hw/arm/integratorcp.c

   1 /*
   2  * ARM Integrator CP System emulation.
   3  *
   4  * Copyright (c) 2005-2007 CodeSourcery.
   5  * Written by Paul Brook
   6  *
   7  * This code is licensed under the GPL
   8  */
   9
  10 #include "qemu/osdep.h"
  11 #include "qapi/error.h"
  12 #include "cpu.h"
  13 #include "hw/sysbus.h"
  14 #include "migration/vmstate.h"
  15 #include "hw/boards.h"
  16 #include "hw/arm/boot.h"
  17 #include "hw/misc/arm_integrator_debug.h"
  18 #include "hw/net/smc91c111.h"
  19 #include "net/net.h"
  20 #include "exec/address-spaces.h"
  21 #include "sysemu/runstate.h"
  22 #include "sysemu/sysemu.h"
  23 #include "qemu/log.h"
  24 #include "qemu/error-report.h"
  25 #include "hw/char/pl011.h"
  26 #include "hw/hw.h"
  27 #include "hw/irq.h"
  28 #include "hw/sd/sd.h"
  29
  30 #define TYPE_INTEGRATOR_CM "integrator_core"
  31 #define INTEGRATOR_CM(obj) \
  32     OBJECT_CHECK(IntegratorCMState, (obj), TYPE_INTEGRATOR_CM)
  33
  34 typedef struct IntegratorCMState {
  35     /*< private >*/
  36     SysBusDevice parent_obj;
  37     /*< public >*/
  38
  39     MemoryRegion iomem;
  40     uint32_t memsz;
  41     MemoryRegion flash;
  42     uint32_t cm_osc;
  43     uint32_t cm_ctrl;
  44     uint32_t cm_lock;
  45     uint32_t cm_auxosc;
  46     uint32_t cm_sdram;
  47     uint32_t cm_init;
  48     uint32_t cm_flags;
  49     uint32_t cm_nvflags;
  50     uint32_t cm_refcnt_offset;
  51     uint32_t int_level;
  52     uint32_t irq_enabled;
  53     uint32_t fiq_enabled;
  54 } IntegratorCMState;
  55
  56 static uint8_t integrator_spd[128] = {
  57    128, 8, 4, 11, 9, 1, 64, 0,  2, 0xa0, 0xa0, 0, 0, 8, 0, 1,
  58    0xe, 4, 0x1c, 1, 2, 0x20, 0xc0, 0, 0, 0, 0, 0x30, 0x28, 0x30, 0x28, 0x40
  59 };
  60
  61 static const VMStateDescription vmstate_integratorcm = {
  62     .name = "integratorcm",
  63     .version_id = 1,
  64     .minimum_version_id = 1,
  65     .fields      = (VMStateField[]) {
  66         VMSTATE_UINT32(cm_osc, IntegratorCMState),
  67         VMSTATE_UINT32(cm_ctrl, IntegratorCMState),
  68         VMSTATE_UINT32(cm_lock, IntegratorCMState),
  69         VMSTATE_UINT32(cm_auxosc, IntegratorCMState),
  70         VMSTATE_UINT32(cm_sdram, IntegratorCMState),
  71         VMSTATE_UINT32(cm_init, IntegratorCMState),
  72         VMSTATE_UINT32(cm_flags, IntegratorCMState),
  73         VMSTATE_UINT32(cm_nvflags, IntegratorCMState),
  74         VMSTATE_UINT32(int_level, IntegratorCMState),
  75         VMSTATE_UINT32(irq_enabled, IntegratorCMState),
  76         VMSTATE_UINT32(fiq_enabled, IntegratorCMState),
  77         VMSTATE_END_OF_LIST()
  78     }
  79 };
  80
  81 static uint64_t integratorcm_read(void *opaque, hwaddr offset,
  82                                   unsigned size)
  83 {
  84     IntegratorCMState *s = opaque;
  85     if (offset >= 0x100 && offset < 0x200) {
  86         /* CM_SPD */
  87         if (offset >= 0x180)
  88             return 0;
  89         return integrator_spd[offset >> 2];
  90     }
  91     switch (offset >> 2) {
  92     case 0: /* CM_ID */
  93         return 0x411a3001;
  94     case 1: /* CM_PROC */
  95         return 0;
  96     case 2: /* CM_OSC */
  97         return s->cm_osc;
  98     case 3: /* CM_CTRL */
  99         return s->cm_ctrl;
 100     case 4: /* CM_STAT */
 101         return 0x00100000;
 102     case 5: /* CM_LOCK */
 103         if (s->cm_lock == 0xa05f) {
 104             return 0x1a05f;
 105         } else {
 106             return s->cm_lock;
 107         }
 108     case 6: /* CM_LMBUSCNT */
 109         /* ??? High frequency timer.  */
 110         hw_error("integratorcm_read: CM_LMBUSCNT");
 111     case 7: /* CM_AUXOSC */
 112         return s->cm_auxosc;
 113     case 8: /* CM_SDRAM */
 114         return s->cm_sdram;
 115     case 9: /* CM_INIT */
 116         return s->cm_init;
 117     case 10: /* CM_REFCNT */
 118         /* This register, CM_REFCNT, provides a 32-bit count value.
