xref: /openbmc/qemu/hw/ppc/pegasos2.c (revision 701bff24)
1 /*
2  * QEMU PowerPC CHRP (Genesi/bPlan Pegasos II) hardware System Emulator
3  *
4  * Copyright (c) 2018-2021 BALATON Zoltan
5  *
6  * This work is licensed under the GNU GPL license version 2 or later.
7  *
8  */
9 
10 #include "qemu/osdep.h"
11 #include "qemu/units.h"
12 #include "qapi/error.h"
13 #include "hw/hw.h"
14 #include "hw/ppc/ppc.h"
15 #include "hw/sysbus.h"
16 #include "hw/pci/pci_host.h"
17 #include "hw/irq.h"
18 #include "hw/pci-host/mv64361.h"
19 #include "hw/isa/vt82c686.h"
20 #include "hw/ide/pci.h"
21 #include "hw/i2c/smbus_eeprom.h"
22 #include "hw/qdev-properties.h"
23 #include "sysemu/reset.h"
24 #include "sysemu/runstate.h"
25 #include "sysemu/qtest.h"
26 #include "hw/boards.h"
27 #include "hw/loader.h"
28 #include "hw/fw-path-provider.h"
29 #include "elf.h"
30 #include "qemu/log.h"
31 #include "qemu/error-report.h"
32 #include "sysemu/kvm.h"
33 #include "kvm_ppc.h"
34 #include "exec/address-spaces.h"
35 #include "qom/qom-qobject.h"
36 #include "qapi/qmp/qdict.h"
37 #include "trace.h"
38 #include "qemu/datadir.h"
39 #include "sysemu/device_tree.h"
40 #include "hw/ppc/vof.h"
41 
42 #include <libfdt.h>
43 
44 #define PROM_FILENAME "vof.bin"
45 #define PROM_ADDR     0xfff00000
46 #define PROM_SIZE     0x80000
47 
48 #define KVMPPC_HCALL_BASE    0xf000
49 #define KVMPPC_H_RTAS        (KVMPPC_HCALL_BASE + 0x0)
50 #define KVMPPC_H_VOF_CLIENT  (KVMPPC_HCALL_BASE + 0x5)
51 
52 #define H_SUCCESS     0
53 #define H_PRIVILEGE  -3  /* Caller not privileged */
54 #define H_PARAMETER  -4  /* Parameter invalid, out-of-range or conflicting */
55 
56 #define BUS_FREQ_HZ 133333333
57 
58 #define PCI0_CFG_ADDR 0xcf8
59 #define PCI0_MEM_BASE 0xc0000000
60 #define PCI0_MEM_SIZE 0x20000000
61 #define PCI0_IO_BASE  0xf8000000
62 #define PCI0_IO_SIZE  0x10000
63 
64 #define PCI1_CFG_ADDR 0xc78
65 #define PCI1_MEM_BASE 0x80000000
66 #define PCI1_MEM_SIZE 0x40000000
67 #define PCI1_IO_BASE  0xfe000000
68 #define PCI1_IO_SIZE  0x10000
69 
70 #define TYPE_PEGASOS2_MACHINE  MACHINE_TYPE_NAME("pegasos2")
71 OBJECT_DECLARE_TYPE(Pegasos2MachineState, MachineClass, PEGASOS2_MACHINE)
72 
73 struct Pegasos2MachineState {
74     MachineState parent_obj;
75     PowerPCCPU *cpu;
76     DeviceState *mv;
77     Vof *vof;
78     void *fdt_blob;
79     uint64_t kernel_addr;
80     uint64_t kernel_entry;
81     uint64_t kernel_size;
82 };
83 
84 static void *build_fdt(MachineState *machine, int *fdt_size);
85 
86 static void pegasos2_cpu_reset(void *opaque)
87 {
88     PowerPCCPU *cpu = opaque;
89     Pegasos2MachineState *pm = PEGASOS2_MACHINE(current_machine);
90 
91     cpu_reset(CPU(cpu));
92     cpu->env.spr[SPR_HID1] = 7ULL << 28;
93     if (pm->vof) {
94         cpu->env.gpr[1] = 2 * VOF_STACK_SIZE - 0x20;
95         cpu->env.nip = 0x100;
96     }
97 }
98 
99 static void pegasos2_init(MachineState *machine)
100 {
101     Pegasos2MachineState *pm = PEGASOS2_MACHINE(machine);
102     CPUPPCState *env;
103     MemoryRegion *rom = g_new(MemoryRegion, 1);
104     PCIBus *pci_bus;
105     PCIDevice *dev;
106     I2CBus *i2c_bus;
107     const char *fwname = machine->firmware ?: PROM_FILENAME;
108     char *filename;
109     int sz;
110     uint8_t *spd_data;
111 
112     /* init CPU */
113     pm->cpu = POWERPC_CPU(cpu_create(machine->cpu_type));
114     env = &pm->cpu->env;
115     if (PPC_INPUT(env) != PPC_FLAGS_INPUT_6xx) {
116         error_report("Incompatible CPU, only 6xx bus supported");
117         exit(1);
118     }
119 
120     /* Set time-base frequency */
121     cpu_ppc_tb_init(env, BUS_FREQ_HZ / 4);
122     qemu_register_reset(pegasos2_cpu_reset, pm->cpu);
123 
124     /* RAM */
125     if (machine->ram_size > 2 * GiB) {
126         error_report("RAM size more than 2 GiB is not supported");
127         exit(1);
128     }
129     memory_region_add_subregion(get_system_memory(), 0, machine->ram);
130 
131     /* allocate and load firmware */
132     filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, fwname);
133     if (!filename) {
134         error_report("Could not find firmware '%s'", fwname);
135         exit(1);
136     }
137     if (!machine->firmware && !pm->vof) {
138         pm->vof = g_malloc0(sizeof(*pm->vof));
139     }
140     memory_region_init_rom(rom, NULL, "pegasos2.rom", PROM_SIZE, &error_fatal);
141     memory_region_add_subregion(get_system_memory(), PROM_ADDR, rom);
142     sz = load_elf(filename, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 1,
143                   PPC_ELF_MACHINE, 0, 0);
144     if (sz <= 0) {
145         sz = load_image_targphys(filename, pm->vof ? 0 : PROM_ADDR, PROM_SIZE);
146     }
147     if (sz <= 0 || sz > PROM_SIZE) {
148         error_report("Could not load firmware '%s'", filename);
149         exit(1);
150     }
151     g_free(filename);
152     if (pm->vof) {
153         pm->vof->fw_size = sz;
154     }
155 
156     /* Marvell Discovery II system controller */
157     pm->mv = DEVICE(sysbus_create_simple(TYPE_MV64361, -1,
