hw/spapr_vio.c

   1 /*
   2  * QEMU sPAPR VIO code
   3  *
   4  * Copyright (c) 2010 David Gibson, IBM Corporation <dwg@au1.ibm.com>
   5  * Based on the s390 virtio bus code:
   6  * Copyright (c) 2009 Alexander Graf <agraf@suse.de>
   7  *
   8  * This library is free software; you can redistribute it and/or
   9  * modify it under the terms of the GNU Lesser General Public
  10  * License as published by the Free Software Foundation; either
  11  * version 2 of the License, or (at your option) any later version.
  12  *
  13  * This library is distributed in the hope that it will be useful,
  14  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  15  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  16  * Lesser General Public License for more details.
  17  *
  18  * You should have received a copy of the GNU Lesser General Public
  19  * License along with this library; if not, see <http://www.gnu.org/licenses/>.
  20  */
  21
  22 #include "hw.h"
  23 #include "sysemu.h"
  24 #include "boards.h"
  25 #include "monitor.h"
  26 #include "loader.h"
  27 #include "elf.h"
  28 #include "hw/sysbus.h"
  29 #include "kvm.h"
  30 #include "device_tree.h"
  31 #include "kvm_ppc.h"
  32
  33 #include "hw/spapr.h"
  34 #include "hw/spapr_vio.h"
  35 #include "hw/xics.h"
  36
  37 #ifdef CONFIG_FDT
  38 #include <libfdt.h>
  39 #endif /* CONFIG_FDT */
  40
  41 /* #define DEBUG_SPAPR */
  42 /* #define DEBUG_TCE */
  43
  44 #ifdef DEBUG_SPAPR
  45 #define dprintf(fmt, ...) \
  46     do { fprintf(stderr, fmt, ## __VA_ARGS__); } while (0)
  47 #else
  48 #define dprintf(fmt, ...) \
  49     do { } while (0)
  50 #endif
  51
  52 static struct BusInfo spapr_vio_bus_info = {
  53     .name       = "spapr-vio",
  54     .size       = sizeof(VIOsPAPRBus),
  55     .props = (Property[]) {
  56         DEFINE_PROP_UINT32("irq", VIOsPAPRDevice, vio_irq_num, 0), \
  57         DEFINE_PROP_END_OF_LIST(),
  58     },
  59 };
  60
  61 VIOsPAPRDevice *spapr_vio_find_by_reg(VIOsPAPRBus *bus, uint32_t reg)
  62 {
  63     DeviceState *qdev;
  64     VIOsPAPRDevice *dev = NULL;
  65
  66     QTAILQ_FOREACH(qdev, &bus->bus.children, sibling) {
  67         dev = (VIOsPAPRDevice *)qdev;
  68         if (dev->reg == reg) {
  69             return dev;
  70         }
  71     }
  72
  73     return NULL;
  74 }
  75
  76 static char *vio_format_dev_name(VIOsPAPRDevice *dev)
  77 {
  78     VIOsPAPRDeviceClass *pc = VIO_SPAPR_DEVICE_GET_CLASS(dev);
  79     char *name;
  80
  81     /* Device tree style name device@reg */
  82     if (asprintf(&name, "%s@%x", pc->dt_name, dev->reg) < 0) {
  83         return NULL;
  84     }
  85
  86     return name;
  87 }
  88
  89 #ifdef CONFIG_FDT
  90 static int vio_make_devnode(VIOsPAPRDevice *dev,
  91                             void *fdt)
  92 {
  93     VIOsPAPRDeviceClass *pc = VIO_SPAPR_DEVICE_GET_CLASS(dev);
  94     int vdevice_off, node_off, ret;
  95     char *dt_name;
  96
  97     vdevice_off = fdt_path_offset(fdt, "/vdevice");
  98     if (vdevice_off < 0) {
  99         return vdevice_off;
 100     }
 101
 102     dt_name = vio_format_dev_name(dev);
 103     if (!dt_name) {
 104         return -ENOMEM;
 105     }
 106
 107     node_off = fdt_add_subnode(fdt, vdevice_off, dt_name);
