2 * QEMU PC System Emulator
4 * Copyright (c) 2003-2004 Fabrice Bellard
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
26 /* output Bochs bios info messages */
29 #define BIOS_FILENAME "bios.bin"
30 #define VGABIOS_FILENAME "vgabios.bin"
31 #define VGABIOS_CIRRUS_FILENAME "vgabios-cirrus.bin"
32 #define LINUX_BOOT_FILENAME "linux_boot.bin"
34 #define KERNEL_LOAD_ADDR 0x00100000
35 #define INITRD_LOAD_ADDR 0x00400000
36 #define KERNEL_PARAMS_ADDR 0x00090000
37 #define KERNEL_CMDLINE_ADDR 0x00099000
40 int dummy_refresh_clock;
41 static fdctrl_t *floppy_controller;
42 static RTCState *rtc_state;
44 static IOAPICState *ioapic;
45 static USBPort *usb_root_ports[2];
47 static void ioport80_write(void *opaque, uint32_t addr, uint32_t data)
51 /* MSDOS compatibility mode FPU exception support */
52 /* XXX: add IGNNE support */
53 void cpu_set_ferr(CPUX86State *s)
58 static void ioportF0_write(void *opaque, uint32_t addr, uint32_t data)
65 uint64_t cpu_get_tsc(CPUX86State *env)
67 return qemu_get_clock(vm_clock);
71 int cpu_get_pic_interrupt(CPUState *env)
75 intno = apic_get_interrupt(env);
77 /* set irq request if a PIC irq is still pending */
78 /* XXX: improve that */
79 pic_update_irq(isa_pic);
82 /* read the irq from the PIC */
83 intno = pic_read_irq(isa_pic);
87 static void pic_irq_request(void *opaque, int level)
89 CPUState *env = opaque;
91 cpu_interrupt(env, CPU_INTERRUPT_HARD);
93 cpu_reset_interrupt(env, CPU_INTERRUPT_HARD);
96 /* PC cmos mappings */
98 #define REG_EQUIPMENT_BYTE 0x14
99 #define REG_IBM_CENTURY_BYTE 0x32
100 #define REG_IBM_PS2_CENTURY_BYTE 0x37
103 static inline int to_bcd(RTCState *s, int a)
105 return ((a / 10) << 4) | (a % 10);
108 static int cmos_get_fd_drive_type(int fd0)
114 /* 1.44 Mb 3"5 drive */
118 /* 2.88 Mb 3"5 drive */
122 /* 1.2 Mb 5"5 drive */
132 static void cmos_init_hd(int type_ofs, int info_ofs, BlockDriverState *hd)
134 RTCState *s = rtc_state;
135 int cylinders, heads, sectors;
136 bdrv_get_geometry_hint(hd, &cylinders, &heads, §ors);
137 rtc_set_memory(s, type_ofs, 47);
138 rtc_set_memory(s, info_ofs, cylinders);
139 rtc_set_memory(s, info_ofs + 1, cylinders >> 8);
140 rtc_set_memory(s, info_ofs + 2, heads);
141 rtc_set_memory(s, info_ofs + 3, 0xff);
142 rtc_set_memory(s, info_ofs + 4, 0xff);
143 rtc_set_memory(s, info_ofs + 5, 0xc0 | ((heads > 8) << 3));
144 rtc_set_memory(s, info_ofs + 6, cylinders);
145 rtc_set_memory(s, info_ofs + 7, cylinders >> 8);
146 rtc_set_memory(s, info_ofs + 8, sectors);
149 /* hd_table must contain 4 block drivers */
150 static void cmos_init(int ram_size, int boot_device, BlockDriverState **hd_table)
152 RTCState *s = rtc_state;
159 /* set the CMOS date */
167 val = to_bcd(s, (tm->tm_year / 100) + 19);
168 rtc_set_memory(s, REG_IBM_CENTURY_BYTE, val);
169 rtc_set_memory(s, REG_IBM_PS2_CENTURY_BYTE, val);
171 /* various important CMOS locations needed by PC/Bochs bios */
