]> git.proxmox.com Git - qemu.git/blame - hw/virtex_ml507.c
cadence_uart: Fix buffer overflow
[qemu.git] / hw / virtex_ml507.c
CommitLineData
2c50e26e
EI
1/*
2 * Model of Xilinx Virtex5 ML507 PPC-440 refdesign.
3 *
4 * Copyright (c) 2010 Edgar E. Iglesias.
5 *
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
12 *
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
15 *
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
23 */
24
25#include "sysbus.h"
26#include "hw.h"
27#include "pc.h"
28#include "net.h"
29#include "flash.h"
30#include "sysemu.h"
31#include "devices.h"
32#include "boards.h"
33#include "device_tree.h"
34#include "loader.h"
35#include "elf.h"
36#include "qemu-log.h"
39186d8a 37#include "exec-memory.h"
2c50e26e
EI
38
39#include "ppc.h"
40#include "ppc4xx.h"
2c50e26e
EI
41#include "ppc405.h"
42
43#include "blockdev.h"
44#include "xilinx.h"
45
46#define EPAPR_MAGIC (0x45504150)
47#define FLASH_SIZE (16 * 1024 * 1024)
48
49static struct boot_info
50{
51 uint32_t bootstrap_pc;
52 uint32_t cmdline;
53 uint32_t fdt;
54 uint32_t ima_size;
55 void *vfdt;
56} boot_info;
57
58/* Create reset TLB entries for BookE, spanning the 32bit addr space. */
e2684c0b 59static void mmubooke_create_initial_mapping(CPUPPCState *env,
2c50e26e
EI
60 target_ulong va,
61 target_phys_addr_t pa)
62{
1c53accc 63 ppcemb_tlb_t *tlb = &env->tlb.tlbe[0];
2c50e26e
EI
64
65 tlb->attr = 0;
66 tlb->prot = PAGE_VALID | ((PAGE_READ | PAGE_WRITE | PAGE_EXEC) << 4);
67 tlb->size = 1 << 31; /* up to 0x80000000 */
68 tlb->EPN = va & TARGET_PAGE_MASK;
69 tlb->RPN = pa & TARGET_PAGE_MASK;
70 tlb->PID = 0;
71
1c53accc 72 tlb = &env->tlb.tlbe[1];
2c50e26e
EI
73 tlb->attr = 0;
74 tlb->prot = PAGE_VALID | ((PAGE_READ | PAGE_WRITE | PAGE_EXEC) << 4);
75 tlb->size = 1 << 31; /* up to 0xffffffff */
76 tlb->EPN = 0x80000000 & TARGET_PAGE_MASK;
77 tlb->RPN = 0x80000000 & TARGET_PAGE_MASK;
78 tlb->PID = 0;
79}
80
68281699
AF
81static PowerPCCPU *ppc440_init_xilinx(ram_addr_t *ram_size,
82 int do_init,
83 const char *cpu_model,
84 uint32_t sysclk)
2c50e26e 85{
d1d4938b 86 PowerPCCPU *cpu;
e2684c0b 87 CPUPPCState *env;
2c50e26e
EI
88 qemu_irq *irqs;
89
d1d4938b
AF
90 cpu = cpu_ppc_init(cpu_model);
91 if (cpu == NULL) {
2c50e26e
EI
92 fprintf(stderr, "Unable to initialize CPU!\n");
93 exit(1);
94 }
d1d4938b 95 env = &cpu->env;
2c50e26e 96
ddd1055b 97 ppc_booke_timers_init(env, sysclk, 0/* no flags */);
2c50e26e
EI
98
99 ppc_dcr_init(env, NULL, NULL);
100
101 /* interrupt controller */
7267c094 102 irqs = g_malloc0(sizeof(qemu_irq) * PPCUIC_OUTPUT_NB);
2c50e26e
EI
103 irqs[PPCUIC_OUTPUT_INT] = ((qemu_irq *)env->irq_inputs)[PPC40x_INPUT_INT];
104 irqs[PPCUIC_OUTPUT_CINT] = ((qemu_irq *)env->irq_inputs)[PPC40x_INPUT_CINT];
49a2942d 105 ppcuic_init(env, irqs, 0x0C0, 0, 1);
68281699 106 return cpu;
2c50e26e
EI
107}
108
109static void main_cpu_reset(void *opaque)
110{
f8031482
AF
111 PowerPCCPU *cpu = opaque;
112 CPUPPCState *env = &cpu->env;
2c50e26e
EI
113 struct boot_info *bi = env->load_info;
114
f8031482 115 cpu_reset(CPU(cpu));
2c50e26e
EI
116 /* Linux Kernel Parameters (passing device tree):
117 * r3: pointer to the fdt
118 * r4: 0
119 * r5: 0
120 * r6: epapr magic
121 * r7: size of IMA in bytes
122 * r8: 0
123 * r9: 0
124 */
125 env->gpr[1] = (16<<20) - 8;
126 /* Provide a device-tree. */
127 env->gpr[3] = bi->fdt;
128 env->nip = bi->bootstrap_pc;
129
130 /* Create a mapping for the kernel. */
131 mmubooke_create_initial_mapping(env, 0, 0);
132 env->gpr[6] = tswap32(EPAPR_MAGIC);
133 env->gpr[7] = bi->ima_size;
134}
135
136#define BINARY_DEVICE_TREE_FILE "virtex-ml507.dtb"
137static int xilinx_load_device_tree(target_phys_addr_t addr,
138 uint32_t ramsize,
139 target_phys_addr_t initrd_base,
140 target_phys_addr_t initrd_size,
141 const char *kernel_cmdline)
142{
143 char *path;
144 int fdt_size;
145#ifdef CONFIG_FDT
146 void *fdt;
147 int r;
148
149 /* Try the local "ppc.dtb" override. */
150 fdt = load_device_tree("ppc.dtb", &fdt_size);
151 if (!fdt) {
