1*cc28296dSAndrew Baumann /* 2*cc28296dSAndrew Baumann * Rasperry Pi 2 emulation ARM control logic module. 3*cc28296dSAndrew Baumann * Copyright (c) 2015, Microsoft 4*cc28296dSAndrew Baumann * Written by Andrew Baumann 5*cc28296dSAndrew Baumann * 6*cc28296dSAndrew Baumann * Based on bcm2835_ic.c (Raspberry Pi emulation) (c) 2012 Gregory Estrade 7*cc28296dSAndrew Baumann * This code is licensed under the GNU GPLv2 and later. 8*cc28296dSAndrew Baumann * 9*cc28296dSAndrew Baumann * At present, only implements interrupt routing, and mailboxes (i.e., 10*cc28296dSAndrew Baumann * not local timer, PMU interrupt, or AXI counters). 11*cc28296dSAndrew Baumann * 12*cc28296dSAndrew Baumann * Ref: 13*cc28296dSAndrew Baumann * https://www.raspberrypi.org/documentation/hardware/raspberrypi/bcm2836/QA7_rev3.4.pdf 14*cc28296dSAndrew Baumann */ 15*cc28296dSAndrew Baumann 16*cc28296dSAndrew Baumann #include "hw/intc/bcm2836_control.h" 17*cc28296dSAndrew Baumann 18*cc28296dSAndrew Baumann #define REG_GPU_ROUTE 0x0c 19*cc28296dSAndrew Baumann #define REG_TIMERCONTROL 0x40 20*cc28296dSAndrew Baumann #define REG_MBOXCONTROL 0x50 21*cc28296dSAndrew Baumann #define REG_IRQSRC 0x60 22*cc28296dSAndrew Baumann #define REG_FIQSRC 0x70 23*cc28296dSAndrew Baumann #define REG_MBOX0_WR 0x80 24*cc28296dSAndrew Baumann #define REG_MBOX0_RDCLR 0xc0 25*cc28296dSAndrew Baumann #define REG_LIMIT 0x100 26*cc28296dSAndrew Baumann 27*cc28296dSAndrew Baumann #define IRQ_BIT(cntrl, num) (((cntrl) & (1 << (num))) != 0) 28*cc28296dSAndrew Baumann #define FIQ_BIT(cntrl, num) (((cntrl) & (1 << ((num) + 4))) != 0) 29*cc28296dSAndrew Baumann 30*cc28296dSAndrew Baumann #define IRQ_CNTPSIRQ 0 31*cc28296dSAndrew Baumann #define IRQ_CNTPNSIRQ 1 32*cc28296dSAndrew Baumann #define IRQ_CNTHPIRQ 2 33*cc28296dSAndrew Baumann #define IRQ_CNTVIRQ 3 34*cc28296dSAndrew Baumann #define IRQ_MAILBOX0 4 35*cc28296dSAndrew Baumann #define IRQ_MAILBOX1 5 36*cc28296dSAndrew Baumann #define IRQ_MAILBOX2 6 37*cc28296dSAndrew Baumann #define IRQ_MAILBOX3 7 38*cc28296dSAndrew Baumann #define IRQ_GPU 8 39*cc28296dSAndrew Baumann #define IRQ_PMU 9 40*cc28296dSAndrew Baumann #define IRQ_AXI 10 41*cc28296dSAndrew Baumann #define IRQ_TIMER 11 42*cc28296dSAndrew Baumann #define IRQ_MAX IRQ_TIMER 43*cc28296dSAndrew Baumann 44*cc28296dSAndrew Baumann static void deliver_local(BCM2836ControlState *s, uint8_t core, uint8_t irq, 45*cc28296dSAndrew Baumann uint32_t controlreg, uint8_t controlidx) 46*cc28296dSAndrew Baumann { 47*cc28296dSAndrew Baumann if (FIQ_BIT(controlreg, controlidx)) { 48*cc28296dSAndrew Baumann /* deliver a FIQ */ 49*cc28296dSAndrew Baumann s->fiqsrc[core] |= (uint32_t)1 << irq; 50*cc28296dSAndrew Baumann } else if (IRQ_BIT(controlreg, controlidx)) { 51*cc28296dSAndrew Baumann /* deliver an IRQ */ 52*cc28296dSAndrew Baumann