xref: /openbmc/u-boot/arch/powerpc/cpu/mpc83xx/start.S (revision 441cac10)
1/*
2 * Copyright (C) 1998  Dan Malek <dmalek@jlc.net>
3 * Copyright (C) 1999  Magnus Damm <kieraypc01.p.y.kie.era.ericsson.se>
4 * Copyright (C) 2000, 2001,2002 Wolfgang Denk <wd@denx.de>
5 * Copyright Freescale Semiconductor, Inc. 2004, 2006, 2008.
6 *
7 * See file CREDITS for list of people who contributed to this
8 * project.
9 *
10 * This program is free software; you can redistribute it and/or
11 * modify it under the terms of the GNU General Public License as
12 * published by the Free Software Foundation; either version 2 of
13 * the License, or (at your option) any later version.
14 *
15 * This program is distributed in the hope that it will be useful,
16 * but WITHOUT ANY WARRANTY; without even the implied warranty of
17 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
18 * GNU General Public License for more details.
19 *
20 * You should have received a copy of the GNU General Public License
21 * along with this program; if not, write to the Free Software
22 * Foundation, Inc., 59 Temple Place, Suite 330, Boston,
23 * MA 02111-1307 USA
24 */
25
26/*
27 *  U-Boot - Startup Code for MPC83xx PowerPC based Embedded Boards
28 */
29
30#include <config.h>
31#include <mpc83xx.h>
32#include <timestamp.h>
33#include <version.h>
34
35#define CONFIG_83XX	1		/* needed for Linux kernel header files*/
36#define _LINUX_CONFIG_H 1	/* avoid reading Linux autoconf.h file */
37
38#include <ppc_asm.tmpl>
39#include <ppc_defs.h>
40
41#include <asm/cache.h>
42#include <asm/mmu.h>
43
44#ifndef  CONFIG_IDENT_STRING
45#define  CONFIG_IDENT_STRING "MPC83XX"
46#endif
47
48/* We don't want the  MMU yet.
49 */
50#undef	MSR_KERNEL
51
52/*
53 * Floating Point enable, Machine Check and Recoverable Interr.
54 */
55#ifdef DEBUG
56#define MSR_KERNEL (MSR_FP|MSR_RI)
57#else
58#define MSR_KERNEL (MSR_FP|MSR_ME|MSR_RI)
59#endif
60
61#if !defined(CONFIG_NAND_SPL) && !defined(CONFIG_SYS_RAMBOOT)
62#define CONFIG_SYS_FLASHBOOT
63#endif
64
65/*
66 * Set up GOT: Global Offset Table
67 *
68 * Use r12 to access the GOT
69 */
70	START_GOT
71	GOT_ENTRY(_GOT2_TABLE_)
72	GOT_ENTRY(__bss_start)
73	GOT_ENTRY(_end)
74
75#ifndef CONFIG_NAND_SPL
76	GOT_ENTRY(_FIXUP_TABLE_)
77	GOT_ENTRY(_start)
78	GOT_ENTRY(_start_of_vectors)
79	GOT_ENTRY(_end_of_vectors)
80	GOT_ENTRY(transfer_to_handler)
81#endif
82	END_GOT
83
84/*
85 * The Hard Reset Configuration Word (HRCW) table is in the first 64
86 * (0x40) bytes of flash.  It has 8 bytes, but each byte is repeated 8
87 * times so the processor can fetch it out of flash whether the flash
88 * is 8, 16, 32, or 64 bits wide (hardware trickery).
89 */
90	.text
91#define _HRCW_TABLE_ENTRY(w)		\
92	.fill	8,1,(((w)>>24)&0xff);	\
93	.fill	8,1,(((w)>>16)&0xff);	\
94	.fill	8,1,(((w)>> 8)&0xff);	\
95	.fill	8,1,(((w)    )&0xff)
96
97	_HRCW_TABLE_ENTRY(CONFIG_SYS_HRCW_LOW)
98	_HRCW_TABLE_ENTRY(CONFIG_SYS_HRCW_HIGH)
99
100/*
101 * Magic number and version string - put it after the HRCW since it
102 * cannot be first in flash like it is in many other processors.
103 */
104	.long	0x27051956		/* U-Boot Magic Number */
105
106	.globl	version_string
107version_string:
108	.ascii U_BOOT_VERSION
109	.ascii " (", U_BOOT_DATE, " - ", U_BOOT_TIME, ")"
110	.ascii " ", CONFIG_IDENT_STRING, "\0"
111
112	.align 2
113
114	.globl enable_addr_trans
115enable_addr_trans:
116	/* enable address translation */
117	mfmsr	r5
118	ori	r5, r5, (MSR_IR | MSR_DR)
119	mtmsr	r5
120	isync
121	blr
122
123	.globl disable_addr_trans
124disable_addr_trans:
125	/* disable address translation */
126	mflr	r4
127	mfmsr	r3
128	andi.	r0, r3, (MSR_IR | MSR_DR)
129	beqlr
130	andc	r3, r3, r0
131	mtspr	SRR0, r4
132	mtspr	SRR1, r3
133	rfi
134
135	.globl get_pvr
136get_pvr:
137	mfspr	r3, PVR
138	blr
139
140	.globl	ppcDWstore
141ppcDWstore:
142	lfd	1, 0(r4)
143	stfd	1, 0(r3)
144	blr
145
146	.globl	ppcDWload
147ppcDWload:
148	lfd	1, 0(r3)
149	stfd	1, 0(r4)
150	blr
151
152#ifndef CONFIG_DEFAULT_IMMR
153#error CONFIG_DEFAULT_IMMR must be defined
154#endif /* CONFIG_SYS_DEFAULT_IMMR */
155#ifndef CONFIG_SYS_IMMR
156#define CONFIG_SYS_IMMR CONFIG_DEFAULT_IMMR
157#endif /* CONFIG_SYS_IMMR */
158
159/*
160 * After configuration, a system reset exception is executed using the
161 * vector at offset 0x100 relative to the base set by MSR[IP]. If
162 * MSR[IP] is 0, the base address is 0x00000000. If MSR[IP] is 1, the
163 * base address is 0xfff00000. In the case of a Power On Reset or Hard
164 * Reset, the value of MSR[IP] is determined by the CIP field in the
165 * HRCW.
