piix_pci.c 14.5 KB
Newer Older
P
pbrook 已提交
1 2 3 4
/*
 * QEMU i440FX/PIIX3 PCI Bridge Emulation
 *
 * Copyright (c) 2006 Fabrice Bellard
5
 *
P
pbrook 已提交
6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */

P
pbrook 已提交
25 26 27
#include "hw.h"
#include "pc.h"
#include "pci.h"
28
#include "pci_host.h"
29
#include "isa.h"
G
Gerd Hoffmann 已提交
30
#include "sysbus.h"
B
Blue Swirl 已提交
31
#include "range.h"
32
#include "xen.h"
P
pbrook 已提交
33

34 35 36 37 38
/*
 * I440FX chipset data sheet.
 * http://download.intel.com/design/chipsets/datashts/29054901.pdf
 */

P
pbrook 已提交
39 40
typedef PCIHostState I440FXState;

I
Isaku Yamahata 已提交
41
#define PIIX_NUM_PIC_IRQS       16      /* i8259 * 2 */
42
#define PIIX_NUM_PIRQS          4ULL    /* PIRQ[A-D] */
S
Stefano Stabellini 已提交
43
#define XEN_PIIX_NUM_PIRQS      128ULL
I
Isaku Yamahata 已提交
44
#define PIIX_PIRQC              0x60
45

46 47
typedef struct PIIX3State {
    PCIDevice dev;
I
Isaku Yamahata 已提交
48 49 50 51 52 53 54 55 56 57 58 59 60 61 62

    /*
     * bitmap to track pic levels.
     * The pic level is the logical OR of all the PCI irqs mapped to it
     * So one PIC level is tracked by PIIX_NUM_PIRQS bits.
     *
     * PIRQ is mapped to PIC pins, we track it by
     * PIIX_NUM_PIRQS * PIIX_NUM_PIC_IRQS = 64 bits with
     * pic_irq * PIIX_NUM_PIRQS + pirq
     */
#if PIIX_NUM_PIC_IRQS * PIIX_NUM_PIRQS > 64
#error "unable to encode pic state in 64bit in pic_levels."
#endif
    uint64_t pic_levels;

63
    qemu_irq *pic;
64 65 66

    /* This member isn't used. Just for save/load compatibility */
    int32_t pci_irq_levels_vmstate[PIIX_NUM_PIRQS];
G
Gerd Hoffmann 已提交
67
} PIIX3State;
68

69 70
struct PCII440FXState {
    PCIDevice dev;
A
Anthony Liguori 已提交
71
    target_phys_addr_t isa_page_descs[384 / 4];
72
    uint8_t smm_enabled;
G
Gerd Hoffmann 已提交
73
    PIIX3State *piix3;
74 75
};

76 77 78 79 80

#define I440FX_PAM      0x59
#define I440FX_PAM_SIZE 7
#define I440FX_SMRAM    0x72

I
Isaku Yamahata 已提交
81
static void piix3_set_irq(void *opaque, int pirq, int level);
S
Stefano Stabellini 已提交
82 83
static void piix3_write_config_xen(PCIDevice *dev,
                               uint32_t address, uint32_t val, int len);
84 85 86 87

/* return the global irq number corresponding to a given device irq
   pin. We could also use the bus number to have a more precise
   mapping. */
I
Isaku Yamahata 已提交
88
static int pci_slot_get_pirq(PCIDevice *pci_dev, int pci_intx)
89 90 91
{
    int slot_addend;
    slot_addend = (pci_dev->devfn >> 3) - 1;
I
Isaku Yamahata 已提交
92
    return (pci_intx + slot_addend) & 3;
93
}
P
pbrook 已提交
94

95
static void update_pam(PCII440FXState *d, uint32_t start, uint32_t end, int r)
96 97 98 99 100 101 102
{
    uint32_t addr;

    //    printf("ISA mapping %08x-0x%08x: %d\n", start, end, r);
    switch(r) {
    case 3:
        /* RAM */
103
        cpu_register_physical_memory(start, end - start,
104 105 106 107
                                     start);
        break;
    case 1:
        /* ROM (XXX: not quite correct) */
108
        cpu_register_physical_memory(start, end - start,
109 110 111 112 113 114
                                     start | IO_MEM_ROM);
        break;
    case 2:
    case 0:
        /* XXX: should distinguish read/write cases */
        for(addr = start; addr < end; addr += 4096) {
115
            cpu_register_physical_memory(addr, 4096,
116
                                         d->isa_page_descs[(addr - 0xa0000) >> 12]);
117 118 119 120
        }
        break;
    }
}
121