s->irqsrc[core] |= (uint32_t)1 << irq; 53*cc28296dSAndrew Baumann } else { 54*cc28296dSAndrew Baumann /* the interrupt is masked */ 55*cc28296dSAndrew Baumann } 56*cc28296dSAndrew Baumann } 57*cc28296dSAndrew Baumann 58*cc28296dSAndrew Baumann /* Update interrupts. */ 59*cc28296dSAndrew Baumann static void bcm2836_control_update(BCM2836ControlState *s) 60*cc28296dSAndrew Baumann { 61*cc28296dSAndrew Baumann int i, j; 62*cc28296dSAndrew Baumann 63*cc28296dSAndrew Baumann /* reset pending IRQs/FIQs */ 64*cc28296dSAndrew Baumann for (i = 0; i < BCM2836_NCORES; i++) { 65*cc28296dSAndrew Baumann s->irqsrc[i] = s->fiqsrc[i] = 0; 66*cc28296dSAndrew Baumann } 67*cc28296dSAndrew Baumann 68*cc28296dSAndrew Baumann /* apply routing logic, update status regs */ 69*cc28296dSAndrew Baumann if (s->gpu_irq) { 70*cc28296dSAndrew Baumann assert(s->route_gpu_irq < BCM2836_NCORES); 71*cc28296dSAndrew Baumann s->irqsrc[s->route_gpu_irq] |= (uint32_t)1 << IRQ_GPU; 72*cc28296dSAndrew Baumann } 73*cc28296dSAndrew Baumann 74*cc28296dSAndrew Baumann if (s->gpu_fiq) { 75*cc28296dSAndrew Baumann assert(s->route_gpu_fiq < BCM2836_NCORES); 76*cc28296dSAndrew Baumann s->fiqsrc[s->route_gpu_fiq] |= (uint32_t)1 << IRQ_GPU; 77*cc28296dSAndrew Baumann } 78*cc28296dSAndrew Baumann 79*cc28296dSAndrew Baumann for (i = 0; i < BCM2836_NCORES; i++) { 80*cc28296dSAndrew Baumann /* handle local timer interrupts for this core */ 81*cc28296dSAndrew Baumann if (s->timerirqs[i]) { 82*cc28296dSAndrew Baumann assert(s->timerirqs[i] < (1 << (IRQ_CNTVIRQ + 1))); /* sane mask? */ 83*cc28296dSAndrew Baumann for (j = 0; j <= IRQ_CNTVIRQ; j++) { 84*cc28296dSAndrew Baumann if ((s->timerirqs[i] & (1 << j)) != 0) { 85*cc28296dSAndrew Baumann /* local interrupt j is set */ 86*cc28296dSAndrew Baumann deliver_local(s, i, j, s->timercontrol[i], j); 87*cc28296dSAndrew Baumann } 88*cc28296dSAndrew Baumann } 89*cc28296dSAndrew Baumann } 90*cc28296dSAndrew Baumann 91*cc28296dSAndrew Baumann /* handle mailboxes for this core */ 92*cc28296dSAndrew Baumann for (j = 0; j < BCM2836_MBPERCORE; j++) { 93*cc28296dSAndrew Baumann if (s->mailboxes[i * BCM2836_MBPERCORE + j] != 0) { 94*cc28296dSAndrew Baumann /* mailbox j is set */ 95*cc28296dSAndrew Baumann deliver_local(s, i, j + IRQ_MAILBOX0, s->mailboxcontrol[i], j); 96*cc28296dSAndrew Baumann } 97*cc28296dSAndrew Baumann } 98*cc28296dSAndrew Baumann } 99*cc28296dSAndrew Baumann 100*cc28296dSAndrew Baumann /* call set_irq appropriately for each output */ 101*cc28296dSAndrew Baumann for (i = 0; i < BCM2836_NCORES; i++) { 102*cc28296dSAndrew Baumann qemu_set_irq(s->irq[i], s->irqsrc[i] != 0); 103*cc28296dSAndrew Baumann qemu_set_irq(s->fiq[i], s->fiqsrc[i] != 0); 104*cc28296dSAndrew Baumann } 105*cc28296dSAndrew Baumann } 106*cc28296dSAndrew Baumann 107*cc28296dSAndrew Baumann static void bcm2836_control_set_local_irq(void *opaque, int core, int local_irq, 108*cc28296dSAndrew Baumann int level) 109*cc28296dSAndrew Baumann { 110*cc28296dSAndrew Baumann BCM2836ControlState *s = opaque; 111*cc28296dSAndrew Baumann 112*cc28296dSAndrew Baumann assert(core >= 0 && core < BCM2836_NCORES); 113*cc28296dSAndrew Baumann assert(local_irq >= 0 && local_irq <= IRQ_CNTVIRQ); 114*cc28296dSAndrew Baumann 115*cc28296dSAndrew Baumann s->timerirqs[core] = deposit32(s->timerirqs[core], local_irq, 1, !!level); 116*cc28296dSAndrew Baumann 117*cc28296dSAndrew Baumann bcm2836_control_update(s); 118*cc28296dSAndrew Baumann } 119*cc28296dSAndrew Baumann 120*cc28296dSAndrew Baumann /* XXX: the following wrapper functions are a kludgy workaround, 121*cc28296dSAndrew Baumann * needed because I can't seem to pass useful information in the "irq" 122*cc28296dSAndrew Baumann * parameter when using named interrupts. Feel free to clean this up! 123*cc28296dSAndrew Baumann */ 124*cc28296dSAndrew Baumann 125*cc28296dSAndrew Baumann static void bcm2836_control_set_local_irq0(void *opaque, int core, int level) 126*cc28296dSAndrew Baumann { 127*cc28296dSAndrew Baumann bcm2836_control_set_local_irq(opaque, core, 0, level); 128*cc28296dSAndrew Baumann } 129*cc28296dSAndrew Baumann 130*cc28296dSAndrew Baumann static void bcm2836_control_set_local_irq1(void *opaque, int core, int level) 131*cc28296dSAndrew Baumann { 132*cc28296dSAndrew Baumann bcm2836_control_set_local_irq(opaque, core, 1, level); 133*cc28296dSAndrew Baumann } 134*cc28296dSAndrew Baumann 135*cc28296dSAndrew Baumann static void bcm2836_control_set_local_irq2(void *opaque, int core, int level) 136*cc28296dSAndrew Baumann { 137*cc28296dSAndrew Baumann bcm2836_control_set_local_irq(opaque, core, 2, level); 138*cc28296dSAndrew Baumann } 139*cc28296dSAndrew Baumann 140*cc28296dSAndrew Baumann static void bcm2836_control_set_local_irq3(void *opaque, int core, int level) 141*cc28296dSAndrew Baumann { 142*cc28296dSAndrew Baumann bcm2836_control_set_local_irq(opaque, core, 3, level); 143*cc28296dSAndrew Baumann } 144*cc28296dSAndrew Baumann 145*cc28296dSAndrew Baumann static void bcm2836_control_set_gpu_irq(void *opaque, int irq, int level) 146*cc28296dSAndrew Baumann { 147*cc28296dSAndrew Baumann BCM2836ControlState *s = opaque; 148*cc28296dSAndrew Baumann 149*cc28296dSAndrew Baumann s->gpu_irq = level; 150*cc28296dSAndrew Baumann 151*cc28296dSAndrew Baumann bcm2836_control_update(s); 152*cc28296dSAndrew Baumann } 153*cc28296dSAndrew Baumann 154*cc28296dSAndrew Baumann static void bcm2836_control_set_gpu_fiq(void *opaque, int irq, int level) 155*cc28296dSAndrew Baumann { 156*cc28296dSAndrew Baumann BCM2836ControlState *s = opaque; 157*cc28296dSAndrew Baumann 158*cc28296dSAndrew Baumann s->gpu_fiq = level; 159*cc28296dSAndrew Baumann 160*cc28296dSAndrew Baumann