166 *
167 * Other bits in the HRCW set up the Base Address and Port Size in BR0.
168 * This determines the location of the boot ROM (flash or EPROM) in the
169 * processor's address space at boot time. As long as the HRCW is set up
170 * so that we eventually end up executing the code below when the
171 * processor executes the reset exception, the actual values used should
172 * not matter.
173 *
174 * Once we have got here, the address mask in OR0 is cleared so that the
175 * bottom 32K of the boot ROM is effectively repeated all throughout the
176 * processor's address space, after which we can jump to the absolute
177 * address at which the boot ROM was linked at compile time, and proceed
178 * to initialise the memory controller without worrying if the rug will
179 * be pulled out from under us, so to speak (it will be fine as long as
180 * we configure BR0 with the same boot ROM link address).
181 */
182	. = EXC_OFF_SYS_RESET
183
184	.globl	_start
185_start: /* time t 0 */
186	li	r21, BOOTFLAG_COLD  /* Normal Power-On: Boot from FLASH*/
187	nop
188	b	boot_cold
189
190	. = EXC_OFF_SYS_RESET + 0x10
191
192	.globl	_start_warm
193_start_warm:
194	li	r21, BOOTFLAG_WARM	/* Software reboot	*/
195	b	boot_warm
196
197
198boot_cold: /* time t 3 */
199	lis	r4, CONFIG_DEFAULT_IMMR@h
200	nop
201boot_warm: /* time t 5 */
202	mfmsr	r5			/* save msr contents	*/
203
204	/* 83xx manuals prescribe a specific sequence for updating IMMRBAR. */
205	bl	1f
2061:	mflr	r7
207
208	lis	r3, CONFIG_SYS_IMMR@h
209	ori	r3, r3, CONFIG_SYS_IMMR@l
210
211	lwz	r6, IMMRBAR(r4)
212	isync
213
214	stw	r3, IMMRBAR(r4)
215	lwz	r6, 0(r7)		/* Arbitrary external load */
216	isync
217
218	lwz	r6, IMMRBAR(r3)
219	isync
220
221	/* Initialise the E300 processor core		*/
222	/*------------------------------------------*/
223
224#ifdef CONFIG_NAND_SPL
225	/* The FCM begins execution after only the first page
226	 * is loaded.  Wait for the rest before branching
227	 * to another flash page.
228	 */
2291:	lwz	r6, 0x50b0(r3)
230	andi.	r6, r6, 1
231	beq	1b
232#endif
233
234	bl	init_e300_core
235
236#ifdef CONFIG_SYS_FLASHBOOT
237
238	/* Inflate flash location so it appears everywhere, calculate */
239	/* the absolute address in final location of the FLASH, jump  */
240	/* there and deflate the flash size back to minimal size      */
241	/*------------------------------------------------------------*/
242	bl map_flash_by_law1
243	lis r4, (CONFIG_SYS_MONITOR_BASE)@h
244	ori r4, r4, (CONFIG_SYS_MONITOR_BASE)@l
245	addi r5, r4, in_flash - _start + EXC_OFF_SYS_RESET
246	mtlr r5
247	blr
248in_flash:
249#if 1 /* Remapping flash with LAW0. */
250	bl remap_flash_by_law0
251#endif
252#endif	/* CONFIG_SYS_FLASHBOOT */
253
254	/* setup the bats */
255	bl	setup_bats
256	sync
257
258	/*
259	 * Cache must be enabled here for stack-in-cache trick.
260	 * This means we need to enable the BATS.
261	 * This means:
262	 *   1) for the EVB, original gt regs need to be mapped
263	 *   2) need to have an IBAT for the 0xf region,
264	 *      we are running there!
265	 * Cache should be turned on after BATs, since by default
266	 * everything is write-through.
267	 * The init-mem BAT can be reused after reloc. The old
268	 * gt-regs BAT can be reused after board_init_f calls
269	 * board_early_init_f (EVB only).
270	 */
271	/* enable address translation */
272	bl	enable_addr_trans
273	sync
274
275	/* enable the data cache */
276	bl	dcache_enable
277	sync
278#ifdef CONFIG_SYS_INIT_RAM_LOCK
279	bl	lock_ram_in_cache
280	sync
281#endif
282
283	/* set up the stack pointer in our newly created
284	 * cache-ram (r1) */
285	lis	r1, (CONFIG_SYS_INIT_RAM_ADDR + CONFIG_SYS_GBL_DATA_OFFSET)@h
286	ori	r1, r1, (CONFIG_SYS_INIT_RAM_ADDR + CONFIG_SYS_GBL_DATA_OFFSET)@l
287
288	li	r0, 0		/* Make room for stack frame header and	*/
289	stwu	r0, -4(r1)	/* clear final stack frame so that	*/
290	stwu	r0, -4(r1)	/* stack backtraces terminate cleanly	*/
291
292
293	/* let the C-code set up the rest	                    */
294	/*				                            */
295	/* Be careful to keep code relocatable & stack humble   */
296	/*------------------------------------------------------*/
297
298	GET_GOT			/* initialize GOT access	*/
299
300	/* r3: IMMR */
301	lis	r3, CONFIG_SYS_IMMR@h
302	/* run low-level CPU init code (in Flash)*/
303	bl	cpu_init_f
304
305	/* r3: BOOTFLAG */
306	mr	r3, r21
307	/* run 1st part of board init code (in Flash)*/
308	bl	board_init_f
309
310#ifndef CONFIG_NAND_SPL
311/*
312 * Vector Table
313 */
314
315	.globl	_start_of_vectors
316_start_of_vectors:
317
318/* Machine check */
319	STD_EXCEPTION(0x200, MachineCheck, MachineCheckException)
320
321/* Data Storage exception. */
322	STD_EXCEPTION(0x300, DataStorage, UnknownException)
323
324/* Instruction Storage exception. */
325	STD_EXCEPTION(0x400, InstStorage, UnknownException)
326
327/* External Interrupt exception. */
328#ifndef FIXME
329	STD_EXCEPTION(0x500, ExtInterrupt, external_interrupt)
330#endif
331
332/* Alignment exception. */
333	. = 0x600
334Alignment:
335	EXCEPTION_PROLOG(SRR0, SRR1)
336	mfspr	r4,DAR
337	stw	r4,_DAR(r21)
338	mfspr	r5,DSISR
339	stw	r5,_DSISR(r21)
340	addi	r3,r1,STACK_FRAME_OVERHEAD
341	EXC_XFER_TEMPLATE(Alignment, AlignmentException, MSR_KERNEL, COPY_EE)
342
343/* Program check exception */
344	. = 0x700
345ProgramCheck:
346	EXCEPTION_PROLOG(SRR0, SRR1)
347	addi	r3,r1,STACK_FRAME_OVERHEAD
348	EXC_XFER_TEMPLATE(ProgramCheck, ProgramCheckException,
349		MSR_KERNEL, COPY_EE)
350
351	STD_EXCEPTION(0x800, FPUnavailable, UnknownException)
352
353	/* I guess we could implement decrementer, and may have
354	 * to someday for timekeeping.
