1 | A random mix of items here, nothing very major. | 1 | arm pullreq for rc1. All minor bugfixes, except for the sve-default-vector-length |
---|---|---|---|
2 | patches, which are somewhere between a bugfix and a new feature. | ||
2 | 3 | ||
3 | thanks | 4 | thanks |
4 | -- PMM | 5 | -- PMM |
5 | 6 | ||
7 | The following changes since commit c08ccd1b53f488ac86c1f65cf7623dc91acc249a: | ||
6 | 8 | ||
7 | The following changes since commit d0dff238a87fa81393ed72754d4dc8b09e50b08b: | 9 | Merge remote-tracking branch 'remotes/rth-gitlab/tags/pull-tcg-20210726' into staging (2021-07-27 08:35:01 +0100) |
8 | 10 | ||
9 | Merge remote-tracking branch 'remotes/juanquintela/tags/migration/20170206' into staging (2017-02-07 15:29:26 +0000) | 11 | are available in the Git repository at: |
10 | 12 | ||
11 | are available in the git repository at: | 13 | https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20210727 |
12 | 14 | ||
13 | git://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20170207 | 15 | for you to fetch changes up to e229a179a503f2aee43a76888cf12fbdfe8a3749: |
14 | 16 | ||
15 | for you to fetch changes up to 7727b832886fafbdec7299eb7773dc9071bf4cdd: | 17 | hw: aspeed_gpio: Fix memory size (2021-07-27 11:00:00 +0100) |
16 | |||
17 | stellaris: Use the 'unimplemented' device for parts we don't implement (2017-02-07 18:30:00 +0000) | ||
18 | 18 | ||
19 | ---------------------------------------------------------------- | 19 | ---------------------------------------------------------------- |
20 | target-arm: | 20 | target-arm queue: |
21 | * new "unimplemented" device for stubbing out devices in a | 21 | * hw/arm/smmuv3: Check 31st bit to see if CD is valid |
22 | system model so accesses can be logged | 22 | * qemu-options.hx: Fix formatting of -machine memory-backend option |
23 | * stellaris: document the SoC memory map | 23 | * hw: aspeed_gpio: Fix memory size |
24 | * arm: create instruction syndromes for AArch32 data aborts | 24 | * hw/arm/nseries: Display hexadecimal value with '0x' prefix |
25 | * arm: Correctly handle watchpoints for BE32 CPUs | 25 | * Add sve-default-vector-length cpu property |
26 | * Fix Thumb-1 BE32 execution and disassembly | 26 | * docs: Update path that mentions deprecated.rst |
27 | * arm: Add cfgend parameter for ARM CPU selection | 27 | * hw/intc/armv7m_nvic: for v8.1M VECTPENDING hides S exceptions from NS |
28 | * sd: sdhci: check data length during dma_memory_read | 28 | * hw/intc/armv7m_nvic: Correct size of ICSR.VECTPENDING |
29 | * aspeed: add a watchdog controller | 29 | * hw/intc/armv7m_nvic: ISCR.ISRPENDING is set for non-enabled pending interrupts |
30 | * integratorcp: adding vmstate for save/restore | 30 | * target/arm: Report M-profile alignment faults correctly to the guest |
31 | * target/arm: Add missing 'return's after calling v7m_exception_taken() | ||
32 | * target/arm: Enforce that M-profile SP low 2 bits are always zero | ||
31 | 33 | ||
32 | ---------------------------------------------------------------- | 34 | ---------------------------------------------------------------- |
33 | Cédric Le Goater (2): | 35 | Joe Komlodi (1): |
34 | wdt: Add Aspeed watchdog device model | 36 | hw/arm/smmuv3: Check 31st bit to see if CD is valid |
35 | aspeed: add a watchdog controller | ||
36 | 37 | ||
37 | Julian Brown (4): | 38 | Joel Stanley (1): |
38 | hw/arm/integratorcp: Support specifying features via -cpu | 39 | hw: aspeed_gpio: Fix memory size |
39 | target/arm: Add cfgend parameter for ARM CPU selection. | ||
40 | Fix Thumb-1 BE32 execution and disassembly. | ||
41 | arm: Correctly handle watchpoints for BE32 CPUs | ||
42 | 40 | ||
43 | Pavel Dovgalyuk (1): | 41 | Mao Zhongyi (1): |
44 | integratorcp: adding vmstate for save/restore | 42 | docs: Update path that mentions deprecated.rst |
45 | 43 | ||
46 | Peter Maydell (5): | 44 | Peter Maydell (7): |
47 | target/arm: Abstract out pbit/wbit tests in ARM ldr/str decode | 45 | qemu-options.hx: Fix formatting of -machine memory-backend option |
48 | target/arm: A32, T32: Create Instruction Syndromes for Data Aborts | 46 | target/arm: Enforce that M-profile SP low 2 bits are always zero |
49 | stellaris: Document memory map and which SoC devices are unimplemented | 47 | target/arm: Add missing 'return's after calling v7m_exception_taken() |
50 | hw/misc: New "unimplemented" sysbus device | 48 | target/arm: Report M-profile alignment faults correctly to the guest |
51 | stellaris: Use the 'unimplemented' device for parts we don't implement | 49 | hw/intc/armv7m_nvic: ISCR.ISRPENDING is set for non-enabled pending interrupts |
50 | hw/intc/armv7m_nvic: Correct size of ICSR.VECTPENDING | ||
51 | hw/intc/armv7m_nvic: for v8.1M VECTPENDING hides S exceptions from NS | ||
52 | 52 | ||
53 | Prasad J Pandit (1): | 53 | Philippe Mathieu-Daudé (1): |
54 | sd: sdhci: check data length during dma_memory_read | 54 | hw/arm/nseries: Display hexadecimal value with '0x' prefix |
55 | 55 | ||
56 | hw/misc/Makefile.objs | 2 + | 56 | Richard Henderson (3): |
57 | hw/watchdog/Makefile.objs | 1 + | 57 | target/arm: Correctly bound length in sve_zcr_get_valid_len |
58 | include/disas/bfd.h | 7 ++ | 58 | target/arm: Export aarch64_sve_zcr_get_valid_len |
59 | include/hw/arm/aspeed_soc.h | 2 + | 59 | target/arm: Add sve-default-vector-length cpu property |
60 | include/hw/misc/unimp.h | 39 +++++++ | ||
61 | include/hw/watchdog/wdt_aspeed.h | 32 ++++++ | ||
62 | include/qom/cpu.h | 3 + | ||
63 | target/arm/arm_ldst.h | 10 +- | ||
64 | target/arm/cpu.h | 7 ++ | ||
65 | target/arm/internals.h | 5 + | ||
66 | target/arm/translate.h | 14 +++ | ||
67 | disas.c | 1 + | ||
68 | exec.c | 1 + | ||
69 | hw/arm/aspeed_soc.c | 13 +++ | ||
70 | hw/arm/integratorcp.c | 78 +++++++++++++- | ||
71 | hw/arm/stellaris.c | 48 +++++++++ | ||
72 | hw/misc/unimp.c | 107 +++++++++++++++++++ | ||
73 | hw/sd/sdhci.c | 2 +- | ||
74 | hw/watchdog/wdt_aspeed.c | 225 +++++++++++++++++++++++++++++++++++++++ | ||
75 | qom/cpu.c | 6 ++ | ||
76 | target/arm/cpu.c | 39 +++++++ | ||
77 | target/arm/op_helper.c | 22 ++++ | ||
78 | target/arm/translate-a64.c | 14 --- | ||
79 | target/arm/translate.c | 193 ++++++++++++++++++++++++--------- | ||
80 | 24 files changed, 801 insertions(+), 70 deletions(-) | ||
81 | create mode 100644 include/hw/misc/unimp.h | ||
82 | create mode 100644 include/hw/watchdog/wdt_aspeed.h | ||
83 | create mode 100644 hw/misc/unimp.c | ||
84 | create mode 100644 hw/watchdog/wdt_aspeed.c | ||
85 | 60 | ||
61 | docs/system/arm/cpu-features.rst | 15 ++++++++++ | ||
62 | configure | 2 +- | ||
63 | hw/arm/smmuv3-internal.h | 2 +- | ||
64 | target/arm/cpu.h | 5 ++++ | ||
65 | target/arm/internals.h | 10 +++++++ | ||
66 | hw/arm/nseries.c | 2 +- | ||
67 | hw/gpio/aspeed_gpio.c | 3 +- | ||
68 | hw/intc/armv7m_nvic.c | 40 +++++++++++++++++++-------- | ||
69 | target/arm/cpu.c | 14 ++++++++-- | ||
70 | target/arm/cpu64.c | 60 ++++++++++++++++++++++++++++++++++++++++ | ||
71 | target/arm/gdbstub.c | 4 +++ | ||
72 | target/arm/helper.c | 8 ++++-- | ||
73 | target/arm/m_helper.c | 24 ++++++++++++---- | ||
74 | target/arm/translate.c | 3 ++ | ||
75 | target/i386/cpu.c | 2 +- | ||
76 | MAINTAINERS | 2 +- | ||
77 | qemu-options.hx | 30 +++++++++++--------- | ||
78 | 17 files changed, 183 insertions(+), 43 deletions(-) | ||
79 | diff view generated by jsdifflib |
1 | From: Julian Brown <julian@codesourcery.com> | 1 | From: Joe Komlodi <joe.komlodi@xilinx.com> |
---|---|---|---|
2 | 2 | ||
3 | Thumb-1 code has some issues in BE32 mode (as currently implemented). In | 3 | The bit to see if a CD is valid is the last bit of the first word of the CD. |
4 | short, since bytes are swapped within words at load time for BE32 | ||
5 | executables, this also swaps pairs of adjacent Thumb-1 instructions. | ||
6 | 4 | ||
7 | This patch un-swaps those pairs of instructions again, both for execution, | 5 | Signed-off-by: Joe Komlodi <joe.komlodi@xilinx.com> |
8 | and for disassembly. (The previous version of the patch always read four | 6 | Message-id: 1626728232-134665-2-git-send-email-joe.komlodi@xilinx.com |
9 | bytes in arm_read_memory_func and then extracted the proper two bytes, | ||
10 | in a probably misguided attempt to match the behaviour of actual hardware | ||
11 | as described by e.g. the ARM9TDMI TRM, section 3.3 "Endian effects for | ||
12 | instruction fetches". It's less complicated to just read the correct | ||
13 | two bytes though.) | ||
14 | |||
15 | Signed-off-by: Julian Brown <julian@codesourcery.com> | ||
16 | Message-id: ca20462a044848000370318a8bd41dd0a4ed273f.1484929304.git.julian@codesourcery.com | ||
17 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 7 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
18 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 8 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
19 | --- | 9 | --- |
20 | include/disas/bfd.h | 7 +++++++ | 10 | hw/arm/smmuv3-internal.h | 2 +- |
21 | target/arm/arm_ldst.h | 10 +++++++++- | 11 | 1 file changed, 1 insertion(+), 1 deletion(-) |
22 | disas.c | 1 + | ||
23 | target/arm/cpu.c | 23 +++++++++++++++++++++++ | ||
24 | 4 files changed, 40 insertions(+), 1 deletion(-) | ||
25 | 12 | ||
26 | diff --git a/include/disas/bfd.h b/include/disas/bfd.h | 13 | diff --git a/hw/arm/smmuv3-internal.h b/hw/arm/smmuv3-internal.h |
27 | index XXXXXXX..XXXXXXX 100644 | 14 | index XXXXXXX..XXXXXXX 100644 |
28 | --- a/include/disas/bfd.h | 15 | --- a/hw/arm/smmuv3-internal.h |
29 | +++ b/include/disas/bfd.h | 16 | +++ b/hw/arm/smmuv3-internal.h |
30 | @@ -XXX,XX +XXX,XX @@ typedef struct disassemble_info { | 17 | @@ -XXX,XX +XXX,XX @@ static inline int pa_range(STE *ste) |
31 | The bottom 16 bits are for the internal use of the disassembler. */ | 18 | |
32 | unsigned long flags; | 19 | /* CD fields */ |
33 | #define INSN_HAS_RELOC 0x80000000 | 20 | |
34 | +#define INSN_ARM_BE32 0x00010000 | 21 | -#define CD_VALID(x) extract32((x)->word[0], 30, 1) |
35 | PTR private_data; | 22 | +#define CD_VALID(x) extract32((x)->word[0], 31, 1) |
36 | 23 | #define CD_ASID(x) extract32((x)->word[1], 16, 16) | |
37 | /* Function used to get bytes to disassemble. MEMADDR is the | 24 | #define CD_TTB(x, sel) \ |
38 | @@ -XXX,XX +XXX,XX @@ typedef struct disassemble_info { | 25 | ({ \ |
39 | (bfd_vma memaddr, bfd_byte *myaddr, int length, | ||
40 | struct disassemble_info *info); | ||
41 | |||
42 | + /* A place to stash the real read_memory_func if read_memory_func wants to | ||
43 | + do some funky address arithmetic or similar (e.g. for ARM BE32 mode). */ | ||
44 | + int (*read_memory_inner_func) | ||
45 | + (bfd_vma memaddr, bfd_byte *myaddr, int length, | ||
46 | + struct disassemble_info *info); | ||
47 | + | ||
48 | /* Function which should be called if we get an error that we can't | ||
49 | recover from. STATUS is the errno value from read_memory_func and | ||
50 | MEMADDR is the address that we were trying to read. INFO is a | ||
51 | diff --git a/target/arm/arm_ldst.h b/target/arm/arm_ldst.h | ||
52 | index XXXXXXX..XXXXXXX 100644 | ||
53 | --- a/target/arm/arm_ldst.h | ||
54 | +++ b/target/arm/arm_ldst.h | ||
55 | @@ -XXX,XX +XXX,XX @@ static inline uint32_t arm_ldl_code(CPUARMState *env, target_ulong addr, | ||
56 | static inline uint16_t arm_lduw_code(CPUARMState *env, target_ulong addr, | ||
57 | bool sctlr_b) | ||
58 | { | ||
59 | - uint16_t insn = cpu_lduw_code(env, addr); | ||
60 | + uint16_t insn; | ||
61 | +#ifndef CONFIG_USER_ONLY | ||
62 | + /* In big-endian (BE32) mode, adjacent Thumb instructions have been swapped | ||
63 | + within each word. Undo that now. */ | ||
64 | + if (sctlr_b) { | ||
65 | + addr ^= 2; | ||
66 | + } | ||
67 | +#endif | ||
68 | + insn = cpu_lduw_code(env, addr); | ||
69 | if (bswap_code(sctlr_b)) { | ||
70 | return bswap16(insn); | ||
71 | } | ||
72 | diff --git a/disas.c b/disas.c | ||
73 | index XXXXXXX..XXXXXXX 100644 | ||
74 | --- a/disas.c | ||
75 | +++ b/disas.c | ||
76 | @@ -XXX,XX +XXX,XX @@ void target_disas(FILE *out, CPUState *cpu, target_ulong code, | ||
77 | |||
78 | s.cpu = cpu; | ||
79 | s.info.read_memory_func = target_read_memory; | ||
80 | + s.info.read_memory_inner_func = NULL; | ||
81 | s.info.buffer_vma = code; | ||
82 | s.info.buffer_length = size; | ||
83 | s.info.print_address_func = generic_print_address; | ||
84 | diff --git a/target/arm/cpu.c b/target/arm/cpu.c | ||
85 | index XXXXXXX..XXXXXXX 100644 | ||
86 | --- a/target/arm/cpu.c | ||
87 | +++ b/target/arm/cpu.c | ||
88 | @@ -XXX,XX +XXX,XX @@ print_insn_thumb1(bfd_vma pc, disassemble_info *info) | ||
89 | return print_insn_arm(pc | 1, info); | ||
90 | } | ||
91 | |||
92 | +static int arm_read_memory_func(bfd_vma memaddr, bfd_byte *b, | ||
93 | + int length, struct disassemble_info *info) | ||
94 | +{ | ||
95 | + assert(info->read_memory_inner_func); | ||
96 | + assert((info->flags & INSN_ARM_BE32) == 0 || length == 2 || length == 4); | ||
97 | + | ||
98 | + if ((info->flags & INSN_ARM_BE32) != 0 && length == 2) { | ||
99 | + assert(info->endian == BFD_ENDIAN_LITTLE); | ||
100 | + return info->read_memory_inner_func(memaddr ^ 2, (bfd_byte *)b, 2, | ||
101 | + info); | ||
102 | + } else { | ||
103 | + return info->read_memory_inner_func(memaddr, b, length, info); | ||
104 | + } | ||
105 | +} | ||
106 | + | ||
107 | static void arm_disas_set_info(CPUState *cpu, disassemble_info *info) | ||
108 | { | ||
109 | ARMCPU *ac = ARM_CPU(cpu); | ||
110 | @@ -XXX,XX +XXX,XX @@ static void arm_disas_set_info(CPUState *cpu, disassemble_info *info) | ||
111 | info->endian = BFD_ENDIAN_BIG; | ||
112 | #endif | ||
113 | } | ||
114 | + if (info->read_memory_inner_func == NULL) { | ||
115 | + info->read_memory_inner_func = info->read_memory_func; | ||
116 | + info->read_memory_func = arm_read_memory_func; | ||
117 | + } | ||
118 | + info->flags &= ~INSN_ARM_BE32; | ||
119 | + if (arm_sctlr_b(env)) { | ||
120 | + info->flags |= INSN_ARM_BE32; | ||
121 | + } | ||
122 | } | ||
123 | |||
124 | static void arm_cpu_initfn(Object *obj) | ||
125 | -- | 26 | -- |
126 | 2.7.4 | 27 | 2.20.1 |
127 | 28 | ||
128 | 29 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | The documentation of the -machine memory-backend has some minor | ||