 108     free(dt_name);
 109     if (node_off < 0) {
 110         return node_off;
 111     }
 112
 113     ret = fdt_setprop_cell(fdt, node_off, "reg", dev->reg);
 114     if (ret < 0) {
 115         return ret;
 116     }
 117
 118     if (pc->dt_type) {
 119         ret = fdt_setprop_string(fdt, node_off, "device_type",
 120                                  pc->dt_type);
 121         if (ret < 0) {
 122             return ret;
 123         }
 124     }
 125
 126     if (pc->dt_compatible) {
 127         ret = fdt_setprop_string(fdt, node_off, "compatible",
 128                                  pc->dt_compatible);
 129         if (ret < 0) {
 130             return ret;
 131         }
 132     }
 133
 134     if (dev->qirq) {
 135         uint32_t ints_prop[] = {cpu_to_be32(dev->vio_irq_num), 0};
 136
 137         ret = fdt_setprop(fdt, node_off, "interrupts", ints_prop,
 138                           sizeof(ints_prop));
 139         if (ret < 0) {
 140             return ret;
 141         }
 142     }
 143
 144     if (dev->rtce_window_size) {
 145         uint32_t dma_prop[] = {cpu_to_be32(dev->reg),
 146                                0, 0,
 147                                0, cpu_to_be32(dev->rtce_window_size)};
 148
 149         ret = fdt_setprop_cell(fdt, node_off, "ibm,#dma-address-cells", 2);
 150         if (ret < 0) {
 151             return ret;
 152         }
 153
 154         ret = fdt_setprop_cell(fdt, node_off, "ibm,#dma-size-cells", 2);
 155         if (ret < 0) {
 156             return ret;
 157         }
 158
 159         ret = fdt_setprop(fdt, node_off, "ibm,my-dma-window", dma_prop,
 160                           sizeof(dma_prop));
 161         if (ret < 0) {
 162             return ret;
 163         }
 164     }
 165
 166     if (pc->devnode) {
 167         ret = (pc->devnode)(dev, fdt, node_off);
 168         if (ret < 0) {
 169             return ret;
 170         }
 171     }
 172
 173     return node_off;
 174 }
 175 #endif /* CONFIG_FDT */
 176
 177 /*
 178  * RTCE handling
 179  */
 180
 181 static void rtce_init(VIOsPAPRDevice *dev)
 182 {
 183     size_t size = (dev->rtce_window_size >> SPAPR_VIO_TCE_PAGE_SHIFT)
 184         * sizeof(VIOsPAPR_RTCE);
 185
 186     if (size) {
 187         dev->rtce_table = kvmppc_create_spapr_tce(dev->reg,
 188                                                   dev->rtce_window_size,
 189                                                   &dev->kvmtce_fd);
 190
 191         if (!dev->rtce_table) {
 192             dev->rtce_table = g_malloc0(size);
 193         }
 194     }
 195 }
 196
 197 static target_ulong h_put_tce(CPUPPCState *env, sPAPREnvironment *spapr,
 198                               target_ulong opcode, target_ulong *args)
 199 {
 200     target_ulong liobn = args[0];
 201     target_ulong ioba = args[1];
 202     target_ulong tce = args[2];
 203     VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, liobn);
 204     VIOsPAPR_RTCE *rtce;
 205
 206     if (!dev) {
 207         hcall_dprintf("LIOBN 0x" TARGET_FMT_lx " does not exist\n", liobn);
 208         return H_PARAMETER;
 209     }
 210
 211     ioba &= ~(SPAPR_VIO_TCE_PAGE_SIZE - 1);
 212
 213 #ifdef DEBUG_TCE
 214     fprintf(stderr, "spapr_vio_put_tce on %s  ioba 0x" TARGET_FMT_lx
