1 /* 2 * ARM11MPCore internal peripheral emulation. 3 * 4 * Copyright (c) 2006-2007 CodeSourcery. 5 * Written by Paul Brook 6 * 7 * This code is licensed under the GPL. 8 */ 9 10 #include "hw/sysbus.h" 11 #include "qemu/timer.h" 12 13 /* MPCore private memory region. */ 14 15 #define TYPE_ARM11MPCORE_PRIV "arm11mpcore_priv" 16 #define ARM11MPCORE_PRIV(obj) \ 17 OBJECT_CHECK(ARM11MPCorePriveState, (obj), TYPE_ARM11MPCORE_PRIV) 18 19 typedef struct ARM11MPCorePriveState { 20 SysBusDevice parent_obj; 21 22 uint32_t scu_control; 23 int iomemtype; 24 uint32_t old_timer_status[8]; 25 uint32_t num_cpu; 26 MemoryRegion iomem; 27 MemoryRegion container; 28 DeviceState *mptimer; 29 DeviceState *wdtimer; 30 DeviceState *gic; 31 uint32_t num_irq; 32 } ARM11MPCorePriveState; 33 34 /* Per-CPU private memory mapped IO. */ 35 36 static uint64_t mpcore_scu_read(void *opaque, hwaddr offset, 37 unsigned size) 38 { 39 ARM11MPCorePriveState *s = (ARM11MPCorePriveState *)opaque; 40 int id; 41 /* SCU */ 42 switch (offset) { 43 case 0x00: /* Control. */ 44 return s->scu_control; 45 case 0x04: /* Configuration. */ 46 id = ((1 << s->num_cpu) - 1) << 4; 47 return id | (s->num_cpu - 1); 48 case 0x08: /* CPU status. */ 49 return 0; 50 case 0x0c: /* Invalidate all. */ 51 return 0; 52 default: 53 qemu_log_mask(LOG_GUEST_ERROR, 54 "mpcore_priv_read: Bad offset %x\n", (int)offset); 55 return 0; 56 } 57 } 58 59 static void mpcore_scu_write(void *opaque, hwaddr offset, 60 uint64_t value, unsigned size) 61 { 62 ARM11MPCorePriveState *s = (ARM11MPCorePriveState *)opaque; 63 /* SCU */ 64 switch (offset) { 65 case 0: /* Control register. */ 66 s->scu_control = value & 1; 67 break; 68 case 0x0c: /* Invalidate all. */ 69 /* This is a no-op as cache is not emulated. */ 70 break; 71 default: 72 qemu_log_mask(LOG_GUEST_ERROR, 73 "mpcore_priv_read: Bad offset %x\n", (int)offset); 74 } 75 } 76 77 static const MemoryRegionOps mpcore_scu_ops = { 78 .read = mpcore_scu_read, 79 .write = mpcore_scu_write, 80 .endianness = DEVICE_NATIVE_ENDIAN, 81 }; 82 83 static void mpcore_priv_set_irq(void *opaque, int irq, int level) 84 { 85 ARM11MPCorePriveState *s = (ARM11MPCorePriveState *)opaque; 86 qemu_set_irq(qdev_get_gpio_in(s->gic, irq), level); 87 } 88 89 static void mpcore_priv_map_setup(ARM11MPCorePriveState *s) 90 { 91 int i; 92 SysBusDevice *gicbusdev = SYS_BUS_DEVICE(s->gic); 93 SysBusDevice *timerbusdev = SYS_BUS_DEVICE(s->mptimer); 94 SysBusDevice *wdtbusdev = SYS_BUS_DEVICE(s->wdtimer); 95 memory_region_init(&s->container, OBJECT(s), 96 "mpcode-priv-container", 0x2000); 97 memory_region_init_io(&s->iomem, OBJECT(s), 98 &mpcore_scu_ops, s, "mpcore-scu", 0x100); 99 memory_region_add_subregion(&s->container, 0, &s->iomem); 100 /* GIC CPU interfaces: "current CPU" at 0x100, then specific CPUs 101 * at 0x200, 0x300... 