//  aarch64-linux.elf-fold.S -- linkage to C code to process Elf binary
//
//  This file is part of the UPX executable compressor.
//
//  Copyright (C) 2000-2015 John F. Reiser
//  All Rights Reserved.
//
//  UPX and the UCL library are free software; you can redistribute them
//  and/or modify them under the terms of the GNU General Public License as
//  published by the Free Software Foundation; either version 2 of
//  the License, or (at your option) any later version.
//
//  This program is distributed in the hope that it will be useful,
//  but WITHOUT ANY WARRANTY; without even the implied warranty of
//  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
//  GNU General Public License for more details.
//
//  You should have received a copy of the GNU General Public License
//  along with this program; see the file COPYING.
//  If not, write to the Free Software Foundation, Inc.,
//  59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
//
//  Markus F.X.J. Oberhumer              Laszlo Molnar
//  <markus@oberhumer.com>               <ml1050@users.sourceforge.net>
//
//  John F. Reiser
//  <jreiser@users.sourceforge.net>
//

#define ARM_OLDABI 1
#include "arch/arm64/v8/macros.S"

sz_Elf64_Ehdr= 64
sz_Elf64_Phdr= 56
sz_l_info = 12
sz_p_info = 12
sz_b_info = 12
  sz_unc= 0
  sz_cpr= 4
  b_method= 8

MAP_PRIVATE=   0x02
MAP_FIXED=     0x10

PROT_READ=     0x1

O_RDONLY=       0

AT_FDCWD= -100

PAGE_SHIFT= 12
PAGE_SIZE = -(~0<<PAGE_SHIFT)

#ifndef DEBUG  /*{*/
#define DEBUG 0
#endif  /*}*/

//@ control just falls through, after this part and compiled C code
//@ are uncompressed.

#define OVERHEAD 2048
#define MAX_ELF_HDR 512

fold_begin:
////    brk #0  // DEBUG
/* In:
   r15= f_decompress
   r10= &b_info of first compressed block (after move)
    r9= total size of compressed data
    sp/ ADRU,LENU,sz_unc,MFLG, argc,argv...
*/
        POP4(x3,x4,x5,x8)  // x3= ADRU; x4= LENU; x5= sz_unc; x8= MFLG
        ldr x7,[sp,#0]  // argc
        mov x0,sp  // current stack pointer

        add x1,sp,#2*8  // skip argc and terminator of argv
        add x1,x1,x7,lsl #3  // skip argv
.L10:  // skip env
        ldr x2,[x1],#8
        cbnz x2,.L10
.L20:  // skip auxv
        ldr x2,[x1],#2*8
        cbnz x2,.L20  // AT_NULL

        sub x0,x1,#4096 // buffer for readlink
        sub x0,x0,#4  // space for copy of space3eq
        sub x1,x1,x0  // amount needed for argc,argv,env,auxv
        lsr x0,x0,#PAGE_SHIFT  // round down
        sub x0,x0,#1  // one page
        lsl x6,x0,#PAGE_SHIFT  // page address
        sub x0,x6,x1  // space for argc,argv,env,auxv
        sub x0,x0,#8  // room for added env ptr
        and x0,x0,#~0<<4  // sp must be 16-byte aligned
        add x1,sp,#8  // old_argv; avoid 0==argc impostor for terminator of argv
        mov sp,x0  // new_argc
        PUSH3(x3,x4,x5)  // ADRU, LENU, sz_unc
SP_sz_unc= 2*8
SP_argc= 4*8  // remember the hole from PUSH3

        str x7,[x0],#8  // argc

.Larg:  // copy argv
        ldr x2,[x1],#8
        str x2,[x0],#8
        cbnz x2,.Larg

.Lenv:  // copy env
        ldr x2,[x1],#8
        str x2,[x0],#8
        cbnz x2,.Lenv

        sub x4,x0,#8  // added env ptr goes here
        str x2,[x0],#8  // terminator after added ptr
        mov x7,x0  // new &Elf64_auxv_t

