1 /* 2 * QEMU VMware-SVGA "chipset". 3 * 4 * Copyright (c) 2007 Andrzej Zaborowski <balrog@zabor.org> 5 * 6 * Permission is hereby granted, free of charge, to any person obtaining a copy 7 * of this software and associated documentation files (the "Software"), to deal 8 * in the Software without restriction, including without limitation the rights 9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 10 * copies of the Software, and to permit persons to whom the Software is 11 * furnished to do so, subject to the following conditions: 12 * 13 * The above copyright notice and this permission notice shall be included in 14 * all copies or substantial portions of the Software. 15 * 16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL 19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN 22 * THE SOFTWARE. 23 */ 24 25 #include "qemu/osdep.h" 26 #include "qemu/module.h" 27 #include "qemu/units.h" 28 #include "qapi/error.h" 29 #include "qemu/log.h" 30 #include "hw/loader.h" 31 #include "trace.h" 32 #include "hw/pci/pci_device.h" 33 #include "hw/qdev-properties.h" 34 #include "migration/vmstate.h" 35 #include "qom/object.h" 36 #include "ui/console.h" 37 38 #undef VERBOSE 39 #define HW_RECT_ACCEL 40 #define HW_FILL_ACCEL 41 #define HW_MOUSE_ACCEL 42 43 #include "vga_int.h" 44 45 /* See http://vmware-svga.sf.net/ for some documentation on VMWare SVGA */ 46 47 struct vmsvga_state_s { 48 VGACommonState vga; 49 50 int invalidated; 51 int enable; 52 int config; 53 struct { 54 int id; 55 int x; 56 int y; 57 int on; 58 } cursor; 59 60 int index; 61 int scratch_size; 62 uint32_t *scratch; 63 int new_width; 64 int new_height; 65 int new_depth; 66 uint32_t guest; 67 uint32_t svgaid; 68 int syncing; 69 70 MemoryRegion fifo_ram; 71 uint8_t *fifo_ptr; 72 unsigned int fifo_size; 73 74 uint32_t *fifo; 75 uint32_t fifo_min; 76 uint32_t fifo_max; 77 uint32_t fifo_next; 78 uint32_t fifo_stop; 79 80 #define REDRAW_FIFO_LEN 512 81 struct vmsvga_rect_s { 82 int x, y, w, h; 83 } redraw_fifo[REDRAW_FIFO_LEN]; 84 int redraw_fifo_last; 85 }; 86 87 #define TYPE_VMWARE_SVGA "vmware-svga" 88 89 DECLARE_INSTANCE_CHECKER(struct pci_vmsvga_state_s, VMWARE_SVGA, 90 TYPE_VMWARE_SVGA) 91 92 struct pci_vmsvga_state_s { 93 /*< private >*/ 94 PCIDevice parent_obj; 95 /*< public >*/ 96 97 struct vmsvga_state_s chip; 98 MemoryRegion io_bar; 99 }; 100 101 #define SVGA_MAGIC 0x900000UL 102 #define SVGA_MAKE_ID(ver) (SVGA_MAGIC << 8 | (ver)) 103 #define SVGA_ID_0 SVGA_MAKE_ID(0) 104 #define SVGA_ID_1 SVGA_MAKE_ID(1) 105 #define SVGA_ID_2 SVGA_MAKE_ID(2) 106 107 #define SVGA_LEGACY_BASE_PORT 0x4560 108 #define SVGA_INDEX_PORT 0x0 109 #define SVGA_VALUE_PORT 0x1 110 #define SVGA_BIOS_PORT 0x2 111 112 #define SVGA_VERSION_2 113 114 #ifdef SVGA_VERSION_2 115 # define SVGA_ID SVGA_ID_2 116 # define SVGA_IO_BASE SVGA_LEGACY_BASE_PORT 117 # define SVGA_IO_MUL 1 118 # define SVGA_FIFO_SIZE 0x10000 119 # define SVGA_PCI_DEVICE_ID PCI_DEVICE_ID_VMWARE_SVGA2 120 #else 121 # define SVGA_ID SVGA_ID_1 122 # define SVGA_IO_BASE SVGA_LEGACY_BASE_PORT 123 # define SVGA_IO_MUL 4 124 # define SVGA_FIFO_SIZE 0x10000 125 # define SVGA_PCI_DEVICE_ID PCI_DEVICE_ID_VMWARE_SVGA 126 #endif 127 128 enum { 129 /* ID 0, 1 and 2 registers */ 130 SVGA_REG_ID = 0, 131 SVGA_REG_ENABLE = 1, 132 SVGA_REG_WIDTH = 2, 133 SVGA_REG_HEIGHT = 3, 134 SVGA_REG_MAX_WIDTH = 4, 135 SVGA_REG_MAX_HEIGHT = 5, 136 SVGA_REG_DEPTH = 6, 137 SVGA_REG_BITS_PER_PIXEL = 7, /* Current bpp in the guest */ 138 SVGA_REG_PSEUDOCOLOR = 8, 139 SVGA_REG_RED_MASK = 9, 140 SVGA_REG_GREEN_MASK = 10, 141 SVGA_REG_BLUE_MASK = 11, 142 SVGA_REG_BYTES_PER_LINE = 12, 143 SVGA_REG_FB_START = 13, 144 SVGA_REG_FB_OFFSET = 14, 145 SVGA_REG_VRAM_SIZE = 15, 146 SVGA_REG_FB_SIZE = 16, 147 148 /* ID 1 and 2 registers */ 149 SVGA_REG_CAPABILITIES = 17, 150 SVGA_REG_MEM_START = 18, /* Memory for command FIFO */ 151 SVGA_REG_MEM_SIZE = 19, 152 SVGA_REG_CONFIG_DONE = 20, /* Set when memory area configured */ 153 SVGA_REG_SYNC = 21, /* Write to force synchronization */ 154 SVGA_REG_BUSY = 22, /* Read to check if sync is done */ 155 SVGA_REG_GUEST_ID = 23, /* Set guest OS identifier */ 156 SVGA_REG_CURSOR_ID = 24, /* ID of cursor */ 157 SVGA_REG_CURSOR_X = 25, /* Set cursor X position */ 158 SVGA_REG_CURSOR_Y = 26, /* Set cursor Y position */ 159 SVGA_REG_CURSOR_ON = 27, /* Turn cursor on/off */ 160 SVGA_REG_HOST_BITS_PER_PIXEL = 28, /* Current bpp in the host */ 161 SVGA_REG_SCRATCH_SIZE = 29, /* Number of scratch registers */ 162 SVGA_REG_MEM_REGS = 30, /* Number of FIFO registers */ 163 SVGA_REG_NUM_DISPLAYS = 31, /* Number of guest displays */ 164 SVGA_REG_PITCHLOCK = 32, /* Fixed pitch for all modes */ 165 166 SVGA_PALETTE_BASE = 1024, /* Base of SVGA color map */ 167 SVGA_PALETTE_END = SVGA_PALETTE_BASE + 767, 168 SVGA_SCRATCH_BASE = SVGA_PALETTE_BASE + 768, 169 }; 170 171 #define SVGA_CAP_NONE 0 172 #define SVGA_CAP_RECT_FILL (1 << 0) 173 #define SVGA_CAP_RECT_COPY (1 << 1) 174 #define SVGA_CAP_RECT_PAT_FILL (1 << 2) 175 #define SVGA_CAP_LEGACY_OFFSCREEN (1 << 3) 176 #define SVGA_CAP_RASTER_OP (1 << 4) 177 #define SVGA_CAP_CURSOR (1 << 5) 178 #define SVGA_CAP_CURSOR_BYPASS (1 << 6) 179 #define SVGA_CAP_CURSOR_BYPASS_2 (1 << 7) 180 #define SVGA_CAP_8BIT_EMULATION (1 << 8) 181 #define SVGA_CAP_ALPHA_CURSOR (1 << 9) 182 #define SVGA_CAP_GLYPH (1 << 10) 183 #define SVGA_CAP_GLYPH_CLIPPING (1 << 11) 184 #define SVGA_CAP_OFFSCREEN_1 (1 << 12) 185 #define SVGA_CAP_ALPHA_BLEND (1 << 13) 186 #define SVGA_CAP_3D (1 << 14) 187 #define SVGA_CAP_EXTENDED_FIFO (1 << 15) 188 #define SVGA_CAP_MULTIMON (1 << 16) 189 #define SVGA_CAP_PITCHLOCK (1 << 17) 190 191 /* 192 * FIFO offsets (seen as an array of 32-bit words) 193 */ 194 enum { 195 /* 196 * The original defined FIFO offsets 197 */ 198 SVGA_FIFO_MIN = 0, 199 SVGA_FIFO_MAX, /* The distance from MIN to MAX must be at least 10K */ 200 SVGA_FIFO_NEXT, 201 SVGA_FIFO_STOP, 202 203 /* 204 * Additional offsets added as of SVGA_CAP_EXTENDED_FIFO 205 */ 206 SVGA_FIFO_CAPABILITIES = 4, 207 SVGA_FIFO_FLAGS, 208 SVGA_FIFO_FENCE, 209 SVGA_FIFO_3D_HWVERSION, 210 SVGA_FIFO_PITCHLOCK, 211 }; 212 213 #define SVGA_FIFO_CAP_NONE 0 214 #define SVGA_FIFO_CAP_FENCE (1 << 0) 215 #define SVGA_FIFO_CAP_ACCELFRONT (1 << 1) 216 #define SVGA_FIFO_CAP_PITCHLOCK (1 << 2) 217 218 #define SVGA_FIFO_FLAG_NONE 0 219 #define SVGA_FIFO_FLAG_ACCELFRONT (1 << 0) 220 221 /* These values can probably be changed arbitrarily. */ 222 #define SVGA_SCRATCH_SIZE 0x8000 223 #define SVGA_MAX_WIDTH 2368 224 #define SVGA_MAX_HEIGHT 1770 225 226 #ifdef VERBOSE 227 # define GUEST_OS_BASE 0x5001 228 static const char *vmsvga_guest_id[] = { 229 [0x00] = "Dos", 230 [0x01] = "Windows 3.1", 231 [0x02] = "Windows 95", 232 [0x03] = "Windows 98", 233 [0x04] = "Windows ME", 234 [0x05] = "Windows NT", 235 [0x06] = "Windows 2000", 236 [0x07] = "Linux", 237 [0x08] = "OS/2", 238 [0x09] = "an unknown OS", 239 [0x0a] = "BSD", 240 [0x0b] = "Whistler", 241 [0x0c] = "an unknown OS", 242 [0x0d] = "an unknown OS", 243 [0x0e] = "an unknown OS", 244 [0x0f] = "an unknown OS", 245 [0x10] = "an unknown OS", 246 [0x11] = "an unknown OS", 247 [0x12] = "an unknown OS", 248 [0x13] = "an unknown OS", 249 [0x14] = "an unknown OS", 250 [0x15] = "Windows 2003", 251 }; 252 #endif 253 254 enum { 255 SVGA_CMD_INVALID_CMD = 0, 256 SVGA_CMD_UPDATE = 1, 257 SVGA_CMD_RECT_FILL = 2, 258 SVGA_CMD_RECT_COPY = 3, 259 SVGA_CMD_DEFINE_BITMAP = 4, 260 SVGA_CMD_DEFINE_BITMAP_SCANLINE = 5, 261 SVGA_CMD_DEFINE_PIXMAP = 6, 262 SVGA_CMD_DEFINE_PIXMAP_SCANLINE = 7, 263 SVGA_CMD_RECT_BITMAP_FILL = 8, 264 SVGA_CMD_RECT_PIXMAP_FILL = 9, 265 SVGA_CMD_RECT_BITMAP_COPY = 10, 266 SVGA_CMD_RECT_PIXMAP_COPY = 11, 267 SVGA_CMD_FREE_OBJECT = 12, 268 SVGA_CMD_RECT_ROP_FILL = 13, 269 SVGA_CMD_RECT_ROP_COPY = 14, 270 SVGA_CMD_RECT_ROP_BITMAP_FILL = 15, 271 SVGA_CMD_RECT_ROP_PIXMAP_FILL = 16, 272 SVGA_CMD_RECT_ROP_BITMAP_COPY = 17, 273 SVGA_CMD_RECT_ROP_PIXMAP_COPY = 18, 274 SVGA_CMD_DEFINE_CURSOR = 19, 275 SVGA_CMD_DISPLAY_CURSOR = 20, 276 SVGA_CMD_MOVE_CURSOR = 21, 277 SVGA_CMD_DEFINE_ALPHA_CURSOR = 22, 278 SVGA_CMD_DRAW_GLYPH = 23, 279 SVGA_CMD_DRAW_GLYPH_CLIPPED = 24, 280 SVGA_CMD_UPDATE_VERBOSE = 25, 281 SVGA_CMD_SURFACE_FILL = 26, 282 SVGA_CMD_SURFACE_COPY = 27, 283 SVGA_CMD_SURFACE_ALPHA_BLEND = 28, 284 SVGA_CMD_FRONT_ROP_FILL = 29, 285 SVGA_CMD_FENCE = 30, 286 }; 287 288 /* Legal values for the SVGA_REG_CURSOR_ON register in cursor bypass mode */ 289 enum { 290 SVGA_CURSOR_ON_HIDE = 0, 291 SVGA_CURSOR_ON_SHOW = 1, 292 SVGA_CURSOR_ON_REMOVE_FROM_FB = 2, 293 SVGA_CURSOR_ON_RESTORE_TO_FB = 3, 294 }; 295 296 static inline bool vmsvga_verify_rect(DisplaySurface *surface, 297 const char *name, 298 int x, int y, int w, int h) 299 { 300 if (x < 0) { 301 trace_vmware_verify_rect_less_than_zero(name, "x", x); 302 return false; 303 } 304 if (x > SVGA_MAX_WIDTH) { 305 trace_vmware_verify_rect_greater_than_bound(name, "x", SVGA_MAX_WIDTH, 306 x); 307 return false; 308 } 309 if (w < 0) { 310 trace_vmware_verify_rect_less_than_zero(name, "w", w); 311 return false; 312 } 313 if (w > SVGA_MAX_WIDTH) { 314 trace_vmware_verify_rect_greater_than_bound(name, "w", SVGA_MAX_WIDTH, 315 w); 316 return false; 317 } 318 if (x + w > surface_width(surface)) { 319 trace_vmware_verify_rect_surface_bound_exceeded(name, "width", 