102 */ 103 for (i = 0; i < (s->num_cpu + 1); i++) { 104 hwaddr offset = 0x100 + (i * 0x100); 105 memory_region_add_subregion(&s->container, offset, 106 sysbus_mmio_get_region(gicbusdev, i + 1)); 107 } 108 /* Add the regions for timer and watchdog for "current CPU" and 109 * for each specific CPU. 110 */ 111 for (i = 0; i < (s->num_cpu + 1); i++) { 112 /* Timers at 0x600, 0x700, ...; watchdogs at 0x620, 0x720, ... */ 113 hwaddr offset = 0x600 + i * 0x100; 114 memory_region_add_subregion(&s->container, offset, 115 sysbus_mmio_get_region(timerbusdev, i)); 116 memory_region_add_subregion(&s->container, offset + 0x20, 117 sysbus_mmio_get_region(wdtbusdev, i)); 118 } 119 memory_region_add_subregion(&s->container, 0x1000, 120 sysbus_mmio_get_region(gicbusdev, 0)); 121 /* Wire up the interrupt from each watchdog and timer. 122 * For each core the timer is PPI 29 and the watchdog PPI 30. 123 */ 124 for (i = 0; i < s->num_cpu; i++) { 125 int ppibase = (s->num_irq - 32) + i * 32; 126 sysbus_connect_irq(timerbusdev, i, 127 qdev_get_gpio_in(s->gic, ppibase + 29)); 128 sysbus_connect_irq(wdtbusdev, i, 129 qdev_get_gpio_in(s->gic, ppibase + 30)); 130 } 131 } 132 133 static int mpcore_priv_init(SysBusDevice *sbd) 134 { 135 DeviceState *dev = DEVICE(sbd); 136 ARM11MPCorePriveState *s = ARM11MPCORE_PRIV(dev); 137 138 s->gic = qdev_create(NULL, "arm_gic"); 139 qdev_prop_set_uint32(s->gic, "num-cpu", s->num_cpu); 140 qdev_prop_set_uint32(s->gic, "num-irq", s->num_irq); 141 /* Request the legacy 11MPCore GIC behaviour: */ 142 qdev_prop_set_uint32(s->gic, "revision", 0); 143 qdev_init_nofail(s->gic); 144 145 /* Pass through outbound IRQ lines from the GIC */ 146 sysbus_pass_irq(sbd, SYS_BUS_DEVICE(s->gic)); 147 148 /* Pass through inbound GPIO lines to the GIC */ 149 qdev_init_gpio_in(dev, mpcore_priv_set_irq, s->num_irq - 32); 150 151 s->mptimer = qdev_create(NULL, "arm_mptimer"); 152 qdev_prop_set_uint32(s->mptimer, "num-cpu", s->num_cpu); 153 qdev_init_nofail(s->mptimer); 154 155 s->wdtimer = qdev_create(NULL, "arm_mptimer"); 156 qdev_prop_set_uint32(s->wdtimer, "num-cpu", s->num_cpu); 157 qdev_init_nofail(s->wdtimer); 158 159 mpcore_priv_map_setup(s); 160 sysbus_init_mmio(sbd, &s->container); 161 return 0; 162 } 163 164 /* Dummy PIC to route IRQ lines. The baseboard has 4 independent IRQ 165 controllers. The output of these, plus some of the raw input lines 166 are fed into a single SMP-aware interrupt controller on the CPU. */ 167 typedef struct { 168 SysBusDevice busdev; 169 SysBusDevice *priv; 170 qemu_irq cpuic[32]; 171 qemu_irq rvic[4][64]; 172 uint32_t num_cpu; 173 } mpcore_rirq_state; 174 175 /* Map baseboard IRQs onto CPU IRQ lines. */ 176 static const int mpcore_irq_map[32] = { 177 -1, -1, -1, -1, 1, 2, -1, -1, 178 -1, -1, 6, -1, 4, 5, -1, -1, 179 -1, 14, 15, 0, 7, 8, -1, -1, 180 -1, -1, -1, -1, 9, 3, -1, -1, 181 }; 182 183 static void mpcore_rirq_set_irq(void *opaque, int irq, int level) 184 { 185 mpcore_rirq_state *s = (mpcore_rirq_state *)opaque; 186 int i; 187 188 for (i = 0; i < 4; i++) { 189 qemu_set_irq(s->rvic[i][irq], level); 190 } 191 if (irq < 32) { 192 irq = mpcore_irq_map[irq]; 193 if (irq >= 0) { 