image/svg+xmlBNDLDX—Load Extended Bounds Using Address TranslationInstruction Operand EncodingDescriptionBNDLDX uses the linear address constructed from the base register and displacement of the SIB-addressing form of the memory operand (mib) to perform address translation to access a bound table entry and conditionally load the bounds in the BTE to the destination. The destination register is updated with the bounds in the BTE, if the content of the index register of mib matches the pointer value stored in the BTE. If the pointer value comparison fails, the destination is updated with INIT bounds (lb = 0x0, ub = 0x0) (note: as articulated earlier, the upper bound is represented using 1's complement, therefore, the 0x0 value of upper bound allows for access to full memory). This instruction does not cause memory access to the linear address of mib nor the effective address referenced by the base, and does not read or write any flags. Segment overrides apply to the linear address computation with the base of mib, and are used during address translation to generate the address of the bound table entry. By default, the address of the BTE is assumed to be linear address. There are no segmentation checks performed on the base of mib. The base of mib will not be checked for canonical address violation as it does not access memory. Any encoding of this instruction that does not specify base or index register will treat those registers as zero (constant). The reg-reg form of this instruction will remain a NOP.The scale field of the SIB byte has no effect on these instructions and is ignored.The bound register may be partially updated on memory faults. The order in which memory operands are loaded is implementation specific.Operationbase := mib.SIB.base ? mib.SIB.base + Disp: 0;ptr_value := mib.SIB.index ? mib.SIB.index : 0;Outside 64-bit modeA_BDE[31:0] := (Zero_extend32(base[31:12] « 2) + (BNDCFG[31:12] «12 );A_BT[31:0] := LoadFrom(A_BDE );IF A_BT[0] equal 0 ThenBNDSTATUS := A_BDE | 02H; #BR; FI;A_BTE[31:0] := (Zero_extend32(base[11:2] « 4) + (A_BT[31:2] « 2 );Temp_lb[31:0] := LoadFrom(A_BTE);Temp_ub[31:0] := LoadFrom(A_BTE + 4);Temp_ptr[31:0] := LoadFrom(A_BTE + 8);IF Temp_ptr equal ptr_value ThenBND.LB := Temp_lb; BND.UB := Temp_ub; Opcode/InstructionOp/En64/32 bit Mode SupportCPUID Feature FlagDescriptionNP 0F 1A /rBNDLDX bnd, mibRMV/VMPXLoad the bounds stored in a bound table entry (BTE) into bnd with address translation using the base of mib and conditional on the index of mib matching the pointer value in the BTE.Op/EnOperand 1Operand 2Operand 3RMModRM:reg (w)SIB.base (r): Address of pointerSIB.index(r)NA

image/svg+xmlELSEBND.LB := 0;BND.UB := 0;FI;In 64-bit modeA_BDE[63:0] := (Zero_extend64(base[47+MAWA:20] « 3) + (BNDCFG[63:12] «12 );1A_BT[63:0] := LoadFrom(A_BDE);IF A_BT[0] equal 0 ThenBNDSTATUS := A_BDE | 02H; #BR; FI;A_BTE[63:0] := (Zero_extend64(base[19:3] « 5) + (A_BT[63:3] « 3 );Temp_lb[63:0] := LoadFrom(A_BTE);Temp_ub[63:0] := LoadFrom(A_BTE + 8);Temp_ptr[63:0] := LoadFrom(A_BTE + 16);IF Temp_ptr equal ptr_value ThenBND.LB := Temp_lb; BND.UB := Temp_ub; ELSEBND.LB := 0;BND.UB := 0;FI;Intel C/C++ Compiler Intrinsic EquivalentBNDLDX: Generated by compiler as needed.Flags AffectedNoneProtected Mode Exceptions#BRIf the bound directory entry is invalid.#UDIf the LOCK prefix is used.If ModRM.r/m encodes BND4-BND7 when Intel MPX is enabled.If 67H prefix is not used and CS.D=0.If 67H prefix is used and CS.D=1.#GP(0)If a destination effective address of the Bound Table entry is outside the DS segment limit.If DS register contains a NULL segment selector.#PF(fault code)If a page fault occurs.Real-Address Mode Exceptions#UDIf the LOCK prefix is used.If ModRM.r/m encodes BND4-BND7 when Intel MPX is enabled.If 16-bit addressing is used.#GP(0)If a destination effective address of the Bound Table entry is outside the DS segment limit.1.If CPL< 3, the supervisor MAWA (MAWAS) is used; this value is 0. If CPL= 3, the user MAWA (MAWAU) is used; this value is enumer-ated in CPUID.(EAX=07H,ECX=0H):ECX.MAWAU[bits 21:17]. See Section 17.3.1 of Intel® 64 and IA-32 Architectures Software Devel-oper’s Manual, Volume 1.

image/svg+xmlVirtual-8086 Mode Exceptions#UDIf the LOCK prefix is used.If ModRM.r/m encodes BND4-BND7 when Intel MPX is enabled.If 16-bit addressing is used.#GP(0)If a destination effective address of the Bound Table entry is outside the DS segment limit.#PF(fault code)If a page fault occurs.Compatibility Mode ExceptionsSame exceptions as in protected mode.64-Bit Mode Exceptions#BRIf the bound directory entry is invalid.#UDIf ModRM is RIP relative.If the LOCK prefix is used.If ModRM.r/m and REX encodes BND4-BND15 when Intel MPX is enabled.#GP(0)If the memory address (A_BDE or A_BTE) is in a non-canonical form.#PF(fault code)If a page fault occurs.

This UNOFFICIAL reference was generated from the official Intel® 64 and IA-32 Architectures Software Developer’s Manual by a dumb script. There is no guarantee that some parts aren't mangled or broken and is distributed WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.