158                           qdev_get_gpio_in(DEVICE(pm->cpu), PPC6xx_INPUT_INT)));
159     pci_bus = mv64361_get_pci_bus(pm->mv, 1);
160 
161     /* VIA VT8231 South Bridge (multifunction PCI device) */
162     /* VT8231 function 0: PCI-to-ISA Bridge */
163     dev = pci_create_simple_multifunction(pci_bus, PCI_DEVFN(12, 0), true,
164                                           TYPE_VT8231_ISA);
165     qdev_connect_gpio_out(DEVICE(dev), 0,
166                           qdev_get_gpio_in_named(pm->mv, "gpp", 31));
167 
168     /* VT8231 function 1: IDE Controller */
169     dev = pci_create_simple(pci_bus, PCI_DEVFN(12, 1), "via-ide");
170     pci_ide_create_devs(dev);
171 
172     /* VT8231 function 2-3: USB Ports */
173     pci_create_simple(pci_bus, PCI_DEVFN(12, 2), "vt82c686b-usb-uhci");
174     pci_create_simple(pci_bus, PCI_DEVFN(12, 3), "vt82c686b-usb-uhci");
175 
176     /* VT8231 function 4: Power Management Controller */
177     dev = pci_create_simple(pci_bus, PCI_DEVFN(12, 4), TYPE_VT8231_PM);
178     i2c_bus = I2C_BUS(qdev_get_child_bus(DEVICE(dev), "i2c"));
179     spd_data = spd_data_generate(DDR, machine->ram_size);
180     smbus_eeprom_init_one(i2c_bus, 0x57, spd_data);
181 
182     /* VT8231 function 5-6: AC97 Audio & Modem */
183     pci_create_simple(pci_bus, PCI_DEVFN(12, 5), TYPE_VIA_AC97);
184     pci_create_simple(pci_bus, PCI_DEVFN(12, 6), TYPE_VIA_MC97);
185 
186     /* other PC hardware */
187     pci_vga_init(pci_bus);
188 
189     if (machine->kernel_filename) {
190         sz = load_elf(machine->kernel_filename, NULL, NULL, NULL,
191                       &pm->kernel_entry, &pm->kernel_addr, NULL, NULL, 1,
192                       PPC_ELF_MACHINE, 0, 0);
193         if (sz <= 0) {
194             error_report("Could not load kernel '%s'",
195                          machine->kernel_filename);
196             exit(1);
197         }
198         pm->kernel_size = sz;
199         if (!pm->vof) {
200             warn_report("Option -kernel may be ineffective with -bios.");
201         }
202     } else if (pm->vof && !qtest_enabled()) {
203         warn_report("Using Virtual OpenFirmware but no -kernel option.");
204     }
205 
206     if (!pm->vof && machine->kernel_cmdline && machine->kernel_cmdline[0]) {
207         warn_report("Option -append may be ineffective with -bios.");
208     }
209 }
210 
211 static uint32_t pegasos2_mv_reg_read(Pegasos2MachineState *pm,
212                                      uint32_t addr, uint32_t len)
213 {
214     MemoryRegion *r = sysbus_mmio_get_region(SYS_BUS_DEVICE(pm->mv), 0);
215     uint64_t val = 0xffffffffULL;
216     memory_region_dispatch_read(r, addr, &val, size_memop(len) | MO_LE,
217                                 MEMTXATTRS_UNSPECIFIED);
218     return val;
219 }
220 
221 static void pegasos2_mv_reg_write(Pegasos2MachineState *pm, uint32_t addr,
222                                   uint32_t len, uint32_t val)
223 {
224     MemoryRegion *r = sysbus_mmio_get_region(SYS_BUS_DEVICE(pm->mv), 0);
225     memory_region_dispatch_write(r, addr, val, size_memop(len) | MO_LE,
226                                  MEMTXATTRS_UNSPECIFIED);
227 }
228 
229 static uint32_t pegasos2_pci_config_read(Pegasos2MachineState *pm, int bus,
230                                          uint32_t addr, uint32_t len)
231 {
232     hwaddr pcicfg = bus ? PCI1_CFG_ADDR : PCI0_CFG_ADDR;
233     uint64_t val = 0xffffffffULL;
234 
235     if (len <= 4) {
236         pegasos2_mv_reg_write(pm, pcicfg, 4, addr | BIT(31));
237         val = pegasos2_mv_reg_read(pm, pcicfg + 4, len);
238     }
239     return val;
240 }
241 
242 static void pegasos2_pci_config_write(Pegasos2MachineState *pm, int bus,
243                                       uint32_t addr, uint32_t len, uint32_t val)
244 {
245     hwaddr pcicfg = bus ? PCI1_CFG_ADDR : PCI0_CFG_ADDR;
246 
247     pegasos2_mv_reg_write(pm, pcicfg, 4, addr | BIT(31));
248     pegasos2_mv_reg_write(pm, pcicfg + 4, len, val);
249 }
250 
251 static void pegasos2_machine_reset(MachineState *machine)
252 {
253     Pegasos2MachineState *pm = PEGASOS2_MACHINE(machine);
254     void *fdt;
255     uint64_t d[2];
256     int sz;
257 
258     qemu_devices_reset();
259     if (!pm->vof) {
260         return; /* Firmware should set up machine so nothing to do */
261     }
262 
263     /* Otherwise, set up devices that board firmware would normally do */
264     pegasos2_mv_reg_write(pm, 0, 4, 0x28020ff);
265     pegasos2_mv_reg_write(pm, 0x278, 4, 0xa31fc);
266     pegasos2_mv_reg_write(pm, 0xf300, 4, 0x11ff0400);
267     pegasos2_mv_reg_write(pm, 0xf10c, 4, 0x80000000);
268     pegasos2_mv_reg_write(pm, 0x1c, 4, 0x8000000);
269     pegasos2_pci_config_write(pm, 0, PCI_COMMAND, 2, PCI_COMMAND_IO |
270                               PCI_COMMAND_MEMORY | PCI_COMMAND_MASTER);
271     pegasos2_pci_config_write(pm, 1, PCI_COMMAND, 2, PCI_COMMAND_IO |
272                               PCI_COMMAND_MEMORY | PCI_COMMAND_MASTER);
273 
