1 /* 2 * QEMU PowerPC PowerNV LPC controller 3 * 4 * Copyright (c) 2016, IBM Corporation. 5 * 6 * This library is free software; you can redistribute it and/or 7 * modify it under the terms of the GNU Lesser General Public 8 * License as published by the Free Software Foundation; either 9 * version 2.1 of the License, or (at your option) any later version. 10 * 11 * This library is distributed in the hope that it will be useful, 12 * but WITHOUT ANY WARRANTY; without even the implied warranty of 13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU 14 * Lesser General Public License for more details. 15 * 16 * You should have received a copy of the GNU Lesser General Public 17 * License along with this library; if not, see <http://www.gnu.org/licenses/>. 18 */ 19 20 #include "qemu/osdep.h" 21 #include "target/ppc/cpu.h" 22 #include "qapi/error.h" 23 #include "qemu/log.h" 24 #include "qemu/module.h" 25 #include "hw/irq.h" 26 #include "hw/isa/isa.h" 27 #include "hw/qdev-properties.h" 28 #include "hw/ppc/pnv.h" 29 #include "hw/ppc/pnv_chip.h" 30 #include "hw/ppc/pnv_lpc.h" 31 #include "hw/ppc/pnv_xscom.h" 32 #include "hw/ppc/fdt.h" 33 34 #include <libfdt.h> 35 36 enum { 37 ECCB_CTL = 0, 38 ECCB_RESET = 1, 39 ECCB_STAT = 2, 40 ECCB_DATA = 3, 41 }; 42 43 /* OPB Master LS registers */ 44 #define OPB_MASTER_LS_ROUTE0 0x8 45 #define OPB_MASTER_LS_ROUTE1 0xC 46 #define OPB_MASTER_LS_IRQ_STAT 0x50 47 #define OPB_MASTER_IRQ_LPC 0x00000800 48 #define OPB_MASTER_LS_IRQ_MASK 0x54 49 #define OPB_MASTER_LS_IRQ_POL 0x58 50 #define OPB_MASTER_LS_IRQ_INPUT 0x5c 51 52 /* LPC HC registers */ 53 #define LPC_HC_FW_SEG_IDSEL 0x24 54 #define LPC_HC_FW_RD_ACC_SIZE 0x28 55 #define LPC_HC_FW_RD_1B 0x00000000 56 #define LPC_HC_FW_RD_2B 0x01000000 57 #define LPC_HC_FW_RD_4B 0x02000000 58 #define LPC_HC_FW_RD_16B 0x04000000 59 #define LPC_HC_FW_RD_128B 0x07000000 60 #define LPC_HC_IRQSER_CTRL 0x30 61 #define LPC_HC_IRQSER_EN 0x80000000 62 #define LPC_HC_IRQSER_QMODE 0x40000000 63 #define LPC_HC_IRQSER_START_MASK 0x03000000 64 #define LPC_HC_IRQSER_START_4CLK 0x00000000 65 #define LPC_HC_IRQSER_START_6CLK 0x01000000 66 #define LPC_HC_IRQSER_START_8CLK 0x02000000 67 #define LPC_HC_IRQMASK 0x34 /* same bit defs as LPC_HC_IRQSTAT */ 68 #define LPC_HC_IRQSTAT 0x38 69 #define LPC_HC_IRQ_SERIRQ0 0x80000000 /* all bits down to ... */ 70 #define LPC_HC_IRQ_SERIRQ16 0x00008000 /* IRQ16=IOCHK#, IRQ2=SMI# */ 71 #define LPC_HC_IRQ_SERIRQ_ALL 0xffff8000 72 #define LPC_HC_IRQ_LRESET 0x00000400 73 #define LPC_HC_IRQ_SYNC_ABNORM_ERR 0x00000080 74 #define LPC_HC_IRQ_SYNC_NORESP_ERR 0x00000040 75 #define LPC_HC_IRQ_SYNC_NORM_ERR 0x00000020 76 #define LPC_HC_IRQ_SYNC_TIMEOUT_ERR 0x00000010 77 #define LPC_HC_IRQ_SYNC_TARG_TAR_ERR 0x00000008 78 #define LPC_HC_IRQ_SYNC_BM_TAR_ERR 0x00000004 79 #define LPC_HC_IRQ_SYNC_BM0_REQ 0x00000002 80 #define LPC_HC_IRQ_SYNC_BM1_REQ 0x00000001 81 #define LPC_HC_ERROR_ADDRESS 0x40 82 83 #define LPC_OPB_SIZE 0x100000000ull 84 85 #define ISA_IO_SIZE 0x00010000 86 #define ISA_MEM_SIZE 0x10000000 87 #define ISA_FW_SIZE 0x10000000 88 #define LPC_IO_OPB_ADDR 0xd0010000 89 #define LPC_IO_OPB_SIZE 0x00010000 90 #define LPC_MEM_OPB_ADDR 0xe0000000 91 #define LPC_MEM_OPB_SIZE 0x10000000 92 #define LPC_FW_OPB_ADDR 0xf0000000 93 #define LPC_FW_OPB_SIZE 0x10000000 94 95 #define LPC_OPB_REGS_OPB_ADDR 0xc0010000 96 #define LPC_OPB_REGS_OPB_SIZE 0x00000060 97 #define LPC_OPB_REGS_OPBA_ADDR 0xc0011000 98 #define LPC_OPB_REGS_OPBA_SIZE 0x00000008 99 #define LPC_HC_REGS_OPB_ADDR 0xc0012000 100 #define LPC_HC_REGS_OPB_SIZE 0x00000100 101 102 static int pnv_lpc_dt_xscom(PnvXScomInterface *dev, void *fdt, int xscom_offset) 103 { 104 const char compat[] = "ibm,power8-lpc\0ibm,lpc"; 105 char *name; 106 int offset; 107 uint32_t lpc_pcba = PNV_XSCOM_LPC_BASE; 108 uint32_t reg[] = { 109 cpu_to_be32(lpc_pcba), 110 cpu_to_be32(PNV_XSCOM_LPC_SIZE) 111 }; 112 113 name = g_strdup_printf("isa@%x", lpc_pcba); 114 offset = fdt_add_subnode(fdt, xscom_offset, name); 115 _FDT(offset); 116 g_free(name); 117 118 _FDT((fdt_setprop(fdt, offset, "reg", reg, sizeof(reg)))); 119 _FDT((fdt_setprop_cell(fdt, offset, "#address-cells", 2))); 120 _FDT((fdt_setprop_cell(fdt, offset, "#size-cells", 1))); 121 _FDT((fdt_setprop(fdt, offset, "compatible", compat, sizeof(compat)))); 122 return 0; 123 } 124 125 /* POWER9 only */ 126 int pnv_dt_lpc(PnvChip *chip, void *fdt, int root_offset, uint64_t lpcm_addr, 127 uint64_t lpcm_size) 128 { 129 const char compat[] = "ibm,power9-lpcm-opb\0simple-bus"; 130 const char lpc_compat[] = "ibm,power9-lpc\0ibm,lpc"; 131 char *name; 132 int offset, lpcm_offset; 133 uint32_t opb_ranges[8] = { 0, 134 cpu_to_be32(lpcm_addr >> 32), 135 cpu_to_be32((uint32_t)lpcm_addr), 136 cpu_to_be32(lpcm_size / 2), 137 cpu_to_be32(lpcm_size / 2), 138 cpu_to_be32(lpcm_addr >> 32), 139 cpu_to_be32(lpcm_size / 2), 140 cpu_to_be32(lpcm_size / 2), 141 }; 142 uint32_t opb_reg[4] = { cpu_to_be32(lpcm_addr >> 32), 143 cpu_to_be32((uint32_t)lpcm_addr), 144 cpu_to_be32(lpcm_size >> 32), 145 cpu_to_be32((uint32_t)lpcm_size), 146 }; 147 uint32_t lpc_ranges[12] = { 0, 0, 148 cpu_to_be32(LPC_MEM_OPB_ADDR), 149 cpu_to_be32(LPC_MEM_OPB_SIZE), 150 cpu_to_be32(1), 0, 151 cpu_to_be32(LPC_IO_OPB_ADDR), 152 cpu_to_be32(LPC_IO_OPB_SIZE), 153 cpu_to_be32(3), 0, 154 cpu_to_be32(LPC_FW_OPB_ADDR), 155 cpu_to_be32(LPC_FW_OPB_SIZE), 156 }; 157 uint32_t reg[2]; 158 159 /* 160 * OPB bus 161 */ 162 name = g_strdup_printf("lpcm-opb@%"PRIx64, lpcm_addr); 163 lpcm_offset = fdt_add_subnode(fdt, root_offset, name); 164 _FDT(lpcm_offset); 165 g_free(name); 166 167 _FDT((fdt_setprop(fdt, lpcm_offset, "reg", opb_reg, sizeof(opb_reg)))); 168 _FDT((fdt_setprop_cell(fdt, lpcm_offset, "#address-cells", 1))); 169 _FDT((fdt_setprop_cell(fdt, lpcm_offset, "#size-cells", 1))); 170 _FDT((fdt_setprop(fdt, lpcm_offset, "compatible", compat, sizeof(compat)))); 171 _FDT((fdt_setprop_cell(fdt, lpcm_offset, "ibm,chip-id", chip->chip_id))); 172 _FDT((fdt_setprop(fdt, lpcm_offset, "ranges", opb_ranges, 173 sizeof(opb_ranges)))); 174 175 /* 176 * OPB Master registers 177 */ 178 name = g_strdup_printf("opb-master@%x", LPC_OPB_REGS_OPB_ADDR); 179 offset = fdt_add_subnode(fdt, lpcm_offset, name); 180 _FDT(offset); 181 g_free(name); 182 183 reg[0] = cpu_to_be32(LPC_OPB_REGS_OPB_ADDR); 184 reg[1] = cpu_to_be32(LPC_OPB_REGS_OPB_SIZE); 185 _FDT((fdt_setprop(fdt, offset, "reg", reg, sizeof(reg)))); 186 _FDT((fdt_setprop_string(fdt, offset, "compatible", 187 "ibm,power9-lpcm-opb-master"))); 188 189 /* 190 * OPB arbitrer