apic.c 26.5 KB
Newer Older
B
bellard 已提交
1 2
/*
 *  APIC support
3
 *
B
bellard 已提交
4 5 6 7 8 9 10 11 12 13 14 15 16
 *  Copyright (c) 2004-2005 Fabrice Bellard
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
17
 * License along with this library; if not, see <http://www.gnu.org/licenses/>
B
bellard 已提交
18
 */
P
pbrook 已提交
19
#include "hw.h"
20
#include "apic.h"
21
#include "ioapic.h"
P
pbrook 已提交
22
#include "qemu-timer.h"
23
#include "host-utils.h"
B
Blue Swirl 已提交
24
#include "sysbus.h"
25
#include "trace.h"
B
bellard 已提交
26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44

/* APIC Local Vector Table */
#define APIC_LVT_TIMER   0
#define APIC_LVT_THERMAL 1
#define APIC_LVT_PERFORM 2
#define APIC_LVT_LINT0   3
#define APIC_LVT_LINT1   4
#define APIC_LVT_ERROR   5
#define APIC_LVT_NB      6

/* APIC delivery modes */
#define APIC_DM_FIXED	0
#define APIC_DM_LOWPRI	1
#define APIC_DM_SMI	2
#define APIC_DM_NMI	4
#define APIC_DM_INIT	5
#define APIC_DM_SIPI	6
#define APIC_DM_EXTINT	7

45 46 47 48
/* APIC destination mode */
#define APIC_DESTMODE_FLAT	0xf
#define APIC_DESTMODE_CLUSTER	1

B
bellard 已提交
49 50 51 52 53 54 55 56 57 58 59 60
#define APIC_TRIGGER_EDGE  0
#define APIC_TRIGGER_LEVEL 1

#define	APIC_LVT_TIMER_PERIODIC		(1<<17)
#define	APIC_LVT_MASKED			(1<<16)
#define	APIC_LVT_LEVEL_TRIGGER		(1<<15)
#define	APIC_LVT_REMOTE_IRR		(1<<14)
#define	APIC_INPUT_POLARITY		(1<<13)
#define	APIC_SEND_PENDING		(1<<12)

#define ESR_ILLEGAL_ADDRESS (1 << 7)

61 62
#define APIC_SV_DIRECTED_IO             (1<<12)
#define APIC_SV_ENABLE                  (1<<8)
B
bellard 已提交
63

B
bellard 已提交
64 65 66
#define MAX_APICS 255
#define MAX_APIC_WORDS 8

67 68 69 70 71 72 73 74 75 76 77 78
/* Intel APIC constants: from include/asm/msidef.h */
#define MSI_DATA_VECTOR_SHIFT		0
#define MSI_DATA_VECTOR_MASK		0x000000ff
#define MSI_DATA_DELIVERY_MODE_SHIFT	8
#define MSI_DATA_TRIGGER_SHIFT		15
#define MSI_DATA_LEVEL_SHIFT		14
#define MSI_ADDR_DEST_MODE_SHIFT	2
#define MSI_ADDR_DEST_ID_SHIFT		12
#define	MSI_ADDR_DEST_ID_MASK		0x00ffff0

#define MSI_ADDR_SIZE                   0x100000

B
Blue Swirl 已提交
79 80
typedef struct APICState APICState;

81
struct APICState {
B
Blue Swirl 已提交
82
    SysBusDevice busdev;
A
Avi Kivity 已提交
83
    MemoryRegion io_memory;
B
Blue Swirl 已提交
84
    void *cpu_env;
B
bellard 已提交
85 86
    uint32_t apicbase;
    uint8_t id;
87
    uint8_t arb_id;
B
bellard 已提交
88 89
    uint8_t tpr;
    uint32_t spurious_vec;
90 91
    uint8_t log_dest;
    uint8_t dest_mode;
B
bellard 已提交
92 93 94 95 96 97 98 99 100 101 102
    uint32_t isr[8];  /* in service register */
    uint32_t tmr[8];  /* trigger mode register */
    uint32_t irr[8]; /* interrupt request register */
    uint32_t lvt[APIC_LVT_NB];
    uint32_t esr; /* error register */
    uint32_t icr[2];

    uint32_t divide_conf;
    int count_shift;
    uint32_t initial_count;
    int64_t initial_count_load_time, next_time;
G
Gleb Natapov 已提交
103
    uint32_t idx;
B
bellard 已提交
104
    QEMUTimer *timer;
105 106
    int sipi_vector;
    int wait_for_sipi;
107
};
B
bellard 已提交
108

B
bellard 已提交
109
static APICState *local_apics[MAX_APICS + 1];
110 111
static int apic_irq_delivered;

112 113
static void apic_set_irq(APICState *s, int vector_num, int trigger_mode);
static void apic_update_irq(APICState *s);
114 115
static void apic_get_delivery_bitmask(uint32_t *deliver_bitmask,
                                      uint8_t dest, uint8_t dest_mode);
116

117 118 119 120 121 122
/* Find first bit starting from msb */
static int fls_bit(uint32_t value)
{
    return 31 - clz32(value);
}

