xref: /openbmc/qemu/hw/timer/pxa2xx_timer.c (revision 0b8fa32f551e863bb548a11394239239270dd3dc)
13bd88451SPaolo Bonzini /*
23bd88451SPaolo Bonzini  * Intel XScale PXA255/270 OS Timers.
33bd88451SPaolo Bonzini  *
43bd88451SPaolo Bonzini  * Copyright (c) 2006 Openedhand Ltd.
53bd88451SPaolo Bonzini  * Copyright (c) 2006 Thorsten Zitterell
63bd88451SPaolo Bonzini  *
73bd88451SPaolo Bonzini  * This code is licensed under the GPL.
83bd88451SPaolo Bonzini  */
93bd88451SPaolo Bonzini 
108ef94f0bSPeter Maydell #include "qemu/osdep.h"
113bd88451SPaolo Bonzini #include "hw/hw.h"
123bd88451SPaolo Bonzini #include "qemu/timer.h"
133bd88451SPaolo Bonzini #include "sysemu/sysemu.h"
143bd88451SPaolo Bonzini #include "hw/arm/pxa.h"
153bd88451SPaolo Bonzini #include "hw/sysbus.h"
162ba63e4aSPhilippe Mathieu-Daudé #include "qemu/log.h"
17*0b8fa32fSMarkus Armbruster #include "qemu/module.h"
183bd88451SPaolo Bonzini 
193bd88451SPaolo Bonzini #define OSMR0	0x00
203bd88451SPaolo Bonzini #define OSMR1	0x04
213bd88451SPaolo Bonzini #define OSMR2	0x08
223bd88451SPaolo Bonzini #define OSMR3	0x0c
233bd88451SPaolo Bonzini #define OSMR4	0x80
243bd88451SPaolo Bonzini #define OSMR5	0x84
253bd88451SPaolo Bonzini #define OSMR6	0x88
263bd88451SPaolo Bonzini #define OSMR7	0x8c
273bd88451SPaolo Bonzini #define OSMR8	0x90
283bd88451SPaolo Bonzini #define OSMR9	0x94
293bd88451SPaolo Bonzini #define OSMR10	0x98
303bd88451SPaolo Bonzini #define OSMR11	0x9c
313bd88451SPaolo Bonzini #define OSCR	0x10	/* OS Timer Count */
323bd88451SPaolo Bonzini #define OSCR4	0x40
333bd88451SPaolo Bonzini #define OSCR5	0x44
343bd88451SPaolo Bonzini #define OSCR6	0x48
353bd88451SPaolo Bonzini #define OSCR7	0x4c
363bd88451SPaolo Bonzini #define OSCR8	0x50
373bd88451SPaolo Bonzini #define OSCR9	0x54
383bd88451SPaolo Bonzini #define OSCR10	0x58
393bd88451SPaolo Bonzini #define OSCR11	0x5c
403bd88451SPaolo Bonzini #define OSSR	0x14	/* Timer status register */
413bd88451SPaolo Bonzini #define OWER	0x18
423bd88451SPaolo Bonzini #define OIER	0x1c	/* Interrupt enable register  3-0 to E3-E0 */
433bd88451SPaolo Bonzini #define OMCR4	0xc0	/* OS Match Control registers */
443bd88451SPaolo Bonzini #define OMCR5	0xc4
453bd88451SPaolo Bonzini #define OMCR6	0xc8
463bd88451SPaolo Bonzini #define OMCR7	0xcc
473bd88451SPaolo Bonzini #define OMCR8	0xd0
483bd88451SPaolo Bonzini #define OMCR9	0xd4
493bd88451SPaolo Bonzini #define OMCR10	0xd8
503bd88451SPaolo Bonzini #define OMCR11	0xdc
513bd88451SPaolo Bonzini #define OSNR	0x20
523bd88451SPaolo Bonzini 
533bd88451SPaolo Bonzini #define PXA25X_FREQ	3686400	/* 3.6864 MHz */
543bd88451SPaolo Bonzini #define PXA27X_FREQ	3250000	/* 3.25 MHz */
553bd88451SPaolo Bonzini 
563bd88451SPaolo Bonzini static int pxa2xx_timer4_freq[8] = {
573bd88451SPaolo Bonzini     [0] = 0,
583bd88451SPaolo Bonzini     [1] = 32768,
593bd88451SPaolo Bonzini     [2] = 1000,
603bd88451SPaolo Bonzini     [3] = 1,
613bd88451SPaolo Bonzini     [4] = 1000000,
623bd88451SPaolo Bonzini     /* [5] is the "Externally supplied clock".  Assign if necessary.  */
633bd88451SPaolo Bonzini     [5 ... 7] = 0,
643bd88451SPaolo Bonzini };
653bd88451SPaolo Bonzini 
66feea4361SAndreas Färber #define TYPE_PXA2XX_TIMER "pxa2xx-timer"
67feea4361SAndreas Färber #define PXA2XX_TIMER(obj) \
68feea4361SAndreas Färber     OBJECT_CHECK(PXA2xxTimerInfo, (obj), TYPE_PXA2XX_TIMER)
69feea4361SAndreas Färber 
703bd88451SPaolo Bonzini typedef struct PXA2xxTimerInfo PXA2xxTimerInfo;
713bd88451SPaolo Bonzini 
723bd88451SPaolo Bonzini typedef struct {
733bd88451SPaolo Bonzini     uint32_t value;
743bd88451SPaolo Bonzini     qemu_irq irq;
753bd88451SPaolo Bonzini     QEMUTimer *qtimer;
763bd88451SPaolo Bonzini     int num;
773bd88451SPaolo Bonzini     PXA2xxTimerInfo *info;
783bd88451SPaolo Bonzini } PXA2xxTimer0;
793bd88451SPaolo Bonzini 
803bd88451SPaolo Bonzini typedef struct {
813bd88451SPaolo Bonzini     PXA2xxTimer0 tm;
823bd88451SPaolo Bonzini     int32_t oldclock;
833bd88451SPaolo Bonzini     int32_t clock;
843bd88451SPaolo Bonzini     uint64_t lastload;
853bd88451SPaolo Bonzini     uint32_t freq;
863bd88451SPaolo Bonzini     uint32_t control;
873bd88451SPaolo Bonzini } PXA2xxTimer4;
883bd88451SPaolo Bonzini 
893bd88451SPaolo Bonzini struct PXA2xxTimerInfo {
