xref: /openbmc/qemu/hw/arm/integratorcp.c (revision 8e6fe6b8)
1 /*
2  * ARM Integrator CP System emulation.
3  *
4  * Copyright (c) 2005-2007 CodeSourcery.
5  * Written by Paul Brook
6  *
7  * This code is licensed under the GPL
8  */
9 
10 #include "qemu/osdep.h"
11 #include "qapi/error.h"
12 #include "cpu.h"
13 #include "hw/sysbus.h"
14 #include "hw/boards.h"
15 #include "hw/arm/boot.h"
16 #include "hw/misc/arm_integrator_debug.h"
17 #include "hw/net/smc91c111.h"
18 #include "net/net.h"
19 #include "exec/address-spaces.h"
20 #include "sysemu/sysemu.h"
21 #include "qemu/error-report.h"
22 #include "hw/char/pl011.h"
23 
24 #define TYPE_INTEGRATOR_CM "integrator_core"
25 #define INTEGRATOR_CM(obj) \
26     OBJECT_CHECK(IntegratorCMState, (obj), TYPE_INTEGRATOR_CM)
27 
28 typedef struct IntegratorCMState {
29     /*< private >*/
30     SysBusDevice parent_obj;
31     /*< public >*/
32 
33     MemoryRegion iomem;
34     uint32_t memsz;
35     MemoryRegion flash;
36     uint32_t cm_osc;
37     uint32_t cm_ctrl;
38     uint32_t cm_lock;
39     uint32_t cm_auxosc;
40     uint32_t cm_sdram;
41     uint32_t cm_init;
42     uint32_t cm_flags;
43     uint32_t cm_nvflags;
44     uint32_t cm_refcnt_offset;
45     uint32_t int_level;
46     uint32_t irq_enabled;
47     uint32_t fiq_enabled;
48 } IntegratorCMState;
49 
50 static uint8_t integrator_spd[128] = {
51    128, 8, 4, 11, 9, 1, 64, 0,  2, 0xa0, 0xa0, 0, 0, 8, 0, 1,
52    0xe, 4, 0x1c, 1, 2, 0x20, 0xc0, 0, 0, 0, 0, 0x30, 0x28, 0x30, 0x28, 0x40
53 };
54 
55 static const VMStateDescription vmstate_integratorcm = {
56     .name = "integratorcm",
57     .version_id = 1,
58     .minimum_version_id = 1,
59     .fields      = (VMStateField[]) {
60         VMSTATE_UINT32(cm_osc, IntegratorCMState),
61         VMSTATE_UINT32(cm_ctrl, IntegratorCMState),
62         VMSTATE_UINT32(cm_lock, IntegratorCMState),
63         VMSTATE_UINT32(cm_auxosc, IntegratorCMState),
64         VMSTATE_UINT32(cm_sdram, IntegratorCMState),
65         VMSTATE_UINT32(cm_init, IntegratorCMState),
66         VMSTATE_UINT32(cm_flags, IntegratorCMState),
67         VMSTATE_UINT32(cm_nvflags, IntegratorCMState),
68         VMSTATE_UINT32(int_level, IntegratorCMState),
69         VMSTATE_UINT32(irq_enabled, IntegratorCMState),
70         VMSTATE_UINT32(fiq_enabled, IntegratorCMState),
71         VMSTATE_END_OF_LIST()
72     }
73 };
74 
75 static uint64_t integratorcm_read(void *opaque, hwaddr offset,
76                                   unsigned size)
77 {
78     IntegratorCMState *s = opaque;
79     if (offset >= 0x100 && offset < 0x200) {
80         /* CM_SPD */
81         if (offset >= 0x180)
82             return 0;
83         return integrator_spd[offset >> 2];
84     }
85     switch (offset >> 2) {
86     case 0: /* CM_ID */
87         return 0x411a3001;
88     case 1: /* CM_PROC */
89         return 0;
90     case 2: /* CM_OSC */
91         return s->cm_osc;
92     case 3: /* CM_CTRL */
93         return s->cm_ctrl;
94     case 4: /* CM_STAT */
95         return 0x00100000;
96     case 5: /* CM_LOCK */
97         if (s->cm_lock == 0xa05f) {
98             return 0x1a05f;
99         } else {
100             return s->cm_lock;
101         }
102     case 6: /* CM_LMBUSCNT */
103         /* ??? High frequency timer.  */
104         hw_error("integratorcm_read: CM_LMBUSCNT");
105     case 7: /* CM_AUXOSC */
106         return s->cm_auxosc;
107     case 8: /* CM_SDRAM */
108         return s->cm_sdram;
109     case 9: /* CM_INIT */
110         return s->cm_init;
111     case 10: /* CM_REFCNT */
112         /* This register, CM_REFCNT, provides a 32-bit count value.
