[qemu.git] / hw / pxa2xx_timer.c

/*
 * Intel XScale PXA255/270 OS Timers.
 *
 * Copyright (c) 2006 Openedhand Ltd.
 * Copyright (c) 2006 Thorsten Zitterell
 *
 * This code is licenced under the GPL.
 */

#include "hw.h"
#include "qemu-timer.h"
#include "sysemu.h"
#include "pxa.h"

#define OSMR0	0x00
#define OSMR1	0x04
#define OSMR2	0x08
#define OSMR3	0x0c
#define OSMR4	0x80
#define OSMR5	0x84
#define OSMR6	0x88
#define OSMR7	0x8c
#define OSMR8	0x90
#define OSMR9	0x94
#define OSMR10	0x98
#define OSMR11	0x9c
#define OSCR	0x10	/* OS Timer Count */
#define OSCR4	0x40
#define OSCR5	0x44
#define OSCR6	0x48
#define OSCR7	0x4c
#define OSCR8	0x50
#define OSCR9	0x54
#define OSCR10	0x58
#define OSCR11	0x5c
#define OSSR	0x14	/* Timer status register */
#define OWER	0x18
#define OIER	0x1c	/* Interrupt enable register  3-0 to E3-E0 */
#define OMCR4	0xc0	/* OS Match Control registers */
#define OMCR5	0xc4
#define OMCR6	0xc8
#define OMCR7	0xcc
#define OMCR8	0xd0
#define OMCR9	0xd4
#define OMCR10	0xd8
#define OMCR11	0xdc
#define OSNR	0x20

#define PXA25X_FREQ	3686400	/* 3.6864 MHz */
#define PXA27X_FREQ	3250000	/* 3.25 MHz */

static int pxa2xx_timer4_freq[8] = {
    [0] = 0,
    [1] = 32768,
    [2] = 1000,
    [3] = 1,
    [4] = 1000000,
    /* [5] is the "Externally supplied clock".  Assign if necessary.  */
    [5 ... 7] = 0,
};

typedef struct {
    uint32_t value;
    int level;
    qemu_irq irq;
    QEMUTimer *qtimer;
    int num;
    void *info;
} PXA2xxTimer0;

typedef struct {
    PXA2xxTimer0 tm;
    int32_t oldclock;
    int32_t clock;
    uint64_t lastload;
    uint32_t freq;
    uint32_t control;
} PXA2xxTimer4;

typedef struct {
    int32_t clock;
    int32_t oldclock;
    uint64_t lastload;
    uint32_t freq;
    PXA2xxTimer0 timer[4];
    PXA2xxTimer4 *tm4;
    uint32_t events;
    uint32_t irq_enabled;
    uint32_t reset3;
    uint32_t snapshot;
} pxa2xx_timer_info;

static void pxa2xx_timer_update(void *opaque, uint64_t now_qemu)
{
    pxa2xx_timer_info *s = (pxa2xx_timer_info *) opaque;
    int i;
    uint32_t now_vm;
    uint64_t new_qemu;

    now_vm = s->clock +
            muldiv64(now_qemu - s->lastload, s->freq, ticks_per_sec);

    for (i = 0; i < 4; i ++) {
        new_qemu = now_qemu + muldiv64((uint32_t) (s->timer[i].value - now_vm),
                        ticks_per_sec, s->freq);
        qemu_mod_timer(s->timer[i].qtimer, new_qemu);
    }
}

static void pxa2xx_timer_update4(void *opaque, uint64_t now_qemu, int n)
{
    pxa2xx_timer_info *s = (pxa2xx_timer_info *) opaque;
    uint32_t now_vm;
    uint64_t new_qemu;
    static const int counters[8] = { 0, 0, 0, 0, 4, 4, 6, 6 };
    int counter;

    if (s->tm4[n].control & (1 << 7))
        counter = n;
    else
        counter = counters[n];

    if (!s->tm4[counter].freq) {
        qemu_del_timer(s->tm4[n].tm.qtimer);
        return;
    }

    now_vm = s->tm4[counter].clock + muldiv64(now_qemu -
                    s->tm4[counter].lastload,
                    s->tm4[counter].freq, ticks_per_sec);

    new_qemu = now_qemu + muldiv64((uint32_t) (s->tm4[n].tm.value - now_vm),
                    ticks_per_sec, s->tm4[counter].freq);
    qemu_mod_timer(s->tm4[n].tm.qtimer, new_qemu);
}

static uint32_t pxa2xx_timer_read(void *opaque, target_phys_addr_t offset)
{
    pxa2xx_timer_info *s = (pxa2xx_timer_info *) opaque;
    int tm = 0;

