2 * ARM Versatile/PB PCI host controller
4 * Copyright (c) 2006-2009 CodeSourcery.
5 * Written by Paul Brook
7 * This code is licensed under the LGPL.
10 #include "hw/sysbus.h"
11 #include "hw/pci/pci.h"
12 #include "hw/pci/pci_bus.h"
13 #include "hw/pci/pci_host.h"
14 #include "exec/address-spaces.h"
16 /* Old and buggy versions of QEMU used the wrong mapping from
17 * PCI IRQs to system interrupt lines. Unfortunately the Linux
18 * kernel also had the corresponding bug in setting up interrupts
19 * (so older kernels work on QEMU and not on real hardware).
20 * We automatically detect these broken kernels and flip back
21 * to the broken irq mapping by spotting guest writes to the
22 * PCI_INTERRUPT_LINE register to see where the guest thinks
23 * interrupts are going to be routed. So we start in state
24 * ASSUME_OK on reset, and transition to either BROKEN or
25 * FORCE_OK at the first write to an INTERRUPT_LINE register for
26 * a slot where broken and correct interrupt mapping would differ.
27 * Once in either BROKEN or FORCE_OK we never transition again;
28 * this allows a newer kernel to use the INTERRUPT_LINE
29 * registers arbitrarily once it has indicated that it isn't
30 * broken in its init code somewhere.
33 PCI_VPB_IRQMAP_ASSUME_OK
,
34 PCI_VPB_IRQMAP_BROKEN
,
35 PCI_VPB_IRQMAP_FORCE_OK
,
39 PCIHostState parent_obj
;
42 MemoryRegion controlregs
;
43 MemoryRegion mem_config
;
44 MemoryRegion mem_config2
;
45 /* Containers representing the PCI address spaces */
46 MemoryRegion pci_io_space
;
47 MemoryRegion pci_mem_space
;
48 /* Alias regions into PCI address spaces which we expose as sysbus regions.
49 * The offsets into pci_mem_space are controlled by the imap registers.
51 MemoryRegion pci_io_window
;
52 MemoryRegion pci_mem_window
[3];
56 /* Constant for life of device: */
58 uint32_t mem_win_size
[3];
68 static void pci_vpb_update_window(PCIVPBState
*s
, int i
)
70 /* Adjust the offset of the alias region we use for
71 * the memory window i to account for a change in the
72 * value of the corresponding IMAP register.
73 * Note that the semantics of the IMAP register differ
74 * for realview and versatile variants of the controller.
78 /* Top bits of register (masked according to window size) provide
79 * top bits of PCI address.
81 offset
= s
->imap
[i
] & ~(s
->mem_win_size
[i
] - 1);
83 /* Bottom 4 bits of register provide top 4 bits of PCI address */
84 offset
= s
->imap
[i
] << 28;
86 memory_region_set_alias_offset(&s
->pci_mem_window
[i
], offset
);
89 static void pci_vpb_update_all_windows(PCIVPBState
*s
)
91 /* Update all alias windows based on the current register state */
94 for (i
= 0; i
< 3; i
++) {
95 pci_vpb_update_window(s
, i
);
99 static int pci_vpb_post_load(void *opaque
, int version_id
)
101 PCIVPBState
*s
= opaque
;
102 pci_vpb_update_all_windows(s
);
106 static const VMStateDescription pci_vpb_vmstate
