2 * QEMU Malta board support
4 * Copyright (c) 2006 Aurelien Jarno
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
27 #ifdef TARGET_WORDS_BIGENDIAN
28 #define BIOS_FILENAME "mips_bios.bin"
30 #define BIOS_FILENAME "mipsel_bios.bin"
34 #define PHYS_TO_VIRT(x) ((x) | ~0x7fffffffULL)
36 #define PHYS_TO_VIRT(x) ((x) | ~0x7fffffffU)
39 #define ENVP_ADDR (int32_t)0x80002000
40 #define VIRT_TO_PHYS_ADDEND (-((int64_t)(int32_t)0x80000000))
42 #define ENVP_NB_ENTRIES 16
43 #define ENVP_ENTRY_SIZE 256
56 CharDriverState
*display
;
64 static void malta_fpga_update_display(void *opaque
)
68 MaltaFPGAState
*s
= opaque
;
70 for (i
= 7 ; i
>= 0 ; i
--) {
71 if (s
->leds
& (1 << i
))
78 qemu_chr_printf(s
->display
, "\e[H\n\n|\e[32m%-8.8s\e[00m|\r\n", leds_text
);
79 qemu_chr_printf(s
->display
, "\n\n\n\n|\e[31m%-8.8s\e[00m|", s
->display_text
);
83 * EEPROM 24C01 / 24C02 emulation.
85 * Emulation for serial EEPROMs:
86 * 24C01 - 1024 bit (128 x 8)
87 * 24C02 - 2048 bit (256 x 8)
89 * Typical device names include Microchip 24C02SC or SGS Thomson ST24C02.
95 # define logout(fmt, args...) fprintf(stderr, "MALTA\t%-24s" fmt, __func__, ##args)
97 # define logout(fmt, args...) ((void)0)
100 struct _eeprom24c0x_t
{
109 uint8_t contents
[256];
112 typedef struct _eeprom24c0x_t eeprom24c0x_t
;
114 static eeprom24c0x_t eeprom
= {
116 /* 00000000: */ 0x80,0x08,0x04,0x0D,0x0A,0x01,0x40,0x00,
117 /* 00000008: */ 0x01,0x75,0x54,0x00,0x82,0x08,0x00,0x01,
118 /* 00000010: */ 0x8F,0x04,0x02,0x01,0x01,0x00,0x0E,0x00,
119 /* 00000018: */ 0x00,0x00,0x00,0x14,0x0F,0x14,0x2D,0x40,
120 /* 00000020: */ 0x15,0x08,0x15,0x08,0x00,0x00,0x00,0x00,
121 /* 00000028: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
122 /* 00000030: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
123 /* 00000038: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x12,0xD0,
124 /* 00000040: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
125 /* 00000048: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
126 /* 00000050: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
127 /* 00000058: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
128 /* 00000060: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
129 /* 00000068: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
130 /* 00000070: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
131 /* 00000078: */ 0x00,0x00,0x00,0x00,0x00,0x00,0x64,0xF4,
135 static uint8_t eeprom24c0x_read()
137 logout("%u: scl = %u, sda = %u, data = 0x%02x\n",
138 eeprom
.tick
, eeprom
.scl
, eeprom
.sda
, eeprom
.data
);
142 static void eeprom24c0x_write(int scl
, int sda
)
144 if (eeprom
.scl
&& scl
&& (eeprom
.sda
!= sda
)) {
145 logout("%u: scl = %u->%u, sda = %u->%u i2c %s\n",
146 eeprom
.tick
, eeprom
.scl
, scl
, eeprom
.sda
, sda
, sda
? "stop" : "start");
151 } else if (eeprom
.tick
== 0 && !eeprom
.ack
) {
152 /* Waiting for start. */
153 logout("%u: scl = %u->%u, sda = %u->%u wait for i2c start\n",
154 eeprom
.tick
, eeprom
.scl
, scl
, eeprom
.sda
, sda
);
155 } else if (!eeprom
.scl
&& scl
) {
156 logout("%u: scl = %u->%u, sda = %u->%u trigger bit\n",
157 eeprom
.tick
, eeprom
.scl
, scl
, eeprom
.sda
, sda
);
159 logout("\ti2c ack bit = 0\n");
162 } else if (eeprom
.sda
== sda
) {
163 uint8_t bit
= (sda
