2 * QEMU HPPA hardware system emulator.
3 * Copyright 2018 Helge Deller <deller@gmx.de>
6 #include "qemu/osdep.h"
7 #include "qemu/datadir.h"
10 #include "hw/loader.h"
11 #include "qemu/error-report.h"
12 #include "sysemu/reset.h"
13 #include "sysemu/sysemu.h"
14 #include "sysemu/runstate.h"
15 #include "hw/rtc/mc146818rtc.h"
16 #include "hw/timer/i8254.h"
17 #include "hw/char/serial.h"
18 #include "hw/char/parallel.h"
19 #include "hw/intc/i8259.h"
20 #include "hw/input/lasips2.h"
21 #include "hw/net/lasi_82596.h"
23 #include "hw/pci/pci.h"
24 #include "hw/pci-host/dino.h"
25 #include "hw/misc/lasi.h"
26 #include "hppa_hardware.h"
27 #include "qemu/units.h"
28 #include "qapi/error.h"
35 #define MIN_SEABIOS_HPPA_VERSION 6 /* require at least this fw version */
37 #define HPA_POWER_BUTTON (FIRMWARE_END - 0x10)
39 #define enable_lasi_lan() 0
42 static void hppa_powerdown_req(Notifier
*n
, void *opaque
)
44 hwaddr soft_power_reg
= HPA_POWER_BUTTON
;
47 val
= ldl_be_phys(&address_space_memory
, soft_power_reg
);
48 if ((val
>> 8) == 0) {
49 /* immediately shut down when under hardware control */
50 qemu_system_shutdown_request(SHUTDOWN_CAUSE_GUEST_SHUTDOWN
);
54 /* clear bit 31 to indicate that the power switch was pressed. */
56 stl_be_phys(&address_space_memory
, soft_power_reg
, val
);
59 static Notifier hppa_system_powerdown_notifier
= {
60 .notify
= hppa_powerdown_req
63 /* Fallback for unassigned PCI I/O operations. Avoids MCHK. */
64 static uint64_t ignore_read(void *opaque
, hwaddr addr
, unsigned size
)
69 static void ignore_write(void *opaque
, hwaddr addr
, uint64_t v
, unsigned size
)
73 static const MemoryRegionOps hppa_pci_ignore_ops
= {
75 .write
= ignore_write
,
76 .endianness
= DEVICE_BIG_ENDIAN
,
87 static ISABus
*hppa_isa_bus(void)
91 MemoryRegion
*isa_region
;
93 isa_region
= g_new(MemoryRegion
, 1);
94 memory_region_init_io(isa_region
, NULL
, &hppa_pci_ignore_ops
,
95 NULL
, "isa-io", 0x800);
96 memory_region_add_subregion(get_system_memory(), IDE_HPA
,
99 isa_bus
= isa_bus_new(NULL
, get_system_memory(), isa_region
,
101 isa_irqs
= i8259_init(isa_bus
,
102 /* qemu_allocate_irq(dino_set_isa_irq, s, 0)); */
104 isa_bus_irqs(isa_bus
, isa_irqs
);
109 static uint64_t cpu_hppa_to_phys(void *opaque
, uint64_t addr
)
111 addr
&= (0x10000000 - 1);
115 static HPPACPU
*cpu
[HPPA_MAX_CPUS
];
116 static uint64_t firmware_entry
;
118 static void fw_cfg_boot_set(void *opaque
, const char *boot_device
,
121 fw_cfg_modify_i16(opaque
, FW_CFG_BOOT_DEVICE
, boot_device
[0]);
124 static FWCfgState
*create_fw_cfg(MachineState
*ms
)
129 fw_cfg
= fw_cfg_init_mem(FW_CFG_IO_BASE
, FW_CFG_IO_BASE
+ 4);
130 fw_cfg_add_i16(fw_cfg
, FW_CFG_NB_CPUS
, ms
->smp
.cpus
);
131 fw_cfg_add_i16(fw_cfg
, FW_CFG_MAX_CPUS
, HPPA_MAX_CPUS
);
132 fw_cfg_add_i64(fw_cfg
, FW_CFG_RAM_SIZE
, ms
->ram_size
);
134 val
= cpu_to_le64(MIN_SEABIOS_HPPA_VERSION
);
135 fw_cfg_add_file(fw_cfg
, "/etc/firmware-min-version",
136 g_memdup(&val
, sizeof(val
)), sizeof(val
));
138 val
= cpu_to_le64(HPPA_TLB_ENTRIES
);
139 fw_cfg_add_file(fw_cfg
, "/etc/cpu/tlb_entries",
140 g_memdup(&val
, sizeof(val
)), sizeof(val
));
142 val
= cpu_to_le64(HPPA_BTLB_ENTRIES
);
143 fw_cfg_add_file(fw_cfg
, "/etc/cpu/btlb_entries",
144 g_memdup(&val
, sizeof(val
)), sizeof(val
));
146 val
= cpu_to_le64(HPA_POWER_BUTTON
);
