xref: /openbmc/qemu/hw/s390x/ipl.c (revision b15c0f7d)
1 /*
2  * bootloader support
3  *
4  * Copyright IBM, Corp. 2012
5  *
6  * Authors:
7  *  Christian Borntraeger <borntraeger@de.ibm.com>
8  *
9  * This work is licensed under the terms of the GNU GPL, version 2 or (at your
10  * option) any later version.  See the COPYING file in the top-level directory.
11  *
12  */
13 
14 #include "qemu/osdep.h"
15 #include "qapi/error.h"
16 #include "sysemu/sysemu.h"
17 #include "cpu.h"
18 #include "elf.h"
19 #include "hw/loader.h"
20 #include "hw/boards.h"
21 #include "hw/s390x/virtio-ccw.h"
22 #include "hw/s390x/vfio-ccw.h"
23 #include "hw/s390x/css.h"
24 #include "hw/s390x/ebcdic.h"
25 #include "ipl.h"
26 #include "qemu/error-report.h"
27 #include "qemu/config-file.h"
28 #include "qemu/cutils.h"
29 #include "qemu/option.h"
30 #include "exec/exec-all.h"
31 
32 #define KERN_IMAGE_START                0x010000UL
33 #define LINUX_MAGIC_ADDR                0x010008UL
34 #define KERN_PARM_AREA                  0x010480UL
35 #define INITRD_START                    0x800000UL
36 #define INITRD_PARM_START               0x010408UL
37 #define PARMFILE_START                  0x001000UL
38 #define ZIPL_IMAGE_START                0x009000UL
39 #define IPL_PSW_MASK                    (PSW_MASK_32 | PSW_MASK_64)
40 
41 static bool iplb_extended_needed(void *opaque)
42 {
43     S390IPLState *ipl = S390_IPL(object_resolve_path(TYPE_S390_IPL, NULL));
44 
45     return ipl->iplbext_migration;
46 }
47 
48 static const VMStateDescription vmstate_iplb_extended = {
49     .name = "ipl/iplb_extended",
50     .version_id = 0,
51     .minimum_version_id = 0,
52     .needed = iplb_extended_needed,
53     .fields = (VMStateField[]) {
54         VMSTATE_UINT8_ARRAY(reserved_ext, IplParameterBlock, 4096 - 200),
55         VMSTATE_END_OF_LIST()
56     }
57 };
58 
59 static const VMStateDescription vmstate_iplb = {
60     .name = "ipl/iplb",
61     .version_id = 0,
62     .minimum_version_id = 0,
63     .fields = (VMStateField[]) {
64         VMSTATE_UINT8_ARRAY(reserved1, IplParameterBlock, 110),
65         VMSTATE_UINT16(devno, IplParameterBlock),
66         VMSTATE_UINT8_ARRAY(reserved2, IplParameterBlock, 88),
67         VMSTATE_END_OF_LIST()
68     },
69     .subsections = (const VMStateDescription*[]) {
70         &vmstate_iplb_extended,
71         NULL
72     }
73 };
74 
75 static const VMStateDescription vmstate_ipl = {
76     .name = "ipl",
77     .version_id = 0,
78     .minimum_version_id = 0,
79     .fields = (VMStateField[]) {
80         VMSTATE_UINT64(compat_start_addr, S390IPLState),
81         VMSTATE_UINT64(compat_bios_start_addr, S390IPLState),
82         VMSTATE_STRUCT(iplb, S390IPLState, 0, vmstate_iplb, IplParameterBlock),
83         VMSTATE_BOOL(iplb_valid, S390IPLState),
84         VMSTATE_UINT8(cssid, S390IPLState),
85         VMSTATE_UINT8(ssid, S390IPLState),
86         VMSTATE_UINT16(devno, S390IPLState),
87         VMSTATE_END_OF_LIST()
88      }
89 };
90 
91 static S390IPLState *get_ipl_device(void)
92 {
93     return S390_IPL(object_resolve_path_type("", TYPE_S390_IPL, NULL));
94 }
95 
96 static uint64_t bios_translate_addr(void *opaque, uint64_t srcaddr)
97 {
98     uint64_t dstaddr = *(uint64_t *) opaque;
99     /*
100      * Assuming that our s390-ccw.img was linked for starting at address 0,
101      * we can simply add the destination address for the final location
102      */
103     return srcaddr + dstaddr;
104 }
105 
106 static void s390_ipl_realize(DeviceState *dev, Error **errp)
107 {
108     S390IPLState *ipl = S390_IPL(dev);
109     uint32_t *ipl_psw;
110     uint64_t pentry;
111     char *magic;
112     int kernel_size;
113     Error *err = NULL;
114 
115     int bios_size;
116     char *bios_filename;
117 
118     /*
119      * Always load the bios if it was enforced,
120      * even if an external kernel has been defined.
