1c0907c9eSPaolo Bonzini /* 2c0907c9eSPaolo Bonzini * QEMU MCH/ICH9 PCI Bridge Emulation 3c0907c9eSPaolo Bonzini * 4c0907c9eSPaolo Bonzini * Copyright (c) 2006 Fabrice Bellard 5c0907c9eSPaolo Bonzini * Copyright (c) 2009, 2010, 2011 6c0907c9eSPaolo Bonzini * Isaku Yamahata <yamahata at valinux co jp> 7c0907c9eSPaolo Bonzini * VA Linux Systems Japan K.K. 8c0907c9eSPaolo Bonzini * Copyright (C) 2012 Jason Baron <jbaron@redhat.com> 9c0907c9eSPaolo Bonzini * 10ef9f7b58SGonglei * This is based on piix.c, but heavily modified. 11c0907c9eSPaolo Bonzini * 12c0907c9eSPaolo Bonzini * Permission is hereby granted, free of charge, to any person obtaining a copy 13c0907c9eSPaolo Bonzini * of this software and associated documentation files (the "Software"), to deal 14c0907c9eSPaolo Bonzini * in the Software without restriction, including without limitation the rights 15c0907c9eSPaolo Bonzini * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 16c0907c9eSPaolo Bonzini * copies of the Software, and to permit persons to whom the Software is 17c0907c9eSPaolo Bonzini * furnished to do so, subject to the following conditions: 18c0907c9eSPaolo Bonzini * 19c0907c9eSPaolo Bonzini * The above copyright notice and this permission notice shall be included in 20c0907c9eSPaolo Bonzini * all copies or substantial portions of the Software. 21c0907c9eSPaolo Bonzini * 22c0907c9eSPaolo Bonzini * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 23c0907c9eSPaolo Bonzini * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 24c0907c9eSPaolo Bonzini * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL 25c0907c9eSPaolo Bonzini * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 26c0907c9eSPaolo Bonzini * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 27c0907c9eSPaolo Bonzini * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN 28c0907c9eSPaolo Bonzini * THE SOFTWARE. 29c0907c9eSPaolo Bonzini */ 30*b6a0aa05SPeter Maydell #include "qemu/osdep.h" 31c0907c9eSPaolo Bonzini #include "hw/hw.h" 32c0907c9eSPaolo Bonzini #include "hw/pci-host/q35.h" 3339848901SIgor Mammedov #include "qapi/visitor.h" 34c0907c9eSPaolo Bonzini 35c0907c9eSPaolo Bonzini /**************************************************************************** 36c0907c9eSPaolo Bonzini * Q35 host 37c0907c9eSPaolo Bonzini */ 38c0907c9eSPaolo Bonzini 3962d92e43SHu Tao static void q35_host_realize(DeviceState *dev, Error **errp) 40c0907c9eSPaolo Bonzini { 41ce88812fSHu Tao PCIHostState *pci = PCI_HOST_BRIDGE(dev); 42ce88812fSHu Tao Q35PCIHost *s = Q35_HOST_DEVICE(dev); 4362d92e43SHu Tao SysBusDevice *sbd = SYS_BUS_DEVICE(dev); 44c0907c9eSPaolo Bonzini 4562d92e43SHu Tao sysbus_add_io(sbd, MCH_HOST_BRIDGE_CONFIG_ADDR, &pci->conf_mem); 4662d92e43SHu Tao sysbus_init_ioports(sbd, MCH_HOST_BRIDGE_CONFIG_ADDR, 4); 47c0907c9eSPaolo Bonzini 4862d92e43SHu Tao sysbus_add_io(sbd, MCH_HOST_BRIDGE_CONFIG_DATA, &pci->data_mem); 4962d92e43SHu Tao sysbus_init_ioports(sbd, MCH_HOST_BRIDGE_CONFIG_DATA, 4); 50c0907c9eSPaolo Bonzini 51ce88812fSHu Tao pci->bus = pci_bus_new(DEVICE(s), "pcie.0", 52c0907c9eSPaolo Bonzini s->mch.pci_address_space, s->mch.address_space_io, 53c0907c9eSPaolo Bonzini 0, TYPE_PCIE_BUS); 54ce88812fSHu Tao qdev_set_parent_bus(DEVICE(&s->mch), BUS(pci->bus)); 55c0907c9eSPaolo Bonzini qdev_init_nofail(DEVICE(&s->mch)); 56c0907c9eSPaolo Bonzini } 57c0907c9eSPaolo Bonzini 58568f0690SDavid Gibson static const char *q35_host_root_bus_path(PCIHostState *host_bridge, 59568f0690SDavid Gibson PCIBus *rootbus) 60568f0690SDavid Gibson { 6104c7d8b8SCole Robinson Q35PCIHost *s = Q35_HOST_DEVICE(host_bridge); 6204c7d8b8SCole Robinson 63568f0690SDavid Gibson /* For backwards compat with old device paths */ 6404c7d8b8SCole Robinson if (s->mch.short_root_bus) { 65568f0690SDavid Gibson return "0000"; 66568f0690SDavid Gibson } 