320 surface_width(surface), 321 "x", x, "w", w); 322 return false; 323 } 324 325 if (y < 0) { 326 trace_vmware_verify_rect_less_than_zero(name, "y", y); 327 return false; 328 } 329 if (y > SVGA_MAX_HEIGHT) { 330 trace_vmware_verify_rect_greater_than_bound(name, "y", SVGA_MAX_HEIGHT, 331 y); 332 return false; 333 } 334 if (h < 0) { 335 trace_vmware_verify_rect_less_than_zero(name, "h", h); 336 return false; 337 } 338 if (h > SVGA_MAX_HEIGHT) { 339 trace_vmware_verify_rect_greater_than_bound(name, "h", SVGA_MAX_HEIGHT, 340 h); 341 return false; 342 } 343 if (y + h > surface_height(surface)) { 344 trace_vmware_verify_rect_surface_bound_exceeded(name, "height", 345 surface_height(surface), 346 "y", y, "h", h); 347 return false; 348 } 349 350 return true; 351 } 352 353 static inline void vmsvga_update_rect(struct vmsvga_state_s *s, 354 int x, int y, int w, int h) 355 { 356 DisplaySurface *surface = qemu_console_surface(s->vga.con); 357 int line; 358 int bypl; 359 int width; 360 int start; 361 uint8_t *src; 362 uint8_t *dst; 363 364 if (!vmsvga_verify_rect(surface, __func__, x, y, w, h)) { 365 /* go for a fullscreen update as fallback */ 366 x = 0; 367 y = 0; 368 w = surface_width(surface); 369 h = surface_height(surface); 370 } 371 372 bypl = surface_stride(surface); 373 width = surface_bytes_per_pixel(surface) * w; 374 start = surface_bytes_per_pixel(surface) * x + bypl * y; 375 src = s->vga.vram_ptr + start; 376 dst = surface_data(surface) + start; 377 378 for (line = h; line > 0; line--, src += bypl, dst += bypl) { 379 memcpy(dst, src, width); 380 } 381 dpy_gfx_update(s->vga.con, x, y, w, h); 382 } 383 384 static inline void vmsvga_update_rect_flush(struct vmsvga_state_s *s) 385 { 386 struct vmsvga_rect_s *rect; 387 388 if (s->invalidated) { 389 s->redraw_fifo_last = 0; 390 return; 391 } 392 /* Overlapping region updates can be optimised out here - if someone 393 * knows a smart algorithm to do that, please share. */ 394 for (int i = 0; i < s->redraw_fifo_last; i++) { 395 rect = &s->redraw_fifo[i]; 396 vmsvga_update_rect(s, rect->x, rect->y, rect->w, rect->h); 397 } 398 399 s->redraw_fifo_last = 0; 400 } 401 402 static inline void vmsvga_update_rect_delayed(struct vmsvga_state_s *s, 403 int x, int y, int w, int h) 404 { 405 406 if (s->redraw_fifo_last >= REDRAW_FIFO_LEN) { 407 trace_vmware_update_rect_delayed_flush(); 408 vmsvga_update_rect_flush(s); 409 } 410 411 struct vmsvga_rect_s *rect = &s->redraw_fifo[s->redraw_fifo_last++]; 412 413 rect->x = x; 414 rect->y = y; 415 rect->w = w; 416 rect->h = h; 417 } 418 419 #ifdef HW_RECT_ACCEL 420 static inline int vmsvga_copy_rect(struct vmsvga_state_s *s, 421 int x0, int y0, int x1, int y1, int w, int h) 422 { 423 DisplaySurface *surface = qemu_console_surface(s->vga.con); 424 uint8_t *vram = s->vga.vram_ptr; 425 int bypl = surface_stride(surface); 426 int bypp = surface_bytes_per_pixel(surface); 427 int width = bypp * w; 428 int line = h; 429 uint8_t *ptr[2]; 430 431 if (!vmsvga_verify_rect(surface, "vmsvga_copy_rect/src", x0, y0, w, h)) { 432 return -1; 433 } 434 if (!vmsvga_verify_rect(surface, "vmsvga_copy_rect/dst", x1, y1, w, h)) { 435 return -1; 436 } 437 438 if (y1 > y0) { 439 ptr[0] = vram + bypp * x0 + bypl * (y0 + h - 1); 440 ptr[1] = vram + bypp * x1 + bypl * (y1 + h - 1); 441 for (; line > 0; line --, ptr[0] -= bypl, ptr[1] -= bypl) { 442 memmove(ptr[1], ptr[0], width); 443 } 444 } else { 445 ptr[0] = vram + bypp * x0 + bypl * y0; 446 ptr[1] = vram + bypp * x1 + bypl * y1; 447 for (; line > 0; line --, ptr[0] += bypl, ptr[1] += bypl) { 448 memmove(ptr[1], ptr[0], width); 449 } 450 } 451 452 vmsvga_update_rect_delayed(s, x1, y1, w, h); 453 return 0; 454 } 455 #endif 456 457 #ifdef HW_FILL_ACCEL 458 static inline int vmsvga_fill_rect(struct vmsvga_state_s *s, 459 uint32_t c, int x, int y, int w, int h) 460 { 461 DisplaySurface *surface = qemu_console_surface(s->vga.con); 462 int bypl = surface_stride(surface); 463 int width = surface_bytes_per_pixel(surface) * w; 464 int line = h; 465 int column; 466 uint8_t *fst; 467 uint8_t *dst; 468 uint8_t *src; 469 uint8_t col[4]; 470 471 if (!vmsvga_verify_rect(surface, __func__, x, y, w, h)) { 472 return -1; 473 } 474 475 col[0] = c; 476 col[1] = c >> 8; 477 col[2] = c >> 16; 478 col[3] = c >> 24; 479 480 fst = s->vga.vram_ptr + surface_bytes_per_pixel(surface) * x + bypl * y; 481 482 if (line--) { 483 dst = fst; 484 src = col; 485 for (column = width; column > 0; column--) { 486 *(dst++) = *(src++); 487 if (src - col == surface_bytes_per_pixel(surface)) { 488 src = col; 489 } 490 } 491 dst = fst; 492 for (; line > 0; line--) { 