123
/* Find first bit starting from lsb */
B
bellard 已提交
124 125
static int ffs_bit(uint32_t value)
{
126
    return ctz32(value);
B
bellard 已提交
127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144
}

static inline void set_bit(uint32_t *tab, int index)
{
    int i, mask;
    i = index >> 5;
    mask = 1 << (index & 0x1f);
    tab[i] |= mask;
}

static inline void reset_bit(uint32_t *tab, int index)
{
    int i, mask;
    i = index >> 5;
    mask = 1 << (index & 0x1f);
    tab[i] &= ~mask;
}

145 146 147 148 149 150 151 152
static inline int get_bit(uint32_t *tab, int index)
{
    int i, mask;
    i = index >> 5;
    mask = 1 << (index & 0x1f);
    return !!(tab[i] & mask);
}

153
static void apic_local_deliver(APICState *s, int vector)
154 155 156 157
{
    uint32_t lvt = s->lvt[vector];
    int trigger_mode;

158 159
    trace_apic_local_deliver(vector, (lvt >> 8) & 7);

160 161 162 163 164
    if (lvt & APIC_LVT_MASKED)
        return;

    switch ((lvt >> 8) & 7) {
    case APIC_DM_SMI:
165
        cpu_interrupt(s->cpu_env, CPU_INTERRUPT_SMI);
166 167 168
        break;

    case APIC_DM_NMI:
169
        cpu_interrupt(s->cpu_env, CPU_INTERRUPT_NMI);
170 171 172
        break;

    case APIC_DM_EXTINT:
173
        cpu_interrupt(s->cpu_env, CPU_INTERRUPT_HARD);
174 175 176 177 178 179 180 181 182 183 184
        break;

    case APIC_DM_FIXED:
        trigger_mode = APIC_TRIGGER_EDGE;
        if ((vector == APIC_LVT_LINT0 || vector == APIC_LVT_LINT1) &&
            (lvt & APIC_LVT_LEVEL_TRIGGER))
            trigger_mode = APIC_TRIGGER_LEVEL;
        apic_set_irq(s, lvt & 0xff, trigger_mode);
    }
}

B
Blue Swirl 已提交
185
void apic_deliver_pic_intr(DeviceState *d, int level)
186
{
B
Blue Swirl 已提交
187 188
    APICState *s = DO_UPCAST(APICState, busdev.qdev, d);

189 190 191
    if (level) {
        apic_local_deliver(s, APIC_LVT_LINT0);
    } else {
192 193 194 195 196 197 198 199 200
        uint32_t lvt = s->lvt[APIC_LVT_LINT0];

        switch ((lvt >> 8) & 7) {
        case APIC_DM_FIXED:
            if (!(lvt & APIC_LVT_LEVEL_TRIGGER))
                break;
            reset_bit(s->irr, lvt & 0xff);
            /* fall through */
        case APIC_DM_EXTINT:
201
            cpu_reset_interrupt(s->cpu_env, CPU_INTERRUPT_HARD);
202 203 204 205 206
            break;
        }
    }
}

B
bellard 已提交
207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224
#define foreach_apic(apic, deliver_bitmask, code) \
{\
    int __i, __j, __mask;\
    for(__i = 0; __i < MAX_APIC_WORDS; __i++) {\
        __mask = deliver_bitmask[__i];\
        if (__mask) {\
            for(__j = 0; __j < 32; __j++) {\
                if (__mask & (1 << __j)) {\
                    apic = local_apics[__i * 32 + __j];\
                    if (apic) {\
                        code;\
                    }\
                }\
            }\
        }\
    }\
}

225
static void apic_bus_deliver(const uint32_t *deliver_bitmask,
B
bellard 已提交
226
                             uint8_t delivery_mode,
227 228 229 230 231 232 233
                             uint8_t vector_num, uint8_t polarity,
                             uint8_t trigger_mode)
{
    APICState *apic_iter;

    switch (delivery_mode) {
        case APIC_DM_LOWPRI:
B
bellard 已提交
234
            /* XXX: search for focus processor, arbitration */
B
bellard 已提交
235 236 237 238 239 240 241 242 243 244 245 246 247 248 249
            {
                int i, d;
                d = -1;
                for(i = 0; i < MAX_APIC_WORDS; i++) {
                    if (deliver_bitmask[i]) {
                        d = i * 32 + ffs_bit(deliver_bitmask[i]);
                        break;
                    }
                }
                if (d >= 0) {
                    apic_iter = local_apics[d];
                    if (apic_iter) {
                        apic_set_irq(apic_iter, vector_num, trigger_mode);
                    }
                }
B
bellard 已提交
250
            }
B
bellard 已提交
251
            return;
B
bellard 已提交
252

253 254 255 256
        case APIC_DM_FIXED:
            break;

        case APIC_DM_SMI:
A
aurel32 已提交
257 258 259 260
            foreach_apic(apic_iter, deliver_bitmask,
                cpu_interrupt(apic_iter->cpu_env, CPU_INTERRUPT_SMI) );
            return;

261
        case APIC_DM_NMI:
A
aurel32 已提交
262 263 264
            foreach_apic(apic_iter, deliver_bitmask,
                cpu_interrupt(apic_iter->cpu_env, CPU_INTERRUPT_NMI) );
            return;
265 266 267

        case APIC_DM_INIT:
            /* normal INIT IPI sent to processors */
268
            foreach_apic(apic_iter, deliver_bitmask,
269
                         cpu_interrupt(apic_iter->cpu_env, CPU_INTERRUPT_INIT) );
270
            return;
271

