4 * Copyright (c) 2006 Fabrice Bellard
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License version 2 as published by the Free Software Foundation.
10 * This library is distributed in the hope that it will be useful,
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13 * Lesser General Public License for more details.
15 * You should have received a copy of the GNU Lesser General Public
16 * License along with this library; if not, see <http://www.gnu.org/licenses/>
21 #include "qemu-timer.h"
31 /* i82731AB (PIIX4) compatible power management function */
32 #define PM_FREQ 3579545
34 #define ACPI_DBG_IO_ADDR 0xb044
36 typedef struct PIIX4PMState
{
44 int64_t tmr_overflow_time
;
57 #define RSM_STS (1 << 15)
58 #define PWRBTN_STS (1 << 8)
59 #define RTC_EN (1 << 10)
60 #define PWRBTN_EN (1 << 8)
61 #define GBL_EN (1 << 5)
62 #define TMROF_EN (1 << 0)
64 #define SCI_EN (1 << 0)
66 #define SUS_EN (1 << 13)
68 #define ACPI_ENABLE 0xf1
69 #define ACPI_DISABLE 0xf0
71 #define SMBHSTSTS 0x00
72 #define SMBHSTCNT 0x02
73 #define SMBHSTCMD 0x03
74 #define SMBHSTADD 0x04
75 #define SMBHSTDAT0 0x05
76 #define SMBHSTDAT1 0x06
77 #define SMBBLKDAT 0x07
79 static PIIX4PMState
*pm_state
;
81 static uint32_t get_pmtmr(PIIX4PMState
*s
)
84 d
= muldiv64(qemu_get_clock(vm_clock
), PM_FREQ
, ticks_per_sec
);
88 static int get_pmsts(PIIX4PMState
*s
)
93 d
= muldiv64(qemu_get_clock(vm_clock
), PM_FREQ
, ticks_per_sec
);
94 if (d
>= s
->tmr_overflow_time
)
99 static void pm_update_sci(PIIX4PMState
*s
)
101 int sci_level
, pmsts
;
104 pmsts
= get_pmsts(s
);
105 sci_level
= (((pmsts
& s
->pmen
) &
106 (RTC_EN
| PWRBTN_EN
| GBL_EN
| TMROF_EN
)) != 0);
107 qemu_set_irq(s
->irq
, sci_level
);
108 /* schedule a timer interruption if needed */
109 if ((s
->pmen
& TMROF_EN
) && !(pmsts
& TMROF_EN
)) {
110 expire_time
= muldiv64(s
->tmr_overflow_time
, ticks_per_sec
, PM_FREQ
);
111 qemu_mod_timer(s
->tmr_timer
, expire_time
);
113 qemu_del_timer(s
->tmr_timer
);
117 static void pm_tmr_timer(void *opaque
)
119 PIIX4PMState
*s
= opaque
;
123 static void pm_ioport_writew(void *opaque
, uint32_t addr
, uint32_t val
)
125 PIIX4PMState
*s
= opaque
;
132 pmsts
= get_pmsts(s
);
133 if (pmsts
& val
& TMROF_EN
) {
134 /* if TMRSTS is reset, then compute the new overflow time */
135 d
= muldiv64(qemu_get_clock(vm_clock
), PM_FREQ
, ticks_per_sec
);
136 s
->tmr_overflow_time
= (d
+ 0x800000LL
) & ~0x7fffffLL
;
149 s
->pmcntrl
= val
& ~(SUS_EN
);
151 /* change suspend type */
152 sus_typ
= (val
>> 10) & 7;
154 case 0: /* soft power off */
155 qemu_system_shutdown_request();
158 /* RSM_STS should be set on resume. Pretend that resume
159 was caused by power button */
160 s
->pmsts
|= (RSM_STS
| PWRBTN_STS
);
161 qemu_system_reset_request();
162 #if defined(TARGET_I386)
163 cmos_set_s3_resume();
175 printf("PM writew port=0x%04x val=0x%04x\n", addr