!= 0);
164 logout("\ti2c bit = %d\n", bit
);
165 if (eeprom
.tick
< 9) {
166 eeprom
.command
<<= 1;
167 eeprom
.command
+= bit
;
169 if (eeprom
.tick
== 9) {
170 logout("\tcommand 0x%04x, %s\n", eeprom
.command
, bit
? "read" : "write");
173 } else if (eeprom
.tick
< 17) {
174 if (eeprom
.command
& 1) {
175 sda
= ((eeprom
.data
& 0x80) != 0);
177 eeprom
.address
<<= 1;
178 eeprom
.address
+= bit
;
181 if (eeprom
.tick
== 17) {
182 eeprom
.data
= eeprom
.contents
[eeprom
.address
];
183 logout("\taddress 0x%04x, data 0x%02x\n", eeprom
.address
, eeprom
.data
);
187 } else if (eeprom
.tick
>= 17) {
191 logout("\tsda changed with raising scl\n");
194 logout("%u: scl = %u->%u, sda = %u->%u\n", eeprom
.tick
, eeprom
.scl
, scl
, eeprom
.sda
, sda
);
200 static uint32_t malta_fpga_readl(void *opaque
, target_phys_addr_t addr
)
202 MaltaFPGAState
*s
= opaque
;
206 saddr
= (addr
& 0xfffff);
210 /* SWITCH Register */
212 val
= 0x00000000; /* All switches closed */
215 /* STATUS Register */
217 #ifdef TARGET_WORDS_BIGENDIAN
229 /* LEDBAR Register */
234 /* BRKRES Register */
248 val
= serial_mm_readb(s
->uart
, addr
);
256 /* XXX: implement a real I2C controller */
260 /* IN = OUT until a real I2C control is implemented */
267 /* I2CINP Register */
269 val
= ((s
->i2cin
& ~1) | eeprom24c0x_read());
277 /* I2COUT Register */
282 /* I2CSEL Register */
289 printf ("malta_fpga_read: Bad register offset 0x" TARGET_FMT_lx
"\n",
297 static void malta_fpga_writel(void *opaque
, target_phys_addr_t addr
,
300 MaltaFPGAState
*s
= opaque
;
303 saddr
= (addr
& 0xfffff);
307 /* SWITCH Register */
315 /* LEDBAR Register */
316 /* XXX: implement a 8-LED array */
318 s
->leds
= val
& 0xff;
321 /* ASCIIWORD Register */
323 snprintf(s
->display_text
, 9, "%08X", val
);
324 malta_fpga_update_display(s
);
327 /* ASCIIPOS0 to ASCIIPOS7 Registers */
336 s
->display_text
[(saddr
- 0x00418) >> 3] = (char) val
;
337 malta_fpga_update_display(s
);
340 /* SOFTRES Register */
343 qemu_system_reset_request ();
346 /* BRKRES Register */
360 serial_mm_writeb(s
->uart
, addr
, val
);
365 s
->gpout
= val
& 0xff;
370 s
->i2coe
= val
& 0x03;
373 /* I2COUT Register */
375 eeprom24c0x_write(val
& 0x02, val
& 0x01);
379 /* I2CSEL Register */
381 s
->i2csel
= val
& 0x01;
386 printf ("malta_fpga_write: Bad register offset 0x" TARGET_FMT_lx
"\n",
393 static CPUReadMemoryFunc
*malta_fpga_read
[] = {
399 static CPUWriteMemoryFunc
*malta_fpga_write
[] = {
405 void malta_fpga_reset(void *opaque
)
407 MaltaFPGAState
*s
= opaque
;
417 s
->display_text
[8] = '\0';
418 snprintf(s
->display_text
, 9, " ");
419 malta_fpga_update_display(s
);
422 MaltaFPGAState
*malta_fpga_init(target_phys_addr_t base
, CPUState
*env
)
425 CharDriverState
*uart_chr
;
428 s
= (MaltaFPGAState
*)qemu_mallocz(sizeof(MaltaFPGAState
));
430 malta
= cpu_register_io_memory(0, malta_fpga_read
,
431 malta_fpga_write
, s
);
433 cpu_register_physical_memory(base
, 0x100000, malta
);
435 s
->display
= qemu_chr_open("vc");
436 qemu_chr_printf(s
->display
, "\e[HMalta LEDBAR\r\n");
437 qemu_chr_printf(s
->display
, "+--------+\r\n");
438 qemu_chr_printf(s
->display
, "+ +\r\n");
439 qemu_chr_printf(s
->display
, "+--------+\r\n");
440 qemu_chr_printf(s
->display
, "\n");
441 qemu_chr_printf(s
->display
