/usr/src/sys/dev/acpi/dsdt.c

Bug Summary

File:	dev/acpi/dsdt.c
Warning:	line 4289, column 7 Access to field 'type' results in a dereference of a null pointer (loaded from variable 'rv')
Annotated Source Code

Press '?' to see keyboard shortcuts
Show analyzer invocation
clang -cc1 -cc1 -triple amd64-unknown-openbsd7.4 -analyze -disable-free -clear-ast-before-backend -disable-llvm-verifier -discard-value-names -main-file-name dsdt.c -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -setup-static-analyzer -mrelocation-model static -mframe-pointer=all -relaxed-aliasing -ffp-contract=on -fno-rounding-math -mconstructor-aliases -ffreestanding -mcmodel=kernel -target-cpu x86-64 -target-feature +retpoline-indirect-calls -target-feature +retpoline-indirect-branches -target-feature -sse2 -target-feature -sse -target-feature -3dnow -target-feature -mmx -target-feature +save-args -target-feature +retpoline-external-thunk -disable-red-zone -no-implicit-float -tune-cpu generic -debugger-tuning=gdb -fcoverage-compilation-dir=/usr/src/sys/arch/amd64/compile/GENERIC.MP/obj -nostdsysteminc -nobuiltininc -resource-dir /usr/local/llvm16/lib/clang/16 -I /usr/src/sys -I /usr/src/sys/arch/amd64/compile/GENERIC.MP/obj -I /usr/src/sys/arch -I /usr/src/sys/dev/pci/drm/include -I /usr/src/sys/dev/pci/drm/include/uapi -I /usr/src/sys/dev/pci/drm/amd/include/asic_reg -I /usr/src/sys/dev/pci/drm/amd/include -I /usr/src/sys/dev/pci/drm/amd/amdgpu -I /usr/src/sys/dev/pci/drm/amd/display -I /usr/src/sys/dev/pci/drm/amd/display/include -I /usr/src/sys/dev/pci/drm/amd/display/dc -I /usr/src/sys/dev/pci/drm/amd/display/amdgpu_dm -I /usr/src/sys/dev/pci/drm/amd/pm/inc -I /usr/src/sys/dev/pci/drm/amd/pm/legacy-dpm -I /usr/src/sys/dev/pci/drm/amd/pm/swsmu -I /usr/src/sys/dev/pci/drm/amd/pm/swsmu/inc -I /usr/src/sys/dev/pci/drm/amd/pm/swsmu/smu11 -I /usr/src/sys/dev/pci/drm/amd/pm/swsmu/smu12 -I /usr/src/sys/dev/pci/drm/amd/pm/swsmu/smu13 -I /usr/src/sys/dev/pci/drm/amd/pm/powerplay/inc -I /usr/src/sys/dev/pci/drm/amd/pm/powerplay/hwmgr -I /usr/src/sys/dev/pci/drm/amd/pm/powerplay/smumgr -I /usr/src/sys/dev/pci/drm/amd/pm/swsmu/inc -I /usr/src/sys/dev/pci/drm/amd/pm/swsmu/inc/pmfw_if -I /usr/src/sys/dev/pci/drm/amd/display/dc/inc -I /usr/src/sys/dev/pci/drm/amd/display/dc/inc/hw -I /usr/src/sys/dev/pci/drm/amd/display/dc/clk_mgr -I /usr/src/sys/dev/pci/drm/amd/display/modules/inc -I /usr/src/sys/dev/pci/drm/amd/display/modules/hdcp -I /usr/src/sys/dev/pci/drm/amd/display/dmub/inc -I /usr/src/sys/dev/pci/drm/i915 -D DDB -D DIAGNOSTIC -D KTRACE -D ACCOUNTING -D KMEMSTATS -D PTRACE -D POOL_DEBUG -D CRYPTO -D SYSVMSG -D SYSVSEM -D SYSVSHM -D UVM_SWAP_ENCRYPT -D FFS -D FFS2 -D FFS_SOFTUPDATES -D UFS_DIRHASH -D QUOTA -D EXT2FS -D MFS -D NFSCLIENT -D NFSSERVER -D CD9660 -D UDF -D MSDOSFS -D FIFO -D FUSE -D SOCKET_SPLICE -D TCP_ECN -D TCP_SIGNATURE -D INET6 -D IPSEC -D PPP_BSDCOMP -D PPP_DEFLATE -D PIPEX -D MROUTING -D MPLS -D BOOT_CONFIG -D USER_PCICONF -D APERTURE -D MTRR -D NTFS -D SUSPEND -D HIBERNATE -D PCIVERBOSE -D USBVERBOSE -D WSDISPLAY_COMPAT_USL -D WSDISPLAY_COMPAT_RAWKBD -D WSDISPLAY_DEFAULTSCREENS=6 -D X86EMU -D ONEWIREVERBOSE -D MULTIPROCESSOR -D MAXUSERS=80 -D _KERNEL -O2 -Wno-pointer-sign -Wno-address-of-packed-member -Wno-constant-conversion -Wno-unused-but-set-variable -Wno-gnu-folding-constant -fdebug-compilation-dir=/usr/src/sys/arch/amd64/compile/GENERIC.MP/obj -ferror-limit 19 -fwrapv -D_RET_PROTECTOR -ret-protector -fcf-protection=branch -fgnuc-version=4.2.1 -vectorize-loops -vectorize-slp -fno-builtin-malloc -fno-builtin-calloc -fno-builtin-realloc -fno-builtin-valloc -fno-builtin-free -fno-builtin-strdup -fno-builtin-strndup -analyzer-output=html -faddrsig -o /home/ben/Projects/scan/2024-01-11-110808-61670-1 -x c /usr/src/sys/dev/acpi/dsdt.c
1/* $OpenBSD: dsdt.c,v 1.265 2024/01/08 19:52:29 kettenis Exp $ */
2/*
* Copyright (c) 2005 Jordan Hargrave <jordan@openbsd.org>
*
* Permission to use, copy, modify, and distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
* copyright notice and this permission notice appear in all copies.
*
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/

18#include <sys/param.h>
19#include <sys/systm.h>
20#include <sys/kernel.h>
21#include <sys/device.h>
22#include <sys/malloc.h>
23#include <sys/time.h>

25#include <machine/bus.h>

27#ifdef DDB1
28#include <machine/db_machdep.h>
29#endif

31#include <dev/acpi/acpireg.h>
32#include <dev/acpi/acpivar.h>
33#include <dev/acpi/amltypes.h>
34#include <dev/acpi/dsdt.h>

36#include <dev/i2c/i2cvar.h>

38#ifdef SMALL_KERNEL
39#undef ACPI_DEBUG
40#endif

42#define opsize(opcode)(((opcode) & 0xFF00) ? 2 : 1) (((opcode) & 0xFF00) ? 2 : 1)

44#define AML_FIELD_RESERVED0x00	0x00
45#define AML_FIELD_ATTRIB0x01	0x01

47#define AML_REVISION0x01		0x01
48#define AML_INTSTRLEN16		16
49#define AML_NAMESEG_LEN4		4

51struct aml_value	*aml_loadtable(struct acpi_softc *, const char *,
	    const char *, const char *, const char *,
	    const char *, struct aml_value *);
54struct aml_scope	*aml_load(struct acpi_softc *, struct aml_scope *,
	    struct aml_value *, struct aml_value *);

57void			aml_copyvalue(struct aml_value *, struct aml_value *);

59void			aml_setvalue(struct aml_scope *, struct aml_value *,
	    struct aml_value *, int64_t);
61void			aml_freevalue(struct aml_value *);
62struct aml_value	*aml_allocvalue(int, int64_t, const void *);
63struct aml_value	*_aml_setvalue(struct aml_value *, int, int64_t,
	    const void *);

66uint64_t		aml_convradix(uint64_t, int, int);
67uint64_t		aml_evalexpr(uint64_t, uint64_t, int);
68int			aml_lsb(uint64_t);
69int			aml_msb(uint64_t);

71int			aml_tstbit(const uint8_t *, int);
72void			aml_setbit(uint8_t *, int, int);

74void			aml_addref(struct aml_value *, const char *);
75void			aml_delref(struct aml_value **, const char *);

77void			aml_bufcpy(void *, int, const void *, int, int);

79int			aml_pc(uint8_t *);

81struct aml_value	*aml_parseop(struct aml_scope *, struct aml_value *,int);
82struct aml_value	*aml_parsetarget(struct aml_scope *, struct aml_value *,
	    struct aml_value **);
84struct aml_value	*aml_parseterm(struct aml_scope *, struct aml_value *);

86struct aml_value	*aml_evaltarget(struct aml_scope *scope,
	    struct aml_value *res);
88int			aml_evalterm(struct aml_scope *scope,
	    struct aml_value *raw, struct aml_value *dst);

91struct aml_opcode	*aml_findopcode(int);

93#define acpi_os_malloc(sz)_acpi_os_malloc(sz, __FUNCTION__, 93) _acpi_os_malloc(sz, __FUNCTION__, __LINE__93)
94#define acpi_os_free(ptr)_acpi_os_free(ptr, __FUNCTION__, 94)  _acpi_os_free(ptr, __FUNCTION__, __LINE__94)

96void			*_acpi_os_malloc(size_t, const char *, int);
97void			_acpi_os_free(void *, const char *, int);
98void			acpi_stall(int);

100struct aml_value	*aml_callosi(struct aml_scope *, struct aml_value *);

102const char		*aml_getname(const char *);
103int64_t			aml_hextoint(const char *);
104void			aml_dump(int, uint8_t *);
105__dead__attribute__((__noreturn__)) void		_aml_die(const char *fn, int line, const char *fmt, ...);
106#define aml_die(x...)_aml_die(__FUNCTION__, 106, x...)	_aml_die(__FUNCTION__, __LINE__106, x)

108void aml_notify_task(void *, int);
109void acpi_poll_notify_task(void *, int);

111/*
* @@@: Global variables
*/
114int			aml_intlen = 64;
115struct aml_node		aml_root;
116struct aml_value	*aml_global_lock;

118/* Perfect Hash key */
119#define HASH_OFF6904		6904
120#define HASH_SIZE179		179
121#define HASH_KEY(k)(((k) ^ 6904) % 179)		(((k) ^ HASH_OFF6904) % HASH_SIZE179)

123/*
* XXX this array should be sorted, and then aml_findopcode() should
* do a binary search
*/
127struct aml_opcode **aml_ophash;
128struct aml_opcode aml_table[] = {
/* Simple types */
{ AMLOP_ZERO0x00,		"Zero",		"c",	},
{ AMLOP_ONE0x01,		"One",		"c",	},
{ AMLOP_ONES0xFF,		"Ones",		"c",	},
{ AMLOP_REVISION0x5B30,	"Revision",	"R",	},
{ AMLOP_BYTEPREFIX0x0A,	".Byte",	"b",	},
{ AMLOP_WORDPREFIX0x0B,	".Word",	"w",	},
{ AMLOP_DWORDPREFIX0x0C,	".DWord",	"d",	},
{ AMLOP_QWORDPREFIX0x0E,	".QWord",	"q",	},
{ AMLOP_STRINGPREFIX0x0D,	".String",	"a",	},
{ AMLOP_DEBUG0x5B31,		"DebugOp",	"D",	},
{ AMLOP_BUFFER0x11,		"Buffer",	"piB",	},
{ AMLOP_PACKAGE0x12,	"Package",	"pbT",	},
{ AMLOP_VARPACKAGE0x13,	"VarPackage",	"piT",	},

/* Simple objects */
{ AMLOP_LOCAL00x60,		"Local0",	"L",	},
{ AMLOP_LOCAL10x61,		"Local1",	"L",	},
{ AMLOP_LOCAL20x62,		"Local2",	"L",	},
{ AMLOP_LOCAL30x63,		"Local3",	"L",	},
{ AMLOP_LOCAL40x64,		"Local4",	"L",	},
{ AMLOP_LOCAL50x65,		"Local5",	"L",	},
{ AMLOP_LOCAL60x66,		"Local6",	"L",	},
{ AMLOP_LOCAL70x67,		"Local7",	"L",	},
{ AMLOP_ARG00x68,		"Arg0",		"A",	},
{ AMLOP_ARG10x69,		"Arg1",		"A",	},
{ AMLOP_ARG20x6A,		"Arg2",		"A",	},
{ AMLOP_ARG30x6B,		"Arg3",		"A",	},
{ AMLOP_ARG40x6C,		"Arg4",		"A",	},
{ AMLOP_ARG50x6D,		"Arg5",		"A",	},
{ AMLOP_ARG60x6E,		"Arg6",		"A",	},

/* Control flow */
{ AMLOP_IF0xA0,		"If",		"piI",	},
{ AMLOP_ELSE0xA1,		"Else",		"pT" },
{ AMLOP_WHILE0xA2,		"While",	"piT",	},
{ AMLOP_BREAK0xA5,		"Break",	"" },
{ AMLOP_CONTINUE0x9F,	"Continue",	"" },
{ AMLOP_RETURN0xA4,		"Return",	"t",	},
{ AMLOP_FATAL0x5B32,		"Fatal",	"bdi",	},
{ AMLOP_NOP0xA3,		"Nop",		"",	},
{ AMLOP_BREAKPOINT0xCC,	"BreakPoint",	"",     },

/* Arithmetic operations */
{ AMLOP_INCREMENT0x75,	"Increment",	"S",	},
{ AMLOP_DECREMENT0x76,	"Decrement",	"S",	},
{ AMLOP_ADD0x72,		"Add",		"iir",	},
{ AMLOP_SUBTRACT0x74,	"Subtract",	"iir",	},
{ AMLOP_MULTIPLY0x77,	"Multiply",	"iir",	},
{ AMLOP_DIVIDE0x78,		"Divide",	"iirr",	},
{ AMLOP_SHL0x79,		"ShiftLeft",	"iir",	},
{ AMLOP_SHR0x7A,		"ShiftRight",	"iir",	},
{ AMLOP_AND0x7B,		"And",		"iir",	},
{ AMLOP_NAND0x7C,		"Nand",		"iir",	},
{ AMLOP_OR0x7D,		"Or",		"iir",	},
{ AMLOP_NOR0x7E,		"Nor",		"iir",	},
{ AMLOP_XOR0x7F,		"Xor",		"iir",	},
{ AMLOP_NOT0x80,		"Not",		"ir",	},
{ AMLOP_MOD0x85,		"Mod",		"iir",	},
{ AMLOP_FINDSETLEFTBIT0x81,	"FindSetLeftBit", "ir",	},
{ AMLOP_FINDSETRIGHTBIT0x82,"FindSetRightBit", "ir",},

/* Logical test operations */
{ AMLOP_LAND0x90,		"LAnd",		"ii",	},
{ AMLOP_LOR0x91,		"LOr",		"ii",	},
{ AMLOP_LNOT0x92,		"LNot",		"i",	},
{ AMLOP_LNOTEQUAL0x9293,	"LNotEqual",	"tt",	},
{ AMLOP_LLESSEQUAL0x9294,	"LLessEqual",	"tt",	},
{ AMLOP_LGREATEREQUAL0x9295,	"LGreaterEqual", "tt",	},
{ AMLOP_LEQUAL0x93,		"LEqual",	"tt",	},
{ AMLOP_LGREATER0x94,	"LGreater",	"tt",	},
{ AMLOP_LLESS0x95,		"LLess",	"tt",	},

/* Named objects */
{ AMLOP_NAMECHAR0x5F,	".NameRef",	"n",	},
{ AMLOP_ALIAS0x06,		"Alias",	"nN",	},
{ AMLOP_NAME0x08,		"Name",	"Nt",	},
{ AMLOP_EVENT0x5B02,		"Event",	"N",	},
{ AMLOP_MUTEX0x5B01,		"Mutex",	"Nb",	},
{ AMLOP_DATAREGION0x5B88,	"DataRegion",	"Nttt",	},
{ AMLOP_OPREGION0x5B80,	"OpRegion",	"Nbii",	},
{ AMLOP_SCOPE0x10,		"Scope",	"pnT",	},
{ AMLOP_DEVICE0x5B82,		"Device",	"pNT",	},
{ AMLOP_POWERRSRC0x5B84,	"Power Resource", "pNbwT",},
{ AMLOP_THERMALZONE0x5B85,	"ThermalZone",	"pNT",	},
{ AMLOP_PROCESSOR0x5B83,	"Processor",	"pNbdbT", },
{ AMLOP_METHOD0x14,		"Method",	"pNbM",	},

/* Field operations */
{ AMLOP_FIELD0x5B81,		"Field",	"pnbF",	},
{ AMLOP_INDEXFIELD0x5B86,	"IndexField",	"pnnbF",},
{ AMLOP_BANKFIELD0x5B87,	"BankField",	"pnnibF",},
{ AMLOP_CREATEFIELD0x5B13,	"CreateField",	"tiiN",		},
{ AMLOP_CREATEQWORDFIELD0x8F, "CreateQWordField","tiN",},
{ AMLOP_CREATEDWORDFIELD0x8A, "CreateDWordField","tiN",},
{ AMLOP_CREATEWORDFIELD0x8B, "CreateWordField", "tiN",},
{ AMLOP_CREATEBYTEFIELD0x8C, "CreateByteField", "tiN",},
{ AMLOP_CREATEBITFIELD0x8D,	"CreateBitField", "tiN",	},

/* Conversion operations */
{ AMLOP_TOINTEGER0x99,	"ToInteger",	"tr",	},
{ AMLOP_TOBUFFER0x96,	"ToBuffer",	"tr",	},
{ AMLOP_TODECSTRING0x97,	"ToDecString",	"tr",	},
{ AMLOP_TOHEXSTRING0x98,	"ToHexString",	"tr",	},
{ AMLOP_TOSTRING0x9C,	"ToString",	"tir",	},
{ AMLOP_MID0x9E,		"Mid",		"tiir",	},
{ AMLOP_FROMBCD0x5B28,	"FromBCD",	"ir",	},
{ AMLOP_TOBCD0x5B29,		"ToBCD",	"ir",	},

/* Mutex/Signal operations */
{ AMLOP_ACQUIRE0x5B23,	"Acquire",	"Sw",	},
{ AMLOP_RELEASE0x5B27,	"Release",	"S",	},
{ AMLOP_SIGNAL0x5B24,		"Signal",	"S",	},
{ AMLOP_WAIT0x5B25,		"Wait",		"Si",	},
{ AMLOP_RESET0x5B26,		"Reset",	"S",	},

{ AMLOP_INDEX0x88,		"Index",	"tir",	},
{ AMLOP_DEREFOF0x83,	"DerefOf",	"t",	},
{ AMLOP_REFOF0x71,		"RefOf",	"S",	},
{ AMLOP_CONDREFOF0x5B12,	"CondRef",	"Sr",	},

{ AMLOP_LOADTABLE0x5B1F,	"LoadTable",	"tttttt" },
{ AMLOP_STALL0x5B21,		"Stall",	"i",	},
{ AMLOP_SLEEP0x5B22,		"Sleep",	"i",	},
{ AMLOP_TIMER0x5B33,		"Timer",	"",	},
{ AMLOP_LOAD0x5B20,		"Load",		"nS",	},
{ AMLOP_UNLOAD0x5B2A,		"Unload",	"t" },
{ AMLOP_STORE0x70,		"Store",	"tS",	},
{ AMLOP_CONCAT0x73,		"Concat",	"ttr",	},
{ AMLOP_CONCATRES0x84,	"ConcatRes",	"ttt" },
{ AMLOP_NOTIFY0x86,		"Notify",	"Si",	},
{ AMLOP_SIZEOF0x87,		"Sizeof",	"S",	},
{ AMLOP_MATCH0x89,		"Match",	"tbibii", },
{ AMLOP_OBJECTTYPE0x8E,	"ObjectType",	"S",	},
{ AMLOP_COPYOBJECT0x9D,	"CopyObject",	"tS",	},
264};

266int aml_pc(uint8_t *src)
267{
return src - aml_root.start;
9
←
Returning without writing to '*src', which participates in a condition later→
269}

271struct aml_scope *aml_lastscope;

273void
274_aml_die(const char *fn, int line, const char *fmt, ...)
275{
276#ifndef SMALL_KERNEL
struct aml_scope *root;
struct aml_value *sp;
int idx;
280#endif /* SMALL_KERNEL */
va_list ap;

va_start(ap, fmt)__builtin_va_start((ap), fmt);
vprintf(fmt, ap);
printf("\n");
va_end(ap)__builtin_va_end((ap));

288#ifndef SMALL_KERNEL
for (root = aml_lastscope; root && root->pos; root = root->parent) {
printf("%.4x Called: %s\n", aml_pc(root->pos),
    aml_nodename(root->node));
for (idx = 0; idx < AML_MAX_ARG7; idx++) {
	sp = aml_getstack(root, AMLOP_ARG00x68+idx);
	if (sp && sp->type) {
		printf("  arg%d: ", idx);
		aml_showvalue(sp);
	}
}
for (idx = 0; idx < AML_MAX_LOCAL8; idx++) {
	sp = aml_getstack(root, AMLOP_LOCAL00x60+idx);
	if (sp && sp->type) {
		printf("  local%d: ", idx);
		aml_showvalue(sp);
	}
}
}
307#endif /* SMALL_KERNEL */

/* XXX: don't panic */
panic("aml_die %s:%d", fn, line);
311}

313void
314aml_hashopcodes(void)
315{
int i;

/* Dynamically allocate hash table */
aml_ophash = (struct aml_opcode **)acpi_os_malloc(HASH_SIZE *_acpi_os_malloc(179 * sizeof(struct aml_opcode *), __FUNCTION__
, 320)
   sizeof(struct aml_opcode *))_acpi_os_malloc(179 * sizeof(struct aml_opcode *), __FUNCTION__
, 320);
for (i = 0; i < sizeof(aml_table) / sizeof(aml_table[0]); i++)
aml_ophash[HASH_KEY(aml_table[i].opcode)(((aml_table[i].opcode) ^ 6904) % 179)] = &aml_table[i];
323}

325struct aml_opcode *
326aml_findopcode(int opcode)
327{
struct aml_opcode *hop;

hop = aml_ophash[HASH_KEY(opcode)(((opcode) ^ 6904) % 179)];
if (hop && hop->opcode == opcode)
20
←
Assuming 'hop' is non-null→
21
←
Assuming 'opcode' is equal to field 'opcode', which participates in a condition later→
22
←
Taking true branch→
return hop;
return NULL((void *)0);
334}

336#if defined(DDB1) || !defined(SMALL_KERNEL)
337const char *
338aml_mnem(int opcode, uint8_t *pos)
339{
struct aml_opcode *tab;
static char mnemstr[32];

if ((tab = aml_findopcode(opcode)) != NULL((void *)0)) {
strlcpy(mnemstr, tab->mnem, sizeof(mnemstr));
if (pos != NULL((void *)0)) {
	switch (opcode) {
	case AMLOP_STRINGPREFIX0x0D:
		snprintf(mnemstr, sizeof(mnemstr), "\"%s\"", pos);
		break;
	case AMLOP_BYTEPREFIX0x0A:
		snprintf(mnemstr, sizeof(mnemstr), "0x%.2x",
			 *(uint8_t *)pos);
		break;
	case AMLOP_WORDPREFIX0x0B:
		snprintf(mnemstr, sizeof(mnemstr), "0x%.4x",
			 *(uint16_t *)pos);
		break;
	case AMLOP_DWORDPREFIX0x0C:
		snprintf(mnemstr, sizeof(mnemstr), "0x%.4x",
			 *(uint16_t *)pos);
		break;
	case AMLOP_NAMECHAR0x5F:
		strlcpy(mnemstr, aml_getname(pos), sizeof(mnemstr));
		break;
	}
}
return mnemstr;
}
return ("xxx");
370}
371#endif /* defined(DDB) || !defined(SMALL_KERNEL) */

373struct aml_notify_data {
struct aml_node		*node;
char			pnpid[20];
void			*cbarg;
int			(*cbproc)(struct aml_node *, int, void *);
int			poll;

