2 * QEMU PowerPC CHRP (currently NewWorld PowerMac) hardware System Emulator
4 * Copyright (c) 2004-2007 Fabrice Bellard
5 * Copyright (c) 2007 Jocelyn Mayer
7 * Permission is hereby granted, free of charge, to any person obtaining a copy
8 * of this software and associated documentation files (the "Software"), to deal
9 * in the Software without restriction, including without limitation the rights
10 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
11 * copies of the Software, and to permit persons to whom the Software is
12 * furnished to do so, subject to the following conditions:
14 * The above copyright notice and this permission notice shall be included in
15 * all copies or substantial portions of the Software.
17 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
18 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
19 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
20 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
21 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
22 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
25 * PCI bus layout on a real G5 (U3 based):
27 * 0000:f0:0b.0 Host bridge [0600]: Apple Computer Inc. U3 AGP [106b:004b]
28 * 0000:f0:10.0 VGA compatible controller [0300]: ATI Technologies Inc RV350 AP [Radeon 9600] [1002:4150]
29 * 0001:00:00.0 Host bridge [0600]: Apple Computer Inc. CPC945 HT Bridge [106b:004a]
30 * 0001:00:01.0 PCI bridge [0604]: Advanced Micro Devices [AMD] AMD-8131 PCI-X Bridge [1022:7450] (rev 12)
31 * 0001:00:02.0 PCI bridge [0604]: Advanced Micro Devices [AMD] AMD-8131 PCI-X Bridge [1022:7450] (rev 12)
32 * 0001:00:03.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0045]
33 * 0001:00:04.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0046]
34 * 0001:00:05.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0047]
35 * 0001:00:06.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0048]
36 * 0001:00:07.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0049]
37 * 0001:01:07.0 Class [ff00]: Apple Computer Inc. K2 KeyLargo Mac/IO [106b:0041] (rev 20)
38 * 0001:01:08.0 USB Controller [0c03]: Apple Computer Inc. K2 KeyLargo USB [106b:0040]
39 * 0001:01:09.0 USB Controller [0c03]: Apple Computer Inc. K2 KeyLargo USB [106b:0040]
40 * 0001:02:0b.0 USB Controller [0c03]: NEC Corporation USB [1033:0035] (rev 43)
41 * 0001:02:0b.1 USB Controller [0c03]: NEC Corporation USB [1033:0035] (rev 43)
42 * 0001:02:0b.2 USB Controller [0c03]: NEC Corporation USB 2.0 [1033:00e0] (rev 04)
43 * 0001:03:0d.0 Class [ff00]: Apple Computer Inc. K2 ATA/100 [106b:0043]
44 * 0001:03:0e.0 FireWire (IEEE 1394) [0c00]: Apple Computer Inc. K2 FireWire [106b:0042]
45 * 0001:04:0f.0 Ethernet controller [0200]: Apple Computer Inc. K2 GMAC (Sun GEM) [106b:004c]
46 * 0001:05:0c.0 IDE interface [0101]: Broadcom K2 SATA [1166:0240]
52 #include "mac_dbdma.h"
72 #define VGA_BIOS_SIZE 65536
73 #define CFG_ADDR 0xf0000510
79 #define UNIN_DPRINTF(fmt, ...) \
80 do { printf("UNIN: " fmt , ## __VA_ARGS__); } while (0)
82 #define UNIN_DPRINTF(fmt, ...)
