ppc_prep.c 21.7 KB
Newer Older
1
/*
2
 * QEMU PPC PREP hardware System Emulator
3
 *
4
 * Copyright (c) 2003-2007 Jocelyn Mayer
5
 *
6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
23
 */
P
pbrook 已提交
24 25 26 27 28 29 30 31
#include "hw.h"
#include "nvram.h"
#include "pc.h"
#include "fdc.h"
#include "net.h"
#include "sysemu.h"
#include "isa.h"
#include "pci.h"
32 33
#include "prep_pci.h"
#include "usb-ohci.h"
P
pbrook 已提交
34 35
#include "ppc.h"
#include "boards.h"
B
blueswir1 已提交
36
#include "qemu-log.h"
G
Gerd Hoffmann 已提交
37
#include "ide.h"
B
Blue Swirl 已提交
38
#include "loader.h"
39
#include "mc146818rtc.h"
B
Blue Swirl 已提交
40
#include "blockdev.h"
41
#include "exec-memory.h"
42

43
//#define HARD_DEBUG_PPC_IO
44
//#define DEBUG_PPC_IO
45

46 47 48
/* SMP is not enabled, for now */
#define MAX_CPUS 1

T
ths 已提交
49 50
#define MAX_IDE_BUS 2

51
#define BIOS_SIZE (1024 * 1024)
B
bellard 已提交
52 53 54
#define BIOS_FILENAME "ppc_rom.bin"
#define KERNEL_LOAD_ADDR 0x01000000
#define INITRD_LOAD_ADDR 0x01800000
B
bellard 已提交
55

56 57 58 59 60
#if defined (HARD_DEBUG_PPC_IO) && !defined (DEBUG_PPC_IO)
#define DEBUG_PPC_IO
#endif

#if defined (HARD_DEBUG_PPC_IO)
61
#define PPC_IO_DPRINTF(fmt, ...)                         \
62
do {                                                     \
63
    if (qemu_loglevel_mask(CPU_LOG_IOPORT)) {            \
64
        qemu_log("%s: " fmt, __func__ , ## __VA_ARGS__); \
65
    } else {                                             \
66
        printf("%s : " fmt, __func__ , ## __VA_ARGS__);  \
67 68 69
    }                                                    \
} while (0)
#elif defined (DEBUG_PPC_IO)
70 71
#define PPC_IO_DPRINTF(fmt, ...) \
qemu_log_mask(CPU_LOG_IOPORT, fmt, ## __VA_ARGS__)
72
#else
73
#define PPC_IO_DPRINTF(fmt, ...) do { } while (0)
74 75
#endif

B
bellard 已提交
76
/* Constants for devices init */
77 78 79 80 81 82 83 84
static const int ide_iobase[2] = { 0x1f0, 0x170 };
static const int ide_iobase2[2] = { 0x3f6, 0x376 };
static const int ide_irq[2] = { 13, 13 };

#define NE2000_NB_MAX 6

static uint32_t ne2000_io[NE2000_NB_MAX] = { 0x300, 0x320, 0x340, 0x360, 0x280, 0x380 };
static int ne2000_irq[NE2000_NB_MAX] = { 9, 10, 11, 3, 4, 5 };
85

B
Blue Swirl 已提交
86
//static ISADevice *pit;
B
bellard 已提交
87 88

/* ISA IO ports bridge */
89 90
#define PPC_IO_BASE 0x80000000

91
#if 0
B
bellard 已提交
92
/* Speaker port 0x61 */
93 94 95
static int speaker_data_on;
static int dummy_refresh_clock;
#endif
B
bellard 已提交
96

97
static void speaker_ioport_write (void *opaque, uint32_t addr, uint32_t val)
98
{
99
#if 0
B
bellard 已提交
100 101
    speaker_data_on = (val >> 1) & 1;
    pit_set_gate(pit, 2, val & 1);
102
#endif
103 104
}

105
static uint32_t speaker_ioport_read (void *opaque, uint32_t addr)
106
{
107
#if 0
B
bellard 已提交
108
    int out;
109
    out = pit_get_out(pit, 2, qemu_get_clock_ns(vm_clock));
B
bellard 已提交
110 111
    dummy_refresh_clock ^= 1;
    return (speaker_data_on << 1) | pit_get_gate(pit, 2) | (out << 5) |
112
        (dummy_refresh_clock << 4);
113
#endif
B
bellard 已提交
114
    return 0;
115 116
}

