xref: /qemu/hw/misc/edu.c (revision 7fca21c8b376871892946651dddcb2f266dcca5a)
1b30934cbSJiri Slaby /*
2b30934cbSJiri Slaby  * QEMU educational PCI device
3b30934cbSJiri Slaby  *
4b30934cbSJiri Slaby  * Copyright (c) 2012-2015 Jiri Slaby
5b30934cbSJiri Slaby  *
6b30934cbSJiri Slaby  * Permission is hereby granted, free of charge, to any person obtaining a
7b30934cbSJiri Slaby  * copy of this software and associated documentation files (the "Software"),
8b30934cbSJiri Slaby  * to deal in the Software without restriction, including without limitation
9b30934cbSJiri Slaby  * the rights to use, copy, modify, merge, publish, distribute, sublicense,
10b30934cbSJiri Slaby  * and/or sell copies of the Software, and to permit persons to whom the
11b30934cbSJiri Slaby  * Software is furnished to do so, subject to the following conditions:
12b30934cbSJiri Slaby  *
13b30934cbSJiri Slaby  * The above copyright notice and this permission notice shall be included in
14b30934cbSJiri Slaby  * all copies or substantial portions of the Software.
15b30934cbSJiri Slaby  *
16b30934cbSJiri Slaby  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17b30934cbSJiri Slaby  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18b30934cbSJiri Slaby  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19b30934cbSJiri Slaby  * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20b30934cbSJiri Slaby  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
21b30934cbSJiri Slaby  * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
22b30934cbSJiri Slaby  * DEALINGS IN THE SOFTWARE.
23b30934cbSJiri Slaby  */
24b30934cbSJiri Slaby 
250d1c9782SPeter Maydell #include "qemu/osdep.h"
26de9b602eSPhilippe Mathieu-Daudé #include "qemu/units.h"
27b30934cbSJiri Slaby #include "hw/pci/pci.h"
28eabb5782SPeter Xu #include "hw/pci/msi.h"
29b30934cbSJiri Slaby #include "qemu/timer.h"
30b30934cbSJiri Slaby #include "qemu/main-loop.h" /* iothread mutex */
31b30934cbSJiri Slaby #include "qapi/visitor.h"
32b30934cbSJiri Slaby 
338371158bSLi Qiang #define TYPE_PCI_EDU_DEVICE "edu"
348371158bSLi Qiang #define EDU(obj)        OBJECT_CHECK(EduState, obj, TYPE_PCI_EDU_DEVICE)
35b30934cbSJiri Slaby 
36b30934cbSJiri Slaby #define FACT_IRQ        0x00000001
37b30934cbSJiri Slaby #define DMA_IRQ         0x00000100
38b30934cbSJiri Slaby 
39b30934cbSJiri Slaby #define DMA_START       0x40000
40b30934cbSJiri Slaby #define DMA_SIZE        4096
41b30934cbSJiri Slaby 
42b30934cbSJiri Slaby typedef struct {
43b30934cbSJiri Slaby     PCIDevice pdev;
44b30934cbSJiri Slaby     MemoryRegion mmio;
45b30934cbSJiri Slaby 
46b30934cbSJiri Slaby     QemuThread thread;
47b30934cbSJiri Slaby     QemuMutex thr_mutex;
48b30934cbSJiri Slaby     QemuCond thr_cond;
49b30934cbSJiri Slaby     bool stopping;
50b30934cbSJiri Slaby 
51b30934cbSJiri Slaby     uint32_t addr4;
52b30934cbSJiri Slaby     uint32_t fact;
53b30934cbSJiri Slaby #define EDU_STATUS_COMPUTING    0x01
54b30934cbSJiri Slaby #define EDU_STATUS_IRQFACT      0x80
55b30934cbSJiri Slaby     uint32_t status;
56b30934cbSJiri Slaby 
