xref: /qemu/hw/misc/edu.c (revision 650d103d3ea959212f826acb9d3fe80cf30e347b)
1b30934cbSJiri Slaby /*
2b30934cbSJiri Slaby  * QEMU educational PCI device
3b30934cbSJiri Slaby  *
4b30934cbSJiri Slaby  * Copyright (c) 2012-2015 Jiri Slaby
5b30934cbSJiri Slaby  *
6b30934cbSJiri Slaby  * Permission is hereby granted, free of charge, to any person obtaining a
7b30934cbSJiri Slaby  * copy of this software and associated documentation files (the "Software"),
8b30934cbSJiri Slaby  * to deal in the Software without restriction, including without limitation
9b30934cbSJiri Slaby  * the rights to use, copy, modify, merge, publish, distribute, sublicense,
10b30934cbSJiri Slaby  * and/or sell copies of the Software, and to permit persons to whom the
11b30934cbSJiri Slaby  * Software is furnished to do so, subject to the following conditions:
12b30934cbSJiri Slaby  *
13b30934cbSJiri Slaby  * The above copyright notice and this permission notice shall be included in
14b30934cbSJiri Slaby  * all copies or substantial portions of the Software.
15b30934cbSJiri Slaby  *
16b30934cbSJiri Slaby  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17b30934cbSJiri Slaby  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18b30934cbSJiri Slaby  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19b30934cbSJiri Slaby  * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20b30934cbSJiri Slaby  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
21b30934cbSJiri Slaby  * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
22b30934cbSJiri Slaby  * DEALINGS IN THE SOFTWARE.
23b30934cbSJiri Slaby  */
24b30934cbSJiri Slaby 
250d1c9782SPeter Maydell #include "qemu/osdep.h"
26de9b602eSPhilippe Mathieu-Daudé #include "qemu/units.h"
27b30934cbSJiri Slaby #include "hw/pci/pci.h"
28*650d103dSMarkus Armbruster #include "hw/hw.h"
29eabb5782SPeter Xu #include "hw/pci/msi.h"
30b30934cbSJiri Slaby #include "qemu/timer.h"
31b30934cbSJiri Slaby #include "qemu/main-loop.h" /* iothread mutex */
320b8fa32fSMarkus Armbruster #include "qemu/module.h"
33b30934cbSJiri Slaby #include "qapi/visitor.h"
34b30934cbSJiri Slaby 
358371158bSLi Qiang #define TYPE_PCI_EDU_DEVICE "edu"
368371158bSLi Qiang #define EDU(obj)        OBJECT_CHECK(EduState, obj, TYPE_PCI_EDU_DEVICE)
37b30934cbSJiri Slaby 
38b30934cbSJiri Slaby #define FACT_IRQ        0x00000001
39b30934cbSJiri Slaby #define DMA_IRQ         0x00000100
40b30934cbSJiri Slaby 
41b30934cbSJiri Slaby #define DMA_START       0x40000
42b30934cbSJiri Slaby #define DMA_SIZE        4096
43b30934cbSJiri Slaby 
44b30934cbSJiri Slaby typedef struct {
45b30934cbSJiri Slaby     PCIDevice pdev;
46b30934cbSJiri Slaby     MemoryRegion mmio;
47b30934cbSJiri Slaby 
48b30934cbSJiri Slaby     QemuThread thread;
49b30934cbSJiri Slaby     QemuMutex thr_mutex;
50b30934cbSJiri Slaby     QemuCond thr_cond;
51b30934cbSJiri Slaby     bool stopping;
52b30934cbSJiri Slaby 
53b30934cbSJiri Slaby     uint32_t addr4;
54b30934cbSJiri Slaby     uint32_t fact;
55b30934cbSJiri Slaby #define EDU_STATUS_COMPUTING    0x01
56b30934cbSJiri Slaby #define EDU_STATUS_IRQFACT      0x80
