merage qemu master
[qemu/qemu-JZ.git] / hw / ppc405_uc.c
blob9275416a15e29159d8e888e9ba8fbe13ad312260
1 /*
2 * QEMU PowerPC 405 embedded processors emulation
4 * Copyright (c) 2007 Jocelyn Mayer
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
24 #include "hw.h"
25 #include "ppc.h"
26 #include "ppc405.h"
27 #include "pc.h"
28 #include "qemu-timer.h"
29 #include "sysemu.h"
30 #include "qemu-log.h"
32 #define DEBUG_OPBA
33 #define DEBUG_SDRAM
34 #define DEBUG_GPIO
35 #define DEBUG_SERIAL
36 #define DEBUG_OCM
37 //#define DEBUG_I2C
38 #define DEBUG_GPT
39 #define DEBUG_MAL
40 #define DEBUG_CLOCKS
41 //#define DEBUG_CLOCKS_LL
43 ram_addr_t ppc405_set_bootinfo (CPUState *env, ppc4xx_bd_info_t *bd,
44 uint32_t flags)
46 ram_addr_t bdloc;
47 int i, n;
49 /* We put the bd structure at the top of memory */
50 if (bd->bi_memsize >= 0x01000000UL)
51 bdloc = 0x01000000UL - sizeof(struct ppc4xx_bd_info_t);
52 else
53 bdloc = bd->bi_memsize - sizeof(struct ppc4xx_bd_info_t);
54 stl_raw(phys_ram_base + bdloc + 0x00, bd->bi_memstart);
55 stl_raw(phys_ram_base + bdloc + 0x04, bd->bi_memsize);
56 stl_raw(phys_ram_base + bdloc + 0x08, bd->bi_flashstart);
57 stl_raw(phys_ram_base + bdloc + 0x0C, bd->bi_flashsize);
58 stl_raw(phys_ram_base + bdloc + 0x10, bd->bi_flashoffset);
59 stl_raw(phys_ram_base + bdloc + 0x14, bd->bi_sramstart);
60 stl_raw(phys_ram_base + bdloc + 0x18, bd->bi_sramsize);
61 stl_raw(phys_ram_base + bdloc + 0x1C, bd->bi_bootflags);
62 stl_raw(phys_ram_base + bdloc + 0x20, bd->bi_ipaddr);
63 for (i = 0; i < 6; i++)
64 stb_raw(phys_ram_base + bdloc + 0x24 + i, bd->bi_enetaddr[i]);
65 stw_raw(phys_ram_base + bdloc + 0x2A, bd->bi_ethspeed);
66 stl_raw(phys_ram_base + bdloc + 0x2C, bd->bi_intfreq);
67 stl_raw(phys_ram_base + bdloc + 0x30, bd->bi_busfreq);
68 stl_raw(phys_ram_base + bdloc + 0x34, bd->bi_baudrate);
69 for (i = 0; i < 4; i++)
70 stb_raw(phys_ram_base + bdloc + 0x38 + i, bd->bi_s_version[i]);
71 for (i = 0; i < 32; i++)
72 stb_raw(phys_ram_base + bdloc + 0x3C + i, bd->bi_s_version[i]);
73 stl_raw(phys_ram_base + bdloc + 0x5C, bd->bi_plb_busfreq);
74 stl_raw(phys_ram_base + bdloc + 0x60, bd->bi_pci_busfreq);
75 for (i = 0; i < 6; i++)
76 stb_raw(phys_ram_base + bdloc + 0x64 + i, bd->bi_pci_enetaddr[i]);
77 n = 0x6A;
78 if (flags & 0x00000001) {
79 for (i = 0; i < 6; i++)
80 stb_raw(phys_ram_base + bdloc + n++, bd->bi_pci_enetaddr2[i]);
82 stl_raw(phys_ram_base + bdloc + n, bd->bi_opbfreq);
83 n += 4;
84 for (i = 0; i < 2; i++) {
85 stl_raw(phys_ram_base + bdloc + n, bd->bi_iic_fast[i]);
86 n += 4;
89 return bdloc;
92 /*****************************************************************************/
93 /* Shared peripherals */
95 /*****************************************************************************/
96 /* Peripheral local bus arbitrer */
97 enum {
98 PLB0_BESR = 0x084,
99 PLB0_BEAR = 0x086,
100 PLB0_ACR = 0x087,
103 typedef struct ppc4xx_plb_t ppc4xx_plb_t;
104 struct ppc4xx_plb_t {
105 uint32_t acr;
106 uint32_t bear;
107 uint32_t besr;
110 static target_ulong dcr_read_plb (void *opaque, int dcrn)
112 ppc4xx_plb_t *plb;
113 target_ulong ret;
115 plb = opaque;
116 switch (dcrn) {
117 case PLB0_ACR:
118 ret = plb->acr;
119 break;
120 case PLB0_BEAR:
121 ret = plb->bear;
122 break;
123 case PLB0_BESR:
124 ret = plb->besr;
125 break;
126 default:
127 /* Avoid gcc warning */
128 ret = 0;
129 break;
132 return ret;
135 static void dcr_write_plb (void *opaque, int dcrn, target_ulong val)
137 ppc4xx_plb_t *plb;
139 plb = opaque;
140 switch (dcrn) {
141 case PLB0_ACR:
142 /* We don't care about the actual parameters written as
143 * we don't manage any priorities on the bus
145 plb->acr = val & 0xF8000000;
146 break;
147 case PLB0_BEAR:
148 /* Read only */
149 break;
150 case PLB0_BESR:
151 /* Write-clear */
152 plb->besr &= ~val;
153 break;
157 static void ppc4xx_plb_reset (void *opaque)
159 ppc4xx_plb_t *plb;
161 plb = opaque;
162 plb->acr = 0x00000000;
163 plb->bear = 0x00000000;
164 plb->besr = 0x00000000;
167 void ppc4xx_plb_init (CPUState *env)
169 ppc4xx_plb_t *plb;
171 plb = qemu_mallocz(sizeof(ppc4xx_plb_t));
172 if (plb != NULL) {
173 ppc_dcr_register(env, PLB0_ACR, plb, &dcr_read_plb, &dcr_write_plb);
174 ppc_dcr_register(env, PLB0_BEAR, plb, &dcr_read_plb, &dcr_write_plb);
175 ppc_dcr_register(env, PLB0_BESR, plb, &dcr_read_plb, &dcr_write_plb);
176 ppc4xx_plb_reset(plb);
177 qemu_register_reset(ppc4xx_plb_reset, plb);
181 /*****************************************************************************/
182 /* PLB to OPB bridge */
183 enum {
184 POB0_BESR0 = 0x0A0,
185 POB0_BESR1 = 0x0A2,
186 POB0_BEAR = 0x0A4,
189 typedef struct ppc4xx_pob_t ppc4xx_pob_t;
190 struct ppc4xx_pob_t {
191 uint32_t bear;
192 uint32_t besr[2];
195 static target_ulong dcr_read_pob (void *opaque, int dcrn)
197 ppc4xx_pob_t *pob;
198 target_ulong ret;
200 pob = opaque;
201 switch (dcrn) {
202 case POB0_BEAR:
203 ret = pob->bear;
204 break;
205 case POB0_BESR0:
206 case POB0_BESR1:
207 ret = pob->besr[dcrn - POB0_BESR0];
208 break;
209 default:
210 /* Avoid gcc warning */
211 ret = 0;
212 break;
215 return ret;
218 static void dcr_write_pob (void *opaque, int dcrn, target_ulong val)
220 ppc4xx_pob_t *pob;
222 pob = opaque;
223 switch (dcrn) {
224 case POB0_BEAR:
225 /* Read only */
226 break;
227 case POB0_BESR0:
228 case POB0_BESR1:
229 /* Write-clear */
230 pob->besr[dcrn - POB0_BESR0] &= ~val;
231 break;
235 static void ppc4xx_pob_reset (void *opaque)
237 ppc4xx_pob_t *pob;
239 pob = opaque;
240 /* No error */
241 pob->bear = 0x00000000;
242 pob->besr[0] = 0x0000000;
243 pob->besr[1] = 0x0000000;
246 void ppc4xx_pob_init (CPUState *env)
248 ppc4xx_pob_t *pob;
250 pob = qemu_mallocz(sizeof(ppc4xx_pob_t));
251 if (pob != NULL) {
252 ppc_dcr_register(env, POB0_BEAR, pob, &dcr_read_pob, &dcr_write_pob);
253 ppc_dcr_register(env, POB0_BESR0, pob, &dcr_read_pob, &dcr_write_pob);
254 ppc_dcr_register(env, POB0_BESR1, pob, &dcr_read_pob, &dcr_write_pob);
255 qemu_register_reset(ppc4xx_pob_reset, pob);
256 ppc4xx_pob_reset(env);
260 /*****************************************************************************/
261 /* OPB arbitrer */
262 typedef struct ppc4xx_opba_t ppc4xx_opba_t;
263 struct ppc4xx_opba_t {
264 target_phys_addr_t base;
265 uint8_t cr;
266 uint8_t pr;
269 static uint32_t opba_readb (void *opaque, target_phys_addr_t addr)
271 ppc4xx_opba_t *opba;
272 uint32_t ret;
274 #ifdef DEBUG_OPBA
275 printf("%s: addr " PADDRX "\n", __func__, addr);
276 #endif
277 opba = opaque;
278 switch (addr - opba->base) {
279 case 0x00:
280 ret = opba->cr;
281 break;
282 case 0x01:
283 ret = opba->pr;
284 break;
285 default:
286 ret = 0x00;
287 break;
290 return ret;
293 static void opba_writeb (void *opaque,
294 target_phys_addr_t addr, uint32_t value)
296 ppc4xx_opba_t *opba;
298 #ifdef DEBUG_OPBA
299 printf("%s: addr " PADDRX " val %08" PRIx32 "\n", __func__, addr, value);
300 #endif
301 opba = opaque;
302 switch (addr - opba->base) {
303 case 0x00:
304 opba->cr = value & 0xF8;
305 break;
306 case 0x01:
307 opba->pr = value & 0xFF;
308 break;
309 default:
310 break;
314 static uint32_t opba_readw (void *opaque, target_phys_addr_t addr)
316 uint32_t ret;
318 #ifdef DEBUG_OPBA
319 printf("%s: addr " PADDRX "\n", __func__, addr);
320 #endif
321 ret = opba_readb(opaque, addr) << 8;
322 ret |= opba_readb(opaque, addr + 1);
324 return ret;
327 static void opba_writew (void *opaque,
328 target_phys_addr_t addr, uint32_t value)
330 #ifdef DEBUG_OPBA
331 printf("%s: addr " PADDRX " val %08" PRIx32 "\n", __func__, addr, value);
332 #endif
333 opba_writeb(opaque, addr, value >> 8);
334 opba_writeb(opaque, addr + 1, value);
337 static uint32_t opba_readl (void *opaque, target_phys_addr_t addr)
339 uint32_t ret;
341 #ifdef DEBUG_OPBA
342 printf("%s: addr " PADDRX "\n", __func__, addr);
343 #endif
344 ret = opba_readb(opaque, addr) << 24;
345 ret |= opba_readb(opaque, addr + 1) << 16;
347 return ret;
350 static void opba_writel (void *opaque,
351 target_phys_addr_t addr, uint32_t value)
353 #ifdef DEBUG_OPBA
354 printf("%s: addr " PADDRX " val %08" PRIx32 "\n", __func__, addr, value);
