118f6290aSShashi Mallela /* 218f6290aSShashi Mallela * ITS emulation for a GICv3-based system 318f6290aSShashi Mallela * 418f6290aSShashi Mallela * Copyright Linaro.org 2021 518f6290aSShashi Mallela * 618f6290aSShashi Mallela * Authors: 718f6290aSShashi Mallela * Shashi Mallela <shashi.mallela@linaro.org> 818f6290aSShashi Mallela * 918f6290aSShashi Mallela * This work is licensed under the terms of the GNU GPL, version 2 or (at your 1018f6290aSShashi Mallela * option) any later version. See the COPYING file in the top-level directory. 1118f6290aSShashi Mallela * 1218f6290aSShashi Mallela */ 1318f6290aSShashi Mallela 1418f6290aSShashi Mallela #include "qemu/osdep.h" 1518f6290aSShashi Mallela #include "qemu/log.h" 16195209d3SPeter Maydell #include "trace.h" 1718f6290aSShashi Mallela #include "hw/qdev-properties.h" 1818f6290aSShashi Mallela #include "hw/intc/arm_gicv3_its_common.h" 1918f6290aSShashi Mallela #include "gicv3_internal.h" 2018f6290aSShashi Mallela #include "qom/object.h" 2118f6290aSShashi Mallela #include "qapi/error.h" 2218f6290aSShashi Mallela 2318f6290aSShashi Mallela typedef struct GICv3ITSClass GICv3ITSClass; 2418f6290aSShashi Mallela /* This is reusing the GICv3ITSState typedef from ARM_GICV3_ITS_COMMON */ 2518f6290aSShashi Mallela DECLARE_OBJ_CHECKERS(GICv3ITSState, GICv3ITSClass, 2618f6290aSShashi Mallela ARM_GICV3_ITS, TYPE_ARM_GICV3_ITS) 2718f6290aSShashi Mallela 2818f6290aSShashi Mallela struct GICv3ITSClass { 2918f6290aSShashi Mallela GICv3ITSCommonClass parent_class; 3018f6290aSShashi Mallela void (*parent_reset)(DeviceState *dev); 3118f6290aSShashi Mallela }; 3218f6290aSShashi Mallela 33c694cb4cSShashi Mallela /* 34c694cb4cSShashi Mallela * This is an internal enum used to distinguish between LPI triggered 35c694cb4cSShashi Mallela * via command queue and LPI triggered via gits_translater write. 36c694cb4cSShashi Mallela */ 37c694cb4cSShashi Mallela typedef enum ItsCmdType { 38c694cb4cSShashi Mallela NONE = 0, /* internal indication for GITS_TRANSLATER write */ 39c694cb4cSShashi Mallela CLEAR = 1, 40c694cb4cSShashi Mallela DISCARD = 2, 41c694cb4cSShashi Mallela INTERRUPT = 3, 42c694cb4cSShashi Mallela } ItsCmdType; 43c694cb4cSShashi Mallela 44c694cb4cSShashi Mallela typedef struct { 45c694cb4cSShashi Mallela uint32_t iteh; 46c694cb4cSShashi Mallela uint64_t itel; 47c694cb4cSShashi Mallela } IteEntry; 48c694cb4cSShashi Mallela 494acf93e1SPeter Maydell typedef struct DTEntry { 504acf93e1SPeter Maydell bool valid; 514acf93e1SPeter Maydell unsigned size; 524acf93e1SPeter Maydell uint64_t ittaddr; 534acf93e1SPeter Maydell } DTEntry; 544acf93e1SPeter Maydell 55ef011555SPeter Maydell /* 56ef011555SPeter Maydell * The ITS spec permits a range of CONSTRAINED UNPREDICTABLE options 57ef011555SPeter Maydell * if a command parameter is not correct. These include both "stall 58ef011555SPeter Maydell * processing of the command queue" and "ignore this command, and 59ef011555SPeter Maydell * keep processing the queue". In our implementation we choose that 60ef011555SPeter Maydell * memory transaction errors reading the command packet provoke a 61ef011555SPeter Maydell * stall, but errors in parameters cause us to ignore the command 62ef011555SPeter Maydell * and continue processing. 63ef011555SPeter Maydell * The process_* functions which handle individual ITS commands all 64ef011555SPeter Maydell * return an ItsCmdResult which tells process_cmdq() whether it should 65ef011555SPeter Maydell * stall or keep going. 66ef011555SPeter Maydell */ 67ef011555SPeter Maydell typedef enum ItsCmdResult { 68ef011555SPeter Maydell CMD_STALL = 0, 69ef011555SPeter Maydell CMD_CONTINUE = 1, 70ef011555SPeter Maydell } ItsCmdResult; 71ef011555SPeter Maydell 721b08e436SShashi Mallela static uint64_t baser_base_addr(uint64_t value, uint32_t page_sz) 731b08e436SShashi Mallela { 741b08e436SShashi Mallela uint64_t result = 0; 751b08e436SShashi Mallela 761b08e436SShashi Mallela switch (page_sz) { 771b08e436SShashi Mallela case GITS_PAGE_SIZE_4K: 781b08e436SShashi Mallela case GITS_PAGE_SIZE_16K: 791b08e436SShashi Mallela result = FIELD_EX64(value, GITS_BASER, PHYADDR) << 12; 801b08e436SShashi Mallela break; 811b08e436SShashi Mallela 821b08e436SShashi Mallela case GITS_PAGE_SIZE_64K: 831b08e436SShashi Mallela result = FIELD_EX64(value, GITS_BASER, PHYADDRL_64K) << 16; 841b08e436SShashi Mallela result |= FIELD_EX64(value, GITS_BASER, PHYADDRH_64K) << 48; 851b08e436SShashi Mallela break; 861b08e436SShashi Mallela 871b08e436SShashi Mallela default: 881b08e436SShashi Mallela break; 891b08e436SShashi Mallela } 901b08e436SShashi Mallela return result; 911b08e436SShashi Mallela } 921b08e436SShashi Mallela 93d050f80fSPeter Maydell static uint64_t table_entry_addr(GICv3ITSState *s, TableDesc *td, 94d050f80fSPeter Maydell uint32_t idx, MemTxResult *res) 95d050f80fSPeter Maydell { 96d050f80fSPeter Maydell /* 97d050f80fSPeter Maydell * Given a TableDesc describing one of the ITS in-guest-memory 98d050f80fSPeter Maydell * tables and an index into it, return the guest address 99d050f80fSPeter Maydell * corresponding to that table entry. 100d050f80fSPeter Maydell * If there was a memory error reading the L1 table of an 101d050f80fSPeter Maydell * indirect table, *res is set accordingly, and we return -1. 102d050f80fSPeter Maydell * If the L1 table entry is marked not valid, we return -1 with 103d050f80fSPeter Maydell * *res set to MEMTX_OK. 104d050f80fSPeter Maydell * 105d050f80fSPeter Maydell * The specification defines the format of level 1 entries of a 106d050f80fSPeter Maydell * 2-level table, but the format of level 2 entries and the format 107d050f80fSPeter Maydell * of flat-mapped tables is IMPDEF. 108d050f80fSPeter Maydell */ 109d050f80fSPeter Maydell AddressSpace *as = &s->gicv3->dma_as; 110d050f80fSPeter Maydell uint32_t l2idx; 111d050f80fSPeter Maydell uint64_t l2; 112d050f80fSPeter Maydell uint32_t num_l2_entries; 113d050f80fSPeter Maydell 114d050f80fSPeter Maydell *res = MEMTX_OK; 115d050f80fSPeter Maydell 116d050f80fSPeter Maydell if (!td->indirect) { 117d050f80fSPeter Maydell /* Single level table */ 118d050f80fSPeter Maydell return td->base_addr + idx * td->entry_sz; 119d050f80fSPeter Maydell } 120d050f80fSPeter Maydell 121d050f80fSPeter Maydell /* Two level table */ 122d050f80fSPeter Maydell l2idx = idx / (td->page_sz / L1TABLE_ENTRY_SIZE); 123d050f80fSPeter Maydell 124d050f80fSPeter Maydell l2 = address_space_ldq_le(as, 125d050f80fSPeter Maydell td->base_addr + (l2idx * L1TABLE_ENTRY_SIZE), 126d050f80fSPeter Maydell MEMTXATTRS_UNSPECIFIED, res); 127d050f80fSPeter Maydell if (*res != MEMTX_OK) { 128d050f80fSPeter Maydell return -1; 129d050f80fSPeter Maydell } 130d050f80fSPeter Maydell if (!(l2 & L2_TABLE_VALID_MASK)) { 131d050f80fSPeter Maydell return -1; 132d050f80fSPeter Maydell } 133d050f80fSPeter Maydell 134d050f80fSPeter Maydell num_l2_entries = td->page_sz / td->entry_sz; 135d050f80fSPeter Maydell return (l2 & ((1ULL << 51) - 1)) + (idx % num_l2_entries) * td->entry_sz; 136d050f80fSPeter Maydell } 137d050f80fSPeter Maydell 138c694cb4cSShashi Mallela static bool get_cte(GICv3ITSState *s, uint16_t icid, uint64_t *cte, 139c694cb4cSShashi Mallela MemTxResult *res) 140c694cb4cSShashi Mallela { 141c694cb4cSShashi Mallela AddressSpace *as = &s->gicv3->dma_as; 142d050f80fSPeter Maydell uint64_t entry_addr = table_entry_addr(s, &s->ct, icid, res); 143c694cb4cSShashi Mallela 144d050f80fSPeter Maydell if (entry_addr == -1) { 145d050f80fSPeter Maydell return false; /* not valid */ 146c694cb4cSShashi Mallela } 147c694cb4cSShashi Mallela 148d050f80fSPeter Maydell *cte = address_space_ldq_le(as, entry_addr, MEMTXATTRS_UNSPECIFIED, res); 149437dc0eaSPeter Maydell return FIELD_EX64(*cte, CTE, VALID); 150c694cb4cSShashi Mallela } 151c694cb4cSShashi Mallela 1524acf93e1SPeter Maydell static bool update_ite(GICv3ITSState *s, uint32_t eventid, const DTEntry *dte, 153c694cb4cSShashi Mallela IteEntry ite) 154c694cb4cSShashi Mallela { 155c694cb4cSShashi Mallela AddressSpace *as = &s->gicv3->dma_as; 156c694cb4cSShashi Mallela MemTxResult res = MEMTX_OK; 157c694cb4cSShashi Mallela 1584acf93e1SPeter Maydell address_space_stq_le(as, dte->ittaddr + (eventid * (sizeof(uint64_t) + 159c694cb4cSShashi Mallela sizeof(uint32_t))), ite.itel, MEMTXATTRS_UNSPECIFIED, 160c694cb4cSShashi Mallela &res); 161c694cb4cSShashi Mallela 162c694cb4cSShashi Mallela if (res == MEMTX_OK) { 1634acf93e1SPeter Maydell address_space_stl_le(as, dte->ittaddr + (eventid * (sizeof(uint64_t) + 164c694cb4cSShashi Mallela sizeof(uint32_t))) + sizeof(uint32_t), ite.iteh, 165c694cb4cSShashi Mallela MEMTXATTRS_UNSPECIFIED, &res); 166c694cb4cSShashi Mallela } 167c694cb4cSShashi Mallela if (res != MEMTX_OK) { 168c694cb4cSShashi Mallela return false; 169c694cb4cSShashi Mallela } else { 170c694cb4cSShashi Mallela return true; 171c694cb4cSShashi Mallela } 172c694cb4cSShashi Mallela } 173c694cb4cSShashi Mallela 1744acf93e1SPeter Maydell static bool get_ite(GICv3ITSState *s, uint32_t eventid, const DTEntry *dte, 175c694cb4cSShashi Mallela uint16_t *icid, uint32_t *pIntid, MemTxResult *res) 