xref: /openbmc/qemu/hw/intc/apic.c (revision 1b111dc1)
1 /*
2  *  APIC support
3  *
4  *  Copyright (c) 2004-2005 Fabrice Bellard
5  *
6  * This library is free software; you can redistribute it and/or
7  * modify it under the terms of the GNU Lesser General Public
8  * License as published by the Free Software Foundation; either
9  * version 2 of the License, or (at your option) any later version.
10  *
11  * This library is distributed in the hope that it will be useful,
12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
14  * Lesser General Public License for more details.
15  *
16  * You should have received a copy of the GNU Lesser General Public
17  * License along with this library; if not, see <http://www.gnu.org/licenses/>
18  */
19 #include "qemu/thread.h"
20 #include "hw/i386/apic_internal.h"
21 #include "hw/i386/apic.h"
22 #include "hw/i386/ioapic.h"
23 #include "hw/pci/msi.h"
24 #include "qemu/host-utils.h"
25 #include "trace.h"
26 #include "hw/i386/pc.h"
27 #include "hw/i386/apic-msidef.h"
28 
29 #define MAX_APIC_WORDS 8
30 
31 #define SYNC_FROM_VAPIC                 0x1
32 #define SYNC_TO_VAPIC                   0x2
33 #define SYNC_ISR_IRR_TO_VAPIC           0x4
34 
35 static APICCommonState *local_apics[MAX_APICS + 1];
36 
37 static void apic_set_irq(APICCommonState *s, int vector_num, int trigger_mode);
38 static void apic_update_irq(APICCommonState *s);
39 static void apic_get_delivery_bitmask(uint32_t *deliver_bitmask,
40                                       uint8_t dest, uint8_t dest_mode);
41 
42 /* Find first bit starting from msb */
43 static int apic_fls_bit(uint32_t value)
44 {
45     return 31 - clz32(value);
46 }
47 
48 /* Find first bit starting from lsb */
49 static int apic_ffs_bit(uint32_t value)
50 {
51     return ctz32(value);
52 }
53 
54 static inline void apic_set_bit(uint32_t *tab, int index)
55 {
56     int i, mask;
57     i = index >> 5;
58     mask = 1 << (index & 0x1f);
59     tab[i] |= mask;
60 }
61 
62 static inline void apic_reset_bit(uint32_t *tab, int index)
63 {
64     int i, mask;
65     i = index >> 5;
66     mask = 1 << (index & 0x1f);
67     tab[i] &= ~mask;
68 }
69 
70 static inline int apic_get_bit(uint32_t *tab, int index)
71 {
72     int i, mask;
73     i = index >> 5;
74     mask = 1 << (index & 0x1f);
75     return !!(tab[i] & mask);
76 }
77 
78 /* return -1 if no bit is set */
79 static int get_highest_priority_int(uint32_t *tab)
80 {
81     int i;
82     for (i = 7; i >= 0; i--) {
83         if (tab[i] != 0) {
84             return i * 32 + apic_fls_bit(tab[i]);
85         }
86     }
87     return -1;
88 }
89 
90 static void apic_sync_vapic(APICCommonState *s, int sync_type)
91 {
92     VAPICState vapic_state;
93     size_t length;
94     off_t start;
95     int vector;
96 
97     if (!s->vapic_paddr) {
98         return;
99     }
100     if (sync_type & SYNC_FROM_VAPIC) {
101         cpu_physical_memory_rw(s->vapic_paddr, (void *)&vapic_state,
102                                sizeof(vapic_state), 0);
103         s->tpr = vapic_state.tpr;
104     }
105     if (sync_type & (SYNC_TO_VAPIC | SYNC_ISR_IRR_TO_VAPIC)) {
106         start = offsetof(VAPICState, isr);
107         length = offsetof(VAPICState, enabled) - offsetof(VAPICState, isr);
108 
109         if (sync_type & SYNC_TO_VAPIC) {