122
static void i440fx_update_memory_mappings(PCII440FXState *d)
123 124
{
    int i, r;
125 126
    uint32_t smram, addr;

127
    update_pam(d, 0xf0000, 0x100000, (d->dev.config[I440FX_PAM] >> 4) & 3);
128
    for(i = 0; i < 12; i++) {
129
        r = (d->dev.config[(i >> 1) + (I440FX_PAM + 1)] >> ((i & 1) * 4)) & 3;
130
        update_pam(d, 0xc0000 + 0x4000 * i, 0xc0000 + 0x4000 * (i + 1), r);
131
    }
132
    smram = d->dev.config[I440FX_SMRAM];
133
    if ((d->smm_enabled && (smram & 0x08)) || (smram & 0x40)) {
134 135 136
        cpu_register_physical_memory(0xa0000, 0x20000, 0xa0000);
    } else {
        for(addr = 0xa0000; addr < 0xc0000; addr += 4096) {
137
            cpu_register_physical_memory(addr, 4096,
138
                                         d->isa_page_descs[(addr - 0xa0000) >> 12]);
139 140 141 142
        }
    }
}

143
static void i440fx_set_smm(int val, void *arg)
144
{
145 146
    PCII440FXState *d = arg;

147
    val = (val != 0);
148 149
    if (d->smm_enabled != val) {
        d->smm_enabled = val;
150 151 152 153 154 155 156 157
        i440fx_update_memory_mappings(d);
    }
}


/* XXX: suppress when better memory API. We make the assumption that
   no device (in particular the VGA) changes the memory mappings in
   the 0xa0000-0x100000 range */
158
void i440fx_init_memory_mappings(PCII440FXState *d)
159 160 161
{
    int i;
    for(i = 0; i < 96; i++) {
162
        d->isa_page_descs[i] = cpu_get_physical_page_desc(0xa0000 + i * 0x1000);
163 164 165
    }
}

166
static void i440fx_write_config(PCIDevice *dev,
167 168
                                uint32_t address, uint32_t val, int len)
{
169 170
    PCII440FXState *d = DO_UPCAST(PCII440FXState, dev, dev);

171
    /* XXX: implement SMRAM.D_LOCK */
172
    pci_default_write_config(dev, address, val, len);
173 174
    if (ranges_overlap(address, len, I440FX_PAM, I440FX_PAM_SIZE) ||
        range_covers_byte(address, len, I440FX_SMRAM)) {
175
        i440fx_update_memory_mappings(d);
176
    }
177 178
}

179
static int i440fx_load_old(QEMUFile* f, void *opaque, int version_id)
180
{
181
    PCII440FXState *d = opaque;
182
    int ret, i;
183

184
    ret = pci_device_load(&d->dev, f);
185 186 187
    if (ret < 0)
        return ret;
    i440fx_update_memory_mappings(d);
188
    qemu_get_8s(f, &d->smm_enabled);
189

190 191 192 193 194
    if (version_id == 2) {
        for (i = 0; i < PIIX_NUM_PIRQS; i++) {
            qemu_get_be32(f); /* dummy load for compatibility */
        }
    }
195

196 197 198
    return 0;
}

199
static int i440fx_post_load(void *opaque, int version_id)
200 201 202 203 204 205 206 207 208 209 210 211 212
{
    PCII440FXState *d = opaque;

    i440fx_update_memory_mappings(d);
    return 0;
}

static const VMStateDescription vmstate_i440fx = {
    .name = "I440FX",
    .version_id = 3,
    .minimum_version_id = 3,
    .minimum_version_id_old = 1,
    .load_state_old = i440fx_load_old,
213
    .post_load = i440fx_post_load,
214 215 216 217 218 219 220
    .fields      = (VMStateField []) {
        VMSTATE_PCI_DEVICE(dev, PCII440FXState),
        VMSTATE_UINT8(smm_enabled, PCII440FXState),
        VMSTATE_END_OF_LIST()
    }
};

221
static int i440fx_pcihost_initfn(SysBusDevice *dev)
P
pbrook 已提交
222
{
G
Gerd Hoffmann 已提交
223
    I440FXState *s = FROM_SYSBUS(I440FXState, dev);
P
pbrook 已提交
224

225
    pci_host_conf_register_ioport(0xcf8, s);
P
pbrook 已提交
226

227
    pci_host_data_register_ioport(0xcfc, s);
228
    return 0;
G
Gerd Hoffmann 已提交
229
}
P
pbrook 已提交
230

231
static int i440fx_initfn(PCIDevice *dev)
G
Gerd Hoffmann 已提交
232
{
233
    PCII440FXState *d = DO_UPCAST(PCII440FXState, dev, dev);
234

