Update Sparc parts in documentation
[qemu/qemu_0_9_1_stable.git] / hw / ppc405_uc.c
blob2857a1255e934ea559515fd2bdd37f213acfd2e2
1 /*
2 * QEMU PowerPC 405 embedded processors emulation
4 * Copyright (c) 2007 Jocelyn Mayer
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
24 #include "vl.h"
25 #include "ppc405.h"
27 extern int loglevel;
28 extern FILE *logfile;
30 #define DEBUG_OPBA
31 #define DEBUG_SDRAM
32 #define DEBUG_GPIO
33 #define DEBUG_SERIAL
34 #define DEBUG_OCM
35 //#define DEBUG_I2C
36 #define DEBUG_GPT
37 #define DEBUG_MAL
38 #define DEBUG_CLOCKS
39 //#define DEBUG_UNASSIGNED
41 ram_addr_t ppc405_set_bootinfo (CPUState *env, ppc4xx_bd_info_t *bd,
42 uint32_t flags)
44 ram_addr_t bdloc;
45 int i, n;
47 /* We put the bd structure at the top of memory */
48 if (bd->bi_memsize >= 0x01000000UL)
49 bdloc = 0x01000000UL - sizeof(struct ppc4xx_bd_info_t);
50 else
51 bdloc = bd->bi_memsize - sizeof(struct ppc4xx_bd_info_t);
52 stl_raw(phys_ram_base + bdloc + 0x00, bd->bi_memstart);
53 stl_raw(phys_ram_base + bdloc + 0x04, bd->bi_memsize);
54 stl_raw(phys_ram_base + bdloc + 0x08, bd->bi_flashstart);
55 stl_raw(phys_ram_base + bdloc + 0x0C, bd->bi_flashsize);
56 stl_raw(phys_ram_base + bdloc + 0x10, bd->bi_flashoffset);
57 stl_raw(phys_ram_base + bdloc + 0x14, bd->bi_sramstart);
58 stl_raw(phys_ram_base + bdloc + 0x18, bd->bi_sramsize);
59 stl_raw(phys_ram_base + bdloc + 0x1C, bd->bi_bootflags);
60 stl_raw(phys_ram_base + bdloc + 0x20, bd->bi_ipaddr);
61 for (i = 0; i < 6; i++)
62 stb_raw(phys_ram_base + bdloc + 0x24 + i, bd->bi_enetaddr[i]);
63 stw_raw(phys_ram_base + bdloc + 0x2A, bd->bi_ethspeed);
64 stl_raw(phys_ram_base + bdloc + 0x2C, bd->bi_intfreq);
65 stl_raw(phys_ram_base + bdloc + 0x30, bd->bi_busfreq);
66 stl_raw(phys_ram_base + bdloc + 0x34, bd->bi_baudrate);
67 for (i = 0; i < 4; i++)
68 stb_raw(phys_ram_base + bdloc + 0x38 + i, bd->bi_s_version[i]);
69 for (i = 0; i < 32; i++)
70 stb_raw(phys_ram_base + bdloc + 0x3C + i, bd->bi_s_version[i]);
71 stl_raw(phys_ram_base + bdloc + 0x5C, bd->bi_plb_busfreq);
72 stl_raw(phys_ram_base + bdloc + 0x60, bd->bi_pci_busfreq);
73 for (i = 0; i < 6; i++)
74 stb_raw(phys_ram_base + bdloc + 0x64 + i, bd->bi_pci_enetaddr[i]);
75 n = 0x6A;
76 if (flags & 0x00000001) {
77 for (i = 0; i < 6; i++)
78 stb_raw(phys_ram_base + bdloc + n++, bd->bi_pci_enetaddr2[i]);
80 stl_raw(phys_ram_base + bdloc + n, bd->bi_opbfreq);
81 n += 4;
82 for (i = 0; i < 2; i++) {
83 stl_raw(phys_ram_base + bdloc + n, bd->bi_iic_fast[i]);
84 n += 4;
87 return bdloc;
90 /*****************************************************************************/
91 /* Shared peripherals */
93 /*****************************************************************************/
94 /* Peripheral local bus arbitrer */
95 enum {
96 PLB0_BESR = 0x084,
97 PLB0_BEAR = 0x086,
98 PLB0_ACR = 0x087,
101 typedef struct ppc4xx_plb_t ppc4xx_plb_t;
102 struct ppc4xx_plb_t {
103 uint32_t acr;
104 uint32_t bear;
105 uint32_t besr;
108 static target_ulong dcr_read_plb (void *opaque, int dcrn)
110 ppc4xx_plb_t *plb;
111 target_ulong ret;
113 plb = opaque;
114 switch (dcrn) {
115 case PLB0_ACR:
116 ret = plb->acr;
117 break;
118 case PLB0_BEAR:
119 ret = plb->bear;
120 break;
121 case PLB0_BESR:
122 ret = plb->besr;
123 break;
124 default:
125 /* Avoid gcc warning */
126 ret = 0;
127 break;
130 return ret;
133 static void dcr_write_plb (void *opaque, int dcrn, target_ulong val)
135 ppc4xx_plb_t *plb;
137 plb = opaque;
138 switch (dcrn) {
139 case PLB0_ACR:
140 /* We don't care about the actual parameters written as
141 * we don't manage any priorities on the bus
143 plb->acr = val & 0xF8000000;
144 break;
145 case PLB0_BEAR:
146 /* Read only */
147 break;
148 case PLB0_BESR:
149 /* Write-clear */
150 plb->besr &= ~val;
151 break;
155 static void ppc4xx_plb_reset (void *opaque)
157 ppc4xx_plb_t *plb;
159 plb = opaque;
160 plb->acr = 0x00000000;
161 plb->bear = 0x00000000;
162 plb->besr = 0x00000000;
165 void ppc4xx_plb_init (CPUState *env)
167 ppc4xx_plb_t *plb;
169 plb = qemu_mallocz(sizeof(ppc4xx_plb_t));
170 if (plb != NULL) {
171 ppc_dcr_register(env, PLB0_ACR, plb, &dcr_read_plb, &dcr_write_plb);
172 ppc_dcr_register(env, PLB0_BEAR, plb, &dcr_read_plb, &dcr_write_plb);
173 ppc_dcr_register(env, PLB0_BESR, plb, &dcr_read_plb, &dcr_write_plb);
174 ppc4xx_plb_reset(plb);
175 qemu_register_reset(ppc4xx_plb_reset, plb);
179 /*****************************************************************************/
180 /* PLB to OPB bridge */
181 enum {
182 POB0_BESR0 = 0x0A0,
183 POB0_BESR1 = 0x0A2,
184 POB0_BEAR = 0x0A4,
187 typedef struct ppc4xx_pob_t ppc4xx_pob_t;
188 struct ppc4xx_pob_t {
189 uint32_t bear;
190 uint32_t besr[2];
193 static target_ulong dcr_read_pob (void *opaque, int dcrn)
195 ppc4xx_pob_t *pob;
196 target_ulong ret;
198 pob = opaque;
199 switch (dcrn) {
200 case POB0_BEAR:
201 ret = pob->bear;
202 break;
203 case POB0_BESR0:
204 case POB0_BESR1:
205 ret = pob->besr[dcrn - POB0_BESR0];
206 break;
207 default:
208 /* Avoid gcc warning */
209 ret = 0;
210 break;
213 return ret;
216 static void dcr_write_pob (void *opaque, int dcrn, target_ulong val)
218 ppc4xx_pob_t *pob;
220 pob = opaque;
221 switch (dcrn) {
222 case POB0_BEAR:
223 /* Read only */
224 break;
225 case POB0_BESR0:
226 case POB0_BESR1:
227 /* Write-clear */
228 pob->besr[dcrn - POB0_BESR0] &= ~val;
229 break;
233 static void ppc4xx_pob_reset (void *opaque)
235 ppc4xx_pob_t *pob;
237 pob = opaque;
238 /* No error */
239 pob->bear = 0x00000000;
240 pob->besr[0] = 0x0000000;
241 pob->besr[1] = 0x0000000;
244 void ppc4xx_pob_init (CPUState *env)
246 ppc4xx_pob_t *pob;
248 pob = qemu_mallocz(sizeof(ppc4xx_pob_t));
249 if (pob != NULL) {
250 ppc_dcr_register(env, POB0_BEAR, pob, &dcr_read_pob, &dcr_write_pob);
251 ppc_dcr_register(env, POB0_BESR0, pob, &dcr_read_pob, &dcr_write_pob);
252 ppc_dcr_register(env, POB0_BESR1, pob, &dcr_read_pob, &dcr_write_pob);
253 qemu_register_reset(ppc4xx_pob_reset, pob);
254 ppc4xx_pob_reset(env);
258 /*****************************************************************************/
259 /* OPB arbitrer */
260 typedef struct ppc4xx_opba_t ppc4xx_opba_t;
261 struct ppc4xx_opba_t {
262 target_phys_addr_t base;
263 uint8_t cr;
264 uint8_t pr;
267 static uint32_t opba_readb (void *opaque, target_phys_addr_t addr)
269 ppc4xx_opba_t *opba;
270 uint32_t ret;
272 #ifdef DEBUG_OPBA
273 printf("%s: addr " PADDRX "\n", __func__, addr);
274 #endif
275 opba = opaque;
276 switch (addr - opba->base) {
277 case 0x00:
278 ret = opba->cr;
279 break;
280 case 0x01:
281 ret = opba->pr;
282 break;
283 default:
284 ret = 0x00;
285 break;
288 return ret;
291 static void opba_writeb (void *opaque,
292 target_phys_addr_t addr, uint32_t value)
294 ppc4xx_opba_t *opba;
296 #ifdef DEBUG_OPBA
297 printf("%s: addr " PADDRX " val %08x\n", __func__, addr, value);
298 #endif
299 opba = opaque;
300 switch (addr - opba->base) {
301 case 0x00:
302 opba->cr = value & 0xF8;
303 break;
304 case 0x01:
305 opba->pr = value & 0xFF;
306 break;
307 default:
308 break;
312 static uint32_t opba_readw (void *opaque, target_phys_addr_t addr)
314 uint32_t ret;
316 #ifdef DEBUG_OPBA
317 printf("%s: addr " PADDRX "\n", __func__, addr);
318 #endif
319 ret = opba_readb(opaque, addr) << 8;
320 ret |= opba_readb(opaque, addr + 1);
322 return ret;
325 static void opba_writew (void *opaque,
326 target_phys_addr_t addr, uint32_t value)
328 #ifdef DEBUG_OPBA
329 printf("%s: addr " PADDRX " val %08x\n", __func__, addr, value);
330 #endif
331 opba_writeb(opaque, addr, value >> 8);
332 opba_writeb(opaque, addr + 1, value);
335 static uint32_t opba_readl (void *opaque, target_phys_addr_t addr)
337 uint32_t ret;
339 #ifdef DEBUG_OPBA
340 printf("%s: addr " PADDRX "\n", __func__, addr);
341 #endif
342 ret = opba_readb(opaque, addr) << 24;
343 ret |= opba_readb(opaque, addr + 1) << 16;
345 return ret;
348 static void opba_writel (void *opaque,
349 target_phys_addr_t addr, uint32_t value)
351 #ifdef DEBUG_OPBA
352 printf("%s: addr " PADDRX " val %08x\n", __func__, addr, value);
353 #endif
354 opba_writeb(opaque, addr, value >> 24);
355 opba_writeb(opaque, addr + 1, value >> 16);
358 static CPUReadMemoryFunc *opba_read[] = {
359 &opba_readb,
360 &opba_readw,
361 &opba_readl,
364 static CPUWriteMemoryFunc *opba_write[] = {
365 &opba_writeb,
366 &opba_writew,
367 &opba_writel,
370 static void ppc4xx_opba_reset (void *opaque)
372 ppc4xx_opba_t *opba;
374 opba = opaque;
375 opba->cr = 0x00; /* No dynamic priorities - park disabled */
376 opba->pr = 0x11;
379 void ppc4xx_opba_init (CPUState *env, ppc4xx_mmio_t *mmio,
380 target_phys_addr_t offset)
382 ppc4xx_opba_t *opba;
384 opba = qemu_mallocz(sizeof(ppc4xx_opba_t));
385 if (opba != NULL) {
386 opba->base = offset;
387 #ifdef DEBUG_OPBA
388 printf("%s: offset=" PADDRX "\n", __func__, offset);
389 #endif
390 ppc4xx_mmio_register(env, mmio, offset, 0x002,
391 opba_read, opba_write, opba);
392 qemu_register_reset(ppc4xx_opba_reset, opba);
393 ppc4xx_opba_reset(opba);
397 /*****************************************************************************/
