2 * QEMU PPC PREP hardware System Emulator
4 * Copyright (c) 2003-2007 Jocelyn Mayer
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
25 #include "hw/timer/m48t59.h"
26 #include "hw/i386/pc.h"
27 #include "hw/char/serial.h"
28 #include "hw/block/fdc.h"
30 #include "sysemu/sysemu.h"
31 #include "hw/isa/isa.h"
32 #include "hw/pci/pci.h"
33 #include "hw/pci/pci_host.h"
34 #include "hw/ppc/ppc.h"
35 #include "hw/boards.h"
38 #include "hw/loader.h"
39 #include "hw/timer/mc146818rtc.h"
40 #include "hw/isa/pc87312.h"
41 #include "sysemu/block-backend.h"
42 #include "sysemu/arch_init.h"
43 #include "sysemu/qtest.h"
44 #include "exec/address-spaces.h"
47 //#define HARD_DEBUG_PPC_IO
48 //#define DEBUG_PPC_IO
50 /* SMP is not enabled, for now */
55 #define BIOS_SIZE (1024 * 1024)
56 #define BIOS_FILENAME "ppc_rom.bin"
57 #define KERNEL_LOAD_ADDR 0x01000000
58 #define INITRD_LOAD_ADDR 0x01800000
60 #if defined (HARD_DEBUG_PPC_IO) && !defined (DEBUG_PPC_IO)
64 #if defined (HARD_DEBUG_PPC_IO)
65 #define PPC_IO_DPRINTF(fmt, ...) \
67 if (qemu_loglevel_mask(CPU_LOG_IOPORT)) { \
68 qemu_log("%s: " fmt, __func__ , ## __VA_ARGS__); \
70 printf("%s : " fmt, __func__ , ## __VA_ARGS__); \
73 #elif defined (DEBUG_PPC_IO)
74 #define PPC_IO_DPRINTF(fmt, ...) \
75 qemu_log_mask(CPU_LOG_IOPORT, fmt, ## __VA_ARGS__)
77 #define PPC_IO_DPRINTF(fmt, ...) do { } while (0)
80 /* Constants for devices init */
81 static const int ide_iobase
[2] = { 0x1f0, 0x170 };
82 static const int ide_iobase2
[2] = { 0x3f6, 0x376 };
83 static const int ide_irq
[2] = { 13, 13 };
85 #define NE2000_NB_MAX 6
87 static uint32_t ne2000_io
[NE2000_NB_MAX
] = { 0x300, 0x320, 0x340, 0x360, 0x280, 0x380 };
88 static int ne2000_irq
[NE2000_NB_MAX
] = { 9, 10, 11, 3, 4, 5 };
90 /* ISA IO ports bridge */
91 #define PPC_IO_BASE 0x80000000
93 /* PowerPC control and status registers */
99 /* Control and status */
104 /* General purpose registers */
117 /* Error diagnostic */
120 static void PPC_XCSR_writeb (void *opaque
,
121 hwaddr addr
, uint32_t value
)
123 printf("%s: 0x" TARGET_FMT_plx
" => 0x%08" PRIx32
"\n", __func__
, addr
,
127 static void PPC_XCSR_writew (void *opaque
,
128 hwaddr addr
, uint32_t value
)
130 printf("%s: 0x" TARGET_FMT_plx
" => 0x%08" PRIx32
"\n", __func__
, addr
,
134 static void PPC_XCSR_writel (void *opaque
,
135 hwaddr addr
, uint32_t value
)
137 printf("%s: 0x" TARGET_FMT_plx
" => 0x%08" PRIx32
"\n", __func__
, addr
,
141 static uint32_t PPC_XCSR_readb (void *opaque
, hwaddr addr
)
145 printf("%s: 0x" TARGET_FMT_plx
" <= %08" PRIx32
"\n", __func__
, addr
,
151 static uint32_t PPC_XCSR_readw (void *opaque
, hwaddr addr
)
155 printf("%s: 0x" TARGET_FMT_plx
" <= %08" PRIx32
"\n", __func__
, addr
,
161 static uint32_t PPC_XCSR_readl (void *opaque
, hwaddr addr
)
165 printf("%s: 0x" TARGET_FMT_plx
" <= %08" PRIx32
"\n", __func__
, addr
,
171 static const MemoryRegionOps PPC_XCSR_ops
= {
173 .read
= { PPC_XCSR_readb
, PPC_XCSR_readw
, PPC_XCSR_readl
, },
174 .write
= { PPC_XCSR_writeb
, PPC_XCSR_writew
, PPC_XCSR_writel
, },
176 .endianness
= DEVICE_LITTLE_ENDIAN
,
181 /* Fake super-io ports for PREP platform (Intel 82378ZB) */
