2 * QEMU sPAPR PCI host originated from Uninorth PCI host
4 * Copyright (c) 2011 Alexey Kardashevskiy, IBM Corporation.
5 * Copyright (C) 2011 David Gibson, IBM Corporation.
7 * Permission is hereby granted, free of charge, to any person obtaining a copy
8 * of this software and associated documentation files (the "Software"), to deal
9 * in the Software without restriction, including without limitation the rights
10 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
11 * copies of the Software, and to permit persons to whom the Software is
12 * furnished to do so, subject to the following conditions:
14 * The above copyright notice and this permission notice shall be included in
15 * all copies or substantial portions of the Software.
17 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
18 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
19 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
20 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
21 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
22 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
26 #include "hw/pci/pci.h"
27 #include "hw/pci/msi.h"
28 #include "hw/pci/msix.h"
29 #include "hw/pci/pci_host.h"
30 #include "hw/ppc/spapr.h"
31 #include "hw/pci-host/spapr.h"
32 #include "exec/address-spaces.h"
36 #include "hw/pci/pci_bus.h"
38 /* Copied from the kernel arch/powerpc/platforms/pseries/msi.c */
39 #define RTAS_QUERY_FN 0
40 #define RTAS_CHANGE_FN 1
41 #define RTAS_RESET_FN 2
42 #define RTAS_CHANGE_MSI_FN 3
43 #define RTAS_CHANGE_MSIX_FN 4
45 /* Interrupt types to return on RTAS_CHANGE_* */
46 #define RTAS_TYPE_MSI 1
47 #define RTAS_TYPE_MSIX 2
49 static sPAPRPHBState
*find_phb(sPAPREnvironment
*spapr
, uint64_t buid
)
53 QLIST_FOREACH(sphb
, &spapr
->phbs
, list
) {
54 if (sphb
->buid
!= buid
) {
63 static PCIDevice
*find_dev(sPAPREnvironment
*spapr
, uint64_t buid
,
66 sPAPRPHBState
*sphb
= find_phb(spapr
, buid
);
67 PCIHostState
*phb
= PCI_HOST_BRIDGE(sphb
);
68 BusState
*bus
= BUS(phb
->bus
);
70 int devfn
= (config_addr
>> 8) & 0xFF;
76 QTAILQ_FOREACH(kid
, &bus
->children
, sibling
) {
77 PCIDevice
*dev
= (PCIDevice
*)kid
->child
;
78 if (dev
->devfn
== devfn
) {
86 static uint32_t rtas_pci_cfgaddr(uint32_t arg
)
88 /* This handles the encoding of extended config space addresses */
89 return ((arg
>> 20) & 0xf00) | (arg
& 0xff);
92 static void finish_read_pci_config(sPAPREnvironment
*spapr
, uint64_t buid
,
93 uint32_t addr
, uint32_t size
,
99 if ((size
!= 1) && (size
!= 2) && (size
!= 4)) {
100 /* access must be 1, 2 or 4 bytes */
101 rtas_st(rets
, 0, -1);
105 pci_dev
= find_dev(spapr
, buid
, addr
);
106 addr
= rtas_pci_cfgaddr(addr
);
108 if (!pci_dev
|| (addr
% size
) || (addr
>= pci_config_size(pci_dev
))) {
109 /* Access must be to a valid device, within bounds and
110 * naturally aligned */
111 rtas_st(rets
, 0, -1);
115 val
= pci_host_config_read_common(pci_dev
, addr
,
116 pci_config_size(pci_dev
), size
);
119 rtas_st(rets
, 1, val
);