86 static void unin_writel (void *opaque
, target_phys_addr_t addr
, uint32_t value
)
88 UNIN_DPRINTF("writel addr " TARGET_FMT_plx
" val %x\n", addr
, value
);
91 static uint32_t unin_readl (void *opaque
, target_phys_addr_t addr
)
96 UNIN_DPRINTF("readl addr " TARGET_FMT_plx
" val %x\n", addr
, value
);
101 static CPUWriteMemoryFunc
* const unin_write
[] = {
107 static CPUReadMemoryFunc
* const unin_read
[] = {
113 static int fw_cfg_boot_set(void *opaque
, const char *boot_device
)
115 fw_cfg_add_i16(opaque
, FW_CFG_BOOT_DEVICE
, boot_device
[0]);
119 static uint64_t translate_kernel_address(void *opaque
, uint64_t addr
)
121 return (addr
& 0x0fffffff) + KERNEL_LOAD_ADDR
;
124 /* PowerPC Mac99 hardware initialisation */
125 static void ppc_core99_init (ram_addr_t ram_size
,
126 const char *boot_device
,
127 const char *kernel_filename
,
128 const char *kernel_cmdline
,
129 const char *initrd_filename
,
130 const char *cpu_model
)
132 CPUState
*env
= NULL
, *envs
[MAX_CPUS
];
134 qemu_irq
*pic
, **openpic_irqs
;
137 ram_addr_t ram_offset
, bios_offset
, vga_bios_offset
;
138 uint32_t kernel_base
, kernel_size
, initrd_base
, initrd_size
;
140 MacIONVRAMState
*nvr
;
142 int vga_bios_size
, bios_size
;
143 int pic_mem_index
, dbdma_mem_index
, cuda_mem_index
, escc_mem_index
;
144 int ide_mem_index
[3];
146 DriveInfo
*hd
[MAX_IDE_BUS
* MAX_IDE_DEVS
];
149 uint8_t *vga_bios_ptr
;
152 linux_boot
= (kernel_filename
!= NULL
);
155 if (cpu_model
== NULL
)
161 for (i
= 0; i
< smp_cpus
; i
++) {
162 env
= cpu_init(cpu_model
);
164 fprintf(stderr
, "Unable to find PowerPC CPU definition\n");
167 /* Set time-base frequency to 100 Mhz */
168 cpu_ppc_tb_init(env
, 100UL * 1000UL * 1000UL);
170 env
->osi_call
= vga_osi_call
;
172 qemu_register_reset((QEMUResetHandler
*)&cpu_reset
, env
);
177 ram_offset
= qemu_ram_alloc(NULL
, "ppc_core99.ram", ram_size
);
178 cpu_register_physical_memory(0, ram_size
, ram_offset
);
180 /* allocate and load BIOS */
181 bios_offset
= qemu_ram_alloc(NULL
, "ppc_core99.bios", BIOS_SIZE
);
182 if (bios_name
== NULL
)
183 bios_name
= PROM_FILENAME
;
184 filename
= qemu_find_file(QEMU_FILE_TYPE_BIOS
, bios_name
);
185 cpu_register_physical_memory(PROM_ADDR
, BIOS_SIZE
, bios_offset
| IO_MEM_ROM
);
187 /* Load OpenBIOS (ELF) */
189 bios_size
= load_elf(filename
, NULL
, NULL
, NULL
,
190 NULL
, NULL
, 1, ELF_MACHINE
, 0);
196 if (bios_size
< 0 || bios_size
> BIOS_SIZE
) {
197 hw_error("qemu: could not load PowerPC bios '%s'\n", bios_name
);
201 /* allocate and load VGA BIOS */
202 vga_bios_offset
= qemu_ram_alloc(NULL
, "ppc_core99.vbios", VGA_BIOS_SIZE
);
203 vga_bios_ptr
= qemu_get_ram_ptr(vga_bios_offset
);
204 filename
= qemu_find_file(QEMU_FILE_TYPE_BIOS
, VGABIOS_FILENAME
);
206 vga_bios_size
= load_image(filename
, vga_bios_ptr
+ 8);
211 if (vga_bios_size
< 0) {
212 /* if no bios is present, we can still work */
213 fprintf(stderr
, "qemu: warning: could not load VGA bios '%s'\n",
217 /* set a specific header (XXX: find real Apple format for NDRV
219 vga_bios_ptr
[0] = 'N';
220 vga_bios_ptr
[1] = 'D';
221 vga_bios_ptr
[2] = 'R';
222 vga_bios_ptr
[3] = 'V';
223 cpu_to_be32w((uint32_t *)(vga_bios_ptr
+ 4), vga_bios_size
);
226 /* Round to page boundary */
227 vga_bios_size
= (vga_bios_size
+ TARGET_PAGE_SIZE
- 1) &
232 uint64_t lowaddr
= 0;
240 kernel_base
= KERNEL_LOAD_ADDR
;
242 kernel_size
= load_elf(kernel_filename
, translate_kernel_address
, NULL
,
243 NULL
, &lowaddr
, NULL
, 1, ELF_MACHINE
, 0);
245 kernel_size
= load_aout(kernel_filename
, kernel_base
,
246 ram_size
- kernel_base
, bswap_needed
,
249 kernel_size
= load_image_targphys(kernel_filename
,
251 ram_size
- kernel_base
);
252 if (kernel_size
< 0) {
253 hw_error("qemu: could not load kernel '%s'\n", kernel_filename
);
257 if (initrd_filename
) {
258 initrd_base
= INITRD_LOAD_ADDR
;
259 initrd_size
= load_image_targphys(initrd_filename
, initrd_base
,
260 ram_size
- initrd_base
);
261 if (initrd_size
< 0) {
262 hw_error("qemu: could not load initial ram disk '%s'\n",
270 ppc_boot_device
= 'm';
276 ppc_boot_device
= '\0';
277 /* We consider that NewWorld PowerMac never have any floppy drive
278 * For now, OHW cannot boot from the network.
