2 * QEMU PowerPC CHRP (currently NewWorld PowerMac) hardware System Emulator
4 * Copyright (c) 2004-2007 Fabrice Bellard
5 * Copyright (c) 2007 Jocelyn Mayer
7 * Permission is hereby granted, free of charge, to any person obtaining a copy
8 * of this software and associated documentation files (the "Software"), to deal
9 * in the Software without restriction, including without limitation the rights
10 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
11 * copies of the Software, and to permit persons to whom the Software is
12 * furnished to do so, subject to the following conditions:
14 * The above copyright notice and this permission notice shall be included in
15 * all copies or substantial portions of the Software.
17 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
18 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
19 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
20 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
21 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
22 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
25 * PCI bus layout on a real G5 (U3 based):
27 * 0000:f0:0b.0 Host bridge [0600]: Apple Computer Inc. U3 AGP [106b:004b]
28 * 0000:f0:10.0 VGA compatible controller [0300]: ATI Technologies Inc RV350 AP [Radeon 9600] [1002:4150]
29 * 0001:00:00.0 Host bridge [0600]: Apple Computer Inc. CPC945 HT Bridge [106b:004a]
30 * 0001:00:01.0 PCI bridge [0604]: Advanced Micro Devices [AMD] AMD-8131 PCI-X Bridge [1022:7450] (rev 12)
31 * 0001:00:02.0 PCI bridge [0604]: Advanced Micro Devices [AMD] AMD-8131 PCI-X Bridge [1022:7450] (rev 12)
32 * 0001:00:03.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0045]
33 * 0001:00:04.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0046]
34 * 0001:00:05.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0047]
35 * 0001:00:06.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0048]
36 * 0001:00:07.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0049]
37 * 0001:01:07.0 Class [ff00]: Apple Computer Inc. K2 KeyLargo Mac/IO [106b:0041] (rev 20)
38 * 0001:01:08.0 USB Controller [0c03]: Apple Computer Inc. K2 KeyLargo USB [106b:0040]
39 * 0001:01:09.0 USB Controller [0c03]: Apple Computer Inc. K2 KeyLargo USB [106b:0040]
40 * 0001:02:0b.0 USB Controller [0c03]: NEC Corporation USB [1033:0035] (rev 43)
41 * 0001:02:0b.1 USB Controller [0c03]: NEC Corporation USB [1033:0035] (rev 43)
42 * 0001:02:0b.2 USB Controller [0c03]: NEC Corporation USB 2.0 [1033:00e0] (rev 04)
43 * 0001:03:0d.0 Class [ff00]: Apple Computer Inc. K2 ATA/100 [106b:0043]
44 * 0001:03:0e.0 FireWire (IEEE 1394) [0c00]: Apple Computer Inc. K2 FireWire [106b:0042]
45 * 0001:04:0f.0 Ethernet controller [0200]: Apple Computer Inc. K2 GMAC (Sun GEM) [106b:004c]
46 * 0001:05:0c.0 IDE interface [0101]: Broadcom K2 SATA [1166:0240]
49 #include "qemu/osdep.h"
50 #include "qapi/error.h"
52 #include "hw/ppc/ppc.h"
53 #include "hw/ppc/mac.h"
54 #include "hw/input/adb.h"
55 #include "hw/ppc/mac_dbdma.h"
56 #include "hw/timer/m48t59.h"
57 #include "hw/pci/pci.h"
59 #include "sysemu/sysemu.h"
60 #include "hw/boards.h"
61 #include "hw/nvram/fw_cfg.h"
62 #include "hw/char/escc.h"
63 #include "hw/misc/macio/macio.h"
64 #include "hw/ppc/openpic.h"
66 #include "hw/loader.h"
68 #include "qemu/error-report.h"
69 #include "sysemu/kvm.h"
72 #include "exec/address-spaces.h"
73 #include "hw/sysbus.h"
74 #include "qemu/cutils.h"
78 #define CFG_ADDR 0xf0000510
79 #define TBFREQ (100UL * 1000UL * 1000UL)
80 #define CLOCKFREQ (900UL * 1000UL * 1000UL)
