xref: /qemu/hw/misc/edu.c (revision c25a67f0c3d0c86231f9653267a222c4effa706f)
1b30934cbSJiri Slaby /*
2b30934cbSJiri Slaby  * QEMU educational PCI device
3b30934cbSJiri Slaby  *
4b30934cbSJiri Slaby  * Copyright (c) 2012-2015 Jiri Slaby
5b30934cbSJiri Slaby  *
6b30934cbSJiri Slaby  * Permission is hereby granted, free of charge, to any person obtaining a
7b30934cbSJiri Slaby  * copy of this software and associated documentation files (the "Software"),
8b30934cbSJiri Slaby  * to deal in the Software without restriction, including without limitation
9b30934cbSJiri Slaby  * the rights to use, copy, modify, merge, publish, distribute, sublicense,
10b30934cbSJiri Slaby  * and/or sell copies of the Software, and to permit persons to whom the
11b30934cbSJiri Slaby  * Software is furnished to do so, subject to the following conditions:
12b30934cbSJiri Slaby  *
13b30934cbSJiri Slaby  * The above copyright notice and this permission notice shall be included in
14b30934cbSJiri Slaby  * all copies or substantial portions of the Software.
15b30934cbSJiri Slaby  *
16b30934cbSJiri Slaby  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17b30934cbSJiri Slaby  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18b30934cbSJiri Slaby  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19b30934cbSJiri Slaby  * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20b30934cbSJiri Slaby  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
21b30934cbSJiri Slaby  * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
22b30934cbSJiri Slaby  * DEALINGS IN THE SOFTWARE.
23b30934cbSJiri Slaby  */
24b30934cbSJiri Slaby 
250d1c9782SPeter Maydell #include "qemu/osdep.h"
26b30934cbSJiri Slaby #include "hw/pci/pci.h"
27eabb5782SPeter Xu #include "hw/pci/msi.h"
28b30934cbSJiri Slaby #include "qemu/timer.h"
29b30934cbSJiri Slaby #include "qemu/main-loop.h" /* iothread mutex */
30b30934cbSJiri Slaby #include "qapi/visitor.h"
31b30934cbSJiri Slaby 
32b30934cbSJiri Slaby #define EDU(obj)        OBJECT_CHECK(EduState, obj, "edu")
33b30934cbSJiri Slaby 
34b30934cbSJiri Slaby #define FACT_IRQ        0x00000001
35b30934cbSJiri Slaby #define DMA_IRQ         0x00000100
36b30934cbSJiri Slaby 
37b30934cbSJiri Slaby #define DMA_START       0x40000
38b30934cbSJiri Slaby #define DMA_SIZE        4096
39b30934cbSJiri Slaby 
40b30934cbSJiri Slaby typedef struct {
41b30934cbSJiri Slaby     PCIDevice pdev;
42b30934cbSJiri Slaby     MemoryRegion mmio;
43b30934cbSJiri Slaby 
44b30934cbSJiri Slaby     QemuThread thread;
45b30934cbSJiri Slaby     QemuMutex thr_mutex;
46b30934cbSJiri Slaby     QemuCond thr_cond;
47b30934cbSJiri Slaby     bool stopping;
48b30934cbSJiri Slaby 
49b30934cbSJiri Slaby     uint32_t addr4;
50b30934cbSJiri Slaby     uint32_t fact;
51b30934cbSJiri Slaby #define EDU_STATUS_COMPUTING    0x01
52b30934cbSJiri Slaby #define EDU_STATUS_IRQFACT      0x80
53b30934cbSJiri Slaby     uint32_t status;
54b30934cbSJiri Slaby 
55b30934cbSJiri Slaby     uint32_t irq_status;
