xref: /qemu/hw/misc/aspeed_scu.c (revision c7e1f57291f3bff7d369034b324f9671090567bb)
1 /*
2  * ASPEED System Control Unit
3  *
4  * Andrew Jeffery <andrew@aj.id.au>
5  *
6  * Copyright 2016 IBM Corp.
7  *
8  * This code is licensed under the GPL version 2 or later.  See
9  * the COPYING file in the top-level directory.
10  */
11 
12 #include "qemu/osdep.h"
13 #include "hw/misc/aspeed_scu.h"
14 #include "hw/qdev-properties.h"
15 #include "migration/vmstate.h"
16 #include "qapi/error.h"
17 #include "qapi/visitor.h"
18 #include "qemu/bitops.h"
19 #include "qemu/log.h"
20 #include "qemu/guest-random.h"
21 #include "qemu/module.h"
22 #include "trace.h"
23 
24 #define TO_REG(offset) ((offset) >> 2)
25 
26 #define PROT_KEY             TO_REG(0x00)
27 #define SYS_RST_CTRL         TO_REG(0x04)
28 #define CLK_SEL              TO_REG(0x08)
29 #define CLK_STOP_CTRL        TO_REG(0x0C)
30 #define FREQ_CNTR_CTRL       TO_REG(0x10)
31 #define FREQ_CNTR_EVAL       TO_REG(0x14)
32 #define IRQ_CTRL             TO_REG(0x18)
33 #define D2PLL_PARAM          TO_REG(0x1C)
34 #define MPLL_PARAM           TO_REG(0x20)
35 #define HPLL_PARAM           TO_REG(0x24)
36 #define FREQ_CNTR_RANGE      TO_REG(0x28)
37 #define MISC_CTRL1           TO_REG(0x2C)
38 #define PCI_CTRL1            TO_REG(0x30)
39 #define PCI_CTRL2            TO_REG(0x34)
40 #define PCI_CTRL3            TO_REG(0x38)
41 #define SYS_RST_STATUS       TO_REG(0x3C)
42 #define SOC_SCRATCH1         TO_REG(0x40)
43 #define SOC_SCRATCH2         TO_REG(0x44)
44 #define MAC_CLK_DELAY        TO_REG(0x48)
45 #define MISC_CTRL2           TO_REG(0x4C)
46 #define VGA_SCRATCH1         TO_REG(0x50)
47 #define VGA_SCRATCH2         TO_REG(0x54)
48 #define VGA_SCRATCH3         TO_REG(0x58)
49 #define VGA_SCRATCH4         TO_REG(0x5C)
50 #define VGA_SCRATCH5         TO_REG(0x60)
51 #define VGA_SCRATCH6         TO_REG(0x64)
52 #define VGA_SCRATCH7         TO_REG(0x68)
53 #define VGA_SCRATCH8         TO_REG(0x6C)
54 #define HW_STRAP1            TO_REG(0x70)
55 #define RNG_CTRL             TO_REG(0x74)
56 #define RNG_DATA             TO_REG(0x78)
57 #define SILICON_REV          TO_REG(0x7C)
58 #define PINMUX_CTRL1         TO_REG(0x80)
59 #define PINMUX_CTRL2         TO_REG(0x84)
60 #define PINMUX_CTRL3         TO_REG(0x88)
61 #define PINMUX_CTRL4         TO_REG(0x8C)
62 #define PINMUX_CTRL5         TO_REG(0x90)
63 #define PINMUX_CTRL6         TO_REG(0x94)
64 #define WDT_RST_CTRL         TO_REG(0x9C)
65 #define PINMUX_CTRL7         TO_REG(0xA0)
66 #define PINMUX_CTRL8         TO_REG(0xA4)
67 #define PINMUX_CTRL9         TO_REG(0xA8)
68 #define WAKEUP_EN            TO_REG(0xC0)
69 #define WAKEUP_CTRL          TO_REG(0xC4)
70 #define HW_STRAP2            TO_REG(0xD0)
71 #define FREE_CNTR4           TO_REG(0xE0)
72 #define FREE_CNTR4_EXT       TO_REG(0xE4)
73 #define CPU2_CTRL            TO_REG(0x100)
74 #define CPU2_BASE_SEG1       TO_REG(0x104)
75 #define CPU2_BASE_SEG2       TO_REG(0x108)
76 #define CPU2_BASE_SEG3       TO_REG(0x10C)
77 #define CPU2_BASE_SEG4       TO_REG(0x110)
78 #define CPU2_BASE_SEG5       TO_REG(0x114)