493 dst += bypl; 494 memcpy(dst, fst, width); 495 } 496 } 497 498 vmsvga_update_rect_delayed(s, x, y, w, h); 499 return 0; 500 } 501 #endif 502 503 struct vmsvga_cursor_definition_s { 504 uint32_t width; 505 uint32_t height; 506 int id; 507 uint32_t bpp; 508 int hot_x; 509 int hot_y; 510 uint32_t mask[1024]; 511 uint32_t image[4096]; 512 }; 513 514 #define SVGA_BITMAP_SIZE(w, h) ((((w) + 31) >> 5) * (h)) 515 #define SVGA_PIXMAP_SIZE(w, h, bpp) (((((w) * (bpp)) + 31) >> 5) * (h)) 516 517 #ifdef HW_MOUSE_ACCEL 518 static inline void vmsvga_cursor_define(struct vmsvga_state_s *s, 519 struct vmsvga_cursor_definition_s *c) 520 { 521 QEMUCursor *qc; 522 int i, pixels; 523 524 qc = cursor_alloc(c->width, c->height); 525 assert(qc != NULL); 526 527 qc->hot_x = c->hot_x; 528 qc->hot_y = c->hot_y; 529 switch (c->bpp) { 530 case 1: 531 cursor_set_mono(qc, 0xffffff, 0x000000, (void *)c->image, 532 1, (void *)c->mask); 533 #ifdef DEBUG 534 cursor_print_ascii_art(qc, "vmware/mono"); 535 #endif 536 break; 537 case 32: 538 /* fill alpha channel from mask, set color to zero */ 539 cursor_set_mono(qc, 0x000000, 0x000000, (void *)c->mask, 540 1, (void *)c->mask); 541 /* add in rgb values */ 542 pixels = c->width * c->height; 543 for (i = 0; i < pixels; i++) { 544 qc->data[i] |= c->image[i] & 0xffffff; 545 } 546 #ifdef DEBUG 547 cursor_print_ascii_art(qc, "vmware/32bit"); 548 #endif 549 break; 550 default: 551 fprintf(stderr, "%s: unhandled bpp %d, using fallback cursor\n", 552 __func__, c->bpp); 553 cursor_unref(qc); 554 qc = cursor_builtin_left_ptr(); 555 } 556 557 dpy_cursor_define(s->vga.con, qc); 558 cursor_unref(qc); 559 } 560 #endif 561 562 static inline int vmsvga_fifo_length(struct vmsvga_state_s *s) 563 { 564 int num; 565 566 if (!s->config || !s->enable) { 567 return 0; 568 } 569 570 s->fifo_min = le32_to_cpu(s->fifo[SVGA_FIFO_MIN]); 571 s->fifo_max = le32_to_cpu(s->fifo[SVGA_FIFO_MAX]); 572 s->fifo_next = le32_to_cpu(s->fifo[SVGA_FIFO_NEXT]); 573 s->fifo_stop = le32_to_cpu(s->fifo[SVGA_FIFO_STOP]); 574 575 /* Check range and alignment. */ 576 if ((s->fifo_min | s->fifo_max | s->fifo_next | s->fifo_stop) & 3) { 577 return 0; 578 } 579 if (s->fifo_min < sizeof(uint32_t) * 4) { 580 return 0; 581 } 582 if (s->fifo_max > SVGA_FIFO_SIZE || 583 s->fifo_min >= SVGA_FIFO_SIZE || 584 s->fifo_stop >= SVGA_FIFO_SIZE || 585 s->fifo_next >= SVGA_FIFO_SIZE) { 586 return 0; 587 } 588 if (s->fifo_max < s->fifo_min + 10 * KiB) { 589 return 0; 590 } 591 592 num = s->fifo_next - s->fifo_stop; 593 if (num < 0) { 594 num += s->fifo_max - s->fifo_min; 595 } 596 return num >> 2; 597 } 598 599 static inline uint32_t vmsvga_fifo_read_raw(struct vmsvga_state_s *s) 600 { 601 uint32_t cmd = s->fifo[s->fifo_stop >> 2]; 602 603 s->fifo_stop += 4; 604 if (s->fifo_stop >= s->fifo_max) { 605 s->fifo_stop = s->fifo_min; 606 } 607 s->fifo[SVGA_FIFO_STOP] = cpu_to_le32(s->fifo_stop); 608 return cmd; 609 } 610 611 static inline uint32_t vmsvga_fifo_read(struct vmsvga_state_s *s) 612 { 613 return le32_to_cpu(vmsvga_fifo_read_raw(s)); 614 } 615 616 static void vmsvga_fifo_run(struct vmsvga_state_s *s) 617 { 618 uint32_t cmd, colour; 619 int args, len, maxloop = 1024; 620 int x, y, dx, dy, width, height; 621 struct vmsvga_cursor_definition_s cursor; 622 uint32_t cmd_start; 623 624 len = vmsvga_fifo_length(s); 625 while (len > 0 && --maxloop > 0) { 626 /* May need to go back to the start of the command if incomplete */ 627 cmd_start = s->fifo_stop; 628 629 switch (cmd = vmsvga_fifo_read(s)) { 630 case SVGA_CMD_UPDATE: 631 case SVGA_CMD_UPDATE_VERBOSE: 632 len -= 5; 633 if (len < 0) { 634 goto rewind; 635 } 636 637 x = vmsvga_fifo_read(s); 638 y = vmsvga_fifo_read(s); 639 width = vmsvga_fifo_read(s); 640 height = vmsvga_fifo_read(s); 641 vmsvga_update_rect_delayed(s, x, y, width, height); 642 break; 643 644 case SVGA_CMD_RECT_FILL: 645 len -= 6; 646 if (len < 0) { 647 goto rewind; 648 } 649 650 colour = vmsvga_fifo_read(s); 651 x = vmsvga_fifo_read(s); 652 y = vmsvga_fifo_read(s); 653 width = vmsvga_fifo_read(s); 654 height = vmsvga_fifo_read(s); 655 #ifdef HW_FILL_ACCEL 656 if (vmsvga_fill_rect(s, colour, x, y, width, height) == 0) { 657 break; 658 } 659 #endif 660 args = 0; 661 goto badcmd; 662 663 case SVGA_CMD_RECT_COPY: 664 len -= 7; 665 if (len < 0) { 666 goto rewind; 667 } 668 669 x = vmsvga_fifo_read(s); 670 y = vmsvga_fifo_read(s); 671 dx = vmsvga_fifo_read(s); 672 dy = vmsvga_fifo_read(s); 673 width = vmsvga_fifo_read(s); 674 height = vmsvga_fifo_read(s); 675 #ifdef HW_RECT_ACCEL 676 if (vmsvga_copy_rect(s, x, y, dx, dy, width, height) == 0) { 677 break; 678 } 679 #endif 680 