2 * QEMU Malta board support
4 * Copyright (c) 2006 Aurelien Jarno
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
27 #ifdef TARGET_WORDS_BIGENDIAN
28 #define BIOS_FILENAME "mips_bios.bin"
30 #define BIOS_FILENAME "mipsel_bios.bin"
34 #define PHYS_TO_VIRT(x) ((x) | ~0x7fffffffULL)
36 #define PHYS_TO_VIRT(x) ((x) | ~0x7fffffffU)
39 #define ENVP_ADDR (int32_t)0x80002000
40 #define VIRT_TO_PHYS_ADDEND (-((int64_t)(int32_t)0x80000000))
42 #define ENVP_NB_ENTRIES 16
43 #define ENVP_ENTRY_SIZE 256
56 CharDriverState
*display
;
64 static void malta_fpga_update_display(void *opaque
)
68 MaltaFPGAState
*s
= opaque
;
70 for (i
= 7 ; i
>= 0 ; i
--) {
71 if (s
->leds
& (1 << i
))
78 qemu_chr_printf(s
->display
, "\e[H\n\n|\e[32m%-8.8s\e[00m|\r\n", leds_text
);
79 qemu_chr_printf(s
->display
, "\n\n\n\n|\e[31m%-8.8s\e[00m|", s
->display_text
);
83 * EEPROM 24C01 / 24C02 emulation.
85 * Emulation for serial EEPROMs:
86 * 24C01 - 1024 bit (128 x 8)
87 * 24C02 - 2048 bit (256 x 8)
89 * Typical device names include Microchip 24C02SC or SGS Thomson ST24C02.
95 # define logout(fmt, args...) fprintf(stderr, "MALTA\t%-24s" fmt, __func__, ##args)
97 # define logout(fmt, args...) ((void)0)
100 struct _eeprom24c0x_t
{
109 uint8_t contents
[256];
112 typedef struct _eeprom24c0x_t eeprom24c0x_t
;
114 static eeprom24c0x_t eeprom
= {
116 /* 00000000: */ 0x80,0x08,0x04,0x0D,0x0A,0x01,0x40,0x00,
117 /* 00000008: */ 0x01,0x75,0x54,0x00,0x82,0x08,0x00,0x01,
118 /* 00000010: */ 0x8F,0x04,0x02,0x01,0x01,0x00,0x0E,0x00,
119 /* 00000018: */ 0x00,0x00,0x00,0x14,0x0F,0x14,0x2D,0x40,
120 /* 00000020: */ 0x15,0x08,0x15,0x08,0x00,0x00,0x00,0x00,
121 /* 00000028: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
122 /* 00000030: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
123 /* 00000038: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x12,0xD0,
124 /* 00000040: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
125 /* 00000048: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
126 /* 00000050: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
127 /* 00000058: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
128 /* 00000060: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
129 /* 00000068: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
130 /* 00000070: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
131 /* 00000078: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x64,0xF4,
135 static uint8_t eeprom24c0x_read()
137 logout("%u: scl = %u, sda = %u, data = 0x%02x\n",
138 eeprom
.tick
, eeprom
.scl
, eeprom
.sda
, eeprom
.data
);
142 static void eeprom24c0x_write(int scl
, int sda
)
144 if (eeprom
.scl
&& scl
&& (eeprom
.sda
!= sda
)) {
145 logout("%u: scl = %u->%u, sda = %u->%u i2c %s\n",
146 eeprom
.tick
, eeprom
.scl
, scl
, eeprom
.sda
, sda
, sda
? "stop" : "start");
151 } else if (eeprom
.tick
== 0 && !eeprom
.ack
) {
152 /* Waiting for start. */
153 logout("%u: scl = %u->%u, sda = %u->%u wait for i2c start\n",
154 eeprom
.tick
, eeprom
.scl
, scl
, eeprom
.sda
, sda
);
155 } else if (!eeprom
.scl
&& scl
) {
156 logout("%u: scl = %u->%u, sda = %u->%u trigger bit\n",
157 eeprom
.tick
, eeprom
.scl
, scl
, eeprom
.sda
, sda
);
159 logout("\ti2c ack bit = 0\n");
162 } else if (eeprom
.sda
== sda
) {
