1 | target-arm queue: Eric's SMMUv3 patchset, and an array | 1 | Hi; here's the first target-arm pullreq for the 7.0 cycle. |
---|---|---|---|
2 | of minor bugfixes and improvements from various others. | ||
3 | 2 | ||
4 | thanks | 3 | thanks |
5 | -- PMM | 4 | -- PMM |
6 | 5 | ||
7 | The following changes since commit c8b7e627b4269a3bc3ae41d9f420547a47e6d9b9: | 6 | The following changes since commit 76b56fdfc9fa43ec6e5986aee33f108c6c6a511e: |
8 | 7 | ||
9 | Merge remote-tracking branch 'remotes/ericb/tags/pull-nbd-2018-05-04' into staging (2018-05-04 14:42:46 +0100) | 8 | Merge tag 'block-pull-request' of https://gitlab.com/stefanha/qemu into staging (2021-12-14 12:46:18 -0800) |
10 | 9 | ||
11 | are available in the Git repository at: | 10 | are available in the Git repository at: |
12 | 11 | ||
13 | git://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20180504 | 12 | https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20211215 |
14 | 13 | ||
15 | for you to fetch changes up to 5680740c92993e9b3f3e011f2a2c394070e33f56: | 14 | for you to fetch changes up to aed176558806674d030a8305d989d4e6a5073359: |
16 | 15 | ||
17 | hw/arm/virt: Introduce the iommu option (2018-05-04 18:05:52 +0100) | 16 | tests/acpi: add expected blob for VIOT test on virt machine (2021-12-15 10:35:26 +0000) |
18 | 17 | ||
19 | ---------------------------------------------------------------- | 18 | ---------------------------------------------------------------- |
20 | target-arm queue: | 19 | target-arm queue: |
21 | * Emulate the SMMUv3 (IOMMU); one will be created in the 'virt' board | 20 | * ITS: error reporting cleanup |
22 | if the commandline includes "-machine iommu=smmuv3" | 21 | * aspeed: improve documentation |
23 | * target/arm: Implement v8M VLLDM and VLSTM | 22 | * Fix STM32F2XX USART data register readout |
24 | * hw/arm: Don't fail qtest due to missing SD card in -nodefaults mode | 23 | * allow emulated GICv3 to be disabled in non-TCG builds |
25 | * Some fixes to silence Coverity false-positives | 24 | * fix exception priority for singlestep, misaligned PC, bp, etc |
26 | * arm: boot: set boot_info starting from first_cpu | 25 | * Correct calculation of tlb range invalidate length |
27 | (fixes a technical bug not visible in practice) | 26 | * npcm7xx_emc: fix missing queue_flush |
28 | * hw/net/smc91c111: Convert away from old_mmio | 27 | * virt: Add VIOT ACPI table for virtio-iommu |
29 | * hw/usb/tusb6010: Convert away from old_mmio | 28 | * target/i386: Use assert() to sanity-check b1 in SSE decode |
30 | * hw/char/cmsdk-apb-uart.c: Accept more input after character read | 29 | * Don't include qemu-common unnecessarily |
31 | * target/arm: Make MPUIR write-ignored on OMAP, StrongARM | ||
32 | * hw/arm/virt: Add linux,pci-domain property | ||
33 | 30 | ||
34 | ---------------------------------------------------------------- | 31 | ---------------------------------------------------------------- |
35 | Eric Auger (11): | 32 | Alex Bennée (1): |
36 | hw/arm/smmu-common: smmu base device and datatypes | 33 | hw/intc: clean-up error reporting for failed ITS cmd |
37 | hw/arm/smmu-common: IOMMU memory region and address space setup | ||
38 | hw/arm/smmu-common: VMSAv8-64 page table walk | ||
39 | hw/arm/smmuv3: Wired IRQ and GERROR helpers | ||
40 | hw/arm/smmuv3: Queue helpers | ||
41 | hw/arm/smmuv3: Implement MMIO write operations | ||
42 | hw/arm/smmuv3: Event queue recording helper | ||
43 | hw/arm/smmuv3: Implement translate callback | ||
44 | hw/arm/smmuv3: Abort on vfio or vhost case | ||
45 | target/arm/kvm: Translate the MSI doorbell in kvm_arch_fixup_msi_route | ||
46 | hw/arm/virt: Introduce the iommu option | ||
47 | 34 | ||
48 | Igor Mammedov (1): | 35 | Jean-Philippe Brucker (8): |
49 | arm: boot: set boot_info starting from first_cpu | 36 | hw/arm/virt-acpi-build: Add VIOT table for virtio-iommu |
37 | hw/arm/virt: Remove device tree restriction for virtio-iommu | ||
38 | hw/arm/virt: Reject instantiation of multiple IOMMUs | ||
39 | hw/arm/virt: Use object_property_set instead of qdev_prop_set | ||
40 | tests/acpi: allow updates of VIOT expected data files | ||
41 | tests/acpi: add test case for VIOT | ||
42 | tests/acpi: add expected blobs for VIOT test on q35 machine | ||
43 | tests/acpi: add expected blob for VIOT test on virt machine | ||
50 | 44 | ||
51 | Jan Kiszka (1): | 45 | Joel Stanley (4): |
52 | hw/arm/virt: Add linux,pci-domain property | 46 | docs: aspeed: Add new boards |
47 | docs: aspeed: Update OpenBMC image URL | ||
48 | docs: aspeed: Give an example of booting a kernel | ||
49 | docs: aspeed: ADC is now modelled | ||
53 | 50 | ||
54 | Mathew Maidment (1): | 51 | Olivier Hériveaux (1): |
55 | target/arm: Correct MPUIR privilege level in register_cp_regs_for_features() conditional case | 52 | Fix STM32F2XX USART data register readout |
56 | 53 | ||
57 | Patrick Oppenlander (1): | 54 | Patrick Venture (1): |
58 | hw/char/cmsdk-apb-uart.c: Accept more input after character read | 55 | hw/net: npcm7xx_emc fix missing queue_flush |
59 | 56 | ||
60 | Peter Maydell (3): | 57 | Peter Maydell (6): |
61 | hw/usb/tusb6010: Convert away from old_mmio | 58 | target/i386: Use assert() to sanity-check b1 in SSE decode |
62 | hw/net/smc91c111: Convert away from old_mmio | 59 | include/hw/i386: Don't include qemu-common.h in .h files |
63 | target/arm: Implement v8M VLLDM and VLSTM | 60 | target/hexagon/cpu.h: don't include qemu-common.h |
61 | target/rx/cpu.h: Don't include qemu-common.h | ||
62 | hw/arm: Don't include qemu-common.h unnecessarily | ||
63 | target/arm: Correct calculation of tlb range invalidate length | ||
64 | 64 | ||
65 | Prem Mallappa (3): | 65 | Philippe Mathieu-Daudé (2): |
66 | hw/arm/smmuv3: Skeleton | 66 | hw/intc/arm_gicv3: Extract gicv3_set_gicv3state from arm_gicv3_cpuif.c |
67 | hw/arm/virt: Add SMMUv3 to the virt board | 67 | hw/intc/arm_gicv3: Introduce CONFIG_ARM_GIC_TCG Kconfig selector |
68 | hw/arm/virt-acpi-build: Add smmuv3 node in IORT table | ||
69 | 68 | ||
70 | Richard Henderson (2): | 69 | Richard Henderson (10): |
71 | target/arm: Tidy conditions in handle_vec_simd_shri | 70 | target/arm: Hoist pc_next to a local variable in aarch64_tr_translate_insn |
72 | target/arm: Tidy condition in disas_simd_two_reg_misc | 71 | target/arm: Hoist pc_next to a local variable in arm_tr_translate_insn |
72 | target/arm: Hoist pc_next to a local variable in thumb_tr_translate_insn | ||
73 | target/arm: Split arm_pre_translate_insn | ||
74 | target/arm: Advance pc for arch single-step exception | ||
75 | target/arm: Split compute_fsr_fsc out of arm_deliver_fault | ||
76 | target/arm: Take an exception if PC is misaligned | ||
77 | target/arm: Assert thumb pc is aligned | ||
78 | target/arm: Suppress bp for exceptions with more priority | ||
79 | tests/tcg: Add arm and aarch64 pc alignment tests | ||
73 | 80 | ||
74 | Thomas Huth (1): | 81 | docs/system/arm/aspeed.rst | 26 ++++++++++++---- |
75 | hw/arm: Don't fail qtest due to missing SD card in -nodefaults mode | 82 | include/hw/i386/microvm.h | 1 - |
83 | include/hw/i386/x86.h | 1 - | ||
84 | target/arm/helper.h | 1 + | ||
85 | target/arm/syndrome.h | 5 +++ | ||
86 | target/hexagon/cpu.h | 1 - | ||
87 | target/rx/cpu.h | 1 - | ||
88 | hw/arm/boot.c | 1 - | ||
89 | hw/arm/digic_boards.c | 1 - | ||
90 | hw/arm/highbank.c | 1 - | ||
91 | hw/arm/npcm7xx_boards.c | 1 - | ||
92 | hw/arm/sbsa-ref.c | 1 - | ||
93 | hw/arm/stm32f405_soc.c | 1 - | ||
94 | hw/arm/vexpress.c | 1 - | ||
95 | hw/arm/virt-acpi-build.c | 7 +++++ | ||
96 | hw/arm/virt.c | 21 ++++++------- | ||
97 | hw/char/stm32f2xx_usart.c | 3 +- | ||
98 | hw/intc/arm_gicv3.c | 2 +- | ||
99 | hw/intc/arm_gicv3_cpuif.c | 10 +----- | ||
100 | hw/intc/arm_gicv3_cpuif_common.c | 22 +++++++++++++ | ||
101 | hw/intc/arm_gicv3_its.c | 39 +++++++++++++++-------- | ||
102 | hw/net/npcm7xx_emc.c | 18 +++++------ | ||
103 | hw/virtio/virtio-iommu-pci.c | 12 ++------ | ||
104 | linux-user/aarch64/cpu_loop.c | 46 ++++++++++++++++------------ | ||
105 | linux-user/hexagon/cpu_loop.c | 1 + | ||
106 | target/arm/debug_helper.c | 23 ++++++++++++++ | ||
107 | target/arm/gdbstub.c | 9 ++++-- | ||
108 | target/arm/helper.c | 6 ++-- | ||
109 | target/arm/machine.c | 10 ++++++ | ||
110 | target/arm/tlb_helper.c | 63 ++++++++++++++++++++++++++++---------- | ||
111 | target/arm/translate-a64.c | 23 ++++++++++++-- | ||
112 | target/arm/translate.c | 58 ++++++++++++++++++++++++++--------- | ||
113 | target/i386/tcg/translate.c | 12 ++------ | ||
114 | tests/qtest/bios-tables-test.c | 38 +++++++++++++++++++++++ | ||
115 | tests/tcg/aarch64/pcalign-a64.c | 37 ++++++++++++++++++++++ | ||
116 | tests/tcg/arm/pcalign-a32.c | 46 ++++++++++++++++++++++++++++ | ||
117 | hw/arm/Kconfig | 1 + | ||
118 | hw/intc/Kconfig | 5 +++ | ||
119 | hw/intc/meson.build | 11 ++++--- | ||
120 | tests/data/acpi/q35/DSDT.viot | Bin 0 -> 9398 bytes | ||
121 | tests/data/acpi/q35/VIOT.viot | Bin 0 -> 112 bytes | ||
122 | tests/data/acpi/virt/VIOT | Bin 0 -> 88 bytes | ||
123 | tests/tcg/aarch64/Makefile.target | 4 +-- | ||
124 | tests/tcg/arm/Makefile.target | 4 +++ | ||
125 | 44 files changed, 429 insertions(+), 145 deletions(-) | ||
126 | create mode 100644 hw/intc/arm_gicv3_cpuif_common.c | ||
127 | create mode 100644 tests/tcg/aarch64/pcalign-a64.c | ||
128 | create mode 100644 tests/tcg/arm/pcalign-a32.c | ||
129 | create mode 100644 tests/data/acpi/q35/DSDT.viot | ||
130 | create mode 100644 tests/data/acpi/q35/VIOT.viot | ||
131 | create mode 100644 tests/data/acpi/virt/VIOT | ||
76 | 132 | ||
77 | hw/arm/Makefile.objs | 1 + | ||
78 | hw/arm/smmu-internal.h | 99 +++ | ||
79 | hw/arm/smmuv3-internal.h | 621 ++++++++++++++++++ | ||
80 | include/hw/acpi/acpi-defs.h | 15 + | ||
81 | include/hw/arm/smmu-common.h | 145 +++++ | ||
82 | include/hw/arm/smmuv3.h | 87 +++ | ||
83 | include/hw/arm/virt.h | 10 + | ||
84 | hw/arm/boot.c | 2 +- | ||
85 | hw/arm/omap1.c | 8 +- | ||
86 | hw/arm/omap2.c | 8 +- | ||
87 | hw/arm/pxa2xx.c | 15 +- | ||
88 | hw/arm/smmu-common.c | 372 +++++++++++ | ||
89 | hw/arm/smmuv3.c | 1191 +++++++++++++++++++++++++++++++++++ | ||
90 | hw/arm/virt-acpi-build.c | 55 +- | ||
91 | hw/arm/virt.c | 101 ++- | ||
92 | hw/char/cmsdk-apb-uart.c | 1 + | ||
93 | hw/net/smc91c111.c | 54 +- | ||
94 | hw/usb/tusb6010.c | 40 +- | ||
95 | target/arm/helper.c | 2 +- | ||
96 | target/arm/kvm.c | 38 +- | ||
97 | target/arm/translate-a64.c | 12 +- | ||
98 | target/arm/translate.c | 17 +- | ||
99 | default-configs/aarch64-softmmu.mak | 1 + | ||
100 | hw/arm/trace-events | 37 ++ | ||
101 | target/arm/trace-events | 3 + | ||
102 | 25 files changed, 2868 insertions(+), 67 deletions(-) | ||
103 | create mode 100644 hw/arm/smmu-internal.h | ||
104 | create mode 100644 hw/arm/smmuv3-internal.h | ||
105 | create mode 100644 include/hw/arm/smmu-common.h | ||
106 | create mode 100644 include/hw/arm/smmuv3.h | ||
107 | create mode 100644 hw/arm/smmu-common.c | ||
108 | create mode 100644 hw/arm/smmuv3.c | ||
109 | diff view generated by jsdifflib |
1 | From: Patrick Oppenlander <patrick.oppenlander@gmail.com> | 1 | From: Alex Bennée <alex.bennee@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | The character frontend needs to be notified that the uart receive buffer | 3 | While trying to debug a GIC ITS failure I saw some guest errors that |
4 | is empty and ready to handle another character. | 4 | had poor formatting as well as leaving me confused as to what failed. |
5 | As most of the checks aren't possible without a valid dte split that | ||
6 | check apart and then check the other conditions in steps. This avoids | ||
7 | us relying on undefined data. | ||
5 | 8 | ||
6 | Previously, the uart only worked correctly when receiving one character | 9 | I still get a failure with the current kvm-unit-tests but at least I |
7 | at a time. | 10 | know (partially) why now: |
8 | 11 | ||
9 | Signed-off-by: Patrick Oppenlander <patrick.oppenlander@gmail.com> | 12 | Exception return from AArch64 EL1 to AArch64 EL1 PC 0x40080588 |
10 | Message-id: CAEg67GkRTw=cXei3o9hvpxG_L4zSrNzR0bFyAgny+sSEUb_kPw@mail.gmail.com | 13 | PASS: gicv3: its-trigger: inv/invall: dev2/eventid=20 now triggers an LPI |
14 | ITS: MAPD devid=2 size = 0x8 itt=0x40430000 valid=0 | ||
15 | INT dev_id=2 event_id=20 | ||
16 | process_its_cmd: invalid command attributes: invalid dte: 0 for 2 (MEM_TX: 0) | ||
17 | PASS: gicv3: its-trigger: mapd valid=false: no LPI after device unmap | ||
18 | SUMMARY: 6 tests, 1 unexpected failures | ||
19 | |||
20 | Signed-off-by: Alex Bennée <alex.bennee@linaro.org> | ||
11 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 21 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
22 | Message-id: 20211112170454.3158925-1-alex.bennee@linaro.org | ||
23 | Cc: Shashi Mallela <shashi.mallela@linaro.org> | ||
24 | Cc: Peter Maydell <peter.maydell@linaro.org> | ||
12 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 25 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
13 | --- | 26 | --- |
14 | hw/char/cmsdk-apb-uart.c | 1 + | 27 | hw/intc/arm_gicv3_its.c | 39 +++++++++++++++++++++++++++------------ |
15 | 1 file changed, 1 insertion(+) | 28 | 1 file changed, 27 insertions(+), 12 deletions(-) |
16 | 29 | ||
17 | diff --git a/hw/char/cmsdk-apb-uart.c b/hw/char/cmsdk-apb-uart.c | 30 | diff --git a/hw/intc/arm_gicv3_its.c b/hw/intc/arm_gicv3_its.c |
18 | index XXXXXXX..XXXXXXX 100644 | 31 | index XXXXXXX..XXXXXXX 100644 |
19 | --- a/hw/char/cmsdk-apb-uart.c | 32 | --- a/hw/intc/arm_gicv3_its.c |
20 | +++ b/hw/char/cmsdk-apb-uart.c | 33 | +++ b/hw/intc/arm_gicv3_its.c |
21 | @@ -XXX,XX +XXX,XX @@ static uint64_t uart_read(void *opaque, hwaddr offset, unsigned size) | 34 | @@ -XXX,XX +XXX,XX @@ static bool process_its_cmd(GICv3ITSState *s, uint64_t value, uint32_t offset, |
22 | r = s->rxbuf; | 35 | if (res != MEMTX_OK) { |
23 | s->state &= ~R_STATE_RXFULL_MASK; | 36 | return result; |
24 | cmsdk_apb_uart_update(s); | 37 | } |
25 | + qemu_chr_fe_accept_input(&s->chr); | 38 | + } else { |
26 | break; | 39 | + qemu_log_mask(LOG_GUEST_ERROR, |
27 | case A_STATE: | 40 | + "%s: invalid command attributes: " |
28 | r = s->state; | 41 | + "invalid dte: %"PRIx64" for %d (MEM_TX: %d)\n", |
42 | + __func__, dte, devid, res); | ||
43 | + return result; | ||
44 | } | ||
45 | |||
46 | - if ((devid > s->dt.maxids.max_devids) || !dte_valid || !ite_valid || | ||
47 | - !cte_valid || (eventid > max_eventid)) { | ||
48 | + | ||
49 | + /* | ||
50 | + * In this implementation, in case of guest errors we ignore the | ||
51 | + * command and move onto the next command in the queue. | ||
52 | + */ | ||
53 | + if (devid > s->dt.maxids.max_devids) { | ||
54 | qemu_log_mask(LOG_GUEST_ERROR, | ||
55 | - "%s: invalid command attributes " | ||
56 | - "devid %d or eventid %d or invalid dte %d or" | ||
57 | - "invalid cte %d or invalid ite %d\n", | ||
58 | - __func__, devid, eventid, dte_valid, cte_valid, | ||
59 | - ite_valid); | ||
60 | - /* | ||
61 | - * in this implementation, in case of error | ||
62 | - * we ignore this command and move onto the next | ||
63 | - * command in the queue | ||
64 | - */ | ||
65 | + "%s: invalid command attributes: devid %d>%d", | ||
66 | + __func__, devid, s->dt.maxids.max_devids); | ||
67 | + | ||
68 | + } else if (!dte_valid || !ite_valid || !cte_valid) { | ||
69 | + qemu_log_mask(LOG_GUEST_ERROR, | ||
70 | + "%s: invalid command attributes: " | ||
71 | + "dte: %s, ite: %s, cte: %s\n", | ||
72 | + __func__, | ||
73 | + dte_valid ? "valid" : "invalid", | ||
74 | + ite_valid ? "valid" : "invalid", | ||
75 | + cte_valid ? "valid" : "invalid"); | ||
76 | + } else if (eventid > max_eventid) { | ||
77 | + qemu_log_mask(LOG_GUEST_ERROR, | ||
78 | + "%s: invalid command attributes: eventid %d > %d\n", | ||
79 | + __func__, eventid, max_eventid); | ||
80 | } else { | ||
81 | /* | ||
82 | * Current implementation only supports rdbase == procnum | ||
29 | -- | 83 | -- |
30 | 2.17.0 | 84 | 2.25.1 |
31 | 85 | ||
32 | 86 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | From: Joel Stanley <joel@jms.id.au> | ||
1 | 2 | ||
3 | Add X11, FP5280G2, G220A, Rainier and Fuji. Mention that Swift will be | ||
4 | removed in v7.0. | ||
5 | |||
6 | Signed-off-by: Joel Stanley <joel@jms.id.au> | ||
7 | Reviewed-by: Cédric Le Goater <clg@kaod.org> | ||
8 | Message-id: 20211117065752.330632-2-joel@jms.id.au | ||
9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
10 | --- | ||
11 | docs/system/arm/aspeed.rst | 7 ++++++- | ||
12 | 1 file changed, 6 insertions(+), 1 deletion(-) | ||
13 | |||
14 | diff --git a/docs/system/arm/aspeed.rst b/docs/system/arm/aspeed.rst | ||
15 | index XXXXXXX..XXXXXXX 100644 | ||
16 | --- a/docs/system/arm/aspeed.rst | ||
17 | +++ b/docs/system/arm/aspeed.rst | ||
18 | @@ -XXX,XX +XXX,XX @@ AST2400 SoC based machines : | ||
19 | |||
20 | - ``palmetto-bmc`` OpenPOWER Palmetto POWER8 BMC | ||
21 | - ``quanta-q71l-bmc`` OpenBMC Quanta BMC | ||
22 | +- ``supermicrox11-bmc`` Supermicro X11 BMC | ||
23 | |||
24 | AST2500 SoC based machines : | ||
25 | |||
26 | @@ -XXX,XX +XXX,XX @@ AST2500 SoC based machines : | ||
27 | - ``romulus-bmc`` OpenPOWER Romulus POWER9 BMC | ||
28 | - ``witherspoon-bmc`` OpenPOWER Witherspoon POWER9 BMC | ||
29 | - ``sonorapass-bmc`` OCP SonoraPass BMC | ||
30 | -- ``swift-bmc`` OpenPOWER Swift BMC POWER9 | ||
31 | +- ``swift-bmc`` OpenPOWER Swift BMC POWER9 (to be removed in v7.0) | ||
32 | +- ``fp5280g2-bmc`` Inspur FP5280G2 BMC | ||
33 | +- ``g220a-bmc`` Bytedance G220A BMC | ||
34 | |||
35 | AST2600 SoC based machines : | ||
36 | |||
37 | - ``ast2600-evb`` Aspeed AST2600 Evaluation board (Cortex-A7) | ||
38 | - ``tacoma-bmc`` OpenPOWER Witherspoon POWER9 AST2600 BMC | ||
39 | +- ``rainier-bmc`` IBM Rainier POWER10 BMC | ||
40 | +- ``fuji-bmc`` Facebook Fuji BMC | ||
41 | |||
42 | Supported devices | ||
43 | ----------------- | ||
44 | -- | ||
45 | 2.25.1 | ||
46 | |||
47 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | From: Joel Stanley <joel@jms.id.au> | ||
1 | 2 | ||
3 | This is the latest URL for the OpenBMC CI. The old URL still works, but | ||
4 | redirects. | ||
5 | |||
6 | Reviewed-by: Cédric Le Goater <clg@kaod.org> | ||
7 | Signed-off-by: Joel Stanley <joel@jms.id.au> | ||
8 | Message-id: 20211117065752.330632-3-joel@jms.id.au | ||
9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
10 | --- | ||
11 | docs/system/arm/aspeed.rst | 2 +- | ||
12 | 1 file changed, 1 insertion(+), 1 deletion(-) | ||
13 | |||
14 | diff --git a/docs/system/arm/aspeed.rst b/docs/system/arm/aspeed.rst | ||
15 | index XXXXXXX..XXXXXXX 100644 | ||
16 | --- a/docs/system/arm/aspeed.rst | ||
17 | +++ b/docs/system/arm/aspeed.rst | ||
18 | @@ -XXX,XX +XXX,XX @@ The Aspeed machines can be started using the ``-kernel`` option to | ||
19 | load a Linux kernel or from a firmware. Images can be downloaded from | ||
20 | the OpenBMC jenkins : | ||
21 | |||
22 | - https://jenkins.openbmc.org/job/ci-openbmc/lastSuccessfulBuild/distro=ubuntu,label=docker-builder | ||
23 | + https://jenkins.openbmc.org/job/ci-openbmc/lastSuccessfulBuild/ | ||
24 | |||
25 | or directly from the OpenBMC GitHub release repository : | ||
26 | |||
27 | -- | ||
28 | 2.25.1 | ||
29 | |||
30 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | From: Joel Stanley <joel@jms.id.au> | ||
1 | 2 | ||
3 | A common use case for the ASPEED machine is to boot a Linux kernel. | ||
4 | Provide a full example command line. | ||
5 | |||
6 | Reviewed-by: Cédric Le Goater <clg@kaod.org> | ||
7 | Signed-off-by: Joel Stanley <joel@jms.id.au> | ||
8 | Message-id: 20211117065752.330632-4-joel@jms.id.au | ||
9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
10 | --- | ||
11 | docs/system/arm/aspeed.rst | 15 ++++++++++++--- | ||
12 | 1 file changed, 12 insertions(+), 3 deletions(-) | ||
13 | |||
14 | diff --git a/docs/system/arm/aspeed.rst b/docs/system/arm/aspeed.rst | ||
15 | index XXXXXXX..XXXXXXX 100644 | ||
16 | --- a/docs/system/arm/aspeed.rst | ||
17 | +++ b/docs/system/arm/aspeed.rst | ||
18 | @@ -XXX,XX +XXX,XX @@ Missing devices | ||
19 | Boot options | ||
20 | ------------ | ||
21 | |||
22 | -The Aspeed machines can be started using the ``-kernel`` option to | ||
23 | -load a Linux kernel or from a firmware. Images can be downloaded from | ||
24 | -the OpenBMC jenkins : | ||
25 | +The Aspeed machines can be started using the ``-kernel`` and ``-dtb`` options | ||
26 | +to load a Linux kernel or from a firmware. Images can be downloaded from the | ||
27 | +OpenBMC jenkins : | ||
28 | |||
29 | https://jenkins.openbmc.org/job/ci-openbmc/lastSuccessfulBuild/ | ||
30 | |||
31 | @@ -XXX,XX +XXX,XX @@ or directly from the OpenBMC GitHub release repository : | ||
32 | |||
33 | https://github.com/openbmc/openbmc/releases | ||
34 | |||
35 | +To boot a kernel directly from a Linux build tree: | ||
36 | + | ||
37 | +.. code-block:: bash | ||
38 | + | ||
39 | + $ qemu-system-arm -M ast2600-evb -nographic \ | ||
40 | + -kernel arch/arm/boot/zImage \ | ||
41 | + -dtb arch/arm/boot/dts/aspeed-ast2600-evb.dtb \ | ||
42 | + -initrd rootfs.cpio | ||
43 | + | ||
44 | The image should be attached as an MTD drive. Run : | ||
45 | |||
46 | .. code-block:: bash | ||
47 | -- | ||
48 | 2.25.1 | ||
49 | |||
50 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | From: Joel Stanley <joel@jms.id.au> | ||
1 | 2 | ||
3 | Move it to the supported list. | ||
4 | |||
5 | Signed-off-by: Joel Stanley <joel@jms.id.au> | ||
6 | Message-id: 20211117065752.330632-5-joel@jms.id.au | ||
7 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
8 | --- | ||
9 | docs/system/arm/aspeed.rst | 2 +- | ||
10 | 1 file changed, 1 insertion(+), 1 deletion(-) | ||
11 | |||
12 | diff --git a/docs/system/arm/aspeed.rst b/docs/system/arm/aspeed.rst | ||
13 | index XXXXXXX..XXXXXXX 100644 | ||
14 | --- a/docs/system/arm/aspeed.rst | ||
15 | +++ b/docs/system/arm/aspeed.rst | ||
16 | @@ -XXX,XX +XXX,XX @@ Supported devices | ||
17 | * Front LEDs (PCA9552 on I2C bus) | ||
18 | * LPC Peripheral Controller (a subset of subdevices are supported) | ||
19 | * Hash/Crypto Engine (HACE) - Hash support only. TODO: HMAC and RSA | ||
20 | + * ADC | ||
21 | |||
22 | |||
23 | Missing devices | ||
24 | --------------- | ||
25 | |||
26 | * Coprocessor support | ||
27 | - * ADC (out of tree implementation) | ||
28 | * PWM and Fan Controller | ||
29 | * Slave GPIO Controller | ||
30 | * Super I/O Controller | ||
31 | -- | ||
32 | 2.25.1 | ||
33 | |||
34 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | From: Olivier Hériveaux <olivier.heriveaux@ledger.fr> | ||
1 | 2 | ||
3 | Fix issue where the data register may be overwritten by next character | ||
4 | reception before being read and returned. | ||
5 | |||
6 | Signed-off-by: Olivier Hériveaux <olivier.heriveaux@ledger.fr> | ||
7 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
8 | Reviewed-by: Alistair Francis <alistair.francis@wdc.com> | ||
9 | Message-id: 20211128120723.4053-1-olivier.heriveaux@ledger.fr | ||
10 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
11 | --- | ||
12 | hw/char/stm32f2xx_usart.c | 3 ++- | ||
13 | 1 file changed, 2 insertions(+), 1 deletion(-) | ||
14 | |||
15 | diff --git a/hw/char/stm32f2xx_usart.c b/hw/char/stm32f2xx_usart.c | ||
16 | index XXXXXXX..XXXXXXX 100644 | ||
17 | --- a/hw/char/stm32f2xx_usart.c | ||
18 | +++ b/hw/char/stm32f2xx_usart.c | ||
19 | @@ -XXX,XX +XXX,XX @@ static uint64_t stm32f2xx_usart_read(void *opaque, hwaddr addr, | ||
20 | return retvalue; | ||
21 | case USART_DR: | ||
22 | DB_PRINT("Value: 0x%" PRIx32 ", %c\n", s->usart_dr, (char) s->usart_dr); | ||
23 | + retvalue = s->usart_dr & 0x3FF; | ||
24 | s->usart_sr &= ~USART_SR_RXNE; | ||
25 | qemu_chr_fe_accept_input(&s->chr); | ||
26 | qemu_set_irq(s->irq, 0); | ||
27 | - return s->usart_dr & 0x3FF; | ||
28 | + return retvalue; | ||
29 | case USART_BRR: | ||
30 | return s->usart_brr; | ||
31 | case USART_CR1: | ||
32 | -- | ||
33 | 2.25.1 | ||
34 | |||
35 | diff view generated by jsdifflib |
1 | From: Eric Auger <eric.auger@redhat.com> | 1 | From: Philippe Mathieu-Daudé <philmd@redhat.com> |
---|---|---|---|
2 | 2 | ||