args = 0; 681 goto badcmd; 682 683 case SVGA_CMD_DEFINE_CURSOR: 684 len -= 8; 685 if (len < 0) { 686 goto rewind; 687 } 688 689 cursor.id = vmsvga_fifo_read(s); 690 cursor.hot_x = vmsvga_fifo_read(s); 691 cursor.hot_y = vmsvga_fifo_read(s); 692 cursor.width = x = vmsvga_fifo_read(s); 693 cursor.height = y = vmsvga_fifo_read(s); 694 vmsvga_fifo_read(s); 695 cursor.bpp = vmsvga_fifo_read(s); 696 697 args = SVGA_BITMAP_SIZE(x, y) + SVGA_PIXMAP_SIZE(x, y, cursor.bpp); 698 if (cursor.width > 256 699 || cursor.height > 256 700 || cursor.bpp > 32 701 || SVGA_BITMAP_SIZE(x, y) > ARRAY_SIZE(cursor.mask) 702 || SVGA_PIXMAP_SIZE(x, y, cursor.bpp) 703 > ARRAY_SIZE(cursor.image)) { 704 goto badcmd; 705 } 706 707 len -= args; 708 if (len < 0) { 709 goto rewind; 710 } 711 712 for (args = 0; args < SVGA_BITMAP_SIZE(x, y); args++) { 713 cursor.mask[args] = vmsvga_fifo_read_raw(s); 714 } 715 for (args = 0; args < SVGA_PIXMAP_SIZE(x, y, cursor.bpp); args++) { 716 cursor.image[args] = vmsvga_fifo_read_raw(s); 717 } 718 #ifdef HW_MOUSE_ACCEL 719 vmsvga_cursor_define(s, &cursor); 720 break; 721 #else 722 args = 0; 723 goto badcmd; 724 #endif 725 726 /* 727 * Other commands that we at least know the number of arguments 728 * for so we can avoid FIFO desync if driver uses them illegally. 729 */ 730 case SVGA_CMD_DEFINE_ALPHA_CURSOR: 731 len -= 6; 732 if (len < 0) { 733 goto rewind; 734 } 735 vmsvga_fifo_read(s); 736 vmsvga_fifo_read(s); 737 vmsvga_fifo_read(s); 738 x = vmsvga_fifo_read(s); 739 y = vmsvga_fifo_read(s); 740 args = x * y; 741 goto badcmd; 742 case SVGA_CMD_RECT_ROP_FILL: 743 args = 6; 744 goto badcmd; 745 case SVGA_CMD_RECT_ROP_COPY: 746 args = 7; 747 goto badcmd; 748 case SVGA_CMD_DRAW_GLYPH_CLIPPED: 749 len -= 4; 750 if (len < 0) { 751 goto rewind; 752 } 753 vmsvga_fifo_read(s); 754 vmsvga_fifo_read(s); 755 args = 7 + (vmsvga_fifo_read(s) >> 2); 756 goto badcmd; 757 case SVGA_CMD_SURFACE_ALPHA_BLEND: 758 args = 12; 759 goto badcmd; 760 761 /* 762 * Other commands that are not listed as depending on any 763 * CAPABILITIES bits, but are not described in the README either. 764 */ 765 case SVGA_CMD_SURFACE_FILL: 766 case SVGA_CMD_SURFACE_COPY: 767 case SVGA_CMD_FRONT_ROP_FILL: 768 case SVGA_CMD_FENCE: 769 case SVGA_CMD_INVALID_CMD: 770 break; /* Nop */ 771 772 default: 773 args = 0; 774 badcmd: 775 len -= args; 776 if (len < 0) { 777 goto rewind; 778 } 779 while (args--) { 780 vmsvga_fifo_read(s); 781 } 782 printf("%s: Unknown command 0x%02x in SVGA command FIFO\n", 783 __func__, cmd); 784 break; 785 786 rewind: 787 s->fifo_stop = cmd_start; 788 s->fifo[SVGA_FIFO_STOP] = cpu_to_le32(s->fifo_stop); 789 break; 790 } 791 } 792 793 s->syncing = 0; 794 } 795 796 static uint32_t vmsvga_index_read(void *opaque, uint32_t address) 797 { 798 struct vmsvga_state_s *s = opaque; 799 800 return s->index; 801 } 802 803 static void vmsvga_index_write(void *opaque, uint32_t address, uint32_t index) 804 { 805 struct vmsvga_state_s *s = opaque; 806 807 s->index = index; 808 } 809 810 static uint32_t vmsvga_value_read(void *opaque, uint32_t address) 811 { 812 uint32_t caps; 813 struct vmsvga_state_s *s = opaque; 814 DisplaySurface *surface = qemu_console_surface(s->vga.con); 815 PixelFormat pf; 816 uint32_t ret; 817 818 switch (s->index) { 819 case SVGA_REG_ID: 820 ret = s->svgaid; 821 break; 822 823 case SVGA_REG_ENABLE: 824 ret = s->enable; 825 break; 826 827 case SVGA_REG_WIDTH: 828 ret = s->new_width ? s->new_width : surface_width(surface); 829 break; 830 831 case SVGA_REG_HEIGHT: 832 ret = s->new_height ? s->new_height : surface_height(surface); 833 break; 834 835 case SVGA_REG_MAX_WIDTH: 836 ret = SVGA_MAX_WIDTH; 837 break; 838 839 case SVGA_REG_MAX_HEIGHT: 840 ret = SVGA_MAX_HEIGHT; 841 break; 842 843 case SVGA_REG_DEPTH: 844 ret = (s->new_depth == 32) ? 24 : s->new_depth; 845 break; 846 847 case SVGA_REG_BITS_PER_PIXEL: 848 case SVGA_REG_HOST_BITS_PER_PIXEL: 849 ret = s->new_depth; 850 break; 851 852 case SVGA_REG_PSEUDOCOLOR: 853 ret = 0x0; 854 break; 855 856 case SVGA_REG_RED_MASK: 857 pf = qemu_default_pixelformat(s->new_depth); 858 ret = pf.rmask; 859 break; 860 861 case SVGA_REG_GREEN_MASK: 862 pf = qemu_default_pixelformat(s->new_depth); 863 ret = pf.gmask; 864 break; 865 866 case SVGA_REG_BLUE_MASK: 867 pf = qemu_default_pixelformat(s->new_depth); 868 ret = pf.bmask; 869 break; 870 871 case SVGA_REG_BYTES_PER_LINE: 872 if (s->new_width) { 873 ret = (s->new_depth * s->new_width) / 8; 874 } else { 875 ret = surface_stride(surface); 876 } 877 break; 878 879 case SVGA_REG_FB_START: { 880 struct pci_vmsvga_state_s *pci_vmsvga 881 = container_of(s, struct