registers 191 */ 192 name = g_strdup_printf("opb-arbitrer@%x", LPC_OPB_REGS_OPBA_ADDR); 193 offset = fdt_add_subnode(fdt, lpcm_offset, name); 194 _FDT(offset); 195 g_free(name); 196 197 reg[0] = cpu_to_be32(LPC_OPB_REGS_OPBA_ADDR); 198 reg[1] = cpu_to_be32(LPC_OPB_REGS_OPBA_SIZE); 199 _FDT((fdt_setprop(fdt, offset, "reg", reg, sizeof(reg)))); 200 _FDT((fdt_setprop_string(fdt, offset, "compatible", 201 "ibm,power9-lpcm-opb-arbiter"))); 202 203 /* 204 * LPC Host Controller registers 205 */ 206 name = g_strdup_printf("lpc-controller@%x", LPC_HC_REGS_OPB_ADDR); 207 offset = fdt_add_subnode(fdt, lpcm_offset, name); 208 _FDT(offset); 209 g_free(name); 210 211 reg[0] = cpu_to_be32(LPC_HC_REGS_OPB_ADDR); 212 reg[1] = cpu_to_be32(LPC_HC_REGS_OPB_SIZE); 213 _FDT((fdt_setprop(fdt, offset, "reg", reg, sizeof(reg)))); 214 _FDT((fdt_setprop_string(fdt, offset, "compatible", 215 "ibm,power9-lpc-controller"))); 216 217 name = g_strdup_printf("lpc@0"); 218 offset = fdt_add_subnode(fdt, lpcm_offset, name); 219 _FDT(offset); 220 g_free(name); 221 _FDT((fdt_setprop_cell(fdt, offset, "#address-cells", 2))); 222 _FDT((fdt_setprop_cell(fdt, offset, "#size-cells", 1))); 223 _FDT((fdt_setprop(fdt, offset, "compatible", lpc_compat, 224 sizeof(lpc_compat)))); 225 _FDT((fdt_setprop(fdt, offset, "ranges", lpc_ranges, 226 sizeof(lpc_ranges)))); 227 228 return 0; 229 } 230 231 /* 232 * These read/write handlers of the OPB address space should be common 233 * with the P9 LPC Controller which uses direct MMIOs. 234 * 235 * TODO: rework to use address_space_stq() and address_space_ldq() 236 * instead. 237 */ 238 static bool opb_read(PnvLpcController *lpc, uint32_t addr, uint8_t *data, 239 int sz) 240 { 241 /* XXX Handle access size limits and FW read caching here */ 242 return !address_space_read(&lpc->opb_as, addr, MEMTXATTRS_UNSPECIFIED, 243 data, sz); 244 } 245 246 static bool opb_write(PnvLpcController *lpc, uint32_t addr, uint8_t *data, 247 int sz) 248 { 249 /* XXX Handle access size limits here */ 250 return !address_space_write(&lpc->opb_as, addr, MEMTXATTRS_UNSPECIFIED, 251 data, sz); 252 } 253 254 #define ECCB_CTL_READ PPC_BIT(15) 255 #define ECCB_CTL_SZ_LSH (63 - 7) 256 #define ECCB_CTL_SZ_MASK PPC_BITMASK(4, 7) 257 #define ECCB_CTL_ADDR_MASK PPC_BITMASK(32, 63) 258 259 #define ECCB_STAT_OP_DONE PPC_BIT(52) 260 #define ECCB_STAT_OP_ERR PPC_BIT(52) 261 #define ECCB_STAT_RD_DATA_LSH (63 - 37) 262 #define ECCB_STAT_RD_DATA_MASK (0xffffffff << ECCB_STAT_RD_DATA_LSH) 263 264 static void pnv_lpc_do_eccb(PnvLpcController *lpc, uint64_t cmd) 265 { 266 /* XXX Check for magic bits at the top, addr size etc... */ 267 unsigned int sz = (cmd & ECCB_CTL_SZ_MASK) >> ECCB_CTL_SZ_LSH; 268 uint32_t opb_addr = cmd & ECCB_CTL_ADDR_MASK; 269 uint8_t data[8]; 270 bool success; 271 272 if (sz > sizeof(data)) { 273 qemu_log_mask(LOG_GUEST_ERROR, 274 "ECCB: invalid operation at @0x%08x size %d\n", opb_addr, sz); 275 return; 276 } 277 278 if (cmd & ECCB_CTL_READ) { 279 success = opb_read(lpc, opb_addr, data, sz); 280 if (success) { 281 lpc->eccb_stat_reg = ECCB_STAT_OP_DONE | 282 (((uint64_t)data[0]) << 24 | 283 ((uint64_t)data[1]) << 16 | 284 ((uint64_t)data[2]) << 8 | 285 ((uint64_t)data[3])) << ECCB_STAT_RD_DATA_LSH; 286 } else { 287 lpc->eccb_stat_reg = ECCB_STAT_OP_DONE | 288 (0xffffffffull << ECCB_STAT_RD_DATA_LSH); 289 } 290 } else { 291 data[0] = lpc->eccb_data_reg >> 24; 292 data[1] = lpc->eccb_data_reg >> 16; 293 data[2] = lpc->eccb_data_reg >> 8; 294 data[3] = lpc->eccb_data_reg; 295 296 success = opb_write(lpc, opb_addr, data, sz); 297 lpc->eccb_stat_reg = ECCB_STAT_OP_DONE; 298 } 299 /* XXX Which error bit (if any) to signal OPB error ? */ 300 } 301 302 static uint64_t pnv_lpc_xscom_read(void *opaque, hwaddr addr, unsigned size) 303 { 304 PnvLpcController *lpc = PNV_LPC(opaque); 305 uint32_t offset = addr >> 3; 306 uint64_t val = 0; 307 308 switch (offset & 3) { 309 case ECCB_CTL: 310 case ECCB_RESET: 311 val = 0; 312 break; 313 case ECCB_STAT: 314 val = lpc->eccb_stat_reg; 315 lpc->eccb_stat_reg = 0; 316 break; 317 case ECCB_DATA: 318 val = ((uint64_t)lpc->eccb_data_reg) << 32; 319 break; 320 } 321 return val; 322 } 323 324 static void pnv_lpc_xscom_write(void *opaque, hwaddr addr, 325 uint64_t val, unsigned size) 326 { 327 PnvLpcController *lpc = PNV_LPC(opaque); 328 uint32_t offset = addr >> 3; 329 330 switch (offset & 3) { 331 case ECCB_CTL: 332 pnv_lpc_do_eccb(lpc, val); 333 break; 334 case ECCB_RESET: 335 /* XXXX */ 336 break; 337 case ECCB_STAT: 338 break; 339 case ECCB_DATA: 340 lpc->eccb_data_reg = val >> 32; 341 break; 342 } 343 } 344 345 static const MemoryRegionOps pnv_lpc_xscom_ops = { 346 .read = pnv_lpc_xscom_read, 347 .write = pnv_lpc_xscom_write, 348 .valid.min_access_size = 8, 349 .valid.max_access_size = 8, 350 .impl.min_access_size = 8, 351 .impl.max_access_size = 8, 352 .endianness = DEVICE_BIG_ENDIAN, 353 }; 354 355 static uint64_t pnv_lpc_mmio_read(void *opaque, hwaddr addr, unsigned size) 356 { 357 PnvLpcController *lpc = PNV_LPC(opaque); 358 uint64_t val = 0; 359 uint32_t opb_addr = addr & ECCB_CTL_ADDR_MASK; 360 MemTxResult result; 361 362 switch (size) { 363 case 4: 364 val = address_space_ldl(&lpc->opb_as, opb_addr, MEMTXATTRS_UNSPECIFIED, 365 &result); 366 break; 367 case 1: 368 val = address_space_ldub(&lpc->opb_as, opb_addr, MEMTXATTRS_UNSPECIFIED, 369 &result); 370 break; 371 default: 372 qemu_log_mask(LOG_GUEST_ERROR, "OPB read failed at @0x%" 373 HWADDR_PRIx " invalid size %d\n", addr, size); 374 return 0; 375 } 376 377 if (result != MEMTX_OK) { 378 qemu_log_mask(LOG_GUEST_ERROR, "OPB read failed at @0x%" 379 HWADDR_PRIx "\n", addr); 380 } 381 382 return val; 383 } 384 385 static void pnv_lpc_mmio_write(void *opaque, hwaddr addr, 386 uint64_t val, unsigned size) 387 { 388 PnvLpcController *lpc = PNV_LPC(opaque); 389 uint32_t opb_addr = addr & ECCB_CTL_ADDR_MASK; 390 MemTxResult result; 391 392 switch (size) { 393 case 4: 394 address_space_stl(&lpc->opb_as, opb_addr, val, MEMTXATTRS_UNSPECIFIED, 395 &result); 396 break; 397 case 1: 398 address_space_stb(&lpc->opb_as, opb_addr, val, MEMTXATTRS_UNSPECIFIED, 399 &result); 400 break; 401 default: 402 qemu_log_mask(LOG_GUEST_ERROR, "OPB write failed at @0x%" 403 HWADDR_PRIx " invalid size %d\n", addr, size); 404 return; 405 } 406 407 if (result != MEMTX_OK) { 408 qemu_log_mask(LOG_GUEST_ERROR, "OPB write failed at @0x%" 409 HWADDR_PRIx "\n", addr); 410 } 411 } 412 413 static const MemoryRegionOps pnv_lpc_mmio_ops = { 414 .read = pnv_lpc_mmio_read, 415 .write = pnv_lpc_mmio_write, 416 .impl = { 417 .min_access_size = 1, 418 .max_access_size = 4, 419 }, 420 .endianness = DEVICE_BIG_ENDIAN, 421 }; 422 423 static void pnv_lpc_eval_irqs(PnvLpcController *lpc) 424 { 425 bool lpc_to_opb_irq = false; 426 427 /* Update LPC controller to OPB line */ 428 if (lpc->lpc_hc_irqser_ctrl & LPC_HC_IRQSER_EN) { 429 uint32_t irqs; 430 431 irqs = lpc->lpc_hc_irqstat & lpc->lpc_hc_irqmask; 432 lpc_to_opb_irq = (irqs != 0); 433 } 434 435 /* We don't honor the polarity register, it's pointless and unused 436 * anyway 437 */ 438 if (lpc_to_opb_irq) { 439 lpc->opb_irq_input |= OPB_MASTER_IRQ_LPC; 440 } else { 441 lpc->opb_irq_input &= ~OPB_MASTER_IRQ_LPC; 442 } 443 444 /* Update OPB internal latch */ 445 lpc->opb_irq_stat |= lpc->opb_irq_input & lpc->opb_irq_mask; 446 447 /* Reflect the interrupt */ 448 qemu_set_irq(lpc->psi_irq, lpc->opb_irq_stat != 0); 449 } 450 451 static uint64_t lpc_hc_read(void *opaque, hwaddr addr, unsigned size) 452 { 453 PnvLpcController *lpc = opaque; 454 uint64_t val = 0xfffffffffffffffful; 455 456 switch (addr) { 457 case LPC_HC_FW_SEG_IDSEL: 458 val = lpc->lpc_hc_fw_seg_idsel; 459 break; 460 case LPC_HC_FW_RD_ACC_SIZE: 461 val = lpc->lpc_hc_fw_rd_acc_size; 462 break; 463 case LPC_HC_IRQSER_CTRL: 464 val = lpc->lpc_hc_irqser_ctrl; 465 break; 466 case LPC_HC_IRQMASK: 467 val = lpc->lpc_hc_irqmask; 468 break; 469 case LPC_HC_IRQSTAT: 470 val = lpc->lpc_hc_irqstat; 471 break; 472 case LPC_HC_ERROR_ADDRESS: 473 val = lpc->lpc_hc_error_addr; 474 break; 475 default: 476 qemu_log_mask(LOG_UNIMP, "LPC HC Unimplemented register: 0x%" 477 HWADDR_PRIx "\n", addr); 478 } 479 return val; 480 } 481 482 static void lpc_hc_write(void *opaque, hwaddr addr, uint64_t val, 483 unsigned size) 484 { 485 PnvLpcController *lpc = opaque; 486 487 /* XXX Filter out reserved bits */ 488 489 switch (addr) { 490 case LPC_HC_FW_SEG_IDSEL: 491 /* XXX Actually figure out how that works as this impact 492 * memory regions/aliases 493 */ 494 lpc->lpc_hc_fw_seg_idsel = val; 495 break; 496 case LPC_HC_FW_RD_ACC_SIZE: 497 lpc->lpc_hc_fw_rd_acc_size = val; 498 break; 499 case LPC_HC_IRQSER_CTRL: 500 lpc->lpc_hc_irqser_ctrl = val; 501 pnv_lpc_eval_irqs(lpc); 502 break; 503 case LPC_HC_IRQMASK: 504 lpc->lpc_hc_irqmask = val; 505 pnv_lpc_eval_irqs(lpc); 506 break; 507 case LPC_HC_IRQSTAT: 508 /* 509 * This register is write-to-clear for the IRQSER (LPC device IRQ) 510 * status. However if the device has not de-asserted its interrupt 511 * that will just raise this IRQ status bit again. Model this by 512 * keeping track of the inputs and only clearing if the inputs are 513 * deasserted. 514 */ 515 lpc->lpc_hc_irqstat &= ~(val & ~lpc->lpc_hc_irq_inputs); 516 pnv_lpc_eval_irqs(lpc); 517 break; 518 case LPC_HC_ERROR_ADDRESS: 519 break; 520 default: 521 qemu_log_mask(LOG_UNIMP, "LPC HC Unimplemented register: 0x%" 522 HWADDR_PRIx "\n", addr); 523 } 524 } 525 526 static const MemoryRegionOps lpc_hc_ops = { 527 .read = lpc_hc_read, 528 .write = lpc_hc_write, 529 .endianness = DEVICE_BIG_ENDIAN, 530 .valid = { 531 .min_access_size = 4, 532 .max_access_size = 4, 533 }, 534 .impl = { 535 .min_access_size = 4, 536 .max_access_size = 4, 537 }, 538 }; 539 540 static uint64_t opb_master_read(void *opaque, hwaddr addr, unsigned