2 | formatting errors: | ||
3 | * Misindentation of the initial line meant that the whole option | ||
4 | section is incorrectly indented in the HTML output compared to | ||
5 | the other -machine options | ||
6 | * The examples weren't indented, which meant that they were formatted | ||
7 | as plain run-on text including outputting the "::" as text. | ||
8 | * The a) b) list has no rst-format markup so it is rendered as | ||
9 | a single run-on paragraph | ||
1 | 10 | ||
11 | Fix the formatting. | ||
12 | |||
13 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
14 | Reviewed-by: Igor Mammedov <imammedo@redhat.com> | ||
15 | Message-id: 20210719105257.3599-1-peter.maydell@linaro.org | ||
16 | --- | ||
17 | qemu-options.hx | 30 +++++++++++++++++------------- | ||
18 | 1 file changed, 17 insertions(+), 13 deletions(-) | ||
19 | |||
20 | diff --git a/qemu-options.hx b/qemu-options.hx | ||
21 | index XXXXXXX..XXXXXXX 100644 | ||
22 | --- a/qemu-options.hx | ||
23 | +++ b/qemu-options.hx | ||
24 | @@ -XXX,XX +XXX,XX @@ SRST | ||
25 | Enables or disables ACPI Heterogeneous Memory Attribute Table | ||
26 | (HMAT) support. The default is off. | ||
27 | |||
28 | - ``memory-backend='id'`` | ||
29 | + ``memory-backend='id'`` | ||
30 | An alternative to legacy ``-mem-path`` and ``mem-prealloc`` options. | ||
31 | Allows to use a memory backend as main RAM. | ||
32 | |||
33 | For example: | ||
34 | :: | ||
35 | - -object memory-backend-file,id=pc.ram,size=512M,mem-path=/hugetlbfs,prealloc=on,share=on | ||
36 | - -machine memory-backend=pc.ram | ||
37 | - -m 512M | ||
38 | + | ||
39 | + -object memory-backend-file,id=pc.ram,size=512M,mem-path=/hugetlbfs,prealloc=on,share=on | ||
40 | + -machine memory-backend=pc.ram | ||
41 | + -m 512M | ||
42 | |||
43 | Migration compatibility note: | ||
44 | - a) as backend id one shall use value of 'default-ram-id', advertised by | ||
45 | - machine type (available via ``query-machines`` QMP command), if migration | ||
46 | - to/from old QEMU (<5.0) is expected. | ||
47 | - b) for machine types 4.0 and older, user shall | ||
48 | - use ``x-use-canonical-path-for-ramblock-id=off`` backend option | ||
49 | - if migration to/from old QEMU (<5.0) is expected. | ||
50 | + | ||
51 | + * as backend id one shall use value of 'default-ram-id', advertised by | ||
52 | + machine type (available via ``query-machines`` QMP command), if migration | ||
53 | + to/from old QEMU (<5.0) is expected. | ||
54 | + * for machine types 4.0 and older, user shall | ||
55 | + use ``x-use-canonical-path-for-ramblock-id=off`` backend option | ||
56 | + if migration to/from old QEMU (<5.0) is expected. | ||
57 | + | ||
58 | For example: | ||
59 | :: | ||
60 | - -object memory-backend-ram,id=pc.ram,size=512M,x-use-canonical-path-for-ramblock-id=off | ||
61 | - -machine memory-backend=pc.ram | ||
62 | - -m 512M | ||
63 | + | ||
64 | + -object memory-backend-ram,id=pc.ram,size=512M,x-use-canonical-path-for-ramblock-id=off | ||
65 | + -machine memory-backend=pc.ram | ||
66 | + -m 512M | ||
67 | ERST | ||
68 | |||
69 | HXCOMM Deprecated by -machine | ||
70 | -- | ||
71 | 2.20.1 | ||
72 | |||
73 | diff view generated by jsdifflib |
1 | In the ARM ldr/str decode path, rather than directly testing | 1 | For M-profile, unlike A-profile, the low 2 bits of SP are defined to be |
---|---|---|---|
2 | "insn & (1 << 21)" and "insn & (1 << 24)", abstract these | 2 | RES0H, which is to say that they must be hardwired to zero so that |
3 | bits out into wbit and pbit local flags. (We will want to | 3 | guest attempts to write non-zero values to them are ignored. |
4 | do more tests against them to determine whether we need to | 4 | |
5 | provide syndrome information.) | 5 | Implement this behaviour by masking out the low bits: |
6 | * for writes to r13 by the gdbstub | ||
7 | * for writes to any of the various flavours of SP via MSR | ||
8 | * for writes to r13 via store_reg() in generated code | ||
9 | |||
10 | Note that all the direct uses of cpu_R[] in translate.c are in places | ||
11 | where the register is definitely not r13 (usually because that has | ||
12 | been checked for as an UNDEFINED or UNPREDICTABLE case and handled as | ||
13 | UNDEF). | ||
14 | |||
15 | All the other writes to regs[13] in C code are either: | ||
16 | * A-profile only code | ||
17 | * writes of values we can guarantee to be aligned, such as | ||
18 | - writes of previous-SP-value plus or minus a 4-aligned constant | ||
19 | - writes of the value in an SP limit register (which we already | ||
20 | enforce to be aligned) | ||
6 | 21 | ||
7 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 22 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
8 | Reviewed-by: Edgar E. Iglesias <edgar.iglesias@xilinx.com> | 23 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> |
24 | Message-id: 20210723162146.5167-2-peter.maydell@linaro.org | ||
9 | --- | 25 | --- |
10 | target/arm/translate.c | 9 ++++++--- | 26 | target/arm/gdbstub.c | 4 ++++ |
11 | 1 file changed, 6 insertions(+), 3 deletions(-) | 27 | target/arm/m_helper.c | 14 ++++++++------ |
28 | target/arm/translate.c | 3 +++ | ||
29 | 3 files changed, 15 insertions(+), 6 deletions(-) | ||
12 | 30 | ||
31 | diff --git a/target/arm/gdbstub.c b/target/arm/gdbstub.c | ||
32 | index XXXXXXX..XXXXXXX 100644 | ||
33 | --- a/target/arm/gdbstub.c | ||
34 | +++ b/target/arm/gdbstub.c | ||
35 | @@ -XXX,XX +XXX,XX @@ int arm_cpu_gdb_write_register(CPUState *cs, uint8_t *mem_buf, int n) | ||
36 | |||
37 | if (n < 16) { | ||
38 | /* Core integer register. */ | ||
39 | + if (n == 13 && arm_feature(env, ARM_FEATURE_M)) { | ||
40 | + /* M profile SP low bits are always 0 */ | ||
41 | + tmp &= ~3; | ||
42 | + } | ||
43 | env->regs[n] = tmp; | ||
44 | return 4; | ||
45 | } | ||
46 | diff --git a/target/arm/m_helper.c b/target/arm/m_helper.c | ||
47 | index XXXXXXX..XXXXXXX 100644 | ||
48 | --- a/target/arm/m_helper.c | ||
49 | +++ b/target/arm/m_helper.c | ||
50 | @@ -XXX,XX +XXX,XX @@ void HELPER(v7m_msr)(CPUARMState *env, uint32_t maskreg, uint32_t val) | ||
51 | if (!env->v7m.secure) { | ||
52 | return; | ||
53 | } | ||
54 | - env->v7m.other_ss_msp = val; | ||
55 | + env->v7m.other_ss_msp = val & ~3; | ||
56 | return; | ||
57 | case 0x89: /* PSP_NS */ | ||
58 | if (!env->v7m.secure) { | ||
59 | return; | ||
60 | } | ||
61 | - env->v7m.other_ss_psp = val; | ||
62 | + env->v7m.other_ss_psp = val & ~3; | ||
63 | return; | ||
64 | case 0x8a: /* MSPLIM_NS */ | ||
65 | if (!env->v7m.secure) { | ||
66 | @@ -XXX,XX +XXX,XX @@ void HELPER(v7m_msr)(CPUARMState *env, uint32_t maskreg, uint32_t val) | ||
67 | |||
68 | limit = is_psp ? env->v7m.psplim[false] : env->v7m.msplim[false]; | ||
69 | |||
70 | + val &= ~0x3; | ||
71 | + | ||
72 | if (val < limit) { | ||
73 | raise_exception_ra(env, EXCP_STKOF, 0, 1, GETPC()); | ||
74 | } | ||
75 | @@ -XXX,XX +XXX,XX @@ void HELPER(v7m_msr)(CPUARMState *env, uint32_t maskreg, uint32_t val) | ||
76 | break; | ||
77 | case 8: /* MSP */ | ||
78 | if (v7m_using_psp(env)) { | ||
79 | - env->v7m.other_sp = val; | ||
80 | + env->v7m.other_sp = val & ~3; | ||
81 | } else { | ||
82 | - env->regs[13] = val; | ||
83 | + env->regs[13] = val & ~3; | ||
84 | } | ||
85 | break; | ||
86 | case 9: /* PSP */ | ||
87 | if (v7m_using_psp(env)) { | ||
88 | - env->regs[13] = val; | ||
89 | + env->regs[13] = val & ~3; | ||
90 | } else { | ||
91 | - env->v7m.other_sp = val; | ||
92 | + env->v7m.other_sp = val & ~3; | ||
93 | } | ||
94 | break; | ||
95 | case 10: /* MSPLIM */ | ||
13 | diff --git a/target/arm/translate.c b/target/arm/translate.c | 96 | diff --git a/target/arm/translate.c b/target/arm/translate.c |
14 | index XXXXXXX..XXXXXXX 100644 | 97 | index XXXXXXX..XXXXXXX 100644 |
15 | --- a/target/arm/translate.c | 98 | --- a/target/arm/translate.c |
16 | +++ b/target/arm/translate.c | 99 | +++ b/target/arm/translate.c |
17 | @@ -XXX,XX +XXX,XX @@ static void disas_arm_insn(DisasContext *s, unsigned int insn) | 100 | @@ -XXX,XX +XXX,XX @@ void store_reg(DisasContext *s, int reg, TCGv_i32 var) |
18 | } else { | 101 | */ |
19 | int address_offset; | 102 | tcg_gen_andi_i32(var, var, s->thumb ? ~1 : ~3); |
20 | bool load = insn & (1 << 20); | 103 | s->base.is_jmp = DISAS_JUMP; |
21 | + bool wbit = insn & (1 << 21); | 104 | + } else if (reg == 13 && arm_dc_feature(s, ARM_FEATURE_M)) { |
22 | + bool pbit = insn & (1 << 24); | 105 | + /* For M-profile SP bits [1:0] are always zero */ |
23 | bool doubleword = false; | 106 | + tcg_gen_andi_i32(var, var, ~3); |
24 | /* Misc load/store */ | 107 | } |
25 | rn = (insn >> 16) & 0xf; | 108 | tcg_gen_mov_i32(cpu_R[reg], var); |
26 | @@ -XXX,XX +XXX,XX @@ static void disas_arm_insn(DisasContext *s, unsigned int insn) | 109 | tcg_temp_free_i32(var); |
27 | } | ||
28 | |||
29 | addr = load_reg(s, rn); | ||
30 | - if (insn & (1 << 24)) | ||
31 | + if (pbit) { | ||
32 | gen_add_datah_offset(s, insn, 0, addr); | ||
33 | + } | ||
34 | address_offset = 0; | ||
35 | |||
36 | if (doubleword) { | ||
37 | @@ -XXX,XX +XXX,XX @@ static void disas_arm_insn(DisasContext *s, unsigned int insn) | ||
38 | ensure correct behavior with overlapping index registers. | ||
39 | ldrd with base writeback is undefined if the | ||
40 | destination and index registers overlap. */ | ||
41 | - if (!(insn & (1 << 24))) { | ||
42 | + if (!pbit) { | ||
43 | gen_add_datah_offset(s, insn, address_offset, addr); | ||
44 | store_reg(s, rn, addr); | ||
45 | - } else if (insn & (1 << 21)) { | ||
46 | + } else if (wbit) { | ||
47 | if (address_offset) | ||
48 | tcg_gen_addi_i32(addr, addr, address_offset); | ||
49 | store_reg(s, rn, addr); | ||
50 | -- | 110 | -- |
51 | 2.7.4 | 111 | 2.20.1 |
52 | 112 | ||
53 | 113 | diff view generated by jsdifflib |
1 | Use the 'unimplemented' dummy device to cover regions of the | 1 | In do_v7m_exception_exit(), we perform various checks as part of |
---|---|---|---|
2 | SoC device memory map which we don't have proper device | 2 | performing the exception return. If one of these checks fails, the |
3 | implementations for yet. | 3 | architecture requires that we take an appropriate exception on the |
4 | existing stackframe. We implement this by calling | ||
5 | v7m_exception_taken() to set up to take the new exception, and then | ||
6 | immediately returning from do_v7m_exception_exit() without proceeding | ||
7 | any further with the unstack-and-exception-return process. | ||
8 | |||
9 | In a couple of checks that are new in v8.1M, we forgot the "return" | ||
10 | statement, with the effect that if bad code in the guest tripped over | ||
11 | these checks we would set up to take a UsageFault exception but then | ||
12 | blunder on trying to also unstack and return from the original | ||
13 | exception, with the probable result that the guest would crash. | ||
14 | |||
15 | Add the missing return statements. | ||
4 | 16 | ||
5 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 17 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
6 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | 18 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> |
7 | Message-id: 1484247815-15279-4-git-send-email-peter.maydell@linaro.org | 19 | Message-id: 20210723162146.5167-3-peter.maydell@linaro.org |
8 | --- | 20 | --- |
9 | hw/arm/stellaris.c | 14 ++++++++++++++ | 21 | target/arm/m_helper.c | 2 ++ |
10 | 1 file changed, 14 insertions(+) | 22 | 1 file changed, 2 insertions(+) |
11 | 23 | ||
12 | diff --git a/hw/arm/stellaris.c b/hw/arm/stellaris.c | 24 | diff --git a/target/arm/m_helper.c b/target/arm/m_helper.c |
13 | index XXXXXXX..XXXXXXX 100644 | 25 | index XXXXXXX..XXXXXXX 100644 |
14 | --- a/hw/arm/stellaris.c | 26 | --- a/target/arm/m_helper.c |
15 | +++ b/hw/arm/stellaris.c | 27 | +++ b/target/arm/m_helper.c |
16 | @@ -XXX,XX +XXX,XX @@ | 28 | @@ -XXX,XX +XXX,XX @@ static void do_v7m_exception_exit(ARMCPU *cpu) |
17 | #include "exec/address-spaces.h" | 29 | qemu_log_mask(CPU_LOG_INT, "...taking UsageFault on existing " |
18 | #include "sysemu/sysemu.h" | 30 | "stackframe: NSACR prevents clearing FPU registers\n"); |
19 | #include "hw/char/pl011.h" | 31 | v7m_exception_taken(cpu, excret, true, false); |
20 | +#include "hw/misc/unimp.h" | 32 | + return; |
21 | 33 | } else if (!cpacr_pass) { | |
22 | #define GPIO_A 0 | 34 | armv7m_nvic_set_pending(env->nvic, ARMV7M_EXCP_USAGE, |
23 | #define GPIO_B 1 | 35 | exc_secure); |
24 | @@ -XXX,XX +XXX,XX @@ static void stellaris_init(const char *kernel_filename, const char *cpu_model, | 36 | @@ -XXX,XX +XXX,XX @@ static void do_v7m_exception_exit(ARMCPU *cpu) |
37 | qemu_log_mask(CPU_LOG_INT, "...taking UsageFault on existing " | ||
38 | "stackframe: CPACR prevents clearing FPU registers\n"); | ||
39 | v7m_exception_taken(cpu, excret, true, false); | ||
40 | + return; | ||
41 | } | ||
25 | } | 42 | } |
26 | } | 43 | /* Clear s0..s15, FPSCR and VPR */ |
27 | } | ||
28 | + | ||
29 | + /* Add dummy regions for the devices we don't implement yet, | ||
30 | + * so guest accesses don't cause unlogged crashes. | ||
31 | + */ | ||
32 | + create_unimplemented_device("wdtimer", 0x40000000, 0x1000); | ||
33 | + create_unimplemented_device("i2c-0", 0x40002000, 0x1000); | ||
34 | + create_unimplemented_device("i2c-2", 0x40021000, 0x1000); | ||
35 | + create_unimplemented_device("PWM", 0x40028000, 0x1000); | ||
36 | + create_unimplemented_device("QEI-0", 0x4002c000, 0x1000); | ||
37 | + create_unimplemented_device("QEI-1", 0x4002d000, 0x1000); | ||
38 | + create_unimplemented_device("analogue-comparator", 0x4003c000, 0x1000); | ||
39 | + create_unimplemented_device("hibernation", 0x400fc000, 0x1000); | ||
40 | + create_unimplemented_device("flash-control", 0x400fd000, 0x1000); | ||
41 | } | ||
42 | |||
43 | /* FIXME: Figure out how to generate these from stellaris_boards. */ | ||
44 | -- | 44 | -- |
45 | 2.7.4 | 45 | 2.20.1 |
46 | 46 | ||
47 | 47 | diff view generated by jsdifflib |
1 | Create a new "unimplemented" sysbus device, which simply accepts | 1 | For M-profile, we weren't reporting alignment faults triggered by the |
---|---|---|---|
2 | all read and write accesses, and implements them as read-as-zero, | 2 | generic TCG code correctly to the guest. These get passed into |
