xref: /qemu/hw/ipmi/isa_ipmi_bt.c (revision f4014512cda682a9d0c75310d278d7ae96b0505c)
1a9b74079SCorey Minyard /*
2a9b74079SCorey Minyard  * QEMU ISA IPMI BT emulation
3a9b74079SCorey Minyard  *
4a9b74079SCorey Minyard  * Copyright (c) 2015 Corey Minyard, MontaVista Software, LLC
5a9b74079SCorey Minyard  *
6a9b74079SCorey Minyard  * Permission is hereby granted, free of charge, to any person obtaining a copy
7a9b74079SCorey Minyard  * of this software and associated documentation files (the "Software"), to deal
8a9b74079SCorey Minyard  * in the Software without restriction, including without limitation the rights
9a9b74079SCorey Minyard  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10a9b74079SCorey Minyard  * copies of the Software, and to permit persons to whom the Software is
11a9b74079SCorey Minyard  * furnished to do so, subject to the following conditions:
12a9b74079SCorey Minyard  *
13a9b74079SCorey Minyard  * The above copyright notice and this permission notice shall be included in
14a9b74079SCorey Minyard  * all copies or substantial portions of the Software.
15a9b74079SCorey Minyard  *
16a9b74079SCorey Minyard  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17a9b74079SCorey Minyard  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18a9b74079SCorey Minyard  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19a9b74079SCorey Minyard  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20a9b74079SCorey Minyard  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21a9b74079SCorey Minyard  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22a9b74079SCorey Minyard  * THE SOFTWARE.
23a9b74079SCorey Minyard  */
24a9b74079SCorey Minyard #include "hw/hw.h"
25a9b74079SCorey Minyard #include "hw/ipmi/ipmi.h"
26a9b74079SCorey Minyard #include "hw/isa/isa.h"
27a9b74079SCorey Minyard #include "hw/i386/pc.h"
28a9b74079SCorey Minyard 
29a9b74079SCorey Minyard /* Control register */
30a9b74079SCorey Minyard #define IPMI_BT_CLR_WR_BIT         0
31a9b74079SCorey Minyard #define IPMI_BT_CLR_RD_BIT         1
32a9b74079SCorey Minyard #define IPMI_BT_H2B_ATN_BIT        2
33a9b74079SCorey Minyard #define IPMI_BT_B2H_ATN_BIT        3
34a9b74079SCorey Minyard #define IPMI_BT_SMS_ATN_BIT        4
35a9b74079SCorey Minyard #define IPMI_BT_HBUSY_BIT          6
36a9b74079SCorey Minyard #define IPMI_BT_BBUSY_BIT          7
37a9b74079SCorey Minyard 
38a9b74079SCorey Minyard #define IPMI_BT_CLR_WR_MASK        (1 << IPMI_BT_CLR_WR_BIT)
39a9b74079SCorey Minyard #define IPMI_BT_GET_CLR_WR(d)      (((d) >> IPMI_BT_CLR_WR_BIT) & 0x1)
40a9b74079SCorey Minyard #define IPMI_BT_SET_CLR_WR(d, v)   (d) = (((d) & ~IPMI_BT_CLR_WR_MASK) | \
41a9b74079SCorey Minyard                                        (((v & 1) << IPMI_BT_CLR_WR_BIT)))
42a9b74079SCorey Minyard 
43a9b74079SCorey Minyard #define IPMI_BT_CLR_RD_MASK        (1 << IPMI_BT_CLR_RD_BIT)
44a9b74079SCorey Minyard #define IPMI_BT_GET_CLR_RD(d)      (((d) >> IPMI_BT_CLR_RD_BIT) & 0x1)
45a9b74079SCorey Minyard #define IPMI_BT_SET_CLR_RD(d, v)   (d) = (((d) & ~IPMI_BT_CLR_RD_MASK) | \
46a9b74079SCorey Minyard                                        (((v & 1) << IPMI_BT_CLR_RD_BIT)))
47a9b74079SCorey Minyard 
48a9b74079SCorey Minyard #define IPMI_BT_H2B_ATN_MASK       (1 << IPMI_BT_H2B_ATN_BIT)
49a9b74079SCorey Minyard #define IPMI_BT_GET_H2B_ATN(d)     (((d) >> IPMI_BT_H2B_ATN_BIT) & 0x1)
50a9b74079SCorey Minyard #define IPMI_BT_SET_H2B_ATN(d, v)  (d) = (((d) & ~IPMI_BT_H2B_ATN_MASK) | \
51a9b74079SCorey Minyard                                         (((v & 1) << IPMI_BT_H2B_ATN_BIT)))
52a9b74079SCorey Minyard 
53a9b74079SCorey Minyard #define IPMI_BT_B2H_ATN_MASK       (1 << IPMI_BT_B2H_ATN_BIT)
54a9b74079SCorey Minyard #define IPMI_BT_GET_B2H_ATN(d)     (((d) >> IPMI_BT_B2H_ATN_BIT) & 0x1)
