xref: /openbmc/qemu/hw/timer/pxa2xx_timer.c (revision feea4361b3d29cc7e7374db33df9ab18348cf230)
13bd88451SPaolo Bonzini /*
23bd88451SPaolo Bonzini  * Intel XScale PXA255/270 OS Timers.
33bd88451SPaolo Bonzini  *
43bd88451SPaolo Bonzini  * Copyright (c) 2006 Openedhand Ltd.
53bd88451SPaolo Bonzini  * Copyright (c) 2006 Thorsten Zitterell
63bd88451SPaolo Bonzini  *
73bd88451SPaolo Bonzini  * This code is licensed under the GPL.
83bd88451SPaolo Bonzini  */
93bd88451SPaolo Bonzini 
103bd88451SPaolo Bonzini #include "hw/hw.h"
113bd88451SPaolo Bonzini #include "qemu/timer.h"
123bd88451SPaolo Bonzini #include "sysemu/sysemu.h"
133bd88451SPaolo Bonzini #include "hw/arm/pxa.h"
143bd88451SPaolo Bonzini #include "hw/sysbus.h"
153bd88451SPaolo Bonzini 
163bd88451SPaolo Bonzini #define OSMR0	0x00
173bd88451SPaolo Bonzini #define OSMR1	0x04
183bd88451SPaolo Bonzini #define OSMR2	0x08
193bd88451SPaolo Bonzini #define OSMR3	0x0c
203bd88451SPaolo Bonzini #define OSMR4	0x80
213bd88451SPaolo Bonzini #define OSMR5	0x84
223bd88451SPaolo Bonzini #define OSMR6	0x88
233bd88451SPaolo Bonzini #define OSMR7	0x8c
243bd88451SPaolo Bonzini #define OSMR8	0x90
253bd88451SPaolo Bonzini #define OSMR9	0x94
263bd88451SPaolo Bonzini #define OSMR10	0x98
273bd88451SPaolo Bonzini #define OSMR11	0x9c
283bd88451SPaolo Bonzini #define OSCR	0x10	/* OS Timer Count */
293bd88451SPaolo Bonzini #define OSCR4	0x40
303bd88451SPaolo Bonzini #define OSCR5	0x44
313bd88451SPaolo Bonzini #define OSCR6	0x48
323bd88451SPaolo Bonzini #define OSCR7	0x4c
333bd88451SPaolo Bonzini #define OSCR8	0x50
343bd88451SPaolo Bonzini #define OSCR9	0x54
353bd88451SPaolo Bonzini #define OSCR10	0x58
363bd88451SPaolo Bonzini #define OSCR11	0x5c
373bd88451SPaolo Bonzini #define OSSR	0x14	/* Timer status register */
383bd88451SPaolo Bonzini #define OWER	0x18
393bd88451SPaolo Bonzini #define OIER	0x1c	/* Interrupt enable register  3-0 to E3-E0 */
403bd88451SPaolo Bonzini #define OMCR4	0xc0	/* OS Match Control registers */
413bd88451SPaolo Bonzini #define OMCR5	0xc4
423bd88451SPaolo Bonzini #define OMCR6	0xc8
433bd88451SPaolo Bonzini #define OMCR7	0xcc
443bd88451SPaolo Bonzini #define OMCR8	0xd0
453bd88451SPaolo Bonzini #define OMCR9	0xd4
463bd88451SPaolo Bonzini #define OMCR10	0xd8
473bd88451SPaolo Bonzini #define OMCR11	0xdc
483bd88451SPaolo Bonzini #define OSNR	0x20
493bd88451SPaolo Bonzini 
503bd88451SPaolo Bonzini #define PXA25X_FREQ	3686400	/* 3.6864 MHz */
513bd88451SPaolo Bonzini #define PXA27X_FREQ	3250000	/* 3.25 MHz */
523bd88451SPaolo Bonzini 
533bd88451SPaolo Bonzini static int pxa2xx_timer4_freq[8] = {
543bd88451SPaolo Bonzini     [0] = 0,
553bd88451SPaolo Bonzini     [1] = 32768,
563bd88451SPaolo Bonzini     [2] = 1000,
573bd88451SPaolo Bonzini     [3] = 1,
583bd88451SPaolo Bonzini     [4] = 1000000,
593bd88451SPaolo Bonzini     /* [5] is the "Externally supplied clock".  Assign if necessary.  */
603bd88451SPaolo Bonzini     [5 ... 7] = 0,
613bd88451SPaolo Bonzini };
623bd88451SPaolo Bonzini 
63*feea4361SAndreas Färber #define TYPE_PXA2XX_TIMER "pxa2xx-timer"
64*feea4361SAndreas Färber #define PXA2XX_TIMER(obj) \
65*feea4361SAndreas Färber     OBJECT_CHECK(PXA2xxTimerInfo, (obj), TYPE_PXA2XX_TIMER)
66*feea4361SAndreas Färber 
673bd88451SPaolo Bonzini typedef struct PXA2xxTimerInfo PXA2xxTimerInfo;
683bd88451SPaolo Bonzini 
693bd88451SPaolo Bonzini typedef struct {
703bd88451SPaolo Bonzini     uint32_t value;
713bd88451SPaolo Bonzini     qemu_irq irq;
723bd88451SPaolo Bonzini     QEMUTimer *qtimer;
733bd88451SPaolo Bonzini     int num;
743bd88451SPaolo Bonzini     PXA2xxTimerInfo *info;
753bd88451SPaolo Bonzini } PXA2xxTimer0;
763bd88451SPaolo Bonzini 
773bd88451SPaolo Bonzini typedef struct {
783bd88451SPaolo Bonzini     PXA2xxTimer0 tm;
793bd88451SPaolo Bonzini     int32_t oldclock;
803bd88451SPaolo Bonzini     int32_t clock;
813bd88451SPaolo Bonzini     uint64_t lastload;
823bd88451SPaolo Bonzini     uint32_t freq;
833bd88451SPaolo Bonzini     uint32_t control;
843bd88451SPaolo Bonzini } PXA2xxTimer4;
853bd88451SPaolo Bonzini 
