sun4m.c 45.8 KB
Newer Older
1
/*
B
blueswir1 已提交
2
 * QEMU Sun4m & Sun4d & Sun4c System Emulator
3
 *
B
bellard 已提交
4
 * Copyright (c) 2003-2005 Fabrice Bellard
5
 *
6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */
P
Peter Maydell 已提交
24
#include "qemu/osdep.h"
25
#include "qapi/error.h"
26 27
#include "qemu-common.h"
#include "cpu.h"
28
#include "hw/sysbus.h"
29
#include "qemu/error-report.h"
30
#include "qemu/timer.h"
P
Paolo Bonzini 已提交
31 32 33 34
#include "hw/sparc/sun4m.h"
#include "hw/timer/m48t59.h"
#include "hw/sparc/sparc32_dma.h"
#include "hw/block/fdc.h"
35
#include "sysemu/sysemu.h"
P
Paolo Bonzini 已提交
36
#include "net/net.h"
37
#include "hw/boards.h"
38
#include "hw/nvram/openbios_firmware_abi.h"
P
Paolo Bonzini 已提交
39 40 41 42 43
#include "hw/scsi/esp.h"
#include "hw/i386/pc.h"
#include "hw/isa/isa.h"
#include "hw/nvram/fw_cfg.h"
#include "hw/char/escc.h"
44 45
#include "hw/empty_slot.h"
#include "hw/loader.h"
B
Blue Swirl 已提交
46
#include "elf.h"
47
#include "sysemu/block-backend.h"
48
#include "trace.h"
49
#include "qemu/cutils.h"
50

51 52 53 54
/*
 * Sun4m architecture was used in the following machines:
 *
 * SPARCserver 6xxMP/xx
B
blueswir1 已提交
55 56
 * SPARCclassic (SPARCclassic Server)(SPARCstation LC) (4/15),
 * SPARCclassic X (4/10)
57 58 59 60 61 62 63 64 65 66
 * SPARCstation LX/ZX (4/30)
 * SPARCstation Voyager
 * SPARCstation 10/xx, SPARCserver 10/xx
 * SPARCstation 5, SPARCserver 5
 * SPARCstation 20/xx, SPARCserver 20
 * SPARCstation 4
 *
 * See for example: http://www.sunhelp.org/faq/sunref1.html
 */

67
#define KERNEL_LOAD_ADDR     0x00004000
B
bellard 已提交
68
#define CMDLINE_ADDR         0x007ff000
B
bellard 已提交
69
#define INITRD_LOAD_ADDR     0x00800000
70
#define PROM_SIZE_MAX        (1024 * 1024)
B
blueswir1 已提交
71
#define PROM_VADDR           0xffd00000
B
blueswir1 已提交
72
#define PROM_FILENAME        "openbios-sparc32"
73
#define CFG_ADDR             0xd00000510ULL
74
#define FW_CFG_SUN4M_DEPTH   (FW_CFG_ARCH_LOCAL + 0x00)
75 76
#define FW_CFG_SUN4M_WIDTH   (FW_CFG_ARCH_LOCAL + 0x01)
#define FW_CFG_SUN4M_HEIGHT  (FW_CFG_ARCH_LOCAL + 0x02)
77

B
bellard 已提交
78
#define MAX_CPUS 16
79
#define MAX_PILS 16
80
#define MAX_VSIMMS 4
81

82 83
#define ESCC_CLOCK 4915200

84
struct sun4m_hwdef {
A
Avi Kivity 已提交
85 86 87 88 89 90
    hwaddr iommu_base, iommu_pad_base, iommu_pad_len, slavio_base;
    hwaddr intctl_base, counter_base, nvram_base, ms_kb_base;
    hwaddr serial_base, fd_base;
    hwaddr afx_base, idreg_base, dma_base, esp_base, le_base;
    hwaddr tcx_base, cs_base, apc_base, aux1_base, aux2_base;
    hwaddr bpp_base, dbri_base, sx_base;
91
    struct {
A
Avi Kivity 已提交
92
        hwaddr reg_base, vram_base;
93
    } vsimm[MAX_VSIMMS];
A
Avi Kivity 已提交
94
    hwaddr ecc_base;
95 96
    uint64_t max_mem;
    const char * const default_cpu_model;
97 98 99 100
    uint32_t ecc_version;
    uint32_t iommu_version;
    uint16_t machine_id;
    uint8_t nvram_machine_id;
101 102
};

103
void DMA_init(ISABus *bus, int high_page_enable)
B
Blue Swirl 已提交
104 105 106
{
}

107 108
static void fw_cfg_boot_set(void *opaque, const char *boot_device,
                            Error **errp)
B
blueswir1 已提交
109
{
110
    fw_cfg_modify_i16(opaque, FW_CFG_BOOT_DEVICE, boot_device[0]);
B
blueswir1 已提交
111 112
}

113
static void nvram_init(Nvram *nvram, uint8_t *macaddr,
114 115
                       const char *cmdline, const char *boot_devices,
                       ram_addr_t RAM_size, uint32_t kernel_size,
B
blueswir1 已提交
116
                       int width, int height, int depth,
117
                       int nvram_machine_id, const char *arch)
B
bellard 已提交
118
{
B
blueswir1 已提交
119
    unsigned int i;
B
blueswir1 已提交
120
    uint32_t start, end;
B
blueswir1 已提交
121 122
    uint8_t image[0x1ff0];
    struct OpenBIOS_nvpart_v1 *part_header;
123
    NvramClass *k = NVRAM_GET_CLASS(nvram);
B
blueswir1 已提交
124 125

    memset(image, '\0', sizeof(image));
B
bellard 已提交
126

127
    start = 0;
B
bellard 已提交
128

B
blueswir1 已提交
129 130
    // OpenBIOS nvram variables
    // Variable partition
B
blueswir1 已提交
131 132
    part_header = (struct OpenBIOS_nvpart_v1 *)&image[start];
    part_header->signature = OPENBIOS_PART_SYSTEM;
B
blueswir1 已提交
133
    pstrcpy(part_header->name, sizeof(part_header->name), "system");
B
blueswir1 已提交
134

B
blueswir1 已提交
135
    end = start + sizeof(struct OpenBIOS_nvpart_v1);
B
blueswir1 已提交
136
    for (i = 0; i < nb_prom_envs; i++)
B
blueswir1 已提交
137 138 139 140
        end = OpenBIOS_set_var(image, end, prom_envs[i]);

    // End marker
    image[end++] = '\0';
B
blueswir1 已提交
141 142

    end = start + ((end - start + 15) & ~15);
B
blueswir1 已提交
143
    OpenBIOS_finish_partition(part_header, end - start);
B
blueswir1 已提交
144 145 146

    // free partition
    start = end;
B
blueswir1 已提交
147 148
    part_header = (struct OpenBIOS_nvpart_v1 *)&image[start];
    part_header->signature = OPENBIOS_PART_FREE;
B
blueswir1 已提交
149
    pstrcpy(part_header->name, sizeof(part_header->name), "free");
B
blueswir1 已提交
150 151

    end = 0x1fd0;
B
blueswir1 已提交
152 153
    OpenBIOS_finish_partition(part_header, end - start);

154 155
    Sun_init_header((struct Sun_nvram *)&image[0x1fd8], macaddr,
                    nvram_machine_id);
B
blueswir1 已提交
156

157 158 159
    for (i = 0; i < sizeof(image); i++) {
        (k->write)(nvram, i, image[i]);
    }
B
bellard 已提交
160 161
}

162
static DeviceState *slavio_intctl;
B
bellard 已提交
163

164
void sun4m_hmp_info_pic(Monitor *mon, const QDict *qdict)
B
bellard 已提交
165
{
166
    if (slavio_intctl)
A
aliguori 已提交
167
        slavio_pic_info(mon, slavio_intctl);
B
bellard 已提交
168 169
}

170
void sun4m_hmp_info_irq(Monitor *mon, const QDict *qdict)
B
bellard 已提交
171
{
172
    if (slavio_intctl)
A
aliguori 已提交
173
        slavio_irq_info(mon, slavio_intctl);
B
bellard 已提交
174 175
}

A
Andreas Färber 已提交
176
void cpu_check_irqs(CPUSPARCState *env)
B
blueswir1 已提交
177
{
178 179
    CPUState *cs;

B
blueswir1 已提交
180 181 182 183 184 185 186 187 188
    if (env->pil_in && (env->interrupt_index == 0 ||
                        (env->interrupt_index & ~15) == TT_EXTINT)) {
        unsigned int i;

        for (i = 15; i > 0; i--) {
            if (env->pil_in & (1 << i)) {
                int old_interrupt = env->interrupt_index;

                env->interrupt_index = TT_EXTINT | i;
189
                if (old_interrupt != env->interrupt_index) {
190
                    cs = CPU(sparc_env_get_cpu(env));
191
                    trace_sun4m_cpu_interrupt(i);
192
                    cpu_interrupt(cs, CPU_INTERRUPT_HARD);
193
                }
B
blueswir1 已提交
194 195 196 197
                break;
            }
        }
    } else if (!env->pil_in && (env->interrupt_index & ~15) == TT_EXTINT) {
198
        cs = CPU(sparc_env_get_cpu(env));
199
        trace_sun4m_cpu_reset_interrupt(env->interrupt_index & 15);
B
blueswir1 已提交
200
        env->interrupt_index = 0;
201
        cpu_reset_interrupt(cs, CPU_INTERRUPT_HARD);
B
blueswir1 已提交
202 203 204
    }
}

