]> git.proxmox.com Git - mirror_qemu.git/blame - hw/sh4/r2d.c
Merge tag 'pull-maintainer-may24-160524-2' of https://gitlab.com/stsquad/qemu into...
[mirror_qemu.git] / hw / sh4 / r2d.c
CommitLineData
0d78f544
TS
1/*
2 * Renesas SH7751R R2D-PLUS emulation
3 *
4 * Copyright (c) 2007 Magnus Damm
b319feb7 5 * Copyright (c) 2008 Paul Mundt
0d78f544
TS
6 *
7 * Permission is hereby granted, free of charge, to any person obtaining a copy
8 * of this software and associated documentation files (the "Software"), to deal
9 * in the Software without restriction, including without limitation the rights
10 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
11 * copies of the Software, and to permit persons to whom the Software is
12 * furnished to do so, subject to the following conditions:
13 *
14 * The above copyright notice and this permission notice shall be included in
15 * all copies or substantial portions of the Software.
16 *
17 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
18 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
19 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
20 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
21 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
22 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
23 * THE SOFTWARE.
24 */
25
9d4c9946 26#include "qemu/osdep.h"
e7dd191c 27#include "qemu/units.h"
da34e65c 28#include "qapi/error.h"
6e5dd76f 29#include "qemu/error-report.h"
4771d756 30#include "cpu.h"
83c9f4ca 31#include "hw/sysbus.h"
0d09e41a 32#include "hw/sh4/sh.h"
71e8a915 33#include "sysemu/reset.h"
54d31236 34#include "sysemu/runstate.h"
9c17d615 35#include "sysemu/sysemu.h"
83c9f4ca
PB
36#include "hw/boards.h"
37#include "hw/pci/pci.h"
a27bd6c7 38#include "hw/qdev-properties.h"
1422e32d 39#include "net/net.h"
47b43a1f 40#include "sh7750_regs.h"
01c43405 41#include "hw/ide/mmio.h"
64552b6b 42#include "hw/irq.h"
83c9f4ca
PB
43#include "hw/loader.h"
44#include "hw/usb.h"
0d09e41a 45#include "hw/block/flash.h"
56839a19
AJ
46
47#define FLASH_BASE 0x00000000
84687134 48#define FLASH_SIZE (16 * MiB)
0d78f544
TS
49
50#define SDRAM_BASE 0x0c000000 /* Physical location of SDRAM: Area 3 */
51#define SDRAM_SIZE 0x04000000
52
ffd39257
BS
53#define SM501_VRAM_SIZE 0x800000
54
73f19035 55#define BOOT_PARAMS_OFFSET 0x0010000
e8afa065 56/* CONFIG_BOOT_LINK_OFFSET of Linux kernel */
73f19035
AJ
57#define LINUX_LOAD_OFFSET 0x0800000
58#define INITRD_LOAD_OFFSET 0x1800000
e8afa065 59
b3793b8a
BZ
60#define PA_IRLMSK 0x00
61#define PA_POWOFF 0x30
62#define PA_VERREG 0x32
63#define PA_OUTPORT 0x36
b319feb7