 215             "  TCE 0x" TARGET_FMT_lx "\n", dev->qdev.id, ioba, tce);
 216 #endif
 217
 218     if (ioba >= dev->rtce_window_size) {
 219         hcall_dprintf("Out-of-bounds IOBA 0x" TARGET_FMT_lx "\n", ioba);
 220         return H_PARAMETER;
 221     }
 222
 223     rtce = dev->rtce_table + (ioba >> SPAPR_VIO_TCE_PAGE_SHIFT);
 224     rtce->tce = tce;
 225
 226     return H_SUCCESS;
 227 }
 228
 229 int spapr_vio_check_tces(VIOsPAPRDevice *dev, target_ulong ioba,
 230                          target_ulong len, enum VIOsPAPR_TCEAccess access)
 231 {
 232     int start, end, i;
 233
 234     start = ioba >> SPAPR_VIO_TCE_PAGE_SHIFT;
 235     end = (ioba + len - 1) >> SPAPR_VIO_TCE_PAGE_SHIFT;
 236
 237     for (i = start; i <= end; i++) {
 238         if ((dev->rtce_table[i].tce & access) != access) {
 239 #ifdef DEBUG_TCE
 240             fprintf(stderr, "FAIL on %d\n", i);
 241 #endif
 242             return -1;
 243         }
 244     }
 245
 246     return 0;
 247 }
 248
 249 int spapr_tce_dma_write(VIOsPAPRDevice *dev, uint64_t taddr, const void *buf,
 250                         uint32_t size)
 251 {
 252 #ifdef DEBUG_TCE
 253     fprintf(stderr, "spapr_tce_dma_write taddr=0x%llx size=0x%x\n",
 254             (unsigned long long)taddr, size);
 255 #endif
 256
 257     /* Check for bypass */
 258     if (dev->flags & VIO_PAPR_FLAG_DMA_BYPASS) {
 259         cpu_physical_memory_write(taddr, buf, size);
 260         return 0;
 261     }
 262
 263     while (size) {
 264         uint64_t tce;
 265         uint32_t lsize;
 266         uint64_t txaddr;
 267
 268         /* Check if we are in bound */
 269         if (taddr >= dev->rtce_window_size) {
 270 #ifdef DEBUG_TCE
 271             fprintf(stderr, "spapr_tce_dma_write out of bounds\n");
 272 #endif
 273             return H_DEST_PARM;
 274         }
 275         tce = dev->rtce_table[taddr >> SPAPR_VIO_TCE_PAGE_SHIFT].tce;
 276
 277         /* How much til end of page ? */
 278         lsize = MIN(size, ((~taddr) & SPAPR_VIO_TCE_PAGE_MASK) + 1);
 279
 280         /* Check TCE */
 281         if (!(tce & 2)) {
 282             return H_DEST_PARM;
 283         }
 284
 285         /* Translate */
 286         txaddr = (tce & ~SPAPR_VIO_TCE_PAGE_MASK) |
 287             (taddr & SPAPR_VIO_TCE_PAGE_MASK);
 288
 289 #ifdef DEBUG_TCE
 290         fprintf(stderr, " -> write to txaddr=0x%llx, size=0x%x\n",
 291                 (unsigned long long)txaddr, lsize);
 292 #endif
 293
 294         /* Do it */
 295         cpu_physical_memory_write(txaddr, buf, lsize);
 296         buf += lsize;
 297         taddr += lsize;
 298         size -= lsize;
 299     }
 300     return 0;
 301 }
 302
 303 int spapr_tce_dma_zero(VIOsPAPRDevice *dev, uint64_t taddr, uint32_t size)
 304 {
 305     /* FIXME: allocating a temp buffer is nasty, but just stepping
 306      * through writing zeroes is awkward.  This will do for now. */
 307     uint8_t zeroes[size];
 308
 309 #ifdef DEBUG_TCE
 310     fprintf(stderr, "spapr_tce_dma_zero taddr=0x%llx size=0x%x\n",
 311             (unsigned long long)taddr, size);
 312 #endif
 313
 314     memset(zeroes, 0, size);
 315     return spapr_tce_dma_write(dev, taddr, zeroes, size);
 316 }
 317