163 uint8_t bit
= (sda
!= 0);
164 logout("\ti2c bit = %d\n", bit
);
165 if (eeprom
.tick
< 9) {
166 eeprom
.command
<<= 1;
167 eeprom
.command
+= bit
;
169 if (eeprom
.tick
== 9) {
170 logout("\tcommand 0x%04x, %s\n", eeprom
.command
, bit
? "read" : "write");
173 } else if (eeprom
.tick
< 17) {
174 if (eeprom
.command
& 1) {
175 sda
= ((eeprom
.data
& 0x80) != 0);
177 eeprom
.address
<<= 1;
178 eeprom
.address
+= bit
;
181 if (eeprom
.tick
== 17) {
182 eeprom
.data
= eeprom
.contents
[eeprom
.address
];
183 logout("\taddress 0x%04x, data 0x%02x\n", eeprom
.address
, eeprom
.data
);
187 } else if (eeprom
.tick
>= 17) {
191 logout("\tsda changed with raising scl\n");
194 logout("%u: scl = %u->%u, sda = %u->%u\n", eeprom
.tick
, eeprom
.scl
, scl
, eeprom
.sda
, sda
);
200 static uint32_t malta_fpga_readl(void *opaque
, target_phys_addr_t addr
)
202 MaltaFPGAState
*s
= opaque
;
206 saddr
= (addr
& 0xfffff);
210 /* SWITCH Register */
212 val
= 0x00000000; /* All switches closed */
215 /* STATUS Register */
217 #ifdef TARGET_WORDS_BIGENDIAN
229 /* LEDBAR Register */
234 /* BRKRES Register */
248 val
= serial_mm_readb(s
->uart
, addr
);
256 /* XXX: implement a real I2C controller */
260 /* IN = OUT until a real I2C control is implemented */
267 /* I2CINP Register */
269 val
= ((s
->i2cin
& ~1) | eeprom24c0x_read());
277 /* I2COUT Register */
282 /* I2CSEL Register */
289 printf ("malta_fpga_read: Bad register offset 0x" TARGET_FMT_lx
"\n",
297 static void malta_fpga_writel(void *opaque
, target_phys_addr_t addr
,
300 MaltaFPGAState
*s
= opaque
;
303 saddr
= (addr
& 0xfffff);
307 /* SWITCH Register */
315 /* LEDBAR Register */
316 /* XXX: implement a 8-LED array */
318 s
->leds
= val
& 0xff;
321 /* ASCIIWORD Register */
323 snprintf(s
->display_text
, 9, "%08X", val
);
324 malta_fpga_update_display(s
);
327 /* ASCIIPOS0 to ASCIIPOS7 Registers */
336 s
->display_text
[(saddr
- 0x00418) >> 3] = (char) val
;
337 malta_fpga_update_display(s
);
340 /* SOFTRES Register */
343 qemu_system_reset_request ();
346 /* BRKRES Register */
360 serial_mm_writeb(s
->uart
, addr
, val
);
365 s
->gpout
= val
& 0xff;
370 s
->i2coe
= val
& 0x03;
373 /* I2COUT Register */
375 eeprom24c0x_write(val
& 0x02, val
& 0x01);
379 /* I2CSEL Register */
381 s
->i2csel
= val
& 0x01;
386 printf ("malta_fpga_write: Bad register offset 0x" TARGET_FMT_lx
"\n",
393 static CPUReadMemoryFunc
*malta_fpga_read
[] = {
399 static CPUWriteMemoryFunc
*malta_fpga_write
[] = {
405 void malta_fpga_reset(void *opaque
)
407 MaltaFPGAState
*s
= opaque
;
417 s
->display_text
[8] = '\0';
418 snprintf(s
->display_text
, 9, " ");
419 malta_fpga_update_display(s
);
422 MaltaFPGAState
*malta_fpga_init(target_phys_addr_t base
, CPUState
*env
)
425 CharDriverState
*uart_chr
;
428 s
= (MaltaFPGAState
*)qemu_mallocz(sizeof(MaltaFPGAState
));
430 malta
= cpu_register_io_memory(0, malta_fpga_read
,
431 malta_fpga_write
, s
);
433 cpu_register_physical_memory(base
, 0x100000, malta
);
435 s
->display
= qemu_chr_open("vc");
436 qemu_chr_printf(s
->display
, "\e[HMalta LEDBAR\r\n");
437 qemu_chr_printf(s
->display
, "+--------+\r\n");
438 qemu_chr_printf(s
->display
, "+ +\r\n");
439 qemu_chr_printf(s
->display
, "+--------+\r\n");
440 qemu_chr_printf(s
->display
, "\n");
441 qemu_chr_printf(s