57b30934cbSJiri Slaby     uint32_t status;
58b30934cbSJiri Slaby 
59b30934cbSJiri Slaby     uint32_t irq_status;
60b30934cbSJiri Slaby 
61b30934cbSJiri Slaby #define EDU_DMA_RUN             0x1
62b30934cbSJiri Slaby #define EDU_DMA_DIR(cmd)        (((cmd) & 0x2) >> 1)
63b30934cbSJiri Slaby # define EDU_DMA_FROM_PCI       0
64b30934cbSJiri Slaby # define EDU_DMA_TO_PCI         1
65b30934cbSJiri Slaby #define EDU_DMA_IRQ             0x4
66b30934cbSJiri Slaby     struct dma_state {
67b30934cbSJiri Slaby         dma_addr_t src;
68b30934cbSJiri Slaby         dma_addr_t dst;
69b30934cbSJiri Slaby         dma_addr_t cnt;
70b30934cbSJiri Slaby         dma_addr_t cmd;
71b30934cbSJiri Slaby     } dma;
72b30934cbSJiri Slaby     QEMUTimer dma_timer;
73b30934cbSJiri Slaby     char dma_buf[DMA_SIZE];
74b30934cbSJiri Slaby     uint64_t dma_mask;
75b30934cbSJiri Slaby } EduState;
76b30934cbSJiri Slaby 
77eabb5782SPeter Xu static bool edu_msi_enabled(EduState *edu)
78eabb5782SPeter Xu {
79eabb5782SPeter Xu     return msi_enabled(&edu->pdev);
80eabb5782SPeter Xu }
81eabb5782SPeter Xu 
82b30934cbSJiri Slaby static void edu_raise_irq(EduState *edu, uint32_t val)
83b30934cbSJiri Slaby {
84b30934cbSJiri Slaby     edu->irq_status |= val;
85b30934cbSJiri Slaby     if (edu->irq_status) {
86eabb5782SPeter Xu         if (edu_msi_enabled(edu)) {
87eabb5782SPeter Xu             msi_notify(&edu->pdev, 0);
88eabb5782SPeter Xu         } else {
89b30934cbSJiri Slaby             pci_set_irq(&edu->pdev, 1);
90b30934cbSJiri Slaby         }
91b30934cbSJiri Slaby     }
92eabb5782SPeter Xu }
93b30934cbSJiri Slaby 
94b30934cbSJiri Slaby static void edu_lower_irq(EduState *edu, uint32_t val)
95b30934cbSJiri Slaby {
96b30934cbSJiri Slaby     edu->irq_status &= ~val;
97b30934cbSJiri Slaby 
98eabb5782SPeter Xu     if (!edu->irq_status && !edu_msi_enabled(edu)) {
99b30934cbSJiri Slaby         pci_set_irq(&edu->pdev, 0);
100b30934cbSJiri Slaby     }
101b30934cbSJiri Slaby }
102b30934cbSJiri Slaby 
1037fca21c8SLi Qiang static bool within(uint64_t addr, uint64_t start, uint64_t end)
104b30934cbSJiri Slaby {
105b30934cbSJiri Slaby     return start <= addr && addr < end;
106b30934cbSJiri Slaby }
107b30934cbSJiri Slaby 
1087fca21c8SLi Qiang static void edu_check_range(uint64_t addr, uint64_t size1, uint64_t start,
1097fca21c8SLi Qiang                 uint64_t size2)
110b30934cbSJiri Slaby {
1117fca21c8SLi Qiang     uint64_t end1 = addr + size1;
1127fca21c8SLi Qiang     uint64_t end2 = start + size2;
113b30934cbSJiri Slaby 
114b30934cbSJiri Slaby     if (within(addr, start, end2) &&
115b30934cbSJiri Slaby             end1 > addr && within(end1, start, end2)) {
116b30934cbSJiri Slaby         return;
117b30934cbSJiri Slaby     }
118b30934cbSJiri Slaby 
1197fca21c8SLi Qiang     hw_error("EDU: DMA range 0x%016"PRIx64"-0x%016"PRIx64
1207fca21c8SLi Qiang              " out of bounds (0x%016"PRIx64"-0x%016"PRIx64")!",
121b30934cbSJiri Slaby             addr, end1 - 1, start, end2 - 1);
122b30934cbSJiri Slaby }
123b30934cbSJiri Slaby 