81 #define BUSFREQ (100UL * 1000UL * 1000UL)
83 #define NDRV_VGA_FILENAME "qemu_vga.ndrv"
86 static void fw_cfg_boot_set(void *opaque, const char *boot_device,
89 fw_cfg_modify_i16(opaque, FW_CFG_BOOT_DEVICE, boot_device[0]);
92 static uint64_t translate_kernel_address(void *opaque, uint64_t addr)
94 return (addr & 0x0fffffff) + KERNEL_LOAD_ADDR;
97 static void ppc_core99_reset(void *opaque)
99 PowerPCCPU *cpu = opaque;
102 /* 970 CPUs want to get their initial IP as part of their boot protocol */
103 cpu->env.nip = PROM_ADDR + 0x100;
106 /* PowerPC Mac99 hardware initialisation */
107 static void ppc_core99_init(MachineState *machine)
109 ram_addr_t ram_size = machine->ram_size;
110 const char *kernel_filename = machine->kernel_filename;
111 const char *kernel_cmdline = machine->kernel_cmdline;
112 const char *initrd_filename = machine->initrd_filename;
113 const char *boot_device = machine->boot_order;
114 PowerPCCPU *cpu = NULL;
115 CPUPPCState *env = NULL;
117 qemu_irq *pic, **openpic_irqs;
118 int linux_boot, i, j, k;
119 MemoryRegion *ram = g_new(MemoryRegion, 1), *bios = g_new(MemoryRegion, 1);
120 hwaddr kernel_base, initrd_base, cmdline_base = 0;
121 long kernel_size, initrd_size;
122 UNINHostState *uninorth_pci;
124 NewWorldMacIOState *macio;
125 MACIOIDEState *macio_ide;
127 MacIONVRAMState *nvr;
128 int bios_size, ndrv_size;
131 DriveInfo *hd[MAX_IDE_BUS * MAX_IDE_DEVS];
135 DeviceState *dev, *pic_dev;
136 hwaddr nvram_addr = 0xFFF04000;
139 linux_boot = (kernel_filename != NULL);
142 for (i = 0; i < smp_cpus; i++) {
143 cpu = POWERPC_CPU(cpu_create(machine->cpu_type));
146 /* Set time-base frequency to 100 Mhz */
147 cpu_ppc_tb_init(env, TBFREQ);
148 qemu_register_reset(ppc_core99_reset, cpu);
152 memory_region_allocate_system_memory(ram, NULL, "ppc_core99.ram", ram_size);
153 memory_region_add_subregion(get_system_memory(), 0, ram);
155 /* allocate and load BIOS */
156 memory_region_init_ram(bios, NULL, "ppc_core99.bios", BIOS_SIZE,
159 if (bios_name == NULL)
160 bios_name = PROM_FILENAME;
161 filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, bios_name);
162 memory_region_set_readonly(bios, true);
163 memory_region_add_subregion(get_system_memory(), PROM_ADDR, bios);
165 /* Load OpenBIOS (ELF) */
167 bios_size = load_elf(filename, NULL, NULL, NULL,
168 NULL, NULL, 1, PPC_ELF_MACHINE, 0, 0);
174 if (bios_size < 0 || bios_size > BIOS_SIZE) {
175 error_report("could not load PowerPC bios '%s'", bios_name);
180 uint64_t lowaddr = 0;
188 kernel_base = KERNEL_LOAD_ADDR;
190 kernel_size = load_elf(kernel_filename, translate_kernel_address, NULL,
191 NULL, &lowaddr, NULL, 1, PPC_ELF_MACHINE,
194 kernel_size = load_aout(kernel_filename, kernel_base,
195 ram_size - kernel_base, bswap_needed,
198 kernel_size = load_image_targphys(kernel_filename,
200 ram_size - kernel_base);
201 if (kernel_size < 0) {
202 error_report("could not load kernel '%s'", kernel_filename);
206 if (initrd_filename) {
207 initrd_base = TARGET_PAGE_ALIGN(kernel_base + kernel_size + KERNEL_GAP);
208 initrd_size = load_image_targphys(initrd_filename, initrd_base,
209 ram_size - initrd_base);
210 if (initrd_size < 0) {
211 error_report("could not load initial ram disk '%s'",
215 cmdline_base = TARGET_PAGE_ALIGN(initrd_base + initrd_size);
219 cmdline_base = TARGET_PAGE_ALIGN(kernel_base + kernel_size + KERNEL_GAP);
221 ppc_boot_device = 'm';
227 ppc_boot_device = '\0';
228 /* We consider that NewWorld PowerMac never have any floppy drive
229 * For now, OHW cannot boot from the network.
