4 * Copyright (c) 2006 Fabrice Bellard
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License version 2 as published by the Free Software Foundation.
10 * This library is distributed in the hope that it will be useful,
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13 * Lesser General Public License for more details.
15 * You should have received a copy of the GNU Lesser General Public
16 * License along with this library; if not, write to the Free Software
17 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston MA 02110-1301 USA
22 #include "qemu-timer.h"
32 /* i82731AB (PIIX4) compatible power management function */
33 #define PM_FREQ 3579545
35 #define ACPI_DBG_IO_ADDR 0xb044
37 typedef struct PIIX4PMState
{
45 int64_t tmr_overflow_time
;
58 #define RSM_STS (1 << 15)
59 #define PWRBTN_STS (1 << 8)
60 #define RTC_EN (1 << 10)
61 #define PWRBTN_EN (1 << 8)
62 #define GBL_EN (1 << 5)
63 #define TMROF_EN (1 << 0)
65 #define SCI_EN (1 << 0)
67 #define SUS_EN (1 << 13)
69 #define ACPI_ENABLE 0xf1
70 #define ACPI_DISABLE 0xf0
72 #define SMBHSTSTS 0x00
73 #define SMBHSTCNT 0x02
74 #define SMBHSTCMD 0x03
75 #define SMBHSTADD 0x04
76 #define SMBHSTDAT0 0x05
77 #define SMBHSTDAT1 0x06
78 #define SMBBLKDAT 0x07
80 static PIIX4PMState
*pm_state
;
82 static uint32_t get_pmtmr(PIIX4PMState
*s
)
85 d
= muldiv64(qemu_get_clock(vm_clock
), PM_FREQ
, ticks_per_sec
);
89 static int get_pmsts(PIIX4PMState
*s
)
94 d
= muldiv64(qemu_get_clock(vm_clock
), PM_FREQ
, ticks_per_sec
);
95 if (d
>= s
->tmr_overflow_time
)
100 static void pm_update_sci(PIIX4PMState
*s
)
102 int sci_level
, pmsts
;
105 pmsts
= get_pmsts(s
);
106 sci_level
= (((pmsts
& s
->pmen
) &
107 (RTC_EN
| PWRBTN_EN
| GBL_EN
| TMROF_EN
)) != 0);
108 qemu_set_irq(s
->irq
, sci_level
);
109 /* schedule a timer interruption if needed */
110 if ((s
->pmen
& TMROF_EN
) && !(pmsts
& TMROF_EN
)) {
111 expire_time
= muldiv64(s
->tmr_overflow_time
, ticks_per_sec
, PM_FREQ
);
112 qemu_mod_timer(s
->tmr_timer
, expire_time
);
114 qemu_del_timer(s
->tmr_timer
);
118 static void pm_tmr_timer(void *opaque
)
120 PIIX4PMState
*s
= opaque
;
124 static void pm_ioport_writew(void *opaque
, uint32_t addr
, uint32_t val
)
126 PIIX4PMState
*s
= opaque
;
133 pmsts
= get_pmsts(s
);
134 if (pmsts
& val
& TMROF_EN
) {
135 /* if TMRSTS is reset, then compute the new overflow time */
136 d
= muldiv64(qemu_get_clock(vm_clock
), PM_FREQ
, ticks_per_sec
);
137 s
->tmr_overflow_time
= (d
+ 0x800000LL
) & ~0x7fffffLL
;
150 s
->pmcntrl
= val
& ~(SUS_EN
);
152 /* change suspend type */
153 sus_typ
= (val
>> 10) & 7;
155 case 0: /* soft power off */
156 qemu_system_shutdown_request();
159 /* RSM_STS should be set on resume. Pretend that resume
160 was caused by power button */
161 s
->pmsts