6704c7d8b8SCole Robinson return "0000:00"; 6804c7d8b8SCole Robinson } 69568f0690SDavid Gibson 7039848901SIgor Mammedov static void q35_host_get_pci_hole_start(Object *obj, Visitor *v, 7139848901SIgor Mammedov void *opaque, const char *name, 7239848901SIgor Mammedov Error **errp) 7339848901SIgor Mammedov { 7439848901SIgor Mammedov Q35PCIHost *s = Q35_HOST_DEVICE(obj); 7539848901SIgor Mammedov uint32_t value = s->mch.pci_info.w32.begin; 7639848901SIgor Mammedov 7739848901SIgor Mammedov visit_type_uint32(v, &value, name, errp); 7839848901SIgor Mammedov } 7939848901SIgor Mammedov 8039848901SIgor Mammedov static void q35_host_get_pci_hole_end(Object *obj, Visitor *v, 8139848901SIgor Mammedov void *opaque, const char *name, 8239848901SIgor Mammedov Error **errp) 8339848901SIgor Mammedov { 8439848901SIgor Mammedov Q35PCIHost *s = Q35_HOST_DEVICE(obj); 8539848901SIgor Mammedov uint32_t value = s->mch.pci_info.w32.end; 8639848901SIgor Mammedov 8739848901SIgor Mammedov visit_type_uint32(v, &value, name, errp); 8839848901SIgor Mammedov } 8939848901SIgor Mammedov 9039848901SIgor Mammedov static void q35_host_get_pci_hole64_start(Object *obj, Visitor *v, 9139848901SIgor Mammedov void *opaque, const char *name, 9239848901SIgor Mammedov Error **errp) 9339848901SIgor Mammedov { 948b42d730SMichael S. Tsirkin PCIHostState *h = PCI_HOST_BRIDGE(obj); 958b42d730SMichael S. Tsirkin Range w64; 9639848901SIgor Mammedov 978b42d730SMichael S. Tsirkin pci_bus_get_w64_range(h->bus, &w64); 988b42d730SMichael S. Tsirkin 998b42d730SMichael S. Tsirkin visit_type_uint64(v, &w64.begin, name, errp); 10039848901SIgor Mammedov } 10139848901SIgor Mammedov 10239848901SIgor Mammedov static void q35_host_get_pci_hole64_end(Object *obj, Visitor *v, 10339848901SIgor Mammedov void *opaque, const char *name, 10439848901SIgor Mammedov Error **errp) 10539848901SIgor Mammedov { 1068b42d730SMichael S. Tsirkin PCIHostState *h = PCI_HOST_BRIDGE(obj); 1078b42d730SMichael S. Tsirkin Range w64; 10839848901SIgor Mammedov 1098b42d730SMichael S. Tsirkin pci_bus_get_w64_range(h->bus, &w64); 1108b42d730SMichael S. Tsirkin 1118b42d730SMichael S. Tsirkin visit_type_uint64(v, &w64.end, name, errp); 11239848901SIgor Mammedov } 11339848901SIgor Mammedov 114cbcaf79eSMichael S. Tsirkin static void q35_host_get_mmcfg_size(Object *obj, Visitor *v, 115cbcaf79eSMichael S. Tsirkin void *opaque, const char *name, 116cbcaf79eSMichael S. Tsirkin Error **errp) 117cbcaf79eSMichael S. Tsirkin { 118cbcaf79eSMichael S. Tsirkin PCIExpressHost *e = PCIE_HOST_BRIDGE(obj); 119cbcaf79eSMichael S. Tsirkin uint32_t value = e->size; 120cbcaf79eSMichael S. Tsirkin 121cbcaf79eSMichael S. Tsirkin visit_type_uint32(v, &value, name, errp); 122cbcaf79eSMichael S. Tsirkin } 123cbcaf79eSMichael S. Tsirkin 124c0907c9eSPaolo Bonzini static Property mch_props[] = { 12587f65245SMichael S. Tsirkin DEFINE_PROP_UINT64(PCIE_HOST_MCFG_BASE, Q35PCIHost, parent_obj.base_addr, 126c0907c9eSPaolo Bonzini MCH_HOST_BRIDGE_PCIEXBAR_DEFAULT), 12739848901SIgor Mammedov DEFINE_PROP_SIZE(PCI_HOST_PROP_PCI_HOLE64_SIZE, Q35PCIHost, 12839848901SIgor Mammedov mch.pci_hole64_size, DEFAULT_PCI_HOLE64_SIZE), 12904c7d8b8SCole Robinson DEFINE_PROP_UINT32("short_root_bus", Q35PCIHost, mch.short_root_bus, 0), 130c0907c9eSPaolo Bonzini DEFINE_PROP_END_OF_LIST(), 131c0907c9eSPaolo Bonzini }; 132c0907c9eSPaolo Bonzini 133c0907c9eSPaolo Bonzini static void q35_host_class_init(ObjectClass *klass, void *data) 134c0907c9eSPaolo Bonzini { 135c0907c9eSPaolo Bonzini DeviceClass *dc = DEVICE_CLASS(klass); 136568f0690SDavid Gibson PCIHostBridgeClass *hc = PCI_HOST_BRIDGE_CLASS(klass); 137c0907c9eSPaolo Bonzini 138568f0690SDavid Gibson hc->root_bus_path = q35_host_root_bus_path; 13962d92e43SHu Tao dc->realize = q35_host_realize; 140c0907c9eSPaolo Bonzini dc->props = mch_props; 141125ee0edSMarcel