79 #define CPU2_CACHE_CTRL      TO_REG(0x118)
80 #define UART_HPLL_CLK        TO_REG(0x160)
81 #define PCIE_CTRL            TO_REG(0x180)
82 #define BMC_MMIO_CTRL        TO_REG(0x184)
83 #define RELOC_DECODE_BASE1   TO_REG(0x188)
84 #define RELOC_DECODE_BASE2   TO_REG(0x18C)
85 #define MAILBOX_DECODE_BASE  TO_REG(0x190)
86 #define SRAM_DECODE_BASE1    TO_REG(0x194)
87 #define SRAM_DECODE_BASE2    TO_REG(0x198)
88 #define BMC_REV              TO_REG(0x19C)
89 #define BMC_DEV_ID           TO_REG(0x1A4)
90 
91 #define AST2600_PROT_KEY          TO_REG(0x00)
92 #define AST2600_SILICON_REV       TO_REG(0x04)
93 #define AST2600_SILICON_REV2      TO_REG(0x14)
94 #define AST2600_SYS_RST_CTRL      TO_REG(0x40)
95 #define AST2600_SYS_RST_CTRL_CLR  TO_REG(0x44)
96 #define AST2600_SYS_RST_CTRL2     TO_REG(0x50)
97 #define AST2600_SYS_RST_CTRL2_CLR TO_REG(0x54)
98 #define AST2600_CLK_STOP_CTRL     TO_REG(0x80)
99 #define AST2600_CLK_STOP_CTRL_CLR TO_REG(0x84)
100 #define AST2600_CLK_STOP_CTRL2     TO_REG(0x90)
101 #define AST2600_CLK_STOP_CTRL2_CLR TO_REG(0x94)
102 #define AST2600_SDRAM_HANDSHAKE   TO_REG(0x100)
103 #define AST2600_HPLL_PARAM        TO_REG(0x200)
104 #define AST2600_HPLL_EXT          TO_REG(0x204)
105 #define AST2600_MPLL_EXT          TO_REG(0x224)
106 #define AST2600_EPLL_EXT          TO_REG(0x244)
107 #define AST2600_CLK_SEL           TO_REG(0x300)
108 #define AST2600_CLK_SEL2          TO_REG(0x304)
109 #define AST2600_CLK_SEL3          TO_REG(0x310)
110 #define AST2600_HW_STRAP1         TO_REG(0x500)
111 #define AST2600_HW_STRAP1_CLR     TO_REG(0x504)
112 #define AST2600_HW_STRAP1_PROT    TO_REG(0x508)
113 #define AST2600_HW_STRAP2         TO_REG(0x510)
114 #define AST2600_HW_STRAP2_CLR     TO_REG(0x514)
115 #define AST2600_HW_STRAP2_PROT    TO_REG(0x518)
116 #define AST2600_RNG_CTRL          TO_REG(0x524)
117 #define AST2600_RNG_DATA          TO_REG(0x540)
118 
119 #define AST2600_CLK TO_REG(0x40)
120 
121 #define SCU_IO_REGION_SIZE 0x1000
122 
123 static const uint32_t ast2400_a0_resets[ASPEED_SCU_NR_REGS] = {
124      [SYS_RST_CTRL]    = 0xFFCFFEDCU,
125      [CLK_SEL]         = 0xF3F40000U,
126      [CLK_STOP_CTRL]   = 0x19FC3E8BU,
127      [D2PLL_PARAM]     = 0x00026108U,
128      [MPLL_PARAM]      = 0x00030291U,
129      [HPLL_PARAM]      = 0x00000291U,
130      [MISC_CTRL1]      = 0x00000010U,
131      [PCI_CTRL1]       = 0x20001A03U,
132      [PCI_CTRL2]       = 0x20001A03U,
133      [PCI_CTRL3]       = 0x04000030U,
134      [SYS_RST_STATUS]  = 0x00000001U,
135      [SOC_SCRATCH1]    = 0x000000C0U, /* SoC completed DRAM init */
136      [MISC_CTRL2]      = 0x00000023U,
137      [RNG_CTRL]        = 0x0000000EU,
138      [PINMUX_CTRL2]    = 0x0000F000U,
139      [PINMUX_CTRL3]    = 0x01000000U,
140      [PINMUX_CTRL4]    = 0x000000FFU,
141      [PINMUX_CTRL5]    = 0x0000A000U,
142      [WDT_RST_CTRL]    = 0x003FFFF3U,
143      [PINMUX_CTRL8]    = 0xFFFF0000U,
144      [PINMUX_CTRL9]    = 0x000FFFFFU,
145      [FREE_CNTR4]      = 0x000000FFU,
146      [FREE_CNTR4_EXT]  = 0x000000FFU,
147      [CPU2_BASE_SEG1]  = 0x80000000U,