147 fw_cfg_add_file(fw_cfg
, "/etc/power-button-addr",
148 g_memdup(&val
, sizeof(val
)), sizeof(val
));
150 fw_cfg_add_i16(fw_cfg
, FW_CFG_BOOT_DEVICE
, ms
->boot_config
.order
[0]);
151 qemu_register_boot_set(fw_cfg_boot_set
, fw_cfg
);
156 static LasiState
*lasi_init(void)
160 dev
= qdev_new(TYPE_LASI_CHIP
);
161 sysbus_realize_and_unref(SYS_BUS_DEVICE(dev
), &error_fatal
);
163 return LASI_CHIP(dev
);
166 static DinoState
*dino_init(MemoryRegion
*addr_space
)
170 dev
= qdev_new(TYPE_DINO_PCI_HOST_BRIDGE
);
171 object_property_set_link(OBJECT(dev
), "memory-as", OBJECT(addr_space
),
173 sysbus_realize_and_unref(SYS_BUS_DEVICE(dev
), &error_fatal
);
175 return DINO_PCI_HOST_BRIDGE(dev
);
178 static void machine_hppa_init(MachineState
*machine
)
180 const char *kernel_filename
= machine
->kernel_filename
;
181 const char *kernel_cmdline
= machine
->kernel_cmdline
;
182 const char *initrd_filename
= machine
->initrd_filename
;
183 DeviceState
*dev
, *dino_dev
, *lasi_dev
;
186 char *firmware_filename
;
187 uint64_t firmware_low
, firmware_high
;
189 uint64_t kernel_entry
= 0, kernel_low
, kernel_high
;
190 MemoryRegion
*addr_space
= get_system_memory();
191 MemoryRegion
*rom_region
;
192 MemoryRegion
*cpu_region
;
194 unsigned int smp_cpus
= machine
->smp
.cpus
;
198 for (i
= 0; i
< smp_cpus
; i
++) {
199 char *name
= g_strdup_printf("cpu%ld-io-eir", i
);
200 cpu
[i
] = HPPA_CPU(cpu_create(machine
->cpu_type
));
202 cpu_region
= g_new(MemoryRegion
, 1);
203 memory_region_init_io(cpu_region
, OBJECT(cpu
[i
]), &hppa_io_eir_ops
,
205 memory_region_add_subregion(addr_space
, CPU_HPA
+ i
* 0x1000,
210 /* Main memory region. */
211 if (machine
->ram_size
> 3 * GiB
) {
212 error_report("RAM size is currently restricted to 3GB");
215 memory_region_add_subregion_overlap(addr_space
, 0, machine
->ram
, -1);
219 lasi_dev
= DEVICE(lasi_init());
220 memory_region_add_subregion(addr_space
, LASI_HPA
,
221 sysbus_mmio_get_region(
222 SYS_BUS_DEVICE(lasi_dev
), 0));
224 /* Init Dino (PCI host bus chip). */
225 dino_dev
= DEVICE(dino_init(addr_space
));
226 memory_region_add_subregion(addr_space
, DINO_HPA
,
227 sysbus_mmio_get_region(
228 SYS_BUS_DEVICE(dino_dev
), 0));
229 pci_bus
= PCI_BUS(qdev_get_child_bus(dino_dev
, "pci"));
232 /* Create ISA bus. */
233 isa_bus
= hppa_isa_bus();
236 /* Realtime clock, used by firmware for PDC_TOD call. */
237 mc146818_rtc_init(isa_bus
, 2000, NULL
);
239 /* Serial ports: Lasi and Dino use a 7.272727 MHz clock. */
240 serial_mm_init(addr_space
, LASI_UART_HPA
+ 0x800, 0,
241 qdev_get_gpio_in(lasi_dev
, LASI_IRQ_UART_HPA
), 7272727 / 16,
242 serial_hd(0), DEVICE_BIG_ENDIAN
);
244 serial_mm_init(addr_space
, DINO_UART_HPA
+ 0x800, 0,
245 qdev_get_gpio_in(dino_dev
, DINO_IRQ_RS232INT
), 7272727 / 16,
246 serial_hd(1), DEVICE_BIG_ENDIAN
);
249 parallel_mm_init(addr_space
, LASI_LPT_HPA
+ 0x800, 0,
250 qdev_get_gpio_in(lasi_dev
, LASI_IRQ_LAN_HPA
),
253 /* fw_cfg configuration interface */
254 create_fw_cfg(machine
);
256 /* SCSI disk setup. */
257 dev
= DEVICE(pci_create_simple(pci_bus
, -1, "lsi53c895a"));
258 lsi53c8xx_handle_legacy_cmdline(dev
);
260 /* Graphics setup. */
261 if (machine
->enable_graphics
&& vga_interface_type
!= VGA_NONE
) {
262 vga_interface_created
= true;
263 dev
= qdev_new("artist");
264 s
= SYS_BUS_DEVICE(dev
);
