sun4m.c 45.8 KB
Newer Older
1
/*
B
blueswir1 已提交
2
 * QEMU Sun4m & Sun4d & Sun4c System Emulator
3
 *
B
bellard 已提交
4
 * Copyright (c) 2003-2005 Fabrice Bellard
5
 *
6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */
P
Peter Maydell 已提交
24
#include "qemu/osdep.h"
25
#include "hw/sysbus.h"
26
#include "qemu/error-report.h"
27
#include "qemu/timer.h"
P
Paolo Bonzini 已提交
28 29 30 31
#include "hw/sparc/sun4m.h"
#include "hw/timer/m48t59.h"
#include "hw/sparc/sparc32_dma.h"
#include "hw/block/fdc.h"
32
#include "sysemu/sysemu.h"
P
Paolo Bonzini 已提交
33
#include "net/net.h"
34
#include "hw/boards.h"
35
#include "hw/nvram/openbios_firmware_abi.h"
P
Paolo Bonzini 已提交
36 37 38 39 40
#include "hw/scsi/esp.h"
#include "hw/i386/pc.h"
#include "hw/isa/isa.h"
#include "hw/nvram/fw_cfg.h"
#include "hw/char/escc.h"
41 42
#include "hw/empty_slot.h"
#include "hw/loader.h"
B
Blue Swirl 已提交
43
#include "elf.h"
44
#include "sysemu/block-backend.h"
45
#include "trace.h"
46

47 48 49 50
/*
 * Sun4m architecture was used in the following machines:
 *
 * SPARCserver 6xxMP/xx
B
blueswir1 已提交
51 52
 * SPARCclassic (SPARCclassic Server)(SPARCstation LC) (4/15),
 * SPARCclassic X (4/10)
53 54 55 56 57 58 59 60 61 62
 * SPARCstation LX/ZX (4/30)
 * SPARCstation Voyager
 * SPARCstation 10/xx, SPARCserver 10/xx
 * SPARCstation 5, SPARCserver 5
 * SPARCstation 20/xx, SPARCserver 20
 * SPARCstation 4
 *
 * See for example: http://www.sunhelp.org/faq/sunref1.html
 */

63
#define KERNEL_LOAD_ADDR     0x00004000
B
bellard 已提交
64
#define CMDLINE_ADDR         0x007ff000
B
bellard 已提交
65
#define INITRD_LOAD_ADDR     0x00800000
66
#define PROM_SIZE_MAX        (1024 * 1024)
B
blueswir1 已提交
67
#define PROM_VADDR           0xffd00000
B
blueswir1 已提交
68
#define PROM_FILENAME        "openbios-sparc32"
69
#define CFG_ADDR             0xd00000510ULL
70
#define FW_CFG_SUN4M_DEPTH   (FW_CFG_ARCH_LOCAL + 0x00)
71 72
#define FW_CFG_SUN4M_WIDTH   (FW_CFG_ARCH_LOCAL + 0x01)
#define FW_CFG_SUN4M_HEIGHT  (FW_CFG_ARCH_LOCAL + 0x02)
73

B
bellard 已提交
74
#define MAX_CPUS 16
75
#define MAX_PILS 16
76
#define MAX_VSIMMS 4
77

78 79
#define ESCC_CLOCK 4915200

80
struct sun4m_hwdef {
A
Avi Kivity 已提交
81 82 83 84 85 86
    hwaddr iommu_base, iommu_pad_base, iommu_pad_len, slavio_base;
    hwaddr intctl_base, counter_base, nvram_base, ms_kb_base;
    hwaddr serial_base, fd_base;
    hwaddr afx_base, idreg_base, dma_base, esp_base, le_base;
    hwaddr tcx_base, cs_base, apc_base, aux1_base, aux2_base;
    hwaddr bpp_base, dbri_base, sx_base;
87
    struct {
A
Avi Kivity 已提交
88
        hwaddr reg_base, vram_base;
89
    } vsimm[MAX_VSIMMS];
A
Avi Kivity 已提交
90
    hwaddr ecc_base;
91 92
    uint64_t max_mem;
    const char * const default_cpu_model;
93 94 95 96
    uint32_t ecc_version;
    uint32_t iommu_version;
    uint16_t machine_id;
    uint8_t nvram_machine_id;
97 98
};

99
void DMA_init(ISABus *bus, int high_page_enable)
B
Blue Swirl 已提交
100 101 102
{
}

103 104
static void fw_cfg_boot_set(void *opaque, const char *boot_device,
                            Error **errp)
B
blueswir1 已提交
105
{
106
    fw_cfg_modify_i16(opaque, FW_CFG_BOOT_DEVICE, boot_device[0]);
B
blueswir1 已提交
107 108
}

109
static void nvram_init(Nvram *nvram, uint8_t *macaddr,
110 111
                       const char *cmdline, const char *boot_devices,
                       ram_addr_t RAM_size, uint32_t kernel_size,
B
blueswir1 已提交
112
                       int width, int height, int depth,
113
                       int nvram_machine_id, const char *arch)
B
bellard 已提交
114
{
B
blueswir1 已提交
115
    unsigned int i;
B
blueswir1 已提交
116
    uint32_t start, end;
B
blueswir1 已提交
117 118
    uint8_t image[0x1ff0];
    struct OpenBIOS_nvpart_v1 *part_header;
119
    NvramClass *k = NVRAM_GET_CLASS(nvram);
B
blueswir1 已提交
120 121

    memset(image, '\0', sizeof(image));
B
bellard 已提交
122

123
    start = 0;
B
bellard 已提交
124

B
blueswir1 已提交
125 126
    // OpenBIOS nvram variables
    // Variable partition
B
blueswir1 已提交
127 128
    part_header = (struct OpenBIOS_nvpart_v1 *)&image[start];
    part_header->signature = OPENBIOS_PART_SYSTEM;
B
blueswir1 已提交
129
    pstrcpy(part_header->name, sizeof(part_header->name), "system");
B
blueswir1 已提交
130

B
blueswir1 已提交
131
    end = start + sizeof(struct OpenBIOS_nvpart_v1);
B
blueswir1 已提交
132
    for (i = 0; i < nb_prom_envs; i++)
B
blueswir1 已提交
133 134 135 136
        end = OpenBIOS_set_var(image, end, prom_envs[i]);

    // End marker
    image[end++] = '\0';
B
blueswir1 已提交
137 138

    end = start + ((end - start + 15) & ~15);
B
blueswir1 已提交
139
    OpenBIOS_finish_partition(part_header, end - start);
B
blueswir1 已提交
140 141 142

    // free partition
    start = end;
B
blueswir1 已提交
143 144
    part_header = (struct OpenBIOS_nvpart_v1 *)&image[start];
    part_header->signature = OPENBIOS_PART_FREE;
B
blueswir1 已提交
145
    pstrcpy(part_header->name, sizeof(part_header->name), "free");
B
blueswir1 已提交
146 147

    end = 0x1fd0;
B
blueswir1 已提交
148 149
    OpenBIOS_finish_partition(part_header, end - start);

150 151
    Sun_init_header((struct Sun_nvram *)&image[0x1fd8], macaddr,
                    nvram_machine_id);
B
blueswir1 已提交
152

153 154 155
    for (i = 0; i < sizeof(image); i++) {
        (k->write)(nvram, i, image[i]);
    }
B
bellard 已提交
156 157
}

158
static DeviceState *slavio_intctl;
B
bellard 已提交
159

160
void sun4m_hmp_info_pic(Monitor *mon, const QDict *qdict)
B
bellard 已提交
161
{
162
    if (slavio_intctl)
A
aliguori 已提交
163
        slavio_pic_info(mon, slavio_intctl);
B
bellard 已提交
164 165
}

166
void sun4m_hmp_info_irq(Monitor *mon, const QDict *qdict)
B
bellard 已提交
167
{
168
    if (slavio_intctl)
A
aliguori 已提交
169
        slavio_irq_info(mon, slavio_intctl);
B
bellard 已提交
170 171
}

A
Andreas Färber 已提交
172
void cpu_check_irqs(CPUSPARCState *env)
B
blueswir1 已提交
173
{
174 175
    CPUState *cs;

B
blueswir1 已提交
176 177 178 179 180 181 182 183 184
    if (env->pil_in && (env->interrupt_index == 0 ||
                        (env->interrupt_index & ~15) == TT_EXTINT)) {
        unsigned int i;

        for (i = 15; i > 0; i--) {
            if (env->pil_in & (1 << i)) {
                int old_interrupt = env->interrupt_index;

                env->interrupt_index = TT_EXTINT | i;
185
                if (old_interrupt != env->interrupt_index) {
186
                    cs = CPU(sparc_env_get_cpu(env));
187
                    trace_sun4m_cpu_interrupt(i);
188
                    cpu_interrupt(cs, CPU_INTERRUPT_HARD);
189
                }
B
blueswir1 已提交
190 191 192 193
                break;
            }
        }
    } else if (!env->pil_in && (env->interrupt_index & ~15) == TT_EXTINT) {
194
        cs = CPU(sparc_env_get_cpu(env));
195
        trace_sun4m_cpu_reset_interrupt(env->interrupt_index & 15);
B
blueswir1 已提交
196
        env->interrupt_index = 0;
197
        cpu_reset_interrupt(cs, CPU_INTERRUPT_HARD);
B
blueswir1 已提交
198 199 200
    }
}