|= (RSM_STS
| PWRBTN_STS
);
162 qemu_system_reset_request();
163 #if defined(TARGET_I386)
164 cmos_set_s3_resume();
176 printf("PM writew port=0x%04x val=0x%04x\n", addr
, val
);
180 static uint32_t pm_ioport_readw(void *opaque
, uint32_t addr
)
182 PIIX4PMState
*s
= opaque
;
201 printf("PM readw port=0x%04x val=0x%04x\n", addr
, val
);
206 static void pm_ioport_writel(void *opaque
, uint32_t addr
, uint32_t val
)
208 // PIIX4PMState *s = opaque;
211 printf("PM writel port=0x%04x val=0x%08x\n", addr
, val
);
215 static uint32_t pm_ioport_readl(void *opaque
, uint32_t addr
)
217 PIIX4PMState
*s
= opaque
;
230 printf("PM readl port=0x%04x val=0x%08x\n", addr
, val
);
235 static void pm_smi_writeb(void *opaque
, uint32_t addr
, uint32_t val
)
237 PIIX4PMState
*s
= opaque
;
240 printf("pm_smi_writeb addr=0x%x val=0x%02x\n", addr
, val
);
245 /* ACPI specs 3.0, 4.7.2.5 */
246 if (val
== ACPI_ENABLE
) {
247 s
->pmcntrl
|= SCI_EN
;
248 } else if (val
== ACPI_DISABLE
) {
249 s
->pmcntrl
&= ~SCI_EN
;
252 if (s
->dev
.config
[0x5b] & (1 << 1)) {
253 cpu_interrupt(first_cpu
, CPU_INTERRUPT_SMI
);
260 static uint32_t pm_smi_readb(void *opaque
, uint32_t addr
)
262 PIIX4PMState
*s
= opaque
;
272 printf("pm_smi_readb addr=0x%x val=0x%02x\n", addr
, val
);
277 static void acpi_dbg_writel(void *opaque
, uint32_t addr
, uint32_t val
)
280 printf("ACPI: DBG: 0x%08x\n", val
);
284 static void smb_transaction(PIIX4PMState
*s
)
286 uint8_t prot
= (s
->smb_ctl
>> 2) & 0x07;
287 uint8_t read
= s
->smb_addr
& 0x01;
288 uint8_t cmd
= s
->smb_cmd
;
289 uint8_t addr
= s
->smb_addr
>> 1;
290 i2c_bus
*bus
= s
->smbus
;
293 printf("SMBus trans addr=0x%02x prot=0x%02x\n", addr
, prot
);
297 smbus_quick_command(bus
, addr
, read
);
301 s
->smb_data0
= smbus_receive_byte(bus
, addr
);
303 smbus_send_byte(bus
, addr
, cmd
);
308 s
->smb_data0
= smbus_read_byte(bus
, addr
, cmd
);
310 smbus_write_byte(bus
, addr
, cmd
, s
->smb_data0
);
316 val
= smbus_read_word(bus
, addr
, cmd
);
318 s
->smb_data1
= val
>> 8;
320 smbus_write_word(bus
, addr
, cmd
, (s
->smb_data1
<< 8) | s
->smb_data0
);
325 s
->smb_data0
= smbus_read_block(bus
, addr
, cmd
, s
->smb_data
);
327 smbus_write_block(bus
, addr
, cmd
, s
->smb_data
, s
->smb_data0
);
339 static void smb_ioport_writeb(void *opaque
, uint32_t addr
, uint32_t val
)
341 PIIX4PMState
*s
= opaque
;
344 printf("SMB writeb port=0x%04x val=0x%02x\n", addr
, val
);
369 s
->smb_data
[s
->smb_index
++] = val
;
370 if (s
->smb_index
> 31)
378 static uint32_t smb_ioport_readb(void *opaque
, uint32_t addr
)
380 PIIX4PMState
*s
= opaque
;
390 val
= s
->smb_ctl
& 0x1f;
405 val
= s
->smb_data
[s
->smb_index
++];
406 if (s
->smb_index
> 31)
414 printf("SMB readb port=0x%04x val=0x%02x\n", addr
, val
);