355	 */
356	STD_EXCEPTION(0x900, Decrementer, timer_interrupt)
357
358	STD_EXCEPTION(0xa00, Trap_0a, UnknownException)
359	STD_EXCEPTION(0xb00, Trap_0b, UnknownException)
360	STD_EXCEPTION(0xc00, SystemCall, UnknownException)
361	STD_EXCEPTION(0xd00, SingleStep, UnknownException)
362
363	STD_EXCEPTION(0xe00, Trap_0e, UnknownException)
364	STD_EXCEPTION(0xf00, Trap_0f, UnknownException)
365
366	STD_EXCEPTION(0x1000, InstructionTLBMiss, UnknownException)
367	STD_EXCEPTION(0x1100, DataLoadTLBMiss, UnknownException)
368	STD_EXCEPTION(0x1200, DataStoreTLBMiss, UnknownException)
369#ifdef DEBUG
370	. = 0x1300
371	/*
372	 * This exception occurs when the program counter matches the
373	 * Instruction Address Breakpoint Register (IABR).
374	 *
375	 * I want the cpu to halt if this occurs so I can hunt around
376	 * with the debugger and look at things.
377	 *
378	 * When DEBUG is defined, both machine check enable (in the MSR)
379	 * and checkstop reset enable (in the reset mode register) are
380	 * turned off and so a checkstop condition will result in the cpu
381	 * halting.
382	 *
383	 * I force the cpu into a checkstop condition by putting an illegal
384	 * instruction here (at least this is the theory).
385	 *
386	 * well - that didnt work, so just do an infinite loop!
387	 */
3881:	b	1b
389#else
390	STD_EXCEPTION(0x1300, InstructionBreakpoint, DebugException)
391#endif
392	STD_EXCEPTION(0x1400, SMI, UnknownException)
393
394	STD_EXCEPTION(0x1500, Trap_15, UnknownException)
395	STD_EXCEPTION(0x1600, Trap_16, UnknownException)
396	STD_EXCEPTION(0x1700, Trap_17, UnknownException)
397	STD_EXCEPTION(0x1800, Trap_18, UnknownException)
398	STD_EXCEPTION(0x1900, Trap_19, UnknownException)
399	STD_EXCEPTION(0x1a00, Trap_1a, UnknownException)
400	STD_EXCEPTION(0x1b00, Trap_1b, UnknownException)
401	STD_EXCEPTION(0x1c00, Trap_1c, UnknownException)
402	STD_EXCEPTION(0x1d00, Trap_1d, UnknownException)
403	STD_EXCEPTION(0x1e00, Trap_1e, UnknownException)
404	STD_EXCEPTION(0x1f00, Trap_1f, UnknownException)
405	STD_EXCEPTION(0x2000, Trap_20, UnknownException)
406	STD_EXCEPTION(0x2100, Trap_21, UnknownException)
407	STD_EXCEPTION(0x2200, Trap_22, UnknownException)
408	STD_EXCEPTION(0x2300, Trap_23, UnknownException)
409	STD_EXCEPTION(0x2400, Trap_24, UnknownException)
410	STD_EXCEPTION(0x2500, Trap_25, UnknownException)
411	STD_EXCEPTION(0x2600, Trap_26, UnknownException)
412	STD_EXCEPTION(0x2700, Trap_27, UnknownException)
413	STD_EXCEPTION(0x2800, Trap_28, UnknownException)
414	STD_EXCEPTION(0x2900, Trap_29, UnknownException)
415	STD_EXCEPTION(0x2a00, Trap_2a, UnknownException)
416	STD_EXCEPTION(0x2b00, Trap_2b, UnknownException)
417	STD_EXCEPTION(0x2c00, Trap_2c, UnknownException)
418	STD_EXCEPTION(0x2d00, Trap_2d, UnknownException)
419	STD_EXCEPTION(0x2e00, Trap_2e, UnknownException)
420	STD_EXCEPTION(0x2f00, Trap_2f, UnknownException)
421
422
423	.globl	_end_of_vectors
424_end_of_vectors:
425
426	. = 0x3000
427
428/*
429 * This code finishes saving the registers to the exception frame
430 * and jumps to the appropriate handler for the exception.
431 * Register r21 is pointer into trap frame, r1 has new stack pointer.
432 */
433	.globl	transfer_to_handler
434transfer_to_handler:
435	stw	r22,_NIP(r21)
436	lis	r22,MSR_POW@h
437	andc	r23,r23,r22
438	stw	r23,_MSR(r21)
439	SAVE_GPR(7, r21)
440	SAVE_4GPRS(8, r21)
441	SAVE_8GPRS(12, r21)
442	SAVE_8GPRS(24, r21)
443	mflr	r23
444	andi.	r24,r23,0x3f00		/* get vector offset */
445	stw	r24,TRAP(r21)
446	li	r22,0
447	stw	r22,RESULT(r21)
448	lwz	r24,0(r23)		/* virtual address of handler */
449	lwz	r23,4(r23)		/* where to go when done */
450	mtspr	SRR0,r24
451	mtspr	SRR1,r20
452	mtlr	r23
453	SYNC
454	rfi				/* jump to handler, enable MMU */
455
456int_return:
457	mfmsr	r28		/* Disable interrupts */
458	li	r4,0
459	ori	r4,r4,MSR_EE
460	andc	r28,r28,r4
461	SYNC			/* Some chip revs need this... */
462	mtmsr	r28
463	SYNC
464	lwz	r2,_CTR(r1)
465	lwz	r0,_LINK(r1)
466	mtctr	r2
467	mtlr	r0
468	lwz	r2,_XER(r1)
469	lwz	r0,_CCR(r1)
470	mtspr	XER,r2
471	mtcrf	0xFF,r0
472	REST_10GPRS(3, r1)
473	REST_10GPRS(13, r1)
474	REST_8GPRS(23, r1)
475	REST_GPR(31, r1)
476	lwz	r2,_NIP(r1)	/* Restore environment */
477	lwz	r0,_MSR(r1)
478	mtspr	SRR0,r2
479	mtspr	SRR1,r0
480	lwz	r0,GPR0(r1)
481	lwz	r2,GPR2(r1)
482	lwz	r1,GPR1(r1)
483	SYNC
484	rfi
485#endif /* !CONFIG_NAND_SPL */
486
487/*
488 * This code initialises the E300 processor core
489 * (conforms to PowerPC 603e spec)
490 * Note: expects original MSR contents to be in r5.