SLIST_ENTRY(aml_notify_data)struct { struct aml_notify_data *sle_next; } link;
381};

383SLIST_HEAD(aml_notify_head, aml_notify_data)struct aml_notify_head { struct aml_notify_data *slh_first; };
384struct aml_notify_head aml_notify_list =
  SLIST_HEAD_INITIALIZER(aml_notify_list){ ((void *)0) };

387/*
*  @@@: Memory management functions
*/

391long acpi_nalloc;

393struct acpi_memblock {
size_t size;
395#ifdef ACPI_MEMDEBUG
const char *fn;
int         line;
int         sig;
LIST_ENTRY(acpi_memblock)struct { struct acpi_memblock *le_next; struct acpi_memblock *
*le_prev; } link;
400#endif
401};

403#ifdef ACPI_MEMDEBUG
404LIST_HEAD(, acpi_memblock)struct { struct acpi_memblock *lh_first; }	acpi_memhead;
405int				acpi_memsig;

407int
408acpi_walkmem(int sig, const char *lbl)
409{
struct acpi_memblock *sptr;

printf("--- walkmem:%s %x --- %lx bytes alloced\n", lbl, sig,
   acpi_nalloc);
LIST_FOREACH(sptr, &acpi_memhead, link)for((sptr) = ((&acpi_memhead)->lh_first); (sptr)!= ((void
 *)0); (sptr) = ((sptr)->link.le_next)) {
if (sptr->sig < sig)
	break;
printf("%.4x Alloc %.8lx bytes @ %s:%d\n",
	sptr->sig, sptr->size, sptr->fn, sptr->line);
}
return acpi_memsig;
421}
422#endif /* ACPI_MEMDEBUG */

424void *
425_acpi_os_malloc(size_t size, const char *fn, int line)
426{
struct acpi_memblock *sptr;

sptr = malloc(size+sizeof(*sptr), M_ACPI33, M_WAITOK0x0001 | M_ZERO0x0008);
dnprintf(99, "alloc: %p %s:%d\n", sptr, fn, line);
acpi_nalloc += size;
sptr->size = size;
433#ifdef ACPI_MEMDEBUG
sptr->line = line;
sptr->fn = fn;
sptr->sig = ++acpi_memsig;

LIST_INSERT_HEAD(&acpi_memhead, sptr, link)do { if (((sptr)->link.le_next = (&acpi_memhead)->lh_first
) != ((void *)0)) (&acpi_memhead)->lh_first->link.le_prev
 = &(sptr)->link.le_next; (&acpi_memhead)->lh_first
 = (sptr); (sptr)->link.le_prev = &(&acpi_memhead)
->lh_first; } while (0);
439#endif

return &sptr[1];
442}

444void
445_acpi_os_free(void *ptr, const char *fn, int line)
446{
struct acpi_memblock *sptr;

if (ptr != NULL((void *)0)) {
sptr = &(((struct acpi_memblock *)ptr)[-1]);
acpi_nalloc -= sptr->size;

453#ifdef ACPI_MEMDEBUG
LIST_REMOVE(sptr, link)do { if ((sptr)->link.le_next != ((void *)0)) (sptr)->link
.le_next->link.le_prev = (sptr)->link.le_prev; *(sptr)->
link.le_prev = (sptr)->link.le_next; ((sptr)->link.le_prev
) = ((void *)-1); ((sptr)->link.le_next) = ((void *)-1); }
 while (0);
455#endif

dnprintf(99, "free: %p %s:%d\n", sptr, fn, line);
free(sptr, M_ACPI33, sizeof(*sptr) + sptr->size);
}
460}

462void
463acpi_sleep(int ms, char *reason)
464{
static int acpinowait;

/* XXX ACPI integers are supposed to be unsigned. */
ms = MAX(1, ms)(((1)>(ms))?(1):(ms));

if (cold)
delay(ms * 1000)(*delay_func)(ms * 1000);
else
tsleep_nsec(&acpinowait, PWAIT32, reason, MSEC_TO_NSEC(ms));
474}

476void
477acpi_stall(int us)
478{
delay(us)(*delay_func)(us);
480}

482/*
* @@@: Misc utility functions
*/

486#ifdef ACPI_DEBUG
487void
488aml_dump(int len, uint8_t *buf)
489{
int		idx;

dnprintf(50, "{ ");
for (idx = 0; idx < len; idx++) {
dnprintf(50, "%s0x%.2x", idx ? ", " : "", buf[idx]);
}
dnprintf(50, " }\n");
497}
498#endif

500/* Bit mangling code */
501int
502aml_tstbit(const uint8_t *pb, int bit)
503{
pb += aml_bytepos(bit)((bit)>>3);

return (*pb & aml_bitmask(bit)(1L << ((bit) & 0x7)));
507}

509void
510aml_setbit(uint8_t *pb, int bit, int val)
511{
pb += aml_bytepos(bit)((bit)>>3);

if (val)
*pb |= aml_bitmask(bit)(1L << ((bit) & 0x7));
else
*pb &= ~aml_bitmask(bit)(1L << ((bit) & 0x7));
518}

520/*
* @@@: Notify functions
*/
523void
524acpi_poll(void *arg)
525{
int s;

s = splbio()splraise(0x3);
acpi_addtask(acpi_softc, acpi_poll_notify_task, NULL((void *)0), 0);
acpi_softc->sc_threadwaiting = 0;
wakeup(acpi_softc);
splx(s)spllower(s);

timeout_add_sec(&acpi_softc->sc_dev_timeout, 10);
535}

537void
538aml_notify_task(void *node, int notify_value)
539{
struct aml_notify_data	*pdata = NULL((void *)0);

dnprintf(10,"run notify: %s %x\n", aml_nodename(node), notify_value);
SLIST_FOREACH(pdata, &aml_notify_list, link)for((pdata) = ((&aml_notify_list)->slh_first); (pdata)
 != ((void *)0); (pdata) = ((pdata)->link.sle_next))
if (pdata->node == node)
	pdata->cbproc(pdata->node, notify_value, pdata->cbarg);
546}

548void
549aml_register_notify(struct aml_node *node, const char *pnpid,
  int (*proc)(struct aml_node *, int, void *), void *arg, int poll)
551{
struct aml_notify_data	*pdata;
extern int acpi_poll_enabled;

dnprintf(10, "aml_register_notify: %s %s %p\n",
   node->name, pnpid ? pnpid : "", proc);

pdata = acpi_os_malloc(sizeof(struct aml_notify_data))_acpi_os_malloc(sizeof(struct aml_notify_data), __FUNCTION__,
 558);
pdata->node = node;
pdata->cbarg = arg;
pdata->cbproc = proc;
pdata->poll = poll;

if (pnpid)
strlcpy(pdata->pnpid, pnpid, sizeof(pdata->pnpid));

SLIST_INSERT_HEAD(&aml_notify_list, pdata, link)do { (pdata)->link.sle_next = (&aml_notify_list)->slh_first
; (&aml_notify_list)->slh_first = (pdata); } while (0);

if (poll && !acpi_poll_enabled)
timeout_add_sec(&acpi_softc->sc_dev_timeout, 10);
571}

573void
574aml_notify(struct aml_node *node, int notify_value)
575{
if (node == NULL((void *)0))
return;

dnprintf(10,"queue notify: %s %x\n", aml_nodename(node), notify_value);
acpi_addtask(acpi_softc, aml_notify_task, node, notify_value);
581}

583void
584aml_notify_dev(const char *pnpid, int notify_value)
585{
struct aml_notify_data	*pdata = NULL((void *)0);

if (pnpid == NULL((void *)0))
return;

SLIST_FOREACH(pdata, &aml_notify_list, link)for((pdata) = ((&aml_notify_list)->slh_first); (pdata)
 != ((void *)0); (pdata) = ((pdata)->link.sle_next))
if (strcmp(pdata->pnpid, pnpid) == 0)
	pdata->cbproc(pdata->node, notify_value, pdata->cbarg);
594}

596void
597acpi_poll_notify_task(void *arg0, int arg1)
598{
struct aml_notify_data	*pdata = NULL((void *)0);

SLIST_FOREACH(pdata, &aml_notify_list, link)for((pdata) = ((&aml_notify_list)->slh_first); (pdata)
 != ((void *)0); (pdata) = ((pdata)->link.sle_next))
if (pdata->cbproc && pdata->poll)
	pdata->cbproc(pdata->node, 0, pdata->cbarg);
604}

606/*
* @@@: Namespace functions
*/

610struct aml_node *__aml_search(struct aml_node *, uint8_t *, int);
611struct aml_node *__aml_searchname(struct aml_node *, const void *, int);
612void aml_delchildren(struct aml_node *);


615/* Search for a name in children nodes */
616struct aml_node *
617__aml_search(struct aml_node *root, uint8_t *nameseg, int create)
618{
struct aml_node *node;

/* XXX: Replace with SLIST/SIMPLEQ routines */
if (root == NULL((void *)0))
return NULL((void *)0);
SIMPLEQ_FOREACH(node, &root->son, sib)for((node) = ((&root->son)->sqh_first); (node) != (
(void *)0); (node) = ((node)->sib.sqe_next)) {
if (!strncmp(node->name, nameseg, AML_NAMESEG_LEN4))
	return node;
}
if (create) {
node = acpi_os_malloc(sizeof(struct aml_node))_acpi_os_malloc(sizeof(struct aml_node), __FUNCTION__, 629);
memcpy((void *)node->name, nameseg, AML_NAMESEG_LEN)__builtin_memcpy(((void *)node->name), (nameseg), (4));
node->value = aml_allocvalue(0,0,NULL((void *)0));
node->value->node = node;
node->parent = root;

SIMPLEQ_INIT(&node->son)do { (&node->son)->sqh_first = ((void *)0); (&node
->son)->sqh_last = &(&node->son)->sqh_first
; } while (0);
SIMPLEQ_INSERT_TAIL(&root->son, node, sib)do { (node)->sib.sqe_next = ((void *)0); *(&root->son
)->sqh_last = (node); (&root->son)->sqh_last = &
(node)->sib.sqe_next; } while (0);
return node;
}
return NULL((void *)0);
640}

642/* Get absolute pathname of AML node */
643const char *
644aml_nodename(struct aml_node *node)
645{
static char namebuf[128];

namebuf[0] = 0;
if (node) {
aml_nodename(node->parent);
if (node->parent != &aml_root)
	strlcat(namebuf, ".", sizeof(namebuf));
strlcat(namebuf, node->name, sizeof(namebuf));
return namebuf+1;
}
return namebuf;
657}

659const char *
660aml_getname(const char *name)
661{
static char namebuf[128], *p;
int count;

p = namebuf;
while (*name == AMLOP_ROOTCHAR0x5C || *name == AMLOP_PARENTPREFIX0x5E)
*(p++) = *(name++);
switch (*name) {
case 0x00:
count = 0;
break;
case AMLOP_MULTINAMEPREFIX0x2F:
count = name[1];
name += 2;
break;
case AMLOP_DUALNAMEPREFIX0x2E:
count = 2;
name += 1;
break;
default:
count = 1;
}
while (count--) {
memcpy(p, name, 4)__builtin_memcpy((p), (name), (4));
p[4] = '.';
p += 5;
name += 4;
if (*name == '.') name++;
}
*(--p) = 0;
return namebuf;
692}

694/* Free all children nodes/values */
695void
696aml_delchildren(struct aml_node *node)
697{
struct aml_node *onode;

if (node == NULL((void *)0))
return;
while ((onode = SIMPLEQ_FIRST(&node->son)((&node->son)->sqh_first)) != NULL((void *)0)) {
SIMPLEQ_REMOVE_HEAD(&node->son, sib)do { if (((&node->son)->sqh_first = (&node->
son)->sqh_first->sib.sqe_next) == ((void *)0)) (&node
->son)->sqh_last = &(&node->son)->sqh_first
; } while (0);

aml_delchildren(onode);

/* Don't delete values that have references */
if (onode->value && onode->value->refcnt > 1)
	onode->value->node = NULL((void *)0);

/* Decrease reference count */
aml_delref(&onode->value, "");

/* Delete node */
acpi_os_free(onode)_acpi_os_free(onode, __FUNCTION__, 715);
}
717}

719/*
* @@@: Value functions
*/

723/*
* Field I/O code
*/
726void aml_unlockfield(struct aml_scope *, struct aml_value *);
727void aml_lockfield(struct aml_scope *, struct aml_value *);

729static long global_lock_count = 0;

731void
732acpi_glk_enter(void)
733{
int st = 0;

/* If lock is already ours, just continue. */
if (global_lock_count++)
return;

/* Spin to acquire the lock. */
while (!st) {
st = acpi_acquire_glk(&acpi_softc->sc_facs->global_lock);
/* XXX - yield/delay? */
}
745}

747void
748acpi_glk_leave(void)
749{
int st, x;

/* If we are the last one, turn out the lights. */
if (--global_lock_count)
return;

st = acpi_release_glk(&acpi_softc->sc_facs->global_lock);
if (!st)
return;

/*
* If pending, notify the BIOS that the lock was released by
* OSPM.  No locking is needed because nobody outside the ACPI
* thread is supposed to touch this register.
*/
x = acpi_read_pmreg(acpi_softc, ACPIREG_PM1_CNT0x10, 0);
x |= ACPI_PM1_GBL_RLS0x0004;
acpi_write_pmreg(acpi_softc, ACPIREG_PM1_CNT0x10, 0, x);
768}

770void
771aml_lockfield(struct aml_scope *scope, struct aml_value *field)
772{
if (AML_FIELD_LOCK(field->v_field.flags)(((field->_.vfield.flags) >> 4) & 0x1) != AML_FIELD_LOCK_ON0x1)
return;

acpi_glk_enter();
777}

779void
780aml_unlockfield(struct aml_scope *scope, struct aml_value *field)
781{
if (AML_FIELD_LOCK(field->v_field.flags)(((field->_.vfield.flags) >> 4) & 0x1) != AML_FIELD_LOCK_ON0x1)
return;

acpi_glk_leave();
786}

788/*
* @@@: Value set/compare/alloc/free routines
*/

792#ifndef SMALL_KERNEL
793void
794aml_showvalue(struct aml_value *val)
795{
int idx;

if (val == NULL((void *)0))
return;

if (val->node)
printf(" [%s]", aml_nodename(val->node));
printf(" %p cnt:%.2x stk:%.2x", val, val->refcnt, val->stack);
switch (val->type) {
case AML_OBJTYPE_INTEGER:
printf(" integer: %llx\n", val->v_integer_.vinteger);
break;
case AML_OBJTYPE_STRING:
printf(" string: %s\n", val->v_string_.vstring);
break;
case AML_OBJTYPE_METHOD:
printf(" method: %.2x\n", val->v_method_.vmethod.flags);
break;
case AML_OBJTYPE_PACKAGE:
printf(" package: %.2x\n", val->length);
for (idx = 0; idx < val->length; idx++)
	aml_showvalue(val->v_package_.vpackage[idx]);
break;
case AML_OBJTYPE_BUFFER:
printf(" buffer: %.2x {", val->length);
for (idx = 0; idx < val->length; idx++)
	printf("%s%.2x", idx ? ", " : "", val->v_buffer_.vbuffer[idx]);
printf("}\n");
break;
case AML_OBJTYPE_FIELDUNIT:
case AML_OBJTYPE_BUFFERFIELD:
printf(" field: bitpos=%.4x bitlen=%.4x ref1:%p ref2:%p [%s]\n",
    val->v_field_.vfield.bitpos, val->v_field_.vfield.bitlen,
    val->v_field_.vfield.ref1, val->v_field_.vfield.ref2,
    aml_mnem(val->v_field_.vfield.type, NULL((void *)0)));
if (val->v_field_.vfield.ref1)
	printf("  ref1: %s\n", aml_nodename(val->v_field_.vfield.ref1->node));
if (val->v_field_.vfield.ref2)
	printf("  ref2: %s\n", aml_nodename(val->v_field_.vfield.ref2->node));
break;
case AML_OBJTYPE_MUTEX:
printf(" mutex: %s ref: %d\n",
    val->v_mutex_.vmutex ?  val->v_mutex_.vmutex->amt_name : "",
    val->v_mutex_.vmutex ?  val->v_mutex_.vmutex->amt_ref_count : 0);
break;
case AML_OBJTYPE_EVENT:
printf(" event:\n");
break;
case AML_OBJTYPE_OPREGION:
printf(" opregion: %.2x,%.8llx,%x\n",
    val->v_opregion_.vopregion.iospace, val->v_opregion_.vopregion.iobase,
    val->v_opregion_.vopregion.iolen);
break;
case AML_OBJTYPE_NAMEREF:
printf(" nameref: %s\n", aml_getname(val->v_nameref_.vbuffer));
break;
case AML_OBJTYPE_DEVICE:
printf(" device:\n");
break;
case AML_OBJTYPE_PROCESSOR:
printf(" cpu: %.2x,%.4x,%.2x\n",
    val->v_processor_.vprocessor.proc_id, val->v_processor_.vprocessor.proc_addr,
    val->v_processor_.vprocessor.proc_len);
break;
case AML_OBJTYPE_THERMZONE:
printf(" thermzone:\n");
break;
case AML_OBJTYPE_POWERRSRC:
printf(" pwrrsrc: %.2x,%.2x\n",
    val->v_powerrsrc_.vpowerrsrc.pwr_level, val->v_powerrsrc_.vpowerrsrc.pwr_order);
break;
case AML_OBJTYPE_OBJREF:
printf(" objref: %p index:%x opcode:%s\n", val->v_objref_.vobjref.ref,
    val->v_objref_.vobjref.index, aml_mnem(val->v_objref_.vobjref.type, 0));
aml_showvalue(val->v_objref_.vobjref.ref);
break;
default:
printf(" !!type: %x\n", val->type);
}
875}
876#endif /* SMALL_KERNEL */

878int64_t
879aml_val2int(struct aml_value *rval)
880{
int64_t ival = 0;

if (rval == NULL((void *)0)) {
dnprintf(50, "null val2int\n");
return (0);
}
switch (rval->type) {
case AML_OBJTYPE_INTEGER:
ival = rval->v_integer_.vinteger;
break;
case AML_OBJTYPE_BUFFER:
aml_bufcpy(&ival, 0, rval->v_buffer_.vbuffer, 0,
    min(aml_intlen, rval->length*8));
break;
case AML_OBJTYPE_STRING:
ival = aml_hextoint(rval->v_string_.vstring);
break;
}
return (ival);
900}

902/* Sets value into LHS: lhs must already be cleared */
903struct aml_value *
904_aml_setvalue(struct aml_value *lhs, int type, int64_t ival, const void *bval)
905{
memset(&lhs->_, 0x0, sizeof(lhs->_))__builtin_memset((&lhs->_), (0x0), (sizeof(lhs->_))
);

lhs->type = type;
switch (lhs->type) {
case AML_OBJTYPE_INTEGER:
lhs->length = aml_intlen>>3;
lhs->v_integer_.vinteger = ival;
break;
case AML_OBJTYPE_METHOD:
lhs->v_method_.vmethod.flags = ival;
lhs->v_method_.vmethod.fneval = bval;
break;
case AML_OBJTYPE_NAMEREF:
lhs->v_nameref_.vbuffer = (uint8_t *)bval;
break;
case AML_OBJTYPE_OBJREF:
lhs->v_objref_.vobjref.type = ival;
lhs->v_objref_.vobjref.ref = (struct aml_value *)bval;
break;
case AML_OBJTYPE_BUFFER:
lhs->length = ival;
lhs->v_buffer_.vbuffer = (uint8_t *)acpi_os_malloc(ival)_acpi_os_malloc(ival, __FUNCTION__, 927);
if (bval)
	memcpy(lhs->v_buffer, bval, ival)__builtin_memcpy((lhs->_.vbuffer), (bval), (ival));
break;
case AML_OBJTYPE_STRING:
if (ival == -1)
	ival = strlen((const char *)bval);
lhs->length = ival;
lhs->v_string_.vstring = (char *)acpi_os_malloc(ival+1)_acpi_os_malloc(ival+1, __FUNCTION__, 935);
if (bval)
	strncpy(lhs->v_string_.vstring, (const char *)bval, ival);
break;
case AML_OBJTYPE_PACKAGE:
lhs->length = ival;
lhs->v_package_.vpackage = (struct aml_value **)acpi_os_malloc(ival *_acpi_os_malloc(ival * sizeof(struct aml_value *), __FUNCTION__
, 942)
    sizeof(struct aml_value *))_acpi_os_malloc(ival * sizeof(struct aml_value *), __FUNCTION__
, 942);
for (ival = 0; ival < lhs->length; ival++)
	lhs->v_package_.vpackage[ival] = aml_allocvalue(
	    AML_OBJTYPE_UNINITIALIZED, 0, NULL((void *)0));
break;
}
return lhs;
949}

951/* Copy object to another value: lhs must already be cleared */
952void
953aml_copyvalue(struct aml_value *lhs, struct aml_value *rhs)
954{
int idx;

lhs->type = rhs->type;
switch (lhs->type) {
case AML_OBJTYPE_UNINITIALIZED:
break;
case AML_OBJTYPE_INTEGER:
lhs->length = aml_intlen>>3;
lhs->v_integer_.vinteger = rhs->v_integer_.vinteger;
break;
case AML_OBJTYPE_MUTEX:
lhs->v_mutex_.vmutex = rhs->v_mutex_.vmutex;
break;
case AML_OBJTYPE_POWERRSRC:
lhs->node = rhs->node;
lhs->v_powerrsrc_.vpowerrsrc = rhs->v_powerrsrc_.vpowerrsrc;
break;
case AML_OBJTYPE_METHOD:
lhs->v_method_.vmethod = rhs->v_method_.vmethod;
break;
case AML_OBJTYPE_BUFFER:
_aml_setvalue(lhs, rhs->type, rhs->length, rhs->v_buffer_.vbuffer);
break;
case AML_OBJTYPE_STRING:
_aml_setvalue(lhs, rhs->type, rhs->length, rhs->v_string_.vstring);
break;
case AML_OBJTYPE_OPREGION:
lhs->v_opregion_.vopregion = rhs->v_opregion_.vopregion;
break;
case AML_OBJTYPE_PROCESSOR:
lhs->node = rhs->node;
lhs->v_processor_.vprocessor = rhs->v_processor_.vprocessor;
break;
case AML_OBJTYPE_NAMEREF:
lhs->v_nameref_.vbuffer = rhs->v_nameref_.vbuffer;
break;
case AML_OBJTYPE_PACKAGE:
_aml_setvalue(lhs, rhs->type, rhs->length, NULL((void *)0));
for (idx = 0; idx < rhs->length; idx++)
	aml_copyvalue(lhs->v_package_.vpackage[idx], rhs->v_package_.vpackage[idx]);
break;
case AML_OBJTYPE_OBJREF:
lhs->v_objref_.vobjref = rhs->v_objref_.vobjref;
aml_addref(lhs->v_objref_.vobjref.ref, "");
break;
case AML_OBJTYPE_DEVICE:
case AML_OBJTYPE_THERMZONE:
lhs->node = rhs->node;
break;
default:
printf("copyvalue: %x", rhs->type);
break;
}
1008}

1010/* Allocate dynamic AML value
*   type : Type of object to allocate (AML_OBJTYPE_XXXX)
*   ival : Integer value (action depends on type)
*   bval : Buffer value (action depends on type)
*/
1015struct aml_value *
1016aml_allocvalue(int type, int64_t ival, const void *bval)
1017{
struct aml_value *rv;

rv = (struct aml_value *)acpi_os_malloc(sizeof(struct aml_value))_acpi_os_malloc(sizeof(struct aml_value), __FUNCTION__, 1020);
if (rv != NULL((void *)0)) {
aml_addref(rv, "");
return _aml_setvalue(rv, type, ival, bval);
}
return NULL((void *)0);
1026}

