1  // SPDX-License-Identifier: BSD-3-Clause OR GPL-2.0
2  /******************************************************************************
3   *
4   * Module Name: dsopcode - Dispatcher support for regions and fields
5   *
6   * Copyright (C) 2000 - 2023, Intel Corp.
7   *
8   *****************************************************************************/
9  
10  #include <acpi/acpi.h>
11  #include "accommon.h"
12  #include "acparser.h"
13  #include "amlcode.h"
14  #include "acdispat.h"
15  #include "acinterp.h"
16  #include "acnamesp.h"
17  #include "acevents.h"
18  #include "actables.h"
19  
20  #define _COMPONENT          ACPI_DISPATCHER
21  ACPI_MODULE_NAME("dsopcode")
22  
23  /* Local prototypes */
24  static acpi_status
25  acpi_ds_init_buffer_field(u16 aml_opcode,
26  			  union acpi_operand_object *obj_desc,
27  			  union acpi_operand_object *buffer_desc,
28  			  union acpi_operand_object *offset_desc,
29  			  union acpi_operand_object *length_desc,
30  			  union acpi_operand_object *result_desc);
31  
32  /*******************************************************************************
33   *
34   * FUNCTION:    acpi_ds_initialize_region
35   *
36   * PARAMETERS:  obj_handle      - Region namespace node
37   *
38   * RETURN:      Status
39   *
40   * DESCRIPTION: Front end to ev_initialize_region
41   *
42   ******************************************************************************/
43  
acpi_ds_initialize_region(acpi_handle obj_handle)44  acpi_status acpi_ds_initialize_region(acpi_handle obj_handle)
45  {
46  	union acpi_operand_object *obj_desc;
47  	acpi_status status;
48  
49  	obj_desc = acpi_ns_get_attached_object(obj_handle);
50  
51  	/* Namespace is NOT locked */
52  
53  	status = acpi_ev_initialize_region(obj_desc);
54  	return (status);
55  }
56  
57  /*******************************************************************************
58   *
59   * FUNCTION:    acpi_ds_init_buffer_field
60   *
61   * PARAMETERS:  aml_opcode      - create_xxx_field
62   *              obj_desc        - buffer_field object
63   *              buffer_desc     - Host Buffer
64   *              offset_desc     - Offset into buffer
65   *              length_desc     - Length of field (CREATE_FIELD_OP only)
66   *              result_desc     - Where to store the result
67   *
68   * RETURN:      Status
69   *
70   * DESCRIPTION: Perform actual initialization of a buffer field
71   *
72   ******************************************************************************/
73  
74  static acpi_status
acpi_ds_init_buffer_field(u16 aml_opcode,union acpi_operand_object * obj_desc,union acpi_operand_object * buffer_desc,union acpi_operand_object * offset_desc,union acpi_operand_object * length_desc,union acpi_operand_object * result_desc)75  acpi_ds_init_buffer_field(u16 aml_opcode,
76  			  union acpi_operand_object *obj_desc,
77  			  union acpi_operand_object *buffer_desc,
78  			  union acpi_operand_object *offset_desc,
79  			  union acpi_operand_object *length_desc,
80  			  union acpi_operand_object *result_desc)
81  {
82  	u32 offset;
83  	u32 bit_offset;
84  	u32 bit_count;
85  	u8 field_flags;
86  	acpi_status status;
87  
88  	ACPI_FUNCTION_TRACE_PTR(ds_init_buffer_field, obj_desc);
89  
90  	/* Host object must be a Buffer */
91  
92  	if (buffer_desc->common.type != ACPI_TYPE_BUFFER) {
93  		ACPI_ERROR((AE_INFO,
94  			    "Target of Create Field is not a Buffer object - %s",
95  			    acpi_ut_get_object_type_name(buffer_desc)));
96  
97  		status = AE_AML_OPERAND_TYPE;
98  		goto cleanup;
99  	}
100  
101  	/*
102  	 * The last parameter to all of these opcodes (result_desc) started
103  	 * out as a name_string, and should therefore now be a NS node
104  	 * after resolution in acpi_ex_resolve_operands().