491 */
492	.globl	init_e300_core
493init_e300_core: /* time t 10 */
494	/* Initialize machine status; enable machine check interrupt */
495	/*-----------------------------------------------------------*/
496
497	li	r3, MSR_KERNEL			/* Set ME and RI flags */
498	rlwimi	r3, r5, 0, 25, 25	/* preserve IP bit set by HRCW */
499#ifdef DEBUG
500	rlwimi	r3, r5, 0, 21, 22   /* debugger might set SE & BE bits */
501#endif
502	SYNC						/* Some chip revs need this... */
503	mtmsr	r3
504	SYNC
505	mtspr	SRR1, r3			/* Make SRR1 match MSR */
506
507
508	lis	r3, CONFIG_SYS_IMMR@h
509#if defined(CONFIG_WATCHDOG)
510	/* Initialise the Wathcdog values and reset it (if req) */
511	/*------------------------------------------------------*/
512	lis r4, CONFIG_SYS_WATCHDOG_VALUE
513	ori r4, r4, (SWCRR_SWEN | SWCRR_SWRI | SWCRR_SWPR)
514	stw r4, SWCRR(r3)
515
516	/* and reset it */
517
518	li	r4, 0x556C
519	sth	r4, SWSRR@l(r3)
520	li	r4, -0x55C7
521	sth	r4, SWSRR@l(r3)
522#else
523	/* Disable Wathcdog  */
524	/*-------------------*/
525	lwz r4, SWCRR(r3)
526	/* Check to see if its enabled for disabling
527	   once disabled by SW you can't re-enable */
528	andi. r4, r4, 0x4
529	beq 1f
530	xor r4, r4, r4
531	stw r4, SWCRR(r3)
5321:
533#endif /* CONFIG_WATCHDOG */
534
535#if defined(CONFIG_MASK_AER_AO)
536	/* Write the Arbiter Event Enable to mask Address Only traps. */
537	/* This prevents the dcbz instruction from being trapped when */
538	/* HID0_ABE Address Broadcast Enable is set and the MEMORY    */
539	/* COHERENCY bit is set in the WIMG bits, which is often      */
540	/* needed for PCI operation.                                  */
541	lwz	r4, 0x0808(r3)
542	rlwinm	r0, r4, 0, ~AER_AO
543	stw	r0, 0x0808(r3)
544#endif /* CONFIG_MASK_AER_AO */
545
546	/* Initialize the Hardware Implementation-dependent Registers */
547	/* HID0 also contains cache control			*/
548	/* - force invalidation of data and instruction caches  */
549	/*------------------------------------------------------*/
550
551	lis	r3, CONFIG_SYS_HID0_INIT@h
552	ori	r3, r3, (CONFIG_SYS_HID0_INIT | HID0_ICFI | HID0_DCFI)@l
553	SYNC
554	mtspr	HID0, r3
555
556	lis	r3, CONFIG_SYS_HID0_FINAL@h
557	ori	r3, r3, (CONFIG_SYS_HID0_FINAL & ~(HID0_ICFI | HID0_DCFI))@l
558	SYNC
559	mtspr	HID0, r3
560
561	lis	r3, CONFIG_SYS_HID2@h
562	ori	r3, r3, CONFIG_SYS_HID2@l
563	SYNC
564	mtspr	HID2, r3
565
566	/* Done!						*/
567	/*------------------------------*/
568	blr
569
570	/* setup_bats - set them up to some initial state */
571	.globl	setup_bats
572setup_bats:
573	addis	r0, r0, 0x0000
574
575	/* IBAT 0 */
576	addis	r4, r0, CONFIG_SYS_IBAT0L@h
577	ori	r4, r4, CONFIG_SYS_IBAT0L@l
578	addis	r3, r0, CONFIG_SYS_IBAT0U@h
579	ori	r3, r3, CONFIG_SYS_IBAT0U@l
580	mtspr	IBAT0L, r4
581	mtspr	IBAT0U, r3
582
583	/* DBAT 0 */
584	addis	r4, r0, CONFIG_SYS_DBAT0L@h
585	ori	r4, r4, CONFIG_SYS_DBAT0L@l
586	addis	r3, r0, CONFIG_SYS_DBAT0U@h
587	ori	r3, r3, CONFIG_SYS_DBAT0U@l
588	mtspr	DBAT0L, r4
589	mtspr	DBAT0U, r3
590
591	/* IBAT 1 */
592	addis	r4, r0, CONFIG_SYS_IBAT1L@h
593	ori	r4, r4, CONFIG_SYS_IBAT1L@l
594	addis	r3, r0, CONFIG_SYS_IBAT1U@h
595	ori	r3, r3, CONFIG_SYS_IBAT1U@l
596	mtspr	IBAT1L, r4
597	mtspr	IBAT1U, r3
598
599	/* DBAT 1 */
600	addis	r4, r0, CONFIG_SYS_DBAT1L@h
601	ori	r4, r4, CONFIG_SYS_DBAT1L@l
602	addis	r3, r0, CONFIG_SYS_DBAT1U@h
603	ori	r3, r3, CONFIG_SYS_DBAT1U@l
604	mtspr	DBAT1L, r4
605	mtspr	DBAT1U, r3
606
607	/* IBAT 2 */
608	addis	r4, r0, CONFIG_SYS_IBAT2L@h
609	ori	r4, r4, CONFIG_SYS_IBAT2L@l
610	addis	r3, r0, CONFIG_SYS_IBAT2U@h
611	ori	r3, r3, CONFIG_SYS_IBAT2U@l