235
    d->dev.config[I440FX_SMRAM] = 0x02;
236

237
    cpu_smm_register(&i440fx_set_smm, d);
238
    return 0;
G
Gerd Hoffmann 已提交
239 240
}

241 242 243 244
static PCIBus *i440fx_common_init(const char *device_name,
                                  PCII440FXState **pi440fx_state,
                                  int *piix3_devfn,
                                  qemu_irq *pic, ram_addr_t ram_size)
G
Gerd Hoffmann 已提交
245 246 247 248 249
{
    DeviceState *dev;
    PCIBus *b;
    PCIDevice *d;
    I440FXState *s;
G
Gerd Hoffmann 已提交
250
    PIIX3State *piix3;
G
Gerd Hoffmann 已提交
251 252 253

    dev = qdev_create(NULL, "i440FX-pcihost");
    s = FROM_SYSBUS(I440FXState, sysbus_from_qdev(dev));
G
Gerd Hoffmann 已提交
254
    b = pci_bus_new(&s->busdev.qdev, NULL, 0);
G
Gerd Hoffmann 已提交
255
    s->bus = b;
M
Markus Armbruster 已提交
256
    qdev_init_nofail(dev);
G
Gerd Hoffmann 已提交
257

258
    d = pci_create_simple(b, 0, device_name);
259
    *pi440fx_state = DO_UPCAST(PCII440FXState, dev, d);
G
Gerd Hoffmann 已提交
260

S
Stefano Stabellini 已提交
261 262 263 264 265 266 267 268 269 270 271 272 273 274 275
    /* Xen supports additional interrupt routes from the PCI devices to
     * the IOAPIC: the four pins of each PCI device on the bus are also
     * connected to the IOAPIC directly.
     * These additional routes can be discovered through ACPI. */
    if (xen_enabled()) {
        piix3 = DO_UPCAST(PIIX3State, dev,
                pci_create_simple_multifunction(b, -1, true, "PIIX3-xen"));
        pci_bus_irqs(b, xen_piix3_set_irq, xen_pci_slot_get_pirq,
                piix3, XEN_PIIX_NUM_PIRQS);
    } else {
        piix3 = DO_UPCAST(PIIX3State, dev,
                pci_create_simple_multifunction(b, -1, true, "PIIX3"));
        pci_bus_irqs(b, piix3_set_irq, pci_slot_get_pirq, piix3,
                PIIX_NUM_PIRQS);
    }
G
Gerd Hoffmann 已提交
276
    piix3->pic = pic;
277

G
Gerd Hoffmann 已提交
278 279 280
    (*pi440fx_state)->piix3 = piix3;

    *piix3_devfn = piix3->dev.devfn;
281

282 283 284 285 286
    ram_size = ram_size / 8 / 1024 / 1024;
    if (ram_size > 255)
        ram_size = 255;
    (*pi440fx_state)->dev.config[0x57]=ram_size;

P
pbrook 已提交
287 288 289
    return b;
}

290 291 292 293 294 295 296 297 298
PCIBus *i440fx_init(PCII440FXState **pi440fx_state, int *piix3_devfn,
                    qemu_irq *pic, ram_addr_t ram_size)
{
    PCIBus *b;

    b = i440fx_common_init("i440FX", pi440fx_state, piix3_devfn, pic, ram_size);
    return b;
}

P
pbrook 已提交
299
/* PIIX3 PCI to ISA bridge */
I
Isaku Yamahata 已提交
300 301 302 303
static void piix3_set_irq_pic(PIIX3State *piix3, int pic_irq)
{
    qemu_set_irq(piix3->pic[pic_irq],
                 !!(piix3->pic_levels &
T
TeLeMan 已提交
304
                    (((1ULL << PIIX_NUM_PIRQS) - 1) <<
I
Isaku Yamahata 已提交
305 306
                     (pic_irq * PIIX_NUM_PIRQS))));
}
P
pbrook 已提交
307

I
Isaku Yamahata 已提交
308
static void piix3_set_irq_level(PIIX3State *piix3, int pirq, int level)
I
Isaku Yamahata 已提交
309 310 311 312 313 314 315 316 317 318 319 320 321
{
    int pic_irq;
    uint64_t mask;

    pic_irq = piix3->dev.config[PIIX_PIRQC + pirq];
    if (pic_irq >= PIIX_NUM_PIC_IRQS) {
        return;
    }

    mask = 1ULL << ((pic_irq * PIIX_NUM_PIRQS) + pirq);
    piix3->pic_levels &= ~mask;
    piix3->pic_levels |= mask * !!level;