= {
107 .name
= "versatile-pci",
109 .minimum_version_id
= 1,
110 .post_load
= pci_vpb_post_load
,
111 .fields
= (VMStateField
[]) {
112 VMSTATE_UINT32_ARRAY(imap
, PCIVPBState
, 3),
113 VMSTATE_UINT32_ARRAY(smap
, PCIVPBState
, 3),
114 VMSTATE_UINT32(selfid
, PCIVPBState
),
115 VMSTATE_UINT32(flags
, PCIVPBState
),
116 VMSTATE_UINT8(irq_mapping
, PCIVPBState
),
117 VMSTATE_END_OF_LIST()
121 #define TYPE_VERSATILE_PCI "versatile_pci"
122 #define PCI_VPB(obj) \
123 OBJECT_CHECK(PCIVPBState, (obj), TYPE_VERSATILE_PCI)
125 #define TYPE_VERSATILE_PCI_HOST "versatile_pci_host"
126 #define PCI_VPB_HOST(obj) \
127 OBJECT_CHECK(PCIDevice, (obj), TYPE_VERSATILE_PCIHOST)
140 static void pci_vpb_reg_write(void *opaque
, hwaddr addr
,
141 uint64_t val
, unsigned size
)
143 PCIVPBState
*s
= opaque
;
150 int win
= (addr
- PCI_IMAP0
) >> 2;
152 pci_vpb_update_window(s
, win
);
165 int win
= (addr
- PCI_SMAP0
) >> 2;
170 qemu_log_mask(LOG_GUEST_ERROR
,
171 "pci_vpb_reg_write: Bad offset %x\n", (int)addr
);
176 static uint64_t pci_vpb_reg_read(void *opaque
, hwaddr addr
,
179 PCIVPBState
*s
= opaque
;
186 int win
= (addr
- PCI_IMAP0
) >> 2;
197 int win
= (addr
- PCI_SMAP0
) >> 2;
201 qemu_log_mask(LOG_GUEST_ERROR
,
202 "pci_vpb_reg_read: Bad offset %x\n", (int)addr
);
207 static const MemoryRegionOps pci_vpb_reg_ops
= {
208 .read
= pci_vpb_reg_read
,
209 .write
= pci_vpb_reg_write
,
210 .endianness
= DEVICE_NATIVE_ENDIAN
,
212 .min_access_size
= 4,
213 .max_access_size
= 4,
217 static void pci_vpb_config_write(void *opaque
, hwaddr addr
,
218 uint64_t val
, unsigned size
)
220 PCIVPBState
*s
= opaque
;
221 if (!s
->realview
&& (addr
& 0xff) == PCI_INTERRUPT_LINE
222 && s
->irq_mapping
== PCI_VPB_IRQMAP_ASSUME_OK
) {
223 uint8_t devfn
= addr
>> 8;
224 if ((PCI_SLOT(devfn
) % PCI_NUM_PINS
) != 2) {
226 s
->irq_mapping
= PCI_VPB_IRQMAP_BROKEN
;
228 s
->irq_mapping
= PCI_VPB_IRQMAP_FORCE_OK
;
232 pci_data_write(&s
->pci_bus
, addr
, val
, size
);
235 static uint64_t pci_vpb_config_read(void *opaque
, hwaddr addr
,
238 PCIVPBState
*s
= opaque
;
240 val
= pci_data_read(&s
->pci_bus
, addr
, size
);
244 static const MemoryRegionOps pci_vpb_config_ops
= {
245 .read
= pci_vpb_config_read
,
246 .write
= pci_vpb_config_write
,
247 .endianness
= DEVICE_NATIVE_ENDIAN
,
250 static int pci_vpb_map_irq(PCIDevice
*d
, int irq_num
)
252 PCIVPBState
*s
= container_of(d
->bus
, PCIVPBState
, pci_bus
);
254 if (s
->irq_mapping
== PCI_VPB_IRQMAP_BROKEN
) {
255 /* Legacy broken IRQ mapping for compatibility with old and
261 /* Slot to IRQ mapping for RealView Platform Baseboard 926 backplane
262 * name slot IntA IntB IntC IntD
263 * A 31 IRQ28 IRQ29 IRQ30 IRQ27
264 * B 30 IRQ27 IRQ28 IRQ29 IRQ30
265 * C 29 IRQ30 IRQ27 IRQ28 IRQ29
266 * Slot C is for the host bridge; A and B the peripherals.
267 * Our output irqs 0..3 correspond to the baseboard's 27..30.
