw(buf_ptr, immb); /* 32 bit displacement. */
486 					buf_ptr += sizeof(sljit_sw);
487 				}
488 			}
489 		}
490 		else {
491 			*buf_ptr++ |= 0x04;
492 			*buf_ptr++ = reg_map[b & REG_MASK] | (reg_map[OFFS_REG(b)] << 3) | (immb << 6);
493 		}
494 	}
495 	else {
496 		*buf_ptr++ |= 0x05;
497 		sljit_unaligned_store_sw(buf_ptr, immb); /* 32 bit displacement. */
498 		buf_ptr += sizeof(sljit_sw);
499 	}
500 
501 	if (a & SLJIT_IMM) {
502 		if (flags & EX86_BYTE_ARG)
503 			*buf_ptr = imma;
504 		else if (flags & EX86_HALF_ARG)
505 			sljit_unaligned_store_s16(buf_ptr, imma);
506 		else if (!(flags & EX86_SHIFT_INS))
507 			sljit_unaligned_store_sw(buf_ptr, imma);
508 	}
509 
510 	return !(flags & EX86_SHIFT_INS) ? inst : (inst + 1);
511 }
512 
513 /* --------------------------------------------------------------------- */
514 /*  Call / return instructions                                           */
515 /* --------------------------------------------------------------------- */
516 
517 #if (defined SLJIT_X86_32_FASTCALL && SLJIT_X86_32_FASTCALL)
518 
c_fast_call_get_stack_size(sljit_s32 arg_types,sljit_s32 * word_arg_count_ptr)519 static sljit_s32 c_fast_call_get_stack_size(sljit_s32 arg_types, sljit_s32 *word_arg_count_ptr)
520 {
521 	sljit_s32 stack_size = 0;
522 	sljit_s32 word_arg_count = 0;
523 
524 	arg_types >>= SLJIT_DEF_SHIFT;
525 
526 	while (arg_types) {
527 		switch (arg_types & SLJIT_DEF_MASK) {
528 		case SLJIT_ARG_TYPE_F32:
529 			stack_size += sizeof(sljit_f32);
530 			break;
531 		case SLJIT_ARG_TYPE_F64:
532 			stack_size += sizeof(sljit_f64);
533 			break;
534 		default:
535 			word_arg_count++;
536 			if (word_arg_count > 2)
537 				stack_size += sizeof(sljit_sw);
538 			break;
539 		}
540 
541 		arg_types >>= SLJIT_DEF_SHIFT;
542 	}
543 
544 	if (word_arg_count_ptr)
545 		*word_arg_count_ptr = word_arg_count;
546 
547 	return stack_size;
548 }
549 
c_fast_call_with_args(struct sljit_compiler * compiler,sljit_s32 arg_types,sljit_s32 stack_size,sljit_s32 word_arg_count,sljit_s32 swap_args)550 static sljit_s32 c_fast_call_with_args(struct sljit_compiler *compiler,
551 	sljit_s32 arg_types, sljit_s32 stack_size, sljit_s32 word_arg_count, sljit_s32 swap_args)
552 {
553 	sljit_u8 *inst;
554 	sljit_s32 float_arg_count;
555 
556 	if (stack_size == sizeof(sljit_sw) && word_arg_count == 3) {
557 		inst = (sljit_u8*)ensure_buf(compiler, 1 + 1);
558 		FAIL_IF(!inst);
559 		INC_SIZE(1);
560 		PUSH_REG(reg_map[SLJIT_R2]);
561 	}
562 	else if (stack_size > 0) {
563 		if (word_arg_count >= 4)
564 			EMIT_MOV(compiler, TMP_REG1, 0, SLJIT_MEM1(SLJIT_SP), compiler->saveds_offset - sizeof(sljit_sw));
565 
566 		FAIL_IF(emit_non_cum_binary(compiler, BINARY_OPCODE(SUB),
567 			SLJIT_SP, 0, SLJIT_SP, 0, SLJIT_IMM, stack_size));
568 
569 		stack_size = 0;
570 		arg_types >>= SLJIT_DEF_SHIFT;
571 		word_arg_count = 0;
572 		float_arg_count = 0;
573 		while (arg_types) {
574 			switch (arg_types & SLJIT_DEF_MASK) {