113          * The count increments at the fixed reference clock frequency of 24MHz
114          * and can be used as a real-time counter.
115          */
116         return (uint32_t)muldiv64(qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL), 24,
117                                   1000) - s->cm_refcnt_offset;
118     case 12: /* CM_FLAGS */
119         return s->cm_flags;
120     case 14: /* CM_NVFLAGS */
121         return s->cm_nvflags;
122     case 16: /* CM_IRQ_STAT */
123         return s->int_level & s->irq_enabled;
124     case 17: /* CM_IRQ_RSTAT */
125         return s->int_level;
126     case 18: /* CM_IRQ_ENSET */
127         return s->irq_enabled;
128     case 20: /* CM_SOFT_INTSET */
129         return s->int_level & 1;
130     case 24: /* CM_FIQ_STAT */
131         return s->int_level & s->fiq_enabled;
132     case 25: /* CM_FIQ_RSTAT */
133         return s->int_level;
134     case 26: /* CM_FIQ_ENSET */
135         return s->fiq_enabled;
136     case 32: /* CM_VOLTAGE_CTL0 */
137     case 33: /* CM_VOLTAGE_CTL1 */
138     case 34: /* CM_VOLTAGE_CTL2 */
139     case 35: /* CM_VOLTAGE_CTL3 */
140         /* ??? Voltage control unimplemented.  */
141         return 0;
142     default:
143         hw_error("integratorcm_read: Unimplemented offset 0x%x\n",
144                  (int)offset);
145         return 0;
146     }
147 }
148 
149 static void integratorcm_do_remap(IntegratorCMState *s)
150 {
151     /* Sync memory region state with CM_CTRL REMAP bit:
152      * bit 0 => flash at address 0; bit 1 => RAM
153      */
154     memory_region_set_enabled(&s->flash, !(s->cm_ctrl & 4));
155 }
156 
157 static void integratorcm_set_ctrl(IntegratorCMState *s, uint32_t value)
158 {
159     if (value & 8) {
160         qemu_system_reset_request(SHUTDOWN_CAUSE_GUEST_RESET);
161     }
162     if ((s->cm_ctrl ^ value) & 1) {
163         /* (value & 1) != 0 means the green "MISC LED" is lit.
164          * We don't have any nice place to display LEDs. printf is a bad
165          * idea because Linux uses the LED as a heartbeat and the output
166          * will swamp anything else on the terminal.
167          */
168     }
169     /* Note that the RESET bit [3] always reads as zero */
170     s->cm_ctrl = (s->cm_ctrl & ~5) | (value & 5);
171     integratorcm_do_remap(s);
172 }
173 
174 static void integratorcm_update(IntegratorCMState *s)
175 {
176     /* ??? The CPU irq/fiq is raised when either the core module or base PIC
177        are active.  */
178     if (s->int_level & (s->irq_enabled | s->fiq_enabled))
179         hw_error("Core module interrupt\n");
180 }
181 
182 static void integratorcm_write(void *opaque, hwaddr offset,
183                                uint64_t value, unsigned size)
184 {
185     IntegratorCMState *s = opaque;
186     switch (offset >> 2) {
187     case 2: /* CM_OSC */
188         if (s->cm_lock == 0xa05f)
189             s->cm_osc = value;
190         break;
191     case 3: /* CM_CTRL */
192         integratorcm_set_ctrl(s, value);
193         break;
194     case 5: /* CM_LOCK */
195         s->cm_lock = value & 0xffff;
196         break;
197     case 7: /* CM_AUXOSC */
198         if (s->cm_lock == 0xa05f)
199             s->cm_auxosc = value;
200         break;
201     case 8: /* CM_SDRAM */
202         s->cm_sdram = value;
203         break;
204     case 9: /* CM_INIT */
205         /* ??? This can change the memory bus frequency.  */
206         s->cm_init = value;