57b30934cbSJiri Slaby     uint32_t irq_status;
58b30934cbSJiri Slaby 
59b30934cbSJiri Slaby #define EDU_DMA_RUN             0x1
60b30934cbSJiri Slaby #define EDU_DMA_DIR(cmd)        (((cmd) & 0x2) >> 1)
61b30934cbSJiri Slaby # define EDU_DMA_FROM_PCI       0
62b30934cbSJiri Slaby # define EDU_DMA_TO_PCI         1
63b30934cbSJiri Slaby #define EDU_DMA_IRQ             0x4
64b30934cbSJiri Slaby     struct dma_state {
65b30934cbSJiri Slaby         dma_addr_t src;
66b30934cbSJiri Slaby         dma_addr_t dst;
67b30934cbSJiri Slaby         dma_addr_t cnt;
68b30934cbSJiri Slaby         dma_addr_t cmd;
69b30934cbSJiri Slaby     } dma;
70b30934cbSJiri Slaby     QEMUTimer dma_timer;
71b30934cbSJiri Slaby     char dma_buf[DMA_SIZE];
72b30934cbSJiri Slaby     uint64_t dma_mask;
73b30934cbSJiri Slaby } EduState;
74b30934cbSJiri Slaby 
75eabb5782SPeter Xu static bool edu_msi_enabled(EduState *edu)
76eabb5782SPeter Xu {
77eabb5782SPeter Xu     return msi_enabled(&edu->pdev);
78eabb5782SPeter Xu }
79eabb5782SPeter Xu 
80b30934cbSJiri Slaby static void edu_raise_irq(EduState *edu, uint32_t val)
81b30934cbSJiri Slaby {
82b30934cbSJiri Slaby     edu->irq_status |= val;
83b30934cbSJiri Slaby     if (edu->irq_status) {
84eabb5782SPeter Xu         if (edu_msi_enabled(edu)) {
85eabb5782SPeter Xu             msi_notify(&edu->pdev, 0);
86eabb5782SPeter Xu         } else {
87b30934cbSJiri Slaby             pci_set_irq(&edu->pdev, 1);
88b30934cbSJiri Slaby         }
89b30934cbSJiri Slaby     }
90eabb5782SPeter Xu }
91b30934cbSJiri Slaby 
92b30934cbSJiri Slaby static void edu_lower_irq(EduState *edu, uint32_t val)
93b30934cbSJiri Slaby {
94b30934cbSJiri Slaby     edu->irq_status &= ~val;
95b30934cbSJiri Slaby 
96eabb5782SPeter Xu     if (!edu->irq_status && !edu_msi_enabled(edu)) {
97b30934cbSJiri Slaby         pci_set_irq(&edu->pdev, 0);
98b30934cbSJiri Slaby     }
99b30934cbSJiri Slaby }
100b30934cbSJiri Slaby 
101*7fca21c8SLi Qiang static bool within(uint64_t addr, uint64_t start, uint64_t end)
102b30934cbSJiri Slaby {
103b30934cbSJiri Slaby     return start <= addr && addr < end;
104b30934cbSJiri Slaby }
105b30934cbSJiri Slaby 
106*7fca21c8SLi Qiang static void edu_check_range(uint64_t addr, uint64_t size1, uint64_t start,
107*7fca21c8SLi Qiang                 uint64_t size2)
108b30934cbSJiri Slaby {
109*7fca21c8SLi Qiang     uint64_t end1 = addr + size1;
110*7fca21c8SLi Qiang     uint64_t end2 = start + size2;
111b30934cbSJiri Slaby 
112b30934cbSJiri Slaby     if (within(addr, start, end2) &&
113b30934cbSJiri Slaby             end1 > addr && within(end1, start, end2)) {
114b30934cbSJiri Slaby         return;
115b30934cbSJiri Slaby     }
116b30934cbSJiri Slaby 
117*7fca21c8SLi Qiang     hw_error("EDU: DMA range 0x%016"PRIx64"-0x%016"PRIx64
118*7fca21c8SLi Qiang              " out of bounds (0x%016"PRIx64"-0x%016"PRIx64")!",
119b30934cbSJiri Slaby             addr, end1 - 1, start, end2 - 1);
120b30934cbSJiri Slaby }
121b30934cbSJiri Slaby 
122b30934cbSJiri Slaby static dma_addr_t edu_clamp_addr(const EduState *edu, dma_addr_t addr)
