1dd285b06SPaolo Bonzini /*
2dd285b06SPaolo Bonzini * ARMV7M System emulation.
3dd285b06SPaolo Bonzini *
4dd285b06SPaolo Bonzini * Copyright (c) 2006-2007 CodeSourcery.
5dd285b06SPaolo Bonzini * Written by Paul Brook
6dd285b06SPaolo Bonzini *
7dd285b06SPaolo Bonzini * This code is licensed under the GPL.
8dd285b06SPaolo Bonzini */
9dd285b06SPaolo Bonzini
1012b16722SPeter Maydell #include "qemu/osdep.h"
1156b7c66fSPeter Maydell #include "hw/arm/armv7m.h"
12da34e65cSMarkus Armbruster #include "qapi/error.h"
13dd285b06SPaolo Bonzini #include "hw/sysbus.h"
1412ec8bd5SPeter Maydell #include "hw/arm/boot.h"
15dd285b06SPaolo Bonzini #include "hw/loader.h"
16a27bd6c7SMarkus Armbruster #include "hw/qdev-properties.h"
17d5093d96SPeter Maydell #include "hw/qdev-clock.h"
18dd285b06SPaolo Bonzini #include "elf.h"
1971e8a915SMarkus Armbruster #include "sysemu/reset.h"
205633b90aSAndreas Färber #include "qemu/error-report.h"
210b8fa32fSMarkus Armbruster #include "qemu/module.h"
222089c010SPeter Maydell #include "qemu/log.h"
23c60c1b0dSPeter Maydell #include "target/arm/idau.h"
249ab1cf65SPhilippe Mathieu-Daudé #include "target/arm/cpu.h"
255a534314SPeter Maydell #include "target/arm/cpu-features.h"
26*d780d056SPhilippe Mathieu-Daudé #include "target/arm/cpu-qom.h"
27d5093d96SPeter Maydell #include "migration/vmstate.h"
28dd285b06SPaolo Bonzini
29dd285b06SPaolo Bonzini /* Bitbanded IO. Each word corresponds to a single bit. */
30dd285b06SPaolo Bonzini
31dd285b06SPaolo Bonzini /* Get the byte address of the real memory for a bitband access. */
bitband_addr(BitBandState * s,hwaddr offset)32f68d881cSPeter Maydell static inline hwaddr bitband_addr(BitBandState *s, hwaddr offset)
33dd285b06SPaolo Bonzini {
34f68d881cSPeter Maydell return s->base | (offset & 0x1ffffff) >> 5;
35f68d881cSPeter Maydell }
36dd285b06SPaolo Bonzini
bitband_read(void * opaque,hwaddr offset,uint64_t * data,unsigned size,MemTxAttrs attrs)37f68d881cSPeter Maydell static MemTxResult bitband_read(void *opaque, hwaddr offset,
38f68d881cSPeter Maydell uint64_t *data, unsigned size, MemTxAttrs attrs)
39f68d881cSPeter Maydell {
40f68d881cSPeter Maydell BitBandState *s = opaque;
41f68d881cSPeter Maydell uint8_t buf[4];
42f68d881cSPeter Maydell MemTxResult res;
43f68d881cSPeter Maydell int bitpos, bit;
44f68d881cSPeter Maydell hwaddr addr;
45f68d881cSPeter Maydell
46f68d881cSPeter Maydell assert(size <= 4);
47f68d881cSPeter Maydell
48f68d881cSPeter Maydell /* Find address in underlying memory and round down to multiple of size */
49f68d881cSPeter Maydell addr = bitband_addr(s, offset) & (-size);
50b516572fSAlexey Kardashevskiy res = address_space_read(&s->source_as, addr, attrs, buf, size);
51f68d881cSPeter Maydell if (res) {
52dd285b06SPaolo Bonzini return res;
53f68d881cSPeter Maydell }
54f68d881cSPeter Maydell /* Bit position in the N bytes read... */
55f68d881cSPeter Maydell bitpos = (offset >> 2) & ((size * 8) - 1);
56f68d881cSPeter Maydell /* ...converted to byte in buffer and bit in byte */
57f68d881cSPeter Maydell bit = (buf[bitpos >> 3] >> (bitpos & 7)) & 1;
58f68d881cSPeter Maydell *data = bit;
59f68d881cSPeter Maydell return MEMTX_OK;
60dd285b06SPaolo Bonzini }
61dd285b06SPaolo Bonzini
bitband_write(void * opaque,hwaddr offset,uint64_t value,unsigned size,MemTxAttrs attrs)62f68d881cSPeter Maydell static MemTxResult bitband_write(void *opaque, hwaddr offset, uint64_t value,
63f68d881cSPeter Maydell unsigned size, MemTxAttrs attrs)
64dd285b06SPaolo Bonzini {
65f68d881cSPeter Maydell BitBandState *s = opaque;
66f68d881cSPeter Maydell uint8_t buf[4];
67f68d881cSPeter Maydell MemTxResult res;
68f68d881cSPeter Maydell int bitpos, bit;
69f68d881cSPeter Maydell hwaddr addr;
70dd285b06SPaolo Bonzini
71f68d881cSPeter Maydell assert(size <= 4);
72dd285b06SPaolo Bonzini
73f68d881cSPeter Maydell /* Find address in underlying memory and round down to multiple of size */
74f68d881cSPeter Maydell addr = bitband_addr(s, offset) & (-size);
75b516572fSAlexey Kardashevskiy res = address_space_read(&s->source_as, addr, attrs, buf, size);
76f68d881cSPeter Maydell if (res) {
77f68d881cSPeter Maydell return res;
78dd285b06SPaolo Bonzini }
79f68d881cSPeter Maydell /* Bit position in the N bytes read... */
80f68d881cSPeter Maydell bitpos = (offset >> 2) & ((size * 8) - 1);
81f68d881cSPeter Maydell /* ...converted to byte in buffer and bit in byte */
82f68d881cSPeter Maydell bit = 1 << (bitpos & 7);
83f68d881cSPeter Maydell if (value & 1) {
84f68d881cSPeter Maydell buf[bitpos >> 3] |= bit;
85f68d881cSPeter Maydell } else {
86f68d881cSPeter Maydell buf[bitpos >> 3] &= ~bit;
87dd285b06SPaolo Bonzini }
88b516572fSAlexey Kardashevskiy return address_space_write(&s->source_as, addr, attrs, buf, size);
89dd285b06SPaolo Bonzini }
90dd285b06SPaolo Bonzini
91dd285b06SPaolo Bonzini static const MemoryRegionOps bitband_ops = {
