PDP-11 architecture
The PDP-11 architecture is an instruction set architecture developed by Digital Equipment Corporation. It is implemented by central processing units and microprocessors used in PDP-11 minicomputers. It was in wide use during the 1970s, but was eventually overshadowed by the more powerful VAX-11 architecture in the 1980s.
Memory
Data formats
Sixteen-bit words are stored little-endian. Thirty-two-bit data—supported as extensions to the basic architecture, e.g., floating point in the FPU Instruction Set, double-words in the Extended Instruction Set or long data in the Commercial Instruction Set—are stored in more than one format, including an unusual middle-endian format sometimes referred to as "PDP-endian".Memory management
The PDP-11's 16-bit addresses can address 64 KB. By the time the PDP-11 yielded to the VAX, 8-bit bytes and hexadecimal notation were becoming standard in the industry; however, numeric values on the PDP-11 always use octal notation, and the amount of memory attached to a PDP-11 is always stated as a number of words. The basic logical address space is 32K words, but the high 4K of physical address space are not populated because input/output registers on the bus respond to addresses in that range. So originally, a fully loaded PDP-11 had 28K words.The processor reserves low memory addresses for two-word vectors that give a program counter and processor status word with which to begin a service routine. When an I/O device interrupts a program, it places the address of its vector on the bus to indicate which service routine should take control. The lowest vectors are service routines to handle various types of trap. Traps occur on some program errors, such as an attempt to execute an undefined instruction; and also when the program executes an instruction such as BPT, EMT, IOT, or TRAP to request service from the operating system.
Memory expansion
The article PDP-11 describes how the 16-bit logical address space became an insurmountable limitation. During the life of the PDP-11, the following techniques were used to work around the limitation:- Later-model PDP-11 processors included memory management to support virtual addressing. The physical address space was extended to 18 or 22 bits, hence allowing up to 256 KB or 4 MB of RAM. The logical address space remained limited to 16 bits.
- Some models, beginning with the PDP-11/45, can be set to use 32K words as the "instruction space" for program code and a separate 32K words of "data space". Some operating systems—notably Unix since edition V7, and RSX11-M+—rely on this feature.
- Programming techniques, such as overlaying a block of stored instructions or data with another as needed, can conceal paging issues from the application programmer. For example, the Modula-2 compiler produces code under which the run-time system swaps 8 Kb pages into memory as individual procedures receive control.
CPU registers
Addressing modes
Most instructions allocate six bits to specify an operand. Three bits select one of eight addressing modes, and three bits select one of the eight general registers. The use of three-bit groups makes octal notation natural.In the following sections, each item includes an example of how the operand would be written in assembly language for a prototypical single-operand instruction with symbol OPR. Rn means one of the registers, written R0 through R7.
General register addressing modes
The following eight modes can be applied to any general register. Their effects when applied to R6 and R7 are set out separately in the following sections.Code | Name | Example | Description |
0n | Register | OPR Rn | The operand is in Rn |
1n | Register deferred | OPR | Rn contains the address of the operand |
2n | Autoincrement | OPR + | Rn contains the address of the operand, then increment Rn |
3n | Autoincrement deferred | OPR @+ | Rn contains the address of the address, then increment Rn by 2 |
4n | Autodecrement | OPR − | Decrement Rn, then use it as the address |
5n | Autodecrement deferred | OPR @− | Decrement Rn by 2, then use it as the address of the address |
6n | Index | OPR X | Rn+X is the address of the operand |
7n | Index deferred | OPR @X | Rn+X is the address of the address |
In index and index deferred modes, X is a 16-bit value taken from a second word of the instruction. In double-operand instructions, both operands can use these modes. Such instructions are three words long.
Autoincrementation and autodecrementation of a register are by 1 in byte instructions, by 2 in word instructions, and by 2 whenever a deferred mode is used, since the quantity the register addresses is a pointer.
Program counter addressing modes
When R7 is specified, four of the addressing modes naturally yield useful effects:Code | Name | Example | Description |
27 | Immediate | OPR #n | The operand is contained in the instruction |
37 | Absolute | OPR @#a | The absolute address is contained in the instruction |
67 | Relative | OPR a | An extra word in the instruction is added to PC+2 to give the address |
77 | Relative deferred | OPR @a | An extra word in the instruction is added to PC+2 to give the address of the address |
The only common use of absolute mode—whose syntax combines immediate and deferred mode—is to specify input/output registers, as the registers for each device have specific memory addresses. Relative mode has a simpler syntax and is more typical for referring to program variables and jump destinations. A program that uses relative mode exclusively for internal references is position-independent; it contains no assumptions about its own location, so it can be loaded into an arbitrary memory location, or even moved, with no need for its addresses to be adjusted to reflect its location. In computing such addresses relative to the current location, the processor performed relocation on the fly.