355 #endif
356 opba_writeb(opaque, addr, value >> 24);
357 opba_writeb(opaque, addr + 1, value >> 16);
360 static CPUReadMemoryFunc *opba_read[] = {
361 &opba_readb,
362 &opba_readw,
363 &opba_readl,
366 static CPUWriteMemoryFunc *opba_write[] = {
367 &opba_writeb,
368 &opba_writew,
369 &opba_writel,
372 static void ppc4xx_opba_reset (void *opaque)
374 ppc4xx_opba_t *opba;
376 opba = opaque;
377 opba->cr = 0x00; /* No dynamic priorities - park disabled */
378 opba->pr = 0x11;
381 void ppc4xx_opba_init (CPUState *env, ppc4xx_mmio_t *mmio,
382 target_phys_addr_t offset)
384 ppc4xx_opba_t *opba;
386 opba = qemu_mallocz(sizeof(ppc4xx_opba_t));
387 if (opba != NULL) {
388 opba->base = offset;
389 #ifdef DEBUG_OPBA
390 printf("%s: offset " PADDRX "\n", __func__, offset);
391 #endif
392 ppc4xx_mmio_register(env, mmio, offset, 0x002,
393 opba_read, opba_write, opba);
394 qemu_register_reset(ppc4xx_opba_reset, opba);
395 ppc4xx_opba_reset(opba);
399 /*****************************************************************************/
400 /* Code decompression controller */
401 /* XXX: TODO */
403 /*****************************************************************************/
404 /* Peripheral controller */
405 typedef struct ppc4xx_ebc_t ppc4xx_ebc_t;
406 struct ppc4xx_ebc_t {
407 uint32_t addr;
408 uint32_t bcr[8];
409 uint32_t bap[8];
410 uint32_t bear;
411 uint32_t besr0;
412 uint32_t besr1;
413 uint32_t cfg;
416 enum {
417 EBC0_CFGADDR = 0x012,
418 EBC0_CFGDATA = 0x013,
421 static target_ulong dcr_read_ebc (void *opaque, int dcrn)
423 ppc4xx_ebc_t *ebc;
424 target_ulong ret;
426 ebc = opaque;
427 switch (dcrn) {
428 case EBC0_CFGADDR:
429 ret = ebc->addr;
430 break;
431 case EBC0_CFGDATA:
432 switch (ebc->addr) {
433 case 0x00: /* B0CR */
434 ret = ebc->bcr[0];
435 break;
436 case 0x01: /* B1CR */
437 ret = ebc->bcr[1];
438 break;
439 case 0x02: /* B2CR */
440 ret = ebc->bcr[2];
441 break;
442 case 0x03: /* B3CR */
443 ret = ebc->bcr[3];
444 break;
445 case 0x04: /* B4CR */
446 ret = ebc->bcr[4];
447 break;
448 case 0x05: /* B5CR */
449 ret = ebc->bcr[5];
450 break;
451 case 0x06: /* B6CR */
452 ret = ebc->bcr[6];
453 break;
454 case 0x07: /* B7CR */
455 ret = ebc->bcr[7];
456 break;
457 case 0x10: /* B0AP */
458 ret = ebc->bap[0];
459 break;
460 case 0x11: /* B1AP */
461 ret = ebc->bap[1];
462 break;
463 case 0x12: /* B2AP */
464 ret = ebc->bap[2];
465 break;
466 case 0x13: /* B3AP */
467 ret = ebc->bap[3];
468 break;
469 case 0x14: /* B4AP */
470 ret = ebc->bap[4];
471 break;
472 case 0x15: /* B5AP */
473 ret = ebc->bap[5];
474 break;
475 case 0x16: /* B6AP */
476 ret = ebc->bap[6];
477 break;
478 case 0x17: /* B7AP */
479 ret = ebc->bap[7];
480 break;
481 case 0x20: /* BEAR */
482 ret = ebc->bear;
483 break;
484 case 0x21: /* BESR0 */
485 ret = ebc->besr0;
486 break;
487 case 0x22: /* BESR1 */
488 ret = ebc->besr1;
489 break;
490 case 0x23: /* CFG */
491 ret = ebc->cfg;
492 break;
493 default:
494 ret = 0x00000000;
495 break;
497 default:
498 ret = 0x00000000;
499 break;
502 return ret;
505 static void dcr_write_ebc (void *opaque, int dcrn, target_ulong val)
507 ppc4xx_ebc_t *ebc;
509 ebc = opaque;
510 switch (dcrn) {
511 case EBC0_CFGADDR:
512 ebc->addr = val;
513 break;
514 case EBC0_CFGDATA:
515 switch (ebc->addr) {
516 case 0x00: /* B0CR */
517 break;
518 case 0x01: /* B1CR */
519 break;
520 case 0x02: /* B2CR */
521 break;
522 case 0x03: /* B3CR */
523 break;
524 case 0x04: /* B4CR */
525 break;
526 case 0x05: /* B5CR */
527 break;
528 case 0x06: /* B6CR */
529 break;
530 case 0x07: /* B7CR */
531 break;
532 case 0x10: /* B0AP */
533 break;
534 case 0x11: /* B1AP */
535 break;
536 case 0x12: /* B2AP */
537 break;
538 case 0x13: /* B3AP */
539 break;
540 case 0x14: /* B4AP */
541 break;
542 case 0x15: /* B5AP */
543 break;
544 case 0x16: /* B6AP */
545 break;
546 case 0x17: /* B7AP */
547 break;
548 case 0x20: /* BEAR */
549 break;
550 case 0x21: /* BESR0 */
551 break;
552 case 0x22: /* BESR1 */
553 break;
554 case 0x23: /* CFG */
555 break;
556 default:
557 break;
559 break;
560 default:
561 break;
565 static void ebc_reset (void *opaque)
567 ppc4xx_ebc_t *ebc;
568 int i;
570 ebc = opaque;
571 ebc->addr = 0x00000000;
572 ebc->bap[0] = 0x7F8FFE80;
573 ebc->bcr[0] = 0xFFE28000;
574 for (i = 0; i < 8; i++) {
575 ebc->bap[i] = 0x00000000;
576 ebc->bcr[i] = 0x00000000;
578 ebc->besr0 = 0x00000000;
579 ebc->besr1 = 0x00000000;
580 ebc->cfg = 0x80400000;
583 void ppc405_ebc_init (CPUState *env)
585 ppc4xx_ebc_t *ebc;
587 ebc = qemu_mallocz(sizeof(ppc4xx_ebc_t));
588 if (ebc != NULL) {
589 ebc_reset(ebc);
590 qemu_register_reset(&ebc_reset, ebc);
591 ppc_dcr_register(env, EBC0_CFGADDR,
592 ebc, &dcr_read_ebc, &dcr_write_ebc);
593 ppc_dcr_register(env, EBC0_CFGDATA,
594 ebc, &dcr_read_ebc, &dcr_write_ebc);
598 /*****************************************************************************/
599 /* DMA controller */
600 enum {
601 DMA0_CR0 = 0x100,
602 DMA0_CT0 = 0x101,
603 DMA0_DA0 = 0x102,
604 DMA0_SA0 = 0x103,
605 DMA0_SG0 = 0x104,
606 DMA0_CR1 = 0x108,
607 DMA0_CT1 = 0x109,
608 DMA0_DA1 = 0x10A,
609 DMA0_SA1 = 0x10B,
610 DMA0_SG1 = 0x10C,
611 DMA0_CR2 = 0x110,
612 DMA0_CT2 = 0x111,
613 DMA0_DA2 = 0x112,
614 DMA0_SA2 = 0x113,
615 DMA0_SG2 = 0x114,
616 DMA0_CR3 = 0x118,
617 DMA0_CT3 = 0x119,
618 DMA0_DA3 = 0x11A,
619 DMA0_SA3 = 0x11B,
620 DMA0_SG3 = 0x11C,
621 DMA0_SR = 0x120,
622 DMA0_SGC = 0x123,
623 DMA0_SLP = 0x125,
624 DMA0_POL = 0x126,
627 typedef struct ppc405_dma_t ppc405_dma_t;
628 struct ppc405_dma_t {
629 qemu_irq irqs[4];
630 uint32_t cr[4];
631 uint32_t ct[4];
632 uint32_t da[4];
633 uint32_t sa[4];
634 uint32_t sg[4];
635 uint32_t sr;
636 uint32_t sgc;
637 uint32_t slp;
638 uint32_t pol;
641 static target_ulong dcr_read_dma (void *opaque, int dcrn)
643 ppc405_dma_t *dma;
645 dma = opaque;
647 return 0;
650 static void dcr_write_dma (void *opaque, int dcrn, target_ulong val)
652 ppc405_dma_t *dma;
654 dma = opaque;
657 static void ppc405_dma_reset (void *opaque)
659 ppc405_dma_t *dma;
660 int i;
662 dma = opaque;
663 for (i = 0; i < 4; i++) {
664 dma->cr[i] = 0x00000000;
665 dma->ct[i] = 0x00000000;
666 dma->da[i] = 0x00000000;
667 dma->sa[i] = 0x00000000;
668 dma->sg[i] = 0x00000000;
670 dma->sr = 0x00000000;
671 dma->sgc = 0x00000000;
672 dma->slp = 0x7C000000;
673 dma->pol = 0x00000000;
676 void ppc405_dma_init (CPUState *env, qemu_irq irqs[4])
678 ppc405_dma_t *dma;
680 dma = qemu_mallocz(sizeof(ppc405_dma_t));
681 if (dma != NULL) {
682 memcpy(dma->irqs, irqs, 4 * sizeof(qemu_irq));
683 ppc405_dma_reset(dma);
684 qemu_register_reset(&ppc405_dma_reset, dma);
685 ppc_dcr_register(env, DMA0_CR0,
686 dma, &dcr_read_dma, &dcr_write_dma);
687 ppc_dcr_register(env, DMA0_CT0,
688 dma, &dcr_read_dma, &dcr_write_dma);
689 ppc_dcr_register(env, DMA0_DA0,
690 dma, &dcr_read_dma, &dcr_write_dma);
691 ppc_dcr_register(env, DMA0_SA0,
692 dma, &dcr_read_dma, &dcr_write_dma);
693 ppc_dcr_register(env, DMA0_SG0,
694 dma, &dcr_read_dma, &dcr_write_dma);
695 ppc_dcr_register(env, DMA0_CR1,
696 dma, &dcr_read_dma, &dcr_write_dma);
697 ppc_dcr_register(env, DMA0_CT1,
698 dma, &dcr_read_dma, &dcr_write_dma);
699 ppc_dcr_register(env, DMA0_DA1,
700 dma, &dcr_read_dma, &dcr_write_dma);
701 ppc_dcr_register(env, DMA0_SA1,
702 dma, &dcr_read_dma, &dcr_write_dma);
703 ppc_dcr_register(env, DMA0_SG1,
704 dma, &dcr_read_dma, &dcr_write_dma);
705 ppc_dcr_register(env, DMA0_CR2,
706 dma, &dcr_read_dma, &dcr_write_dma);
707 ppc_dcr_register(env, DMA0_CT2,
708 dma, &dcr_read_dma, &dcr_write_dma);
709 ppc_dcr_register(env, DMA0_DA2,
710 dma, &dcr_read_dma, &dcr_write_dma);
711 ppc_dcr_register(env, DMA0_SA2,
712 dma, &dcr_read_dma, &dcr_write_dma);
713 ppc_dcr_register(env, DMA0_SG2,
714 dma, &dcr_read_dma, &dcr_write_dma);
715 ppc_dcr_register(env, DMA0_CR3,
716 dma, &dcr_read_dma, &dcr_write_dma);
717 ppc_dcr_register(env, DMA0_CT3,
718 dma, &dcr_read_dma, &dcr_write_dma);
719 ppc_dcr_register(env, DMA0_DA3,
720 dma, &dcr_read_dma, &dcr_write_dma);
721 ppc_dcr_register(env, DMA0_SA3,
722 dma, &dcr_read_dma, &dcr_write_dma);
