2 * ARM SSE (Subsystems for Embedded): IoTKit
4 * Copyright (c) 2018 Linaro Limited
5 * Written by Peter Maydell
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License version 2 or
9 * (at your option) any later version.
13 * This is a model of the Arm "Subsystems for Embedded" family of
14 * hardware, which include the IoT Kit and the SSE-050, SSE-100 and
15 * SSE-200. Currently we model only the Arm IoT Kit which is documented in
16 * http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.ecm0601256/index.html
20 * some timers and watchdogs
21 * two peripheral protection controllers
22 * a memory protection controller
23 * a security controller
24 * a bus fabric which arranges that some parts of the address
25 * space are secure and non-secure aliases of each other
28 * + QOM property "memory" is a MemoryRegion containing the devices provided
30 * + QOM property "MAINCLK" is the frequency of the main system clock
31 * + QOM property "EXP_NUMIRQ" sets the number of expansion interrupts.
32 * (In hardware, the SSE-200 permits the number of expansion interrupts
33 * for the two CPUs to be configured separately, but we restrict it to
34 * being the same for both, to avoid having to have separate Property
35 * lists for different variants. This restriction can be relaxed later
37 * + Named GPIO inputs "EXP_IRQ" 0..n are the expansion interrupts for CPU 0,
38 * which are wired to its NVIC lines 32 .. n+32
39 * + Named GPIO inputs "EXP_CPU1_IRQ" 0..n are the expansion interrupts for
40 * CPU 1, which are wired to its NVIC lines 32 .. n+32
41 * + sysbus MMIO region 0 is the "AHB Slave Expansion" which allows
42 * bus master devices in the board model to make transactions into
43 * all the devices and memory areas in the IoTKit
44 * Controlling up to 4 AHB expansion PPBs which a system using the IoTKit
46 * + named GPIO outputs apb_ppcexp{0,1,2,3}_nonsec[0..15]
47 * + named GPIO outputs apb_ppcexp{0,1,2,3}_ap[0..15]
48 * + named GPIO outputs apb_ppcexp{0,1,2,3}_irq_enable
49 * + named GPIO outputs apb_ppcexp{0,1,2,3}_irq_clear
50 * + named GPIO inputs apb_ppcexp{0,1,2,3}_irq_status
51 * Controlling each of the 4 expansion AHB PPCs which a system using the IoTKit
53 * + named GPIO outputs ahb_ppcexp{0,1,2,3}_nonsec[0..15]
54 * + named GPIO outputs ahb_ppcexp{0,1,2,3}_ap[0..15]
55 * + named GPIO outputs ahb_ppcexp{0,1,2,3}_irq_enable
56 * + named GPIO outputs ahb_ppcexp{0,1,2,3}_irq_clear
57 * + named GPIO inputs ahb_ppcexp{0,1,2,3}_irq_status
58 * Controlling each of the 16 expansion MPCs which a system using the IoTKit
60 * + named GPIO inputs mpcexp_status[0..15]
61 * Controlling each of the 16 expansion MSCs which a system using the IoTKit
63 * + named GPIO inputs mscexp_status[0..15]
64 * + named GPIO outputs mscexp_clear[0..15]
65 * + named GPIO outputs mscexp_ns[0..15]
71 #include "hw/sysbus.h"
72 #include "hw/arm/armv7m.h"
73 #include "hw/misc/iotkit-secctl.h"
74 #include "hw/misc/tz-ppc.h"
75 #include "hw/misc/tz-mpc.h"
76 #include "hw/timer/cmsdk-apb-timer.h"
77 #include "hw/timer/cmsdk-apb-dualtimer.h"
78 #include "hw/watchdog/cmsdk-apb-watchdog.h"
79 #include "hw/misc/iotkit-sysctl.h"
80 #include "hw/misc/iotkit-sysinfo.h"
81 #include "hw/misc/unimp.h"
82 #include "hw/or-irq.h"
83 #include "hw/core/split-irq.h"
84 #include "hw/cpu/cluster.h"
86 #define TYPE_ARMSSE "arm-sse"
87 #define ARMSSE(obj) OBJECT_CHECK(ARMSSE, (obj), TYPE_ARMSSE)
90 * These type names are for specific IoTKit subsystems; other than
91 * instantiating them, code using these devices should always handle
92 * them via the ARMSSE base class, so they have no IOTKIT() etc macros.
