2 * QEMU PowerPC e500-based platforms
4 * Copyright (C) 2009 Freescale Semiconductor, Inc. All rights reserved.
6 * Author: Yu Liu, <yu.liu@freescale.com>
8 * This file is derived from hw/ppc440_bamboo.c,
9 * the copyright for that material belongs to the original owners.
11 * This is free software; you can redistribute it and/or modify
12 * it under the terms of the GNU General Public License as published by
13 * the Free Software Foundation; either version 2 of the License, or
14 * (at your option) any later version.
18 #include "qemu-common.h"
22 #include "hw/serial.h"
24 #include "hw/boards.h"
28 #include "device_tree.h"
29 #include "hw/openpic.h"
31 #include "hw/loader.h"
33 #include "hw/sysbus.h"
34 #include "exec-memory.h"
35 #include "host-utils.h"
37 #define BINARY_DEVICE_TREE_FILE "mpc8544ds.dtb"
38 #define UIMAGE_LOAD_BASE 0
39 #define DTC_LOAD_PAD 0x1800000
40 #define DTC_PAD_MASK 0xFFFFF
41 #define INITRD_LOAD_PAD 0x2000000
42 #define INITRD_PAD_MASK 0xFFFFFF
44 #define RAM_SIZES_ALIGN (64UL << 20)
46 /* TODO: parameterize */
47 #define MPC8544_CCSRBAR_BASE 0xE0000000ULL
48 #define MPC8544_CCSRBAR_SIZE 0x00100000ULL
49 #define MPC8544_MPIC_REGS_BASE (MPC8544_CCSRBAR_BASE + 0x40000ULL)
50 #define MPC8544_SERIAL0_REGS_BASE (MPC8544_CCSRBAR_BASE + 0x4500ULL)
51 #define MPC8544_SERIAL1_REGS_BASE (MPC8544_CCSRBAR_BASE + 0x4600ULL)
52 #define MPC8544_PCI_REGS_BASE (MPC8544_CCSRBAR_BASE + 0x8000ULL)
53 #define MPC8544_PCI_REGS_SIZE 0x1000ULL
54 #define MPC8544_PCI_IO 0xE1000000ULL
55 #define MPC8544_UTIL_BASE (MPC8544_CCSRBAR_BASE + 0xe0000ULL)
56 #define MPC8544_SPIN_BASE 0xEF000000ULL
65 static void pci_map_create(void *fdt
, uint32_t *pci_map
, uint32_t mpic
)
68 const uint32_t tmp
[] = {
69 /* IDSEL 0x11 J17 Slot 1 */
70 0x8800, 0x0, 0x0, 0x1, mpic
, 0x2, 0x1,
71 0x8800, 0x0, 0x0, 0x2, mpic
, 0x3, 0x1,
72 0x8800, 0x0, 0x0, 0x3, mpic
, 0x4, 0x1,
73 0x8800, 0x0, 0x0, 0x4, mpic
, 0x1, 0x1,
75 /* IDSEL 0x12 J16 Slot 2 */
76 0x9000, 0x0, 0x0, 0x1, mpic
, 0x3, 0x1,
77 0x9000, 0x0, 0x0, 0x2, mpic
, 0x4, 0x1,
78 0x9000, 0x0, 0x0, 0x3, mpic
, 0x2, 0x1,
79 0x9000, 0x0, 0x0, 0x4, mpic
, 0x1, 0x1,
81 for (i
= 0; i
< (7 * 8); i
++) {
82 pci_map
[i
] = cpu_to_be32(tmp
[i
]);
86 static void dt_serial_create(void *fdt
, unsigned long long offset
,
87 const char *soc
, const char *mpic
,
88 const char *alias
, int idx
, bool defcon
)
92 snprintf(ser
, sizeof(ser
), "%s/serial@%llx", soc
, offset
);
93 qemu_devtree_add_subnode(fdt
, ser
);
94 qemu_devtree_setprop_string(fdt
, ser
, "device_type", "serial");
95 qemu_devtree_setprop_string(fdt
, ser
, "compatible", "ns16550");
96 qemu_devtree_setprop_cells(fdt
, ser
, "reg", offset
, 0x100);
97 qemu_devtree_setprop_cell(fdt
, ser
, "cell-index", idx
);
98 qemu_devtree_setprop_cell(fdt
, ser
, "clock-frequency", 0);
99 qemu_devtree_setprop_cells(fdt
, ser
, "interrupts", 42, 2);
100 qemu_devtree_setprop_phandle(fdt
, ser