 318 void stb_tce(VIOsPAPRDevice *dev, uint64_t taddr, uint8_t val)
 319 {
 320     spapr_tce_dma_write(dev, taddr, &val, sizeof(val));
 321 }
 322
 323 void sth_tce(VIOsPAPRDevice *dev, uint64_t taddr, uint16_t val)
 324 {
 325     val = tswap16(val);
 326     spapr_tce_dma_write(dev, taddr, &val, sizeof(val));
 327 }
 328
 329
 330 void stw_tce(VIOsPAPRDevice *dev, uint64_t taddr, uint32_t val)
 331 {
 332     val = tswap32(val);
 333     spapr_tce_dma_write(dev, taddr, &val, sizeof(val));
 334 }
 335
 336 void stq_tce(VIOsPAPRDevice *dev, uint64_t taddr, uint64_t val)
 337 {
 338     val = tswap64(val);
 339     spapr_tce_dma_write(dev, taddr, &val, sizeof(val));
 340 }
 341
 342 int spapr_tce_dma_read(VIOsPAPRDevice *dev, uint64_t taddr, void *buf,
 343                        uint32_t size)
 344 {
 345 #ifdef DEBUG_TCE
 346     fprintf(stderr, "spapr_tce_dma_write taddr=0x%llx size=0x%x\n",
 347             (unsigned long long)taddr, size);
 348 #endif
 349
 350     /* Check for bypass */
 351     if (dev->flags & VIO_PAPR_FLAG_DMA_BYPASS) {
 352         cpu_physical_memory_read(taddr, buf, size);
 353         return 0;
 354     }
 355
 356     while (size) {
 357         uint64_t tce;
 358         uint32_t lsize;
 359         uint64_t txaddr;
 360
 361         /* Check if we are in bound */
 362         if (taddr >= dev->rtce_window_size) {
 363 #ifdef DEBUG_TCE
 364             fprintf(stderr, "spapr_tce_dma_read out of bounds\n");
 365 #endif
 366             return H_DEST_PARM;
 367         }
 368         tce = dev->rtce_table[taddr >> SPAPR_VIO_TCE_PAGE_SHIFT].tce;
 369
 370         /* How much til end of page ? */
 371         lsize = MIN(size, ((~taddr) & SPAPR_VIO_TCE_PAGE_MASK) + 1);
 372
 373         /* Check TCE */
 374         if (!(tce & 1)) {
 375             return H_DEST_PARM;
 376         }
 377
 378         /* Translate */
 379         txaddr = (tce & ~SPAPR_VIO_TCE_PAGE_MASK) |
 380             (taddr & SPAPR_VIO_TCE_PAGE_MASK);
 381
 382 #ifdef DEBUG_TCE
 383         fprintf(stderr, " -> write to txaddr=0x%llx, size=0x%x\n",
 384                 (unsigned long long)txaddr, lsize);
 385 #endif
 386         /* Do it */
 387         cpu_physical_memory_read(txaddr, buf, lsize);
 388         buf += lsize;
 389         taddr += lsize;
 390         size -= lsize;
 391     }
 392     return H_SUCCESS;
 393 }
 394
 395 uint64_t ldq_tce(VIOsPAPRDevice *dev, uint64_t taddr)
 396 {
 397     uint64_t val;
 398
 399     spapr_tce_dma_read(dev, taddr, &val, sizeof(val));
 400     return tswap64(val);
 401 }
 402
 403 /*
 404  * CRQ handling
 405  */
 406 static target_ulong h_reg_crq(CPUPPCState *env, sPAPREnvironment *spapr,
 407                               target_ulong opcode, target_ulong *args)
 408 {
 409     target_ulong reg = args[0];
 410     target_ulong queue_addr = args[1];
 411     target_ulong queue_len = args[2];
 412     VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);
 413
 414     if (!dev) {
 415         hcall_dprintf("Unit 0x" TARGET_FMT_lx " does not exist\n", reg);
 416         return H_PARAMETER;
 417     }
 418
 419     /* We can't grok a queue size bigger than 256M for now */
 420     if (queue_len < 0x1000 || queue_len > 0x10000000) {
 421         hcall_dprintf("Queue size too small or too big (0x" TARGET_FMT_lx