280 for (i
= 0; boot_device
[i
] != '\0'; i
++) {
281 if (boot_device
[i
] >= 'c' && boot_device
[i
] <= 'f') {
282 ppc_boot_device
= boot_device
[i
];
286 if (ppc_boot_device
== '\0') {
287 fprintf(stderr
, "No valid boot device for Mac99 machine\n");
292 isa_mem_base
= 0x80000000;
294 /* Register 8 MB of ISA IO space */
295 isa_mmio_init(0xf2000000, 0x00800000, 1);
298 unin_memory
= cpu_register_io_memory(unin_read
, unin_write
, NULL
);
299 cpu_register_physical_memory(0xf8000000, 0x00001000, unin_memory
);
301 openpic_irqs
= qemu_mallocz(smp_cpus
* sizeof(qemu_irq
*));
303 qemu_mallocz(smp_cpus
* sizeof(qemu_irq
) * OPENPIC_OUTPUT_NB
);
304 for (i
= 0; i
< smp_cpus
; i
++) {
305 /* Mac99 IRQ connection between OpenPIC outputs pins
306 * and PowerPC input pins
308 switch (PPC_INPUT(env
)) {
309 case PPC_FLAGS_INPUT_6xx
:
310 openpic_irqs
[i
] = openpic_irqs
[0] + (i
* OPENPIC_OUTPUT_NB
);
311 openpic_irqs
[i
][OPENPIC_OUTPUT_INT
] =
312 ((qemu_irq
*)env
->irq_inputs
)[PPC6xx_INPUT_INT
];
313 openpic_irqs
[i
][OPENPIC_OUTPUT_CINT
] =
314 ((qemu_irq
*)env
->irq_inputs
)[PPC6xx_INPUT_INT
];
315 openpic_irqs
[i
][OPENPIC_OUTPUT_MCK
] =
316 ((qemu_irq
*)env
->irq_inputs
)[PPC6xx_INPUT_MCP
];
317 /* Not connected ? */
318 openpic_irqs
[i
][OPENPIC_OUTPUT_DEBUG
] = NULL
;
320 openpic_irqs
[i
][OPENPIC_OUTPUT_RESET
] =
321 ((qemu_irq
*)env
->irq_inputs
)[PPC6xx_INPUT_HRESET
];
323 #if defined(TARGET_PPC64)
324 case PPC_FLAGS_INPUT_970
:
325 openpic_irqs
[i
] = openpic_irqs
[0] + (i
* OPENPIC_OUTPUT_NB
);
326 openpic_irqs
[i
][OPENPIC_OUTPUT_INT
] =
327 ((qemu_irq
*)env
->irq_inputs
)[PPC970_INPUT_INT
];
328 openpic_irqs
[i
][OPENPIC_OUTPUT_CINT
] =
329 ((qemu_irq
*)env
->irq_inputs
)[PPC970_INPUT_INT
];
330 openpic_irqs
[i
][OPENPIC_OUTPUT_MCK
] =
331 ((qemu_irq
*)env
->irq_inputs
)[PPC970_INPUT_MCP
];
332 /* Not connected ? */
333 openpic_irqs
[i
][OPENPIC_OUTPUT_DEBUG
] = NULL
;
335 openpic_irqs
[i
][OPENPIC_OUTPUT_RESET
] =
336 ((qemu_irq
*)env
->irq_inputs
)[PPC970_INPUT_HRESET
];
338 #endif /* defined(TARGET_PPC64) */
340 hw_error("Bus model not supported on mac99 machine\n");
344 pic
= openpic_init(NULL
, &pic_mem_index
, smp_cpus
, openpic_irqs
, NULL
);
345 if (PPC_INPUT(env
) == PPC_FLAGS_INPUT_970
) {
346 /* 970 gets a U3 bus */
347 pci_bus
= pci_pmac_u3_init(pic
);
348 machine_arch
= ARCH_MAC99_U3
;
350 pci_bus
= pci_pmac_init(pic
);
351 machine_arch
= ARCH_MAC99
;
353 /* init basic PC hardware */
354 pci_vga_init(pci_bus
, vga_bios_offset
, vga_bios_size
);
356 escc_mem_index
= escc_init(0x80013000, pic
[0x25], pic
[0x24],
357 serial_hds
[0], serial_hds
[1], ESCC_CLOCK
, 4);
359 for(i
= 0; i
< nb_nics
; i
++)
360 pci_nic_init_nofail(&nd_table
[i
], "ne2k_pci", NULL
);
362 if (drive_get_max_bus(IF_IDE
) >= MAX_IDE_BUS
) {
363 fprintf(stderr
, "qemu: too many IDE bus\n");
366 dbdma
= DBDMA_init(&dbdma_mem_index
);
368 /* We only emulate 2 out of 3 IDE controllers for now */