bcm2836_control_update(s); 161*cc28296dSAndrew Baumann } 162*cc28296dSAndrew Baumann 163*cc28296dSAndrew Baumann static uint64_t bcm2836_control_read(void *opaque, hwaddr offset, unsigned size) 164*cc28296dSAndrew Baumann { 165*cc28296dSAndrew Baumann BCM2836ControlState *s = opaque; 166*cc28296dSAndrew Baumann 167*cc28296dSAndrew Baumann if (offset == REG_GPU_ROUTE) { 168*cc28296dSAndrew Baumann assert(s->route_gpu_fiq < BCM2836_NCORES 169*cc28296dSAndrew Baumann && s->route_gpu_irq < BCM2836_NCORES); 170*cc28296dSAndrew Baumann return ((uint32_t)s->route_gpu_fiq << 2) | s->route_gpu_irq; 171*cc28296dSAndrew Baumann } else if (offset >= REG_TIMERCONTROL && offset < REG_MBOXCONTROL) { 172*cc28296dSAndrew Baumann return s->timercontrol[(offset - REG_TIMERCONTROL) >> 2]; 173*cc28296dSAndrew Baumann } else if (offset >= REG_MBOXCONTROL && offset < REG_IRQSRC) { 174*cc28296dSAndrew Baumann return s->mailboxcontrol[(offset - REG_MBOXCONTROL) >> 2]; 175*cc28296dSAndrew Baumann } else if (offset >= REG_IRQSRC && offset < REG_FIQSRC) { 176*cc28296dSAndrew Baumann return s->irqsrc[(offset - REG_IRQSRC) >> 2]; 177*cc28296dSAndrew Baumann } else if (offset >= REG_FIQSRC && offset < REG_MBOX0_WR) { 178*cc28296dSAndrew Baumann return s->fiqsrc[(offset - REG_FIQSRC) >> 2]; 179*cc28296dSAndrew Baumann } else if (offset >= REG_MBOX0_RDCLR && offset < REG_LIMIT) { 180*cc28296dSAndrew Baumann return s->mailboxes[(offset - REG_MBOX0_RDCLR) >> 2]; 181*cc28296dSAndrew Baumann } else { 182*cc28296dSAndrew Baumann qemu_log_mask(LOG_GUEST_ERROR, "%s: Bad offset %"HWADDR_PRIx"\n", 183*cc28296dSAndrew Baumann __func__, offset); 184*cc28296dSAndrew Baumann return 0; 185*cc28296dSAndrew Baumann } 186*cc28296dSAndrew Baumann } 187*cc28296dSAndrew Baumann 188*cc28296dSAndrew Baumann static void bcm2836_control_write(void *opaque, hwaddr offset, 189*cc28296dSAndrew Baumann uint64_t val, unsigned size) 190*cc28296dSAndrew Baumann { 191*cc28296dSAndrew Baumann BCM2836ControlState *s = opaque; 192*cc28296dSAndrew Baumann 193*cc28296dSAndrew Baumann if (offset == REG_GPU_ROUTE) { 194*cc28296dSAndrew Baumann s->route_gpu_irq = val & 0x3; 195*cc28296dSAndrew Baumann s->route_gpu_fiq = (val >> 2) & 0x3; 196*cc28296dSAndrew Baumann } else if (offset >= REG_TIMERCONTROL && offset < REG_MBOXCONTROL) { 197*cc28296dSAndrew Baumann s->timercontrol[(offset - REG_TIMERCONTROL) >> 2] = val & 0xff; 198*cc28296dSAndrew Baumann } else if (offset >= REG_MBOXCONTROL && offset < REG_IRQSRC) { 199*cc28296dSAndrew Baumann s->mailboxcontrol[(offset - REG_MBOXCONTROL) >> 2] = val & 0xff; 200*cc28296dSAndrew Baumann } else if (offset >= REG_MBOX0_WR && offset < REG_MBOX0_RDCLR) { 201*cc28296dSAndrew Baumann s->mailboxes[(offset - REG_MBOX0_WR) >> 2] |= val; 202*cc28296dSAndrew Baumann } else if (offset >= REG_MBOX0_RDCLR && offset < REG_LIMIT) { 