1 /* 2 * HP-PARISC Astro/Pluto/Ike/REO system bus adapter (SBA) 3 * with Elroy PCI bus (LBA) adapter emulation 4 * Found in C3000 and similar machines 5 * 6 * (C) 2023 by Helge Deller <deller@gmx.de> 7 * 8 * This work is licensed under the GNU GPL license version 2 or later. 9 * 10 * Chip documentation is available at: 11 * https://parisc.wiki.kernel.org/index.php/Technical_Documentation 12 * 13 * TODO: 14 * - All user-added devices are currently attached to the first 15 * Elroy (PCI bus) only for now. To fix this additional work in 16 * SeaBIOS and this driver is needed. See "user_creatable" flag below. 17 * - GMMIO (Greater than 4 GB MMIO) register 18 */ 19 20 #define TYPE_ASTRO_IOMMU_MEMORY_REGION "astro-iommu-memory-region" 21 22 #define F_EXTEND(addr) ((addr) | MAKE_64BIT_MASK(32, 32)) 23 24 #include "qemu/osdep.h" 25 #include "qemu/module.h" 26 #include "qemu/units.h" 27 #include "qapi/error.h" 28 #include "hw/irq.h" 29 #include "hw/pci/pci_device.h" 30 #include "hw/pci/pci_bus.h" 31 #include "hw/qdev-properties.h" 32 #include "hw/pci-host/astro.h" 33 #include "hw/hppa/hppa_hardware.h" 34 #include "migration/vmstate.h" 35 #include "target/hppa/cpu.h" 36 #include "trace.h" 37 #include "qom/object.h" 38 39 /* 40 * Helper functions 41 */ 42 43 static uint64_t mask_32bit_val(hwaddr addr, unsigned size, uint64_t val) 44 { 45 if (size == 8) { 46 return val; 47 } 48 if (addr & 4) { 49 val >>= 32; 50 } else { 51 val = (uint32_t) val; 52 } 53 return val; 54 } 55 56 static void put_val_in_int64(uint64_t *p, hwaddr addr, unsigned size, 57 uint64_t val) 58 { 59 if (size == 8) { 60 *p = val; 61 } else if (size == 4) { 62 if (addr & 4) { 63 *p = ((*p << 32) >> 32) | (val << 32); 64 } else { 65 *p = ((*p >> 32) << 32) | (uint32_t) val; 66 } 67 } 68 } 69 70 static void put_val_in_arrary(uint64_t *array, hwaddr start_addr, 71 hwaddr addr, unsigned size, uint64_t val) 72 { 73 int index; 74 75 index = (addr - start_addr) / 8; 76 put_val_in_int64(&array[index], addr, size, val); 77 } 78 79 80 /* 81 * The Elroy PCI host bridge. We have at least 4 of those under Astro. 82 */ 83 84 static MemTxResult elroy_chip_read_with_attrs(void *opaque, hwaddr addr, 85 uint64_t *data, unsigned size, 86 MemTxAttrs attrs) 87 { 88 MemTxResult ret = MEMTX_OK; 89 ElroyState *s = opaque; 90 uint64_t val = -1; 91 int index; 92 93 switch ((addr >> 3) << 3) { 94 case 0x0008: 95 val = 0x6000005; /* func_class */ 96 break; 97 case 0x0058: 98 /* 99 * Scratch register, but firmware initializes it with the 100 * PCI BUS number and Linux/HP-UX uses it then. 101 */ 102 val = s->pci_bus_num; 103 /* Upper byte holds the end of this bus number */ 104 val |= s->pci_bus_num << 8; 105 break; 106 case 0x0080: 107 val = s->arb_mask; /* set ARB mask */ 108 break; 109 case 0x0108: 110 val = s->status_control; 111 break; 112 case 0x200 ... 