90feea4361SAndreas Färber     SysBusDevice parent_obj;
91feea4361SAndreas Färber 
923bd88451SPaolo Bonzini     MemoryRegion iomem;
933bd88451SPaolo Bonzini     uint32_t flags;
943bd88451SPaolo Bonzini 
953bd88451SPaolo Bonzini     int32_t clock;
963bd88451SPaolo Bonzini     int32_t oldclock;
973bd88451SPaolo Bonzini     uint64_t lastload;
983bd88451SPaolo Bonzini     uint32_t freq;
993bd88451SPaolo Bonzini     PXA2xxTimer0 timer[4];
1003bd88451SPaolo Bonzini     uint32_t events;
1013bd88451SPaolo Bonzini     uint32_t irq_enabled;
1023bd88451SPaolo Bonzini     uint32_t reset3;
1033bd88451SPaolo Bonzini     uint32_t snapshot;
1043bd88451SPaolo Bonzini 
1053bd88451SPaolo Bonzini     qemu_irq irq4;
1063bd88451SPaolo Bonzini     PXA2xxTimer4 tm4[8];
1073bd88451SPaolo Bonzini };
1083bd88451SPaolo Bonzini 
1093bd88451SPaolo Bonzini #define PXA2XX_TIMER_HAVE_TM4	0
1103bd88451SPaolo Bonzini 
1113bd88451SPaolo Bonzini static inline int pxa2xx_timer_has_tm4(PXA2xxTimerInfo *s)
1123bd88451SPaolo Bonzini {
1133bd88451SPaolo Bonzini     return s->flags & (1 << PXA2XX_TIMER_HAVE_TM4);
1143bd88451SPaolo Bonzini }
1153bd88451SPaolo Bonzini 
1163bd88451SPaolo Bonzini static void pxa2xx_timer_update(void *opaque, uint64_t now_qemu)
1173bd88451SPaolo Bonzini {
1183bd88451SPaolo Bonzini     PXA2xxTimerInfo *s = (PXA2xxTimerInfo *) opaque;
1193bd88451SPaolo Bonzini     int i;
1203bd88451SPaolo Bonzini     uint32_t now_vm;
1213bd88451SPaolo Bonzini     uint64_t new_qemu;
1223bd88451SPaolo Bonzini 
1233bd88451SPaolo Bonzini     now_vm = s->clock +
12473bcb24dSRutuja Shah             muldiv64(now_qemu - s->lastload, s->freq, NANOSECONDS_PER_SECOND);
1253bd88451SPaolo Bonzini 
1263bd88451SPaolo Bonzini     for (i = 0; i < 4; i ++) {
1273bd88451SPaolo Bonzini         new_qemu = now_qemu + muldiv64((uint32_t) (s->timer[i].value - now_vm),
12873bcb24dSRutuja Shah                         NANOSECONDS_PER_SECOND, s->freq);
129bc72ad67SAlex Bligh         timer_mod(s->timer[i].qtimer, new_qemu);
1303bd88451SPaolo Bonzini     }
1313bd88451SPaolo Bonzini }
1323bd88451SPaolo Bonzini 
1333bd88451SPaolo Bonzini static void pxa2xx_timer_update4(void *opaque, uint64_t now_qemu, int n)
1343bd88451SPaolo Bonzini {
1353bd88451SPaolo Bonzini     PXA2xxTimerInfo *s = (PXA2xxTimerInfo *) opaque;
1363bd88451SPaolo Bonzini     uint32_t now_vm;
1373bd88451SPaolo Bonzini     uint64_t new_qemu;
1383bd88451SPaolo Bonzini     static const int counters[8] = { 0, 0, 0, 0, 4, 4, 6, 6 };
1393bd88451SPaolo Bonzini     int counter;
1403bd88451SPaolo Bonzini 
1413bd88451SPaolo Bonzini     if (s->tm4[n].control & (1 << 7))
1423bd88451SPaolo Bonzini         counter = n;
1433bd88451SPaolo Bonzini     else
1443bd88451SPaolo Bonzini         counter = counters[n];
1453bd88451SPaolo Bonzini 
1463bd88451SPaolo Bonzini     if (!s->tm4[counter].freq) {
147bc72ad67SAlex Bligh         timer_del(s->tm4[n].tm.qtimer);
1483bd88451SPaolo Bonzini         return;
1493bd88451SPaolo Bonzini     }
1503bd88451SPaolo Bonzini 
1513bd88451SPaolo Bonzini     now_vm = s->tm4[counter].clock + muldiv64(now_qemu -
1523bd88451SPaolo Bonzini                     s->tm4[counter].lastload,
15373bcb24dSRutuja Shah                     s->tm4[counter].freq, NANOSECONDS_PER_SECOND);
1543bd88451SPaolo Bonzini 
1553bd88451SPaolo Bonzini     new_qemu = now_qemu + muldiv64((uint32_t) (s->tm4[n].tm.value - now_vm),
15673bcb24dSRutuja Shah                     NANOSECONDS_PER_SECOND, s->tm4[counter].freq);
157bc72ad67SAlex Bligh     timer_mod(s->tm4[n].tm.qtimer, new_qemu);
1583bd88451SPaolo Bonzini }
1593bd88451SPaolo Bonzini 
1603bd88451SPaolo Bonzini static uint64_t pxa2xx_timer_read(void *opaque, hwaddr offset,
1613bd88451SPaolo Bonzini                                   unsigned size)
1623bd88451SPaolo Bonzini {
1633bd88451SPaolo Bonzini     PXA2xxTimerInfo *s = (PXA2xxTimerInfo *) opaque;
1643bd88451SPaolo Bonzini     int tm = 0;
1653bd88451SPaolo Bonzini 
1663bd88451SPaolo Bonzini     switch (offset) {
1673bd88451SPaolo Bonzini     case OSMR3:  tm ++;
1683bd88451SPaolo Bonzini         /* fall through */
1693bd88451SPaolo Bonzini     case OSMR2:  tm ++;
1703bd88451SPaolo Bonzini         /* fall through */
1713bd88451SPaolo Bonzini     case OSMR1:  tm ++;
1723bd88451SPaolo Bonzini         /* fall through */