201
static void cpu_kick_irq(SPARCCPU *cpu)
202
{
203
    CPUSPARCState *env = &cpu->env;
204
    CPUState *cs = CPU(cpu);
205

206
    cs->halted = 0;
207
    cpu_check_irqs(env);
208
    qemu_cpu_kick(cs);
209 210
}

211 212
static void cpu_set_irq(void *opaque, int irq, int level)
{
213 214
    SPARCCPU *cpu = opaque;
    CPUSPARCState *env = &cpu->env;
215 216

    if (level) {
217
        trace_sun4m_cpu_set_irq_raise(irq);
B
blueswir1 已提交
218
        env->pil_in |= 1 << irq;
219
        cpu_kick_irq(cpu);
220
    } else {
221
        trace_sun4m_cpu_set_irq_lower(irq);
B
blueswir1 已提交
222 223
        env->pil_in &= ~(1 << irq);
        cpu_check_irqs(env);
224 225 226 227 228 229 230
    }
}

static void dummy_cpu_set_irq(void *opaque, int irq, int level)
{
}

B
bellard 已提交
231 232
static void main_cpu_reset(void *opaque)
{
233
    SPARCCPU *cpu = opaque;
234
    CPUState *cs = CPU(cpu);
235

236 237
    cpu_reset(cs);
    cs->halted = 0;
238 239 240 241
}

static void secondary_cpu_reset(void *opaque)
{
242
    SPARCCPU *cpu = opaque;
243
    CPUState *cs = CPU(cpu);
244

245 246
    cpu_reset(cs);
    cs->halted = 1;
B
bellard 已提交
247 248
}

B
blueswir1 已提交
249 250
static void cpu_halt_signal(void *opaque, int irq, int level)
{
251 252
    if (level && current_cpu) {
        cpu_interrupt(current_cpu, CPU_INTERRUPT_HALT);
253
    }
B
blueswir1 已提交
254 255
}

256 257 258 259 260
static uint64_t translate_kernel_address(void *opaque, uint64_t addr)
{
    return addr - 0xf0000000ULL;
}

261
static unsigned long sun4m_load_kernel(const char *kernel_filename,
262
                                       const char *initrd_filename,
A
Anthony Liguori 已提交
263
                                       ram_addr_t RAM_size)
264 265 266 267
{
    int linux_boot;
    unsigned int i;
    long initrd_size, kernel_size;
268
    uint8_t *ptr;
269 270 271 272 273

    linux_boot = (kernel_filename != NULL);

    kernel_size = 0;
    if (linux_boot) {
B
Blue Swirl 已提交
274 275 276 277 278 279 280
        int bswap_needed;

#ifdef BSWAP_NEEDED
        bswap_needed = 1;
#else
        bswap_needed = 0;
#endif
281
        kernel_size = load_elf(kernel_filename, translate_kernel_address, NULL,
282
                               NULL, NULL, NULL, 1, EM_SPARC, 0);
283
        if (kernel_size < 0)
284
            kernel_size = load_aout(kernel_filename, KERNEL_LOAD_ADDR,
B
Blue Swirl 已提交
285 286
                                    RAM_size - KERNEL_LOAD_ADDR, bswap_needed,
                                    TARGET_PAGE_SIZE);
287
        if (kernel_size < 0)
288 289 290
            kernel_size = load_image_targphys(kernel_filename,
                                              KERNEL_LOAD_ADDR,
                                              RAM_size - KERNEL_LOAD_ADDR);
291 292 293 294 295 296 297 298 299
        if (kernel_size < 0) {
            fprintf(stderr, "qemu: could not load kernel '%s'\n",
                    kernel_filename);
            exit(1);
        }

        /* load initrd */
        initrd_size = 0;
        if (initrd_filename) {
300 301 302
            initrd_size = load_image_targphys(initrd_filename,
                                              INITRD_LOAD_ADDR,
                                              RAM_size - INITRD_LOAD_ADDR);
303 304 305 306 307 308 309 310
            if (initrd_size < 0) {
                fprintf(stderr, "qemu: could not load initial ram disk '%s'\n",
                        initrd_filename);
                exit(1);
            }
        }
        if (initrd_size > 0) {
            for (i = 0; i < 64 * TARGET_PAGE_SIZE; i += TARGET_PAGE_SIZE) {
311 312 313 314
                ptr = rom_ptr(KERNEL_LOAD_ADDR + i);
                if (ldl_p(ptr) == 0x48647253) { // HdrS
                    stl_p(ptr + 16, INITRD_LOAD_ADDR);
                    stl_p(ptr + 20, initrd_size);
315 316 317 318 319 320 321 322
                    break;
                }
            }
        }
    }
    return kernel_size;
}

A
Avi Kivity 已提交
323
static void *iommu_init(hwaddr addr, uint32_t version, qemu_irq irq)
324 325 326 327 328 329
{
    DeviceState *dev;
    SysBusDevice *s;

    dev = qdev_create(NULL, "iommu");
    qdev_prop_set_uint32(dev, "version", version);
M
Markus Armbruster 已提交
330
    qdev_init_nofail(dev);
331
    s = SYS_BUS_DEVICE(dev);
332 333 334 335 336 337
    sysbus_connect_irq(s, 0, irq);
    sysbus_mmio_map(s, 0, addr);

    return s;
}

A
Avi Kivity 已提交
338
static void *sparc32_dma_init(hwaddr daddr, qemu_irq parent_irq,
B
Bob Breuer 已提交
339
                              void *iommu, qemu_irq *dev_irq, int is_ledma)
340 341 342 343 344 345
{
    DeviceState *dev;
    SysBusDevice *s;

    dev = qdev_create(NULL, "sparc32_dma");
    qdev_prop_set_ptr(dev, "iommu_opaque", iommu);
B
Bob Breuer 已提交
346
    qdev_prop_set_uint32(dev, "is_ledma", is_ledma);
M
Markus Armbruster 已提交
347
    qdev_init_nofail(dev);
348
    s = SYS_BUS_DEVICE(dev);
349 350 351 352 353 354 355
    sysbus_connect_irq(s, 0, parent_irq);
    *dev_irq = qdev_get_gpio_in(dev, 0);
    sysbus_mmio_map(s, 0, daddr);

    return s;
}

A
Avi Kivity 已提交
356
static void lance_init(NICInfo *nd, hwaddr leaddr,
357
                       void *dma_opaque, qemu_irq irq)
P
Paul Brook 已提交
358 359 360
{
    DeviceState *dev;
    SysBusDevice *s;
361
    qemu_irq reset;
P
Paul Brook 已提交
362 363 364 365

    qemu_check_nic_model(&nd_table[0], "lance");

    dev = qdev_create(NULL, "lance");
366
    qdev_set_nic_properties(dev, nd);
B
Blue Swirl 已提交
367
    qdev_prop_set_ptr(dev, "dma", dma_opaque);
M
Markus Armbruster 已提交
368
    qdev_init_nofail(dev);
369
    s = SYS_BUS_DEVICE(dev);
P
Paul Brook 已提交
370 371
    sysbus_mmio_map(s, 0, leaddr);
    sysbus_connect_irq(s, 0, irq);
372 373
    reset = qdev_get_gpio_in(dev, 0);
    qdev_connect_gpio_out(dma_opaque, 0, reset);
P
Paul Brook 已提交
374 375
}

A
Avi Kivity 已提交
376 377
static DeviceState *slavio_intctl_init(hwaddr addr,
                                       hwaddr addrg,
B
Blue Swirl 已提交
378
                                       qemu_irq **parent_irq)
379 380 381 382 383 384
{
    DeviceState *dev;
    SysBusDevice *s;
    unsigned int i, j;

    dev = qdev_create(NULL, "slavio_intctl");
M
Markus Armbruster 已提交
385
    qdev_init_nofail(dev);
386

387
    s = SYS_BUS_DEVICE(dev);
388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404

    for (i = 0; i < MAX_CPUS; i++) {
        for (j = 0; j < MAX_PILS; j++) {
            sysbus_connect_irq(s, i * MAX_PILS + j, parent_irq[i][j]);
        }
    }
    sysbus_mmio_map(s, 0, addrg);
    for (i = 0; i < MAX_CPUS; i++) {
        sysbus_mmio_map(s, i + 1, addr + i * TARGET_PAGE_SIZE);
    }

    return dev;
}

#define SYS_TIMER_OFFSET      0x10000ULL
#define CPU_TIMER_OFFSET(cpu) (0x1000ULL * cpu)

