[qemu.git] / hw / spapr_vio.c

/*
 * QEMU sPAPR VIO code
 *
 * Copyright (c) 2010 David Gibson, IBM Corporation <dwg@au1.ibm.com>
 * Based on the s390 virtio bus code:
 * Copyright (c) 2009 Alexander Graf <agraf@suse.de>
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
 */

#include "hw.h"
#include "sysemu.h"
#include "boards.h"
#include "monitor/monitor.h"
#include "loader.h"
#include "elf.h"
#include "hw/sysbus.h"
#include "kvm.h"
#include "device_tree.h"
#include "kvm_ppc.h"

#include "hw/spapr.h"
#include "hw/spapr_vio.h"
#include "hw/xics.h"

#ifdef CONFIG_FDT
#include <libfdt.h>
#endif /* CONFIG_FDT */

/* #define DEBUG_SPAPR */

#ifdef DEBUG_SPAPR
#define dprintf(fmt, ...) \
    do { fprintf(stderr, fmt, ## __VA_ARGS__); } while (0)
#else
#define dprintf(fmt, ...) \
    do { } while (0)
#endif

static Property spapr_vio_props[] = {
    DEFINE_PROP_UINT32("irq", VIOsPAPRDevice, irq, 0), \
    DEFINE_PROP_END_OF_LIST(),
};

static const TypeInfo spapr_vio_bus_info = {
    .name = TYPE_SPAPR_VIO_BUS,
    .parent = TYPE_BUS,
    .instance_size = sizeof(VIOsPAPRBus),
};

VIOsPAPRDevice *spapr_vio_find_by_reg(VIOsPAPRBus *bus, uint32_t reg)
{
    BusChild *kid;
    VIOsPAPRDevice *dev = NULL;

    QTAILQ_FOREACH(kid, &bus->bus.children, sibling) {
        dev = (VIOsPAPRDevice *)kid->child;
        if (dev->reg == reg) {
            return dev;
        }
    }

    return NULL;
}

static char *vio_format_dev_name(VIOsPAPRDevice *dev)
{
    VIOsPAPRDeviceClass *pc = VIO_SPAPR_DEVICE_GET_CLASS(dev);
    char *name;

    /* Device tree style name device@reg */
    if (asprintf(&name, "%s@%x", pc->dt_name, dev->reg) < 0) {
        return NULL;
    }

    return name;
}

#ifdef CONFIG_FDT
static int vio_make_devnode(VIOsPAPRDevice *dev,
                            void *fdt)
{
    VIOsPAPRDeviceClass *pc = VIO_SPAPR_DEVICE_GET_CLASS(dev);
    int vdevice_off, node_off, ret;
    char *dt_name;

    vdevice_off = fdt_path_offset(fdt, "/vdevice");
    if (vdevice_off < 0) {
        return vdevice_off;
    }

    dt_name = vio_format_dev_name(dev);
    if (!dt_name) {
        return -ENOMEM;
    }

    node_off = fdt_add_subnode(fdt, vdevice_off, dt_name);
    free(dt_name);
    if (node_off < 0) {
        return node_off;
    }

    ret = fdt_setprop_cell(fdt, node_off, "reg", dev->reg);
    if (ret < 0) {
        return ret;
    }

    if (pc->dt_type) {
        ret = fdt_setprop_string(fdt, node_off, "device_type",
                                 pc->dt_type);
        if (ret < 0) {
            return ret;
        }
    }

    if (pc->dt_compatible) {
        ret = fdt_setprop_string(fdt, node_off, "compatible",
                                 pc->dt_compatible);
        if (ret < 0) {
            return ret;
        }
    }

    if (dev->irq) {
        uint32_t ints_prop[] = {cpu_to_be32(dev->irq), 0};

        ret = fdt_setprop(fdt, node_off, "interrupts", ints_prop,
                          sizeof(ints_prop));
        if (ret < 0) {
            return ret;
        }
    }

    ret = spapr_tcet_dma_dt(fdt, node_off, "ibm,my-dma-window", dev->dma);
    if (ret < 0) {
        return ret;
    }

    if (pc->devnode) {
        ret = (pc->devnode)(dev, fdt, node_off);
        if (ret < 0) {
            return ret;
        }
    }

    return node_off;
}
#endif /* CONFIG_FDT */

/*
 * CRQ handling
 */
static target_ulong h_reg_crq(PowerPCCPU *cpu, sPAPREnvironment *spapr,
                              target_ulong opcode, target_ulong *args)
{
    target_ulong reg = args[0];
    target_ulong queue_addr = args[1];
    target_ulong queue_len = args[2];
    VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);

    if (!dev) {
        hcall_dprintf("Unit 0x" TARGET_FMT_lx " does not exist\n", reg);
        return H_PARAMETER;
    }

    /* We can't grok a queue size bigger than 256M for now */
    if (queue_len < 0x1000 || queue_len > 0x10000000) {
        hcall_dprintf("Queue size too small or too big (0x" TARGET_FMT_lx
                      ")\n", queue_len);
        return H_PARAMETER;
    }

    /* Check queue alignment */
    if (queue_addr & 0xfff) {
        hcall_dprintf("Queue not aligned (0x" TARGET_FMT_lx ")\n", queue_addr);
        return H_PARAMETER;
    }

    /* Check if device supports CRQs */
    if (!dev->crq.SendFunc) {
        hcall_dprintf("Device does not support CRQ\n");
        return H_NOT_FOUND;
    }