55a9b74079SCorey Minyard #define IPMI_BT_SET_B2H_ATN(d, v)  (d) = (((d) & ~IPMI_BT_B2H_ATN_MASK) | \
56a9b74079SCorey Minyard                                         (((v & 1) << IPMI_BT_B2H_ATN_BIT)))
57a9b74079SCorey Minyard 
58a9b74079SCorey Minyard #define IPMI_BT_SMS_ATN_MASK       (1 << IPMI_BT_SMS_ATN_BIT)
59a9b74079SCorey Minyard #define IPMI_BT_GET_SMS_ATN(d)     (((d) >> IPMI_BT_SMS_ATN_BIT) & 0x1)
60a9b74079SCorey Minyard #define IPMI_BT_SET_SMS_ATN(d, v)  (d) = (((d) & ~IPMI_BT_SMS_ATN_MASK) | \
61a9b74079SCorey Minyard                                         (((v & 1) << IPMI_BT_SMS_ATN_BIT)))
62a9b74079SCorey Minyard 
63a9b74079SCorey Minyard #define IPMI_BT_HBUSY_MASK         (1 << IPMI_BT_HBUSY_BIT)
64a9b74079SCorey Minyard #define IPMI_BT_GET_HBUSY(d)       (((d) >> IPMI_BT_HBUSY_BIT) & 0x1)
65a9b74079SCorey Minyard #define IPMI_BT_SET_HBUSY(d, v)    (d) = (((d) & ~IPMI_BT_HBUSY_MASK) | \
66a9b74079SCorey Minyard                                        (((v & 1) << IPMI_BT_HBUSY_BIT)))
67a9b74079SCorey Minyard 
68a9b74079SCorey Minyard #define IPMI_BT_BBUSY_MASK         (1 << IPMI_BT_BBUSY_BIT)
69a9b74079SCorey Minyard #define IPMI_BT_GET_BBUSY(d)       (((d) >> IPMI_BT_BBUSY_BIT) & 0x1)
70a9b74079SCorey Minyard #define IPMI_BT_SET_BBUSY(d, v)    (d) = (((d) & ~IPMI_BT_BBUSY_MASK) | \
71a9b74079SCorey Minyard                                        (((v & 1) << IPMI_BT_BBUSY_BIT)))
72a9b74079SCorey Minyard 
73a9b74079SCorey Minyard 
74a9b74079SCorey Minyard /* Mask register */
75a9b74079SCorey Minyard #define IPMI_BT_B2H_IRQ_EN_BIT     0
76a9b74079SCorey Minyard #define IPMI_BT_B2H_IRQ_BIT        1
77a9b74079SCorey Minyard 
78a9b74079SCorey Minyard #define IPMI_BT_B2H_IRQ_EN_MASK      (1 << IPMI_BT_B2H_IRQ_EN_BIT)
79a9b74079SCorey Minyard #define IPMI_BT_GET_B2H_IRQ_EN(d)    (((d) >> IPMI_BT_B2H_IRQ_EN_BIT) & 0x1)
80a9b74079SCorey Minyard #define IPMI_BT_SET_B2H_IRQ_EN(d, v) (d) = (((d) & ~IPMI_BT_B2H_IRQ_EN_MASK) | \
81a9b74079SCorey Minyard                                         (((v & 1) << IPMI_BT_B2H_IRQ_EN_BIT)))
82a9b74079SCorey Minyard 
83a9b74079SCorey Minyard #define IPMI_BT_B2H_IRQ_MASK         (1 << IPMI_BT_B2H_IRQ_BIT)
84a9b74079SCorey Minyard #define IPMI_BT_GET_B2H_IRQ(d)       (((d) >> IPMI_BT_B2H_IRQ_BIT) & 0x1)
85a9b74079SCorey Minyard #define IPMI_BT_SET_B2H_IRQ(d, v)    (d) = (((d) & ~IPMI_BT_B2H_IRQ_MASK) | \
86a9b74079SCorey Minyard                                         (((v & 1) << IPMI_BT_B2H_IRQ_BIT)))
87a9b74079SCorey Minyard 
88a9b74079SCorey Minyard typedef struct IPMIBT {
89a9b74079SCorey Minyard     IPMIBmc *bmc;
90a9b74079SCorey Minyard 
91a9b74079SCorey Minyard     bool do_wake;
92a9b74079SCorey Minyard 
93a9b74079SCorey Minyard     qemu_irq irq;
94a9b74079SCorey Minyard 
95a9b74079SCorey Minyard     uint32_t io_base;
96a9b74079SCorey Minyard     unsigned long io_length;
97a9b74079SCorey Minyard     MemoryRegion io;
98a9b74079SCorey Minyard 
99a9b74079SCorey Minyard     bool obf_irq_set;
100a9b74079SCorey Minyard     bool atn_irq_set;
101a9b74079SCorey Minyard     bool use_irq;
102a9b74079SCorey Minyard     bool irqs_enabled;
103a9b74079SCorey Minyard 
104a9b74079SCorey Minyard     uint8_t outmsg[MAX_IPMI_MSG_SIZE];
105a9b74079SCorey Minyard     uint32_t outpos;
106a9b74079SCorey Minyard     uint32_t outlen;
107a9b74079SCorey Minyard 
108a9b74079SCorey Minyard     uint8_t inmsg[MAX_IPMI_MSG_SIZE];
109a9b74079SCorey Minyard     uint32_t inlen;
110a9b74079SCorey Minyard 
111a9b74079SCorey Minyard     uint8_t control_reg;
112a9b74079SCorey Minyard     uint8_t mask_reg;
113a9b74079SCorey Minyard 
114a9b74079SCorey Minyard     /*
115a9b74079SCorey Minyard      * This is a response number that we send with the command to make
116a9b74079SCorey Minyard      * sure that the response matches the command.