182 typedef struct sysctrl_t
{
188 qemu_irq contiguous_map_irq
;
193 STATE_HARDFILE
= 0x01,
196 static sysctrl_t
*sysctrl
;
198 static void PREP_io_800_writeb (void *opaque
, uint32_t addr
, uint32_t val
)
200 sysctrl_t
*sysctrl
= opaque
;
202 PPC_IO_DPRINTF("0x%08" PRIx32
" => 0x%02" PRIx32
"\n",
203 addr
- PPC_IO_BASE
, val
);
206 /* Special port 92 */
207 /* Check soft reset asked */
209 qemu_irq_raise(sysctrl
->reset_irq
);
211 qemu_irq_lower(sysctrl
->reset_irq
);
221 /* Motorola CPU configuration register : read-only */
224 /* Motorola base module feature register : read-only */
227 /* Motorola base module status register : read-only */
230 /* Hardfile light register */
232 sysctrl
->state
|= STATE_HARDFILE
;
234 sysctrl
->state
&= ~STATE_HARDFILE
;
237 /* Password protect 1 register */
238 if (sysctrl
->nvram
!= NULL
) {
239 NvramClass
*k
= NVRAM_GET_CLASS(sysctrl
->nvram
);
240 (k
->toggle_lock
)(sysctrl
->nvram
, 1);
244 /* Password protect 2 register */
245 if (sysctrl
->nvram
!= NULL
) {
246 NvramClass
*k
= NVRAM_GET_CLASS(sysctrl
->nvram
);
247 (k
->toggle_lock
)(sysctrl
->nvram
, 2);
251 /* L2 invalidate register */
252 // tlb_flush(first_cpu, 1);
255 /* system control register */
256 sysctrl
->syscontrol
= val
& 0x0F;
259 /* I/O map type register */
260 sysctrl
->contiguous_map
= val
& 0x01;
261 qemu_set_irq(sysctrl
->contiguous_map_irq
, sysctrl
->contiguous_map
);
264 printf("ERROR: unaffected IO port write: %04" PRIx32
265 " => %02" PRIx32
"\n", addr
, val
);
270 static uint32_t PREP_io_800_readb (void *opaque
, uint32_t addr
)
272 sysctrl_t
*sysctrl
= opaque
;
273 uint32_t retval
= 0xFF;
277 /* Special port 92 */
278 retval
= sysctrl
->endian
<< 1;
281 /* Motorola CPU configuration register */
282 retval
= 0xEF; /* MPC750 */
285 /* Motorola Base module feature register */
286 retval
= 0xAD; /* No ESCC, PMC slot neither ethernet */
289 /* Motorola base module status register */
290 retval
= 0xE0; /* Standard MPC750 */
293 /* Equipment present register:
295 * no upgrade processor
296 * no cards in PCI slots
302 /* Motorola base module extended feature register */
303 retval
= 0x39; /* No USB, CF and PCI bridge. NVRAM present */
306 /* L2 invalidate: don't care */
313 /* system control register
314 * 7 - 6 / 1 - 0: L2 cache enable
316 retval
= sysctrl
->syscontrol
;
320 retval
= 0x03; /* no L2 cache */
323 /* I/O map type register */
324 retval
= sysctrl
->contiguous_map
;
327 printf("ERROR: unaffected IO port: %04" PRIx32
" read\n", addr
);
330 PPC_IO_DPRINTF("0x%08" PRIx32
" <= 0x%02" PRIx32
"\n",
331 addr
- PPC_IO_BASE
, retval
);
337 #define NVRAM_SIZE 0x2000
339 static void cpu_request_exit(void *opaque
, int irq
, int level
)
341 CPUState
*cpu
= current_cpu
;
348 static void ppc_prep_reset(void *opaque
)
350 PowerPCCPU
*cpu
= opaque
;
355 static const MemoryRegionPortio prep_portio_list
[] = {
356 /* System control ports */
357 { 0x0092, 1, 1, .read
= PREP_io_800_readb
, .write
= PREP_io_800_writeb
, },
359 .read
= PREP_io_800_readb
, .write
= PREP_io_800_writeb
, },
360 /* Special port to get debug messages from Open-Firmware */
