[qemu.git] / hw / misc / bcm2835_property.c

/*
 * Raspberry Pi emulation (c) 2012 Gregory Estrade
 * This code is licensed under the GNU GPLv2 and later.
 */

#include "qemu/osdep.h"
#include "qapi/error.h"
#include "hw/misc/bcm2835_property.h"
#include "hw/misc/bcm2835_mbox_defs.h"
#include "sysemu/dma.h"
#include "qemu/log.h"
#include "qemu/module.h"

/* https://github.com/raspberrypi/firmware/wiki/Mailbox-property-interface */

static void bcm2835_property_mbox_push(BCM2835PropertyState *s, uint32_t value)
{
    uint32_t tag;
    uint32_t bufsize;
    uint32_t tot_len;
    size_t resplen;
    uint32_t tmp;
    int n;
    uint32_t offset, length, color;

    /*
     * Copy the current state of the framebuffer config; we will update
     * this copy as we process tags and then ask the framebuffer to use
     * it at the end.
     */
    BCM2835FBConfig fbconfig = s->fbdev->config;
    bool fbconfig_updated = false;

    value &= ~0xf;

    s->addr = value;

    tot_len = ldl_le_phys(&s->dma_as, value);

    /* @(addr + 4) : Buffer response code */
    value = s->addr + 8;
    while (value + 8 <= s->addr + tot_len) {
        tag = ldl_le_phys(&s->dma_as, value);
        bufsize = ldl_le_phys(&s->dma_as, value + 4);
        /* @(value + 8) : Request/response indicator */
        resplen = 0;
        switch (tag) {
        case 0x00000000: /* End tag */
            break;
        case 0x00000001: /* Get firmware revision */
            stl_le_phys(&s->dma_as, value + 12, 346337);
            resplen = 4;
            break;
        case 0x00010001: /* Get board model */
            qemu_log_mask(LOG_UNIMP,
                          "bcm2835_property: %x get board model NYI\n", tag);
            resplen = 4;
            break;
        case 0x00010002: /* Get board revision */
            stl_le_phys(&s->dma_as, value + 12, s->board_rev);
            resplen = 4;
            break;
        case 0x00010003: /* Get board MAC address */
            resplen = sizeof(s->macaddr.a);
            dma_memory_write(&s->dma_as, value + 12, s->macaddr.a, resplen);
            break;
        case 0x00010004: /* Get board serial */
            qemu_log_mask(LOG_UNIMP,
                          "bcm2835_property: %x get board serial NYI\n", tag);
            resplen = 8;
            break;
        case 0x00010005: /* Get ARM memory */
            /* base */
            stl_le_phys(&s->dma_as, value + 12, 0);
            /* size */
            stl_le_phys(&s->dma_as, value + 16, s->fbdev->vcram_base);
            resplen = 8;
            break;
        case 0x00010006: /* Get VC memory */
            /* base */
            stl_le_phys(&s->dma_as, value + 12, s->fbdev->vcram_base);
            /* size */
            stl_le_phys(&s->dma_as, value + 16, s->fbdev->vcram_size);
            resplen = 8;
            break;
        case 0x00028001: /* Set power state */
            /* Assume that whatever device they asked for exists,
             * and we'll just claim we set it to the desired state
             */
            tmp = ldl_le_phys(&s->dma_as, value + 16);
            stl_le_phys(&s->dma_as, value + 16, (tmp & 1));
            resplen = 8;
            break;

        /* Clocks */

        case 0x00030001: /* Get clock state */
            stl_le_phys(&s->dma_as, value + 16, 0x1);
            resplen = 8;
            break;

        case 0x00038001: /* Set clock state */
            qemu_log_mask(LOG_UNIMP,
                          "bcm2835_property: %x set clock state NYI\n", tag);
            resplen = 8;
            break;

        case 0x00030002: /* Get clock rate */
        case 0x00030004: /* Get max clock rate */
        case 0x00030007: /* Get min clock rate */
            switch (ldl_le_phys(&s->dma_as, value + 12)) {
            case 1: /* EMMC */
                stl_le_phys(&s->dma_as, value + 16, 50000000);
                break;
            case 2: /* UART */
                stl_le_phys(&s->dma_as, value + 16, 3000000);
                break;
            default:
                stl_le_phys(&s->dma_as, value + 16, 700000000);
                break;
            }
            resplen = 8;
            break;

        case 0x00038002: /* Set clock rate */
        case 0x00038004: /* Set max clock rate */
        case 0x00038007: /* Set min clock rate */
            qemu_log_mask(LOG_UNIMP,
                          "bcm2835_property: %x set clock rates NYI\n", tag);
            resplen = 8;
            break;