, "interrupt-parent", mpic
);
101 qemu_devtree_setprop_string(fdt
, "/aliases", alias
, ser
);
104 qemu_devtree_setprop_string(fdt
, "/chosen", "linux,stdout-path", ser
);
108 static int ppce500_load_device_tree(CPUPPCState
*env
,
109 PPCE500Params
*params
,
115 uint64_t mem_reg_property
[] = { 0, cpu_to_be64(params
->ram_size
) };
118 uint8_t hypercall
[16];
119 uint32_t clock_freq
= 400000000;
120 uint32_t tb_freq
= 400000000;
122 const char *toplevel_compat
= NULL
; /* user override */
123 char compatible_sb
[] = "fsl,mpc8544-immr\0simple-bus";
129 uint32_t pci_map
[7 * 8];
130 uint32_t pci_ranges
[14] =
132 0x2000000, 0x0, 0xc0000000,
140 QemuOpts
*machine_opts
;
141 const char *dtb_file
= NULL
;
143 machine_opts
= qemu_opts_find(qemu_find_opts("machine"), 0);
145 dtb_file
= qemu_opt_get(machine_opts
, "dtb");
146 toplevel_compat
= qemu_opt_get(machine_opts
, "dt_compatible");
151 filename
= qemu_find_file(QEMU_FILE_TYPE_BIOS
, dtb_file
);
156 fdt
= load_device_tree(filename
, &fdt_size
);
163 fdt
= create_device_tree(&fdt_size
);
168 /* Manipulate device tree in memory. */
169 qemu_devtree_setprop_cell(fdt
, "/", "#address-cells", 2);
170 qemu_devtree_setprop_cell(fdt
, "/", "#size-cells", 2);
172 qemu_devtree_add_subnode(fdt
, "/memory");
173 qemu_devtree_setprop_string(fdt
, "/memory", "device_type", "memory");
174 qemu_devtree_setprop(fdt
, "/memory", "reg", mem_reg_property
,
175 sizeof(mem_reg_property
));
177 qemu_devtree_add_subnode(fdt
, "/chosen");
179 ret
= qemu_devtree_setprop_cell(fdt
, "/chosen", "linux,initrd-start",
182 fprintf(stderr
, "couldn't set /chosen/linux,initrd-start\n");
185 ret
= qemu_devtree_setprop_cell(fdt
, "/chosen", "linux,initrd-end",
186 (initrd_base
+ initrd_size
));
188 fprintf(stderr
, "couldn't set /chosen/linux,initrd-end\n");
192 ret
= qemu_devtree_setprop_string(fdt
, "/chosen", "bootargs",
193 params
->kernel_cmdline
);
195 fprintf(stderr
, "couldn't set /chosen/bootargs\n");
198 /* Read out host's frequencies */
199 clock_freq
= kvmppc_get_clockfreq();
200 tb_freq
= kvmppc_get_tbfreq();
202 /* indicate KVM hypercall interface */
203 qemu_devtree_add_subnode(fdt
, "/hypervisor");
204 qemu_devtree_setprop_string(fdt
, "/hypervisor", "compatible",
206 kvmppc_get_hypercall(env
, hypercall
, sizeof(hypercall
));
207 qemu_devtree_setprop(fdt
, "/hypervisor", "hcall-instructions",
208 hypercall
, sizeof(hypercall
));
211 /* Create CPU nodes */
212 qemu_devtree_add_subnode(fdt
, "/cpus");
213 qemu_devtree_setprop_cell(fdt
, "/cpus", "#address-cells", 1);
214 qemu_devtree_setprop_cell(fdt
, "/cpus", "#size-cells", 0);
216 /* We need to generate the cpu nodes in reverse order, so Linux can pick
217 the first node as boot node and be happy */
218 for (i
= smp_cpus
- 1; i
>= 0; i
--) {
220 uint64_t cpu_release_addr
= MPC8544_SPIN_BASE
+ (i
* 0x20);
222 for (env
= first_cpu
; env
!= NULL
; env
= env
->next_cpu
) {
223 if (env
->cpu_index
== i
