Merge tag 'v9.1.0'
[qemu/ar7.git] / hw / ppc / pnv_bmc.c
blob0c1274df21a941d05b8a07bc50b1501b6ab82cb9
1 /*
2 * QEMU PowerNV, BMC related functions
4 * Copyright (c) 2016-2017, IBM Corporation.
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License, version 2, as
8 * published by the Free Software Foundation.
10 * This program is distributed in the hope that it will be useful,
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 * GNU General Public License for more details.
15 * You should have received a copy of the GNU General Public License
16 * along with this program; if not, see <http://www.gnu.org/licenses/>.
19 #include "qemu/osdep.h"
20 #include "qapi/error.h"
21 #include "target/ppc/cpu.h"
22 #include "qemu/log.h"
23 #include "hw/ipmi/ipmi.h"
24 #include "hw/ppc/fdt.h"
26 #include "hw/ppc/pnv.h"
28 #include <libfdt.h>
30 /* TODO: include definition in ipmi.h */
31 #define IPMI_SDR_FULL_TYPE 1
34 * OEM SEL Event data packet sent by BMC in response of a Read Event
35 * Message Buffer command
37 typedef struct OemSel {
38 /* SEL header */
39 uint8_t id[2];
40 uint8_t type;
41 uint8_t timestamp[4];
42 uint8_t manuf_id[3];
44 /* OEM SEL data (6 bytes) follows */
45 uint8_t netfun;
46 uint8_t cmd;
47 uint8_t data[4];
48 } OemSel;
50 #define SOFT_OFF 0x00
51 #define SOFT_REBOOT 0x01
53 static bool pnv_bmc_is_simulator(IPMIBmc *bmc)
55 return object_dynamic_cast(OBJECT(bmc), TYPE_IPMI_BMC_SIMULATOR);
58 static void pnv_gen_oem_sel(IPMIBmc *bmc, uint8_t reboot)
60 /* IPMI SEL Event are 16 bytes long */
61 OemSel sel = {
62 .id = { 0x55 , 0x55 },
63 .type = 0xC0, /* OEM */
64 .manuf_id = { 0x0, 0x0, 0x0 },
65 .timestamp = { 0x0, 0x0, 0x0, 0x0 },
66 .netfun = 0x3A, /* IBM */
67 .cmd = 0x04, /* AMI OEM SEL Power Notification */
68 .data = { reboot, 0xFF, 0xFF, 0xFF },
71 ipmi_bmc_gen_event(bmc, (uint8_t *) &sel, 0 /* do not log the event */);
74 void pnv_bmc_powerdown(IPMIBmc *bmc)
76 pnv_gen_oem_sel(bmc, SOFT_OFF);
79 void pnv_dt_bmc_sensors(IPMIBmc *bmc, void *fdt)
81 int offset;
82 int i;
83 const struct ipmi_sdr_compact *sdr;
84 uint16_t nextrec;
86 if (!pnv_bmc_is_simulator(bmc)) {
87 return;
90 offset = fdt_add_subnode(fdt, 0, "bmc");
91 _FDT(offset);
93 _FDT((fdt_setprop_string(fdt, offset, "name", "bmc")));
94 offset = fdt_add_subnode(fdt, offset, "sensors");
95 _FDT(offset);
97 _FDT((fdt_setprop_cell(fdt, offset, "#address-cells", 0x1)));
98 _FDT((fdt_setprop_cell(fdt, offset, "#size-cells", 0x0)));
100 for (i = 0; !ipmi_bmc_sdr_find(bmc, i, &sdr, &nextrec); i++) {
101 int off;
102 char *name;
104 if (sdr->header.rec_type != IPMI_SDR_COMPACT_TYPE &&
105 sdr->header.rec_type != IPMI_SDR_FULL_TYPE) {