419 static void pm_io_space_update(PIIX4PMState
*s
)
423 if (s
->dev
.config
[0x80] & 1) {
424 pm_io_base
= le32_to_cpu(*(uint32_t *)(s
->dev
.config
+ 0x40));
425 pm_io_base
&= 0xffc0;
427 /* XXX: need to improve memory and ioport allocation */
429 printf("PM: mapping to 0x%x\n", pm_io_base
);
431 register_ioport_write(pm_io_base
, 64, 2, pm_ioport_writew
, s
);
432 register_ioport_read(pm_io_base
, 64, 2, pm_ioport_readw
, s
);
433 register_ioport_write(pm_io_base
, 64, 4, pm_ioport_writel
, s
);
434 register_ioport_read(pm_io_base
, 64, 4, pm_ioport_readl
, s
);
438 static void pm_write_config(PCIDevice
*d
,
439 uint32_t address
, uint32_t val
, int len
)
441 pci_default_write_config(d
, address
, val
, len
);
443 pm_io_space_update((PIIX4PMState
*)d
);
446 static void pm_save(QEMUFile
* f
,void *opaque
)
448 PIIX4PMState
*s
= opaque
;
450 pci_device_save(&s
->dev
, f
);
452 qemu_put_be16s(f
, &s
->pmsts
);
453 qemu_put_be16s(f
, &s
->pmen
);
454 qemu_put_be16s(f
, &s
->pmcntrl
);
455 qemu_put_8s(f
, &s
->apmc
);
456 qemu_put_8s(f
, &s
->apms
);
457 qemu_put_timer(f
, s
->tmr_timer
);
458 qemu_put_be64(f
, s
->tmr_overflow_time
);
461 static int pm_load(QEMUFile
* f
,void* opaque
,int version_id
)
463 PIIX4PMState
*s
= opaque
;
469 ret
= pci_device_load(&s
->dev
, f
);
473 qemu_get_be16s(f
, &s
->pmsts
);
474 qemu_get_be16s(f
, &s
->pmen
);
475 qemu_get_be16s(f
, &s
->pmcntrl
);
476 qemu_get_8s(f
, &s
->apmc
);
477 qemu_get_8s(f
, &s
->apms
);
478 qemu_get_timer(f
, s
->tmr_timer
);
479 s
->tmr_overflow_time
=qemu_get_be64(f
);
481 pm_io_space_update(s
);
486 static void piix4_reset(void *opaque
)
488 PIIX4PMState
*s
= opaque
;
489 uint8_t *pci_conf
= s
->dev
.config
;
497 i2c_bus
*piix4_pm_init(PCIBus
*bus
, int devfn
, uint32_t smb_io_base
,
503 s
= (PIIX4PMState
*)pci_register_device(bus
,
504 "PM", sizeof(PIIX4PMState
),
505 devfn
, NULL
, pm_write_config
);
507 pci_conf
= s
->dev
.config
;
508 pci_config_set_vendor_id(pci_conf
, PCI_VENDOR_ID_INTEL
);
509 pci_config_set_device_id(pci_conf
, PCI_DEVICE_ID_INTEL_82371AB_3
);
510 pci_conf
[0x06] = 0x80;
511 pci_conf
[0x07] = 0x02;
512 pci_conf
[0x08] = 0x03; // revision number
513 pci_conf
[0x09] = 0x00;
514 pci_config_set_class(pci_conf
, PCI_CLASS_BRIDGE_OTHER
);
515 pci_conf
[0x0e] = 0x00; // header_type
516 pci_conf
[0x3d] = 0x01; // interrupt pin 1
518 pci_conf
[0x40] = 0x01; /* PM io base read only bit */
520 #if defined(TARGET_IA64)
521 pci_conf
[0x40] = 0x41; /* PM io base read only bit */
522 pci_conf
[0x41] = 0x1f;
523 pm_write_config(s
, 0x80, 0x01, 1); /*Set default pm_io_base 0x1f40*/
527 register_ioport_write(0xb2, 2, 1, pm_smi_writeb
, s
);
528 register_ioport_read(0xb2, 2, 1, pm_smi_readb
, s
);
530 register_ioport_write(ACPI_DBG_IO_ADDR
, 4, 4, acpi_dbg_writel
