]> Git Repo - qemu.git/blame - tests/ide-test.c
QJSON: Use OBJECT_CHECK
[qemu.git] / tests / ide-test.c
CommitLineData
acbe4801
KW
1/*
2 * IDE test cases
3 *
4 * Copyright (c) 2013 Kevin Wolf <[email protected]>
5 *
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
12 *
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
15 *
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
23 */
24
25#include <stdint.h>
26#include <string.h>
27#include <stdio.h>
28
29#include <glib.h>
30
31#include "libqtest.h"
72c85e94 32#include "libqos/libqos.h"
b95739dc
KW
33#include "libqos/pci-pc.h"
34#include "libqos/malloc-pc.h"
acbe4801
KW
35
36#include "qemu-common.h"
b95739dc
KW
37#include "hw/pci/pci_ids.h"
38#include "hw/pci/pci_regs.h"
acbe4801
KW
39
40#define TEST_IMAGE_SIZE 64 * 1024 * 1024
41
42#define IDE_PCI_DEV 1
43#define IDE_PCI_FUNC 1
44
45#define IDE_BASE 0x1f0
46#define IDE_PRIMARY_IRQ 14
47
48enum {
49 reg_data = 0x0,
50 reg_nsectors = 0x2,
51 reg_lba_low = 0x3,
52 reg_lba_middle = 0x4,
53 reg_lba_high = 0x5,
54 reg_device = 0x6,
55 reg_status = 0x7,
56 reg_command = 0x7,
57};
58
59enum {
60 BSY = 0x80,
61 DRDY = 0x40,
62 DF = 0x20,
63 DRQ = 0x08,
64 ERR = 0x01,
65};
66
67enum {
c27d5656 68 DEV = 0x10,
b95739dc
KW
69 LBA = 0x40,
70};
71
72enum {
73 bmreg_cmd = 0x0,
74 bmreg_status = 0x2,
75 bmreg_prdt = 0x4,
76};
77
78enum {
79 CMD_READ_DMA = 0xc8,
80 CMD_WRITE_DMA = 0xca,
bd07684a 81 CMD_FLUSH_CACHE = 0xe7,
acbe4801 82 CMD_IDENTIFY = 0xec,
948eaed1
KW
83
84 CMDF_ABORT = 0x100,
d7b7e580 85 CMDF_NO_BM = 0x200,
acbe4801
KW
86};
87
b95739dc
KW
88enum {
89 BM_CMD_START = 0x1,
90 BM_CMD_WRITE = 0x8, /* write = from device to memory */
91};
92
93enum {
94 BM_STS_ACTIVE = 0x1,
95 BM_STS_ERROR = 0x2,
96 BM_STS_INTR = 0x4,
97};
98
99enum {
100 PRDT_EOT = 0x80000000,
101};
102
acbe4801
KW
103#define assert_bit_set(data, mask) g_assert_cmphex((data) & (mask), ==, (mask))
104#define assert_bit_clear(data, mask) g_assert_cmphex((data) & (mask), ==, 0)
105
b95739dc
KW
106static QPCIBus *pcibus = NULL;
107static QGuestAllocator *guest_malloc;
108
acbe4801 109static char tmp_path[] = "/tmp/qtest.XXXXXX";
14a92e5f 110static char debug_path[] = "/tmp/qtest-blkdebug.XXXXXX";
acbe4801
KW
111
112static void ide_test_start(const char *cmdline_fmt, ...)
