mips_jazz.c 12.8 KB
Newer Older
A
aurel32 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
/*
 * QEMU MIPS Jazz support
 *
 * Copyright (c) 2007-2008 Hervé Poussineau
 *
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */

25
#include "hw/hw.h"
P
Paolo Bonzini 已提交
26 27 28 29 30 31
#include "hw/mips/mips.h"
#include "hw/mips/cpudevs.h"
#include "hw/i386/pc.h"
#include "hw/char/serial.h"
#include "hw/isa/isa.h"
#include "hw/block/fdc.h"
32 33
#include "sysemu/sysemu.h"
#include "sysemu/arch_init.h"
34
#include "hw/boards.h"
P
Paolo Bonzini 已提交
35
#include "net/net.h"
P
Paolo Bonzini 已提交
36 37
#include "hw/scsi/esp.h"
#include "hw/mips/bios.h"
38
#include "hw/loader.h"
P
Paolo Bonzini 已提交
39 40 41
#include "hw/timer/mc146818rtc.h"
#include "hw/timer/i8254.h"
#include "hw/audio/pcspk.h"
42
#include "sysemu/block-backend.h"
43
#include "hw/sysbus.h"
44
#include "exec/address-spaces.h"
45
#include "sysemu/qtest.h"
46
#include "qemu/error-report.h"
A
aurel32 已提交
47 48 49 50

enum jazz_model_e
{
    JAZZ_MAGNUM,
A
aurel32 已提交
51
    JAZZ_PICA61,
A
aurel32 已提交
52 53 54 55
};

static void main_cpu_reset(void *opaque)
{
56 57 58
    MIPSCPU *cpu = opaque;

    cpu_reset(CPU(cpu));
A
aurel32 已提交
59 60
}

A
Avi Kivity 已提交
61
static uint64_t rtc_read(void *opaque, hwaddr addr, unsigned size)
A
aurel32 已提交
62
{
63
    uint8_t val;
64 65
    address_space_read(&address_space_memory, 0x90000071,
                       MEMTXATTRS_UNSPECIFIED, &val, 1);
66
    return val;
A
aurel32 已提交
67 68
}

A
Avi Kivity 已提交
69
static void rtc_write(void *opaque, hwaddr addr,
A
Avi Kivity 已提交
70
                      uint64_t val, unsigned size)
A
aurel32 已提交
71
{
72
    uint8_t buf = val & 0xff;
73 74
    address_space_write(&address_space_memory, 0x90000071,
                        MEMTXATTRS_UNSPECIFIED, &buf, 1);
A
aurel32 已提交
75 76
}

A
Avi Kivity 已提交
77 78 79 80
static const MemoryRegionOps rtc_ops = {
    .read = rtc_read,
    .write = rtc_write,
    .endianness = DEVICE_NATIVE_ENDIAN,
A
aurel32 已提交
81 82
};

A
Avi Kivity 已提交
83
static uint64_t dma_dummy_read(void *opaque, hwaddr addr,
A
Avi Kivity 已提交
84
                               unsigned size)
85 86 87
{
    /* Nothing to do. That is only to ensure that
     * the current DMA acknowledge cycle is completed. */
A
Avi Kivity 已提交
88
    return 0xff;
89 90
}

A
Avi Kivity 已提交
91
static void dma_dummy_write(void *opaque, hwaddr addr,
A
Avi Kivity 已提交
92 93 94 95 96
                            uint64_t val, unsigned size)
{
    /* Nothing to do. That is only to ensure that
     * the current DMA acknowledge cycle is completed. */
}
97

A
Avi Kivity 已提交
98 99 100 101
static const MemoryRegionOps dma_dummy_ops = {
    .read = dma_dummy_read,
    .write = dma_dummy_write,
    .endianness = DEVICE_NATIVE_ENDIAN,
102 103
};

A
aurel32 已提交
104 105 106
#define MAGNUM_BIOS_SIZE_MAX 0x7e000
#define MAGNUM_BIOS_SIZE (BIOS_SIZE < MAGNUM_BIOS_SIZE_MAX ? BIOS_SIZE : MAGNUM_BIOS_SIZE_MAX)