    /* Already a queue ? */
    if (dev->crq.qsize) {
        hcall_dprintf("CRQ already registered\n");
        return H_RESOURCE;
    }
    dev->crq.qladdr = queue_addr;
    dev->crq.qsize = queue_len;
    dev->crq.qnext = 0;

    dprintf("CRQ for dev 0x" TARGET_FMT_lx " registered at 0x"
            TARGET_FMT_lx "/0x" TARGET_FMT_lx "\n",
            reg, queue_addr, queue_len);
    return H_SUCCESS;
}

static target_ulong free_crq(VIOsPAPRDevice *dev)
{
    dev->crq.qladdr = 0;
    dev->crq.qsize = 0;
    dev->crq.qnext = 0;

    dprintf("CRQ for dev 0x%" PRIx32 " freed\n", dev->reg);

    return H_SUCCESS;
}

static target_ulong h_free_crq(PowerPCCPU *cpu, sPAPREnvironment *spapr,
                               target_ulong opcode, target_ulong *args)
{
    target_ulong reg = args[0];
    VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);

    if (!dev) {
        hcall_dprintf("Unit 0x" TARGET_FMT_lx " does not exist\n", reg);
        return H_PARAMETER;
    }

    return free_crq(dev);
}

static target_ulong h_send_crq(PowerPCCPU *cpu, sPAPREnvironment *spapr,
                               target_ulong opcode, target_ulong *args)
{
    target_ulong reg = args[0];
    target_ulong msg_hi = args[1];
    target_ulong msg_lo = args[2];
    VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);
    uint64_t crq_mangle[2];

    if (!dev) {
        hcall_dprintf("Unit 0x" TARGET_FMT_lx " does not exist\n", reg);
        return H_PARAMETER;
    }
    crq_mangle[0] = cpu_to_be64(msg_hi);
    crq_mangle[1] = cpu_to_be64(msg_lo);

    if (dev->crq.SendFunc) {
        return dev->crq.SendFunc(dev, (uint8_t *)crq_mangle);
    }

    return H_HARDWARE;
}

static target_ulong h_enable_crq(PowerPCCPU *cpu, sPAPREnvironment *spapr,
                                 target_ulong opcode, target_ulong *args)
{
    target_ulong reg = args[0];
    VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);

    if (!dev) {
        hcall_dprintf("Unit 0x" TARGET_FMT_lx " does not exist\n", reg);
        return H_PARAMETER;
    }

    return 0;
}

/* Returns negative error, 0 success, or positive: queue full */
int spapr_vio_send_crq(VIOsPAPRDevice *dev, uint8_t *crq)
{
    int rc;
    uint8_t byte;

    if (!dev->crq.qsize) {
        fprintf(stderr, "spapr_vio_send_creq on uninitialized queue\n");
        return -1;
    }

    /* Maybe do a fast path for KVM just writing to the pages */
    rc = spapr_vio_dma_read(dev, dev->crq.qladdr + dev->crq.qnext, &byte, 1);
    if (rc) {
        return rc;
    }
    if (byte != 0) {
        return 1;
    }

    rc = spapr_vio_dma_write(dev, dev->crq.qladdr + dev->crq.qnext + 8,
                             &crq[8], 8);
    if (rc) {
        return rc;
    }

    kvmppc_eieio();

    rc = spapr_vio_dma_write(dev, dev->crq.qladdr + dev->crq.qnext, crq, 8);
    if (rc) {
        return rc;
    }

    dev->crq.qnext = (dev->crq.qnext + 16) % dev->crq.qsize;

    if (dev->signal_state & 1) {
        qemu_irq_pulse(spapr_vio_qirq(dev));
    }

    return 0;
}

/* "quiesce" handling */

static void spapr_vio_quiesce_one(VIOsPAPRDevice *dev)
{
    if (dev->dma) {
        spapr_tce_reset(dev->dma);
    }
    free_crq(dev);
}

static void rtas_set_tce_bypass(sPAPREnvironment *spapr, uint32_t token,
                                uint32_t nargs, target_ulong args,
                                uint32_t nret, target_ulong rets)
{
    VIOsPAPRBus *bus = spapr->vio_bus;
    VIOsPAPRDevice *dev;
    uint32_t unit, enable;

    if (nargs != 2) {
        rtas_st(rets, 0, -3);
        return;
    }
    unit = rtas_ld(args, 0);
    enable = rtas_ld(args, 1);
    dev = spapr_vio_find_by_reg(bus, unit);
    if (!dev) {
        rtas_st(rets, 0, -3);
        return;
    }

    if (!dev->dma) {
        rtas_st(rets, 0, -3);
        return;
    }

    spapr_tce_set_bypass(dev->dma, !!enable);

    rtas_st(rets, 0, 0);
}

static void rtas_quiesce(sPAPREnvironment *spapr, uint32_t token,
                         uint32_t nargs, target_ulong args,
                         uint32_t nret, target_ulong rets)
{
    VIOsPAPRBus *bus = spapr->vio_bus;
    BusChild *kid;
    VIOsPAPRDevice *dev = NULL;

    if (nargs != 0) {
        rtas_st(rets, 0, -3);
        return;
    }

    QTAILQ_FOREACH(kid, &bus->bus.children, sibling) {
        dev = (VIOsPAPRDevice *)kid->child;
        spapr_vio_quiesce_one(dev);
    }

    rtas_st(rets, 0, 0);
}

static VIOsPAPRDevice *reg_conflict(VIOsPAPRDevice *dev)
{
    VIOsPAPRBus *bus = DO_UPCAST(VIOsPAPRBus, bus, dev->qdev.parent_bus);
    BusChild *kid;
    VIOsPAPRDevice *other;

    /*
     * Check for a device other than the given one which is already
     * using the requested address. We have to open code this because
     * the given dev might already be in the list.
     */
    QTAILQ_FOREACH(kid, &bus->bus.children, sibling) {
        other = DO_UPCAST(VIOsPAPRDevice, qdev, kid->child);

        if (other != dev && other->reg == dev->reg) {
            return other;
        }
    }

    return 0;
}

static void spapr_vio_busdev_reset(DeviceState *qdev)
{
    VIOsPAPRDevice *dev = DO_UPCAST(VIOsPAPRDevice, qdev, qdev);
    VIOsPAPRDeviceClass *pc = VIO_SPAPR_DEVICE_GET_CLASS(dev);