612	mtspr	IBAT2L, r4
613	mtspr	IBAT2U, r3
614
615	/* DBAT 2 */
616	addis	r4, r0, CONFIG_SYS_DBAT2L@h
617	ori	r4, r4, CONFIG_SYS_DBAT2L@l
618	addis	r3, r0, CONFIG_SYS_DBAT2U@h
619	ori	r3, r3, CONFIG_SYS_DBAT2U@l
620	mtspr	DBAT2L, r4
621	mtspr	DBAT2U, r3
622
623	/* IBAT 3 */
624	addis	r4, r0, CONFIG_SYS_IBAT3L@h
625	ori	r4, r4, CONFIG_SYS_IBAT3L@l
626	addis	r3, r0, CONFIG_SYS_IBAT3U@h
627	ori	r3, r3, CONFIG_SYS_IBAT3U@l
628	mtspr	IBAT3L, r4
629	mtspr	IBAT3U, r3
630
631	/* DBAT 3 */
632	addis	r4, r0, CONFIG_SYS_DBAT3L@h
633	ori	r4, r4, CONFIG_SYS_DBAT3L@l
634	addis	r3, r0, CONFIG_SYS_DBAT3U@h
635	ori	r3, r3, CONFIG_SYS_DBAT3U@l
636	mtspr	DBAT3L, r4
637	mtspr	DBAT3U, r3
638
639#ifdef CONFIG_HIGH_BATS
640	/* IBAT 4 */
641	addis   r4, r0, CONFIG_SYS_IBAT4L@h
642	ori     r4, r4, CONFIG_SYS_IBAT4L@l
643	addis   r3, r0, CONFIG_SYS_IBAT4U@h
644	ori     r3, r3, CONFIG_SYS_IBAT4U@l
645	mtspr   IBAT4L, r4
646	mtspr   IBAT4U, r3
647
648	/* DBAT 4 */
649	addis   r4, r0, CONFIG_SYS_DBAT4L@h
650	ori     r4, r4, CONFIG_SYS_DBAT4L@l
651	addis   r3, r0, CONFIG_SYS_DBAT4U@h
652	ori     r3, r3, CONFIG_SYS_DBAT4U@l
653	mtspr   DBAT4L, r4
654	mtspr   DBAT4U, r3
655
656	/* IBAT 5 */
657	addis   r4, r0, CONFIG_SYS_IBAT5L@h
658	ori     r4, r4, CONFIG_SYS_IBAT5L@l
659	addis   r3, r0, CONFIG_SYS_IBAT5U@h
660	ori     r3, r3, CONFIG_SYS_IBAT5U@l
661	mtspr   IBAT5L, r4
662	mtspr   IBAT5U, r3
663
664	/* DBAT 5 */
665	addis   r4, r0, CONFIG_SYS_DBAT5L@h
666	ori     r4, r4, CONFIG_SYS_DBAT5L@l
667	addis   r3, r0, CONFIG_SYS_DBAT5U@h
668	ori     r3, r3, CONFIG_SYS_DBAT5U@l
669	mtspr   DBAT5L, r4
670	mtspr   DBAT5U, r3
671
672	/* IBAT 6 */
673	addis   r4, r0, CONFIG_SYS_IBAT6L@h
674	ori     r4, r4, CONFIG_SYS_IBAT6L@l
675	addis   r3, r0, CONFIG_SYS_IBAT6U@h
676	ori     r3, r3, CONFIG_SYS_IBAT6U@l
677	mtspr   IBAT6L, r4
678	mtspr   IBAT6U, r3
679
680	/* DBAT 6 */
681	addis   r4, r0, CONFIG_SYS_DBAT6L@h
682	ori     r4, r4, CONFIG_SYS_DBAT6L@l
683	addis   r3, r0, CONFIG_SYS_DBAT6U@h
684	ori     r3, r3, CONFIG_SYS_DBAT6U@l
685	mtspr   DBAT6L, r4
686	mtspr   DBAT6U, r3
687
688	/* IBAT 7 */
689	addis   r4, r0, CONFIG_SYS_IBAT7L@h
690	ori     r4, r4, CONFIG_SYS_IBAT7L@l
691	addis   r3, r0, CONFIG_SYS_IBAT7U@h
692	ori     r3, r3, CONFIG_SYS_IBAT7U@l
693	mtspr   IBAT7L, r4
694	mtspr   IBAT7U, r3
695
696	/* DBAT 7 */
697	addis   r4, r0, CONFIG_SYS_DBAT7L@h
698	ori     r4, r4, CONFIG_SYS_DBAT7L@l
699	addis   r3, r0, CONFIG_SYS_DBAT7U@h
700	ori     r3, r3, CONFIG_SYS_DBAT7U@l
701	mtspr   DBAT7L, r4
702	mtspr   DBAT7U, r3
703#endif
704
705	isync
706
707	/* invalidate all tlb's
708	 *
709	 * From the 603e User Manual: "The 603e provides the ability to
710	 * invalidate a TLB entry. The TLB Invalidate Entry (tlbie)
711	 * instruction invalidates the TLB entry indexed by the EA, and
712	 * operates on both the instruction and data TLBs simultaneously
713	 * invalidating four TLB entries (both sets in each TLB). The
714	 * index corresponds to bits 15-19 of the EA. To invalidate all
715	 * entries within both TLBs, 32 tlbie instructions should be
716	 * issued, incrementing this field by one each time."
717	 *
718	 * "Note that the tlbia instruction is not implemented on the
719	 * 603e."
720	 *
721	 * bits 15-19 correspond to addresses 0x00000000 to 0x0001F000
722	 * incrementing by 0x1000 each time. The code below is sort of
723	 * based on code in "flush_tlbs" from arch/powerpc/kernel/head.S
724	 *
725	 */
726	lis	r3, 0
727	lis	r5, 2
728
7291:
730	tlbie	r3
731	addi	r3, r3, 0x1000
732	cmp	0, 0, r3, r5
733	blt	1b
734
735	blr
736
737/* Cache functions.