pci_vmsvga_state_s, chip); 882 ret = pci_get_bar_addr(PCI_DEVICE(pci_vmsvga), 1); 883 break; 884 } 885 886 case SVGA_REG_FB_OFFSET: 887 ret = 0x0; 888 break; 889 890 case SVGA_REG_VRAM_SIZE: 891 ret = s->vga.vram_size; /* No physical VRAM besides the framebuffer */ 892 break; 893 894 case SVGA_REG_FB_SIZE: 895 ret = s->vga.vram_size; 896 break; 897 898 case SVGA_REG_CAPABILITIES: 899 caps = SVGA_CAP_NONE; 900 #ifdef HW_RECT_ACCEL 901 caps |= SVGA_CAP_RECT_COPY; 902 #endif 903 #ifdef HW_FILL_ACCEL 904 caps |= SVGA_CAP_RECT_FILL; 905 #endif 906 #ifdef HW_MOUSE_ACCEL 907 caps |= SVGA_CAP_CURSOR | SVGA_CAP_CURSOR_BYPASS_2 | 908 SVGA_CAP_CURSOR_BYPASS; 909 #endif 910 ret = caps; 911 break; 912 913 case SVGA_REG_MEM_START: { 914 struct pci_vmsvga_state_s *pci_vmsvga 915 = container_of(s, struct pci_vmsvga_state_s, chip); 916 ret = pci_get_bar_addr(PCI_DEVICE(pci_vmsvga), 2); 917 break; 918 } 919 920 case SVGA_REG_MEM_SIZE: 921 ret = s->fifo_size; 922 break; 923 924 case SVGA_REG_CONFIG_DONE: 925 ret = s->config; 926 break; 927 928 case SVGA_REG_SYNC: 929 case SVGA_REG_BUSY: 930 ret = s->syncing; 931 break; 932 933 case SVGA_REG_GUEST_ID: 934 ret = s->guest; 935 break; 936 937 case SVGA_REG_CURSOR_ID: 938 ret = s->cursor.id; 939 break; 940 941 case SVGA_REG_CURSOR_X: 942 ret = s->cursor.x; 943 break; 944 945 case SVGA_REG_CURSOR_Y: 946 ret = s->cursor.y; 947 break; 948 949 case SVGA_REG_CURSOR_ON: 950 ret = s->cursor.on; 951 break; 952 953 case SVGA_REG_SCRATCH_SIZE: 954 ret = s->scratch_size; 955 break; 956 957 case SVGA_REG_MEM_REGS: 958 case SVGA_REG_NUM_DISPLAYS: 959 case SVGA_REG_PITCHLOCK: 960 case SVGA_PALETTE_BASE ... SVGA_PALETTE_END: 961 ret = 0; 962 break; 963 964 default: 965 if (s->index >= SVGA_SCRATCH_BASE && 966 s->index < SVGA_SCRATCH_BASE + s->scratch_size) { 967 ret = s->scratch[s->index - SVGA_SCRATCH_BASE]; 968 break; 969 } 970 qemu_log_mask(LOG_GUEST_ERROR, 971 "%s: Bad register %02x\n", __func__, s->index); 972 ret = 0; 973 break; 974 } 975 976 if (s->index >= SVGA_SCRATCH_BASE) { 977 trace_vmware_scratch_read(s->index, ret); 978 } else if (s->index >= SVGA_PALETTE_BASE) { 979 trace_vmware_palette_read(s->index, ret); 980 } else { 981 trace_vmware_value_read(s->index, ret); 982 } 983 return ret; 984 } 985 986 static void vmsvga_value_write(void *opaque, uint32_t address, uint32_t value) 987 { 988 struct vmsvga_state_s *s = opaque; 989 990 if (s->index >= SVGA_SCRATCH_BASE) { 991 trace_vmware_scratch_write(s->index, value); 992 } else if (s->index >= SVGA_PALETTE_BASE) { 993 trace_vmware_palette_write(s->index, value); 994 } else { 995 trace_vmware_value_write(s->index, value); 996 } 997 switch (s->index) { 998 case SVGA_REG_ID: 999 if (value == SVGA_ID_2 || value == SVGA_ID_1 || value == SVGA_ID_0) { 1000 s->svgaid = value; 1001 } 1002 break; 1003 1004 case SVGA_REG_ENABLE: 1005 s->enable = !!value; 1006 s->invalidated = 1; 1007 s->vga.hw_ops->invalidate(&s->vga); 1008 if (s->enable && s->config) { 1009 vga_dirty_log_stop(&s->vga); 1010 } else { 1011 vga_dirty_log_start(&s->vga); 1012 } 1013 break; 1014 1015 case SVGA_REG_WIDTH: 1016 if (value <= SVGA_MAX_WIDTH) { 1017 s->new_width = value; 1018 s->invalidated = 1; 1019 } else { 1020 qemu_log_mask(LOG_GUEST_ERROR, 1021 "%s: Bad width: %i\n", __func__, value); 1022 } 1023 break; 1024 1025 case SVGA_REG_HEIGHT: 1026 if (value <= SVGA_MAX_HEIGHT) { 1027 s->new_height = value; 1028 s->invalidated = 1; 1029 } else { 1030 qemu_log_mask(LOG_GUEST_ERROR, 1031 "%s: Bad height: %i\n", __func__, value); 1032 } 1033 break; 1034 1035 case SVGA_REG_BITS_PER_PIXEL: 1036 if (value != 32) { 1037 qemu_log_mask(LOG_GUEST_ERROR, 1038 "%s: Bad bits per pixel: %i bits\n", __func__, value); 1039 s->config = 0; 1040 s->invalidated = 1; 1041 } 1042 break; 1043 1044 case SVGA_REG_CONFIG_DONE: 1045 if (value) { 1046 s->fifo = (uint32_t *) s->fifo_ptr; 1047 vga_dirty_log_stop(&s->vga); 1048 } 1049 s->config = !!value; 1050 break; 1051 1052 case SVGA_REG_SYNC: 1053 s->syncing = 1; 1054 vmsvga_fifo_run(s); /* Or should we just wait for update_display? */ 1055 break; 1056 1057 case SVGA_REG_GUEST_ID: 1058 s->guest = value; 1059 #ifdef VERBOSE 1060 if (value >= GUEST_OS_BASE && value < GUEST_OS_BASE + 1061 ARRAY_SIZE(vmsvga_guest_id)) { 1062 printf("%s: guest runs %s.