3 | This patch implements the page table walk for VMSAv8-64. | 3 | gicv3_set_gicv3state() is used by arm_gicv3_common.c in |
4 | arm_gicv3_common_realize(). Since we want to restrict | ||
5 | arm_gicv3_cpuif.c to TCG, extract gicv3_set_gicv3state() | ||
6 | to a new file. Add this file to the meson 'specific' | ||
7 | source set, since it needs access to "cpu.h". | ||
4 | 8 | ||
5 | Signed-off-by: Eric Auger <eric.auger@redhat.com> | 9 | Signed-off-by: Philippe Mathieu-Daudé <philmd@redhat.com> |
6 | Signed-off-by: Prem Mallappa <prem.mallappa@broadcom.com> | ||
7 | Message-id: 1524665762-31355-4-git-send-email-eric.auger@redhat.com | ||
8 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 10 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
11 | Message-id: 20211115223619.2599282-2-philmd@redhat.com | ||
9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 12 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
10 | --- | 13 | --- |
11 | hw/arm/smmu-internal.h | 99 ++++++++++++++++ | 14 | hw/intc/arm_gicv3_cpuif.c | 10 +--------- |
12 | include/hw/arm/smmu-common.h | 14 +++ | 15 | hw/intc/arm_gicv3_cpuif_common.c | 22 ++++++++++++++++++++++ |
13 | hw/arm/smmu-common.c | 222 +++++++++++++++++++++++++++++++++++ | 16 | hw/intc/meson.build | 1 + |
14 | hw/arm/trace-events | 9 +- | 17 | 3 files changed, 24 insertions(+), 9 deletions(-) |
15 | 4 files changed, 343 insertions(+), 1 deletion(-) | 18 | create mode 100644 hw/intc/arm_gicv3_cpuif_common.c |
16 | create mode 100644 hw/arm/smmu-internal.h | ||
17 | 19 | ||
18 | diff --git a/hw/arm/smmu-internal.h b/hw/arm/smmu-internal.h | 20 | diff --git a/hw/intc/arm_gicv3_cpuif.c b/hw/intc/arm_gicv3_cpuif.c |
21 | index XXXXXXX..XXXXXXX 100644 | ||
22 | --- a/hw/intc/arm_gicv3_cpuif.c | ||
23 | +++ b/hw/intc/arm_gicv3_cpuif.c | ||
24 | @@ -XXX,XX +XXX,XX @@ | ||
25 | /* | ||
26 | - * ARM Generic Interrupt Controller v3 | ||
27 | + * ARM Generic Interrupt Controller v3 (emulation) | ||
28 | * | ||
29 | * Copyright (c) 2016 Linaro Limited | ||
30 | * Written by Peter Maydell | ||
31 | @@ -XXX,XX +XXX,XX @@ | ||
32 | #include "hw/irq.h" | ||
33 | #include "cpu.h" | ||
34 | |||
35 | -void gicv3_set_gicv3state(CPUState *cpu, GICv3CPUState *s) | ||
36 | -{ | ||
37 | - ARMCPU *arm_cpu = ARM_CPU(cpu); | ||
38 | - CPUARMState *env = &arm_cpu->env; | ||
39 | - | ||
40 | - env->gicv3state = (void *)s; | ||
41 | -}; | ||
42 | - | ||
43 | static GICv3CPUState *icc_cs_from_env(CPUARMState *env) | ||
44 | { | ||
45 | return env->gicv3state; | ||
46 | diff --git a/hw/intc/arm_gicv3_cpuif_common.c b/hw/intc/arm_gicv3_cpuif_common.c | ||
19 | new file mode 100644 | 47 | new file mode 100644 |
20 | index XXXXXXX..XXXXXXX | 48 | index XXXXXXX..XXXXXXX |
21 | --- /dev/null | 49 | --- /dev/null |
22 | +++ b/hw/arm/smmu-internal.h | 50 | +++ b/hw/intc/arm_gicv3_cpuif_common.c |
23 | @@ -XXX,XX +XXX,XX @@ | 51 | @@ -XXX,XX +XXX,XX @@ |
52 | +/* SPDX-License-Identifier: GPL-2.0-or-later */ | ||
24 | +/* | 53 | +/* |
25 | + * ARM SMMU support - Internal API | 54 | + * ARM Generic Interrupt Controller v3 |
26 | + * | 55 | + * |
27 | + * Copyright (c) 2017 Red Hat, Inc. | 56 | + * Copyright (c) 2016 Linaro Limited |
28 | + * Copyright (C) 2014-2016 Broadcom Corporation | 57 | + * Written by Peter Maydell |
29 | + * Written by Prem Mallappa, Eric Auger | ||
30 | + * | 58 | + * |
31 | + * This program is free software; you can redistribute it and/or modify | 59 | + * This code is licensed under the GPL, version 2 or (at your option) |
32 | + * it under the terms of the GNU General Public License version 2 as | 60 | + * any later version. |
33 | + * published by the Free Software Foundation. | ||
34 | + * | ||
35 | + * This program is distributed in the hope that it will be useful, | ||
36 | + * but WITHOUT ANY WARRANTY; without even the implied warranty of | ||
37 | + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | ||
38 | + * General Public License for more details. | ||
39 | + * | ||
40 | + * You should have received a copy of the GNU General Public License along | ||
41 | + * with this program; if not, see <http://www.gnu.org/licenses/>. | ||
42 | + */ | 61 | + */ |
43 | + | 62 | + |
44 | +#ifndef HW_ARM_SMMU_INTERNAL_H | 63 | +#include "qemu/osdep.h" |
45 | +#define HW_ARM_SMMU_INTERNAL_H | 64 | +#include "gicv3_internal.h" |
65 | +#include "cpu.h" | ||
46 | + | 66 | + |
47 | +#define TBI0(tbi) ((tbi) & 0x1) | 67 | +void gicv3_set_gicv3state(CPUState *cpu, GICv3CPUState *s) |
48 | +#define TBI1(tbi) ((tbi) & 0x2 >> 1) | 68 | +{ |
69 | + ARMCPU *arm_cpu = ARM_CPU(cpu); | ||
70 | + CPUARMState *env = &arm_cpu->env; | ||
49 | + | 71 | + |
50 | +/* PTE Manipulation */ | 72 | + env->gicv3state = (void *)s; |
51 | + | 73 | +}; |
52 | +#define ARM_LPAE_PTE_TYPE_SHIFT 0 | 74 | diff --git a/hw/intc/meson.build b/hw/intc/meson.build |
53 | +#define ARM_LPAE_PTE_TYPE_MASK 0x3 | ||
54 | + | ||
55 | +#define ARM_LPAE_PTE_TYPE_BLOCK 1 | ||
56 | +#define ARM_LPAE_PTE_TYPE_TABLE 3 | ||
57 | + | ||
58 | +#define ARM_LPAE_L3_PTE_TYPE_RESERVED 1 | ||
59 | +#define ARM_LPAE_L3_PTE_TYPE_PAGE 3 | ||
60 | + | ||
61 | +#define ARM_LPAE_PTE_VALID (1 << 0) | ||
62 | + | ||
63 | +#define PTE_ADDRESS(pte, shift) \ | ||
64 | + (extract64(pte, shift, 47 - shift + 1) << shift) | ||
65 | + | ||
66 | +#define is_invalid_pte(pte) (!(pte & ARM_LPAE_PTE_VALID)) | ||
67 | + | ||
68 | +#define is_reserved_pte(pte, level) \ | ||
69 | + ((level == 3) && \ | ||
70 | + ((pte & ARM_LPAE_PTE_TYPE_MASK) == ARM_LPAE_L3_PTE_TYPE_RESERVED)) | ||
71 | + | ||
72 | +#define is_block_pte(pte, level) \ | ||
73 | + ((level < 3) && \ | ||
74 | + ((pte & ARM_LPAE_PTE_TYPE_MASK) == ARM_LPAE_PTE_TYPE_BLOCK)) | ||
75 | + | ||
76 | +#define is_table_pte(pte, level) \ | ||
77 | + ((level < 3) && \ | ||
78 | + ((pte & ARM_LPAE_PTE_TYPE_MASK) == ARM_LPAE_PTE_TYPE_TABLE)) | ||
79 | + | ||
80 | +#define is_page_pte(pte, level) \ | ||
81 | + ((level == 3) && \ | ||
82 | + ((pte & ARM_LPAE_PTE_TYPE_MASK) == ARM_LPAE_L3_PTE_TYPE_PAGE)) | ||
83 | + | ||
84 | +/* access permissions */ | ||
85 | + | ||
86 | +#define PTE_AP(pte) \ | ||
87 | + (extract64(pte, 6, 2)) | ||
88 | + | ||
89 | +#define PTE_APTABLE(pte) \ | ||
90 | + (extract64(pte, 61, 2)) | ||
91 | + | ||
92 | +/* | ||
93 | + * TODO: At the moment all transactions are considered as privileged (EL1) | ||
94 | + * as IOMMU translation callback does not pass user/priv attributes. | ||
95 | + */ | ||
96 | +#define is_permission_fault(ap, perm) \ | ||
97 | + (((perm) & IOMMU_WO) && ((ap) & 0x2)) | ||
98 | + | ||
99 | +#define PTE_AP_TO_PERM(ap) \ | ||
100 | + (IOMMU_ACCESS_FLAG(true, !((ap) & 0x2))) | ||
101 | + | ||
102 | +/* Level Indexing */ | ||
103 | + | ||
104 | +static inline int level_shift(int level, int granule_sz) | ||
105 | +{ | ||
106 | + return granule_sz + (3 - level) * (granule_sz - 3); | ||
107 | +} | ||
108 | + | ||
109 | +static inline uint64_t level_page_mask(int level, int granule_sz) | ||
110 | +{ | ||
111 | + return ~(MAKE_64BIT_MASK(0, level_shift(level, granule_sz))); | ||
112 | +} | ||
113 | + | ||
114 | +static inline | ||
115 | +uint64_t iova_level_offset(uint64_t iova, int inputsize, | ||
116 | + int level, int gsz) | ||
117 | +{ | ||
118 | + return ((iova & MAKE_64BIT_MASK(0, inputsize)) >> level_shift(level, gsz)) & | ||
119 | + MAKE_64BIT_MASK(0, gsz - 3); | ||
120 | +} | ||
121 | + | ||
122 | +#endif | ||
123 | diff --git a/include/hw/arm/smmu-common.h b/include/hw/arm/smmu-common.h | ||
124 | index XXXXXXX..XXXXXXX 100644 | 75 | index XXXXXXX..XXXXXXX 100644 |
125 | --- a/include/hw/arm/smmu-common.h | 76 | --- a/hw/intc/meson.build |
126 | +++ b/include/hw/arm/smmu-common.h | 77 | +++ b/hw/intc/meson.build |
127 | @@ -XXX,XX +XXX,XX @@ static inline uint16_t smmu_get_sid(SMMUDevice *sdev) | 78 | @@ -XXX,XX +XXX,XX @@ softmmu_ss.add(when: 'CONFIG_XLNX_ZYNQMP_PMU', if_true: files('xlnx-pmu-iomod-in |
128 | { | 79 | |
129 | return PCI_BUILD_BDF(pci_bus_num(sdev->bus), sdev->devfn); | 80 | specific_ss.add(when: 'CONFIG_ALLWINNER_A10_PIC', if_true: files('allwinner-a10-pic.c')) |
130 | } | 81 | specific_ss.add(when: 'CONFIG_APIC', if_true: files('apic.c', 'apic_common.c')) |
131 | + | 82 | +specific_ss.add(when: 'CONFIG_ARM_GIC', if_true: files('arm_gicv3_cpuif_common.c')) |
132 | +/** | 83 | specific_ss.add(when: 'CONFIG_ARM_GIC', if_true: files('arm_gicv3_cpuif.c')) |
133 | + * smmu_ptw - Perform the page table walk for a given iova / access flags | 84 | specific_ss.add(when: 'CONFIG_ARM_GIC_KVM', if_true: files('arm_gic_kvm.c')) |
134 | + * pair, according to @cfg translation config | 85 | specific_ss.add(when: ['CONFIG_ARM_GIC_KVM', 'TARGET_AARCH64'], if_true: files('arm_gicv3_kvm.c', 'arm_gicv3_its_kvm.c')) |
135 | + */ | ||
136 | +int smmu_ptw(SMMUTransCfg *cfg, dma_addr_t iova, IOMMUAccessFlags perm, | ||
137 | + IOMMUTLBEntry *tlbe, SMMUPTWEventInfo *info); | ||
138 | + | ||
139 | +/** | ||
140 | + * select_tt - compute which translation table shall be used according to | ||
141 | + * the input iova and translation config and return the TT specific info | ||
142 | + */ | ||
143 | +SMMUTransTableInfo *select_tt(SMMUTransCfg *cfg, dma_addr_t iova); | ||
144 | + | ||
145 | #endif /* HW_ARM_SMMU_COMMON */ | ||
146 | diff --git a/hw/arm/smmu-common.c b/hw/arm/smmu-common.c | ||
147 | index XXXXXXX..XXXXXXX 100644 | ||
148 | --- a/hw/arm/smmu-common.c | ||
149 | +++ b/hw/arm/smmu-common.c | ||
150 | @@ -XXX,XX +XXX,XX @@ | ||
151 | |||
152 | #include "qemu/error-report.h" | ||
153 | #include "hw/arm/smmu-common.h" | ||
154 | +#include "smmu-internal.h" | ||
155 | + | ||
156 | +/* VMSAv8-64 Translation */ | ||
157 | + | ||
158 | +/** | ||
159 | + * get_pte - Get the content of a page table entry located at | ||
160 | + * @base_addr[@index] | ||
161 | + */ | ||
162 | +static int get_pte(dma_addr_t baseaddr, uint32_t index, uint64_t *pte, | ||
163 | + SMMUPTWEventInfo *info) | ||
164 | +{ | ||
165 | + int ret; | ||
166 | + dma_addr_t addr = baseaddr + index * sizeof(*pte); | ||
167 | + | ||
168 | + /* TODO: guarantee 64-bit single-copy atomicity */ | ||
169 | + ret = dma_memory_read(&address_space_memory, addr, | ||
170 | + (uint8_t *)pte, sizeof(*pte)); | ||
171 | + | ||
172 | + if (ret != MEMTX_OK) { | ||
173 | + info->type = SMMU_PTW_ERR_WALK_EABT; | ||
174 | + info->addr = addr; | ||
175 | + return -EINVAL; | ||
176 | + } | ||
177 | + trace_smmu_get_pte(baseaddr, index, addr, *pte); | ||
178 | + return 0; | ||
179 | +} | ||
180 | + | ||
181 | +/* VMSAv8-64 Translation Table Format Descriptor Decoding */ | ||
182 | + | ||
183 | +/** | ||
184 | + * get_page_pte_address - returns the L3 descriptor output address, | ||
185 | + * ie. the page frame | ||
186 | + * ARM ARM spec: Figure D4-17 VMSAv8-64 level 3 descriptor format | ||
187 | + */ | ||
188 | +static inline hwaddr get_page_pte_address(uint64_t pte, int granule_sz) | ||
189 | +{ | ||
190 | + return PTE_ADDRESS(pte, granule_sz); | ||
191 | +} | ||
192 | + | ||
193 | +/** | ||
194 | + * get_table_pte_address - return table descriptor output address, | ||
195 | + * ie. address of next level table | ||
196 | + * ARM ARM Figure D4-16 VMSAv8-64 level0, level1, and level 2 descriptor formats | ||
197 | + */ | ||
198 | +static inline hwaddr get_table_pte_address(uint64_t pte, int granule_sz) | ||
199 | +{ | ||
200 | + return PTE_ADDRESS(pte, granule_sz); | ||
201 | +} | ||
202 | + | ||
203 | +/** | ||
204 | + * get_block_pte_address - return block descriptor output address and block size | ||
205 | + * ARM ARM Figure D4-16 VMSAv8-64 level0, level1, and level 2 descriptor formats | ||
206 | + */ | ||
207 | +static inline hwaddr get_block_pte_address(uint64_t pte, int level, | ||
208 | + int granule_sz, uint64_t *bsz) | ||
209 | +{ | ||
210 | + int n = (granule_sz - 3) * (4 - level) + 3; | ||
211 | + | ||
212 | + *bsz = 1 << n; | ||
213 | + return PTE_ADDRESS(pte, n); | ||
214 | +} | ||
215 | + | ||
216 | +SMMUTransTableInfo *select_tt(SMMUTransCfg *cfg, dma_addr_t iova) | ||
217 | +{ | ||
218 | + bool tbi = extract64(iova, 55, 1) ? TBI1(cfg->tbi) : TBI0(cfg->tbi); | ||
219 | + uint8_t tbi_byte = tbi * 8; | ||
220 | + | ||
221 | + if (cfg->tt[0].tsz && | ||
222 | + !extract64(iova, 64 - cfg->tt[0].tsz, cfg->tt[0].tsz - tbi_byte)) { | ||
223 | + /* there is a ttbr0 region and we are in it (high bits all zero) */ | ||
224 | + return &cfg->tt[0]; | ||
225 | + } else if (cfg->tt[1].tsz && | ||
226 | + !extract64(iova, 64 - cfg->tt[1].tsz, cfg->tt[1].tsz - tbi_byte)) { | ||
227 | + /* there is a ttbr1 region and we are in it (high bits all one) */ | ||
228 | + return &cfg->tt[1]; | ||
229 | + } else if (!cfg->tt[0].tsz) { | ||
230 | + /* ttbr0 region is "everything not in the ttbr1 region" */ | ||
231 | + return &cfg->tt[0]; | ||
232 | + } else if (!cfg->tt[1].tsz) { | ||
233 | + /* ttbr1 region is "everything not in the ttbr0 region" */ | ||
234 | + return &cfg->tt[1]; | ||
235 | + } | ||
236 | + /* in the gap between the two regions, this is a Translation fault */ | ||
237 | + return NULL; | ||
238 | +} | ||
239 | + | ||
240 | +/** | ||
241 | + * smmu_ptw_64 - VMSAv8-64 Walk of the page tables for a given IOVA | ||
242 | + * @cfg: translation config | ||
243 | + * @iova: iova to translate | ||
244 | + * @perm: access type | ||
245 | + * @tlbe: IOMMUTLBEntry (out) | ||
246 | + * @info: handle to an error info | ||
247 | + * | ||
248 | + * Return 0 on success, < 0 on error. In case of error, @info is filled | ||
249 | + * and tlbe->perm is set to IOMMU_NONE. | ||
250 | + * Upon success, @tlbe is filled with translated_addr and entry | ||
251 | + * permission rights. | ||
252 | + */ | ||
253 | +static int smmu_ptw_64(SMMUTransCfg *cfg, | ||
254 | + dma_addr_t iova, IOMMUAccessFlags perm, | ||
255 | + IOMMUTLBEntry *tlbe, SMMUPTWEventInfo *info) | ||
256 | +{ | ||
257 | + dma_addr_t baseaddr, indexmask; | ||
258 | + int stage = cfg->stage; | ||
259 | + SMMUTransTableInfo *tt = select_tt(cfg, iova); | ||
260 | + uint8_t level, granule_sz, inputsize, stride; | ||
261 | + | ||
262 | + if (!tt || tt->disabled) { | ||
263 | + info->type = SMMU_PTW_ERR_TRANSLATION; | ||
264 | + goto error; | ||
265 | + } | ||
266 | + | ||
267 | + granule_sz = tt->granule_sz; | ||
268 | + stride = granule_sz - 3; | ||
269 | + inputsize = 64 - tt->tsz; | ||
270 | + level = 4 - (inputsize - 4) / stride; | ||
271 | + indexmask = (1ULL << (inputsize - (stride * (4 - level)))) - 1; | ||
272 | + baseaddr = extract64(tt->ttb, 0, 48); | ||
273 | + baseaddr &= ~indexmask; | ||
274 | + | ||
275 | + tlbe->iova = iova; | ||
276 | + tlbe->addr_mask = (1 << granule_sz) - 1; | ||
277 | + | ||
278 | + while (level <= 3) { | ||
279 | + uint64_t subpage_size = 1ULL << level_shift(level, granule_sz); | ||
280 | + uint64_t mask = subpage_size - 1; | ||
281 | + uint32_t offset = iova_level_offset(iova, inputsize, level, granule_sz); | ||
282 | + uint64_t pte; | ||
283 | + dma_addr_t pte_addr = baseaddr + offset * sizeof(pte); | ||
284 | + uint8_t ap; | ||
285 | + | ||
286 | + if (get_pte(baseaddr, offset, &pte, info)) { | ||
287 | + goto error; | ||
288 | + } | ||
289 | + trace_smmu_ptw_level(level, iova, subpage_size, | ||
290 | + baseaddr, offset, pte); | ||
291 | + | ||
292 | + if (is_invalid_pte(pte) || is_reserved_pte(pte, level)) { | ||
293 | + trace_smmu_ptw_invalid_pte(stage, level, baseaddr, | ||
294 | + pte_addr, offset, pte); | ||
295 | + info->type = SMMU_PTW_ERR_TRANSLATION; | ||
296 | + goto error; | ||
297 | + } | ||
298 | + | ||
299 | + if (is_page_pte(pte, level)) { | ||
300 | + uint64_t gpa = get_page_pte_address(pte, granule_sz); | ||
301 | + | ||
302 | + ap = PTE_AP(pte); | ||
303 | + if (is_permission_fault(ap, perm)) { | ||
304 | + info->type = SMMU_PTW_ERR_PERMISSION; | ||
305 | + goto error; | ||
306 | + } | ||
307 | + | ||
308 | + tlbe->translated_addr = gpa + (iova & mask); | ||
309 | + tlbe->perm = PTE_AP_TO_PERM(ap); | ||
310 | + trace_smmu_ptw_page_pte(stage, level, iova, | ||
311 | + baseaddr, pte_addr, pte, gpa); | ||
312 | + return 0; | ||
313 | + } | ||
314 | + if (is_block_pte(pte, level)) { | ||
315 | + uint64_t block_size; | ||
316 | + hwaddr gpa = get_block_pte_address(pte, level, granule_sz, | ||
317 | + &block_size); | ||
318 | + | ||
319 | + ap = PTE_AP(pte); | ||
320 | + if (is_permission_fault(ap, perm)) { | ||
321 | + info->type = SMMU_PTW_ERR_PERMISSION; | ||
322 | + goto error; | ||
323 | + } | ||
324 | + | ||
325 | + trace_smmu_ptw_block_pte(stage, level, baseaddr, | ||
326 | + pte_addr, pte, iova, gpa, | ||
327 | + block_size >> 20); | ||
328 | + | ||
329 | + tlbe->translated_addr = gpa + (iova & mask); | ||
330 | + tlbe->perm = PTE_AP_TO_PERM(ap); | ||
331 | + return 0; | ||
332 | + } | ||
333 | + | ||
334 | + /* table pte */ | ||
335 | + ap = PTE_APTABLE(pte); | ||
336 | + | ||
337 | + if (is_permission_fault(ap, perm)) { | ||
338 | + info->type = SMMU_PTW_ERR_PERMISSION; | ||
339 | + goto error; | ||
340 | + } | ||
341 | + baseaddr = get_table_pte_address(pte, granule_sz); | ||
342 | + level++; | ||
343 | + } | ||
344 | + | ||
345 | + info->type = SMMU_PTW_ERR_TRANSLATION; | ||
346 | + | ||
347 | +error: | ||
348 | + tlbe->perm = IOMMU_NONE; | ||
349 | + return -EINVAL; | ||
350 | +} | ||
351 | + | ||
352 | +/** | ||
353 | + * smmu_ptw - Walk the page tables for an IOVA, according to @cfg | ||
354 | + * | ||
355 | + * @cfg: translation configuration | ||
356 | + * @iova: iova to translate | ||
357 | + * @perm: tentative access type | ||
358 | + * @tlbe: returned entry | ||
359 | + * @info: ptw event handle | ||
360 | + * | ||
361 | + * return 0 on success | ||
362 | + */ | ||
363 | +inline int smmu_ptw(SMMUTransCfg *cfg, dma_addr_t iova, IOMMUAccessFlags perm, | ||
364 | + IOMMUTLBEntry *tlbe, SMMUPTWEventInfo *info) | ||
365 | +{ | ||
366 | + if (!cfg->aa64) { | ||
367 | + /* | ||
368 | + * This code path is not entered as we check this while decoding | ||
369 | + * the configuration data in the derived SMMU model. | ||
370 | + */ | ||
371 | + g_assert_not_reached(); | ||
372 | + } | ||
373 | + | ||
374 | + return smmu_ptw_64(cfg, iova, perm, tlbe, info); | ||
375 | +} | ||
376 | |||
377 | /** | ||
378 | * The bus number is used for lookup when SID based invalidation occurs. | ||
379 | diff --git a/hw/arm/trace-events b/hw/arm/trace-events | ||
380 | index XXXXXXX..XXXXXXX 100644 | ||
381 | --- a/hw/arm/trace-events | ||
382 | +++ b/hw/arm/trace-events | ||
383 | @@ -XXX,XX +XXX,XX @@ | ||
384 | virt_acpi_setup(void) "No fw cfg or ACPI disabled. Bailing out." | ||
385 | |||
386 | # hw/arm/smmu-common.c | ||
387 | -smmu_add_mr(const char *name) "%s" | ||
388 | \ No newline at end of file | ||
389 | +smmu_add_mr(const char *name) "%s" | ||
390 | +smmu_page_walk(int stage, uint64_t baseaddr, int first_level, uint64_t start, uint64_t end) "stage=%d, baseaddr=0x%"PRIx64", first level=%d, start=0x%"PRIx64", end=0x%"PRIx64 | ||
391 | +smmu_lookup_table(int level, uint64_t baseaddr, int granule_sz, uint64_t start, uint64_t end, int flags, uint64_t subpage_size) "level=%d baseaddr=0x%"PRIx64" granule=%d, start=0x%"PRIx64" end=0x%"PRIx64" flags=%d subpage_size=0x%"PRIx64 | ||
392 | +smmu_ptw_level(int level, uint64_t iova, size_t subpage_size, uint64_t baseaddr, uint32_t offset, uint64_t pte) "level=%d iova=0x%"PRIx64" subpage_sz=0x%lx baseaddr=0x%"PRIx64" offset=%d => pte=0x%"PRIx64 | ||
393 | +smmu_ptw_invalid_pte(int stage, int level, uint64_t baseaddr, uint64_t pteaddr, uint32_t offset, uint64_t pte) "stage=%d level=%d base@=0x%"PRIx64" pte@=0x%"PRIx64" offset=%d pte=0x%"PRIx64 | ||
394 | +smmu_ptw_page_pte(int stage, int level, uint64_t iova, uint64_t baseaddr, uint64_t pteaddr, uint64_t pte, uint64_t address) "stage=%d level=%d iova=0x%"PRIx64" base@=0x%"PRIx64" pte@=0x%"PRIx64" pte=0x%"PRIx64" page address = 0x%"PRIx64 | ||
395 | +smmu_ptw_block_pte(int stage, int level, uint64_t baseaddr, uint64_t pteaddr, uint64_t pte, uint64_t iova, uint64_t gpa, int bsize_mb) "stage=%d level=%d base@=0x%"PRIx64" pte@=0x%"PRIx64" pte=0x%"PRIx64" iova=0x%"PRIx64" block address = 0x%"PRIx64" block size = %d MiB" | ||
396 | +smmu_get_pte(uint64_t baseaddr, int index, uint64_t pteaddr, uint64_t pte) "baseaddr=0x%"PRIx64" index=0x%x, pteaddr=0x%"PRIx64", pte=0x%"PRIx64 | ||
397 | -- | 86 | -- |
398 | 2.17.0 | 87 | 2.25.1 |
399 | 88 | ||
400 | 89 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | From: Philippe Mathieu-Daudé <philmd@redhat.com> | ||
1 | 2 | ||
3 | The TYPE_ARM_GICV3 device is an emulated one. When using | ||
4 | KVM, it is recommended to use the TYPE_KVM_ARM_GICV3 device | ||
5 | (which uses in-kernel support). | ||
6 | |||
7 | When using --with-devices-FOO, it is possible to build a | ||
8 | binary with a specific set of devices. When this binary is | ||
9 | restricted to KVM accelerator, the TYPE_ARM_GICV3 device is | ||
10 | irrelevant, and it is desirable to remove it from the binary. | ||
11 | |||
12 | Therefore introduce the CONFIG_ARM_GIC_TCG Kconfig selector | ||
13 | which select the files required to have the TYPE_ARM_GICV3 | ||
14 | device, but also allowing to de-select this device. | ||
15 | |||
16 | Signed-off-by: Philippe Mathieu-Daudé <philmd@redhat.com> | ||
17 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
18 | Message-id: 20211115223619.2599282-3-philmd@redhat.com | ||
19 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
20 | --- | ||
21 | hw/intc/arm_gicv3.c | 2 +- | ||
22 | hw/intc/Kconfig | 5 +++++ | ||
23 | hw/intc/meson.build | 10 ++++++---- | ||
24 | 3 files changed, 12 insertions(+), 5 deletions(-) | ||
25 | |||
26 | diff --git a/hw/intc/arm_gicv3.c b/hw/intc/arm_gicv3.c | ||
27 | index XXXXXXX..XXXXXXX 100644 | ||
28 | --- a/hw/intc/arm_gicv3.c | ||
29 | +++ b/hw/intc/arm_gicv3.c | ||
30 | @@ -XXX,XX +XXX,XX @@ | ||
31 | /* | ||
32 | - * ARM Generic Interrupt Controller v3 | ||
33 | + * ARM Generic Interrupt Controller v3 (emulation) | ||
34 | * | ||
35 | * Copyright (c) 2015 Huawei. | ||
36 | * Copyright (c) 2016 Linaro Limited | ||
37 | diff --git a/hw/intc/Kconfig b/hw/intc/Kconfig | ||
38 | index XXXXXXX..XXXXXXX 100644 | ||
39 | --- a/hw/intc/Kconfig | ||
40 | +++ b/hw/intc/Kconfig | ||
41 | @@ -XXX,XX +XXX,XX @@ config APIC | ||
42 | select MSI_NONBROKEN | ||
43 | select I8259 | ||
44 | |||
45 | +config ARM_GIC_TCG | ||
46 | + bool | ||
47 | + default y | ||
48 | + depends on ARM_GIC && TCG | ||
49 | + | ||
50 | config ARM_GIC_KVM | ||
51 | bool | ||
52 | default y | ||
53 | diff --git a/hw/intc/meson.build b/hw/intc/meson.build | ||
54 | index XXXXXXX..XXXXXXX 100644 | ||
55 | --- a/hw/intc/meson.build | ||
56 | +++ b/hw/intc/meson.build | ||
57 | @@ -XXX,XX +XXX,XX @@ softmmu_ss.add(when: 'CONFIG_ARM_GIC', if_true: files( | ||
58 | 'arm_gic.c', | ||
59 | 'arm_gic_common.c', | ||
60 | 'arm_gicv2m.c', | ||
61 | - 'arm_gicv3.c', | ||
62 | 'arm_gicv3_common.c', | ||
63 | - 'arm_gicv3_dist.c', | ||
64 | 'arm_gicv3_its_common.c', | ||
65 | - 'arm_gicv3_redist.c', | ||
66 | +)) | ||
67 | +softmmu_ss.add(when: 'CONFIG_ARM_GIC_TCG', if_true: files( | ||
68 | + 'arm_gicv3.c', | ||
69 | + 'arm_gicv3_dist.c', | ||
70 | 'arm_gicv3_its.c', | ||
71 | + 'arm_gicv3_redist.c', | ||
72 | )) | ||
73 | softmmu_ss.add(when: 'CONFIG_ETRAXFS', if_true: files('etraxfs_pic.c')) | ||
74 | softmmu_ss.add(when: 'CONFIG_HEATHROW_PIC', if_true: files('heathrow_pic.c')) | ||
75 | @@ -XXX,XX +XXX,XX @@ softmmu_ss.add(when: 'CONFIG_XLNX_ZYNQMP_PMU', if_true: files('xlnx-pmu-iomod-in | ||
76 | specific_ss.add(when: 'CONFIG_ALLWINNER_A10_PIC', if_true: files('allwinner-a10-pic.c')) | ||
77 | specific_ss.add(when: 'CONFIG_APIC', if_true: files('apic.c', 'apic_common.c')) | ||
78 | specific_ss.add(when: 'CONFIG_ARM_GIC', if_true: files('arm_gicv3_cpuif_common.c')) | ||
79 | -specific_ss.add(when: 'CONFIG_ARM_GIC', if_true: files('arm_gicv3_cpuif.c')) | ||
80 | +specific_ss.add(when: 'CONFIG_ARM_GIC_TCG', if_true: files('arm_gicv3_cpuif.c')) | ||
81 | specific_ss.add(when: 'CONFIG_ARM_GIC_KVM', if_true: files('arm_gic_kvm.c')) | ||
82 | specific_ss.add(when: ['CONFIG_ARM_GIC_KVM', 'TARGET_AARCH64'], if_true: files('arm_gicv3_kvm.c', 'arm_gicv3_its_kvm.c')) | ||
83 | specific_ss.add(when: 'CONFIG_ARM_V7M', if_true: files('armv7m_nvic.c')) | ||
