2 * Renesas SH7751R R2D-PLUS emulation
4 * Copyright (c) 2007 Magnus Damm
5 * Copyright (c) 2008 Paul Mundt
7 * Permission is hereby granted, free of charge, to any person obtaining a copy
8 * of this software and associated documentation files (the "Software"), to deal
9 * in the Software without restriction, including without limitation the rights
10 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
11 * copies of the Software, and to permit persons to whom the Software is
12 * furnished to do so, subject to the following conditions:
14 * The above copyright notice and this permission notice shall be included in
15 * all copies or substantial portions of the Software.
17 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
18 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
19 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
20 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
21 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
22 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
26 #include "qemu/osdep.h"
27 #include "qapi/error.h"
28 #include "qemu-common.h"
30 #include "hw/sysbus.h"
32 #include "hw/sh4/sh.h"
33 #include "hw/devices.h"
34 #include "sysemu/sysemu.h"
35 #include "hw/boards.h"
36 #include "hw/pci/pci.h"
38 #include "sh7750_regs.h"
40 #include "hw/loader.h"
42 #include "hw/block/flash.h"
43 #include "exec/address-spaces.h"
45 #define FLASH_BASE 0x00000000
46 #define FLASH_SIZE 0x02000000
48 #define SDRAM_BASE 0x0c000000 /* Physical location of SDRAM: Area 3 */
49 #define SDRAM_SIZE 0x04000000
51 #define SM501_VRAM_SIZE 0x800000
53 #define BOOT_PARAMS_OFFSET 0x0010000
54 /* CONFIG_BOOT_LINK_OFFSET of Linux kernel */
55 #define LINUX_LOAD_OFFSET 0x0800000
56 #define INITRD_LOAD_OFFSET 0x1800000
58 #define PA_IRLMSK 0x00
59 #define PA_POWOFF 0x30
60 #define PA_VERREG 0x32
61 #define PA_OUTPORT 0x36
92 PCI_INTD
, CF_IDE
, CF_CD
, PCI_INTC
, SM501
, KEY
, RTC_A
, RTC_T
,
93 SDCARD
, PCI_INTA
, PCI_INTB
, EXT
, TP
,
97 static const struct { short irl
; uint16_t msk
; } irqtab
[NR_IRQS
] = {
98 [CF_IDE
] = { 1, 1<<9 },
99 [CF_CD
] = { 2, 1<<8 },
100 [PCI_INTA
] = { 9, 1<<14 },
101 [PCI_INTB
] = { 10, 1<<13 },
102 [PCI_INTC
] = { 3, 1<<12 },
103 [PCI_INTD
] = { 0, 1<<11 },
104 [SM501
] = { 4, 1<<10 },
106 [RTC_A
] = { 6, 1<<5 },
107 [RTC_T
] = { 7, 1<<4 },
108 [SDCARD
] = { 8, 1<<7 },
109 [EXT
] = { 11, 1<<0 },
110 [TP
] = { 12, 1<<15 },
113 static void update_irl(r2d_fpga_t
*fpga
)
116 for (i
= 0; i
< NR_IRQS
; i
++)
117 if (fpga
->irlmon
& fpga
->irlmsk
& irqtab
[i
].msk
)
118 if (irqtab
[i
].irl
< irl
)
120 qemu_set_irq(fpga
->irl
, irl
^ 15);
123 static void r2d_fpga_irq_set(void *opaque
, int n
, int level
)
125 r2d_fpga_t
*fpga
= opaque
;
127 fpga
->irlmon
|= irqtab
[n
].msk
;
129 fpga
->irlmon
&= ~irqtab
[n
].msk
;
133 static uint64_t r2d_fpga_read(void *opaque
