4 * Copyright (c) 2010 David Gibson, IBM Corporation <dwg@au1.ibm.com>
5 * Based on the s390 virtio bus code:
6 * Copyright (c) 2009 Alexander Graf <agraf@suse.de>
8 * This library is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU Lesser General Public
10 * License as published by the Free Software Foundation; either
11 * version 2 of the License, or (at your option) any later version.
13 * This library is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 * Lesser General Public License for more details.
18 * You should have received a copy of the GNU Lesser General Public
19 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
28 #include "hw/sysbus.h"
30 #include "device_tree.h"
34 #include "hw/spapr_vio.h"
38 #endif /* CONFIG_FDT */
40 /* #define DEBUG_SPAPR */
41 /* #define DEBUG_TCE */
44 #define dprintf(fmt, ...) \
45 do { fprintf(stderr, fmt, ## __VA_ARGS__); } while (0)
47 #define dprintf(fmt, ...) \
51 static struct BusInfo spapr_vio_bus_info
= {
53 .size
= sizeof(VIOsPAPRBus
),
56 VIOsPAPRDevice
*spapr_vio_find_by_reg(VIOsPAPRBus
*bus
, uint32_t reg
)
59 VIOsPAPRDevice
*dev
= NULL
;
61 QLIST_FOREACH(qdev
, &bus
->bus
.children
, sibling
) {
62 dev
= (VIOsPAPRDevice
*)qdev
;
63 if (dev
->reg
== reg
) {
72 static int vio_make_devnode(VIOsPAPRDevice
*dev
,
75 VIOsPAPRDeviceInfo
*info
= (VIOsPAPRDeviceInfo
*)dev
->qdev
.info
;
76 int vdevice_off
, node_off
;
79 vdevice_off
= fdt_path_offset(fdt
, "/vdevice");
80 if (vdevice_off
< 0) {
84 node_off
= fdt_add_subnode(fdt
, vdevice_off
, dev
->qdev
.id
);
89 ret
= fdt_setprop_cell(fdt
, node_off
, "reg", dev
->reg
);
95 ret
= fdt_setprop_string(fdt
, node_off
, "device_type",
102 if (info
->dt_compatible
) {
103 ret
= fdt_setprop_string(fdt
, node_off
, "compatible",
104 info
->dt_compatible
);
111 uint32_t ints_prop
[] = {cpu_to_be32(dev
->vio_irq_num
), 0};
113 ret
= fdt_setprop(fdt
, node_off
, "interrupts", ints_prop
,
120 if (dev
->rtce_window_size
) {
121 uint32_t dma_prop
[] = {cpu_to_be32(dev
->reg
),
123 0, cpu_to_be32(dev
->rtce_window_size
)};
125 ret
= fdt_setprop_cell(fdt
, node_off
, "ibm,#dma-address-cells", 2);
130 ret
= fdt_setprop_cell(fdt
, node_off
, "ibm,#dma-size-cells", 2);
135 ret
= fdt_setprop(fdt
, node_off
, "ibm,my-dma-window", dma_prop
,
143 ret
= (info
->devnode
)(dev
, fdt
, node_off
);
151 #endif /* CONFIG_FDT */
157 static void rtce_init(VIOsPAPRDevice
*dev
)
159 size_t size
= (dev
->rtce_window_size
>> SPAPR_VIO_TCE_PAGE_SHIFT
)
160 * sizeof(VIOsPAPR_RTCE
);
163 dev
->rtce_table
= qemu_mallocz(size
);
167 static target_ulong
h_put_tce(CPUState
*env
, sPAPREnvironment
*spapr
,
168 target_ulong opcode
, target_ulong
*args
)
170 target_ulong liobn
= args
[0];
171 target_ulong ioba
= args
[1];
172 target_ulong tce
= args
[2];
173 VIOsPAPRDevice
*dev
= spapr_vio_find_by_reg(spapr
->vio_bus
, liobn
);
177 hcall_dprintf("spapr_vio_put_tce on non-existent LIOBN "
178 TARGET_FMT_lx
"\n", liobn
);
182 ioba