A
Avi Kivity 已提交
405
static void slavio_timer_init_all(hwaddr addr, qemu_irq master_irq,
406 407 408 409 410 411 412 413
                                  qemu_irq *cpu_irqs, unsigned int num_cpus)
{
    DeviceState *dev;
    SysBusDevice *s;
    unsigned int i;

    dev = qdev_create(NULL, "slavio_timer");
    qdev_prop_set_uint32(dev, "num_cpus", num_cpus);
M
Markus Armbruster 已提交
414
    qdev_init_nofail(dev);
415
    s = SYS_BUS_DEVICE(dev);
416 417 418 419
    sysbus_connect_irq(s, 0, master_irq);
    sysbus_mmio_map(s, 0, addr + SYS_TIMER_OFFSET);

    for (i = 0; i < MAX_CPUS; i++) {
A
Avi Kivity 已提交
420
        sysbus_mmio_map(s, i + 1, addr + (hwaddr)CPU_TIMER_OFFSET(i));
421 422 423 424
        sysbus_connect_irq(s, i + 1, cpu_irqs[i]);
    }
}

425 426 427 428 429 430 431 432 433 434 435
static qemu_irq  slavio_system_powerdown;

static void slavio_powerdown_req(Notifier *n, void *opaque)
{
    qemu_irq_raise(slavio_system_powerdown);
}

static Notifier slavio_system_powerdown_notifier = {
    .notify = slavio_powerdown_req
};

436 437 438 439 440 441
#define MISC_LEDS 0x01600000
#define MISC_CFG  0x01800000
#define MISC_DIAG 0x01a00000
#define MISC_MDM  0x01b00000
#define MISC_SYS  0x01f00000

A
Avi Kivity 已提交
442 443 444
static void slavio_misc_init(hwaddr base,
                             hwaddr aux1_base,
                             hwaddr aux2_base, qemu_irq irq,
445
                             qemu_irq fdc_tc)
446 447 448 449 450
{
    DeviceState *dev;
    SysBusDevice *s;

    dev = qdev_create(NULL, "slavio_misc");
M
Markus Armbruster 已提交
451
    qdev_init_nofail(dev);
452
    s = SYS_BUS_DEVICE(dev);
453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477
    if (base) {
        /* 8 bit registers */
        /* Slavio control */
        sysbus_mmio_map(s, 0, base + MISC_CFG);
        /* Diagnostics */
        sysbus_mmio_map(s, 1, base + MISC_DIAG);
        /* Modem control */
        sysbus_mmio_map(s, 2, base + MISC_MDM);
        /* 16 bit registers */
        /* ss600mp diag LEDs */
        sysbus_mmio_map(s, 3, base + MISC_LEDS);
        /* 32 bit registers */
        /* System control */
        sysbus_mmio_map(s, 4, base + MISC_SYS);
    }
    if (aux1_base) {
        /* AUX 1 (Misc System Functions) */
        sysbus_mmio_map(s, 5, aux1_base);
    }
    if (aux2_base) {
        /* AUX 2 (Software Powerdown Control) */
        sysbus_mmio_map(s, 6, aux2_base);
    }
    sysbus_connect_irq(s, 0, irq);
    sysbus_connect_irq(s, 1, fdc_tc);
478 479
    slavio_system_powerdown = qdev_get_gpio_in(dev, 0);
    qemu_register_powerdown_notifier(&slavio_system_powerdown_notifier);
480 481
}

A
Avi Kivity 已提交
482
static void ecc_init(hwaddr base, qemu_irq irq, uint32_t version)
483 484 485 486 487 488
{
    DeviceState *dev;
    SysBusDevice *s;

    dev = qdev_create(NULL, "eccmemctl");
    qdev_prop_set_uint32(dev, "version", version);
M
Markus Armbruster 已提交
489
    qdev_init_nofail(dev);
490
    s = SYS_BUS_DEVICE(dev);
491 492 493 494 495 496 497
    sysbus_connect_irq(s, 0, irq);
    sysbus_mmio_map(s, 0, base);
    if (version == 0) { // SS-600MP only
        sysbus_mmio_map(s, 1, base + 0x1000);
    }
}

A
Avi Kivity 已提交
498
static void apc_init(hwaddr power_base, qemu_irq cpu_halt)
499 500 501 502 503
{
    DeviceState *dev;
    SysBusDevice *s;

    dev = qdev_create(NULL, "apc");
M
Markus Armbruster 已提交
504
    qdev_init_nofail(dev);
505
    s = SYS_BUS_DEVICE(dev);
506 507 508 509 510
    /* Power management (APC) XXX: not a Slavio device */
    sysbus_mmio_map(s, 0, power_base);
    sysbus_connect_irq(s, 0, cpu_halt);
}

511
static void tcx_init(hwaddr addr, qemu_irq irq, int vram_size, int width,
512 513 514 515 516 517 518 519 520 521
                     int height, int depth)
{
    DeviceState *dev;
    SysBusDevice *s;

    dev = qdev_create(NULL, "SUNW,tcx");
    qdev_prop_set_uint32(dev, "vram_size", vram_size);
    qdev_prop_set_uint16(dev, "width", width);
    qdev_prop_set_uint16(dev, "height", height);
    qdev_prop_set_uint16(dev, "depth", depth);
522
    qdev_prop_set_uint64(dev, "prom_addr", addr);
M
Markus Armbruster 已提交
523
    qdev_init_nofail(dev);
524
    s = SYS_BUS_DEVICE(dev);
525 526

    /* 10/ROM : FCode ROM */
527
    sysbus_mmio_map(s, 0, addr);
528 529 530 531 532 533 534 535 536 537 538 539 540 541 542
    /* 2/STIP : Stipple */
    sysbus_mmio_map(s, 1, addr + 0x04000000ULL);
    /* 3/BLIT : Blitter */
    sysbus_mmio_map(s, 2, addr + 0x06000000ULL);
    /* 5/RSTIP : Raw Stipple */
    sysbus_mmio_map(s, 3, addr + 0x0c000000ULL);
    /* 6/RBLIT : Raw Blitter */
    sysbus_mmio_map(s, 4, addr + 0x0e000000ULL);
    /* 7/TEC : Transform Engine */
    sysbus_mmio_map(s, 5, addr + 0x00700000ULL);
    /* 8/CMAP  : DAC */
    sysbus_mmio_map(s, 6, addr + 0x00200000ULL);
    /* 9/THC : */
    if (depth == 8) {
        sysbus_mmio_map(s, 7, addr + 0x00300000ULL);
543
    } else {
544
        sysbus_mmio_map(s, 7, addr + 0x00301000ULL);
545
    }
546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561
    /* 11/DHC : */
    sysbus_mmio_map(s, 8, addr + 0x00240000ULL);
    /* 12/ALT : */
    sysbus_mmio_map(s, 9, addr + 0x00280000ULL);
    /* 0/DFB8 : 8-bit plane */
    sysbus_mmio_map(s, 10, addr + 0x00800000ULL);
    /* 1/DFB24 : 24bit plane */
    sysbus_mmio_map(s, 11, addr + 0x02000000ULL);
    /* 4/RDFB32: Raw framebuffer. Control plane */
    sysbus_mmio_map(s, 12, addr + 0x0a000000ULL);
    /* 9/THC24bits : NetBSD writes here even with 8-bit display: dummy */
    if (depth == 8) {
        sysbus_mmio_map(s, 13, addr + 0x00301000ULL);
    }

    sysbus_connect_irq(s, 0, irq);
562 563
}

564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588
static void cg3_init(hwaddr addr, qemu_irq irq, int vram_size, int width,
                     int height, int depth)
{
    DeviceState *dev;
    SysBusDevice *s;

    dev = qdev_create(NULL, "cgthree");
    qdev_prop_set_uint32(dev, "vram-size", vram_size);
    qdev_prop_set_uint16(dev, "width", width);
    qdev_prop_set_uint16(dev, "height", height);
    qdev_prop_set_uint16(dev, "depth", depth);
    qdev_prop_set_uint64(dev, "prom-addr", addr);
    qdev_init_nofail(dev);
    s = SYS_BUS_DEVICE(dev);

    /* FCode ROM */
    sysbus_mmio_map(s, 0, addr);
    /* DAC */
    sysbus_mmio_map(s, 1, addr + 0x400000ULL);
    /* 8-bit plane */
    sysbus_mmio_map(s, 2, addr + 0x800000ULL);

    sysbus_connect_irq(s, 0, irq);
}

B
Blue Swirl 已提交
589
/* NCR89C100/MACIO Internal ID register */
590 591 592

#define TYPE_MACIO_ID_REGISTER "macio_idreg"

B
Blue Swirl 已提交
593 594
static const uint8_t idreg_data[] = { 0xfe, 0x81, 0x01, 0x03 };

A
Avi Kivity 已提交
595
static void idreg_init(hwaddr addr)
B
Blue Swirl 已提交
596 597 598 599
{
    DeviceState *dev;
    SysBusDevice *s;

600
    dev = qdev_create(NULL, TYPE_MACIO_ID_REGISTER);
M
Markus Armbruster 已提交
601
    qdev_init_nofail(dev);
602
    s = SYS_BUS_DEVICE(dev);
B
Blue Swirl 已提交
603 604

    sysbus_mmio_map(s, 0, addr);
605 606
    cpu_physical_memory_write_rom(&address_space_memory,
                                  addr, idreg_data, sizeof(idreg_data));
B
Blue Swirl 已提交
607 608
}