94 #define TYPE_IOTKIT "iotkit"
96 /* We have an IRQ splitter and an OR gate input for each external PPC
97 * and the 2 internal PPCs
99 #define NUM_EXTERNAL_PPCS (IOTS_NUM_AHB_EXP_PPC + IOTS_NUM_APB_EXP_PPC)
100 #define NUM_PPCS (NUM_EXTERNAL_PPCS + 2)
102 #define MAX_SRAM_BANKS 4
103 #if MAX_SRAM_BANKS > IOTS_NUM_MPC
104 #error Too many SRAM banks
107 #define SSE_MAX_CPUS 2
109 typedef struct ARMSSE {
111 SysBusDevice parent_obj;
114 ARMv7MState armv7m[SSE_MAX_CPUS];
115 CPUClusterState cluster[SSE_MAX_CPUS];
119 TZMPC mpc[IOTS_NUM_MPC];
120 CMSDKAPBTIMER timer0;
121 CMSDKAPBTIMER timer1;
122 CMSDKAPBTIMER s32ktimer;
123 qemu_or_irq ppc_irq_orgate;
124 SplitIRQ sec_resp_splitter;
125 SplitIRQ ppc_irq_splitter[NUM_PPCS];
126 SplitIRQ mpc_irq_splitter[IOTS_NUM_EXP_MPC + IOTS_NUM_MPC];
127 qemu_or_irq mpc_irq_orgate;
128 qemu_or_irq nmi_orgate;
130 SplitIRQ cpu_irq_splitter[32];
132 CMSDKAPBDualTimer dualtimer;
134 CMSDKAPBWatchdog s32kwatchdog;
135 CMSDKAPBWatchdog nswatchdog;
136 CMSDKAPBWatchdog swatchdog;
139 IoTKitSysCtl sysinfo;
141 UnimplementedDeviceState mhu[2];
144 * 'container' holds all devices seen by all CPUs.
145 * 'cpu_container[i]' is the view that CPU i has: this has the
146 * per-CPU devices of that CPU, plus as the background 'container'
147 * (or an alias of it, since we can only use it directly once).
148 * container_alias[i] is the alias of 'container' used by CPU i+1;
149 * CPU 0 can use 'container' directly.
151 MemoryRegion container;
152 MemoryRegion container_alias[SSE_MAX_CPUS - 1];
153 MemoryRegion cpu_container[SSE_MAX_CPUS];
157 MemoryRegion sram[MAX_SRAM_BANKS];
159 qemu_irq *exp_irqs[SSE_MAX_CPUS];
162 qemu_irq sec_resp_cfg;
163 qemu_irq sec_resp_cfg_in;
166 qemu_irq irq_status_in[NUM_EXTERNAL_PPCS];
167 qemu_irq mpcexp_status_in[IOTS_NUM_EXP_MPC];
172 MemoryRegion *board_memory;
174 uint32_t mainclk_frq;
175 uint32_t sram_addr_width;
178 typedef struct ARMSSEInfo ARMSSEInfo;
180 typedef struct ARMSSEClass {
181 DeviceClass parent_class;
182 const ARMSSEInfo *info;
185 #define ARMSSE_CLASS(klass) \
186 OBJECT_CLASS_CHECK(ARMSSEClass, (klass), TYPE_ARMSSE)
187 #define ARMSSE_GET_CLASS(obj) \
188 OBJECT_GET_CLASS(ARMSSEClass, (obj), TYPE_ARMSSE)