174 val = 640; /* base memory in K */
175 rtc_set_memory(s, 0x15, val);
176 rtc_set_memory(s, 0x16, val >> 8);
178 val = (ram_size / 1024) - 1024;
181 rtc_set_memory(s, 0x17, val);
182 rtc_set_memory(s, 0x18, val >> 8);
183 rtc_set_memory(s, 0x30, val);
184 rtc_set_memory(s, 0x31, val >> 8);
186 if (ram_size > (16 * 1024 * 1024))
187 val = (ram_size / 65536) - ((16 * 1024 * 1024) / 65536);
192 rtc_set_memory(s, 0x34, val);
193 rtc_set_memory(s, 0x35, val >> 8);
195 switch(boot_device) {
198 rtc_set_memory(s, 0x3d, 0x01); /* floppy boot */
202 rtc_set_memory(s, 0x3d, 0x02); /* hard drive boot */
205 rtc_set_memory(s, 0x3d, 0x03); /* CD-ROM boot */
211 fd0 = fdctrl_get_drive_type(floppy_controller, 0);
212 fd1 = fdctrl_get_drive_type(floppy_controller, 1);
214 val = (cmos_get_fd_drive_type(fd0) << 4) | cmos_get_fd_drive_type(fd1);
215 rtc_set_memory(s, 0x10, val);
227 val |= 0x01; /* 1 drive, ready for boot */
230 val |= 0x41; /* 2 drives, ready for boot */
233 val |= 0x02; /* FPU is there */
234 val |= 0x04; /* PS/2 mouse installed */
235 rtc_set_memory(s, REG_EQUIPMENT_BYTE, val);
239 rtc_set_memory(s, 0x12, (hd_table[0] ? 0xf0 : 0) | (hd_table[1] ? 0x0f : 0));
241 cmos_init_hd(0x19, 0x1b, hd_table[0]);
243 cmos_init_hd(0x1a, 0x24, hd_table[1]);
246 for (i = 0; i < 4; i++) {
248 int cylinders, heads, sectors, translation;
249 /* NOTE: bdrv_get_geometry_hint() returns the physical
250 geometry. It is always such that: 1 <= sects <= 63, 1
251 <= heads <= 16, 1 <= cylinders <= 16383. The BIOS
252 geometry can be different if a translation is done. */
253 translation = bdrv_get_translation_hint(hd_table[i]);
254 if (translation == BIOS_ATA_TRANSLATION_AUTO) {
255 bdrv_get_geometry_hint(hd_table[i], &cylinders, &heads, §ors);
256 if (cylinders <= 1024 && heads <= 16 && sectors <= 63) {
257 /* No translation. */
260 /* LBA translation. */
266 val |= translation << (i * 2);
269 rtc_set_memory(s, 0x39, val);
271 /* Disable check of 0x55AA signature on the last two bytes of
272 first sector of disk. XXX: make it the default ? */
273 // rtc_set_memory(s, 0x38, 1);
276 static void speaker_ioport_write(void *opaque, uint32_t addr, uint32_t val)
278 speaker_data_on = (val >> 1) & 1;
279 pit_set_gate(pit, 2, val & 1);
282 static uint32_t speaker_ioport_read(void *opaque, uint32_t addr)
285 out = pit_get_out(pit, 2, qemu_get_clock(vm_clock));
286 dummy_refresh_clock ^= 1;
287 return (speaker_data_on << 1) | pit_get_gate(pit, 2) | (out << 5) |
288 (dummy_refresh_clock << 4);
291 void ioport_set_a20(int enable)
293 /* XXX: send to all CPUs ? */
294 cpu_x86_set_a20(first_cpu, enable);
297 int ioport_get_a20(void)
299 return ((first_cpu->a20_mask >> 20) & 1);
302 static void ioport92_write(void *opaque, uint32_t addr, uint32_t val)
304 ioport_set_a20((val >> 1) & 1);
305 /* XXX: bit 0 is fast reset */
308 static uint32_t ioport92_read(void *opaque, uint32_t addr)