3 | write-ignored, with logging of the access as LOG_UNIMP. | 3 | arm_v7m_cpu_do_interrupt() as an EXCP_DATA_ABORT with an A-profile |
4 | style exception.fsr value of 1. We didn't check for this, and so | ||
5 | they fell through into the default of "assume this is an MPU fault" | ||
6 | and were reported to the guest as a data access violation MPU fault. | ||
4 | 7 | ||
5 | This is useful for stubbing out bits of an SoC or board model | 8 | Report these alignment faults as UsageFaults which set the UNALIGNED |
6 | which haven't been written yet. | 9 | bit in the UFSR. |
7 | 10 | ||
8 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 11 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
9 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | 12 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> |
10 | Message-id: 1484247815-15279-3-git-send-email-peter.maydell@linaro.org | 13 | Message-id: 20210723162146.5167-4-peter.maydell@linaro.org |
11 | --- | 14 | --- |
12 | hw/misc/Makefile.objs | 2 + | 15 | target/arm/m_helper.c | 8 ++++++++ |
13 | include/hw/misc/unimp.h | 39 ++++++++++++++++++ | 16 | 1 file changed, 8 insertions(+) |
14 | hw/misc/unimp.c | 107 ++++++++++++++++++++++++++++++++++++++++++++++++ | ||
15 | 3 files changed, 148 insertions(+) | ||
16 | create mode 100644 include/hw/misc/unimp.h | ||
17 | create mode 100644 hw/misc/unimp.c | ||
18 | 17 | ||
19 | diff --git a/hw/misc/Makefile.objs b/hw/misc/Makefile.objs | 18 | diff --git a/target/arm/m_helper.c b/target/arm/m_helper.c |
20 | index XXXXXXX..XXXXXXX 100644 | 19 | index XXXXXXX..XXXXXXX 100644 |
21 | --- a/hw/misc/Makefile.objs | 20 | --- a/target/arm/m_helper.c |
22 | +++ b/hw/misc/Makefile.objs | 21 | +++ b/target/arm/m_helper.c |
23 | @@ -XXX,XX +XXX,XX @@ common-obj-$(CONFIG_SGA) += sga.o | 22 | @@ -XXX,XX +XXX,XX @@ void arm_v7m_cpu_do_interrupt(CPUState *cs) |
24 | common-obj-$(CONFIG_ISA_TESTDEV) += pc-testdev.o | 23 | env->v7m.sfsr |= R_V7M_SFSR_LSERR_MASK; |
25 | common-obj-$(CONFIG_PCI_TESTDEV) += pci-testdev.o | 24 | break; |
26 | 25 | case EXCP_UNALIGNED: | |
27 | +common-obj-y += unimp.o | 26 | + /* Unaligned faults reported by M-profile aware code */ |
28 | + | 27 | armv7m_nvic_set_pending(env->nvic, ARMV7M_EXCP_USAGE, env->v7m.secure); |
29 | obj-$(CONFIG_VMPORT) += vmport.o | 28 | env->v7m.cfsr[env->v7m.secure] |= R_V7M_CFSR_UNALIGNED_MASK; |
30 | 29 | break; | |
31 | # ARM devices | 30 | @@ -XXX,XX +XXX,XX @@ void arm_v7m_cpu_do_interrupt(CPUState *cs) |
32 | diff --git a/include/hw/misc/unimp.h b/include/hw/misc/unimp.h | 31 | } |
33 | new file mode 100644 | 32 | armv7m_nvic_set_pending(env->nvic, ARMV7M_EXCP_BUS, false); |
34 | index XXXXXXX..XXXXXXX | 33 | break; |
35 | --- /dev/null | 34 | + case 0x1: /* Alignment fault reported by generic code */ |
36 | +++ b/include/hw/misc/unimp.h | 35 | + qemu_log_mask(CPU_LOG_INT, |
37 | @@ -XXX,XX +XXX,XX @@ | 36 | + "...really UsageFault with UFSR.UNALIGNED\n"); |
38 | +/* | 37 | + env->v7m.cfsr[env->v7m.secure] |= R_V7M_CFSR_UNALIGNED_MASK; |
39 | + * "Unimplemented" device | 38 | + armv7m_nvic_set_pending(env->nvic, ARMV7M_EXCP_USAGE, |
40 | + * | 39 | + env->v7m.secure); |
41 | + * Copyright Linaro Limited, 2017 | 40 | + break; |
42 | + * Written by Peter Maydell | 41 | default: |
43 | + */ | 42 | /* |
44 | + | 43 | * All other FSR values are either MPU faults or "can't happen |
45 | +#ifndef HW_MISC_UNIMP_H | ||
46 | +#define HW_MISC_UNIMP_H | ||
47 | + | ||
48 | +#define TYPE_UNIMPLEMENTED_DEVICE "unimplemented-device" | ||
49 | + | ||
50 | +/** | ||
51 | + * create_unimplemented_device: create and map a dummy device | ||
52 | + * @name: name of the device for debug logging | ||
53 | + * @base: base address of the device's MMIO region | ||
54 | + * @size: size of the device's MMIO region | ||
55 | + * | ||
56 | + * This utility function creates and maps an instance of unimplemented-device, | ||
57 | + * which is a dummy device which simply logs all guest accesses to | ||
58 | + * it via the qemu_log LOG_UNIMP debug log. | ||
59 | + * The device is mapped at priority -1000, which means that you can | ||
60 | + * use it to cover a large region and then map other devices on top of it | ||
61 | + * if necessary. | ||
62 | + */ | ||
63 | +static inline void create_unimplemented_device(const char *name, | ||
64 | + hwaddr base, | ||
65 | + hwaddr size) | ||
66 | +{ | ||
67 | + DeviceState *dev = qdev_create(NULL, TYPE_UNIMPLEMENTED_DEVICE); | ||
68 | + | ||
69 | + qdev_prop_set_string(dev, "name", name); | ||
70 | + qdev_prop_set_uint64(dev, "size", size); | ||
71 | + qdev_init_nofail(dev); | ||
72 | + | ||
73 | + sysbus_mmio_map_overlap(SYS_BUS_DEVICE(dev), 0, base, -1000); | ||
74 | +} | ||
75 | + | ||
76 | +#endif | ||
77 | diff --git a/hw/misc/unimp.c b/hw/misc/unimp.c | ||
78 | new file mode 100644 | ||
79 | index XXXXXXX..XXXXXXX | ||
80 | --- /dev/null | ||
81 | +++ b/hw/misc/unimp.c | ||
82 | @@ -XXX,XX +XXX,XX @@ | ||
83 | +/* "Unimplemented" device | ||
84 | + * | ||
85 | + * This is a dummy device which accepts and logs all accesses. | ||
86 | + * It's useful for stubbing out regions of an SoC or board | ||
87 | + * map which correspond to devices that have not yet been | ||
88 | + * implemented. This is often sufficient to placate initial | ||
89 | + * guest device driver probing such that the system will | ||
90 | + * come up. | ||
91 | + * | ||
92 | + * Copyright Linaro Limited, 2017 | ||
93 | + * Written by Peter Maydell | ||
94 | + */ | ||
95 | + | ||
96 | +#include "qemu/osdep.h" | ||
97 | +#include "hw/hw.h" | ||
98 | +#include "hw/sysbus.h" | ||
99 | +#include "hw/misc/unimp.h" | ||
100 | +#include "qemu/log.h" | ||
101 | +#include "qapi/error.h" | ||
102 | + | ||
103 | +#define UNIMPLEMENTED_DEVICE(obj) \ | ||
104 | + OBJECT_CHECK(UnimplementedDeviceState, (obj), TYPE_UNIMPLEMENTED_DEVICE) | ||
105 | + | ||
106 | +typedef struct { | ||
107 | + SysBusDevice parent_obj; | ||
108 | + MemoryRegion iomem; | ||
109 | + char *name; | ||
110 | + uint64_t size; | ||
111 | +} UnimplementedDeviceState; | ||
112 | + | ||
113 | +static uint64_t unimp_read(void *opaque, hwaddr offset, unsigned size) | ||
114 | +{ | ||
115 | + UnimplementedDeviceState *s = UNIMPLEMENTED_DEVICE(opaque); | ||
116 | + | ||
117 | + qemu_log_mask(LOG_UNIMP, "%s: unimplemented device read " | ||
118 | + "(size %d, offset 0x%" HWADDR_PRIx ")\n", | ||
119 | + s->name, size, offset); | ||
120 | + return 0; | ||
121 | +} | ||
122 | + | ||
123 | +static void unimp_write(void *opaque, hwaddr offset, | ||
124 | + uint64_t value, unsigned size) | ||
125 | +{ | ||
126 | + UnimplementedDeviceState *s = UNIMPLEMENTED_DEVICE(opaque); | ||
127 | + | ||
128 | + qemu_log_mask(LOG_UNIMP, "%s: unimplemented device write " | ||
129 | + "(size %d, value 0x%" PRIx64 | ||
130 | + ", offset 0x%" HWADDR_PRIx ")\n", | ||
131 | + s->name, size, value, offset); | ||
132 | +} | ||
133 | + | ||
134 | +static const MemoryRegionOps unimp_ops = { | ||
135 | + .read = unimp_read, | ||
136 | + .write = unimp_write, | ||
137 | + .impl.min_access_size = 1, | ||
138 | + .impl.max_access_size = 8, | ||
139 | + .valid.min_access_size = 1, | ||
140 | + .valid.max_access_size = 8, | ||
141 | + .endianness = DEVICE_NATIVE_ENDIAN, | ||
142 | +}; | ||
143 | + | ||
144 | +static void unimp_realize(DeviceState *dev, Error **errp) | ||
145 | +{ | ||
146 | + UnimplementedDeviceState *s = UNIMPLEMENTED_DEVICE(dev); | ||
147 | + | ||
148 | + if (s->size == 0) { | ||
149 | + error_setg(errp, "property 'size' not specified or zero"); | ||
150 | + return; | ||
151 | + } | ||
152 | + | ||
153 | + if (s->name == NULL) { | ||
154 | + error_setg(errp, "property 'name' not specified"); | ||
155 | + return; | ||
156 | + } | ||
157 | + | ||
158 | + memory_region_init_io(&s->iomem, OBJECT(s), &unimp_ops, s, | ||
159 | + s->name, s->size); | ||
160 | + sysbus_init_mmio(SYS_BUS_DEVICE(s), &s->iomem); | ||
161 | +} | ||
162 | + | ||
163 | +static Property unimp_properties[] = { | ||
164 | + DEFINE_PROP_UINT64("size", UnimplementedDeviceState, size, 0), | ||
165 | + DEFINE_PROP_STRING("name", UnimplementedDeviceState, name), | ||
166 | + DEFINE_PROP_END_OF_LIST(), | ||
167 | +}; | ||
168 | + | ||
169 | +static void unimp_class_init(ObjectClass *klass, void *data) | ||
170 | +{ | ||
171 | + DeviceClass *dc = DEVICE_CLASS(klass); | ||
172 | + | ||
173 | + dc->realize = unimp_realize; | ||
174 | + dc->props = unimp_properties; | ||
175 | +} | ||
176 | + | ||
177 | +static const TypeInfo unimp_info = { | ||
178 | + .name = TYPE_UNIMPLEMENTED_DEVICE, | ||
179 | + .parent = TYPE_SYS_BUS_DEVICE, | ||
180 | + .instance_size = sizeof(UnimplementedDeviceState), | ||
181 | + .class_init = unimp_class_init, | ||
182 | +}; | ||
183 | + | ||
184 | +static void unimp_register_types(void) | ||
185 | +{ | ||
186 | + type_register_static(&unimp_info); | ||
187 | +} | ||
188 | + | ||
189 | +type_init(unimp_register_types) | ||
190 | -- | 44 | -- |
191 | 2.7.4 | 45 | 2.20.1 |
192 | 46 | ||
193 | 47 | diff view generated by jsdifflib |
1 | Add a comment documenting the memory map of the SoC devices and which | 1 | The ISCR.ISRPENDING bit is set when an external interrupt is pending. |
---|---|---|---|
2 | are not implemented. | 2 | This is true whether that external interrupt is enabled or not. |
3 | This means that we can't use 's->vectpending == 0' as a shortcut to | ||
4 | "ISRPENDING is zero", because s->vectpending indicates only the | ||
5 | highest priority pending enabled interrupt. | ||
6 | |||
7 | Remove the incorrect optimization so that if there is no pending | ||
8 | enabled interrupt we fall through to scanning through the whole | ||
9 | interrupt array. | ||
3 | 10 | ||
4 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 11 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
5 | Message-id: 1484247815-15279-2-git-send-email-peter.maydell@linaro.org | 12 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> |
13 | Message-id: 20210723162146.5167-5-peter.maydell@linaro.org | ||
6 | --- | 14 | --- |
7 | hw/arm/stellaris.c | 34 ++++++++++++++++++++++++++++++++++ | 15 | hw/intc/armv7m_nvic.c | 9 ++++----- |
8 | 1 file changed, 34 insertions(+) | 16 | 1 file changed, 4 insertions(+), 5 deletions(-) |
9 | 17 | ||
10 | diff --git a/hw/arm/stellaris.c b/hw/arm/stellaris.c | 18 | diff --git a/hw/intc/armv7m_nvic.c b/hw/intc/armv7m_nvic.c |
11 | index XXXXXXX..XXXXXXX 100644 | 19 | index XXXXXXX..XXXXXXX 100644 |
12 | --- a/hw/arm/stellaris.c | 20 | --- a/hw/intc/armv7m_nvic.c |
13 | +++ b/hw/arm/stellaris.c | 21 | +++ b/hw/intc/armv7m_nvic.c |
14 | @@ -XXX,XX +XXX,XX @@ static void stellaris_init(const char *kernel_filename, const char *cpu_model, | 22 | @@ -XXX,XX +XXX,XX @@ static bool nvic_isrpending(NVICState *s) |
15 | 0x40024000, 0x40025000, 0x40026000}; | 23 | { |
16 | static const int gpio_irq[7] = {0, 1, 2, 3, 4, 30, 31}; | 24 | int irq; |
17 | 25 | ||
18 | + /* Memory map of SoC devices, from | 26 | - /* We can shortcut if the highest priority pending interrupt |
19 | + * Stellaris LM3S6965 Microcontroller Data Sheet (rev I) | 27 | - * happens to be external or if there is nothing pending. |
20 | + * http://www.ti.com/lit/ds/symlink/lm3s6965.pdf | 28 | + /* |
21 | + * | 29 | + * We can shortcut if the highest priority pending interrupt |
22 | + * 40000000 wdtimer (unimplemented) | 30 | + * happens to be external; if not we need to check the whole |
23 | + * 40002000 i2c (unimplemented) | 31 | + * vectors[] array. |
24 | + * 40004000 GPIO | 32 | */ |
25 | + * 40005000 GPIO | 33 | if (s->vectpending > NVIC_FIRST_IRQ) { |
26 | + * 40006000 GPIO | 34 | return true; |
27 | + * 40007000 GPIO | 35 | } |
28 | + * 40008000 SSI | 36 | - if (s->vectpending == 0) { |
29 | + * 4000c000 UART | 37 | - return false; |
30 | + * 4000d000 UART | 38 | - } |
31 | + * 4000e000 UART | 39 | |
32 | + * 40020000 i2c | 40 | for (irq = NVIC_FIRST_IRQ; irq < s->num_irq; irq++) { |
33 | + * 40021000 i2c (unimplemented) | 41 | if (s->vectors[irq].pending) { |
34 | + * 40024000 GPIO | ||
35 | + * 40025000 GPIO | ||
36 | + * 40026000 GPIO | ||
37 | + * 40028000 PWM (unimplemented) | ||
38 | + * 4002c000 QEI (unimplemented) | ||
39 | + * 4002d000 QEI (unimplemented) | ||
40 | + * 40030000 gptimer | ||
41 | + * 40031000 gptimer | ||
42 | + * 40032000 gptimer | ||
43 | + * 40033000 gptimer | ||
44 | + * 40038000 ADC | ||
45 | + * 4003c000 analogue comparator (unimplemented) | ||
46 | + * 40048000 ethernet | ||
47 | + * 400fc000 hibernation module (unimplemented) | ||
48 | + * 400fd000 flash memory control (unimplemented) | ||
49 | + * 400fe000 system control | ||
50 | + */ | ||
51 | + | ||
52 | DeviceState *gpio_dev[7], *nvic; | ||
53 | qemu_irq gpio_in[7][8]; | ||
54 | qemu_irq gpio_out[7][8]; | ||
55 | -- | 42 | -- |
56 | 2.7.4 | 43 | 2.20.1 |
57 | 44 | ||
58 | 45 | diff view generated by jsdifflib |
1 | From: Prasad J Pandit <pjp@fedoraproject.org> | 1 | The VECTPENDING field in the ICSR is 9 bits wide, in bits [20:12] of |
---|---|---|---|
2 | the register. We were incorrectly masking it to 8 bits, so it would | ||
3 | report the wrong value if the pending exception was greater than 256. | ||
4 | Fix the bug. | ||
2 | 5 | ||
3 | While doing multi block SDMA transfer in routine | ||
4 | 'sdhci_sdma_transfer_multi_blocks', the 's->fifo_buffer' starting | ||
5 | index 'begin' and data length 's->data_count' could end up to be same. | ||
6 | This could lead to an OOB access issue. Correct transfer data length | ||
7 | to avoid it. | ||
8 | |||
9 | Cc: qemu-stable@nongnu.org | ||
10 | Reported-by: Jiang Xin <jiangxin1@huawei.com> | ||
11 | Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org> | ||
12 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
13 | Message-id: 20170130064736.9236-1-ppandit@redhat.com | ||
14 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 6 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
7 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
8 | Message-id: 20210723162146.5167-6-peter.maydell@linaro.org | ||
15 | --- | 9 | --- |
16 | hw/sd/sdhci.c | 2 +- | 10 | hw/intc/armv7m_nvic.c | 2 +- |