0x250 - 1: /* LMMIO, GMMIO, WLMMIO, WGMMIO, ... */ 113 index = (addr - 0x200) / 8; 114 val = s->mmio_base[index]; 115 break; 116 case 0x0680: 117 val = s->error_config; 118 break; 119 case 0x0688: 120 val = 0; /* ERROR_STATUS */ 121 break; 122 case 0x0800: /* IOSAPIC_REG_SELECT */ 123 val = s->iosapic_reg_select; 124 break; 125 case 0x0810: /* IOSAPIC_REG_WINDOW */ 126 switch (s->iosapic_reg_select) { 127 case 0x01: /* IOSAPIC_REG_VERSION */ 128 val = (32 << 16) | 1; /* upper 16bit holds max entries */ 129 break; 130 default: 131 if (s->iosapic_reg_select < ARRAY_SIZE(s->iosapic_reg)) { 132 val = s->iosapic_reg[s->iosapic_reg_select]; 133 } else { 134 goto check_hf; 135 } 136 } 137 trace_iosapic_reg_read(s->iosapic_reg_select, size, val); 138 break; 139 default: 140 check_hf: 141 if (s->status_control & HF_ENABLE) { 142 val = 0; 143 ret = MEMTX_DECODE_ERROR; 144 } else { 145 /* return -1ULL if HardFail is disabled */ 146 val = ~0; 147 ret = MEMTX_OK; 148 } 149 } 150 trace_elroy_read(addr, size, val); 151 152 /* for 32-bit accesses mask return value */ 153 val = mask_32bit_val(addr, size, val); 154 155 trace_astro_chip_read(addr, size, val); 156 *data = val; 157 return ret; 158 } 159 160 161 static MemTxResult elroy_chip_write_with_attrs(void *opaque, hwaddr addr, 162 uint64_t val, unsigned size, 163 MemTxAttrs attrs) 164 { 165 ElroyState *s = opaque; 166 int i; 167 168 trace_elroy_write(addr, size, val); 169 170 switch ((addr >> 3) << 3) { 171 case 0x000: /* PCI_ID & PCI_COMMAND_STATUS_REG */ 172 break; 173 case 0x080: 174 put_val_in_int64(&s->arb_mask, addr, size, val); 175 break; 176 case 0x0108: 177 put_val_in_int64(&s->status_control, addr, size, val); 178 break; 179 case 0x200 ... 0x250 - 1: /* LMMIO, GMMIO, WLMMIO, WGMMIO, ... */ 180 put_val_in_arrary(s->mmio_base, 0x200, addr, size, val); 181 break; 182 case 0x300: /* ibase */ 183 case 0x308: /* imask */ 184 break; 185 case 0x0680: 186 put_val_in_int64(&s->error_config, addr, size, val); 187 break; 188 case 0x0800: /* IOSAPIC_REG_SELECT */ 189 s->iosapic_reg_select = val; 190 break; 191 case 0x0810: /* IOSAPIC_REG_WINDOW */ 192 trace_iosapic_reg_write(s->iosapic_reg_select, size, val); 193 if (s->iosapic_reg_select < ARRAY_SIZE(s->iosapic_reg)) { 194 s->iosapic_reg[s->iosapic_reg_select] = val; 195 } else { 196 goto check_hf; 197 } 198 break; 199 case 0x0840: /* IOSAPIC_REG_EOI */ 200 val = le64_to_cpu(val); 201 val &= 63; 202 for (i = 0; i < ELROY_IRQS; i++) { 203 if ((s->iosapic_reg[0x10 + 2 * i] & 63) == val) { 204 s->ilr &= ~(1ull << i); 205 } 206 } 207 break; 208 default: 209 check_hf: 210 if (s->status_control & HF_ENABLE) { 211 return MEMTX_DECODE_ERROR; 212 } 213 } 214 return MEMTX_OK; 215 } 216 217 static const MemoryRegionOps elroy_chip_ops = { 218 .read_with_attrs = elroy_chip_read_with_attrs, 219 .write_with_attrs = elroy_chip_write_with_attrs, 220 .endianness = DEVICE_LITTLE_ENDIAN, 221 .valid = { 222 .min_access_size = 4, 223 .max_access_size = 8, 224 }, 225 .impl = { 226 .min_access_size = 4, 227 .max_access_size = 8, 228 }, 229 }; 230 231 232 /* Unlike pci_config_data_le_ops, no check of high bit set in config_reg. */ 233 234 static uint64_t elroy_config_data_read(void *opaque, hwaddr addr, unsigned len) 235 { 236 uint64_t val; 237 238 PCIHostState *s = opaque; 239 val = pci_data_read(s->bus, s->config_reg | (addr & 3), len); 240 trace_elroy_pci_config_data_read(s->config_reg | (addr & 3), len, val); 241 return val; 242 } 243 244 static void elroy_config_data_write(void *opaque, hwaddr addr, 245 uint64_t val, unsigned len) 246 { 247 PCIHostState *s = opaque; 248 pci_data_write(s->bus, s->config_reg | (addr & 3), val, len); 249 