231 for (i = 0; boot_device[i] != '\0'; i++) {
232 if (boot_device[i] >= 'c' && boot_device[i] <= 'f') {
233 ppc_boot_device = boot_device[i];
237 if (ppc_boot_device == '\0') {
238 error_report("No valid boot device for Mac99 machine");
244 dev = qdev_create(NULL, TYPE_UNI_NORTH);
245 qdev_init_nofail(dev);
246 s = SYS_BUS_DEVICE(dev);
247 memory_region_add_subregion(get_system_memory(), 0xf8000000,
248 sysbus_mmio_get_region(s, 0));
250 openpic_irqs = g_malloc0(smp_cpus * sizeof(qemu_irq *));
252 g_malloc0(smp_cpus * sizeof(qemu_irq) * OPENPIC_OUTPUT_NB);
253 for (i = 0; i < smp_cpus; i++) {
254 /* Mac99 IRQ connection between OpenPIC outputs pins
255 * and PowerPC input pins
257 switch (PPC_INPUT(env)) {
258 case PPC_FLAGS_INPUT_6xx:
259 openpic_irqs[i] = openpic_irqs[0] + (i * OPENPIC_OUTPUT_NB);
260 openpic_irqs[i][OPENPIC_OUTPUT_INT] =
261 ((qemu_irq *)env->irq_inputs)[PPC6xx_INPUT_INT];
262 openpic_irqs[i][OPENPIC_OUTPUT_CINT] =
263 ((qemu_irq *)env->irq_inputs)[PPC6xx_INPUT_INT];
264 openpic_irqs[i][OPENPIC_OUTPUT_MCK] =
265 ((qemu_irq *)env->irq_inputs)[PPC6xx_INPUT_MCP];
266 /* Not connected ? */
267 openpic_irqs[i][OPENPIC_OUTPUT_DEBUG] = NULL;
269 openpic_irqs[i][OPENPIC_OUTPUT_RESET] =
270 ((qemu_irq *)env->irq_inputs)[PPC6xx_INPUT_HRESET];
272 #if defined(TARGET_PPC64)
273 case PPC_FLAGS_INPUT_970:
274 openpic_irqs[i] = openpic_irqs[0] + (i * OPENPIC_OUTPUT_NB);
275 openpic_irqs[i][OPENPIC_OUTPUT_INT] =
276 ((qemu_irq *)env->irq_inputs)[PPC970_INPUT_INT];
277 openpic_irqs[i][OPENPIC_OUTPUT_CINT] =
278 ((qemu_irq *)env->irq_inputs)[PPC970_INPUT_INT];
279 openpic_irqs[i][OPENPIC_OUTPUT_MCK] =
280 ((qemu_irq *)env->irq_inputs)[PPC970_INPUT_MCP];
281 /* Not connected ? */
282 openpic_irqs[i][OPENPIC_OUTPUT_DEBUG] = NULL;
284 openpic_irqs[i][OPENPIC_OUTPUT_RESET] =
285 ((qemu_irq *)env->irq_inputs)[PPC970_INPUT_HRESET];
287 #endif /* defined(TARGET_PPC64) */
289 error_report("Bus model not supported on mac99 machine");
294 pic = g_new0(qemu_irq, 64);
296 pic_dev = qdev_create(NULL, TYPE_OPENPIC);
297 qdev_prop_set_uint32(pic_dev, "model", OPENPIC_MODEL_KEYLARGO);
298 qdev_init_nofail(pic_dev);
299 s = SYS_BUS_DEVICE(pic_dev);
301 for (i = 0; i < smp_cpus; i++) {
302 for (j = 0; j < OPENPIC_OUTPUT_NB; j++) {
303 sysbus_connect_irq(s, k++, openpic_irqs[i][j]);
307 for (i = 0; i < 64; i++) {
308 pic[i] = qdev_get_gpio_in(pic_dev, i);
311 if (PPC_INPUT(env) == PPC_FLAGS_INPUT_970) {
