[qemu.git] / hw / iommu.c

/*
 * QEMU SPARC iommu emulation
 *
 * Copyright (c) 2003-2005 Fabrice Bellard
 *
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */
#include "hw.h"
#include "sun4m.h"

/* debug iommu */
//#define DEBUG_IOMMU

#ifdef DEBUG_IOMMU
#define DPRINTF(fmt, args...) \
do { printf("IOMMU: " fmt , ##args); } while (0)
#else
#define DPRINTF(fmt, args...)
#endif

#define IOMMU_NREGS (3*4096/4)
#define IOMMU_CTRL          (0x0000 >> 2)
#define IOMMU_CTRL_IMPL     0xf0000000 /* Implementation */
#define IOMMU_CTRL_VERS     0x0f000000 /* Version */
#define IOMMU_CTRL_RNGE     0x0000001c /* Mapping RANGE */
#define IOMMU_RNGE_16MB     0x00000000 /* 0xff000000 -> 0xffffffff */
#define IOMMU_RNGE_32MB     0x00000004 /* 0xfe000000 -> 0xffffffff */
#define IOMMU_RNGE_64MB     0x00000008 /* 0xfc000000 -> 0xffffffff */
#define IOMMU_RNGE_128MB    0x0000000c /* 0xf8000000 -> 0xffffffff */
#define IOMMU_RNGE_256MB    0x00000010 /* 0xf0000000 -> 0xffffffff */
#define IOMMU_RNGE_512MB    0x00000014 /* 0xe0000000 -> 0xffffffff */
#define IOMMU_RNGE_1GB      0x00000018 /* 0xc0000000 -> 0xffffffff */
#define IOMMU_RNGE_2GB      0x0000001c /* 0x80000000 -> 0xffffffff */
#define IOMMU_CTRL_ENAB     0x00000001 /* IOMMU Enable */
#define IOMMU_CTRL_MASK     0x0000001d

#define IOMMU_BASE          (0x0004 >> 2)
#define IOMMU_BASE_MASK     0x07fffc00

#define IOMMU_TLBFLUSH      (0x0014 >> 2)
#define IOMMU_TLBFLUSH_MASK 0xffffffff

#define IOMMU_PGFLUSH       (0x0018 >> 2)
#define IOMMU_PGFLUSH_MASK  0xffffffff

#define IOMMU_AFSR          (0x1000 >> 2)
#define IOMMU_AFSR_ERR      0x80000000 /* LE, TO, or BE asserted */
#define IOMMU_AFSR_LE       0x40000000 /* SBUS reports error after
                                          transaction */
#define IOMMU_AFSR_TO       0x20000000 /* Write access took more than
                                          12.8 us. */
#define IOMMU_AFSR_BE       0x10000000 /* Write access received error
                                          acknowledge */
#define IOMMU_AFSR_SIZE     0x0e000000 /* Size of transaction causing error */
#define IOMMU_AFSR_S        0x01000000 /* Sparc was in supervisor mode */
#define IOMMU_AFSR_RESV     0x00800000 /* Reserved, forced to 0x8 by
                                          hardware */
#define IOMMU_AFSR_ME       0x00080000 /* Multiple errors occurred */
#define IOMMU_AFSR_RD       0x00040000 /* A read operation was in progress */
#define IOMMU_AFSR_FAV      0x00020000 /* IOMMU afar has valid contents */

#define IOMMU_AFAR          (0x1004 >> 2)

#define IOMMU_SBCFG0        (0x1010 >> 2) /* SBUS configration per-slot */
#define IOMMU_SBCFG1        (0x1014 >> 2) /* SBUS configration per-slot */
#define IOMMU_SBCFG2        (0x1018 >> 2) /* SBUS configration per-slot */
#define IOMMU_SBCFG3        (0x101c >> 2) /* SBUS configration per-slot */
#define IOMMU_SBCFG_SAB30   0x00010000 /* Phys-address bit 30 when
                                          bypass enabled */
#define IOMMU_SBCFG_BA16    0x00000004 /* Slave supports 16 byte bursts */
#define IOMMU_SBCFG_BA8     0x00000002 /* Slave supports 8 byte bursts */
#define IOMMU_SBCFG_BYPASS  0x00000001 /* Bypass IOMMU, treat all addresses
                                          produced by this device as pure
                                          physical. */
#define IOMMU_SBCFG_MASK    0x00010003

