2
* QEMU PowerPC 4xx embedded processors shared devices emulation
4
* Copyright (c) 2007 Jocelyn Mayer
6
* Permission is hereby granted, free of charge, to any person obtaining a copy
7
* of this software and associated documentation files (the "Software"), to deal
8
* in the Software without restriction, including without limitation the rights
9
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10
* copies of the Software, and to permit persons to whom the Software is
11
* furnished to do so, subject to the following conditions:
13
* The above copyright notice and this permission notice shall be included in
14
* all copies or substantial portions of the Software.
16
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19
* THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
28
#include "exec-memory.h"
31
//#define DEBUG_UNASSIGNED
36
# define LOG_UIC(...) qemu_log_mask(CPU_LOG_INT, ## __VA_ARGS__)
38
# define LOG_UIC(...) do { } while (0)
41
/*****************************************************************************/
42
/* Generic PowerPC 4xx processor instantiation */
43
CPUState *ppc4xx_init (const char *cpu_model,
44
clk_setup_t *cpu_clk, clk_setup_t *tb_clk,
50
env = cpu_init(cpu_model);
52
fprintf(stderr, "Unable to find PowerPC %s CPU definition\n",
56
cpu_clk->cb = NULL; /* We don't care about CPU clock frequency changes */
57
cpu_clk->opaque = env;
58
/* Set time-base frequency to sysclk */
59
tb_clk->cb = ppc_40x_timers_init(env, sysclk, PPC_INTERRUPT_PIT);
61
ppc_dcr_init(env, NULL, NULL);
62
/* Register qemu callbacks */
63
qemu_register_reset((QEMUResetHandler*)&cpu_reset, env);
68
/*****************************************************************************/
69
/* "Universal" Interrupt controller */
83
#define UIC_MAX_IRQ 32
84
typedef struct ppcuic_t ppcuic_t;
88
uint32_t level; /* Remembers the state of level-triggered interrupts. */
89
uint32_t uicsr; /* Status register */
90
uint32_t uicer; /* Enable register */
91
uint32_t uiccr; /* Critical register */
92
uint32_t uicpr; /* Polarity register */
93
uint32_t uictr; /* Triggering register */
94
uint32_t uicvcr; /* Vector configuration register */
99
static void ppcuic_trigger_irq (ppcuic_t *uic)
102
int start, end, inc, i;
104
/* Trigger interrupt if any is pending */
105
ir = uic->uicsr & uic->uicer & (~uic->uiccr);
106
cr = uic->uicsr & uic->uicer & uic->uiccr;
107
LOG_UIC("%s: uicsr %08" PRIx32 " uicer %08" PRIx32
108
" uiccr %08" PRIx32 "\n"
109
" %08" PRIx32 " ir %08" PRIx32 " cr %08" PRIx32 "\n",
110
__func__, uic->uicsr, uic->uicer, uic->uiccr,
111
uic->uicsr & uic->uicer, ir, cr);
112
if (ir != 0x0000000) {
113
LOG_UIC("Raise UIC interrupt\n");
114
qemu_irq_raise(uic->irqs[PPCUIC_OUTPUT_INT]);
116
LOG_UIC("Lower UIC interrupt\n");
117
qemu_irq_lower(uic->irqs[PPCUIC_OUTPUT_INT]);
119
/* Trigger critical interrupt if any is pending and update vector */
120
if (cr != 0x0000000) {
121
qemu_irq_raise(uic->irqs[PPCUIC_OUTPUT_CINT]);
122
if (uic->use_vectors) {
123
/* Compute critical IRQ vector */
124
if (uic->uicvcr & 1) {
133
uic->uicvr = uic->uicvcr & 0xFFFFFFFC;
134
for (i = start; i <= end; i += inc) {
136
uic->uicvr += (i - start) * 512 * inc;
141
LOG_UIC("Raise UIC critical interrupt - "
