hw/ppc_newworld.c

   1 /*
   2  * QEMU PowerPC CHRP (currently NewWorld PowerMac) hardware System Emulator
   3  *
   4  * Copyright (c) 2004-2007 Fabrice Bellard
   5  * Copyright (c) 2007 Jocelyn Mayer
   6  *
   7  * Permission is hereby granted, free of charge, to any person obtaining a copy
   8  * of this software and associated documentation files (the "Software"), to deal
   9  * in the Software without restriction, including without limitation the rights
  10  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  11  * copies of the Software, and to permit persons to whom the Software is
  12  * furnished to do so, subject to the following conditions:
  13  *
  14  * The above copyright notice and this permission notice shall be included in
  15  * all copies or substantial portions of the Software.
  16  *
  17  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  18  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  19  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  20  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  21  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  22  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  23  * THE SOFTWARE.
  24  *
  25  * PCI bus layout on a real G5 (U3 based):
  26  *
  27  * 0000:f0:0b.0 Host bridge [0600]: Apple Computer Inc. U3 AGP [106b:004b]
  28  * 0000:f0:10.0 VGA compatible controller [0300]: ATI Technologies Inc RV350 AP [Radeon 9600] [1002:4150]
  29  * 0001:00:00.0 Host bridge [0600]: Apple Computer Inc. CPC945 HT Bridge [106b:004a]
  30  * 0001:00:01.0 PCI bridge [0604]: Advanced Micro Devices [AMD] AMD-8131 PCI-X Bridge [1022:7450] (rev 12)
  31  * 0001:00:02.0 PCI bridge [0604]: Advanced Micro Devices [AMD] AMD-8131 PCI-X Bridge [1022:7450] (rev 12)
  32  * 0001:00:03.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0045]
  33  * 0001:00:04.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0046]
  34  * 0001:00:05.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0047]
  35  * 0001:00:06.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0048]
  36  * 0001:00:07.0 PCI bridge [0604]: Apple Computer Inc. K2 HT-PCI Bridge [106b:0049]
  37  * 0001:01:07.0 Class [ff00]: Apple Computer Inc. K2 KeyLargo Mac/IO [106b:0041] (rev 20)
  38  * 0001:01:08.0 USB Controller [0c03]: Apple Computer Inc. K2 KeyLargo USB [106b:0040]
  39  * 0001:01:09.0 USB Controller [0c03]: Apple Computer Inc. K2 KeyLargo USB [106b:0040]
  40  * 0001:02:0b.0 USB Controller [0c03]: NEC Corporation USB [1033:0035] (rev 43)
  41  * 0001:02:0b.1 USB Controller [0c03]: NEC Corporation USB [1033:0035] (rev 43)
  42  * 0001:02:0b.2 USB Controller [0c03]: NEC Corporation USB 2.0 [1033:00e0] (rev 04)
  43  * 0001:03:0d.0 Class [ff00]: Apple Computer Inc. K2 ATA/100 [106b:0043]
  44  * 0001:03:0e.0 FireWire (IEEE 1394) [0c00]: Apple Computer Inc. K2 FireWire [106b:0042]
  45  * 0001:04:0f.0 Ethernet controller [0200]: Apple Computer Inc. K2 GMAC (Sun GEM) [106b:004c]
  46  * 0001:05:0c.0 IDE interface [0101]: Broadcom K2 SATA [1166:0240]
  47  *
  48  */
  49 #include "hw.h"
  50 #include "ppc.h"
  51 #include "ppc_mac.h"
  52 #include "mac_dbdma.h"
  53 #include "nvram.h"
  54 #include "pc.h"
  55 #include "pci.h"
  56 #include "usb-ohci.h"
  57 #include "net.h"
  58 #include "sysemu.h"
  59 #include "boards.h"
  60 #include "fw_cfg.h"
  61 #include "escc.h"
  62 #include "openpic.h"
  63 #include "ide.h"
  64 #include "loader.h"
  65 #include "elf.h"
  66 #include "kvm.h"
  67 #include "kvm_ppc.h"
  68 #include "hw/usb.h"
  69
  70 #define MAX_IDE_BUS 2
  71 #define VGA_BIOS_SIZE 65536
  72 #define CFG_ADDR 0xf0000510
  73
  74 /* debug UniNorth */
  75 //#define DEBUG_UNIN
  76
  77 #ifdef DEBUG_UNIN
  78 #define UNIN_DPRINTF(fmt, ...)                                  \
  79     do { printf("UNIN: " fmt , ## __VA_ARGS__); } while (0)
  80 #else
  81 #define UNIN_DPRINTF(fmt, ...)