.Laux:  // copy auxv
        ldp x2,x3,[x1],#2*8  // .a_type, .a_val
        stp x2,x3,[x0],#2*8
        cbnz x2,.Laux  // AT_NULL

        str x0,[sp,#SP_sz_unc]  // clobber sz_unc with 1+ &Elf64_auxv_t[AT_NULL@.a_type]

        add x1,x6,#1<<PAGE_SHIFT  // after the mmap'ed page
        str x1,[x4]  // new env ptr
        ldr w2,space3eq
        str w2,[x1],#4  // "   =" of new env var

        mov w2,#4096-1  // buffer length and null terminator
        adr x0,proc_self_exe
        bl readlink
/* Preserve symlink /proc/self/exe by mapping one page into stack */
        adr x0,proc_self_exe
        mov w1,#O_RDONLY
        bl open  // no error check: cannot recover

        mov w4,w0  // fd
        mov x0,x6  // page address

        mov x5,#0  // offset
        mov w3,#MAP_PRIVATE|MAP_FIXED
        mov w2,#PROT_READ
        mov x1,#PAGE_SIZE
        bl mmap  // no error check: cannot recover
        mov w0,w4  // fd
        bl close

/* Construct arglist for upx_main */
        add x6,sp,#3*8  // &reloc
          sub sp,sp,#MAX_ELF_HDR + OVERHEAD  // alloca
        adr x5,f_unfilter
        mov x4,x15  // f_decompress
        mov x3,x7  // new &Elf64_auxv_t
        mov x2,sp  // ehdr
        mov w1,w9  // total size of compressed data
        mov x0,x10  // &b_info
        bl upx_main
          add sp,sp,#MAX_ELF_HDR + OVERHEAD  // un-alloca
        mov lr,x0  // entry address

        POP4(x0,x1,x2,x3)  // x0= ADRU; x1= LENU; x2= 1+ &Elf64_auxv_t[AT_NULL@.atype]; x3= reloc

#if DEBUG  /*{*/
        ldr x4,[x2,#8 -2*8]  // Elf64_auxv_t[AT_NULL@.a_type].a_val
        ldr w5,[x4,#0]  // 1st instr
        ldr w6,[x4,#4]  // 2nd instr
#define TRACE_REGS r0-r12,r14,r15
        stmdb sp!,{TRACE_REGS}; mov r0,#4; bl trace
#endif  /*}*/

        ldr x3,[x2,#8 -2*8]  // Elf64_auxv_t[AT_NULL@.a_type].a_val
        mov w8,#__NR_munmap
        br x3

space3eq:
        .ascii "   ="
proc_self_exe:
        .asciz "/proc/self/exe"
        .balign 4

f_unfilter:  // (char *ptr, uint len, uint cto, uint fid)
        ptr  .req x0
        len  .req x1
        lenw .req w1
        cto  .req w2  // unused
        fid  .req w3

        t1   .req w2
        t2   .req w3

#ifndef FILTER_ID  /*{*/
#define FILTER_ID 0x52  /* little-endian */
#endif  /*}*/
        and fid,fid,#0xff
        cmp fid,#FILTER_ID  // last use of fid
        bne unfret
        lsr len,len,#2  // word count
        cbz len,unfret
top_unf:
        sub len,len,#1
        ldr t1,[ptr,len,lsl #2]
        ubfx t2,t1,#26,#5
        cmp t2,#5; bne tst_unf  // not unconditional branch
        sub t2,t1,lenw  // word displ
        bfi t1,t2,#0,#26  // replace
        str t1,[ptr,len,lsl #2]
tst_unf:
        cbnz len,top_unf
unfret:
        ret

#if DEBUG  /*{*/
TRACE_BUFLEN=512
trace:
        str lr,[sp,#(-1+ 15)*4]  // return pc; [remember: sp is not stored]
        mov r4,sp  // &saved_r0
        sub sp,sp,#TRACE_BUFLEN
        mov r2,sp  // output string

        mov r1,#'\n'; bl trace_hex  // In: r0 as label
        mov r1,#'>';  strb r1,[r2],#1

        mov r5,#3  // rows to print
L600:  // each row
        sub r0,r4,#TRACE_BUFLEN
        sub r0,r0,sp
        mov r0,r0,lsr #2; mov r1,#'\n'; bl trace_hex  // which block of 8

        mov r6,#8  // words per row
L610:  // each word
        ldr r0,[r4],#4; mov r1,#' '; bl trace_hex  // next word
        subs r6,r6,#1; bgt L610

