1 /* 2 * QEMU PowerNV, BMC related functions 3 * 4 * Copyright (c) 2016-2017, IBM Corporation. 5 * 6 * This program is free software; you can redistribute it and/or modify 7 * it under the terms of the GNU General Public License, version 2, as 8 * published by the Free Software Foundation. 9 * 10 * This program is distributed in the hope that it will be useful, 11 * but WITHOUT ANY WARRANTY; without even the implied warranty of 12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 13 * GNU General Public License for more details. 14 * 15 * You should have received a copy of the GNU General Public License 16 * along with this program; if not, see <http://www.gnu.org/licenses/>. 17 */ 18 19 #include "qemu/osdep.h" 20 #include "qemu-common.h" 21 #include "qapi/error.h" 22 #include "target/ppc/cpu.h" 23 #include "qemu/log.h" 24 #include "hw/ipmi/ipmi.h" 25 #include "hw/ppc/fdt.h" 26 27 #include "hw/ppc/pnv.h" 28 29 #include <libfdt.h> 30 31 /* TODO: include definition in ipmi.h */ 32 #define IPMI_SDR_FULL_TYPE 1 33 34 /* 35 * OEM SEL Event data packet sent by BMC in response of a Read Event 36 * Message Buffer command 37 */ 38 typedef struct OemSel { 39 /* SEL header */ 40 uint8_t id[2]; 41 uint8_t type; 42 uint8_t timestamp[4]; 43 uint8_t manuf_id[3]; 44 45 /* OEM SEL data (6 bytes) follows */ 46 uint8_t netfun; 47 uint8_t cmd; 48 uint8_t data[4]; 49 } OemSel; 50 51 #define SOFT_OFF 0x00 52 #define SOFT_REBOOT 0x01 53 54 static void pnv_gen_oem_sel(IPMIBmc *bmc, uint8_t reboot) 55 { 56 /* IPMI SEL Event are 16 bytes long */ 57 OemSel sel = { 58 .id = { 0x55 , 0x55 }, 59 .type = 0xC0, /* OEM */ 60 .manuf_id = { 0x0, 0x0, 0x0 }, 61 .timestamp = { 0x0, 0x0, 0x0, 0x0 }, 62 .netfun = 0x3A, /* IBM */ 63 .cmd = 0x04, /* AMI OEM SEL Power Notification */ 64 .data = { reboot, 0xFF, 0xFF, 0xFF }, 65 }; 66 67 ipmi_bmc_gen_event(bmc, (uint8_t *) &sel, 0 /* do not log the event */); 68 } 69 70 void pnv_bmc_powerdown(IPMIBmc *bmc) 71 { 72 pnv_gen_oem_sel(bmc, SOFT_OFF); 73 } 74 75 void pnv_dt_bmc_sensors(IPMIBmc *bmc, void *fdt) 76 { 77 int offset; 78 int i; 79 const struct ipmi_sdr_compact *sdr; 80 uint16_t nextrec; 81 82 offset = fdt_add_subnode(fdt, 0, "bmc"); 83 _FDT(offset); 84 85 _FDT((fdt_setprop_string(fdt, offset, "name", "bmc"))); 86 offset = fdt_add_subnode(fdt, offset, "sensors"); 87 _FDT(offset); 88 89 _FDT((fdt_setprop_cell(fdt, offset, "#address-cells", 0x1))); 90 _FDT((fdt_setprop_cell(fdt, offset, "#size-cells", 0x0))); 91 92 for (i = 0; !ipmi_bmc_sdr_find(bmc, i, &sdr, &nextrec); i++) { 93 int off; 94 char *name; 95 96 if (sdr->header.rec_type != IPMI_SDR_COMPACT_TYPE && 97 sdr->header.rec_type != IPMI_SDR_FULL_TYPE) { 98 continue; 99 } 100 101 name = g_strdup_printf("sensor@%x", sdr->sensor_owner_number); 102 off = fdt_add_subnode(fdt, offset, name); 103 _FDT(off); 104 g_free(name); 105 106 _FDT((fdt_setprop_cell(fdt, off, "reg", sdr->sensor_owner_number))); 107 _FDT((fdt_setprop_string(fdt, off, "name", "sensor"))); 108 _FDT((fdt_setprop_string(fdt, off, "compatible", "ibm,ipmi-sensor"))); 109 _FDT((fdt_setprop_cell(fdt, off, "ipmi-sensor-reading-type", 110 sdr->reading_type))); 111 _FDT((fdt_setprop_cell(fdt, off, "ipmi-entity-id", 112 sdr->entity_id))); 113 _FDT((fdt_setprop_cell(fdt, off, "ipmi-entity-instance", 114 sdr->entity_instance))); 115 _FDT((fdt_setprop_cell(fdt, off, "ipmi-sensor-type", 116 sdr->sensor_type))); 117 } 118 } 119 120 /* 121 * HIOMAP protocol handler 122 */ 123 #define HIOMAP_C_RESET 1 124 #define HIOMAP_C_GET_INFO 2 125 #define HIOMAP_C_GET_FLASH_INFO 3 126 #define HIOMAP_C_CREATE_READ_WINDOW 4 127 #define HIOMAP_C_CLOSE_WINDOW 5 128 #define HIOMAP_C_CREATE_WRITE_WINDOW 6 129 #define HIOMAP_C_MARK_DIRTY 7 130 #define HIOMAP_C_FLUSH 8 131 #define HIOMAP_C_ACK 9 132 #define HIOMAP_C_ERASE 10 133 #define HIOMAP_C_DEVICE_NAME 11 134 #define HIOMAP_C_LOCK 12 135 136 #define BLOCK_SHIFT 12 /* 4K */ 137 138 static uint16_t bytes_to_blocks(uint32_t bytes) 139 { 140 return bytes >> BLOCK_SHIFT; 141 } 142 143 static uint32_t blocks_to_bytes(uint16_t blocks) 144 { 145 return blocks << BLOCK_SHIFT; 146 } 147 148 static int hiomap_erase(PnvPnor *pnor, uint32_t offset, uint32_t size) 149 { 150 MemTxResult result; 151 int i; 152 153 for (i = 0; i < size / 4; i++) { 154 result = memory_region_dispatch_write(&pnor->mmio, offset + i * 4, 155 0xFFFFFFFF, MO_32, 156 MEMTXATTRS_UNSPECIFIED); 157 if (result != MEMTX_OK) { 158 return -1; 159 } 160 } 161 return 0; 162 } 163 164 static void hiomap_cmd(IPMIBmcSim *ibs, uint8_t *cmd, unsigned int cmd_len, 165 RspBuffer *rsp) 166 { 167 PnvPnor *pnor = PNV_PNOR(object_property_get_link(OBJECT(ibs), "pnor", 168 &error_abort)); 169 uint32_t pnor_size = pnor->size; 170 uint32_t pnor_addr = PNOR_SPI_OFFSET; 171 bool readonly = false; 172 173 rsp_buffer_push(rsp, cmd[2]); 174 rsp_buffer_push(rsp, cmd[3]); 175 176 switch (cmd[2]) { 177 case HIOMAP_C_MARK_DIRTY: 178 case HIOMAP_C_FLUSH: 179 case HIOMAP_C_ACK: 180 break; 181 182 case HIOMAP_C_ERASE: 183 if (hiomap_erase(pnor, blocks_to_bytes(cmd[5] << 8 | cmd[4]), 184 blocks_to_bytes(cmd[7] << 8 | cmd[6]))) { 185 rsp_buffer_set_error(rsp, IPMI_CC_UNSPECIFIED); 186 } 187 break; 188 189 case HIOMAP_C_GET_INFO: 190 rsp_buffer_push(rsp, 2); /* Version 2 */ 191 rsp_buffer_push(rsp, BLOCK_SHIFT); /* block size */ 192 rsp_buffer_push(rsp, 0); /* Timeout */ 193 rsp_buffer_push(rsp, 0); /* Timeout */ 194 break; 195 196 case HIOMAP_C_GET_FLASH_INFO: 197 rsp_buffer_push(rsp, bytes_to_blocks(pnor_size) & 0xFF); 198 rsp_buffer_push(rsp, bytes_to_blocks(pnor_size) >> 8); 199 rsp_buffer_push(rsp, 0x01); /* erase size */ 200 rsp_buffer_push(rsp, 