863bd88451SPaolo Bonzini struct PXA2xxTimerInfo {
87*feea4361SAndreas Färber     SysBusDevice parent_obj;
88*feea4361SAndreas Färber 
893bd88451SPaolo Bonzini     MemoryRegion iomem;
903bd88451SPaolo Bonzini     uint32_t flags;
913bd88451SPaolo Bonzini 
923bd88451SPaolo Bonzini     int32_t clock;
933bd88451SPaolo Bonzini     int32_t oldclock;
943bd88451SPaolo Bonzini     uint64_t lastload;
953bd88451SPaolo Bonzini     uint32_t freq;
963bd88451SPaolo Bonzini     PXA2xxTimer0 timer[4];
973bd88451SPaolo Bonzini     uint32_t events;
983bd88451SPaolo Bonzini     uint32_t irq_enabled;
993bd88451SPaolo Bonzini     uint32_t reset3;
1003bd88451SPaolo Bonzini     uint32_t snapshot;
1013bd88451SPaolo Bonzini 
1023bd88451SPaolo Bonzini     qemu_irq irq4;
1033bd88451SPaolo Bonzini     PXA2xxTimer4 tm4[8];
1043bd88451SPaolo Bonzini };
1053bd88451SPaolo Bonzini 
1063bd88451SPaolo Bonzini #define PXA2XX_TIMER_HAVE_TM4	0
1073bd88451SPaolo Bonzini 
1083bd88451SPaolo Bonzini static inline int pxa2xx_timer_has_tm4(PXA2xxTimerInfo *s)
1093bd88451SPaolo Bonzini {
1103bd88451SPaolo Bonzini     return s->flags & (1 << PXA2XX_TIMER_HAVE_TM4);
1113bd88451SPaolo Bonzini }
1123bd88451SPaolo Bonzini 
1133bd88451SPaolo Bonzini static void pxa2xx_timer_update(void *opaque, uint64_t now_qemu)
1143bd88451SPaolo Bonzini {
1153bd88451SPaolo Bonzini     PXA2xxTimerInfo *s = (PXA2xxTimerInfo *) opaque;
1163bd88451SPaolo Bonzini     int i;
1173bd88451SPaolo Bonzini     uint32_t now_vm;
1183bd88451SPaolo Bonzini     uint64_t new_qemu;
1193bd88451SPaolo Bonzini 
1203bd88451SPaolo Bonzini     now_vm = s->clock +
1213bd88451SPaolo Bonzini             muldiv64(now_qemu - s->lastload, s->freq, get_ticks_per_sec());
1223bd88451SPaolo Bonzini 
1233bd88451SPaolo Bonzini     for (i = 0; i < 4; i ++) {
1243bd88451SPaolo Bonzini         new_qemu = now_qemu + muldiv64((uint32_t) (s->timer[i].value - now_vm),
1253bd88451SPaolo Bonzini                         get_ticks_per_sec(), s->freq);
1263bd88451SPaolo Bonzini         qemu_mod_timer(s->timer[i].qtimer, new_qemu);
1273bd88451SPaolo Bonzini     }
1283bd88451SPaolo Bonzini }
1293bd88451SPaolo Bonzini 
1303bd88451SPaolo Bonzini static void pxa2xx_timer_update4(void *opaque, uint64_t now_qemu, int n)
1313bd88451SPaolo Bonzini {
1323bd88451SPaolo Bonzini     PXA2xxTimerInfo *s = (PXA2xxTimerInfo *) opaque;
1333bd88451SPaolo Bonzini     uint32_t now_vm;
1343bd88451SPaolo Bonzini     uint64_t new_qemu;
1353bd88451SPaolo Bonzini     static const int counters[8] = { 0, 0, 0, 0, 4, 4, 6, 6 };
1363bd88451SPaolo Bonzini     int counter;
1373bd88451SPaolo Bonzini 
1383bd88451SPaolo Bonzini     if (s->tm4[n].control & (1 << 7))
1393bd88451SPaolo Bonzini         counter = n;
1403bd88451SPaolo Bonzini     else
1413bd88451SPaolo Bonzini         counter = counters[n];
1423bd88451SPaolo Bonzini 
1433bd88451SPaolo Bonzini     if (!s->tm4[counter].freq) {
1443bd88451SPaolo Bonzini         qemu_del_timer(s->tm4[n].tm.qtimer);
1453bd88451SPaolo Bonzini         return;
1463bd88451SPaolo Bonzini     }
1473bd88451SPaolo Bonzini 
1483bd88451SPaolo Bonzini     now_vm = s->tm4[counter].clock + muldiv64(now_qemu -
1493bd88451SPaolo Bonzini                     s->tm4[counter].lastload,
1503bd88451SPaolo Bonzini                     s->tm4[counter].freq, get_ticks_per_sec());
1513bd88451SPaolo Bonzini 
1523bd88451SPaolo Bonzini     new_qemu = now_qemu + muldiv64((uint32_t) (s->tm4[n].tm.value - now_vm),
1533bd88451SPaolo Bonzini                     get_ticks_per_sec(), s->tm4[counter].freq);
1543bd88451SPaolo Bonzini     qemu_mod_timer(s->tm4[n].tm.qtimer, new_qemu);
1553bd88451SPaolo Bonzini }
1563bd88451SPaolo Bonzini 
1573bd88451SPaolo Bonzini static uint64_t pxa2xx_timer_read(void *opaque, hwaddr offset,
1583bd88451SPaolo Bonzini                                   unsigned size)
1593bd88451SPaolo Bonzini {
1603bd88451SPaolo Bonzini     PXA2xxTimerInfo *s = (PXA2xxTimerInfo *) opaque;
1613bd88451SPaolo Bonzini     int tm = 0;
1623bd88451SPaolo Bonzini 
1633bd88451SPaolo Bonzini     switch (offset) {
