hw/ppc_newworld.c

   1 /*
   2  * QEMU PowerPC CHRP (currently NewWorld PowerMac) hardware System Emulator
   3  *
   4  * Copyright (c) 2004-2007 Fabrice Bellard
   5  * Copyright (c) 2007 Jocelyn Mayer
   6  *
   7  * Permission is hereby granted, free of charge, to any person obtaining a copy
   8  * of this software and associated documentation files (the "Software"), to deal
   9  * in the Software without restriction, including without limitation the rights
  10  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  11  * copies of the Software, and to permit persons to whom the Software is
  12  * furnished to do so, subject to the following conditions:
  13  *
  14  * The above copyright notice and this permission notice shall be included in
  15  * all copies or substantial portions of the Software.
  16  *
  17  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  18  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  19  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  20  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  21  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  22  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  23  * THE SOFTWARE.
  24  *
  25  * PCI bus layout on a real G5 (U3 based):
  26  *
  27  * 0000:f0:0b.0 Host bridge [0600]: Apple Computer Inc. U3 AGP [106b:004b]
  28  * 0000:f0:10.0 VGA compatible controller [0300]: ATI Technologies Inc RV350 AP [Radeon 9600] [1002:4150]
  29  * 0001:00:00.0 Host bridge [0600]: Apple Computer Inc. CPC945 HT Bridge [106b:004a]
  30  * 0001:00:01.0 PCI bridge [0604]: Advanced Micro Devices [AMD] AMD-8131 PCI-X Bridge [1022:7450] (rev 12)
  31  * 0001:00:02.0 PCI bridge [0604]: Advanced Micro Devices [AMD] AMD-8131 PCI-X Bridge [1022:7450] (rev 12)
  32  * 0001:00:03.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0045]
  33  * 0001:00:04.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0046]
  34  * 0001:00:05.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0047]
  35  * 0001:00:06.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0048]
  36  * 0001:00:07.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0049]
  37  * 0001:01:07.0 Class [ff00]: Apple Computer Inc. K2 KeyLargo Mac/IO [106b:0041] (rev 20)
  38  * 0001:01:08.0 USB Controller [0c03]: Apple Computer Inc. K2 KeyLargo USB [106b:0040]
  39  * 0001:01:09.0 USB Controller [0c03]: Apple Computer Inc. K2 KeyLargo USB [106b:0040]
  40  * 0001:02:0b.0 USB Controller [0c03]: NEC Corporation USB [1033:0035] (rev 43)
  41  * 0001:02:0b.1 USB Controller [0c03]: NEC Corporation USB [1033:0035] (rev 43)
  42  * 0001:02:0b.2 USB Controller [0c03]: NEC Corporation USB 2.0 [1033:00e0] (rev 04)
  43  * 0001:03:0d.0 Class [ff00]: Apple Computer Inc. K2 ATA/100 [106b:0043]
  44  * 0001:03:0e.0 FireWire (IEEE 1394) [0c00]: Apple Computer Inc. K2 FireWire [106b:0042]
  45  * 0001:04:0f.0 Ethernet controller [0200]: Apple Computer Inc. K2 GMAC (Sun GEM) [106b:004c]
  46  * 0001:05:0c.0 IDE interface [0101]: Broadcom K2 SATA [1166:0240]
  47  *
  48  */
  49 #include "hw.h"
  50 #include "ppc.h"
  51 #include "ppc_mac.h"
  52 #include "mac_dbdma.h"
  53 #include "nvram.h"
  54 #include "pc.h"
  55 #include "pci.h"
  56 #include "usb-ohci.h"
  57 #include "net.h"
  58 #include "sysemu.h"
  59 #include "boards.h"
  60 #include "fw_cfg.h"
  61 #include "escc.h"
  62 #include "openpic.h"
  63 #include "ide.h"
  64 #include "loader.h"
  65 #include "elf.h"
  66 #include "kvm.h"
  67 #include "kvm_ppc.h"
  68 #include "hw/usb.h"
  69
  70 #define MAX_IDE_BUS 2
  71 #define VGA_BIOS_SIZE 65536
  72 #define CFG_ADDR 0xf0000510
  73
  74 /* debug UniNorth */
  75 //#define DEBUG_UNIN
  76
  77 #ifdef DEBUG_UNIN
  78 #define UNIN_DPRINTF(fmt, ...)                                  \
  79     do { printf("UNIN: " fmt , ## __VA_ARGS__); } while (0)
  80 #else
  81 #define UNIN_DPRINTF(fmt, ...)