124b30934cbSJiri Slaby static dma_addr_t edu_clamp_addr(const EduState *edu, dma_addr_t addr)
125b30934cbSJiri Slaby {
126b30934cbSJiri Slaby     dma_addr_t res = addr & edu->dma_mask;
127b30934cbSJiri Slaby 
128b30934cbSJiri Slaby     if (addr != res) {
129b30934cbSJiri Slaby         printf("EDU: clamping DMA %#.16"PRIx64" to %#.16"PRIx64"!\n", addr, res);
130b30934cbSJiri Slaby     }
131b30934cbSJiri Slaby 
132b30934cbSJiri Slaby     return res;
133b30934cbSJiri Slaby }
134b30934cbSJiri Slaby 
135b30934cbSJiri Slaby static void edu_dma_timer(void *opaque)
136b30934cbSJiri Slaby {
137b30934cbSJiri Slaby     EduState *edu = opaque;
138b30934cbSJiri Slaby     bool raise_irq = false;
139b30934cbSJiri Slaby 
140b30934cbSJiri Slaby     if (!(edu->dma.cmd & EDU_DMA_RUN)) {
141b30934cbSJiri Slaby         return;
142b30934cbSJiri Slaby     }
143b30934cbSJiri Slaby 
144b30934cbSJiri Slaby     if (EDU_DMA_DIR(edu->dma.cmd) == EDU_DMA_FROM_PCI) {
1457fca21c8SLi Qiang         uint64_t dst = edu->dma.dst;
146b30934cbSJiri Slaby         edu_check_range(dst, edu->dma.cnt, DMA_START, DMA_SIZE);
147b30934cbSJiri Slaby         dst -= DMA_START;
148b30934cbSJiri Slaby         pci_dma_read(&edu->pdev, edu_clamp_addr(edu, edu->dma.src),
149b30934cbSJiri Slaby                 edu->dma_buf + dst, edu->dma.cnt);
150b30934cbSJiri Slaby     } else {
1517fca21c8SLi Qiang         uint64_t src = edu->dma.src;
152b30934cbSJiri Slaby         edu_check_range(src, edu->dma.cnt, DMA_START, DMA_SIZE);
153b30934cbSJiri Slaby         src -= DMA_START;
154b30934cbSJiri Slaby         pci_dma_write(&edu->pdev, edu_clamp_addr(edu, edu->dma.dst),
155b30934cbSJiri Slaby                 edu->dma_buf + src, edu->dma.cnt);
156b30934cbSJiri Slaby     }
157b30934cbSJiri Slaby 
158b30934cbSJiri Slaby     edu->dma.cmd &= ~EDU_DMA_RUN;
159b30934cbSJiri Slaby     if (edu->dma.cmd & EDU_DMA_IRQ) {
160b30934cbSJiri Slaby         raise_irq = true;
161b30934cbSJiri Slaby     }
162b30934cbSJiri Slaby 
163b30934cbSJiri Slaby     if (raise_irq) {
164b30934cbSJiri Slaby         edu_raise_irq(edu, DMA_IRQ);
165b30934cbSJiri Slaby     }
166b30934cbSJiri Slaby }
167b30934cbSJiri Slaby 
168b30934cbSJiri Slaby static void dma_rw(EduState *edu, bool write, dma_addr_t *val, dma_addr_t *dma,
169b30934cbSJiri Slaby                 bool timer)
170b30934cbSJiri Slaby {
171b30934cbSJiri Slaby     if (write && (edu->dma.cmd & EDU_DMA_RUN)) {
172b30934cbSJiri Slaby         return;
173b30934cbSJiri Slaby     }
174b30934cbSJiri Slaby 
175b30934cbSJiri Slaby     if (write) {
176b30934cbSJiri Slaby         *dma = *val;
177b30934cbSJiri Slaby     } else {
178b30934cbSJiri Slaby         *val = *dma;
179b30934cbSJiri Slaby     }
180b30934cbSJiri Slaby 
181b30934cbSJiri Slaby     if (timer) {
182b30934cbSJiri Slaby         timer_mod(&edu->dma_timer, qemu_clock_get_ms(QEMU_CLOCK_VIRTUAL) + 100);
183b30934cbSJiri Slaby     }
184b30934cbSJiri Slaby }
185b30934cbSJiri Slaby 
186b30934cbSJiri Slaby static uint64_t edu_mmio_read(void *opaque, hwaddr addr, unsigned size)
187b30934cbSJiri Slaby {
188b30934cbSJiri Slaby     EduState *edu = opaque;