123b30934cbSJiri Slaby {
124b30934cbSJiri Slaby     dma_addr_t res = addr & edu->dma_mask;
125b30934cbSJiri Slaby 
126b30934cbSJiri Slaby     if (addr != res) {
127b30934cbSJiri Slaby         printf("EDU: clamping DMA %#.16"PRIx64" to %#.16"PRIx64"!\n", addr, res);
128b30934cbSJiri Slaby     }
129b30934cbSJiri Slaby 
130b30934cbSJiri Slaby     return res;
131b30934cbSJiri Slaby }
132b30934cbSJiri Slaby 
133b30934cbSJiri Slaby static void edu_dma_timer(void *opaque)
134b30934cbSJiri Slaby {
135b30934cbSJiri Slaby     EduState *edu = opaque;
136b30934cbSJiri Slaby     bool raise_irq = false;
137b30934cbSJiri Slaby 
138b30934cbSJiri Slaby     if (!(edu->dma.cmd & EDU_DMA_RUN)) {
139b30934cbSJiri Slaby         return;
140b30934cbSJiri Slaby     }
141b30934cbSJiri Slaby 
142b30934cbSJiri Slaby     if (EDU_DMA_DIR(edu->dma.cmd) == EDU_DMA_FROM_PCI) {
143*7fca21c8SLi Qiang         uint64_t dst = edu->dma.dst;
144b30934cbSJiri Slaby         edu_check_range(dst, edu->dma.cnt, DMA_START, DMA_SIZE);
145b30934cbSJiri Slaby         dst -= DMA_START;
146b30934cbSJiri Slaby         pci_dma_read(&edu->pdev, edu_clamp_addr(edu, edu->dma.src),
147b30934cbSJiri Slaby                 edu->dma_buf + dst, edu->dma.cnt);
148b30934cbSJiri Slaby     } else {
149*7fca21c8SLi Qiang         uint64_t src = edu->dma.src;
150b30934cbSJiri Slaby         edu_check_range(src, edu->dma.cnt, DMA_START, DMA_SIZE);
151b30934cbSJiri Slaby         src -= DMA_START;
152b30934cbSJiri Slaby         pci_dma_write(&edu->pdev, edu_clamp_addr(edu, edu->dma.dst),
153b30934cbSJiri Slaby                 edu->dma_buf + src, edu->dma.cnt);
154b30934cbSJiri Slaby     }
155b30934cbSJiri Slaby 
156b30934cbSJiri Slaby     edu->dma.cmd &= ~EDU_DMA_RUN;
157b30934cbSJiri Slaby     if (edu->dma.cmd & EDU_DMA_IRQ) {
158b30934cbSJiri Slaby         raise_irq = true;
159b30934cbSJiri Slaby     }
160b30934cbSJiri Slaby 
161b30934cbSJiri Slaby     if (raise_irq) {
162b30934cbSJiri Slaby         edu_raise_irq(edu, DMA_IRQ);
163b30934cbSJiri Slaby     }
164b30934cbSJiri Slaby }
165b30934cbSJiri Slaby 
166b30934cbSJiri Slaby static void dma_rw(EduState *edu, bool write, dma_addr_t *val, dma_addr_t *dma,
167b30934cbSJiri Slaby                 bool timer)
168b30934cbSJiri Slaby {
169b30934cbSJiri Slaby     if (write && (edu->dma.cmd & EDU_DMA_RUN)) {
170b30934cbSJiri Slaby         return;
171b30934cbSJiri Slaby     }
172b30934cbSJiri Slaby 
173b30934cbSJiri Slaby     if (write) {
174b30934cbSJiri Slaby         *dma = *val;
175b30934cbSJiri Slaby     } else {
176b30934cbSJiri Slaby         *val = *dma;
177b30934cbSJiri Slaby     }
178b30934cbSJiri Slaby 
179b30934cbSJiri Slaby     if (timer) {
180b30934cbSJiri Slaby         timer_mod(&edu->dma_timer, qemu_clock_get_ms(QEMU_CLOCK_VIRTUAL) + 100);
181b30934cbSJiri Slaby     }
182b30934cbSJiri Slaby }
183b30934cbSJiri Slaby 
184b30934cbSJiri Slaby static uint64_t edu_mmio_read(void *opaque, hwaddr addr, unsigned size)
185b30934cbSJiri Slaby {
186b30934cbSJiri Slaby     EduState *edu = opaque;
187b30934cbSJiri Slaby     uint64_t val = ~0ULL;