92f68d881cSPeter Maydell .read_with_attrs = bitband_read,
93f68d881cSPeter Maydell .write_with_attrs = bitband_write,
94dd285b06SPaolo Bonzini .endianness = DEVICE_NATIVE_ENDIAN,
95f68d881cSPeter Maydell .impl.min_access_size = 1,
96f68d881cSPeter Maydell .impl.max_access_size = 4,
97f68d881cSPeter Maydell .valid.min_access_size = 1,
98f68d881cSPeter Maydell .valid.max_access_size = 4,
99dd285b06SPaolo Bonzini };
100dd285b06SPaolo Bonzini
bitband_init(Object * obj)1013f5ab254Sxiaoqiang.zhao static void bitband_init(Object *obj)
102dd285b06SPaolo Bonzini {
1033f5ab254Sxiaoqiang.zhao BitBandState *s = BITBAND(obj);
1043f5ab254Sxiaoqiang.zhao SysBusDevice *dev = SYS_BUS_DEVICE(obj);
105dd285b06SPaolo Bonzini
106f68d881cSPeter Maydell memory_region_init_io(&s->iomem, obj, &bitband_ops, s,
10764bde0f3SPaolo Bonzini "bitband", 0x02000000);
108dd285b06SPaolo Bonzini sysbus_init_mmio(dev, &s->iomem);
109dd285b06SPaolo Bonzini }
110dd285b06SPaolo Bonzini
bitband_realize(DeviceState * dev,Error ** errp)111f68d881cSPeter Maydell static void bitband_realize(DeviceState *dev, Error **errp)
112f68d881cSPeter Maydell {
113f68d881cSPeter Maydell BitBandState *s = BITBAND(dev);
114f68d881cSPeter Maydell
115f68d881cSPeter Maydell if (!s->source_memory) {
116f68d881cSPeter Maydell error_setg(errp, "source-memory property not set");
117f68d881cSPeter Maydell return;
118f68d881cSPeter Maydell }
119f68d881cSPeter Maydell
120b516572fSAlexey Kardashevskiy address_space_init(&s->source_as, s->source_memory, "bitband-source");
121f68d881cSPeter Maydell }
122f68d881cSPeter Maydell
123dd285b06SPaolo Bonzini /* Board init. */
124dd285b06SPaolo Bonzini
12556b7c66fSPeter Maydell static const hwaddr bitband_input_addr[ARMV7M_NUM_BITBANDS] = {
12656b7c66fSPeter Maydell 0x20000000, 0x40000000
12756b7c66fSPeter Maydell };
12856b7c66fSPeter Maydell
12956b7c66fSPeter Maydell static const hwaddr bitband_output_addr[ARMV7M_NUM_BITBANDS] = {
13056b7c66fSPeter Maydell 0x22000000, 0x42000000
13156b7c66fSPeter Maydell };
13256b7c66fSPeter Maydell
v7m_sysreg_ns_write(void * opaque,hwaddr addr,uint64_t value,unsigned size,MemTxAttrs attrs)133e36a25cbSPeter Maydell static MemTxResult v7m_sysreg_ns_write(void *opaque, hwaddr addr,
134e36a25cbSPeter Maydell uint64_t value, unsigned size,
135e36a25cbSPeter Maydell MemTxAttrs attrs)
136e36a25cbSPeter Maydell {
137e36a25cbSPeter Maydell MemoryRegion *mr = opaque;
138e36a25cbSPeter Maydell
139e36a25cbSPeter Maydell if (attrs.secure) {
140e36a25cbSPeter Maydell /* S accesses to the alias act like NS accesses to the real region */
141e36a25cbSPeter Maydell attrs.secure = 0;
142e36a25cbSPeter Maydell return memory_region_dispatch_write(mr, addr, value,
143e36a25cbSPeter Maydell size_memop(size) | MO_TE, attrs);
144e36a25cbSPeter Maydell } else {
145e36a25cbSPeter Maydell /* NS attrs are RAZ/WI for privileged, and BusFault for user */
146e36a25cbSPeter Maydell if (attrs.user) {
147e36a25cbSPeter Maydell return MEMTX_ERROR;
148e36a25cbSPeter Maydell }
149e36a25cbSPeter Maydell return MEMTX_OK;
150e36a25cbSPeter Maydell }
151e36a25cbSPeter Maydell }
152e36a25cbSPeter Maydell
v7m_sysreg_ns_read(void * opaque,hwaddr addr,uint64_t * data,unsigned size,MemTxAttrs attrs)153e36a25cbSPeter Maydell static MemTxResult v7m_sysreg_ns_read(void *opaque, hwaddr addr,
154e36a25cbSPeter Maydell uint64_t *data, unsigned size,
155e36a25cbSPeter Maydell MemTxAttrs attrs)
156e36a25cbSPeter Maydell {
157e36a25cbSPeter Maydell MemoryRegion *mr = opaque;
158e36a25cbSPeter Maydell
159e36a25cbSPeter Maydell if (attrs.secure) {
160e36a25cbSPeter Maydell /* S accesses to the alias act like NS accesses to the real region */
161e36a25cbSPeter Maydell attrs.secure = 0;
162e36a25cbSPeter Maydell return memory_region_dispatch_read(mr, addr, data,
163e36a25cbSPeter Maydell size_memop(size) | MO_TE, attrs);
164e36a25cbSPeter Maydell } else {
165e36a25cbSPeter Maydell /* NS attrs are RAZ/WI for privileged, and BusFault for user */
166e36a25cbSPeter Maydell if (attrs.user) {
167e36a25cbSPeter Maydell return MEMTX_ERROR;
168e36a25cbSPeter Maydell }
169e36a25cbSPeter Maydell *data = 0;
170e36a25cbSPeter Maydell return MEMTX_OK;
171e36a25cbSPeter Maydell }
172e36a25cbSPeter Maydell }
173e36a25cbSPeter Maydell
174e36a25cbSPeter Maydell static const MemoryRegionOps v7m_sysreg_ns_ops = {
175e36a25cbSPeter Maydell .read_with_attrs = v7m_sysreg_ns_read,
176e36a25cbSPeter Maydell .write_with_attrs = v7m_sysreg_ns_write,
177e36a25cbSPeter Maydell .endianness = DEVICE_NATIVE_ENDIAN,
178e36a25cbSPeter Maydell };
179e36a25cbSPeter Maydell
v7m_systick_write(void * opaque,hwaddr addr,uint64_t value,unsigned size,MemTxAttrs attrs)180e36a25cbSPeter Maydell static MemTxResult v7m_systick_write(void *opaque, hwaddr addr,
181e36a25cbSPeter Maydell uint64_t value, unsigned size,
182e36a25cbSPeter Maydell MemTxAttrs attrs)