738 *
739 * Note: requires that all cache bits in
740 * HID0 are in the low half word.
741 */
742	.globl	icache_enable
743icache_enable:
744	mfspr	r3, HID0
745	ori	r3, r3, HID0_ICE
746	li	r4, HID0_ICFI|HID0_ILOCK
747	andc	r3, r3, r4
748	ori	r4, r3, HID0_ICFI
749	isync
750	mtspr	HID0, r4    /* sets enable and invalidate, clears lock */
751	isync
752	mtspr	HID0, r3	/* clears invalidate */
753	blr
754
755	.globl	icache_disable
756icache_disable:
757	mfspr	r3, HID0
758	lis	r4, 0
759	ori	r4, r4, HID0_ICE|HID0_ICFI|HID0_ILOCK
760	andc	r3, r3, r4
761	isync
762	mtspr	HID0, r3	/* clears invalidate, enable and lock */
763	blr
764
765	.globl	icache_status
766icache_status:
767	mfspr	r3, HID0
768	rlwinm	r3, r3, (31 - HID0_ICE_SHIFT + 1), 31, 31
769	blr
770
771	.globl	dcache_enable
772dcache_enable:
773	mfspr	r3, HID0
774	li	r5, HID0_DCFI|HID0_DLOCK
775	andc	r3, r3, r5
776	ori	r3, r3, HID0_DCE
777	sync
778	mtspr	HID0, r3		/* enable, no invalidate */
779	blr
780
781	.globl	dcache_disable
782dcache_disable:
783	mflr	r4
784	bl	flush_dcache		/* uses r3 and r5 */
785	mfspr	r3, HID0
786	li	r5, HID0_DCE|HID0_DLOCK
787	andc	r3, r3, r5
788	ori	r5, r3, HID0_DCFI
789	sync
790	mtspr	HID0, r5	/* sets invalidate, clears enable and lock */
791	sync
792	mtspr	HID0, r3	/* clears invalidate */
793	mtlr	r4
794	blr
795
796	.globl	dcache_status
797dcache_status:
798	mfspr	r3, HID0
799	rlwinm	r3, r3, (31 - HID0_DCE_SHIFT + 1), 31, 31
800	blr
801
802	.globl	flush_dcache
803flush_dcache:
804	lis	r3, 0
805	lis	r5, CONFIG_SYS_CACHELINE_SIZE
8061:	cmp	0, 1, r3, r5
807	bge	2f
808	lwz	r5, 0(r3)
809	lis	r5, CONFIG_SYS_CACHELINE_SIZE
810	addi	r3, r3, 0x4
811	b	1b
8122:	blr
813
814/*-------------------------------------------------------------------*/
815
816/*
817 * void relocate_code (addr_sp, gd, addr_moni)
818 *
819 * This "function" does not return, instead it continues in RAM
820 * after relocating the monitor code.
821 *
822 * r3 = dest
823 * r4 = src
824 * r5 = length in bytes
825 * r6 = cachelinesize
826 */
827	.globl	relocate_code
828relocate_code:
829	mr	r1,  r3		/* Set new stack pointer	*/
830	mr	r9,  r4		/* Save copy of Global Data pointer */
831	mr	r10, r5		/* Save copy of Destination Address */
832
833	GET_GOT
834	mr	r3,  r5				/* Destination Address */
835	lis	r4, CONFIG_SYS_MONITOR_BASE@h		/* Source      Address */
836	ori	r4, r4, CONFIG_SYS_MONITOR_BASE@l
837	lwz	r5, GOT(__bss_start)
838	sub	r5, r5, r4
839	li	r6, CONFIG_SYS_CACHELINE_SIZE		/* Cache Line Size */
840
841	/*
842	 * Fix GOT pointer:
843	 *
844	 * New GOT-PTR = (old GOT-PTR - CONFIG_SYS_MONITOR_BASE)
845	 *		+ Destination Address
846	 *
847	 * Offset:
848	 */
849	sub	r15, r10, r4
850
851	/* First our own GOT */
852	add	r12, r12, r15
853	/* then the one used by the C code */
854	add	r30, r30, r15
855
856	/*
857	 * Now relocate code
858	 */
859
860	cmplw	cr1,r3,r4
861	addi	r0,r5,3
862	srwi.	r0,r0,2
863	beq	cr1,4f		/* In place copy is not necessary */
864	beq	7f		/* Protect against 0 count	  */
865	mtctr	r0
866	bge	cr1,2f
867	la	r8,-4(r4)
868	la	r7,-4(r3)
869
870	/* copy */
8711:	lwzu	r0,4(r8)
872	stwu	r0,4(r7)
873	bdnz	1b
874
875	addi	r0,r5,3
876	srwi.	r0,r0,2
877	mtctr	r0
878	la	r8,-4(r4)
879	la	r7,-4(r3)
880
881	/* and compare */
88220:	lwzu	r20,4(r8)
883	lwzu	r21,4(r7)
884	xor. r22, r20, r21
885	bne  30f
886	bdnz	20b
887	b 4f
888
889	/* compare failed */
89030:	li r3, 0
891	blr
892
8932:	slwi	r0,r0,2 /* re copy in reverse order ... y do we needed it? */
894	add	r8,r4,r0
895	add	r7,r3,r0
8963:	lwzu	r0,-4(r8)
897	stwu	r0,-4(r7)
898	bdnz	3b
899
900/*
901 * Now flush the cache: note that we must start from a cache aligned
902 * address. Otherwise we might miss one cache line.
903 */
9044:	cmpwi	r6,0
905	add	r5,r3,r5
906	beq	7f		/* Always flush prefetch queue in any case */
907	subi	r0,r6,1
908	andc	r3,r3,r0
909	mr	r4,r3
9105:	dcbst	0,r4
911	add	r4,r4,r6
912	cmplw	r4,r5
913	blt	5b
914	sync			/* Wait for all dcbst to complete on bus */
915	mr	r4,r3
9166:	icbi	0,r4
917	add	r4,r4,r6
918	cmplw	r4,r5
919	blt	6b
9207:	sync			/* Wait for all icbi to complete on bus	*/
921	isync
922
923/*
924 * We are done. Do not return, instead branch to second part of board
925 * initialization, now running from RAM.