609 610 611
#define MACIO_ID_REGISTER(obj) \
    OBJECT_CHECK(IDRegState, (obj), TYPE_MACIO_ID_REGISTER)

A
Avi Kivity 已提交
612
typedef struct IDRegState {
613 614
    SysBusDevice parent_obj;

A
Avi Kivity 已提交
615 616 617
    MemoryRegion mem;
} IDRegState;

618
static int idreg_init1(SysBusDevice *dev)
B
Blue Swirl 已提交
619
{
620
    IDRegState *s = MACIO_ID_REGISTER(dev);
B
Blue Swirl 已提交
621

622
    memory_region_init_ram(&s->mem, OBJECT(s),
623
                           "sun4m.idreg", sizeof(idreg_data), &error_fatal);
624
    vmstate_register_ram_global(&s->mem);
A
Avi Kivity 已提交
625
    memory_region_set_readonly(&s->mem, true);
626
    sysbus_init_mmio(dev, &s->mem);
627
    return 0;
B
Blue Swirl 已提交
628 629
}

630 631 632 633 634 635 636
static void idreg_class_init(ObjectClass *klass, void *data)
{
    SysBusDeviceClass *k = SYS_BUS_DEVICE_CLASS(klass);

    k->init = idreg_init1;
}

637
static const TypeInfo idreg_info = {
638
    .name          = TYPE_MACIO_ID_REGISTER,
639 640 641
    .parent        = TYPE_SYS_BUS_DEVICE,
    .instance_size = sizeof(IDRegState),
    .class_init    = idreg_class_init,
B
Blue Swirl 已提交
642 643
};

644 645 646
#define TYPE_TCX_AFX "tcx_afx"
#define TCX_AFX(obj) OBJECT_CHECK(AFXState, (obj), TYPE_TCX_AFX)

A
Avi Kivity 已提交
647
typedef struct AFXState {
648 649
    SysBusDevice parent_obj;

A
Avi Kivity 已提交
650 651 652
    MemoryRegion mem;
} AFXState;

A
Artyom Tarasenko 已提交
653
/* SS-5 TCX AFX register */
A
Avi Kivity 已提交
654
static void afx_init(hwaddr addr)
A
Artyom Tarasenko 已提交
655 656 657 658
{
    DeviceState *dev;
    SysBusDevice *s;

659
    dev = qdev_create(NULL, TYPE_TCX_AFX);
A
Artyom Tarasenko 已提交
660
    qdev_init_nofail(dev);
661
    s = SYS_BUS_DEVICE(dev);
A
Artyom Tarasenko 已提交
662 663 664 665 666 667

    sysbus_mmio_map(s, 0, addr);
}

static int afx_init1(SysBusDevice *dev)
{
668
    AFXState *s = TCX_AFX(dev);
A
Artyom Tarasenko 已提交
669

670
    memory_region_init_ram(&s->mem, OBJECT(s), "sun4m.afx", 4, &error_fatal);
671
    vmstate_register_ram_global(&s->mem);
672
    sysbus_init_mmio(dev, &s->mem);
A
Artyom Tarasenko 已提交
673 674 675
    return 0;
}

676 677 678 679 680 681 682
static void afx_class_init(ObjectClass *klass, void *data)
{
    SysBusDeviceClass *k = SYS_BUS_DEVICE_CLASS(klass);

    k->init = afx_init1;
}

683
static const TypeInfo afx_info = {
684
    .name          = TYPE_TCX_AFX,
685 686 687
    .parent        = TYPE_SYS_BUS_DEVICE,
    .instance_size = sizeof(AFXState),
    .class_init    = afx_class_init,
A
Artyom Tarasenko 已提交
688 689
};

690 691 692
#define TYPE_OPENPROM "openprom"
#define OPENPROM(obj) OBJECT_CHECK(PROMState, (obj), TYPE_OPENPROM)

A
Avi Kivity 已提交
693
typedef struct PROMState {
694 695
    SysBusDevice parent_obj;

A
Avi Kivity 已提交
696 697 698
    MemoryRegion prom;
} PROMState;

B
Blue Swirl 已提交
699
/* Boot PROM (OpenBIOS) */
700 701
static uint64_t translate_prom_address(void *opaque, uint64_t addr)
{
A
Avi Kivity 已提交
702
    hwaddr *base_addr = (hwaddr *)opaque;
703 704 705
    return addr + *base_addr - PROM_VADDR;
}

A
Avi Kivity 已提交
706
static void prom_init(hwaddr addr, const char *bios_name)
B
Blue Swirl 已提交
707 708 709 710 711 712
{
    DeviceState *dev;
    SysBusDevice *s;
    char *filename;
    int ret;

713
    dev = qdev_create(NULL, TYPE_OPENPROM);
M
Markus Armbruster 已提交
714
    qdev_init_nofail(dev);
715
    s = SYS_BUS_DEVICE(dev);
B
Blue Swirl 已提交
716 717 718 719 720 721 722 723 724

    sysbus_mmio_map(s, 0, addr);

    /* load boot prom */
    if (bios_name == NULL) {
        bios_name = PROM_FILENAME;
    }
    filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, bios_name);
    if (filename) {
725
        ret = load_elf(filename, translate_prom_address, &addr, NULL,
726
                       NULL, NULL, 1, EM_SPARC, 0);
B
Blue Swirl 已提交
727 728 729
        if (ret < 0 || ret > PROM_SIZE_MAX) {
            ret = load_image_targphys(filename, addr, PROM_SIZE_MAX);
        }
730
        g_free(filename);
B
Blue Swirl 已提交
731 732 733 734 735 736 737 738 739
    } else {
        ret = -1;
    }
    if (ret < 0 || ret > PROM_SIZE_MAX) {
        fprintf(stderr, "qemu: could not load prom '%s'\n", bios_name);
        exit(1);
    }
}

740
static int prom_init1(SysBusDevice *dev)
B
Blue Swirl 已提交
741
{
742
    PROMState *s = OPENPROM(dev);
B
Blue Swirl 已提交
743

744
    memory_region_init_ram(&s->prom, OBJECT(s), "sun4m.prom", PROM_SIZE_MAX,
745
                           &error_fatal);
746
    vmstate_register_ram_global(&s->prom);
A
Avi Kivity 已提交
747
    memory_region_set_readonly(&s->prom, true);
748
    sysbus_init_mmio(dev, &s->prom);
749
    return 0;
B
Blue Swirl 已提交
750 751
}

752 753 754 755 756 757
static Property prom_properties[] = {
    {/* end of property list */},
};

static void prom_class_init(ObjectClass *klass, void *data)
{
758
    DeviceClass *dc = DEVICE_CLASS(klass);
759 760 761
    SysBusDeviceClass *k = SYS_BUS_DEVICE_CLASS(klass);

    k->init = prom_init1;
762
    dc->props = prom_properties;
763 764
}

765
static const TypeInfo prom_info = {
766
    .name          = TYPE_OPENPROM,
767 768 769
    .parent        = TYPE_SYS_BUS_DEVICE,
    .instance_size = sizeof(PROMState),
    .class_init    = prom_class_init,
B
Blue Swirl 已提交
770 771
};

772 773 774 775 776 777
#define TYPE_SUN4M_MEMORY "memory"
#define SUN4M_RAM(obj) OBJECT_CHECK(RamDevice, (obj), TYPE_SUN4M_MEMORY)

typedef struct RamDevice {
    SysBusDevice parent_obj;

A
Avi Kivity 已提交
778
    MemoryRegion ram;
779
    uint64_t size;
G
Gerd Hoffmann 已提交
780 781
} RamDevice;

B
Blue Swirl 已提交
782
/* System RAM */
783
static int ram_init1(SysBusDevice *dev)
B
Blue Swirl 已提交
784
{
785
    RamDevice *d = SUN4M_RAM(dev);
B
Blue Swirl 已提交
786

787 788
    memory_region_allocate_system_memory(&d->ram, OBJECT(d), "sun4m.ram",
                                         d->size);
789
    sysbus_init_mmio(dev, &d->ram);
790
    return 0;
B
Blue Swirl 已提交
791 792
}

A
Avi Kivity 已提交
793
static void ram_init(hwaddr addr, ram_addr_t RAM_size,
B
Blue Swirl 已提交
794 795 796 797
                     uint64_t max_mem)
{
    DeviceState *dev;
    SysBusDevice *s;
G
Gerd Hoffmann 已提交
798
    RamDevice *d;
B
Blue Swirl 已提交
799 800 801 802 803 804 805 806 807 808

    /* allocate RAM */
    if ((uint64_t)RAM_size > max_mem) {
        fprintf(stderr,
                "qemu: Too much memory for this machine: %d, maximum %d\n",
                (unsigned int)(RAM_size / (1024 * 1024)),
                (unsigned int)(max_mem / (1024 * 1024)));
        exit(1);
    }
    dev = qdev_create(NULL, "memory");
809
    s = SYS_BUS_DEVICE(dev);
B
Blue Swirl 已提交
810