398 /* Code decompression controller */
399 /* XXX: TODO */
401 /*****************************************************************************/
402 /* SDRAM controller */
403 typedef struct ppc4xx_sdram_t ppc4xx_sdram_t;
404 struct ppc4xx_sdram_t {
405 uint32_t addr;
406 int nbanks;
407 target_phys_addr_t ram_bases[4];
408 target_phys_addr_t ram_sizes[4];
409 uint32_t besr0;
410 uint32_t besr1;
411 uint32_t bear;
412 uint32_t cfg;
413 uint32_t status;
414 uint32_t rtr;
415 uint32_t pmit;
416 uint32_t bcr[4];
417 uint32_t tr;
418 uint32_t ecccfg;
419 uint32_t eccesr;
420 qemu_irq irq;
423 enum {
424 SDRAM0_CFGADDR = 0x010,
425 SDRAM0_CFGDATA = 0x011,
428 static uint32_t sdram_bcr (target_phys_addr_t ram_base,
429 target_phys_addr_t ram_size)
431 uint32_t bcr;
433 switch (ram_size) {
434 case (4 * 1024 * 1024):
435 bcr = 0x00000000;
436 break;
437 case (8 * 1024 * 1024):
438 bcr = 0x00020000;
439 break;
440 case (16 * 1024 * 1024):
441 bcr = 0x00040000;
442 break;
443 case (32 * 1024 * 1024):
444 bcr = 0x00060000;
445 break;
446 case (64 * 1024 * 1024):
447 bcr = 0x00080000;
448 break;
449 case (128 * 1024 * 1024):
450 bcr = 0x000A0000;
451 break;
452 case (256 * 1024 * 1024):
453 bcr = 0x000C0000;
454 break;
455 default:
456 printf("%s: invalid RAM size " TARGET_FMT_plx "\n",
457 __func__, ram_size);
458 return 0x00000000;
460 bcr |= ram_base & 0xFF800000;
461 bcr |= 1;
463 return bcr;
466 static always_inline target_phys_addr_t sdram_base (uint32_t bcr)
468 return bcr & 0xFF800000;
471 static target_ulong sdram_size (uint32_t bcr)
473 target_ulong size;
474 int sh;
476 sh = (bcr >> 17) & 0x7;
477 if (sh == 7)
478 size = -1;
479 else
480 size = (4 * 1024 * 1024) << sh;
482 return size;
485 static void sdram_set_bcr (uint32_t *bcrp, uint32_t bcr, int enabled)
487 if (*bcrp & 0x00000001) {
488 /* Unmap RAM */
489 #ifdef DEBUG_SDRAM
490 printf("%s: unmap RAM area " TARGET_FMT_plx " " TARGET_FMT_lx "\n",
491 __func__, sdram_base(*bcrp), sdram_size(*bcrp));
492 #endif
493 cpu_register_physical_memory(sdram_base(*bcrp), sdram_size(*bcrp),
494 IO_MEM_UNASSIGNED);
496 *bcrp = bcr & 0xFFDEE001;
497 if (enabled && (bcr & 0x00000001)) {
498 #ifdef DEBUG_SDRAM
499 printf("%s: Map RAM area " TARGET_FMT_plx " " TARGET_FMT_lx "\n",
500 __func__, sdram_base(bcr), sdram_size(bcr));
501 #endif
502 cpu_register_physical_memory(sdram_base(bcr), sdram_size(bcr),
503 sdram_base(bcr) | IO_MEM_RAM);
507 static void sdram_map_bcr (ppc4xx_sdram_t *sdram)
509 int i;
511 for (i = 0; i < sdram->nbanks; i++) {
512 if (sdram->ram_sizes[i] != 0) {
513 sdram_set_bcr(&sdram->bcr[i],
514 sdram_bcr(sdram->ram_bases[i], sdram->ram_sizes[i]),
516 } else {
517 sdram_set_bcr(&sdram->bcr[i], 0x00000000, 0);
522 static void sdram_unmap_bcr (ppc4xx_sdram_t *sdram)
524 int i;
526 for (i = 0; i < sdram->nbanks; i++) {
527 #ifdef DEBUG_SDRAM
528 printf("%s: Unmap RAM area " TARGET_FMT_plx " " TARGET_FMT_lx "\n",
529 __func__, sdram_base(sdram->bcr[i]), sdram_size(sdram->bcr[i]));
530 #endif
531 cpu_register_physical_memory(sdram_base(sdram->bcr[i]),
532 sdram_size(sdram->bcr[i]),
533 IO_MEM_UNASSIGNED);
537 static target_ulong dcr_read_sdram (void *opaque, int dcrn)
539 ppc4xx_sdram_t *sdram;
540 target_ulong ret;
542 sdram = opaque;
543 switch (dcrn) {
544 case SDRAM0_CFGADDR:
545 ret = sdram->addr;
546 break;
547 case SDRAM0_CFGDATA:
548 switch (sdram->addr) {
549 case 0x00: /* SDRAM_BESR0 */
550 ret = sdram->besr0;
551 break;
552 case 0x08: /* SDRAM_BESR1 */
553 ret = sdram->besr1;
554 break;
555 case 0x10: /* SDRAM_BEAR */
556 ret = sdram->bear;
557 break;
558 case 0x20: /* SDRAM_CFG */
559 ret = sdram->cfg;
560 break;
561 case 0x24: /* SDRAM_STATUS */
562 ret = sdram->status;
563 break;
564 case 0x30: /* SDRAM_RTR */
565 ret = sdram->rtr;
566 break;
567 case 0x34: /* SDRAM_PMIT */
568 ret = sdram->pmit;
569 break;
570 case 0x40: /* SDRAM_B0CR */
571 ret = sdram->bcr[0];
572 break;
573 case 0x44: /* SDRAM_B1CR */
574 ret = sdram->bcr[1];
575 break;
576 case 0x48: /* SDRAM_B2CR */
577 ret = sdram->bcr[2];
578 break;
579 case 0x4C: /* SDRAM_B3CR */
580 ret = sdram->bcr[3];
581 break;
582 case 0x80: /* SDRAM_TR */
583 ret = -1; /* ? */
584 break;
585 case 0x94: /* SDRAM_ECCCFG */
586 ret = sdram->ecccfg;
587 break;
588 case 0x98: /* SDRAM_ECCESR */
589 ret = sdram->eccesr;
590 break;
591 default: /* Error */
592 ret = -1;
593 break;
595 break;
596 default:
597 /* Avoid gcc warning */
598 ret = 0x00000000;
599 break;
602 return ret;
605 static void dcr_write_sdram (void *opaque, int dcrn, target_ulong val)
607 ppc4xx_sdram_t *sdram;
609 sdram = opaque;
610 switch (dcrn) {
611 case SDRAM0_CFGADDR:
612 sdram->addr = val;
613 break;
614 case SDRAM0_CFGDATA:
615 switch (sdram->addr) {
616 case 0x00: /* SDRAM_BESR0 */
617 sdram->besr0 &= ~val;
618 break;
619 case 0x08: /* SDRAM_BESR1 */
620 sdram->besr1 &= ~val;
621 break;
622 case 0x10: /* SDRAM_BEAR */
623 sdram->bear = val;
624 break;
625 case 0x20: /* SDRAM_CFG */
626 val &= 0xFFE00000;
627 if (!(sdram->cfg & 0x80000000) && (val & 0x80000000)) {
628 #ifdef DEBUG_SDRAM
629 printf("%s: enable SDRAM controller\n", __func__);
630 #endif
631 /* validate all RAM mappings */
632 sdram_map_bcr(sdram);
633 sdram->status &= ~0x80000000;
634 } else if ((sdram->cfg & 0x80000000) && !(val & 0x80000000)) {
635 #ifdef DEBUG_SDRAM
636 printf("%s: disable SDRAM controller\n", __func__);
637 #endif
638 /* invalidate all RAM mappings */
639 sdram_unmap_bcr(sdram);
640 sdram->status |= 0x80000000;
642 if (!(sdram->cfg & 0x40000000) && (val & 0x40000000))
643 sdram->status |= 0x40000000;
644 else if ((sdram->cfg & 0x40000000) && !(val & 0x40000000))
645 sdram->status &= ~0x40000000;
646 sdram->cfg = val;
647 break;
648 case 0x24: /* SDRAM_STATUS */
649 /* Read-only register */
650 break;
651 case 0x30: /* SDRAM_RTR */
652 sdram->rtr = val & 0x3FF80000;
653 break;
654 case 0x34: /* SDRAM_PMIT */
655 sdram->pmit = (val & 0xF8000000) | 0x07C00000;
656 break;
657 case 0x40: /* SDRAM_B0CR */
658 sdram_set_bcr(&sdram->bcr[0], val, sdram->cfg & 0x80000000);
659 break;
660 case 0x44: /* SDRAM_B1CR */
661 sdram_set_bcr(&sdram->bcr[1], val, sdram->cfg & 0x80000000);
662 break;
663 case 0x48: /* SDRAM_B2CR */
664 sdram_set_bcr(&sdram->bcr[2], val, sdram->cfg & 0x80000000);
665 break;
666 case 0x4C: /* SDRAM_B3CR */
667 sdram_set_bcr(&sdram->bcr[3], val, sdram->cfg & 0x80000000);
668 break;
669 case 0x80: /* SDRAM_TR */
670 sdram->tr = val & 0x018FC01F;
671 break;
672 case 0x94: /* SDRAM_ECCCFG */
673 sdram->ecccfg = val & 0x00F00000;
674 break;
675 case 0x98: /* SDRAM_ECCESR */
676 val &= 0xFFF0F000;
677 if (sdram->eccesr == 0 && val != 0)
678 qemu_irq_raise(sdram->irq);
679 else if (sdram->eccesr != 0 && val == 0)
680 qemu_irq_lower(sdram->irq);
681 sdram->eccesr = val;
682 break;
683 default: /* Error */
684 break;
686 break;
690 static void sdram_reset (void *opaque)
692 ppc4xx_sdram_t *sdram;
694 sdram = opaque;
695 sdram->addr = 0x00000000;
696 sdram->bear = 0x00000000;
697 sdram->besr0 = 0x00000000; /* No error */
698 sdram->besr1 = 0x00000000; /* No error */
699 sdram->cfg = 0x00000000;
700 sdram->ecccfg = 0x00000000; /* No ECC */
701 sdram->eccesr = 0x00000000; /* No error */
702 sdram->pmit = 0x07C00000;
703 sdram->rtr = 0x05F00000;
704 sdram->tr = 0x00854009;
705 /* We pre-initialize RAM banks */
706 sdram->status = 0x00000000;
707 sdram->cfg = 0x00800000;
708 sdram_unmap_bcr(sdram);
711 void ppc405_sdram_init (CPUState *env, qemu_irq irq, int nbanks,
712 target_phys_addr_t *ram_bases,
713 target_phys_addr_t *ram_sizes,
714 int do_init)
716 ppc4xx_sdram_t *sdram;
718 sdram = qemu_mallocz(sizeof(ppc4xx_sdram_t));
719 if (sdram != NULL) {
720 sdram->irq = irq;
721 sdram->nbanks = nbanks;
722 memset(sdram->ram_bases, 0, 4 * sizeof(target_phys_addr_t));
723 memcpy(sdram->ram_bases, ram_bases,
724 nbanks * sizeof(target_phys_addr_t));
725 memset(sdram->ram_sizes, 0, 4 * sizeof(target_phys_addr_t));
726 memcpy(sdram->ram_sizes, ram_sizes,
727 nbanks * sizeof(target_phys_addr_t));
728 sdram_reset(sdram);
729 qemu_register_reset(&sdram_reset, sdram);
730 ppc_dcr_register(env, SDRAM0_CFGADDR,
731 sdram, &dcr_read_sdram, &dcr_write_sdram);
732 ppc_dcr_register(env, SDRAM0_CFGDATA,
733 sdram, &dcr_read_sdram, &dcr_write_sdram);
734 if (do_init)
735 sdram_map_bcr(sdram);
739 /*****************************************************************************/
740 /* Peripheral controller */
741 typedef struct ppc4xx_ebc_t ppc4xx_ebc_t;
742 struct ppc4xx_ebc_t {
743 uint32_t addr;
744 uint32_t bcr[8];
745 uint32_t bap[8];
746 uint32_t bear;
747 uint32_t besr0;
748 uint32_t besr1;
749 uint32_t cfg;
752 enum {
753 EBC0_CFGADDR = 0x012,
754 EBC0_CFGDATA = 0x013,
757 static target_ulong dcr_read_ebc (void *opaque, int dcrn)
759 ppc4xx_ebc_t *ebc;
760 target_ulong ret;
762 ebc = opaque;
763 switch (dcrn) {
764 case EBC0_CFGADDR:
765 ret = ebc->addr;
766 break;
767 case EBC0_CFGDATA:
768 switch (ebc->addr) {
769 case 0x00: /* B0CR */
770 ret = ebc->bcr[0];
771 break;
772 case 0x01: /* B1CR */