117a9b74079SCorey Minyard      */
118a9b74079SCorey Minyard     uint8_t waiting_rsp;
119a9b74079SCorey Minyard     uint8_t waiting_seq;
120a9b74079SCorey Minyard } IPMIBT;
121a9b74079SCorey Minyard 
122a9b74079SCorey Minyard #define IPMI_CMD_GET_BT_INTF_CAP        0x36
123a9b74079SCorey Minyard 
124a9b74079SCorey Minyard static void ipmi_bt_handle_event(IPMIInterface *ii)
125a9b74079SCorey Minyard {
126a9b74079SCorey Minyard     IPMIInterfaceClass *iic = IPMI_INTERFACE_GET_CLASS(ii);
127a9b74079SCorey Minyard     IPMIBT *ib = iic->get_backend_data(ii);
128a9b74079SCorey Minyard 
129a9b74079SCorey Minyard     if (ib->inlen < 4) {
130a9b74079SCorey Minyard         goto out;
131a9b74079SCorey Minyard     }
132a9b74079SCorey Minyard     /* Note that overruns are handled by handle_command */
133a9b74079SCorey Minyard     if (ib->inmsg[0] != (ib->inlen - 1)) {
134a9b74079SCorey Minyard         /* Length mismatch, just ignore. */
135a9b74079SCorey Minyard         IPMI_BT_SET_BBUSY(ib->control_reg, 1);
136a9b74079SCorey Minyard         ib->inlen = 0;
137a9b74079SCorey Minyard         goto out;
138a9b74079SCorey Minyard     }
139a9b74079SCorey Minyard     if ((ib->inmsg[1] == (IPMI_NETFN_APP << 2)) &&
140a9b74079SCorey Minyard                         (ib->inmsg[3] == IPMI_CMD_GET_BT_INTF_CAP)) {
141a9b74079SCorey Minyard         /* We handle this one ourselves. */
142a9b74079SCorey Minyard         ib->outmsg[0] = 9;
143a9b74079SCorey Minyard         ib->outmsg[1] = ib->inmsg[1] | 0x04;
144a9b74079SCorey Minyard         ib->outmsg[2] = ib->inmsg[2];
145a9b74079SCorey Minyard         ib->outmsg[3] = ib->inmsg[3];
146a9b74079SCorey Minyard         ib->outmsg[4] = 0;
147a9b74079SCorey Minyard         ib->outmsg[5] = 1; /* Only support 1 outstanding request. */
148a9b74079SCorey Minyard         if (sizeof(ib->inmsg) > 0xff) { /* Input buffer size */
149a9b74079SCorey Minyard             ib->outmsg[6] = 0xff;
150a9b74079SCorey Minyard         } else {
151a9b74079SCorey Minyard             ib->outmsg[6] = (unsigned char) sizeof(ib->inmsg);
152a9b74079SCorey Minyard         }
153a9b74079SCorey Minyard         if (sizeof(ib->outmsg) > 0xff) { /* Output buffer size */
154a9b74079SCorey Minyard             ib->outmsg[7] = 0xff;
155a9b74079SCorey Minyard         } else {
156a9b74079SCorey Minyard             ib->outmsg[7] = (unsigned char) sizeof(ib->outmsg);
157a9b74079SCorey Minyard         }
158a9b74079SCorey Minyard         ib->outmsg[8] = 10; /* Max request to response time */
159a9b74079SCorey Minyard         ib->outmsg[9] = 0; /* Don't recommend retries */
160a9b74079SCorey Minyard         ib->outlen = 10;
161a9b74079SCorey Minyard         IPMI_BT_SET_BBUSY(ib->control_reg, 0);
162a9b74079SCorey Minyard         IPMI_BT_SET_B2H_ATN(ib->control_reg, 1);
163a9b74079SCorey Minyard         if (ib->use_irq && ib->irqs_enabled &&
164a9b74079SCorey Minyard                 !IPMI_BT_GET_B2H_IRQ(ib->mask_reg) &&
165a9b74079SCorey Minyard                 IPMI_BT_GET_B2H_IRQ_EN(ib->mask_reg)) {
166a9b74079SCorey Minyard             IPMI_BT_SET_B2H_IRQ(ib->mask_reg, 1);
167a9b74079SCorey Minyard             qemu_irq_raise(ib->irq);
168a9b74079SCorey Minyard         }
169a9b74079SCorey Minyard         goto out;
170a9b74079SCorey Minyard     }
171a9b74079SCorey Minyard     ib->waiting_seq = ib->inmsg[2];
172a9b74079SCorey Minyard     ib->inmsg[2] = ib->inmsg[1];
173a9b74079SCorey Minyard     {
174a9b74079SCorey Minyard         IPMIBmcClass *bk = IPMI_BMC_GET_CLASS(ib->bmc);
175a9b74079SCorey Minyard         bk->handle_command(ib->bmc, ib->inmsg + 2, ib->inlen - 2,
176a9b74079SCorey Minyard                            sizeof(ib->inmsg), ib->waiting_rsp);
177a9b74079SCorey Minyard     }
178a9b74079SCorey Minyard  out:
179a9b74079SCorey Minyard     return;
180a9b74079SCorey Minyard }
181a9b74079SCorey Minyard 