575 			case SLJIT_ARG_TYPE_F32:
576 				float_arg_count++;
577 				FAIL_IF(emit_sse2_store(compiler, 1, SLJIT_MEM1(SLJIT_SP), stack_size, float_arg_count));
578 				stack_size += sizeof(sljit_f32);
579 				break;
580 			case SLJIT_ARG_TYPE_F64:
581 				float_arg_count++;
582 				FAIL_IF(emit_sse2_store(compiler, 0, SLJIT_MEM1(SLJIT_SP), stack_size, float_arg_count));
583 				stack_size += sizeof(sljit_f64);
584 				break;
585 			default:
586 				word_arg_count++;
587 				if (word_arg_count == 3) {
588 					EMIT_MOV(compiler, SLJIT_MEM1(SLJIT_SP), stack_size, SLJIT_R2, 0);
589 					stack_size += sizeof(sljit_sw);
590 				}
591 				else if (word_arg_count == 4) {
592 					EMIT_MOV(compiler, SLJIT_MEM1(SLJIT_SP), stack_size, TMP_REG1, 0);
593 					stack_size += sizeof(sljit_sw);
594 				}
595 				break;
596 			}
597 
598 			arg_types >>= SLJIT_DEF_SHIFT;
599 		}
600 	}
601 
602 	if (word_arg_count > 0) {
603 		if (swap_args) {
604 			inst = (sljit_u8*)ensure_buf(compiler, 1 + 1);
605 			FAIL_IF(!inst);
606 			INC_SIZE(1);
607 
608 			*inst++ = XCHG_EAX_r | reg_map[SLJIT_R2];
609 		}
610 		else {
611 			inst = (sljit_u8*)ensure_buf(compiler, 1 + 2);
612 			FAIL_IF(!inst);
613 			INC_SIZE(2);
614 
615 			*inst++ = MOV_r_rm;
616 			*inst++ = MOD_REG | (reg_map[SLJIT_R2] << 3) | reg_map[SLJIT_R0];
617 		}
618 	}
619 
620 	return SLJIT_SUCCESS;
621 }
622 
623 #endif
624 
cdecl_call_get_stack_size(struct sljit_compiler * compiler,sljit_s32 arg_types,sljit_s32 * word_arg_count_ptr)625 static sljit_s32 cdecl_call_get_stack_size(struct sljit_compiler *compiler, sljit_s32 arg_types, sljit_s32 *word_arg_count_ptr)
626 {
627 	sljit_s32 stack_size = 0;
628 	sljit_s32 word_arg_count = 0;
629 
630 	arg_types >>= SLJIT_DEF_SHIFT;
631 
632 	while (arg_types) {
633 		switch (arg_types & SLJIT_DEF_MASK) {
634 		case SLJIT_ARG_TYPE_F32:
635 			stack_size += sizeof(sljit_f32);
636 			break;
637 		case SLJIT_ARG_TYPE_F64:
638 			stack_size += sizeof(sljit_f64);
639 			break;
640 		default:
641 			word_arg_count++;
642 			stack_size += sizeof(sljit_sw);
643 			break;
644 		}
645 
646 		arg_types >>= SLJIT_DEF_SHIFT;
647 	}
648 
649 	if (word_arg_count_ptr)
650 		*word_arg_count_ptr = word_arg_count;
651 
652 	if (stack_size <= compiler->stack_tmp_size)
653 		return 0;
654 
655 #if defined(__APPLE__)
656 	return ((stack_size - compiler->stack_tmp_size + 15) & ~15);
657 #else
658 	return stack_size - compiler->stack_tmp_size;
659 #endif
660 }
661 
cdecl_call_with_args(struct sljit_compiler * compiler,sljit_s32 arg_types,sljit_s32 stack_size,sljit_s32 word_arg_count)662 static sljit_s32 cdecl_call_with_args(struct sljit_compiler *compiler,
663 	sljit_s32 arg_types, sljit_s32 stack_size, sljit_s32 word_arg_count)
664 {
665 	sljit_s32 float_arg_count = 0;
666 
667 	if (word_arg_count >= 4)
668 		EMIT_MOV(compiler, TMP_REG1, 0, SLJIT_MEM1(SLJIT_SP), compiler->saveds_offset - sizeof(sljit_sw));
669 
670 	if (stack_size > 0)