, val
);
179 static uint32_t pm_ioport_readw(void *opaque
, uint32_t addr
)
181 PIIX4PMState
*s
= opaque
;
200 printf("PM readw port=0x%04x val=0x%04x\n", addr
, val
);
205 static void pm_ioport_writel(void *opaque
, uint32_t addr
, uint32_t val
)
207 // PIIX4PMState *s = opaque;
210 printf("PM writel port=0x%04x val=0x%08x\n", addr
, val
);
214 static uint32_t pm_ioport_readl(void *opaque
, uint32_t addr
)
216 PIIX4PMState
*s
= opaque
;
229 printf("PM readl port=0x%04x val=0x%08x\n", addr
, val
);
234 static void pm_smi_writeb(void *opaque
, uint32_t addr
, uint32_t val
)
236 PIIX4PMState
*s
= opaque
;
239 printf("pm_smi_writeb addr=0x%x val=0x%02x\n", addr
, val
);
244 /* ACPI specs 3.0, 4.7.2.5 */
245 if (val
== ACPI_ENABLE
) {
246 s
->pmcntrl
|= SCI_EN
;
247 } else if (val
== ACPI_DISABLE
) {
248 s
->pmcntrl
&= ~SCI_EN
;
251 if (s
->dev
.config
[0x5b] & (1 << 1)) {
252 cpu_interrupt(first_cpu
, CPU_INTERRUPT_SMI
);
259 static uint32_t pm_smi_readb(void *opaque
, uint32_t addr
)
261 PIIX4PMState
*s
= opaque
;
271 printf("pm_smi_readb addr=0x%x val=0x%02x\n", addr
, val
);
276 static void acpi_dbg_writel(void *opaque
, uint32_t addr
, uint32_t val
)
279 printf("ACPI: DBG: 0x%08x\n", val
);
283 static void smb_transaction(PIIX4PMState
*s
)
285 uint8_t prot
= (s
->smb_ctl
>> 2) & 0x07;
286 uint8_t read
= s
->smb_addr
& 0x01;
287 uint8_t cmd
= s
->smb_cmd
;
288 uint8_t addr
= s
->smb_addr
>> 1;
289 i2c_bus
*bus
= s
->smbus
;
292 printf("SMBus trans addr=0x%02x prot=0x%02x\n", addr
, prot
);
296 smbus_quick_command(bus
, addr
, read
);
300 s
->smb_data0
= smbus_receive_byte(bus
, addr
);
302 smbus_send_byte(bus
, addr
, cmd
);
307 s
->smb_data0
= smbus_read_byte(bus
, addr
, cmd
);
309 smbus_write_byte(bus
, addr
, cmd
, s
->smb_data0
);
315 val
= smbus_read_word(bus
, addr
, cmd
);
317 s
->smb_data1
= val
>> 8;
319 smbus_write_word(bus
, addr
, cmd
, (s
->smb_data1
<< 8) | s
->smb_data0
);
324 s
->smb_data0
= smbus_read_block(bus
, addr
, cmd
, s
->smb_data
);
326 smbus_write_block(bus
, addr
, cmd
, s
->smb_data
, s
->smb_data0
);
338 static void smb_ioport_writeb(void *opaque
, uint32_t addr
, uint32_t val
)
340 PIIX4PMState
*s
= opaque
;
343 printf("SMB writeb port=0x%04x val=0x%02x\n", addr
, val
);
368 s
->smb_data
[s
->smb_index
++] = val
;
369 if (s
->smb_index
> 31)
377 static uint32_t smb_ioport_readb(void *opaque
, uint32_t addr
)
379 PIIX4PMState
*s
= opaque
;
389 val
= s
->smb_ctl
& 0x1f;
404 val
= s
->smb_data
[s
->smb_index
++];
405 if (s
->smb_index
> 31)
413 printf("SMB readb port=0x%04x val=0x%02x\n", addr
, val
);
418 static void pm_io_space_update(PIIX4PMState
*s
)
422 if (s
->dev
.config
[0x80] & 1) {
423 pm_io_base
= le32_to_cpu(*(uint32_t *)(s
->dev
.config
+ 0x40));
424 pm_io_base
&= 0xffc0;
426 /* XXX: need to improve memory and ioport allocation */