Apfelbaum set_bit(DEVICE_CATEGORY_BRIDGE, dc->categories); 14268c0e134SMichael S. Tsirkin dc->fw_name = "pci"; 143c0907c9eSPaolo Bonzini } 144c0907c9eSPaolo Bonzini 145c0907c9eSPaolo Bonzini static void q35_host_initfn(Object *obj) 146c0907c9eSPaolo Bonzini { 147c0907c9eSPaolo Bonzini Q35PCIHost *s = Q35_HOST_DEVICE(obj); 14862d92e43SHu Tao PCIHostState *phb = PCI_HOST_BRIDGE(obj); 14962d92e43SHu Tao 15062d92e43SHu Tao memory_region_init_io(&phb->conf_mem, obj, &pci_host_conf_le_ops, phb, 15162d92e43SHu Tao "pci-conf-idx", 4); 15262d92e43SHu Tao memory_region_init_io(&phb->data_mem, obj, &pci_host_data_le_ops, phb, 15362d92e43SHu Tao "pci-conf-data", 4); 154c0907c9eSPaolo Bonzini 155213f0c4fSAndreas Färber object_initialize(&s->mch, sizeof(s->mch), TYPE_MCH_PCI_DEVICE); 156c0907c9eSPaolo Bonzini object_property_add_child(OBJECT(s), "mch", OBJECT(&s->mch), NULL); 157c0907c9eSPaolo Bonzini qdev_prop_set_uint32(DEVICE(&s->mch), "addr", PCI_DEVFN(0, 0)); 158c0907c9eSPaolo Bonzini qdev_prop_set_bit(DEVICE(&s->mch), "multifunction", false); 15939848901SIgor Mammedov 16039848901SIgor Mammedov object_property_add(obj, PCI_HOST_PROP_PCI_HOLE_START, "int", 16139848901SIgor Mammedov q35_host_get_pci_hole_start, 16239848901SIgor Mammedov NULL, NULL, NULL, NULL); 16339848901SIgor Mammedov 16439848901SIgor Mammedov object_property_add(obj, PCI_HOST_PROP_PCI_HOLE_END, "int", 16539848901SIgor Mammedov q35_host_get_pci_hole_end, 16639848901SIgor Mammedov NULL, NULL, NULL, NULL); 16739848901SIgor Mammedov 16839848901SIgor Mammedov object_property_add(obj, PCI_HOST_PROP_PCI_HOLE64_START, "int", 16939848901SIgor Mammedov q35_host_get_pci_hole64_start, 17039848901SIgor Mammedov NULL, NULL, NULL, NULL); 17139848901SIgor Mammedov 17239848901SIgor Mammedov object_property_add(obj, PCI_HOST_PROP_PCI_HOLE64_END, "int", 17339848901SIgor Mammedov q35_host_get_pci_hole64_end, 17439848901SIgor Mammedov NULL, NULL, NULL, NULL); 17539848901SIgor Mammedov 176cbcaf79eSMichael S. Tsirkin object_property_add(obj, PCIE_HOST_MCFG_SIZE, "int", 177cbcaf79eSMichael S. Tsirkin q35_host_get_mmcfg_size, 178cbcaf79eSMichael S. Tsirkin NULL, NULL, NULL, NULL); 179cbcaf79eSMichael S. Tsirkin 18039848901SIgor Mammedov /* Leave enough space for the biggest MCFG BAR */ 18139848901SIgor Mammedov /* TODO: this matches current bios behaviour, but 18239848901SIgor Mammedov * it's not a power of two, which means an MTRR 18339848901SIgor Mammedov * can't cover it exactly. 18439848901SIgor Mammedov */ 18539848901SIgor Mammedov s->mch.pci_info.w32.begin = MCH_HOST_BRIDGE_PCIEXBAR_DEFAULT + 18639848901SIgor Mammedov MCH_HOST_BRIDGE_PCIEXBAR_MAX; 18739848901SIgor Mammedov s->mch.pci_info.w32.end = IO_APIC_DEFAULT_ADDRESS; 188c0907c9eSPaolo Bonzini } 189c0907c9eSPaolo Bonzini 190c0907c9eSPaolo Bonzini static const TypeInfo q35_host_info = { 191c0907c9eSPaolo Bonzini .name = TYPE_Q35_HOST_DEVICE, 192c0907c9eSPaolo Bonzini .parent = TYPE_PCIE_HOST_BRIDGE, 193c0907c9eSPaolo Bonzini .instance_size = sizeof(Q35PCIHost), 194c0907c9eSPaolo Bonzini .instance_init = q35_host_initfn, 195c0907c9eSPaolo Bonzini .class_init = q35_host_class_init, 196c0907c9eSPaolo Bonzini }; 197c0907c9eSPaolo Bonzini 198c0907c9eSPaolo Bonzini /**************************************************************************** 199c0907c9eSPaolo Bonzini * MCH D0:F0 200c0907c9eSPaolo Bonzini */ 201c0907c9eSPaolo Bonzini 202bafc90bdSGerd Hoffmann static uint64_t tseg_blackhole_read(void *ptr, hwaddr reg, unsigned size) 203bafc90bdSGerd Hoffmann { 204bafc90bdSGerd Hoffmann return 0xffffffff; 205bafc90bdSGerd Hoffmann } 206bafc90bdSGerd Hoffmann 207bafc90bdSGerd Hoffmann static void tseg_blackhole_write(void *opaque, hwaddr addr, uint64_t val, 208bafc90bdSGerd Hoffmann unsigned width) 209bafc90bdSGerd Hoffmann { 210bafc90bdSGerd Hoffmann /* nothing */ 211bafc90bdSGerd Hoffmann } 212bafc90bdSGerd Hoffmann 213bafc90bdSGerd Hoffmann static const MemoryRegionOps tseg_blackhole_ops = { 214bafc90bdSGerd Hoffmann .read = tseg_blackhole_read, 215bafc90bdSGerd Hoffmann .write = tseg_blackhole_write, 216bafc90bdSGerd Hoffmann .endianness = DEVICE_NATIVE_ENDIAN, 217bafc90bdSGerd Hoffmann .valid.min_access_size = 1, 218bafc90bdSGerd Hoffmann .valid.max_access_size = 4, 219bafc90bdSGerd Hoffmann .impl.min_access_size = 4, 220bafc90bdSGerd Hoffmann .impl.max_access_size = 4, 221bafc90bdSGerd Hoffmann .endianness = DEVICE_LITTLE_ENDIAN, 222bafc90bdSGerd Hoffmann }; 223bafc90bdSGerd Hoffmann 224c0907c9eSPaolo Bonzini /* PCIe MMCFG */ 225c0907c9eSPaolo Bonzini static void mch_update_pciexbar(MCHPCIState *mch) 226c0907c9eSPaolo Bonzini { 227ce88812fSHu Tao PCIDevice *pci_dev = PCI_DEVICE(mch); 228ce88812fSHu Tao BusState *bus = qdev_get_parent_bus(DEVICE(mch)); 229ce88812fSHu Tao PCIExpressHost *pehb = PCIE_HOST_BRIDGE(bus->parent); 230c0907c9eSPaolo Bonzini 231c0907c9eSPaolo Bonzini uint64_t pciexbar; 232c0907c9eSPaolo Bonzini int enable; 233c0907c9eSPaolo Bonzini uint64_t addr; 234c0907c9eSPaolo Bonzini uint64_t addr_mask; 235c0907c9eSPaolo Bonzini uint32_t length; 236c0907c9eSPaolo Bonzini 237c0907c9eSPaolo Bonzini pciexbar = pci_get_quad(pci_dev->config + MCH_HOST_BRIDGE_PCIEXBAR); 238c0907c9eSPaolo Bonzini enable = pciexbar & MCH_HOST_BRIDGE_PCIEXBAREN; 239c0907c9eSPaolo Bonzini addr_mask = MCH_HOST_BRIDGE_PCIEXBAR_ADMSK; 240c0907c9eSPaolo Bonzini switch (pciexbar & MCH_HOST_BRIDGE_PCIEXBAR_LENGTH_MASK) { 241c0907c9eSPaolo Bonzini case MCH_HOST_BRIDGE_PCIEXBAR_LENGTH_256M: 242c0907c9eSPaolo Bonzini length = 256 * 1024 * 1024; 243c0907c9eSPaolo Bonzini break; 244c0907c9eSPaolo Bonzini case MCH_HOST_BRIDGE_PCIEXBAR_LENGTH_128M: 245c0907c9eSPaolo Bonzini length = 128 * 1024 * 1024; 246c0907c9eSPaolo Bonzini addr_mask |= MCH_HOST_BRIDGE_PCIEXBAR_128ADMSK | 247c0907c9eSPaolo Bonzini MCH_HOST_BRIDGE_PCIEXBAR_64ADMSK; 248c0907c9eSPaolo Bonzini break; 249c0907c9eSPaolo Bonzini case MCH_HOST_BRIDGE_PCIEXBAR_LENGTH_64M: 250c0907c9eSPaolo Bonzini length = 64 * 1024 * 1024; 251c0907c9eSPaolo Bonzini addr_mask |= MCH_HOST_BRIDGE_PCIEXBAR_64ADMSK; 252c0907c9eSPaolo Bonzini break; 253c0907c9eSPaolo Bonzini case MCH_HOST_BRIDGE_PCIEXBAR_LENGTH_RVD: 254c0907c9eSPaolo Bonzini default: 255c0907c9eSPaolo Bonzini enable = 0; 256c0907c9eSPaolo Bonzini length = 0; 257c0907c9eSPaolo Bonzini abort(); 258c0907c9eSPaolo Bonzini break; 259c0907c9eSPaolo Bonzini } 260c0907c9eSPaolo Bonzini addr = pciexbar & addr_mask; 261ce88812fSHu Tao pcie_host_mmcfg_update(pehb, enable, addr, length); 262636228a8SMichael S. Tsirkin /* Leave enough space for the MCFG BAR */ 263636228a8SMichael S. Tsirkin /* 264636228a8SMichael S. Tsirkin * TODO: this matches current bios behaviour, but it's not a power of two, 265636228a8SMichael S. Tsirkin * which means an MTRR can't cover it exactly. 266636228a8SMichael S. Tsirkin */ 267636228a8SMichael S. Tsirkin if (enable) { 268636228a8SMichael S. Tsirkin mch->pci_info.w32.begin = addr + length; 269636228a8SMichael S. Tsirkin } else { 270636228a8SMichael S. Tsirkin mch->pci_info.w32.begin = MCH_HOST_BRIDGE_PCIEXBAR_DEFAULT; 271636228a8SMichael S. Tsirkin } 272c0907c9eSPaolo Bonzini } 273c0907c9eSPaolo Bonzini 274c0907c9eSPaolo Bonzini /* PAM */ 275c0907c9eSPaolo Bonzini static void mch_update_pam(MCHPCIState *mch) 276c0907c9eSPaolo Bonzini { 277ce88812fSHu Tao PCIDevice *pd = PCI_DEVICE(mch); 278c0907c9eSPaolo Bonzini int i; 279c0907c9eSPaolo Bonzini 280c0907c9eSPaolo Bonzini memory_region_transaction_begin(); 281c0907c9eSPaolo Bonzini for (i = 0; i < 13; i++) { 282c0907c9eSPaolo Bonzini pam_update(&mch->pam_regions[i], i, 283ce88812fSHu Tao pd->config[MCH_HOST_BRIDGE_PAM0 + ((i + 1) / 2)]); 284c0907c9eSPaolo