I
Isaku Yamahata 已提交
322
    piix3_set_irq_pic(piix3, pic_irq);
I
Isaku Yamahata 已提交
323 324 325
}

static void piix3_set_irq(void *opaque, int pirq, int level)
P
pbrook 已提交
326
{
G
Gerd Hoffmann 已提交
327
    PIIX3State *piix3 = opaque;
I
Isaku Yamahata 已提交
328
    piix3_set_irq_level(piix3, pirq, level);
I
Isaku Yamahata 已提交
329
}
P
pbrook 已提交
330

I
Isaku Yamahata 已提交
331 332 333 334 335 336 337 338
/* irq routing is changed. so rebuild bitmap */
static void piix3_update_irq_levels(PIIX3State *piix3)
{
    int pirq;

    piix3->pic_levels = 0;
    for (pirq = 0; pirq < PIIX_NUM_PIRQS; pirq++) {
        piix3_set_irq_level(piix3, pirq,
I
Isaku Yamahata 已提交
339
                            pci_bus_get_irq_level(piix3->dev.bus, pirq));
I
Isaku Yamahata 已提交
340 341 342 343 344 345 346 347 348 349 350 351 352
    }
}

static void piix3_write_config(PCIDevice *dev,
                               uint32_t address, uint32_t val, int len)
{
    pci_default_write_config(dev, address, val, len);
    if (ranges_overlap(address, len, PIIX_PIRQC, 4)) {
        PIIX3State *piix3 = DO_UPCAST(PIIX3State, dev, dev);
        int pic_irq;
        piix3_update_irq_levels(piix3);
        for (pic_irq = 0; pic_irq < PIIX_NUM_PIC_IRQS; pic_irq++) {
            piix3_set_irq_pic(piix3, pic_irq);
353
        }
P
pbrook 已提交
354 355 356
    }
}

S
Stefano Stabellini 已提交
357 358 359 360 361 362 363
static void piix3_write_config_xen(PCIDevice *dev,
                               uint32_t address, uint32_t val, int len)
{
    xen_piix_pci_write_config_client(address, val, len);
    piix3_write_config(dev, address, val, len);
}

364
static void piix3_reset(void *opaque)
P
pbrook 已提交
365
{
366 367
    PIIX3State *d = opaque;
    uint8_t *pci_conf = d->dev.config;
P
pbrook 已提交
368 369 370 371 372 373 374 375 376

    pci_conf[0x04] = 0x07; // master, memory and I/O
    pci_conf[0x05] = 0x00;
    pci_conf[0x06] = 0x00;
    pci_conf[0x07] = 0x02; // PCI_status_devsel_medium
    pci_conf[0x4c] = 0x4d;
    pci_conf[0x4e] = 0x03;
    pci_conf[0x4f] = 0x00;
    pci_conf[0x60] = 0x80;
377 378 379
    pci_conf[0x61] = 0x80;
    pci_conf[0x62] = 0x80;
    pci_conf[0x63] = 0x80;
P
pbrook 已提交
380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399
    pci_conf[0x69] = 0x02;
    pci_conf[0x70] = 0x80;
    pci_conf[0x76] = 0x0c;
    pci_conf[0x77] = 0x0c;
    pci_conf[0x78] = 0x02;
    pci_conf[0x79] = 0x00;
    pci_conf[0x80] = 0x00;
    pci_conf[0x82] = 0x00;
    pci_conf[0xa0] = 0x08;
    pci_conf[0xa2] = 0x00;
    pci_conf[0xa3] = 0x00;
    pci_conf[0xa4] = 0x00;
    pci_conf[0xa5] = 0x00;
    pci_conf[0xa6] = 0x00;
    pci_conf[0xa7] = 0x00;
    pci_conf[0xa8] = 0x0f;
    pci_conf[0xaa] = 0x00;
    pci_conf[0xab] = 0x00;
    pci_conf[0xac] = 0x00;
    pci_conf[0xae] = 0x00;
I
Isaku Yamahata 已提交
400 401 402 403 404 405 406 407 408

    d->pic_levels = 0;
}

static int piix3_post_load(void *opaque, int version_id)
{
    PIIX3State *piix3 = opaque;
    piix3_update_irq_levels(piix3);
    return 0;
409
}
410

411 412 413 414 415 416 417 418 419
static void piix3_pre_save(void *opaque)
{
    int i;
    PIIX3State *piix3 = opaque;

    for (i = 0; i < ARRAY_SIZE(piix3->pci_irq_levels_vmstate); i++) {
        piix3->pci_irq_levels_vmstate[i] =
            pci_bus_get_irq_level(piix3->dev.bus, i);
    }
P
pbrook 已提交
420 421
}