182a9b74079SCorey Minyard static void ipmi_bt_handle_rsp(IPMIInterface *ii, uint8_t msg_id,
183a9b74079SCorey Minyard                                 unsigned char *rsp, unsigned int rsp_len)
184a9b74079SCorey Minyard {
185a9b74079SCorey Minyard     IPMIInterfaceClass *iic = IPMI_INTERFACE_GET_CLASS(ii);
186a9b74079SCorey Minyard     IPMIBT *ib = iic->get_backend_data(ii);
187a9b74079SCorey Minyard 
188a9b74079SCorey Minyard     if (ib->waiting_rsp == msg_id) {
189a9b74079SCorey Minyard         ib->waiting_rsp++;
190a9b74079SCorey Minyard         if (rsp_len > (sizeof(ib->outmsg) - 2)) {
191a9b74079SCorey Minyard             ib->outmsg[0] = 4;
192a9b74079SCorey Minyard             ib->outmsg[1] = rsp[0];
193a9b74079SCorey Minyard             ib->outmsg[2] = ib->waiting_seq;
194a9b74079SCorey Minyard             ib->outmsg[3] = rsp[1];
195a9b74079SCorey Minyard             ib->outmsg[4] = IPMI_CC_CANNOT_RETURN_REQ_NUM_BYTES;
196a9b74079SCorey Minyard             ib->outlen = 5;
197a9b74079SCorey Minyard         } else {
198a9b74079SCorey Minyard             ib->outmsg[0] = rsp_len + 1;
199a9b74079SCorey Minyard             ib->outmsg[1] = rsp[0];
200a9b74079SCorey Minyard             ib->outmsg[2] = ib->waiting_seq;
201a9b74079SCorey Minyard             memcpy(ib->outmsg + 3, rsp + 1, rsp_len - 1);
202a9b74079SCorey Minyard             ib->outlen = rsp_len + 2;
203a9b74079SCorey Minyard         }
204a9b74079SCorey Minyard         IPMI_BT_SET_BBUSY(ib->control_reg, 0);
205a9b74079SCorey Minyard         IPMI_BT_SET_B2H_ATN(ib->control_reg, 1);
206a9b74079SCorey Minyard         if (ib->use_irq && ib->irqs_enabled &&
207a9b74079SCorey Minyard                 !IPMI_BT_GET_B2H_IRQ(ib->mask_reg) &&
208a9b74079SCorey Minyard                 IPMI_BT_GET_B2H_IRQ_EN(ib->mask_reg)) {
209a9b74079SCorey Minyard             IPMI_BT_SET_B2H_IRQ(ib->mask_reg, 1);
210a9b74079SCorey Minyard             qemu_irq_raise(ib->irq);
211a9b74079SCorey Minyard         }
212a9b74079SCorey Minyard     }
213a9b74079SCorey Minyard }
214a9b74079SCorey Minyard 
215a9b74079SCorey Minyard 
216a9b74079SCorey Minyard static uint64_t ipmi_bt_ioport_read(void *opaque, hwaddr addr, unsigned size)
217a9b74079SCorey Minyard {
218a9b74079SCorey Minyard     IPMIInterface *ii = opaque;
219a9b74079SCorey Minyard     IPMIInterfaceClass *iic = IPMI_INTERFACE_GET_CLASS(ii);
220a9b74079SCorey Minyard     IPMIBT *ib = iic->get_backend_data(ii);
221a9b74079SCorey Minyard     uint32_t ret = 0xff;
222a9b74079SCorey Minyard 
223a9b74079SCorey Minyard     switch (addr & 3) {
224a9b74079SCorey Minyard     case 0:
225a9b74079SCorey Minyard         ret = ib->control_reg;
226a9b74079SCorey Minyard         break;
227a9b74079SCorey Minyard     case 1:
228a9b74079SCorey Minyard         if (ib->outpos < ib->outlen) {
229a9b74079SCorey Minyard             ret = ib->outmsg[ib->outpos];
230a9b74079SCorey Minyard             ib->outpos++;
231a9b74079SCorey Minyard             if (ib->outpos == ib->outlen) {
232a9b74079SCorey Minyard                 ib->outpos = 0;
233a9b74079SCorey Minyard                 ib->outlen = 0;
234a9b74079SCorey Minyard             }
235a9b74079SCorey Minyard         } else {
236a9b74079SCorey Minyard             ret = 0xff;
237a9b74079SCorey Minyard         }
238a9b74079SCorey Minyard         break;
239a9b74079SCorey Minyard     case 2:
240a9b74079SCorey Minyard         ret = ib->mask_reg;
241a9b74079SCorey Minyard         break;
242a9b74079SCorey Minyard     }
243a9b74079SCorey Minyard     return ret;
244a9b74079SCorey Minyard }
245a9b74079SCorey Minyard 
246a9b74079SCorey Minyard static void ipmi_bt_signal(IPMIBT *ib, IPMIInterface *ii)
247a9b74079SCorey Minyard {
248a9b74079SCorey Minyard     IPMIInterfaceClass *iic = IPMI_INTERFACE_GET_CLASS(ii);
249a9b74079SCorey Minyard 
250a9b74079SCorey Minyard     ib->do_wake = 1;
251a9b74079SCorey Minyard     while (ib->do_wake) {