    switch (offset) {
    case OSMR3:  tm ++;
    case OSMR2:  tm ++;
    case OSMR1:  tm ++;
    case OSMR0:
        return s->timer[tm].value;
    case OSMR11: tm ++;
    case OSMR10: tm ++;
    case OSMR9:  tm ++;
    case OSMR8:  tm ++;
    case OSMR7:  tm ++;
    case OSMR6:  tm ++;
    case OSMR5:  tm ++;
    case OSMR4:
        if (!s->tm4)
            goto badreg;
        return s->tm4[tm].tm.value;
    case OSCR:
        return s->clock + muldiv64(qemu_get_clock(vm_clock) -
                        s->lastload, s->freq, ticks_per_sec);
    case OSCR11: tm ++;
    case OSCR10: tm ++;
    case OSCR9:  tm ++;
    case OSCR8:  tm ++;
    case OSCR7:  tm ++;
    case OSCR6:  tm ++;
    case OSCR5:  tm ++;
    case OSCR4:
        if (!s->tm4)
            goto badreg;

        if ((tm == 9 - 4 || tm == 11 - 4) && (s->tm4[tm].control & (1 << 9))) {
            if (s->tm4[tm - 1].freq)
                s->snapshot = s->tm4[tm - 1].clock + muldiv64(
                                qemu_get_clock(vm_clock) -
                                s->tm4[tm - 1].lastload,
                                s->tm4[tm - 1].freq, ticks_per_sec);
            else
                s->snapshot = s->tm4[tm - 1].clock;
        }

        if (!s->tm4[tm].freq)
            return s->tm4[tm].clock;
        return s->tm4[tm].clock + muldiv64(qemu_get_clock(vm_clock) -
                        s->tm4[tm].lastload, s->tm4[tm].freq, ticks_per_sec);
    case OIER:
        return s->irq_enabled;
    case OSSR:	/* Status register */
        return s->events;
    case OWER:
        return s->reset3;
    case OMCR11: tm ++;
    case OMCR10: tm ++;
    case OMCR9:  tm ++;
    case OMCR8:  tm ++;
    case OMCR7:  tm ++;
    case OMCR6:  tm ++;
    case OMCR5:  tm ++;
    case OMCR4:
        if (!s->tm4)
            goto badreg;
        return s->tm4[tm].control;
    case OSNR:
        return s->snapshot;
    default:
    badreg:
        hw_error("pxa2xx_timer_read: Bad offset " REG_FMT "\n", offset);
    }

    return 0;
}

static void pxa2xx_timer_write(void *opaque, target_phys_addr_t offset,
                uint32_t value)
{
    int i, tm = 0;
    pxa2xx_timer_info *s = (pxa2xx_timer_info *) opaque;

    switch (offset) {
    case OSMR3:  tm ++;
    case OSMR2:  tm ++;
    case OSMR1:  tm ++;
    case OSMR0:
        s->timer[tm].value = value;
        pxa2xx_timer_update(s, qemu_get_clock(vm_clock));
        break;
    case OSMR11: tm ++;
    case OSMR10: tm ++;
    case OSMR9:  tm ++;
    case OSMR8:  tm ++;
    case OSMR7:  tm ++;
    case OSMR6:  tm ++;
    case OSMR5:  tm ++;
    case OSMR4:
        if (!s->tm4)
            goto badreg;
        s->tm4[tm].tm.value = value;
        pxa2xx_timer_update4(s, qemu_get_clock(vm_clock), tm);
        break;
    case OSCR:
        s->oldclock = s->clock;
        s->lastload = qemu_get_clock(vm_clock);
        s->clock = value;
        pxa2xx_timer_update(s, s->lastload);
        break;
    case OSCR11: tm ++;
    case OSCR10: tm ++;
    case OSCR9:  tm ++;
    case OSCR8:  tm ++;
    case OSCR7:  tm ++;
    case OSCR6:  tm ++;
    case OSCR5:  tm ++;
    case OSCR4:
        if (!s->tm4)
            goto badreg;
        s->tm4[tm].oldclock = s->tm4[tm].clock;
        s->tm4[tm].lastload = qemu_get_clock(vm_clock);
        s->tm4[tm].clock = value;
        pxa2xx_timer_update4(s, s->tm4[tm].lastload, tm);
        break;
    case OIER:
        s->irq_enabled = value & 0xfff;
        break;
    case OSSR:	/* Status register */
        s->events &= ~value;
        for (i = 0; i < 4; i ++, value >>= 1) {
            if (s->timer[i].level && (value & 1)) {
                s->timer[i].level = 0;
                qemu_irq_lower(s->timer[i].irq);
            }
        }
        if (s->tm4) {
            for (i = 0; i < 8; i ++, value >>= 1)
                if (s->tm4[i].tm.level && (value & 1))
                    s->tm4[i].tm.level = 0;
            if (!(s->events & 0xff0))
                qemu_irq_lower(s->tm4->tm.irq);
        }
        break;
    case OWER:	/* XXX: Reset on OSMR3 match? */
        s->reset3 = value;
        break;
    case OMCR7:  tm ++;
    case OMCR6:  tm ++;
    case OMCR5:  tm ++;
    case OMCR4:
        if (!s->tm4)
            goto badreg;
        s->tm4[tm].control = value & 0x0ff;
        /* XXX Stop if running (shouldn't happen) */
        if ((value & (1 << 7)) || tm == 0)
            s->tm4[tm].freq = pxa2xx_timer4_freq[value & 7];
        else {
            s->tm4[tm].freq = 0;
            pxa2xx_timer_update4(s, qemu_get_clock(vm_clock), tm);
        }
        break;
    case OMCR11: tm ++;
    case OMCR10: tm ++;
    case OMCR9:  tm ++;
    case OMCR8:  tm += 4;
        if (!s->tm4)
            goto badreg;
        s->tm4[tm].control = value & 0x3ff;
        /* XXX Stop if running (shouldn't happen) */
        if ((value & (1 << 7)) || !(tm & 1))
            s->tm4[tm].freq =
                    pxa2xx_timer4_freq[(value & (1 << 8)) ?  0 : (value & 7)];
        else {
            s->tm4[tm].freq = 0;
            pxa2xx_timer_update4(s, qemu_get_clock(vm_clock), tm);
        }
        break;
    default:
    badreg:
        hw_error("pxa2xx_timer_write: Bad offset " REG_FMT "\n", offset);
    }
}