    /* Shut down the request queue and TCEs if necessary */
    spapr_vio_quiesce_one(dev);

    dev->signal_state = 0;

    if (pc->reset) {
        pc->reset(dev);
    }
}

static int spapr_vio_busdev_init(DeviceState *qdev)
{
    VIOsPAPRDevice *dev = (VIOsPAPRDevice *)qdev;
    VIOsPAPRDeviceClass *pc = VIO_SPAPR_DEVICE_GET_CLASS(dev);
    char *id;

    if (dev->reg != -1) {
        /*
         * Explicitly assigned address, just verify that no-one else
         * is using it.  other mechanism). We have to open code this
         * rather than using spapr_vio_find_by_reg() because sdev
         * itself is already in the list.
         */
        VIOsPAPRDevice *other = reg_conflict(dev);

        if (other) {
            fprintf(stderr, "vio: %s and %s devices conflict at address %#x\n",
                    object_get_typename(OBJECT(qdev)),
                    object_get_typename(OBJECT(&other->qdev)),
                    dev->reg);
            return -1;
        }
    } else {
        /* Need to assign an address */
        VIOsPAPRBus *bus = DO_UPCAST(VIOsPAPRBus, bus, dev->qdev.parent_bus);

        do {
            dev->reg = bus->next_reg++;
        } while (reg_conflict(dev));
    }

    /* Don't overwrite ids assigned on the command line */
    if (!dev->qdev.id) {
        id = vio_format_dev_name(dev);
        if (!id) {
            return -1;
        }
        dev->qdev.id = id;
    }

    dev->irq = spapr_allocate_msi(dev->irq);
    if (!dev->irq) {
        return -1;
    }

    if (pc->rtce_window_size) {
        uint32_t liobn = SPAPR_VIO_BASE_LIOBN | dev->reg;
        dev->dma = spapr_tce_new_dma_context(liobn, pc->rtce_window_size);
    }

    return pc->init(dev);
}

static target_ulong h_vio_signal(PowerPCCPU *cpu, sPAPREnvironment *spapr,
                                 target_ulong opcode,
                                 target_ulong *args)
{
    target_ulong reg = args[0];
    target_ulong mode = args[1];
    VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);
    VIOsPAPRDeviceClass *pc;

    if (!dev) {
        return H_PARAMETER;
    }

    pc = VIO_SPAPR_DEVICE_GET_CLASS(dev);

    if (mode & ~pc->signal_mask) {
        return H_PARAMETER;
    }

    dev->signal_state = mode;

    return H_SUCCESS;
}

VIOsPAPRBus *spapr_vio_bus_init(void)
{
    VIOsPAPRBus *bus;
    BusState *qbus;
    DeviceState *dev;

    /* Create bridge device */
    dev = qdev_create(NULL, "spapr-vio-bridge");
    qdev_init_nofail(dev);

    /* Create bus on bridge device */

    qbus = qbus_create(TYPE_SPAPR_VIO_BUS, dev, "spapr-vio");
    bus = DO_UPCAST(VIOsPAPRBus, bus, qbus);
    bus->next_reg = 0x1000;

    /* hcall-vio */
    spapr_register_hypercall(H_VIO_SIGNAL, h_vio_signal);

    /* hcall-crq */
    spapr_register_hypercall(H_REG_CRQ, h_reg_crq);
    spapr_register_hypercall(H_FREE_CRQ, h_free_crq);
    spapr_register_hypercall(H_SEND_CRQ, h_send_crq);
    spapr_register_hypercall(H_ENABLE_CRQ, h_enable_crq);

    /* RTAS calls */
    spapr_rtas_register("ibm,set-tce-bypass", rtas_set_tce_bypass);
    spapr_rtas_register("quiesce", rtas_quiesce);

    return bus;
}

/* Represents sPAPR hcall VIO devices */

static int spapr_vio_bridge_init(SysBusDevice *dev)
{
    /* nothing */
    return 0;
}

static void spapr_vio_bridge_class_init(ObjectClass *klass, void *data)
{
    DeviceClass *dc = DEVICE_CLASS(klass);
    SysBusDeviceClass *k = SYS_BUS_DEVICE_CLASS(klass);

    k->init = spapr_vio_bridge_init;
    dc->no_user = 1;
}

static TypeInfo spapr_vio_bridge_info = {
    .name          = "spapr-vio-bridge",
    .parent        = TYPE_SYS_BUS_DEVICE,
    .instance_size = sizeof(SysBusDevice),
    .class_init    = spapr_vio_bridge_class_init,
};

static void vio_spapr_device_class_init(ObjectClass *klass, void *data)
{
    DeviceClass *k = DEVICE_CLASS(klass);
    k->init = spapr_vio_busdev_init;
    k->reset = spapr_vio_busdev_reset;
    k->bus_type = TYPE_SPAPR_VIO_BUS;
    k->props = spapr_vio_props;
}

static TypeInfo spapr_vio_type_info = {
    .name = TYPE_VIO_SPAPR_DEVICE,
    .parent = TYPE_DEVICE,
    .instance_size = sizeof(VIOsPAPRDevice),
    .abstract = true,
    .class_size = sizeof(VIOsPAPRDeviceClass),
    .class_init = vio_spapr_device_class_init,
};

static void spapr_vio_register_types(void)
{
    type_register_static(&spapr_vio_bus_info);
    type_register_static(&spapr_vio_bridge_info);
    type_register_static(&spapr_vio_type_info);
}

type_init(spapr_vio_register_types)

#ifdef CONFIG_FDT
static int compare_reg(const void *p1, const void *p2)
{
    VIOsPAPRDevice const *dev1, *dev2;

    dev1 = (VIOsPAPRDevice *)*(DeviceState **)p1;
    dev2 = (VIOsPAPRDevice *)*(DeviceState **)p2;

    if (dev1->reg < dev2->reg) {
        return -1;
    }
    if (dev1->reg == dev2->reg) {
        return 0;
    }

    /* dev1->reg > dev2->reg */
    return 1;
}

int spapr_populate_vdevice(VIOsPAPRBus *bus, void *fdt)
{
    DeviceState *qdev, **qdevs;
    BusChild *kid;
    int i, num, ret = 0;