#define IOMMU_ARBEN         (0x2000 >> 2) /* SBUS arbitration enable */
#define IOMMU_ARBEN_MASK    0x001f0000
#define IOMMU_MID           0x00000008

/* The format of an iopte in the page tables */
#define IOPTE_PAGE          0x07ffff00 /* Physical page number (PA[30:12]) */
#define IOPTE_CACHE         0x00000080 /* Cached (in vme IOCACHE or
                                          Viking/MXCC) */
#define IOPTE_WRITE         0x00000004 /* Writeable */
#define IOPTE_VALID         0x00000002 /* IOPTE is valid */
#define IOPTE_WAZ           0x00000001 /* Write as zeros */

#define PAGE_SHIFT      12
#define PAGE_SIZE       (1 << PAGE_SHIFT)
#define PAGE_MASK       (PAGE_SIZE - 1)

typedef struct IOMMUState {
    target_phys_addr_t addr;
    uint32_t regs[IOMMU_NREGS];
    target_phys_addr_t iostart;
    uint32_t version;
} IOMMUState;

static uint32_t iommu_mem_readw(void *opaque, target_phys_addr_t addr)
{
    IOMMUState *s = opaque;
    target_phys_addr_t saddr;

    saddr = (addr - s->addr) >> 2;
    switch (saddr) {
    default:
        DPRINTF("read reg[%d] = %x\n", (int)saddr, s->regs[saddr]);
        return s->regs[saddr];
        break;
    }
    return 0;
}

static void iommu_mem_writew(void *opaque, target_phys_addr_t addr,
                             uint32_t val)
{
    IOMMUState *s = opaque;
    target_phys_addr_t saddr;

    saddr = (addr - s->addr) >> 2;
    DPRINTF("write reg[%d] = %x\n", (int)saddr, val);
    switch (saddr) {
    case IOMMU_CTRL:
        switch (val & IOMMU_CTRL_RNGE) {
        case IOMMU_RNGE_16MB:
            s->iostart = 0xffffffffff000000ULL;
            break;
        case IOMMU_RNGE_32MB:
            s->iostart = 0xfffffffffe000000ULL;
            break;
        case IOMMU_RNGE_64MB:
            s->iostart = 0xfffffffffc000000ULL;
            break;
        case IOMMU_RNGE_128MB:
            s->iostart = 0xfffffffff8000000ULL;
            break;
        case IOMMU_RNGE_256MB:
            s->iostart = 0xfffffffff0000000ULL;
            break;
        case IOMMU_RNGE_512MB:
            s->iostart = 0xffffffffe0000000ULL;
            break;
        case IOMMU_RNGE_1GB:
            s->iostart = 0xffffffffc0000000ULL;
            break;
        default:
        case IOMMU_RNGE_2GB:
            s->iostart = 0xffffffff80000000ULL;
            break;
        }
        DPRINTF("iostart = " TARGET_FMT_plx "\n", s->iostart);
        s->regs[saddr] = ((val & IOMMU_CTRL_MASK) | s->version);
        break;
    case IOMMU_BASE:
        s->regs[saddr] = val & IOMMU_BASE_MASK;
        break;
    case IOMMU_TLBFLUSH:
        DPRINTF("tlb flush %x\n", val);
        s->regs[saddr] = val & IOMMU_TLBFLUSH_MASK;
        break;
    case IOMMU_PGFLUSH:
        DPRINTF("page flush %x\n", val);
        s->regs[saddr] = val & IOMMU_PGFLUSH_MASK;
        break;
    case IOMMU_SBCFG0:
    case IOMMU_SBCFG1:
    case IOMMU_SBCFG2:
    case IOMMU_SBCFG3:
        s->regs[saddr] = val & IOMMU_SBCFG_MASK;
        break;
    case IOMMU_ARBEN:
        // XXX implement SBus probing: fault when reading unmapped
        // addresses, fault cause and address stored to MMU/IOMMU
        s->regs[saddr] = (val & IOMMU_ARBEN_MASK) | IOMMU_MID;
        break;
    default:
        s->regs[saddr] = val;
        break;
    }
}