static CPUReadMemoryFunc *pxa2xx_timer_readfn[] = {
    pxa2xx_timer_read,
    pxa2xx_timer_read,
    pxa2xx_timer_read,
};

static CPUWriteMemoryFunc *pxa2xx_timer_writefn[] = {
    pxa2xx_timer_write,
    pxa2xx_timer_write,
    pxa2xx_timer_write,
};

static void pxa2xx_timer_tick(void *opaque)
{
    PXA2xxTimer0 *t = (PXA2xxTimer0 *) opaque;
    pxa2xx_timer_info *i = (pxa2xx_timer_info *) t->info;

    if (i->irq_enabled & (1 << t->num)) {
        t->level = 1;
        i->events |= 1 << t->num;
        qemu_irq_raise(t->irq);
    }

    if (t->num == 3)
        if (i->reset3 & 1) {
            i->reset3 = 0;
            qemu_system_reset_request();
        }
}

static void pxa2xx_timer_tick4(void *opaque)
{
    PXA2xxTimer4 *t = (PXA2xxTimer4 *) opaque;
    pxa2xx_timer_info *i = (pxa2xx_timer_info *) t->tm.info;

    pxa2xx_timer_tick(&t->tm);
    if (t->control & (1 << 3))
        t->clock = 0;
    if (t->control & (1 << 6))
        pxa2xx_timer_update4(i, qemu_get_clock(vm_clock), t->tm.num - 4);
}

static void pxa2xx_timer_save(QEMUFile *f, void *opaque)
{
    pxa2xx_timer_info *s = (pxa2xx_timer_info *) opaque;
    int i;

    qemu_put_be32s(f, (uint32_t *) &s->clock);
    qemu_put_be32s(f, (uint32_t *) &s->oldclock);
    qemu_put_be64s(f, &s->lastload);

    for (i = 0; i < 4; i ++) {
        qemu_put_be32s(f, &s->timer[i].value);
        qemu_put_be32(f, s->timer[i].level);
    }
    if (s->tm4)
        for (i = 0; i < 8; i ++) {
            qemu_put_be32s(f, &s->tm4[i].tm.value);
            qemu_put_be32(f, s->tm4[i].tm.level);
            qemu_put_sbe32s(f, &s->tm4[i].oldclock);
            qemu_put_sbe32s(f, &s->tm4[i].clock);
            qemu_put_be64s(f, &s->tm4[i].lastload);
            qemu_put_be32s(f, &s->tm4[i].freq);
            qemu_put_be32s(f, &s->tm4[i].control);
        }

    qemu_put_be32s(f, &s->events);
    qemu_put_be32s(f, &s->irq_enabled);
    qemu_put_be32s(f, &s->reset3);
    qemu_put_be32s(f, &s->snapshot);
}

static int pxa2xx_timer_load(QEMUFile *f, void *opaque, int version_id)
{
    pxa2xx_timer_info *s = (pxa2xx_timer_info *) opaque;
    int64_t now;
    int i;

    qemu_get_be32s(f, (uint32_t *) &s->clock);
    qemu_get_be32s(f, (uint32_t *) &s->oldclock);
    qemu_get_be64s(f, &s->lastload);

    now = qemu_get_clock(vm_clock);
    for (i = 0; i < 4; i ++) {
        qemu_get_be32s(f, &s->timer[i].value);
        s->timer[i].level = qemu_get_be32(f);
    }
    pxa2xx_timer_update(s, now);

    if (s->tm4)
        for (i = 0; i < 8; i ++) {
            qemu_get_be32s(f, &s->tm4[i].tm.value);
            s->tm4[i].tm.level = qemu_get_be32(f);
            qemu_get_sbe32s(f, &s->tm4[i].oldclock);
            qemu_get_sbe32s(f, &s->tm4[i].clock);
            qemu_get_be64s(f, &s->tm4[i].lastload);
            qemu_get_be32s(f, &s->tm4[i].freq);
            qemu_get_be32s(f, &s->tm4[i].control);
            pxa2xx_timer_update4(s, now, i);
        }