110             assert(qemu_cpu_is_self(CPU(s->cpu)));
111 
112             vapic_state.tpr = s->tpr;
113             vapic_state.enabled = 1;
114             start = 0;
115             length = sizeof(VAPICState);
116         }
117 
118         vector = get_highest_priority_int(s->isr);
119         if (vector < 0) {
120             vector = 0;
121         }
122         vapic_state.isr = vector & 0xf0;
123 
124         vapic_state.zero = 0;
125 
126         vector = get_highest_priority_int(s->irr);
127         if (vector < 0) {
128             vector = 0;
129         }
130         vapic_state.irr = vector & 0xff;
131 
132         cpu_physical_memory_write_rom(s->vapic_paddr + start,
133                                       ((void *)&vapic_state) + start, length);
134     }
135 }
136 
137 static void apic_vapic_base_update(APICCommonState *s)
138 {
139     apic_sync_vapic(s, SYNC_TO_VAPIC);
140 }
141 
142 static void apic_local_deliver(APICCommonState *s, int vector)
143 {
144     uint32_t lvt = s->lvt[vector];
145     int trigger_mode;
146 
147     trace_apic_local_deliver(vector, (lvt >> 8) & 7);
148 
149     if (lvt & APIC_LVT_MASKED)
150         return;
151 
152     switch ((lvt >> 8) & 7) {
153     case APIC_DM_SMI:
154         cpu_interrupt(CPU(s->cpu), CPU_INTERRUPT_SMI);
155         break;
156 
157     case APIC_DM_NMI:
158         cpu_interrupt(CPU(s->cpu), CPU_INTERRUPT_NMI);
159         break;
160 
161     case APIC_DM_EXTINT:
162         cpu_interrupt(CPU(s->cpu), CPU_INTERRUPT_HARD);
163         break;
164 
165     case APIC_DM_FIXED:
166         trigger_mode = APIC_TRIGGER_EDGE;
167         if ((vector == APIC_LVT_LINT0 || vector == APIC_LVT_LINT1) &&
168             (lvt & APIC_LVT_LEVEL_TRIGGER))
169             trigger_mode = APIC_TRIGGER_LEVEL;
170         apic_set_irq(s, lvt & 0xff, trigger_mode);
171     }
172 }
173 
174 void apic_deliver_pic_intr(DeviceState *d, int level)
175 {
176     APICCommonState *s = DO_UPCAST(APICCommonState, busdev.qdev, d);
177 
178     if (level) {
179         apic_local_deliver(s, APIC_LVT_LINT0);
180     } else {
181         uint32_t lvt = s->lvt[APIC_LVT_LINT0];
182 
183         switch ((lvt >> 8) & 7) {
184         case APIC_DM_FIXED:
185             if (!(lvt & APIC_LVT_LEVEL_TRIGGER))
186                 break;
187             apic_reset_bit(s->irr, lvt & 0xff);
188             /* fall through */
189         case APIC_DM_EXTINT:
190             cpu_reset_interrupt(CPU(s->cpu), CPU_INTERRUPT_HARD);
191             break;
192         }
193     }
194 }
195 
196 static void apic_external_nmi(APICCommonState *s)
197 {
198     apic_local_deliver(s, APIC_LVT_LINT1);
199 }
200 
201 #define foreach_apic(apic, deliver_bitmask, code) \
202 {\
203     int __i, __j, __mask;\
204     for(__i = 0; __i < MAX_APIC_WORDS; __i++) {\
205         __mask = deliver_bitmask[__i];\
206         if (__mask) {\
207             for(__j = 0; __j < 32; __j++) {\
208                 if (__mask & (1 << __j)) {\
209                     apic = local_apics[__i * 32 + __j];\
210                     if (apic) {\
211                         code;\
212                     }\
213                 }\
214             }\
215         }\
216     }\
217 }
218 
219 static void apic_bus_deliver(const uint32_t *deliver_bitmask,