142
"vector %08" PRIx32 "\n", uic->uicvr);
144
LOG_UIC("Lower UIC critical interrupt\n");
145
qemu_irq_lower(uic->irqs[PPCUIC_OUTPUT_CINT]);
146
uic->uicvr = 0x00000000;
150
static void ppcuic_set_irq (void *opaque, int irq_num, int level)
156
mask = 1 << (31-irq_num);
157
LOG_UIC("%s: irq %d level %d uicsr %08" PRIx32
158
" mask %08" PRIx32 " => %08" PRIx32 " %08" PRIx32 "\n",
159
__func__, irq_num, level,
160
uic->uicsr, mask, uic->uicsr & mask, level << irq_num);
161
if (irq_num < 0 || irq_num > 31)
165
/* Update status register */
166
if (uic->uictr & mask) {
167
/* Edge sensitive interrupt */
171
/* Level sensitive interrupt */
180
LOG_UIC("%s: irq %d level %d sr %" PRIx32 " => "
181
"%08" PRIx32 "\n", __func__, irq_num, level, uic->uicsr, sr);
182
if (sr != uic->uicsr)
183
ppcuic_trigger_irq(uic);
186
static uint32_t dcr_read_uic (void *opaque, int dcrn)
192
dcrn -= uic->dcr_base;
211
ret = uic->uicsr & uic->uicer;
214
if (!uic->use_vectors)
219
if (!uic->use_vectors)
232
static void dcr_write_uic (void *opaque, int dcrn, uint32_t val)
237
dcrn -= uic->dcr_base;
238
LOG_UIC("%s: dcr %d val 0x%x\n", __func__, dcrn, val);
242
uic->uicsr |= uic->level;
243
ppcuic_trigger_irq(uic);
247
ppcuic_trigger_irq(uic);
251
ppcuic_trigger_irq(uic);
255
ppcuic_trigger_irq(uic);
262
ppcuic_trigger_irq(uic);
269
uic->uicvcr = val & 0xFFFFFFFD;
270
ppcuic_trigger_irq(uic);
275
static void ppcuic_reset (void *opaque)
280
uic->uiccr = 0x00000000;
281
uic->uicer = 0x00000000;
282
uic->uicpr = 0x00000000;
283
uic->uicsr = 0x00000000;
284
uic->uictr = 0x00000000;
285
if (uic->use_vectors) {
286
uic->uicvcr = 0x00000000;
287
uic->uicvr = 0x0000000;
291
qemu_irq *ppcuic_init (CPUState *env, qemu_irq *irqs,
292
uint32_t dcr_base, int has_ssr, int has_vr)
297
uic = g_malloc0(sizeof(ppcuic_t));
298
uic->dcr_base = dcr_base;
301
uic->use_vectors = 1;
302
for (i = 0; i < DCR_UICMAX; i++) {
303
ppc_dcr_register(env, dcr_base + i, uic,
304
&dcr_read_uic, &dcr_write_uic);
306
qemu_register_reset(ppcuic_reset, uic);
308
return qemu_allocate_irqs(&ppcuic_set_irq, uic, UIC_MAX_IRQ);
311
/*****************************************************************************/
312
/* SDRAM controller */
313
typedef struct ppc4xx_sdram_t ppc4xx_sdram_t;
314
struct ppc4xx_sdram_t {
317
MemoryRegion containers[4]; /* used for clipping */
318
MemoryRegion *ram_memories;
319
target_phys_addr_t ram_bases[4];
320
target_phys_addr_t ram_sizes[4];
336
SDRAM0_CFGADDR = 0x010,
337
SDRAM0_CFGDATA = 0x011,
340
/* XXX: TOFIX: some patches have made this code become inconsistent:
341
* there are type inconsistencies, mixing target_phys_addr_t, target_ulong
344
static uint32_t sdram_bcr (target_phys_addr_t ram_base,
345
target_phys_addr_t ram_size)
350
case (4 * 1024 * 1024):
353
case (8 * 1024 * 1024):
356
case (16 * 1024 * 1024):
359
case (32 * 1024 * 1024):
362
case (64 * 1024 * 1024):
365
case (128 * 1024 * 1024):
368
case (256 * 1024 * 1024):
372
printf("%s: invalid RAM size " TARGET_FMT_plx "\n", __func__,
376
bcr |= ram_base & 0xFF800000;
382
static inline target_phys_addr_t sdram_base(uint32_t bcr)
384
return bcr & 0xFF800000;
387
static target_ulong sdram_size (uint32_t bcr)
392
sh = (bcr >> 17) & 0x7;
396
