mips_jazz.c 11.8 KB
Newer Older
A
aurel32 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
/*
 * QEMU MIPS Jazz support
 *
 * Copyright (c) 2007-2008 Hervé Poussineau
 *
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */

25
#include "hw/hw.h"
P
Paolo Bonzini 已提交
26 27 28 29 30 31
#include "hw/mips/mips.h"
#include "hw/mips/cpudevs.h"
#include "hw/i386/pc.h"
#include "hw/char/serial.h"
#include "hw/isa/isa.h"
#include "hw/block/fdc.h"
32 33
#include "sysemu/sysemu.h"
#include "sysemu/arch_init.h"
34
#include "hw/boards.h"
P
Paolo Bonzini 已提交
35
#include "net/net.h"
P
Paolo Bonzini 已提交
36 37
#include "hw/scsi/esp.h"
#include "hw/mips/bios.h"
38
#include "hw/loader.h"
P
Paolo Bonzini 已提交
39 40 41
#include "hw/timer/mc146818rtc.h"
#include "hw/timer/i8254.h"
#include "hw/audio/pcspk.h"
42
#include "sysemu/blockdev.h"
43
#include "hw/sysbus.h"
44
#include "exec/address-spaces.h"
45
#include "sysemu/qtest.h"
46
#include "qemu/error-report.h"
A
aurel32 已提交
47 48 49 50

enum jazz_model_e
{
    JAZZ_MAGNUM,
A
aurel32 已提交
51
    JAZZ_PICA61,
A
aurel32 已提交
52 53 54 55
};

static void main_cpu_reset(void *opaque)
{
56 57 58
    MIPSCPU *cpu = opaque;

    cpu_reset(CPU(cpu));
A
aurel32 已提交
59 60
}

A
Avi Kivity 已提交
61
static uint64_t rtc_read(void *opaque, hwaddr addr, unsigned size)
A
aurel32 已提交
62
{
63
    return cpu_inw(0x71);
A
aurel32 已提交
64 65
}

A
Avi Kivity 已提交
66
static void rtc_write(void *opaque, hwaddr addr,
A
Avi Kivity 已提交
67
                      uint64_t val, unsigned size)
A
aurel32 已提交
68
{
69
    cpu_outw(0x71, val & 0xff);
A
aurel32 已提交
70 71
}

A
Avi Kivity 已提交
72 73 74 75
static const MemoryRegionOps rtc_ops = {
    .read = rtc_read,
    .write = rtc_write,
    .endianness = DEVICE_NATIVE_ENDIAN,
A
aurel32 已提交
76 77
};

A
Avi Kivity 已提交
78
static uint64_t dma_dummy_read(void *opaque, hwaddr addr,
A
Avi Kivity 已提交
79
                               unsigned size)
80 81 82
{
    /* Nothing to do. That is only to ensure that
     * the current DMA acknowledge cycle is completed. */
A
Avi Kivity 已提交
83
    return 0xff;
84 85
}

A
Avi Kivity 已提交
86
static void dma_dummy_write(void *opaque, hwaddr addr,
A
Avi Kivity 已提交
87 88 89 90 91
                            uint64_t val, unsigned size)
{
    /* Nothing to do. That is only to ensure that
     * the current DMA acknowledge cycle is completed. */
}
92

A
Avi Kivity 已提交
93 94 95 96
static const MemoryRegionOps dma_dummy_ops = {
    .read = dma_dummy_read,
    .write = dma_dummy_write,
    .endianness = DEVICE_NATIVE_ENDIAN,
97 98
};

A
aurel32 已提交
99 100 101
#define MAGNUM_BIOS_SIZE_MAX 0x7e000
#define MAGNUM_BIOS_SIZE (BIOS_SIZE < MAGNUM_BIOS_SIZE_MAX ? BIOS_SIZE : MAGNUM_BIOS_SIZE_MAX)

B
Blue Swirl 已提交
102 103
static void cpu_request_exit(void *opaque, int irq, int level)
{
104
    CPUState *cpu = current_cpu;
B
Blue Swirl 已提交
105

106 107
    if (cpu && level) {
        cpu_exit(cpu);
B
Blue Swirl 已提交
108 109 110
    }
}

111 112 113 114 115 116 117 118 119 120 121 122
static CPUUnassignedAccess real_do_unassigned_access;
static void mips_jazz_do_unassigned_access(CPUState *cpu, hwaddr addr,
                                           bool is_write, bool is_exec,
                                           int opaque, unsigned size)
{
    if (!is_exec) {
        /* ignore invalid access (ie do not raise exception) */
        return;
    }
    (*real_do_unassigned_access)(cpu, addr, is_write, is_exec, opaque, size);
}

