2 * Motorola ColdFire MCF5206 SoC embedded peripheral emulation.
4 * Copyright (c) 2007 CodeSourcery.
6 * This code is licensed under the GPL
9 #include "qemu/osdep.h"
10 #include "qemu/error-report.h"
14 #include "hw/m68k/mcf.h"
15 #include "qemu/timer.h"
16 #include "hw/ptimer.h"
17 #include "sysemu/sysemu.h"
18 #include "hw/sysbus.h"
20 /* General purpose timer module. */
41 static void m5206_timer_update(m5206_timer_state
*s
)
43 if ((s
->tmr
& TMR_ORI
) != 0 && (s
->ter
& TER_REF
))
44 qemu_irq_raise(s
->irq
);
46 qemu_irq_lower(s
->irq
);
49 static void m5206_timer_reset(m5206_timer_state
*s
)
55 static void m5206_timer_recalibrate(m5206_timer_state
*s
)
60 ptimer_transaction_begin(s
->timer
);
61 ptimer_stop(s
->timer
);
63 if ((s
->tmr
& TMR_RST
) == 0) {
67 prescale
= (s
->tmr
>> 8) + 1;
68 mode
= (s
->tmr
>> 1) & 3;
72 if (mode
== 3 || mode
== 0) {
73 qemu_log_mask(LOG_UNIMP
, "m5206_timer: mode %d not implemented\n",
77 if ((s
->tmr
& TMR_FRR
) == 0) {
78 qemu_log_mask(LOG_UNIMP
,
79 "m5206_timer: free running mode not implemented\n");
83 /* Assume 66MHz system clock. */
84 ptimer_set_freq(s
->timer
, 66000000 / prescale
);
86 ptimer_set_limit(s
->timer
, s
->trr
, 0);
88 ptimer_run(s
->timer
, 0);
90 ptimer_transaction_commit(s
->timer
);
93 static void m5206_timer_trigger(void *opaque
)
95 m5206_timer_state
*s
= (m5206_timer_state
*)opaque
;
97 m5206_timer_update(s
);
100 static uint32_t m5206_timer_read(m5206_timer_state
*s
, uint32_t addr
)
110 return s
->trr
- ptimer_get_count(s
->timer
);
118 static void m5206_timer_write(m5206_timer_state
*s
, uint32_t addr
, uint32_t val
)
122 if ((s
->tmr
& TMR_RST
) != 0 && (val
& TMR_RST
) == 0) {
123 m5206_timer_reset(s
);
126 m5206_timer_recalibrate(s
);
130 m5206_timer_recalibrate(s
);
136 ptimer_transaction_begin(s
->timer
);
137 ptimer_set_count(s
->timer
, val
);
138 ptimer_transaction_commit(s
->timer
);
146 m5206_timer_update(s
);
149 static m5206_timer_state
*m5206_timer_init(qemu_irq irq
)
151 m5206_timer_state
*s
;
153 s
= g_new0(m5206_timer_state
, 1);
154 s
->timer
= ptimer_init(m5206_timer_trigger
, s
, PTIMER_POLICY_DEFAULT
);
156 m5206_timer_reset(s
);
160 /* System Integration Module. */
163 SysBusDevice parent_obj
;
167 m5206_timer_state
*timer
[2];
171 uint16_t imr
; /* 1 == interrupt is masked. */
176 /* Include the UART vector registers here. */
180 #define MCF5206_MBAR(obj) OBJECT_CHECK(m5206_mbar_state, (obj), TYPE_MCF5206_MBAR)
182 /* Interrupt controller. */
184 static int m5206_find_pending_irq(m5206_mbar_state
*s
)
193 active
= s
->ipr
& ~s
->imr
;
197 for (i
= 1; i
< 14; i
++) {
198 if (active
& (1 << i
)) {
199 if ((s
->icr
[i
] & 0x1f) > level
