2 * ARM Versatile/PB PCI host controller
4 * Copyright (c) 2006-2009 CodeSourcery.
5 * Written by Paul Brook
7 * This code is licensed under the LGPL.
10 #include "qemu/osdep.h"
11 #include "qemu/units.h"
12 #include "hw/sysbus.h"
13 #include "migration/vmstate.h"
15 #include "hw/pci/pci.h"
16 #include "hw/pci/pci_bus.h"
17 #include "hw/pci/pci_host.h"
18 #include "hw/qdev-properties.h"
20 #include "qemu/module.h"
21 #include "qom/object.h"
23 /* Old and buggy versions of QEMU used the wrong mapping from
24 * PCI IRQs to system interrupt lines. Unfortunately the Linux
25 * kernel also had the corresponding bug in setting up interrupts
26 * (so older kernels work on QEMU and not on real hardware).
27 * We automatically detect these broken kernels and flip back
28 * to the broken irq mapping by spotting guest writes to the
29 * PCI_INTERRUPT_LINE register to see where the guest thinks
30 * interrupts are going to be routed. So we start in state
31 * ASSUME_OK on reset, and transition to either BROKEN or
32 * FORCE_OK at the first write to an INTERRUPT_LINE register for
33 * a slot where broken and correct interrupt mapping would differ.
34 * Once in either BROKEN or FORCE_OK we never transition again;
35 * this allows a newer kernel to use the INTERRUPT_LINE
36 * registers arbitrarily once it has indicated that it isn't
37 * broken in its init code somewhere.
39 * Unfortunately we have to cope with multiple different
40 * variants on the broken kernel behaviour:
41 * phase I (before kernel commit 1bc39ac5d) kernels assume old
42 * QEMU behaviour, so they use IRQ 27 for all slots
43 * phase II (1bc39ac5d and later, but before e3e92a7be6) kernels
44 * swizzle IRQs between slots, but do it wrongly, so they
45 * work only for every fourth PCI card, and only if (like old
46 * QEMU) the PCI host device is at slot 0 rather than where
47 * the h/w actually puts it
48 * phase III (e3e92a7be6 and later) kernels still swizzle IRQs between
49 * slots wrongly, but add a fixed offset of 64 to everything
50 * they write to PCI_INTERRUPT_LINE.
52 * We live in hope of a mythical phase IV kernel which might
53 * actually behave in ways that work on the hardware. Such a
54 * kernel should probably start off by writing some value neither
55 * 27 nor 91 to slot zero's PCI_INTERRUPT_LINE register to
56 * disable the autodetection. After that it can do what it likes.
58 * Slot % 4 | hw | I | II | III
59 * -------------------------------
60 * 0 | 29 | 27 | 27 | 91
61 * 1 | 30 | 27 | 28 | 92
62 * 2 | 27 | 27 | 29 | 93
63 * 3 | 28 | 27 | 30 | 94
65 * Since our autodetection is not perfect we also provide a
66 * property so the user can make us start in BROKEN or FORCE_OK
67 * on reset if they know they have a bad or good kernel.
70 PCI_VPB_IRQMAP_ASSUME_OK
,
71 PCI_VPB_IRQMAP_BROKEN
,
72 PCI_VPB_IRQMAP_FORCE_OK
,
76 PCIHostState parent_obj
;
79 MemoryRegion controlregs
;
80 MemoryRegion mem_config
;
81 MemoryRegion mem_config2
;
82 /* Containers representing the PCI address spaces */
83 MemoryRegion pci_io_space
;
84 MemoryRegion pci_mem_space
;
85 /* Alias regions into PCI address spaces which we expose as sysbus regions.
86 * The offsets into pci_mem_space are controlled by the imap registers.