 422                       ")\n", queue_len);
 423         return H_PARAMETER;
 424     }
 425
 426     /* Check queue alignment */
 427     if (queue_addr & 0xfff) {
 428         hcall_dprintf("Queue not aligned (0x" TARGET_FMT_lx ")\n", queue_addr);
 429         return H_PARAMETER;
 430     }
 431
 432     /* Check if device supports CRQs */
 433     if (!dev->crq.SendFunc) {
 434         hcall_dprintf("Device does not support CRQ\n");
 435         return H_NOT_FOUND;
 436     }
 437
 438     /* Already a queue ? */
 439     if (dev->crq.qsize) {
 440         hcall_dprintf("CRQ already registered\n");
 441         return H_RESOURCE;
 442     }
 443     dev->crq.qladdr = queue_addr;
 444     dev->crq.qsize = queue_len;
 445     dev->crq.qnext = 0;
 446
 447     dprintf("CRQ for dev 0x" TARGET_FMT_lx " registered at 0x"
 448             TARGET_FMT_lx "/0x" TARGET_FMT_lx "\n",
 449             reg, queue_addr, queue_len);
 450     return H_SUCCESS;
 451 }
 452
 453 static target_ulong free_crq(VIOsPAPRDevice *dev)
 454 {
 455     dev->crq.qladdr = 0;
 456     dev->crq.qsize = 0;
 457     dev->crq.qnext = 0;
 458
 459     dprintf("CRQ for dev 0x%" PRIx32 " freed\n", dev->reg);
 460
 461     return H_SUCCESS;
 462 }
 463
 464 static target_ulong h_free_crq(CPUPPCState *env, sPAPREnvironment *spapr,
 465                                target_ulong opcode, target_ulong *args)
 466 {
 467     target_ulong reg = args[0];
 468     VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);
 469
 470     if (!dev) {
 471         hcall_dprintf("Unit 0x" TARGET_FMT_lx " does not exist\n", reg);
 472         return H_PARAMETER;
 473     }
 474
 475     return free_crq(dev);
 476 }
 477
 478 static target_ulong h_send_crq(CPUPPCState *env, sPAPREnvironment *spapr,
 479                                target_ulong opcode, target_ulong *args)
 480 {
 481     target_ulong reg = args[0];
 482     target_ulong msg_hi = args[1];
 483     target_ulong msg_lo = args[2];
 484     VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);
 485     uint64_t crq_mangle[2];
 486
 487     if (!dev) {
 488         hcall_dprintf("Unit 0x" TARGET_FMT_lx " does not exist\n", reg);
 489         return H_PARAMETER;
 490     }
 491     crq_mangle[0] = cpu_to_be64(msg_hi);
 492     crq_mangle[1] = cpu_to_be64(msg_lo);
 493
 494     if (dev->crq.SendFunc) {
 495         return dev->crq.SendFunc(dev, (uint8_t *)crq_mangle);
 496     }
 497
 498     return H_HARDWARE;
 499 }
 500
 501 static target_ulong h_enable_crq(CPUPPCState *env, sPAPREnvironment *spapr,
 502                                  target_ulong opcode, target_ulong *args)
 503 {
 504     target_ulong reg = args[0];
 505     VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);
 506
 507     if (!dev) {
 508         hcall_dprintf("Unit 0x" TARGET_FMT_lx " does not exist\n", reg);
 509         return H_PARAMETER;
 510     }
 511
 512     return 0;
 513 }
 514
 515 /* Returns negative error, 0 success, or positive: queue full */
 516 int spapr_vio_send_crq(VIOsPAPRDevice *dev, uint8_t *crq)
 517 {
 518     int rc;
 519     uint8_t byte;
 520
 521     if (!dev->crq.qsize) {
 522         fprintf(stderr, "spapr_vio_send_creq on uninitialized queue\n");