272
        case APIC_DM_EXTINT:
273
            /* handled in I/O APIC code */
274 275 276 277 278 279
            break;

        default:
            return;
    }

280
    foreach_apic(apic_iter, deliver_bitmask,
B
bellard 已提交
281
                 apic_set_irq(apic_iter, vector_num, trigger_mode) );
282
}
B
bellard 已提交
283

284 285 286 287 288 289
void apic_deliver_irq(uint8_t dest, uint8_t dest_mode,
                      uint8_t delivery_mode, uint8_t vector_num,
                      uint8_t polarity, uint8_t trigger_mode)
{
    uint32_t deliver_bitmask[MAX_APIC_WORDS];

290 291 292
    trace_apic_deliver_irq(dest, dest_mode, delivery_mode, vector_num,
                           polarity, trigger_mode);

293 294 295 296 297
    apic_get_delivery_bitmask(deliver_bitmask, dest, dest_mode);
    apic_bus_deliver(deliver_bitmask, delivery_mode, vector_num, polarity,
                     trigger_mode);
}

B
Blue Swirl 已提交
298
void cpu_set_apic_base(DeviceState *d, uint64_t val)
B
bellard 已提交
299
{
B
Blue Swirl 已提交
300 301
    APICState *s = DO_UPCAST(APICState, busdev.qdev, d);

302 303
    trace_cpu_set_apic_base(val);

A
aurel32 已提交
304 305
    if (!s)
        return;
306
    s->apicbase = (val & 0xfffff000) |
B
bellard 已提交
307 308 309 310
        (s->apicbase & (MSR_IA32_APICBASE_BSP | MSR_IA32_APICBASE_ENABLE));
    /* if disabled, cannot be enabled again */
    if (!(val & MSR_IA32_APICBASE_ENABLE)) {
        s->apicbase &= ~MSR_IA32_APICBASE_ENABLE;
311
        cpu_clear_apic_feature(s->cpu_env);
B
bellard 已提交
312 313 314 315
        s->spurious_vec &= ~APIC_SV_ENABLE;
    }
}

B
Blue Swirl 已提交
316
uint64_t cpu_get_apic_base(DeviceState *d)
B
bellard 已提交
317
{
B
Blue Swirl 已提交
318 319
    APICState *s = DO_UPCAST(APICState, busdev.qdev, d);

320 321
    trace_cpu_get_apic_base(s ? (uint64_t)s->apicbase: 0);

A
aurel32 已提交
322
    return s ? s->apicbase : 0;
B
bellard 已提交
323 324
}

B
Blue Swirl 已提交
325
void cpu_set_apic_tpr(DeviceState *d, uint8_t val)
B
bellard 已提交
326
{
B
Blue Swirl 已提交
327 328
    APICState *s = DO_UPCAST(APICState, busdev.qdev, d);

A
aurel32 已提交
329 330
    if (!s)
        return;
B
bellard 已提交
331
    s->tpr = (val & 0x0f) << 4;
332
    apic_update_irq(s);
B
bellard 已提交
333 334
}

B
Blue Swirl 已提交
335
uint8_t cpu_get_apic_tpr(DeviceState *d)
B
bellard 已提交
336
{
B
Blue Swirl 已提交
337 338
    APICState *s = DO_UPCAST(APICState, busdev.qdev, d);

A
aurel32 已提交
339
    return s ? s->tpr >> 4 : 0;
B
bellard 已提交
340 341
}

342 343 344 345 346 347
/* return -1 if no bit is set */
static int get_highest_priority_int(uint32_t *tab)
{
    int i;
    for(i = 7; i >= 0; i--) {
        if (tab[i] != 0) {
348
            return i * 32 + fls_bit(tab[i]);
349 350 351 352 353
        }
    }
    return -1;
}

B
bellard 已提交
354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369
static int apic_get_ppr(APICState *s)
{
    int tpr, isrv, ppr;

    tpr = (s->tpr >> 4);
    isrv = get_highest_priority_int(s->isr);
    if (isrv < 0)
        isrv = 0;
    isrv >>= 4;
    if (tpr >= isrv)
        ppr = s->tpr;
    else
        ppr = isrv << 4;
    return ppr;
}

370 371 372 373 374 375
static int apic_get_arb_pri(APICState *s)
{
    /* XXX: arbitration */
    return 0;
}

376 377 378 379 380 381 382

/*
 * <0 - low prio interrupt,
 * 0  - no interrupt,
 * >0 - interrupt number
 */
static int apic_irq_pending(APICState *s)
B
bellard 已提交
383
{
384
    int irrv, ppr;
B
bellard 已提交
385
    irrv = get_highest_priority_int(s->irr);
386 387 388
    if (irrv < 0) {
        return 0;
    }
389
    ppr = apic_get_ppr(s);
390 391 392 393 394 395 396 397 398 399 400
    if (ppr && (irrv & 0xf0) <= (ppr & 0xf0)) {
        return -1;
    }

    return irrv;
}

/* signal the CPU if an irq is pending */
static void apic_update_irq(APICState *s)
{
    if (!(s->spurious_vec & APIC_SV_ENABLE)) {
B
bellard 已提交
401
        return;
402 403 404 405
    }
    if (apic_irq_pending(s) > 0) {
        cpu_interrupt(s->cpu_env, CPU_INTERRUPT_HARD);
    }
B
bellard 已提交
406 407
}