    qemu_get_be32s(f, &s->events);
    qemu_get_be32s(f, &s->irq_enabled);
    qemu_get_be32s(f, &s->reset3);
    qemu_get_be32s(f, &s->snapshot);

    return 0;
}

static pxa2xx_timer_info *pxa2xx_timer_init(target_phys_addr_t base,
                qemu_irq *irqs)
{
    int i;
    int iomemtype;
    pxa2xx_timer_info *s;

    s = (pxa2xx_timer_info *) qemu_mallocz(sizeof(pxa2xx_timer_info));
    s->irq_enabled = 0;
    s->oldclock = 0;
    s->clock = 0;
    s->lastload = qemu_get_clock(vm_clock);
    s->reset3 = 0;

    for (i = 0; i < 4; i ++) {
        s->timer[i].value = 0;
        s->timer[i].irq = irqs[i];
        s->timer[i].info = s;
        s->timer[i].num = i;
        s->timer[i].level = 0;
        s->timer[i].qtimer = qemu_new_timer(vm_clock,
                        pxa2xx_timer_tick, &s->timer[i]);
    }

    iomemtype = cpu_register_io_memory(pxa2xx_timer_readfn,
                    pxa2xx_timer_writefn, s);
    cpu_register_physical_memory(base, 0x00001000, iomemtype);

    register_savevm("pxa2xx_timer", 0, 0,
                    pxa2xx_timer_save, pxa2xx_timer_load, s);

    return s;
}

void pxa25x_timer_init(target_phys_addr_t base, qemu_irq *irqs)
{
    pxa2xx_timer_info *s = pxa2xx_timer_init(base, irqs);
    s->freq = PXA25X_FREQ;
    s->tm4 = 0;
}