113{
114 va_list ap;
115 char *cmdline;
116
117 va_start(ap, cmdline_fmt);
118 cmdline = g_strdup_vprintf(cmdline_fmt, ap);
119 va_end(ap);
120
121 qtest_start(cmdline);
b95739dc 122 guest_malloc = pc_alloc_init();
e42de189
JS
123
124 g_free(cmdline);
acbe4801
KW
125}
126
127static void ide_test_quit(void)
128{
0142f88b
JS
129 pc_alloc_uninit(guest_malloc);
130 guest_malloc = NULL;
1d9358e6 131 qtest_end();
acbe4801
KW
132}
133
b95739dc
KW
134static QPCIDevice *get_pci_device(uint16_t *bmdma_base)
135{
136 QPCIDevice *dev;
137 uint16_t vendor_id, device_id;
138
139 if (!pcibus) {
140 pcibus = qpci_init_pc();
141 }
142
143 /* Find PCI device and verify it's the right one */
144 dev = qpci_device_find(pcibus, QPCI_DEVFN(IDE_PCI_DEV, IDE_PCI_FUNC));
145 g_assert(dev != NULL);
146
147 vendor_id = qpci_config_readw(dev, PCI_VENDOR_ID);
148 device_id = qpci_config_readw(dev, PCI_DEVICE_ID);
149 g_assert(vendor_id == PCI_VENDOR_ID_INTEL);
150 g_assert(device_id == PCI_DEVICE_ID_INTEL_82371SB_1);
151
152 /* Map bmdma BAR */
6ce7100e 153 *bmdma_base = (uint16_t)(uintptr_t) qpci_iomap(dev, 4, NULL);
b95739dc
KW
154
155 qpci_device_enable(dev);
156
157 return dev;
158}
159
160static void free_pci_device(QPCIDevice *dev)
161{
162 /* libqos doesn't have a function for this, so free it manually */
163 g_free(dev);
164}
165
166typedef struct PrdtEntry {
167 uint32_t addr;
168 uint32_t size;
169} QEMU_PACKED PrdtEntry;
170
171#define assert_bit_set(data, mask) g_assert_cmphex((data) & (mask), ==, (mask))
172#define assert_bit_clear(data, mask) g_assert_cmphex((data) & (mask), ==, 0)
173
174static int send_dma_request(int cmd, uint64_t sector, int nb_sectors,
175 PrdtEntry *prdt, int prdt_entries)
176{
177 QPCIDevice *dev;
178 uint16_t bmdma_base;
179 uintptr_t guest_prdt;
180 size_t len;
181 bool from_dev;
182 uint8_t status;
948eaed1 183 int flags;
b95739dc
KW
184
185 dev = get_pci_device(&bmdma_base);
186
948eaed1
KW
187 flags = cmd & ~0xff;
188 cmd &= 0xff;
189
b95739dc
KW
190 switch (cmd) {
191 case CMD_READ_DMA:
192 from_dev = true;
193 break;
194 case CMD_WRITE_DMA:
195 from_dev = false;
196 break;
197 default:
198 g_assert_not_reached();
199 }
200
d7b7e580
KW
201 if (flags & CMDF_NO_BM) {
202 qpci_config_writew(dev, PCI_COMMAND,
203 PCI_COMMAND_IO | PCI_COMMAND_MEMORY);
204 }
205
b95739dc
KW
206 /* Select device 0 */
207 outb(IDE_BASE + reg_device, 0 | LBA);
208
209 /* Stop any running transfer, clear any pending interrupt */
210 outb(bmdma_base + bmreg_cmd, 0);
211 outb(bmdma_base + bmreg_status, BM_STS_INTR);
212
213 /* Setup PRDT */
214 len = sizeof(*prdt) * prdt_entries;
215 guest_prdt = guest_alloc(guest_malloc, len);
216 memwrite(guest_prdt, prdt, len);
217 outl(bmdma_base + bmreg_prdt, guest_prdt);
218
219 /* ATA DMA command */
220 outb(IDE_BASE + reg_nsectors, nb_sectors);
221
222 outb(IDE_BASE + reg_lba_low, sector & 0xff);
223 outb(IDE_BASE + reg_lba_middle, (sector >> 8) & 0xff);
224 outb(IDE_BASE + reg_lba_high, (sector >> 16) & 0xff);
225
226 outb(IDE_BASE + reg_command, cmd);
227
228 /* Start DMA transfer */
229 outb(bmdma_base + bmreg_cmd, BM_CMD_START | (from_dev ? BM_CMD_WRITE : 0));
230
948eaed1
KW
231 if (flags & CMDF_ABORT) {
232 outb(bmdma_base + bmreg_cmd, 0);
233 }
234
b95739dc
KW
235 /* Wait for the DMA transfer to complete */
236 do {
237 status = inb(bmdma_base + bmreg_status);
238 } while ((status & (BM_STS_ACTIVE | BM_STS_INTR)) == BM_STS_ACTIVE);
239
240 g_assert_cmpint(get_irq(IDE_PRIMARY_IRQ), ==, !!(status & BM_STS_INTR));
241
242 /* Check IDE status code */
243 assert_bit_set(inb(IDE_BASE + reg_status), DRDY);