121      */
122     if (!ipl->kernel || ipl->enforce_bios) {
123         uint64_t fwbase = (MIN(ram_size, 0x80000000U) - 0x200000) & ~0xffffUL;
124 
125         if (bios_name == NULL) {
126             bios_name = ipl->firmware;
127         }
128 
129         bios_filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, bios_name);
130         if (bios_filename == NULL) {
131             error_setg(&err, "could not find stage1 bootloader");
132             goto error;
133         }
134 
135         bios_size = load_elf(bios_filename, NULL,
136                              bios_translate_addr, &fwbase,
137                              &ipl->bios_start_addr, NULL, NULL, 1,
138                              EM_S390, 0, 0);
139         if (bios_size > 0) {
140             /* Adjust ELF start address to final location */
141             ipl->bios_start_addr += fwbase;
142         } else {
143             /* Try to load non-ELF file */
144             bios_size = load_image_targphys(bios_filename, ZIPL_IMAGE_START,
145                                             4096);
146             ipl->bios_start_addr = ZIPL_IMAGE_START;
147         }
148         g_free(bios_filename);
149 
150         if (bios_size == -1) {
151             error_setg(&err, "could not load bootloader '%s'", bios_name);
152             goto error;
153         }
154 
155         /* default boot target is the bios */
156         ipl->start_addr = ipl->bios_start_addr;
157     }
158 
159     if (ipl->kernel) {
160         kernel_size = load_elf(ipl->kernel, NULL, NULL, NULL,
161                                &pentry, NULL,
162                                NULL, 1, EM_S390, 0, 0);
163         if (kernel_size < 0) {
164             kernel_size = load_image_targphys(ipl->kernel, 0, ram_size);
165             if (kernel_size < 0) {
166                 error_setg(&err, "could not load kernel '%s'", ipl->kernel);
167                 goto error;
168             }
169             /* if this is Linux use KERN_IMAGE_START */
170             magic = rom_ptr(LINUX_MAGIC_ADDR, 6);
171             if (magic && !memcmp(magic, "S390EP", 6)) {
172                 pentry = KERN_IMAGE_START;
173             } else {
174                 /* if not Linux load the address of the (short) IPL PSW */
175                 ipl_psw = rom_ptr(4, 4);
176                 if (ipl_psw) {
177                     pentry = be32_to_cpu(*ipl_psw) & 0x7fffffffUL;
178                 } else {
179                     error_setg(&err, "Could not get IPL PSW");
180                     goto error;
181                 }
182             }
183         }
184         /*
185          * Is it a Linux kernel (starting at 0x10000)? If yes, we fill in the
186          * kernel parameters here as well. Note: For old kernels (up to 3.2)
187          * we can not rely on the ELF entry point - it was 0x800 (the SALIPL
188          * loader) and it won't work. For this case we force it to 0x10000, too.