Immediate and absolute modes are merely autoincrement and autoincrement deferred mode, respectively, applied to PC. When the auxiliary word is "in the instruction" as the above table says, the PC for the next instruction is automatically incremented past the auxiliary word. As PC always points to words, the autoincrementation is always by 2.
Stack addressing modes
R6, also written SP, is used as a hardware stack for traps and interrupts. A convention enforced by the set of modes the PDP-11 provides is that a stack grows downward—toward lower addresses—as items are pushed onto it. When a mode is applied to SP, or to any register the programmer elects to use as a software stack, the addressing modes have the following effects:Code | Name | Example | Description |
16 | Deferred | The operand is on the top of the stack | |
26 | Autoincrement | + | The operand is on the top of the stack, then pop it off |
36 | Autoincrement deferred | @+ | A pointer to the operand is on top of the stack; pop the pointer off |
46 | Autodecrement | − | Push a value onto the stack |
66 | Indexed | X | This refers to any item on the stack by its positive distance from the top |
76 | Indexed deferred | @X | This refers to a value to which a pointer is at the specified location on the stack |
Although software stacks can contain bytes, SP is always a stack of words. Autoincrementation and autodecrementation of SP is always by 2.
Instruction set
The PDP-11 operates on bytes and words. Bytes are specified by a register number—identifying the register's low-order byte—or by a memory location. Words are specified by a register number or by the memory location of the low-order byte, which must be an even number. In most instructions that take operands, bit 15 is set to specify byte addressing, or clear to specify word addressing. In the lists in the following two sections, the assembly-language programmer appended B to the instruction symbol to specify a byte operation; for example, MOV became MOVB.A few instructions, for example MARK and SOB, were not implemented on some PDP-11 models.
Double-operand instructions
The high-order four bits specify the operation to be performed. Two groups of six bits specify mode and register, as defined above, for each of two operands.Opcode | Mnemonic | Effect |
01 | MOV | Move: dest = src Note: Moving byte to a register sign-extends into bits 8-15 |
11 | MOVB | Move: dest = src Note: Moving byte to a register sign-extends into bits 8-15 |
02 | CMP | Compare: compute src − dest, set flags only |
12 | CMPB | Compare: compute src − dest, set flags only |
03 | BIT | Bit test: compute dest & src, set flags only |
13 | BITB | Bit test: compute dest & src, set flags only |
04 | BIC | Bit clear: dest &= ~src |
14 | BICB | Bit clear: dest &= ~src |
05 | BIS | rowspan=2| Bit set, a.k.a. logical OR: dest |= src |
15 | BISB | - |
06 | ADD | Add, dest += src |
16 | SUB | Subtract, dest −= src |
The ADD and SUB instructions use word addressing, and have no byte-oriented variations.
Some additional two-operand instructions require a register source operand:
Where a register pair is used ", the first register contains the low-order bits and must be even. The second register contains the high-order bits. An exception is the multiply instruction; R may be odd, but if it is, the high 16 bits of the result are not stored.
Single-operand instructions
The high-order nine bits specify the operation to be performed. A single group of six bits specifies mode and register, as defined above, for the single operand.Conditional branch instructions
Most Branch instructions take conditional effect based on the state of the condition codes in the PSW. A Branch instruction was typically preceded by a two-operand CMP or BIT or a one-operand TST instruction. Arithmetic and logic instructions also set the condition codes. In contrast to Intel processors in the x86 architecture, MOV instructions set them too, so a Branch instruction could be used to branch depending on whether the value moved was zero or negative.The high-order byte specifies the operation. Bits 8, 9, and 10 are the op-code, with bit 15 reversing the branch sense. The low-order byte is an offset relative to the current location of the program counter. The offset is a number of words and it is a signed number, enabling branches forward and backward in the code.
The limited range of the branch instructions meant that, as code grew, the target addresses of some branches would become unreachable. The programmer would change the one-word BR to the two-word JMP instruction from the next group. As JMP has no conditional forms, the programmer would change BEQ to a BNE that branched around a JMP.
SOB, listed above under two-operand instructions, is another conditional branch instruction.
Jump and subroutine instructions
- JMP
- JSR
- RTS
- MARK
- EMT
- TRAP, BPT
- IOT
- RTI & RTT
Miscellaneous instructions
- HALT, WAIT opcodes 0,1
- RESET opcode 5
Condition-code operations
- CLC, CLV, CLZ, CLN, CCC
- SEC, SEV, SEZ, SEN, SCC
- N indicating a negative value
- Z indicating a zero condition
- V indicating an overflow condition, and
- C indicating a carry condition.
Clearing or setting none of the condition codes could effectively be considered as no-operation instructions. In fact, the NOP mnemonic assembled into 000240.
Optional instruction sets
;Extended Instruction SetThe EIS was an option for 11/35/40 and 11/03, and was standard on newer processors.