17 | 1 file changed, 1 insertion(+), 1 deletion(-) | 11 | 1 file changed, 1 insertion(+), 1 deletion(-) |
18 | 12 | ||
19 | diff --git a/hw/sd/sdhci.c b/hw/sd/sdhci.c | 13 | diff --git a/hw/intc/armv7m_nvic.c b/hw/intc/armv7m_nvic.c |
20 | index XXXXXXX..XXXXXXX 100644 | 14 | index XXXXXXX..XXXXXXX 100644 |
21 | --- a/hw/sd/sdhci.c | 15 | --- a/hw/intc/armv7m_nvic.c |
22 | +++ b/hw/sd/sdhci.c | 16 | +++ b/hw/intc/armv7m_nvic.c |
23 | @@ -XXX,XX +XXX,XX @@ static void sdhci_sdma_transfer_multi_blocks(SDHCIState *s) | 17 | @@ -XXX,XX +XXX,XX @@ static uint32_t nvic_readl(NVICState *s, uint32_t offset, MemTxAttrs attrs) |
24 | boundary_count -= block_size - begin; | 18 | /* VECTACTIVE */ |
25 | } | 19 | val = cpu->env.v7m.exception; |
26 | dma_memory_read(&address_space_memory, s->sdmasysad, | 20 | /* VECTPENDING */ |
27 | - &s->fifo_buffer[begin], s->data_count); | 21 | - val |= (s->vectpending & 0xff) << 12; |
28 | + &s->fifo_buffer[begin], s->data_count - begin); | 22 | + val |= (s->vectpending & 0x1ff) << 12; |
29 | s->sdmasysad += s->data_count - begin; | 23 | /* ISRPENDING - set if any external IRQ is pending */ |
30 | if (s->data_count == block_size) { | 24 | if (nvic_isrpending(s)) { |
31 | for (n = 0; n < block_size; n++) { | 25 | val |= (1 << 22); |
32 | -- | 26 | -- |
33 | 2.7.4 | 27 | 2.20.1 |
34 | 28 | ||
35 | 29 | diff view generated by jsdifflib |
1 | Add support for generating the ISS (Instruction Specific Syndrome) | 1 | In Arm v8.1M the VECTPENDING field in the ICSR has new behaviour: if |
---|---|---|---|
2 | for Data Abort exceptions taken from AArch32. These syndromes are | 2 | the register is accessed NonSecure and the highest priority pending |
3 | used by hypervisors for example to trap and emulate memory accesses. | 3 | enabled exception (that would be returned in the VECTPENDING field) |
4 | 4 | targets Secure, then the VECTPENDING field must read 1 rather than | |
5 | This is the equivalent for AArch32 guests of the work done for AArch64 | 5 | the exception number of the pending exception. Implement this. |
6 | guests in commit aaa1f954d4cab243. | ||
7 | 6 | ||
8 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 7 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
9 | Reviewed-by: Edgar E. Iglesias <edgar.iglesias@xilinx.com> | 8 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> |
9 | Message-id: 20210723162146.5167-7-peter.maydell@linaro.org | ||
10 | --- | 10 | --- |
11 | target/arm/translate.h | 14 ++++ | 11 | hw/intc/armv7m_nvic.c | 31 ++++++++++++++++++++++++------- |
12 | target/arm/translate-a64.c | 14 ---- | 12 | 1 file changed, 24 insertions(+), 7 deletions(-) |
13 | target/arm/translate.c | 184 +++++++++++++++++++++++++++++++++------------ | ||
14 | 3 files changed, 149 insertions(+), 63 deletions(-) | ||
15 | 13 | ||
16 | diff --git a/target/arm/translate.h b/target/arm/translate.h | 14 | diff --git a/hw/intc/armv7m_nvic.c b/hw/intc/armv7m_nvic.c |
17 | index XXXXXXX..XXXXXXX 100644 | 15 | index XXXXXXX..XXXXXXX 100644 |
18 | --- a/target/arm/translate.h | 16 | --- a/hw/intc/armv7m_nvic.c |
19 | +++ b/target/arm/translate.h | 17 | +++ b/hw/intc/armv7m_nvic.c |
20 | @@ -XXX,XX +XXX,XX @@ static inline int default_exception_el(DisasContext *s) | 18 | @@ -XXX,XX +XXX,XX @@ void armv7m_nvic_acknowledge_irq(void *opaque) |
21 | ? 3 : MAX(1, s->current_el); | 19 | nvic_irq_update(s); |
22 | } | 20 | } |
23 | 21 | ||
24 | +static void disas_set_insn_syndrome(DisasContext *s, uint32_t syn) | 22 | +static bool vectpending_targets_secure(NVICState *s) |
25 | +{ | 23 | +{ |
26 | + /* We don't need to save all of the syndrome so we mask and shift | 24 | + /* Return true if s->vectpending targets Secure state */ |
27 | + * out unneeded bits to help the sleb128 encoder do a better job. | 25 | + if (s->vectpending_is_s_banked) { |
28 | + */ | 26 | + return true; |
29 | + syn &= ARM_INSN_START_WORD2_MASK; | 27 | + } |
30 | + syn >>= ARM_INSN_START_WORD2_SHIFT; | 28 | + return !exc_is_banked(s->vectpending) && |
31 | + | 29 | + exc_targets_secure(s, s->vectpending); |
32 | + /* We check and clear insn_start_idx to catch multiple updates. */ | ||
33 | + assert(s->insn_start_idx != 0); | ||
34 | + tcg_set_insn_param(s->insn_start_idx, 2, syn); | ||
35 | + s->insn_start_idx = 0; | ||
36 | +} | 30 | +} |
37 | + | 31 | + |
38 | /* target-specific extra values for is_jmp */ | 32 | void armv7m_nvic_get_pending_irq_info(void *opaque, |
39 | /* These instructions trap after executing, so the A32/T32 decoder must | 33 | int *pirq, bool *ptargets_secure) |
40 | * defer them until after the conditional execution state has been updated. | ||
41 | diff --git a/target/arm/translate-a64.c b/target/arm/translate-a64.c | ||
42 | index XXXXXXX..XXXXXXX 100644 | ||
43 | --- a/target/arm/translate-a64.c | ||
44 | +++ b/target/arm/translate-a64.c | ||
45 | @@ -XXX,XX +XXX,XX @@ static inline void gen_goto_tb(DisasContext *s, int n, uint64_t dest) | ||
46 | } | ||
47 | } | ||
48 | |||
49 | -static void disas_set_insn_syndrome(DisasContext *s, uint32_t syn) | ||
50 | -{ | ||
51 | - /* We don't need to save all of the syndrome so we mask and shift | ||
52 | - * out uneeded bits to help the sleb128 encoder do a better job. | ||
53 | - */ | ||
54 | - syn &= ARM_INSN_START_WORD2_MASK; | ||
55 | - syn >>= ARM_INSN_START_WORD2_SHIFT; | ||
56 | - | ||
57 | - /* We check and clear insn_start_idx to catch multiple updates. */ | ||
58 | - assert(s->insn_start_idx != 0); | ||
59 | - tcg_set_insn_param(s->insn_start_idx, 2, syn); | ||
60 | - s->insn_start_idx = 0; | ||
61 | -} | ||
62 | - | ||
63 | static void unallocated_encoding(DisasContext *s) | ||
64 | { | 34 | { |
65 | /* Unallocated and reserved encodings are uncategorized */ | 35 | @@ -XXX,XX +XXX,XX @@ void armv7m_nvic_get_pending_irq_info(void *opaque, |
66 | diff --git a/target/arm/translate.c b/target/arm/translate.c | 36 | |
67 | index XXXXXXX..XXXXXXX 100644 | 37 | assert(pending > ARMV7M_EXCP_RESET && pending < s->num_irq); |
68 | --- a/target/arm/translate.c | 38 | |
69 | +++ b/target/arm/translate.c | 39 | - if (s->vectpending_is_s_banked) { |
70 | @@ -XXX,XX +XXX,XX @@ void arm_translate_init(void) | 40 | - targets_secure = true; |
71 | a64_translate_init(); | 41 | - } else { |
72 | } | 42 | - targets_secure = !exc_is_banked(pending) && |
73 | 43 | - exc_targets_secure(s, pending); | |
74 | +/* Flags for the disas_set_da_iss info argument: | 44 | - } |
75 | + * lower bits hold the Rt register number, higher bits are flags. | 45 | + targets_secure = vectpending_targets_secure(s); |
76 | + */ | 46 | |
77 | +typedef enum ISSInfo { | 47 | trace_nvic_get_pending_irq_info(pending, targets_secure); |
78 | + ISSNone = 0, | 48 | |
79 | + ISSRegMask = 0x1f, | 49 | @@ -XXX,XX +XXX,XX @@ static uint32_t nvic_readl(NVICState *s, uint32_t offset, MemTxAttrs attrs) |
80 | + ISSInvalid = (1 << 5), | 50 | /* VECTACTIVE */ |
81 | + ISSIsAcqRel = (1 << 6), | 51 | val = cpu->env.v7m.exception; |
82 | + ISSIsWrite = (1 << 7), | 52 | /* VECTPENDING */ |
83 | + ISSIs16Bit = (1 << 8), | 53 | - val |= (s->vectpending & 0x1ff) << 12; |
84 | +} ISSInfo; | 54 | + if (s->vectpending) { |
85 | + | 55 | + /* |
86 | +/* Save the syndrome information for a Data Abort */ | 56 | + * From v8.1M VECTPENDING must read as 1 if accessed as |
87 | +static void disas_set_da_iss(DisasContext *s, TCGMemOp memop, ISSInfo issinfo) | 57 | + * NonSecure and the highest priority pending and enabled |
88 | +{ | 58 | + * exception targets Secure. |
89 | + uint32_t syn; | 59 | + */ |
90 | + int sas = memop & MO_SIZE; | 60 | + int vp = s->vectpending; |
91 | + bool sse = memop & MO_SIGN; | 61 | + if (!attrs.secure && arm_feature(&cpu->env, ARM_FEATURE_V8_1M) && |
92 | + bool is_acqrel = issinfo & ISSIsAcqRel; | 62 | + vectpending_targets_secure(s)) { |
93 | + bool is_write = issinfo & ISSIsWrite; | 63 | + vp = 1; |
94 | + bool is_16bit = issinfo & ISSIs16Bit; | 64 | + } |
95 | + int srt = issinfo & ISSRegMask; | 65 | + val |= (vp & 0x1ff) << 12; |
96 | + | 66 | + } |
97 | + if (issinfo & ISSInvalid) { | 67 | /* ISRPENDING - set if any external IRQ is pending */ |
98 | + /* Some callsites want to conditionally provide ISS info, | 68 | if (nvic_isrpending(s)) { |
99 | + * eg "only if this was not a writeback" | 69 | val |= (1 << 22); |
100 | + */ | ||
101 | + return; | ||
102 | + } | ||
103 | + | ||
104 | + if (srt == 15) { | ||
105 | + /* For AArch32, insns where the src/dest is R15 never generate | ||
106 | + * ISS information. Catching that here saves checking at all | ||
107 | + * the call sites. | ||
108 | + */ | ||
109 | + return; | ||
110 | + } | ||
111 | + | ||
112 | + syn = syn_data_abort_with_iss(0, sas, sse, srt, 0, is_acqrel, | ||
113 | + 0, 0, 0, is_write, 0, is_16bit); | ||
114 | + disas_set_insn_syndrome(s, syn); | ||
115 | +} | ||
116 | + | ||
117 | static inline ARMMMUIdx get_a32_user_mem_index(DisasContext *s) | ||
118 | { | ||
119 | /* Return the mmu_idx to use for A32/T32 "unprivileged load/store" | ||
120 | @@ -XXX,XX +XXX,XX @@ static inline void gen_aa32_ld##SUFF(DisasContext *s, TCGv_i32 val, \ | ||
121 | TCGv_i32 a32, int index) \ | ||
122 | { \ | ||
123 | gen_aa32_ld_i32(s, val, a32, index, OPC | s->be_data); \ | ||
124 | +} \ | ||
125 | +static inline void gen_aa32_ld##SUFF##_iss(DisasContext *s, \ | ||
126 | + TCGv_i32 val, \ | ||
127 | + TCGv_i32 a32, int index, \ | ||
128 | + ISSInfo issinfo) \ | ||
129 | +{ \ | ||
130 | + gen_aa32_ld_i32(s, val, a32, index, OPC | s->be_data); \ | ||
131 | + disas_set_da_iss(s, OPC, issinfo); \ | ||
132 | } | ||
133 | |||
134 | #define DO_GEN_ST(SUFF, OPC) \ | ||
135 | @@ -XXX,XX +XXX,XX @@ static inline void gen_aa32_st##SUFF(DisasContext *s, TCGv_i32 val, \ | ||
136 | TCGv_i32 a32, int index) \ | ||
137 | { \ | ||
138 | gen_aa32_st_i32(s, val, a32, index, OPC | s->be_data); \ | ||
139 | +} \ | ||
140 | +static inline void gen_aa32_st##SUFF##_iss(DisasContext *s, \ | ||
141 | + TCGv_i32 val, \ | ||
142 | + TCGv_i32 a32, int index, \ | ||
143 | + ISSInfo issinfo) \ | ||
144 | +{ \ | ||
145 | + gen_aa32_st_i32(s, val, a32, index, OPC | s->be_data); \ | ||
146 | + disas_set_da_iss(s, OPC, issinfo | ISSIsWrite); \ | ||
147 | } | ||
148 | |||
149 | static inline void gen_aa32_frob64(DisasContext *s, TCGv_i64 val) | ||
150 | @@ -XXX,XX +XXX,XX @@ static void disas_arm_insn(DisasContext *s, unsigned int insn) | ||
151 | tmp = tcg_temp_new_i32(); | ||
152 | switch (op1) { | ||
153 | case 0: /* lda */ | ||
154 | - gen_aa32_ld32u(s, tmp, addr, | ||
155 | - get_mem_index(s)); | ||
156 | + gen_aa32_ld32u_iss(s, tmp, addr, | ||
157 | + get_mem_index(s), | ||
158 | + rd | ISSIsAcqRel); | ||
159 | break; | ||
160 | case 2: /* ldab */ | ||
161 | - gen_aa32_ld8u(s, tmp, addr, | ||
162 | - get_mem_index(s)); | ||
163 | + gen_aa32_ld8u_iss(s, tmp, addr, | ||
164 | + get_mem_index(s), | ||
165 | + rd | ISSIsAcqRel); | ||
166 | break; | ||
167 | case 3: /* ldah */ | ||
168 | - gen_aa32_ld16u(s, tmp, addr, | ||
169 | - get_mem_index(s)); | ||
170 | + gen_aa32_ld16u_iss(s, tmp, addr, | ||
171 | + get_mem_index(s), | ||
172 | + rd | ISSIsAcqRel); | ||
173 | break; | ||
174 | default: | ||
175 | abort(); | ||
176 | @@ -XXX,XX +XXX,XX @@ static void disas_arm_insn(DisasContext *s, unsigned int insn) | ||
177 | tmp = load_reg(s, rm); | ||
178 | switch (op1) { | ||
179 | case 0: /* stl */ | ||
180 | - gen_aa32_st32(s, tmp, addr, | ||
181 | - get_mem_index(s)); | ||
182 | + gen_aa32_st32_iss(s, tmp, addr, | ||
183 | + get_mem_index(s), | ||
184 | + rm | ISSIsAcqRel); | ||
185 | break; | ||
186 | case 2: /* stlb */ | ||
187 | - gen_aa32_st8(s, tmp, addr, | ||
188 | - get_mem_index(s)); | ||
189 | + gen_aa32_st8_iss(s, tmp, addr, | ||
190 | + get_mem_index(s), | ||
191 | + rm | ISSIsAcqRel); | ||
192 | break; | ||
193 | case 3: /* stlh */ | ||
194 | - gen_aa32_st16(s, tmp, addr, | ||
195 | - get_mem_index(s)); | ||
196 | + gen_aa32_st16_iss(s, tmp, addr, | ||
197 | + get_mem_index(s), | ||
198 | + rm | ISSIsAcqRel); | ||
199 | break; | ||
200 | default: | ||
201 | abort(); | ||
202 | @@ -XXX,XX +XXX,XX @@ static void disas_arm_insn(DisasContext *s, unsigned int insn) | ||
203 | bool wbit = insn & (1 << 21); | ||
204 | bool pbit = insn & (1 << 24); | ||
205 | bool doubleword = false; | ||
206 | + ISSInfo issinfo; | ||
207 | + | ||
208 | /* Misc load/store */ | ||
209 | rn = (insn >> 16) & 0xf; | ||
210 | rd = (insn >> 12) & 0xf; | ||
211 | |||
212 | + /* ISS not valid if writeback */ | ||
213 | + issinfo = (pbit & !wbit) ? rd : ISSInvalid; | ||
214 | + | ||
215 | if (!load && (sh & 2)) { | ||
216 | /* doubleword */ | ||
217 | ARCH(5TE); | ||
218 | @@ -XXX,XX +XXX,XX @@ static void disas_arm_insn(DisasContext *s, unsigned int insn) | ||
219 | tmp = tcg_temp_new_i32(); | ||
220 | switch (sh) { | ||
221 | case 1: | ||
222 | - gen_aa32_ld16u(s, tmp, addr, get_mem_index(s)); | ||
223 | + gen_aa32_ld16u_iss(s, tmp, addr, get_mem_index(s), | ||
224 | + issinfo); | ||
225 | break; | ||
226 | case 2: | ||
227 | - gen_aa32_ld8s(s, tmp, addr, get_mem_index(s)); | ||
228 | + gen_aa32_ld8s_iss(s, tmp, addr, get_mem_index(s), | ||
229 | + issinfo); | ||
230 | break; | ||
231 | default: | ||
232 | case 3: | ||
233 | - gen_aa32_ld16s(s, tmp, addr, get_mem_index(s)); | ||
234 | + gen_aa32_ld16s_iss(s, tmp, addr, get_mem_index(s), | ||
235 | + issinfo); | ||
236 | break; | ||
237 | } | ||
238 | } else { | ||
239 | /* store */ | ||
240 | tmp = load_reg(s, rd); | ||
241 | - gen_aa32_st16(s, tmp, addr, get_mem_index(s)); | ||
242 | + gen_aa32_st16_iss(s, tmp, addr, get_mem_index(s), issinfo); | ||
243 | tcg_temp_free_i32(tmp); | ||
244 | } | ||
245 | /* Perform base writeback before the loaded value to | ||
246 | @@ -XXX,XX +XXX,XX @@ static void disas_arm_insn(DisasContext *s, unsigned int insn) | ||
247 | /* load */ | ||
248 | tmp = tcg_temp_new_i32(); | ||
249 | if (insn & (1 << 22)) { | ||
250 | - gen_aa32_ld8u(s, tmp, tmp2, i); | ||
251 | + gen_aa32_ld8u_iss(s, tmp, tmp2, i, rd); | ||
252 | } else { | ||
253 | - gen_aa32_ld32u(s, tmp, tmp2, i); | ||
254 | + gen_aa32_ld32u_iss(s, tmp, tmp2, i, rd); | ||
255 | } | ||
256 | } else { | ||
257 | /* store */ | ||
258 | tmp = load_reg(s, rd); | ||
259 | if (insn & (1 << 22)) { | ||