static CPUReadMemoryFunc *iommu_mem_read[3] = {
    iommu_mem_readw,
    iommu_mem_readw,
    iommu_mem_readw,
};

static CPUWriteMemoryFunc *iommu_mem_write[3] = {
    iommu_mem_writew,
    iommu_mem_writew,
    iommu_mem_writew,
};

static uint32_t iommu_page_get_flags(IOMMUState *s, target_phys_addr_t addr)
{
    uint32_t ret;
    target_phys_addr_t iopte;
#ifdef DEBUG_IOMMU
    target_phys_addr_t pa = addr;
#endif

    iopte = s->regs[IOMMU_BASE] << 4;
    addr &= ~s->iostart;
    iopte += (addr >> (PAGE_SHIFT - 2)) & ~3;
    cpu_physical_memory_read(iopte, (uint8_t *)&ret, 4);
    tswap32s(&ret);
    DPRINTF("get flags addr " TARGET_FMT_plx " => pte " TARGET_FMT_plx
            ", *pte = %x\n", pa, iopte, ret);

    return ret;
}

static target_phys_addr_t iommu_translate_pa(IOMMUState *s,
                                             target_phys_addr_t addr,
                                             uint32_t pte)
{
    uint32_t tmppte;
    target_phys_addr_t pa;

    tmppte = pte;
    pa = ((pte & IOPTE_PAGE) << 4) + (addr & PAGE_MASK);
    DPRINTF("xlate dva " TARGET_FMT_plx " => pa " TARGET_FMT_plx
            " (iopte = %x)\n", addr, pa, tmppte);

    return pa;
}

static void iommu_bad_addr(IOMMUState *s, target_phys_addr_t addr,
                           int is_write)
{
    DPRINTF("bad addr " TARGET_FMT_plx "\n", addr);
    s->regs[IOMMU_AFSR] = IOMMU_AFSR_ERR | IOMMU_AFSR_LE | IOMMU_AFSR_RESV |
        IOMMU_AFSR_FAV;
    if (!is_write)
        s->regs[IOMMU_AFSR] |= IOMMU_AFSR_RD;
    s->regs[IOMMU_AFAR] = addr;
}

void sparc_iommu_memory_rw(void *opaque, target_phys_addr_t addr,
                           uint8_t *buf, int len, int is_write)
{
    int l;
    uint32_t flags;
    target_phys_addr_t page, phys_addr;

    while (len > 0) {
        page = addr & TARGET_PAGE_MASK;
        l = (page + TARGET_PAGE_SIZE) - addr;
        if (l > len)
            l = len;
        flags = iommu_page_get_flags(opaque, page);
        if (!(flags & IOPTE_VALID)) {
            iommu_bad_addr(opaque, page, is_write);
            return;
        }
        phys_addr = iommu_translate_pa(opaque, addr, flags);
        if (is_write) {
            if (!(flags & IOPTE_WRITE)) {
                iommu_bad_addr(opaque, page, is_write);
                return;
            }
            cpu_physical_memory_write(phys_addr, buf, len);
        } else {
            cpu_physical_memory_read(phys_addr, buf, len);
        }
        len -= l;
        buf += l;
        addr += l;
    }
}

static void iommu_save(QEMUFile *f, void *opaque)
{
    IOMMUState *s = opaque;
    int i;

    for (i = 0; i < IOMMU_NREGS; i++)
        qemu_put_be32s(f, &s->regs[i]);
    qemu_put_be64s(f, &s->iostart);
}

static int iommu_load(QEMUFile *f, void *opaque, int version_id)
{
    IOMMUState *s = opaque;
    int i;

    if (version_id != 2)
        return -EINVAL;

