mcf5208.c 8.0 KB
Newer Older
1
/*
P
pbrook 已提交
2 3 4 5 6 7
 * Motorola ColdFire MCF5208 SoC emulation.
 *
 * Copyright (c) 2007 CodeSourcery.
 *
 * This code is licenced under the GPL
 */
P
pbrook 已提交
8 9 10 11 12 13
#include "hw.h"
#include "mcf.h"
#include "qemu-timer.h"
#include "sysemu.h"
#include "net.h"
#include "boards.h"
B
Blue Swirl 已提交
14 15
#include "loader.h"
#include "elf.h"
P
pbrook 已提交
16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44

#define SYS_FREQ 66000000

#define PCSR_EN         0x0001
#define PCSR_RLD        0x0002
#define PCSR_PIF        0x0004
#define PCSR_PIE        0x0008
#define PCSR_OVW        0x0010
#define PCSR_DBG        0x0020
#define PCSR_DOZE       0x0040
#define PCSR_PRE_SHIFT  8
#define PCSR_PRE_MASK   0x0f00

typedef struct {
    qemu_irq irq;
    ptimer_state *timer;
    uint16_t pcsr;
    uint16_t pmr;
    uint16_t pcntr;
} m5208_timer_state;

static void m5208_timer_update(m5208_timer_state *s)
{
    if ((s->pcsr & (PCSR_PIE | PCSR_PIF)) == (PCSR_PIE | PCSR_PIF))
        qemu_irq_raise(s->irq);
    else
        qemu_irq_lower(s->irq);
}

A
Anthony Liguori 已提交
45
static void m5208_timer_write(void *opaque, target_phys_addr_t offset,
P
pbrook 已提交
46 47
                              uint32_t value)
{
48
    m5208_timer_state *s = (m5208_timer_state *)opaque;
P
pbrook 已提交
49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73
    int prescale;
    int limit;
    switch (offset) {
    case 0:
        /* The PIF bit is set-to-clear.  */
        if (value & PCSR_PIF) {
            s->pcsr &= ~PCSR_PIF;
            value &= ~PCSR_PIF;
        }
        /* Avoid frobbing the timer if we're just twiddling IRQ bits. */
        if (((s->pcsr ^ value) & ~PCSR_PIE) == 0) {
            s->pcsr = value;
            m5208_timer_update(s);
            return;
        }

        if (s->pcsr & PCSR_EN)
            ptimer_stop(s->timer);

        s->pcsr = value;

        prescale = 1 << ((s->pcsr & PCSR_PRE_MASK) >> PCSR_PRE_SHIFT);
        ptimer_set_freq(s->timer, (SYS_FREQ / 2) / prescale);
        if (s->pcsr & PCSR_RLD)
            limit = s->pmr;
P
pbrook 已提交
74 75
        else
            limit = 0xffff;
P
pbrook 已提交
76 77 78 79 80 81 82 83
        ptimer_set_limit(s->timer, limit, 0);

        if (s->pcsr & PCSR_EN)
            ptimer_run(s->timer, 0);
        break;
    case 2:
        s->pmr = value;
        s->pcsr &= ~PCSR_PIF;
P
pbrook 已提交
84 85 86 87 88 89
        if ((s->pcsr & PCSR_RLD) == 0) {
            if (s->pcsr & PCSR_OVW)
                ptimer_set_count(s->timer, value);
        } else {
            ptimer_set_limit(s->timer, value, s->pcsr & PCSR_OVW);
        }
P
pbrook 已提交
90 91 92 93
        break;
    case 4:
        break;
    default:
P
Paul Brook 已提交
94
        hw_error("m5208_timer_write: Bad offset 0x%x\n", (int)offset);
95
        break;
P
pbrook 已提交
96 97 98 99 100 101 102 103 104 105 106
    }
    m5208_timer_update(s);
}

static void m5208_timer_trigger(void *opaque)
{
    m5208_timer_state *s = (m5208_timer_state *)opaque;
    s->pcsr |= PCSR_PIF;
    m5208_timer_update(s);
}

