2 * Renesas SH7751R R2D-PLUS emulation
4 * Copyright (c) 2007 Magnus Damm
5 * Copyright (c) 2008 Paul Mundt
7 * Permission is hereby granted, free of charge, to any person obtaining a copy
8 * of this software and associated documentation files (the "Software"), to deal
9 * in the Software without restriction, including without limitation the rights
10 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
11 * copies of the Software, and to permit persons to whom the Software is
12 * furnished to do so, subject to the following conditions:
14 * The above copyright notice and this permission notice shall be included in
15 * all copies or substantial portions of the Software.
17 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
18 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
19 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
20 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
21 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
22 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
26 #include "hw/sysbus.h"
29 #include "hw/devices.h"
30 #include "sysemu/sysemu.h"
31 #include "hw/boards.h"
32 #include "hw/pci/pci.h"
34 #include "hw/sh7750_regs.h"
36 #include "hw/loader.h"
39 #include "sysemu/blockdev.h"
40 #include "exec/address-spaces.h"
42 #define FLASH_BASE 0x00000000
43 #define FLASH_SIZE 0x02000000
45 #define SDRAM_BASE 0x0c000000 /* Physical location of SDRAM: Area 3 */
46 #define SDRAM_SIZE 0x04000000
48 #define SM501_VRAM_SIZE 0x800000
50 #define BOOT_PARAMS_OFFSET 0x0010000
51 /* CONFIG_BOOT_LINK_OFFSET of Linux kernel */
52 #define LINUX_LOAD_OFFSET 0x0800000
53 #define INITRD_LOAD_OFFSET 0x1800000
55 #define PA_IRLMSK 0x00
56 #define PA_POWOFF 0x30
57 #define PA_VERREG 0x32
58 #define PA_OUTPORT 0x36
89 PCI_INTD
, CF_IDE
, CF_CD
, PCI_INTC
, SM501
, KEY
, RTC_A
, RTC_T
,
90 SDCARD
, PCI_INTA
, PCI_INTB
, EXT
, TP
,
94 static const struct { short irl
; uint16_t msk
; } irqtab
[NR_IRQS
] = {
95 [CF_IDE
] = { 1, 1<<9 },
96 [CF_CD
] = { 2, 1<<8 },
97 [PCI_INTA
] = { 9, 1<<14 },
98 [PCI_INTB
] = { 10, 1<<13 },
99 [PCI_INTC
] = { 3, 1<<12 },
100 [PCI_INTD
] = { 0, 1<<11 },
101 [SM501
] = { 4, 1<<10 },
103 [RTC_A
] = { 6, 1<<5 },
104 [RTC_T
] = { 7, 1<<4 },
105 [SDCARD
] = { 8, 1<<7 },
106 [EXT
] = { 11, 1<<0 },
107 [TP
] = { 12, 1<<15 },
110 static void update_irl(r2d_fpga_t
*fpga
)
113 for (i
= 0; i
< NR_IRQS
; i
++)
114 if (fpga
->irlmon
& fpga
->irlmsk
& irqtab
[i
].msk
)
115 if (irqtab
[i
].irl
< irl
)
117 qemu_set_irq(fpga
->irl
, irl
^ 15);
120 static void r2d_fpga_irq_set(void *opaque
, int n
, int level
)
122 r2d_fpga_t
*fpga
= opaque
;
124 fpga
->irlmon
|= irqtab
[n
].msk
;
126 fpga
->irlmon
&= ~irqtab
[n
].msk
;
130 static uint32_t r2d_fpga_read(void *opaque
, hwaddr addr
)
132 r2d_fpga_t
*s
= opaque
;
149 r2d_fpga_write(void *opaque
, hwaddr addr
, uint32_t value
)
151 r2d_fpga_t
*s
= opaque
;
163 qemu_system_shutdown_request();
172 static const MemoryRegionOps r2d_fpga_ops
= {
174 .read
= { r2d_fpga_read
, r2d_fpga_read
, NULL
, },
175 .write
= { r2d_fpga_write
, r2d_fpga_write
, NULL
, },
177 .endianness
= DEVICE_NATIVE_ENDIAN
,
180 static qemu_irq
*r2d_fpga_init(MemoryRegion
*sysmem
,
181 hwaddr base
, qemu_irq irl
)
185 s
= g_malloc0(sizeof(r2d_fpga_t
));
189 memory_region_init_io(&s
->iomem
, &r2d_fpga_ops
, s
, "r2d-fpga", 0x40);
190 memory_region_add_subregion(sysmem
, base
, &s
->iomem
);
191 return qemu_allocate_irqs(r2d_fpga_irq_set
, s
, NR_IRQS
);
194 typedef struct ResetData
{
199 static void main_cpu_reset(void *opaque
)
201 ResetData
*s
= (ResetData
*)opaque
;
202 CPUSH4State
*env
= &s
->cpu
->env
;
204 cpu_reset(CPU(s
->cpu
));
208 static struct QEMU_PACKED
210 int mount_root_rdonly
;
219 char kernel_cmdline
[256];
222 static void r2d_init(QEMUMachineInitArgs
*args
)
224 const char *cpu_model
= args
->cpu_model
;
225 const char *kernel_filename
= args
->kernel_filename
;
226 const char *kernel_cmdline
= args
->kernel_cmdline
;