122 static void rtas_ibm_read_pci_config(PowerPCCPU
*cpu
, sPAPREnvironment
*spapr
,
123 uint32_t token
, uint32_t nargs
,
125 uint32_t nret
, target_ulong rets
)
130 if ((nargs
!= 4) || (nret
!= 2)) {
131 rtas_st(rets
, 0, -1);
135 buid
= ((uint64_t)rtas_ld(args
, 1) << 32) | rtas_ld(args
, 2);
136 size
= rtas_ld(args
, 3);
137 addr
= rtas_ld(args
, 0);
139 finish_read_pci_config(spapr
, buid
, addr
, size
, rets
);
142 static void rtas_read_pci_config(PowerPCCPU
*cpu
, sPAPREnvironment
*spapr
,
143 uint32_t token
, uint32_t nargs
,
145 uint32_t nret
, target_ulong rets
)
149 if ((nargs
!= 2) || (nret
!= 2)) {
150 rtas_st(rets
, 0, -1);
154 size
= rtas_ld(args
, 1);
155 addr
= rtas_ld(args
, 0);
157 finish_read_pci_config(spapr
, 0, addr
, size
, rets
);
160 static void finish_write_pci_config(sPAPREnvironment
*spapr
, uint64_t buid
,
161 uint32_t addr
, uint32_t size
,
162 uint32_t val
, target_ulong rets
)
166 if ((size
!= 1) && (size
!= 2) && (size
!= 4)) {
167 /* access must be 1, 2 or 4 bytes */
168 rtas_st(rets
, 0, -1);
172 pci_dev
= find_dev(spapr
, buid
, addr
);
173 addr
= rtas_pci_cfgaddr(addr
);
175 if (!pci_dev
|| (addr
% size
) || (addr
>= pci_config_size(pci_dev
))) {
176 /* Access must be to a valid device, within bounds and
177 * naturally aligned */
178 rtas_st(rets
, 0, -1);
182 pci_host_config_write_common(pci_dev
, addr
, pci_config_size(pci_dev
),
188 static void rtas_ibm_write_pci_config(PowerPCCPU
*cpu
, sPAPREnvironment
*spapr
,
189 uint32_t token
, uint32_t nargs
,
191 uint32_t nret
, target_ulong rets
)
194 uint32_t val
, size
, addr
;
196 if ((nargs
!= 5) || (nret
!= 1)) {
197 rtas_st(rets
, 0, -1);
201 buid
= ((uint64_t)rtas_ld(args
, 1) << 32) | rtas_ld(args
, 2);
202 val
= rtas_ld(args
, 4);
203 size
= rtas_ld(args
, 3);
204 addr
= rtas_ld(args
, 0);
206 finish_write_pci_config(spapr
, buid
, addr
, size
, val
, rets
);
209 static void rtas_write_pci_config(PowerPCCPU
*cpu
, sPAPREnvironment
*spapr
,
210 uint32_t token
, uint32_t nargs
,
212 uint32_t nret
, target_ulong rets
)
214 uint32_t val
, size
, addr
;
216 if ((nargs
!= 3) || (nret
!= 1)) {
217 rtas_st(rets
, 0, -1);
222 val
= rtas_ld(args
, 2);
223 size
= rtas_ld(args
, 1);
224 addr
= rtas_ld(args
, 0);
226 finish_write_pci_config(spapr
, 0, addr
, size
, val
, rets
);
230 * Find an entry with config_addr or returns the empty one if not found AND
232 * At the moment the msi_table entries are never released so there is
233 * no point to look till the end of the list if we need to find the free entry.
235 static int spapr_msicfg_find(sPAPRPHBState
*phb
, uint32_t config_addr
,
240 for (i
= 0; i
< SPAPR_MSIX_MAX_DEVS
; ++i
) {
241 if (!phb
->msi_table
[i
].nvec
) {
244 if (phb
->msi_table
[i
].config_addr
== config_addr
) {
248 if ((i
< SPAPR_MSIX_MAX_DEVS
) && alloc_new
) {
249 trace_spapr_pci_msi("Allocating new MSI config", i
, config_addr
);
257 * Set MSI/MSIX message data.
258 * This is required for msi_notify()/msix_notify() which
259 * will write at the addresses via spapr_msi_write().