) {
232 snprintf(cpu_name
, sizeof(cpu_name
), "/cpus/PowerPC,8544@%x", env
->cpu_index
);
233 qemu_devtree_add_subnode(fdt
, cpu_name
);
234 qemu_devtree_setprop_cell(fdt
, cpu_name
, "clock-frequency", clock_freq
);
235 qemu_devtree_setprop_cell(fdt
, cpu_name
, "timebase-frequency", tb_freq
);
236 qemu_devtree_setprop_string(fdt
, cpu_name
, "device_type", "cpu");
237 qemu_devtree_setprop_cell(fdt
, cpu_name
, "reg", env
->cpu_index
);
238 qemu_devtree_setprop_cell(fdt
, cpu_name
, "d-cache-line-size",
239 env
->dcache_line_size
);
240 qemu_devtree_setprop_cell(fdt
, cpu_name
, "i-cache-line-size",
241 env
->icache_line_size
);
242 qemu_devtree_setprop_cell(fdt
, cpu_name
, "d-cache-size", 0x8000);
243 qemu_devtree_setprop_cell(fdt
, cpu_name
, "i-cache-size", 0x8000);
244 qemu_devtree_setprop_cell(fdt
, cpu_name
, "bus-frequency", 0);
245 if (env
->cpu_index
) {
246 qemu_devtree_setprop_string(fdt
, cpu_name
, "status", "disabled");
247 qemu_devtree_setprop_string(fdt
, cpu_name
, "enable-method", "spin-table");
248 qemu_devtree_setprop_u64(fdt
, cpu_name
, "cpu-release-addr",
251 qemu_devtree_setprop_string(fdt
, cpu_name
, "status", "okay");
255 qemu_devtree_add_subnode(fdt
, "/aliases");
256 /* XXX These should go into their respective devices' code */
257 snprintf(soc
, sizeof(soc
), "/soc@%llx", MPC8544_CCSRBAR_BASE
);
258 qemu_devtree_add_subnode(fdt
, soc
);
259 qemu_devtree_setprop_string(fdt
, soc
, "device_type", "soc");
260 qemu_devtree_setprop(fdt
, soc
, "compatible", compatible_sb
,
261 sizeof(compatible_sb
));
262 qemu_devtree_setprop_cell(fdt
, soc
, "#address-cells", 1);
263 qemu_devtree_setprop_cell(fdt
, soc
, "#size-cells", 1);
264 qemu_devtree_setprop_cells(fdt
, soc
, "ranges", 0x0,
265 MPC8544_CCSRBAR_BASE
>> 32, MPC8544_CCSRBAR_BASE
,
266 MPC8544_CCSRBAR_SIZE
);
267 /* XXX should contain a reasonable value */
268 qemu_devtree_setprop_cell(fdt
, soc
, "bus-frequency", 0);
270 snprintf(mpic
, sizeof(mpic
), "%s/pic@%llx", soc
,
271 MPC8544_MPIC_REGS_BASE
- MPC8544_CCSRBAR_BASE
);
272 qemu_devtree_add_subnode(fdt
, mpic
);
273 qemu_devtree_setprop_string(fdt
, mpic
, "device_type", "open-pic");
274 qemu_devtree_setprop_string(fdt
, mpic
, "compatible", "chrp,open-pic");
275 qemu_devtree_setprop_cells(fdt
, mpic
, "reg", MPC8544_MPIC_REGS_BASE
-
276 MPC8544_CCSRBAR_BASE
, 0x40000);
277 qemu_devtree_setprop_cell(fdt
, mpic
, "#address-cells", 0);
278 qemu_devtree_setprop_cell(fdt
, mpic
, "#interrupt-cells", 2);
279 mpic_ph
= qemu_devtree_alloc_phandle(fdt
);
280 qemu_devtree_setprop_cell(fdt
, mpic
, "phandle", mpic_ph
);
281 qemu_devtree_setprop_cell(fdt
, mpic
, "linux,phandle", mpic_ph
);
282 qemu_devtree_setprop(fdt
, mpic
, "interrupt-controller", NULL
, 0);
285 * We have to generate ser1 first, because Linux takes the first
286 * device it finds in the dt as serial output device. And we generate
287 * devices in reverse order to the dt.