105  	 */
106  	if (ACPI_GET_DESCRIPTOR_TYPE(result_desc) != ACPI_DESC_TYPE_NAMED) {
107  		ACPI_ERROR((AE_INFO,
108  			    "(%s) destination not a NS Node [%s]",
109  			    acpi_ps_get_opcode_name(aml_opcode),
110  			    acpi_ut_get_descriptor_name(result_desc)));
111  
112  		status = AE_AML_OPERAND_TYPE;
113  		goto cleanup;
114  	}
115  
116  	offset = (u32) offset_desc->integer.value;
117  
118  	/*
119  	 * Setup the Bit offsets and counts, according to the opcode
120  	 */
121  	switch (aml_opcode) {
122  	case AML_CREATE_FIELD_OP:
123  
124  		/* Offset is in bits, count is in bits */
125  
126  		field_flags = AML_FIELD_ACCESS_BYTE;
127  		bit_offset = offset;
128  		bit_count = (u32) length_desc->integer.value;
129  
130  		/* Must have a valid (>0) bit count */
131  
132  		if (bit_count == 0) {
133  			ACPI_BIOS_ERROR((AE_INFO,
134  					 "Attempt to CreateField of length zero"));
135  			status = AE_AML_OPERAND_VALUE;
136  			goto cleanup;
137  		}
138  		break;
139  
140  	case AML_CREATE_BIT_FIELD_OP:
141  
142  		/* Offset is in bits, Field is one bit */
143  
144  		bit_offset = offset;
145  		bit_count = 1;
146  		field_flags = AML_FIELD_ACCESS_BYTE;
147  		break;
148  
149  	case AML_CREATE_BYTE_FIELD_OP:
150  
151  		/* Offset is in bytes, field is one byte */
152  
153  		bit_offset = 8 * offset;
154  		bit_count = 8;
155  		field_flags = AML_FIELD_ACCESS_BYTE;
156  		break;
157  
158  	case AML_CREATE_WORD_FIELD_OP:
159  
160  		/* Offset is in bytes, field is one word */
161  
162  		bit_offset = 8 * offset;
163  		bit_count = 16;
164  		field_flags = AML_FIELD_ACCESS_WORD;
165  		break;
166  
167  	case AML_CREATE_DWORD_FIELD_OP:
168  
169  		/* Offset is in bytes, field is one dword */
170  
171  		bit_offset = 8 * offset;
172  		bit_count = 32;
173  		field_flags = AML_FIELD_ACCESS_DWORD;
174  		break;
175  
176  	case AML_CREATE_QWORD_FIELD_OP:
177  
178  		/* Offset is in bytes, field is one qword */
179  
180  		bit_offset = 8 * offset;
181  		bit_count = 64;
182  		field_flags = AML_FIELD_ACCESS_QWORD;
183  		break;
184  
185  	default:
186  
187  		ACPI_ERROR((AE_INFO,
188  			    "Unknown field creation opcode 0x%02X",
189  			    aml_opcode));
190  		status = AE_AML_BAD_OPCODE;
191  		goto cleanup;
192  	}
193  
194  	/* Entire field must fit within the current length of the buffer */
195  
196  	if ((bit_offset + bit_count) > (8 * (u32)buffer_desc->buffer.length)) {
197  		status = AE_AML_BUFFER_LIMIT;
198  		ACPI_BIOS_EXCEPTION((AE_INFO, status,
199  				     "Field [%4.4s] at bit offset/length %u/%u "
200  				     "exceeds size of target Buffer (%u bits)",
201  				     acpi_ut_get_node_name(result_desc),
202  				     bit_offset, bit_count,
203  				     8 * (u32)buffer_desc->buffer.length));
204  		goto cleanup;
205  	}
206  
207  	/*
208  	 * Initialize areas of the field object that are common to all fields
209  	 * For field_flags, use LOCK_RULE = 0 (NO_LOCK),
210  	 * UPDATE_RULE = 0 (UPDATE_PRESERVE)
211  	 */
212  	status =
213  	    acpi_ex_prep_common_field_object(obj_desc, field_flags, 0,
214  					     bit_offset, bit_count);
215  	if (ACPI_FAILURE(status)) {
216  		goto cleanup;
217  	}
218  
219  	obj_desc->buffer_field.buffer_obj = buffer_desc;
220  	obj_desc->buffer_field.is_create_field =
221  	    aml_opcode == AML_CREATE_FIELD_OP;
222  
223  	/* Reference count for buffer_desc inherits obj_desc count */
224  
225  	buffer_desc->common.reference_count = (u16)
226  	    (buffer_desc->common.reference_count +
227  	     obj_desc->common.reference_count);
228  
229  cleanup:
230  
231  	/* Always delete the operands */
232  