428 printf("PM: mapping to 0x%x\n", pm_io_base
);
430 register_ioport_write(pm_io_base
, 64, 2, pm_ioport_writew
, s
);
431 register_ioport_read(pm_io_base
, 64, 2, pm_ioport_readw
, s
);
432 register_ioport_write(pm_io_base
, 64, 4, pm_ioport_writel
, s
);
433 register_ioport_read(pm_io_base
, 64, 4, pm_ioport_readl
, s
);
437 static void pm_write_config(PCIDevice
*d
,
438 uint32_t address
, uint32_t val
, int len
)
440 pci_default_write_config(d
, address
, val
, len
);
442 pm_io_space_update((PIIX4PMState
*)d
);
445 static void pm_save(QEMUFile
* f
,void *opaque
)
447 PIIX4PMState
*s
= opaque
;
449 pci_device_save(&s
->dev
, f
);
451 qemu_put_be16s(f
, &s
->pmsts
);
452 qemu_put_be16s(f
, &s
->pmen
);
453 qemu_put_be16s(f
, &s
->pmcntrl
);
454 qemu_put_8s(f
, &s
->apmc
);
455 qemu_put_8s(f
, &s
->apms
);
456 qemu_put_timer(f
, s
->tmr_timer
);
457 qemu_put_be64(f
, s
->tmr_overflow_time
);
460 static int pm_load(QEMUFile
* f
,void* opaque
,int version_id
)
462 PIIX4PMState
*s
= opaque
;
468 ret
= pci_device_load(&s
->dev
, f
);
472 qemu_get_be16s(f
, &s
->pmsts
);
473 qemu_get_be16s(f
, &s
->pmen
);
474 qemu_get_be16s(f
, &s
->pmcntrl
);
475 qemu_get_8s(f
, &s
->apmc
);
476 qemu_get_8s(f
, &s
->apms
);
477 qemu_get_timer(f
, s
->tmr_timer
);
478 s
->tmr_overflow_time
=qemu_get_be64(f
);
480 pm_io_space_update(s
);
485 static void piix4_reset(void *opaque
)
487 PIIX4PMState
*s
= opaque
;
488 uint8_t *pci_conf
= s
->dev
.config
;
496 /* Mark SMM as already inited (until KVM supports SMM). */
497 pci_conf
[0x5B] = 0x02;
501 i2c_bus
*piix4_pm_init(PCIBus
*bus
, int devfn
, uint32_t smb_io_base
,
507 s
= (PIIX4PMState
*)pci_register_device(bus
,
508 "PM", sizeof(PIIX4PMState
),
509 devfn
, NULL
, pm_write_config
);
511 pci_conf
= s
->dev
.config
;
512 pci_config_set_vendor_id(pci_conf
, PCI_VENDOR_ID_INTEL
);
513 pci_config_set_device_id(pci_conf
, PCI_DEVICE_ID_INTEL_82371AB_3
);
514 pci_conf
[0x06] = 0x80;
515 pci_conf
[0x07] = 0x02;
516 pci_conf
[0x08] = 0x03; // revision number
517 pci_conf
[0x09] = 0x00;
518 pci_config_set_class(pci_conf
, PCI_CLASS_BRIDGE_OTHER
);
519 pci_conf
[PCI_HEADER_TYPE
] = PCI_HEADER_TYPE_NORMAL
; // header_type
520 pci_conf
[0x3d] = 0x01; // interrupt pin 1
522 pci_conf
[0x40] = 0x01; /* PM io base read only bit */
524 #if defined(TARGET_IA64)
525 pci_conf
[0x40] = 0x41; /* PM io base read only bit */
526 pci_conf
[0x41] = 0x1f;
527 pm_write_config(s
, 0x80, 0x01, 1); /*Set default pm_io_base 0x1f40*/
531 register_ioport_write(0xb2, 2, 1, pm_smi_writeb
, s
);
532 register_ioport_read(0xb2, 2, 1, pm_smi_readb
, s
);
534 register_ioport_write(ACPI_DBG_IO_ADDR
, 4, 4, acpi_dbg_writel
, s
);
537 /* Mark SMM as already inited to prevent SMM from running. KVM does not
538 * support SMM mode. */
539 pci_conf
[0x5B] = 0x02;
542 /* XXX: which specification is used ? The i82731AB has different