84 | -- | ||
85 | 2.25.1 | ||
86 | |||
87 | diff view generated by jsdifflib |
1 | From: Richard Henderson <richard.henderson@linaro.org> | 1 | From: Richard Henderson <richard.henderson@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | The (size > 3 && !is_q) condition is identical to the preceeding test | ||
4 | of bit 3 in immh; eliminate it. For the benefit of Coverity, assert | ||
5 | that size is within the bounds we expect. | ||
6 | |||
7 | Fixes: Coverity CID1385846 | ||
8 | Fixes: Coverity CID1385849 | ||
9 | Fixes: Coverity CID1385852 | ||
10 | Fixes: Coverity CID1385857 | ||
11 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> | 3 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> |
12 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | 4 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
13 | Message-id: 20180501180455.11214-2-richard.henderson@linaro.org | ||
14 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 5 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
15 | --- | 6 | --- |
16 | target/arm/translate-a64.c | 6 +----- | 7 | target/arm/translate-a64.c | 7 ++++--- |
17 | 1 file changed, 1 insertion(+), 5 deletions(-) | 8 | 1 file changed, 4 insertions(+), 3 deletions(-) |
18 | 9 | ||
19 | diff --git a/target/arm/translate-a64.c b/target/arm/translate-a64.c | 10 | diff --git a/target/arm/translate-a64.c b/target/arm/translate-a64.c |
20 | index XXXXXXX..XXXXXXX 100644 | 11 | index XXXXXXX..XXXXXXX 100644 |
21 | --- a/target/arm/translate-a64.c | 12 | --- a/target/arm/translate-a64.c |
22 | +++ b/target/arm/translate-a64.c | 13 | +++ b/target/arm/translate-a64.c |
23 | @@ -XXX,XX +XXX,XX @@ static void handle_vec_simd_shri(DisasContext *s, bool is_q, bool is_u, | 14 | @@ -XXX,XX +XXX,XX @@ static void aarch64_tr_translate_insn(DisasContextBase *dcbase, CPUState *cpu) |
24 | unallocated_encoding(s); | 15 | { |
16 | DisasContext *s = container_of(dcbase, DisasContext, base); | ||
17 | CPUARMState *env = cpu->env_ptr; | ||
18 | + uint64_t pc = s->base.pc_next; | ||
19 | uint32_t insn; | ||
20 | |||
21 | if (s->ss_active && !s->pstate_ss) { | ||
22 | @@ -XXX,XX +XXX,XX @@ static void aarch64_tr_translate_insn(DisasContextBase *dcbase, CPUState *cpu) | ||
25 | return; | 23 | return; |
26 | } | 24 | } |
27 | - | 25 | |
28 | - if (size > 3 && !is_q) { | 26 | - s->pc_curr = s->base.pc_next; |
29 | - unallocated_encoding(s); | 27 | - insn = arm_ldl_code(env, &s->base, s->base.pc_next, s->sctlr_b); |
30 | - return; | 28 | + s->pc_curr = pc; |
31 | - } | 29 | + insn = arm_ldl_code(env, &s->base, pc, s->sctlr_b); |
32 | + tcg_debug_assert(size <= 3); | 30 | s->insn = insn; |
33 | 31 | - s->base.pc_next += 4; | |
34 | if (!fp_access_check(s)) { | 32 | + s->base.pc_next = pc + 4; |
35 | return; | 33 | |
34 | s->fp_access_checked = false; | ||
35 | s->sve_access_checked = false; | ||
36 | -- | 36 | -- |
37 | 2.17.0 | 37 | 2.25.1 |
38 | 38 | ||
39 | 39 | diff view generated by jsdifflib |
1 | From: Eric Auger <eric.auger@redhat.com> | 1 | From: Richard Henderson <richard.henderson@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | In case the MSI is translated by an IOMMU we need to fixup the | 3 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> |
4 | MSI route with the translated address. | ||
5 | |||
6 | Signed-off-by: Eric Auger <eric.auger@redhat.com> | ||
7 | Signed-off-by: Bharat Bhushan <Bharat.Bhushan@nxp.com> | ||
8 | Message-id: 1524665762-31355-12-git-send-email-eric.auger@redhat.com | ||
9 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 4 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
10 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 5 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
11 | --- | 6 | --- |
12 | target/arm/kvm.c | 38 +++++++++++++++++++++++++++++++++++++- | 7 | target/arm/translate.c | 9 +++++---- |
13 | target/arm/trace-events | 3 +++ | 8 | 1 file changed, 5 insertions(+), 4 deletions(-) |
14 | 2 files changed, 40 insertions(+), 1 deletion(-) | ||
15 | 9 | ||
16 | diff --git a/target/arm/kvm.c b/target/arm/kvm.c | 10 | diff --git a/target/arm/translate.c b/target/arm/translate.c |
17 | index XXXXXXX..XXXXXXX 100644 | 11 | index XXXXXXX..XXXXXXX 100644 |
18 | --- a/target/arm/kvm.c | 12 | --- a/target/arm/translate.c |
19 | +++ b/target/arm/kvm.c | 13 | +++ b/target/arm/translate.c |
20 | @@ -XXX,XX +XXX,XX @@ | 14 | @@ -XXX,XX +XXX,XX @@ static void arm_tr_translate_insn(DisasContextBase *dcbase, CPUState *cpu) |
21 | #include "sysemu/kvm.h" | ||
22 | #include "kvm_arm.h" | ||
23 | #include "cpu.h" | ||
24 | +#include "trace.h" | ||
25 | #include "internals.h" | ||
26 | #include "hw/arm/arm.h" | ||
27 | +#include "hw/pci/pci.h" | ||
28 | #include "exec/memattrs.h" | ||
29 | #include "exec/address-spaces.h" | ||
30 | #include "hw/boards.h" | ||
31 | @@ -XXX,XX +XXX,XX @@ int kvm_arm_vgic_probe(void) | ||
32 | int kvm_arch_fixup_msi_route(struct kvm_irq_routing_entry *route, | ||
33 | uint64_t address, uint32_t data, PCIDevice *dev) | ||
34 | { | 15 | { |
35 | - return 0; | 16 | DisasContext *dc = container_of(dcbase, DisasContext, base); |
36 | + AddressSpace *as = pci_device_iommu_address_space(dev); | 17 | CPUARMState *env = cpu->env_ptr; |
37 | + hwaddr xlat, len, doorbell_gpa; | 18 | + uint32_t pc = dc->base.pc_next; |
38 | + MemoryRegionSection mrs; | 19 | unsigned int insn; |
39 | + MemoryRegion *mr; | 20 | |
40 | + int ret = 1; | 21 | if (arm_pre_translate_insn(dc)) { |
41 | + | 22 | - dc->base.pc_next += 4; |
42 | + if (as == &address_space_memory) { | 23 | + dc->base.pc_next = pc + 4; |
43 | + return 0; | 24 | return; |
44 | + } | 25 | } |
45 | + | 26 | |
46 | + /* MSI doorbell address is translated by an IOMMU */ | 27 | - dc->pc_curr = dc->base.pc_next; |
47 | + | 28 | - insn = arm_ldl_code(env, &dc->base, dc->base.pc_next, dc->sctlr_b); |
48 | + rcu_read_lock(); | 29 | + dc->pc_curr = pc; |
49 | + mr = address_space_translate(as, address, &xlat, &len, true); | 30 | + insn = arm_ldl_code(env, &dc->base, pc, dc->sctlr_b); |
50 | + if (!mr) { | 31 | dc->insn = insn; |
51 | + goto unlock; | 32 | - dc->base.pc_next += 4; |
52 | + } | 33 | + dc->base.pc_next = pc + 4; |
53 | + mrs = memory_region_find(mr, xlat, 1); | 34 | disas_arm_insn(dc, insn); |
54 | + if (!mrs.mr) { | 35 | |
55 | + goto unlock; | 36 | arm_post_translate_insn(dc); |
56 | + } | ||
57 | + | ||
58 | + doorbell_gpa = mrs.offset_within_address_space; | ||
59 | + memory_region_unref(mrs.mr); | ||
60 | + | ||
61 | + route->u.msi.address_lo = doorbell_gpa; | ||
62 | + route->u.msi.address_hi = doorbell_gpa >> 32; | ||
63 | + | ||
64 | + trace_kvm_arm_fixup_msi_route(address, doorbell_gpa); | ||
65 | + | ||
66 | + ret = 0; | ||
67 | + | ||
68 | +unlock: | ||
69 | + rcu_read_unlock(); | ||
70 | + return ret; | ||
71 | } | ||
72 | |||
73 | int kvm_arch_add_msi_route_post(struct kvm_irq_routing_entry *route, | ||
74 | diff --git a/target/arm/trace-events b/target/arm/trace-events | ||
75 | index XXXXXXX..XXXXXXX 100644 | ||
76 | --- a/target/arm/trace-events | ||
77 | +++ b/target/arm/trace-events | ||
78 | @@ -XXX,XX +XXX,XX @@ arm_gt_tval_write(int timer, uint64_t value) "gt_tval_write: timer %d value 0x%" | ||
79 | arm_gt_ctl_write(int timer, uint64_t value) "gt_ctl_write: timer %d value 0x%" PRIx64 | ||
80 | arm_gt_imask_toggle(int timer, int irqstate) "gt_ctl_write: timer %d IMASK toggle, new irqstate %d" | ||
81 | arm_gt_cntvoff_write(uint64_t value) "gt_cntvoff_write: value 0x%" PRIx64 | ||
82 | + | ||
83 | +# target/arm/kvm.c | ||
84 | +kvm_arm_fixup_msi_route(uint64_t iova, uint64_t gpa) "MSI iova = 0x%"PRIx64" is translated into 0x%"PRIx64 | ||
85 | -- | 37 | -- |
86 | 2.17.0 | 38 | 2.25.1 |
87 | 39 | ||
88 | 40 | diff view generated by jsdifflib |
1 | From: Eric Auger <eric.auger@redhat.com> | 1 | From: Richard Henderson <richard.henderson@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | Let's introduce a helper function aiming at recording an | 3 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> |
4 | event in the event queue. | ||
5 | |||
6 | Signed-off-by: Eric Auger <eric.auger@redhat.com> | ||
7 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 4 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
8 | Message-id: 1524665762-31355-9-git-send-email-eric.auger@redhat.com | ||
9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 5 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
10 | --- | 6 | --- |
11 | hw/arm/smmuv3-internal.h | 148 ++++++++++++++++++++++++++++++++++++++- | 7 | target/arm/translate.c | 16 ++++++++-------- |
12 | hw/arm/smmuv3.c | 108 ++++++++++++++++++++++++++-- | 8 | 1 file changed, 8 insertions(+), 8 deletions(-) |
13 | hw/arm/trace-events | 1 + | ||
14 | 3 files changed, 249 insertions(+), 8 deletions(-) | ||
15 | 9 | ||
16 | diff --git a/hw/arm/smmuv3-internal.h b/hw/arm/smmuv3-internal.h | 10 | diff --git a/target/arm/translate.c b/target/arm/translate.c |
17 | index XXXXXXX..XXXXXXX 100644 | 11 | index XXXXXXX..XXXXXXX 100644 |
18 | --- a/hw/arm/smmuv3-internal.h | 12 | --- a/target/arm/translate.c |
19 | +++ b/hw/arm/smmuv3-internal.h | 13 | +++ b/target/arm/translate.c |
20 | @@ -XXX,XX +XXX,XX @@ static inline void smmu_write_cmdq_err(SMMUv3State *s, uint32_t err_type) | 14 | @@ -XXX,XX +XXX,XX @@ static void thumb_tr_translate_insn(DisasContextBase *dcbase, CPUState *cpu) |
21 | s->cmdq.cons = FIELD_DP32(s->cmdq.cons, CMDQ_CONS, ERR, err_type); | ||
22 | } | ||
23 | |||
24 | -void smmuv3_write_eventq(SMMUv3State *s, Evt *evt); | ||
25 | - | ||
26 | /* Commands */ | ||
27 | |||
28 | typedef enum SMMUCommandType { | ||
29 | @@ -XXX,XX +XXX,XX @@ enum { /* Command completion notification */ | ||
30 | |||
31 | #define SMMU_FEATURE_2LVL_STE (1 << 0) | ||
32 | |||
33 | +/* Events */ | ||
34 | + | ||
35 | +typedef enum SMMUEventType { | ||
36 | + SMMU_EVT_OK = 0x00, | ||
37 | + SMMU_EVT_F_UUT , | ||
38 | + SMMU_EVT_C_BAD_STREAMID , | ||
39 | + SMMU_EVT_F_STE_FETCH , | ||
40 | + SMMU_EVT_C_BAD_STE , | ||
41 | + SMMU_EVT_F_BAD_ATS_TREQ , | ||
42 | + SMMU_EVT_F_STREAM_DISABLED , | ||
43 | + SMMU_EVT_F_TRANS_FORBIDDEN , | ||
44 | + SMMU_EVT_C_BAD_SUBSTREAMID , | ||
45 | + SMMU_EVT_F_CD_FETCH , | ||
46 | + SMMU_EVT_C_BAD_CD , | ||
47 | + SMMU_EVT_F_WALK_EABT , | ||
48 | + SMMU_EVT_F_TRANSLATION = 0x10, | ||
49 | + SMMU_EVT_F_ADDR_SIZE , | ||
50 | + SMMU_EVT_F_ACCESS , | ||
51 | + SMMU_EVT_F_PERMISSION , | ||
52 | + SMMU_EVT_F_TLB_CONFLICT = 0x20, | ||
53 | + SMMU_EVT_F_CFG_CONFLICT , | ||
54 | + SMMU_EVT_E_PAGE_REQ = 0x24, | ||
55 | +} SMMUEventType; | ||
56 | + | ||
57 | +static const char *event_stringify[] = { | ||
58 | + [SMMU_EVT_OK] = "SMMU_EVT_OK", | ||
59 | + [SMMU_EVT_F_UUT] = "SMMU_EVT_F_UUT", | ||
60 | + [SMMU_EVT_C_BAD_STREAMID] = "SMMU_EVT_C_BAD_STREAMID", | ||
61 | + [SMMU_EVT_F_STE_FETCH] = "SMMU_EVT_F_STE_FETCH", | ||
62 | + [SMMU_EVT_C_BAD_STE] = "SMMU_EVT_C_BAD_STE", | ||
63 | + [SMMU_EVT_F_BAD_ATS_TREQ] = "SMMU_EVT_F_BAD_ATS_TREQ", | ||
64 | + [SMMU_EVT_F_STREAM_DISABLED] = "SMMU_EVT_F_STREAM_DISABLED", | ||
65 | + [SMMU_EVT_F_TRANS_FORBIDDEN] = "SMMU_EVT_F_TRANS_FORBIDDEN", | ||
66 | + [SMMU_EVT_C_BAD_SUBSTREAMID] = "SMMU_EVT_C_BAD_SUBSTREAMID", | ||
67 | + [SMMU_EVT_F_CD_FETCH] = "SMMU_EVT_F_CD_FETCH", | ||
68 | + [SMMU_EVT_C_BAD_CD] = "SMMU_EVT_C_BAD_CD", | ||
69 | + [SMMU_EVT_F_WALK_EABT] = "SMMU_EVT_F_WALK_EABT", | ||
70 | + [SMMU_EVT_F_TRANSLATION] = "SMMU_EVT_F_TRANSLATION", | ||
71 | + [SMMU_EVT_F_ADDR_SIZE] = "SMMU_EVT_F_ADDR_SIZE", | ||
72 | + [SMMU_EVT_F_ACCESS] = "SMMU_EVT_F_ACCESS", | ||
73 | + [SMMU_EVT_F_PERMISSION] = "SMMU_EVT_F_PERMISSION", | ||
74 | + [SMMU_EVT_F_TLB_CONFLICT] = "SMMU_EVT_F_TLB_CONFLICT", | ||
75 | + [SMMU_EVT_F_CFG_CONFLICT] = "SMMU_EVT_F_CFG_CONFLICT", | ||
76 | + [SMMU_EVT_E_PAGE_REQ] = "SMMU_EVT_E_PAGE_REQ", | ||
77 | +}; | ||
78 | + | ||
79 | +static inline const char *smmu_event_string(SMMUEventType type) | ||
80 | +{ | ||
81 | + if (type < ARRAY_SIZE(event_stringify)) { | ||
82 | + return event_stringify[type] ? event_stringify[type] : "UNKNOWN"; | ||
83 | + } else { | ||
84 | + return "INVALID"; | ||
85 | + } | ||
86 | +} | ||
87 | + | ||
88 | +/* Encode an event record */ | ||
89 | +typedef struct SMMUEventInfo { | ||
90 | + SMMUEventType type; | ||
91 | + uint32_t sid; | ||
92 | + bool recorded; | ||
93 | + bool record_trans_faults; | ||
94 | + union { | ||
95 | + struct { | ||
96 | + uint32_t ssid; | ||
97 | + bool ssv; | ||
98 | + dma_addr_t addr; | ||
99 | + bool rnw; | ||
100 | + bool pnu; | ||
101 | + bool ind; | ||
102 | + } f_uut; | ||
103 | + struct SSIDInfo { | ||
104 | + uint32_t ssid; | ||
105 | + bool ssv; | ||
106 | + } c_bad_streamid; | ||
107 | + struct SSIDAddrInfo { | ||
108 | + uint32_t ssid; | ||
109 | + bool ssv; | ||
110 | + dma_addr_t addr; | ||
111 | + } f_ste_fetch; | ||
112 | + struct SSIDInfo c_bad_ste; | ||
113 | + struct { | ||
114 | + dma_addr_t addr; | ||
115 | + bool rnw; | ||
116 | + } f_transl_forbidden; | ||
117 | + struct { | ||
118 | + uint32_t ssid; | ||
119 | + } c_bad_substream; | ||
120 | + struct SSIDAddrInfo f_cd_fetch; | ||
121 | + struct SSIDInfo c_bad_cd; | ||
122 | + struct FullInfo { | ||
123 | + bool stall; | ||
124 | + uint16_t stag; | ||
125 | + uint32_t ssid; | ||
126 | + bool ssv; | ||
127 | + bool s2; | ||
128 | + dma_addr_t addr; | ||
129 | + bool rnw; | ||
130 | + bool pnu; | ||
131 | + bool ind; | ||
132 | + uint8_t class; | ||
133 | + dma_addr_t addr2; | ||
134 | + } f_walk_eabt; | ||
135 | + struct FullInfo f_translation; | ||
136 | + struct FullInfo f_addr_size; | ||
137 | + struct FullInfo f_access; | ||
138 | + struct FullInfo f_permission; | ||
139 | + struct SSIDInfo f_cfg_conflict; | ||
140 | + /** | ||
141 | + * not supported yet: | ||
142 | + * F_BAD_ATS_TREQ | ||
143 | + * F_BAD_ATS_TREQ | ||
144 | + * F_TLB_CONFLICT | ||
145 | + * E_PAGE_REQUEST | ||
146 | + * IMPDEF_EVENTn | ||
147 | + */ | ||
148 | + } u; | ||
149 | +} SMMUEventInfo; | ||
150 | + | ||
151 | +/* EVTQ fields */ | ||
152 | + | ||
153 | +#define EVT_Q_OVERFLOW (1 << 31) | ||
154 | + | ||
155 | +#define EVT_SET_TYPE(x, v) deposit32((x)->word[0], 0 , 8 , v) | ||
156 | +#define EVT_SET_SSV(x, v) deposit32((x)->word[0], 11, 1 , v) | ||
157 | +#define EVT_SET_SSID(x, v) deposit32((x)->word[0], 12, 20, v) | ||
158 | +#define EVT_SET_SID(x, v) ((x)->word[1] = v) | ||
159 | +#define EVT_SET_STAG(x, v) deposit32((x)->word[2], 0 , 16, v) | ||
160 | +#define EVT_SET_STALL(x, v) deposit32((x)->word[2], 31, 1 , v) | ||
161 | +#define EVT_SET_PNU(x, v) deposit32((x)->word[3], 1 , 1 , v) | ||
162 | +#define EVT_SET_IND(x, v) deposit32((x)->word[3], 2 , 1 , v) | ||
163 | +#define EVT_SET_RNW(x, v) deposit32((x)->word[3], 3 , 1 , v) | ||
164 | +#define EVT_SET_S2(x, v) deposit32((x)->word[3], 7 , 1 , v) | ||
165 | +#define EVT_SET_CLASS(x, v) deposit32((x)->word[3], 8 , 2 , v) | ||
166 | +#define EVT_SET_ADDR(x, addr) \ | ||
167 | + do { \ | ||
168 | + (x)->word[5] = (uint32_t)(addr >> 32); \ | ||
169 | + (x)->word[4] = (uint32_t)(addr & 0xffffffff); \ | ||
170 | + } while (0) | ||
171 | +#define EVT_SET_ADDR2(x, addr) \ | ||
172 | + do { \ | ||
173 | + deposit32((x)->word[7], 3, 29, addr >> 16); \ | ||
174 | + deposit32((x)->word[7], 0, 16, addr & 0xffff);\ | ||
175 | + } while (0) | ||
176 | + | ||
177 | +void smmuv3_record_event(SMMUv3State *s, SMMUEventInfo *event); | ||
178 | + | ||
179 | #endif | ||
180 | diff --git a/hw/arm/smmuv3.c b/hw/arm/smmuv3.c | ||
181 | index XXXXXXX..XXXXXXX 100644 | ||
182 | --- a/hw/arm/smmuv3.c | ||
183 | +++ b/hw/arm/smmuv3.c | ||
184 | @@ -XXX,XX +XXX,XX @@ static MemTxResult queue_write(SMMUQueue *q, void *data) | ||
185 | return MEMTX_OK; | ||
186 | } | ||
187 | |||
188 | -void smmuv3_write_eventq(SMMUv3State *s, Evt *evt) | ||
189 | +static MemTxResult smmuv3_write_eventq(SMMUv3State *s, Evt *evt) | ||
190 | { | 15 | { |
191 | SMMUQueue *q = &s->eventq; | 16 | DisasContext *dc = container_of(dcbase, DisasContext, base); |
192 | + MemTxResult r; | 17 | CPUARMState *env = cpu->env_ptr; |
193 | + | 18 | + uint32_t pc = dc->base.pc_next; |
194 | + if (!smmuv3_eventq_enabled(s)) { | 19 | uint32_t insn; |
195 | + return MEMTX_ERROR; | 20 | bool is_16bit; |
196 | + } | 21 | |
197 | + | 22 | if (arm_pre_translate_insn(dc)) { |
198 | + if (smmuv3_q_full(q)) { | 23 | - dc->base.pc_next += 2; |
199 | + return MEMTX_ERROR; | 24 | + dc->base.pc_next = pc + 2; |
200 | + } | ||
201 | + | ||
202 | + r = queue_write(q, evt); | ||
203 | + if (r != MEMTX_OK) { | ||
204 | + return r; | ||
205 | + } | ||
206 | + | ||
207 | + if (smmuv3_q_empty(q)) { | ||
208 | + smmuv3_trigger_irq(s, SMMU_IRQ_EVTQ, 0); | ||
209 | + } | ||
210 | + return MEMTX_OK; | ||
211 | +} | ||
212 | + | ||
213 | +void smmuv3_record_event(SMMUv3State *s, SMMUEventInfo *info) | ||
214 | +{ | ||
215 | + Evt evt; | ||
216 | + MemTxResult r; | ||
217 | |||
218 | if (!smmuv3_eventq_enabled(s)) { | ||
219 | return; | 25 | return; |
220 | } | 26 | } |
221 | 27 | ||
222 | - if (smmuv3_q_full(q)) { | 28 | - dc->pc_curr = dc->base.pc_next; |
223 | + EVT_SET_TYPE(&evt, info->type); | 29 | - insn = arm_lduw_code(env, &dc->base, dc->base.pc_next, dc->sctlr_b); |
224 | + EVT_SET_SID(&evt, info->sid); | 30 | + dc->pc_curr = pc; |
225 | + | 31 | + insn = arm_lduw_code(env, &dc->base, pc, dc->sctlr_b); |
226 | + switch (info->type) { | 32 | is_16bit = thumb_insn_is_16bit(dc, dc->base.pc_next, insn); |
227 | + case SMMU_EVT_OK: | 33 | - dc->base.pc_next += 2; |
228 | return; | 34 | + pc += 2; |
229 | + case SMMU_EVT_F_UUT: | 35 | if (!is_16bit) { |
230 | + EVT_SET_SSID(&evt, info->u.f_uut.ssid); | 36 | - uint32_t insn2 = arm_lduw_code(env, &dc->base, dc->base.pc_next, |
231 | + EVT_SET_SSV(&evt, info->u.f_uut.ssv); | 37 | - dc->sctlr_b); |
232 | + EVT_SET_ADDR(&evt, info->u.f_uut.addr); | 38 | - |
233 | + EVT_SET_RNW(&evt, info->u.f_uut.rnw); | 39 | + uint32_t insn2 = arm_lduw_code(env, &dc->base, pc, dc->sctlr_b); |
234 | + EVT_SET_PNU(&evt, info->u.f_uut.pnu); | 40 | insn = insn << 16 | insn2; |
235 | + EVT_SET_IND(&evt, info->u.f_uut.ind); | 41 | - dc->base.pc_next += 2; |
236 | + break; | 42 | + pc += 2; |
237 | + case SMMU_EVT_C_BAD_STREAMID: | ||
238 | + EVT_SET_SSID(&evt, info->u.c_bad_streamid.ssid); | ||
239 | + EVT_SET_SSV(&evt, info->u.c_bad_streamid.ssv); | ||
240 | + break; | ||
241 | + case SMMU_EVT_F_STE_FETCH: | ||
242 | + EVT_SET_SSID(&evt, info->u.f_ste_fetch.ssid); | ||
243 | + EVT_SET_SSV(&evt, info->u.f_ste_fetch.ssv); | ||
244 | + EVT_SET_ADDR(&evt, info->u.f_ste_fetch.addr); | ||
245 | + break; | ||
246 | + case SMMU_EVT_C_BAD_STE: | ||
247 | + EVT_SET_SSID(&evt, info->u.c_bad_ste.ssid); | ||
248 | + EVT_SET_SSV(&evt, info->u.c_bad_ste.ssv); | ||
249 | + break; | ||
250 | + case SMMU_EVT_F_STREAM_DISABLED: | ||
251 | + break; | ||
252 | + case SMMU_EVT_F_TRANS_FORBIDDEN: | ||
253 | + EVT_SET_ADDR(&evt, info->u.f_transl_forbidden.addr); | ||
254 | + EVT_SET_RNW(&evt, info->u.f_transl_forbidden.rnw); | ||
255 | + break; | ||
256 | + case SMMU_EVT_C_BAD_SUBSTREAMID: | ||
257 | + EVT_SET_SSID(&evt, info->u.c_bad_substream.ssid); | ||
258 | + break; | ||
259 | + case SMMU_EVT_F_CD_FETCH: | ||
260 | + EVT_SET_SSID(&evt, info->u.f_cd_fetch.ssid); | ||
261 | + EVT_SET_SSV(&evt, info->u.f_cd_fetch.ssv); | ||
262 | + EVT_SET_ADDR(&evt, info->u.f_cd_fetch.addr); | ||
263 | + break; | ||
264 | + case SMMU_EVT_C_BAD_CD: | ||
265 | + EVT_SET_SSID(&evt, info->u.c_bad_cd.ssid); | ||
266 | + EVT_SET_SSV(&evt, info->u.c_bad_cd.ssv); | ||
267 | + break; | ||
268 | + case SMMU_EVT_F_WALK_EABT: | ||
269 | + case SMMU_EVT_F_TRANSLATION: | ||
270 | + case SMMU_EVT_F_ADDR_SIZE: | ||
271 | + case SMMU_EVT_F_ACCESS: | ||
272 | + case SMMU_EVT_F_PERMISSION: | ||
273 | + EVT_SET_STALL(&evt, info->u.f_walk_eabt.stall); | ||
274 | + EVT_SET_STAG(&evt, info->u.f_walk_eabt.stag); | ||
275 | + EVT_SET_SSID(&evt, info->u.f_walk_eabt.ssid); | ||
276 | + EVT_SET_SSV(&evt, info->u.f_walk_eabt.ssv); | ||
277 | + EVT_SET_S2(&evt, info->u.f_walk_eabt.s2); | ||
278 | + EVT_SET_ADDR(&evt, info->u.f_walk_eabt.addr); | ||
279 | + EVT_SET_RNW(&evt, info->u.f_walk_eabt.rnw); | ||
280 | + EVT_SET_PNU(&evt, info->u.f_walk_eabt.pnu); | ||
281 | + EVT_SET_IND(&evt, info->u.f_walk_eabt.ind); | ||
282 | + EVT_SET_CLASS(&evt, info->u.f_walk_eabt.class); | ||
283 | + EVT_SET_ADDR2(&evt, info->u.f_walk_eabt.addr2); | ||
284 | + break; | ||
285 | + case SMMU_EVT_F_CFG_CONFLICT: | ||
286 | + EVT_SET_SSID(&evt, info->u.f_cfg_conflict.ssid); | ||
287 | + EVT_SET_SSV(&evt, info->u.f_cfg_conflict.ssv); | ||
288 | + break; | ||
289 | + /* rest is not implemented */ | ||
290 | + case SMMU_EVT_F_BAD_ATS_TREQ: | ||
291 | + case SMMU_EVT_F_TLB_CONFLICT: | ||
292 | + case SMMU_EVT_E_PAGE_REQ: | ||
293 | + default: | ||
294 | + g_assert_not_reached(); | ||
295 | } | 43 | } |
296 | 44 | + dc->base.pc_next = pc; | |
297 | - queue_write(q, evt); | 45 | dc->insn = insn; |
298 | - | 46 | |
299 | - if (smmuv3_q_empty(q)) { | 47 | if (dc->pstate_il) { |
300 | - smmuv3_trigger_irq(s, SMMU_IRQ_EVTQ, 0); | ||
301 | + trace_smmuv3_record_event(smmu_event_string(info->type), info->sid); | ||
302 | + r = smmuv3_write_eventq(s, &evt); | ||
303 | + if (r != MEMTX_OK) { | ||
304 | + smmuv3_trigger_irq(s, SMMU_IRQ_GERROR, R_GERROR_EVENTQ_ABT_ERR_MASK); | ||
305 | } | ||
306 | + info->recorded = true; | ||
307 | } | ||
308 | |||
309 | static void smmuv3_init_regs(SMMUv3State *s) | ||
310 | diff --git a/hw/arm/trace-events b/hw/arm/trace-events | ||
311 | index XXXXXXX..XXXXXXX 100644 | ||
312 | --- a/hw/arm/trace-events | ||
313 | +++ b/hw/arm/trace-events | ||
314 | @@ -XXX,XX +XXX,XX @@ smmuv3_write_mmio(uint64_t addr, uint64_t val, unsigned size, uint32_t r) "addr: | ||
315 | smmuv3_write_mmio_idr(uint64_t addr, uint64_t val) "write to RO/Unimpl reg 0x%lx val64:0x%lx" | ||
316 | smmuv3_write_mmio_evtq_cons_bef_clear(uint32_t prod, uint32_t cons, uint8_t prod_wrap, uint8_t cons_wrap) "Before clearing interrupt prod:0x%x cons:0x%x prod.w:%d cons.w:%d" | ||
317 | smmuv3_write_mmio_evtq_cons_after_clear(uint32_t prod, uint32_t cons, uint8_t prod_wrap, uint8_t cons_wrap) "after clearing interrupt prod:0x%x cons:0x%x prod.w:%d cons.w:%d" | ||
318 | +smmuv3_record_event(const char *type, uint32_t sid) "%s sid=%d" | ||
319 | -- | 48 | -- |
320 | 2.17.0 | 49 | 2.25.1 |
321 | 50 | ||
322 | 51 | diff view generated by jsdifflib |
1 | For v8M the instructions VLLDM and VLSTM support lazy saving | 1 | From: Richard Henderson <richard.henderson@linaro.org> |
---|---|---|---|
2 | and restoring of the secure floating-point registers. Even | ||
3 | if the floating point extension is not implemented, these | ||
4 | instructions must act as NOPs in Secure state, so they can | ||
5 | be used as part of the secure-to-nonsecure call sequence. | ||
6 | 2 | ||
7 | Fixes: https://bugs.launchpad.net/qemu/+bug/1768295 | 3 | Create arm_check_ss_active and arm_check_kernelpage. |
8 | Cc: qemu-stable@nongnu.org | 4 | |
5 | Reverse the order of the tests. While it doesn't matter in practice, | ||
6 | because only user-only has a kernel page and user-only never sets | ||
7 | ss_active, ss_active has priority over execution exceptions and it | ||
8 | is best to keep them in the proper order. | ||
9 | |||
10 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> | ||
11 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 12 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
10 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
11 | Message-id: 20180503105730.5958-1-peter.maydell@linaro.org | ||
12 | --- | 13 | --- |
13 | target/arm/translate.c | 17 ++++++++++++++++- | 14 | target/arm/translate.c | 10 +++++++--- |
14 | 1 file changed, 16 insertions(+), 1 deletion(-) | 15 | 1 file changed, 7 insertions(+), 3 deletions(-) |
15 | 16 | ||
16 | diff --git a/target/arm/translate.c b/target/arm/translate.c | 17 | diff --git a/target/arm/translate.c b/target/arm/translate.c |
17 | index XXXXXXX..XXXXXXX 100644 | 18 | index XXXXXXX..XXXXXXX 100644 |
18 | --- a/target/arm/translate.c | 19 | --- a/target/arm/translate.c |
19 | +++ b/target/arm/translate.c | 20 | +++ b/target/arm/translate.c |