B
bellard 已提交
117 118
/* PCI intack register */
/* Read-only register (?) */
119
static void _PPC_intack_write (void *opaque,
A
Anthony Liguori 已提交
120
                               target_phys_addr_t addr, uint32_t value)
B
bellard 已提交
121
{
122 123 124 125
#if 0
    printf("%s: 0x" TARGET_FMT_plx " => 0x%08" PRIx32 "\n", __func__, addr,
           value);
#endif
B
bellard 已提交
126 127
}

A
Anthony Liguori 已提交
128
static inline uint32_t _PPC_intack_read(target_phys_addr_t addr)
B
bellard 已提交
129 130 131
{
    uint32_t retval = 0;

132
    if ((addr & 0xf) == 0)
B
bellard 已提交
133
        retval = pic_intack_read(isa_pic);
134 135 136 137
#if 0
    printf("%s: 0x" TARGET_FMT_plx " <= %08" PRIx32 "\n", __func__, addr,
           retval);
#endif
B
bellard 已提交
138 139 140 141

    return retval;
}

A
Anthony Liguori 已提交
142
static uint32_t PPC_intack_readb (void *opaque, target_phys_addr_t addr)
B
bellard 已提交
143 144 145 146
{
    return _PPC_intack_read(addr);
}

A
Anthony Liguori 已提交
147
static uint32_t PPC_intack_readw (void *opaque, target_phys_addr_t addr)
148
{
B
bellard 已提交
149
    return _PPC_intack_read(addr);
150 151
}

A
Anthony Liguori 已提交
152
static uint32_t PPC_intack_readl (void *opaque, target_phys_addr_t addr)
153
{
B
bellard 已提交
154
    return _PPC_intack_read(addr);
155 156
}

157
static CPUWriteMemoryFunc * const PPC_intack_write[] = {
B
bellard 已提交
158 159 160 161 162
    &_PPC_intack_write,
    &_PPC_intack_write,
    &_PPC_intack_write,
};

163
static CPUReadMemoryFunc * const PPC_intack_read[] = {
B
bellard 已提交
164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195
    &PPC_intack_readb,
    &PPC_intack_readw,
    &PPC_intack_readl,
};

/* PowerPC control and status registers */
#if 0 // Not used
static struct {
    /* IDs */
    uint32_t veni_devi;
    uint32_t revi;
    /* Control and status */
    uint32_t gcsr;
    uint32_t xcfr;
    uint32_t ct32;
    uint32_t mcsr;
    /* General purpose registers */
    uint32_t gprg[6];
    /* Exceptions */
    uint32_t feen;
    uint32_t fest;
    uint32_t fema;
    uint32_t fecl;
    uint32_t eeen;
    uint32_t eest;
    uint32_t eecl;
    uint32_t eeint;
    uint32_t eemck0;
    uint32_t eemck1;
    /* Error diagnostic */
} XCSR;

196
static void PPC_XCSR_writeb (void *opaque,
A
Anthony Liguori 已提交
197
                             target_phys_addr_t addr, uint32_t value)
B
bellard 已提交
198
{
199 200
    printf("%s: 0x" TARGET_FMT_plx " => 0x%08" PRIx32 "\n", __func__, addr,
           value);
B
bellard 已提交
201 202
}

203
static void PPC_XCSR_writew (void *opaque,
A
Anthony Liguori 已提交
204
                             target_phys_addr_t addr, uint32_t value)
205
{
206 207
    printf("%s: 0x" TARGET_FMT_plx " => 0x%08" PRIx32 "\n", __func__, addr,
           value);
208 209
}

210
static void PPC_XCSR_writel (void *opaque,
A
Anthony Liguori 已提交
211
                             target_phys_addr_t addr, uint32_t value)
212
{
213 214
    printf("%s: 0x" TARGET_FMT_plx " => 0x%08" PRIx32 "\n", __func__, addr,
           value);
215 216
}

A
Anthony Liguori 已提交
217
static uint32_t PPC_XCSR_readb (void *opaque, target_phys_addr_t addr)
B
bellard 已提交
218 219
{
    uint32_t retval = 0;
220

221 222
    printf("%s: 0x" TARGET_FMT_plx " <= %08" PRIx32 "\n", __func__, addr,
           retval);
223