544 pci_conf
[0x5f] = (parallel_hds
[0] != NULL
? 0x80 : 0) | 0x10;
545 pci_conf
[0x63] = 0x60;
546 pci_conf
[0x67] = (serial_hds
[0] != NULL
? 0x08 : 0) |
547 (serial_hds
[1] != NULL
? 0x90 : 0);
549 pci_conf
[0x90] = smb_io_base
| 1;
550 pci_conf
[0x91] = smb_io_base
>> 8;
551 pci_conf
[0xd2] = 0x09;
552 register_ioport_write(smb_io_base
, 64, 1, smb_ioport_writeb
, s
);
553 register_ioport_read(smb_io_base
, 64, 1, smb_ioport_readb
, s
);
555 s
->tmr_timer
= qemu_new_timer(vm_clock
, pm_tmr_timer
, s
);
557 register_savevm("piix4_pm", 0, 1, pm_save
, pm_load
, s
);
559 s
->smbus
= i2c_init_bus(NULL
, "i2c");
561 qemu_register_reset(piix4_reset
, s
);
566 #if defined(TARGET_I386)
567 void qemu_system_powerdown(void)
570 qemu_system_shutdown_request();
571 } else if (pm_state
->pmen
& PWRBTN_EN
) {
572 pm_state
->pmsts
|= PWRBTN_EN
;
573 pm_update_sci(pm_state
);
578 #define GPE_BASE 0xafe0
579 #define PROC_BASE 0xaf00
580 #define PCI_BASE 0xae00
581 #define PCI_EJ_BASE 0xae08
584 uint16_t sts
; /* status */
585 uint16_t en
; /* enabled */
586 uint8_t cpus_sts
[32];
594 static struct gpe_regs gpe
;
595 static struct pci_status pci0_status
;
597 static uint32_t gpe_read_val(uint16_t val
, uint32_t addr
)
600 return (val
>> 8) & 0xff;
604 static uint32_t gpe_readb(void *opaque
, uint32_t addr
)
607 struct gpe_regs
*g
= opaque
;
609 case PROC_BASE
... PROC_BASE
+31:
610 val
= g
->cpus_sts
[addr
- PROC_BASE
];
615 val
= gpe_read_val(g
->sts
, addr
);
619 val
= gpe_read_val(g
->en
, addr
);
626 printf("gpe read %x == %x\n", addr
, val
);
631 static void gpe_write_val(uint16_t *cur
, int addr
, uint32_t val
)
634 *cur
= (*cur
& 0xff) | (val
<< 8);
636 *cur
= (*cur
& 0xff00) | (val
& 0xff);
639 static void gpe_reset_val(uint16_t *cur
, int addr
, uint32_t val
)
641 uint16_t x1
, x0
= val
& 0xff;
642 int shift
= (addr
& 1) ? 8 : 0;
644 x1
= (*cur
>> shift
) & 0xff;
648 *cur
= (*cur
& (0xff << (8 - shift
))) | (x1
<< shift
);
651 static void gpe_writeb(void *opaque
, uint32_t addr
, uint32_t val
)
653 struct gpe_regs
*g
= opaque
;
655 case PROC_BASE
... PROC_BASE
+ 31:
656 /* don't allow to change cpus_sts from inside a guest */
661 gpe_reset_val(&g
->sts
, addr
, val
);
665 gpe_write_val(&g
->en
, addr
, val
);
672 printf("gpe write %x <== %d\n", addr
, val
);
676 static uint32_t pcihotplug_read(void *opaque
, uint32_t addr
)
679 struct pci_status
*g
= opaque
;
692 printf("pcihotplug read %x == %x\n", addr
, val
);
697 static void pcihotplug_write(void *opaque
, uint32_t addr
, uint32_t val
)
699 struct pci_status
*g
= opaque
;
710 printf("pcihotplug write %x <== %d\n", addr
, val
);
714 static uint32_t pciej_read(void *opaque
, uint32_t addr
)
717 printf("pciej read %x\n", addr
);
722 static void pciej_write(void *opaque
, uint32_t addr
, uint32_t val
)
724 #if defined (TARGET_I386)