310 return ioport_get_a20() << 1;
313 /***********************************************************/
314 /* Bochs BIOS debug ports */
316 void bochs_bios_write(void *opaque, uint32_t addr, uint32_t val)
318 static const char shutdown_str[8] = "Shutdown";
319 static int shutdown_index = 0;
322 /* Bochs BIOS messages */
325 fprintf(stderr, "BIOS panic at rombios.c, line %d\n", val);
330 fprintf(stderr, "%c", val);
334 /* same as Bochs power off */
335 if (val == shutdown_str[shutdown_index]) {
337 if (shutdown_index == 8) {
339 qemu_system_shutdown_request();
346 /* LGPL'ed VGA BIOS messages */
349 fprintf(stderr, "VGA BIOS panic, line %d\n", val);
354 fprintf(stderr, "%c", val);
360 void bochs_bios_init(void)
362 register_ioport_write(0x400, 1, 2, bochs_bios_write, NULL);
363 register_ioport_write(0x401, 1, 2, bochs_bios_write, NULL);
364 register_ioport_write(0x402, 1, 1, bochs_bios_write, NULL);
365 register_ioport_write(0x403, 1, 1, bochs_bios_write, NULL);
366 register_ioport_write(0x8900, 1, 1, bochs_bios_write, NULL);
368 register_ioport_write(0x501, 1, 2, bochs_bios_write, NULL);
369 register_ioport_write(0x502, 1, 2, bochs_bios_write, NULL);
370 register_ioport_write(0x500, 1, 1, bochs_bios_write, NULL);
371 register_ioport_write(0x503, 1, 1, bochs_bios_write, NULL);
375 int load_kernel(const char *filename, uint8_t *addr,
381 fd = open(filename, O_RDONLY | O_BINARY);
385 /* load 16 bit code */
386 if (read(fd, real_addr, 512) != 512)
388 setup_sects = real_addr[0x1F1];
391 if (read(fd, real_addr + 512, setup_sects * 512) !=
395 /* load 32 bit code */
396 size = read(fd, addr, 16 * 1024 * 1024);
406 static void main_cpu_reset(void *opaque)
408 CPUState *env = opaque;
412 /*************************************************/
414 static void putb(uint8_t **pp, int val)
422 static void putstr(uint8_t **pp, const char *str)
431 static void putle16(uint8_t **pp, int val)
440 static void putle32(uint8_t **pp, int val)
451 static int mpf_checksum(const uint8_t *data, int len)
455 for(i = 0; i < len; i++)
460 /* Build the Multi Processor table in the BIOS. Same values as Bochs. */
461 static void bios_add_mptable(uint8_t *bios_data)
463 uint8_t *mp_config_table, *q, *float_pointer_struct;
464 int ioapic_id, offset, i, len;
469 mp_config_table = bios_data + 0xcc00;
471 putstr(&q, "PCMP"); /* "PCMP signature */
472 putle16(&q, 0); /* table length (patched later) */
473 putb(&q, 4); /* spec rev */
474 putb(&q, 0); /* checksum (patched later) */
475 putstr(&q, "QEMUCPU "); /* OEM id */
476 putstr(&q, "0.1 "); /* vendor id */
477 putle32(&q, 0); /* OEM table ptr */
478 putle16(&q, 0); /* OEM table size */
479 putle16(&q, 20); /* entry count */
480 putle32(&q, 0xfee00000); /* local APIC addr */
481 putle16(&q, 0); /* ext table length */
482 putb(&q, 0); /* ext table checksum */
483 putb(&q, 0); /* reserved */
485 for(i = 0; i < smp_cpus; i++) {