->display
, "Malta ASCII\r\n");
442 qemu_chr_printf(s
->display
, "+--------+\r\n");
443 qemu_chr_printf(s
->display
, "+ +\r\n");
444 qemu_chr_printf(s
->display
, "+--------+\r\n");
446 uart_chr
= qemu_chr_open("vc");
447 qemu_chr_printf(uart_chr
, "CBUS UART\r\n");
448 s
->uart
= serial_mm_init(base
, 3, env
->irq
[2], uart_chr
, 0);
451 qemu_register_reset(malta_fpga_reset
, s
);
458 static void audio_init (PCIBus
*pci_bus
)
461 int audio_enabled
= 0;
463 for (c
= soundhw
; !audio_enabled
&& c
->name
; ++c
) {
464 audio_enabled
= c
->enabled
;
472 for (c
= soundhw
; c
->name
; ++c
) {
475 fprintf(stderr
, "qemu: Unsupported Sound Card: %s\n", c
->name
);
480 c
->init
.init_pci (pci_bus
, s
);
490 /* Network support */
491 static void network_init (PCIBus
*pci_bus
)
496 for(i
= 0; i
< nb_nics
; i
++) {
501 if (i
== 0 && strcmp(nd
->model
, "pcnet") == 0) {
502 /* The malta board has a PCNet card using PCI SLOT 11 */
503 pci_nic_init(pci_bus
, nd
, 88);
505 pci_nic_init(pci_bus
, nd
, -1);
510 /* ROM and pseudo bootloader
512 The following code implements a very very simple bootloader. It first
513 loads the registers a0 to a3 to the values expected by the OS, and
514 then jump at the kernel address.
516 The bootloader should pass the locations of the kernel arguments and
517 environment variables tables. Those tables contain the 32-bit address
518 of NULL terminated strings. The environment variables table should be
519 terminated by a NULL address.
521 For a simpler implementation, the number of kernel arguments is fixed
522 to two (the name of the kernel and the command line), and the two
523 tables are actually the same one.
525 The registers a0 to a3 should contain the following values:
526 a0 - number of kernel arguments
527 a1 - 32-bit address of the kernel arguments table
528 a2 - 32-bit address of the environment variables table
529 a3 - RAM size in bytes
532 static void write_bootloader (CPUState
*env
, unsigned long bios_offset
, int64_t kernel_entry
)
536 /* Small bootloader */
537 p
= (uint32_t *) (phys_ram_base
+ bios_offset
);
538 stl_raw(p
++, 0x0bf00010); /* j 0x1fc00040 */
539 stl_raw(p
++, 0x00000000); /* nop */
541 /* Second part of the bootloader */
542 p
= (uint32_t *) (phys_ram_base
+ bios_offset
+ 0x040);
543 stl_raw(p
++, 0x3c040000); /* lui a0, 0 */
544 stl_raw(p
++, 0x34840002); /* ori a0, a0, 2 */
545 stl_raw(p
++, 0x3c050000 | ((ENVP_ADDR
>> 16) & 0xffff)); /* lui a1, high(ENVP_ADDR) */
546 stl_raw(p
++, 0x34a50000 | (ENVP_ADDR
& 0xffff)); /* ori a1, a0, low(ENVP_ADDR) */
547 stl_raw(p
++, 0x3c060000 | (((ENVP_ADDR
+ 8) >> 16) & 0xffff)); /* lui a2, high(ENVP_ADDR + 8) */
548 stl_raw(p
++, 0x34c60000 | ((ENVP_ADDR
+ 8) & 0xffff)); /* ori a2, a2, low(ENVP_ADDR + 8) */
549 stl_raw(p
++, 0x3c070000 | (env
->ram_size
>> 16)); /* lui a3, high(env->ram_size) */
550 stl_raw(p
++, 0x34e70000 | (env
->ram_size
& 0xffff)); /* ori a3, a3, low(env->ram_size) */
551 stl_raw(p
++, 0x3c1f0000 | ((kernel_entry
>> 16) & 0xffff)); /* lui ra, high(kernel_entry) */
552 stl_raw(p
++, 0x37ff0000 | (kernel_entry
& 0xffff)); /* ori ra, ra, low(kernel_entry) */
553 stl_raw(p
++, 0x03e00008); /* jr ra */
554 stl_raw(p
++, 0x00000000); /* nop */
557 static void prom_set(int index
, const char *string
, ...)