1733bd88451SPaolo Bonzini     case OSMR0:
1743bd88451SPaolo Bonzini         return s->timer[tm].value;
1753bd88451SPaolo Bonzini     case OSMR11: tm ++;
1763bd88451SPaolo Bonzini         /* fall through */
1773bd88451SPaolo Bonzini     case OSMR10: tm ++;
1783bd88451SPaolo Bonzini         /* fall through */
1793bd88451SPaolo Bonzini     case OSMR9:  tm ++;
1803bd88451SPaolo Bonzini         /* fall through */
1813bd88451SPaolo Bonzini     case OSMR8:  tm ++;
1823bd88451SPaolo Bonzini         /* fall through */
1833bd88451SPaolo Bonzini     case OSMR7:  tm ++;
1843bd88451SPaolo Bonzini         /* fall through */
1853bd88451SPaolo Bonzini     case OSMR6:  tm ++;
1863bd88451SPaolo Bonzini         /* fall through */
1873bd88451SPaolo Bonzini     case OSMR5:  tm ++;
1883bd88451SPaolo Bonzini         /* fall through */
1893bd88451SPaolo Bonzini     case OSMR4:
1903bd88451SPaolo Bonzini         if (!pxa2xx_timer_has_tm4(s))
1913bd88451SPaolo Bonzini             goto badreg;
1923bd88451SPaolo Bonzini         return s->tm4[tm].tm.value;
1933bd88451SPaolo Bonzini     case OSCR:
194bc72ad67SAlex Bligh         return s->clock + muldiv64(qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) -
19573bcb24dSRutuja Shah                         s->lastload, s->freq, NANOSECONDS_PER_SECOND);
1963bd88451SPaolo Bonzini     case OSCR11: tm ++;
1973bd88451SPaolo Bonzini         /* fall through */
1983bd88451SPaolo Bonzini     case OSCR10: tm ++;
1993bd88451SPaolo Bonzini         /* fall through */
2003bd88451SPaolo Bonzini     case OSCR9:  tm ++;
2013bd88451SPaolo Bonzini         /* fall through */
2023bd88451SPaolo Bonzini     case OSCR8:  tm ++;
2033bd88451SPaolo Bonzini         /* fall through */
2043bd88451SPaolo Bonzini     case OSCR7:  tm ++;
2053bd88451SPaolo Bonzini         /* fall through */
2063bd88451SPaolo Bonzini     case OSCR6:  tm ++;
2073bd88451SPaolo Bonzini         /* fall through */
2083bd88451SPaolo Bonzini     case OSCR5:  tm ++;
2093bd88451SPaolo Bonzini         /* fall through */
2103bd88451SPaolo Bonzini     case OSCR4:
2113bd88451SPaolo Bonzini         if (!pxa2xx_timer_has_tm4(s))
2123bd88451SPaolo Bonzini             goto badreg;
2133bd88451SPaolo Bonzini 
2143bd88451SPaolo Bonzini         if ((tm == 9 - 4 || tm == 11 - 4) && (s->tm4[tm].control & (1 << 9))) {
2153bd88451SPaolo Bonzini             if (s->tm4[tm - 1].freq)
2163bd88451SPaolo Bonzini                 s->snapshot = s->tm4[tm - 1].clock + muldiv64(
217bc72ad67SAlex Bligh                                 qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) -
2183bd88451SPaolo Bonzini                                 s->tm4[tm - 1].lastload,
21973bcb24dSRutuja Shah                                 s->tm4[tm - 1].freq, NANOSECONDS_PER_SECOND);
2203bd88451SPaolo Bonzini             else
2213bd88451SPaolo Bonzini                 s->snapshot = s->tm4[tm - 1].clock;
2223bd88451SPaolo Bonzini         }
2233bd88451SPaolo Bonzini 
2243bd88451SPaolo Bonzini         if (!s->tm4[tm].freq)
2253bd88451SPaolo Bonzini             return s->tm4[tm].clock;
22673bcb24dSRutuja Shah         return s->tm4[tm].clock +
22773bcb24dSRutuja Shah             muldiv64(qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) -
22873bcb24dSRutuja Shah                      s->tm4[tm].lastload, s->tm4[tm].freq,
22973bcb24dSRutuja Shah                      NANOSECONDS_PER_SECOND);
2303bd88451SPaolo Bonzini     case OIER:
2313bd88451SPaolo Bonzini         return s->irq_enabled;
2323bd88451SPaolo Bonzini     case OSSR:	/* Status register */
2333bd88451SPaolo Bonzini         return s->events;
2343bd88451SPaolo Bonzini     case OWER:
2353bd88451SPaolo Bonzini         return s->reset3;
2363bd88451SPaolo Bonzini     case OMCR11: tm ++;
2373bd88451SPaolo Bonzini         /* fall through */
2383bd88451SPaolo Bonzini     case OMCR10: tm ++;
2393bd88451SPaolo Bonzini         /* fall through */
2403bd88451SPaolo Bonzini     case OMCR9:  tm ++;
2413bd88451SPaolo Bonzini         /* fall through */
2423bd88451SPaolo Bonzini     case OMCR8:  tm ++;
2433bd88451SPaolo Bonzini         /* fall through */
2443bd88451SPaolo Bonzini     case OMCR7:  tm ++;
2453bd88451SPaolo Bonzini         /* fall through */
2463bd88451SPaolo Bonzini     case OMCR6:  tm ++;