289 dt_serial_create(fdt
, MPC8544_SERIAL1_REGS_BASE
- MPC8544_CCSRBAR_BASE
,
290 soc
, mpic
, "serial1", 1, false);
291 dt_serial_create(fdt
, MPC8544_SERIAL0_REGS_BASE
- MPC8544_CCSRBAR_BASE
,
292 soc
, mpic
, "serial0", 0, true);
294 snprintf(gutil
, sizeof(gutil
), "%s/global-utilities@%llx", soc
,
295 MPC8544_UTIL_BASE
- MPC8544_CCSRBAR_BASE
);
296 qemu_devtree_add_subnode(fdt
, gutil
);
297 qemu_devtree_setprop_string(fdt
, gutil
, "compatible", "fsl,mpc8544-guts");
298 qemu_devtree_setprop_cells(fdt
, gutil
, "reg", MPC8544_UTIL_BASE
-
299 MPC8544_CCSRBAR_BASE
, 0x1000);
300 qemu_devtree_setprop(fdt
, gutil
, "fsl,has-rstcr", NULL
, 0);
302 snprintf(pci
, sizeof(pci
), "/pci@%llx", MPC8544_PCI_REGS_BASE
);
303 qemu_devtree_add_subnode(fdt
, pci
);
304 qemu_devtree_setprop_cell(fdt
, pci
, "cell-index", 0);
305 qemu_devtree_setprop_string(fdt
, pci
, "compatible", "fsl,mpc8540-pci");
306 qemu_devtree_setprop_string(fdt
, pci
, "device_type", "pci");
307 qemu_devtree_setprop_cells(fdt
, pci
, "interrupt-map-mask", 0xf800, 0x0,
309 pci_map_create(fdt
, pci_map
, qemu_devtree_get_phandle(fdt
, mpic
));
310 qemu_devtree_setprop(fdt
, pci
, "interrupt-map", pci_map
, sizeof(pci_map
));
311 qemu_devtree_setprop_phandle(fdt
, pci
, "interrupt-parent", mpic
);
312 qemu_devtree_setprop_cells(fdt
, pci
, "interrupts", 24, 2);
313 qemu_devtree_setprop_cells(fdt
, pci
, "bus-range", 0, 255);
314 for (i
= 0; i
< 14; i
++) {
315 pci_ranges
[i
] = cpu_to_be32(pci_ranges
[i
]);
317 qemu_devtree_setprop(fdt
, pci
, "ranges", pci_ranges
, sizeof(pci_ranges
));
318 qemu_devtree_setprop_cells(fdt
, pci
, "reg", MPC8544_PCI_REGS_BASE
>> 32,
319 MPC8544_PCI_REGS_BASE
, 0, 0x1000);
320 qemu_devtree_setprop_cell(fdt
, pci
, "clock-frequency", 66666666);
321 qemu_devtree_setprop_cell(fdt
, pci
, "#interrupt-cells", 1);
322 qemu_devtree_setprop_cell(fdt
, pci
, "#size-cells", 2);
323 qemu_devtree_setprop_cell(fdt
, pci
, "#address-cells", 3);
324 qemu_devtree_setprop_string(fdt
, "/aliases", "pci0", pci
);
326 params
->fixup_devtree(params
, fdt
);
328 if (toplevel_compat
) {
329 qemu_devtree_setprop(fdt
, "/", "compatible", toplevel_compat
,
330 strlen(toplevel_compat
) + 1);
334 qemu_devtree_dumpdtb(fdt
, fdt_size
);
335 ret
= rom_add_blob_fixed(BINARY_DEVICE_TREE_FILE
, fdt
, fdt_size
, addr
);
347 /* Create -kernel TLB entries for BookE. */
348 static inline hwaddr
booke206_page_size_to_tlb(uint64_t size
)
350 return 63 - clz64(size
>> 10);
353 static void mmubooke_create_initial_mapping(CPUPPCState
*env
)
355 struct boot_info
*bi
= env
->load_info
;
356 ppcmas_tlb_t
*tlb