261 static void spapr_msi_setmsg(PCIDevice
*pdev
, hwaddr addr
,
262 bool msix
, unsigned req_num
)
265 MSIMessage msg
= { .address
= addr
, .data
= 0 };
268 msi_set_message(pdev
, msg
);
269 trace_spapr_pci_msi_setup(pdev
->name
, 0, msg
.address
);
273 for (i
= 0; i
< req_num
; ++i
) {
274 msg
.address
= addr
| (i
<< 2);
275 msix_set_message(pdev
, i
, msg
);
276 trace_spapr_pci_msi_setup(pdev
->name
, i
, msg
.address
);
280 static void rtas_ibm_change_msi(PowerPCCPU
*cpu
, sPAPREnvironment
*spapr
,
281 uint32_t token
, uint32_t nargs
,
282 target_ulong args
, uint32_t nret
,
285 uint32_t config_addr
= rtas_ld(args
, 0);
286 uint64_t buid
= ((uint64_t)rtas_ld(args
, 1) << 32) | rtas_ld(args
, 2);
287 unsigned int func
= rtas_ld(args
, 3);
288 unsigned int req_num
= rtas_ld(args
, 4); /* 0 == remove all */
289 unsigned int seq_num
= rtas_ld(args
, 5);
290 unsigned int ret_intr_type
;
292 sPAPRPHBState
*phb
= NULL
;
293 PCIDevice
*pdev
= NULL
;
296 case RTAS_CHANGE_MSI_FN
:
298 ret_intr_type
= RTAS_TYPE_MSI
;
300 case RTAS_CHANGE_MSIX_FN
:
301 ret_intr_type
= RTAS_TYPE_MSIX
;
304 fprintf(stderr
, "rtas_ibm_change_msi(%u) is not implemented\n", func
);
305 rtas_st(rets
, 0, -3); /* Parameter error */
309 /* Fins sPAPRPHBState */
310 phb
= find_phb(spapr
, buid
);
312 pdev
= find_dev(spapr
, buid
, config_addr
);
315 rtas_st(rets
, 0, -3); /* Parameter error */
321 ndev
= spapr_msicfg_find(phb
, config_addr
, false);
323 trace_spapr_pci_msi("MSI has not been enabled", -1, config_addr
);
324 rtas_st(rets
, 0, -1); /* Hardware error */
327 trace_spapr_pci_msi("Released MSIs", ndev
, config_addr
);
335 /* Find a device number in the map to add or reuse the existing one */
336 ndev
= spapr_msicfg_find(phb
, config_addr
, true);
337 if (ndev
>= SPAPR_MSIX_MAX_DEVS
|| ndev
< 0) {
338 fprintf(stderr
, "No free entry for a new MSI device\n");
339 rtas_st(rets
, 0, -1); /* Hardware error */
342 trace_spapr_pci_msi("Configuring MSI", ndev
, config_addr
);
344 /* Check if there is an old config and MSI number has not changed */
345 if (phb
->msi_table
[ndev
].nvec
&& (req_num
!= phb
->msi_table
[ndev
].nvec
)) {
346 /* Unexpected behaviour */
347 fprintf(stderr
, "Cannot reuse MSI config for device#%d", ndev
);
348 rtas_st(rets
, 0, -1); /* Hardware error */
352 /* There is no cached config, allocate MSIs */
353 if (!phb
->msi_table
[ndev
].nvec
) {
354 irq
= spapr_allocate_irq_block(req_num
, false);
356 fprintf(stderr
, "Cannot allocate MSIs for device#%d", ndev
);
357 rtas_st(rets
, 0, -1); /* Hardware error */
360 phb
->msi_table
[ndev
].irq
= irq
;
361 phb
->msi_table
[ndev
].nvec
= req_num
;
362 phb
->msi_table
[ndev
].config_addr
= config_addr
;
365 /* Setup MSI/MSIX vectors in the device (via cfgspace or MSIX BAR) */
366 spapr_msi_setmsg(pdev
, phb
->msi_win_addr
| (ndev
<< 16),
367 ret_intr_type
== RTAS_TYPE_MSIX
, req_num
);
370 rtas_st(rets
, 1, req_num
);
371 rtas_st(rets
, 2, ++seq_num
);
372 rtas_st(rets