564 if (index
>= ENVP_NB_ENTRIES
)
567 p
= (int32_t *) (phys_ram_base
+ ENVP_ADDR
+ VIRT_TO_PHYS_ADDEND
);
570 if (string
== NULL
) {
575 table_addr
= ENVP_ADDR
+ sizeof(int32_t) * ENVP_NB_ENTRIES
+ index
* ENVP_ENTRY_SIZE
;
576 s
= (char *) (phys_ram_base
+ VIRT_TO_PHYS_ADDEND
+ table_addr
);
578 stl_raw(p
, table_addr
);
580 va_start(ap
, string
);
581 vsnprintf (s
, ENVP_ENTRY_SIZE
, string
, ap
);
586 static int64_t load_kernel (CPUState
*env
)
588 int64_t kernel_entry
, kernel_low
, kernel_high
;
591 ram_addr_t initrd_offset
;
593 if (load_elf(env
->kernel_filename
, VIRT_TO_PHYS_ADDEND
,
594 &kernel_entry
, &kernel_low
, &kernel_high
) < 0) {
595 fprintf(stderr
, "qemu: could not load kernel '%s'\n",
596 env
->kernel_filename
);
603 if (env
->initrd_filename
) {
604 initrd_size
= get_image_size (env
->initrd_filename
);
605 if (initrd_size
> 0) {
606 initrd_offset
= (kernel_high
+ ~TARGET_PAGE_MASK
) & TARGET_PAGE_MASK
;
607 if (initrd_offset
+ initrd_size
> env
->ram_size
) {
609 "qemu: memory too small for initial ram disk '%s'\n",
610 env
->initrd_filename
);
613 initrd_size
= load_image(env
->initrd_filename
,
614 phys_ram_base
+ initrd_offset
);
616 if (initrd_size
== (target_ulong
) -1) {
617 fprintf(stderr
, "qemu: could not load initial ram disk '%s'\n",
618 env
->initrd_filename
);
623 /* Store command line. */
624 prom_set(index
++, env
->kernel_filename
);
626 prom_set(index
++, "rd_start=0x" TARGET_FMT_lx
" rd_size=%li %s",
627 PHYS_TO_VIRT(initrd_offset
), initrd_size
,
628 env
->kernel_cmdline
);
630 prom_set(index
++, env
->kernel_cmdline
);
632 /* Setup minimum environment variables */
633 prom_set(index
++, "memsize");
634 prom_set(index
++, "%i", env
->ram_size
);
635 prom_set(index
++, "modetty0");
636 prom_set(index
++, "38400n8r");
637 prom_set(index
++, NULL
);
642 static void main_cpu_reset(void *opaque
)
644 CPUState
*env
= opaque
;
647 /* The bootload does not need to be rewritten as it is located in a
648 read only location. The kernel location and the arguments table
649 location does not change. */
650 if (env
->kernel_filename
) {
651 env
->CP0_Status
&= ~((1 << CP0St_BEV
) | (1 << CP0St_ERL
));
657 void mips_malta_init (int ram_size
, int vga_ram_size
, int boot_device
,
658 DisplayState
*ds
, const char **fd_filename
, int snapshot
,
659 const char *kernel_filename
, const char *kernel_cmdline
,
660 const char *initrd_filename
, const char *cpu_model
)
663 unsigned long bios_offset
;
664 int64_t kernel_entry
;
668 /* fdctrl_t *floppy_controller; */
669 MaltaFPGAState
*malta_fpga
;
675 if (cpu_model
== NULL
) {
682 if (mips_find_by_name(cpu_model