= booke206_get_tlbm(env
, 1, 0, 0);
360 /* Our initial TLB entry needs to cover everything from 0 to
361 the device tree top */
362 dt_end
= bi
->dt_base
+ bi
->dt_size
;
363 ps
= booke206_page_size_to_tlb(dt_end
) + 1;
365 /* e500v2 can only do even TLB size bits */
368 size
= (ps
<< MAS1_TSIZE_SHIFT
);
369 tlb
->mas1
= MAS1_VALID
| size
;
372 tlb
->mas7_3
|= MAS3_UR
| MAS3_UW
| MAS3_UX
| MAS3_SR
| MAS3_SW
| MAS3_SX
;
374 env
->tlb_dirty
= true;
377 static void ppce500_cpu_reset_sec(void *opaque
)
379 PowerPCCPU
*cpu
= opaque
;
380 CPUPPCState
*env
= &cpu
->env
;
384 /* Secondary CPU starts in halted state for now. Needs to change when
385 implementing non-kernel boot. */
387 env
->exception_index
= EXCP_HLT
;
390 static void ppce500_cpu_reset(void *opaque
)
392 PowerPCCPU
*cpu
= opaque
;
393 CPUPPCState
*env
= &cpu
->env
;
394 struct boot_info
*bi
= env
->load_info
;
398 /* Set initial guest state. */
400 env
->gpr
[1] = (16<<20) - 8;
401 env
->gpr
[3] = bi
->dt_base
;
402 env
->nip
= bi
->entry
;
403 mmubooke_create_initial_mapping(env
);
406 void ppce500_init(PPCE500Params
*params
)
408 MemoryRegion
*address_space_mem
= get_system_memory();
409 MemoryRegion
*ram
= g_new(MemoryRegion
, 1);
411 CPUPPCState
*env
= NULL
;
413 uint64_t elf_lowaddr
;
415 hwaddr loadaddr
=UIMAGE_LOAD_BASE
;
416 target_long kernel_size
=0;
417 target_ulong dt_base
= 0;
418 target_ulong initrd_base
= 0;
419 target_long initrd_size
=0;
421 unsigned int pci_irq_nrs
[4] = {1, 2, 3, 4};
422 qemu_irq
**irqs
, *mpic
;
424 CPUPPCState
*firstenv
= NULL
;
427 if (params
->cpu_model
== NULL
) {
428 params
->cpu_model
= "e500v2_v30";
431 irqs
= g_malloc0(smp_cpus
* sizeof(qemu_irq
*));
432 irqs
[0] = g_malloc0(smp_cpus
* sizeof(qemu_irq
) * OPENPIC_OUTPUT_NB
);
433 for (i
= 0; i
< smp_cpus
; i
++) {
437 cpu
= cpu_ppc_init(params
->cpu_model
);
439 fprintf(stderr
, "Unable to initialize CPU!\n");
448 irqs
[i
] = irqs
[0] + (i
* OPENPIC_OUTPUT_NB
);
449 input
= (qemu_irq
*)env
->irq_inputs
;
450 irqs
[i
][OPENPIC_OUTPUT_INT
] = input
[PPCE500_INPUT_INT
];
451 irqs
[i
][OPENPIC_OUTPUT_CINT
] = input
[PPCE500_INPUT_CINT
];
452 env
->spr
[SPR_BOOKE_PIR
] = env
->cpu_index
= i
;
453 env
->mpic_cpu_base
= MPC8544_MPIC_REGS_BASE
+ 0x20000;
455 ppc_booke_timers_init(env
, 400000000, PPC_TIMER_E500
);
457 /* Register reset handler */
460 struct boot_info
*boot_info
;
461 boot_info
= g_malloc0(sizeof(struct boot_info
));
462 qemu_register_reset(ppce500_cpu_reset
, cpu
);
463 env
->load_info
= boot_info
;
466 qemu_register_reset(ppce500_cpu_reset_sec
, cpu
);
472 /* Fixup Memory size on a alignment boundary */