2473bd88451SPaolo Bonzini         /* fall through */
2483bd88451SPaolo Bonzini     case OMCR5:  tm ++;
2493bd88451SPaolo Bonzini         /* fall through */
2503bd88451SPaolo Bonzini     case OMCR4:
2513bd88451SPaolo Bonzini         if (!pxa2xx_timer_has_tm4(s))
2523bd88451SPaolo Bonzini             goto badreg;
2533bd88451SPaolo Bonzini         return s->tm4[tm].control;
2543bd88451SPaolo Bonzini     case OSNR:
2553bd88451SPaolo Bonzini         return s->snapshot;
2563bd88451SPaolo Bonzini     default:
2572ba63e4aSPhilippe Mathieu-Daudé         qemu_log_mask(LOG_UNIMP,
2582ba63e4aSPhilippe Mathieu-Daudé                       "%s: unknown register 0x%02" HWADDR_PRIx "\n",
2592ba63e4aSPhilippe Mathieu-Daudé                       __func__, offset);
2602ba63e4aSPhilippe Mathieu-Daudé         break;
2613bd88451SPaolo Bonzini     badreg:
2622ba63e4aSPhilippe Mathieu-Daudé         qemu_log_mask(LOG_GUEST_ERROR,
2632ba63e4aSPhilippe Mathieu-Daudé                       "%s: incorrect register 0x%02" HWADDR_PRIx "\n",
2642ba63e4aSPhilippe Mathieu-Daudé                       __func__, offset);
2653bd88451SPaolo Bonzini     }
2663bd88451SPaolo Bonzini 
2673bd88451SPaolo Bonzini     return 0;
2683bd88451SPaolo Bonzini }
2693bd88451SPaolo Bonzini 
2703bd88451SPaolo Bonzini static void pxa2xx_timer_write(void *opaque, hwaddr offset,
2713bd88451SPaolo Bonzini                                uint64_t value, unsigned size)
2723bd88451SPaolo Bonzini {
2733bd88451SPaolo Bonzini     int i, tm = 0;
2743bd88451SPaolo Bonzini     PXA2xxTimerInfo *s = (PXA2xxTimerInfo *) opaque;
2753bd88451SPaolo Bonzini 
2763bd88451SPaolo Bonzini     switch (offset) {
2773bd88451SPaolo Bonzini     case OSMR3:  tm ++;
2783bd88451SPaolo Bonzini         /* fall through */
2793bd88451SPaolo Bonzini     case OSMR2:  tm ++;
2803bd88451SPaolo Bonzini         /* fall through */
2813bd88451SPaolo Bonzini     case OSMR1:  tm ++;
2823bd88451SPaolo Bonzini         /* fall through */
2833bd88451SPaolo Bonzini     case OSMR0:
2843bd88451SPaolo Bonzini         s->timer[tm].value = value;
285bc72ad67SAlex Bligh         pxa2xx_timer_update(s, qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL));
2863bd88451SPaolo Bonzini         break;
2873bd88451SPaolo Bonzini     case OSMR11: tm ++;
2883bd88451SPaolo Bonzini         /* fall through */
2893bd88451SPaolo Bonzini     case OSMR10: tm ++;
2903bd88451SPaolo Bonzini         /* fall through */
2913bd88451SPaolo Bonzini     case OSMR9:  tm ++;
2923bd88451SPaolo Bonzini         /* fall through */
2933bd88451SPaolo Bonzini     case OSMR8:  tm ++;
2943bd88451SPaolo Bonzini         /* fall through */
2953bd88451SPaolo Bonzini     case OSMR7:  tm ++;
2963bd88451SPaolo Bonzini         /* fall through */
2973bd88451SPaolo Bonzini     case OSMR6:  tm ++;
2983bd88451SPaolo Bonzini         /* fall through */
2993bd88451SPaolo Bonzini     case OSMR5:  tm ++;
3003bd88451SPaolo Bonzini         /* fall through */
3013bd88451SPaolo Bonzini     case OSMR4:
3023bd88451SPaolo Bonzini         if (!pxa2xx_timer_has_tm4(s))
3033bd88451SPaolo Bonzini             goto badreg;
3043bd88451SPaolo Bonzini         s->tm4[tm].tm.value = value;
305bc72ad67SAlex Bligh         pxa2xx_timer_update4(s, qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL), tm);
3063bd88451SPaolo Bonzini         break;
3073bd88451SPaolo Bonzini     case OSCR:
3083bd88451SPaolo Bonzini         s->oldclock = s->clock;
309bc72ad67SAlex Bligh         s->lastload = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL);
3103bd88451SPaolo Bonzini         s->clock = value;
3113bd88451SPaolo Bonzini         pxa2xx_timer_update(s, s->lastload);
3123bd88451SPaolo Bonzini         break;
3133bd88451SPaolo Bonzini     case OSCR11: tm ++;
3143bd88451SPaolo Bonzini         /* fall through */
3153bd88451SPaolo Bonzini     case OSCR10: tm ++;
3163bd88451SPaolo Bonzini         /* fall through */
3173bd88451SPaolo Bonzini     case OSCR9:  tm ++;
3183bd88451SPaolo Bonzini         /* fall through */
3193bd88451SPaolo Bonzini     case OSCR8:  tm ++;
3203bd88451SPaolo Bonzini         /* fall through */
3213bd88451SPaolo Bonzini     case OSCR7:  tm ++;
3223bd88451SPaolo Bonzini         /* fall through */
3233bd88451SPaolo Bonzini     case OSCR6:  tm ++;