811
    d = SUN4M_RAM(dev);
G
Gerd Hoffmann 已提交
812
    d->size = RAM_size;
M
Markus Armbruster 已提交
813
    qdev_init_nofail(dev);
G
Gerd Hoffmann 已提交
814

B
Blue Swirl 已提交
815 816 817
    sysbus_mmio_map(s, 0, addr);
}

818 819 820 821 822 823 824
static Property ram_properties[] = {
    DEFINE_PROP_UINT64("size", RamDevice, size, 0),
    DEFINE_PROP_END_OF_LIST(),
};

static void ram_class_init(ObjectClass *klass, void *data)
{
825
    DeviceClass *dc = DEVICE_CLASS(klass);
826 827 828
    SysBusDeviceClass *k = SYS_BUS_DEVICE_CLASS(klass);

    k->init = ram_init1;
829
    dc->props = ram_properties;
830 831
}

832
static const TypeInfo ram_info = {
833
    .name          = TYPE_SUN4M_MEMORY,
834 835 836
    .parent        = TYPE_SYS_BUS_DEVICE,
    .instance_size = sizeof(RamDevice),
    .class_init    = ram_class_init,
B
Blue Swirl 已提交
837 838
};

839 840
static void cpu_devinit(const char *cpu_model, unsigned int id,
                        uint64_t prom_addr, qemu_irq **cpu_irqs)
B
Blue Swirl 已提交
841
{
842
    CPUState *cs;
843
    SPARCCPU *cpu;
A
Andreas Färber 已提交
844
    CPUSPARCState *env;
B
Blue Swirl 已提交
845

846 847
    cpu = cpu_sparc_init(cpu_model);
    if (cpu == NULL) {
B
Blue Swirl 已提交
848 849 850
        fprintf(stderr, "qemu: Unable to find Sparc CPU definition\n");
        exit(1);
    }
851
    env = &cpu->env;
B
Blue Swirl 已提交
852 853 854

    cpu_sparc_set_id(env, id);
    if (id == 0) {
855
        qemu_register_reset(main_cpu_reset, cpu);
B
Blue Swirl 已提交
856
    } else {
857
        qemu_register_reset(secondary_cpu_reset, cpu);
858 859
        cs = CPU(cpu);
        cs->halted = 1;
B
Blue Swirl 已提交
860
    }
861
    *cpu_irqs = qemu_allocate_irqs(cpu_set_irq, cpu, MAX_PILS);
B
Blue Swirl 已提交
862 863 864
    env->prom_addr = prom_addr;
}

B
Blue Swirl 已提交
865 866 867 868
static void dummy_fdc_tc(void *opaque, int irq, int level)
{
}

869
static void sun4m_hw_init(const struct sun4m_hwdef *hwdef,
870
                          MachineState *machine)
871
{
872
    const char *cpu_model = machine->cpu_model;
B
bellard 已提交
873
    unsigned int i;
P
Paul Brook 已提交
874
    void *iommu, *espdma, *ledma, *nvram;
875
    qemu_irq *cpu_irqs[MAX_CPUS], slavio_irq[32], slavio_cpu_irq[MAX_CPUS],
876
        espdma_irq, ledma_irq;
877
    qemu_irq esp_reset, dma_enable;
878
    qemu_irq fdc_tc;
B
blueswir1 已提交
879
    unsigned long kernel_size;
G
Gerd Hoffmann 已提交
880
    DriveInfo *fd[MAX_FD];
L
Laszlo Ersek 已提交
881
    FWCfgState *fw_cfg;
882
    unsigned int num_vsimms;
883

B
bellard 已提交
884
    /* init CPUs */
885 886
    if (!cpu_model)
        cpu_model = hwdef->default_cpu_model;
887

B
bellard 已提交
888
    for(i = 0; i < smp_cpus; i++) {
889
        cpu_devinit(cpu_model, i, hwdef->slavio_base, &cpu_irqs[i]);
B
bellard 已提交
890
    }
891 892 893 894

    for (i = smp_cpus; i < MAX_CPUS; i++)
        cpu_irqs[i] = qemu_allocate_irqs(dummy_cpu_set_irq, NULL, MAX_PILS);

895 896

    /* set up devices */
897
    ram_init(0, machine->ram_size, hwdef->max_mem);
898 899
    /* models without ECC don't trap when missing ram is accessed */
    if (!hwdef->ecc_base) {
900
        empty_slot_init(machine->ram_size, hwdef->max_mem - machine->ram_size);
901
    }
B
Blue Swirl 已提交
902

B
Blue Swirl 已提交
903 904
    prom_init(hwdef->slavio_base, bios_name);

905 906
    slavio_intctl = slavio_intctl_init(hwdef->intctl_base,
                                       hwdef->intctl_base + 0x10000ULL,
B
Blue Swirl 已提交
907
                                       cpu_irqs);
908 909

    for (i = 0; i < 32; i++) {
910
        slavio_irq[i] = qdev_get_gpio_in(slavio_intctl, i);
911 912
    }
    for (i = 0; i < MAX_CPUS; i++) {
913
        slavio_cpu_irq[i] = qdev_get_gpio_in(slavio_intctl, 32 + i);
914
    }
915

916
    if (hwdef->idreg_base) {
B
Blue Swirl 已提交
917
        idreg_init(hwdef->idreg_base);
B
blueswir1 已提交
918 919
    }

A
Artyom Tarasenko 已提交
920 921 922 923
    if (hwdef->afx_base) {
        afx_init(hwdef->afx_base);
    }

924
    iommu = iommu_init(hwdef->iommu_base, hwdef->iommu_version,
925
                       slavio_irq[30]);
926

927 928 929 930 931 932 933 934
    if (hwdef->iommu_pad_base) {
        /* On the real hardware (SS-5, LX) the MMU is not padded, but aliased.
           Software shouldn't use aliased addresses, neither should it crash
           when does. Using empty_slot instead of aliasing can help with
           debugging such accesses */
        empty_slot_init(hwdef->iommu_pad_base,hwdef->iommu_pad_len);
    }

935
    espdma = sparc32_dma_init(hwdef->dma_base, slavio_irq[18],
B
Bob Breuer 已提交
936
                              iommu, &espdma_irq, 0);
937

B
blueswir1 已提交
938
    ledma = sparc32_dma_init(hwdef->dma_base + 16ULL,
B
Bob Breuer 已提交
939
                             slavio_irq[16], iommu, &ledma_irq, 1);
B
bellard 已提交
940

B
blueswir1 已提交
941
    if (graphic_depth != 8 && graphic_depth != 24) {
942
        error_report("Unsupported depth: %d", graphic_depth);
B
blueswir1 已提交
943 944
        exit (1);
    }
945 946
    num_vsimms = 0;
    if (num_vsimms == 0) {
947 948 949 950 951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975
        if (vga_interface_type == VGA_CG3) {
            if (graphic_depth != 8) {
                error_report("Unsupported depth: %d", graphic_depth);
                exit(1);
            }

            if (!(graphic_width == 1024 && graphic_height == 768) &&
                !(graphic_width == 1152 && graphic_height == 900)) {
                error_report("Unsupported resolution: %d x %d", graphic_width,
                             graphic_height);
                exit(1);
            }

            /* sbus irq 5 */
            cg3_init(hwdef->tcx_base, slavio_irq[11], 0x00100000,
                     graphic_width, graphic_height, graphic_depth);
        } else {
            /* If no display specified, default to TCX */
            if (graphic_depth != 8 && graphic_depth != 24) {
                error_report("Unsupported depth: %d", graphic_depth);
                exit(1);
            }

            if (!(graphic_width == 1024 && graphic_height == 768)) {
                error_report("Unsupported resolution: %d x %d",
                             graphic_width, graphic_height);
                exit(1);
            }

976 977
            tcx_init(hwdef->tcx_base, slavio_irq[11], 0x00100000,
                     graphic_width, graphic_height, graphic_depth);
978
        }
979 980 981 982 983 984 985 986 987 988 989 990
    }

    for (i = num_vsimms; i < MAX_VSIMMS; i++) {
        /* vsimm registers probed by OBP */
        if (hwdef->vsimm[i].reg_base) {
            empty_slot_init(hwdef->vsimm[i].reg_base, 0x2000);
        }
    }

    if (hwdef->sx_base) {
        empty_slot_init(hwdef->sx_base, 0x2000);
    }
991

992
    lance_init(&nd_table[0], hwdef->le_base, ledma, ledma_irq);
993

994
    nvram = m48t59_init(slavio_irq[0], hwdef->nvram_base, 0, 0x2000, 1968, 8);
B
blueswir1 已提交
995

996
    slavio_timer_init_all(hwdef->counter_base, slavio_irq[19], slavio_cpu_irq, smp_cpus);
B
blueswir1 已提交
997

