5 * Based on the s390 virtio bus code:
8 * This library is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU Lesser General Public
10 * License as published by the Free Software Foundation; either
11 * version 2 of the License, or (at your option) any later version.
13 * This library is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 * Lesser General Public License for more details.
18 * You should have received a copy of the GNU Lesser General Public
19 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
28 #include "hw/sysbus.h"
30 #include "device_tree.h"
34 #include "hw/spapr_vio.h"
38 #endif /* CONFIG_FDT */
40 /* #define DEBUG_SPAPR */
41 /* #define DEBUG_TCE */
44 #define dprintf(fmt, ...) \
45 do { fprintf(stderr, fmt, ## __VA_ARGS__); } while (0)
47 #define dprintf(fmt, ...) \
51 static struct BusInfo spapr_vio_bus_info = {
53 .size = sizeof(VIOsPAPRBus),
56 VIOsPAPRDevice *spapr_vio_find_by_reg(VIOsPAPRBus *bus, uint32_t reg)
59 VIOsPAPRDevice *dev = NULL;
61 QLIST_FOREACH(qdev, &bus->bus.children, sibling) {
62 dev = (VIOsPAPRDevice *)qdev;
63 if (dev->reg == reg) {
72 static int vio_make_devnode(VIOsPAPRDevice *dev,
75 VIOsPAPRDeviceInfo *info = (VIOsPAPRDeviceInfo *)dev->qdev.info;
76 int vdevice_off, node_off;
79 vdevice_off = fdt_path_offset(fdt, "/vdevice");
80 if (vdevice_off < 0) {
84 node_off = fdt_add_subnode(fdt, vdevice_off, dev->qdev.id);
89 ret = fdt_setprop_cell(fdt, node_off, "reg", dev->reg);
95 ret = fdt_setprop_string(fdt, node_off, "device_type",
102 if (info->dt_compatible) {
103 ret = fdt_setprop_string(fdt, node_off, "compatible",
104 info->dt_compatible);
111 uint32_t ints_prop[] = {cpu_to_be32(dev->vio_irq_num), 0};
113 ret = fdt_setprop(fdt, node_off, "interrupts", ints_prop,
120 if (dev->rtce_window_size) {
121 uint32_t dma_prop[] = {cpu_to_be32(dev->reg),
123 0, cpu_to_be32(dev->rtce_window_size)};
125 ret = fdt_setprop_cell(fdt, node_off, "ibm,#dma-address-cells", 2);
130 ret = fdt_setprop_cell(fdt, node_off, "ibm,#dma-size-cells", 2);
135 ret = fdt_setprop(fdt, node_off, "ibm,my-dma-window", dma_prop,
143 ret = (info->devnode)(dev, fdt, node_off);
151 #endif /* CONFIG_FDT */
157 static void rtce_init(VIOsPAPRDevice *dev)
159 size_t size = (dev->rtce_window_size >> SPAPR_VIO_TCE_PAGE_SHIFT)
160 * sizeof(VIOsPAPR_RTCE);
163 dev->rtce_table = qemu_mallocz(size);
167 static target_ulong h_put_tce(CPUState *env, sPAPREnvironment *spapr,
168 target_ulong opcode, target_ulong *args)
170 target_ulong liobn = args[0];
171 target_ulong ioba = args[1];
172 target_ulong tce = args[2];
173 VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, liobn);
177 hcall_dprintf("spapr_vio_put_tce on non-existent LIOBN "
178 TARGET_FMT_lx "\n", liobn);
182 ioba &= ~(SPAPR_VIO_TCE_PAGE_SIZE - 1);
185 fprintf(stderr, "spapr_vio_put_tce on %s ioba 0x" TARGET_FMT_lx
186 " TCE 0x" TARGET_FMT_lx "\n", dev->qdev.id, ioba, tce);
189 if (ioba >= dev->rtce_window_size) {
190 hcall_dprintf("spapr_vio_put_tce on out-of-boards IOBA 0x"
191 TARGET_FMT_lx "\n", ioba);
195 rtce = dev->rtce_table + (ioba >> SPAPR_VIO_TCE_PAGE_SHIFT);
201 int spapr_vio_check_tces(VIOsPAPRDevice *dev, target_ulong ioba,