369 ide_mem_index
[0] = -1;
370 hd
[0] = drive_get(IF_IDE
, 0, 0);
371 hd
[1] = drive_get(IF_IDE
, 0, 1);
372 ide_mem_index
[1] = pmac_ide_init(hd
, pic
[0x0d], dbdma
, 0x16, pic
[0x02]);
373 hd
[0] = drive_get(IF_IDE
, 1, 0);
374 hd
[1] = drive_get(IF_IDE
, 1, 1);
375 ide_mem_index
[2] = pmac_ide_init(hd
, pic
[0x0e], dbdma
, 0x1a, pic
[0x02]);
377 /* cuda also initialize ADB */
378 if (machine_arch
== ARCH_MAC99_U3
) {
381 cuda_init(&cuda_mem_index
, pic
[0x19]);
383 adb_kbd_init(&adb_bus
);
384 adb_mouse_init(&adb_bus
);
386 macio_init(pci_bus
, PCI_DEVICE_ID_APPLE_UNI_N_KEYL
, 0, pic_mem_index
,
387 dbdma_mem_index
, cuda_mem_index
, NULL
, 3, ide_mem_index
,
391 usb_ohci_init_pci(pci_bus
, -1);
394 /* U3 needs to use USB for input because Linux doesn't support via-cuda
396 if (machine_arch
== ARCH_MAC99_U3
) {
397 usbdevice_create("keyboard");
398 usbdevice_create("mouse");
401 if (graphic_depth
!= 15 && graphic_depth
!= 32 && graphic_depth
!= 8)
404 /* The NewWorld NVRAM is not located in the MacIO device */
405 nvr
= macio_nvram_init(&nvram_mem_index
, 0x2000, 1);
406 pmac_format_nvram_partition(nvr
, 0x2000);
407 macio_nvram_map(nvr
, 0xFFF04000);
408 /* No PCI init: the BIOS will do it */
410 fw_cfg
= fw_cfg_init(0, 0, CFG_ADDR
, CFG_ADDR
+ 2);
411 fw_cfg_add_i32(fw_cfg
, FW_CFG_ID
, 1);
412 fw_cfg_add_i64(fw_cfg
, FW_CFG_RAM_SIZE
, (uint64_t)ram_size
);
413 fw_cfg_add_i16(fw_cfg
, FW_CFG_MACHINE_ID
, machine_arch
);
414 fw_cfg_add_i32(fw_cfg
, FW_CFG_KERNEL_ADDR
, kernel_base
);
415 fw_cfg_add_i32(fw_cfg
, FW_CFG_KERNEL_SIZE
, kernel_size
);
416 if (kernel_cmdline
) {
417 fw_cfg_add_i32(fw_cfg
, FW_CFG_KERNEL_CMDLINE
, CMDLINE_ADDR
);
418 pstrcpy_targphys("cmdline", CMDLINE_ADDR
, TARGET_PAGE_SIZE
, kernel_cmdline
);
420 fw_cfg_add_i32(fw_cfg
, FW_CFG_KERNEL_CMDLINE
, 0);
422 fw_cfg_add_i32(fw_cfg
, FW_CFG_INITRD_ADDR
, initrd_base
);
423 fw_cfg_add_i32(fw_cfg
, FW_CFG_INITRD_SIZE
, initrd_size
);
424 fw_cfg_add_i16(fw_cfg
, FW_CFG_BOOT_DEVICE
, ppc_boot_device
);
426 fw_cfg_add_i16(fw_cfg
, FW_CFG_PPC_WIDTH
, graphic_width
);
427 fw_cfg_add_i16(fw_cfg
, FW_CFG_PPC_HEIGHT
, graphic_height
);
428 fw_cfg_add_i16(fw_cfg
, FW_CFG_PPC_DEPTH
, graphic_depth
);
430 fw_cfg_add_i32(fw_cfg
, FW_CFG_PPC_IS_KVM
, kvm_enabled());
435 fw_cfg_add_i32(fw_cfg
, FW_CFG_PPC_TBFREQ
, kvmppc_get_tbfreq());
436 hypercall
= qemu_malloc(16);
437 kvmppc_get_hypercall(env
, hypercall
, 16);
438 fw_cfg_add_bytes(fw_cfg
, FW_CFG_PPC_KVM_HC
, hypercall
, 16);
439 fw_cfg_add_i32(fw_cfg
, FW_CFG_PPC_KVM_PID
, getpid());
442 fw_cfg_add_i32(fw_cfg
, FW_CFG_PPC_TBFREQ
, get_ticks_per_sec());
445 qemu_register_boot_set(fw_cfg_boot_set
, fw_cfg
);
448 static QEMUMachine core99_machine
= {
450 .desc
= "Mac99 based PowerMAC",
451 .init
= ppc_core99_init
,
452 .max_cpus
= MAX_CPUS
,
458 static void core99_machine_init(void)
460 qemu_register_machine(&core99_machine
);
463 machine_init(core99_machine_init
);