    /* Count qdevs on the bus list */
    num = 0;
    QTAILQ_FOREACH(kid, &bus->bus.children, sibling) {
        num++;
    }

    /* Copy out into an array of pointers */
    qdevs = g_malloc(sizeof(qdev) * num);
    num = 0;
    QTAILQ_FOREACH(kid, &bus->bus.children, sibling) {
        qdevs[num++] = kid->child;
    }

    /* Sort the array */
    qsort(qdevs, num, sizeof(qdev), compare_reg);

    /* Hack alert. Give the devices to libfdt in reverse order, we happen
     * to know that will mean they are in forward order in the tree. */
    for (i = num - 1; i >= 0; i--) {
        VIOsPAPRDevice *dev = (VIOsPAPRDevice *)(qdevs[i]);

        ret = vio_make_devnode(dev, fdt);

        if (ret < 0) {
            goto out;
        }
    }

    ret = 0;
out:
    free(qdevs);

    return ret;
}

int spapr_populate_chosen_stdout(void *fdt, VIOsPAPRBus *bus)
{
    VIOsPAPRDevice *dev;
    char *name, *path;
    int ret, offset;

    dev = spapr_vty_get_default(bus);
    if (!dev)
        return 0;

    offset = fdt_path_offset(fdt, "/chosen");
    if (offset < 0) {
        return offset;
    }

    name = vio_format_dev_name(dev);
    if (!name) {
        return -ENOMEM;
    }

    if (asprintf(&path, "/vdevice/%s", name) < 0) {
        path = NULL;
        ret = -ENOMEM;
        goto out;
    }

    ret = fdt_setprop_string(fdt, offset, "linux,stdout-path", path);
out:
    free(name);
    free(path);