1643bd88451SPaolo Bonzini     case OSMR3:  tm ++;
1653bd88451SPaolo Bonzini         /* fall through */
1663bd88451SPaolo Bonzini     case OSMR2:  tm ++;
1673bd88451SPaolo Bonzini         /* fall through */
1683bd88451SPaolo Bonzini     case OSMR1:  tm ++;
1693bd88451SPaolo Bonzini         /* fall through */
1703bd88451SPaolo Bonzini     case OSMR0:
1713bd88451SPaolo Bonzini         return s->timer[tm].value;
1723bd88451SPaolo Bonzini     case OSMR11: tm ++;
1733bd88451SPaolo Bonzini         /* fall through */
1743bd88451SPaolo Bonzini     case OSMR10: tm ++;
1753bd88451SPaolo Bonzini         /* fall through */
1763bd88451SPaolo Bonzini     case OSMR9:  tm ++;
1773bd88451SPaolo Bonzini         /* fall through */
1783bd88451SPaolo Bonzini     case OSMR8:  tm ++;
1793bd88451SPaolo Bonzini         /* fall through */
1803bd88451SPaolo Bonzini     case OSMR7:  tm ++;
1813bd88451SPaolo Bonzini         /* fall through */
1823bd88451SPaolo Bonzini     case OSMR6:  tm ++;
1833bd88451SPaolo Bonzini         /* fall through */
1843bd88451SPaolo Bonzini     case OSMR5:  tm ++;
1853bd88451SPaolo Bonzini         /* fall through */
1863bd88451SPaolo Bonzini     case OSMR4:
1873bd88451SPaolo Bonzini         if (!pxa2xx_timer_has_tm4(s))
1883bd88451SPaolo Bonzini             goto badreg;
1893bd88451SPaolo Bonzini         return s->tm4[tm].tm.value;
1903bd88451SPaolo Bonzini     case OSCR:
1913bd88451SPaolo Bonzini         return s->clock + muldiv64(qemu_get_clock_ns(vm_clock) -
1923bd88451SPaolo Bonzini                         s->lastload, s->freq, get_ticks_per_sec());
1933bd88451SPaolo Bonzini     case OSCR11: tm ++;
1943bd88451SPaolo Bonzini         /* fall through */
1953bd88451SPaolo Bonzini     case OSCR10: tm ++;
1963bd88451SPaolo Bonzini         /* fall through */
1973bd88451SPaolo Bonzini     case OSCR9:  tm ++;
1983bd88451SPaolo Bonzini         /* fall through */
1993bd88451SPaolo Bonzini     case OSCR8:  tm ++;
2003bd88451SPaolo Bonzini         /* fall through */
2013bd88451SPaolo Bonzini     case OSCR7:  tm ++;
2023bd88451SPaolo Bonzini         /* fall through */
2033bd88451SPaolo Bonzini     case OSCR6:  tm ++;
2043bd88451SPaolo Bonzini         /* fall through */
2053bd88451SPaolo Bonzini     case OSCR5:  tm ++;
2063bd88451SPaolo Bonzini         /* fall through */
2073bd88451SPaolo Bonzini     case OSCR4:
2083bd88451SPaolo Bonzini         if (!pxa2xx_timer_has_tm4(s))
2093bd88451SPaolo Bonzini             goto badreg;
2103bd88451SPaolo Bonzini 
2113bd88451SPaolo Bonzini         if ((tm == 9 - 4 || tm == 11 - 4) && (s->tm4[tm].control & (1 << 9))) {
2123bd88451SPaolo Bonzini             if (s->tm4[tm - 1].freq)
2133bd88451SPaolo Bonzini                 s->snapshot = s->tm4[tm - 1].clock + muldiv64(
2143bd88451SPaolo Bonzini                                 qemu_get_clock_ns(vm_clock) -
2153bd88451SPaolo Bonzini                                 s->tm4[tm - 1].lastload,
2163bd88451SPaolo Bonzini                                 s->tm4[tm - 1].freq, get_ticks_per_sec());
2173bd88451SPaolo Bonzini             else
2183bd88451SPaolo Bonzini                 s->snapshot = s->tm4[tm - 1].clock;
2193bd88451SPaolo Bonzini         }
2203bd88451SPaolo Bonzini 
2213bd88451SPaolo Bonzini         if (!s->tm4[tm].freq)
2223bd88451SPaolo Bonzini             return s->tm4[tm].clock;
2233bd88451SPaolo Bonzini         return s->tm4[tm].clock + muldiv64(qemu_get_clock_ns(vm_clock) -
2243bd88451SPaolo Bonzini                         s->tm4[tm].lastload, s->tm4[tm].freq, get_ticks_per_sec());
2253bd88451SPaolo Bonzini     case OIER:
2263bd88451SPaolo Bonzini         return s->irq_enabled;
2273bd88451SPaolo Bonzini     case OSSR:	/* Status register */
2283bd88451SPaolo Bonzini         return s->events;
2293bd88451SPaolo Bonzini     case OWER:
2303bd88451SPaolo Bonzini         return s->reset3;
2313bd88451SPaolo Bonzini     case OMCR11: tm ++;
2323bd88451SPaolo Bonzini         /* fall through */
2333bd88451SPaolo Bonzini     case OMCR10: tm ++;
2343bd88451SPaolo Bonzini         /* fall through */