361 { 0x0F00, 4, 1, .write
= PPC_debug_write
, },
362 PORTIO_END_OF_LIST(),
365 static PortioList prep_port_list
;
367 /*****************************************************************************/
369 static inline uint32_t nvram_read(Nvram
*nvram
, uint32_t addr
)
371 NvramClass
*k
= NVRAM_GET_CLASS(sysctrl
->nvram
);
372 return (k
->read
)(nvram
, addr
);
375 static inline void nvram_write(Nvram
*nvram
, uint32_t addr
, uint32_t val
)
377 NvramClass
*k
= NVRAM_GET_CLASS(sysctrl
->nvram
);
378 (k
->write
)(nvram
, addr
, val
);
381 static void NVRAM_set_byte(Nvram
*nvram
, uint32_t addr
, uint8_t value
)
383 nvram_write(nvram
, addr
, value
);
386 static uint8_t NVRAM_get_byte(Nvram
*nvram
, uint32_t addr
)
388 return nvram_read(nvram
, addr
);
391 static void NVRAM_set_word(Nvram
*nvram
, uint32_t addr
, uint16_t value
)
393 nvram_write(nvram
, addr
, value
>> 8);
394 nvram_write(nvram
, addr
+ 1, value
& 0xFF);
397 static uint16_t NVRAM_get_word(Nvram
*nvram
, uint32_t addr
)
401 tmp
= nvram_read(nvram
, addr
) << 8;
402 tmp
|= nvram_read(nvram
, addr
+ 1);
407 static void NVRAM_set_lword(Nvram
*nvram
, uint32_t addr
, uint32_t value
)
409 nvram_write(nvram
, addr
, value
>> 24);
410 nvram_write(nvram
, addr
+ 1, (value
>> 16) & 0xFF);
411 nvram_write(nvram
, addr
+ 2, (value
>> 8) & 0xFF);
412 nvram_write(nvram
, addr
+ 3, value
& 0xFF);
415 static void NVRAM_set_string(Nvram
*nvram
, uint32_t addr
, const char *str
,
420 for (i
= 0; i
< max
&& str
[i
] != '\0'; i
++) {
421 nvram_write(nvram
, addr
+ i
, str
[i
]);
423 nvram_write(nvram
, addr
+ i
, str
[i
]);
424 nvram_write(nvram
, addr
+ max
- 1, '\0');
427 static uint16_t NVRAM_crc_update (uint16_t prev
, uint16_t value
)
430 uint16_t pd
, pd1
, pd2
;
435 pd2
= ((pd
>> 4) & 0x000F) ^ pd1
;
436 tmp
^= (pd1
<< 3) | (pd1
<< 8);
437 tmp
^= pd2
| (pd2
<< 7) | (pd2
<< 12);
442 static uint16_t NVRAM_compute_crc (Nvram
*nvram
, uint32_t start
, uint32_t count
)
445 uint16_t crc
= 0xFFFF;
450 for (i
= 0; i
!= count
; i
++) {
451 crc
= NVRAM_crc_update(crc
, NVRAM_get_word(nvram
, start
+ i
));
454 crc
= NVRAM_crc_update(crc
, NVRAM_get_byte(nvram
, start
+ i
) << 8);
460 #define CMDLINE_ADDR 0x017ff000
462 static int PPC_NVRAM_set_params (Nvram
*nvram
, uint16_t NVRAM_size
,
464 uint32_t RAM_size
, int boot_device
,
465 uint32_t kernel_image
, uint32_t kernel_size
,
467 uint32_t initrd_image
, uint32_t initrd_size
,
468 uint32_t NVRAM_image
,
469 int width
, int height
, int depth
)
473 /* Set parameters for Open Hack'Ware BIOS */
474 NVRAM_set_string(nvram
, 0x00, "QEMU_BIOS", 16);
475 NVRAM_set_lword(nvram
, 0x10, 0x00000002); /* structure v2 */
476 NVRAM_set_word(nvram
, 0x14, NVRAM_size
);
477 NVRAM_set_string(nvram
, 0x20, arch
, 16);
478 NVRAM_set_lword(nvram
, 0x30, RAM_size
);
479 NVRAM_set_byte(nvram
, 0x34, boot_device
);
480 NVRAM_set_lword(nvram
, 0x38, kernel_image
);
481 NVRAM_set_lword(nvram
, 0x3C, kernel_size
);
483 /* XXX: put the cmdline in NVRAM too ? */
484 pstrcpy_targphys("cmdline", CMDLINE_ADDR
, RAM_size
- CMDLINE_ADDR
,
486 NVRAM_set_lword(nvram
, 0x40, CMDLINE_ADDR
);
487 NVRAM_set_lword(nvram
