summaryrefslogtreecommitdiff
path: root/yasm_arch.7
blob: 7694dd73e4638f5ae901ad69489bc9eec27138cd (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
.\"     Title: yasm_arch
.\"    Author: Peter Johnson <peter@tortall.net>
.\" Generator: DocBook XSL Stylesheets v1.70.1 <http://docbook.sf.net/>
.\"      Date: October 2006
.\"    Manual: Yasm Supported Target Architectures
.\"    Source: YASM
.\"
.TH "YASM_ARCH" "7" "October 2006" "YASM" "Yasm Supported Target Architec"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.SH "NAME"
yasm_arch \- Yasm Supported Target Architectures
.SH "SYNOPSIS"
.HP 5
\fByasm\fR \fB\-a\ \fR\fB\fIarch\fR\fR [\fB\-m\ \fR\fB\fImachine\fR\fR] \fB\fI...\fR\fR
.SH "DESCRIPTION"
.PP
The standard Yasm distribution includes a number of modules for different target architectures. Each target architecture can support one or more machine architectures.
.PP
The architecture and machine are selected on the
\fByasm\fR(1)
command line by use of the
\fB\-a \fR\fB\fIarch\fR\fR
and
\fB\-m \fR\fB\fImachine\fR\fR
command line options, respectively.
.PP
The machine architecture may also automatically be selected by certain object formats. For example, the
\(lqelf32\(rq
object format selects the
\(lqx86\(rq
machine architecture by default, while the
\(lqelf64\(rq
object format selects the
\(lqamd64\(rq
machine architecture by default.
.SH "X86 ARCHITECTURE"
.PP
The
\(lqx86\(rq
architecture supports the IA\-32 instruction set and derivatives and the AMD64 instruction set. It consists of two machines:
\(lqx86\(rq
(for the IA\-32 and derivatives) and
\(lqamd64\(rq
(for the AMD64 and derivatives). The default machine for the
\(lqx86\(rq
architecture is the
\(lqx86\(rq
machine.
.SS "BITS Setting"
.PP
The x86 architecture BITS setting specifies to Yasm the processor mode in which the generated code is intended to execute. x86 processors can run in three different major execution modes: 16\-bit, 32\-bit, and on AMD64\-supporting processors, 64\-bit. As the x86 instruction set contains portions whose function is execution\-mode dependent (such as operand\-size and address\-size override prefixes), Yasm cannot assemble x86 instructions correctly unless it is told by the user in what processor mode the code will execute.
.PP
The BITS setting can be changed in a variety of ways. When using the NASM\-compatible parser, the BITS setting can be changed directly via the use of the
\fBBITS xx\fR
assembler directive. The default BITS setting is determined by the object format in use.
.\" end of SS subsection "BITS Setting"
.SS "BITS 64 Extensions"
.PP
The AMD64 architecture is a new 64\-bit architecture developed by AMD, based on the 32\-bit x86 architecture. It extends the original x86 architecture by doubling the number of general purpose and SIMD registers, extending the arithmetic operations and address space to 64 bits, as well as other features.
.PP
Recently, Intel has introduced an essentially identical version of AMD64 called EM64T.
.PP
When an AMD64\-supporting processor is executing in 64\-bit mode, a number of additional extensions are available, including extra general purpose registers, extra SSE2 registers, and RIP\-relative addressing.
.PP
Yasm extends the base NASM syntax to support AMD64 as follows. To enable assembly of instructions for the 64\-bit mode of AMD64 processors, use the directive
\fBBITS 64\fR. As with NASM's BITS directive, this does not change the format of the output object file to 64 bits; it only changes the assembler mode to assume that the instructions being assembled will be run in 64\-bit mode. To specify an AMD64 object file, use
\fB\-m amd64\fR
on the Yasm command line, or explicitly target a 64\-bit object format such as
\fB\-f win64\fR
or
\fB\-f elf64\fR.
.sp
.it 1 an-trap
.nr an-no-space-flag 1
.nr an-break-flag 1
.br
\fBRegister Changes\fR
.RS
.PP
The additional 64\-bit general purpose registers are named r8\-r15. There are also 8\-bit (rXb), 16\-bit (rXw), and 32\-bit (rXd) subregisters that map to the least significant 8, 16, or 32 bits of the 64\-bit register. The original 8 general purpose registers have also been extended to 64\-bits: eax, edx, ecx, ebx, esi, edi, esp, and ebp have new 64\-bit versions called rax, rdx, rcx, rbx, rsi, rdi, rsp, and rbp respectively. The old 32\-bit registers map to the least significant bits of the new 64\-bit registers.
