hw/intc/apic.c

   1 /*
   2  *  APIC support
   3  *
   4  *  Copyright (c) 2004-2005 Fabrice Bellard
   5  *
   6  * This library is free software; you can redistribute it and/or
   7  * modify it under the terms of the GNU Lesser General Public
   8  * License as published by the Free Software Foundation; either
   9  * version 2.1 of the License, or (at your option) any later version.
  10  *
  11  * This library is distributed in the hope that it will be useful,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  14  * Lesser General Public License for more details.
  15  *
  16  * You should have received a copy of the GNU Lesser General Public
  17  * License along with this library; if not, see <http://www.gnu.org/licenses/>
  18  */
  19 #include "qemu/osdep.h"
  20 #include "qemu/thread.h"
  21 #include "hw/i386/apic_internal.h"
  22 #include "hw/i386/apic.h"
  23 #include "hw/i386/ioapic.h"
  24 #include "hw/intc/i8259.h"
  25 #include "hw/pci/msi.h"
  26 #include "qemu/host-utils.h"
  27 #include "sysemu/kvm.h"
  28 #include "trace.h"
  29 #include "hw/i386/apic-msidef.h"
  30 #include "qapi/error.h"
  31 #include "qom/object.h"
  32
  33 #define MAX_APICS 255
  34 #define MAX_APIC_WORDS 8
  35
  36 #define SYNC_FROM_VAPIC                 0x1
  37 #define SYNC_TO_VAPIC                   0x2
  38 #define SYNC_ISR_IRR_TO_VAPIC           0x4
  39
  40 static APICCommonState *local_apics[MAX_APICS + 1];
  41
  42 #define TYPE_APIC "apic"
  43 /*This is reusing the APICCommonState typedef from APIC_COMMON */
  44 DECLARE_INSTANCE_CHECKER(APICCommonState, APIC,
  45                          TYPE_APIC)
  46
  47 static void apic_set_irq(APICCommonState *s, int vector_num, int trigger_mode);
  48 static void apic_update_irq(APICCommonState *s);
  49 static void apic_get_delivery_bitmask(uint32_t *deliver_bitmask,
  50                                       uint8_t dest, uint8_t dest_mode);
  51
  52 /* Find first bit starting from msb */
  53 static int apic_fls_bit(uint32_t value)
  54 {
  55     return 31 - clz32(value);
  56 }
  57
  58 /* Find first bit starting from lsb */
  59 static int apic_ffs_bit(uint32_t value)
  60 {
  61     return ctz32(value);
  62 }
  63
  64 static inline void apic_reset_bit(uint32_t *tab, int index)
  65 {
  66     int i, mask;
  67     i = index >> 5;
  68     mask = 1 << (index & 0x1f);
  69     tab[i] &= ~mask;
  70 }
  71
  72 /* return -1 if no bit is set */
  73 static int get_highest_priority_int(uint32_t *tab)
  74 {
  75     int i;
  76     for (i = 7; i >= 0; i--) {
  77         if (tab[i] != 0) {
  78             return i * 32 + apic_fls_bit(tab[i]);
  79         }
  80     }
  81     return -1;
  82 }
  83
  84 static void apic_sync_vapic(APICCommonState *s, int sync_type)
  85 {
  86     VAPICState vapic_state;
  87     size_t length;
  88     off_t start;
  89     int vector;
  90
  91     if (!s->vapic_paddr) {
  92         return;
  93     }
  94     if (sync_type & SYNC_FROM_VAPIC) {
  95         cpu_physical_memory_read(s->vapic_paddr, &vapic_state,
  96                                  sizeof(vapic_state));
  97         s->tpr = vapic_state.tpr;
  98     }
  99     if (sync_type & (SYNC_TO_VAPIC | SYNC_ISR_IRR_TO_VAPIC)) {
 100         start = offsetof(VAPICState, isr);
 101         length = offsetof(VAPICState, enabled) - offsetof(VAPICState, isr);
 102
 103         if (sync_type & SYNC_TO_VAPIC) {
 104             assert(qemu_cpu_is_self(CPU(s->cpu)));
 105
 106             vapic_state.tpr = s->tpr;
 107             vapic_state.enabled = 1;
 108             start = 0;
 109             length = sizeof(VAPICState);
 110         }
 111
 112         vector = get_highest_priority_int(s->isr);
 113         if (vector < 0) {
 114             vector = 0;
