2 * QEMU PowerPC 4xx embedded processors shared devices emulation
4 * Copyright (c) 2007 Jocelyn Mayer
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
33 //#define DEBUG_UNASSIGNED
36 /*****************************************************************************/
37 /* Generic PowerPC 4xx processor instanciation */
38 CPUState *ppc4xx_init (const unsigned char *cpu_model,
39 clk_setup_t *cpu_clk, clk_setup_t *tb_clk,
45 env = cpu_init(cpu_model);
47 fprintf(stderr, "Unable to find PowerPC %s CPU definition\n",
51 cpu_clk->cb = NULL; /* We don't care about CPU clock frequency changes */
52 cpu_clk->opaque = env;
53 /* Set time-base frequency to sysclk */
54 tb_clk->cb = ppc_emb_timers_init(env, sysclk);
56 ppc_dcr_init(env, NULL, NULL);
57 /* Register qemu callbacks */
58 qemu_register_reset(&cpu_ppc_reset, env);
59 register_savevm("cpu", 0, 3, cpu_save, cpu_load, env);
64 /*****************************************************************************/
65 /* Fake device used to map multiple devices in a single memory page */
66 #define MMIO_AREA_BITS 8
67 #define MMIO_AREA_LEN (1 << MMIO_AREA_BITS)
68 #define MMIO_AREA_NB (1 << (TARGET_PAGE_BITS - MMIO_AREA_BITS))
69 #define MMIO_IDX(addr) (((addr) >> MMIO_AREA_BITS) & (MMIO_AREA_NB - 1))
70 struct ppc4xx_mmio_t {
71 target_phys_addr_t base;
72 CPUReadMemoryFunc **mem_read[MMIO_AREA_NB];
73 CPUWriteMemoryFunc **mem_write[MMIO_AREA_NB];
74 void *opaque[MMIO_AREA_NB];
77 static uint32_t unassigned_mmio_readb (void *opaque, target_phys_addr_t addr)
79 #ifdef DEBUG_UNASSIGNED
83 printf("Unassigned mmio read 0x" PADDRX " base " PADDRX "\n",
90 static void unassigned_mmio_writeb (void *opaque,
91 target_phys_addr_t addr, uint32_t val)
93 #ifdef DEBUG_UNASSIGNED
97 printf("Unassigned mmio write 0x" PADDRX " = 0x%x base " PADDRX "\n",
98 addr, val, mmio->base);
102 static CPUReadMemoryFunc *unassigned_mmio_read[3] = {
103 unassigned_mmio_readb,
104 unassigned_mmio_readb,
105 unassigned_mmio_readb,
108 static CPUWriteMemoryFunc *unassigned_mmio_write[3] = {
109 unassigned_mmio_writeb,
110 unassigned_mmio_writeb,
111 unassigned_mmio_writeb,
114 static uint32_t mmio_readlen (ppc4xx_mmio_t *mmio,
115 target_phys_addr_t addr, int len)
117 CPUReadMemoryFunc **mem_read;
121 idx = MMIO_IDX(addr - mmio->base);
122 #if defined(DEBUG_MMIO)
123 printf("%s: mmio %p len %d addr " PADDRX " idx %d\n", __func__,
124 mmio, len, addr, idx);
126 mem_read = mmio->mem_read[idx];
127 ret = (*mem_read[len])(mmio->opaque[idx], addr - mmio->base);
132 static void mmio_writelen (ppc4xx_mmio_t *mmio,
133 target_phys_addr_t addr, uint32_t value, int len)
135 CPUWriteMemoryFunc **mem_write;
138 idx = MMIO_IDX(addr - mmio->base);
139 #if defined(DEBUG_MMIO)
140 printf("%s: mmio %p len %d addr " PADDRX " idx %d value %08" PRIx32 "\n",
141 __func__, mmio, len, addr, idx, value);
143 mem_write = mmio->mem_write[idx];
144 (*mem_write[len])(mmio->opaque[idx], addr - mmio->base, value);
147 static uint32_t mmio_readb (void *opaque, target_phys_addr_t addr)
149 #if defined(DEBUG_MMIO)
150 printf("%s: addr " PADDRX "\n", __func__, addr);
153 return mmio_readlen(opaque, addr, 0);
156 static void mmio_writeb (void *opaque,