size = (4 * 1024 * 1024) << sh;
401
static void sdram_set_bcr(ppc4xx_sdram_t *sdram,
402
uint32_t *bcrp, uint32_t bcr, int enabled)
404
unsigned n = bcrp - sdram->bcr;
406
if (*bcrp & 0x00000001) {
409
printf("%s: unmap RAM area " TARGET_FMT_plx " " TARGET_FMT_lx "\n",
410
__func__, sdram_base(*bcrp), sdram_size(*bcrp));
412
memory_region_del_subregion(get_system_memory(),
413
&sdram->containers[n]);
414
memory_region_del_subregion(&sdram->containers[n],
415
&sdram->ram_memories[n]);
416
memory_region_destroy(&sdram->containers[n]);
418
*bcrp = bcr & 0xFFDEE001;
419
if (enabled && (bcr & 0x00000001)) {
421
printf("%s: Map RAM area " TARGET_FMT_plx " " TARGET_FMT_lx "\n",
422
__func__, sdram_base(bcr), sdram_size(bcr));
424
memory_region_init(&sdram->containers[n], "sdram-containers",
426
memory_region_add_subregion(&sdram->containers[n], 0,
427
&sdram->ram_memories[n]);
428
memory_region_add_subregion(get_system_memory(),
430
&sdram->containers[n]);
434
static void sdram_map_bcr (ppc4xx_sdram_t *sdram)
438
for (i = 0; i < sdram->nbanks; i++) {
439
if (sdram->ram_sizes[i] != 0) {
442
sdram_bcr(sdram->ram_bases[i], sdram->ram_sizes[i]),
445
sdram_set_bcr(sdram, &sdram->bcr[i], 0x00000000, 0);
450
static void sdram_unmap_bcr (ppc4xx_sdram_t *sdram)
454
for (i = 0; i < sdram->nbanks; i++) {
456
printf("%s: Unmap RAM area " TARGET_FMT_plx " " TARGET_FMT_lx "\n",
457
__func__, sdram_base(sdram->bcr[i]), sdram_size(sdram->bcr[i]));
459
memory_region_del_subregion(get_system_memory(),
460
&sdram->ram_memories[i]);
464
static uint32_t dcr_read_sdram (void *opaque, int dcrn)
466
ppc4xx_sdram_t *sdram;
475
switch (sdram->addr) {
476
case 0x00: /* SDRAM_BESR0 */
479
case 0x08: /* SDRAM_BESR1 */
482
case 0x10: /* SDRAM_BEAR */
485
case 0x20: /* SDRAM_CFG */
488
case 0x24: /* SDRAM_STATUS */
491
case 0x30: /* SDRAM_RTR */
494
case 0x34: /* SDRAM_PMIT */
497
case 0x40: /* SDRAM_B0CR */
500
case 0x44: /* SDRAM_B1CR */
503
case 0x48: /* SDRAM_B2CR */
506
case 0x4C: /* SDRAM_B3CR */
509
case 0x80: /* SDRAM_TR */
512
case 0x94: /* SDRAM_ECCCFG */
515
case 0x98: /* SDRAM_ECCESR */
524
/* Avoid gcc warning */
532
static void dcr_write_sdram (void *opaque, int dcrn, uint32_t val)
534
ppc4xx_sdram_t *sdram;
542
switch (sdram->addr) {
543
case 0x00: /* SDRAM_BESR0 */
544
sdram->besr0 &= ~val;
546
case 0x08: /* SDRAM_BESR1 */
547
sdram->besr1 &= ~val;
549
case 0x10: /* SDRAM_BEAR */
552
case 0x20: /* SDRAM_CFG */
554
if (!(sdram->cfg & 0x80000000) && (val & 0x80000000)) {
556
printf("%s: enable SDRAM controller\n", __func__);
558
/* validate all RAM mappings */
559
sdram_map_bcr(sdram);
560
sdram->status &= ~0x80000000;
561
} else if ((sdram->cfg & 0x80000000) && !(val & 0x80000000)) {
563
printf("%s: disable SDRAM controller\n", __func__);
565
/* invalidate all RAM mappings */
566
sdram_unmap_bcr(sdram);
567
sdram->status |= 0x80000000;
569
if (!(sdram->cfg & 0x40000000) && (val & 0x40000000))
570
sdram->status |= 0x40000000;
571
else if ((sdram->cfg & 0x40000000) && !(val & 0x40000000))
572
sdram->status &= ~0x40000000;
575
case 0x24: /* SDRAM_STATUS */
576
/* Read-only register */
578
case 0x30: /* SDRAM_RTR */
579
sdram->rtr = val & 0x3FF80000;
581
case 0x34: /* SDRAM_PMIT */
582
sdram->pmit = (val & 0xF8000000) | 0x07C00000;
