iommu.c 9.0 KB
Newer Older
1 2 3
/*
 * QEMU SPARC iommu emulation
 *
B
bellard 已提交
4
 * Copyright (c) 2003-2005 Fabrice Bellard
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28
 * 
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */
#include "vl.h"

/* debug iommu */
//#define DEBUG_IOMMU

B
bellard 已提交
29 30 31 32 33 34
#ifdef DEBUG_IOMMU
#define DPRINTF(fmt, args...) \
do { printf("IOMMU: " fmt , ##args); } while (0)
#else
#define DPRINTF(fmt, args...)
#endif
35

B
bellard 已提交
36 37
#define IOMMU_NREGS (3*4096/4)
#define IOMMU_CTRL          (0x0000 >> 2)
38 39
#define IOMMU_CTRL_IMPL     0xf0000000 /* Implementation */
#define IOMMU_CTRL_VERS     0x0f000000 /* Version */
B
bellard 已提交
40
#define IOMMU_VERSION       0x04000000
41 42 43 44 45 46 47 48 49 50
#define IOMMU_CTRL_RNGE     0x0000001c /* Mapping RANGE */
#define IOMMU_RNGE_16MB     0x00000000 /* 0xff000000 -> 0xffffffff */
#define IOMMU_RNGE_32MB     0x00000004 /* 0xfe000000 -> 0xffffffff */
#define IOMMU_RNGE_64MB     0x00000008 /* 0xfc000000 -> 0xffffffff */
#define IOMMU_RNGE_128MB    0x0000000c /* 0xf8000000 -> 0xffffffff */
#define IOMMU_RNGE_256MB    0x00000010 /* 0xf0000000 -> 0xffffffff */
#define IOMMU_RNGE_512MB    0x00000014 /* 0xe0000000 -> 0xffffffff */
#define IOMMU_RNGE_1GB      0x00000018 /* 0xc0000000 -> 0xffffffff */
#define IOMMU_RNGE_2GB      0x0000001c /* 0x80000000 -> 0xffffffff */
#define IOMMU_CTRL_ENAB     0x00000001 /* IOMMU Enable */
B
bellard 已提交
51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76
#define IOMMU_CTRL_MASK     0x0000001d

#define IOMMU_BASE          (0x0004 >> 2)
#define IOMMU_BASE_MASK     0x07fffc00

#define IOMMU_TLBFLUSH      (0x0014 >> 2)
#define IOMMU_TLBFLUSH_MASK 0xffffffff

#define IOMMU_PGFLUSH       (0x0018 >> 2)
#define IOMMU_PGFLUSH_MASK  0xffffffff

#define IOMMU_SBCFG0        (0x1010 >> 2) /* SBUS configration per-slot */
#define IOMMU_SBCFG1        (0x1014 >> 2) /* SBUS configration per-slot */
#define IOMMU_SBCFG2        (0x1018 >> 2) /* SBUS configration per-slot */
#define IOMMU_SBCFG3        (0x101c >> 2) /* SBUS configration per-slot */
#define IOMMU_SBCFG_SAB30   0x00010000 /* Phys-address bit 30 when bypass enabled */
#define IOMMU_SBCFG_BA16    0x00000004 /* Slave supports 16 byte bursts */
#define IOMMU_SBCFG_BA8     0x00000002 /* Slave supports 8 byte bursts */
#define IOMMU_SBCFG_BYPASS  0x00000001 /* Bypass IOMMU, treat all addresses
       	                                  produced by this device as pure
                                          physical. */
#define IOMMU_SBCFG_MASK    0x00010003

#define IOMMU_ARBEN         (0x2000 >> 2) /* SBUS arbitration enable */
#define IOMMU_ARBEN_MASK    0x001f0000
#define IOMMU_MID           0x00000008
77 78 79 80 81 82 83 84 85 86 87 88 89

/* The format of an iopte in the page tables */
#define IOPTE_PAGE          0x07ffff00 /* Physical page number (PA[30:12]) */
#define IOPTE_CACHE         0x00000080 /* Cached (in vme IOCACHE or Viking/MXCC) */
#define IOPTE_WRITE         0x00000004 /* Writeable */
#define IOPTE_VALID         0x00000002 /* IOPTE is valid */
#define IOPTE_WAZ           0x00000001 /* Write as zeros */