trace_elroy_pci_config_data_write(s->config_reg | (addr & 3), len, val); 250 } 251 252 static const MemoryRegionOps elroy_config_data_ops = { 253 .read = elroy_config_data_read, 254 .write = elroy_config_data_write, 255 .endianness = DEVICE_LITTLE_ENDIAN, 256 }; 257 258 static uint64_t elroy_config_addr_read(void *opaque, hwaddr addr, unsigned len) 259 { 260 ElroyState *s = opaque; 261 return s->config_reg_elroy; 262 } 263 264 static void elroy_config_addr_write(void *opaque, hwaddr addr, 265 uint64_t val, unsigned len) 266 { 267 PCIHostState *s = opaque; 268 ElroyState *es = opaque; 269 es->config_reg_elroy = val; /* keep a copy of original value */ 270 s->config_reg = val; 271 } 272 273 static const MemoryRegionOps elroy_config_addr_ops = { 274 .read = elroy_config_addr_read, 275 .write = elroy_config_addr_write, 276 .valid.min_access_size = 4, 277 .valid.max_access_size = 8, 278 .endianness = DEVICE_LITTLE_ENDIAN, 279 }; 280 281 282 /* Handle PCI-to-system address translation. */ 283 static IOMMUTLBEntry astro_translate_iommu(IOMMUMemoryRegion *iommu, 284 hwaddr addr, 285 IOMMUAccessFlags flag, 286 int iommu_idx) 287 { 288 AstroState *s = container_of(iommu, AstroState, iommu); 289 hwaddr pdir_ptr, index, ibase; 290 hwaddr addr_mask = 0xfff; /* 4k translation */ 291 uint64_t entry; 292 293 #define IOVP_SHIFT 12 /* equals PAGE_SHIFT */ 294 #define PDIR_INDEX(iovp) ((iovp) >> IOVP_SHIFT) 295 #define SBA_PDIR_VALID_BIT 0x8000000000000000ULL 296 297 addr &= ~addr_mask; 298 299 /* 300 * Default translation: "32-bit PCI Addressing on 40-bit Runway". 301 * For addresses in the 32-bit memory address range ... and then 302 * language which not-coincidentally matches the PSW.W=0 mapping. 303 */ 304 if (addr <= UINT32_MAX) { 305 entry = hppa_abs_to_phys_pa2_w0(addr); 306 } else { 307 entry = addr; 308 } 309 310 /* "range enable" flag cleared? */ 311 if ((s->tlb_ibase & 1) == 0) { 312 goto skip; 313 } 314 315 ibase = s->tlb_ibase & ~1ULL; 316 if ((addr & s->tlb_imask) != ibase) { 317 /* do not translate this one! */ 318 goto skip; 319 } 320 321 index = PDIR_INDEX(addr); 322 pdir_ptr = s->tlb_pdir_base + index * sizeof(entry); 323 entry = ldq_le_phys(&address_space_memory, pdir_ptr); 324 325 if (!(entry & SBA_PDIR_VALID_BIT)) { /* I/O PDIR entry valid ? */ 326 /* failure */ 327 return (IOMMUTLBEntry) { .perm = IOMMU_NONE }; 328 } 329 330 entry &= ~SBA_PDIR_VALID_BIT; 331 entry >>= IOVP_SHIFT; 332 entry <<= 12; 333 334 skip: 335 return (IOMMUTLBEntry) { 336 .target_as = &address_space_memory, 337 .iova = addr, 338 .translated_addr = entry, 339 .addr_mask = addr_mask, 340 .perm = IOMMU_RW, 341 }; 342 } 343 344 static AddressSpace *elroy_pcihost_set_iommu(PCIBus *bus, void *opaque, 345 int devfn) 346 { 347 ElroyState *s = opaque; 348 return &s->astro->iommu_as; 349 } 350 351 static const PCIIOMMUOps elroy_pcihost_iommu_ops = { 352 .get_address_space = elroy_pcihost_set_iommu, 353 }; 354 355 /* 356 * Encoding in IOSAPIC: 357 * base_addr == 0xfffa0000, we want to get 0xa0ff0000. 