123 124 125 126 127
static void mips_jazz_init(MemoryRegion *address_space,
                           MemoryRegion *address_space_io,
                           ram_addr_t ram_size,
                           const char *cpu_model,
                           enum jazz_model_e jazz_model)
A
aurel32 已提交
128
{
P
Paul Brook 已提交
129
    char *filename;
A
aurel32 已提交
130
    int bios_size, n;
131
    MIPSCPU *cpu;
132
    CPUClass *cc;
A
Andreas Färber 已提交
133
    CPUMIPSState *env;
A
aurel32 已提交
134
    qemu_irq *rc4030, *i8259;
135
    rc4030_dma *dmas;
A
aurel32 已提交
136
    void* rc4030_opaque;
P
Paolo Bonzini 已提交
137
    MemoryRegion *isa = g_new(MemoryRegion, 1);
A
Avi Kivity 已提交
138
    MemoryRegion *rtc = g_new(MemoryRegion, 1);
139
    MemoryRegion *i8042 = g_new(MemoryRegion, 1);
A
Avi Kivity 已提交
140
    MemoryRegion *dma_dummy = g_new(MemoryRegion, 1);
A
aurel32 已提交
141
    NICInfo *nd;
142 143
    DeviceState *dev;
    SysBusDevice *sysbus;
144
    ISABus *isa_bus;
B
Blue Swirl 已提交
145
    ISADevice *pit;
G
Gerd Hoffmann 已提交
146
    DriveInfo *fds[MAX_FD];
147
    qemu_irq esp_reset, dma_enable;
B
Blue Swirl 已提交
148
    qemu_irq *cpu_exit_irq;
A
Avi Kivity 已提交
149 150 151
    MemoryRegion *ram = g_new(MemoryRegion, 1);
    MemoryRegion *bios = g_new(MemoryRegion, 1);
    MemoryRegion *bios2 = g_new(MemoryRegion, 1);
A
aurel32 已提交
152 153 154 155 156 157 158 159 160 161

    /* init CPUs */
    if (cpu_model == NULL) {
#ifdef TARGET_MIPS64
        cpu_model = "R4000";
#else
        /* FIXME: All wrong, this maybe should be R3000 for the older JAZZs. */
        cpu_model = "24Kf";
#endif
    }
162 163
    cpu = cpu_mips_init(cpu_model);
    if (cpu == NULL) {
A
aurel32 已提交
164 165 166
        fprintf(stderr, "Unable to find CPU definition\n");
        exit(1);
    }
167
    env = &cpu->env;
168
    qemu_register_reset(main_cpu_reset, cpu);
A
aurel32 已提交
169

170 171 172 173 174 175 176 177 178 179 180
    /* Chipset returns 0 in invalid reads and do not raise data exceptions.
     * However, we can't simply add a global memory region to catch
     * everything, as memory core directly call unassigned_mem_read/write
     * on some invalid accesses, which call do_unassigned_access on the
     * CPU, which raise an exception.
     * Handle that case by hijacking the do_unassigned_access method on
     * the CPU, and do not raise exceptions for data access. */
    cc = CPU_GET_CLASS(cpu);
    real_do_unassigned_access = cc->do_unassigned_access;
    cc->do_unassigned_access = mips_jazz_do_unassigned_access;

A
aurel32 已提交
181
    /* allocate RAM */
182
    memory_region_init_ram(ram, NULL, "mips_jazz.ram", ram_size);
183
    vmstate_register_ram_global(ram);
A
Avi Kivity 已提交
184
    memory_region_add_subregion(address_space, 0, ram);
185

186
    memory_region_init_ram(bios, NULL, "mips_jazz.bios", MAGNUM_BIOS_SIZE);
187
    vmstate_register_ram_global(bios);
A
Avi Kivity 已提交
188
    memory_region_set_readonly(bios, true);
189
    memory_region_init_alias(bios2, NULL, "mips_jazz.bios", bios,
A
Avi Kivity 已提交
190 191 192
                             0, MAGNUM_BIOS_SIZE);
    memory_region_add_subregion(address_space, 0x1fc00000LL, bios);
    memory_region_add_subregion(address_space, 0xfff00000LL, bios2);
A
aurel32 已提交
193 194