&= ~(SPAPR_VIO_TCE_PAGE_SIZE
- 1);
185 fprintf(stderr
, "spapr_vio_put_tce on %s ioba 0x" TARGET_FMT_lx
186 " TCE 0x" TARGET_FMT_lx
"\n", dev
->qdev
.id
, ioba
, tce
);
189 if (ioba
>= dev
->rtce_window_size
) {
190 hcall_dprintf("spapr_vio_put_tce on out-of-boards IOBA 0x"
191 TARGET_FMT_lx
"\n", ioba
);
195 rtce
= dev
->rtce_table
+ (ioba
>> SPAPR_VIO_TCE_PAGE_SHIFT
);
201 int spapr_vio_check_tces(VIOsPAPRDevice
*dev
, target_ulong ioba
,
202 target_ulong len
, enum VIOsPAPR_TCEAccess access
)
206 start
= ioba
>> SPAPR_VIO_TCE_PAGE_SHIFT
;
207 end
= (ioba
+ len
- 1) >> SPAPR_VIO_TCE_PAGE_SHIFT
;
209 for (i
= start
; i
<= end
; i
++) {
210 if ((dev
->rtce_table
[i
].tce
& access
) != access
) {
212 fprintf(stderr
, "FAIL on %d\n", i
);
221 int spapr_tce_dma_write(VIOsPAPRDevice
*dev
, uint64_t taddr
, const void *buf
,
225 fprintf(stderr
, "spapr_tce_dma_write taddr=0x%llx size=0x%x\n",
226 (unsigned long long)taddr
, size
);
234 /* Check if we are in bound */
235 if (taddr
>= dev
->rtce_window_size
) {
237 fprintf(stderr
, "spapr_tce_dma_write out of bounds\n");
241 tce
= dev
->rtce_table
[taddr
>> SPAPR_VIO_TCE_PAGE_SHIFT
].tce
;
243 /* How much til end of page ? */
244 lsize
= MIN(size
, ((~taddr
) & SPAPR_VIO_TCE_PAGE_MASK
) + 1);
252 txaddr
= (tce
& ~SPAPR_VIO_TCE_PAGE_MASK
) |
253 (taddr
& SPAPR_VIO_TCE_PAGE_MASK
);
256 fprintf(stderr
, " -> write to txaddr=0x%llx, size=0x%x\n",
257 (unsigned long long)txaddr
, lsize
);
261 cpu_physical_memory_write(txaddr
, buf
, lsize
);
269 int spapr_tce_dma_zero(VIOsPAPRDevice
*dev
, uint64_t taddr
, uint32_t size
)
271 /* FIXME: allocating a temp buffer is nasty, but just stepping
272 * through writing zeroes is awkward. This will do for now. */
273 uint8_t zeroes
[size
];
276 fprintf(stderr
, "spapr_tce_dma_zero taddr=0x%llx size=0x%x\n",
277 (unsigned long long)taddr
, size
);
280 memset(zeroes
, 0, size
);
281 return spapr_tce_dma_write(dev
, taddr
, zeroes
, size
);
284 void stb_tce(VIOsPAPRDevice
*dev
, uint64_t taddr
, uint8_t val
)
286 spapr_tce_dma_write(dev
, taddr
, &val
, sizeof(val
));
289 void sth_tce(VIOsPAPRDevice
*dev
, uint64_t taddr
, uint16_t val
)
292 spapr_tce_dma_write(dev
, taddr
, &val
, sizeof(val
));
296 void stw_tce(VIOsPAPRDevice
*dev
, uint64_t taddr
, uint32_t val
)
299 spapr_tce_dma_write(dev
, taddr
, &val
, sizeof(val
));
302 void stq_tce(VIOsPAPRDevice
*dev
, uint64_t taddr
, uint64_t val
)
305 spapr_tce_dma_write(dev
, taddr
, &val
, sizeof(val
));
308 int spapr_tce_dma_read(VIOsPAPRDevice
*dev
, uint64_t taddr
, void *buf
,
312 fprintf(stderr
, "spapr_tce_dma_write taddr=0x%llx size=0x%x\n",
313 (unsigned long long)taddr
, size
);
321 /* Check if we are in bound */
322 if (taddr
>= dev
->rtce_window_size
) {
324 fprintf(stderr
, "spapr_tce_dma_read out of bounds\n");
328 tce
= dev
->rtce_table
[taddr
>> SPAPR_VIO_TCE_PAGE_SHIFT
].tce
;
330 /* How much til end of page ? */
331 lsize
= MIN(size
, ((~taddr