148      [CPU2_BASE_SEG4]  = 0x1E600000U,
149      [CPU2_BASE_SEG5]  = 0xC0000000U,
150      [UART_HPLL_CLK]   = 0x00001903U,
151      [PCIE_CTRL]       = 0x0000007BU,
152      [BMC_DEV_ID]      = 0x00002402U
153 };
154 
155 /* SCU70 bit 23: 0 24Mhz. bit 11:9: 0b001 AXI:ABH ratio 2:1 */
156 /* AST2500 revision A1 */
157 
158 static const uint32_t ast2500_a1_resets[ASPEED_SCU_NR_REGS] = {
159      [SYS_RST_CTRL]    = 0xFFCFFEDCU,
160      [CLK_SEL]         = 0xF3F40000U,
161      [CLK_STOP_CTRL]   = 0x19FC3E8BU,
162      [D2PLL_PARAM]     = 0x00026108U,
163      [MPLL_PARAM]      = 0x00030291U,
164      [HPLL_PARAM]      = 0x93000400U,
165      [MISC_CTRL1]      = 0x00000010U,
166      [PCI_CTRL1]       = 0x20001A03U,
167      [PCI_CTRL2]       = 0x20001A03U,
168      [PCI_CTRL3]       = 0x04000030U,
169      [SYS_RST_STATUS]  = 0x00000001U,
170      [SOC_SCRATCH1]    = 0x000000C0U, /* SoC completed DRAM init */
171      [MISC_CTRL2]      = 0x00000023U,
172      [RNG_CTRL]        = 0x0000000EU,
173      [PINMUX_CTRL2]    = 0x0000F000U,
174      [PINMUX_CTRL3]    = 0x03000000U,
175      [PINMUX_CTRL4]    = 0x00000000U,
176      [PINMUX_CTRL5]    = 0x0000A000U,
177      [WDT_RST_CTRL]    = 0x023FFFF3U,
178      [PINMUX_CTRL8]    = 0xFFFF0000U,
179      [PINMUX_CTRL9]    = 0x000FFFFFU,
180      [FREE_CNTR4]      = 0x000000FFU,
181      [FREE_CNTR4_EXT]  = 0x000000FFU,
182      [CPU2_BASE_SEG1]  = 0x80000000U,
183      [CPU2_BASE_SEG4]  = 0x1E600000U,
184      [CPU2_BASE_SEG5]  = 0xC0000000U,
185      [UART_HPLL_CLK]   = 0x00001903U,
186      [PCIE_CTRL]       = 0x0000007BU,
187      [BMC_DEV_ID]      = 0x00002402U
188 };
189 
190 static uint32_t aspeed_scu_get_random(void)
191 {
192     uint32_t num;
193     qemu_guest_getrandom_nofail(&num, sizeof(num));
194     return num;
195 }
196 
197 uint32_t aspeed_scu_get_apb_freq(AspeedSCUState *s)
198 {
199     AspeedSCUClass *asc = ASPEED_SCU_GET_CLASS(s);
200     uint32_t hpll = asc->calc_hpll(s, s->regs[HPLL_PARAM]);
201 
202     return hpll / (SCU_CLK_GET_PCLK_DIV(s->regs[CLK_SEL]) + 1)
203         / asc->apb_divider;
204 }
205 
206 static uint64_t aspeed_scu_read(void *opaque, hwaddr offset, unsigned size)
207 {
208     AspeedSCUState *s = ASPEED_SCU(opaque);
209     int reg = TO_REG(offset);
210 
211     if (reg >= ASPEED_SCU_NR_REGS) {
212         qemu_log_mask(LOG_GUEST_ERROR,
213                       "%s: Out-of-bounds read at offset 0x%" HWADDR_PRIx "\n",
214                       __func__, offset);
215         return 0;
216     }
217 
218     switch (reg) {
219     case RNG_DATA:
220         /* On hardware, RNG_DATA works regardless of
221          * the state of the enable bit in RNG_CTRL
222          */
223         s->regs[RNG_DATA] = aspeed_scu_get_random();
224         break;
225     case WAKEUP_EN:
226         qemu_log_mask(LOG_GUEST_ERROR,
227                       "%s: Read of write-only offset 0x%" HWADDR_PRIx "\n",
228                       __func__, offset);
229         break;
230     }
231 
232     return s->regs[reg];
233 }
234 