20 | @@ -XXX,XX +XXX,XX @@ static void disas_thumb2_insn(DisasContext *s, uint32_t insn) | 21 | @@ -XXX,XX +XXX,XX @@ static void arm_tr_insn_start(DisasContextBase *dcbase, CPUState *cpu) |
21 | /* Coprocessor. */ | 22 | dc->insn_start = tcg_last_op(); |
22 | if (arm_dc_feature(s, ARM_FEATURE_M)) { | 23 | } |
23 | /* We don't currently implement M profile FP support, | 24 | |
24 | - * so this entire space should give a NOCP fault. | 25 | -static bool arm_pre_translate_insn(DisasContext *dc) |
25 | + * so this entire space should give a NOCP fault, with | 26 | +static bool arm_check_kernelpage(DisasContext *dc) |
26 | + * the exception of the v8M VLLDM and VLSTM insns, which | 27 | { |
27 | + * must be NOPs in Secure state and UNDEF in Nonsecure state. | 28 | #ifdef CONFIG_USER_ONLY |
28 | */ | 29 | /* Intercept jump to the magic kernel page. */ |
29 | + if (arm_dc_feature(s, ARM_FEATURE_V8) && | 30 | @@ -XXX,XX +XXX,XX @@ static bool arm_pre_translate_insn(DisasContext *dc) |
30 | + (insn & 0xffa00f00) == 0xec200a00) { | 31 | return true; |
31 | + /* 0b1110_1100_0x1x_xxxx_xxxx_1010_xxxx_xxxx | 32 | } |
32 | + * - VLLDM, VLSTM | 33 | #endif |
33 | + * We choose to UNDEF if the RAZ bits are non-zero. | 34 | + return false; |
34 | + */ | 35 | +} |
35 | + if (!s->v8m_secure || (insn & 0x0040f0ff)) { | 36 | |
36 | + goto illegal_op; | 37 | +static bool arm_check_ss_active(DisasContext *dc) |
37 | + } | 38 | +{ |
38 | + /* Just NOP since FP support is not implemented */ | 39 | if (dc->ss_active && !dc->pstate_ss) { |
39 | + break; | 40 | /* Singlestep state is Active-pending. |
40 | + } | 41 | * If we're in this state at the start of a TB then either |
41 | + /* All other insns: NOCP */ | 42 | @@ -XXX,XX +XXX,XX @@ static void arm_tr_translate_insn(DisasContextBase *dcbase, CPUState *cpu) |
42 | gen_exception_insn(s, 4, EXCP_NOCP, syn_uncategorized(), | 43 | uint32_t pc = dc->base.pc_next; |
43 | default_exception_el(s)); | 44 | unsigned int insn; |
44 | break; | 45 | |
46 | - if (arm_pre_translate_insn(dc)) { | ||
47 | + if (arm_check_ss_active(dc) || arm_check_kernelpage(dc)) { | ||
48 | dc->base.pc_next = pc + 4; | ||
49 | return; | ||
50 | } | ||
51 | @@ -XXX,XX +XXX,XX @@ static void thumb_tr_translate_insn(DisasContextBase *dcbase, CPUState *cpu) | ||
52 | uint32_t insn; | ||
53 | bool is_16bit; | ||
54 | |||
55 | - if (arm_pre_translate_insn(dc)) { | ||
56 | + if (arm_check_ss_active(dc) || arm_check_kernelpage(dc)) { | ||
57 | dc->base.pc_next = pc + 2; | ||
58 | return; | ||
59 | } | ||
45 | -- | 60 | -- |
46 | 2.17.0 | 61 | 2.25.1 |
47 | 62 | ||
48 | 63 | diff view generated by jsdifflib |
1 | From: Richard Henderson <richard.henderson@linaro.org> | 1 | From: Richard Henderson <richard.henderson@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | Path analysis shows that size == 3 && !is_q has been eliminated. | 3 | The size of the code covered by a TranslationBlock cannot be 0; |
4 | this is checked via assert in tb_gen_code. | ||
4 | 5 | ||
5 | Fixes: Coverity CID1385853 | ||
6 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> | 6 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> |
7 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | 7 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
8 | Message-id: 20180501180455.11214-3-richard.henderson@linaro.org | ||
9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 8 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
10 | --- | 9 | --- |
11 | target/arm/translate-a64.c | 6 +++++- | 10 | target/arm/translate-a64.c | 1 + |
12 | 1 file changed, 5 insertions(+), 1 deletion(-) | 11 | 1 file changed, 1 insertion(+) |
13 | 12 | ||
14 | diff --git a/target/arm/translate-a64.c b/target/arm/translate-a64.c | 13 | diff --git a/target/arm/translate-a64.c b/target/arm/translate-a64.c |
15 | index XXXXXXX..XXXXXXX 100644 | 14 | index XXXXXXX..XXXXXXX 100644 |
16 | --- a/target/arm/translate-a64.c | 15 | --- a/target/arm/translate-a64.c |
17 | +++ b/target/arm/translate-a64.c | 16 | +++ b/target/arm/translate-a64.c |
18 | @@ -XXX,XX +XXX,XX @@ static void disas_simd_two_reg_misc(DisasContext *s, uint32_t insn) | 17 | @@ -XXX,XX +XXX,XX @@ static void aarch64_tr_translate_insn(DisasContextBase *dcbase, CPUState *cpu) |
19 | /* All 64-bit element operations can be shared with scalar 2misc */ | 18 | assert(s->base.num_insns == 1); |
20 | int pass; | 19 | gen_swstep_exception(s, 0, 0); |
21 | 20 | s->base.is_jmp = DISAS_NORETURN; | |
22 | - for (pass = 0; pass < (is_q ? 2 : 1); pass++) { | 21 | + s->base.pc_next = pc + 4; |
23 | + /* Coverity claims (size == 3 && !is_q) has been eliminated | 22 | return; |
24 | + * from all paths leading to here. | 23 | } |
25 | + */ | ||
26 | + tcg_debug_assert(is_q); | ||
27 | + for (pass = 0; pass < 2; pass++) { | ||
28 | TCGv_i64 tcg_op = tcg_temp_new_i64(); | ||
29 | TCGv_i64 tcg_res = tcg_temp_new_i64(); | ||
30 | 24 | ||
31 | -- | 25 | -- |
32 | 2.17.0 | 26 | 2.25.1 |
33 | 27 | ||
34 | 28 | diff view generated by jsdifflib |
1 | From: Eric Auger <eric.auger@redhat.com> | 1 | From: Richard Henderson <richard.henderson@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | This patch implements the IOMMU Memory Region translate() | 3 | We will reuse this section of arm_deliver_fault for |
4 | callback. Most of the code relates to the translation | 4 | raising pc alignment faults. |
5 | configuration decoding and check (STE, CD). | ||
6 | 5 | ||
7 | Signed-off-by: Eric Auger <eric.auger@redhat.com> | 6 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> |
8 | Signed-off-by: Prem Mallappa <prem.mallappa@broadcom.com> | ||
9 | Message-id: 1524665762-31355-10-git-send-email-eric.auger@redhat.com | ||
10 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 7 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
11 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 8 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
12 | --- | 9 | --- |
13 | hw/arm/smmuv3-internal.h | 160 +++++++++++++++++ | 10 | target/arm/tlb_helper.c | 45 +++++++++++++++++++++++++---------------- |
14 | hw/arm/smmuv3.c | 358 +++++++++++++++++++++++++++++++++++++++ | 11 | 1 file changed, 28 insertions(+), 17 deletions(-) |
15 | hw/arm/trace-events | 9 + | ||
16 | 3 files changed, 527 insertions(+) | ||
17 | 12 | ||
18 | diff --git a/hw/arm/smmuv3-internal.h b/hw/arm/smmuv3-internal.h | 13 | diff --git a/target/arm/tlb_helper.c b/target/arm/tlb_helper.c |
19 | index XXXXXXX..XXXXXXX 100644 | 14 | index XXXXXXX..XXXXXXX 100644 |
20 | --- a/hw/arm/smmuv3-internal.h | 15 | --- a/target/arm/tlb_helper.c |
21 | +++ b/hw/arm/smmuv3-internal.h | 16 | +++ b/target/arm/tlb_helper.c |
22 | @@ -XXX,XX +XXX,XX @@ typedef struct SMMUEventInfo { | 17 | @@ -XXX,XX +XXX,XX @@ static inline uint32_t merge_syn_data_abort(uint32_t template_syn, |
23 | 18 | return syn; | |
24 | void smmuv3_record_event(SMMUv3State *s, SMMUEventInfo *event); | 19 | } |
25 | 20 | ||
26 | +/* Configuration Data */ | 21 | -static void QEMU_NORETURN arm_deliver_fault(ARMCPU *cpu, vaddr addr, |
27 | + | 22 | - MMUAccessType access_type, |
28 | +/* STE Level 1 Descriptor */ | 23 | - int mmu_idx, ARMMMUFaultInfo *fi) |
29 | +typedef struct STEDesc { | 24 | +static uint32_t compute_fsr_fsc(CPUARMState *env, ARMMMUFaultInfo *fi, |
30 | + uint32_t word[2]; | 25 | + int target_el, int mmu_idx, uint32_t *ret_fsc) |
31 | +} STEDesc; | 26 | { |
32 | + | 27 | - CPUARMState *env = &cpu->env; |
33 | +/* CD Level 1 Descriptor */ | 28 | - int target_el; |
34 | +typedef struct CDDesc { | 29 | - bool same_el; |
35 | + uint32_t word[2]; | 30 | - uint32_t syn, exc, fsr, fsc; |
36 | +} CDDesc; | 31 | ARMMMUIdx arm_mmu_idx = core_to_arm_mmu_idx(env, mmu_idx); |
37 | + | 32 | - |
38 | +/* Stream Table Entry(STE) */ | 33 | - target_el = exception_target_el(env); |
39 | +typedef struct STE { | 34 | - if (fi->stage2) { |
40 | + uint32_t word[16]; | 35 | - target_el = 2; |
41 | +} STE; | 36 | - env->cp15.hpfar_el2 = extract64(fi->s2addr, 12, 47) << 4; |
42 | + | 37 | - if (arm_is_secure_below_el3(env) && fi->s1ns) { |
43 | +/* Context Descriptor(CD) */ | 38 | - env->cp15.hpfar_el2 |= HPFAR_NS; |
44 | +typedef struct CD { | 39 | - } |
45 | + uint32_t word[16]; | 40 | - } |
46 | +} CD; | 41 | - same_el = (arm_current_el(env) == target_el); |
47 | + | 42 | + uint32_t fsr, fsc; |
48 | +/* STE fields */ | 43 | |
49 | + | 44 | if (target_el == 2 || arm_el_is_aa64(env, target_el) || |
50 | +#define STE_VALID(x) extract32((x)->word[0], 0, 1) | 45 | arm_s1_regime_using_lpae_format(env, arm_mmu_idx)) { |
51 | + | 46 | @@ -XXX,XX +XXX,XX @@ static void QEMU_NORETURN arm_deliver_fault(ARMCPU *cpu, vaddr addr, |
52 | +#define STE_CONFIG(x) extract32((x)->word[0], 1, 3) | 47 | fsc = 0x3f; |
53 | +#define STE_CFG_S1_ENABLED(config) (config & 0x1) | 48 | } |
54 | +#define STE_CFG_S2_ENABLED(config) (config & 0x2) | 49 | |
55 | +#define STE_CFG_ABORT(config) (!(config & 0x4)) | 50 | + *ret_fsc = fsc; |
56 | +#define STE_CFG_BYPASS(config) (config == 0x4) | 51 | + return fsr; |
57 | + | ||
58 | +#define STE_S1FMT(x) extract32((x)->word[0], 4 , 2) | ||
59 | +#define STE_S1CDMAX(x) extract32((x)->word[1], 27, 5) | ||
60 | +#define STE_S1STALLD(x) extract32((x)->word[2], 27, 1) | ||
61 | +#define STE_EATS(x) extract32((x)->word[2], 28, 2) | ||
62 | +#define STE_STRW(x) extract32((x)->word[2], 30, 2) | ||
63 | +#define STE_S2VMID(x) extract32((x)->word[4], 0 , 16) | ||
64 | +#define STE_S2T0SZ(x) extract32((x)->word[5], 0 , 6) | ||
65 | +#define STE_S2SL0(x) extract32((x)->word[5], 6 , 2) | ||
66 | +#define STE_S2TG(x) extract32((x)->word[5], 14, 2) | ||
67 | +#define STE_S2PS(x) extract32((x)->word[5], 16, 3) | ||
68 | +#define STE_S2AA64(x) extract32((x)->word[5], 19, 1) | ||
69 | +#define STE_S2HD(x) extract32((x)->word[5], 24, 1) | ||
70 | +#define STE_S2HA(x) extract32((x)->word[5], 25, 1) | ||
71 | +#define STE_S2S(x) extract32((x)->word[5], 26, 1) | ||
72 | +#define STE_CTXPTR(x) \ | ||
73 | + ({ \ | ||
74 | + unsigned long addr; \ | ||
75 | + addr = (uint64_t)extract32((x)->word[1], 0, 16) << 32; \ | ||
76 | + addr |= (uint64_t)((x)->word[0] & 0xffffffc0); \ | ||
77 | + addr; \ | ||
78 | + }) | ||
79 | + | ||
80 | +#define STE_S2TTB(x) \ | ||
81 | + ({ \ | ||
82 | + unsigned long addr; \ | ||
83 | + addr = (uint64_t)extract32((x)->word[7], 0, 16) << 32; \ | ||
84 | + addr |= (uint64_t)((x)->word[6] & 0xfffffff0); \ | ||
85 | + addr; \ | ||
86 | + }) | ||
87 | + | ||
88 | +static inline int oas2bits(int oas_field) | ||
89 | +{ | ||
90 | + switch (oas_field) { | ||
91 | + case 0: | ||
92 | + return 32; | ||
93 | + case 1: | ||
94 | + return 36; | ||
95 | + case 2: | ||
96 | + return 40; | ||
97 | + case 3: | ||
98 | + return 42; | ||
99 | + case 4: | ||
100 | + return 44; | ||
101 | + case 5: | ||
102 | + return 48; | ||
103 | + } | ||
104 | + return -1; | ||
105 | +} | 52 | +} |
106 | + | 53 | + |
107 | +static inline int pa_range(STE *ste) | 54 | +static void QEMU_NORETURN arm_deliver_fault(ARMCPU *cpu, vaddr addr, |
55 | + MMUAccessType access_type, | ||
56 | + int mmu_idx, ARMMMUFaultInfo *fi) | ||
108 | +{ | 57 | +{ |
109 | + int oas_field = MIN(STE_S2PS(ste), SMMU_IDR5_OAS); | 58 | + CPUARMState *env = &cpu->env; |
59 | + int target_el; | ||
60 | + bool same_el; | ||
61 | + uint32_t syn, exc, fsr, fsc; | ||
110 | + | 62 | + |
111 | + if (!STE_S2AA64(ste)) { | 63 | + target_el = exception_target_el(env); |
112 | + return 40; | 64 | + if (fi->stage2) { |
113 | + } | 65 | + target_el = 2; |
114 | + | 66 | + env->cp15.hpfar_el2 = extract64(fi->s2addr, 12, 47) << 4; |
115 | + return oas2bits(oas_field); | 67 | + if (arm_is_secure_below_el3(env) && fi->s1ns) { |
116 | +} | 68 | + env->cp15.hpfar_el2 |= HPFAR_NS; |
117 | + | ||
118 | +#define MAX_PA(ste) ((1 << pa_range(ste)) - 1) | ||
119 | + | ||
120 | +/* CD fields */ | ||
121 | + | ||
122 | +#define CD_VALID(x) extract32((x)->word[0], 30, 1) | ||
123 | +#define CD_ASID(x) extract32((x)->word[1], 16, 16) | ||
124 | +#define CD_TTB(x, sel) \ | ||
125 | + ({ \ | ||
126 | + uint64_t hi, lo; \ | ||
127 | + hi = extract32((x)->word[(sel) * 2 + 3], 0, 19); \ | ||
128 | + hi <<= 32; \ | ||
129 | + lo = (x)->word[(sel) * 2 + 2] & ~0xfULL; \ | ||
130 | + hi | lo; \ | ||
131 | + }) | ||
132 | + | ||
133 | +#define CD_TSZ(x, sel) extract32((x)->word[0], (16 * (sel)) + 0, 6) | ||
134 | +#define CD_TG(x, sel) extract32((x)->word[0], (16 * (sel)) + 6, 2) | ||
135 | +#define CD_EPD(x, sel) extract32((x)->word[0], (16 * (sel)) + 14, 1) | ||
136 | +#define CD_ENDI(x) extract32((x)->word[0], 15, 1) | ||
137 | +#define CD_IPS(x) extract32((x)->word[1], 0 , 3) | ||
138 | +#define CD_TBI(x) extract32((x)->word[1], 6 , 2) | ||
139 | +#define CD_HD(x) extract32((x)->word[1], 10 , 1) | ||
140 | +#define CD_HA(x) extract32((x)->word[1], 11 , 1) | ||
141 | +#define CD_S(x) extract32((x)->word[1], 12, 1) | ||
142 | +#define CD_R(x) extract32((x)->word[1], 13, 1) | ||
143 | +#define CD_A(x) extract32((x)->word[1], 14, 1) | ||
144 | +#define CD_AARCH64(x) extract32((x)->word[1], 9 , 1) | ||
145 | + | ||
146 | +#define CDM_VALID(x) ((x)->word[0] & 0x1) | ||
147 | + | ||
148 | +static inline int is_cd_valid(SMMUv3State *s, STE *ste, CD *cd) | ||
149 | +{ | ||
150 | + return CD_VALID(cd); | ||
151 | +} | ||
152 | + | ||
153 | +/** | ||
154 | + * tg2granule - Decodes the CD translation granule size field according | ||
155 | + * to the ttbr in use | ||
156 | + * @bits: TG0/1 fields | ||
157 | + * @ttbr: ttbr index in use | ||
158 | + */ | ||
159 | +static inline int tg2granule(int bits, int ttbr) | ||
160 | +{ | ||
161 | + switch (bits) { | ||
162 | + case 0: | ||
163 | + return ttbr ? 0 : 12; | ||
164 | + case 1: | ||
165 | + return ttbr ? 14 : 16; | ||
166 | + case 2: | ||
167 | + return ttbr ? 12 : 14; | ||
168 | + case 3: | ||
169 | + return ttbr ? 16 : 0; | ||
170 | + default: | ||
171 | + return 0; | ||
172 | + } | ||
173 | +} | ||
174 | + | ||
175 | +static inline uint64_t l1std_l2ptr(STEDesc *desc) | ||
176 | +{ | ||
177 | + uint64_t hi, lo; | ||
178 | + | ||
179 | + hi = desc->word[1]; | ||
180 | + lo = desc->word[0] & ~0x1fULL; | ||
181 | + return hi << 32 | lo; | ||
182 | +} | ||
183 | + | ||
184 | +#define L1STD_SPAN(stm) (extract32((stm)->word[0], 0, 4)) | ||
185 | + | ||
186 | #endif | ||
187 | diff --git a/hw/arm/smmuv3.c b/hw/arm/smmuv3.c | ||
188 | index XXXXXXX..XXXXXXX 100644 | ||
189 | --- a/hw/arm/smmuv3.c | ||
190 | +++ b/hw/arm/smmuv3.c | ||
191 | @@ -XXX,XX +XXX,XX @@ static void smmuv3_init_regs(SMMUv3State *s) | ||
192 | s->sid_split = 0; | ||
193 | } | ||
194 | |||
195 | +static int smmu_get_ste(SMMUv3State *s, dma_addr_t addr, STE *buf, | ||
196 | + SMMUEventInfo *event) | ||
197 | +{ | ||
198 | + int ret; | ||
199 | + | ||
200 | + trace_smmuv3_get_ste(addr); | ||
201 | + /* TODO: guarantee 64-bit single-copy atomicity */ | ||
202 | + ret = dma_memory_read(&address_space_memory, addr, | ||
203 | + (void *)buf, sizeof(*buf)); | ||
204 | + if (ret != MEMTX_OK) { | ||
205 | + qemu_log_mask(LOG_GUEST_ERROR, | ||
206 | + "Cannot fetch pte at address=0x%"PRIx64"\n", addr); | ||
207 | + event->type = SMMU_EVT_F_STE_FETCH; | ||
208 | + event->u.f_ste_fetch.addr = addr; | ||
209 | + return -EINVAL; | ||
210 | + } | ||
211 | + return 0; | ||
212 | + | ||
213 | +} | ||
214 | + | ||
215 | +/* @ssid > 0 not supported yet */ | ||
216 | +static int smmu_get_cd(SMMUv3State *s, STE *ste, uint32_t ssid, | ||
217 | + CD *buf, SMMUEventInfo *event) | ||
218 | +{ | ||
219 | + dma_addr_t addr = STE_CTXPTR(ste); | ||
220 | + int ret; | ||
221 | + | ||
222 | + trace_smmuv3_get_cd(addr); | ||
223 | + /* TODO: guarantee 64-bit single-copy atomicity */ | ||
224 | + ret = dma_memory_read(&address_space_memory, addr, | ||
225 | + (void *)buf, sizeof(*buf)); | ||
226 | + if (ret != MEMTX_OK) { | ||
227 | + qemu_log_mask(LOG_GUEST_ERROR, | ||
228 | + "Cannot fetch pte at address=0x%"PRIx64"\n", addr); | ||
229 | + event->type = SMMU_EVT_F_CD_FETCH; | ||
230 | + event->u.f_ste_fetch.addr = addr; | ||
231 | + return -EINVAL; | ||
232 | + } | ||
233 | + return 0; | ||
234 | +} | ||
235 | + | ||
236 | +/* Returns <0 if the caller has no need to continue the translation */ | ||
237 | +static int decode_ste(SMMUv3State *s, SMMUTransCfg *cfg, | ||
238 | + STE *ste, SMMUEventInfo *event) | ||
239 | +{ | ||
240 | + uint32_t config; | ||
241 | + int ret = -EINVAL; | ||
242 | + | ||
243 | + if (!STE_VALID(ste)) { | ||
244 | + goto bad_ste; | ||
245 | + } | ||
246 | + | ||
247 | + config = STE_CONFIG(ste); | ||
248 | + | ||
249 | + if (STE_CFG_ABORT(config)) { | ||
250 | + cfg->aborted = true; /* abort but don't record any event */ | ||
251 | + return ret; | ||
252 | + } | ||
253 | + | ||
254 | + if (STE_CFG_BYPASS(config)) { | ||
255 | + cfg->bypassed = true; | ||
256 | + return ret; | ||
257 | + } | ||
258 | + | ||
259 | + if (STE_CFG_S2_ENABLED(config)) { | ||
260 | + qemu_log_mask(LOG_UNIMP, "SMMUv3 does not support stage 2 yet\n"); | ||
261 | + goto bad_ste; | ||
262 | + } | ||
263 | + | ||
264 | + if (STE_S1CDMAX(ste) != 0) { | ||
265 | + qemu_log_mask(LOG_UNIMP, | ||
266 | + "SMMUv3 does not support multiple context descriptors yet\n"); | ||
267 | + goto bad_ste; | ||
268 | + } | ||
269 | + | ||
270 | + if (STE_S1STALLD(ste)) { | ||
271 | + qemu_log_mask(LOG_UNIMP, | ||
272 | + "SMMUv3 S1 stalling fault model not allowed yet\n"); | ||
273 | + goto bad_ste; | ||
274 | + } | ||
275 | + return 0; | ||
276 | + | ||
277 | +bad_ste: | ||
278 | + event->type = SMMU_EVT_C_BAD_STE; | ||
279 | + return -EINVAL; | ||
280 | +} | ||
281 | + | ||
282 | +/** | ||
283 | + * smmu_find_ste - Return the stream table entry associated | ||
284 | + * to the sid | ||
285 | + * | ||
286 | + * @s: smmuv3 handle | ||
287 | + * @sid: stream ID | ||
288 | + * @ste: returned stream table entry | ||
289 | + * @event: handle to an event info | ||
290 | + * | ||
291 | + * Supports linear and 2-level stream table | ||
292 | + * Return 0 on success, -EINVAL otherwise | ||
293 | + */ | ||
294 | +static int smmu_find_ste(SMMUv3State *s, uint32_t sid, STE *ste, | ||
295 | + SMMUEventInfo *event) | ||
296 | +{ | ||
297 | + dma_addr_t addr; | ||
298 | + int ret; | ||
299 | + | ||
300 | + trace_smmuv3_find_ste(sid, s->features, s->sid_split); | ||
301 | + /* Check SID range */ | ||
302 | + if (sid > (1 << SMMU_IDR1_SIDSIZE)) { | ||
303 | + event->type = SMMU_EVT_C_BAD_STREAMID; | ||
304 | + return -EINVAL; | ||
305 | + } | ||
306 | + if (s->features & SMMU_FEATURE_2LVL_STE) { | ||
307 | + int l1_ste_offset, l2_ste_offset, max_l2_ste, span; | ||
308 | + dma_addr_t strtab_base, l1ptr, l2ptr; | ||
309 | + STEDesc l1std; | ||
310 | + | ||
311 | + strtab_base = s->strtab_base & SMMU_BASE_ADDR_MASK; | ||
312 | + l1_ste_offset = sid >> s->sid_split; | ||
313 | + l2_ste_offset = sid & ((1 << s->sid_split) - 1); | ||
314 | + l1ptr = (dma_addr_t)(strtab_base + l1_ste_offset * sizeof(l1std)); | ||
315 | + /* TODO: guarantee 64-bit single-copy atomicity */ | ||
316 | + ret = dma_memory_read(&address_space_memory, l1ptr, | ||
317 | + (uint8_t *)&l1std, sizeof(l1std)); | ||
318 | + if (ret != MEMTX_OK) { | ||
319 | + qemu_log_mask(LOG_GUEST_ERROR, | ||
320 | + "Could not read L1PTR at 0X%"PRIx64"\n", l1ptr); | ||
321 | + event->type = SMMU_EVT_F_STE_FETCH; | ||
322 | + event->u.f_ste_fetch.addr = l1ptr; | ||
323 | + return -EINVAL; | ||
324 | + } | ||
325 | + | ||
326 | + span = L1STD_SPAN(&l1std); | ||
327 | + | ||
328 | + if (!span) { | ||
329 | + /* l2ptr is not valid */ | ||
330 | + qemu_log_mask(LOG_GUEST_ERROR, | ||
331 | + "invalid sid=%d (L1STD span=0)\n", sid); | ||
332 | + event->type = SMMU_EVT_C_BAD_STREAMID; | ||
333 | + return -EINVAL; | ||
334 | + } | ||
335 | + max_l2_ste = (1 << span) - 1; | ||
336 | + l2ptr = l1std_l2ptr(&l1std); | ||
337 | + trace_smmuv3_find_ste_2lvl(s->strtab_base, l1ptr, l1_ste_offset, | ||
338 | + l2ptr, l2_ste_offset, max_l2_ste); | ||
339 | + if (l2_ste_offset > max_l2_ste) { | ||
340 | + qemu_log_mask(LOG_GUEST_ERROR, | ||
341 | + "l2_ste_offset=%d > max_l2_ste=%d\n", | ||
342 | + l2_ste_offset, max_l2_ste); | ||
343 | + event->type = SMMU_EVT_C_BAD_STE; | ||
344 | + return -EINVAL; | ||
345 | + } | ||
346 | + addr = l2ptr + l2_ste_offset * sizeof(*ste); | ||
347 | + } else { | ||
348 | + addr = s->strtab_base + sid * sizeof(*ste); | ||
349 | + } | ||
350 | + | ||
351 | + if (smmu_get_ste(s, addr, ste, event)) { | ||
352 | + return -EINVAL; | ||
353 | + } | ||
354 | + | ||
355 | + return 0; | ||
356 | +} | ||
357 | + | ||
358 | +static int decode_cd(SMMUTransCfg *cfg, CD *cd, SMMUEventInfo *event) | ||
359 | +{ | ||
360 | + int ret = -EINVAL; | ||
361 | + int i; | ||
362 | + | ||
363 | + if (!CD_VALID(cd) || !CD_AARCH64(cd)) { | ||
364 | + goto bad_cd; | ||
365 | + } | ||
366 | + if (!CD_A(cd)) { | ||
367 | + goto bad_cd; /* SMMU_IDR0.TERM_MODEL == 1 */ | ||
368 | + } | ||
369 | + if (CD_S(cd)) { | ||
370 | + goto bad_cd; /* !STE_SECURE && SMMU_IDR0.STALL_MODEL == 1 */ | ||
371 | + } | ||
372 | + if (CD_HA(cd) || CD_HD(cd)) { | ||
373 | + goto bad_cd; /* HTTU = 0 */ | ||
374 | + } | ||
375 | + | ||
376 | + /* we support only those at the moment */ | ||
377 | + cfg->aa64 = true; | ||
378 | + cfg->stage = 1; | ||
379 | + | ||
380 | + cfg->oas = oas2bits(CD_IPS(cd)); | ||
381 | + cfg->oas = MIN(oas2bits(SMMU_IDR5_OAS), cfg->oas); | ||
382 | + cfg->tbi = CD_TBI(cd); | ||
383 | + cfg->asid = CD_ASID(cd); | ||
384 | + | ||
385 | + trace_smmuv3_decode_cd(cfg->oas); | ||
386 | + | ||
387 | + /* decode data dependent on TT */ | ||
388 | + for (i = 0; i <= 1; i++) { | ||
389 | + int tg, tsz; | ||
390 | + SMMUTransTableInfo *tt = &cfg->tt[i]; | ||
391 | + | ||
392 | + cfg->tt[i].disabled = CD_EPD(cd, i); | ||
393 | + if (cfg->tt[i].disabled) { | ||
394 | + continue; | ||
395 | + } | ||
396 | + | ||
397 | + tsz = CD_TSZ(cd, i); | ||
398 | + if (tsz < 16 || tsz > 39) { | ||
399 | + goto bad_cd; | ||
400 | + } | ||
401 | + | ||
402 | + tg = CD_TG(cd, i); | ||
403 | + tt->granule_sz = tg2granule(tg, i); | ||
404 | + if ((tt->granule_sz != 12 && tt->granule_sz != 16) || CD_ENDI(cd)) { | ||
405 | + goto bad_cd; | ||
406 | + } | ||
407 | + | ||
408 | + tt->tsz = tsz; | ||
409 | + tt->ttb = CD_TTB(cd, i); | ||
410 | + if (tt->ttb & ~(MAKE_64BIT_MASK(0, cfg->oas))) { | ||
411 | + goto bad_cd; | ||
412 | + } | ||
413 | + trace_smmuv3_decode_cd_tt(i, tt->tsz, tt->ttb, tt->granule_sz); | ||
414 | + } | ||
415 | + | ||
416 | + event->record_trans_faults = CD_R(cd); | ||
417 | + | ||
418 | + return 0; | ||
419 | + | ||
420 | +bad_cd: | ||
421 | + event->type = SMMU_EVT_C_BAD_CD; | ||
422 | + return ret; | ||
423 | +} | ||
424 | + | ||
425 | +/** | ||
426 | + * smmuv3_decode_config - Prepare the translation configuration | ||
427 | + * for the @mr iommu region | ||
428 | + * @mr: iommu memory region the translation config must be prepared for | ||
429 | + * @cfg: output translation configuration which is populated through | ||
430 | + * the different configuration decoding steps | ||
431 | + * @event: must be zero'ed by the caller | ||
432 | + * | ||
433 | + * return < 0 if the translation needs to be aborted (@event is filled | ||
434 | + * accordingly). Return 0 otherwise. | ||
435 | + */ | ||
436 | +static int smmuv3_decode_config(IOMMUMemoryRegion *mr, SMMUTransCfg *cfg, | ||
437 | + SMMUEventInfo *event) | ||
438 | +{ | ||
439 | + SMMUDevice *sdev = container_of(mr, SMMUDevice, iommu); | ||
440 | + uint32_t sid = smmu_get_sid(sdev); | ||
441 | + SMMUv3State *s = sdev->smmu; | ||
442 | + int ret = -EINVAL; | ||
443 | + STE ste; | ||
444 | + CD cd; | ||
445 | + | ||
446 | + if (smmu_find_ste(s, sid, &ste, event)) { | ||
447 | + return ret; | ||
448 | + } | ||
449 | + | ||
450 | + if (decode_ste(s, cfg, &ste, event)) { | ||
451 | + return ret; | ||
452 | + } | ||
453 | + | ||
454 | + if (smmu_get_cd(s, &ste, 0 /* ssid */, &cd, event)) { | ||
455 | + return ret; | ||
456 | + } | ||
457 | + | ||
458 | + return decode_cd(cfg, &cd, event); | ||
459 | +} | ||
460 | + | ||
461 | +static IOMMUTLBEntry smmuv3_translate(IOMMUMemoryRegion *mr, hwaddr addr, | ||
462 | + IOMMUAccessFlags flag) | ||
463 | +{ | ||
464 | + SMMUDevice *sdev = container_of(mr, SMMUDevice, iommu); | ||