926 */
927	addi	r0, r10, in_ram - _start + EXC_OFF_SYS_RESET
928	mtlr	r0
929	blr
930
931in_ram:
932
933	/*
934	 * Relocation Function, r12 point to got2+0x8000
935	 *
936	 * Adjust got2 pointers, no need to check for 0, this code
937	 * already puts a few entries in the table.
938	 */
939	li	r0,__got2_entries@sectoff@l
940	la	r3,GOT(_GOT2_TABLE_)
941	lwz	r11,GOT(_GOT2_TABLE_)
942	mtctr	r0
943	sub	r11,r3,r11
944	addi	r3,r3,-4
9451:	lwzu	r0,4(r3)
946	cmpwi	r0,0
947	beq-	2f
948	add	r0,r0,r11
949	stw	r0,0(r3)
9502:	bdnz	1b
951
952#ifndef CONFIG_NAND_SPL
953	/*
954	 * Now adjust the fixups and the pointers to the fixups
955	 * in case we need to move ourselves again.
956	 */
957	li	r0,__fixup_entries@sectoff@l
958	lwz	r3,GOT(_FIXUP_TABLE_)
959	cmpwi	r0,0
960	mtctr	r0
961	addi	r3,r3,-4
962	beq	4f
9633:	lwzu	r4,4(r3)
964	lwzux	r0,r4,r11
965	add	r0,r0,r11
966	stw	r10,0(r3)
967	stw	r0,0(r4)
968	bdnz	3b
9694:
970#endif
971
972clear_bss:
973	/*
974	 * Now clear BSS segment
975	 */
976	lwz	r3,GOT(__bss_start)
977#if defined(CONFIG_HYMOD)
978	/*
979	 * For HYMOD - the environment is the very last item in flash.
980	 * The real .bss stops just before environment starts, so only
981	 * clear up to that point.
982	 *
983	 * taken from mods for FADS board
984	 */
985	lwz	r4,GOT(environment)
986#else
987	lwz	r4,GOT(_end)
988#endif
989
990	cmplw	0, r3, r4
991	beq	6f
992
993	li	r0, 0
9945:
995	stw	r0, 0(r3)
996	addi	r3, r3, 4
997	cmplw	0, r3, r4
998	bne	5b
9996:
1000
1001	mr	r3, r9		/* Global Data pointer		*/
1002	mr	r4, r10		/* Destination Address		*/
1003	bl	board_init_r
1004
1005#ifndef CONFIG_NAND_SPL
1006	/*
1007	 * Copy exception vector code to low memory
1008	 *
1009	 * r3: dest_addr
1010	 * r7: source address, r8: end address, r9: target address
1011	 */
1012	.globl	trap_init
1013trap_init:
1014	mflr	r4		/* save link register */
1015	GET_GOT
1016	lwz	r7, GOT(_start)
1017	lwz	r8, GOT(_end_of_vectors)
1018
1019	li	r9, 0x100	/* reset vector always at 0x100 */
1020
1021	cmplw	0, r7, r8
1022	bgelr			/* return if r7>=r8 - just in case */
10231:
1024	lwz	r0, 0(r7)
1025	stw	r0, 0(r9)
1026	addi	r7, r7, 4
1027	addi	r9, r9, 4
1028	cmplw	0, r7, r8
1029	bne	1b
1030
1031	/*
1032	 * relocate `hdlr' and `int_return' entries
1033	 */
1034	li	r7, .L_MachineCheck - _start + EXC_OFF_SYS_RESET
1035	li	r8, Alignment - _start + EXC_OFF_SYS_RESET
10362:
1037	bl	trap_reloc
1038	addi	r7, r7, 0x100		/* next exception vector */
1039	cmplw	0, r7, r8
1040	blt	2b
1041
1042	li	r7, .L_Alignment - _start + EXC_OFF_SYS_RESET
1043	bl	trap_reloc
1044
1045	li	r7, .L_ProgramCheck - _start + EXC_OFF_SYS_RESET
1046	bl	trap_reloc
1047
1048	li	r7, .L_FPUnavailable - _start + EXC_OFF_SYS_RESET
1049	li	r8, SystemCall - _start + EXC_OFF_SYS_RESET
10503:
1051	bl	trap_reloc
1052	addi	r7, r7, 0x100		/* next exception vector */
1053	cmplw	0, r7, r8
1054	blt	3b
1055
1056	li	r7, .L_SingleStep - _start + EXC_OFF_SYS_RESET
1057	li	r8, _end_of_vectors - _start + EXC_OFF_SYS_RESET
10584:
1059	bl	trap_reloc
1060	addi	r7, r7, 0x100		/* next exception vector */
1061	cmplw	0, r7, r8
1062	blt	4b
1063
1064	mfmsr	r3			/* now that the vectors have */
1065	lis	r7, MSR_IP@h		/* relocated into low memory */
1066	ori	r7, r7, MSR_IP@l	/* MSR[IP] can be turned off */
1067	andc	r3, r3, r7		/* (if it was on) */
1068	SYNC				/* Some chip revs need this... */
1069	mtmsr	r3
1070	SYNC
1071
1072	mtlr	r4			/* restore link register    */
1073	blr
1074
1075#endif /* !CONFIG_NAND_SPL */
1076
1077#ifdef CONFIG_SYS_INIT_RAM_LOCK
1078lock_ram_in_cache:
1079	/* Allocate Initial RAM in data cache.