205
static void cpu_kick_irq(SPARCCPU *cpu)
206
{
207
    CPUSPARCState *env = &cpu->env;
208
    CPUState *cs = CPU(cpu);
209

210
    cs->halted = 0;
211
    cpu_check_irqs(env);
212
    qemu_cpu_kick(cs);
213 214
}

215 216
static void cpu_set_irq(void *opaque, int irq, int level)
{
217 218
    SPARCCPU *cpu = opaque;
    CPUSPARCState *env = &cpu->env;
219 220

    if (level) {
221
        trace_sun4m_cpu_set_irq_raise(irq);
B
blueswir1 已提交
222
        env->pil_in |= 1 << irq;
223
        cpu_kick_irq(cpu);
224
    } else {
225
        trace_sun4m_cpu_set_irq_lower(irq);
B
blueswir1 已提交
226 227
        env->pil_in &= ~(1 << irq);
        cpu_check_irqs(env);
228 229 230 231 232 233 234
    }
}

static void dummy_cpu_set_irq(void *opaque, int irq, int level)
{
}

B
bellard 已提交
235 236
static void main_cpu_reset(void *opaque)
{
237
    SPARCCPU *cpu = opaque;
238
    CPUState *cs = CPU(cpu);
239

240 241
    cpu_reset(cs);
    cs->halted = 0;
242 243 244 245
}

static void secondary_cpu_reset(void *opaque)
{
246
    SPARCCPU *cpu = opaque;
247
    CPUState *cs = CPU(cpu);
248

249 250
    cpu_reset(cs);
    cs->halted = 1;
B
bellard 已提交
251 252
}

B
blueswir1 已提交
253 254
static void cpu_halt_signal(void *opaque, int irq, int level)
{
255 256
    if (level && current_cpu) {
        cpu_interrupt(current_cpu, CPU_INTERRUPT_HALT);
257
    }
B
blueswir1 已提交
258 259
}

260 261 262 263 264
static uint64_t translate_kernel_address(void *opaque, uint64_t addr)
{
    return addr - 0xf0000000ULL;
}

265
static unsigned long sun4m_load_kernel(const char *kernel_filename,
266
                                       const char *initrd_filename,
A
Anthony Liguori 已提交
267
                                       ram_addr_t RAM_size)
268 269 270 271
{
    int linux_boot;
    unsigned int i;
    long initrd_size, kernel_size;
272
    uint8_t *ptr;
273 274 275 276 277

    linux_boot = (kernel_filename != NULL);

    kernel_size = 0;
    if (linux_boot) {
B
Blue Swirl 已提交
278 279 280 281 282 283 284
        int bswap_needed;

#ifdef BSWAP_NEEDED
        bswap_needed = 1;
#else
        bswap_needed = 0;
#endif
285
        kernel_size = load_elf(kernel_filename, translate_kernel_address, NULL,
286
                               NULL, NULL, NULL, 1, EM_SPARC, 0, 0);
287
        if (kernel_size < 0)
288
            kernel_size = load_aout(kernel_filename, KERNEL_LOAD_ADDR,
B
Blue Swirl 已提交
289 290
                                    RAM_size - KERNEL_LOAD_ADDR, bswap_needed,
                                    TARGET_PAGE_SIZE);
291
        if (kernel_size < 0)
292 293 294
            kernel_size = load_image_targphys(kernel_filename,
                                              KERNEL_LOAD_ADDR,
                                              RAM_size - KERNEL_LOAD_ADDR);
295 296 297 298 299 300 301 302 303
        if (kernel_size < 0) {
            fprintf(stderr, "qemu: could not load kernel '%s'\n",
                    kernel_filename);
            exit(1);
        }

        /* load initrd */
        initrd_size = 0;
        if (initrd_filename) {
304 305 306
            initrd_size = load_image_targphys(initrd_filename,
                                              INITRD_LOAD_ADDR,
                                              RAM_size - INITRD_LOAD_ADDR);
307 308 309 310 311 312 313 314
            if (initrd_size < 0) {
                fprintf(stderr, "qemu: could not load initial ram disk '%s'\n",
                        initrd_filename);
                exit(1);
            }
        }
        if (initrd_size > 0) {
            for (i = 0; i < 64 * TARGET_PAGE_SIZE; i += TARGET_PAGE_SIZE) {
315 316 317 318
                ptr = rom_ptr(KERNEL_LOAD_ADDR + i);
                if (ldl_p(ptr) == 0x48647253) { // HdrS
                    stl_p(ptr + 16, INITRD_LOAD_ADDR);
                    stl_p(ptr + 20, initrd_size);
319 320 321 322 323 324 325 326
                    break;
                }
            }
        }
    }
    return kernel_size;
}

A
Avi Kivity 已提交
327
static void *iommu_init(hwaddr addr, uint32_t version, qemu_irq irq)
328 329 330 331 332 333
{
    DeviceState *dev;
    SysBusDevice *s;

    dev = qdev_create(NULL, "iommu");
    qdev_prop_set_uint32(dev, "version", version);
M
Markus Armbruster 已提交
334
    qdev_init_nofail(dev);
335
    s = SYS_BUS_DEVICE(dev);
336 337 338 339 340 341
    sysbus_connect_irq(s, 0, irq);
    sysbus_mmio_map(s, 0, addr);

    return s;
}

A
Avi Kivity 已提交
342
static void *sparc32_dma_init(hwaddr daddr, qemu_irq parent_irq,
B
Bob Breuer 已提交
343
                              void *iommu, qemu_irq *dev_irq, int is_ledma)
344 345 346 347 348 349
{
    DeviceState *dev;
    SysBusDevice *s;

    dev = qdev_create(NULL, "sparc32_dma");
    qdev_prop_set_ptr(dev, "iommu_opaque", iommu);
B
Bob Breuer 已提交
350
    qdev_prop_set_uint32(dev, "is_ledma", is_ledma);
M
Markus Armbruster 已提交
351
    qdev_init_nofail(dev);
352
    s = SYS_BUS_DEVICE(dev);
353 354 355 356 357 358 359
    sysbus_connect_irq(s, 0, parent_irq);
    *dev_irq = qdev_get_gpio_in(dev, 0);
    sysbus_mmio_map(s, 0, daddr);

    return s;
}

A
Avi Kivity 已提交
360
static void lance_init(NICInfo *nd, hwaddr leaddr,
361
                       void *dma_opaque, qemu_irq irq)
P
Paul Brook 已提交
362 363 364
{
    DeviceState *dev;
    SysBusDevice *s;
365
    qemu_irq reset;
P
Paul Brook 已提交
366 367 368 369

    qemu_check_nic_model(&nd_table[0], "lance");

    dev = qdev_create(NULL, "lance");
370
    qdev_set_nic_properties(dev, nd);
B
Blue Swirl 已提交
371
    qdev_prop_set_ptr(dev, "dma", dma_opaque);
M
Markus Armbruster 已提交
372
    qdev_init_nofail(dev);
373
    s = SYS_BUS_DEVICE(dev);
P
Paul Brook 已提交
374 375
    sysbus_mmio_map(s, 0, leaddr);
    sysbus_connect_irq(s, 0, irq);
376 377
    reset = qdev_get_gpio_in(dev, 0);
    qdev_connect_gpio_out(dma_opaque, 0, reset);
P
Paul Brook 已提交
378 379
}

A
Avi Kivity 已提交
380 381
static DeviceState *slavio_intctl_init(hwaddr addr,
                                       hwaddr addrg,
B
Blue Swirl 已提交
382
                                       qemu_irq **parent_irq)
383 384 385 386 387 388
{
    DeviceState *dev;
    SysBusDevice *s;
    unsigned int i, j;

    dev = qdev_create(NULL, "slavio_intctl");
M
Markus Armbruster 已提交
389
    qdev_init_nofail(dev);
390

391
    s = SYS_BUS_DEVICE(dev);
392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408

    for (i = 0; i < MAX_CPUS; i++) {
        for (j = 0; j < MAX_PILS; j++) {
            sysbus_connect_irq(s, i * MAX_PILS + j, parent_irq[i][j]);
        }
    }
    sysbus_mmio_map(s, 0, addrg);
    for (i = 0; i < MAX_CPUS; i++) {
        sysbus_mmio_map(s, i + 1, addr + i * TARGET_PAGE_SIZE);
    }

    return dev;
}

#define SYS_TIMER_OFFSET      0x10000ULL
#define CPU_TIMER_OFFSET(cpu) (0x1000ULL * cpu)