 115         }
 116         vapic_state.isr = vector & 0xf0;
 117
 118         vapic_state.zero = 0;
 119
 120         vector = get_highest_priority_int(s->irr);
 121         if (vector < 0) {
 122             vector = 0;
 123         }
 124         vapic_state.irr = vector & 0xff;
 125
 126         address_space_write_rom(&address_space_memory,
 127                                 s->vapic_paddr + start,
 128                                 MEMTXATTRS_UNSPECIFIED,
 129                                 ((void *)&vapic_state) + start, length);
 130     }
 131 }
 132
 133 static void apic_vapic_base_update(APICCommonState *s)
 134 {
 135     apic_sync_vapic(s, SYNC_TO_VAPIC);
 136 }
 137
 138 static void apic_local_deliver(APICCommonState *s, int vector)
 139 {
 140     uint32_t lvt = s->lvt[vector];
 141     int trigger_mode;
 142
 143     trace_apic_local_deliver(vector, (lvt >> 8) & 7);
 144
 145     if (lvt & APIC_LVT_MASKED)
 146         return;
 147
 148     switch ((lvt >> 8) & 7) {
 149     case APIC_DM_SMI:
 150         cpu_interrupt(CPU(s->cpu), CPU_INTERRUPT_SMI);
 151         break;
 152
 153     case APIC_DM_NMI:
 154         cpu_interrupt(CPU(s->cpu), CPU_INTERRUPT_NMI);
 155         break;
 156
 157     case APIC_DM_EXTINT:
 158         cpu_interrupt(CPU(s->cpu), CPU_INTERRUPT_HARD);
 159         break;
 160
 161     case APIC_DM_FIXED:
 162         trigger_mode = APIC_TRIGGER_EDGE;
 163         if ((vector == APIC_LVT_LINT0 || vector == APIC_LVT_LINT1) &&
 164             (lvt & APIC_LVT_LEVEL_TRIGGER))
 165             trigger_mode = APIC_TRIGGER_LEVEL;
 166         apic_set_irq(s, lvt & 0xff, trigger_mode);
 167     }
 168 }
 169
 170 void apic_deliver_pic_intr(DeviceState *dev, int level)
 171 {
 172     APICCommonState *s = APIC(dev);
 173
 174     if (level) {
 175         apic_local_deliver(s, APIC_LVT_LINT0);
 176     } else {
 177         uint32_t lvt = s->lvt[APIC_LVT_LINT0];
 178
 179         switch ((lvt >> 8) & 7) {
 180         case APIC_DM_FIXED:
 181             if (!(lvt & APIC_LVT_LEVEL_TRIGGER))
 182                 break;
 183             apic_reset_bit(s->irr, lvt & 0xff);
 184             /* fall through */
 185         case APIC_DM_EXTINT:
 186             apic_update_irq(s);
 187             break;
 188         }
 189     }
 190 }
 191
 192 static void apic_external_nmi(APICCommonState *s)
 193 {
 194     apic_local_deliver(s, APIC_LVT_LINT1);
 195 }
 196
 197 #define foreach_apic(apic, deliver_bitmask, code) \
 198 {\
 199     int __i, __j;\
 200     for(__i = 0; __i < MAX_APIC_WORDS; __i++) {\
 201         uint32_t __mask = deliver_bitmask[__i];\
 202         if (__mask) {\
 203             for(__j = 0; __j < 32; __j++) {\
 204                 if (__mask & (1U << __j)) {\
 205                     apic = local_apics[__i * 32 + __j];\
 206                     if (apic) {\
 207                         code;\
 208                     }\
 209                 }\
 210             }\
 211         }\
 212     }\
 213 }
 214
 215 static void apic_bus_deliver(const uint32_t *deliver_bitmask,
 216                              uint8_t delivery_mode, uint8_t vector_num,
 217                              uint8_t trigger_mode)
 218 {
 219     APICCommonState *apic_iter;
 220
 221     switch (delivery_mode) {
 222         case APIC_DM_LOWPRI:
 223             /* XXX: search for focus processor, arbitration */
 224             {
 225                 int i, d;
 226                 d = -1;
 227                 for(i = 0; i < MAX_APIC_WORDS; i++) {
 228                     if (deliver_bitmask[i]) {
 229                         d = i * 32 + apic_ffs_bit(deliver_bitmask[i]);
 230                         break;
 231                     }
 232                 }
