2 * QEMU Malta board support
4 * Copyright (c) 2006 Aurelien Jarno
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
27 #ifdef TARGET_WORDS_BIGENDIAN
28 #define BIOS_FILENAME "mips_bios.bin"
30 #define BIOS_FILENAME "mipsel_bios.bin"
34 #define PHYS_TO_VIRT(x) ((x) | ~0x7fffffffULL)
36 #define PHYS_TO_VIRT(x) ((x) | ~0x7fffffffU)
39 #define ENVP_ADDR (int32_t)0x80002000
40 #define VIRT_TO_PHYS_ADDEND (-((int64_t)(int32_t)0x80000000))
42 #define ENVP_NB_ENTRIES 16
43 #define ENVP_ENTRY_SIZE 256
56 CharDriverState
*display
;
64 static void malta_fpga_update_display(void *opaque
)
68 MaltaFPGAState
*s
= opaque
;
70 for (i
= 7 ; i
>= 0 ; i
--) {
71 if (s
->leds
& (1 << i
))
78 qemu_chr_printf(s
->display
, "\e[H\n\n|\e[32m%-8.8s\e[00m|\r\n", leds_text
);
79 qemu_chr_printf(s
->display
, "\n\n\n\n|\e[31m%-8.8s\e[00m|", s
->display_text
);
83 * EEPROM 24C01 / 24C02 emulation.
85 * Emulation for serial EEPROMs:
86 * 24C01 - 1024 bit (128 x 8)
87 * 24C02 - 2048 bit (256 x 8)
89 * Typical device names include Microchip 24C02SC or SGS Thomson ST24C02.
95 # define logout(fmt, args...) fprintf(stderr, "MALTA\t%-24s" fmt, __func__, ##args)
97 # define logout(fmt, args...) ((void)0)
100 struct _eeprom24c0x_t
{
109 uint8_t contents
[256];
112 typedef struct _eeprom24c0x_t eeprom24c0x_t
;
114 static eeprom24c0x_t eeprom
= {
116 /* 00000000: */ 0x80,0x08,0x04,0x0D,0x0A,0x01,0x40,0x00,
117 /* 00000008: */ 0x01,0x75,0x54,0x00,0x82,0x08,0x00,0x01,
118 /* 00000010: */ 0x8F,0x04,0x02,0x01,0x01,0x00,0x0E,0x00,
119 /* 00000018: */ 0x00,0x00,0x00,0x14,0x0F,0x14,0x2D,0x40,
120 /* 00000020: */ 0x15,0x08,0x15,0x08,0x00,0x00,0x00,0x00,
121 /* 00000028: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
122 /* 00000030: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
123 /* 00000038: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x12,0xD0,
124 /* 00000040: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
125 /* 00000048: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
126 /* 00000050: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
127 /* 00000058: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
128 /* 00000060: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
129 /* 00000068: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
130 /* 00000070: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
131 /* 00000078: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x64,0xF4,
135 static uint8_t eeprom24c0x_read()
137 logout("%u: scl = %u, sda = %u, data = 0x%02x\n",
138 eeprom
.tick
, eeprom
.scl
, eeprom
.sda
, eeprom
.data
);
142 static void eeprom24c0x_write(int scl
, int sda
)
144 if (eeprom
.scl
&& scl
&& (eeprom
.sda
!= sda
)) {
145 logout("%u: scl = %u->%u, sda = %u->%u i2c %s\n",
146 eeprom
.tick
, eeprom
.scl
, scl
, eeprom
.sda
, sda
, sda
? "stop" : "start");
151 } else if (eeprom
.tick
== 0 && !eeprom
.ack
) {
152 /* Waiting for start. */
153 logout("%u: scl = %u->%u, sda = %u->%u wait for i2c start\n",
154 eeprom
.tick
, eeprom
.scl
, scl
, eeprom
.sda
, sda
);
155 } else if (!eeprom
.scl
&& scl
) {
156 logout("%u: scl = %u->%u, sda = %u->%u trigger bit\n",
157 eeprom
.tick
, eeprom
.scl
, scl
, eeprom
.sda
, sda
);
159 logout("\ti2c ack bit = 0\n");
162 } else if (eeprom
.sda
== sda
) {
163 uint8_t bit
= (sda
!= 0);
164 logout("\ti2c bit = %d\n", bit
);
165 if (eeprom
.tick
< 9) {
166 eeprom
.command
<<= 1;
167 eeprom
.command
+= bit
;
169 if (eeprom
.tick
== 9) {
170 logout("\tcommand 0x%04x, %s\n", eeprom
.command
, bit
? "read" : "write");
173 } else if (eeprom
.tick
< 17) {
174 if (eeprom
.command
& 1) {
175 sda
= ((eeprom
.data
& 0x80) != 0);
177 eeprom
.address
<<= 1;
178 eeprom
.address
+= bit
;
181 if (eeprom
.tick
== 17) {
182 eeprom
.data
= eeprom
.contents
[eeprom
.address
];
183 logout("\taddress 0x%04x, data 0x%02x\n", eeprom
.address
, eeprom
.data
);
187 } else if (eeprom
.tick