A
Avi Kivity 已提交
409
static void slavio_timer_init_all(hwaddr addr, qemu_irq master_irq,
410 411 412 413 414 415 416 417
                                  qemu_irq *cpu_irqs, unsigned int num_cpus)
{
    DeviceState *dev;
    SysBusDevice *s;
    unsigned int i;

    dev = qdev_create(NULL, "slavio_timer");
    qdev_prop_set_uint32(dev, "num_cpus", num_cpus);
M
Markus Armbruster 已提交
418
    qdev_init_nofail(dev);
419
    s = SYS_BUS_DEVICE(dev);
420 421 422 423
    sysbus_connect_irq(s, 0, master_irq);
    sysbus_mmio_map(s, 0, addr + SYS_TIMER_OFFSET);

    for (i = 0; i < MAX_CPUS; i++) {
A
Avi Kivity 已提交
424
        sysbus_mmio_map(s, i + 1, addr + (hwaddr)CPU_TIMER_OFFSET(i));
425 426 427 428
        sysbus_connect_irq(s, i + 1, cpu_irqs[i]);
    }
}

429 430 431 432 433 434 435 436 437 438 439
static qemu_irq  slavio_system_powerdown;

static void slavio_powerdown_req(Notifier *n, void *opaque)
{
    qemu_irq_raise(slavio_system_powerdown);
}

static Notifier slavio_system_powerdown_notifier = {
    .notify = slavio_powerdown_req
};

440 441 442 443 444 445
#define MISC_LEDS 0x01600000
#define MISC_CFG  0x01800000
#define MISC_DIAG 0x01a00000
#define MISC_MDM  0x01b00000
#define MISC_SYS  0x01f00000

A
Avi Kivity 已提交
446 447 448
static void slavio_misc_init(hwaddr base,
                             hwaddr aux1_base,
                             hwaddr aux2_base, qemu_irq irq,
449
                             qemu_irq fdc_tc)
450 451 452 453 454
{
    DeviceState *dev;
    SysBusDevice *s;

    dev = qdev_create(NULL, "slavio_misc");
M
Markus Armbruster 已提交
455
    qdev_init_nofail(dev);
456
    s = SYS_BUS_DEVICE(dev);
457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481
    if (base) {
        /* 8 bit registers */
        /* Slavio control */
        sysbus_mmio_map(s, 0, base + MISC_CFG);
        /* Diagnostics */
        sysbus_mmio_map(s, 1, base + MISC_DIAG);
        /* Modem control */
        sysbus_mmio_map(s, 2, base + MISC_MDM);
        /* 16 bit registers */
        /* ss600mp diag LEDs */
        sysbus_mmio_map(s, 3, base + MISC_LEDS);
        /* 32 bit registers */
        /* System control */
        sysbus_mmio_map(s, 4, base + MISC_SYS);
    }
    if (aux1_base) {
        /* AUX 1 (Misc System Functions) */
        sysbus_mmio_map(s, 5, aux1_base);
    }
    if (aux2_base) {
        /* AUX 2 (Software Powerdown Control) */
        sysbus_mmio_map(s, 6, aux2_base);
    }
    sysbus_connect_irq(s, 0, irq);
    sysbus_connect_irq(s, 1, fdc_tc);
482 483
    slavio_system_powerdown = qdev_get_gpio_in(dev, 0);
    qemu_register_powerdown_notifier(&slavio_system_powerdown_notifier);
484 485
}

A
Avi Kivity 已提交
486
static void ecc_init(hwaddr base, qemu_irq irq, uint32_t version)
487 488 489 490 491 492
{
    DeviceState *dev;
    SysBusDevice *s;

    dev = qdev_create(NULL, "eccmemctl");
    qdev_prop_set_uint32(dev, "version", version);
M
Markus Armbruster 已提交
493
    qdev_init_nofail(dev);
494
    s = SYS_BUS_DEVICE(dev);
495 496 497 498 499 500 501
    sysbus_connect_irq(s, 0, irq);
    sysbus_mmio_map(s, 0, base);
    if (version == 0) { // SS-600MP only
        sysbus_mmio_map(s, 1, base + 0x1000);
    }
}

A
Avi Kivity 已提交
502
static void apc_init(hwaddr power_base, qemu_irq cpu_halt)
503 504 505 506 507
{
    DeviceState *dev;
    SysBusDevice *s;

    dev = qdev_create(NULL, "apc");
M
Markus Armbruster 已提交
508
    qdev_init_nofail(dev);
509
    s = SYS_BUS_DEVICE(dev);
510 511 512 513 514
    /* Power management (APC) XXX: not a Slavio device */
    sysbus_mmio_map(s, 0, power_base);
    sysbus_connect_irq(s, 0, cpu_halt);
}

515
static void tcx_init(hwaddr addr, qemu_irq irq, int vram_size, int width,
516 517 518 519 520 521 522 523 524 525
                     int height, int depth)
{
    DeviceState *dev;
    SysBusDevice *s;

    dev = qdev_create(NULL, "SUNW,tcx");
    qdev_prop_set_uint32(dev, "vram_size", vram_size);
    qdev_prop_set_uint16(dev, "width", width);
    qdev_prop_set_uint16(dev, "height", height);
    qdev_prop_set_uint16(dev, "depth", depth);
526
    qdev_prop_set_uint64(dev, "prom_addr", addr);
M
Markus Armbruster 已提交
527
    qdev_init_nofail(dev);
528
    s = SYS_BUS_DEVICE(dev);
529 530

    /* 10/ROM : FCode ROM */
531
    sysbus_mmio_map(s, 0, addr);
532 533 534 535 536 537 538 539 540 541 542 543 544 545 546
    /* 2/STIP : Stipple */
    sysbus_mmio_map(s, 1, addr + 0x04000000ULL);
    /* 3/BLIT : Blitter */
    sysbus_mmio_map(s, 2, addr + 0x06000000ULL);
    /* 5/RSTIP : Raw Stipple */
    sysbus_mmio_map(s, 3, addr + 0x0c000000ULL);
    /* 6/RBLIT : Raw Blitter */
    sysbus_mmio_map(s, 4, addr + 0x0e000000ULL);
    /* 7/TEC : Transform Engine */
    sysbus_mmio_map(s, 5, addr + 0x00700000ULL);
    /* 8/CMAP  : DAC */
    sysbus_mmio_map(s, 6, addr + 0x00200000ULL);
    /* 9/THC : */
    if (depth == 8) {
        sysbus_mmio_map(s, 7, addr + 0x00300000ULL);
547
    } else {
548
        sysbus_mmio_map(s, 7, addr + 0x00301000ULL);
549
    }
550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565
    /* 11/DHC : */
    sysbus_mmio_map(s, 8, addr + 0x00240000ULL);
    /* 12/ALT : */
    sysbus_mmio_map(s, 9, addr + 0x00280000ULL);
    /* 0/DFB8 : 8-bit plane */
    sysbus_mmio_map(s, 10, addr + 0x00800000ULL);
    /* 1/DFB24 : 24bit plane */
    sysbus_mmio_map(s, 11, addr + 0x02000000ULL);
    /* 4/RDFB32: Raw framebuffer. Control plane */
    sysbus_mmio_map(s, 12, addr + 0x0a000000ULL);
    /* 9/THC24bits : NetBSD writes here even with 8-bit display: dummy */
    if (depth == 8) {
        sysbus_mmio_map(s, 13, addr + 0x00301000ULL);
    }

    sysbus_connect_irq(s, 0, irq);
566 567
}

568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592
static void cg3_init(hwaddr addr, qemu_irq irq, int vram_size, int width,
                     int height, int depth)
{
    DeviceState *dev;
    SysBusDevice *s;

    dev = qdev_create(NULL, "cgthree");
    qdev_prop_set_uint32(dev, "vram-size", vram_size);
    qdev_prop_set_uint16(dev, "width", width);
    qdev_prop_set_uint16(dev, "height", height);
    qdev_prop_set_uint16(dev, "depth", depth);
    qdev_prop_set_uint64(dev, "prom-addr", addr);
    qdev_init_nofail(dev);
    s = SYS_BUS_DEVICE(dev);

    /* FCode ROM */
    sysbus_mmio_map(s, 0, addr);
    /* DAC */
    sysbus_mmio_map(s, 1, addr + 0x400000ULL);
    /* 8-bit plane */
    sysbus_mmio_map(s, 2, addr + 0x800000ULL);

    sysbus_connect_irq(s, 0, irq);
}

B
Blue Swirl 已提交
593
/* NCR89C100/MACIO Internal ID register */
594 595 596

#define TYPE_MACIO_ID_REGISTER "macio_idreg"

B
Blue Swirl 已提交
597 598
static const uint8_t idreg_data[] = { 0xfe, 0x81, 0x01, 0x03 };

A
Avi Kivity 已提交
599
static void idreg_init(hwaddr addr)
B
Blue Swirl 已提交
600 601 602 603
{
    DeviceState *dev;
    SysBusDevice *s;