773 ret = ebc->bcr[1];
774 break;
775 case 0x02: /* B2CR */
776 ret = ebc->bcr[2];
777 break;
778 case 0x03: /* B3CR */
779 ret = ebc->bcr[3];
780 break;
781 case 0x04: /* B4CR */
782 ret = ebc->bcr[4];
783 break;
784 case 0x05: /* B5CR */
785 ret = ebc->bcr[5];
786 break;
787 case 0x06: /* B6CR */
788 ret = ebc->bcr[6];
789 break;
790 case 0x07: /* B7CR */
791 ret = ebc->bcr[7];
792 break;
793 case 0x10: /* B0AP */
794 ret = ebc->bap[0];
795 break;
796 case 0x11: /* B1AP */
797 ret = ebc->bap[1];
798 break;
799 case 0x12: /* B2AP */
800 ret = ebc->bap[2];
801 break;
802 case 0x13: /* B3AP */
803 ret = ebc->bap[3];
804 break;
805 case 0x14: /* B4AP */
806 ret = ebc->bap[4];
807 break;
808 case 0x15: /* B5AP */
809 ret = ebc->bap[5];
810 break;
811 case 0x16: /* B6AP */
812 ret = ebc->bap[6];
813 break;
814 case 0x17: /* B7AP */
815 ret = ebc->bap[7];
816 break;
817 case 0x20: /* BEAR */
818 ret = ebc->bear;
819 break;
820 case 0x21: /* BESR0 */
821 ret = ebc->besr0;
822 break;
823 case 0x22: /* BESR1 */
824 ret = ebc->besr1;
825 break;
826 case 0x23: /* CFG */
827 ret = ebc->cfg;
828 break;
829 default:
830 ret = 0x00000000;
831 break;
833 default:
834 ret = 0x00000000;
835 break;
838 return ret;
841 static void dcr_write_ebc (void *opaque, int dcrn, target_ulong val)
843 ppc4xx_ebc_t *ebc;
845 ebc = opaque;
846 switch (dcrn) {
847 case EBC0_CFGADDR:
848 ebc->addr = val;
849 break;
850 case EBC0_CFGDATA:
851 switch (ebc->addr) {
852 case 0x00: /* B0CR */
853 break;
854 case 0x01: /* B1CR */
855 break;
856 case 0x02: /* B2CR */
857 break;
858 case 0x03: /* B3CR */
859 break;
860 case 0x04: /* B4CR */
861 break;
862 case 0x05: /* B5CR */
863 break;
864 case 0x06: /* B6CR */
865 break;
866 case 0x07: /* B7CR */
867 break;
868 case 0x10: /* B0AP */
869 break;
870 case 0x11: /* B1AP */
871 break;
872 case 0x12: /* B2AP */
873 break;
874 case 0x13: /* B3AP */
875 break;
876 case 0x14: /* B4AP */
877 break;
878 case 0x15: /* B5AP */
879 break;
880 case 0x16: /* B6AP */
881 break;
882 case 0x17: /* B7AP */
883 break;
884 case 0x20: /* BEAR */
885 break;
886 case 0x21: /* BESR0 */
887 break;
888 case 0x22: /* BESR1 */
889 break;
890 case 0x23: /* CFG */
891 break;
892 default:
893 break;
895 break;
896 default:
897 break;
901 static void ebc_reset (void *opaque)
903 ppc4xx_ebc_t *ebc;
904 int i;
906 ebc = opaque;
907 ebc->addr = 0x00000000;
908 ebc->bap[0] = 0x7F8FFE80;
909 ebc->bcr[0] = 0xFFE28000;
910 for (i = 0; i < 8; i++) {
911 ebc->bap[i] = 0x00000000;
912 ebc->bcr[i] = 0x00000000;
914 ebc->besr0 = 0x00000000;
915 ebc->besr1 = 0x00000000;
916 ebc->cfg = 0x80400000;
919 void ppc405_ebc_init (CPUState *env)
921 ppc4xx_ebc_t *ebc;
923 ebc = qemu_mallocz(sizeof(ppc4xx_ebc_t));
924 if (ebc != NULL) {
925 ebc_reset(ebc);
926 qemu_register_reset(&ebc_reset, ebc);
927 ppc_dcr_register(env, EBC0_CFGADDR,
928 ebc, &dcr_read_ebc, &dcr_write_ebc);
929 ppc_dcr_register(env, EBC0_CFGDATA,
930 ebc, &dcr_read_ebc, &dcr_write_ebc);
934 /*****************************************************************************/
935 /* DMA controller */
936 enum {
937 DMA0_CR0 = 0x100,
938 DMA0_CT0 = 0x101,
939 DMA0_DA0 = 0x102,
940 DMA0_SA0 = 0x103,
941 DMA0_SG0 = 0x104,
942 DMA0_CR1 = 0x108,
943 DMA0_CT1 = 0x109,
944 DMA0_DA1 = 0x10A,
945 DMA0_SA1 = 0x10B,
946 DMA0_SG1 = 0x10C,
947 DMA0_CR2 = 0x110,
948 DMA0_CT2 = 0x111,
949 DMA0_DA2 = 0x112,
950 DMA0_SA2 = 0x113,
951 DMA0_SG2 = 0x114,
952 DMA0_CR3 = 0x118,
953 DMA0_CT3 = 0x119,
954 DMA0_DA3 = 0x11A,
955 DMA0_SA3 = 0x11B,
956 DMA0_SG3 = 0x11C,
957 DMA0_SR = 0x120,
958 DMA0_SGC = 0x123,
959 DMA0_SLP = 0x125,
960 DMA0_POL = 0x126,
963 typedef struct ppc405_dma_t ppc405_dma_t;
964 struct ppc405_dma_t {
965 qemu_irq irqs[4];
966 uint32_t cr[4];
967 uint32_t ct[4];
968 uint32_t da[4];
969 uint32_t sa[4];
970 uint32_t sg[4];
971 uint32_t sr;
972 uint32_t sgc;
973 uint32_t slp;
974 uint32_t pol;
977 static target_ulong dcr_read_dma (void *opaque, int dcrn)
979 ppc405_dma_t *dma;
981 dma = opaque;
983 return 0;
986 static void dcr_write_dma (void *opaque, int dcrn, target_ulong val)
988 ppc405_dma_t *dma;
990 dma = opaque;
993 static void ppc405_dma_reset (void *opaque)
995 ppc405_dma_t *dma;
996 int i;
998 dma = opaque;
999 for (i = 0; i < 4; i++) {
1000 dma->cr[i] = 0x00000000;
1001 dma->ct[i] = 0x00000000;
1002 dma->da[i] = 0x00000000;
1003 dma->sa[i] = 0x00000000;
1004 dma->sg[i] = 0x00000000;
1006 dma->sr = 0x00000000;
1007 dma->sgc = 0x00000000;
1008 dma->slp = 0x7C000000;
1009 dma->pol = 0x00000000;
1012 void ppc405_dma_init (CPUState *env, qemu_irq irqs[4])
1014 ppc405_dma_t *dma;
1016 dma = qemu_mallocz(sizeof(ppc405_dma_t));
1017 if (dma != NULL) {
1018 memcpy(dma->irqs, irqs, 4 * sizeof(qemu_irq));
1019 ppc405_dma_reset(dma);
1020 qemu_register_reset(&ppc405_dma_reset, dma);
1021 ppc_dcr_register(env, DMA0_CR0,
1022 dma, &dcr_read_dma, &dcr_write_dma);
1023 ppc_dcr_register(env, DMA0_CT0,
1024 dma, &dcr_read_dma, &dcr_write_dma);
1025 ppc_dcr_register(env, DMA0_DA0,
1026 dma, &dcr_read_dma, &dcr_write_dma);
1027 ppc_dcr_register(env, DMA0_SA0,
1028 dma, &dcr_read_dma, &dcr_write_dma);
1029 ppc_dcr_register(env, DMA0_SG0,
1030 dma, &dcr_read_dma, &dcr_write_dma);
1031 ppc_dcr_register(env, DMA0_CR1,
1032 dma, &dcr_read_dma, &dcr_write_dma);
1033 ppc_dcr_register(env, DMA0_CT1,
1034 dma, &dcr_read_dma, &dcr_write_dma);
1035 ppc_dcr_register(env, DMA0_DA1,
1036 dma, &dcr_read_dma, &dcr_write_dma);
1037 ppc_dcr_register(env, DMA0_SA1,
1038 dma, &dcr_read_dma, &dcr_write_dma);
1039 ppc_dcr_register(env, DMA0_SG1,
1040 dma, &dcr_read_dma, &dcr_write_dma);
1041 ppc_dcr_register(env, DMA0_CR2,
1042 dma, &dcr_read_dma, &dcr_write_dma);
1043 ppc_dcr_register(env, DMA0_CT2,
1044 dma, &dcr_read_dma, &dcr_write_dma);
1045 ppc_dcr_register(env, DMA0_DA2,
1046 dma, &dcr_read_dma, &dcr_write_dma);
1047 ppc_dcr_register(env, DMA0_SA2,
1048 dma, &dcr_read_dma, &dcr_write_dma);
1049 ppc_dcr_register(env, DMA0_SG2,
1050 dma, &dcr_read_dma, &dcr_write_dma);
1051 ppc_dcr_register(env, DMA0_CR3,
1052 dma, &dcr_read_dma, &dcr_write_dma);
1053 ppc_dcr_register(env, DMA0_CT3,
1054 dma, &dcr_read_dma, &dcr_write_dma);
1055 ppc_dcr_register(env, DMA0_DA3,
1056 dma, &dcr_read_dma, &dcr_write_dma);
1057 ppc_dcr_register(env, DMA0_SA3,
1058 dma, &dcr_read_dma, &dcr_write_dma);
1059 ppc_dcr_register(env, DMA0_SG3,
1060 dma, &dcr_read_dma, &dcr_write_dma);
1061 ppc_dcr_register(env, DMA0_SR,
1062 dma, &dcr_read_dma, &dcr_write_dma);
1063 ppc_dcr_register(env, DMA0_SGC,
1064 dma, &dcr_read_dma, &dcr_write_dma);
1065 ppc_dcr_register(env, DMA0_SLP,
1066 dma, &dcr_read_dma, &dcr_write_dma);
1067 ppc_dcr_register(env, DMA0_POL,
1068 dma, &dcr_read_dma, &dcr_write_dma);
1072 /*****************************************************************************/
1073 /* GPIO */
1074 typedef struct ppc405_gpio_t ppc405_gpio_t;
1075 struct ppc405_gpio_t {
1076 target_phys_addr_t base;
1077 uint32_t or;
1078 uint32_t tcr;
1079 uint32_t osrh;
1080 uint32_t osrl;
1081 uint32_t tsrh;
1082 uint32_t tsrl;
1083 uint32_t odr;
1084 uint32_t ir;
1085 uint32_t rr1;
1086 uint32_t isr1h;
1087 uint32_t isr1l;
1090 static uint32_t ppc405_gpio_readb (void *opaque, target_phys_addr_t addr)
1092 ppc405_gpio_t *gpio;
1094 gpio = opaque;
1095 #ifdef DEBUG_GPIO
1096 printf("%s: addr " PADDRX "\n", __func__, addr);
1097 #endif
1099 return 0;
1102 static void ppc405_gpio_writeb (void *opaque,
1103 target_phys_addr_t addr, uint32_t value)
1105 ppc405_gpio_t *gpio;
1107 gpio = opaque;
1108 #ifdef DEBUG_GPIO
1109 printf("%s: addr " PADDRX " val %08x\n", __func__, addr, value);
1110 #endif
1113 static uint32_t ppc405_gpio_readw (void *opaque, target_phys_addr_t addr)
1115 ppc405_gpio_t *gpio;
1117 gpio = opaque;
1118 #ifdef DEBUG_GPIO
1119 printf("%s: addr " PADDRX "\n", __func__, addr);
1120 #endif
1122 return 0;
1125 static void ppc405_gpio_writew (void *opaque,
1126 target_phys_addr_t addr, uint32_t value)
1128 ppc405_gpio_t *gpio;
1130 gpio = opaque;
1131 #ifdef DEBUG_GPIO
1132 printf("%s: addr " PADDRX " val %08x\n", __func__, addr, value);
1133 #endif
1136 static uint32_t ppc405_gpio_readl (void *opaque, target_phys_addr_t addr)
1138 ppc405_gpio_t *gpio;
1140 gpio = opaque;
1141 #ifdef DEBUG_GPIO
1142 printf("%s: addr " PADDRX "\n", __func__, addr);
1143 #endif
1145 return 0;
1148 static void ppc405_gpio_writel (void *opaque,
1149 target_phys_addr_t addr, uint32_t value)
1151 ppc405_gpio_t *gpio;
1153 gpio = opaque;
1154 #ifdef DEBUG_GPIO
1155 printf("%s: addr " PADDRX " val %08x\n", __func__, addr, value);
1156 #endif
1159 static CPUReadMemoryFunc *ppc405_gpio_read[] = {
1160 &ppc405_gpio_readb,
1161 &ppc405_gpio_readw,
1162 &ppc405_gpio_readl,
1165 static CPUWriteMemoryFunc *ppc405_gpio_write[] = {
1166 &ppc405_gpio_writeb,
1167 &ppc405_gpio_writew,
1168 &ppc405_gpio_writel,
1171 static void ppc405_gpio_reset (void *opaque)
1173 ppc405_gpio_t *gpio;
1175 gpio = opaque;
1178 void ppc405_gpio_init (CPUState *env, ppc4xx_mmio_t *mmio,
1179 target_phys_addr_t offset)
1181 ppc405_gpio_t *gpio;
1183 gpio = qemu_mallocz(sizeof(ppc405_gpio_t));