 119          * The count increments at the fixed reference clock frequency of 24MHz
 120          * and can be used as a real-time counter.
 121          */
 122         return (uint32_t)muldiv64(qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL), 24,
 123                                   1000) - s->cm_refcnt_offset;
 124     case 12: /* CM_FLAGS */
 125         return s->cm_flags;
 126     case 14: /* CM_NVFLAGS */
 127         return s->cm_nvflags;
 128     case 16: /* CM_IRQ_STAT */
 129         return s->int_level & s->irq_enabled;
 130     case 17: /* CM_IRQ_RSTAT */
 131         return s->int_level;
 132     case 18: /* CM_IRQ_ENSET */
 133         return s->irq_enabled;
 134     case 20: /* CM_SOFT_INTSET */
 135         return s->int_level & 1;
 136     case 24: /* CM_FIQ_STAT */
 137         return s->int_level & s->fiq_enabled;
 138     case 25: /* CM_FIQ_RSTAT */
 139         return s->int_level;
 140     case 26: /* CM_FIQ_ENSET */
 141         return s->fiq_enabled;
 142     case 32: /* CM_VOLTAGE_CTL0 */
 143     case 33: /* CM_VOLTAGE_CTL1 */
 144     case 34: /* CM_VOLTAGE_CTL2 */
 145     case 35: /* CM_VOLTAGE_CTL3 */
 146         /* ??? Voltage control unimplemented.  */
 147         return 0;
 148     default:
 149         qemu_log_mask(LOG_UNIMP,
 150                       "%s: Unimplemented offset 0x%" HWADDR_PRIX "\n",
 151                       __func__, offset);
 152         return 0;
 153     }
 154 }
 155
 156 static void integratorcm_do_remap(IntegratorCMState *s)
 157 {
 158     /* Sync memory region state with CM_CTRL REMAP bit:
 159      * bit 0 => flash at address 0; bit 1 => RAM
 160      */
 161     memory_region_set_enabled(&s->flash, !(s->cm_ctrl & 4));
 162 }
 163
 164 static void integratorcm_set_ctrl(IntegratorCMState *s, uint32_t value)
 165 {
 166     if (value & 8) {
 167         qemu_system_reset_request(SHUTDOWN_CAUSE_GUEST_RESET);
 168     }
 169     if ((s->cm_ctrl ^ value) & 1) {
 170         /* (value & 1) != 0 means the green "MISC LED" is lit.
 171          * We don't have any nice place to display LEDs. printf is a bad
 172          * idea because Linux uses the LED as a heartbeat and the output
 173          * will swamp anything else on the terminal.