    for (i = 0; i < IOMMU_NREGS; i++)
        qemu_get_be32s(f, &s->regs[i]);
    qemu_get_be64s(f, &s->iostart);

    return 0;
}

static void iommu_reset(void *opaque)
{
    IOMMUState *s = opaque;

    memset(s->regs, 0, IOMMU_NREGS * 4);
    s->iostart = 0;
    s->regs[IOMMU_CTRL] = s->version;
    s->regs[IOMMU_ARBEN] = IOMMU_MID;
    s->regs[IOMMU_AFSR] = IOMMU_AFSR_RESV;
}

void *iommu_init(target_phys_addr_t addr, uint32_t version)
{
    IOMMUState *s;
    int iommu_io_memory;

    s = qemu_mallocz(sizeof(IOMMUState));
    if (!s)
        return NULL;

    s->addr = addr;
    s->version = version;

    iommu_io_memory = cpu_register_io_memory(0, iommu_mem_read,
                                             iommu_mem_write, s);
    cpu_register_physical_memory(addr, IOMMU_NREGS * 4, iommu_io_memory);

    register_savevm("iommu", addr, 2, iommu_save, iommu_load, s);
    qemu_register_reset(iommu_reset, s);
    iommu_reset(s);
    return s;
}
Commit	Line	Data
420557e8 FB	1	/*
	2	* QEMU SPARC iommu emulation
	3	*
66321a11	4	* Copyright (c) 2003-2005 Fabrice Bellard
5fafdf24	5	*
420557e8 FB	6	* Permission is hereby granted, free of charge, to any person obtaining a copy
	7	* of this software and associated documentation files (the "Software"), to deal
	8	* in the Software without restriction, including without limitation the rights
	9	* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
	10	* copies of the Software, and to permit persons to whom the Software is
	11	* furnished to do so, subject to the following conditions:
	12	*
	13	* The above copyright notice and this permission notice shall be included in
	14	* all copies or substantial portions of the Software.
	15	*
	16	* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
	17	* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
	18	* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
	19	* THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
	20	* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
	21	* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
	22	* THE SOFTWARE.
	23	*/
87ecb68b PB	24	#include "hw.h"
87ecb68b PB	25	#include "sun4m.h"
420557e8 FB	26
	27	/* debug iommu */
	28	//#define DEBUG_IOMMU
	29
66321a11 FB	30	#ifdef DEBUG_IOMMU
	31	#define DPRINTF(fmt, args...) \
	32	do { printf("IOMMU: " fmt , ##args); } while (0)
	33	#else
	34	#define DPRINTF(fmt, args...)
	35	#endif
420557e8	36
4e3b1ea1 FB	37	#define IOMMU_NREGS (3*4096/4)
4e3b1ea1 FB	38	#define IOMMU_CTRL (0x0000 >> 2)
420557e8 FB	39	#define IOMMU_CTRL_IMPL 0xf0000000 /* Implementation */
	40	#define IOMMU_CTRL_VERS 0x0f000000 /* Version */
	41	#define IOMMU_CTRL_RNGE 0x0000001c /* Mapping RANGE */
	42	#define IOMMU_RNGE_16MB 0x00000000 /* 0xff000000 -> 0xffffffff */