AJ
64
65typedef struct {
b319feb7 66 uint16_t bcr;
d47ede60 67 uint16_t irlmsk;
b319feb7
AJ
68 uint16_t irlmon;
69 uint16_t cfctl;
70 uint16_t cfpow;
71 uint16_t dispctl;
72 uint16_t sdmpow;
73 uint16_t rtcce;
74 uint16_t pcicd;
75 uint16_t voyagerrts;
76 uint16_t cfrst;
77 uint16_t admrts;
78 uint16_t extrst;
79 uint16_t cfcdintclr;
80 uint16_t keyctlclr;
81 uint16_t pad0;
82 uint16_t pad1;
b319feb7
AJ
83 uint16_t verreg;
84 uint16_t inport;
85 uint16_t outport;
86 uint16_t bverreg;
d47ede60
AZ
87
88/* output pin */
89 qemu_irq irl;
5dea2efb 90 MemoryRegion iomem;
c227f099 91} r2d_fpga_t;
b319feb7 92
d47ede60
AZ
93enum r2d_fpga_irq {
94 PCI_INTD, CF_IDE, CF_CD, PCI_INTC, SM501, KEY, RTC_A, RTC_T,
95 SDCARD, PCI_INTA, PCI_INTB, EXT, TP,
96 NR_IRQS
97};
98
99static const struct { short irl; uint16_t msk; } irqtab[NR_IRQS] = {
f94bff13
BZ
100 [CF_IDE] = { 1, 1 << 9 },
101 [CF_CD] = { 2, 1 << 8 },
102 [PCI_INTA] = { 9, 1 << 14 },
103 [PCI_INTB] = { 10, 1 << 13 },
104 [PCI_INTC] = { 3, 1 << 12 },
105 [PCI_INTD] = { 0, 1 << 11 },
106 [SM501] = { 4, 1 << 10 },
107 [KEY] = { 5, 1 << 6 },
108 [RTC_A] = { 6, 1 << 5 },
109 [RTC_T] = { 7, 1 << 4 },
110 [SDCARD] = { 8, 1 << 7 },
111 [EXT] = { 11, 1 << 0 },
112 [TP] = { 12, 1 << 15 },
d47ede60
AZ
113};
114
c227f099 115static void update_irl(r2d_fpga_t *fpga)
d47ede60
AZ
116{
117 int i, irl = 15;
ac3c9e74
BZ
118 for (i = 0; i < NR_IRQS; i++) {
119 if ((fpga->irlmon & fpga->irlmsk & irqtab[i].msk) &&
120 irqtab[i].irl < irl) {
121 irl = irqtab[i].irl;
122 }
123 }
d47ede60
AZ
124 qemu_set_irq(fpga->irl, irl ^ 15);
125}
126
127static void r2d_fpga_irq_set(void *opaque, int n, int level)
128{
c227f099 129 r2d_fpga_t *fpga = opaque;
ac3c9e74 130 if (level) {
d47ede60 131 fpga->irlmon |= irqtab[n].msk;
ac3c9e74 132 } else {
d47ede60 133 fpga->irlmon &= ~irqtab[n].msk;
ac3c9e74 134 }
d47ede60
AZ
135 update_irl(fpga);
136}
137
56380752 138static uint64_t r2d_fpga_read(void *opaque, hwaddr addr, unsigned int size)
b319feb7 139{
c227f099 140 r2d_fpga_t *s = opaque;
b319feb7 141
b319feb7 142 switch (addr) {
d47ede60
AZ
143 case PA_IRLMSK:
144 return s->irlmsk;
b319feb7 145 case PA_OUTPORT:
7d37435b 146 return s->outport;
b319feb7 147 case PA_POWOFF:
7d37435b 148 return 0x00;
b319feb7 149 case PA_VERREG:
7d37435b 150 return 0x10;
b319feb7
AJ
151 }
152
153 return 0;
154}
155
156static void
56380752 157r2d_fpga_write(void *opaque, hwaddr addr, uint64_t value, unsigned int size)
b319feb7 158{
c227f099 159 r2d_fpga_t *s = opaque;
b319feb7 160
b319feb7 161 switch (addr) {
d47ede60
AZ
162 case PA_IRLMSK:
163 s->irlmsk = value;