 233                 if (d >= 0) {
 234                     apic_iter = local_apics[d];
 235                     if (apic_iter) {
 236                         apic_set_irq(apic_iter, vector_num, trigger_mode);
 237                     }
 238                 }
 239             }
 240             return;
 241
 242         case APIC_DM_FIXED:
 243             break;
 244
 245         case APIC_DM_SMI:
 246             foreach_apic(apic_iter, deliver_bitmask,
 247                 cpu_interrupt(CPU(apic_iter->cpu), CPU_INTERRUPT_SMI)
 248             );
 249             return;
 250
 251         case APIC_DM_NMI:
 252             foreach_apic(apic_iter, deliver_bitmask,
 253                 cpu_interrupt(CPU(apic_iter->cpu), CPU_INTERRUPT_NMI)
 254             );
 255             return;
 256
 257         case APIC_DM_INIT:
 258             /* normal INIT IPI sent to processors */
 259             foreach_apic(apic_iter, deliver_bitmask,
 260                          cpu_interrupt(CPU(apic_iter->cpu),
 261                                        CPU_INTERRUPT_INIT)
 262             );
 263             return;
 264
 265         case APIC_DM_EXTINT:
 266             /* handled in I/O APIC code */
 267             break;
 268
 269         default:
 270             return;
 271     }
 272
 273     foreach_apic(apic_iter, deliver_bitmask,
 274                  apic_set_irq(apic_iter, vector_num, trigger_mode) );
 275 }
 276
 277 void apic_deliver_irq(uint8_t dest, uint8_t dest_mode, uint8_t delivery_mode,
 278                       uint8_t vector_num, uint8_t trigger_mode)
 279 {
 280     uint32_t deliver_bitmask[MAX_APIC_WORDS];
 281
 282     trace_apic_deliver_irq(dest, dest_mode, delivery_mode, vector_num,
 283                            trigger_mode);
 284
 285     apic_get_delivery_bitmask(deliver_bitmask, dest, dest_mode);
 286     apic_bus_deliver(deliver_bitmask, delivery_mode, vector_num, trigger_mode);
 287 }
 288
 289 static void apic_set_base(APICCommonState *s, uint64_t val)
 290 {
 291     s->apicbase = (val & 0xfffff000) |
 292         (s->apicbase & (MSR_IA32_APICBASE_BSP | MSR_IA32_APICBASE_ENABLE));
 293     /* if disabled, cannot be enabled again */
 294     if (!(val & MSR_IA32_APICBASE_ENABLE)) {
 295         s->apicbase &= ~MSR_IA32_APICBASE_ENABLE;
 296         cpu_clear_apic_feature(&s->cpu->env);
 297         s->spurious_vec &= ~APIC_SV_ENABLE;
 298     }
 299 }
 300
 301 static void apic_set_tpr(APICCommonState *s, uint8_t val)
 302 {
 303     /* Updates from cr8 are ignored while the VAPIC is active */
 304     if (!s->vapic_paddr) {
 305         s->tpr = val << 4;
 306         apic_update_irq(s);
 307     }
 308 }
 309
 310 int apic_get_highest_priority_irr(DeviceState *dev)
 311 {
 312     APICCommonState *s;
 313
 314     if (!dev) {
 315         /* no interrupts */
 316         return -1;
 317     }
 318     s = APIC_COMMON(dev);
 319     return get_highest_priority_int(s->irr);
 320 }
 321
 322 static uint8_t apic_get_tpr(APICCommonState *s)
 323 {
 324     apic_sync_vapic(s, SYNC_FROM_VAPIC);
 325     return s->tpr >> 4;
 326 }
 327
 328 int apic_get_ppr(APICCommonState *s)
 329 {
 330     int tpr, isrv, ppr;
 331
 332     tpr = (s->tpr >> 4);
 333     isrv = get_highest_priority_int(s->isr);
 334     if (isrv < 0)
 335         isrv = 0;
 336     isrv >>= 4;
 337     if (tpr >= isrv)
 338         ppr = s->tpr;
 339     else
 340         ppr = isrv << 4;
 341     return ppr;
 342 }
 343
 344 static int apic_get_arb_pri(APICCommonState *s)
 345 {
 346     /* XXX: arbitration */
 347     return 0;
 348 }
 349
 350
 351 /*
 352  * <0 - low prio interrupt,
 353  * 0  - no interrupt,
 354  * >0 - interrupt number
 355  */
 356 static int apic_irq_pending(APICCommonState *s)
 357 {