235 static void aspeed_ast2400_scu_write(void *opaque, hwaddr offset,
236                                      uint64_t data, unsigned size)
237 {
238     AspeedSCUState *s = ASPEED_SCU(opaque);
239     int reg = TO_REG(offset);
240 
241     if (reg >= ASPEED_SCU_NR_REGS) {
242         qemu_log_mask(LOG_GUEST_ERROR,
243                       "%s: Out-of-bounds write at offset 0x%" HWADDR_PRIx "\n",
244                       __func__, offset);
245         return;
246     }
247 
248     if (reg > PROT_KEY && reg < CPU2_BASE_SEG1 &&
249             !s->regs[PROT_KEY]) {
250         qemu_log_mask(LOG_GUEST_ERROR, "%s: SCU is locked!\n", __func__);
251     }
252 
253     trace_aspeed_scu_write(offset, size, data);
254 
255     switch (reg) {
256     case PROT_KEY:
257         s->regs[reg] = (data == ASPEED_SCU_PROT_KEY) ? 1 : 0;
258         return;
259     case SILICON_REV:
260     case FREQ_CNTR_EVAL:
261     case VGA_SCRATCH1 ... VGA_SCRATCH8:
262     case RNG_DATA:
263     case FREE_CNTR4:
264     case FREE_CNTR4_EXT:
265         qemu_log_mask(LOG_GUEST_ERROR,
266                       "%s: Write to read-only offset 0x%" HWADDR_PRIx "\n",
267                       __func__, offset);
268         return;
269     }
270 
271     s->regs[reg] = data;
272 }
273 
274 static void aspeed_ast2500_scu_write(void *opaque, hwaddr offset,
275                                      uint64_t data, unsigned size)
276 {
277     AspeedSCUState *s = ASPEED_SCU(opaque);
278     int reg = TO_REG(offset);
279 
280     if (reg >= ASPEED_SCU_NR_REGS) {
281         qemu_log_mask(LOG_GUEST_ERROR,
282                       "%s: Out-of-bounds write at offset 0x%" HWADDR_PRIx "\n",
283                       __func__, offset);
284         return;
285     }
286 
287     if (reg > PROT_KEY && reg < CPU2_BASE_SEG1 &&
288             !s->regs[PROT_KEY]) {
289         qemu_log_mask(LOG_GUEST_ERROR, "%s: SCU is locked!\n", __func__);
290         return;
291     }
292 
293     trace_aspeed_scu_write(offset, size, data);
294 
295     switch (reg) {
296     case PROT_KEY:
297         s->regs[reg] = (data == ASPEED_SCU_PROT_KEY) ? 1 : 0;
298         return;
299     case HW_STRAP1:
300         s->regs[HW_STRAP1] |= data;
301         return;
302     case SILICON_REV:
303         s->regs[HW_STRAP1] &= ~data;
304         return;
305     case FREQ_CNTR_EVAL:
306     case VGA_SCRATCH1 ... VGA_SCRATCH8:
307     case RNG_DATA:
308     case FREE_CNTR4:
309     case FREE_CNTR4_EXT:
310         qemu_log_mask(LOG_GUEST_ERROR,
311                       "%s: Write to read-only offset 0x%" HWADDR_PRIx "\n",
312                       __func__, offset);
313         return;
314     }
315 
316     s->regs[reg] = data;
317 }
318 
319 static const MemoryRegionOps aspeed_ast2400_scu_ops = {
320     .read = aspeed_scu_read,
321     .write = aspeed_ast2400_scu_write,
322     .endianness = DEVICE_LITTLE_ENDIAN,
323     .valid.min_access_size = 4,
324     .valid.max_access_size = 4,
325     .valid.unaligned = false,
326 };
327 
328 static const MemoryRegionOps aspeed_ast2500_scu_ops = {
329     .read = aspeed_scu_read,