176c694cb4cSShashi Mallela { 177c694cb4cSShashi Mallela AddressSpace *as = &s->gicv3->dma_as; 178c694cb4cSShashi Mallela bool status = false; 179c694cb4cSShashi Mallela IteEntry ite = {}; 180c694cb4cSShashi Mallela 1814acf93e1SPeter Maydell ite.itel = address_space_ldq_le(as, dte->ittaddr + 182c694cb4cSShashi Mallela (eventid * (sizeof(uint64_t) + 183c694cb4cSShashi Mallela sizeof(uint32_t))), MEMTXATTRS_UNSPECIFIED, 184c694cb4cSShashi Mallela res); 185c694cb4cSShashi Mallela 186c694cb4cSShashi Mallela if (*res == MEMTX_OK) { 1874acf93e1SPeter Maydell ite.iteh = address_space_ldl_le(as, dte->ittaddr + 188c694cb4cSShashi Mallela (eventid * (sizeof(uint64_t) + 189c694cb4cSShashi Mallela sizeof(uint32_t))) + sizeof(uint32_t), 190c694cb4cSShashi Mallela MEMTXATTRS_UNSPECIFIED, res); 191c694cb4cSShashi Mallela 192c694cb4cSShashi Mallela if (*res == MEMTX_OK) { 193764d6ba1SPeter Maydell if (FIELD_EX64(ite.itel, ITE_L, VALID)) { 194764d6ba1SPeter Maydell int inttype = FIELD_EX64(ite.itel, ITE_L, INTTYPE); 195764d6ba1SPeter Maydell if (inttype == ITE_INTTYPE_PHYSICAL) { 196764d6ba1SPeter Maydell *pIntid = FIELD_EX64(ite.itel, ITE_L, INTID); 197764d6ba1SPeter Maydell *icid = FIELD_EX32(ite.iteh, ITE_H, ICID); 198c694cb4cSShashi Mallela status = true; 199c694cb4cSShashi Mallela } 200c694cb4cSShashi Mallela } 201c694cb4cSShashi Mallela } 202c694cb4cSShashi Mallela } 203c694cb4cSShashi Mallela return status; 204c694cb4cSShashi Mallela } 205c694cb4cSShashi Mallela 2064acf93e1SPeter Maydell /* 2074acf93e1SPeter Maydell * Read the Device Table entry at index @devid. On success (including 2084acf93e1SPeter Maydell * successfully determining that there is no valid DTE for this index), 2094acf93e1SPeter Maydell * we return MEMTX_OK and populate the DTEntry struct accordingly. 2104acf93e1SPeter Maydell * If there is an error reading memory then we return the error code. 2114acf93e1SPeter Maydell */ 2124acf93e1SPeter Maydell static MemTxResult get_dte(GICv3ITSState *s, uint32_t devid, DTEntry *dte) 213c694cb4cSShashi Mallela { 2144acf93e1SPeter Maydell MemTxResult res = MEMTX_OK; 215c694cb4cSShashi Mallela AddressSpace *as = &s->gicv3->dma_as; 2164acf93e1SPeter Maydell uint64_t entry_addr = table_entry_addr(s, &s->dt, devid, &res); 2174acf93e1SPeter Maydell uint64_t dteval; 218c694cb4cSShashi Mallela 219d050f80fSPeter Maydell if (entry_addr == -1) { 2204acf93e1SPeter Maydell /* No L2 table entry, i.e. no valid DTE, or a memory error */ 2214acf93e1SPeter Maydell dte->valid = false; 2224acf93e1SPeter Maydell return res; 223c694cb4cSShashi Mallela } 2244acf93e1SPeter Maydell dteval = address_space_ldq_le(as, entry_addr, MEMTXATTRS_UNSPECIFIED, &res); 2254acf93e1SPeter Maydell if (res != MEMTX_OK) { 2264acf93e1SPeter Maydell return res; 2274acf93e1SPeter Maydell } 2284acf93e1SPeter Maydell dte->valid = FIELD_EX64(dteval, DTE, VALID); 2294acf93e1SPeter Maydell dte->size = FIELD_EX64(dteval, DTE, SIZE); 2304acf93e1SPeter Maydell /* DTE word field stores bits [51:8] of the ITT address */ 2314acf93e1SPeter Maydell dte->ittaddr = FIELD_EX64(dteval, DTE, ITTADDR) << ITTADDR_SHIFT; 2324acf93e1SPeter Maydell return MEMTX_OK; 233c694cb4cSShashi Mallela } 234c694cb4cSShashi Mallela 235c694cb4cSShashi Mallela /* 236c694cb4cSShashi Mallela * This function handles the processing of following commands based on 237c694cb4cSShashi Mallela * the ItsCmdType parameter passed:- 238c694cb4cSShashi Mallela * 1. triggering of lpi interrupt translation via ITS INT command 239c694cb4cSShashi Mallela * 2. triggering of lpi interrupt translation via gits_translater register 240c694cb4cSShashi Mallela * 3. handling of ITS CLEAR command 241c694cb4cSShashi Mallela * 4. handling of ITS DISCARD command 242c694cb4cSShashi Mallela */ 243b6f96009SPeter Maydell static ItsCmdResult do_process_its_cmd(GICv3ITSState *s, uint32_t devid, 244b6f96009SPeter Maydell uint32_t eventid, ItsCmdType cmd) 245c694cb4cSShashi Mallela { 246c694cb4cSShashi Mallela MemTxResult res = MEMTX_OK; 2478f809f69SPeter Maydell uint64_t num_eventids; 248c694cb4cSShashi Mallela uint16_t icid = 0; 249c694cb4cSShashi Mallela uint32_t pIntid = 0; 250c694cb4cSShashi Mallela bool ite_valid = false; 251c694cb4cSShashi Mallela uint64_t cte = 0; 252c694cb4cSShashi Mallela bool cte_valid = false; 25317fb5e36SShashi Mallela uint64_t rdbase; 2544acf93e1SPeter Maydell DTEntry dte; 255c694cb4cSShashi Mallela 2568b8bb014SPeter Maydell if (devid >= s->dt.num_entries) { 257b13148d9SPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 258b13148d9SPeter Maydell "%s: invalid command attributes: devid %d>=%d", 2598b8bb014SPeter Maydell __func__, devid, s->dt.num_entries); 260b13148d9SPeter Maydell return CMD_CONTINUE; 261b13148d9SPeter Maydell } 262b13148d9SPeter Maydell 2634acf93e1SPeter Maydell if (get_dte(s, devid, &dte) != MEMTX_OK) { 264593a7cc2SPeter Maydell return CMD_STALL; 265c694cb4cSShashi Mallela } 2664acf93e1SPeter Maydell if (!dte.valid) { 267229c57b1SAlex Bennée qemu_log_mask(LOG_GUEST_ERROR, 268229c57b1SAlex Bennée "%s: invalid command attributes: " 2694acf93e1SPeter Maydell "invalid dte for %d\n", __func__, devid); 270593a7cc2SPeter Maydell return CMD_CONTINUE; 271c694cb4cSShashi Mallela } 272c694cb4cSShashi Mallela 2734acf93e1SPeter Maydell num_eventids = 1ULL << (dte.size + 1); 274b13148d9SPeter Maydell if (eventid >= num_eventids) { 275b13148d9SPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 276b13148d9SPeter Maydell "%s: invalid command attributes: eventid %d >= %" 277b13148d9SPeter Maydell PRId64 "\n", 278b13148d9SPeter Maydell __func__, eventid, num_eventids); 279b13148d9SPeter Maydell return CMD_CONTINUE; 280b13148d9SPeter Maydell } 281b13148d9SPeter Maydell 2824acf93e1SPeter Maydell ite_valid = get_ite(s, eventid, &dte, &icid, &pIntid, &res); 283be0ed8fbSPeter Maydell if (res != MEMTX_OK) { 284be0ed8fbSPeter Maydell return CMD_STALL; 285be0ed8fbSPeter Maydell } 286be0ed8fbSPeter Maydell 287be0ed8fbSPeter Maydell if (!ite_valid) { 288be0ed8fbSPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 289be0ed8fbSPeter Maydell "%s: invalid command attributes: invalid ITE\n", 290be0ed8fbSPeter Maydell __func__); 291be0ed8fbSPeter Maydell return CMD_CONTINUE; 292be0ed8fbSPeter Maydell } 293be0ed8fbSPeter Maydell 2948b8bb014SPeter Maydell if (icid >= s->ct.num_entries) { 29558b88779SPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 29658b88779SPeter Maydell "%s: invalid ICID 0x%x in ITE (table corrupted?)\n", 29758b88779SPeter Maydell __func__, icid); 29858b88779SPeter Maydell return CMD_CONTINUE; 29958b88779SPeter Maydell } 30058b88779SPeter Maydell 301be0ed8fbSPeter Maydell cte_valid = get_cte(s, icid, &cte, &res); 302be0ed8fbSPeter Maydell if (res != MEMTX_OK) { 303be0ed8fbSPeter Maydell return CMD_STALL; 304be0ed8fbSPeter Maydell } 305be0ed8fbSPeter Maydell if (!cte_valid) { 306be0ed8fbSPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 307be0ed8fbSPeter Maydell "%s: invalid command attributes: " 308be0ed8fbSPeter Maydell "invalid cte: %"PRIx64"\n", 309be0ed8fbSPeter Maydell __func__, cte); 310be0ed8fbSPeter Maydell return CMD_CONTINUE; 311be0ed8fbSPeter Maydell } 312be0ed8fbSPeter Maydell 313c694cb4cSShashi Mallela /* 314c694cb4cSShashi Mallela * Current implementation only supports rdbase == procnum 315c694cb4cSShashi Mallela * Hence rdbase physical address is ignored 316c694cb4cSShashi Mallela */ 317437dc0eaSPeter Maydell rdbase = FIELD_EX64(cte, CTE, RDBASE); 31817fb5e36SShashi Mallela 319a120157bSPeter Maydell if (rdbase >= s->gicv3->num_cpu) { 320593a7cc2SPeter Maydell return CMD_CONTINUE; 32117fb5e36SShashi Mallela } 32217fb5e36SShashi Mallela 32317fb5e36SShashi Mallela if ((cmd == CLEAR) || (cmd == DISCARD)) { 32417fb5e36SShashi Mallela gicv3_redist_process_lpi(&s->gicv3->cpu[rdbase], pIntid, 0); 32517fb5e36SShashi Mallela } else { 32617fb5e36SShashi Mallela gicv3_redist_process_lpi(&s->gicv3->cpu[rdbase], pIntid, 1); 32717fb5e36SShashi Mallela } 32817fb5e36SShashi Mallela 329c694cb4cSShashi Mallela if (cmd == DISCARD) { 330c694cb4cSShashi Mallela IteEntry ite = {}; 331c694cb4cSShashi Mallela /* remove mapping from interrupt translation table */ 3324acf93e1SPeter Maydell return update_ite(s, eventid, &dte, ite) ? CMD_CONTINUE : CMD_STALL; 333c694cb4cSShashi Mallela } 334593a7cc2SPeter Maydell return CMD_CONTINUE; 335c694cb4cSShashi Mallela } 336b6f96009SPeter Maydell static ItsCmdResult process_its_cmd(GICv3ITSState *s, const uint64_t *cmdpkt, 337b6f96009SPeter Maydell ItsCmdType cmd) 338c694cb4cSShashi Mallela { 339b6f96009SPeter Maydell uint32_t devid, eventid; 340b6f96009SPeter Maydell 341b6f96009SPeter Maydell devid = (cmdpkt[0] & DEVID_MASK) >> DEVID_SHIFT; 342b6f96009SPeter Maydell eventid = cmdpkt[1] & EVENTID_MASK; 343b6f96009SPeter Maydell return do_process_its_cmd(s, devid, eventid, cmd); 344b6f96009SPeter Maydell } 345b6f96009SPeter Maydell 346b6f96009SPeter Maydell static ItsCmdResult process_mapti(GICv3ITSState *s, const uint64_t *cmdpkt, 347b6f96009SPeter Maydell bool ignore_pInt) 348b6f96009SPeter Maydell { 349c694cb4cSShashi Mallela uint32_t devid, eventid; 350c694cb4cSShashi