B
bellard 已提交
224 225 226
    return retval;
}

A
Anthony Liguori 已提交
227
static uint32_t PPC_XCSR_readw (void *opaque, target_phys_addr_t addr)
228
{
B
bellard 已提交
229 230
    uint32_t retval = 0;

231 232
    printf("%s: 0x" TARGET_FMT_plx " <= %08" PRIx32 "\n", __func__, addr,
           retval);
B
bellard 已提交
233 234

    return retval;
235 236
}

A
Anthony Liguori 已提交
237
static uint32_t PPC_XCSR_readl (void *opaque, target_phys_addr_t addr)
238 239 240
{
    uint32_t retval = 0;

241 242
    printf("%s: 0x" TARGET_FMT_plx " <= %08" PRIx32 "\n", __func__, addr,
           retval);
243 244 245 246

    return retval;
}

247
static CPUWriteMemoryFunc * const PPC_XCSR_write[] = {
B
bellard 已提交
248 249 250
    &PPC_XCSR_writeb,
    &PPC_XCSR_writew,
    &PPC_XCSR_writel,
251 252
};

253
static CPUReadMemoryFunc * const PPC_XCSR_read[] = {
B
bellard 已提交
254 255 256
    &PPC_XCSR_readb,
    &PPC_XCSR_readw,
    &PPC_XCSR_readl,
257
};
B
bellard 已提交
258
#endif
259

B
bellard 已提交
260
/* Fake super-io ports for PREP platform (Intel 82378ZB) */
A
Anthony Liguori 已提交
261
typedef struct sysctrl_t {
J
j_mayer 已提交
262
    qemu_irq reset_irq;
263
    M48t59State *nvram;
B
bellard 已提交
264 265 266
    uint8_t state;
    uint8_t syscontrol;
    uint8_t fake_io[2];
B
bellard 已提交
267
    int contiguous_map;
B
bellard 已提交
268
    int endian;
A
Anthony Liguori 已提交
269
} sysctrl_t;
270

B
bellard 已提交
271 272
enum {
    STATE_HARDFILE = 0x01,
273 274
};

A
Anthony Liguori 已提交
275
static sysctrl_t *sysctrl;
276

277
static void PREP_io_write (void *opaque, uint32_t addr, uint32_t val)
278
{
A
Anthony Liguori 已提交
279
    sysctrl_t *sysctrl = opaque;
B
bellard 已提交
280

281 282
    PPC_IO_DPRINTF("0x%08" PRIx32 " => 0x%02" PRIx32 "\n", addr - PPC_IO_BASE,
                   val);
B
bellard 已提交
283
    sysctrl->fake_io[addr - 0x0398] = val;
284 285
}

286
static uint32_t PREP_io_read (void *opaque, uint32_t addr)
287
{
A
Anthony Liguori 已提交
288
    sysctrl_t *sysctrl = opaque;
289

290
    PPC_IO_DPRINTF("0x%08" PRIx32 " <= 0x%02" PRIx32 "\n", addr - PPC_IO_BASE,
B
bellard 已提交
291 292 293
                   sysctrl->fake_io[addr - 0x0398]);
    return sysctrl->fake_io[addr - 0x0398];
}
294

295
static void PREP_io_800_writeb (void *opaque, uint32_t addr, uint32_t val)
296
{
A
Anthony Liguori 已提交
297
    sysctrl_t *sysctrl = opaque;
B
bellard 已提交
298