189          */
190         if (pentry == KERN_IMAGE_START || pentry == 0x800) {
191             char *parm_area = rom_ptr(KERN_PARM_AREA, strlen(ipl->cmdline) + 1);
192             ipl->start_addr = KERN_IMAGE_START;
193             /* Overwrite parameters in the kernel image, which are "rom" */
194             if (parm_area) {
195                 strcpy(parm_area, ipl->cmdline);
196             }
197         } else {
198             ipl->start_addr = pentry;
199         }
200 
201         if (ipl->initrd) {
202             ram_addr_t initrd_offset;
203             int initrd_size;
204             uint64_t *romptr;
205 
206             initrd_offset = INITRD_START;
207             while (kernel_size + 0x100000 > initrd_offset) {
208                 initrd_offset += 0x100000;
209             }
210             initrd_size = load_image_targphys(ipl->initrd, initrd_offset,
211                                               ram_size - initrd_offset);
212             if (initrd_size == -1) {
213                 error_setg(&err, "could not load initrd '%s'", ipl->initrd);
214                 goto error;
215             }
216 
217             /*
218              * we have to overwrite values in the kernel image,
219              * which are "rom"
220              */
221             romptr = rom_ptr(INITRD_PARM_START, 16);
222             if (romptr) {
223                 stq_p(romptr, initrd_offset);
224                 stq_p(romptr + 1, initrd_size);
225             }
226         }
227     }
228     /*
229      * Don't ever use the migrated values, they could come from a different
230      * BIOS and therefore don't work. But still migrate the values, so
231      * QEMUs relying on it don't break.
232      */
233     ipl->compat_start_addr = ipl->start_addr;
234     ipl->compat_bios_start_addr = ipl->bios_start_addr;
235     qemu_register_reset(qdev_reset_all_fn, dev);
236 error:
237     error_propagate(errp, err);
238 }
239 
240 static Property s390_ipl_properties[] = {
241     DEFINE_PROP_STRING("kernel", S390IPLState, kernel),
242     DEFINE_PROP_STRING("initrd", S390IPLState, initrd),
243     DEFINE_PROP_STRING("cmdline", S390IPLState, cmdline),
244     DEFINE_PROP_STRING("firmware", S390IPLState, firmware),
245     DEFINE_PROP_STRING("netboot_fw", S390IPLState, netboot_fw),
246     DEFINE_PROP_BOOL("enforce_bios", S390IPLState, enforce_bios, false),
247     DEFINE_PROP_BOOL("iplbext_migration", S390IPLState, iplbext_migration,
248                      true),
249     DEFINE_PROP_END_OF_LIST(),
250 };
251 
252 static void s390_ipl_set_boot_menu(S390IPLState *ipl)
253 {
254     QemuOptsList *plist = qemu_find_opts("boot-opts");
255     QemuOpts *opts = QTAILQ_FIRST(&plist->head);
256     const char *tmp;
257     unsigned long splash_time = 0;
258 
259     if (!get_boot_device(0)) {
260         if (boot_menu) {
261             error_report("boot menu requires a bootindex to be specified for "
262                          "the IPL device");
263         }
264         return;
265     }
266 
267     switch (ipl->iplb.pbt) {
268     case S390_IPL_TYPE_CCW:
269         /* In the absence of -boot menu, use zipl parameters */
270         if (!qemu_opt_get(opts, "menu")) {
271             ipl->qipl.qipl_flags |= QIPL_FLAG_BM_OPTS_ZIPL;
272             return;
273         }
274         break;
275     case S390_IPL_TYPE_QEMU_SCSI:
276         break;
277     default:
278         if (boot_menu) {
279             error_report("boot menu is not supported for this device type");
280         }
281         return;
282     }
283 
284     if (!boot_menu) {
285         return;
286     }
287 
288     ipl->qipl.qipl_flags |= QIPL_FLAG_BM_OPTS_CMD;
289 
290     tmp = qemu_opt_get(opts, "splash-time");
291 
292     if (tmp && qemu_strtoul(tmp, NULL, 10, &splash_time)) {
293         error_report("splash-time is invalid, forcing it to 0");
294         ipl->qipl.boot_menu_timeout = 0;
295         return;
296     }
297 
298     if (splash_time > 0xffffffff) {
299         error_report("splash-time is too large, forcing it to max value");
300         ipl->qipl.boot_menu_timeout = 0xffffffff;
301         return;
302     }
303 
304     ipl->qipl.boot_menu_timeout = cpu_to_be32(splash_time);
305 }
306 
307 #define CCW_DEVTYPE_NONE        0x00
308 #define CCW_DEVTYPE_VIRTIO      0x01
309 #define CCW_DEVTYPE_VIRTIO_NET  0x02
310 #define CCW_DEVTYPE_SCSI        0x03
311 #define CCW_DEVTYPE_VFIO        0x04
312 
313 static CcwDevice *s390_get_ccw_device(DeviceState *dev_st, int *devtype)
314 {
315     CcwDevice *ccw_dev = NULL;
316     int tmp_dt = CCW_DEVTYPE_NONE;
317 
318     if (dev_st) {
319         VirtIONet *virtio_net_dev = (VirtIONet *)
320             object_dynamic_cast(OBJECT(dev_st), TYPE_VIRTIO_NET);
321         VirtioCcwDevice *virtio_ccw_dev = (VirtioCcwDevice *)
322             object_dynamic_cast(OBJECT(qdev_get_parent_bus(dev_st)->parent),
323                                 TYPE_VIRTIO_CCW_DEVICE);
324         VFIOCCWDevice *vfio_ccw_dev = (VFIOCCWDevice *)
325             object_dynamic_cast(OBJECT(dev_st), TYPE_VFIO_CCW);
326 
327         if (virtio_ccw_dev) {
328             ccw_dev = CCW_DEVICE(virtio_ccw_dev);
329             if (virtio_net_dev) {
330                 tmp_dt = CCW_DEVTYPE_VIRTIO_NET;
331             } else {
332                 tmp_dt = CCW_DEVTYPE_VIRTIO;
333             }
334         } else if (vfio_ccw_dev) {
335             ccw_dev = CCW_DEVICE(vfio_ccw_dev);
336             tmp_dt = CCW_DEVTYPE_VFIO;
337         } else {
338             SCSIDevice *sd = (SCSIDevice *)
339                 object_dynamic_cast(OBJECT(dev_st),
340                                     TYPE_SCSI_DEVICE);
341             if (sd) {
342                 SCSIBus *bus = scsi_bus_from_device(sd);
343                 VirtIOSCSI *vdev = container_of(bus, VirtIOSCSI, bus);
344                 VirtIOSCSICcw *scsi_ccw = container_of(vdev, VirtIOSCSICcw,
345                                                        vdev);
346 
347                 ccw_dev = (CcwDevice *)object_dynamic_cast(OBJECT(scsi_ccw),
348                                                            TYPE_CCW_DEVICE);
349                 tmp_dt = CCW_DEVTYPE_SCSI;
350             }
351         }
352     }
353     if (devtype) {
354         *devtype = tmp_dt;
355     }
356     return ccw_dev;
357 }
358 
359 static bool s390_gen_initial_iplb(S390IPLState *ipl)
360 {
361     DeviceState *dev_st;
362     CcwDevice *ccw_dev = NULL;
363     SCSIDevice *sd;
364     int devtype;
365 
366     dev_st = get_boot_device(0);
367     if (dev_st) {
368         ccw_dev = s390_get_ccw_device(dev_st, &devtype);
369     }
370 
371     /*
372      * Currently allow IPL only from CCW devices.