2353bd88451SPaolo Bonzini     case OMCR9:  tm ++;
2363bd88451SPaolo Bonzini         /* fall through */
2373bd88451SPaolo Bonzini     case OMCR8:  tm ++;
2383bd88451SPaolo Bonzini         /* fall through */
2393bd88451SPaolo Bonzini     case OMCR7:  tm ++;
2403bd88451SPaolo Bonzini         /* fall through */
2413bd88451SPaolo Bonzini     case OMCR6:  tm ++;
2423bd88451SPaolo Bonzini         /* fall through */
2433bd88451SPaolo Bonzini     case OMCR5:  tm ++;
2443bd88451SPaolo Bonzini         /* fall through */
2453bd88451SPaolo Bonzini     case OMCR4:
2463bd88451SPaolo Bonzini         if (!pxa2xx_timer_has_tm4(s))
2473bd88451SPaolo Bonzini             goto badreg;
2483bd88451SPaolo Bonzini         return s->tm4[tm].control;
2493bd88451SPaolo Bonzini     case OSNR:
2503bd88451SPaolo Bonzini         return s->snapshot;
2513bd88451SPaolo Bonzini     default:
2523bd88451SPaolo Bonzini     badreg:
2533bd88451SPaolo Bonzini         hw_error("pxa2xx_timer_read: Bad offset " REG_FMT "\n", offset);
2543bd88451SPaolo Bonzini     }
2553bd88451SPaolo Bonzini 
2563bd88451SPaolo Bonzini     return 0;
2573bd88451SPaolo Bonzini }
2583bd88451SPaolo Bonzini 
2593bd88451SPaolo Bonzini static void pxa2xx_timer_write(void *opaque, hwaddr offset,
2603bd88451SPaolo Bonzini                                uint64_t value, unsigned size)
2613bd88451SPaolo Bonzini {
2623bd88451SPaolo Bonzini     int i, tm = 0;
2633bd88451SPaolo Bonzini     PXA2xxTimerInfo *s = (PXA2xxTimerInfo *) opaque;
2643bd88451SPaolo Bonzini 
2653bd88451SPaolo Bonzini     switch (offset) {
2663bd88451SPaolo Bonzini     case OSMR3:  tm ++;
2673bd88451SPaolo Bonzini         /* fall through */
2683bd88451SPaolo Bonzini     case OSMR2:  tm ++;
2693bd88451SPaolo Bonzini         /* fall through */
2703bd88451SPaolo Bonzini     case OSMR1:  tm ++;
2713bd88451SPaolo Bonzini         /* fall through */
2723bd88451SPaolo Bonzini     case OSMR0:
2733bd88451SPaolo Bonzini         s->timer[tm].value = value;
2743bd88451SPaolo Bonzini         pxa2xx_timer_update(s, qemu_get_clock_ns(vm_clock));
2753bd88451SPaolo Bonzini         break;
2763bd88451SPaolo Bonzini     case OSMR11: tm ++;
2773bd88451SPaolo Bonzini         /* fall through */
2783bd88451SPaolo Bonzini     case OSMR10: tm ++;
2793bd88451SPaolo Bonzini         /* fall through */
2803bd88451SPaolo Bonzini     case OSMR9:  tm ++;
2813bd88451SPaolo Bonzini         /* fall through */
2823bd88451SPaolo Bonzini     case OSMR8:  tm ++;
2833bd88451SPaolo Bonzini         /* fall through */
2843bd88451SPaolo Bonzini     case OSMR7:  tm ++;
2853bd88451SPaolo Bonzini         /* fall through */
2863bd88451SPaolo Bonzini     case OSMR6:  tm ++;
2873bd88451SPaolo Bonzini         /* fall through */
2883bd88451SPaolo Bonzini     case OSMR5:  tm ++;
2893bd88451SPaolo Bonzini         /* fall through */
2903bd88451SPaolo Bonzini     case OSMR4:
2913bd88451SPaolo Bonzini         if (!pxa2xx_timer_has_tm4(s))
2923bd88451SPaolo Bonzini             goto badreg;
2933bd88451SPaolo Bonzini         s->tm4[tm].tm.value = value;
2943bd88451SPaolo Bonzini         pxa2xx_timer_update4(s, qemu_get_clock_ns(vm_clock), tm);
2953bd88451SPaolo Bonzini         break;
2963bd88451SPaolo Bonzini     case OSCR:
2973bd88451SPaolo Bonzini         s->oldclock = s->clock;
2983bd88451SPaolo Bonzini         s->lastload = qemu_get_clock_ns(vm_clock);
2993bd88451SPaolo Bonzini         s->clock = value;
3003bd88451SPaolo Bonzini         pxa2xx_timer_update(s, s->lastload);
3013bd88451SPaolo Bonzini         break;
3023bd88451SPaolo Bonzini     case OSCR11: tm ++;
3033bd88451SPaolo Bonzini         /* fall through */
3043bd88451SPaolo Bonzini     case OSCR10: tm ++;
3053bd88451SPaolo Bonzini         /* fall through */
3063bd88451SPaolo Bonzini     case OSCR9:  tm ++;
3073bd88451SPaolo Bonzini         /* fall through */
3083bd88451SPaolo Bonzini     case OSCR8:  tm ++;
3093bd88451SPaolo Bonzini         /* fall through */
3103bd88451SPaolo Bonzini     case OSCR7:  tm ++;
3113bd88451SPaolo Bonzini         /* fall through */
3123bd88451SPaolo Bonzini     case OSCR6:  tm ++;