188b30934cbSJiri Slaby 
189c45eb53aSLi Qiang     if (addr < 0x80 && size != 4) {
190c45eb53aSLi Qiang         return val;
191c45eb53aSLi Qiang     }
192c45eb53aSLi Qiang 
193c45eb53aSLi Qiang     if (addr >= 0x80 && size != 4 && size != 8) {
194b30934cbSJiri Slaby         return val;
195b30934cbSJiri Slaby     }
196b30934cbSJiri Slaby 
197b30934cbSJiri Slaby     switch (addr) {
198b30934cbSJiri Slaby     case 0x00:
199b30934cbSJiri Slaby         val = 0x010000edu;
200b30934cbSJiri Slaby         break;
201b30934cbSJiri Slaby     case 0x04:
202b30934cbSJiri Slaby         val = edu->addr4;
203b30934cbSJiri Slaby         break;
204b30934cbSJiri Slaby     case 0x08:
205b30934cbSJiri Slaby         qemu_mutex_lock(&edu->thr_mutex);
206b30934cbSJiri Slaby         val = edu->fact;
207b30934cbSJiri Slaby         qemu_mutex_unlock(&edu->thr_mutex);
208b30934cbSJiri Slaby         break;
209b30934cbSJiri Slaby     case 0x20:
210b30934cbSJiri Slaby         val = atomic_read(&edu->status);
211b30934cbSJiri Slaby         break;
212b30934cbSJiri Slaby     case 0x24:
213b30934cbSJiri Slaby         val = edu->irq_status;
214b30934cbSJiri Slaby         break;
215b30934cbSJiri Slaby     case 0x80:
216b30934cbSJiri Slaby         dma_rw(edu, false, &val, &edu->dma.src, false);
217b30934cbSJiri Slaby         break;
218b30934cbSJiri Slaby     case 0x88:
219b30934cbSJiri Slaby         dma_rw(edu, false, &val, &edu->dma.dst, false);
220b30934cbSJiri Slaby         break;
221b30934cbSJiri Slaby     case 0x90:
222b30934cbSJiri Slaby         dma_rw(edu, false, &val, &edu->dma.cnt, false);
223b30934cbSJiri Slaby         break;
224b30934cbSJiri Slaby     case 0x98:
225b30934cbSJiri Slaby         dma_rw(edu, false, &val, &edu->dma.cmd, false);
226b30934cbSJiri Slaby         break;
227b30934cbSJiri Slaby     }
228b30934cbSJiri Slaby 
229b30934cbSJiri Slaby     return val;
230b30934cbSJiri Slaby }
231b30934cbSJiri Slaby 
232b30934cbSJiri Slaby static void edu_mmio_write(void *opaque, hwaddr addr, uint64_t val,
233b30934cbSJiri Slaby                 unsigned size)
234b30934cbSJiri Slaby {
235b30934cbSJiri Slaby     EduState *edu = opaque;
236b30934cbSJiri Slaby 
237b30934cbSJiri Slaby     if (addr < 0x80 && size != 4) {
238b30934cbSJiri Slaby         return;
239b30934cbSJiri Slaby     }
240b30934cbSJiri Slaby 
241b30934cbSJiri Slaby     if (addr >= 0x80 && size != 4 && size != 8) {
242b30934cbSJiri Slaby         return;
243b30934cbSJiri Slaby     }
244b30934cbSJiri Slaby 
245b30934cbSJiri Slaby     switch (addr) {
246b30934cbSJiri Slaby     case 0x04:
247b30934cbSJiri Slaby         edu->addr4 = ~val;
248b30934cbSJiri Slaby         break;
249b30934cbSJiri Slaby     case 0x08:
250b30934cbSJiri Slaby         if (atomic_read(&edu->status) & EDU_STATUS_COMPUTING) {
251b30934cbSJiri Slaby             break;
252b30934cbSJiri Slaby         }
253b30934cbSJiri Slaby         /* EDU_STATUS_COMPUTING cannot go 0->1 concurrently, because it is only
254b30934cbSJiri Slaby          * set in this function and it is under the iothread mutex.