#define PAGE_SHIFT      12
#define PAGE_SIZE       (1 << PAGE_SHIFT)
#define PAGE_MASK	(PAGE_SIZE - 1)

typedef struct IOMMUState {
90
    target_phys_addr_t addr;
B
bellard 已提交
91
    uint32_t regs[IOMMU_NREGS];
92
    target_phys_addr_t iostart;
93 94 95 96 97
} IOMMUState;

static uint32_t iommu_mem_readw(void *opaque, target_phys_addr_t addr)
{
    IOMMUState *s = opaque;
98
    target_phys_addr_t saddr;
99

B
bellard 已提交
100
    saddr = (addr - s->addr) >> 2;
101 102
    switch (saddr) {
    default:
103
	DPRINTF("read reg[%d] = %x\n", (int)saddr, s->regs[saddr]);
104 105 106 107 108 109 110 111 112
	return s->regs[saddr];
	break;
    }
    return 0;
}

static void iommu_mem_writew(void *opaque, target_phys_addr_t addr, uint32_t val)
{
    IOMMUState *s = opaque;
113
    target_phys_addr_t saddr;
114

B
bellard 已提交
115
    saddr = (addr - s->addr) >> 2;
116
    DPRINTF("write reg[%d] = %x\n", (int)saddr, val);
117
    switch (saddr) {
B
bellard 已提交
118
    case IOMMU_CTRL:
B
bellard 已提交
119 120
	switch (val & IOMMU_CTRL_RNGE) {
	case IOMMU_RNGE_16MB:
121
	    s->iostart = 0xffffffffff000000ULL;
B
bellard 已提交
122 123
	    break;
	case IOMMU_RNGE_32MB:
124
	    s->iostart = 0xfffffffffe000000ULL;
B
bellard 已提交
125 126
	    break;
	case IOMMU_RNGE_64MB:
127
	    s->iostart = 0xfffffffffc000000ULL;
B
bellard 已提交
128 129
	    break;
	case IOMMU_RNGE_128MB:
130
	    s->iostart = 0xfffffffff8000000ULL;
B
bellard 已提交
131 132
	    break;
	case IOMMU_RNGE_256MB:
133
	    s->iostart = 0xfffffffff0000000ULL;
B
bellard 已提交
134 135
	    break;
	case IOMMU_RNGE_512MB:
136
	    s->iostart = 0xffffffffe0000000ULL;
B
bellard 已提交
137 138
	    break;
	case IOMMU_RNGE_1GB:
139
	    s->iostart = 0xffffffffc0000000ULL;
B
bellard 已提交
140 141 142
	    break;
	default:
	case IOMMU_RNGE_2GB:
143
	    s->iostart = 0xffffffff80000000ULL;
B
bellard 已提交
144 145
	    break;
	}
146
	DPRINTF("iostart = " TARGET_FMT_plx "\n", s->iostart);
B
bellard 已提交
147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170
	s->regs[saddr] = ((val & IOMMU_CTRL_MASK) | IOMMU_VERSION);
	break;
    case IOMMU_BASE:
	s->regs[saddr] = val & IOMMU_BASE_MASK;
	break;
    case IOMMU_TLBFLUSH:
	DPRINTF("tlb flush %x\n", val);
	s->regs[saddr] = val & IOMMU_TLBFLUSH_MASK;
	break;
    case IOMMU_PGFLUSH:
	DPRINTF("page flush %x\n", val);
	s->regs[saddr] = val & IOMMU_PGFLUSH_MASK;
	break;
    case IOMMU_SBCFG0:
    case IOMMU_SBCFG1:
    case IOMMU_SBCFG2:
    case IOMMU_SBCFG3:
	s->regs[saddr] = val & IOMMU_SBCFG_MASK;
	break;
    case IOMMU_ARBEN:
        // XXX implement SBus probing: fault when reading unmapped
        // addresses, fault cause and address stored to MMU/IOMMU
	s->regs[saddr] = (val & IOMMU_ARBEN_MASK) | IOMMU_MID;
	break;
171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188
    default:
	s->regs[saddr] = val;
	break;
    }
}

static CPUReadMemoryFunc *iommu_mem_read[3] = {
    iommu_mem_readw,
    iommu_mem_readw,
    iommu_mem_readw,
};

static CPUWriteMemoryFunc *iommu_mem_write[3] = {
    iommu_mem_writew,
    iommu_mem_writew,
    iommu_mem_writew,
};

189
static uint32_t iommu_page_get_flags(IOMMUState *s, target_phys_addr_t addr)
190
{
191 192 193 194
    uint32_t iopte, ret;
#ifdef DEBUG_IOMMU
    target_phys_addr_t pa = addr;
#endif
195