Bonzini } 285c0907c9eSPaolo Bonzini memory_region_transaction_commit(); 286c0907c9eSPaolo Bonzini } 287c0907c9eSPaolo Bonzini 288c0907c9eSPaolo Bonzini /* SMRAM */ 289c0907c9eSPaolo Bonzini static void mch_update_smram(MCHPCIState *mch) 290c0907c9eSPaolo Bonzini { 291ce88812fSHu Tao PCIDevice *pd = PCI_DEVICE(mch); 29264130fa4SPaolo Bonzini bool h_smrame = (pd->config[MCH_HOST_BRIDGE_ESMRAMC] & MCH_HOST_BRIDGE_ESMRAMC_H_SMRAME); 293bafc90bdSGerd Hoffmann uint32_t tseg_size; 294ce88812fSHu Tao 29568c77acfSGerd Hoffmann /* implement SMRAM.D_LCK */ 29668c77acfSGerd Hoffmann if (pd->config[MCH_HOST_BRIDGE_SMRAM] & MCH_HOST_BRIDGE_SMRAM_D_LCK) { 29768c77acfSGerd Hoffmann pd->config[MCH_HOST_BRIDGE_SMRAM] &= ~MCH_HOST_BRIDGE_SMRAM_D_OPEN; 29868c77acfSGerd Hoffmann pd->wmask[MCH_HOST_BRIDGE_SMRAM] = MCH_HOST_BRIDGE_SMRAM_WMASK_LCK; 29968c77acfSGerd Hoffmann pd->wmask[MCH_HOST_BRIDGE_ESMRAMC] = MCH_HOST_BRIDGE_ESMRAMC_WMASK_LCK; 30068c77acfSGerd Hoffmann } 30168c77acfSGerd Hoffmann 302c0907c9eSPaolo Bonzini memory_region_transaction_begin(); 30364130fa4SPaolo Bonzini 30464130fa4SPaolo Bonzini if (pd->config[MCH_HOST_BRIDGE_SMRAM] & SMRAM_D_OPEN) { 30564130fa4SPaolo Bonzini /* Hide (!) low SMRAM if H_SMRAME = 1 */ 30664130fa4SPaolo Bonzini memory_region_set_enabled(&mch->smram_region, h_smrame); 30764130fa4SPaolo Bonzini /* Show high SMRAM if H_SMRAME = 1 */ 30864130fa4SPaolo Bonzini memory_region_set_enabled(&mch->open_high_smram, h_smrame); 30964130fa4SPaolo Bonzini } else { 31064130fa4SPaolo Bonzini /* Hide high SMRAM and low SMRAM */ 31164130fa4SPaolo Bonzini memory_region_set_enabled(&mch->smram_region, true); 31264130fa4SPaolo Bonzini memory_region_set_enabled(&mch->open_high_smram, false); 31364130fa4SPaolo Bonzini } 31464130fa4SPaolo Bonzini 31564130fa4SPaolo Bonzini if (pd->config[MCH_HOST_BRIDGE_SMRAM] & SMRAM_G_SMRAME) { 31664130fa4SPaolo Bonzini memory_region_set_enabled(&mch->low_smram, !h_smrame); 31764130fa4SPaolo Bonzini memory_region_set_enabled(&mch->high_smram, h_smrame); 31864130fa4SPaolo Bonzini } else { 31964130fa4SPaolo Bonzini memory_region_set_enabled(&mch->low_smram, false); 32064130fa4SPaolo Bonzini memory_region_set_enabled(&mch->high_smram, false); 32164130fa4SPaolo Bonzini } 32264130fa4SPaolo Bonzini 323bafc90bdSGerd Hoffmann if (pd->config[MCH_HOST_BRIDGE_ESMRAMC] & MCH_HOST_BRIDGE_ESMRAMC_T_EN) { 324bafc90bdSGerd Hoffmann switch (pd->config[MCH_HOST_BRIDGE_ESMRAMC] & 325bafc90bdSGerd Hoffmann MCH_HOST_BRIDGE_ESMRAMC_TSEG_SZ_MASK) { 326bafc90bdSGerd Hoffmann case MCH_HOST_BRIDGE_ESMRAMC_TSEG_SZ_1MB: 327bafc90bdSGerd Hoffmann tseg_size = 1024 * 1024; 328bafc90bdSGerd Hoffmann break; 329bafc90bdSGerd Hoffmann case MCH_HOST_BRIDGE_ESMRAMC_TSEG_SZ_2MB: 330bafc90bdSGerd Hoffmann tseg_size = 1024 * 1024 * 2; 331bafc90bdSGerd Hoffmann break; 332bafc90bdSGerd Hoffmann case MCH_HOST_BRIDGE_ESMRAMC_TSEG_SZ_8MB: 333bafc90bdSGerd Hoffmann tseg_size = 1024 * 1024 * 8; 334bafc90bdSGerd Hoffmann break; 335bafc90bdSGerd Hoffmann default: 336bafc90bdSGerd Hoffmann tseg_size = 0; 337bafc90bdSGerd Hoffmann break; 338bafc90bdSGerd Hoffmann } 339bafc90bdSGerd Hoffmann } else { 340bafc90bdSGerd Hoffmann tseg_size = 0; 341bafc90bdSGerd Hoffmann } 342bafc90bdSGerd Hoffmann memory_region_del_subregion(mch->system_memory, &mch->tseg_blackhole); 343bafc90bdSGerd Hoffmann memory_region_set_enabled(&mch->tseg_blackhole, tseg_size); 344bafc90bdSGerd Hoffmann memory_region_set_size(&mch->tseg_blackhole, tseg_size); 345bafc90bdSGerd Hoffmann memory_region_add_subregion_overlap(mch->system_memory, 346bafc90bdSGerd Hoffmann mch->below_4g_mem_size - tseg_size, 347bafc90bdSGerd Hoffmann &mch->tseg_blackhole, 1); 348bafc90bdSGerd Hoffmann 349bafc90bdSGerd Hoffmann memory_region_set_enabled(&mch->tseg_window, tseg_size); 350bafc90bdSGerd Hoffmann