void pxa27x_timer_init(target_phys_addr_t base,
                qemu_irq *irqs, qemu_irq irq4)
{
    pxa2xx_timer_info *s = pxa2xx_timer_init(base, irqs);
    int i;
    s->freq = PXA27X_FREQ;
    s->tm4 = (PXA2xxTimer4 *) qemu_mallocz(8 *
                    sizeof(PXA2xxTimer4));
    for (i = 0; i < 8; i ++) {
        s->tm4[i].tm.value = 0;
        s->tm4[i].tm.irq = irq4;
        s->tm4[i].tm.info = s;
        s->tm4[i].tm.num = i + 4;
        s->tm4[i].tm.level = 0;
        s->tm4[i].freq = 0;
        s->tm4[i].control = 0x0;
        s->tm4[i].tm.qtimer = qemu_new_timer(vm_clock,
                        pxa2xx_timer_tick4, &s->tm4[i]);
    }
}
Commit	Line	Data
a171fe39 AZ	1	/*
	2	* Intel XScale PXA255/270 OS Timers.
	3	*
	4	* Copyright (c) 2006 Openedhand Ltd.
	5	* Copyright (c) 2006 Thorsten Zitterell
	6	*
	7	* This code is licenced under the GPL.
	8	*/
	9
87ecb68b PB	10	#include "hw.h"
	11	#include "qemu-timer.h"
	12	#include "sysemu.h"
	13	#include "pxa.h"
a171fe39 AZ	14
	15	#define OSMR0 0x00
	16	#define OSMR1 0x04
	17	#define OSMR2 0x08
	18	#define OSMR3 0x0c
	19	#define OSMR4 0x80
	20	#define OSMR5 0x84
	21	#define OSMR6 0x88
	22	#define OSMR7 0x8c
	23	#define OSMR8 0x90
	24	#define OSMR9 0x94
	25	#define OSMR10 0x98
	26	#define OSMR11 0x9c
	27	#define OSCR 0x10 /* OS Timer Count */
	28	#define OSCR4 0x40
	29	#define OSCR5 0x44
	30	#define OSCR6 0x48
	31	#define OSCR7 0x4c
	32	#define OSCR8 0x50
	33	#define OSCR9 0x54
	34	#define OSCR10 0x58
	35	#define OSCR11 0x5c
	36	#define OSSR 0x14 /* Timer status register */
	37	#define OWER 0x18
	38	#define OIER 0x1c /* Interrupt enable register 3-0 to E3-E0 */
	39	#define OMCR4 0xc0 /* OS Match Control registers */
	40	#define OMCR5 0xc4
	41	#define OMCR6 0xc8
	42	#define OMCR7 0xcc
	43	#define OMCR8 0xd0
	44	#define OMCR9 0xd4
	45	#define OMCR10 0xd8
	46	#define OMCR11 0xdc
	47	#define OSNR 0x20
	48
	49	#define PXA25X_FREQ 3686400 /* 3.6864 MHz */
	50	#define PXA27X_FREQ 3250000 /* 3.25 MHz */
	51
	52	static int pxa2xx_timer4_freq[8] = {
	53	[0] = 0,
	54	[1] = 32768,
	55	[2] = 1000,
	56	[3] = 1,
	57	[4] = 1000000,
	58	/* [5] is the "Externally supplied clock". Assign if necessary. */
	59	[5 ... 7] = 0,
	60	};
	61
bc24a225	62	typedef struct {
a171fe39 AZ	63	uint32_t value;
	64	int level;
	65	qemu_irq irq;
	66	QEMUTimer *qtimer;
	67	int num;
	68	void *info;
bc24a225	69	} PXA2xxTimer0;
a171fe39	70
bc24a225 PB	71	typedef struct {
bc24a225 PB	72	PXA2xxTimer0 tm;
a171fe39 AZ	73	int32_t oldclock;
	74	int32_t clock;
	75	uint64_t lastload;
	76	uint32_t freq;
	77	uint32_t control;
bc24a225	78	} PXA2xxTimer4;
a171fe39 AZ	79
a171fe39 AZ	80	typedef struct {
a171fe39 AZ	81	int32_t clock;
	82	int32_t oldclock;
	83	uint64_t lastload;
	84	uint32_t freq;
bc24a225 PB	85	PXA2xxTimer0 timer[4];
bc24a225 PB	86	PXA2xxTimer4 *tm4;
a171fe39 AZ	87	uint32_t events;
	88	uint32_t irq_enabled;
	89	uint32_t reset3;
a171fe39 AZ	90	uint32_t snapshot;
	91	} pxa2xx_timer_info;
	92
	93	static void pxa2xx_timer_update(void *opaque, uint64_t now_qemu)
	94	{
	95	pxa2xx_timer_info s = (pxa2xx_timer_info ) opaque;
	96	int i;
	97	uint32_t now_vm;
	98	uint64_t new_qemu;
	99
	100	now_vm = s->clock +
	101	muldiv64(now_qemu - s->lastload, s->freq, ticks_per_sec);
	102
	103	for (i = 0; i < 4; i ++) {
	104	new_qemu = now_qemu + muldiv64((uint32_t) (s->timer[i].value - now_vm),
	105	ticks_per_sec, s->freq);
	106	qemu_mod_timer(s->timer[i].qtimer, new_qemu);
	107	}
	108	}
	109
	110	static void pxa2xx_timer_update4(void *opaque, uint64_t now_qemu, int n)
	111	{
	112	pxa2xx_timer_info s = (pxa2xx_timer_info ) opaque;
	113	uint32_t now_vm;
	114	uint64_t new_qemu;
	115	static const int counters[8] = { 0, 0, 0, 0, 4, 4, 6, 6 };