233  	acpi_ut_remove_reference(offset_desc);
234  	acpi_ut_remove_reference(buffer_desc);
235  
236  	if (aml_opcode == AML_CREATE_FIELD_OP) {
237  		acpi_ut_remove_reference(length_desc);
238  	}
239  
240  	/* On failure, delete the result descriptor */
241  
242  	if (ACPI_FAILURE(status)) {
243  		acpi_ut_remove_reference(result_desc);	/* Result descriptor */
244  	} else {
245  		/* Now the address and length are valid for this buffer_field */
246  
247  		obj_desc->buffer_field.flags |= AOPOBJ_DATA_VALID;
248  	}
249  
250  	return_ACPI_STATUS(status);
251  }
252  
253  /*******************************************************************************
254   *
255   * FUNCTION:    acpi_ds_eval_buffer_field_operands
256   *
257   * PARAMETERS:  walk_state      - Current walk
258   *              op              - A valid buffer_field Op object
259   *
260   * RETURN:      Status
261   *
262   * DESCRIPTION: Get buffer_field Buffer and Index
263   *              Called from acpi_ds_exec_end_op during buffer_field parse tree walk
264   *
265   ******************************************************************************/
266  
267  acpi_status
acpi_ds_eval_buffer_field_operands(struct acpi_walk_state * walk_state,union acpi_parse_object * op)268  acpi_ds_eval_buffer_field_operands(struct acpi_walk_state *walk_state,
269  				   union acpi_parse_object *op)
270  {
271  	acpi_status status;
272  	union acpi_operand_object *obj_desc;
273  	struct acpi_namespace_node *node;
274  	union acpi_parse_object *next_op;
275  
276  	ACPI_FUNCTION_TRACE_PTR(ds_eval_buffer_field_operands, op);
277  
278  	/*
279  	 * This is where we evaluate the address and length fields of the
280  	 * create_xxx_field declaration
281  	 */
282  	node = op->common.node;
283  
284  	/* next_op points to the op that holds the Buffer */
285  
286  	next_op = op->common.value.arg;
287  
288  	/* Evaluate/create the address and length operands */
289  
290  	status = acpi_ds_create_operands(walk_state, next_op);
291  	if (ACPI_FAILURE(status)) {
292  		return_ACPI_STATUS(status);
293  	}
294  
295  	obj_desc = acpi_ns_get_attached_object(node);
296  	if (!obj_desc) {
297  		return_ACPI_STATUS(AE_NOT_EXIST);
298  	}
299  
300  	/* Resolve the operands */
301  
302  	status =
303  	    acpi_ex_resolve_operands(op->common.aml_opcode, ACPI_WALK_OPERANDS,
304  				     walk_state);
305  	if (ACPI_FAILURE(status)) {
306  		ACPI_ERROR((AE_INFO, "(%s) bad operand(s), status 0x%X",
307  			    acpi_ps_get_opcode_name(op->common.aml_opcode),
308  			    status));
309  
310  		return_ACPI_STATUS(status);
311  	}
312  
313  	/* Initialize the Buffer Field */
314  
315  	if (op->common.aml_opcode == AML_CREATE_FIELD_OP) {
316  
317  		/* NOTE: Slightly different operands for this opcode */
318  
319  		status =
320  		    acpi_ds_init_buffer_field(op->common.aml_opcode, obj_desc,
321  					      walk_state->operands[0],
322  					      walk_state->operands[1],
323  					      walk_state->operands[2],
324  					      walk_state->operands[3]);
325  	} else {
326  		/* All other, create_xxx_field opcodes */
327  
328  		status =
329  		    acpi_ds_init_buffer_field(op->common.aml_opcode, obj_desc,
330  					      walk_state->operands[0],
331  					      walk_state->operands[1], NULL,
332  					      walk_state->operands[2]);
333  	}
334  
335  	return_ACPI_STATUS(status);
336  }
337  
338  /*******************************************************************************
339   *
340   * FUNCTION:    acpi_ds_eval_region_operands
341   *
342   * PARAMETERS:  walk_state      - Current walk
343   *              op              - A valid region Op object
344   *