152 path = qemu_find_file(QEMU_FILE_TYPE_BIOS, BINARY_DEVICE_TREE_FILE);
153 if (path) {
154 fdt = load_device_tree(path, &fdt_size);
7267c094 155 g_free(path);
2c50e26e 156 }
3b2e3dc9 157 if (!fdt) {
2c50e26e 158 return 0;
3b2e3dc9 159 }
2c50e26e
EI
160 }
161
162 r = qemu_devtree_setprop_string(fdt, "/chosen", "bootargs", kernel_cmdline);
163 if (r < 0)
164 fprintf(stderr, "couldn't set /chosen/bootargs\n");
165 cpu_physical_memory_write (addr, (void *)fdt, fdt_size);
166#else
167 /* We lack libfdt so we cannot manipulate the fdt. Just pass on the blob
168 to the kernel. */
169 fdt_size = load_image_targphys("ppc.dtb", addr, 0x10000);
170 if (fdt_size < 0) {
171 path = qemu_find_file(QEMU_FILE_TYPE_BIOS, BINARY_DEVICE_TREE_FILE);
172 if (path) {
173 fdt_size = load_image_targphys(path, addr, 0x10000);
7267c094 174 g_free(path);
2c50e26e
EI
175 }
176 }
177
178 if (kernel_cmdline) {
179 fprintf(stderr,
180 "Warning: missing libfdt, cannot pass cmdline to kernel!\n");
181 }
182#endif
183 return fdt_size;
184}
185
186static void virtex_init(ram_addr_t ram_size,
187 const char *boot_device,
188 const char *kernel_filename,
189 const char *kernel_cmdline,
190 const char *initrd_filename, const char *cpu_model)
191{
39186d8a 192 MemoryRegion *address_space_mem = get_system_memory();
2c50e26e 193 DeviceState *dev;
68281699 194 PowerPCCPU *cpu;
e2684c0b 195 CPUPPCState *env;
2c50e26e
EI
196 target_phys_addr_t ram_base = 0;
197 DriveInfo *dinfo;
333b13fc 198 MemoryRegion *phys_ram = g_new(MemoryRegion, 1);
2c50e26e 199 qemu_irq irq[32], *cpu_irq;
2c50e26e
EI
200 int kernel_size;
201 int i;
202
203 /* init CPUs */
204 if (cpu_model == NULL) {
205 cpu_model = "440-Xilinx";
206 }
207
68281699
AF
208 cpu = ppc440_init_xilinx(&ram_size, 1, cpu_model, 400000000);
209 env = &cpu->env;
f8031482 210 qemu_register_reset(main_cpu_reset, cpu);
2c50e26e 211
c5705a77
AK
212 memory_region_init_ram(phys_ram, "ram", ram_size);
213 vmstate_register_ram_global(phys_ram);
333b13fc 214 memory_region_add_subregion(address_space_mem, ram_base, phys_ram);
2c50e26e 215
2c50e26e 216 dinfo = drive_get(IF_PFLASH, 0, 0);
cfe5f011 217 pflash_cfi01_register(0xfc000000, NULL, "virtex.flash", FLASH_SIZE,
2c50e26e
EI
218 dinfo ? dinfo->bdrv : NULL, (64 * 1024),
219 FLASH_SIZE >> 16,
01e0451a 220 1, 0x89, 0x18, 0x0000, 0x0, 1);
2c50e26e
EI
221
222 cpu_irq = (qemu_irq *) &env->irq_inputs[PPC40x_INPUT_INT];
223 dev = xilinx_intc_create(0x81800000, cpu_irq[0], 0);
224 for (i = 0; i < 32; i++) {
225 irq[i] = qdev_get_gpio_in(dev, i);
226 }
227
39186d8a
RH
228 serial_mm_init(address_space_mem, 0x83e01003ULL, 2, irq[9], 115200,
229 serial_hds[0], DEVICE_LITTLE_ENDIAN);
2c50e26e
EI
230
231 /* 2 timers at irq 2 @ 62 Mhz. */
abe098e4 232 xilinx_timer_create(0x83c00000, irq[3], 0, 62 * 1000000);
2c50e26e
EI
233
234 if (kernel_filename) {
235 uint64_t entry, low, high;
2c50e26e
EI
236 target_phys_addr_t boot_offset;
237
238 /* Boots a kernel elf binary. */
239 kernel_size = load_elf(kernel_filename, NULL, NULL,
240 &entry, &low, &high, 1, ELF_MACHINE, 0);
2c50e26e
EI
241 boot_info.bootstrap_pc = entry & 0x00ffffff;
242
243 if (kernel_size < 0) {
244 boot_offset = 0x1200000;
245 /* If we failed loading ELF's try a raw image. */
246 kernel_size = load_image_targphys(kernel_filename,
247 boot_offset,
248 ram_size);
249 boot_info.bootstrap_pc = boot_offset;
250 high = boot_info.bootstrap_pc + kernel_size + 8192;
251 }
252
253 boot_info.ima_size = kernel_size;
254
255 /* Provide a device-tree. */
256 boot_info.fdt = high + (8192 * 2);
257 boot_info.fdt &= ~8191;
258 xilinx_load_device_tree(boot_info.fdt, ram_size, 0, 0, kernel_cmdline);
259 }
260 env->load_info = &boot_info;
261}
262
263static QEMUMachine virtex_machine = {
264 .name = "virtex-ml507",
265 .desc = "Xilinx Virtex ML507 reference design",
266 .init = virtex_init,
267};
268
269static void virtex_machine_init(void)
270{
271 qemu_register_machine(&virtex_machine);
272}
273
274machine_init(virtex_machine_init);