299 300
    PPC_IO_DPRINTF("0x%08" PRIx32 " => 0x%02" PRIx32 "\n",
                   addr - PPC_IO_BASE, val);
301 302 303 304
    switch (addr) {
    case 0x0092:
        /* Special port 92 */
        /* Check soft reset asked */
B
bellard 已提交
305
        if (val & 0x01) {
J
j_mayer 已提交
306 307 308
            qemu_irq_raise(sysctrl->reset_irq);
        } else {
            qemu_irq_lower(sysctrl->reset_irq);
309 310
        }
        /* Check LE mode */
B
bellard 已提交
311
        if (val & 0x02) {
B
bellard 已提交
312 313 314
            sysctrl->endian = 1;
        } else {
            sysctrl->endian = 0;
315 316
        }
        break;
B
bellard 已提交
317 318 319 320 321 322 323 324 325
    case 0x0800:
        /* Motorola CPU configuration register : read-only */
        break;
    case 0x0802:
        /* Motorola base module feature register : read-only */
        break;
    case 0x0803:
        /* Motorola base module status register : read-only */
        break;
326
    case 0x0808:
B
bellard 已提交
327 328 329 330 331
        /* Hardfile light register */
        if (val & 1)
            sysctrl->state |= STATE_HARDFILE;
        else
            sysctrl->state &= ~STATE_HARDFILE;
332 333 334
        break;
    case 0x0810:
        /* Password protect 1 register */
B
bellard 已提交
335 336
        if (sysctrl->nvram != NULL)
            m48t59_toggle_lock(sysctrl->nvram, 1);
337 338 339
        break;
    case 0x0812:
        /* Password protect 2 register */
B
bellard 已提交
340 341
        if (sysctrl->nvram != NULL)
            m48t59_toggle_lock(sysctrl->nvram, 2);
342 343
        break;
    case 0x0814:
B
bellard 已提交
344
        /* L2 invalidate register */
B
bellard 已提交
345
        //        tlb_flush(first_cpu, 1);
346 347 348
        break;
    case 0x081C:
        /* system control register */
B
bellard 已提交
349
        sysctrl->syscontrol = val & 0x0F;
350 351 352
        break;
    case 0x0850:
        /* I/O map type register */
B
bellard 已提交
353
        sysctrl->contiguous_map = val & 0x01;
354 355
        break;
    default:
356 357
        printf("ERROR: unaffected IO port write: %04" PRIx32
               " => %02" PRIx32"\n", addr, val);
358 359 360 361
        break;
    }
}

362
static uint32_t PREP_io_800_readb (void *opaque, uint32_t addr)
363
{
A
Anthony Liguori 已提交
364
    sysctrl_t *sysctrl = opaque;
365 366 367 368 369
    uint32_t retval = 0xFF;

    switch (addr) {
    case 0x0092:
        /* Special port 92 */
B
bellard 已提交
370 371 372 373 374 375 376 377 378 379 380 381 382
        retval = 0x00;
        break;
    case 0x0800:
        /* Motorola CPU configuration register */
        retval = 0xEF; /* MPC750 */
        break;
    case 0x0802:
        /* Motorola Base module feature register */
        retval = 0xAD; /* No ESCC, PMC slot neither ethernet */
        break;
    case 0x0803:
        /* Motorola base module status register */
        retval = 0xE0; /* Standard MPC750 */
383 384 385 386 387 388 389 390
        break;
    case 0x080C:
        /* Equipment present register:
         *  no L2 cache
         *  no upgrade processor
         *  no cards in PCI slots
         *  SCSI fuse is bad
         */
B
bellard 已提交
391 392 393 394 395
        retval = 0x3C;
        break;
    case 0x0810:
        /* Motorola base module extended feature register */
        retval = 0x39; /* No USB, CF and PCI bridge. NVRAM present */
396
        break;
B
bellard 已提交
397 398 399
    case 0x0814:
        /* L2 invalidate: don't care */
        break;
400 401 402 403 404 405 406 407
    case 0x0818:
        /* Keylock */
        retval = 0x00;
        break;
    case 0x081C:
        /* system control register
         * 7 - 6 / 1 - 0: L2 cache enable
         */
B
bellard 已提交
408
        retval = sysctrl->syscontrol;
409 410 411 412 413 414 415
        break;
    case 0x0823:
        /* */
        retval = 0x03; /* no L2 cache */
        break;
    case 0x0850:
        /* I/O map type register */
B
bellard 已提交
416
        retval = sysctrl->contiguous_map;
417 418
        break;
    default:
419
        printf("ERROR: unaffected IO port: %04" PRIx32 " read\n", addr);
420 421
        break;
    }
422 423
    PPC_IO_DPRINTF("0x%08" PRIx32 " <= 0x%02" PRIx32 "\n",
                   addr - PPC_IO_BASE, retval);
424 425 426 427

    return retval;
}

A
Anthony Liguori 已提交
428 429
static inline target_phys_addr_t prep_IO_address(sysctrl_t *sysctrl,
                                                 target_phys_addr_t addr)
B
bellard 已提交
430 431 432 433 434 435 436 437 438 439 440 441
{
    if (sysctrl->contiguous_map == 0) {
        /* 64 KB contiguous space for IOs */
        addr &= 0xFFFF;
    } else {
        /* 8 MB non-contiguous space for IOs */
        addr = (addr & 0x1F) | ((addr & 0x007FFF000) >> 7);
    }

    return addr;
}

A
Anthony Liguori 已提交
442
static void PPC_prep_io_writeb (void *opaque, target_phys_addr_t addr,
B
bellard 已提交
443 444
                                uint32_t value)
{
A
Anthony Liguori 已提交
445
    sysctrl_t *sysctrl = opaque;
B
bellard 已提交
446 447

    addr = prep_IO_address(sysctrl, addr);
448
    cpu_outb(addr, value);
B
bellard 已提交
449 450
}