 358     int irrv, ppr;
 359
 360     if (!(s->spurious_vec & APIC_SV_ENABLE)) {
 361         return 0;
 362     }
 363
 364     irrv = get_highest_priority_int(s->irr);
 365     if (irrv < 0) {
 366         return 0;
 367     }
 368     ppr = apic_get_ppr(s);
 369     if (ppr && (irrv & 0xf0) <= (ppr & 0xf0)) {
 370         return -1;
 371     }
 372
 373     return irrv;
 374 }
 375
 376 /* signal the CPU if an irq is pending */
 377 static void apic_update_irq(APICCommonState *s)
 378 {
 379     CPUState *cpu;
 380     DeviceState *dev = (DeviceState *)s;
 381
 382     cpu = CPU(s->cpu);
 383     if (!qemu_cpu_is_self(cpu)) {
 384         cpu_interrupt(cpu, CPU_INTERRUPT_POLL);
 385     } else if (apic_irq_pending(s) > 0) {
 386         cpu_interrupt(cpu, CPU_INTERRUPT_HARD);
 387     } else if (!apic_accept_pic_intr(dev) || !pic_get_output(isa_pic)) {
 388         cpu_reset_interrupt(cpu, CPU_INTERRUPT_HARD);
 389     }
 390 }
 391
 392 void apic_poll_irq(DeviceState *dev)
 393 {
 394     APICCommonState *s = APIC(dev);
 395
 396     apic_sync_vapic(s, SYNC_FROM_VAPIC);
 397     apic_update_irq(s);
 398 }
 399
 400 static void apic_set_irq(APICCommonState *s, int vector_num, int trigger_mode)
 401 {
 402     apic_report_irq_delivered(!apic_get_bit(s->irr, vector_num));
 403
 404     apic_set_bit(s->irr, vector_num);
 405     if (trigger_mode)
 406         apic_set_bit(s->tmr, vector_num);
 407     else
 408         apic_reset_bit(s->tmr, vector_num);
 409     if (s->vapic_paddr) {
 410         apic_sync_vapic(s, SYNC_ISR_IRR_TO_VAPIC);
 411         /*
 412          * The vcpu thread needs to see the new IRR before we pull its current
 413          * TPR value. That way, if we miss a lowering of the TRP, the guest
 414          * has the chance to notice the new IRR and poll for IRQs on its own.
 415          */
 416         smp_wmb();
 417         apic_sync_vapic(s, SYNC_FROM_VAPIC);
 418     }
 419     apic_update_irq(s);
 420 }
 421
 422 static void apic_eoi(APICCommonState *s)
 423 {
 424     int isrv;
 425     isrv = get_highest_priority_int(s->isr);
 426     if (isrv < 0)
 427         return;
 428     apic_reset_bit(s->isr, isrv);
 429     if (!(s->spurious_vec & APIC_SV_DIRECTED_IO) && apic_get_bit(s->tmr, isrv)) {
 430         ioapic_eoi_broadcast(isrv);
 431     }
 432     apic_sync_vapic(s, SYNC_FROM_VAPIC | SYNC_TO_VAPIC);
 433     apic_update_irq(s);
 434 }
 435
 436 static int apic_find_dest(uint8_t dest)
 437 {
 438     APICCommonState *apic = local_apics[dest];
 439     int i;
 440
 441     if (apic && apic->id == dest)
 442         return dest;  /* shortcut in case apic->id == local_apics[dest]->id */
 443
 444     for (i = 0; i < MAX_APICS; i++) {
 445         apic = local_apics[i];
 446         if (apic && apic->id == dest)
 447             return i;
 448         if (!apic)
 449             break;
 450     }
 451
 452     return -1;
 453 }
 454
 455 static void apic_get_delivery_bitmask(uint32_t *deliver_bitmask,
 456                                       uint8_t dest, uint8_t dest_mode)
 457 {
 458     APICCommonState *apic_iter;
 459     int i;
 460
 461     if (dest_mode == 0) {
 462         if (dest == 0xff) {
 463             memset(deliver_bitmask, 0xff, MAX_APIC_WORDS * sizeof(uint32_t));
 464         } else {
 465             int idx = apic_find_dest(dest);
 466             memset(deliver_bitmask, 0x00, MAX_APIC_WORDS * sizeof(uint32_t));
 467             if (idx >= 0)
 468                 apic_set_bit(deliver_bitmask, idx);
 469         }
 470     } else {
 471         /* XXX: cluster mode */
 472         memset(deliver_bitmask, 0x00, MAX_APIC_WORDS * sizeof(uint32_t));
 473         for(i = 0; i < MAX_APICS; i++) {
 474             apic_iter = local_apics[i];
 475             if (apic_iter) {