1184 if (gpio != NULL) {
1185 gpio->base = offset;
1186 ppc405_gpio_reset(gpio);
1187 qemu_register_reset(&ppc405_gpio_reset, gpio);
1188 #ifdef DEBUG_GPIO
1189 printf("%s: offset=" PADDRX "\n", __func__, offset);
1190 #endif
1191 ppc4xx_mmio_register(env, mmio, offset, 0x038,
1192 ppc405_gpio_read, ppc405_gpio_write, gpio);
1196 /*****************************************************************************/
1197 /* Serial ports */
1198 static CPUReadMemoryFunc *serial_mm_read[] = {
1199 &serial_mm_readb,
1200 &serial_mm_readw,
1201 &serial_mm_readl,
1204 static CPUWriteMemoryFunc *serial_mm_write[] = {
1205 &serial_mm_writeb,
1206 &serial_mm_writew,
1207 &serial_mm_writel,
1210 void ppc405_serial_init (CPUState *env, ppc4xx_mmio_t *mmio,
1211 target_phys_addr_t offset, qemu_irq irq,
1212 CharDriverState *chr)
1214 void *serial;
1216 #ifdef DEBUG_SERIAL
1217 printf("%s: offset=" PADDRX "\n", __func__, offset);
1218 #endif
1219 serial = serial_mm_init(offset, 0, irq, chr, 0);
1220 ppc4xx_mmio_register(env, mmio, offset, 0x008,
1221 serial_mm_read, serial_mm_write, serial);
1224 /*****************************************************************************/
1225 /* On Chip Memory */
1226 enum {
1227 OCM0_ISARC = 0x018,
1228 OCM0_ISACNTL = 0x019,
1229 OCM0_DSARC = 0x01A,
1230 OCM0_DSACNTL = 0x01B,
1233 typedef struct ppc405_ocm_t ppc405_ocm_t;
1234 struct ppc405_ocm_t {
1235 target_ulong offset;
1236 uint32_t isarc;
1237 uint32_t isacntl;
1238 uint32_t dsarc;
1239 uint32_t dsacntl;
1242 static void ocm_update_mappings (ppc405_ocm_t *ocm,
1243 uint32_t isarc, uint32_t isacntl,
1244 uint32_t dsarc, uint32_t dsacntl)
1246 #ifdef DEBUG_OCM
1247 printf("OCM update ISA %08x %08x (%08x %08x) DSA %08x %08x (%08x %08x)\n",
1248 isarc, isacntl, dsarc, dsacntl,
1249 ocm->isarc, ocm->isacntl, ocm->dsarc, ocm->dsacntl);
1250 #endif
1251 if (ocm->isarc != isarc ||
1252 (ocm->isacntl & 0x80000000) != (isacntl & 0x80000000)) {
1253 if (ocm->isacntl & 0x80000000) {
1254 /* Unmap previously assigned memory region */
1255 printf("OCM unmap ISA %08x\n", ocm->isarc);
1256 cpu_register_physical_memory(ocm->isarc, 0x04000000,
1257 IO_MEM_UNASSIGNED);
1259 if (isacntl & 0x80000000) {
1260 /* Map new instruction memory region */
1261 #ifdef DEBUG_OCM
1262 printf("OCM map ISA %08x\n", isarc);
1263 #endif
1264 cpu_register_physical_memory(isarc, 0x04000000,
1265 ocm->offset | IO_MEM_RAM);
1268 if (ocm->dsarc != dsarc ||
1269 (ocm->dsacntl & 0x80000000) != (dsacntl & 0x80000000)) {
1270 if (ocm->dsacntl & 0x80000000) {
1271 /* Beware not to unmap the region we just mapped */
1272 if (!(isacntl & 0x80000000) || ocm->dsarc != isarc) {
1273 /* Unmap previously assigned memory region */
1274 #ifdef DEBUG_OCM
1275 printf("OCM unmap DSA %08x\n", ocm->dsarc);
1276 #endif
1277 cpu_register_physical_memory(ocm->dsarc, 0x04000000,
1278 IO_MEM_UNASSIGNED);
1281 if (dsacntl & 0x80000000) {
1282 /* Beware not to remap the region we just mapped */
1283 if (!(isacntl & 0x80000000) || dsarc != isarc) {
1284 /* Map new data memory region */
1285 #ifdef DEBUG_OCM
1286 printf("OCM map DSA %08x\n", dsarc);
1287 #endif
1288 cpu_register_physical_memory(dsarc, 0x04000000,
1289 ocm->offset | IO_MEM_RAM);
1295 static target_ulong dcr_read_ocm (void *opaque, int dcrn)
1297 ppc405_ocm_t *ocm;
1298 target_ulong ret;
1300 ocm = opaque;
1301 switch (dcrn) {
1302 case OCM0_ISARC:
1303 ret = ocm->isarc;
1304 break;
1305 case OCM0_ISACNTL:
1306 ret = ocm->isacntl;
1307 break;
1308 case OCM0_DSARC:
1309 ret = ocm->dsarc;
1310 break;
1311 case OCM0_DSACNTL:
1312 ret = ocm->dsacntl;
1313 break;
1314 default:
1315 ret = 0;
1316 break;
1319 return ret;
1322 static void dcr_write_ocm (void *opaque, int dcrn, target_ulong val)
1324 ppc405_ocm_t *ocm;
1325 uint32_t isarc, dsarc, isacntl, dsacntl;
1327 ocm = opaque;
1328 isarc = ocm->isarc;
1329 dsarc = ocm->dsarc;
1330 isacntl = ocm->isacntl;
1331 dsacntl = ocm->dsacntl;
1332 switch (dcrn) {
1333 case OCM0_ISARC:
1334 isarc = val & 0xFC000000;
1335 break;
1336 case OCM0_ISACNTL:
1337 isacntl = val & 0xC0000000;
1338 break;
1339 case OCM0_DSARC:
1340 isarc = val & 0xFC000000;
1341 break;
1342 case OCM0_DSACNTL:
1343 isacntl = val & 0xC0000000;
1344 break;
1346 ocm_update_mappings(ocm, isarc, isacntl, dsarc, dsacntl);
1347 ocm->isarc = isarc;
1348 ocm->dsarc = dsarc;
1349 ocm->isacntl = isacntl;
1350 ocm->dsacntl = dsacntl;
1353 static void ocm_reset (void *opaque)
1355 ppc405_ocm_t *ocm;
1356 uint32_t isarc, dsarc, isacntl, dsacntl;
1358 ocm = opaque;
1359 isarc = 0x00000000;
1360 isacntl = 0x00000000;
1361 dsarc = 0x00000000;
1362 dsacntl = 0x00000000;
1363 ocm_update_mappings(ocm, isarc, isacntl, dsarc, dsacntl);
1364 ocm->isarc = isarc;
1365 ocm->dsarc = dsarc;
1366 ocm->isacntl = isacntl;
1367 ocm->dsacntl = dsacntl;
1370 void ppc405_ocm_init (CPUState *env, unsigned long offset)
1372 ppc405_ocm_t *ocm;
1374 ocm = qemu_mallocz(sizeof(ppc405_ocm_t));
1375 if (ocm != NULL) {
1376 ocm->offset = offset;
1377 ocm_reset(ocm);
1378 qemu_register_reset(&ocm_reset, ocm);
1379 ppc_dcr_register(env, OCM0_ISARC,
1380 ocm, &dcr_read_ocm, &dcr_write_ocm);
1381 ppc_dcr_register(env, OCM0_ISACNTL,
1382 ocm, &dcr_read_ocm, &dcr_write_ocm);
1383 ppc_dcr_register(env, OCM0_DSARC,
1384 ocm, &dcr_read_ocm, &dcr_write_ocm);
1385 ppc_dcr_register(env, OCM0_DSACNTL,
1386 ocm, &dcr_read_ocm, &dcr_write_ocm);
1390 /*****************************************************************************/
1391 /* I2C controller */
1392 typedef struct ppc4xx_i2c_t ppc4xx_i2c_t;
1393 struct ppc4xx_i2c_t {
1394 target_phys_addr_t base;
1395 qemu_irq irq;
1396 uint8_t mdata;
1397 uint8_t lmadr;
1398 uint8_t hmadr;
1399 uint8_t cntl;
1400 uint8_t mdcntl;
1401 uint8_t sts;
1402 uint8_t extsts;
1403 uint8_t sdata;
1404 uint8_t lsadr;
1405 uint8_t hsadr;
1406 uint8_t clkdiv;
1407 uint8_t intrmsk;
1408 uint8_t xfrcnt;
1409 uint8_t xtcntlss;
1410 uint8_t directcntl;
1413 static uint32_t ppc4xx_i2c_readb (void *opaque, target_phys_addr_t addr)
1415 ppc4xx_i2c_t *i2c;
1416 uint32_t ret;
1418 #ifdef DEBUG_I2C
1419 printf("%s: addr " PADDRX "\n", __func__, addr);
1420 #endif
1421 i2c = opaque;
1422 switch (addr - i2c->base) {
1423 case 0x00:
1424 // i2c_readbyte(&i2c->mdata);
1425 ret = i2c->mdata;
1426 break;
1427 case 0x02:
1428 ret = i2c->sdata;
1429 break;
1430 case 0x04:
1431 ret = i2c->lmadr;
1432 break;
1433 case 0x05:
1434 ret = i2c->hmadr;
1435 break;
1436 case 0x06:
1437 ret = i2c->cntl;
1438 break;
1439 case 0x07:
1440 ret = i2c->mdcntl;
1441 break;
1442 case 0x08:
1443 ret = i2c->sts;
1444 break;
1445 case 0x09:
1446 ret = i2c->extsts;
1447 break;
1448 case 0x0A:
1449 ret = i2c->lsadr;
1450 break;
1451 case 0x0B:
1452 ret = i2c->hsadr;
1453 break;
1454 case 0x0C:
1455 ret = i2c->clkdiv;
1456 break;
1457 case 0x0D:
1458 ret = i2c->intrmsk;
1459 break;
1460 case 0x0E:
1461 ret = i2c->xfrcnt;
1462 break;
1463 case 0x0F:
1464 ret = i2c->xtcntlss;
1465 break;
1466 case 0x10:
1467 ret = i2c->directcntl;
1468 break;
1469 default:
1470 ret = 0x00;
1471 break;
1473 #ifdef DEBUG_I2C
1474 printf("%s: addr " PADDRX " %02x\n", __func__, addr, ret);
1475 #endif
1477 return ret;
1480 static void ppc4xx_i2c_writeb (void *opaque,
1481 target_phys_addr_t addr, uint32_t value)
1483 ppc4xx_i2c_t *i2c;
1485 #ifdef DEBUG_I2C
1486 printf("%s: addr " PADDRX " val %08x\n", __func__, addr, value);
1487 #endif
1488 i2c = opaque;
1489 switch (addr - i2c->base) {
1490 case 0x00:
1491 i2c->mdata = value;
1492 // i2c_sendbyte(&i2c->mdata);
1493 break;
1494 case 0x02:
1495 i2c->sdata = value;
1496 break;
1497 case 0x04:
1498 i2c->lmadr = value;
1499 break;
1500 case 0x05:
1501 i2c->hmadr = value;
1502 break;
1503 case 0x06:
1504 i2c->cntl = value;
1505 break;
1506 case 0x07:
1507 i2c->mdcntl = value & 0xDF;
1508 break;
1509 case 0x08:
1510 i2c->sts &= ~(value & 0x0A);
1511 break;
1512 case 0x09:
1513 i2c->extsts &= ~(value & 0x8F);
1514 break;
1515 case 0x0A:
1516 i2c->lsadr = value;
1517 break;
1518 case 0x0B:
1519 i2c->hsadr = value;
1520 break;
1521 case 0x0C:
1522 i2c->clkdiv = value;
1523 break;
1524 case 0x0D:
1525 i2c->intrmsk = value;
1526 break;
1527 case 0x0E:
1528 i2c->xfrcnt = value & 0x77;
1529 break;
1530 case 0x0F:
1531 i2c->xtcntlss = value;
1532 break;
1533 case 0x10:
1534 i2c->directcntl = value & 0x7;
1535 break;
1539 static uint32_t ppc4xx_i2c_readw (void *opaque, target_phys_addr_t addr)
1541 uint32_t ret;
1543 #ifdef DEBUG_I2C
1544 printf("%s: addr " PADDRX "\n", __func__, addr);
1545 #endif
1546 ret = ppc4xx_i2c_readb(opaque, addr) << 8;
1547 ret |= ppc4xx_i2c_readb(opaque, addr + 1);
1549 return ret;
1552 static void ppc4xx_i2c_writew (void *opaque,
1553 target_phys_addr_t addr, uint32_t value)
1555 #ifdef DEBUG_I2C
1556 printf("%s: addr " PADDRX " val %08x\n", __func__, addr, value);
1557 #endif
1558 ppc4xx_i2c_writeb(opaque, addr, value >> 8);
1559 ppc4xx_i2c_writeb(opaque, addr + 1, value);
1562 static uint32_t ppc4xx_i2c_readl (void *opaque, target_phys_addr_t addr)
1564 uint32_t ret;
1566 #ifdef DEBUG_I2C