274     pegasos2_pci_config_write(pm, 1, (PCI_DEVFN(12, 0) << 8) |
275                               PCI_INTERRUPT_LINE, 2, 0x9);
276     pegasos2_pci_config_write(pm, 1, (PCI_DEVFN(12, 0) << 8) |
277                               0x50, 1, 0x2);
278 
279     pegasos2_pci_config_write(pm, 1, (PCI_DEVFN(12, 1) << 8) |
280                               PCI_INTERRUPT_LINE, 2, 0x109);
281     pegasos2_pci_config_write(pm, 1, (PCI_DEVFN(12, 1) << 8) |
282                               PCI_CLASS_PROG, 1, 0xf);
283     pegasos2_pci_config_write(pm, 1, (PCI_DEVFN(12, 1) << 8) |
284                               0x40, 1, 0xb);
285     pegasos2_pci_config_write(pm, 1, (PCI_DEVFN(12, 1) << 8) |
286                               0x50, 4, 0x17171717);
287     pegasos2_pci_config_write(pm, 1, (PCI_DEVFN(12, 1) << 8) |
288                               PCI_COMMAND, 2, 0x87);
289 
290     pegasos2_pci_config_write(pm, 1, (PCI_DEVFN(12, 2) << 8) |
291                               PCI_INTERRUPT_LINE, 2, 0x409);
292 
293     pegasos2_pci_config_write(pm, 1, (PCI_DEVFN(12, 3) << 8) |
294                               PCI_INTERRUPT_LINE, 2, 0x409);
295 
296     pegasos2_pci_config_write(pm, 1, (PCI_DEVFN(12, 4) << 8) |
297                               PCI_INTERRUPT_LINE, 2, 0x9);
298     pegasos2_pci_config_write(pm, 1, (PCI_DEVFN(12, 4) << 8) |
299                               0x48, 4, 0xf00);
300     pegasos2_pci_config_write(pm, 1, (PCI_DEVFN(12, 4) << 8) |
301                               0x40, 4, 0x558020);
302     pegasos2_pci_config_write(pm, 1, (PCI_DEVFN(12, 4) << 8) |
303                               0x90, 4, 0xd00);
304 
305     pegasos2_pci_config_write(pm, 1, (PCI_DEVFN(12, 5) << 8) |
306                               PCI_INTERRUPT_LINE, 2, 0x309);
307 
308     pegasos2_pci_config_write(pm, 1, (PCI_DEVFN(12, 6) << 8) |
309                               PCI_INTERRUPT_LINE, 2, 0x309);
310 
311     /* Device tree and VOF set up */
312     vof_init(pm->vof, machine->ram_size, &error_fatal);
313     if (vof_claim(pm->vof, 0, VOF_STACK_SIZE, VOF_STACK_SIZE) == -1) {
314         error_report("Memory allocation for stack failed");
315         exit(1);
316     }
317     if (pm->kernel_size &&
318         vof_claim(pm->vof, pm->kernel_addr, pm->kernel_size, 0) == -1) {
319         error_report("Memory for kernel is in use");
320         exit(1);
321     }
322     fdt = build_fdt(machine, &sz);
323     /* FIXME: VOF assumes entry is same as load address */
324     d[0] = cpu_to_be64(pm->kernel_entry);
325     d[1] = cpu_to_be64(pm->kernel_size - (pm->kernel_entry - pm->kernel_addr));
326     qemu_fdt_setprop(fdt, "/chosen", "qemu,boot-kernel", d, sizeof(d));
327 
328     qemu_fdt_dumpdtb(fdt, fdt_totalsize(fdt));
329     g_free(pm->fdt_blob);
330     pm->fdt_blob = fdt;
331 
332     vof_build_dt(fdt, pm->vof);
333     vof_client_open_store(fdt, pm->vof, "/chosen", "stdout", "/failsafe");
334 
335     /* Set machine->fdt for 'dumpdtb' QMP/HMP command */
336     machine->fdt = fdt;
337 
338     pm->cpu->vhyp = PPC_VIRTUAL_HYPERVISOR(machine);
339 }
340 
341 enum pegasos2_rtas_tokens {
342     RTAS_RESTART_RTAS = 0,
343     RTAS_NVRAM_FETCH = 1,
344     RTAS_NVRAM_STORE = 2,
345     RTAS_GET_TIME_OF_DAY = 3,
346     RTAS_SET_TIME_OF_DAY = 4,
347     RTAS_EVENT_SCAN = 6,
348     RTAS_CHECK_EXCEPTION = 7,
349     RTAS_READ_PCI_CONFIG = 8,
350     RTAS_WRITE_PCI_CONFIG = 9,
351     RTAS_DISPLAY_CHARACTER = 10,
352     RTAS_SET_INDICATOR = 11,
353     RTAS_POWER_OFF = 17,
354     RTAS_SUSPEND = 18,
355     RTAS_HIBERNATE = 19,
356     RTAS_SYSTEM_REBOOT = 20,
357 };
358 
359 static target_ulong pegasos2_rtas(PowerPCCPU *cpu, Pegasos2MachineState *pm,
360                                   target_ulong args_real)
361 {
362     AddressSpace *as = CPU(cpu)->as;
363     uint32_t token = ldl_be_phys(as, args_real);
364     uint32_t nargs = ldl_be_phys(as, args_real + 4);
365     uint32_t nrets = ldl_be_phys(as, args_real + 8);
366     uint32_t args = args_real + 12;
367     uint32_t rets = args_real + 12 + nargs * 4;
368 
369     if (nrets < 1) {
370         qemu_log_mask(LOG_GUEST_ERROR, "Too few return values in RTAS call\n");
371         return H_PARAMETER;
372     }
373     switch (token) {
374     case RTAS_GET_TIME_OF_DAY:
375     {
376         QObject *qo = object_property_get_qobject(qdev_get_machine(),
377                                                   "rtc-time", &error_fatal);
378         QDict *qd = qobject_to(QDict, qo);
379 
380         if (nargs != 0 || nrets != 8 || !qd) {
381             stl_be_phys(as, rets, -1);
382             qobject_unref(qo);
383             return H_PARAMETER;
384         }
385 
386         stl_be_phys(as, rets, 0);
387         stl_be_phys(as, rets + 4, qdict_get_int(qd, "tm_year") + 1900);
388         stl_be_phys(as, rets + 8, qdict_get_int(qd, "tm_mon") + 1);
389         stl_be_phys(as, rets + 12, qdict_get_int(qd, "tm_mday"));
390         stl_be_phys(as, rets + 16, qdict_get_int(qd, "tm_hour"));
391         stl_be_phys(as, rets + 20, qdict_get_int(qd, "tm_min"));