88 MemoryRegion pci_io_window
;
89 MemoryRegion pci_mem_window
[3];
93 /* Constant for life of device: */
95 uint32_t mem_win_size
[3];
96 uint8_t irq_mapping_prop
;
105 typedef struct PCIVPBState PCIVPBState
;
107 static void pci_vpb_update_window(PCIVPBState
*s
, int i
)
109 /* Adjust the offset of the alias region we use for
110 * the memory window i to account for a change in the
111 * value of the corresponding IMAP register.
112 * Note that the semantics of the IMAP register differ
113 * for realview and versatile variants of the controller.
117 /* Top bits of register (masked according to window size) provide
118 * top bits of PCI address.
120 offset
= s
->imap
[i
] & ~(s
->mem_win_size
[i
] - 1);
122 /* Bottom 4 bits of register provide top 4 bits of PCI address */
123 offset
= s
->imap
[i
] << 28;
125 memory_region_set_alias_offset(&s
->pci_mem_window
[i
], offset
);
128 static void pci_vpb_update_all_windows(PCIVPBState
*s
)
130 /* Update all alias windows based on the current register state */
133 for (i
= 0; i
< 3; i
++) {
134 pci_vpb_update_window(s
, i
);
138 static int pci_vpb_post_load(void *opaque
, int version_id
)
140 PCIVPBState
*s
= opaque
;
141 pci_vpb_update_all_windows(s
);
145 static const VMStateDescription pci_vpb_vmstate
= {
146 .name
= "versatile-pci",
148 .minimum_version_id
= 1,
149 .post_load
= pci_vpb_post_load
,
150 .fields
= (VMStateField
[]) {
151 VMSTATE_UINT32_ARRAY(imap
, PCIVPBState
, 3),
152 VMSTATE_UINT32_ARRAY(smap
, PCIVPBState
, 3),
153 VMSTATE_UINT32(selfid
, PCIVPBState
),
154 VMSTATE_UINT32(flags
, PCIVPBState
),
155 VMSTATE_UINT8(irq_mapping
, PCIVPBState
),
156 VMSTATE_END_OF_LIST()
160 #define TYPE_VERSATILE_PCI "versatile_pci"
161 DECLARE_INSTANCE_CHECKER(PCIVPBState
, PCI_VPB
,
164 #define TYPE_VERSATILE_PCI_HOST "versatile_pci_host"
165 DECLARE_INSTANCE_CHECKER(PCIDevice
, PCI_VPB_HOST
,
166 TYPE_VERSATILE_PCI_HOST
)
179 static void pci_vpb_reg_write(void *opaque
, hwaddr addr
,
180 uint64_t val
, unsigned size
)
182 PCIVPBState
*s
= opaque
;
189 int win
= (addr
- PCI_IMAP0
) >> 2;
191 pci_vpb_update_window(s
, win
);
204 int win
= (addr
- PCI_SMAP0
) >> 2;
209 qemu_log_mask(LOG_GUEST_ERROR
,
210 "pci_vpb_reg_write: Bad offset %x\n", (int)addr
);
215 static uint64_t pci_vpb_reg_read(void *opaque
, hwaddr addr
,
218 PCIVPBState
*s
= opaque
;
225 int win
= (addr
- PCI_IMAP0
) >> 2;
236 int win
= (addr
- PCI_SMAP0
) >> 2;
240 qemu_log_mask(LOG_GUEST_ERROR
,
241 "pci_vpb_reg_read: Bad offset %x\n", (int)addr
);
246 static const MemoryRegionOps pci_vpb_reg_ops
= {
247 .read
= pci_vpb_reg_read
,
248 .write
= pci_vpb_reg_write
,
249 .endianness
= DEVICE_NATIVE_ENDIAN
,
251 .min_access_size
= 4,
252 .max_access_size
= 4,
256 static int pci_vpb_broken_irq(int slot
, int irq
)
258 /* Determine whether this IRQ value for this slot represents a
259 * known broken Linux kernel behaviour for this slot.