, 0x44, strlen(cmdline
));
489 NVRAM_set_lword(nvram
, 0x40, 0);
490 NVRAM_set_lword(nvram
, 0x44, 0);
492 NVRAM_set_lword(nvram
, 0x48, initrd_image
);
493 NVRAM_set_lword(nvram
, 0x4C, initrd_size
);
494 NVRAM_set_lword(nvram
, 0x50, NVRAM_image
);
496 NVRAM_set_word(nvram
, 0x54, width
);
497 NVRAM_set_word(nvram
, 0x56, height
);
498 NVRAM_set_word(nvram
, 0x58, depth
);
499 crc
= NVRAM_compute_crc(nvram
, 0x00, 0xF8);
500 NVRAM_set_word(nvram
, 0xFC, crc
);
505 /* PowerPC PREP hardware initialisation */
506 static void ppc_prep_init(MachineState
*machine
)
508 ram_addr_t ram_size
= machine
->ram_size
;
509 const char *cpu_model
= machine
->cpu_model
;
510 const char *kernel_filename
= machine
->kernel_filename
;
511 const char *kernel_cmdline
= machine
->kernel_cmdline
;
512 const char *initrd_filename
= machine
->initrd_filename
;
513 const char *boot_device
= machine
->boot_order
;
514 MemoryRegion
*sysmem
= get_system_memory();
515 PowerPCCPU
*cpu
= NULL
;
516 CPUPPCState
*env
= NULL
;
519 MemoryRegion
*xcsr
= g_new(MemoryRegion
, 1);
521 int linux_boot
, i
, nb_nics1
;
522 MemoryRegion
*ram
= g_new(MemoryRegion
, 1);
523 uint32_t kernel_base
, initrd_base
;
524 long kernel_size
, initrd_size
;
526 PCIHostState
*pcihost
;
532 DriveInfo
*hd
[MAX_IDE_BUS
* MAX_IDE_DEVS
];
534 sysctrl
= g_malloc0(sizeof(sysctrl_t
));
536 linux_boot
= (kernel_filename
!= NULL
);
539 if (cpu_model
== NULL
)
541 for (i
= 0; i
< smp_cpus
; i
++) {
542 cpu
= cpu_ppc_init(cpu_model
);
544 fprintf(stderr
, "Unable to find PowerPC CPU definition\n");
549 if (env
->flags
& POWERPC_FLAG_RTC_CLK
) {
550 /* POWER / PowerPC 601 RTC clock frequency is 7.8125 MHz */
551 cpu_ppc_tb_init(env
, 7812500UL);
553 /* Set time-base frequency to 100 Mhz */
554 cpu_ppc_tb_init(env
, 100UL * 1000UL * 1000UL);
556 qemu_register_reset(ppc_prep_reset
, cpu
);
560 memory_region_allocate_system_memory(ram
, NULL
, "ppc_prep.ram", ram_size
);
561 memory_region_add_subregion(sysmem
, 0, ram
);
564 kernel_base
= KERNEL_LOAD_ADDR
;
565 /* now we can load the kernel */
566 kernel_size
= load_image_targphys(kernel_filename
, kernel_base
,
567 ram_size
- kernel_base
);
568 if (kernel_size
< 0) {
569 hw_error("qemu: could not load kernel '%s'\n", kernel_filename
);
573 if (initrd_filename
) {
574 initrd_base
= INITRD_LOAD_ADDR
;
575 initrd_size
= load_image_targphys(initrd_filename
, initrd_base
,
576 ram_size
- initrd_base
);
577 if (initrd_size
< 0) {
578 hw_error("qemu: could not load initial ram disk '%s'\n",
585 ppc_boot_device
= 'm';
591 ppc_boot_device
= '\0';
592 /* For now, OHW cannot boot from the network. */
593 for (i
= 0; boot_device
[i
] != '\0'; i
++) {
594 if (boot_device
[i
] >= 'a' && boot_device
[i
] <= 'f') {
595 ppc_boot_device
= boot_device
[i
];
599 if (ppc_boot_device
== '\0') {
600 fprintf(stderr
, "No valid boot device for Mac99 machine\n");
605 if (PPC_INPUT(env
) != PPC_FLAGS_INPUT_6xx
) {
606 hw_error("Only 6xx bus is supported on PREP machine\n");
609 dev
= qdev_create(NULL
, "raven-pcihost");
610 if (bios_name
== NULL
) {
611 bios_name
= BIOS_FILENAME
;
613 qdev_prop_set_string(dev
, "bios-name", bios_name