408 409
void apic_reset_irq_delivered(void)
{
410 411
    trace_apic_reset_irq_delivered(apic_irq_delivered);

412 413 414 415 416
    apic_irq_delivered = 0;
}

int apic_get_irq_delivered(void)
{
417 418
    trace_apic_get_irq_delivered(apic_irq_delivered);

419 420 421
    return apic_irq_delivered;
}

B
bellard 已提交
422 423
static void apic_set_irq(APICState *s, int vector_num, int trigger_mode)
{
424
    apic_irq_delivered += !get_bit(s->irr, vector_num);
425 426

    trace_apic_set_irq(apic_irq_delivered);
427

B
bellard 已提交
428 429 430 431 432 433 434 435 436 437 438 439 440 441 442
    set_bit(s->irr, vector_num);
    if (trigger_mode)
        set_bit(s->tmr, vector_num);
    else
        reset_bit(s->tmr, vector_num);
    apic_update_irq(s);
}

static void apic_eoi(APICState *s)
{
    int isrv;
    isrv = get_highest_priority_int(s->isr);
    if (isrv < 0)
        return;
    reset_bit(s->isr, isrv);
443 444 445
    if (!(s->spurious_vec & APIC_SV_DIRECTED_IO) && get_bit(s->tmr, isrv)) {
        ioapic_eoi_broadcast(isrv);
    }
B
bellard 已提交
446 447 448
    apic_update_irq(s);
}

G
Gleb Natapov 已提交
449 450 451 452 453 454 455 456 457 458 459 460
static int apic_find_dest(uint8_t dest)
{
    APICState *apic = local_apics[dest];
    int i;

    if (apic && apic->id == dest)
        return dest;  /* shortcut in case apic->id == apic->idx */

    for (i = 0; i < MAX_APICS; i++) {
        apic = local_apics[i];
	if (apic && apic->id == dest)
            return i;
461 462
        if (!apic)
            break;
G
Gleb Natapov 已提交
463 464 465 466 467
    }

    return -1;
}

B
bellard 已提交
468 469
static void apic_get_delivery_bitmask(uint32_t *deliver_bitmask,
                                      uint8_t dest, uint8_t dest_mode)
470 471
{
    APICState *apic_iter;
B
bellard 已提交
472
    int i;
473 474

    if (dest_mode == 0) {
B
bellard 已提交
475 476 477
        if (dest == 0xff) {
            memset(deliver_bitmask, 0xff, MAX_APIC_WORDS * sizeof(uint32_t));
        } else {
G
Gleb Natapov 已提交
478
            int idx = apic_find_dest(dest);
B
bellard 已提交
479
            memset(deliver_bitmask, 0x00, MAX_APIC_WORDS * sizeof(uint32_t));
G
Gleb Natapov 已提交
480 481
            if (idx >= 0)
                set_bit(deliver_bitmask, idx);
B
bellard 已提交
482
        }
483 484
    } else {
        /* XXX: cluster mode */
B
bellard 已提交
485 486 487 488 489 490 491 492 493 494 495 496 497
        memset(deliver_bitmask, 0x00, MAX_APIC_WORDS * sizeof(uint32_t));
        for(i = 0; i < MAX_APICS; i++) {
            apic_iter = local_apics[i];
            if (apic_iter) {
                if (apic_iter->dest_mode == 0xf) {
                    if (dest & apic_iter->log_dest)
                        set_bit(deliver_bitmask, i);
                } else if (apic_iter->dest_mode == 0x0) {
                    if ((dest & 0xf0) == (apic_iter->log_dest & 0xf0) &&
                        (dest & apic_iter->log_dest & 0x0f)) {
                        set_bit(deliver_bitmask, i);
                    }
                }
498 499
            } else {
                break;
B
bellard 已提交
500
            }
501 502 503 504
        }
    }
}

B
Blue Swirl 已提交
505
void apic_init_reset(DeviceState *d)
506
{
B
Blue Swirl 已提交
507
    APICState *s = DO_UPCAST(APICState, busdev.qdev, d);
508 509
    int i;

510 511 512
    if (!s)
        return;

513 514 515
    s->tpr = 0;
    s->spurious_vec = 0xff;
    s->log_dest = 0;
B
bellard 已提交
516
    s->dest_mode = 0xf;
517 518 519
    memset(s->isr, 0, sizeof(s->isr));
    memset(s->tmr, 0, sizeof(s->tmr));
    memset(s->irr, 0, sizeof(s->irr));
520 521
    for(i = 0; i < APIC_LVT_NB; i++)
        s->lvt[i] = 1 << 16; /* mask LVT */
522 523 524 525 526 527 528
    s->esr = 0;
    memset(s->icr, 0, sizeof(s->icr));
    s->divide_conf = 0;
    s->count_shift = 0;
    s->initial_count = 0;
    s->initial_count_load_time = 0;
    s->next_time = 0;
529
    s->wait_for_sipi = 1;
530 531
}

B
bellard 已提交
532 533
static void apic_startup(APICState *s, int vector_num)
{
534 535 536 537
    s->sipi_vector = vector_num;
    cpu_interrupt(s->cpu_env, CPU_INTERRUPT_SIPI);
}

