368bec88d1
some versions of HP-UX 10.20 seems to rely on the fact that DINO strips out the lower 2 bits of the PCI configuration address. Also update the binary SeaBIOS distributed to the latest version from Helge's repository, which is required with that change. Signed-off-by: Sven Schnelle <svens@stackframe.org> Message-Id: <20190218183314.20157-1-svens@stackframe.org> Signed-off-by: Richard Henderson <richard.henderson@linaro.org>
538 lines
15 KiB
C
538 lines
15 KiB
C
/*
|
|
* HP-PARISC Dino PCI chipset emulation.
|
|
*
|
|
* (C) 2017 by Helge Deller <deller@gmx.de>
|
|
*
|
|
* This work is licensed under the GNU GPL license version 2 or later.
|
|
*
|
|
* Documentation available at:
|
|
* https://parisc.wiki.kernel.org/images-parisc/9/91/Dino_ers.pdf
|
|
* https://parisc.wiki.kernel.org/images-parisc/7/70/Dino_3_1_Errata.pdf
|
|
*/
|
|
|
|
#include "qemu/osdep.h"
|
|
#include "qemu/units.h"
|
|
#include "qapi/error.h"
|
|
#include "cpu.h"
|
|
#include "hw/hw.h"
|
|
#include "hw/devices.h"
|
|
#include "sysemu/sysemu.h"
|
|
#include "hw/pci/pci.h"
|
|
#include "hw/pci/pci_bus.h"
|
|
#include "hppa_sys.h"
|
|
#include "exec/address-spaces.h"
|
|
|
|
|
|
#define TYPE_DINO_PCI_HOST_BRIDGE "dino-pcihost"
|
|
|
|
#define DINO_IAR0 0x004
|
|
#define DINO_IODC 0x008
|
|
#define DINO_IRR0 0x00C /* RO */
|
|
#define DINO_IAR1 0x010
|
|
#define DINO_IRR1 0x014 /* RO */
|
|
#define DINO_IMR 0x018
|
|
#define DINO_IPR 0x01C
|
|
#define DINO_TOC_ADDR 0x020
|
|
#define DINO_ICR 0x024
|
|
#define DINO_ILR 0x028 /* RO */
|
|
#define DINO_IO_COMMAND 0x030 /* WO */
|
|
#define DINO_IO_STATUS 0x034 /* RO */
|
|
#define DINO_IO_CONTROL 0x038
|
|
#define DINO_IO_GSC_ERR_RESP 0x040 /* RO */
|
|
#define DINO_IO_ERR_INFO 0x044 /* RO */
|
|
#define DINO_IO_PCI_ERR_RESP 0x048 /* RO */
|
|
#define DINO_IO_FBB_EN 0x05c
|
|
#define DINO_IO_ADDR_EN 0x060
|
|
#define DINO_PCI_CONFIG_ADDR 0x064
|
|
#define DINO_PCI_CONFIG_DATA 0x068
|
|
#define DINO_PCI_IO_DATA 0x06c
|
|
#define DINO_PCI_MEM_DATA 0x070 /* Dino 3.x only */
|
|
#define DINO_GSC2X_CONFIG 0x7b4 /* RO */
|
|
#define DINO_GMASK 0x800
|
|
#define DINO_PAMR 0x804
|
|
#define DINO_PAPR 0x808
|
|
#define DINO_DAMODE 0x80c
|
|
#define DINO_PCICMD 0x810
|
|
#define DINO_PCISTS 0x814 /* R/WC */
|
|
#define DINO_MLTIM 0x81c
|
|
#define DINO_BRDG_FEAT 0x820
|
|
#define DINO_PCIROR 0x824
|
|
#define DINO_PCIWOR 0x828
|
|
#define DINO_TLTIM 0x830
|
|
|
|
#define DINO_IRQS 11 /* bits 0-10 are architected */
|
|