260 | - gen_aa32_st8(s, tmp, tmp2, i); | ||
261 | + gen_aa32_st8_iss(s, tmp, tmp2, i, rd); | ||
262 | } else { | ||
263 | - gen_aa32_st32(s, tmp, tmp2, i); | ||
264 | + gen_aa32_st32_iss(s, tmp, tmp2, i, rd); | ||
265 | } | ||
266 | tcg_temp_free_i32(tmp); | ||
267 | } | ||
268 | @@ -XXX,XX +XXX,XX @@ static int disas_thumb2_insn(CPUARMState *env, DisasContext *s, uint16_t insn_hw | ||
269 | tmp = tcg_temp_new_i32(); | ||
270 | switch (op) { | ||
271 | case 0: /* ldab */ | ||
272 | - gen_aa32_ld8u(s, tmp, addr, get_mem_index(s)); | ||
273 | + gen_aa32_ld8u_iss(s, tmp, addr, get_mem_index(s), | ||
274 | + rs | ISSIsAcqRel); | ||
275 | break; | ||
276 | case 1: /* ldah */ | ||
277 | - gen_aa32_ld16u(s, tmp, addr, get_mem_index(s)); | ||
278 | + gen_aa32_ld16u_iss(s, tmp, addr, get_mem_index(s), | ||
279 | + rs | ISSIsAcqRel); | ||
280 | break; | ||
281 | case 2: /* lda */ | ||
282 | - gen_aa32_ld32u(s, tmp, addr, get_mem_index(s)); | ||
283 | + gen_aa32_ld32u_iss(s, tmp, addr, get_mem_index(s), | ||
284 | + rs | ISSIsAcqRel); | ||
285 | break; | ||
286 | default: | ||
287 | abort(); | ||
288 | @@ -XXX,XX +XXX,XX @@ static int disas_thumb2_insn(CPUARMState *env, DisasContext *s, uint16_t insn_hw | ||
289 | tmp = load_reg(s, rs); | ||
290 | switch (op) { | ||
291 | case 0: /* stlb */ | ||
292 | - gen_aa32_st8(s, tmp, addr, get_mem_index(s)); | ||
293 | + gen_aa32_st8_iss(s, tmp, addr, get_mem_index(s), | ||
294 | + rs | ISSIsAcqRel); | ||
295 | break; | ||
296 | case 1: /* stlh */ | ||
297 | - gen_aa32_st16(s, tmp, addr, get_mem_index(s)); | ||
298 | + gen_aa32_st16_iss(s, tmp, addr, get_mem_index(s), | ||
299 | + rs | ISSIsAcqRel); | ||
300 | break; | ||
301 | case 2: /* stl */ | ||
302 | - gen_aa32_st32(s, tmp, addr, get_mem_index(s)); | ||
303 | + gen_aa32_st32_iss(s, tmp, addr, get_mem_index(s), | ||
304 | + rs | ISSIsAcqRel); | ||
305 | break; | ||
306 | default: | ||
307 | abort(); | ||
308 | @@ -XXX,XX +XXX,XX @@ static int disas_thumb2_insn(CPUARMState *env, DisasContext *s, uint16_t insn_hw | ||
309 | int postinc = 0; | ||
310 | int writeback = 0; | ||
311 | int memidx; | ||
312 | + ISSInfo issinfo; | ||
313 | + | ||
314 | if ((insn & 0x01100000) == 0x01000000) { | ||
315 | if (disas_neon_ls_insn(s, insn)) { | ||
316 | goto illegal_op; | ||
317 | @@ -XXX,XX +XXX,XX @@ static int disas_thumb2_insn(CPUARMState *env, DisasContext *s, uint16_t insn_hw | ||
318 | } | ||
319 | } | ||
320 | } | ||
321 | + | ||
322 | + issinfo = writeback ? ISSInvalid : rs; | ||
323 | + | ||
324 | if (insn & (1 << 20)) { | ||
325 | /* Load. */ | ||
326 | tmp = tcg_temp_new_i32(); | ||
327 | switch (op) { | ||
328 | case 0: | ||
329 | - gen_aa32_ld8u(s, tmp, addr, memidx); | ||
330 | + gen_aa32_ld8u_iss(s, tmp, addr, memidx, issinfo); | ||
331 | break; | ||
332 | case 4: | ||
333 | - gen_aa32_ld8s(s, tmp, addr, memidx); | ||
334 | + gen_aa32_ld8s_iss(s, tmp, addr, memidx, issinfo); | ||
335 | break; | ||
336 | case 1: | ||
337 | - gen_aa32_ld16u(s, tmp, addr, memidx); | ||
338 | + gen_aa32_ld16u_iss(s, tmp, addr, memidx, issinfo); | ||
339 | break; | ||
340 | case 5: | ||
341 | - gen_aa32_ld16s(s, tmp, addr, memidx); | ||
342 | + gen_aa32_ld16s_iss(s, tmp, addr, memidx, issinfo); | ||
343 | break; | ||
344 | case 2: | ||
345 | - gen_aa32_ld32u(s, tmp, addr, memidx); | ||
346 | + gen_aa32_ld32u_iss(s, tmp, addr, memidx, issinfo); | ||
347 | break; | ||
348 | default: | ||
349 | tcg_temp_free_i32(tmp); | ||
350 | @@ -XXX,XX +XXX,XX @@ static int disas_thumb2_insn(CPUARMState *env, DisasContext *s, uint16_t insn_hw | ||
351 | tmp = load_reg(s, rs); | ||
352 | switch (op) { | ||
353 | case 0: | ||
354 | - gen_aa32_st8(s, tmp, addr, memidx); | ||
355 | + gen_aa32_st8_iss(s, tmp, addr, memidx, issinfo); | ||
356 | break; | ||
357 | case 1: | ||
358 | - gen_aa32_st16(s, tmp, addr, memidx); | ||
359 | + gen_aa32_st16_iss(s, tmp, addr, memidx, issinfo); | ||
360 | break; | ||
361 | case 2: | ||
362 | - gen_aa32_st32(s, tmp, addr, memidx); | ||
363 | + gen_aa32_st32_iss(s, tmp, addr, memidx, issinfo); | ||
364 | break; | ||
365 | default: | ||
366 | tcg_temp_free_i32(tmp); | ||
367 | @@ -XXX,XX +XXX,XX @@ static void disas_thumb_insn(CPUARMState *env, DisasContext *s) | ||
368 | addr = tcg_temp_new_i32(); | ||
369 | tcg_gen_movi_i32(addr, val); | ||
370 | tmp = tcg_temp_new_i32(); | ||
371 | - gen_aa32_ld32u(s, tmp, addr, get_mem_index(s)); | ||
372 | + gen_aa32_ld32u_iss(s, tmp, addr, get_mem_index(s), | ||
373 | + rd | ISSIs16Bit); | ||
374 | tcg_temp_free_i32(addr); | ||
375 | store_reg(s, rd, tmp); | ||
376 | break; | ||
377 | @@ -XXX,XX +XXX,XX @@ static void disas_thumb_insn(CPUARMState *env, DisasContext *s) | ||
378 | |||
379 | switch (op) { | ||
380 | case 0: /* str */ | ||
381 | - gen_aa32_st32(s, tmp, addr, get_mem_index(s)); | ||
382 | + gen_aa32_st32_iss(s, tmp, addr, get_mem_index(s), rd | ISSIs16Bit); | ||
383 | break; | ||
384 | case 1: /* strh */ | ||
385 | - gen_aa32_st16(s, tmp, addr, get_mem_index(s)); | ||
386 | + gen_aa32_st16_iss(s, tmp, addr, get_mem_index(s), rd | ISSIs16Bit); | ||
387 | break; | ||
388 | case 2: /* strb */ | ||
389 | - gen_aa32_st8(s, tmp, addr, get_mem_index(s)); | ||
390 | + gen_aa32_st8_iss(s, tmp, addr, get_mem_index(s), rd | ISSIs16Bit); | ||
391 | break; | ||
392 | case 3: /* ldrsb */ | ||
393 | - gen_aa32_ld8s(s, tmp, addr, get_mem_index(s)); | ||
394 | + gen_aa32_ld8s_iss(s, tmp, addr, get_mem_index(s), rd | ISSIs16Bit); | ||
395 | break; | ||
396 | case 4: /* ldr */ | ||
397 | - gen_aa32_ld32u(s, tmp, addr, get_mem_index(s)); | ||
398 | + gen_aa32_ld32u_iss(s, tmp, addr, get_mem_index(s), rd | ISSIs16Bit); | ||
399 | break; | ||
400 | case 5: /* ldrh */ | ||
401 | - gen_aa32_ld16u(s, tmp, addr, get_mem_index(s)); | ||
402 | + gen_aa32_ld16u_iss(s, tmp, addr, get_mem_index(s), rd | ISSIs16Bit); | ||
403 | break; | ||
404 | case 6: /* ldrb */ | ||
405 | - gen_aa32_ld8u(s, tmp, addr, get_mem_index(s)); | ||
406 | + gen_aa32_ld8u_iss(s, tmp, addr, get_mem_index(s), rd | ISSIs16Bit); | ||
407 | break; | ||
408 | case 7: /* ldrsh */ | ||
409 | - gen_aa32_ld16s(s, tmp, addr, get_mem_index(s)); | ||
410 | + gen_aa32_ld16s_iss(s, tmp, addr, get_mem_index(s), rd | ISSIs16Bit); | ||
411 | break; | ||
412 | } | ||
413 | if (op >= 3) { /* load */ | ||
414 | @@ -XXX,XX +XXX,XX @@ static void disas_thumb_insn(CPUARMState *env, DisasContext *s) | ||
415 | if (insn & (1 << 11)) { | ||
416 | /* load */ | ||
417 | tmp = tcg_temp_new_i32(); | ||
418 | - gen_aa32_ld8u(s, tmp, addr, get_mem_index(s)); | ||
419 | + gen_aa32_ld8u_iss(s, tmp, addr, get_mem_index(s), rd | ISSIs16Bit); | ||
420 | store_reg(s, rd, tmp); | ||
421 | } else { | ||
422 | /* store */ | ||
423 | tmp = load_reg(s, rd); | ||
424 | - gen_aa32_st8(s, tmp, addr, get_mem_index(s)); | ||
425 | + gen_aa32_st8_iss(s, tmp, addr, get_mem_index(s), rd | ISSIs16Bit); | ||
426 | tcg_temp_free_i32(tmp); | ||
427 | } | ||
428 | tcg_temp_free_i32(addr); | ||
429 | @@ -XXX,XX +XXX,XX @@ static void disas_thumb_insn(CPUARMState *env, DisasContext *s) | ||
430 | if (insn & (1 << 11)) { | ||
431 | /* load */ | ||
432 | tmp = tcg_temp_new_i32(); | ||
433 | - gen_aa32_ld16u(s, tmp, addr, get_mem_index(s)); | ||
434 | + gen_aa32_ld16u_iss(s, tmp, addr, get_mem_index(s), rd | ISSIs16Bit); | ||
435 | store_reg(s, rd, tmp); | ||
436 | } else { | ||
437 | /* store */ | ||
438 | tmp = load_reg(s, rd); | ||
439 | - gen_aa32_st16(s, tmp, addr, get_mem_index(s)); | ||
440 | + gen_aa32_st16_iss(s, tmp, addr, get_mem_index(s), rd | ISSIs16Bit); | ||
441 | tcg_temp_free_i32(tmp); | ||
442 | } | ||
443 | tcg_temp_free_i32(addr); | ||
444 | @@ -XXX,XX +XXX,XX @@ static void disas_thumb_insn(CPUARMState *env, DisasContext *s) | ||
445 | if (insn & (1 << 11)) { | ||
446 | /* load */ | ||
447 | tmp = tcg_temp_new_i32(); | ||
448 | - gen_aa32_ld32u(s, tmp, addr, get_mem_index(s)); | ||
449 | + gen_aa32_ld32u_iss(s, tmp, addr, get_mem_index(s), rd | ISSIs16Bit); | ||
450 | store_reg(s, rd, tmp); | ||
451 | } else { | ||
452 | /* store */ | ||
453 | tmp = load_reg(s, rd); | ||
454 | - gen_aa32_st32(s, tmp, addr, get_mem_index(s)); | ||
455 | + gen_aa32_st32_iss(s, tmp, addr, get_mem_index(s), rd | ISSIs16Bit); | ||
456 | tcg_temp_free_i32(tmp); | ||
457 | } | ||
458 | tcg_temp_free_i32(addr); | ||
459 | @@ -XXX,XX +XXX,XX @@ void gen_intermediate_code(CPUARMState *env, TranslationBlock *tb) | ||
460 | store_cpu_field(tmp, condexec_bits); | ||
461 | } | ||
462 | do { | ||
463 | + dc->insn_start_idx = tcg_op_buf_count(); | ||
464 | tcg_gen_insn_start(dc->pc, | ||
465 | (dc->condexec_cond << 4) | (dc->condexec_mask >> 1), | ||
466 | 0); | ||
467 | -- | 70 | -- |
468 | 2.7.4 | 71 | 2.20.1 |
469 | 72 | ||
470 | 73 | diff view generated by jsdifflib |
1 | From: Cédric Le Goater <clg@kaod.org> | 1 | From: Mao Zhongyi <maozhongyi@cmss.chinamobile.com> |
---|---|---|---|
2 | 2 | ||
3 | The Aspeed SoC includes a set of watchdog timers using 32-bit | 3 | Missed in commit f3478392 "docs: Move deprecation, build |
4 | decrement counters, which can be based either on the APB clock or | 4 | and license info out of system/" |
5 | a 1 MHz clock. | ||
6 | 5 | ||
7 | The watchdog timer is designed to prevent system deadlock and, in | 6 | Signed-off-by: Mao Zhongyi <maozhongyi@cmss.chinamobile.com> |
8 | general, it should be restarted before timeout. When a timeout occurs, | ||
9 | different types of signals can be generated, ARM reset, SOC reset, | ||
10 | System reset, CPU Interrupt, external signal or boot from alternate | ||
11 | block. The current model only performs the system reset function as | ||
12 | this is used by U-Boot and Linux. | ||
13 | |||
14 | Signed-off-by: Joel Stanley <joel@jms.id.au> | ||
15 | Message-id: 1485452251-1593-2-git-send-email-clg@kaod.org | ||
16 | [clg: - fixed compile breakage | ||
17 | - fixed io region size | ||
18 | - added watchdog_perform_action() on timer expiry | ||
19 | - wrote a commit log | ||
20 | - merged fixes from Andrew Jeffery to scale the reload value ] | ||
21 | Signed-off-by: Cédric Le Goater <clg@kaod.org> | ||
22 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 7 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
8 | Message-id: 20210723065828.1336760-1-maozhongyi@cmss.chinamobile.com | ||
23 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
24 | --- | 10 | --- |
25 | hw/watchdog/Makefile.objs | 1 + | 11 | configure | 2 +- |
26 | include/hw/watchdog/wdt_aspeed.h | 32 ++++++ | 12 | target/i386/cpu.c | 2 +- |
27 | hw/watchdog/wdt_aspeed.c | 225 +++++++++++++++++++++++++++++++++++++++ | 13 | MAINTAINERS | 2 +- |
28 | 3 files changed, 258 insertions(+) | 14 | 3 files changed, 3 insertions(+), 3 deletions(-) |
29 | create mode 100644 include/hw/watchdog/wdt_aspeed.h | ||
30 | create mode 100644 hw/watchdog/wdt_aspeed.c | ||
31 | 15 | ||
32 | diff --git a/hw/watchdog/Makefile.objs b/hw/watchdog/Makefile.objs | 16 | diff --git a/configure b/configure |
17 | index XXXXXXX..XXXXXXX 100755 | ||
18 | --- a/configure | ||
19 | +++ b/configure | ||
20 | @@ -XXX,XX +XXX,XX @@ fi | ||
21 | |||
22 | if test -n "${deprecated_features}"; then | ||
23 | echo "Warning, deprecated features enabled." | ||
24 | - echo "Please see docs/system/deprecated.rst" | ||
25 | + echo "Please see docs/about/deprecated.rst" | ||
26 | echo " features: ${deprecated_features}" | ||
27 | fi | ||
28 | |||
29 | diff --git a/target/i386/cpu.c b/target/i386/cpu.c | ||
33 | index XXXXXXX..XXXXXXX 100644 | 30 | index XXXXXXX..XXXXXXX 100644 |
34 | --- a/hw/watchdog/Makefile.objs | 31 | --- a/target/i386/cpu.c |
35 | +++ b/hw/watchdog/Makefile.objs | 32 | +++ b/target/i386/cpu.c |
36 | @@ -XXX,XX +XXX,XX @@ common-obj-y += watchdog.o | 33 | @@ -XXX,XX +XXX,XX @@ static const X86CPUDefinition builtin_x86_defs[] = { |
37 | common-obj-$(CONFIG_WDT_IB6300ESB) += wdt_i6300esb.o | 34 | * none", but this is just for compatibility while libvirt isn't |
38 | common-obj-$(CONFIG_WDT_IB700) += wdt_ib700.o | 35 | * adapted to resolve CPU model versions before creating VMs. |
39 | common-obj-$(CONFIG_WDT_DIAG288) += wdt_diag288.o | 36 | * See "Runnability guarantee of CPU models" at |
40 | +common-obj-$(CONFIG_ASPEED_SOC) += wdt_aspeed.o | 37 | - * docs/system/deprecated.rst. |
41 | diff --git a/include/hw/watchdog/wdt_aspeed.h b/include/hw/watchdog/wdt_aspeed.h | 38 | + * docs/about/deprecated.rst. |
42 | new file mode 100644 | 39 | */ |
43 | index XXXXXXX..XXXXXXX | 40 | X86CPUVersion default_cpu_version = 1; |
44 | --- /dev/null | 41 | |
45 | +++ b/include/hw/watchdog/wdt_aspeed.h | 42 | diff --git a/MAINTAINERS b/MAINTAINERS |
46 | @@ -XXX,XX +XXX,XX @@ | 43 | index XXXXXXX..XXXXXXX 100644 |
47 | +/* | 44 | --- a/MAINTAINERS |
48 | + * ASPEED Watchdog Controller | 45 | +++ b/MAINTAINERS |
49 | + * | 46 | @@ -XXX,XX +XXX,XX @@ F: contrib/gitdm/* |
50 | + * Copyright (C) 2016-2017 IBM Corp. | 47 | |
51 | + * | 48 | Incompatible changes |
52 | + * This code is licensed under the GPL version 2 or later. See the | 49 | R: libvir-list@redhat.com |
53 | + * COPYING file in the top-level directory. | 50 | -F: docs/system/deprecated.rst |
54 | + */ | 51 | +F: docs/about/deprecated.rst |
55 | +#ifndef ASPEED_WDT_H | 52 | |
56 | +#define ASPEED_WDT_H | 53 | Build System |
57 | + | 54 | ------------ |
58 | +#include "hw/sysbus.h" | ||
59 | + | ||
60 | +#define TYPE_ASPEED_WDT "aspeed.wdt" | ||
61 | +#define ASPEED_WDT(obj) \ | ||
62 | + OBJECT_CHECK(AspeedWDTState, (obj), TYPE_ASPEED_WDT) | ||
63 | + | ||
64 | +#define ASPEED_WDT_REGS_MAX (0x20 / 4) | ||
65 | + | ||
66 | +typedef struct AspeedWDTState { | ||
67 | + /*< private >*/ | ||
68 | + SysBusDevice parent_obj; | ||
69 | + QEMUTimer *timer; | ||
70 | + | ||
71 | + /*< public >*/ | ||
72 | + MemoryRegion iomem; | ||
73 | + uint32_t regs[ASPEED_WDT_REGS_MAX]; | ||
74 | + | ||
75 | + uint32_t pclk_freq; | ||
76 | +} AspeedWDTState; | ||
77 | + | ||
78 | +#endif /* ASPEED_WDT_H */ | ||
79 | diff --git a/hw/watchdog/wdt_aspeed.c b/hw/watchdog/wdt_aspeed.c | ||
80 | new file mode 100644 | ||
81 | index XXXXXXX..XXXXXXX | ||
82 | --- /dev/null | ||
83 | +++ b/hw/watchdog/wdt_aspeed.c | ||
84 | @@ -XXX,XX +XXX,XX @@ | ||
85 | +/* | ||
86 | + * ASPEED Watchdog Controller | ||