183e36a25cbSPeter Maydell {
184e36a25cbSPeter Maydell ARMv7MState *s = opaque;
185e36a25cbSPeter Maydell MemoryRegion *mr;
186e36a25cbSPeter Maydell
187e36a25cbSPeter Maydell /* Direct the access to the correct systick */
188e36a25cbSPeter Maydell mr = sysbus_mmio_get_region(SYS_BUS_DEVICE(&s->systick[attrs.secure]), 0);
189e36a25cbSPeter Maydell return memory_region_dispatch_write(mr, addr, value,
190e36a25cbSPeter Maydell size_memop(size) | MO_TE, attrs);
191e36a25cbSPeter Maydell }
192e36a25cbSPeter Maydell
v7m_systick_read(void * opaque,hwaddr addr,uint64_t * data,unsigned size,MemTxAttrs attrs)193e36a25cbSPeter Maydell static MemTxResult v7m_systick_read(void *opaque, hwaddr addr,
194e36a25cbSPeter Maydell uint64_t *data, unsigned size,
195e36a25cbSPeter Maydell MemTxAttrs attrs)
196e36a25cbSPeter Maydell {
197e36a25cbSPeter Maydell ARMv7MState *s = opaque;
198e36a25cbSPeter Maydell MemoryRegion *mr;
199e36a25cbSPeter Maydell
200e36a25cbSPeter Maydell /* Direct the access to the correct systick */
201e36a25cbSPeter Maydell mr = sysbus_mmio_get_region(SYS_BUS_DEVICE(&s->systick[attrs.secure]), 0);
202e36a25cbSPeter Maydell return memory_region_dispatch_read(mr, addr, data, size_memop(size) | MO_TE,
203e36a25cbSPeter Maydell attrs);
204e36a25cbSPeter Maydell }
205e36a25cbSPeter Maydell
206e36a25cbSPeter Maydell static const MemoryRegionOps v7m_systick_ops = {
207e36a25cbSPeter Maydell .read_with_attrs = v7m_systick_read,
208e36a25cbSPeter Maydell .write_with_attrs = v7m_systick_write,
209e36a25cbSPeter Maydell .endianness = DEVICE_NATIVE_ENDIAN,
210e36a25cbSPeter Maydell };
211e36a25cbSPeter Maydell
2122089c010SPeter Maydell /*
2132089c010SPeter Maydell * Unassigned portions of the PPB space are RAZ/WI for privileged
2142089c010SPeter Maydell * accesses, and fault for non-privileged accesses.
2152089c010SPeter Maydell */
ppb_default_read(void * opaque,hwaddr addr,uint64_t * data,unsigned size,MemTxAttrs attrs)2162089c010SPeter Maydell static MemTxResult ppb_default_read(void *opaque, hwaddr addr,
2172089c010SPeter Maydell uint64_t *data, unsigned size,
2182089c010SPeter Maydell MemTxAttrs attrs)
2192089c010SPeter Maydell {
2202089c010SPeter Maydell qemu_log_mask(LOG_UNIMP, "Read of unassigned area of PPB: offset 0x%x\n",
2212089c010SPeter Maydell (uint32_t)addr);
2222089c010SPeter Maydell if (attrs.user) {
2232089c010SPeter Maydell return MEMTX_ERROR;
2242089c010SPeter Maydell }
2252089c010SPeter Maydell *data = 0;
2262089c010SPeter Maydell return MEMTX_OK;
2272089c010SPeter Maydell }
2282089c010SPeter Maydell
ppb_default_write(void * opaque,hwaddr addr,uint64_t value,unsigned size,MemTxAttrs attrs)2292089c010SPeter Maydell static MemTxResult ppb_default_write(void *opaque, hwaddr addr,
2302089c010SPeter Maydell uint64_t value, unsigned size,
2312089c010SPeter Maydell MemTxAttrs attrs)
2322089c010SPeter Maydell {
2332089c010SPeter Maydell qemu_log_mask(LOG_UNIMP, "Write of unassigned area of PPB: offset 0x%x\n",
2342089c010SPeter Maydell (uint32_t)addr);
2352089c010SPeter Maydell if (attrs.user) {
2362089c010SPeter Maydell return MEMTX_ERROR;
2372089c010SPeter Maydell }
2382089c010SPeter Maydell return MEMTX_OK;
2392089c010SPeter Maydell }
2402089c010SPeter Maydell
2412089c010SPeter Maydell static const MemoryRegionOps ppb_default_ops = {
2422089c010SPeter Maydell .read_with_attrs = ppb_default_read,
2432089c010SPeter Maydell .write_with_attrs = ppb_default_write,
2442089c010SPeter Maydell .endianness = DEVICE_NATIVE_ENDIAN,
2452089c010SPeter Maydell .valid.min_access_size = 1,
2462089c010SPeter Maydell .valid.max_access_size = 8,
2472089c010SPeter Maydell };
2482089c010SPeter Maydell
armv7m_instance_init(Object * obj)24956b7c66fSPeter Maydell static void armv7m_instance_init(Object *obj)
25056b7c66fSPeter Maydell {
25156b7c66fSPeter Maydell ARMv7MState *s = ARMV7M(obj);
25256b7c66fSPeter Maydell int i;
25356b7c66fSPeter Maydell
25456b7c66fSPeter Maydell /* Can't init the cpu here, we don't yet know which model to use */
25556b7c66fSPeter Maydell
256618119c2SPeter Maydell memory_region_init(&s->container, obj, "armv7m-container", UINT64_MAX);
257618119c2SPeter Maydell
25871f916beSPeter Maydell object_initialize_child(obj, "nvic", &s->nvic, TYPE_NVIC);
25956b7c66fSPeter Maydell object_property_add_alias(obj, "num-irq",
260d2623129SMarkus Armbruster OBJECT(&s->nvic), "num-irq");
26133995902SSamuel Tardieu object_property_add_alias(obj, "num-prio-bits",
26233995902SSamuel Tardieu OBJECT(&s->nvic), "num-prio-bits");
26356b7c66fSPeter Maydell
264e36a25cbSPeter Maydell object_initialize_child(obj, "systick-reg-ns", &s->systick[M_REG_NS],
265e36a25cbSPeter Maydell TYPE_SYSTICK);
266e36a25cbSPeter Maydell /*
267e36a25cbSPeter Maydell * We can't initialize the secure systick here, as we don't know
268e36a25cbSPeter Maydell * yet if we need it.