	43	#define IOMMU_RNGE_32MB 0x00000004 /* 0xfe000000 -> 0xffffffff */
	44	#define IOMMU_RNGE_64MB 0x00000008 /* 0xfc000000 -> 0xffffffff */
	45	#define IOMMU_RNGE_128MB 0x0000000c /* 0xf8000000 -> 0xffffffff */
	46	#define IOMMU_RNGE_256MB 0x00000010 /* 0xf0000000 -> 0xffffffff */
	47	#define IOMMU_RNGE_512MB 0x00000014 /* 0xe0000000 -> 0xffffffff */
	48	#define IOMMU_RNGE_1GB 0x00000018 /* 0xc0000000 -> 0xffffffff */
	49	#define IOMMU_RNGE_2GB 0x0000001c /* 0x80000000 -> 0xffffffff */
	50	#define IOMMU_CTRL_ENAB 0x00000001 /* IOMMU Enable */
4e3b1ea1 FB	51	#define IOMMU_CTRL_MASK 0x0000001d
	52
	53	#define IOMMU_BASE (0x0004 >> 2)
	54	#define IOMMU_BASE_MASK 0x07fffc00
	55
	56	#define IOMMU_TLBFLUSH (0x0014 >> 2)
	57	#define IOMMU_TLBFLUSH_MASK 0xffffffff
	58
	59	#define IOMMU_PGFLUSH (0x0018 >> 2)
	60	#define IOMMU_PGFLUSH_MASK 0xffffffff
	61
225d4be7 BS	62	#define IOMMU_AFSR (0x1000 >> 2)
225d4be7 BS	63	#define IOMMU_AFSR_ERR 0x80000000 /* LE, TO, or BE asserted */
5ad6bb97 BS	64	#define IOMMU_AFSR_LE 0x40000000 /* SBUS reports error after
	65	transaction */
	66	#define IOMMU_AFSR_TO 0x20000000 /* Write access took more than
	67	12.8 us. */
	68	#define IOMMU_AFSR_BE 0x10000000 /* Write access received error
	69	acknowledge */
225d4be7 BS	70	#define IOMMU_AFSR_SIZE 0x0e000000 /* Size of transaction causing error */
225d4be7 BS	71	#define IOMMU_AFSR_S 0x01000000 /* Sparc was in supervisor mode */
5ad6bb97 BS	72	#define IOMMU_AFSR_RESV 0x00800000 /* Reserved, forced to 0x8 by
5ad6bb97 BS	73	hardware */
225d4be7 BS	74	#define IOMMU_AFSR_ME 0x00080000 /* Multiple errors occurred */
	75	#define IOMMU_AFSR_RD 0x00040000 /* A read operation was in progress */
	76	#define IOMMU_AFSR_FAV 0x00020000 /* IOMMU afar has valid contents */
	77
	78	#define IOMMU_AFAR (0x1004 >> 2)
	79
4e3b1ea1 FB	80	#define IOMMU_SBCFG0 (0x1010 >> 2) /* SBUS configration per-slot */
	81	#define IOMMU_SBCFG1 (0x1014 >> 2) /* SBUS configration per-slot */
	82	#define IOMMU_SBCFG2 (0x1018 >> 2) /* SBUS configration per-slot */
	83	#define IOMMU_SBCFG3 (0x101c >> 2) /* SBUS configration per-slot */
5ad6bb97 BS	84	#define IOMMU_SBCFG_SAB30 0x00010000 /* Phys-address bit 30 when
5ad6bb97 BS	85	bypass enabled */
4e3b1ea1 FB	86	#define IOMMU_SBCFG_BA16 0x00000004 /* Slave supports 16 byte bursts */
	87	#define IOMMU_SBCFG_BA8 0x00000002 /* Slave supports 8 byte bursts */
	88	#define IOMMU_SBCFG_BYPASS 0x00000001 /* Bypass IOMMU, treat all addresses
f930d07e	89	produced by this device as pure
4e3b1ea1 FB	90	physical. */
	91	#define IOMMU_SBCFG_MASK 0x00010003
	92
	93	#define IOMMU_ARBEN (0x2000 >> 2) /* SBUS arbitration enable */
	94	#define IOMMU_ARBEN_MASK 0x001f0000