671 		FAIL_IF(emit_non_cum_binary(compiler, BINARY_OPCODE(SUB),
672 			SLJIT_SP, 0, SLJIT_SP, 0, SLJIT_IMM, stack_size));
673 
674 	stack_size = 0;
675 	word_arg_count = 0;
676 	arg_types >>= SLJIT_DEF_SHIFT;
677 
678 	while (arg_types) {
679 		switch (arg_types & SLJIT_DEF_MASK) {
680 		case SLJIT_ARG_TYPE_F32:
681 			float_arg_count++;
682 			FAIL_IF(emit_sse2_store(compiler, 1, SLJIT_MEM1(SLJIT_SP), stack_size, float_arg_count));
683 			stack_size += sizeof(sljit_f32);
684 			break;
685 		case SLJIT_ARG_TYPE_F64:
686 			float_arg_count++;
687 			FAIL_IF(emit_sse2_store(compiler, 0, SLJIT_MEM1(SLJIT_SP), stack_size, float_arg_count));
688 			stack_size += sizeof(sljit_f64);
689 			break;
690 		default:
691 			word_arg_count++;
692 			EMIT_MOV(compiler, SLJIT_MEM1(SLJIT_SP), stack_size, (word_arg_count >= 4) ? TMP_REG1 : word_arg_count, 0);
693 			stack_size += sizeof(sljit_sw);
694 			break;
695 		}
696 
697 		arg_types >>= SLJIT_DEF_SHIFT;
698 	}
699 
700 	return SLJIT_SUCCESS;
701 }
702 
post_call_with_args(struct sljit_compiler * compiler,sljit_s32 arg_types,sljit_s32 stack_size)703 static sljit_s32 post_call_with_args(struct sljit_compiler *compiler,
704 	sljit_s32 arg_types, sljit_s32 stack_size)
705 {
706 	sljit_u8 *inst;
707 	sljit_s32 single;
708 
709 	if (stack_size > 0)
710 		FAIL_IF(emit_cum_binary(compiler, BINARY_OPCODE(ADD),
711 			SLJIT_SP, 0, SLJIT_SP, 0, SLJIT_IMM, stack_size));
712 
713 	if ((arg_types & SLJIT_DEF_MASK) < SLJIT_ARG_TYPE_F32)
714 		return SLJIT_SUCCESS;
715 
716 	single = ((arg_types & SLJIT_DEF_MASK) == SLJIT_ARG_TYPE_F32);
717 
718 	inst = (sljit_u8*)ensure_buf(compiler, 1 + 3);
719 	FAIL_IF(!inst);
720 	INC_SIZE(3);
721 	inst[0] = single ? FSTPS : FSTPD;
722 	inst[1] = (0x03 << 3) | 0x04;
723 	inst[2] = (0x04 << 3) | reg_map[SLJIT_SP];
724 
725 	return emit_sse2_load(compiler, single, SLJIT_FR0, SLJIT_MEM1(SLJIT_SP), 0);
726 }
727 
sljit_emit_call(struct sljit_compiler * compiler,sljit_s32 type,sljit_s32 arg_types)728 SLJIT_API_FUNC_ATTRIBUTE struct sljit_jump* sljit_emit_call(struct sljit_compiler *compiler, sljit_s32 type,
729 	sljit_s32 arg_types)
730 {
731 	struct sljit_jump *jump;
732 	sljit_s32 stack_size = 0;
733 	sljit_s32 word_arg_count;
734 
735 	CHECK_ERROR_PTR();
736 	CHECK_PTR(check_sljit_emit_call(compiler, type, arg_types));
737 
738 #if (defined SLJIT_X86_32_FASTCALL && SLJIT_X86_32_FASTCALL)
739 	if ((type & 0xff) == SLJIT_CALL) {
740 		stack_size = c_fast_call_get_stack_size(arg_types, &word_arg_count);
741 		PTR_FAIL_IF(c_fast_call_with_args(compiler, arg_types, stack_size, word_arg_count, 0));
742 
743 #if (defined SLJIT_VERBOSE && SLJIT_VERBOSE) \
744 		|| (defined SLJIT_ARGUMENT_CHECKS && SLJIT_ARGUMENT_CHECKS)
745 		compiler->skip_checks = 1;
746 #endif
747 
748 		jump = sljit_emit_jump(compiler, type);
749 		PTR_FAIL_IF(jump == NULL);
750 
751 		PTR_FAIL_IF(post_call_with_args(compiler, arg_types, 0));
752 		return jump;
753 	}
754 #endif