269 * This mapping function takes account of an oddity in the PB926
270 * board wiring, where the FPGA's P_nINTA input is connected to
271 * the INTB connection on the board PCI edge connector, P_nINTB
272 * is connected to INTC, and so on, so everything is one number
273 * further round from where you might expect.
275 return pci_swizzle_map_irq_fn(d
, irq_num
+ 2);
278 static int pci_vpb_rv_map_irq(PCIDevice
*d
, int irq_num
)
280 /* Slot to IRQ mapping for RealView EB and PB1176 backplane
281 * name slot IntA IntB IntC IntD
282 * A 31 IRQ50 IRQ51 IRQ48 IRQ49
283 * B 30 IRQ49 IRQ50 IRQ51 IRQ48
284 * C 29 IRQ48 IRQ49 IRQ50 IRQ51
285 * Slot C is for the host bridge; A and B the peripherals.
286 * Our output irqs 0..3 correspond to the baseboard's 48..51.
288 * The PB1176 and EB boards don't have the PB926 wiring oddity
289 * described above; P_nINTA connects to INTA, P_nINTB to INTB
290 * and so on, which is why this mapping function is different.
292 return pci_swizzle_map_irq_fn(d
, irq_num
+ 3);
295 static void pci_vpb_set_irq(void *opaque
, int irq_num
, int level
)
297 qemu_irq
*pic
= opaque
;
299 qemu_set_irq(pic
[irq_num
], level
);
302 static void pci_vpb_reset(DeviceState
*d
)
304 PCIVPBState
*s
= PCI_VPB(d
);
314 s
->irq_mapping
= PCI_VPB_IRQMAP_ASSUME_OK
;
316 pci_vpb_update_all_windows(s
);
319 static void pci_vpb_init(Object
*obj
)
321 PCIHostState
*h
= PCI_HOST_BRIDGE(obj
);
322 PCIVPBState
*s
= PCI_VPB(obj
);
324 memory_region_init(&s
->pci_io_space
, "pci_io", 1ULL << 32);
325 memory_region_init(&s
->pci_mem_space
, "pci_mem", 1ULL << 32);
327 pci_bus_new_inplace(&s
->pci_bus
, DEVICE(obj
), "pci",
328 &s
->pci_mem_space
, &s
->pci_io_space
,
329 PCI_DEVFN(11, 0), TYPE_PCI_BUS
);
330 h
->bus
= &s
->pci_bus
;
332 object_initialize(&s
->pci_dev
, TYPE_VERSATILE_PCI_HOST
);
333 qdev_set_parent_bus(DEVICE(&s
->pci_dev
), BUS(&s
->pci_bus
));
334 object_property_set_int(OBJECT(&s
->pci_dev
), PCI_DEVFN(29, 0), "addr",
337 /* Window sizes for VersatilePB; realview_pci's init will override */
338 s
->mem_win_size
[0] = 0x0c000000;
339 s
->mem_win_size
[1] = 0x10000000;
340 s
->mem_win_size
[2] = 0x10000000;
343 static void pci_vpb_realize(DeviceState
*dev
, Error
**errp
)
345 PCIVPBState
*s
= PCI_VPB(dev
);
346 SysBusDevice
*sbd
= SYS_BUS_DEVICE(dev
);
347 pci_map_irq_fn mapfn
;
350 for (i
= 0; i
< 4; i
++) {
351 sysbus_init_irq(sbd
, &s
->irq
[i
]);
355 mapfn
= pci_vpb_rv_map_irq
;
357 mapfn
= pci_vpb_map_irq
;
360 pci_bus_irqs(&s
->pci_bus
, pci_vpb_set_irq
, mapfn
, s
->irq
, 4);
362 /* Our memory regions are:
363 * 0 : our control registers
364 * 1 : PCI self config window
365 * 2 : PCI config window
367 * 4..6 : PCI memory windows
369 memory_region_init_io(&s
->controlregs
, &pci_vpb_reg_ops
, s
, "pci-vpb-regs",
371 sysbus_init_mmio(sbd
, &s
->controlregs
);
372 memory_region_init_io(&s
->mem_config
, &pci_vpb_config_ops
, s
,
373 "pci-vpb-selfconfig", 0x1000000);
374 sysbus_init_mmio(sbd
, &s
->mem_config
);
375 memory_region_init_io(&s
->mem_config2
, &pci_vpb_config_ops
, s
,
376 "pci-vpb-config", 0x1000000);
377 sysbus_init_mmio(sbd
, &s
->mem_config2
);
379 /* The window into I/O space is always into a fixed base address;
380 * its size is the same for both realview and versatile.