    return ret;
}
#endif /* CONFIG_FDT */
Commit	Line	Data
4040ab72 DG	1	/*
	2	* QEMU sPAPR VIO code
	3	*
	4	* Copyright (c) 2010 David Gibson, IBM Corporation <dwg@au1.ibm.com>
	5	* Based on the s390 virtio bus code:
	6	* Copyright (c) 2009 Alexander Graf <agraf@suse.de>
	7	*
	8	* This library is free software; you can redistribute it and/or
	9	* modify it under the terms of the GNU Lesser General Public
	10	* License as published by the Free Software Foundation; either
	11	* version 2 of the License, or (at your option) any later version.
	12	*
	13	* This library is distributed in the hope that it will be useful,
	14	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	15	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
	16	* Lesser General Public License for more details.
	17	*
	18	* You should have received a copy of the GNU Lesser General Public
	19	* License along with this library; if not, see <http://www.gnu.org/licenses/>.
	20	*/
	21
	22	#include "hw.h"
	23	#include "sysemu.h"
	24	#include "boards.h"
83c9089e	25	#include "monitor/monitor.h"
4040ab72 DG	26	#include "loader.h"
	27	#include "elf.h"
	28	#include "hw/sysbus.h"
	29	#include "kvm.h"
	30	#include "device_tree.h"
b45d63b6	31	#include "kvm_ppc.h"
4040ab72 DG	32
	33	#include "hw/spapr.h"
	34	#include "hw/spapr_vio.h"
277f9acf	35	#include "hw/xics.h"
4040ab72 DG	36
	37	#ifdef CONFIG_FDT
	38	#include <libfdt.h>
	39	#endif /* CONFIG_FDT */
	40
	41	/* #define DEBUG_SPAPR */
	42
	43	#ifdef DEBUG_SPAPR
	44	#define dprintf(fmt, ...) \
	45	do { fprintf(stderr, fmt, ## __VA_ARGS__); } while (0)
	46	#else
	47	#define dprintf(fmt, ...) \
	48	do { } while (0)
	49	#endif
	50
3cb75a7c	51	static Property spapr_vio_props[] = {
a307d594	52	DEFINE_PROP_UINT32("irq", VIOsPAPRDevice, irq, 0), \
3cb75a7c PB	53	DEFINE_PROP_END_OF_LIST(),
	54	};
	55
0d936928 AL	56	static const TypeInfo spapr_vio_bus_info = {
	57	.name = TYPE_SPAPR_VIO_BUS,
	58	.parent = TYPE_BUS,
	59	.instance_size = sizeof(VIOsPAPRBus),
4040ab72 DG	60	};
	61
	62	VIOsPAPRDevice spapr_vio_find_by_reg(VIOsPAPRBus bus, uint32_t reg)
	63	{
0866aca1	64	BusChild *kid;
4040ab72 DG	65	VIOsPAPRDevice *dev = NULL;
4040ab72 DG	66
0866aca1 AL	67	QTAILQ_FOREACH(kid, &bus->bus.children, sibling) {
0866aca1 AL	68	dev = (VIOsPAPRDevice *)kid->child;
4040ab72	69	if (dev->reg == reg) {
5435352c	70	return dev;
4040ab72 DG	71	}
	72	}
	73
5435352c	74	return NULL;
4040ab72 DG	75	}
4040ab72 DG	76
1e34d859 ME	77	static char vio_format_dev_name(VIOsPAPRDevice dev)
1e34d859 ME	78	{
3954d33a	79	VIOsPAPRDeviceClass *pc = VIO_SPAPR_DEVICE_GET_CLASS(dev);
1e34d859 ME	80	char *name;
	81
	82	/* Device tree style name device@reg */
3954d33a	83	if (asprintf(&name, "%s@%x", pc->dt_name, dev->reg) < 0) {
1e34d859 ME	84	return NULL;
	85	}
	86
	87	return name;
	88	}
	89
4040ab72 DG	90	#ifdef CONFIG_FDT
	91	static int vio_make_devnode(VIOsPAPRDevice *dev,
	92	void *fdt)
	93	{
3954d33a	94	VIOsPAPRDeviceClass *pc = VIO_SPAPR_DEVICE_GET_CLASS(dev);
1e34d859 ME	95	int vdevice_off, node_off, ret;
1e34d859 ME	96	char *dt_name;
4040ab72 DG	97
	98	vdevice_off = fdt_path_offset(fdt, "/vdevice");
	99	if (vdevice_off < 0) {
	100	return vdevice_off;
	101	}
	102
1e34d859 ME	103	dt_name = vio_format_dev_name(dev);
	104	if (!dt_name) {
	105	return -ENOMEM;
	106	}
	107
	108	node_off = fdt_add_subnode(fdt, vdevice_off, dt_name);
	109	free(dt_name);
4040ab72 DG	110	if (node_off < 0) {
	111	return node_off;
	112	}
	113
	114	ret = fdt_setprop_cell(fdt, node_off, "reg", dev->reg);
	115	if (ret < 0) {
	116	return ret;
	117	}
	118
3954d33a	119	if (pc->dt_type) {
4040ab72	120	ret = fdt_setprop_string(fdt, node_off, "device_type",
3954d33a	121	pc->dt_type);
4040ab72 DG	122	if (ret < 0) {
	123	return ret;
	124	}
	125	}
	126
3954d33a	127	if (pc->dt_compatible) {
4040ab72	128	ret = fdt_setprop_string(fdt, node_off, "compatible",
3954d33a	129	pc->dt_compatible);
4040ab72 DG	130	if (ret < 0) {
	131	return ret;
	132	}
	133	}
	134
a307d594 AK	135	if (dev->irq) {
a307d594 AK	136	uint32_t ints_prop[] = {cpu_to_be32(dev->irq), 0};
00dc738d DG	137
	138	ret = fdt_setprop(fdt, node_off, "interrupts", ints_prop,
	139	sizeof(ints_prop));
	140	if (ret < 0) {
	141	return ret;
	142	}
	143	}
	144
5c4cbcf2	145	ret = spapr_tcet_dma_dt(fdt, node_off, "ibm,my-dma-window", dev->dma);
ad0ebb91 DG	146	if (ret < 0) {
ad0ebb91 DG	147	return ret;
ee86dfee DG	148	}
ee86dfee DG	149
3954d33a AL	150	if (pc->devnode) {
3954d33a AL	151	ret = (pc->devnode)(dev, fdt, node_off);
4040ab72 DG	152	if (ret < 0) {
	153	return ret;
	154	}
	155	}
	156
	157	return node_off;
	158	}
	159	#endif /* CONFIG_FDT */
	160
b45d63b6 BH	161	/*
	162	* CRQ handling
	163	*/
b13ce26d	164	static target_ulong h_reg_crq(PowerPCCPU cpu, sPAPREnvironment spapr,
b45d63b6 BH	165	target_ulong opcode, target_ulong *args)
	166	{
	167	target_ulong reg = args[0];
