1 /* 2 * Renesas SH7751R R2D-PLUS emulation 3 * 4 * Copyright (c) 2007 Magnus Damm 5 * Copyright (c) 2008 Paul Mundt 6 * 7 * Permission is hereby granted, free of charge, to any person obtaining a copy 8 * of this software and associated documentation files (the "Software"), to deal 9 * in the Software without restriction, including without limitation the rights 10 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 11 * copies of the Software, and to permit persons to whom the Software is 12 * furnished to do so, subject to the following conditions: 13 * 14 * The above copyright notice and this permission notice shall be included in 15 * all copies or substantial portions of the Software. 16 * 17 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 18 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 19 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL 20 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 21 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 22 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN 23 * THE SOFTWARE. 24 */ 25 26 #include "hw/sysbus.h" 27 #include "hw/hw.h" 28 #include "hw/sh4/sh.h" 29 #include "hw/devices.h" 30 #include "sysemu/sysemu.h" 31 #include "hw/boards.h" 32 #include "hw/pci/pci.h" 33 #include "net/net.h" 34 #include "sh7750_regs.h" 35 #include "hw/ide.h" 36 #include "hw/loader.h" 37 #include "hw/usb.h" 38 #include "hw/block/flash.h" 39 #include "sysemu/blockdev.h" 40 #include "exec/address-spaces.h" 41 42 #define FLASH_BASE 0x00000000 43 #define FLASH_SIZE 0x02000000 44 45 #define SDRAM_BASE 0x0c000000 /* Physical location of SDRAM: Area 3 */ 46 #define SDRAM_SIZE 0x04000000 47 48 #define SM501_VRAM_SIZE 0x800000 49 50 #define BOOT_PARAMS_OFFSET 0x0010000 51 /* CONFIG_BOOT_LINK_OFFSET of Linux kernel */ 52 #define LINUX_LOAD_OFFSET 0x0800000 53 #define INITRD_LOAD_OFFSET 0x1800000 54 55 #define PA_IRLMSK 0x00 56 #define PA_POWOFF 0x30 57 #define PA_VERREG 0x32 58 #define PA_OUTPORT 0x36 59 60 typedef struct { 61 uint16_t bcr; 62 uint16_t irlmsk; 63 uint16_t irlmon; 64 uint16_t cfctl; 65 uint16_t cfpow; 66 uint16_t dispctl; 67 uint16_t sdmpow; 68 uint16_t rtcce; 69 uint16_t pcicd; 70 uint16_t voyagerrts; 71 uint16_t cfrst; 72 uint16_t admrts; 73 uint16_t extrst; 74 uint16_t cfcdintclr; 75 uint16_t keyctlclr; 76 uint16_t pad0; 77 uint16_t pad1; 78 uint16_t verreg; 79 uint16_t inport; 80 uint16_t outport; 81 uint16_t bverreg; 82 83 /* output pin */ 84 qemu_irq irl; 85 MemoryRegion iomem; 86 } r2d_fpga_t; 87 88 enum r2d_fpga_irq { 89 PCI_INTD, CF_IDE, CF_CD, PCI_INTC, SM501, KEY, RTC_A, RTC_T, 90 SDCARD, PCI_INTA, PCI_INTB, EXT, TP, 91 NR_IRQS 92 }; 93 94 static const struct { short irl; uint16_t msk; } irqtab[NR_IRQS] = { 95 [CF_IDE] = { 1, 1<<9 }, 96 [CF_CD] = { 2, 1<<8 }, 97 [PCI_INTA] = { 9, 1<<14 }, 98 [PCI_INTB] = { 10, 1<<13 }, 99 [PCI_INTC] = { 3, 1<<12 }, 100 [PCI_INTD] = { 0, 1<<11 }, 101 [SM501] = { 4, 1<<10 }, 102 [KEY] = { 5, 1<<6 }, 103 [RTC_A] = { 6, 1<<5 }, 104 [RTC_T] = { 7, 1<<4 }, 105 [SDCARD] = { 8, 1<<7 }, 106 [EXT] = { 11, 1<<0 }, 107 [TP] = { 12, 1<<15 }, 108 }; 109 110 static void update_irl(r2d_fpga_t *fpga) 111 { 112 int i, irl = 15; 113 for (i = 0; i < NR_IRQS; i++) 114 if (fpga->irlmon & fpga->irlmsk & irqtab[i].msk) 115 if (irqtab[i].irl < irl) 116 irl = irqtab[i].irl; 117 qemu_set_irq(fpga->irl, irl ^ 15); 118 } 119 120 static void r2d_fpga_irq_set(void *opaque, int n, int level) 121 { 122 r2d_fpga_t *fpga = opaque; 123 if (level) 124 fpga->irlmon |= irqtab[n].msk; 125 else 126 fpga->irlmon &= ~irqtab[n].msk; 127 update_irl(fpga); 128 } 129 130 static uint32_t r2d_fpga_read(void *opaque, hwaddr addr) 131 { 132 r2d_fpga_t *s = opaque; 133 134 switch (addr) { 135 case PA_IRLMSK: 136 return s->irlmsk; 137 case PA_OUTPORT: 138 return s->outport; 139 case PA_POWOFF: 140 return 0x00; 141 case PA_VERREG: 142 return 0x10; 143 } 144 145 return 0; 146 } 147 148 static void 149 r2d_fpga_write(void *opaque, hwaddr addr, uint32_t value) 150 { 151 r2d_fpga_t *s = opaque; 152 153 switch (addr) { 154 case PA_IRLMSK: 155 s->irlmsk = value; 156 update_irl(s); 157 break; 158 case PA_OUTPORT: 159 s->outport = value; 160 break; 161 case PA_POWOFF: 162 if (value & 1) { 163 qemu_system_shutdown_request(); 164 } 165 break; 166 case PA_VERREG: 167 /* Discard writes */ 168 break; 169 } 170 } 171 172 static const MemoryRegionOps r2d_fpga_ops = { 173 .old_mmio = { 174 .read = { r2d_fpga_read, r2d_fpga_read, NULL, }, 175 .write = { r2d_fpga_write, r2d_fpga_write, NULL, }, 176 }, 177 .endianness = DEVICE_NATIVE_ENDIAN, 178 }; 179 180 static qemu_irq *r2d_fpga_init(MemoryRegion *sysmem, 181 hwaddr base, qemu_irq irl) 182 { 183 r2d_fpga_t *s; 184 185 s = g_malloc0(sizeof(r2d_fpga_t)); 186 187 s->irl = irl; 188 189 memory_region_init_io(&s->iomem, NULL, &r2d_fpga_ops, s, "r2d-fpga", 0x40); 190 memory_region_add_subregion(sysmem, base, &s->iomem); 191 return qemu_allocate_irqs(r2d_fpga_irq_set, s, NR_IRQS); 192 } 193 194 typedef struct ResetData { 195 SuperHCPU *cpu; 196 uint32_t vector; 197 } ResetData; 198 199 static void main_cpu_reset(void *opaque) 200 { 201 ResetData *s = (ResetData *)opaque; 202 CPUSH4State *env = &s->cpu->env; 203 204 cpu_reset(CPU(s->cpu)); 205 env->pc = s->vector; 206 } 207 208 static struct QEMU_PACKED 209 { 210 int mount_root_rdonly; 211 int ramdisk_flags; 212 int orig_root_dev; 213 int loader_type; 214 int initrd_start; 215 int initrd_size; 216 217 char pad[232]; 218 219 char kernel_cmdline[256]; 220 } boot_params; 221 222 static void r2d_init(QEMUMachineInitArgs *args) 223 { 224 const char *cpu_model = args->cpu_model; 225 const char *kernel_filename = args->kernel_filename; 226 const char *kernel_cmdline = args->kernel_cmdline; 227 const char *initrd_filename = args->initrd_filename; 228 SuperHCPU *cpu; 229 CPUSH4State *env; 230 ResetData *reset_info; 231 struct SH7750State *s; 232 MemoryRegion *sdram = g_new(MemoryRegion, 1); 233 qemu_irq *irq; 234 DriveInfo *dinfo; 235 int i; 236 DeviceState *dev; 237 SysBusDevice *busdev; 238 MemoryRegion *address_space_mem = get_system_memory(); 239 PCIBus *pci_bus; 240 241 if (cpu_model == NULL) { 242 cpu_model = "SH7751R"; 243 } 244 245 cpu = cpu_sh4_init(cpu_model); 246 if (cpu == NULL) { 247 fprintf(stderr, "Unable to find CPU definition\n"); 248 exit(1); 249 } 250 env = &cpu->env; 251 252 reset_info = g_malloc0(sizeof(ResetData)); 253 reset_info->cpu = cpu; 254 reset_info->vector = env->pc; 255 qemu_register_reset(main_cpu_reset, reset_info); 256 257 /* Allocate memory space */ 258 memory_region_init_ram(sdram, NULL, "r2d.sdram", SDRAM_SIZE); 259 vmstate_register_ram_global(sdram); 260 memory_region_add_subregion(address_space_mem, SDRAM_BASE, sdram); 261 /* Register peripherals */ 262 s = sh7750_init(cpu, address_space_mem); 263 irq = r2d_fpga_init(address_space_mem, 0x04000000, sh7750_irl(s)); 264 265 dev = qdev_create(NULL, "sh_pci"); 266 busdev = SYS_BUS_DEVICE(dev); 267 qdev_init_nofail(dev); 268 pci_bus = PCI_BUS(qdev_get_child_bus(dev, "pci")); 269 sysbus_mmio_map(busdev, 0, P4ADDR(0x1e200000)); 270 sysbus_mmio_map(busdev, 1, A7ADDR(0x1e200000)); 271 sysbus_connect_irq(busdev, 0, irq[PCI_INTA]); 272 sysbus_connect_irq(busdev, 1, irq[PCI_INTB]); 273 sysbus_connect_irq(busdev, 2, irq[PCI_INTC]); 274 sysbus_connect_irq(busdev, 3, irq[PCI_INTD]); 275 276 sm501_init(address_space_mem, 0x10000000, SM501_VRAM_SIZE, 277 irq[SM501], serial_hds[2]); 278 279 /* onboard CF (True IDE mode, Master only). */ 280 dinfo = drive_get(IF_IDE, 0, 0); 281 dev = qdev_create(NULL, "mmio-ide"); 282 busdev = SYS_BUS_DEVICE(dev); 283 sysbus_connect_irq(busdev, 0, irq[CF_IDE]); 284 qdev_prop_set_uint32(dev, "shift", 1); 285 qdev_init_nofail(dev); 286 sysbus_mmio_map(busdev, 0, 0x14001000); 287 sysbus_mmio_map(busdev, 1, 0x1400080c); 288 mmio_ide_init_drives(dev, dinfo, NULL); 289 290 /* onboard flash memory */ 291 dinfo = drive_get(IF_PFLASH, 0, 0); 292 pflash_cfi02_register(0x0, NULL, "r2d.flash", FLASH_SIZE, 293 dinfo ? dinfo->bdrv : NULL, (16 * 1024), 294 FLASH_SIZE >> 16, 295 1, 4, 0x0000, 0x0000, 0x0000, 0x0000, 296 0x555, 0x2aa, 0); 297 298 /* NIC: rtl8139 on-board, and 2 slots. */ 299 for (i = 0; i < nb_nics; i++) 300 pci_nic_init_nofail(&nd_table[i], pci_bus, 301 "rtl8139", i==0 ? "2" : NULL); 302 303 /* USB keyboard */ 304 usbdevice_create("keyboard"); 305 306 /* Todo: register on board registers */ 307 memset(&boot_params, 0, sizeof(boot_params)); 308 309 if (kernel_filename) { 310 int kernel_size; 311 312 kernel_size = load_image_targphys(kernel_filename, 313 SDRAM_BASE + LINUX_LOAD_OFFSET, 314 INITRD_LOAD_OFFSET - LINUX_LOAD_OFFSET); 315 if (kernel_size < 0) { 316 fprintf(stderr, "qemu: could not load kernel '%s'\n", kernel_filename); 317 exit(1); 318 } 319 320 /* initialization which should be done by firmware */ 321 stl_phys(&address_space_memory, SH7750_BCR1, 1<<3); /* cs3 SDRAM */ 322 stw_phys(&address_space_memory, SH7750_BCR2, 3<<(3*2)); /* cs3 32bit */ 323 reset_info->vector = (SDRAM_BASE + LINUX_LOAD_OFFSET) | 0xa0000000; /* Start from P2 area */ 324 } 325 326 if (initrd_filename) { 327 int initrd_size; 328 329 initrd_size = load_image_targphys(initrd_filename, 330 SDRAM_BASE + INITRD_LOAD_OFFSET, 331 SDRAM_SIZE - INITRD_LOAD_OFFSET); 332 333 if (initrd_size < 0) { 334 fprintf(stderr, "qemu: could not load initrd '%s'\n", initrd_filename); 335 exit(1); 336 } 337 338 /* initialization which should be done by firmware */ 339 boot_params.loader_type = 1; 340 boot_params.initrd_start = INITRD_LOAD_OFFSET; 341 boot_params.initrd_size = initrd_size; 342 } 343 344 if (kernel_cmdline) { 345 /* I see no evidence that this .kernel_cmdline buffer requires 346 NUL-termination, so using strncpy should be ok. */ 347 strncpy(boot_params.kernel_cmdline, kernel_cmdline, 348 sizeof(boot_params.kernel_cmdline)); 349 } 350 351 rom_add_blob_fixed("boot_params", &boot_params, sizeof(boot_params), 352 SDRAM_BASE + BOOT_PARAMS_OFFSET); 353 } 354 355 static QEMUMachine r2d_machine = { 356 .name = "r2d", 357 .desc = "r2d-plus board", 358 .init = r2d_init, 359 }; 360 361 static void r2d_machine_init(void) 362 { 363 qemu_register_machine(&r2d_machine); 364 } 365 366 machine_init(r2d_machine_init); 367