1028void
1029aml_freevalue(struct aml_value *val)
1030{
int idx;

if (val == NULL((void *)0))
return;
switch (val->type) {
case AML_OBJTYPE_STRING:
acpi_os_free(val->v_string)_acpi_os_free(val->_.vstring, __FUNCTION__, 1037);
break;
case AML_OBJTYPE_BUFFER:
acpi_os_free(val->v_buffer)_acpi_os_free(val->_.vbuffer, __FUNCTION__, 1040);
break;
case AML_OBJTYPE_PACKAGE:
for (idx = 0; idx < val->length; idx++)
	aml_delref(&val->v_package_.vpackage[idx], "");
acpi_os_free(val->v_package)_acpi_os_free(val->_.vpackage, __FUNCTION__, 1045);
break;
case AML_OBJTYPE_OBJREF:
aml_delref(&val->v_objref_.vobjref.ref, "");
break;
case AML_OBJTYPE_BUFFERFIELD:
case AML_OBJTYPE_FIELDUNIT:
aml_delref(&val->v_field_.vfield.ref1, "");
aml_delref(&val->v_field_.vfield.ref2, "");
break;
}
val->type = 0;
memset(&val->_, 0, sizeof(val->_))__builtin_memset((&val->_), (0), (sizeof(val->_)));
1058}

1060/*
* @@@: Math eval routines
*/

1064/* Convert number from one radix to another
* Used in BCD conversion routines */
1066uint64_t
1067aml_convradix(uint64_t val, int iradix, int oradix)
1068{
uint64_t rv = 0, pwr;

rv = 0;
pwr = 1;
while (val) {
rv += (val % iradix) * pwr;
val /= iradix;
pwr *= oradix;
}
return rv;
1079}

1081/* Calculate LSB */
1082int
1083aml_lsb(uint64_t val)
1084{
int		lsb;

if (val == 0)
return (0);

for (lsb = 1; !(val & 0x1); lsb++)
val >>= 1;

return (lsb);
1094}

1096/* Calculate MSB */
1097int
1098aml_msb(uint64_t val)
1099{
int		msb;

if (val == 0)
return (0);

for (msb = 1; val != 0x1; msb++)
val >>= 1;

return (msb);
1109}

1111/* Evaluate Math operands */
1112uint64_t
1113aml_evalexpr(uint64_t lhs, uint64_t rhs, int opcode)
1114{
uint64_t res = 0;

switch (opcode) {
/* Math operations */
case AMLOP_INCREMENT0x75:
case AMLOP_ADD0x72:
res = (lhs + rhs);
break;
case AMLOP_DECREMENT0x76:
case AMLOP_SUBTRACT0x74:
res = (lhs - rhs);
break;
case AMLOP_MULTIPLY0x77:
res = (lhs * rhs);
break;
case AMLOP_DIVIDE0x78:
res = (lhs / rhs);
break;
case AMLOP_MOD0x85:
res = (lhs % rhs);
break;
case AMLOP_SHL0x79:
res = (lhs << rhs);
break;
case AMLOP_SHR0x7A:
res = (lhs >> rhs);
break;
case AMLOP_AND0x7B:
res = (lhs & rhs);
break;
case AMLOP_NAND0x7C:
res = ~(lhs & rhs);
break;
case AMLOP_OR0x7D:
res = (lhs | rhs);
break;
case AMLOP_NOR0x7E:
res = ~(lhs | rhs);
break;
case AMLOP_XOR0x7F:
res = (lhs ^ rhs);
break;
case AMLOP_NOT0x80:
res = ~(lhs);
break;

/* Conversion/misc */
case AMLOP_FINDSETLEFTBIT0x81:
res = aml_msb(lhs);
break;
case AMLOP_FINDSETRIGHTBIT0x82:
res = aml_lsb(lhs);
break;
case AMLOP_TOINTEGER0x99:
res = (lhs);
break;
case AMLOP_FROMBCD0x5B28:
res = aml_convradix(lhs, 16, 10);
break;
case AMLOP_TOBCD0x5B29:
res = aml_convradix(lhs, 10, 16);
break;

/* Logical/Comparison */
case AMLOP_LAND0x90:
res = -(lhs && rhs);
break;
case AMLOP_LOR0x91:
res = -(lhs || rhs);
break;
case AMLOP_LNOT0x92:
res = -(!lhs);
break;
case AMLOP_LNOTEQUAL0x9293:
res = -(lhs != rhs);
break;
case AMLOP_LLESSEQUAL0x9294:
res = -(lhs <= rhs);
break;
case AMLOP_LGREATEREQUAL0x9295:
res = -(lhs >= rhs);
break;
case AMLOP_LEQUAL0x93:
res = -(lhs == rhs);
break;
case AMLOP_LGREATER0x94:
res = -(lhs > rhs);
break;
case AMLOP_LLESS0x95:
res = -(lhs < rhs);
break;
}

dnprintf(15,"aml_evalexpr: %s %llx %llx = %llx\n",
 aml_mnem(opcode, NULL), lhs, rhs, res);

return res;
1212}

1214/*
* aml_bufcpy copies/shifts buffer data, special case for aligned transfers
* dstPos/srcPos are bit positions within destination/source buffers
*/
1218void
1219aml_bufcpy(void *pvDst, int dstPos, const void *pvSrc, int srcPos, int len)
1220{
const uint8_t *pSrc = pvSrc;
uint8_t *pDst = pvDst;
int		idx;

if (aml_bytealigned(dstPos|srcPos|len)!((dstPos|srcPos|len)&0x7)) {
/* Aligned transfer: use memcpy */
memcpy(pDst+aml_bytepos(dstPos), pSrc+aml_bytepos(srcPos),__builtin_memcpy((pDst+((dstPos)>>3)), (pSrc+((srcPos)>>
3)), ((((len)+7)>>3)))
    aml_bytelen(len))__builtin_memcpy((pDst+((dstPos)>>3)), (pSrc+((srcPos)>>
3)), ((((len)+7)>>3)));
return;
}

/* Misaligned transfer: perform bitwise copy (slow) */
for (idx = 0; idx < len; idx++)
aml_setbit(pDst, idx + dstPos, aml_tstbit(pSrc, idx + srcPos));
1235}

1237/*
* @@@: External API
*
* evaluate an AML node
* Returns a copy of the value in res  (must be freed by user)
*/

1244void
1245aml_walknodes(struct aml_node *node, int mode,
  int (*nodecb)(struct aml_node *, void *), void *arg)
1247{
struct aml_node *child;

if (node == NULL((void *)0))
return;
if (mode == AML_WALK_PRE0x00)
if (nodecb(node, arg))
	return;
SIMPLEQ_FOREACH(child, &node->son, sib)for((child) = ((&node->son)->sqh_first); (child) !=
 ((void *)0); (child) = ((child)->sib.sqe_next))
aml_walknodes(child, mode, nodecb, arg);
if (mode == AML_WALK_POST0x01)
nodecb(node, arg);
1259}

1261void
1262aml_find_node(struct aml_node *node, const char *name,
  int (*cbproc)(struct aml_node *, void *arg), void *arg)
1264{
struct aml_node *child;
const char *nn;

/* match child of this node first before recursing */
SIMPLEQ_FOREACH(child, &node->son, sib)for((child) = ((&node->son)->sqh_first); (child) !=
 ((void *)0); (child) = ((child)->sib.sqe_next)) {
nn = child->name;
if (nn != NULL((void *)0)) {
	if (*nn == AMLOP_ROOTCHAR0x5C) nn++;
	while (*nn == AMLOP_PARENTPREFIX0x5E) nn++;
	if (strcmp(name, nn) == 0) {
		/* Only recurse if cbproc() wants us to */
		if (cbproc(child, arg) != 0)
			return;
	}
}
}

SIMPLEQ_FOREACH(child, &node->son, sib)for((child) = ((&node->son)->sqh_first); (child) !=
 ((void *)0); (child) = ((child)->sib.sqe_next))
aml_find_node(child, name, cbproc, arg);
1284}

1286/*
* @@@: Parser functions
*/
1289uint8_t *aml_parsename(struct aml_node *, uint8_t *, struct aml_value **, int);
1290uint8_t *aml_parseend(struct aml_scope *scope);
1291int	aml_parselength(struct aml_scope *);
1292int	aml_parseopcode(struct aml_scope *);

1294/* Get AML Opcode */
1295int
1296aml_parseopcode(struct aml_scope *scope)
1297{
int opcode = (scope->pos[0]);
int twocode = (scope->pos[0]<<8) + scope->pos[1];

/* Check if this is an embedded name */
switch (opcode) {
case AMLOP_ROOTCHAR0x5C:
case AMLOP_PARENTPREFIX0x5E:
case AMLOP_MULTINAMEPREFIX0x2F:
case AMLOP_DUALNAMEPREFIX0x2E:
case AMLOP_NAMECHAR0x5F:
return AMLOP_NAMECHAR0x5F;
}
if (opcode >= 'A' && opcode <= 'Z')
12
←
Assuming the condition is false→
return AMLOP_NAMECHAR0x5F;
if (twocode == AMLOP_LNOTEQUAL0x9293 || twocode == AMLOP_LLESSEQUAL0x9294 ||
13
←
Assuming 'twocode' is not equal to AMLOP_LNOTEQUAL→
14
←
Assuming 'twocode' is not equal to AMLOP_LLESSEQUAL→
16
←
Taking false branch→
   twocode == AMLOP_LGREATEREQUAL0x9295 || opcode15.1
'opcode' is not equal to AMLOP_EXTPREFIX, which participates in a condition later
 == AMLOP_EXTPREFIX0x5B) {
15
←
Assuming 'twocode' is not equal to AMLOP_LGREATEREQUAL→
scope->pos += 2;
return twocode;
}
scope->pos += 1;
return opcode;
17
←
Returning value (loaded from 'opcode'), which participates in a condition later→
1319}

1321/* Decode embedded AML Namestring */
1322uint8_t *
1323aml_parsename(struct aml_node *inode, uint8_t *pos, struct aml_value **rval, int create)
1324{
struct aml_node *relnode, *node = inode;
uint8_t	*start = pos;
int i;

if (*pos == AMLOP_ROOTCHAR0x5C) {
pos++;
node = &aml_root;
}
while (*pos == AMLOP_PARENTPREFIX0x5E) {
pos++;
if ((node = node->parent) == NULL((void *)0))
	node = &aml_root;
}
switch (*pos) {
case 0x00:
pos++;
break;
case AMLOP_MULTINAMEPREFIX0x2F:
for (i=0; i<pos[1]; i++)
	node = __aml_search(node, pos+2+i*AML_NAMESEG_LEN4,
	    create);
pos += 2+i*AML_NAMESEG_LEN4;
break;
case AMLOP_DUALNAMEPREFIX0x2E:
node = __aml_search(node, pos+1, create);
node = __aml_search(node, pos+1+AML_NAMESEG_LEN4, create);
pos += 1+2*AML_NAMESEG_LEN4;
break;
default:
/* If Relative Search (pos == start), recursively go up root */
relnode = node;
do {
	node = __aml_search(relnode, pos, create);
	relnode = relnode->parent;
} while (!node && pos == start && relnode);
pos += AML_NAMESEG_LEN4;
break;
}
if (node) {
*rval = node->value;

/* Dereference ALIAS here */
if ((*rval)->type == AML_OBJTYPE_OBJREF &&
    (*rval)->v_objref_.vobjref.type == AMLOP_ALIAS0x06) {
	dnprintf(10, "deref alias: %s\n", aml_nodename(node));
	*rval = (*rval)->v_objref_.vobjref.ref;
}
aml_addref(*rval, 0);

dnprintf(10, "parsename: %s %x\n", aml_nodename(node),
    (*rval)->type);
} else {
*rval = aml_allocvalue(AML_OBJTYPE_NAMEREF, 0, start);

dnprintf(10, "%s:%s not found\n", aml_nodename(inode),
    aml_getname(start));
}

return pos;
1384}

1386/* Decode AML Length field
*  AML Length field is encoded:
*    byte0    byte1    byte2    byte3
*    00xxxxxx                             : if upper bits == 00, length = xxxxxx
*    01--xxxx yyyyyyyy                    : if upper bits == 01, length = yyyyyyyyxxxx
*    10--xxxx yyyyyyyy zzzzzzzz           : if upper bits == 10, length = zzzzzzzzyyyyyyyyxxxx
*    11--xxxx yyyyyyyy zzzzzzzz wwwwwwww  : if upper bits == 11, length = wwwwwwwwzzzzzzzzyyyyyyyyxxxx
*/
1394int
1395aml_parselength(struct aml_scope *scope)
1396{
int len;
uint8_t lcode;

lcode = *(scope->pos++);
if (lcode <= 0x3F)
return lcode;

/* lcode >= 0x40, multibyte length, get first byte of extended length */
len = lcode & 0xF;
len += *(scope->pos++) << 4L;
if (lcode >= 0x80)
len += *(scope->pos++) << 12L;
if (lcode >= 0xC0)
len += *(scope->pos++) << 20L;
return len;
1412}

1414/* Get address of end of scope; based on current address */
1415uint8_t *
1416aml_parseend(struct aml_scope *scope)
1417{
uint8_t *pos = scope->pos;
int len;

len = aml_parselength(scope);
if (pos+len > scope->end) {
dnprintf(10,
    "Bad scope... runover pos:%.4x new end:%.4x scope "
    "end:%.4x\n", aml_pc(pos), aml_pc(pos+len),
    aml_pc(scope->end));
return scope->end;
}
return pos+len;
1430}

1432/*
* @@@: Opcode utility functions
*/

1436/*
* @@@: Opcode functions
*/

1440int odp;

1442const char hext[] = "0123456789ABCDEF";

1444const char *
1445aml_eisaid(uint32_t pid)
1446{
static char id[8];

id[0] = '@' + ((pid >> 2) & 0x1F);
id[1] = '@' + ((pid << 3) & 0x18) + ((pid >> 13) & 0x7);
id[2] = '@' + ((pid >> 8) & 0x1F);
id[3] = hext[(pid >> 20) & 0xF];
id[4] = hext[(pid >> 16) & 0xF];
id[5] = hext[(pid >> 28) & 0xF];
id[6] = hext[(pid >> 24) & 0xF];
id[7] = 0;
return id;
1458}

1460/*
* @@@: Default Object creation
*/
1463static char osstring[] = "Macrosift Windogs MT";
1464struct aml_defval {
const char		*name;
int			type;
int64_t			ival;
const void		*bval;
struct aml_value	**gval;
1470} aml_defobj[] = {
{ "_OS_", AML_OBJTYPE_STRING, -1, osstring },
{ "_REV", AML_OBJTYPE_INTEGER, 2, NULL((void *)0) },
{ "_GL", AML_OBJTYPE_MUTEX, 1, NULL((void *)0), &aml_global_lock },
{ "_OSI", AML_OBJTYPE_METHOD, 1, aml_callosi },

/* Create default scopes */
{ "_GPE", AML_OBJTYPE_DEVICE },
{ "_PR_", AML_OBJTYPE_DEVICE },
{ "_SB_", AML_OBJTYPE_DEVICE },
{ "_TZ_", AML_OBJTYPE_DEVICE },
{ "_SI_", AML_OBJTYPE_DEVICE },

{ NULL((void *)0) }
1484};

1486/* _OSI Default Method:
* Returns True if string argument matches list of known OS strings
* We return True for Windows to fake out nasty bad AML
*/
1490char *aml_valid_osi[] = {
AML_VALID_OSI"Windows 2000", "Windows 2001", "Windows 2001.1", "Windows 2001.1 SP1"
, "Windows 2001 SP0", "Windows 2001 SP1", "Windows 2001 SP2",
 "Windows 2001 SP3", "Windows 2001 SP4", "Windows 2006", "Windows 2006.1"
, "Windows 2006 SP1", "Windows 2006 SP2", "Windows 2009", "Windows 2012"
, "Windows 2013", "Windows 2015", "Windows 2016", "Windows 2017"
, "Windows 2017.2", "Windows 2018", "Windows 2018.2", "Windows 2019"
, "Windows 2020", "Windows 2021", "Windows 2022",
NULL((void *)0)
1493};

1495enum acpi_osi acpi_max_osi = OSI_UNKNOWN;

1497struct aml_value *
1498aml_callosi(struct aml_scope *scope, struct aml_value *val)
1499{
int idx, result=0;
struct aml_value *fa;

fa = aml_getstack(scope, AMLOP_ARG00x68);

if (hw_vendor != NULL((void *)0) &&
   (strcmp(hw_vendor, "Apple Inc.") == 0 ||
   strcmp(hw_vendor, "Apple Computer, Inc.") == 0)) {
if (strcmp(fa->v_string_.vstring, "Darwin") == 0) {
	dnprintf(10,"osi: returning 1 for %s on %s hardware\n",
	    fa->v_string, hw_vendor);
	result = 1;
} else
	dnprintf(10,"osi: on %s hardware, but ignoring %s\n",
	    hw_vendor, fa->v_string);

return aml_allocvalue(AML_OBJTYPE_INTEGER, result, NULL((void *)0));
}

for (idx=0; !result && aml_valid_osi[idx] != NULL((void *)0); idx++) {
dnprintf(10,"osi: %s,%s\n", fa->v_string, aml_valid_osi[idx]);
result = !strcmp(fa->v_string_.vstring, aml_valid_osi[idx]);
if (result) {
	if (idx > acpi_max_osi)
		acpi_max_osi = idx;
	break;
}
}
dnprintf(10,"@@ OSI found: %x\n", result);
return aml_allocvalue(AML_OBJTYPE_INTEGER, result, NULL((void *)0));
1530}

1532void
1533aml_create_defaultobjects(void)
1534{
struct aml_value *tmp;
struct aml_defval *def;

1538#ifdef ACPI_MEMDEBUG
LIST_INIT(&acpi_memhead)do { ((&acpi_memhead)->lh_first) = ((void *)0); } while
 (0);
1540#endif

osstring[1] = 'i';
osstring[6] = 'o';
osstring[15] = 'w';
osstring[18] = 'N';

SIMPLEQ_INIT(&aml_root.son)do { (&aml_root.son)->sqh_first = ((void *)0); (&aml_root
.son)->sqh_last = &(&aml_root.son)->sqh_first; }
 while (0);
strlcpy(aml_root.name, "\\", sizeof(aml_root.name));
aml_root.value = aml_allocvalue(0, 0, NULL((void *)0));
aml_root.value->node = &aml_root;

for (def = aml_defobj; def->name; def++) {
/* Allocate object value + add to namespace */
aml_parsename(&aml_root, (uint8_t *)def->name, &tmp, 1);
_aml_setvalue(tmp, def->type, def->ival, def->bval);
if (def->gval) {
	/* Set root object pointer */
	*def->gval = tmp;
}
aml_delref(&tmp, 0);
}
1562}

1564#ifdef ACPI_DEBUG
1565int
1566aml_print_resource(union acpi_resource *crs, void *arg)
1567{
int typ = AML_CRSTYPE(crs)((crs)->hdr.typecode & 0x80 ? (crs)->hdr.typecode :
 (crs)->hdr.typecode >> 3);

switch (typ) {
case LR_EXTIRQ0x89:
printf("extirq\tflags:%.2x len:%.2x irq:%.4x\n",
    crs->lr_extirq.flags, crs->lr_extirq.irq_count,
    letoh32(crs->lr_extirq.irq[0])((__uint32_t)(crs->lr_extirq.irq[0])));
break;
case SR_IRQ0x04:
printf("irq\t%.4x %.2x\n", letoh16(crs->sr_irq.irq_mask)((__uint16_t)(crs->sr_irq.irq_mask)),
    crs->sr_irq.irq_flags);
break;
case SR_DMA0x05:
printf("dma\t%.2x %.2x\n", crs->sr_dma.channel,
    crs->sr_dma.flags);
break;
case SR_IOPORT0x08:
printf("ioport\tflags:%.2x _min:%.4x _max:%.4x _aln:%.2x _len:%.2x\n",
    crs->sr_ioport.flags, crs->sr_ioport._min,
    crs->sr_ioport._max, crs->sr_ioport._aln,
    crs->sr_ioport._len);
break;
case SR_STARTDEP0x06:
printf("startdep\n");
break;
case SR_ENDDEP0x07:
printf("enddep\n");
break;
case LR_WORD0x88:
printf("word\ttype:%.2x flags:%.2x tflag:%.2x gra:%.4x min:%.4x max:%.4x tra:%.4x len:%.4x\n",
	crs->lr_word.type, crs->lr_word.flags, crs->lr_word.tflags,
	crs->lr_word._gra, crs->lr_word._min, crs->lr_word._max,
	crs->lr_word._tra, crs->lr_word._len);
break;
case LR_DWORD0x87:
printf("dword\ttype:%.2x flags:%.2x tflag:%.2x gra:%.8x min:%.8x max:%.8x tra:%.8x len:%.8x\n",
	crs->lr_dword.type, crs->lr_dword.flags, crs->lr_dword.tflags,
	crs->lr_dword._gra, crs->lr_dword._min, crs->lr_dword._max,
	crs->lr_dword._tra, crs->lr_dword._len);
break;
case LR_QWORD0x8A:
printf("dword\ttype:%.2x flags:%.2x tflag:%.2x gra:%.16llx min:%.16llx max:%.16llx tra:%.16llx len:%.16llx\n",
	crs->lr_qword.type, crs->lr_qword.flags, crs->lr_qword.tflags,
	crs->lr_qword._gra, crs->lr_qword._min, crs->lr_qword._max,
	crs->lr_qword._tra, crs->lr_qword._len);
break;
default:
printf("unknown type: %x\n", typ);
break;
}
return (0);
1619}
1620#endif /* ACPI_DEBUG */

1622union acpi_resource *aml_mapresource(union acpi_resource *);

1624union acpi_resource *
1625aml_mapresource(union acpi_resource *crs)
1626{
static union acpi_resource map;
int rlen;

rlen = AML_CRSLEN(crs)((crs)->hdr.typecode & 0x80 ? 3+(crs)->hdr.length :
 1+((crs)->hdr.typecode & 0x7));
if (rlen >= sizeof(map))
return crs;

memset(&map, 0, sizeof(map))__builtin_memset((&map), (0), (sizeof(map)));
memcpy(&map, crs, rlen)__builtin_memcpy((&map), (crs), (rlen));

return &map;
1638}

1640int
1641aml_parse_resource(struct aml_value *res,
  int (*crs_enum)(int, union acpi_resource *, void *), void *arg)
1643{
int off, rlen, crsidx;
union acpi_resource *crs;

if (res->type != AML_OBJTYPE_BUFFER || res->length < 5)
return (-1);
for (off = 0, crsidx = 0; off < res->length; off += rlen, crsidx++) {
crs = (union acpi_resource *)(res->v_buffer_.vbuffer+off);

rlen = AML_CRSLEN(crs)((crs)->hdr.typecode & 0x80 ? 3+(crs)->hdr.length :
 1+((crs)->hdr.typecode & 0x7));
if (crs->hdr.typecode == SRT_ENDTAG0x79 || !rlen)
	break;

crs = aml_mapresource(crs);
1657#ifdef ACPI_DEBUG
aml_print_resource(crs, NULL((void *)0));
1659#endif
crs_enum(crsidx, crs, arg);
}

return (0);
1664}

1666void
1667aml_foreachpkg(struct aml_value *pkg, int start,
  void (*fn)(struct aml_value *, void *), void *arg)
1669{
int idx;

if (pkg->type != AML_OBJTYPE_PACKAGE)
return;
for (idx=start; idx<pkg->length; idx++)
fn(pkg->v_package_.vpackage[idx], arg);
1676}

1678/*
* Walk nodes and perform fixups for nameref
*/
1681int aml_fixup_node(struct aml_node *, void *);

1683int aml_fixup_node(struct aml_node *node, void *arg)
1684{
struct aml_value *val = arg;
int i;

if (node->value == NULL((void *)0))
return (0);
if (arg == NULL((void *)0))
aml_fixup_node(node, node->value);
else if (val->type == AML_OBJTYPE_NAMEREF) {
node = aml_searchname(node, aml_getname(val->v_nameref_.vbuffer));
if (node && node->value) {
	_aml_setvalue(val, AML_OBJTYPE_OBJREF, AMLOP_NAMECHAR0x5F,
	    node->value);
}
} else if (val->type == AML_OBJTYPE_PACKAGE) {
for (i = 0; i < val->length; i++)
	aml_fixup_node(node, val->v_package_.vpackage[i]);
}
return (0);
1703}