345   * RETURN:      Status
346   *
347   * DESCRIPTION: Get region address and length
348   *              Called from acpi_ds_exec_end_op during op_region parse tree walk
349   *
350   ******************************************************************************/
351  
352  acpi_status
acpi_ds_eval_region_operands(struct acpi_walk_state * walk_state,union acpi_parse_object * op)353  acpi_ds_eval_region_operands(struct acpi_walk_state *walk_state,
354  			     union acpi_parse_object *op)
355  {
356  	acpi_status status;
357  	union acpi_operand_object *obj_desc;
358  	union acpi_operand_object *operand_desc;
359  	struct acpi_namespace_node *node;
360  	union acpi_parse_object *next_op;
361  	acpi_adr_space_type space_id;
362  
363  	ACPI_FUNCTION_TRACE_PTR(ds_eval_region_operands, op);
364  
365  	/*
366  	 * This is where we evaluate the address and length fields of the
367  	 * op_region declaration
368  	 */
369  	node = op->common.node;
370  
371  	/* next_op points to the op that holds the space_ID */
372  
373  	next_op = op->common.value.arg;
374  	space_id = (acpi_adr_space_type)next_op->common.value.integer;
375  
376  	/* next_op points to address op */
377  
378  	next_op = next_op->common.next;
379  
380  	/* Evaluate/create the address and length operands */
381  
382  	status = acpi_ds_create_operands(walk_state, next_op);
383  	if (ACPI_FAILURE(status)) {
384  		return_ACPI_STATUS(status);
385  	}
386  
387  	/* Resolve the length and address operands to numbers */
388  
389  	status =
390  	    acpi_ex_resolve_operands(op->common.aml_opcode, ACPI_WALK_OPERANDS,
391  				     walk_state);
392  	if (ACPI_FAILURE(status)) {
393  		return_ACPI_STATUS(status);
394  	}
395  
396  	obj_desc = acpi_ns_get_attached_object(node);
397  	if (!obj_desc) {
398  		return_ACPI_STATUS(AE_NOT_EXIST);
399  	}
400  
401  	/*
402  	 * Get the length operand and save it
403  	 * (at Top of stack)
404  	 */
405  	operand_desc = walk_state->operands[walk_state->num_operands - 1];
406  
407  	obj_desc->region.length = (u32) operand_desc->integer.value;
408  	acpi_ut_remove_reference(operand_desc);
409  
410  	/* A zero-length operation region is unusable. Just warn */
411  
412  	if (!obj_desc->region.length
413  	    && (space_id < ACPI_NUM_PREDEFINED_REGIONS)) {
414  		ACPI_WARNING((AE_INFO,
415  			      "Operation Region [%4.4s] has zero length (SpaceId %X)",
416  			      node->name.ascii, space_id));
417  	}
418  
419  	/*
420  	 * Get the address and save it
421  	 * (at top of stack - 1)
422  	 */
423  	operand_desc = walk_state->operands[walk_state->num_operands - 2];
424  
425  	obj_desc->region.address = (acpi_physical_address)
426  	    operand_desc->integer.value;
427  	acpi_ut_remove_reference(operand_desc);
428  
429  	ACPI_DEBUG_PRINT((ACPI_DB_EXEC, "RgnObj %p Addr %8.8X%8.8X Len %X\n",
430  			  obj_desc,
431  			  ACPI_FORMAT_UINT64(obj_desc->region.address),
432  			  obj_desc->region.length));
433  
434  	status = acpi_ut_add_address_range(obj_desc->region.space_id,
435  					   obj_desc->region.address,
436  					   obj_desc->region.length, node);
437  
438  	/* Now the address and length are valid for this opregion */
439  
440  	obj_desc->region.flags |= AOPOBJ_DATA_VALID;
441  	return_ACPI_STATUS(status);
442  }
443  
444  /*******************************************************************************
445   *
446   * FUNCTION:    acpi_ds_eval_table_region_operands
447   *
448   * PARAMETERS:  walk_state      - Current walk
449   *              op              - A valid region Op object
450   *
451   * RETURN:      Status
452   *
453   * DESCRIPTION: Get region address and length.