269e36a25cbSPeter Maydell */
270e36a25cbSPeter Maydell
27156b7c66fSPeter Maydell for (i = 0; i < ARRAY_SIZE(s->bitband); i++) {
2725a147c8cSMarkus Armbruster object_initialize_child(obj, "bitband[*]", &s->bitband[i],
2735a147c8cSMarkus Armbruster TYPE_BITBAND);
27456b7c66fSPeter Maydell }
275d5093d96SPeter Maydell
276d5093d96SPeter Maydell s->refclk = qdev_init_clock_in(DEVICE(obj), "refclk", NULL, NULL, 0);
277d5093d96SPeter Maydell s->cpuclk = qdev_init_clock_in(DEVICE(obj), "cpuclk", NULL, NULL, 0);
27856b7c66fSPeter Maydell }
27956b7c66fSPeter Maydell
armv7m_realize(DeviceState * dev,Error ** errp)28056b7c66fSPeter Maydell static void armv7m_realize(DeviceState *dev, Error **errp)
28156b7c66fSPeter Maydell {
28256b7c66fSPeter Maydell ARMv7MState *s = ARMV7M(dev);
28398957a94SPeter Maydell SysBusDevice *sbd;
28456b7c66fSPeter Maydell Error *err = NULL;
28556b7c66fSPeter Maydell int i;
28656b7c66fSPeter Maydell
287618119c2SPeter Maydell if (!s->board_memory) {
288618119c2SPeter Maydell error_setg(errp, "memory property was not set");
289618119c2SPeter Maydell return;
290618119c2SPeter Maydell }
291618119c2SPeter Maydell
292542e87c7SPeter Maydell /* cpuclk must be connected; refclk is optional */
293542e87c7SPeter Maydell if (!clock_has_source(s->cpuclk)) {
294542e87c7SPeter Maydell error_setg(errp, "armv7m: cpuclk must be connected");
295542e87c7SPeter Maydell return;
296542e87c7SPeter Maydell }
297542e87c7SPeter Maydell
298618119c2SPeter Maydell memory_region_add_subregion_overlap(&s->container, 0, s->board_memory, -1);
299618119c2SPeter Maydell
300e4c81e3aSPeter Maydell s->cpu = ARM_CPU(object_new_with_props(s->cpu_type, OBJECT(s), "cpu",
301e4c81e3aSPeter Maydell &err, NULL));
302e4c81e3aSPeter Maydell if (err != NULL) {
303e4c81e3aSPeter Maydell error_propagate(errp, err);
304e4c81e3aSPeter Maydell return;
305e4c81e3aSPeter Maydell }
30656b7c66fSPeter Maydell
3075325cc34SMarkus Armbruster object_property_set_link(OBJECT(s->cpu), "memory", OBJECT(&s->container),
308618119c2SPeter Maydell &error_abort);
309efba1595SDaniel P. Berrangé if (object_property_find(OBJECT(s->cpu), "idau")) {
3105325cc34SMarkus Armbruster object_property_set_link(OBJECT(s->cpu), "idau", s->idau,
311c24d9716SMarkus Armbruster &error_abort);
312c60c1b0dSPeter Maydell }
313efba1595SDaniel P. Berrangé if (object_property_find(OBJECT(s->cpu), "init-svtor")) {
314778a2dc5SMarkus Armbruster if (!object_property_set_uint(OBJECT(s->cpu), "init-svtor",
315668f62ecSMarkus Armbruster s->init_svtor, errp)) {
31660d75d81SPeter Maydell return;
31760d75d81SPeter Maydell }
31860d75d81SPeter Maydell }
3197cda2149SPeter Maydell if (object_property_find(OBJECT(s->cpu), "init-nsvtor")) {
3207cda2149SPeter Maydell if (!object_property_set_uint(OBJECT(s->cpu), "init-nsvtor",
3217cda2149SPeter Maydell s->init_nsvtor, errp)) {
3227cda2149SPeter Maydell return;
3237cda2149SPeter Maydell }
3247cda2149SPeter Maydell }
325efba1595SDaniel P. Berrangé if (object_property_find(OBJECT(s->cpu), "vfp")) {
326668f62ecSMarkus Armbruster if (!object_property_set_bool(OBJECT(s->cpu), "vfp", s->vfp, errp)) {
327e0cf7b81SPeter Maydell return;
328e0cf7b81SPeter Maydell }
329e0cf7b81SPeter Maydell }
330efba1595SDaniel P. Berrangé if (object_property_find(OBJECT(s->cpu), "dsp")) {
331668f62ecSMarkus Armbruster if (!object_property_set_bool(OBJECT(s->cpu), "dsp", s->dsp, errp)) {
332e0cf7b81SPeter Maydell return;
333e0cf7b81SPeter Maydell }
334e0cf7b81SPeter Maydell }
335287fa323SPhilippe Mathieu-Daudé object_property_set_bool(OBJECT(s->cpu), "start-powered-off",
336287fa323SPhilippe Mathieu-Daudé s->start_powered_off, &error_abort);
33795f87565SPeter Maydell
3383693f217SPeter Maydell /*
339cb0929bbSPeter Maydell * Real M-profile hardware can be configured with a different number of
340cb0929bbSPeter Maydell * MPU regions for Secure vs NonSecure. QEMU's CPU implementation doesn't
341cb0929bbSPeter Maydell * support that yet, so catch attempts to select that.