56b30934cbSJiri Slaby 
57b30934cbSJiri Slaby #define EDU_DMA_RUN             0x1
58b30934cbSJiri Slaby #define EDU_DMA_DIR(cmd)        (((cmd) & 0x2) >> 1)
59b30934cbSJiri Slaby # define EDU_DMA_FROM_PCI       0
60b30934cbSJiri Slaby # define EDU_DMA_TO_PCI         1
61b30934cbSJiri Slaby #define EDU_DMA_IRQ             0x4
62b30934cbSJiri Slaby     struct dma_state {
63b30934cbSJiri Slaby         dma_addr_t src;
64b30934cbSJiri Slaby         dma_addr_t dst;
65b30934cbSJiri Slaby         dma_addr_t cnt;
66b30934cbSJiri Slaby         dma_addr_t cmd;
67b30934cbSJiri Slaby     } dma;
68b30934cbSJiri Slaby     QEMUTimer dma_timer;
69b30934cbSJiri Slaby     char dma_buf[DMA_SIZE];
70b30934cbSJiri Slaby     uint64_t dma_mask;
71b30934cbSJiri Slaby } EduState;
72b30934cbSJiri Slaby 
73eabb5782SPeter Xu static bool edu_msi_enabled(EduState *edu)
74eabb5782SPeter Xu {
75eabb5782SPeter Xu     return msi_enabled(&edu->pdev);
76eabb5782SPeter Xu }
77eabb5782SPeter Xu 
78b30934cbSJiri Slaby static void edu_raise_irq(EduState *edu, uint32_t val)
79b30934cbSJiri Slaby {
80b30934cbSJiri Slaby     edu->irq_status |= val;
81b30934cbSJiri Slaby     if (edu->irq_status) {
82eabb5782SPeter Xu         if (edu_msi_enabled(edu)) {
83eabb5782SPeter Xu             msi_notify(&edu->pdev, 0);
84eabb5782SPeter Xu         } else {
85b30934cbSJiri Slaby             pci_set_irq(&edu->pdev, 1);
86b30934cbSJiri Slaby         }
87b30934cbSJiri Slaby     }
88eabb5782SPeter Xu }
89b30934cbSJiri Slaby 
90b30934cbSJiri Slaby static void edu_lower_irq(EduState *edu, uint32_t val)
91b30934cbSJiri Slaby {
92b30934cbSJiri Slaby     edu->irq_status &= ~val;
93b30934cbSJiri Slaby 
94eabb5782SPeter Xu     if (!edu->irq_status && !edu_msi_enabled(edu)) {
95b30934cbSJiri Slaby         pci_set_irq(&edu->pdev, 0);
96b30934cbSJiri Slaby     }
97b30934cbSJiri Slaby }
98b30934cbSJiri Slaby 
99b30934cbSJiri Slaby static bool within(uint32_t addr, uint32_t start, uint32_t end)
100b30934cbSJiri Slaby {
101b30934cbSJiri Slaby     return start <= addr && addr < end;
102b30934cbSJiri Slaby }
103b30934cbSJiri Slaby 
104b30934cbSJiri Slaby static void edu_check_range(uint32_t addr, uint32_t size1, uint32_t start,
105b30934cbSJiri Slaby                 uint32_t size2)
106b30934cbSJiri Slaby {
107b30934cbSJiri Slaby     uint32_t end1 = addr + size1;
108b30934cbSJiri Slaby     uint32_t end2 = start + size2;
109b30934cbSJiri Slaby 
110b30934cbSJiri Slaby     if (within(addr, start, end2) &&
111b30934cbSJiri Slaby             end1 > addr && within(end1, start, end2)) {
112b30934cbSJiri Slaby         return;
113b30934cbSJiri Slaby     }
114b30934cbSJiri Slaby 
115b30934cbSJiri Slaby     hw_error("EDU: DMA range 0x%.8x-0x%.8x out of bounds (0x%.8x-0x%.8x)!",
116b30934cbSJiri Slaby             addr, end1 - 1, start, end2 - 1);
117b30934cbSJiri Slaby }
118b30934cbSJiri Slaby 
119b30934cbSJiri Slaby static dma_addr_t edu_clamp_addr(const EduState *edu, dma_addr_t addr)