157 target_phys_addr_t addr, uint32_t value)
159 #if defined(DEBUG_MMIO)
160 printf("%s: addr " PADDRX " val %08" PRIx32 "\n", __func__, addr, value);
162 mmio_writelen(opaque, addr, value, 0);
165 static uint32_t mmio_readw (void *opaque, target_phys_addr_t addr)
167 #if defined(DEBUG_MMIO)
168 printf("%s: addr " PADDRX "\n", __func__, addr);
171 return mmio_readlen(opaque, addr, 1);
174 static void mmio_writew (void *opaque,
175 target_phys_addr_t addr, uint32_t value)
177 #if defined(DEBUG_MMIO)
178 printf("%s: addr " PADDRX " val %08" PRIx32 "\n", __func__, addr, value);
180 mmio_writelen(opaque, addr, value, 1);
183 static uint32_t mmio_readl (void *opaque, target_phys_addr_t addr)
185 #if defined(DEBUG_MMIO)
186 printf("%s: addr " PADDRX "\n", __func__, addr);
189 return mmio_readlen(opaque, addr, 2);
192 static void mmio_writel (void *opaque,
193 target_phys_addr_t addr, uint32_t value)
195 #if defined(DEBUG_MMIO)
196 printf("%s: addr " PADDRX " val %08" PRIx32 "\n", __func__, addr, value);
198 mmio_writelen(opaque, addr, value, 2);
201 static CPUReadMemoryFunc *mmio_read[] = {
207 static CPUWriteMemoryFunc *mmio_write[] = {
213 int ppc4xx_mmio_register (CPUState *env, ppc4xx_mmio_t *mmio,
214 target_phys_addr_t offset, uint32_t len,
215 CPUReadMemoryFunc **mem_read,
216 CPUWriteMemoryFunc **mem_write, void *opaque)
218 target_phys_addr_t end;
221 if ((offset + len) > TARGET_PAGE_SIZE)
223 idx = MMIO_IDX(offset);
224 end = offset + len - 1;
225 eidx = MMIO_IDX(end);
226 #if defined(DEBUG_MMIO)
227 printf("%s: offset " PADDRX " len %08" PRIx32 " " PADDRX " %d %d\n",
228 __func__, offset, len, end, idx, eidx);
230 for (; idx <= eidx; idx++) {
231 mmio->mem_read[idx] = mem_read;
232 mmio->mem_write[idx] = mem_write;
233 mmio->opaque[idx] = opaque;
239 ppc4xx_mmio_t *ppc4xx_mmio_init (CPUState *env, target_phys_addr_t base)
244 mmio = qemu_mallocz(sizeof(ppc4xx_mmio_t));
247 mmio_memory = cpu_register_io_memory(0, mmio_read, mmio_write, mmio);
248 #if defined(DEBUG_MMIO)
249 printf("%s: base " PADDRX " len %08x %d\n", __func__,
250 base, TARGET_PAGE_SIZE, mmio_memory);
252 cpu_register_physical_memory(base, TARGET_PAGE_SIZE, mmio_memory);
253 ppc4xx_mmio_register(env, mmio, 0, TARGET_PAGE_SIZE,
254 unassigned_mmio_read, unassigned_mmio_write,
261 /*****************************************************************************/
262 /* "Universal" Interrupt controller */
276 #define UIC_MAX_IRQ 32
277 typedef struct ppcuic_t ppcuic_t;
281 uint32_t level; /* Remembers the state of level-triggered interrupts. */
282 uint32_t uicsr; /* Status register */
283 uint32_t uicer; /* Enable register */
284 uint32_t uiccr; /* Critical register */
285 uint32_t uicpr; /* Polarity register */
286 uint32_t uictr; /* Triggering register */
287 uint32_t uicvcr; /* Vector configuration register */
292 static void ppcuic_trigger_irq (ppcuic_t *uic)
295 int start, end, inc, i;
297 /* Trigger interrupt if any is pending */
298 ir = uic->uicsr & uic->uicer & (~uic->uiccr);
299 cr = uic->uicsr & uic->uicer & uic->uiccr;
301 if (loglevel & CPU_LOG_INT) {
302 fprintf(logfile, "%s: uicsr %08" PRIx32 " uicer %08" PRIx32
303 " uiccr %08" PRIx32 "\n"