342cb0929bbSPeter Maydell */
343cb0929bbSPeter Maydell if (arm_feature(&s->cpu->env, ARM_FEATURE_M_SECURITY) &&
344cb0929bbSPeter Maydell s->mpu_ns_regions != s->mpu_s_regions) {
345cb0929bbSPeter Maydell error_setg(errp,
346cb0929bbSPeter Maydell "mpu-ns-regions and mpu-s-regions properties must have the same value");
347cb0929bbSPeter Maydell return;
348cb0929bbSPeter Maydell }
349cb0929bbSPeter Maydell if (s->mpu_ns_regions != UINT_MAX &&
350cb0929bbSPeter Maydell object_property_find(OBJECT(s->cpu), "pmsav7-dregion")) {
351cb0929bbSPeter Maydell if (!object_property_set_uint(OBJECT(s->cpu), "pmsav7-dregion",
352cb0929bbSPeter Maydell s->mpu_ns_regions, errp)) {
353cb0929bbSPeter Maydell return;
354cb0929bbSPeter Maydell }
355cb0929bbSPeter Maydell }
356cb0929bbSPeter Maydell
357cb0929bbSPeter Maydell /*
3583693f217SPeter Maydell * Tell the CPU where the NVIC is; it will fail realize if it doesn't
3593693f217SPeter Maydell * have one. Similarly, tell the NVIC where its CPU is.
36095f87565SPeter Maydell */
36195f87565SPeter Maydell s->cpu->env.nvic = &s->nvic;
3623693f217SPeter Maydell s->nvic.cpu = s->cpu;
36395f87565SPeter Maydell
364668f62ecSMarkus Armbruster if (!qdev_realize(DEVICE(s->cpu), NULL, errp)) {
36556b7c66fSPeter Maydell return;
36656b7c66fSPeter Maydell }
36756b7c66fSPeter Maydell
36856b7c66fSPeter Maydell /* Note that we must realize the NVIC after the CPU */
369668f62ecSMarkus Armbruster if (!sysbus_realize(SYS_BUS_DEVICE(&s->nvic), errp)) {
37056b7c66fSPeter Maydell return;
37156b7c66fSPeter Maydell }
37256b7c66fSPeter Maydell
37356b7c66fSPeter Maydell /* Alias the NVIC's input and output GPIOs as our own so the board
37456b7c66fSPeter Maydell * code can wire them up. (We do this in realize because the
37556b7c66fSPeter Maydell * NVIC doesn't create the input GPIO array until realize.)
37656b7c66fSPeter Maydell */
37756b7c66fSPeter Maydell qdev_pass_gpios(DEVICE(&s->nvic), dev, NULL);
37856b7c66fSPeter Maydell qdev_pass_gpios(DEVICE(&s->nvic), dev, "SYSRESETREQ");
379514b4f36SPeter Maydell qdev_pass_gpios(DEVICE(&s->nvic), dev, "NMI");
38056b7c66fSPeter Maydell
3812089c010SPeter Maydell /*
3822089c010SPeter Maydell * We map various devices into the container MR at their architected
3832089c010SPeter Maydell * addresses. In particular, we map everything corresponding to the
3842089c010SPeter Maydell * "System PPB" space. This is the range from 0xe0000000 to 0xe00fffff
3852089c010SPeter Maydell * and includes the NVIC, the System Control Space (system registers),
3862089c010SPeter Maydell * the systick timer, and for CPUs with the Security extension an NS
3872089c010SPeter Maydell * banked version of all of these.
3882089c010SPeter Maydell *
3892089c010SPeter Maydell * The default behaviour for unimplemented registers/ranges
3902089c010SPeter Maydell * (for instance the Data Watchpoint and Trace unit at 0xe0001000)
3912089c010SPeter Maydell * is to RAZ/WI for privileged access and BusFault for non-privileged
3922089c010SPeter Maydell * access.
3932089c010SPeter Maydell *
3942089c010SPeter Maydell * The NVIC and System Control Space (SCS) starts at 0xe000e000
3952089c010SPeter Maydell * and looks like this:
3962089c010SPeter Maydell * 0x004 - ICTR
3972089c010SPeter Maydell * 0x010 - 0xff - systick
3982089c010SPeter Maydell * 0x100..0x7ec - NVIC
3992089c010SPeter Maydell * 0x7f0..0xcff - Reserved
4002089c010SPeter Maydell * 0xd00..0xd3c - SCS registers
4012089c010SPeter Maydell * 0xd40..0xeff - Reserved or Not implemented
4022089c010SPeter Maydell * 0xf00 - STIR
4032089c010SPeter Maydell *
4042089c010SPeter Maydell * Some registers within this space are banked between security states.
4052089c010SPeter Maydell * In v8M there is a second range 0xe002e000..0xe002efff which is the
4062089c010SPeter Maydell * NonSecure alias SCS; secure accesses to this behave like NS accesses
4072089c010SPeter Maydell * to the main SCS range, and non-secure accesses (including when
4082089c010SPeter Maydell * the security extension is not implemented) are RAZ/WI.
4092089c010SPeter Maydell * Note that both the main SCS range and the alias range are defined
4102089c010SPeter Maydell * to be exempt from memory attribution (R_BLJT) and so the memory
4112089c010SPeter Maydell * transaction attribute always matches the current CPU security
4122089c010SPeter Maydell * state (attrs.secure == env->v7m.secure). In the v7m_sysreg_ns_ops
4132089c010SPeter Maydell * wrappers we change attrs.secure to indicate the NS access; so
4142089c010SPeter Maydell * generally code determining which banked register to use should
4152089c010SPeter Maydell * use attrs.secure; code determining actual behaviour of the system
4162089c010SPeter Maydell * should use env->v7m.secure.
4172089c010SPeter Maydell *
4182089c010SPeter Maydell * Within the PPB space, some MRs overlap, and the priority
4192089c010SPeter Maydell * of overlapping regions is:
4202089c010SPeter Maydell * - default region (for RAZ/WI and BusFault) : -1
4212089c010SPeter Maydell * - system register regions (provided by the NVIC) : 0
4222089c010SPeter Maydell * - systick : 1
4232089c010SPeter Maydell * This is because the systick device is a small block of registers
4242089c010SPeter Maydell * in the middle of the other system control registers.