312 /* 970 gets a U3 bus */
313 /* Uninorth AGP bus */
314 dev = qdev_create(NULL, TYPE_U3_AGP_HOST_BRIDGE);
315 object_property_set_link(OBJECT(dev), OBJECT(pic_dev), "pic",
317 qdev_init_nofail(dev);
318 uninorth_pci = U3_AGP_HOST_BRIDGE(dev);
319 s = SYS_BUS_DEVICE(dev);
321 memory_region_add_subregion(get_system_memory(), 0x80000000ULL,
322 sysbus_mmio_get_region(s, 2));
323 /* Register 8 MB of ISA IO space */
324 memory_region_add_subregion(get_system_memory(), 0xf2000000,
325 sysbus_mmio_get_region(s, 3));
326 sysbus_mmio_map(s, 0, 0xf0800000);
327 sysbus_mmio_map(s, 1, 0xf0c00000);
329 machine_arch = ARCH_MAC99_U3;
331 /* Use values found on a real PowerMac */
332 /* Uninorth AGP bus */
333 dev = qdev_create(NULL, TYPE_UNI_NORTH_AGP_HOST_BRIDGE);
334 object_property_set_link(OBJECT(dev), OBJECT(pic_dev), "pic",
336 qdev_init_nofail(dev);
337 s = SYS_BUS_DEVICE(dev);
338 sysbus_mmio_map(s, 0, 0xf0800000);
339 sysbus_mmio_map(s, 1, 0xf0c00000);
341 /* Uninorth internal bus */
342 dev = qdev_create(NULL, TYPE_UNI_NORTH_INTERNAL_PCI_HOST_BRIDGE);
343 object_property_set_link(OBJECT(dev), OBJECT(pic_dev), "pic",
345 qdev_init_nofail(dev);
346 s = SYS_BUS_DEVICE(dev);
347 sysbus_mmio_map(s, 0, 0xf4800000);
348 sysbus_mmio_map(s, 1, 0xf4c00000);
350 /* Uninorth main bus */
351 dev = qdev_create(NULL, TYPE_UNI_NORTH_PCI_HOST_BRIDGE);
352 object_property_set_link(OBJECT(dev), OBJECT(pic_dev), "pic",
354 qdev_init_nofail(dev);
355 uninorth_pci = UNI_NORTH_PCI_HOST_BRIDGE(dev);
356 s = SYS_BUS_DEVICE(dev);
358 memory_region_add_subregion(get_system_memory(), 0x80000000ULL,
359 sysbus_mmio_get_region(s, 2));
360 /* Register 8 MB of ISA IO space */
361 memory_region_add_subregion(get_system_memory(), 0xf2000000,
362 sysbus_mmio_get_region(s, 3));
363 sysbus_mmio_map(s, 0, 0xf2800000);
364 sysbus_mmio_map(s, 1, 0xf2c00000);
366 machine_arch = ARCH_MAC99;
369 machine->usb |= defaults_enabled() && !machine->usb_disabled;
371 /* Timebase Frequency */
373 tbfreq = kvmppc_get_tbfreq();
378 /* init basic PC hardware */
379 pci_bus = PCI_HOST_BRIDGE(uninorth_pci)->bus;
382 macio = NEWWORLD_MACIO(pci_create(pci_bus, -1, TYPE_NEWWORLD_MACIO));
384 qdev_connect_gpio_out(dev, 0, pic[0x19]); /* CUDA */
385 qdev_connect_gpio_out(dev, 1, pic[0x24]); /* ESCC-B */
386 qdev_connect_gpio_out(dev, 2, pic[0x25]); /* ESCC-A */
387 qdev_connect_gpio_out(dev, 3, pic[0x0d]); /* IDE */
388 qdev_connect_gpio_out(dev, 4, pic[0x02]); /* IDE DMA */