) & SPAPR_VIO_TCE_PAGE_MASK
) + 1);
339 txaddr
= (tce
& ~SPAPR_VIO_TCE_PAGE_MASK
) |
340 (taddr
& SPAPR_VIO_TCE_PAGE_MASK
);
343 fprintf(stderr
, " -> write to txaddr=0x%llx, size=0x%x\n",
344 (unsigned long long)txaddr
, lsize
);
347 cpu_physical_memory_read(txaddr
, buf
, lsize
);
355 uint64_t ldq_tce(VIOsPAPRDevice
*dev
, uint64_t taddr
)
359 spapr_tce_dma_read(dev
, taddr
, &val
, sizeof(val
));
366 static target_ulong
h_reg_crq(CPUState
*env
, sPAPREnvironment
*spapr
,
367 target_ulong opcode
, target_ulong
*args
)
369 target_ulong reg
= args
[0];
370 target_ulong queue_addr
= args
[1];
371 target_ulong queue_len
= args
[2];
372 VIOsPAPRDevice
*dev
= spapr_vio_find_by_reg(spapr
->vio_bus
, reg
);
375 hcall_dprintf("h_reg_crq on non-existent unit 0x"
376 TARGET_FMT_lx
"\n", reg
);
380 /* We can't grok a queue size bigger than 256M for now */
381 if (queue_len
< 0x1000 || queue_len
> 0x10000000) {
382 hcall_dprintf("h_reg_crq, queue size too small or too big (0x%llx)\n",
383 (unsigned long long)queue_len
);
387 /* Check queue alignment */
388 if (queue_addr
& 0xfff) {
389 hcall_dprintf("h_reg_crq, queue not aligned (0x%llx)\n",
390 (unsigned long long)queue_addr
);
394 /* Check if device supports CRQs */
395 if (!dev
->crq
.SendFunc
) {
400 /* Already a queue ? */
401 if (dev
->crq
.qsize
) {
404 dev
->crq
.qladdr
= queue_addr
;
405 dev
->crq
.qsize
= queue_len
;
408 dprintf("CRQ for dev 0x" TARGET_FMT_lx
" registered at 0x"
409 TARGET_FMT_lx
"/0x" TARGET_FMT_lx
"\n",
410 reg
, queue_addr
, queue_len
);
414 static target_ulong
h_free_crq(CPUState
*env
, sPAPREnvironment
*spapr
,
415 target_ulong opcode
, target_ulong
*args
)
417 target_ulong reg
= args
[0];
418 VIOsPAPRDevice
*dev
= spapr_vio_find_by_reg(spapr
->vio_bus
, reg
);
421 hcall_dprintf("h_free_crq on non-existent unit 0x"
422 TARGET_FMT_lx
"\n", reg
);
430 dprintf("CRQ for dev 0x" TARGET_FMT_lx
" freed\n", reg
);
435 static target_ulong
h_send_crq(CPUState
*env
, sPAPREnvironment
*spapr
,
436 target_ulong opcode
, target_ulong
*args
)
438 target_ulong reg
= args
[0];
439 target_ulong msg_hi
= args
[1];
440 target_ulong msg_lo
= args
[2];
441 VIOsPAPRDevice
*dev
= spapr_vio_find_by_reg(spapr
->vio_bus
, reg
);
442 uint64_t crq_mangle
[2];
445 hcall_dprintf("h_send_crq on non-existent unit 0x"
446 TARGET_FMT_lx
"\n", reg
);
449 crq_mangle
[0] = cpu_to_be64(msg_hi
);
450 crq_mangle
[1] = cpu_to_be64(msg_lo
);
452 if (dev
->crq
.SendFunc
) {
453 return dev
->crq
.SendFunc(dev
, (uint8_t *)crq_mangle
);
459 static target_ulong
h_enable_crq(CPUState
*env
, sPAPREnvironment
*spapr
,
460 target_ulong opcode
, target_ulong
*args
)
462 target_ulong reg
= args
[0];
463 VIOsPAPRDevice
*dev
= spapr_vio_find_by_reg(spapr
->vio_bus
, reg
);
466 hcall_dprintf("h_enable_crq on non-existent unit 0x"
467 TARGET_FMT_lx
"\n", reg
);
474 /* Returns negative error, 0 success, or positive: queue full */
475 int spapr_vio_send_crq(VIOsPAPRDevice
*dev
, uint8_t *crq
)