203*cc28296dSAndrew Baumann s->mailboxes[(offset - REG_MBOX0_RDCLR) >> 2] &= ~val; 204*cc28296dSAndrew Baumann } else { 205*cc28296dSAndrew Baumann qemu_log_mask(LOG_GUEST_ERROR, "%s: Bad offset %"HWADDR_PRIx"\n", 206*cc28296dSAndrew Baumann __func__, offset); 207*cc28296dSAndrew Baumann return; 208*cc28296dSAndrew Baumann } 209*cc28296dSAndrew Baumann 210*cc28296dSAndrew Baumann bcm2836_control_update(s); 211*cc28296dSAndrew Baumann } 212*cc28296dSAndrew Baumann 213*cc28296dSAndrew Baumann static const MemoryRegionOps bcm2836_control_ops = { 214*cc28296dSAndrew Baumann .read = bcm2836_control_read, 215*cc28296dSAndrew Baumann .write = bcm2836_control_write, 216*cc28296dSAndrew Baumann .endianness = DEVICE_NATIVE_ENDIAN, 217*cc28296dSAndrew Baumann .valid.min_access_size = 4, 218*cc28296dSAndrew Baumann .valid.max_access_size = 4, 219*cc28296dSAndrew Baumann }; 220*cc28296dSAndrew Baumann 221*cc28296dSAndrew Baumann static void bcm2836_control_reset(DeviceState *d) 222*cc28296dSAndrew Baumann { 223*cc28296dSAndrew Baumann BCM2836ControlState *s = BCM2836_CONTROL(d); 224*cc28296dSAndrew Baumann int i; 225*cc28296dSAndrew Baumann 226*cc28296dSAndrew Baumann s->route_gpu_irq = s->route_gpu_fiq = 0; 227*cc28296dSAndrew Baumann 228*cc28296dSAndrew Baumann for (i = 0; i < BCM2836_NCORES; i++) { 229*cc28296dSAndrew Baumann s->timercontrol[i] = 0; 230*cc28296dSAndrew Baumann s->mailboxcontrol[i] = 0; 231*cc28296dSAndrew Baumann } 232*cc28296dSAndrew Baumann 233*cc28296dSAndrew Baumann for (i = 0; i < BCM2836_NCORES * BCM2836_MBPERCORE; i++) { 234*cc28296dSAndrew Baumann s->mailboxes[i] = 0; 235*cc28296dSAndrew Baumann } 236*cc28296dSAndrew Baumann } 237*cc28296dSAndrew Baumann 238*cc28296dSAndrew Baumann static void bcm2836_control_init(Object *obj) 239*cc28296dSAndrew Baumann { 240*cc28296dSAndrew Baumann BCM2836ControlState *s = BCM2836_CONTROL(obj); 241*cc28296dSAndrew Baumann DeviceState *dev = DEVICE(obj); 242*cc28296dSAndrew Baumann 243*cc28296dSAndrew Baumann memory_region_init_io(&s->iomem, obj, &bcm2836_control_ops, s, 244*cc28296dSAndrew Baumann TYPE_BCM2836_CONTROL, REG_LIMIT); 245*cc28296dSAndrew Baumann sysbus_init_mmio(SYS_BUS_DEVICE(s), &s->iomem); 246*cc28296dSAndrew Baumann 247*cc28296dSAndrew Baumann /* inputs from each CPU core */ 248*cc28296dSAndrew Baumann qdev_init_gpio_in_named(dev, bcm2836_control_set_local_irq0, "cntpsirq", 249*cc28296dSAndrew Baumann BCM2836_NCORES); 250*cc28296dSAndrew Baumann qdev_init_gpio_in_named(dev, bcm2836_control_set_local_irq1, "cntpnsirq", 251*cc28296dSAndrew Baumann BCM2836_NCORES); 252*cc28296dSAndrew Baumann qdev_init_gpio_in_named(dev, bcm2836_control_set_local_irq2, "cnthpirq", 253*cc28296dSAndrew Baumann BCM2836_NCORES); 254*cc28296dSAndrew Baumann qdev_init_gpio_in_named(dev, bcm2836_control_set_local_irq3, "cntvirq", 