389 qdev_connect_gpio_out(dev, 5, pic[0x0e]); /* IDE */
390 qdev_connect_gpio_out(dev, 6, pic[0x03]); /* IDE DMA */
391 qdev_prop_set_uint64(dev, "frequency", tbfreq);
392 object_property_set_link(OBJECT(macio), OBJECT(pic_dev), "pic",
394 qdev_init_nofail(dev);
396 /* We only emulate 2 out of 3 IDE controllers for now */
397 ide_drive_get(hd, ARRAY_SIZE(hd));
399 macio_ide = MACIO_IDE(object_resolve_path_component(OBJECT(macio),
401 macio_ide_init_drives(macio_ide, hd);
403 macio_ide = MACIO_IDE(object_resolve_path_component(OBJECT(macio),
405 macio_ide_init_drives(macio_ide, &hd[MAX_IDE_DEVS]);
407 dev = DEVICE(object_resolve_path_component(OBJECT(macio), "cuda"));
408 adb_bus = qdev_get_child_bus(dev, "adb.0");
409 dev = qdev_create(adb_bus, TYPE_ADB_KEYBOARD);
410 qdev_init_nofail(dev);
411 dev = qdev_create(adb_bus, TYPE_ADB_MOUSE);
412 qdev_init_nofail(dev);
415 pci_create_simple(pci_bus, -1, "pci-ohci");
417 /* U3 needs to use USB for input because Linux doesn't support via-cuda
419 if (machine_arch == ARCH_MAC99_U3) {
420 USBBus *usb_bus = usb_bus_find(-1);
422 usb_create_simple(usb_bus, "usb-kbd");
423 usb_create_simple(usb_bus, "usb-mouse");
427 pci_vga_init(pci_bus);
429 if (graphic_depth != 15 && graphic_depth != 32 && graphic_depth != 8) {
433 for (i = 0; i < nb_nics; i++) {
434 pci_nic_init_nofail(&nd_table[i], pci_bus, "ne2k_pci", NULL);
437 /* The NewWorld NVRAM is not located in the MacIO device */
439 if (kvm_enabled() && getpagesize() > 4096) {
440 /* We can't combine read-write and read-only in a single page, so
441 move the NVRAM out of ROM again for KVM */
442 nvram_addr = 0xFFE00000;
445 dev = qdev_create(NULL, TYPE_MACIO_NVRAM);
446 qdev_prop_set_uint32(dev, "size", 0x2000);
447 qdev_prop_set_uint32(dev, "it_shift", 1);
448 qdev_init_nofail(dev);
449 sysbus_mmio_map(SYS_BUS_DEVICE(dev), 0, nvram_addr);
450 nvr = MACIO_NVRAM(dev);
451 pmac_format_nvram_partition(nvr, 0x2000);
452 /* No PCI init: the BIOS will do it */
454 fw_cfg = fw_cfg_init_mem(CFG_ADDR, CFG_ADDR + 2);
455 fw_cfg_add_i16(fw_cfg, FW_CFG_NB_CPUS, (uint16_t)smp_cpus);
456 fw_cfg_add_i16(fw_cfg, FW_CFG_MAX_CPUS, (uint16_t)max_cpus);
457 fw_cfg_add_i64(fw_cfg, FW_CFG_RAM_SIZE, (uint64_t)ram_size);
458 fw_cfg_add_i16(fw_cfg, FW_CFG_MACHINE_ID, machine_arch);
459 fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_ADDR, kernel_base);
460 fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_SIZE, kernel_size);