        /* Temperature */

        case 0x00030006: /* Get temperature */
            stl_le_phys(&s->dma_as, value + 16, 25000);
            resplen = 8;
            break;

        case 0x0003000A: /* Get max temperature */
            stl_le_phys(&s->dma_as, value + 16, 99000);
            resplen = 8;
            break;

        /* Frame buffer */

        case 0x00040001: /* Allocate buffer */
            stl_le_phys(&s->dma_as, value + 12, fbconfig.base);
            stl_le_phys(&s->dma_as, value + 16,
                        bcm2835_fb_get_size(&fbconfig));
            resplen = 8;
            break;
        case 0x00048001: /* Release buffer */
            resplen = 0;
            break;
        case 0x00040002: /* Blank screen */
            resplen = 4;
            break;
        case 0x00044003: /* Test physical display width/height */
        case 0x00044004: /* Test virtual display width/height */
            resplen = 8;
            break;
        case 0x00048003: /* Set physical display width/height */
            fbconfig.xres = ldl_le_phys(&s->dma_as, value + 12);
            fbconfig.yres = ldl_le_phys(&s->dma_as, value + 16);
            bcm2835_fb_validate_config(&fbconfig);
            fbconfig_updated = true;
            /* fall through */
        case 0x00040003: /* Get physical display width/height */
            stl_le_phys(&s->dma_as, value + 12, fbconfig.xres);
            stl_le_phys(&s->dma_as, value + 16, fbconfig.yres);
            resplen = 8;
            break;
        case 0x00048004: /* Set virtual display width/height */
            fbconfig.xres_virtual = ldl_le_phys(&s->dma_as, value + 12);
            fbconfig.yres_virtual = ldl_le_phys(&s->dma_as, value + 16);
            bcm2835_fb_validate_config(&fbconfig);
            fbconfig_updated = true;
            /* fall through */
        case 0x00040004: /* Get virtual display width/height */
            stl_le_phys(&s->dma_as, value + 12, fbconfig.xres_virtual);
            stl_le_phys(&s->dma_as, value + 16, fbconfig.yres_virtual);
            resplen = 8;
            break;
        case 0x00044005: /* Test depth */
            resplen = 4;
            break;
        case 0x00048005: /* Set depth */
            fbconfig.bpp = ldl_le_phys(&s->dma_as, value + 12);
            bcm2835_fb_validate_config(&fbconfig);
            fbconfig_updated = true;
            /* fall through */
        case 0x00040005: /* Get depth */
            stl_le_phys(&s->dma_as, value + 12, fbconfig.bpp);
            resplen = 4;
            break;
        case 0x00044006: /* Test pixel order */
            resplen = 4;
            break;
        case 0x00048006: /* Set pixel order */
            fbconfig.pixo = ldl_le_phys(&s->dma_as, value + 12);
            bcm2835_fb_validate_config(&fbconfig);
            fbconfig_updated = true;
            /* fall through */
        case 0x00040006: /* Get pixel order */
            stl_le_phys(&s->dma_as, value + 12, fbconfig.pixo);
            resplen = 4;
            break;
        case 0x00044007: /* Test pixel alpha */
            resplen = 4;
            break;
        case 0x00048007: /* Set alpha */
            fbconfig.alpha = ldl_le_phys(&s->dma_as, value + 12);
            bcm2835_fb_validate_config(&fbconfig);
            fbconfig_updated = true;
            /* fall through */
        case 0x00040007: /* Get alpha */
            stl_le_phys(&s->dma_as, value + 12, fbconfig.alpha);
            resplen = 4;
            break;
        case 0x00040008: /* Get pitch */
            stl_le_phys(&s->dma_as, value + 12,
                        bcm2835_fb_get_pitch(&fbconfig));
            resplen = 4;
            break;
        case 0x00044009: /* Test virtual offset */
            resplen = 8;
            break;
        case 0x00048009: /* Set virtual offset */
            fbconfig.xoffset = ldl_le_phys(&s->dma_as, value + 12);
            fbconfig.yoffset = ldl_le_phys(&s->dma_as, value + 16);
            bcm2835_fb_validate_config(&fbconfig);
            fbconfig_updated = true;
            /* fall through */
        case 0x00040009: /* Get virtual offset */
            stl_le_phys(&s->dma_as, value + 12, fbconfig.xoffset);
            stl_le_phys(&s->dma_as, value + 16, fbconfig.yoffset);
            resplen = 8;
            break;
        case 0x0004000a: /* Get/Test/Set overscan */
        case 0x0004400a:
        case 0x0004800a:
            stl_le_phys(&s->dma_as, value + 12, 0);
            stl_le_phys(&s->dma_as, value + 16, 0);
            stl_le_phys(&s->dma_as, value + 20, 0);
            stl_le_phys(&s->dma_as, value + 24, 0);
            resplen = 16;
            break;
        case 0x0004800b: /* Set palette */
            offset = ldl_le_phys(&s->dma_as, value + 12);
            length = ldl_le_phys(&s->dma_as, value + 16);
            n = 0;
            while (n < length - offset) {
                color = ldl_le_phys(&s->dma_as, value + 20 + (n << 2));
                stl_le_phys(&s->dma_as,
                            s->fbdev->vcram_base + ((offset + n) << 2), color);
                n++;
            }
            stl_le_phys(&s->dma_as, value + 12, 0);
            resplen = 4;
            break;