 523         return -1;
 524     }
 525
 526     /* Maybe do a fast path for KVM just writing to the pages */
 527     rc = spapr_tce_dma_read(dev, dev->crq.qladdr + dev->crq.qnext, &byte, 1);
 528     if (rc) {
 529         return rc;
 530     }
 531     if (byte != 0) {
 532         return 1;
 533     }
 534
 535     rc = spapr_tce_dma_write(dev, dev->crq.qladdr + dev->crq.qnext + 8,
 536                              &crq[8], 8);
 537     if (rc) {
 538         return rc;
 539     }
 540
 541     kvmppc_eieio();
 542
 543     rc = spapr_tce_dma_write(dev, dev->crq.qladdr + dev->crq.qnext, crq, 8);
 544     if (rc) {
 545         return rc;
 546     }
 547
 548     dev->crq.qnext = (dev->crq.qnext + 16) % dev->crq.qsize;
 549
 550     if (dev->signal_state & 1) {
 551         qemu_irq_pulse(dev->qirq);
 552     }
 553
 554     return 0;
 555 }
 556
 557 /* "quiesce" handling */
 558
 559 static void spapr_vio_quiesce_one(VIOsPAPRDevice *dev)
 560 {
 561     dev->flags &= ~VIO_PAPR_FLAG_DMA_BYPASS;
 562
 563     if (dev->rtce_table) {
 564         size_t size = (dev->rtce_window_size >> SPAPR_VIO_TCE_PAGE_SHIFT)
 565             * sizeof(VIOsPAPR_RTCE);
 566         memset(dev->rtce_table, 0, size);
 567     }
 568
 569     dev->crq.qladdr = 0;
 570     dev->crq.qsize = 0;
 571     dev->crq.qnext = 0;
 572 }
 573
 574 static void rtas_set_tce_bypass(sPAPREnvironment *spapr, uint32_t token,
 575                                 uint32_t nargs, target_ulong args,
 576                                 uint32_t nret, target_ulong rets)
 577 {
 578     VIOsPAPRBus *bus = spapr->vio_bus;
 579     VIOsPAPRDevice *dev;
 580     uint32_t unit, enable;
 581
 582     if (nargs != 2) {
 583         rtas_st(rets, 0, -3);
 584         return;
 585     }
 586     unit = rtas_ld(args, 0);
 587     enable = rtas_ld(args, 1);
 588     dev = spapr_vio_find_by_reg(bus, unit);
 589     if (!dev) {
 590         rtas_st(rets, 0, -3);
 591         return;
 592     }
 593     if (enable) {
 594         dev->flags |= VIO_PAPR_FLAG_DMA_BYPASS;
 595     } else {
 596         dev->flags &= ~VIO_PAPR_FLAG_DMA_BYPASS;
 597     }
 598
 599     rtas_st(rets, 0, 0);
 600 }
 601
 602 static void rtas_quiesce(sPAPREnvironment *spapr, uint32_t token,
 603                          uint32_t nargs, target_ulong args,
 604                          uint32_t nret, target_ulong rets)
 605 {
 606     VIOsPAPRBus *bus = spapr->vio_bus;
 607     DeviceState *qdev;
 608     VIOsPAPRDevice *dev = NULL;
 609
 610     if (nargs != 0) {
 611         rtas_st(rets, 0, -3);
 612         return;
 613     }
 614
 615     QTAILQ_FOREACH(qdev, &bus->bus.children, sibling) {
 616         dev = (VIOsPAPRDevice *)qdev;
 617         spapr_vio_quiesce_one(dev);
 618     }
 619
 620     rtas_st(rets, 0, 0);
 621 }
 622
 623 static int spapr_vio_check_reg(VIOsPAPRDevice *sdev)
 624 {
 625     VIOsPAPRDevice *other_sdev;
 626     DeviceState *qdev;
 627     VIOsPAPRBus *sbus;
 628
 629     sbus = DO_UPCAST(VIOsPAPRBus, bus, sdev->qdev.parent_bus);
 630
 631     /*
 632      * Check two device aren't given clashing addresses by the user (or some
 633      * other mechanism). We have to open code this because we have to check
 634      * for matches with devices other than us.