3243bd88451SPaolo Bonzini         /* fall through */
3253bd88451SPaolo Bonzini     case OSCR5:  tm ++;
3263bd88451SPaolo Bonzini         /* fall through */
3273bd88451SPaolo Bonzini     case OSCR4:
3283bd88451SPaolo Bonzini         if (!pxa2xx_timer_has_tm4(s))
3293bd88451SPaolo Bonzini             goto badreg;
3303bd88451SPaolo Bonzini         s->tm4[tm].oldclock = s->tm4[tm].clock;
331bc72ad67SAlex Bligh         s->tm4[tm].lastload = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL);
3323bd88451SPaolo Bonzini         s->tm4[tm].clock = value;
3333bd88451SPaolo Bonzini         pxa2xx_timer_update4(s, s->tm4[tm].lastload, tm);
3343bd88451SPaolo Bonzini         break;
3353bd88451SPaolo Bonzini     case OIER:
3363bd88451SPaolo Bonzini         s->irq_enabled = value & 0xfff;
3373bd88451SPaolo Bonzini         break;
3383bd88451SPaolo Bonzini     case OSSR:	/* Status register */
3393bd88451SPaolo Bonzini         value &= s->events;
3403bd88451SPaolo Bonzini         s->events &= ~value;
3413bd88451SPaolo Bonzini         for (i = 0; i < 4; i ++, value >>= 1)
3423bd88451SPaolo Bonzini             if (value & 1)
3433bd88451SPaolo Bonzini                 qemu_irq_lower(s->timer[i].irq);
3443bd88451SPaolo Bonzini         if (pxa2xx_timer_has_tm4(s) && !(s->events & 0xff0) && value)
3453bd88451SPaolo Bonzini             qemu_irq_lower(s->irq4);
3463bd88451SPaolo Bonzini         break;
3473bd88451SPaolo Bonzini     case OWER:	/* XXX: Reset on OSMR3 match? */
3483bd88451SPaolo Bonzini         s->reset3 = value;
3493bd88451SPaolo Bonzini         break;
3503bd88451SPaolo Bonzini     case OMCR7:  tm ++;
3513bd88451SPaolo Bonzini         /* fall through */
3523bd88451SPaolo Bonzini     case OMCR6:  tm ++;
3533bd88451SPaolo Bonzini         /* fall through */
3543bd88451SPaolo Bonzini     case OMCR5:  tm ++;
3553bd88451SPaolo Bonzini         /* fall through */
3563bd88451SPaolo Bonzini     case OMCR4:
3573bd88451SPaolo Bonzini         if (!pxa2xx_timer_has_tm4(s))
3583bd88451SPaolo Bonzini             goto badreg;
3593bd88451SPaolo Bonzini         s->tm4[tm].control = value & 0x0ff;
3603bd88451SPaolo Bonzini         /* XXX Stop if running (shouldn't happen) */
3613bd88451SPaolo Bonzini         if ((value & (1 << 7)) || tm == 0)
3623bd88451SPaolo Bonzini             s->tm4[tm].freq = pxa2xx_timer4_freq[value & 7];
3633bd88451SPaolo Bonzini         else {
3643bd88451SPaolo Bonzini             s->tm4[tm].freq = 0;
365bc72ad67SAlex Bligh             pxa2xx_timer_update4(s, qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL), tm);
3663bd88451SPaolo Bonzini         }
3673bd88451SPaolo Bonzini         break;
3683bd88451SPaolo Bonzini     case OMCR11: tm ++;
3693bd88451SPaolo Bonzini         /* fall through */
3703bd88451SPaolo Bonzini     case OMCR10: tm ++;
3713bd88451SPaolo Bonzini         /* fall through */
3723bd88451SPaolo Bonzini     case OMCR9:  tm ++;
3733bd88451SPaolo Bonzini         /* fall through */
3743bd88451SPaolo Bonzini     case OMCR8:  tm += 4;
3753bd88451SPaolo Bonzini         if (!pxa2xx_timer_has_tm4(s))
3763bd88451SPaolo Bonzini             goto badreg;
3773bd88451SPaolo Bonzini         s->tm4[tm].control = value & 0x3ff;
3783bd88451SPaolo Bonzini         /* XXX Stop if running (shouldn't happen) */
3793bd88451SPaolo Bonzini         if ((value & (1 << 7)) || !(tm & 1))
3803bd88451SPaolo Bonzini             s->tm4[tm].freq =
3813bd88451SPaolo Bonzini                     pxa2xx_timer4_freq[(value & (1 << 8)) ?  0 : (value & 7)];
3823bd88451SPaolo Bonzini         else {
3833bd88451SPaolo Bonzini             s->tm4[tm].freq = 0;
384bc72ad67SAlex Bligh             pxa2xx_timer_update4(s, qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL), tm);
3853bd88451SPaolo Bonzini         }
3863bd88451SPaolo Bonzini         break;
3873bd88451SPaolo Bonzini     default:
3882ba63e4aSPhilippe Mathieu-Daudé         qemu_log_mask(LOG_UNIMP,
3892ba63e4aSPhilippe Mathieu-Daudé                       "%s: unknown register 0x%02" HWADDR_PRIx " "
3902ba63e4aSPhilippe Mathieu-Daudé                       "(value 0x%08" PRIx64 ")\n",  __func__, offset, value);
3912ba63e4aSPhilippe Mathieu-Daudé         break;
3923bd88451SPaolo Bonzini     badreg:
3932ba63e4aSPhilippe Mathieu-Daudé         qemu_log_mask(LOG_GUEST_ERROR,