\n", __func__, 1063 vmsvga_guest_id[value - GUEST_OS_BASE]); 1064 } 1065 #endif 1066 break; 1067 1068 case SVGA_REG_CURSOR_ID: 1069 s->cursor.id = value; 1070 break; 1071 1072 case SVGA_REG_CURSOR_X: 1073 s->cursor.x = value; 1074 break; 1075 1076 case SVGA_REG_CURSOR_Y: 1077 s->cursor.y = value; 1078 break; 1079 1080 case SVGA_REG_CURSOR_ON: 1081 s->cursor.on |= (value == SVGA_CURSOR_ON_SHOW); 1082 s->cursor.on &= (value != SVGA_CURSOR_ON_HIDE); 1083 #ifdef HW_MOUSE_ACCEL 1084 if (value <= SVGA_CURSOR_ON_SHOW) { 1085 dpy_mouse_set(s->vga.con, s->cursor.x, s->cursor.y, s->cursor.on); 1086 } 1087 #endif 1088 break; 1089 1090 case SVGA_REG_DEPTH: 1091 case SVGA_REG_MEM_REGS: 1092 case SVGA_REG_NUM_DISPLAYS: 1093 case SVGA_REG_PITCHLOCK: 1094 case SVGA_PALETTE_BASE ... SVGA_PALETTE_END: 1095 break; 1096 1097 default: 1098 if (s->index >= SVGA_SCRATCH_BASE && 1099 s->index < SVGA_SCRATCH_BASE + s->scratch_size) { 1100 s->scratch[s->index - SVGA_SCRATCH_BASE] = value; 1101 break; 1102 } 1103 qemu_log_mask(LOG_GUEST_ERROR, 1104 "%s: Bad register %02x\n", __func__, s->index); 1105 } 1106 } 1107 1108 static uint32_t vmsvga_bios_read(void *opaque, uint32_t address) 1109 { 1110 printf("%s: what are we supposed to return?\n", __func__); 1111 return 0xcafe; 1112 } 1113 1114 static void vmsvga_bios_write(void *opaque, uint32_t address, uint32_t data) 1115 { 1116 printf("%s: what are we supposed to do with (%08x)?\n", __func__, data); 1117 } 1118 1119 static inline void vmsvga_check_size(struct vmsvga_state_s *s) 1120 { 1121 DisplaySurface *surface = qemu_console_surface(s->vga.con); 1122 1123 if (s->new_width != surface_width(surface) || 1124 s->new_height != surface_height(surface) || 1125 s->new_depth != surface_bits_per_pixel(surface)) { 1126 int stride = (s->new_depth * s->new_width) / 8; 1127 pixman_format_code_t format = 1128 qemu_default_pixman_format(s->new_depth, true); 1129 trace_vmware_setmode(s->new_width, s->new_height, s->new_depth); 1130 surface = qemu_create_displaysurface_from(s->new_width, s->new_height, 1131 format, stride, 1132 s->vga.vram_ptr); 1133 dpy_gfx_replace_surface(s->vga.con, surface); 1134 s->invalidated = 1; 1135 } 1136 } 1137 1138 static void vmsvga_update_display(void *opaque) 1139 { 1140 struct vmsvga_state_s *s = opaque; 1141 1142 if (!s->enable || !s->config) { 1143 /* in standard vga mode */ 1144 s->vga.hw_ops->gfx_update(&s->vga); 1145 return; 1146 } 1147 1148 vmsvga_check_size(s); 1149 1150 vmsvga_fifo_run(s); 1151 vmsvga_update_rect_flush(s); 1152 1153 if (s->invalidated) { 1154 s->invalidated = 0; 1155 dpy_gfx_update_full(s->vga.con); 1156 } 1157 } 1158 1159 static void vmsvga_reset(DeviceState *dev) 1160 { 1161 struct pci_vmsvga_state_s *pci = VMWARE_SVGA(dev); 1162 struct vmsvga_state_s *s = &pci->chip; 1163 1164 s->index = 0; 1165 s->enable = 0; 1166 s->config = 0; 1167 s->svgaid = SVGA_ID; 1168 s->cursor.on = false; 1169 s->redraw_fifo_last = 0; 1170 s->syncing = 0; 1171 1172 vga_dirty_log_start(&s->vga); 1173 } 1174 1175 static void vmsvga_invalidate_display(void *opaque) 1176 { 1177 struct vmsvga_state_s *s = opaque; 1178 if (!s->enable) { 1179 s->vga.hw_ops->invalidate(&s->vga); 1180 return; 1181 } 1182 1183 s->invalidated = 1; 1184 } 1185 1186 static void vmsvga_text_update(void *opaque, console_ch_t *chardata) 1187 { 1188 struct vmsvga_state_s *s = opaque; 1189 1190 if (s->vga.hw_ops->text_update) { 1191 s->vga.hw_ops->text_update(&s->vga, chardata); 1192 } 1193 } 1194 1195 static int vmsvga_post_load(void *opaque, int version_id) 1196 { 1197 struct vmsvga_state_s *s = opaque; 1198 1199 s->invalidated = 1; 1200 if (s->config) { 1201 s->fifo = (uint32_t *) s->fifo_ptr; 1202 } 1203 return 0; 1204 } 1205 1206 static const VMStateDescription vmstate_vmware_vga_internal = { 1207 .name = "vmware_vga_internal", 1208 .version_id = 0, 1209 .minimum_version_id = 0, 1210 .post_load = vmsvga_post_load, 1211 .fields = (const VMStateField[]) { 1212 VMSTATE_INT32_EQUAL(new_depth, struct vmsvga_state_s, NULL), 1213 VMSTATE_INT32(enable, struct vmsvga_state_s), 1214 VMSTATE_INT32(config, struct vmsvga_state_s), 1215 VMSTATE_INT32(cursor.id, struct vmsvga_state_s), 1216 VMSTATE_INT32(cursor.x, struct vmsvga_state_s), 1217 VMSTATE_INT32(cursor.y, struct vmsvga_state_s), 1218 VMSTATE_INT32(cursor.on, struct vmsvga_state_s), 1219 VMSTATE_INT32(index, struct vmsvga_state_s), 1220 VMSTATE_VARRAY_INT32(scratch, struct vmsvga_state_s, 1221 scratch_size, 0, vmstate_info_uint32, uint32_t), 1222 VMSTATE_INT32(new_width, struct vmsvga_state_s), 1223 VMSTATE_INT32(new_height, struct vmsvga_state_s), 1224 VMSTATE_UINT32(guest, struct vmsvga_state_s), 1225 VMSTATE_UINT32(svgaid, struct vmsvga_state_s), 1226 VMSTATE_INT32(syncing, struct vmsvga_state_s), 1227 VMSTATE_UNUSED(4), /* was fb_size */ 1228 VMSTATE_END_OF_LIST() 1229 } 1230 }; 1231 1232 static const VMStateDescription vmstate_vmware_vga = { 1233 .name = "vmware_vga", 1234 .version_id = 0, 1235 .minimum_version_id = 0, 1236 .fields = (const VMStateField[]) { 1237 VMSTATE_PCI_DEVICE(parent_obj, struct pci_vmsvga_state_s), 1238 VMSTATE_STRUCT(chip, struct pci_vmsvga_state_s, 0, 1239 vmstate_vmware_vga_internal, struct vmsvga_state_s), 1240 VMSTATE_END_OF_LIST() 1241 } 1242 }; 1243 1244 static const GraphicHwOps vmsvga_ops = { 1245 .invalidate = vmsvga_invalidate_display, 1246 .gfx_update = vmsvga_update_display, 1247 .text_update = vmsvga_text_update, 1248 }; 1249 1250 static void vmsvga_init(DeviceState *dev, struct vmsvga_state_s *s, 1251 MemoryRegion *address_space, MemoryRegion *io) 1252 { 1253 s->scratch_size = SVGA_SCRATCH_SIZE; 1254 s->scratch = g_malloc(s->scratch_size * 4); 1255 1256 s->vga.con = graphic_console_init(dev, 0, &vmsvga_ops, s); 1257 1258 s->fifo_size = SVGA_FIFO_SIZE; 1259 memory_region_init_ram(&s->fifo_ram, NULL, "vmsvga.fifo", s->fifo_size, 1260 &error_fatal); 1261 s->fifo_ptr = memory_region_get_ram_ptr(&s->fifo_ram); 1262 1263 vga_common_init(&s->vga, OBJECT(dev), &error_fatal); 1264 vga_init(&s->vga, OBJECT(dev), address_space, io, true); 1265 vmstate_register_any(NULL, &vmstate_vga_common, &s->vga); 1266 s->new_depth = 32; 1267 } 1268 1269 static uint64_t vmsvga_io_read(void *opaque, hwaddr addr, unsigned size) 1270 { 1271 struct vmsvga_state_s *s = opaque; 1272 1273 switch (addr) { 1274 case SVGA_IO_MUL * SVGA_INDEX_PORT: return vmsvga_index_read(s, addr); 1275 case SVGA_IO_MUL * SVGA_VALUE_PORT: return vmsvga_value_read(s, addr); 1276 case SVGA_IO_MUL * SVGA_BIOS_PORT: return vmsvga_bios_read(s, addr); 1277 default: return -1u; 1278 } 1279 } 1280 1281 static void vmsvga_io_write(void *opaque, hwaddr addr, 1282 uint64_t data, unsigned size) 1283 { 1284 struct vmsvga_state_s *s = opaque; 1285 1286 switch (addr) { 1287 case SVGA_IO_MUL * SVGA_INDEX_PORT: 1288 vmsvga_index_write(s, addr, data); 1289 break; 1290 case SVGA_IO_MUL * SVGA_VALUE_PORT: 1291 vmsvga_value_write(s, addr, data); 1292 break; 1293 case SVGA_IO_MUL * SVGA_BIOS_PORT: 1294 vmsvga_bios_write(s, addr, data); 1295 break; 1296 } 1297 } 1298 1299 static const MemoryRegionOps vmsvga_io_ops = { 1300 .read = vmsvga_io_read, 1301 .write = vmsvga_io_write, 1302 .endianness = DEVICE_LITTLE_ENDIAN, 1303 .valid = { 1304 .min_access_size = 4, 1305 .max_access_size = 4, 1306 .unaligned = true, 1307 }, 1308 .impl = { 1309 .unaligned = true, 1310 }, 1311 }; 1312 1313 static void pci_vmsvga_realize(PCIDevice *dev, Error **errp) 1314 { 1315 struct pci_vmsvga_state_s *s = VMWARE_SVGA(dev); 1316 1317 dev->config[PCI_CACHE_LINE_SIZE] = 0x08; 1318 dev->config[PCI_LATENCY_TIMER] = 0x40; 1319 dev->config[PCI_INTERRUPT_LINE] = 0xff; /* End */ 1320 1321 memory_region_init_io(&s->io_bar, OBJECT(dev), &vmsvga_io_ops, &s->chip, 1322 "vmsvga-io", 0x10); 1323 memory_region_set_flush_coalesced(&s->io_bar); 1324 pci_register_bar(dev, 0, PCI_BASE_ADDRESS_SPACE_IO, &s->io_bar); 1325 1326 vmsvga_init(DEVICE(dev), &s->chip, 1327 pci_address_space(dev), pci_address_space_io(dev)); 1328 1329 pci_register_bar(dev, 1, PCI_BASE_ADDRESS_MEM_PREFETCH, 1330 &s->chip.vga.vram); 1331 pci_register_bar(dev, 2, PCI_BASE_ADDRESS_MEM_PREFETCH, 1332 &s->chip.fifo_ram); 1333 } 1334 1335 static Property vga_vmware_properties[] = { 1336 DEFINE_PROP_UINT32("vgamem_mb", struct pci_vmsvga_state_s, 1337 chip.vga.vram_size_mb, 16), 1338 DEFINE_PROP_BOOL("global-vmstate", struct pci_vmsvga_state_s, 1339 chip.vga.global_vmstate, false), 1340 DEFINE_PROP_END_OF_LIST(), 1341 }; 1342 1343 static void vmsvga_class_init(ObjectClass *klass, void *data) 1344 { 1345 DeviceClass *dc = DEVICE_CLASS(klass); 1346 PCIDeviceClass *k = PCI_DEVICE_CLASS(klass); 1347 1348 k->realize = pci_vmsvga_realize; 1349 k->romfile = "vgabios-vmware.bin"; 1350 k->vendor_id = PCI_VENDOR_ID_VMWARE; 1351 k->device_id = SVGA_PCI_DEVICE_ID; 1352 k->class_id = PCI_CLASS_DISPLAY_VGA; 1353 k->subsystem_vendor_id = PCI_VENDOR_ID_VMWARE; 1354 k->subsystem_id = SVGA_PCI_DEVICE_ID; 1355 device_class_set_legacy_reset(dc, vmsvga_reset); 1356 dc->vmsd = &vmstate_vmware_vga; 1357 device_class_set_props(dc, vga_vmware_properties); 1358 dc->hotpluggable = false; 1359 set_bit(DEVICE_CATEGORY_DISPLAY, dc->categories); 1360 } 1361 1362 static const TypeInfo vmsvga_info = { 1363 .name = TYPE_VMWARE_SVGA, 1364 .parent = TYPE_PCI_DEVICE, 1365 .instance_size = sizeof(struct pci_vmsvga_state_s), 1366 .class_init = vmsvga_class_init, 1367 .interfaces = (InterfaceInfo[]) { 1368 { INTERFACE_CONVENTIONAL_PCI_DEVICE }, 1369 { }, 1370 }, 1371 }; 1372 1373 static void vmsvga_register_types(void) 1374 { 1375 type_register_static(&vmsvga_info); 1376 } 1377 1378 type_init(vmsvga_register_types) 1379