189b30934cbSJiri Slaby     uint64_t val = ~0ULL;
190b30934cbSJiri Slaby 
191c45eb53aSLi Qiang     if (addr < 0x80 && size != 4) {
192c45eb53aSLi Qiang         return val;
193c45eb53aSLi Qiang     }
194c45eb53aSLi Qiang 
195c45eb53aSLi Qiang     if (addr >= 0x80 && size != 4 && size != 8) {
196b30934cbSJiri Slaby         return val;
197b30934cbSJiri Slaby     }
198b30934cbSJiri Slaby 
199b30934cbSJiri Slaby     switch (addr) {
200b30934cbSJiri Slaby     case 0x00:
201b30934cbSJiri Slaby         val = 0x010000edu;
202b30934cbSJiri Slaby         break;
203b30934cbSJiri Slaby     case 0x04:
204b30934cbSJiri Slaby         val = edu->addr4;
205b30934cbSJiri Slaby         break;
206b30934cbSJiri Slaby     case 0x08:
207b30934cbSJiri Slaby         qemu_mutex_lock(&edu->thr_mutex);
208b30934cbSJiri Slaby         val = edu->fact;
209b30934cbSJiri Slaby         qemu_mutex_unlock(&edu->thr_mutex);
210b30934cbSJiri Slaby         break;
211b30934cbSJiri Slaby     case 0x20:
212b30934cbSJiri Slaby         val = atomic_read(&edu->status);
213b30934cbSJiri Slaby         break;
214b30934cbSJiri Slaby     case 0x24:
215b30934cbSJiri Slaby         val = edu->irq_status;
216b30934cbSJiri Slaby         break;
217b30934cbSJiri Slaby     case 0x80:
218b30934cbSJiri Slaby         dma_rw(edu, false, &val, &edu->dma.src, false);
219b30934cbSJiri Slaby         break;
220b30934cbSJiri Slaby     case 0x88:
221b30934cbSJiri Slaby         dma_rw(edu, false, &val, &edu->dma.dst, false);
222b30934cbSJiri Slaby         break;
223b30934cbSJiri Slaby     case 0x90:
224b30934cbSJiri Slaby         dma_rw(edu, false, &val, &edu->dma.cnt, false);
225b30934cbSJiri Slaby         break;
226b30934cbSJiri Slaby     case 0x98:
227b30934cbSJiri Slaby         dma_rw(edu, false, &val, &edu->dma.cmd, false);
228b30934cbSJiri Slaby         break;
229b30934cbSJiri Slaby     }
230b30934cbSJiri Slaby 
231b30934cbSJiri Slaby     return val;
232b30934cbSJiri Slaby }
233b30934cbSJiri Slaby 
234b30934cbSJiri Slaby static void edu_mmio_write(void *opaque, hwaddr addr, uint64_t val,
235b30934cbSJiri Slaby                 unsigned size)
236b30934cbSJiri Slaby {
237b30934cbSJiri Slaby     EduState *edu = opaque;
238b30934cbSJiri Slaby 
239b30934cbSJiri Slaby     if (addr < 0x80 && size != 4) {
240b30934cbSJiri Slaby         return;
241b30934cbSJiri Slaby     }
242b30934cbSJiri Slaby 
243b30934cbSJiri Slaby     if (addr >= 0x80 && size != 4 && size != 8) {
244b30934cbSJiri Slaby         return;
245b30934cbSJiri Slaby     }
246b30934cbSJiri Slaby 
247b30934cbSJiri Slaby     switch (addr) {
248b30934cbSJiri Slaby     case 0x04:
249b30934cbSJiri Slaby         edu->addr4 = ~val;
250b30934cbSJiri Slaby         break;
251b30934cbSJiri Slaby     case 0x08:
252b30934cbSJiri Slaby         if (atomic_read(&edu->status) & EDU_STATUS_COMPUTING) {
253b30934cbSJiri Slaby             break;
254b30934cbSJiri Slaby         }
255b30934cbSJiri Slaby         /* EDU_STATUS_COMPUTING cannot go 0->1 concurrently, because it is only
256b30934cbSJiri Slaby          * set in this function and it is under the iothread mutex.