 635      */
 636     QTAILQ_FOREACH(qdev, &sbus->bus.children, sibling) {
 637         other_sdev = DO_UPCAST(VIOsPAPRDevice, qdev, qdev);
 638
 639         if (other_sdev != sdev && other_sdev->reg == sdev->reg) {
 640             fprintf(stderr, "vio: %s and %s devices conflict at address %#x\n",
 641                     object_get_typename(OBJECT(sdev)),
 642                     object_get_typename(OBJECT(qdev)),
 643                     sdev->reg);
 644             return -EEXIST;
 645         }
 646     }
 647
 648     return 0;
 649 }
 650
 651 static void spapr_vio_busdev_reset(DeviceState *qdev)
 652 {
 653     VIOsPAPRDevice *dev = DO_UPCAST(VIOsPAPRDevice, qdev, qdev);
 654     VIOsPAPRDeviceClass *pc = VIO_SPAPR_DEVICE_GET_CLASS(dev);
 655
 656     if (dev->crq.qsize) {
 657         free_crq(dev);
 658     }
 659
 660     if (pc->reset) {
 661         pc->reset(dev);
 662     }
 663 }
 664
 665 static int spapr_vio_busdev_init(DeviceState *qdev)
 666 {
 667     VIOsPAPRDevice *dev = (VIOsPAPRDevice *)qdev;
 668     VIOsPAPRDeviceClass *pc = VIO_SPAPR_DEVICE_GET_CLASS(dev);
 669     char *id;
 670     int ret;
 671
 672     ret = spapr_vio_check_reg(dev);
 673     if (ret) {
 674         return ret;
 675     }
 676
 677     /* Don't overwrite ids assigned on the command line */
 678     if (!dev->qdev.id) {
 679         id = vio_format_dev_name(dev);
 680         if (!id) {
 681             return -1;
 682         }
 683         dev->qdev.id = id;
 684     }
 685
 686     dev->qirq = spapr_allocate_msi(dev->vio_irq_num, &dev->vio_irq_num);
 687     if (!dev->qirq) {
 688         return -1;
 689     }
 690
 691     rtce_init(dev);
 692
 693     return pc->init(dev);
 694 }
 695
 696 static target_ulong h_vio_signal(CPUPPCState *env, sPAPREnvironment *spapr,
 697                                  target_ulong opcode,
 698                                  target_ulong *args)
 699 {
 700     target_ulong reg = args[0];
 701     target_ulong mode = args[1];
 702     VIOsPAPRDevice *dev = spapr_vio_find_by_reg(spapr->vio_bus, reg);
 703     VIOsPAPRDeviceClass *pc;
 704
 705     if (!dev) {
 706         return H_PARAMETER;
 707     }
 708
 709     pc = VIO_SPAPR_DEVICE_GET_CLASS(dev);
 710
 711     if (mode & ~pc->signal_mask) {
 712         return H_PARAMETER;
 713     }
 714
 715     dev->signal_state = mode;
 716
 717     return H_SUCCESS;
 718 }
 719
 720 VIOsPAPRBus *spapr_vio_bus_init(void)
 721 {
 722     VIOsPAPRBus *bus;
 723     BusState *qbus;
 724     DeviceState *dev;
 725
 726     /* Create bridge device */
 727     dev = qdev_create(NULL, "spapr-vio-bridge");
 728     qdev_init_nofail(dev);
 729
 730     /* Create bus on bridge device */
 731
 732     qbus = qbus_create(&spapr_vio_bus_info, dev, "spapr-vio");
 733     bus = DO_UPCAST(VIOsPAPRBus, bus, qbus);
 734
 735     /* hcall-vio */
 736     spapr_register_hypercall(H_VIO_SIGNAL, h_vio_signal);
 737
 738     /* hcall-tce */
 739     spapr_register_hypercall(H_PUT_TCE, h_put_tce);
 740
 741     /* hcall-crq */
 742     spapr_register_hypercall(H_REG_CRQ, h_reg_crq);
 743     spapr_register_hypercall(H_FREE_CRQ, h_free_crq);
 744     spapr_register_hypercall(H_SEND_CRQ, h_send_crq);
 745     spapr_register_hypercall(H_ENABLE_CRQ, h_enable_crq);
 746
 747     /* RTAS calls */
 748     spapr_rtas_register("ibm,set-tce-bypass", rtas_set_tce_bypass);
 749     spapr_rtas_register("quiesce", rtas_quiesce);
 750
 751     return bus;
 752 }
 753
 754 /* Represents sPAPR hcall VIO devices */
 755
 756 static int spapr_vio_bridge_init(SysBusDevice *dev)
 757 {
 758     /* nothing */
 759     return 0;
 760 }
 761
 762 static void spapr_vio_bridge_class_init(ObjectClass *klass, void *data)