A
Anthony Liguori 已提交
107
static uint32_t m5208_timer_read(void *opaque, target_phys_addr_t addr)
108 109 110 111 112 113 114 115 116 117
{
    m5208_timer_state *s = (m5208_timer_state *)opaque;
    switch (addr) {
    case 0:
        return s->pcsr;
    case 2:
        return s->pmr;
    case 4:
        return ptimer_get_count(s->timer);
    default:
P
Paul Brook 已提交
118
        hw_error("m5208_timer_read: Bad offset 0x%x\n", (int)addr);
119 120 121 122
        return 0;
    }
}

123
static CPUReadMemoryFunc * const m5208_timer_readfn[] = {
124 125 126 127 128
   m5208_timer_read,
   m5208_timer_read,
   m5208_timer_read
};

129
static CPUWriteMemoryFunc * const m5208_timer_writefn[] = {
130 131 132 133
   m5208_timer_write,
   m5208_timer_write,
   m5208_timer_write
};
P
pbrook 已提交
134

A
Anthony Liguori 已提交
135
static uint32_t m5208_sys_read(void *opaque, target_phys_addr_t addr)
P
pbrook 已提交
136 137
{
    switch (addr) {
138
    case 0x110: /* SDCS0 */
P
pbrook 已提交
139 140 141 142 143 144 145 146
        {
            int n;
            for (n = 0; n < 32; n++) {
                if (ram_size < (2u << n))
                    break;
            }
            return (n - 1)  | 0x40000000;
        }
147
    case 0x114: /* SDCS1 */
P
pbrook 已提交
148 149 150
        return 0;

    default:
P
Paul Brook 已提交
151
        hw_error("m5208_sys_read: Bad offset 0x%x\n", (int)addr);
P
pbrook 已提交
152 153 154 155
        return 0;
    }
}

A
Anthony Liguori 已提交
156
static void m5208_sys_write(void *opaque, target_phys_addr_t addr,
P
pbrook 已提交
157 158
                            uint32_t value)
{
P
Paul Brook 已提交
159
    hw_error("m5208_sys_write: Bad offset 0x%x\n", (int)addr);
P
pbrook 已提交
160 161
}

162
static CPUReadMemoryFunc * const m5208_sys_readfn[] = {
P
pbrook 已提交
163 164 165 166 167
   m5208_sys_read,
   m5208_sys_read,
   m5208_sys_read
};

168
static CPUWriteMemoryFunc * const m5208_sys_writefn[] = {
P
pbrook 已提交
169 170 171 172 173 174 175 176
   m5208_sys_write,
   m5208_sys_write,
   m5208_sys_write
};

static void mcf5208_sys_init(qemu_irq *pic)
{
    int iomemtype;
177
    m5208_timer_state *s;
P
pbrook 已提交
178 179 180
    QEMUBH *bh;
    int i;

181
    iomemtype = cpu_register_io_memory(m5208_sys_readfn,
182 183
                                       m5208_sys_writefn, NULL,
                                       DEVICE_NATIVE_ENDIAN);
P
pbrook 已提交
184 185 186 187
    /* SDRAMC.  */
    cpu_register_physical_memory(0xfc0a8000, 0x00004000, iomemtype);
    /* Timers.  */
    for (i = 0; i < 2; i++) {
188 189 190
        s = (m5208_timer_state *)qemu_mallocz(sizeof(m5208_timer_state));
        bh = qemu_bh_new(m5208_timer_trigger, s);
        s->timer = ptimer_init(bh);
191
        iomemtype = cpu_register_io_memory(m5208_timer_readfn,
192 193
                                           m5208_timer_writefn, s,
                                           DEVICE_NATIVE_ENDIAN);
P
pbrook 已提交
194 195
        cpu_register_physical_memory(0xfc080000 + 0x4000 * i, 0x00004000,
                                     iomemtype);
196
        s->irq = pic[4 + i];
P
pbrook 已提交
197 198 199
    }
}

A
Anthony Liguori 已提交
200
static void mcf5208evb_init(ram_addr_t ram_size,
201
                     const char *boot_device,
P
pbrook 已提交
202 203 204 205 206 207
                     const char *kernel_filename, const char *kernel_cmdline,
                     const char *initrd_filename, const char *cpu_model)
{
    CPUState *env;
    int kernel_size;
    uint64_t elf_entry;
A
Anthony Liguori 已提交
208
    target_phys_addr_t entry;
P
pbrook 已提交
209 210 211 212
    qemu_irq *pic;

    if (!cpu_model)
        cpu_model = "m5208";
B
bellard 已提交
213 214 215 216
    env = cpu_init(cpu_model);
    if (!env) {
        fprintf(stderr, "Unable to find m68k CPU definition\n");
        exit(1);
P
pbrook 已提交
217 218 219 220 221 222
    }