220                              uint8_t delivery_mode, uint8_t vector_num,
221                              uint8_t trigger_mode)
222 {
223     APICCommonState *apic_iter;
224 
225     switch (delivery_mode) {
226         case APIC_DM_LOWPRI:
227             /* XXX: search for focus processor, arbitration */
228             {
229                 int i, d;
230                 d = -1;
231                 for(i = 0; i < MAX_APIC_WORDS; i++) {
232                     if (deliver_bitmask[i]) {
233                         d = i * 32 + apic_ffs_bit(deliver_bitmask[i]);
234                         break;
235                     }
236                 }
237                 if (d >= 0) {
238                     apic_iter = local_apics[d];
239                     if (apic_iter) {
240                         apic_set_irq(apic_iter, vector_num, trigger_mode);
241                     }
242                 }
243             }
244             return;
245 
246         case APIC_DM_FIXED:
247             break;
248 
249         case APIC_DM_SMI:
250             foreach_apic(apic_iter, deliver_bitmask,
251                 cpu_interrupt(CPU(apic_iter->cpu), CPU_INTERRUPT_SMI)
252             );
253             return;
254 
255         case APIC_DM_NMI:
256             foreach_apic(apic_iter, deliver_bitmask,
257                 cpu_interrupt(CPU(apic_iter->cpu), CPU_INTERRUPT_NMI)
258             );
259             return;
260 
261         case APIC_DM_INIT:
262             /* normal INIT IPI sent to processors */
263             foreach_apic(apic_iter, deliver_bitmask,
264                          cpu_interrupt(CPU(apic_iter->cpu),
265                                        CPU_INTERRUPT_INIT)
266             );
267             return;
268 
269         case APIC_DM_EXTINT:
270             /* handled in I/O APIC code */
271             break;
272 
273         default:
274             return;
275     }
276 
277     foreach_apic(apic_iter, deliver_bitmask,
278                  apic_set_irq(apic_iter, vector_num, trigger_mode) );
279 }
280 
281 void apic_deliver_irq(uint8_t dest, uint8_t dest_mode, uint8_t delivery_mode,
282                       uint8_t vector_num, uint8_t trigger_mode)
283 {
284     uint32_t deliver_bitmask[MAX_APIC_WORDS];
285 
286     trace_apic_deliver_irq(dest, dest_mode, delivery_mode, vector_num,
287                            trigger_mode);
288 
289     apic_get_delivery_bitmask(deliver_bitmask, dest, dest_mode);
290     apic_bus_deliver(deliver_bitmask, delivery_mode, vector_num, trigger_mode);
291 }
292 
293 static void apic_set_base(APICCommonState *s, uint64_t val)
294 {
295     s->apicbase = (val & 0xfffff000) |
296         (s->apicbase & (MSR_IA32_APICBASE_BSP | MSR_IA32_APICBASE_ENABLE));
297     /* if disabled, cannot be enabled again */
298     if (!(val & MSR_IA32_APICBASE_ENABLE)) {
299         s->apicbase &= ~MSR_IA32_APICBASE_ENABLE;
300         cpu_clear_apic_feature(&s->cpu->env);
301         s->spurious_vec &= ~APIC_SV_ENABLE;
302     }
303 }
304 
305 static void apic_set_tpr(APICCommonState *s, uint8_t val)
306 {
307     /* Updates from cr8 are ignored while the VAPIC is active */
308     if (!s->vapic_paddr) {
309         s->tpr = val << 4;
310         apic_update_irq(s);
311     }
312 }
313 
314 static uint8_t apic_get_tpr(APICCommonState *s)
315 {