998
    slavio_serial_ms_kbd_init(hwdef->ms_kb_base, slavio_irq[14],
999
                              display_type == DT_NOGRAPHIC, ESCC_CLOCK, 1);
S
Stefan Weil 已提交
1000 1001
    /* Slavio TTYA (base+4, Linux ttyS0) is the first QEMU serial device
       Slavio TTYB (base+0, Linux ttyS1) is the second QEMU serial device */
1002
    escc_init(hwdef->serial_base, slavio_irq[15], slavio_irq[15],
A
aurel32 已提交
1003
              serial_hds[0], serial_hds[1], ESCC_CLOCK, 1);
B
blueswir1 已提交
1004

1005
    if (hwdef->apc_base) {
1006
        apc_init(hwdef->apc_base, qemu_allocate_irq(cpu_halt_signal, NULL, 0));
1007
    }
B
blueswir1 已提交
1008

1009
    if (hwdef->fd_base) {
T
ths 已提交
1010
        /* there is zero or one floppy drive */
1011
        memset(fd, 0, sizeof(fd));
G
Gerd Hoffmann 已提交
1012
        fd[0] = drive_get(IF_FLOPPY, 0, 0);
1013
        sun4m_fdctrl_init(slavio_irq[22], hwdef->fd_base, fd,
1014
                          &fdc_tc);
B
Blue Swirl 已提交
1015
    } else {
1016
        fdc_tc = qemu_allocate_irq(dummy_fdc_tc, NULL, 0);
T
ths 已提交
1017 1018
    }

B
Blue Swirl 已提交
1019 1020 1021
    slavio_misc_init(hwdef->slavio_base, hwdef->aux1_base, hwdef->aux2_base,
                     slavio_irq[30], fdc_tc);

T
ths 已提交
1022 1023 1024 1025 1026
    if (drive_get_max_bus(IF_SCSI) > 0) {
        fprintf(stderr, "qemu: too many SCSI bus\n");
        exit(1);
    }

P
Paul Brook 已提交
1027 1028
    esp_init(hwdef->esp_base, 2,
             espdma_memory_read, espdma_memory_write,
1029
             espdma, espdma_irq, &esp_reset, &dma_enable);
1030

1031 1032
    qdev_connect_gpio_out(espdma, 0, esp_reset);
    qdev_connect_gpio_out(espdma, 1, dma_enable);
1033

B
Blue Swirl 已提交
1034 1035
    if (hwdef->cs_base) {
        sysbus_create_simple("SUNW,CS4231", hwdef->cs_base,
1036
                             slavio_irq[5]);
B
Blue Swirl 已提交
1037
    }
1038

1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051
    if (hwdef->dbri_base) {
        /* ISDN chip with attached CS4215 audio codec */
        /* prom space */
        empty_slot_init(hwdef->dbri_base+0x1000, 0x30);
        /* reg space */
        empty_slot_init(hwdef->dbri_base+0x10000, 0x100);
    }

    if (hwdef->bpp_base) {
        /* parallel port */
        empty_slot_init(hwdef->bpp_base, 0x20);
    }

1052 1053 1054
    kernel_size = sun4m_load_kernel(machine->kernel_filename,
                                    machine->initrd_filename,
                                    machine->ram_size);
1055

1056 1057 1058 1059
    nvram_init(nvram, (uint8_t *)&nd_table[0].macaddr, machine->kernel_cmdline,
               machine->boot_order, machine->ram_size, kernel_size,
               graphic_width, graphic_height, graphic_depth,
               hwdef->nvram_machine_id, "Sun4m");
1060

1061
    if (hwdef->ecc_base)
1062
        ecc_init(hwdef->ecc_base, slavio_irq[28],
1063
                 hwdef->ecc_version);
1064

1065
    fw_cfg = fw_cfg_init_mem(CFG_ADDR, CFG_ADDR + 2);
1066
    fw_cfg_add_i16(fw_cfg, FW_CFG_MAX_CPUS, (uint16_t)max_cpus);
1067 1068
    fw_cfg_add_i64(fw_cfg, FW_CFG_RAM_SIZE, (uint64_t)ram_size);
    fw_cfg_add_i16(fw_cfg, FW_CFG_MACHINE_ID, hwdef->machine_id);
1069
    fw_cfg_add_i16(fw_cfg, FW_CFG_SUN4M_DEPTH, graphic_depth);
1070 1071
    fw_cfg_add_i16(fw_cfg, FW_CFG_SUN4M_WIDTH, graphic_width);
    fw_cfg_add_i16(fw_cfg, FW_CFG_SUN4M_HEIGHT, graphic_height);
1072 1073
    fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_ADDR, KERNEL_LOAD_ADDR);
    fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_SIZE, kernel_size);
1074
    if (machine->kernel_cmdline) {
1075
        fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_CMDLINE, CMDLINE_ADDR);
1076
        pstrcpy_targphys("cmdline", CMDLINE_ADDR, TARGET_PAGE_SIZE,
1077 1078
                         machine->kernel_cmdline);
        fw_cfg_add_string(fw_cfg, FW_CFG_CMDLINE_DATA, machine->kernel_cmdline);
B
Blue Swirl 已提交
1079
        fw_cfg_add_i32(fw_cfg, FW_CFG_CMDLINE_SIZE,
1080
                       strlen(machine->kernel_cmdline) + 1);
1081 1082
    } else {
        fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_CMDLINE, 0);
B
Blue Swirl 已提交
1083
        fw_cfg_add_i32(fw_cfg, FW_CFG_CMDLINE_SIZE, 0);
1084 1085 1086
    }
    fw_cfg_add_i32(fw_cfg, FW_CFG_INITRD_ADDR, INITRD_LOAD_ADDR);
    fw_cfg_add_i32(fw_cfg, FW_CFG_INITRD_SIZE, 0); // not used
1087
    fw_cfg_add_i16(fw_cfg, FW_CFG_BOOT_DEVICE, machine->boot_order[0]);
1088
    qemu_register_boot_set(fw_cfg_boot_set, fw_cfg);
1089 1090
}

1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102
enum {
    ss5_id = 32,
    vger_id,
    lx_id,
    ss4_id,
    scls_id,
    sbook_id,
    ss10_id = 64,
    ss20_id,
    ss600mp_id,
};