1567 printf("%s: addr " PADDRX "\n", __func__, addr);
1568 #endif
1569 ret = ppc4xx_i2c_readb(opaque, addr) << 24;
1570 ret |= ppc4xx_i2c_readb(opaque, addr + 1) << 16;
1571 ret |= ppc4xx_i2c_readb(opaque, addr + 2) << 8;
1572 ret |= ppc4xx_i2c_readb(opaque, addr + 3);
1574 return ret;
1577 static void ppc4xx_i2c_writel (void *opaque,
1578 target_phys_addr_t addr, uint32_t value)
1580 #ifdef DEBUG_I2C
1581 printf("%s: addr " PADDRX " val %08x\n", __func__, addr, value);
1582 #endif
1583 ppc4xx_i2c_writeb(opaque, addr, value >> 24);
1584 ppc4xx_i2c_writeb(opaque, addr + 1, value >> 16);
1585 ppc4xx_i2c_writeb(opaque, addr + 2, value >> 8);
1586 ppc4xx_i2c_writeb(opaque, addr + 3, value);
1589 static CPUReadMemoryFunc *i2c_read[] = {
1590 &ppc4xx_i2c_readb,
1591 &ppc4xx_i2c_readw,
1592 &ppc4xx_i2c_readl,
1595 static CPUWriteMemoryFunc *i2c_write[] = {
1596 &ppc4xx_i2c_writeb,
1597 &ppc4xx_i2c_writew,
1598 &ppc4xx_i2c_writel,
1601 static void ppc4xx_i2c_reset (void *opaque)
1603 ppc4xx_i2c_t *i2c;
1605 i2c = opaque;
1606 i2c->mdata = 0x00;
1607 i2c->sdata = 0x00;
1608 i2c->cntl = 0x00;
1609 i2c->mdcntl = 0x00;
1610 i2c->sts = 0x00;
1611 i2c->extsts = 0x00;
1612 i2c->clkdiv = 0x00;
1613 i2c->xfrcnt = 0x00;
1614 i2c->directcntl = 0x0F;
1617 void ppc405_i2c_init (CPUState *env, ppc4xx_mmio_t *mmio,
1618 target_phys_addr_t offset, qemu_irq irq)
1620 ppc4xx_i2c_t *i2c;
1622 i2c = qemu_mallocz(sizeof(ppc4xx_i2c_t));
1623 if (i2c != NULL) {
1624 i2c->base = offset;
1625 i2c->irq = irq;
1626 ppc4xx_i2c_reset(i2c);
1627 #ifdef DEBUG_I2C
1628 printf("%s: offset=" PADDRX "\n", __func__, offset);
1629 #endif
1630 ppc4xx_mmio_register(env, mmio, offset, 0x011,
1631 i2c_read, i2c_write, i2c);
1632 qemu_register_reset(ppc4xx_i2c_reset, i2c);
1636 /*****************************************************************************/
1637 /* General purpose timers */
1638 typedef struct ppc4xx_gpt_t ppc4xx_gpt_t;
1639 struct ppc4xx_gpt_t {
1640 target_phys_addr_t base;
1641 int64_t tb_offset;
1642 uint32_t tb_freq;
1643 struct QEMUTimer *timer;
1644 qemu_irq irqs[5];
1645 uint32_t oe;
1646 uint32_t ol;
1647 uint32_t im;
1648 uint32_t is;
1649 uint32_t ie;
1650 uint32_t comp[5];
1651 uint32_t mask[5];
1654 static uint32_t ppc4xx_gpt_readb (void *opaque, target_phys_addr_t addr)
1656 #ifdef DEBUG_GPT
1657 printf("%s: addr " PADDRX "\n", __func__, addr);
1658 #endif
1659 /* XXX: generate a bus fault */
1660 return -1;
1663 static void ppc4xx_gpt_writeb (void *opaque,
1664 target_phys_addr_t addr, uint32_t value)
1666 #ifdef DEBUG_I2C
1667 printf("%s: addr " PADDRX " val %08x\n", __func__, addr, value);
1668 #endif
1669 /* XXX: generate a bus fault */
1672 static uint32_t ppc4xx_gpt_readw (void *opaque, target_phys_addr_t addr)
1674 #ifdef DEBUG_GPT
1675 printf("%s: addr " PADDRX "\n", __func__, addr);
1676 #endif
1677 /* XXX: generate a bus fault */
1678 return -1;
1681 static void ppc4xx_gpt_writew (void *opaque,
1682 target_phys_addr_t addr, uint32_t value)
1684 #ifdef DEBUG_I2C
1685 printf("%s: addr " PADDRX " val %08x\n", __func__, addr, value);
1686 #endif
1687 /* XXX: generate a bus fault */
1690 static int ppc4xx_gpt_compare (ppc4xx_gpt_t *gpt, int n)
1692 /* XXX: TODO */
1693 return 0;
1696 static void ppc4xx_gpt_set_output (ppc4xx_gpt_t *gpt, int n, int level)
1698 /* XXX: TODO */
1701 static void ppc4xx_gpt_set_outputs (ppc4xx_gpt_t *gpt)
1703 uint32_t mask;
1704 int i;
1706 mask = 0x80000000;
1707 for (i = 0; i < 5; i++) {
1708 if (gpt->oe & mask) {
1709 /* Output is enabled */
1710 if (ppc4xx_gpt_compare(gpt, i)) {
1711 /* Comparison is OK */
1712 ppc4xx_gpt_set_output(gpt, i, gpt->ol & mask);
1713 } else {
1714 /* Comparison is KO */
1715 ppc4xx_gpt_set_output(gpt, i, gpt->ol & mask ? 0 : 1);
1718 mask = mask >> 1;
1722 static void ppc4xx_gpt_set_irqs (ppc4xx_gpt_t *gpt)
1724 uint32_t mask;
1725 int i;
1727 mask = 0x00008000;
1728 for (i = 0; i < 5; i++) {
1729 if (gpt->is & gpt->im & mask)
1730 qemu_irq_raise(gpt->irqs[i]);
1731 else
1732 qemu_irq_lower(gpt->irqs[i]);
1733 mask = mask >> 1;
1737 static void ppc4xx_gpt_compute_timer (ppc4xx_gpt_t *gpt)
1739 /* XXX: TODO */
1742 static uint32_t ppc4xx_gpt_readl (void *opaque, target_phys_addr_t addr)
1744 ppc4xx_gpt_t *gpt;
1745 uint32_t ret;
1746 int idx;
1748 #ifdef DEBUG_GPT
1749 printf("%s: addr " PADDRX "\n", __func__, addr);
1750 #endif
1751 gpt = opaque;
1752 switch (addr - gpt->base) {
1753 case 0x00:
1754 /* Time base counter */
1755 ret = muldiv64(qemu_get_clock(vm_clock) + gpt->tb_offset,
1756 gpt->tb_freq, ticks_per_sec);
1757 break;
1758 case 0x10:
1759 /* Output enable */
1760 ret = gpt->oe;
1761 break;
1762 case 0x14:
1763 /* Output level */
1764 ret = gpt->ol;
1765 break;
1766 case 0x18:
1767 /* Interrupt mask */
1768 ret = gpt->im;
1769 break;
1770 case 0x1C:
1771 case 0x20:
1772 /* Interrupt status */
1773 ret = gpt->is;
1774 break;
1775 case 0x24:
1776 /* Interrupt enable */
1777 ret = gpt->ie;
1778 break;
1779 case 0x80 ... 0x90:
1780 /* Compare timer */
1781 idx = ((addr - gpt->base) - 0x80) >> 2;
1782 ret = gpt->comp[idx];
1783 break;
1784 case 0xC0 ... 0xD0:
1785 /* Compare mask */
1786 idx = ((addr - gpt->base) - 0xC0) >> 2;
1787 ret = gpt->mask[idx];
1788 break;
1789 default:
1790 ret = -1;
1791 break;
1794 return ret;
1797 static void ppc4xx_gpt_writel (void *opaque,
1798 target_phys_addr_t addr, uint32_t value)
1800 ppc4xx_gpt_t *gpt;
1801 int idx;
1803 #ifdef DEBUG_I2C
1804 printf("%s: addr " PADDRX " val %08x\n", __func__, addr, value);
1805 #endif
1806 gpt = opaque;
1807 switch (addr - gpt->base) {
1808 case 0x00:
1809 /* Time base counter */
1810 gpt->tb_offset = muldiv64(value, ticks_per_sec, gpt->tb_freq)
1811 - qemu_get_clock(vm_clock);
1812 ppc4xx_gpt_compute_timer(gpt);
1813 break;
1814 case 0x10:
1815 /* Output enable */
1816 gpt->oe = value & 0xF8000000;
1817 ppc4xx_gpt_set_outputs(gpt);
1818 break;
1819 case 0x14:
1820 /* Output level */
1821 gpt->ol = value & 0xF8000000;
1822 ppc4xx_gpt_set_outputs(gpt);
1823 break;
1824 case 0x18:
1825 /* Interrupt mask */
1826 gpt->im = value & 0x0000F800;
1827 break;
1828 case 0x1C:
1829 /* Interrupt status set */
1830 gpt->is |= value & 0x0000F800;
1831 ppc4xx_gpt_set_irqs(gpt);
1832 break;
1833 case 0x20:
1834 /* Interrupt status clear */
1835 gpt->is &= ~(value & 0x0000F800);
1836 ppc4xx_gpt_set_irqs(gpt);
1837 break;
1838 case 0x24:
1839 /* Interrupt enable */
1840 gpt->ie = value & 0x0000F800;
1841 ppc4xx_gpt_set_irqs(gpt);
1842 break;
1843 case 0x80 ... 0x90:
1844 /* Compare timer */
1845 idx = ((addr - gpt->base) - 0x80) >> 2;
1846 gpt->comp[idx] = value & 0xF8000000;
1847 ppc4xx_gpt_compute_timer(gpt);
1848 break;
1849 case 0xC0 ... 0xD0:
1850 /* Compare mask */
1851 idx = ((addr - gpt->base) - 0xC0) >> 2;
1852 gpt->mask[idx] = value & 0xF8000000;
1853 ppc4xx_gpt_compute_timer(gpt);
1854 break;
1858 static CPUReadMemoryFunc *gpt_read[] = {
1859 &ppc4xx_gpt_readb,
1860 &ppc4xx_gpt_readw,
1861 &ppc4xx_gpt_readl,
1864 static CPUWriteMemoryFunc *gpt_write[] = {
1865 &ppc4xx_gpt_writeb,
1866 &ppc4xx_gpt_writew,
1867 &ppc4xx_gpt_writel,
1870 static void ppc4xx_gpt_cb (void *opaque)
1872 ppc4xx_gpt_t *gpt;
1874 gpt = opaque;
1875 ppc4xx_gpt_set_irqs(gpt);
1876 ppc4xx_gpt_set_outputs(gpt);
1877 ppc4xx_gpt_compute_timer(gpt);
1880 static void ppc4xx_gpt_reset (void *opaque)
1882 ppc4xx_gpt_t *gpt;
1883 int i;
1885 gpt = opaque;
1886 qemu_del_timer(gpt->timer);
1887 gpt->oe = 0x00000000;
1888 gpt->ol = 0x00000000;
1889 gpt->im = 0x00000000;
1890 gpt->is = 0x00000000;
1891 gpt->ie = 0x00000000;
1892 for (i = 0; i < 5; i++) {
1893 gpt->comp[i] = 0x00000000;
1894 gpt->mask[i] = 0x00000000;
1898 void ppc4xx_gpt_init (CPUState *env, ppc4xx_mmio_t *mmio,
1899 target_phys_addr_t offset, qemu_irq irqs[5])
1901 ppc4xx_gpt_t *gpt;
1902 int i;
1904 gpt = qemu_mallocz(sizeof(ppc4xx_gpt_t));
1905 if (gpt != NULL) {
1906 gpt->base = offset;
1907 for (i = 0; i < 5; i++)
1908 gpt->irqs[i] = irqs[i];
1909 gpt->timer = qemu_new_timer(vm_clock, &ppc4xx_gpt_cb, gpt);
1910 ppc4xx_gpt_reset(gpt);
1911 #ifdef DEBUG_GPT
1912 printf("%s: offset=" PADDRX "\n", __func__, offset);
1913 #endif
1914 ppc4xx_mmio_register(env, mmio, offset, 0x0D4,
1915 gpt_read, gpt_write, gpt);
1916 qemu_register_reset(ppc4xx_gpt_reset, gpt);
1920 /*****************************************************************************/
1921 /* MAL */
1922 enum {
1923 MAL0_CFG = 0x180,
1924 MAL0_ESR = 0x181,
1925 MAL0_IER = 0x182,
1926 MAL0_TXCASR = 0x184,
1927 MAL0_TXCARR = 0x185,
1928 MAL0_TXEOBISR = 0x186,
1929 MAL0_TXDEIR = 0x187,
1930 MAL0_RXCASR = 0x190,
1931 MAL0_RXCARR = 0x191,
1932 MAL0_RXEOBISR = 0x192,
1933 MAL0_RXDEIR = 0x193,
1934 MAL0_TXCTP0R = 0x1A0,
1935 MAL0_TXCTP1R = 0x1A1,
1936 MAL0_TXCTP2R = 0x1A2,
1937 MAL0_TXCTP3R = 0x1A3,
1938 MAL0_RXCTP0R = 0x1C0,
1939 MAL0_RXCTP1R = 0x1C1,
1940 MAL0_RCBS0 = 0x1E0,
1941 MAL0_RCBS1 = 0x1E1,
1944 typedef struct ppc40x_mal_t ppc40x_mal_t;
1945 struct ppc40x_mal_t {
1946 qemu_irq irqs[4];
1947 uint32_t cfg;
1948 uint32_t esr;
1949 uint32_t ier;
1950 uint32_t txcasr;
1951 uint32_t txcarr;