723 ppc_dcr_register(env, DMA0_SG3,
724 dma, &dcr_read_dma, &dcr_write_dma);
725 ppc_dcr_register(env, DMA0_SR,
726 dma, &dcr_read_dma, &dcr_write_dma);
727 ppc_dcr_register(env, DMA0_SGC,
728 dma, &dcr_read_dma, &dcr_write_dma);
729 ppc_dcr_register(env, DMA0_SLP,
730 dma, &dcr_read_dma, &dcr_write_dma);
731 ppc_dcr_register(env, DMA0_POL,
732 dma, &dcr_read_dma, &dcr_write_dma);
736 /*****************************************************************************/
737 /* GPIO */
738 typedef struct ppc405_gpio_t ppc405_gpio_t;
739 struct ppc405_gpio_t {
740 target_phys_addr_t base;
741 uint32_t or;
742 uint32_t tcr;
743 uint32_t osrh;
744 uint32_t osrl;
745 uint32_t tsrh;
746 uint32_t tsrl;
747 uint32_t odr;
748 uint32_t ir;
749 uint32_t rr1;
750 uint32_t isr1h;
751 uint32_t isr1l;
754 static uint32_t ppc405_gpio_readb (void *opaque, target_phys_addr_t addr)
756 ppc405_gpio_t *gpio;
758 gpio = opaque;
759 #ifdef DEBUG_GPIO
760 printf("%s: addr " PADDRX "\n", __func__, addr);
761 #endif
763 return 0;
766 static void ppc405_gpio_writeb (void *opaque,
767 target_phys_addr_t addr, uint32_t value)
769 ppc405_gpio_t *gpio;
771 gpio = opaque;
772 #ifdef DEBUG_GPIO
773 printf("%s: addr " PADDRX " val %08" PRIx32 "\n", __func__, addr, value);
774 #endif
777 static uint32_t ppc405_gpio_readw (void *opaque, target_phys_addr_t addr)
779 ppc405_gpio_t *gpio;
781 gpio = opaque;
782 #ifdef DEBUG_GPIO
783 printf("%s: addr " PADDRX "\n", __func__, addr);
784 #endif
786 return 0;
789 static void ppc405_gpio_writew (void *opaque,
790 target_phys_addr_t addr, uint32_t value)
792 ppc405_gpio_t *gpio;
794 gpio = opaque;
795 #ifdef DEBUG_GPIO
796 printf("%s: addr " PADDRX " val %08" PRIx32 "\n", __func__, addr, value);
797 #endif
800 static uint32_t ppc405_gpio_readl (void *opaque, target_phys_addr_t addr)
802 ppc405_gpio_t *gpio;
804 gpio = opaque;
805 #ifdef DEBUG_GPIO
806 printf("%s: addr " PADDRX "\n", __func__, addr);
807 #endif
809 return 0;
812 static void ppc405_gpio_writel (void *opaque,
813 target_phys_addr_t addr, uint32_t value)
815 ppc405_gpio_t *gpio;
817 gpio = opaque;
818 #ifdef DEBUG_GPIO
819 printf("%s: addr " PADDRX " val %08" PRIx32 "\n", __func__, addr, value);
820 #endif
823 static CPUReadMemoryFunc *ppc405_gpio_read[] = {
824 &ppc405_gpio_readb,
825 &ppc405_gpio_readw,
826 &ppc405_gpio_readl,
829 static CPUWriteMemoryFunc *ppc405_gpio_write[] = {
830 &ppc405_gpio_writeb,
831 &ppc405_gpio_writew,
832 &ppc405_gpio_writel,
835 static void ppc405_gpio_reset (void *opaque)
837 ppc405_gpio_t *gpio;
839 gpio = opaque;
842 void ppc405_gpio_init (CPUState *env, ppc4xx_mmio_t *mmio,
843 target_phys_addr_t offset)
845 ppc405_gpio_t *gpio;
847 gpio = qemu_mallocz(sizeof(ppc405_gpio_t));
848 if (gpio != NULL) {
849 gpio->base = offset;
850 ppc405_gpio_reset(gpio);
851 qemu_register_reset(&ppc405_gpio_reset, gpio);
852 #ifdef DEBUG_GPIO
853 printf("%s: offset " PADDRX "\n", __func__, offset);
854 #endif
855 ppc4xx_mmio_register(env, mmio, offset, 0x038,
856 ppc405_gpio_read, ppc405_gpio_write, gpio);
860 /*****************************************************************************/
861 /* Serial ports */
862 static CPUReadMemoryFunc *serial_mm_read[] = {
863 &serial_mm_readb,
864 &serial_mm_readw,
865 &serial_mm_readl,
868 static CPUWriteMemoryFunc *serial_mm_write[] = {
869 &serial_mm_writeb,
870 &serial_mm_writew,
871 &serial_mm_writel,
874 void ppc405_serial_init (CPUState *env, ppc4xx_mmio_t *mmio,
875 target_phys_addr_t offset, qemu_irq irq,
876 CharDriverState *chr)
878 void *serial;
880 #ifdef DEBUG_SERIAL
881 printf("%s: offset " PADDRX "\n", __func__, offset);
882 #endif
883 serial = serial_mm_init(offset, 0, irq, 399193, chr, 0);
884 ppc4xx_mmio_register(env, mmio, offset, 0x008,
885 serial_mm_read, serial_mm_write, serial);
888 /*****************************************************************************/
889 /* On Chip Memory */
890 enum {
891 OCM0_ISARC = 0x018,
892 OCM0_ISACNTL = 0x019,
893 OCM0_DSARC = 0x01A,
894 OCM0_DSACNTL = 0x01B,
897 typedef struct ppc405_ocm_t ppc405_ocm_t;
898 struct ppc405_ocm_t {
899 target_ulong offset;
900 uint32_t isarc;
901 uint32_t isacntl;
902 uint32_t dsarc;
903 uint32_t dsacntl;
906 static void ocm_update_mappings (ppc405_ocm_t *ocm,
907 uint32_t isarc, uint32_t isacntl,
908 uint32_t dsarc, uint32_t dsacntl)
910 #ifdef DEBUG_OCM
911 printf("OCM update ISA %08" PRIx32 " %08" PRIx32 " (%08" PRIx32
912 " %08" PRIx32 ") DSA %08" PRIx32 " %08" PRIx32
913 " (%08" PRIx32 " %08" PRIx32 ")\n",
914 isarc, isacntl, dsarc, dsacntl,
915 ocm->isarc, ocm->isacntl, ocm->dsarc, ocm->dsacntl);
916 #endif
917 if (ocm->isarc != isarc ||
918 (ocm->isacntl & 0x80000000) != (isacntl & 0x80000000)) {
919 if (ocm->isacntl & 0x80000000) {
920 /* Unmap previously assigned memory region */
921 printf("OCM unmap ISA %08" PRIx32 "\n", ocm->isarc);
922 cpu_register_physical_memory(ocm->isarc, 0x04000000,
923 IO_MEM_UNASSIGNED);
925 if (isacntl & 0x80000000) {
926 /* Map new instruction memory region */
927 #ifdef DEBUG_OCM
928 printf("OCM map ISA %08" PRIx32 "\n", isarc);
929 #endif
930 cpu_register_physical_memory(isarc, 0x04000000,
931 ocm->offset | IO_MEM_RAM);
934 if (ocm->dsarc != dsarc ||
935 (ocm->dsacntl & 0x80000000) != (dsacntl & 0x80000000)) {
936 if (ocm->dsacntl & 0x80000000) {
937 /* Beware not to unmap the region we just mapped */
938 if (!(isacntl & 0x80000000) || ocm->dsarc != isarc) {
939 /* Unmap previously assigned memory region */
940 #ifdef DEBUG_OCM
941 printf("OCM unmap DSA %08" PRIx32 "\n", ocm->dsarc);
942 #endif
943 cpu_register_physical_memory(ocm->dsarc, 0x04000000,
944 IO_MEM_UNASSIGNED);
947 if (dsacntl & 0x80000000) {
948 /* Beware not to remap the region we just mapped */
949 if (!(isacntl & 0x80000000) || dsarc != isarc) {
950 /* Map new data memory region */
951 #ifdef DEBUG_OCM
952 printf("OCM map DSA %08" PRIx32 "\n", dsarc);
953 #endif
954 cpu_register_physical_memory(dsarc, 0x04000000,
955 ocm->offset | IO_MEM_RAM);
961 static target_ulong dcr_read_ocm (void *opaque, int dcrn)
963 ppc405_ocm_t *ocm;
964 target_ulong ret;
966 ocm = opaque;
967 switch (dcrn) {
968 case OCM0_ISARC:
969 ret = ocm->isarc;
970 break;
971 case OCM0_ISACNTL:
972 ret = ocm->isacntl;
973 break;
974 case OCM0_DSARC:
975 ret = ocm->dsarc;
976 break;
977 case OCM0_DSACNTL:
978 ret = ocm->dsacntl;
979 break;
980 default:
981 ret = 0;
982 break;
985 return ret;
988 static void dcr_write_ocm (void *opaque, int dcrn, target_ulong val)
990 ppc405_ocm_t *ocm;
991 uint32_t isarc, dsarc, isacntl, dsacntl;
993 ocm = opaque;
994 isarc = ocm->isarc;
995 dsarc = ocm->dsarc;
996 isacntl = ocm->isacntl;
997 dsacntl = ocm->dsacntl;
998 switch (dcrn) {
999 case OCM0_ISARC:
1000 isarc = val & 0xFC000000;
1001 break;
1002 case OCM0_ISACNTL:
1003 isacntl = val & 0xC0000000;
1004 break;
1005 case OCM0_DSARC:
1006 isarc = val & 0xFC000000;
1007 break;
1008 case OCM0_DSACNTL:
1009 isacntl = val & 0xC0000000;
1010 break;
1012 ocm_update_mappings(ocm, isarc, isacntl, dsarc, dsacntl);
1013 ocm->isarc = isarc;
1014 ocm->dsarc = dsarc;
1015 ocm->isacntl = isacntl;
1016 ocm->dsacntl = dsacntl;
1019 static void ocm_reset (void *opaque)
1021 ppc405_ocm_t *ocm;
1022 uint32_t isarc, dsarc, isacntl, dsacntl;
1024 ocm = opaque;
1025 isarc = 0x00000000;
1026 isacntl = 0x00000000;
1027 dsarc = 0x00000000;
1028 dsacntl = 0x00000000;
1029 ocm_update_mappings(ocm, isarc, isacntl, dsarc, dsacntl);
1030 ocm->isarc = isarc;
1031 ocm->dsarc = dsarc;
1032 ocm->isacntl = isacntl;
1033 ocm->dsacntl = dsacntl;
1036 void ppc405_ocm_init (CPUState *env, unsigned long offset)
1038 ppc405_ocm_t *ocm;
1040 ocm = qemu_mallocz(sizeof(ppc405_ocm_t));
1041 if (ocm != NULL) {
1042 ocm->offset = offset;
1043 ocm_reset(ocm);
1044 qemu_register_reset(&ocm_reset, ocm);
1045 ppc_dcr_register(env, OCM0_ISARC,
1046 ocm, &dcr_read_ocm, &dcr_write_ocm);
1047 ppc_dcr_register(env, OCM0_ISACNTL,
1048 ocm, &dcr_read_ocm, &dcr_write_ocm);
1049 ppc_dcr_register(env, OCM0_DSARC,
1050 ocm, &dcr_read_ocm, &dcr_write_ocm);
1051 ppc_dcr_register(env, OCM0_DSACNTL,