>= 17) {
191 logout("\tsda changed with raising scl\n");
194 logout("%u: scl = %u->%u, sda = %u->%u\n", eeprom
.tick
, eeprom
.scl
, scl
, eeprom
.sda
, sda
);
200 static uint32_t malta_fpga_readl(void *opaque
, target_phys_addr_t addr
)
202 MaltaFPGAState
*s
= opaque
;
206 saddr
= (addr
& 0xfffff);
210 /* SWITCH Register */
212 val
= 0x00000000; /* All switches closed */
215 /* STATUS Register */
217 #ifdef TARGET_WORDS_BIGENDIAN
229 /* LEDBAR Register */
234 /* BRKRES Register */
248 val
= serial_mm_readb(s
->uart
, addr
);
256 /* XXX: implement a real I2C controller */
260 /* IN = OUT until a real I2C control is implemented */
267 /* I2CINP Register */
269 val
= ((s
->i2cin
& ~1) | eeprom24c0x_read());
277 /* I2COUT Register */
282 /* I2CSEL Register */
289 printf ("malta_fpga_read: Bad register offset 0x" TARGET_FMT_lx
"\n",
297 static void malta_fpga_writel(void *opaque
, target_phys_addr_t addr
,
300 MaltaFPGAState
*s
= opaque
;
303 saddr
= (addr
& 0xfffff);
307 /* SWITCH Register */
315 /* LEDBAR Register */
316 /* XXX: implement a 8-LED array */
318 s
->leds
= val
& 0xff;
321 /* ASCIIWORD Register */
323 snprintf(s
->display_text
, 9, "%08X", val
);
324 malta_fpga_update_display(s
);
327 /* ASCIIPOS0 to ASCIIPOS7 Registers */
336 s
->display_text
[(saddr
- 0x00418) >> 3] = (char) val
;
337 malta_fpga_update_display(s
);
340 /* SOFTRES Register */
343 qemu_system_reset_request ();
346 /* BRKRES Register */
360 serial_mm_writeb(s
->uart
, addr
, val
);
365 s
->gpout
= val
& 0xff;
370 s
->i2coe
= val
& 0x03;
373 /* I2COUT Register */
375 eeprom24c0x_write(val
& 0x02, val
& 0x01);
379 /* I2CSEL Register */
381 s
->i2csel
= val
& 0x01;
386 printf ("malta_fpga_write: Bad register offset 0x" TARGET_FMT_lx
"\n",
393 static CPUReadMemoryFunc
*malta_fpga_read
[] = {
399 static CPUWriteMemoryFunc
*malta_fpga_write
[] = {
405 void malta_fpga_reset(void *opaque
)
407 MaltaFPGAState
*s
= opaque
;
417 s
->display_text
[8] = '\0';
418 snprintf(s
->display_text
, 9, " ");
419 malta_fpga_update_display(s
);
422 MaltaFPGAState
*malta_fpga_init(target_phys_addr_t base
, CPUState
*env
)
425 CharDriverState
*uart_chr
;
428 s
= (MaltaFPGAState
*)qemu_mallocz(sizeof(MaltaFPGAState
));
430 malta
= cpu_register_io_memory(0, malta_fpga_read
,
431 malta_fpga_write
, s
);
433 cpu_register_physical_memory(base
, 0x100000, malta
);
435 s
->display
= qemu_chr_open("vc");
436 qemu_chr_printf(s
->display
, "\e[HMalta LEDBAR\r\n");
437 qemu_chr_printf(s
->display
, "+--------+\r\n");
438 qemu_chr_printf(s
->display
, "+ +\r\n");
439 qemu_chr_printf(s
->display
, "+--------+\r\n");
440 qemu_chr_printf(s
->display
, "\n");
441 qemu_chr_printf(s
->display
, "Malta ASCII\r\n");
442 qemu_chr_printf(s
->display
, "+--------+\r\n");
443 qemu_chr_printf(s
->display
, "+ +\r\n");
444 qemu_chr_printf(s
->display
, "+--------+\r\n");
446 uart_chr
= qemu_chr_open("vc");
447 qemu_chr_printf(uart_chr
, "CBUS UART\r\n");
448 s
->uart
= serial_mm_init(base
, 3, env
->irq
[2], uart_chr
, 0);
451 qemu_register_reset(malta_fpga_reset
, s
);
458 static void audio_init (PCIBus
*pci_bus
)
461 int audio_enabled
= 0;
463 for (c
= soundhw
; !audio_enabled
&& c
->name
; ++c
) {
464 audio_enabled
= c
->enabled
;
472 for (c
= soundhw
; c
->name
; ++c
) {
475 fprintf(stderr
, "qemu: Unsupported Sound Card: %s\n", c
->name
);
480 c
->init
.init_pci (pci_bus
, s
);
490 /* Network support */
491 static void network_init (PCIBus
*pci_bus
)
496 for(i
= 0; i
< nb_nics
; i
++) {
501 if (i
== 0 && strcmp(nd
->model
, "pcnet") == 0) {
502 /* The malta board has a PCNet card using PCI SLOT 11 */
503 pci_nic_init(pci_bus
, nd
, 88);
505 pci_nic_init(pci_bus
, nd
, -1);
510 /* ROM and pseudo bootloader
512 The following code implements a very very simple bootloader. It first
513 loads the registers a0 to a3 to the values expected by the OS, and
514 then jump at the kernel address.