#define DINO_IRR_MASK 0x5ff /* only 10 bits are implemented */
|
|
#define DINO_LOCAL_IRQS (DINO_IRQS + 1)
|
|
#define DINO_MASK_IRQ(x) (1 << (x))
|
|
|
|
#define PCIINTA 0x001
|
|
#define PCIINTB 0x002
|
|
#define PCIINTC 0x004
|
|
#define PCIINTD 0x008
|
|
#define PCIINTE 0x010
|
|
#define PCIINTF 0x020
|
|
#define GSCEXTINT 0x040
|
|
/* #define xxx 0x080 - bit 7 is "default" */
|
|
/* #define xxx 0x100 - bit 8 not used */
|
|
/* #define xxx 0x200 - bit 9 not used */
|
|
#define RS232INT 0x400
|
|
|
|
#define DINO_MEM_CHUNK_SIZE (8 * MiB)
|
|
|
|
#define DINO_PCI_HOST_BRIDGE(obj) \
|
|
OBJECT_CHECK(DinoState, (obj), TYPE_DINO_PCI_HOST_BRIDGE)
|
|
|
|
typedef struct DinoState {
|
|
PCIHostState parent_obj;
|
|
|
|
/* PCI_CONFIG_ADDR is parent_obj.config_reg, via pci_host_conf_be_ops,
|
|
so that we can map PCI_CONFIG_DATA to pci_host_data_be_ops. */
|
|
|
|
uint32_t iar0;
|
|
uint32_t iar1;
|
|
uint32_t imr;
|
|
uint32_t ipr;
|
|
uint32_t icr;
|
|
uint32_t ilr;
|
|
uint32_t io_addr_en;
|
|
uint32_t io_control;
|
|
|
|
MemoryRegion this_mem;
|
|
MemoryRegion pci_mem;
|
|
MemoryRegion pci_mem_alias[32];
|
|
|
|
AddressSpace bm_as;
|
|
MemoryRegion bm;
|
|
MemoryRegion bm_ram_alias;
|
|
MemoryRegion bm_pci_alias;
|
|
MemoryRegion bm_cpu_alias;
|
|
|
|
MemoryRegion cpu0_eir_mem;
|
|
} DinoState;
|
|
|
|
/*
|
|
* Dino can forward memory accesses from the CPU in the range between
|
|
* 0xf0800000 and 0xff000000 to the PCI bus.
|
|
*/
|
|
static void gsc_to_pci_forwarding(DinoState *s)
|
|
{
|
|
uint32_t io_addr_en, tmp;
|
|
int enabled, i;
|
|
|
|
tmp = extract32(s->io_control, 7, 2);
|
|
enabled = (tmp == 0x01);
|
|
io_addr_en = s->io_addr_en;
|
|
|
|
memory_region_transaction_begin();
|
|
for (i = 1; i < 31; i++) {
|
|
MemoryRegion *mem = &s->pci_mem_alias[i];
|
|
if (enabled && (io_addr_en & (1U << i))) {
|
|
if (!memory_region_is_mapped(mem)) {
|
|
uint32_t addr = 0xf0000000 + i * DINO_MEM_CHUNK_SIZE;
|
|
memory_region_add_subregion(get_system_memory(), addr, mem);
|
|
}
|
|
} else if (memory_region_is_mapped(mem)) {
|
|
memory_region_del_subregion(get_system_memory(), mem);
|
|
}
|
|
}
|
|
memory_region_transaction_commit();
|
|
}
|
|
|
|
static bool dino_chip_mem_valid(void *opaque, hwaddr addr,
|
|
unsigned size, bool is_write,
|
|
MemTxAttrs attrs)
|
|
{
|
|
switch (addr) {
|
|
case DINO_IAR0:
|
|
case DINO_IAR1:
|
|
case DINO_IRR0:
|
|
case DINO_IRR1:
|
|
case DINO_IMR:
|
|
case DINO_IPR:
|
|
case DINO_ICR:
|
|
case DINO_ILR:
|
|
case DINO_IO_CONTROL:
|
|