1052 ocm, &dcr_read_ocm, &dcr_write_ocm);
1056 /*****************************************************************************/
1057 /* I2C controller */
1058 typedef struct ppc4xx_i2c_t ppc4xx_i2c_t;
1059 struct ppc4xx_i2c_t {
1060 target_phys_addr_t base;
1061 qemu_irq irq;
1062 uint8_t mdata;
1063 uint8_t lmadr;
1064 uint8_t hmadr;
1065 uint8_t cntl;
1066 uint8_t mdcntl;
1067 uint8_t sts;
1068 uint8_t extsts;
1069 uint8_t sdata;
1070 uint8_t lsadr;
1071 uint8_t hsadr;
1072 uint8_t clkdiv;
1073 uint8_t intrmsk;
1074 uint8_t xfrcnt;
1075 uint8_t xtcntlss;
1076 uint8_t directcntl;
1079 static uint32_t ppc4xx_i2c_readb (void *opaque, target_phys_addr_t addr)
1081 ppc4xx_i2c_t *i2c;
1082 uint32_t ret;
1084 #ifdef DEBUG_I2C
1085 printf("%s: addr " PADDRX "\n", __func__, addr);
1086 #endif
1087 i2c = opaque;
1088 switch (addr - i2c->base) {
1089 case 0x00:
1090 // i2c_readbyte(&i2c->mdata);
1091 ret = i2c->mdata;
1092 break;
1093 case 0x02:
1094 ret = i2c->sdata;
1095 break;
1096 case 0x04:
1097 ret = i2c->lmadr;
1098 break;
1099 case 0x05:
1100 ret = i2c->hmadr;
1101 break;
1102 case 0x06:
1103 ret = i2c->cntl;
1104 break;
1105 case 0x07:
1106 ret = i2c->mdcntl;
1107 break;
1108 case 0x08:
1109 ret = i2c->sts;
1110 break;
1111 case 0x09:
1112 ret = i2c->extsts;
1113 break;
1114 case 0x0A:
1115 ret = i2c->lsadr;
1116 break;
1117 case 0x0B:
1118 ret = i2c->hsadr;
1119 break;
1120 case 0x0C:
1121 ret = i2c->clkdiv;
1122 break;
1123 case 0x0D:
1124 ret = i2c->intrmsk;
1125 break;
1126 case 0x0E:
1127 ret = i2c->xfrcnt;
1128 break;
1129 case 0x0F:
1130 ret = i2c->xtcntlss;
1131 break;
1132 case 0x10:
1133 ret = i2c->directcntl;
1134 break;
1135 default:
1136 ret = 0x00;
1137 break;
1139 #ifdef DEBUG_I2C
1140 printf("%s: addr " PADDRX " %02" PRIx32 "\n", __func__, addr, ret);
1141 #endif
1143 return ret;
1146 static void ppc4xx_i2c_writeb (void *opaque,
1147 target_phys_addr_t addr, uint32_t value)
1149 ppc4xx_i2c_t *i2c;
1151 #ifdef DEBUG_I2C
1152 printf("%s: addr " PADDRX " val %08" PRIx32 "\n", __func__, addr, value);
1153 #endif
1154 i2c = opaque;
1155 switch (addr - i2c->base) {
1156 case 0x00:
1157 i2c->mdata = value;
1158 // i2c_sendbyte(&i2c->mdata);
1159 break;
1160 case 0x02:
1161 i2c->sdata = value;
1162 break;
1163 case 0x04:
1164 i2c->lmadr = value;
1165 break;
1166 case 0x05:
1167 i2c->hmadr = value;
1168 break;
1169 case 0x06:
1170 i2c->cntl = value;
1171 break;
1172 case 0x07:
1173 i2c->mdcntl = value & 0xDF;
1174 break;
1175 case 0x08:
1176 i2c->sts &= ~(value & 0x0A);
1177 break;
1178 case 0x09:
1179 i2c->extsts &= ~(value & 0x8F);
1180 break;
1181 case 0x0A:
1182 i2c->lsadr = value;
1183 break;
1184 case 0x0B:
1185 i2c->hsadr = value;
1186 break;
1187 case 0x0C:
1188 i2c->clkdiv = value;
1189 break;
1190 case 0x0D:
1191 i2c->intrmsk = value;
1192 break;
1193 case 0x0E:
1194 i2c->xfrcnt = value & 0x77;
1195 break;
1196 case 0x0F:
1197 i2c->xtcntlss = value;
1198 break;
1199 case 0x10:
1200 i2c->directcntl = value & 0x7;
1201 break;
1205 static uint32_t ppc4xx_i2c_readw (void *opaque, target_phys_addr_t addr)
1207 uint32_t ret;
1209 #ifdef DEBUG_I2C
1210 printf("%s: addr " PADDRX "\n", __func__, addr);
1211 #endif
1212 ret = ppc4xx_i2c_readb(opaque, addr) << 8;
1213 ret |= ppc4xx_i2c_readb(opaque, addr + 1);
1215 return ret;
1218 static void ppc4xx_i2c_writew (void *opaque,
1219 target_phys_addr_t addr, uint32_t value)
1221 #ifdef DEBUG_I2C
1222 printf("%s: addr " PADDRX " val %08" PRIx32 "\n", __func__, addr, value);
1223 #endif
1224 ppc4xx_i2c_writeb(opaque, addr, value >> 8);
1225 ppc4xx_i2c_writeb(opaque, addr + 1, value);
1228 static uint32_t ppc4xx_i2c_readl (void *opaque, target_phys_addr_t addr)
1230 uint32_t ret;
1232 #ifdef DEBUG_I2C
1233 printf("%s: addr " PADDRX "\n", __func__, addr);
1234 #endif
1235 ret = ppc4xx_i2c_readb(opaque, addr) << 24;
1236 ret |= ppc4xx_i2c_readb(opaque, addr + 1) << 16;
1237 ret |= ppc4xx_i2c_readb(opaque, addr + 2) << 8;
1238 ret |= ppc4xx_i2c_readb(opaque, addr + 3);
1240 return ret;
1243 static void ppc4xx_i2c_writel (void *opaque,
1244 target_phys_addr_t addr, uint32_t value)
1246 #ifdef DEBUG_I2C
1247 printf("%s: addr " PADDRX " val %08" PRIx32 "\n", __func__, addr, value);
1248 #endif
1249 ppc4xx_i2c_writeb(opaque, addr, value >> 24);
1250 ppc4xx_i2c_writeb(opaque, addr + 1, value >> 16);
1251 ppc4xx_i2c_writeb(opaque, addr + 2, value >> 8);
1252 ppc4xx_i2c_writeb(opaque, addr + 3, value);
1255 static CPUReadMemoryFunc *i2c_read[] = {
1256 &ppc4xx_i2c_readb,
1257 &ppc4xx_i2c_readw,
1258 &ppc4xx_i2c_readl,
1261 static CPUWriteMemoryFunc *i2c_write[] = {
1262 &ppc4xx_i2c_writeb,
1263 &ppc4xx_i2c_writew,
1264 &ppc4xx_i2c_writel,
1267 static void ppc4xx_i2c_reset (void *opaque)
1269 ppc4xx_i2c_t *i2c;
1271 i2c = opaque;
1272 i2c->mdata = 0x00;
1273 i2c->sdata = 0x00;
1274 i2c->cntl = 0x00;
1275 i2c->mdcntl = 0x00;
1276 i2c->sts = 0x00;
1277 i2c->extsts = 0x00;
1278 i2c->clkdiv = 0x00;
1279 i2c->xfrcnt = 0x00;
1280 i2c->directcntl = 0x0F;
1283 void ppc405_i2c_init (CPUState *env, ppc4xx_mmio_t *mmio,
1284 target_phys_addr_t offset, qemu_irq irq)
1286 ppc4xx_i2c_t *i2c;
1288 i2c = qemu_mallocz(sizeof(ppc4xx_i2c_t));
1289 if (i2c != NULL) {
1290 i2c->base = offset;
1291 i2c->irq = irq;
1292 ppc4xx_i2c_reset(i2c);
1293 #ifdef DEBUG_I2C
1294 printf("%s: offset " PADDRX "\n", __func__, offset);
1295 #endif
1296 ppc4xx_mmio_register(env, mmio, offset, 0x011,
1297 i2c_read, i2c_write, i2c);
1298 qemu_register_reset(ppc4xx_i2c_reset, i2c);
1302 /*****************************************************************************/
1303 /* General purpose timers */
1304 typedef struct ppc4xx_gpt_t ppc4xx_gpt_t;
1305 struct ppc4xx_gpt_t {
1306 target_phys_addr_t base;
1307 int64_t tb_offset;
1308 uint32_t tb_freq;
1309 struct QEMUTimer *timer;
1310 qemu_irq irqs[5];
1311 uint32_t oe;
1312 uint32_t ol;
1313 uint32_t im;
1314 uint32_t is;
1315 uint32_t ie;
1316 uint32_t comp[5];
1317 uint32_t mask[5];
1320 static uint32_t ppc4xx_gpt_readb (void *opaque, target_phys_addr_t addr)
1322 #ifdef DEBUG_GPT
1323 printf("%s: addr " PADDRX "\n", __func__, addr);
1324 #endif
1325 /* XXX: generate a bus fault */
1326 return -1;
1329 static void ppc4xx_gpt_writeb (void *opaque,
1330 target_phys_addr_t addr, uint32_t value)
1332 #ifdef DEBUG_I2C
1333 printf("%s: addr " PADDRX " val %08" PRIx32 "\n", __func__, addr, value);
1334 #endif
1335 /* XXX: generate a bus fault */
1338 static uint32_t ppc4xx_gpt_readw (void *opaque, target_phys_addr_t addr)
1340 #ifdef DEBUG_GPT
1341 printf("%s: addr " PADDRX "\n", __func__, addr);
1342 #endif
1343 /* XXX: generate a bus fault */
1344 return -1;
1347 static void ppc4xx_gpt_writew (void *opaque,
1348 target_phys_addr_t addr, uint32_t value)
1350 #ifdef DEBUG_I2C
1351 printf("%s: addr " PADDRX " val %08" PRIx32 "\n", __func__, addr, value);
1352 #endif
1353 /* XXX: generate a bus fault */
1356 static int ppc4xx_gpt_compare (ppc4xx_gpt_t *gpt, int n)
1358 /* XXX: TODO */
1359 return 0;
1362 static void ppc4xx_gpt_set_output (ppc4xx_gpt_t *gpt, int n, int level)
1364 /* XXX: TODO */
1367 static void ppc4xx_gpt_set_outputs (ppc4xx_gpt_t *gpt)
1369 uint32_t mask;
1370 int i;
1372 mask = 0x80000000;
1373 for (i = 0; i < 5; i++) {
1374 if (gpt->oe & mask) {
1375 /* Output is enabled */
1376 if (ppc4xx_gpt_compare(gpt, i)) {
1377 /* Comparison is OK */
1378 ppc4xx_gpt_set_output(gpt, i, gpt->ol & mask);
1379 } else {
1380 /* Comparison is KO */
1381 ppc4xx_gpt_set_output(gpt, i, gpt->ol & mask ? 0 : 1);
1384 mask = mask >> 1;
1388 static void ppc4xx_gpt_set_irqs (ppc4xx_gpt_t *gpt)
1390 uint32_t mask;
1391 int i;
1393 mask = 0x00008000;
1394 for (i = 0; i < 5; i++) {
1395 if (gpt->is & gpt->im & mask)
1396 qemu_irq_raise(gpt->irqs[i]);
1397 else
1398 qemu_irq_lower(gpt->irqs[i]);
1399 mask = mask >> 1;
1403 static void ppc4xx_gpt_compute_timer (ppc4xx_gpt_t *gpt)
1405 /* XXX: TODO */
1408 static uint32_t ppc4xx_gpt_readl (void *opaque, target_phys_addr_t addr)
1410 ppc4xx_gpt_t *gpt;
1411 uint32_t ret;
1412 int idx;
1414 #ifdef DEBUG_GPT
1415 printf("%s: addr " PADDRX "\n", __func__, addr);