486 putb(&q, 0); /* entry type = processor */
487 putb(&q, i); /* APIC id */
488 putb(&q, 0x11); /* local APIC version number */
490 putb(&q, 3); /* cpu flags: enabled, bootstrap cpu */
492 putb(&q, 1); /* cpu flags: enabled */
493 putb(&q, 0); /* cpu signature */
497 putle16(&q, 0x201); /* feature flags */
500 putle16(&q, 0); /* reserved */
507 putb(&q, 1); /* entry type = bus */
508 putb(&q, 0); /* bus ID */
512 ioapic_id = smp_cpus;
513 putb(&q, 2); /* entry type = I/O APIC */
514 putb(&q, ioapic_id); /* apic ID */
515 putb(&q, 0x11); /* I/O APIC version number */
516 putb(&q, 1); /* enable */
517 putle32(&q, 0xfec00000); /* I/O APIC addr */
520 for(i = 0; i < 16; i++) {
521 putb(&q, 3); /* entry type = I/O interrupt */
522 putb(&q, 0); /* interrupt type = vectored interrupt */
523 putb(&q, 0); /* flags: po=0, el=0 */
525 putb(&q, 0); /* source bus ID = ISA */
526 putb(&q, i); /* source bus IRQ */
527 putb(&q, ioapic_id); /* dest I/O APIC ID */
528 putb(&q, i); /* dest I/O APIC interrupt in */
531 len = q - mp_config_table;
532 mp_config_table[4] = len;
533 mp_config_table[5] = len >> 8;
535 mp_config_table[7] = -mpf_checksum(mp_config_table, q - mp_config_table);
538 offset = q - bios_data;
539 offset = (offset + 15) & ~15;
540 float_pointer_struct = bios_data + offset;
542 /* floating pointer structure */
543 q = float_pointer_struct;
545 /* pointer to MP config table */
546 putle32(&q, mp_config_table - bios_data + 0x000f0000);
548 putb(&q, 1); /* length in 16 byte units */
549 putb(&q, 4); /* MP spec revision */
550 putb(&q, 0); /* checksum (patched later) */
551 putb(&q, 0); /* MP feature byte 1 */
557 float_pointer_struct[10] =
558 -mpf_checksum(float_pointer_struct, q - float_pointer_struct);
562 static const int ide_iobase[2] = { 0x1f0, 0x170 };
563 static const int ide_iobase2[2] = { 0x3f6, 0x376 };
564 static const int ide_irq[2] = { 14, 15 };
566 #define NE2000_NB_MAX 6
568 static int ne2000_io[NE2000_NB_MAX] = { 0x300, 0x320, 0x340, 0x360, 0x280, 0x380 };
569 static int ne2000_irq[NE2000_NB_MAX] = { 9, 10, 11, 3, 4, 5 };
571 static int serial_io[MAX_SERIAL_PORTS] = { 0x3f8, 0x2f8, 0x3e8, 0x2e8 };
572 static int serial_irq[MAX_SERIAL_PORTS] = { 4, 3, 4, 3 };
574 static int parallel_io[MAX_PARALLEL_PORTS] = { 0x378, 0x278, 0x3bc };
575 static int parallel_irq[MAX_PARALLEL_PORTS] = { 7, 7, 7 };
577 /* PC hardware initialisation */
578 static void pc_init1(int ram_size, int vga_ram_size, int boot_device,
579 DisplayState *ds, const char **fd_filename, int snapshot,
580 const char *kernel_filename, const char *kernel_cmdline,
581 const char *initrd_filename,
585 int ret, linux_boot, initrd_size, i, nb_nics1;
586 unsigned long bios_offset, vga_bios_offset;
587 int bios_size, isa_bios_size;
591 linux_boot = (kernel_filename != NULL);
594 for(i = 0; i < smp_cpus; i++) {
597 env->hflags |= HF_HALTED_MASK;
599 /* XXX: enable it in all cases */