        case 0x00060001: /* Get DMA channels */
            /* channels 2-5 */
            stl_le_phys(&s->dma_as, value + 12, 0x003C);
            resplen = 4;
            break;

        case 0x00050001: /* Get command line */
            resplen = 0;
            break;

        default:
            qemu_log_mask(LOG_GUEST_ERROR,
                          "bcm2835_property: unhandled tag %08x\n", tag);
            break;
        }

        if (tag == 0) {
            break;
        }

        stl_le_phys(&s->dma_as, value + 8, (1 << 31) | resplen);
        value += bufsize + 12;
    }

    /* Reconfigure framebuffer if required */
    if (fbconfig_updated) {
        bcm2835_fb_reconfigure(s->fbdev, &fbconfig);
    }

    /* Buffer response code */
    stl_le_phys(&s->dma_as, s->addr + 4, (1 << 31));
}

static uint64_t bcm2835_property_read(void *opaque, hwaddr offset,
                                      unsigned size)
{
    BCM2835PropertyState *s = opaque;
    uint32_t res = 0;

    switch (offset) {
    case MBOX_AS_DATA:
        res = MBOX_CHAN_PROPERTY | s->addr;
        s->pending = false;
        qemu_set_irq(s->mbox_irq, 0);
        break;

    case MBOX_AS_PENDING:
        res = s->pending;
        break;

    default:
        qemu_log_mask(LOG_GUEST_ERROR, "%s: Bad offset %"HWADDR_PRIx"\n",
                      __func__, offset);
        return 0;
    }

    return res;
}

static void bcm2835_property_write(void *opaque, hwaddr offset,
                                   uint64_t value, unsigned size)
{
    BCM2835PropertyState *s = opaque;

    switch (offset) {
    case MBOX_AS_DATA:
        /* bcm2835_mbox should check our pending status before pushing */
        assert(!s->pending);
        s->pending = true;
        bcm2835_property_mbox_push(s, value);
        qemu_set_irq(s->mbox_irq, 1);
        break;

    default:
        qemu_log_mask(LOG_GUEST_ERROR, "%s: Bad offset %"HWADDR_PRIx"\n",
                      __func__, offset);
        return;
    }
}

static const MemoryRegionOps bcm2835_property_ops = {
    .read = bcm2835_property_read,
    .write = bcm2835_property_write,
    .endianness = DEVICE_NATIVE_ENDIAN,
    .valid.min_access_size = 4,
    .valid.max_access_size = 4,
};

static const VMStateDescription vmstate_bcm2835_property = {
    .name = TYPE_BCM2835_PROPERTY,
    .version_id = 1,
    .minimum_version_id = 1,
    .fields      = (VMStateField[]) {
        VMSTATE_MACADDR(macaddr, BCM2835PropertyState),
        VMSTATE_UINT32(addr, BCM2835PropertyState),
        VMSTATE_BOOL(pending, BCM2835PropertyState),
        VMSTATE_END_OF_LIST()
    }
};

static void bcm2835_property_init(Object *obj)
{
    BCM2835PropertyState *s = BCM2835_PROPERTY(obj);

