2 * ARMV7M System emulation.
4 * Copyright (c) 2006-2007 CodeSourcery.
5 * Written by Paul Brook
7 * This code is licensed under the GPL.
15 /* Bitbanded IO. Each word corresponds to a single bit. */
17 /* Get the byte address of the real memory for a bitband access. */
18 static inline uint32_t bitband_addr(void * opaque
, uint32_t addr
)
22 res
= *(uint32_t *)opaque
;
23 res
|= (addr
& 0x1ffffff) >> 5;
28 static uint32_t bitband_readb(void *opaque
, target_phys_addr_t offset
)
31 cpu_physical_memory_read(bitband_addr(opaque
, offset
), &v
, 1);
32 return (v
& (1 << ((offset
>> 2) & 7))) != 0;
35 static void bitband_writeb(void *opaque
, target_phys_addr_t offset
,
41 addr
= bitband_addr(opaque
, offset
);
42 mask
= (1 << ((offset
>> 2) & 7));
43 cpu_physical_memory_read(addr
, &v
, 1);
48 cpu_physical_memory_write(addr
, &v
, 1);
51 static uint32_t bitband_readw(void *opaque
, target_phys_addr_t offset
)
56 addr
= bitband_addr(opaque
, offset
) & ~1;
57 mask
= (1 << ((offset
>> 2) & 15));
59 cpu_physical_memory_read(addr
, (uint8_t *)&v
, 2);
60 return (v
& mask
) != 0;
63 static void bitband_writew(void *opaque
, target_phys_addr_t offset
,
69 addr
= bitband_addr(opaque
, offset
) & ~1;
70 mask
= (1 << ((offset
>> 2) & 15));
72 cpu_physical_memory_read(addr
, (uint8_t *)&v
, 2);
77 cpu_physical_memory_write(addr
, (uint8_t *)&v
, 2);
80 static uint32_t bitband_readl(void *opaque
, target_phys_addr_t offset
)
85 addr
= bitband_addr(opaque
, offset
) & ~3;
86 mask
= (1 << ((offset
>> 2) & 31));
88 cpu_physical_memory_read(addr
, (uint8_t *)&v
, 4);
89 return (v
& mask
) != 0;
92 static void bitband_writel(void *opaque
, target_phys_addr_t offset
,
98 addr
= bitband_addr(opaque
, offset
) & ~3;
99 mask
= (1 << ((offset
>> 2) & 31));
100 mask
= tswap32(mask
);
101 cpu_physical_memory_read(addr
, (uint8_t *)&v
, 4);
106 cpu_physical_memory_write(addr
, (uint8_t *)&v
, 4);
109 static const MemoryRegionOps bitband_ops
= {
111 .read
= { bitband_readb
, bitband_readw
, bitband_readl
, },
112 .write
= { bitband_writeb
, bitband_writew
, bitband_writel
, },
114 .endianness
= DEVICE_NATIVE_ENDIAN
,
123 static int bitband_init(SysBusDevice
*dev
)
125 BitBandState
*s
= FROM_SYSBUS(BitBandState
, dev
);
127 memory_region_init_io(&s
->iomem
, &bitband_ops
, &s
->base
, "bitband",
129 sysbus_init_mmio(dev
, &s
->iomem
);
133 static void armv7m_bitband_init(void)
137 dev
= qdev_create(NULL
, "ARM,bitband-memory");
138 qdev_prop_set_uint32(dev
, "base", 0x20000000);
139 qdev_init_nofail(dev
);
140 sysbus_mmio_map(sysbus_from_qdev(dev
), 0, 0x22000000);
142 dev
= qdev_create(NULL
, "ARM,bitband-memory");
143 qdev_prop_set_uint32(dev
, "base", 0x40000000);
144 qdev_init_nofail(dev
);
145 sysbus_mmio_map(sysbus_from_qdev(dev
), 0, 0x42000000);
150 static void armv7m_reset(void *opaque
)
152 cpu_reset((CPUState
*)opaque
);
155 /* Init CPU and memory for a v7-M based board.
156 flash_size and sram_size are in kb.