330     .write = aspeed_ast2500_scu_write,
331     .endianness = DEVICE_LITTLE_ENDIAN,
332     .valid.min_access_size = 4,
333     .valid.max_access_size = 4,
334     .valid.unaligned = false,
335 };
336 
337 static uint32_t aspeed_scu_get_clkin(AspeedSCUState *s)
338 {
339     if (s->hw_strap1 & SCU_HW_STRAP_CLK_25M_IN) {
340         return 25000000;
341     } else if (s->hw_strap1 & SCU_HW_STRAP_CLK_48M_IN) {
342         return 48000000;
343     } else {
344         return 24000000;
345     }
346 }
347 
348 /*
349  * Strapped frequencies for the AST2400 in MHz. They depend on the
350  * clkin frequency.
351  */
352 static const uint32_t hpll_ast2400_freqs[][4] = {
353     { 384, 360, 336, 408 }, /* 24MHz or 48MHz */
354     { 400, 375, 350, 425 }, /* 25MHz */
355 };
356 
357 static uint32_t aspeed_2400_scu_calc_hpll(AspeedSCUState *s, uint32_t hpll_reg)
358 {
359     uint8_t freq_select;
360     bool clk_25m_in;
361     uint32_t clkin = aspeed_scu_get_clkin(s);
362 
363     if (hpll_reg & SCU_AST2400_H_PLL_OFF) {
364         return 0;
365     }
366 
367     if (hpll_reg & SCU_AST2400_H_PLL_PROGRAMMED) {
368         uint32_t multiplier = 1;
369 
370         if (!(hpll_reg & SCU_AST2400_H_PLL_BYPASS_EN)) {
371             uint32_t n  = (hpll_reg >> 5) & 0x3f;
372             uint32_t od = (hpll_reg >> 4) & 0x1;
373             uint32_t d  = hpll_reg & 0xf;
374 
375             multiplier = (2 - od) * ((n + 2) / (d + 1));
376         }
377 
378         return clkin * multiplier;
379     }
380 
381     /* HW strapping */
382     clk_25m_in = !!(s->hw_strap1 & SCU_HW_STRAP_CLK_25M_IN);
383     freq_select = SCU_AST2400_HW_STRAP_GET_H_PLL_CLK(s->hw_strap1);
384 
385     return hpll_ast2400_freqs[clk_25m_in][freq_select] * 1000000;
386 }
387 
388 static uint32_t aspeed_2500_scu_calc_hpll(AspeedSCUState *s, uint32_t hpll_reg)
389 {
390     uint32_t multiplier = 1;
391     uint32_t clkin = aspeed_scu_get_clkin(s);
392 
393     if (hpll_reg & SCU_H_PLL_OFF) {
394         return 0;
395     }
396 
397     if (!(hpll_reg & SCU_H_PLL_BYPASS_EN)) {
398         uint32_t p = (hpll_reg >> 13) & 0x3f;
399         uint32_t m = (hpll_reg >> 5) & 0xff;
400         uint32_t n = hpll_reg & 0x1f;
401 
402         multiplier = ((m + 1) / (n + 1)) / (p + 1);
403     }
404 
405     return clkin * multiplier;
406 }
407 
408 static void aspeed_scu_reset(DeviceState *dev)
409 {
410     AspeedSCUState *s = ASPEED_SCU(dev);
411     AspeedSCUClass *asc = ASPEED_SCU_GET_CLASS(dev);
412 
413     memcpy(s->regs, asc->resets, asc->nr_regs * 4);
414     s->regs[SILICON_REV] = s->silicon_rev;
415     s->regs[HW_STRAP1] = s->hw_strap1;
416     s->regs[HW_STRAP2] = s->hw_strap2;
417     s->regs[PROT_KEY] = s->hw_prot_key;
418 }
419 
420 static uint32_t aspeed_silicon_revs[] = {
421     AST2400_A0_SILICON_REV,
422     AST2400_A1_SILICON_REV,
423     AST2500_A0_SILICON_REV,
424     AST2500_A1_SILICON_REV,
425     AST2600_A0_SILICON_REV,
426 };
427 
428 bool is_supported_silicon_rev(uint32_t silicon_rev)
429 {
430     int i;
431 
432     for (i = 0; i < ARRAY_SIZE(aspeed_silicon_revs); i++) {