87 | + * | ||
88 | + * Copyright (C) 2016-2017 IBM Corp. | ||
89 | + * | ||
90 | + * This code is licensed under the GPL version 2 or later. See the | ||
91 | + * COPYING file in the top-level directory. | ||
92 | + */ | ||
93 | + | ||
94 | +#include "qemu/osdep.h" | ||
95 | +#include "qemu/log.h" | ||
96 | +#include "sysemu/watchdog.h" | ||
97 | +#include "hw/sysbus.h" | ||
98 | +#include "qemu/timer.h" | ||
99 | +#include "hw/watchdog/wdt_aspeed.h" | ||
100 | + | ||
101 | +#define WDT_STATUS (0x00 / 4) | ||
102 | +#define WDT_RELOAD_VALUE (0x04 / 4) | ||
103 | +#define WDT_RESTART (0x08 / 4) | ||
104 | +#define WDT_CTRL (0x0C / 4) | ||
105 | +#define WDT_CTRL_RESET_MODE_SOC (0x00 << 5) | ||
106 | +#define WDT_CTRL_RESET_MODE_FULL_CHIP (0x01 << 5) | ||
107 | +#define WDT_CTRL_1MHZ_CLK BIT(4) | ||
108 | +#define WDT_CTRL_WDT_EXT BIT(3) | ||
109 | +#define WDT_CTRL_WDT_INTR BIT(2) | ||
110 | +#define WDT_CTRL_RESET_SYSTEM BIT(1) | ||
111 | +#define WDT_CTRL_ENABLE BIT(0) | ||
112 | + | ||
113 | +#define WDT_TIMEOUT_STATUS (0x10 / 4) | ||
114 | +#define WDT_TIMEOUT_CLEAR (0x14 / 4) | ||
115 | +#define WDT_RESET_WDITH (0x18 / 4) | ||
116 | + | ||
117 | +#define WDT_RESTART_MAGIC 0x4755 | ||
118 | + | ||
119 | +static bool aspeed_wdt_is_enabled(const AspeedWDTState *s) | ||
120 | +{ | ||
121 | + return s->regs[WDT_CTRL] & WDT_CTRL_ENABLE; | ||
122 | +} | ||
123 | + | ||
124 | +static uint64_t aspeed_wdt_read(void *opaque, hwaddr offset, unsigned size) | ||
125 | +{ | ||
126 | + AspeedWDTState *s = ASPEED_WDT(opaque); | ||
127 | + | ||
128 | + offset >>= 2; | ||
129 | + | ||
130 | + switch (offset) { | ||
131 | + case WDT_STATUS: | ||
132 | + return s->regs[WDT_STATUS]; | ||
133 | + case WDT_RELOAD_VALUE: | ||
134 | + return s->regs[WDT_RELOAD_VALUE]; | ||
135 | + case WDT_RESTART: | ||
136 | + qemu_log_mask(LOG_GUEST_ERROR, | ||
137 | + "%s: read from write-only reg at offset 0x%" | ||
138 | + HWADDR_PRIx "\n", __func__, offset); | ||
139 | + return 0; | ||
140 | + case WDT_CTRL: | ||
141 | + return s->regs[WDT_CTRL]; | ||
142 | + case WDT_TIMEOUT_STATUS: | ||
143 | + case WDT_TIMEOUT_CLEAR: | ||
144 | + case WDT_RESET_WDITH: | ||
145 | + qemu_log_mask(LOG_UNIMP, | ||
146 | + "%s: uninmplemented read at offset 0x%" HWADDR_PRIx "\n", | ||
147 | + __func__, offset); | ||
148 | + return 0; | ||
149 | + default: | ||
150 | + qemu_log_mask(LOG_GUEST_ERROR, | ||
151 | + "%s: Out-of-bounds read at offset 0x%" HWADDR_PRIx "\n", | ||
152 | + __func__, offset); | ||
153 | + return 0; | ||
154 | + } | ||
155 | + | ||
156 | +} | ||
157 | + | ||
158 | +static void aspeed_wdt_reload(AspeedWDTState *s, bool pclk) | ||
159 | +{ | ||
160 | + uint32_t reload; | ||
161 | + | ||
162 | + if (pclk) { | ||
163 | + reload = muldiv64(s->regs[WDT_RELOAD_VALUE], NANOSECONDS_PER_SECOND, | ||
164 | + s->pclk_freq); | ||
165 | + } else { | ||
166 | + reload = s->regs[WDT_RELOAD_VALUE] * 1000; | ||
167 | + } | ||
168 | + | ||
169 | + if (aspeed_wdt_is_enabled(s)) { | ||
170 | + timer_mod(s->timer, qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) + reload); | ||
171 | + } | ||
172 | +} | ||
173 | + | ||
174 | +static void aspeed_wdt_write(void *opaque, hwaddr offset, uint64_t data, | ||
175 | + unsigned size) | ||
176 | +{ | ||
177 | + AspeedWDTState *s = ASPEED_WDT(opaque); | ||
178 | + bool enable = data & WDT_CTRL_ENABLE; | ||
179 | + | ||
180 | + offset >>= 2; | ||
181 | + | ||
182 | + switch (offset) { | ||
183 | + case WDT_STATUS: | ||
184 | + qemu_log_mask(LOG_GUEST_ERROR, | ||
185 | + "%s: write to read-only reg at offset 0x%" | ||
186 | + HWADDR_PRIx "\n", __func__, offset); | ||
187 | + break; | ||
188 | + case WDT_RELOAD_VALUE: | ||
189 | + s->regs[WDT_RELOAD_VALUE] = data; | ||
190 | + break; | ||
191 | + case WDT_RESTART: | ||
192 | + if ((data & 0xFFFF) == WDT_RESTART_MAGIC) { | ||
193 | + s->regs[WDT_STATUS] = s->regs[WDT_RELOAD_VALUE]; | ||
194 | + aspeed_wdt_reload(s, !(data & WDT_CTRL_1MHZ_CLK)); | ||
195 | + } | ||
196 | + break; | ||
197 | + case WDT_CTRL: | ||
198 | + if (enable && !aspeed_wdt_is_enabled(s)) { | ||
199 | + s->regs[WDT_CTRL] = data; | ||
200 | + aspeed_wdt_reload(s, !(data & WDT_CTRL_1MHZ_CLK)); | ||
201 | + } else if (!enable && aspeed_wdt_is_enabled(s)) { | ||
202 | + s->regs[WDT_CTRL] = data; | ||
203 | + timer_del(s->timer); | ||
204 | + } | ||
205 | + break; | ||
206 | + case WDT_TIMEOUT_STATUS: | ||
207 | + case WDT_TIMEOUT_CLEAR: | ||
208 | + case WDT_RESET_WDITH: | ||
209 | + qemu_log_mask(LOG_UNIMP, | ||
210 | + "%s: uninmplemented write at offset 0x%" HWADDR_PRIx "\n", | ||
211 | + __func__, offset); | ||
212 | + break; | ||
213 | + default: | ||
214 | + qemu_log_mask(LOG_GUEST_ERROR, | ||
215 | + "%s: Out-of-bounds write at offset 0x%" HWADDR_PRIx "\n", | ||
216 | + __func__, offset); | ||
217 | + } | ||
218 | + return; | ||
219 | +} | ||
220 | + | ||
221 | +static WatchdogTimerModel model = { | ||
222 | + .wdt_name = TYPE_ASPEED_WDT, | ||
223 | + .wdt_description = "Aspeed watchdog device", | ||
224 | +}; | ||
225 | + | ||
226 | +static const VMStateDescription vmstate_aspeed_wdt = { | ||
227 | + .name = "vmstate_aspeed_wdt", | ||
228 | + .version_id = 0, | ||
229 | + .minimum_version_id = 0, | ||
230 | + .fields = (VMStateField[]) { | ||
231 | + VMSTATE_TIMER_PTR(timer, AspeedWDTState), | ||
232 | + VMSTATE_UINT32_ARRAY(regs, AspeedWDTState, ASPEED_WDT_REGS_MAX), | ||
233 | + VMSTATE_END_OF_LIST() | ||
234 | + } | ||
235 | +}; | ||
236 | + | ||
237 | +static const MemoryRegionOps aspeed_wdt_ops = { | ||
238 | + .read = aspeed_wdt_read, | ||
239 | + .write = aspeed_wdt_write, | ||
240 | + .endianness = DEVICE_LITTLE_ENDIAN, | ||
241 | + .valid.min_access_size = 4, | ||
242 | + .valid.max_access_size = 4, | ||
243 | + .valid.unaligned = false, | ||
244 | +}; | ||
245 | + | ||
246 | +static void aspeed_wdt_reset(DeviceState *dev) | ||
247 | +{ | ||
248 | + AspeedWDTState *s = ASPEED_WDT(dev); | ||
249 | + | ||
250 | + s->regs[WDT_STATUS] = 0x3EF1480; | ||
251 | + s->regs[WDT_RELOAD_VALUE] = 0x03EF1480; | ||
252 | + s->regs[WDT_RESTART] = 0; | ||
253 | + s->regs[WDT_CTRL] = 0; | ||
254 | + | ||
255 | + timer_del(s->timer); | ||
256 | +} | ||
257 | + | ||
258 | +static void aspeed_wdt_timer_expired(void *dev) | ||
259 | +{ | ||
260 | + AspeedWDTState *s = ASPEED_WDT(dev); | ||
261 | + | ||
262 | + qemu_log_mask(CPU_LOG_RESET, "Watchdog timer expired.\n"); | ||
263 | + watchdog_perform_action(); | ||
264 | + timer_del(s->timer); | ||
265 | +} | ||
266 | + | ||
267 | +#define PCLK_HZ 24000000 | ||
268 | + | ||
269 | +static void aspeed_wdt_realize(DeviceState *dev, Error **errp) | ||
270 | +{ | ||
271 | + SysBusDevice *sbd = SYS_BUS_DEVICE(dev); | ||
272 | + AspeedWDTState *s = ASPEED_WDT(dev); | ||
273 | + | ||
274 | + s->timer = timer_new_ns(QEMU_CLOCK_VIRTUAL, aspeed_wdt_timer_expired, dev); | ||
275 | + | ||
276 | + /* FIXME: This setting should be derived from the SCU hw strapping | ||
277 | + * register SCU70 | ||
278 | + */ | ||
279 | + s->pclk_freq = PCLK_HZ; | ||
280 | + | ||
281 | + memory_region_init_io(&s->iomem, OBJECT(s), &aspeed_wdt_ops, s, | ||
282 | + TYPE_ASPEED_WDT, ASPEED_WDT_REGS_MAX * 4); | ||
283 | + sysbus_init_mmio(sbd, &s->iomem); | ||
284 | +} | ||
285 | + | ||
286 | +static void aspeed_wdt_class_init(ObjectClass *klass, void *data) | ||
287 | +{ | ||
288 | + DeviceClass *dc = DEVICE_CLASS(klass); | ||
289 | + | ||
290 | + dc->realize = aspeed_wdt_realize; | ||
291 | + dc->reset = aspeed_wdt_reset; | ||
292 | + set_bit(DEVICE_CATEGORY_MISC, dc->categories); | ||
293 | + dc->vmsd = &vmstate_aspeed_wdt; | ||
294 | +} | ||
295 | + | ||
296 | +static const TypeInfo aspeed_wdt_info = { | ||
297 | + .parent = TYPE_SYS_BUS_DEVICE, | ||
298 | + .name = TYPE_ASPEED_WDT, | ||
299 | + .instance_size = sizeof(AspeedWDTState), | ||
300 | + .class_init = aspeed_wdt_class_init, | ||
301 | +}; | ||
302 | + | ||
303 | +static void wdt_aspeed_register_types(void) | ||
304 | +{ | ||
305 | + watchdog_add_model(&model); | ||
306 | + type_register_static(&aspeed_wdt_info); | ||
307 | +} | ||
308 | + | ||
309 | +type_init(wdt_aspeed_register_types) | ||
310 | -- | 55 | -- |
311 | 2.7.4 | 56 | 2.20.1 |
312 | 57 | ||
313 | 58 | diff view generated by jsdifflib |
1 | From: Cédric Le Goater <clg@kaod.org> | 1 | From: Richard Henderson <richard.henderson@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | This enables reboot of a guest from U-Boot and Linux. | 3 | Currently, our only caller is sve_zcr_len_for_el, which has |
4 | already masked the length extracted from ZCR_ELx, so the | ||
5 | masking done here is a nop. But we will shortly have uses | ||
6 | from other locations, where the length will be unmasked. | ||
4 | 7 | ||
5 | Signed-off-by: Cédric Le Goater <clg@kaod.org> | 8 | Saturate the length to ARM_MAX_VQ instead of truncating to |
6 | Reviewed-by: Joel Stanley <joel@jms.id.au> | 9 | the low 4 bits. |
7 | Message-id: 1485452251-1593-3-git-send-email-clg@kaod.org | 10 | |
11 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> | ||
12 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
13 | Message-id: 20210723203344.968563-2-richard.henderson@linaro.org | ||
8 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 14 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
9 | --- | 15 | --- |
10 | include/hw/arm/aspeed_soc.h | 2 ++ | 16 | target/arm/helper.c | 4 +++- |
11 | hw/arm/aspeed_soc.c | 13 +++++++++++++ | 17 | 1 file changed, 3 insertions(+), 1 deletion(-) |
12 | 2 files changed, 15 insertions(+) | ||
13 | 18 | ||
14 | diff --git a/include/hw/arm/aspeed_soc.h b/include/hw/arm/aspeed_soc.h | 19 | diff --git a/target/arm/helper.c b/target/arm/helper.c |
15 | index XXXXXXX..XXXXXXX 100644 | 20 | index XXXXXXX..XXXXXXX 100644 |
16 | --- a/include/hw/arm/aspeed_soc.h | 21 | --- a/target/arm/helper.c |
17 | +++ b/include/hw/arm/aspeed_soc.h | 22 | +++ b/target/arm/helper.c |
18 | @@ -XXX,XX +XXX,XX @@ | 23 | @@ -XXX,XX +XXX,XX @@ static uint32_t sve_zcr_get_valid_len(ARMCPU *cpu, uint32_t start_len) |
19 | #include "hw/timer/aspeed_timer.h" | 24 | { |
20 | #include "hw/i2c/aspeed_i2c.h" | 25 | uint32_t end_len; |
21 | #include "hw/ssi/aspeed_smc.h" | 26 | |
22 | +#include "hw/watchdog/wdt_aspeed.h" | 27 | - end_len = start_len &= 0xf; |
23 | 28 | + start_len = MIN(start_len, ARM_MAX_VQ - 1); | |
24 | #define ASPEED_SPIS_NUM 2 | 29 | + end_len = start_len; |
25 | |||
26 | @@ -XXX,XX +XXX,XX @@ typedef struct AspeedSoCState { | ||
27 | AspeedSMCState fmc; | ||
28 | AspeedSMCState spi[ASPEED_SPIS_NUM]; | ||
29 | AspeedSDMCState sdmc; | ||
30 | + AspeedWDTState wdt; | ||
31 | } AspeedSoCState; | ||
32 | |||
33 | #define TYPE_ASPEED_SOC "aspeed-soc" | ||
34 | diff --git a/hw/arm/aspeed_soc.c b/hw/arm/aspeed_soc.c | ||
35 | index XXXXXXX..XXXXXXX 100644 | ||
36 | --- a/hw/arm/aspeed_soc.c | ||
37 | +++ b/hw/arm/aspeed_soc.c | ||
38 | @@ -XXX,XX +XXX,XX @@ | ||
39 | #define ASPEED_SOC_SCU_BASE 0x1E6E2000 | ||
40 | #define ASPEED_SOC_SRAM_BASE 0x1E720000 | ||
41 | #define ASPEED_SOC_TIMER_BASE 0x1E782000 | ||
42 | +#define ASPEED_SOC_WDT_BASE 0x1E785000 | ||
43 | #define ASPEED_SOC_I2C_BASE 0x1E78A000 | ||
44 | |||
45 | static const int uart_irqs[] = { 9, 32, 33, 34, 10 }; | ||
46 | @@ -XXX,XX +XXX,XX @@ static void aspeed_soc_init(Object *obj) | ||
47 | sc->info->silicon_rev); | ||
48 | object_property_add_alias(obj, "ram-size", OBJECT(&s->sdmc), | ||
49 | "ram-size", &error_abort); | ||
50 | + | 30 | + |
51 | + object_initialize(&s->wdt, sizeof(s->wdt), TYPE_ASPEED_WDT); | 31 | if (!test_bit(start_len, cpu->sve_vq_map)) { |
52 | + object_property_add_child(obj, "wdt", OBJECT(&s->wdt), NULL); | 32 | end_len = find_last_bit(cpu->sve_vq_map, start_len); |
53 | + qdev_set_parent_bus(DEVICE(&s->wdt), sysbus_get_default()); | 33 | assert(end_len < start_len); |
54 | } | ||
55 | |||
56 | static void aspeed_soc_realize(DeviceState *dev, Error **errp) | ||
57 | @@ -XXX,XX +XXX,XX @@ static void aspeed_soc_realize(DeviceState *dev, Error **errp) | ||
58 | return; | ||
59 | } | ||
60 | sysbus_mmio_map(SYS_BUS_DEVICE(&s->sdmc), 0, ASPEED_SOC_SDMC_BASE); | ||
61 | + | ||
62 | + /* Watch dog */ | ||
63 | + object_property_set_bool(OBJECT(&s->wdt), true, "realized", &err); | ||
64 | + if (err) { | ||
65 | + error_propagate(errp, err); | ||
66 | + return; | ||
67 | + } | ||
68 | + sysbus_mmio_map(SYS_BUS_DEVICE(&s->wdt), 0, ASPEED_SOC_WDT_BASE); | ||
69 | } | ||
70 | |||
71 | static void aspeed_soc_class_init(ObjectClass *oc, void *data) | ||
72 | -- | 34 | -- |
73 | 2.7.4 | 35 | 2.20.1 |
74 | 36 | ||
75 | 37 | diff view generated by jsdifflib |
1 | From: Julian Brown <julian@codesourcery.com> | 1 | From: Richard Henderson <richard.henderson@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | In BE32 mode, sub-word size watchpoints can fail to trigger because the | 3 | Rename from sve_zcr_get_valid_len and make accessible |
4 | address of the access is adjusted in the opcode helpers before being | 4 | from outside of helper.c. |
5 | compared with the watchpoint registers. This patch reverses the address | ||
6 | adjustment before performing the comparison with the help of a new CPUClass | ||
7 | hook. | ||
8 | 5 | ||
9 | This version of the patch augments and tidies up comments a little. | 6 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> |
10 | |||
11 | Signed-off-by: Julian Brown <julian@codesourcery.com> | ||
12 | Message-id: caaf64ffc72f6ae183015337b7afdbd4b8989cb6.1484929304.git.julian@codesourcery.com | ||
13 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 7 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
8 | Message-id: 20210723203344.968563-3-richard.henderson@linaro.org | ||
14 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
15 | --- | 10 | --- |
16 | include/qom/cpu.h | 3 +++ | 11 | target/arm/internals.h | 10 ++++++++++ |
17 | target/arm/internals.h | 5 +++++ | 12 | target/arm/helper.c | 4 ++-- |
18 | exec.c | 1 + | 13 | 2 files changed, 12 insertions(+), 2 deletions(-) |
19 | qom/cpu.c | 6 ++++++ | ||
20 | target/arm/cpu.c | 3 +++ | ||
21 | target/arm/op_helper.c | 22 ++++++++++++++++++++++ | ||
22 | 6 files changed, 40 insertions(+) | ||
23 | 14 | ||