207         break;
208     case 12: /* CM_FLAGSS */
209         s->cm_flags |= value;
210         break;
211     case 13: /* CM_FLAGSC */
212         s->cm_flags &= ~value;
213         break;
214     case 14: /* CM_NVFLAGSS */
215         s->cm_nvflags |= value;
216         break;
217     case 15: /* CM_NVFLAGSS */
218         s->cm_nvflags &= ~value;
219         break;
220     case 18: /* CM_IRQ_ENSET */
221         s->irq_enabled |= value;
222         integratorcm_update(s);
223         break;
224     case 19: /* CM_IRQ_ENCLR */
225         s->irq_enabled &= ~value;
226         integratorcm_update(s);
227         break;
228     case 20: /* CM_SOFT_INTSET */
229         s->int_level |= (value & 1);
230         integratorcm_update(s);
231         break;
232     case 21: /* CM_SOFT_INTCLR */
233         s->int_level &= ~(value & 1);
234         integratorcm_update(s);
235         break;
236     case 26: /* CM_FIQ_ENSET */
237         s->fiq_enabled |= value;
238         integratorcm_update(s);
239         break;
240     case 27: /* CM_FIQ_ENCLR */
241         s->fiq_enabled &= ~value;
242         integratorcm_update(s);
243         break;
244     case 32: /* CM_VOLTAGE_CTL0 */
245     case 33: /* CM_VOLTAGE_CTL1 */
246     case 34: /* CM_VOLTAGE_CTL2 */
247     case 35: /* CM_VOLTAGE_CTL3 */
248         /* ??? Voltage control unimplemented.  */
249         break;
250     default:
251         hw_error("integratorcm_write: Unimplemented offset 0x%x\n",
252                  (int)offset);
253         break;
254     }
255 }
256 
257 /* Integrator/CM control registers.  */
258 
259 static const MemoryRegionOps integratorcm_ops = {
260     .read = integratorcm_read,
261     .write = integratorcm_write,
262     .endianness = DEVICE_NATIVE_ENDIAN,
263 };
264 
265 static void integratorcm_init(Object *obj)
266 {
267     IntegratorCMState *s = INTEGRATOR_CM(obj);
268 
269     s->cm_osc = 0x01000048;
270     /* ??? What should the high bits of this value be?  */
271     s->cm_auxosc = 0x0007feff;
272     s->cm_sdram = 0x00011122;
273     memcpy(integrator_spd + 73, "QEMU-MEMORY", 11);
274     s->cm_init = 0x00000112;
275     s->cm_refcnt_offset = muldiv64(qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL), 24,
276                                    1000);
277 
278     /* ??? Save/restore.  */
279 }
280 
281 static void integratorcm_realize(DeviceState *d, Error **errp)
282 {
283     IntegratorCMState *s = INTEGRATOR_CM(d);
284     SysBusDevice *dev = SYS_BUS_DEVICE(d);
285     Error *local_err = NULL;
286 
287     memory_region_init_ram(&s->flash, OBJECT(d), "integrator.flash", 0x100000,
288                            &local_err);
289     if (local_err) {
290         error_propagate(errp, local_err);
291         return;
292     }
293 
294     memory_region_init_io(&s->iomem, OBJECT(d), &integratorcm_ops, s,
295                           "integratorcm", 0x00800000);
296     sysbus_init_mmio(dev, &s->iomem);
297 
298     integratorcm_do_remap(s);
299 
300     if (s->memsz >= 256) {
301         integrator_spd[31] = 64;
302         s->cm_sdram |= 0x10;
303     } else if (s->memsz >= 128) {
304         integrator_spd[31] = 32;
305         s->cm_sdram |= 0x0c;
306     } else if (s->memsz >= 64) {
307         integrator_spd[31] = 16;
308         s->cm_sdram |= 0x08;
309     } else if (s->memsz >= 32) {
310         integrator_spd[31] = 4;
311         s->cm_sdram |= 0x04;
312     } else {
313         integrator_spd[31] = 2;
314     }
315 }
316 