memory_region_set_size(&mch->tseg_window, tseg_size); 351bafc90bdSGerd Hoffmann memory_region_set_address(&mch->tseg_window, 352bafc90bdSGerd Hoffmann mch->below_4g_mem_size - tseg_size); 353bafc90bdSGerd Hoffmann memory_region_set_alias_offset(&mch->tseg_window, 354bafc90bdSGerd Hoffmann mch->below_4g_mem_size - tseg_size); 355bafc90bdSGerd Hoffmann 356c0907c9eSPaolo Bonzini memory_region_transaction_commit(); 357c0907c9eSPaolo Bonzini } 358c0907c9eSPaolo Bonzini 359c0907c9eSPaolo Bonzini static void mch_write_config(PCIDevice *d, 360c0907c9eSPaolo Bonzini uint32_t address, uint32_t val, int len) 361c0907c9eSPaolo Bonzini { 362c0907c9eSPaolo Bonzini MCHPCIState *mch = MCH_PCI_DEVICE(d); 363c0907c9eSPaolo Bonzini 364c0907c9eSPaolo Bonzini pci_default_write_config(d, address, val, len); 365c0907c9eSPaolo Bonzini 366c0907c9eSPaolo Bonzini if (ranges_overlap(address, len, MCH_HOST_BRIDGE_PAM0, 367c0907c9eSPaolo Bonzini MCH_HOST_BRIDGE_PAM_SIZE)) { 368c0907c9eSPaolo Bonzini mch_update_pam(mch); 369c0907c9eSPaolo Bonzini } 370c0907c9eSPaolo Bonzini 371c0907c9eSPaolo Bonzini if (ranges_overlap(address, len, MCH_HOST_BRIDGE_PCIEXBAR, 372c0907c9eSPaolo Bonzini MCH_HOST_BRIDGE_PCIEXBAR_SIZE)) { 373c0907c9eSPaolo Bonzini mch_update_pciexbar(mch); 374c0907c9eSPaolo Bonzini } 375c0907c9eSPaolo Bonzini 376263cf436SBALATON Zoltan if (ranges_overlap(address, len, MCH_HOST_BRIDGE_SMRAM, 377263cf436SBALATON Zoltan MCH_HOST_BRIDGE_SMRAM_SIZE)) { 378c0907c9eSPaolo Bonzini mch_update_smram(mch); 379c0907c9eSPaolo Bonzini } 380c0907c9eSPaolo Bonzini } 381c0907c9eSPaolo Bonzini 382c0907c9eSPaolo Bonzini static void mch_update(MCHPCIState *mch) 383c0907c9eSPaolo Bonzini { 384c0907c9eSPaolo Bonzini mch_update_pciexbar(mch); 385c0907c9eSPaolo Bonzini mch_update_pam(mch); 386c0907c9eSPaolo Bonzini mch_update_smram(mch); 387c0907c9eSPaolo Bonzini } 388c0907c9eSPaolo Bonzini 389c0907c9eSPaolo Bonzini static int mch_post_load(void *opaque, int version_id) 390c0907c9eSPaolo Bonzini { 391c0907c9eSPaolo Bonzini MCHPCIState *mch = opaque; 392c0907c9eSPaolo Bonzini mch_update(mch); 393c0907c9eSPaolo Bonzini return 0; 394c0907c9eSPaolo Bonzini } 395c0907c9eSPaolo Bonzini 396c0907c9eSPaolo Bonzini static const VMStateDescription vmstate_mch = { 397c0907c9eSPaolo Bonzini .name = "mch", 398c0907c9eSPaolo Bonzini .version_id = 1, 399c0907c9eSPaolo Bonzini .minimum_version_id = 1, 400c0907c9eSPaolo Bonzini .post_load = mch_post_load, 401c0907c9eSPaolo Bonzini .fields = (VMStateField[]) { 402ce88812fSHu Tao VMSTATE_PCI_DEVICE(parent_obj, MCHPCIState), 403f809c605SPaolo Bonzini /* Used to be smm_enabled, which was basically always zero because 404f809c605SPaolo Bonzini * SeaBIOS hardly uses SMM. SMRAM is now handled by CPU code. 405f809c605SPaolo Bonzini */ 406f809c605SPaolo Bonzini VMSTATE_UNUSED(1), 407c0907c9eSPaolo Bonzini VMSTATE_END_OF_LIST() 408c0907c9eSPaolo Bonzini } 409c0907c9eSPaolo Bonzini }; 410c0907c9eSPaolo Bonzini 411c0907c9eSPaolo Bonzini static void mch_reset(DeviceState *qdev) 412c0907c9eSPaolo Bonzini { 413c0907c9eSPaolo Bonzini PCIDevice *d = PCI_DEVICE(qdev); 414c0907c9eSPaolo Bonzini MCHPCIState *mch = MCH_PCI_DEVICE(d); 415c0907c9eSPaolo Bonzini 416c0907c9eSPaolo Bonzini pci_set_quad(d->config + MCH_HOST_BRIDGE_PCIEXBAR, 417c0907c9eSPaolo Bonzini MCH_HOST_BRIDGE_PCIEXBAR_DEFAULT); 418c0907c9eSPaolo Bonzini 419263cf436SBALATON Zoltan d->config[MCH_HOST_BRIDGE_SMRAM] = MCH_HOST_BRIDGE_SMRAM_DEFAULT; 42077447524SGerd Hoffmann d->config[MCH_HOST_BRIDGE_ESMRAMC] = MCH_HOST_BRIDGE_ESMRAMC_DEFAULT; 421b66a67d7SGerd Hoffmann d->wmask[MCH_HOST_BRIDGE_SMRAM] = MCH_HOST_BRIDGE_SMRAM_WMASK; 422b66a67d7SGerd Hoffmann d->wmask[MCH_HOST_BRIDGE_ESMRAMC] = MCH_HOST_BRIDGE_ESMRAMC_WMASK; 423c0907c9eSPaolo Bonzini 424c0907c9eSPaolo Bonzini mch_update(mch); 425c0907c9eSPaolo Bonzini } 426c0907c9eSPaolo Bonzini 