257b30934cbSJiri Slaby          */
258b30934cbSJiri Slaby         qemu_mutex_lock(&edu->thr_mutex);
259b30934cbSJiri Slaby         edu->fact = val;
260b30934cbSJiri Slaby         atomic_or(&edu->status, EDU_STATUS_COMPUTING);
261b30934cbSJiri Slaby         qemu_cond_signal(&edu->thr_cond);
262b30934cbSJiri Slaby         qemu_mutex_unlock(&edu->thr_mutex);
263b30934cbSJiri Slaby         break;
264b30934cbSJiri Slaby     case 0x20:
265b30934cbSJiri Slaby         if (val & EDU_STATUS_IRQFACT) {
266b30934cbSJiri Slaby             atomic_or(&edu->status, EDU_STATUS_IRQFACT);
267b30934cbSJiri Slaby         } else {
268b30934cbSJiri Slaby             atomic_and(&edu->status, ~EDU_STATUS_IRQFACT);
269b30934cbSJiri Slaby         }
270b30934cbSJiri Slaby         break;
271b30934cbSJiri Slaby     case 0x60:
272b30934cbSJiri Slaby         edu_raise_irq(edu, val);
273b30934cbSJiri Slaby         break;
274b30934cbSJiri Slaby     case 0x64:
275b30934cbSJiri Slaby         edu_lower_irq(edu, val);
276b30934cbSJiri Slaby         break;
277b30934cbSJiri Slaby     case 0x80:
278b30934cbSJiri Slaby         dma_rw(edu, true, &val, &edu->dma.src, false);
279b30934cbSJiri Slaby         break;
280b30934cbSJiri Slaby     case 0x88:
281b30934cbSJiri Slaby         dma_rw(edu, true, &val, &edu->dma.dst, false);
282b30934cbSJiri Slaby         break;
283b30934cbSJiri Slaby     case 0x90:
284b30934cbSJiri Slaby         dma_rw(edu, true, &val, &edu->dma.cnt, false);
285b30934cbSJiri Slaby         break;
286b30934cbSJiri Slaby     case 0x98:
287b30934cbSJiri Slaby         if (!(val & EDU_DMA_RUN)) {
288b30934cbSJiri Slaby             break;
289b30934cbSJiri Slaby         }
290b30934cbSJiri Slaby         dma_rw(edu, true, &val, &edu->dma.cmd, true);
291b30934cbSJiri Slaby         break;
292b30934cbSJiri Slaby     }
293b30934cbSJiri Slaby }
294b30934cbSJiri Slaby 
295b30934cbSJiri Slaby static const MemoryRegionOps edu_mmio_ops = {
296b30934cbSJiri Slaby     .read = edu_mmio_read,
297b30934cbSJiri Slaby     .write = edu_mmio_write,
298b30934cbSJiri Slaby     .endianness = DEVICE_NATIVE_ENDIAN,
29920fb3105SLi Qiang     .valid = {
30020fb3105SLi Qiang         .min_access_size = 4,
30120fb3105SLi Qiang         .max_access_size = 8,
30220fb3105SLi Qiang     },
30320fb3105SLi Qiang     .impl = {
30420fb3105SLi Qiang         .min_access_size = 4,
30520fb3105SLi Qiang         .max_access_size = 8,
30620fb3105SLi Qiang     },
30720fb3105SLi Qiang 
308b30934cbSJiri Slaby };
309b30934cbSJiri Slaby 
310b30934cbSJiri Slaby /*
311631b22eaSStefan Weil  * We purposely use a thread, so that users are forced to wait for the status
312b30934cbSJiri Slaby  * register.