) {
200 level
= s
->icr
[i
] & 0x1f;
212 static void m5206_mbar_update(m5206_mbar_state
*s
)
218 irq
= m5206_find_pending_irq(s
);
222 level
= (tmp
>> 2) & 7;
238 /* Unknown vector. */
239 qemu_log_mask(LOG_UNIMP
, "%s: Unhandled vector for IRQ %d\n",
249 m68k_set_irq_level(s
->cpu
, level
, vector
);
252 static void m5206_mbar_set_irq(void *opaque
, int irq
, int level
)
254 m5206_mbar_state
*s
= (m5206_mbar_state
*)opaque
;
258 s
->ipr
&= ~(1 << irq
);
260 m5206_mbar_update(s
);
263 /* System Integration Module. */
265 static void m5206_mbar_reset(DeviceState
*dev
)
267 m5206_mbar_state
*s
= MCF5206_MBAR(dev
);
289 static uint64_t m5206_mbar_read(m5206_mbar_state
*s
,
290 uint16_t offset
, unsigned size
)
292 if (offset
>= 0x100 && offset
< 0x120) {
293 return m5206_timer_read(s
->timer
[0], offset
- 0x100);
294 } else if (offset
>= 0x120 && offset
< 0x140) {
295 return m5206_timer_read(s
->timer
[1], offset
- 0x120);
296 } else if (offset
>= 0x140 && offset
< 0x160) {
297 return mcf_uart_read(s
->uart
[0], offset
- 0x140, size
);
298 } else if (offset
>= 0x180 && offset
< 0x1a0) {
299 return mcf_uart_read(s
->uart
[1], offset
- 0x180, size
);
302 case 0x03: return s
->scr
;
303 case 0x14 ... 0x20: return s
->icr
[offset
- 0x13];
304 case 0x36: return s
->imr
;
305 case 0x3a: return s
->ipr
;
306 case 0x40: return s
->rsr
;
308 case 0x42: return s
->swivr
;
310 /* DRAM mask register. */
311 /* FIXME: currently hardcoded to 128Mb. */
314 while (mask
> ram_size
)
316 return mask
& 0x0ffe0000;
318 case 0x5c: return 1; /* DRAM bank 1 empty. */
319 case 0xcb: return s
->par
;
320 case 0x170: return s
->uivr
[0];
321 case 0x1b0: return s
->uivr
[1];
323 qemu_log_mask(LOG_GUEST_ERROR
, "%s: Bad MBAR offset 0x%"PRIx16
"\n",
328 static void m5206_mbar_write(m5206_mbar_state
*s
, uint16_t offset
,
329 uint64_t value
, unsigned size
)
331 if (offset
>= 0x100 && offset
< 0x120) {
332 m5206_timer_write(s
->timer
[0], offset
- 0x100, value
);
334 } else if (offset
>= 0x120 && offset
< 0x140) {
335 m5206_timer_write(s
->timer
[1], offset
- 0x120, value
);
337 } else if (offset
>= 0x140 && offset
< 0x160) {
338 mcf_uart_write(s
->uart
[0], offset
- 0x140, value
, size
);
340 } else if (offset
>= 0x180 && offset
< 0x1a0) {
341 mcf_uart_write(s
->uart
[1], offset
- 0x180, value
, size
);
349 s
->icr
[offset
- 0x13] = value
;
350 m5206_mbar_update(s
);
354 m5206_mbar_update(s
);
360 /* TODO: implement watchdog. */
371 case 0x178: case 0x17c: case 0x1c8: case 0x1bc:
372 /* Not implemented: UART Output port bits. */
378 qemu_log_mask(LOG_GUEST_ERROR
, "%s: Bad MBAR offset 0x%"PRIx16
"\n",
384 /* Internal peripherals use a variety of register widths.
