Files
xenia-rs/migration/project-root/ppc-manual/branch/tdi.md
MechaCat02 e6d43a23ac chore: add migration/ bundle for cross-machine setup
Bundles state that lives OUTSIDE the xenia-rs repo so a fresh clone on
another machine can be brought up to identical configuration via
migration/setup.sh:

  - claude-memory/             ~/.claude/projects/-home-fabi-RE-Project-Sylpheed/memory/
                               (103 files, 1.1 MB - MEMORY.md + every
                                project_xenia_rs_*.md from audits
                                addis_signext through audit-058)
  - project-root/dot-claude/   <project-root>/.claude/settings.json
                               (Stop hook + permissions)
  - project-root/ppc-manual/   <project-root>/ppc-manual/
                               (PowerPC reference docs, 397 files, 3.7 MB)
  - project-root/run-canary.sh <project-root>/run-canary.sh
  - README.md                  Human-readable setup checklist
  - setup.sh                   Idempotent installer (also reclones
                               xenia-canary at pinned HEAD 6de80dffe)
  - MANIFEST.md                Per-file mapping + per-file-not-bundled
                               restoration recipe

Excluded from bundle (not shippable via git):
  - Sylpheed ISO (7.8 GB; copyright; manual copy required)
  - sylpheed.db (395 MB; regenerable from XEX via analysis tooling)
  - target/ build artifacts (rebuild on target)
  - audit-runs probe firehoses (.log/.stdout/.stderr ~11 GB; rerun if needed)
  - audit-runs memory dumps (.bin ~4.5 GB; rerun audit-026/027/029 if needed)
  - xenia-canary checkout (setup.sh reclones from
    git.mc02.dev/fabi/Xenia-Canary.git at HEAD 6de80dffe)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-10 21:38:38 +02:00

8.2 KiB
Raw Blame History

tdi — Trap Doubleword Immediate

Category: Branch & System · Form: D · Opcode: 0x08000000

Assembler Mnemonics

Mnemonic XML entry Flags Description
tdi tdi Trap Doubleword Immediate

Syntax

tdi [TO], [RA], [SIMM]

Encoding

tdi — form D

  • Opcode word: 0x08000000
  • Primary opcode (bits 05): 2
  • Extended opcode:
  • Synchronising: no
Bits Field Meaning
05 OPCD primary opcode
610 RT destination GPR (or RS when storing)
1115 RA source GPR (0 ⇒ literal 0 for RA0 forms)
1631 D/SI/UI 16-bit signed or unsigned immediate

Operands

Field Role Description
TO tdi: read Trap-on condition mask (5 bits) — LT, GT, EQ, LGT, LLT bits.
RA tdi: read Source GPR (r0r31).
SIMM tdi: read 16-bit signed immediate. Sign-extended to 64 bits before use.

Register Effects

tdi

  • Reads (always): TO, RA, SIMM
  • Reads (conditional): none
  • Writes (always): none
  • Writes (conditional): none

Status-Register Effects

No condition-register or status-register effects.

Operation (pseudocode)

; Pseudocode derives directly from the xenia-rs interpreter
; arm (see Implementation References). Operation semantics:
;   - Read source operands from the fields listed under Operands.
;   - Apply the arithmetic / logical / memory action described
;     in the Description field above.
;   - Write results to the destination register(s); update any
;     status bits enumerated under Status-Register Effects.
; Consult the IBM AIX reference link under IBM Reference for
; canonical PPC-style pseudocode where xenia's expression is
; terse.

C Translation Example

/* C translation: the xenia-rs interpreter arm below in           */
/* Implementation References is the authoritative semantic        */
/* snapshot. Translate it line-by-line:                            */
/*   - ctx.gpr[N]  -> r[N]       (or f[]/v[] for FPRs/VRs)        */
/*   - mem.read_u*/write_u* -> mem_read_u*_be / mem_write_u*_be   */
/*   - ctx.update_cr_signed(fld, v) -> update_cr_signed(fld, v)   */
/*   - ctx.xer_ca / xer_ov / xer_so -> xer.CA / xer.OV / xer.SO   */
/* The Register Effects and Status-Register Effects tables above  */
/* enumerate every side effect a faithful translation must emit.  */