422 423 424 425 426
static const VMStateDescription vmstate_piix3 = {
    .name = "PIIX3",
    .version_id = 3,
    .minimum_version_id = 2,
    .minimum_version_id_old = 2,
I
Isaku Yamahata 已提交
427
    .post_load = piix3_post_load,
428
    .pre_save = piix3_pre_save,
429 430
    .fields      = (VMStateField []) {
        VMSTATE_PCI_DEVICE(dev, PIIX3State),
431 432
        VMSTATE_INT32_ARRAY_V(pci_irq_levels_vmstate, PIIX3State,
                              PIIX_NUM_PIRQS, 3),
433
        VMSTATE_END_OF_LIST()
J
Juan Quintela 已提交
434
    }
435
};
B
bellard 已提交
436

437
static int piix3_initfn(PCIDevice *dev)
P
pbrook 已提交
438
{
439
    PIIX3State *d = DO_UPCAST(PIIX3State, dev, dev);
P
pbrook 已提交
440

441
    isa_bus_new(&d->dev.qdev);
442
    qemu_register_reset(piix3_reset, d);
443
    return 0;
P
pbrook 已提交
444
}
T
ths 已提交
445

G
Gerd Hoffmann 已提交
446 447 448 449
static PCIDeviceInfo i440fx_info[] = {
    {
        .qdev.name    = "i440FX",
        .qdev.desc    = "Host bridge",
450
        .qdev.size    = sizeof(PCII440FXState),
451
        .qdev.vmsd    = &vmstate_i440fx,
G
Gerd Hoffmann 已提交
452
        .qdev.no_user = 1,
G
Gerd Hoffmann 已提交
453
        .no_hotplug   = 1,
G
Gerd Hoffmann 已提交
454 455
        .init         = i440fx_initfn,
        .config_write = i440fx_write_config,
456 457 458 459
        .vendor_id    = PCI_VENDOR_ID_INTEL,
        .device_id    = PCI_DEVICE_ID_INTEL_82441,
        .revision     = 0x02,
        .class_id     = PCI_CLASS_BRIDGE_HOST,
G
Gerd Hoffmann 已提交
460 461 462
    },{
        .qdev.name    = "PIIX3",
        .qdev.desc    = "ISA bridge",
463
        .qdev.size    = sizeof(PIIX3State),
464
        .qdev.vmsd    = &vmstate_piix3,
G
Gerd Hoffmann 已提交
465
        .qdev.no_user = 1,
G
Gerd Hoffmann 已提交
466
        .no_hotplug   = 1,
G
Gerd Hoffmann 已提交
467
        .init         = piix3_initfn,
I
Isaku Yamahata 已提交
468
        .config_write = piix3_write_config,
469 470 471
        .vendor_id    = PCI_VENDOR_ID_INTEL,
        .device_id    = PCI_DEVICE_ID_INTEL_82371SB_0, // 82371SB PIIX3 PCI-to-ISA bridge (Step A1)
        .class_id     = PCI_CLASS_BRIDGE_ISA,
S
Stefano Stabellini 已提交
472 473 474 475 476 477 478 479 480
    },{
        .qdev.name    = "PIIX3-xen",
        .qdev.desc    = "ISA bridge",
        .qdev.size    = sizeof(PIIX3State),
        .qdev.vmsd    = &vmstate_piix3,
        .qdev.no_user = 1,
        .no_hotplug   = 1,
        .init         = piix3_initfn,
        .config_write = piix3_write_config_xen,
481 482 483
        .vendor_id    = PCI_VENDOR_ID_INTEL,
        .device_id    = PCI_DEVICE_ID_INTEL_82371SB_0, // 82371SB PIIX3 PCI-to-ISA bridge (Step A1)
        .class_id     = PCI_CLASS_BRIDGE_ISA,
G
Gerd Hoffmann 已提交
484 485 486 487 488 489 490 491
    },{
        /* end of list */
    }
};

static SysBusDeviceInfo i440fx_pcihost_info = {
    .init         = i440fx_pcihost_initfn,
    .qdev.name    = "i440FX-pcihost",
492
    .qdev.fw_name = "pci",
G
Gerd Hoffmann 已提交
493 494 495 496 497 498 499 500 501 502
    .qdev.size    = sizeof(I440FXState),
    .qdev.no_user = 1,
};

static void i440fx_register(void)
{
    sysbus_register_withprop(&i440fx_pcihost_info);
    pci_qdev_register_many(i440fx_info);
}
device_init(i440fx_register);