	116	int counter;
	117
	118	if (s->tm4[n].control & (1 << 7))
	119	counter = n;
	120	else
	121	counter = counters[n];
	122
	123	if (!s->tm4[counter].freq) {
3f582262	124	qemu_del_timer(s->tm4[n].tm.qtimer);
a171fe39 AZ	125	return;
	126	}
	127
	128	now_vm = s->tm4[counter].clock + muldiv64(now_qemu -
	129	s->tm4[counter].lastload,
	130	s->tm4[counter].freq, ticks_per_sec);
	131
3bdd58a4	132	new_qemu = now_qemu + muldiv64((uint32_t) (s->tm4[n].tm.value - now_vm),
a171fe39	133	ticks_per_sec, s->tm4[counter].freq);
3f582262	134	qemu_mod_timer(s->tm4[n].tm.qtimer, new_qemu);
a171fe39 AZ	135	}
	136
	137	static uint32_t pxa2xx_timer_read(void *opaque, target_phys_addr_t offset)
	138	{
	139	pxa2xx_timer_info s = (pxa2xx_timer_info ) opaque;
	140	int tm = 0;
	141
a171fe39 AZ	142	switch (offset) {
	143	case OSMR3: tm ++;
	144	case OSMR2: tm ++;
	145	case OSMR1: tm ++;
	146	case OSMR0:
	147	return s->timer[tm].value;
	148	case OSMR11: tm ++;
	149	case OSMR10: tm ++;
	150	case OSMR9: tm ++;
	151	case OSMR8: tm ++;
	152	case OSMR7: tm ++;
	153	case OSMR6: tm ++;
	154	case OSMR5: tm ++;
	155	case OSMR4:
	156	if (!s->tm4)
	157	goto badreg;
3bdd58a4	158	return s->tm4[tm].tm.value;
a171fe39 AZ	159	case OSCR:
	160	return s->clock + muldiv64(qemu_get_clock(vm_clock) -
	161	s->lastload, s->freq, ticks_per_sec);
	162	case OSCR11: tm ++;
	163	case OSCR10: tm ++;
	164	case OSCR9: tm ++;
	165	case OSCR8: tm ++;
	166	case OSCR7: tm ++;
	167	case OSCR6: tm ++;
	168	case OSCR5: tm ++;
	169	case OSCR4:
	170	if (!s->tm4)
	171	goto badreg;
	172
	173	if ((tm == 9 - 4 \|\| tm == 11 - 4) && (s->tm4[tm].control & (1 << 9))) {
	174	if (s->tm4[tm - 1].freq)
	175	s->snapshot = s->tm4[tm - 1].clock + muldiv64(
	176	qemu_get_clock(vm_clock) -
	177	s->tm4[tm - 1].lastload,
	178	s->tm4[tm - 1].freq, ticks_per_sec);
	179	else
	180	s->snapshot = s->tm4[tm - 1].clock;
	181	}
	182
	183	if (!s->tm4[tm].freq)
	184	return s->tm4[tm].clock;
	185	return s->tm4[tm].clock + muldiv64(qemu_get_clock(vm_clock) -
	186	s->tm4[tm].lastload, s->tm4[tm].freq, ticks_per_sec);
	187	case OIER:
	188	return s->irq_enabled;
	189	case OSSR: /* Status register */
	190	return s->events;
	191	case OWER:
	192	return s->reset3;
	193	case OMCR11: tm ++;
	194	case OMCR10: tm ++;
	195	case OMCR9: tm ++;
	196	case OMCR8: tm ++;
	197	case OMCR7: tm ++;
	198	case OMCR6: tm ++;
	199	case OMCR5: tm ++;
	200	case OMCR4:
	201	if (!s->tm4)
	202	goto badreg;
	203	return s->tm4[tm].control;
	204	case OSNR:
	205	return s->snapshot;
	206	default:
	207	badreg:
2ac71179	208	hw_error("pxa2xx_timer_read: Bad offset " REG_FMT "\n", offset);
a171fe39 AZ	209	}
	210
	211	return 0;
	212	}
	213
	214	static void pxa2xx_timer_write(void *opaque, target_phys_addr_t offset,
	215	uint32_t value)
	216	{
	217	int i, tm = 0;
	218	pxa2xx_timer_info s = (pxa2xx_timer_info ) opaque;
	219
a171fe39 AZ	220	switch (offset) {
	221	case OSMR3: tm ++;
	222	case OSMR2: tm ++;
	223	case OSMR1: tm ++;
	224	case OSMR0:
	225	s->timer[tm].value = value;
	226	pxa2xx_timer_update(s, qemu_get_clock(vm_clock));
	227	break;
	228	case OSMR11: tm ++;
	229	case OSMR10: tm ++;
	230	case OSMR9: tm ++;
	231	case OSMR8: tm ++;
	232	case OSMR7: tm ++;
	233	case OSMR6: tm ++;
	234	case OSMR5: tm ++;
	235	case OSMR4:
	236	if (!s->tm4)
	237	goto badreg;
3bdd58a4	238	s->tm4[tm].tm.value = value;
a171fe39 AZ	239	pxa2xx_timer_update4(s, qemu_get_clock(vm_clock), tm);
	240	break;
	241	case OSCR:
	242	s->oldclock = s->clock;
	243	s->lastload = qemu_get_clock(vm_clock);
	244	s->clock = value;
	245	pxa2xx_timer_update(s, s->lastload);
	246	break;
	247	case OSCR11: tm ++;
	248	case OSCR10: tm ++;
	249	case OSCR9: tm ++;
	250	case OSCR8: tm ++;