358 * eid 0x0ff00000 -> 0x00ff0000 359 * id 0x000ff000 -> 0xff000000 360 */ 361 #define SWIZZLE_HPA(a) \ 362 ((((a) & 0x0ff00000) >> 4) | (((a) & 0x000ff000) << 12)) 363 #define UNSWIZZLE_HPA(a) \ 364 (((((a) << 4) & 0x0ff00000) | (((a) >> 12) & 0x000ff000) | 0xf0000000)) 365 366 /* bits in the "low" I/O Sapic IRdT entry */ 367 #define IOSAPIC_IRDT_DISABLE 0x10000 /* if bit is set, mask this irq */ 368 #define IOSAPIC_IRDT_PO_LOW 0x02000 369 #define IOSAPIC_IRDT_LEVEL_TRIG 0x08000 370 #define IOSAPIC_IRDT_MODE_LPRI 0x00100 371 372 #define CPU_IRQ_OFFSET 2 373 374 static void elroy_set_irq(void *opaque, int irq, int level) 375 { 376 ElroyState *s = opaque; 377 uint32_t bit; 378 uint32_t old_ilr = s->ilr; 379 hwaddr cpu_hpa; 380 uint32_t val; 381 382 val = s->iosapic_reg[0x10 + 2 * irq]; 383 cpu_hpa = s->iosapic_reg[0x11 + 2 * irq]; 384 /* low nibble of val has value to write into CPU irq reg */ 385 bit = 1u << (val & (ELROY_IRQS - 1)); 386 cpu_hpa = UNSWIZZLE_HPA(cpu_hpa); 387 388 if (level && (!(val & IOSAPIC_IRDT_DISABLE)) && cpu_hpa) { 389 uint32_t ena = bit & ~old_ilr; 390 s->ilr = old_ilr | bit; 391 if (ena != 0) { 392 stl_be_phys(&address_space_memory, F_EXTEND(cpu_hpa), val & 63); 393 } 394 } else { 395 s->ilr = old_ilr & ~bit; 396 } 397 } 398 399 static int elroy_pci_map_irq(PCIDevice *d, int irq_num) 400 { 401 int slot = PCI_SLOT(d->devfn); 402 403 assert(irq_num >= 0 && irq_num < ELROY_IRQS); 404 return slot & (ELROY_IRQS - 1); 405 } 406 407 static void elroy_reset(DeviceState *dev) 408 { 409 ElroyState *s = ELROY_PCI_HOST_BRIDGE(dev); 410 int irq; 411 412 /* 413 * Make sure to disable interrupts at reboot, otherwise the Linux kernel 414 * serial8250_config_port() in drivers/tty/serial/8250/8250_port.c 415 * will hang during autoconfig(). 416 */ 417 s->ilr = 0; 418 for (irq = 0; irq < ELROY_IRQS; irq++) { 419 s->iosapic_reg[0x10 + 2 * irq] = IOSAPIC_IRDT_PO_LOW | 420 IOSAPIC_IRDT_LEVEL_TRIG | (irq + CPU_IRQ_OFFSET) | 421 IOSAPIC_IRDT_DISABLE; 422 s->iosapic_reg[0x11 + 2 * irq] = SWIZZLE_HPA(CPU_HPA); 423 } 424 } 425 426 static void elroy_pcihost_init(Object *obj) 427 { 428 ElroyState *s = ELROY_PCI_HOST_BRIDGE(obj); 429 PCIHostState *phb = PCI_HOST_BRIDGE(obj); 430 SysBusDevice *sbd = SYS_BUS_DEVICE(obj); 431 432 /* Elroy config access from CPU. */ 433 memory_region_init_io(&s->this_mem, OBJECT(s), &elroy_chip_ops, 434 s, "elroy", 0x2000); 435 436 /* Elroy PCI config. */ 437 memory_region_init_io(&phb->conf_mem, OBJECT(phb), 438 &elroy_config_addr_ops, DEVICE(s), 439 "pci-conf-idx", 8); 440 memory_region_init_io(&phb->data_mem, OBJECT(phb), 441 &elroy_config_data_ops, DEVICE(s), 442 "pci-conf-data", 8); 443 memory_region_add_subregion(&s->this_mem, 0x40, 444 &phb->conf_mem); 445 memory_region_add_subregion(&s->this_mem, 0x48, 446 &phb->data_mem); 447 448 /* Elroy PCI bus memory. */ 449 memory_region_init(&s->pci_mmio, OBJECT(s), "pci-mmio", UINT64_MAX); 450 memory_region_init_io(&s->pci_io, OBJECT(s), &unassigned_io_ops, obj, 451 "pci-isa-mmio", 452 ((uint32_t) IOS_DIST_BASE_SIZE) / ROPES_PER_IOC); 453 454 phb->bus = pci_register_root_bus(DEVICE(s), "pci", 455 elroy_set_irq, elroy_pci_map_irq, s, 456 &s->pci_mmio, &s->pci_io, 457 PCI_DEVFN(0, 0), ELROY_IRQS, TYPE_PCI_BUS); 458 459 sysbus_init_mmio(sbd, &s->this_mem); 460 461 qdev_init_gpio_in(DEVICE(obj), elroy_set_irq, ELROY_IRQS); 462 } 463 464 static const VMStateDescription vmstate_elroy = { 465 .name = "Elroy", 466 .version_id = 1, 467 .minimum_version_id = 1, 468 .fields = (const VMStateField[]) { 469 