    memory_region_init_io(&s->iomem, OBJECT(s), &bcm2835_property_ops, s,
                          TYPE_BCM2835_PROPERTY, 0x10);
    sysbus_init_mmio(SYS_BUS_DEVICE(s), &s->iomem);
    sysbus_init_irq(SYS_BUS_DEVICE(s), &s->mbox_irq);
}

static void bcm2835_property_reset(DeviceState *dev)
{
    BCM2835PropertyState *s = BCM2835_PROPERTY(dev);

    s->pending = false;
}

static void bcm2835_property_realize(DeviceState *dev, Error **errp)
{
    BCM2835PropertyState *s = BCM2835_PROPERTY(dev);
    Object *obj;
    Error *err = NULL;

    obj = object_property_get_link(OBJECT(dev), "fb", &err);
    if (obj == NULL) {
        error_setg(errp, "%s: required fb link not found: %s",
                   __func__, error_get_pretty(err));
        return;
    }

    s->fbdev = BCM2835_FB(obj);

    obj = object_property_get_link(OBJECT(dev), "dma-mr", &err);
    if (obj == NULL) {
        error_setg(errp, "%s: required dma-mr link not found: %s",
                   __func__, error_get_pretty(err));
        return;
    }

    s->dma_mr = MEMORY_REGION(obj);
    address_space_init(&s->dma_as, s->dma_mr, NULL);

    /* TODO: connect to MAC address of USB NIC device, once we emulate it */
    qemu_macaddr_default_if_unset(&s->macaddr);

    bcm2835_property_reset(dev);
}

static Property bcm2835_property_props[] = {
    DEFINE_PROP_UINT32("board-rev", BCM2835PropertyState, board_rev, 0),
    DEFINE_PROP_END_OF_LIST()
};

static void bcm2835_property_class_init(ObjectClass *klass, void *data)
{
    DeviceClass *dc = DEVICE_CLASS(klass);

    dc->props = bcm2835_property_props;
    dc->realize = bcm2835_property_realize;
    dc->vmsd = &vmstate_bcm2835_property;
}

static TypeInfo bcm2835_property_info = {
    .name          = TYPE_BCM2835_PROPERTY,
    .parent        = TYPE_SYS_BUS_DEVICE,
    .instance_size = sizeof(BCM2835PropertyState),
    .class_init    = bcm2835_property_class_init,
    .instance_init = bcm2835_property_init,
};

static void bcm2835_property_register_types(void)
{
    type_register_static(&bcm2835_property_info);
}