case DINO_IO_ADDR_EN:
|
|
case DINO_PCI_IO_DATA:
|
|
return true;
|
|
case DINO_PCI_IO_DATA + 2:
|
|
return size <= 2;
|
|
case DINO_PCI_IO_DATA + 1:
|
|
case DINO_PCI_IO_DATA + 3:
|
|
return size == 1;
|
|
}
|
|
return false;
|
|
}
|
|
|
|
static MemTxResult dino_chip_read_with_attrs(void *opaque, hwaddr addr,
|
|
uint64_t *data, unsigned size,
|
|
MemTxAttrs attrs)
|
|
{
|
|
DinoState *s = opaque;
|
|
MemTxResult ret = MEMTX_OK;
|
|
AddressSpace *io;
|
|
uint16_t ioaddr;
|
|
uint32_t val;
|
|
|
|
switch (addr) {
|
|
case DINO_PCI_IO_DATA ... DINO_PCI_IO_DATA + 3:
|
|
/* Read from PCI IO space. */
|
|
io = &address_space_io;
|
|
ioaddr = s->parent_obj.config_reg + (addr & 3);
|
|
switch (size) {
|
|
case 1:
|
|
val = address_space_ldub(io, ioaddr, attrs, &ret);
|
|
break;
|
|
case 2:
|
|
val = address_space_lduw_be(io, ioaddr, attrs, &ret);
|
|
break;
|
|
case 4:
|
|
val = address_space_ldl_be(io, ioaddr, attrs, &ret);
|
|
break;
|
|
default:
|
|
g_assert_not_reached();
|
|
}
|
|
break;
|
|
|
|
case DINO_IO_ADDR_EN:
|
|
val = s->io_addr_en;
|
|
break;
|
|
case DINO_IO_CONTROL:
|
|
val = s->io_control;
|
|
break;
|
|
|
|
case DINO_IAR0:
|
|
val = s->iar0;
|
|
break;
|
|
case DINO_IAR1:
|
|
val = s->iar1;
|
|
break;
|
|
case DINO_IMR:
|
|
val = s->imr;
|
|
break;
|
|
case DINO_ICR:
|
|
val = s->icr;
|
|
break;
|
|
case DINO_IPR:
|
|
val = s->ipr;
|
|
/* Any read to IPR clears the register. */
|
|
s->ipr = 0;
|
|
break;
|
|
case DINO_ILR:
|
|
val = s->ilr;
|
|
break;
|
|
case DINO_IRR0:
|
|
val = s->ilr & s->imr & ~s->icr;
|
|
break;
|
|
case DINO_IRR1:
|
|
val = s->ilr & s->imr & s->icr;
|
|
break;
|
|
|
|
default:
|
|
/* Controlled by dino_chip_mem_valid above. */
|
|
g_assert_not_reached();
|
|
}
|
|
|
|
*data = val;
|
|
return ret;
|
|
}
|
|
|
|
static MemTxResult dino_chip_write_with_attrs(void *opaque, hwaddr addr,
|
|
uint64_t val, unsigned size,
|
|
MemTxAttrs attrs)
|
|
{
|
|
DinoState *s = opaque;
|
|
AddressSpace *io;
|
|
MemTxResult ret;
|
|
uint16_t ioaddr;
|
|
|
|
switch (addr) {
|
|
case DINO_IO_DATA ... DINO_PCI_IO_DATA + 3:
|
|
/* Write into PCI IO space. */
|
|
io = &address_space_io;
|
|
ioaddr = s->parent_obj.config_reg + (addr & 3);
|
|
switch (size) {
|
|
case 1:
|
|
address_space_stb(io, ioaddr, val, attrs, &ret);
|
|
break;
|
|
case 2:
|
|
address_space_stw_be(io, ioaddr, val, attrs, &ret);
|
|
break;
|
|
case 4:
|
|
address_space_stl_be(io, ioaddr, val, attrs, &ret);
|
|
break;
|
|
default:
|
|
g_assert_not_reached();
|
|
}
|