, hwaddr addr
, unsigned int size
)
135 r2d_fpga_t
*s
= opaque
;
152 r2d_fpga_write(void *opaque
, hwaddr addr
, uint64_t value
, unsigned int size
)
154 r2d_fpga_t
*s
= opaque
;
166 qemu_system_shutdown_request(SHUTDOWN_CAUSE_GUEST_SHUTDOWN
);
175 static const MemoryRegionOps r2d_fpga_ops
= {
176 .read
= r2d_fpga_read
,
177 .write
= r2d_fpga_write
,
178 .impl
.min_access_size
= 2,
179 .impl
.max_access_size
= 2,
180 .endianness
= DEVICE_NATIVE_ENDIAN
,
183 static qemu_irq
*r2d_fpga_init(MemoryRegion
*sysmem
,
184 hwaddr base
, qemu_irq irl
)
188 s
= g_malloc0(sizeof(r2d_fpga_t
));
192 memory_region_init_io(&s
->iomem
, NULL
, &r2d_fpga_ops
, s
, "r2d-fpga", 0x40);
193 memory_region_add_subregion(sysmem
, base
, &s
->iomem
);
194 return qemu_allocate_irqs(r2d_fpga_irq_set
, s
, NR_IRQS
);
197 typedef struct ResetData
{
202 static void main_cpu_reset(void *opaque
)
204 ResetData
*s
= (ResetData
*)opaque
;
205 CPUSH4State
*env
= &s
->cpu
->env
;
207 cpu_reset(CPU(s
->cpu
));
211 static struct QEMU_PACKED
213 int mount_root_rdonly
;
222 char kernel_cmdline
[256];
225 static void r2d_init(MachineState
*machine
)
227 const char *kernel_filename
= machine
->kernel_filename
;
228 const char *kernel_cmdline
= machine
->kernel_cmdline
;
229 const char *initrd_filename
= machine
->initrd_filename
;
232 ResetData
*reset_info
;
233 struct SH7750State
*s
;
234 MemoryRegion
*sdram
= g_new(MemoryRegion
, 1);
239 SysBusDevice
*busdev
;
240 MemoryRegion
*address_space_mem
= get_system_memory();
243 cpu
= SUPERH_CPU(cpu_create(machine
->cpu_type
));
246 reset_info
= g_malloc0(sizeof(ResetData
));
247 reset_info
->cpu
= cpu
;
248 reset_info
->vector
= env
->pc
;
249 qemu_register_reset(main_cpu_reset
, reset_info
);
251 /* Allocate memory space */
252 memory_region_init_ram(sdram
, NULL
, "r2d.sdram", SDRAM_SIZE
, &error_fatal
);
253 memory_region_add_subregion(address_space_mem
, SDRAM_BASE
, sdram
);
254 /* Register peripherals */
255 s
= sh7750_init(cpu
, address_space_mem
);
256 irq
= r2d_fpga_init(address_space_mem
, 0x04000000, sh7750_irl(s
));
258 dev
= qdev_create(NULL
, "sh_pci");
259 busdev
= SYS_BUS_DEVICE(dev
);
260 qdev_init_nofail(dev
);
261 pci_bus
= PCI_BUS(qdev_get_child_bus(dev
, "pci"));
262 sysbus_mmio_map(busdev
, 0, P4ADDR(0x1e200000));
263 sysbus_mmio_map(busdev
, 1, A7ADDR(0x1e200000));
264 sysbus_connect_irq(busdev
, 0, irq
[PCI_INTA
]);
265 sysbus_connect_irq(busdev
, 1, irq
[PCI_INTB
]);
266 sysbus_connect_irq(busdev
, 2, irq
[PCI_INTC
]);
267 sysbus_connect_irq(busdev
, 3, irq
[PCI_INTD
]);
269 dev
= qdev_create(NULL
, "sysbus-sm501");
270 busdev
= SYS_BUS_DEVICE(dev
);
271 qdev_prop_set_uint32(dev
, "vram-size", SM501_VRAM_SIZE
);
272 qdev_prop_set_uint32(dev
, "base", 0x10000000);
273 qdev_prop_set_ptr(dev
, "chr-state", serial_hd(2));
274 qdev_init_nofail(dev
);
275 sysbus_mmio_map(busdev