260 * Return one of the PCI_VPB_IRQMAP_ constants:
261 * BROKEN : if this definitely looks like a broken kernel
262 * FORCE_OK : if this definitely looks good
263 * ASSUME_OK : if we can't tell
265 slot
%= PCI_NUM_PINS
;
269 /* Might be a Phase I kernel, or might be a fixed kernel,
270 * since slot 2 is where we expect this IRQ.
272 return PCI_VPB_IRQMAP_ASSUME_OK
;
275 return PCI_VPB_IRQMAP_BROKEN
;
277 if (irq
== slot
+ 27) {
278 /* Phase II kernel */
279 return PCI_VPB_IRQMAP_BROKEN
;
281 if (irq
== slot
+ 27 + 64) {
282 /* Phase III kernel */
283 return PCI_VPB_IRQMAP_BROKEN
;
285 /* Anything else must be a fixed kernel, possibly using an
288 return PCI_VPB_IRQMAP_FORCE_OK
;
291 static void pci_vpb_config_write(void *opaque
, hwaddr addr
,
292 uint64_t val
, unsigned size
)
294 PCIVPBState
*s
= opaque
;
295 if (!s
->realview
&& (addr
& 0xff) == PCI_INTERRUPT_LINE
296 && s
->irq_mapping
== PCI_VPB_IRQMAP_ASSUME_OK
) {
297 uint8_t devfn
= addr
>> 8;
298 s
->irq_mapping
= pci_vpb_broken_irq(PCI_SLOT(devfn
), val
);
300 pci_data_write(&s
->pci_bus
, addr
, val
, size
);
303 static uint64_t pci_vpb_config_read(void *opaque
, hwaddr addr
,
306 PCIVPBState
*s
= opaque
;
308 val
= pci_data_read(&s
->pci_bus
, addr
, size
);
312 static const MemoryRegionOps pci_vpb_config_ops
= {
313 .read
= pci_vpb_config_read
,
314 .write
= pci_vpb_config_write
,
315 .endianness
= DEVICE_NATIVE_ENDIAN
,
318 static int pci_vpb_map_irq(PCIDevice
*d
, int irq_num
)
320 PCIVPBState
*s
= container_of(pci_get_bus(d
), PCIVPBState
, pci_bus
);
322 if (s
->irq_mapping
== PCI_VPB_IRQMAP_BROKEN
) {
323 /* Legacy broken IRQ mapping for compatibility with old and
329 /* Slot to IRQ mapping for RealView Platform Baseboard 926 backplane
330 * name slot IntA IntB IntC IntD
331 * A 31 IRQ28 IRQ29 IRQ30 IRQ27
332 * B 30 IRQ27 IRQ28 IRQ29 IRQ30
333 * C 29 IRQ30 IRQ27 IRQ28 IRQ29
334 * Slot C is for the host bridge; A and B the peripherals.
335 * Our output irqs 0..3 correspond to the baseboard's 27..30.
337 * This mapping function takes account of an oddity in the PB926
338 * board wiring, where the FPGA's P_nINTA input is connected to
339 * the INTB connection on the board PCI edge connector, P_nINTB
340 * is connected to INTC, and so on, so everything is one number
341 * further round from where you might expect.
343 return pci_swizzle_map_irq_fn(d
, irq_num
+ 2);
346 static int pci_vpb_rv_map_irq(PCIDevice
*d
, int irq_num
)
348 /* Slot to IRQ mapping for RealView EB and PB1176 backplane
349 * name slot IntA IntB IntC IntD
350 * A 31 IRQ50 IRQ51 IRQ48 IRQ49
351 * B 30 IRQ49 IRQ50 IRQ51 IRQ48
352 * C 29 IRQ48 IRQ49 IRQ50 IRQ51
353 * Slot C is for the host bridge; A and B the peripherals.
354 * Our output irqs 0..3 correspond to the baseboard's 48..51.
356 * The PB1176 and EB boards don't have the PB926 wiring oddity
357 * described above; P_nINTA connects to INTA, P_nINTB to INTB
358 * and so on, which is why this mapping function is different.