3133bd88451SPaolo Bonzini         /* fall through */
3143bd88451SPaolo Bonzini     case OSCR5:  tm ++;
3153bd88451SPaolo Bonzini         /* fall through */
3163bd88451SPaolo Bonzini     case OSCR4:
3173bd88451SPaolo Bonzini         if (!pxa2xx_timer_has_tm4(s))
3183bd88451SPaolo Bonzini             goto badreg;
3193bd88451SPaolo Bonzini         s->tm4[tm].oldclock = s->tm4[tm].clock;
3203bd88451SPaolo Bonzini         s->tm4[tm].lastload = qemu_get_clock_ns(vm_clock);
3213bd88451SPaolo Bonzini         s->tm4[tm].clock = value;
3223bd88451SPaolo Bonzini         pxa2xx_timer_update4(s, s->tm4[tm].lastload, tm);
3233bd88451SPaolo Bonzini         break;
3243bd88451SPaolo Bonzini     case OIER:
3253bd88451SPaolo Bonzini         s->irq_enabled = value & 0xfff;
3263bd88451SPaolo Bonzini         break;
3273bd88451SPaolo Bonzini     case OSSR:	/* Status register */
3283bd88451SPaolo Bonzini         value &= s->events;
3293bd88451SPaolo Bonzini         s->events &= ~value;
3303bd88451SPaolo Bonzini         for (i = 0; i < 4; i ++, value >>= 1)
3313bd88451SPaolo Bonzini             if (value & 1)
3323bd88451SPaolo Bonzini                 qemu_irq_lower(s->timer[i].irq);
3333bd88451SPaolo Bonzini         if (pxa2xx_timer_has_tm4(s) && !(s->events & 0xff0) && value)
3343bd88451SPaolo Bonzini             qemu_irq_lower(s->irq4);
3353bd88451SPaolo Bonzini         break;
3363bd88451SPaolo Bonzini     case OWER:	/* XXX: Reset on OSMR3 match? */
3373bd88451SPaolo Bonzini         s->reset3 = value;
3383bd88451SPaolo Bonzini         break;
3393bd88451SPaolo Bonzini     case OMCR7:  tm ++;
3403bd88451SPaolo Bonzini         /* fall through */
3413bd88451SPaolo Bonzini     case OMCR6:  tm ++;
3423bd88451SPaolo Bonzini         /* fall through */
3433bd88451SPaolo Bonzini     case OMCR5:  tm ++;
3443bd88451SPaolo Bonzini         /* fall through */
3453bd88451SPaolo Bonzini     case OMCR4:
3463bd88451SPaolo Bonzini         if (!pxa2xx_timer_has_tm4(s))
3473bd88451SPaolo Bonzini             goto badreg;
3483bd88451SPaolo Bonzini         s->tm4[tm].control = value & 0x0ff;
3493bd88451SPaolo Bonzini         /* XXX Stop if running (shouldn't happen) */
3503bd88451SPaolo Bonzini         if ((value & (1 << 7)) || tm == 0)
3513bd88451SPaolo Bonzini             s->tm4[tm].freq = pxa2xx_timer4_freq[value & 7];
3523bd88451SPaolo Bonzini         else {
3533bd88451SPaolo Bonzini             s->tm4[tm].freq = 0;
3543bd88451SPaolo Bonzini             pxa2xx_timer_update4(s, qemu_get_clock_ns(vm_clock), tm);
3553bd88451SPaolo Bonzini         }
3563bd88451SPaolo Bonzini         break;
3573bd88451SPaolo Bonzini     case OMCR11: tm ++;
3583bd88451SPaolo Bonzini         /* fall through */
3593bd88451SPaolo Bonzini     case OMCR10: tm ++;
3603bd88451SPaolo Bonzini         /* fall through */
3613bd88451SPaolo Bonzini     case OMCR9:  tm ++;
3623bd88451SPaolo Bonzini         /* fall through */
3633bd88451SPaolo Bonzini     case OMCR8:  tm += 4;
3643bd88451SPaolo Bonzini         if (!pxa2xx_timer_has_tm4(s))
3653bd88451SPaolo Bonzini             goto badreg;
3663bd88451SPaolo Bonzini         s->tm4[tm].control = value & 0x3ff;
3673bd88451SPaolo Bonzini         /* XXX Stop if running (shouldn't happen) */
3683bd88451SPaolo Bonzini         if ((value & (1 << 7)) || !(tm & 1))
3693bd88451SPaolo Bonzini             s->tm4[tm].freq =
3703bd88451SPaolo Bonzini                     pxa2xx_timer4_freq[(value & (1 << 8)) ?  0 : (value & 7)];
3713bd88451SPaolo Bonzini         else {
3723bd88451SPaolo Bonzini             s->tm4[tm].freq = 0;
3733bd88451SPaolo Bonzini             pxa2xx_timer_update4(s, qemu_get_clock_ns(vm_clock), tm);
3743bd88451SPaolo Bonzini         }
3753bd88451SPaolo Bonzini         break;
3763bd88451SPaolo Bonzini     default:
3773bd88451SPaolo Bonzini     badreg:
3783bd88451SPaolo Bonzini         hw_error("pxa2xx_timer_write: Bad offset " REG_FMT "\n", offset);
3793bd88451SPaolo Bonzini     }
3803bd88451SPaolo Bonzini }
3813bd88451SPaolo Bonzini 
3823bd88451SPaolo Bonzini static const MemoryRegionOps pxa2xx_timer_ops = {