, 3, ret_intr_type
);
374 trace_spapr_pci_rtas_ibm_change_msi(func
, req_num
);
377 static void rtas_ibm_query_interrupt_source_number(PowerPCCPU
*cpu
,
378 sPAPREnvironment
*spapr
,
385 uint32_t config_addr
= rtas_ld(args
, 0);
386 uint64_t buid
= ((uint64_t)rtas_ld(args
, 1) << 32) | rtas_ld(args
, 2);
387 unsigned int intr_src_num
= -1, ioa_intr_num
= rtas_ld(args
, 3);
389 sPAPRPHBState
*phb
= NULL
;
391 /* Fins sPAPRPHBState */
392 phb
= find_phb(spapr
, buid
);
394 rtas_st(rets
, 0, -3); /* Parameter error */
398 /* Find device descriptor and start IRQ */
399 ndev
= spapr_msicfg_find(phb
, config_addr
, false);
401 trace_spapr_pci_msi("MSI has not been enabled", -1, config_addr
);
402 rtas_st(rets
, 0, -1); /* Hardware error */
406 intr_src_num
= phb
->msi_table
[ndev
].irq
+ ioa_intr_num
;
407 trace_spapr_pci_rtas_ibm_query_interrupt_source_number(ioa_intr_num
,
411 rtas_st(rets
, 1, intr_src_num
);
412 rtas_st(rets
, 2, 1);/* 0 == level; 1 == edge */
415 static int pci_spapr_swizzle(int slot
, int pin
)
417 return (slot
+ pin
) % PCI_NUM_PINS
;
420 static int pci_spapr_map_irq(PCIDevice
*pci_dev
, int irq_num
)
423 * Here we need to convert pci_dev + irq_num to some unique value
424 * which is less than number of IRQs on the specific bus (4). We
425 * use standard PCI swizzling, that is (slot number + pin number)
428 return pci_spapr_swizzle(PCI_SLOT(pci_dev
->devfn
), irq_num
);
431 static void pci_spapr_set_irq(void *opaque
, int irq_num
, int level
)
434 * Here we use the number returned by pci_spapr_map_irq to find a
435 * corresponding qemu_irq.
437 sPAPRPHBState
*phb
= opaque
;
439 trace_spapr_pci_lsi_set(phb
->dtbusname
, irq_num
, phb
->lsi_table
[irq_num
].irq
);
440 qemu_set_irq(spapr_phb_lsi_qirq(phb
, irq_num
), level
);
444 * MSI/MSIX memory region implementation.
445 * The handler handles both MSI and MSIX.
446 * For MSI-X, the vector number is encoded as a part of the address,
448 * For MSI, the vector number is encoded in least bits in data.
450 static void spapr_msi_write(void *opaque
, hwaddr addr
,
451 uint64_t data
, unsigned size
)
453 sPAPRPHBState
*phb
= opaque
;
454 int ndev
= addr
>> 16;
455 int vec
= ((addr
& 0xFFFF) >> 2) | data
;
456 uint32_t irq
= phb
->msi_table
[ndev
].irq
+ vec
;
458 trace_spapr_pci_msi_write(addr
, data
, irq
);
460 qemu_irq_pulse(xics_get_qirq(spapr
->icp
, irq
));
463 static const MemoryRegionOps spapr_msi_ops
= {
464 /* There is no .read as the read result is undefined by PCI spec */
466 .write
= spapr_msi_write
,
467 .endianness
= DEVICE_LITTLE_ENDIAN
473 static AddressSpace
*spapr_pci_dma_iommu(PCIBus
*bus
, void *opaque
, int devfn
)
475 sPAPRPHBState
*phb
= opaque
;
477 return &phb
->iommu_as
;
480 static int spapr_phb_init(SysBusDevice
*s
)
482 sPAPRPHBState
*sphb
= SPAPR_PCI_HOST_BRIDGE(s
);
483 PCIHostState
*phb
= PCI_HOST_BRIDGE(s
);
489 if (sphb
->index
!= -1) {
492 if ((sphb
->buid
!= -1) || (sphb
->dma_liobn
!= -1)