373      */
374     if (ccw_dev) {
375         switch (devtype) {
376         case CCW_DEVTYPE_SCSI:
377             sd = SCSI_DEVICE(dev_st);
378             ipl->iplb.len = cpu_to_be32(S390_IPLB_MIN_QEMU_SCSI_LEN);
379             ipl->iplb.blk0_len =
380                 cpu_to_be32(S390_IPLB_MIN_QEMU_SCSI_LEN - S390_IPLB_HEADER_LEN);
381             ipl->iplb.pbt = S390_IPL_TYPE_QEMU_SCSI;
382             ipl->iplb.scsi.lun = cpu_to_be32(sd->lun);
383             ipl->iplb.scsi.target = cpu_to_be16(sd->id);
384             ipl->iplb.scsi.channel = cpu_to_be16(sd->channel);
385             ipl->iplb.scsi.devno = cpu_to_be16(ccw_dev->sch->devno);
386             ipl->iplb.scsi.ssid = ccw_dev->sch->ssid & 3;
387             break;
388         case CCW_DEVTYPE_VFIO:
389             ipl->iplb.len = cpu_to_be32(S390_IPLB_MIN_CCW_LEN);
390             ipl->iplb.pbt = S390_IPL_TYPE_CCW;
391             ipl->iplb.ccw.devno = cpu_to_be16(ccw_dev->sch->devno);
392             ipl->iplb.ccw.ssid = ccw_dev->sch->ssid & 3;
393             break;
394         case CCW_DEVTYPE_VIRTIO_NET:
395             ipl->netboot = true;
396             /* Fall through to CCW_DEVTYPE_VIRTIO case */
397         case CCW_DEVTYPE_VIRTIO:
398             ipl->iplb.len = cpu_to_be32(S390_IPLB_MIN_CCW_LEN);
399             ipl->iplb.blk0_len =
400                 cpu_to_be32(S390_IPLB_MIN_CCW_LEN - S390_IPLB_HEADER_LEN);
401             ipl->iplb.pbt = S390_IPL_TYPE_CCW;
402             ipl->iplb.ccw.devno = cpu_to_be16(ccw_dev->sch->devno);
403             ipl->iplb.ccw.ssid = ccw_dev->sch->ssid & 3;
404             break;
405         }
406 
407         if (!s390_ipl_set_loadparm(ipl->iplb.loadparm)) {
408             ipl->iplb.flags |= DIAG308_FLAGS_LP_VALID;
409         }
410 
411         return true;
412     }
413 
414     return false;
415 }
416 
417 int s390_ipl_set_loadparm(uint8_t *loadparm)
418 {
419     MachineState *machine = MACHINE(qdev_get_machine());
420     char *lp = object_property_get_str(OBJECT(machine), "loadparm", NULL);
421 
422     if (lp) {
423         int i;
424 
425         /* lp is an uppercase string without leading/embedded spaces */
426         for (i = 0; i < 8 && lp[i]; i++) {
427             loadparm[i] = ascii2ebcdic[(uint8_t) lp[i]];
428         }
429 
430         if (i < 8) {
431             memset(loadparm + i, 0x40, 8 - i); /* fill with EBCDIC spaces */
432         }
433 
434         g_free(lp);
435         return 0;
436     }
437 
438     return -1;
439 }
440 
441 static int load_netboot_image(Error **errp)
442 {
443     S390IPLState *ipl = get_ipl_device();
444     char *netboot_filename;
445     MemoryRegion *sysmem =  get_system_memory();
446     MemoryRegion *mr = NULL;
447     void *ram_ptr = NULL;
448     int img_size = -1;
449 
450     mr = memory_region_find(sysmem, 0, 1).mr;
451     if (!mr) {
452         error_setg(errp, "Failed to find memory region at address 0");
453         return -1;
454     }
455 
456     ram_ptr = memory_region_get_ram_ptr(mr);
457     if (!ram_ptr) {
458         error_setg(errp, "No RAM found");
459         goto unref_mr;
460     }
461 
462     netboot_filename = qemu_find_file(QEMU_FILE_TYPE_BIOS, ipl->netboot_fw);
463     if (netboot_filename == NULL) {
464         error_setg(errp, "Could not find network bootloader '%s'",
465                    ipl->netboot_fw);