317 /* Integrator/CP hardware emulation.  */
318 /* Primary interrupt controller.  */
319 
320 #define TYPE_INTEGRATOR_PIC "integrator_pic"
321 #define INTEGRATOR_PIC(obj) \
322    OBJECT_CHECK(icp_pic_state, (obj), TYPE_INTEGRATOR_PIC)
323 
324 typedef struct icp_pic_state {
325     /*< private >*/
326     SysBusDevice parent_obj;
327     /*< public >*/
328 
329     MemoryRegion iomem;
330     uint32_t level;
331     uint32_t irq_enabled;
332     uint32_t fiq_enabled;
333     qemu_irq parent_irq;
334     qemu_irq parent_fiq;
335 } icp_pic_state;
336 
337 static const VMStateDescription vmstate_icp_pic = {
338     .name = "icp_pic",
339     .version_id = 1,
340     .minimum_version_id = 1,
341     .fields      = (VMStateField[]) {
342         VMSTATE_UINT32(level, icp_pic_state),
343         VMSTATE_UINT32(irq_enabled, icp_pic_state),
344         VMSTATE_UINT32(fiq_enabled, icp_pic_state),
345         VMSTATE_END_OF_LIST()
346     }
347 };
348 
349 static void icp_pic_update(icp_pic_state *s)
350 {
351     uint32_t flags;
352 
353     flags = (s->level & s->irq_enabled);
354     qemu_set_irq(s->parent_irq, flags != 0);
355     flags = (s->level & s->fiq_enabled);
356     qemu_set_irq(s->parent_fiq, flags != 0);
357 }
358 
359 static void icp_pic_set_irq(void *opaque, int irq, int level)
360 {
361     icp_pic_state *s = (icp_pic_state *)opaque;
362     if (level)
363         s->level |= 1 << irq;
364     else
365         s->level &= ~(1 << irq);
366     icp_pic_update(s);
367 }
368 
369 static uint64_t icp_pic_read(void *opaque, hwaddr offset,
370                              unsigned size)
371 {
372     icp_pic_state *s = (icp_pic_state *)opaque;
373 
374     switch (offset >> 2) {
375     case 0: /* IRQ_STATUS */
376         return s->level & s->irq_enabled;
377     case 1: /* IRQ_RAWSTAT */
378         return s->level;
379     case 2: /* IRQ_ENABLESET */
380         return s->irq_enabled;
381     case 4: /* INT_SOFTSET */
382         return s->level & 1;
383     case 8: /* FRQ_STATUS */
384         return s->level & s->fiq_enabled;
385     case 9: /* FRQ_RAWSTAT */
386         return s->level;
387     case 10: /* FRQ_ENABLESET */
388         return s->fiq_enabled;
389     case 3: /* IRQ_ENABLECLR */
390     case 5: /* INT_SOFTCLR */
391     case 11: /* FRQ_ENABLECLR */
392     default:
393         printf ("icp_pic_read: Bad register offset 0x%x\n", (int)offset);
394         return 0;
395     }
396 }
397 
398 static void icp_pic_write(void *opaque, hwaddr offset,
399                           uint64_t value, unsigned size)
400 {
401     icp_pic_state *s = (icp_pic_state *)opaque;
402 
403     switch (offset >> 2) {
404     case 2: /* IRQ_ENABLESET */
405         s->irq_enabled |= value;
406         break;
407     case 3: /* IRQ_ENABLECLR */
408         s->irq_enabled &= ~value;
409         break;
410     case 4: /* INT_SOFTSET */
411         if (value & 1)
412             icp_pic_set_irq(s, 0, 1);
413         break;
414     case 5: /* INT_SOFTCLR */
415         if (value & 1)
416             icp_pic_set_irq(s, 0, 0);
417         break;
418     case 10: /* FRQ_ENABLESET */
419         s->fiq_enabled |= value;
420         break;
421     case 11: /* FRQ_ENABLECLR */
422         s->fiq_enabled &= ~value;
423         break;
424     case 0: /* IRQ_STATUS */
425     case 1: /* IRQ_RAWSTAT */
426     case 8: /* FRQ_STATUS */
427     case 9: /* FRQ_RAWSTAT */
428     default:
429         printf ("icp_pic_write: Bad register offset 0x%x\n", (int)offset);