 174          */
 175     }
 176     /* Note that the RESET bit [3] always reads as zero */
 177     s->cm_ctrl = (s->cm_ctrl & ~5) | (value & 5);
 178     integratorcm_do_remap(s);
 179 }
 180
 181 static void integratorcm_update(IntegratorCMState *s)
 182 {
 183     /* ??? The CPU irq/fiq is raised when either the core module or base PIC
 184        are active.  */
 185     if (s->int_level & (s->irq_enabled | s->fiq_enabled))
 186         hw_error("Core module interrupt\n");
 187 }
 188
 189 static void integratorcm_write(void *opaque, hwaddr offset,
 190                                uint64_t value, unsigned size)
 191 {
 192     IntegratorCMState *s = opaque;
 193     switch (offset >> 2) {
 194     case 2: /* CM_OSC */
 195         if (s->cm_lock == 0xa05f)
 196             s->cm_osc = value;
 197         break;
 198     case 3: /* CM_CTRL */
 199         integratorcm_set_ctrl(s, value);
 200         break;
 201     case 5: /* CM_LOCK */
 202         s->cm_lock = value & 0xffff;
 203         break;
 204     case 7: /* CM_AUXOSC */
 205         if (s->cm_lock == 0xa05f)
 206             s->cm_auxosc = value;
 207         break;
 208     case 8: /* CM_SDRAM */
 209         s->cm_sdram = value;
 210         break;
 211     case 9: /* CM_INIT */
 212         /* ??? This can change the memory bus frequency.  */
 213         s->cm_init = value;
 214         break;
 215     case 12: /* CM_FLAGSS */
 216         s->cm_flags |= value;
 217         break;
 218     case 13: /* CM_FLAGSC */
 219         s->cm_flags &= ~value;
 220         break;
 221     case 14: /* CM_NVFLAGSS */
 222         s->cm_nvflags |= value;
 223         break;
 224     case 15: /* CM_NVFLAGSS */
 225         s->cm_nvflags &= ~value;
 226         break;
 227     case 18: /* CM_IRQ_ENSET */
 228         s->irq_enabled |= value;
 229         integratorcm_update(s);
 230         break;
 231     case 19: /* CM_IRQ_ENCLR */
 232         s->irq_enabled &= ~value;
 233         integratorcm_update(s);
 234         break;
 235     case 20: /* CM_SOFT_INTSET */
 236         s->int_level |= (value & 1);
 237         integratorcm_update(s);
 238         break;
 239     case 21: /* CM_SOFT_INTCLR */
 240         s->int_level &= ~(value & 1);
 241         integratorcm_update(s);
 242         break;
 243     case 26: /* CM_FIQ_ENSET */
 244         s->fiq_enabled |= value;
 245         integratorcm_update(s);
 246         break;
 247     case 27: /* CM_FIQ_ENCLR */
 248         s->fiq_enabled &= ~value;
 249         integratorcm_update(s);
 250         break;
 251     case 32: /* CM_VOLTAGE_CTL0 */
 252     case 33: /* CM_VOLTAGE_CTL1 */
 253     case 34: /* CM_VOLTAGE_CTL2 */
 254     case 35: /* CM_VOLTAGE_CTL3 */
 255         /* ??? Voltage control unimplemented.  */
 256         break;
 257     default:
 258         qemu_log_mask(LOG_UNIMP,
 259                       "%s: Unimplemented offset 0x%" HWADDR_PRIX "\n",
 260                       __func__, offset);
 261         break;
 262     }
 263 }
 264
 265 /* Integrator/CM control registers.  */
 266
 267 static const MemoryRegionOps integratorcm_ops = {
 268     .read = integratorcm_read,
 269     .write = integratorcm_write,
 270     .endianness = DEVICE_NATIVE_ENDIAN,
 271 };
 272
 273 static void integratorcm_init(Object *obj)
 274 {
 275     IntegratorCMState *s = INTEGRATOR_CM(obj);
 276
 277     s->cm_osc = 0x01000048;
 278     /* ??? What should the high bits of this value be?  */
 279     s->cm_auxosc = 0x0007feff;