107 108 109 110 111 112 113 114 115 116 117 118
static CPUUnassignedAccess real_do_unassigned_access;
static void mips_jazz_do_unassigned_access(CPUState *cpu, hwaddr addr,
                                           bool is_write, bool is_exec,
                                           int opaque, unsigned size)
{
    if (!is_exec) {
        /* ignore invalid access (ie do not raise exception) */
        return;
    }
    (*real_do_unassigned_access)(cpu, addr, is_write, is_exec, opaque, size);
}

119
static void mips_jazz_init(MachineState *machine,
120
                           enum jazz_model_e jazz_model)
A
aurel32 已提交
121
{
122 123
    MemoryRegion *address_space = get_system_memory();
    const char *cpu_model = machine->cpu_model;
P
Paul Brook 已提交
124
    char *filename;
A
aurel32 已提交
125
    int bios_size, n;
126
    MIPSCPU *cpu;
127
    CPUClass *cc;
A
Andreas Färber 已提交
128
    CPUMIPSState *env;
H
Hervé Poussineau 已提交
129
    qemu_irq *i8259;
130
    rc4030_dma *dmas;
131
    MemoryRegion *rc4030_dma_mr;
132 133
    MemoryRegion *isa_mem = g_new(MemoryRegion, 1);
    MemoryRegion *isa_io = g_new(MemoryRegion, 1);
A
Avi Kivity 已提交
134
    MemoryRegion *rtc = g_new(MemoryRegion, 1);
135
    MemoryRegion *i8042 = g_new(MemoryRegion, 1);
A
Avi Kivity 已提交
136
    MemoryRegion *dma_dummy = g_new(MemoryRegion, 1);
A
aurel32 已提交
137
    NICInfo *nd;
H
Hervé Poussineau 已提交
138
    DeviceState *dev, *rc4030;
139
    SysBusDevice *sysbus;
140
    ISABus *isa_bus;
B
Blue Swirl 已提交
141
    ISADevice *pit;
G
Gerd Hoffmann 已提交
142
    DriveInfo *fds[MAX_FD];
143
    qemu_irq esp_reset, dma_enable;
A
Avi Kivity 已提交
144 145 146
    MemoryRegion *ram = g_new(MemoryRegion, 1);
    MemoryRegion *bios = g_new(MemoryRegion, 1);
    MemoryRegion *bios2 = g_new(MemoryRegion, 1);
A
aurel32 已提交
147 148 149 150 151

    /* init CPUs */
    if (cpu_model == NULL) {
        cpu_model = "R4000";
    }
152 153
    cpu = cpu_mips_init(cpu_model);
    if (cpu == NULL) {
A
aurel32 已提交
154 155 156
        fprintf(stderr, "Unable to find CPU definition\n");
        exit(1);
    }
157
    env = &cpu->env;
158
    qemu_register_reset(main_cpu_reset, cpu);
A
aurel32 已提交
159

160 161 162 163 164 165 166 167 168 169 170
    /* Chipset returns 0 in invalid reads and do not raise data exceptions.
     * However, we can't simply add a global memory region to catch
     * everything, as memory core directly call unassigned_mem_read/write
     * on some invalid accesses, which call do_unassigned_access on the
     * CPU, which raise an exception.
     * Handle that case by hijacking the do_unassigned_access method on
     * the CPU, and do not raise exceptions for data access. */
    cc = CPU_GET_CLASS(cpu);
    real_do_unassigned_access = cc->do_unassigned_access;
    cc->do_unassigned_access = mips_jazz_do_unassigned_access;

A
aurel32 已提交
171
    /* allocate RAM */
172 173
    memory_region_allocate_system_memory(ram, NULL, "mips_jazz.ram",
                                         machine->ram_size);
A
Avi Kivity 已提交
174
    memory_region_add_subregion(address_space, 0, ram);
175