    /* Initialize CPU registers.  */
    env->vbr = 0;
    /* TODO: Configure BARs.  */

223
    /* DRAM at 0x40000000 */
P
pbrook 已提交
224
    cpu_register_physical_memory(0x40000000, ram_size,
225
        qemu_ram_alloc(NULL, "mcf5208.ram", ram_size) | IO_MEM_RAM);
P
pbrook 已提交
226 227 228

    /* Internal SRAM.  */
    cpu_register_physical_memory(0x80000000, 16384,
229
        qemu_ram_alloc(NULL, "mcf5208.sram", 16384) | IO_MEM_RAM);
P
pbrook 已提交
230 231 232 233 234 235 236 237 238 239

    /* Internal peripherals.  */
    pic = mcf_intc_init(0xfc048000, env);

    mcf_uart_mm_init(0xfc060000, pic[26], serial_hds[0]);
    mcf_uart_mm_init(0xfc064000, pic[27], serial_hds[1]);
    mcf_uart_mm_init(0xfc068000, pic[28], serial_hds[2]);

    mcf5208_sys_init(pic);

P
pbrook 已提交
240 241 242 243
    if (nb_nics > 1) {
        fprintf(stderr, "Too many NICs\n");
        exit(1);
    }
244 245
    if (nd_table[0].vlan)
        mcf_fec_init(&nd_table[0], 0xfc030000, pic + 36);
P
pbrook 已提交
246

P
pbrook 已提交
247 248 249
    /*  0xfc000000 SCM.  */
    /*  0xfc004000 XBS.  */
    /*  0xfc008000 FlexBus CS.  */
P
pbrook 已提交
250
    /* 0xfc030000 FEC.  */
P
pbrook 已提交
251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274
    /*  0xfc040000 SCM + Power management.  */
    /*  0xfc044000 eDMA.  */
    /* 0xfc048000 INTC.  */
    /*  0xfc058000 I2C.  */
    /*  0xfc05c000 QSPI.  */
    /* 0xfc060000 UART0.  */
    /* 0xfc064000 UART0.  */
    /* 0xfc068000 UART0.  */
    /*  0xfc070000 DMA timers.  */
    /* 0xfc080000 PIT0.  */
    /* 0xfc084000 PIT1.  */
    /*  0xfc088000 EPORT.  */
    /*  0xfc08c000 Watchdog.  */
    /*  0xfc090000 clock module.  */
    /*  0xfc0a0000 CCM + reset.  */
    /*  0xfc0a4000 GPIO.  */
    /* 0xfc0a8000 SDRAM controller.  */

    /* Load kernel.  */
    if (!kernel_filename) {
        fprintf(stderr, "Kernel image must be specified\n");
        exit(1);
    }

275 276
    kernel_size = load_elf(kernel_filename, NULL, NULL, &elf_entry,
                           NULL, NULL, 1, ELF_MACHINE, 0);
P
pbrook 已提交
277 278
    entry = elf_entry;
    if (kernel_size < 0) {
279
        kernel_size = load_uimage(kernel_filename, &entry, NULL, NULL);
P
pbrook 已提交
280 281
    }
    if (kernel_size < 0) {
282 283 284
        kernel_size = load_image_targphys(kernel_filename, 0x40000000,
                                          ram_size);
        entry = 0x40000000;
P
pbrook 已提交
285 286 287 288 289 290 291 292 293
    }
    if (kernel_size < 0) {
        fprintf(stderr, "qemu: could not load kernel '%s'\n", kernel_filename);
        exit(1);
    }

    env->pc = entry;
}

294
static QEMUMachine mcf5208evb_machine = {
295 296 297
    .name = "mcf5208evb",
    .desc = "MCF5206EVB",
    .init = mcf5208evb_init,
298
    .is_default = 1,
P
pbrook 已提交
299
};
300 301 302 303 304 305 306

static void mcf5208evb_machine_init(void)
{
    qemu_register_machine(&mcf5208evb_machine);
}

machine_init(mcf5208evb_machine_init);