 280     s->cm_sdram = 0x00011122;
 281     memcpy(integrator_spd + 73, "QEMU-MEMORY", 11);
 282     s->cm_init = 0x00000112;
 283     s->cm_refcnt_offset = muldiv64(qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL), 24,
 284                                    1000);
 285
 286     /* ??? Save/restore.  */
 287 }
 288
 289 static void integratorcm_realize(DeviceState *d, Error **errp)
 290 {
 291     IntegratorCMState *s = INTEGRATOR_CM(d);
 292     SysBusDevice *dev = SYS_BUS_DEVICE(d);
 293     Error *local_err = NULL;
 294
 295     memory_region_init_ram(&s->flash, OBJECT(d), "integrator.flash", 0x100000,
 296                            &local_err);
 297     if (local_err) {
 298         error_propagate(errp, local_err);
 299         return;
 300     }
 301
 302     memory_region_init_io(&s->iomem, OBJECT(d), &integratorcm_ops, s,
 303                           "integratorcm", 0x00800000);
 304     sysbus_init_mmio(dev, &s->iomem);
 305
 306     integratorcm_do_remap(s);
 307
 308     if (s->memsz >= 256) {
 309         integrator_spd[31] = 64;
 310         s->cm_sdram |= 0x10;
 311     } else if (s->memsz >= 128) {
 312         integrator_spd[31] = 32;
 313         s->cm_sdram |= 0x0c;
 314     } else if (s->memsz >= 64) {
 315         integrator_spd[31] = 16;
 316         s->cm_sdram |= 0x08;
 317     } else if (s->memsz >= 32) {
 318         integrator_spd[31] = 4;
 319         s->cm_sdram |= 0x04;
 320     } else {
 321         integrator_spd[31] = 2;
 322     }
 323 }
 324
 325 /* Integrator/CP hardware emulation.  */
 326 /* Primary interrupt controller.  */
 327
 328 #define TYPE_INTEGRATOR_PIC "integrator_pic"
 329 #define INTEGRATOR_PIC(obj) \
 330    OBJECT_CHECK(icp_pic_state, (obj), TYPE_INTEGRATOR_PIC)
 331
 332 typedef struct icp_pic_state {
 333     /*< private >*/
 334     SysBusDevice parent_obj;
 335     /*< public >*/
 336
 337     MemoryRegion iomem;
 338     uint32_t level;
 339     uint32_t irq_enabled;
 340     uint32_t fiq_enabled;
 341     qemu_irq parent_irq;
 342     qemu_irq parent_fiq;
 343 } icp_pic_state;
 344
 345 static const VMStateDescription vmstate_icp_pic = {
 346     .name = "icp_pic",
 347     .version_id = 1,
 348     .minimum_version_id = 1,
 349     .fields      = (VMStateField[]) {
 350         VMSTATE_UINT32(level, icp_pic_state),
 351         VMSTATE_UINT32(irq_enabled, icp_pic_state),
 352         VMSTATE_UINT32(fiq_enabled, icp_pic_state),
 353         VMSTATE_END_OF_LIST()
 354     }
 355 };
 356
 357 static void icp_pic_update(icp_pic_state *s)
 358 {
 359     uint32_t flags;
 360
 361     flags = (s->level & s->irq_enabled);
 362     qemu_set_irq(s->parent_irq, flags != 0);
 363     flags = (s->level & s->fiq_enabled);
 364     qemu_set_irq(s->parent_fiq, flags != 0);
 365 }
 366
 367 static void icp_pic_set_irq(void *opaque, int irq, int level)
 368 {
 369     icp_pic_state *s = (icp_pic_state *)opaque;
 370     if (level)
 371         s->level |= 1 << irq;
 372     else
 373         s->level &= ~(1 << irq);
 374     icp_pic_update(s);
 375 }
 376
 377 static uint64_t icp_pic_read(void *opaque, hwaddr offset,
 378                              unsigned size)
 379 {
 380     icp_pic_state *s = (icp_pic_state *)opaque;
 381
 382     switch (offset >> 2) {
 383     case 0: /* IRQ_STATUS */
 384         return s->level & s->irq_enabled;
 385     case 1: /* IRQ_RAWSTAT */
 386         return s->level;
 387     case 2: /* IRQ_ENABLESET */
 388         return s->irq_enabled;
 389     case 4: /* INT_SOFTSET */