106 continue;
109 name = g_strdup_printf("sensor@%x", sdr->sensor_owner_number);
110 off = fdt_add_subnode(fdt, offset, name);
111 _FDT(off);
112 g_free(name);
114 _FDT((fdt_setprop_cell(fdt, off, "reg", sdr->sensor_owner_number)));
115 _FDT((fdt_setprop_string(fdt, off, "name", "sensor")));
116 _FDT((fdt_setprop_string(fdt, off, "compatible", "ibm,ipmi-sensor")));
117 _FDT((fdt_setprop_cell(fdt, off, "ipmi-sensor-reading-type",
118 sdr->reading_type)));
119 _FDT((fdt_setprop_cell(fdt, off, "ipmi-entity-id",
120 sdr->entity_id)));
121 _FDT((fdt_setprop_cell(fdt, off, "ipmi-entity-instance",
122 sdr->entity_instance)));
123 _FDT((fdt_setprop_cell(fdt, off, "ipmi-sensor-type",
124 sdr->sensor_type)));
129 * HIOMAP protocol handler
131 #define HIOMAP_C_RESET 1
132 #define HIOMAP_C_GET_INFO 2
133 #define HIOMAP_C_GET_FLASH_INFO 3
134 #define HIOMAP_C_CREATE_READ_WINDOW 4
135 #define HIOMAP_C_CLOSE_WINDOW 5
136 #define HIOMAP_C_CREATE_WRITE_WINDOW 6
137 #define HIOMAP_C_MARK_DIRTY 7
138 #define HIOMAP_C_FLUSH 8
139 #define HIOMAP_C_ACK 9
140 #define HIOMAP_C_ERASE 10
141 #define HIOMAP_C_DEVICE_NAME 11
142 #define HIOMAP_C_LOCK 12
144 #define BLOCK_SHIFT 12 /* 4K */
146 static uint16_t bytes_to_blocks(uint32_t bytes)
148 return bytes >> BLOCK_SHIFT;
151 static uint32_t blocks_to_bytes(uint16_t blocks)
153 return blocks << BLOCK_SHIFT;
156 static int hiomap_erase(PnvPnor *pnor, uint32_t offset, uint32_t size)
158 MemTxResult result;
159 int i;
161 for (i = 0; i < size / 4; i++) {
162 result = memory_region_dispatch_write(&pnor->mmio, offset + i * 4,
163 0xFFFFFFFF, MO_32,
164 MEMTXATTRS_UNSPECIFIED);
165 if (result != MEMTX_OK) {
166 return -1;
169 return 0;
172 static void hiomap_cmd(IPMIBmcSim *ibs, uint8_t *cmd, unsigned int cmd_len,
173 RspBuffer *rsp)
175 PnvPnor *pnor = PNV_PNOR(object_property_get_link(OBJECT(ibs), "pnor",
176 &error_abort));
177 uint32_t pnor_size = pnor->size;
178 uint32_t pnor_addr = PNOR_SPI_OFFSET;
179 bool readonly = false;
181 rsp_buffer_push(rsp, cmd[2]);
182 rsp_buffer_push(rsp, cmd[3]);
184 switch (cmd[2]) {
185 case HIOMAP_C_MARK_DIRTY:
186 case HIOMAP_C_FLUSH:
187 case HIOMAP_C_ACK:
188 break;
190 case HIOMAP_C_ERASE:
191 if (hiomap_erase(pnor, blocks_to_bytes(cmd[5] << 8 | cmd[4]),
192 blocks_to_bytes(cmd[7] << 8 | cmd[6]))) {
193 rsp_buffer_set_error(rsp, IPMI_CC_UNSPECIFIED);
195 break;
197 case HIOMAP_C_GET_INFO:
198 rsp_buffer_push(rsp, 2); /* Version 2 */
199 rsp_buffer_push(rsp, BLOCK_SHIFT); /* block size */
200 rsp_buffer_push(rsp, 0); /* Timeout */
201 rsp_buffer_push(rsp, 0); /* Timeout */
202 break;
204 case HIOMAP_C_GET_FLASH_INFO:
205 rsp_buffer_push(rsp, bytes_to_blocks(pnor_size) & 0xFF);
206 rsp_buffer_push(rsp, bytes_to_blocks(pnor_size) >> 8);
207 rsp_buffer_push(rsp, 0x01); /* erase size */
208 rsp_buffer_push(rsp, 0x00); /* erase size */
209 break;
211 case HIOMAP_C_CREATE_READ_WINDOW:
212 readonly = true;
213 /* Fall through */
215 case HIOMAP_C_CREATE_WRITE_WINDOW:
216 memory_region_set_readonly(&pnor->mmio, readonly);
217 memory_region_set_enabled(&pnor->mmio, true);
219 rsp_buffer_push(rsp, bytes_to_blocks(pnor_addr) & 0xFF);
220 rsp_buffer_push(rsp, bytes_to_blocks(pnor_addr) >> 8);
221 rsp_buffer_push(rsp, bytes_to_blocks(pnor_size) & 0xFF);
222 rsp_buffer_push(rsp, bytes_to_blocks(pnor_size) >> 8);
223 rsp_buffer_push(rsp, 0x00); /* offset */
224 rsp_buffer_push(rsp, 0x00); /* offset */
225 break;
227 case HIOMAP_C_CLOSE_WINDOW:
228 memory_region_set_enabled(&pnor->mmio, false);
229 break;
231 case HIOMAP_C_DEVICE_NAME:
232 case HIOMAP_C_RESET:
233 case HIOMAP_C_LOCK:
234 default:
235 qemu_log_mask(LOG_GUEST_ERROR, "HIOMAP: unknown command %02X\n", cmd[2]);
236 break;
240 #define HIOMAP 0x5a
242 static const IPMICmdHandler hiomap_cmds[] = {
243 [HIOMAP] = { hiomap_cmd, 3 },
246 static const IPMINetfn hiomap_netfn = {
247 .cmd_nums = ARRAY_SIZE(hiomap_cmds),
248 .cmd_handlers = hiomap_cmds
252 void pnv_bmc_set_pnor(IPMIBmc *bmc, PnvPnor *pnor)
254 if (!pnv_bmc_is_simulator(bmc)) {
255 return;
258 object_ref(OBJECT(pnor));
259 object_property_add_const_link(OBJECT(bmc), "pnor", OBJECT(pnor));
261 /* Install the HIOMAP protocol handlers to access the PNOR */
262 ipmi_sim_register_netfn(IPMI_BMC_SIMULATOR(bmc), IPMI_NETFN_OEM,
263 &hiomap_netfn);
267 * Instantiate the machine BMC. PowerNV uses the QEMU internal
268 * simulator but it could also be external.
270 IPMIBmc *pnv_bmc_create(PnvPnor *pnor)
272 DeviceState *dev;
274 dev = qdev_new(TYPE_IPMI_BMC_SIMULATOR);
275 qdev_realize(dev, NULL, &error_fatal);
276 pnv_bmc_set_pnor(IPMI_BMC(dev), pnor);
278 return IPMI_BMC(dev);
281 typedef struct ForeachArgs {
282 const char *name;
283 Object *obj;
284 } ForeachArgs;
286 static int bmc_find(Object *child, void *opaque)
288 ForeachArgs *args = opaque;
290 if (object_dynamic_cast(child, args->name)) {
291 if (args->obj) {
292 return 1;
294 args->obj = child;
296 return 0;
299 IPMIBmc *pnv_bmc_find(Error **errp)
301 ForeachArgs args = { TYPE_IPMI_BMC, NULL };
302 int ret;
304 ret = object_child_foreach_recursive(object_get_root(), bmc_find, &args);
305 if (ret) {
306 error_setg(errp, "machine should have only one BMC device. "
307 "Use '-nodefaults'");
308 return NULL;
311 return args.obj ? IPMI_BMC(args.obj) : NULL;