265 sysbus_realize_and_unref(s
, &error_fatal
);
266 sysbus_mmio_map(s
, 0, LASI_GFX_HPA
);
267 sysbus_mmio_map(s
, 1, ARTIST_FB_ADDR
);
271 if (enable_lasi_lan()) {
272 lasi_82596_init(addr_space
, LASI_LAN_HPA
,
273 qdev_get_gpio_in(lasi_dev
, LASI_IRQ_LAN_HPA
));
276 for (i
= 0; i
< nb_nics
; i
++) {
277 if (!enable_lasi_lan()) {
278 pci_nic_init_nofail(&nd_table
[i
], pci_bus
, "tulip", NULL
);
282 /* PS/2 Keyboard/Mouse */
283 dev
= DEVICE(lasips2_initfn(LASI_PS2KBD_HPA
,
284 qdev_get_gpio_in(lasi_dev
,
285 LASI_IRQ_PS2KBD_HPA
)));
286 memory_region_add_subregion(addr_space
, LASI_PS2KBD_HPA
,
287 sysbus_mmio_get_region(SYS_BUS_DEVICE(dev
),
289 memory_region_add_subregion(addr_space
, LASI_PS2KBD_HPA
+ 0x100,
290 sysbus_mmio_get_region(SYS_BUS_DEVICE(dev
),
293 /* register power switch emulation */
294 qemu_register_powerdown_notifier(&hppa_system_powerdown_notifier
);
296 /* Load firmware. Given that this is not "real" firmware,
297 but one explicitly written for the emulation, we might as
298 well load it directly from an ELF image. */
299 firmware_filename
= qemu_find_file(QEMU_FILE_TYPE_BIOS
,
300 machine
->firmware
?: "hppa-firmware.img");
301 if (firmware_filename
== NULL
) {
302 error_report("no firmware provided");
306 size
= load_elf(firmware_filename
, NULL
, NULL
, NULL
,
307 &firmware_entry
, &firmware_low
, &firmware_high
, NULL
,
308 true, EM_PARISC
, 0, 0);
310 /* Unfortunately, load_elf sign-extends reading elf32. */
311 firmware_entry
= (target_ureg
)firmware_entry
;
312 firmware_low
= (target_ureg
)firmware_low
;
313 firmware_high
= (target_ureg
)firmware_high
;
316 error_report("could not load firmware '%s'", firmware_filename
);
319 qemu_log_mask(CPU_LOG_PAGE
, "Firmware loaded at 0x%08" PRIx64
320 "-0x%08" PRIx64
", entry at 0x%08" PRIx64
".\n",
321 firmware_low
, firmware_high
, firmware_entry
);
322 if (firmware_low
< FIRMWARE_START
|| firmware_high
>= FIRMWARE_END
) {
323 error_report("Firmware overlaps with memory or IO space");
326 g_free(firmware_filename
);
328 rom_region
= g_new(MemoryRegion
, 1);
329 memory_region_init_ram(rom_region
, NULL
, "firmware",
330 (FIRMWARE_END
- FIRMWARE_START
), &error_fatal
);
331 memory_region_add_subregion(addr_space
, FIRMWARE_START
, rom_region
);
334 if (kernel_filename
) {
335 size
= load_elf(kernel_filename
, NULL
, &cpu_hppa_to_phys
,
336 NULL
, &kernel_entry
, &kernel_low
, &kernel_high
, NULL
,
337 true, EM_PARISC
, 0, 0);
339 /* Unfortunately, load_elf sign-extends reading elf32. */
340 kernel_entry
= (target_ureg
) cpu_hppa_to_phys(NULL
, kernel_entry
);
341 kernel_low
= (target_ureg
)kernel_low
;
342 kernel_high
= (target_ureg
)kernel_high
;
345 error_report("could not load kernel '%s'", kernel_filename
);
348 qemu_log_mask(CPU_LOG_PAGE
, "Kernel loaded at 0x%08" PRIx64
349 "-0x%08" PRIx64
", entry at 0x%08" PRIx64
350 ", size %" PRIu64
" kB\n",
351 kernel_low
, kernel_high
, kernel_entry
, size
/ KiB
);
353 if (kernel_cmdline
) {
354 cpu
[0]->env
.gr
[24] = 0x4000;
355 pstrcpy_targphys("cmdline", cpu
[0]->env
.gr
[24],
356 TARGET_PAGE_SIZE
, kernel_cmdline
);
359 if (initrd_filename
) {
360 ram_addr_t initrd_base
;
363 initrd_size
= get_image_size(initrd_filename
);
364 if (initrd_size
< 0) {
365 error_report("could not load initial ram disk '%s'",
370 /* Load the initrd image high in memory.