465 | + SMMUv3State *s = sdev->smmu; | ||
466 | + uint32_t sid = smmu_get_sid(sdev); | ||
467 | + SMMUEventInfo event = {.type = SMMU_EVT_OK, .sid = sid}; | ||
468 | + SMMUPTWEventInfo ptw_info = {}; | ||
469 | + SMMUTransCfg cfg = {}; | ||
470 | + IOMMUTLBEntry entry = { | ||
471 | + .target_as = &address_space_memory, | ||
472 | + .iova = addr, | ||
473 | + .translated_addr = addr, | ||
474 | + .addr_mask = ~(hwaddr)0, | ||
475 | + .perm = IOMMU_NONE, | ||
476 | + }; | ||
477 | + int ret = 0; | ||
478 | + | ||
479 | + if (!smmu_enabled(s)) { | ||
480 | + goto out; | ||
481 | + } | ||
482 | + | ||
483 | + ret = smmuv3_decode_config(mr, &cfg, &event); | ||
484 | + if (ret) { | ||
485 | + goto out; | ||
486 | + } | ||
487 | + | ||
488 | + if (cfg.aborted) { | ||
489 | + goto out; | ||
490 | + } | ||
491 | + | ||
492 | + ret = smmu_ptw(&cfg, addr, flag, &entry, &ptw_info); | ||
493 | + if (ret) { | ||
494 | + switch (ptw_info.type) { | ||
495 | + case SMMU_PTW_ERR_WALK_EABT: | ||
496 | + event.type = SMMU_EVT_F_WALK_EABT; | ||
497 | + event.u.f_walk_eabt.addr = addr; | ||
498 | + event.u.f_walk_eabt.rnw = flag & 0x1; | ||
499 | + event.u.f_walk_eabt.class = 0x1; | ||
500 | + event.u.f_walk_eabt.addr2 = ptw_info.addr; | ||
501 | + break; | ||
502 | + case SMMU_PTW_ERR_TRANSLATION: | ||
503 | + if (event.record_trans_faults) { | ||
504 | + event.type = SMMU_EVT_F_TRANSLATION; | ||
505 | + event.u.f_translation.addr = addr; | ||
506 | + event.u.f_translation.rnw = flag & 0x1; | ||
507 | + } | ||
508 | + break; | ||
509 | + case SMMU_PTW_ERR_ADDR_SIZE: | ||
510 | + if (event.record_trans_faults) { | ||
511 | + event.type = SMMU_EVT_F_ADDR_SIZE; | ||
512 | + event.u.f_addr_size.addr = addr; | ||
513 | + event.u.f_addr_size.rnw = flag & 0x1; | ||
514 | + } | ||
515 | + break; | ||
516 | + case SMMU_PTW_ERR_ACCESS: | ||
517 | + if (event.record_trans_faults) { | ||
518 | + event.type = SMMU_EVT_F_ACCESS; | ||
519 | + event.u.f_access.addr = addr; | ||
520 | + event.u.f_access.rnw = flag & 0x1; | ||
521 | + } | ||
522 | + break; | ||
523 | + case SMMU_PTW_ERR_PERMISSION: | ||
524 | + if (event.record_trans_faults) { | ||
525 | + event.type = SMMU_EVT_F_PERMISSION; | ||
526 | + event.u.f_permission.addr = addr; | ||
527 | + event.u.f_permission.rnw = flag & 0x1; | ||
528 | + } | ||
529 | + break; | ||
530 | + default: | ||
531 | + g_assert_not_reached(); | ||
532 | + } | 69 | + } |
533 | + } | 70 | + } |
534 | +out: | 71 | + same_el = (arm_current_el(env) == target_el); |
535 | + if (ret) { | ||
536 | + qemu_log_mask(LOG_GUEST_ERROR, | ||
537 | + "%s translation failed for iova=0x%"PRIx64"(%d)\n", | ||
538 | + mr->parent_obj.name, addr, ret); | ||
539 | + entry.perm = IOMMU_NONE; | ||
540 | + smmuv3_record_event(s, &event); | ||
541 | + } else if (!cfg.aborted) { | ||
542 | + entry.perm = flag; | ||
543 | + trace_smmuv3_translate(mr->parent_obj.name, sid, addr, | ||
544 | + entry.translated_addr, entry.perm); | ||
545 | + } | ||
546 | + | 72 | + |
547 | + return entry; | 73 | + fsr = compute_fsr_fsc(env, fi, target_el, mmu_idx, &fsc); |
548 | +} | ||
549 | + | 74 | + |
550 | static int smmuv3_cmdq_consume(SMMUv3State *s) | 75 | if (access_type == MMU_INST_FETCH) { |
551 | { | 76 | syn = syn_insn_abort(same_el, fi->ea, fi->s1ptw, fsc); |
552 | SMMUCmdError cmd_error = SMMU_CERROR_NONE; | 77 | exc = EXCP_PREFETCH_ABORT; |
553 | @@ -XXX,XX +XXX,XX @@ static void smmuv3_class_init(ObjectClass *klass, void *data) | ||
554 | static void smmuv3_iommu_memory_region_class_init(ObjectClass *klass, | ||
555 | void *data) | ||
556 | { | ||
557 | + IOMMUMemoryRegionClass *imrc = IOMMU_MEMORY_REGION_CLASS(klass); | ||
558 | + | ||
559 | + imrc->translate = smmuv3_translate; | ||
560 | } | ||
561 | |||
562 | static const TypeInfo smmuv3_type_info = { | ||
563 | diff --git a/hw/arm/trace-events b/hw/arm/trace-events | ||
564 | index XXXXXXX..XXXXXXX 100644 | ||
565 | --- a/hw/arm/trace-events | ||
566 | +++ b/hw/arm/trace-events | ||
567 | @@ -XXX,XX +XXX,XX @@ smmuv3_write_mmio_idr(uint64_t addr, uint64_t val) "write to RO/Unimpl reg 0x%lx | ||
568 | smmuv3_write_mmio_evtq_cons_bef_clear(uint32_t prod, uint32_t cons, uint8_t prod_wrap, uint8_t cons_wrap) "Before clearing interrupt prod:0x%x cons:0x%x prod.w:%d cons.w:%d" | ||
569 | smmuv3_write_mmio_evtq_cons_after_clear(uint32_t prod, uint32_t cons, uint8_t prod_wrap, uint8_t cons_wrap) "after clearing interrupt prod:0x%x cons:0x%x prod.w:%d cons.w:%d" | ||
570 | smmuv3_record_event(const char *type, uint32_t sid) "%s sid=%d" | ||
571 | +smmuv3_find_ste(uint16_t sid, uint32_t features, uint16_t sid_split) "SID:0x%x features:0x%x, sid_split:0x%x" | ||
572 | +smmuv3_find_ste_2lvl(uint64_t strtab_base, uint64_t l1ptr, int l1_ste_offset, uint64_t l2ptr, int l2_ste_offset, int max_l2_ste) "strtab_base:0x%lx l1ptr:0x%"PRIx64" l1_off:0x%x, l2ptr:0x%"PRIx64" l2_off:0x%x max_l2_ste:%d" | ||
573 | +smmuv3_get_ste(uint64_t addr) "STE addr: 0x%"PRIx64 | ||
574 | +smmuv3_translate_bypass(const char *n, uint16_t sid, uint64_t addr, bool is_write) "%s sid=%d bypass iova:0x%"PRIx64" is_write=%d" | ||
575 | +smmuv3_translate_in(uint16_t sid, int pci_bus_num, uint64_t strtab_base) "SID:0x%x bus:%d strtab_base:0x%"PRIx64 | ||
576 | +smmuv3_get_cd(uint64_t addr) "CD addr: 0x%"PRIx64 | ||
577 | +smmuv3_translate(const char *n, uint16_t sid, uint64_t iova, uint64_t translated, int perm) "%s sid=%d iova=0x%"PRIx64" translated=0x%"PRIx64" perm=0x%x" | ||
578 | +smmuv3_decode_cd(uint32_t oas) "oas=%d" | ||
579 | +smmuv3_decode_cd_tt(int i, uint32_t tsz, uint64_t ttb, uint32_t granule_sz) "TT[%d]:tsz:%d ttb:0x%"PRIx64" granule_sz:%d" | ||
580 | -- | 78 | -- |
581 | 2.17.0 | 79 | 2.25.1 |
582 | 80 | ||
583 | 81 | diff view generated by jsdifflib |
1 | From: Eric Auger <eric.auger@redhat.com> | 1 | From: Richard Henderson <richard.henderson@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | We introduce helpers to read/write into the command and event | 3 | For A64, any input to an indirect branch can cause this. |
4 | circular queues. | 4 | |
5 | 5 | For A32, many indirect branch paths force the branch to be aligned, | |
6 | smmuv3_write_eventq and smmuv3_cmq_consume will become static | 6 | but BXWritePC does not. This includes the BX instruction but also |
7 | in subsequent patches. | 7 | other interworking changes to PC. Prior to v8, this case is UNDEFINED. |
8 | 8 | With v8, this is CONSTRAINED UNPREDICTABLE and may either raise an | |
9 | Invalidation commands are not yet dealt with. We do not cache | 9 | exception or force align the PC. |
10 | data that need to be invalidated. This will change with vhost | 10 | |
11 | integration. | 11 | We choose to raise an exception because we have the infrastructure, |
12 | 12 | it makes the generated code for gen_bx simpler, and it has the | |
13 | Signed-off-by: Eric Auger <eric.auger@redhat.com> | 13 | possibility of catching more guest bugs. |
14 | Signed-off-by: Prem Mallappa <prem.mallappa@broadcom.com> | 14 | |
15 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> | ||
15 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 16 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
16 | Message-id: 1524665762-31355-7-git-send-email-eric.auger@redhat.com | ||
17 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 17 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
18 | --- | 18 | --- |
19 | hw/arm/smmuv3-internal.h | 163 +++++++++++++++++++++++++++++++++++++++ | 19 | target/arm/helper.h | 1 + |
20 | hw/arm/smmuv3.c | 136 ++++++++++++++++++++++++++++++++ | 20 | target/arm/syndrome.h | 5 ++++ |
21 | hw/arm/trace-events | 5 ++ | 21 | linux-user/aarch64/cpu_loop.c | 46 ++++++++++++++++++++--------------- |
22 | 3 files changed, 304 insertions(+) | 22 | target/arm/tlb_helper.c | 18 ++++++++++++++ |
23 | 23 | target/arm/translate-a64.c | 15 ++++++++++++ | |
24 | diff --git a/hw/arm/smmuv3-internal.h b/hw/arm/smmuv3-internal.h | 24 | target/arm/translate.c | 22 ++++++++++++++++- |
25 | index XXXXXXX..XXXXXXX 100644 | 25 | 6 files changed, 87 insertions(+), 20 deletions(-) |
26 | --- a/hw/arm/smmuv3-internal.h | 26 | |
27 | +++ b/hw/arm/smmuv3-internal.h | 27 | diff --git a/target/arm/helper.h b/target/arm/helper.h |
28 | @@ -XXX,XX +XXX,XX @@ static inline bool smmuv3_gerror_irq_enabled(SMMUv3State *s) | 28 | index XXXXXXX..XXXXXXX 100644 |
29 | void smmuv3_trigger_irq(SMMUv3State *s, SMMUIrq irq, uint32_t gerror_mask); | 29 | --- a/target/arm/helper.h |
30 | void smmuv3_write_gerrorn(SMMUv3State *s, uint32_t gerrorn); | 30 | +++ b/target/arm/helper.h |
31 | 31 | @@ -XXX,XX +XXX,XX @@ DEF_HELPER_FLAGS_3(sel_flags, TCG_CALL_NO_RWG_SE, | |
32 | +/* Queue Handling */ | 32 | DEF_HELPER_2(exception_internal, void, env, i32) |
33 | + | 33 | DEF_HELPER_4(exception_with_syndrome, void, env, i32, i32, i32) |
34 | +#define Q_BASE(q) ((q)->base & SMMU_BASE_ADDR_MASK) | 34 | DEF_HELPER_2(exception_bkpt_insn, void, env, i32) |
35 | +#define WRAP_MASK(q) (1 << (q)->log2size) | 35 | +DEF_HELPER_2(exception_pc_alignment, noreturn, env, tl) |
36 | +#define INDEX_MASK(q) (((1 << (q)->log2size)) - 1) | 36 | DEF_HELPER_1(setend, void, env) |
37 | +#define WRAP_INDEX_MASK(q) ((1 << ((q)->log2size + 1)) - 1) | 37 | DEF_HELPER_2(wfi, void, env, i32) |
38 | + | 38 | DEF_HELPER_1(wfe, void, env) |
39 | +#define Q_CONS(q) ((q)->cons & INDEX_MASK(q)) | 39 | diff --git a/target/arm/syndrome.h b/target/arm/syndrome.h |
40 | +#define Q_PROD(q) ((q)->prod & INDEX_MASK(q)) | 40 | index XXXXXXX..XXXXXXX 100644 |
41 | + | 41 | --- a/target/arm/syndrome.h |
42 | +#define Q_CONS_ENTRY(q) (Q_BASE(q) + (q)->entry_size * Q_CONS(q)) | 42 | +++ b/target/arm/syndrome.h |
43 | +#define Q_PROD_ENTRY(q) (Q_BASE(q) + (q)->entry_size * Q_PROD(q)) | 43 | @@ -XXX,XX +XXX,XX @@ static inline uint32_t syn_illegalstate(void) |
44 | + | 44 | return (EC_ILLEGALSTATE << ARM_EL_EC_SHIFT) | ARM_EL_IL; |
45 | +#define Q_CONS_WRAP(q) (((q)->cons & WRAP_MASK(q)) >> (q)->log2size) | 45 | } |
46 | +#define Q_PROD_WRAP(q) (((q)->prod & WRAP_MASK(q)) >> (q)->log2size) | 46 | |
47 | + | 47 | +static inline uint32_t syn_pcalignment(void) |
48 | +static inline bool smmuv3_q_full(SMMUQueue *q) | ||
49 | +{ | 48 | +{ |
50 | + return ((q->cons ^ q->prod) & WRAP_INDEX_MASK(q)) == WRAP_MASK(q); | 49 | + return (EC_PCALIGNMENT << ARM_EL_EC_SHIFT) | ARM_EL_IL; |
51 | +} | 50 | +} |
52 | + | 51 | + |
53 | +static inline bool smmuv3_q_empty(SMMUQueue *q) | 52 | #endif /* TARGET_ARM_SYNDROME_H */ |
53 | diff --git a/linux-user/aarch64/cpu_loop.c b/linux-user/aarch64/cpu_loop.c | ||
54 | index XXXXXXX..XXXXXXX 100644 | ||
55 | --- a/linux-user/aarch64/cpu_loop.c | ||
56 | +++ b/linux-user/aarch64/cpu_loop.c | ||
57 | @@ -XXX,XX +XXX,XX @@ void cpu_loop(CPUARMState *env) | ||
58 | break; | ||
59 | case EXCP_PREFETCH_ABORT: | ||
60 | case EXCP_DATA_ABORT: | ||
61 | - /* We should only arrive here with EC in {DATAABORT, INSNABORT}. */ | ||
62 | ec = syn_get_ec(env->exception.syndrome); | ||
63 | - assert(ec == EC_DATAABORT || ec == EC_INSNABORT); | ||
64 | - | ||
65 | - /* Both EC have the same format for FSC, or close enough. */ | ||
66 | - fsc = extract32(env->exception.syndrome, 0, 6); | ||
67 | - switch (fsc) { | ||
68 | - case 0x04 ... 0x07: /* Translation fault, level {0-3} */ | ||
69 | - si_signo = TARGET_SIGSEGV; | ||
70 | - si_code = TARGET_SEGV_MAPERR; | ||
71 | + switch (ec) { | ||
72 | + case EC_DATAABORT: | ||
73 | + case EC_INSNABORT: | ||
74 | + /* Both EC have the same format for FSC, or close enough. */ | ||
75 | + fsc = extract32(env->exception.syndrome, 0, 6); | ||
76 | + switch (fsc) { | ||
77 | + case 0x04 ... 0x07: /* Translation fault, level {0-3} */ | ||
78 | + si_signo = TARGET_SIGSEGV; | ||
79 | + si_code = TARGET_SEGV_MAPERR; | ||
80 | + break; | ||
81 | + case 0x09 ... 0x0b: /* Access flag fault, level {1-3} */ | ||
82 | + case 0x0d ... 0x0f: /* Permission fault, level {1-3} */ | ||
83 | + si_signo = TARGET_SIGSEGV; | ||
84 | + si_code = TARGET_SEGV_ACCERR; | ||
85 | + break; | ||
86 | + case 0x11: /* Synchronous Tag Check Fault */ | ||
87 | + si_signo = TARGET_SIGSEGV; | ||
88 | + si_code = TARGET_SEGV_MTESERR; | ||
89 | + break; | ||
90 | + case 0x21: /* Alignment fault */ | ||
91 | + si_signo = TARGET_SIGBUS; | ||
92 | + si_code = TARGET_BUS_ADRALN; | ||
93 | + break; | ||
94 | + default: | ||
95 | + g_assert_not_reached(); | ||
96 | + } | ||
97 | break; | ||
98 | - case 0x09 ... 0x0b: /* Access flag fault, level {1-3} */ | ||
99 | - case 0x0d ... 0x0f: /* Permission fault, level {1-3} */ | ||
100 | - si_signo = TARGET_SIGSEGV; | ||
101 | - si_code = TARGET_SEGV_ACCERR; | ||
102 | - break; | ||
103 | - case 0x11: /* Synchronous Tag Check Fault */ | ||
104 | - si_signo = TARGET_SIGSEGV; | ||
105 | - si_code = TARGET_SEGV_MTESERR; | ||
106 | - break; | ||
107 | - case 0x21: /* Alignment fault */ | ||
108 | + case EC_PCALIGNMENT: | ||
109 | si_signo = TARGET_SIGBUS; | ||
110 | si_code = TARGET_BUS_ADRALN; | ||
111 | break; | ||
112 | diff --git a/target/arm/tlb_helper.c b/target/arm/tlb_helper.c | ||
113 | index XXXXXXX..XXXXXXX 100644 | ||
114 | --- a/target/arm/tlb_helper.c | ||
115 | +++ b/target/arm/tlb_helper.c | ||
116 | @@ -XXX,XX +XXX,XX @@ | ||
117 | #include "cpu.h" | ||
118 | #include "internals.h" | ||
119 | #include "exec/exec-all.h" | ||
120 | +#include "exec/helper-proto.h" | ||
121 | |||
122 | static inline uint32_t merge_syn_data_abort(uint32_t template_syn, | ||
123 | unsigned int target_el, | ||
124 | @@ -XXX,XX +XXX,XX @@ void arm_cpu_do_unaligned_access(CPUState *cs, vaddr vaddr, | ||
125 | arm_deliver_fault(cpu, vaddr, access_type, mmu_idx, &fi); | ||
126 | } | ||
127 | |||
128 | +void helper_exception_pc_alignment(CPUARMState *env, target_ulong pc) | ||
54 | +{ | 129 | +{ |
55 | + return (q->cons & WRAP_INDEX_MASK(q)) == (q->prod & WRAP_INDEX_MASK(q)); | 130 | + ARMMMUFaultInfo fi = { .type = ARMFault_Alignment }; |
131 | + int target_el = exception_target_el(env); | ||
132 | + int mmu_idx = cpu_mmu_index(env, true); | ||
133 | + uint32_t fsc; | ||
134 | + | ||
135 | + env->exception.vaddress = pc; | ||
136 | + | ||
137 | + /* | ||
138 | + * Note that the fsc is not applicable to this exception, | ||
139 | + * since any syndrome is pcalignment not insn_abort. | ||
140 | + */ | ||
141 | + env->exception.fsr = compute_fsr_fsc(env, &fi, target_el, mmu_idx, &fsc); | ||
142 | + raise_exception(env, EXCP_PREFETCH_ABORT, syn_pcalignment(), target_el); | ||
56 | +} | 143 | +} |
57 | + | 144 | + |
58 | +static inline void queue_prod_incr(SMMUQueue *q) | 145 | #if !defined(CONFIG_USER_ONLY) |
59 | +{ | 146 | |
60 | + q->prod = (q->prod + 1) & WRAP_INDEX_MASK(q); | 147 | /* |
61 | +} | 148 | diff --git a/target/arm/translate-a64.c b/target/arm/translate-a64.c |
62 | + | 149 | index XXXXXXX..XXXXXXX 100644 |
63 | +static inline void queue_cons_incr(SMMUQueue *q) | 150 | --- a/target/arm/translate-a64.c |
64 | +{ | 151 | +++ b/target/arm/translate-a64.c |
65 | + /* | 152 | @@ -XXX,XX +XXX,XX @@ static void aarch64_tr_translate_insn(DisasContextBase *dcbase, CPUState *cpu) |
66 | + * We have to use deposit for the CONS registers to preserve | 153 | uint64_t pc = s->base.pc_next; |
67 | + * the ERR field in the high bits. | 154 | uint32_t insn; |
68 | + */ | 155 | |
69 | + q->cons = deposit32(q->cons, 0, q->log2size + 1, q->cons + 1); | 156 | + /* Singlestep exceptions have the highest priority. */ |
70 | +} | 157 | if (s->ss_active && !s->pstate_ss) { |
71 | + | 158 | /* Singlestep state is Active-pending. |
72 | +static inline bool smmuv3_cmdq_enabled(SMMUv3State *s) | 159 | * If we're in this state at the start of a TB then either |
73 | +{ | 160 | @@ -XXX,XX +XXX,XX @@ static void aarch64_tr_translate_insn(DisasContextBase *dcbase, CPUState *cpu) |
74 | + return FIELD_EX32(s->cr[0], CR0, CMDQEN); | 161 | return; |
75 | +} | 162 | } |
76 | + | 163 | |
77 | +static inline bool smmuv3_eventq_enabled(SMMUv3State *s) | 164 | + if (pc & 3) { |
78 | +{ | 165 | + /* |
79 | + return FIELD_EX32(s->cr[0], CR0, EVENTQEN); | 166 | + * PC alignment fault. This has priority over the instruction abort |
80 | +} | 167 | + * that we would receive from a translation fault via arm_ldl_code. |
81 | + | 168 | + * This should only be possible after an indirect branch, at the |
82 | +static inline void smmu_write_cmdq_err(SMMUv3State *s, uint32_t err_type) | 169 | + * start of the TB. |
83 | +{ | 170 | + */ |
84 | + s->cmdq.cons = FIELD_DP32(s->cmdq.cons, CMDQ_CONS, ERR, err_type); | 171 | + assert(s->base.num_insns == 1); |
85 | +} | 172 | + gen_helper_exception_pc_alignment(cpu_env, tcg_constant_tl(pc)); |
86 | + | 173 | + s->base.is_jmp = DISAS_NORETURN; |
87 | +void smmuv3_write_eventq(SMMUv3State *s, Evt *evt); | 174 | + s->base.pc_next = QEMU_ALIGN_UP(pc, 4); |
88 | + | ||
89 | +/* Commands */ | ||
90 | + | ||
91 | +typedef enum SMMUCommandType { | ||
92 | + SMMU_CMD_NONE = 0x00, | ||
93 | + SMMU_CMD_PREFETCH_CONFIG , | ||
94 | + SMMU_CMD_PREFETCH_ADDR, | ||
95 | + SMMU_CMD_CFGI_STE, | ||
96 | + SMMU_CMD_CFGI_STE_RANGE, | ||
97 | + SMMU_CMD_CFGI_CD, | ||
98 | + SMMU_CMD_CFGI_CD_ALL, | ||
99 | + SMMU_CMD_CFGI_ALL, | ||
100 | + SMMU_CMD_TLBI_NH_ALL = 0x10, | ||
101 | + SMMU_CMD_TLBI_NH_ASID, | ||
102 | + SMMU_CMD_TLBI_NH_VA, | ||
103 | + SMMU_CMD_TLBI_NH_VAA, | ||
104 | + SMMU_CMD_TLBI_EL3_ALL = 0x18, | ||
105 | + SMMU_CMD_TLBI_EL3_VA = 0x1a, | ||
106 | + SMMU_CMD_TLBI_EL2_ALL = 0x20, | ||
107 | + SMMU_CMD_TLBI_EL2_ASID, | ||
108 | + SMMU_CMD_TLBI_EL2_VA, | ||
109 | + SMMU_CMD_TLBI_EL2_VAA, | ||
110 | + SMMU_CMD_TLBI_S12_VMALL = 0x28, | ||
111 | + SMMU_CMD_TLBI_S2_IPA = 0x2a, | ||
112 | + SMMU_CMD_TLBI_NSNH_ALL = 0x30, | ||
113 | + SMMU_CMD_ATC_INV = 0x40, | ||
114 | + SMMU_CMD_PRI_RESP, | ||
115 | + SMMU_CMD_RESUME = 0x44, | ||
116 | + SMMU_CMD_STALL_TERM, | ||
117 | + SMMU_CMD_SYNC, | ||
118 | +} SMMUCommandType; | ||
119 | + | ||
120 | +static const char *cmd_stringify[] = { | ||
121 | + [SMMU_CMD_PREFETCH_CONFIG] = "SMMU_CMD_PREFETCH_CONFIG", | ||
122 | + [SMMU_CMD_PREFETCH_ADDR] = "SMMU_CMD_PREFETCH_ADDR", | ||
123 | + [SMMU_CMD_CFGI_STE] = "SMMU_CMD_CFGI_STE", | ||
124 | + [SMMU_CMD_CFGI_STE_RANGE] = "SMMU_CMD_CFGI_STE_RANGE", | ||
125 | + [SMMU_CMD_CFGI_CD] = "SMMU_CMD_CFGI_CD", | ||
126 | + [SMMU_CMD_CFGI_CD_ALL] = "SMMU_CMD_CFGI_CD_ALL", | ||
127 | + [SMMU_CMD_CFGI_ALL] = "SMMU_CMD_CFGI_ALL", | ||
128 | + [SMMU_CMD_TLBI_NH_ALL] = "SMMU_CMD_TLBI_NH_ALL", | ||
129 | + [SMMU_CMD_TLBI_NH_ASID] = "SMMU_CMD_TLBI_NH_ASID", | ||
130 | + [SMMU_CMD_TLBI_NH_VA] = "SMMU_CMD_TLBI_NH_VA", | ||
131 | + [SMMU_CMD_TLBI_NH_VAA] = "SMMU_CMD_TLBI_NH_VAA", | ||
132 | + [SMMU_CMD_TLBI_EL3_ALL] = "SMMU_CMD_TLBI_EL3_ALL", | ||
133 | + [SMMU_CMD_TLBI_EL3_VA] = "SMMU_CMD_TLBI_EL3_VA", | ||
134 | + [SMMU_CMD_TLBI_EL2_ALL] = "SMMU_CMD_TLBI_EL2_ALL", | ||
135 | + [SMMU_CMD_TLBI_EL2_ASID] = "SMMU_CMD_TLBI_EL2_ASID", | ||
136 | + [SMMU_CMD_TLBI_EL2_VA] = "SMMU_CMD_TLBI_EL2_VA", | ||
137 | + [SMMU_CMD_TLBI_EL2_VAA] = "SMMU_CMD_TLBI_EL2_VAA", | ||
138 | + [SMMU_CMD_TLBI_S12_VMALL] = "SMMU_CMD_TLBI_S12_VMALL", | ||
139 | + [SMMU_CMD_TLBI_S2_IPA] = "SMMU_CMD_TLBI_S2_IPA", | ||
140 | + [SMMU_CMD_TLBI_NSNH_ALL] = "SMMU_CMD_TLBI_NSNH_ALL", | ||
141 | + [SMMU_CMD_ATC_INV] = "SMMU_CMD_ATC_INV", | ||
142 | + [SMMU_CMD_PRI_RESP] = "SMMU_CMD_PRI_RESP", | ||
143 | + [SMMU_CMD_RESUME] = "SMMU_CMD_RESUME", | ||
144 | + [SMMU_CMD_STALL_TERM] = "SMMU_CMD_STALL_TERM", | ||
145 | + [SMMU_CMD_SYNC] = "SMMU_CMD_SYNC", | ||
146 | +}; | ||
147 | + | ||
148 | +static inline const char *smmu_cmd_string(SMMUCommandType type) | ||
149 | +{ | ||
150 | + if (type > SMMU_CMD_NONE && type < ARRAY_SIZE(cmd_stringify)) { | ||
151 | + return cmd_stringify[type] ? cmd_stringify[type] : "UNKNOWN"; | ||
152 | + } else { | ||
153 | + return "INVALID"; | ||
154 | + } | ||
155 | +} | ||
156 | + | ||
157 | +/* CMDQ fields */ | ||
158 | + | ||
159 | +typedef enum { | ||
160 | + SMMU_CERROR_NONE = 0, | ||
161 | + SMMU_CERROR_ILL, | ||
162 | + SMMU_CERROR_ABT, | ||
163 | + SMMU_CERROR_ATC_INV_SYNC, | ||
164 | +} SMMUCmdError; | ||
165 | + | ||
166 | +enum { /* Command completion notification */ | ||
167 | + CMD_SYNC_SIG_NONE, | ||
168 | + CMD_SYNC_SIG_IRQ, | ||
169 | + CMD_SYNC_SIG_SEV, | ||
170 | +}; | ||
171 | + | ||
172 | +#define CMD_TYPE(x) extract32((x)->word[0], 0 , 8) | ||
173 | +#define CMD_SSEC(x) extract32((x)->word[0], 10, 1) | ||
174 | +#define CMD_SSV(x) extract32((x)->word[0], 11, 1) | ||
175 | +#define CMD_RESUME_AC(x) extract32((x)->word[0], 12, 1) | ||
176 | +#define CMD_RESUME_AB(x) extract32((x)->word[0], 13, 1) | ||
177 | +#define CMD_SYNC_CS(x) extract32((x)->word[0], 12, 2) | ||
178 | +#define CMD_SSID(x) extract32((x)->word[0], 12, 20) | ||
179 | +#define CMD_SID(x) ((x)->word[1]) | ||
180 | +#define CMD_VMID(x) extract32((x)->word[1], 0 , 16) | ||
181 | +#define CMD_ASID(x) extract32((x)->word[1], 16, 16) | ||
182 | +#define CMD_RESUME_STAG(x) extract32((x)->word[2], 0 , 16) | ||
183 | +#define CMD_RESP(x) extract32((x)->word[2], 11, 2) | ||
184 | +#define CMD_LEAF(x) extract32((x)->word[2], 0 , 1) | ||
185 | +#define CMD_STE_RANGE(x) extract32((x)->word[2], 0 , 5) | ||
186 | +#define CMD_ADDR(x) ({ \ | ||
187 | + uint64_t high = (uint64_t)(x)->word[3]; \ | ||
188 | + uint64_t low = extract32((x)->word[2], 12, 20); \ | ||
189 | + uint64_t addr = high << 32 | (low << 12); \ | ||
190 | + addr; \ | ||
191 | + }) | ||
192 | + | ||
193 | +int smmuv3_cmdq_consume(SMMUv3State *s); | ||
194 | + | ||
195 | #endif | ||
196 | diff --git a/hw/arm/smmuv3.c b/hw/arm/smmuv3.c | ||
197 | index XXXXXXX..XXXXXXX 100644 | ||
198 | --- a/hw/arm/smmuv3.c | ||
199 | +++ b/hw/arm/smmuv3.c | ||
200 | @@ -XXX,XX +XXX,XX @@ void smmuv3_write_gerrorn(SMMUv3State *s, uint32_t new_gerrorn) | ||
201 | trace_smmuv3_write_gerrorn(toggled & pending, s->gerrorn); | ||
202 | } | ||
203 | |||
204 | +static inline MemTxResult queue_read(SMMUQueue *q, void *data) | ||
205 | +{ | ||
206 | + dma_addr_t addr = Q_CONS_ENTRY(q); | ||
207 | + | ||
208 | + return dma_memory_read(&address_space_memory, addr, data, q->entry_size); | ||
209 | +} | ||
210 | + | ||
211 | +static MemTxResult queue_write(SMMUQueue *q, void *data) | ||
212 | +{ | ||
213 | + dma_addr_t addr = Q_PROD_ENTRY(q); | ||
214 | + MemTxResult ret; | ||
215 | + | ||
216 | + ret = dma_memory_write(&address_space_memory, addr, data, q->entry_size); | ||
217 | + if (ret != MEMTX_OK) { | ||
218 | + return ret; | ||
219 | + } | ||
220 | + | ||
221 | + queue_prod_incr(q); | ||
222 | + return MEMTX_OK; | ||
223 | +} | ||
224 | + | ||
225 | +void smmuv3_write_eventq(SMMUv3State *s, Evt *evt) | ||
226 | +{ | ||
227 | + SMMUQueue *q = &s->eventq; | ||
228 | + | ||
229 | + if (!smmuv3_eventq_enabled(s)) { | ||
230 | + return; | 175 | + return; |
231 | + } | 176 | + } |
232 | + | 177 | + |
233 | + if (smmuv3_q_full(q)) { | 178 | s->pc_curr = pc; |
179 | insn = arm_ldl_code(env, &s->base, pc, s->sctlr_b); | ||
180 | s->insn = insn; | ||
181 | diff --git a/target/arm/translate.c b/target/arm/translate.c | ||
182 | index XXXXXXX..XXXXXXX 100644 | ||
183 | --- a/target/arm/translate.c | ||
184 | +++ b/target/arm/translate.c | ||
185 | @@ -XXX,XX +XXX,XX @@ static void arm_tr_translate_insn(DisasContextBase *dcbase, CPUState *cpu) | ||
186 | uint32_t pc = dc->base.pc_next; | ||
187 | unsigned int insn; | ||
188 | |||
189 | - if (arm_check_ss_active(dc) || arm_check_kernelpage(dc)) { | ||
190 | + /* Singlestep exceptions have the highest priority. */ | ||
191 | + if (arm_check_ss_active(dc)) { | ||
192 | + dc->base.pc_next = pc + 4; | ||
234 | + return; | 193 | + return; |
235 | + } | 194 | + } |
236 | + | 195 | + |
237 | + queue_write(q, evt); | 196 | + if (pc & 3) { |
238 | + | 197 | + /* |
239 | + if (smmuv3_q_empty(q)) { | 198 | + * PC alignment fault. This has priority over the instruction abort |
240 | + smmuv3_trigger_irq(s, SMMU_IRQ_EVTQ, 0); | 199 | + * that we would receive from a translation fault via arm_ldl_code |
200 | + * (or the execution of the kernelpage entrypoint). This should only | ||
201 | + * be possible after an indirect branch, at the start of the TB. | ||
202 | + */ | ||
203 | + assert(dc->base.num_insns == 1); | ||