202 target_ulong len, enum VIOsPAPR_TCEAccess access)
206 start = ioba >> SPAPR_VIO_TCE_PAGE_SHIFT;
207 end = (ioba + len - 1) >> SPAPR_VIO_TCE_PAGE_SHIFT;
209 for (i = start; i <= end; i++) {
210 if ((dev->rtce_table[i].tce & access) != access) {
212 fprintf(stderr, "FAIL on %d\n", i);
221 int spapr_tce_dma_write(VIOsPAPRDevice *dev, uint64_t taddr, const void *buf,
225 fprintf(stderr, "spapr_tce_dma_write taddr=0x%llx size=0x%x\n",
226 (unsigned long long)taddr, size);
229 /* Check for bypass */
230 if (dev->flags & VIO_PAPR_FLAG_DMA_BYPASS) {
231 cpu_physical_memory_write(taddr, buf, size);
240 /* Check if we are in bound */
241 if (taddr >= dev->rtce_window_size) {
243 fprintf(stderr, "spapr_tce_dma_write out of bounds\n");
247 tce = dev->rtce_table[taddr >> SPAPR_VIO_TCE_PAGE_SHIFT].tce;
249 /* How much til end of page ? */
250 lsize = MIN(size, ((~taddr) & SPAPR_VIO_TCE_PAGE_MASK) + 1);
258 txaddr = (tce & ~SPAPR_VIO_TCE_PAGE_MASK) |
259 (taddr & SPAPR_VIO_TCE_PAGE_MASK);
262 fprintf(stderr, " -> write to txaddr=0x%llx, size=0x%x\n",
263 (unsigned long long)txaddr, lsize);
267 cpu_physical_memory_write(txaddr, buf, lsize);
275 int spapr_tce_dma_zero(VIOsPAPRDevice *dev, uint64_t taddr, uint32_t size)
277 /* FIXME: allocating a temp buffer is nasty, but just stepping
278 * through writing zeroes is awkward. This will do for now. */
279 uint8_t zeroes[size];
282 fprintf(stderr, "spapr_tce_dma_zero taddr=0x%llx size=0x%x\n",
283 (unsigned long long)taddr, size);
286 memset(zeroes, 0, size);
287 return spapr_tce_dma_write(dev, taddr, zeroes, size);
290 void stb_tce(VIOsPAPRDevice *dev, uint64_t taddr, uint8_t val)
292 spapr_tce_dma_write(dev, taddr, &val, sizeof(val));
295 void sth_tce(VIOsPAPRDevice *dev, uint64_t taddr, uint16_t val)
298 spapr_tce_dma_write(dev, taddr, &val, sizeof(val));
302 void stw_tce(VIOsPAPRDevice *dev, uint64_t taddr, uint32_t val)
305 spapr_tce_dma_write(dev, taddr, &val, sizeof(val));
308 void stq_tce(VIOsPAPRDevice *dev, uint64_t taddr, uint64_t val)
311 spapr_tce_dma_write(dev, taddr, &val, sizeof(val));
314 int spapr_tce_dma_read(VIOsPAPRDevice *dev, uint64_t taddr, void *buf,
318 fprintf(stderr, "spapr_tce_dma_write taddr=0x%llx size=0x%x\n",
319 (unsigned long long)taddr, size);
322 /* Check for bypass */
323 if (dev->flags & VIO_PAPR_FLAG_DMA_BYPASS) {
324 cpu_physical_memory_read(taddr, buf, size);
333 /* Check if we are in bound */
334 if (taddr >= dev->rtce_window_size) {
336 fprintf(stderr, "spapr_tce_dma_read out of bounds\n");
340 tce = dev->rtce_table[taddr >> SPAPR_VIO_TCE_PAGE_SHIFT].tce;
342 /* How much til end of page ? */
343 lsize = MIN(size, ((~taddr) & SPAPR_VIO_TCE_PAGE_MASK) + 1);
351 txaddr = (tce & ~SPAPR_VIO_TCE_PAGE_MASK) |
352 (taddr & SPAPR_VIO_TCE_PAGE_MASK);
355 fprintf(stderr, " -> write to txaddr=0x%llx, size=0x%x\n",
356 (unsigned long long)txaddr, lsize);
359 cpu_physical_memory_read(txaddr, buf, lsize);
367 uint64_t ldq_tce(VIOsPAPRDevice *dev, uint64_t taddr)
371 spapr_tce_dma_read(dev, taddr, &val, sizeof(val));
378 static target_ulong h_reg_crq(CPUState *env, sPAPREnvironment *spapr,
379 target_ulong opcode, target_ulong *args)
381 target_ulong reg = args[0];