430         return;
431     }
432     icp_pic_update(s);
433 }
434 
435 static const MemoryRegionOps icp_pic_ops = {
436     .read = icp_pic_read,
437     .write = icp_pic_write,
438     .endianness = DEVICE_NATIVE_ENDIAN,
439 };
440 
441 static void icp_pic_init(Object *obj)
442 {
443     DeviceState *dev = DEVICE(obj);
444     icp_pic_state *s = INTEGRATOR_PIC(obj);
445     SysBusDevice *sbd = SYS_BUS_DEVICE(obj);
446 
447     qdev_init_gpio_in(dev, icp_pic_set_irq, 32);
448     sysbus_init_irq(sbd, &s->parent_irq);
449     sysbus_init_irq(sbd, &s->parent_fiq);
450     memory_region_init_io(&s->iomem, obj, &icp_pic_ops, s,
451                           "icp-pic", 0x00800000);
452     sysbus_init_mmio(sbd, &s->iomem);
453 }
454 
455 /* CP control registers.  */
456 
457 #define TYPE_ICP_CONTROL_REGS "icp-ctrl-regs"
458 #define ICP_CONTROL_REGS(obj) \
459     OBJECT_CHECK(ICPCtrlRegsState, (obj), TYPE_ICP_CONTROL_REGS)
460 
461 typedef struct ICPCtrlRegsState {
462     /*< private >*/
463     SysBusDevice parent_obj;
464     /*< public >*/
465 
466     MemoryRegion iomem;
467 
468     qemu_irq mmc_irq;
469     uint32_t intreg_state;
470 } ICPCtrlRegsState;
471 
472 #define ICP_GPIO_MMC_WPROT      "mmc-wprot"
473 #define ICP_GPIO_MMC_CARDIN     "mmc-cardin"
474 
475 #define ICP_INTREG_WPROT        (1 << 0)
476 #define ICP_INTREG_CARDIN       (1 << 3)
477 
478 static const VMStateDescription vmstate_icp_control = {
479     .name = "icp_control",
480     .version_id = 1,
481     .minimum_version_id = 1,
482     .fields      = (VMStateField[]) {
483         VMSTATE_UINT32(intreg_state, ICPCtrlRegsState),
484         VMSTATE_END_OF_LIST()
485     }
486 };
487 
488 static uint64_t icp_control_read(void *opaque, hwaddr offset,
489                                  unsigned size)
490 {
491     ICPCtrlRegsState *s = opaque;
492 
493     switch (offset >> 2) {
494     case 0: /* CP_IDFIELD */
495         return 0x41034003;
496     case 1: /* CP_FLASHPROG */
497         return 0;
498     case 2: /* CP_INTREG */
499         return s->intreg_state;
500     case 3: /* CP_DECODE */
501         return 0x11;
502     default:
503         hw_error("icp_control_read: Bad offset %x\n", (int)offset);
504         return 0;
505     }
506 }
507 
508 static void icp_control_write(void *opaque, hwaddr offset,
509                           uint64_t value, unsigned size)
510 {
511     ICPCtrlRegsState *s = opaque;
512 
513     switch (offset >> 2) {
514     case 2: /* CP_INTREG */
515         s->intreg_state &= ~(value & ICP_INTREG_CARDIN);
516         qemu_set_irq(s->mmc_irq, !!(s->intreg_state & ICP_INTREG_CARDIN));
517         break;
518     case 1: /* CP_FLASHPROG */
519     case 3: /* CP_DECODE */
520         /* Nothing interesting implemented yet.  */
521         break;
522     default:
523         hw_error("icp_control_write: Bad offset %x\n", (int)offset);
524     }
525 }
526 
527 static const MemoryRegionOps icp_control_ops = {
528     .read = icp_control_read,
529     .write = icp_control_write,
530     .endianness = DEVICE_NATIVE_ENDIAN,
531 };
532 
533 static void icp_control_mmc_wprot(void *opaque, int line, int level)
534 {
535     ICPCtrlRegsState *s = opaque;
536 
537     s->intreg_state &= ~ICP_INTREG_WPROT;
538     if (level) {
539         s->intreg_state |= ICP_INTREG_WPROT;
540     }
541 }
542 
543 static void icp_control_mmc_cardin(void *opaque, int line, int level)
544 {
545     ICPCtrlRegsState *s = opaque;