392         stl_be_phys(as, rets + 24, qdict_get_int(qd, "tm_sec"));
393         stl_be_phys(as, rets + 28, 0);
394         qobject_unref(qo);
395         return H_SUCCESS;
396     }
397     case RTAS_READ_PCI_CONFIG:
398     {
399         uint32_t addr, len, val;
400 
401         if (nargs != 2 || nrets != 2) {
402             stl_be_phys(as, rets, -1);
403             return H_PARAMETER;
404         }
405         addr = ldl_be_phys(as, args);
406         len = ldl_be_phys(as, args + 4);
407         val = pegasos2_pci_config_read(pm, !(addr >> 24),
408                                        addr & 0x0fffffff, len);
409         stl_be_phys(as, rets, 0);
410         stl_be_phys(as, rets + 4, val);
411         return H_SUCCESS;
412     }
413     case RTAS_WRITE_PCI_CONFIG:
414     {
415         uint32_t addr, len, val;
416 
417         if (nargs != 3 || nrets != 1) {
418             stl_be_phys(as, rets, -1);
419             return H_PARAMETER;
420         }
421         addr = ldl_be_phys(as, args);
422         len = ldl_be_phys(as, args + 4);
423         val = ldl_be_phys(as, args + 8);
424         pegasos2_pci_config_write(pm, !(addr >> 24),
425                                   addr & 0x0fffffff, len, val);
426         stl_be_phys(as, rets, 0);
427         return H_SUCCESS;
428     }
429     case RTAS_DISPLAY_CHARACTER:
430         if (nargs != 1 || nrets != 1) {
431             stl_be_phys(as, rets, -1);
432             return H_PARAMETER;
433         }
434         qemu_log_mask(LOG_UNIMP, "%c", ldl_be_phys(as, args));
435         stl_be_phys(as, rets, 0);
436         return H_SUCCESS;
437     case RTAS_POWER_OFF:
438     {
439         if (nargs != 2 || nrets != 1) {
440             stl_be_phys(as, rets, -1);
441             return H_PARAMETER;
442         }
443         qemu_system_shutdown_request(SHUTDOWN_CAUSE_GUEST_SHUTDOWN);
444         stl_be_phys(as, rets, 0);
445         return H_SUCCESS;
446     }
447     default:
448         qemu_log_mask(LOG_UNIMP, "Unknown RTAS token %u (args=%u, rets=%u)\n",
449                       token, nargs, nrets);
450         stl_be_phys(as, rets, 0);
451         return H_SUCCESS;
452     }
453 }
454 
455 static bool pegasos2_cpu_in_nested(PowerPCCPU *cpu)
456 {
457     return false;
458 }
459 
460 static void pegasos2_hypercall(PPCVirtualHypervisor *vhyp, PowerPCCPU *cpu)
461 {
462     Pegasos2MachineState *pm = PEGASOS2_MACHINE(vhyp);
463     CPUPPCState *env = &cpu->env;
464 
465     /* The TCG path should also be holding the BQL at this point */
466     g_assert(qemu_mutex_iothread_locked());
467 
468     if (FIELD_EX64(env->msr, MSR, PR)) {
469         qemu_log_mask(LOG_GUEST_ERROR, "Hypercall made with MSR[PR]=1\n");
470         env->gpr[3] = H_PRIVILEGE;
471     } else if (env->gpr[3] == KVMPPC_H_RTAS) {
472         env->gpr[3] = pegasos2_rtas(cpu, pm, env->gpr[4]);
473     } else if (env->gpr[3] == KVMPPC_H_VOF_CLIENT) {
474         int ret = vof_client_call(MACHINE(pm), pm->vof, pm->fdt_blob,
475                                   env->gpr[4]);
476         env->gpr[3] = (ret ? H_PARAMETER : H_SUCCESS);
477     } else {
478         qemu_log_mask(LOG_GUEST_ERROR, "Unsupported hypercall " TARGET_FMT_lx
479                       "\n", env->gpr[3]);
480         env->gpr[3] = -1;
481     }
482 }
483 
484 static void vhyp_nop(PPCVirtualHypervisor *vhyp, PowerPCCPU *cpu)
485 {
486 }
487 
488 static target_ulong vhyp_encode_hpt_for_kvm_pr(PPCVirtualHypervisor *vhyp)
489 {
490     return POWERPC_CPU(current_cpu)->env.spr[SPR_SDR1];
491 }
492 
493 static bool pegasos2_setprop(MachineState *ms, const char *path,
494                              const char *propname, void *val, int vallen)
495 {
496     return true;
497 }
498 
499 static void pegasos2_machine_class_init(ObjectClass *oc, void *data)
500 {
501     MachineClass *mc = MACHINE_CLASS(oc);
502     PPCVirtualHypervisorClass *vhc = PPC_VIRTUAL_HYPERVISOR_CLASS(oc);
503     VofMachineIfClass *vmc = VOF_MACHINE_CLASS(oc);
504 
505     mc->desc = "Genesi/bPlan Pegasos II";
506     mc->init = pegasos2_init;
507     mc->reset = pegasos2_machine_reset;
508     mc->block_default_type = IF_IDE;
509     mc->default_boot_order = "cd";
510     mc->default_display = "std";
511     mc->default_cpu_type = POWERPC_CPU_TYPE_NAME("7400_v2.9");
512     mc->default_ram_id = "pegasos2.ram";
513     mc->default_ram_size = 512 * MiB;
514 
515     vhc->cpu_in_nested = pegasos2_cpu_in_nested;
516     vhc->hypercall = pegasos2_hypercall;
517     vhc->cpu_exec_enter = vhyp_nop;
518     vhc->cpu_exec_exit = vhyp_nop;
519     vhc->encode_hpt_for_kvm_pr = vhyp_encode_hpt_for_kvm_pr;
520 
521     vmc->setprop = pegasos2_setprop;
522 }
523 
524 static const TypeInfo pegasos2_machine_info = {
525     .name          = TYPE_PEGASOS2_MACHINE,
526     .parent        = TYPE_MACHINE,
527     .class_init    = pegasos2_machine_class_init,
528     .instance_size = sizeof(Pegasos2MachineState),
529     .interfaces = (InterfaceInfo[]) {