255b30934cbSJiri Slaby          */
256b30934cbSJiri Slaby         qemu_mutex_lock(&edu->thr_mutex);
257b30934cbSJiri Slaby         edu->fact = val;
258b30934cbSJiri Slaby         atomic_or(&edu->status, EDU_STATUS_COMPUTING);
259b30934cbSJiri Slaby         qemu_cond_signal(&edu->thr_cond);
260b30934cbSJiri Slaby         qemu_mutex_unlock(&edu->thr_mutex);
261b30934cbSJiri Slaby         break;
262b30934cbSJiri Slaby     case 0x20:
263b30934cbSJiri Slaby         if (val & EDU_STATUS_IRQFACT) {
264b30934cbSJiri Slaby             atomic_or(&edu->status, EDU_STATUS_IRQFACT);
265b30934cbSJiri Slaby         } else {
266b30934cbSJiri Slaby             atomic_and(&edu->status, ~EDU_STATUS_IRQFACT);
267b30934cbSJiri Slaby         }
268b30934cbSJiri Slaby         break;
269b30934cbSJiri Slaby     case 0x60:
270b30934cbSJiri Slaby         edu_raise_irq(edu, val);
271b30934cbSJiri Slaby         break;
272b30934cbSJiri Slaby     case 0x64:
273b30934cbSJiri Slaby         edu_lower_irq(edu, val);
274b30934cbSJiri Slaby         break;
275b30934cbSJiri Slaby     case 0x80:
276b30934cbSJiri Slaby         dma_rw(edu, true, &val, &edu->dma.src, false);
277b30934cbSJiri Slaby         break;
278b30934cbSJiri Slaby     case 0x88:
279b30934cbSJiri Slaby         dma_rw(edu, true, &val, &edu->dma.dst, false);
280b30934cbSJiri Slaby         break;
281b30934cbSJiri Slaby     case 0x90:
282b30934cbSJiri Slaby         dma_rw(edu, true, &val, &edu->dma.cnt, false);
283b30934cbSJiri Slaby         break;
284b30934cbSJiri Slaby     case 0x98:
285b30934cbSJiri Slaby         if (!(val & EDU_DMA_RUN)) {
286b30934cbSJiri Slaby             break;
287b30934cbSJiri Slaby         }
288b30934cbSJiri Slaby         dma_rw(edu, true, &val, &edu->dma.cmd, true);
289b30934cbSJiri Slaby         break;
290b30934cbSJiri Slaby     }
291b30934cbSJiri Slaby }
292b30934cbSJiri Slaby 
293b30934cbSJiri Slaby static const MemoryRegionOps edu_mmio_ops = {
294b30934cbSJiri Slaby     .read = edu_mmio_read,
295b30934cbSJiri Slaby     .write = edu_mmio_write,
296b30934cbSJiri Slaby     .endianness = DEVICE_NATIVE_ENDIAN,
29720fb3105SLi Qiang     .valid = {
29820fb3105SLi Qiang         .min_access_size = 4,
29920fb3105SLi Qiang         .max_access_size = 8,
30020fb3105SLi Qiang     },
30120fb3105SLi Qiang     .impl = {
30220fb3105SLi Qiang         .min_access_size = 4,
30320fb3105SLi Qiang         .max_access_size = 8,
30420fb3105SLi Qiang     },
30520fb3105SLi Qiang 
306b30934cbSJiri Slaby };
307b30934cbSJiri Slaby 
308b30934cbSJiri Slaby /*
309631b22eaSStefan Weil  * We purposely use a thread, so that users are forced to wait for the status
310b30934cbSJiri Slaby  * register.