516 The bootloader should pass the locations of the kernel arguments and
517 environment variables tables. Those tables contain the 32-bit address
518 of NULL terminated strings. The environment variables table should be
519 terminated by a NULL address.
521 For a simpler implementation, the number of kernel arguments is fixed
522 to two (the name of the kernel and the command line), and the two
523 tables are actually the same one.
525 The registers a0 to a3 should contain the following values:
526 a0 - number of kernel arguments
527 a1 - 32-bit address of the kernel arguments table
528 a2 - 32-bit address of the environment variables table
529 a3 - RAM size in bytes
532 static void write_bootloader (CPUState
*env
, unsigned long bios_offset
, int64_t kernel_entry
)
536 /* Small bootloader */
537 p
= (uint32_t *) (phys_ram_base
+ bios_offset
);
538 stl_raw(p
++, 0x0bf00006); /* j 0x1fc00018 */
539 stl_raw(p
++, 0x00000000); /* nop */
541 /* Second part of the bootloader */
542 p
= (uint32_t *) (phys_ram_base
+ bios_offset
+ 0x018);
543 stl_raw(p
++, 0x24040002); /* addiu a0, zero, 2 */
544 stl_raw(p
++, 0x3c1d0000 | (((ENVP_ADDR
- 64) >> 16) & 0xffff)); /* lui sp, high(ENVP_ADDR) */
545 stl_raw(p
++, 0x37bd0000 | ((ENVP_ADDR
- 64) & 0xffff)); /* ori sp, a0, low(ENVP_ADDR) */
546 stl_raw(p
++, 0x3c050000 | ((ENVP_ADDR
>> 16) & 0xffff)); /* lui a1, high(ENVP_ADDR) */
547 stl_raw(p
++, 0x34a50000 | (ENVP_ADDR
& 0xffff)); /* ori a1, a0, low(ENVP_ADDR) */
548 stl_raw(p
++, 0x3c060000 | (((ENVP_ADDR
+ 8) >> 16) & 0xffff)); /* lui a2, high(ENVP_ADDR + 8) */
549 stl_raw(p
++, 0x34c60000 | ((ENVP_ADDR
+ 8) & 0xffff)); /* ori a2, a2, low(ENVP_ADDR + 8) */
550 stl_raw(p
++, 0x3c070000 | (env
->ram_size
>> 16)); /* lui a3, high(env->ram_size) */
551 stl_raw(p
++, 0x34e70000 | (env
->ram_size
& 0xffff)); /* ori a3, a3, low(env->ram_size) */
553 /* Load BAR registers as done by YAMON */
554 stl_raw(p
++, 0x3c09bbe0); /* lui t1, 0xbbe0 */
556 #ifdef TARGET_WORDS_BIGENDIAN
557 stl_raw(p
++, 0x3c08c000); /* lui t0, 0xc000 */
559 stl_raw(p
++, 0x340800c0); /* ori t0, r0, 0x00c0 */
561 stl_raw(p
++, 0xad280048); /* sw t0, 0x0048(t1) */
562 #ifdef TARGET_WORDS_BIGENDIAN
563 stl_raw(p
++, 0x3c084000); /* lui t0, 0x4000 */
565 stl_raw(p
++, 0x34080040); /* ori t0, r0, 0x0040 */
567 stl_raw(p
++, 0xad280050); /* sw t0, 0x0050(t1) */
569 #ifdef TARGET_WORDS_BIGENDIAN
570 stl_raw(p
++, 0x3c088000); /* lui t0, 0x8000 */
572 stl_raw(p
++, 0x34080080); /* ori t0, r0, 0x0080 */
574 stl_raw(p
++, 0xad280058); /* sw t0, 0x0058(t1) */
575 #ifdef TARGET_WORDS_BIGENDIAN
576 stl_raw(p
++, 0x3c083f00); /* lui t0, 0x3f00 */
578 stl_raw(p
++, 0x3408003f); /* ori t0, r0, 0x003f */
580 stl_raw(p
++, 0xad280060); /* sw t0, 0x0060(t1) */
582 #ifdef TARGET_WORDS_BIGENDIAN
583 stl_raw(p
++, 0x3c08c100); /* lui t0, 0xc100 */
585 stl_raw(p
++, 0x340800c1); /* ori t0, r0, 0x00c1 */
587 stl_raw(p