385 This lookup table allows a single routine to handle all of them. */
386 static const uint8_t m5206_mbar_width
[] =
388 /* 000-040 */ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 2, 2, 2, 2,
389 /* 040-080 */ 1, 2, 2, 2, 4, 1, 2, 4, 1, 2, 4, 2, 2, 4, 2, 2,
390 /* 080-0c0 */ 4, 2, 2, 4, 2, 2, 4, 2, 2, 4, 2, 2, 4, 2, 2, 4,
391 /* 0c0-100 */ 2, 2, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
392 /* 100-140 */ 2, 2, 2, 2, 1, 0, 0, 0, 2, 2, 2, 2, 1, 0, 0, 0,
393 /* 140-180 */ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
394 /* 180-1c0 */ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
395 /* 1c0-200 */ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
398 static uint32_t m5206_mbar_readw(void *opaque
, hwaddr offset
);
399 static uint32_t m5206_mbar_readl(void *opaque
, hwaddr offset
);
401 static uint32_t m5206_mbar_readb(void *opaque
, hwaddr offset
)
403 m5206_mbar_state
*s
= (m5206_mbar_state
*)opaque
;
405 if (offset
>= 0x200) {
406 qemu_log_mask(LOG_GUEST_ERROR
, "Bad MBAR read offset 0x%" HWADDR_PRIX
,
410 if (m5206_mbar_width
[offset
>> 2] > 1) {
412 val
= m5206_mbar_readw(opaque
, offset
& ~1);
413 if ((offset
& 1) == 0) {
418 return m5206_mbar_read(s
, offset
, 1);
421 static uint32_t m5206_mbar_readw(void *opaque
, hwaddr offset
)
423 m5206_mbar_state
*s
= (m5206_mbar_state
*)opaque
;
426 if (offset
>= 0x200) {
427 qemu_log_mask(LOG_GUEST_ERROR
, "Bad MBAR read offset 0x%" HWADDR_PRIX
,
431 width
= m5206_mbar_width
[offset
>> 2];
434 val
= m5206_mbar_readl(opaque
, offset
& ~3);
435 if ((offset
& 3) == 0)
438 } else if (width
< 2) {
440 val
= m5206_mbar_readb(opaque
, offset
) << 8;
441 val
|= m5206_mbar_readb(opaque
, offset
+ 1);
444 return m5206_mbar_read(s
, offset
, 2);
447 static uint32_t m5206_mbar_readl(void *opaque
, hwaddr offset
)
449 m5206_mbar_state
*s
= (m5206_mbar_state
*)opaque
;
452 if (offset
>= 0x200) {
453 qemu_log_mask(LOG_GUEST_ERROR
, "Bad MBAR read offset 0x%" HWADDR_PRIX
,
457 width
= m5206_mbar_width
[offset
>> 2];
460 val
= m5206_mbar_readw(opaque
, offset
) << 16;
461 val
|= m5206_mbar_readw(opaque
, offset
+ 2);
464 return m5206_mbar_read(s
, offset
, 4);
467 static void m5206_mbar_writew(void *opaque
, hwaddr offset
,
469 static void m5206_mbar_writel(void *opaque
, hwaddr offset
,
472 static void m5206_mbar_writeb(void *opaque
, hwaddr offset
,
475 m5206_mbar_state
*s
= (m5206_mbar_state
*)opaque
;
478 if (offset
>= 0x200) {
479 qemu_log_mask(LOG_GUEST_ERROR
, "Bad MBAR write offset 0x%" HWADDR_PRIX
,
483 width
= m5206_mbar_width
[offset
>> 2];
486 tmp
= m5206_mbar_readw(opaque
, offset
& ~1);
488 tmp
= (tmp
& 0xff00) | value
;
490 tmp
= (tmp
& 0x00ff) | (value
<< 8);
492 m5206_mbar_writew(opaque
, offset
& ~1, tmp
);
495 m5206_mbar_write(s
, offset
, value
, 1);
498 static void m5206_mbar_writew(void *opaque
, hwaddr offset
,
501 m5206_mbar_state
*s
= (m5206_mbar_state