755 
756 	stack_size = cdecl_call_get_stack_size(compiler, arg_types, &word_arg_count);
757 	PTR_FAIL_IF(cdecl_call_with_args(compiler, arg_types, stack_size, word_arg_count));
758 
759 #if (defined SLJIT_VERBOSE && SLJIT_VERBOSE) \
760 		|| (defined SLJIT_ARGUMENT_CHECKS && SLJIT_ARGUMENT_CHECKS)
761 	compiler->skip_checks = 1;
762 #endif
763 
764 	jump = sljit_emit_jump(compiler, type);
765 	PTR_FAIL_IF(jump == NULL);
766 
767 	PTR_FAIL_IF(post_call_with_args(compiler, arg_types, stack_size));
768 	return jump;
769 }
770 
sljit_emit_icall(struct sljit_compiler * compiler,sljit_s32 type,sljit_s32 arg_types,sljit_s32 src,sljit_sw srcw)771 SLJIT_API_FUNC_ATTRIBUTE sljit_s32 sljit_emit_icall(struct sljit_compiler *compiler, sljit_s32 type,
772 	sljit_s32 arg_types,
773 	sljit_s32 src, sljit_sw srcw)
774 {
775 	sljit_s32 stack_size = 0;
776 	sljit_s32 word_arg_count;
777 #if (defined SLJIT_X86_32_FASTCALL && SLJIT_X86_32_FASTCALL)
778 	sljit_s32 swap_args;
779 #endif
780 
781 	CHECK_ERROR();
782 	CHECK(check_sljit_emit_icall(compiler, type, arg_types, src, srcw));
783 
784 #if (defined SLJIT_X86_32_FASTCALL && SLJIT_X86_32_FASTCALL)
785 	SLJIT_ASSERT(reg_map[SLJIT_R0] == 0 && reg_map[SLJIT_R2] == 1 && SLJIT_R0 == 1 && SLJIT_R2 == 3);
786 
787 	if ((type & 0xff) == SLJIT_CALL) {
788 		stack_size = c_fast_call_get_stack_size(arg_types, &word_arg_count);
789 		swap_args = 0;
790 
791 		if (word_arg_count > 0) {
792 			if ((src & REG_MASK) == SLJIT_R2 || OFFS_REG(src) == SLJIT_R2) {
793 				swap_args = 1;
794 				if (((src & REG_MASK) | 0x2) == SLJIT_R2)
795 					src ^= 0x2;
796 				if ((OFFS_REG(src) | 0x2) == SLJIT_R2)
797 					src ^= TO_OFFS_REG(0x2);
798 			}
799 		}
800 
801 		FAIL_IF(c_fast_call_with_args(compiler, arg_types, stack_size, word_arg_count, swap_args));
802 
803 		compiler->saveds_offset += stack_size;
804 		compiler->locals_offset += stack_size;
805 
806 #if (defined SLJIT_VERBOSE && SLJIT_VERBOSE) \
807 		|| (defined SLJIT_ARGUMENT_CHECKS && SLJIT_ARGUMENT_CHECKS)
808 		compiler->skip_checks = 1;
809 #endif
810 		FAIL_IF(sljit_emit_ijump(compiler, type, src, srcw));
811 
812 		compiler->saveds_offset -= stack_size;
813 		compiler->locals_offset -= stack_size;
814 
815 		return post_call_with_args(compiler, arg_types, 0);
816 	}
817 #endif
818 
819 	stack_size = cdecl_call_get_stack_size(compiler, arg_types, &word_arg_count);
820 	FAIL_IF(cdecl_call_with_args(compiler, arg_types, stack_size, word_arg_count));
821 
822 	compiler->saveds_offset += stack_size;
823 	compiler->locals_offset += stack_size;
824 
825 #if (defined SLJIT_VERBOSE && SLJIT_VERBOSE) \
826 		|| (defined SLJIT_ARGUMENT_CHECKS && SLJIT_ARGUMENT_CHECKS)
827 	compiler->skip_checks = 1;
828 #endif
829 	FAIL_IF(sljit_emit_ijump(compiler, type, src, srcw));
830 
831 	compiler->saveds_offset -= stack_size;
832 	compiler->locals_offset -= stack_size;
833 
834 	return post_call_with_args(compiler, arg_types, stack_size);
835 }