  82 #endif
  83
  84 /* UniN device */
  85 static void unin_writel (void *opaque, target_phys_addr_t addr, uint32_t value)
  86 {
  87     UNIN_DPRINTF("writel addr " TARGET_FMT_plx " val %x\n", addr, value);
  88 }
  89
  90 static uint32_t unin_readl (void *opaque, target_phys_addr_t addr)
  91 {
  92     uint32_t value;
  93
  94     value = 0;
  95     UNIN_DPRINTF("readl addr " TARGET_FMT_plx " val %x\n", addr, value);
  96
  97     return value;
  98 }
  99
 100 static CPUWriteMemoryFunc * const unin_write[] = {
 101     &unin_writel,
 102     &unin_writel,
 103     &unin_writel,
 104 };
 105
 106 static CPUReadMemoryFunc * const unin_read[] = {
 107     &unin_readl,
 108     &unin_readl,
 109     &unin_readl,
 110 };
 111
 112 static int fw_cfg_boot_set(void *opaque, const char *boot_device)
 113 {
 114     fw_cfg_add_i16(opaque, FW_CFG_BOOT_DEVICE, boot_device[0]);
 115     return 0;
 116 }
 117
 118 static uint64_t translate_kernel_address(void *opaque, uint64_t addr)
 119 {
 120     return (addr & 0x0fffffff) + KERNEL_LOAD_ADDR;
 121 }
 122
 123 /* PowerPC Mac99 hardware initialisation */
 124 static void ppc_core99_init (QEMUMachine *machine, QemuOpts *opts)
 125 {
 126     ram_addr_t ram_size = qemu_opt_get_number(opts, "ram_size", 0);
 127     const char *boot_device = qemu_opt_get(opts, "boot_device");
 128     const char *kernel_filename = qemu_opt_get(opts, "kernel");
 129     const char *kernel_cmdline = qemu_opt_get(opts, "cmdline");
 130     const char *initrd_filename = qemu_opt_get(opts, "initrd");
 131     const char *cpu_model = qemu_opt_get(opts, "cpu");
 132     CPUState *env = NULL, *envs[MAX_CPUS];
 133     char *filename;
 134     qemu_irq *pic, **openpic_irqs;
 135     int unin_memory;
 136     int linux_boot, i;
 137     ram_addr_t ram_offset, bios_offset, vga_bios_offset;
 138     uint32_t kernel_base, kernel_size, initrd_base, initrd_size;
 139     PCIBus *pci_bus;
 140     MacIONVRAMState *nvr;
 141     int nvram_mem_index;
 142     int vga_bios_size, bios_size;
 143     int pic_mem_index, dbdma_mem_index, cuda_mem_index, escc_mem_index;
 144     int ide_mem_index[3];
 145     int ppc_boot_device;
 146     DriveInfo *hd[MAX_IDE_BUS * MAX_IDE_DEVS];
 147     void *fw_cfg;
 148     void *dbdma;
 149     uint8_t *vga_bios_ptr;
 150     int machine_arch;
 151
 152     linux_boot = (kernel_filename != NULL);
 153
 154     /* init CPUs */
 155     if (cpu_model == NULL)
 156 #ifdef TARGET_PPC64
 157         cpu_model = "970fx";
 158 #else
 159         cpu_model = "G4";
 160 #endif
 161     for (i = 0; i < smp_cpus; i++) {
 162         env = cpu_init(cpu_model);
 163         if (!env) {
 164             fprintf(stderr, "Unable to find PowerPC CPU definition\n");
 165             exit(1);
 166         }
 167         /* Set time-base frequency to 100 Mhz */
 168         cpu_ppc_tb_init(env, 100UL * 1000UL * 1000UL);
 169 #if 0
 170         env->osi_call = vga_osi_call;
 171 #endif
 172         qemu_register_reset((QEMUResetHandler*)&cpu_reset, env);
 173         envs[i] = env;
 174     }
 175
 176     /* allocate RAM */
 177     ram_offset = qemu_ram_alloc(ram_size);
 178     cpu_register_physical_memory(0, ram_size, ram_offset);
 179
 180     /* allocate and load BIOS */
 181     bios_offset = qemu_ram_alloc(BIOS_SIZE);
 182     if (bios_name == NULL)
 183         bios_name = PROM_FILENAME;
 184     filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, bios_name);
 185     cpu_register_physical_memory(PROM_ADDR, BIOS_SIZE, bios_offset | IO_MEM_ROM);
 186
 187     /* Load OpenBIOS (ELF) */
 188     if (filename) {