3942ba63e4aSPhilippe Mathieu-Daudé                       "%s: incorrect register 0x%02" HWADDR_PRIx " "
3952ba63e4aSPhilippe Mathieu-Daudé                       "(value 0x%08" PRIx64 ")\n", __func__, offset, value);
3963bd88451SPaolo Bonzini     }
3973bd88451SPaolo Bonzini }
3983bd88451SPaolo Bonzini 
3993bd88451SPaolo Bonzini static const MemoryRegionOps pxa2xx_timer_ops = {
4003bd88451SPaolo Bonzini     .read = pxa2xx_timer_read,
4013bd88451SPaolo Bonzini     .write = pxa2xx_timer_write,
4023bd88451SPaolo Bonzini     .endianness = DEVICE_NATIVE_ENDIAN,
4033bd88451SPaolo Bonzini };
4043bd88451SPaolo Bonzini 
4053bd88451SPaolo Bonzini static void pxa2xx_timer_tick(void *opaque)
4063bd88451SPaolo Bonzini {
4073bd88451SPaolo Bonzini     PXA2xxTimer0 *t = (PXA2xxTimer0 *) opaque;
4083bd88451SPaolo Bonzini     PXA2xxTimerInfo *i = t->info;
4093bd88451SPaolo Bonzini 
4103bd88451SPaolo Bonzini     if (i->irq_enabled & (1 << t->num)) {
4113bd88451SPaolo Bonzini         i->events |= 1 << t->num;
4123bd88451SPaolo Bonzini         qemu_irq_raise(t->irq);
4133bd88451SPaolo Bonzini     }
4143bd88451SPaolo Bonzini 
4153bd88451SPaolo Bonzini     if (t->num == 3)
4163bd88451SPaolo Bonzini         if (i->reset3 & 1) {
4173bd88451SPaolo Bonzini             i->reset3 = 0;
418cf83f140SEric Blake             qemu_system_reset_request(SHUTDOWN_CAUSE_GUEST_RESET);
4193bd88451SPaolo Bonzini         }
4203bd88451SPaolo Bonzini }
4213bd88451SPaolo Bonzini 
4223bd88451SPaolo Bonzini static void pxa2xx_timer_tick4(void *opaque)
4233bd88451SPaolo Bonzini {
4243bd88451SPaolo Bonzini     PXA2xxTimer4 *t = (PXA2xxTimer4 *) opaque;
4253bd88451SPaolo Bonzini     PXA2xxTimerInfo *i = (PXA2xxTimerInfo *) t->tm.info;
4263bd88451SPaolo Bonzini 
4273bd88451SPaolo Bonzini     pxa2xx_timer_tick(&t->tm);
4283bd88451SPaolo Bonzini     if (t->control & (1 << 3))
4293bd88451SPaolo Bonzini         t->clock = 0;
4303bd88451SPaolo Bonzini     if (t->control & (1 << 6))
431bc72ad67SAlex Bligh         pxa2xx_timer_update4(i, qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL), t->tm.num - 4);
4323bd88451SPaolo Bonzini     if (i->events & 0xff0)
4333bd88451SPaolo Bonzini         qemu_irq_raise(i->irq4);
4343bd88451SPaolo Bonzini }
4353bd88451SPaolo Bonzini 
4363bd88451SPaolo Bonzini static int pxa25x_timer_post_load(void *opaque, int version_id)
4373bd88451SPaolo Bonzini {
4383bd88451SPaolo Bonzini     PXA2xxTimerInfo *s = (PXA2xxTimerInfo *) opaque;
4393bd88451SPaolo Bonzini     int64_t now;
4403bd88451SPaolo Bonzini     int i;
4413bd88451SPaolo Bonzini 
442bc72ad67SAlex Bligh     now = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL);
4433bd88451SPaolo Bonzini     pxa2xx_timer_update(s, now);
4443bd88451SPaolo Bonzini 
4453bd88451SPaolo Bonzini     if (pxa2xx_timer_has_tm4(s))
4463bd88451SPaolo Bonzini         for (i = 0; i < 8; i ++)
4473bd88451SPaolo Bonzini             pxa2xx_timer_update4(s, now, i);
4483bd88451SPaolo Bonzini 
4493bd88451SPaolo Bonzini     return 0;
4503bd88451SPaolo Bonzini }
4513bd88451SPaolo Bonzini 
4525d83e348Sxiaoqiang.zhao static void pxa2xx_timer_init(Object *obj)
4533bd88451SPaolo Bonzini {
4545d83e348Sxiaoqiang.zhao     PXA2xxTimerInfo *s = PXA2XX_TIMER(obj);
4555d83e348Sxiaoqiang.zhao     SysBusDevice *dev = SYS_BUS_DEVICE(obj);
4563bd88451SPaolo Bonzini 
4573bd88451SPaolo Bonzini     s->irq_enabled = 0;
4583bd88451SPaolo Bonzini     s->oldclock = 0;
4593bd88451SPaolo Bonzini     s->clock = 0;
460bc72ad67SAlex Bligh     s->lastload = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL);
4613bd88451SPaolo Bonzini     s->reset3 = 0;
4623bd88451SPaolo Bonzini 
4635d83e348Sxiaoqiang.zhao     memory_region_init_io(&s->iomem, obj, &pxa2xx_timer_ops, s,
4645d83e348Sxiaoqiang.zhao                           "pxa2xx-timer", 0x00001000);
4655d83e348Sxiaoqiang.zhao     sysbus_init_mmio(dev, &s->iomem);
4665d83e348Sxiaoqiang.zhao }
4675d83e348Sxiaoqiang.zhao 
4685d83e348Sxiaoqiang.zhao static void pxa2xx_timer_realize(DeviceState *dev, Error **errp)
4695d83e348Sxiaoqiang.zhao {
4705d83e348Sxiaoqiang.zhao     PXA2xxTimerInfo *s = PXA2XX_TIMER(dev);
4715d83e348Sxiaoqiang.zhao     SysBusDevice *sbd = SYS_BUS_DEVICE(dev);
4725d83e348Sxiaoqiang.zhao     int i;
4735d83e348Sxiaoqiang.zhao 