164 update_irl(s);
7d37435b 165 break;
b319feb7 166 case PA_OUTPORT:
7d37435b
PB
167 s->outport = value;
168 break;
b319feb7 169 case PA_POWOFF:
37cc0b44 170 if (value & 1) {
cf83f140 171 qemu_system_shutdown_request(SHUTDOWN_CAUSE_GUEST_SHUTDOWN);
37cc0b44
AJ
172 }
173 break;
b319feb7 174 case PA_VERREG:
7d37435b
PB
175 /* Discard writes */
176 break;
b319feb7
AJ
177 }
178}
179
5dea2efb 180static const MemoryRegionOps r2d_fpga_ops = {
56380752
AJ
181 .read = r2d_fpga_read,
182 .write = r2d_fpga_write,
183 .impl.min_access_size = 2,
184 .impl.max_access_size = 2,
5dea2efb 185 .endianness = DEVICE_NATIVE_ENDIAN,
b319feb7
AJ
186};
187
5dea2efb 188static qemu_irq *r2d_fpga_init(MemoryRegion *sysmem,
a8170e5e 189 hwaddr base, qemu_irq irl)
b319feb7 190{
c227f099 191 r2d_fpga_t *s;
b319feb7 192
b21e2380 193 s = g_new0(r2d_fpga_t, 1);
d47ede60
AZ
194
195 s->irl = irl;
b319feb7 196
2c9b15ca 197 memory_region_init_io(&s->iomem, NULL, &r2d_fpga_ops, s, "r2d-fpga", 0x40);
5dea2efb 198 memory_region_add_subregion(sysmem, base, &s->iomem);
d47ede60 199 return qemu_allocate_irqs(r2d_fpga_irq_set, s, NR_IRQS);
b319feb7
AJ
200}
201
4f6493ff 202typedef struct ResetData {
868bac81 203 SuperHCPU *cpu;
4f6493ff
AJ
204 uint32_t vector;
205} ResetData;
206
207static void main_cpu_reset(void *opaque)
208{
209 ResetData *s = (ResetData *)opaque;
868bac81 210 CPUSH4State *env = &s->cpu->env;
4f6493ff 211
868bac81 212 cpu_reset(CPU(s->cpu));
4f6493ff
AJ
213 env->pc = s->vector;
214}
215
541dc0d4 216static struct QEMU_PACKED
73f19035
AJ
217{
218 int mount_root_rdonly;
219 int ramdisk_flags;
220 int orig_root_dev;
221 int loader_type;
222 int initrd_start;
223 int initrd_size;
224
225 char pad[232];
226
7de7b608 227 char kernel_cmdline[256] QEMU_NONSTRING;
73f19035
AJ
228} boot_params;
229
3ef96221 230static void r2d_init(MachineState *machine)
0d78f544 231{
3ef96221
MA
232 const char *kernel_filename = machine->kernel_filename;
233 const char *kernel_cmdline = machine->kernel_cmdline;
234 const char *initrd_filename = machine->initrd_filename;
cf2528a5 235 MachineClass *mc = MACHINE_GET_CLASS(machine);
fd2f410b 236 SuperHCPU *cpu;
0b7ade1d 237 CPUSH4State *env;
4f6493ff 238 ResetData *reset_info;
0d78f544 239 struct SH7750State *s;
5dea2efb 240 MemoryRegion *sdram = g_new(MemoryRegion, 1);
d47ede60 241 qemu_irq *irq;
751c6a17 242 DriveInfo *dinfo;
8c106233
BC
243 DeviceState *dev;
244 SysBusDevice *busdev;
27a9d2ea 245 MemoryRegion *address_space_mem = get_system_memory();
29b358f9 246 PCIBus *pci_bus;
1b31b677 247 USBBus *usb_bus;
0d78f544 248
78f60b82 249 cpu = SUPERH_CPU(cpu_create(machine->cpu_type));