, 0, 0x10000000);
276 sysbus_mmio_map(busdev
, 1, 0x13e00000);
277 sysbus_connect_irq(busdev
, 0, irq
[SM501
]);
279 /* onboard CF (True IDE mode, Master only). */
280 dinfo
= drive_get(IF_IDE
, 0, 0);
281 dev
= qdev_create(NULL
, "mmio-ide");
282 busdev
= SYS_BUS_DEVICE(dev
);
283 sysbus_connect_irq(busdev
, 0, irq
[CF_IDE
]);
284 qdev_prop_set_uint32(dev
, "shift", 1);
285 qdev_init_nofail(dev
);
286 sysbus_mmio_map(busdev
, 0, 0x14001000);
287 sysbus_mmio_map(busdev
, 1, 0x1400080c);
288 mmio_ide_init_drives(dev
, dinfo
, NULL
);
290 /* onboard flash memory */
291 dinfo
= drive_get(IF_PFLASH
, 0, 0);
292 pflash_cfi02_register(0x0, NULL
, "r2d.flash", FLASH_SIZE
,
293 dinfo
? blk_by_legacy_dinfo(dinfo
) : NULL
,
294 (16 * 1024), FLASH_SIZE
>> 16,
295 1, 4, 0x0000, 0x0000, 0x0000, 0x0000,
298 /* NIC: rtl8139 on-board, and 2 slots. */
299 for (i
= 0; i
< nb_nics
; i
++)
300 pci_nic_init_nofail(&nd_table
[i
], pci_bus
,
301 "rtl8139", i
==0 ? "2" : NULL
);
304 usb_create_simple(usb_bus_find(-1), "usb-kbd");
306 /* Todo: register on board registers */
307 memset(&boot_params
, 0, sizeof(boot_params
));
309 if (kernel_filename
) {
312 kernel_size
= load_image_targphys(kernel_filename
,
313 SDRAM_BASE
+ LINUX_LOAD_OFFSET
,
314 INITRD_LOAD_OFFSET
- LINUX_LOAD_OFFSET
);
315 if (kernel_size
< 0) {
316 fprintf(stderr
, "qemu: could not load kernel '%s'\n", kernel_filename
);
320 /* initialization which should be done by firmware */
321 address_space_stl(&address_space_memory
, SH7750_BCR1
, 1 << 3,
322 MEMTXATTRS_UNSPECIFIED
, NULL
); /* cs3 SDRAM */
323 address_space_stw(&address_space_memory
, SH7750_BCR2
, 3 << (3 * 2),
324 MEMTXATTRS_UNSPECIFIED
, NULL
); /* cs3 32bit */
325 reset_info
->vector
= (SDRAM_BASE
+ LINUX_LOAD_OFFSET
) | 0xa0000000; /* Start from P2 area */
328 if (initrd_filename
) {
331 initrd_size
= load_image_targphys(initrd_filename
,
332 SDRAM_BASE
+ INITRD_LOAD_OFFSET
,
333 SDRAM_SIZE
- INITRD_LOAD_OFFSET
);
335 if (initrd_size
< 0) {
336 fprintf(stderr
, "qemu: could not load initrd '%s'\n", initrd_filename
);
340 /* initialization which should be done by firmware */
341 boot_params
.loader_type
= tswap32(1);
342 boot_params
.initrd_start
= tswap32(INITRD_LOAD_OFFSET
);
343 boot_params
.initrd_size
= tswap32(initrd_size
);
346 if (kernel_cmdline
) {
347 /* I see no evidence that this .kernel_cmdline buffer requires
348 NUL-termination, so using strncpy should be ok. */
349 strncpy(boot_params
.kernel_cmdline
, kernel_cmdline
,
350 sizeof(boot_params
.kernel_cmdline
));
353 rom_add_blob_fixed("boot_params", &boot_params
, sizeof(boot_params
),
354 SDRAM_BASE
+ BOOT_PARAMS_OFFSET
);
357 static void r2d_machine_init(MachineClass
*mc
)
359 mc
->desc
= "r2d-plus board";
361 mc
->block_default_type
= IF_IDE
;
362 mc
->default_cpu_type
= TYPE_SH7751R_CPU
;
365 DEFINE_MACHINE("r2d", r2d_machine_init
)