    /* load the BIOS image. */
195 196
    if (bios_name == NULL)
        bios_name = BIOS_FILENAME;
P
Paul Brook 已提交
197 198 199 200
    filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, bios_name);
    if (filename) {
        bios_size = load_image_targphys(filename, 0xfff00000LL,
                                        MAGNUM_BIOS_SIZE);
201
        g_free(filename);
P
Paul Brook 已提交
202 203 204
    } else {
        bios_size = -1;
    }
205
    if ((bios_size < 0 || bios_size > MAGNUM_BIOS_SIZE) && !qtest_enabled()) {
206 207
        error_report("Could not load MIPS bios '%s'", bios_name);
        exit(1);
A
aurel32 已提交
208 209 210 211 212 213 214
    }

    /* Init CPU internal devices */
    cpu_mips_irq_init_cpu(env);
    cpu_mips_clock_init(env);

    /* Chipset */
A
Avi Kivity 已提交
215 216
    rc4030_opaque = rc4030_init(env->irq[6], env->irq[3], &rc4030, &dmas,
                                address_space);
217
    memory_region_init_io(dma_dummy, NULL, &dma_dummy_ops, NULL, "dummy_dma", 0x1000);
A
Avi Kivity 已提交
218
    memory_region_add_subregion(address_space, 0x8000d000, dma_dummy);
A
aurel32 已提交
219 220

    /* ISA devices */
221 222 223
    isa_bus = isa_bus_new(NULL, address_space_io);
    i8259 = i8259_init(isa_bus, env->irq[4]);
    isa_bus_irqs(isa_bus, i8259);
B
Blue Swirl 已提交
224 225
    cpu_exit_irq = qemu_allocate_irqs(cpu_request_exit, NULL, 1);
    DMA_init(0, cpu_exit_irq);
226
    pit = pit_init(isa_bus, 0x40, 0, NULL);
J
Jan Kiszka 已提交
227
    pcspk_init(isa_bus, pit);
A
aurel32 已提交
228 229

    /* ISA IO space at 0x90000000 */
P
Paolo Bonzini 已提交
230 231 232
    memory_region_init_alias(isa, NULL, "isa_mmio",
                             get_system_io(), 0, 0x01000000);
    memory_region_add_subregion(address_space, 0x90000000, isa);
A
aurel32 已提交
233 234 235 236 237
    isa_mem_base = 0x11000000;

    /* Video card */
    switch (jazz_model) {
    case JAZZ_MAGNUM:
H
Hervé Poussineau 已提交
238 239
        dev = qdev_create(NULL, "sysbus-g364");
        qdev_init_nofail(dev);
240
        sysbus = SYS_BUS_DEVICE(dev);
H
Hervé Poussineau 已提交
241 242 243 244 245
        sysbus_mmio_map(sysbus, 0, 0x60080000);
        sysbus_mmio_map(sysbus, 1, 0x40000000);
        sysbus_connect_irq(sysbus, 0, rc4030[3]);
        {
            /* Simple ROM, so user doesn't have to provide one */
A
Avi Kivity 已提交
246
            MemoryRegion *rom_mr = g_new(MemoryRegion, 1);
247
            memory_region_init_ram(rom_mr, NULL, "g364fb.rom", 0x80000);
248
            vmstate_register_ram_global(rom_mr);
A
Avi Kivity 已提交
249 250 251
            memory_region_set_readonly(rom_mr, true);
            uint8_t *rom = memory_region_get_ram_ptr(rom_mr);
            memory_region_add_subregion(address_space, 0x60000000, rom_mr);
H
Hervé Poussineau 已提交
252 253
            rom[0] = 0x10; /* Mips G364 */
        }
A
aurel32 已提交
254
        break;
A
aurel32 已提交
255
    case JAZZ_PICA61:
256
        isa_vga_mm_init(0x40000000, 0x60000000, 0, get_system_memory());
A
aurel32 已提交
257
        break;
A
aurel32 已提交
258 259 260 261 262
    default:
        break;
    }

    /* Network controller */
A
aurel32 已提交
263 264 265
    for (n = 0; n < nb_nics; n++) {
        nd = &nd_table[n];
        if (!nd->model)
266
            nd->model = g_strdup("dp83932");
A
aurel32 已提交
267
        if (strcmp(nd->model, "dp83932") == 0) {
A
Avi Kivity 已提交
268
            dp83932_init(nd, 0x80001000, 2, get_system_memory(), rc4030[4],
A
aurel32 已提交
269 270
                         rc4030_opaque, rc4030_dma_memory_rw);
            break;
271
        } else if (is_help_option(nd->model)) {
A
aurel32 已提交
272 273 274 275 276 277 278
            fprintf(stderr, "qemu: Supported NICs: dp83932\n");
            exit(1);
        } else {
            fprintf(stderr, "qemu: Unsupported NIC: %s\n", nd->model);
            exit(1);
        }
    }
A
aurel32 已提交
279 280