604
    dev = qdev_create(NULL, TYPE_MACIO_ID_REGISTER);
M
Markus Armbruster 已提交
605
    qdev_init_nofail(dev);
606
    s = SYS_BUS_DEVICE(dev);
B
Blue Swirl 已提交
607 608

    sysbus_mmio_map(s, 0, addr);
609 610
    cpu_physical_memory_write_rom(&address_space_memory,
                                  addr, idreg_data, sizeof(idreg_data));
B
Blue Swirl 已提交
611 612
}

613 614 615
#define MACIO_ID_REGISTER(obj) \
    OBJECT_CHECK(IDRegState, (obj), TYPE_MACIO_ID_REGISTER)

A
Avi Kivity 已提交
616
typedef struct IDRegState {
617 618
    SysBusDevice parent_obj;

A
Avi Kivity 已提交
619 620 621
    MemoryRegion mem;
} IDRegState;

622
static int idreg_init1(SysBusDevice *dev)
B
Blue Swirl 已提交
623
{
624
    IDRegState *s = MACIO_ID_REGISTER(dev);
B
Blue Swirl 已提交
625

626
    memory_region_init_ram(&s->mem, OBJECT(s),
627
                           "sun4m.idreg", sizeof(idreg_data), &error_fatal);
628
    vmstate_register_ram_global(&s->mem);
A
Avi Kivity 已提交
629
    memory_region_set_readonly(&s->mem, true);
630
    sysbus_init_mmio(dev, &s->mem);
631
    return 0;
B
Blue Swirl 已提交
632 633
}

634 635 636 637 638 639 640
static void idreg_class_init(ObjectClass *klass, void *data)
{
    SysBusDeviceClass *k = SYS_BUS_DEVICE_CLASS(klass);

    k->init = idreg_init1;
}

641
static const TypeInfo idreg_info = {
642
    .name          = TYPE_MACIO_ID_REGISTER,
643 644 645
    .parent        = TYPE_SYS_BUS_DEVICE,
    .instance_size = sizeof(IDRegState),
    .class_init    = idreg_class_init,
B
Blue Swirl 已提交
646 647
};

648 649 650
#define TYPE_TCX_AFX "tcx_afx"
#define TCX_AFX(obj) OBJECT_CHECK(AFXState, (obj), TYPE_TCX_AFX)

A
Avi Kivity 已提交
651
typedef struct AFXState {
652 653
    SysBusDevice parent_obj;

A
Avi Kivity 已提交
654 655 656
    MemoryRegion mem;
} AFXState;

A
Artyom Tarasenko 已提交
657
/* SS-5 TCX AFX register */
A
Avi Kivity 已提交
658
static void afx_init(hwaddr addr)
A
Artyom Tarasenko 已提交
659 660 661 662
{
    DeviceState *dev;
    SysBusDevice *s;

663
    dev = qdev_create(NULL, TYPE_TCX_AFX);
A
Artyom Tarasenko 已提交
664
    qdev_init_nofail(dev);
665
    s = SYS_BUS_DEVICE(dev);
A
Artyom Tarasenko 已提交
666 667 668 669 670 671

    sysbus_mmio_map(s, 0, addr);
}

static int afx_init1(SysBusDevice *dev)
{
672
    AFXState *s = TCX_AFX(dev);
A
Artyom Tarasenko 已提交
673

674
    memory_region_init_ram(&s->mem, OBJECT(s), "sun4m.afx", 4, &error_fatal);
675
    vmstate_register_ram_global(&s->mem);
676
    sysbus_init_mmio(dev, &s->mem);
A
Artyom Tarasenko 已提交
677 678 679
    return 0;
}

680 681 682 683 684 685 686
static void afx_class_init(ObjectClass *klass, void *data)
{
    SysBusDeviceClass *k = SYS_BUS_DEVICE_CLASS(klass);

    k->init = afx_init1;
}

687
static const TypeInfo afx_info = {
688
    .name          = TYPE_TCX_AFX,
689 690 691
    .parent        = TYPE_SYS_BUS_DEVICE,
    .instance_size = sizeof(AFXState),
    .class_init    = afx_class_init,
A
Artyom Tarasenko 已提交
692 693
};

694 695 696
#define TYPE_OPENPROM "openprom"
#define OPENPROM(obj) OBJECT_CHECK(PROMState, (obj), TYPE_OPENPROM)

A
Avi Kivity 已提交
697
typedef struct PROMState {
698 699
    SysBusDevice parent_obj;

A
Avi Kivity 已提交
700 701 702
    MemoryRegion prom;
} PROMState;

B
Blue Swirl 已提交
703
/* Boot PROM (OpenBIOS) */
704 705
static uint64_t translate_prom_address(void *opaque, uint64_t addr)
{
A
Avi Kivity 已提交
706
    hwaddr *base_addr = (hwaddr *)opaque;
707 708 709
    return addr + *base_addr - PROM_VADDR;
}

A
Avi Kivity 已提交
710
static void prom_init(hwaddr addr, const char *bios_name)
B
Blue Swirl 已提交
711 712 713 714 715 716
{
    DeviceState *dev;
    SysBusDevice *s;
    char *filename;
    int ret;

717
    dev = qdev_create(NULL, TYPE_OPENPROM);
M
Markus Armbruster 已提交
718
    qdev_init_nofail(dev);
719
    s = SYS_BUS_DEVICE(dev);
B
Blue Swirl 已提交
720 721 722 723 724 725 726 727 728

    sysbus_mmio_map(s, 0, addr);

    /* load boot prom */
    if (bios_name == NULL) {
        bios_name = PROM_FILENAME;
    }
    filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, bios_name);
    if (filename) {
729
        ret = load_elf(filename, translate_prom_address, &addr, NULL,
730
                       NULL, NULL, 1, EM_SPARC, 0, 0);
B
Blue Swirl 已提交
731 732 733
        if (ret < 0 || ret > PROM_SIZE_MAX) {
            ret = load_image_targphys(filename, addr, PROM_SIZE_MAX);
        }
734
        g_free(filename);
B
Blue Swirl 已提交
735 736 737 738 739 740 741 742 743
    } else {
        ret = -1;
    }
    if (ret < 0 || ret > PROM_SIZE_MAX) {
        fprintf(stderr, "qemu: could not load prom '%s'\n", bios_name);
        exit(1);
    }
}

744
static int prom_init1(SysBusDevice *dev)
B
Blue Swirl 已提交
745
{
746
    PROMState *s = OPENPROM(dev);
B
Blue Swirl 已提交
747

748
    memory_region_init_ram(&s->prom, OBJECT(s), "sun4m.prom", PROM_SIZE_MAX,
749
                           &error_fatal);
750
    vmstate_register_ram_global(&s->prom);
A
Avi Kivity 已提交
751
    memory_region_set_readonly(&s->prom, true);
752
    sysbus_init_mmio(dev, &s->prom);
753
    return 0;
B
Blue Swirl 已提交
754 755
}

756 757 758 759 760 761
static Property prom_properties[] = {
    {/* end of property list */},
};

static void prom_class_init(ObjectClass *klass, void *data)
{
762
    DeviceClass *dc = DEVICE_CLASS(klass);
763 764 765
    SysBusDeviceClass *k = SYS_BUS_DEVICE_CLASS(klass);

    k->init = prom_init1;
766
    dc->props = prom_properties;
767 768
}

769
static const TypeInfo prom_info = {
770
    .name          = TYPE_OPENPROM,
771 772 773
    .parent        = TYPE_SYS_BUS_DEVICE,
    .instance_size = sizeof(PROMState),
    .class_init    = prom_class_init,
B
Blue Swirl 已提交
774 775
};

776 777 778 779 780 781
#define TYPE_SUN4M_MEMORY "memory"
#define SUN4M_RAM(obj) OBJECT_CHECK(RamDevice, (obj), TYPE_SUN4M_MEMORY)

typedef struct RamDevice {
    SysBusDevice parent_obj;

A
Avi Kivity 已提交
782
    MemoryRegion ram;
783
    uint64_t size;
G
Gerd Hoffmann 已提交
784 785
} RamDevice;

B
Blue Swirl 已提交
786
/* System RAM */
787
static int ram_init1(SysBusDevice *dev)
B
Blue Swirl 已提交
788
{
789
    RamDevice *d = SUN4M_RAM(dev);
B
Blue Swirl 已提交
790

791 792
    memory_region_allocate_system_memory(&d->ram, OBJECT(d), "sun4m.ram",
                                         d->size);
793
    sysbus_init_mmio(dev, &d->ram);
794
    return 0;
B
Blue Swirl 已提交
795 796
}

A
Avi Kivity 已提交
797
static void ram_init(hwaddr addr, ram_addr_t RAM_size,
B
Blue Swirl 已提交
798 799 800 801
                     uint64_t max_mem)
{
    DeviceState *dev;
    SysBusDevice *s;
G
Gerd Hoffmann 已提交
802
    RamDevice *d;
B
Blue Swirl 已提交
803 804 805 806 807 808 809 810 811 812

    /* allocate RAM */
    if ((uint64_t)RAM_size > max_mem) {
        fprintf(stderr,
                "qemu: Too much memory for this machine: %d, maximum %d\n",
                (unsigned int)(RAM_size / (1024 * 1024)),
                (unsigned int)(max_mem / (1024 * 1024)));
        exit(1);
    }
    dev = qdev_create(NULL, "memory");
813
    s = SYS_BUS_DEVICE(dev);
B
Blue Swirl 已提交
814