 476                 if (apic_iter->dest_mode == 0xf) {
 477                     if (dest & apic_iter->log_dest)
 478                         apic_set_bit(deliver_bitmask, i);
 479                 } else if (apic_iter->dest_mode == 0x0) {
 480                     if ((dest & 0xf0) == (apic_iter->log_dest & 0xf0) &&
 481                         (dest & apic_iter->log_dest & 0x0f)) {
 482                         apic_set_bit(deliver_bitmask, i);
 483                     }
 484                 }
 485             } else {
 486                 break;
 487             }
 488         }
 489     }
 490 }
 491
 492 static void apic_startup(APICCommonState *s, int vector_num)
 493 {
 494     s->sipi_vector = vector_num;
 495     cpu_interrupt(CPU(s->cpu), CPU_INTERRUPT_SIPI);
 496 }
 497
 498 void apic_sipi(DeviceState *dev)
 499 {
 500     APICCommonState *s = APIC(dev);
 501
 502     cpu_reset_interrupt(CPU(s->cpu), CPU_INTERRUPT_SIPI);
 503
 504     if (!s->wait_for_sipi)
 505         return;
 506     cpu_x86_load_seg_cache_sipi(s->cpu, s->sipi_vector);
 507     s->wait_for_sipi = 0;
 508 }
 509
 510 static void apic_deliver(DeviceState *dev, uint8_t dest, uint8_t dest_mode,
 511                          uint8_t delivery_mode, uint8_t vector_num,
 512                          uint8_t trigger_mode)
 513 {
 514     APICCommonState *s = APIC(dev);
 515     uint32_t deliver_bitmask[MAX_APIC_WORDS];
 516     int dest_shorthand = (s->icr[0] >> 18) & 3;
 517     APICCommonState *apic_iter;
 518
 519     switch (dest_shorthand) {
 520     case 0:
 521         apic_get_delivery_bitmask(deliver_bitmask, dest, dest_mode);
 522         break;
 523     case 1:
 524         memset(deliver_bitmask, 0x00, sizeof(deliver_bitmask));
 525         apic_set_bit(deliver_bitmask, s->id);
 526         break;
 527     case 2:
 528         memset(deliver_bitmask, 0xff, sizeof(deliver_bitmask));
 529         break;
 530     case 3:
 531         memset(deliver_bitmask, 0xff, sizeof(deliver_bitmask));
 532         apic_reset_bit(deliver_bitmask, s->id);
 533         break;
 534     }
 535
 536     switch (delivery_mode) {
 537         case APIC_DM_INIT:
 538             {
 539                 int trig_mode = (s->icr[0] >> 15) & 1;
 540                 int level = (s->icr[0] >> 14) & 1;
 541                 if (level == 0 && trig_mode == 1) {
 542                     foreach_apic(apic_iter, deliver_bitmask,
 543                                  apic_iter->arb_id = apic_iter->id );
 544                     return;
 545                 }
 546             }
 547             break;
 548
 549         case APIC_DM_SIPI:
 550             foreach_apic(apic_iter, deliver_bitmask,
 551                          apic_startup(apic_iter, vector_num) );
 552             return;
 553     }
 554
 555     apic_bus_deliver(deliver_bitmask, delivery_mode, vector_num, trigger_mode);
 556 }
 557
 558 static bool apic_check_pic(APICCommonState *s)
 559 {
 560     DeviceState *dev = (DeviceState *)s;
 561
 562     if (!apic_accept_pic_intr(dev) || !pic_get_output(isa_pic)) {
 563         return false;
 564     }
 565     apic_deliver_pic_intr(dev, 1);
 566     return true;
 567 }
 568
 569 int apic_get_interrupt(DeviceState *dev)
 570 {
 571     APICCommonState *s = APIC(dev);
 572     int intno;
 573
 574     /* if the APIC is installed or enabled, we let the 8259 handle the
 575        IRQs */
 576     if (!s)
 577         return -1;
 578     if (!(s->spurious_vec & APIC_SV_ENABLE))
 579         return -1;
 580
 581     apic_sync_vapic(s, SYNC_FROM_VAPIC);
 582     intno = apic_irq_pending(s);
 583
 584     /* if there is an interrupt from the 8259, let the caller handle
 585      * that first since ExtINT interrupts ignore the priority.