466         goto unref_mr;
467     }
468 
469     img_size = load_elf_ram(netboot_filename, NULL, NULL, NULL,
470                             &ipl->start_addr,
471                             NULL, NULL, 1, EM_S390, 0, 0, NULL, false);
472 
473     if (img_size < 0) {
474         img_size = load_image_size(netboot_filename, ram_ptr, ram_size);
475         ipl->start_addr = KERN_IMAGE_START;
476     }
477 
478     if (img_size < 0) {
479         error_setg(errp, "Failed to load network bootloader");
480     }
481 
482     g_free(netboot_filename);
483 
484 unref_mr:
485     memory_region_unref(mr);
486     return img_size;
487 }
488 
489 static bool is_virtio_ccw_device_of_type(IplParameterBlock *iplb,
490                                          int virtio_id)
491 {
492     uint8_t cssid;
493     uint8_t ssid;
494     uint16_t devno;
495     uint16_t schid;
496     SubchDev *sch = NULL;
497 
498     if (iplb->pbt != S390_IPL_TYPE_CCW) {
499         return false;
500     }
501 
502     devno = be16_to_cpu(iplb->ccw.devno);
503     ssid = iplb->ccw.ssid & 3;
504 
505     for (schid = 0; schid < MAX_SCHID; schid++) {
506         for (cssid = 0; cssid < MAX_CSSID; cssid++) {
507             sch = css_find_subch(1, cssid, ssid, schid);
508 
509             if (sch && sch->devno == devno) {
510                 return sch->id.cu_model == virtio_id;
511             }
512         }
513     }
514     return false;
515 }
516 
517 static bool is_virtio_net_device(IplParameterBlock *iplb)
518 {
519     return is_virtio_ccw_device_of_type(iplb, VIRTIO_ID_NET);
520 }
521 
522 static bool is_virtio_scsi_device(IplParameterBlock *iplb)
523 {
524     return is_virtio_ccw_device_of_type(iplb, VIRTIO_ID_SCSI);
525 }
526 
527 void s390_ipl_update_diag308(IplParameterBlock *iplb)
528 {
529     S390IPLState *ipl = get_ipl_device();
530 
531     ipl->iplb = *iplb;
532     ipl->iplb_valid = true;
533     ipl->netboot = is_virtio_net_device(iplb);
534 }
535 
536 IplParameterBlock *s390_ipl_get_iplb(void)
537 {
538     S390IPLState *ipl = get_ipl_device();
539 
540     if (!ipl->iplb_valid) {
541         return NULL;
542     }
543     return &ipl->iplb;
544 }
545 
546 void s390_ipl_reset_request(CPUState *cs, enum s390_reset reset_type)
547 {
548     S390IPLState *ipl = get_ipl_device();
549 
550     if (reset_type == S390_RESET_EXTERNAL || reset_type == S390_RESET_REIPL) {
551         /* use CPU 0 for full resets */
552         ipl->reset_cpu_index = 0;
553     } else {
554         ipl->reset_cpu_index = cs->cpu_index;
555     }
556     ipl->reset_type = reset_type;
557 
558     if (reset_type == S390_RESET_REIPL &&
559         ipl->iplb_valid &&
560         !ipl->netboot &&
561         ipl->iplb.pbt == S390_IPL_TYPE_CCW &&
562         is_virtio_scsi_device(&ipl->iplb)) {
563         CcwDevice *ccw_dev = s390_get_ccw_device(get_boot_device(0), NULL);
564 
565         if (ccw_dev &&
566             cpu_to_be16(ccw_dev->sch->devno) == ipl->iplb.ccw.devno &&
567             (ccw_dev->sch->ssid & 3) == ipl->iplb.ccw.ssid) {
568             /*
569              * this is the original boot device's SCSI
570              * so restore IPL parameter info from it
571              */
572             ipl->iplb_valid = s390_gen_initial_iplb(ipl);
573         }
574     }
575     if (reset_type == S390_RESET_MODIFIED_CLEAR ||