VMSTATE_UINT64(hpa, ElroyState), 470 VMSTATE_UINT32(pci_bus_num, ElroyState), 471 VMSTATE_UINT64(config_address, ElroyState), 472 VMSTATE_UINT64(config_reg_elroy, ElroyState), 473 VMSTATE_UINT64(status_control, ElroyState), 474 VMSTATE_UINT64(arb_mask, ElroyState), 475 VMSTATE_UINT64_ARRAY(mmio_base, ElroyState, (0x0250 - 0x200) / 8), 476 VMSTATE_UINT64(error_config, ElroyState), 477 VMSTATE_UINT32(iosapic_reg_select, ElroyState), 478 VMSTATE_UINT64_ARRAY(iosapic_reg, ElroyState, 0x20), 479 VMSTATE_UINT32(ilr, ElroyState), 480 VMSTATE_END_OF_LIST() 481 } 482 }; 483 484 static void elroy_pcihost_class_init(ObjectClass *klass, void *data) 485 { 486 DeviceClass *dc = DEVICE_CLASS(klass); 487 488 device_class_set_legacy_reset(dc, elroy_reset); 489 dc->vmsd = &vmstate_elroy; 490 dc->user_creatable = false; 491 } 492 493 static const TypeInfo elroy_pcihost_info = { 494 .name = TYPE_ELROY_PCI_HOST_BRIDGE, 495 .parent = TYPE_PCI_HOST_BRIDGE, 496 .instance_init = elroy_pcihost_init, 497 .instance_size = sizeof(ElroyState), 498 .class_init = elroy_pcihost_class_init, 499 }; 500 501 static void elroy_register_types(void) 502 { 503 type_register_static(&elroy_pcihost_info); 504 } 505 506 type_init(elroy_register_types) 507 508 509 static ElroyState *elroy_init(int num) 510 { 511 DeviceState *dev; 512 513 dev = qdev_new(TYPE_ELROY_PCI_HOST_BRIDGE); 514 dev->id = g_strdup_printf("elroy%d", num); 515 sysbus_realize_and_unref(SYS_BUS_DEVICE(dev), &error_fatal); 516 517 return ELROY_PCI_HOST_BRIDGE(dev); 518 } 519 520 /* 521 * Astro Runway chip. 522 */ 523 524 static MemTxResult astro_chip_read_with_attrs(void *opaque, hwaddr addr, 525 uint64_t *data, unsigned size, 526 MemTxAttrs attrs) 527 { 528 AstroState *s = opaque; 529 MemTxResult ret = MEMTX_OK; 530 uint64_t val = -1; 531 int index; 532 533 switch ((addr >> 3) << 3) { 534 /* R2I registers */ 535 case 0x0000: /* ID */ 536 val = (0x01 << 3) | 0x01ULL; 537 break; 538 case 0x0008: /* IOC_CTRL */ 539 val = s->ioc_ctrl; 540 break; 541 case 0x0010: /* TOC_CLIENT_ID */ 542 break; 543 case 0x0030: /* HP-UX 10.20 and 11.11 reads it. No idea. */ 544 val = -1; 545 break; 546 case 0x0078: /* NetBSD reads 0x78 ? */ 547 val = -1; 548 break; 549 case 0x0300 ... 0x03d8: /* LMMIO_DIRECT0_BASE... */ 550 index = (addr - 0x300) / 8; 551 val = s->ioc_ranges[index]; 552 break; 553 case 0x10200: 554 val = 0; 555 break; 556 case 0x10220: 557 case 0x10230: /* HP-UX 11.11 reads it. No idea. */ 558 val = -1; 559 break; 560 case 0x22108: /* IOC STATUS_CONTROL */ 561 val = s->ioc_status_ctrl; 562 break; 563 case 0x20200 ... 0x20240 - 1: /* IOC Rope0_Control ... */ 564 index = (addr - 0x20200) / 8; 565 val = s->ioc_rope_control[index]; 566 break; 567 case 0x20040: /* IOC Rope config */ 568 val = s->ioc_rope_config; 569 break; 570 case 0x20050: /* IOC Rope debug */ 571 val = 0; 572 break; 573 case 0x20108: /* IOC STATUS_CONTROL */ 574 val = s->ioc_status_control; 575 break; 576 case 0x20310: /* IOC_PCOM */ 577 val = s->tlb_pcom; 578 /* TODO: flush iommu */ 579 break; 580 case 0x20400: 581 val = s->ioc_flush_control; 582 break; 583 /* empty placeholders for non-existent elroys */ 584 #define EMPTY_PORT(x) case x: case x+8: val = 0; break; \ 585 case x+40: case x+48: val = UINT64_MAX; break; 586 