1416 #endif
1417 gpt = opaque;
1418 switch (addr - gpt->base) {
1419 case 0x00:
1420 /* Time base counter */
1421 ret = muldiv64(qemu_get_clock(vm_clock) + gpt->tb_offset,
1422 gpt->tb_freq, ticks_per_sec);
1423 break;
1424 case 0x10:
1425 /* Output enable */
1426 ret = gpt->oe;
1427 break;
1428 case 0x14:
1429 /* Output level */
1430 ret = gpt->ol;
1431 break;
1432 case 0x18:
1433 /* Interrupt mask */
1434 ret = gpt->im;
1435 break;
1436 case 0x1C:
1437 case 0x20:
1438 /* Interrupt status */
1439 ret = gpt->is;
1440 break;
1441 case 0x24:
1442 /* Interrupt enable */
1443 ret = gpt->ie;
1444 break;
1445 case 0x80 ... 0x90:
1446 /* Compare timer */
1447 idx = ((addr - gpt->base) - 0x80) >> 2;
1448 ret = gpt->comp[idx];
1449 break;
1450 case 0xC0 ... 0xD0:
1451 /* Compare mask */
1452 idx = ((addr - gpt->base) - 0xC0) >> 2;
1453 ret = gpt->mask[idx];
1454 break;
1455 default:
1456 ret = -1;
1457 break;
1460 return ret;
1463 static void ppc4xx_gpt_writel (void *opaque,
1464 target_phys_addr_t addr, uint32_t value)
1466 ppc4xx_gpt_t *gpt;
1467 int idx;
1469 #ifdef DEBUG_I2C
1470 printf("%s: addr " PADDRX " val %08" PRIx32 "\n", __func__, addr, value);
1471 #endif
1472 gpt = opaque;
1473 switch (addr - gpt->base) {
1474 case 0x00:
1475 /* Time base counter */
1476 gpt->tb_offset = muldiv64(value, ticks_per_sec, gpt->tb_freq)
1477 - qemu_get_clock(vm_clock);
1478 ppc4xx_gpt_compute_timer(gpt);
1479 break;
1480 case 0x10:
1481 /* Output enable */
1482 gpt->oe = value & 0xF8000000;
1483 ppc4xx_gpt_set_outputs(gpt);
1484 break;
1485 case 0x14:
1486 /* Output level */
1487 gpt->ol = value & 0xF8000000;
1488 ppc4xx_gpt_set_outputs(gpt);
1489 break;
1490 case 0x18:
1491 /* Interrupt mask */
1492 gpt->im = value & 0x0000F800;
1493 break;
1494 case 0x1C:
1495 /* Interrupt status set */
1496 gpt->is |= value & 0x0000F800;
1497 ppc4xx_gpt_set_irqs(gpt);
1498 break;
1499 case 0x20:
1500 /* Interrupt status clear */
1501 gpt->is &= ~(value & 0x0000F800);
1502 ppc4xx_gpt_set_irqs(gpt);
1503 break;
1504 case 0x24:
1505 /* Interrupt enable */
1506 gpt->ie = value & 0x0000F800;
1507 ppc4xx_gpt_set_irqs(gpt);
1508 break;
1509 case 0x80 ... 0x90:
1510 /* Compare timer */
1511 idx = ((addr - gpt->base) - 0x80) >> 2;
1512 gpt->comp[idx] = value & 0xF8000000;
1513 ppc4xx_gpt_compute_timer(gpt);
1514 break;
1515 case 0xC0 ... 0xD0:
1516 /* Compare mask */
1517 idx = ((addr - gpt->base) - 0xC0) >> 2;
1518 gpt->mask[idx] = value & 0xF8000000;
1519 ppc4xx_gpt_compute_timer(gpt);
1520 break;
1524 static CPUReadMemoryFunc *gpt_read[] = {
1525 &ppc4xx_gpt_readb,
1526 &ppc4xx_gpt_readw,
1527 &ppc4xx_gpt_readl,
1530 static CPUWriteMemoryFunc *gpt_write[] = {
1531 &ppc4xx_gpt_writeb,
1532 &ppc4xx_gpt_writew,
1533 &ppc4xx_gpt_writel,
1536 static void ppc4xx_gpt_cb (void *opaque)
1538 ppc4xx_gpt_t *gpt;
1540 gpt = opaque;
1541 ppc4xx_gpt_set_irqs(gpt);
1542 ppc4xx_gpt_set_outputs(gpt);
1543 ppc4xx_gpt_compute_timer(gpt);
1546 static void ppc4xx_gpt_reset (void *opaque)
1548 ppc4xx_gpt_t *gpt;
1549 int i;
1551 gpt = opaque;
1552 qemu_del_timer(gpt->timer);
1553 gpt->oe = 0x00000000;
1554 gpt->ol = 0x00000000;
1555 gpt->im = 0x00000000;
1556 gpt->is = 0x00000000;
1557 gpt->ie = 0x00000000;
1558 for (i = 0; i < 5; i++) {
1559 gpt->comp[i] = 0x00000000;
1560 gpt->mask[i] = 0x00000000;
1564 void ppc4xx_gpt_init (CPUState *env, ppc4xx_mmio_t *mmio,
1565 target_phys_addr_t offset, qemu_irq irqs[5])
1567 ppc4xx_gpt_t *gpt;
1568 int i;
1570 gpt = qemu_mallocz(sizeof(ppc4xx_gpt_t));
1571 if (gpt != NULL) {
1572 gpt->base = offset;
1573 for (i = 0; i < 5; i++)
1574 gpt->irqs[i] = irqs[i];
1575 gpt->timer = qemu_new_timer(vm_clock, &ppc4xx_gpt_cb, gpt);
1576 ppc4xx_gpt_reset(gpt);
1577 #ifdef DEBUG_GPT
1578 printf("%s: offset " PADDRX "\n", __func__, offset);
1579 #endif
1580 ppc4xx_mmio_register(env, mmio, offset, 0x0D4,
1581 gpt_read, gpt_write, gpt);
1582 qemu_register_reset(ppc4xx_gpt_reset, gpt);
1586 /*****************************************************************************/
1587 /* MAL */
1588 enum {
1589 MAL0_CFG = 0x180,
1590 MAL0_ESR = 0x181,
1591 MAL0_IER = 0x182,
1592 MAL0_TXCASR = 0x184,
1593 MAL0_TXCARR = 0x185,
1594 MAL0_TXEOBISR = 0x186,
1595 MAL0_TXDEIR = 0x187,
1596 MAL0_RXCASR = 0x190,
1597 MAL0_RXCARR = 0x191,
1598 MAL0_RXEOBISR = 0x192,
1599 MAL0_RXDEIR = 0x193,
1600 MAL0_TXCTP0R = 0x1A0,
1601 MAL0_TXCTP1R = 0x1A1,
1602 MAL0_TXCTP2R = 0x1A2,
1603 MAL0_TXCTP3R = 0x1A3,
1604 MAL0_RXCTP0R = 0x1C0,
1605 MAL0_RXCTP1R = 0x1C1,
1606 MAL0_RCBS0 = 0x1E0,
1607 MAL0_RCBS1 = 0x1E1,
1610 typedef struct ppc40x_mal_t ppc40x_mal_t;
1611 struct ppc40x_mal_t {
1612 qemu_irq irqs[4];
1613 uint32_t cfg;
1614 uint32_t esr;
1615 uint32_t ier;
1616 uint32_t txcasr;
1617 uint32_t txcarr;
1618 uint32_t txeobisr;
1619 uint32_t txdeir;
1620 uint32_t rxcasr;
1621 uint32_t rxcarr;
1622 uint32_t rxeobisr;
1623 uint32_t rxdeir;
1624 uint32_t txctpr[4];
1625 uint32_t rxctpr[2];
1626 uint32_t rcbs[2];
1629 static void ppc40x_mal_reset (void *opaque);
1631 static target_ulong dcr_read_mal (void *opaque, int dcrn)
1633 ppc40x_mal_t *mal;
1634 target_ulong ret;
1636 mal = opaque;
1637 switch (dcrn) {
1638 case MAL0_CFG:
1639 ret = mal->cfg;
1640 break;
1641 case MAL0_ESR:
1642 ret = mal->esr;
1643 break;
1644 case MAL0_IER:
1645 ret = mal->ier;
1646 break;
1647 case MAL0_TXCASR:
1648 ret = mal->txcasr;
1649 break;
1650 case MAL0_TXCARR:
1651 ret = mal->txcarr;
1652 break;
1653 case MAL0_TXEOBISR:
1654 ret = mal->txeobisr;
1655 break;
1656 case MAL0_TXDEIR:
1657 ret = mal->txdeir;
1658 break;
1659 case MAL0_RXCASR:
1660 ret = mal->rxcasr;
1661 break;
1662 case MAL0_RXCARR:
1663 ret = mal->rxcarr;
1664 break;
1665 case MAL0_RXEOBISR:
1666 ret = mal->rxeobisr;
1667 break;
1668 case MAL0_RXDEIR:
1669 ret = mal->rxdeir;
1670 break;
1671 case MAL0_TXCTP0R:
1672 ret = mal->txctpr[0];
1673 break;
1674 case MAL0_TXCTP1R:
1675 ret = mal->txctpr[1];
1676 break;
1677 case MAL0_TXCTP2R:
1678 ret = mal->txctpr[2];
1679 break;
1680 case MAL0_TXCTP3R:
1681 ret = mal->txctpr[3];
1682 break;
1683 case MAL0_RXCTP0R:
1684 ret = mal->rxctpr[0];
1685 break;
1686 case MAL0_RXCTP1R:
1687 ret = mal->rxctpr[1];
1688 break;
1689 case MAL0_RCBS0:
1690 ret = mal->rcbs[0];
1691 break;
1692 case MAL0_RCBS1:
1693 ret = mal->rcbs[1];
1694 break;
1695 default:
1696 ret = 0;
1697 break;
1700 return ret;
1703 static void dcr_write_mal (void *opaque, int dcrn, target_ulong val)
1705 ppc40x_mal_t *mal;
1706 int idx;
1708 mal = opaque;
1709 switch (dcrn) {
1710 case MAL0_CFG:
1711 if (val & 0x80000000)
1712 ppc40x_mal_reset(mal);
1713 mal->cfg = val & 0x00FFC087;
1714 break;
1715 case MAL0_ESR:
1716 /* Read/clear */
1717 mal->esr &= ~val;
1718 break;
1719 case MAL0_IER:
1720 mal->ier = val & 0x0000001F;
1721 break;
1722 case MAL0_TXCASR:
1723 mal->txcasr = val & 0xF0000000;
1724 break;
1725 case MAL0_TXCARR:
1726 mal->txcarr = val & 0xF0000000;
1727 break;
1728 case MAL0_TXEOBISR:
1729 /* Read/clear */
1730 mal->txeobisr &= ~val;
1731 break;
1732 case MAL0_TXDEIR:
1733 /* Read/clear */
1734 mal->txdeir &= ~val;
1735 break;
1736 case MAL0_RXCASR:
1737 mal->rxcasr = val & 0xC0000000;
1738 break;
1739 case MAL0_RXCARR:
1740 mal->rxcarr = val & 0xC0000000;
1741 break;
1742 case MAL0_RXEOBISR:
1743 /* Read/clear */
1744 mal->rxeobisr &= ~val;
1745 break;
1746 case MAL0_RXDEIR:
1747 /* Read/clear */
1748 mal->rxdeir &= ~val;
1749 break;
1750 case MAL0_TXCTP0R:
1751 idx = 0;
1752 goto update_tx_ptr;
1753 case MAL0_TXCTP1R:
1754 idx = 1;
1755 goto update_tx_ptr;
1756 case MAL0_TXCTP2R:
1757 idx = 2;
1758 goto update_tx_ptr;
1759 case MAL0_TXCTP3R:
1760 idx = 3;
1761 update_tx_ptr:
1762 mal->txctpr[idx] = val;
1763 break;
1764 case MAL0_RXCTP0R:
1765 idx = 0;
1766 goto update_rx_ptr;
1767 case MAL0_RXCTP1R:
1768 idx = 1;
1769 update_rx_ptr:
1770 mal->rxctpr[idx] = val;
1771 break;
1772 case MAL0_RCBS0:
1773 idx = 0;
1774 goto update_rx_size;
1775 case MAL0_RCBS1:
1776 idx = 1;
1777 update_rx_size:
1778 mal->rcbs[idx] = val & 0x000000FF;
1779 break;
1783 static void ppc40x_mal_reset (void *opaque)
1785 ppc40x_mal_t *mal;