  82 #endif
  83
  84 /* UniN device */
  85 static void unin_writel (void *opaque, target_phys_addr_t addr, uint32_t value)
  86 {
  87     UNIN_DPRINTF("writel addr " TARGET_FMT_plx " val %x\n", addr, value);
  88 }
  89
  90 static uint32_t unin_readl (void *opaque, target_phys_addr_t addr)
  91 {
  92     uint32_t value;
  93
  94     value = 0;
  95     UNIN_DPRINTF("readl addr " TARGET_FMT_plx " val %x\n", addr, value);
  96
  97     return value;
  98 }
  99
 100 static CPUWriteMemoryFunc * const unin_write[] = {
 101     &unin_writel,
 102     &unin_writel,
 103     &unin_writel,
 104 };
 105
 106 static CPUReadMemoryFunc * const unin_read[] = {
 107     &unin_readl,
 108     &unin_readl,
 109     &unin_readl,
 110 };
 111
 112 static int fw_cfg_boot_set(void *opaque, const char *boot_device)
 113 {
 114     fw_cfg_add_i16(opaque, FW_CFG_BOOT_DEVICE, boot_device[0]);
 115     return 0;
 116 }
 117
 118 /* PowerPC Mac99 hardware initialisation */
 119 static void ppc_core99_init (ram_addr_t ram_size,
 120                              const char *boot_device,
 121                              const char *kernel_filename,
 122                              const char *kernel_cmdline,
 123                              const char *initrd_filename,
 124                              const char *cpu_model)
 125 {
 126     CPUState *env = NULL, *envs[MAX_CPUS];
 127     char *filename;
 128     qemu_irq *pic, **openpic_irqs;
 129     int unin_memory;
 130     int linux_boot, i;
 131     ram_addr_t ram_offset, bios_offset, vga_bios_offset;
 132     uint32_t kernel_base, kernel_size, initrd_base, initrd_size;
 133     PCIBus *pci_bus;
 134     MacIONVRAMState *nvr;
 135     int nvram_mem_index;
 136     int vga_bios_size, bios_size;
 137     int pic_mem_index, dbdma_mem_index, cuda_mem_index, escc_mem_index;
 138     int ide_mem_index[3];
 139     int ppc_boot_device;
 140     DriveInfo *hd[MAX_IDE_BUS * MAX_IDE_DEVS];
 141     void *fw_cfg;
 142     void *dbdma;
 143     uint8_t *vga_bios_ptr;
 144     int machine_arch;
 145
 146     linux_boot = (kernel_filename != NULL);
 147
 148     /* init CPUs */
 149     if (cpu_model == NULL)
 150 #ifdef TARGET_PPC64
 151         cpu_model = "970fx";
 152 #else
 153         cpu_model = "G4";
 154 #endif
 155     for (i = 0; i < smp_cpus; i++) {
 156         env = cpu_init(cpu_model);
 157         if (!env) {
 158             fprintf(stderr, "Unable to find PowerPC CPU definition\n");
 159             exit(1);
 160         }
 161         /* Set time-base frequency to 100 Mhz */
 162         cpu_ppc_tb_init(env, 100UL * 1000UL * 1000UL);
 163 #if 0
 164         env->osi_call = vga_osi_call;
 165 #endif
 166         qemu_register_reset((QEMUResetHandler*)&cpu_reset, env);
 167         envs[i] = env;
 168     }
 169
 170     /* Make sure all register sets take effect */
 171     cpu_synchronize_state(env);
 172
 173     /* allocate RAM */
 174     ram_offset = qemu_ram_alloc(ram_size);
 175     cpu_register_physical_memory(0, ram_size, ram_offset);
 176
 177     /* allocate and load BIOS */
 178     bios_offset = qemu_ram_alloc(BIOS_SIZE);
 179     if (bios_name == NULL)
 180         bios_name = PROM_FILENAME;
 181     filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, bios_name);
 182     cpu_register_physical_memory(PROM_ADDR, BIOS_SIZE, bios_offset | IO_MEM_ROM);
 183
 184     /* Load OpenBIOS (ELF) */
 185     if (filename) {
 186         bios_size = load_elf(filename, 0, NULL, NULL, NULL, 1, ELF_MACHINE, 0);
 187
 188         qemu_free(filename);
 189     } else {
 190         bios_size = -1;
 191     }
 192     if (bios_size < 0 || bios_size > BIOS_SIZE) {
 193         hw_error("qemu: could not load PowerPC bios '%s'\n", bios_name);