	95	#define IOMMU_MID 0x00000008
420557e8	96
420557e8 FB	97	/* The format of an iopte in the page tables */
420557e8 FB	98	#define IOPTE_PAGE 0x07ffff00 /* Physical page number (PA[30:12]) */
5ad6bb97 BS	99	#define IOPTE_CACHE 0x00000080 /* Cached (in vme IOCACHE or
5ad6bb97 BS	100	Viking/MXCC) */
420557e8 FB	101	#define IOPTE_WRITE 0x00000004 /* Writeable */
	102	#define IOPTE_VALID 0x00000002 /* IOPTE is valid */
	103	#define IOPTE_WAZ 0x00000001 /* Write as zeros */
	104
420557e8 FB	105	#define PAGE_SHIFT 12
420557e8 FB	106	#define PAGE_SIZE (1 << PAGE_SHIFT)
f930d07e	107	#define PAGE_MASK (PAGE_SIZE - 1)
420557e8 FB	108
420557e8 FB	109	typedef struct IOMMUState {
5dcb6b91	110	target_phys_addr_t addr;
66321a11	111	uint32_t regs[IOMMU_NREGS];
5dcb6b91	112	target_phys_addr_t iostart;
7fbfb139	113	uint32_t version;
420557e8 FB	114	} IOMMUState;
420557e8 FB	115
420557e8 FB	116	static uint32_t iommu_mem_readw(void *opaque, target_phys_addr_t addr)
	117	{
	118	IOMMUState *s = opaque;
5dcb6b91	119	target_phys_addr_t saddr;
420557e8	120
8d5f07fa	121	saddr = (addr - s->addr) >> 2;
420557e8 FB	122	switch (saddr) {
420557e8 FB	123	default:
f930d07e BS	124	DPRINTF("read reg[%d] = %x\n", (int)saddr, s->regs[saddr]);
	125	return s->regs[saddr];
	126	break;
420557e8 FB	127	}
	128	return 0;
	129	}
	130
5ad6bb97 BS	131	static void iommu_mem_writew(void *opaque, target_phys_addr_t addr,
5ad6bb97 BS	132	uint32_t val)
420557e8 FB	133	{
420557e8 FB	134	IOMMUState *s = opaque;
5dcb6b91	135	target_phys_addr_t saddr;
420557e8	136
8d5f07fa	137	saddr = (addr - s->addr) >> 2;
981a2e99	138	DPRINTF("write reg[%d] = %x\n", (int)saddr, val);
420557e8	139	switch (saddr) {
4e3b1ea1	140	case IOMMU_CTRL:
f930d07e BS	141	switch (val & IOMMU_CTRL_RNGE) {
	142	case IOMMU_RNGE_16MB:
	143	s->iostart = 0xffffffffff000000ULL;
	144	break;
	145	case IOMMU_RNGE_32MB:
	146	s->iostart = 0xfffffffffe000000ULL;
	147	break;
	148	case IOMMU_RNGE_64MB:
	149	s->iostart = 0xfffffffffc000000ULL;
	150	break;
	151	case IOMMU_RNGE_128MB:
	152	s->iostart = 0xfffffffff8000000ULL;
	153	break;
	154	case IOMMU_RNGE_256MB:
	155	s->iostart = 0xfffffffff0000000ULL;
	156	break;
	157	case IOMMU_RNGE_512MB:
	158	s->iostart = 0xffffffffe0000000ULL;
	159	break;
	160	case IOMMU_RNGE_1GB:
	161	s->iostart = 0xffffffffc0000000ULL;
	162	break;
	163	default:
	164	case IOMMU_RNGE_2GB:
	165	s->iostart = 0xffffffff80000000ULL;
	166	break;
	167	}
	168	DPRINTF("iostart = " TARGET_FMT_plx "\n", s->iostart);
7fbfb139	169	s->regs[saddr] = ((val & IOMMU_CTRL_MASK) \| s->version);
f930d07e	170	break;
4e3b1ea1	171	case IOMMU_BASE:
f930d07e BS	172	s->regs[saddr] = val & IOMMU_BASE_MASK;
f930d07e BS	173	break;
4e3b1ea1	174	case IOMMU_TLBFLUSH:
f930d07e BS	175	DPRINTF("tlb flush %x\n", val);