815
    d = SUN4M_RAM(dev);
G
Gerd Hoffmann 已提交
816
    d->size = RAM_size;
M
Markus Armbruster 已提交
817
    qdev_init_nofail(dev);
G
Gerd Hoffmann 已提交
818

B
Blue Swirl 已提交
819 820 821
    sysbus_mmio_map(s, 0, addr);
}

822 823 824 825 826 827 828
static Property ram_properties[] = {
    DEFINE_PROP_UINT64("size", RamDevice, size, 0),
    DEFINE_PROP_END_OF_LIST(),
};

static void ram_class_init(ObjectClass *klass, void *data)
{
829
    DeviceClass *dc = DEVICE_CLASS(klass);
830 831 832
    SysBusDeviceClass *k = SYS_BUS_DEVICE_CLASS(klass);

    k->init = ram_init1;
833
    dc->props = ram_properties;
834 835
}

836
static const TypeInfo ram_info = {
837
    .name          = TYPE_SUN4M_MEMORY,
838 839 840
    .parent        = TYPE_SYS_BUS_DEVICE,
    .instance_size = sizeof(RamDevice),
    .class_init    = ram_class_init,
B
Blue Swirl 已提交
841 842
};

843 844
static void cpu_devinit(const char *cpu_model, unsigned int id,
                        uint64_t prom_addr, qemu_irq **cpu_irqs)
B
Blue Swirl 已提交
845
{
846
    CPUState *cs;
847
    SPARCCPU *cpu;
A
Andreas Färber 已提交
848
    CPUSPARCState *env;
B
Blue Swirl 已提交
849

850 851
    cpu = cpu_sparc_init(cpu_model);
    if (cpu == NULL) {
B
Blue Swirl 已提交
852 853 854
        fprintf(stderr, "qemu: Unable to find Sparc CPU definition\n");
        exit(1);
    }
855
    env = &cpu->env;
B
Blue Swirl 已提交
856 857 858

    cpu_sparc_set_id(env, id);
    if (id == 0) {
859
        qemu_register_reset(main_cpu_reset, cpu);
B
Blue Swirl 已提交
860
    } else {
861
        qemu_register_reset(secondary_cpu_reset, cpu);
862 863
        cs = CPU(cpu);
        cs->halted = 1;
B
Blue Swirl 已提交
864
    }
865
    *cpu_irqs = qemu_allocate_irqs(cpu_set_irq, cpu, MAX_PILS);
B
Blue Swirl 已提交
866 867 868
    env->prom_addr = prom_addr;
}

B
Blue Swirl 已提交
869 870 871 872
static void dummy_fdc_tc(void *opaque, int irq, int level)
{
}

873
static void sun4m_hw_init(const struct sun4m_hwdef *hwdef,
874
                          MachineState *machine)
875
{
876
    const char *cpu_model = machine->cpu_model;
B
bellard 已提交
877
    unsigned int i;
P
Paul Brook 已提交
878
    void *iommu, *espdma, *ledma, *nvram;
879
    qemu_irq *cpu_irqs[MAX_CPUS], slavio_irq[32], slavio_cpu_irq[MAX_CPUS],
880
        espdma_irq, ledma_irq;
881
    qemu_irq esp_reset, dma_enable;
882
    qemu_irq fdc_tc;
B
blueswir1 已提交
883
    unsigned long kernel_size;
G
Gerd Hoffmann 已提交
884
    DriveInfo *fd[MAX_FD];
L
Laszlo Ersek 已提交
885
    FWCfgState *fw_cfg;
886
    unsigned int num_vsimms;
887

B
bellard 已提交
888
    /* init CPUs */
889 890
    if (!cpu_model)
        cpu_model = hwdef->default_cpu_model;
891

B
bellard 已提交
892
    for(i = 0; i < smp_cpus; i++) {
893
        cpu_devinit(cpu_model, i, hwdef->slavio_base, &cpu_irqs[i]);
B
bellard 已提交
894
    }
895 896 897 898

    for (i = smp_cpus; i < MAX_CPUS; i++)
        cpu_irqs[i] = qemu_allocate_irqs(dummy_cpu_set_irq, NULL, MAX_PILS);

899 900

    /* set up devices */
901
    ram_init(0, machine->ram_size, hwdef->max_mem);
902 903
    /* models without ECC don't trap when missing ram is accessed */
    if (!hwdef->ecc_base) {
904
        empty_slot_init(machine->ram_size, hwdef->max_mem - machine->ram_size);
905
    }
B
Blue Swirl 已提交
906

B
Blue Swirl 已提交
907 908
    prom_init(hwdef->slavio_base, bios_name);

909 910
    slavio_intctl = slavio_intctl_init(hwdef->intctl_base,
                                       hwdef->intctl_base + 0x10000ULL,
B
Blue Swirl 已提交
911
                                       cpu_irqs);
912 913

    for (i = 0; i < 32; i++) {
914
        slavio_irq[i] = qdev_get_gpio_in(slavio_intctl, i);
915 916
    }
    for (i = 0; i < MAX_CPUS; i++) {
917
        slavio_cpu_irq[i] = qdev_get_gpio_in(slavio_intctl, 32 + i);
918
    }
919

920
    if (hwdef->idreg_base) {
B
Blue Swirl 已提交
921
        idreg_init(hwdef->idreg_base);
B
blueswir1 已提交
922 923
    }

A
Artyom Tarasenko 已提交
924 925 926 927
    if (hwdef->afx_base) {
        afx_init(hwdef->afx_base);
    }

928
    iommu = iommu_init(hwdef->iommu_base, hwdef->iommu_version,
929
                       slavio_irq[30]);
930

931 932 933 934 935 936 937 938
    if (hwdef->iommu_pad_base) {
        /* On the real hardware (SS-5, LX) the MMU is not padded, but aliased.
           Software shouldn't use aliased addresses, neither should it crash
           when does. Using empty_slot instead of aliasing can help with
           debugging such accesses */
        empty_slot_init(hwdef->iommu_pad_base,hwdef->iommu_pad_len);
    }

939
    espdma = sparc32_dma_init(hwdef->dma_base, slavio_irq[18],
B
Bob Breuer 已提交
940
                              iommu, &espdma_irq, 0);
941

B
blueswir1 已提交
942
    ledma = sparc32_dma_init(hwdef->dma_base + 16ULL,
B
Bob Breuer 已提交
943
                             slavio_irq[16], iommu, &ledma_irq, 1);
B
bellard 已提交
944

B
blueswir1 已提交
945
    if (graphic_depth != 8 && graphic_depth != 24) {
946
        error_report("Unsupported depth: %d", graphic_depth);
B
blueswir1 已提交
947 948
        exit (1);
    }
949 950
    num_vsimms = 0;
    if (num_vsimms == 0) {
951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979
        if (vga_interface_type == VGA_CG3) {
            if (graphic_depth != 8) {
                error_report("Unsupported depth: %d", graphic_depth);
                exit(1);
            }

            if (!(graphic_width == 1024 && graphic_height == 768) &&
                !(graphic_width == 1152 && graphic_height == 900)) {
                error_report("Unsupported resolution: %d x %d", graphic_width,
                             graphic_height);
                exit(1);
            }

            /* sbus irq 5 */
            cg3_init(hwdef->tcx_base, slavio_irq[11], 0x00100000,
                     graphic_width, graphic_height, graphic_depth);
        } else {
            /* If no display specified, default to TCX */
            if (graphic_depth != 8 && graphic_depth != 24) {
                error_report("Unsupported depth: %d", graphic_depth);
                exit(1);
            }

            if (!(graphic_width == 1024 && graphic_height == 768)) {
                error_report("Unsupported resolution: %d x %d",
                             graphic_width, graphic_height);
                exit(1);
            }

980 981
            tcx_init(hwdef->tcx_base, slavio_irq[11], 0x00100000,
                     graphic_width, graphic_height, graphic_depth);
982
        }
983 984 985 986 987 988 989 990 991 992 993 994
    }

    for (i = num_vsimms; i < MAX_VSIMMS; i++) {
        /* vsimm registers probed by OBP */
        if (hwdef->vsimm[i].reg_base) {
            empty_slot_init(hwdef->vsimm[i].reg_base, 0x2000);
        }
    }

    if (hwdef->sx_base) {
        empty_slot_init(hwdef->sx_base, 0x2000);
    }
995

996
    lance_init(&nd_table[0], hwdef->le_base, ledma, ledma_irq);
997

998
    nvram = m48t59_init(slavio_irq[0], hwdef->nvram_base, 0, 0x2000, 1968, 8);
B
blueswir1 已提交
999

1000
    slavio_timer_init_all(hwdef->counter_base, slavio_irq[19], slavio_cpu_irq, smp_cpus);
B
blueswir1 已提交
1001