227 const char *initrd_filename
= args
->initrd_filename
;
230 ResetData
*reset_info
;
231 struct SH7750State
*s
;
232 MemoryRegion
*sdram
= g_new(MemoryRegion
, 1);
237 SysBusDevice
*busdev
;
238 MemoryRegion
*address_space_mem
= get_system_memory();
240 if (cpu_model
== NULL
) {
241 cpu_model
= "SH7751R";
244 cpu
= cpu_sh4_init(cpu_model
);
246 fprintf(stderr
, "Unable to find CPU definition\n");
251 reset_info
= g_malloc0(sizeof(ResetData
));
252 reset_info
->cpu
= cpu
;
253 reset_info
->vector
= env
->pc
;
254 qemu_register_reset(main_cpu_reset
, reset_info
);
256 /* Allocate memory space */
257 memory_region_init_ram(sdram
, "r2d.sdram", SDRAM_SIZE
);
258 vmstate_register_ram_global(sdram
);
259 memory_region_add_subregion(address_space_mem
, SDRAM_BASE
, sdram
);
260 /* Register peripherals */
261 s
= sh7750_init(env
, address_space_mem
);
262 irq
= r2d_fpga_init(address_space_mem
, 0x04000000, sh7750_irl(s
));
264 dev
= qdev_create(NULL
, "sh_pci");
265 busdev
= SYS_BUS_DEVICE(dev
);
266 qdev_init_nofail(dev
);
267 sysbus_mmio_map(busdev
, 0, P4ADDR(0x1e200000));
268 sysbus_mmio_map(busdev
, 1, A7ADDR(0x1e200000));
269 sysbus_connect_irq(busdev
, 0, irq
[PCI_INTA
]);
270 sysbus_connect_irq(busdev
, 1, irq
[PCI_INTB
]);
271 sysbus_connect_irq(busdev
, 2, irq
[PCI_INTC
]);
272 sysbus_connect_irq(busdev
, 3, irq
[PCI_INTD
]);
274 sm501_init(address_space_mem
, 0x10000000, SM501_VRAM_SIZE
,
275 irq
[SM501
], serial_hds
[2]);
277 /* onboard CF (True IDE mode, Master only). */
278 dinfo
= drive_get(IF_IDE
, 0, 0);
279 dev
= qdev_create(NULL
, "mmio-ide");
280 busdev
= SYS_BUS_DEVICE(dev
);
281 sysbus_connect_irq(busdev
, 0, irq
[CF_IDE
]);
282 qdev_prop_set_uint32(dev
, "shift", 1);
283 qdev_init_nofail(dev
);
284 sysbus_mmio_map(busdev
, 0, 0x14001000);
285 sysbus_mmio_map(busdev
, 1, 0x1400080c);
286 mmio_ide_init_drives(dev
, dinfo
, NULL
);
288 /* onboard flash memory */
289 dinfo
= drive_get(IF_PFLASH
, 0, 0);
290 pflash_cfi02_register(0x0, NULL
, "r2d.flash", FLASH_SIZE
,
291 dinfo
? dinfo
->bdrv
: NULL
, (16 * 1024),
293 1, 4, 0x0000, 0x0000, 0x0000, 0x0000,
296 /* NIC: rtl8139 on-board, and 2 slots. */
297 for (i
= 0; i
< nb_nics
; i
++)
298 pci_nic_init_nofail(&nd_table
[i
], "rtl8139", i
==0 ? "2" : NULL
);
301 usbdevice_create("keyboard");
303 /* Todo: register on board registers */
304 memset(&boot_params
, 0, sizeof(boot_params
));
306 if (kernel_filename
) {
309 kernel_size
= load_image_targphys(kernel_filename
,
310 SDRAM_BASE
+ LINUX_LOAD_OFFSET
,
311 INITRD_LOAD_OFFSET
- LINUX_LOAD_OFFSET
);
312 if (kernel_size
< 0) {
313 fprintf(stderr
, "qemu: could not load kernel '%s'\n", kernel_filename
);
317 /* initialization which should be done by firmware */
318 stl_phys(SH7750_BCR1
, 1<<3); /* cs3 SDRAM */
319 stw_phys(SH7750_BCR2
, 3<<(3*2)); /* cs3 32bit */
320 reset_info
->vector
= (SDRAM_BASE
+ LINUX_LOAD_OFFSET
) | 0xa0000000; /* Start from P2 area */
323 if (initrd_filename
) {
326 initrd_size
= load_image_targphys(initrd_filename
,
327 SDRAM_BASE
+ INITRD_LOAD_OFFSET
,
328 SDRAM_SIZE
- INITRD_LOAD_OFFSET
);
330 if (initrd_size
< 0) {
331 fprintf(stderr
, "qemu: could not load initrd '%s'\n", initrd_filename
);
335 /* initialization which should be done by firmware */
336 boot_params
.loader_type
= 1;
337 boot_params
.initrd_start
= INITRD_LOAD_OFFSET
;
338 boot_params
.initrd_size
= initrd_size
;
341 if (kernel_cmdline
) {
342 /* I see no evidence that this .kernel_cmdline buffer requires
343 NUL-termination, so using strncpy should be ok. */
344 strncpy(boot_params
.kernel_cmdline
, kernel_cmdline
,
345 sizeof(boot_params
.kernel_cmdline
));
348 rom_add_blob_fixed("boot_params", &boot_params
, sizeof(boot_params
),
349 SDRAM_BASE
+ BOOT_PARAMS_OFFSET
);
352 static QEMUMachine r2d_machine
= {
354 .desc
= "r2d-plus board",
356 DEFAULT_MACHINE_OPTIONS
,
359 static void r2d_machine_init(void)
361 qemu_register_machine(&r2d_machine
);
364 machine_init(r2d_machine_init
);