316     apic_sync_vapic(s, SYNC_FROM_VAPIC);
317     return s->tpr >> 4;
318 }
319 
320 static int apic_get_ppr(APICCommonState *s)
321 {
322     int tpr, isrv, ppr;
323 
324     tpr = (s->tpr >> 4);
325     isrv = get_highest_priority_int(s->isr);
326     if (isrv < 0)
327         isrv = 0;
328     isrv >>= 4;
329     if (tpr >= isrv)
330         ppr = s->tpr;
331     else
332         ppr = isrv << 4;
333     return ppr;
334 }
335 
336 static int apic_get_arb_pri(APICCommonState *s)
337 {
338     /* XXX: arbitration */
339     return 0;
340 }
341 
342 
343 /*
344  * <0 - low prio interrupt,
345  * 0  - no interrupt,
346  * >0 - interrupt number
347  */
348 static int apic_irq_pending(APICCommonState *s)
349 {
350     int irrv, ppr;
351     irrv = get_highest_priority_int(s->irr);
352     if (irrv < 0) {
353         return 0;
354     }
355     ppr = apic_get_ppr(s);
356     if (ppr && (irrv & 0xf0) <= (ppr & 0xf0)) {
357         return -1;
358     }
359 
360     return irrv;
361 }
362 
363 /* signal the CPU if an irq is pending */
364 static void apic_update_irq(APICCommonState *s)
365 {
366     CPUState *cpu;
367 
368     if (!(s->spurious_vec & APIC_SV_ENABLE)) {
369         return;
370     }
371     cpu = CPU(s->cpu);
372     if (!qemu_cpu_is_self(cpu)) {
373         cpu_interrupt(cpu, CPU_INTERRUPT_POLL);
374     } else if (apic_irq_pending(s) > 0) {
375         cpu_interrupt(cpu, CPU_INTERRUPT_HARD);
376     }
377 }
378 
379 void apic_poll_irq(DeviceState *d)
380 {
381     APICCommonState *s = APIC_COMMON(d);
382 
383     apic_sync_vapic(s, SYNC_FROM_VAPIC);
384     apic_update_irq(s);
385 }
386 
387 static void apic_set_irq(APICCommonState *s, int vector_num, int trigger_mode)
388 {
389     apic_report_irq_delivered(!apic_get_bit(s->irr, vector_num));
390 
391     apic_set_bit(s->irr, vector_num);
392     if (trigger_mode)
393         apic_set_bit(s->tmr, vector_num);
394     else
395         apic_reset_bit(s->tmr, vector_num);
396     if (s->vapic_paddr) {
397         apic_sync_vapic(s, SYNC_ISR_IRR_TO_VAPIC);
398         /*
399          * The vcpu thread needs to see the new IRR before we pull its current
400          * TPR value. That way, if we miss a lowering of the TRP, the guest
401          * has the chance to notice the new IRR and poll for IRQs on its own.
402          */
403         smp_wmb();
404         apic_sync_vapic(s, SYNC_FROM_VAPIC);
405     }
406     apic_update_irq(s);
407 }
408 
409 static void apic_eoi(APICCommonState *s)
410 {
411     int isrv;
412     isrv = get_highest_priority_int(s->isr);
413     if (isrv < 0)
414         return;
415     apic_reset_bit(s->isr, isrv);
416     if (!(s->spurious_vec & APIC_SV_DIRECTED_IO) && apic_get_bit(s->tmr, isrv)) {
417         ioapic_eoi_broadcast(isrv);
418     }
419     apic_sync_vapic(s, SYNC_FROM_VAPIC | SYNC_TO_VAPIC);
420     apic_update_irq(s);
421 }
422 
423 static int apic_find_dest(uint8_t dest)
424 {
425     APICCommonState *apic = local_apics[dest];
426     int i;
427 
428     if (apic && apic->id == dest)
429         return dest;  /* shortcut in case apic->id == apic->idx */
430 
431     for (i = 0; i < MAX_APICS; i++) {
432         apic = local_apics[i];
433 	if (apic && apic->id == dest)
434             return i;
435         if (!apic)
436             break;
437     }