454   *              Called from acpi_ds_exec_end_op during data_table_region parse
455   *              tree walk.
456   *
457   ******************************************************************************/
458  
459  acpi_status
acpi_ds_eval_table_region_operands(struct acpi_walk_state * walk_state,union acpi_parse_object * op)460  acpi_ds_eval_table_region_operands(struct acpi_walk_state *walk_state,
461  				   union acpi_parse_object *op)
462  {
463  	acpi_status status;
464  	union acpi_operand_object *obj_desc;
465  	union acpi_operand_object **operand;
466  	struct acpi_namespace_node *node;
467  	union acpi_parse_object *next_op;
468  	struct acpi_table_header *table;
469  	u32 table_index;
470  
471  	ACPI_FUNCTION_TRACE_PTR(ds_eval_table_region_operands, op);
472  
473  	/*
474  	 * This is where we evaluate the Signature string, oem_id string,
475  	 * and oem_table_id string of the Data Table Region declaration
476  	 */
477  	node = op->common.node;
478  
479  	/* next_op points to Signature string op */
480  
481  	next_op = op->common.value.arg;
482  
483  	/*
484  	 * Evaluate/create the Signature string, oem_id string,
485  	 * and oem_table_id string operands
486  	 */
487  	status = acpi_ds_create_operands(walk_state, next_op);
488  	if (ACPI_FAILURE(status)) {
489  		return_ACPI_STATUS(status);
490  	}
491  
492  	operand = &walk_state->operands[0];
493  
494  	/*
495  	 * Resolve the Signature string, oem_id string,
496  	 * and oem_table_id string operands
497  	 */
498  	status =
499  	    acpi_ex_resolve_operands(op->common.aml_opcode, ACPI_WALK_OPERANDS,
500  				     walk_state);
501  	if (ACPI_FAILURE(status)) {
502  		goto cleanup;
503  	}
504  
505  	/* Find the ACPI table */
506  
507  	status = acpi_tb_find_table(operand[0]->string.pointer,
508  				    operand[1]->string.pointer,
509  				    operand[2]->string.pointer, &table_index);
510  	if (ACPI_FAILURE(status)) {
511  		if (status == AE_NOT_FOUND) {
512  			ACPI_ERROR((AE_INFO,
513  				    "ACPI Table [%4.4s] OEM:(%s, %s) not found in RSDT/XSDT",
514  				    operand[0]->string.pointer,
515  				    operand[1]->string.pointer,
516  				    operand[2]->string.pointer));
517  		}
518  		goto cleanup;
519  	}
520  
521  	status = acpi_get_table_by_index(table_index, &table);
522  	if (ACPI_FAILURE(status)) {
523  		goto cleanup;
524  	}
525  
526  	obj_desc = acpi_ns_get_attached_object(node);
527  	if (!obj_desc) {
528  		status = AE_NOT_EXIST;
529  		goto cleanup;
530  	}
531  
532  	obj_desc->region.address = ACPI_PTR_TO_PHYSADDR(table);
533  	obj_desc->region.length = table->length;
534  	obj_desc->region.pointer = table;
535  
536  	ACPI_DEBUG_PRINT((ACPI_DB_EXEC, "RgnObj %p Addr %8.8X%8.8X Len %X\n",
537  			  obj_desc,
538  			  ACPI_FORMAT_UINT64(obj_desc->region.address),
539  			  obj_desc->region.length));
540  
541  	/* Now the address and length are valid for this opregion */
542  
543  	obj_desc->region.flags |= AOPOBJ_DATA_VALID;
544  
545  cleanup:
546  	acpi_ut_remove_reference(operand[0]);
547  	acpi_ut_remove_reference(operand[1]);
548  	acpi_ut_remove_reference(operand[2]);
549  
550  	return_ACPI_STATUS(status);
551  }
552  
553  /*******************************************************************************
554   *
555   * FUNCTION:    acpi_ds_eval_data_object_operands
556   *
557   * PARAMETERS:  walk_state      - Current walk
558   *              op              - A valid data_object Op object
559   *              obj_desc        - data_object
560   *
561   * RETURN:      Status
562   *
563   * DESCRIPTION: Get the operands and complete the following data object types:
564   *              Buffer, Package.