382 target_ulong queue_addr = args[1];
383 target_ulong queue_len = args[2];
384 VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);
387 hcall_dprintf("h_reg_crq on non-existent unit 0x"
388 TARGET_FMT_lx "\n", reg);
392 /* We can't grok a queue size bigger than 256M for now */
393 if (queue_len < 0x1000 || queue_len > 0x10000000) {
394 hcall_dprintf("h_reg_crq, queue size too small or too big (0x%llx)\n",
395 (unsigned long long)queue_len);
399 /* Check queue alignment */
400 if (queue_addr & 0xfff) {
401 hcall_dprintf("h_reg_crq, queue not aligned (0x%llx)\n",
402 (unsigned long long)queue_addr);
406 /* Check if device supports CRQs */
407 if (!dev->crq.SendFunc) {
412 /* Already a queue ? */
413 if (dev->crq.qsize) {
416 dev->crq.qladdr = queue_addr;
417 dev->crq.qsize = queue_len;
420 dprintf("CRQ for dev 0x" TARGET_FMT_lx " registered at 0x"
421 TARGET_FMT_lx "/0x" TARGET_FMT_lx "\n",
422 reg, queue_addr, queue_len);
426 static target_ulong h_free_crq(CPUState *env, sPAPREnvironment *spapr,
427 target_ulong opcode, target_ulong *args)
429 target_ulong reg = args[0];
430 VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);
433 hcall_dprintf("h_free_crq on non-existent unit 0x"
434 TARGET_FMT_lx "\n", reg);
442 dprintf("CRQ for dev 0x" TARGET_FMT_lx " freed\n", reg);
447 static target_ulong h_send_crq(CPUState *env, sPAPREnvironment *spapr,
448 target_ulong opcode, target_ulong *args)
450 target_ulong reg = args[0];
451 target_ulong msg_hi = args[1];
452 target_ulong msg_lo = args[2];
453 VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);
454 uint64_t crq_mangle[2];
457 hcall_dprintf("h_send_crq on non-existent unit 0x"
458 TARGET_FMT_lx "\n", reg);
461 crq_mangle[0] = cpu_to_be64(msg_hi);
462 crq_mangle[1] = cpu_to_be64(msg_lo);
464 if (dev->crq.SendFunc) {
465 return dev->crq.SendFunc(dev, (uint8_t *)crq_mangle);
471 static target_ulong h_enable_crq(CPUState *env, sPAPREnvironment *spapr,
472 target_ulong opcode, target_ulong *args)
474 target_ulong reg = args[0];
475 VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);
478 hcall_dprintf("h_enable_crq on non-existent unit 0x"
479 TARGET_FMT_lx "\n", reg);
486 /* Returns negative error, 0 success, or positive: queue full */
487 int spapr_vio_send_crq(VIOsPAPRDevice *dev, uint8_t *crq)
492 if (!dev->crq.qsize) {
493 fprintf(stderr, "spapr_vio_send_creq on uninitialized queue\n");
497 /* Maybe do a fast path for KVM just writing to the pages */
498 rc = spapr_tce_dma_read(dev, dev->crq.qladdr + dev->crq.qnext, &byte, 1);
506 rc = spapr_tce_dma_write(dev, dev->crq.qladdr + dev->crq.qnext + 8,
514 rc = spapr_tce_dma_write(dev, dev->crq.qladdr + dev->crq.qnext, crq, 8);
519 dev->crq.qnext = (dev->crq.qnext + 16) % dev->crq.qsize;
521 if (dev->signal_state & 1) {
522 qemu_irq_pulse(dev->qirq);
528 /* "quiesce" handling */
530 static void spapr_vio_quiesce_one(VIOsPAPRDevice *dev)
532 dev->flags &= ~VIO_PAPR_FLAG_DMA_BYPASS;
534 if (dev->rtce_table) {
535 size_t size = (dev->rtce_window_size >> SPAPR_VIO_TCE_PAGE_SHIFT)
536 * sizeof(VIOsPAPR_RTCE);
537 memset(dev->rtce_table, 0, size);
545 static void rtas_set_tce_bypass(sPAPREnvironment *spapr, uint32_t token,