B
Blue Swirl 已提交
538
void apic_sipi(DeviceState *d)
539
{
B
Blue Swirl 已提交
540 541
    APICState *s = DO_UPCAST(APICState, busdev.qdev, d);

542
    cpu_reset_interrupt(s->cpu_env, CPU_INTERRUPT_SIPI);
543 544

    if (!s->wait_for_sipi)
B
bellard 已提交
545
        return;
546
    cpu_x86_load_seg_cache_sipi(s->cpu_env, s->sipi_vector);
547
    s->wait_for_sipi = 0;
B
bellard 已提交
548 549
}

B
Blue Swirl 已提交
550
static void apic_deliver(DeviceState *d, uint8_t dest, uint8_t dest_mode,
551 552 553
                         uint8_t delivery_mode, uint8_t vector_num,
                         uint8_t polarity, uint8_t trigger_mode)
{
B
Blue Swirl 已提交
554
    APICState *s = DO_UPCAST(APICState, busdev.qdev, d);
B
bellard 已提交
555
    uint32_t deliver_bitmask[MAX_APIC_WORDS];
556 557 558
    int dest_shorthand = (s->icr[0] >> 18) & 3;
    APICState *apic_iter;

B
bellard 已提交
559
    switch (dest_shorthand) {
B
bellard 已提交
560 561 562 563 564
    case 0:
        apic_get_delivery_bitmask(deliver_bitmask, dest, dest_mode);
        break;
    case 1:
        memset(deliver_bitmask, 0x00, sizeof(deliver_bitmask));
G
Gleb Natapov 已提交
565
        set_bit(deliver_bitmask, s->idx);
B
bellard 已提交
566 567 568 569 570 571
        break;
    case 2:
        memset(deliver_bitmask, 0xff, sizeof(deliver_bitmask));
        break;
    case 3:
        memset(deliver_bitmask, 0xff, sizeof(deliver_bitmask));
G
Gleb Natapov 已提交
572
        reset_bit(deliver_bitmask, s->idx);
B
bellard 已提交
573
        break;
B
bellard 已提交
574 575
    }

576 577 578 579 580 581
    switch (delivery_mode) {
        case APIC_DM_INIT:
            {
                int trig_mode = (s->icr[0] >> 15) & 1;
                int level = (s->icr[0] >> 14) & 1;
                if (level == 0 && trig_mode == 1) {
582
                    foreach_apic(apic_iter, deliver_bitmask,
B
bellard 已提交
583
                                 apic_iter->arb_id = apic_iter->id );
584 585 586 587 588 589
                    return;
                }
            }
            break;

        case APIC_DM_SIPI:
590
            foreach_apic(apic_iter, deliver_bitmask,
B
bellard 已提交
591
                         apic_startup(apic_iter, vector_num) );
592 593 594 595 596 597 598
            return;
    }

    apic_bus_deliver(deliver_bitmask, delivery_mode, vector_num, polarity,
                     trigger_mode);
}

B
Blue Swirl 已提交
599
int apic_get_interrupt(DeviceState *d)
B
bellard 已提交
600
{
B
Blue Swirl 已提交
601
    APICState *s = DO_UPCAST(APICState, busdev.qdev, d);
B
bellard 已提交
602 603 604 605 606 607 608 609
    int intno;

    /* if the APIC is installed or enabled, we let the 8259 handle the
       IRQs */
    if (!s)
        return -1;
    if (!(s->spurious_vec & APIC_SV_ENABLE))
        return -1;
610

611 612 613
    intno = apic_irq_pending(s);

    if (intno == 0) {
B
bellard 已提交
614
        return -1;
615
    } else if (intno < 0) {
616
        return s->spurious_vec & 0xff;
617
    }
618
    reset_bit(s->irr, intno);
B
bellard 已提交
619 620 621 622 623
    set_bit(s->isr, intno);
    apic_update_irq(s);
    return intno;
}

B
Blue Swirl 已提交
624
int apic_accept_pic_intr(DeviceState *d)
625
{
B
Blue Swirl 已提交
626
    APICState *s = DO_UPCAST(APICState, busdev.qdev, d);
627 628 629 630 631 632 633
    uint32_t lvt0;

    if (!s)
        return -1;

    lvt0 = s->lvt[APIC_LVT_LINT0];

634 635
    if ((s->apicbase & MSR_IA32_APICBASE_ENABLE) == 0 ||
        (lvt0 & APIC_LVT_MASKED) == 0)
636 637 638 639 640
        return 1;

    return 0;
}

B
bellard 已提交
641 642 643 644
static uint32_t apic_get_current_count(APICState *s)
{
    int64_t d;
    uint32_t val;
645
    d = (qemu_get_clock_ns(vm_clock) - s->initial_count_load_time) >>
B
bellard 已提交
646 647 648
        s->count_shift;
    if (s->lvt[APIC_LVT_TIMER] & APIC_LVT_TIMER_PERIODIC) {
        /* periodic */
649
        val = s->initial_count - (d % ((uint64_t)s->initial_count + 1));
B
bellard 已提交
650 651 652 653 654 655 656 657 658 659 660 661
    } else {
        if (d >= s->initial_count)
            val = 0;
        else
            val = s->initial_count - d;
    }
    return val;
}

static void apic_timer_update(APICState *s, int64_t current_time)
{
    int64_t next_time, d;
662