204 | + gen_helper_exception_pc_alignment(cpu_env, tcg_constant_tl(pc)); | ||
205 | + dc->base.is_jmp = DISAS_NORETURN; | ||
206 | + dc->base.pc_next = QEMU_ALIGN_UP(pc, 4); | ||
207 | + return; | ||
241 | + } | 208 | + } |
242 | +} | 209 | + |
243 | + | 210 | + if (arm_check_kernelpage(dc)) { |
244 | static void smmuv3_init_regs(SMMUv3State *s) | 211 | dc->base.pc_next = pc + 4; |
245 | { | 212 | return; |
246 | /** | 213 | } |
247 | @@ -XXX,XX +XXX,XX @@ static void smmuv3_init_regs(SMMUv3State *s) | ||
248 | s->sid_split = 0; | ||
249 | } | ||
250 | |||
251 | +int smmuv3_cmdq_consume(SMMUv3State *s) | ||
252 | +{ | ||
253 | + SMMUCmdError cmd_error = SMMU_CERROR_NONE; | ||
254 | + SMMUQueue *q = &s->cmdq; | ||
255 | + SMMUCommandType type = 0; | ||
256 | + | ||
257 | + if (!smmuv3_cmdq_enabled(s)) { | ||
258 | + return 0; | ||
259 | + } | ||
260 | + /* | ||
261 | + * some commands depend on register values, typically CR0. In case those | ||
262 | + * register values change while handling the command, spec says it | ||
263 | + * is UNPREDICTABLE whether the command is interpreted under the new | ||
264 | + * or old value. | ||
265 | + */ | ||
266 | + | ||
267 | + while (!smmuv3_q_empty(q)) { | ||
268 | + uint32_t pending = s->gerror ^ s->gerrorn; | ||
269 | + Cmd cmd; | ||
270 | + | ||
271 | + trace_smmuv3_cmdq_consume(Q_PROD(q), Q_CONS(q), | ||
272 | + Q_PROD_WRAP(q), Q_CONS_WRAP(q)); | ||
273 | + | ||
274 | + if (FIELD_EX32(pending, GERROR, CMDQ_ERR)) { | ||
275 | + break; | ||
276 | + } | ||
277 | + | ||
278 | + if (queue_read(q, &cmd) != MEMTX_OK) { | ||
279 | + cmd_error = SMMU_CERROR_ABT; | ||
280 | + break; | ||
281 | + } | ||
282 | + | ||
283 | + type = CMD_TYPE(&cmd); | ||
284 | + | ||
285 | + trace_smmuv3_cmdq_opcode(smmu_cmd_string(type)); | ||
286 | + | ||
287 | + switch (type) { | ||
288 | + case SMMU_CMD_SYNC: | ||
289 | + if (CMD_SYNC_CS(&cmd) & CMD_SYNC_SIG_IRQ) { | ||
290 | + smmuv3_trigger_irq(s, SMMU_IRQ_CMD_SYNC, 0); | ||
291 | + } | ||
292 | + break; | ||
293 | + case SMMU_CMD_PREFETCH_CONFIG: | ||
294 | + case SMMU_CMD_PREFETCH_ADDR: | ||
295 | + case SMMU_CMD_CFGI_STE: | ||
296 | + case SMMU_CMD_CFGI_STE_RANGE: /* same as SMMU_CMD_CFGI_ALL */ | ||
297 | + case SMMU_CMD_CFGI_CD: | ||
298 | + case SMMU_CMD_CFGI_CD_ALL: | ||
299 | + case SMMU_CMD_TLBI_NH_ALL: | ||
300 | + case SMMU_CMD_TLBI_NH_ASID: | ||
301 | + case SMMU_CMD_TLBI_NH_VA: | ||
302 | + case SMMU_CMD_TLBI_NH_VAA: | ||
303 | + case SMMU_CMD_TLBI_EL3_ALL: | ||
304 | + case SMMU_CMD_TLBI_EL3_VA: | ||
305 | + case SMMU_CMD_TLBI_EL2_ALL: | ||
306 | + case SMMU_CMD_TLBI_EL2_ASID: | ||
307 | + case SMMU_CMD_TLBI_EL2_VA: | ||
308 | + case SMMU_CMD_TLBI_EL2_VAA: | ||
309 | + case SMMU_CMD_TLBI_S12_VMALL: | ||
310 | + case SMMU_CMD_TLBI_S2_IPA: | ||
311 | + case SMMU_CMD_TLBI_NSNH_ALL: | ||
312 | + case SMMU_CMD_ATC_INV: | ||
313 | + case SMMU_CMD_PRI_RESP: | ||
314 | + case SMMU_CMD_RESUME: | ||
315 | + case SMMU_CMD_STALL_TERM: | ||
316 | + trace_smmuv3_unhandled_cmd(type); | ||
317 | + break; | ||
318 | + default: | ||
319 | + cmd_error = SMMU_CERROR_ILL; | ||
320 | + qemu_log_mask(LOG_GUEST_ERROR, | ||
321 | + "Illegal command type: %d\n", CMD_TYPE(&cmd)); | ||
322 | + break; | ||
323 | + } | ||
324 | + if (cmd_error) { | ||
325 | + break; | ||
326 | + } | ||
327 | + /* | ||
328 | + * We only increment the cons index after the completion of | ||
329 | + * the command. We do that because the SYNC returns immediately | ||
330 | + * and does not check the completion of previous commands | ||
331 | + */ | ||
332 | + queue_cons_incr(q); | ||
333 | + } | ||
334 | + | ||
335 | + if (cmd_error) { | ||
336 | + trace_smmuv3_cmdq_consume_error(smmu_cmd_string(type), cmd_error); | ||
337 | + smmu_write_cmdq_err(s, cmd_error); | ||
338 | + smmuv3_trigger_irq(s, SMMU_IRQ_GERROR, R_GERROR_CMDQ_ERR_MASK); | ||
339 | + } | ||
340 | + | ||
341 | + trace_smmuv3_cmdq_consume_out(Q_PROD(q), Q_CONS(q), | ||
342 | + Q_PROD_WRAP(q), Q_CONS_WRAP(q)); | ||
343 | + | ||
344 | + return 0; | ||
345 | +} | ||
346 | + | ||
347 | static MemTxResult smmu_write_mmio(void *opaque, hwaddr offset, uint64_t data, | ||
348 | unsigned size, MemTxAttrs attrs) | ||
349 | { | ||
350 | diff --git a/hw/arm/trace-events b/hw/arm/trace-events | ||
351 | index XXXXXXX..XXXXXXX 100644 | ||
352 | --- a/hw/arm/trace-events | ||
353 | +++ b/hw/arm/trace-events | ||
354 | @@ -XXX,XX +XXX,XX @@ smmuv3_read_mmio(uint64_t addr, uint64_t val, unsigned size, uint32_t r) "addr: | ||
355 | smmuv3_trigger_irq(int irq) "irq=%d" | ||
356 | smmuv3_write_gerror(uint32_t toggled, uint32_t gerror) "toggled=0x%x, new GERROR=0x%x" | ||
357 | smmuv3_write_gerrorn(uint32_t acked, uint32_t gerrorn) "acked=0x%x, new GERRORN=0x%x" | ||
358 | +smmuv3_unhandled_cmd(uint32_t type) "Unhandled command type=%d" | ||
359 | +smmuv3_cmdq_consume(uint32_t prod, uint32_t cons, uint8_t prod_wrap, uint8_t cons_wrap) "prod=%d cons=%d prod.wrap=%d cons.wrap=%d" | ||
360 | +smmuv3_cmdq_opcode(const char *opcode) "<--- %s" | ||
361 | +smmuv3_cmdq_consume_out(uint32_t prod, uint32_t cons, uint8_t prod_wrap, uint8_t cons_wrap) "prod:%d, cons:%d, prod_wrap:%d, cons_wrap:%d " | ||
362 | +smmuv3_cmdq_consume_error(const char *cmd_name, uint8_t cmd_error) "Error on %s command execution: %d" | ||
363 | -- | 214 | -- |
364 | 2.17.0 | 215 | 2.25.1 |
365 | 216 | ||
366 | 217 | diff view generated by jsdifflib |
1 | From: Eric Auger <eric.auger@redhat.com> | 1 | From: Richard Henderson <richard.henderson@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | Now we have relevant helpers for queue and irq | 3 | Misaligned thumb PC is architecturally impossible. |
4 | management, let's implement MMIO write operations. | 4 | Assert is better than proceeding, in case we've missed |
5 | something somewhere. | ||
5 | 6 | ||
6 | Signed-off-by: Eric Auger <eric.auger@redhat.com> | 7 | Expand a comment about aligning the pc in gdbstub. |
7 | Signed-off-by: Prem Mallappa <prem.mallappa@broadcom.com> | 8 | Fail an incoming migrate if a thumb pc is misaligned. |
9 | |||
8 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 10 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
9 | Message-id: 1524665762-31355-8-git-send-email-eric.auger@redhat.com | 11 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> |
10 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 12 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
11 | --- | 13 | --- |
12 | hw/arm/smmuv3-internal.h | 8 +- | 14 | target/arm/gdbstub.c | 9 +++++++-- |
13 | hw/arm/smmuv3.c | 170 +++++++++++++++++++++++++++++++++++++-- | 15 | target/arm/machine.c | 10 ++++++++++ |
14 | hw/arm/trace-events | 6 ++ | 16 | target/arm/translate.c | 3 +++ |
15 | 3 files changed, 174 insertions(+), 10 deletions(-) | 17 | 3 files changed, 20 insertions(+), 2 deletions(-) |
16 | 18 | ||
17 | diff --git a/hw/arm/smmuv3-internal.h b/hw/arm/smmuv3-internal.h | 19 | diff --git a/target/arm/gdbstub.c b/target/arm/gdbstub.c |
18 | index XXXXXXX..XXXXXXX 100644 | 20 | index XXXXXXX..XXXXXXX 100644 |
19 | --- a/hw/arm/smmuv3-internal.h | 21 | --- a/target/arm/gdbstub.c |
20 | +++ b/hw/arm/smmuv3-internal.h | 22 | +++ b/target/arm/gdbstub.c |
21 | @@ -XXX,XX +XXX,XX @@ REG32(CR0, 0x20) | 23 | @@ -XXX,XX +XXX,XX @@ int arm_cpu_gdb_write_register(CPUState *cs, uint8_t *mem_buf, int n) |
22 | FIELD(CR0, EVENTQEN, 2, 1) | 24 | |
23 | FIELD(CR0, CMDQEN, 3, 1) | 25 | tmp = ldl_p(mem_buf); |
24 | 26 | ||
25 | +#define SMMU_CR0_RESERVED 0xFFFFFC20 | 27 | - /* Mask out low bit of PC to workaround gdb bugs. This will probably |
28 | - cause problems if we ever implement the Jazelle DBX extensions. */ | ||
29 | + /* | ||
30 | + * Mask out low bits of PC to workaround gdb bugs. | ||
31 | + * This avoids an assert in thumb_tr_translate_insn, because it is | ||
32 | + * architecturally impossible to misalign the pc. | ||
33 | + * This will probably cause problems if we ever implement the | ||
34 | + * Jazelle DBX extensions. | ||
35 | + */ | ||
36 | if (n == 15) { | ||
37 | tmp &= ~1; | ||
38 | } | ||
39 | diff --git a/target/arm/machine.c b/target/arm/machine.c | ||
40 | index XXXXXXX..XXXXXXX 100644 | ||
41 | --- a/target/arm/machine.c | ||
42 | +++ b/target/arm/machine.c | ||
43 | @@ -XXX,XX +XXX,XX @@ static int cpu_post_load(void *opaque, int version_id) | ||
44 | return -1; | ||
45 | } | ||
46 | } | ||
26 | + | 47 | + |
27 | REG32(CR0ACK, 0x24) | 48 | + /* |
28 | REG32(CR1, 0x28) | 49 | + * Misaligned thumb pc is architecturally impossible. |
29 | REG32(CR2, 0x2c) | 50 | + * We have an assert in thumb_tr_translate_insn to verify this. |
30 | @@ -XXX,XX +XXX,XX @@ static inline bool smmuv3_gerror_irq_enabled(SMMUv3State *s) | 51 | + * Fail an incoming migrate to avoid this assert. |
31 | return FIELD_EX32(s->irq_ctrl, IRQ_CTRL, GERROR_IRQEN); | 52 | + */ |
32 | } | 53 | + if (!is_a64(env) && env->thumb && (env->regs[15] & 1)) { |
33 | 54 | + return -1; | |
34 | -/* public until callers get introduced */ | ||
35 | -void smmuv3_trigger_irq(SMMUv3State *s, SMMUIrq irq, uint32_t gerror_mask); | ||
36 | -void smmuv3_write_gerrorn(SMMUv3State *s, uint32_t gerrorn); | ||
37 | - | ||
38 | /* Queue Handling */ | ||
39 | |||
40 | #define Q_BASE(q) ((q)->base & SMMU_BASE_ADDR_MASK) | ||
41 | @@ -XXX,XX +XXX,XX @@ enum { /* Command completion notification */ | ||
42 | addr; \ | ||
43 | }) | ||
44 | |||
45 | -int smmuv3_cmdq_consume(SMMUv3State *s); | ||
46 | +#define SMMU_FEATURE_2LVL_STE (1 << 0) | ||
47 | |||
48 | #endif | ||
49 | diff --git a/hw/arm/smmuv3.c b/hw/arm/smmuv3.c | ||
50 | index XXXXXXX..XXXXXXX 100644 | ||
51 | --- a/hw/arm/smmuv3.c | ||
52 | +++ b/hw/arm/smmuv3.c | ||
53 | @@ -XXX,XX +XXX,XX @@ | ||
54 | * @irq: irq type | ||
55 | * @gerror_mask: mask of gerrors to toggle (relevant if @irq is GERROR) | ||
56 | */ | ||
57 | -void smmuv3_trigger_irq(SMMUv3State *s, SMMUIrq irq, uint32_t gerror_mask) | ||
58 | +static void smmuv3_trigger_irq(SMMUv3State *s, SMMUIrq irq, | ||
59 | + uint32_t gerror_mask) | ||
60 | { | ||
61 | |||
62 | bool pulse = false; | ||
63 | @@ -XXX,XX +XXX,XX @@ void smmuv3_trigger_irq(SMMUv3State *s, SMMUIrq irq, uint32_t gerror_mask) | ||
64 | } | ||
65 | } | ||
66 | |||
67 | -void smmuv3_write_gerrorn(SMMUv3State *s, uint32_t new_gerrorn) | ||
68 | +static void smmuv3_write_gerrorn(SMMUv3State *s, uint32_t new_gerrorn) | ||
69 | { | ||
70 | uint32_t pending = s->gerror ^ s->gerrorn; | ||
71 | uint32_t toggled = s->gerrorn ^ new_gerrorn; | ||
72 | @@ -XXX,XX +XXX,XX @@ static void smmuv3_init_regs(SMMUv3State *s) | ||
73 | s->sid_split = 0; | ||
74 | } | ||
75 | |||
76 | -int smmuv3_cmdq_consume(SMMUv3State *s) | ||
77 | +static int smmuv3_cmdq_consume(SMMUv3State *s) | ||
78 | { | ||
79 | SMMUCmdError cmd_error = SMMU_CERROR_NONE; | ||
80 | SMMUQueue *q = &s->cmdq; | ||
81 | @@ -XXX,XX +XXX,XX @@ int smmuv3_cmdq_consume(SMMUv3State *s) | ||
82 | return 0; | ||
83 | } | ||
84 | |||
85 | +static MemTxResult smmu_writell(SMMUv3State *s, hwaddr offset, | ||
86 | + uint64_t data, MemTxAttrs attrs) | ||
87 | +{ | ||
88 | + switch (offset) { | ||
89 | + case A_GERROR_IRQ_CFG0: | ||
90 | + s->gerror_irq_cfg0 = data; | ||
91 | + return MEMTX_OK; | ||
92 | + case A_STRTAB_BASE: | ||
93 | + s->strtab_base = data; | ||
94 | + return MEMTX_OK; | ||
95 | + case A_CMDQ_BASE: | ||
96 | + s->cmdq.base = data; | ||
97 | + s->cmdq.log2size = extract64(s->cmdq.base, 0, 5); | ||
98 | + if (s->cmdq.log2size > SMMU_CMDQS) { | ||
99 | + s->cmdq.log2size = SMMU_CMDQS; | ||
100 | + } | ||
101 | + return MEMTX_OK; | ||
102 | + case A_EVENTQ_BASE: | ||
103 | + s->eventq.base = data; | ||
104 | + s->eventq.log2size = extract64(s->eventq.base, 0, 5); | ||
105 | + if (s->eventq.log2size > SMMU_EVENTQS) { | ||
106 | + s->eventq.log2size = SMMU_EVENTQS; | ||
107 | + } | ||
108 | + return MEMTX_OK; | ||
109 | + case A_EVENTQ_IRQ_CFG0: | ||
110 | + s->eventq_irq_cfg0 = data; | ||
111 | + return MEMTX_OK; | ||
112 | + default: | ||
113 | + qemu_log_mask(LOG_UNIMP, | ||
114 | + "%s Unexpected 64-bit access to 0x%"PRIx64" (WI)\n", | ||
115 | + __func__, offset); | ||
116 | + return MEMTX_OK; | ||
117 | + } | ||
118 | +} | ||
119 | + | ||
120 | +static MemTxResult smmu_writel(SMMUv3State *s, hwaddr offset, | ||
121 | + uint64_t data, MemTxAttrs attrs) | ||
122 | +{ | ||
123 | + switch (offset) { | ||
124 | + case A_CR0: | ||
125 | + s->cr[0] = data; | ||
126 | + s->cr0ack = data & ~SMMU_CR0_RESERVED; | ||
127 | + /* in case the command queue has been enabled */ | ||
128 | + smmuv3_cmdq_consume(s); | ||
129 | + return MEMTX_OK; | ||
130 | + case A_CR1: | ||
131 | + s->cr[1] = data; | ||
132 | + return MEMTX_OK; | ||
133 | + case A_CR2: | ||
134 | + s->cr[2] = data; | ||
135 | + return MEMTX_OK; | ||
136 | + case A_IRQ_CTRL: | ||
137 | + s->irq_ctrl = data; | ||
138 | + return MEMTX_OK; | ||
139 | + case A_GERRORN: | ||
140 | + smmuv3_write_gerrorn(s, data); | ||
141 | + /* | ||
142 | + * By acknowledging the CMDQ_ERR, SW may notify cmds can | ||
143 | + * be processed again | ||
144 | + */ | ||
145 | + smmuv3_cmdq_consume(s); | ||
146 | + return MEMTX_OK; | ||
147 | + case A_GERROR_IRQ_CFG0: /* 64b */ | ||
148 | + s->gerror_irq_cfg0 = deposit64(s->gerror_irq_cfg0, 0, 32, data); | ||
149 | + return MEMTX_OK; | ||
150 | + case A_GERROR_IRQ_CFG0 + 4: | ||
151 | + s->gerror_irq_cfg0 = deposit64(s->gerror_irq_cfg0, 32, 32, data); | ||
152 | + return MEMTX_OK; | ||
153 | + case A_GERROR_IRQ_CFG1: | ||
154 | + s->gerror_irq_cfg1 = data; | ||
155 | + return MEMTX_OK; | ||
156 | + case A_GERROR_IRQ_CFG2: | ||
157 | + s->gerror_irq_cfg2 = data; | ||
158 | + return MEMTX_OK; | ||
159 | + case A_STRTAB_BASE: /* 64b */ | ||
160 | + s->strtab_base = deposit64(s->strtab_base, 0, 32, data); | ||
161 | + return MEMTX_OK; | ||
162 | + case A_STRTAB_BASE + 4: | ||
163 | + s->strtab_base = deposit64(s->strtab_base, 32, 32, data); | ||
164 | + return MEMTX_OK; | ||
165 | + case A_STRTAB_BASE_CFG: | ||
166 | + s->strtab_base_cfg = data; | ||
167 | + if (FIELD_EX32(data, STRTAB_BASE_CFG, FMT) == 1) { | ||
168 | + s->sid_split = FIELD_EX32(data, STRTAB_BASE_CFG, SPLIT); | ||
169 | + s->features |= SMMU_FEATURE_2LVL_STE; | ||
170 | + } | ||
171 | + return MEMTX_OK; | ||
172 | + case A_CMDQ_BASE: /* 64b */ | ||
173 | + s->cmdq.base = deposit64(s->cmdq.base, 0, 32, data); | ||
174 | + s->cmdq.log2size = extract64(s->cmdq.base, 0, 5); | ||
175 | + if (s->cmdq.log2size > SMMU_CMDQS) { | ||
176 | + s->cmdq.log2size = SMMU_CMDQS; | ||
177 | + } | ||
178 | + return MEMTX_OK; | ||
179 | + case A_CMDQ_BASE + 4: /* 64b */ | ||
180 | + s->cmdq.base = deposit64(s->cmdq.base, 32, 32, data); | ||
181 | + return MEMTX_OK; | ||
182 | + case A_CMDQ_PROD: | ||
183 | + s->cmdq.prod = data; | ||
184 | + smmuv3_cmdq_consume(s); | ||
185 | + return MEMTX_OK; | ||
186 | + case A_CMDQ_CONS: | ||
187 | + s->cmdq.cons = data; | ||
188 | + return MEMTX_OK; | ||
189 | + case A_EVENTQ_BASE: /* 64b */ | ||
190 | + s->eventq.base = deposit64(s->eventq.base, 0, 32, data); | ||
191 | + s->eventq.log2size = extract64(s->eventq.base, 0, 5); | ||
192 | + if (s->eventq.log2size > SMMU_EVENTQS) { | ||
193 | + s->eventq.log2size = SMMU_EVENTQS; | ||
194 | + } | ||
195 | + return MEMTX_OK; | ||
196 | + case A_EVENTQ_BASE + 4: | ||
197 | + s->eventq.base = deposit64(s->eventq.base, 32, 32, data); | ||
198 | + return MEMTX_OK; | ||
199 | + case A_EVENTQ_PROD: | ||
200 | + s->eventq.prod = data; | ||
201 | + return MEMTX_OK; | ||
202 | + case A_EVENTQ_CONS: | ||
203 | + s->eventq.cons = data; | ||
204 | + return MEMTX_OK; | ||
205 | + case A_EVENTQ_IRQ_CFG0: /* 64b */ | ||
206 | + s->eventq_irq_cfg0 = deposit64(s->eventq_irq_cfg0, 0, 32, data); | ||
207 | + return MEMTX_OK; | ||
208 | + case A_EVENTQ_IRQ_CFG0 + 4: | ||
209 | + s->eventq_irq_cfg0 = deposit64(s->eventq_irq_cfg0, 32, 32, data); | ||
210 | + return MEMTX_OK; | ||
211 | + case A_EVENTQ_IRQ_CFG1: | ||
212 | + s->eventq_irq_cfg1 = data; | ||
213 | + return MEMTX_OK; | ||
214 | + case A_EVENTQ_IRQ_CFG2: | ||
215 | + s->eventq_irq_cfg2 = data; | ||
216 | + return MEMTX_OK; | ||
217 | + default: | ||
218 | + qemu_log_mask(LOG_UNIMP, | ||
219 | + "%s Unexpected 32-bit access to 0x%"PRIx64" (WI)\n", | ||
220 | + __func__, offset); | ||
221 | + return MEMTX_OK; | ||
222 | + } | ||
223 | +} | ||
224 | + | ||
225 | static MemTxResult smmu_write_mmio(void *opaque, hwaddr offset, uint64_t data, | ||
226 | unsigned size, MemTxAttrs attrs) | ||
227 | { | ||
228 | - /* not yet implemented */ | ||
229 | - return MEMTX_ERROR; | ||
230 | + SMMUState *sys = opaque; | ||
231 | + SMMUv3State *s = ARM_SMMUV3(sys); | ||
232 | + MemTxResult r; | ||
233 | + | ||
234 | + /* CONSTRAINED UNPREDICTABLE choice to have page0/1 be exact aliases */ | ||
235 | + offset &= ~0x10000; | ||
236 | + | ||
237 | + switch (size) { | ||
238 | + case 8: | ||
239 | + r = smmu_writell(s, offset, data, attrs); | ||
240 | + break; | ||
241 | + case 4: | ||
242 | + r = smmu_writel(s, offset, data, attrs); | ||
243 | + break; | ||
244 | + default: | ||
245 | + r = MEMTX_ERROR; | ||
246 | + break; | ||
247 | + } | 55 | + } |
248 | + | 56 | + |
249 | + trace_smmuv3_write_mmio(offset, data, size, r); | 57 | if (!kvm_enabled()) { |
250 | + return r; | 58 | pmu_op_finish(&cpu->env); |
251 | } | 59 | } |
252 | 60 | diff --git a/target/arm/translate.c b/target/arm/translate.c | |
253 | static MemTxResult smmu_readll(SMMUv3State *s, hwaddr offset, | ||
254 | diff --git a/hw/arm/trace-events b/hw/arm/trace-events | ||
255 | index XXXXXXX..XXXXXXX 100644 | 61 | index XXXXXXX..XXXXXXX 100644 |
256 | --- a/hw/arm/trace-events | 62 | --- a/target/arm/translate.c |
257 | +++ b/hw/arm/trace-events | 63 | +++ b/target/arm/translate.c |
258 | @@ -XXX,XX +XXX,XX @@ smmuv3_cmdq_consume(uint32_t prod, uint32_t cons, uint8_t prod_wrap, uint8_t con | 64 | @@ -XXX,XX +XXX,XX @@ static void thumb_tr_translate_insn(DisasContextBase *dcbase, CPUState *cpu) |
259 | smmuv3_cmdq_opcode(const char *opcode) "<--- %s" | 65 | uint32_t insn; |
260 | smmuv3_cmdq_consume_out(uint32_t prod, uint32_t cons, uint8_t prod_wrap, uint8_t cons_wrap) "prod:%d, cons:%d, prod_wrap:%d, cons_wrap:%d " | 66 | bool is_16bit; |
261 | smmuv3_cmdq_consume_error(const char *cmd_name, uint8_t cmd_error) "Error on %s command execution: %d" | 67 | |
262 | +smmuv3_update(bool is_empty, uint32_t prod, uint32_t cons, uint8_t prod_wrap, uint8_t cons_wrap) "q empty:%d prod:%d cons:%d p.wrap:%d p.cons:%d" | 68 | + /* Misaligned thumb PC is architecturally impossible. */ |
263 | +smmuv3_update_check_cmd(int error) "cmdq not enabled or error :0x%x" | 69 | + assert((dc->base.pc_next & 1) == 0); |
264 | +smmuv3_write_mmio(uint64_t addr, uint64_t val, unsigned size, uint32_t r) "addr: 0x%"PRIx64" val:0x%"PRIx64" size: 0x%x(%d)" | 70 | + |
265 | +smmuv3_write_mmio_idr(uint64_t addr, uint64_t val) "write to RO/Unimpl reg 0x%lx val64:0x%lx" | 71 | if (arm_check_ss_active(dc) || arm_check_kernelpage(dc)) { |
266 | +smmuv3_write_mmio_evtq_cons_bef_clear(uint32_t prod, uint32_t cons, uint8_t prod_wrap, uint8_t cons_wrap) "Before clearing interrupt prod:0x%x cons:0x%x prod.w:%d cons.w:%d" | 72 | dc->base.pc_next = pc + 2; |
267 | +smmuv3_write_mmio_evtq_cons_after_clear(uint32_t prod, uint32_t cons, uint8_t prod_wrap, uint8_t cons_wrap) "after clearing interrupt prod:0x%x cons:0x%x prod.w:%d cons.w:%d" | 73 | return; |
268 | -- | 74 | -- |
269 | 2.17.0 | 75 | 2.25.1 |
270 | 76 | ||
271 | 77 | diff view generated by jsdifflib |
1 | From: Eric Auger <eric.auger@redhat.com> | 1 | From: Richard Henderson <richard.henderson@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | We set up the infrastructure to enumerate all the PCI devices | 3 | Both single-step and pc alignment faults have priority over |
4 | attached to the SMMU and create an associated IOMMU memory | 4 | breakpoint exceptions. |
5 | region and address space. | ||
6 | 5 | ||
7 | Those info are stored in SMMUDevice objects. The devices are | ||
8 | grouped according to the PCIBus they belong to. A hash table | ||
9 | indexed by the PCIBus pointer is used. Also an array indexed by | ||
10 | the bus number allows to find the list of SMMUDevices. | ||
11 | |||
12 | Signed-off-by: Eric Auger <eric.auger@redhat.com> | ||
13 | Signed-off-by: Prem Mallappa <prem.mallappa@broadcom.com> | ||
14 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 6 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
15 | Message-id: 1524665762-31355-3-git-send-email-eric.auger@redhat.com | 7 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> |
16 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 8 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
17 | --- | 9 | --- |
18 | include/hw/arm/smmu-common.h | 8 +++++ | 10 | target/arm/debug_helper.c | 23 +++++++++++++++++++++++ |
19 | hw/arm/smmu-common.c | 69 ++++++++++++++++++++++++++++++++++++ | 11 | 1 file changed, 23 insertions(+) |
20 | hw/arm/trace-events | 3 ++ | ||
21 | 3 files changed, 80 insertions(+) | ||
22 | 12 | ||
23 | diff --git a/include/hw/arm/smmu-common.h b/include/hw/arm/smmu-common.h | 13 | diff --git a/target/arm/debug_helper.c b/target/arm/debug_helper.c |
24 | index XXXXXXX..XXXXXXX 100644 | 14 | index XXXXXXX..XXXXXXX 100644 |
25 | --- a/include/hw/arm/smmu-common.h | 15 | --- a/target/arm/debug_helper.c |
26 | +++ b/include/hw/arm/smmu-common.h | 16 | +++ b/target/arm/debug_helper.c |
27 | @@ -XXX,XX +XXX,XX @@ typedef struct { | 17 | @@ -XXX,XX +XXX,XX @@ bool arm_debug_check_breakpoint(CPUState *cs) |
28 | #define ARM_SMMU_GET_CLASS(obj) \ | 18 | { |
29 | OBJECT_GET_CLASS(SMMUBaseClass, (obj), TYPE_ARM_SMMU) | 19 | ARMCPU *cpu = ARM_CPU(cs); |
30 | 20 | CPUARMState *env = &cpu->env; | |
31 | +/* Return the SMMUPciBus handle associated to a PCI bus number */ | 21 | + target_ulong pc; |
32 | +SMMUPciBus *smmu_find_smmu_pcibus(SMMUState *s, uint8_t bus_num); | 22 | int n; |
33 | + | 23 | |
34 | +/* Return the stream ID of an SMMU device */ | 24 | /* |
35 | +static inline uint16_t smmu_get_sid(SMMUDevice *sdev) | 25 | @@ -XXX,XX +XXX,XX @@ bool arm_debug_check_breakpoint(CPUState *cs) |
36 | +{ | 26 | return false; |
37 | + return PCI_BUILD_BDF(pci_bus_num(sdev->bus), sdev->devfn); | 27 | } |
38 | +} | 28 | |
39 | #endif /* HW_ARM_SMMU_COMMON */ | 29 | + /* |
40 | diff --git a/hw/arm/smmu-common.c b/hw/arm/smmu-common.c | 30 | + * Single-step exceptions have priority over breakpoint exceptions. |
41 | index XXXXXXX..XXXXXXX 100644 | 31 | + * If single-step state is active-pending, suppress the bp. |
42 | --- a/hw/arm/smmu-common.c | 32 | + */ |
43 | +++ b/hw/arm/smmu-common.c | 33 | + if (arm_singlestep_active(env) && !(env->pstate & PSTATE_SS)) { |
44 | @@ -XXX,XX +XXX,XX @@ | 34 | + return false; |
45 | #include "qemu/error-report.h" | ||
46 | #include "hw/arm/smmu-common.h" | ||
47 | |||
48 | +/** | ||
49 | + * The bus number is used for lookup when SID based invalidation occurs. | ||
50 | + * In that case we lazily populate the SMMUPciBus array from the bus hash | ||
51 | + * table. At the time the SMMUPciBus is created (smmu_find_add_as), the bus | ||
52 | + * numbers may not be always initialized yet. | ||
53 | + */ | ||
54 | +SMMUPciBus *smmu_find_smmu_pcibus(SMMUState *s, uint8_t bus_num) | ||
55 | +{ | ||
56 | + SMMUPciBus *smmu_pci_bus = s->smmu_pcibus_by_bus_num[bus_num]; | ||
57 | + | ||
58 | + if (!smmu_pci_bus) { | ||
59 | + GHashTableIter iter; | ||
60 | + | ||
61 | + g_hash_table_iter_init(&iter, s->smmu_pcibus_by_busptr); | ||
62 | + while (g_hash_table_iter_next(&iter, NULL, (void **)&smmu_pci_bus)) { | ||
63 | + if (pci_bus_num(smmu_pci_bus->bus) == bus_num) { | ||
64 | + s->smmu_pcibus_by_bus_num[bus_num] = smmu_pci_bus; | ||
65 | + return smmu_pci_bus; | ||
66 | + } | ||
67 | + } | ||
68 | + } | ||
69 | + return smmu_pci_bus; | ||
70 | +} | ||
71 | + | ||
72 | +static AddressSpace *smmu_find_add_as(PCIBus *bus, void *opaque, int devfn) | ||
73 | +{ | ||
74 | + SMMUState *s = opaque; | ||
75 | + SMMUPciBus *sbus = g_hash_table_lookup(s->smmu_pcibus_by_busptr, bus); | ||
76 | + SMMUDevice *sdev; | ||
77 | + | ||
78 | + if (!sbus) { | ||
79 | + sbus = g_malloc0(sizeof(SMMUPciBus) + | ||