304 " %08" PRIx32 " ir %08" PRIx32 " cr %08" PRIx32 "\n",
305 __func__, uic->uicsr, uic->uicer, uic->uiccr,
306 uic->uicsr & uic->uicer, ir, cr);
309 if (ir != 0x0000000) {
311 if (loglevel & CPU_LOG_INT) {
312 fprintf(logfile, "Raise UIC interrupt\n");
315 qemu_irq_raise(uic->irqs[PPCUIC_OUTPUT_INT]);
318 if (loglevel & CPU_LOG_INT) {
319 fprintf(logfile, "Lower UIC interrupt\n");
322 qemu_irq_lower(uic->irqs[PPCUIC_OUTPUT_INT]);
324 /* Trigger critical interrupt if any is pending and update vector */
325 if (cr != 0x0000000) {
326 qemu_irq_raise(uic->irqs[PPCUIC_OUTPUT_CINT]);
327 if (uic->use_vectors) {
328 /* Compute critical IRQ vector */
329 if (uic->uicvcr & 1) {
338 uic->uicvr = uic->uicvcr & 0xFFFFFFFC;
339 for (i = start; i <= end; i += inc) {
341 uic->uicvr += (i - start) * 512 * inc;
347 if (loglevel & CPU_LOG_INT) {
348 fprintf(logfile, "Raise UIC critical interrupt - "
349 "vector %08" PRIx32 "\n", uic->uicvr);
354 if (loglevel & CPU_LOG_INT) {
355 fprintf(logfile, "Lower UIC critical interrupt\n");
358 qemu_irq_lower(uic->irqs[PPCUIC_OUTPUT_CINT]);
359 uic->uicvr = 0x00000000;
363 static void ppcuic_set_irq (void *opaque, int irq_num, int level)
369 mask = 1 << (31-irq_num);
371 if (loglevel & CPU_LOG_INT) {
372 fprintf(logfile, "%s: irq %d level %d uicsr %08" PRIx32
373 " mask %08" PRIx32 " => %08" PRIx32 " %08" PRIx32 "\n",
374 __func__, irq_num, level,
375 uic->uicsr, mask, uic->uicsr & mask, level << irq_num);
378 if (irq_num < 0 || irq_num > 31)
382 /* Update status register */
383 if (uic->uictr & mask) {
384 /* Edge sensitive interrupt */
388 /* Level sensitive interrupt */
398 if (loglevel & CPU_LOG_INT) {
399 fprintf(logfile, "%s: irq %d level %d sr %" PRIx32 " => "
400 "%08" PRIx32 "\n", __func__, irq_num, level, uic->uicsr, sr);
403 if (sr != uic->uicsr)
404 ppcuic_trigger_irq(uic);
407 static target_ulong dcr_read_uic (void *opaque, int dcrn)
413 dcrn -= uic->dcr_base;
432 ret = uic->uicsr & uic->uicer;
435 if (!uic->use_vectors)
440 if (!uic->use_vectors)
453 static void dcr_write_uic (void *opaque, int dcrn, target_ulong val)
458 dcrn -= uic->dcr_base;
460 if (loglevel & CPU_LOG_INT) {
461 fprintf(logfile, "%s: dcr %d val " ADDRX "\n", __func__, dcrn, val);
467 uic->uicsr |= uic->level;
468 ppcuic_trigger_irq(uic);
472 ppcuic_trigger_irq(uic);
476 ppcuic_trigger_irq(uic);
480 ppcuic_trigger_irq(uic);
487 ppcuic_trigger_irq(uic);
494 uic->uicvcr = val & 0xFFFFFFFD;
495 ppcuic_trigger_irq(uic);
500 static void ppcuic_reset (void *opaque)
505 uic->uiccr = 0x00000000;
506 uic->uicer = 0x00000000;
507 uic->uicpr = 0x00000000;
508 uic->uicsr = 0x00000000;
509 uic->uictr = 0x00000000;
510 if (uic->use_vectors) {
511 uic->uicvcr = 0x00000000;
512 uic->uicvr = 0x0000000;
516 qemu_irq *ppcuic_init (CPUState *env, qemu_irq *irqs,
517 uint32_t dcr_base, int has_ssr, int has_vr)
522 uic = qemu_mallocz(sizeof(ppcuic_t));
524 uic->dcr_base = dcr_base;
527 uic->use_vectors = 1;
528 for (i = 0; i < DCR_UICMAX; i++) {
529 ppc_dcr_register(env, dcr_base + i, uic,
530 &dcr_read_uic, &dcr_write_uic);
532 qemu_register_reset(ppcuic_reset, uic);
536 return qemu_allocate_irqs(&ppcuic_set_irq, uic, UIC_MAX_IRQ);