1952 uint32_t txeobisr;
1953 uint32_t txdeir;
1954 uint32_t rxcasr;
1955 uint32_t rxcarr;
1956 uint32_t rxeobisr;
1957 uint32_t rxdeir;
1958 uint32_t txctpr[4];
1959 uint32_t rxctpr[2];
1960 uint32_t rcbs[2];
1963 static void ppc40x_mal_reset (void *opaque);
1965 static target_ulong dcr_read_mal (void *opaque, int dcrn)
1967 ppc40x_mal_t *mal;
1968 target_ulong ret;
1970 mal = opaque;
1971 switch (dcrn) {
1972 case MAL0_CFG:
1973 ret = mal->cfg;
1974 break;
1975 case MAL0_ESR:
1976 ret = mal->esr;
1977 break;
1978 case MAL0_IER:
1979 ret = mal->ier;
1980 break;
1981 case MAL0_TXCASR:
1982 ret = mal->txcasr;
1983 break;
1984 case MAL0_TXCARR:
1985 ret = mal->txcarr;
1986 break;
1987 case MAL0_TXEOBISR:
1988 ret = mal->txeobisr;
1989 break;
1990 case MAL0_TXDEIR:
1991 ret = mal->txdeir;
1992 break;
1993 case MAL0_RXCASR:
1994 ret = mal->rxcasr;
1995 break;
1996 case MAL0_RXCARR:
1997 ret = mal->rxcarr;
1998 break;
1999 case MAL0_RXEOBISR:
2000 ret = mal->rxeobisr;
2001 break;
2002 case MAL0_RXDEIR:
2003 ret = mal->rxdeir;
2004 break;
2005 case MAL0_TXCTP0R:
2006 ret = mal->txctpr[0];
2007 break;
2008 case MAL0_TXCTP1R:
2009 ret = mal->txctpr[1];
2010 break;
2011 case MAL0_TXCTP2R:
2012 ret = mal->txctpr[2];
2013 break;
2014 case MAL0_TXCTP3R:
2015 ret = mal->txctpr[3];
2016 break;
2017 case MAL0_RXCTP0R:
2018 ret = mal->rxctpr[0];
2019 break;
2020 case MAL0_RXCTP1R:
2021 ret = mal->rxctpr[1];
2022 break;
2023 case MAL0_RCBS0:
2024 ret = mal->rcbs[0];
2025 break;
2026 case MAL0_RCBS1:
2027 ret = mal->rcbs[1];
2028 break;
2029 default:
2030 ret = 0;
2031 break;
2034 return ret;
2037 static void dcr_write_mal (void *opaque, int dcrn, target_ulong val)
2039 ppc40x_mal_t *mal;
2040 int idx;
2042 mal = opaque;
2043 switch (dcrn) {
2044 case MAL0_CFG:
2045 if (val & 0x80000000)
2046 ppc40x_mal_reset(mal);
2047 mal->cfg = val & 0x00FFC087;
2048 break;
2049 case MAL0_ESR:
2050 /* Read/clear */
2051 mal->esr &= ~val;
2052 break;
2053 case MAL0_IER:
2054 mal->ier = val & 0x0000001F;
2055 break;
2056 case MAL0_TXCASR:
2057 mal->txcasr = val & 0xF0000000;
2058 break;
2059 case MAL0_TXCARR:
2060 mal->txcarr = val & 0xF0000000;
2061 break;
2062 case MAL0_TXEOBISR:
2063 /* Read/clear */
2064 mal->txeobisr &= ~val;
2065 break;
2066 case MAL0_TXDEIR:
2067 /* Read/clear */
2068 mal->txdeir &= ~val;
2069 break;
2070 case MAL0_RXCASR:
2071 mal->rxcasr = val & 0xC0000000;
2072 break;
2073 case MAL0_RXCARR:
2074 mal->rxcarr = val & 0xC0000000;
2075 break;
2076 case MAL0_RXEOBISR:
2077 /* Read/clear */
2078 mal->rxeobisr &= ~val;
2079 break;
2080 case MAL0_RXDEIR:
2081 /* Read/clear */
2082 mal->rxdeir &= ~val;
2083 break;
2084 case MAL0_TXCTP0R:
2085 idx = 0;
2086 goto update_tx_ptr;
2087 case MAL0_TXCTP1R:
2088 idx = 1;
2089 goto update_tx_ptr;
2090 case MAL0_TXCTP2R:
2091 idx = 2;
2092 goto update_tx_ptr;
2093 case MAL0_TXCTP3R:
2094 idx = 3;
2095 update_tx_ptr:
2096 mal->txctpr[idx] = val;
2097 break;
2098 case MAL0_RXCTP0R:
2099 idx = 0;
2100 goto update_rx_ptr;
2101 case MAL0_RXCTP1R:
2102 idx = 1;
2103 update_rx_ptr:
2104 mal->rxctpr[idx] = val;
2105 break;
2106 case MAL0_RCBS0:
2107 idx = 0;
2108 goto update_rx_size;
2109 case MAL0_RCBS1:
2110 idx = 1;
2111 update_rx_size:
2112 mal->rcbs[idx] = val & 0x000000FF;
2113 break;
2117 static void ppc40x_mal_reset (void *opaque)
2119 ppc40x_mal_t *mal;
2121 mal = opaque;
2122 mal->cfg = 0x0007C000;
2123 mal->esr = 0x00000000;
2124 mal->ier = 0x00000000;
2125 mal->rxcasr = 0x00000000;
2126 mal->rxdeir = 0x00000000;
2127 mal->rxeobisr = 0x00000000;
2128 mal->txcasr = 0x00000000;
2129 mal->txdeir = 0x00000000;
2130 mal->txeobisr = 0x00000000;
2133 void ppc405_mal_init (CPUState *env, qemu_irq irqs[4])
2135 ppc40x_mal_t *mal;
2136 int i;
2138 mal = qemu_mallocz(sizeof(ppc40x_mal_t));
2139 if (mal != NULL) {
2140 for (i = 0; i < 4; i++)
2141 mal->irqs[i] = irqs[i];
2142 ppc40x_mal_reset(mal);
2143 qemu_register_reset(&ppc40x_mal_reset, mal);
2144 ppc_dcr_register(env, MAL0_CFG,
2145 mal, &dcr_read_mal, &dcr_write_mal);
2146 ppc_dcr_register(env, MAL0_ESR,
2147 mal, &dcr_read_mal, &dcr_write_mal);
2148 ppc_dcr_register(env, MAL0_IER,
2149 mal, &dcr_read_mal, &dcr_write_mal);
2150 ppc_dcr_register(env, MAL0_TXCASR,
2151 mal, &dcr_read_mal, &dcr_write_mal);
2152 ppc_dcr_register(env, MAL0_TXCARR,
2153 mal, &dcr_read_mal, &dcr_write_mal);
2154 ppc_dcr_register(env, MAL0_TXEOBISR,
2155 mal, &dcr_read_mal, &dcr_write_mal);
2156 ppc_dcr_register(env, MAL0_TXDEIR,
2157 mal, &dcr_read_mal, &dcr_write_mal);
2158 ppc_dcr_register(env, MAL0_RXCASR,
2159 mal, &dcr_read_mal, &dcr_write_mal);
2160 ppc_dcr_register(env, MAL0_RXCARR,
2161 mal, &dcr_read_mal, &dcr_write_mal);
2162 ppc_dcr_register(env, MAL0_RXEOBISR,
2163 mal, &dcr_read_mal, &dcr_write_mal);
2164 ppc_dcr_register(env, MAL0_RXDEIR,
2165 mal, &dcr_read_mal, &dcr_write_mal);
2166 ppc_dcr_register(env, MAL0_TXCTP0R,
2167 mal, &dcr_read_mal, &dcr_write_mal);
2168 ppc_dcr_register(env, MAL0_TXCTP1R,
2169 mal, &dcr_read_mal, &dcr_write_mal);
2170 ppc_dcr_register(env, MAL0_TXCTP2R,
2171 mal, &dcr_read_mal, &dcr_write_mal);
2172 ppc_dcr_register(env, MAL0_TXCTP3R,
2173 mal, &dcr_read_mal, &dcr_write_mal);
2174 ppc_dcr_register(env, MAL0_RXCTP0R,
2175 mal, &dcr_read_mal, &dcr_write_mal);
2176 ppc_dcr_register(env, MAL0_RXCTP1R,
2177 mal, &dcr_read_mal, &dcr_write_mal);
2178 ppc_dcr_register(env, MAL0_RCBS0,
2179 mal, &dcr_read_mal, &dcr_write_mal);
2180 ppc_dcr_register(env, MAL0_RCBS1,
2181 mal, &dcr_read_mal, &dcr_write_mal);
2185 /*****************************************************************************/
2186 /* SPR */
2187 void ppc40x_core_reset (CPUState *env)
2189 target_ulong dbsr;
2191 printf("Reset PowerPC core\n");
2192 cpu_ppc_reset(env);
2193 dbsr = env->spr[SPR_40x_DBSR];
2194 dbsr &= ~0x00000300;
2195 dbsr |= 0x00000100;
2196 env->spr[SPR_40x_DBSR] = dbsr;
2197 cpu_loop_exit();
2200 void ppc40x_chip_reset (CPUState *env)
2202 target_ulong dbsr;
2204 printf("Reset PowerPC chip\n");
2205 cpu_ppc_reset(env);
2206 /* XXX: TODO reset all internal peripherals */
2207 dbsr = env->spr[SPR_40x_DBSR];
2208 dbsr &= ~0x00000300;
2209 dbsr |= 0x00000200;
2210 env->spr[SPR_40x_DBSR] = dbsr;
2211 cpu_loop_exit();
2214 void ppc40x_system_reset (CPUState *env)
2216 printf("Reset PowerPC system\n");
2217 qemu_system_reset_request();
2220 void store_40x_dbcr0 (CPUState *env, uint32_t val)
2222 switch ((val >> 28) & 0x3) {
2223 case 0x0:
2224 /* No action */
2225 break;
2226 case 0x1:
2227 /* Core reset */
2228 ppc40x_core_reset(env);
2229 break;
2230 case 0x2:
2231 /* Chip reset */
2232 ppc40x_chip_reset(env);
2233 break;
2234 case 0x3:
2235 /* System reset */
2236 ppc40x_system_reset(env);
2237 break;
2241 /*****************************************************************************/
2242 /* PowerPC 405CR */
2243 enum {
2244 PPC405CR_CPC0_PLLMR = 0x0B0,
2245 PPC405CR_CPC0_CR0 = 0x0B1,
2246 PPC405CR_CPC0_CR1 = 0x0B2,
2247 PPC405CR_CPC0_PSR = 0x0B4,
2248 PPC405CR_CPC0_JTAGID = 0x0B5,
2249 PPC405CR_CPC0_ER = 0x0B9,
2250 PPC405CR_CPC0_FR = 0x0BA,
2251 PPC405CR_CPC0_SR = 0x0BB,
2254 enum {
2255 PPC405CR_CPU_CLK = 0,
2256 PPC405CR_TMR_CLK = 1,
2257 PPC405CR_PLB_CLK = 2,
2258 PPC405CR_SDRAM_CLK = 3,
2259 PPC405CR_OPB_CLK = 4,
2260 PPC405CR_EXT_CLK = 5,
2261 PPC405CR_UART_CLK = 6,
2262 PPC405CR_CLK_NB = 7,
2265 typedef struct ppc405cr_cpc_t ppc405cr_cpc_t;
2266 struct ppc405cr_cpc_t {
2267 clk_setup_t clk_setup[PPC405CR_CLK_NB];
2268 uint32_t sysclk;
2269 uint32_t psr;
2270 uint32_t cr0;
2271 uint32_t cr1;
2272 uint32_t jtagid;
2273 uint32_t pllmr;
2274 uint32_t er;
2275 uint32_t fr;
2278 static void ppc405cr_clk_setup (ppc405cr_cpc_t *cpc)
2280 uint64_t VCO_out, PLL_out;
2281 uint32_t CPU_clk, TMR_clk, SDRAM_clk, PLB_clk, OPB_clk, EXT_clk, UART_clk;
2282 int M, D0, D1, D2;
2284 D0 = ((cpc->pllmr >> 26) & 0x3) + 1; /* CBDV */
2285 if (cpc->pllmr & 0x80000000) {
2286 D1 = (((cpc->pllmr >> 20) - 1) & 0xF) + 1; /* FBDV */
2287 D2 = 8 - ((cpc->pllmr >> 16) & 0x7); /* FWDVA */
2288 M = D0 * D1 * D2;
2289 VCO_out = cpc->sysclk * M;
2290 if (VCO_out < 400000000 || VCO_out > 800000000) {
2291 /* PLL cannot lock */
2292 cpc->pllmr &= ~0x80000000;
2293 goto bypass_pll;
2295 PLL_out = VCO_out / D2;
2296 } else {
2297 /* Bypass PLL */
2298 bypass_pll:
2299 M = D0;
2300 PLL_out = cpc->sysclk * M;
2302 CPU_clk = PLL_out;
2303 if (cpc->cr1 & 0x00800000)
2304 TMR_clk = cpc->sysclk; /* Should have a separate clock */
2305 else
2306 TMR_clk = CPU_clk;
2307 PLB_clk = CPU_clk / D0;
2308 SDRAM_clk = PLB_clk;
2309 D0 = ((cpc->pllmr >> 10) & 0x3) + 1;
2310 OPB_clk = PLB_clk / D0;
2311 D0 = ((cpc->pllmr >> 24) & 0x3) + 2;
2312 EXT_clk = PLB_clk / D0;
2313 D0 = ((cpc->cr0 >> 1) & 0x1F) + 1;
2314 UART_clk = CPU_clk / D0;
2315 /* Setup CPU clocks */
2316 clk_setup(&cpc->clk_setup[PPC405CR_CPU_CLK], CPU_clk);
2317 /* Setup time-base clock */
2318 clk_setup(&cpc->clk_setup[PPC405CR_TMR_CLK], TMR_clk);
2319 /* Setup PLB clock */
2320 clk_setup(&cpc->clk_setup[PPC405CR_PLB_CLK], PLB_clk);
2321 /* Setup SDRAM clock */
2322 clk_setup(&cpc->clk_setup[PPC405CR_SDRAM_CLK], SDRAM_clk);