 194         exit(1);
 195     }
 196
 197     /* allocate and load VGA BIOS */
 198     vga_bios_offset = qemu_ram_alloc(VGA_BIOS_SIZE);
 199     vga_bios_ptr = qemu_get_ram_ptr(vga_bios_offset);
 200     filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, VGABIOS_FILENAME);
 201     if (filename) {
 202         vga_bios_size = load_image(filename, vga_bios_ptr + 8);
 203         qemu_free(filename);
 204     } else {
 205         vga_bios_size = -1;
 206     }
 207     if (vga_bios_size < 0) {
 208         /* if no bios is present, we can still work */
 209         fprintf(stderr, "qemu: warning: could not load VGA bios '%s'\n",
 210                 VGABIOS_FILENAME);
 211         vga_bios_size = 0;
 212     } else {
 213         /* set a specific header (XXX: find real Apple format for NDRV
 214            drivers) */
 215         vga_bios_ptr[0] = 'N';
 216         vga_bios_ptr[1] = 'D';
 217         vga_bios_ptr[2] = 'R';
 218         vga_bios_ptr[3] = 'V';
 219         cpu_to_be32w((uint32_t *)(vga_bios_ptr + 4), vga_bios_size);
 220         vga_bios_size += 8;
 221
 222         /* Round to page boundary */
 223         vga_bios_size = (vga_bios_size + TARGET_PAGE_SIZE - 1) &
 224             TARGET_PAGE_MASK;
 225     }
 226
 227     if (linux_boot) {
 228         uint64_t lowaddr = 0;
 229         int bswap_needed;
 230
 231 #ifdef BSWAP_NEEDED
 232         bswap_needed = 1;
 233 #else
 234         bswap_needed = 0;
 235 #endif
 236         kernel_base = KERNEL_LOAD_ADDR;
 237
 238         /* Now we can load the kernel. The first step tries to load the kernel
 239            supposing PhysAddr = 0x00000000. If that was wrong the kernel is
 240            loaded again, the new PhysAddr being computed from lowaddr. */
 241         kernel_size = load_elf(kernel_filename, kernel_base, NULL, &lowaddr, NULL,
 242                                1, ELF_MACHINE, 0);
 243         if (kernel_size > 0 && lowaddr != KERNEL_LOAD_ADDR) {
 244             kernel_size = load_elf(kernel_filename, (2 * kernel_base) - lowaddr,
 245                                    NULL, NULL, NULL, 1, ELF_MACHINE, 0);
 246         }
 247         if (kernel_size < 0)
 248             kernel_size = load_aout(kernel_filename, kernel_base,
 249                                     ram_size - kernel_base, bswap_needed,
 250                                     TARGET_PAGE_SIZE);
 251         if (kernel_size < 0)
 252             kernel_size = load_image_targphys(kernel_filename,
 253                                               kernel_base,
 254                                               ram_size - kernel_base);
 255         if (kernel_size < 0) {
 256             hw_error("qemu: could not load kernel '%s'\n", kernel_filename);
 257             exit(1);
 258         }
 259         /* load initrd */
 260         if (initrd_filename) {
 261             initrd_base = INITRD_LOAD_ADDR;
 262             initrd_size = load_image_targphys(initrd_filename, initrd_base,
 263                                               ram_size - initrd_base);
 264             if (initrd_size < 0) {
 265                 hw_error("qemu: could not load initial ram disk '%s'\n",
 266                          initrd_filename);
 267                 exit(1);
 268             }
 269         } else {
 270             initrd_base = 0;
 271             initrd_size = 0;
 272         }
 273         ppc_boot_device = 'm';
 274     } else {
 275         kernel_base = 0;
 276         kernel_size = 0;
 277         initrd_base = 0;
 278         initrd_size = 0;
 279         ppc_boot_device = '\0';
 280         /* We consider that NewWorld PowerMac never have any floppy drive
 281          * For now, OHW cannot boot from the network.