, "Malta ASCII\r\n");
442 qemu_chr_printf(s
->display
, "+--------+\r\n");
443 qemu_chr_printf(s
->display
, "+ +\r\n");
444 qemu_chr_printf(s
->display
, "+--------+\r\n");
446 uart_chr
= qemu_chr_open("vc");
447 qemu_chr_printf(uart_chr
, "CBUS UART\r\n");
448 s
->uart
= serial_mm_init(base
, 3, env
->irq
[2], uart_chr
, 0);
451 qemu_register_reset(malta_fpga_reset
, s
);
458 static void audio_init (PCIBus
*pci_bus
)
461 int audio_enabled
= 0;
463 for (c
= soundhw
; !audio_enabled
&& c
->name
; ++c
) {
464 audio_enabled
= c
->enabled
;
472 for (c
= soundhw
; c
->name
; ++c
) {
475 fprintf(stderr
, "qemu: Unsupported Sound Card: %s\n", c
->name
);
480 c
->init
.init_pci (pci_bus
, s
);
490 /* Network support */
491 static void network_init (PCIBus
*pci_bus
)
496 for(i
= 0; i
< nb_nics
; i
++) {
501 if (i
== 0 && strcmp(nd
->model
, "pcnet") == 0) {
502 /* The malta board has a PCNet card using PCI SLOT 11 */
503 pci_nic_init(pci_bus
, nd
, 88);
505 pci_nic_init(pci_bus
, nd
, -1);
510 /* ROM and pseudo bootloader
512 The following code implements a very very simple bootloader. It first
513 loads the registers a0 to a3 to the values expected by the OS, and
514 then jump at the kernel address.
516 The bootloader should pass the locations of the kernel arguments and
517 environment variables tables. Those tables contain the 32-bit address
518 of NULL terminated strings. The environment variables table should be
519 terminated by a NULL address.
521 For a simpler implementation, the number of kernel arguments is fixed
522 to two (the name of the kernel and the command line), and the two
523 tables are actually the same one.
525 The registers a0 to a3 should contain the following values:
526 a0 - number of kernel arguments
527 a1 - 32-bit address of the kernel arguments table
528 a2 - 32-bit address of the environment variables table
529 a3 - RAM size in bytes
532 static void write_bootloader (CPUState
*env
, unsigned long bios_offset
, int64_t kernel_entry
)
536 /* Small bootloader */
537 p
= (uint32_t *) (phys_ram_base
+ bios_offset
);
538 stl_raw(p
++, 0x0bf00010); /* j 0x1fc00040 */
539 stl_raw(p
++, 0x00000000); /* nop */
541 /* Second part of the bootloader */
542 p
= (uint32_t *) (phys_ram_base
+ bios_offset
+ 0x040);
543 stl_raw(p
++, 0x3c040000); /* lui a0, 0 */
544 stl_raw(p
++, 0x34840002); /* ori a0, a0, 2 */
545 stl_raw(p
++, 0x3c050000 | ((ENVP_ADDR
>> 16) & 0xffff)); /* lui a1, high(ENVP_ADDR) */
546 stl_raw(p
++, 0x34a50000 | (ENVP_ADDR
& 0xffff)); /* ori a1, a0, low(ENVP_ADDR) */
547 stl_raw(p
++, 0x3c060000 | (((ENVP_ADDR
+ 8) >> 16) & 0xffff)); /* lui a2, high(ENVP_ADDR + 8) */
548 stl_raw(p
++, 0x34c60000 | ((ENVP_ADDR
+ 8) & 0xffff)); /* ori a2, a2, low(ENVP_ADDR + 8) */
549 stl_raw(p
++, 0x3c070000 | (env
->ram_size
>> 16)); /* lui a3, high(env->ram_size) */
550 stl_raw(p
++, 0x34e70000 | (env
->ram_size
& 0xffff)); /* ori a3, a3, low(env->ram_size) */
552 /* Load BAR registers as done by YAMON */
553 stl_raw(p
++, 0x3c09bbe0); /* lui t1, 0xbbe0 */
555 #ifdef TARGET_WORDS_BIGENDIAN
556 stl_raw(p
++, 0x3c08c000); /* lui t0, 0xc000 */
558 stl_raw(p
++, 0x340800c0); /* ori t0, r0, 0x00c0 */
560 stl_raw(p
++, 0xad280048); /* sw t0, 0x0048(t1) */
561 #ifdef TARGET_WORDS_BIGENDIAN
562 stl_raw(p