244 assert_bit_clear(inb(IDE_BASE + reg_status), BSY | DRQ);
245
246 /* Reading the status register clears the IRQ */
247 g_assert(!get_irq(IDE_PRIMARY_IRQ));
248
249 /* Stop DMA transfer if still active */
250 if (status & BM_STS_ACTIVE) {
251 outb(bmdma_base + bmreg_cmd, 0);
252 }
253
254 free_pci_device(dev);
255
256 return status;
257}
258
259static void test_bmdma_simple_rw(void)
260{
261 uint8_t status;
262 uint8_t *buf;
263 uint8_t *cmpbuf;
264 size_t len = 512;
265 uintptr_t guest_buf = guest_alloc(guest_malloc, len);
266
267 PrdtEntry prdt[] = {
262f27b9
KW
268 {
269 .addr = cpu_to_le32(guest_buf),
270 .size = cpu_to_le32(len | PRDT_EOT),
271 },
b95739dc
KW
272 };
273
274 buf = g_malloc(len);
275 cmpbuf = g_malloc(len);
276
277 /* Write 0x55 pattern to sector 0 */
278 memset(buf, 0x55, len);
279 memwrite(guest_buf, buf, len);
280
281 status = send_dma_request(CMD_WRITE_DMA, 0, 1, prdt, ARRAY_SIZE(prdt));
282 g_assert_cmphex(status, ==, BM_STS_INTR);
283 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
284
285 /* Write 0xaa pattern to sector 1 */
286 memset(buf, 0xaa, len);
287 memwrite(guest_buf, buf, len);
288
289 status = send_dma_request(CMD_WRITE_DMA, 1, 1, prdt, ARRAY_SIZE(prdt));
290 g_assert_cmphex(status, ==, BM_STS_INTR);
291 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
292
293 /* Read and verify 0x55 pattern in sector 0 */
294 memset(cmpbuf, 0x55, len);
295
296 status = send_dma_request(CMD_READ_DMA, 0, 1, prdt, ARRAY_SIZE(prdt));
297 g_assert_cmphex(status, ==, BM_STS_INTR);
298 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
299
300 memread(guest_buf, buf, len);
301 g_assert(memcmp(buf, cmpbuf, len) == 0);
302
303 /* Read and verify 0xaa pattern in sector 1 */
304 memset(cmpbuf, 0xaa, len);
305
306 status = send_dma_request(CMD_READ_DMA, 1, 1, prdt, ARRAY_SIZE(prdt));
307 g_assert_cmphex(status, ==, BM_STS_INTR);
308 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
309
310 memread(guest_buf, buf, len);
311 g_assert(memcmp(buf, cmpbuf, len) == 0);
312
313
314 g_free(buf);
315 g_free(cmpbuf);
316}
317
948eaed1
KW
318static void test_bmdma_short_prdt(void)
319{
320 uint8_t status;
321
322 PrdtEntry prdt[] = {
262f27b9
KW
323 {
324 .addr = 0,
325 .size = cpu_to_le32(0x10 | PRDT_EOT),
326 },
948eaed1
KW
327 };
328
329 /* Normal request */
330 status = send_dma_request(CMD_READ_DMA, 0, 1,
331 prdt, ARRAY_SIZE(prdt));
332 g_assert_cmphex(status, ==, 0);
333 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
334
335 /* Abort the request before it completes */
336 status = send_dma_request(CMD_READ_DMA | CMDF_ABORT, 0, 1,
337 prdt, ARRAY_SIZE(prdt));
338 g_assert_cmphex(status, ==, 0);
339 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
340}
341
342static void test_bmdma_long_prdt(void)
343{
344 uint8_t status;
345
346 PrdtEntry prdt[] = {
262f27b9
KW
347 {
348 .addr = 0,
349 .size = cpu_to_le32(0x1000 | PRDT_EOT),
350 },
948eaed1
KW
351 };
352
353 /* Normal request */
354 status = send_dma_request(CMD_READ_DMA, 0, 1,
355 prdt, ARRAY_SIZE(prdt));
356 g_assert_cmphex(status, ==, BM_STS_ACTIVE | BM_STS_INTR);
357 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
358
359 /* Abort the request before it completes */
360 status = send_dma_request(CMD_READ_DMA | CMDF_ABORT, 0, 1,
361 prdt, ARRAY_SIZE(prdt));
362 g_assert_cmphex(status, ==, BM_STS_INTR);
363 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
364}
365
d7b7e580
KW
366static void test_bmdma_no_busmaster(void)
367{
368 uint8_t status;
369
370 /* No PRDT_EOT, each entry addr 0/size 64k, and in theory qemu shouldn't be