4743bd88451SPaolo Bonzini     for (i = 0; i < 4; i ++) {
4753bd88451SPaolo Bonzini         s->timer[i].value = 0;
4765d83e348Sxiaoqiang.zhao         sysbus_init_irq(sbd, &s->timer[i].irq);
4773bd88451SPaolo Bonzini         s->timer[i].info = s;
4783bd88451SPaolo Bonzini         s->timer[i].num = i;
479bc72ad67SAlex Bligh         s->timer[i].qtimer = timer_new_ns(QEMU_CLOCK_VIRTUAL,
4803bd88451SPaolo Bonzini                                           pxa2xx_timer_tick, &s->timer[i]);
4813bd88451SPaolo Bonzini     }
4825d83e348Sxiaoqiang.zhao 
4833bd88451SPaolo Bonzini     if (s->flags & (1 << PXA2XX_TIMER_HAVE_TM4)) {
4845d83e348Sxiaoqiang.zhao         sysbus_init_irq(sbd, &s->irq4);
4853bd88451SPaolo Bonzini 
4863bd88451SPaolo Bonzini         for (i = 0; i < 8; i ++) {
4873bd88451SPaolo Bonzini             s->tm4[i].tm.value = 0;
4883bd88451SPaolo Bonzini             s->tm4[i].tm.info = s;
4893bd88451SPaolo Bonzini             s->tm4[i].tm.num = i + 4;
4903bd88451SPaolo Bonzini             s->tm4[i].freq = 0;
4913bd88451SPaolo Bonzini             s->tm4[i].control = 0x0;
492bc72ad67SAlex Bligh             s->tm4[i].tm.qtimer = timer_new_ns(QEMU_CLOCK_VIRTUAL,
4933bd88451SPaolo Bonzini                                                pxa2xx_timer_tick4, &s->tm4[i]);
4943bd88451SPaolo Bonzini         }
4953bd88451SPaolo Bonzini     }
4963bd88451SPaolo Bonzini }
4973bd88451SPaolo Bonzini 
4983bd88451SPaolo Bonzini static const VMStateDescription vmstate_pxa2xx_timer0_regs = {
4993bd88451SPaolo Bonzini     .name = "pxa2xx_timer0",
5003bd88451SPaolo Bonzini     .version_id = 2,
5013bd88451SPaolo Bonzini     .minimum_version_id = 2,
5023bd88451SPaolo Bonzini     .fields = (VMStateField[]) {
5033bd88451SPaolo Bonzini         VMSTATE_UINT32(value, PXA2xxTimer0),
5043bd88451SPaolo Bonzini         VMSTATE_END_OF_LIST(),
5053bd88451SPaolo Bonzini     },
5063bd88451SPaolo Bonzini };
5073bd88451SPaolo Bonzini 
5083bd88451SPaolo Bonzini static const VMStateDescription vmstate_pxa2xx_timer4_regs = {
5093bd88451SPaolo Bonzini     .name = "pxa2xx_timer4",
5103bd88451SPaolo Bonzini     .version_id = 1,
5113bd88451SPaolo Bonzini     .minimum_version_id = 1,
5123bd88451SPaolo Bonzini     .fields = (VMStateField[]) {
5133bd88451SPaolo Bonzini         VMSTATE_STRUCT(tm, PXA2xxTimer4, 1,
5143bd88451SPaolo Bonzini                         vmstate_pxa2xx_timer0_regs, PXA2xxTimer0),
5153bd88451SPaolo Bonzini         VMSTATE_INT32(oldclock, PXA2xxTimer4),
5163bd88451SPaolo Bonzini         VMSTATE_INT32(clock, PXA2xxTimer4),
5173bd88451SPaolo Bonzini         VMSTATE_UINT64(lastload, PXA2xxTimer4),
5183bd88451SPaolo Bonzini         VMSTATE_UINT32(freq, PXA2xxTimer4),
5193bd88451SPaolo Bonzini         VMSTATE_UINT32(control, PXA2xxTimer4),
5203bd88451SPaolo Bonzini         VMSTATE_END_OF_LIST(),
5213bd88451SPaolo Bonzini     },
5223bd88451SPaolo Bonzini };
5233bd88451SPaolo Bonzini 
5243bd88451SPaolo Bonzini static bool pxa2xx_timer_has_tm4_test(void *opaque, int version_id)
5253bd88451SPaolo Bonzini {
5263bd88451SPaolo Bonzini     return pxa2xx_timer_has_tm4(opaque);
5273bd88451SPaolo Bonzini }
5283bd88451SPaolo Bonzini 
5293bd88451SPaolo Bonzini static const VMStateDescription vmstate_pxa2xx_timer_regs = {
5303bd88451SPaolo Bonzini     .name = "pxa2xx_timer",
5313bd88451SPaolo Bonzini     .version_id = 1,
5323bd88451SPaolo Bonzini     .minimum_version_id = 1,
5333bd88451SPaolo Bonzini     .post_load = pxa25x_timer_post_load,
5343bd88451SPaolo Bonzini     .fields = (VMStateField[]) {
5353bd88451SPaolo Bonzini         VMSTATE_INT32(clock, PXA2xxTimerInfo),
5363bd88451SPaolo Bonzini         VMSTATE_INT32(oldclock, PXA2xxTimerInfo),
5373bd88451SPaolo Bonzini         VMSTATE_UINT64(lastload, PXA2xxTimerInfo),
5383bd88451SPaolo Bonzini         VMSTATE_STRUCT_ARRAY(timer, PXA2xxTimerInfo, 4, 1,
5393bd88451SPaolo Bonzini                         vmstate_pxa2xx_timer0_regs, PXA2xxTimer0),
5403bd88451SPaolo Bonzini         VMSTATE_UINT32(events, PXA2xxTimerInfo),
5413bd88451SPaolo Bonzini         VMSTATE_UINT32(irq_enabled, PXA2xxTimerInfo),
5423bd88451SPaolo Bonzini         VMSTATE_UINT32(reset3, PXA2xxTimerInfo),
5433bd88451SPaolo Bonzini         VMSTATE_UINT32(snapshot, PXA2xxTimerInfo),
5443bd88451SPaolo Bonzini         VMSTATE_STRUCT_ARRAY_TEST(tm4, PXA2xxTimerInfo, 8,