 586      */
 587     if (intno == 0 || apic_check_pic(s)) {
 588         apic_sync_vapic(s, SYNC_TO_VAPIC);
 589         return -1;
 590     } else if (intno < 0) {
 591         apic_sync_vapic(s, SYNC_TO_VAPIC);
 592         return s->spurious_vec & 0xff;
 593     }
 594     apic_reset_bit(s->irr, intno);
 595     apic_set_bit(s->isr, intno);
 596     apic_sync_vapic(s, SYNC_TO_VAPIC);
 597
 598     apic_update_irq(s);
 599
 600     return intno;
 601 }
 602
 603 int apic_accept_pic_intr(DeviceState *dev)
 604 {
 605     APICCommonState *s = APIC(dev);
 606     uint32_t lvt0;
 607
 608     if (!s)
 609         return -1;
 610
 611     lvt0 = s->lvt[APIC_LVT_LINT0];
 612
 613     if ((s->apicbase & MSR_IA32_APICBASE_ENABLE) == 0 ||
 614         (lvt0 & APIC_LVT_MASKED) == 0)
 615         return isa_pic != NULL;
 616
 617     return 0;
 618 }
 619
 620 static void apic_timer_update(APICCommonState *s, int64_t current_time)
 621 {
 622     if (apic_next_timer(s, current_time)) {
 623         timer_mod(s->timer, s->next_time);
 624     } else {
 625         timer_del(s->timer);
 626     }
 627 }
 628
 629 static void apic_timer(void *opaque)
 630 {
 631     APICCommonState *s = opaque;
 632
 633     apic_local_deliver(s, APIC_LVT_TIMER);
 634     apic_timer_update(s, s->next_time);
 635 }
 636
 637 static uint64_t apic_mem_read(void *opaque, hwaddr addr, unsigned size)
 638 {
 639     DeviceState *dev;
 640     APICCommonState *s;
 641     uint32_t val;
 642     int index;
 643
 644     if (size < 4) {
 645         return 0;
 646     }
 647
 648     dev = cpu_get_current_apic();
 649     if (!dev) {
 650         return 0;
 651     }
 652     s = APIC(dev);
 653
 654     index = (addr >> 4) & 0xff;
 655     switch(index) {
 656     case 0x02: /* id */
 657         val = s->id << 24;
 658         break;
 659     case 0x03: /* version */
 660         val = s->version | ((APIC_LVT_NB - 1) << 16);
 661         break;
 662     case 0x08:
 663         apic_sync_vapic(s, SYNC_FROM_VAPIC);
 664         if (apic_report_tpr_access) {
 665             cpu_report_tpr_access(&s->cpu->env, TPR_ACCESS_READ);
 666         }
 667         val = s->tpr;
 668         break;
 669     case 0x09:
 670         val = apic_get_arb_pri(s);
 671         break;
 672     case 0x0a:
 673         /* ppr */
 674         val = apic_get_ppr(s);
 675         break;
 676     case 0x0b:
 677         val = 0;
 678         break;
 679     case 0x0d:
 680         val = s->log_dest << 24;
 681         break;
 682     case 0x0e:
 683         val = (s->dest_mode << 28) | 0xfffffff;
 684         break;
 685     case 0x0f:
 686         val = s->spurious_vec;
 687         break;
 688     case 0x10 ... 0x17:
 689         val = s->isr[index & 7];
 690         break;
 691     case 0x18 ... 0x1f:
 692         val = s->tmr[index & 7];
 693         break;
 694     case 0x20 ... 0x27:
 695         val = s->irr[index & 7];
 696         break;
 697     case 0x28:
 698         val = s->esr;
 699         break;
 700     case 0x30:
 701     case 0x31:
 702         val = s->icr[index & 1];
 703         break;
 704     case 0x32 ... 0x37:
 705         val = s->lvt[index - 0x32];
 706         break;
 707     case 0x38:
 708         val = s->initial_count;
 709         break;
 710     case 0x39:
 711         val = apic_get_current_count(s);
 712         break;
 713     case 0x3e:
 714         val = s->divide_conf;