24 | diff --git a/include/qom/cpu.h b/include/qom/cpu.h | ||
25 | index XXXXXXX..XXXXXXX 100644 | ||
26 | --- a/include/qom/cpu.h | ||
27 | +++ b/include/qom/cpu.h | ||
28 | @@ -XXX,XX +XXX,XX @@ struct TranslationBlock; | ||
29 | * @cpu_exec_exit: Callback for cpu_exec cleanup. | ||
30 | * @cpu_exec_interrupt: Callback for processing interrupts in cpu_exec. | ||
31 | * @disas_set_info: Setup architecture specific components of disassembly info | ||
32 | + * @adjust_watchpoint_address: Perform a target-specific adjustment to an | ||
33 | + * address before attempting to match it against watchpoints. | ||
34 | * | ||
35 | * Represents a CPU family or model. | ||
36 | */ | ||
37 | @@ -XXX,XX +XXX,XX @@ typedef struct CPUClass { | ||
38 | bool (*cpu_exec_interrupt)(CPUState *cpu, int interrupt_request); | ||
39 | |||
40 | void (*disas_set_info)(CPUState *cpu, disassemble_info *info); | ||
41 | + vaddr (*adjust_watchpoint_address)(CPUState *cpu, vaddr addr, int len); | ||
42 | } CPUClass; | ||
43 | |||
44 | #ifdef HOST_WORDS_BIGENDIAN | ||
45 | diff --git a/target/arm/internals.h b/target/arm/internals.h | 15 | diff --git a/target/arm/internals.h b/target/arm/internals.h |
46 | index XXXXXXX..XXXXXXX 100644 | 16 | index XXXXXXX..XXXXXXX 100644 |
47 | --- a/target/arm/internals.h | 17 | --- a/target/arm/internals.h |
48 | +++ b/target/arm/internals.h | 18 | +++ b/target/arm/internals.h |
49 | @@ -XXX,XX +XXX,XX @@ void hw_breakpoint_update_all(ARMCPU *cpu); | 19 | @@ -XXX,XX +XXX,XX @@ void arm_translate_init(void); |
50 | /* Callback function for checking if a watchpoint should trigger. */ | 20 | void arm_cpu_synchronize_from_tb(CPUState *cs, const TranslationBlock *tb); |
51 | bool arm_debug_check_watchpoint(CPUState *cs, CPUWatchpoint *wp); | 21 | #endif /* CONFIG_TCG */ |
52 | 22 | ||
53 | +/* Adjust addresses (in BE32 mode) before testing against watchpoint | 23 | +/** |
54 | + * addresses. | 24 | + * aarch64_sve_zcr_get_valid_len: |
25 | + * @cpu: cpu context | ||
26 | + * @start_len: maximum len to consider | ||
27 | + * | ||
28 | + * Return the maximum supported sve vector length <= @start_len. | ||
29 | + * Note that both @start_len and the return value are in units | ||
30 | + * of ZCR_ELx.LEN, so the vector bit length is (x + 1) * 128. | ||
55 | + */ | 31 | + */ |
56 | +vaddr arm_adjust_watchpoint_address(CPUState *cs, vaddr addr, int len); | 32 | +uint32_t aarch64_sve_zcr_get_valid_len(ARMCPU *cpu, uint32_t start_len); |
57 | + | 33 | |
58 | /* Callback function for when a watchpoint or breakpoint triggers. */ | 34 | enum arm_fprounding { |
59 | void arm_debug_excp_handler(CPUState *cs); | 35 | FPROUNDING_TIEEVEN, |
60 | 36 | diff --git a/target/arm/helper.c b/target/arm/helper.c | |
61 | diff --git a/exec.c b/exec.c | ||
62 | index XXXXXXX..XXXXXXX 100644 | 37 | index XXXXXXX..XXXXXXX 100644 |
63 | --- a/exec.c | 38 | --- a/target/arm/helper.c |
64 | +++ b/exec.c | 39 | +++ b/target/arm/helper.c |
65 | @@ -XXX,XX +XXX,XX @@ static void check_watchpoint(int offset, int len, MemTxAttrs attrs, int flags) | 40 | @@ -XXX,XX +XXX,XX @@ int sve_exception_el(CPUARMState *env, int el) |
66 | return; | 41 | return 0; |
42 | } | ||
43 | |||
44 | -static uint32_t sve_zcr_get_valid_len(ARMCPU *cpu, uint32_t start_len) | ||
45 | +uint32_t aarch64_sve_zcr_get_valid_len(ARMCPU *cpu, uint32_t start_len) | ||
46 | { | ||
47 | uint32_t end_len; | ||
48 | |||
49 | @@ -XXX,XX +XXX,XX @@ uint32_t sve_zcr_len_for_el(CPUARMState *env, int el) | ||
50 | zcr_len = MIN(zcr_len, 0xf & (uint32_t)env->vfp.zcr_el[3]); | ||
67 | } | 51 | } |
68 | vaddr = (cpu->mem_io_vaddr & TARGET_PAGE_MASK) + offset; | 52 | |
69 | + vaddr = cc->adjust_watchpoint_address(cpu, vaddr, len); | 53 | - return sve_zcr_get_valid_len(cpu, zcr_len); |
70 | QTAILQ_FOREACH(wp, &cpu->watchpoints, entry) { | 54 | + return aarch64_sve_zcr_get_valid_len(cpu, zcr_len); |
71 | if (cpu_watchpoint_address_matches(wp, vaddr, len) | ||
72 | && (wp->flags & flags)) { | ||
73 | diff --git a/qom/cpu.c b/qom/cpu.c | ||
74 | index XXXXXXX..XXXXXXX 100644 | ||
75 | --- a/qom/cpu.c | ||
76 | +++ b/qom/cpu.c | ||
77 | @@ -XXX,XX +XXX,XX @@ static int64_t cpu_common_get_arch_id(CPUState *cpu) | ||
78 | return cpu->cpu_index; | ||
79 | } | 55 | } |
80 | 56 | ||
81 | +static vaddr cpu_adjust_watchpoint_address(CPUState *cpu, vaddr addr, int len) | 57 | static void zcr_write(CPUARMState *env, const ARMCPRegInfo *ri, |
82 | +{ | ||
83 | + return addr; | ||
84 | +} | ||
85 | + | ||
86 | static void cpu_class_init(ObjectClass *klass, void *data) | ||
87 | { | ||
88 | DeviceClass *dc = DEVICE_CLASS(klass); | ||
89 | @@ -XXX,XX +XXX,XX @@ static void cpu_class_init(ObjectClass *klass, void *data) | ||
90 | k->cpu_exec_enter = cpu_common_noop; | ||
91 | k->cpu_exec_exit = cpu_common_noop; | ||
92 | k->cpu_exec_interrupt = cpu_common_exec_interrupt; | ||
93 | + k->adjust_watchpoint_address = cpu_adjust_watchpoint_address; | ||
94 | set_bit(DEVICE_CATEGORY_CPU, dc->categories); | ||
95 | dc->realize = cpu_common_realizefn; | ||
96 | dc->unrealize = cpu_common_unrealizefn; | ||
97 | diff --git a/target/arm/cpu.c b/target/arm/cpu.c | ||
98 | index XXXXXXX..XXXXXXX 100644 | ||
99 | --- a/target/arm/cpu.c | ||
100 | +++ b/target/arm/cpu.c | ||
101 | @@ -XXX,XX +XXX,XX @@ static void arm_cpu_class_init(ObjectClass *oc, void *data) | ||
102 | cc->gdb_stop_before_watchpoint = true; | ||
103 | cc->debug_excp_handler = arm_debug_excp_handler; | ||
104 | cc->debug_check_watchpoint = arm_debug_check_watchpoint; | ||
105 | +#if !defined(CONFIG_USER_ONLY) | ||
106 | + cc->adjust_watchpoint_address = arm_adjust_watchpoint_address; | ||
107 | +#endif | ||
108 | |||
109 | cc->disas_set_info = arm_disas_set_info; | ||
110 | } | ||
111 | diff --git a/target/arm/op_helper.c b/target/arm/op_helper.c | ||
112 | index XXXXXXX..XXXXXXX 100644 | ||
113 | --- a/target/arm/op_helper.c | ||
114 | +++ b/target/arm/op_helper.c | ||
115 | @@ -XXX,XX +XXX,XX @@ bool arm_debug_check_watchpoint(CPUState *cs, CPUWatchpoint *wp) | ||
116 | return check_watchpoints(cpu); | ||
117 | } | ||
118 | |||
119 | +vaddr arm_adjust_watchpoint_address(CPUState *cs, vaddr addr, int len) | ||
120 | +{ | ||
121 | + ARMCPU *cpu = ARM_CPU(cs); | ||
122 | + CPUARMState *env = &cpu->env; | ||
123 | + | ||
124 | + /* In BE32 system mode, target memory is stored byteswapped (on a | ||
125 | + * little-endian host system), and by the time we reach here (via an | ||
126 | + * opcode helper) the addresses of subword accesses have been adjusted | ||
127 | + * to account for that, which means that watchpoints will not match. | ||
128 | + * Undo the adjustment here. | ||
129 | + */ | ||
130 | + if (arm_sctlr_b(env)) { | ||
131 | + if (len == 1) { | ||
132 | + addr ^= 3; | ||
133 | + } else if (len == 2) { | ||
134 | + addr ^= 2; | ||
135 | + } | ||
136 | + } | ||
137 | + | ||
138 | + return addr; | ||
139 | +} | ||
140 | + | ||
141 | void arm_debug_excp_handler(CPUState *cs) | ||
142 | { | ||
143 | /* Called by core code when a watchpoint or breakpoint fires; | ||
144 | -- | 58 | -- |
145 | 2.7.4 | 59 | 2.20.1 |
146 | 60 | ||
147 | 61 | diff view generated by jsdifflib |
1 | From: Julian Brown <julian@codesourcery.com> | 1 | From: Richard Henderson <richard.henderson@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | Add a new "cfgend" property which selects whether the CPU resets into | 3 | Mirror the behavour of /proc/sys/abi/sve_default_vector_length |
4 | big-endian mode or not. This setting affects whether we reset with | 4 | under the real linux kernel. We have no way of passing along |
5 | SCTLR_B (ARMv6 and earlier) or SCTLR_EE (ARMv7 and later) set. | 5 | a real default across exec like the kernel can, but this is a |
6 | decent way of adjusting the startup vector length of a process. | ||
6 | 7 | ||
7 | Signed-off-by: Julian Brown <julian@codesourcery.com> | 8 | Resolves: https://gitlab.com/qemu-project/qemu/-/issues/482 |
8 | Message-id: 11420d1c49636c1790e60578ee996e51f0f0b835.1484929304.git.julian@codesourcery.com | 9 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> |
9 | [PMM: use error_report_err() rather than error_report(); | ||
10 | move the integratorcp changes to their own patch; | ||
11 | drop an unnecessary extra #include; | ||
12 | rephrase commit message accordingly; | ||
13 | move setting of reset_sctlr above registration of cpregs | ||
14 | so it actually has an effect] | ||
15 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 10 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
11 | Message-id: 20210723203344.968563-4-richard.henderson@linaro.org | ||
12 | [PMM: tweaked docs formatting, document -1 special-case, | ||
13 | added fixup patch from RTH mentioning QEMU's maximum veclen.] | ||
16 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 14 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
17 | --- | 15 | --- |
18 | target/arm/cpu.h | 7 +++++++ | 16 | docs/system/arm/cpu-features.rst | 15 ++++++++ |
19 | target/arm/cpu.c | 13 +++++++++++++ | 17 | target/arm/cpu.h | 5 +++ |
20 | 2 files changed, 20 insertions(+) | 18 | target/arm/cpu.c | 14 ++++++-- |
19 | target/arm/cpu64.c | 60 ++++++++++++++++++++++++++++++++ | ||
20 | 4 files changed, 92 insertions(+), 2 deletions(-) | ||
21 | 21 | ||
22 | diff --git a/docs/system/arm/cpu-features.rst b/docs/system/arm/cpu-features.rst | ||
23 | index XXXXXXX..XXXXXXX 100644 | ||
24 | --- a/docs/system/arm/cpu-features.rst | ||
25 | +++ b/docs/system/arm/cpu-features.rst | ||
26 | @@ -XXX,XX +XXX,XX @@ verbose command lines. However, the recommended way to select vector | ||
27 | lengths is to explicitly enable each desired length. Therefore only | ||
28 | example's (1), (4), and (6) exhibit recommended uses of the properties. | ||
29 | |||
30 | +SVE User-mode Default Vector Length Property | ||
31 | +-------------------------------------------- | ||
32 | + | ||
33 | +For qemu-aarch64, the cpu property ``sve-default-vector-length=N`` is | ||
34 | +defined to mirror the Linux kernel parameter file | ||
35 | +``/proc/sys/abi/sve_default_vector_length``. The default length, ``N``, | ||
36 | +is in units of bytes and must be between 16 and 8192. | ||
37 | +If not specified, the default vector length is 64. | ||
38 | + | ||
39 | +If the default length is larger than the maximum vector length enabled, | ||
40 | +the actual vector length will be reduced. Note that the maximum vector | ||
41 | +length supported by QEMU is 256. | ||
42 | + | ||
43 | +If this property is set to ``-1`` then the default vector length | ||
44 | +is set to the maximum possible length. | ||
22 | diff --git a/target/arm/cpu.h b/target/arm/cpu.h | 45 | diff --git a/target/arm/cpu.h b/target/arm/cpu.h |
23 | index XXXXXXX..XXXXXXX 100644 | 46 | index XXXXXXX..XXXXXXX 100644 |
24 | --- a/target/arm/cpu.h | 47 | --- a/target/arm/cpu.h |
25 | +++ b/target/arm/cpu.h | 48 | +++ b/target/arm/cpu.h |
26 | @@ -XXX,XX +XXX,XX @@ struct ARMCPU { | 49 | @@ -XXX,XX +XXX,XX @@ struct ARMCPU { |
27 | int gic_vpribits; /* number of virtual priority bits */ | 50 | /* Used to set the maximum vector length the cpu will support. */ |
28 | int gic_vprebits; /* number of virtual preemption bits */ | 51 | uint32_t sve_max_vq; |
29 | 52 | ||
30 | + /* Whether the cfgend input is high (i.e. this CPU should reset into | 53 | +#ifdef CONFIG_USER_ONLY |
31 | + * big-endian mode). This setting isn't used directly: instead it modifies | 54 | + /* Used to set the default vector length at process start. */ |
32 | + * the reset_sctlr value to have SCTLR_B or SCTLR_EE set, depending on the | 55 | + uint32_t sve_default_vq; |
33 | + * architecture version. | 56 | +#endif |
34 | + */ | ||
35 | + bool cfgend; | ||
36 | + | 57 | + |
37 | ARMELChangeHook *el_change_hook; | 58 | /* |
38 | void *el_change_hook_opaque; | 59 | * In sve_vq_map each set bit is a supported vector length of |
39 | }; | 60 | * (bit-number + 1) * 16 bytes, i.e. each bit number + 1 is the vector |
40 | diff --git a/target/arm/cpu.c b/target/arm/cpu.c | 61 | diff --git a/target/arm/cpu.c b/target/arm/cpu.c |
41 | index XXXXXXX..XXXXXXX 100644 | 62 | index XXXXXXX..XXXXXXX 100644 |
42 | --- a/target/arm/cpu.c | 63 | --- a/target/arm/cpu.c |
43 | +++ b/target/arm/cpu.c | 64 | +++ b/target/arm/cpu.c |
44 | @@ -XXX,XX +XXX,XX @@ static Property arm_cpu_has_el2_property = | 65 | @@ -XXX,XX +XXX,XX @@ static void arm_cpu_reset(DeviceState *dev) |
45 | static Property arm_cpu_has_el3_property = | 66 | env->cp15.cpacr_el1 = deposit64(env->cp15.cpacr_el1, 16, 2, 3); |
46 | DEFINE_PROP_BOOL("has_el3", ARMCPU, has_el3, true); | 67 | /* with reasonable vector length */ |
47 | 68 | if (cpu_isar_feature(aa64_sve, cpu)) { | |
48 | +static Property arm_cpu_cfgend_property = | 69 | - env->vfp.zcr_el[1] = MIN(cpu->sve_max_vq - 1, 3); |
49 | + DEFINE_PROP_BOOL("cfgend", ARMCPU, cfgend, false); | 70 | + env->vfp.zcr_el[1] = |
71 | + aarch64_sve_zcr_get_valid_len(cpu, cpu->sve_default_vq - 1); | ||
72 | } | ||
73 | /* | ||
74 | * Enable TBI0 but not TBI1. | ||
75 | @@ -XXX,XX +XXX,XX @@ static void arm_cpu_initfn(Object *obj) | ||
76 | QLIST_INIT(&cpu->pre_el_change_hooks); | ||
77 | QLIST_INIT(&cpu->el_change_hooks); | ||
78 | |||
79 | -#ifndef CONFIG_USER_ONLY | ||
80 | +#ifdef CONFIG_USER_ONLY | ||
81 | +# ifdef TARGET_AARCH64 | ||
82 | + /* | ||
83 | + * The linux kernel defaults to 512-bit vectors, when sve is supported. | ||
84 | + * See documentation for /proc/sys/abi/sve_default_vector_length, and | ||
85 | + * our corresponding sve-default-vector-length cpu property. | ||
86 | + */ | ||
87 | + cpu->sve_default_vq = 4; | ||
88 | +# endif | ||
89 | +#else | ||
90 | /* Our inbound IRQ and FIQ lines */ | ||
91 | if (kvm_enabled()) { | ||
92 | /* VIRQ and VFIQ are unused with KVM but we add them to maintain | ||
93 | diff --git a/target/arm/cpu64.c b/target/arm/cpu64.c | ||
94 | index XXXXXXX..XXXXXXX 100644 | ||
95 | --- a/target/arm/cpu64.c | ||
96 | +++ b/target/arm/cpu64.c | ||
97 | @@ -XXX,XX +XXX,XX @@ static void cpu_arm_set_sve(Object *obj, bool value, Error **errp) | ||
98 | cpu->isar.id_aa64pfr0 = t; | ||
99 | } | ||
100 | |||
101 | +#ifdef CONFIG_USER_ONLY | ||