530         { TYPE_PPC_VIRTUAL_HYPERVISOR },
531         { TYPE_VOF_MACHINE_IF },
532         { }
533     },
534 };
535 
536 static void pegasos2_machine_register_types(void)
537 {
538     type_register_static(&pegasos2_machine_info);
539 }
540 
541 type_init(pegasos2_machine_register_types)
542 
543 /* FDT creation for passing to firmware */
544 
545 typedef struct {
546     void *fdt;
547     const char *path;
548 } FDTInfo;
549 
550 /* We do everything in reverse order so it comes out right in the tree */
551 
552 static void dt_ide(PCIBus *bus, PCIDevice *d, FDTInfo *fi)
553 {
554     qemu_fdt_setprop_string(fi->fdt, fi->path, "device_type", "spi");
555 }
556 
557 static void dt_usb(PCIBus *bus, PCIDevice *d, FDTInfo *fi)
558 {
559     qemu_fdt_setprop_cell(fi->fdt, fi->path, "#size-cells", 0);
560     qemu_fdt_setprop_cell(fi->fdt, fi->path, "#address-cells", 1);
561     qemu_fdt_setprop_string(fi->fdt, fi->path, "device_type", "usb");
562 }
563 
564 static void dt_isa(PCIBus *bus, PCIDevice *d, FDTInfo *fi)
565 {
566     GString *name = g_string_sized_new(64);
567     uint32_t cells[3];
568 
569     qemu_fdt_setprop_cell(fi->fdt, fi->path, "#size-cells", 1);
570     qemu_fdt_setprop_cell(fi->fdt, fi->path, "#address-cells", 2);
571     qemu_fdt_setprop_string(fi->fdt, fi->path, "device_type", "isa");
572     qemu_fdt_setprop_string(fi->fdt, fi->path, "name", "isa");
573 
574     /* addional devices */
575     g_string_printf(name, "%s/lpt@i3bc", fi->path);
576     qemu_fdt_add_subnode(fi->fdt, name->str);
577     qemu_fdt_setprop_cell(fi->fdt, name->str, "clock-frequency", 0);
578     cells[0] = cpu_to_be32(7);
579     cells[1] = 0;
580     qemu_fdt_setprop(fi->fdt, name->str, "interrupts",
581                      cells, 2 * sizeof(cells[0]));
582     cells[0] = cpu_to_be32(1);
583     cells[1] = cpu_to_be32(0x3bc);
584     cells[2] = cpu_to_be32(8);
585     qemu_fdt_setprop(fi->fdt, name->str, "reg", cells, 3 * sizeof(cells[0]));
586     qemu_fdt_setprop_string(fi->fdt, name->str, "device_type", "lpt");
587     qemu_fdt_setprop_string(fi->fdt, name->str, "name", "lpt");
588 
589     g_string_printf(name, "%s/fdc@i3f0", fi->path);
590     qemu_fdt_add_subnode(fi->fdt, name->str);
591     qemu_fdt_setprop_cell(fi->fdt, name->str, "clock-frequency", 0);
592     cells[0] = cpu_to_be32(6);
593     cells[1] = 0;
594     qemu_fdt_setprop(fi->fdt, name->str, "interrupts",
595                      cells, 2 * sizeof(cells[0]));
596     cells[0] = cpu_to_be32(1);
597     cells[1] = cpu_to_be32(0x3f0);
598     cells[2] = cpu_to_be32(8);
599     qemu_fdt_setprop(fi->fdt, name->str, "reg", cells, 3 * sizeof(cells[0]));
600     qemu_fdt_setprop_string(fi->fdt, name->str, "device_type", "fdc");
601     qemu_fdt_setprop_string(fi->fdt, name->str, "name", "fdc");
602 
603     g_string_printf(name, "%s/timer@i40", fi->path);
604     qemu_fdt_add_subnode(fi->fdt, name->str);
605     qemu_fdt_setprop_cell(fi->fdt, name->str, "clock-frequency", 0);
606     cells[0] = cpu_to_be32(1);
607     cells[1] = cpu_to_be32(0x40);
608     cells[2] = cpu_to_be32(8);
609     qemu_fdt_setprop(fi->fdt, name->str, "reg", cells, 3 * sizeof(cells[0]));
610     qemu_fdt_setprop_string(fi->fdt, name->str, "device_type", "timer");
611     qemu_fdt_setprop_string(fi->fdt, name->str, "name", "timer");
612 
613     g_string_printf(name, "%s/rtc@i70", fi->path);
614     qemu_fdt_add_subnode(fi->fdt, name->str);
615     qemu_fdt_setprop_string(fi->fdt, name->str, "compatible", "ds1385-rtc");
616     qemu_fdt_setprop_cell(fi->fdt, name->str, "clock-frequency", 0);
617     cells[0] = cpu_to_be32(8);
618     cells[1] = 0;
619     qemu_fdt_setprop(fi->fdt, name->str, "interrupts",
620                      cells, 2 * sizeof(cells[0]));
621     cells[0] = cpu_to_be32(1);
622     cells[1] = cpu_to_be32(0x70);
623     cells[2] = cpu_to_be32(2);
624     qemu_fdt_setprop(fi->fdt, name->str, "reg", cells, 3 * sizeof(cells[0]));
625     qemu_fdt_setprop_string(fi->fdt, name->str, "device_type", "rtc");
626     qemu_fdt_setprop_string(fi->fdt, name->str, "name", "rtc");
627 
628     g_string_printf(name, "%s/keyboard@i60", fi->path);
629     qemu_fdt_add_subnode(fi->fdt, name->str);
630     cells[0] = cpu_to_be32(1);
631     cells[1] = 0;
632     qemu_fdt_setprop(fi->fdt, name->str, "interrupts",
633                      cells, 2 * sizeof(cells[0]));
634     cells[0] = cpu_to_be32(1);
635     cells[1] = cpu_to_be32(0x60);
636     cells[2] = cpu_to_be32(5);
637     qemu_fdt_setprop(fi->fdt, name->str, "reg", cells, 3 * sizeof(cells[0]));
638     qemu_fdt_setprop_string(fi->fdt, name->str, "device_type", "keyboard");
639     qemu_fdt_setprop_string(fi->fdt, name->str, "name", "keyboard");
640 
641     g_string_printf(name, "%s/8042@i60", fi->path);
642     qemu_fdt_add_subnode(fi->fdt, name->str);
643     qemu_fdt_setprop_cell(fi->fdt, name->str, "#interrupt-cells", 2);
644     qemu_fdt_setprop_cell(fi->fdt, name->str, "#size-cells", 0);
645     qemu_fdt_setprop_cell(fi->fdt, name->str, "#address-cells", 1);