 189         bios_size = load_elf(filename, NULL, NULL, NULL,
 190                              NULL, NULL, 1, ELF_MACHINE, 0);
 191
 192         qemu_free(filename);
 193     } else {
 194         bios_size = -1;
 195     }
 196     if (bios_size < 0 || bios_size > BIOS_SIZE) {
 197         hw_error("qemu: could not load PowerPC bios '%s'\n", bios_name);
 198         exit(1);
 199     }
 200
 201     /* allocate and load VGA BIOS */
 202     vga_bios_offset = qemu_ram_alloc(VGA_BIOS_SIZE);
 203     vga_bios_ptr = qemu_get_ram_ptr(vga_bios_offset);
 204     filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, VGABIOS_FILENAME);
 205     if (filename) {
 206         vga_bios_size = load_image(filename, vga_bios_ptr + 8);
 207         qemu_free(filename);
 208     } else {
 209         vga_bios_size = -1;
 210     }
 211     if (vga_bios_size < 0) {
 212         /* if no bios is present, we can still work */
 213         fprintf(stderr, "qemu: warning: could not load VGA bios '%s'\n",
 214                 VGABIOS_FILENAME);
 215         vga_bios_size = 0;
 216     } else {
 217         /* set a specific header (XXX: find real Apple format for NDRV
 218            drivers) */
 219         vga_bios_ptr[0] = 'N';
 220         vga_bios_ptr[1] = 'D';
 221         vga_bios_ptr[2] = 'R';
 222         vga_bios_ptr[3] = 'V';
 223         cpu_to_be32w((uint32_t *)(vga_bios_ptr + 4), vga_bios_size);
 224         vga_bios_size += 8;
 225
 226         /* Round to page boundary */
 227         vga_bios_size = (vga_bios_size + TARGET_PAGE_SIZE - 1) &
 228             TARGET_PAGE_MASK;
 229     }
 230
 231     if (linux_boot) {
 232         uint64_t lowaddr = 0;
 233         int bswap_needed;
 234
 235 #ifdef BSWAP_NEEDED
 236         bswap_needed = 1;
 237 #else
 238         bswap_needed = 0;
 239 #endif
 240         kernel_base = KERNEL_LOAD_ADDR;
 241
 242         kernel_size = load_elf(kernel_filename, translate_kernel_address, NULL,
 243                                NULL, &lowaddr, NULL, 1, ELF_MACHINE, 0);
 244         if (kernel_size < 0)
 245             kernel_size = load_aout(kernel_filename, kernel_base,
 246                                     ram_size - kernel_base, bswap_needed,
 247                                     TARGET_PAGE_SIZE);
 248         if (kernel_size < 0)
 249             kernel_size = load_image_targphys(kernel_filename,
 250                                               kernel_base,
 251                                               ram_size - kernel_base);
 252         if (kernel_size < 0) {
 253             hw_error("qemu: could not load kernel '%s'\n", kernel_filename);
 254             exit(1);
 255         }
 256         /* load initrd */
 257         if (initrd_filename) {
 258             initrd_base = INITRD_LOAD_ADDR;
 259             initrd_size = load_image_targphys(initrd_filename, initrd_base,
 260                                               ram_size - initrd_base);
 261             if (initrd_size < 0) {
 262                 hw_error("qemu: could not load initial ram disk '%s'\n",
 263                          initrd_filename);
 264                 exit(1);
 265             }
 266         } else {
 267             initrd_base = 0;
 268             initrd_size = 0;
 269         }
 270         ppc_boot_device = 'm';
 271     } else {
 272         kernel_base = 0;
 273         kernel_size = 0;
 274         initrd_base = 0;
 275         initrd_size = 0;
 276         ppc_boot_device = '\0';
 277         /* We consider that NewWorld PowerMac never have any floppy drive
 278          * For now, OHW cannot boot from the network.