546 uint32_t nargs, target_ulong args,
547 uint32_t nret, target_ulong rets)
549 VIOsPAPRBus *bus = spapr->vio_bus;
551 uint32_t unit, enable;
554 rtas_st(rets, 0, -3);
557 unit = rtas_ld(args, 0);
558 enable = rtas_ld(args, 1);
559 dev = spapr_vio_find_by_reg(bus, unit);
561 rtas_st(rets, 0, -3);
565 dev->flags |= VIO_PAPR_FLAG_DMA_BYPASS;
567 dev->flags &= ~VIO_PAPR_FLAG_DMA_BYPASS;
573 static void rtas_quiesce(sPAPREnvironment *spapr, uint32_t token,
574 uint32_t nargs, target_ulong args,
575 uint32_t nret, target_ulong rets)
577 VIOsPAPRBus *bus = spapr->vio_bus;
579 VIOsPAPRDevice *dev = NULL;
582 rtas_st(rets, 0, -3);
586 QLIST_FOREACH(qdev, &bus->bus.children, sibling) {
587 dev = (VIOsPAPRDevice *)qdev;
588 spapr_vio_quiesce_one(dev);
594 static int spapr_vio_busdev_init(DeviceState *qdev, DeviceInfo *qinfo)
596 VIOsPAPRDeviceInfo *info = (VIOsPAPRDeviceInfo *)qinfo;
597 VIOsPAPRDevice *dev = (VIOsPAPRDevice *)qdev;
600 if (asprintf(&id, "%s@%x", info->dt_name, dev->reg) < 0) {
608 return info->init(dev);
611 void spapr_vio_bus_register_withprop(VIOsPAPRDeviceInfo *info)
613 info->qdev.init = spapr_vio_busdev_init;
614 info->qdev.bus_info = &spapr_vio_bus_info;
616 assert(info->qdev.size >= sizeof(VIOsPAPRDevice));
617 qdev_register(&info->qdev);
620 static target_ulong h_vio_signal(CPUState *env, sPAPREnvironment *spapr,
624 target_ulong reg = args[0];
625 target_ulong mode = args[1];
626 VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);
627 VIOsPAPRDeviceInfo *info;
633 info = (VIOsPAPRDeviceInfo *)dev->qdev.info;
635 if (mode & ~info->signal_mask) {
639 dev->signal_state = mode;
644 VIOsPAPRBus *spapr_vio_bus_init(void)
651 /* Create bridge device */
652 dev = qdev_create(NULL, "spapr-vio-bridge");
653 qdev_init_nofail(dev);
655 /* Create bus on bridge device */
657 qbus = qbus_create(&spapr_vio_bus_info, dev, "spapr-vio");
658 bus = DO_UPCAST(VIOsPAPRBus, bus, qbus);
661 spapr_register_hypercall(H_VIO_SIGNAL, h_vio_signal);
664 spapr_register_hypercall(H_PUT_TCE, h_put_tce);
667 spapr_register_hypercall(H_REG_CRQ, h_reg_crq);
668 spapr_register_hypercall(H_FREE_CRQ, h_free_crq);
669 spapr_register_hypercall(H_SEND_CRQ, h_send_crq);
670 spapr_register_hypercall(H_ENABLE_CRQ, h_enable_crq);
673 spapr_rtas_register("ibm,set-tce-bypass", rtas_set_tce_bypass);
674 spapr_rtas_register("quiesce", rtas_quiesce);
676 for (qinfo = device_info_list; qinfo; qinfo = qinfo->next) {
677 VIOsPAPRDeviceInfo *info = (VIOsPAPRDeviceInfo *)qinfo;
679 if (qinfo->bus_info != &spapr_vio_bus_info) {
691 /* Represents sPAPR hcall VIO devices */
693 static int spapr_vio_bridge_init(SysBusDevice *dev)
699 static SysBusDeviceInfo spapr_vio_bridge_info = {
700 .init = spapr_vio_bridge_init,
701 .qdev.name = "spapr-vio-bridge",
702 .qdev.size = sizeof(SysBusDevice),
706 static void spapr_vio_register_devices(void)
708 sysbus_register_withprop(&spapr_vio_bridge_info);
711 device_init(spapr_vio_register_devices)
714 int spapr_populate_vdevice(VIOsPAPRBus *bus, void *fdt)
719 QLIST_FOREACH(qdev, &bus->bus.children, sibling) {
720 VIOsPAPRDevice *dev = (VIOsPAPRDevice *)qdev;
722 ret = vio_make_devnode(dev, fdt);
731 #endif /* CONFIG_FDT */