 763 {
 764     DeviceClass *dc = DEVICE_CLASS(klass);
 765     SysBusDeviceClass *k = SYS_BUS_DEVICE_CLASS(klass);
 766
 767     k->init = spapr_vio_bridge_init;
 768     dc->no_user = 1;
 769 }
 770
 771 static TypeInfo spapr_vio_bridge_info = {
 772     .name          = "spapr-vio-bridge",
 773     .parent        = TYPE_SYS_BUS_DEVICE,
 774     .instance_size = sizeof(SysBusDevice),
 775     .class_init    = spapr_vio_bridge_class_init,
 776 };
 777
 778 static void vio_spapr_device_class_init(ObjectClass *klass, void *data)
 779 {
 780     DeviceClass *k = DEVICE_CLASS(klass);
 781     k->init = spapr_vio_busdev_init;
 782     k->reset = spapr_vio_busdev_reset;
 783     k->bus_info = &spapr_vio_bus_info;
 784 }
 785
 786 static TypeInfo spapr_vio_type_info = {
 787     .name = TYPE_VIO_SPAPR_DEVICE,
 788     .parent = TYPE_DEVICE,
 789     .instance_size = sizeof(VIOsPAPRDevice),
 790     .abstract = true,
 791     .class_size = sizeof(VIOsPAPRDeviceClass),
 792     .class_init = vio_spapr_device_class_init,
 793 };
 794
 795 static void spapr_vio_register_types(void)
 796 {
 797     type_register_static(&spapr_vio_bridge_info);
 798     type_register_static(&spapr_vio_type_info);
 799 }
 800
 801 type_init(spapr_vio_register_types)
 802
 803 #ifdef CONFIG_FDT
 804 static int compare_reg(const void *p1, const void *p2)
 805 {
 806     VIOsPAPRDevice const *dev1, *dev2;
 807
 808     dev1 = (VIOsPAPRDevice *)*(DeviceState **)p1;
 809     dev2 = (VIOsPAPRDevice *)*(DeviceState **)p2;
 810
 811     if (dev1->reg < dev2->reg) {
 812         return -1;
 813     }
 814     if (dev1->reg == dev2->reg) {
 815         return 0;
 816     }
 817
 818     /* dev1->reg > dev2->reg */
 819     return 1;
 820 }
 821
 822 int spapr_populate_vdevice(VIOsPAPRBus *bus, void *fdt)
 823 {
 824     DeviceState *qdev, **qdevs;
 825     int i, num, ret = 0;
 826
 827     /* Count qdevs on the bus list */
 828     num = 0;
 829     QTAILQ_FOREACH(qdev, &bus->bus.children, sibling) {
 830         num++;
 831     }
 832
 833     /* Copy out into an array of pointers */
 834     qdevs = g_malloc(sizeof(qdev) * num);
 835     num = 0;
 836     QTAILQ_FOREACH(qdev, &bus->bus.children, sibling) {
 837         qdevs[num++] = qdev;
 838     }
 839
 840     /* Sort the array */
 841     qsort(qdevs, num, sizeof(qdev), compare_reg);
 842
 843     /* Hack alert. Give the devices to libfdt in reverse order, we happen
 844      * to know that will mean they are in forward order in the tree. */
 845     for (i = num - 1; i >= 0; i--) {
 846         VIOsPAPRDevice *dev = (VIOsPAPRDevice *)(qdevs[i]);
 847
 848         ret = vio_make_devnode(dev, fdt);
 849
 850         if (ret < 0) {
 851             goto out;
 852         }
 853     }
 854
 855     ret = 0;
 856 out:
 857     free(qdevs);
 858
 859     return ret;
 860 }
 861
 862 int spapr_populate_chosen_stdout(void *fdt, VIOsPAPRBus *bus)
 863 {
 864     VIOsPAPRDevice *dev;
 865     char *name, *path;
 866     int ret, offset;
 867
 868     dev = spapr_vty_get_default(bus);
 869     if (!dev)
 870         return 0;
 871
 872     offset = fdt_path_offset(fdt, "/chosen");
 873     if (offset < 0) {
 874         return offset;
 875     }
 876
 877     name = vio_format_dev_name(dev);
 878     if (!name) {
 879         return -ENOMEM;
 880     }
 881
 882     if (asprintf(&path, "/vdevice/%s", name) < 0) {
 883         path = NULL;
 884         ret = -ENOMEM;
 885         goto out;
 886     }
 887
 888     ret = fdt_setprop_string(fdt, offset, "linux,stdout-path", path);
 889 out:
 890     free(name);
 891     free(path);
 892
 893     return ret;
 894 }
 895 #endif /* CONFIG_FDT */