473 ram_size
&= ~(RAM_SIZES_ALIGN
- 1);
475 /* Register Memory */
476 memory_region_init_ram(ram
, "mpc8544ds.ram", ram_size
);
477 vmstate_register_ram_global(ram
);
478 memory_region_add_subregion(address_space_mem
, 0, ram
);
481 mpic
= mpic_init(address_space_mem
, MPC8544_MPIC_REGS_BASE
,
482 smp_cpus
, irqs
, NULL
);
485 cpu_abort(env
, "MPIC failed to initialize\n");
490 serial_mm_init(address_space_mem
, MPC8544_SERIAL0_REGS_BASE
,
491 0, mpic
[12+26], 399193,
492 serial_hds
[0], DEVICE_BIG_ENDIAN
);
496 serial_mm_init(address_space_mem
, MPC8544_SERIAL1_REGS_BASE
,
497 0, mpic
[12+26], 399193,
498 serial_hds
[1], DEVICE_BIG_ENDIAN
);
501 /* General Utility device */
502 sysbus_create_simple("mpc8544-guts", MPC8544_UTIL_BASE
, NULL
);
505 dev
= sysbus_create_varargs("e500-pcihost", MPC8544_PCI_REGS_BASE
,
506 mpic
[pci_irq_nrs
[0]], mpic
[pci_irq_nrs
[1]],
507 mpic
[pci_irq_nrs
[2]], mpic
[pci_irq_nrs
[3]],
509 pci_bus
= (PCIBus
*)qdev_get_child_bus(dev
, "pci.0");
511 printf("couldn't create PCI controller!\n");
513 sysbus_mmio_map(sysbus_from_qdev(dev
), 1, MPC8544_PCI_IO
);
516 /* Register network interfaces. */
517 for (i
= 0; i
< nb_nics
; i
++) {
518 pci_nic_init_nofail(&nd_table
[i
], "virtio", NULL
);
522 /* Register spinning region */
523 sysbus_create_simple("e500-spin", MPC8544_SPIN_BASE
, NULL
);
526 if (params
->kernel_filename
) {
527 kernel_size
= load_uimage(params
->kernel_filename
, &entry
,
529 if (kernel_size
< 0) {
530 kernel_size
= load_elf(params
->kernel_filename
, NULL
, NULL
,
531 &elf_entry
, &elf_lowaddr
, NULL
, 1,
534 loadaddr
= elf_lowaddr
;
536 /* XXX try again as binary */
537 if (kernel_size
< 0) {
538 fprintf(stderr
, "qemu: could not load kernel '%s'\n",
539 params
->kernel_filename
);
545 if (params
->initrd_filename
) {
546 initrd_base
= (loadaddr
+ kernel_size
+ INITRD_LOAD_PAD
) &
548 initrd_size
= load_image_targphys(params
->initrd_filename
, initrd_base
,
549 ram_size
- initrd_base
);
551 if (initrd_size
< 0) {
552 fprintf(stderr
, "qemu: could not load initial ram disk '%s'\n",
553 params
->initrd_filename
);
558 /* If we're loading a kernel directly, we must load the device tree too. */
559 if (params
->kernel_filename
) {
560 struct boot_info
*boot_info
;
563 dt_base
= (loadaddr
+ kernel_size
+ DTC_LOAD_PAD
) & ~DTC_PAD_MASK
;
564 dt_size
= ppce500_load_device_tree(env
, params
, dt_base
, initrd_base
,
567 fprintf(stderr
, "couldn't load device tree\n");
571 boot_info
= env
->load_info
;
572 boot_info
->entry
= entry
;
573 boot_info
->dt_base
= dt_base
;
574 boot_info
->dt_size
= dt_size
;