2323 /* Setup OPB clock */
2324 clk_setup(&cpc->clk_setup[PPC405CR_OPB_CLK], OPB_clk);
2325 /* Setup external clock */
2326 clk_setup(&cpc->clk_setup[PPC405CR_EXT_CLK], EXT_clk);
2327 /* Setup UART clock */
2328 clk_setup(&cpc->clk_setup[PPC405CR_UART_CLK], UART_clk);
2331 static target_ulong dcr_read_crcpc (void *opaque, int dcrn)
2333 ppc405cr_cpc_t *cpc;
2334 target_ulong ret;
2336 cpc = opaque;
2337 switch (dcrn) {
2338 case PPC405CR_CPC0_PLLMR:
2339 ret = cpc->pllmr;
2340 break;
2341 case PPC405CR_CPC0_CR0:
2342 ret = cpc->cr0;
2343 break;
2344 case PPC405CR_CPC0_CR1:
2345 ret = cpc->cr1;
2346 break;
2347 case PPC405CR_CPC0_PSR:
2348 ret = cpc->psr;
2349 break;
2350 case PPC405CR_CPC0_JTAGID:
2351 ret = cpc->jtagid;
2352 break;
2353 case PPC405CR_CPC0_ER:
2354 ret = cpc->er;
2355 break;
2356 case PPC405CR_CPC0_FR:
2357 ret = cpc->fr;
2358 break;
2359 case PPC405CR_CPC0_SR:
2360 ret = ~(cpc->er | cpc->fr) & 0xFFFF0000;
2361 break;
2362 default:
2363 /* Avoid gcc warning */
2364 ret = 0;
2365 break;
2368 return ret;
2371 static void dcr_write_crcpc (void *opaque, int dcrn, target_ulong val)
2373 ppc405cr_cpc_t *cpc;
2375 cpc = opaque;
2376 switch (dcrn) {
2377 case PPC405CR_CPC0_PLLMR:
2378 cpc->pllmr = val & 0xFFF77C3F;
2379 break;
2380 case PPC405CR_CPC0_CR0:
2381 cpc->cr0 = val & 0x0FFFFFFE;
2382 break;
2383 case PPC405CR_CPC0_CR1:
2384 cpc->cr1 = val & 0x00800000;
2385 break;
2386 case PPC405CR_CPC0_PSR:
2387 /* Read-only */
2388 break;
2389 case PPC405CR_CPC0_JTAGID:
2390 /* Read-only */
2391 break;
2392 case PPC405CR_CPC0_ER:
2393 cpc->er = val & 0xBFFC0000;
2394 break;
2395 case PPC405CR_CPC0_FR:
2396 cpc->fr = val & 0xBFFC0000;
2397 break;
2398 case PPC405CR_CPC0_SR:
2399 /* Read-only */
2400 break;
2404 static void ppc405cr_cpc_reset (void *opaque)
2406 ppc405cr_cpc_t *cpc;
2407 int D;
2409 cpc = opaque;
2410 /* Compute PLLMR value from PSR settings */
2411 cpc->pllmr = 0x80000000;
2412 /* PFWD */
2413 switch ((cpc->psr >> 30) & 3) {
2414 case 0:
2415 /* Bypass */
2416 cpc->pllmr &= ~0x80000000;
2417 break;
2418 case 1:
2419 /* Divide by 3 */
2420 cpc->pllmr |= 5 << 16;
2421 break;
2422 case 2:
2423 /* Divide by 4 */
2424 cpc->pllmr |= 4 << 16;
2425 break;
2426 case 3:
2427 /* Divide by 6 */
2428 cpc->pllmr |= 2 << 16;
2429 break;
2431 /* PFBD */
2432 D = (cpc->psr >> 28) & 3;
2433 cpc->pllmr |= (D + 1) << 20;
2434 /* PT */
2435 D = (cpc->psr >> 25) & 7;
2436 switch (D) {
2437 case 0x2:
2438 cpc->pllmr |= 0x13;
2439 break;
2440 case 0x4:
2441 cpc->pllmr |= 0x15;
2442 break;
2443 case 0x5:
2444 cpc->pllmr |= 0x16;
2445 break;
2446 default:
2447 break;
2449 /* PDC */
2450 D = (cpc->psr >> 23) & 3;
2451 cpc->pllmr |= D << 26;
2452 /* ODP */
2453 D = (cpc->psr >> 21) & 3;
2454 cpc->pllmr |= D << 10;
2455 /* EBPD */
2456 D = (cpc->psr >> 17) & 3;
2457 cpc->pllmr |= D << 24;
2458 cpc->cr0 = 0x0000003C;
2459 cpc->cr1 = 0x2B0D8800;
2460 cpc->er = 0x00000000;
2461 cpc->fr = 0x00000000;
2462 ppc405cr_clk_setup(cpc);
2465 static void ppc405cr_clk_init (ppc405cr_cpc_t *cpc)
2467 int D;
2469 /* XXX: this should be read from IO pins */
2470 cpc->psr = 0x00000000; /* 8 bits ROM */
2471 /* PFWD */
2472 D = 0x2; /* Divide by 4 */
2473 cpc->psr |= D << 30;
2474 /* PFBD */
2475 D = 0x1; /* Divide by 2 */
2476 cpc->psr |= D << 28;
2477 /* PDC */
2478 D = 0x1; /* Divide by 2 */
2479 cpc->psr |= D << 23;
2480 /* PT */
2481 D = 0x5; /* M = 16 */
2482 cpc->psr |= D << 25;
2483 /* ODP */
2484 D = 0x1; /* Divide by 2 */
2485 cpc->psr |= D << 21;
2486 /* EBDP */
2487 D = 0x2; /* Divide by 4 */
2488 cpc->psr |= D << 17;
2491 static void ppc405cr_cpc_init (CPUState *env, clk_setup_t clk_setup[7],
2492 uint32_t sysclk)
2494 ppc405cr_cpc_t *cpc;
2496 cpc = qemu_mallocz(sizeof(ppc405cr_cpc_t));
2497 if (cpc != NULL) {
2498 memcpy(cpc->clk_setup, clk_setup,
2499 PPC405CR_CLK_NB * sizeof(clk_setup_t));
2500 cpc->sysclk = sysclk;
2501 cpc->jtagid = 0x42051049;
2502 ppc_dcr_register(env, PPC405CR_CPC0_PSR, cpc,
2503 &dcr_read_crcpc, &dcr_write_crcpc);
2504 ppc_dcr_register(env, PPC405CR_CPC0_CR0, cpc,
2505 &dcr_read_crcpc, &dcr_write_crcpc);
2506 ppc_dcr_register(env, PPC405CR_CPC0_CR1, cpc,
2507 &dcr_read_crcpc, &dcr_write_crcpc);
2508 ppc_dcr_register(env, PPC405CR_CPC0_JTAGID, cpc,
2509 &dcr_read_crcpc, &dcr_write_crcpc);
2510 ppc_dcr_register(env, PPC405CR_CPC0_PLLMR, cpc,
2511 &dcr_read_crcpc, &dcr_write_crcpc);
2512 ppc_dcr_register(env, PPC405CR_CPC0_ER, cpc,
2513 &dcr_read_crcpc, &dcr_write_crcpc);
2514 ppc_dcr_register(env, PPC405CR_CPC0_FR, cpc,
2515 &dcr_read_crcpc, &dcr_write_crcpc);
2516 ppc_dcr_register(env, PPC405CR_CPC0_SR, cpc,
2517 &dcr_read_crcpc, &dcr_write_crcpc);
2518 ppc405cr_clk_init(cpc);
2519 qemu_register_reset(ppc405cr_cpc_reset, cpc);
2520 ppc405cr_cpc_reset(cpc);
2524 CPUState *ppc405cr_init (target_phys_addr_t ram_bases[4],
2525 target_phys_addr_t ram_sizes[4],
2526 uint32_t sysclk, qemu_irq **picp,
2527 ram_addr_t *offsetp, int do_init)
2529 clk_setup_t clk_setup[PPC405CR_CLK_NB];
2530 qemu_irq dma_irqs[4];
2531 CPUState *env;
2532 ppc4xx_mmio_t *mmio;
2533 qemu_irq *pic, *irqs;
2534 ram_addr_t offset;
2535 int i;
2537 memset(clk_setup, 0, sizeof(clk_setup));
2538 env = ppc4xx_init("405cr", &clk_setup[PPC405CR_CPU_CLK],
2539 &clk_setup[PPC405CR_TMR_CLK], sysclk);
2540 /* Memory mapped devices registers */
2541 mmio = ppc4xx_mmio_init(env, 0xEF600000);
2542 /* PLB arbitrer */
2543 ppc4xx_plb_init(env);
2544 /* PLB to OPB bridge */
2545 ppc4xx_pob_init(env);
2546 /* OBP arbitrer */
2547 ppc4xx_opba_init(env, mmio, 0x600);
2548 /* Universal interrupt controller */
2549 irqs = qemu_mallocz(sizeof(qemu_irq) * PPCUIC_OUTPUT_NB);
2550 irqs[PPCUIC_OUTPUT_INT] =
2551 ((qemu_irq *)env->irq_inputs)[PPC40x_INPUT_INT];
2552 irqs[PPCUIC_OUTPUT_CINT] =
2553 ((qemu_irq *)env->irq_inputs)[PPC40x_INPUT_CINT];
2554 pic = ppcuic_init(env, irqs, 0x0C0, 0, 1);
2555 *picp = pic;
2556 /* SDRAM controller */
2557 ppc405_sdram_init(env, pic[14], 1, ram_bases, ram_sizes, do_init);
2558 offset = 0;
2559 for (i = 0; i < 4; i++)
2560 offset += ram_sizes[i];
2561 /* External bus controller */
2562 ppc405_ebc_init(env);
2563 /* DMA controller */
2564 dma_irqs[0] = pic[26];
2565 dma_irqs[1] = pic[25];
2566 dma_irqs[2] = pic[24];
2567 dma_irqs[3] = pic[23];
2568 ppc405_dma_init(env, dma_irqs);
2569 /* Serial ports */
2570 if (serial_hds[0] != NULL) {
2571 ppc405_serial_init(env, mmio, 0x300, pic[31], serial_hds[0]);
2573 if (serial_hds[1] != NULL) {
2574 ppc405_serial_init(env, mmio, 0x400, pic[30], serial_hds[1]);
2576 /* IIC controller */
2577 ppc405_i2c_init(env, mmio, 0x500, pic[29]);
2578 /* GPIO */
2579 ppc405_gpio_init(env, mmio, 0x700);
2580 /* CPU control */
2581 ppc405cr_cpc_init(env, clk_setup, sysclk);
2582 *offsetp = offset;
2584 return env;
2587 /*****************************************************************************/
2588 /* PowerPC 405EP */
2589 /* CPU control */
2590 enum {
2591 PPC405EP_CPC0_PLLMR0 = 0x0F0,
2592 PPC405EP_CPC0_BOOT = 0x0F1,
2593 PPC405EP_CPC0_EPCTL = 0x0F3,
2594 PPC405EP_CPC0_PLLMR1 = 0x0F4,
2595 PPC405EP_CPC0_UCR = 0x0F5,
2596 PPC405EP_CPC0_SRR = 0x0F6,
2597 PPC405EP_CPC0_JTAGID = 0x0F7,
2598 PPC405EP_CPC0_PCI = 0x0F9,
2599 #if 0
2600 PPC405EP_CPC0_ER = xxx,
2601 PPC405EP_CPC0_FR = xxx,
2602 PPC405EP_CPC0_SR = xxx,
2603 #endif
2606 enum {
2607 PPC405EP_CPU_CLK = 0,
2608 PPC405EP_PLB_CLK = 1,
2609 PPC405EP_OPB_CLK = 2,
2610 PPC405EP_EBC_CLK = 3,
2611 PPC405EP_MAL_CLK = 4,
2612 PPC405EP_PCI_CLK = 5,
2613 PPC405EP_UART0_CLK = 6,
2614 PPC405EP_UART1_CLK = 7,
2615 PPC405EP_CLK_NB = 8,
2618 typedef struct ppc405ep_cpc_t ppc405ep_cpc_t;
2619 struct ppc405ep_cpc_t {
2620 uint32_t sysclk;
2621 clk_setup_t clk_setup[PPC405EP_CLK_NB];
2622 uint32_t boot;
2623 uint32_t epctl;
2624 uint32_t pllmr[2];
2625 uint32_t ucr;
2626 uint32_t srr;
2627 uint32_t jtagid;
2628 uint32_t pci;
2629 /* Clock and power management */
2630 uint32_t er;
2631 uint32_t fr;
2632 uint32_t sr;
2635 static void ppc405ep_compute_clocks (ppc405ep_cpc_t *cpc)
2637 uint32_t CPU_clk, PLB_clk, OPB_clk, EBC_clk, MAL_clk, PCI_clk;
2638 uint32_t UART0_clk, UART1_clk;
2639 uint64_t VCO_out, PLL_out;
2640 int M, D;
2642 VCO_out = 0;
2643 if ((cpc->pllmr[1] & 0x80000000) && !(cpc->pllmr[1] & 0x40000000)) {
2644 M = (((cpc->pllmr[1] >> 20) - 1) & 0xF) + 1; /* FBMUL */
2645 // printf("FBMUL %01x %d\n", (cpc->pllmr[1] >> 20) & 0xF, M);
2646 D = 8 - ((cpc->pllmr[1] >> 16) & 0x7); /* FWDA */
2647 // printf("FWDA %01x %d\n", (cpc->pllmr[1] >> 16) & 0x7, D);
2648 VCO_out = cpc->sysclk * M * D;
2649 if (VCO_out < 500000000UL || VCO_out > 1000000000UL) {
2650 /* Error - unlock the PLL */
2651 printf("VCO out of range %" PRIu64 "\n", VCO_out);
2652 #if 0
2653 cpc->pllmr[1] &= ~0x80000000;
2654 goto pll_bypass;
2655 #endif
2657 PLL_out = VCO_out / D;
2658 /* Pretend the PLL is locked */
2659 cpc->boot |= 0x00000001;
2660 } else {
2661 #if 0
2662 pll_bypass:
2663 #endif
2664 PLL_out = cpc->sysclk;
2665 if (cpc->pllmr[1] & 0x40000000) {
2666 /* Pretend the PLL is not locked */
2667 cpc->boot &= ~0x00000001;