	251	case OSCR7: tm ++;
	252	case OSCR6: tm ++;
	253	case OSCR5: tm ++;
	254	case OSCR4:
	255	if (!s->tm4)
	256	goto badreg;
	257	s->tm4[tm].oldclock = s->tm4[tm].clock;
	258	s->tm4[tm].lastload = qemu_get_clock(vm_clock);
	259	s->tm4[tm].clock = value;
	260	pxa2xx_timer_update4(s, s->tm4[tm].lastload, tm);
	261	break;
	262	case OIER:
	263	s->irq_enabled = value & 0xfff;
	264	break;
	265	case OSSR: /* Status register */
	266	s->events &= ~value;
	267	for (i = 0; i < 4; i ++, value >>= 1) {
	268	if (s->timer[i].level && (value & 1)) {
	269	s->timer[i].level = 0;
	270	qemu_irq_lower(s->timer[i].irq);
	271	}
	272	}
	273	if (s->tm4) {
	274	for (i = 0; i < 8; i ++, value >>= 1)
3bdd58a4 AZ	275	if (s->tm4[i].tm.level && (value & 1))
3bdd58a4 AZ	276	s->tm4[i].tm.level = 0;
a171fe39	277	if (!(s->events & 0xff0))
3bdd58a4	278	qemu_irq_lower(s->tm4->tm.irq);
a171fe39 AZ	279	}
	280	break;
	281	case OWER: /* XXX: Reset on OSMR3 match? */
	282	s->reset3 = value;
	283	break;
	284	case OMCR7: tm ++;
	285	case OMCR6: tm ++;
	286	case OMCR5: tm ++;
	287	case OMCR4:
	288	if (!s->tm4)
	289	goto badreg;
	290	s->tm4[tm].control = value & 0x0ff;
	291	/* XXX Stop if running (shouldn't happen) */
	292	if ((value & (1 << 7)) \|\| tm == 0)
	293	s->tm4[tm].freq = pxa2xx_timer4_freq[value & 7];
	294	else {
	295	s->tm4[tm].freq = 0;
	296	pxa2xx_timer_update4(s, qemu_get_clock(vm_clock), tm);
	297	}
	298	break;
	299	case OMCR11: tm ++;
	300	case OMCR10: tm ++;
	301	case OMCR9: tm ++;
	302	case OMCR8: tm += 4;
	303	if (!s->tm4)
	304	goto badreg;
	305	s->tm4[tm].control = value & 0x3ff;
	306	/* XXX Stop if running (shouldn't happen) */
	307	if ((value & (1 << 7)) \|\| !(tm & 1))
	308	s->tm4[tm].freq =
	309	pxa2xx_timer4_freq[(value & (1 << 8)) ? 0 : (value & 7)];
	310	else {
	311	s->tm4[tm].freq = 0;
	312	pxa2xx_timer_update4(s, qemu_get_clock(vm_clock), tm);
	313	}
	314	break;
	315	default:
	316	badreg:
2ac71179	317	hw_error("pxa2xx_timer_write: Bad offset " REG_FMT "\n", offset);
a171fe39 AZ	318	}
	319	}
	320
	321	static CPUReadMemoryFunc *pxa2xx_timer_readfn[] = {
	322	pxa2xx_timer_read,
	323	pxa2xx_timer_read,
	324	pxa2xx_timer_read,
	325	};
	326
	327	static CPUWriteMemoryFunc *pxa2xx_timer_writefn[] = {
	328	pxa2xx_timer_write,
	329	pxa2xx_timer_write,
	330	pxa2xx_timer_write,
	331	};
	332
	333	static void pxa2xx_timer_tick(void *opaque)
	334	{
bc24a225	335	PXA2xxTimer0 t = (PXA2xxTimer0 ) opaque;
a171fe39 AZ	336	pxa2xx_timer_info i = (pxa2xx_timer_info ) t->info;
	337
	338	if (i->irq_enabled & (1 << t->num)) {
	339	t->level = 1;
	340	i->events \|= 1 << t->num;
	341	qemu_irq_raise(t->irq);
	342	}
	343
	344	if (t->num == 3)
	345	if (i->reset3 & 1) {
	346	i->reset3 = 0;
3f582262	347	qemu_system_reset_request();
a171fe39 AZ	348	}
	349	}
	350
	351	static void pxa2xx_timer_tick4(void *opaque)
	352	{
bc24a225	353	PXA2xxTimer4 t = (PXA2xxTimer4 ) opaque;
3bdd58a4	354	pxa2xx_timer_info i = (pxa2xx_timer_info ) t->tm.info;
a171fe39	355
3bdd58a4	356	pxa2xx_timer_tick(&t->tm);
a171fe39 AZ	357	if (t->control & (1 << 3))
	358	t->clock = 0;
	359	if (t->control & (1 << 6))
3bdd58a4	360	pxa2xx_timer_update4(i, qemu_get_clock(vm_clock), t->tm.num - 4);
a171fe39 AZ	361	}
a171fe39 AZ	362
aa941b94 AZ	363	static void pxa2xx_timer_save(QEMUFile f, void opaque)
	364	{
	365	pxa2xx_timer_info s = (pxa2xx_timer_info ) opaque;
	366	int i;
	367
a050e24d AZ	368	qemu_put_be32s(f, (uint32_t *) &s->clock);
a050e24d AZ	369	qemu_put_be32s(f, (uint32_t *) &s->oldclock);
aa941b94 AZ	370	qemu_put_be64s(f, &s->lastload);
	371
	372	for (i = 0; i < 4; i ++) {
	373	qemu_put_be32s(f, &s->timer[i].value);
	374	qemu_put_be32(f, s->timer[i].level);
	375	}
	376	if (s->tm4)
	377	for (i = 0; i < 8; i ++) {