120b30934cbSJiri Slaby {
121b30934cbSJiri Slaby     dma_addr_t res = addr & edu->dma_mask;
122b30934cbSJiri Slaby 
123b30934cbSJiri Slaby     if (addr != res) {
124b30934cbSJiri Slaby         printf("EDU: clamping DMA %#.16"PRIx64" to %#.16"PRIx64"!\n", addr, res);
125b30934cbSJiri Slaby     }
126b30934cbSJiri Slaby 
127b30934cbSJiri Slaby     return res;
128b30934cbSJiri Slaby }
129b30934cbSJiri Slaby 
130b30934cbSJiri Slaby static void edu_dma_timer(void *opaque)
131b30934cbSJiri Slaby {
132b30934cbSJiri Slaby     EduState *edu = opaque;
133b30934cbSJiri Slaby     bool raise_irq = false;
134b30934cbSJiri Slaby 
135b30934cbSJiri Slaby     if (!(edu->dma.cmd & EDU_DMA_RUN)) {
136b30934cbSJiri Slaby         return;
137b30934cbSJiri Slaby     }
138b30934cbSJiri Slaby 
139b30934cbSJiri Slaby     if (EDU_DMA_DIR(edu->dma.cmd) == EDU_DMA_FROM_PCI) {
140b30934cbSJiri Slaby         uint32_t dst = edu->dma.dst;
141b30934cbSJiri Slaby         edu_check_range(dst, edu->dma.cnt, DMA_START, DMA_SIZE);
142b30934cbSJiri Slaby         dst -= DMA_START;
143b30934cbSJiri Slaby         pci_dma_read(&edu->pdev, edu_clamp_addr(edu, edu->dma.src),
144b30934cbSJiri Slaby                 edu->dma_buf + dst, edu->dma.cnt);
145b30934cbSJiri Slaby     } else {
146b30934cbSJiri Slaby         uint32_t src = edu->dma.src;
147b30934cbSJiri Slaby         edu_check_range(src, edu->dma.cnt, DMA_START, DMA_SIZE);
148b30934cbSJiri Slaby         src -= DMA_START;
149b30934cbSJiri Slaby         pci_dma_write(&edu->pdev, edu_clamp_addr(edu, edu->dma.dst),
150b30934cbSJiri Slaby                 edu->dma_buf + src, edu->dma.cnt);
151b30934cbSJiri Slaby     }
152b30934cbSJiri Slaby 
153b30934cbSJiri Slaby     edu->dma.cmd &= ~EDU_DMA_RUN;
154b30934cbSJiri Slaby     if (edu->dma.cmd & EDU_DMA_IRQ) {
155b30934cbSJiri Slaby         raise_irq = true;
156b30934cbSJiri Slaby     }
157b30934cbSJiri Slaby 
158b30934cbSJiri Slaby     if (raise_irq) {
159b30934cbSJiri Slaby         edu_raise_irq(edu, DMA_IRQ);
160b30934cbSJiri Slaby     }
161b30934cbSJiri Slaby }
162b30934cbSJiri Slaby 
163b30934cbSJiri Slaby static void dma_rw(EduState *edu, bool write, dma_addr_t *val, dma_addr_t *dma,
164b30934cbSJiri Slaby                 bool timer)
165b30934cbSJiri Slaby {
166b30934cbSJiri Slaby     if (write && (edu->dma.cmd & EDU_DMA_RUN)) {
167b30934cbSJiri Slaby         return;
168b30934cbSJiri Slaby     }
169b30934cbSJiri Slaby 
170b30934cbSJiri Slaby     if (write) {
171b30934cbSJiri Slaby         *dma = *val;
172b30934cbSJiri Slaby     } else {
173b30934cbSJiri Slaby         *val = *dma;
174b30934cbSJiri Slaby     }
175b30934cbSJiri Slaby 
176b30934cbSJiri Slaby     if (timer) {
177b30934cbSJiri Slaby         timer_mod(&edu->dma_timer, qemu_clock_get_ms(QEMU_CLOCK_VIRTUAL) + 100);
178b30934cbSJiri Slaby     }
179b30934cbSJiri Slaby }
180b30934cbSJiri Slaby 
181b30934cbSJiri Slaby static uint64_t edu_mmio_read(void *opaque, hwaddr addr, unsigned size)
182b30934cbSJiri Slaby {