1705void
1706aml_postparse(void)
1707{
aml_walknodes(&aml_root, AML_WALK_PRE0x00, aml_fixup_node, NULL((void *)0));
1709}

1711#ifndef SMALL_KERNEL
1712const char *
1713aml_val_to_string(const struct aml_value *val)
1714{
static char buffer[256];

int len;

switch (val->type) {
case AML_OBJTYPE_BUFFER:
len = val->length;
if (len >= sizeof(buffer))
	len = sizeof(buffer) - 1;
memcpy(buffer, val->v_buffer, len)__builtin_memcpy((buffer), (val->_.vbuffer), (len));
buffer[len] = 0;
break;
case AML_OBJTYPE_STRING:
strlcpy(buffer, val->v_string_.vstring, sizeof(buffer));
break;
case AML_OBJTYPE_INTEGER:
snprintf(buffer, sizeof(buffer), "%llx", val->v_integer_.vinteger);
break;
default:
snprintf(buffer, sizeof(buffer),
    "Failed to convert type %d to string!", val->type);
};

return (buffer);
1739}
1740#endif /* SMALL_KERNEL */

1742int aml_error;

1744struct aml_value *aml_gettgt(struct aml_value *, int);
1745struct aml_value *aml_eval(struct aml_scope *, struct aml_value *, int, int,
  struct aml_value *);
1747struct aml_value *aml_parsesimple(struct aml_scope *, char,
  struct aml_value *);
1749struct aml_value *aml_parse(struct aml_scope *, int, const char *);
1750struct aml_value *aml_seterror(struct aml_scope *, const char *, ...);

1752struct aml_scope *aml_findscope(struct aml_scope *, int, int);
1753struct aml_scope *aml_pushscope(struct aml_scope *, struct aml_value *,
  struct aml_node *, int);
1755struct aml_scope *aml_popscope(struct aml_scope *);

1757void		aml_showstack(struct aml_scope *);
1758struct aml_value *aml_convert(struct aml_value *, int, int);

1760int		aml_matchtest(int64_t, int64_t, int);
1761int		aml_match(struct aml_value *, int, int, int, int, int);

1763int		aml_compare(struct aml_value *, struct aml_value *, int);
1764struct aml_value *aml_concat(struct aml_value *, struct aml_value *);
1765struct aml_value *aml_concatres(struct aml_value *, struct aml_value *);
1766struct aml_value *aml_mid(struct aml_value *, int, int);
1767int		aml_ccrlen(int, union acpi_resource *, void *);

1769void		aml_store(struct aml_scope *, struct aml_value *, int64_t,
  struct aml_value *);

1772/*
* Reference Count functions
*/
1775void
1776aml_addref(struct aml_value *val, const char *lbl)
1777{
if (val == NULL((void *)0))
return;
dnprintf(50, "XAddRef: %p %s:[%s] %d\n",
   val, lbl,
   val->node ? aml_nodename(val->node) : "INTERNAL",
   val->refcnt);
val->refcnt++;
1785}

1787/* Decrease reference counter */
1788void
1789aml_delref(struct aml_value **pv, const char *lbl)
1790{
struct aml_value *val;

if (pv == NULL((void *)0) || *pv == NULL((void *)0))
return;
val = *pv;
val->refcnt--;
if (val->refcnt == 0) {
dnprintf(50, "XDelRef: %p %s %2d [%s] %s\n",
    val, lbl,
    val->refcnt,
    val->node ? aml_nodename(val->node) : "INTERNAL",
    val->refcnt ? "" : "---------------- FREEING");

aml_freevalue(val);
acpi_os_free(val)_acpi_os_free(val, __FUNCTION__, 1805);
*pv = NULL((void *)0);
}
1808}

1810/* Walk list of parent scopes until we find one of 'type'
* If endscope is set, mark all intermediate scopes as invalid (used for Method/While) */
1812struct aml_scope *
1813aml_findscope(struct aml_scope *scope, int type, int endscope)
1814{
while (scope) {
switch (endscope) {
case AMLOP_RETURN0xA4:
	scope->pos = scope->end;
	if (scope->type == AMLOP_WHILE0xA2)
		scope->pos = NULL((void *)0);
	break;
case AMLOP_CONTINUE0x9F:
	scope->pos = scope->end;
	break;
case AMLOP_BREAK0xA5:
	scope->pos = scope->end;
	if (scope->type == type)
		scope->parent->pos = scope->end;
	break;
}
if (scope->type == type)
	break;
scope = scope->parent;
}
return scope;
1836}

1838struct aml_value *
1839aml_getstack(struct aml_scope *scope, int opcode)
1840{
struct aml_value *sp;

sp = NULL((void *)0);
scope = aml_findscope(scope, AMLOP_METHOD0x14, 0);
if (scope == NULL((void *)0))
return NULL((void *)0);
if (opcode >= AMLOP_LOCAL00x60 && opcode <= AMLOP_LOCAL70x67) {
if (scope->locals == NULL((void *)0))
	scope->locals = aml_allocvalue(AML_OBJTYPE_PACKAGE, 8, NULL((void *)0));
sp = scope->locals->v_package_.vpackage[opcode - AMLOP_LOCAL00x60];
sp->stack = opcode;
} else if (opcode >= AMLOP_ARG00x68 && opcode <= AMLOP_ARG60x6E) {
if (scope->args == NULL((void *)0))
	scope->args = aml_allocvalue(AML_OBJTYPE_PACKAGE, 7, NULL((void *)0));
sp = scope->args->v_package_.vpackage[opcode - AMLOP_ARG00x68];
if (sp->type == AML_OBJTYPE_OBJREF)
	sp = sp->v_objref_.vobjref.ref;
}
return sp;
1860}

1862#ifdef ACPI_DEBUG
1863/* Dump AML Stack */
1864void
1865aml_showstack(struct aml_scope *scope)
1866{
struct aml_value *sp;
int idx;

dnprintf(10, "===== Stack %s:%s\n", aml_nodename(scope->node),
   aml_mnem(scope->type, 0));
for (idx=0; scope->args && idx<7; idx++) {
sp = aml_getstack(scope, AMLOP_ARG00x68+idx);
if (sp && sp->type) {
	dnprintf(10," Arg%d: ", idx);
	aml_showvalue(sp);
}
}
for (idx=0; scope->locals && idx<8; idx++) {
sp = aml_getstack(scope, AMLOP_LOCAL00x60+idx);
if (sp && sp->type) {
	dnprintf(10," Local%d: ", idx);
	aml_showvalue(sp);
}
}
1886}
1887#endif

1889/* Create a new scope object */
1890struct aml_scope *
1891aml_pushscope(struct aml_scope *parent, struct aml_value *range,
  struct aml_node *node, int type)
1893{
struct aml_scope *scope;
uint8_t *start, *end;

if (range->type == AML_OBJTYPE_METHOD) {
start = range->v_method_.vmethod.start;
end = range->v_method_.vmethod.end;
} else {
start = range->v_buffer_.vbuffer;
end = start + range->length;
if (start == end)
	return NULL((void *)0);
}
scope = acpi_os_malloc(sizeof(struct aml_scope))_acpi_os_malloc(sizeof(struct aml_scope), __FUNCTION__, 1906);
if (scope == NULL((void *)0))
return NULL((void *)0);

scope->node = node;
scope->start = start;
scope->end = end;
scope->pos = scope->start;
scope->parent = parent;
scope->type = type;
scope->sc = acpi_softc;

if (parent)
scope->depth = parent->depth+1;

aml_lastscope = scope;

return scope;
1924}

1926/* Free a scope object and any children */
1927struct aml_scope *
1928aml_popscope(struct aml_scope *scope)
1929{
struct aml_scope *nscope;

if (scope == NULL((void *)0))
return NULL((void *)0);

nscope = scope->parent;

if (scope->type == AMLOP_METHOD0x14)
aml_delchildren(scope->node);
if (scope->locals) {
aml_freevalue(scope->locals);
acpi_os_free(scope->locals)_acpi_os_free(scope->locals, __FUNCTION__, 1941);
scope->locals = NULL((void *)0);
}
if (scope->args) {
aml_freevalue(scope->args);
acpi_os_free(scope->args)_acpi_os_free(scope->args, __FUNCTION__, 1946);
scope->args = NULL((void *)0);
}
acpi_os_free(scope)_acpi_os_free(scope, __FUNCTION__, 1949);
aml_lastscope = nscope;

return nscope;
1953}

1955/* Test AMLOP_MATCH codes */
1956int
1957aml_matchtest(int64_t a, int64_t b, int op)
1958{
switch (op) {
case AML_MATCH_TR0:
return (1);
case AML_MATCH_EQ1:
return (a == b);
case AML_MATCH_LT3:
return (a < b);
case AML_MATCH_LE2:
return (a <= b);
case AML_MATCH_GE4:
return (a >= b);
case AML_MATCH_GT5:
return (a > b);
}
return (0);
1974}

1976/* Search a package for a matching value */
1977int
1978aml_match(struct aml_value *pkg, int index,
  int op1, int v1,
  int op2, int v2)
1981{
struct aml_value *tmp;
int flag;

while (index < pkg->length) {
/* Convert package value to integer */
tmp = aml_convert(pkg->v_package_.vpackage[index],
    AML_OBJTYPE_INTEGER, -1);

/* Perform test */
flag = aml_matchtest(tmp->v_integer_.vinteger, v1, op1) &&
    aml_matchtest(tmp->v_integer_.vinteger, v2, op2);
aml_delref(&tmp, "xmatch");

if (flag)
	return index;
index++;
}
return -1;
2000}

2002/*
* Conversion routines
*/
2005int64_t
2006aml_hextoint(const char *str)
2007{
int64_t v = 0;
char c;

while (*str) {
if (*str >= '0' && *str <= '9')
	c = *(str++) - '0';
else if (*str >= 'a' && *str <= 'f')
	c = *(str++) - 'a' + 10;
else if (*str >= 'A' && *str <= 'F')
	c = *(str++) - 'A' + 10;
else
	break;
v = (v << 4) + c;
}
return v;

2024}

2026struct aml_value *
2027aml_convert(struct aml_value *a, int ctype, int clen)
2028{
struct aml_value *c = NULL((void *)0);

/* Object is already this type */
if (clen == -1)
clen = a->length;
if (a->type == ctype) {
aml_addref(a, "XConvert");
return a;
}
switch (ctype) {
case AML_OBJTYPE_BUFFER:
dnprintf(10,"convert to buffer\n");
switch (a->type) {
case AML_OBJTYPE_INTEGER:
	c = aml_allocvalue(AML_OBJTYPE_BUFFER, a->length,
	    &a->v_integer_.vinteger);
	break;
case AML_OBJTYPE_STRING:
	c = aml_allocvalue(AML_OBJTYPE_BUFFER, a->length,
	    a->v_string_.vstring);
	break;
}
break;
case AML_OBJTYPE_INTEGER:
dnprintf(10,"convert to integer : %x\n", a->type);
switch (a->type) {
case AML_OBJTYPE_BUFFER:
	c = aml_allocvalue(AML_OBJTYPE_INTEGER, 0, NULL((void *)0));
	memcpy(&c->v_integer, a->v_buffer,__builtin_memcpy((&c->_.vinteger), (a->_.vbuffer), (
min(a->length, c->length)))
	    min(a->length, c->length))__builtin_memcpy((&c->_.vinteger), (a->_.vbuffer), (
min(a->length, c->length)));
	break;
case AML_OBJTYPE_STRING:
	c = aml_allocvalue(AML_OBJTYPE_INTEGER, 0, NULL((void *)0));
	c->v_integer_.vinteger = aml_hextoint(a->v_string_.vstring);
	break;
case AML_OBJTYPE_UNINITIALIZED:
	c = aml_allocvalue(AML_OBJTYPE_INTEGER, 0, NULL((void *)0));
	break;
}
break;
case AML_OBJTYPE_STRING:
case AML_OBJTYPE_HEXSTRING:
case AML_OBJTYPE_DECSTRING:
dnprintf(10,"convert to string\n");
switch (a->type) {
case AML_OBJTYPE_INTEGER:
	c = aml_allocvalue(AML_OBJTYPE_STRING, 20, NULL((void *)0));
	snprintf(c->v_string_.vstring, c->length, (ctype == AML_OBJTYPE_HEXSTRING) ?
	    "0x%llx" : "%lld", a->v_integer_.vinteger);
	break;
case AML_OBJTYPE_BUFFER:
	c = aml_allocvalue(AML_OBJTYPE_STRING, a->length,
	    a->v_buffer_.vbuffer);
	break;
case AML_OBJTYPE_STRING:
	aml_addref(a, "XConvert");
	return a;
case AML_OBJTYPE_PACKAGE: /* XXX Deal with broken Lenovo X1 BIOS. */
	c = aml_allocvalue(AML_OBJTYPE_STRING, 0, NULL((void *)0));
	break;
}
break;
}
if (c == NULL((void *)0)) {
2093#ifndef SMALL_KERNEL
aml_showvalue(a);
2095#endif
aml_die("Could not convert %x to %x\n", a->type, ctype)_aml_die(__FUNCTION__, 2096, "Could not convert %x to %x\n", a
->type, ctype);
}
return c;
2099}

2101int
2102aml_compare(struct aml_value *a1, struct aml_value *a2, int opcode)
2103{
int rc = 0;

/* Convert A2 to type of A1 */
a2 = aml_convert(a2, a1->type, -1);
if (a1->type == AML_OBJTYPE_INTEGER)
rc = aml_evalexpr(a1->v_integer_.vinteger, a2->v_integer_.vinteger, opcode);
else {
/* Perform String/Buffer comparison */
rc = memcmp(a1->v_buffer, a2->v_buffer,__builtin_memcmp((a1->_.vbuffer), (a2->_.vbuffer), (min
(a1->length, a2->length)))
    min(a1->length, a2->length))__builtin_memcmp((a1->_.vbuffer), (a2->_.vbuffer), (min
(a1->length, a2->length)));
if (rc == 0) {
	/* If buffers match, which one is longer */
	rc = a1->length - a2->length;
}
/* Perform comparison against zero */
rc = aml_evalexpr(rc, 0, opcode);
}
/* Either deletes temp buffer, or decrease refcnt on original A2 */
aml_delref(&a2, "xcompare");
return rc;
2124}

2126/* Concatenate two objects, returning pointer to new object */
2127struct aml_value *
2128aml_concat(struct aml_value *a1, struct aml_value *a2)
2129{
struct aml_value *c = NULL((void *)0);

/* Convert arg2 to type of arg1 */
a2 = aml_convert(a2, a1->type, -1);
switch (a1->type) {
case AML_OBJTYPE_INTEGER:
c = aml_allocvalue(AML_OBJTYPE_BUFFER,
    a1->length + a2->length, NULL((void *)0));
memcpy(c->v_buffer, &a1->v_integer, a1->length)__builtin_memcpy((c->_.vbuffer), (&a1->_.vinteger),
 (a1->length));
memcpy(c->v_buffer+a1->length, &a2->v_integer, a2->length)__builtin_memcpy((c->_.vbuffer+a1->length), (&a2->
_.vinteger), (a2->length));
break;
case AML_OBJTYPE_BUFFER:
c = aml_allocvalue(AML_OBJTYPE_BUFFER,
    a1->length + a2->length, NULL((void *)0));
memcpy(c->v_buffer, a1->v_buffer, a1->length)__builtin_memcpy((c->_.vbuffer), (a1->_.vbuffer), (a1->
length));
memcpy(c->v_buffer+a1->length, a2->v_buffer, a2->length)__builtin_memcpy((c->_.vbuffer+a1->length), (a2->_.vbuffer
), (a2->length));
break;
case AML_OBJTYPE_STRING:
c = aml_allocvalue(AML_OBJTYPE_STRING,
    a1->length + a2->length, NULL((void *)0));
memcpy(c->v_string, a1->v_string, a1->length)__builtin_memcpy((c->_.vstring), (a1->_.vstring), (a1->
length));
memcpy(c->v_string+a1->length, a2->v_string, a2->length)__builtin_memcpy((c->_.vstring+a1->length), (a2->_.vstring
), (a2->length));
break;
default:
aml_die("concat type mismatch %d != %d\n", a1->type, a2->type)_aml_die(__FUNCTION__, 2154, "concat type mismatch %d != %d\n"
, a1->type, a2->type);
break;
}
/* Either deletes temp buffer, or decrease refcnt on original A2 */
aml_delref(&a2, "xconcat");
return c;
2160}

2162/* Calculate length of Resource Template */
2163int
2164aml_ccrlen(int crsidx, union acpi_resource *rs, void *arg)
2165{
int *plen = arg;

*plen += AML_CRSLEN(rs)((rs)->hdr.typecode & 0x80 ? 3+(rs)->hdr.length : 1
+((rs)->hdr.typecode & 0x7));
return (0);
2170}

2172/* Concatenate resource templates, returning pointer to new object */
2173struct aml_value *
2174aml_concatres(struct aml_value *a1, struct aml_value *a2)
2175{
struct aml_value *c;
int l1 = 0, l2 = 0, l3 = 2;
uint8_t a3[] = { SRT_ENDTAG0x79, 0x00 };

if (a1->type != AML_OBJTYPE_BUFFER || a2->type != AML_OBJTYPE_BUFFER)
aml_die("concatres: not buffers\n")_aml_die(__FUNCTION__, 2181, "concatres: not buffers\n");

/* Walk a1, a2, get length minus end tags, concatenate buffers, add end tag */
aml_parse_resource(a1, aml_ccrlen, &l1);
aml_parse_resource(a2, aml_ccrlen, &l2);

/* Concatenate buffers, add end tag */
c = aml_allocvalue(AML_OBJTYPE_BUFFER, l1+l2+l3, NULL((void *)0));
memcpy(c->v_buffer,    a1->v_buffer, l1)__builtin_memcpy((c->_.vbuffer), (a1->_.vbuffer), (l1));
memcpy(c->v_buffer+l1, a2->v_buffer, l2)__builtin_memcpy((c->_.vbuffer+l1), (a2->_.vbuffer), (l2
));
memcpy(c->v_buffer+l1+l2, a3,        l3)__builtin_memcpy((c->_.vbuffer+l1+l2), (a3), (l3));

return c;
2194}

2196/* Extract substring from string or buffer */
2197struct aml_value *
2198aml_mid(struct aml_value *src, int index, int length)
2199{
if (index > src->length)
index = src->length;
if ((index + length) > src->length)
length = src->length - index;
return aml_allocvalue(src->type, length, src->v_buffer_.vbuffer + index);
2205}

2207/*
* Field I/O utility functions
*/
2210void aml_createfield(struct aml_value *, int, struct aml_value *, int, int,
  struct aml_value *, int, int);
2212void aml_parsefieldlist(struct aml_scope *, int, int,
  struct aml_value *, struct aml_value *, int);

2215int
2216aml_evalhid(struct aml_node *node, struct aml_value *val)
2217{
if (aml_evalname(acpi_softc, node, "_HID", 0, NULL((void *)0), val))
return (-1);

/* Integer _HID: convert to EISA ID */
if (val->type == AML_OBJTYPE_INTEGER)
_aml_setvalue(val, AML_OBJTYPE_STRING, -1, aml_eisaid(val->v_integer_.vinteger));
return (0);
2225}

2227int
2228aml_opreg_sysmem_handler(void *cookie, int iodir, uint64_t address, int size,
  uint64_t *value)
2230{
return acpi_gasio(acpi_softc, iodir, GAS_SYSTEM_MEMORY0,
   address, size, size, value);
2233}

2235int
2236aml_opreg_sysio_handler(void *cookie, int iodir, uint64_t address, int size,
  uint64_t *value)
2238{
return acpi_gasio(acpi_softc, iodir, GAS_SYSTEM_IOSPACE1,
   address, size, size, value);
2241}

2243int
2244aml_opreg_pcicfg_handler(void *cookie, int iodir, uint64_t address, int size,
  uint64_t *value)
2246{
return acpi_gasio(acpi_softc, iodir, GAS_PCI_CFG_SPACE2,
   address, size, size, value);
2249}

2251int
2252aml_opreg_ec_handler(void *cookie, int iodir, uint64_t address, int size,
  uint64_t *value)
2254{
return acpi_gasio(acpi_softc, iodir, GAS_EMBEDDED3,
   address, size, size, value);
2257}

2259struct aml_regionspace {
void *cookie;
int (*handler)(void *, int, uint64_t, int, uint64_t *);
2262};

2264struct aml_regionspace aml_regionspace[256] = {
[ACPI_OPREG_SYSMEM0] = { NULL((void *)0), aml_opreg_sysmem_handler },
[ACPI_OPREG_SYSIO1] = { NULL((void *)0), aml_opreg_sysio_handler },
[ACPI_OPREG_PCICFG2] = { NULL((void *)0), aml_opreg_pcicfg_handler },
[ACPI_OPREG_EC3] = { NULL((void *)0), aml_opreg_ec_handler },
2269};

2271void
2272aml_register_regionspace(struct aml_node *node, int iospace, void *cookie,
  int (*handler)(void *, int, uint64_t, int, uint64_t *))
2274{
struct aml_value arg[2];

KASSERT(iospace >= 0 && iospace < 256)((iospace >= 0 && iospace < 256) ? (void)0 : __assert
("diagnostic ", "/usr/src/sys/dev/acpi/dsdt.c", 2277, "iospace >= 0 && iospace < 256"
));

aml_regionspace[iospace].cookie = cookie;
aml_regionspace[iospace].handler = handler;

/* Register address space. */
memset(&arg, 0, sizeof(arg))__builtin_memset((&arg), (0), (sizeof(arg)));
arg[0].type = AML_OBJTYPE_INTEGER;
arg[0].v_integer_.vinteger = iospace;
arg[1].type = AML_OBJTYPE_INTEGER;
arg[1].v_integer_.vinteger = 1;
node = aml_searchname(node, "_REG");
if (node)
aml_evalnode(acpi_softc, node, 2, arg, NULL((void *)0));
2291}

2293void aml_rwgen(struct aml_value *, int, int, struct aml_value *, int, int);
2294void aml_rwgpio(struct aml_value *, int, int, struct aml_value *, int, int);
2295void aml_rwgsb(struct aml_value *, int, int, int, struct aml_value *, int, int);
2296void aml_rwindexfield(struct aml_value *, struct aml_value *val, int);
2297void aml_rwfield(struct aml_value *, int, int, struct aml_value *, int);

2299/* Get PCI address for opregion objects */
2300int
2301aml_rdpciaddr(struct aml_node *pcidev, union amlpci_t *addr)
2302{
int64_t res;

addr->bus = 0;
addr->seg = 0;
if (aml_evalinteger(acpi_softc, pcidev, "_ADR", 0, NULL((void *)0), &res) == 0) {
addr->fun = res & 0xFFFF;
addr->dev = res >> 16;
}
while (pcidev != NULL((void *)0)) {
/* HID device (PCI or PCIE root): eval _SEG and _BBN */
if (__aml_search(pcidev, "_HID", 0)) {
	if (aml_evalinteger(acpi_softc, pcidev, "_SEG",
	        0, NULL((void *)0), &res) == 0) {
		addr->seg = res;
	}
	if (aml_evalinteger(acpi_softc, pcidev, "_BBN",
	        0, NULL((void *)0), &res) == 0) {
		addr->bus = res;
		break;
	}
}
pcidev = pcidev->parent;
}
return (0);
2327}

2329int
2330acpi_genio(struct acpi_softc *sc, int iodir, int iospace, uint64_t address,
  int access_size, int len, void *buffer)
2332{
struct aml_regionspace *region = &aml_regionspace[iospace];
uint8_t *pb;
int reg;

dnprintf(50, "genio: %.2x 0x%.8llx %s\n",
   iospace, address, (iodir == ACPI_IOWRITE) ? "write" : "read");