, s
);
533 /* Mark SMM as already inited to prevent SMM from running. KVM does not
534 * support SMM mode. */
535 pci_conf
[0x5B] = 0x02;
538 /* XXX: which specification is used ? The i82731AB has different
540 pci_conf
[0x5f] = (parallel_hds
[0] != NULL
? 0x80 : 0) | 0x10;
541 pci_conf
[0x63] = 0x60;
542 pci_conf
[0x67] = (serial_hds
[0] != NULL
? 0x08 : 0) |
543 (serial_hds
[1] != NULL
? 0x90 : 0);
545 pci_conf
[0x90] = smb_io_base
| 1;
546 pci_conf
[0x91] = smb_io_base
>> 8;
547 pci_conf
[0xd2] = 0x09;
548 register_ioport_write(smb_io_base
, 64, 1, smb_ioport_writeb
, s
);
549 register_ioport_read(smb_io_base
, 64, 1, smb_ioport_readb
, s
);
551 s
->tmr_timer
= qemu_new_timer(vm_clock
, pm_tmr_timer
, s
);
553 register_savevm("piix4_pm", 0, 1, pm_save
, pm_load
, s
);
555 s
->smbus
= i2c_init_bus();
557 qemu_register_reset(piix4_reset
, s
);
562 #if defined(TARGET_I386)
563 void qemu_system_powerdown(void)
566 qemu_system_shutdown_request();
567 } else if (pm_state
->pmen
& PWRBTN_EN
) {
568 pm_state
->pmsts
|= PWRBTN_EN
;
569 pm_update_sci(pm_state
);
574 #define GPE_BASE 0xafe0
575 #define PROC_BASE 0xaf00
576 #define PCI_BASE 0xae00
577 #define PCI_EJ_BASE 0xae08
580 uint16_t sts
; /* status */
581 uint16_t en
; /* enabled */
582 uint8_t cpus_sts
[32];
590 static struct gpe_regs gpe
;
591 static struct pci_status pci0_status
;
593 static uint32_t gpe_read_val(uint16_t val
, uint32_t addr
)
596 return (val
>> 8) & 0xff;
600 static uint32_t gpe_readb(void *opaque
, uint32_t addr
)
603 struct gpe_regs
*g
= opaque
;
605 case PROC_BASE
... PROC_BASE
+31:
606 val
= g
->cpus_sts
[addr
- PROC_BASE
];
611 val
= gpe_read_val(g
->sts
, addr
);
615 val
= gpe_read_val(g
->en
, addr
);
622 printf("gpe read %x == %x\n", addr
, val
);
627 static void gpe_write_val(uint16_t *cur
, int addr
, uint32_t val
)
630 *cur
= (*cur
& 0xff) | (val
<< 8);
632 *cur
= (*cur
& 0xff00) | (val
& 0xff);
635 static void gpe_reset_val(uint16_t *cur
, int addr
, uint32_t val
)
637 uint16_t x1
, x0
= val
& 0xff;
638 int shift
= (addr
& 1) ? 8 : 0;
640 x1
= (*cur
>> shift
) & 0xff;
644 *cur
= (*cur
& (0xff << (8 - shift
))) | (x1
<< shift
);
647 static void gpe_writeb(void *opaque
, uint32_t addr
, uint32_t val
)
649 struct gpe_regs
*g
= opaque
;
651 case PROC_BASE
... PROC_BASE
+ 31:
652 /* don't allow to change cpus_sts from inside a guest */
657 gpe_reset_val(&g
->sts
, addr
, val
);
661 gpe_write_val(&g
->en
, addr
, val
);
668 printf("gpe write %x <== %d\n", addr
, val
);
672 static uint32_t pcihotplug_read(void *opaque
, uint32_t addr
)
675 struct pci_status
*g
= opaque
;
688 printf("pcihotplug read %x == %x\n", addr
, val
);
693 static void pcihotplug_write(void *opaque
, uint32_t addr
, uint32_t val
)
695 struct pci_status
*g
= opaque
;