3833bd88451SPaolo Bonzini     .read = pxa2xx_timer_read,
3843bd88451SPaolo Bonzini     .write = pxa2xx_timer_write,
3853bd88451SPaolo Bonzini     .endianness = DEVICE_NATIVE_ENDIAN,
3863bd88451SPaolo Bonzini };
3873bd88451SPaolo Bonzini 
3883bd88451SPaolo Bonzini static void pxa2xx_timer_tick(void *opaque)
3893bd88451SPaolo Bonzini {
3903bd88451SPaolo Bonzini     PXA2xxTimer0 *t = (PXA2xxTimer0 *) opaque;
3913bd88451SPaolo Bonzini     PXA2xxTimerInfo *i = t->info;
3923bd88451SPaolo Bonzini 
3933bd88451SPaolo Bonzini     if (i->irq_enabled & (1 << t->num)) {
3943bd88451SPaolo Bonzini         i->events |= 1 << t->num;
3953bd88451SPaolo Bonzini         qemu_irq_raise(t->irq);
3963bd88451SPaolo Bonzini     }
3973bd88451SPaolo Bonzini 
3983bd88451SPaolo Bonzini     if (t->num == 3)
3993bd88451SPaolo Bonzini         if (i->reset3 & 1) {
4003bd88451SPaolo Bonzini             i->reset3 = 0;
4013bd88451SPaolo Bonzini             qemu_system_reset_request();
4023bd88451SPaolo Bonzini         }
4033bd88451SPaolo Bonzini }
4043bd88451SPaolo Bonzini 
4053bd88451SPaolo Bonzini static void pxa2xx_timer_tick4(void *opaque)
4063bd88451SPaolo Bonzini {
4073bd88451SPaolo Bonzini     PXA2xxTimer4 *t = (PXA2xxTimer4 *) opaque;
4083bd88451SPaolo Bonzini     PXA2xxTimerInfo *i = (PXA2xxTimerInfo *) t->tm.info;
4093bd88451SPaolo Bonzini 
4103bd88451SPaolo Bonzini     pxa2xx_timer_tick(&t->tm);
4113bd88451SPaolo Bonzini     if (t->control & (1 << 3))
4123bd88451SPaolo Bonzini         t->clock = 0;
4133bd88451SPaolo Bonzini     if (t->control & (1 << 6))
4143bd88451SPaolo Bonzini         pxa2xx_timer_update4(i, qemu_get_clock_ns(vm_clock), t->tm.num - 4);
4153bd88451SPaolo Bonzini     if (i->events & 0xff0)
4163bd88451SPaolo Bonzini         qemu_irq_raise(i->irq4);
4173bd88451SPaolo Bonzini }
4183bd88451SPaolo Bonzini 
4193bd88451SPaolo Bonzini static int pxa25x_timer_post_load(void *opaque, int version_id)
4203bd88451SPaolo Bonzini {
4213bd88451SPaolo Bonzini     PXA2xxTimerInfo *s = (PXA2xxTimerInfo *) opaque;
4223bd88451SPaolo Bonzini     int64_t now;
4233bd88451SPaolo Bonzini     int i;
4243bd88451SPaolo Bonzini 
4253bd88451SPaolo Bonzini     now = qemu_get_clock_ns(vm_clock);
4263bd88451SPaolo Bonzini     pxa2xx_timer_update(s, now);
4273bd88451SPaolo Bonzini 
4283bd88451SPaolo Bonzini     if (pxa2xx_timer_has_tm4(s))
4293bd88451SPaolo Bonzini         for (i = 0; i < 8; i ++)
4303bd88451SPaolo Bonzini             pxa2xx_timer_update4(s, now, i);
4313bd88451SPaolo Bonzini 
4323bd88451SPaolo Bonzini     return 0;
4333bd88451SPaolo Bonzini }
4343bd88451SPaolo Bonzini 
4353bd88451SPaolo Bonzini static int pxa2xx_timer_init(SysBusDevice *dev)
4363bd88451SPaolo Bonzini {
437*feea4361SAndreas Färber     PXA2xxTimerInfo *s = PXA2XX_TIMER(dev);
4383bd88451SPaolo Bonzini     int i;
4393bd88451SPaolo Bonzini 
4403bd88451SPaolo Bonzini     s->irq_enabled = 0;
4413bd88451SPaolo Bonzini     s->oldclock = 0;
4423bd88451SPaolo Bonzini     s->clock = 0;
4433bd88451SPaolo Bonzini     s->lastload = qemu_get_clock_ns(vm_clock);
4443bd88451SPaolo Bonzini     s->reset3 = 0;
4453bd88451SPaolo Bonzini 
4463bd88451SPaolo Bonzini     for (i = 0; i < 4; i ++) {
4473bd88451SPaolo Bonzini         s->timer[i].value = 0;
4483bd88451SPaolo Bonzini         sysbus_init_irq(dev, &s->timer[i].irq);
4493bd88451SPaolo Bonzini         s->timer[i].info = s;
4503bd88451SPaolo Bonzini         s->timer[i].num = i;
4513bd88451SPaolo Bonzini         s->timer[i].qtimer = qemu_new_timer_ns(vm_clock,
4523bd88451SPaolo Bonzini                         pxa2xx_timer_tick, &s->timer[i]);
4533bd88451SPaolo Bonzini     }
4543bd88451SPaolo Bonzini     if (s->flags & (1 << PXA2XX_TIMER_HAVE_TM4)) {
4553bd88451SPaolo Bonzini         sysbus_init_irq(dev, &s->irq4);
4563bd88451SPaolo Bonzini 
4573bd88451SPaolo Bonzini         for (i = 0; i < 8; i ++) {
4583bd88451SPaolo Bonzini             s->tm4[i].tm.value = 0;
4593bd88451SPaolo Bonzini             s->tm4[i].tm.info = s;
4603bd88451SPaolo Bonzini             s->tm4[i].tm.num = i + 4;