584
case 0x40: /* SDRAM_B0CR */
585
sdram_set_bcr(sdram, &sdram->bcr[0], val, sdram->cfg & 0x80000000);
587
case 0x44: /* SDRAM_B1CR */
588
sdram_set_bcr(sdram, &sdram->bcr[1], val, sdram->cfg & 0x80000000);
590
case 0x48: /* SDRAM_B2CR */
591
sdram_set_bcr(sdram, &sdram->bcr[2], val, sdram->cfg & 0x80000000);
593
case 0x4C: /* SDRAM_B3CR */
594
sdram_set_bcr(sdram, &sdram->bcr[3], val, sdram->cfg & 0x80000000);
596
case 0x80: /* SDRAM_TR */
597
sdram->tr = val & 0x018FC01F;
599
case 0x94: /* SDRAM_ECCCFG */
600
sdram->ecccfg = val & 0x00F00000;
602
case 0x98: /* SDRAM_ECCESR */
604
if (sdram->eccesr == 0 && val != 0)
605
qemu_irq_raise(sdram->irq);
606
else if (sdram->eccesr != 0 && val == 0)
607
qemu_irq_lower(sdram->irq);
617
static void sdram_reset (void *opaque)
619
ppc4xx_sdram_t *sdram;
622
sdram->addr = 0x00000000;
623
sdram->bear = 0x00000000;
624
sdram->besr0 = 0x00000000; /* No error */
625
sdram->besr1 = 0x00000000; /* No error */
626
sdram->cfg = 0x00000000;
627
sdram->ecccfg = 0x00000000; /* No ECC */
628
sdram->eccesr = 0x00000000; /* No error */
629
sdram->pmit = 0x07C00000;
630
sdram->rtr = 0x05F00000;
631
sdram->tr = 0x00854009;
632
/* We pre-initialize RAM banks */
633
sdram->status = 0x00000000;
634
sdram->cfg = 0x00800000;
637
void ppc4xx_sdram_init (CPUState *env, qemu_irq irq, int nbanks,
638
MemoryRegion *ram_memories,
639
target_phys_addr_t *ram_bases,
640
target_phys_addr_t *ram_sizes,
643
ppc4xx_sdram_t *sdram;
645
sdram = g_malloc0(sizeof(ppc4xx_sdram_t));
647
sdram->nbanks = nbanks;
648
sdram->ram_memories = ram_memories;
649
memset(sdram->ram_bases, 0, 4 * sizeof(target_phys_addr_t));
650
memcpy(sdram->ram_bases, ram_bases,
651
nbanks * sizeof(target_phys_addr_t));
652
memset(sdram->ram_sizes, 0, 4 * sizeof(target_phys_addr_t));
653
memcpy(sdram->ram_sizes, ram_sizes,
654
nbanks * sizeof(target_phys_addr_t));
655
qemu_register_reset(&sdram_reset, sdram);
656
ppc_dcr_register(env, SDRAM0_CFGADDR,
657
sdram, &dcr_read_sdram, &dcr_write_sdram);
658
ppc_dcr_register(env, SDRAM0_CFGDATA,
659
sdram, &dcr_read_sdram, &dcr_write_sdram);
661
sdram_map_bcr(sdram);
664
/* Fill in consecutive SDRAM banks with 'ram_size' bytes of memory.
666
* sdram_bank_sizes[] must be 0-terminated.
668
* The 4xx SDRAM controller supports a small number of banks, and each bank
669
* must be one of a small set of sizes. The number of banks and the supported
670
* sizes varies by SoC. */
671
ram_addr_t ppc4xx_sdram_adjust(ram_addr_t ram_size, int nr_banks,
672
MemoryRegion ram_memories[],
673
target_phys_addr_t ram_bases[],
674
target_phys_addr_t ram_sizes[],
675
const unsigned int sdram_bank_sizes[])
677
ram_addr_t size_left = ram_size;
682
for (i = 0; i < nr_banks; i++) {
683
for (j = 0; sdram_bank_sizes[j] != 0; j++) {
684
unsigned int bank_size = sdram_bank_sizes[j];
686
if (bank_size <= size_left) {
688
snprintf(name, sizeof(name), "ppc4xx.sdram%d", i);
689
memory_region_init_ram(&ram_memories[i], NULL, name, bank_size);
691
ram_sizes[i] = bank_size;
693
size_left -= bank_size;
699
/* No need to use the remaining banks. */
704
ram_size -= size_left;
706
printf("Truncating memory to %d MiB to fit SDRAM controller limits.\n",
707
(int)(ram_size >> 20));