176
    memory_region_init_ram(bios, NULL, "mips_jazz.bios", MAGNUM_BIOS_SIZE,
177
                           &error_fatal);
178
    vmstate_register_ram_global(bios);
A
Avi Kivity 已提交
179
    memory_region_set_readonly(bios, true);
180
    memory_region_init_alias(bios2, NULL, "mips_jazz.bios", bios,
A
Avi Kivity 已提交
181 182 183
                             0, MAGNUM_BIOS_SIZE);
    memory_region_add_subregion(address_space, 0x1fc00000LL, bios);
    memory_region_add_subregion(address_space, 0xfff00000LL, bios2);
A
aurel32 已提交
184 185

    /* load the BIOS image. */
186 187
    if (bios_name == NULL)
        bios_name = BIOS_FILENAME;
P
Paul Brook 已提交
188 189 190 191
    filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, bios_name);
    if (filename) {
        bios_size = load_image_targphys(filename, 0xfff00000LL,
                                        MAGNUM_BIOS_SIZE);
192
        g_free(filename);
P
Paul Brook 已提交
193 194 195
    } else {
        bios_size = -1;
    }
196
    if ((bios_size < 0 || bios_size > MAGNUM_BIOS_SIZE) && !qtest_enabled()) {
197 198
        error_report("Could not load MIPS bios '%s'", bios_name);
        exit(1);
A
aurel32 已提交
199 200 201 202 203 204 205
    }

    /* Init CPU internal devices */
    cpu_mips_irq_init_cpu(env);
    cpu_mips_clock_init(env);

    /* Chipset */
H
Hervé Poussineau 已提交
206 207 208 209 210 211 212 213
    rc4030 = rc4030_init(&dmas, &rc4030_dma_mr);
    sysbus = SYS_BUS_DEVICE(rc4030);
    sysbus_connect_irq(sysbus, 0, env->irq[6]);
    sysbus_connect_irq(sysbus, 1, env->irq[3]);
    memory_region_add_subregion(address_space, 0x80000000,
                                sysbus_mmio_get_region(sysbus, 0));
    memory_region_add_subregion(address_space, 0xf0000000,
                                sysbus_mmio_get_region(sysbus, 1));
214
    memory_region_init_io(dma_dummy, NULL, &dma_dummy_ops, NULL, "dummy_dma", 0x1000);
A
Avi Kivity 已提交
215
    memory_region_add_subregion(address_space, 0x8000d000, dma_dummy);
A
aurel32 已提交
216

217 218 219 220 221
    /* ISA bus: IO space at 0x90000000, mem space at 0x91000000 */
    memory_region_init(isa_io, NULL, "isa-io", 0x00010000);
    memory_region_init(isa_mem, NULL, "isa-mem", 0x01000000);
    memory_region_add_subregion(address_space, 0x90000000, isa_io);
    memory_region_add_subregion(address_space, 0x91000000, isa_mem);
222
    isa_bus = isa_bus_new(NULL, isa_mem, isa_io, &error_abort);
223

A
aurel32 已提交
224
    /* ISA devices */
225 226
    i8259 = i8259_init(isa_bus, env->irq[4]);
    isa_bus_irqs(isa_bus, i8259);
227
    DMA_init(0);
228
    pit = pit_init(isa_bus, 0x40, 0, NULL);
J
Jan Kiszka 已提交
229
    pcspk_init(isa_bus, pit);
A
aurel32 已提交
230 231 232 233