A
Anthony Liguori 已提交
451
static uint32_t PPC_prep_io_readb (void *opaque, target_phys_addr_t addr)
B
bellard 已提交
452
{
A
Anthony Liguori 已提交
453
    sysctrl_t *sysctrl = opaque;
B
bellard 已提交
454 455 456
    uint32_t ret;

    addr = prep_IO_address(sysctrl, addr);
457
    ret = cpu_inb(addr);
B
bellard 已提交
458 459 460 461

    return ret;
}

A
Anthony Liguori 已提交
462
static void PPC_prep_io_writew (void *opaque, target_phys_addr_t addr,
B
bellard 已提交
463 464
                                uint32_t value)
{
A
Anthony Liguori 已提交
465
    sysctrl_t *sysctrl = opaque;
B
bellard 已提交
466 467

    addr = prep_IO_address(sysctrl, addr);
468
    PPC_IO_DPRINTF("0x" TARGET_FMT_plx " => 0x%08" PRIx32 "\n", addr, value);
469
    cpu_outw(addr, value);
B
bellard 已提交
470 471
}

A
Anthony Liguori 已提交
472
static uint32_t PPC_prep_io_readw (void *opaque, target_phys_addr_t addr)
B
bellard 已提交
473
{
A
Anthony Liguori 已提交
474
    sysctrl_t *sysctrl = opaque;
B
bellard 已提交
475 476 477
    uint32_t ret;

    addr = prep_IO_address(sysctrl, addr);
478
    ret = cpu_inw(addr);
479
    PPC_IO_DPRINTF("0x" TARGET_FMT_plx " <= 0x%08" PRIx32 "\n", addr, ret);
B
bellard 已提交
480 481 482 483

    return ret;
}

A
Anthony Liguori 已提交
484
static void PPC_prep_io_writel (void *opaque, target_phys_addr_t addr,
B
bellard 已提交
485 486
                                uint32_t value)
{
A
Anthony Liguori 已提交
487
    sysctrl_t *sysctrl = opaque;
B
bellard 已提交
488 489

    addr = prep_IO_address(sysctrl, addr);
490
    PPC_IO_DPRINTF("0x" TARGET_FMT_plx " => 0x%08" PRIx32 "\n", addr, value);
491
    cpu_outl(addr, value);
B
bellard 已提交
492 493
}

A
Anthony Liguori 已提交
494
static uint32_t PPC_prep_io_readl (void *opaque, target_phys_addr_t addr)
B
bellard 已提交
495
{
A
Anthony Liguori 已提交
496
    sysctrl_t *sysctrl = opaque;
B
bellard 已提交
497 498 499
    uint32_t ret;

    addr = prep_IO_address(sysctrl, addr);
500
    ret = cpu_inl(addr);
501
    PPC_IO_DPRINTF("0x" TARGET_FMT_plx " <= 0x%08" PRIx32 "\n", addr, ret);
B
bellard 已提交
502 503 504 505

    return ret;
}

506
static CPUWriteMemoryFunc * const PPC_prep_io_write[] = {
B
bellard 已提交
507 508 509 510 511
    &PPC_prep_io_writeb,
    &PPC_prep_io_writew,
    &PPC_prep_io_writel,
};

512
static CPUReadMemoryFunc * const PPC_prep_io_read[] = {
B
bellard 已提交
513 514 515 516 517
    &PPC_prep_io_readb,
    &PPC_prep_io_readw,
    &PPC_prep_io_readl,
};