576         reset_type == S390_RESET_LOAD_NORMAL) {
577         /* ignore -no-reboot, send no event  */
578         qemu_system_reset_request(SHUTDOWN_CAUSE_SUBSYSTEM_RESET);
579     } else {
580         qemu_system_reset_request(SHUTDOWN_CAUSE_GUEST_RESET);
581     }
582     /* as this is triggered by a CPU, make sure to exit the loop */
583     if (tcg_enabled()) {
584         cpu_loop_exit(cs);
585     }
586 }
587 
588 void s390_ipl_get_reset_request(CPUState **cs, enum s390_reset *reset_type)
589 {
590     S390IPLState *ipl = get_ipl_device();
591 
592     *cs = qemu_get_cpu(ipl->reset_cpu_index);
593     if (!*cs) {
594         /* use any CPU */
595         *cs = first_cpu;
596     }
597     *reset_type = ipl->reset_type;
598 }
599 
600 void s390_ipl_clear_reset_request(void)
601 {
602     S390IPLState *ipl = get_ipl_device();
603 
604     ipl->reset_type = S390_RESET_EXTERNAL;
605     /* use CPU 0 for full resets */
606     ipl->reset_cpu_index = 0;
607 }
608 
609 static void s390_ipl_prepare_qipl(S390CPU *cpu)
610 {
611     S390IPLState *ipl = get_ipl_device();
612     uint8_t *addr;
613     uint64_t len = 4096;
614 
615     addr = cpu_physical_memory_map(cpu->env.psa, &len, 1);
616     if (!addr || len < QIPL_ADDRESS + sizeof(QemuIplParameters)) {
617         error_report("Cannot set QEMU IPL parameters");
618         return;
619     }
620     memcpy(addr + QIPL_ADDRESS, &ipl->qipl, sizeof(QemuIplParameters));
621     cpu_physical_memory_unmap(addr, len, 1, len);
622 }
623 
624 void s390_ipl_prepare_cpu(S390CPU *cpu)
625 {
626     S390IPLState *ipl = get_ipl_device();
627     Error *err = NULL;
628 
629     cpu->env.psw.addr = ipl->start_addr;
630     cpu->env.psw.mask = IPL_PSW_MASK;
631 
632     if (!ipl->kernel || ipl->iplb_valid) {
633         cpu->env.psw.addr = ipl->bios_start_addr;
634         if (!ipl->iplb_valid) {
635             ipl->iplb_valid = s390_gen_initial_iplb(ipl);
636         }
637     }
638     if (ipl->netboot) {
639         if (load_netboot_image(&err) < 0) {
640             error_report_err(err);
641             exit(1);
642         }
643         ipl->qipl.netboot_start_addr = cpu_to_be64(ipl->start_addr);
644     }
645     s390_ipl_set_boot_menu(ipl);
646     s390_ipl_prepare_qipl(cpu);
647 }
648 
649 static void s390_ipl_reset(DeviceState *dev)
650 {
651     S390IPLState *ipl = S390_IPL(dev);
652 
653     if (ipl->reset_type != S390_RESET_REIPL) {
654         ipl->iplb_valid = false;
655         memset(&ipl->iplb, 0, sizeof(IplParameterBlock));
656     }
657 }
658 
659 static void s390_ipl_class_init(ObjectClass *klass, void *data)
660 {
661     DeviceClass *dc = DEVICE_CLASS(klass);
662 
663     dc->realize = s390_ipl_realize;
664     dc->props = s390_ipl_properties;
665     dc->reset = s390_ipl_reset;
666     dc->vmsd = &vmstate_ipl;
667     set_bit(DEVICE_CATEGORY_MISC, dc->categories);
668     /* Reason: Loads the ROMs and thus can only be used one time - internally */
669     dc->user_creatable = false;
670 }
671 
672 static const TypeInfo s390_ipl_info = {
673     .class_init = s390_ipl_class_init,
674     .parent = TYPE_DEVICE,
675     .name  = TYPE_S390_IPL,
676     .instance_size  = sizeof(S390IPLState),
677 };
678 
679 static void s390_ipl_register_types(void)
680 {
681     type_register_static(&s390_ipl_info);
682 }
683 
684 type_init(s390_ipl_register_types)
685