 715         break;
 716     default:
 717         s->esr |= APIC_ESR_ILLEGAL_ADDRESS;
 718         val = 0;
 719         break;
 720     }
 721     trace_apic_mem_readl(addr, val);
 722     return val;
 723 }
 724
 725 static void apic_send_msi(MSIMessage *msi)
 726 {
 727     uint64_t addr = msi->address;
 728     uint32_t data = msi->data;
 729     uint8_t dest = (addr & MSI_ADDR_DEST_ID_MASK) >> MSI_ADDR_DEST_ID_SHIFT;
 730     uint8_t vector = (data & MSI_DATA_VECTOR_MASK) >> MSI_DATA_VECTOR_SHIFT;
 731     uint8_t dest_mode = (addr >> MSI_ADDR_DEST_MODE_SHIFT) & 0x1;
 732     uint8_t trigger_mode = (data >> MSI_DATA_TRIGGER_SHIFT) & 0x1;
 733     uint8_t delivery = (data >> MSI_DATA_DELIVERY_MODE_SHIFT) & 0x7;
 734     /* XXX: Ignore redirection hint. */
 735     apic_deliver_irq(dest, dest_mode, delivery, vector, trigger_mode);
 736 }
 737
 738 static void apic_mem_write(void *opaque, hwaddr addr, uint64_t val,
 739                            unsigned size)
 740 {
 741     DeviceState *dev;
 742     APICCommonState *s;
 743     int index = (addr >> 4) & 0xff;
 744
 745     if (size < 4) {
 746         return;
 747     }
 748
 749     if (addr > 0xfff || !index) {
 750         /* MSI and MMIO APIC are at the same memory location,
 751          * but actually not on the global bus: MSI is on PCI bus
 752          * APIC is connected directly to the CPU.
 753          * Mapping them on the global bus happens to work because
 754          * MSI registers are reserved in APIC MMIO and vice versa. */
 755         MSIMessage msi = { .address = addr, .data = val };
 756         apic_send_msi(&msi);
 757         return;
 758     }
 759
 760     dev = cpu_get_current_apic();
 761     if (!dev) {
 762         return;
 763     }
 764     s = APIC(dev);
 765
 766     trace_apic_mem_writel(addr, val);
 767
 768     switch(index) {
 769     case 0x02:
 770         s->id = (val >> 24);
 771         break;
 772     case 0x03:
 773         break;
 774     case 0x08:
 775         if (apic_report_tpr_access) {
 776             cpu_report_tpr_access(&s->cpu->env, TPR_ACCESS_WRITE);
 777         }
 778         s->tpr = val;
 779         apic_sync_vapic(s, SYNC_TO_VAPIC);
 780         apic_update_irq(s);
 781         break;
 782     case 0x09:
 783     case 0x0a:
 784         break;
 785     case 0x0b: /* EOI */
 786         apic_eoi(s);
 787         break;
 788     case 0x0d:
 789         s->log_dest = val >> 24;
 790         break;
 791     case 0x0e:
 792         s->dest_mode = val >> 28;
 793         break;
 794     case 0x0f:
 795         s->spurious_vec = val & 0x1ff;
 796         apic_update_irq(s);
 797         break;
 798     case 0x10 ... 0x17:
 799     case 0x18 ... 0x1f:
 800     case 0x20 ... 0x27:
 801     case 0x28:
 802         break;
 803     case 0x30:
 804         s->icr[0] = val;
 805         apic_deliver(dev, (s->icr[1] >> 24) & 0xff, (s->icr[0] >> 11) & 1,
 806                      (s->icr[0] >> 8) & 7, (s->icr[0] & 0xff),
 807                      (s->icr[0] >> 15) & 1);
 808         break;
 809     case 0x31:
 810         s->icr[1] = val;
 811         break;
 812     case 0x32 ... 0x37:
 813         {
 814             int n = index - 0x32;
 815             s->lvt[n] = val;
 816             if (n == APIC_LVT_TIMER) {
 817                 apic_timer_update(s, qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL));