546 
547     /* line is released by writing to CP_INTREG */
548     if (level) {
549         s->intreg_state |= ICP_INTREG_CARDIN;
550         qemu_set_irq(s->mmc_irq, 1);
551     }
552 }
553 
554 static void icp_control_init(Object *obj)
555 {
556     SysBusDevice *sbd = SYS_BUS_DEVICE(obj);
557     ICPCtrlRegsState *s = ICP_CONTROL_REGS(obj);
558     DeviceState *dev = DEVICE(obj);
559 
560     memory_region_init_io(&s->iomem, OBJECT(s), &icp_control_ops, s,
561                           "icp_ctrl_regs", 0x00800000);
562     sysbus_init_mmio(sbd, &s->iomem);
563 
564     qdev_init_gpio_in_named(dev, icp_control_mmc_wprot, ICP_GPIO_MMC_WPROT, 1);
565     qdev_init_gpio_in_named(dev, icp_control_mmc_cardin,
566                             ICP_GPIO_MMC_CARDIN, 1);
567     sysbus_init_irq(sbd, &s->mmc_irq);
568 }
569 
570 
571 /* Board init.  */
572 
573 static struct arm_boot_info integrator_binfo = {
574     .loader_start = 0x0,
575     .board_id = 0x113,
576 };
577 
578 static void integratorcp_init(MachineState *machine)
579 {
580     ram_addr_t ram_size = machine->ram_size;
581     const char *kernel_filename = machine->kernel_filename;
582     const char *kernel_cmdline = machine->kernel_cmdline;
583     const char *initrd_filename = machine->initrd_filename;
584     Object *cpuobj;
585     ARMCPU *cpu;
586     MemoryRegion *address_space_mem = get_system_memory();
587     MemoryRegion *ram = g_new(MemoryRegion, 1);
588     MemoryRegion *ram_alias = g_new(MemoryRegion, 1);
589     qemu_irq pic[32];
590     DeviceState *dev, *sic, *icp;
591     int i;
592 
593     cpuobj = object_new(machine->cpu_type);
594 
595     /* By default ARM1176 CPUs have EL3 enabled.  This board does not
596      * currently support EL3 so the CPU EL3 property is disabled before
597      * realization.
598      */
599     if (object_property_find(cpuobj, "has_el3", NULL)) {
600         object_property_set_bool(cpuobj, false, "has_el3", &error_fatal);
601     }
602 
603     object_property_set_bool(cpuobj, true, "realized", &error_fatal);
604 
605     cpu = ARM_CPU(cpuobj);
606 
607     memory_region_allocate_system_memory(ram, NULL, "integrator.ram",
608                                          ram_size);
609     /* ??? On a real system the first 1Mb is mapped as SSRAM or boot flash.  */
610     /* ??? RAM should repeat to fill physical memory space.  */
611     /* SDRAM at address zero*/
612     memory_region_add_subregion(address_space_mem, 0, ram);
613     /* And again at address 0x80000000 */
614     memory_region_init_alias(ram_alias, NULL, "ram.alias", ram, 0, ram_size);
615     memory_region_add_subregion(address_space_mem, 0x80000000, ram_alias);
616 
617     dev = qdev_create(NULL, TYPE_INTEGRATOR_CM);
618     qdev_prop_set_uint32(dev, "memsz", ram_size >> 20);
619     qdev_init_nofail(dev);
620     sysbus_mmio_map((SysBusDevice *)dev, 0, 0x10000000);
621 
622     dev = sysbus_create_varargs(TYPE_INTEGRATOR_PIC, 0x14000000,
623                                 qdev_get_gpio_in(DEVICE(cpu), ARM_CPU_IRQ),
624                                 qdev_get_gpio_in(DEVICE(cpu), ARM_CPU_FIQ),
625                                 NULL);
626     for (i = 0; i < 32; i++) {
627         pic[i] = qdev_get_gpio_in(dev, i);
628     }
629     sic = sysbus_create_simple(TYPE_INTEGRATOR_PIC, 0xca000000, pic[26]);
630     sysbus_create_varargs("integrator_pit", 0x13000000,
631                           pic[5], pic[6], pic[7], NULL);