B
bellard 已提交
663
    if (!(s->lvt[APIC_LVT_TIMER] & APIC_LVT_MASKED)) {
664
        d = (current_time - s->initial_count_load_time) >>
B
bellard 已提交
665 666
            s->count_shift;
        if (s->lvt[APIC_LVT_TIMER] & APIC_LVT_TIMER_PERIODIC) {
667 668
            if (!s->initial_count)
                goto no_timer;
669
            d = ((d / ((uint64_t)s->initial_count + 1)) + 1) * ((uint64_t)s->initial_count + 1);
B
bellard 已提交
670 671 672
        } else {
            if (d >= s->initial_count)
                goto no_timer;
673
            d = (uint64_t)s->initial_count + 1;
B
bellard 已提交
674 675 676 677 678 679 680 681 682 683 684 685 686 687
        }
        next_time = s->initial_count_load_time + (d << s->count_shift);
        qemu_mod_timer(s->timer, next_time);
        s->next_time = next_time;
    } else {
    no_timer:
        qemu_del_timer(s->timer);
    }
}

static void apic_timer(void *opaque)
{
    APICState *s = opaque;

688
    apic_local_deliver(s, APIC_LVT_TIMER);
B
bellard 已提交
689 690 691
    apic_timer_update(s, s->next_time);
}

A
Anthony Liguori 已提交
692
static uint32_t apic_mem_readb(void *opaque, target_phys_addr_t addr)
B
bellard 已提交
693 694 695 696
{
    return 0;
}

A
Anthony Liguori 已提交
697
static uint32_t apic_mem_readw(void *opaque, target_phys_addr_t addr)
B
bellard 已提交
698 699 700 701
{
    return 0;
}

A
Anthony Liguori 已提交
702
static void apic_mem_writeb(void *opaque, target_phys_addr_t addr, uint32_t val)
B
bellard 已提交
703 704 705
{
}

A
Anthony Liguori 已提交
706
static void apic_mem_writew(void *opaque, target_phys_addr_t addr, uint32_t val)
B
bellard 已提交
707 708 709
{
}

A
Anthony Liguori 已提交
710
static uint32_t apic_mem_readl(void *opaque, target_phys_addr_t addr)
B
bellard 已提交
711
{
B
Blue Swirl 已提交
712
    DeviceState *d;
B
bellard 已提交
713 714 715 716
    APICState *s;
    uint32_t val;
    int index;

B
Blue Swirl 已提交
717 718
    d = cpu_get_current_apic();
    if (!d) {
B
bellard 已提交
719
        return 0;
720
    }
B
Blue Swirl 已提交
721
    s = DO_UPCAST(APICState, busdev.qdev, d);
B
bellard 已提交
722 723 724 725 726 727 728 729 730 731 732 733

    index = (addr >> 4) & 0xff;
    switch(index) {
    case 0x02: /* id */
        val = s->id << 24;
        break;
    case 0x03: /* version */
        val = 0x11 | ((APIC_LVT_NB - 1) << 16); /* version 0x11 */
        break;
    case 0x08:
        val = s->tpr;
        break;
734 735 736
    case 0x09:
        val = apic_get_arb_pri(s);
        break;
B
bellard 已提交
737 738 739 740
    case 0x0a:
        /* ppr */
        val = apic_get_ppr(s);
        break;
A
aurel32 已提交
741 742 743
    case 0x0b:
        val = 0;
        break;
744 745 746 747 748 749
    case 0x0d:
        val = s->log_dest << 24;
        break;
    case 0x0e:
        val = s->dest_mode << 28;
        break;
B
bellard 已提交
750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768
    case 0x0f:
        val = s->spurious_vec;
        break;
    case 0x10 ... 0x17:
        val = s->isr[index & 7];
        break;
    case 0x18 ... 0x1f:
        val = s->tmr[index & 7];
        break;
    case 0x20 ... 0x27:
        val = s->irr[index & 7];
        break;
    case 0x28:
        val = s->esr;
        break;
    case 0x30:
    case 0x31:
        val = s->icr[index & 1];
        break;
B
bellard 已提交
769 770 771
    case 0x32 ... 0x37:
        val = s->lvt[index - 0x32];
        break;
B
bellard 已提交
772 773 774 775 776 777 778 779 780 781 782 783 784 785
    case 0x38:
        val = s->initial_count;
        break;
    case 0x39:
        val = apic_get_current_count(s);
        break;
    case 0x3e:
        val = s->divide_conf;
        break;
    default:
        s->esr |= ESR_ILLEGAL_ADDRESS;
        val = 0;
        break;
    }
786
    trace_apic_mem_readl(addr, val);
B
bellard 已提交
787 788 789
    return val;
}

790
static void apic_send_msi(target_phys_addr_t addr, uint32_t data)
791 792 793 794 795 796 797 798 799 800
{
    uint8_t dest = (addr & MSI_ADDR_DEST_ID_MASK) >> MSI_ADDR_DEST_ID_SHIFT;
    uint8_t vector = (data & MSI_DATA_VECTOR_MASK) >> MSI_DATA_VECTOR_SHIFT;
    uint8_t dest_mode = (addr >> MSI_ADDR_DEST_MODE_SHIFT) & 0x1;
    uint8_t trigger_mode = (data >> MSI_DATA_TRIGGER_SHIFT) & 0x1;
    uint8_t delivery = (data >> MSI_DATA_DELIVERY_MODE_SHIFT) & 0x7;
    /* XXX: Ignore redirection hint. */
    apic_deliver_irq(dest, dest_mode, delivery, vector, 0, trigger_mode);
}