433         if (silicon_rev == aspeed_silicon_revs[i]) {
434             return true;
435         }
436     }
437 
438     return false;
439 }
440 
441 static void aspeed_scu_realize(DeviceState *dev, Error **errp)
442 {
443     SysBusDevice *sbd = SYS_BUS_DEVICE(dev);
444     AspeedSCUState *s = ASPEED_SCU(dev);
445     AspeedSCUClass *asc = ASPEED_SCU_GET_CLASS(dev);
446 
447     if (!is_supported_silicon_rev(s->silicon_rev)) {
448         error_setg(errp, "Unknown silicon revision: 0x%" PRIx32,
449                 s->silicon_rev);
450         return;
451     }
452 
453     memory_region_init_io(&s->iomem, OBJECT(s), asc->ops, s,
454                           TYPE_ASPEED_SCU, SCU_IO_REGION_SIZE);
455 
456     sysbus_init_mmio(sbd, &s->iomem);
457 }
458 
459 static const VMStateDescription vmstate_aspeed_scu = {
460     .name = "aspeed.scu",
461     .version_id = 2,
462     .minimum_version_id = 2,
463     .fields = (VMStateField[]) {
464         VMSTATE_UINT32_ARRAY(regs, AspeedSCUState, ASPEED_AST2600_SCU_NR_REGS),
465         VMSTATE_END_OF_LIST()
466     }
467 };
468 
469 static Property aspeed_scu_properties[] = {
470     DEFINE_PROP_UINT32("silicon-rev", AspeedSCUState, silicon_rev, 0),
471     DEFINE_PROP_UINT32("hw-strap1", AspeedSCUState, hw_strap1, 0),
472     DEFINE_PROP_UINT32("hw-strap2", AspeedSCUState, hw_strap2, 0),
473     DEFINE_PROP_UINT32("hw-prot-key", AspeedSCUState, hw_prot_key, 0),
474     DEFINE_PROP_END_OF_LIST(),
475 };
476 
477 static void aspeed_scu_class_init(ObjectClass *klass, void *data)
478 {
479     DeviceClass *dc = DEVICE_CLASS(klass);
480     dc->realize = aspeed_scu_realize;
481     dc->reset = aspeed_scu_reset;
482     dc->desc = "ASPEED System Control Unit";
483     dc->vmsd = &vmstate_aspeed_scu;
484     device_class_set_props(dc, aspeed_scu_properties);
485 }
486 
487 static const TypeInfo aspeed_scu_info = {
488     .name = TYPE_ASPEED_SCU,
489     .parent = TYPE_SYS_BUS_DEVICE,
490     .instance_size = sizeof(AspeedSCUState),
491     .class_init = aspeed_scu_class_init,
492     .class_size    = sizeof(AspeedSCUClass),
493     .abstract      = true,
494 };
495 
496 static void aspeed_2400_scu_class_init(ObjectClass *klass, void *data)
497 {
498     DeviceClass *dc = DEVICE_CLASS(klass);
499     AspeedSCUClass *asc = ASPEED_SCU_CLASS(klass);
500 
501     dc->desc = "ASPEED 2400 System Control Unit";
502     asc->resets = ast2400_a0_resets;
503     asc->calc_hpll = aspeed_2400_scu_calc_hpll;
504     asc->apb_divider = 2;
505     asc->nr_regs = ASPEED_SCU_NR_REGS;
506     asc->ops = &aspeed_ast2400_scu_ops;
507 }
508 
509 static const TypeInfo aspeed_2400_scu_info = {
510     .name = TYPE_ASPEED_2400_SCU,
511     .parent = TYPE_ASPEED_SCU,
512     .instance_size = sizeof(AspeedSCUState),
513     .class_init = aspeed_2400_scu_class_init,
514 };
515 
516 static void aspeed_2500_scu_class_init(ObjectClass *klass, void *data)
517 {
518     DeviceClass *dc = DEVICE_CLASS(klass);
519     AspeedSCUClass *asc = ASPEED_SCU_CLASS(klass);
520 
521     dc->desc = "ASPEED 2500 System Control Unit";