836 
sljit_emit_fast_enter(struct sljit_compiler * compiler,sljit_s32 dst,sljit_sw dstw)837 SLJIT_API_FUNC_ATTRIBUTE sljit_s32 sljit_emit_fast_enter(struct sljit_compiler *compiler, sljit_s32 dst, sljit_sw dstw)
838 {
839 	sljit_u8 *inst;
840 
841 	CHECK_ERROR();
842 	CHECK(check_sljit_emit_fast_enter(compiler, dst, dstw));
843 	ADJUST_LOCAL_OFFSET(dst, dstw);
844 
845 	CHECK_EXTRA_REGS(dst, dstw, (void)0);
846 
847 	/* For UNUSED dst. Uncommon, but possible. */
848 	if (dst == SLJIT_UNUSED)
849 		dst = TMP_REG1;
850 
851 	if (FAST_IS_REG(dst)) {
852 		/* Unused dest is possible here. */
853 		inst = (sljit_u8*)ensure_buf(compiler, 1 + 1);
854 		FAIL_IF(!inst);
855 
856 		INC_SIZE(1);
857 		POP_REG(reg_map[dst]);
858 		return SLJIT_SUCCESS;
859 	}
860 
861 	/* Memory. */
862 	inst = emit_x86_instruction(compiler, 1, 0, 0, dst, dstw);
863 	FAIL_IF(!inst);
864 	*inst++ = POP_rm;
865 	return SLJIT_SUCCESS;
866 }
867 
emit_fast_return(struct sljit_compiler * compiler,sljit_s32 src,sljit_sw srcw)868 static sljit_s32 emit_fast_return(struct sljit_compiler *compiler, sljit_s32 src, sljit_sw srcw)
869 {
870 	sljit_u8 *inst;
871 
872 	CHECK_EXTRA_REGS(src, srcw, (void)0);
873 
874 	if (FAST_IS_REG(src)) {
875 		inst = (sljit_u8*)ensure_buf(compiler, 1 + 1 + 1);
876 		FAIL_IF(!inst);
877 
878 		INC_SIZE(1 + 1);
879 		PUSH_REG(reg_map[src]);
880 	}
881 	else {
882 		inst = emit_x86_instruction(compiler, 1, 0, 0, src, srcw);
883 		FAIL_IF(!inst);
884 		*inst++ = GROUP_FF;
885 		*inst |= PUSH_rm;
886 
887 		inst = (sljit_u8*)ensure_buf(compiler, 1 + 1);
888 		FAIL_IF(!inst);
889 		INC_SIZE(1);
890 	}
891 
892 	RET();
893 	return SLJIT_SUCCESS;
894 }
895 
skip_frames_before_return(struct sljit_compiler * compiler)896 static sljit_s32 skip_frames_before_return(struct sljit_compiler *compiler)
897 {
898 	sljit_s32 size, saved_size;
899 	sljit_s32 has_f64_aligment;
900 
901 	/* Don't adjust shadow stack if it isn't enabled.  */
902 	if (!cpu_has_shadow_stack ())
903 		return SLJIT_SUCCESS;
904 
905 	SLJIT_ASSERT(compiler->args >= 0);
906 	SLJIT_ASSERT(compiler->local_size > 0);
907 
908 #if !defined(__APPLE__)
909 	has_f64_aligment = compiler->options & SLJIT_F64_ALIGNMENT;
910 #else
911 	has_f64_aligment = 0;
912 #endif
913 
914 	size = compiler->local_size;
915 	saved_size = (1 + (compiler->scratches > 9 ? (compiler->scratches - 9) : 0) + (compiler->saveds <= 3 ? compiler->saveds : 3)) * sizeof(sljit_uw);
916 	if (has_f64_aligment) {
917 		/* mov TMP_REG1, [esp + local_size].  */
918 		EMIT_MOV(compiler, TMP_REG1, 0, SLJIT_MEM1(SLJIT_SP), size);
919 		/* mov TMP_REG1, [TMP_REG1+ saved_size].  */
920 		EMIT_MOV(compiler, TMP_REG1, 0, SLJIT_MEM1(TMP_REG1), saved_size);
921 		/* Move return address to [esp]. */
922 		EMIT_MOV(compiler, SLJIT_MEM1(SLJIT_SP), 0, TMP_REG1, 0);
923 		size = 0;
924 	} else
925 		size += saved_size;
926 
927 	return adjust_shadow_stack(compiler, SLJIT_UNUSED, 0, SLJIT_SP, size);
928 }
929