725 int slot
= ffs(val
) - 1;
727 pci_device_hot_remove_success(0, slot
);
731 printf("pciej write %x <== %d\n", addr
, val
);
735 static const char *model
;
737 static void piix4_device_hot_add(int bus
, int slot
, int state
);
739 void piix4_acpi_system_hot_add_init(const char *cpu_model
)
741 int i
= 0, cpus
= smp_cpus
;
744 gpe
.cpus_sts
[i
++] = (cpus
< 8) ? (1 << cpus
) - 1 : 0xff;
747 register_ioport_write(GPE_BASE
, 4, 1, gpe_writeb
, &gpe
);
748 register_ioport_read(GPE_BASE
, 4, 1, gpe_readb
, &gpe
);
750 register_ioport_write(PROC_BASE
, 32, 1, gpe_writeb
, &gpe
);
751 register_ioport_read(PROC_BASE
, 32, 1, gpe_readb
, &gpe
);
753 register_ioport_write(PCI_BASE
, 8, 4, pcihotplug_write
, &pci0_status
);
754 register_ioport_read(PCI_BASE
, 8, 4, pcihotplug_read
, &pci0_status
);
756 register_ioport_write(PCI_EJ_BASE
, 4, 4, pciej_write
, NULL
);
757 register_ioport_read(PCI_EJ_BASE
, 4, 4, pciej_read
, NULL
);
761 qemu_system_device_hot_add_register(piix4_device_hot_add
);
764 static void enable_processor(struct gpe_regs
*g
, int cpu
)
767 g
->cpus_sts
[cpu
/8] |= (1 << (cpu
%8));
770 static void disable_processor(struct gpe_regs
*g
, int cpu
)
773 g
->cpus_sts
[cpu
/8] &= ~(1 << (cpu
%8));
776 #if defined(TARGET_I386) || defined(TARGET_X86_64)
777 void qemu_system_cpu_hot_add(int cpu
, int state
)
781 if (state
&& !qemu_get_cpu(cpu
)) {
782 env
= pc_new_cpu(model
);
784 fprintf(stderr
, "cpu %d creation failed\n", cpu
);
787 env
->cpuid_apic_id
= cpu
;
791 enable_processor(&gpe
, cpu
);
793 disable_processor(&gpe
, cpu
);
795 qemu_set_irq(pm_state
->irq
, 1);
796 qemu_set_irq(pm_state
->irq
, 0);
801 static void enable_device(struct pci_status
*p
, struct gpe_regs
*g
, int slot
)
804 p
->up
|= (1 << slot
);
807 static void disable_device(struct pci_status
*p
, struct gpe_regs
*g
, int slot
)
810 p
->down
|= (1 << slot
);
813 static void piix4_device_hot_add(int bus
, int slot
, int state
)
816 pci0_status
.down
= 0;
818 enable_device(&pci0_status
, &gpe
, slot
);
820 disable_device(&pci0_status
, &gpe
, slot
);
822 qemu_set_irq(pm_state
->irq
, 1);
823 qemu_set_irq(pm_state
->irq
, 0);
827 static qemu_system_device_hot_add_t device_hot_add_callback
;
828 void qemu_system_device_hot_add_register(qemu_system_device_hot_add_t callback
)
830 device_hot_add_callback
= callback
;
833 void qemu_system_device_hot_add(int pcibus
, int slot
, int state
)
835 if (device_hot_add_callback
)
836 device_hot_add_callback(pcibus
, slot
, state
);
839 struct acpi_table_header
841 char signature
[4]; /* ACPI signature (4 ASCII characters) */
842 uint32_t length
; /* Length of table, in bytes, including header */
843 uint8_t revision
; /* ACPI Specification minor version # */
844 uint8_t checksum
; /* To make sum of entire table == 0 */
845 char oem_id
[6]; /* OEM identification */