565   *
566   ******************************************************************************/
567  
568  acpi_status
acpi_ds_eval_data_object_operands(struct acpi_walk_state * walk_state,union acpi_parse_object * op,union acpi_operand_object * obj_desc)569  acpi_ds_eval_data_object_operands(struct acpi_walk_state *walk_state,
570  				  union acpi_parse_object *op,
571  				  union acpi_operand_object *obj_desc)
572  {
573  	acpi_status status;
574  	union acpi_operand_object *arg_desc;
575  	u32 length;
576  
577  	ACPI_FUNCTION_TRACE(ds_eval_data_object_operands);
578  
579  	/* The first operand (for all of these data objects) is the length */
580  
581  	/*
582  	 * Set proper index into operand stack for acpi_ds_obj_stack_push
583  	 * invoked inside acpi_ds_create_operand.
584  	 */
585  	walk_state->operand_index = walk_state->num_operands;
586  
587  	/* Ignore if child is not valid */
588  
589  	if (!op->common.value.arg) {
590  		ACPI_ERROR((AE_INFO,
591  			    "Missing child while evaluating opcode %4.4X, Op %p",
592  			    op->common.aml_opcode, op));
593  		return_ACPI_STATUS(AE_OK);
594  	}
595  
596  	status = acpi_ds_create_operand(walk_state, op->common.value.arg, 1);
597  	if (ACPI_FAILURE(status)) {
598  		return_ACPI_STATUS(status);
599  	}
600  
601  	status = acpi_ex_resolve_operands(walk_state->opcode,
602  					  &(walk_state->
603  					    operands[walk_state->num_operands -
604  						     1]), walk_state);
605  	if (ACPI_FAILURE(status)) {
606  		return_ACPI_STATUS(status);
607  	}
608  
609  	/* Extract length operand */
610  
611  	arg_desc = walk_state->operands[walk_state->num_operands - 1];
612  	length = (u32) arg_desc->integer.value;
613  
614  	/* Cleanup for length operand */
615  
616  	status = acpi_ds_obj_stack_pop(1, walk_state);
617  	if (ACPI_FAILURE(status)) {
618  		return_ACPI_STATUS(status);
619  	}
620  
621  	acpi_ut_remove_reference(arg_desc);
622  
623  	/*
624  	 * Create the actual data object
625  	 */
626  	switch (op->common.aml_opcode) {
627  	case AML_BUFFER_OP:
628  
629  		status =
630  		    acpi_ds_build_internal_buffer_obj(walk_state, op, length,
631  						      &obj_desc);
632  		break;
633  
634  	case AML_PACKAGE_OP:
635  	case AML_VARIABLE_PACKAGE_OP:
636  
637  		status =
638  		    acpi_ds_build_internal_package_obj(walk_state, op, length,
639  						       &obj_desc);
640  		break;
641  
642  	default:
643  
644  		return_ACPI_STATUS(AE_AML_BAD_OPCODE);
645  	}
646  
647  	if (ACPI_SUCCESS(status)) {
648  		/*
649  		 * Return the object in the walk_state, unless the parent is a package -
650  		 * in this case, the return object will be stored in the parse tree
651  		 * for the package.