	168	target_ulong queue_addr = args[1];
	169	target_ulong queue_len = args[2];
	170	VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);
	171
	172	if (!dev) {
d9599c92	173	hcall_dprintf("Unit 0x" TARGET_FMT_lx " does not exist\n", reg);
b45d63b6 BH	174	return H_PARAMETER;
	175	}
	176
	177	/* We can't grok a queue size bigger than 256M for now */
	178	if (queue_len < 0x1000 \|\| queue_len > 0x10000000) {
d9599c92 DG	179	hcall_dprintf("Queue size too small or too big (0x" TARGET_FMT_lx
d9599c92 DG	180	")\n", queue_len);
b45d63b6 BH	181	return H_PARAMETER;
	182	}
	183
	184	/* Check queue alignment */
	185	if (queue_addr & 0xfff) {
d9599c92	186	hcall_dprintf("Queue not aligned (0x" TARGET_FMT_lx ")\n", queue_addr);
b45d63b6 BH	187	return H_PARAMETER;
	188	}
	189
	190	/* Check if device supports CRQs */
	191	if (!dev->crq.SendFunc) {
8e01f355	192	hcall_dprintf("Device does not support CRQ\n");
b45d63b6 BH	193	return H_NOT_FOUND;
	194	}
	195
b45d63b6 BH	196	/* Already a queue ? */
b45d63b6 BH	197	if (dev->crq.qsize) {
8e01f355	198	hcall_dprintf("CRQ already registered\n");
b45d63b6 BH	199	return H_RESOURCE;
	200	}
	201	dev->crq.qladdr = queue_addr;
	202	dev->crq.qsize = queue_len;
	203	dev->crq.qnext = 0;
	204
	205	dprintf("CRQ for dev 0x" TARGET_FMT_lx " registered at 0x"
	206	TARGET_FMT_lx "/0x" TARGET_FMT_lx "\n",
	207	reg, queue_addr, queue_len);
	208	return H_SUCCESS;
	209	}
	210
8e01f355 DG	211	static target_ulong free_crq(VIOsPAPRDevice *dev)
	212	{
	213	dev->crq.qladdr = 0;
	214	dev->crq.qsize = 0;
	215	dev->crq.qnext = 0;
	216
	217	dprintf("CRQ for dev 0x%" PRIx32 " freed\n", dev->reg);
	218
	219	return H_SUCCESS;
	220	}
	221
b13ce26d	222	static target_ulong h_free_crq(PowerPCCPU cpu, sPAPREnvironment spapr,
b45d63b6 BH	223	target_ulong opcode, target_ulong *args)
	224	{
	225	target_ulong reg = args[0];
	226	VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);
	227
	228	if (!dev) {
d9599c92	229	hcall_dprintf("Unit 0x" TARGET_FMT_lx " does not exist\n", reg);
b45d63b6 BH	230	return H_PARAMETER;
	231	}
	232
8e01f355	233	return free_crq(dev);
b45d63b6 BH	234	}
b45d63b6 BH	235
b13ce26d	236	static target_ulong h_send_crq(PowerPCCPU cpu, sPAPREnvironment spapr,
b45d63b6 BH	237	target_ulong opcode, target_ulong *args)
	238	{
	239	target_ulong reg = args[0];
	240	target_ulong msg_hi = args[1];
	241	target_ulong msg_lo = args[2];
	242	VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);
	243	uint64_t crq_mangle[2];
	244
	245	if (!dev) {
d9599c92	246	hcall_dprintf("Unit 0x" TARGET_FMT_lx " does not exist\n", reg);
b45d63b6 BH	247	return H_PARAMETER;
	248	}
	249	crq_mangle[0] = cpu_to_be64(msg_hi);
	250	crq_mangle[1] = cpu_to_be64(msg_lo);
	251
	252	if (dev->crq.SendFunc) {
	253	return dev->crq.SendFunc(dev, (uint8_t *)crq_mangle);
	254	}
	255
	256	return H_HARDWARE;
	257	}
	258
b13ce26d	259	static target_ulong h_enable_crq(PowerPCCPU cpu, sPAPREnvironment spapr,
b45d63b6 BH	260	target_ulong opcode, target_ulong *args)
	261	{
	262	target_ulong reg = args[0];
	263	VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);
	264
	265	if (!dev) {
d9599c92	266	hcall_dprintf("Unit 0x" TARGET_FMT_lx " does not exist\n", reg);
b45d63b6 BH	267	return H_PARAMETER;
	268	}
	269
	270	return 0;
	271	}
	272
	273	/* Returns negative error, 0 success, or positive: queue full */
	274	int spapr_vio_send_crq(VIOsPAPRDevice dev, uint8_t crq)
	275	{
	276	int rc;
	277	uint8_t byte;
	278
	279	if (!dev->crq.qsize) {
	280	fprintf(stderr, "spapr_vio_send_creq on uninitialized queue\n");
	281	return -1;
	282	}
	283
	284	/* Maybe do a fast path for KVM just writing to the pages */
ad0ebb91	285	rc = spapr_vio_dma_read(dev, dev->crq.qladdr + dev->crq.qnext, &byte, 1);
b45d63b6 BH	286	if (rc) {
	287	return rc;
	288	}
	289	if (byte != 0) {
	290	return 1;
	291	}
	292
ad0ebb91	293	rc = spapr_vio_dma_write(dev, dev->crq.qladdr + dev->crq.qnext + 8,
b45d63b6 BH	294	&crq[8], 8);
	295	if (rc) {
	296	return rc;
	297	}
	298
	299	kvmppc_eieio();
	300
ad0ebb91	301	rc = spapr_vio_dma_write(dev, dev->crq.qladdr + dev->crq.qnext, crq, 8);
b45d63b6 BH	302	if (rc) {
	303	return rc;
	304	}
	305
	306	dev->crq.qnext = (dev->crq.qnext + 16) % dev->crq.qsize;
	307
	308	if (dev->signal_state & 1) {
a307d594	309	qemu_irq_pulse(spapr_vio_qirq(dev));
b45d63b6 BH	310	}
	311
	312	return 0;
	313	}
	314
08942ac1 BH	315	/* "quiesce" handling */
	316
	317	static void spapr_vio_quiesce_one(VIOsPAPRDevice *dev)
	318	{
ad0ebb91	319	if (dev->dma) {
53724ee5	320	spapr_tce_reset(dev->dma);
08942ac1	321	}
4dd96f24	322	free_crq(dev);
08942ac1 BH	323	}
	324
	325	static void rtas_set_tce_bypass(sPAPREnvironment *spapr, uint32_t token,
	326	uint32_t nargs, target_ulong args,
	327	uint32_t nret, target_ulong rets)
	328	{
	329	VIOsPAPRBus *bus = spapr->vio_bus;
	330	VIOsPAPRDevice *dev;
	331	uint32_t unit, enable;
	332
	333	if (nargs != 2) {