KASSERT((len % access_size) == 0)(((len % access_size) == 0) ? (void)0 : __assert("diagnostic "
, "/usr/src/sys/dev/acpi/dsdt.c", 2340, "(len % access_size) == 0"
));

pb = (uint8_t *)buffer;
for (reg = 0; reg < len; reg += access_size) {
uint64_t value;
int err;

if (iodir == ACPI_IOREAD0) {
	err = region->handler(region->cookie, iodir,
	    address + reg, access_size, &value);
	if (err)
		return err;
	switch (access_size) {
	case 1:
		*(uint8_t *)(pb + reg) = value;
		break;
	case 2:
		*(uint16_t *)(pb + reg) = value;
		break;
	case 4:
		*(uint32_t *)(pb + reg) = value;
		break;
	default:
		printf("%s: invalid access size %d on read\n",
		    __func__, access_size);
		return -1;
	}
} else {
	switch (access_size) {
	case 1:
		value = *(uint8_t *)(pb + reg);
		break;
	case 2:
		value = *(uint16_t *)(pb + reg);
		break;
	case 4:
		value = *(uint32_t *)(pb + reg);
		break;
	default:
		printf("%s: invalid access size %d on write\n",
		    __func__, access_size);
		return -1;
	}
	err = region->handler(region->cookie, iodir,
	    address + reg, access_size, &value);
	if (err)
		return err;
}
}

return 0;
2391}

2393/* Read/Write from opregion object */
2394void
2395aml_rwgen(struct aml_value *rgn, int bpos, int blen, struct aml_value *val,
  int mode, int flag)
2397{
struct aml_value tmp;
union amlpci_t pi;
void *tbit, *vbit;
int tlen, type, sz;

dnprintf(10," %5s %.2x %.8llx %.4x [%s]\n",
mode == ACPI_IOREAD ? "read" : "write",
rgn->v_opregion.iospace,
rgn->v_opregion.iobase + (bpos >> 3),
blen, aml_nodename(rgn->node));
memset(&tmp, 0, sizeof(tmp))__builtin_memset((&tmp), (0), (sizeof(tmp)));

/* Get field access size */
switch (AML_FIELD_ACCESS(flag)(((flag) >> 0) & 0xF)) {
case AML_FIELD_WORDACC0x2:
sz = 2;
break;
case AML_FIELD_DWORDACC0x3:
sz = 4;
break;
case AML_FIELD_QWORDACC0x4:
sz = 8;
break;
default:
sz = 1;
break;
}

pi.addr = (rgn->v_opregion_.vopregion.iobase + (bpos >> 3)) & ~(sz - 1);
bpos += ((rgn->v_opregion_.vopregion.iobase & (sz - 1)) << 3);
bpos &= ((sz << 3) - 1);

if (rgn->v_opregion_.vopregion.iospace == ACPI_OPREG_PCICFG2) {
/* Get PCI Root Address for this opregion */
aml_rdpciaddr(rgn->node->parent, &pi);
}

tbit = &tmp.v_integer_.vinteger;
vbit = &val->v_integer_.vinteger;
tlen = roundup(bpos + blen, sz << 3)((((bpos + blen)+((sz << 3)-1))/(sz << 3))*(sz <<
 3));
type = rgn->v_opregion_.vopregion.iospace;

if (aml_regionspace[type].handler == NULL((void *)0)) {
printf("%s: unregistered RegionSpace 0x%x\n", __func__, type);
return;
}

/* Allocate temporary storage */
if (tlen > aml_intlen) {
_aml_setvalue(&tmp, AML_OBJTYPE_BUFFER, tlen >> 3, 0);
tbit = tmp.v_buffer_.vbuffer;
}

if (blen > aml_intlen) {
if (mode == ACPI_IOREAD0) {
	/* Read from a large field:  create buffer */
	_aml_setvalue(val, AML_OBJTYPE_BUFFER, (blen + 7) >> 3, 0);
} else {
	/* Write to a large field.. create or convert buffer */
	val = aml_convert(val, AML_OBJTYPE_BUFFER, -1);

	if (blen > (val->length << 3))
		blen = val->length << 3;
}
vbit = val->v_buffer_.vbuffer;
} else {
if (mode == ACPI_IOREAD0) {
	/* Read from a short field.. initialize integer */
	_aml_setvalue(val, AML_OBJTYPE_INTEGER, 0, 0);
} else {
	/* Write to a short field.. convert to integer */
	val = aml_convert(val, AML_OBJTYPE_INTEGER, -1);
}
}

if (mode == ACPI_IOREAD0) {
/* Read bits from opregion */
acpi_genio(acpi_softc, ACPI_IOREAD0, type, pi.addr,
    sz, tlen >> 3, tbit);
aml_bufcpy(vbit, 0, tbit, bpos, blen);
} else {
/* Write bits to opregion */
if (AML_FIELD_UPDATE(flag)(((flag) >> 5) & 0x3) == AML_FIELD_PRESERVE0x0 &&
    (bpos != 0 || blen != tlen)) {
	acpi_genio(acpi_softc, ACPI_IOREAD0, type, pi.addr,
	    sz, tlen >> 3, tbit);
} else if (AML_FIELD_UPDATE(flag)(((flag) >> 5) & 0x3) == AML_FIELD_WRITEASONES0x1) {
	memset(tbit, 0xff, tmp.length)__builtin_memset((tbit), (0xff), (tmp.length));
}
/* Copy target bits, then write to region */
aml_bufcpy(tbit, bpos, vbit, 0, blen);
acpi_genio(acpi_softc, ACPI_IOWRITE1, type, pi.addr,
    sz, tlen >> 3, tbit);

aml_delref(&val, "fld.write");
}
aml_freevalue(&tmp);
2495}

2497void
2498aml_rwgpio(struct aml_value *conn, int bpos, int blen, struct aml_value *val,
  int mode, int flag)
2500{
union acpi_resource *crs = (union acpi_resource *)conn->v_buffer_.vbuffer;
struct aml_node *node;
uint16_t pin;
int v = 0;

if (conn->type != AML_OBJTYPE_BUFFER || conn->length < 5 ||
   AML_CRSTYPE(crs)((crs)->hdr.typecode & 0x80 ? (crs)->hdr.typecode :
 (crs)->hdr.typecode >> 3) != LR_GPIO0x8C || AML_CRSLEN(crs)((crs)->hdr.typecode & 0x80 ? 3+(crs)->hdr.length :
 1+((crs)->hdr.typecode & 0x7)) > conn->length)
aml_die("Invalid GpioIo")_aml_die(__FUNCTION__, 2508, "Invalid GpioIo");
if (bpos != 0 || blen != 1)
aml_die("Invalid GpioIo access")_aml_die(__FUNCTION__, 2510, "Invalid GpioIo access");

node = aml_searchname(conn->node,
   (char *)&crs->pad[crs->lr_gpio.res_off]);
pin = *(uint16_t *)&crs->pad[crs->lr_gpio.pin_off];

if (node == NULL((void *)0) || node->gpio == NULL((void *)0))
aml_die("Could not find GpioIo pin")_aml_die(__FUNCTION__, 2517, "Could not find GpioIo pin");

if (mode == ACPI_IOWRITE1) {
v = aml_val2int(val);
node->gpio->write_pin(node->gpio->cookie, pin, v);
} else {
v = node->gpio->read_pin(node->gpio->cookie, pin);
_aml_setvalue(val, AML_OBJTYPE_INTEGER, v, NULL((void *)0));
}
2526}

2528#ifndef SMALL_KERNEL

2530void
2531aml_rwgsb(struct aml_value *conn, int len, int bpos, int blen,
  struct aml_value *val, int mode, int flag)
2533{
union acpi_resource *crs = (union acpi_resource *)conn->v_buffer_.vbuffer;
struct aml_node *node;
i2c_tag_t tag;
i2c_op_t op;
i2c_addr_t addr;
int cmdlen, buflen;
uint8_t cmd[2];
uint8_t *buf;
int err;

if (conn->type != AML_OBJTYPE_BUFFER || conn->length < 5 ||
   AML_CRSTYPE(crs)((crs)->hdr.typecode & 0x80 ? (crs)->hdr.typecode :
 (crs)->hdr.typecode >> 3) != LR_SERBUS0x8E || AML_CRSLEN(crs)((crs)->hdr.typecode & 0x80 ? 3+(crs)->hdr.length :
 1+((crs)->hdr.typecode & 0x7)) > conn->length ||
   crs->lr_i2cbus.revid != 1 || crs->lr_i2cbus.type != LR_SERBUS_I2C1)
aml_die("Invalid GenericSerialBus")_aml_die(__FUNCTION__, 2547, "Invalid GenericSerialBus");
if (AML_FIELD_ACCESS(flag)(((flag) >> 0) & 0xF) != AML_FIELD_BUFFERACC0x5 ||
   bpos & 0x3 || (blen % 8) != 0 || blen > 16)
aml_die("Invalid GenericSerialBus access")_aml_die(__FUNCTION__, 2550, "Invalid GenericSerialBus access"
);

node = aml_searchname(conn->node,
   (char *)&crs->lr_i2cbus.vdata[crs->lr_i2cbus.tlength - 6]);

switch (((flag >> 6) & 0x3)) {
case 0:			/* Normal */
switch (AML_FIELD_ATTR(flag)((flag) >> 8)) {
case 0x02:	/* AttribQuick */
	cmdlen = 0;
	buflen = 0;
	break;
case 0x04:	/* AttribSendReceive */
	cmdlen = 0;
	buflen = 1;
	break;
case 0x06:	/* AttribByte */
	cmdlen = blen / 8;
	buflen = 1;
	break;
case 0x08:	/* AttribWord */
	cmdlen = blen / 8;
	buflen = 2;
	break;
case 0x0b:	/* AttribBytes */
	cmdlen = blen / 8;
	buflen = len;
	break;
case 0x0e:	/* AttribRawBytes */
	cmdlen = 0;
	buflen = len;
	break;
default:
	aml_die("unsupported access type 0x%x", flag)_aml_die(__FUNCTION__, 2583, "unsupported access type 0x%x", flag
);
	break;
}
break;
case 1:			/* AttribBytes */
cmdlen = blen / 8;
buflen = AML_FIELD_ATTR(flag)((flag) >> 8);
break;
case 2:			/* AttribRawBytes */
cmdlen = 0;
buflen = AML_FIELD_ATTR(flag)((flag) >> 8);
break;
default:
aml_die("unsupported access type 0x%x", flag)_aml_die(__FUNCTION__, 2596, "unsupported access type 0x%x", flag
);
break;
}

if (mode == ACPI_IOREAD0) {
_aml_setvalue(val, AML_OBJTYPE_BUFFER, buflen + 2, NULL((void *)0));
op = I2C_OP_READ_WITH_STOP;
} else {
op = I2C_OP_WRITE_WITH_STOP;
}

buf = val->v_buffer_.vbuffer;

/*
* Return an error if we can't find the I2C controller that
* we're supposed to use for this request.
*/
if (node == NULL((void *)0) || node->i2c == NULL((void *)0)) {
buf[0] = EIO5;
return;
}

tag = node->i2c;
addr = crs->lr_i2cbus._adr;
cmd[0] = bpos >> 3;
cmd[1] = bpos >> 11;

iic_acquire_bus(tag, 0)(*(tag)->ic_acquire_bus)((tag)->ic_cookie, (0));
err = iic_exec(tag, op, addr, &cmd, cmdlen, &buf[2], buflen, 0);
iic_release_bus(tag, 0)(*(tag)->ic_release_bus)((tag)->ic_cookie, (0));

/*
* The ACPI specification doesn't tell us what the status
* codes mean beyond implying that zero means success.  So use
* the error returned from the transfer.  All possible error
* numbers should fit in a single byte.
*/
buf[0] = err;
2634}

2636#else

2638/*
* We don't support GenericSerialBus in RAMDISK kernels.  Provide a
* dummy implementation that returns a non-zero error status.
*/

2643void
2644aml_rwgsb(struct aml_value *conn, int len, int bpos, int blen,
  struct aml_value *val, int mode, int flag)
2646{
int buflen;
uint8_t *buf;

if (AML_FIELD_ACCESS(flag)(((flag) >> 0) & 0xF) != AML_FIELD_BUFFERACC0x5 ||
   bpos & 0x3 || (blen % 8) != 0 || blen > 16)
aml_die("Invalid GenericSerialBus access")_aml_die(__FUNCTION__, 2652, "Invalid GenericSerialBus access"
);

switch (((flag >> 6) & 0x3)) {
case 0:			/* Normal */
switch (AML_FIELD_ATTR(flag)((flag) >> 8)) {
case 0x02:	/* AttribQuick */
	buflen = 0;
	break;
case 0x04:	/* AttribSendReceive */
case 0x06:	/* AttribByte */
	buflen = 1;
	break;
case 0x08:	/* AttribWord */
	buflen = 2;
	break;
case 0x0b:	/* AttribBytes */
case 0x0e:	/* AttribRawBytes */
	buflen = len;
	break;
default:
	aml_die("unsupported access type 0x%x", flag)_aml_die(__FUNCTION__, 2672, "unsupported access type 0x%x", flag
);
	break;
}
break;
case 1:			/* AttribBytes */
case 2:			/* AttribRawBytes */
buflen = AML_FIELD_ATTR(flag)((flag) >> 8);
break;
default:
aml_die("unsupported access type 0x%x", flag)_aml_die(__FUNCTION__, 2681, "unsupported access type 0x%x", flag
);
break;
}

if (mode == ACPI_IOREAD0)
_aml_setvalue(val, AML_OBJTYPE_BUFFER, buflen + 2, NULL((void *)0));

buf = val->v_buffer_.vbuffer;
buf[0] = EIO5;
2690}

2692#endif

2694void
2695aml_rwindexfield(struct aml_value *fld, struct aml_value *val, int mode)
2696{
struct aml_value tmp, *ref1, *ref2;
void *tbit, *vbit;
int vpos, bpos, blen;
int indexval;
int sz, len;

ref2 = fld->v_field_.vfield.ref2;
ref1 = fld->v_field_.vfield.ref1;
bpos = fld->v_field_.vfield.bitpos;
blen = fld->v_field_.vfield.bitlen;

memset(&tmp, 0, sizeof(tmp))__builtin_memset((&tmp), (0), (sizeof(tmp)));
tmp.refcnt = 99;

/* Get field access size */
switch (AML_FIELD_ACCESS(fld->v_field.flags)(((fld->_.vfield.flags) >> 0) & 0xF)) {
case AML_FIELD_WORDACC0x2:
sz = 2;
break;
case AML_FIELD_DWORDACC0x3:
sz = 4;
break;
case AML_FIELD_QWORDACC0x4:
sz = 8;
break;
default:
sz = 1;
break;
}

if (blen > aml_intlen) {
if (mode == ACPI_IOREAD0) {
	/* Read from a large field: create buffer */
	_aml_setvalue(val, AML_OBJTYPE_BUFFER,
	    (blen + 7) >> 3, 0);
}
vbit = val->v_buffer_.vbuffer;
} else {
if (mode == ACPI_IOREAD0) {
	/* Read from a short field: initialize integer */
	_aml_setvalue(val, AML_OBJTYPE_INTEGER, 0, 0);
}
vbit = &val->v_integer_.vinteger;
}
tbit = &tmp.v_integer_.vinteger;
vpos = 0;

indexval = (bpos >> 3) & ~(sz - 1);
bpos = bpos - (indexval << 3);

while (blen > 0) {
len = min(blen, (sz << 3) - bpos);

/* Write index register */
_aml_setvalue(&tmp, AML_OBJTYPE_INTEGER, indexval, 0);
aml_rwfield(ref2, 0, aml_intlen, &tmp, ACPI_IOWRITE1);
indexval += sz;

/* Read/write data register */
_aml_setvalue(&tmp, AML_OBJTYPE_INTEGER, 0, 0);
if (mode == ACPI_IOWRITE1)
	aml_bufcpy(tbit, 0, vbit, vpos, len);
aml_rwfield(ref1, bpos, len, &tmp, mode);
if (mode == ACPI_IOREAD0)
	aml_bufcpy(vbit, vpos, tbit, 0, len);
vpos += len;
blen -= len;
bpos = 0;
}
2766}

2768void
2769aml_rwfield(struct aml_value *fld, int bpos, int blen, struct aml_value *val,
  int mode)
2771{
struct aml_value tmp, *ref1, *ref2;

ref2 = fld->v_field_.vfield.ref2;
ref1 = fld->v_field_.vfield.ref1;
if (blen > fld->v_field_.vfield.bitlen)
blen = fld->v_field_.vfield.bitlen;

aml_lockfield(NULL((void *)0), fld);
memset(&tmp, 0, sizeof(tmp))__builtin_memset((&tmp), (0), (sizeof(tmp)));
aml_addref(&tmp, "fld.write");
if (fld->v_field_.vfield.type == AMLOP_INDEXFIELD0x5B86) {
aml_rwindexfield(fld, val, mode);
} else if (fld->v_field_.vfield.type == AMLOP_BANKFIELD0x5B87) {
_aml_setvalue(&tmp, AML_OBJTYPE_INTEGER, fld->v_field_.vfield.ref3, 0);
aml_rwfield(ref2, 0, aml_intlen, &tmp, ACPI_IOWRITE1);
aml_rwgen(ref1, fld->v_field_.vfield.bitpos, fld->v_field_.vfield.bitlen,
    val, mode, fld->v_field_.vfield.flags);
} else if (fld->v_field_.vfield.type == AMLOP_FIELD0x5B81) {
switch (ref1->v_opregion_.vopregion.iospace) {
case ACPI_OPREG_GPIO8:
	aml_rwgpio(ref2, bpos, blen, val, mode,
	    fld->v_field_.vfield.flags);
	break;
case ACPI_OPREG_GSB9:
	aml_rwgsb(ref2, fld->v_field_.vfield.ref3,
	    fld->v_field_.vfield.bitpos + bpos, blen,
	    val, mode, fld->v_field_.vfield.flags);
	break;
default:
	aml_rwgen(ref1, fld->v_field_.vfield.bitpos + bpos, blen,
	    val, mode, fld->v_field_.vfield.flags);
	break;
}
} else if (mode == ACPI_IOREAD0) {
/* bufferfield:read */
_aml_setvalue(val, AML_OBJTYPE_INTEGER, 0, 0);
aml_bufcpy(&val->v_integer_.vinteger, 0, ref1->v_buffer_.vbuffer,
    fld->v_field_.vfield.bitpos, fld->v_field_.vfield.bitlen);
} else {
/* bufferfield:write */
val = aml_convert(val, AML_OBJTYPE_INTEGER, -1);
aml_bufcpy(ref1->v_buffer_.vbuffer, fld->v_field_.vfield.bitpos, &val->v_integer_.vinteger,
    0, fld->v_field_.vfield.bitlen);
aml_delref(&val, "wrbuffld");
}
aml_unlockfield(NULL((void *)0), fld);
2818}

2820/* Create Field Object          data		index
*   AMLOP_FIELD		n:OpRegion	NULL
*   AMLOP_INDEXFIELD		n:Field		n:Field
*   AMLOP_BANKFIELD		n:OpRegion	n:Field
*   AMLOP_CREATEFIELD		t:Buffer	NULL
*   AMLOP_CREATEBITFIELD	t:Buffer	NULL
*   AMLOP_CREATEBYTEFIELD	t:Buffer	NULL
*   AMLOP_CREATEWORDFIELD	t:Buffer	NULL
*   AMLOP_CREATEDWORDFIELD	t:Buffer	NULL
*   AMLOP_CREATEQWORDFIELD	t:Buffer	NULL
*   AMLOP_INDEX		t:Buffer	NULL
*/
2832void
2833aml_createfield(struct aml_value *field, int opcode,
struct aml_value *data, int bpos, int blen,
struct aml_value *index, int indexval, int flags)
2836{
dnprintf(10, "## %s(%s): %s %.4x-%.4x\n",
   aml_mnem(opcode, 0),
   blen > aml_intlen ? "BUF" : "INT",
   aml_nodename(field->node), bpos, blen);
if (index) {
dnprintf(10, "  index:%s:%.2x\n", aml_nodename(index->node),
    indexval);
}
dnprintf(10, "  data:%s\n", aml_nodename(data->node));
field->type = (opcode == AMLOP_FIELD0x5B81 ||
   opcode == AMLOP_INDEXFIELD0x5B86 ||
   opcode == AMLOP_BANKFIELD0x5B87) ?
   AML_OBJTYPE_FIELDUNIT :
   AML_OBJTYPE_BUFFERFIELD;

if (field->type == AML_OBJTYPE_BUFFERFIELD &&
   data->type != AML_OBJTYPE_BUFFER)
data = aml_convert(data, AML_OBJTYPE_BUFFER, -1);

field->v_field_.vfield.type = opcode;
field->v_field_.vfield.bitpos = bpos;
field->v_field_.vfield.bitlen = blen;
field->v_field_.vfield.ref3 = indexval;
field->v_field_.vfield.ref2 = index;
field->v_field_.vfield.ref1 = data;
field->v_field_.vfield.flags = flags;

/* Increase reference count */
aml_addref(data, "Field.Data");
aml_addref(index, "Field.Index");
2867}

2869/* Parse Field/IndexField/BankField scope */
2870void
2871aml_parsefieldlist(struct aml_scope *mscope, int opcode, int flags,
  struct aml_value *data, struct aml_value *index, int indexval)
2873{
struct aml_value *conn = NULL((void *)0);
struct aml_value *rv;
int bpos, blen;

if (mscope == NULL((void *)0))
return;
bpos = 0;
while (mscope->pos < mscope->end) {
switch (*mscope->pos) {
case 0x00: /* ReservedField */
	mscope->pos++;
	blen = aml_parselength(mscope);
	break;
case 0x01: /* AccessField */
	mscope->pos++;
	blen = 0;
	flags = aml_get8(mscope->pos++)*(uint8_t *)(mscope->pos++);
	flags |= aml_get8(mscope->pos++)*(uint8_t *)(mscope->pos++) << 8;
	break;
case 0x02: /* ConnectionField */
	mscope->pos++;
	blen = 0;
	conn = aml_parse(mscope, 'o', "Connection");
	if (conn == NULL((void *)0))
		aml_die("Could not parse connection")_aml_die(__FUNCTION__, 2898, "Could not parse connection");
	conn->node = mscope->node;
	break;
case 0x03: /* ExtendedAccessField */
	mscope->pos++;
	blen = 0;
	flags = aml_get8(mscope->pos++)*(uint8_t *)(mscope->pos++);
	flags |= aml_get8(mscope->pos++)*(uint8_t *)(mscope->pos++) << 8;
	indexval = aml_get8(mscope->pos++)*(uint8_t *)(mscope->pos++);
	break;
default: /* NamedField */
	mscope->pos = aml_parsename(mscope->node, mscope->pos,
	    &rv, 1);
	blen = aml_parselength(mscope);
	aml_createfield(rv, opcode, data, bpos, blen,
	    conn ? conn : index, indexval, flags);
	aml_delref(&rv, 0);
	break;
}
bpos += blen;
}
aml_popscope(mscope);
2920}

2922/*
* Mutex/Event utility functions
*/
2925int	acpi_mutex_acquire(struct aml_scope *, struct aml_value *, int);
2926void	acpi_mutex_release(struct aml_scope *, struct aml_value *);
2927int	acpi_event_wait(struct aml_scope *, struct aml_value *, int);
2928void	acpi_event_signal(struct aml_scope *, struct aml_value *);
2929void	acpi_event_reset(struct aml_scope *, struct aml_value *);

2931int
2932acpi_mutex_acquire(struct aml_scope *scope, struct aml_value *mtx,
  int timeout)
2934{
if (mtx->v_mtx_.Vmutex.owner == NULL((void *)0) || scope == mtx->v_mtx_.Vmutex.owner) {
/* We are now the owner */
mtx->v_mtx_.Vmutex.owner = scope;
if (mtx == aml_global_lock) {
	dnprintf(10,"LOCKING GLOBAL\n");
	acpi_glk_enter();
}
dnprintf(5,"%s acquires mutex %s\n", scope->node->name,
    mtx->node->name);
return (0);
} else if (timeout == 0) {
return (-1);
}
/* Wait for mutex */
return (0);
2950}