1787 mal = opaque;
1788 mal->cfg = 0x0007C000;
1789 mal->esr = 0x00000000;
1790 mal->ier = 0x00000000;
1791 mal->rxcasr = 0x00000000;
1792 mal->rxdeir = 0x00000000;
1793 mal->rxeobisr = 0x00000000;
1794 mal->txcasr = 0x00000000;
1795 mal->txdeir = 0x00000000;
1796 mal->txeobisr = 0x00000000;
1799 void ppc405_mal_init (CPUState *env, qemu_irq irqs[4])
1801 ppc40x_mal_t *mal;
1802 int i;
1804 mal = qemu_mallocz(sizeof(ppc40x_mal_t));
1805 if (mal != NULL) {
1806 for (i = 0; i < 4; i++)
1807 mal->irqs[i] = irqs[i];
1808 ppc40x_mal_reset(mal);
1809 qemu_register_reset(&ppc40x_mal_reset, mal);
1810 ppc_dcr_register(env, MAL0_CFG,
1811 mal, &dcr_read_mal, &dcr_write_mal);
1812 ppc_dcr_register(env, MAL0_ESR,
1813 mal, &dcr_read_mal, &dcr_write_mal);
1814 ppc_dcr_register(env, MAL0_IER,
1815 mal, &dcr_read_mal, &dcr_write_mal);
1816 ppc_dcr_register(env, MAL0_TXCASR,
1817 mal, &dcr_read_mal, &dcr_write_mal);
1818 ppc_dcr_register(env, MAL0_TXCARR,
1819 mal, &dcr_read_mal, &dcr_write_mal);
1820 ppc_dcr_register(env, MAL0_TXEOBISR,
1821 mal, &dcr_read_mal, &dcr_write_mal);
1822 ppc_dcr_register(env, MAL0_TXDEIR,
1823 mal, &dcr_read_mal, &dcr_write_mal);
1824 ppc_dcr_register(env, MAL0_RXCASR,
1825 mal, &dcr_read_mal, &dcr_write_mal);
1826 ppc_dcr_register(env, MAL0_RXCARR,
1827 mal, &dcr_read_mal, &dcr_write_mal);
1828 ppc_dcr_register(env, MAL0_RXEOBISR,
1829 mal, &dcr_read_mal, &dcr_write_mal);
1830 ppc_dcr_register(env, MAL0_RXDEIR,
1831 mal, &dcr_read_mal, &dcr_write_mal);
1832 ppc_dcr_register(env, MAL0_TXCTP0R,
1833 mal, &dcr_read_mal, &dcr_write_mal);
1834 ppc_dcr_register(env, MAL0_TXCTP1R,
1835 mal, &dcr_read_mal, &dcr_write_mal);
1836 ppc_dcr_register(env, MAL0_TXCTP2R,
1837 mal, &dcr_read_mal, &dcr_write_mal);
1838 ppc_dcr_register(env, MAL0_TXCTP3R,
1839 mal, &dcr_read_mal, &dcr_write_mal);
1840 ppc_dcr_register(env, MAL0_RXCTP0R,
1841 mal, &dcr_read_mal, &dcr_write_mal);
1842 ppc_dcr_register(env, MAL0_RXCTP1R,
1843 mal, &dcr_read_mal, &dcr_write_mal);
1844 ppc_dcr_register(env, MAL0_RCBS0,
1845 mal, &dcr_read_mal, &dcr_write_mal);
1846 ppc_dcr_register(env, MAL0_RCBS1,
1847 mal, &dcr_read_mal, &dcr_write_mal);
1851 /*****************************************************************************/
1852 /* SPR */
1853 void ppc40x_core_reset (CPUState *env)
1855 target_ulong dbsr;
1857 printf("Reset PowerPC core\n");
1858 env->interrupt_request |= CPU_INTERRUPT_EXITTB;
1859 /* XXX: TOFIX */
1860 #if 0
1861 cpu_ppc_reset(env);
1862 #else
1863 qemu_system_reset_request();
1864 #endif
1865 dbsr = env->spr[SPR_40x_DBSR];
1866 dbsr &= ~0x00000300;
1867 dbsr |= 0x00000100;
1868 env->spr[SPR_40x_DBSR] = dbsr;
1871 void ppc40x_chip_reset (CPUState *env)
1873 target_ulong dbsr;
1875 printf("Reset PowerPC chip\n");
1876 env->interrupt_request |= CPU_INTERRUPT_EXITTB;
1877 /* XXX: TOFIX */
1878 #if 0
1879 cpu_ppc_reset(env);
1880 #else
1881 qemu_system_reset_request();
1882 #endif
1883 /* XXX: TODO reset all internal peripherals */
1884 dbsr = env->spr[SPR_40x_DBSR];
1885 dbsr &= ~0x00000300;
1886 dbsr |= 0x00000200;
1887 env->spr[SPR_40x_DBSR] = dbsr;
1890 void ppc40x_system_reset (CPUState *env)
1892 printf("Reset PowerPC system\n");
1893 qemu_system_reset_request();
1896 void store_40x_dbcr0 (CPUState *env, uint32_t val)
1898 switch ((val >> 28) & 0x3) {
1899 case 0x0:
1900 /* No action */
1901 break;
1902 case 0x1:
1903 /* Core reset */
1904 ppc40x_core_reset(env);
1905 break;
1906 case 0x2:
1907 /* Chip reset */
1908 ppc40x_chip_reset(env);
1909 break;
1910 case 0x3:
1911 /* System reset */
1912 ppc40x_system_reset(env);
1913 break;
1917 /*****************************************************************************/
1918 /* PowerPC 405CR */
1919 enum {
1920 PPC405CR_CPC0_PLLMR = 0x0B0,
1921 PPC405CR_CPC0_CR0 = 0x0B1,
1922 PPC405CR_CPC0_CR1 = 0x0B2,
1923 PPC405CR_CPC0_PSR = 0x0B4,
1924 PPC405CR_CPC0_JTAGID = 0x0B5,
1925 PPC405CR_CPC0_ER = 0x0B9,
1926 PPC405CR_CPC0_FR = 0x0BA,
1927 PPC405CR_CPC0_SR = 0x0BB,
1930 enum {
1931 PPC405CR_CPU_CLK = 0,
1932 PPC405CR_TMR_CLK = 1,
1933 PPC405CR_PLB_CLK = 2,
1934 PPC405CR_SDRAM_CLK = 3,
1935 PPC405CR_OPB_CLK = 4,
1936 PPC405CR_EXT_CLK = 5,
1937 PPC405CR_UART_CLK = 6,
1938 PPC405CR_CLK_NB = 7,
1941 typedef struct ppc405cr_cpc_t ppc405cr_cpc_t;
1942 struct ppc405cr_cpc_t {
1943 clk_setup_t clk_setup[PPC405CR_CLK_NB];
1944 uint32_t sysclk;
1945 uint32_t psr;
1946 uint32_t cr0;
1947 uint32_t cr1;
1948 uint32_t jtagid;
1949 uint32_t pllmr;
1950 uint32_t er;
1951 uint32_t fr;
1954 static void ppc405cr_clk_setup (ppc405cr_cpc_t *cpc)
1956 uint64_t VCO_out, PLL_out;
1957 uint32_t CPU_clk, TMR_clk, SDRAM_clk, PLB_clk, OPB_clk, EXT_clk, UART_clk;
1958 int M, D0, D1, D2;
1960 D0 = ((cpc->pllmr >> 26) & 0x3) + 1; /* CBDV */
1961 if (cpc->pllmr & 0x80000000) {
1962 D1 = (((cpc->pllmr >> 20) - 1) & 0xF) + 1; /* FBDV */
1963 D2 = 8 - ((cpc->pllmr >> 16) & 0x7); /* FWDVA */
1964 M = D0 * D1 * D2;
1965 VCO_out = cpc->sysclk * M;
1966 if (VCO_out < 400000000 || VCO_out > 800000000) {
1967 /* PLL cannot lock */
1968 cpc->pllmr &= ~0x80000000;
1969 goto bypass_pll;
1971 PLL_out = VCO_out / D2;
1972 } else {
1973 /* Bypass PLL */
1974 bypass_pll:
1975 M = D0;
1976 PLL_out = cpc->sysclk * M;
1978 CPU_clk = PLL_out;
1979 if (cpc->cr1 & 0x00800000)
1980 TMR_clk = cpc->sysclk; /* Should have a separate clock */
1981 else
1982 TMR_clk = CPU_clk;
1983 PLB_clk = CPU_clk / D0;
1984 SDRAM_clk = PLB_clk;
1985 D0 = ((cpc->pllmr >> 10) & 0x3) + 1;
1986 OPB_clk = PLB_clk / D0;
1987 D0 = ((cpc->pllmr >> 24) & 0x3) + 2;
1988 EXT_clk = PLB_clk / D0;
1989 D0 = ((cpc->cr0 >> 1) & 0x1F) + 1;
1990 UART_clk = CPU_clk / D0;
1991 /* Setup CPU clocks */
1992 clk_setup(&cpc->clk_setup[PPC405CR_CPU_CLK], CPU_clk);
1993 /* Setup time-base clock */
1994 clk_setup(&cpc->clk_setup[PPC405CR_TMR_CLK], TMR_clk);
1995 /* Setup PLB clock */
1996 clk_setup(&cpc->clk_setup[PPC405CR_PLB_CLK], PLB_clk);
1997 /* Setup SDRAM clock */
1998 clk_setup(&cpc->clk_setup[PPC405CR_SDRAM_CLK], SDRAM_clk);
1999 /* Setup OPB clock */
2000 clk_setup(&cpc->clk_setup[PPC405CR_OPB_CLK], OPB_clk);
2001 /* Setup external clock */
2002 clk_setup(&cpc->clk_setup[PPC405CR_EXT_CLK], EXT_clk);
2003 /* Setup UART clock */
2004 clk_setup(&cpc->clk_setup[PPC405CR_UART_CLK], UART_clk);
2007 static target_ulong dcr_read_crcpc (void *opaque, int dcrn)
2009 ppc405cr_cpc_t *cpc;
2010 target_ulong ret;
2012 cpc = opaque;
2013 switch (dcrn) {
2014 case PPC405CR_CPC0_PLLMR:
2015 ret = cpc->pllmr;
2016 break;
2017 case PPC405CR_CPC0_CR0:
2018 ret = cpc->cr0;
2019 break;
2020 case PPC405CR_CPC0_CR1:
2021 ret = cpc->cr1;
2022 break;
2023 case PPC405CR_CPC0_PSR:
2024 ret = cpc->psr;
2025 break;
2026 case PPC405CR_CPC0_JTAGID:
2027 ret = cpc->jtagid;
2028 break;
2029 case PPC405CR_CPC0_ER:
2030 ret = cpc->er;
2031 break;
2032 case PPC405CR_CPC0_FR:
2033 ret = cpc->fr;
2034 break;
2035 case PPC405CR_CPC0_SR:
2036 ret = ~(cpc->er | cpc->fr) & 0xFFFF0000;
2037 break;
2038 default:
2039 /* Avoid gcc warning */
2040 ret = 0;
2041 break;
2044 return ret;
2047 static void dcr_write_crcpc (void *opaque, int dcrn, target_ulong val)
2049 ppc405cr_cpc_t *cpc;
2051 cpc = opaque;
2052 switch (dcrn) {
2053 case PPC405CR_CPC0_PLLMR:
2054 cpc->pllmr = val & 0xFFF77C3F;
2055 break;
2056 case PPC405CR_CPC0_CR0:
2057 cpc->cr0 = val & 0x0FFFFFFE;
2058 break;
2059 case PPC405CR_CPC0_CR1:
2060 cpc->cr1 = val & 0x00800000;
2061 break;
2062 case PPC405CR_CPC0_PSR:
2063 /* Read-only */
2064 break;
2065 case PPC405CR_CPC0_JTAGID:
2066 /* Read-only */
2067 break;
2068 case PPC405CR_CPC0_ER:
2069 cpc->er = val & 0xBFFC0000;
2070 break;
2071 case PPC405CR_CPC0_FR:
2072 cpc->fr = val & 0xBFFC0000;
2073 break;
2074 case PPC405CR_CPC0_SR:
2075 /* Read-only */
2076 break;
2080 static void ppc405cr_cpc_reset (void *opaque)
2082 ppc405cr_cpc_t *cpc;
2083 int D;
2085 cpc = opaque;
2086 /* Compute PLLMR value from PSR settings */
2087 cpc->pllmr = 0x80000000;
2088 /* PFWD */
2089 switch ((cpc->psr >> 30) & 3) {
2090 case 0:
2091 /* Bypass */
2092 cpc->pllmr &= ~0x80000000;
2093 break;
2094 case 1:
2095 /* Divide by 3 */