size) 541 { 542 PnvLpcController *lpc = opaque; 543 uint64_t val = 0xfffffffffffffffful; 544 545 switch (addr) { 546 case OPB_MASTER_LS_ROUTE0: /* TODO */ 547 val = lpc->opb_irq_route0; 548 break; 549 case OPB_MASTER_LS_ROUTE1: /* TODO */ 550 val = lpc->opb_irq_route1; 551 break; 552 case OPB_MASTER_LS_IRQ_STAT: 553 val = lpc->opb_irq_stat; 554 break; 555 case OPB_MASTER_LS_IRQ_MASK: 556 val = lpc->opb_irq_mask; 557 break; 558 case OPB_MASTER_LS_IRQ_POL: 559 val = lpc->opb_irq_pol; 560 break; 561 case OPB_MASTER_LS_IRQ_INPUT: 562 val = lpc->opb_irq_input; 563 break; 564 default: 565 qemu_log_mask(LOG_UNIMP, "OPBM: read on unimplemented register: 0x%" 566 HWADDR_PRIx "\n", addr); 567 } 568 569 return val; 570 } 571 572 static void opb_master_write(void *opaque, hwaddr addr, 573 uint64_t val, unsigned size) 574 { 575 PnvLpcController *lpc = opaque; 576 577 switch (addr) { 578 case OPB_MASTER_LS_ROUTE0: /* TODO */ 579 lpc->opb_irq_route0 = val; 580 break; 581 case OPB_MASTER_LS_ROUTE1: /* TODO */ 582 lpc->opb_irq_route1 = val; 583 break; 584 case OPB_MASTER_LS_IRQ_STAT: 585 lpc->opb_irq_stat &= ~val; 586 pnv_lpc_eval_irqs(lpc); 587 break; 588 case OPB_MASTER_LS_IRQ_MASK: 589 lpc->opb_irq_mask = val; 590 pnv_lpc_eval_irqs(lpc); 591 break; 592 case OPB_MASTER_LS_IRQ_POL: 593 lpc->opb_irq_pol = val; 594 pnv_lpc_eval_irqs(lpc); 595 break; 596 case OPB_MASTER_LS_IRQ_INPUT: 597 /* Read only */ 598 break; 599 default: 600 qemu_log_mask(LOG_UNIMP, "OPBM: write on unimplemented register: 0x%" 601 HWADDR_PRIx " val=0x%08"PRIx64"\n", addr, val); 602 } 603 } 604 605 static const MemoryRegionOps opb_master_ops = { 606 .read = opb_master_read, 607 .write = opb_master_write, 608 .endianness = DEVICE_BIG_ENDIAN, 609 .valid = { 610 .min_access_size = 4, 611 .max_access_size = 4, 612 }, 613 .impl = { 614 .min_access_size = 4, 615 .max_access_size = 4, 616 }, 617 }; 618 619 static void pnv_lpc_power8_realize(DeviceState *dev, Error **errp) 620 { 621 PnvLpcController *lpc = PNV_LPC(dev); 622 PnvLpcClass *plc = PNV_LPC_GET_CLASS(dev); 623 Error *local_err = NULL; 624 625 plc->parent_realize(dev, &local_err); 626 if (local_err) { 627 error_propagate(errp, local_err); 628 return; 629 } 630 631 /* P8 uses a XSCOM region for LPC registers */ 632 pnv_xscom_region_init(&lpc->xscom_regs, OBJECT(lpc), 633 &pnv_lpc_xscom_ops, lpc, "xscom-lpc", 634 PNV_XSCOM_LPC_SIZE); 635 } 636 637 static void pnv_lpc_power8_class_init(ObjectClass *klass, void *data) 638 { 639 DeviceClass *dc = DEVICE_CLASS(klass); 640 PnvXScomInterfaceClass *xdc = PNV_XSCOM_INTERFACE_CLASS(klass); 641 PnvLpcClass *plc = PNV_LPC_CLASS(klass); 642 643 dc->desc = "PowerNV LPC Controller POWER8"; 644 645 xdc->dt_xscom = pnv_lpc_dt_xscom; 646 647 device_class_set_parent_realize(dc, pnv_lpc_power8_realize, 648 &plc->parent_realize); 649 } 650 651 static const TypeInfo pnv_lpc_power8_info = { 652 .name = TYPE_PNV8_LPC, 653 .parent = TYPE_PNV_LPC, 654 .class_init = pnv_lpc_power8_class_init, 655 .interfaces = (InterfaceInfo[]) { 656 { TYPE_PNV_XSCOM_INTERFACE }, 657 { } 658 } 659 }; 660 661 static void pnv_lpc_power9_realize(DeviceState *dev, Error **errp) 662 { 663 PnvLpcController *lpc = PNV_LPC(dev); 664 PnvLpcClass *plc = PNV_LPC_GET_CLASS(dev); 665 Error *local_err = NULL; 666 667 plc->parent_realize(dev, &local_err); 668 if (local_err) { 669 error_propagate(errp, local_err); 670 return; 671 } 672 673 /* P9 uses a MMIO region */ 674 memory_region_init_io(&lpc->xscom_regs, OBJECT(lpc), &pnv_lpc_mmio_ops, 675 lpc, "lpcm", PNV9_LPCM_SIZE); 676 } 677 678 static void pnv_lpc_power9_class_init(ObjectClass *klass, void *data) 679 { 680 DeviceClass *dc = DEVICE_CLASS(klass); 681 PnvLpcClass *plc = PNV_LPC_CLASS(klass); 682 683 dc->desc = "PowerNV LPC Controller POWER9"; 684 685 device_class_set_parent_realize(dc, pnv_lpc_power9_realize, 686 &plc->parent_realize); 687 } 688 689 static const TypeInfo pnv_lpc_power9_info = { 690 .name = TYPE_PNV9_LPC, 691 .parent = TYPE_PNV_LPC, 692 .class_init = pnv_lpc_power9_class_init, 693 }; 694 695 static void pnv_lpc_power10_class_init(ObjectClass *klass, void *data) 696 { 697 DeviceClass *dc = DEVICE_CLASS(klass); 698 699 dc->desc = "PowerNV LPC Controller POWER10"; 700 } 701 702 static const TypeInfo pnv_lpc_power10_info = { 703 .name = TYPE_PNV10_LPC, 704 .parent = TYPE_PNV9_LPC, 705 .class_init = pnv_lpc_power10_class_init, 706 }; 707 708 static void pnv_lpc_realize(DeviceState *dev, Error **errp) 709 { 710 PnvLpcController *lpc = PNV_LPC(dev); 711 712 /* Reg inits */ 713 lpc->lpc_hc_fw_rd_acc_size = LPC_HC_FW_RD_4B; 714 715 /* Create address space and backing MR for the OPB bus */ 716 memory_region_init(&lpc->opb_mr, OBJECT(dev), "lpc-opb", 0x100000000ull); 717 address_space_init(&lpc->opb_as, &lpc->opb_mr, "lpc-opb"); 718 719 /* Create ISA IO and Mem space regions which are the root of 720 * the ISA bus (ie, ISA address spaces). We don't create a 721 * separate one for FW which we alias to memory. 722 */ 723 memory_region_init(&lpc->isa_io, OBJECT(dev), "isa-io", ISA_IO_SIZE); 724 memory_region_init(&lpc->isa_mem, OBJECT(dev), "isa-mem", ISA_MEM_SIZE); 725 memory_region_init(&lpc->isa_fw, OBJECT(dev), "isa-fw", ISA_FW_SIZE); 726 727 /* Create windows from the OPB space to the ISA space */ 728 memory_region_init_alias(&lpc->opb_isa_io, OBJECT(dev), "lpc-isa-io", 729 &lpc->isa_io, 0, LPC_IO_OPB_SIZE); 730 memory_region_add_subregion(&lpc->opb_mr, LPC_IO_OPB_ADDR, 731 &lpc->opb_isa_io); 732 memory_region_init_alias(&lpc->opb_isa_mem, OBJECT(dev), "lpc-isa-mem", 733 &lpc->isa_mem, 0, LPC_MEM_OPB_SIZE); 734 memory_region_add_subregion(&lpc->opb_mr, LPC_MEM_OPB_ADDR, 735 &lpc->opb_isa_mem); 736 memory_region_init_alias(&lpc->opb_isa_fw, OBJECT(dev), "lpc-isa-fw", 737 &lpc->isa_fw, 0, LPC_FW_OPB_SIZE); 738 memory_region_add_subregion(&lpc->opb_mr, LPC_FW_OPB_ADDR, 739 &lpc->opb_isa_fw); 740 741 /* Create MMIO regions for LPC HC and OPB registers */ 742 memory_region_init_io(&lpc->opb_master_regs, OBJECT(dev), &opb_master_ops, 743 lpc, "lpc-opb-master", LPC_OPB_REGS_OPB_SIZE); 744 lpc->opb_master_regs.disable_reentrancy_guard = true; 745 memory_region_add_subregion(&lpc->opb_mr, LPC_OPB_REGS_OPB_ADDR, 746 &lpc->opb_master_regs); 747 memory_region_init_io(&lpc->lpc_hc_regs, OBJECT(dev), &lpc_hc_ops, lpc, 748 "lpc-hc", LPC_HC_REGS_OPB_SIZE); 749 /* xscom writes to lpc-hc. As such mark lpc-hc re-entrancy safe */ 750 lpc->lpc_hc_regs.disable_reentrancy_guard = true; 751 memory_region_add_subregion(&lpc->opb_mr, LPC_HC_REGS_OPB_ADDR, 752 &lpc->lpc_hc_regs); 753 754 qdev_init_gpio_out(dev, &lpc->psi_irq, 1); 755 } 756 757 static void pnv_lpc_class_init(ObjectClass *klass, void *data) 758 { 759 DeviceClass *dc = DEVICE_CLASS(klass); 760 761 dc->realize = pnv_lpc_realize; 762 dc->desc = "PowerNV LPC Controller"; 763 dc->user_creatable = false; 764 } 765 766 static const TypeInfo pnv_lpc_info = { 767 .name = TYPE_PNV_LPC, 768 .parent = TYPE_DEVICE, 769 .instance_size = sizeof(PnvLpcController), 770 .class_init = pnv_lpc_class_init, 771 .class_size = sizeof(PnvLpcClass), 772 .abstract = true, 773 }; 774 775 static void pnv_lpc_register_types(void) 776 { 777 type_register_static(&pnv_lpc_info); 778 type_register_static(&pnv_lpc_power8_info); 779 type_register_static(&pnv_lpc_power9_info); 780 type_register_static(&pnv_lpc_power10_info); 781 } 782 783 type_init(pnv_lpc_register_types) 784 785 /* If we don't use the built-in LPC interrupt deserializer, we need 786 * to provide a set of qirqs for the ISA bus or things will go bad. 787 * 788 * Most machines using pre-Naples chips (without said deserializer) 789 * have a CPLD that will collect the SerIRQ and shoot them as a 790 * single level interrupt to the P8 chip. So let's setup a hook 791 * for doing just that. 792 */ 793 static void pnv_lpc_isa_irq_handler_cpld(void *opaque, int n, int level) 794 { 795 PnvMachineState *pnv = PNV_MACHINE(qdev_get_machine()); 796 uint32_t old_state = pnv->cpld_irqstate; 797 PnvLpcController *lpc = PNV_LPC(opaque); 798 799 if (level) { 800 pnv->cpld_irqstate |= 1u << n; 801 } else { 802 pnv->cpld_irqstate &= ~(1u << n); 803 } 804 805 if (pnv->cpld_irqstate != old_state) { 806 qemu_set_irq(lpc->psi_irq, pnv->cpld_irqstate != 0); 807 } 808 } 809 810 static void pnv_lpc_isa_irq_handler(void *opaque, int n, int level) 811 { 812 PnvLpcController *lpc = PNV_LPC(opaque); 813 uint32_t irq_bit = LPC_HC_IRQ_SERIRQ0 >> n; 814 815 if (level) { 816 lpc->lpc_hc_irq_inputs |= irq_bit; 817 818 /* 819 * The LPC HC in Naples and later latches LPC IRQ into a bit field in 820 * the IRQSTAT register, and that drives the PSI IRQ to the IC. 821 * Software clears this bit manually (see LPC_HC_IRQSTAT handler). 822 */ 823 lpc->lpc_hc_irqstat |= irq_bit; 824 pnv_lpc_eval_irqs(lpc); 825 } else { 826 lpc->lpc_hc_irq_inputs &= ~irq_bit; 827 } 828 } 829 830 ISABus *pnv_lpc_isa_create(PnvLpcController *lpc, bool use_cpld, Error **errp) 831 { 832 Error *local_err = NULL; 833 ISABus *isa_bus; 834 qemu_irq *irqs; 835 qemu_irq_handler handler; 836 837 /* let isa_bus_new() create its own bridge on SysBus otherwise 838 * devices specified on the command line won't find the bus and 839 * will fail to create. 840 */ 841 isa_bus = isa_bus_new(NULL, &lpc->isa_mem, &lpc->isa_io, &local_err); 842 if (local_err) { 843 error_propagate(errp, local_err); 844 return NULL; 845 } 846 847 /* Not all variants have a working serial irq decoder. If not, 848 * handling of LPC interrupts becomes a platform issue (some 849 * platforms have a CPLD to do it). 850 */ 851 if (use_cpld) { 852 handler = pnv_lpc_isa_irq_handler_cpld; 853 } else { 854 handler = pnv_lpc_isa_irq_handler; 855 } 856 857 irqs = qemu_allocate_irqs(handler, lpc, ISA_NUM_IRQS); 858 859 isa_bus_register_input_irqs(isa_bus, irqs); 860 861 return isa_bus; 862 } 863