646     qemu_fdt_setprop_string(fi->fdt, name->str, "interrupt-controller", "");
647     qemu_fdt_setprop_cell(fi->fdt, name->str, "clock-frequency", 0);
648     cells[0] = cpu_to_be32(1);
649     cells[1] = cpu_to_be32(0x60);
650     cells[2] = cpu_to_be32(5);
651     qemu_fdt_setprop(fi->fdt, name->str, "reg", cells, 3 * sizeof(cells[0]));
652     qemu_fdt_setprop_string(fi->fdt, name->str, "device_type", "");
653     qemu_fdt_setprop_string(fi->fdt, name->str, "name", "8042");
654 
655     g_string_printf(name, "%s/serial@i2f8", fi->path);
656     qemu_fdt_add_subnode(fi->fdt, name->str);
657     qemu_fdt_setprop_cell(fi->fdt, name->str, "clock-frequency", 0);
658     cells[0] = cpu_to_be32(3);
659     cells[1] = 0;
660     qemu_fdt_setprop(fi->fdt, name->str, "interrupts",
661                      cells, 2 * sizeof(cells[0]));
662     cells[0] = cpu_to_be32(1);
663     cells[1] = cpu_to_be32(0x2f8);
664     cells[2] = cpu_to_be32(8);
665     qemu_fdt_setprop(fi->fdt, name->str, "reg", cells, 3 * sizeof(cells[0]));
666     qemu_fdt_setprop_string(fi->fdt, name->str, "device_type", "serial");
667     qemu_fdt_setprop_string(fi->fdt, name->str, "name", "serial");
668 
669     g_string_free(name, TRUE);
670 }
671 
672 static struct {
673     const char *id;
674     const char *name;
675     void (*dtf)(PCIBus *bus, PCIDevice *d, FDTInfo *fi);
676 } device_map[] = {
677     { "pci11ab,6460", "host", NULL },
678     { "pci1106,8231", "isa", dt_isa },
679     { "pci1106,571", "ide", dt_ide },
680     { "pci1106,3044", "firewire", NULL },
681     { "pci1106,3038", "usb", dt_usb },
682     { "pci1106,8235", "other", NULL },
683     { "pci1106,3058", "sound", NULL },
684     { NULL, NULL }
685 };
686 
687 static void add_pci_device(PCIBus *bus, PCIDevice *d, void *opaque)
688 {
689     FDTInfo *fi = opaque;
690     GString *node = g_string_new(NULL);
691     uint32_t cells[(PCI_NUM_REGIONS + 1) * 5];
692     int i, j;
693     const char *name = NULL;
694     g_autofree const gchar *pn = g_strdup_printf("pci%x,%x",
695                                      pci_get_word(&d->config[PCI_VENDOR_ID]),
696                                      pci_get_word(&d->config[PCI_DEVICE_ID]));
697 
698     for (i = 0; device_map[i].id; i++) {
699         if (!strcmp(pn, device_map[i].id)) {
700             name = device_map[i].name;
701             break;
702         }
703     }
704     g_string_printf(node, "%s/%s@%x", fi->path, (name ?: pn),
705                     PCI_SLOT(d->devfn));
706     if (PCI_FUNC(d->devfn)) {
707         g_string_append_printf(node, ",%x", PCI_FUNC(d->devfn));
708     }
709 
710     qemu_fdt_add_subnode(fi->fdt, node->str);
711     if (device_map[i].dtf) {
712         FDTInfo cfi = { fi->fdt, node->str };
713         device_map[i].dtf(bus, d, &cfi);
714     }
715     cells[0] = cpu_to_be32(d->devfn << 8);
716     cells[1] = 0;
717     cells[2] = 0;
718     cells[3] = 0;
719     cells[4] = 0;
720     j = 5;
721     for (i = 0; i < PCI_NUM_REGIONS; i++) {
722         if (!d->io_regions[i].size) {
723             continue;
724         }
725         cells[j] = cpu_to_be32(d->devfn << 8 | (PCI_BASE_ADDRESS_0 + i * 4));
726         if (d->io_regions[i].type & PCI_BASE_ADDRESS_SPACE_IO) {
727             cells[j] |= cpu_to_be32(1 << 24);
728         } else {
729             cells[j] |= cpu_to_be32(2 << 24);
730             if (d->io_regions[i].type & PCI_BASE_ADDRESS_MEM_PREFETCH) {
731                 cells[j] |= cpu_to_be32(4 << 28);
732             }
733         }
734         cells[j + 1] = 0;
735         cells[j + 2] = 0;
736         cells[j + 3] = cpu_to_be32(d->io_regions[i].size >> 32);
737         cells[j + 4] = cpu_to_be32(d->io_regions[i].size);
738         j += 5;
739     }
740     qemu_fdt_setprop(fi->fdt, node->str, "reg", cells, j * sizeof(cells[0]));
741     qemu_fdt_setprop_string(fi->fdt, node->str, "name", name ?: pn);
742     if (pci_get_byte(&d->config[PCI_INTERRUPT_PIN])) {
743         qemu_fdt_setprop_cell(fi->fdt, node->str, "interrupts",
744                               pci_get_byte(&d->config[PCI_INTERRUPT_PIN]));
745     }
746     /* Pegasos2 firmware has subsystem-id amd subsystem-vendor-id swapped */
747     qemu_fdt_setprop_cell(fi->fdt, node->str, "subsystem-vendor-id",
748                           pci_get_word(&d->config[PCI_SUBSYSTEM_ID]));
749     qemu_fdt_setprop_cell(fi->fdt, node->str, "subsystem-id",
750                           pci_get_word(&d->config[PCI_SUBSYSTEM_VENDOR_ID]));
751     cells[0] = pci_get_long(&d->config[PCI_CLASS_REVISION]);
752     qemu_fdt_setprop_cell(fi->fdt, node->str, "class-code", cells[0] >> 8);
753     qemu_fdt_setprop_cell(fi->fdt, node->str, "revision-id", cells[0] & 0xff);
754     qemu_fdt_setprop_cell(fi->fdt, node->str, "device-id",
755                           pci_get_word(&d->config[PCI_DEVICE_ID]));
756     qemu_fdt_setprop_cell(fi->fdt, node->str, "vendor-id",
757                           pci_get_word(&d->config[PCI_VENDOR_ID]));
758 