);
614 qdev_prop_set_uint32(dev
, "elf-machine", ELF_MACHINE
);
615 pcihost
= PCI_HOST_BRIDGE(dev
);
616 object_property_add_child(qdev_get_machine(), "raven", OBJECT(dev
), NULL
);
617 qdev_init_nofail(dev
);
618 pci_bus
= (PCIBus
*)qdev_get_child_bus(dev
, "pci.0");
619 if (pci_bus
== NULL
) {
620 fprintf(stderr
, "Couldn't create PCI host controller.\n");
623 sysctrl
->contiguous_map_irq
= qdev_get_gpio_in(dev
, 0);
625 /* PCI -> ISA bridge */
626 pci
= pci_create_simple(pci_bus
, PCI_DEVFN(1, 0), "i82378");
627 cpu
= POWERPC_CPU(first_cpu
);
628 qdev_connect_gpio_out(&pci
->qdev
, 0,
629 cpu
->env
.irq_inputs
[PPC6xx_INPUT_INT
]);
630 qdev_connect_gpio_out(&pci
->qdev
, 1,
631 qemu_allocate_irq(cpu_request_exit
, NULL
, 0));
632 sysbus_connect_irq(&pcihost
->busdev
, 0, qdev_get_gpio_in(&pci
->qdev
, 9));
633 sysbus_connect_irq(&pcihost
->busdev
, 1, qdev_get_gpio_in(&pci
->qdev
, 11));
634 sysbus_connect_irq(&pcihost
->busdev
, 2, qdev_get_gpio_in(&pci
->qdev
, 9));
635 sysbus_connect_irq(&pcihost
->busdev
, 3, qdev_get_gpio_in(&pci
->qdev
, 11));
636 isa_bus
= ISA_BUS(qdev_get_child_bus(DEVICE(pci
), "isa.0"));
638 /* Super I/O (parallel + serial ports) */
639 isa
= isa_create(isa_bus
, TYPE_PC87312
);
641 qdev_prop_set_uint8(dev
, "config", 13); /* fdc, ser0, ser1, par0 */
642 qdev_init_nofail(dev
);
644 /* init basic PC hardware */
645 pci_vga_init(pci_bus
);
648 if (nb_nics1
> NE2000_NB_MAX
)
649 nb_nics1
= NE2000_NB_MAX
;
650 for(i
= 0; i
< nb_nics1
; i
++) {
651 if (nd_table
[i
].model
== NULL
) {
652 nd_table
[i
].model
= g_strdup("ne2k_isa");
654 if (strcmp(nd_table
[i
].model
, "ne2k_isa") == 0) {
655 isa_ne2000_init(isa_bus
, ne2000_io
[i
], ne2000_irq
[i
],
658 pci_nic_init_nofail(&nd_table
[i
], pci_bus
, "ne2k_pci", NULL
);
662 ide_drive_get(hd
, ARRAY_SIZE(hd
));
663 for(i
= 0; i
< MAX_IDE_BUS
; i
++) {
664 isa_ide_init(isa_bus
, ide_iobase
[i
], ide_iobase2
[i
], ide_irq
[i
],
668 isa_create_simple(isa_bus
, "i8042");
670 cpu
= POWERPC_CPU(first_cpu
);
671 sysctrl
->reset_irq
= cpu
->env
.irq_inputs
[PPC6xx_INPUT_HRESET
];
673 portio_list_init(&prep_port_list
, NULL
, prep_portio_list
, sysctrl
, "prep");
674 portio_list_add(&prep_port_list
, isa_address_space_io(isa
), 0x0);
676 /* PowerPC control and status register group */
678 memory_region_init_io(xcsr
, NULL
, &PPC_XCSR_ops
, NULL
, "ppc-xcsr", 0x1000);
679 memory_region_add_subregion(sysmem
, 0xFEFF0000, xcsr
);
683 pci_create_simple(pci_bus
, -1, "pci-ohci");
686 m48t59
= m48t59_init_isa(isa_bus
, 0x0074, NVRAM_SIZE
, 2000, 59);
689 sysctrl
->nvram
= m48t59
;
691 /* Initialise NVRAM */
692 PPC_NVRAM_set_params(m48t59
, NVRAM_SIZE
, "PREP", ram_size
,
694 kernel_base
, kernel_size
,
696 initrd_base
, initrd_size
,
697 /* XXX: need an option to load a NVRAM image */
699 graphic_width
, graphic_height
, graphic_depth
);
702 static QEMUMachine prep_machine
= {
704 .desc
= "PowerPC PREP platform",
705 .init
= ppc_prep_init
,
706 .max_cpus
= MAX_CPUS
,
707 .default_boot_order
= "cad",
710 static void prep_machine_init(void)
712 qemu_register_machine(&prep_machine
);
715 machine_init(prep_machine_init
);