Mallela uint32_t pIntid = 0; 3518f809f69SPeter Maydell uint64_t num_eventids; 352905720f1SPeter Maydell uint32_t num_intids; 353c694cb4cSShashi Mallela uint16_t icid = 0; 3540241f731SPeter Maydell IteEntry ite = {}; 3554acf93e1SPeter Maydell DTEntry dte; 356c694cb4cSShashi Mallela 357b6f96009SPeter Maydell devid = (cmdpkt[0] & DEVID_MASK) >> DEVID_SHIFT; 358b6f96009SPeter Maydell eventid = cmdpkt[1] & EVENTID_MASK; 359c694cb4cSShashi Mallela 360b87fab1cSPeter Maydell if (ignore_pInt) { 361b87fab1cSPeter Maydell pIntid = eventid; 362b87fab1cSPeter Maydell } else { 363b6f96009SPeter Maydell pIntid = (cmdpkt[1] & pINTID_MASK) >> pINTID_SHIFT; 364c694cb4cSShashi Mallela } 365c694cb4cSShashi Mallela 366b6f96009SPeter Maydell icid = cmdpkt[2] & ICID_MASK; 367c694cb4cSShashi Mallela 3688b8bb014SPeter Maydell if (devid >= s->dt.num_entries) { 369b13148d9SPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 370b13148d9SPeter Maydell "%s: invalid command attributes: devid %d>=%d", 3718b8bb014SPeter Maydell __func__, devid, s->dt.num_entries); 372b13148d9SPeter Maydell return CMD_CONTINUE; 373b13148d9SPeter Maydell } 374b13148d9SPeter Maydell 3754acf93e1SPeter Maydell if (get_dte(s, devid, &dte) != MEMTX_OK) { 3760241f731SPeter Maydell return CMD_STALL; 377c694cb4cSShashi Mallela } 3784acf93e1SPeter Maydell num_eventids = 1ULL << (dte.size + 1); 379905720f1SPeter Maydell num_intids = 1ULL << (GICD_TYPER_IDBITS + 1); 380c694cb4cSShashi Mallela 3818b8bb014SPeter Maydell if ((icid >= s->ct.num_entries) 3824acf93e1SPeter Maydell || !dte.valid || (eventid >= num_eventids) || 383905720f1SPeter Maydell (((pIntid < GICV3_LPI_INTID_START) || (pIntid >= num_intids)) && 384b87fab1cSPeter Maydell (pIntid != INTID_SPURIOUS))) { 385c694cb4cSShashi Mallela qemu_log_mask(LOG_GUEST_ERROR, 386c694cb4cSShashi Mallela "%s: invalid command attributes " 387b13148d9SPeter Maydell "icid %d or eventid %d or pIntid %d or" 388b13148d9SPeter Maydell "unmapped dte %d\n", __func__, icid, eventid, 3894acf93e1SPeter Maydell pIntid, dte.valid); 390c694cb4cSShashi Mallela /* 391c694cb4cSShashi Mallela * in this implementation, in case of error 392c694cb4cSShashi Mallela * we ignore this command and move onto the next 393c694cb4cSShashi Mallela * command in the queue 394c694cb4cSShashi Mallela */ 3950241f731SPeter Maydell return CMD_CONTINUE; 3960241f731SPeter Maydell } 3970241f731SPeter Maydell 398c694cb4cSShashi Mallela /* add ite entry to interrupt translation table */ 3994acf93e1SPeter Maydell ite.itel = FIELD_DP64(ite.itel, ITE_L, VALID, true); 400764d6ba1SPeter Maydell ite.itel = FIELD_DP64(ite.itel, ITE_L, INTTYPE, ITE_INTTYPE_PHYSICAL); 401764d6ba1SPeter Maydell ite.itel = FIELD_DP64(ite.itel, ITE_L, INTID, pIntid); 402764d6ba1SPeter Maydell ite.itel = FIELD_DP64(ite.itel, ITE_L, DOORBELL, INTID_SPURIOUS); 403764d6ba1SPeter Maydell ite.iteh = FIELD_DP32(ite.iteh, ITE_H, ICID, icid); 404c694cb4cSShashi Mallela 4054acf93e1SPeter Maydell return update_ite(s, eventid, &dte, ite) ? CMD_CONTINUE : CMD_STALL; 406c694cb4cSShashi Mallela } 407c694cb4cSShashi Mallela 4087eca39e0SShashi Mallela static bool update_cte(GICv3ITSState *s, uint16_t icid, bool valid, 4097eca39e0SShashi Mallela uint64_t rdbase) 4107eca39e0SShashi Mallela { 4117eca39e0SShashi Mallela AddressSpace *as = &s->gicv3->dma_as; 412d050f80fSPeter Maydell uint64_t entry_addr; 4137eca39e0SShashi Mallela uint64_t cte = 0; 4147eca39e0SShashi Mallela MemTxResult res = MEMTX_OK; 4157eca39e0SShashi Mallela 4167eca39e0SShashi Mallela if (!s->ct.valid) { 4177eca39e0SShashi Mallela return true; 4187eca39e0SShashi Mallela } 4197eca39e0SShashi Mallela 4207eca39e0SShashi Mallela if (valid) { 4217eca39e0SShashi Mallela /* add mapping entry to collection table */ 422437dc0eaSPeter Maydell cte = FIELD_DP64(cte, CTE, VALID, 1); 423437dc0eaSPeter Maydell cte = FIELD_DP64(cte, CTE, RDBASE, rdbase); 4247eca39e0SShashi Mallela } 4257eca39e0SShashi Mallela 426d050f80fSPeter Maydell entry_addr = table_entry_addr(s, &s->ct, icid, &res); 4277eca39e0SShashi Mallela if (res != MEMTX_OK) { 428d050f80fSPeter Maydell /* memory access error: stall */ 4297eca39e0SShashi Mallela return false; 4307eca39e0SShashi Mallela } 431d050f80fSPeter Maydell if (entry_addr == -1) { 432d050f80fSPeter Maydell /* No L2 table for this index: discard write and continue */ 4337eca39e0SShashi Mallela return true; 4347eca39e0SShashi Mallela } 435d050f80fSPeter Maydell 436d050f80fSPeter Maydell address_space_stq_le(as, entry_addr, cte, MEMTXATTRS_UNSPECIFIED, &res); 437d050f80fSPeter Maydell return res == MEMTX_OK; 4387eca39e0SShashi Mallela } 4397eca39e0SShashi Mallela 440b6f96009SPeter Maydell static ItsCmdResult process_mapc(GICv3ITSState *s, const uint64_t *cmdpkt) 4417eca39e0SShashi Mallela { 4427eca39e0SShashi Mallela uint16_t icid; 4437eca39e0SShashi Mallela uint64_t rdbase; 4447eca39e0SShashi Mallela bool valid; 4457eca39e0SShashi Mallela 446b6f96009SPeter Maydell icid = cmdpkt[2] & ICID_MASK; 4477eca39e0SShashi Mallela 448b6f96009SPeter Maydell rdbase = (cmdpkt[2] & R_MAPC_RDBASE_MASK) >> R_MAPC_RDBASE_SHIFT; 4497eca39e0SShashi Mallela rdbase &= RDBASE_PROCNUM_MASK; 4507eca39e0SShashi Mallela 451b6f96009SPeter Maydell valid = cmdpkt[2] & CMD_FIELD_VALID_MASK; 4527eca39e0SShashi Mallela 4538b8bb014SPeter Maydell if ((icid >= s->ct.num_entries) || (rdbase >= s->gicv3->num_cpu)) { 4547eca39e0SShashi Mallela qemu_log_mask(LOG_GUEST_ERROR, 4557eca39e0SShashi Mallela "ITS MAPC: invalid collection table attributes " 4567eca39e0SShashi Mallela "icid %d rdbase %" PRIu64 "\n", icid, rdbase); 4577eca39e0SShashi Mallela /* 4587eca39e0SShashi Mallela * in this implementation, in case of error 4597eca39e0SShashi Mallela * we ignore this command and move onto the next 4607eca39e0SShashi Mallela * command in the queue 4617eca39e0SShashi Mallela */ 462f6675196SPeter Maydell return CMD_CONTINUE; 4637eca39e0SShashi Mallela } 4647eca39e0SShashi Mallela 465f6675196SPeter Maydell return update_cte(s, icid, valid, rdbase) ? CMD_CONTINUE : CMD_STALL; 4667eca39e0SShashi Mallela } 4677eca39e0SShashi Mallela 468*22d62b08SPeter Maydell /* 469*22d62b08SPeter Maydell * Update the Device Table entry for @devid to @dte. Returns true 470*22d62b08SPeter Maydell * on success, false if there was a memory access error. 471*22d62b08SPeter Maydell */ 472*22d62b08SPeter Maydell static bool update_dte(GICv3ITSState *s, uint32_t devid, const DTEntry *dte) 4737eca39e0SShashi Mallela { 4747eca39e0SShashi Mallela AddressSpace *as = &s->gicv3->dma_as; 475d050f80fSPeter Maydell uint64_t entry_addr; 476*22d62b08SPeter Maydell uint64_t dteval = 0; 4777eca39e0SShashi Mallela MemTxResult res = MEMTX_OK; 4787eca39e0SShashi Mallela 4797eca39e0SShashi Mallela if (s->dt.valid) { 480*22d62b08SPeter Maydell if (dte->valid) { 4817eca39e0SShashi Mallela /* add mapping entry to device table */ 482*22d62b08SPeter Maydell dteval = FIELD_DP64(dteval, DTE, VALID, 1); 483*22d62b08SPeter Maydell dteval = FIELD_DP64(dteval, DTE, SIZE, dte->size); 484*22d62b08SPeter Maydell dteval = FIELD_DP64(dteval, DTE, ITTADDR, dte->ittaddr); 4857eca39e0SShashi Mallela } 4867eca39e0SShashi Mallela } else { 4877eca39e0SShashi Mallela return true; 4887eca39e0SShashi Mallela } 4897eca39e0SShashi Mallela 490d050f80fSPeter Maydell entry_addr = table_entry_addr(s, &s->dt, devid, &res); 4917eca39e0SShashi Mallela if (res != MEMTX_OK) { 492d050f80fSPeter Maydell /* memory access error: stall */ 4937eca39e0SShashi Mallela return false; 4947eca39e0SShashi Mallela } 495d050f80fSPeter Maydell if (entry_addr == -1) { 496d050f80fSPeter Maydell /* No L2 table for this index: discard write and continue */ 4977eca39e0SShashi Mallela return true; 4987eca39e0SShashi Mallela } 499*22d62b08SPeter Maydell address_space_stq_le(as, entry_addr, dteval, MEMTXATTRS_UNSPECIFIED, &res); 500d050f80fSPeter Maydell return res == MEMTX_OK; 5017eca39e0SShashi Mallela } 5027eca39e0SShashi Mallela 503b6f96009SPeter Maydell static ItsCmdResult process_mapd(GICv3ITSState *s, const uint64_t *cmdpkt) 5047eca39e0SShashi Mallela { 5057eca39e0SShashi Mallela uint32_t devid; 506*22d62b08SPeter Maydell DTEntry dte; 5077eca39e0SShashi Mallela 508b6f96009SPeter Maydell devid = (cmdpkt[0] & DEVID_MASK) >> DEVID_SHIFT; 509*22d62b08SPeter Maydell dte.size = cmdpkt[1] & SIZE_MASK; 510*22d62b08SPeter Maydell dte.ittaddr = (cmdpkt[2] & ITTADDR_MASK) >> ITTADDR_SHIFT; 511*22d62b08SPeter Maydell dte.valid = cmdpkt[2] & CMD_FIELD_VALID_MASK; 5127eca39e0SShashi Mallela 5138b8bb014SPeter Maydell if ((devid >= s->dt.num_entries) || 514*22d62b08SPeter Maydell (dte.size > FIELD_EX64(s->typer, GITS_TYPER, IDBITS))) { 5157eca39e0SShashi Mallela qemu_log_mask(LOG_GUEST_ERROR, 5167eca39e0SShashi Mallela "ITS MAPD: invalid device table attributes " 517*22d62b08SPeter Maydell "devid %d or size %d\n", devid, dte.size); 5187eca39e0SShashi Mallela /* 5197eca39e0SShashi Mallela * in this implementation, in case of error 5207eca39e0SShashi Mallela * we ignore this command and move onto the next 5217eca39e0SShashi Mallela * command in the queue 5227eca39e0SShashi Mallela */ 