type_init(bcm2835_property_register_types)
Commit	Line	Data
04f1ab15 AB	1	/*
	2	* Raspberry Pi emulation (c) 2012 Gregory Estrade
	3	* This code is licensed under the GNU GPLv2 and later.
	4	*/
	5
c964b660	6	#include "qemu/osdep.h"
da34e65c	7	#include "qapi/error.h"
04f1ab15 AB	8	#include "hw/misc/bcm2835_property.h"
	9	#include "hw/misc/bcm2835_mbox_defs.h"
	10	#include "sysemu/dma.h"
03dd024f	11	#include "qemu/log.h"
0b8fa32f	12	#include "qemu/module.h"
04f1ab15 AB	13
	14	/* https://github.com/raspberrypi/firmware/wiki/Mailbox-property-interface */
	15
	16	static void bcm2835_property_mbox_push(BCM2835PropertyState *s, uint32_t value)
	17	{
	18	uint32_t tag;
	19	uint32_t bufsize;
	20	uint32_t tot_len;
	21	size_t resplen;
	22	uint32_t tmp;
355a8ccc GE	23	int n;
355a8ccc GE	24	uint32_t offset, length, color;
193100b5 PM	25
	26	/*
	27	* Copy the current state of the framebuffer config; we will update
	28	* this copy as we process tags and then ask the framebuffer to use
	29	* it at the end.
	30	*/
	31	BCM2835FBConfig fbconfig = s->fbdev->config;
	32	bool fbconfig_updated = false;
04f1ab15 AB	33
	34	value &= ~0xf;
	35
	36	s->addr = value;
	37
eab71394	38	tot_len = ldl_le_phys(&s->dma_as, value);
04f1ab15 AB	39
	40	/* @(addr + 4) : Buffer response code */
	41	value = s->addr + 8;
	42	while (value + 8 <= s->addr + tot_len) {
eab71394 AB	43	tag = ldl_le_phys(&s->dma_as, value);
eab71394 AB	44	bufsize = ldl_le_phys(&s->dma_as, value + 4);
04f1ab15 AB	45	/* @(value + 8) : Request/response indicator */
	46	resplen = 0;
	47	switch (tag) {
	48	case 0x00000000: /* End tag */
	49	break;
	50	case 0x00000001: /* Get firmware revision */
eab71394	51	stl_le_phys(&s->dma_as, value + 12, 346337);
04f1ab15 AB	52	resplen = 4;
	53	break;
	54	case 0x00010001: /* Get board model */
	55	qemu_log_mask(LOG_UNIMP,
	56	"bcm2835_property: %x get board model NYI\n", tag);
	57	resplen = 4;
	58	break;
	59	case 0x00010002: /* Get board revision */
eab71394	60	stl_le_phys(&s->dma_as, value + 12, s->board_rev);
04f1ab15 AB	61	resplen = 4;
	62	break;
	63	case 0x00010003: /* Get board MAC address */
	64	resplen = sizeof(s->macaddr.a);
	65	dma_memory_write(&s->dma_as, value + 12, s->macaddr.a, resplen);
	66	break;
	67	case 0x00010004: /* Get board serial */
	68	qemu_log_mask(LOG_UNIMP,
	69	"bcm2835_property: %x get board serial NYI\n", tag);
	70	resplen = 8;
	71	break;
	72	case 0x00010005: /* Get ARM memory */
	73	/* base */
eab71394	74	stl_le_phys(&s->dma_as, value + 12, 0);
04f1ab15	75	/* size */
355a8ccc GE	76	stl_le_phys(&s->dma_as, value + 16, s->fbdev->vcram_base);
	77	resplen = 8;
	78	break;
	79	case 0x00010006: /* Get VC memory */
	80	/* base */
	81	stl_le_phys(&s->dma_as, value + 12, s->fbdev->vcram_base);
	82	/* size */
	83	stl_le_phys(&s->dma_as, value + 16, s->fbdev->vcram_size);
04f1ab15 AB	84	resplen = 8;
	85	break;
	86	case 0x00028001: /* Set power state */
	87	/* Assume that whatever device they asked for exists,
	88	* and we'll just claim we set it to the desired state
	89	*/
eab71394 AB	90	tmp = ldl_le_phys(&s->dma_as, value + 16);
eab71394 AB	91	stl_le_phys(&s->dma_as, value + 16, (tmp & 1));
04f1ab15 AB	92	resplen = 8;
	93	break;
	94
	95	/* Clocks */
	96
	97	case 0x00030001: /* Get clock state */
eab71394	98	stl_le_phys(&s->dma_as, value + 16, 0x1);
04f1ab15 AB	99	resplen = 8;
	100	break;
	101
	102	case 0x00038001: /* Set clock state */
	103	qemu_log_mask(LOG_UNIMP,
	104	"bcm2835_property: %x set clock state NYI\n", tag);
	105	resplen = 8;
	106	break;
	107
	108	case 0x00030002: /* Get clock rate */