759     g_string_free(node, TRUE);
760 }
761 
762 static void *build_fdt(MachineState *machine, int *fdt_size)
763 {
764     Pegasos2MachineState *pm = PEGASOS2_MACHINE(machine);
765     PowerPCCPU *cpu = pm->cpu;
766     PCIBus *pci_bus;
767     FDTInfo fi;
768     uint32_t cells[16];
769     void *fdt = create_device_tree(fdt_size);
770 
771     fi.fdt = fdt;
772 
773     /* root node */
774     qemu_fdt_setprop_string(fdt, "/", "CODEGEN,description",
775                             "Pegasos CHRP PowerPC System");
776     qemu_fdt_setprop_string(fdt, "/", "CODEGEN,board", "Pegasos2");
777     qemu_fdt_setprop_string(fdt, "/", "CODEGEN,vendor", "bplan GmbH");
778     qemu_fdt_setprop_string(fdt, "/", "revision", "2B");
779     qemu_fdt_setprop_string(fdt, "/", "model", "Pegasos2");
780     qemu_fdt_setprop_string(fdt, "/", "device_type", "chrp");
781     qemu_fdt_setprop_cell(fdt, "/", "#address-cells", 1);
782     qemu_fdt_setprop_string(fdt, "/", "name", "bplan,Pegasos2");
783 
784     /* pci@c0000000 */
785     qemu_fdt_add_subnode(fdt, "/pci@c0000000");
786     cells[0] = 0;
787     cells[1] = 0;
788     qemu_fdt_setprop(fdt, "/pci@c0000000", "bus-range",
789                      cells, 2 * sizeof(cells[0]));
790     qemu_fdt_setprop_cell(fdt, "/pci@c0000000", "pci-bridge-number", 1);
791     cells[0] = cpu_to_be32(PCI0_MEM_BASE);
792     cells[1] = cpu_to_be32(PCI0_MEM_SIZE);
793     qemu_fdt_setprop(fdt, "/pci@c0000000", "reg", cells, 2 * sizeof(cells[0]));
794     cells[0] = cpu_to_be32(0x01000000);
795     cells[1] = 0;
796     cells[2] = 0;
797     cells[3] = cpu_to_be32(PCI0_IO_BASE);
798     cells[4] = 0;
799     cells[5] = cpu_to_be32(PCI0_IO_SIZE);
800     cells[6] = cpu_to_be32(0x02000000);
801     cells[7] = 0;
802     cells[8] = cpu_to_be32(PCI0_MEM_BASE);
803     cells[9] = cpu_to_be32(PCI0_MEM_BASE);
804     cells[10] = 0;
805     cells[11] = cpu_to_be32(PCI0_MEM_SIZE);
806     qemu_fdt_setprop(fdt, "/pci@c0000000", "ranges",
807                      cells, 12 * sizeof(cells[0]));
808     qemu_fdt_setprop_cell(fdt, "/pci@c0000000", "#size-cells", 2);
809     qemu_fdt_setprop_cell(fdt, "/pci@c0000000", "#address-cells", 3);
810     qemu_fdt_setprop_string(fdt, "/pci@c0000000", "device_type", "pci");
811     qemu_fdt_setprop_string(fdt, "/pci@c0000000", "name", "pci");
812 
813     fi.path = "/pci@c0000000";
814     pci_bus = mv64361_get_pci_bus(pm->mv, 0);
815     pci_for_each_device_reverse(pci_bus, 0, add_pci_device, &fi);
816 
817     /* pci@80000000 */
818     qemu_fdt_add_subnode(fdt, "/pci@80000000");
819     cells[0] = 0;
820     cells[1] = 0;
821     qemu_fdt_setprop(fdt, "/pci@80000000", "bus-range",
822                      cells, 2 * sizeof(cells[0]));
823     qemu_fdt_setprop_cell(fdt, "/pci@80000000", "pci-bridge-number", 0);
824     cells[0] = cpu_to_be32(PCI1_MEM_BASE);
825     cells[1] = cpu_to_be32(PCI1_MEM_SIZE);
826     qemu_fdt_setprop(fdt, "/pci@80000000", "reg", cells, 2 * sizeof(cells[0]));
827     qemu_fdt_setprop_cell(fdt, "/pci@80000000", "8259-interrupt-acknowledge",
828                           0xf1000cb4);
829     cells[0] = cpu_to_be32(0x01000000);
830     cells[1] = 0;
831     cells[2] = 0;
832     cells[3] = cpu_to_be32(PCI1_IO_BASE);
833     cells[4] = 0;
834     cells[5] = cpu_to_be32(PCI1_IO_SIZE);
835     cells[6] = cpu_to_be32(0x02000000);
836     cells[7] = 0;
837     cells[8] = cpu_to_be32(PCI1_MEM_BASE);
838     cells[9] = cpu_to_be32(PCI1_MEM_BASE);
839     cells[10] = 0;
840     cells[11] = cpu_to_be32(PCI1_MEM_SIZE);
841     qemu_fdt_setprop(fdt, "/pci@80000000", "ranges",
842                      cells, 12 * sizeof(cells[0]));
843     qemu_fdt_setprop_cell(fdt, "/pci@80000000", "#size-cells", 2);
844     qemu_fdt_setprop_cell(fdt, "/pci@80000000", "#address-cells", 3);
845     qemu_fdt_setprop_string(fdt, "/pci@80000000", "device_type", "pci");
846     qemu_fdt_setprop_string(fdt, "/pci@80000000", "name", "pci");
847 
848     fi.path = "/pci@80000000";
849     pci_bus = mv64361_get_pci_bus(pm->mv, 1);
850     pci_for_each_device_reverse(pci_bus, 0, add_pci_device, &fi);
851 
852     qemu_fdt_add_subnode(fdt, "/failsafe");
853     qemu_fdt_setprop_string(fdt, "/failsafe", "device_type", "serial");
854     qemu_fdt_setprop_string(fdt, "/failsafe", "name", "failsafe");
855 
856     qemu_fdt_add_subnode(fdt, "/rtas");
857     qemu_fdt_setprop_cell(fdt, "/rtas", "system-reboot", RTAS_SYSTEM_REBOOT);
858     qemu_fdt_setprop_cell(fdt, "/rtas", "hibernate", RTAS_HIBERNATE);
859     qemu_fdt_setprop_cell(fdt, "/rtas", "suspend", RTAS_SUSPEND);
860     qemu_fdt_setprop_cell(fdt, "/rtas", "power-off", RTAS_POWER_OFF);
861     qemu_fdt_setprop_cell(fdt, "/rtas", "set-indicator", RTAS_SET_INDICATOR);
862     qemu_fdt_setprop_cell(fdt, "/rtas", "display-character",
863                           RTAS_DISPLAY_CHARACTER);
864     qemu_fdt_setprop_cell(fdt, "/rtas", "write-pci-config",
865                           RTAS_WRITE_PCI_CONFIG);
866     qemu_fdt_setprop_cell(fdt, "/rtas", "read-pci-config",