522     asc->resets = ast2500_a1_resets;
523     asc->calc_hpll = aspeed_2500_scu_calc_hpll;
524     asc->apb_divider = 4;
525     asc->nr_regs = ASPEED_SCU_NR_REGS;
526     asc->ops = &aspeed_ast2500_scu_ops;
527 }
528 
529 static const TypeInfo aspeed_2500_scu_info = {
530     .name = TYPE_ASPEED_2500_SCU,
531     .parent = TYPE_ASPEED_SCU,
532     .instance_size = sizeof(AspeedSCUState),
533     .class_init = aspeed_2500_scu_class_init,
534 };
535 
536 static uint64_t aspeed_ast2600_scu_read(void *opaque, hwaddr offset,
537                                         unsigned size)
538 {
539     AspeedSCUState *s = ASPEED_SCU(opaque);
540     int reg = TO_REG(offset);
541 
542     if (reg >= ASPEED_AST2600_SCU_NR_REGS) {
543         qemu_log_mask(LOG_GUEST_ERROR,
544                       "%s: Out-of-bounds read at offset 0x%" HWADDR_PRIx "\n",
545                       __func__, offset);
546         return 0;
547     }
548 
549     switch (reg) {
550     case AST2600_HPLL_EXT:
551     case AST2600_EPLL_EXT:
552     case AST2600_MPLL_EXT:
553         /* PLLs are always "locked" */
554         return s->regs[reg] | BIT(31);
555     case AST2600_RNG_DATA:
556         /*
557          * On hardware, RNG_DATA works regardless of the state of the
558          * enable bit in RNG_CTRL
559          *
560          * TODO: Check this is true for ast2600
561          */
562         s->regs[AST2600_RNG_DATA] = aspeed_scu_get_random();
563         break;
564     }
565 
566     return s->regs[reg];
567 }
568 
569 static void aspeed_ast2600_scu_write(void *opaque, hwaddr offset,
570                                      uint64_t data64, unsigned size)
571 {
572     AspeedSCUState *s = ASPEED_SCU(opaque);
573     int reg = TO_REG(offset);
574     /* Truncate here so bitwise operations below behave as expected */
575     uint32_t data = data64;
576 
577     if (reg >= ASPEED_AST2600_SCU_NR_REGS) {
578         qemu_log_mask(LOG_GUEST_ERROR,
579                       "%s: Out-of-bounds write at offset 0x%" HWADDR_PRIx "\n",
580                       __func__, offset);
581         return;
582     }
583 
584     if (reg > PROT_KEY && !s->regs[PROT_KEY]) {
585         qemu_log_mask(LOG_GUEST_ERROR, "%s: SCU is locked!\n", __func__);
586     }
587 
588     trace_aspeed_scu_write(offset, size, data);
589 
590     switch (reg) {
591     case AST2600_PROT_KEY:
592         s->regs[reg] = (data == ASPEED_SCU_PROT_KEY) ? 1 : 0;
593         return;
594     case AST2600_HW_STRAP1:
595     case AST2600_HW_STRAP2:
596         if (s->regs[reg + 2]) {
597             return;
598         }
599         /* fall through */
600     case AST2600_SYS_RST_CTRL:
601     case AST2600_SYS_RST_CTRL2:
602     case AST2600_CLK_STOP_CTRL:
603     case AST2600_CLK_STOP_CTRL2:
604         /* W1S (Write 1 to set) registers */
605         s->regs[reg] |= data;
606         return;
607     case AST2600_SYS_RST_CTRL_CLR:
608     case AST2600_SYS_RST_CTRL2_CLR:
609     case AST2600_CLK_STOP_CTRL_CLR:
610     case AST2600_CLK_STOP_CTRL2_CLR:
611     case AST2600_HW_STRAP1_CLR:
612     case AST2600_HW_STRAP2_CLR:
613         /*
614          * W1C (Write 1 to clear) registers are offset by one address from
615          * the data register
616          */
617         s->regs[reg - 1] &= ~data;
618         return;
619 
620     case AST2600_RNG_DATA:
621     case AST2600_SILICON_REV:
622     case AST2600_SILICON_REV2:
623         /* Add read only registers here */
624         qemu_log_mask(LOG_GUEST_ERROR,
625                       "%s: Write to read-only offset 0x%" HWADDR_PRIx "\n",
626                       __func__, offset);
627         return;
628     }
629 
630     s->regs[reg] = data;
631 }
632 
633 static const MemoryRegionOps aspeed_ast2600_scu_ops = {
634     .read = aspeed_ast2600_scu_read,
635     .write = aspeed_ast2600_scu_write,
636     .endianness = DEVICE_LITTLE_ENDIAN,
637     .valid.min_access_size = 4,
638     .valid.max_access_size = 4,
639     .valid.unaligned = false,
640 };
641 
642 static const uint32_t ast2600_a0_resets[ASPEED_AST2600_SCU_NR_REGS] = {
643     [AST2600_SILICON_REV]       = AST2600_SILICON_REV,
644     [AST2600_SILICON_REV2]      = AST2600_SILICON_REV,
645     [AST2600_SYS_RST_CTRL]      = 0xF7CFFEDC | 0x100,
646     [AST2600_SYS_RST_CTRL2]     = 0xFFFFFFFC,
647     [AST2600_CLK_STOP_CTRL]     = 0xEFF43E8B,
648     [AST2600_CLK_STOP_CTRL2]    = 0xFFF0FFF0,
649     [AST2600_SDRAM_HANDSHAKE]   = 0x00000040,  /* SoC completed DRAM init */
650     [AST2600_HPLL_PARAM]        = 0x1000405F,
651 };
652 
653 static void aspeed_ast2600_scu_reset(DeviceState *dev)
654 {
655     AspeedSCUState *s = ASPEED_SCU(dev);
656     AspeedSCUClass *asc = ASPEED_SCU_GET_CLASS(dev);
657 
658     memcpy(s->regs, asc->resets, asc->nr_regs * 4);
659 
660     s->regs[AST2600_SILICON_REV] = s->silicon_rev;
661     s->regs[AST2600_SILICON_REV2] = s->silicon_rev;
662     s->regs[AST2600_HW_STRAP1] = s->hw_strap1;
663     s->regs[AST2600_HW_STRAP2] = s->hw_strap2;
664     s->regs[PROT_KEY] = s->hw_prot_key;
665 }
666 
667 static void aspeed_2600_scu_class_init(ObjectClass *klass, void *data)
668 {
669     DeviceClass *dc = DEVICE_CLASS(klass);
670     AspeedSCUClass *asc = ASPEED_SCU_CLASS(klass);
671 
672     dc->desc = "ASPEED 2600 System Control Unit";
673     dc->reset = aspeed_ast2600_scu_reset;
674     asc->resets = ast2600_a0_resets;
675     asc->calc_hpll = aspeed_2500_scu_calc_hpll; /* No change since AST2500 */
676     asc->apb_divider = 4;
677     asc->nr_regs = ASPEED_AST2600_SCU_NR_REGS;
678     asc->ops = &aspeed_ast2600_scu_ops;
679 }
680 
681 static const TypeInfo aspeed_2600_scu_info = {
682     .name = TYPE_ASPEED_2600_SCU,
683     .parent = TYPE_ASPEED_SCU,
684     .instance_size = sizeof(AspeedSCUState),
685     .class_init = aspeed_2600_scu_class_init,
686 };
687 
688 static void aspeed_scu_register_types(void)
689 {
690     type_register_static(&aspeed_scu_info);
691     type_register_static(&aspeed_2400_scu_info);
692     type_register_static(&aspeed_2500_scu_info);
693     type_register_static(&aspeed_2600_scu_info);
694 }
695 
696 type_init(aspeed_scu_register_types);
697