ppc_prep.c 21.9 KB
Newer Older
1
/*
2
 * QEMU PPC PREP hardware System Emulator
3
 *
4
 * Copyright (c) 2003-2007 Jocelyn Mayer
5
 *
6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
23
 */
P
pbrook 已提交
24 25 26 27 28 29 30 31 32 33
#include "hw.h"
#include "nvram.h"
#include "pc.h"
#include "fdc.h"
#include "net.h"
#include "sysemu.h"
#include "isa.h"
#include "pci.h"
#include "ppc.h"
#include "boards.h"
B
blueswir1 已提交
34
#include "qemu-log.h"
35

36
//#define HARD_DEBUG_PPC_IO
37
//#define DEBUG_PPC_IO
38

39 40 41
/* SMP is not enabled, for now */
#define MAX_CPUS 1

T
ths 已提交
42 43
#define MAX_IDE_BUS 2

B
bellard 已提交
44 45 46
#define BIOS_FILENAME "ppc_rom.bin"
#define KERNEL_LOAD_ADDR 0x01000000
#define INITRD_LOAD_ADDR 0x01800000
B
bellard 已提交
47

48 49 50 51 52 53 54
#if defined (HARD_DEBUG_PPC_IO) && !defined (DEBUG_PPC_IO)
#define DEBUG_PPC_IO
#endif

#if defined (HARD_DEBUG_PPC_IO)
#define PPC_IO_DPRINTF(fmt, args...)                     \
do {                                                     \
B
bellard 已提交
55
    if (loglevel & CPU_LOG_IOPORT) {                     \
56
        qemu_log("%s: " fmt, __func__ , ##args); \
57 58 59 60 61
    } else {                                             \
        printf("%s : " fmt, __func__ , ##args);          \
    }                                                    \
} while (0)
#elif defined (DEBUG_PPC_IO)
62
#define PPC_IO_DPRINTF(fmt, args...) qemu_log_mask(CPU_LOG_IOPORT, ## __VA_ARGS__)
63 64 65 66
#else
#define PPC_IO_DPRINTF(fmt, args...) do { } while (0)
#endif

B
bellard 已提交
67
/* Constants for devices init */
68 69 70 71 72 73 74 75
static const int ide_iobase[2] = { 0x1f0, 0x170 };
static const int ide_iobase2[2] = { 0x3f6, 0x376 };
static const int ide_irq[2] = { 13, 13 };

#define NE2000_NB_MAX 6

static uint32_t ne2000_io[NE2000_NB_MAX] = { 0x300, 0x320, 0x340, 0x360, 0x280, 0x380 };
static int ne2000_irq[NE2000_NB_MAX] = { 9, 10, 11, 3, 4, 5 };
76

B
bellard 已提交
77 78 79
//static PITState *pit;

/* ISA IO ports bridge */
80 81
#define PPC_IO_BASE 0x80000000

82
#if 0
B
bellard 已提交
83
/* Speaker port 0x61 */
84 85 86
static int speaker_data_on;
static int dummy_refresh_clock;
#endif
B
bellard 已提交
87

88
static void speaker_ioport_write (void *opaque, uint32_t addr, uint32_t val)
89
{
90
#if 0
B
bellard 已提交
91 92
    speaker_data_on = (val >> 1) & 1;
    pit_set_gate(pit, 2, val & 1);
93
#endif
94 95
}

96
static uint32_t speaker_ioport_read (void *opaque, uint32_t addr)
97
{
98
#if 0
B
bellard 已提交
99 100 101 102
    int out;
    out = pit_get_out(pit, 2, qemu_get_clock(vm_clock));
    dummy_refresh_clock ^= 1;
    return (speaker_data_on << 1) | pit_get_gate(pit, 2) | (out << 5) |
103
        (dummy_refresh_clock << 4);
104
#endif
B
bellard 已提交
105
    return 0;
106 107
}

B
bellard 已提交
108 109
/* PCI intack register */
/* Read-only register (?) */
110 111
static void _PPC_intack_write (void *opaque,
                               target_phys_addr_t addr, uint32_t value)
B
bellard 已提交
112
{
113
//    printf("%s: 0x" PADDRX " => 0x%08" PRIx32 "\n", __func__, addr, value);
B
bellard 已提交
114 115
}