80 | + sizeof(SMMUDevice *) * SMMU_PCI_DEVFN_MAX); | ||
81 | + sbus->bus = bus; | ||
82 | + g_hash_table_insert(s->smmu_pcibus_by_busptr, bus, sbus); | ||
83 | + } | 35 | + } |
84 | + | 36 | + |
85 | + sdev = sbus->pbdev[devfn]; | 37 | + /* |
86 | + if (!sdev) { | 38 | + * PC alignment faults have priority over breakpoint exceptions. |
87 | + char *name = g_strdup_printf("%s-%d-%d", | 39 | + */ |
88 | + s->mrtypename, | 40 | + pc = is_a64(env) ? env->pc : env->regs[15]; |
89 | + pci_bus_num(bus), devfn); | 41 | + if ((is_a64(env) || !env->thumb) && (pc & 3) != 0) { |
90 | + sdev = sbus->pbdev[devfn] = g_new0(SMMUDevice, 1); | 42 | + return false; |
91 | + | ||
92 | + sdev->smmu = s; | ||
93 | + sdev->bus = bus; | ||
94 | + sdev->devfn = devfn; | ||
95 | + | ||
96 | + memory_region_init_iommu(&sdev->iommu, sizeof(sdev->iommu), | ||
97 | + s->mrtypename, | ||
98 | + OBJECT(s), name, 1ULL << SMMU_MAX_VA_BITS); | ||
99 | + address_space_init(&sdev->as, | ||
100 | + MEMORY_REGION(&sdev->iommu), name); | ||
101 | + trace_smmu_add_mr(name); | ||
102 | + g_free(name); | ||
103 | + } | 43 | + } |
104 | + | 44 | + |
105 | + return &sdev->as; | 45 | + /* |
106 | +} | 46 | + * Instruction aborts have priority over breakpoint exceptions. |
47 | + * TODO: We would need to look up the page for PC and verify that | ||
48 | + * it is present and executable. | ||
49 | + */ | ||
107 | + | 50 | + |
108 | static void smmu_base_realize(DeviceState *dev, Error **errp) | 51 | for (n = 0; n < ARRAY_SIZE(env->cpu_breakpoint); n++) { |
109 | { | 52 | if (bp_wp_matches(cpu, n, false)) { |
110 | + SMMUState *s = ARM_SMMU(dev); | 53 | return true; |
111 | SMMUBaseClass *sbc = ARM_SMMU_GET_CLASS(dev); | ||
112 | Error *local_err = NULL; | ||
113 | |||
114 | @@ -XXX,XX +XXX,XX @@ static void smmu_base_realize(DeviceState *dev, Error **errp) | ||
115 | error_propagate(errp, local_err); | ||
116 | return; | ||
117 | } | ||
118 | + | ||
119 | + s->smmu_pcibus_by_busptr = g_hash_table_new(NULL, NULL); | ||
120 | + | ||
121 | + if (s->primary_bus) { | ||
122 | + pci_setup_iommu(s->primary_bus, smmu_find_add_as, s); | ||
123 | + } else { | ||
124 | + error_setg(errp, "SMMU is not attached to any PCI bus!"); | ||
125 | + } | ||
126 | } | ||
127 | |||
128 | static void smmu_base_reset(DeviceState *dev) | ||
129 | diff --git a/hw/arm/trace-events b/hw/arm/trace-events | ||
130 | index XXXXXXX..XXXXXXX 100644 | ||
131 | --- a/hw/arm/trace-events | ||
132 | +++ b/hw/arm/trace-events | ||
133 | @@ -XXX,XX +XXX,XX @@ | ||
134 | |||
135 | # hw/arm/virt-acpi-build.c | ||
136 | virt_acpi_setup(void) "No fw cfg or ACPI disabled. Bailing out." | ||
137 | + | ||
138 | +# hw/arm/smmu-common.c | ||
139 | +smmu_add_mr(const char *name) "%s" | ||
140 | \ No newline at end of file | ||
141 | -- | 54 | -- |
142 | 2.17.0 | 55 | 2.25.1 |
143 | 56 | ||
144 | 57 | diff view generated by jsdifflib |
1 | From: Prem Mallappa <prem.mallappa@broadcom.com> | 1 | From: Richard Henderson <richard.henderson@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | This patch implements a skeleton for the smmuv3 device. | ||
4 | Datatypes and register definitions are introduced. The MMIO | ||
5 | region, the interrupts and the queue are initialized. | ||
6 | |||
7 | Only the MMIO read operation is implemented here. | ||
8 | |||
9 | Signed-off-by: Prem Mallappa <prem.mallappa@broadcom.com> | ||
10 | Signed-off-by: Eric Auger <eric.auger@redhat.com> | ||
11 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 3 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
12 | Message-id: 1524665762-31355-5-git-send-email-eric.auger@redhat.com | 4 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> |
13 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 5 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
14 | --- | 6 | --- |
15 | hw/arm/Makefile.objs | 2 +- | 7 | tests/tcg/aarch64/pcalign-a64.c | 37 +++++++++++++++++++++++++ |
16 | hw/arm/smmuv3-internal.h | 142 +++++++++++++++ | 8 | tests/tcg/arm/pcalign-a32.c | 46 +++++++++++++++++++++++++++++++ |
17 | include/hw/arm/smmuv3.h | 87 ++++++++++ | 9 | tests/tcg/aarch64/Makefile.target | 4 +-- |
18 | hw/arm/smmuv3.c | 366 +++++++++++++++++++++++++++++++++++++++ | 10 | tests/tcg/arm/Makefile.target | 4 +++ |
19 | hw/arm/trace-events | 3 + | 11 | 4 files changed, 89 insertions(+), 2 deletions(-) |
20 | 5 files changed, 599 insertions(+), 1 deletion(-) | 12 | create mode 100644 tests/tcg/aarch64/pcalign-a64.c |
21 | create mode 100644 hw/arm/smmuv3-internal.h | 13 | create mode 100644 tests/tcg/arm/pcalign-a32.c |
22 | create mode 100644 include/hw/arm/smmuv3.h | ||
23 | create mode 100644 hw/arm/smmuv3.c | ||
24 | 14 | ||
25 | diff --git a/hw/arm/Makefile.objs b/hw/arm/Makefile.objs | 15 | diff --git a/tests/tcg/aarch64/pcalign-a64.c b/tests/tcg/aarch64/pcalign-a64.c |
26 | index XXXXXXX..XXXXXXX 100644 | ||
27 | --- a/hw/arm/Makefile.objs | ||
28 | +++ b/hw/arm/Makefile.objs | ||
29 | @@ -XXX,XX +XXX,XX @@ obj-$(CONFIG_MPS2) += mps2-tz.o | ||
30 | obj-$(CONFIG_MSF2) += msf2-soc.o msf2-som.o | ||
31 | obj-$(CONFIG_IOTKIT) += iotkit.o | ||
32 | obj-$(CONFIG_FSL_IMX7) += fsl-imx7.o mcimx7d-sabre.o | ||
33 | -obj-$(CONFIG_ARM_SMMUV3) += smmu-common.o | ||
34 | +obj-$(CONFIG_ARM_SMMUV3) += smmu-common.o smmuv3.o | ||
35 | diff --git a/hw/arm/smmuv3-internal.h b/hw/arm/smmuv3-internal.h | ||
36 | new file mode 100644 | 16 | new file mode 100644 |
37 | index XXXXXXX..XXXXXXX | 17 | index XXXXXXX..XXXXXXX |
38 | --- /dev/null | 18 | --- /dev/null |
39 | +++ b/hw/arm/smmuv3-internal.h | 19 | +++ b/tests/tcg/aarch64/pcalign-a64.c |
40 | @@ -XXX,XX +XXX,XX @@ | 20 | @@ -XXX,XX +XXX,XX @@ |
41 | +/* | 21 | +/* Test PC misalignment exception */ |
42 | + * ARM SMMUv3 support - Internal API | ||
43 | + * | ||
44 | + * Copyright (C) 2014-2016 Broadcom Corporation | ||
45 | + * Copyright (c) 2017 Red Hat, Inc. | ||
46 | + * Written by Prem Mallappa, Eric Auger | ||
47 | + * | ||
48 | + * This program is free software; you can redistribute it and/or modify | ||
49 | + * it under the terms of the GNU General Public License version 2 as | ||
50 | + * published by the Free Software Foundation. | ||
51 | + * | ||
52 | + * This program is distributed in the hope that it will be useful, | ||
53 | + * but WITHOUT ANY WARRANTY; without even the implied warranty of | ||
54 | + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | ||
55 | + * GNU General Public License for more details. | ||
56 | + * | ||
57 | + * You should have received a copy of the GNU General Public License along | ||
58 | + * with this program; if not, see <http://www.gnu.org/licenses/>. | ||
59 | + */ | ||
60 | + | 22 | + |
61 | +#ifndef HW_ARM_SMMU_V3_INTERNAL_H | 23 | +#include <assert.h> |
62 | +#define HW_ARM_SMMU_V3_INTERNAL_H | 24 | +#include <signal.h> |
25 | +#include <stdlib.h> | ||
26 | +#include <stdio.h> | ||
63 | + | 27 | + |
64 | +#include "hw/arm/smmu-common.h" | 28 | +static void *expected; |
65 | + | 29 | + |
66 | +/* MMIO Registers */ | 30 | +static void sigbus(int sig, siginfo_t *info, void *vuc) |
67 | + | ||
68 | +REG32(IDR0, 0x0) | ||
69 | + FIELD(IDR0, S1P, 1 , 1) | ||
70 | + FIELD(IDR0, TTF, 2 , 2) | ||
71 | + FIELD(IDR0, COHACC, 4 , 1) | ||
72 | + FIELD(IDR0, ASID16, 12, 1) | ||
73 | + FIELD(IDR0, TTENDIAN, 21, 2) | ||
74 | + FIELD(IDR0, STALL_MODEL, 24, 2) | ||
75 | + FIELD(IDR0, TERM_MODEL, 26, 1) | ||
76 | + FIELD(IDR0, STLEVEL, 27, 2) | ||
77 | + | ||
78 | +REG32(IDR1, 0x4) | ||
79 | + FIELD(IDR1, SIDSIZE, 0 , 6) | ||
80 | + FIELD(IDR1, EVENTQS, 16, 5) | ||
81 | + FIELD(IDR1, CMDQS, 21, 5) | ||
82 | + | ||
83 | +#define SMMU_IDR1_SIDSIZE 16 | ||
84 | +#define SMMU_CMDQS 19 | ||
85 | +#define SMMU_EVENTQS 19 | ||
86 | + | ||
87 | +REG32(IDR2, 0x8) | ||
88 | +REG32(IDR3, 0xc) | ||
89 | +REG32(IDR4, 0x10) | ||
90 | +REG32(IDR5, 0x14) | ||
91 | + FIELD(IDR5, OAS, 0, 3); | ||
92 | + FIELD(IDR5, GRAN4K, 4, 1); | ||
93 | + FIELD(IDR5, GRAN16K, 5, 1); | ||
94 | + FIELD(IDR5, GRAN64K, 6, 1); | ||
95 | + | ||
96 | +#define SMMU_IDR5_OAS 4 | ||
97 | + | ||
98 | +REG32(IIDR, 0x1c) | ||
99 | +REG32(CR0, 0x20) | ||
100 | + FIELD(CR0, SMMU_ENABLE, 0, 1) | ||
101 | + FIELD(CR0, EVENTQEN, 2, 1) | ||
102 | + FIELD(CR0, CMDQEN, 3, 1) | ||
103 | + | ||
104 | +REG32(CR0ACK, 0x24) | ||
105 | +REG32(CR1, 0x28) | ||
106 | +REG32(CR2, 0x2c) | ||
107 | +REG32(STATUSR, 0x40) | ||
108 | +REG32(IRQ_CTRL, 0x50) | ||
109 | + FIELD(IRQ_CTRL, GERROR_IRQEN, 0, 1) | ||
110 | + FIELD(IRQ_CTRL, PRI_IRQEN, 1, 1) | ||
111 | + FIELD(IRQ_CTRL, EVENTQ_IRQEN, 2, 1) | ||
112 | + | ||
113 | +REG32(IRQ_CTRL_ACK, 0x54) | ||
114 | +REG32(GERROR, 0x60) | ||
115 | + FIELD(GERROR, CMDQ_ERR, 0, 1) | ||
116 | + FIELD(GERROR, EVENTQ_ABT_ERR, 2, 1) | ||
117 | + FIELD(GERROR, PRIQ_ABT_ERR, 3, 1) | ||
118 | + FIELD(GERROR, MSI_CMDQ_ABT_ERR, 4, 1) | ||
119 | + FIELD(GERROR, MSI_EVENTQ_ABT_ERR, 5, 1) | ||
120 | + FIELD(GERROR, MSI_PRIQ_ABT_ERR, 6, 1) | ||
121 | + FIELD(GERROR, MSI_GERROR_ABT_ERR, 7, 1) | ||
122 | + FIELD(GERROR, MSI_SFM_ERR, 8, 1) | ||
123 | + | ||
124 | +REG32(GERRORN, 0x64) | ||
125 | + | ||
126 | +#define A_GERROR_IRQ_CFG0 0x68 /* 64b */ | ||
127 | +REG32(GERROR_IRQ_CFG1, 0x70) | ||
128 | +REG32(GERROR_IRQ_CFG2, 0x74) | ||
129 | + | ||
130 | +#define A_STRTAB_BASE 0x80 /* 64b */ | ||
131 | + | ||
132 | +#define SMMU_BASE_ADDR_MASK 0xffffffffffe0 | ||
133 | + | ||
134 | +REG32(STRTAB_BASE_CFG, 0x88) | ||
135 | + FIELD(STRTAB_BASE_CFG, FMT, 16, 2) | ||
136 | + FIELD(STRTAB_BASE_CFG, SPLIT, 6 , 5) | ||
137 | + FIELD(STRTAB_BASE_CFG, LOG2SIZE, 0 , 6) | ||
138 | + | ||
139 | +#define A_CMDQ_BASE 0x90 /* 64b */ | ||
140 | +REG32(CMDQ_PROD, 0x98) | ||
141 | +REG32(CMDQ_CONS, 0x9c) | ||
142 | + FIELD(CMDQ_CONS, ERR, 24, 7) | ||
143 | + | ||
144 | +#define A_EVENTQ_BASE 0xa0 /* 64b */ | ||
145 | +REG32(EVENTQ_PROD, 0xa8) | ||
146 | +REG32(EVENTQ_CONS, 0xac) | ||
147 | + | ||
148 | +#define A_EVENTQ_IRQ_CFG0 0xb0 /* 64b */ | ||
149 | +REG32(EVENTQ_IRQ_CFG1, 0xb8) | ||
150 | +REG32(EVENTQ_IRQ_CFG2, 0xbc) | ||
151 | + | ||
152 | +#define A_IDREGS 0xfd0 | ||
153 | + | ||
154 | +static inline int smmu_enabled(SMMUv3State *s) | ||
155 | +{ | 31 | +{ |
156 | + return FIELD_EX32(s->cr[0], CR0, SMMU_ENABLE); | 32 | + assert(info->si_code == BUS_ADRALN); |
33 | + assert(info->si_addr == expected); | ||
34 | + exit(EXIT_SUCCESS); | ||
157 | +} | 35 | +} |
158 | + | 36 | + |
159 | +/* Command Queue Entry */ | 37 | +int main() |
160 | +typedef struct Cmd { | 38 | +{ |
161 | + uint32_t word[4]; | 39 | + void *tmp; |
162 | +} Cmd; | ||
163 | + | 40 | + |
164 | +/* Event Queue Entry */ | 41 | + struct sigaction sa = { |
165 | +typedef struct Evt { | 42 | + .sa_sigaction = sigbus, |
166 | + uint32_t word[8]; | 43 | + .sa_flags = SA_SIGINFO |
167 | +} Evt; | 44 | + }; |
168 | + | 45 | + |
169 | +static inline uint32_t smmuv3_idreg(int regoffset) | 46 | + if (sigaction(SIGBUS, &sa, NULL) < 0) { |
170 | +{ | 47 | + perror("sigaction"); |
171 | + /* | 48 | + return EXIT_FAILURE; |
172 | + * Return the value of the Primecell/Corelink ID registers at the | 49 | + } |
173 | + * specified offset from the first ID register. | 50 | + |
174 | + * These value indicate an ARM implementation of MMU600 p1 | 51 | + asm volatile("adr %0, 1f + 1\n\t" |
175 | + */ | 52 | + "str %0, %1\n\t" |
176 | + static const uint8_t smmuv3_ids[] = { | 53 | + "br %0\n" |
177 | + 0x04, 0, 0, 0, 0x84, 0xB4, 0xF0, 0x10, 0x0D, 0xF0, 0x05, 0xB1 | 54 | + "1:" |
178 | + }; | 55 | + : "=&r"(tmp), "=m"(expected)); |
179 | + return smmuv3_ids[regoffset / 4]; | 56 | + abort(); |
180 | +} | 57 | +} |
181 | + | 58 | diff --git a/tests/tcg/arm/pcalign-a32.c b/tests/tcg/arm/pcalign-a32.c |
182 | +#endif | ||
183 | diff --git a/include/hw/arm/smmuv3.h b/include/hw/arm/smmuv3.h | ||
184 | new file mode 100644 | 59 | new file mode 100644 |
185 | index XXXXXXX..XXXXXXX | 60 | index XXXXXXX..XXXXXXX |
186 | --- /dev/null | 61 | --- /dev/null |
187 | +++ b/include/hw/arm/smmuv3.h | 62 | +++ b/tests/tcg/arm/pcalign-a32.c |
188 | @@ -XXX,XX +XXX,XX @@ | 63 | @@ -XXX,XX +XXX,XX @@ |
189 | +/* | 64 | +/* Test PC misalignment exception */ |
190 | + * Copyright (C) 2014-2016 Broadcom Corporation | ||
191 | + * Copyright (c) 2017 Red Hat, Inc. | ||
192 | + * Written by Prem Mallappa, Eric Auger | ||
193 | + * | ||
194 | + * This program is free software; you can redistribute it and/or modify | ||
195 | + * it under the terms of the GNU General Public License version 2 as | ||
196 | + * published by the Free Software Foundation. | ||
197 | + * | ||
198 | + * This program is distributed in the hope that it will be useful, | ||
199 | + * but WITHOUT ANY WARRANTY; without even the implied warranty of | ||
200 | + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | ||
201 | + * GNU General Public License for more details. | ||
202 | + * | ||
203 | + * You should have received a copy of the GNU General Public License along | ||
204 | + * with this program; if not, see <http://www.gnu.org/licenses/>. | ||
205 | + */ | ||
206 | + | 65 | + |
207 | +#ifndef HW_ARM_SMMUV3_H | 66 | +#ifdef __thumb__ |
208 | +#define HW_ARM_SMMUV3_H | 67 | +#error "This test must be compiled for ARM" |
68 | +#endif | ||
209 | + | 69 | + |
210 | +#include "hw/arm/smmu-common.h" | 70 | +#include <assert.h> |
211 | +#include "hw/registerfields.h" | 71 | +#include <signal.h> |
72 | +#include <stdlib.h> | ||
73 | +#include <stdio.h> | ||
212 | + | 74 | + |
213 | +#define TYPE_SMMUV3_IOMMU_MEMORY_REGION "smmuv3-iommu-memory-region" | 75 | +static void *expected; |
214 | + | 76 | + |
215 | +typedef struct SMMUQueue { | 77 | +static void sigbus(int sig, siginfo_t *info, void *vuc) |
216 | + uint64_t base; /* base register */ | ||
217 | + uint32_t prod; | ||
218 | + uint32_t cons; | ||
219 | + uint8_t entry_size; | ||
220 | + uint8_t log2size; | ||
221 | +} SMMUQueue; | ||
222 | + | ||
223 | +typedef struct SMMUv3State { | ||
224 | + SMMUState smmu_state; | ||
225 | + | ||
226 | + uint32_t features; | ||
227 | + uint8_t sid_size; | ||
228 | + uint8_t sid_split; | ||
229 | + | ||
230 | + uint32_t idr[6]; | ||
231 | + uint32_t iidr; | ||
232 | + uint32_t cr[3]; | ||
233 | + uint32_t cr0ack; | ||
234 | + uint32_t statusr; | ||
235 | + uint32_t irq_ctrl; | ||
236 | + uint32_t gerror; | ||
237 | + uint32_t gerrorn; | ||
238 | + uint64_t gerror_irq_cfg0; | ||
239 | + uint32_t gerror_irq_cfg1; | ||
240 | + uint32_t gerror_irq_cfg2; | ||
241 | + uint64_t strtab_base; | ||
242 | + uint32_t strtab_base_cfg; | ||
243 | + uint64_t eventq_irq_cfg0; | ||
244 | + uint32_t eventq_irq_cfg1; | ||
245 | + uint32_t eventq_irq_cfg2; | ||
246 | + | ||
247 | + SMMUQueue eventq, cmdq; | ||
248 | + | ||
249 | + qemu_irq irq[4]; | ||
250 | +} SMMUv3State; | ||
251 | + | ||
252 | +typedef enum { | ||
253 | + SMMU_IRQ_EVTQ, | ||
254 | + SMMU_IRQ_PRIQ, | ||
255 | + SMMU_IRQ_CMD_SYNC, | ||
256 | + SMMU_IRQ_GERROR, | ||
257 | +} SMMUIrq; | ||
258 | + | ||
259 | +typedef struct { | ||
260 | + /*< private >*/ | ||
261 | + SMMUBaseClass smmu_base_class; | ||
262 | + /*< public >*/ | ||
263 | + | ||
264 | + DeviceRealize parent_realize; | ||
265 | + DeviceReset parent_reset; | ||
266 | +} SMMUv3Class; | ||
267 | + | ||
268 | +#define TYPE_ARM_SMMUV3 "arm-smmuv3" | ||
269 | +#define ARM_SMMUV3(obj) OBJECT_CHECK(SMMUv3State, (obj), TYPE_ARM_SMMUV3) | ||
270 | +#define ARM_SMMUV3_CLASS(klass) \ | ||
271 | + OBJECT_CLASS_CHECK(SMMUv3Class, (klass), TYPE_ARM_SMMUV3) | ||
272 | +#define ARM_SMMUV3_GET_CLASS(obj) \ | ||
273 | + OBJECT_GET_CLASS(SMMUv3Class, (obj), TYPE_ARM_SMMUV3) | ||
274 | + | ||
275 | +#endif | ||
276 | diff --git a/hw/arm/smmuv3.c b/hw/arm/smmuv3.c | ||
277 | new file mode 100644 | ||
278 | index XXXXXXX..XXXXXXX | ||
279 | --- /dev/null | ||
280 | +++ b/hw/arm/smmuv3.c | ||
281 | @@ -XXX,XX +XXX,XX @@ | ||
282 | +/* | ||
283 | + * Copyright (C) 2014-2016 Broadcom Corporation | ||
284 | + * Copyright (c) 2017 Red Hat, Inc. | ||
285 | + * Written by Prem Mallappa, Eric Auger | ||
286 | + * | ||
287 | + * This program is free software; you can redistribute it and/or modify | ||
288 | + * it under the terms of the GNU General Public License version 2 as | ||
289 | + * published by the Free Software Foundation. | ||
290 | + * | ||
291 | + * This program is distributed in the hope that it will be useful, | ||
292 | + * but WITHOUT ANY WARRANTY; without even the implied warranty of | ||
293 | + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | ||
294 | + * GNU General Public License for more details. | ||
295 | + * | ||
296 | + * You should have received a copy of the GNU General Public License along | ||
297 | + * with this program; if not, see <http://www.gnu.org/licenses/>. | ||
298 | + */ | ||
299 | + | ||
300 | +#include "qemu/osdep.h" | ||
301 | +#include "hw/boards.h" | ||
302 | +#include "sysemu/sysemu.h" | ||
303 | +#include "hw/sysbus.h" | ||
304 | +#include "hw/qdev-core.h" | ||
305 | +#include "hw/pci/pci.h" | ||
306 | +#include "exec/address-spaces.h" | ||
307 | +#include "trace.h" | ||
308 | +#include "qemu/log.h" | ||
309 | +#include "qemu/error-report.h" | ||
310 | +#include "qapi/error.h" | ||
311 | + | ||
312 | +#include "hw/arm/smmuv3.h" | ||
313 | +#include "smmuv3-internal.h" | ||
314 | + | ||
315 | +static void smmuv3_init_regs(SMMUv3State *s) | ||
316 | +{ | 78 | +{ |
317 | + /** | 79 | + assert(info->si_code == BUS_ADRALN); |
318 | + * IDR0: stage1 only, AArch64 only, coherent access, 16b ASID, | 80 | + assert(info->si_addr == expected); |
319 | + * multi-level stream table | 81 | + exit(EXIT_SUCCESS); |
320 | + */ | ||
321 | + s->idr[0] = FIELD_DP32(s->idr[0], IDR0, S1P, 1); /* stage 1 supported */ | ||
322 | + s->idr[0] = FIELD_DP32(s->idr[0], IDR0, TTF, 2); /* AArch64 PTW only */ | ||
323 | + s->idr[0] = FIELD_DP32(s->idr[0], IDR0, COHACC, 1); /* IO coherent */ | ||
324 | + s->idr[0] = FIELD_DP32(s->idr[0], IDR0, ASID16, 1); /* 16-bit ASID */ | ||
325 | + s->idr[0] = FIELD_DP32(s->idr[0], IDR0, TTENDIAN, 2); /* little endian */ | ||
326 | + s->idr[0] = FIELD_DP32(s->idr[0], IDR0, STALL_MODEL, 1); /* No stall */ | ||
327 | + /* terminated transaction will always be aborted/error returned */ | ||
328 | + s->idr[0] = FIELD_DP32(s->idr[0], IDR0, TERM_MODEL, 1); | ||
329 | + /* 2-level stream table supported */ | ||
330 | + s->idr[0] = FIELD_DP32(s->idr[0], IDR0, STLEVEL, 1); | ||
331 | + | ||
332 | + s->idr[1] = FIELD_DP32(s->idr[1], IDR1, SIDSIZE, SMMU_IDR1_SIDSIZE); | ||
333 | + s->idr[1] = FIELD_DP32(s->idr[1], IDR1, EVENTQS, SMMU_EVENTQS); | ||
334 | + s->idr[1] = FIELD_DP32(s->idr[1], IDR1, CMDQS, SMMU_CMDQS); | ||
335 | + | ||
336 | + /* 4K and 64K granule support */ | ||
337 | + s->idr[5] = FIELD_DP32(s->idr[5], IDR5, GRAN4K, 1); | ||
338 | + s->idr[5] = FIELD_DP32(s->idr[5], IDR5, GRAN64K, 1); | ||
339 | + s->idr[5] = FIELD_DP32(s->idr[5], IDR5, OAS, SMMU_IDR5_OAS); /* 44 bits */ | ||
340 | + | ||
341 | + s->cmdq.base = deposit64(s->cmdq.base, 0, 5, SMMU_CMDQS); | ||
342 | + s->cmdq.prod = 0; | ||
343 | + s->cmdq.cons = 0; | ||
344 | + s->cmdq.entry_size = sizeof(struct Cmd); | ||
345 | + s->eventq.base = deposit64(s->eventq.base, 0, 5, SMMU_EVENTQS); | ||
346 | + s->eventq.prod = 0; | ||
347 | + s->eventq.cons = 0; | ||
348 | + s->eventq.entry_size = sizeof(struct Evt); | ||
349 | + | ||
350 | + s->features = 0; | ||
351 | + s->sid_split = 0; | ||
352 | +} | 82 | +} |
353 | + | 83 | + |
354 | +static MemTxResult smmu_write_mmio(void *opaque, hwaddr offset, uint64_t data, | 84 | +int main() |
355 | + unsigned size, MemTxAttrs attrs) | ||
356 | +{ | 85 | +{ |
357 | + /* not yet implemented */ | 86 | + void *tmp; |
358 | + return MEMTX_ERROR; | ||
359 | +} | ||
360 | + | 87 | + |
361 | +static MemTxResult smmu_readll(SMMUv3State *s, hwaddr offset, | 88 | + struct sigaction sa = { |
362 | + uint64_t *data, MemTxAttrs attrs) | 89 | + .sa_sigaction = sigbus, |
363 | +{ | 90 | + .sa_flags = SA_SIGINFO |
364 | + switch (offset) { | 91 | + }; |
365 | + case A_GERROR_IRQ_CFG0: | ||
366 | + *data = s->gerror_irq_cfg0; | ||
367 | + return MEMTX_OK; | ||
368 | + case A_STRTAB_BASE: | ||
369 | + *data = s->strtab_base; | ||
370 | + return MEMTX_OK; | ||
371 | + case A_CMDQ_BASE: | ||
372 | + *data = s->cmdq.base; | ||
373 | + return MEMTX_OK; | ||
374 | + case A_EVENTQ_BASE: | ||
375 | + *data = s->eventq.base; | ||
376 | + return MEMTX_OK; | ||
377 | + default: | ||
378 | + *data = 0; | ||
379 | + qemu_log_mask(LOG_UNIMP, | ||
380 | + "%s Unexpected 64-bit access to 0x%"PRIx64" (RAZ)\n", | ||
381 | + __func__, offset); | ||
382 | + return MEMTX_OK; | ||
383 | + } | ||
384 | +} | ||
385 | + | 92 | + |
386 | +static MemTxResult smmu_readl(SMMUv3State *s, hwaddr offset, | 93 | + if (sigaction(SIGBUS, &sa, NULL) < 0) { |
387 | + uint64_t *data, MemTxAttrs attrs) | 94 | + perror("sigaction"); |
388 | +{ | 95 | + return EXIT_FAILURE; |
389 | + switch (offset) { | ||
390 | + case A_IDREGS ... A_IDREGS + 0x1f: | ||
391 | + *data = smmuv3_idreg(offset - A_IDREGS); | ||
392 | + return MEMTX_OK; | ||
393 | + case A_IDR0 ... A_IDR5: | ||
394 | + *data = s->idr[(offset - A_IDR0) / 4]; | ||
395 | + return MEMTX_OK; | ||
396 | + case A_IIDR: | ||
397 | + *data = s->iidr; | ||
398 | + return MEMTX_OK; | ||
399 | + case A_CR0: | ||
400 | + *data = s->cr[0]; | ||
401 | + return MEMTX_OK; | ||
402 | + case A_CR0ACK: | ||
403 | + *data = s->cr0ack; | ||
404 | + return MEMTX_OK; | ||
405 | + case A_CR1: | ||
406 | + *data = s->cr[1]; | ||
407 | + return MEMTX_OK; | ||
408 | + case A_CR2: | ||
409 | + *data = s->cr[2]; | ||
410 | + return MEMTX_OK; | ||
411 | + case A_STATUSR: | ||
412 | + *data = s->statusr; | ||
413 | + return MEMTX_OK; | ||
414 | + case A_IRQ_CTRL: | ||
415 | + case A_IRQ_CTRL_ACK: | ||
416 | + *data = s->irq_ctrl; | ||
417 | + return MEMTX_OK; | ||
418 | + case A_GERROR: | ||
419 | + *data = s->gerror; | ||
420 | + return MEMTX_OK; | ||
421 | + case A_GERRORN: | ||
422 | + *data = s->gerrorn; | ||
423 | + return MEMTX_OK; | ||
424 | + case A_GERROR_IRQ_CFG0: /* 64b */ | ||
425 | + *data = extract64(s->gerror_irq_cfg0, 0, 32); | ||
426 | + return MEMTX_OK; | ||
427 | + case A_GERROR_IRQ_CFG0 + 4: | ||
428 | + *data = extract64(s->gerror_irq_cfg0, 32, 32); | ||
429 | + return MEMTX_OK; | ||
430 | + case A_GERROR_IRQ_CFG1: | ||
431 | + *data = s->gerror_irq_cfg1; | ||
432 | + return MEMTX_OK; | ||
433 | + case A_GERROR_IRQ_CFG2: | ||
434 | + *data = s->gerror_irq_cfg2; | ||
435 | + return MEMTX_OK; | ||
436 | + case A_STRTAB_BASE: /* 64b */ | ||
437 | + *data = extract64(s->strtab_base, 0, 32); | ||
438 | + return MEMTX_OK; | ||
439 | + case A_STRTAB_BASE + 4: /* 64b */ | ||
440 | + *data = extract64(s->strtab_base, 32, 32); | ||
441 | + return MEMTX_OK; | ||
442 | + case A_STRTAB_BASE_CFG: | ||
443 | + *data = s->strtab_base_cfg; | ||
444 | + return MEMTX_OK; | ||
445 | + case A_CMDQ_BASE: /* 64b */ | ||
446 | + *data = extract64(s->cmdq.base, 0, 32); | ||
447 | + return MEMTX_OK; | ||
448 | + case A_CMDQ_BASE + 4: | ||
449 | + *data = extract64(s->cmdq.base, 32, 32); | ||
450 | + return MEMTX_OK; | ||
451 | + case A_CMDQ_PROD: | ||
452 | + *data = s->cmdq.prod; | ||
453 | + return MEMTX_OK; | ||
454 | + case A_CMDQ_CONS: | ||
455 | + *data = s->cmdq.cons; | ||
456 | + return MEMTX_OK; | ||
457 | + case A_EVENTQ_BASE: /* 64b */ | ||
458 | + *data = extract64(s->eventq.base, 0, 32); | ||
459 | + return MEMTX_OK; | ||
460 | + case A_EVENTQ_BASE + 4: /* 64b */ | ||
461 | + *data = extract64(s->eventq.base, 32, 32); | ||
462 | + return MEMTX_OK; | ||
463 | + case A_EVENTQ_PROD: | ||
464 | + *data = s->eventq.prod; | ||
465 | + return MEMTX_OK; | ||
466 | + case A_EVENTQ_CONS: | ||
467 | + *data = s->eventq.cons; | ||
468 | + return MEMTX_OK; | ||
469 | + default: | ||
470 | + *data = 0; | ||
471 | + qemu_log_mask(LOG_UNIMP, | ||
472 | + "%s unhandled 32-bit access at 0x%"PRIx64" (RAZ)\n", | ||
473 | + __func__, offset); | ||
474 | + return MEMTX_OK; | ||
475 | + } | ||
476 | +} | ||
477 | + | ||
478 | +static MemTxResult smmu_read_mmio(void *opaque, hwaddr offset, uint64_t *data, | ||
479 | + unsigned size, MemTxAttrs attrs) | ||
480 | +{ | ||
481 | + SMMUState *sys = opaque; | ||
482 | + SMMUv3State *s = ARM_SMMUV3(sys); | ||