2952void
2953acpi_mutex_release(struct aml_scope *scope, struct aml_value *mtx)
2954{
if (mtx == aml_global_lock) {
dnprintf(10,"UNLOCKING GLOBAL\n");
acpi_glk_leave();
}
dnprintf(5, "%s releases mutex %s\n", scope->node->name,
   mtx->node->name);
mtx->v_mtx_.Vmutex.owner = NULL((void *)0);
/* Wakeup waiters */
2963}

2965int
2966acpi_event_wait(struct aml_scope *scope, struct aml_value *evt, int timeout)
2967{
/* Wait for event to occur; do work in meantime */
while (evt->v_evt_.Vevent.state == 0 && timeout >= 0) {
if (acpi_dotask(acpi_softc))
    continue;
if (!cold) {
	if (rwsleep(evt, &acpi_softc->sc_lck, PWAIT32,
	    "acpievt", 1) == EWOULDBLOCK35) {
		if (timeout < AML_NO_TIMEOUT0xffff)
			timeout -= (1000 / hz);
	}
} else {
	delay(1000)(*delay_func)(1000);
	if (timeout < AML_NO_TIMEOUT0xffff)
		timeout--;
}
}
if (evt->v_evt_.Vevent.state == 0)
return (-1);
evt->v_evt_.Vevent.state--;
return (0);
2988}

2990void
2991acpi_event_signal(struct aml_scope *scope, struct aml_value *evt)
2992{
evt->v_evt_.Vevent.state++;
if (evt->v_evt_.Vevent.state > 0)
wakeup_one(evt)wakeup_n((evt), 1);
2996}

2998void
2999acpi_event_reset(struct aml_scope *scope, struct aml_value *evt)
3000{
evt->v_evt_.Vevent.state = 0;
3002}

3004/* Store result value into an object */
3005void
3006aml_store(struct aml_scope *scope, struct aml_value *lhs , int64_t ival,
  struct aml_value *rhs)
3008{
struct aml_value tmp;
struct aml_node *node;
int mlen;

/* Already set */
if (lhs == rhs || lhs == NULL((void *)0) || lhs->type == AML_OBJTYPE_NOTARGET) {
return;
}
memset(&tmp, 0, sizeof(tmp))__builtin_memset((&tmp), (0), (sizeof(tmp)));
tmp.refcnt=99;
if (rhs == NULL((void *)0)) {
rhs = _aml_setvalue(&tmp, AML_OBJTYPE_INTEGER, ival, NULL((void *)0));
}
if (rhs->type == AML_OBJTYPE_BUFFERFIELD ||
   rhs->type == AML_OBJTYPE_FIELDUNIT) {
aml_rwfield(rhs, 0, rhs->v_field_.vfield.bitlen, &tmp, ACPI_IOREAD0);
rhs = &tmp;
}
/* Store to LocalX: free value */
if (lhs->stack >= AMLOP_LOCAL00x60 && lhs->stack <= AMLOP_LOCAL70x67)
aml_freevalue(lhs);

lhs = aml_gettgt(lhs, AMLOP_STORE0x70);

/* Store to LocalX: free value again */
if (lhs->stack >= AMLOP_LOCAL00x60 && lhs->stack <= AMLOP_LOCAL70x67)
aml_freevalue(lhs);
switch (lhs->type) {
case AML_OBJTYPE_UNINITIALIZED:
aml_copyvalue(lhs, rhs);
break;
case AML_OBJTYPE_BUFFERFIELD:
case AML_OBJTYPE_FIELDUNIT:
aml_rwfield(lhs, 0, lhs->v_field_.vfield.bitlen, rhs, ACPI_IOWRITE1);
break;
case AML_OBJTYPE_DEBUGOBJ:
break;
case AML_OBJTYPE_INTEGER:
rhs = aml_convert(rhs, lhs->type, -1);
lhs->v_integer_.vinteger = rhs->v_integer_.vinteger;
aml_delref(&rhs, "store.int");
break;
case AML_OBJTYPE_BUFFER:
case AML_OBJTYPE_STRING:
rhs = aml_convert(rhs, lhs->type, -1);
if (lhs->length < rhs->length) {
	dnprintf(10, "Overrun! %d,%d\n",
	    lhs->length, rhs->length);
	aml_freevalue(lhs);
	_aml_setvalue(lhs, rhs->type, rhs->length, NULL((void *)0));
}
mlen = min(lhs->length, rhs->length);
memset(lhs->v_buffer, 0x00, lhs->length)__builtin_memset((lhs->_.vbuffer), (0x00), (lhs->length
));
memcpy(lhs->v_buffer, rhs->v_buffer, mlen)__builtin_memcpy((lhs->_.vbuffer), (rhs->_.vbuffer), (mlen
));
aml_delref(&rhs, "store.bufstr");
break;
case AML_OBJTYPE_PACKAGE:
/* Convert to LHS type, copy into LHS */
if (rhs->type != AML_OBJTYPE_PACKAGE) {
	aml_die("Copy non-package into package?")_aml_die(__FUNCTION__, 3068, "Copy non-package into package?"
);
}
aml_freevalue(lhs);
aml_copyvalue(lhs, rhs);
break;
case AML_OBJTYPE_NAMEREF:
node = __aml_searchname(scope->node,
    aml_getname(lhs->v_nameref_.vbuffer), 1);
if (node == NULL((void *)0)) {
	aml_die("Could not create node %s",_aml_die(__FUNCTION__, 3078, "Could not create node %s", aml_getname
(lhs->_.vbuffer))
	    aml_getname(lhs->v_nameref))_aml_die(__FUNCTION__, 3078, "Could not create node %s", aml_getname
(lhs->_.vbuffer));
}
aml_copyvalue(node->value, rhs);
break;
case AML_OBJTYPE_METHOD:
/* Method override */
if (rhs->type != AML_OBJTYPE_INTEGER) {
	aml_die("Overriding a method with a non-int?")_aml_die(__FUNCTION__, 3085, "Overriding a method with a non-int?"
);
}
aml_freevalue(lhs);
aml_copyvalue(lhs, rhs);
break;
default:
aml_die("Store to default type!	 %x\n", lhs->type)_aml_die(__FUNCTION__, 3091, "Store to default type!	 %x\n", lhs
->type);
break;
}
aml_freevalue(&tmp);
3095}

3097#ifdef DDB1
3098/* Disassembler routines */
3099void aml_disprintf(void *arg, const char *fmt, ...);

3101void
3102aml_disprintf(void *arg, const char *fmt, ...)
3103{
va_list ap;

va_start(ap, fmt)__builtin_va_start((ap), fmt);
vprintf(fmt, ap);
va_end(ap)__builtin_va_end((ap));
3109}

3111void
3112aml_disasm(struct aml_scope *scope, int lvl,
  void (*dbprintf)(void *, const char *, ...)
   __attribute__((__format__(__kprintf__,2,3))),
  void *arg)
3116{
int pc, opcode;
struct aml_opcode *htab;
uint64_t ival;
struct aml_value *rv, tmp;
uint8_t *end = NULL((void *)0);
struct aml_scope ms;
char *ch;
char  mch[64];

if (dbprintf == NULL((void *)0))
dbprintf = aml_disprintf;

pc = aml_pc(scope->pos);
opcode = aml_parseopcode(scope);
htab = aml_findopcode(opcode);

/* Display address + indent */
if (lvl <= 0x7FFF) {
dbprintf(arg, "%.4x ", pc);
for (pc=0; pc<lvl; pc++) {
	dbprintf(arg, "	 ");
}
}
ch = NULL((void *)0);
switch (opcode) {
case AMLOP_NAMECHAR0x5F:
scope->pos = aml_parsename(scope->node, scope->pos, &rv, 0);
if (rv->type == AML_OBJTYPE_NAMEREF) {
	ch = "@@@";
	aml_delref(&rv, "disasm");
	break;
}
/* if this is a method, get arguments */
strlcpy(mch, aml_nodename(rv->node), sizeof(mch));
if (rv->type == AML_OBJTYPE_METHOD) {
	strlcat(mch, "(", sizeof(mch));
	for (ival=0;
	    ival < AML_METHOD_ARGCOUNT(rv->v_method.flags)(((rv->_.vmethod.flags) >> 0) & 0x7);
	    ival++) {
		strlcat(mch, ival ? ", %z" : "%z",
		    sizeof(mch));
	}
	strlcat(mch, ")", sizeof(mch));
}
aml_delref(&rv, "");
ch = mch;
break;

case AMLOP_ZERO0x00:
case AMLOP_ONE0x01:
case AMLOP_ONES0xFF:
case AMLOP_LOCAL00x60:
case AMLOP_LOCAL10x61:
case AMLOP_LOCAL20x62:
case AMLOP_LOCAL30x63:
case AMLOP_LOCAL40x64:
case AMLOP_LOCAL50x65:
case AMLOP_LOCAL60x66:
case AMLOP_LOCAL70x67:
case AMLOP_ARG00x68:
case AMLOP_ARG10x69:
case AMLOP_ARG20x6A:
case AMLOP_ARG30x6B:
case AMLOP_ARG40x6C:
case AMLOP_ARG50x6D:
case AMLOP_ARG60x6E:
case AMLOP_NOP0xA3:
case AMLOP_REVISION0x5B30:
case AMLOP_DEBUG0x5B31:
case AMLOP_CONTINUE0x9F:
case AMLOP_BREAKPOINT0xCC:
case AMLOP_BREAK0xA5:
ch="%m";
break;
case AMLOP_BYTEPREFIX0x0A:
ch="%b";
break;
case AMLOP_WORDPREFIX0x0B:
ch="%w";
break;
case AMLOP_DWORDPREFIX0x0C:
ch="%d";
break;
case AMLOP_QWORDPREFIX0x0E:
ch="%q";
break;
case AMLOP_STRINGPREFIX0x0D:
ch="%a";
break;

case AMLOP_INCREMENT0x75:
case AMLOP_DECREMENT0x76:
case AMLOP_LNOT0x92:
case AMLOP_SIZEOF0x87:
case AMLOP_DEREFOF0x83:
case AMLOP_REFOF0x71:
case AMLOP_OBJECTTYPE0x8E:
case AMLOP_UNLOAD0x5B2A:
case AMLOP_RELEASE0x5B27:
case AMLOP_SIGNAL0x5B24:
case AMLOP_RESET0x5B26:
case AMLOP_STALL0x5B21:
case AMLOP_SLEEP0x5B22:
case AMLOP_RETURN0xA4:
ch="%m(%n)";
break;
case AMLOP_OR0x7D:
case AMLOP_ADD0x72:
case AMLOP_AND0x7B:
case AMLOP_NAND0x7C:
case AMLOP_XOR0x7F:
case AMLOP_SHL0x79:
case AMLOP_SHR0x7A:
case AMLOP_NOR0x7E:
case AMLOP_MOD0x85:
case AMLOP_SUBTRACT0x74:
case AMLOP_MULTIPLY0x77:
case AMLOP_INDEX0x88:
case AMLOP_CONCAT0x73:
case AMLOP_CONCATRES0x84:
case AMLOP_TOSTRING0x9C:
ch="%m(%n, %n, %n)";
break;
case AMLOP_CREATEBYTEFIELD0x8C:
case AMLOP_CREATEWORDFIELD0x8B:
case AMLOP_CREATEDWORDFIELD0x8A:
case AMLOP_CREATEQWORDFIELD0x8F:
case AMLOP_CREATEBITFIELD0x8D:
ch="%m(%n, %n, %N)";
break;
case AMLOP_CREATEFIELD0x5B13:
ch="%m(%n, %n, %n, %N)";
break;
case AMLOP_DIVIDE0x78:
case AMLOP_MID0x9E:
ch="%m(%n, %n, %n, %n)";
break;
case AMLOP_LAND0x90:
case AMLOP_LOR0x91:
case AMLOP_LNOTEQUAL0x9293:
case AMLOP_LLESSEQUAL0x9294:
case AMLOP_LLESS0x95:
case AMLOP_LEQUAL0x93:
case AMLOP_LGREATEREQUAL0x9295:
case AMLOP_LGREATER0x94:
case AMLOP_NOT0x80:
case AMLOP_FINDSETLEFTBIT0x81:
case AMLOP_FINDSETRIGHTBIT0x82:
case AMLOP_TOINTEGER0x99:
case AMLOP_TOBUFFER0x96:
case AMLOP_TOHEXSTRING0x98:
case AMLOP_TODECSTRING0x97:
case AMLOP_FROMBCD0x5B28:
case AMLOP_TOBCD0x5B29:
case AMLOP_WAIT0x5B25:
case AMLOP_LOAD0x5B20:
case AMLOP_STORE0x70:
case AMLOP_NOTIFY0x86:
case AMLOP_COPYOBJECT0x9D:
ch="%m(%n, %n)";
break;
case AMLOP_ACQUIRE0x5B23:
ch = "%m(%n, %w)";
break;
case AMLOP_CONDREFOF0x5B12:
ch="%m(%R, %n)";
break;
case AMLOP_ALIAS0x06:
ch="%m(%n, %N)";
break;
case AMLOP_NAME0x08:
ch="%m(%N, %n)";
break;
case AMLOP_EVENT0x5B02:
ch="%m(%N)";
break;
case AMLOP_MUTEX0x5B01:
ch = "%m(%N, %b)";
break;
case AMLOP_OPREGION0x5B80:
ch = "%m(%N, %b, %n, %n)";
break;
case AMLOP_DATAREGION0x5B88:
ch="%m(%N, %n, %n, %n)";
break;
case AMLOP_FATAL0x5B32:
ch = "%m(%b, %d, %n)";
break;
case AMLOP_IF0xA0:
case AMLOP_WHILE0xA2:
case AMLOP_SCOPE0x10:
case AMLOP_THERMALZONE0x5B85:
case AMLOP_VARPACKAGE0x13:
end = aml_parseend(scope);
ch = "%m(%n) {\n%T}";
break;
case AMLOP_DEVICE0x5B82:
end = aml_parseend(scope);
ch = "%m(%N) {\n%T}";
break;
case AMLOP_POWERRSRC0x5B84:
end = aml_parseend(scope);
ch = "%m(%N, %b, %w) {\n%T}";
break;
case AMLOP_PROCESSOR0x5B83:
end = aml_parseend(scope);
ch = "%m(%N, %b, %d, %b) {\n%T}";
break;
case AMLOP_METHOD0x14:
end = aml_parseend(scope);
ch = "%m(%N, %b) {\n%T}";
break;
case AMLOP_PACKAGE0x12:
end = aml_parseend(scope);
ch = "%m(%b) {\n%T}";
break;
case AMLOP_ELSE0xA1:
end = aml_parseend(scope);
ch = "%m {\n%T}";
break;
case AMLOP_BUFFER0x11:
end = aml_parseend(scope);
ch = "%m(%n) { %B }";
break;
case AMLOP_INDEXFIELD0x5B86:
end = aml_parseend(scope);
ch = "%m(%n, %n, %b) {\n%F}";
break;
case AMLOP_BANKFIELD0x5B87:
end = aml_parseend(scope);
ch = "%m(%n, %n, %n, %b) {\n%F}";
break;
case AMLOP_FIELD0x5B81:
end = aml_parseend(scope);
ch = "%m(%n, %b) {\n%F}";
break;
case AMLOP_MATCH0x89:
ch = "%m(%n, %b, %n, %b, %n, %n)";
break;
case AMLOP_LOADTABLE0x5B1F:
ch = "%m(%n, %n, %n, %n, %n, %n)";
break;
default:
aml_die("opcode = %x\n", opcode)_aml_die(__FUNCTION__, 3360, "opcode = %x\n", opcode);
break;
}

/* Parse printable buffer args */
while (ch && *ch) {
char c;

if (*ch != '%') {
	dbprintf(arg,"%c", *(ch++));
	continue;
}
c = *(++ch);
switch (c) {
case 'b':
case 'w':
case 'd':
case 'q':
	/* Parse simple object: don't allocate */
	aml_parsesimple(scope, c, &tmp);
	dbprintf(arg,"0x%llx", tmp.v_integer_.vinteger);
	break;
case 'a':
	dbprintf(arg, "\'%s\'", scope->pos);
	scope->pos += strlen(scope->pos)+1;
	break;
case 'N':
	/* Create Name */
	rv = aml_parsesimple(scope, c, NULL((void *)0));
	dbprintf(arg, "%s", aml_nodename(rv->node));
	break;
case 'm':
	/* display mnemonic */
	dbprintf(arg, "%s", htab->mnem);
	break;
case 'R':
	/* Search name */
	printf("%s", aml_getname(scope->pos));
	scope->pos = aml_parsename(scope->node, scope->pos,
	    &rv, 0);
	aml_delref(&rv, 0);
	break;
case 'z':
case 'n':
	/* generic arg: recurse */
	aml_disasm(scope, lvl | 0x8000, dbprintf, arg);
	break;
case 'B':
	/* Buffer */
	scope->pos = end;
	break;
case 'F':
	/* Scope: Field List */
	memset(&ms, 0, sizeof(ms))__builtin_memset((&ms), (0), (sizeof(ms)));
	ms.node = scope->node;
	ms.start = scope->pos;
	ms.end = end;
	ms.pos = ms.start;
	ms.type = AMLOP_FIELD0x5B81;

	while (ms.pos < ms.end) {
		if (*ms.pos == 0x00) {
			ms.pos++;
			aml_parselength(&ms);
		} else if (*ms.pos == 0x01) {
			ms.pos+=3;
		} else {
			ms.pos = aml_parsename(ms.node,
			     ms.pos, &rv, 1);
			aml_parselength(&ms);
			dbprintf(arg,"	%s\n",
			    aml_nodename(rv->node));
			aml_delref(&rv, 0);
		}
	}

	/* Display address and closing bracket */
	dbprintf(arg,"%.4x ", aml_pc(scope->pos));
	for (pc=0; pc<(lvl & 0x7FFF); pc++) {
		dbprintf(arg,"  ");
	}
	scope->pos = end;
	break;
case 'T':
	/* Scope: Termlist */
	memset(&ms, 0, sizeof(ms))__builtin_memset((&ms), (0), (sizeof(ms)));
	ms.node = scope->node;
	ms.start = scope->pos;
	ms.end = end;
	ms.pos = ms.start;
	ms.type = AMLOP_SCOPE0x10;

	while (ms.pos < ms.end) {
		aml_disasm(&ms, (lvl + 1) & 0x7FFF,
		    dbprintf, arg);
	}

	/* Display address and closing bracket */
	dbprintf(arg,"%.4x ", aml_pc(scope->pos));
	for (pc=0; pc<(lvl & 0x7FFF); pc++) {
		dbprintf(arg,"  ");
	}
	scope->pos = end;
	break;
}
ch++;
}
if (lvl <= 0x7FFF) {
dbprintf(arg,"\n");
}
3470}
3471#endif /* DDB */

3473int aml_busy;

3475/* Evaluate method or buffervalue objects */
3476struct aml_value *
3477aml_eval(struct aml_scope *scope, struct aml_value *my_ret, int ret_type,
  int argc, struct aml_value *argv)
3479{
struct aml_value *tmp = my_ret;
struct aml_scope *ms;
int idx;

switch (tmp->type) {
case AML_OBJTYPE_NAMEREF:
my_ret = aml_seterror(scope, "Undefined name: %s",
    aml_getname(my_ret->v_nameref_.vbuffer));
break;
case AML_OBJTYPE_METHOD:
dnprintf(10,"\n--== Eval Method [%s, %d args] to %c ==--\n",
    aml_nodename(tmp->node),
    AML_METHOD_ARGCOUNT(tmp->v_method.flags),
    ret_type);
ms = aml_pushscope(scope, tmp, tmp->node, AMLOP_METHOD0x14);

/* Parse method arguments */
for (idx=0; idx<AML_METHOD_ARGCOUNT(tmp->v_method.flags)(((tmp->_.vmethod.flags) >> 0) & 0x7); idx++) {
	struct aml_value *sp;

	sp = aml_getstack(ms, AMLOP_ARG00x68+idx);
	if (argv) {
		aml_copyvalue(sp, &argv[idx]);
	} else {
		_aml_setvalue(sp, AML_OBJTYPE_OBJREF, AMLOP_ARG00x68 + idx, 0);
		sp->v_objref_.vobjref.ref = aml_parse(scope, 't', "ARGX");
	}
}
3508#ifdef ACPI_DEBUG
aml_showstack(ms);
3510#endif

/* Evaluate method scope */
aml_root.start = tmp->v_method_.vmethod.base;
if (tmp->v_method_.vmethod.fneval != NULL((void *)0)) {
	my_ret = tmp->v_method_.vmethod.fneval(ms, NULL((void *)0));
} else {
	aml_parse(ms, 'T', "METHEVAL");
	my_ret = ms->retv;
}
dnprintf(10,"\n--==Finished evaluating method: %s %c\n",
    aml_nodename(tmp->node), ret_type);
3522#ifdef ACPI_DEBUG
aml_showvalue(my_ret);
aml_showstack(ms);
3525#endif
aml_popscope(ms);
break;
case AML_OBJTYPE_BUFFERFIELD:
case AML_OBJTYPE_FIELDUNIT:
my_ret = aml_allocvalue(0,0,NULL((void *)0));
dnprintf(20,"quick: Convert Bufferfield to %c %p\n",
    ret_type, my_ret);
aml_rwfield(tmp, 0, tmp->v_field_.vfield.bitlen, my_ret, ACPI_IOREAD0);
break;
}
if (ret_type == 'i' && my_ret && my_ret->type != AML_OBJTYPE_INTEGER) {
3537#ifndef SMALL_KERNEL
aml_showvalue(my_ret);
3539#endif
aml_die("Not Integer")_aml_die(__FUNCTION__, 3540, "Not Integer");
}
return my_ret;
3543}

3545/*
* The following opcodes produce return values
*   TOSTRING	-> Str
*   TOHEXSTR	-> Str
*   TODECSTR	-> Str
*   STRINGPFX	-> Str
*   BUFFER	-> Buf
*   CONCATRES	-> Buf
*   TOBUFFER	-> Buf
*   MID	-> Buf|Str
*   CONCAT	-> Buf|Str
*   PACKAGE	-> Pkg
*   VARPACKAGE -> Pkg
*   LOCALx	-> Obj
*   ARGx	-> Obj
*   NAMECHAR	-> Obj
*   REFOF	-> ObjRef
*   INDEX	-> ObjRef
*   DEREFOF	-> DataRefObj
*   COPYOBJECT -> DataRefObj
*   STORE	-> DataRefObj

*   ZERO	-> Int
*   ONE	-> Int
*   ONES	-> Int
*   REVISION	-> Int
*   B/W/D/Q	-> Int
*   OR		-> Int
*   AND	-> Int
*   ADD	-> Int
*   NAND	-> Int
*   XOR	-> Int
*   SHL	-> Int
*   SHR	-> Int
*   NOR	-> Int
*   MOD	-> Int
*   SUBTRACT	-> Int
*   MULTIPLY	-> Int
*   DIVIDE	-> Int
*   NOT	-> Int
*   TOBCD	-> Int
*   FROMBCD	-> Int
*   FSLEFTBIT	-> Int
*   FSRIGHTBIT -> Int
*   INCREMENT	-> Int
*   DECREMENT	-> Int
*   TOINTEGER	-> Int
*   MATCH	-> Int
*   SIZEOF	-> Int
*   OBJECTTYPE -> Int
*   TIMER	-> Int

*   CONDREFOF	-> Bool
*   ACQUIRE	-> Bool
*   WAIT	-> Bool
*   LNOT	-> Bool
*   LAND	-> Bool
*   LOR	-> Bool
*   LLESS	-> Bool
*   LEQUAL	-> Bool
*   LGREATER	-> Bool
*   LNOTEQUAL	-> Bool
*   LLESSEQUAL -> Bool
*   LGREATEREQ -> Bool