A
Anthony Liguori 已提交
801
static void apic_mem_writel(void *opaque, target_phys_addr_t addr, uint32_t val)
B
bellard 已提交
802
{
B
Blue Swirl 已提交
803
    DeviceState *d;
B
bellard 已提交
804
    APICState *s;
805 806 807 808 809 810 811 812 813 814
    int index = (addr >> 4) & 0xff;
    if (addr > 0xfff || !index) {
        /* MSI and MMIO APIC are at the same memory location,
         * but actually not on the global bus: MSI is on PCI bus
         * APIC is connected directly to the CPU.
         * Mapping them on the global bus happens to work because
         * MSI registers are reserved in APIC MMIO and vice versa. */
        apic_send_msi(addr, val);
        return;
    }
B
bellard 已提交
815

B
Blue Swirl 已提交
816 817
    d = cpu_get_current_apic();
    if (!d) {
B
bellard 已提交
818
        return;
819
    }
B
Blue Swirl 已提交
820
    s = DO_UPCAST(APICState, busdev.qdev, d);
B
bellard 已提交
821

822
    trace_apic_mem_writel(addr, val);
B
bellard 已提交
823 824 825 826 827

    switch(index) {
    case 0x02:
        s->id = (val >> 24);
        break;
B
bellard 已提交
828 829
    case 0x03:
        break;
B
bellard 已提交
830 831
    case 0x08:
        s->tpr = val;
832
        apic_update_irq(s);
B
bellard 已提交
833
        break;
B
bellard 已提交
834 835 836
    case 0x09:
    case 0x0a:
        break;
B
bellard 已提交
837 838 839
    case 0x0b: /* EOI */
        apic_eoi(s);
        break;
840 841 842 843 844 845
    case 0x0d:
        s->log_dest = val >> 24;
        break;
    case 0x0e:
        s->dest_mode = val >> 28;
        break;
B
bellard 已提交
846 847
    case 0x0f:
        s->spurious_vec = val & 0x1ff;
848
        apic_update_irq(s);
B
bellard 已提交
849
        break;
B
bellard 已提交
850 851 852 853 854
    case 0x10 ... 0x17:
    case 0x18 ... 0x1f:
    case 0x20 ... 0x27:
    case 0x28:
        break;
B
bellard 已提交
855
    case 0x30:
856
        s->icr[0] = val;
B
Blue Swirl 已提交
857
        apic_deliver(d, (s->icr[1] >> 24) & 0xff, (s->icr[0] >> 11) & 1,
858 859 860
                     (s->icr[0] >> 8) & 7, (s->icr[0] & 0xff),
                     (s->icr[0] >> 14) & 1, (s->icr[0] >> 15) & 1);
        break;
B
bellard 已提交
861
    case 0x31:
862
        s->icr[1] = val;
B
bellard 已提交
863 864 865 866 867 868
        break;
    case 0x32 ... 0x37:
        {
            int n = index - 0x32;
            s->lvt[n] = val;
            if (n == APIC_LVT_TIMER)
869
                apic_timer_update(s, qemu_get_clock_ns(vm_clock));
B
bellard 已提交
870 871 872 873
        }
        break;
    case 0x38:
        s->initial_count = val;
874
        s->initial_count_load_time = qemu_get_clock_ns(vm_clock);
B
bellard 已提交
875 876
        apic_timer_update(s, s->initial_count_load_time);
        break;
B
bellard 已提交
877 878
    case 0x39:
        break;
B
bellard 已提交
879 880 881 882 883 884 885 886 887 888 889 890 891 892
    case 0x3e:
        {
            int v;
            s->divide_conf = val & 0xb;
            v = (s->divide_conf & 3) | ((s->divide_conf >> 1) & 4);
            s->count_shift = (v + 1) & 7;
        }
        break;
    default:
        s->esr |= ESR_ILLEGAL_ADDRESS;
        break;
    }
}

J
Juan Quintela 已提交
893 894
/* This function is only used for old state version 1 and 2 */
static int apic_load_old(QEMUFile *f, void *opaque, int version_id)
895 896 897 898
{
    APICState *s = opaque;
    int i;

B
bellard 已提交
899
    if (version_id > 2)
900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921
        return -EINVAL;

    /* XXX: what if the base changes? (registered memory regions) */
    qemu_get_be32s(f, &s->apicbase);
    qemu_get_8s(f, &s->id);
    qemu_get_8s(f, &s->arb_id);
    qemu_get_8s(f, &s->tpr);
    qemu_get_be32s(f, &s->spurious_vec);
    qemu_get_8s(f, &s->log_dest);
    qemu_get_8s(f, &s->dest_mode);
    for (i = 0; i < 8; i++) {
        qemu_get_be32s(f, &s->isr[i]);
        qemu_get_be32s(f, &s->tmr[i]);
        qemu_get_be32s(f, &s->irr[i]);
    }
    for (i = 0; i < APIC_LVT_NB; i++) {
        qemu_get_be32s(f, &s->lvt[i]);
    }
    qemu_get_be32s(f, &s->esr);
    qemu_get_be32s(f, &s->icr[0]);
    qemu_get_be32s(f, &s->icr[1]);
    qemu_get_be32s(f, &s->divide_conf);
922
    s->count_shift=qemu_get_be32(f);
923
    qemu_get_be32s(f, &s->initial_count);
924 925
    s->initial_count_load_time=qemu_get_be64(f);
    s->next_time=qemu_get_be64(f);
B
bellard 已提交
926 927 928

    if (version_id >= 2)
        qemu_get_timer(f, s->timer);
929 930
    return 0;
}
B
bellard 已提交
931