157 Returns the NVIC array. */
159 qemu_irq
*armv7m_init(MemoryRegion
*address_space_mem
,
160 int flash_size
, int sram_size
,
161 const char *kernel_filename
, const char *cpu_model
)
165 /* FIXME: make this local state. */
166 static qemu_irq pic
[64];
173 MemoryRegion
*sram
= g_new(MemoryRegion
, 1);
174 MemoryRegion
*flash
= g_new(MemoryRegion
, 1);
175 MemoryRegion
*hack
= g_new(MemoryRegion
, 1);
181 cpu_model
= "cortex-m3";
182 env
= cpu_init(cpu_model
);
184 fprintf(stderr
, "Unable to find CPU definition\n");
189 /* > 32Mb SRAM gets complicated because it overlaps the bitband area.
190 We don't have proper commandline options, so allocate half of memory
191 as SRAM, up to a maximum of 32Mb, and the rest as code. */
192 if (ram_size
> (512 + 32) * 1024 * 1024)
193 ram_size
= (512 + 32) * 1024 * 1024;
194 sram_size
= (ram_size
/ 2) & TARGET_PAGE_MASK
;
195 if (sram_size
> 32 * 1024 * 1024)
196 sram_size
= 32 * 1024 * 1024;
197 code_size
= ram_size
- sram_size
;
200 /* Flash programming is done via the SCU, so pretend it is ROM. */
201 memory_region_init_ram(flash
, "armv7m.flash", flash_size
);
202 vmstate_register_ram_global(flash
);
203 memory_region_set_readonly(flash
, true);
204 memory_region_add_subregion(address_space_mem
, 0, flash
);
205 memory_region_init_ram(sram
, "armv7m.sram", sram_size
);
206 vmstate_register_ram_global(sram
);
207 memory_region_add_subregion(address_space_mem
, 0x20000000, sram
);
208 armv7m_bitband_init();
210 nvic
= qdev_create(NULL
, "armv7m_nvic");
212 qdev_init_nofail(nvic
);
213 cpu_pic
= arm_pic_init_cpu(env
);
214 sysbus_connect_irq(sysbus_from_qdev(nvic
), 0, cpu_pic
[ARM_PIC_CPU_IRQ
]);
215 for (i
= 0; i
< 64; i
++) {
216 pic
[i
] = qdev_get_gpio_in(nvic
, i
);
219 #ifdef TARGET_WORDS_BIGENDIAN
225 image_size
= load_elf(kernel_filename
, NULL
, NULL
, &entry
, &lowaddr
,
226 NULL
, big_endian
, ELF_MACHINE
, 1);
227 if (image_size
< 0) {
228 image_size
= load_image_targphys(kernel_filename
, 0, flash_size
);
231 if (image_size
< 0) {
232 fprintf(stderr
, "qemu: could not load kernel '%s'\n",
237 /* Hack to map an additional page of ram at the top of the address
238 space. This stops qemu complaining about executing code outside RAM
239 when returning from an exception. */
240 memory_region_init_ram(hack
, "armv7m.hack", 0x1000);
241 vmstate_register_ram_global(hack
);
242 memory_region_add_subregion(address_space_mem
, 0xfffff000, hack
);
244 qemu_register_reset(armv7m_reset
, env
);
248 static Property bitband_properties
[] = {
249 DEFINE_PROP_UINT32("base", BitBandState
, base
, 0),
250 DEFINE_PROP_END_OF_LIST(),
253 static void bitband_class_init(ObjectClass
*klass
, void *data
)
255 DeviceClass
*dc
= DEVICE_CLASS(klass
);
256 SysBusDeviceClass
*k
= SYS_BUS_DEVICE_CLASS(klass
);
258 k
->init
= bitband_init
;
259 dc
->props
= bitband_properties
;
262 static TypeInfo bitband_info
= {
263 .name
= "ARM,bitband-memory",
264 .parent
= TYPE_SYS_BUS_DEVICE
,
265 .instance_size
= sizeof(BitBandState
),
266 .class_init
= bitband_class_init
,
269 static void armv7m_register_types(void)
271 type_register_static(&bitband_info
);
274 type_init(armv7m_register_types
)