600 env->cpuid_features |= CPUID_APIC;
602 register_savevm("cpu", i, 3, cpu_save, cpu_load, env);
603 qemu_register_reset(main_cpu_reset, env);
610 cpu_register_physical_memory(0, ram_size, 0);
613 bios_offset = ram_size + vga_ram_size;
614 vga_bios_offset = bios_offset + 256 * 1024;
616 snprintf(buf, sizeof(buf), "%s/%s", bios_dir, BIOS_FILENAME);
617 bios_size = get_image_size(buf);
618 if (bios_size <= 0 ||
619 (bios_size % 65536) != 0 ||
620 bios_size > (256 * 1024)) {
623 ret = load_image(buf, phys_ram_base + bios_offset);
624 if (ret != bios_size) {
626 fprintf(stderr, "qemu: could not load PC bios '%s'\n", buf);
629 if (bios_size == 65536) {
630 bios_add_mptable(phys_ram_base + bios_offset);
634 if (cirrus_vga_enabled) {
635 snprintf(buf, sizeof(buf), "%s/%s", bios_dir, VGABIOS_CIRRUS_FILENAME);
637 snprintf(buf, sizeof(buf), "%s/%s", bios_dir, VGABIOS_FILENAME);
639 ret = load_image(buf, phys_ram_base + vga_bios_offset);
641 /* setup basic memory access */
642 cpu_register_physical_memory(0xc0000, 0x10000,
643 vga_bios_offset | IO_MEM_ROM);
645 /* map the last 128KB of the BIOS in ISA space */
646 isa_bios_size = bios_size;
647 if (isa_bios_size > (128 * 1024))
648 isa_bios_size = 128 * 1024;
649 cpu_register_physical_memory(0xd0000, (192 * 1024) - isa_bios_size,
651 cpu_register_physical_memory(0x100000 - isa_bios_size,
653 (bios_offset + bios_size - isa_bios_size) | IO_MEM_ROM);
654 /* map all the bios at the top of memory */
655 cpu_register_physical_memory((uint32_t)(-bios_size),
656 bios_size, bios_offset | IO_MEM_ROM);
661 uint8_t bootsect[512];
662 uint8_t old_bootsect[512];
664 if (bs_table[0] == NULL) {
665 fprintf(stderr, "A disk image must be given for 'hda' when booting a Linux kernel\n");
668 snprintf(buf, sizeof(buf), "%s/%s", bios_dir, LINUX_BOOT_FILENAME);
669 ret = load_image(buf, bootsect);
670 if (ret != sizeof(bootsect)) {
671 fprintf(stderr, "qemu: could not load linux boot sector '%s'\n",
676 if (bdrv_read(bs_table[0], 0, old_bootsect, 1) >= 0) {
677 /* copy the MSDOS partition table */
678 memcpy(bootsect + 0x1be, old_bootsect + 0x1be, 0x40);
681 bdrv_set_boot_sector(bs_table[0], bootsect, sizeof(bootsect));
683 /* now we can load the kernel */
684 ret = load_kernel(kernel_filename,
685 phys_ram_base + KERNEL_LOAD_ADDR,
686 phys_ram_base + KERNEL_PARAMS_ADDR);
688 fprintf(stderr, "qemu: could not load kernel '%s'\n",
695 if (initrd_filename) {
696 initrd_size = load_image(initrd_filename, phys_ram_base + INITRD_LOAD_ADDR);
697 if (initrd_size < 0) {
698 fprintf(stderr, "qemu: could not load initial ram disk '%s'\n",
703 if (initrd_size > 0) {
704 stl_raw(phys_ram_base + KERNEL_PARAMS_ADDR + 0x218, INITRD_LOAD_ADDR);
705 stl_raw(phys_ram_base + KERNEL_PARAMS_ADDR + 0x21c, initrd_size);
707 pstrcpy(phys_ram_base + KERNEL_CMDLINE_ADDR, 4096,
709 stw_raw(phys_ram_base + KERNEL_PARAMS_ADDR + 0x20, 0xA33F);