632     sysbus_create_simple("pl031", 0x15000000, pic[8]);
633     pl011_create(0x16000000, pic[1], serial_hd(0));
634     pl011_create(0x17000000, pic[2], serial_hd(1));
635     icp = sysbus_create_simple(TYPE_ICP_CONTROL_REGS, 0xcb000000,
636                                qdev_get_gpio_in(sic, 3));
637     sysbus_create_simple("pl050_keyboard", 0x18000000, pic[3]);
638     sysbus_create_simple("pl050_mouse", 0x19000000, pic[4]);
639     sysbus_create_simple(TYPE_INTEGRATOR_DEBUG, 0x1a000000, 0);
640 
641     dev = sysbus_create_varargs("pl181", 0x1c000000, pic[23], pic[24], NULL);
642     qdev_connect_gpio_out(dev, 0,
643                           qdev_get_gpio_in_named(icp, ICP_GPIO_MMC_WPROT, 0));
644     qdev_connect_gpio_out(dev, 1,
645                           qdev_get_gpio_in_named(icp, ICP_GPIO_MMC_CARDIN, 0));
646 
647     if (nd_table[0].used)
648         smc91c111_init(&nd_table[0], 0xc8000000, pic[27]);
649 
650     sysbus_create_simple("pl110", 0xc0000000, pic[22]);
651 
652     integrator_binfo.ram_size = ram_size;
653     integrator_binfo.kernel_filename = kernel_filename;
654     integrator_binfo.kernel_cmdline = kernel_cmdline;
655     integrator_binfo.initrd_filename = initrd_filename;
656     arm_load_kernel(cpu, &integrator_binfo);
657 }
658 
659 static void integratorcp_machine_init(MachineClass *mc)
660 {
661     mc->desc = "ARM Integrator/CP (ARM926EJ-S)";
662     mc->init = integratorcp_init;
663     mc->ignore_memory_transaction_failures = true;
664     mc->default_cpu_type = ARM_CPU_TYPE_NAME("arm926");
665 }
666 
667 DEFINE_MACHINE("integratorcp", integratorcp_machine_init)
668 
669 static Property core_properties[] = {
670     DEFINE_PROP_UINT32("memsz", IntegratorCMState, memsz, 0),
671     DEFINE_PROP_END_OF_LIST(),
672 };
673 
674 static void core_class_init(ObjectClass *klass, void *data)
675 {
676     DeviceClass *dc = DEVICE_CLASS(klass);
677 
678     dc->props = core_properties;
679     dc->realize = integratorcm_realize;
680     dc->vmsd = &vmstate_integratorcm;
681 }
682 
683 static void icp_pic_class_init(ObjectClass *klass, void *data)
684 {
685     DeviceClass *dc = DEVICE_CLASS(klass);
686 
687     dc->vmsd = &vmstate_icp_pic;
688 }
689 
690 static void icp_control_class_init(ObjectClass *klass, void *data)
691 {
692     DeviceClass *dc = DEVICE_CLASS(klass);
693 
694     dc->vmsd = &vmstate_icp_control;
695 }
696 
697 static const TypeInfo core_info = {
698     .name          = TYPE_INTEGRATOR_CM,
699     .parent        = TYPE_SYS_BUS_DEVICE,
700     .instance_size = sizeof(IntegratorCMState),
701     .instance_init = integratorcm_init,
702     .class_init    = core_class_init,
703 };
704 
705 static const TypeInfo icp_pic_info = {
706     .name          = TYPE_INTEGRATOR_PIC,
707     .parent        = TYPE_SYS_BUS_DEVICE,
708     .instance_size = sizeof(icp_pic_state),
709     .instance_init = icp_pic_init,
710     .class_init    = icp_pic_class_init,
711 };
712 
713 static const TypeInfo icp_ctrl_regs_info = {
714     .name          = TYPE_ICP_CONTROL_REGS,
715     .parent        = TYPE_SYS_BUS_DEVICE,
716     .instance_size = sizeof(ICPCtrlRegsState),
717     .instance_init = icp_control_init,
718     .class_init    = icp_control_class_init,
719 };
720 
721 static void integratorcp_register_types(void)
722 {
723     type_register_static(&icp_pic_info);
724     type_register_static(&core_info);
725     type_register_static(&icp_ctrl_regs_info);
726 }
727 
728 type_init(integratorcp_register_types)
729