*)opaque
;
504 if (offset
>= 0x200) {
505 qemu_log_mask(LOG_GUEST_ERROR
, "Bad MBAR write offset 0x%" HWADDR_PRIX
,
509 width
= m5206_mbar_width
[offset
>> 2];
512 tmp
= m5206_mbar_readl(opaque
, offset
& ~3);
514 tmp
= (tmp
& 0xffff0000) | value
;
516 tmp
= (tmp
& 0x0000ffff) | (value
<< 16);
518 m5206_mbar_writel(opaque
, offset
& ~3, tmp
);
520 } else if (width
< 2) {
521 m5206_mbar_writeb(opaque
, offset
, value
>> 8);
522 m5206_mbar_writeb(opaque
, offset
+ 1, value
& 0xff);
525 m5206_mbar_write(s
, offset
, value
, 2);
528 static void m5206_mbar_writel(void *opaque
, hwaddr offset
,
531 m5206_mbar_state
*s
= (m5206_mbar_state
*)opaque
;
534 if (offset
>= 0x200) {
535 qemu_log_mask(LOG_GUEST_ERROR
, "Bad MBAR write offset 0x%" HWADDR_PRIX
,
539 width
= m5206_mbar_width
[offset
>> 2];
541 m5206_mbar_writew(opaque
, offset
, value
>> 16);
542 m5206_mbar_writew(opaque
, offset
+ 2, value
& 0xffff);
545 m5206_mbar_write(s
, offset
, value
, 4);
548 static uint64_t m5206_mbar_readfn(void *opaque
, hwaddr addr
, unsigned size
)
552 return m5206_mbar_readb(opaque
, addr
);
554 return m5206_mbar_readw(opaque
, addr
);
556 return m5206_mbar_readl(opaque
, addr
);
558 g_assert_not_reached();
562 static void m5206_mbar_writefn(void *opaque
, hwaddr addr
,
563 uint64_t value
, unsigned size
)
567 m5206_mbar_writeb(opaque
, addr
, value
);
570 m5206_mbar_writew(opaque
, addr
, value
);
573 m5206_mbar_writel(opaque
, addr
, value
);
576 g_assert_not_reached();
580 static const MemoryRegionOps m5206_mbar_ops
= {
581 .read
= m5206_mbar_readfn
,
582 .write
= m5206_mbar_writefn
,
583 .valid
.min_access_size
= 1,
584 .valid
.max_access_size
= 4,
585 .endianness
= DEVICE_NATIVE_ENDIAN
,
588 static void mcf5206_mbar_realize(DeviceState
*dev
, Error
**errp
)
590 m5206_mbar_state
*s
= MCF5206_MBAR(dev
);
593 memory_region_init_io(&s
->iomem
, NULL
, &m5206_mbar_ops
, s
,
595 sysbus_init_mmio(SYS_BUS_DEVICE(dev
), &s
->iomem
);
597 pic
= qemu_allocate_irqs(m5206_mbar_set_irq
, s
, 14);
598 s
->timer
[0] = m5206_timer_init(pic
[9]);
599 s
->timer
[1] = m5206_timer_init(pic
[10]);
600 s
->uart
[0] = mcf_uart_init(pic
[12], serial_hd(0));
601 s
->uart
[1] = mcf_uart_init(pic
[13], serial_hd(1));
602 s
->cpu
= M68K_CPU(qemu_get_cpu(0));
605 static void mcf5206_mbar_class_init(ObjectClass
*oc
, void *data
)
607 DeviceClass
*dc
= DEVICE_CLASS(oc
);
609 set_bit(DEVICE_CATEGORY_MISC
, dc
->categories
);
610 dc
->desc
= "MCF5206 system integration module";
611 dc
->realize
= mcf5206_mbar_realize
;
612 dc
->reset
= m5206_mbar_reset
;
615 static const TypeInfo mcf5206_mbar_info
= {
616 .name
= TYPE_MCF5206_MBAR
,
617 .parent
= TYPE_SYS_BUS_DEVICE
,
618 .instance_size
= sizeof(m5206_mbar_state
),
619 .class_init
= mcf5206_mbar_class_init
,
622 static void mcf5206_mbar_register_types(void)
624 type_register_static(&mcf5206_mbar_info
);
627 type_init(mcf5206_mbar_register_types
)