++, 0xad280080); /* sw t0, 0x0080(t1) */
588 #ifdef TARGET_WORDS_BIGENDIAN
589 stl_raw(p
++, 0x3c085e00); /* lui t0, 0x5e00 */
591 stl_raw(p
++, 0x3408005e); /* ori t0, r0, 0x005e */
593 stl_raw(p
++, 0xad280088); /* sw t0, 0x0088(t1) */
595 /* Jump to kernel code */
596 stl_raw(p
++, 0x3c1f0000 | ((kernel_entry
>> 16) & 0xffff)); /* lui ra, high(kernel_entry) */
597 stl_raw(p
++, 0x37ff0000 | (kernel_entry
& 0xffff)); /* ori ra, ra, low(kernel_entry) */
598 stl_raw(p
++, 0x03e00008); /* jr ra */
599 stl_raw(p
++, 0x00000000); /* nop */
602 static void prom_set(int index
, const char *string
, ...)
609 if (index
>= ENVP_NB_ENTRIES
)
612 p
= (int32_t *) (phys_ram_base
+ ENVP_ADDR
+ VIRT_TO_PHYS_ADDEND
);
615 if (string
== NULL
) {
620 table_addr
= ENVP_ADDR
+ sizeof(int32_t) * ENVP_NB_ENTRIES
+ index
* ENVP_ENTRY_SIZE
;
621 s
= (char *) (phys_ram_base
+ VIRT_TO_PHYS_ADDEND
+ table_addr
);
623 stl_raw(p
, table_addr
);
625 va_start(ap
, string
);
626 vsnprintf (s
, ENVP_ENTRY_SIZE
, string
, ap
);
631 static int64_t load_kernel (CPUState
*env
)
633 int64_t kernel_entry
, kernel_low
, kernel_high
;
636 ram_addr_t initrd_offset
;
638 if (load_elf(env
->kernel_filename
, VIRT_TO_PHYS_ADDEND
,
639 &kernel_entry
, &kernel_low
, &kernel_high
) < 0) {
640 fprintf(stderr
, "qemu: could not load kernel '%s'\n",
641 env
->kernel_filename
);
648 if (env
->initrd_filename
) {
649 initrd_size
= get_image_size (env
->initrd_filename
);
650 if (initrd_size
> 0) {
651 initrd_offset
= (kernel_high
+ ~TARGET_PAGE_MASK
) & TARGET_PAGE_MASK
;
652 if (initrd_offset
+ initrd_size
> env
->ram_size
) {
654 "qemu: memory too small for initial ram disk '%s'\n",
655 env
->initrd_filename
);
658 initrd_size
= load_image(env
->initrd_filename
,
659 phys_ram_base
+ initrd_offset
);
661 if (initrd_size
== (target_ulong
) -1) {
662 fprintf(stderr
, "qemu: could not load initial ram disk '%s'\n",
663 env
->initrd_filename
);
668 /* Store command line. */
669 prom_set(index
++, env
->kernel_filename
);
671 prom_set(index
++, "rd_start=0x" TARGET_FMT_lx
" rd_size=%li %s",
672 PHYS_TO_VIRT(initrd_offset
), initrd_size
,
673 env
->kernel_cmdline
);
675 prom_set(index
++, env
->kernel_cmdline
);
677 /* Setup minimum environment variables */
678 prom_set(index
++, "memsize");
679 prom_set(index
++, "%i", env
->ram_size
);
680 prom_set(index
++, "modetty0");
681 prom_set(index
++, "38400n8r");
682 prom_set(index
++, NULL
);
687 static void main_cpu_reset(void *opaque
)
689 CPUState
*env
= opaque
;
692 /* The bootload does not need to be rewritten as it is located in a
693 read only location. The kernel location and the arguments table
694 location does not change. */
695 if (env
->kernel_filename
) {
696 env
->CP0_Status
&= ~((1 << CP0St_BEV
) | (1 << CP0St_ERL
));
702 void mips_malta_init (int ram_size
, int vga_ram_size
, int boot_device
,
703 DisplayState
*ds
, const char **fd_filename
, int snapshot
,
704 const char *kernel_filename