.PP
New 8\-bit registers are also available that map to the 8 least significant bits of rsi, rdi, rsp, and rbp. These are called sil, dil, spl, and bpl respectively. Unfortunately, due to the way instructions are encoded, these new 8\-bit registers are encoded the same as the old 8\-bit registers ah, dh, ch, and bh. The processor tells which is being used by the presence of the new REX prefix that is used to specify the other extended registers. This means it is illegal to mix the use of ah, dh, ch, and bh with an instruction that requires the REX prefix for other reasons. For instance:
.sp
.RS 3n
.nf
add ah, [r10]
.fi
.RE
.PP
(NASM syntax) is not a legal instruction because the use of r10 requires a REX prefix, making it impossible to use ah.
.PP
In 64\-bit mode, an additional 8 SSE2 registers are also available. These are named xmm8\-xmm15.
.RE
.\" end of subsection "Register Changes"
.sp
.it 1 an-trap
.nr an-no-space-flag 1
.nr an-break-flag 1
.br
\fB64 Bit Instructions\fR
.RS
.PP
By default, most operations in 64\-bit mode remain 32\-bit; operations that are 64\-bit usually require a REX prefix (one bit in the REX prefix determines whether an operation is 64\-bit or 32\-bit). Thus, essentially all 32\-bit instructions have a 64\-bit version, and the 64\-bit versions of instructions can use extended registers
\(lqfor free\(rq
(as the REX prefix is already present). Examples in NASM syntax:
.sp
.RS 3n
.nf
mov eax, 1  ; 32\-bit instruction
.fi
.RE
.sp
.RS 3n
.nf
mov rcx, 1  ; 64\-bit instruction
.fi
.RE
.PP
Instructions that modify the stack (push, pop, call, ret, enter, and leave) are implicitly 64\-bit. Their 32\-bit counterparts are not available, but their 16\-bit counterparts are. Examples in NASM syntax:
.sp
.RS 3n
.nf
push eax  ; illegal instruction
.fi
.RE
.sp
.RS 3n
.nf
push rbx  ; 1\-byte instruction
.fi
.RE
.sp
.RS 3n
.nf
push r11  ; 2\-byte instruction with REX prefix
.fi
.RE
.RE
.\" end of subsection "64 Bit Instructions"
.sp
.it 1 an-trap
.nr an-no-space-flag 1
.nr an-break-flag 1
.br
\fBImplicit Zero Extension\fR
.RS
.PP
Results of 32\-bit operations are implicitly zero\-extended to the upper 32 bits of the corresponding 64\-bit register. 16 and 8 bit operations, on the other hand, do not affect upper bits of the register (just as in 32\-bit and 16\-bit modes). This can be used to generate smaller code in some instances. Examples in NASM syntax:
.sp
.RS 3n
.nf
mov ecx, 1  ; 1 byte shorter than mov rcx, 1
.fi
.RE
.sp
.RS 3n
.nf
and edx, 3  ; equivalent to and rdx, 3
.fi
.RE
.RE
.\" end of subsection "Implicit Zero Extension"
.sp
.it 1 an-trap
.nr an-no-space-flag 1
.nr an-break-flag 1
.br
\fBImmediates\fR
.RS
.PP
For most instructions in 64\-bit mode, immediate values remain 32 bits; their value is sign\-extended into the upper 32 bits of the target register prior to being used. The exception is the mov instruction, which can take a 64\-bit immediate when the destination is a 64\-bit register. Examples in NASM syntax:
.sp
.RS 3n
.nf
add rax, 1           ; optimized down to signed 8\-bit
.fi
.RE
.sp
.RS 3n
.nf
add rax, dword 1     ; force size to 32\-bit
.fi
.RE
.sp
.RS 3n
.nf
add rax, 0xffffffff  ; sign\-extended 32\-bit
.fi
.RE
.sp
.RS 3n
.nf
add rax, \-1          ; same as above
.fi
.RE
.sp
.RS 3n
.nf
add rax, 0xffffffffffffffff ; truncated to 32\-bit (warning)
.fi
.RE
.sp
.RS 3n
.nf
mov eax, 1           ; 5 byte
.fi
.RE
.sp
.RS 3n
.nf
mov rax, 1           ; 5 byte (optimized to signed 32\-bit)
.fi
.RE
.sp
.RS 3n
.nf