493 || (sphb
->mem_win_addr
!= -1)
494 || (sphb
->io_win_addr
!= -1)
495 || (sphb
->msi_win_addr
!= -1)) {
496 fprintf(stderr
, "Either \"index\" or other parameters must"
497 " be specified for PAPR PHB, not both\n");
501 sphb
->buid
= SPAPR_PCI_BASE_BUID
+ sphb
->index
;
502 sphb
->dma_liobn
= SPAPR_PCI_BASE_LIOBN
+ sphb
->index
;
504 windows_base
= SPAPR_PCI_WINDOW_BASE
505 + sphb
->index
* SPAPR_PCI_WINDOW_SPACING
;
506 sphb
->mem_win_addr
= windows_base
+ SPAPR_PCI_MMIO_WIN_OFF
;
507 sphb
->io_win_addr
= windows_base
+ SPAPR_PCI_IO_WIN_OFF
;
508 sphb
->msi_win_addr
= windows_base
+ SPAPR_PCI_MSI_WIN_OFF
;
511 if (sphb
->buid
== -1) {
512 fprintf(stderr
, "BUID not specified for PHB\n");
516 if (sphb
->dma_liobn
== -1) {
517 fprintf(stderr
, "LIOBN not specified for PHB\n");
521 if (sphb
->mem_win_addr
== -1) {
522 fprintf(stderr
, "Memory window address not specified for PHB\n");
526 if (sphb
->io_win_addr
== -1) {
527 fprintf(stderr
, "IO window address not specified for PHB\n");
531 if (sphb
->msi_win_addr
== -1) {
532 fprintf(stderr
, "MSI window address not specified for PHB\n");
536 if (find_phb(spapr
, sphb
->buid
)) {
537 fprintf(stderr
, "PCI host bridges must have unique BUIDs\n");
541 sphb
->dtbusname
= g_strdup_printf("pci@%" PRIx64
, sphb
->buid
);
543 namebuf
= alloca(strlen(sphb
->dtbusname
) + 32);
545 /* Initialize memory regions */
546 sprintf(namebuf
, "%s.mmio", sphb
->dtbusname
);
547 memory_region_init(&sphb
->memspace
, OBJECT(sphb
), namebuf
, INT64_MAX
);
549 sprintf(namebuf
, "%s.mmio-alias", sphb
->dtbusname
);
550 memory_region_init_alias(&sphb
->memwindow
, OBJECT(sphb
),
551 namebuf
, &sphb
->memspace
,
552 SPAPR_PCI_MEM_WIN_BUS_OFFSET
, sphb
->mem_win_size
);
553 memory_region_add_subregion(get_system_memory(), sphb
->mem_win_addr
,
556 /* On ppc, we only have MMIO no specific IO space from the CPU
557 * perspective. In theory we ought to be able to embed the PCI IO
558 * memory region direction in the system memory space. However,
559 * if any of the IO BAR subregions use the old_portio mechanism,
560 * that won't be processed properly unless accessed from the
561 * system io address space. This hack to bounce things via
562 * system_io works around the problem until all the users of
563 * old_portion are updated */
564 sprintf(namebuf
, "%s.io", sphb
->dtbusname
);
565 memory_region_init(&sphb
->iospace
, OBJECT(sphb
),
566 namebuf
, SPAPR_PCI_IO_WIN_SIZE
);
567 /* FIXME: fix to support multiple PHBs */
568 memory_region_add_subregion(get_system_io(), 0, &sphb
->iospace
);
570 sprintf(namebuf
, "%s.io-alias", sphb
->dtbusname
);
571 memory_region_init_alias(&sphb
->iowindow
, OBJECT(sphb
), namebuf
,
572 get_system_io(), 0, SPAPR_PCI_IO_WIN_SIZE
);
573 memory_region_add_subregion(get_system_memory(), sphb
->io_win_addr
,
576 /* As MSI/MSIX interrupts trigger by writing at MSI/MSIX vectors,
577 * we need to allocate some memory to catch those writes coming