706 printf("pcihotplug write %x <== %d\n", addr
, val
);
710 static uint32_t pciej_read(void *opaque
, uint32_t addr
)
713 printf("pciej read %x\n", addr
);
718 static void pciej_write(void *opaque
, uint32_t addr
, uint32_t val
)
720 #if defined (TARGET_I386)
721 int slot
= ffs(val
) - 1;
723 pci_device_hot_remove_success(0, slot
);
727 printf("pciej write %x <== %d\n", addr
, val
);
731 static const char *model
;
733 void qemu_system_hot_add_init(const char *cpu_model
)
735 int i
= 0, cpus
= smp_cpus
;
738 gpe
.cpus_sts
[i
++] = (cpus
< 8) ? (1 << cpus
) - 1 : 0xff;
741 register_ioport_write(GPE_BASE
, 4, 1, gpe_writeb
, &gpe
);
742 register_ioport_read(GPE_BASE
, 4, 1, gpe_readb
, &gpe
);
744 register_ioport_write(PROC_BASE
, 32, 1, gpe_writeb
, &gpe
);
745 register_ioport_read(PROC_BASE
, 32, 1, gpe_readb
, &gpe
);
747 register_ioport_write(PCI_BASE
, 8, 4, pcihotplug_write
, &pci0_status
);
748 register_ioport_read(PCI_BASE
, 8, 4, pcihotplug_read
, &pci0_status
);
750 register_ioport_write(PCI_EJ_BASE
, 4, 4, pciej_write
, NULL
);
751 register_ioport_read(PCI_EJ_BASE
, 4, 4, pciej_read
, NULL
);
756 static void enable_processor(struct gpe_regs
*g
, int cpu
)
759 g
->cpus_sts
[cpu
/8] |= (1 << (cpu
%8));
762 static void disable_processor(struct gpe_regs
*g
, int cpu
)
765 g
->cpus_sts
[cpu
/8] &= ~(1 << (cpu
%8));
768 #if defined(TARGET_I386) || defined(TARGET_X86_64)
770 static CPUState
*qemu_kvm_cpu_env(int index
)
777 if (penv
->cpu_index
== index
)
779 penv
= (CPUState
*)penv
->next_cpu
;
787 void qemu_system_cpu_hot_add(int cpu
, int state
)
793 && (!qemu_kvm_cpu_env(cpu
))
796 env
= pc_new_cpu(cpu
, model
, 1);
798 fprintf(stderr
, "cpu %d creation failed\n", cpu
);
804 enable_processor(&gpe
, cpu
);
806 disable_processor(&gpe
, cpu
);
808 qemu_set_irq(pm_state
->irq
, 1);
809 qemu_set_irq(pm_state
->irq
, 0);
814 static void enable_device(struct pci_status
*p
, struct gpe_regs
*g
, int slot
)
817 p
->up
|= (1 << slot
);
820 static void disable_device(struct pci_status
*p
, struct gpe_regs
*g
, int slot
)
823 p
->down
|= (1 << slot
);
826 void qemu_system_device_hot_add(int bus
, int slot
, int state
)
829 pci0_status
.down
= 0;
831 enable_device(&pci0_status
, &gpe
, slot
);
833 disable_device(&pci0_status
, &gpe
, slot
);
835 qemu_set_irq(pm_state
->irq
, 1);
836 qemu_set_irq(pm_state
->irq
, 0);
840 struct acpi_table_header
842 char signature
[4]; /* ACPI signature (4 ASCII characters) */
843 uint32_t length
; /* Length of table, in bytes, including header */
844 uint8_t revision
; /* ACPI Specification minor version # */
845 uint8_t checksum
; /* To make sum of entire table == 0 */
846 char oem_id
[6]; /* OEM identification */
847 char oem_table_id
[8]; /* OEM table identification */
848 uint32_t oem_revision