, const char *kernel_cmdline
,
705 const char *initrd_filename
, const char *cpu_model
)
708 unsigned long bios_offset
;
709 int64_t kernel_entry
;
713 /* fdctrl_t *floppy_controller; */
714 MaltaFPGAState
*malta_fpga
;
720 if (cpu_model
== NULL
) {
727 if (mips_find_by_name(cpu_model
, &def
) != 0)
730 cpu_mips_register(env
, def
);
731 register_savevm("cpu", 0, 3, cpu_save
, cpu_load
, env
);
732 qemu_register_reset(main_cpu_reset
, env
);
735 cpu_register_physical_memory(0, ram_size
, IO_MEM_RAM
);
737 /* Map the bios at two physical locations, as on the real board */
738 bios_offset
= ram_size
+ vga_ram_size
;
739 cpu_register_physical_memory(0x1e000000LL
,
740 BIOS_SIZE
, bios_offset
| IO_MEM_ROM
);
741 cpu_register_physical_memory(0x1fc00000LL
,
742 BIOS_SIZE
, bios_offset
| IO_MEM_ROM
);
744 /* Load a BIOS image except if a kernel image has been specified. In
745 the later case, just write a small bootloader to the flash
747 if (kernel_filename
) {
748 env
->ram_size
= ram_size
;
749 env
->kernel_filename
= kernel_filename
;
750 env
->kernel_cmdline
= kernel_cmdline
;
751 env
->initrd_filename
= initrd_filename
;
752 kernel_entry
= load_kernel(env
);
753 env
->CP0_Status
&= ~((1 << CP0St_BEV
) | (1 << CP0St_ERL
));
754 write_bootloader(env
, bios_offset
, kernel_entry
);
756 snprintf(buf
, sizeof(buf
), "%s/%s", bios_dir
, BIOS_FILENAME
);
757 ret
= load_image(buf
, phys_ram_base
+ bios_offset
);
758 if (ret
< 0 || ret
> BIOS_SIZE
) {
759 fprintf(stderr
, "qemu: Warning, could not load MIPS bios '%s'\n",
765 /* Board ID = 0x420 (Malta Board with CoreLV)
766 XXX: theoretically 0x1e000010 should map to flash and 0x1fc00010 should
767 map to the board ID. */
768 stl_raw(phys_ram_base
+ bios_offset
+ 0x10, 0x00000420);
770 /* Init internal devices */
771 cpu_mips_irq_init_cpu(env
);
772 cpu_mips_clock_init(env
);
773 cpu_mips_irqctrl_init();
776 malta_fpga
= malta_fpga_init(0x1f000000LL
, env
);
778 /* Interrupt controller */
779 /* The 8259 is attached to the MIPS CPU INT0 pin, ie interrupt 2 */
780 i8259
= i8259_init(env
->irq
[2]);
783 pci_bus
= pci_gt64120_init(i8259
);
786 piix4_init(pci_bus
, 80);
787 pci_piix3_ide_init(pci_bus
, bs_table
, 81, i8259
);
788 usb_uhci_init(pci_bus
, 82);
789 piix4_pm_init(pci_bus
, 83);
790 pit
= pit_init(0x40, i8259
[0]);
794 i8042_init(i8259
[1], i8259
[12], 0x60);
795 rtc_state
= rtc_init(0x70, i8259
[8]);
797 serial_init(0x3f8, i8259
[4], serial_hds
[0]);
799 serial_init(0x2f8, i8259
[3], serial_hds
[1]);
801 parallel_init(0x378, i8259
[7], parallel_hds
[0]);
802 /* XXX: The floppy controller does not work correctly, something is
804 floppy_controller = fdctrl_init(i8259[6], 2, 0, 0x3f0, fd_table); */
812 network_init(pci_bus
);
814 /* Optional PCI video card */
815 pci_cirrus_vga_init(pci_bus
, ds
, phys_ram_base
+ ram_size
,
816 ram_size
, vga_ram_size
);
819 QEMUMachine mips_malta_machine
= {
821 "MIPS Malta Core LV",