 390         return s->level & 1;
 391     case 8: /* FRQ_STATUS */
 392         return s->level & s->fiq_enabled;
 393     case 9: /* FRQ_RAWSTAT */
 394         return s->level;
 395     case 10: /* FRQ_ENABLESET */
 396         return s->fiq_enabled;
 397     case 3: /* IRQ_ENABLECLR */
 398     case 5: /* INT_SOFTCLR */
 399     case 11: /* FRQ_ENABLECLR */
 400     default:
 401         qemu_log_mask(LOG_GUEST_ERROR, "%s: Bad offset 0x%" HWADDR_PRIX "\n",
 402                       __func__, offset);
 403         return 0;
 404     }
 405 }
 406
 407 static void icp_pic_write(void *opaque, hwaddr offset,
 408                           uint64_t value, unsigned size)
 409 {
 410     icp_pic_state *s = (icp_pic_state *)opaque;
 411
 412     switch (offset >> 2) {
 413     case 2: /* IRQ_ENABLESET */
 414         s->irq_enabled |= value;
 415         break;
 416     case 3: /* IRQ_ENABLECLR */
 417         s->irq_enabled &= ~value;
 418         break;
 419     case 4: /* INT_SOFTSET */
 420         if (value & 1)
 421             icp_pic_set_irq(s, 0, 1);
 422         break;
 423     case 5: /* INT_SOFTCLR */
 424         if (value & 1)
 425             icp_pic_set_irq(s, 0, 0);
 426         break;
 427     case 10: /* FRQ_ENABLESET */
 428         s->fiq_enabled |= value;
 429         break;
 430     case 11: /* FRQ_ENABLECLR */
 431         s->fiq_enabled &= ~value;
 432         break;
 433     case 0: /* IRQ_STATUS */
 434     case 1: /* IRQ_RAWSTAT */
 435     case 8: /* FRQ_STATUS */
 436     case 9: /* FRQ_RAWSTAT */
 437     default:
 438         qemu_log_mask(LOG_GUEST_ERROR, "%s: Bad offset 0x%" HWADDR_PRIX "\n",
 439                       __func__, offset);
 440         return;
 441     }
 442     icp_pic_update(s);
 443 }
 444
 445 static const MemoryRegionOps icp_pic_ops = {
 446     .read = icp_pic_read,
 447     .write = icp_pic_write,
 448     .endianness = DEVICE_NATIVE_ENDIAN,
 449 };
 450
 451 static void icp_pic_init(Object *obj)
 452 {
 453     DeviceState *dev = DEVICE(obj);
 454     icp_pic_state *s = INTEGRATOR_PIC(obj);
 455     SysBusDevice *sbd = SYS_BUS_DEVICE(obj);
 456
 457     qdev_init_gpio_in(dev, icp_pic_set_irq, 32);
 458     sysbus_init_irq(sbd, &s->parent_irq);
 459     sysbus_init_irq(sbd, &s->parent_fiq);
 460     memory_region_init_io(&s->iomem, obj, &icp_pic_ops, s,
 461                           "icp-pic", 0x00800000);
 462     sysbus_init_mmio(sbd, &s->iomem);
 463 }
 464
 465 /* CP control registers.  */
 466
 467 #define TYPE_ICP_CONTROL_REGS "icp-ctrl-regs"
 468 #define ICP_CONTROL_REGS(obj) \
 469     OBJECT_CHECK(ICPCtrlRegsState, (obj), TYPE_ICP_CONTROL_REGS)
 470
 471 typedef struct ICPCtrlRegsState {
 472     /*< private >*/
 473     SysBusDevice parent_obj;
 474     /*< public >*/
 475
 476     MemoryRegion iomem;
 477
 478     qemu_irq mmc_irq;
 479     uint32_t intreg_state;
 480 } ICPCtrlRegsState;
 481
 482 #define ICP_GPIO_MMC_WPROT      "mmc-wprot"
 483 #define ICP_GPIO_MMC_CARDIN     "mmc-cardin"
 484
 485 #define ICP_INTREG_WPROT        (1 << 0)
 486 #define ICP_INTREG_CARDIN       (1 << 3)
 487
 488 static const VMStateDescription vmstate_icp_control = {
 489     .name = "icp_control",
 490     .version_id = 1,
 491     .minimum_version_id = 1,
 492     .fields      = (VMStateField[]) {
 493         VMSTATE_UINT32(intreg_state, ICPCtrlRegsState),
 494         VMSTATE_END_OF_LIST()
 495     }
 496 };
 497
 498 static uint64_t icp_control_read(void *opaque, hwaddr offset,