371 * able to access it anyway because the Bus Master bit in the PCI command
372 * register isn't set. This is complete nonsense, but it used to be pretty
373 * good at confusing and occasionally crashing qemu. */
374 PrdtEntry prdt[4096] = { };
375
376 status = send_dma_request(CMD_READ_DMA | CMDF_NO_BM, 0, 512,
377 prdt, ARRAY_SIZE(prdt));
378
379 /* Not entirely clear what the expected result is, but this is what we get
380 * in practice. At least we want to be aware of any changes. */
381 g_assert_cmphex(status, ==, BM_STS_ACTIVE | BM_STS_INTR);
382 assert_bit_clear(inb(IDE_BASE + reg_status), DF | ERR);
383}
384
b95739dc
KW
385static void test_bmdma_setup(void)
386{
387 ide_test_start(
b8e665e4 388 "-drive file=%s,if=ide,serial=%s,cache=writeback,format=raw "
b95739dc
KW
389 "-global ide-hd.ver=%s",
390 tmp_path, "testdisk", "version");
baca2b9e 391 qtest_irq_intercept_in(global_qtest, "ioapic");
b95739dc
KW
392}
393
394static void test_bmdma_teardown(void)
395{
396 ide_test_quit();
397}
398
262f27b9
KW
399static void string_cpu_to_be16(uint16_t *s, size_t bytes)
400{
401 g_assert((bytes & 1) == 0);
402 bytes /= 2;
403
404 while (bytes--) {
405 *s = cpu_to_be16(*s);
406 s++;
407 }
408}
409
acbe4801
KW
410static void test_identify(void)
411{
412 uint8_t data;
413 uint16_t buf[256];
414 int i;
415 int ret;
416
417 ide_test_start(
b8e665e4 418 "-drive file=%s,if=ide,serial=%s,cache=writeback,format=raw "
acbe4801
KW
419 "-global ide-hd.ver=%s",
420 tmp_path, "testdisk", "version");
421
422 /* IDENTIFY command on device 0*/
423 outb(IDE_BASE + reg_device, 0);
424 outb(IDE_BASE + reg_command, CMD_IDENTIFY);
425
426 /* Read in the IDENTIFY buffer and check registers */
427 data = inb(IDE_BASE + reg_device);
c27d5656 428 g_assert_cmpint(data & DEV, ==, 0);
acbe4801
KW
429
430 for (i = 0; i < 256; i++) {
431 data = inb(IDE_BASE + reg_status);
432 assert_bit_set(data, DRDY | DRQ);
433 assert_bit_clear(data, BSY | DF | ERR);
434
435 ((uint16_t*) buf)[i] = inw(IDE_BASE + reg_data);
436 }
437
438 data = inb(IDE_BASE + reg_status);
439 assert_bit_set(data, DRDY);
440 assert_bit_clear(data, BSY | DF | ERR | DRQ);
441
442 /* Check serial number/version in the buffer */
262f27b9
KW
443 string_cpu_to_be16(&buf[10], 20);
444 ret = memcmp(&buf[10], "testdisk ", 20);
acbe4801
KW
445 g_assert(ret == 0);
446
262f27b9
KW
447 string_cpu_to_be16(&buf[23], 8);
448 ret = memcmp(&buf[23], "version ", 8);
acbe4801
KW
449 g_assert(ret == 0);
450
451 /* Write cache enabled bit */
452 assert_bit_set(buf[85], 0x20);
453
454 ide_test_quit();
455}
456
bd07684a
KW
457static void test_flush(void)
458{
459 uint8_t data;
460
461 ide_test_start(
b8e665e4 462 "-drive file=blkdebug::%s,if=ide,cache=writeback,format=raw",
bd07684a
KW
463 tmp_path);
464
465 /* Delay the completion of the flush request until we explicitly do it */
0d1aa05e
SH
466 qmp_discard_response("{'execute':'human-monitor-command', 'arguments': {"
467 " 'command-line':"
468 " 'qemu-io ide0-hd0 \"break flush_to_os A\"'} }");
bd07684a
KW
469
470 /* FLUSH CACHE command on device 0*/
471 outb(IDE_BASE + reg_device, 0);
472 outb(IDE_BASE + reg_command, CMD_FLUSH_CACHE);
473
474 /* Check status while request is in flight*/
475 data = inb(IDE_BASE + reg_status);
476 assert_bit_set(data, BSY | DRDY);
477 assert_bit_clear(data, DF | ERR | DRQ);
478
479 /* Complete the command */
0d1aa05e
SH
480 qmp_discard_response("{'execute':'human-monitor-command', 'arguments': {"
481 " 'command-line':"
482 " 'qemu-io ide0-hd0 \"resume A\"'} }");
bd07684a
KW
483
484 /* Check registers */