1002
    slavio_serial_ms_kbd_init(hwdef->ms_kb_base, slavio_irq[14],
1003
                              !machine->enable_graphics, ESCC_CLOCK, 1);
S
Stefan Weil 已提交
1004 1005
    /* Slavio TTYA (base+4, Linux ttyS0) is the first QEMU serial device
       Slavio TTYB (base+0, Linux ttyS1) is the second QEMU serial device */
1006
    escc_init(hwdef->serial_base, slavio_irq[15], slavio_irq[15],
A
aurel32 已提交
1007
              serial_hds[0], serial_hds[1], ESCC_CLOCK, 1);
B
blueswir1 已提交
1008

1009
    if (hwdef->apc_base) {
1010
        apc_init(hwdef->apc_base, qemu_allocate_irq(cpu_halt_signal, NULL, 0));
1011
    }
B
blueswir1 已提交
1012

1013
    if (hwdef->fd_base) {
T
ths 已提交
1014
        /* there is zero or one floppy drive */
1015
        memset(fd, 0, sizeof(fd));
G
Gerd Hoffmann 已提交
1016
        fd[0] = drive_get(IF_FLOPPY, 0, 0);
1017
        sun4m_fdctrl_init(slavio_irq[22], hwdef->fd_base, fd,
1018
                          &fdc_tc);
B
Blue Swirl 已提交
1019
    } else {
1020
        fdc_tc = qemu_allocate_irq(dummy_fdc_tc, NULL, 0);
T
ths 已提交
1021 1022
    }

B
Blue Swirl 已提交
1023 1024 1025
    slavio_misc_init(hwdef->slavio_base, hwdef->aux1_base, hwdef->aux2_base,
                     slavio_irq[30], fdc_tc);

T
ths 已提交
1026 1027 1028 1029 1030
    if (drive_get_max_bus(IF_SCSI) > 0) {
        fprintf(stderr, "qemu: too many SCSI bus\n");
        exit(1);
    }

P
Paul Brook 已提交
1031 1032
    esp_init(hwdef->esp_base, 2,
             espdma_memory_read, espdma_memory_write,
1033
             espdma, espdma_irq, &esp_reset, &dma_enable);
1034

1035 1036
    qdev_connect_gpio_out(espdma, 0, esp_reset);
    qdev_connect_gpio_out(espdma, 1, dma_enable);
1037

B
Blue Swirl 已提交
1038 1039
    if (hwdef->cs_base) {
        sysbus_create_simple("SUNW,CS4231", hwdef->cs_base,
1040
                             slavio_irq[5]);
B
Blue Swirl 已提交
1041
    }
1042

1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055
    if (hwdef->dbri_base) {
        /* ISDN chip with attached CS4215 audio codec */
        /* prom space */
        empty_slot_init(hwdef->dbri_base+0x1000, 0x30);
        /* reg space */
        empty_slot_init(hwdef->dbri_base+0x10000, 0x100);
    }

    if (hwdef->bpp_base) {
        /* parallel port */
        empty_slot_init(hwdef->bpp_base, 0x20);
    }

1056 1057 1058
    kernel_size = sun4m_load_kernel(machine->kernel_filename,
                                    machine->initrd_filename,
                                    machine->ram_size);
1059

1060 1061 1062 1063
    nvram_init(nvram, (uint8_t *)&nd_table[0].macaddr, machine->kernel_cmdline,
               machine->boot_order, machine->ram_size, kernel_size,
               graphic_width, graphic_height, graphic_depth,
               hwdef->nvram_machine_id, "Sun4m");
1064

1065
    if (hwdef->ecc_base)
1066
        ecc_init(hwdef->ecc_base, slavio_irq[28],
1067
                 hwdef->ecc_version);
1068

1069
    fw_cfg = fw_cfg_init_mem(CFG_ADDR, CFG_ADDR + 2);
1070
    fw_cfg_add_i16(fw_cfg, FW_CFG_MAX_CPUS, (uint16_t)max_cpus);
1071 1072
    fw_cfg_add_i64(fw_cfg, FW_CFG_RAM_SIZE, (uint64_t)ram_size);
    fw_cfg_add_i16(fw_cfg, FW_CFG_MACHINE_ID, hwdef->machine_id);
1073
    fw_cfg_add_i16(fw_cfg, FW_CFG_SUN4M_DEPTH, graphic_depth);
1074 1075
    fw_cfg_add_i16(fw_cfg, FW_CFG_SUN4M_WIDTH, graphic_width);
    fw_cfg_add_i16(fw_cfg, FW_CFG_SUN4M_HEIGHT, graphic_height);
1076 1077
    fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_ADDR, KERNEL_LOAD_ADDR);
    fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_SIZE, kernel_size);
1078
    if (machine->kernel_cmdline) {
1079
        fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_CMDLINE, CMDLINE_ADDR);
1080
        pstrcpy_targphys("cmdline", CMDLINE_ADDR, TARGET_PAGE_SIZE,
1081 1082
                         machine->kernel_cmdline);
        fw_cfg_add_string(fw_cfg, FW_CFG_CMDLINE_DATA, machine->kernel_cmdline);
B
Blue Swirl 已提交
1083
        fw_cfg_add_i32(fw_cfg, FW_CFG_CMDLINE_SIZE,
1084
                       strlen(machine->kernel_cmdline) + 1);
1085 1086
    } else {
        fw_cfg_add_i32(fw_cfg, FW_CFG_KERNEL_CMDLINE, 0);
B
Blue Swirl 已提交
1087
        fw_cfg_add_i32(fw_cfg, FW_CFG_CMDLINE_SIZE, 0);
1088 1089 1090
    }
    fw_cfg_add_i32(fw_cfg, FW_CFG_INITRD_ADDR, INITRD_LOAD_ADDR);
    fw_cfg_add_i32(fw_cfg, FW_CFG_INITRD_SIZE, 0); // not used
1091
    fw_cfg_add_i16(fw_cfg, FW_CFG_BOOT_DEVICE, machine->boot_order[0]);
1092
    qemu_register_boot_set(fw_cfg_boot_set, fw_cfg);
1093 1094
}

1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106
enum {
    ss5_id = 32,
    vger_id,
    lx_id,
    ss4_id,
    scls_id,
    sbook_id,
    ss10_id = 64,
    ss20_id,
    ss600mp_id,
};