1103
static const struct sun4m_hwdef sun4m_hwdefs[] = {
1104 1105 1106
    /* SS-5 */
    {
        .iommu_base   = 0x10000000,
1107 1108
        .iommu_pad_base = 0x10004000,
        .iommu_pad_len  = 0x0fffb000,
1109 1110
        .tcx_base     = 0x50000000,
        .cs_base      = 0x6c000000,
B
blueswir1 已提交
1111
        .slavio_base  = 0x70000000,
1112 1113 1114 1115 1116 1117
        .ms_kb_base   = 0x71000000,
        .serial_base  = 0x71100000,
        .nvram_base   = 0x71200000,
        .fd_base      = 0x71400000,
        .counter_base = 0x71d00000,
        .intctl_base  = 0x71e00000,
B
blueswir1 已提交
1118
        .idreg_base   = 0x78000000,
1119 1120 1121
        .dma_base     = 0x78400000,
        .esp_base     = 0x78800000,
        .le_base      = 0x78c00000,
1122
        .apc_base     = 0x6a000000,
A
Artyom Tarasenko 已提交
1123
        .afx_base     = 0x6e000000,
1124 1125
        .aux1_base    = 0x71900000,
        .aux2_base    = 0x71910000,
1126 1127
        .nvram_machine_id = 0x80,
        .machine_id = ss5_id,
1128
        .iommu_version = 0x05000000,
1129 1130
        .max_mem = 0x10000000,
        .default_cpu_model = "Fujitsu MB86904",
B
blueswir1 已提交
1131 1132 1133
    },
    /* SS-10 */
    {
1134 1135 1136 1137 1138 1139 1140 1141 1142
        .iommu_base   = 0xfe0000000ULL,
        .tcx_base     = 0xe20000000ULL,
        .slavio_base  = 0xff0000000ULL,
        .ms_kb_base   = 0xff1000000ULL,
        .serial_base  = 0xff1100000ULL,
        .nvram_base   = 0xff1200000ULL,
        .fd_base      = 0xff1700000ULL,
        .counter_base = 0xff1300000ULL,
        .intctl_base  = 0xff1400000ULL,
B
blueswir1 已提交
1143
        .idreg_base   = 0xef0000000ULL,
1144 1145 1146
        .dma_base     = 0xef0400000ULL,
        .esp_base     = 0xef0800000ULL,
        .le_base      = 0xef0c00000ULL,
1147
        .apc_base     = 0xefa000000ULL, // XXX should not exist
1148 1149
        .aux1_base    = 0xff1800000ULL,
        .aux2_base    = 0xff1a01000ULL,
1150 1151
        .ecc_base     = 0xf00000000ULL,
        .ecc_version  = 0x10000000, // version 0, implementation 1
1152 1153
        .nvram_machine_id = 0x72,
        .machine_id = ss10_id,
1154
        .iommu_version = 0x03000000,
B
blueswir1 已提交
1155
        .max_mem = 0xf00000000ULL,
1156
        .default_cpu_model = "TI SuperSparc II",
1157
    },
1158 1159 1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170
    /* SS-600MP */
    {
        .iommu_base   = 0xfe0000000ULL,
        .tcx_base     = 0xe20000000ULL,
        .slavio_base  = 0xff0000000ULL,
        .ms_kb_base   = 0xff1000000ULL,
        .serial_base  = 0xff1100000ULL,
        .nvram_base   = 0xff1200000ULL,
        .counter_base = 0xff1300000ULL,
        .intctl_base  = 0xff1400000ULL,
        .dma_base     = 0xef0081000ULL,
        .esp_base     = 0xef0080000ULL,
        .le_base      = 0xef0060000ULL,
1171
        .apc_base     = 0xefa000000ULL, // XXX should not exist
1172 1173
        .aux1_base    = 0xff1800000ULL,
        .aux2_base    = 0xff1a01000ULL, // XXX should not exist
1174 1175
        .ecc_base     = 0xf00000000ULL,
        .ecc_version  = 0x00000000, // version 0, implementation 0
1176 1177
        .nvram_machine_id = 0x71,
        .machine_id = ss600mp_id,
1178
        .iommu_version = 0x01000000,
B
blueswir1 已提交
1179
        .max_mem = 0xf00000000ULL,
1180
        .default_cpu_model = "TI SuperSparc II",
1181
    },
1182 1183 1184 1185 1186 1187 1188 1189 1190 1191 1192
    /* SS-20 */
    {
        .iommu_base   = 0xfe0000000ULL,
        .tcx_base     = 0xe20000000ULL,
        .slavio_base  = 0xff0000000ULL,
        .ms_kb_base   = 0xff1000000ULL,
        .serial_base  = 0xff1100000ULL,
        .nvram_base   = 0xff1200000ULL,
        .fd_base      = 0xff1700000ULL,
        .counter_base = 0xff1300000ULL,
        .intctl_base  = 0xff1400000ULL,
B
blueswir1 已提交
1193
        .idreg_base   = 0xef0000000ULL,
1194 1195 1196
        .dma_base     = 0xef0400000ULL,
        .esp_base     = 0xef0800000ULL,
        .le_base      = 0xef0c00000ULL,
1197
        .bpp_base     = 0xef4800000ULL,
1198
        .apc_base     = 0xefa000000ULL, // XXX should not exist
B
blueswir1 已提交
1199 1200
        .aux1_base    = 0xff1800000ULL,
        .aux2_base    = 0xff1a01000ULL,
1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215
        .dbri_base    = 0xee0000000ULL,
        .sx_base      = 0xf80000000ULL,
        .vsimm        = {
            {
                .reg_base  = 0x9c000000ULL,
                .vram_base = 0xfc000000ULL
            }, {
                .reg_base  = 0x90000000ULL,
                .vram_base = 0xf0000000ULL
            }, {
                .reg_base  = 0x94000000ULL
            }, {
                .reg_base  = 0x98000000ULL
            }
        },
1216 1217
        .ecc_base     = 0xf00000000ULL,
        .ecc_version  = 0x20000000, // version 0, implementation 2
1218 1219
        .nvram_machine_id = 0x72,
        .machine_id = ss20_id,
1220
        .iommu_version = 0x13000000,
B
blueswir1 已提交
1221
        .max_mem = 0xf00000000ULL,
1222 1223
        .default_cpu_model = "TI SuperSparc II",
    },
B
blueswir1 已提交
1224 1225 1226 1227 1228 1229 1230 1231 1232 1233 1234 1235 1236 1237 1238 1239 1240 1241
    /* Voyager */
    {
        .iommu_base   = 0x10000000,
        .tcx_base     = 0x50000000,
        .slavio_base  = 0x70000000,
        .ms_kb_base   = 0x71000000,
        .serial_base  = 0x71100000,
        .nvram_base   = 0x71200000,
        .fd_base      = 0x71400000,
        .counter_base = 0x71d00000,
        .intctl_base  = 0x71e00000,
        .idreg_base   = 0x78000000,
        .dma_base     = 0x78400000,
        .esp_base     = 0x78800000,
        .le_base      = 0x78c00000,
        .apc_base     = 0x71300000, // pmc
        .aux1_base    = 0x71900000,
        .aux2_base    = 0x71910000,
1242 1243
        .nvram_machine_id = 0x80,
        .machine_id = vger_id,
B
blueswir1 已提交
1244 1245 1246 1247 1248 1249 1250
        .iommu_version = 0x05000000,
        .max_mem = 0x10000000,
        .default_cpu_model = "Fujitsu MB86904",
    },
    /* LX */
    {
        .iommu_base   = 0x10000000,
1251 1252
        .iommu_pad_base = 0x10004000,
        .iommu_pad_len  = 0x0fffb000,
B
blueswir1 已提交
1253 1254 1255 1256 1257 1258 1259 1260 1261 1262 1263 1264 1265 1266
        .tcx_base     = 0x50000000,
        .slavio_base  = 0x70000000,
        .ms_kb_base   = 0x71000000,
        .serial_base  = 0x71100000,
        .nvram_base   = 0x71200000,
        .fd_base      = 0x71400000,
        .counter_base = 0x71d00000,
        .intctl_base  = 0x71e00000,
        .idreg_base   = 0x78000000,
        .dma_base     = 0x78400000,
        .esp_base     = 0x78800000,
        .le_base      = 0x78c00000,
        .aux1_base    = 0x71900000,
        .aux2_base    = 0x71910000,
1267 1268
        .nvram_machine_id = 0x80,
        .machine_id = lx_id,
B
blueswir1 已提交
1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285 1286 1287 1288 1289 1290 1291
        .iommu_version = 0x04000000,
        .max_mem = 0x10000000,
        .default_cpu_model = "TI MicroSparc I",
    },
    /* SS-4 */
    {
        .iommu_base   = 0x10000000,
        .tcx_base     = 0x50000000,
        .cs_base      = 0x6c000000,
        .slavio_base  = 0x70000000,
        .ms_kb_base   = 0x71000000,
        .serial_base  = 0x71100000,
        .nvram_base   = 0x71200000,
        .fd_base      = 0x71400000,
        .counter_base = 0x71d00000,
        .intctl_base  = 0x71e00000,
        .idreg_base   = 0x78000000,
        .dma_base     = 0x78400000,
        .esp_base     = 0x78800000,
        .le_base      = 0x78c00000,
        .apc_base     = 0x6a000000,
        .aux1_base    = 0x71900000,
        .aux2_base    = 0x71910000,
1292 1293
        .nvram_machine_id = 0x80,
        .machine_id = ss4_id,
B
blueswir1 已提交
1294 1295 1296 1297 1298 1299 1300 1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315
        .iommu_version = 0x05000000,
        .max_mem = 0x10000000,
        .default_cpu_model = "Fujitsu MB86904",
    },
    /* SPARCClassic */
    {
        .iommu_base   = 0x10000000,
        .tcx_base     = 0x50000000,
        .slavio_base  = 0x70000000,
        .ms_kb_base   = 0x71000000,
        .serial_base  = 0x71100000,
        .nvram_base   = 0x71200000,
        .fd_base      = 0x71400000,
        .counter_base = 0x71d00000,
        .intctl_base  = 0x71e00000,
        .idreg_base   = 0x78000000,
        .dma_base     = 0x78400000,
        .esp_base     = 0x78800000,
        .le_base      = 0x78c00000,
        .apc_base     = 0x6a000000,
        .aux1_base    = 0x71900000,
        .aux2_base    = 0x71910000,
1316 1317
        .nvram_machine_id = 0x80,
        .machine_id = scls_id,
B
blueswir1 已提交
1318 1319 1320 1321 1322 1323 1324 1325 1326 1327 1328 1329 1330 1331 1332 1333 1334 1335 1336 1337 1338 1339
        .iommu_version = 0x05000000,
        .max_mem = 0x10000000,
        .default_cpu_model = "TI MicroSparc I",
    },
    /* SPARCbook */
    {
        .iommu_base   = 0x10000000,
        .tcx_base     = 0x50000000, // XXX
        .slavio_base  = 0x70000000,
        .ms_kb_base   = 0x71000000,
        .serial_base  = 0x71100000,
        .nvram_base   = 0x71200000,
        .fd_base      = 0x71400000,
        .counter_base = 0x71d00000,
        .intctl_base  = 0x71e00000,
        .idreg_base   = 0x78000000,
        .dma_base     = 0x78400000,
        .esp_base     = 0x78800000,
        .le_base      = 0x78c00000,
        .apc_base     = 0x6a000000,
        .aux1_base    = 0x71900000,
        .aux2_base    = 0x71910000,
1340 1341
        .nvram_machine_id = 0x80,
        .machine_id = sbook_id,
B
blueswir1 已提交
1342 1343 1344 1345
        .iommu_version = 0x05000000,
        .max_mem = 0x10000000,
        .default_cpu_model = "TI MicroSparc I",
    },
1346 1347 1348
};

/* SPARCstation 5 hardware initialisation */
1349
static void ss5_init(MachineState *machine)
1350
{
1351
    sun4m_hw_init(&sun4m_hwdefs[0], machine);
1352
}
B
bellard 已提交
1353