	334	rtas_st(rets, 0, -3);
	335	return;
	336	}
	337	unit = rtas_ld(args, 0);
	338	enable = rtas_ld(args, 1);
	339	dev = spapr_vio_find_by_reg(bus, unit);
	340	if (!dev) {
	341	rtas_st(rets, 0, -3);
	342	return;
	343	}
ad0ebb91	344
53724ee5 DG	345	if (!dev->dma) {
	346	rtas_st(rets, 0, -3);
	347	return;
08942ac1 BH	348	}
08942ac1 BH	349
53724ee5 DG	350	spapr_tce_set_bypass(dev->dma, !!enable);
53724ee5 DG	351
08942ac1 BH	352	rtas_st(rets, 0, 0);
	353	}
	354
	355	static void rtas_quiesce(sPAPREnvironment *spapr, uint32_t token,
	356	uint32_t nargs, target_ulong args,
	357	uint32_t nret, target_ulong rets)
	358	{
	359	VIOsPAPRBus *bus = spapr->vio_bus;
0866aca1	360	BusChild *kid;
08942ac1 BH	361	VIOsPAPRDevice *dev = NULL;
	362
	363	if (nargs != 0) {
	364	rtas_st(rets, 0, -3);
	365	return;
	366	}
	367
0866aca1 AL	368	QTAILQ_FOREACH(kid, &bus->bus.children, sibling) {
0866aca1 AL	369	dev = (VIOsPAPRDevice *)kid->child;
08942ac1 BH	370	spapr_vio_quiesce_one(dev);
	371	}
	372
	373	rtas_st(rets, 0, 0);
	374	}
	375
d601fac4	376	static VIOsPAPRDevice reg_conflict(VIOsPAPRDevice dev)
9fc380d3	377	{
d601fac4	378	VIOsPAPRBus *bus = DO_UPCAST(VIOsPAPRBus, bus, dev->qdev.parent_bus);
0866aca1	379	BusChild *kid;
d601fac4	380	VIOsPAPRDevice *other;
9fc380d3 ME	381
9fc380d3 ME	382	/*
d601fac4 DG	383	* Check for a device other than the given one which is already
	384	* using the requested address. We have to open code this because
	385	* the given dev might already be in the list.
9fc380d3	386	*/
0866aca1 AL	387	QTAILQ_FOREACH(kid, &bus->bus.children, sibling) {
0866aca1 AL	388	other = DO_UPCAST(VIOsPAPRDevice, qdev, kid->child);
9fc380d3	389
d601fac4 DG	390	if (other != dev && other->reg == dev->reg) {
d601fac4 DG	391	return other;
9fc380d3 ME	392	}
	393	}
	394
	395	return 0;
	396	}
	397
b1c7f725	398	static void spapr_vio_busdev_reset(DeviceState *qdev)
8e01f355	399	{
b1c7f725 DG	400	VIOsPAPRDevice *dev = DO_UPCAST(VIOsPAPRDevice, qdev, qdev);
b1c7f725 DG	401	VIOsPAPRDeviceClass *pc = VIO_SPAPR_DEVICE_GET_CLASS(dev);
8e01f355	402
4dd96f24 DG	403	/* Shut down the request queue and TCEs if necessary */
	404	spapr_vio_quiesce_one(dev);
	405
	406	dev->signal_state = 0;
b1c7f725 DG	407
	408	if (pc->reset) {
	409	pc->reset(dev);
	410	}
8e01f355 DG	411	}
8e01f355 DG	412
d307af79	413	static int spapr_vio_busdev_init(DeviceState *qdev)
4040ab72	414	{
4040ab72	415	VIOsPAPRDevice dev = (VIOsPAPRDevice )qdev;
3954d33a	416	VIOsPAPRDeviceClass *pc = VIO_SPAPR_DEVICE_GET_CLASS(dev);
4040ab72	417	char *id;
9fc380d3	418
d601fac4 DG	419	if (dev->reg != -1) {
	420	/*
	421	* Explicitly assigned address, just verify that no-one else
	422	* is using it. other mechanism). We have to open code this
	423	* rather than using spapr_vio_find_by_reg() because sdev
	424	* itself is already in the list.
	425	*/
	426	VIOsPAPRDevice *other = reg_conflict(dev);
	427
	428	if (other) {
	429	fprintf(stderr, "vio: %s and %s devices conflict at address %#x\n",
	430	object_get_typename(OBJECT(qdev)),
	431	object_get_typename(OBJECT(&other->qdev)),
	432	dev->reg);
	433	return -1;
	434	}
	435	} else {
	436	/* Need to assign an address */
	437	VIOsPAPRBus *bus = DO_UPCAST(VIOsPAPRBus, bus, dev->qdev.parent_bus);
	438
	439	do {
	440	dev->reg = bus->next_reg++;
	441	} while (reg_conflict(dev));
9fc380d3	442	}
4040ab72	443
1e34d859 ME	444	/* Don't overwrite ids assigned on the command line */
	445	if (!dev->qdev.id) {
	446	id = vio_format_dev_name(dev);
	447	if (!id) {
	448	return -1;
	449	}
	450	dev->qdev.id = id;
4040ab72 DG	451	}
4040ab72 DG	452
a307d594 AK	453	dev->irq = spapr_allocate_msi(dev->irq);
a307d594 AK	454	if (!dev->irq) {
e6c866d4	455	return -1;
416343b1	456	}
4040ab72	457
53724ee5 DG	458	if (pc->rtce_window_size) {
	459	uint32_t liobn = SPAPR_VIO_BASE_LIOBN \| dev->reg;
	460	dev->dma = spapr_tce_new_dma_context(liobn, pc->rtce_window_size);
	461	}
ee86dfee	462
3954d33a	463	return pc->init(dev);
4040ab72 DG	464	}
4040ab72 DG	465
b13ce26d	466	static target_ulong h_vio_signal(PowerPCCPU cpu, sPAPREnvironment spapr,
00dc738d DG	467	target_ulong opcode,
	468	target_ulong *args)
	469	{
	470	target_ulong reg = args[0];
	471	target_ulong mode = args[1];
	472	VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);
3954d33a	473	VIOsPAPRDeviceClass *pc;
00dc738d DG	474
	475	if (!dev) {
	476	return H_PARAMETER;
	477	}
	478
3954d33a	479	pc = VIO_SPAPR_DEVICE_GET_CLASS(dev);
00dc738d	480
3954d33a	481	if (mode & ~pc->signal_mask) {
00dc738d DG	482	return H_PARAMETER;
	483	}
	484
	485	dev->signal_state = mode;
	486
	487	return H_SUCCESS;
	488	}
	489
4040ab72 DG	490	VIOsPAPRBus *spapr_vio_bus_init(void)
	491	{
	492	VIOsPAPRBus *bus;
	493	BusState *qbus;
	494	DeviceState *dev;
4040ab72 DG	495
	496	/* Create bridge device */
	497	dev = qdev_create(NULL, "spapr-vio-bridge");
	498	qdev_init_nofail(dev);
	499
	500	/* Create bus on bridge device */
