slirp: update with CVE-2019-14378 fix
[qemu/ar7.git] / hw / ide / piix.c
blobb97e555072e092a68535f0e862d310f404b9e63d
1 /*
2 * QEMU IDE Emulation: PCI PIIX3/4 support.
4 * Copyright (c) 2003 Fabrice Bellard
5 * Copyright (c) 2006 Openedhand Ltd.
7 * Permission is hereby granted, free of charge, to any person obtaining a copy
8 * of this software and associated documentation files (the "Software"), to deal
9 * in the Software without restriction, including without limitation the rights
10 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
11 * copies of the Software, and to permit persons to whom the Software is
12 * furnished to do so, subject to the following conditions:
14 * The above copyright notice and this permission notice shall be included in
15 * all copies or substantial portions of the Software.
17 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
18 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
19 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
20 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
21 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
22 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
23 * THE SOFTWARE.
26 #include "qemu/osdep.h"
27 #include "hw/hw.h"
28 #include "hw/pci/pci.h"
29 #include "qemu/module.h"
30 #include "sysemu/block-backend.h"
31 #include "sysemu/sysemu.h"
32 #include "sysemu/blockdev.h"
33 #include "sysemu/dma.h"
35 #include "hw/ide/pci.h"
36 #include "trace.h"
38 static uint64_t bmdma_read(void *opaque, hwaddr addr, unsigned size)
40 BMDMAState *bm = opaque;
41 uint32_t val;
43 if (size != 1) {
44 return ((uint64_t)1 << (size * 8)) - 1;
47 switch(addr & 3) {
48 case 0:
49 val = bm->cmd;
50 break;
51 case 2:
52 val = bm->status;
53 break;
54 default:
55 val = 0xff;
56 break;
59 trace_bmdma_read(addr, val);
60 return val;
63 static void bmdma_write(void *opaque, hwaddr addr,
64 uint64_t val, unsigned size)
66 BMDMAState *bm = opaque;
68 if (size != 1) {
69 return;
72 trace_bmdma_write(addr, val);
74 switch(addr & 3) {
75 case 0:
76 bmdma_cmd_writeb(bm, val);
77 break;
78 case 2:
79 bm->status = (val & 0x60) | (bm->status & 1) | (bm->status & ~val & 0x06);
80 break;
84 static const MemoryRegionOps piix_bmdma_ops = {
85 .read = bmdma_read,
86 .write = bmdma_write,
89 static void bmdma_setup_bar(PCIIDEState *d)
91 int i;
93 memory_region_init(&d->bmdma_bar, OBJECT(d), "piix-bmdma-container", 16);
94 for(i = 0;i < 2; i++) {
95 BMDMAState *bm = &d->bmdma[i];
97 memory_region_init_io(&bm->extra_io, OBJECT(d), &piix_bmdma_ops, bm,
98 "piix-bmdma", 4);
99 memory_region_add_subregion(&d->bmdma_bar, i * 8, &bm->extra_io);
100 memory_region_init_io(&bm->addr_ioport, OBJECT(d),
101 &bmdma_addr_ioport_ops, bm, "bmdma", 4);
102 memory_region_add_subregion(&d->bmdma_bar, i * 8 + 4, &bm->addr_ioport);
106 static void piix3_reset(void *opaque)
108 PCIIDEState *d = opaque;
109 PCIDevice *pd = PCI_DEVICE(d);
110 uint8_t *pci_conf = pd->config;
111 int i;
113 for (i = 0; i < 2; i++) {
114 ide_bus_reset(&d->bus[i]);
117 /* TODO: this is the default. do not override. */
118 pci_conf[PCI_COMMAND] = 0x00;
119 /* TODO: this is the default. do not override. */
120 pci_conf[PCI_COMMAND + 1] = 0x00;
121 /* TODO: use pci_set_word */
122 pci_conf[PCI_STATUS] = PCI_STATUS_FAST_BACK;
123 pci_conf[PCI_STATUS + 1] = PCI_STATUS_DEVSEL_MEDIUM >> 8;
124 pci_conf[0x20] = 0x01; /* BMIBA: 20-23h */
127 static void pci_piix_init_ports(PCIIDEState *d) {
128 static const struct {
129 int iobase;
130 int iobase2;
131 int isairq;
132 } port_info[] = {
133 {0x1f0, 0x3f6, 14},
134 {0x170, 0x376, 15},
136 int i;
138 for (i = 0; i < 2; i++) {
139 ide_bus_new(&d->bus[i], sizeof(d->bus[i]), DEVICE(d), i, 2);
140 ide_init_ioport(&d->bus[i], NULL, port_info[i].iobase,
141 port_info[i].iobase2);
142 ide_init2(&d->bus[i], isa_get_irq(NULL, port_info[i].isairq));
144 bmdma_init(&d->bus[i], &d->bmdma[i], d);
145 d->bmdma[i].bus = &d->bus[i];