B
blueswir1 已提交
1354
/* SPARCstation 10 hardware initialisation */
1355
static void ss10_init(MachineState *machine)
B
blueswir1 已提交
1356
{
1357
    sun4m_hw_init(&sun4m_hwdefs[1], machine);
B
blueswir1 已提交
1358 1359
}

1360
/* SPARCserver 600MP hardware initialisation */
1361
static void ss600mp_init(MachineState *machine)
1362
{
1363
    sun4m_hw_init(&sun4m_hwdefs[2], machine);
1364 1365
}

1366
/* SPARCstation 20 hardware initialisation */
1367
static void ss20_init(MachineState *machine)
1368
{
1369
    sun4m_hw_init(&sun4m_hwdefs[3], machine);
B
blueswir1 已提交
1370 1371
}

B
blueswir1 已提交
1372
/* SPARCstation Voyager hardware initialisation */
1373
static void vger_init(MachineState *machine)
B
blueswir1 已提交
1374
{
1375
    sun4m_hw_init(&sun4m_hwdefs[4], machine);
B
blueswir1 已提交
1376 1377 1378
}

/* SPARCstation LX hardware initialisation */
1379
static void ss_lx_init(MachineState *machine)
B
blueswir1 已提交
1380
{
1381
    sun4m_hw_init(&sun4m_hwdefs[5], machine);
B
blueswir1 已提交
1382 1383 1384
}

/* SPARCstation 4 hardware initialisation */
1385
static void ss4_init(MachineState *machine)
B
blueswir1 已提交
1386
{
1387
    sun4m_hw_init(&sun4m_hwdefs[6], machine);
B
blueswir1 已提交
1388 1389 1390
}

/* SPARCClassic hardware initialisation */
1391
static void scls_init(MachineState *machine)
B
blueswir1 已提交
1392
{
1393
    sun4m_hw_init(&sun4m_hwdefs[7], machine);
B
blueswir1 已提交
1394 1395 1396
}

/* SPARCbook hardware initialisation */
1397
static void sbook_init(MachineState *machine)
B
blueswir1 已提交
1398
{
1399
    sun4m_hw_init(&sun4m_hwdefs[8], machine);
B
blueswir1 已提交
1400 1401
}

1402
static void ss5_class_init(ObjectClass *oc, void *data)
1403
{
1404 1405
    MachineClass *mc = MACHINE_CLASS(oc);

1406 1407 1408 1409 1410 1411
    mc->desc = "Sun4m platform, SPARCstation 5";
    mc->init = ss5_init;
    mc->block_default_type = IF_SCSI;
    mc->is_default = 1;
    mc->default_boot_order = "c";
}
B
blueswir1 已提交
1412

1413 1414 1415 1416 1417
static const TypeInfo ss5_type = {
    .name = MACHINE_TYPE_NAME("SS-5"),
    .parent = TYPE_MACHINE,
    .class_init = ss5_class_init,
};
1418

1419
static void ss10_class_init(ObjectClass *oc, void *data)
1420
{
1421 1422
    MachineClass *mc = MACHINE_CLASS(oc);

1423 1424 1425 1426 1427 1428
    mc->desc = "Sun4m platform, SPARCstation 10";
    mc->init = ss10_init;
    mc->block_default_type = IF_SCSI;
    mc->max_cpus = 4;
    mc->default_boot_order = "c";
}
1429

1430 1431 1432 1433 1434
static const TypeInfo ss10_type = {
    .name = MACHINE_TYPE_NAME("SS-10"),
    .parent = TYPE_MACHINE,
    .class_init = ss10_class_init,
};
1435

1436
static void ss600mp_class_init(ObjectClass *oc, void *data)
1437
{
1438 1439
    MachineClass *mc = MACHINE_CLASS(oc);

1440 1441 1442 1443 1444 1445
    mc->desc = "Sun4m platform, SPARCserver 600MP";
    mc->init = ss600mp_init;
    mc->block_default_type = IF_SCSI;
    mc->max_cpus = 4;
    mc->default_boot_order = "c";
}
B
blueswir1 已提交
1446

1447 1448 1449 1450 1451
static const TypeInfo ss600mp_type = {
    .name = MACHINE_TYPE_NAME("SS-600MP"),
    .parent = TYPE_MACHINE,
    .class_init = ss600mp_class_init,
};
B
blueswir1 已提交
1452

1453
static void ss20_class_init(ObjectClass *oc, void *data)
1454
{
1455 1456
    MachineClass *mc = MACHINE_CLASS(oc);

1457 1458 1459 1460 1461 1462
    mc->desc = "Sun4m platform, SPARCstation 20";
    mc->init = ss20_init;
    mc->block_default_type = IF_SCSI;
    mc->max_cpus = 4;
    mc->default_boot_order = "c";
}
B
blueswir1 已提交
1463

1464 1465 1466 1467 1468
static const TypeInfo ss20_type = {
    .name = MACHINE_TYPE_NAME("SS-20"),
    .parent = TYPE_MACHINE,
    .class_init = ss20_class_init,
};
B
blueswir1 已提交
1469

1470
static void voyager_class_init(ObjectClass *oc, void *data)
1471
{
1472 1473
    MachineClass *mc = MACHINE_CLASS(oc);

1474 1475 1476 1477 1478 1479
    mc->desc = "Sun4m platform, SPARCstation Voyager";
    mc->init = vger_init;
    mc->block_default_type = IF_SCSI;
    mc->default_boot_order = "c";
}

1480 1481 1482 1483 1484
static const TypeInfo voyager_type = {
    .name = MACHINE_TYPE_NAME("Voyager"),
    .parent = TYPE_MACHINE,
    .class_init = voyager_class_init,
};
1485

1486
static void ss_lx_class_init(ObjectClass *oc, void *data)
1487
{
1488 1489
    MachineClass *mc = MACHINE_CLASS(oc);

1490 1491 1492 1493 1494 1495
    mc->desc = "Sun4m platform, SPARCstation LX";
    mc->init = ss_lx_init;
    mc->block_default_type = IF_SCSI;
    mc->default_boot_order = "c";
}

1496 1497 1498 1499 1500
static const TypeInfo ss_lx_type = {
    .name = MACHINE_TYPE_NAME("LX"),
    .parent = TYPE_MACHINE,
    .class_init = ss_lx_class_init,
};
1501

1502
static void ss4_class_init(ObjectClass *oc, void *data)
1503
{
1504 1505
    MachineClass *mc = MACHINE_CLASS(oc);

1506 1507 1508 1509 1510 1511
    mc->desc = "Sun4m platform, SPARCstation 4";
    mc->init = ss4_init;
    mc->block_default_type = IF_SCSI;
    mc->default_boot_order = "c";
}

1512 1513 1514 1515 1516
static const TypeInfo ss4_type = {
    .name = MACHINE_TYPE_NAME("SS-4"),
    .parent = TYPE_MACHINE,
    .class_init = ss4_class_init,
};
1517

1518
static void scls_class_init(ObjectClass *oc, void *data)
1519
{
1520 1521
    MachineClass *mc = MACHINE_CLASS(oc);

1522 1523 1524 1525 1526 1527
    mc->desc = "Sun4m platform, SPARCClassic";
    mc->init = scls_init;
    mc->block_default_type = IF_SCSI;
    mc->default_boot_order = "c";
}

1528 1529 1530 1531 1532
static const TypeInfo scls_type = {
    .name = MACHINE_TYPE_NAME("SPARCClassic"),
    .parent = TYPE_MACHINE,
    .class_init = scls_class_init,
};
1533

1534
static void sbook_class_init(ObjectClass *oc, void *data)
1535
{
1536 1537
    MachineClass *mc = MACHINE_CLASS(oc);

1538 1539 1540 1541 1542 1543
    mc->desc = "Sun4m platform, SPARCbook";
    mc->init = sbook_init;
    mc->block_default_type = IF_SCSI;
    mc->default_boot_order = "c";
}

1544 1545 1546 1547 1548
static const TypeInfo sbook_type = {
    .name = MACHINE_TYPE_NAME("SPARCbook"),
    .parent = TYPE_MACHINE,
    .class_init = sbook_class_init,
};
B
blueswir1 已提交
1549

A
Andreas Färber 已提交
1550 1551 1552 1553 1554 1555 1556 1557
static void sun4m_register_types(void)
{
    type_register_static(&idreg_info);
    type_register_static(&afx_info);
    type_register_static(&prom_info);
    type_register_static(&ram_info);
}

1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568 1569 1570
static void sun4m_machine_init(void)
{
    type_register_static(&ss5_type);
    type_register_static(&ss10_type);
    type_register_static(&ss600mp_type);
    type_register_static(&ss20_type);
    type_register_static(&voyager_type);
    type_register_static(&ss_lx_type);
    type_register_static(&ss4_type);
    type_register_static(&scls_type);
    type_register_static(&sbook_type);
}

A
Andreas Färber 已提交
1571
type_init(sun4m_register_types)
1572
machine_init(sun4m_machine_init)