*   LOADTABLE	-> DDB
*   DEBUG	-> Debug

*   The following opcodes do not generate a return value:
*   NOP
*   BREAKPOINT
*   RELEASE
*   RESET
*   SIGNAL
*   NAME
*   ALIAS
*   OPREGION
*   DATAREGION
*   EVENT
*   MUTEX
*   SCOPE
*   DEVICE
*   THERMALZONE
*   POWERRSRC
*   PROCESSOR
*   METHOD
*   CREATEFIELD
*   CREATEBITFIELD
*   CREATEBYTEFIELD
*   CREATEWORDFIELD
*   CREATEDWORDFIELD
*   CREATEQWORDFIELD
*   FIELD
*   INDEXFIELD
*   BANKFIELD
*   STALL
*   SLEEP
*   NOTIFY
*   FATAL
*   LOAD
*   UNLOAD
*   IF
*   ELSE
*   WHILE
*   BREAK
*   CONTINUE
*/

3653/* Parse a simple object from AML Bytestream */
3654struct aml_value *
3655aml_parsesimple(struct aml_scope *scope, char ch, struct aml_value *rv)
3656{
if (rv == NULL((void *)0))
rv = aml_allocvalue(0,0,NULL((void *)0));
switch (ch) {
case AML_ARG_REVISION'R':
_aml_setvalue(rv, AML_OBJTYPE_INTEGER, AML_REVISION0x01, NULL((void *)0));
break;
case AML_ARG_DEBUG'D':
_aml_setvalue(rv, AML_OBJTYPE_DEBUGOBJ, 0, NULL((void *)0));
break;
case AML_ARG_BYTE'b':
_aml_setvalue(rv, AML_OBJTYPE_INTEGER,
    aml_get8(scope->pos)*(uint8_t *)(scope->pos), NULL((void *)0));
scope->pos += 1;
break;
case AML_ARG_WORD'w':
_aml_setvalue(rv, AML_OBJTYPE_INTEGER,
    aml_get16(scope->pos)*(uint16_t *)(scope->pos), NULL((void *)0));
scope->pos += 2;
break;
case AML_ARG_DWORD'd':
_aml_setvalue(rv, AML_OBJTYPE_INTEGER,
    aml_get32(scope->pos)*(uint32_t *)(scope->pos), NULL((void *)0));
scope->pos += 4;
break;
case AML_ARG_QWORD'q':
_aml_setvalue(rv, AML_OBJTYPE_INTEGER,
    aml_get64(scope->pos)*(uint64_t *)(scope->pos), NULL((void *)0));
scope->pos += 8;
break;
case AML_ARG_STRING'a':
_aml_setvalue(rv, AML_OBJTYPE_STRING, -1, scope->pos);
scope->pos += rv->length+1;
break;
}
return rv;
3692}

3694/*
* Main Opcode Parser/Evaluator
*
* ret_type is expected type for return value
*   'o' = Data Object (Int/Str/Buf/Pkg/Name)
*   'i' = Integer
*   't' = TermArg     (Int/Str/Buf/Pkg)
*   'r' = Target      (NamedObj/Local/Arg/Null)
*   'S' = SuperName   (NamedObj/Local/Arg)
*   'T' = TermList
*/
3705#define aml_debugger(x)

3707int maxdp;

3709struct aml_value *
3710aml_gettgt(struct aml_value *val, int opcode)
3711{
while (val && val->type == AML_OBJTYPE_OBJREF) {
val = val->v_objref_.vobjref.ref;
}
return val;
3716}

3718struct aml_value *
3719aml_seterror(struct aml_scope *scope, const char *fmt, ...)
3720{
va_list ap;

va_start(ap, fmt)__builtin_va_start((ap), fmt);
printf("### AML PARSE ERROR (0x%x): ", aml_pc(scope->pos));
vprintf(fmt, ap);
printf("\n");
va_end(ap)__builtin_va_end((ap));

while (scope) {
scope->pos = scope->end;
scope = scope->parent;
}
aml_error++;
return aml_allocvalue(AML_OBJTYPE_INTEGER, 0, 0);
3735}

3737struct aml_value *
3738aml_loadtable(struct acpi_softc *sc, const char *signature,
   const char *oemid, const char *oemtableid, const char *rootpath,
   const char *parameterpath, struct aml_value *parameterdata)
3741{
struct acpi_table_header *hdr;
struct acpi_dsdt *p_dsdt;
struct acpi_q *entry;

if (strlen(parameterpath) > 0)
aml_die("LoadTable: ParameterPathString unsupported")_aml_die(__FUNCTION__, 3747, "LoadTable: ParameterPathString unsupported"
);

SIMPLEQ_FOREACH(entry, &sc->sc_tables, q_next)for((entry) = ((&sc->sc_tables)->sqh_first); (entry
) != ((void *)0); (entry) = ((entry)->q_next.sqe_next)) {
hdr = entry->q_table;
if (strncmp(hdr->signature, signature,
    sizeof(hdr->signature)) == 0 &&
    strncmp(hdr->oemid, oemid, sizeof(hdr->oemid)) == 0 &&
    strncmp(hdr->oemtableid, oemtableid,
    sizeof(hdr->oemtableid)) == 0) {
	p_dsdt = entry->q_table;
	acpi_parse_aml(sc, rootpath, p_dsdt->aml,
	    p_dsdt->hdr_lengthhdr.length - sizeof(p_dsdt->hdr));
	return aml_allocvalue(AML_OBJTYPE_DDBHANDLE, 0, 0);
}
}

return aml_allocvalue(AML_OBJTYPE_INTEGER, 0, 0);
3764}

3766/* Load new SSDT scope from memory address */
3767struct aml_scope *
3768aml_load(struct acpi_softc *sc, struct aml_scope *scope,
  struct aml_value *rgn, struct aml_value *ddb)
3770{
struct acpi_q *entry;
struct acpi_dsdt *p_ssdt;
struct aml_value tmp;

ddb->type = AML_OBJTYPE_DDBHANDLE;
ddb->v_integer_.vinteger = 0;

memset(&tmp, 0, sizeof(tmp))__builtin_memset((&tmp), (0), (sizeof(tmp)));
if (rgn->type != AML_OBJTYPE_OPREGION ||
   rgn->v_opregion_.vopregion.iospace != GAS_SYSTEM_MEMORY0)
goto fail;

/* Load SSDT from memory */
entry = acpi_maptable(sc, rgn->v_opregion_.vopregion.iobase, "SSDT", NULL((void *)0), NULL((void *)0), 1);
if (entry == NULL((void *)0))
goto fail;

dnprintf(10, "%s: loaded SSDT %s @ %llx\n", sc->sc_dev.dv_xname,
   aml_nodename(rgn->node), rgn->v_opregion.iobase);
ddb->v_integer_.vinteger = entry->q_id;

p_ssdt = entry->q_table;
tmp.v_buffer_.vbuffer = p_ssdt->aml;
tmp.length   = p_ssdt->hdr_lengthhdr.length - sizeof(p_ssdt->hdr);

return aml_pushscope(scope, &tmp, scope->node,
   AMLOP_LOAD0x5B20);
3798fail:
printf("%s: unable to load %s\n", sc->sc_dev.dv_xname,
   aml_nodename(rgn->node));
return NULL((void *)0);
3802}

3804struct aml_value *
3805aml_parse(struct aml_scope *scope, int ret_type, const char *stype)
3806{
int    opcode, idx, pc;
struct aml_opcode *htab;
struct aml_value *opargs[8], *my_ret, *rv;
struct aml_scope *mscope, *iscope;
uint8_t *start, *end;
const char *ch;
int64_t ival;
struct timespec ts;

my_ret = NULL((void *)0);
if (scope == NULL((void *)0) || scope->pos >= scope->end) {
1
Assuming 'scope' is not equal to NULL→
2
←
Assuming field 'pos' is < field 'end'→
3
←
Taking false branch→
return NULL((void *)0);
}
if (odp++ > 125)
4
←
Assuming the condition is false→
5
←
Taking false branch→
panic("depth");
if (odp > maxdp) {
6
←
Assuming 'odp' is <= 'maxdp'→
7
←
Taking false branch→
maxdp = odp;
dnprintf(10, "max depth: %d\n", maxdp);
}
end = NULL((void *)0);
iscope = scope;
start:
/* --== Stage 0: Get Opcode ==-- */
start = scope->pos;
pc = aml_pc(scope->pos);
8
←
Calling 'aml_pc'→
10
←
Returning from 'aml_pc'→
aml_debugger(scope);

opcode = aml_parseopcode(scope);
11
←
Calling 'aml_parseopcode'→
18
←
Returning from 'aml_parseopcode'→
htab = aml_findopcode(opcode);
19
←
Calling 'aml_findopcode'→
23
←
Returning from 'aml_findopcode'→
if (htab23.1
'htab' is not equal to NULL
 == NULL((void *)0)) {
24
←
Taking false branch→
/* No opcode handler */
aml_die("Unknown opcode: %.4x @ %.4x", opcode, pc)_aml_die(__FUNCTION__, 3838, "Unknown opcode: %.4x @ %.4x", opcode
, pc);
}
dnprintf(18,"%.4x %s\n", pc, aml_mnem(opcode, scope->pos));

/* --== Stage 1: Process opcode arguments ==-- */
memset(opargs, 0, sizeof(opargs))__builtin_memset((opargs), (0), (sizeof(opargs)));
25
←
Storing null pointer value→
idx = 0;
for (ch = htab->args; *ch; ch++) {
26
←
Loop condition is false. Execution continues on line 3919→
rv = NULL((void *)0);
switch (*ch) {
case AML_ARG_OBJLEN'p':
	end = aml_parseend(scope);
	break;
case AML_ARG_IFELSE'I':
                      /* Special Case: IF-ELSE:piTbpT or IF:piT */
	ch = (*end == AMLOP_ELSE0xA1 && end < scope->end) ?
	    "-TbpT" : "-T";
	break;

	/* Complex arguments */
case 's':
case 'S':
case AML_ARG_TARGET'r':
case AML_ARG_TERMOBJ't':
case AML_ARG_INTEGER'i':
	if (*ch == 'r' && *scope->pos == AMLOP_ZERO0x00) {
		/* Special case: NULL Target */
		rv = aml_allocvalue(AML_OBJTYPE_NOTARGET, 0, NULL((void *)0));
		scope->pos++;
	}
	else {
		rv = aml_parse(scope, *ch, htab->mnem);
		if (rv == NULL((void *)0) || aml_error)
			goto parse_error;
	}
	break;

	/* Simple arguments */
case AML_ARG_BUFFER'B':
case AML_ARG_METHOD'M':
case AML_ARG_FIELDLIST'F':
case AML_ARG_TERMOBJLIST'T':
	rv = aml_allocvalue(AML_OBJTYPE_SCOPE, 0, NULL((void *)0));
	rv->v_buffer_.vbuffer = scope->pos;
	rv->length = end - scope->pos;
	scope->pos = end;
	break;
case AML_ARG_CONST'c':
	rv = aml_allocvalue(AML_OBJTYPE_INTEGER,
	    (char)opcode, NULL((void *)0));
	break;
case AML_ARG_CREATENAME'N':
	scope->pos = aml_parsename(scope->node, scope->pos,
	    &rv, 1);
	break;
case AML_ARG_SEARCHNAME'n':
	scope->pos = aml_parsename(scope->node, scope->pos,
	    &rv, 0);
	break;
case AML_ARG_BYTE'b':
case AML_ARG_WORD'w':
case AML_ARG_DWORD'd':
case AML_ARG_QWORD'q':
case AML_ARG_DEBUG'D':
case AML_ARG_STRING'a':
case AML_ARG_REVISION'R':
	rv = aml_parsesimple(scope, *ch, NULL((void *)0));
	break;
case AML_ARG_STKLOCAL'L':
case AML_ARG_STKARG'A':
	rv = aml_getstack(scope, opcode);
	break;
default:
	aml_die("Unknown arg type: %c\n", *ch)_aml_die(__FUNCTION__, 3911, "Unknown arg type: %c\n", *ch);
	break;
}
if (rv != NULL((void *)0))
	opargs[idx++] = rv;
}

/* --== Stage 2: Process opcode ==-- */
ival = 0;
my_ret = NULL((void *)0);
mscope = NULL((void *)0);
switch (opcode) {
27
←
Control jumps to 'case 16:'  at line 4286→
case AMLOP_NOP0xA3:
case AMLOP_BREAKPOINT0xCC:
break;
case AMLOP_LOCAL00x60:
case AMLOP_LOCAL10x61:
case AMLOP_LOCAL20x62:
case AMLOP_LOCAL30x63:
case AMLOP_LOCAL40x64:
case AMLOP_LOCAL50x65:
case AMLOP_LOCAL60x66:
case AMLOP_LOCAL70x67:
case AMLOP_ARG00x68:
case AMLOP_ARG10x69:
case AMLOP_ARG20x6A:
case AMLOP_ARG30x6B:
case AMLOP_ARG40x6C:
case AMLOP_ARG50x6D:
case AMLOP_ARG60x6E:
my_ret = opargs[0];
aml_addref(my_ret, htab->mnem);
break;
case AMLOP_NAMECHAR0x5F:
/* opargs[0] = named object (node != NULL), or nameref */
my_ret = opargs[0];
if (scope->type == AMLOP_PACKAGE0x12 && my_ret->node) {
	/* Special case for package */
	my_ret = aml_allocvalue(AML_OBJTYPE_OBJREF,
	    AMLOP_NAMECHAR0x5F, 0);
	my_ret->v_objref_.vobjref.ref = opargs[0];
	aml_addref(my_ret, "package");
} else if (my_ret->type == AML_OBJTYPE_OBJREF) {
	my_ret = my_ret->v_objref_.vobjref.ref;
	aml_addref(my_ret, "de-alias");
}
if (ret_type == 'i' || ret_type == 't' || ret_type == 'T') {
	/* Return TermArg or Integer: Evaluate object */
	my_ret = aml_eval(scope, my_ret, ret_type, 0, NULL((void *)0));
} else if (my_ret->type == AML_OBJTYPE_METHOD) {
	/* This should only happen with CondRef */
	dnprintf(12,"non-termarg method : %s\n", stype);
	aml_addref(my_ret, "zoom");
}
break;

case AMLOP_ZERO0x00:
case AMLOP_ONE0x01:
case AMLOP_ONES0xFF:
case AMLOP_DEBUG0x5B31:
case AMLOP_REVISION0x5B30:
case AMLOP_BYTEPREFIX0x0A:
case AMLOP_WORDPREFIX0x0B:
case AMLOP_DWORDPREFIX0x0C:
case AMLOP_QWORDPREFIX0x0E:
case AMLOP_STRINGPREFIX0x0D:
my_ret = opargs[0];
break;

case AMLOP_BUFFER0x11:
/* Buffer: iB => Buffer */
my_ret = aml_allocvalue(AML_OBJTYPE_BUFFER,
    opargs[0]->v_integer_.vinteger, NULL((void *)0));
memcpy(my_ret->v_buffer, opargs[1]->v_buffer,__builtin_memcpy((my_ret->_.vbuffer), (opargs[1]->_.vbuffer
), (opargs[1]->length))
    opargs[1]->length)__builtin_memcpy((my_ret->_.vbuffer), (opargs[1]->_.vbuffer
), (opargs[1]->length));
break;
case AMLOP_PACKAGE0x12:
case AMLOP_VARPACKAGE0x13:
/* Package/VarPackage: bT/iT => Package */
my_ret = aml_allocvalue(AML_OBJTYPE_PACKAGE,
    opargs[0]->v_integer_.vinteger, 0);
mscope = aml_pushscope(scope, opargs[1], scope->node,
    AMLOP_PACKAGE0x12);

/* Recursively parse package contents */
for (idx=0; idx<my_ret->length; idx++) {
	rv = aml_parse(mscope, 'o', "Package");
	if (rv != NULL((void *)0)) {
		aml_delref(&my_ret->v_package_.vpackage[idx], "pkginit");
		my_ret->v_package_.vpackage[idx] = rv;
	}
}
aml_popscope(mscope);
mscope = NULL((void *)0);
break;

/* Math/Logical operations */
case AMLOP_OR0x7D:
case AMLOP_ADD0x72:
case AMLOP_AND0x7B:
case AMLOP_NAND0x7C:
case AMLOP_XOR0x7F:
case AMLOP_SHL0x79:
case AMLOP_SHR0x7A:
case AMLOP_NOR0x7E:
case AMLOP_MOD0x85:
case AMLOP_SUBTRACT0x74:
case AMLOP_MULTIPLY0x77:
/* XXX: iir => I */
ival = aml_evalexpr(opargs[0]->v_integer_.vinteger,
    opargs[1]->v_integer_.vinteger, opcode);
aml_store(scope, opargs[2], ival, NULL((void *)0));
break;
case AMLOP_DIVIDE0x78:
/* Divide: iirr => I */
if (opargs[1]->v_integer_.vinteger == 0) {
	my_ret = aml_seterror(scope, "Divide by Zero!");
	break;
}
ival = aml_evalexpr(opargs[0]->v_integer_.vinteger,
    opargs[1]->v_integer_.vinteger, AMLOP_MOD0x85);
aml_store(scope, opargs[2], ival, NULL((void *)0));

ival = aml_evalexpr(opargs[0]->v_integer_.vinteger,
    opargs[1]->v_integer_.vinteger, AMLOP_DIVIDE0x78);
aml_store(scope, opargs[3], ival, NULL((void *)0));
break;
case AMLOP_NOT0x80:
case AMLOP_TOBCD0x5B29:
case AMLOP_FROMBCD0x5B28:
case AMLOP_FINDSETLEFTBIT0x81:
case AMLOP_FINDSETRIGHTBIT0x82:
/* XXX: ir => I */
ival = aml_evalexpr(opargs[0]->v_integer_.vinteger, 0, opcode);
aml_store(scope, opargs[1], ival, NULL((void *)0));
break;
case AMLOP_INCREMENT0x75:
case AMLOP_DECREMENT0x76:
/* Inc/Dec: S => I */
my_ret = aml_eval(scope, opargs[0], AML_ARG_INTEGER'i', 0, NULL((void *)0));
ival = aml_evalexpr(my_ret->v_integer_.vinteger, 1, opcode);
aml_store(scope, opargs[0], ival, NULL((void *)0));
break;
case AMLOP_LNOT0x92:
/* LNot: i => Bool */
ival = aml_evalexpr(opargs[0]->v_integer_.vinteger, 0, opcode);
break;
case AMLOP_LOR0x91:
case AMLOP_LAND0x90:
/* XXX: ii => Bool */
ival = aml_evalexpr(opargs[0]->v_integer_.vinteger,
    opargs[1]->v_integer_.vinteger, opcode);
break;
case AMLOP_LLESS0x95:
case AMLOP_LEQUAL0x93:
case AMLOP_LGREATER0x94:
case AMLOP_LNOTEQUAL0x9293:
case AMLOP_LLESSEQUAL0x9294:
case AMLOP_LGREATEREQUAL0x9295:
/* XXX: tt => Bool */
ival = aml_compare(opargs[0], opargs[1], opcode);
break;

/* Reference/Store operations */
case AMLOP_CONDREFOF0x5B12:
/* CondRef: rr => I */
ival = 0;
if (opargs[0]->node != NULL((void *)0)) {
	/* Create Object Reference */
	rv = aml_allocvalue(AML_OBJTYPE_OBJREF, opcode,
		opargs[0]);
	aml_addref(opargs[0], "CondRef");
	aml_store(scope, opargs[1], 0, rv);
	aml_delref(&rv, 0);

	/* Mark that we found it */
	ival = -1;
}
break;
case AMLOP_REFOF0x71:
/* RefOf: r => ObjRef */
my_ret = aml_allocvalue(AML_OBJTYPE_OBJREF, opcode, opargs[0]);
aml_addref(my_ret->v_objref_.vobjref.ref, "RefOf");
break;
case AMLOP_INDEX0x88:
/* Index: tir => ObjRef */
idx = opargs[1]->v_integer_.vinteger;
/* Reading past the end of the array? - Ignore */
if (idx >= opargs[0]->length || idx < 0)
	break;
switch (opargs[0]->type) {
case AML_OBJTYPE_PACKAGE:
	/* Don't set opargs[0] to NULL */
	if (ret_type == 't' || ret_type == 'i' || ret_type == 'T') {
		my_ret = opargs[0]->v_package_.vpackage[idx];
		aml_addref(my_ret, "Index.Package");
	} else {
		my_ret = aml_allocvalue(AML_OBJTYPE_OBJREF, AMLOP_PACKAGE0x12,
		    opargs[0]->v_package_.vpackage[idx]);
		aml_addref(my_ret->v_objref_.vobjref.ref,
		    "Index.Package");
	}
	break;
case AML_OBJTYPE_BUFFER:
case AML_OBJTYPE_STRING:
case AML_OBJTYPE_INTEGER:
	rv = aml_convert(opargs[0], AML_OBJTYPE_BUFFER, -1);
	if (ret_type == 't' || ret_type == 'i' || ret_type == 'T') {
		dnprintf(12,"Index.Buf Term: %d = %x\n",
		    idx, rv->v_buffer[idx]);
		ival = rv->v_buffer_.vbuffer[idx];
	} else {
		dnprintf(12, "Index.Buf Targ\n");
		my_ret = aml_allocvalue(0,0,NULL((void *)0));
		aml_createfield(my_ret, AMLOP_INDEX0x88, rv,
		    8 * idx, 8, NULL((void *)0), 0, AML_FIELD_BYTEACC0x1);
	}
	aml_delref(&rv, "Index.BufStr");
	break;
default:
	aml_die("Unknown index : %x\n", opargs[0]->type)_aml_die(__FUNCTION__, 4131, "Unknown index : %x\n", opargs[0
]->type);
	break;
}
aml_store(scope, opargs[2], ival, my_ret);
break;
case AMLOP_DEREFOF0x83:
/* DerefOf: t:ObjRef => DataRefObj */
if (opargs[0]->type == AML_OBJTYPE_OBJREF) {
	my_ret = opargs[0]->v_objref_.vobjref.ref;
	aml_addref(my_ret, "DerefOf");
} else {
	my_ret = opargs[0];
	//aml_addref(my_ret, "DerefOf");
}
break;
case AMLOP_COPYOBJECT0x9D:
/* CopyObject: t:DataRefObj, s:implename => DataRefObj */
my_ret = opargs[0];
aml_freevalue(opargs[1]);
aml_copyvalue(opargs[1], opargs[0]);
break;
case AMLOP_STORE0x70:
/* Store: t:DataRefObj, S:upername => DataRefObj */
my_ret = opargs[0];
aml_store(scope, opargs[1], 0, opargs[0]);
break;

/* Conversion */
case AMLOP_TOINTEGER0x99:
/* Source:CData, Result => Integer */
my_ret = aml_convert(opargs[0], AML_OBJTYPE_INTEGER, -1);
aml_store(scope, opargs[1], 0, my_ret);
break;
case AMLOP_TOBUFFER0x96:
/* Source:CData, Result => Buffer */
my_ret = aml_convert(opargs[0], AML_OBJTYPE_BUFFER, -1);
aml_store(scope, opargs[1], 0, my_ret);
break;
case AMLOP_TOHEXSTRING0x98:
/* Source:CData, Result => String */
my_ret = aml_convert(opargs[0], AML_OBJTYPE_HEXSTRING, -1);
aml_store(scope, opargs[1], 0, my_ret);
break;
case AMLOP_TODECSTRING0x97:
/* Source:CData, Result => String */
my_ret = aml_convert(opargs[0], AML_OBJTYPE_DECSTRING, -1);
aml_store(scope, opargs[1], 0, my_ret);
break;
case AMLOP_TOSTRING0x9C:
/* Source:B, Length:I, Result => String */
my_ret = aml_convert(opargs[0], AML_OBJTYPE_STRING,
    opargs[1]->v_integer_.vinteger);
aml_store(scope, opargs[2], 0, my_ret);
break;
case AMLOP_CONCAT0x73:
/* Source1:CData, Source2:CData, Result => CData */
my_ret = aml_concat(opargs[0], opargs[1]);
aml_store(scope, opargs[2], 0, my_ret);
break;
case AMLOP_CONCATRES0x84:
/* Concat two resource buffers: buf1, buf2, result => Buffer */
my_ret = aml_concatres(opargs[0], opargs[1]);
aml_store(scope, opargs[2], 0, my_ret);
break;
case AMLOP_MID0x9E:
/* Source:BS, Index:I, Length:I, Result => BS */
my_ret = aml_mid(opargs[0], opargs[1]->v_integer_.vinteger,
    opargs[2]->v_integer_.vinteger);
aml_store(scope, opargs[3], 0, my_ret);
break;
case AMLOP_MATCH0x89:
/* Match: Pkg, Op1, Val1, Op2, Val2, Index */
ival = aml_match(opargs[0], opargs[5]->v_integer_.vinteger,
    opargs[1]->v_integer_.vinteger, opargs[2]->v_integer_.vinteger,
    opargs[3]->v_integer_.vinteger, opargs[4]->v_integer_.vinteger);
break;
case AMLOP_SIZEOF0x87:
/* Sizeof: S => i */
rv = aml_gettgt(opargs[0], opcode);
ival = rv->length;
break;
case AMLOP_OBJECTTYPE0x8E:
/* ObjectType: S => i */
rv = aml_gettgt(opargs[0], opcode);
ival = rv->type;
break;