fd2f410b
AF
250 env = &cpu->env;
251
b21e2380 252 reset_info = g_new0(ResetData, 1);
868bac81 253 reset_info->cpu = cpu;
4f6493ff
AJ
254 reset_info->vector = env->pc;
255 qemu_register_reset(main_cpu_reset, reset_info);
0d78f544
TS
256
257 /* Allocate memory space */
98a99ce0 258 memory_region_init_ram(sdram, NULL, "r2d.sdram", SDRAM_SIZE, &error_fatal);
5dea2efb 259 memory_region_add_subregion(address_space_mem, SDRAM_BASE, sdram);
0d78f544 260 /* Register peripherals */
2f493fee 261 s = sh7750_init(cpu, address_space_mem);
5dea2efb 262 irq = r2d_fpga_init(address_space_mem, 0x04000000, sh7750_irl(s));
8c106233 263
3e80f690 264 dev = qdev_new("sh_pci");
1356b98d 265 busdev = SYS_BUS_DEVICE(dev);
3c6ef471 266 sysbus_realize_and_unref(busdev, &error_fatal);
29b358f9 267 pci_bus = PCI_BUS(qdev_get_child_bus(dev, "pci"));
8c106233
BC
268 sysbus_mmio_map(busdev, 0, P4ADDR(0x1e200000));
269 sysbus_mmio_map(busdev, 1, A7ADDR(0x1e200000));
270 sysbus_connect_irq(busdev, 0, irq[PCI_INTA]);
271 sysbus_connect_irq(busdev, 1, irq[PCI_INTB]);
272 sysbus_connect_irq(busdev, 2, irq[PCI_INTC]);
273 sysbus_connect_irq(busdev, 3, irq[PCI_INTD]);
d47ede60 274
3e80f690 275 dev = qdev_new("sysbus-sm501");
ca8a1104
BZ
276 busdev = SYS_BUS_DEVICE(dev);
277 qdev_prop_set_uint32(dev, "vram-size", SM501_VRAM_SIZE);
6a015046 278 qdev_prop_set_uint64(dev, "dma-offset", 0x10000000);
0ed40f16 279 qdev_prop_set_chr(dev, "chardev", serial_hd(2));
3c6ef471 280 sysbus_realize_and_unref(busdev, &error_fatal);
ca8a1104
BZ
281 sysbus_mmio_map(busdev, 0, 0x10000000);
282 sysbus_mmio_map(busdev, 1, 0x13e00000);
283 sysbus_connect_irq(busdev, 0, irq[SM501]);
a4a771c0
AZ
284
285 /* onboard CF (True IDE mode, Master only). */
612b2bd0 286 dinfo = drive_get(IF_IDE, 0, 0);
3e80f690 287 dev = qdev_new("mmio-ide");
6b2578d6 288 busdev = SYS_BUS_DEVICE(dev);
6b2578d6 289 qdev_prop_set_uint32(dev, "shift", 1);
3c6ef471 290 sysbus_realize_and_unref(busdev, &error_fatal);
3c5f86a2 291 sysbus_connect_irq(busdev, 0, irq[CF_IDE]);
6b2578d6
AF
292 sysbus_mmio_map(busdev, 0, 0x14001000);
293 sysbus_mmio_map(busdev, 1, 0x1400080c);
294 mmio_ide_init_drives(dev, dinfo, NULL);
a4a771c0 295
84687134
MA
296 /*
297 * Onboard flash memory
298 * According to the old board user document in Japanese (under
299 * NDA) what is referred to as FROM (Area0) is connected via a
300 * 32-bit bus and CS0 to CN8. The docs mention a Cypress
301 * S29PL127J60TFI130 chipsset. Per the 'S29PL-J 002-00615
302 * Rev. *E' datasheet, it is a 128Mbit NOR parallel flash
303 * addressable in words of 16bit.