	378	qemu_put_be32s(f, &s->tm4[i].tm.value);
	379	qemu_put_be32(f, s->tm4[i].tm.level);
b6c4f71f BS	380	qemu_put_sbe32s(f, &s->tm4[i].oldclock);
b6c4f71f BS	381	qemu_put_sbe32s(f, &s->tm4[i].clock);
aa941b94 AZ	382	qemu_put_be64s(f, &s->tm4[i].lastload);
	383	qemu_put_be32s(f, &s->tm4[i].freq);
	384	qemu_put_be32s(f, &s->tm4[i].control);
	385	}
	386
	387	qemu_put_be32s(f, &s->events);
	388	qemu_put_be32s(f, &s->irq_enabled);
	389	qemu_put_be32s(f, &s->reset3);
	390	qemu_put_be32s(f, &s->snapshot);
	391	}
	392
	393	static int pxa2xx_timer_load(QEMUFile f, void opaque, int version_id)
	394	{
	395	pxa2xx_timer_info s = (pxa2xx_timer_info ) opaque;
	396	int64_t now;
	397	int i;
	398
a050e24d AZ	399	qemu_get_be32s(f, (uint32_t *) &s->clock);
a050e24d AZ	400	qemu_get_be32s(f, (uint32_t *) &s->oldclock);
aa941b94 AZ	401	qemu_get_be64s(f, &s->lastload);
	402
	403	now = qemu_get_clock(vm_clock);
	404	for (i = 0; i < 4; i ++) {
	405	qemu_get_be32s(f, &s->timer[i].value);
	406	s->timer[i].level = qemu_get_be32(f);
	407	}
	408	pxa2xx_timer_update(s, now);
	409
	410	if (s->tm4)
	411	for (i = 0; i < 8; i ++) {
	412	qemu_get_be32s(f, &s->tm4[i].tm.value);
	413	s->tm4[i].tm.level = qemu_get_be32(f);
b6c4f71f BS	414	qemu_get_sbe32s(f, &s->tm4[i].oldclock);
b6c4f71f BS	415	qemu_get_sbe32s(f, &s->tm4[i].clock);
aa941b94 AZ	416	qemu_get_be64s(f, &s->tm4[i].lastload);
	417	qemu_get_be32s(f, &s->tm4[i].freq);
	418	qemu_get_be32s(f, &s->tm4[i].control);
	419	pxa2xx_timer_update4(s, now, i);
	420	}
	421
	422	qemu_get_be32s(f, &s->events);
	423	qemu_get_be32s(f, &s->irq_enabled);
	424	qemu_get_be32s(f, &s->reset3);
	425	qemu_get_be32s(f, &s->snapshot);
	426
	427	return 0;
	428	}
	429
a171fe39	430	static pxa2xx_timer_info *pxa2xx_timer_init(target_phys_addr_t base,
3f582262	431	qemu_irq *irqs)
a171fe39 AZ	432	{
	433	int i;
	434	int iomemtype;
	435	pxa2xx_timer_info *s;
	436
	437	s = (pxa2xx_timer_info *) qemu_mallocz(sizeof(pxa2xx_timer_info));
a171fe39 AZ	438	s->irq_enabled = 0;
	439	s->oldclock = 0;
	440	s->clock = 0;
	441	s->lastload = qemu_get_clock(vm_clock);
	442	s->reset3 = 0;
a171fe39 AZ	443
	444	for (i = 0; i < 4; i ++) {
	445	s->timer[i].value = 0;
	446	s->timer[i].irq = irqs[i];
	447	s->timer[i].info = s;
	448	s->timer[i].num = i;
	449	s->timer[i].level = 0;
	450	s->timer[i].qtimer = qemu_new_timer(vm_clock,
	451	pxa2xx_timer_tick, &s->timer[i]);
	452	}
	453
1eed09cb	454	iomemtype = cpu_register_io_memory(pxa2xx_timer_readfn,
a171fe39	455	pxa2xx_timer_writefn, s);
187337f8	456	cpu_register_physical_memory(base, 0x00001000, iomemtype);
aa941b94 AZ	457
	458	register_savevm("pxa2xx_timer", 0, 0,
	459	pxa2xx_timer_save, pxa2xx_timer_load, s);
	460
a171fe39 AZ	461	return s;
	462	}
	463
3f582262	464	void pxa25x_timer_init(target_phys_addr_t base, qemu_irq *irqs)
a171fe39	465	{
3f582262	466	pxa2xx_timer_info *s = pxa2xx_timer_init(base, irqs);
a171fe39 AZ	467	s->freq = PXA25X_FREQ;
	468	s->tm4 = 0;
	469	}
	470
	471	void pxa27x_timer_init(target_phys_addr_t base,
3f582262	472	qemu_irq *irqs, qemu_irq irq4)
a171fe39	473	{
3f582262	474	pxa2xx_timer_info *s = pxa2xx_timer_init(base, irqs);
a171fe39 AZ	475	int i;
a171fe39 AZ	476	s->freq = PXA27X_FREQ;
bc24a225 PB	477	s->tm4 = (PXA2xxTimer4 ) qemu_mallocz(8
bc24a225 PB	478	sizeof(PXA2xxTimer4));
a171fe39	479	for (i = 0; i < 8; i ++) {
3bdd58a4 AZ	480	s->tm4[i].tm.value = 0;
	481	s->tm4[i].tm.irq = irq4;
	482	s->tm4[i].tm.info = s;
	483	s->tm4[i].tm.num = i + 4;
	484	s->tm4[i].tm.level = 0;
a171fe39 AZ	485	s->tm4[i].freq = 0;
a171fe39 AZ	486	s->tm4[i].control = 0x0;
3bdd58a4	487	s->tm4[i].tm.qtimer = qemu_new_timer(vm_clock,
a171fe39 AZ	488	pxa2xx_timer_tick4, &s->tm4[i]);
	489	}
	490	}