2 * ARMV7M System emulation.
4 * Copyright (c) 2006-2007 CodeSourcery.
5 * Written by Paul Brook
7 * This code is licenced under the GPL.
14 /* Bitbanded IO. Each word corresponds to a single bit. */
16 /* Get the byte address of the real memory for a bitband acess. */
17 static inline uint32_t bitband_addr(void * opaque
, uint32_t addr
)
21 res
= *(uint32_t *)opaque
;
22 res
|= (addr
& 0x1ffffff) >> 5;
27 static uint32_t bitband_readb(void *opaque
, target_phys_addr_t offset
)
30 cpu_physical_memory_read(bitband_addr(opaque
, offset
), &v
, 1);
31 return (v
& (1 << ((offset
>> 2) & 7))) != 0;
34 static void bitband_writeb(void *opaque
, target_phys_addr_t offset
,
40 addr
= bitband_addr(opaque
, offset
);
41 mask
= (1 << ((offset
>> 2) & 7));
42 cpu_physical_memory_read(addr
, &v
, 1);
47 cpu_physical_memory_write(addr
, &v
, 1);
50 static uint32_t bitband_readw(void *opaque
, target_phys_addr_t offset
)
55 addr
= bitband_addr(opaque
, offset
) & ~1;
56 mask
= (1 << ((offset
>> 2) & 15));
58 cpu_physical_memory_read(addr
, (uint8_t *)&v
, 2);
59 return (v
& mask
) != 0;
62 static void bitband_writew(void *opaque
, target_phys_addr_t offset
,
68 addr
= bitband_addr(opaque
, offset
) & ~1;
69 mask
= (1 << ((offset
>> 2) & 15));
71 cpu_physical_memory_read(addr
, (uint8_t *)&v
, 2);
76 cpu_physical_memory_write(addr
, (uint8_t *)&v
, 2);
79 static uint32_t bitband_readl(void *opaque
, target_phys_addr_t offset
)
84 addr
= bitband_addr(opaque
, offset
) & ~3;
85 mask
= (1 << ((offset
>> 2) & 31));
87 cpu_physical_memory_read(addr
, (uint8_t *)&v
, 4);
88 return (v
& mask
) != 0;
91 static void bitband_writel(void *opaque
, target_phys_addr_t offset
,
97 addr
= bitband_addr(opaque
, offset
) & ~3;
98 mask
= (1 << ((offset
>> 2) & 31));
100 cpu_physical_memory_read(addr
, (uint8_t *)&v
, 4);
105 cpu_physical_memory_write(addr
, (uint8_t *)&v
, 4);
108 static CPUReadMemoryFunc
*bitband_readfn
[] = {
114 static CPUWriteMemoryFunc
*bitband_writefn
[] = {
125 static void bitband_init(SysBusDevice
*dev
)
127 BitBandState
*s
= FROM_SYSBUS(BitBandState
, dev
);
130 s
->base
= qdev_get_prop_int(&dev
->qdev
, "base", 0);
131 iomemtype
= cpu_register_io_memory(0, bitband_readfn
, bitband_writefn
,
133 sysbus_init_mmio(dev
, 0x02000000, iomemtype
);
136 static void armv7m_bitband_init(void)
140 dev
= qdev_create(NULL
, "ARM,bitband-memory");
141 qdev_set_prop_int(dev
, "base", 0x20000000);
143 sysbus_mmio_map(sysbus_from_qdev(dev
), 0, 0x22000000);
145 dev
= qdev_create(NULL
, "ARM,bitband-memory");
146 qdev_set_prop_int(dev
, "base", 0x40000000);
148 sysbus_mmio_map(sysbus_from_qdev(dev
), 0, 0x42000000);
152 /* Init CPU and memory for a v7-M based board.
153 flash_size and sram_size are in kb.
154 Returns the NVIC array. */
156 qemu_irq
*armv7m_init(int flash_size
, int sram_size
,
157 const char *kernel_filename
, const char *cpu_model
)
161 /* FIXME: make this local state. */
162 static qemu_irq pic
[64];
174 cpu_model
= "cortex-m3";
175 env
= cpu_init(cpu_model
);
177 fprintf(stderr
, "Unable to find CPU definition\n");
182 /* > 32Mb SRAM gets complicated because it overlaps the bitband area.
183 We don't have proper commandline options, so allocate half of memory
184 as SRAM, up to a maximum of 32Mb, and the rest as code. */
185 if (ram_size
> (512 + 32) * 1024 * 1024)
186 ram_size
= (512 + 32) * 1024 * 1024;
187 sram_size
= (ram_size
/ 2) & TARGET_PAGE_MASK
;
188 if (sram_size
> 32 * 1024 * 1024)
189 sram_size
= 32 * 1024 * 1024;
190 code_size
= ram_size
- sram_size
;
193 /* Flash programming is done via the SCU, so pretend it is ROM. */
194 cpu_register_physical_memory(0, flash_size
,
195 qemu_ram_alloc(flash_size
) | IO_MEM_ROM
);
196 cpu_register_physical_memory(0x20000000, sram_size
,
197 qemu_ram_alloc(sram_size
) | IO_MEM_RAM
);
198 armv7m_bitband_init();
200 nvic
= qdev_create(NULL
, "armv7m_nvic");
201 env
->v7m
.nvic
= nvic
;
203 cpu_pic
= arm_pic_init_cpu(env
);
204 sysbus_connect_irq(sysbus_from_qdev(nvic
), 0, cpu_pic
[ARM_PIC_CPU_IRQ
]);
205 for (i
= 0; i
< 64; i
++) {
206 pic
[i
] = qdev_get_gpio_in(nvic
, i
);
209 image_size
= load_elf(kernel_filename
, 0, &entry
, &lowaddr
, NULL
);
210 if (image_size
< 0) {
211 image_size
= load_image_targphys(kernel_filename
, 0, flash_size
);
214 if (image_size
< 0) {
215 fprintf(stderr
, "qemu: could not load kernel '%s'\n",
220 /* If the image was loaded at address zero then assume it is a
221 regular ROM image and perform the normal CPU reset sequence.
222 Otherwise jump directly to the entry point. */
224 env
->regs
[13] = ldl_phys(0);
230 env
->regs
[15] = pc
& ~1;
232 /* Hack to map an additional page of ram at the top of the address
233 space. This stops qemu complaining about executing code outside RAM
234 when returning from an exception. */
235 cpu_register_physical_memory(0xfffff000, 0x1000,
236 qemu_ram_alloc(0x1000) | IO_MEM_RAM
);
241 static void armv7m_register_devices(void)
243 sysbus_register_dev("ARM,bitband-memory", sizeof(BitBandState
),
247 device_init(armv7m_register_devices
)