EMPTY_PORT(0x30000) 587 EMPTY_PORT(0x32000) 588 EMPTY_PORT(0x34000) 589 EMPTY_PORT(0x36000) 590 EMPTY_PORT(0x38000) 591 EMPTY_PORT(0x3a000) 592 EMPTY_PORT(0x3c000) 593 EMPTY_PORT(0x3e000) 594 #undef EMPTY_PORT 595 596 default: 597 val = 0; 598 ret = MEMTX_DECODE_ERROR; 599 } 600 601 /* for 32-bit accesses mask return value */ 602 val = mask_32bit_val(addr, size, val); 603 604 trace_astro_chip_read(addr, size, val); 605 *data = val; 606 return ret; 607 } 608 609 static MemTxResult astro_chip_write_with_attrs(void *opaque, hwaddr addr, 610 uint64_t val, unsigned size, 611 MemTxAttrs attrs) 612 { 613 MemTxResult ret = MEMTX_OK; 614 AstroState *s = opaque; 615 616 trace_astro_chip_write(addr, size, val); 617 618 switch ((addr >> 3) << 3) { 619 case 0x0000: /* ID */ 620 break; 621 case 0x0008: /* IOC_CTRL */ 622 val &= 0x0ffffff; 623 put_val_in_int64(&s->ioc_ctrl, addr, size, val); 624 break; 625 case 0x0010: /* TOC_CLIENT_ID */ 626 break; 627 case 0x0030: /* HP-UX 10.20 and 11.11 reads it. No idea. */ 628 break; 629 case 0x0300 ... 0x03d8 - 1: /* LMMIO_DIRECT0_BASE... */ 630 put_val_in_arrary(s->ioc_ranges, 0x300, addr, size, val); 631 break; 632 case 0x10200: 633 case 0x10220: 634 case 0x10230: /* HP-UX 11.11 reads it. No idea. */ 635 break; 636 case 0x20200 ... 0x20240 - 1: /* IOC Rope0_Control ... */ 637 put_val_in_arrary(s->ioc_rope_control, 0x20200, addr, size, val); 638 break; 639 case 0x20040: /* IOC Rope config */ 640 case 0x22040: 641 put_val_in_int64(&s->ioc_rope_config, addr, size, val); 642 break; 643 case 0x20300: 644 case 0x22300: 645 put_val_in_int64(&s->tlb_ibase, addr, size, val); 646 break; 647 case 0x20308: 648 case 0x22308: 649 put_val_in_int64(&s->tlb_imask, addr, size, val); 650 break; 651 case 0x20310: 652 case 0x22310: 653 put_val_in_int64(&s->tlb_pcom, addr, size, val); 654 /* TODO: flush iommu */ 655 break; 656 case 0x20318: 657 case 0x22318: 658 put_val_in_int64(&s->tlb_tcnfg, addr, size, val); 659 break; 660 case 0x20320: 661 case 0x22320: 662 put_val_in_int64(&s->tlb_pdir_base, addr, size, val); 663 break; 664 case 0x22000: /* func_id */ 665 break; 666 case 0x22008: /* func_class */ 667 break; 668 case 0x22050: /* rope_debug */ 669 break; 670 case 0x22108: /* IOC STATUS_CONTROL */ 671 put_val_in_int64(&s->ioc_status_ctrl, addr, size, val); 672 break; 673 /* 674 * empty placeholders for non-existent elroys, e.g. 675 * func_class, pci config & data 676 */ 677 #define EMPTY_PORT(x) case x: case x+8: case x+0x40: case x+0x48: 678 EMPTY_PORT(0x30000) 679 EMPTY_PORT(0x32000) 680 EMPTY_PORT(0x34000) 681 EMPTY_PORT(0x36000) 682 EMPTY_PORT(0x38000) 683 EMPTY_PORT(0x3a000) 684 EMPTY_PORT(0x3c000) 685 EMPTY_PORT(0x3e000) 686 break; 687 #undef EMPTY_PORT 688 689 default: 690 ret = MEMTX_DECODE_ERROR; 691 } 692 return ret; 693 } 694 695 static const MemoryRegionOps astro_chip_ops = { 696 .read_with_attrs = astro_chip_read_with_attrs, 697 .write_with_attrs = astro_chip_write_with_attrs, 698 .endianness = DEVICE_LITTLE_ENDIAN, 699 .valid = { 700 .min_access_size = 4, 701 .max_access_size = 8, 702 }, 703 .impl = { 704 .min_access_size = 4, 705 .max_access_size = 8, 706 }, 707 }; 708 709 static const VMStateDescription vmstate_astro = { 710 .name = "Astro", 711 .version_id = 1, 712 .minimum_version_id = 1, 713 .fields = (const VMStateField[]) { 714 VMSTATE_UINT64(ioc_ctrl, AstroState), 715 VMSTATE_UINT64(ioc_status_ctrl, AstroState), 716 VMSTATE_UINT64_ARRAY(ioc_ranges, AstroState, (0x03d8 - 0x300) / 8), 717 VMSTATE_UINT64(ioc_rope_config, AstroState), 718 VMSTATE_UINT64(ioc_status_control, AstroState), 719 VMSTATE_UINT64(ioc_flush_control, AstroState), 720 VMSTATE_UINT64_ARRAY(ioc_rope_control, AstroState, 8), 721 VMSTATE_UINT64(tlb_ibase, AstroState), 722 VMSTATE_UINT64(tlb_imask, AstroState), 723 VMSTATE_UINT64(tlb_pcom, AstroState), 724 VMSTATE_UINT64(tlb_tcnfg, AstroState), 725 VMSTATE_UINT64(tlb_pdir_base, AstroState), 726 VMSTATE_END_OF_LIST() 727 } 728 }; 729 730 static void astro_reset(DeviceState *dev) 731 { 732 AstroState *s = ASTRO_CHIP(dev); 733 int i; 734 735 s->ioc_ctrl = 0x29cf; 736 s->ioc_rope_config = 0xc5f; 737 s->ioc_flush_control = 0xb03; 738 s->ioc_status_control = 0; 739 memset(&s->ioc_rope_control, 0, sizeof(s->ioc_rope_control)); 740 741 /* 742 * The SBA BASE/MASK registers control CPU -> IO routing. 743 * The LBA BASE/MASK registers control IO -> System routing (in Elroy) 744 */ 745 memset(&s->ioc_ranges, 0, sizeof(s->ioc_ranges)); 746 s->ioc_ranges[(0x360 - 0x300) / 8] = LMMIO_DIST_BASE_ADDR | 0x01; /* LMMIO_DIST_BASE (SBA) */ 747 s->ioc_ranges[(0x368 - 0x300) / 8] = 0xfc000000; /* LMMIO_DIST_MASK */ 748 s->ioc_ranges[(0x370 - 0x300) / 8] = 0; /* LMMIO_DIST_ROUTE */ 749 s->ioc_ranges[(0x390 - 0x300) / 8] = IOS_DIST_BASE_ADDR | 0x01; /* IOS_DIST_BASE */ 750 s->ioc_ranges[(0x398 - 0x300) / 8] = 0xffffff0000; /* IOS_DIST_MASK */ 751 s->ioc_ranges[(0x3a0 - 0x300) / 8] = 0x3400000000000000ULL; /* IOS_DIST_ROUTE */ 752 s->ioc_ranges[(0x3c0 - 0x300) / 8] = 0xfffee00000; /* IOS_DIRECT_BASE */ 753 s->ioc_ranges[(0x3c8 - 0x300) / 8] = 0xffffff0000; /* IOS_DIRECT_MASK */ 754 s->ioc_ranges[(0x3d0 - 0x300) / 8] = 0x0; /* IOS_DIRECT_ROUTE */ 755 756 s->tlb_ibase = 0; 757 s->tlb_imask = 0; 758 s->tlb_pcom = 0; 759 s->tlb_tcnfg = 0; 760 s->tlb_pdir_base = 0; 761 762 for (i = 0; i < ELROY_NUM; i++) { 763 elroy_reset(DEVICE(s->elroy[i])); 764 } 765 } 766 767 static void astro_init(Object *obj) 768 { 769 } 770 771 static void astro_realize(DeviceState *obj, Error **errp) 772 { 773 AstroState *s = ASTRO_CHIP(obj); 774 SysBusDevice *sbd = SYS_BUS_DEVICE(obj); 775 int i; 776 777 memory_region_init_io(&s->this_mem, OBJECT(s), &astro_chip_ops, 778 s, "astro", 0x40000); 779 sysbus_init_mmio(sbd, &s->this_mem); 780 781 /* Host memory as seen from Elroys PCI side, via the IOMMU. */ 782 memory_region_init_iommu(&s->iommu, sizeof(s->iommu), 783 TYPE_ASTRO_IOMMU_MEMORY_REGION, OBJECT(s), 784 "iommu-astro", UINT64_MAX); 785 address_space_init(&s->iommu_as, MEMORY_REGION(&s->iommu), 786 "bm-pci"); 787 788 /* Create Elroys (PCI host bus chips). */ 789 for (i = 0; i < ELROY_NUM; i++) { 790 static const int elroy_hpa_offsets[ELROY_NUM] = { 791 0x30000, 0x32000, 0x38000, 0x3c000 }; 792 static const char elroy_rope_nr[ELROY_NUM] = { 793 0, 1, 4, 6 }; /* busnum path, e.g. [10:6] */ 794 int addr_offset; 795 ElroyState *elroy; 796 hwaddr map_addr; 797 uint64_t map_size; 798 int rope; 799 800 addr_offset = elroy_hpa_offsets[i]; 801 rope = elroy_rope_nr[i]; 802 803 elroy = elroy_init(i); 804 s->elroy[i] = elroy; 805 elroy->hpa = ASTRO_HPA + addr_offset; 806 elroy->pci_bus_num = i; 807 elroy->astro = s; 808 809 /* 810 * NOTE: we only allow PCI devices on first Elroy for now. 811 * SeaBIOS will not find devices on the other busses. 