J
Juan Quintela 已提交
932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950 951 952 953 954 955 956 957 958 959 960 961
static const VMStateDescription vmstate_apic = {
    .name = "apic",
    .version_id = 3,
    .minimum_version_id = 3,
    .minimum_version_id_old = 1,
    .load_state_old = apic_load_old,
    .fields      = (VMStateField []) {
        VMSTATE_UINT32(apicbase, APICState),
        VMSTATE_UINT8(id, APICState),
        VMSTATE_UINT8(arb_id, APICState),
        VMSTATE_UINT8(tpr, APICState),
        VMSTATE_UINT32(spurious_vec, APICState),
        VMSTATE_UINT8(log_dest, APICState),
        VMSTATE_UINT8(dest_mode, APICState),
        VMSTATE_UINT32_ARRAY(isr, APICState, 8),
        VMSTATE_UINT32_ARRAY(tmr, APICState, 8),
        VMSTATE_UINT32_ARRAY(irr, APICState, 8),
        VMSTATE_UINT32_ARRAY(lvt, APICState, APIC_LVT_NB),
        VMSTATE_UINT32(esr, APICState),
        VMSTATE_UINT32_ARRAY(icr, APICState, 2),
        VMSTATE_UINT32(divide_conf, APICState),
        VMSTATE_INT32(count_shift, APICState),
        VMSTATE_UINT32(initial_count, APICState),
        VMSTATE_INT64(initial_count_load_time, APICState),
        VMSTATE_INT64(next_time, APICState),
        VMSTATE_TIMER(timer, APICState),
        VMSTATE_END_OF_LIST()
    }
};

B
Blue Swirl 已提交
962
static void apic_reset(DeviceState *d)
963
{
B
Blue Swirl 已提交
964
    APICState *s = DO_UPCAST(APICState, busdev.qdev, d);
965
    int bsp;
A
aurel32 已提交
966

967
    bsp = cpu_is_bsp(s->cpu_env);
A
aurel32 已提交
968
    s->apicbase = 0xfee00000 |
G
Gleb Natapov 已提交
969
        (bsp ? MSR_IA32_APICBASE_BSP : 0) | MSR_IA32_APICBASE_ENABLE;
A
aurel32 已提交
970

B
Blue Swirl 已提交
971
    apic_init_reset(d);
972

G
Gleb Natapov 已提交
973
    if (bsp) {
974 975 976 977 978 979 980
        /*
         * LINT0 delivery mode on CPU #0 is set to ExtInt at initialization
         * time typically by BIOS, so PIC interrupt can be delivered to the
         * processor when local APIC is enabled.
         */
        s->lvt[APIC_LVT_LINT0] = 0x700;
    }
981
}
B
bellard 已提交
982

A
Avi Kivity 已提交
983 984 985 986 987 988
static const MemoryRegionOps apic_io_ops = {
    .old_mmio = {
        .read = { apic_mem_readb, apic_mem_readw, apic_mem_readl, },
        .write = { apic_mem_writeb, apic_mem_writew, apic_mem_writel, },
    },
    .endianness = DEVICE_NATIVE_ENDIAN,
B
bellard 已提交
989 990
};

B
Blue Swirl 已提交
991 992 993 994 995 996 997 998
static int apic_init1(SysBusDevice *dev)
{
    APICState *s = FROM_SYSBUS(APICState, dev);
    static int last_apic_idx;

    if (last_apic_idx >= MAX_APICS) {
        return -1;
    }
A
Avi Kivity 已提交
999 1000 1001
    memory_region_init_io(&s->io_memory, &apic_io_ops, s, "apic",
                          MSI_ADDR_SIZE);
    sysbus_init_mmio_region(dev, &s->io_memory);
B
Blue Swirl 已提交
1002

1003
    s->timer = qemu_new_timer_ns(vm_clock, apic_timer, s);
B
Blue Swirl 已提交
1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018 1019 1020 1021 1022 1023 1024 1025 1026 1027 1028
    s->idx = last_apic_idx++;
    local_apics[s->idx] = s;
    return 0;
}

static SysBusDeviceInfo apic_info = {
    .init = apic_init1,
    .qdev.name = "apic",
    .qdev.size = sizeof(APICState),
    .qdev.vmsd = &vmstate_apic,
    .qdev.reset = apic_reset,
    .qdev.no_user = 1,
    .qdev.props = (Property[]) {
        DEFINE_PROP_UINT8("id", APICState, id, -1),
        DEFINE_PROP_PTR("cpu_env", APICState, cpu_env),
        DEFINE_PROP_END_OF_LIST(),
    }
};

static void apic_register_devices(void)
{
    sysbus_register_withprop(&apic_info);
}

device_init(apic_register_devices)