 282          */
 283         for (i = 0; boot_device[i] != '\0'; i++) {
 284             if (boot_device[i] >= 'c' && boot_device[i] <= 'f') {
 285                 ppc_boot_device = boot_device[i];
 286                 break;
 287             }
 288         }
 289         if (ppc_boot_device == '\0') {
 290             fprintf(stderr, "No valid boot device for Mac99 machine\n");
 291             exit(1);
 292         }
 293     }
 294
 295     isa_mem_base = 0x80000000;
 296
 297     /* Register 8 MB of ISA IO space */
 298     isa_mmio_init(0xf2000000, 0x00800000);
 299
 300     /* UniN init */
 301     unin_memory = cpu_register_io_memory(unin_read, unin_write, NULL);
 302     cpu_register_physical_memory(0xf8000000, 0x00001000, unin_memory);
 303
 304     openpic_irqs = qemu_mallocz(smp_cpus * sizeof(qemu_irq *));
 305     openpic_irqs[0] =
 306         qemu_mallocz(smp_cpus * sizeof(qemu_irq) * OPENPIC_OUTPUT_NB);
 307     for (i = 0; i < smp_cpus; i++) {
 308         /* Mac99 IRQ connection between OpenPIC outputs pins
 309          * and PowerPC input pins
 310          */
 311         switch (PPC_INPUT(env)) {
 312         case PPC_FLAGS_INPUT_6xx:
 313             openpic_irqs[i] = openpic_irqs[0] + (i * OPENPIC_OUTPUT_NB);
 314             openpic_irqs[i][OPENPIC_OUTPUT_INT] =
 315                 ((qemu_irq *)env->irq_inputs)[PPC6xx_INPUT_INT];
 316             openpic_irqs[i][OPENPIC_OUTPUT_CINT] =
 317                 ((qemu_irq *)env->irq_inputs)[PPC6xx_INPUT_INT];
 318             openpic_irqs[i][OPENPIC_OUTPUT_MCK] =
 319                 ((qemu_irq *)env->irq_inputs)[PPC6xx_INPUT_MCP];
 320             /* Not connected ? */
 321             openpic_irqs[i][OPENPIC_OUTPUT_DEBUG] = NULL;
 322             /* Check this */
 323             openpic_irqs[i][OPENPIC_OUTPUT_RESET] =
 324                 ((qemu_irq *)env->irq_inputs)[PPC6xx_INPUT_HRESET];
 325             break;
 326 #if defined(TARGET_PPC64)
 327         case PPC_FLAGS_INPUT_970:
 328             openpic_irqs[i] = openpic_irqs[0] + (i * OPENPIC_OUTPUT_NB);
 329             openpic_irqs[i][OPENPIC_OUTPUT_INT] =
 330                 ((qemu_irq *)env->irq_inputs)[PPC970_INPUT_INT];
 331             openpic_irqs[i][OPENPIC_OUTPUT_CINT] =
 332                 ((qemu_irq *)env->irq_inputs)[PPC970_INPUT_INT];
 333             openpic_irqs[i][OPENPIC_OUTPUT_MCK] =
 334                 ((qemu_irq *)env->irq_inputs)[PPC970_INPUT_MCP];
 335             /* Not connected ? */
 336             openpic_irqs[i][OPENPIC_OUTPUT_DEBUG] = NULL;
 337             /* Check this */
 338             openpic_irqs[i][OPENPIC_OUTPUT_RESET] =
 339                 ((qemu_irq *)env->irq_inputs)[PPC970_INPUT_HRESET];
 340             break;
 341 #endif /* defined(TARGET_PPC64) */
 342         default:
 343             hw_error("Bus model not supported on mac99 machine\n");
 344             exit(1);
 345         }
 346     }
 347     pic = openpic_init(NULL, &pic_mem_index, smp_cpus, openpic_irqs, NULL);
 348     if (PPC_INPUT(env) == PPC_FLAGS_INPUT_970) {
 349         /* 970 gets a U3 bus */
 350         pci_bus = pci_pmac_u3_init(pic);
 351         machine_arch = ARCH_MAC99_U3;
 352     } else {
 353         pci_bus = pci_pmac_init(pic);
 354         machine_arch = ARCH_MAC99;
 355     }
 356     /* init basic PC hardware */
 357     pci_vga_init(pci_bus, vga_bios_offset, vga_bios_size);
 358
 359     escc_mem_index = escc_init(0x80013000, pic[0x25], pic[0x24],
 360                                serial_hds[0], serial_hds[1], ESCC_CLOCK, 4);
 361
 362     for(i = 0; i < nb_nics; i++)
 363         pci_nic_init_nofail(&nd_table[i], "ne2k_pci", NULL);
 364