438 
439     return -1;
440 }
441 
442 static void apic_get_delivery_bitmask(uint32_t *deliver_bitmask,
443                                       uint8_t dest, uint8_t dest_mode)
444 {
445     APICCommonState *apic_iter;
446     int i;
447 
448     if (dest_mode == 0) {
449         if (dest == 0xff) {
450             memset(deliver_bitmask, 0xff, MAX_APIC_WORDS * sizeof(uint32_t));
451         } else {
452             int idx = apic_find_dest(dest);
453             memset(deliver_bitmask, 0x00, MAX_APIC_WORDS * sizeof(uint32_t));
454             if (idx >= 0)
455                 apic_set_bit(deliver_bitmask, idx);
456         }
457     } else {
458         /* XXX: cluster mode */
459         memset(deliver_bitmask, 0x00, MAX_APIC_WORDS * sizeof(uint32_t));
460         for(i = 0; i < MAX_APICS; i++) {
461             apic_iter = local_apics[i];
462             if (apic_iter) {
463                 if (apic_iter->dest_mode == 0xf) {
464                     if (dest & apic_iter->log_dest)
465                         apic_set_bit(deliver_bitmask, i);
466                 } else if (apic_iter->dest_mode == 0x0) {
467                     if ((dest & 0xf0) == (apic_iter->log_dest & 0xf0) &&
468                         (dest & apic_iter->log_dest & 0x0f)) {
469                         apic_set_bit(deliver_bitmask, i);
470                     }
471                 }
472             } else {
473                 break;
474             }
475         }
476     }
477 }
478 
479 static void apic_startup(APICCommonState *s, int vector_num)
480 {
481     s->sipi_vector = vector_num;
482     cpu_interrupt(CPU(s->cpu), CPU_INTERRUPT_SIPI);
483 }
484 
485 void apic_sipi(DeviceState *d)
486 {
487     APICCommonState *s = DO_UPCAST(APICCommonState, busdev.qdev, d);
488 
489     cpu_reset_interrupt(CPU(s->cpu), CPU_INTERRUPT_SIPI);
490 
491     if (!s->wait_for_sipi)
492         return;
493     cpu_x86_load_seg_cache_sipi(s->cpu, s->sipi_vector);
494     s->wait_for_sipi = 0;
495 }
496 
497 static void apic_deliver(DeviceState *d, uint8_t dest, uint8_t dest_mode,
498                          uint8_t delivery_mode, uint8_t vector_num,
499                          uint8_t trigger_mode)
500 {
501     APICCommonState *s = DO_UPCAST(APICCommonState, busdev.qdev, d);
502     uint32_t deliver_bitmask[MAX_APIC_WORDS];
503     int dest_shorthand = (s->icr[0] >> 18) & 3;
504     APICCommonState *apic_iter;
505 
506     switch (dest_shorthand) {
507     case 0:
508         apic_get_delivery_bitmask(deliver_bitmask, dest, dest_mode);
509         break;
510     case 1:
511         memset(deliver_bitmask, 0x00, sizeof(deliver_bitmask));
512         apic_set_bit(deliver_bitmask, s->idx);
513         break;
514     case 2:
515         memset(deliver_bitmask, 0xff, sizeof(deliver_bitmask));
516         break;
517     case 3:
518         memset(deliver_bitmask, 0xff, sizeof(deliver_bitmask));
519         apic_reset_bit(deliver_bitmask, s->idx);
520         break;
521     }
522 
523     switch (delivery_mode) {
524         case APIC_DM_INIT:
525             {
526                 int trig_mode = (s->icr[0] >> 15) & 1;
527                 int level = (s->icr[0] >> 14) & 1;
528                 if (level == 0 && trig_mode == 1) {
529                     foreach_apic(apic_iter, deliver_bitmask,