116
static always_inline uint32_t _PPC_intack_read (target_phys_addr_t addr)
B
bellard 已提交
117 118 119
{
    uint32_t retval = 0;

120
    if ((addr & 0xf) == 0)
B
bellard 已提交
121
        retval = pic_intack_read(isa_pic);
122
//   printf("%s: 0x" PADDRX " <= %08" PRIx32 "\n", __func__, addr, retval);
B
bellard 已提交
123 124 125 126

    return retval;
}

B
bellard 已提交
127
static uint32_t PPC_intack_readb (void *opaque, target_phys_addr_t addr)
B
bellard 已提交
128 129 130 131
{
    return _PPC_intack_read(addr);
}

B
bellard 已提交
132
static uint32_t PPC_intack_readw (void *opaque, target_phys_addr_t addr)
133
{
B
bellard 已提交
134
#ifdef TARGET_WORDS_BIGENDIAN
B
bellard 已提交
135 136 137
    return bswap16(_PPC_intack_read(addr));
#else
    return _PPC_intack_read(addr);
B
bellard 已提交
138
#endif
139 140
}

B
bellard 已提交
141
static uint32_t PPC_intack_readl (void *opaque, target_phys_addr_t addr)
142
{
B
bellard 已提交
143
#ifdef TARGET_WORDS_BIGENDIAN
B
bellard 已提交
144 145 146
    return bswap32(_PPC_intack_read(addr));
#else
    return _PPC_intack_read(addr);
B
bellard 已提交
147
#endif
148 149
}

B
bellard 已提交
150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188
static CPUWriteMemoryFunc *PPC_intack_write[] = {
    &_PPC_intack_write,
    &_PPC_intack_write,
    &_PPC_intack_write,
};

static CPUReadMemoryFunc *PPC_intack_read[] = {
    &PPC_intack_readb,
    &PPC_intack_readw,
    &PPC_intack_readl,
};

/* PowerPC control and status registers */
#if 0 // Not used
static struct {
    /* IDs */
    uint32_t veni_devi;
    uint32_t revi;
    /* Control and status */
    uint32_t gcsr;
    uint32_t xcfr;
    uint32_t ct32;
    uint32_t mcsr;
    /* General purpose registers */
    uint32_t gprg[6];
    /* Exceptions */
    uint32_t feen;
    uint32_t fest;
    uint32_t fema;
    uint32_t fecl;
    uint32_t eeen;
    uint32_t eest;
    uint32_t eecl;
    uint32_t eeint;
    uint32_t eemck0;
    uint32_t eemck1;
    /* Error diagnostic */
} XCSR;

189 190
static void PPC_XCSR_writeb (void *opaque,
                             target_phys_addr_t addr, uint32_t value)
B
bellard 已提交
191
{
192
    printf("%s: 0x" PADDRX " => 0x%08" PRIx32 "\n", __func__, addr, value);
B
bellard 已提交
193 194
}

195 196
static void PPC_XCSR_writew (void *opaque,
                             target_phys_addr_t addr, uint32_t value)
197
{
B
bellard 已提交
198
#ifdef TARGET_WORDS_BIGENDIAN
B
bellard 已提交
199
    value = bswap16(value);
B
bellard 已提交
200
#endif
201
    printf("%s: 0x" PADDRX " => 0x%08" PRIx32 "\n", __func__, addr, value);
202 203
}

204 205
static void PPC_XCSR_writel (void *opaque,
                             target_phys_addr_t addr, uint32_t value)
206
{
B
bellard 已提交
207
#ifdef TARGET_WORDS_BIGENDIAN
B
bellard 已提交
208
    value = bswap32(value);
B
bellard 已提交
209
#endif
210
    printf("%s: 0x" PADDRX " => 0x%08" PRIx32 "\n", __func__, addr, value);
211 212
}

B
bellard 已提交
213
static uint32_t PPC_XCSR_readb (void *opaque, target_phys_addr_t addr)
B
bellard 已提交
214 215
{
    uint32_t retval = 0;
216

217
    printf("%s: 0x" PADDRX " <= %08" PRIx32 "\n", __func__, addr, retval);
218