4613bd88451SPaolo Bonzini             s->tm4[i].freq = 0;
4623bd88451SPaolo Bonzini             s->tm4[i].control = 0x0;
4633bd88451SPaolo Bonzini             s->tm4[i].tm.qtimer = qemu_new_timer_ns(vm_clock,
4643bd88451SPaolo Bonzini                         pxa2xx_timer_tick4, &s->tm4[i]);
4653bd88451SPaolo Bonzini         }
4663bd88451SPaolo Bonzini     }
4673bd88451SPaolo Bonzini 
468853dca12SPaolo Bonzini     memory_region_init_io(&s->iomem, OBJECT(s), &pxa2xx_timer_ops, s,
4693bd88451SPaolo Bonzini                           "pxa2xx-timer", 0x00001000);
4703bd88451SPaolo Bonzini     sysbus_init_mmio(dev, &s->iomem);
4713bd88451SPaolo Bonzini 
4723bd88451SPaolo Bonzini     return 0;
4733bd88451SPaolo Bonzini }
4743bd88451SPaolo Bonzini 
4753bd88451SPaolo Bonzini static const VMStateDescription vmstate_pxa2xx_timer0_regs = {
4763bd88451SPaolo Bonzini     .name = "pxa2xx_timer0",
4773bd88451SPaolo Bonzini     .version_id = 2,
4783bd88451SPaolo Bonzini     .minimum_version_id = 2,
4793bd88451SPaolo Bonzini     .minimum_version_id_old = 2,
4803bd88451SPaolo Bonzini     .fields = (VMStateField[]) {
4813bd88451SPaolo Bonzini         VMSTATE_UINT32(value, PXA2xxTimer0),
4823bd88451SPaolo Bonzini         VMSTATE_END_OF_LIST(),
4833bd88451SPaolo Bonzini     },
4843bd88451SPaolo Bonzini };
4853bd88451SPaolo Bonzini 
4863bd88451SPaolo Bonzini static const VMStateDescription vmstate_pxa2xx_timer4_regs = {
4873bd88451SPaolo Bonzini     .name = "pxa2xx_timer4",
4883bd88451SPaolo Bonzini     .version_id = 1,
4893bd88451SPaolo Bonzini     .minimum_version_id = 1,
4903bd88451SPaolo Bonzini     .minimum_version_id_old = 1,
4913bd88451SPaolo Bonzini     .fields = (VMStateField[]) {
4923bd88451SPaolo Bonzini         VMSTATE_STRUCT(tm, PXA2xxTimer4, 1,
4933bd88451SPaolo Bonzini                         vmstate_pxa2xx_timer0_regs, PXA2xxTimer0),
4943bd88451SPaolo Bonzini         VMSTATE_INT32(oldclock, PXA2xxTimer4),
4953bd88451SPaolo Bonzini         VMSTATE_INT32(clock, PXA2xxTimer4),
4963bd88451SPaolo Bonzini         VMSTATE_UINT64(lastload, PXA2xxTimer4),
4973bd88451SPaolo Bonzini         VMSTATE_UINT32(freq, PXA2xxTimer4),
4983bd88451SPaolo Bonzini         VMSTATE_UINT32(control, PXA2xxTimer4),
4993bd88451SPaolo Bonzini         VMSTATE_END_OF_LIST(),
5003bd88451SPaolo Bonzini     },
5013bd88451SPaolo Bonzini };
5023bd88451SPaolo Bonzini 
5033bd88451SPaolo Bonzini static bool pxa2xx_timer_has_tm4_test(void *opaque, int version_id)
5043bd88451SPaolo Bonzini {
5053bd88451SPaolo Bonzini     return pxa2xx_timer_has_tm4(opaque);
5063bd88451SPaolo Bonzini }
5073bd88451SPaolo Bonzini 
5083bd88451SPaolo Bonzini static const VMStateDescription vmstate_pxa2xx_timer_regs = {
5093bd88451SPaolo Bonzini     .name = "pxa2xx_timer",
5103bd88451SPaolo Bonzini     .version_id = 1,
5113bd88451SPaolo Bonzini     .minimum_version_id = 1,
5123bd88451SPaolo Bonzini     .minimum_version_id_old = 1,
5133bd88451SPaolo Bonzini     .post_load = pxa25x_timer_post_load,
5143bd88451SPaolo Bonzini     .fields = (VMStateField[]) {
5153bd88451SPaolo Bonzini         VMSTATE_INT32(clock, PXA2xxTimerInfo),
5163bd88451SPaolo Bonzini         VMSTATE_INT32(oldclock, PXA2xxTimerInfo),
5173bd88451SPaolo Bonzini         VMSTATE_UINT64(lastload, PXA2xxTimerInfo),
5183bd88451SPaolo Bonzini         VMSTATE_STRUCT_ARRAY(timer, PXA2xxTimerInfo, 4, 1,
5193bd88451SPaolo Bonzini                         vmstate_pxa2xx_timer0_regs, PXA2xxTimer0),
5203bd88451SPaolo Bonzini         VMSTATE_UINT32(events, PXA2xxTimerInfo),
5213bd88451SPaolo Bonzini         VMSTATE_UINT32(irq_enabled, PXA2xxTimerInfo),
5223bd88451SPaolo Bonzini         VMSTATE_UINT32(reset3, PXA2xxTimerInfo),
5233bd88451SPaolo Bonzini         VMSTATE_UINT32(snapshot, PXA2xxTimerInfo),
5243bd88451SPaolo Bonzini         VMSTATE_STRUCT_ARRAY_TEST(tm4, PXA2xxTimerInfo, 8,
5253bd88451SPaolo Bonzini                         pxa2xx_timer_has_tm4_test, 0,
5263bd88451SPaolo Bonzini                         vmstate_pxa2xx_timer4_regs, PXA2xxTimer4),