461 if (kernel_cmdline) {
462 fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_CMDLINE, cmdline_base);
463 pstrcpy_targphys("cmdline", cmdline_base, TARGET_PAGE_SIZE, kernel_cmdline);
465 fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_CMDLINE, 0);
467 fw_cfg_add_i32(fw_cfg, FW_CFG_INITRD_ADDR, initrd_base);
468 fw_cfg_add_i32(fw_cfg, FW_CFG_INITRD_SIZE, initrd_size);
469 fw_cfg_add_i16(fw_cfg, FW_CFG_BOOT_DEVICE, ppc_boot_device);
471 fw_cfg_add_i16(fw_cfg, FW_CFG_PPC_WIDTH, graphic_width);
472 fw_cfg_add_i16(fw_cfg, FW_CFG_PPC_HEIGHT, graphic_height);
473 fw_cfg_add_i16(fw_cfg, FW_CFG_PPC_DEPTH, graphic_depth);
475 fw_cfg_add_i32(fw_cfg, FW_CFG_PPC_IS_KVM, kvm_enabled());
480 hypercall = g_malloc(16);
481 kvmppc_get_hypercall(env, hypercall, 16);
482 fw_cfg_add_bytes(fw_cfg, FW_CFG_PPC_KVM_HC, hypercall, 16);
483 fw_cfg_add_i32(fw_cfg, FW_CFG_PPC_KVM_PID, getpid());
486 fw_cfg_add_i32(fw_cfg, FW_CFG_PPC_TBFREQ, tbfreq);
487 /* Mac OS X requires a "known good" clock-frequency value; pass it one. */
488 fw_cfg_add_i32(fw_cfg, FW_CFG_PPC_CLOCKFREQ, CLOCKFREQ);
489 fw_cfg_add_i32(fw_cfg, FW_CFG_PPC_BUSFREQ, BUSFREQ);
490 fw_cfg_add_i32(fw_cfg, FW_CFG_PPC_NVRAM_ADDR, nvram_addr);
492 /* MacOS NDRV VGA driver */
493 filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, NDRV_VGA_FILENAME);
495 ndrv_size = get_image_size(filename);
496 if (ndrv_size != -1) {
497 ndrv_file = g_malloc(ndrv_size);
498 ndrv_size = load_image(filename, ndrv_file);
500 fw_cfg_add_file(fw_cfg, "ndrv/qemu_vga.ndrv", ndrv_file, ndrv_size);
505 qemu_register_boot_set(fw_cfg_boot_set, fw_cfg);
508 static int core99_kvm_type(const char *arg)
510 /* Always force PR KVM */
514 static void core99_machine_class_init(ObjectClass *oc, void *data)
516 MachineClass *mc = MACHINE_CLASS(oc);
518 mc->desc = "Mac99 based PowerMAC";
519 mc->init = ppc_core99_init;
520 mc->block_default_type = IF_IDE;
521 mc->max_cpus = MAX_CPUS;
522 mc->default_boot_order = "cd";
523 mc->kvm_type = core99_kvm_type;
525 mc->default_cpu_type = POWERPC_CPU_TYPE_NAME("970fx_v3.1");
527 mc->default_cpu_type = POWERPC_CPU_TYPE_NAME("7400_v2.9");
531 static const TypeInfo core99_machine_info = {
532 .name = MACHINE_TYPE_NAME("mac99"),
533 .parent = TYPE_MACHINE,
534 .class_init = core99_machine_class_init,
537 static void mac_machine_register_types(void)
539 type_register_static(&core99_machine_info);
542 type_init(mac_machine_register_types)