146 ide_register_restart_cb(&d->bus[i]);
150 static void pci_piix_ide_realize(PCIDevice *dev, Error **errp)
152 PCIIDEState *d = PCI_IDE(dev);
153 uint8_t *pci_conf = dev->config;
155 pci_conf[PCI_CLASS_PROG] = 0x80; // legacy ATA mode
157 qemu_register_reset(piix3_reset, d);
159 bmdma_setup_bar(d);
160 pci_register_bar(dev, 4, PCI_BASE_ADDRESS_SPACE_IO, &d->bmdma_bar);
162 vmstate_register(DEVICE(dev), 0, &vmstate_ide_pci, d);
164 pci_piix_init_ports(d);
167 int pci_piix3_xen_ide_unplug(DeviceState *dev, bool aux)
169 PCIIDEState *pci_ide;
170 DriveInfo *di;
171 int i;
172 IDEDevice *idedev;
174 pci_ide = PCI_IDE(dev);
176 for (i = aux ? 1 : 0; i < 4; i++) {
177 di = drive_get_by_index(IF_IDE, i);
178 if (di != NULL && !di->media_cd) {
179 BlockBackend *blk = blk_by_legacy_dinfo(di);
180 DeviceState *ds = blk_get_attached_dev(blk);
182 blk_drain(blk);
183 blk_flush(blk);
185 if (ds) {
186 blk_detach_dev(blk, ds);
188 pci_ide->bus[di->bus].ifs[di->unit].blk = NULL;
189 if (!(i % 2)) {
190 idedev = pci_ide->bus[di->bus].master;
191 } else {
192 idedev = pci_ide->bus[di->bus].slave;
194 idedev->conf.blk = NULL;
195 monitor_remove_blk(blk);
196 blk_unref(blk);
199 qdev_reset_all(DEVICE(dev));
200 return 0;
203 PCIDevice *pci_piix3_xen_ide_init(PCIBus *bus, DriveInfo **hd_table, int devfn)
205 PCIDevice *dev;
207 dev = pci_create_simple(bus, devfn, "piix3-ide-xen");
208 pci_ide_create_devs(dev, hd_table);
209 return dev;
212 static void pci_piix_ide_exitfn(PCIDevice *dev)
214 PCIIDEState *d = PCI_IDE(dev);
215 unsigned i;
217 for (i = 0; i < 2; ++i) {
218 memory_region_del_subregion(&d->bmdma_bar, &d->bmdma[i].extra_io);
219 memory_region_del_subregion(&d->bmdma_bar, &d->bmdma[i].addr_ioport);
223 /* hd_table must contain 4 block drivers */
224 /* NOTE: for the PIIX3, the IRQs and IOports are hardcoded */
225 PCIDevice *pci_piix3_ide_init(PCIBus *bus, DriveInfo **hd_table, int devfn)
227 PCIDevice *dev;
229 dev = pci_create_simple(bus, devfn, "piix3-ide");
230 pci_ide_create_devs(dev, hd_table);
231 return dev;
234 /* hd_table must contain 4 block drivers */
235 /* NOTE: for the PIIX4, the IRQs and IOports are hardcoded */
236 PCIDevice *pci_piix4_ide_init(PCIBus *bus, DriveInfo **hd_table, int devfn)
238 PCIDevice *dev;
240 dev = pci_create_simple(bus, devfn, "piix4-ide");
241 pci_ide_create_devs(dev, hd_table);
242 return dev;
245 static void piix3_ide_class_init(ObjectClass *klass, void *data)
247 DeviceClass *dc = DEVICE_CLASS(klass);
248 PCIDeviceClass *k = PCI_DEVICE_CLASS(klass);
250 k->realize = pci_piix_ide_realize;
251 k->exit = pci_piix_ide_exitfn;
252 k->vendor_id = PCI_VENDOR_ID_INTEL;
253 k->device_id = PCI_DEVICE_ID_INTEL_82371SB_1;
254 k->class_id = PCI_CLASS_STORAGE_IDE;
255 set_bit(DEVICE_CATEGORY_STORAGE, dc->categories);
256 dc->hotpluggable = false;
259 static const TypeInfo piix3_ide_info = {
260 .name = "piix3-ide",
261 .parent = TYPE_PCI_IDE,
262 .class_init = piix3_ide_class_init,
265 static const TypeInfo piix3_ide_xen_info = {
266 .name = "piix3-ide-xen",
267 .parent = TYPE_PCI_IDE,
268 .class_init = piix3_ide_class_init,
271 static void piix4_ide_class_init(ObjectClass *klass, void *data)
273 DeviceClass *dc = DEVICE_CLASS(klass);
274 PCIDeviceClass *k = PCI_DEVICE_CLASS(klass);
276 k->realize = pci_piix_ide_realize;
277 k->exit = pci_piix_ide_exitfn;
278 k->vendor_id = PCI_VENDOR_ID_INTEL;
279 k->device_id = PCI_DEVICE_ID_INTEL_82371AB;
280 k->class_id = PCI_CLASS_STORAGE_IDE;
281 set_bit(DEVICE_CATEGORY_STORAGE, dc->categories);
282 dc->hotpluggable = false;
285 static const TypeInfo piix4_ide_info = {
286 .name = "piix4-ide",
287 .parent = TYPE_PCI_IDE,
288 .class_init = piix4_ide_class_init,
291 static void piix_ide_register_types(void)
293 type_register_static(&piix3_ide_info);
294 type_register_static(&piix3_ide_xen_info);
295 type_register_static(&piix4_ide_info);
298 type_init(piix_ide_register_types)