4252089c010SPeter Maydell */
4262089c010SPeter Maydell
4272089c010SPeter Maydell memory_region_init_io(&s->defaultmem, OBJECT(s), &ppb_default_ops, s,
4282089c010SPeter Maydell "nvic-default", 0x100000);
4292089c010SPeter Maydell memory_region_add_subregion_overlap(&s->container, 0xe0000000,
4302089c010SPeter Maydell &s->defaultmem, -1);
4312089c010SPeter Maydell
43256b7c66fSPeter Maydell /* Wire the NVIC up to the CPU */
43398957a94SPeter Maydell sbd = SYS_BUS_DEVICE(&s->nvic);
43498957a94SPeter Maydell sysbus_connect_irq(sbd, 0,
43556b7c66fSPeter Maydell qdev_get_gpio_in(DEVICE(s->cpu), ARM_CPU_IRQ));
43656b7c66fSPeter Maydell
4372089c010SPeter Maydell memory_region_add_subregion(&s->container, 0xe000e000,
43898957a94SPeter Maydell sysbus_mmio_get_region(sbd, 0));
4392089c010SPeter Maydell if (arm_feature(&s->cpu->env, ARM_FEATURE_V8)) {
4402089c010SPeter Maydell /* Create the NS alias region for the NVIC sysregs */
4412089c010SPeter Maydell memory_region_init_io(&s->sysreg_ns_mem, OBJECT(s),
4422089c010SPeter Maydell &v7m_sysreg_ns_ops,
4432089c010SPeter Maydell sysbus_mmio_get_region(sbd, 0),
4442089c010SPeter Maydell "nvic_sysregs_ns", 0x1000);
4452089c010SPeter Maydell memory_region_add_subregion(&s->container, 0xe002e000,
4462089c010SPeter Maydell &s->sysreg_ns_mem);
4472089c010SPeter Maydell }
44898957a94SPeter Maydell
449542e87c7SPeter Maydell /*
450542e87c7SPeter Maydell * Create and map the systick devices. Note that we only connect
451542e87c7SPeter Maydell * refclk if it has been connected to us; otherwise the systick
452542e87c7SPeter Maydell * device gets the wrong answer for clock_has_source(refclk), because
453542e87c7SPeter Maydell * it has an immediate source (the ARMv7M's clock object) but not
454542e87c7SPeter Maydell * an ultimate source, and then it won't correctly auto-select the
455542e87c7SPeter Maydell * CPU clock as its only possible clock source.
456542e87c7SPeter Maydell */
457542e87c7SPeter Maydell if (clock_has_source(s->refclk)) {
458542e87c7SPeter Maydell qdev_connect_clock_in(DEVICE(&s->systick[M_REG_NS]), "refclk",
459542e87c7SPeter Maydell s->refclk);
460542e87c7SPeter Maydell }
461d5093d96SPeter Maydell qdev_connect_clock_in(DEVICE(&s->systick[M_REG_NS]), "cpuclk", s->cpuclk);
462e36a25cbSPeter Maydell if (!sysbus_realize(SYS_BUS_DEVICE(&s->systick[M_REG_NS]), errp)) {
463e36a25cbSPeter Maydell return;
464e36a25cbSPeter Maydell }
465e36a25cbSPeter Maydell sysbus_connect_irq(SYS_BUS_DEVICE(&s->systick[M_REG_NS]), 0,
466e36a25cbSPeter Maydell qdev_get_gpio_in_named(DEVICE(&s->nvic),
467e36a25cbSPeter Maydell "systick-trigger", M_REG_NS));
468e36a25cbSPeter Maydell
469e36a25cbSPeter Maydell if (arm_feature(&s->cpu->env, ARM_FEATURE_M_SECURITY)) {
470e36a25cbSPeter Maydell /*
471e36a25cbSPeter Maydell * We couldn't init the secure systick device in instance_init
472e36a25cbSPeter Maydell * as we didn't know then if the CPU had the security extensions;
473e36a25cbSPeter Maydell * so we have to do it here.
474e36a25cbSPeter Maydell */
475e36a25cbSPeter Maydell object_initialize_child(OBJECT(dev), "systick-reg-s",
476e36a25cbSPeter Maydell &s->systick[M_REG_S], TYPE_SYSTICK);
477542e87c7SPeter Maydell if (clock_has_source(s->refclk)) {
478d5093d96SPeter Maydell qdev_connect_clock_in(DEVICE(&s->systick[M_REG_S]), "refclk",
479d5093d96SPeter Maydell s->refclk);
480542e87c7SPeter Maydell }
481d5093d96SPeter Maydell qdev_connect_clock_in(DEVICE(&s->systick[M_REG_S]), "cpuclk",
482d5093d96SPeter Maydell s->cpuclk);
483e36a25cbSPeter Maydell
484e36a25cbSPeter Maydell if (!sysbus_realize(SYS_BUS_DEVICE(&s->systick[M_REG_S]), errp)) {
485e36a25cbSPeter Maydell return;
486e36a25cbSPeter Maydell }
487e36a25cbSPeter Maydell sysbus_connect_irq(SYS_BUS_DEVICE(&s->systick[M_REG_S]), 0,
488e36a25cbSPeter Maydell qdev_get_gpio_in_named(DEVICE(&s->nvic),
489e36a25cbSPeter Maydell "systick-trigger", M_REG_S));
490e36a25cbSPeter Maydell }
491e36a25cbSPeter Maydell
492e36a25cbSPeter Maydell memory_region_init_io(&s->systickmem, OBJECT(s),
493e36a25cbSPeter Maydell &v7m_systick_ops, s,
494e36a25cbSPeter Maydell "v7m_systick", 0xe0);
495e36a25cbSPeter Maydell
496e36a25cbSPeter Maydell memory_region_add_subregion_overlap(&s->container, 0xe000e010,
497e36a25cbSPeter Maydell &s->systickmem, 1);
498e36a25cbSPeter Maydell if (arm_feature(&s->cpu->env, ARM_FEATURE_V8)) {
499e36a25cbSPeter Maydell memory_region_init_io(&s->systick_ns_mem, OBJECT(s),
500e36a25cbSPeter Maydell &v7m_sysreg_ns_ops, &s->systickmem,