|
return ret;
|
|
|
|
case DINO_IO_ADDR_EN:
|
|
/* Never allow first (=firmware) and last (=Dino) areas. */
|
|
s->io_addr_en = val & 0x7ffffffe;
|
|
gsc_to_pci_forwarding(s);
|
|
break;
|
|
case DINO_IO_CONTROL:
|
|
s->io_control = val;
|
|
gsc_to_pci_forwarding(s);
|
|
break;
|
|
|
|
case DINO_IAR0:
|
|
s->iar0 = val;
|
|
break;
|
|
case DINO_IAR1:
|
|
s->iar1 = val;
|
|
break;
|
|
case DINO_IMR:
|
|
s->imr = val;
|
|
break;
|
|
case DINO_ICR:
|
|
s->icr = val;
|
|
break;
|
|
case DINO_IPR:
|
|
/* Any write to IPR clears the register. */
|
|
s->ipr = 0;
|
|
break;
|
|
|
|
case DINO_ILR:
|
|
case DINO_IRR0:
|
|
case DINO_IRR1:
|
|
/* These registers are read-only. */
|
|
break;
|
|
|
|
default:
|
|
/* Controlled by dino_chip_mem_valid above. */
|
|
g_assert_not_reached();
|
|
}
|
|
return MEMTX_OK;
|
|
}
|
|
|
|
static const MemoryRegionOps dino_chip_ops = {
|
|
.read_with_attrs = dino_chip_read_with_attrs,
|
|
.write_with_attrs = dino_chip_write_with_attrs,
|
|
.endianness = DEVICE_BIG_ENDIAN,
|
|
.valid = {
|
|
.min_access_size = 1,
|
|
.max_access_size = 4,
|
|
.accepts = dino_chip_mem_valid,
|
|
},
|
|
.impl = {
|
|
.min_access_size = 1,
|
|
.max_access_size = 4,
|
|
},
|
|
};
|
|
|
|
static const VMStateDescription vmstate_dino = {
|
|
.name = "Dino",
|
|
.version_id = 1,
|
|
.minimum_version_id = 1,
|
|
.fields = (VMStateField[]) {
|
|
VMSTATE_UINT32(iar0, DinoState),
|
|
VMSTATE_UINT32(iar1, DinoState),
|
|
VMSTATE_UINT32(imr, DinoState),
|
|
VMSTATE_UINT32(ipr, DinoState),
|
|
VMSTATE_UINT32(icr, DinoState),
|
|
VMSTATE_UINT32(ilr, DinoState),
|
|
VMSTATE_UINT32(io_addr_en, DinoState),
|
|
VMSTATE_UINT32(io_control, DinoState),
|
|
VMSTATE_END_OF_LIST()
|
|
}
|
|
};
|
|
|
|
|
|
/* Unlike pci_config_data_le_ops, no check of high bit set in config_reg. */
|
|
|
|
static uint64_t dino_config_data_read(void *opaque, hwaddr addr, unsigned len)
|
|
{
|
|
PCIHostState *s = opaque;
|
|
return pci_data_read(s->bus, s->config_reg | (addr & 3), len);
|
|
}
|
|
|
|
static void dino_config_data_write(void *opaque, hwaddr addr,
|
|
uint64_t val, unsigned len)
|
|
{
|
|
PCIHostState *s = opaque;
|
|
pci_data_write(s->bus, s->config_reg | (addr & 3), val, len);
|
|
}
|
|
|
|
static const MemoryRegionOps dino_config_data_ops = {
|
|
.read = dino_config_data_read,
|
|
.write = dino_config_data_write,
|
|
.endianness = DEVICE_LITTLE_ENDIAN,
|
|
};
|
|
|
|
static uint64_t dino_config_addr_read(void *opaque, hwaddr addr, unsigned len)
|
|
{
|
|
PCIHostState *s = opaque;