B
bellard 已提交
518
#define NVRAM_SIZE        0x2000
519

B
Blue Swirl 已提交
520 521 522 523 524 525 526 527 528
static void cpu_request_exit(void *opaque, int irq, int level)
{
    CPUState *env = cpu_single_env;

    if (env && level) {
        cpu_exit(env);
    }
}

529
/* PowerPC PREP hardware initialisation */
A
Anthony Liguori 已提交
530
static void ppc_prep_init (ram_addr_t ram_size,
531
                           const char *boot_device,
532
                           const char *kernel_filename,
533 534 535
                           const char *kernel_cmdline,
                           const char *initrd_filename,
                           const char *cpu_model)
536
{
B
Blue Swirl 已提交
537
    CPUState *env = NULL;
P
Paul Brook 已提交
538
    char *filename;
A
Anthony Liguori 已提交
539
    nvram_t nvram;
540
    M48t59State *m48t59;
541
    int PPC_io_memory;
B
bellard 已提交
542
    int linux_boot, i, nb_nics1, bios_size;
A
Anthony Liguori 已提交
543
    ram_addr_t ram_offset, bios_offset;
544 545
    uint32_t kernel_base, initrd_base;
    long kernel_size, initrd_size;
B
bellard 已提交
546
    PCIBus *pci_bus;
P
pbrook 已提交
547
    qemu_irq *i8259;
B
Blue Swirl 已提交
548
    qemu_irq *cpu_exit_irq;
549
    int ppc_boot_device;
550
    DriveInfo *hd[MAX_IDE_BUS * MAX_IDE_DEVS];
G
Gerd Hoffmann 已提交
551
    DriveInfo *fd[MAX_FD];
B
bellard 已提交
552

A
Anthony Liguori 已提交
553
    sysctrl = qemu_mallocz(sizeof(sysctrl_t));
554 555

    linux_boot = (kernel_filename != NULL);
J
j_mayer 已提交
556

B
bellard 已提交
557
    /* init CPUs */
558
    if (cpu_model == NULL)
G
Gerd Hoffmann 已提交
559
        cpu_model = "602";
560
    for (i = 0; i < smp_cpus; i++) {
B
bellard 已提交
561 562 563 564 565
        env = cpu_init(cpu_model);
        if (!env) {
            fprintf(stderr, "Unable to find PowerPC CPU definition\n");
            exit(1);
        }
566 567 568 569 570 571 572
        if (env->flags & POWERPC_FLAG_RTC_CLK) {
            /* POWER / PowerPC 601 RTC clock frequency is 7.8125 MHz */
            cpu_ppc_tb_init(env, 7812500UL);
        } else {
            /* Set time-base frequency to 100 Mhz */
            cpu_ppc_tb_init(env, 100UL * 1000UL * 1000UL);
        }
573
        qemu_register_reset((QEMUResetHandler*)&cpu_reset, env);
574
    }
575 576

    /* allocate RAM */
577
    ram_offset = qemu_ram_alloc(NULL, "ppc_prep.ram", ram_size);
B
blueswir1 已提交
578 579
    cpu_register_physical_memory(0, ram_size, ram_offset);

B
bellard 已提交
580
    /* allocate and load BIOS */
581
    bios_offset = qemu_ram_alloc(NULL, "ppc_prep.bios", BIOS_SIZE);
582 583
    if (bios_name == NULL)
        bios_name = BIOS_FILENAME;
P
Paul Brook 已提交
584 585 586 587 588 589
    filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, bios_name);
    if (filename) {
        bios_size = get_image_size(filename);
    } else {
        bios_size = -1;
    }
590
    if (bios_size > 0 && bios_size <= BIOS_SIZE) {
A
Anthony Liguori 已提交
591
        target_phys_addr_t bios_addr;
592 593 594 595
        bios_size = (bios_size + 0xfff) & ~0xfff;
        bios_addr = (uint32_t)(-bios_size);
        cpu_register_physical_memory(bios_addr, bios_size,
                                     bios_offset | IO_MEM_ROM);
P
Paul Brook 已提交
596
        bios_size = load_image_targphys(filename, bios_addr, bios_size);
597
    }
B
bellard 已提交
598
    if (bios_size < 0 || bios_size > BIOS_SIZE) {
P
Paul Brook 已提交
599 600 601 602
        hw_error("qemu: could not load PPC PREP bios '%s'\n", bios_name);
    }
    if (filename) {
        qemu_free(filename);
B
bellard 已提交
603
    }
604