0x00); /* erase size */ 201 break; 202 203 case HIOMAP_C_CREATE_READ_WINDOW: 204 readonly = true; 205 /* Fall through */ 206 207 case HIOMAP_C_CREATE_WRITE_WINDOW: 208 memory_region_set_readonly(&pnor->mmio, readonly); 209 memory_region_set_enabled(&pnor->mmio, true); 210 211 rsp_buffer_push(rsp, bytes_to_blocks(pnor_addr) & 0xFF); 212 rsp_buffer_push(rsp, bytes_to_blocks(pnor_addr) >> 8); 213 rsp_buffer_push(rsp, bytes_to_blocks(pnor_size) & 0xFF); 214 rsp_buffer_push(rsp, bytes_to_blocks(pnor_size) >> 8); 215 rsp_buffer_push(rsp, 0x00); /* offset */ 216 rsp_buffer_push(rsp, 0x00); /* offset */ 217 break; 218 219 case HIOMAP_C_CLOSE_WINDOW: 220 memory_region_set_enabled(&pnor->mmio, false); 221 break; 222 223 case HIOMAP_C_DEVICE_NAME: 224 case HIOMAP_C_RESET: 225 case HIOMAP_C_LOCK: 226 default: 227 qemu_log_mask(LOG_GUEST_ERROR, "HIOMAP: unknow command %02X\n", cmd[2]); 228 break; 229 } 230 } 231 232 #define HIOMAP 0x5a 233 234 static const IPMICmdHandler hiomap_cmds[] = { 235 [HIOMAP] = { hiomap_cmd, 3 }, 236 }; 237 238 static const IPMINetfn hiomap_netfn = { 239 .cmd_nums = ARRAY_SIZE(hiomap_cmds), 240 .cmd_handlers = hiomap_cmds 241 }; 242 243 244 void pnv_bmc_set_pnor(IPMIBmc *bmc, PnvPnor *pnor) 245 { 246 object_ref(OBJECT(pnor)); 247 object_property_add_const_link(OBJECT(bmc), "pnor", OBJECT(pnor)); 248 249 /* Install the HIOMAP protocol handlers to access the PNOR */ 250 ipmi_sim_register_netfn(IPMI_BMC_SIMULATOR(bmc), IPMI_NETFN_OEM, 251 &hiomap_netfn); 252 } 253 254 /* 255 * Instantiate the machine BMC. PowerNV uses the QEMU internal 256 * simulator but it could also be external. 257 */ 258 IPMIBmc *pnv_bmc_create(PnvPnor *pnor) 259 { 260 Object *obj; 261 262 obj = object_new(TYPE_IPMI_BMC_SIMULATOR); 263 object_ref(OBJECT(pnor)); 264 object_property_add_const_link(obj, "pnor", OBJECT(pnor)); 265 qdev_realize(DEVICE(obj), NULL, &error_fatal); 266 267 /* Install the HIOMAP protocol handlers to access the PNOR */ 268 ipmi_sim_register_netfn(IPMI_BMC_SIMULATOR(obj), IPMI_NETFN_OEM, 269 &hiomap_netfn); 270 271 return IPMI_BMC(obj); 272 } 273 274 typedef struct ForeachArgs { 275 const char *name; 276 Object *obj; 277 } ForeachArgs; 278 279 static int bmc_find(Object *child, void *opaque) 280 { 281 ForeachArgs *args = opaque; 282 283 if (object_dynamic_cast(child, args->name)) { 284 if (args->obj) { 285 return 1; 286 } 287 args->obj = child; 288 } 289 return 0; 290 } 291 292 IPMIBmc *pnv_bmc_find(Error **errp) 293 { 294 ForeachArgs args = { TYPE_IPMI_BMC_SIMULATOR, NULL }; 295 int ret; 296 297 ret = object_child_foreach_recursive(object_get_root(), bmc_find, &args); 298 if (ret) { 299 error_setg(errp, "machine should have only one BMC device. " 300 "Use '-nodefaults'"); 301 return NULL; 302 } 303 304 return args.obj ? IPMI_BMC(args.obj) : NULL; 305 } 306