    /* Video card */
    switch (jazz_model) {
    case JAZZ_MAGNUM:
H
Hervé Poussineau 已提交
234 235
        dev = qdev_create(NULL, "sysbus-g364");
        qdev_init_nofail(dev);
236
        sysbus = SYS_BUS_DEVICE(dev);
H
Hervé Poussineau 已提交
237 238
        sysbus_mmio_map(sysbus, 0, 0x60080000);
        sysbus_mmio_map(sysbus, 1, 0x40000000);
H
Hervé Poussineau 已提交
239
        sysbus_connect_irq(sysbus, 0, qdev_get_gpio_in(rc4030, 3));
H
Hervé Poussineau 已提交
240 241
        {
            /* Simple ROM, so user doesn't have to provide one */
A
Avi Kivity 已提交
242
            MemoryRegion *rom_mr = g_new(MemoryRegion, 1);
243
            memory_region_init_ram(rom_mr, NULL, "g364fb.rom", 0x80000,
244
                                   &error_fatal);
245
            vmstate_register_ram_global(rom_mr);
A
Avi Kivity 已提交
246 247 248
            memory_region_set_readonly(rom_mr, true);
            uint8_t *rom = memory_region_get_ram_ptr(rom_mr);
            memory_region_add_subregion(address_space, 0x60000000, rom_mr);
H
Hervé Poussineau 已提交
249 250
            rom[0] = 0x10; /* Mips G364 */
        }
A
aurel32 已提交
251
        break;
A
aurel32 已提交
252
    case JAZZ_PICA61:
253
        isa_vga_mm_init(0x40000000, 0x60000000, 0, get_system_memory());
A
aurel32 已提交
254
        break;
A
aurel32 已提交
255 256 257 258 259
    default:
        break;
    }

    /* Network controller */
A
aurel32 已提交
260 261 262
    for (n = 0; n < nb_nics; n++) {
        nd = &nd_table[n];
        if (!nd->model)
263
            nd->model = g_strdup("dp83932");
A
aurel32 已提交
264
        if (strcmp(nd->model, "dp83932") == 0) {
H
Hervé Poussineau 已提交
265 266 267 268 269 270 271 272 273
            qemu_check_nic_model(nd, "dp83932");

            dev = qdev_create(NULL, "dp8393x");
            qdev_set_nic_properties(dev, nd);
            qdev_prop_set_uint8(dev, "it_shift", 2);
            qdev_prop_set_ptr(dev, "dma_mr", rc4030_dma_mr);
            qdev_init_nofail(dev);
            sysbus = SYS_BUS_DEVICE(dev);
            sysbus_mmio_map(sysbus, 0, 0x80001000);
274
            sysbus_mmio_map(sysbus, 1, 0x8000b000);
H
Hervé Poussineau 已提交
275
            sysbus_connect_irq(sysbus, 0, qdev_get_gpio_in(rc4030, 4));
A
aurel32 已提交
276
            break;
277
        } else if (is_help_option(nd->model)) {
A
aurel32 已提交
278 279 280 281 282 283 284
            fprintf(stderr, "qemu: Supported NICs: dp83932\n");
            exit(1);
        } else {
            fprintf(stderr, "qemu: Unsupported NIC: %s\n", nd->model);
            exit(1);
        }
    }
A
aurel32 已提交
285 286

    /* SCSI adapter */
P
Paul Brook 已提交
287 288
    esp_init(0x80002000, 0,
             rc4030_dma_read, rc4030_dma_write, dmas[0],
H
Hervé Poussineau 已提交
289
             qdev_get_gpio_in(rc4030, 5), &esp_reset, &dma_enable);
A
aurel32 已提交
290 291 292 293 294 295 296

    /* Floppy */
    if (drive_get_max_bus(IF_FLOPPY) >= MAX_FD) {
        fprintf(stderr, "qemu: too many floppy drives\n");
        exit(1);
    }
    for (n = 0; n < MAX_FD; n++) {
G
Gerd Hoffmann 已提交
297
        fds[n] = drive_get(IF_FLOPPY, 0, n);
A
aurel32 已提交
298
    }
H
Hervé Poussineau 已提交
299
    fdctrl_init_sysbus(qdev_get_gpio_in(rc4030, 1), 0, 0x80003000, fds);
A
aurel32 已提交
300 301

    /* Real time clock */
302
    rtc_init(isa_bus, 1980, NULL);
303
    memory_region_init_io(rtc, NULL, &rtc_ops, NULL, "rtc", 0x1000);
A
Avi Kivity 已提交
304
    memory_region_add_subregion(address_space, 0x80004000, rtc);
A
aurel32 已提交
305 306