710 stw_raw(phys_ram_base + KERNEL_PARAMS_ADDR + 0x22,
711 KERNEL_CMDLINE_ADDR - KERNEL_PARAMS_ADDR);
713 stw_raw(phys_ram_base + KERNEL_PARAMS_ADDR + 0x210, 0x01);
717 pci_bus = i440fx_init();
723 /* init basic PC hardware */
724 register_ioport_write(0x80, 1, 1, ioport80_write, NULL);
726 register_ioport_write(0xf0, 1, 1, ioportF0_write, NULL);
728 if (cirrus_vga_enabled) {
730 pci_cirrus_vga_init(pci_bus,
731 ds, phys_ram_base + ram_size, ram_size,
734 isa_cirrus_vga_init(ds, phys_ram_base + ram_size, ram_size,
738 vga_initialize(pci_bus, ds, phys_ram_base + ram_size, ram_size,
742 rtc_state = rtc_init(0x70, 8);
743 register_ioport_read(0x61, 1, 1, speaker_ioport_read, NULL);
744 register_ioport_write(0x61, 1, 1, speaker_ioport_write, NULL);
746 register_ioport_read(0x92, 1, 1, ioport92_read, NULL);
747 register_ioport_write(0x92, 1, 1, ioport92_write, NULL);
750 ioapic = ioapic_init();
752 isa_pic = pic_init(pic_irq_request, first_cpu);
753 pit = pit_init(0x40, 0);
755 pic_set_alt_irq_func(isa_pic, ioapic_set_irq, ioapic);
758 for(i = 0; i < MAX_SERIAL_PORTS; i++) {
760 serial_init(&pic_set_irq_new, isa_pic,
761 serial_io[i], serial_irq[i], serial_hds[i]);
765 for(i = 0; i < MAX_PARALLEL_PORTS; i++) {
766 if (parallel_hds[i]) {
767 parallel_init(parallel_io[i], parallel_irq[i], parallel_hds[i]);
772 for(i = 0; i < nb_nics; i++) {
773 pci_ne2000_init(pci_bus, &nd_table[i]);
775 pci_piix3_ide_init(pci_bus, bs_table);
778 if (nb_nics1 > NE2000_NB_MAX)
779 nb_nics1 = NE2000_NB_MAX;
780 for(i = 0; i < nb_nics1; i++) {
781 isa_ne2000_init(ne2000_io[i], ne2000_irq[i], &nd_table[i]);
784 for(i = 0; i < 2; i++) {
785 isa_ide_init(ide_iobase[i], ide_iobase2[i], ide_irq[i],
786 bs_table[2 * i], bs_table[2 * i + 1]);
808 if (pci_enabled && es1370_enabled)
809 es1370_init (pci_bus, audio);
813 floppy_controller = fdctrl_init(6, 2, 0, 0x3f0, fd_table);
815 cmos_init(ram_size, boot_device, bs_table);
817 if (pci_enabled && usb_enabled) {
818 usb_uhci_init(pci_bus, usb_root_ports);
819 usb_attach(usb_root_ports[0], vm_usb_hub);
822 /* must be done after all PCI devices are instanciated */
823 /* XXX: should be done in the Bochs BIOS */
829 static void pc_init_pci(int ram_size, int vga_ram_size, int boot_device,
830 DisplayState *ds, const char **fd_filename,
832 const char *kernel_filename,
833 const char *kernel_cmdline,
834 const char *initrd_filename)
836 pc_init1(ram_size, vga_ram_size, boot_device,
837 ds, fd_filename, snapshot,
838 kernel_filename, kernel_cmdline,
842 static void pc_init_isa(int ram_size, int vga_ram_size, int boot_device,
843 DisplayState *ds, const char **fd_filename,
845 const char *kernel_filename,
846 const char *kernel_cmdline,
847 const char *initrd_filename)
849 pc_init1(ram_size, vga_ram_size, boot_device,
850 ds, fd_filename, snapshot,
851 kernel_filename, kernel_cmdline,
855 QEMUMachine pc_machine = {
861 QEMUMachine isapc_machine = {