1080	 */
1081	lis	r3, (CONFIG_SYS_INIT_RAM_ADDR & ~31)@h
1082	ori	r3, r3, (CONFIG_SYS_INIT_RAM_ADDR & ~31)@l
1083	li	r4, ((CONFIG_SYS_INIT_RAM_END & ~31) + \
1084		     (CONFIG_SYS_INIT_RAM_ADDR & 31) + 31) / 32
1085	mtctr	r4
10861:
1087	dcbz	r0, r3
1088	addi	r3, r3, 32
1089	bdnz	1b
1090
1091	/* Lock the data cache */
1092	mfspr	r0, HID0
1093	ori	r0, r0, HID0_DLOCK
1094	sync
1095	mtspr	HID0, r0
1096	sync
1097	blr
1098
1099#ifndef CONFIG_NAND_SPL
1100.globl unlock_ram_in_cache
1101unlock_ram_in_cache:
1102	/* invalidate the INIT_RAM section */
1103	lis	r3, (CONFIG_SYS_INIT_RAM_ADDR & ~31)@h
1104	ori	r3, r3, (CONFIG_SYS_INIT_RAM_ADDR & ~31)@l
1105	li	r4, ((CONFIG_SYS_INIT_RAM_END & ~31) + \
1106		     (CONFIG_SYS_INIT_RAM_ADDR & 31) + 31) / 32
1107	mtctr	r4
11081:	icbi	r0, r3
1109	dcbi	r0, r3
1110	addi	r3, r3, 32
1111	bdnz	1b
1112	sync			/* Wait for all icbi to complete on bus	*/
1113	isync
1114
1115	/* Unlock the data cache and invalidate it */
1116	mfspr   r3, HID0
1117	li	r5, HID0_DLOCK|HID0_DCFI
1118	andc	r3, r3, r5		/* no invalidate, unlock */
1119	ori	r5, r3, HID0_DCFI	/* invalidate, unlock */
1120	sync
1121	mtspr	HID0, r5		/* invalidate, unlock */
1122	sync
1123	mtspr	HID0, r3		/* no invalidate, unlock */
1124	blr
1125#endif /* !CONFIG_NAND_SPL */
1126#endif /* CONFIG_SYS_INIT_RAM_LOCK */
1127
1128#ifdef CONFIG_SYS_FLASHBOOT
1129map_flash_by_law1:
1130	/* When booting from ROM (Flash or EPROM), clear the  */
1131	/* Address Mask in OR0 so ROM appears everywhere      */
1132	/*----------------------------------------------------*/
1133	lis	r3, (CONFIG_SYS_IMMR)@h  /* r3 <= CONFIG_SYS_IMMR    */
1134	lwz	r4, OR0@l(r3)
1135	li	r5, 0x7fff        /* r5 <= 0x00007FFFF */
1136	and	r4, r4, r5
1137	stw	r4, OR0@l(r3)     /* OR0 <= OR0 & 0x00007FFFF */
1138
1139	/* As MPC8349E User's Manual presented, when RCW[BMS] is set to 0,
1140	 * system will boot from 0x0000_0100, and the LBLAWBAR0[BASE_ADDR]
1141	 * reset value is 0x00000; when RCW[BMS] is set to 1, system will boot
1142	 * from 0xFFF0_0100, and the LBLAWBAR0[BASE_ADDR] reset value is
1143	 * 0xFF800.  From the hard resetting to here, the processor fetched and
1144	 * executed the instructions one by one.  There is not absolutely
1145	 * jumping happened.  Laterly, the u-boot code has to do an absolutely
1146	 * jumping to tell the CPU instruction fetching component what the
1147	 * u-boot TEXT base address is.  Because the TEXT base resides in the
1148	 * boot ROM memory space, to garantee the code can run smoothly after
1149	 * that jumping, we must map in the entire boot ROM by Local Access
1150	 * Window.  Sometimes, we desire an non-0x00000 or non-0xFF800 starting
1151	 * address for boot ROM, such as 0xFE000000.  In this case, the default
1152	 * LBIU Local Access Widow 0 will not cover this memory space.  So, we
1153	 * need another window to map in it.
1154	 */
1155	lis r4, (CONFIG_SYS_FLASH_BASE)@h
1156	ori r4, r4, (CONFIG_SYS_FLASH_BASE)@l
1157	stw r4, LBLAWBAR1(r3) /* LBLAWBAR1 <= CONFIG_SYS_FLASH_BASE */
1158
1159	/* Store 0x80000012 + log2(CONFIG_SYS_FLASH_SIZE) into LBLAWAR1 */
1160	lis r4, (0x80000012)@h
1161	ori r4, r4, (0x80000012)@l
1162	li r5, CONFIG_SYS_FLASH_SIZE
11631:	srawi. r5, r5, 1	/* r5 = r5 >> 1 */
1164	addi r4, r4, 1
1165	bne 1b
1166
1167	stw r4, LBLAWAR1(r3) /* LBLAWAR1 <= 8MB Flash Size */
1168	blr
1169
1170	/* Though all the LBIU Local Access Windows and LBC Banks will be
1171	 * initialized in the C code, we'd better configure boot ROM's
1172	 * window 0 and bank 0 correctly at here.
1173	 */
1174remap_flash_by_law0:
1175	/* Initialize the BR0 with the boot ROM starting address. */
1176	lwz r4, BR0(r3)
1177	li  r5, 0x7FFF
1178	and r4, r4, r5
1179	lis r5, (CONFIG_SYS_FLASH_BASE & 0xFFFF8000)@h
1180	ori r5, r5, (CONFIG_SYS_FLASH_BASE & 0xFFFF8000)@l
1181	or  r5, r5, r4
1182	stw r5, BR0(r3) /* r5 <= (CONFIG_SYS_FLASH_BASE & 0xFFFF8000) | (BR0 & 0x00007FFF) */
1183
1184	lwz r4, OR0(r3)
1185	lis r5, ~((CONFIG_SYS_FLASH_SIZE << 4) - 1)
1186	or r4, r4, r5
1187	stw r4, OR0(r3)
1188
1189	lis r4, (CONFIG_SYS_FLASH_BASE)@h
1190	ori r4, r4, (CONFIG_SYS_FLASH_BASE)@l
1191	stw r4, LBLAWBAR0(r3) /* LBLAWBAR0 <= CONFIG_SYS_FLASH_BASE */
1192
1193	/* Store 0x80000012 + log2(CONFIG_SYS_FLASH_SIZE) into LBLAWAR0 */
1194	lis r4, (0x80000012)@h
1195	ori r4, r4, (0x80000012)@l
1196	li r5, CONFIG_SYS_FLASH_SIZE
11971:	srawi. r5, r5, 1 /* r5 = r5 >> 1 */
1198	addi r4, r4, 1
1199	bne 1b
1200	stw r4, LBLAWAR0(r3) /* LBLAWAR0 <= Flash Size */
1201
1202
1203	xor r4, r4, r4
1204	stw r4, LBLAWBAR1(r3)
1205	stw r4, LBLAWAR1(r3) /* Off LBIU LAW1 */
1206	blr
1207#endif /* CONFIG_SYS_FLASHBOOT */
1208