 279          */
 280         for (i = 0; boot_device[i] != '\0'; i++) {
 281             if (boot_device[i] >= 'c' && boot_device[i] <= 'f') {
 282                 ppc_boot_device = boot_device[i];
 283                 break;
 284             }
 285         }
 286         if (ppc_boot_device == '\0') {
 287             fprintf(stderr, "No valid boot device for Mac99 machine\n");
 288             exit(1);
 289         }
 290     }
 291
 292     isa_mem_base = 0x80000000;
 293
 294     /* Register 8 MB of ISA IO space */
 295     isa_mmio_init(0xf2000000, 0x00800000, 1);
 296
 297     /* UniN init */
 298     unin_memory = cpu_register_io_memory(unin_read, unin_write, NULL);
 299     cpu_register_physical_memory(0xf8000000, 0x00001000, unin_memory);
 300
 301     openpic_irqs = qemu_mallocz(smp_cpus * sizeof(qemu_irq *));
 302     openpic_irqs[0] =
 303         qemu_mallocz(smp_cpus * sizeof(qemu_irq) * OPENPIC_OUTPUT_NB);
 304     for (i = 0; i < smp_cpus; i++) {
 305         /* Mac99 IRQ connection between OpenPIC outputs pins
 306          * and PowerPC input pins
 307          */
 308         switch (PPC_INPUT(env)) {
 309         case PPC_FLAGS_INPUT_6xx:
 310             openpic_irqs[i] = openpic_irqs[0] + (i * OPENPIC_OUTPUT_NB);
 311             openpic_irqs[i][OPENPIC_OUTPUT_INT] =
 312                 ((qemu_irq *)env->irq_inputs)[PPC6xx_INPUT_INT];
 313             openpic_irqs[i][OPENPIC_OUTPUT_CINT] =
 314                 ((qemu_irq *)env->irq_inputs)[PPC6xx_INPUT_INT];
 315             openpic_irqs[i][OPENPIC_OUTPUT_MCK] =
 316                 ((qemu_irq *)env->irq_inputs)[PPC6xx_INPUT_MCP];
 317             /* Not connected ? */
 318             openpic_irqs[i][OPENPIC_OUTPUT_DEBUG] = NULL;
 319             /* Check this */
 320             openpic_irqs[i][OPENPIC_OUTPUT_RESET] =
 321                 ((qemu_irq *)env->irq_inputs)[PPC6xx_INPUT_HRESET];
 322             break;
 323 #if defined(TARGET_PPC64)
 324         case PPC_FLAGS_INPUT_970:
 325             openpic_irqs[i] = openpic_irqs[0] + (i * OPENPIC_OUTPUT_NB);
 326             openpic_irqs[i][OPENPIC_OUTPUT_INT] =
 327                 ((qemu_irq *)env->irq_inputs)[PPC970_INPUT_INT];
 328             openpic_irqs[i][OPENPIC_OUTPUT_CINT] =
 329                 ((qemu_irq *)env->irq_inputs)[PPC970_INPUT_INT];
 330             openpic_irqs[i][OPENPIC_OUTPUT_MCK] =
 331                 ((qemu_irq *)env->irq_inputs)[PPC970_INPUT_MCP];
 332             /* Not connected ? */
 333             openpic_irqs[i][OPENPIC_OUTPUT_DEBUG] = NULL;
 334             /* Check this */
 335             openpic_irqs[i][OPENPIC_OUTPUT_RESET] =
 336                 ((qemu_irq *)env->irq_inputs)[PPC970_INPUT_HRESET];
 337             break;
 338 #endif /* defined(TARGET_PPC64) */
 339         default:
 340             hw_error("Bus model not supported on mac99 machine\n");
 341             exit(1);
 342         }
 343     }
 344     pic = openpic_init(NULL, &pic_mem_index, smp_cpus, openpic_irqs, NULL);
 345     if (PPC_INPUT(env) == PPC_FLAGS_INPUT_970) {
 346         /* 970 gets a U3 bus */
 347         pci_bus = pci_pmac_u3_init(pic);
 348         machine_arch = ARCH_MAC99_U3;
 349     } else {
 350         pci_bus = pci_pmac_init(pic);
 351         machine_arch = ARCH_MAC99;
 352     }
 353     /* init basic PC hardware */
 354     pci_vga_init(pci_bus, vga_bios_offset, vga_bios_size);
 355
 356     escc_mem_index = escc_init(0x80013000, pic[0x25], pic[0x24],
 357                                serial_hds[0], serial_hds[1], ESCC_CLOCK, 4);
 358
 359     for(i = 0; i < nb_nics; i++)
 360         pci_nic_init_nofail(&nd_table[i], "ne2k_pci", NULL);
 361