652  		 */
653  		if ((!op->common.parent) ||
654  		    ((op->common.parent->common.aml_opcode != AML_PACKAGE_OP) &&
655  		     (op->common.parent->common.aml_opcode !=
656  		      AML_VARIABLE_PACKAGE_OP)
657  		     && (op->common.parent->common.aml_opcode !=
658  			 AML_NAME_OP))) {
659  			walk_state->result_obj = obj_desc;
660  		}
661  	}
662  
663  	return_ACPI_STATUS(status);
664  }
665  
666  /*******************************************************************************
667   *
668   * FUNCTION:    acpi_ds_eval_bank_field_operands
669   *
670   * PARAMETERS:  walk_state      - Current walk
671   *              op              - A valid bank_field Op object
672   *
673   * RETURN:      Status
674   *
675   * DESCRIPTION: Get bank_field bank_value
676   *              Called from acpi_ds_exec_end_op during bank_field parse tree walk
677   *
678   ******************************************************************************/
679  
680  acpi_status
acpi_ds_eval_bank_field_operands(struct acpi_walk_state * walk_state,union acpi_parse_object * op)681  acpi_ds_eval_bank_field_operands(struct acpi_walk_state *walk_state,
682  				 union acpi_parse_object *op)
683  {
684  	acpi_status status;
685  	union acpi_operand_object *obj_desc;
686  	union acpi_operand_object *operand_desc;
687  	struct acpi_namespace_node *node;
688  	union acpi_parse_object *next_op;
689  	union acpi_parse_object *arg;
690  
691  	ACPI_FUNCTION_TRACE_PTR(ds_eval_bank_field_operands, op);
692  
693  	/*
694  	 * This is where we evaluate the bank_value field of the
695  	 * bank_field declaration
696  	 */
697  
698  	/* next_op points to the op that holds the Region */
699  
700  	next_op = op->common.value.arg;
701  
702  	/* next_op points to the op that holds the Bank Register */
703  
704  	next_op = next_op->common.next;
705  
706  	/* next_op points to the op that holds the Bank Value */
707  
708  	next_op = next_op->common.next;
709  
710  	/*
711  	 * Set proper index into operand stack for acpi_ds_obj_stack_push
712  	 * invoked inside acpi_ds_create_operand.
713  	 *
714  	 * We use walk_state->Operands[0] to store the evaluated bank_value
715  	 */
716  	walk_state->operand_index = 0;
717  
718  	status = acpi_ds_create_operand(walk_state, next_op, 0);
719  	if (ACPI_FAILURE(status)) {
720  		return_ACPI_STATUS(status);
721  	}
722  
723  	status = acpi_ex_resolve_to_value(&walk_state->operands[0], walk_state);
724  	if (ACPI_FAILURE(status)) {
725  		return_ACPI_STATUS(status);
726  	}
727  
728  	ACPI_DUMP_OPERANDS(ACPI_WALK_OPERANDS,
729  			   acpi_ps_get_opcode_name(op->common.aml_opcode), 1);
730  	/*
731  	 * Get the bank_value operand and save it
732  	 * (at Top of stack)
733  	 */
734  	operand_desc = walk_state->operands[0];
735  
736  	/* Arg points to the start Bank Field */
737  
738  	arg = acpi_ps_get_arg(op, 4);
739  	while (arg) {
740  
741  		/* Ignore OFFSET and ACCESSAS terms here */
742  
743  		if (arg->common.aml_opcode == AML_INT_NAMEDFIELD_OP) {
744  			node = arg->common.node;
745  
746  			obj_desc = acpi_ns_get_attached_object(node);
747  			if (!obj_desc) {
748  				return_ACPI_STATUS(AE_NOT_EXIST);
749  			}
750  
751  			obj_desc->bank_field.value =
752  			    (u32) operand_desc->integer.value;
753  		}
754  
755  		/* Move to next field in the list */
756  
757  		arg = arg->common.next;
758  	}
759  
760  	acpi_ut_remove_reference(operand_desc);
761  	return_ACPI_STATUS(status);
762  }
763