2096 cpc->pllmr |= 5 << 16;
2097 break;
2098 case 2:
2099 /* Divide by 4 */
2100 cpc->pllmr |= 4 << 16;
2101 break;
2102 case 3:
2103 /* Divide by 6 */
2104 cpc->pllmr |= 2 << 16;
2105 break;
2107 /* PFBD */
2108 D = (cpc->psr >> 28) & 3;
2109 cpc->pllmr |= (D + 1) << 20;
2110 /* PT */
2111 D = (cpc->psr >> 25) & 7;
2112 switch (D) {
2113 case 0x2:
2114 cpc->pllmr |= 0x13;
2115 break;
2116 case 0x4:
2117 cpc->pllmr |= 0x15;
2118 break;
2119 case 0x5:
2120 cpc->pllmr |= 0x16;
2121 break;
2122 default:
2123 break;
2125 /* PDC */
2126 D = (cpc->psr >> 23) & 3;
2127 cpc->pllmr |= D << 26;
2128 /* ODP */
2129 D = (cpc->psr >> 21) & 3;
2130 cpc->pllmr |= D << 10;
2131 /* EBPD */
2132 D = (cpc->psr >> 17) & 3;
2133 cpc->pllmr |= D << 24;
2134 cpc->cr0 = 0x0000003C;
2135 cpc->cr1 = 0x2B0D8800;
2136 cpc->er = 0x00000000;
2137 cpc->fr = 0x00000000;
2138 ppc405cr_clk_setup(cpc);
2141 static void ppc405cr_clk_init (ppc405cr_cpc_t *cpc)
2143 int D;
2145 /* XXX: this should be read from IO pins */
2146 cpc->psr = 0x00000000; /* 8 bits ROM */
2147 /* PFWD */
2148 D = 0x2; /* Divide by 4 */
2149 cpc->psr |= D << 30;
2150 /* PFBD */
2151 D = 0x1; /* Divide by 2 */
2152 cpc->psr |= D << 28;
2153 /* PDC */
2154 D = 0x1; /* Divide by 2 */
2155 cpc->psr |= D << 23;
2156 /* PT */
2157 D = 0x5; /* M = 16 */
2158 cpc->psr |= D << 25;
2159 /* ODP */
2160 D = 0x1; /* Divide by 2 */
2161 cpc->psr |= D << 21;
2162 /* EBDP */
2163 D = 0x2; /* Divide by 4 */
2164 cpc->psr |= D << 17;
2167 static void ppc405cr_cpc_init (CPUState *env, clk_setup_t clk_setup[7],
2168 uint32_t sysclk)
2170 ppc405cr_cpc_t *cpc;
2172 cpc = qemu_mallocz(sizeof(ppc405cr_cpc_t));
2173 if (cpc != NULL) {
2174 memcpy(cpc->clk_setup, clk_setup,
2175 PPC405CR_CLK_NB * sizeof(clk_setup_t));
2176 cpc->sysclk = sysclk;
2177 cpc->jtagid = 0x42051049;
2178 ppc_dcr_register(env, PPC405CR_CPC0_PSR, cpc,
2179 &dcr_read_crcpc, &dcr_write_crcpc);
2180 ppc_dcr_register(env, PPC405CR_CPC0_CR0, cpc,
2181 &dcr_read_crcpc, &dcr_write_crcpc);
2182 ppc_dcr_register(env, PPC405CR_CPC0_CR1, cpc,
2183 &dcr_read_crcpc, &dcr_write_crcpc);
2184 ppc_dcr_register(env, PPC405CR_CPC0_JTAGID, cpc,
2185 &dcr_read_crcpc, &dcr_write_crcpc);
2186 ppc_dcr_register(env, PPC405CR_CPC0_PLLMR, cpc,
2187 &dcr_read_crcpc, &dcr_write_crcpc);
2188 ppc_dcr_register(env, PPC405CR_CPC0_ER, cpc,
2189 &dcr_read_crcpc, &dcr_write_crcpc);
2190 ppc_dcr_register(env, PPC405CR_CPC0_FR, cpc,
2191 &dcr_read_crcpc, &dcr_write_crcpc);
2192 ppc_dcr_register(env, PPC405CR_CPC0_SR, cpc,
2193 &dcr_read_crcpc, &dcr_write_crcpc);
2194 ppc405cr_clk_init(cpc);
2195 qemu_register_reset(ppc405cr_cpc_reset, cpc);
2196 ppc405cr_cpc_reset(cpc);
2200 CPUState *ppc405cr_init (target_phys_addr_t ram_bases[4],
2201 target_phys_addr_t ram_sizes[4],
2202 uint32_t sysclk, qemu_irq **picp,
2203 ram_addr_t *offsetp, int do_init)
2205 clk_setup_t clk_setup[PPC405CR_CLK_NB];
2206 qemu_irq dma_irqs[4];
2207 CPUState *env;
2208 ppc4xx_mmio_t *mmio;
2209 qemu_irq *pic, *irqs;
2210 ram_addr_t offset;
2211 int i;
2213 memset(clk_setup, 0, sizeof(clk_setup));
2214 env = ppc4xx_init("405cr", &clk_setup[PPC405CR_CPU_CLK],
2215 &clk_setup[PPC405CR_TMR_CLK], sysclk);
2216 /* Memory mapped devices registers */
2217 mmio = ppc4xx_mmio_init(env, 0xEF600000);
2218 /* PLB arbitrer */
2219 ppc4xx_plb_init(env);
2220 /* PLB to OPB bridge */
2221 ppc4xx_pob_init(env);
2222 /* OBP arbitrer */
2223 ppc4xx_opba_init(env, mmio, 0x600);
2224 /* Universal interrupt controller */
2225 irqs = qemu_mallocz(sizeof(qemu_irq) * PPCUIC_OUTPUT_NB);
2226 irqs[PPCUIC_OUTPUT_INT] =
2227 ((qemu_irq *)env->irq_inputs)[PPC40x_INPUT_INT];
2228 irqs[PPCUIC_OUTPUT_CINT] =
2229 ((qemu_irq *)env->irq_inputs)[PPC40x_INPUT_CINT];
2230 pic = ppcuic_init(env, irqs, 0x0C0, 0, 1);
2231 *picp = pic;
2232 /* SDRAM controller */
2233 ppc4xx_sdram_init(env, pic[14], 1, ram_bases, ram_sizes, do_init);
2234 offset = 0;
2235 for (i = 0; i < 4; i++)
2236 offset += ram_sizes[i];
2237 /* External bus controller */
2238 ppc405_ebc_init(env);
2239 /* DMA controller */
2240 dma_irqs[0] = pic[26];
2241 dma_irqs[1] = pic[25];
2242 dma_irqs[2] = pic[24];
2243 dma_irqs[3] = pic[23];
2244 ppc405_dma_init(env, dma_irqs);
2245 /* Serial ports */
2246 if (serial_hds[0] != NULL) {
2247 ppc405_serial_init(env, mmio, 0x300, pic[0], serial_hds[0]);
2249 if (serial_hds[1] != NULL) {
2250 ppc405_serial_init(env, mmio, 0x400, pic[1], serial_hds[1]);
2252 /* IIC controller */
2253 ppc405_i2c_init(env, mmio, 0x500, pic[2]);
2254 /* GPIO */
2255 ppc405_gpio_init(env, mmio, 0x700);
2256 /* CPU control */
2257 ppc405cr_cpc_init(env, clk_setup, sysclk);
2258 *offsetp = offset;
2260 return env;
2263 /*****************************************************************************/
2264 /* PowerPC 405EP */
2265 /* CPU control */
2266 enum {
2267 PPC405EP_CPC0_PLLMR0 = 0x0F0,
2268 PPC405EP_CPC0_BOOT = 0x0F1,
2269 PPC405EP_CPC0_EPCTL = 0x0F3,
2270 PPC405EP_CPC0_PLLMR1 = 0x0F4,
2271 PPC405EP_CPC0_UCR = 0x0F5,
2272 PPC405EP_CPC0_SRR = 0x0F6,
2273 PPC405EP_CPC0_JTAGID = 0x0F7,
2274 PPC405EP_CPC0_PCI = 0x0F9,
2275 #if 0
2276 PPC405EP_CPC0_ER = xxx,
2277 PPC405EP_CPC0_FR = xxx,
2278 PPC405EP_CPC0_SR = xxx,
2279 #endif
2282 enum {
2283 PPC405EP_CPU_CLK = 0,
2284 PPC405EP_PLB_CLK = 1,
2285 PPC405EP_OPB_CLK = 2,
2286 PPC405EP_EBC_CLK = 3,
2287 PPC405EP_MAL_CLK = 4,
2288 PPC405EP_PCI_CLK = 5,
2289 PPC405EP_UART0_CLK = 6,
2290 PPC405EP_UART1_CLK = 7,
2291 PPC405EP_CLK_NB = 8,
2294 typedef struct ppc405ep_cpc_t ppc405ep_cpc_t;
2295 struct ppc405ep_cpc_t {
2296 uint32_t sysclk;
2297 clk_setup_t clk_setup[PPC405EP_CLK_NB];
2298 uint32_t boot;
2299 uint32_t epctl;
2300 uint32_t pllmr[2];
2301 uint32_t ucr;
2302 uint32_t srr;
2303 uint32_t jtagid;
2304 uint32_t pci;
2305 /* Clock and power management */
2306 uint32_t er;
2307 uint32_t fr;
2308 uint32_t sr;
2311 static void ppc405ep_compute_clocks (ppc405ep_cpc_t *cpc)
2313 uint32_t CPU_clk, PLB_clk, OPB_clk, EBC_clk, MAL_clk, PCI_clk;
2314 uint32_t UART0_clk, UART1_clk;
2315 uint64_t VCO_out, PLL_out;
2316 int M, D;
2318 VCO_out = 0;
2319 if ((cpc->pllmr[1] & 0x80000000) && !(cpc->pllmr[1] & 0x40000000)) {
2320 M = (((cpc->pllmr[1] >> 20) - 1) & 0xF) + 1; /* FBMUL */
2321 #ifdef DEBUG_CLOCKS_LL
2322 printf("FBMUL %01" PRIx32 " %d\n", (cpc->pllmr[1] >> 20) & 0xF, M);
2323 #endif
2324 D = 8 - ((cpc->pllmr[1] >> 16) & 0x7); /* FWDA */
2325 #ifdef DEBUG_CLOCKS_LL
2326 printf("FWDA %01" PRIx32 " %d\n", (cpc->pllmr[1] >> 16) & 0x7, D);
2327 #endif
2328 VCO_out = cpc->sysclk * M * D;
2329 if (VCO_out < 500000000UL || VCO_out > 1000000000UL) {
2330 /* Error - unlock the PLL */
2331 printf("VCO out of range %" PRIu64 "\n", VCO_out);
2332 #if 0
2333 cpc->pllmr[1] &= ~0x80000000;
2334 goto pll_bypass;
2335 #endif
2337 PLL_out = VCO_out / D;
2338 /* Pretend the PLL is locked */
2339 cpc->boot |= 0x00000001;
2340 } else {
2341 #if 0
2342 pll_bypass:
2343 #endif
2344 PLL_out = cpc->sysclk;
2345 if (cpc->pllmr[1] & 0x40000000) {
2346 /* Pretend the PLL is not locked */
2347 cpc->boot &= ~0x00000001;
2350 /* Now, compute all other clocks */
2351 D = ((cpc->pllmr[0] >> 20) & 0x3) + 1; /* CCDV */
2352 #ifdef DEBUG_CLOCKS_LL
2353 printf("CCDV %01" PRIx32 " %d\n", (cpc->pllmr[0] >> 20) & 0x3, D);
2354 #endif
2355 CPU_clk = PLL_out / D;
2356 D = ((cpc->pllmr[0] >> 16) & 0x3) + 1; /* CBDV */
2357 #ifdef DEBUG_CLOCKS_LL
2358 printf("CBDV %01" PRIx32 " %d\n", (cpc->pllmr[0] >> 16) & 0x3, D);
2359 #endif
2360 PLB_clk = CPU_clk / D;
2361 D = ((cpc->pllmr[0] >> 12) & 0x3) + 1; /* OPDV */
2362 #ifdef DEBUG_CLOCKS_LL
2363 printf("OPDV %01" PRIx32 " %d\n", (cpc->pllmr[0] >> 12) & 0x3, D);
2364 #endif
2365 OPB_clk = PLB_clk / D;
2366 D = ((cpc->pllmr[0] >> 8) & 0x3) + 2; /* EPDV */
2367 #ifdef DEBUG_CLOCKS_LL
2368 printf("EPDV %01" PRIx32 " %d\n", (cpc->pllmr[0] >> 8) & 0x3, D);
2369 #endif
2370 EBC_clk = PLB_clk / D;
2371 D = ((cpc->pllmr[0] >> 4) & 0x3) + 1; /* MPDV */
2372 #ifdef DEBUG_CLOCKS_LL
2373 printf("MPDV %01" PRIx32 " %d\n", (cpc->pllmr[0] >> 4) & 0x3, D);
2374 #endif
2375 MAL_clk = PLB_clk / D;
2376 D = (cpc->pllmr[0] & 0x3) + 1; /* PPDV */