578 * from msi_notify()/msix_notify() */
580 sprintf(namebuf
, "%s.msi", sphb
->dtbusname
);
581 memory_region_init_io(&sphb
->msiwindow
, OBJECT(sphb
), &spapr_msi_ops
, sphb
,
582 namebuf
, SPAPR_MSIX_MAX_DEVS
* 0x10000);
583 memory_region_add_subregion(get_system_memory(), sphb
->msi_win_addr
,
588 * Selecting a busname is more complex than you'd think, due to
589 * interacting constraints. If the user has specified an id
590 * explicitly for the phb , then we want to use the qdev default
591 * of naming the bus based on the bridge device (so the user can
592 * then assign devices to it in the way they expect). For the
593 * first / default PCI bus (index=0) we want to use just "pci"
594 * because libvirt expects there to be a bus called, simply,
595 * "pci". Otherwise, we use the same name as in the device tree,
596 * since it's unique by construction, and makes the guest visible
601 } else if (sphb
->index
== 0) {
604 busname
= sphb
->dtbusname
;
606 bus
= pci_register_bus(DEVICE(s
), busname
,
607 pci_spapr_set_irq
, pci_spapr_map_irq
, sphb
,
608 &sphb
->memspace
, &sphb
->iospace
,
609 PCI_DEVFN(0, 0), PCI_NUM_PINS
, TYPE_PCI_BUS
);
612 sphb
->dma_window_start
= 0;
613 sphb
->dma_window_size
= 0x40000000;
614 sphb
->tcet
= spapr_tce_new_table(DEVICE(sphb
), sphb
->dma_liobn
,
615 sphb
->dma_window_size
);
617 fprintf(stderr
, "Unable to create TCE table for %s\n", sphb
->dtbusname
);
620 address_space_init(&sphb
->iommu_as
, spapr_tce_get_iommu(sphb
->tcet
),
623 pci_setup_iommu(bus
, spapr_pci_dma_iommu
, sphb
);
625 QLIST_INSERT_HEAD(&spapr
->phbs
, sphb
, list
);
627 /* Initialize the LSI table */
628 for (i
= 0; i
< PCI_NUM_PINS
; i
++) {
631 irq
= spapr_allocate_lsi(0);
636 sphb
->lsi_table
[i
].irq
= irq
;
642 static void spapr_phb_reset(DeviceState
*qdev
)
644 SysBusDevice
*s
= SYS_BUS_DEVICE(qdev
);
645 sPAPRPHBState
*sphb
= SPAPR_PCI_HOST_BRIDGE(s
);
647 /* Reset the IOMMU state */
648 device_reset(DEVICE(sphb
->tcet
));
651 static Property spapr_phb_properties
[] = {
652 DEFINE_PROP_INT32("index", sPAPRPHBState
, index
, -1),
653 DEFINE_PROP_HEX64("buid", sPAPRPHBState
, buid
, -1),
654 DEFINE_PROP_HEX32("liobn", sPAPRPHBState
, dma_liobn
, -1),
655 DEFINE_PROP_HEX64("mem_win_addr", sPAPRPHBState
, mem_win_addr
, -1),
656 DEFINE_PROP_HEX64("mem_win_size", sPAPRPHBState
, mem_win_size
,
657 SPAPR_PCI_MMIO_WIN_SIZE
),
658 DEFINE_PROP_HEX64("io_win_addr", sPAPRPHBState
, io_win_addr
, -1),
659 DEFINE_PROP_HEX64("io_win_size", sPAPRPHBState
, io_win_size
,
660 SPAPR_PCI_IO_WIN_SIZE
),
661 DEFINE_PROP_HEX64("msi_win_addr", sPAPRPHBState
, msi_win_addr
, -1),
662 DEFINE_PROP_END_OF_LIST(),
665 static const VMStateDescription vmstate_spapr_pci_lsi
= {
666 .name
= "spapr_pci/lsi",
668 .minimum_version_id
= 1,
669 .minimum_version_id_old
= 1,
670 .fields
= (VMStateField
[]) {
671 VMSTATE_UINT32_EQUAL(irq
, struct spapr_pci_lsi
),
673 VMSTATE_END_OF_LIST()
677 static const VMStateDescription vmstate_spapr_pci_msi
