2 * ARM11MPCore internal peripheral emulation.
4 * Copyright (c) 2006-2007 CodeSourcery.
5 * Written by Paul Brook
7 * This code is licensed under the GPL.
11 #include "qemu-timer.h"
13 /* MPCore private memory region. */
15 typedef struct mpcore_priv_state
{
19 uint32_t old_timer_status
[8];
22 MemoryRegion container
;
28 /* Per-CPU private memory mapped IO. */
30 static uint64_t mpcore_scu_read(void *opaque
, target_phys_addr_t offset
,
33 mpcore_priv_state
*s
= (mpcore_priv_state
*)opaque
;
37 case 0x00: /* Control. */
38 return s
->scu_control
;
39 case 0x04: /* Configuration. */
40 id
= ((1 << s
->num_cpu
) - 1) << 4;
41 return id
| (s
->num_cpu
- 1);
42 case 0x08: /* CPU status. */
44 case 0x0c: /* Invalidate all. */
47 hw_error("mpcore_priv_read: Bad offset %x\n", (int)offset
);
51 static void mpcore_scu_write(void *opaque
, target_phys_addr_t offset
,
52 uint64_t value
, unsigned size
)
54 mpcore_priv_state
*s
= (mpcore_priv_state
*)opaque
;
57 case 0: /* Control register. */
58 s
->scu_control
= value
& 1;
60 case 0x0c: /* Invalidate all. */
61 /* This is a no-op as cache is not emulated. */
64 hw_error("mpcore_priv_read: Bad offset %x\n", (int)offset
);
68 static const MemoryRegionOps mpcore_scu_ops
= {
69 .read
= mpcore_scu_read
,
70 .write
= mpcore_scu_write
,
71 .endianness
= DEVICE_NATIVE_ENDIAN
,
74 static void mpcore_priv_set_irq(void *opaque
, int irq
, int level
)
76 mpcore_priv_state
*s
= (mpcore_priv_state
*)opaque
;
77 qemu_set_irq(qdev_get_gpio_in(s
->gic
, irq
), level
);
80 static void mpcore_priv_map_setup(mpcore_priv_state
*s
)
83 SysBusDevice
*gicbusdev
= sysbus_from_qdev(s
->gic
);
84 SysBusDevice
*busdev
= sysbus_from_qdev(s
->mptimer
);
85 memory_region_init(&s
->container
, "mpcode-priv-container", 0x2000);
86 memory_region_init_io(&s
->iomem
, &mpcore_scu_ops
, s
, "mpcore-scu", 0x100);
87 memory_region_add_subregion(&s
->container
, 0, &s
->iomem
);
88 /* GIC CPU interfaces: "current CPU" at 0x100, then specific CPUs
91 for (i
= 0; i
< (s
->num_cpu
+ 1); i
++) {
92 target_phys_addr_t offset
= 0x100 + (i
* 0x100);
93 memory_region_add_subregion(&s
->container
, offset
,
94 sysbus_mmio_get_region(gicbusdev
, i
+ 1));
96 /* Add the regions for timer and watchdog for "current CPU" and
97 * for each specific CPU.
99 for (i
= 0; i
< (s
->num_cpu
+ 1) * 2; i
++) {
100 /* Timers at 0x600, 0x700, ...; watchdogs at 0x620, 0x720, ... */
101 target_phys_addr_t offset
= 0x600 + (i
>> 1) * 0x100 + (i
& 1) * 0x20;
102 memory_region_add_subregion(&s
->container
, offset
,
103 sysbus_mmio_get_region(busdev
, i
));
105 memory_region_add_subregion(&s
->container
, 0x1000,
106 sysbus_mmio_get_region(gicbusdev
, 0));
107 /* Wire up the interrupt from each watchdog and timer.
108 * For each core the timer is PPI 29 and the watchdog PPI 30.