    /* Keyboard (i8042) */
H
Hervé Poussineau 已提交
307 308
    i8042_mm_init(qdev_get_gpio_in(rc4030, 6), qdev_get_gpio_in(rc4030, 7),
                  i8042, 0x1000, 0x1);
309
    memory_region_add_subregion(address_space, 0x80005000, i8042);
A
aurel32 已提交
310 311

    /* Serial ports */
B
Blue Swirl 已提交
312
    if (serial_hds[0]) {
H
Hervé Poussineau 已提交
313 314
        serial_mm_init(address_space, 0x80006000, 0,
                       qdev_get_gpio_in(rc4030, 8), 8000000/16,
315
                       serial_hds[0], DEVICE_NATIVE_ENDIAN);
B
Blue Swirl 已提交
316 317
    }
    if (serial_hds[1]) {
H
Hervé Poussineau 已提交
318 319
        serial_mm_init(address_space, 0x80007000, 0,
                       qdev_get_gpio_in(rc4030, 9), 8000000/16,
320
                       serial_hds[1], DEVICE_NATIVE_ENDIAN);
B
Blue Swirl 已提交
321
    }
A
aurel32 已提交
322 323 324

    /* Parallel port */
    if (parallel_hds[0])
H
Hervé Poussineau 已提交
325 326
        parallel_mm_init(address_space, 0x80008000, 0,
                         qdev_get_gpio_in(rc4030, 0), parallel_hds[0]);
A
aurel32 已提交
327 328 329

    /* FIXME: missing Jazz sound at 0x8000c000, rc4030[2] */

330 331 332
    /* NVRAM */
    dev = qdev_create(NULL, "ds1225y");
    qdev_init_nofail(dev);
333
    sysbus = SYS_BUS_DEVICE(dev);
334
    sysbus_mmio_map(sysbus, 0, 0x80009000);
A
aurel32 已提交
335 336

    /* LED indicator */
H
Hervé Poussineau 已提交
337
    sysbus_create_simple("jazz-led", 0x8000f000, NULL);
A
aurel32 已提交
338 339 340
}

static
341
void mips_magnum_init(MachineState *machine)
A
aurel32 已提交
342
{
343
    mips_jazz_init(machine, JAZZ_MAGNUM);
A
aurel32 已提交
344 345
}

A
aurel32 已提交
346
static
347
void mips_pica61_init(MachineState *machine)
A
aurel32 已提交
348
{
349
    mips_jazz_init(machine, JAZZ_PICA61);
A
aurel32 已提交
350 351
}

352
static void mips_magnum_class_init(ObjectClass *oc, void *data)
353
{
354 355
    MachineClass *mc = MACHINE_CLASS(oc);

356 357 358 359
    mc->desc = "MIPS Magnum";
    mc->init = mips_magnum_init;
    mc->block_default_type = IF_SCSI;
}
A
aurel32 已提交
360

361 362 363 364 365
static const TypeInfo mips_magnum_type = {
    .name = MACHINE_TYPE_NAME("magnum"),
    .parent = TYPE_MACHINE,
    .class_init = mips_magnum_class_init,
};
366

367
static void mips_pica61_class_init(ObjectClass *oc, void *data)
368
{
369 370
    MachineClass *mc = MACHINE_CLASS(oc);

371 372 373
    mc->desc = "Acer Pica 61";
    mc->init = mips_pica61_init;
    mc->block_default_type = IF_SCSI;
374 375
}

376 377 378 379 380 381 382 383 384 385 386 387 388
static const TypeInfo mips_pica61_type = {
    .name = MACHINE_TYPE_NAME("pica61"),
    .parent = TYPE_MACHINE,
    .class_init = mips_pica61_class_init,
};

static void mips_jazz_machine_init(void)
{
    type_register_static(&mips_magnum_type);
    type_register_static(&mips_pica61_type);
}

machine_init(mips_jazz_machine_init)