501e36a25cbSPeter Maydell "v7m_systick_ns", 0xe0);
502e36a25cbSPeter Maydell memory_region_add_subregion_overlap(&s->container, 0xe002e010,
503e36a25cbSPeter Maydell &s->systick_ns_mem, 1);
504e36a25cbSPeter Maydell }
505e36a25cbSPeter Maydell
5062f9db77eSPeter Maydell /* If the CPU has RAS support, create the RAS register block */
5072f9db77eSPeter Maydell if (cpu_isar_feature(aa32_ras, s->cpu)) {
5082f9db77eSPeter Maydell object_initialize_child(OBJECT(dev), "armv7m-ras",
5092f9db77eSPeter Maydell &s->ras, TYPE_ARMV7M_RAS);
5102f9db77eSPeter Maydell sbd = SYS_BUS_DEVICE(&s->ras);
5112f9db77eSPeter Maydell if (!sysbus_realize(sbd, errp)) {
5122f9db77eSPeter Maydell return;
5132f9db77eSPeter Maydell }
5142f9db77eSPeter Maydell memory_region_add_subregion_overlap(&s->container, 0xe0005000,
5152f9db77eSPeter Maydell sysbus_mmio_get_region(sbd, 0), 1);
5162f9db77eSPeter Maydell }
5172f9db77eSPeter Maydell
51856b7c66fSPeter Maydell for (i = 0; i < ARRAY_SIZE(s->bitband); i++) {
519210d1867SMarkus Armbruster if (s->enable_bitband) {
52056b7c66fSPeter Maydell Object *obj = OBJECT(&s->bitband[i]);
521807e4d1dSPhilippe Mathieu-Daudé sbd = SYS_BUS_DEVICE(&s->bitband[i]);
52256b7c66fSPeter Maydell
523778a2dc5SMarkus Armbruster if (!object_property_set_int(obj, "base",
524668f62ecSMarkus Armbruster bitband_input_addr[i], errp)) {
52556b7c66fSPeter Maydell return;
52656b7c66fSPeter Maydell }
5275325cc34SMarkus Armbruster object_property_set_link(obj, "source-memory",
5285325cc34SMarkus Armbruster OBJECT(s->board_memory), &error_abort);
529668f62ecSMarkus Armbruster if (!sysbus_realize(SYS_BUS_DEVICE(obj), errp)) {
53056b7c66fSPeter Maydell return;
53156b7c66fSPeter Maydell }
53256b7c66fSPeter Maydell
533618119c2SPeter Maydell memory_region_add_subregion(&s->container, bitband_output_addr[i],
534618119c2SPeter Maydell sysbus_mmio_get_region(sbd, 0));
535210d1867SMarkus Armbruster } else {
536210d1867SMarkus Armbruster object_unparent(OBJECT(&s->bitband[i]));
53756b7c66fSPeter Maydell }
53856b7c66fSPeter Maydell }
539a1c5a062SStefan Hajnoczi }
54056b7c66fSPeter Maydell
54156b7c66fSPeter Maydell static Property armv7m_properties[] = {
542ba1ba5ccSIgor Mammedov DEFINE_PROP_STRING("cpu-type", ARMv7MState, cpu_type),
543e2ff1215SFam Zheng DEFINE_PROP_LINK("memory", ARMv7MState, board_memory, TYPE_MEMORY_REGION,
544e2ff1215SFam Zheng MemoryRegion *),
545c60c1b0dSPeter Maydell DEFINE_PROP_LINK("idau", ARMv7MState, idau, TYPE_IDAU_INTERFACE, Object *),
54660d75d81SPeter Maydell DEFINE_PROP_UINT32("init-svtor", ARMv7MState, init_svtor, 0),
5477cda2149SPeter Maydell DEFINE_PROP_UINT32("init-nsvtor", ARMv7MState, init_nsvtor, 0),
548a1c5a062SStefan Hajnoczi DEFINE_PROP_BOOL("enable-bitband", ARMv7MState, enable_bitband, false),
54966647809SPeter Maydell DEFINE_PROP_BOOL("start-powered-off", ARMv7MState, start_powered_off,
55066647809SPeter Maydell false),
551e0cf7b81SPeter Maydell DEFINE_PROP_BOOL("vfp", ARMv7MState, vfp, true),
552e0cf7b81SPeter Maydell DEFINE_PROP_BOOL("dsp", ARMv7MState, dsp, true),
553cb0929bbSPeter Maydell DEFINE_PROP_UINT32("mpu-ns-regions", ARMv7MState, mpu_ns_regions, UINT_MAX),
554cb0929bbSPeter Maydell DEFINE_PROP_UINT32("mpu-s-regions", ARMv7MState, mpu_s_regions, UINT_MAX),
55556b7c66fSPeter Maydell DEFINE_PROP_END_OF_LIST(),
55656b7c66fSPeter Maydell };
55756b7c66fSPeter Maydell
558d5093d96SPeter Maydell static const VMStateDescription vmstate_armv7m = {
559d5093d96SPeter Maydell .name = "armv7m",
560d5093d96SPeter Maydell .version_id = 1,
561d5093d96SPeter Maydell .minimum_version_id = 1,
562607ef570SRichard Henderson .fields = (const VMStateField[]) {
56362a4d87dSPeter Maydell VMSTATE_CLOCK(refclk, ARMv7MState),
56462a4d87dSPeter Maydell VMSTATE_CLOCK(cpuclk, ARMv7MState),
565d5093d96SPeter Maydell VMSTATE_END_OF_LIST()
566d5093d96SPeter Maydell }
567d5093d96SPeter Maydell };
568d5093d96SPeter Maydell
armv7m_class_init(ObjectClass * klass,void * data)56956b7c66fSPeter Maydell static void armv7m_class_init(ObjectClass *klass, void *data)
57056b7c66fSPeter Maydell {
57156b7c66fSPeter Maydell DeviceClass *dc = DEVICE_CLASS(klass);
57256b7c66fSPeter Maydell
57356b7c66fSPeter Maydell dc->realize = armv7m_realize;
574d5093d96SPeter Maydell dc->vmsd = &vmstate_armv7m;
5754f67d30bSMarc-André Lureau device_class_set_props(dc, armv7m_properties);
57656b7c66fSPeter Maydell }
57756b7c66fSPeter Maydell
57856b7c66fSPeter Maydell static const TypeInfo armv7m_info = {
57956b7c66fSPeter Maydell .name = TYPE_ARMV7M,