B
bellard 已提交
219 220 221
    return retval;
}

B
bellard 已提交
222
static uint32_t PPC_XCSR_readw (void *opaque, target_phys_addr_t addr)
223
{
B
bellard 已提交
224 225
    uint32_t retval = 0;

226
    printf("%s: 0x" PADDRX " <= %08" PRIx32 "\n", __func__, addr, retval);
B
bellard 已提交
227 228 229 230 231
#ifdef TARGET_WORDS_BIGENDIAN
    retval = bswap16(retval);
#endif

    return retval;
232 233
}

B
bellard 已提交
234
static uint32_t PPC_XCSR_readl (void *opaque, target_phys_addr_t addr)
235 236 237
{
    uint32_t retval = 0;

238
    printf("%s: 0x" PADDRX " <= %08" PRIx32 "\n", __func__, addr, retval);
B
bellard 已提交
239 240 241
#ifdef TARGET_WORDS_BIGENDIAN
    retval = bswap32(retval);
#endif
242 243 244 245

    return retval;
}

B
bellard 已提交
246 247 248 249
static CPUWriteMemoryFunc *PPC_XCSR_write[] = {
    &PPC_XCSR_writeb,
    &PPC_XCSR_writew,
    &PPC_XCSR_writel,
250 251
};

B
bellard 已提交
252 253 254 255
static CPUReadMemoryFunc *PPC_XCSR_read[] = {
    &PPC_XCSR_readb,
    &PPC_XCSR_readw,
    &PPC_XCSR_readl,
256
};
B
bellard 已提交
257
#endif
258

B
bellard 已提交
259 260
/* Fake super-io ports for PREP platform (Intel 82378ZB) */
typedef struct sysctrl_t {
J
j_mayer 已提交
261
    qemu_irq reset_irq;
B
bellard 已提交
262 263 264 265
    m48t59_t *nvram;
    uint8_t state;
    uint8_t syscontrol;
    uint8_t fake_io[2];
B
bellard 已提交
266
    int contiguous_map;
B
bellard 已提交
267
    int endian;
B
bellard 已提交
268
} sysctrl_t;
269

B
bellard 已提交
270 271
enum {
    STATE_HARDFILE = 0x01,
272 273
};

B
bellard 已提交
274
static sysctrl_t *sysctrl;
275

276
static void PREP_io_write (void *opaque, uint32_t addr, uint32_t val)
277
{
B
bellard 已提交
278 279
    sysctrl_t *sysctrl = opaque;

280 281
    PPC_IO_DPRINTF("0x%08" PRIx32 " => 0x%02" PRIx32 "\n", addr - PPC_IO_BASE,
                   val);
B
bellard 已提交
282
    sysctrl->fake_io[addr - 0x0398] = val;
283 284
}

285
static uint32_t PREP_io_read (void *opaque, uint32_t addr)
286
{
B
bellard 已提交
287
    sysctrl_t *sysctrl = opaque;
288

289
    PPC_IO_DPRINTF("0x%08" PRIx32 " <= 0x%02" PRIx32 "\n", addr - PPC_IO_BASE,
B
bellard 已提交
290 291 292
                   sysctrl->fake_io[addr - 0x0398]);
    return sysctrl->fake_io[addr - 0x0398];
}
293

294
static void PREP_io_800_writeb (void *opaque, uint32_t addr, uint32_t val)
295
{
B
bellard 已提交
296 297
    sysctrl_t *sysctrl = opaque;