++, 0x3c084000); /* lui t0, 0x4000 */
564 stl_raw(p
++, 0x34080040); /* ori t0, r0, 0x0040 */
566 stl_raw(p
++, 0xad280050); /* sw t0, 0x0050(t1) */
568 #ifdef TARGET_WORDS_BIGENDIAN
569 stl_raw(p
++, 0x3c088000); /* lui t0, 0x8000 */
571 stl_raw(p
++, 0x34080080); /* ori t0, r0, 0x0080 */
573 stl_raw(p
++, 0xad280058); /* sw t0, 0x0058(t1) */
574 #ifdef TARGET_WORDS_BIGENDIAN
575 stl_raw(p
++, 0x3c083f00); /* lui t0, 0x3f00 */
577 stl_raw(p
++, 0x3408003f); /* ori t0, r0, 0x003f */
579 stl_raw(p
++, 0xad280060); /* sw t0, 0x0060(t1) */
581 #ifdef TARGET_WORDS_BIGENDIAN
582 stl_raw(p
++, 0x3c08c100); /* lui t0, 0xc100 */
584 stl_raw(p
++, 0x340800c1); /* ori t0, r0, 0x00c1 */
586 stl_raw(p
++, 0xad280080); /* sw t0, 0x0080(t1) */
587 #ifdef TARGET_WORDS_BIGENDIAN
588 stl_raw(p
++, 0x3c085e00); /* lui t0, 0x5e00 */
590 stl_raw(p
++, 0x3408005e); /* ori t0, r0, 0x005e */
592 stl_raw(p
++, 0xad280088); /* sw t0, 0x0088(t1) */
594 /* Jump to kernel code */
595 stl_raw(p
++, 0x3c1f0000 | ((kernel_entry
>> 16) & 0xffff)); /* lui ra, high(kernel_entry) */
596 stl_raw(p
++, 0x37ff0000 | (kernel_entry
& 0xffff)); /* ori ra, ra, low(kernel_entry) */
597 stl_raw(p
++, 0x03e00008); /* jr ra */
598 stl_raw(p
++, 0x00000000); /* nop */
601 static void prom_set(int index
, const char *string
, ...)
608 if (index
>= ENVP_NB_ENTRIES
)
611 p
= (int32_t *) (phys_ram_base
+ ENVP_ADDR
+ VIRT_TO_PHYS_ADDEND
);
614 if (string
== NULL
) {
619 table_addr
= ENVP_ADDR
+ sizeof(int32_t) * ENVP_NB_ENTRIES
+ index
* ENVP_ENTRY_SIZE
;
620 s
= (char *) (phys_ram_base
+ VIRT_TO_PHYS_ADDEND
+ table_addr
);
622 stl_raw(p
, table_addr
);
624 va_start(ap
, string
);
625 vsnprintf (s
, ENVP_ENTRY_SIZE
, string
, ap
);
630 static int64_t load_kernel (CPUState
*env
)
632 int64_t kernel_entry
, kernel_low
, kernel_high
;
635 ram_addr_t initrd_offset
;
637 if (load_elf(env
->kernel_filename
, VIRT_TO_PHYS_ADDEND
,
638 &kernel_entry
, &kernel_low
, &kernel_high
) < 0) {
639 fprintf(stderr
, "qemu: could not load kernel '%s'\n",
640 env
->kernel_filename
);
647 if (env
->initrd_filename
) {
648 initrd_size
= get_image_size (env
->initrd_filename
);
649 if (initrd_size
> 0) {
650 initrd_offset
= (kernel_high
+ ~TARGET_PAGE_MASK
) & TARGET_PAGE_MASK
;
651 if (initrd_offset
+ initrd_size
> env
->ram_size
) {
653 "qemu: memory too small for initial ram disk '%s'\n",
654 env
->initrd_filename
);
657 initrd_size
= load_image(env
->initrd_filename
,
658 phys_ram_base
+ initrd_offset
);
660 if (initrd_size
== (target_ulong
) -1) {
661 fprintf(stderr
, "qemu: could not load initial ram disk '%s'\n",
662 env
->initrd_filename
);
667 /* Store command line. */
668 prom_set(index
++, env
->kernel_filename
);
670 prom_set(index
++, "rd_start=0x" TARGET_FMT_lx
" rd_size=%li %s",
671 PHYS_TO_VIRT(initrd_offset
), initrd_size
,
672 env
->kernel_cmdline
);
674 prom_set(index
++, env
->kernel_cmdline
);
676 /* Setup minimum environment variables */
677 prom_set(index
++, "memsize");
678 prom_set(index
++, "%i", env
->ram_size
);
679 prom_set(index
++, "modetty0");
680 prom_set(index
++, "38400n8r");
681 prom_set(index
++, NULL
);
686 static void main_cpu_reset(void *opaque
)
688 CPUState
*env
= opaque
;
691 /* The bootload does not need to be rewritten as it is located in a