255*cc28296dSAndrew Baumann BCM2836_NCORES); 256*cc28296dSAndrew Baumann 257*cc28296dSAndrew Baumann /* IRQ and FIQ inputs from upstream bcm2835 controller */ 258*cc28296dSAndrew Baumann qdev_init_gpio_in_named(dev, bcm2836_control_set_gpu_irq, "gpu-irq", 1); 259*cc28296dSAndrew Baumann qdev_init_gpio_in_named(dev, bcm2836_control_set_gpu_fiq, "gpu-fiq", 1); 260*cc28296dSAndrew Baumann 261*cc28296dSAndrew Baumann /* outputs to CPU cores */ 262*cc28296dSAndrew Baumann qdev_init_gpio_out_named(dev, s->irq, "irq", BCM2836_NCORES); 263*cc28296dSAndrew Baumann qdev_init_gpio_out_named(dev, s->fiq, "fiq", BCM2836_NCORES); 264*cc28296dSAndrew Baumann } 265*cc28296dSAndrew Baumann 266*cc28296dSAndrew Baumann static const VMStateDescription vmstate_bcm2836_control = { 267*cc28296dSAndrew Baumann .name = TYPE_BCM2836_CONTROL, 268*cc28296dSAndrew Baumann .version_id = 1, 269*cc28296dSAndrew Baumann .minimum_version_id = 1, 270*cc28296dSAndrew Baumann .fields = (VMStateField[]) { 271*cc28296dSAndrew Baumann VMSTATE_UINT32_ARRAY(mailboxes, BCM2836ControlState, 272*cc28296dSAndrew Baumann BCM2836_NCORES * BCM2836_MBPERCORE), 273*cc28296dSAndrew Baumann VMSTATE_UINT8(route_gpu_irq, BCM2836ControlState), 274*cc28296dSAndrew Baumann VMSTATE_UINT8(route_gpu_fiq, BCM2836ControlState), 275*cc28296dSAndrew Baumann VMSTATE_UINT32_ARRAY(timercontrol, BCM2836ControlState, BCM2836_NCORES), 276*cc28296dSAndrew Baumann VMSTATE_UINT32_ARRAY(mailboxcontrol, BCM2836ControlState, 277*cc28296dSAndrew Baumann BCM2836_NCORES), 278*cc28296dSAndrew Baumann VMSTATE_END_OF_LIST() 279*cc28296dSAndrew Baumann } 280*cc28296dSAndrew Baumann }; 281*cc28296dSAndrew Baumann 282*cc28296dSAndrew Baumann static void bcm2836_control_class_init(ObjectClass *klass, void *data) 283*cc28296dSAndrew Baumann { 284*cc28296dSAndrew Baumann DeviceClass *dc = DEVICE_CLASS(klass); 285*cc28296dSAndrew Baumann 286*cc28296dSAndrew Baumann dc->reset = bcm2836_control_reset; 287*cc28296dSAndrew Baumann dc->vmsd = &vmstate_bcm2836_control; 288*cc28296dSAndrew Baumann } 289*cc28296dSAndrew Baumann 290*cc28296dSAndrew Baumann static TypeInfo bcm2836_control_info = { 291*cc28296dSAndrew Baumann .name = TYPE_BCM2836_CONTROL, 292*cc28296dSAndrew Baumann .parent = TYPE_SYS_BUS_DEVICE, 293*cc28296dSAndrew Baumann .instance_size = sizeof(BCM2836ControlState), 294*cc28296dSAndrew Baumann .class_init = bcm2836_control_class_init, 295*cc28296dSAndrew Baumann .instance_init = bcm2836_control_init, 296*cc28296dSAndrew Baumann }; 297*cc28296dSAndrew Baumann 298*cc28296dSAndrew Baumann static void bcm2836_control_register_types(void) 299*cc28296dSAndrew Baumann { 300*cc28296dSAndrew Baumann type_register_static(&bcm2836_control_info); 301*cc28296dSAndrew Baumann } 302*cc28296dSAndrew Baumann 303*cc28296dSAndrew Baumann type_init(bcm2836_control_register_types) 304