313b30934cbSJiri Slaby  */
314b30934cbSJiri Slaby static void *edu_fact_thread(void *opaque)
315b30934cbSJiri Slaby {
316b30934cbSJiri Slaby     EduState *edu = opaque;
317b30934cbSJiri Slaby 
318b30934cbSJiri Slaby     while (1) {
319b30934cbSJiri Slaby         uint32_t val, ret = 1;
320b30934cbSJiri Slaby 
321b30934cbSJiri Slaby         qemu_mutex_lock(&edu->thr_mutex);
322b30934cbSJiri Slaby         while ((atomic_read(&edu->status) & EDU_STATUS_COMPUTING) == 0 &&
323b30934cbSJiri Slaby                         !edu->stopping) {
324b30934cbSJiri Slaby             qemu_cond_wait(&edu->thr_cond, &edu->thr_mutex);
325b30934cbSJiri Slaby         }
326b30934cbSJiri Slaby 
327b30934cbSJiri Slaby         if (edu->stopping) {
328b30934cbSJiri Slaby             qemu_mutex_unlock(&edu->thr_mutex);
329b30934cbSJiri Slaby             break;
330b30934cbSJiri Slaby         }
331b30934cbSJiri Slaby 
332b30934cbSJiri Slaby         val = edu->fact;
333b30934cbSJiri Slaby         qemu_mutex_unlock(&edu->thr_mutex);
334b30934cbSJiri Slaby 
335b30934cbSJiri Slaby         while (val > 0) {
336b30934cbSJiri Slaby             ret *= val--;
337b30934cbSJiri Slaby         }
338b30934cbSJiri Slaby 
339b30934cbSJiri Slaby         /*
340b30934cbSJiri Slaby          * We should sleep for a random period here, so that students are
341b30934cbSJiri Slaby          * forced to check the status properly.
342b30934cbSJiri Slaby          */
343b30934cbSJiri Slaby 
344b30934cbSJiri Slaby         qemu_mutex_lock(&edu->thr_mutex);
345b30934cbSJiri Slaby         edu->fact = ret;
346b30934cbSJiri Slaby         qemu_mutex_unlock(&edu->thr_mutex);
347b30934cbSJiri Slaby         atomic_and(&edu->status, ~EDU_STATUS_COMPUTING);
348b30934cbSJiri Slaby 
349b30934cbSJiri Slaby         if (atomic_read(&edu->status) & EDU_STATUS_IRQFACT) {
350b30934cbSJiri Slaby             qemu_mutex_lock_iothread();
351b30934cbSJiri Slaby             edu_raise_irq(edu, FACT_IRQ);
352b30934cbSJiri Slaby             qemu_mutex_unlock_iothread();
353b30934cbSJiri Slaby         }
354b30934cbSJiri Slaby     }
355b30934cbSJiri Slaby 
356b30934cbSJiri Slaby     return NULL;
357b30934cbSJiri Slaby }
358b30934cbSJiri Slaby 
359f922254cSCao jin static void pci_edu_realize(PCIDevice *pdev, Error **errp)
360b30934cbSJiri Slaby {
361a519e389SLi Qiang     EduState *edu = EDU(pdev);
362b30934cbSJiri Slaby     uint8_t *pci_conf = pdev->config;
363b30934cbSJiri Slaby 
364c25a67f0SPaolo Bonzini     pci_config_set_interrupt_pin(pci_conf, 1);
365c25a67f0SPaolo Bonzini 
366c25a67f0SPaolo Bonzini     if (msi_init(pdev, 0, 1, true, false, errp)) {
367c25a67f0SPaolo Bonzini         return;
368c25a67f0SPaolo Bonzini     }
369c25a67f0SPaolo Bonzini 
370b30934cbSJiri Slaby     timer_init_ms(&edu->dma_timer, QEMU_CLOCK_VIRTUAL, edu_dma_timer, edu);
371b30934cbSJiri Slaby 
372b30934cbSJiri Slaby     qemu_mutex_init(&edu->thr_mutex);
373b30934cbSJiri Slaby     qemu_cond_init(&edu->thr_cond);
374b30934cbSJiri Slaby     qemu_thread_create(&edu->thread, "edu", edu_fact_thread,
375b30934cbSJiri Slaby                        edu, QEMU_THREAD_JOINABLE);
376b30934cbSJiri Slaby 
377b30934cbSJiri Slaby     memory_region_init_io(&edu->mmio, OBJECT(edu), &edu_mmio_ops, edu,
378de9b602eSPhilippe Mathieu-Daudé                     "edu-mmio", 1 * MiB);
379b30934cbSJiri Slaby     pci_register_bar(pdev, 0, PCI_BASE_ADDRESS_SPACE_MEMORY, &edu->mmio);