52300d46e72SPeter Maydell return CMD_CONTINUE; 5247eca39e0SShashi Mallela } 5257eca39e0SShashi Mallela 526*22d62b08SPeter Maydell return update_dte(s, devid, &dte) ? CMD_CONTINUE : CMD_STALL; 5277eca39e0SShashi Mallela } 5287eca39e0SShashi Mallela 529b6f96009SPeter Maydell static ItsCmdResult process_movall(GICv3ITSState *s, const uint64_t *cmdpkt) 530f6d1d9b4SPeter Maydell { 531f6d1d9b4SPeter Maydell uint64_t rd1, rd2; 532f6d1d9b4SPeter Maydell 533b6f96009SPeter Maydell rd1 = FIELD_EX64(cmdpkt[2], MOVALL_2, RDBASE1); 534b6f96009SPeter Maydell rd2 = FIELD_EX64(cmdpkt[3], MOVALL_3, RDBASE2); 535f6d1d9b4SPeter Maydell 536f6d1d9b4SPeter Maydell if (rd1 >= s->gicv3->num_cpu) { 537f6d1d9b4SPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 538f6d1d9b4SPeter Maydell "%s: RDBASE1 %" PRId64 539f6d1d9b4SPeter Maydell " out of range (must be less than %d)\n", 540f6d1d9b4SPeter Maydell __func__, rd1, s->gicv3->num_cpu); 541f6d1d9b4SPeter Maydell return CMD_CONTINUE; 542f6d1d9b4SPeter Maydell } 543f6d1d9b4SPeter Maydell if (rd2 >= s->gicv3->num_cpu) { 544f6d1d9b4SPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 545f6d1d9b4SPeter Maydell "%s: RDBASE2 %" PRId64 546f6d1d9b4SPeter Maydell " out of range (must be less than %d)\n", 547f6d1d9b4SPeter Maydell __func__, rd2, s->gicv3->num_cpu); 548f6d1d9b4SPeter Maydell return CMD_CONTINUE; 549f6d1d9b4SPeter Maydell } 550f6d1d9b4SPeter Maydell 551f6d1d9b4SPeter Maydell if (rd1 == rd2) { 552f6d1d9b4SPeter Maydell /* Move to same target must succeed as a no-op */ 553f6d1d9b4SPeter Maydell return CMD_CONTINUE; 554f6d1d9b4SPeter Maydell } 555f6d1d9b4SPeter Maydell 556f6d1d9b4SPeter Maydell /* Move all pending LPIs from redistributor 1 to redistributor 2 */ 557f6d1d9b4SPeter Maydell gicv3_redist_movall_lpis(&s->gicv3->cpu[rd1], &s->gicv3->cpu[rd2]); 558f6d1d9b4SPeter Maydell 559f6d1d9b4SPeter Maydell return CMD_CONTINUE; 560f6d1d9b4SPeter Maydell } 561f6d1d9b4SPeter Maydell 562b6f96009SPeter Maydell static ItsCmdResult process_movi(GICv3ITSState *s, const uint64_t *cmdpkt) 563961b4912SPeter Maydell { 564961b4912SPeter Maydell MemTxResult res = MEMTX_OK; 565961b4912SPeter Maydell uint32_t devid, eventid, intid; 566961b4912SPeter Maydell uint16_t old_icid, new_icid; 567961b4912SPeter Maydell uint64_t old_cte, new_cte; 568961b4912SPeter Maydell uint64_t old_rdbase, new_rdbase; 5694acf93e1SPeter Maydell bool ite_valid, cte_valid; 570961b4912SPeter Maydell uint64_t num_eventids; 571961b4912SPeter Maydell IteEntry ite = {}; 5724acf93e1SPeter Maydell DTEntry dte; 573961b4912SPeter Maydell 574b6f96009SPeter Maydell devid = FIELD_EX64(cmdpkt[0], MOVI_0, DEVICEID); 575b6f96009SPeter Maydell eventid = FIELD_EX64(cmdpkt[1], MOVI_1, EVENTID); 576b6f96009SPeter Maydell new_icid = FIELD_EX64(cmdpkt[2], MOVI_2, ICID); 577961b4912SPeter Maydell 578961b4912SPeter Maydell if (devid >= s->dt.num_entries) { 579961b4912SPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 580961b4912SPeter Maydell "%s: invalid command attributes: devid %d>=%d", 581961b4912SPeter Maydell __func__, devid, s->dt.num_entries); 582961b4912SPeter Maydell return CMD_CONTINUE; 583961b4912SPeter Maydell } 5844acf93e1SPeter Maydell if (get_dte(s, devid, &dte) != MEMTX_OK) { 585961b4912SPeter Maydell return CMD_STALL; 586961b4912SPeter Maydell } 587961b4912SPeter Maydell 5884acf93e1SPeter Maydell if (!dte.valid) { 589961b4912SPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 590961b4912SPeter Maydell "%s: invalid command attributes: " 5914acf93e1SPeter Maydell "invalid dte for %d\n", __func__, devid); 592961b4912SPeter Maydell return CMD_CONTINUE; 593961b4912SPeter Maydell } 594961b4912SPeter Maydell 5954acf93e1SPeter Maydell num_eventids = 1ULL << (dte.size + 1); 596961b4912SPeter Maydell if (eventid >= num_eventids) { 597961b4912SPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 598961b4912SPeter Maydell "%s: invalid command attributes: eventid %d >= %" 599961b4912SPeter Maydell PRId64 "\n", 600961b4912SPeter Maydell __func__, eventid, num_eventids); 601961b4912SPeter Maydell return CMD_CONTINUE; 602961b4912SPeter Maydell } 603961b4912SPeter Maydell 6044acf93e1SPeter Maydell ite_valid = get_ite(s, eventid, &dte, &old_icid, &intid, &res); 605961b4912SPeter Maydell if (res != MEMTX_OK) { 606961b4912SPeter Maydell return CMD_STALL; 607961b4912SPeter Maydell } 608961b4912SPeter Maydell 609961b4912SPeter Maydell if (!ite_valid) { 610961b4912SPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 611961b4912SPeter Maydell "%s: invalid command attributes: invalid ITE\n", 612961b4912SPeter Maydell __func__); 613961b4912SPeter Maydell return CMD_CONTINUE; 614961b4912SPeter Maydell } 615961b4912SPeter Maydell 616961b4912SPeter Maydell if (old_icid >= s->ct.num_entries) { 617961b4912SPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 618961b4912SPeter Maydell "%s: invalid ICID 0x%x in ITE (table corrupted?)\n", 619961b4912SPeter Maydell __func__, old_icid); 620961b4912SPeter Maydell return CMD_CONTINUE; 621961b4912SPeter Maydell } 622961b4912SPeter Maydell 623961b4912SPeter Maydell if (new_icid >= s->ct.num_entries) { 624961b4912SPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 625961b4912SPeter Maydell "%s: invalid command attributes: ICID 0x%x\n", 626961b4912SPeter Maydell __func__, new_icid); 627961b4912SPeter Maydell return CMD_CONTINUE; 628961b4912SPeter Maydell } 629961b4912SPeter Maydell 630961b4912SPeter Maydell cte_valid = get_cte(s, old_icid, &old_cte, &res); 631961b4912SPeter Maydell if (res != MEMTX_OK) { 632961b4912SPeter Maydell return CMD_STALL; 633961b4912SPeter Maydell } 634961b4912SPeter Maydell if (!cte_valid) { 635961b4912SPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 636961b4912SPeter Maydell "%s: invalid command attributes: " 637961b4912SPeter Maydell "invalid cte: %"PRIx64"\n", 638961b4912SPeter Maydell __func__, old_cte); 639961b4912SPeter Maydell return CMD_CONTINUE; 640961b4912SPeter Maydell } 641961b4912SPeter Maydell 642961b4912SPeter Maydell cte_valid = get_cte(s, new_icid, &new_cte, &res); 643961b4912SPeter Maydell if (res != MEMTX_OK) { 644961b4912SPeter Maydell return CMD_STALL; 645961b4912SPeter Maydell } 646961b4912SPeter Maydell if (!cte_valid) { 647961b4912SPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 648961b4912SPeter Maydell "%s: invalid command attributes: " 649961b4912SPeter Maydell "invalid cte: %"PRIx64"\n", 650961b4912SPeter Maydell __func__, new_cte); 651961b4912SPeter Maydell return CMD_CONTINUE; 652961b4912SPeter Maydell } 653961b4912SPeter Maydell 654961b4912SPeter Maydell old_rdbase = FIELD_EX64(old_cte, CTE, RDBASE); 655961b4912SPeter Maydell if (old_rdbase >= s->gicv3->num_cpu) { 656961b4912SPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 657961b4912SPeter Maydell "%s: CTE has invalid rdbase 0x%"PRIx64"\n", 658961b4912SPeter Maydell __func__, old_rdbase); 659961b4912SPeter Maydell return CMD_CONTINUE; 660961b4912SPeter Maydell } 661961b4912SPeter Maydell 662961b4912SPeter Maydell new_rdbase = FIELD_EX64(new_cte, CTE, RDBASE); 663961b4912SPeter Maydell if (new_rdbase >= s->gicv3->num_cpu) { 664961b4912SPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 665961b4912SPeter Maydell "%s: CTE has invalid rdbase 0x%"PRIx64"\n", 666961b4912SPeter Maydell __func__, new_rdbase); 667961b4912SPeter Maydell return CMD_CONTINUE; 668961b4912SPeter Maydell } 669961b4912SPeter Maydell 670961b4912SPeter Maydell if (old_rdbase != new_rdbase) { 671961b4912SPeter Maydell /* Move the LPI from the old redistributor to the new one */ 672961b4912SPeter Maydell gicv3_redist_mov_lpi(&s->gicv3->cpu[old_rdbase], 673961b4912SPeter Maydell &s->gicv3->cpu[new_rdbase], 674961b4912SPeter Maydell intid); 675961b4912SPeter Maydell } 676961b4912SPeter Maydell 677961b4912SPeter Maydell /* Update the ICID field in the interrupt translation table entry */ 678961b4912SPeter Maydell ite.itel = FIELD_DP64(ite.itel, ITE_L, VALID, 1); 679961b4912SPeter Maydell ite.itel = FIELD_DP64(ite.itel, ITE_L, INTTYPE, ITE_INTTYPE_PHYSICAL); 680961b4912SPeter Maydell ite.itel = FIELD_DP64(ite.itel, ITE_L, INTID, intid); 681961b4912SPeter Maydell ite.itel = FIELD_DP64(ite.itel, ITE_L, DOORBELL, INTID_SPURIOUS); 682961b4912SPeter Maydell ite.iteh = FIELD_DP32(ite.iteh, ITE_H, ICID, new_icid); 6834acf93e1SPeter Maydell return update_ite(s, eventid, &dte, ite) ? CMD_CONTINUE : CMD_STALL; 684961b4912SPeter Maydell } 685961b4912SPeter Maydell 6867eca39e0SShashi Mallela /* 6877eca39e0SShashi Mallela * Current implementation blocks until all 6887eca39e0SShashi Mallela * commands are processed 6897eca39e0SShashi Mallela */ 6907eca39e0SShashi Mallela static void process_cmdq(GICv3ITSState *s) 6917eca39e0SShashi Mallela { 6927eca39e0SShashi Mallela uint32_t wr_offset = 0; 6937eca39e0SShashi Mallela uint32_t rd_offset = 0; 6947eca39e0SShashi Mallela uint32_t cq_offset = 0; 6957eca39e0SShashi Mallela AddressSpace *as = &s->gicv3->dma_as; 6967eca39e0SShashi Mallela uint8_t cmd; 69717fb5e36SShashi Mallela int i; 6987eca39e0SShashi Mallela 6998d2d6dd9SPeter Maydell if (!