2 * ARM AMBA PrimeCell PL031 RTC
4 * Copyright (c) 2007 CodeSourcery
6 * This file is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2 as
8 * published by the Free Software Foundation.
13 #include "qemu-timer.h"
18 #define DPRINTF(fmt, ...) \
19 do { printf("pl031: " fmt , ## __VA_ARGS__); } while (0)
21 #define DPRINTF(fmt, ...) do {} while(0)
24 #define RTC_DR 0x00 /* Data read register */
25 #define RTC_MR 0x04 /* Match register */
26 #define RTC_LR 0x08 /* Data load register */
27 #define RTC_CR 0x0c /* Control register */
28 #define RTC_IMSC 0x10 /* Interrupt mask and set register */
29 #define RTC_RIS 0x14 /* Raw interrupt status register */
30 #define RTC_MIS 0x18 /* Masked interrupt status register */
31 #define RTC_ICR 0x1c /* Interrupt clear register */
48 static const VMStateDescription vmstate_pl031 = {
51 .minimum_version_id = 1,
52 .fields = (VMStateField[]) {
53 VMSTATE_UINT32(tick_offset, pl031_state),
54 VMSTATE_UINT32(mr, pl031_state),
55 VMSTATE_UINT32(lr, pl031_state),
56 VMSTATE_UINT32(cr, pl031_state),
57 VMSTATE_UINT32(im, pl031_state),
58 VMSTATE_UINT32(is, pl031_state),
63 static const unsigned char pl031_id[] = {
64 0x31, 0x10, 0x14, 0x00, /* Device ID */
65 0x0d, 0xf0, 0x05, 0xb1 /* Cell ID */
68 static void pl031_update(pl031_state *s)
70 qemu_set_irq(s->irq, s->is & s->im);
73 static void pl031_interrupt(void * opaque)
75 pl031_state *s = (pl031_state *)opaque;
78 DPRINTF("Alarm raised\n");
82 static uint32_t pl031_get_count(pl031_state *s)
84 /* This assumes qemu_get_clock_ns returns the time since the machine was
86 return s->tick_offset + qemu_get_clock_ns(vm_clock) / get_ticks_per_sec();
89 static void pl031_set_alarm(pl031_state *s)
94 now = qemu_get_clock_ns(vm_clock);
95 ticks = s->tick_offset + now / get_ticks_per_sec();
97 /* The timer wraps around. This subtraction also wraps in the same way,
98 and gives correct results when alarm < now_ticks. */
99 ticks = s->mr - ticks;
100 DPRINTF("Alarm set in %ud ticks\n", ticks);
102 qemu_del_timer(s->timer);
105 qemu_mod_timer(s->timer, now + (int64_t)ticks * get_ticks_per_sec());
109 static uint64_t pl031_read(void *opaque, target_phys_addr_t offset,
112 pl031_state *s = (pl031_state *)opaque;
114 if (offset >= 0xfe0 && offset < 0x1000)
115 return pl031_id[(offset - 0xfe0) >> 2];
119 return pl031_get_count(s);
129 /* RTC is permanently enabled. */
132 return s->is & s->im;
134 fprintf(stderr, "qemu: pl031_read: Unexpected offset 0x%x\n",
138 hw_error("pl031_read: Bad offset 0x%x\n", (int)offset);
145 static void pl031_write(void * opaque, target_phys_addr_t offset,
146 uint64_t value, unsigned size)
148 pl031_state *s = (pl031_state *)opaque;
153 s->tick_offset += value - pl031_get_count(s);
162 DPRINTF("Interrupt mask %d\n", s->im);
166 /* The PL031 documentation (DDI0224B) states that the interrupt is
167 cleared when bit 0 of the written value is set. However the
168 arm926e documentation (DDI0287B) states that the interrupt is
169 cleared when any value is written. */
170 DPRINTF("Interrupt cleared");
175 /* Written value is ignored. */
181 fprintf(stderr, "qemu: pl031_write: Unexpected offset 0x%x\n",
186 hw_error("pl031_write: Bad offset 0x%x\n", (int)offset);
191 static const MemoryRegionOps pl031_ops = {
193 .write = pl031_write,
194 .endianness = DEVICE_NATIVE_ENDIAN,
197 static int pl031_init(SysBusDevice *dev)
199 pl031_state *s = FROM_SYSBUS(pl031_state, dev);
202 memory_region_init_io(&s->iomem, &pl031_ops, s, "pl031", 0x1000);
203 sysbus_init_mmio(dev, &s->iomem);
205 sysbus_init_irq(dev, &s->irq);
206 /* ??? We assume vm_clock is zero at this point. */
207 qemu_get_timedate(&tm, 0);
208 s->tick_offset = mktimegm(&tm);
210 s->timer = qemu_new_timer_ns(vm_clock, pl031_interrupt, s);
214 static SysBusDeviceInfo pl031_info = {
216 .qdev.name = "pl031",
217 .qdev.size = sizeof(pl031_state),
218 .qdev.vmsd = &vmstate_pl031,
222 static void pl031_register_devices(void)
224 sysbus_register_withprop(&pl031_info);
227 device_init(pl031_register_devices)