|
|
return s->config_reg;
|
|
}
|
|
|
|
static void dino_config_addr_write(void *opaque, hwaddr addr,
|
|
uint64_t val, unsigned len)
|
|
{
|
|
PCIHostState *s = opaque;
|
|
s->config_reg = val & ~3U;
|
|
}
|
|
|
|
static const MemoryRegionOps dino_config_addr_ops = {
|
|
.read = dino_config_addr_read,
|
|
.write = dino_config_addr_write,
|
|
.valid.min_access_size = 4,
|
|
.valid.max_access_size = 4,
|
|
.endianness = DEVICE_BIG_ENDIAN,
|
|
};
|
|
|
|
static AddressSpace *dino_pcihost_set_iommu(PCIBus *bus, void *opaque,
|
|
int devfn)
|
|
{
|
|
DinoState *s = opaque;
|
|
|
|
return &s->bm_as;
|
|
}
|
|
|
|
/*
|
|
* Dino interrupts are connected as shown on Page 78, Table 23
|
|
* (Little-endian bit numbers)
|
|
* 0 PCI INTA
|
|
* 1 PCI INTB
|
|
* 2 PCI INTC
|
|
* 3 PCI INTD
|
|
* 4 PCI INTE
|
|
* 5 PCI INTF
|
|
* 6 GSC External Interrupt
|
|
* 7 Bus Error for "less than fatal" mode
|
|
* 8 PS2
|
|
* 9 Unused
|
|
* 10 RS232
|
|
*/
|
|
|
|
static void dino_set_irq(void *opaque, int irq, int level)
|
|
{
|
|
DinoState *s = opaque;
|
|
uint32_t bit = 1u << irq;
|
|
uint32_t old_ilr = s->ilr;
|
|
|
|
if (level) {
|
|
uint32_t ena = bit & ~old_ilr;
|
|
s->ipr |= ena;
|
|
s->ilr = old_ilr | bit;
|
|
if (ena & s->imr) {
|
|
uint32_t iar = (ena & s->icr ? s->iar1 : s->iar0);
|
|
stl_be_phys(&address_space_memory, iar & -32, iar & 31);
|
|
}
|
|
} else {
|
|
s->ilr = old_ilr & ~bit;
|
|
}
|
|
}
|
|
|
|
static int dino_pci_map_irq(PCIDevice *d, int irq_num)
|
|
{
|
|
int slot = d->devfn >> 3;
|
|
|
|
assert(irq_num >= 0 && irq_num <= 3);
|
|
|
|
return slot & 0x03;
|
|
}
|
|
|
|
static void dino_set_timer_irq(void *opaque, int irq, int level)
|
|
{
|
|
/* ??? Not connected. */
|
|
}
|
|
|
|
static void dino_set_serial_irq(void *opaque, int irq, int level)
|
|
{
|
|
dino_set_irq(opaque, 10, level);
|
|
}
|
|
|
|
PCIBus *dino_init(MemoryRegion *addr_space,
|
|
qemu_irq *p_rtc_irq, qemu_irq *p_ser_irq)
|
|
{
|
|
DeviceState *dev;
|
|
DinoState *s;
|
|
PCIBus *b;
|
|
int i;
|
|
|
|
dev = qdev_create(NULL, TYPE_DINO_PCI_HOST_BRIDGE);
|
|
s = DINO_PCI_HOST_BRIDGE(dev);
|
|
|
|
/* Dino PCI access from main memory. */
|
|
memory_region_init_io(&s->this_mem, OBJECT(s), &dino_chip_ops,
|
|
s, "dino", 4096);
|
|
memory_region_add_subregion(addr_space, DINO_HPA, &s->this_mem);
|
|
|
|
/* Dino PCI config. */
|
|
memory_region_init_io(&s->parent_obj.conf_mem, OBJECT(&s->parent_obj),
|
|
&dino_config_addr_ops, dev, "pci-conf-idx", 4);
|
|