mov rax, qword 1     ; 10 byte (forced 64\-bit)
.fi
.RE
.sp
.RS 3n
.nf
mov rbx, 0x1234567890abcdef ; 10 byte
.fi
.RE
.sp
.RS 3n
.nf
mov rcx, 0xffffffff  ; 10 byte (does not fit in signed 32\-bit)
.fi
.RE
.sp
.RS 3n
.nf
mov ecx, \-1          ; 5 byte, equivalent to above
.fi
.RE
.sp
.RS 3n
.nf
mov rcx, sym         ; 5 byte, 32\-bit size default for symbols
.fi
.RE
.sp
.RS 3n
.nf
mov rcx, qword sym   ; 10 byte, override default size
.fi
.RE
.RE
.\" end of subsection "Immediates"
.sp
.it 1 an-trap
.nr an-no-space-flag 1
.nr an-break-flag 1
.br
\fBDisplacements\fR
.RS
.PP
Just like immediates, displacements, for the most part, remain 32 bits and are sign extended prior to use. Again, the exception is one restricted form of the mov instruction: between the al/ax/eax/rax register and a 64\-bit absolute address (no registers allowed in the effective address). In NASM syntax, use of the 64\-bit absolute form requires
\fB[qword]\fR. Examples in NASM syntax:
.sp
.RS 3n
.nf
mov eax, [1]    ; 32 bit, with sign extension
.fi
.RE
.sp
.RS 3n
.nf
mov al, [rax\-1] ; 32 bit, with sign extension
.fi
.RE
.sp
.RS 3n
.nf
mov al, [qword 0x1122334455667788] ; 64\-bit absolute
.fi
.RE
.sp
.RS 3n
.nf
mov al, [0x1122334455667788] ; truncated to 32\-bit (warning)
.fi
.RE
.RE
.\" end of subsection "Displacements"
.sp
.it 1 an-trap
.nr an-no-space-flag 1
.nr an-break-flag 1
.br
\fBRIP Relative Addressing\fR
.RS
.PP
In 64\-bit mode, a new form of effective addressing is available to make it easier to write position\-independent code. Any memory reference may be made RIP relative (RIP is the instruction pointer register, which contains the address of the location immediately following the current instruction).
.PP
In NASM syntax, there are two ways to specify RIP\-relative addressing:
.sp
.RS 3n
.nf
mov dword [rip+10], 1
.fi
.RE
.PP
stores the value 1 ten bytes after the end of the instruction.
\fB10\fR
can also be a symbolic constant, and will be treated the same way. On the other hand,
.sp
.RS 3n
.nf
mov dword [symb wrt rip], 1
.fi
.RE
.PP
stores the value 1 into the address of symbol
\fBsymb\fR. This is distinctly different than the behavior of:
.sp
.RS 3n
.nf
mov dword [symb+rip], 1
.fi
.RE
.PP
which takes the address of the end of the instruction, adds the address of
\fBsymb\fR
to it, then stores the value 1 there. If
\fBsymb\fR
is a variable, this will
\fInot\fR
store the value 1 into the
\fBsymb\fR
variable!
.RE
.\" end of subsection "RIP Relative Addressing"
.\" end of SS subsection "BITS 64 Extensions"
.SH "LC3B ARCHITECTURE"
.PP
The
\(lqlc3b\(rq
architecture supports the LC\-3b ISA as used in the ECE 312 (now ECE 411) course at the University of Illinois, Urbana\-Champaign, as well as other university courses. See
\fI\%http://courses.ece.uiuc.edu/ece411/\fR
for more details and example code. The
\(lqlc3b\(rq
architecture consists of only one machine:
\(lqlc3b\(rq.
.SH "SEE ALSO"
.PP
\fByasm\fR(1)
.SH "BUGS"
.PP
When using the
\(lqx86\(rq
architecture, it is overly easy to generate AMD64 code (using the
\fBBITS 64\fR
directive) and generate a 32\-bit object file (by failing to specify
\fB\-m amd64\fR
on the command line or selecting a 64\-bit object format). Similarly, specifying
\fB\-m amd64\fR
does not default the BITS setting to 64. An easy way to avoid this is by directly specifying a 64\-bit object format such as
\fB\-f elf64\fR.
.SH "AUTHOR"
.PP
\fBPeter\fR \fBJohnson\fR <peter@tortall.net>
.sp -1n
.IP "" 3n
Author.
.SH "COPYRIGHT"
Copyright \(co 2004, 2005, 2006 Peter Johnson