 818             } else if (n == APIC_LVT_LINT0 && apic_check_pic(s)) {
 819                 apic_update_irq(s);
 820             }
 821         }
 822         break;
 823     case 0x38:
 824         s->initial_count = val;
 825         s->initial_count_load_time = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL);
 826         apic_timer_update(s, s->initial_count_load_time);
 827         break;
 828     case 0x39:
 829         break;
 830     case 0x3e:
 831         {
 832             int v;
 833             s->divide_conf = val & 0xb;
 834             v = (s->divide_conf & 3) | ((s->divide_conf >> 1) & 4);
 835             s->count_shift = (v + 1) & 7;
 836         }
 837         break;
 838     default:
 839         s->esr |= APIC_ESR_ILLEGAL_ADDRESS;
 840         break;
 841     }
 842 }
 843
 844 static void apic_pre_save(APICCommonState *s)
 845 {
 846     apic_sync_vapic(s, SYNC_FROM_VAPIC);
 847 }
 848
 849 static void apic_post_load(APICCommonState *s)
 850 {
 851     if (s->timer_expiry != -1) {
 852         timer_mod(s->timer, s->timer_expiry);
 853     } else {
 854         timer_del(s->timer);
 855     }
 856 }
 857
 858 static const MemoryRegionOps apic_io_ops = {
 859     .read = apic_mem_read,
 860     .write = apic_mem_write,
 861     .impl.min_access_size = 1,
 862     .impl.max_access_size = 4,
 863     .valid.min_access_size = 1,
 864     .valid.max_access_size = 4,
 865     .endianness = DEVICE_NATIVE_ENDIAN,
 866 };
 867
 868 static void apic_realize(DeviceState *dev, Error **errp)
 869 {
 870     APICCommonState *s = APIC(dev);
 871
 872     if (s->id >= MAX_APICS) {
 873         error_setg(errp, "%s initialization failed. APIC ID %d is invalid",
 874                    object_get_typename(OBJECT(dev)), s->id);
 875         return;
 876     }
 877
 878     if (kvm_enabled()) {
 879         warn_report("Userspace local APIC is deprecated for KVM.");
 880         warn_report("Do not use kernel-irqchip except for the -M isapc machine type.");
 881     }
 882
 883     memory_region_init_io(&s->io_memory, OBJECT(s), &apic_io_ops, s, "apic-msi",
 884                           APIC_SPACE_SIZE);
 885
 886     s->timer = timer_new_ns(QEMU_CLOCK_VIRTUAL, apic_timer, s);
 887     local_apics[s->id] = s;
 888
 889     msi_nonbroken = true;
 890 }
 891
 892 static void apic_unrealize(DeviceState *dev)
 893 {
 894     APICCommonState *s = APIC(dev);
 895
 896     timer_free(s->timer);
 897     local_apics[s->id] = NULL;
 898 }
 899
 900 static void apic_class_init(ObjectClass *klass, void *data)
 901 {
 902     APICCommonClass *k = APIC_COMMON_CLASS(klass);
 903
 904     k->realize = apic_realize;
 905     k->unrealize = apic_unrealize;
 906     k->set_base = apic_set_base;
 907     k->set_tpr = apic_set_tpr;
 908     k->get_tpr = apic_get_tpr;
 909     k->vapic_base_update = apic_vapic_base_update;
 910     k->external_nmi = apic_external_nmi;
 911     k->pre_save = apic_pre_save;
 912     k->post_load = apic_post_load;
 913     k->send_msi = apic_send_msi;
 914 }
 915
 916 static const TypeInfo apic_info = {
 917     .name          = TYPE_APIC,
 918     .instance_size = sizeof(APICCommonState),
 919     .parent        = TYPE_APIC_COMMON,
 920     .class_init    = apic_class_init,
 921 };
 922
 923 static void apic_register_types(void)
 924 {
 925     type_register_static(&apic_info);
 926 }
 927
 928 type_init(apic_register_types)