/* Mutex/Event handlers */
case AMLOP_ACQUIRE0x5B23:
/* Acquire: Sw => Bool */
rv = aml_gettgt(opargs[0], opcode);
ival = acpi_mutex_acquire(scope, rv,
    opargs[1]->v_integer_.vinteger);
break;
case AMLOP_RELEASE0x5B27:
/* Release: S */
rv = aml_gettgt(opargs[0], opcode);
acpi_mutex_release(scope, rv);
break;
case AMLOP_WAIT0x5B25:
/* Wait: Si => Bool */
rv = aml_gettgt(opargs[0], opcode);
ival = acpi_event_wait(scope, rv,
    opargs[1]->v_integer_.vinteger);
break;
case AMLOP_RESET0x5B26:
/* Reset: S */
rv = aml_gettgt(opargs[0], opcode);
acpi_event_reset(scope, rv);
break;
case AMLOP_SIGNAL0x5B24:
/* Signal: S */
rv = aml_gettgt(opargs[0], opcode);
acpi_event_signal(scope, rv);
break;

/* Named objects */
case AMLOP_NAME0x08:
/* Name: Nt */
rv = opargs[0];
aml_freevalue(rv);
	aml_copyvalue(rv, opargs[1]);
break;
case AMLOP_ALIAS0x06:
/* Alias: nN */
rv = _aml_setvalue(opargs[1], AML_OBJTYPE_OBJREF, opcode, 0);
rv->v_objref_.vobjref.ref = aml_gettgt(opargs[0], opcode);
aml_addref(rv->v_objref_.vobjref.ref, "Alias");
break;
case AMLOP_OPREGION0x5B80:
/* OpRegion: Nbii */
rv = _aml_setvalue(opargs[0], AML_OBJTYPE_OPREGION, 0, 0);
rv->v_opregion_.vopregion.iospace = opargs[1]->v_integer_.vinteger;
rv->v_opregion_.vopregion.iobase = opargs[2]->v_integer_.vinteger;
rv->v_opregion_.vopregion.iolen = opargs[3]->v_integer_.vinteger;
rv->v_opregion_.vopregion.flag = 0;
break;
case AMLOP_DATAREGION0x5B88:
/* DataTableRegion: N,t:SigStr,t:OemIDStr,t:OemTableIDStr */
rv = _aml_setvalue(opargs[0], AML_OBJTYPE_OPREGION, 0, 0);
rv->v_opregion_.vopregion.iospace = GAS_SYSTEM_MEMORY0;
rv->v_opregion_.vopregion.iobase = 0;
rv->v_opregion_.vopregion.iolen = 0;
aml_die("AML-DataTableRegion\n")_aml_die(__FUNCTION__, 4274, "AML-DataTableRegion\n");
break;
case AMLOP_EVENT0x5B02:
/* Event: N */
rv = _aml_setvalue(opargs[0], AML_OBJTYPE_EVENT, 0, 0);
rv->v_evt_.Vevent.state = 0;
break;
case AMLOP_MUTEX0x5B01:
/* Mutex: Nw */
rv = _aml_setvalue(opargs[0], AML_OBJTYPE_MUTEX, 0, 0);
rv->v_mtx_.Vmutex.synclvl = opargs[1]->v_integer_.vinteger;
break;
case AMLOP_SCOPE0x10:
/* Scope: NT */
rv = opargs[0];
28
←
Null pointer value stored to 'rv'→
if (rv->type == AML_OBJTYPE_NAMEREF) {
29
←
Access to field 'type' results in a dereference of a null pointer (loaded from variable 'rv')
	printf("Undefined scope: %s\n", aml_getname(rv->v_nameref_.vbuffer));
	break;
}
mscope = aml_pushscope(scope, opargs[1], rv->node, opcode);
break;
case AMLOP_DEVICE0x5B82:
/* Device: NT */
rv = _aml_setvalue(opargs[0], AML_OBJTYPE_DEVICE, 0, 0);
mscope = aml_pushscope(scope, opargs[1], rv->node, opcode);
break;
case AMLOP_THERMALZONE0x5B85:
/* ThermalZone: NT */
rv = _aml_setvalue(opargs[0], AML_OBJTYPE_THERMZONE, 0, 0);
mscope = aml_pushscope(scope, opargs[1], rv->node, opcode);
break;
case AMLOP_POWERRSRC0x5B84:
/* PowerRsrc: NbwT */
rv = _aml_setvalue(opargs[0], AML_OBJTYPE_POWERRSRC, 0, 0);
rv->v_powerrsrc_.vpowerrsrc.pwr_level = opargs[1]->v_integer_.vinteger;
rv->v_powerrsrc_.vpowerrsrc.pwr_order = opargs[2]->v_integer_.vinteger;
mscope = aml_pushscope(scope, opargs[3], rv->node, opcode);
break;
case AMLOP_PROCESSOR0x5B83:
/* Processor: NbdbT */
rv = _aml_setvalue(opargs[0], AML_OBJTYPE_PROCESSOR, 0, 0);
rv->v_processor_.vprocessor.proc_id = opargs[1]->v_integer_.vinteger;
rv->v_processor_.vprocessor.proc_addr = opargs[2]->v_integer_.vinteger;
rv->v_processor_.vprocessor.proc_len = opargs[3]->v_integer_.vinteger;
mscope = aml_pushscope(scope, opargs[4], rv->node, opcode);
break;
case AMLOP_METHOD0x14:
/* Method: NbM */
rv = _aml_setvalue(opargs[0], AML_OBJTYPE_METHOD, 0, 0);
rv->v_method_.vmethod.flags = opargs[1]->v_integer_.vinteger;
rv->v_method_.vmethod.start = opargs[2]->v_buffer_.vbuffer;
rv->v_method_.vmethod.end = rv->v_method_.vmethod.start + opargs[2]->length;
rv->v_method_.vmethod.base = aml_root.start;
break;

/* Field objects */
case AMLOP_CREATEFIELD0x5B13:
/* Source:B, BitIndex:I, NumBits:I, FieldName */
rv = _aml_setvalue(opargs[3], AML_OBJTYPE_BUFFERFIELD, 0, 0);
aml_createfield(rv, opcode, opargs[0], opargs[1]->v_integer_.vinteger,
    opargs[2]->v_integer_.vinteger, NULL((void *)0), 0, 0);
break;
case AMLOP_CREATEBITFIELD0x8D:
/* Source:B, BitIndex:I, FieldName */
rv = _aml_setvalue(opargs[2], AML_OBJTYPE_BUFFERFIELD, 0, 0);
aml_createfield(rv, opcode, opargs[0], opargs[1]->v_integer_.vinteger,
    1, NULL((void *)0), 0, 0);
break;
case AMLOP_CREATEBYTEFIELD0x8C:
/* Source:B, ByteIndex:I, FieldName */
rv = _aml_setvalue(opargs[2], AML_OBJTYPE_BUFFERFIELD, 0, 0);
aml_createfield(rv, opcode, opargs[0], opargs[1]->v_integer_.vinteger*8,
    8, NULL((void *)0), 0, AML_FIELD_BYTEACC0x1);
break;
case AMLOP_CREATEWORDFIELD0x8B:
/* Source:B, ByteIndex:I, FieldName */
rv = _aml_setvalue(opargs[2], AML_OBJTYPE_BUFFERFIELD, 0, 0);
aml_createfield(rv, opcode, opargs[0], opargs[1]->v_integer_.vinteger*8,
    16, NULL((void *)0), 0, AML_FIELD_WORDACC0x2);
break;
case AMLOP_CREATEDWORDFIELD0x8A:
/* Source:B, ByteIndex:I, FieldName */
rv = _aml_setvalue(opargs[2], AML_OBJTYPE_BUFFERFIELD, 0, 0);
aml_createfield(rv, opcode, opargs[0], opargs[1]->v_integer_.vinteger*8,
    32, NULL((void *)0), 0, AML_FIELD_DWORDACC0x3);
break;
case AMLOP_CREATEQWORDFIELD0x8F:
/* Source:B, ByteIndex:I, FieldName */
rv = _aml_setvalue(opargs[2], AML_OBJTYPE_BUFFERFIELD, 0, 0);
aml_createfield(rv, opcode, opargs[0], opargs[1]->v_integer_.vinteger*8,
    64, NULL((void *)0), 0, AML_FIELD_QWORDACC0x4);
break;
case AMLOP_FIELD0x5B81:
/* Field: n:OpRegion, b:Flags, F:ieldlist */
mscope = aml_pushscope(scope, opargs[2], scope->node, opcode);
aml_parsefieldlist(mscope, opcode, opargs[1]->v_integer_.vinteger,
    opargs[0], NULL((void *)0), 0);
mscope = NULL((void *)0);
break;
case AMLOP_INDEXFIELD0x5B86:
/* IndexField: n:Index, n:Data, b:Flags, F:ieldlist */
mscope = aml_pushscope(scope, opargs[3], scope->node, opcode);
aml_parsefieldlist(mscope, opcode, opargs[2]->v_integer_.vinteger,
    opargs[1], opargs[0], 0);
mscope = NULL((void *)0);
break;
case AMLOP_BANKFIELD0x5B87:
/* BankField: n:OpRegion, n:Field, i:Bank, b:Flags, F:ieldlist */
mscope = aml_pushscope(scope, opargs[4], scope->node, opcode);
aml_parsefieldlist(mscope, opcode, opargs[3]->v_integer_.vinteger,
    opargs[0], opargs[1], opargs[2]->v_integer_.vinteger);
mscope = NULL((void *)0);
break;

/* Misc functions */
case AMLOP_STALL0x5B21:
/* Stall: i */
acpi_stall(opargs[0]->v_integer_.vinteger);
break;
case AMLOP_SLEEP0x5B22:
/* Sleep: i */
acpi_sleep(opargs[0]->v_integer_.vinteger, "amlsleep");
break;
case AMLOP_NOTIFY0x86:
/* Notify: Si */
rv = aml_gettgt(opargs[0], opcode);
dnprintf(50,"Notifying: %s %llx\n",
    aml_nodename(rv->node),
    opargs[1]->v_integer);
aml_notify(rv->node, opargs[1]->v_integer_.vinteger);
break;
case AMLOP_TIMER0x5B33:
/* Timer: => i */
nanouptime(&ts);
ival = ts.tv_sec * 10000000 + ts.tv_nsec / 100;
break;
case AMLOP_FATAL0x5B32:
/* Fatal: bdi */
aml_die("AML FATAL ERROR: %x,%x,%x\n",_aml_die(__FUNCTION__, 4414, "AML FATAL ERROR: %x,%x,%x\n", opargs
[0]->_.vinteger, opargs[1]->_.vinteger, opargs[2]->_
.vinteger)
    opargs[0]->v_integer, opargs[1]->v_integer,_aml_die(__FUNCTION__, 4414, "AML FATAL ERROR: %x,%x,%x\n", opargs
[0]->_.vinteger, opargs[1]->_.vinteger, opargs[2]->_
.vinteger)
    opargs[2]->v_integer)_aml_die(__FUNCTION__, 4414, "AML FATAL ERROR: %x,%x,%x\n", opargs
[0]->_.vinteger, opargs[1]->_.vinteger, opargs[2]->_
.vinteger);
break;
case AMLOP_LOADTABLE0x5B1F:
/* LoadTable(Sig:Str, OEMID:Str, OEMTable:Str, [RootPath:Str], [ParmPath:Str],
   [ParmData:DataRefObj]) => DDBHandle */
my_ret = aml_loadtable(acpi_softc, opargs[0]->v_string_.vstring,
    opargs[1]->v_string_.vstring, opargs[2]->v_string_.vstring,
    opargs[3]->v_string_.vstring, opargs[4]->v_string_.vstring, opargs[5]);
break;
case AMLOP_LOAD0x5B20:
/* Load(Object:NameString, DDBHandle:SuperName) */
mscope = aml_load(acpi_softc, scope, opargs[0], opargs[1]);
break;
case AMLOP_UNLOAD0x5B2A:
/* DDBHandle */
aml_die("Unload")_aml_die(__FUNCTION__, 4429, "Unload");
break;

/* Control Flow */
case AMLOP_IF0xA0:
/* Arguments: iT or iTbT */
if (opargs[0]->v_integer_.vinteger) {
	dnprintf(10,"parse-if @ %.4x\n", pc);
	mscope = aml_pushscope(scope, opargs[1], scope->node,
	    AMLOP_IF0xA0);
} else if (opargs[3] != NULL((void *)0)) {
	dnprintf(10,"parse-else @ %.4x\n", pc);
	mscope = aml_pushscope(scope, opargs[3], scope->node,
	    AMLOP_ELSE0xA1);
}
break;
case AMLOP_WHILE0xA2:
if (opargs[0]->v_integer_.vinteger) {
	/* Set parent position to start of WHILE */
	scope->pos = start;
	mscope = aml_pushscope(scope, opargs[1], scope->node,
	    AMLOP_WHILE0xA2);
}
break;
case AMLOP_BREAK0xA5:
/* Break: Find While Scope parent, mark type as null */
aml_findscope(scope, AMLOP_WHILE0xA2, AMLOP_BREAK0xA5);
break;
case AMLOP_CONTINUE0x9F:
/* Find Scope.. mark all objects as invalid on way to root */
aml_findscope(scope, AMLOP_WHILE0xA2, AMLOP_CONTINUE0x9F);
break;
case AMLOP_RETURN0xA4:
mscope = aml_findscope(scope, AMLOP_METHOD0x14, AMLOP_RETURN0xA4);
if (mscope->retv) {
	aml_die("already allocated\n")_aml_die(__FUNCTION__, 4464, "already allocated\n");
}
mscope->retv = aml_allocvalue(0,0,NULL((void *)0));
aml_copyvalue(mscope->retv, opargs[0]);
mscope = NULL((void *)0);
break;
default:
/* may be set direct result */
aml_die("Unknown opcode: %x:%s\n", opcode, htab->mnem)_aml_die(__FUNCTION__, 4472, "Unknown opcode: %x:%s\n", opcode
, htab->mnem);
break;
}
if (mscope != NULL((void *)0)) {
/* Change our scope to new scope */
scope = mscope;
}
if ((ret_type == 'i' || ret_type == 't') && my_ret == NULL((void *)0)) {
dnprintf(10,"quick: %.4x [%s] alloc return integer = 0x%llx\n",
    pc, htab->mnem, ival);
my_ret = aml_allocvalue(AML_OBJTYPE_INTEGER, ival, NULL((void *)0));
}
if (ret_type == 'i' && my_ret && my_ret->type != AML_OBJTYPE_INTEGER) {
dnprintf(10,"quick: %.4x convert to integer %s -> %s\n",
    pc, htab->mnem, stype);
my_ret = aml_convert(my_ret, AML_OBJTYPE_INTEGER, -1);
}
if (my_ret != NULL((void *)0)) {
/* Display result */
dnprintf(20,"quick: %.4x %18s %c %.4x\n", pc, stype,
    ret_type, my_ret->stack);
}

/* End opcode: display/free arguments */
4496parse_error:
for (idx=0; idx<8; idx++) {
if (opargs[idx] == my_ret)
	opargs[idx] = NULL((void *)0);
aml_delref(&opargs[idx], "oparg");
}

/* If parsing whole scope and not done, start again */
if (ret_type == 'T') {
aml_delref(&my_ret, "scope.loop");
while (scope->pos >= scope->end && scope != iscope) {
	/* Pop intermediate scope */
	scope = aml_popscope(scope);
}
if (scope->pos && scope->pos < scope->end)
	goto start;
}

odp--;
dnprintf(50, ">>return [%s] %s %c %p\n", aml_nodename(scope->node),
   stype, ret_type, my_ret);

return my_ret;
4519}

4521int
4522acpi_parse_aml(struct acpi_softc *sc, const char *rootpath,
  uint8_t *start, uint32_t length)
4524{
struct aml_node *root = &aml_root;
struct aml_scope *scope;
struct aml_value res;

if (rootpath) {
root = aml_searchname(&aml_root, rootpath);
if (root == NULL((void *)0))
	aml_die("Invalid RootPathName %s\n", rootpath)_aml_die(__FUNCTION__, 4532, "Invalid RootPathName %s\n", rootpath
);
}

aml_root.start = start;
memset(&res, 0, sizeof(res))__builtin_memset((&res), (0), (sizeof(res)));
res.type = AML_OBJTYPE_SCOPE;
res.length = length;
res.v_buffer_.vbuffer = start;

/* Push toplevel scope, parse AML */
aml_error = 0;
scope = aml_pushscope(NULL((void *)0), &res, &aml_root, AMLOP_SCOPE0x10);
aml_busy++;
aml_parse(scope, 'T', "TopLevel");
aml_busy--;
aml_popscope(scope);

if (aml_error) {
printf("error in acpi_parse_aml\n");
return -1;
}
return (0);
4554}

4556/*
* @@@: External API
*
* evaluate an AML node
* Returns a copy of the value in res  (must be freed by user)
*/
4562int
4563aml_evalnode(struct acpi_softc *sc, struct aml_node *node,
  int argc, struct aml_value *argv, struct aml_value *res)
4565{
struct aml_value *xres;

if (res)
memset(res, 0, sizeof(*res))__builtin_memset((res), (0), (sizeof(*res)));
if (node == NULL((void *)0) || node->value == NULL((void *)0))
return (ACPI_E_BADVALUE0x01);
dnprintf(12,"EVALNODE: %s %lx\n", aml_nodename(node), acpi_nalloc);

aml_error = 0;
xres = aml_eval(NULL((void *)0), node->value, 't', argc, argv);
if (xres) {
if (res)
	aml_copyvalue(res, xres);
if (xres != node->value)
	aml_delref(&xres, "evalnode");
}
if (aml_error) {
printf("error evaluating: %s\n", aml_nodename(node));
return (-1);
}
return (0);
4587}

4589int
4590aml_node_setval(struct acpi_softc *sc, struct aml_node *node, int64_t val)
4591{
struct aml_value env;

if (!node)
return (0);

memset(&env, 0, sizeof(env))__builtin_memset((&env), (0), (sizeof(env)));
env.type = AML_OBJTYPE_INTEGER;
env.v_integer_.vinteger = val;

return aml_evalnode(sc, node, 1, &env, NULL((void *)0));
4602}

4604/*
* evaluate an AML name
* Returns a copy of the value in res  (must be freed by user)
*/
4608int
4609aml_evalname(struct acpi_softc *sc, struct aml_node *parent, const char *name,
  int argc, struct aml_value *argv, struct aml_value *res)
4611{
parent = aml_searchname(parent, name);
return aml_evalnode(sc, parent, argc, argv, res);
4614}

4616/*
* evaluate an AML integer object
*/
4619int
4620aml_evalinteger(struct acpi_softc *sc, struct aml_node *parent,
  const char *name, int argc, struct aml_value *argv, int64_t *ival)
4622{
struct aml_value res;
int rc;

parent = aml_searchname(parent, name);
rc = aml_evalnode(sc, parent, argc, argv, &res);
if (rc == 0) {
*ival = aml_val2int(&res);
aml_freevalue(&res);
}
return rc;
4633}

4635/*
* Search for an AML name in namespace.. root only
*/
4638struct aml_node *
4639__aml_searchname(struct aml_node *root, const void *vname, int create)
4640{
char *name = (char *)vname;
char  nseg[AML_NAMESEG_LEN4 + 1];
int   i;

dnprintf(25,"Searchname: %s:%s = ", aml_nodename(root), name);
while (*name == AMLOP_ROOTCHAR0x5C) {
root = &aml_root;
name++;
}
while (*name != 0) {
/* Ugh.. we can have short names here: append '_' */
strlcpy(nseg, "____", sizeof(nseg));
for (i=0; i < AML_NAMESEG_LEN4 && *name && *name != '.'; i++)
	nseg[i] = *name++;
if (*name == '.')
	name++;
root = __aml_search(root, nseg, create);
}
dnprintf(25,"%p %s\n", root, aml_nodename(root));
return root;
4661}

4663struct aml_node *
4664aml_searchname(struct aml_node *root, const void *vname)
4665{
return __aml_searchname(root, vname, 0);
4667}

4669/*
* Search for relative name
*/
4672struct aml_node *
4673aml_searchrel(struct aml_node *root, const void *vname)
4674{
struct aml_node *res;

while (root) {
res = aml_searchname(root, vname);
if (res != NULL((void *)0))
	return res;
root = root->parent;
}
return NULL((void *)0);
4684}

4686#ifndef SMALL_KERNEL

4688void
4689acpi_getdevlist(struct acpi_devlist_head *list, struct aml_node *root,
  struct aml_value *pkg, int off)
4691{
struct acpi_devlist *dl;
struct aml_value *val;
struct aml_node *node;
int idx;

for (idx = off; idx < pkg->length; idx++) {
val = pkg->v_package_.vpackage[idx];
if (val->type == AML_OBJTYPE_NAMEREF) {
	node = aml_searchrel(root, aml_getname(val->v_nameref_.vbuffer));
	if (node == NULL((void *)0)) {
		printf("%s: device %s not found\n", __func__,
		    aml_getname(val->v_nameref_.vbuffer));
		continue;
	}
	val = node->value;
}
if (val->type == AML_OBJTYPE_OBJREF)
	val = val->v_objref_.vobjref.ref;
if (val->node) {
	dl = acpi_os_malloc(sizeof(*dl))_acpi_os_malloc(sizeof(*dl), __FUNCTION__, 4711);
	if (dl) {
		dl->dev_node = val->node;
		TAILQ_INSERT_TAIL(list, dl, dev_link)do { (dl)->dev_link.tqe_next = ((void *)0); (dl)->dev_link
.tqe_prev = (list)->tqh_last; *(list)->tqh_last = (dl);
 (list)->tqh_last = &(dl)->dev_link.tqe_next; } while
 (0);
	}
}
}
4718}

4720void
4721acpi_freedevlist(struct acpi_devlist_head *list)
4722{
struct acpi_devlist *dl;

while ((dl = TAILQ_FIRST(list)((list)->tqh_first)) != NULL((void *)0)) {
TAILQ_REMOVE(list, dl, dev_link)do { if (((dl)->dev_link.tqe_next) != ((void *)0)) (dl)->
dev_link.tqe_next->dev_link.tqe_prev = (dl)->dev_link.tqe_prev
; else (list)->tqh_last = (dl)->dev_link.tqe_prev; *(dl
)->dev_link.tqe_prev = (dl)->dev_link.tqe_next; ((dl)->
dev_link.tqe_prev) = ((void *)-1); ((dl)->dev_link.tqe_next
) = ((void *)-1); } while (0);
acpi_os_free(dl)_acpi_os_free(dl, __FUNCTION__, 4727);
}
4729}

4731#endif /* SMALL_KERNEL */