2670 /* Now, compute all other clocks */
2671 D = ((cpc->pllmr[0] >> 20) & 0x3) + 1; /* CCDV */
2672 #ifdef DEBUG_CLOCKS
2673 // printf("CCDV %01x %d\n", (cpc->pllmr[0] >> 20) & 0x3, D);
2674 #endif
2675 CPU_clk = PLL_out / D;
2676 D = ((cpc->pllmr[0] >> 16) & 0x3) + 1; /* CBDV */
2677 #ifdef DEBUG_CLOCKS
2678 // printf("CBDV %01x %d\n", (cpc->pllmr[0] >> 16) & 0x3, D);
2679 #endif
2680 PLB_clk = CPU_clk / D;
2681 D = ((cpc->pllmr[0] >> 12) & 0x3) + 1; /* OPDV */
2682 #ifdef DEBUG_CLOCKS
2683 // printf("OPDV %01x %d\n", (cpc->pllmr[0] >> 12) & 0x3, D);
2684 #endif
2685 OPB_clk = PLB_clk / D;
2686 D = ((cpc->pllmr[0] >> 8) & 0x3) + 2; /* EPDV */
2687 #ifdef DEBUG_CLOCKS
2688 // printf("EPDV %01x %d\n", (cpc->pllmr[0] >> 8) & 0x3, D);
2689 #endif
2690 EBC_clk = PLB_clk / D;
2691 D = ((cpc->pllmr[0] >> 4) & 0x3) + 1; /* MPDV */
2692 #ifdef DEBUG_CLOCKS
2693 // printf("MPDV %01x %d\n", (cpc->pllmr[0] >> 4) & 0x3, D);
2694 #endif
2695 MAL_clk = PLB_clk / D;
2696 D = (cpc->pllmr[0] & 0x3) + 1; /* PPDV */
2697 #ifdef DEBUG_CLOCKS
2698 // printf("PPDV %01x %d\n", cpc->pllmr[0] & 0x3, D);
2699 #endif
2700 PCI_clk = PLB_clk / D;
2701 D = ((cpc->ucr - 1) & 0x7F) + 1; /* U0DIV */
2702 #ifdef DEBUG_CLOCKS
2703 // printf("U0DIV %01x %d\n", cpc->ucr & 0x7F, D);
2704 #endif
2705 UART0_clk = PLL_out / D;
2706 D = (((cpc->ucr >> 8) - 1) & 0x7F) + 1; /* U1DIV */
2707 #ifdef DEBUG_CLOCKS
2708 // printf("U1DIV %01x %d\n", (cpc->ucr >> 8) & 0x7F, D);
2709 #endif
2710 UART1_clk = PLL_out / D;
2711 #ifdef DEBUG_CLOCKS
2712 printf("Setup PPC405EP clocks - sysclk %d VCO %" PRIu64
2713 " PLL out %" PRIu64 " Hz\n", cpc->sysclk, VCO_out, PLL_out);
2714 printf("CPU %d PLB %d OPB %d EBC %d MAL %d PCI %d UART0 %d UART1 %d\n",
2715 CPU_clk, PLB_clk, OPB_clk, EBC_clk, MAL_clk, PCI_clk,
2716 UART0_clk, UART1_clk);
2717 printf("CB %p opaque %p\n", cpc->clk_setup[PPC405EP_CPU_CLK].cb,
2718 cpc->clk_setup[PPC405EP_CPU_CLK].opaque);
2719 #endif
2720 /* Setup CPU clocks */
2721 clk_setup(&cpc->clk_setup[PPC405EP_CPU_CLK], CPU_clk);
2722 /* Setup PLB clock */
2723 clk_setup(&cpc->clk_setup[PPC405EP_PLB_CLK], PLB_clk);
2724 /* Setup OPB clock */
2725 clk_setup(&cpc->clk_setup[PPC405EP_OPB_CLK], OPB_clk);
2726 /* Setup external clock */
2727 clk_setup(&cpc->clk_setup[PPC405EP_EBC_CLK], EBC_clk);
2728 /* Setup MAL clock */
2729 clk_setup(&cpc->clk_setup[PPC405EP_MAL_CLK], MAL_clk);
2730 /* Setup PCI clock */
2731 clk_setup(&cpc->clk_setup[PPC405EP_PCI_CLK], PCI_clk);
2732 /* Setup UART0 clock */
2733 clk_setup(&cpc->clk_setup[PPC405EP_UART0_CLK], UART0_clk);
2734 /* Setup UART1 clock */
2735 clk_setup(&cpc->clk_setup[PPC405EP_UART1_CLK], UART1_clk);
2738 static target_ulong dcr_read_epcpc (void *opaque, int dcrn)
2740 ppc405ep_cpc_t *cpc;
2741 target_ulong ret;
2743 cpc = opaque;
2744 switch (dcrn) {
2745 case PPC405EP_CPC0_BOOT:
2746 ret = cpc->boot;
2747 break;
2748 case PPC405EP_CPC0_EPCTL:
2749 ret = cpc->epctl;
2750 break;
2751 case PPC405EP_CPC0_PLLMR0:
2752 ret = cpc->pllmr[0];
2753 break;
2754 case PPC405EP_CPC0_PLLMR1:
2755 ret = cpc->pllmr[1];
2756 break;
2757 case PPC405EP_CPC0_UCR:
2758 ret = cpc->ucr;
2759 break;
2760 case PPC405EP_CPC0_SRR:
2761 ret = cpc->srr;
2762 break;
2763 case PPC405EP_CPC0_JTAGID:
2764 ret = cpc->jtagid;
2765 break;
2766 case PPC405EP_CPC0_PCI:
2767 ret = cpc->pci;
2768 break;
2769 default:
2770 /* Avoid gcc warning */
2771 ret = 0;
2772 break;
2775 return ret;
2778 static void dcr_write_epcpc (void *opaque, int dcrn, target_ulong val)
2780 ppc405ep_cpc_t *cpc;
2782 cpc = opaque;
2783 switch (dcrn) {
2784 case PPC405EP_CPC0_BOOT:
2785 /* Read-only register */
2786 break;
2787 case PPC405EP_CPC0_EPCTL:
2788 /* Don't care for now */
2789 cpc->epctl = val & 0xC00000F3;
2790 break;
2791 case PPC405EP_CPC0_PLLMR0:
2792 cpc->pllmr[0] = val & 0x00633333;
2793 ppc405ep_compute_clocks(cpc);
2794 break;
2795 case PPC405EP_CPC0_PLLMR1:
2796 cpc->pllmr[1] = val & 0xC0F73FFF;
2797 ppc405ep_compute_clocks(cpc);
2798 break;
2799 case PPC405EP_CPC0_UCR:
2800 /* UART control - don't care for now */
2801 cpc->ucr = val & 0x003F7F7F;
2802 break;
2803 case PPC405EP_CPC0_SRR:
2804 cpc->srr = val;
2805 break;
2806 case PPC405EP_CPC0_JTAGID:
2807 /* Read-only */
2808 break;
2809 case PPC405EP_CPC0_PCI:
2810 cpc->pci = val;
2811 break;
2815 static void ppc405ep_cpc_reset (void *opaque)
2817 ppc405ep_cpc_t *cpc = opaque;
2819 cpc->boot = 0x00000010; /* Boot from PCI - IIC EEPROM disabled */
2820 cpc->epctl = 0x00000000;
2821 cpc->pllmr[0] = 0x00011010;
2822 cpc->pllmr[1] = 0x40000000;
2823 cpc->ucr = 0x00000000;
2824 cpc->srr = 0x00040000;
2825 cpc->pci = 0x00000000;
2826 cpc->er = 0x00000000;
2827 cpc->fr = 0x00000000;
2828 cpc->sr = 0x00000000;
2829 ppc405ep_compute_clocks(cpc);
2832 /* XXX: sysclk should be between 25 and 100 MHz */
2833 static void ppc405ep_cpc_init (CPUState *env, clk_setup_t clk_setup[8],
2834 uint32_t sysclk)
2836 ppc405ep_cpc_t *cpc;
2838 cpc = qemu_mallocz(sizeof(ppc405ep_cpc_t));
2839 if (cpc != NULL) {
2840 memcpy(cpc->clk_setup, clk_setup,
2841 PPC405EP_CLK_NB * sizeof(clk_setup_t));
2842 cpc->jtagid = 0x20267049;
2843 cpc->sysclk = sysclk;
2844 ppc405ep_cpc_reset(cpc);
2845 qemu_register_reset(&ppc405ep_cpc_reset, cpc);
2846 ppc_dcr_register(env, PPC405EP_CPC0_BOOT, cpc,
2847 &dcr_read_epcpc, &dcr_write_epcpc);
2848 ppc_dcr_register(env, PPC405EP_CPC0_EPCTL, cpc,
2849 &dcr_read_epcpc, &dcr_write_epcpc);
2850 ppc_dcr_register(env, PPC405EP_CPC0_PLLMR0, cpc,
2851 &dcr_read_epcpc, &dcr_write_epcpc);
2852 ppc_dcr_register(env, PPC405EP_CPC0_PLLMR1, cpc,
2853 &dcr_read_epcpc, &dcr_write_epcpc);
2854 ppc_dcr_register(env, PPC405EP_CPC0_UCR, cpc,
2855 &dcr_read_epcpc, &dcr_write_epcpc);
2856 ppc_dcr_register(env, PPC405EP_CPC0_SRR, cpc,
2857 &dcr_read_epcpc, &dcr_write_epcpc);
2858 ppc_dcr_register(env, PPC405EP_CPC0_JTAGID, cpc,
2859 &dcr_read_epcpc, &dcr_write_epcpc);
2860 ppc_dcr_register(env, PPC405EP_CPC0_PCI, cpc,
2861 &dcr_read_epcpc, &dcr_write_epcpc);
2862 #if 0
2863 ppc_dcr_register(env, PPC405EP_CPC0_ER, cpc,
2864 &dcr_read_epcpc, &dcr_write_epcpc);
2865 ppc_dcr_register(env, PPC405EP_CPC0_FR, cpc,
2866 &dcr_read_epcpc, &dcr_write_epcpc);
2867 ppc_dcr_register(env, PPC405EP_CPC0_SR, cpc,
2868 &dcr_read_epcpc, &dcr_write_epcpc);
2869 #endif
2873 CPUState *ppc405ep_init (target_phys_addr_t ram_bases[2],
2874 target_phys_addr_t ram_sizes[2],
2875 uint32_t sysclk, qemu_irq **picp,
2876 ram_addr_t *offsetp, int do_init)
2878 clk_setup_t clk_setup[PPC405EP_CLK_NB], tlb_clk_setup;
2879 qemu_irq dma_irqs[4], gpt_irqs[5], mal_irqs[4];
2880 CPUState *env;
2881 ppc4xx_mmio_t *mmio;
2882 qemu_irq *pic, *irqs;
2883 ram_addr_t offset;
2884 int i;
2886 memset(clk_setup, 0, sizeof(clk_setup));
2887 /* init CPUs */
2888 env = ppc4xx_init("405ep", &clk_setup[PPC405EP_CPU_CLK],
2889 &tlb_clk_setup, sysclk);
2890 clk_setup[PPC405EP_CPU_CLK].cb = tlb_clk_setup.cb;
2891 clk_setup[PPC405EP_CPU_CLK].opaque = tlb_clk_setup.opaque;
2892 /* Internal devices init */
2893 /* Memory mapped devices registers */
2894 mmio = ppc4xx_mmio_init(env, 0xEF600000);
2895 /* PLB arbitrer */
2896 ppc4xx_plb_init(env);
2897 /* PLB to OPB bridge */
2898 ppc4xx_pob_init(env);
2899 /* OBP arbitrer */
2900 ppc4xx_opba_init(env, mmio, 0x600);
2901 /* Universal interrupt controller */
2902 irqs = qemu_mallocz(sizeof(qemu_irq) * PPCUIC_OUTPUT_NB);
2903 irqs[PPCUIC_OUTPUT_INT] =
2904 ((qemu_irq *)env->irq_inputs)[PPC40x_INPUT_INT];
2905 irqs[PPCUIC_OUTPUT_CINT] =
2906 ((qemu_irq *)env->irq_inputs)[PPC40x_INPUT_CINT];
2907 pic = ppcuic_init(env, irqs, 0x0C0, 0, 1);
2908 *picp = pic;
2909 /* SDRAM controller */
2910 ppc405_sdram_init(env, pic[14], 2, ram_bases, ram_sizes, do_init);
2911 offset = 0;
2912 for (i = 0; i < 2; i++)
2913 offset += ram_sizes[i];
2914 /* External bus controller */
2915 ppc405_ebc_init(env);
2916 /* DMA controller */
2917 dma_irqs[0] = pic[26];
2918 dma_irqs[1] = pic[25];
2919 dma_irqs[2] = pic[24];
2920 dma_irqs[3] = pic[23];
2921 ppc405_dma_init(env, dma_irqs);
2922 /* IIC controller */
2923 ppc405_i2c_init(env, mmio, 0x500, pic[29]);
2924 /* GPIO */
2925 ppc405_gpio_init(env, mmio, 0x700);
2926 /* Serial ports */
2927 if (serial_hds[0] != NULL) {
2928 ppc405_serial_init(env, mmio, 0x300, pic[31], serial_hds[0]);
2930 if (serial_hds[1] != NULL) {
2931 ppc405_serial_init(env, mmio, 0x400, pic[30], serial_hds[1]);
2933 /* OCM */
2934 ppc405_ocm_init(env, ram_sizes[0] + ram_sizes[1]);
2935 offset += 4096;
2936 /* GPT */
2937 gpt_irqs[0] = pic[12];
2938 gpt_irqs[1] = pic[11];
2939 gpt_irqs[2] = pic[10];
2940 gpt_irqs[3] = pic[9];
2941 gpt_irqs[4] = pic[8];
2942 ppc4xx_gpt_init(env, mmio, 0x000, gpt_irqs);
2943 /* PCI */
2944 /* Uses pic[28], pic[15], pic[13] */
2945 /* MAL */
2946 mal_irqs[0] = pic[20];
2947 mal_irqs[1] = pic[19];
2948 mal_irqs[2] = pic[18];
2949 mal_irqs[3] = pic[17];
2950 ppc405_mal_init(env, mal_irqs);
2951 /* Ethernet */
2952 /* Uses pic[22], pic[16], pic[14] */
2953 /* CPU control */
2954 ppc405ep_cpc_init(env, clk_setup, sysclk);
2955 *offsetp = offset;
2957 return env;