252a9b74079SCorey Minyard         ib->do_wake = 0;
253a9b74079SCorey Minyard         iic->handle_if_event(ii);
254a9b74079SCorey Minyard     }
255a9b74079SCorey Minyard }
256a9b74079SCorey Minyard 
257a9b74079SCorey Minyard static void ipmi_bt_ioport_write(void *opaque, hwaddr addr, uint64_t val,
258a9b74079SCorey Minyard                                  unsigned size)
259a9b74079SCorey Minyard {
260a9b74079SCorey Minyard     IPMIInterface *ii = opaque;
261a9b74079SCorey Minyard     IPMIInterfaceClass *iic = IPMI_INTERFACE_GET_CLASS(ii);
262a9b74079SCorey Minyard     IPMIBT *ib = iic->get_backend_data(ii);
263a9b74079SCorey Minyard 
264a9b74079SCorey Minyard     switch (addr & 3) {
265a9b74079SCorey Minyard     case 0:
266a9b74079SCorey Minyard         if (IPMI_BT_GET_CLR_WR(val)) {
267a9b74079SCorey Minyard             ib->inlen = 0;
268a9b74079SCorey Minyard         }
269a9b74079SCorey Minyard         if (IPMI_BT_GET_CLR_RD(val)) {
270a9b74079SCorey Minyard             ib->outpos = 0;
271a9b74079SCorey Minyard         }
272a9b74079SCorey Minyard         if (IPMI_BT_GET_B2H_ATN(val)) {
273a9b74079SCorey Minyard             IPMI_BT_SET_B2H_ATN(ib->control_reg, 0);
274a9b74079SCorey Minyard         }
275a9b74079SCorey Minyard         if (IPMI_BT_GET_SMS_ATN(val)) {
276a9b74079SCorey Minyard             IPMI_BT_SET_SMS_ATN(ib->control_reg, 0);
277a9b74079SCorey Minyard         }
278a9b74079SCorey Minyard         if (IPMI_BT_GET_HBUSY(val)) {
279a9b74079SCorey Minyard             /* Toggle */
280a9b74079SCorey Minyard             IPMI_BT_SET_HBUSY(ib->control_reg,
281a9b74079SCorey Minyard                               !IPMI_BT_GET_HBUSY(ib->control_reg));
282a9b74079SCorey Minyard         }
283a9b74079SCorey Minyard         if (IPMI_BT_GET_H2B_ATN(val)) {
284a9b74079SCorey Minyard             IPMI_BT_SET_BBUSY(ib->control_reg, 1);
285a9b74079SCorey Minyard             ipmi_bt_signal(ib, ii);
286a9b74079SCorey Minyard         }
287a9b74079SCorey Minyard         break;
288a9b74079SCorey Minyard 
289a9b74079SCorey Minyard     case 1:
290a9b74079SCorey Minyard         if (ib->inlen < sizeof(ib->inmsg)) {
291a9b74079SCorey Minyard             ib->inmsg[ib->inlen] = val;
292a9b74079SCorey Minyard         }
293a9b74079SCorey Minyard         ib->inlen++;
294a9b74079SCorey Minyard         break;
295a9b74079SCorey Minyard 
296a9b74079SCorey Minyard     case 2:
297a9b74079SCorey Minyard         if (IPMI_BT_GET_B2H_IRQ_EN(val) !=
298a9b74079SCorey Minyard                         IPMI_BT_GET_B2H_IRQ_EN(ib->mask_reg)) {
299a9b74079SCorey Minyard             if (IPMI_BT_GET_B2H_IRQ_EN(val)) {
300a9b74079SCorey Minyard                 if (IPMI_BT_GET_B2H_ATN(ib->control_reg) ||
301a9b74079SCorey Minyard                         IPMI_BT_GET_SMS_ATN(ib->control_reg)) {
302a9b74079SCorey Minyard                     IPMI_BT_SET_B2H_IRQ(ib->mask_reg, 1);
303a9b74079SCorey Minyard                     qemu_irq_raise(ib->irq);
304a9b74079SCorey Minyard                 }
305a9b74079SCorey Minyard                 IPMI_BT_SET_B2H_IRQ_EN(ib->mask_reg, 1);
306a9b74079SCorey Minyard             } else {
307a9b74079SCorey Minyard                 if (IPMI_BT_GET_B2H_IRQ(ib->mask_reg)) {
308a9b74079SCorey Minyard                     IPMI_BT_SET_B2H_IRQ(ib->mask_reg, 0);
309a9b74079SCorey Minyard                     qemu_irq_lower(ib->irq);
310a9b74079SCorey Minyard                 }
311a9b74079SCorey Minyard                 IPMI_BT_SET_B2H_IRQ_EN(ib->mask_reg, 0);
312a9b74079SCorey Minyard             }
313a9b74079SCorey Minyard         }
314a9b74079SCorey Minyard         if (IPMI_BT_GET_B2H_IRQ(val) && IPMI_BT_GET_B2H_IRQ(ib->mask_reg)) {
315a9b74079SCorey Minyard             IPMI_BT_SET_B2H_IRQ(ib->mask_reg, 0);
316a9b74079SCorey Minyard             qemu_irq_lower(ib->irq);
317a9b74079SCorey Minyard         }
318a9b74079SCorey Minyard         break;