530                                  apic_iter->arb_id = apic_iter->id );
531                     return;
532                 }
533             }
534             break;
535 
536         case APIC_DM_SIPI:
537             foreach_apic(apic_iter, deliver_bitmask,
538                          apic_startup(apic_iter, vector_num) );
539             return;
540     }
541 
542     apic_bus_deliver(deliver_bitmask, delivery_mode, vector_num, trigger_mode);
543 }
544 
545 static bool apic_check_pic(APICCommonState *s)
546 {
547     if (!apic_accept_pic_intr(&s->busdev.qdev) || !pic_get_output(isa_pic)) {
548         return false;
549     }
550     apic_deliver_pic_intr(&s->busdev.qdev, 1);
551     return true;
552 }
553 
554 int apic_get_interrupt(DeviceState *d)
555 {
556     APICCommonState *s = DO_UPCAST(APICCommonState, busdev.qdev, d);
557     int intno;
558 
559     /* if the APIC is installed or enabled, we let the 8259 handle the
560        IRQs */
561     if (!s)
562         return -1;
563     if (!(s->spurious_vec & APIC_SV_ENABLE))
564         return -1;
565 
566     apic_sync_vapic(s, SYNC_FROM_VAPIC);
567     intno = apic_irq_pending(s);
568 
569     if (intno == 0) {
570         apic_sync_vapic(s, SYNC_TO_VAPIC);
571         return -1;
572     } else if (intno < 0) {
573         apic_sync_vapic(s, SYNC_TO_VAPIC);
574         return s->spurious_vec & 0xff;
575     }
576     apic_reset_bit(s->irr, intno);
577     apic_set_bit(s->isr, intno);
578     apic_sync_vapic(s, SYNC_TO_VAPIC);
579 
580     /* re-inject if there is still a pending PIC interrupt */
581     apic_check_pic(s);
582 
583     apic_update_irq(s);
584 
585     return intno;
586 }
587 
588 int apic_accept_pic_intr(DeviceState *d)
589 {
590     APICCommonState *s = DO_UPCAST(APICCommonState, busdev.qdev, d);
591     uint32_t lvt0;
592 
593     if (!s)
594         return -1;
595 
596     lvt0 = s->lvt[APIC_LVT_LINT0];
597 
598     if ((s->apicbase & MSR_IA32_APICBASE_ENABLE) == 0 ||
599         (lvt0 & APIC_LVT_MASKED) == 0)
600         return 1;
601 
602     return 0;
603 }
604 
605 static uint32_t apic_get_current_count(APICCommonState *s)
606 {
607     int64_t d;
608     uint32_t val;
609     d = (qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) - s->initial_count_load_time) >>
610         s->count_shift;
611     if (s->lvt[APIC_LVT_TIMER] & APIC_LVT_TIMER_PERIODIC) {
612         /* periodic */
613         val = s->initial_count - (d % ((uint64_t)s->initial_count + 1));
614     } else {
615         if (d >= s->initial_count)
616             val = 0;
617         else
618             val = s->initial_count - d;
619     }
620     return val;
621 }
622 
623 static void apic_timer_update(APICCommonState *s, int64_t current_time)
624 {
625     if (apic_next_timer(s, current_time)) {
626         timer_mod(s->timer, s->next_time);
627     } else {
628         timer_del(s->timer);
629     }
630 }
631 
632 static void apic_timer(void *opaque)
633 {
634     APICCommonState *s = opaque;
635 
636     apic_local_deliver(s, APIC_LVT_TIMER);
637     apic_timer_update(s, s->next_time);
638 }
639 
640 static uint32_t apic_mem_readb(void *opaque, hwaddr addr)
641 {
642     return 0;
643 }
644 
645 static uint32_t apic_mem_readw(void *opaque, hwaddr addr)
646 {
647     return 0;
648 }
649 