360 return pci_swizzle_map_irq_fn(d
, irq_num
+ 3);
363 static void pci_vpb_set_irq(void *opaque
, int irq_num
, int level
)
365 qemu_irq
*pic
= opaque
;
367 qemu_set_irq(pic
[irq_num
], level
);
370 static void pci_vpb_reset(DeviceState
*d
)
372 PCIVPBState
*s
= PCI_VPB(d
);
382 s
->irq_mapping
= s
->irq_mapping_prop
;
384 pci_vpb_update_all_windows(s
);
387 static void pci_vpb_init(Object
*obj
)
389 PCIVPBState
*s
= PCI_VPB(obj
);
391 /* Window sizes for VersatilePB; realview_pci's init will override */
392 s
->mem_win_size
[0] = 0x0c000000;
393 s
->mem_win_size
[1] = 0x10000000;
394 s
->mem_win_size
[2] = 0x10000000;
397 static void pci_vpb_realize(DeviceState
*dev
, Error
**errp
)
399 PCIVPBState
*s
= PCI_VPB(dev
);
400 PCIHostState
*h
= PCI_HOST_BRIDGE(dev
);
401 SysBusDevice
*sbd
= SYS_BUS_DEVICE(dev
);
402 pci_map_irq_fn mapfn
;
405 memory_region_init(&s
->pci_io_space
, OBJECT(s
), "pci_io", 4 * GiB
);
406 memory_region_init(&s
->pci_mem_space
, OBJECT(s
), "pci_mem", 4 * GiB
);
408 pci_root_bus_init(&s
->pci_bus
, sizeof(s
->pci_bus
), dev
, "pci",
409 &s
->pci_mem_space
, &s
->pci_io_space
,
410 PCI_DEVFN(11, 0), TYPE_PCI_BUS
);
411 h
->bus
= &s
->pci_bus
;
413 object_initialize(&s
->pci_dev
, sizeof(s
->pci_dev
), TYPE_VERSATILE_PCI_HOST
);
415 for (i
= 0; i
< 4; i
++) {
416 sysbus_init_irq(sbd
, &s
->irq
[i
]);
420 mapfn
= pci_vpb_rv_map_irq
;
422 mapfn
= pci_vpb_map_irq
;
425 pci_bus_irqs(&s
->pci_bus
, pci_vpb_set_irq
, mapfn
, s
->irq
, 4);
427 /* Our memory regions are:
428 * 0 : our control registers
429 * 1 : PCI self config window
430 * 2 : PCI config window
432 * 4..6 : PCI memory windows
434 memory_region_init_io(&s
->controlregs
, OBJECT(s
), &pci_vpb_reg_ops
, s
,
435 "pci-vpb-regs", 0x1000);
436 sysbus_init_mmio(sbd
, &s
->controlregs
);
437 memory_region_init_io(&s
->mem_config
, OBJECT(s
), &pci_vpb_config_ops
, s
,
438 "pci-vpb-selfconfig", 0x1000000);
439 sysbus_init_mmio(sbd
, &s
->mem_config
);
440 memory_region_init_io(&s
->mem_config2
, OBJECT(s
), &pci_vpb_config_ops
, s
,
441 "pci-vpb-config", 0x1000000);
442 sysbus_init_mmio(sbd
, &s
->mem_config2
);
444 /* The window into I/O space is always into a fixed base address;
445 * its size is the same for both realview and versatile.
447 memory_region_init_alias(&s
->pci_io_window
, OBJECT(s
), "pci-vbp-io-window",
448 &s
->pci_io_space
, 0, 0x100000);
450 sysbus_init_mmio(sbd
, &s
->pci_io_space
);
452 /* Create the alias regions corresponding to our three windows onto
453 * PCI memory space. The sizes vary from board to board; the base
454 * offsets are guest controllable via the IMAP registers.