304 */
45e7e4bc 305 dinfo = drive_get(IF_PFLASH, 0, 0);
940d5b13 306 pflash_cfi02_register(0x0, "r2d.flash", FLASH_SIZE,
4be74634 307 dinfo ? blk_by_legacy_dinfo(dinfo) : NULL,
ce14710f 308 64 * KiB, 1, 2, 0x0001, 0x227e, 0x2220, 0x2200,
01e0451a 309 0x555, 0x2aa, 0);
56839a19 310
c2f01775 311 /* NIC: rtl8139 on-board, and 2 slots. */
2d89ae0c
DW
312 pci_init_nic_in_slot(pci_bus, mc->default_nic, NULL, "2");
313 pci_init_nic_devices(pci_bus, mc->default_nic);
c2f01775 314
9caa3ec1 315 /* USB keyboard */
1b31b677
PB
316 usb_bus = USB_BUS(object_resolve_type_unambiguous(TYPE_USB_BUS,
317 &error_abort));
318 usb_create_simple(usb_bus, "usb-kbd");
9caa3ec1 319
0d78f544 320 /* Todo: register on board registers */
73f19035
AJ
321 memset(&boot_params, 0, sizeof(boot_params));
322
e8afa065 323 if (kernel_filename) {
73f19035
AJ
324 int kernel_size;
325
326 kernel_size = load_image_targphys(kernel_filename,
327 SDRAM_BASE + LINUX_LOAD_OFFSET,
328 INITRD_LOAD_OFFSET - LINUX_LOAD_OFFSET);
329 if (kernel_size < 0) {
6e5dd76f 330 error_report("qemu: could not load kernel '%s'", kernel_filename);
f94bff13 331 exit(1);
73f19035
AJ
332 }
333
334 /* initialization which should be done by firmware */
42874d3a
PM
335 address_space_stl(&address_space_memory, SH7750_BCR1, 1 << 3,
336 MEMTXATTRS_UNSPECIFIED, NULL); /* cs3 SDRAM */
337 address_space_stw(&address_space_memory, SH7750_BCR2, 3 << (3 * 2),
338 MEMTXATTRS_UNSPECIFIED, NULL); /* cs3 32bit */
f94bff13
BZ
339 /* Start from P2 area */
340 reset_info->vector = (SDRAM_BASE + LINUX_LOAD_OFFSET) | 0xa0000000;
0d78f544 341 }
73f19035
AJ
342
343 if (initrd_filename) {
344 int initrd_size;
345
346 initrd_size = load_image_targphys(initrd_filename,
347 SDRAM_BASE + INITRD_LOAD_OFFSET,
348 SDRAM_SIZE - INITRD_LOAD_OFFSET);
349
350 if (initrd_size < 0) {
6e5dd76f 351 error_report("qemu: could not load initrd '%s'", initrd_filename);
f94bff13 352 exit(1);
73f19035
AJ
353 }
354
355 /* initialization which should be done by firmware */
cdd14a8c
GR
356 boot_params.loader_type = tswap32(1);
357 boot_params.initrd_start = tswap32(INITRD_LOAD_OFFSET);
358 boot_params.initrd_size = tswap32(initrd_size);
73f19035
AJ
359 }
360
361 if (kernel_cmdline) {
22138965
BZ
362 /*
363 * I see no evidence that this .kernel_cmdline buffer requires
364 * NUL-termination, so using strncpy should be ok.
365 */
73f19035
AJ
366 strncpy(boot_params.kernel_cmdline, kernel_cmdline,
367 sizeof(boot_params.kernel_cmdline));
368 }
369
370 rom_add_blob_fixed("boot_params", &boot_params, sizeof(boot_params),
371 SDRAM_BASE + BOOT_PARAMS_OFFSET);
0d78f544
TS
372}
373
e264d29d 374static void r2d_machine_init(MachineClass *mc)
f80f9ec9 375{
e264d29d
EH
376 mc->desc = "r2d-plus board";
377 mc->init = r2d_init;
2059839b 378 mc->block_default_type = IF_IDE;
78f60b82 379 mc->default_cpu_type = TYPE_SH7751R_CPU;
cf2528a5 380 mc->default_nic = "rtl8139";
f80f9ec9
AL
381}
382
e264d29d 383DEFINE_MACHINE("r2d", r2d_machine_init)