2377 #ifdef DEBUG_CLOCKS_LL
2378 printf("PPDV %01" PRIx32 " %d\n", cpc->pllmr[0] & 0x3, D);
2379 #endif
2380 PCI_clk = PLB_clk / D;
2381 D = ((cpc->ucr - 1) & 0x7F) + 1; /* U0DIV */
2382 #ifdef DEBUG_CLOCKS_LL
2383 printf("U0DIV %01" PRIx32 " %d\n", cpc->ucr & 0x7F, D);
2384 #endif
2385 UART0_clk = PLL_out / D;
2386 D = (((cpc->ucr >> 8) - 1) & 0x7F) + 1; /* U1DIV */
2387 #ifdef DEBUG_CLOCKS_LL
2388 printf("U1DIV %01" PRIx32 " %d\n", (cpc->ucr >> 8) & 0x7F, D);
2389 #endif
2390 UART1_clk = PLL_out / D;
2391 #ifdef DEBUG_CLOCKS
2392 printf("Setup PPC405EP clocks - sysclk %" PRIu32 " VCO %" PRIu64
2393 " PLL out %" PRIu64 " Hz\n", cpc->sysclk, VCO_out, PLL_out);
2394 printf("CPU %" PRIu32 " PLB %" PRIu32 " OPB %" PRIu32 " EBC %" PRIu32
2395 " MAL %" PRIu32 " PCI %" PRIu32 " UART0 %" PRIu32
2396 " UART1 %" PRIu32 "\n",
2397 CPU_clk, PLB_clk, OPB_clk, EBC_clk, MAL_clk, PCI_clk,
2398 UART0_clk, UART1_clk);
2399 #endif
2400 /* Setup CPU clocks */
2401 clk_setup(&cpc->clk_setup[PPC405EP_CPU_CLK], CPU_clk);
2402 /* Setup PLB clock */
2403 clk_setup(&cpc->clk_setup[PPC405EP_PLB_CLK], PLB_clk);
2404 /* Setup OPB clock */
2405 clk_setup(&cpc->clk_setup[PPC405EP_OPB_CLK], OPB_clk);
2406 /* Setup external clock */
2407 clk_setup(&cpc->clk_setup[PPC405EP_EBC_CLK], EBC_clk);
2408 /* Setup MAL clock */
2409 clk_setup(&cpc->clk_setup[PPC405EP_MAL_CLK], MAL_clk);
2410 /* Setup PCI clock */
2411 clk_setup(&cpc->clk_setup[PPC405EP_PCI_CLK], PCI_clk);
2412 /* Setup UART0 clock */
2413 clk_setup(&cpc->clk_setup[PPC405EP_UART0_CLK], UART0_clk);
2414 /* Setup UART1 clock */
2415 clk_setup(&cpc->clk_setup[PPC405EP_UART1_CLK], UART1_clk);
2418 static target_ulong dcr_read_epcpc (void *opaque, int dcrn)
2420 ppc405ep_cpc_t *cpc;
2421 target_ulong ret;
2423 cpc = opaque;
2424 switch (dcrn) {
2425 case PPC405EP_CPC0_BOOT:
2426 ret = cpc->boot;
2427 break;
2428 case PPC405EP_CPC0_EPCTL:
2429 ret = cpc->epctl;
2430 break;
2431 case PPC405EP_CPC0_PLLMR0:
2432 ret = cpc->pllmr[0];
2433 break;
2434 case PPC405EP_CPC0_PLLMR1:
2435 ret = cpc->pllmr[1];
2436 break;
2437 case PPC405EP_CPC0_UCR:
2438 ret = cpc->ucr;
2439 break;
2440 case PPC405EP_CPC0_SRR:
2441 ret = cpc->srr;
2442 break;
2443 case PPC405EP_CPC0_JTAGID:
2444 ret = cpc->jtagid;
2445 break;
2446 case PPC405EP_CPC0_PCI:
2447 ret = cpc->pci;
2448 break;
2449 default:
2450 /* Avoid gcc warning */
2451 ret = 0;
2452 break;
2455 return ret;
2458 static void dcr_write_epcpc (void *opaque, int dcrn, target_ulong val)
2460 ppc405ep_cpc_t *cpc;
2462 cpc = opaque;
2463 switch (dcrn) {
2464 case PPC405EP_CPC0_BOOT:
2465 /* Read-only register */
2466 break;
2467 case PPC405EP_CPC0_EPCTL:
2468 /* Don't care for now */
2469 cpc->epctl = val & 0xC00000F3;
2470 break;
2471 case PPC405EP_CPC0_PLLMR0:
2472 cpc->pllmr[0] = val & 0x00633333;
2473 ppc405ep_compute_clocks(cpc);
2474 break;
2475 case PPC405EP_CPC0_PLLMR1:
2476 cpc->pllmr[1] = val & 0xC0F73FFF;
2477 ppc405ep_compute_clocks(cpc);
2478 break;
2479 case PPC405EP_CPC0_UCR:
2480 /* UART control - don't care for now */
2481 cpc->ucr = val & 0x003F7F7F;
2482 break;
2483 case PPC405EP_CPC0_SRR:
2484 cpc->srr = val;
2485 break;
2486 case PPC405EP_CPC0_JTAGID:
2487 /* Read-only */
2488 break;
2489 case PPC405EP_CPC0_PCI:
2490 cpc->pci = val;
2491 break;
2495 static void ppc405ep_cpc_reset (void *opaque)
2497 ppc405ep_cpc_t *cpc = opaque;
2499 cpc->boot = 0x00000010; /* Boot from PCI - IIC EEPROM disabled */
2500 cpc->epctl = 0x00000000;
2501 cpc->pllmr[0] = 0x00011010;
2502 cpc->pllmr[1] = 0x40000000;
2503 cpc->ucr = 0x00000000;
2504 cpc->srr = 0x00040000;
2505 cpc->pci = 0x00000000;
2506 cpc->er = 0x00000000;
2507 cpc->fr = 0x00000000;
2508 cpc->sr = 0x00000000;
2509 ppc405ep_compute_clocks(cpc);
2512 /* XXX: sysclk should be between 25 and 100 MHz */
2513 static void ppc405ep_cpc_init (CPUState *env, clk_setup_t clk_setup[8],
2514 uint32_t sysclk)
2516 ppc405ep_cpc_t *cpc;
2518 cpc = qemu_mallocz(sizeof(ppc405ep_cpc_t));
2519 if (cpc != NULL) {
2520 memcpy(cpc->clk_setup, clk_setup,
2521 PPC405EP_CLK_NB * sizeof(clk_setup_t));
2522 cpc->jtagid = 0x20267049;
2523 cpc->sysclk = sysclk;
2524 ppc405ep_cpc_reset(cpc);
2525 qemu_register_reset(&ppc405ep_cpc_reset, cpc);
2526 ppc_dcr_register(env, PPC405EP_CPC0_BOOT, cpc,
2527 &dcr_read_epcpc, &dcr_write_epcpc);
2528 ppc_dcr_register(env, PPC405EP_CPC0_EPCTL, cpc,
2529 &dcr_read_epcpc, &dcr_write_epcpc);
2530 ppc_dcr_register(env, PPC405EP_CPC0_PLLMR0, cpc,
2531 &dcr_read_epcpc, &dcr_write_epcpc);
2532 ppc_dcr_register(env, PPC405EP_CPC0_PLLMR1, cpc,
2533 &dcr_read_epcpc, &dcr_write_epcpc);
2534 ppc_dcr_register(env, PPC405EP_CPC0_UCR, cpc,
2535 &dcr_read_epcpc, &dcr_write_epcpc);
2536 ppc_dcr_register(env, PPC405EP_CPC0_SRR, cpc,
2537 &dcr_read_epcpc, &dcr_write_epcpc);
2538 ppc_dcr_register(env, PPC405EP_CPC0_JTAGID, cpc,
2539 &dcr_read_epcpc, &dcr_write_epcpc);
2540 ppc_dcr_register(env, PPC405EP_CPC0_PCI, cpc,
2541 &dcr_read_epcpc, &dcr_write_epcpc);
2542 #if 0
2543 ppc_dcr_register(env, PPC405EP_CPC0_ER, cpc,
2544 &dcr_read_epcpc, &dcr_write_epcpc);
2545 ppc_dcr_register(env, PPC405EP_CPC0_FR, cpc,
2546 &dcr_read_epcpc, &dcr_write_epcpc);
2547 ppc_dcr_register(env, PPC405EP_CPC0_SR, cpc,
2548 &dcr_read_epcpc, &dcr_write_epcpc);
2549 #endif
2553 CPUState *ppc405ep_init (target_phys_addr_t ram_bases[2],
2554 target_phys_addr_t ram_sizes[2],
2555 uint32_t sysclk, qemu_irq **picp,
2556 ram_addr_t *offsetp, int do_init)
2558 clk_setup_t clk_setup[PPC405EP_CLK_NB], tlb_clk_setup;
2559 qemu_irq dma_irqs[4], gpt_irqs[5], mal_irqs[4];
2560 CPUState *env;
2561 ppc4xx_mmio_t *mmio;
2562 qemu_irq *pic, *irqs;
2563 ram_addr_t offset;
2564 int i;
2566 memset(clk_setup, 0, sizeof(clk_setup));
2567 /* init CPUs */
2568 env = ppc4xx_init("405ep", &clk_setup[PPC405EP_CPU_CLK],
2569 &tlb_clk_setup, sysclk);
2570 clk_setup[PPC405EP_CPU_CLK].cb = tlb_clk_setup.cb;
2571 clk_setup[PPC405EP_CPU_CLK].opaque = tlb_clk_setup.opaque;
2572 /* Internal devices init */
2573 /* Memory mapped devices registers */
2574 mmio = ppc4xx_mmio_init(env, 0xEF600000);
2575 /* PLB arbitrer */
2576 ppc4xx_plb_init(env);
2577 /* PLB to OPB bridge */
2578 ppc4xx_pob_init(env);
2579 /* OBP arbitrer */
2580 ppc4xx_opba_init(env, mmio, 0x600);
2581 /* Universal interrupt controller */
2582 irqs = qemu_mallocz(sizeof(qemu_irq) * PPCUIC_OUTPUT_NB);
2583 irqs[PPCUIC_OUTPUT_INT] =
2584 ((qemu_irq *)env->irq_inputs)[PPC40x_INPUT_INT];
2585 irqs[PPCUIC_OUTPUT_CINT] =
2586 ((qemu_irq *)env->irq_inputs)[PPC40x_INPUT_CINT];
2587 pic = ppcuic_init(env, irqs, 0x0C0, 0, 1);
2588 *picp = pic;
2589 /* SDRAM controller */
2590 /* XXX 405EP has no ECC interrupt */
2591 ppc4xx_sdram_init(env, pic[17], 2, ram_bases, ram_sizes, do_init);
2592 offset = 0;
2593 for (i = 0; i < 2; i++)
2594 offset += ram_sizes[i];
2595 /* External bus controller */
2596 ppc405_ebc_init(env);
2597 /* DMA controller */
2598 dma_irqs[0] = pic[5];
2599 dma_irqs[1] = pic[6];
2600 dma_irqs[2] = pic[7];
2601 dma_irqs[3] = pic[8];
2602 ppc405_dma_init(env, dma_irqs);
2603 /* IIC controller */
2604 ppc405_i2c_init(env, mmio, 0x500, pic[2]);
2605 /* GPIO */
2606 ppc405_gpio_init(env, mmio, 0x700);
2607 /* Serial ports */
2608 if (serial_hds[0] != NULL) {
2609 ppc405_serial_init(env, mmio, 0x300, pic[0], serial_hds[0]);
2611 if (serial_hds[1] != NULL) {
2612 ppc405_serial_init(env, mmio, 0x400, pic[1], serial_hds[1]);
2614 /* OCM */
2615 ppc405_ocm_init(env, ram_sizes[0] + ram_sizes[1]);
2616 offset += 4096;
2617 /* GPT */
2618 gpt_irqs[0] = pic[19];
2619 gpt_irqs[1] = pic[20];
2620 gpt_irqs[2] = pic[21];
2621 gpt_irqs[3] = pic[22];
2622 gpt_irqs[4] = pic[23];
2623 ppc4xx_gpt_init(env, mmio, 0x000, gpt_irqs);
2624 /* PCI */
2625 /* Uses pic[3], pic[16], pic[18] */
2626 /* MAL */
2627 mal_irqs[0] = pic[11];
2628 mal_irqs[1] = pic[12];
2629 mal_irqs[2] = pic[13];
2630 mal_irqs[3] = pic[14];
2631 ppc405_mal_init(env, mal_irqs);
2632 /* Ethernet */
2633 /* Uses pic[9], pic[15], pic[17] */
2634 /* CPU control */
2635 ppc405ep_cpc_init(env, clk_setup, sysclk);
2636 *offsetp = offset;
2638 return env;