	176	s->regs[saddr] = val & IOMMU_TLBFLUSH_MASK;
	177	break;
4e3b1ea1	178	case IOMMU_PGFLUSH:
f930d07e BS	179	DPRINTF("page flush %x\n", val);
	180	s->regs[saddr] = val & IOMMU_PGFLUSH_MASK;
	181	break;
4e3b1ea1 FB	182	case IOMMU_SBCFG0:
	183	case IOMMU_SBCFG1:
	184	case IOMMU_SBCFG2:
	185	case IOMMU_SBCFG3:
f930d07e BS	186	s->regs[saddr] = val & IOMMU_SBCFG_MASK;
f930d07e BS	187	break;
4e3b1ea1 FB	188	case IOMMU_ARBEN:
	189	// XXX implement SBus probing: fault when reading unmapped
	190	// addresses, fault cause and address stored to MMU/IOMMU
f930d07e BS	191	s->regs[saddr] = (val & IOMMU_ARBEN_MASK) \| IOMMU_MID;
f930d07e BS	192	break;
420557e8	193	default:
f930d07e BS	194	s->regs[saddr] = val;
f930d07e BS	195	break;
420557e8 FB	196	}
	197	}
	198
	199	static CPUReadMemoryFunc *iommu_mem_read[3] = {
	200	iommu_mem_readw,
	201	iommu_mem_readw,
	202	iommu_mem_readw,
	203	};
	204
	205	static CPUWriteMemoryFunc *iommu_mem_write[3] = {
	206	iommu_mem_writew,
	207	iommu_mem_writew,
	208	iommu_mem_writew,
	209	};
	210
5dcb6b91	211	static uint32_t iommu_page_get_flags(IOMMUState *s, target_phys_addr_t addr)
420557e8	212	{
5e3b100b BS	213	uint32_t ret;
5e3b100b BS	214	target_phys_addr_t iopte;
981a2e99 BS	215	#ifdef DEBUG_IOMMU
	216	target_phys_addr_t pa = addr;
	217	#endif
420557e8	218
981a2e99	219	iopte = s->regs[IOMMU_BASE] << 4;
66321a11 FB	220	addr &= ~s->iostart;
66321a11 FB	221	iopte += (addr >> (PAGE_SHIFT - 2)) & ~3;
5e3b100b	222	cpu_physical_memory_read(iopte, (uint8_t *)&ret, 4);
748e4993	223	tswap32s(&ret);
5e3b100b BS	224	DPRINTF("get flags addr " TARGET_FMT_plx " => pte " TARGET_FMT_plx
5e3b100b BS	225	", *pte = %x\n", pa, iopte, ret);
981a2e99 BS	226
981a2e99 BS	227	return ret;
a917d384 PB	228	}
a917d384 PB	229
5dcb6b91 BS	230	static target_phys_addr_t iommu_translate_pa(IOMMUState *s,
	231	target_phys_addr_t addr,
	232	uint32_t pte)
a917d384 PB	233	{
a917d384 PB	234	uint32_t tmppte;
5dcb6b91 BS	235	target_phys_addr_t pa;
	236
	237	tmppte = pte;
	238	pa = ((pte & IOPTE_PAGE) << 4) + (addr & PAGE_MASK);
	239	DPRINTF("xlate dva " TARGET_FMT_plx " => pa " TARGET_FMT_plx
	240	" (iopte = %x)\n", addr, pa, tmppte);
a917d384	241
66321a11	242	return pa;
420557e8 FB	243	}
420557e8 FB	244
5ad6bb97 BS	245	static void iommu_bad_addr(IOMMUState *s, target_phys_addr_t addr,
5ad6bb97 BS	246	int is_write)
225d4be7 BS	247	{
225d4be7 BS	248	DPRINTF("bad addr " TARGET_FMT_plx "\n", addr);
5ad6bb97	249	s->regs[IOMMU_AFSR] = IOMMU_AFSR_ERR \| IOMMU_AFSR_LE \| IOMMU_AFSR_RESV \|
225d4be7 BS	250	IOMMU_AFSR_FAV;
	251	if (!is_write)
	252	s->regs[IOMMU_AFSR] \|= IOMMU_AFSR_RD;
	253	s->regs[IOMMU_AFAR] = addr;
	254	}
	255
67e999be FB	256	void sparc_iommu_memory_rw(void *opaque, target_phys_addr_t addr,