(s->ctlr & R_GITS_CTLR_ENABLED_MASK)) { 7007eca39e0SShashi Mallela return; 7017eca39e0SShashi Mallela } 7027eca39e0SShashi Mallela 7037eca39e0SShashi Mallela wr_offset = FIELD_EX64(s->cwriter, GITS_CWRITER, OFFSET); 7047eca39e0SShashi Mallela 70580dcd37fSPeter Maydell if (wr_offset >= s->cq.num_entries) { 7067eca39e0SShashi Mallela qemu_log_mask(LOG_GUEST_ERROR, 7077eca39e0SShashi Mallela "%s: invalid write offset " 7087eca39e0SShashi Mallela "%d\n", __func__, wr_offset); 7097eca39e0SShashi Mallela return; 7107eca39e0SShashi Mallela } 7117eca39e0SShashi Mallela 7127eca39e0SShashi Mallela rd_offset = FIELD_EX64(s->creadr, GITS_CREADR, OFFSET); 7137eca39e0SShashi Mallela 71480dcd37fSPeter Maydell if (rd_offset >= s->cq.num_entries) { 7157eca39e0SShashi Mallela qemu_log_mask(LOG_GUEST_ERROR, 7167eca39e0SShashi Mallela "%s: invalid read offset " 7177eca39e0SShashi Mallela "%d\n", __func__, rd_offset); 7187eca39e0SShashi Mallela return; 7197eca39e0SShashi Mallela } 7207eca39e0SShashi Mallela 7217eca39e0SShashi Mallela while (wr_offset != rd_offset) { 722ef011555SPeter Maydell ItsCmdResult result = CMD_CONTINUE; 723b6f96009SPeter Maydell void *hostmem; 724b6f96009SPeter Maydell hwaddr buflen; 725b6f96009SPeter Maydell uint64_t cmdpkt[GITS_CMDQ_ENTRY_WORDS]; 726ef011555SPeter Maydell 7277eca39e0SShashi Mallela cq_offset = (rd_offset * GITS_CMDQ_ENTRY_SIZE); 728b6f96009SPeter Maydell 729b6f96009SPeter Maydell buflen = GITS_CMDQ_ENTRY_SIZE; 730b6f96009SPeter Maydell hostmem = address_space_map(as, s->cq.base_addr + cq_offset, 731b6f96009SPeter Maydell &buflen, false, MEMTXATTRS_UNSPECIFIED); 732b6f96009SPeter Maydell if (!hostmem || buflen != GITS_CMDQ_ENTRY_SIZE) { 733b6f96009SPeter Maydell if (hostmem) { 734b6f96009SPeter Maydell address_space_unmap(as, hostmem, buflen, false, 0); 735b6f96009SPeter Maydell } 736f0b4b2a2SPeter Maydell s->creadr = FIELD_DP64(s->creadr, GITS_CREADR, STALLED, 1); 737f0b4b2a2SPeter Maydell qemu_log_mask(LOG_GUEST_ERROR, 738f0b4b2a2SPeter Maydell "%s: could not read command at 0x%" PRIx64 "\n", 739f0b4b2a2SPeter Maydell __func__, s->cq.base_addr + cq_offset); 740f0b4b2a2SPeter Maydell break; 7417eca39e0SShashi Mallela } 742b6f96009SPeter Maydell for (i = 0; i < ARRAY_SIZE(cmdpkt); i++) { 743b6f96009SPeter Maydell cmdpkt[i] = ldq_le_p(hostmem + i * sizeof(uint64_t)); 744b6f96009SPeter Maydell } 745b6f96009SPeter Maydell address_space_unmap(as, hostmem, buflen, false, 0); 746f0b4b2a2SPeter Maydell 747b6f96009SPeter Maydell cmd = cmdpkt[0] & CMD_MASK; 7487eca39e0SShashi Mallela 749195209d3SPeter Maydell trace_gicv3_its_process_command(rd_offset, cmd); 750195209d3SPeter Maydell 7517eca39e0SShashi Mallela switch (cmd) { 7527eca39e0SShashi Mallela case GITS_CMD_INT: 753b6f96009SPeter Maydell result = process_its_cmd(s, cmdpkt, INTERRUPT); 7547eca39e0SShashi Mallela break; 7557eca39e0SShashi Mallela case GITS_CMD_CLEAR: 756b6f96009SPeter Maydell result = process_its_cmd(s, cmdpkt, CLEAR); 7577eca39e0SShashi Mallela break; 7587eca39e0SShashi Mallela case GITS_CMD_SYNC: 7597eca39e0SShashi Mallela /* 7607eca39e0SShashi Mallela * Current implementation makes a blocking synchronous call 7617eca39e0SShashi Mallela * for every command issued earlier, hence the internal state 7627eca39e0SShashi Mallela * is already consistent by the time SYNC command is executed. 7637eca39e0SShashi Mallela * Hence no further processing is required for SYNC command. 7647eca39e0SShashi Mallela */ 7657eca39e0SShashi Mallela break; 7667eca39e0SShashi Mallela case GITS_CMD_MAPD: 767b6f96009SPeter Maydell result = process_mapd(s, cmdpkt); 7687eca39e0SShashi Mallela break; 7697eca39e0SShashi Mallela case GITS_CMD_MAPC: 770b6f96009SPeter Maydell result = process_mapc(s, cmdpkt); 7717eca39e0SShashi Mallela break; 7727eca39e0SShashi Mallela case GITS_CMD_MAPTI: 773b6f96009SPeter Maydell result = process_mapti(s, cmdpkt, false); 7747eca39e0SShashi Mallela break; 7757eca39e0SShashi Mallela case GITS_CMD_MAPI: 776b6f96009SPeter Maydell result = process_mapti(s, cmdpkt, true); 7777eca39e0SShashi Mallela break; 7787eca39e0SShashi Mallela case GITS_CMD_DISCARD: 779b6f96009SPeter Maydell result = process_its_cmd(s, cmdpkt, DISCARD); 7807eca39e0SShashi Mallela break; 7817eca39e0SShashi Mallela case GITS_CMD_INV: 7827eca39e0SShashi Mallela case GITS_CMD_INVALL: 78317fb5e36SShashi Mallela /* 78417fb5e36SShashi Mallela * Current implementation doesn't cache any ITS tables, 78517fb5e36SShashi Mallela * but the calculated lpi priority information. We only 78617fb5e36SShashi Mallela * need to trigger lpi priority re-calculation to be in 78717fb5e36SShashi Mallela * sync with LPI config table or pending table changes. 78817fb5e36SShashi Mallela */ 78917fb5e36SShashi Mallela for (i = 0; i < s->gicv3->num_cpu; i++) { 79017fb5e36SShashi Mallela gicv3_redist_update_lpi(&s->gicv3->cpu[i]); 79117fb5e36SShashi Mallela } 7927eca39e0SShashi Mallela break; 793961b4912SPeter Maydell case GITS_CMD_MOVI: 794b6f96009SPeter Maydell result = process_movi(s, cmdpkt); 795961b4912SPeter Maydell break; 796f6d1d9b4SPeter Maydell case GITS_CMD_MOVALL: 797b6f96009SPeter Maydell result = process_movall(s, cmdpkt); 798f6d1d9b4SPeter Maydell break; 7997eca39e0SShashi Mallela default: 8007eca39e0SShashi Mallela break; 8017eca39e0SShashi Mallela } 802ef011555SPeter Maydell if (result == CMD_CONTINUE) { 8037eca39e0SShashi Mallela rd_offset++; 80480dcd37fSPeter Maydell rd_offset %= s->cq.num_entries; 8057eca39e0SShashi Mallela s->creadr = FIELD_DP64(s->creadr, GITS_CREADR, OFFSET, rd_offset); 8067eca39e0SShashi Mallela } else { 807ef011555SPeter Maydell /* CMD_STALL */ 8087eca39e0SShashi Mallela s->creadr = FIELD_DP64(s->creadr, GITS_CREADR, STALLED, 1); 8097eca39e0SShashi Mallela qemu_log_mask(LOG_GUEST_ERROR, 810ef011555SPeter Maydell "%s: 0x%x cmd processing failed, stalling\n", 811ef011555SPeter Maydell __func__, cmd); 8127eca39e0SShashi Mallela break; 8137eca39e0SShashi Mallela } 8147eca39e0SShashi Mallela } 8157eca39e0SShashi Mallela } 8167eca39e0SShashi Mallela 8171b08e436SShashi Mallela /* 8181b08e436SShashi Mallela * This function extracts the ITS Device and Collection table specific 8191b08e436SShashi Mallela * parameters (like base_addr, size etc) from GITS_BASER register. 8201b08e436SShashi Mallela * It is called during ITS enable and also during post_load migration 8211b08e436SShashi Mallela */ 8221b08e436SShashi Mallela static void extract_table_params(GICv3ITSState *s) 8231b08e436SShashi Mallela { 8241b08e436SShashi Mallela uint16_t num_pages = 0; 8251b08e436SShashi Mallela uint8_t page_sz_type; 8261b08e436SShashi Mallela uint8_t type; 8271b08e436SShashi Mallela uint32_t page_sz = 0; 8281b08e436SShashi Mallela uint64_t value; 8291b08e436SShashi Mallela 8301b08e436SShashi Mallela for (int i = 0; i < 8; i++) { 831e5487a41SPeter Maydell TableDesc *td; 832e5487a41SPeter Maydell int idbits; 833e5487a41SPeter Maydell 8341b08e436SShashi Mallela value = s->baser[i]; 8351b08e436SShashi Mallela 8361b08e436SShashi Mallela if (!value) { 8371b08e436SShashi Mallela continue; 8381b08e436SShashi Mallela } 8391b08e436SShashi Mallela 8401b08e436SShashi Mallela page_sz_type = FIELD_EX64(value, GITS_BASER, PAGESIZE); 8411b08e436SShashi Mallela 8421b08e436SShashi Mallela switch (page_sz_type) { 8431b08e436SShashi Mallela case 0: 8441b08e436SShashi Mallela page_sz = GITS_PAGE_SIZE_4K; 8451b08e436SShashi Mallela break; 8461b08e436SShashi Mallela 8471b08e436SShashi Mallela case 1: 8481b08e436SShashi Mallela page_sz = GITS_PAGE_SIZE_16K; 8491b08e436SShashi Mallela break; 8501b08e436SShashi Mallela 8511b08e436SShashi Mallela case 2: 8521b08e436SShashi Mallela case 3: 8531b08e436SShashi Mallela page_sz = GITS_PAGE_SIZE_64K; 8541b08e436SShashi Mallela break; 8551b08e436SShashi Mallela 8561b08e436SShashi Mallela default: 8571b08e436SShashi Mallela g_assert_not_reached(); 8581b08e436SShashi Mallela } 8591b08e436SShashi Mallela 8601b08e436SShashi Mallela num_pages = FIELD_EX64(value, GITS_BASER, SIZE) + 1; 8611b08e436SShashi Mallela 8621b08e436SShashi Mallela type = FIELD_EX64(value, GITS_BASER, TYPE); 8631b08e436SShashi Mallela 8641b08e436SShashi Mallela switch (type) { 8651b08e436SShashi Mallela case GITS_BASER_TYPE_DEVICE: 866e5487a41SPeter Maydell td = &s->dt; 867e5487a41SPeter Maydell idbits = FIELD_EX64(s->typer, GITS_TYPER, DEVBITS) + 1; 86862df780eSPeter Maydell break; 8691b08e436SShashi Mallela case GITS_BASER_TYPE_COLLECTION: 870e5487a41SPeter Maydell td = &s->ct; 8711b08e436SShashi Mallela if (FIELD_EX64(s->typer, GITS_TYPER, CIL)) { 872e5487a41SPeter Maydell idbits = FIELD_EX64(s->typer, GITS_TYPER, CIDBITS) + 1; 8731b08e436SShashi Mallela } else { 8741b08e436SShashi Mallela /* 16-bit CollectionId supported when CIL == 0 */ 875e5487a41SPeter Maydell idbits = 16; 8761b08e436SShashi Mallela } 8771b08e436SShashi Mallela break; 8781b08e436SShashi Mallela default: 879e5487a41SPeter Maydell /* 880e5487a41SPeter Maydell * GITS_BASER<n>.TYPE is read-only, so GITS_BASER_RO_MASK 881e5487a41SPeter Maydell * ensures we will only see type values corresponding to 882e5487a41SPeter Maydell * the values set up in gicv3_its_reset(). 