298 299
    PPC_IO_DPRINTF("0x%08" PRIx32 " => 0x%02" PRIx32 "\n",
                   addr - PPC_IO_BASE, val);
300 301 302 303
    switch (addr) {
    case 0x0092:
        /* Special port 92 */
        /* Check soft reset asked */
B
bellard 已提交
304
        if (val & 0x01) {
J
j_mayer 已提交
305 306 307
            qemu_irq_raise(sysctrl->reset_irq);
        } else {
            qemu_irq_lower(sysctrl->reset_irq);
308 309
        }
        /* Check LE mode */
B
bellard 已提交
310
        if (val & 0x02) {
B
bellard 已提交
311 312 313
            sysctrl->endian = 1;
        } else {
            sysctrl->endian = 0;
314 315
        }
        break;
B
bellard 已提交
316 317 318 319 320 321 322 323 324
    case 0x0800:
        /* Motorola CPU configuration register : read-only */
        break;
    case 0x0802:
        /* Motorola base module feature register : read-only */
        break;
    case 0x0803:
        /* Motorola base module status register : read-only */
        break;
325
    case 0x0808:
B
bellard 已提交
326 327 328 329 330
        /* Hardfile light register */
        if (val & 1)
            sysctrl->state |= STATE_HARDFILE;
        else
            sysctrl->state &= ~STATE_HARDFILE;
331 332 333
        break;
    case 0x0810:
        /* Password protect 1 register */
B
bellard 已提交
334 335
        if (sysctrl->nvram != NULL)
            m48t59_toggle_lock(sysctrl->nvram, 1);
336 337 338
        break;
    case 0x0812:
        /* Password protect 2 register */
B
bellard 已提交
339 340
        if (sysctrl->nvram != NULL)
            m48t59_toggle_lock(sysctrl->nvram, 2);
341 342
        break;
    case 0x0814:
B
bellard 已提交
343
        /* L2 invalidate register */
B
bellard 已提交
344
        //        tlb_flush(first_cpu, 1);
345 346 347
        break;
    case 0x081C:
        /* system control register */
B
bellard 已提交
348
        sysctrl->syscontrol = val & 0x0F;
349 350 351
        break;
    case 0x0850:
        /* I/O map type register */
B
bellard 已提交
352
        sysctrl->contiguous_map = val & 0x01;
353 354
        break;
    default:
355 356
        printf("ERROR: unaffected IO port write: %04" PRIx32
               " => %02" PRIx32"\n", addr, val);
357 358 359 360
        break;
    }
}

361
static uint32_t PREP_io_800_readb (void *opaque, uint32_t addr)
362
{
B
bellard 已提交
363
    sysctrl_t *sysctrl = opaque;
364 365 366 367 368
    uint32_t retval = 0xFF;

    switch (addr) {
    case 0x0092:
        /* Special port 92 */
B
bellard 已提交
369 370 371 372 373 374 375 376 377 378 379 380 381
        retval = 0x00;
        break;
    case 0x0800:
        /* Motorola CPU configuration register */
        retval = 0xEF; /* MPC750 */
        break;
    case 0x0802:
        /* Motorola Base module feature register */
        retval = 0xAD; /* No ESCC, PMC slot neither ethernet */
        break;
    case 0x0803:
        /* Motorola base module status register */
        retval = 0xE0; /* Standard MPC750 */
382 383 384 385 386 387 388 389
        break;
    case 0x080C:
        /* Equipment present register:
         *  no L2 cache
         *  no upgrade processor
         *  no cards in PCI slots
         *  SCSI fuse is bad
         */
B
bellard 已提交
390 391 392 393 394
        retval = 0x3C;
        break;
    case 0x0810:
        /* Motorola base module extended feature register */
        retval = 0x39; /* No USB, CF and PCI bridge. NVRAM present */
395
        break;
B
bellard 已提交
396 397 398
    case 0x0814:
        /* L2 invalidate: don't care */
        break;
399 400 401 402 403 404 405 406
    case 0x0818:
        /* Keylock */
        retval = 0x00;
        break;
    case 0x081C:
        /* system control register
         * 7 - 6 / 1 - 0: L2 cache enable
         */
B
bellard 已提交
407
        retval = sysctrl->syscontrol;
408 409 410 411 412 413 414
        break;
    case 0x0823:
        /* */
        retval = 0x03; /* no L2 cache */
        break;
    case 0x0850:
        /* I/O map type register */
B
bellard 已提交
415
        retval = sysctrl->contiguous_map;
416 417
        break;
    default:
418
        printf("ERROR: unaffected IO port: %04" PRIx32 " read\n", addr);
419 420
        break;
    }
421 422
    PPC_IO_DPRINTF("0x%08" PRIx32 " <= 0x%02" PRIx32 "\n",
                   addr - PPC_IO_BASE, retval);
423 424 425 426