480 if (!dev
->crq
.qsize
) {
481 fprintf(stderr
, "spapr_vio_send_creq on uninitialized queue\n");
485 /* Maybe do a fast path for KVM just writing to the pages */
486 rc
= spapr_tce_dma_read(dev
, dev
->crq
.qladdr
+ dev
->crq
.qnext
, &byte
, 1);
494 rc
= spapr_tce_dma_write(dev
, dev
->crq
.qladdr
+ dev
->crq
.qnext
+ 8,
502 rc
= spapr_tce_dma_write(dev
, dev
->crq
.qladdr
+ dev
->crq
.qnext
, crq
, 8);
507 dev
->crq
.qnext
= (dev
->crq
.qnext
+ 16) % dev
->crq
.qsize
;
509 if (dev
->signal_state
& 1) {
510 qemu_irq_pulse(dev
->qirq
);
516 static int spapr_vio_busdev_init(DeviceState
*qdev
, DeviceInfo
*qinfo
)
518 VIOsPAPRDeviceInfo
*info
= (VIOsPAPRDeviceInfo
*)qinfo
;
519 VIOsPAPRDevice
*dev
= (VIOsPAPRDevice
*)qdev
;
522 if (asprintf(&id
, "%s@%x", info
->dt_name
, dev
->reg
) < 0) {
530 return info
->init(dev
);
533 void spapr_vio_bus_register_withprop(VIOsPAPRDeviceInfo
*info
)
535 info
->qdev
.init
= spapr_vio_busdev_init
;
536 info
->qdev
.bus_info
= &spapr_vio_bus_info
;
538 assert(info
->qdev
.size
>= sizeof(VIOsPAPRDevice
));
539 qdev_register(&info
->qdev
);
542 static target_ulong
h_vio_signal(CPUState
*env
, sPAPREnvironment
*spapr
,
546 target_ulong reg
= args
[0];
547 target_ulong mode
= args
[1];
548 VIOsPAPRDevice
*dev
= spapr_vio_find_by_reg(spapr
->vio_bus
, reg
);
549 VIOsPAPRDeviceInfo
*info
;
555 info
= (VIOsPAPRDeviceInfo
*)dev
->qdev
.info
;
557 if (mode
& ~info
->signal_mask
) {
561 dev
->signal_state
= mode
;
566 VIOsPAPRBus
*spapr_vio_bus_init(void)
573 /* Create bridge device */
574 dev
= qdev_create(NULL
, "spapr-vio-bridge");
575 qdev_init_nofail(dev
);
577 /* Create bus on bridge device */
579 qbus
= qbus_create(&spapr_vio_bus_info
, dev
, "spapr-vio");
580 bus
= DO_UPCAST(VIOsPAPRBus
, bus
, qbus
);
583 spapr_register_hypercall(H_VIO_SIGNAL
, h_vio_signal
);
586 spapr_register_hypercall(H_PUT_TCE
, h_put_tce
);
589 spapr_register_hypercall(H_REG_CRQ
, h_reg_crq
);
590 spapr_register_hypercall(H_FREE_CRQ
, h_free_crq
);
591 spapr_register_hypercall(H_SEND_CRQ
, h_send_crq
);
592 spapr_register_hypercall(H_ENABLE_CRQ
, h_enable_crq
);
594 for (qinfo
= device_info_list
; qinfo
; qinfo
= qinfo
->next
) {
595 VIOsPAPRDeviceInfo
*info
= (VIOsPAPRDeviceInfo
*)qinfo
;
597 if (qinfo
->bus_info
!= &spapr_vio_bus_info
) {
609 /* Represents sPAPR hcall VIO devices */
611 static int spapr_vio_bridge_init(SysBusDevice
*dev
)
617 static SysBusDeviceInfo spapr_vio_bridge_info
= {
618 .init
= spapr_vio_bridge_init
,
619 .qdev
.name
= "spapr-vio-bridge",
620 .qdev
.size
= sizeof(SysBusDevice
),
624 static void spapr_vio_register_devices(void)
626 sysbus_register_withprop(&spapr_vio_bridge_info
);
629 device_init(spapr_vio_register_devices
)
632 int spapr_populate_vdevice(VIOsPAPRBus
*bus
, void *fdt
)
637 QLIST_FOREACH(qdev
, &bus
->bus
.children
, sibling
) {
638 VIOsPAPRDevice
*dev
= (VIOsPAPRDevice
*)qdev
;
640 ret
= vio_make_devnode(dev
, fdt
);
649 #endif /* CONFIG_FDT */