183b30934cbSJiri Slaby     EduState *edu = opaque;
184b30934cbSJiri Slaby     uint64_t val = ~0ULL;
185b30934cbSJiri Slaby 
186b30934cbSJiri Slaby     if (size != 4) {
187b30934cbSJiri Slaby         return val;
188b30934cbSJiri Slaby     }
189b30934cbSJiri Slaby 
190b30934cbSJiri Slaby     switch (addr) {
191b30934cbSJiri Slaby     case 0x00:
192b30934cbSJiri Slaby         val = 0x010000edu;
193b30934cbSJiri Slaby         break;
194b30934cbSJiri Slaby     case 0x04:
195b30934cbSJiri Slaby         val = edu->addr4;
196b30934cbSJiri Slaby         break;
197b30934cbSJiri Slaby     case 0x08:
198b30934cbSJiri Slaby         qemu_mutex_lock(&edu->thr_mutex);
199b30934cbSJiri Slaby         val = edu->fact;
200b30934cbSJiri Slaby         qemu_mutex_unlock(&edu->thr_mutex);
201b30934cbSJiri Slaby         break;
202b30934cbSJiri Slaby     case 0x20:
203b30934cbSJiri Slaby         val = atomic_read(&edu->status);
204b30934cbSJiri Slaby         break;
205b30934cbSJiri Slaby     case 0x24:
206b30934cbSJiri Slaby         val = edu->irq_status;
207b30934cbSJiri Slaby         break;
208b30934cbSJiri Slaby     case 0x80:
209b30934cbSJiri Slaby         dma_rw(edu, false, &val, &edu->dma.src, false);
210b30934cbSJiri Slaby         break;
211b30934cbSJiri Slaby     case 0x88:
212b30934cbSJiri Slaby         dma_rw(edu, false, &val, &edu->dma.dst, false);
213b30934cbSJiri Slaby         break;
214b30934cbSJiri Slaby     case 0x90:
215b30934cbSJiri Slaby         dma_rw(edu, false, &val, &edu->dma.cnt, false);
216b30934cbSJiri Slaby         break;
217b30934cbSJiri Slaby     case 0x98:
218b30934cbSJiri Slaby         dma_rw(edu, false, &val, &edu->dma.cmd, false);
219b30934cbSJiri Slaby         break;
220b30934cbSJiri Slaby     }
221b30934cbSJiri Slaby 
222b30934cbSJiri Slaby     return val;
223b30934cbSJiri Slaby }
224b30934cbSJiri Slaby 
225b30934cbSJiri Slaby static void edu_mmio_write(void *opaque, hwaddr addr, uint64_t val,
226b30934cbSJiri Slaby                 unsigned size)
227b30934cbSJiri Slaby {
228b30934cbSJiri Slaby     EduState *edu = opaque;
229b30934cbSJiri Slaby 
230b30934cbSJiri Slaby     if (addr < 0x80 && size != 4) {
231b30934cbSJiri Slaby         return;
232b30934cbSJiri Slaby     }
233b30934cbSJiri Slaby 
234b30934cbSJiri Slaby     if (addr >= 0x80 && size != 4 && size != 8) {
235b30934cbSJiri Slaby         return;
236b30934cbSJiri Slaby     }
237b30934cbSJiri Slaby 
238b30934cbSJiri Slaby     switch (addr) {
239b30934cbSJiri Slaby     case 0x04:
240b30934cbSJiri Slaby         edu->addr4 = ~val;
241b30934cbSJiri Slaby         break;
242b30934cbSJiri Slaby     case 0x08:
243b30934cbSJiri Slaby         if (atomic_read(&edu->status) & EDU_STATUS_COMPUTING) {
244b30934cbSJiri Slaby             break;
245b30934cbSJiri Slaby         }
246b30934cbSJiri Slaby         /* EDU_STATUS_COMPUTING cannot go 0->1 concurrently, because it is only
247b30934cbSJiri Slaby          * set in this function and it is under the iothread mutex.