427a52a7fdfSLe Tan static AddressSpace *q35_host_dma_iommu(PCIBus *bus, void *opaque, int devfn) 428a52a7fdfSLe Tan { 429a52a7fdfSLe Tan IntelIOMMUState *s = opaque; 4307df953bdSKnut Omang VTDAddressSpace *vtd_as; 431a52a7fdfSLe Tan 432a52a7fdfSLe Tan assert(0 <= devfn && devfn <= VTD_PCI_DEVFN_MAX); 433a52a7fdfSLe Tan 4347df953bdSKnut Omang vtd_as = vtd_find_add_as(s, bus, devfn); 4357df953bdSKnut Omang return &vtd_as->as; 436a52a7fdfSLe Tan } 437a52a7fdfSLe Tan 438a52a7fdfSLe Tan static void mch_init_dmar(MCHPCIState *mch) 439a52a7fdfSLe Tan { 440a52a7fdfSLe Tan PCIBus *pci_bus = PCI_BUS(qdev_get_parent_bus(DEVICE(mch))); 441a52a7fdfSLe Tan 442a52a7fdfSLe Tan mch->iommu = INTEL_IOMMU_DEVICE(qdev_create(NULL, TYPE_INTEL_IOMMU_DEVICE)); 443a52a7fdfSLe Tan object_property_add_child(OBJECT(mch), "intel-iommu", 444a52a7fdfSLe Tan OBJECT(mch->iommu), NULL); 445a52a7fdfSLe Tan qdev_init_nofail(DEVICE(mch->iommu)); 446a52a7fdfSLe Tan sysbus_mmio_map(SYS_BUS_DEVICE(mch->iommu), 0, Q35_HOST_BRIDGE_IOMMU_ADDR); 447a52a7fdfSLe Tan 448a52a7fdfSLe Tan pci_setup_iommu(pci_bus, q35_host_dma_iommu, mch->iommu); 449a52a7fdfSLe Tan } 450a52a7fdfSLe Tan 4519af21dbeSMarkus Armbruster static void mch_realize(PCIDevice *d, Error **errp) 452c0907c9eSPaolo Bonzini { 453c0907c9eSPaolo Bonzini int i; 454c0907c9eSPaolo Bonzini MCHPCIState *mch = MCH_PCI_DEVICE(d); 455c0907c9eSPaolo Bonzini 45683d08f26SMichael S. Tsirkin /* setup pci memory mapping */ 45783d08f26SMichael S. Tsirkin pc_pci_as_mapping_init(OBJECT(mch), mch->system_memory, 45883d08f26SMichael S. Tsirkin mch->pci_address_space); 45939848901SIgor Mammedov 460fe6567d5SPaolo Bonzini /* if *disabled* show SMRAM to all CPUs */ 46140c5dce9SPaolo Bonzini memory_region_init_alias(&mch->smram_region, OBJECT(mch), "smram-region", 462c0907c9eSPaolo Bonzini mch->pci_address_space, 0xa0000, 0x20000); 463c0907c9eSPaolo Bonzini memory_region_add_subregion_overlap(mch->system_memory, 0xa0000, 464c0907c9eSPaolo Bonzini &mch->smram_region, 1); 465fe6567d5SPaolo Bonzini memory_region_set_enabled(&mch->smram_region, true); 466fe6567d5SPaolo Bonzini 46764130fa4SPaolo Bonzini memory_region_init_alias(&mch->open_high_smram, OBJECT(mch), "smram-open-high", 46864130fa4SPaolo Bonzini mch->ram_memory, 0xa0000, 0x20000); 46964130fa4SPaolo Bonzini memory_region_add_subregion_overlap(mch->system_memory, 0xfeda0000, 47064130fa4SPaolo Bonzini &mch->open_high_smram, 1); 47164130fa4SPaolo Bonzini memory_region_set_enabled(&mch->open_high_smram, false); 47264130fa4SPaolo Bonzini 473fe6567d5SPaolo Bonzini /* smram, as seen by SMM CPUs */ 474fe6567d5SPaolo Bonzini memory_region_init(&mch->smram, OBJECT(mch), "smram", 1ull << 32); 475fe6567d5SPaolo Bonzini memory_region_set_enabled(&mch->smram, true); 476fe6567d5SPaolo Bonzini memory_region_init_alias(&mch->low_smram, OBJECT(mch), "smram-low", 477f809c605SPaolo Bonzini mch->ram_memory, 0xa0000, 0x20000); 478fe6567d5SPaolo Bonzini memory_region_set_enabled(&mch->low_smram, true); 479fe6567d5SPaolo Bonzini memory_region_add_subregion(&mch->smram, 0xa0000, &mch->low_smram); 48064130fa4SPaolo Bonzini memory_region_init_alias(&mch->high_smram, OBJECT(mch), "smram-high", 48164130fa4SPaolo Bonzini mch->ram_memory, 0xa0000, 0x20000); 48264130fa4SPaolo Bonzini memory_region_set_enabled(&mch->high_smram, true); 48364130fa4SPaolo Bonzini memory_region_add_subregion(&mch->smram, 0xfeda0000, &mch->high_smram); 484bafc90bdSGerd Hoffmann 485bafc90bdSGerd Hoffmann memory_region_init_io(&mch->tseg_blackhole, OBJECT(mch), 486bafc90bdSGerd Hoffmann &tseg_blackhole_ops, NULL, 487bafc90bdSGerd Hoffmann "tseg-blackhole", 0); 488bafc90bdSGerd Hoffmann memory_region_set_enabled(&mch->tseg_blackhole, false); 489bafc90bdSGerd Hoffmann memory_region_add_subregion_overlap(mch->system_memory, 490bafc90bdSGerd Hoffmann