1107
static const struct sun4m_hwdef sun4m_hwdefs[] = {
1108 1109 1110
    /* SS-5 */
    {
        .iommu_base   = 0x10000000,
1111 1112
        .iommu_pad_base = 0x10004000,
        .iommu_pad_len  = 0x0fffb000,
1113 1114
        .tcx_base     = 0x50000000,
        .cs_base      = 0x6c000000,
B
blueswir1 已提交
1115
        .slavio_base  = 0x70000000,
1116 1117 1118 1119 1120 1121
        .ms_kb_base   = 0x71000000,
        .serial_base  = 0x71100000,
        .nvram_base   = 0x71200000,
        .fd_base      = 0x71400000,
        .counter_base = 0x71d00000,
        .intctl_base  = 0x71e00000,
B
blueswir1 已提交
1122
        .idreg_base   = 0x78000000,
1123 1124 1125
        .dma_base     = 0x78400000,
        .esp_base     = 0x78800000,
        .le_base      = 0x78c00000,
1126
        .apc_base     = 0x6a000000,
A
Artyom Tarasenko 已提交
1127
        .afx_base     = 0x6e000000,
1128 1129
        .aux1_base    = 0x71900000,
        .aux2_base    = 0x71910000,
1130 1131
        .nvram_machine_id = 0x80,
        .machine_id = ss5_id,
1132
        .iommu_version = 0x05000000,
1133 1134
        .max_mem = 0x10000000,
        .default_cpu_model = "Fujitsu MB86904",
B
blueswir1 已提交
1135 1136 1137
    },
    /* SS-10 */
    {
1138 1139 1140 1141 1142 1143 1144 1145 1146
        .iommu_base   = 0xfe0000000ULL,
        .tcx_base     = 0xe20000000ULL,
        .slavio_base  = 0xff0000000ULL,
        .ms_kb_base   = 0xff1000000ULL,
        .serial_base  = 0xff1100000ULL,
        .nvram_base   = 0xff1200000ULL,
        .fd_base      = 0xff1700000ULL,
        .counter_base = 0xff1300000ULL,
        .intctl_base  = 0xff1400000ULL,
B
blueswir1 已提交
1147
        .idreg_base   = 0xef0000000ULL,
1148 1149 1150
        .dma_base     = 0xef0400000ULL,
        .esp_base     = 0xef0800000ULL,
        .le_base      = 0xef0c00000ULL,
1151
        .apc_base     = 0xefa000000ULL, // XXX should not exist
1152 1153
        .aux1_base    = 0xff1800000ULL,
        .aux2_base    = 0xff1a01000ULL,
1154 1155
        .ecc_base     = 0xf00000000ULL,
        .ecc_version  = 0x10000000, // version 0, implementation 1
1156 1157
        .nvram_machine_id = 0x72,
        .machine_id = ss10_id,
1158
        .iommu_version = 0x03000000,
B
blueswir1 已提交
1159
        .max_mem = 0xf00000000ULL,
1160
        .default_cpu_model = "TI SuperSparc II",
1161
    },
1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174
    /* SS-600MP */
    {
        .iommu_base   = 0xfe0000000ULL,
        .tcx_base     = 0xe20000000ULL,
        .slavio_base  = 0xff0000000ULL,
        .ms_kb_base   = 0xff1000000ULL,
        .serial_base  = 0xff1100000ULL,
        .nvram_base   = 0xff1200000ULL,
        .counter_base = 0xff1300000ULL,
        .intctl_base  = 0xff1400000ULL,
        .dma_base     = 0xef0081000ULL,
        .esp_base     = 0xef0080000ULL,
        .le_base      = 0xef0060000ULL,
1175
        .apc_base     = 0xefa000000ULL, // XXX should not exist
1176 1177
        .aux1_base    = 0xff1800000ULL,
        .aux2_base    = 0xff1a01000ULL, // XXX should not exist
1178 1179
        .ecc_base     = 0xf00000000ULL,
        .ecc_version  = 0x00000000, // version 0, implementation 0
1180 1181
        .nvram_machine_id = 0x71,
        .machine_id = ss600mp_id,
1182
        .iommu_version = 0x01000000,
B
blueswir1 已提交
1183
        .max_mem = 0xf00000000ULL,
1184
        .default_cpu_model = "TI SuperSparc II",
1185
    },
1186 1187 1188 1189 1190 1191 1192 1193 1194 1195 1196
    /* SS-20 */
    {
        .iommu_base   = 0xfe0000000ULL,
        .tcx_base     = 0xe20000000ULL,
        .slavio_base  = 0xff0000000ULL,
        .ms_kb_base   = 0xff1000000ULL,
        .serial_base  = 0xff1100000ULL,
        .nvram_base   = 0xff1200000ULL,
        .fd_base      = 0xff1700000ULL,
        .counter_base = 0xff1300000ULL,
        .intctl_base  = 0xff1400000ULL,
B
blueswir1 已提交
1197
        .idreg_base   = 0xef0000000ULL,
1198 1199 1200
        .dma_base     = 0xef0400000ULL,
        .esp_base     = 0xef0800000ULL,
        .le_base      = 0xef0c00000ULL,
1201
        .bpp_base     = 0xef4800000ULL,
1202
        .apc_base     = 0xefa000000ULL, // XXX should not exist
B
blueswir1 已提交
1203 1204
        .aux1_base    = 0xff1800000ULL,
        .aux2_base    = 0xff1a01000ULL,
1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219
        .dbri_base    = 0xee0000000ULL,
        .sx_base      = 0xf80000000ULL,
        .vsimm        = {
            {
                .reg_base  = 0x9c000000ULL,
                .vram_base = 0xfc000000ULL
            }, {
                .reg_base  = 0x90000000ULL,
                .vram_base = 0xf0000000ULL
            }, {
                .reg_base  = 0x94000000ULL
            }, {
                .reg_base  = 0x98000000ULL
            }
        },
1220 1221
        .ecc_base     = 0xf00000000ULL,
        .ecc_version  = 0x20000000, // version 0, implementation 2
1222 1223
        .nvram_machine_id = 0x72,
        .machine_id = ss20_id,
1224
        .iommu_version = 0x13000000,
B
blueswir1 已提交
1225
        .max_mem = 0xf00000000ULL,
1226 1227
        .default_cpu_model = "TI SuperSparc II",
    },
B
blueswir1 已提交
1228 1229 1230 1231 1232 1233 1234 1235 1236 1237 1238 1239 1240 1241 1242 1243 1244 1245
    /* Voyager */
    {
        .iommu_base   = 0x10000000,
        .tcx_base     = 0x50000000,
        .slavio_base  = 0x70000000,
        .ms_kb_base   = 0x71000000,
        .serial_base  = 0x71100000,
        .nvram_base   = 0x71200000,
        .fd_base      = 0x71400000,
        .counter_base = 0x71d00000,
        .intctl_base  = 0x71e00000,
        .idreg_base   = 0x78000000,
        .dma_base     = 0x78400000,
        .esp_base     = 0x78800000,
        .le_base      = 0x78c00000,
        .apc_base     = 0x71300000, // pmc
        .aux1_base    = 0x71900000,
        .aux2_base    = 0x71910000,
1246 1247
        .nvram_machine_id = 0x80,
        .machine_id = vger_id,
B
blueswir1 已提交
1248 1249 1250 1251 1252 1253 1254
        .iommu_version = 0x05000000,
        .max_mem = 0x10000000,
        .default_cpu_model = "Fujitsu MB86904",
    },
    /* LX */
    {
        .iommu_base   = 0x10000000,
1255 1256
        .iommu_pad_base = 0x10004000,
        .iommu_pad_len  = 0x0fffb000,
B
blueswir1 已提交
1257 1258 1259 1260 1261 1262 1263 1264 1265 1266 1267 1268 1269 1270
        .tcx_base     = 0x50000000,
        .slavio_base  = 0x70000000,
        .ms_kb_base   = 0x71000000,
        .serial_base  = 0x71100000,
        .nvram_base   = 0x71200000,
        .fd_base      = 0x71400000,
        .counter_base = 0x71d00000,
        .intctl_base  = 0x71e00000,
        .idreg_base   = 0x78000000,
        .dma_base     = 0x78400000,
        .esp_base     = 0x78800000,
        .le_base      = 0x78c00000,
        .aux1_base    = 0x71900000,
        .aux2_base    = 0x71910000,
1271 1272
        .nvram_machine_id = 0x80,
        .machine_id = lx_id,
B
blueswir1 已提交
1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285 1286 1287 1288 1289 1290 1291 1292 1293 1294 1295
        .iommu_version = 0x04000000,
        .max_mem = 0x10000000,
        .default_cpu_model = "TI MicroSparc I",
    },
    /* SS-4 */
    {
        .iommu_base   = 0x10000000,
        .tcx_base     = 0x50000000,
        .cs_base      = 0x6c000000,
        .slavio_base  = 0x70000000,
        .ms_kb_base   = 0x71000000,
        .serial_base  = 0x71100000,
        .nvram_base   = 0x71200000,
        .fd_base      = 0x71400000,
        .counter_base = 0x71d00000,
        .intctl_base  = 0x71e00000,
        .idreg_base   = 0x78000000,
        .dma_base     = 0x78400000,
        .esp_base     = 0x78800000,
        .le_base      = 0x78c00000,
        .apc_base     = 0x6a000000,
        .aux1_base    = 0x71900000,
        .aux2_base    = 0x71910000,
1296 1297
        .nvram_machine_id = 0x80,
        .machine_id = ss4_id,
B
blueswir1 已提交
1298 1299 1300 1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319
        .iommu_version = 0x05000000,
        .max_mem = 0x10000000,
        .default_cpu_model = "Fujitsu MB86904",
    },
    /* SPARCClassic */
    {
        .iommu_base   = 0x10000000,
        .tcx_base     = 0x50000000,
        .slavio_base  = 0x70000000,
        .ms_kb_base   = 0x71000000,
        .serial_base  = 0x71100000,
        .nvram_base   = 0x71200000,
        .fd_base      = 0x71400000,
        .counter_base = 0x71d00000,
        .intctl_base  = 0x71e00000,
        .idreg_base   = 0x78000000,
        .dma_base     = 0x78400000,
        .esp_base     = 0x78800000,
        .le_base      = 0x78c00000,
        .apc_base     = 0x6a000000,
        .aux1_base    = 0x71900000,
        .aux2_base    = 0x71910000,
1320 1321
        .nvram_machine_id = 0x80,
        .machine_id = scls_id,
B
blueswir1 已提交
1322 1323 1324 1325 1326 1327 1328 1329 1330 1331 1332 1333 1334 1335 1336 1337 1338 1339 1340 1341 1342 1343
        .iommu_version = 0x05000000,
        .max_mem = 0x10000000,
        .default_cpu_model = "TI MicroSparc I",
    },
    /* SPARCbook */
    {
        .iommu_base   = 0x10000000,
        .tcx_base     = 0x50000000, // XXX
        .slavio_base  = 0x70000000,
        .ms_kb_base   = 0x71000000,
        .serial_base  = 0x71100000,
        .nvram_base   = 0x71200000,
        .fd_base      = 0x71400000,
        .counter_base = 0x71d00000,
        .intctl_base  = 0x71e00000,
        .idreg_base   = 0x78000000,
        .dma_base     = 0x78400000,
        .esp_base     = 0x78800000,
        .le_base      = 0x78c00000,
        .apc_base     = 0x6a000000,
        .aux1_base    = 0x71900000,
        .aux2_base    = 0x71910000,
1344 1345
        .nvram_machine_id = 0x80,
        .machine_id = sbook_id,
B
blueswir1 已提交
1346 1347 1348 1349
        .iommu_version = 0x05000000,
        .max_mem = 0x10000000,
        .default_cpu_model = "TI MicroSparc I",
    },
1350 1351 1352
};