319a9b74079SCorey Minyard     }
320a9b74079SCorey Minyard }
321a9b74079SCorey Minyard 
322a9b74079SCorey Minyard static const MemoryRegionOps ipmi_bt_io_ops = {
323a9b74079SCorey Minyard     .read = ipmi_bt_ioport_read,
324a9b74079SCorey Minyard     .write = ipmi_bt_ioport_write,
325a9b74079SCorey Minyard     .impl = {
326a9b74079SCorey Minyard         .min_access_size = 1,
327a9b74079SCorey Minyard         .max_access_size = 1,
328a9b74079SCorey Minyard     },
329a9b74079SCorey Minyard     .endianness = DEVICE_LITTLE_ENDIAN,
330a9b74079SCorey Minyard };
331a9b74079SCorey Minyard 
332a9b74079SCorey Minyard static void ipmi_bt_set_atn(IPMIInterface *ii, int val, int irq)
333a9b74079SCorey Minyard {
334a9b74079SCorey Minyard     IPMIInterfaceClass *iic = IPMI_INTERFACE_GET_CLASS(ii);
335a9b74079SCorey Minyard     IPMIBT *ib = iic->get_backend_data(ii);
336a9b74079SCorey Minyard 
337a9b74079SCorey Minyard     if (!!val == IPMI_BT_GET_SMS_ATN(ib->control_reg)) {
338a9b74079SCorey Minyard         return;
339a9b74079SCorey Minyard     }
340a9b74079SCorey Minyard 
341a9b74079SCorey Minyard     IPMI_BT_SET_SMS_ATN(ib->control_reg, val);
342a9b74079SCorey Minyard     if (val) {
343a9b74079SCorey Minyard         if (irq && ib->use_irq && ib->irqs_enabled &&
344a9b74079SCorey Minyard                 !IPMI_BT_GET_B2H_ATN(ib->control_reg) &&
345a9b74079SCorey Minyard                 IPMI_BT_GET_B2H_IRQ_EN(ib->mask_reg)) {
346a9b74079SCorey Minyard             IPMI_BT_SET_B2H_IRQ(ib->mask_reg, 1);
347a9b74079SCorey Minyard             qemu_irq_raise(ib->irq);
348a9b74079SCorey Minyard         }
349a9b74079SCorey Minyard     } else {
350a9b74079SCorey Minyard         if (!IPMI_BT_GET_B2H_ATN(ib->control_reg) &&
351a9b74079SCorey Minyard                 IPMI_BT_GET_B2H_IRQ(ib->mask_reg)) {
352a9b74079SCorey Minyard             IPMI_BT_SET_B2H_IRQ(ib->mask_reg, 0);
353a9b74079SCorey Minyard             qemu_irq_lower(ib->irq);
354a9b74079SCorey Minyard         }
355a9b74079SCorey Minyard     }
356a9b74079SCorey Minyard }
357a9b74079SCorey Minyard 
358a9b74079SCorey Minyard static void ipmi_bt_handle_reset(IPMIInterface *ii, bool is_cold)
359a9b74079SCorey Minyard {
360a9b74079SCorey Minyard     IPMIInterfaceClass *iic = IPMI_INTERFACE_GET_CLASS(ii);
361a9b74079SCorey Minyard     IPMIBT *ib = iic->get_backend_data(ii);
362a9b74079SCorey Minyard 
363a9b74079SCorey Minyard     if (is_cold) {
364a9b74079SCorey Minyard         /* Disable the BT interrupt on reset */
365a9b74079SCorey Minyard         if (IPMI_BT_GET_B2H_IRQ(ib->mask_reg)) {
366a9b74079SCorey Minyard             IPMI_BT_SET_B2H_IRQ(ib->mask_reg, 0);
367a9b74079SCorey Minyard             qemu_irq_lower(ib->irq);
368a9b74079SCorey Minyard         }
369a9b74079SCorey Minyard         IPMI_BT_SET_B2H_IRQ_EN(ib->mask_reg, 0);
370a9b74079SCorey Minyard     }
371a9b74079SCorey Minyard }
372a9b74079SCorey Minyard 
373a9b74079SCorey Minyard static void ipmi_bt_set_irq_enable(IPMIInterface *ii, int val)
374a9b74079SCorey Minyard {
375a9b74079SCorey Minyard     IPMIInterfaceClass *iic = IPMI_INTERFACE_GET_CLASS(ii);
376a9b74079SCorey Minyard     IPMIBT *ib = iic->get_backend_data(ii);
377a9b74079SCorey Minyard 
378a9b74079SCorey Minyard     ib->irqs_enabled = val;
379a9b74079SCorey Minyard }
380a9b74079SCorey Minyard 
381a9b74079SCorey Minyard static void ipmi_bt_init(IPMIInterface *ii, Error **errp)
382a9b74079SCorey Minyard {
383a9b74079SCorey Minyard     IPMIInterfaceClass *iic = IPMI_INTERFACE_GET_CLASS(ii);
384a9b74079SCorey Minyard     IPMIBT *ib = iic->get_backend_data(ii);
385a9b74079SCorey Minyard 
386a9b74079SCorey Minyard     ib->io_length = 3;
387a9b74079SCorey Minyard 
388a9b74079SCorey Minyard     memory_region_init_io(&ib->io, NULL, &ipmi_bt_io_ops, ii, "ipmi-bt", 3);
389a9b74079SCorey Minyard }
390a9b74079SCorey Minyard 
391a9b74079SCorey Minyard static void ipmi_bt_class_init(IPMIInterfaceClass *iic)