650 static void apic_mem_writeb(void *opaque, hwaddr addr, uint32_t val)
651 {
652 }
653 
654 static void apic_mem_writew(void *opaque, hwaddr addr, uint32_t val)
655 {
656 }
657 
658 static uint32_t apic_mem_readl(void *opaque, hwaddr addr)
659 {
660     DeviceState *d;
661     APICCommonState *s;
662     uint32_t val;
663     int index;
664 
665     d = cpu_get_current_apic();
666     if (!d) {
667         return 0;
668     }
669     s = DO_UPCAST(APICCommonState, busdev.qdev, d);
670 
671     index = (addr >> 4) & 0xff;
672     switch(index) {
673     case 0x02: /* id */
674         val = s->id << 24;
675         break;
676     case 0x03: /* version */
677         val = 0x11 | ((APIC_LVT_NB - 1) << 16); /* version 0x11 */
678         break;
679     case 0x08:
680         apic_sync_vapic(s, SYNC_FROM_VAPIC);
681         if (apic_report_tpr_access) {
682             cpu_report_tpr_access(&s->cpu->env, TPR_ACCESS_READ);
683         }
684         val = s->tpr;
685         break;
686     case 0x09:
687         val = apic_get_arb_pri(s);
688         break;
689     case 0x0a:
690         /* ppr */
691         val = apic_get_ppr(s);
692         break;
693     case 0x0b:
694         val = 0;
695         break;
696     case 0x0d:
697         val = s->log_dest << 24;
698         break;
699     case 0x0e:
700         val = s->dest_mode << 28;
701         break;
702     case 0x0f:
703         val = s->spurious_vec;
704         break;
705     case 0x10 ... 0x17:
706         val = s->isr[index & 7];
707         break;
708     case 0x18 ... 0x1f:
709         val = s->tmr[index & 7];
710         break;
711     case 0x20 ... 0x27:
712         val = s->irr[index & 7];
713         break;
714     case 0x28:
715         val = s->esr;
716         break;
717     case 0x30:
718     case 0x31:
719         val = s->icr[index & 1];
720         break;
721     case 0x32 ... 0x37:
722         val = s->lvt[index - 0x32];
723         break;
724     case 0x38:
725         val = s->initial_count;
726         break;
727     case 0x39:
728         val = apic_get_current_count(s);
729         break;
730     case 0x3e:
731         val = s->divide_conf;
732         break;
733     default:
734         s->esr |= ESR_ILLEGAL_ADDRESS;
735         val = 0;
736         break;
737     }
738     trace_apic_mem_readl(addr, val);
739     return val;
740 }
741 
742 static void apic_send_msi(hwaddr addr, uint32_t data)
743 {
744     uint8_t dest = (addr & MSI_ADDR_DEST_ID_MASK) >> MSI_ADDR_DEST_ID_SHIFT;
745     uint8_t vector = (data & MSI_DATA_VECTOR_MASK) >> MSI_DATA_VECTOR_SHIFT;
746     uint8_t dest_mode = (addr >> MSI_ADDR_DEST_MODE_SHIFT) & 0x1;
747     uint8_t trigger_mode = (data >> MSI_DATA_TRIGGER_SHIFT) & 0x1;
748     uint8_t delivery = (data >> MSI_DATA_DELIVERY_MODE_SHIFT) & 0x7;
749     /* XXX: Ignore redirection hint. */
750     apic_deliver_irq(dest, dest_mode, delivery, vector, trigger_mode);
751 }
752 
753 static void apic_mem_writel(void *opaque, hwaddr addr, uint32_t val)
754 {
755     DeviceState *d;
756     APICCommonState *s;
757     int index = (addr >> 4) & 0xff;
758     if (addr > 0xfff || !index) {
759         /* MSI and MMIO APIC are at the same memory location,
760          * but actually not on the global bus: MSI is on PCI bus
761          * APIC is connected directly to the CPU.