883e5487a41SPeter Maydell */ 884e5487a41SPeter Maydell g_assert_not_reached(); 8851b08e436SShashi Mallela } 886e5487a41SPeter Maydell 887e5487a41SPeter Maydell memset(td, 0, sizeof(*td)); 888e5487a41SPeter Maydell td->valid = FIELD_EX64(value, GITS_BASER, VALID); 889e5487a41SPeter Maydell /* 890e5487a41SPeter Maydell * If GITS_BASER<n>.Valid is 0 for any <n> then we will not process 891e5487a41SPeter Maydell * interrupts. (GITS_TYPER.HCC is 0 for this implementation, so we 892e5487a41SPeter Maydell * do not have a special case where the GITS_BASER<n>.Valid bit is 0 893e5487a41SPeter Maydell * for the register corresponding to the Collection table but we 894e5487a41SPeter Maydell * still have to process interrupts using non-memory-backed 895e5487a41SPeter Maydell * Collection table entries.) 896e5487a41SPeter Maydell */ 897e5487a41SPeter Maydell if (!td->valid) { 898e5487a41SPeter Maydell continue; 899e5487a41SPeter Maydell } 900e5487a41SPeter Maydell td->page_sz = page_sz; 901e5487a41SPeter Maydell td->indirect = FIELD_EX64(value, GITS_BASER, INDIRECT); 9029ae85431SPeter Maydell td->entry_sz = FIELD_EX64(value, GITS_BASER, ENTRYSIZE) + 1; 903e5487a41SPeter Maydell td->base_addr = baser_base_addr(value, page_sz); 904e5487a41SPeter Maydell if (!td->indirect) { 90580dcd37fSPeter Maydell td->num_entries = (num_pages * page_sz) / td->entry_sz; 906e5487a41SPeter Maydell } else { 90780dcd37fSPeter Maydell td->num_entries = (((num_pages * page_sz) / 908e5487a41SPeter Maydell L1TABLE_ENTRY_SIZE) * 909e5487a41SPeter Maydell (page_sz / td->entry_sz)); 910e5487a41SPeter Maydell } 9118b8bb014SPeter Maydell td->num_entries = MIN(td->num_entries, 1ULL << idbits); 9121b08e436SShashi Mallela } 9131b08e436SShashi Mallela } 9141b08e436SShashi Mallela 9151b08e436SShashi Mallela static void extract_cmdq_params(GICv3ITSState *s) 9161b08e436SShashi Mallela { 9171b08e436SShashi Mallela uint16_t num_pages = 0; 9181b08e436SShashi Mallela uint64_t value = s->cbaser; 9191b08e436SShashi Mallela 9201b08e436SShashi Mallela num_pages = FIELD_EX64(value, GITS_CBASER, SIZE) + 1; 9211b08e436SShashi Mallela 9221b08e436SShashi Mallela memset(&s->cq, 0 , sizeof(s->cq)); 9231b08e436SShashi Mallela s->cq.valid = FIELD_EX64(value, GITS_CBASER, VALID); 9241b08e436SShashi Mallela 9251b08e436SShashi Mallela if (s->cq.valid) { 92680dcd37fSPeter Maydell s->cq.num_entries = (num_pages * GITS_PAGE_SIZE_4K) / 9271b08e436SShashi Mallela GITS_CMDQ_ENTRY_SIZE; 9281b08e436SShashi Mallela s->cq.base_addr = FIELD_EX64(value, GITS_CBASER, PHYADDR); 9291b08e436SShashi Mallela s->cq.base_addr <<= R_GITS_CBASER_PHYADDR_SHIFT; 9301b08e436SShashi Mallela } 9311b08e436SShashi Mallela } 9321b08e436SShashi Mallela 9337e062b98SPeter Maydell static MemTxResult gicv3_its_translation_read(void *opaque, hwaddr offset, 9347e062b98SPeter Maydell uint64_t *data, unsigned size, 9357e062b98SPeter Maydell MemTxAttrs attrs) 9367e062b98SPeter Maydell { 9377e062b98SPeter Maydell /* 9387e062b98SPeter Maydell * GITS_TRANSLATER is write-only, and all other addresses 9397e062b98SPeter Maydell * in the interrupt translation space frame are RES0. 9407e062b98SPeter Maydell */ 9417e062b98SPeter Maydell *data = 0; 9427e062b98SPeter Maydell return MEMTX_OK; 9437e062b98SPeter Maydell } 9447e062b98SPeter Maydell 94518f6290aSShashi Mallela static MemTxResult gicv3_its_translation_write(void *opaque, hwaddr offset, 94618f6290aSShashi Mallela uint64_t data, unsigned size, 94718f6290aSShashi Mallela MemTxAttrs attrs) 94818f6290aSShashi Mallela { 949c694cb4cSShashi Mallela GICv3ITSState *s = (GICv3ITSState *)opaque; 950c694cb4cSShashi Mallela bool result = true; 951c694cb4cSShashi Mallela 952195209d3SPeter Maydell trace_gicv3_its_translation_write(offset, data, size, attrs.requester_id); 953195209d3SPeter Maydell 954c694cb4cSShashi Mallela switch (offset) { 955c694cb4cSShashi Mallela case GITS_TRANSLATER: 9568d2d6dd9SPeter Maydell if (s->ctlr & R_GITS_CTLR_ENABLED_MASK) { 957b6f96009SPeter Maydell result = do_process_its_cmd(s, attrs.requester_id, data, NONE); 958c694cb4cSShashi Mallela } 959c694cb4cSShashi Mallela break; 960c694cb4cSShashi Mallela default: 961c694cb4cSShashi Mallela break; 962c694cb4cSShashi Mallela } 963c694cb4cSShashi Mallela 964c694cb4cSShashi Mallela if (result) { 96518f6290aSShashi Mallela return MEMTX_OK; 966c694cb4cSShashi Mallela } else { 967c694cb4cSShashi Mallela return MEMTX_ERROR; 968c694cb4cSShashi Mallela } 96918f6290aSShashi Mallela } 97018f6290aSShashi Mallela 97118f6290aSShashi Mallela static bool its_writel(GICv3ITSState *s, hwaddr offset, 97218f6290aSShashi Mallela uint64_t value, MemTxAttrs attrs) 97318f6290aSShashi Mallela { 97418f6290aSShashi Mallela bool result = true; 9751b08e436SShashi Mallela int index; 97618f6290aSShashi Mallela 9771b08e436SShashi Mallela switch (offset) { 9781b08e436SShashi Mallela case GITS_CTLR: 9792f459cd1SShashi Mallela if (value & R_GITS_CTLR_ENABLED_MASK) { 9808d2d6dd9SPeter Maydell s->ctlr |= R_GITS_CTLR_ENABLED_MASK; 9811b08e436SShashi Mallela extract_table_params(s); 9821b08e436SShashi Mallela extract_cmdq_params(s); 9837eca39e0SShashi Mallela process_cmdq(s); 9842f459cd1SShashi Mallela } else { 9858d2d6dd9SPeter Maydell s->ctlr &= ~R_GITS_CTLR_ENABLED_MASK; 9861b08e436SShashi Mallela } 9871b08e436SShashi Mallela break; 9881b08e436SShashi Mallela case GITS_CBASER: 9891b08e436SShashi Mallela /* 9901b08e436SShashi Mallela * IMPDEF choice:- GITS_CBASER register becomes RO if ITS is 9911b08e436SShashi Mallela * already enabled 9921b08e436SShashi Mallela */ 9938d2d6dd9SPeter Maydell if (!(s->ctlr & R_GITS_CTLR_ENABLED_MASK)) { 9941b08e436SShashi Mallela s->cbaser = deposit64(s->cbaser, 0, 32, value); 9951b08e436SShashi Mallela s->creadr = 0; 9961b08e436SShashi Mallela } 9971b08e436SShashi Mallela break; 9981b08e436SShashi Mallela case GITS_CBASER + 4: 9991b08e436SShashi Mallela /* 10001b08e436SShashi Mallela * IMPDEF choice:- GITS_CBASER register becomes RO if ITS is 10011b08e436SShashi Mallela * already enabled 10021b08e436SShashi Mallela */ 10038d2d6dd9SPeter Maydell if (!(s->ctlr & R_GITS_CTLR_ENABLED_MASK)) { 10041b08e436SShashi Mallela s->cbaser = deposit64(s->cbaser, 32, 32, value); 10051b08e436SShashi Mallela s->creadr = 0; 10061b08e436SShashi Mallela } 10071b08e436SShashi Mallela break; 10081b08e436SShashi Mallela case GITS_CWRITER: 10091b08e436SShashi Mallela s->cwriter = deposit64(s->cwriter, 0, 32, 10101b08e436SShashi Mallela (value & ~R_GITS_CWRITER_RETRY_MASK)); 10117eca39e0SShashi Mallela if (s->cwriter != s->creadr) { 10127eca39e0SShashi Mallela process_cmdq(s); 10137eca39e0SShashi Mallela } 10141b08e436SShashi Mallela break; 10151b08e436SShashi Mallela case GITS_CWRITER + 4: 10161b08e436SShashi Mallela s->cwriter = deposit64(s->cwriter, 32, 32, value); 10171b08e436SShashi Mallela break; 10181b08e436SShashi Mallela case GITS_CREADR: 10191b08e436SShashi Mallela if (s->gicv3->gicd_ctlr & GICD_CTLR_DS) { 10201b08e436SShashi Mallela s->creadr = deposit64(s->creadr, 0, 32, 10211b08e436SShashi Mallela (value & ~R_GITS_CREADR_STALLED_MASK)); 10221b08e436SShashi Mallela } else { 10231b08e436SShashi Mallela /* RO register, ignore the write */ 10241b08e436SShashi Mallela qemu_log_mask(LOG_GUEST_ERROR, 10251b08e436SShashi Mallela "%s: invalid guest write to RO register at offset " 10261b08e436SShashi Mallela TARGET_FMT_plx "\n", __func__, offset); 10271b08e436SShashi Mallela } 10281b08e436SShashi Mallela break; 10291b08e436SShashi Mallela case GITS_CREADR + 4: 10301b08e436SShashi Mallela if (s->gicv3->gicd_ctlr & GICD_CTLR_DS) { 10311b08e436SShashi Mallela s->creadr = deposit64(s->creadr, 32, 32, value); 10321b08e436SShashi Mallela } else { 10331b08e436SShashi Mallela /* RO register, ignore the write */ 10341b08e436SShashi Mallela qemu_log_mask(LOG_GUEST_ERROR, 10351b08e436SShashi Mallela "%s: invalid guest write to RO register at offset " 10361b08e436SShashi Mallela TARGET_FMT_plx "\n", __func__, offset); 10371b08e436SShashi Mallela } 10381b08e436SShashi Mallela break; 10391b08e436SShashi Mallela case GITS_BASER ... GITS_BASER + 0x3f: 10401b08e436SShashi Mallela /* 10411b08e436SShashi Mallela * IMPDEF choice:- GITS_BASERn register becomes RO if ITS is 10421b08e436SShashi Mallela * already enabled 10431b08e436SShashi Mallela */ 10448d2d6dd9SPeter Maydell if (!