248b30934cbSJiri Slaby          */
249b30934cbSJiri Slaby         qemu_mutex_lock(&edu->thr_mutex);
250b30934cbSJiri Slaby         edu->fact = val;
251b30934cbSJiri Slaby         atomic_or(&edu->status, EDU_STATUS_COMPUTING);
252b30934cbSJiri Slaby         qemu_cond_signal(&edu->thr_cond);
253b30934cbSJiri Slaby         qemu_mutex_unlock(&edu->thr_mutex);
254b30934cbSJiri Slaby         break;
255b30934cbSJiri Slaby     case 0x20:
256b30934cbSJiri Slaby         if (val & EDU_STATUS_IRQFACT) {
257b30934cbSJiri Slaby             atomic_or(&edu->status, EDU_STATUS_IRQFACT);
258b30934cbSJiri Slaby         } else {
259b30934cbSJiri Slaby             atomic_and(&edu->status, ~EDU_STATUS_IRQFACT);
260b30934cbSJiri Slaby         }
261b30934cbSJiri Slaby         break;
262b30934cbSJiri Slaby     case 0x60:
263b30934cbSJiri Slaby         edu_raise_irq(edu, val);
264b30934cbSJiri Slaby         break;
265b30934cbSJiri Slaby     case 0x64:
266b30934cbSJiri Slaby         edu_lower_irq(edu, val);
267b30934cbSJiri Slaby         break;
268b30934cbSJiri Slaby     case 0x80:
269b30934cbSJiri Slaby         dma_rw(edu, true, &val, &edu->dma.src, false);
270b30934cbSJiri Slaby         break;
271b30934cbSJiri Slaby     case 0x88:
272b30934cbSJiri Slaby         dma_rw(edu, true, &val, &edu->dma.dst, false);
273b30934cbSJiri Slaby         break;
274b30934cbSJiri Slaby     case 0x90:
275b30934cbSJiri Slaby         dma_rw(edu, true, &val, &edu->dma.cnt, false);
276b30934cbSJiri Slaby         break;
277b30934cbSJiri Slaby     case 0x98:
278b30934cbSJiri Slaby         if (!(val & EDU_DMA_RUN)) {
279b30934cbSJiri Slaby             break;
280b30934cbSJiri Slaby         }
281b30934cbSJiri Slaby         dma_rw(edu, true, &val, &edu->dma.cmd, true);
282b30934cbSJiri Slaby         break;
283b30934cbSJiri Slaby     }
284b30934cbSJiri Slaby }
285b30934cbSJiri Slaby 
286b30934cbSJiri Slaby static const MemoryRegionOps edu_mmio_ops = {
287b30934cbSJiri Slaby     .read = edu_mmio_read,
288b30934cbSJiri Slaby     .write = edu_mmio_write,
289b30934cbSJiri Slaby     .endianness = DEVICE_NATIVE_ENDIAN,
290b30934cbSJiri Slaby };
291b30934cbSJiri Slaby 
292b30934cbSJiri Slaby /*
293631b22eaSStefan Weil  * We purposely use a thread, so that users are forced to wait for the status
294b30934cbSJiri Slaby  * register.