; /* OEM revision number */
849 char asl_compiler_id
[4]; /* ASL compiler vendor ID */
850 uint32_t asl_compiler_revision
; /* ASL compiler revision number */
851 } __attribute__((packed
));
854 size_t acpi_tables_len
;
856 static int acpi_checksum(const uint8_t *data
, int len
)
860 for(i
= 0; i
< len
; i
++)
862 return (-sum
) & 0xff;
865 int acpi_table_add(const char *t
)
867 static const char *dfl_id
= "QEMUQEMU";
868 char buf
[1024], *p
, *f
;
869 struct acpi_table_header acpi_hdr
;
873 memset(&acpi_hdr
, 0, sizeof(acpi_hdr
));
875 if (get_param_value(buf
, sizeof(buf
), "sig", t
)) {
876 strncpy(acpi_hdr
.signature
, buf
, 4);
878 strncpy(acpi_hdr
.signature
, dfl_id
, 4);
880 if (get_param_value(buf
, sizeof(buf
), "rev", t
)) {
881 val
= strtoul(buf
, &p
, 10);
882 if (val
> 255 || *p
!= '\0')
887 acpi_hdr
.revision
= (int8_t)val
;
889 if (get_param_value(buf
, sizeof(buf
), "oem_id", t
)) {
890 strncpy(acpi_hdr
.oem_id
, buf
, 6);
892 strncpy(acpi_hdr
.oem_id
, dfl_id
, 6);
895 if (get_param_value(buf
, sizeof(buf
), "oem_table_id", t
)) {
896 strncpy(acpi_hdr
.oem_table_id
, buf
, 8);
898 strncpy(acpi_hdr
.oem_table_id
, dfl_id
, 8);
901 if (get_param_value(buf
, sizeof(buf
), "oem_rev", t
)) {
902 val
= strtol(buf
, &p
, 10);
908 acpi_hdr
.oem_revision
= cpu_to_le32(val
);
910 if (get_param_value(buf
, sizeof(buf
), "asl_compiler_id", t
)) {
911 strncpy(acpi_hdr
.asl_compiler_id
, buf
, 4);
913 strncpy(acpi_hdr
.asl_compiler_id
, dfl_id
, 4);
916 if (get_param_value(buf
, sizeof(buf
), "asl_compiler_rev", t
)) {
917 val
= strtol(buf
, &p
, 10);
923 acpi_hdr
.asl_compiler_revision
= cpu_to_le32(val
);
925 if (!get_param_value(buf
, sizeof(buf
), "data", t
)) {
929 acpi_hdr
.length
= sizeof(acpi_hdr
);
934 char *n
= strchr(f
, ':');
937 if(stat(f
, &s
) < 0) {
938 fprintf(stderr
, "Can't stat file '%s': %s\n", f
, strerror(errno
));
941 acpi_hdr
.length
+= s
.st_size
;
949 acpi_tables_len
= sizeof(uint16_t);
950 acpi_tables
= qemu_mallocz(acpi_tables_len
);
952 p
= acpi_tables
+ acpi_tables_len
;
953 acpi_tables_len
+= sizeof(uint16_t) + acpi_hdr
.length
;
954 acpi_tables
= qemu_realloc(acpi_tables
, acpi_tables_len
);
956 acpi_hdr
.length
= cpu_to_le32(acpi_hdr
.length
);
957 *(uint16_t*)p
= acpi_hdr
.length
;
958 p
+= sizeof(uint16_t);
959 memcpy(p
, &acpi_hdr
, sizeof(acpi_hdr
));
960 off
= sizeof(acpi_hdr
);
966 char *n
= strchr(f
, ':');
969 fd
= open(f
, O_RDONLY
);
973 if(fstat(fd
, &s
) < 0) {
980 r
= read(fd
, p
+ off
, s
.st_size
);
984 } else if ((r
< 0 && errno
!= EINTR
) || r
== 0) {
996 ((struct acpi_table_header
*)p
)->checksum
= acpi_checksum((uint8_t*)p
, off
);
997 /* increase number of tables */
998 (*(uint16_t*)acpi_tables
) =
999 cpu_to_le32(le32_to_cpu(*(uint16_t*)acpi_tables
) + 1);