(s->ctlr & R_GITS_CTLR_ENABLED_MASK)) { 10451b08e436SShashi Mallela index = (offset - GITS_BASER) / 8; 10461b08e436SShashi Mallela 10470ffe88e6SPeter Maydell if (s->baser[index] == 0) { 10480ffe88e6SPeter Maydell /* Unimplemented GITS_BASERn: RAZ/WI */ 10490ffe88e6SPeter Maydell break; 10500ffe88e6SPeter Maydell } 10511b08e436SShashi Mallela if (offset & 7) { 10521b08e436SShashi Mallela value <<= 32; 10531b08e436SShashi Mallela value &= ~GITS_BASER_RO_MASK; 10541b08e436SShashi Mallela s->baser[index] &= GITS_BASER_RO_MASK | MAKE_64BIT_MASK(0, 32); 10551b08e436SShashi Mallela s->baser[index] |= value; 10561b08e436SShashi Mallela } else { 10571b08e436SShashi Mallela value &= ~GITS_BASER_RO_MASK; 10581b08e436SShashi Mallela s->baser[index] &= GITS_BASER_RO_MASK | MAKE_64BIT_MASK(32, 32); 10591b08e436SShashi Mallela s->baser[index] |= value; 10601b08e436SShashi Mallela } 10611b08e436SShashi Mallela } 10621b08e436SShashi Mallela break; 10631b08e436SShashi Mallela case GITS_IIDR: 10641b08e436SShashi Mallela case GITS_IDREGS ... GITS_IDREGS + 0x2f: 10651b08e436SShashi Mallela /* RO registers, ignore the write */ 10661b08e436SShashi Mallela qemu_log_mask(LOG_GUEST_ERROR, 10671b08e436SShashi Mallela "%s: invalid guest write to RO register at offset " 10681b08e436SShashi Mallela TARGET_FMT_plx "\n", __func__, offset); 10691b08e436SShashi Mallela break; 10701b08e436SShashi Mallela default: 10711b08e436SShashi Mallela result = false; 10721b08e436SShashi Mallela break; 10731b08e436SShashi Mallela } 107418f6290aSShashi Mallela return result; 107518f6290aSShashi Mallela } 107618f6290aSShashi Mallela 107718f6290aSShashi Mallela static bool its_readl(GICv3ITSState *s, hwaddr offset, 107818f6290aSShashi Mallela uint64_t *data, MemTxAttrs attrs) 107918f6290aSShashi Mallela { 108018f6290aSShashi Mallela bool result = true; 10811b08e436SShashi Mallela int index; 108218f6290aSShashi Mallela 10831b08e436SShashi Mallela switch (offset) { 10841b08e436SShashi Mallela case GITS_CTLR: 10851b08e436SShashi Mallela *data = s->ctlr; 10861b08e436SShashi Mallela break; 10871b08e436SShashi Mallela case GITS_IIDR: 10881b08e436SShashi Mallela *data = gicv3_iidr(); 10891b08e436SShashi Mallela break; 10901b08e436SShashi Mallela case GITS_IDREGS ... GITS_IDREGS + 0x2f: 10911b08e436SShashi Mallela /* ID registers */ 10921b08e436SShashi Mallela *data = gicv3_idreg(offset - GITS_IDREGS); 10931b08e436SShashi Mallela break; 10941b08e436SShashi Mallela case GITS_TYPER: 10951b08e436SShashi Mallela *data = extract64(s->typer, 0, 32); 10961b08e436SShashi Mallela break; 10971b08e436SShashi Mallela case GITS_TYPER + 4: 10981b08e436SShashi Mallela *data = extract64(s->typer, 32, 32); 10991b08e436SShashi Mallela break; 11001b08e436SShashi Mallela case GITS_CBASER: 11011b08e436SShashi Mallela *data = extract64(s->cbaser, 0, 32); 11021b08e436SShashi Mallela break; 11031b08e436SShashi Mallela case GITS_CBASER + 4: 11041b08e436SShashi Mallela *data = extract64(s->cbaser, 32, 32); 11051b08e436SShashi Mallela break; 11061b08e436SShashi Mallela case GITS_CREADR: 11071b08e436SShashi Mallela *data = extract64(s->creadr, 0, 32); 11081b08e436SShashi Mallela break; 11091b08e436SShashi Mallela case GITS_CREADR + 4: 11101b08e436SShashi Mallela *data = extract64(s->creadr, 32, 32); 11111b08e436SShashi Mallela break; 11121b08e436SShashi Mallela case GITS_CWRITER: 11131b08e436SShashi Mallela *data = extract64(s->cwriter, 0, 32); 11141b08e436SShashi Mallela break; 11151b08e436SShashi Mallela case GITS_CWRITER + 4: 11161b08e436SShashi Mallela *data = extract64(s->cwriter, 32, 32); 11171b08e436SShashi Mallela break; 11181b08e436SShashi Mallela case GITS_BASER ... GITS_BASER + 0x3f: 11191b08e436SShashi Mallela index = (offset - GITS_BASER) / 8; 11201b08e436SShashi Mallela if (offset & 7) { 11211b08e436SShashi Mallela *data = extract64(s->baser[index], 32, 32); 11221b08e436SShashi Mallela } else { 11231b08e436SShashi Mallela *data = extract64(s->baser[index], 0, 32); 11241b08e436SShashi Mallela } 11251b08e436SShashi Mallela break; 11261b08e436SShashi Mallela default: 11271b08e436SShashi Mallela result = false; 11281b08e436SShashi Mallela break; 11291b08e436SShashi Mallela } 113018f6290aSShashi Mallela return result; 113118f6290aSShashi Mallela } 113218f6290aSShashi Mallela 113318f6290aSShashi Mallela static bool its_writell(GICv3ITSState *s, hwaddr offset, 113418f6290aSShashi Mallela uint64_t value, MemTxAttrs attrs) 113518f6290aSShashi Mallela { 113618f6290aSShashi Mallela bool result = true; 11371b08e436SShashi Mallela int index; 113818f6290aSShashi Mallela 11391b08e436SShashi Mallela switch (offset) { 11401b08e436SShashi Mallela case GITS_BASER ... GITS_BASER + 0x3f: 11411b08e436SShashi Mallela /* 11421b08e436SShashi Mallela * IMPDEF choice:- GITS_BASERn register becomes RO if ITS is 11431b08e436SShashi Mallela * already enabled 11441b08e436SShashi Mallela */ 11458d2d6dd9SPeter Maydell if (!(s->ctlr & R_GITS_CTLR_ENABLED_MASK)) { 11461b08e436SShashi Mallela index = (offset - GITS_BASER) / 8; 11470ffe88e6SPeter Maydell if (s->baser[index] == 0) { 11480ffe88e6SPeter Maydell /* Unimplemented GITS_BASERn: RAZ/WI */ 11490ffe88e6SPeter Maydell break; 11500ffe88e6SPeter Maydell } 11511b08e436SShashi Mallela s->baser[index] &= GITS_BASER_RO_MASK; 11521b08e436SShashi Mallela s->baser[index] |= (value & ~GITS_BASER_RO_MASK); 11531b08e436SShashi Mallela } 11541b08e436SShashi Mallela break; 11551b08e436SShashi Mallela case GITS_CBASER: 11561b08e436SShashi Mallela /* 11571b08e436SShashi Mallela * IMPDEF choice:- GITS_CBASER register becomes RO if ITS is 11581b08e436SShashi Mallela * already enabled 11591b08e436SShashi Mallela */ 11608d2d6dd9SPeter Maydell if (!(s->ctlr & R_GITS_CTLR_ENABLED_MASK)) { 11611b08e436SShashi Mallela s->cbaser = value; 11621b08e436SShashi Mallela s->creadr = 0; 11631b08e436SShashi Mallela } 11641b08e436SShashi Mallela break; 11651b08e436SShashi Mallela case GITS_CWRITER: 11661b08e436SShashi Mallela s->cwriter = value & ~R_GITS_CWRITER_RETRY_MASK; 11677eca39e0SShashi Mallela if (s->cwriter != s->creadr) { 11687eca39e0SShashi Mallela process_cmdq(s); 11697eca39e0SShashi Mallela } 11701b08e436SShashi Mallela break; 11711b08e436SShashi Mallela case GITS_CREADR: 11721b08e436SShashi Mallela if (s->gicv3->gicd_ctlr & GICD_CTLR_DS) { 11731b08e436SShashi Mallela s->creadr = value & ~R_GITS_CREADR_STALLED_MASK; 11741b08e436SShashi Mallela } else { 11751b08e436SShashi Mallela /* RO register, ignore the write */ 11761b08e436SShashi Mallela qemu_log_mask(LOG_GUEST_ERROR, 11771b08e436SShashi Mallela "%s: invalid guest write to RO register at offset " 11781b08e436SShashi Mallela TARGET_FMT_plx "\n", __func__, offset); 11791b08e436SShashi Mallela } 11801b08e436SShashi Mallela break; 11811b08e436SShashi Mallela case GITS_TYPER: 11821b08e436SShashi Mallela /* RO registers, ignore the write */ 11831b08e436SShashi Mallela qemu_log_mask(LOG_GUEST_ERROR, 11841b08e436SShashi Mallela "%s: invalid guest write to RO register at offset " 11851b08e436SShashi Mallela TARGET_FMT_plx "\n", __func__, offset); 11861b08e436SShashi Mallela break; 11871b08e436SShashi Mallela default: 11881b08e436SShashi Mallela result = false; 11891b08e436SShashi Mallela break; 11901b08e436SShashi Mallela } 119118f6290aSShashi Mallela return result; 119218f6290aSShashi Mallela } 119318f6290aSShashi Mallela 119418f6290aSShashi Mallela static bool its_readll(GICv3ITSState *s, hwaddr offset, 119518f6290aSShashi Mallela uint64_t *data, MemTxAttrs attrs) 119618f6290aSShashi Mallela { 119718f6290aSShashi Mallela bool result = true; 11981b08e436SShashi Mallela int index; 119918f6290aSShashi Mallela 12001b08e436SShashi Mallela switch (offset) { 12011b08e436SShashi Mallela case GITS_TYPER: 12021b08e436SShashi Mallela *data = s->typer; 12031b08e436SShashi Mallela break; 12041b08e436SShashi Mallela case GITS_BASER ... GITS_BASER + 0x3f: 12051b08e436SShashi Mallela index = (offset - GITS_BASER) / 8; 12061b08e436SShashi Mallela *data = s->baser[index]; 12071b08e436SShashi Mallela break; 12081b08e436SShashi Mallela case GITS_CBASER: 12091b08e436SShashi Mallela *data = s->cbaser; 12101b08e436SShashi Mallela break; 12111b08e436SShashi Mallela case GITS_CREADR: 12121b08e436SShashi Mallela *data = s->creadr; 12131b08e436SShashi Mallela break; 12141b08e436SShashi Mallela case GITS_CWRITER: 12151b08e436SShashi Mallela *data = s->cwriter; 12161b08e436SShashi Mallela break; 12171b08e436SShashi Mallela default: 12181b08e436SShashi Mallela result = false; 12191b08e436SShashi Mallela break; 12201b08e436SShashi Mallela } 122118f6290aSShashi Mallela return result; 122218f6290aSShashi Mallela } 122318f6290aSShashi Mallela 122418f6290aSShashi Mallela static MemTxResult gicv3_its_read(void *opaque, hwaddr offset, uint64_t *data, 122518f6290aSShashi Mallela unsigned size, MemTxAttrs attrs) 122618f6290aSShashi Mallela { 122718f6290aSShashi Mallela GICv3ITSState *s = (GICv3ITSState *)opaque; 122818f6290aSShashi Mallela bool result; 122918f6290aSShashi Mallela 123018f6290aSShashi Mallela switch (size) { 123118f6290aSShashi Mallela case 4: 123218f6290aSShashi Mallela result = its_readl(s, offset, data, attrs); 123318f6290aSShashi Mallela break; 123418f6290aSShashi Mallela case 8: 123518f6290aSShashi Mallela result = its_readll(s, offset, data, attrs); 123618f6290aSShashi Mallela break; 123718f6290aSShashi Mallela default: 123818f6290aSShashi Mallela result = false; 123918f6290aSShashi Mallela break; 124018f6290aSShashi Mallela } 124118f6290aSShashi Mallela 124218f6290aSShashi Mallela if (!result) { 124318f6290aSShashi Mallela qemu_log_mask(LOG_GUEST_ERROR, 124418f6290aSShashi Mallela "%s: invalid guest read at offset " TARGET_FMT_plx 124518f6290aSShashi Mallela "size %u\n", __func__, offset, size); 1246195209d3SPeter Maydell trace_gicv3_its_badread(offset, size); 124718f6290aSShashi Mallela /* 124818f6290aSShashi Mallela * The spec requires that reserved registers are RAZ/WI; 124918f6290aSShashi Mallela * so use false returns from leaf functions as a way to 125018f6290aSShashi Mallela * trigger the guest-error logging but don't return it to 125118f6290aSShashi Mallela * the caller, or we'll cause a spurious guest data abort. 