, &def
) != 0)
685 cpu_mips_register(env
, def
);
686 register_savevm("cpu", 0, 3, cpu_save
, cpu_load
, env
);
687 qemu_register_reset(main_cpu_reset
, env
);
690 cpu_register_physical_memory(0, ram_size
, IO_MEM_RAM
);
692 /* Map the bios at two physical locations, as on the real board */
693 bios_offset
= ram_size
+ vga_ram_size
;
694 cpu_register_physical_memory(0x1e000000LL
,
695 BIOS_SIZE
, bios_offset
| IO_MEM_ROM
);
696 cpu_register_physical_memory(0x1fc00000LL
,
697 BIOS_SIZE
, bios_offset
| IO_MEM_ROM
);
699 /* Load a BIOS image except if a kernel image has been specified. In
700 the later case, just write a small bootloader to the flash
702 if (kernel_filename
) {
703 env
->ram_size
= ram_size
;
704 env
->kernel_filename
= kernel_filename
;
705 env
->kernel_cmdline
= kernel_cmdline
;
706 env
->initrd_filename
= initrd_filename
;
707 kernel_entry
= load_kernel(env
);
708 env
->CP0_Status
&= ~((1 << CP0St_BEV
) | (1 << CP0St_ERL
));
709 write_bootloader(env
, bios_offset
, kernel_entry
);
711 snprintf(buf
, sizeof(buf
), "%s/%s", bios_dir
, BIOS_FILENAME
);
712 ret
= load_image(buf
, phys_ram_base
+ bios_offset
);
713 if (ret
< 0 || ret
> BIOS_SIZE
) {
714 fprintf(stderr
, "qemu: Warning, could not load MIPS bios '%s'\n",
720 /* Board ID = 0x420 (Malta Board with CoreLV)
721 XXX: theoretically 0x1e000010 should map to flash and 0x1fc00010 should
722 map to the board ID. */
723 stl_raw(phys_ram_base
+ bios_offset
+ 0x10, 0x00000420);
725 /* Init internal devices */
726 cpu_mips_irq_init_cpu(env
);
727 cpu_mips_clock_init(env
);
728 cpu_mips_irqctrl_init();
731 malta_fpga
= malta_fpga_init(0x1f000000LL
, env
);
733 /* Interrupt controller */
734 /* The 8259 is attached to the MIPS CPU INT0 pin, ie interrupt 2 */
735 i8259
= i8259_init(env
->irq
[2]);
738 pci_bus
= pci_gt64120_init(i8259
);
741 piix4_init(pci_bus
, 80);
742 pci_piix3_ide_init(pci_bus
, bs_table
, 81, i8259
);
743 usb_uhci_init(pci_bus
, 82);
744 piix4_pm_init(pci_bus
, 83);
745 pit
= pit_init(0x40, i8259
[0]);
749 i8042_init(i8259
[1], i8259
[12], 0x60);
750 rtc_state
= rtc_init(0x70, i8259
[8]);
752 serial_init(0x3f8, i8259
[4], serial_hds
[0]);
754 serial_init(0x2f8, i8259
[3], serial_hds
[1]);
756 parallel_init(0x378, i8259
[7], parallel_hds
[0]);
757 /* XXX: The floppy controller does not work correctly, something is
759 floppy_controller = fdctrl_init(i8259[6], 2, 0, 0x3f0, fd_table); */
767 network_init(pci_bus
);
769 /* Optional PCI video card */
770 pci_cirrus_vga_init(pci_bus
, ds
, phys_ram_base
+ ram_size
,
771 ram_size
, vga_ram_size
);
774 QEMUMachine mips_malta_machine
= {
776 "MIPS Malta Core LV",