762          * Mapping them on the global bus happens to work because
763          * MSI registers are reserved in APIC MMIO and vice versa. */
764         apic_send_msi(addr, val);
765         return;
766     }
767 
768     d = cpu_get_current_apic();
769     if (!d) {
770         return;
771     }
772     s = DO_UPCAST(APICCommonState, busdev.qdev, d);
773 
774     trace_apic_mem_writel(addr, val);
775 
776     switch(index) {
777     case 0x02:
778         s->id = (val >> 24);
779         break;
780     case 0x03:
781         break;
782     case 0x08:
783         if (apic_report_tpr_access) {
784             cpu_report_tpr_access(&s->cpu->env, TPR_ACCESS_WRITE);
785         }
786         s->tpr = val;
787         apic_sync_vapic(s, SYNC_TO_VAPIC);
788         apic_update_irq(s);
789         break;
790     case 0x09:
791     case 0x0a:
792         break;
793     case 0x0b: /* EOI */
794         apic_eoi(s);
795         break;
796     case 0x0d:
797         s->log_dest = val >> 24;
798         break;
799     case 0x0e:
800         s->dest_mode = val >> 28;
801         break;
802     case 0x0f:
803         s->spurious_vec = val & 0x1ff;
804         apic_update_irq(s);
805         break;
806     case 0x10 ... 0x17:
807     case 0x18 ... 0x1f:
808     case 0x20 ... 0x27:
809     case 0x28:
810         break;
811     case 0x30:
812         s->icr[0] = val;
813         apic_deliver(d, (s->icr[1] >> 24) & 0xff, (s->icr[0] >> 11) & 1,
814                      (s->icr[0] >> 8) & 7, (s->icr[0] & 0xff),
815                      (s->icr[0] >> 15) & 1);
816         break;
817     case 0x31:
818         s->icr[1] = val;
819         break;
820     case 0x32 ... 0x37:
821         {
822             int n = index - 0x32;
823             s->lvt[n] = val;
824             if (n == APIC_LVT_TIMER) {
825                 apic_timer_update(s, qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL));
826             } else if (n == APIC_LVT_LINT0 && apic_check_pic(s)) {
827                 apic_update_irq(s);
828             }
829         }
830         break;
831     case 0x38:
832         s->initial_count = val;
833         s->initial_count_load_time = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL);
834         apic_timer_update(s, s->initial_count_load_time);
835         break;
836     case 0x39:
837         break;
838     case 0x3e:
839         {
840             int v;
841             s->divide_conf = val & 0xb;
842             v = (s->divide_conf & 3) | ((s->divide_conf >> 1) & 4);
843             s->count_shift = (v + 1) & 7;
844         }
845         break;
846     default:
847         s->esr |= ESR_ILLEGAL_ADDRESS;
848         break;
849     }
850 }
851 
852 static void apic_pre_save(APICCommonState *s)
853 {
854     apic_sync_vapic(s, SYNC_FROM_VAPIC);
855 }
856 
857 static void apic_post_load(APICCommonState *s)
858 {
859     if (s->timer_expiry != -1) {
860         timer_mod(s->timer, s->timer_expiry);
861     } else {
862         timer_del(s->timer);
863     }
864 }
865 
866 static const MemoryRegionOps apic_io_ops = {
867     .old_mmio = {
868         .read = { apic_mem_readb, apic_mem_readw, apic_mem_readl, },
869         .write = { apic_mem_writeb, apic_mem_writew, apic_mem_writel, },
870     },
871     .endianness = DEVICE_NATIVE_ENDIAN,
872 };
873 
874 static void apic_init(APICCommonState *s)
875 {
876     memory_region_init_io(&s->io_memory, OBJECT(s), &apic_io_ops, s, "apic-msi",
877                           APIC_SPACE_SIZE);
878 
879     s->timer = timer_new_ns(QEMU_CLOCK_VIRTUAL, apic_timer, s);
880     local_apics[s->idx] = s;
881 
882     msi_supported = true;
883 }
884 
885 static void apic_class_init(ObjectClass *klass, void *data)
886 {
887     APICCommonClass *k = APIC_COMMON_CLASS(klass);
888 
889     k->init = apic_init;
890     k->set_base = apic_set_base;
891     k->set_tpr = apic_set_tpr;
892     k->get_tpr = apic_get_tpr;
893     k->vapic_base_update = apic_vapic_base_update;
894     k->external_nmi = apic_external_nmi;
895     k->pre_save = apic_pre_save;
896     k->post_load = apic_post_load;
897 }
898 
899 static const TypeInfo apic_info = {
900     .name          = "apic",
901     .instance_size = sizeof(APICCommonState),
902     .parent        = TYPE_APIC_COMMON,
903     .class_init    = apic_class_init,
904 };
905 
906 static void apic_register_types(void)
907 {
908     type_register_static(&apic_info);
909 }
910 
911 type_init(apic_register_types)
912