- MUL, DIV multiply and divide integer operand to register pair
- ASH, ASHC arithmetic - shift a register or a register pair. For a positive number it will shift left, and right for a negative one.
The FIS instruction set was an option for the PDP-11/35/40 and 11/03
- FADD, FSUB, FMUL, FDIV only for single-precision operating on stack addressed by register operand
This was the optional floating point processor option for 11/45 and most subsequent models.
- full floating point operations on single- or double-precision operands, selected by single/double bit in Floating Point Status Register
- single-precision floating point data format predecessor of IEEE 754 format: sign bit, 8-bit exponent, 23-bit mantissa with hidden bit 24
The CIS was implemented by optional microcode in the 11/23/24, and by an add-in module in the 11/44 and in one version of the 11/74. It provided string and decimal instructions used by COBOL and Dibol.
;Access to Processor Status Word
The PSW was mapped to memory address 177 776, but instructions found on all but the earliest PDP-11s gave programs more direct access to the register.
- SPL
- MTPS
- MFPS
On PDP-11s that provided multiple instruction spaces and data spaces, a set of non-orthogonal Move instructions gave access to other spaces. For example, routines in the operating system that handled run-time service calls would use these instructions to exchange information with the caller.
- MTPD
- MTPI
- MFPD
- MFPI
Inconsistent instructions
Speed
PDP-11 processor speed varied by model, memory configuration, op code, and addressing modes. Instruction timing had up to three components, execute/fetch of the instruction itself and access time for the source and the destination. The last two components depended on the addressing mode. For example, on the PDP-11/70, an instruction of the form ADD x,y had a fetch/execute time of 1.35 microseconds plus source and destination times of 0.6 microseconds each, for a total instruction time of 2.55 microseconds. Any case where addressed memory was not in the cache added 1.02 microseconds. The register-to-register ADD Rm,Rn could execute from the cache in 0.3 microseconds. Floating point was even more complex, since there was some overlap between the CPU and the floating-point processor, but in general, floating point was significantly slower. A single-precision floating add instruction could range from 2.4 to 5.5 microseconds plus time to fetch the operands.Interrupts
The PDP-11 operated at a priority level from 0 through 7, declared by three bits in the Processor Status Word, and high-end models could operate in a choice of modes, Kernel, User, and sometimes Supervisor, according to two bits in the PSW.To request an interrupt, a bus device would assert one of four common bus lines, BR4 through BR7, until the processor responded. Higher numbers indicated greater urgency, perhaps that data might be lost or a desired sector might rotate out of contact with the read/write heads unless the processor responded quickly. The printer's readiness for another character was the lowest priority, as it would remain ready indefinitely. If the processor were operating at level 5, then BR6 and BR7 would be in order. If the processor were operating at 3 or lower, it would grant any interrupt; if at 7, it would grant none. Bus requests that were not granted were not lost but merely deferred. The device needing service would continue to assert its bus request.
Whenever an interrupt exceeded the processor's priority level, the processor asserted the corresponding bus grant, BG4 through BG7. The bus-grant lines were not common lines but were a daisy chain: The input of each gate was the output of the previous gate in the chain. A gate was on each bus device, and a device physically closer to the processor was earlier in the daisy chain. If the device had made a request, then on sensing its bus-grant input, it could conclude it was in control of the bus, and did not pass the grant signal to the next device on the bus. If the device had not made a request, it propagated its bus-grant input to its bus-grant output, giving the next closest device the chance to reply.
Once in control of the bus, the device dropped its bus request and placed on the bus the memory address of its two-word vector. The processor saved the program counter and PSW, entered Kernel mode, and loaded new values from the specified vector. For a device at BR6, the new PSW in its vector would typically specify 6 as the new processor priority, so the processor would honor more urgent requests during the service routine, but defer requests of the same or lower priority. With the new PC, the processor jumped to the service routine for the interrupting device. That routine operated the device, at least removing the condition that caused the interrupt. The routine ended with the RTI instruction, which restored PC and PSW as of just before the processor granted the interrupt.
If a bus request were made in error and no device responded to the bus grant, the processor timed out and performed a trap that would suggest bad hardware.
MACRO-11 assembly language
is the assembly language for the PDP-11. It is the successor to PAL-11, an earlier version of the PDP-11 assembly language without macro facilities. MACRO-11 was supported on all DEC PDP-11 operating systems. PDP-11 Unix systems also include an assembler, structurally similar to MACRO-11, but with different syntax and fewer features.Myth of PDP-11 influence on programming languages
A folk myth is that the instruction set architecture of the PDP-11 influenced the idiomatic use of the B programming language. The PDP-11's increment and decrement addressing modes correspond to the−−i
and i++
constructs in C. If i
and j
were both register variables, an expression such as * = *
could be compiled to a single machine instruction. Dennis Ritchie says this folk myth is historically impossible. However, the C programming language did take advantage of several low-level programming features of the PDP-11, resulting in their inclusion into new processors.