295b30934cbSJiri Slaby  */
296b30934cbSJiri Slaby static void *edu_fact_thread(void *opaque)
297b30934cbSJiri Slaby {
298b30934cbSJiri Slaby     EduState *edu = opaque;
299b30934cbSJiri Slaby 
300b30934cbSJiri Slaby     while (1) {
301b30934cbSJiri Slaby         uint32_t val, ret = 1;
302b30934cbSJiri Slaby 
303b30934cbSJiri Slaby         qemu_mutex_lock(&edu->thr_mutex);
304b30934cbSJiri Slaby         while ((atomic_read(&edu->status) & EDU_STATUS_COMPUTING) == 0 &&
305b30934cbSJiri Slaby                         !edu->stopping) {
306b30934cbSJiri Slaby             qemu_cond_wait(&edu->thr_cond, &edu->thr_mutex);
307b30934cbSJiri Slaby         }
308b30934cbSJiri Slaby 
309b30934cbSJiri Slaby         if (edu->stopping) {
310b30934cbSJiri Slaby             qemu_mutex_unlock(&edu->thr_mutex);
311b30934cbSJiri Slaby             break;
312b30934cbSJiri Slaby         }
313b30934cbSJiri Slaby 
314b30934cbSJiri Slaby         val = edu->fact;
315b30934cbSJiri Slaby         qemu_mutex_unlock(&edu->thr_mutex);
316b30934cbSJiri Slaby 
317b30934cbSJiri Slaby         while (val > 0) {
318b30934cbSJiri Slaby             ret *= val--;
319b30934cbSJiri Slaby         }
320b30934cbSJiri Slaby 
321b30934cbSJiri Slaby         /*
322b30934cbSJiri Slaby          * We should sleep for a random period here, so that students are
323b30934cbSJiri Slaby          * forced to check the status properly.
324b30934cbSJiri Slaby          */
325b30934cbSJiri Slaby 
326b30934cbSJiri Slaby         qemu_mutex_lock(&edu->thr_mutex);
327b30934cbSJiri Slaby         edu->fact = ret;
328b30934cbSJiri Slaby         qemu_mutex_unlock(&edu->thr_mutex);
329b30934cbSJiri Slaby         atomic_and(&edu->status, ~EDU_STATUS_COMPUTING);
330b30934cbSJiri Slaby 
331b30934cbSJiri Slaby         if (atomic_read(&edu->status) & EDU_STATUS_IRQFACT) {
332b30934cbSJiri Slaby             qemu_mutex_lock_iothread();
333b30934cbSJiri Slaby             edu_raise_irq(edu, FACT_IRQ);
334b30934cbSJiri Slaby             qemu_mutex_unlock_iothread();
335b30934cbSJiri Slaby         }
336b30934cbSJiri Slaby     }
337b30934cbSJiri Slaby 
338b30934cbSJiri Slaby     return NULL;
339b30934cbSJiri Slaby }
340b30934cbSJiri Slaby 
341f922254cSCao jin static void pci_edu_realize(PCIDevice *pdev, Error **errp)
342b30934cbSJiri Slaby {
343b30934cbSJiri Slaby     EduState *edu = DO_UPCAST(EduState, pdev, pdev);
344b30934cbSJiri Slaby     uint8_t *pci_conf = pdev->config;
345b30934cbSJiri Slaby 
346*c25a67f0SPaolo Bonzini     pci_config_set_interrupt_pin(pci_conf, 1);
347*c25a67f0SPaolo Bonzini 
348*c25a67f0SPaolo Bonzini     if (msi_init(pdev, 0, 1, true, false, errp)) {
349*c25a67f0SPaolo Bonzini         return;
350*c25a67f0SPaolo Bonzini     }
351*c25a67f0SPaolo Bonzini 
352b30934cbSJiri Slaby     timer_init_ms(&edu->dma_timer, QEMU_CLOCK_VIRTUAL, edu_dma_timer, edu);
353b30934cbSJiri Slaby 
354b30934cbSJiri Slaby     qemu_mutex_init(&edu->thr_mutex);
355b30934cbSJiri Slaby     qemu_cond_init(&edu->thr_cond);
356b30934cbSJiri Slaby     qemu_thread_create(&edu->thread, "edu", edu_fact_thread,
357b30934cbSJiri Slaby                        edu, QEMU_THREAD_JOINABLE);
358b30934cbSJiri Slaby 