5273bd88451SPaolo Bonzini         VMSTATE_END_OF_LIST(),
5283bd88451SPaolo Bonzini     }
5293bd88451SPaolo Bonzini };
5303bd88451SPaolo Bonzini 
5313bd88451SPaolo Bonzini static Property pxa25x_timer_dev_properties[] = {
5323bd88451SPaolo Bonzini     DEFINE_PROP_UINT32("freq", PXA2xxTimerInfo, freq, PXA25X_FREQ),
5333bd88451SPaolo Bonzini     DEFINE_PROP_BIT("tm4", PXA2xxTimerInfo, flags,
5343bd88451SPaolo Bonzini                     PXA2XX_TIMER_HAVE_TM4, false),
5353bd88451SPaolo Bonzini     DEFINE_PROP_END_OF_LIST(),
5363bd88451SPaolo Bonzini };
5373bd88451SPaolo Bonzini 
5383bd88451SPaolo Bonzini static void pxa25x_timer_dev_class_init(ObjectClass *klass, void *data)
5393bd88451SPaolo Bonzini {
5403bd88451SPaolo Bonzini     DeviceClass *dc = DEVICE_CLASS(klass);
5413bd88451SPaolo Bonzini 
5423bd88451SPaolo Bonzini     dc->desc = "PXA25x timer";
5433bd88451SPaolo Bonzini     dc->props = pxa25x_timer_dev_properties;
5443bd88451SPaolo Bonzini }
5453bd88451SPaolo Bonzini 
5463bd88451SPaolo Bonzini static const TypeInfo pxa25x_timer_dev_info = {
5473bd88451SPaolo Bonzini     .name          = "pxa25x-timer",
548*feea4361SAndreas Färber     .parent        = TYPE_PXA2XX_TIMER,
5493bd88451SPaolo Bonzini     .instance_size = sizeof(PXA2xxTimerInfo),
5503bd88451SPaolo Bonzini     .class_init    = pxa25x_timer_dev_class_init,
5513bd88451SPaolo Bonzini };
5523bd88451SPaolo Bonzini 
5533bd88451SPaolo Bonzini static Property pxa27x_timer_dev_properties[] = {
5543bd88451SPaolo Bonzini     DEFINE_PROP_UINT32("freq", PXA2xxTimerInfo, freq, PXA27X_FREQ),
5553bd88451SPaolo Bonzini     DEFINE_PROP_BIT("tm4", PXA2xxTimerInfo, flags,
5563bd88451SPaolo Bonzini                     PXA2XX_TIMER_HAVE_TM4, true),
5573bd88451SPaolo Bonzini     DEFINE_PROP_END_OF_LIST(),
5583bd88451SPaolo Bonzini };
5593bd88451SPaolo Bonzini 
5603bd88451SPaolo Bonzini static void pxa27x_timer_dev_class_init(ObjectClass *klass, void *data)
5613bd88451SPaolo Bonzini {
5623bd88451SPaolo Bonzini     DeviceClass *dc = DEVICE_CLASS(klass);
5633bd88451SPaolo Bonzini 
5643bd88451SPaolo Bonzini     dc->desc = "PXA27x timer";
5653bd88451SPaolo Bonzini     dc->props = pxa27x_timer_dev_properties;
5663bd88451SPaolo Bonzini }
5673bd88451SPaolo Bonzini 
5683bd88451SPaolo Bonzini static const TypeInfo pxa27x_timer_dev_info = {
5693bd88451SPaolo Bonzini     .name          = "pxa27x-timer",
570*feea4361SAndreas Färber     .parent        = TYPE_PXA2XX_TIMER,
5713bd88451SPaolo Bonzini     .instance_size = sizeof(PXA2xxTimerInfo),
5723bd88451SPaolo Bonzini     .class_init    = pxa27x_timer_dev_class_init,
5733bd88451SPaolo Bonzini };
5743bd88451SPaolo Bonzini 
575*feea4361SAndreas Färber static void pxa2xx_timer_class_init(ObjectClass *oc, void *data)
576*feea4361SAndreas Färber {
577*feea4361SAndreas Färber     DeviceClass *dc = DEVICE_CLASS(oc);
578*feea4361SAndreas Färber     SysBusDeviceClass *sdc = SYS_BUS_DEVICE_CLASS(oc);
579*feea4361SAndreas Färber 
580*feea4361SAndreas Färber     sdc->init = pxa2xx_timer_init;
581*feea4361SAndreas Färber     dc->vmsd = &vmstate_pxa2xx_timer_regs;
582*feea4361SAndreas Färber }
583*feea4361SAndreas Färber 
584*feea4361SAndreas Färber static const TypeInfo pxa2xx_timer_type_info = {
585*feea4361SAndreas Färber     .name          = TYPE_PXA2XX_TIMER,
586*feea4361SAndreas Färber     .parent        = TYPE_SYS_BUS_DEVICE,
587*feea4361SAndreas Färber     .instance_size = sizeof(PXA2xxTimerInfo),
588*feea4361SAndreas Färber     .abstract      = true,
589*feea4361SAndreas Färber     .class_init    = pxa2xx_timer_class_init,
590*feea4361SAndreas Färber };
591*feea4361SAndreas Färber 
5923bd88451SPaolo Bonzini static void pxa2xx_timer_register_types(void)
5933bd88451SPaolo Bonzini {
594*feea4361SAndreas Färber     type_register_static(&pxa2xx_timer_type_info);
5953bd88451SPaolo Bonzini     type_register_static(&pxa25x_timer_dev_info);
5963bd88451SPaolo Bonzini     type_register_static(&pxa27x_timer_dev_info);
5973bd88451SPaolo Bonzini }
5983bd88451SPaolo Bonzini 
5993bd88451SPaolo Bonzini type_init(pxa2xx_timer_register_types)
600