 499                                  unsigned size)
 500 {
 501     ICPCtrlRegsState *s = opaque;
 502
 503     switch (offset >> 2) {
 504     case 0: /* CP_IDFIELD */
 505         return 0x41034003;
 506     case 1: /* CP_FLASHPROG */
 507         return 0;
 508     case 2: /* CP_INTREG */
 509         return s->intreg_state;
 510     case 3: /* CP_DECODE */
 511         return 0x11;
 512     default:
 513         qemu_log_mask(LOG_GUEST_ERROR, "%s: Bad offset 0x%" HWADDR_PRIX "\n",
 514                       __func__, offset);
 515         return 0;
 516     }
 517 }
 518
 519 static void icp_control_write(void *opaque, hwaddr offset,
 520                           uint64_t value, unsigned size)
 521 {
 522     ICPCtrlRegsState *s = opaque;
 523
 524     switch (offset >> 2) {
 525     case 2: /* CP_INTREG */
 526         s->intreg_state &= ~(value & ICP_INTREG_CARDIN);
 527         qemu_set_irq(s->mmc_irq, !!(s->intreg_state & ICP_INTREG_CARDIN));
 528         break;
 529     case 1: /* CP_FLASHPROG */
 530     case 3: /* CP_DECODE */
 531         /* Nothing interesting implemented yet.  */
 532         break;
 533     default:
 534         qemu_log_mask(LOG_GUEST_ERROR, "%s: Bad offset 0x%" HWADDR_PRIX "\n",
 535                       __func__, offset);
 536     }
 537 }
 538
 539 static const MemoryRegionOps icp_control_ops = {
 540     .read = icp_control_read,
 541     .write = icp_control_write,
 542     .endianness = DEVICE_NATIVE_ENDIAN,
 543 };
 544
 545 static void icp_control_mmc_wprot(void *opaque, int line, int level)
 546 {
 547     ICPCtrlRegsState *s = opaque;
 548
 549     s->intreg_state &= ~ICP_INTREG_WPROT;
 550     if (level) {
 551         s->intreg_state |= ICP_INTREG_WPROT;
 552     }
 553 }
 554
 555 static void icp_control_mmc_cardin(void *opaque, int line, int level)
 556 {
 557     ICPCtrlRegsState *s = opaque;
 558
 559     /* line is released by writing to CP_INTREG */
 560     if (level) {
 561         s->intreg_state |= ICP_INTREG_CARDIN;
 562         qemu_set_irq(s->mmc_irq, 1);
 563     }
 564 }
 565
 566 static void icp_control_init(Object *obj)
 567 {
 568     SysBusDevice *sbd = SYS_BUS_DEVICE(obj);
 569     ICPCtrlRegsState *s = ICP_CONTROL_REGS(obj);
 570     DeviceState *dev = DEVICE(obj);
 571
 572     memory_region_init_io(&s->iomem, OBJECT(s), &icp_control_ops, s,
 573                           "icp_ctrl_regs", 0x00800000);
 574     sysbus_init_mmio(sbd, &s->iomem);
 575
 576     qdev_init_gpio_in_named(dev, icp_control_mmc_wprot, ICP_GPIO_MMC_WPROT, 1);
 577     qdev_init_gpio_in_named(dev, icp_control_mmc_cardin,
 578                             ICP_GPIO_MMC_CARDIN, 1);
 579     sysbus_init_irq(sbd, &s->mmc_irq);
 580 }
 581
 582
 583 /* Board init.  */
 584
 585 static struct arm_boot_info integrator_binfo = {
 586     .loader_start = 0x0,
 587     .board_id = 0x113,
 588 };
 589
 590 static void integratorcp_init(MachineState *machine)
 591 {
 592     ram_addr_t ram_size = machine->ram_size;
 593     Object *cpuobj;
 594     ARMCPU *cpu;
 595     MemoryRegion *address_space_mem = get_system_memory();
 596     MemoryRegion *ram_alias = g_new(MemoryRegion, 1);
 597     qemu_irq pic[32];
 598     DeviceState *dev, *sic, *icp;
 599     DriveInfo *dinfo;
 600     int i;
 601
 602     cpuobj = object_new(machine->cpu_type);
 603
 604     /* By default ARM1176 CPUs have EL3 enabled.  This board does not
 605      * currently support EL3 so the CPU EL3 property is disabled before
 606      * realization.