 362     if (drive_get_max_bus(IF_IDE) >= MAX_IDE_BUS) {
 363         fprintf(stderr, "qemu: too many IDE bus\n");
 364         exit(1);
 365     }
 366     dbdma = DBDMA_init(&dbdma_mem_index);
 367
 368     /* We only emulate 2 out of 3 IDE controllers for now */
 369     ide_mem_index[0] = -1;
 370     hd[0] = drive_get(IF_IDE, 0, 0);
 371     hd[1] = drive_get(IF_IDE, 0, 1);
 372     ide_mem_index[1] = pmac_ide_init(hd, pic[0x0d], dbdma, 0x16, pic[0x02]);
 373     hd[0] = drive_get(IF_IDE, 1, 0);
 374     hd[1] = drive_get(IF_IDE, 1, 1);
 375     ide_mem_index[2] = pmac_ide_init(hd, pic[0x0e], dbdma, 0x1a, pic[0x02]);
 376
 377     /* cuda also initialize ADB */
 378     if (machine_arch == ARCH_MAC99_U3) {
 379         usb_enabled = 1;
 380     }
 381     cuda_init(&cuda_mem_index, pic[0x19]);
 382
 383     adb_kbd_init(&adb_bus);
 384     adb_mouse_init(&adb_bus);
 385
 386     macio_init(pci_bus, PCI_DEVICE_ID_APPLE_UNI_N_KEYL, 0, pic_mem_index,
 387                dbdma_mem_index, cuda_mem_index, NULL, 3, ide_mem_index,
 388                escc_mem_index);
 389
 390     if (usb_enabled) {
 391         usb_ohci_init_pci(pci_bus, -1);
 392     }
 393
 394     /* U3 needs to use USB for input because Linux doesn't support via-cuda
 395        on PPC64 */
 396     if (machine_arch == ARCH_MAC99_U3) {
 397         usbdevice_create("keyboard");
 398         usbdevice_create("mouse");
 399     }
 400
 401     if (graphic_depth != 15 && graphic_depth != 32 && graphic_depth != 8)
 402         graphic_depth = 15;
 403
 404     /* The NewWorld NVRAM is not located in the MacIO device */
 405     nvr = macio_nvram_init(&nvram_mem_index, 0x2000, 1);
 406     pmac_format_nvram_partition(nvr, 0x2000);
 407     macio_nvram_map(nvr, 0xFFF04000);
 408     /* No PCI init: the BIOS will do it */
 409
 410     fw_cfg = fw_cfg_init(0, 0, CFG_ADDR, CFG_ADDR + 2);
 411     fw_cfg_add_i32(fw_cfg, FW_CFG_ID, 1);
 412     fw_cfg_add_i64(fw_cfg, FW_CFG_RAM_SIZE, (uint64_t)ram_size);
 413     fw_cfg_add_i16(fw_cfg, FW_CFG_MACHINE_ID, machine_arch);
 414     fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_ADDR, kernel_base);
 415     fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_SIZE, kernel_size);
 416     if (kernel_cmdline) {
 417         fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_CMDLINE, CMDLINE_ADDR);
 418         pstrcpy_targphys("cmdline", CMDLINE_ADDR, TARGET_PAGE_SIZE, kernel_cmdline);
 419     } else {
 420         fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_CMDLINE, 0);
 421     }
 422     fw_cfg_add_i32(fw_cfg, FW_CFG_INITRD_ADDR, initrd_base);
 423     fw_cfg_add_i32(fw_cfg, FW_CFG_INITRD_SIZE, initrd_size);
 424     fw_cfg_add_i16(fw_cfg, FW_CFG_BOOT_DEVICE, ppc_boot_device);
 425
 426     fw_cfg_add_i16(fw_cfg, FW_CFG_PPC_WIDTH, graphic_width);
 427     fw_cfg_add_i16(fw_cfg, FW_CFG_PPC_HEIGHT, graphic_height);
 428     fw_cfg_add_i16(fw_cfg, FW_CFG_PPC_DEPTH, graphic_depth);
 429
 430     if (kvm_enabled()) {
 431 #ifdef CONFIG_KVM
 432         fw_cfg_add_i32(fw_cfg, FW_CFG_PPC_TBFREQ, kvmppc_get_tbfreq());
 433 #endif
 434     } else {
 435         fw_cfg_add_i32(fw_cfg, FW_CFG_PPC_TBFREQ, get_ticks_per_sec());
 436     }
 437
 438     qemu_register_boot_set(fw_cfg_boot_set, fw_cfg);
 439 }
 440
 441 static QEMUMachine core99_machine = {
 442     .name = "mac99",
 443     .desc = "Mac99 based PowerMAC",
 444     .init = ppc_core99_init,
 445     .max_cpus = MAX_CPUS,
 446 #ifdef TARGET_PPC64
 447     .is_default = 1,
 448 #endif
 449 };
 450
 451 static void core99_machine_init(void)
 452 {
 453     qemu_register_machine(&core99_machine);
 454 }
 455
 456 machine_init(core99_machine_init);