812 */ 813 if (i > 0) { 814 qbus_mark_full(&PCI_HOST_BRIDGE(elroy)->bus->qbus); 815 } 816 817 /* map elroy config addresses into Astro space */ 818 memory_region_add_subregion(&s->this_mem, addr_offset, 819 &elroy->this_mem); 820 821 /* LMMIO */ 822 elroy->mmio_base[(0x0200 - 0x200) / 8] = 0xf0000001; 823 elroy->mmio_base[(0x0208 - 0x200) / 8] = 0xf8000000; 824 /* GMMIO */ 825 elroy->mmio_base[(0x0210 - 0x200) / 8] = 0x000000f800000001; 826 elroy->mmio_base[(0x0218 - 0x200) / 8] = 0x000000ff80000000; 827 /* WLMMIO */ 828 elroy->mmio_base[(0x0220 - 0x200) / 8] = 0xf0000001; 829 elroy->mmio_base[(0x0228 - 0x200) / 8] = 0xf0000000; 830 /* WGMMIO */ 831 elroy->mmio_base[(0x0230 - 0x200) / 8] = 0x000000f800000001; 832 elroy->mmio_base[(0x0238 - 0x200) / 8] = 0x000000fc00000000; 833 /* IOS_BASE */ 834 map_size = IOS_DIST_BASE_SIZE / ROPES_PER_IOC; 835 elroy->mmio_base[(0x0240 - 0x200) / 8] = rope * map_size | 0x01; 836 elroy->mmio_base[(0x0248 - 0x200) / 8] = 0x0000e000; 837 838 /* map elroys mmio */ 839 map_size = LMMIO_DIST_BASE_SIZE / ROPES_PER_IOC; 840 map_addr = F_EXTEND(LMMIO_DIST_BASE_ADDR + rope * map_size); 841 memory_region_init_alias(&elroy->pci_mmio_alias, OBJECT(elroy), 842 "pci-mmio-alias", 843 &elroy->pci_mmio, (uint32_t) map_addr, map_size); 844 memory_region_add_subregion(get_system_memory(), map_addr, 845 &elroy->pci_mmio_alias); 846 847 /* map elroys io */ 848 map_size = IOS_DIST_BASE_SIZE / ROPES_PER_IOC; 849 map_addr = F_EXTEND(IOS_DIST_BASE_ADDR + rope * map_size); 850 memory_region_add_subregion(get_system_memory(), map_addr, 851 &elroy->pci_io); 852 853 /* Host memory as seen from the PCI side, via the IOMMU. */ 854 pci_setup_iommu(PCI_HOST_BRIDGE(elroy)->bus, &elroy_pcihost_iommu_ops, 855 elroy); 856 } 857 } 858 859 static void astro_class_init(ObjectClass *klass, void *data) 860 { 861 DeviceClass *dc = DEVICE_CLASS(klass); 862 863 device_class_set_legacy_reset(dc, astro_reset); 864 dc->vmsd = &vmstate_astro; 865 dc->realize = astro_realize; 866 /* 867 * astro with elroys are hard part of the newer PA2.0 machines and can not 868 * be created without that hardware 869 */ 870 dc->user_creatable = false; 871 } 872 873 static const TypeInfo astro_chip_info = { 874 .name = TYPE_ASTRO_CHIP, 875 .parent = TYPE_SYS_BUS_DEVICE, 876 .instance_init = astro_init, 877 .instance_size = sizeof(AstroState), 878 .class_init = astro_class_init, 879 }; 880 881 static void astro_iommu_memory_region_class_init(ObjectClass *klass, 882 void *data) 883 { 884 IOMMUMemoryRegionClass *imrc = IOMMU_MEMORY_REGION_CLASS(klass); 885 886 imrc->translate = astro_translate_iommu; 887 } 888 889 static const TypeInfo astro_iommu_memory_region_info = { 890 .parent = TYPE_IOMMU_MEMORY_REGION, 891 .name = TYPE_ASTRO_IOMMU_MEMORY_REGION, 892 .class_init = astro_iommu_memory_region_class_init, 893 }; 894 895 896 static void astro_register_types(void) 897 { 898 type_register_static(&astro_chip_info); 899 type_register_static(&astro_iommu_memory_region_info); 900 } 901 902 type_init(astro_register_types) 903