194 qemu_set_irq(s->cpuic[irq], level); 195 } 196 } 197 } 198 199 static int realview_mpcore_init(SysBusDevice *dev) 200 { 201 mpcore_rirq_state *s = FROM_SYSBUS(mpcore_rirq_state, dev); 202 DeviceState *gic; 203 DeviceState *priv; 204 int n; 205 int i; 206 207 priv = qdev_create(NULL, TYPE_ARM11MPCORE_PRIV); 208 qdev_prop_set_uint32(priv, "num-cpu", s->num_cpu); 209 qdev_init_nofail(priv); 210 s->priv = SYS_BUS_DEVICE(priv); 211 sysbus_pass_irq(dev, s->priv); 212 for (i = 0; i < 32; i++) { 213 s->cpuic[i] = qdev_get_gpio_in(priv, i); 214 } 215 /* ??? IRQ routing is hardcoded to "normal" mode. */ 216 for (n = 0; n < 4; n++) { 217 gic = sysbus_create_simple("realview_gic", 0x10040000 + n * 0x10000, 218 s->cpuic[10 + n]); 219 for (i = 0; i < 64; i++) { 220 s->rvic[n][i] = qdev_get_gpio_in(gic, i); 221 } 222 } 223 qdev_init_gpio_in(&dev->qdev, mpcore_rirq_set_irq, 64); 224 sysbus_init_mmio(dev, sysbus_mmio_get_region(s->priv, 0)); 225 return 0; 226 } 227 228 static Property mpcore_rirq_properties[] = { 229 DEFINE_PROP_UINT32("num-cpu", mpcore_rirq_state, num_cpu, 1), 230 DEFINE_PROP_END_OF_LIST(), 231 }; 232 233 static void mpcore_rirq_class_init(ObjectClass *klass, void *data) 234 { 235 DeviceClass *dc = DEVICE_CLASS(klass); 236 SysBusDeviceClass *k = SYS_BUS_DEVICE_CLASS(klass); 237 238 k->init = realview_mpcore_init; 239 dc->props = mpcore_rirq_properties; 240 } 241 242 static const TypeInfo mpcore_rirq_info = { 243 .name = "realview_mpcore", 244 .parent = TYPE_SYS_BUS_DEVICE, 245 .instance_size = sizeof(mpcore_rirq_state), 246 .class_init = mpcore_rirq_class_init, 247 }; 248 249 static Property mpcore_priv_properties[] = { 250 DEFINE_PROP_UINT32("num-cpu", ARM11MPCorePriveState, num_cpu, 1), 251 /* The ARM11 MPCORE TRM says the on-chip controller may have 252 * anything from 0 to 224 external interrupt IRQ lines (with another 253 * 32 internal). We default to 32+32, which is the number provided by 254 * the ARM11 MPCore test chip in the Realview Versatile Express 255 * coretile. Other boards may differ and should set this property 256 * appropriately. Some Linux kernels may not boot if the hardware 257 * has more IRQ lines than the kernel expects. 258 */ 259 DEFINE_PROP_UINT32("num-irq", ARM11MPCorePriveState, num_irq, 64), 260 DEFINE_PROP_END_OF_LIST(), 261 }; 262 263 static void mpcore_priv_class_init(ObjectClass *klass, void *data) 264 { 265 DeviceClass *dc = DEVICE_CLASS(klass); 266 SysBusDeviceClass *k = SYS_BUS_DEVICE_CLASS(klass); 267 268 k->init = mpcore_priv_init; 269 dc->props = mpcore_priv_properties; 270 } 271 272 static const TypeInfo mpcore_priv_info = { 273 .name = TYPE_ARM11MPCORE_PRIV, 274 .parent = TYPE_SYS_BUS_DEVICE, 275 .instance_size = sizeof(ARM11MPCorePriveState), 276 .class_init = mpcore_priv_class_init, 277 }; 278 279 static void arm11mpcore_register_types(void) 280 { 281 type_register_static(&mpcore_rirq_info); 282 type_register_static(&mpcore_priv_info); 283 } 284 285 type_init(arm11mpcore_register_types) 286