67e999be FB	257	uint8_t *buf, int len, int is_write)
a917d384	258	{
5dcb6b91 BS	259	int l;
	260	uint32_t flags;
	261	target_phys_addr_t page, phys_addr;
a917d384 PB	262
	263	while (len > 0) {
	264	page = addr & TARGET_PAGE_MASK;
	265	l = (page + TARGET_PAGE_SIZE) - addr;
	266	if (l > len)
	267	l = len;
	268	flags = iommu_page_get_flags(opaque, page);
225d4be7 BS	269	if (!(flags & IOPTE_VALID)) {
225d4be7 BS	270	iommu_bad_addr(opaque, page, is_write);
a917d384	271	return;
225d4be7	272	}
a917d384 PB	273	phys_addr = iommu_translate_pa(opaque, addr, flags);
a917d384 PB	274	if (is_write) {
225d4be7 BS	275	if (!(flags & IOPTE_WRITE)) {
225d4be7 BS	276	iommu_bad_addr(opaque, page, is_write);
a917d384	277	return;
225d4be7	278	}
a917d384 PB	279	cpu_physical_memory_write(phys_addr, buf, len);
	280	} else {
	281	cpu_physical_memory_read(phys_addr, buf, len);
	282	}
	283	len -= l;
	284	buf += l;
	285	addr += l;
	286	}
	287	}
	288
e80cfcfc FB	289	static void iommu_save(QEMUFile f, void opaque)
	290	{
	291	IOMMUState *s = opaque;
	292	int i;
3b46e624	293
66321a11	294	for (i = 0; i < IOMMU_NREGS; i++)
f930d07e	295	qemu_put_be32s(f, &s->regs[i]);
5dcb6b91	296	qemu_put_be64s(f, &s->iostart);
e80cfcfc FB	297	}
	298
	299	static int iommu_load(QEMUFile f, void opaque, int version_id)
	300	{
	301	IOMMUState *s = opaque;
	302	int i;
3b46e624	303
5dcb6b91	304	if (version_id != 2)
e80cfcfc FB	305	return -EINVAL;
e80cfcfc FB	306
66321a11	307	for (i = 0; i < IOMMU_NREGS; i++)
fda77c2d	308	qemu_get_be32s(f, &s->regs[i]);
5dcb6b91	309	qemu_get_be64s(f, &s->iostart);
e80cfcfc FB	310
	311	return 0;
	312	}
	313
	314	static void iommu_reset(void *opaque)
	315	{
	316	IOMMUState *s = opaque;
	317
66321a11	318	memset(s->regs, 0, IOMMU_NREGS * 4);
e80cfcfc	319	s->iostart = 0;
7fbfb139 BS	320	s->regs[IOMMU_CTRL] = s->version;
7fbfb139 BS	321	s->regs[IOMMU_ARBEN] = IOMMU_MID;
5ad6bb97	322	s->regs[IOMMU_AFSR] = IOMMU_AFSR_RESV;
e80cfcfc FB	323	}
e80cfcfc FB	324
7fbfb139	325	void *iommu_init(target_phys_addr_t addr, uint32_t version)
420557e8 FB	326	{
420557e8 FB	327	IOMMUState *s;
8d5f07fa	328	int iommu_io_memory;
420557e8 FB	329
	330	s = qemu_mallocz(sizeof(IOMMUState));
	331	if (!s)
e80cfcfc	332	return NULL;
420557e8	333
8d5f07fa	334	s->addr = addr;
7fbfb139	335	s->version = version;
8d5f07fa	336
5ad6bb97 BS	337	iommu_io_memory = cpu_register_io_memory(0, iommu_mem_read,
5ad6bb97 BS	338	iommu_mem_write, s);
66321a11	339	cpu_register_physical_memory(addr, IOMMU_NREGS * 4, iommu_io_memory);
3b46e624	340
5dcb6b91	341	register_savevm("iommu", addr, 2, iommu_save, iommu_load, s);
e80cfcfc	342	qemu_register_reset(iommu_reset, s);
7fbfb139	343	iommu_reset(s);
e80cfcfc	344	return s;
420557e8	345	}