359b30934cbSJiri Slaby     memory_region_init_io(&edu->mmio, OBJECT(edu), &edu_mmio_ops, edu,
360b30934cbSJiri Slaby                     "edu-mmio", 1 << 20);
361b30934cbSJiri Slaby     pci_register_bar(pdev, 0, PCI_BASE_ADDRESS_SPACE_MEMORY, &edu->mmio);
362b30934cbSJiri Slaby }
363b30934cbSJiri Slaby 
364b30934cbSJiri Slaby static void pci_edu_uninit(PCIDevice *pdev)
365b30934cbSJiri Slaby {
366b30934cbSJiri Slaby     EduState *edu = DO_UPCAST(EduState, pdev, pdev);
367b30934cbSJiri Slaby 
368b30934cbSJiri Slaby     qemu_mutex_lock(&edu->thr_mutex);
369b30934cbSJiri Slaby     edu->stopping = true;
370b30934cbSJiri Slaby     qemu_mutex_unlock(&edu->thr_mutex);
371b30934cbSJiri Slaby     qemu_cond_signal(&edu->thr_cond);
372b30934cbSJiri Slaby     qemu_thread_join(&edu->thread);
373b30934cbSJiri Slaby 
374b30934cbSJiri Slaby     qemu_cond_destroy(&edu->thr_cond);
375b30934cbSJiri Slaby     qemu_mutex_destroy(&edu->thr_mutex);
376b30934cbSJiri Slaby 
377b30934cbSJiri Slaby     timer_del(&edu->dma_timer);
378b30934cbSJiri Slaby }
379b30934cbSJiri Slaby 
380d7bce999SEric Blake static void edu_obj_uint64(Object *obj, Visitor *v, const char *name,
381d7bce999SEric Blake                            void *opaque, Error **errp)
382b30934cbSJiri Slaby {
383b30934cbSJiri Slaby     uint64_t *val = opaque;
384b30934cbSJiri Slaby 
38551e72bc1SEric Blake     visit_type_uint64(v, name, val, errp);
386b30934cbSJiri Slaby }
387b30934cbSJiri Slaby 
388b30934cbSJiri Slaby static void edu_instance_init(Object *obj)
389b30934cbSJiri Slaby {
390b30934cbSJiri Slaby     EduState *edu = EDU(obj);
391b30934cbSJiri Slaby 
392b30934cbSJiri Slaby     edu->dma_mask = (1UL << 28) - 1;
393b30934cbSJiri Slaby     object_property_add(obj, "dma_mask", "uint64", edu_obj_uint64,
394b30934cbSJiri Slaby                     edu_obj_uint64, NULL, &edu->dma_mask, NULL);
395b30934cbSJiri Slaby }
396b30934cbSJiri Slaby 
397b30934cbSJiri Slaby static void edu_class_init(ObjectClass *class, void *data)
398b30934cbSJiri Slaby {
399b30934cbSJiri Slaby     PCIDeviceClass *k = PCI_DEVICE_CLASS(class);
400b30934cbSJiri Slaby 
401f922254cSCao jin     k->realize = pci_edu_realize;
402b30934cbSJiri Slaby     k->exit = pci_edu_uninit;
403b30934cbSJiri Slaby     k->vendor_id = PCI_VENDOR_ID_QEMU;
404b30934cbSJiri Slaby     k->device_id = 0x11e8;
405b30934cbSJiri Slaby     k->revision = 0x10;
406b30934cbSJiri Slaby     k->class_id = PCI_CLASS_OTHERS;
407b30934cbSJiri Slaby }
408b30934cbSJiri Slaby 
409b30934cbSJiri Slaby static void pci_edu_register_types(void)
410b30934cbSJiri Slaby {
411b30934cbSJiri Slaby     static const TypeInfo edu_info = {
412b30934cbSJiri Slaby         .name          = "edu",
413b30934cbSJiri Slaby         .parent        = TYPE_PCI_DEVICE,
414b30934cbSJiri Slaby         .instance_size = sizeof(EduState),
415b30934cbSJiri Slaby         .instance_init = edu_instance_init,
416b30934cbSJiri Slaby         .class_init    = edu_class_init,
417b30934cbSJiri Slaby     };
418b30934cbSJiri Slaby 
419b30934cbSJiri Slaby     type_register_static(&edu_info);
420b30934cbSJiri Slaby }
421b30934cbSJiri Slaby type_init(pci_edu_register_types)
422