125218f6290aSShashi Mallela */ 125318f6290aSShashi Mallela *data = 0; 1254195209d3SPeter Maydell } else { 1255195209d3SPeter Maydell trace_gicv3_its_read(offset, *data, size); 125618f6290aSShashi Mallela } 125718f6290aSShashi Mallela return MEMTX_OK; 125818f6290aSShashi Mallela } 125918f6290aSShashi Mallela 126018f6290aSShashi Mallela static MemTxResult gicv3_its_write(void *opaque, hwaddr offset, uint64_t data, 126118f6290aSShashi Mallela unsigned size, MemTxAttrs attrs) 126218f6290aSShashi Mallela { 126318f6290aSShashi Mallela GICv3ITSState *s = (GICv3ITSState *)opaque; 126418f6290aSShashi Mallela bool result; 126518f6290aSShashi Mallela 126618f6290aSShashi Mallela switch (size) { 126718f6290aSShashi Mallela case 4: 126818f6290aSShashi Mallela result = its_writel(s, offset, data, attrs); 126918f6290aSShashi Mallela break; 127018f6290aSShashi Mallela case 8: 127118f6290aSShashi Mallela result = its_writell(s, offset, data, attrs); 127218f6290aSShashi Mallela break; 127318f6290aSShashi Mallela default: 127418f6290aSShashi Mallela result = false; 127518f6290aSShashi Mallela break; 127618f6290aSShashi Mallela } 127718f6290aSShashi Mallela 127818f6290aSShashi Mallela if (!result) { 127918f6290aSShashi Mallela qemu_log_mask(LOG_GUEST_ERROR, 128018f6290aSShashi Mallela "%s: invalid guest write at offset " TARGET_FMT_plx 128118f6290aSShashi Mallela "size %u\n", __func__, offset, size); 1282195209d3SPeter Maydell trace_gicv3_its_badwrite(offset, data, size); 128318f6290aSShashi Mallela /* 128418f6290aSShashi Mallela * The spec requires that reserved registers are RAZ/WI; 128518f6290aSShashi Mallela * so use false returns from leaf functions as a way to 128618f6290aSShashi Mallela * trigger the guest-error logging but don't return it to 128718f6290aSShashi Mallela * the caller, or we'll cause a spurious guest data abort. 128818f6290aSShashi Mallela */ 1289195209d3SPeter Maydell } else { 1290195209d3SPeter Maydell trace_gicv3_its_write(offset, data, size); 129118f6290aSShashi Mallela } 129218f6290aSShashi Mallela return MEMTX_OK; 129318f6290aSShashi Mallela } 129418f6290aSShashi Mallela 129518f6290aSShashi Mallela static const MemoryRegionOps gicv3_its_control_ops = { 129618f6290aSShashi Mallela .read_with_attrs = gicv3_its_read, 129718f6290aSShashi Mallela .write_with_attrs = gicv3_its_write, 129818f6290aSShashi Mallela .valid.min_access_size = 4, 129918f6290aSShashi Mallela .valid.max_access_size = 8, 130018f6290aSShashi Mallela .impl.min_access_size = 4, 130118f6290aSShashi Mallela .impl.max_access_size = 8, 130218f6290aSShashi Mallela .endianness = DEVICE_NATIVE_ENDIAN, 130318f6290aSShashi Mallela }; 130418f6290aSShashi Mallela 130518f6290aSShashi Mallela static const MemoryRegionOps gicv3_its_translation_ops = { 13067e062b98SPeter Maydell .read_with_attrs = gicv3_its_translation_read, 130718f6290aSShashi Mallela .write_with_attrs = gicv3_its_translation_write, 130818f6290aSShashi Mallela .valid.min_access_size = 2, 130918f6290aSShashi Mallela .valid.max_access_size = 4, 131018f6290aSShashi Mallela .impl.min_access_size = 2, 131118f6290aSShashi Mallela .impl.max_access_size = 4, 131218f6290aSShashi Mallela .endianness = DEVICE_NATIVE_ENDIAN, 131318f6290aSShashi Mallela }; 131418f6290aSShashi Mallela 131518f6290aSShashi Mallela static void gicv3_arm_its_realize(DeviceState *dev, Error **errp) 131618f6290aSShashi Mallela { 131718f6290aSShashi Mallela GICv3ITSState *s = ARM_GICV3_ITS_COMMON(dev); 131818f6290aSShashi Mallela int i; 131918f6290aSShashi Mallela 132018f6290aSShashi Mallela for (i = 0; i < s->gicv3->num_cpu; i++) { 132118f6290aSShashi Mallela if (!(s->gicv3->cpu[i].gicr_typer & GICR_TYPER_PLPIS)) { 132218f6290aSShashi Mallela error_setg(errp, "Physical LPI not supported by CPU %d", i); 132318f6290aSShashi Mallela return; 132418f6290aSShashi Mallela } 132518f6290aSShashi Mallela } 132618f6290aSShashi Mallela 132718f6290aSShashi Mallela gicv3_its_init_mmio(s, &gicv3_its_control_ops, &gicv3_its_translation_ops); 132818f6290aSShashi Mallela 132918f6290aSShashi Mallela /* set the ITS default features supported */ 1330764d6ba1SPeter Maydell s->typer = FIELD_DP64(s->typer, GITS_TYPER, PHYSICAL, 1); 133118f6290aSShashi Mallela s->typer = FIELD_DP64(s->typer, GITS_TYPER, ITT_ENTRY_SIZE, 133218f6290aSShashi Mallela ITS_ITT_ENTRY_SIZE - 1); 133318f6290aSShashi Mallela s->typer = FIELD_DP64(s->typer, GITS_TYPER, IDBITS, ITS_IDBITS); 133418f6290aSShashi Mallela s->typer = FIELD_DP64(s->typer, GITS_TYPER, DEVBITS, ITS_DEVBITS); 133518f6290aSShashi Mallela s->typer = FIELD_DP64(s->typer, GITS_TYPER, CIL, 1); 133618f6290aSShashi Mallela s->typer = FIELD_DP64(s->typer, GITS_TYPER, CIDBITS, ITS_CIDBITS); 133718f6290aSShashi Mallela } 133818f6290aSShashi Mallela 133918f6290aSShashi Mallela static void gicv3_its_reset(DeviceState *dev) 134018f6290aSShashi Mallela { 134118f6290aSShashi Mallela GICv3ITSState *s = ARM_GICV3_ITS_COMMON(dev); 134218f6290aSShashi Mallela GICv3ITSClass *c = ARM_GICV3_ITS_GET_CLASS(s); 134318f6290aSShashi Mallela 134418f6290aSShashi Mallela c->parent_reset(dev); 134518f6290aSShashi Mallela 134618f6290aSShashi Mallela /* Quiescent bit reset to 1 */ 134718f6290aSShashi Mallela s->ctlr = FIELD_DP32(s->ctlr, GITS_CTLR, QUIESCENT, 1); 134818f6290aSShashi Mallela 134918f6290aSShashi Mallela /* 135018f6290aSShashi Mallela * setting GITS_BASER0.Type = 0b001 (Device) 135118f6290aSShashi Mallela * GITS_BASER1.Type = 0b100 (Collection Table) 135218f6290aSShashi Mallela * GITS_BASER<n>.Type,where n = 3 to 7 are 0b00 (Unimplemented) 135318f6290aSShashi Mallela * GITS_BASER<0,1>.Page_Size = 64KB 135418f6290aSShashi Mallela * and default translation table entry size to 16 bytes 135518f6290aSShashi Mallela */ 135618f6290aSShashi Mallela s->baser[0] = FIELD_DP64(s->baser[0], GITS_BASER, TYPE, 135718f6290aSShashi Mallela GITS_BASER_TYPE_DEVICE); 135818f6290aSShashi Mallela s->baser[0] = FIELD_DP64(s->baser[0], GITS_BASER, PAGESIZE, 135918f6290aSShashi Mallela GITS_BASER_PAGESIZE_64K); 136018f6290aSShashi Mallela s->baser[0] = FIELD_DP64(s->baser[0], GITS_BASER, ENTRYSIZE, 136118f6290aSShashi Mallela GITS_DTE_SIZE - 1); 136218f6290aSShashi Mallela 136318f6290aSShashi Mallela s->baser[1] = FIELD_DP64(s->baser[1], GITS_BASER, TYPE, 136418f6290aSShashi Mallela GITS_BASER_TYPE_COLLECTION); 136518f6290aSShashi Mallela s->baser[1] = FIELD_DP64(s->baser[1], GITS_BASER, PAGESIZE, 136618f6290aSShashi Mallela GITS_BASER_PAGESIZE_64K); 136718f6290aSShashi Mallela s->baser[1] = FIELD_DP64(s->baser[1], GITS_BASER, ENTRYSIZE, 136818f6290aSShashi Mallela GITS_CTE_SIZE - 1); 136918f6290aSShashi Mallela } 137018f6290aSShashi Mallela 13711b08e436SShashi Mallela static void gicv3_its_post_load(GICv3ITSState *s) 13721b08e436SShashi Mallela { 13738d2d6dd9SPeter Maydell if (s->ctlr & R_GITS_CTLR_ENABLED_MASK) { 13741b08e436SShashi Mallela extract_table_params(s); 13751b08e436SShashi Mallela extract_cmdq_params(s); 13761b08e436SShashi Mallela } 13771b08e436SShashi Mallela } 13781b08e436SShashi Mallela 137918f6290aSShashi Mallela static Property gicv3_its_props[] = { 138018f6290aSShashi Mallela DEFINE_PROP_LINK("parent-gicv3", GICv3ITSState, gicv3, "arm-gicv3", 138118f6290aSShashi Mallela GICv3State *), 138218f6290aSShashi Mallela DEFINE_PROP_END_OF_LIST(), 138318f6290aSShashi Mallela }; 138418f6290aSShashi Mallela 138518f6290aSShashi Mallela static void gicv3_its_class_init(ObjectClass *klass, void *data) 138618f6290aSShashi Mallela { 138718f6290aSShashi Mallela DeviceClass *dc = DEVICE_CLASS(klass); 138818f6290aSShashi Mallela GICv3ITSClass *ic = ARM_GICV3_ITS_CLASS(klass); 13891b08e436SShashi Mallela GICv3ITSCommonClass *icc = ARM_GICV3_ITS_COMMON_CLASS(klass); 139018f6290aSShashi Mallela 139118f6290aSShashi Mallela dc->realize = gicv3_arm_its_realize; 139218f6290aSShashi Mallela device_class_set_props(dc, gicv3_its_props); 139318f6290aSShashi Mallela device_class_set_parent_reset(dc, gicv3_its_reset, &ic->parent_reset); 13941b08e436SShashi Mallela icc->post_load = gicv3_its_post_load; 139518f6290aSShashi Mallela } 139618f6290aSShashi Mallela 139718f6290aSShashi Mallela static const TypeInfo gicv3_its_info = { 139818f6290aSShashi Mallela .name = TYPE_ARM_GICV3_ITS, 139918f6290aSShashi Mallela .parent = TYPE_ARM_GICV3_ITS_COMMON, 140018f6290aSShashi Mallela .instance_size = sizeof(GICv3ITSState), 140118f6290aSShashi Mallela .class_init = gicv3_its_class_init, 140218f6290aSShashi Mallela .class_size = sizeof(GICv3ITSClass), 140318f6290aSShashi Mallela }; 140418f6290aSShashi Mallela 140518f6290aSShashi Mallela static void gicv3_its_register_types(void) 140618f6290aSShashi Mallela { 140718f6290aSShashi Mallela type_register_static(&gicv3_its_info); 140818f6290aSShashi Mallela } 140918f6290aSShashi Mallela 141018f6290aSShashi Mallela type_init(gicv3_its_register_types) 1411