380b30934cbSJiri Slaby }
381b30934cbSJiri Slaby 
382b30934cbSJiri Slaby static void pci_edu_uninit(PCIDevice *pdev)
383b30934cbSJiri Slaby {
384a519e389SLi Qiang     EduState *edu = EDU(pdev);
385b30934cbSJiri Slaby 
386b30934cbSJiri Slaby     qemu_mutex_lock(&edu->thr_mutex);
387b30934cbSJiri Slaby     edu->stopping = true;
388b30934cbSJiri Slaby     qemu_mutex_unlock(&edu->thr_mutex);
389b30934cbSJiri Slaby     qemu_cond_signal(&edu->thr_cond);
390b30934cbSJiri Slaby     qemu_thread_join(&edu->thread);
391b30934cbSJiri Slaby 
392b30934cbSJiri Slaby     qemu_cond_destroy(&edu->thr_cond);
393b30934cbSJiri Slaby     qemu_mutex_destroy(&edu->thr_mutex);
394b30934cbSJiri Slaby 
395b30934cbSJiri Slaby     timer_del(&edu->dma_timer);
396812e710aSFei Li     msi_uninit(pdev);
397b30934cbSJiri Slaby }
398b30934cbSJiri Slaby 
399d7bce999SEric Blake static void edu_obj_uint64(Object *obj, Visitor *v, const char *name,
400d7bce999SEric Blake                            void *opaque, Error **errp)
401b30934cbSJiri Slaby {
402b30934cbSJiri Slaby     uint64_t *val = opaque;
403b30934cbSJiri Slaby 
40451e72bc1SEric Blake     visit_type_uint64(v, name, val, errp);
405b30934cbSJiri Slaby }
406b30934cbSJiri Slaby 
407b30934cbSJiri Slaby static void edu_instance_init(Object *obj)
408b30934cbSJiri Slaby {
409b30934cbSJiri Slaby     EduState *edu = EDU(obj);
410b30934cbSJiri Slaby 
411b30934cbSJiri Slaby     edu->dma_mask = (1UL << 28) - 1;
412b30934cbSJiri Slaby     object_property_add(obj, "dma_mask", "uint64", edu_obj_uint64,
413b30934cbSJiri Slaby                     edu_obj_uint64, NULL, &edu->dma_mask, NULL);
414b30934cbSJiri Slaby }
415b30934cbSJiri Slaby 
416b30934cbSJiri Slaby static void edu_class_init(ObjectClass *class, void *data)
417b30934cbSJiri Slaby {
418aae04907Skumar sourav     DeviceClass *dc = DEVICE_CLASS(class);
419b30934cbSJiri Slaby     PCIDeviceClass *k = PCI_DEVICE_CLASS(class);
420b30934cbSJiri Slaby 
421f922254cSCao jin     k->realize = pci_edu_realize;
422b30934cbSJiri Slaby     k->exit = pci_edu_uninit;
423b30934cbSJiri Slaby     k->vendor_id = PCI_VENDOR_ID_QEMU;
424b30934cbSJiri Slaby     k->device_id = 0x11e8;
425b30934cbSJiri Slaby     k->revision = 0x10;
426b30934cbSJiri Slaby     k->class_id = PCI_CLASS_OTHERS;
427aae04907Skumar sourav     set_bit(DEVICE_CATEGORY_MISC, dc->categories);
428b30934cbSJiri Slaby }
429b30934cbSJiri Slaby 
430b30934cbSJiri Slaby static void pci_edu_register_types(void)
431b30934cbSJiri Slaby {
432fd3b02c8SEduardo Habkost     static InterfaceInfo interfaces[] = {
433fd3b02c8SEduardo Habkost         { INTERFACE_CONVENTIONAL_PCI_DEVICE },
434fd3b02c8SEduardo Habkost         { },
435fd3b02c8SEduardo Habkost     };
436b30934cbSJiri Slaby     static const TypeInfo edu_info = {
4378371158bSLi Qiang         .name          = TYPE_PCI_EDU_DEVICE,
438b30934cbSJiri Slaby         .parent        = TYPE_PCI_DEVICE,
439b30934cbSJiri Slaby         .instance_size = sizeof(EduState),
440b30934cbSJiri Slaby         .instance_init = edu_instance_init,
441b30934cbSJiri Slaby         .class_init    = edu_class_init,
442fd3b02c8SEduardo Habkost         .interfaces = interfaces,
443b30934cbSJiri Slaby     };
444b30934cbSJiri Slaby 
445b30934cbSJiri Slaby     type_register_static(&edu_info);
446b30934cbSJiri Slaby }
447b30934cbSJiri Slaby type_init(pci_edu_register_types)
448