memory_region_init_io(&s->parent_obj.data_mem, OBJECT(&s->parent_obj),
|
|
&dino_config_data_ops, dev, "pci-conf-data", 4);
|
|
memory_region_add_subregion(&s->this_mem, DINO_PCI_CONFIG_ADDR,
|
|
&s->parent_obj.conf_mem);
|
|
memory_region_add_subregion(&s->this_mem, DINO_CONFIG_DATA,
|
|
&s->parent_obj.data_mem);
|
|
|
|
/* Dino PCI bus memory. */
|
|
memory_region_init(&s->pci_mem, OBJECT(s), "pci-memory", 1ull << 32);
|
|
|
|
b = pci_register_root_bus(dev, "pci", dino_set_irq, dino_pci_map_irq, s,
|
|
&s->pci_mem, get_system_io(),
|
|
PCI_DEVFN(0, 0), 32, TYPE_PCI_BUS);
|
|
s->parent_obj.bus = b;
|
|
qdev_init_nofail(dev);
|
|
|
|
/* Set up windows into PCI bus memory. */
|
|
for (i = 1; i < 31; i++) {
|
|
uint32_t addr = 0xf0000000 + i * DINO_MEM_CHUNK_SIZE;
|
|
char *name = g_strdup_printf("PCI Outbound Window %d", i);
|
|
memory_region_init_alias(&s->pci_mem_alias[i], OBJECT(s),
|
|
name, &s->pci_mem, addr,
|
|
DINO_MEM_CHUNK_SIZE);
|
|
}
|
|
|
|
/* Set up PCI view of memory: Bus master address space. */
|
|
memory_region_init(&s->bm, OBJECT(s), "bm-dino", 1ull << 32);
|
|
memory_region_init_alias(&s->bm_ram_alias, OBJECT(s),
|
|
"bm-system", addr_space, 0,
|
|
0xf0000000 + DINO_MEM_CHUNK_SIZE);
|
|
memory_region_init_alias(&s->bm_pci_alias, OBJECT(s),
|
|
"bm-pci", &s->pci_mem,
|
|
0xf0000000 + DINO_MEM_CHUNK_SIZE,
|
|
30 * DINO_MEM_CHUNK_SIZE);
|
|
memory_region_init_alias(&s->bm_cpu_alias, OBJECT(s),
|
|
"bm-cpu", addr_space, 0xfff00000,
|
|
0xfffff);
|
|
memory_region_add_subregion(&s->bm, 0,
|
|
&s->bm_ram_alias);
|
|
memory_region_add_subregion(&s->bm,
|
|
0xf0000000 + DINO_MEM_CHUNK_SIZE,
|
|
&s->bm_pci_alias);
|
|
memory_region_add_subregion(&s->bm, 0xfff00000,
|
|
&s->bm_cpu_alias);
|
|
address_space_init(&s->bm_as, &s->bm, "pci-bm");
|
|
pci_setup_iommu(b, dino_pcihost_set_iommu, s);
|
|
|
|
*p_rtc_irq = qemu_allocate_irq(dino_set_timer_irq, s, 0);
|
|
*p_ser_irq = qemu_allocate_irq(dino_set_serial_irq, s, 0);
|
|
|
|
return b;
|
|
}
|
|
|
|
static void dino_pcihost_class_init(ObjectClass *klass, void *data)
|
|
{
|
|
DeviceClass *dc = DEVICE_CLASS(klass);
|
|
|
|
dc->vmsd = &vmstate_dino;
|
|
}
|
|
|
|
static const TypeInfo dino_pcihost_info = {
|
|
.name = TYPE_DINO_PCI_HOST_BRIDGE,
|
|
.parent = TYPE_PCI_HOST_BRIDGE,
|
|
.instance_size = sizeof(DinoState),
|
|
.class_init = dino_pcihost_class_init,
|
|
};
|
|
|
|
static void dino_register_types(void)
|
|
{
|
|
type_register_static(&dino_pcihost_info);
|
|
}
|
|
|
|
type_init(dino_register_types)
|