	109	case 0x00030004: /* Get max clock rate */
	110	case 0x00030007: /* Get min clock rate */
eab71394	111	switch (ldl_le_phys(&s->dma_as, value + 12)) {
04f1ab15	112	case 1: /* EMMC */
eab71394	113	stl_le_phys(&s->dma_as, value + 16, 50000000);
04f1ab15 AB	114	break;
04f1ab15 AB	115	case 2: /* UART */
eab71394	116	stl_le_phys(&s->dma_as, value + 16, 3000000);
04f1ab15 AB	117	break;
04f1ab15 AB	118	default:
eab71394	119	stl_le_phys(&s->dma_as, value + 16, 700000000);
04f1ab15 AB	120	break;
	121	}
	122	resplen = 8;
	123	break;
	124
	125	case 0x00038002: /* Set clock rate */
	126	case 0x00038004: /* Set max clock rate */
	127	case 0x00038007: /* Set min clock rate */
	128	qemu_log_mask(LOG_UNIMP,
	129	"bcm2835_property: %x set clock rates NYI\n", tag);
	130	resplen = 8;
	131	break;
	132
	133	/* Temperature */
	134
	135	case 0x00030006: /* Get temperature */
eab71394	136	stl_le_phys(&s->dma_as, value + 16, 25000);
04f1ab15 AB	137	resplen = 8;
	138	break;
	139
	140	case 0x0003000A: /* Get max temperature */
eab71394	141	stl_le_phys(&s->dma_as, value + 16, 99000);
04f1ab15 AB	142	resplen = 8;
	143	break;
	144
355a8ccc GE	145	/* Frame buffer */
	146
	147	case 0x00040001: /* Allocate buffer */
193100b5	148	stl_le_phys(&s->dma_as, value + 12, fbconfig.base);
27a5dc7b	149	stl_le_phys(&s->dma_as, value + 16,
9a1f03f4	150	bcm2835_fb_get_size(&fbconfig));
355a8ccc GE	151	resplen = 8;
	152	break;
	153	case 0x00048001: /* Release buffer */
	154	resplen = 0;
	155	break;
	156	case 0x00040002: /* Blank screen */
	157	resplen = 4;
	158	break;
01f18af9 PM	159	case 0x00044003: /* Test physical display width/height */
	160	case 0x00044004: /* Test virtual display width/height */
	161	resplen = 8;
	162	break;
	163	case 0x00048003: /* Set physical display width/height */
193100b5 PM	164	fbconfig.xres = ldl_le_phys(&s->dma_as, value + 12);
193100b5 PM	165	fbconfig.yres = ldl_le_phys(&s->dma_as, value + 16);
f8add62c	166	bcm2835_fb_validate_config(&fbconfig);
193100b5	167	fbconfig_updated = true;
f8add62c PM	168	/* fall through */
	169	case 0x00040003: /* Get physical display width/height */
	170	stl_le_phys(&s->dma_as, value + 12, fbconfig.xres);
	171	stl_le_phys(&s->dma_as, value + 16, fbconfig.yres);
355a8ccc GE	172	resplen = 8;
355a8ccc GE	173	break;
01f18af9 PM	174	case 0x00048004: /* Set virtual display width/height */
	175	fbconfig.xres_virtual = ldl_le_phys(&s->dma_as, value + 12);
	176	fbconfig.yres_virtual = ldl_le_phys(&s->dma_as, value + 16);
f8add62c	177	bcm2835_fb_validate_config(&fbconfig);
01f18af9	178	fbconfig_updated = true;
f8add62c PM	179	/* fall through */
	180	case 0x00040004: /* Get virtual display width/height */
	181	stl_le_phys(&s->dma_as, value + 12, fbconfig.xres_virtual);
	182	stl_le_phys(&s->dma_as, value + 16, fbconfig.yres_virtual);
01f18af9 PM	183	resplen = 8;
01f18af9 PM	184	break;
355a8ccc GE	185	case 0x00044005: /* Test depth */
	186	resplen = 4;
	187	break;
	188	case 0x00048005: /* Set depth */
193100b5	189	fbconfig.bpp = ldl_le_phys(&s->dma_as, value + 12);
f8add62c	190	bcm2835_fb_validate_config(&fbconfig);
193100b5	191	fbconfig_updated = true;
f8add62c PM	192	/* fall through */
	193	case 0x00040005: /* Get depth */
	194	stl_le_phys(&s->dma_as, value + 12, fbconfig.bpp);
355a8ccc GE	195	resplen = 4;
	196	break;
	197	case 0x00044006: /* Test pixel order */
	198	resplen = 4;
	199	break;
	200	case 0x00048006: /* Set pixel order */
193100b5	201	fbconfig.pixo = ldl_le_phys(&s->dma_as, value + 12);
f8add62c	202	bcm2835_fb_validate_config(&fbconfig);
193100b5	203	fbconfig_updated = true;