        subs r5,r5,#1; bgt L600

        mov r0,#'\n'; strb r0,[r2],#1
        sub r2,r2,sp  // count
        mov r1,sp  // buf
        mov r0,#2  // FD_STDERR
#if defined(ARMEL_EABI4)  /*{*/
        mov r7,#__NR_write
        swi 0
#else  /*}{*/
        swi __NR_write
#endif  /*}*/
        add sp,sp,#TRACE_BUFLEN
        ldmia sp!,{TRACE_REGS}

trace_hex:  // In: r0=val, r1=punctuation before, r2=ptr; Uses: r3, ip
        strb r1,[r2],#1  // punctuation
        mov r3,#4*(8 -1)  // shift count
        adr ip,hex
L620:
        mov r1,r0,lsr r3
        and r1,r1,#0xf
        ldrb r1,[ip, r1]
        strb r1,[r2],#1
        subs r3,r3,#4; bge L620
        ret
hex:
        .ascii "0123456789abcdef"
#endif  /*}*/
        .unreq ptr
        .unreq len
        .unreq cto
        .unreq fid

__NR_SYSCALL_BASE= 0

__NR_exit  = 0x5e + __NR_SYSCALL_BASE  // 94  exit_group
__NR_read  = 0x3f + __NR_SYSCALL_BASE  // 63
__NR_write = 0x40 + __NR_SYSCALL_BASE  // 64
__NR_open  = 0x38 + __NR_SYSCALL_BASE  // 56
__NR_close = 0x39 + __NR_SYSCALL_BASE  // 57
__NR_unlink= 0x23 + __NR_SYSCALL_BASE  // 35
__NR_getpid= 0xad + __NR_SYSCALL_BASE  // 172
__NR_brk   = 0xd6 + __NR_SYSCALL_BASE  // 214
__NR_readlink=0x4e+ __NR_SYSCALL_BASE  // 78


__NR_mmap     = 0xde + __NR_SYSCALL_BASE  // 222
__NR_mprotect = 0xe2 + __NR_SYSCALL_BASE  // 226
__NR_munmap   = 0xd7 + __NR_SYSCALL_BASE  // 215

__ARM_NR_BASE       = 0x0f0000 + __NR_SYSCALL_BASE
__ARM_NR_cacheflush = 2 + __ARM_NR_BASE

        .globl my_bkpt
my_bkpt:
        brk #0
        ret

        .globl exit
exit:
        do_sys __NR_exit

        .globl read
read:
        do_sys __NR_read; ret

        .globl write
write:
        do_sys __NR_write; ret

        .globl close
close:
        do_sys __NR_close; ret

        .globl getpid
getpid:
        do_sys __NR_getpid; ret

        .globl brk
brk:
        do_sys __NR_brk; ret

        .globl munmap
munmap:
        do_sys __NR_munmap; ret

        .globl mprotect
mprotect:
        do_sys __NR_mprotect; ret

bits_privanon= -4+ fold_begin  // entry stores: MAP_{PRIVATE|ANON}  QNX vs linux

mmap_privanon: .globl mmap_privanon
        ldr w6,bits_privanon  // r12 === ip
        mov x5,#0  // offset= 0
        mov x4,#-1  // fd= -1
        orr w3,w3,w6  // flags |= MAP_{PRIVATE|ANON}  [QNX vs Linux]
    // FALL THROUGH to mmap

        .globl mmap
mmap:
        do_sys __NR_mmap; ret

        .globl unlink
unlink:
        mov x1,#0  // flags as last arg
        mov w8,#__NR_unlink
        b svc_AT

        .globl open
open:
        mov w8,#__NR_open
svc_AT:
        //mov x4,x3
        mov x3,x2  // mode
        mov x2,x1  // flags
        mov x1,x0  // fname
        mov x0,#AT_FDCWD
        svc #0; ret

        .globl readlink
readlink:
        mov w8,#__NR_readlink
        mov x3,x2  // buflen
        mov x2,x1  // buffer
        mov x1,x0  // fname
        mov x0,#AT_FDCWD
        svc #0

        cmn x0,#4096; bcs 0f  // error
        mov w3,#0
        strb w3,[x2,x0]  // null terminate pathname
0:
        ret

        .globl __clear_cache
__clear_cache:
        hlt #0
        mov w2,#0
        do_sys 0; ret  // FIXME


#if DEBUG  /*{*/

div10: .globl div10
        mov x1,#10
        udiv x0,x0,x1
        ret
#endif  /*}*/

// vi:ts=8:et:nowrap