    /* SCSI adapter */
P
Paul Brook 已提交
281 282
    esp_init(0x80002000, 0,
             rc4030_dma_read, rc4030_dma_write, dmas[0],
283
             rc4030[5], &esp_reset, &dma_enable);
A
aurel32 已提交
284 285 286 287 288 289 290

    /* Floppy */
    if (drive_get_max_bus(IF_FLOPPY) >= MAX_FD) {
        fprintf(stderr, "qemu: too many floppy drives\n");
        exit(1);
    }
    for (n = 0; n < MAX_FD; n++) {
G
Gerd Hoffmann 已提交
291
        fds[n] = drive_get(IF_FLOPPY, 0, n);
A
aurel32 已提交
292
    }
G
Gerd Hoffmann 已提交
293
    fdctrl_init_sysbus(rc4030[1], 0, 0x80003000, fds);
A
aurel32 已提交
294 295

    /* Real time clock */
296
    rtc_init(isa_bus, 1980, NULL);
297
    memory_region_init_io(rtc, NULL, &rtc_ops, NULL, "rtc", 0x1000);
A
Avi Kivity 已提交
298
    memory_region_add_subregion(address_space, 0x80004000, rtc);
A
aurel32 已提交
299 300

    /* Keyboard (i8042) */
301 302
    i8042_mm_init(rc4030[6], rc4030[7], i8042, 0x1000, 0x1);
    memory_region_add_subregion(address_space, 0x80005000, i8042);
A
aurel32 已提交
303 304

    /* Serial ports */
B
Blue Swirl 已提交
305
    if (serial_hds[0]) {
306 307
        serial_mm_init(address_space, 0x80006000, 0, rc4030[8], 8000000/16,
                       serial_hds[0], DEVICE_NATIVE_ENDIAN);
B
Blue Swirl 已提交
308 309
    }
    if (serial_hds[1]) {
310 311
        serial_mm_init(address_space, 0x80007000, 0, rc4030[9], 8000000/16,
                       serial_hds[1], DEVICE_NATIVE_ENDIAN);
B
Blue Swirl 已提交
312
    }
A
aurel32 已提交
313 314 315

    /* Parallel port */
    if (parallel_hds[0])
A
Avi Kivity 已提交
316 317
        parallel_mm_init(address_space, 0x80008000, 0, rc4030[0],
                         parallel_hds[0]);
A
aurel32 已提交
318 319 320

    /* FIXME: missing Jazz sound at 0x8000c000, rc4030[2] */

321 322 323
    /* NVRAM */
    dev = qdev_create(NULL, "ds1225y");
    qdev_init_nofail(dev);
324
    sysbus = SYS_BUS_DEVICE(dev);
325
    sysbus_mmio_map(sysbus, 0, 0x80009000);
A
aurel32 已提交
326 327

    /* LED indicator */
H
Hervé Poussineau 已提交
328
    sysbus_create_simple("jazz-led", 0x8000f000, NULL);
A
aurel32 已提交
329 330 331
}

static
332
void mips_magnum_init(QEMUMachineInitArgs *args)
A
aurel32 已提交
333
{
334 335
    ram_addr_t ram_size = args->ram_size;
    const char *cpu_model = args->cpu_model;
336 337
        mips_jazz_init(get_system_memory(), get_system_io(),
                       ram_size, cpu_model, JAZZ_MAGNUM);
A
aurel32 已提交
338 339
}

A
aurel32 已提交
340
static
341
void mips_pica61_init(QEMUMachineInitArgs *args)
A
aurel32 已提交
342
{
343 344
    ram_addr_t ram_size = args->ram_size;
    const char *cpu_model = args->cpu_model;
345 346
    mips_jazz_init(get_system_memory(), get_system_io(),
                   ram_size, cpu_model, JAZZ_PICA61);
A
aurel32 已提交
347 348
}

349
static QEMUMachine mips_magnum_machine = {
350 351 352
    .name = "magnum",
    .desc = "MIPS Magnum",
    .init = mips_magnum_init,
353
    .block_default_type = IF_SCSI,
A
aurel32 已提交
354
};
A
aurel32 已提交
355

356
static QEMUMachine mips_pica61_machine = {
357 358 359
    .name = "pica61",
    .desc = "Acer Pica 61",
    .init = mips_pica61_init,
360
    .block_default_type = IF_SCSI,
A
aurel32 已提交
361
};
362 363 364 365 366 367 368 369

static void mips_jazz_machine_init(void)
{
    qemu_register_machine(&mips_magnum_machine);
    qemu_register_machine(&mips_pica61_machine);
}

machine_init(mips_jazz_machine_init);