867                           RTAS_READ_PCI_CONFIG);
868     /* Pegasos2 firmware misspells check-exception and guests use that */
869     qemu_fdt_setprop_cell(fdt, "/rtas", "check-execption",
870                           RTAS_CHECK_EXCEPTION);
871     qemu_fdt_setprop_cell(fdt, "/rtas", "event-scan", RTAS_EVENT_SCAN);
872     qemu_fdt_setprop_cell(fdt, "/rtas", "set-time-of-day",
873                           RTAS_SET_TIME_OF_DAY);
874     qemu_fdt_setprop_cell(fdt, "/rtas", "get-time-of-day",
875                           RTAS_GET_TIME_OF_DAY);
876     qemu_fdt_setprop_cell(fdt, "/rtas", "nvram-store", RTAS_NVRAM_STORE);
877     qemu_fdt_setprop_cell(fdt, "/rtas", "nvram-fetch", RTAS_NVRAM_FETCH);
878     qemu_fdt_setprop_cell(fdt, "/rtas", "restart-rtas", RTAS_RESTART_RTAS);
879     qemu_fdt_setprop_cell(fdt, "/rtas", "rtas-error-log-max", 0);
880     qemu_fdt_setprop_cell(fdt, "/rtas", "rtas-event-scan-rate", 0);
881     qemu_fdt_setprop_cell(fdt, "/rtas", "rtas-display-device", 0);
882     qemu_fdt_setprop_cell(fdt, "/rtas", "rtas-size", 20);
883     qemu_fdt_setprop_cell(fdt, "/rtas", "rtas-version", 1);
884 
885     /* cpus */
886     qemu_fdt_add_subnode(fdt, "/cpus");
887     qemu_fdt_setprop_cell(fdt, "/cpus", "#cpus", 1);
888     qemu_fdt_setprop_cell(fdt, "/cpus", "#address-cells", 1);
889     qemu_fdt_setprop_cell(fdt, "/cpus", "#size-cells", 0);
890     qemu_fdt_setprop_string(fdt, "/cpus", "name", "cpus");
891 
892     /* FIXME Get CPU name from CPU object */
893     const char *cp = "/cpus/PowerPC,G4";
894     qemu_fdt_add_subnode(fdt, cp);
895     qemu_fdt_setprop_cell(fdt, cp, "l2cr", 0);
896     qemu_fdt_setprop_cell(fdt, cp, "d-cache-size", 0x8000);
897     qemu_fdt_setprop_cell(fdt, cp, "d-cache-block-size",
898                           cpu->env.dcache_line_size);
899     qemu_fdt_setprop_cell(fdt, cp, "d-cache-line-size",
900                           cpu->env.dcache_line_size);
901     qemu_fdt_setprop_cell(fdt, cp, "i-cache-size", 0x8000);
902     qemu_fdt_setprop_cell(fdt, cp, "i-cache-block-size",
903                           cpu->env.icache_line_size);
904     qemu_fdt_setprop_cell(fdt, cp, "i-cache-line-size",
905                           cpu->env.icache_line_size);
906     if (cpu->env.id_tlbs) {
907         qemu_fdt_setprop_cell(fdt, cp, "i-tlb-sets", cpu->env.nb_ways);
908         qemu_fdt_setprop_cell(fdt, cp, "i-tlb-size", cpu->env.tlb_per_way);
909         qemu_fdt_setprop_cell(fdt, cp, "d-tlb-sets", cpu->env.nb_ways);
910         qemu_fdt_setprop_cell(fdt, cp, "d-tlb-size", cpu->env.tlb_per_way);
911         qemu_fdt_setprop_string(fdt, cp, "tlb-split", "");
912     }
913     qemu_fdt_setprop_cell(fdt, cp, "tlb-sets", cpu->env.nb_ways);
914     qemu_fdt_setprop_cell(fdt, cp, "tlb-size", cpu->env.nb_tlb);
915     qemu_fdt_setprop_string(fdt, cp, "state", "running");
916     if (cpu->env.insns_flags & PPC_ALTIVEC) {
917         qemu_fdt_setprop_string(fdt, cp, "altivec", "");
918         qemu_fdt_setprop_string(fdt, cp, "data-streams", "");
919     }
920     /*
921      * FIXME What flags do data-streams, external-control and
922      * performance-monitor depend on?
923      */
924     qemu_fdt_setprop_string(fdt, cp, "external-control", "");
925     if (cpu->env.insns_flags & PPC_FLOAT_FSQRT) {
926         qemu_fdt_setprop_string(fdt, cp, "general-purpose", "");
927     }
928     qemu_fdt_setprop_string(fdt, cp, "performance-monitor", "");
929     if (cpu->env.insns_flags & PPC_FLOAT_FRES) {
930         qemu_fdt_setprop_string(fdt, cp, "graphics", "");
931     }
932     qemu_fdt_setprop_cell(fdt, cp, "reservation-granule-size", 4);
933     qemu_fdt_setprop_cell(fdt, cp, "timebase-frequency",
934                           cpu->env.tb_env->tb_freq);
935     qemu_fdt_setprop_cell(fdt, cp, "bus-frequency", BUS_FREQ_HZ);
936     qemu_fdt_setprop_cell(fdt, cp, "clock-frequency", BUS_FREQ_HZ * 7.5);
937     qemu_fdt_setprop_cell(fdt, cp, "cpu-version", cpu->env.spr[SPR_PVR]);
938     cells[0] = 0;
939     cells[1] = 0;
940     qemu_fdt_setprop(fdt, cp, "reg", cells, 2 * sizeof(cells[0]));
941     qemu_fdt_setprop_string(fdt, cp, "device_type", "cpu");
942     qemu_fdt_setprop_string(fdt, cp, "name", strrchr(cp, '/') + 1);
943 
944     /* memory */
945     qemu_fdt_add_subnode(fdt, "/memory@0");
946     cells[0] = 0;
947     cells[1] = cpu_to_be32(machine->ram_size);
948     qemu_fdt_setprop(fdt, "/memory@0", "reg", cells, 2 * sizeof(cells[0]));
949     qemu_fdt_setprop_string(fdt, "/memory@0", "device_type", "memory");
950     qemu_fdt_setprop_string(fdt, "/memory@0", "name", "memory");
951 
952     qemu_fdt_add_subnode(fdt, "/chosen");
953     qemu_fdt_setprop_string(fdt, "/chosen", "bootargs",
954                             machine->kernel_cmdline ?: "");
955     qemu_fdt_setprop_string(fdt, "/chosen", "name", "chosen");
956 
957     qemu_fdt_add_subnode(fdt, "/openprom");
958     qemu_fdt_setprop_string(fdt, "/openprom", "model", "Pegasos2,1.1");
959 
960     return fdt;
961 }
962