371 Mirror the algorithm used by palo:
372 (1) Due to sign-extension problems and PDC,
373 put the initrd no higher than 1G.
374 (2) Reserve 64k for stack. */
375 initrd_base
= MIN(machine
->ram_size
, 1 * GiB
);
376 initrd_base
= initrd_base
- 64 * KiB
;
377 initrd_base
= (initrd_base
- initrd_size
) & TARGET_PAGE_MASK
;
379 if (initrd_base
< kernel_high
) {
380 error_report("kernel and initial ram disk too large!");
384 load_image_targphys(initrd_filename
, initrd_base
, initrd_size
);
385 cpu
[0]->env
.gr
[23] = initrd_base
;
386 cpu
[0]->env
.gr
[22] = initrd_base
+ initrd_size
;
391 /* When booting via firmware, tell firmware if we want interactive
392 * mode (kernel_entry=1), and to boot from CD (gr[24]='d')
393 * or hard disc * (gr[24]='c').
395 kernel_entry
= machine
->boot_config
.has_menu
? machine
->boot_config
.menu
: 0;
396 cpu
[0]->env
.gr
[24] = machine
->boot_config
.order
[0];
399 /* We jump to the firmware entry routine and pass the
400 * various parameters in registers. After firmware initialization,
401 * firmware will start the Linux kernel with ramdisk and cmdline.
403 cpu
[0]->env
.gr
[26] = machine
->ram_size
;
404 cpu
[0]->env
.gr
[25] = kernel_entry
;
406 /* tell firmware how many SMP CPUs to present in inventory table */
407 cpu
[0]->env
.gr
[21] = smp_cpus
;
409 /* tell firmware fw_cfg port */
410 cpu
[0]->env
.gr
[19] = FW_CFG_IO_BASE
;
413 static void hppa_machine_reset(MachineState
*ms
)
415 unsigned int smp_cpus
= ms
->smp
.cpus
;
418 qemu_devices_reset();
420 /* Start all CPUs at the firmware entry point.
421 * Monarch CPU will initialize firmware, secondary CPUs
422 * will enter a small idle look and wait for rendevouz. */
423 for (i
= 0; i
< smp_cpus
; i
++) {
424 cpu_set_pc(CPU(cpu
[i
]), firmware_entry
);
425 cpu
[i
]->env
.gr
[5] = CPU_HPA
+ i
* 0x1000;
428 /* already initialized by machine_hppa_init()? */
429 if (cpu
[0]->env
.gr
[26] == ms
->ram_size
) {
433 cpu
[0]->env
.gr
[26] = ms
->ram_size
;
434 cpu
[0]->env
.gr
[25] = 0; /* no firmware boot menu */
435 cpu
[0]->env
.gr
[24] = 'c';
436 /* gr22/gr23 unused, no initrd while reboot. */
437 cpu
[0]->env
.gr
[21] = smp_cpus
;
438 /* tell firmware fw_cfg port */
439 cpu
[0]->env
.gr
[19] = FW_CFG_IO_BASE
;
442 static void hppa_nmi(NMIState
*n
, int cpu_index
, Error
**errp
)
447 cpu_interrupt(cs
, CPU_INTERRUPT_NMI
);
451 static void hppa_machine_init_class_init(ObjectClass
*oc
, void *data
)
453 MachineClass
*mc
= MACHINE_CLASS(oc
);
454 NMIClass
*nc
= NMI_CLASS(oc
);
456 mc
->desc
= "HPPA B160L machine";
457 mc
->default_cpu_type
= TYPE_HPPA_CPU
;
458 mc
->init
= machine_hppa_init
;
459 mc
->reset
= hppa_machine_reset
;
460 mc
->block_default_type
= IF_SCSI
;
461 mc
->max_cpus
= HPPA_MAX_CPUS
;
462 mc
->default_cpus
= 1;
463 mc
->is_default
= true;
464 mc
->default_ram_size
= 512 * MiB
;
465 mc
->default_boot_order
= "cd";
466 mc
->default_ram_id
= "ram";
468 nc
->nmi_monitor_handler
= hppa_nmi
;
471 static const TypeInfo hppa_machine_init_typeinfo
= {
472 .name
= MACHINE_TYPE_NAME("hppa"),
473 .parent
= TYPE_MACHINE
,
474 .class_init
= hppa_machine_init_class_init
,
475 .interfaces
= (InterfaceInfo
[]) {
481 static void hppa_machine_init_register_types(void)
483 type_register_static(&hppa_machine_init_typeinfo
);
486 type_init(hppa_machine_init_register_types
)