382 memory_region_init_alias(&s
->pci_io_window
, "pci-vbp-io-window",
383 &s
->pci_io_space
, 0, 0x100000);
385 sysbus_init_mmio(sbd
, &s
->pci_io_space
);
387 /* Create the alias regions corresponding to our three windows onto
388 * PCI memory space. The sizes vary from board to board; the base
389 * offsets are guest controllable via the IMAP registers.
391 for (i
= 0; i
< 3; i
++) {
392 memory_region_init_alias(&s
->pci_mem_window
[i
], "pci-vbp-window",
393 &s
->pci_mem_space
, 0, s
->mem_win_size
[i
]);
394 sysbus_init_mmio(sbd
, &s
->pci_mem_window
[i
]);
397 /* TODO Remove once realize propagates to child devices. */
398 object_property_set_bool(OBJECT(&s
->pci_dev
), true, "realized", errp
);
401 static int versatile_pci_host_init(PCIDevice
*d
)
403 pci_set_word(d
->config
+ PCI_STATUS
,
404 PCI_STATUS_66MHZ
| PCI_STATUS_DEVSEL_MEDIUM
);
405 pci_set_byte(d
->config
+ PCI_LATENCY_TIMER
, 0x10);
409 static void versatile_pci_host_class_init(ObjectClass
*klass
, void *data
)
411 PCIDeviceClass
*k
= PCI_DEVICE_CLASS(klass
);
413 k
->init
= versatile_pci_host_init
;
414 k
->vendor_id
= PCI_VENDOR_ID_XILINX
;
415 k
->device_id
= PCI_DEVICE_ID_XILINX_XC2VP30
;
416 k
->class_id
= PCI_CLASS_PROCESSOR_CO
;
419 static const TypeInfo versatile_pci_host_info
= {
420 .name
= TYPE_VERSATILE_PCI_HOST
,
421 .parent
= TYPE_PCI_DEVICE
,
422 .instance_size
= sizeof(PCIDevice
),
423 .class_init
= versatile_pci_host_class_init
,
426 static void pci_vpb_class_init(ObjectClass
*klass
, void *data
)
428 DeviceClass
*dc
= DEVICE_CLASS(klass
);
430 dc
->realize
= pci_vpb_realize
;
431 dc
->reset
= pci_vpb_reset
;
432 dc
->vmsd
= &pci_vpb_vmstate
;
435 static const TypeInfo pci_vpb_info
= {
436 .name
= TYPE_VERSATILE_PCI
,
437 .parent
= TYPE_PCI_HOST_BRIDGE
,
438 .instance_size
= sizeof(PCIVPBState
),
439 .instance_init
= pci_vpb_init
,
440 .class_init
= pci_vpb_class_init
,
443 static void pci_realview_init(Object
*obj
)
445 PCIVPBState
*s
= PCI_VPB(obj
);
448 /* The PCI window sizes are different on Realview boards */
449 s
->mem_win_size
[0] = 0x01000000;
450 s
->mem_win_size
[1] = 0x04000000;
451 s
->mem_win_size
[2] = 0x08000000;
454 static const TypeInfo pci_realview_info
= {
455 .name
= "realview_pci",
456 .parent
= TYPE_VERSATILE_PCI
,
457 .instance_init
= pci_realview_init
,
460 static void versatile_pci_register_types(void)
462 type_register_static(&pci_vpb_info
);
463 type_register_static(&pci_realview_info
);
464 type_register_static(&versatile_pci_host_info
);
467 type_init(versatile_pci_register_types
)