= {
678 .name
= "spapr_pci/lsi",
680 .minimum_version_id
= 1,
681 .minimum_version_id_old
= 1,
682 .fields
= (VMStateField
[]) {
683 VMSTATE_UINT32(config_addr
, struct spapr_pci_msi
),
684 VMSTATE_UINT32(irq
, struct spapr_pci_msi
),
685 VMSTATE_UINT32(nvec
, struct spapr_pci_msi
),
687 VMSTATE_END_OF_LIST()
691 static const VMStateDescription vmstate_spapr_pci
= {
694 .minimum_version_id
= 1,
695 .minimum_version_id_old
= 1,
696 .fields
= (VMStateField
[]) {
697 VMSTATE_UINT64_EQUAL(buid
, sPAPRPHBState
),
698 VMSTATE_UINT32_EQUAL(dma_liobn
, sPAPRPHBState
),
699 VMSTATE_UINT64_EQUAL(mem_win_addr
, sPAPRPHBState
),
700 VMSTATE_UINT64_EQUAL(mem_win_size
, sPAPRPHBState
),
701 VMSTATE_UINT64_EQUAL(io_win_addr
, sPAPRPHBState
),
702 VMSTATE_UINT64_EQUAL(io_win_size
, sPAPRPHBState
),
703 VMSTATE_UINT64_EQUAL(msi_win_addr
, sPAPRPHBState
),
704 VMSTATE_STRUCT_ARRAY(lsi_table
, sPAPRPHBState
, PCI_NUM_PINS
, 0,
705 vmstate_spapr_pci_lsi
, struct spapr_pci_lsi
),
706 VMSTATE_STRUCT_ARRAY(msi_table
, sPAPRPHBState
, SPAPR_MSIX_MAX_DEVS
, 0,
707 vmstate_spapr_pci_msi
, struct spapr_pci_msi
),
709 VMSTATE_END_OF_LIST()
713 static const char *spapr_phb_root_bus_path(PCIHostState
*host_bridge
,
716 sPAPRPHBState
*sphb
= SPAPR_PCI_HOST_BRIDGE(host_bridge
);
718 return sphb
->dtbusname
;
721 static void spapr_phb_class_init(ObjectClass
*klass
, void *data
)
723 PCIHostBridgeClass
*hc
= PCI_HOST_BRIDGE_CLASS(klass
);
724 SysBusDeviceClass
*sdc
= SYS_BUS_DEVICE_CLASS(klass
);
725 DeviceClass
*dc
= DEVICE_CLASS(klass
);
727 hc
->root_bus_path
= spapr_phb_root_bus_path
;
728 sdc
->init
= spapr_phb_init
;
729 dc
->props
= spapr_phb_properties
;
730 dc
->reset
= spapr_phb_reset
;
731 dc
->vmsd
= &vmstate_spapr_pci
;
734 static const TypeInfo spapr_phb_info
= {
735 .name
= TYPE_SPAPR_PCI_HOST_BRIDGE
,
736 .parent
= TYPE_PCI_HOST_BRIDGE
,
737 .instance_size
= sizeof(sPAPRPHBState
),
738 .class_init
= spapr_phb_class_init
,
741 PCIHostState
*spapr_create_phb(sPAPREnvironment
*spapr
, int index
)
745 dev
= qdev_create(NULL
, TYPE_SPAPR_PCI_HOST_BRIDGE
);
746 qdev_prop_set_uint32(dev
, "index", index
);
747 qdev_init_nofail(dev
);
749 return PCI_HOST_BRIDGE(dev
);
752 /* Macros to operate with address in OF binding to PCI */
753 #define b_x(x, p, l) (((x) & ((1<<(l))-1)) << (p))
754 #define b_n(x) b_x((x), 31, 1) /* 0 if relocatable */
755 #define b_p(x) b_x((x), 30, 1) /* 1 if prefetchable */
756 #define b_t(x) b_x((x), 29, 1) /* 1 if the address is aliased */
757 #define b_ss(x) b_x((x), 24, 2) /* the space code */
758 #define b_bbbbbbbb(x) b_x((x), 16, 8) /* bus number */
759 #define b_ddddd(x) b_x((x), 11, 5) /* device number */
760 #define b_fff(x) b_x((x), 8, 3) /* function number */
761 #define b_rrrrrrrr(x) b_x((x), 0, 8) /* register number */
763 int spapr_populate_pci_dt(sPAPRPHBState
*phb
,
764 uint32_t xics_phandle
,
769 uint32_t bus_range
[] = { cpu_to_be32(0), cpu_to_be32(0xff) };
775 } QEMU_PACKED ranges