    return retval;
}

427 428 429
static always_inline target_phys_addr_t prep_IO_address (sysctrl_t *sysctrl,
                                                         target_phys_addr_t
                                                         addr)
B
bellard 已提交
430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470
{
    if (sysctrl->contiguous_map == 0) {
        /* 64 KB contiguous space for IOs */
        addr &= 0xFFFF;
    } else {
        /* 8 MB non-contiguous space for IOs */
        addr = (addr & 0x1F) | ((addr & 0x007FFF000) >> 7);
    }

    return addr;
}

static void PPC_prep_io_writeb (void *opaque, target_phys_addr_t addr,
                                uint32_t value)
{
    sysctrl_t *sysctrl = opaque;

    addr = prep_IO_address(sysctrl, addr);
    cpu_outb(NULL, addr, value);
}

static uint32_t PPC_prep_io_readb (void *opaque, target_phys_addr_t addr)
{
    sysctrl_t *sysctrl = opaque;
    uint32_t ret;

    addr = prep_IO_address(sysctrl, addr);
    ret = cpu_inb(NULL, addr);

    return ret;
}

static void PPC_prep_io_writew (void *opaque, target_phys_addr_t addr,
                                uint32_t value)
{
    sysctrl_t *sysctrl = opaque;

    addr = prep_IO_address(sysctrl, addr);
#ifdef TARGET_WORDS_BIGENDIAN
    value = bswap16(value);
#endif
471
    PPC_IO_DPRINTF("0x" PADDRX " => 0x%08" PRIx32 "\n", addr, value);
B
bellard 已提交
472 473 474 475 476 477 478 479 480 481 482 483 484
    cpu_outw(NULL, addr, value);
}

static uint32_t PPC_prep_io_readw (void *opaque, target_phys_addr_t addr)
{
    sysctrl_t *sysctrl = opaque;
    uint32_t ret;

    addr = prep_IO_address(sysctrl, addr);
    ret = cpu_inw(NULL, addr);
#ifdef TARGET_WORDS_BIGENDIAN
    ret = bswap16(ret);
#endif
485
    PPC_IO_DPRINTF("0x" PADDRX " <= 0x%08" PRIx32 "\n", addr, ret);
B
bellard 已提交
486 487 488 489 490 491 492 493 494 495 496 497 498

    return ret;
}

static void PPC_prep_io_writel (void *opaque, target_phys_addr_t addr,
                                uint32_t value)
{
    sysctrl_t *sysctrl = opaque;

    addr = prep_IO_address(sysctrl, addr);
#ifdef TARGET_WORDS_BIGENDIAN
    value = bswap32(value);
#endif
499
    PPC_IO_DPRINTF("0x" PADDRX " => 0x%08" PRIx32 "\n", addr, value);
B
bellard 已提交
500 501 502 503 504 505 506 507 508 509 510 511 512
    cpu_outl(NULL, addr, value);
}

static uint32_t PPC_prep_io_readl (void *opaque, target_phys_addr_t addr)
{
    sysctrl_t *sysctrl = opaque;
    uint32_t ret;

    addr = prep_IO_address(sysctrl, addr);
    ret = cpu_inl(NULL, addr);
#ifdef TARGET_WORDS_BIGENDIAN
    ret = bswap32(ret);
#endif
513
    PPC_IO_DPRINTF("0x" PADDRX " <= 0x%08" PRIx32 "\n", addr, ret);
B
bellard 已提交
514 515 516 517

    return ret;
}

518
static CPUWriteMemoryFunc *PPC_prep_io_write[] = {
B
bellard 已提交
519 520 521 522 523
    &PPC_prep_io_writeb,
    &PPC_prep_io_writew,
    &PPC_prep_io_writel,
};

524
static CPUReadMemoryFunc *PPC_prep_io_read[] = {
B
bellard 已提交
525 526 527 528 529
    &PPC_prep_io_readb,
    &PPC_prep_io_readw,
    &PPC_prep_io_readl,
};