392a9b74079SCorey Minyard {
393a9b74079SCorey Minyard     iic->init = ipmi_bt_init;
394a9b74079SCorey Minyard     iic->set_atn = ipmi_bt_set_atn;
395a9b74079SCorey Minyard     iic->handle_rsp = ipmi_bt_handle_rsp;
396a9b74079SCorey Minyard     iic->handle_if_event = ipmi_bt_handle_event;
397a9b74079SCorey Minyard     iic->set_irq_enable = ipmi_bt_set_irq_enable;
398a9b74079SCorey Minyard     iic->reset = ipmi_bt_handle_reset;
399a9b74079SCorey Minyard }
400a9b74079SCorey Minyard 
401a9b74079SCorey Minyard 
402a9b74079SCorey Minyard #define TYPE_ISA_IPMI_BT "isa-ipmi-bt"
403a9b74079SCorey Minyard #define ISA_IPMI_BT(obj) OBJECT_CHECK(ISAIPMIBTDevice, (obj), \
404a9b74079SCorey Minyard                                        TYPE_ISA_IPMI_BT)
405a9b74079SCorey Minyard 
406a9b74079SCorey Minyard typedef struct ISAIPMIBTDevice {
407a9b74079SCorey Minyard     ISADevice dev;
408*f4014512SPeter Maydell     int32_t isairq;
409a9b74079SCorey Minyard     IPMIBT bt;
41044d3db0dSCorey Minyard     IPMIFwInfo fwinfo;
411a9b74079SCorey Minyard } ISAIPMIBTDevice;
412a9b74079SCorey Minyard 
413a9b74079SCorey Minyard static void isa_ipmi_bt_realize(DeviceState *dev, Error **errp)
414a9b74079SCorey Minyard {
415a9b74079SCorey Minyard     ISADevice *isadev = ISA_DEVICE(dev);
416a9b74079SCorey Minyard     ISAIPMIBTDevice *iib = ISA_IPMI_BT(dev);
417a9b74079SCorey Minyard     IPMIInterface *ii = IPMI_INTERFACE(dev);
418a9b74079SCorey Minyard     IPMIInterfaceClass *iic = IPMI_INTERFACE_GET_CLASS(ii);
419a9b74079SCorey Minyard 
420a9b74079SCorey Minyard     if (!iib->bt.bmc) {
421a9b74079SCorey Minyard         error_setg(errp, "IPMI device requires a bmc attribute to be set");
422a9b74079SCorey Minyard         return;
423a9b74079SCorey Minyard     }
424a9b74079SCorey Minyard 
425a9b74079SCorey Minyard     iib->bt.bmc->intf = ii;
426a9b74079SCorey Minyard 
427a9b74079SCorey Minyard     iic->init(ii, errp);
428a9b74079SCorey Minyard     if (*errp)
429a9b74079SCorey Minyard         return;
430a9b74079SCorey Minyard 
431a9b74079SCorey Minyard     if (iib->isairq > 0) {
432a9b74079SCorey Minyard         isa_init_irq(isadev, &iib->bt.irq, iib->isairq);
433a9b74079SCorey Minyard         iib->bt.use_irq = 1;
434a9b74079SCorey Minyard     }
435a9b74079SCorey Minyard 
436a9b74079SCorey Minyard     qdev_set_legacy_instance_id(dev, iib->bt.io_base, iib->bt.io_length);
437a9b74079SCorey Minyard 
438a9b74079SCorey Minyard     isa_register_ioport(isadev, &iib->bt.io, iib->bt.io_base);
43944d3db0dSCorey Minyard 
44044d3db0dSCorey Minyard     iib->fwinfo.interface_name = "bt";
44144d3db0dSCorey Minyard     iib->fwinfo.interface_type = IPMI_SMBIOS_BT;
44244d3db0dSCorey Minyard     iib->fwinfo.ipmi_spec_major_revision = 2;
44344d3db0dSCorey Minyard     iib->fwinfo.ipmi_spec_minor_revision = 0;
44444d3db0dSCorey Minyard     iib->fwinfo.base_address = iib->bt.io_base;
44544d3db0dSCorey Minyard     iib->fwinfo.register_length = iib->bt.io_length;
44644d3db0dSCorey Minyard     iib->fwinfo.register_spacing = 1;
44744d3db0dSCorey Minyard     iib->fwinfo.memspace = IPMI_MEMSPACE_IO;
44844d3db0dSCorey Minyard     iib->fwinfo.irq_type = IPMI_LEVEL_IRQ;
44944d3db0dSCorey Minyard     iib->fwinfo.interrupt_number = iib->isairq;
45044d3db0dSCorey Minyard     iib->fwinfo.acpi_parent = "\\_SB.PCI0.ISA";
45144d3db0dSCorey Minyard     iib->fwinfo.i2c_slave_address = iib->bt.bmc->slave_addr;
45244d3db0dSCorey Minyard     ipmi_add_fwinfo(&iib->fwinfo, errp);
453a9b74079SCorey Minyard }
454a9b74079SCorey Minyard 
455bd66bcfcSCorey Minyard static const VMStateDescription vmstate_ISAIPMIBTDevice = {
456bd66bcfcSCorey Minyard     .name = TYPE_IPMI_INTERFACE,
457bd66bcfcSCorey Minyard     .version_id = 1,
458bd66bcfcSCorey Minyard     .minimum_version_id = 1,
459bd66bcfcSCorey Minyard     .fields      = (VMStateField[]) {