311b30934cbSJiri Slaby  */
312b30934cbSJiri Slaby static void *edu_fact_thread(void *opaque)
313b30934cbSJiri Slaby {
314b30934cbSJiri Slaby     EduState *edu = opaque;
315b30934cbSJiri Slaby 
316b30934cbSJiri Slaby     while (1) {
317b30934cbSJiri Slaby         uint32_t val, ret = 1;
318b30934cbSJiri Slaby 
319b30934cbSJiri Slaby         qemu_mutex_lock(&edu->thr_mutex);
320b30934cbSJiri Slaby         while ((atomic_read(&edu->status) & EDU_STATUS_COMPUTING) == 0 &&
321b30934cbSJiri Slaby                         !edu->stopping) {
322b30934cbSJiri Slaby             qemu_cond_wait(&edu->thr_cond, &edu->thr_mutex);
323b30934cbSJiri Slaby         }
324b30934cbSJiri Slaby 
325b30934cbSJiri Slaby         if (edu->stopping) {
326b30934cbSJiri Slaby             qemu_mutex_unlock(&edu->thr_mutex);
327b30934cbSJiri Slaby             break;
328b30934cbSJiri Slaby         }
329b30934cbSJiri Slaby 
330b30934cbSJiri Slaby         val = edu->fact;
331b30934cbSJiri Slaby         qemu_mutex_unlock(&edu->thr_mutex);
332b30934cbSJiri Slaby 
333b30934cbSJiri Slaby         while (val > 0) {
334b30934cbSJiri Slaby             ret *= val--;
335b30934cbSJiri Slaby         }
336b30934cbSJiri Slaby 
337b30934cbSJiri Slaby         /*
338b30934cbSJiri Slaby          * We should sleep for a random period here, so that students are
339b30934cbSJiri Slaby          * forced to check the status properly.
340b30934cbSJiri Slaby          */
341b30934cbSJiri Slaby 
342b30934cbSJiri Slaby         qemu_mutex_lock(&edu->thr_mutex);
343b30934cbSJiri Slaby         edu->fact = ret;
344b30934cbSJiri Slaby         qemu_mutex_unlock(&edu->thr_mutex);
345b30934cbSJiri Slaby         atomic_and(&edu->status, ~EDU_STATUS_COMPUTING);
346b30934cbSJiri Slaby 
347b30934cbSJiri Slaby         if (atomic_read(&edu->status) & EDU_STATUS_IRQFACT) {
348b30934cbSJiri Slaby             qemu_mutex_lock_iothread();
349b30934cbSJiri Slaby             edu_raise_irq(edu, FACT_IRQ);
350b30934cbSJiri Slaby             qemu_mutex_unlock_iothread();
351b30934cbSJiri Slaby         }
352b30934cbSJiri Slaby     }
353b30934cbSJiri Slaby 
354b30934cbSJiri Slaby     return NULL;
355b30934cbSJiri Slaby }
356b30934cbSJiri Slaby 
357f922254cSCao jin static void pci_edu_realize(PCIDevice *pdev, Error **errp)
358b30934cbSJiri Slaby {
359a519e389SLi Qiang     EduState *edu = EDU(pdev);
360b30934cbSJiri Slaby     uint8_t *pci_conf = pdev->config;
361b30934cbSJiri Slaby 
362c25a67f0SPaolo Bonzini     pci_config_set_interrupt_pin(pci_conf, 1);
363c25a67f0SPaolo Bonzini 
364c25a67f0SPaolo Bonzini     if (msi_init(pdev, 0, 1, true, false, errp)) {
365c25a67f0SPaolo Bonzini         return;
366c25a67f0SPaolo Bonzini     }
367c25a67f0SPaolo Bonzini 
368b30934cbSJiri Slaby     timer_init_ms(&edu->dma_timer, QEMU_CLOCK_VIRTUAL, edu_dma_timer, edu);
369b30934cbSJiri Slaby 
370b30934cbSJiri Slaby     qemu_mutex_init(&edu->thr_mutex);
371b30934cbSJiri Slaby     qemu_cond_init(&edu->thr_cond);
372b30934cbSJiri Slaby     qemu_thread_create(&edu->thread, "edu", edu_fact_thread,
373b30934cbSJiri Slaby                        edu, QEMU_THREAD_JOINABLE);
374b30934cbSJiri Slaby 
375b30934cbSJiri Slaby     memory_region_init_io(&edu->mmio, OBJECT(edu), &edu_mmio_ops, edu,
376de9b602eSPhilippe Mathieu-Daudé                     "edu-mmio", 1 * MiB);
377b30934cbSJiri Slaby     pci_register_bar(pdev, 0, PCI_BASE_ADDRESS_SPACE_MEMORY, &edu->mmio);