692 read only location. The kernel location and the arguments table
693 location does not change. */
694 if (env
->kernel_filename
) {
695 env
->CP0_Status
&= ~((1 << CP0St_BEV
) | (1 << CP0St_ERL
));
701 void mips_malta_init (int ram_size
, int vga_ram_size
, int boot_device
,
702 DisplayState
*ds
, const char **fd_filename
, int snapshot
,
703 const char *kernel_filename
, const char *kernel_cmdline
,
704 const char *initrd_filename
, const char *cpu_model
)
707 unsigned long bios_offset
;
708 int64_t kernel_entry
;
712 /* fdctrl_t *floppy_controller; */
713 MaltaFPGAState
*malta_fpga
;
719 if (cpu_model
== NULL
) {
726 if (mips_find_by_name(cpu_model
, &def
) != 0)
729 cpu_mips_register(env
, def
);
730 register_savevm("cpu", 0, 3, cpu_save
, cpu_load
, env
);
731 qemu_register_reset(main_cpu_reset
, env
);
734 cpu_register_physical_memory(0, ram_size
, IO_MEM_RAM
);
736 /* Map the bios at two physical locations, as on the real board */
737 bios_offset
= ram_size
+ vga_ram_size
;
738 cpu_register_physical_memory(0x1e000000LL
,
739 BIOS_SIZE
, bios_offset
| IO_MEM_ROM
);
740 cpu_register_physical_memory(0x1fc00000LL
,
741 BIOS_SIZE
, bios_offset
| IO_MEM_ROM
);
743 /* Load a BIOS image except if a kernel image has been specified. In
744 the later case, just write a small bootloader to the flash
746 if (kernel_filename
) {
747 env
->ram_size
= ram_size
;
748 env
->kernel_filename
= kernel_filename
;
749 env
->kernel_cmdline
= kernel_cmdline
;
750 env
->initrd_filename
= initrd_filename
;
751 kernel_entry
= load_kernel(env
);
752 env
->CP0_Status
&= ~((1 << CP0St_BEV
) | (1 << CP0St_ERL
));
753 write_bootloader(env
, bios_offset
, kernel_entry
);
755 snprintf(buf
, sizeof(buf
), "%s/%s", bios_dir
, BIOS_FILENAME
);
756 ret
= load_image(buf
, phys_ram_base
+ bios_offset
);
757 if (ret
< 0 || ret
> BIOS_SIZE
) {
758 fprintf(stderr
, "qemu: Warning, could not load MIPS bios '%s'\n",
764 /* Board ID = 0x420 (Malta Board with CoreLV)
765 XXX: theoretically 0x1e000010 should map to flash and 0x1fc00010 should
766 map to the board ID. */
767 stl_raw(phys_ram_base
+ bios_offset
+ 0x10, 0x00000420);
769 /* Init internal devices */
770 cpu_mips_irq_init_cpu(env
);
771 cpu_mips_clock_init(env
);
772 cpu_mips_irqctrl_init();
775 malta_fpga
= malta_fpga_init(0x1f000000LL
, env
);
777 /* Interrupt controller */
778 /* The 8259 is attached to the MIPS CPU INT0 pin, ie interrupt 2 */
779 i8259
= i8259_init(env
->irq
[2]);
782 pci_bus
= pci_gt64120_init(i8259
);
785 piix4_init(pci_bus
, 80);
786 pci_piix3_ide_init(pci_bus
, bs_table
, 81, i8259
);
787 usb_uhci_init(pci_bus
, 82);
788 piix4_pm_init(pci_bus
, 83);
789 pit
= pit_init(0x40, i8259
[0]);
793 i8042_init(i8259
[1], i8259
[12], 0x60);
794 rtc_state
= rtc_init(0x70, i8259
[8]);
796 serial_init(0x3f8, i8259
[4], serial_hds
[0]);
798 serial_init(0x2f8, i8259
[3], serial_hds
[1]);
800 parallel_init(0x378, i8259
[7], parallel_hds
[0]);
801 /* XXX: The floppy controller does not work correctly, something is
803 floppy_controller = fdctrl_init(i8259[6], 2, 0, 0x3f0, fd_table); */
811 network_init(pci_bus
);
813 /* Optional PCI video card */
814 pci_cirrus_vga_init(pci_bus
, ds
, phys_ram_base
+ ram_size
,
815 ram_size
, vga_ram_size
);
818 QEMUMachine mips_malta_machine
= {
820 "MIPS Malta Core LV",