58056b7c66fSPeter Maydell .parent = TYPE_SYS_BUS_DEVICE,
58156b7c66fSPeter Maydell .instance_size = sizeof(ARMv7MState),
58256b7c66fSPeter Maydell .instance_init = armv7m_instance_init,
58356b7c66fSPeter Maydell .class_init = armv7m_class_init,
58456b7c66fSPeter Maydell };
58556b7c66fSPeter Maydell
armv7m_reset(void * opaque)586dd285b06SPaolo Bonzini static void armv7m_reset(void *opaque)
587dd285b06SPaolo Bonzini {
588dd285b06SPaolo Bonzini ARMCPU *cpu = opaque;
589dd285b06SPaolo Bonzini
590dd285b06SPaolo Bonzini cpu_reset(CPU(cpu));
591dd285b06SPaolo Bonzini }
592dd285b06SPaolo Bonzini
armv7m_load_kernel(ARMCPU * cpu,const char * kernel_filename,hwaddr mem_base,int mem_size)593761c532aSPeter Maydell void armv7m_load_kernel(ARMCPU *cpu, const char *kernel_filename,
594761c532aSPeter Maydell hwaddr mem_base, int mem_size)
5953651c285SPeter Maydell {
596af975131SJamie Iles ssize_t image_size;
5973651c285SPeter Maydell uint64_t entry;
598891f3bc3SPeter Maydell AddressSpace *as;
599891f3bc3SPeter Maydell int asidx;
600891f3bc3SPeter Maydell CPUState *cs = CPU(cpu);
601dd285b06SPaolo Bonzini
602891f3bc3SPeter Maydell if (arm_feature(&cpu->env, ARM_FEATURE_EL3)) {
603891f3bc3SPeter Maydell asidx = ARMASIdx_S;
604891f3bc3SPeter Maydell } else {
605891f3bc3SPeter Maydell asidx = ARMASIdx_NS;
606891f3bc3SPeter Maydell }
607891f3bc3SPeter Maydell as = cpu_get_address_space(cs, asidx);
608891f3bc3SPeter Maydell
6095633b90aSAndreas Färber if (kernel_filename) {
6104366e1dbSLiam Merwick image_size = load_elf_as(kernel_filename, NULL, NULL, NULL,
611617160c9SBALATON Zoltan &entry, NULL, NULL,
612f92bd434SPeter Maydell NULL, 0, EM_ARM, 1, 0, as);
613dd285b06SPaolo Bonzini if (image_size < 0) {
614761c532aSPeter Maydell image_size = load_image_targphys_as(kernel_filename, mem_base,
615891f3bc3SPeter Maydell mem_size, as);
616dd285b06SPaolo Bonzini }
617dd285b06SPaolo Bonzini if (image_size < 0) {
6185633b90aSAndreas Färber error_report("Could not load kernel '%s'", kernel_filename);
619dd285b06SPaolo Bonzini exit(1);
620dd285b06SPaolo Bonzini }
6215633b90aSAndreas Färber }
622dd285b06SPaolo Bonzini
6233651c285SPeter Maydell /* CPU objects (unlike devices) are not automatically reset on system
6243651c285SPeter Maydell * reset, so we must always register a handler to do so. Unlike
6253651c285SPeter Maydell * A-profile CPUs, we don't need to do anything special in the
6263651c285SPeter Maydell * handler to arrange that it starts correctly.
6273651c285SPeter Maydell * This is arguably the wrong place to do this, but it matches the
6283651c285SPeter Maydell * way A-profile does it. Note that this means that every M profile
6293651c285SPeter Maydell * board must call this function!
6303651c285SPeter Maydell */
631dd285b06SPaolo Bonzini qemu_register_reset(armv7m_reset, cpu);
632dd285b06SPaolo Bonzini }
633dd285b06SPaolo Bonzini
634dd285b06SPaolo Bonzini static Property bitband_properties[] = {
635dd285b06SPaolo Bonzini DEFINE_PROP_UINT32("base", BitBandState, base, 0),
6365f486f97SFam Zheng DEFINE_PROP_LINK("source-memory", BitBandState, source_memory,
6375f486f97SFam Zheng TYPE_MEMORY_REGION, MemoryRegion *),
638dd285b06SPaolo Bonzini DEFINE_PROP_END_OF_LIST(),
639dd285b06SPaolo Bonzini };
640dd285b06SPaolo Bonzini
bitband_class_init(ObjectClass * klass,void * data)641dd285b06SPaolo Bonzini static void bitband_class_init(ObjectClass *klass, void *data)
642dd285b06SPaolo Bonzini {
643dd285b06SPaolo Bonzini DeviceClass *dc = DEVICE_CLASS(klass);
644dd285b06SPaolo Bonzini
645f68d881cSPeter Maydell dc->realize = bitband_realize;
6464f67d30bSMarc-André Lureau device_class_set_props(dc, bitband_properties);
647dd285b06SPaolo Bonzini }
648dd285b06SPaolo Bonzini
649dd285b06SPaolo Bonzini static const TypeInfo bitband_info = {
650936230a7SAndreas Färber .name = TYPE_BITBAND,
651dd285b06SPaolo Bonzini .parent = TYPE_SYS_BUS_DEVICE,
652dd285b06SPaolo Bonzini .instance_size = sizeof(BitBandState),
6533f5ab254Sxiaoqiang.zhao .instance_init = bitband_init,
654dd285b06SPaolo Bonzini .class_init = bitband_class_init,
655dd285b06SPaolo Bonzini };
656dd285b06SPaolo Bonzini
armv7m_register_types(void)657dd285b06SPaolo Bonzini static void armv7m_register_types(void)
658dd285b06SPaolo Bonzini {
659dd285b06SPaolo Bonzini type_register_static(&bitband_info);
66056b7c66fSPeter Maydell type_register_static(&armv7m_info);
661dd285b06SPaolo Bonzini }
662dd285b06SPaolo Bonzini
663dd285b06SPaolo Bonzini type_init(armv7m_register_types)
664