460bd66bcfcSCorey Minyard         VMSTATE_BOOL(bt.obf_irq_set, ISAIPMIBTDevice),
461bd66bcfcSCorey Minyard         VMSTATE_BOOL(bt.atn_irq_set, ISAIPMIBTDevice),
462bd66bcfcSCorey Minyard         VMSTATE_BOOL(bt.use_irq, ISAIPMIBTDevice),
463bd66bcfcSCorey Minyard         VMSTATE_BOOL(bt.irqs_enabled, ISAIPMIBTDevice),
464bd66bcfcSCorey Minyard         VMSTATE_UINT32(bt.outpos, ISAIPMIBTDevice),
465bd66bcfcSCorey Minyard         VMSTATE_VBUFFER_UINT32(bt.outmsg, ISAIPMIBTDevice, 1, NULL, 0,
466bd66bcfcSCorey Minyard                                bt.outlen),
467bd66bcfcSCorey Minyard         VMSTATE_VBUFFER_UINT32(bt.inmsg, ISAIPMIBTDevice, 1, NULL, 0,
468bd66bcfcSCorey Minyard                                bt.inlen),
469bd66bcfcSCorey Minyard         VMSTATE_UINT8(bt.control_reg, ISAIPMIBTDevice),
470bd66bcfcSCorey Minyard         VMSTATE_UINT8(bt.mask_reg, ISAIPMIBTDevice),
471bd66bcfcSCorey Minyard         VMSTATE_UINT8(bt.waiting_rsp, ISAIPMIBTDevice),
472bd66bcfcSCorey Minyard         VMSTATE_UINT8(bt.waiting_seq, ISAIPMIBTDevice),
473bd66bcfcSCorey Minyard         VMSTATE_END_OF_LIST()
474bd66bcfcSCorey Minyard     }
475bd66bcfcSCorey Minyard };
476bd66bcfcSCorey Minyard 
477a9b74079SCorey Minyard static void isa_ipmi_bt_init(Object *obj)
478a9b74079SCorey Minyard {
479a9b74079SCorey Minyard     ISAIPMIBTDevice *iib = ISA_IPMI_BT(obj);
480a9b74079SCorey Minyard 
481a9b74079SCorey Minyard     ipmi_bmc_find_and_link(obj, (Object **) &iib->bt.bmc);
482bd66bcfcSCorey Minyard 
483bd66bcfcSCorey Minyard     vmstate_register(NULL, 0, &vmstate_ISAIPMIBTDevice, iib);
484a9b74079SCorey Minyard }
485a9b74079SCorey Minyard 
486a9b74079SCorey Minyard static void *isa_ipmi_bt_get_backend_data(IPMIInterface *ii)
487a9b74079SCorey Minyard {
488a9b74079SCorey Minyard     ISAIPMIBTDevice *iib = ISA_IPMI_BT(ii);
489a9b74079SCorey Minyard 
490a9b74079SCorey Minyard     return &iib->bt;
491a9b74079SCorey Minyard }
492a9b74079SCorey Minyard 
493a9b74079SCorey Minyard static Property ipmi_isa_properties[] = {
494a9b74079SCorey Minyard     DEFINE_PROP_UINT32("ioport", ISAIPMIBTDevice, bt.io_base,  0xe4),
495a9b74079SCorey Minyard     DEFINE_PROP_INT32("irq",   ISAIPMIBTDevice, isairq,  5),
496a9b74079SCorey Minyard     DEFINE_PROP_END_OF_LIST(),
497a9b74079SCorey Minyard };
498a9b74079SCorey Minyard 
499a9b74079SCorey Minyard static void isa_ipmi_bt_class_init(ObjectClass *oc, void *data)
500a9b74079SCorey Minyard {
501a9b74079SCorey Minyard     DeviceClass *dc = DEVICE_CLASS(oc);
502a9b74079SCorey Minyard     IPMIInterfaceClass *iic = IPMI_INTERFACE_CLASS(oc);
503a9b74079SCorey Minyard 
504a9b74079SCorey Minyard     dc->realize = isa_ipmi_bt_realize;
505a9b74079SCorey Minyard     dc->props = ipmi_isa_properties;
506a9b74079SCorey Minyard 
507a9b74079SCorey Minyard     iic->get_backend_data = isa_ipmi_bt_get_backend_data;
508a9b74079SCorey Minyard     ipmi_bt_class_init(iic);
509a9b74079SCorey Minyard }
510a9b74079SCorey Minyard 
511a9b74079SCorey Minyard static const TypeInfo isa_ipmi_bt_info = {
512a9b74079SCorey Minyard     .name          = TYPE_ISA_IPMI_BT,
513a9b74079SCorey Minyard     .parent        = TYPE_ISA_DEVICE,
514a9b74079SCorey Minyard     .instance_size = sizeof(ISAIPMIBTDevice),
515a9b74079SCorey Minyard     .instance_init = isa_ipmi_bt_init,
516a9b74079SCorey Minyard     .class_init    = isa_ipmi_bt_class_init,
517a9b74079SCorey Minyard     .interfaces = (InterfaceInfo[]) {
518a9b74079SCorey Minyard         { TYPE_IPMI_INTERFACE },
519a9b74079SCorey Minyard         { }
520a9b74079SCorey Minyard     }
521a9b74079SCorey Minyard };
522a9b74079SCorey Minyard 
523a9b74079SCorey Minyard static void ipmi_register_types(void)
524a9b74079SCorey Minyard {
525a9b74079SCorey Minyard     type_register_static(&isa_ipmi_bt_info);
526a9b74079SCorey Minyard }
527a9b74079SCorey Minyard 
528a9b74079SCorey Minyard type_init(ipmi_register_types)
529