/* SPARCstation 5 hardware initialisation */
1353
static void ss5_init(MachineState *machine)
1354
{
1355
    sun4m_hw_init(&sun4m_hwdefs[0], machine);
1356
}
B
bellard 已提交
1357

B
blueswir1 已提交
1358
/* SPARCstation 10 hardware initialisation */
1359
static void ss10_init(MachineState *machine)
B
blueswir1 已提交
1360
{
1361
    sun4m_hw_init(&sun4m_hwdefs[1], machine);
B
blueswir1 已提交
1362 1363
}

1364
/* SPARCserver 600MP hardware initialisation */
1365
static void ss600mp_init(MachineState *machine)
1366
{
1367
    sun4m_hw_init(&sun4m_hwdefs[2], machine);
1368 1369
}

1370
/* SPARCstation 20 hardware initialisation */
1371
static void ss20_init(MachineState *machine)
1372
{
1373
    sun4m_hw_init(&sun4m_hwdefs[3], machine);
B
blueswir1 已提交
1374 1375
}

B
blueswir1 已提交
1376
/* SPARCstation Voyager hardware initialisation */
1377
static void vger_init(MachineState *machine)
B
blueswir1 已提交
1378
{
1379
    sun4m_hw_init(&sun4m_hwdefs[4], machine);
B
blueswir1 已提交
1380 1381 1382
}

/* SPARCstation LX hardware initialisation */
1383
static void ss_lx_init(MachineState *machine)
B
blueswir1 已提交
1384
{
1385
    sun4m_hw_init(&sun4m_hwdefs[5], machine);
B
blueswir1 已提交
1386 1387 1388
}

/* SPARCstation 4 hardware initialisation */
1389
static void ss4_init(MachineState *machine)
B
blueswir1 已提交
1390
{
1391
    sun4m_hw_init(&sun4m_hwdefs[6], machine);
B
blueswir1 已提交
1392 1393 1394
}

/* SPARCClassic hardware initialisation */
1395
static void scls_init(MachineState *machine)
B
blueswir1 已提交
1396
{
1397
    sun4m_hw_init(&sun4m_hwdefs[7], machine);
B
blueswir1 已提交
1398 1399 1400
}

/* SPARCbook hardware initialisation */
1401
static void sbook_init(MachineState *machine)
B
blueswir1 已提交
1402
{
1403
    sun4m_hw_init(&sun4m_hwdefs[8], machine);
B
blueswir1 已提交
1404 1405
}

1406
static void ss5_class_init(ObjectClass *oc, void *data)
1407
{
1408 1409
    MachineClass *mc = MACHINE_CLASS(oc);

1410 1411 1412 1413 1414 1415
    mc->desc = "Sun4m platform, SPARCstation 5";
    mc->init = ss5_init;
    mc->block_default_type = IF_SCSI;
    mc->is_default = 1;
    mc->default_boot_order = "c";
}
B
blueswir1 已提交
1416

1417 1418 1419 1420 1421
static const TypeInfo ss5_type = {
    .name = MACHINE_TYPE_NAME("SS-5"),
    .parent = TYPE_MACHINE,
    .class_init = ss5_class_init,
};
1422

1423
static void ss10_class_init(ObjectClass *oc, void *data)
1424
{
1425 1426
    MachineClass *mc = MACHINE_CLASS(oc);

1427 1428 1429 1430 1431 1432
    mc->desc = "Sun4m platform, SPARCstation 10";
    mc->init = ss10_init;
    mc->block_default_type = IF_SCSI;
    mc->max_cpus = 4;
    mc->default_boot_order = "c";
}
1433

1434 1435 1436 1437 1438
static const TypeInfo ss10_type = {
    .name = MACHINE_TYPE_NAME("SS-10"),
    .parent = TYPE_MACHINE,
    .class_init = ss10_class_init,
};
1439

1440
static void ss600mp_class_init(ObjectClass *oc, void *data)
1441
{
1442 1443
    MachineClass *mc = MACHINE_CLASS(oc);

1444 1445 1446 1447 1448 1449
    mc->desc = "Sun4m platform, SPARCserver 600MP";
    mc->init = ss600mp_init;
    mc->block_default_type = IF_SCSI;
    mc->max_cpus = 4;
    mc->default_boot_order = "c";
}
B
blueswir1 已提交
1450

1451 1452 1453 1454 1455
static const TypeInfo ss600mp_type = {
    .name = MACHINE_TYPE_NAME("SS-600MP"),
    .parent = TYPE_MACHINE,
    .class_init = ss600mp_class_init,
};
B
blueswir1 已提交
1456

1457
static void ss20_class_init(ObjectClass *oc, void *data)
1458
{
1459 1460
    MachineClass *mc = MACHINE_CLASS(oc);

1461 1462 1463 1464 1465 1466
    mc->desc = "Sun4m platform, SPARCstation 20";
    mc->init = ss20_init;
    mc->block_default_type = IF_SCSI;
    mc->max_cpus = 4;
    mc->default_boot_order = "c";
}
B
blueswir1 已提交
1467

1468 1469 1470 1471 1472
static const TypeInfo ss20_type = {
    .name = MACHINE_TYPE_NAME("SS-20"),
    .parent = TYPE_MACHINE,
    .class_init = ss20_class_init,
};
B
blueswir1 已提交
1473

1474
static void voyager_class_init(ObjectClass *oc, void *data)
1475
{
1476 1477
    MachineClass *mc = MACHINE_CLASS(oc);

1478 1479 1480 1481 1482 1483
    mc->desc = "Sun4m platform, SPARCstation Voyager";
    mc->init = vger_init;
    mc->block_default_type = IF_SCSI;
    mc->default_boot_order = "c";
}

1484 1485 1486 1487 1488
static const TypeInfo voyager_type = {
    .name = MACHINE_TYPE_NAME("Voyager"),
    .parent = TYPE_MACHINE,
    .class_init = voyager_class_init,
};
1489

1490
static void ss_lx_class_init(ObjectClass *oc, void *data)
1491
{
1492 1493
    MachineClass *mc = MACHINE_CLASS(oc);

1494 1495 1496 1497 1498 1499
    mc->desc = "Sun4m platform, SPARCstation LX";
    mc->init = ss_lx_init;
    mc->block_default_type = IF_SCSI;
    mc->default_boot_order = "c";
}

1500 1501 1502 1503 1504
static const TypeInfo ss_lx_type = {
    .name = MACHINE_TYPE_NAME("LX"),
    .parent = TYPE_MACHINE,
    .class_init = ss_lx_class_init,
};
1505

1506
static void ss4_class_init(ObjectClass *oc, void *data)
1507
{
1508 1509
    MachineClass *mc = MACHINE_CLASS(oc);

1510 1511 1512 1513 1514 1515
    mc->desc = "Sun4m platform, SPARCstation 4";
    mc->init = ss4_init;
    mc->block_default_type = IF_SCSI;
    mc->default_boot_order = "c";
}

1516 1517 1518 1519 1520
static const TypeInfo ss4_type = {
    .name = MACHINE_TYPE_NAME("SS-4"),
    .parent = TYPE_MACHINE,
    .class_init = ss4_class_init,
};
1521

1522
static void scls_class_init(ObjectClass *oc, void *data)
1523
{
1524 1525
    MachineClass *mc = MACHINE_CLASS(oc);

1526 1527 1528 1529 1530 1531
    mc->desc = "Sun4m platform, SPARCClassic";
    mc->init = scls_init;
    mc->block_default_type = IF_SCSI;
    mc->default_boot_order = "c";
}

1532 1533 1534 1535 1536
static const TypeInfo scls_type = {
    .name = MACHINE_TYPE_NAME("SPARCClassic"),
    .parent = TYPE_MACHINE,
    .class_init = scls_class_init,
};
1537

1538
static void sbook_class_init(ObjectClass *oc, void *data)
1539
{
1540 1541
    MachineClass *mc = MACHINE_CLASS(oc);

1542 1543 1544 1545 1546 1547
    mc->desc = "Sun4m platform, SPARCbook";
    mc->init = sbook_init;
    mc->block_default_type = IF_SCSI;
    mc->default_boot_order = "c";
}

1548 1549 1550 1551 1552
static const TypeInfo sbook_type = {
    .name = MACHINE_TYPE_NAME("SPARCbook"),
    .parent = TYPE_MACHINE,
    .class_init = sbook_class_init,
};
B
blueswir1 已提交
1553

A
Andreas Färber 已提交
1554 1555 1556 1557 1558 1559 1560
static void sun4m_register_types(void)
{
    type_register_static(&idreg_info);
    type_register_static(&afx_info);
    type_register_static(&prom_info);
    type_register_static(&ram_info);

1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571
    type_register_static(&ss5_type);
    type_register_static(&ss10_type);
    type_register_static(&ss600mp_type);
    type_register_static(&ss20_type);
    type_register_static(&voyager_type);
    type_register_static(&ss_lx_type);
    type_register_static(&ss4_type);
    type_register_static(&scls_type);
    type_register_static(&sbook_type);
}

A
Andreas Färber 已提交
1572
type_init(sun4m_register_types)