B
bellard 已提交
530
#define NVRAM_SIZE        0x2000
531

532
/* PowerPC PREP hardware initialisation */
533
static void ppc_prep_init (ram_addr_t ram_size, int vga_ram_size,
534 535
                           const char *boot_device, DisplayState *ds,
                           const char *kernel_filename,
536 537 538
                           const char *kernel_cmdline,
                           const char *initrd_filename,
                           const char *cpu_model)
539
{
J
j_mayer 已提交
540
    CPUState *env = NULL, *envs[MAX_CPUS];
541
    char buf[1024];
J
j_mayer 已提交
542 543
    nvram_t nvram;
    m48t59_t *m48t59;
544
    int PPC_io_memory;
B
bellard 已提交
545
    int linux_boot, i, nb_nics1, bios_size;
B
bellard 已提交
546 547
    unsigned long bios_offset;
    uint32_t kernel_base, kernel_size, initrd_base, initrd_size;
B
bellard 已提交
548
    PCIBus *pci_bus;
P
pbrook 已提交
549
    qemu_irq *i8259;
550
    int ppc_boot_device;
T
ths 已提交
551 552 553
    int index;
    BlockDriverState *hd[MAX_IDE_BUS * MAX_IDE_DEVS];
    BlockDriverState *fd[MAX_FD];
B
bellard 已提交
554 555 556

    sysctrl = qemu_mallocz(sizeof(sysctrl_t));
    if (sysctrl == NULL)
J
j_mayer 已提交
557
        return;
558 559

    linux_boot = (kernel_filename != NULL);
J
j_mayer 已提交
560

B
bellard 已提交
561
    /* init CPUs */
562
    if (cpu_model == NULL)
563
        cpu_model = "default";
564
    for (i = 0; i < smp_cpus; i++) {
B
bellard 已提交
565 566 567 568 569
        env = cpu_init(cpu_model);
        if (!env) {
            fprintf(stderr, "Unable to find PowerPC CPU definition\n");
            exit(1);
        }
570 571 572 573 574 575 576
        if (env->flags & POWERPC_FLAG_RTC_CLK) {
            /* POWER / PowerPC 601 RTC clock frequency is 7.8125 MHz */
            cpu_ppc_tb_init(env, 7812500UL);
        } else {
            /* Set time-base frequency to 100 Mhz */
            cpu_ppc_tb_init(env, 100UL * 1000UL * 1000UL);
        }
577 578 579
        qemu_register_reset(&cpu_ppc_reset, env);
        envs[i] = env;
    }
580 581

    /* allocate RAM */
B
bellard 已提交
582 583 584 585
    cpu_register_physical_memory(0, ram_size, IO_MEM_RAM);

    /* allocate and load BIOS */
    bios_offset = ram_size + vga_ram_size;
586 587 588
    if (bios_name == NULL)
        bios_name = BIOS_FILENAME;
    snprintf(buf, sizeof(buf), "%s/%s", bios_dir, bios_name);
B
bellard 已提交
589 590
    bios_size = load_image(buf, phys_ram_base + bios_offset);
    if (bios_size < 0 || bios_size > BIOS_SIZE) {
J
j_mayer 已提交
591
        cpu_abort(env, "qemu: could not load PPC PREP bios '%s'\n", buf);
B
bellard 已提交
592 593
        exit(1);
    }
594 595 596
    if (env->nip < 0xFFF80000 && bios_size < 0x00100000) {
        cpu_abort(env, "PowerPC 601 / 620 / 970 need a 1MB BIOS\n");
    }
B
bellard 已提交
597
    bios_size = (bios_size + 0xfff) & ~0xfff;
J
j_mayer 已提交
598
    cpu_register_physical_memory((uint32_t)(-bios_size),
B
bellard 已提交
599
                                 bios_size, bios_offset | IO_MEM_ROM);
600