5453bd88451SPaolo Bonzini                         pxa2xx_timer_has_tm4_test, 0,
5463bd88451SPaolo Bonzini                         vmstate_pxa2xx_timer4_regs, PXA2xxTimer4),
5473bd88451SPaolo Bonzini         VMSTATE_END_OF_LIST(),
5483bd88451SPaolo Bonzini     }
5493bd88451SPaolo Bonzini };
5503bd88451SPaolo Bonzini 
5513bd88451SPaolo Bonzini static Property pxa25x_timer_dev_properties[] = {
5523bd88451SPaolo Bonzini     DEFINE_PROP_UINT32("freq", PXA2xxTimerInfo, freq, PXA25X_FREQ),
5533bd88451SPaolo Bonzini     DEFINE_PROP_BIT("tm4", PXA2xxTimerInfo, flags,
5543bd88451SPaolo Bonzini                     PXA2XX_TIMER_HAVE_TM4, false),
5553bd88451SPaolo Bonzini     DEFINE_PROP_END_OF_LIST(),
5563bd88451SPaolo Bonzini };
5573bd88451SPaolo Bonzini 
5583bd88451SPaolo Bonzini static void pxa25x_timer_dev_class_init(ObjectClass *klass, void *data)
5593bd88451SPaolo Bonzini {
5603bd88451SPaolo Bonzini     DeviceClass *dc = DEVICE_CLASS(klass);
5613bd88451SPaolo Bonzini 
5623bd88451SPaolo Bonzini     dc->desc = "PXA25x timer";
5633bd88451SPaolo Bonzini     dc->props = pxa25x_timer_dev_properties;
5643bd88451SPaolo Bonzini }
5653bd88451SPaolo Bonzini 
5663bd88451SPaolo Bonzini static const TypeInfo pxa25x_timer_dev_info = {
5673bd88451SPaolo Bonzini     .name          = "pxa25x-timer",
568feea4361SAndreas Färber     .parent        = TYPE_PXA2XX_TIMER,
5693bd88451SPaolo Bonzini     .instance_size = sizeof(PXA2xxTimerInfo),
5703bd88451SPaolo Bonzini     .class_init    = pxa25x_timer_dev_class_init,
5713bd88451SPaolo Bonzini };
5723bd88451SPaolo Bonzini 
5733bd88451SPaolo Bonzini static Property pxa27x_timer_dev_properties[] = {
5743bd88451SPaolo Bonzini     DEFINE_PROP_UINT32("freq", PXA2xxTimerInfo, freq, PXA27X_FREQ),
5753bd88451SPaolo Bonzini     DEFINE_PROP_BIT("tm4", PXA2xxTimerInfo, flags,
5763bd88451SPaolo Bonzini                     PXA2XX_TIMER_HAVE_TM4, true),
5773bd88451SPaolo Bonzini     DEFINE_PROP_END_OF_LIST(),
5783bd88451SPaolo Bonzini };
5793bd88451SPaolo Bonzini 
5803bd88451SPaolo Bonzini static void pxa27x_timer_dev_class_init(ObjectClass *klass, void *data)
5813bd88451SPaolo Bonzini {
5823bd88451SPaolo Bonzini     DeviceClass *dc = DEVICE_CLASS(klass);
5833bd88451SPaolo Bonzini 
5843bd88451SPaolo Bonzini     dc->desc = "PXA27x timer";
5853bd88451SPaolo Bonzini     dc->props = pxa27x_timer_dev_properties;
5863bd88451SPaolo Bonzini }
5873bd88451SPaolo Bonzini 
5883bd88451SPaolo Bonzini static const TypeInfo pxa27x_timer_dev_info = {
5893bd88451SPaolo Bonzini     .name          = "pxa27x-timer",
590feea4361SAndreas Färber     .parent        = TYPE_PXA2XX_TIMER,
5913bd88451SPaolo Bonzini     .instance_size = sizeof(PXA2xxTimerInfo),
5923bd88451SPaolo Bonzini     .class_init    = pxa27x_timer_dev_class_init,
5933bd88451SPaolo Bonzini };
5943bd88451SPaolo Bonzini 
595feea4361SAndreas Färber static void pxa2xx_timer_class_init(ObjectClass *oc, void *data)
596feea4361SAndreas Färber {
597feea4361SAndreas Färber     DeviceClass *dc = DEVICE_CLASS(oc);
598feea4361SAndreas Färber 
5995d83e348Sxiaoqiang.zhao     dc->realize  = pxa2xx_timer_realize;
600feea4361SAndreas Färber     dc->vmsd = &vmstate_pxa2xx_timer_regs;
601feea4361SAndreas Färber }
602feea4361SAndreas Färber 
603feea4361SAndreas Färber static const TypeInfo pxa2xx_timer_type_info = {
604feea4361SAndreas Färber     .name          = TYPE_PXA2XX_TIMER,
605feea4361SAndreas Färber     .parent        = TYPE_SYS_BUS_DEVICE,
606feea4361SAndreas Färber     .instance_size = sizeof(PXA2xxTimerInfo),
6075d83e348Sxiaoqiang.zhao     .instance_init = pxa2xx_timer_init,
608feea4361SAndreas Färber     .abstract      = true,
609feea4361SAndreas Färber     .class_init    = pxa2xx_timer_class_init,
610feea4361SAndreas Färber };
611feea4361SAndreas Färber 
6123bd88451SPaolo Bonzini static void pxa2xx_timer_register_types(void)
6133bd88451SPaolo Bonzini {
614feea4361SAndreas Färber     type_register_static(&pxa2xx_timer_type_info);
6153bd88451SPaolo Bonzini     type_register_static(&pxa25x_timer_dev_info);
6163bd88451SPaolo Bonzini     type_register_static(&pxa27x_timer_dev_info);
6173bd88451SPaolo Bonzini }
6183bd88451SPaolo Bonzini 
6193bd88451SPaolo Bonzini type_init(pxa2xx_timer_register_types)
620