110 for (i
= 0; i
< s
->num_cpu
; i
++) {
111 int ppibase
= (s
->num_irq
- 32) + i
* 32;
112 sysbus_connect_irq(busdev
, i
* 2,
113 qdev_get_gpio_in(s
->gic
, ppibase
+ 29));
114 sysbus_connect_irq(busdev
, i
* 2 + 1,
115 qdev_get_gpio_in(s
->gic
, ppibase
+ 30));
119 static int mpcore_priv_init(SysBusDevice
*dev
)
121 mpcore_priv_state
*s
= FROM_SYSBUS(mpcore_priv_state
, dev
);
123 s
->gic
= qdev_create(NULL
, "arm_gic");
124 qdev_prop_set_uint32(s
->gic
, "num-cpu", s
->num_cpu
);
125 qdev_prop_set_uint32(s
->gic
, "num-irq", s
->num_irq
);
126 qdev_init_nofail(s
->gic
);
128 /* Pass through outbound IRQ lines from the GIC */
129 sysbus_pass_irq(dev
, sysbus_from_qdev(s
->gic
));
131 /* Pass through inbound GPIO lines to the GIC */
132 qdev_init_gpio_in(&s
->busdev
.qdev
, mpcore_priv_set_irq
, s
->num_irq
- 32);
134 s
->mptimer
= qdev_create(NULL
, "arm_mptimer");
135 qdev_prop_set_uint32(s
->mptimer
, "num-cpu", s
->num_cpu
);
136 qdev_init_nofail(s
->mptimer
);
137 mpcore_priv_map_setup(s
);
138 sysbus_init_mmio(dev
, &s
->container
);
142 /* Dummy PIC to route IRQ lines. The baseboard has 4 independent IRQ
143 controllers. The output of these, plus some of the raw input lines
144 are fed into a single SMP-aware interrupt controller on the CPU. */
149 qemu_irq rvic
[4][64];
153 /* Map baseboard IRQs onto CPU IRQ lines. */
154 static const int mpcore_irq_map
[32] = {
155 -1, -1, -1, -1, 1, 2, -1, -1,
156 -1, -1, 6, -1, 4, 5, -1, -1,
157 -1, 14, 15, 0, 7, 8, -1, -1,
158 -1, -1, -1, -1, 9, 3, -1, -1,
161 static void mpcore_rirq_set_irq(void *opaque
, int irq
, int level
)
163 mpcore_rirq_state
*s
= (mpcore_rirq_state
*)opaque
;
166 for (i
= 0; i
< 4; i
++) {
167 qemu_set_irq(s
->rvic
[i
][irq
], level
);
170 irq
= mpcore_irq_map
[irq
];
172 qemu_set_irq(s
->cpuic
[irq
], level
);
177 static int realview_mpcore_init(SysBusDevice
*dev
)
179 mpcore_rirq_state
*s
= FROM_SYSBUS(mpcore_rirq_state
, dev
);
185 priv
= qdev_create(NULL
, "arm11mpcore_priv");
186 qdev_prop_set_uint32(priv
, "num-cpu", s
->num_cpu
);
187 qdev_init_nofail(priv
);
188 s
->priv
= sysbus_from_qdev(priv
);
189 sysbus_pass_irq(dev
, s
->priv
);
190 for (i
= 0; i
< 32; i
++) {
191 s
->cpuic
[i
] = qdev_get_gpio_in(priv
, i
);
193 /* ??? IRQ routing is hardcoded to "normal" mode. */
194 for (n
= 0; n
< 4; n
++) {
195 gic
= sysbus_create_simple("realview_gic", 0x10040000 + n
* 0x10000,
197 for (i
= 0; i
< 64; i
++) {
198 s
->rvic
[n
][i
] = qdev_get_gpio_in(gic
, i
);
201 qdev_init_gpio_in(&dev
->qdev
, mpcore_rirq_set_irq
, 64);
202 sysbus_init_mmio(dev
, sysbus_mmio_get_region(s
->priv
, 0));
206 static Property mpcore_rirq_properties
[] = {
207 DEFINE_PROP_UINT32("num-cpu", mpcore_rirq_state
, num_cpu
, 1),
208 DEFINE_PROP_END_OF_LIST(),
211 static void mpcore_rirq_class_init(ObjectClass
*klass
, void *data
)
213 DeviceClass
*dc
= DEVICE_CLASS(klass
);
214 SysBusDeviceClass
*k
= SYS_BUS_DEVICE_CLASS(klass
);
216 k
->init
= realview_mpcore_init
;
217 dc
->props
= mpcore_rirq_properties
;
220 static TypeInfo mpcore_rirq_info
= {
221 .name
= "realview_mpcore",
222 .parent
= TYPE_SYS_BUS_DEVICE
,
223 .instance_size
= sizeof(mpcore_rirq_state
),
224 .class_init
= mpcore_rirq_class_init
,
227 static Property mpcore_priv_properties
[] = {
228 DEFINE_PROP_UINT32("num-cpu", mpcore_priv_state
, num_cpu
, 1),
229 /* The ARM11 MPCORE TRM says the on-chip controller may have
230 * anything from 0 to 224 external interrupt IRQ lines (with another
231 * 32 internal). We default to 32+32, which is the number provided by
232 * the ARM11 MPCore test chip in the Realview Versatile Express
233 * coretile. Other boards may differ and should set this property
234 * appropriately. Some Linux kernels may not boot if the hardware
235 * has more IRQ lines than the kernel expects.
237 DEFINE_PROP_UINT32("num-irq", mpcore_priv_state
, num_irq
, 64),
238 DEFINE_PROP_END_OF_LIST(),
241 static void mpcore_priv_class_init(ObjectClass
*klass
, void *data
)
243 DeviceClass
*dc
= DEVICE_CLASS(klass
);
244 SysBusDeviceClass
*k
= SYS_BUS_DEVICE_CLASS(klass
);
246 k
->init
= mpcore_priv_init
;
247 dc
->props
= mpcore_priv_properties
;
250 static TypeInfo mpcore_priv_info
= {
251 .name
= "arm11mpcore_priv",
252 .parent
= TYPE_SYS_BUS_DEVICE
,
253 .instance_size
= sizeof(mpcore_priv_state
),
254 .class_init
= mpcore_priv_class_init
,
257 static void arm11mpcore_register_types(void)
259 type_register_static(&mpcore_rirq_info
);
260 type_register_static(&mpcore_priv_info
);
263 type_init(arm11mpcore_register_types
)