mch->below_4g_mem_size, 491bafc90bdSGerd Hoffmann &mch->tseg_blackhole, 1); 492bafc90bdSGerd Hoffmann 493bafc90bdSGerd Hoffmann memory_region_init_alias(&mch->tseg_window, OBJECT(mch), "tseg-window", 494bafc90bdSGerd Hoffmann mch->ram_memory, mch->below_4g_mem_size, 0); 495bafc90bdSGerd Hoffmann memory_region_set_enabled(&mch->tseg_window, false); 496bafc90bdSGerd Hoffmann memory_region_add_subregion(&mch->smram, mch->below_4g_mem_size, 497bafc90bdSGerd Hoffmann &mch->tseg_window); 498fe6567d5SPaolo Bonzini object_property_add_const_link(qdev_get_machine(), "smram", 499fe6567d5SPaolo Bonzini OBJECT(&mch->smram), &error_abort); 500fe6567d5SPaolo Bonzini 501ac40aa15SLe Tan init_pam(DEVICE(mch), mch->ram_memory, mch->system_memory, 502ac40aa15SLe Tan mch->pci_address_space, &mch->pam_regions[0], 503ac40aa15SLe Tan PAM_BIOS_BASE, PAM_BIOS_SIZE); 504c0907c9eSPaolo Bonzini for (i = 0; i < 12; ++i) { 505ac40aa15SLe Tan init_pam(DEVICE(mch), mch->ram_memory, mch->system_memory, 506ac40aa15SLe Tan mch->pci_address_space, &mch->pam_regions[i+1], 507ac40aa15SLe Tan PAM_EXPAN_BASE + i * PAM_EXPAN_SIZE, PAM_EXPAN_SIZE); 508c0907c9eSPaolo Bonzini } 509a52a7fdfSLe Tan /* Intel IOMMU (VT-d) */ 5101f8431f4SBandan Das if (object_property_get_bool(qdev_get_machine(), "iommu", NULL)) { 511a52a7fdfSLe Tan mch_init_dmar(mch); 512a52a7fdfSLe Tan } 513c0907c9eSPaolo Bonzini } 514c0907c9eSPaolo Bonzini 5156f1426abSMichael S. Tsirkin uint64_t mch_mcfg_base(void) 5166f1426abSMichael S. Tsirkin { 5176f1426abSMichael S. Tsirkin bool ambiguous; 5186f1426abSMichael S. Tsirkin Object *o = object_resolve_path_type("", TYPE_MCH_PCI_DEVICE, &ambiguous); 5196f1426abSMichael S. Tsirkin if (!o) { 5206f1426abSMichael S. Tsirkin return 0; 5216f1426abSMichael S. Tsirkin } 5226f1426abSMichael S. Tsirkin return MCH_HOST_BRIDGE_PCIEXBAR_DEFAULT; 5236f1426abSMichael S. Tsirkin } 5246f1426abSMichael S. Tsirkin 525c0907c9eSPaolo Bonzini static void mch_class_init(ObjectClass *klass, void *data) 526c0907c9eSPaolo Bonzini { 527c0907c9eSPaolo Bonzini PCIDeviceClass *k = PCI_DEVICE_CLASS(klass); 528c0907c9eSPaolo Bonzini DeviceClass *dc = DEVICE_CLASS(klass); 529c0907c9eSPaolo Bonzini 5309af21dbeSMarkus Armbruster k->realize = mch_realize; 531c0907c9eSPaolo Bonzini k->config_write = mch_write_config; 532c0907c9eSPaolo Bonzini dc->reset = mch_reset; 533125ee0edSMarcel Apfelbaum set_bit(DEVICE_CATEGORY_BRIDGE, dc->categories); 534c0907c9eSPaolo Bonzini dc->desc = "Host bridge"; 535c0907c9eSPaolo Bonzini dc->vmsd = &vmstate_mch; 536c0907c9eSPaolo Bonzini k->vendor_id = PCI_VENDOR_ID_INTEL; 537c0907c9eSPaolo Bonzini k->device_id = PCI_DEVICE_ID_INTEL_Q35_MCH; 538451f7846SRichard W.M. Jones k->revision = MCH_HOST_BRIDGE_REVISION_DEFAULT; 539c0907c9eSPaolo Bonzini k->class_id = PCI_CLASS_BRIDGE_HOST; 54008c58f92SMarkus Armbruster /* 54108c58f92SMarkus Armbruster * PCI-facing part of the host bridge, not usable without the 54208c58f92SMarkus Armbruster * host-facing part, which can't be device_add'ed, yet. 54308c58f92SMarkus Armbruster */ 54408c58f92SMarkus Armbruster dc->cannot_instantiate_with_device_add_yet = true; 545c0907c9eSPaolo Bonzini } 546c0907c9eSPaolo Bonzini 547c0907c9eSPaolo Bonzini static const TypeInfo mch_info = { 548c0907c9eSPaolo Bonzini .name = TYPE_MCH_PCI_DEVICE, 549c0907c9eSPaolo Bonzini .parent = TYPE_PCI_DEVICE, 550c0907c9eSPaolo Bonzini .instance_size = sizeof(MCHPCIState), 551c0907c9eSPaolo Bonzini .class_init = mch_class_init, 552c0907c9eSPaolo Bonzini }; 553c0907c9eSPaolo Bonzini 554c0907c9eSPaolo Bonzini static void q35_register(void) 555c0907c9eSPaolo Bonzini { 556c0907c9eSPaolo Bonzini type_register_static(&mch_info); 557c0907c9eSPaolo Bonzini type_register_static(&q35_host_info); 558c0907c9eSPaolo Bonzini } 559c0907c9eSPaolo Bonzini 560c0907c9eSPaolo Bonzini type_init(q35_register); 561