Implementation References

tdi

xenia-rs interpreter body (frozen snapshot)
        PpcOpcode::tw | PpcOpcode::twi | PpcOpcode::td | PpcOpcode::tdi => {
            // PPCBUG-063: save CIA before incrementing so a trap handler reads
            // the faulting instruction address, not CIA+4.
            // PPCBUG-065: log the SIMM type code on `twi 31, r0, IMM` (Xbox 360
            // typed-trap convention used by the CRT/kernel for C++ exception
            // class dispatch). The audit notes this is relevant to the Sylpheed
            // throw investigation; routing the type code via a payload requires
            // a StepResult enum extension that's deferred for now.
            let trap_pc = ctx.pc;
            let a = ctx.gpr[instr.ra()];
            let b = match instr.opcode {
                PpcOpcode::twi | PpcOpcode::tdi => instr.simm16() as i64 as u64,
                _ => ctx.gpr[instr.rb()],
            };
            let width = match instr.opcode {
                PpcOpcode::tw | PpcOpcode::twi => trap::TrapWidth::Word,
                _ => trap::TrapWidth::Doubleword,
            };
            let fired = trap::evaluate(instr.to(), a, b, width);
            if fired {
                let typed_trap_simm = if matches!(instr.opcode, PpcOpcode::twi)
                    && instr.to() == 31 && instr.ra() == 0 {
                    Some(instr.simm16() as u16)
                } else { None };
                tracing::warn!(
                    "Trap fired at {:#010x}: {:?} TO={} a={:#x} b={:#x}{}",
                    trap_pc, instr.opcode, instr.to(), a, b,
                    typed_trap_simm.map_or(String::new(), |t| format!(" typed_trap_simm={:#06x}", t))
                );
                // Leave ctx.pc at CIA (NOT NIA) so trap handlers / SEH delivery
                // can read the faulting instruction address from ctx.pc.
                return StepResult::Trap;
            }
            ctx.pc += 4;
        }

Special Cases & Edge Conditions

  • Immediate is sign-extended. SIMM is treated as a 16-bit signed value, then sign-extended to 64 bits before comparison. To trap against a small unsigned constant, the same encoding works because both signed and unsigned interpretations agree for SIMM ∈ [0, 0x7FFF].
  • TO mask. Identical bit layout to td: bit 0 = signed LT, 1 = signed GT, 2 = EQ, 3 = unsigned LT (LGT), 4 = unsigned GT (LLT). Trap fires if any selected bit's condition is true.
  • TO = 31 is unconditional. tdi 31, 0, 0 is a debugger / assert trap. Compilers sometimes use it as a "should not reach" marker.
  • 64-bit comparison only. Unlike twi, tdi always compares the full 64-bit GPR — it has no PPC32 analogue. The Xenon's PPC64 mode makes this meaningful.
  • No register effects. Pure side effect on success: Program interrupt → vector 0x700 with SRR1[TRAP]=1.
  • xenia simplification. xenia-rs unconditionally treats tdi as a fired trap, regardless of TO/RA/SIMM values. This diverges from the spec — real hardware would silently fall through when no TO bit's condition holds. Most title code uses only the unconditional trap form, so the divergence is normally invisible; non-firing assertion patterns (e.g. tdi 0, r0, 0) will mis-fire under xenia.
  • Reserved bits. Bits 610 carry the TO field; there is no Rc / OE on D-form trap immediates.
  • td — register-register doubleword trap (X-form).
  • twi / tw — 32-bit-comparison siblings.
  • sc — kernel-entry counterpart via system call exception.
  • mtmsrd (control category) — kernel rfid-style return path after handling.

Simplified Mnemonics

Simplified Expansion Triggered when
tdi RA, value tdi 31, RA, value unconditional trap
tdeqi RA, value tdi 4, RA, value RA == EXTS(value)
tdnei RA, value tdi 24, RA, value RA != EXTS(value)
tdlti RA, value tdi 16, RA, value signed less than
tdlei RA, value tdi 20, RA, value signed less or equal
tdgti RA, value tdi 8, RA, value signed greater than
tdgei RA, value tdi 12, RA, value signed greater or equal
tdllti RA, value tdi 2, RA, value unsigned less than
tdlgei RA, value tdi 5, RA, value unsigned greater or equal
tdlgti RA, value tdi 1, RA, value unsigned greater than
tdllei RA, value tdi 6, RA, value unsigned less or equal

IBM Reference