485 data = inb(IDE_BASE + reg_device);
486 g_assert_cmpint(data & DEV, ==, 0);
487
22bfa16e
MR
488 do {
489 data = inb(IDE_BASE + reg_status);
490 } while (data & BSY);
491
bd07684a
KW
492 assert_bit_set(data, DRDY);
493 assert_bit_clear(data, BSY | DF | ERR | DRQ);
494
495 ide_test_quit();
496}
497
baca2b9e 498static void test_retry_flush(const char *machine)
14a92e5f
PB
499{
500 uint8_t data;
501 const char *s;
14a92e5f
PB
502
503 prepare_blkdebug_script(debug_path, "flush_to_disk");
504
505 ide_test_start(
506 "-vnc none "
b8e665e4
KW
507 "-drive file=blkdebug:%s:%s,if=ide,cache=writeback,format=raw,"
508 "rerror=stop,werror=stop",
14a92e5f
PB
509 debug_path, tmp_path);
510
511 /* FLUSH CACHE command on device 0*/
512 outb(IDE_BASE + reg_device, 0);
513 outb(IDE_BASE + reg_command, CMD_FLUSH_CACHE);
514
515 /* Check status while request is in flight*/
516 data = inb(IDE_BASE + reg_status);
517 assert_bit_set(data, BSY | DRDY);
518 assert_bit_clear(data, DF | ERR | DRQ);
519
8fe941f7 520 qmp_eventwait("STOP");
14a92e5f
PB
521
522 /* Complete the command */
523 s = "{'execute':'cont' }";
524 qmp_discard_response(s);
525
526 /* Check registers */
527 data = inb(IDE_BASE + reg_device);
528 g_assert_cmpint(data & DEV, ==, 0);
529
530 do {
531 data = inb(IDE_BASE + reg_status);
532 } while (data & BSY);
533
534 assert_bit_set(data, DRDY);
535 assert_bit_clear(data, BSY | DF | ERR | DRQ);
536
537 ide_test_quit();
538}
539
f7f3ff1d
KW
540static void test_flush_nodev(void)
541{
542 ide_test_start("");
543
544 /* FLUSH CACHE command on device 0*/
545 outb(IDE_BASE + reg_device, 0);
546 outb(IDE_BASE + reg_command, CMD_FLUSH_CACHE);
547
548 /* Just testing that qemu doesn't crash... */
549
550 ide_test_quit();
551}
552
baca2b9e
JS
553static void test_pci_retry_flush(const char *machine)
554{
555 test_retry_flush("pc");
556}
557
558static void test_isa_retry_flush(const char *machine)
559{
560 test_retry_flush("isapc");
561}
562
acbe4801
KW
563int main(int argc, char **argv)
564{
565 const char *arch = qtest_get_arch();
566 int fd;
567 int ret;
568
569 /* Check architecture */
570 if (strcmp(arch, "i386") && strcmp(arch, "x86_64")) {
571 g_test_message("Skipping test for non-x86\n");
572 return 0;
573 }
574
14a92e5f
PB
575 /* Create temporary blkdebug instructions */
576 fd = mkstemp(debug_path);
577 g_assert(fd >= 0);
578 close(fd);
579
acbe4801
KW
580 /* Create a temporary raw image */
581 fd = mkstemp(tmp_path);
582 g_assert(fd >= 0);
583 ret = ftruncate(fd, TEST_IMAGE_SIZE);
584 g_assert(ret == 0);
585 close(fd);
586
587 /* Run the tests */
588 g_test_init(&argc, &argv, NULL);
589
590 qtest_add_func("/ide/identify", test_identify);
591
b95739dc
KW
592 qtest_add_func("/ide/bmdma/setup", test_bmdma_setup);
593 qtest_add_func("/ide/bmdma/simple_rw", test_bmdma_simple_rw);
948eaed1
KW
594 qtest_add_func("/ide/bmdma/short_prdt", test_bmdma_short_prdt);
595 qtest_add_func("/ide/bmdma/long_prdt", test_bmdma_long_prdt);
d7b7e580 596 qtest_add_func("/ide/bmdma/no_busmaster", test_bmdma_no_busmaster);
b95739dc
KW
597 qtest_add_func("/ide/bmdma/teardown", test_bmdma_teardown);
598
bd07684a 599 qtest_add_func("/ide/flush", test_flush);
baca2b9e
JS
600 qtest_add_func("/ide/flush/nodev", test_flush_nodev);
601 qtest_add_func("/ide/flush/retry_pci", test_pci_retry_flush);
602 qtest_add_func("/ide/flush/retry_isa", test_isa_retry_flush);
14a92e5f 603
acbe4801
KW
604 ret = g_test_run();
605
606 /* Cleanup */
607 unlink(tmp_path);
14a92e5f 608 unlink(debug_path);
acbe4801
KW
609
610 return ret;
611}
This page took 0.245368 seconds and 4 git commands to generate.