601
    if (linux_boot) {
B
bellard 已提交
602
        kernel_base = KERNEL_LOAD_ADDR;
603
        /* now we can load the kernel */
B
bellard 已提交
604 605
        kernel_size = load_image(kernel_filename, phys_ram_base + kernel_base);
        if (kernel_size < 0) {
J
j_mayer 已提交
606 607
            cpu_abort(env, "qemu: could not load kernel '%s'\n",
                      kernel_filename);
608 609 610 611
            exit(1);
        }
        /* load initrd */
        if (initrd_filename) {
B
bellard 已提交
612 613 614
            initrd_base = INITRD_LOAD_ADDR;
            initrd_size = load_image(initrd_filename,
                                     phys_ram_base + initrd_base);
615
            if (initrd_size < 0) {
J
j_mayer 已提交
616 617
                cpu_abort(env, "qemu: could not load initial ram disk '%s'\n",
                          initrd_filename);
618 619
                exit(1);
            }
B
bellard 已提交
620 621 622
        } else {
            initrd_base = 0;
            initrd_size = 0;
623
        }
624
        ppc_boot_device = 'm';
625
    } else {
B
bellard 已提交
626 627 628 629
        kernel_base = 0;
        kernel_size = 0;
        initrd_base = 0;
        initrd_size = 0;
630 631
        ppc_boot_device = '\0';
        /* For now, OHW cannot boot from the network. */
J
j_mayer 已提交
632 633 634
        for (i = 0; boot_device[i] != '\0'; i++) {
            if (boot_device[i] >= 'a' && boot_device[i] <= 'f') {
                ppc_boot_device = boot_device[i];
635
                break;
J
j_mayer 已提交
636
            }
637 638 639 640 641
        }
        if (ppc_boot_device == '\0') {
            fprintf(stderr, "No valid boot device for Mac99 machine\n");
            exit(1);
        }
642 643
    }

B
bellard 已提交
644
    isa_mem_base = 0xc0000000;
645 646 647 648
    if (PPC_INPUT(env) != PPC_FLAGS_INPUT_6xx) {
        cpu_abort(env, "Only 6xx bus is supported on PREP machine\n");
        exit(1);
    }
649
    i8259 = i8259_init(first_cpu->irq_inputs[PPC6xx_INPUT_INT]);
P
pbrook 已提交
650
    pci_bus = pci_prep_init(i8259);
B
bellard 已提交
651 652 653 654 655
    //    pci_bus = i440fx_init();
    /* Register 8 MB of ISA IO space (needed for non-contiguous map) */
    PPC_io_memory = cpu_register_io_memory(0, PPC_prep_io_read,
                                           PPC_prep_io_write, sysctrl);
    cpu_register_physical_memory(0x80000000, 0x00800000, PPC_io_memory);
B
bellard 已提交
656

657
    /* init basic PC hardware */
658
    pci_vga_init(pci_bus, ds, phys_ram_base + ram_size, ram_size,
B
bellard 已提交
659
                 vga_ram_size, 0, 0);
B
bellard 已提交
660
    //    openpic = openpic_init(0x00000000, 0xF0000000, 1);
P
pbrook 已提交
661 662
    //    pit = pit_init(0x40, i8259[0]);
    rtc_init(0x70, i8259[8]);
663

A
aurel32 已提交
664
    serial_init(0x3f8, i8259[4], 115200, serial_hds[0]);
665 666 667 668
    nb_nics1 = nb_nics;
    if (nb_nics1 > NE2000_NB_MAX)
        nb_nics1 = NE2000_NB_MAX;
    for(i = 0; i < nb_nics1; i++) {
669 670 671 672
        if (nd_table[i].model == NULL) {
	    nd_table[i].model = "ne2k_isa";
        }
        if (strcmp(nd_table[i].model, "ne2k_isa") == 0) {
P
pbrook 已提交
673
            isa_ne2000_init(ne2000_io[i], i8259[ne2000_irq[i]], &nd_table[i]);
674
        } else {
675
            pci_nic_init(pci_bus, &nd_table[i], -1, "ne2k_pci");
676
        }
677 678
    }

T
ths 已提交
679 680 681 682 683 684 685 686 687 688 689 690 691 692
    if (drive_get_max_bus(IF_IDE) >= MAX_IDE_BUS) {
        fprintf(stderr, "qemu: too many IDE bus\n");
        exit(1);
    }

    for(i = 0; i < MAX_IDE_BUS * MAX_IDE_DEVS; i++) {
        index = drive_get_index(IF_IDE, i / MAX_IDE_DEVS, i % MAX_IDE_DEVS);
        if (index != -1)
            hd[i] = drives_table[index].bdrv;
        else
            hd[i] = NULL;
    }

    for(i = 0; i < MAX_IDE_BUS; i++) {
P
pbrook 已提交
693
        isa_ide_init(ide_iobase[i], ide_iobase2[i], i8259[ide_irq[i]],
T
ths 已提交
694 695
                     hd[2 * i],
		     hd[2 * i + 1]);
696
    }
P
pbrook 已提交
697
    i8042_init(i8259[1], i8259[12], 0x60);
B
bellard 已提交
698
    DMA_init(1);
B
bellard 已提交
699
    //    AUD_init();
700 701
    //    SB16_init();