f8add62c PM	204	/* fall through */
	205	case 0x00040006: /* Get pixel order */
	206	stl_le_phys(&s->dma_as, value + 12, fbconfig.pixo);
355a8ccc GE	207	resplen = 4;
	208	break;
	209	case 0x00044007: /* Test pixel alpha */
	210	resplen = 4;
	211	break;
	212	case 0x00048007: /* Set alpha */
193100b5	213	fbconfig.alpha = ldl_le_phys(&s->dma_as, value + 12);
f8add62c	214	bcm2835_fb_validate_config(&fbconfig);
193100b5	215	fbconfig_updated = true;
f8add62c PM	216	/* fall through */
	217	case 0x00040007: /* Get alpha */
	218	stl_le_phys(&s->dma_as, value + 12, fbconfig.alpha);
355a8ccc GE	219	resplen = 4;
	220	break;
	221	case 0x00040008: /* Get pitch */
193100b5	222	stl_le_phys(&s->dma_as, value + 12,
9a1f03f4	223	bcm2835_fb_get_pitch(&fbconfig));
355a8ccc GE	224	resplen = 4;
355a8ccc GE	225	break;
355a8ccc GE	226	case 0x00044009: /* Test virtual offset */
	227	resplen = 8;
	228	break;
	229	case 0x00048009: /* Set virtual offset */
193100b5 PM	230	fbconfig.xoffset = ldl_le_phys(&s->dma_as, value + 12);
193100b5 PM	231	fbconfig.yoffset = ldl_le_phys(&s->dma_as, value + 16);
f8add62c	232	bcm2835_fb_validate_config(&fbconfig);
193100b5	233	fbconfig_updated = true;
f8add62c PM	234	/* fall through */
	235	case 0x00040009: /* Get virtual offset */
	236	stl_le_phys(&s->dma_as, value + 12, fbconfig.xoffset);
	237	stl_le_phys(&s->dma_as, value + 16, fbconfig.yoffset);
355a8ccc GE	238	resplen = 8;
	239	break;
	240	case 0x0004000a: /* Get/Test/Set overscan */
	241	case 0x0004400a:
	242	case 0x0004800a:
	243	stl_le_phys(&s->dma_as, value + 12, 0);
	244	stl_le_phys(&s->dma_as, value + 16, 0);
	245	stl_le_phys(&s->dma_as, value + 20, 0);
	246	stl_le_phys(&s->dma_as, value + 24, 0);
	247	resplen = 16;
	248	break;
	249	case 0x0004800b: /* Set palette */
	250	offset = ldl_le_phys(&s->dma_as, value + 12);
	251	length = ldl_le_phys(&s->dma_as, value + 16);
	252	n = 0;
	253	while (n < length - offset) {
	254	color = ldl_le_phys(&s->dma_as, value + 20 + (n << 2));
	255	stl_le_phys(&s->dma_as,
	256	s->fbdev->vcram_base + ((offset + n) << 2), color);
	257	n++;
	258	}
	259	stl_le_phys(&s->dma_as, value + 12, 0);
	260	resplen = 4;
	261	break;
04f1ab15 AB	262
	263	case 0x00060001: /* Get DMA channels */
	264	/* channels 2-5 */
eab71394	265	stl_le_phys(&s->dma_as, value + 12, 0x003C);
04f1ab15 AB	266	resplen = 4;
	267	break;
	268
	269	case 0x00050001: /* Get command line */
	270	resplen = 0;
	271	break;
	272
	273	default:
	274	qemu_log_mask(LOG_GUEST_ERROR,
	275	"bcm2835_property: unhandled tag %08x\n", tag);
	276	break;
	277	}
	278
	279	if (tag == 0) {
	280	break;
	281	}
	282
eab71394	283	stl_le_phys(&s->dma_as, value + 8, (1 << 31) \| resplen);
04f1ab15 AB	284	value += bufsize + 12;
	285	}
	286
355a8ccc	287	/* Reconfigure framebuffer if required */
193100b5 PM	288	if (fbconfig_updated) {
193100b5 PM	289	bcm2835_fb_reconfigure(s->fbdev, &fbconfig);
355a8ccc GE	290	}
355a8ccc GE	291
04f1ab15	292	/* Buffer response code */
eab71394	293	stl_le_phys(&s->dma_as, s->addr + 4, (1 << 31));
04f1ab15 AB	294	}
	295
	296	static uint64_t bcm2835_property_read(void *opaque, hwaddr offset,
	297	unsigned size)
	298	{
	299	BCM2835PropertyState *s = opaque;
	300	uint32_t res = 0;
	301
	302	switch (offset) {
	303	case MBOX_AS_DATA:
	304	res = MBOX_CHAN_PROPERTY \| s->addr;
	305	s->pending = false;
	306	qemu_set_irq(s->mbox_irq, 0);
	307	break;
	308
	309	case MBOX_AS_PENDING:
	310	res = s->pending;
	311	break;
	312
	313	default:
	314	qemu_log_mask(LOG_GUEST_ERROR, "%s: Bad offset %"HWADDR_PRIx"\n",
	315	__func__, offset);
	316	return 0;
	317	}
	318