	501
0d936928	502	qbus = qbus_create(TYPE_SPAPR_VIO_BUS, dev, "spapr-vio");
4040ab72	503	bus = DO_UPCAST(VIOsPAPRBus, bus, qbus);
d601fac4	504	bus->next_reg = 0x1000;
4040ab72	505
00dc738d DG	506	/* hcall-vio */
	507	spapr_register_hypercall(H_VIO_SIGNAL, h_vio_signal);
	508
b45d63b6 BH	509	/* hcall-crq */
	510	spapr_register_hypercall(H_REG_CRQ, h_reg_crq);
	511	spapr_register_hypercall(H_FREE_CRQ, h_free_crq);
	512	spapr_register_hypercall(H_SEND_CRQ, h_send_crq);
	513	spapr_register_hypercall(H_ENABLE_CRQ, h_enable_crq);
	514
08942ac1 BH	515	/* RTAS calls */
	516	spapr_rtas_register("ibm,set-tce-bypass", rtas_set_tce_bypass);
	517	spapr_rtas_register("quiesce", rtas_quiesce);
	518
4040ab72 DG	519	return bus;
	520	}
	521
	522	/* Represents sPAPR hcall VIO devices */
	523
	524	static int spapr_vio_bridge_init(SysBusDevice *dev)
	525	{
	526	/* nothing */
	527	return 0;
	528	}
	529
999e12bb AL	530	static void spapr_vio_bridge_class_init(ObjectClass klass, void data)
999e12bb AL	531	{
39bffca2 AL	532	DeviceClass *dc = DEVICE_CLASS(klass);
39bffca2 AL	533	SysBusDeviceClass *k = SYS_BUS_DEVICE_CLASS(klass);
999e12bb	534
39bffca2 AL	535	k->init = spapr_vio_bridge_init;
39bffca2 AL	536	dc->no_user = 1;
999e12bb AL	537	}
999e12bb AL	538
39bffca2 AL	539	static TypeInfo spapr_vio_bridge_info = {
	540	.name = "spapr-vio-bridge",
	541	.parent = TYPE_SYS_BUS_DEVICE,
	542	.instance_size = sizeof(SysBusDevice),
	543	.class_init = spapr_vio_bridge_class_init,
4040ab72 DG	544	};
4040ab72 DG	545
39bffca2 AL	546	static void vio_spapr_device_class_init(ObjectClass klass, void data)
	547	{
	548	DeviceClass *k = DEVICE_CLASS(klass);
	549	k->init = spapr_vio_busdev_init;
b1c7f725	550	k->reset = spapr_vio_busdev_reset;
0d936928	551	k->bus_type = TYPE_SPAPR_VIO_BUS;
bce54474	552	k->props = spapr_vio_props;
39bffca2 AL	553	}
39bffca2 AL	554
3954d33a AL	555	static TypeInfo spapr_vio_type_info = {
	556	.name = TYPE_VIO_SPAPR_DEVICE,
	557	.parent = TYPE_DEVICE,
	558	.instance_size = sizeof(VIOsPAPRDevice),
	559	.abstract = true,
	560	.class_size = sizeof(VIOsPAPRDeviceClass),
39bffca2	561	.class_init = vio_spapr_device_class_init,
3954d33a AL	562	};
3954d33a AL	563
83f7d43a	564	static void spapr_vio_register_types(void)
4040ab72	565	{
0d936928	566	type_register_static(&spapr_vio_bus_info);
39bffca2	567	type_register_static(&spapr_vio_bridge_info);
3954d33a	568	type_register_static(&spapr_vio_type_info);
4040ab72 DG	569	}
4040ab72 DG	570
83f7d43a	571	type_init(spapr_vio_register_types)
4040ab72 DG	572
4040ab72 DG	573	#ifdef CONFIG_FDT
05c19438 DG	574	static int compare_reg(const void p1, const void p2)
	575	{
	576	VIOsPAPRDevice const dev1, dev2;
	577
	578	dev1 = (VIOsPAPRDevice )(DeviceState **)p1;
	579	dev2 = (VIOsPAPRDevice )(DeviceState **)p2;
	580
	581	if (dev1->reg < dev2->reg) {
	582	return -1;
	583	}
	584	if (dev1->reg == dev2->reg) {
	585	return 0;
	586	}
	587
	588	/* dev1->reg > dev2->reg */
	589	return 1;
	590	}
	591
4040ab72 DG	592	int spapr_populate_vdevice(VIOsPAPRBus bus, void fdt)
4040ab72 DG	593	{
05c19438	594	DeviceState qdev, *qdevs;
0866aca1	595	BusChild *kid;
05c19438	596	int i, num, ret = 0;
4040ab72	597
05c19438 DG	598	/* Count qdevs on the bus list */
05c19438 DG	599	num = 0;
0866aca1	600	QTAILQ_FOREACH(kid, &bus->bus.children, sibling) {
05c19438 DG	601	num++;
	602	}
	603
	604	/* Copy out into an array of pointers */
	605	qdevs = g_malloc(sizeof(qdev) * num);
	606	num = 0;
0866aca1 AL	607	QTAILQ_FOREACH(kid, &bus->bus.children, sibling) {
0866aca1 AL	608	qdevs[num++] = kid->child;
05c19438 DG	609	}
	610
	611	/* Sort the array */
	612	qsort(qdevs, num, sizeof(qdev), compare_reg);
	613
	614	/* Hack alert. Give the devices to libfdt in reverse order, we happen
	615	* to know that will mean they are in forward order in the tree. */
	616	for (i = num - 1; i >= 0; i--) {
	617	VIOsPAPRDevice dev = (VIOsPAPRDevice )(qdevs[i]);
4040ab72 DG	618
	619	ret = vio_make_devnode(dev, fdt);
	620
	621	if (ret < 0) {
05c19438	622	goto out;
4040ab72 DG	623	}
	624	}
	625
05c19438 DG	626	ret = 0;
	627	out:
	628	free(qdevs);
	629
	630	return ret;
4040ab72	631	}
68f3a94c DG	632
	633	int spapr_populate_chosen_stdout(void fdt, VIOsPAPRBus bus)
	634	{
	635	VIOsPAPRDevice *dev;
	636	char name, path;
	637	int ret, offset;
	638
	639	dev = spapr_vty_get_default(bus);
	640	if (!dev)
	641	return 0;
	642
	643	offset = fdt_path_offset(fdt, "/chosen");
	644	if (offset < 0) {
	645	return offset;
	646	}
	647
	648	name = vio_format_dev_name(dev);
	649	if (!name) {
	650	return -ENOMEM;
	651	}
	652
	653	if (asprintf(&path, "/vdevice/%s", name) < 0) {
	654	path = NULL;
	655	ret = -ENOMEM;
	656	goto out;
	657	}
	658
	659	ret = fdt_setprop_string(fdt, offset, "linux,stdout-path", path);
	660	out:
	661	free(name);
	662	free(path);
	663
	664	return ret;
	665	}
4040ab72	666	#endif /* CONFIG_FDT */