T
ths 已提交
702 703 704 705 706 707 708 709
    for(i = 0; i < MAX_FD; i++) {
        index = drive_get_index(IF_FLOPPY, 0, i);
        if (index != -1)
            fd[i] = drives_table[index].bdrv;
        else
            fd[i] = NULL;
    }
    fdctrl_init(i8259[6], 2, 0, 0x3f0, fd);
710

B
bellard 已提交
711 712 713
    /* Register speaker port */
    register_ioport_read(0x61, 1, 1, speaker_ioport_read, NULL);
    register_ioport_write(0x61, 1, 1, speaker_ioport_write, NULL);
714
    /* Register fake IO ports for PREP */
J
j_mayer 已提交
715
    sysctrl->reset_irq = first_cpu->irq_inputs[PPC6xx_INPUT_HRESET];
B
bellard 已提交
716 717
    register_ioport_read(0x398, 2, 1, &PREP_io_read, sysctrl);
    register_ioport_write(0x398, 2, 1, &PREP_io_write, sysctrl);
718
    /* System control ports */
B
bellard 已提交
719 720 721 722 723 724
    register_ioport_read(0x0092, 0x01, 1, &PREP_io_800_readb, sysctrl);
    register_ioport_write(0x0092, 0x01, 1, &PREP_io_800_writeb, sysctrl);
    register_ioport_read(0x0800, 0x52, 1, &PREP_io_800_readb, sysctrl);
    register_ioport_write(0x0800, 0x52, 1, &PREP_io_800_writeb, sysctrl);
    /* PCI intack location */
    PPC_io_memory = cpu_register_io_memory(0, PPC_intack_read,
B
bellard 已提交
725
                                           PPC_intack_write, NULL);
726
    cpu_register_physical_memory(0xBFFFFFF0, 0x4, PPC_io_memory);
B
bellard 已提交
727
    /* PowerPC control and status register group */
B
bellard 已提交
728
#if 0
729 730
    PPC_io_memory = cpu_register_io_memory(0, PPC_XCSR_read, PPC_XCSR_write,
                                           NULL);
B
bellard 已提交
731
    cpu_register_physical_memory(0xFEFF0000, 0x1000, PPC_io_memory);
B
bellard 已提交
732
#endif
733

P
pbrook 已提交
734
    if (usb_enabled) {
735
        usb_ohci_init_pci(pci_bus, 3, -1);
P
pbrook 已提交
736 737
    }

J
j_mayer 已提交
738 739
    m48t59 = m48t59_init(i8259[8], 0, 0x0074, NVRAM_SIZE, 59);
    if (m48t59 == NULL)
B
bellard 已提交
740
        return;
J
j_mayer 已提交
741
    sysctrl->nvram = m48t59;
B
bellard 已提交
742 743

    /* Initialise NVRAM */
J
j_mayer 已提交
744 745 746
    nvram.opaque = m48t59;
    nvram.read_fn = &m48t59_read;
    nvram.write_fn = &m48t59_write;
747
    PPC_NVRAM_set_params(&nvram, NVRAM_SIZE, "PREP", ram_size, ppc_boot_device,
B
bellard 已提交
748
                         kernel_base, kernel_size,
B
bellard 已提交
749
                         kernel_cmdline,
B
bellard 已提交
750 751
                         initrd_base, initrd_size,
                         /* XXX: need an option to load a NVRAM image */
B
bellard 已提交
752 753
                         0,
                         graphic_width, graphic_height, graphic_depth);
B
bellard 已提交
754 755 756

    /* Special port to get debug messages from Open-Firmware */
    register_ioport_write(0x0F00, 4, 1, &PPC_debug_write, NULL);
757
}
B
bellard 已提交
758 759

QEMUMachine prep_machine = {
760 761 762 763
    .name = "prep",
    .desc = "PowerPC PREP platform",
    .init = ppc_prep_init,
    .ram_require = BIOS_SIZE + VGA_RAM_SIZE,
B
balrog 已提交
764
    .max_cpus = MAX_CPUS,
B
bellard 已提交
765
};