378b30934cbSJiri Slaby }
379b30934cbSJiri Slaby 
380b30934cbSJiri Slaby static void pci_edu_uninit(PCIDevice *pdev)
381b30934cbSJiri Slaby {
382a519e389SLi Qiang     EduState *edu = EDU(pdev);
383b30934cbSJiri Slaby 
384b30934cbSJiri Slaby     qemu_mutex_lock(&edu->thr_mutex);
385b30934cbSJiri Slaby     edu->stopping = true;
386b30934cbSJiri Slaby     qemu_mutex_unlock(&edu->thr_mutex);
387b30934cbSJiri Slaby     qemu_cond_signal(&edu->thr_cond);
388b30934cbSJiri Slaby     qemu_thread_join(&edu->thread);
389b30934cbSJiri Slaby 
390b30934cbSJiri Slaby     qemu_cond_destroy(&edu->thr_cond);
391b30934cbSJiri Slaby     qemu_mutex_destroy(&edu->thr_mutex);
392b30934cbSJiri Slaby 
393b30934cbSJiri Slaby     timer_del(&edu->dma_timer);
394812e710aSFei Li     msi_uninit(pdev);
395b30934cbSJiri Slaby }
396b30934cbSJiri Slaby 
397d7bce999SEric Blake static void edu_obj_uint64(Object *obj, Visitor *v, const char *name,
398d7bce999SEric Blake                            void *opaque, Error **errp)
399b30934cbSJiri Slaby {
400b30934cbSJiri Slaby     uint64_t *val = opaque;
401b30934cbSJiri Slaby 
40251e72bc1SEric Blake     visit_type_uint64(v, name, val, errp);
403b30934cbSJiri Slaby }
404b30934cbSJiri Slaby 
405b30934cbSJiri Slaby static void edu_instance_init(Object *obj)
406b30934cbSJiri Slaby {
407b30934cbSJiri Slaby     EduState *edu = EDU(obj);
408b30934cbSJiri Slaby 
409b30934cbSJiri Slaby     edu->dma_mask = (1UL << 28) - 1;
410b30934cbSJiri Slaby     object_property_add(obj, "dma_mask", "uint64", edu_obj_uint64,
411b30934cbSJiri Slaby                     edu_obj_uint64, NULL, &edu->dma_mask, NULL);
412b30934cbSJiri Slaby }
413b30934cbSJiri Slaby 
414b30934cbSJiri Slaby static void edu_class_init(ObjectClass *class, void *data)
415b30934cbSJiri Slaby {
416aae04907Skumar sourav     DeviceClass *dc = DEVICE_CLASS(class);
417b30934cbSJiri Slaby     PCIDeviceClass *k = PCI_DEVICE_CLASS(class);
418b30934cbSJiri Slaby 
419f922254cSCao jin     k->realize = pci_edu_realize;
420b30934cbSJiri Slaby     k->exit = pci_edu_uninit;
421b30934cbSJiri Slaby     k->vendor_id = PCI_VENDOR_ID_QEMU;
422b30934cbSJiri Slaby     k->device_id = 0x11e8;
423b30934cbSJiri Slaby     k->revision = 0x10;
424b30934cbSJiri Slaby     k->class_id = PCI_CLASS_OTHERS;
425aae04907Skumar sourav     set_bit(DEVICE_CATEGORY_MISC, dc->categories);
426b30934cbSJiri Slaby }
427b30934cbSJiri Slaby 
428b30934cbSJiri Slaby static void pci_edu_register_types(void)
429b30934cbSJiri Slaby {
430fd3b02c8SEduardo Habkost     static InterfaceInfo interfaces[] = {
431fd3b02c8SEduardo Habkost         { INTERFACE_CONVENTIONAL_PCI_DEVICE },
432fd3b02c8SEduardo Habkost         { },
433fd3b02c8SEduardo Habkost     };
434b30934cbSJiri Slaby     static const TypeInfo edu_info = {
4358371158bSLi Qiang         .name          = TYPE_PCI_EDU_DEVICE,
436b30934cbSJiri Slaby         .parent        = TYPE_PCI_DEVICE,
437b30934cbSJiri Slaby         .instance_size = sizeof(EduState),
438b30934cbSJiri Slaby         .instance_init = edu_instance_init,
439b30934cbSJiri Slaby         .class_init    = edu_class_init,
440fd3b02c8SEduardo Habkost         .interfaces = interfaces,
441b30934cbSJiri Slaby     };
442b30934cbSJiri Slaby 
443b30934cbSJiri Slaby     type_register_static(&edu_info);
444b30934cbSJiri Slaby }
445b30934cbSJiri Slaby type_init(pci_edu_register_types)
446