605
    if (linux_boot) {
B
bellard 已提交
606
        kernel_base = KERNEL_LOAD_ADDR;
607
        /* now we can load the kernel */
608 609
        kernel_size = load_image_targphys(kernel_filename, kernel_base,
                                          ram_size - kernel_base);
B
bellard 已提交
610
        if (kernel_size < 0) {
P
Paul Brook 已提交
611
            hw_error("qemu: could not load kernel '%s'\n", kernel_filename);
612 613 614 615
            exit(1);
        }
        /* load initrd */
        if (initrd_filename) {
B
bellard 已提交
616
            initrd_base = INITRD_LOAD_ADDR;
617 618
            initrd_size = load_image_targphys(initrd_filename, initrd_base,
                                              ram_size - initrd_base);
619
            if (initrd_size < 0) {
P
Paul Brook 已提交
620
                hw_error("qemu: could not load initial ram disk '%s'\n",
J
j_mayer 已提交
621
                          initrd_filename);
622
            }
B
bellard 已提交
623 624 625
        } else {
            initrd_base = 0;
            initrd_size = 0;
626
        }
627
        ppc_boot_device = 'm';
628
    } else {
B
bellard 已提交
629 630 631 632
        kernel_base = 0;
        kernel_size = 0;
        initrd_base = 0;
        initrd_size = 0;
633 634
        ppc_boot_device = '\0';
        /* For now, OHW cannot boot from the network. */
J
j_mayer 已提交
635 636 637
        for (i = 0; boot_device[i] != '\0'; i++) {
            if (boot_device[i] >= 'a' && boot_device[i] <= 'f') {
                ppc_boot_device = boot_device[i];
638
                break;
J
j_mayer 已提交
639
            }
640 641 642 643 644
        }
        if (ppc_boot_device == '\0') {
            fprintf(stderr, "No valid boot device for Mac99 machine\n");
            exit(1);
        }
645 646
    }

B
bellard 已提交
647
    isa_mem_base = 0xc0000000;
648
    if (PPC_INPUT(env) != PPC_FLAGS_INPUT_6xx) {
P
Paul Brook 已提交
649
        hw_error("Only 6xx bus is supported on PREP machine\n");
650
    }
651
    i8259 = i8259_init(first_cpu->irq_inputs[PPC6xx_INPUT_INT]);
652
    pci_bus = pci_prep_init(i8259, get_system_memory(), get_system_io());
G
Gerd Hoffmann 已提交
653 654 655
    /* Hmm, prep has no pci-isa bridge ??? */
    isa_bus_new(NULL);
    isa_bus_irqs(i8259);
B
bellard 已提交
656 657
    //    pci_bus = i440fx_init();
    /* Register 8 MB of ISA IO space (needed for non-contiguous map) */
658
    PPC_io_memory = cpu_register_io_memory(PPC_prep_io_read,
659
                                           PPC_prep_io_write, sysctrl,
A
Alexander Graf 已提交
660
                                           DEVICE_LITTLE_ENDIAN);
B
bellard 已提交
661
    cpu_register_physical_memory(0x80000000, 0x00800000, PPC_io_memory);
B
bellard 已提交
662

663
    /* init basic PC hardware */
G
Gerd Hoffmann 已提交
664
    pci_vga_init(pci_bus);
B
bellard 已提交
665
    //    openpic = openpic_init(0x00000000, 0xF0000000, 1);
B
Blue Swirl 已提交
666
    //    pit = pit_init(0x40, 0);
667
    rtc_init(2000, NULL);
668

G
Gerd Hoffmann 已提交
669 670
    if (serial_hds[0])
        serial_isa_init(0, serial_hds[0]);
671 672 673 674
    nb_nics1 = nb_nics;
    if (nb_nics1 > NE2000_NB_MAX)
        nb_nics1 = NE2000_NB_MAX;
    for(i = 0; i < nb_nics1; i++) {
675
        if (nd_table[i].model == NULL) {
676
	    nd_table[i].model = qemu_strdup("ne2k_isa");
677 678
        }
        if (strcmp(nd_table[i].model, "ne2k_isa") == 0) {
G
Gerd Hoffmann 已提交
679
            isa_ne2000_init(ne2000_io[i], ne2000_irq[i], &nd_table[i]);
680
        } else {
681
            pci_nic_init_nofail(&nd_table[i], "ne2k_pci", NULL);
682
        }
683 684
    }

685
    ide_drive_get(hd, MAX_IDE_BUS);
686
    for(i = 0; i < MAX_IDE_BUS; i++) {
G
Gerd Hoffmann 已提交
687
        isa_ide_init(ide_iobase[i], ide_iobase2[i], ide_irq[i],
T
ths 已提交
688 689
                     hd[2 * i],
		     hd[2 * i + 1]);
690
    }
691
    isa_create_simple("i8042");
B
Blue Swirl 已提交
692 693 694 695

    cpu_exit_irq = qemu_allocate_irqs(cpu_request_exit, NULL, 1);
    DMA_init(1, cpu_exit_irq);