846 char oem_table_id
[8]; /* OEM table identification */
847 uint32_t oem_revision
; /* OEM revision number */
848 char asl_compiler_id
[4]; /* ASL compiler vendor ID */
849 uint32_t asl_compiler_revision
; /* ASL compiler revision number */
850 } __attribute__((packed
));
853 size_t acpi_tables_len
;
855 static int acpi_checksum(const uint8_t *data
, int len
)
859 for(i
= 0; i
< len
; i
++)
861 return (-sum
) & 0xff;
864 int acpi_table_add(const char *t
)
866 static const char *dfl_id
= "QEMUQEMU";
867 char buf
[1024], *p
, *f
;
868 struct acpi_table_header acpi_hdr
;
872 memset(&acpi_hdr
, 0, sizeof(acpi_hdr
));
874 if (get_param_value(buf
, sizeof(buf
), "sig", t
)) {
875 strncpy(acpi_hdr
.signature
, buf
, 4);
877 strncpy(acpi_hdr
.signature
, dfl_id
, 4);
879 if (get_param_value(buf
, sizeof(buf
), "rev", t
)) {
880 val
= strtoul(buf
, &p
, 10);
881 if (val
> 255 || *p
!= '\0')
886 acpi_hdr
.revision
= (int8_t)val
;
888 if (get_param_value(buf
, sizeof(buf
), "oem_id", t
)) {
889 strncpy(acpi_hdr
.oem_id
, buf
, 6);
891 strncpy(acpi_hdr
.oem_id
, dfl_id
, 6);
894 if (get_param_value(buf
, sizeof(buf
), "oem_table_id", t
)) {
895 strncpy(acpi_hdr
.oem_table_id
, buf
, 8);
897 strncpy(acpi_hdr
.oem_table_id
, dfl_id
, 8);
900 if (get_param_value(buf
, sizeof(buf
), "oem_rev", t
)) {
901 val
= strtol(buf
, &p
, 10);
907 acpi_hdr
.oem_revision
= cpu_to_le32(val
);
909 if (get_param_value(buf
, sizeof(buf
), "asl_compiler_id", t
)) {
910 strncpy(acpi_hdr
.asl_compiler_id
, buf
, 4);
912 strncpy(acpi_hdr
.asl_compiler_id
, dfl_id
, 4);
915 if (get_param_value(buf
, sizeof(buf
), "asl_compiler_rev", t
)) {
916 val
= strtol(buf
, &p
, 10);
922 acpi_hdr
.asl_compiler_revision
= cpu_to_le32(val
);
924 if (!get_param_value(buf
, sizeof(buf
), "data", t
)) {
928 acpi_hdr
.length
= sizeof(acpi_hdr
);
933 char *n
= strchr(f
, ':');
936 if(stat(f
, &s
) < 0) {
937 fprintf(stderr
, "Can't stat file '%s': %s\n", f
, strerror(errno
));
940 acpi_hdr
.length
+= s
.st_size
;
948 acpi_tables_len
= sizeof(uint16_t);
949 acpi_tables
= qemu_mallocz(acpi_tables_len
);
951 p
= acpi_tables
+ acpi_tables_len
;
952 acpi_tables_len
+= sizeof(uint16_t) + acpi_hdr
.length
;
953 acpi_tables
= qemu_realloc(acpi_tables
, acpi_tables_len
);
955 acpi_hdr
.length
= cpu_to_le32(acpi_hdr
.length
);
956 *(uint16_t*)p
= acpi_hdr
.length
;
957 p
+= sizeof(uint16_t);
958 memcpy(p
, &acpi_hdr
, sizeof(acpi_hdr
));
959 off
= sizeof(acpi_hdr
);
965 char *n
= strchr(f
, ':');
968 fd
= open(f
, O_RDONLY
);
972 if(fstat(fd
, &s
) < 0) {
979 r
= read(fd
, p
+ off
, s
.st_size
);
983 } else if ((r
< 0 && errno
!= EINTR
) || r
== 0) {
995 ((struct acpi_table_header
*)p
)->checksum
= acpi_checksum((uint8_t*)p
, off
);
996 /* increase number of tables */
997 (*(uint16_t*)acpi_tables
) =
998 cpu_to_le32(le32_to_cpu(*(uint16_t*)acpi_tables
) + 1);