通用寄存器
示例:读取寄存器值
// 用户态程序或内核代码中均可使用
unsigned long reg_value;
asm volatile (
"mov %0, x10" // 将X10的值保存到reg_value变量
: "=r" (reg_value)
);
printk("X10 = 0x%lx\n", reg_value);
示例:写入寄存器值
unsigned long new_value = 0x1234;
asm volatile (
"mov x9, %0" // 将new_value的值写入X9
:
: "r" (new_value)
);
内核模块中直接访问
// 内核模块示例
void read_registers(void) {
unsigned long sp, pc;
asm volatile (
"mov %0, sp \n" // 读取SP(栈指针)
"mov %1, pc \n" // 读取PC(程序计数器)
: "=r" (sp), "=r" (pc)
);
pr_info("SP=0x%lx, PC=0x%lx\n", sp, pc);
}
系统寄存器
需要通过msr写、mrs读取:
linux内核定义了read_sysreg/write_sysreg相关的函数:arch/arm64/include/asm/sysreg.h
以读取寄存器为例 :read_sysreg和read_sysreg_s的区别是一个检测权限?(来自deepseek答案),实际操作read_sysreg接受字符串类型寄存器写法,如elr_el1,vbar_el1等(这些忽略大小写,本质上也是as汇编命令,属于binutils软件,中内置的)。./opcodes/aarch64-opc.c:
而read_sysreg_s只能接受SYS_ELR_EL1,SYS_VBAR_EL1这种内核定义的寄存器编码:
sys_reg:
/*
* ARMv8 ARM reserves the following encoding for system registers:
* (Ref: ARMv8 ARM, Section: "System instruction class encoding overview",
* C5.2, version:ARM DDI 0487A.f)
* [20-19] : Op0
* [18-16] : Op1
* [15-12] : CRn
* [11-8] : CRm
* [7-5] : Op2
*/
#define Op0_shift 19
#define Op0_mask 0x3
#define Op1_shift 16
#define Op1_mask 0x7
#define CRn_shift 12
#define CRn_mask 0xf
#define CRm_shift 8
#define CRm_mask 0xf
#define Op2_shift 5
#define Op2_mask 0x7
#define sys_reg(op0, op1, crn, crm, op2) \
(((op0) << Op0_shift) | ((op1) << Op1_shift) | \
((crn) << CRn_shift) | ((crm) << CRm_shift) | \
((op2) << Op2_shift))
和寄存器的定义有说明:http://hehezhou.cn/register2025/AArch64-elr_el1.html
案例:
uint64_t read_ttbr0_el1(void) {
uint64_t ttbr0;
asm volatile("mrs %0, ttbr0_el1" : "=r" (ttbr0));
return ttbr0;
}
static int __init test_init(void)
{
printk("ttbr0_el1 %llx\n",read_ttbr0_el1());
printk("ttbr0_el1 %llx\n",read_sysreg_s(SYS_TTBR0_EL1));
printk("elr_el1 %llx\n",read_sysreg(elr_el1));
printk("midr_el1 %llx\n",read_sysreg(midr_el1));
printk("vbar_el1 %llx\n",read_sysreg(vbar_el1));
printk("vbar_el1 %llx\n",read_sysreg_s(SYS_VBAR_EL1));
return 0;
}