696 697
    //    SB16_init();

T
ths 已提交
698
    for(i = 0; i < MAX_FD; i++) {
G
Gerd Hoffmann 已提交
699
        fd[i] = drive_get(IF_FLOPPY, 0, i);
T
ths 已提交
700
    }
701
    fdctrl_init_isa(fd);
702

B
bellard 已提交
703 704 705
    /* Register speaker port */
    register_ioport_read(0x61, 1, 1, speaker_ioport_read, NULL);
    register_ioport_write(0x61, 1, 1, speaker_ioport_write, NULL);
706
    /* Register fake IO ports for PREP */
J
j_mayer 已提交
707
    sysctrl->reset_irq = first_cpu->irq_inputs[PPC6xx_INPUT_HRESET];
B
bellard 已提交
708 709
    register_ioport_read(0x398, 2, 1, &PREP_io_read, sysctrl);
    register_ioport_write(0x398, 2, 1, &PREP_io_write, sysctrl);
710
    /* System control ports */
B
bellard 已提交
711 712 713 714 715
    register_ioport_read(0x0092, 0x01, 1, &PREP_io_800_readb, sysctrl);
    register_ioport_write(0x0092, 0x01, 1, &PREP_io_800_writeb, sysctrl);
    register_ioport_read(0x0800, 0x52, 1, &PREP_io_800_readb, sysctrl);
    register_ioport_write(0x0800, 0x52, 1, &PREP_io_800_writeb, sysctrl);
    /* PCI intack location */
716
    PPC_io_memory = cpu_register_io_memory(PPC_intack_read,
717
                                           PPC_intack_write, NULL,
A
Alexander Graf 已提交
718
                                           DEVICE_LITTLE_ENDIAN);
719
    cpu_register_physical_memory(0xBFFFFFF0, 0x4, PPC_io_memory);
B
bellard 已提交
720
    /* PowerPC control and status register group */
B
bellard 已提交
721
#if 0
722
    PPC_io_memory = cpu_register_io_memory(PPC_XCSR_read, PPC_XCSR_write,
A
Alexander Graf 已提交
723
                                           NULL, DEVICE_LITTLE_ENDIAN);
B
bellard 已提交
724
    cpu_register_physical_memory(0xFEFF0000, 0x1000, PPC_io_memory);
B
bellard 已提交
725
#endif
726

P
pbrook 已提交
727
    if (usb_enabled) {
P
Paul Brook 已提交
728
        usb_ohci_init_pci(pci_bus, -1);
P
pbrook 已提交
729 730
    }

J
j_mayer 已提交
731 732
    m48t59 = m48t59_init(i8259[8], 0, 0x0074, NVRAM_SIZE, 59);
    if (m48t59 == NULL)
B
bellard 已提交
733
        return;
J
j_mayer 已提交
734
    sysctrl->nvram = m48t59;
B
bellard 已提交
735 736

    /* Initialise NVRAM */
J
j_mayer 已提交
737 738 739
    nvram.opaque = m48t59;
    nvram.read_fn = &m48t59_read;
    nvram.write_fn = &m48t59_write;
740
    PPC_NVRAM_set_params(&nvram, NVRAM_SIZE, "PREP", ram_size, ppc_boot_device,
B
bellard 已提交
741
                         kernel_base, kernel_size,
B
bellard 已提交
742
                         kernel_cmdline,
B
bellard 已提交
743 744
                         initrd_base, initrd_size,
                         /* XXX: need an option to load a NVRAM image */
B
bellard 已提交
745 746
                         0,
                         graphic_width, graphic_height, graphic_depth);
B
bellard 已提交
747 748 749

    /* Special port to get debug messages from Open-Firmware */
    register_ioport_write(0x0F00, 4, 1, &PPC_debug_write, NULL);
750
}
B
bellard 已提交
751

752
static QEMUMachine prep_machine = {
753 754 755
    .name = "prep",
    .desc = "PowerPC PREP platform",
    .init = ppc_prep_init,
B
balrog 已提交
756
    .max_cpus = MAX_CPUS,
B
bellard 已提交
757
};
758 759 760 761 762 763 764

static void prep_machine_init(void)
{
    qemu_register_machine(&prep_machine);
}

machine_init(prep_machine_init);