	319	return res;
	320	}
	321
	322	static void bcm2835_property_write(void *opaque, hwaddr offset,
	323	uint64_t value, unsigned size)
	324	{
	325	BCM2835PropertyState *s = opaque;
	326
	327	switch (offset) {
	328	case MBOX_AS_DATA:
	329	/* bcm2835_mbox should check our pending status before pushing */
	330	assert(!s->pending);
	331	s->pending = true;
	332	bcm2835_property_mbox_push(s, value);
	333	qemu_set_irq(s->mbox_irq, 1);
	334	break;
	335
	336	default:
	337	qemu_log_mask(LOG_GUEST_ERROR, "%s: Bad offset %"HWADDR_PRIx"\n",
	338	__func__, offset);
	339	return;
	340	}
	341	}
	342
	343	static const MemoryRegionOps bcm2835_property_ops = {
	344	.read = bcm2835_property_read,
	345	.write = bcm2835_property_write,
	346	.endianness = DEVICE_NATIVE_ENDIAN,
	347	.valid.min_access_size = 4,
	348	.valid.max_access_size = 4,
	349	};
	350
	351	static const VMStateDescription vmstate_bcm2835_property = {
	352	.name = TYPE_BCM2835_PROPERTY,
	353	.version_id = 1,
	354	.minimum_version_id = 1,
	355	.fields = (VMStateField[]) {
	356	VMSTATE_MACADDR(macaddr, BCM2835PropertyState),
	357	VMSTATE_UINT32(addr, BCM2835PropertyState),
358	VMSTATE_BOOL(pending, BCM2835PropertyState),
359	VMSTATE_END_OF_LIST()
360	}
361	};
362
363	static void bcm2835_property_init(Object *obj)
364	{
365	BCM2835PropertyState *s = BCM2835_PROPERTY(obj);
366
367	memory_region_init_io(&s->iomem, OBJECT(s), &bcm2835_property_ops, s,
368	TYPE_BCM2835_PROPERTY, 0x10);
369	sysbus_init_mmio(SYS_BUS_DEVICE(s), &s->iomem);
370	sysbus_init_irq(SYS_BUS_DEVICE(s), &s->mbox_irq);
371	}
372
373	static void bcm2835_property_reset(DeviceState *dev)
374	{
375	BCM2835PropertyState *s = BCM2835_PROPERTY(dev);
376
377	s->pending = false;
378	}
379
380	static void bcm2835_property_realize(DeviceState dev, Error *errp)
381	{
382	BCM2835PropertyState *s = BCM2835_PROPERTY(dev);
383	Object *obj;
384	Error *err = NULL;
385
355a8ccc GE	386	obj = object_property_get_link(OBJECT(dev), "fb", &err);
	387	if (obj == NULL) {
	388	error_setg(errp, "%s: required fb link not found: %s",
	389	__func__, error_get_pretty(err));
	390	return;
	391	}
	392
	393	s->fbdev = BCM2835_FB(obj);
	394
04f1ab15 AB	395	obj = object_property_get_link(OBJECT(dev), "dma-mr", &err);
	396	if (obj == NULL) {
	397	error_setg(errp, "%s: required dma-mr link not found: %s",
	398	__func__, error_get_pretty(err));
	399	return;
	400	}
	401
	402	s->dma_mr = MEMORY_REGION(obj);
	403	address_space_init(&s->dma_as, s->dma_mr, NULL);
	404
	405	/* TODO: connect to MAC address of USB NIC device, once we emulate it */
	406	qemu_macaddr_default_if_unset(&s->macaddr);
	407
	408	bcm2835_property_reset(dev);
	409	}
	410
	411	static Property bcm2835_property_props[] = {
f0afa731	412	DEFINE_PROP_UINT32("board-rev", BCM2835PropertyState, board_rev, 0),
04f1ab15 AB	413	DEFINE_PROP_END_OF_LIST()
	414	};
	415
	416	static void bcm2835_property_class_init(ObjectClass klass, void data)
	417	{
	418	DeviceClass *dc = DEVICE_CLASS(klass);
	419
	420	dc->props = bcm2835_property_props;
	421	dc->realize = bcm2835_property_realize;
	422	dc->vmsd = &vmstate_bcm2835_property;
	423	}
	424
	425	static TypeInfo bcm2835_property_info = {
	426	.name = TYPE_BCM2835_PROPERTY,
	427	.parent = TYPE_SYS_BUS_DEVICE,
	428	.instance_size = sizeof(BCM2835PropertyState),
	429	.class_init = bcm2835_property_class_init,
	430	.instance_init = bcm2835_property_init,
	431	};
	432
	433	static void bcm2835_property_register_types(void)
	434	{
	435	type_register_static(&bcm2835_property_info);
	436	}
	437
	438	type_init(bcm2835_property_register_types)