 365     if (drive_get_max_bus(IF_IDE) >= MAX_IDE_BUS) {
 366         fprintf(stderr, "qemu: too many IDE bus\n");
 367         exit(1);
 368     }
 369     dbdma = DBDMA_init(&dbdma_mem_index);
 370
 371     /* We only emulate 2 out of 3 IDE controllers for now */
 372     ide_mem_index[0] = -1;
 373     hd[0] = drive_get(IF_IDE, 0, 0);
 374     hd[1] = drive_get(IF_IDE, 0, 1);
 375     ide_mem_index[1] = pmac_ide_init(hd, pic[0x0d], dbdma, 0x16, pic[0x02]);
 376     hd[0] = drive_get(IF_IDE, 1, 0);
 377     hd[1] = drive_get(IF_IDE, 1, 1);
 378     ide_mem_index[2] = pmac_ide_init(hd, pic[0x0e], dbdma, 0x1a, pic[0x02]);
 379
 380     /* cuda also initialize ADB */
 381     if (machine_arch == ARCH_MAC99_U3) {
 382         usb_enabled = 1;
 383     }
 384     cuda_init(&cuda_mem_index, pic[0x19]);
 385
 386     adb_kbd_init(&adb_bus);
 387     adb_mouse_init(&adb_bus);
 388
 389     macio_init(pci_bus, PCI_DEVICE_ID_APPLE_UNI_N_KEYL, 0, pic_mem_index,
 390                dbdma_mem_index, cuda_mem_index, NULL, 3, ide_mem_index,
 391                escc_mem_index);
 392
 393     if (usb_enabled) {
 394         usb_ohci_init_pci(pci_bus, -1);
 395     }
 396
 397     /* U3 needs to use USB for input because Linux doesn't support via-cuda
 398        on PPC64 */
 399     if (machine_arch == ARCH_MAC99_U3) {
 400         usbdevice_create("keyboard");
 401         usbdevice_create("mouse");
 402     }
 403
 404     if (graphic_depth != 15 && graphic_depth != 32 && graphic_depth != 8)
 405         graphic_depth = 15;
 406
 407     /* The NewWorld NVRAM is not located in the MacIO device */
 408     nvr = macio_nvram_init(&nvram_mem_index, 0x2000, 1);
 409     pmac_format_nvram_partition(nvr, 0x2000);
 410     macio_nvram_map(nvr, 0xFFF04000);
 411     /* No PCI init: the BIOS will do it */
 412
 413     fw_cfg = fw_cfg_init(0, 0, CFG_ADDR, CFG_ADDR + 2);
 414     fw_cfg_add_i32(fw_cfg, FW_CFG_ID, 1);
 415     fw_cfg_add_i64(fw_cfg, FW_CFG_RAM_SIZE, (uint64_t)ram_size);
 416     fw_cfg_add_i16(fw_cfg, FW_CFG_MACHINE_ID, machine_arch);
 417     fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_ADDR, kernel_base);
 418     fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_SIZE, kernel_size);
 419     if (kernel_cmdline) {
 420         fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_CMDLINE, CMDLINE_ADDR);
 421         pstrcpy_targphys("cmdline", CMDLINE_ADDR, TARGET_PAGE_SIZE, kernel_cmdline);
 422     } else {
 423         fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_CMDLINE, 0);
 424     }
 425     fw_cfg_add_i32(fw_cfg, FW_CFG_INITRD_ADDR, initrd_base);
 426     fw_cfg_add_i32(fw_cfg, FW_CFG_INITRD_SIZE, initrd_size);
 427     fw_cfg_add_i16(fw_cfg, FW_CFG_BOOT_DEVICE, ppc_boot_device);
 428
 429     fw_cfg_add_i16(fw_cfg, FW_CFG_PPC_WIDTH, graphic_width);
 430     fw_cfg_add_i16(fw_cfg, FW_CFG_PPC_HEIGHT, graphic_height);
 431     fw_cfg_add_i16(fw_cfg, FW_CFG_PPC_DEPTH, graphic_depth);
 432
 433     if (kvm_enabled()) {
 434 #ifdef CONFIG_KVM
 435         fw_cfg_add_i32(fw_cfg, FW_CFG_PPC_TBFREQ, kvmppc_get_tbfreq());
 436 #endif
 437     } else {
 438         fw_cfg_add_i32(fw_cfg, FW_CFG_PPC_TBFREQ, get_ticks_per_sec());
 439     }
 440
 441     qemu_register_boot_set(fw_cfg_boot_set, fw_cfg);
 442 }
 443
 444 static QEMUMachine core99_machine = {
 445     .name = "mac99",
 446     .desc = "Mac99 based PowerMAC",
 447     .init = ppc_core99_init,
 448     .max_cpus = MAX_CPUS,
 449 #ifdef TARGET_PPC64
 450     .is_default = 1,
 451 #endif
 452 };
 453
 454 static void core99_machine_init(void)
 455 {
 456     qemu_register_machine(&core99_machine);
 457 }
 458
 459 machine_init(core99_machine_init);