102 | +/* Mirror linux /proc/sys/abi/sve_default_vector_length. */ | ||
103 | +static void cpu_arm_set_sve_default_vec_len(Object *obj, Visitor *v, | ||
104 | + const char *name, void *opaque, | ||
105 | + Error **errp) | ||
106 | +{ | ||
107 | + ARMCPU *cpu = ARM_CPU(obj); | ||
108 | + int32_t default_len, default_vq, remainder; | ||
50 | + | 109 | + |
51 | /* use property name "pmu" to match other archs and virt tools */ | 110 | + if (!visit_type_int32(v, name, &default_len, errp)) { |
52 | static Property arm_cpu_has_pmu_property = | 111 | + return; |
53 | DEFINE_PROP_BOOL("pmu", ARMCPU, has_pmu, true); | ||
54 | @@ -XXX,XX +XXX,XX @@ static void arm_cpu_post_init(Object *obj) | ||
55 | } | ||
56 | } | ||
57 | |||
58 | + qdev_property_add_static(DEVICE(obj), &arm_cpu_cfgend_property, | ||
59 | + &error_abort); | ||
60 | } | ||
61 | |||
62 | static void arm_cpu_finalizefn(Object *obj) | ||
63 | @@ -XXX,XX +XXX,XX @@ static void arm_cpu_realizefn(DeviceState *dev, Error **errp) | ||
64 | cpu->reset_sctlr |= (1 << 13); | ||
65 | } | ||
66 | |||
67 | + if (cpu->cfgend) { | ||
68 | + if (arm_feature(&cpu->env, ARM_FEATURE_V7)) { | ||
69 | + cpu->reset_sctlr |= SCTLR_EE; | ||
70 | + } else { | ||
71 | + cpu->reset_sctlr |= SCTLR_B; | ||
72 | + } | ||
73 | + } | 112 | + } |
74 | + | 113 | + |
75 | if (!cpu->has_el3) { | 114 | + /* Undocumented, but the kernel allows -1 to indicate "maximum". */ |
76 | /* If the has_el3 CPU property is disabled then we need to disable the | 115 | + if (default_len == -1) { |
77 | * feature. | 116 | + cpu->sve_default_vq = ARM_MAX_VQ; |
117 | + return; | ||
118 | + } | ||
119 | + | ||
120 | + default_vq = default_len / 16; | ||
121 | + remainder = default_len % 16; | ||
122 | + | ||
123 | + /* | ||
124 | + * Note that the 512 max comes from include/uapi/asm/sve_context.h | ||
125 | + * and is the maximum architectural width of ZCR_ELx.LEN. | ||
126 | + */ | ||
127 | + if (remainder || default_vq < 1 || default_vq > 512) { | ||
128 | + error_setg(errp, "cannot set sve-default-vector-length"); | ||
129 | + if (remainder) { | ||
130 | + error_append_hint(errp, "Vector length not a multiple of 16\n"); | ||
131 | + } else if (default_vq < 1) { | ||
132 | + error_append_hint(errp, "Vector length smaller than 16\n"); | ||
133 | + } else { | ||
134 | + error_append_hint(errp, "Vector length larger than %d\n", | ||
135 | + 512 * 16); | ||
136 | + } | ||
137 | + return; | ||
138 | + } | ||
139 | + | ||
140 | + cpu->sve_default_vq = default_vq; | ||
141 | +} | ||
142 | + | ||
143 | +static void cpu_arm_get_sve_default_vec_len(Object *obj, Visitor *v, | ||
144 | + const char *name, void *opaque, | ||
145 | + Error **errp) | ||
146 | +{ | ||
147 | + ARMCPU *cpu = ARM_CPU(obj); | ||
148 | + int32_t value = cpu->sve_default_vq * 16; | ||
149 | + | ||
150 | + visit_type_int32(v, name, &value, errp); | ||
151 | +} | ||
152 | +#endif | ||
153 | + | ||
154 | void aarch64_add_sve_properties(Object *obj) | ||
155 | { | ||
156 | uint32_t vq; | ||
157 | @@ -XXX,XX +XXX,XX @@ void aarch64_add_sve_properties(Object *obj) | ||
158 | object_property_add(obj, name, "bool", cpu_arm_get_sve_vq, | ||
159 | cpu_arm_set_sve_vq, NULL, NULL); | ||
160 | } | ||
161 | + | ||
162 | +#ifdef CONFIG_USER_ONLY | ||
163 | + /* Mirror linux /proc/sys/abi/sve_default_vector_length. */ | ||
164 | + object_property_add(obj, "sve-default-vector-length", "int32", | ||
165 | + cpu_arm_get_sve_default_vec_len, | ||
166 | + cpu_arm_set_sve_default_vec_len, NULL, NULL); | ||
167 | +#endif | ||
168 | } | ||
169 | |||
170 | void arm_cpu_pauth_finalize(ARMCPU *cpu, Error **errp) | ||
78 | -- | 171 | -- |
79 | 2.7.4 | 172 | 2.20.1 |
80 | 173 | ||
81 | 174 | diff view generated by jsdifflib |
1 | From: Pavel Dovgalyuk <Pavel.Dovgaluk@ispras.ru> | 1 | From: Philippe Mathieu-Daudé <f4bug@amsat.org> |
---|---|---|---|
2 | 2 | ||
3 | VMState added by this patch preserves correct | 3 | Signed-off-by: Philippe Mathieu-Daudé <f4bug@amsat.org> |
4 | loading of the integratorcp device state. | 4 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> |
5 | 5 | Message-id: 20210726150953.1218690-1-f4bug@amsat.org | |
6 | Signed-off-by: Pavel Dovgalyuk <pavel.dovgaluk@ispras.ru> | ||
7 | Message-id: 20170131114310.6768.79416.stgit@PASHA-ISP | ||
8 | [PMM: removed unnecessary minimum_version_id_old lines] | ||
9 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
10 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 6 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
11 | --- | 7 | --- |
12 | hw/arm/integratorcp.c | 59 +++++++++++++++++++++++++++++++++++++++++++++++++++ | 8 | hw/arm/nseries.c | 2 +- |
13 | 1 file changed, 59 insertions(+) | 9 | 1 file changed, 1 insertion(+), 1 deletion(-) |
14 | 10 | ||
15 | diff --git a/hw/arm/integratorcp.c b/hw/arm/integratorcp.c | 11 | diff --git a/hw/arm/nseries.c b/hw/arm/nseries.c |
16 | index XXXXXXX..XXXXXXX 100644 | 12 | index XXXXXXX..XXXXXXX 100644 |
17 | --- a/hw/arm/integratorcp.c | 13 | --- a/hw/arm/nseries.c |
18 | +++ b/hw/arm/integratorcp.c | 14 | +++ b/hw/arm/nseries.c |
19 | @@ -XXX,XX +XXX,XX @@ static uint8_t integrator_spd[128] = { | 15 | @@ -XXX,XX +XXX,XX @@ static uint32_t mipid_txrx(void *opaque, uint32_t cmd, int len) |
20 | 0xe, 4, 0x1c, 1, 2, 0x20, 0xc0, 0, 0, 0, 0, 0x30, 0x28, 0x30, 0x28, 0x40 | 16 | default: |
21 | }; | 17 | bad_cmd: |
22 | 18 | qemu_log_mask(LOG_GUEST_ERROR, | |
23 | +static const VMStateDescription vmstate_integratorcm = { | 19 | - "%s: unknown command %02x\n", __func__, s->cmd); |
24 | + .name = "integratorcm", | 20 | + "%s: unknown command 0x%02x\n", __func__, s->cmd); |
25 | + .version_id = 1, | 21 | break; |
26 | + .minimum_version_id = 1, | 22 | } |
27 | + .fields = (VMStateField[]) { | 23 | |
28 | + VMSTATE_UINT32(cm_osc, IntegratorCMState), | ||
29 | + VMSTATE_UINT32(cm_ctrl, IntegratorCMState), | ||
30 | + VMSTATE_UINT32(cm_lock, IntegratorCMState), | ||
31 | + VMSTATE_UINT32(cm_auxosc, IntegratorCMState), | ||
32 | + VMSTATE_UINT32(cm_sdram, IntegratorCMState), | ||
33 | + VMSTATE_UINT32(cm_init, IntegratorCMState), | ||
34 | + VMSTATE_UINT32(cm_flags, IntegratorCMState), | ||
35 | + VMSTATE_UINT32(cm_nvflags, IntegratorCMState), | ||
36 | + VMSTATE_UINT32(int_level, IntegratorCMState), | ||
37 | + VMSTATE_UINT32(irq_enabled, IntegratorCMState), | ||
38 | + VMSTATE_UINT32(fiq_enabled, IntegratorCMState), | ||
39 | + VMSTATE_END_OF_LIST() | ||
40 | + } | ||
41 | +}; | ||
42 | + | ||
43 | static uint64_t integratorcm_read(void *opaque, hwaddr offset, | ||
44 | unsigned size) | ||
45 | { | ||
46 | @@ -XXX,XX +XXX,XX @@ typedef struct icp_pic_state { | ||
47 | qemu_irq parent_fiq; | ||
48 | } icp_pic_state; | ||
49 | |||
50 | +static const VMStateDescription vmstate_icp_pic = { | ||
51 | + .name = "icp_pic", | ||
52 | + .version_id = 1, | ||
53 | + .minimum_version_id = 1, | ||
54 | + .fields = (VMStateField[]) { | ||
55 | + VMSTATE_UINT32(level, icp_pic_state), | ||
56 | + VMSTATE_UINT32(irq_enabled, icp_pic_state), | ||
57 | + VMSTATE_UINT32(fiq_enabled, icp_pic_state), | ||
58 | + VMSTATE_END_OF_LIST() | ||
59 | + } | ||
60 | +}; | ||
61 | + | ||
62 | static void icp_pic_update(icp_pic_state *s) | ||
63 | { | ||
64 | uint32_t flags; | ||
65 | @@ -XXX,XX +XXX,XX @@ typedef struct ICPCtrlRegsState { | ||
66 | #define ICP_INTREG_WPROT (1 << 0) | ||
67 | #define ICP_INTREG_CARDIN (1 << 3) | ||
68 | |||
69 | +static const VMStateDescription vmstate_icp_control = { | ||
70 | + .name = "icp_control", | ||
71 | + .version_id = 1, | ||
72 | + .minimum_version_id = 1, | ||
73 | + .fields = (VMStateField[]) { | ||
74 | + VMSTATE_UINT32(intreg_state, ICPCtrlRegsState), | ||
75 | + VMSTATE_END_OF_LIST() | ||
76 | + } | ||
77 | +}; | ||
78 | + | ||
79 | static uint64_t icp_control_read(void *opaque, hwaddr offset, | ||
80 | unsigned size) | ||
81 | { | ||
82 | @@ -XXX,XX +XXX,XX @@ static void core_class_init(ObjectClass *klass, void *data) | ||
83 | |||
84 | dc->props = core_properties; | ||
85 | dc->realize = integratorcm_realize; | ||
86 | + dc->vmsd = &vmstate_integratorcm; | ||
87 | +} | ||
88 | + | ||
89 | +static void icp_pic_class_init(ObjectClass *klass, void *data) | ||
90 | +{ | ||
91 | + DeviceClass *dc = DEVICE_CLASS(klass); | ||
92 | + | ||
93 | + dc->vmsd = &vmstate_icp_pic; | ||
94 | +} | ||
95 | + | ||
96 | +static void icp_control_class_init(ObjectClass *klass, void *data) | ||
97 | +{ | ||
98 | + DeviceClass *dc = DEVICE_CLASS(klass); | ||
99 | + | ||
100 | + dc->vmsd = &vmstate_icp_control; | ||
101 | } | ||
102 | |||
103 | static const TypeInfo core_info = { | ||
104 | @@ -XXX,XX +XXX,XX @@ static const TypeInfo icp_pic_info = { | ||
105 | .parent = TYPE_SYS_BUS_DEVICE, | ||
106 | .instance_size = sizeof(icp_pic_state), | ||
107 | .instance_init = icp_pic_init, | ||
108 | + .class_init = icp_pic_class_init, | ||
109 | }; | ||
110 | |||
111 | static const TypeInfo icp_ctrl_regs_info = { | ||
112 | @@ -XXX,XX +XXX,XX @@ static const TypeInfo icp_ctrl_regs_info = { | ||
113 | .parent = TYPE_SYS_BUS_DEVICE, | ||
114 | .instance_size = sizeof(ICPCtrlRegsState), | ||
115 | .instance_init = icp_control_init, | ||
116 | + .class_init = icp_control_class_init, | ||
117 | }; | ||
118 | |||
119 | static void integratorcp_register_types(void) | ||
120 | -- | 24 | -- |
121 | 2.7.4 | 25 | 2.20.1 |
122 | 26 | ||
123 | 27 | diff view generated by jsdifflib |
1 | From: Julian Brown <julian@codesourcery.com> | 1 | From: Joel Stanley <joel@jms.id.au> |
---|---|---|---|
2 | 2 | ||
3 | Since the integratorcp board creates the CPU object directly | 3 | The macro used to calculate the maximum memory size of the MMIO region |
4 | rather than via cpu_arm_init(), we have to call the CPU | 4 | had a mistake, causing all GPIO models to create a mapping of 0x9D8. |
5 | class parse_features() method ourselves if we want to | 5 | The intent was to have it be 0x9D8 - 0x800. |
6 | support the user passing features via the -cpu command | ||
7 | line argument as well as just the cpu name. Do so. | ||
8 | 6 | ||
9 | Signed-off-by: Julian Brown <julian@codesourcery.com> | 7 | This extra size doesn't matter on ast2400 and ast2500, which have a 4KB |
10 | [PMM: split out into its own patch] | 8 | region set aside for the GPIO controller. |
11 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 9 | |
10 | On the ast2600 the 3.3V and 1.8V GPIO controllers are 2KB apart, so the | ||
11 | regions would overlap. Worse was the 1.8V controller would map over the | ||
12 | top of the following peripheral, which happens to be the RTC. | ||
13 | |||
14 | The mmio region used by each device is a maximum of 2KB, so avoid the | ||
15 | calculations and hard code this as the maximum. | ||
16 | |||
17 | Fixes: 36d737ee82b2 ("hw/gpio: Add in AST2600 specific implementation") | ||
18 | Signed-off-by: Joel Stanley <joel@jms.id.au> | ||
19 | Reviewed-by: Rashmica Gupta <rashmica.g@gmail.com> | ||
20 | Reviewed-by: Cédric Le Goater <clg@kaod.org> | ||
21 | Message-id: 20210713065854.134634-2-joel@jms.id.au | ||
22 | [PMM: fix autocorrect error in commit message] | ||
12 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 23 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
13 | --- | 24 | --- |
14 | hw/arm/integratorcp.c | 19 +++++++++++++++++-- | 25 | hw/gpio/aspeed_gpio.c | 3 +-- |
15 | 1 file changed, 17 insertions(+), 2 deletions(-) | 26 | 1 file changed, 1 insertion(+), 2 deletions(-) |
16 | 27 | ||
17 | diff --git a/hw/arm/integratorcp.c b/hw/arm/integratorcp.c | 28 | diff --git a/hw/gpio/aspeed_gpio.c b/hw/gpio/aspeed_gpio.c |
18 | index XXXXXXX..XXXXXXX 100644 | 29 | index XXXXXXX..XXXXXXX 100644 |
19 | --- a/hw/arm/integratorcp.c | 30 | --- a/hw/gpio/aspeed_gpio.c |
20 | +++ b/hw/arm/integratorcp.c | 31 | +++ b/hw/gpio/aspeed_gpio.c |
21 | @@ -XXX,XX +XXX,XX @@ static void integratorcp_init(MachineState *machine) | 32 | @@ -XXX,XX +XXX,XX @@ |
22 | const char *kernel_filename = machine->kernel_filename; | 33 | #define GPIO_1_8V_MEM_SIZE 0x9D8 |
23 | const char *kernel_cmdline = machine->kernel_cmdline; | 34 | #define GPIO_1_8V_REG_ARRAY_SIZE ((GPIO_1_8V_MEM_SIZE - \ |
24 | const char *initrd_filename = machine->initrd_filename; | 35 | GPIO_1_8V_REG_OFFSET) >> 2) |
25 | + char **cpustr; | 36 | -#define GPIO_MAX_MEM_SIZE MAX(GPIO_3_6V_MEM_SIZE, GPIO_1_8V_MEM_SIZE) |
26 | ObjectClass *cpu_oc; | 37 | |
27 | + CPUClass *cc; | 38 | static int aspeed_evaluate_irq(GPIOSets *regs, int gpio_prev_high, int gpio) |
28 | Object *cpuobj; | 39 | { |
29 | ARMCPU *cpu; | 40 | @@ -XXX,XX +XXX,XX @@ static void aspeed_gpio_realize(DeviceState *dev, Error **errp) |
30 | + const char *typename; | ||
31 | MemoryRegion *address_space_mem = get_system_memory(); | ||
32 | MemoryRegion *ram = g_new(MemoryRegion, 1); | ||
33 | MemoryRegion *ram_alias = g_new(MemoryRegion, 1); | ||
34 | qemu_irq pic[32]; | ||
35 | DeviceState *dev, *sic, *icp; | ||
36 | int i; | ||
37 | + Error *err = NULL; | ||
38 | |||
39 | if (!cpu_model) { | ||
40 | cpu_model = "arm926"; | ||
41 | } | 41 | } |
42 | 42 | ||
43 | - cpu_oc = cpu_class_by_name(TYPE_ARM_CPU, cpu_model); | 43 | memory_region_init_io(&s->iomem, OBJECT(s), &aspeed_gpio_ops, s, |
44 | + cpustr = g_strsplit(cpu_model, ",", 2); | 44 | - TYPE_ASPEED_GPIO, GPIO_MAX_MEM_SIZE); |
45 | + | 45 | + TYPE_ASPEED_GPIO, 0x800); |
46 | + cpu_oc = cpu_class_by_name(TYPE_ARM_CPU, cpustr[0]); | 46 | |
47 | if (!cpu_oc) { | 47 | sysbus_init_mmio(sbd, &s->iomem); |
48 | fprintf(stderr, "Unable to find CPU definition\n"); | 48 | } |
49 | exit(1); | ||
50 | } | ||
51 | + typename = object_class_get_name(cpu_oc); | ||
52 | + | ||
53 | + cc = CPU_CLASS(cpu_oc); | ||
54 | + cc->parse_features(typename, cpustr[1], &err); | ||
55 | + g_strfreev(cpustr); | ||
56 | + if (err) { | ||
57 | + error_report_err(err); | ||
58 | + exit(1); | ||
59 | + } | ||
60 | |||
61 | - cpuobj = object_new(object_class_get_name(cpu_oc)); | ||
62 | + cpuobj = object_new(typename); | ||
63 | |||
64 | /* By default ARM1176 CPUs have EL3 enabled. This board does not | ||
65 | * currently support EL3 so the CPU EL3 property is disabled before | ||
66 | -- | 49 | -- |
67 | 2.7.4 | 50 | 2.20.1 |
68 | 51 | ||
69 | 52 | diff view generated by jsdifflib |