[] = {
777 cpu_to_be32(b_ss(1)), cpu_to_be64(0),
778 cpu_to_be64(phb
->io_win_addr
),
779 cpu_to_be64(memory_region_size(&phb
->iospace
)),
782 cpu_to_be32(b_ss(2)), cpu_to_be64(SPAPR_PCI_MEM_WIN_BUS_OFFSET
),
783 cpu_to_be64(phb
->mem_win_addr
),
784 cpu_to_be64(memory_region_size(&phb
->memwindow
)),
787 uint64_t bus_reg
[] = { cpu_to_be64(phb
->buid
), 0 };
788 uint32_t interrupt_map_mask
[] = {
789 cpu_to_be32(b_ddddd(-1)|b_fff(0)), 0x0, 0x0, cpu_to_be32(-1)};
790 uint32_t interrupt_map
[PCI_SLOT_MAX
* PCI_NUM_PINS
][7];
792 /* Start populating the FDT */
793 sprintf(nodename
, "pci@%" PRIx64
, phb
->buid
);
794 bus_off
= fdt_add_subnode(fdt
, 0, nodename
);
807 /* Write PHB properties */
808 _FDT(fdt_setprop_string(fdt
, bus_off
, "device_type", "pci"));
809 _FDT(fdt_setprop_string(fdt
, bus_off
, "compatible", "IBM,Logical_PHB"));
810 _FDT(fdt_setprop_cell(fdt
, bus_off
, "#address-cells", 0x3));
811 _FDT(fdt_setprop_cell(fdt
, bus_off
, "#size-cells", 0x2));
812 _FDT(fdt_setprop_cell(fdt
, bus_off
, "#interrupt-cells", 0x1));
813 _FDT(fdt_setprop(fdt
, bus_off
, "used-by-rtas", NULL
, 0));
814 _FDT(fdt_setprop(fdt
, bus_off
, "bus-range", &bus_range
, sizeof(bus_range
)));
815 _FDT(fdt_setprop(fdt
, bus_off
, "ranges", &ranges
, sizeof(ranges
)));
816 _FDT(fdt_setprop(fdt
, bus_off
, "reg", &bus_reg
, sizeof(bus_reg
)));
817 _FDT(fdt_setprop_cell(fdt
, bus_off
, "ibm,pci-config-space-type", 0x1));
819 /* Build the interrupt-map, this must matches what is done
820 * in pci_spapr_map_irq
822 _FDT(fdt_setprop(fdt
, bus_off
, "interrupt-map-mask",
823 &interrupt_map_mask
, sizeof(interrupt_map_mask
)));
824 for (i
= 0; i
< PCI_SLOT_MAX
; i
++) {
825 for (j
= 0; j
< PCI_NUM_PINS
; j
++) {
826 uint32_t *irqmap
= interrupt_map
[i
*PCI_NUM_PINS
+ j
];
827 int lsi_num
= pci_spapr_swizzle(i
, j
);
829 irqmap
[0] = cpu_to_be32(b_ddddd(i
)|b_fff(0));
832 irqmap
[3] = cpu_to_be32(j
+1);
833 irqmap
[4] = cpu_to_be32(xics_phandle
);
834 irqmap
[5] = cpu_to_be32(phb
->lsi_table
[lsi_num
].irq
);
835 irqmap
[6] = cpu_to_be32(0x8);
838 /* Write interrupt map */
839 _FDT(fdt_setprop(fdt
, bus_off
, "interrupt-map", &interrupt_map
,
840 sizeof(interrupt_map
)));
842 spapr_dma_dt(fdt
, bus_off
, "ibm,dma-window",
843 phb
->dma_liobn
, phb
->dma_window_start
,
844 phb
->dma_window_size
);
849 void spapr_pci_rtas_init(void)
851 spapr_rtas_register("read-pci-config", rtas_read_pci_config
);
852 spapr_rtas_register("write-pci-config", rtas_write_pci_config
);
853 spapr_rtas_register("ibm,read-pci-config", rtas_ibm_read_pci_config
);
854 spapr_rtas_register("ibm,write-pci-config", rtas_ibm_write_pci_config
);
856 spapr_rtas_register("ibm,query-interrupt-source-number",
857 rtas_ibm_query_interrupt_source_number
);
858 spapr_rtas_register("ibm,change-msi", rtas_ibm_change_msi
);
862 static void spapr_pci_register_types(void)
864 type_register_static(&spapr_phb_info
);
867 type_init(spapr_pci_register_types
)