 607      */
 608     if (object_property_find(cpuobj, "has_el3", NULL)) {
 609         object_property_set_bool(cpuobj, "has_el3", false, &error_fatal);
 610     }
 611
 612     qdev_realize(DEVICE(cpuobj), NULL, &error_fatal);
 613
 614     cpu = ARM_CPU(cpuobj);
 615
 616     /* ??? On a real system the first 1Mb is mapped as SSRAM or boot flash.  */
 617     /* ??? RAM should repeat to fill physical memory space.  */
 618     /* SDRAM at address zero*/
 619     memory_region_add_subregion(address_space_mem, 0, machine->ram);
 620     /* And again at address 0x80000000 */
 621     memory_region_init_alias(ram_alias, NULL, "ram.alias", machine->ram,
 622                              0, ram_size);
 623     memory_region_add_subregion(address_space_mem, 0x80000000, ram_alias);
 624
 625     dev = qdev_new(TYPE_INTEGRATOR_CM);
 626     qdev_prop_set_uint32(dev, "memsz", ram_size >> 20);
 627     sysbus_realize_and_unref(SYS_BUS_DEVICE(dev), &error_fatal);
 628     sysbus_mmio_map((SysBusDevice *)dev, 0, 0x10000000);
 629
 630     dev = sysbus_create_varargs(TYPE_INTEGRATOR_PIC, 0x14000000,
 631                                 qdev_get_gpio_in(DEVICE(cpu), ARM_CPU_IRQ),
 632                                 qdev_get_gpio_in(DEVICE(cpu), ARM_CPU_FIQ),
 633                                 NULL);
 634     for (i = 0; i < 32; i++) {
 635         pic[i] = qdev_get_gpio_in(dev, i);
 636     }
 637     sic = sysbus_create_simple(TYPE_INTEGRATOR_PIC, 0xca000000, pic[26]);
 638     sysbus_create_varargs("integrator_pit", 0x13000000,
 639                           pic[5], pic[6], pic[7], NULL);
 640     sysbus_create_simple("pl031", 0x15000000, pic[8]);
 641     pl011_create(0x16000000, pic[1], serial_hd(0));
 642     pl011_create(0x17000000, pic[2], serial_hd(1));
 643     icp = sysbus_create_simple(TYPE_ICP_CONTROL_REGS, 0xcb000000,
 644                                qdev_get_gpio_in(sic, 3));
 645     sysbus_create_simple("pl050_keyboard", 0x18000000, pic[3]);
 646     sysbus_create_simple("pl050_mouse", 0x19000000, pic[4]);
 647     sysbus_create_simple(TYPE_INTEGRATOR_DEBUG, 0x1a000000, 0);
 648
 649     dev = sysbus_create_varargs("pl181", 0x1c000000, pic[23], pic[24], NULL);
 650     qdev_connect_gpio_out_named(dev, "card-read-only", 0,
 651                           qdev_get_gpio_in_named(icp, ICP_GPIO_MMC_WPROT, 0));
 652     qdev_connect_gpio_out_named(dev, "card-inserted", 0,
 653                           qdev_get_gpio_in_named(icp, ICP_GPIO_MMC_CARDIN, 0));
 654     dinfo = drive_get_next(IF_SD);
 655     if (dinfo) {
 656         DeviceState *card;
 657
 658         card = qdev_new(TYPE_SD_CARD);
 659         qdev_prop_set_drive_err(card, "drive", blk_by_legacy_dinfo(dinfo),
 660                                 &error_fatal);