196
    iopte = s->regs[IOMMU_BASE] << 4;
B
bellard 已提交
197 198
    addr &= ~s->iostart;
    iopte += (addr >> (PAGE_SHIFT - 2)) & ~3;
199 200 201 202 203
    ret = ldl_phys(iopte);
    DPRINTF("get flags addr " TARGET_FMT_plx " => pte %x, *ptes = %x\n", pa,
            iopte, ret);

    return ret;
P
pbrook 已提交
204 205
}

206 207 208
static target_phys_addr_t iommu_translate_pa(IOMMUState *s,
                                             target_phys_addr_t addr,
                                             uint32_t pte)
P
pbrook 已提交
209 210
{
    uint32_t tmppte;
211 212 213 214 215 216
    target_phys_addr_t pa;

    tmppte = pte;
    pa = ((pte & IOPTE_PAGE) << 4) + (addr & PAGE_MASK);
    DPRINTF("xlate dva " TARGET_FMT_plx " => pa " TARGET_FMT_plx
            " (iopte = %x)\n", addr, pa, tmppte);
P
pbrook 已提交
217

B
bellard 已提交
218
    return pa;
219 220
}

221 222
void sparc_iommu_memory_rw(void *opaque, target_phys_addr_t addr,
                           uint8_t *buf, int len, int is_write)
P
pbrook 已提交
223
{
224 225 226
    int l;
    uint32_t flags;
    target_phys_addr_t page, phys_addr;
P
pbrook 已提交
227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249

    while (len > 0) {
        page = addr & TARGET_PAGE_MASK;
        l = (page + TARGET_PAGE_SIZE) - addr;
        if (l > len)
            l = len;
        flags = iommu_page_get_flags(opaque, page);
        if (!(flags & IOPTE_VALID))
            return;
        phys_addr = iommu_translate_pa(opaque, addr, flags);
        if (is_write) {
            if (!(flags & IOPTE_WRITE))
                return;
            cpu_physical_memory_write(phys_addr, buf, len);
        } else {
            cpu_physical_memory_read(phys_addr, buf, len);
        }
        len -= l;
        buf += l;
        addr += l;
    }
}

B
bellard 已提交
250 251 252 253 254
static void iommu_save(QEMUFile *f, void *opaque)
{
    IOMMUState *s = opaque;
    int i;
    
B
bellard 已提交
255
    for (i = 0; i < IOMMU_NREGS; i++)
B
bellard 已提交
256
	qemu_put_be32s(f, &s->regs[i]);
257
    qemu_put_be64s(f, &s->iostart);
B
bellard 已提交
258 259 260 261 262 263 264
}

static int iommu_load(QEMUFile *f, void *opaque, int version_id)
{
    IOMMUState *s = opaque;
    int i;
    
265
    if (version_id != 2)
B
bellard 已提交
266 267
        return -EINVAL;

B
bellard 已提交
268
    for (i = 0; i < IOMMU_NREGS; i++)
B
blueswir1 已提交
269
        qemu_get_be32s(f, &s->regs[i]);
270
    qemu_get_be64s(f, &s->iostart);
B
bellard 已提交
271 272 273 274 275 276 277 278

    return 0;
}

static void iommu_reset(void *opaque)
{
    IOMMUState *s = opaque;

B
bellard 已提交
279
    memset(s->regs, 0, IOMMU_NREGS * 4);
B
bellard 已提交
280
    s->iostart = 0;
281
    s->regs[IOMMU_CTRL] = IOMMU_VERSION;
B
bellard 已提交
282 283
}

284
void *iommu_init(target_phys_addr_t addr)
285 286
{
    IOMMUState *s;
B
bellard 已提交
287
    int iommu_io_memory;
288 289 290

    s = qemu_mallocz(sizeof(IOMMUState));
    if (!s)
B
bellard 已提交
291
        return NULL;
292

B
bellard 已提交
293 294
    s->addr = addr;

295
    iommu_io_memory = cpu_register_io_memory(0, iommu_mem_read, iommu_mem_write, s);
B
bellard 已提交
296
    cpu_register_physical_memory(addr, IOMMU_NREGS * 4, iommu_io_memory);
297
    
298
    register_savevm("iommu", addr, 2, iommu_save, iommu_load, s);
B
bellard 已提交
299 300
    qemu_register_reset(iommu_reset, s);
    return s;
301 302
}