456 for (i
= 0; i
< 3; i
++) {
457 memory_region_init_alias(&s
->pci_mem_window
[i
], OBJECT(s
), "pci-vbp-window",
458 &s
->pci_mem_space
, 0, s
->mem_win_size
[i
]);
459 sysbus_init_mmio(sbd
, &s
->pci_mem_window
[i
]);
462 /* TODO Remove once realize propagates to child devices. */
463 qdev_realize(DEVICE(&s
->pci_dev
), BUS(&s
->pci_bus
), errp
);
466 static void versatile_pci_host_realize(PCIDevice
*d
, Error
**errp
)
468 pci_set_word(d
->config
+ PCI_STATUS
,
469 PCI_STATUS_66MHZ
| PCI_STATUS_DEVSEL_MEDIUM
);
470 pci_set_byte(d
->config
+ PCI_LATENCY_TIMER
, 0x10);
473 static void versatile_pci_host_class_init(ObjectClass
*klass
, void *data
)
475 PCIDeviceClass
*k
= PCI_DEVICE_CLASS(klass
);
476 DeviceClass
*dc
= DEVICE_CLASS(klass
);
478 k
->realize
= versatile_pci_host_realize
;
479 k
->vendor_id
= PCI_VENDOR_ID_XILINX
;
480 k
->device_id
= PCI_DEVICE_ID_XILINX_XC2VP30
;
481 k
->class_id
= PCI_CLASS_PROCESSOR_CO
;
483 * PCI-facing part of the host bridge, not usable without the
484 * host-facing part, which can't be device_add'ed, yet.
486 dc
->user_creatable
= false;
489 static const TypeInfo versatile_pci_host_info
= {
490 .name
= TYPE_VERSATILE_PCI_HOST
,
491 .parent
= TYPE_PCI_DEVICE
,
492 .instance_size
= sizeof(PCIDevice
),
493 .class_init
= versatile_pci_host_class_init
,
494 .interfaces
= (InterfaceInfo
[]) {
495 { INTERFACE_CONVENTIONAL_PCI_DEVICE
},
500 static Property pci_vpb_properties
[] = {
501 DEFINE_PROP_UINT8("broken-irq-mapping", PCIVPBState
, irq_mapping_prop
,
502 PCI_VPB_IRQMAP_ASSUME_OK
),
503 DEFINE_PROP_END_OF_LIST()
506 static void pci_vpb_class_init(ObjectClass
*klass
, void *data
)
508 DeviceClass
*dc
= DEVICE_CLASS(klass
);
510 dc
->realize
= pci_vpb_realize
;
511 dc
->reset
= pci_vpb_reset
;
512 dc
->vmsd
= &pci_vpb_vmstate
;
513 device_class_set_props(dc
, pci_vpb_properties
);
516 static const TypeInfo pci_vpb_info
= {
517 .name
= TYPE_VERSATILE_PCI
,
518 .parent
= TYPE_PCI_HOST_BRIDGE
,
519 .instance_size
= sizeof(PCIVPBState
),
520 .instance_init
= pci_vpb_init
,
521 .class_init
= pci_vpb_class_init
,
524 static void pci_realview_init(Object
*obj
)
526 PCIVPBState
*s
= PCI_VPB(obj
);
529 /* The PCI window sizes are different on Realview boards */
530 s
->mem_win_size
[0] = 0x01000000;
531 s
->mem_win_size
[1] = 0x04000000;
532 s
->mem_win_size
[2] = 0x08000000;
535 static const TypeInfo pci_realview_info
= {
536 .name
= "realview_pci",
537 .parent
= TYPE_VERSATILE_PCI
,
538 .instance_init
= pci_realview_init
,
541 static void versatile_pci_register_types(void)
543 type_register_static(&pci_vpb_info
);
544 type_register_static(&pci_realview_info
);
545 type_register_static(&versatile_pci_host_info
);
548 type_init(versatile_pci_register_types
)