 661         qdev_realize_and_unref(card, qdev_get_child_bus(dev, "sd-bus"),
 662                                &error_fatal);
 663     }
 664
 665     sysbus_create_varargs("pl041", 0x1d000000, pic[25], NULL);
 666
 667     if (nd_table[0].used)
 668         smc91c111_init(&nd_table[0], 0xc8000000, pic[27]);
 669
 670     sysbus_create_simple("pl110", 0xc0000000, pic[22]);
 671
 672     integrator_binfo.ram_size = ram_size;
 673     arm_load_kernel(cpu, machine, &integrator_binfo);
 674 }
 675
 676 static void integratorcp_machine_init(MachineClass *mc)
 677 {
 678     mc->desc = "ARM Integrator/CP (ARM926EJ-S)";
 679     mc->init = integratorcp_init;
 680     mc->ignore_memory_transaction_failures = true;
 681     mc->default_cpu_type = ARM_CPU_TYPE_NAME("arm926");
 682     mc->default_ram_id = "integrator.ram";
 683 }
 684
 685 DEFINE_MACHINE("integratorcp", integratorcp_machine_init)
 686
 687 static Property core_properties[] = {
 688     DEFINE_PROP_UINT32("memsz", IntegratorCMState, memsz, 0),
 689     DEFINE_PROP_END_OF_LIST(),
 690 };
 691
 692 static void core_class_init(ObjectClass *klass, void *data)
 693 {
 694     DeviceClass *dc = DEVICE_CLASS(klass);
 695
 696     device_class_set_props(dc, core_properties);
 697     dc->realize = integratorcm_realize;
 698     dc->vmsd = &vmstate_integratorcm;
 699 }
 700
 701 static void icp_pic_class_init(ObjectClass *klass, void *data)
 702 {
 703     DeviceClass *dc = DEVICE_CLASS(klass);
 704
 705     dc->vmsd = &vmstate_icp_pic;
 706 }
 707
 708 static void icp_control_class_init(ObjectClass *klass, void *data)
 709 {
 710     DeviceClass *dc = DEVICE_CLASS(klass);
 711
 712     dc->vmsd = &vmstate_icp_control;
 713 }
 714
 715 static const TypeInfo core_info = {
 716     .name          = TYPE_INTEGRATOR_CM,
 717     .parent        = TYPE_SYS_BUS_DEVICE,
 718     .instance_size = sizeof(IntegratorCMState),
 719     .instance_init = integratorcm_init,
 720     .class_init    = core_class_init,
 721 };
 722
 723 static const TypeInfo icp_pic_info = {
 724     .name          = TYPE_INTEGRATOR_PIC,
 725     .parent        = TYPE_SYS_BUS_DEVICE,
 726     .instance_size = sizeof(icp_pic_state),
 727     .instance_init = icp_pic_init,
 728     .class_init    = icp_pic_class_init,
 729 };
 730
 731 static const TypeInfo icp_ctrl_regs_info = {
 732     .name          = TYPE_ICP_CONTROL_REGS,
 733     .parent        = TYPE_SYS_BUS_DEVICE,
 734     .instance_size = sizeof(ICPCtrlRegsState),
 735     .instance_init = icp_control_init,
 736     .class_init    = icp_control_class_init,
 737 };
 738
 739 static void integratorcp_register_types(void)
 740 {
 741     type_register_static(&icp_pic_info);
 742     type_register_static(&core_info);
 743     type_register_static(&icp_ctrl_regs_info);
 744 }
 745
 746 type_init(integratorcp_register_types)