483 | + MemTxResult r; | ||
484 | + | ||
485 | + /* CONSTRAINED UNPREDICTABLE choice to have page0/1 be exact aliases */ | ||
486 | + offset &= ~0x10000; | ||
487 | + | ||
488 | + switch (size) { | ||
489 | + case 8: | ||
490 | + r = smmu_readll(s, offset, data, attrs); | ||
491 | + break; | ||
492 | + case 4: | ||
493 | + r = smmu_readl(s, offset, data, attrs); | ||
494 | + break; | ||
495 | + default: | ||
496 | + r = MEMTX_ERROR; | ||
497 | + break; | ||
498 | + } | 96 | + } |
499 | + | 97 | + |
500 | + trace_smmuv3_read_mmio(offset, *data, size, r); | 98 | + asm volatile("adr %0, 1f + 2\n\t" |
501 | + return r; | 99 | + "str %0, %1\n\t" |
100 | + "bx %0\n" | ||
101 | + "1:" | ||
102 | + : "=&r"(tmp), "=m"(expected)); | ||
103 | + | ||
104 | + /* | ||
105 | + * From v8, it is CONSTRAINED UNPREDICTABLE whether BXWritePC aligns | ||
106 | + * the address or not. If so, we can legitimately fall through. | ||
107 | + */ | ||
108 | + return EXIT_SUCCESS; | ||
502 | +} | 109 | +} |
110 | diff --git a/tests/tcg/aarch64/Makefile.target b/tests/tcg/aarch64/Makefile.target | ||
111 | index XXXXXXX..XXXXXXX 100644 | ||
112 | --- a/tests/tcg/aarch64/Makefile.target | ||
113 | +++ b/tests/tcg/aarch64/Makefile.target | ||
114 | @@ -XXX,XX +XXX,XX @@ VPATH += $(ARM_SRC) | ||
115 | AARCH64_SRC=$(SRC_PATH)/tests/tcg/aarch64 | ||
116 | VPATH += $(AARCH64_SRC) | ||
117 | |||
118 | -# Float-convert Tests | ||
119 | -AARCH64_TESTS=fcvt | ||
120 | +# Base architecture tests | ||
121 | +AARCH64_TESTS=fcvt pcalign-a64 | ||
122 | |||
123 | fcvt: LDFLAGS+=-lm | ||
124 | |||
125 | diff --git a/tests/tcg/arm/Makefile.target b/tests/tcg/arm/Makefile.target | ||
126 | index XXXXXXX..XXXXXXX 100644 | ||
127 | --- a/tests/tcg/arm/Makefile.target | ||
128 | +++ b/tests/tcg/arm/Makefile.target | ||
129 | @@ -XXX,XX +XXX,XX @@ run-fcvt: fcvt | ||
130 | $(call run-test,fcvt,$(QEMU) $<,"$< on $(TARGET_NAME)") | ||
131 | $(call diff-out,fcvt,$(ARM_SRC)/fcvt.ref) | ||
132 | |||
133 | +# PC alignment test | ||
134 | +ARM_TESTS += pcalign-a32 | ||
135 | +pcalign-a32: CFLAGS+=-marm | ||
503 | + | 136 | + |
504 | +static const MemoryRegionOps smmu_mem_ops = { | 137 | ifeq ($(CONFIG_ARM_COMPATIBLE_SEMIHOSTING),y) |
505 | + .read_with_attrs = smmu_read_mmio, | 138 | |
506 | + .write_with_attrs = smmu_write_mmio, | 139 | # Semihosting smoke test for linux-user |
507 | + .endianness = DEVICE_LITTLE_ENDIAN, | ||
508 | + .valid = { | ||
509 | + .min_access_size = 4, | ||
510 | + .max_access_size = 8, | ||
511 | + }, | ||
512 | + .impl = { | ||
513 | + .min_access_size = 4, | ||
514 | + .max_access_size = 8, | ||
515 | + }, | ||
516 | +}; | ||
517 | + | ||
518 | +static void smmu_init_irq(SMMUv3State *s, SysBusDevice *dev) | ||
519 | +{ | ||
520 | + int i; | ||
521 | + | ||
522 | + for (i = 0; i < ARRAY_SIZE(s->irq); i++) { | ||
523 | + sysbus_init_irq(dev, &s->irq[i]); | ||
524 | + } | ||
525 | +} | ||
526 | + | ||
527 | +static void smmu_reset(DeviceState *dev) | ||
528 | +{ | ||
529 | + SMMUv3State *s = ARM_SMMUV3(dev); | ||
530 | + SMMUv3Class *c = ARM_SMMUV3_GET_CLASS(s); | ||
531 | + | ||
532 | + c->parent_reset(dev); | ||
533 | + | ||
534 | + smmuv3_init_regs(s); | ||
535 | +} | ||
536 | + | ||
537 | +static void smmu_realize(DeviceState *d, Error **errp) | ||
538 | +{ | ||
539 | + SMMUState *sys = ARM_SMMU(d); | ||
540 | + SMMUv3State *s = ARM_SMMUV3(sys); | ||
541 | + SMMUv3Class *c = ARM_SMMUV3_GET_CLASS(s); | ||
542 | + SysBusDevice *dev = SYS_BUS_DEVICE(d); | ||
543 | + Error *local_err = NULL; | ||
544 | + | ||
545 | + c->parent_realize(d, &local_err); | ||
546 | + if (local_err) { | ||
547 | + error_propagate(errp, local_err); | ||
548 | + return; | ||
549 | + } | ||
550 | + | ||
551 | + memory_region_init_io(&sys->iomem, OBJECT(s), | ||
552 | + &smmu_mem_ops, sys, TYPE_ARM_SMMUV3, 0x20000); | ||
553 | + | ||
554 | + sys->mrtypename = TYPE_SMMUV3_IOMMU_MEMORY_REGION; | ||
555 | + | ||
556 | + sysbus_init_mmio(dev, &sys->iomem); | ||
557 | + | ||
558 | + smmu_init_irq(s, dev); | ||
559 | +} | ||
560 | + | ||
561 | +static const VMStateDescription vmstate_smmuv3_queue = { | ||
562 | + .name = "smmuv3_queue", | ||
563 | + .version_id = 1, | ||
564 | + .minimum_version_id = 1, | ||
565 | + .fields = (VMStateField[]) { | ||
566 | + VMSTATE_UINT64(base, SMMUQueue), | ||
567 | + VMSTATE_UINT32(prod, SMMUQueue), | ||
568 | + VMSTATE_UINT32(cons, SMMUQueue), | ||
569 | + VMSTATE_UINT8(log2size, SMMUQueue), | ||
570 | + }, | ||
571 | +}; | ||
572 | + | ||
573 | +static const VMStateDescription vmstate_smmuv3 = { | ||
574 | + .name = "smmuv3", | ||
575 | + .version_id = 1, | ||
576 | + .minimum_version_id = 1, | ||
577 | + .fields = (VMStateField[]) { | ||
578 | + VMSTATE_UINT32(features, SMMUv3State), | ||
579 | + VMSTATE_UINT8(sid_size, SMMUv3State), | ||
580 | + VMSTATE_UINT8(sid_split, SMMUv3State), | ||
581 | + | ||
582 | + VMSTATE_UINT32_ARRAY(cr, SMMUv3State, 3), | ||
583 | + VMSTATE_UINT32(cr0ack, SMMUv3State), | ||
584 | + VMSTATE_UINT32(statusr, SMMUv3State), | ||
585 | + VMSTATE_UINT32(irq_ctrl, SMMUv3State), | ||
586 | + VMSTATE_UINT32(gerror, SMMUv3State), | ||
587 | + VMSTATE_UINT32(gerrorn, SMMUv3State), | ||
588 | + VMSTATE_UINT64(gerror_irq_cfg0, SMMUv3State), | ||
589 | + VMSTATE_UINT32(gerror_irq_cfg1, SMMUv3State), | ||
590 | + VMSTATE_UINT32(gerror_irq_cfg2, SMMUv3State), | ||
591 | + VMSTATE_UINT64(strtab_base, SMMUv3State), | ||
592 | + VMSTATE_UINT32(strtab_base_cfg, SMMUv3State), | ||
593 | + VMSTATE_UINT64(eventq_irq_cfg0, SMMUv3State), | ||
594 | + VMSTATE_UINT32(eventq_irq_cfg1, SMMUv3State), | ||
595 | + VMSTATE_UINT32(eventq_irq_cfg2, SMMUv3State), | ||
596 | + | ||
597 | + VMSTATE_STRUCT(cmdq, SMMUv3State, 0, vmstate_smmuv3_queue, SMMUQueue), | ||
598 | + VMSTATE_STRUCT(eventq, SMMUv3State, 0, vmstate_smmuv3_queue, SMMUQueue), | ||
599 | + | ||
600 | + VMSTATE_END_OF_LIST(), | ||
601 | + }, | ||
602 | +}; | ||
603 | + | ||
604 | +static void smmuv3_instance_init(Object *obj) | ||
605 | +{ | ||
606 | + /* Nothing much to do here as of now */ | ||
607 | +} | ||
608 | + | ||
609 | +static void smmuv3_class_init(ObjectClass *klass, void *data) | ||
610 | +{ | ||
611 | + DeviceClass *dc = DEVICE_CLASS(klass); | ||
612 | + SMMUv3Class *c = ARM_SMMUV3_CLASS(klass); | ||
613 | + | ||
614 | + dc->vmsd = &vmstate_smmuv3; | ||
615 | + device_class_set_parent_reset(dc, smmu_reset, &c->parent_reset); | ||
616 | + c->parent_realize = dc->realize; | ||
617 | + dc->realize = smmu_realize; | ||
618 | +} | ||
619 | + | ||
620 | +static void smmuv3_iommu_memory_region_class_init(ObjectClass *klass, | ||
621 | + void *data) | ||
622 | +{ | ||
623 | +} | ||
624 | + | ||
625 | +static const TypeInfo smmuv3_type_info = { | ||
626 | + .name = TYPE_ARM_SMMUV3, | ||
627 | + .parent = TYPE_ARM_SMMU, | ||
628 | + .instance_size = sizeof(SMMUv3State), | ||
629 | + .instance_init = smmuv3_instance_init, | ||
630 | + .class_size = sizeof(SMMUv3Class), | ||
631 | + .class_init = smmuv3_class_init, | ||
632 | +}; | ||
633 | + | ||
634 | +static const TypeInfo smmuv3_iommu_memory_region_info = { | ||
635 | + .parent = TYPE_IOMMU_MEMORY_REGION, | ||
636 | + .name = TYPE_SMMUV3_IOMMU_MEMORY_REGION, | ||
637 | + .class_init = smmuv3_iommu_memory_region_class_init, | ||
638 | +}; | ||
639 | + | ||
640 | +static void smmuv3_register_types(void) | ||
641 | +{ | ||
642 | + type_register(&smmuv3_type_info); | ||
643 | + type_register(&smmuv3_iommu_memory_region_info); | ||
644 | +} | ||
645 | + | ||
646 | +type_init(smmuv3_register_types) | ||
647 | + | ||
648 | diff --git a/hw/arm/trace-events b/hw/arm/trace-events | ||
649 | index XXXXXXX..XXXXXXX 100644 | ||
650 | --- a/hw/arm/trace-events | ||
651 | +++ b/hw/arm/trace-events | ||
652 | @@ -XXX,XX +XXX,XX @@ smmu_ptw_invalid_pte(int stage, int level, uint64_t baseaddr, uint64_t pteaddr, | ||
653 | smmu_ptw_page_pte(int stage, int level, uint64_t iova, uint64_t baseaddr, uint64_t pteaddr, uint64_t pte, uint64_t address) "stage=%d level=%d iova=0x%"PRIx64" base@=0x%"PRIx64" pte@=0x%"PRIx64" pte=0x%"PRIx64" page address = 0x%"PRIx64 | ||
654 | smmu_ptw_block_pte(int stage, int level, uint64_t baseaddr, uint64_t pteaddr, uint64_t pte, uint64_t iova, uint64_t gpa, int bsize_mb) "stage=%d level=%d base@=0x%"PRIx64" pte@=0x%"PRIx64" pte=0x%"PRIx64" iova=0x%"PRIx64" block address = 0x%"PRIx64" block size = %d MiB" | ||
655 | smmu_get_pte(uint64_t baseaddr, int index, uint64_t pteaddr, uint64_t pte) "baseaddr=0x%"PRIx64" index=0x%x, pteaddr=0x%"PRIx64", pte=0x%"PRIx64 | ||
656 | + | ||
657 | +#hw/arm/smmuv3.c | ||
658 | +smmuv3_read_mmio(uint64_t addr, uint64_t val, unsigned size, uint32_t r) "addr: 0x%"PRIx64" val:0x%"PRIx64" size: 0x%x(%d)" | ||
659 | -- | 140 | -- |
660 | 2.17.0 | 141 | 2.25.1 |
661 | 142 | ||
662 | 143 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | In the SSE decode function gen_sse(), we combine a byte | ||
2 | 'b' and a value 'b1' which can be [0..3], and switch on them: | ||
3 | b |= (b1 << 8); | ||
4 | switch (b) { | ||
5 | ... | ||
6 | default: | ||
7 | unknown_op: | ||
8 | gen_unknown_opcode(env, s); | ||
9 | return; | ||
10 | } | ||
1 | 11 | ||
12 | In three cases inside this switch, we were then also checking for | ||
13 | "if (b1 >= 2) { goto unknown_op; }". | ||
14 | However, this can never happen, because the 'case' values in each place | ||
15 | are 0x0nn or 0x1nn and the switch will have directed the b1 == (2, 3) | ||
16 | cases to the default already. | ||
17 | |||
18 | This check was added in commit c045af25a52e9 in 2010; the added code | ||
19 | was unnecessary then as well, and was apparently intended only to | ||
20 | ensure that we never accidentally ended up indexing off the end | ||
21 | of an sse_op_table with only 2 entries as a result of future bugs | ||
22 | in the decode logic. | ||
23 | |||
24 | Change the checks to assert() instead, and make sure they're always | ||
25 | immediately before the array access they are protecting. | ||
26 | |||
27 | Fixes: Coverity CID 1460207 | ||
28 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
29 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
30 | --- | ||
31 | target/i386/tcg/translate.c | 12 +++--------- | ||
32 | 1 file changed, 3 insertions(+), 9 deletions(-) | ||
33 | |||
34 | diff --git a/target/i386/tcg/translate.c b/target/i386/tcg/translate.c | ||
35 | index XXXXXXX..XXXXXXX 100644 | ||
36 | --- a/target/i386/tcg/translate.c | ||
37 | +++ b/target/i386/tcg/translate.c | ||
38 | @@ -XXX,XX +XXX,XX @@ static void gen_sse(CPUX86State *env, DisasContext *s, int b, | ||
39 | case 0x171: /* shift xmm, im */ | ||
40 | case 0x172: | ||
41 | case 0x173: | ||
42 | - if (b1 >= 2) { | ||
43 | - goto unknown_op; | ||
44 | - } | ||
45 | val = x86_ldub_code(env, s); | ||
46 | if (is_xmm) { | ||
47 | tcg_gen_movi_tl(s->T0, val); | ||
48 | @@ -XXX,XX +XXX,XX @@ static void gen_sse(CPUX86State *env, DisasContext *s, int b, | ||
49 | offsetof(CPUX86State, mmx_t0.MMX_L(1))); | ||
50 | op1_offset = offsetof(CPUX86State,mmx_t0); | ||
51 | } | ||
52 | + assert(b1 < 2); | ||
53 | sse_fn_epp = sse_op_table2[((b - 1) & 3) * 8 + | ||
54 | (((modrm >> 3)) & 7)][b1]; | ||
55 | if (!sse_fn_epp) { | ||
56 | @@ -XXX,XX +XXX,XX @@ static void gen_sse(CPUX86State *env, DisasContext *s, int b, | ||
57 | rm = modrm & 7; | ||
58 | reg = ((modrm >> 3) & 7) | REX_R(s); | ||
59 | mod = (modrm >> 6) & 3; | ||
60 | - if (b1 >= 2) { | ||
61 | - goto unknown_op; | ||
62 | - } | ||
63 | |||
64 | + assert(b1 < 2); | ||
65 | sse_fn_epp = sse_op_table6[b].op[b1]; | ||
66 | if (!sse_fn_epp) { | ||
67 | goto unknown_op; | ||
68 | @@ -XXX,XX +XXX,XX @@ static void gen_sse(CPUX86State *env, DisasContext *s, int b, | ||
69 | rm = modrm & 7; | ||
70 | reg = ((modrm >> 3) & 7) | REX_R(s); | ||
71 | mod = (modrm >> 6) & 3; | ||
72 | - if (b1 >= 2) { | ||
73 | - goto unknown_op; | ||
74 | - } | ||
75 | |||
76 | + assert(b1 < 2); | ||
77 | sse_fn_eppi = sse_op_table7[b].op[b1]; | ||
78 | if (!sse_fn_eppi) { | ||
79 | goto unknown_op; | ||
80 | -- | ||
81 | 2.25.1 | ||
82 | |||
83 | diff view generated by jsdifflib |
1 | Convert the smc91c111 device away from using the old_mmio field of | 1 | The qemu-common.h header is not supposed to be included from any |
---|---|---|---|
2 | MemoryRegionOps. This device is used by several Arm board models. | 2 | other header files, only from .c files (as documented in a comment at |
3 | the start of it). | ||
4 | |||
5 | include/hw/i386/x86.h and include/hw/i386/microvm.h break this rule. | ||
6 | In fact, the include is not required at all, so we can just drop it | ||
7 | from both files. | ||
3 | 8 | ||
4 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
5 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | 10 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> |
6 | Message-id: 20180427173611.10281-3-peter.maydell@linaro.org | 11 | Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org> |
12 | Message-id: 20211129200510.1233037-2-peter.maydell@linaro.org | ||
7 | --- | 13 | --- |
8 | hw/net/smc91c111.c | 54 +++++++++++++++++++++------------------------- | 14 | include/hw/i386/microvm.h | 1 - |
9 | 1 file changed, 25 insertions(+), 29 deletions(-) | 15 | include/hw/i386/x86.h | 1 - |
16 | 2 files changed, 2 deletions(-) | ||
10 | 17 | ||
11 | diff --git a/hw/net/smc91c111.c b/hw/net/smc91c111.c | 18 | diff --git a/include/hw/i386/microvm.h b/include/hw/i386/microvm.h |
12 | index XXXXXXX..XXXXXXX 100644 | 19 | index XXXXXXX..XXXXXXX 100644 |
13 | --- a/hw/net/smc91c111.c | 20 | --- a/include/hw/i386/microvm.h |
14 | +++ b/hw/net/smc91c111.c | 21 | +++ b/include/hw/i386/microvm.h |
15 | @@ -XXX,XX +XXX,XX @@ static uint32_t smc91c111_readb(void *opaque, hwaddr offset) | 22 | @@ -XXX,XX +XXX,XX @@ |
16 | return 0; | 23 | #ifndef HW_I386_MICROVM_H |
17 | } | 24 | #define HW_I386_MICROVM_H |
18 | 25 | ||
19 | -static void smc91c111_writew(void *opaque, hwaddr offset, | 26 | -#include "qemu-common.h" |
20 | - uint32_t value) | 27 | #include "exec/hwaddr.h" |
21 | +static uint64_t smc91c111_readfn(void *opaque, hwaddr addr, unsigned size) | 28 | #include "qemu/notify.h" |
22 | { | 29 | |
23 | - smc91c111_writeb(opaque, offset, value & 0xff); | 30 | diff --git a/include/hw/i386/x86.h b/include/hw/i386/x86.h |
24 | - smc91c111_writeb(opaque, offset + 1, value >> 8); | 31 | index XXXXXXX..XXXXXXX 100644 |
25 | + int i; | 32 | --- a/include/hw/i386/x86.h |
26 | + uint32_t val = 0; | 33 | +++ b/include/hw/i386/x86.h |
27 | + | 34 | @@ -XXX,XX +XXX,XX @@ |
28 | + for (i = 0; i < size; i++) { | 35 | #ifndef HW_I386_X86_H |
29 | + val |= smc91c111_readb(opaque, addr + i) << (i * 8); | 36 | #define HW_I386_X86_H |
30 | + } | 37 | |
31 | + return val; | 38 | -#include "qemu-common.h" |
32 | } | 39 | #include "exec/hwaddr.h" |
33 | 40 | #include "qemu/notify.h" | |
34 | -static void smc91c111_writel(void *opaque, hwaddr offset, | ||
35 | - uint32_t value) | ||
36 | +static void smc91c111_writefn(void *opaque, hwaddr addr, | ||
37 | + uint64_t value, unsigned size) | ||
38 | { | ||
39 | + int i = 0; | ||
40 | + | ||
41 | /* 32-bit writes to offset 0xc only actually write to the bank select | ||
42 | - register (offset 0xe) */ | ||
43 | - if (offset != 0xc) | ||
44 | - smc91c111_writew(opaque, offset, value & 0xffff); | ||
45 | - smc91c111_writew(opaque, offset + 2, value >> 16); | ||
46 | -} | ||
47 | + * register (offset 0xe), so skip the first two bytes we would write. | ||
48 | + */ | ||
49 | + if (addr == 0xc && size == 4) { | ||
50 | + i += 2; | ||
51 | + } | ||
52 | |||
53 | -static uint32_t smc91c111_readw(void *opaque, hwaddr offset) | ||
54 | -{ | ||
55 | - uint32_t val; | ||
56 | - val = smc91c111_readb(opaque, offset); | ||
57 | - val |= smc91c111_readb(opaque, offset + 1) << 8; | ||
58 | - return val; | ||
59 | -} | ||
60 | - | ||
61 | -static uint32_t smc91c111_readl(void *opaque, hwaddr offset) | ||
62 | -{ | ||
63 | - uint32_t val; | ||
64 | - val = smc91c111_readw(opaque, offset); | ||
65 | - val |= smc91c111_readw(opaque, offset + 2) << 16; | ||
66 | - return val; | ||
67 | + for (; i < size; i++) { | ||
68 | + smc91c111_writeb(opaque, addr + i, | ||
69 | + extract32(value, i * 8, 8)); | ||
70 | + } | ||
71 | } | ||
72 | |||
73 | static int smc91c111_can_receive_nc(NetClientState *nc) | ||
74 | @@ -XXX,XX +XXX,XX @@ static const MemoryRegionOps smc91c111_mem_ops = { | ||
75 | /* The special case for 32 bit writes to 0xc means we can't just | ||
76 | * set .impl.min/max_access_size to 1, unfortunately | ||
77 | */ | ||
78 | - .old_mmio = { | ||
79 | - .read = { smc91c111_readb, smc91c111_readw, smc91c111_readl, }, | ||
80 | - .write = { smc91c111_writeb, smc91c111_writew, smc91c111_writel, }, | ||
81 | - }, | ||
82 | + .read = smc91c111_readfn, | ||
83 | + .write = smc91c111_writefn, | ||
84 | + .valid.min_access_size = 1, | ||
85 | + .valid.max_access_size = 4, | ||
86 | .endianness = DEVICE_NATIVE_ENDIAN, | ||
87 | }; | ||
88 | 41 | ||
89 | -- | 42 | -- |
90 | 2.17.0 | 43 | 2.25.1 |
91 | 44 | ||
92 | 45 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | The qemu-common.h header is not supposed to be included from any | ||
2 | other header files, only from .c files (as documented in a comment at | ||
3 | the start of it). | ||
1 | 4 | ||
5 | Move the include to linux-user/hexagon/cpu_loop.c, which needs it for | ||
6 | the declaration of cpu_exec_step_atomic(). | ||
7 | |||
8 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
9 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
10 | Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org> | ||
11 | Reviewed-by: Taylor Simpson <tsimpson@quicinc.com> | ||
12 | Message-id: 20211129200510.1233037-3-peter.maydell@linaro.org | ||
13 | --- | ||
14 | target/hexagon/cpu.h | 1 - | ||
15 | linux-user/hexagon/cpu_loop.c | 1 + | ||
16 | 2 files changed, 1 insertion(+), 1 deletion(-) | ||
17 | |||
18 | diff --git a/target/hexagon/cpu.h b/target/hexagon/cpu.h | ||
19 | index XXXXXXX..XXXXXXX 100644 | ||
20 | --- a/target/hexagon/cpu.h | ||
21 | +++ b/target/hexagon/cpu.h | ||
22 | @@ -XXX,XX +XXX,XX @@ typedef struct CPUHexagonState CPUHexagonState; | ||
23 | |||
24 | #include "fpu/softfloat-types.h" | ||
25 | |||
26 | -#include "qemu-common.h" | ||
27 | #include "exec/cpu-defs.h" | ||
28 | #include "hex_regs.h" | ||
29 | #include "mmvec/mmvec.h" | ||
30 | diff --git a/linux-user/hexagon/cpu_loop.c b/linux-user/hexagon/cpu_loop.c | ||
31 | index XXXXXXX..XXXXXXX 100644 | ||
32 | --- a/linux-user/hexagon/cpu_loop.c | ||
33 | +++ b/linux-user/hexagon/cpu_loop.c | ||
34 | @@ -XXX,XX +XXX,XX @@ | ||
35 | */ | ||
36 | |||
37 | #include "qemu/osdep.h" | ||
38 | +#include "qemu-common.h" | ||
39 | #include "qemu.h" | ||
40 | #include "user-internals.h" | ||
41 | #include "cpu_loop-common.h" | ||
42 | -- | ||
43 | 2.25.1 | ||
44 | |||
45 | diff view generated by jsdifflib |
1 | Convert the tusb6010 device away from using the old_mmio field | 1 | The qemu-common.h header is not supposed to be included from any |
---|---|---|---|
2 | of MemoryRegionOps. This device is used only in the n800 and n810 | 2 | other header files, only from .c files (as documented in a comment at |
3 | boards. | 3 | the start of it). |
4 | |||
5 | Nothing actually relies on target/rx/cpu.h including it, so we can | ||
6 | just drop the include. | ||
4 | 7 | ||
5 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 8 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
6 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | 9 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> |
7 | Message-id: 20180427173611.10281-2-peter.maydell@linaro.org | 10 | Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org> |
11 | Reviewed-by: Taylor Simpson <tsimpson@quicinc.com> | ||
12 | Reviewed-by: Yoshinori Sato <ysato@users.sourceforge.jp> | ||
13 | Message-id: 20211129200510.1233037-4-peter.maydell@linaro.org | ||
8 | --- | 14 | --- |
9 | hw/usb/tusb6010.c | 40 ++++++++++++++++++++++++++++++++++++---- | 15 | target/rx/cpu.h | 1 - |
10 | 1 file changed, 36 insertions(+), 4 deletions(-) | 16 | 1 file changed, 1 deletion(-) |
11 | 17 | ||
12 | diff --git a/hw/usb/tusb6010.c b/hw/usb/tusb6010.c | 18 | diff --git a/target/rx/cpu.h b/target/rx/cpu.h |
13 | index XXXXXXX..XXXXXXX 100644 | 19 | index XXXXXXX..XXXXXXX 100644 |
14 | --- a/hw/usb/tusb6010.c | 20 | --- a/target/rx/cpu.h |
15 | +++ b/hw/usb/tusb6010.c | 21 | +++ b/target/rx/cpu.h |
16 | @@ -XXX,XX +XXX,XX @@ static void tusb_async_writew(void *opaque, hwaddr addr, | 22 | @@ -XXX,XX +XXX,XX @@ |
17 | } | 23 | #define RX_CPU_H |
18 | } | 24 | |
19 | 25 | #include "qemu/bitops.h" | |
20 | +static uint64_t tusb_async_readfn(void *opaque, hwaddr addr, unsigned size) | 26 | -#include "qemu-common.h" |
21 | +{ | 27 | #include "hw/registerfields.h" |
22 | + switch (size) { | 28 | #include "cpu-qom.h" |
23 | + case 1: | ||
24 | + return tusb_async_readb(opaque, addr); | ||
25 | + case 2: | ||
26 | + return tusb_async_readh(opaque, addr); | ||
27 | + case 4: | ||
28 | + return tusb_async_readw(opaque, addr); | ||
29 | + default: | ||
30 | + g_assert_not_reached(); | ||
31 | + } | ||
32 | +} | ||
33 | + | ||
34 | +static void tusb_async_writefn(void *opaque, hwaddr addr, | ||
35 | + uint64_t value, unsigned size) | ||
36 | +{ | ||
37 | + switch (size) { | ||
38 | + case 1: | ||
39 | + tusb_async_writeb(opaque, addr, value); | ||
40 | + break; | ||
41 | + case 2: | ||
42 | + tusb_async_writeh(opaque, addr, value); | ||
43 | + break; | ||
44 | + case 4: | ||
45 | + tusb_async_writew(opaque, addr, value); | ||
46 | + break; | ||
47 | + default: | ||
48 | + g_assert_not_reached(); | ||
49 | + } | ||
50 | +} | ||
51 | + | ||
52 | static const MemoryRegionOps tusb_async_ops = { | ||
53 | - .old_mmio = { | ||
54 | - .read = { tusb_async_readb, tusb_async_readh, tusb_async_readw, }, | ||
55 | - .write = { tusb_async_writeb, tusb_async_writeh, tusb_async_writew, }, | ||
56 | - }, | ||
57 | + .read = tusb_async_readfn, | ||
58 | + .write = tusb_async_writefn, | ||
59 | + .valid.min_access_size = 1, | ||
60 | + .valid.max_access_size = 4, | ||
61 | .endianness = DEVICE_NATIVE_ENDIAN, | ||
62 | }; | ||
63 | 29 | ||
64 | -- | 30 | -- |
65 | 2.17.0 | 31 | 2.25.1 |
66 | 32 | ||
67 | 33 | diff view generated by jsdifflib |
1 | From: Igor Mammedov <imammedo@redhat.com> | 1 | A lot of C files in hw/arm include qemu-common.h when they don't |
---|---|---|---|
2 | need anything from it. Drop the include lines. | ||
2 | 3 | ||
3 | Even though nothing is currently broken (since all boards | 4 | omap1.c, pxa2xx.c and strongarm.c retain the include because they |
4 | use first_cpu as boot cpu), make sure that boot_info is set | 5 | use it for the prototype of qemu_get_timedate(). |
5 | on all CPUs. | ||
6 | If some board would like support heterogenuos setup (i.e. | ||
7 | init boot_info on subset of CPUs) in future, it should add | ||
8 | a reasonable API to do it, instead of starting assigning | ||
9 | boot_info from some CPU and till the end of present CPUs | ||
10 | list. | ||
11 | 6 | ||
12 | Ref: | ||
13 | "Message-ID: <CAFEAcA_NMWuA8WSs3cNeY6xX1kerO_uAcN_3=fK02BEhHJW86g@mail.gmail.com>" | ||
14 | |||
15 | Signed-off-by: Igor Mammedov <imammedo@redhat.com> | ||
16 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
17 | Message-id: 1525176522-200354-5-git-send-email-imammedo@redhat.com | ||
18 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 7 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
8 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
9 | Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org> | ||
10 | Reviewed-by: Taylor Simpson <tsimpson@quicinc.com> | ||
11 | Reviewed-by: Yoshinori Sato <ysato@users.sourceforge.jp> | ||
12 | Message-id: 20211129200510.1233037-5-peter.maydell@linaro.org | ||
19 | --- | 13 | --- |
20 | hw/arm/boot.c | 2 +- | 14 | hw/arm/boot.c | 1 - |
21 | 1 file changed, 1 insertion(+), 1 deletion(-) | 15 | hw/arm/digic_boards.c | 1 - |
16 | hw/arm/highbank.c | 1 - | ||
17 | hw/arm/npcm7xx_boards.c | 1 - | ||
18 | hw/arm/sbsa-ref.c | 1 - | ||
19 | hw/arm/stm32f405_soc.c | 1 - | ||
20 | hw/arm/vexpress.c | 1 - | ||
21 | hw/arm/virt.c | 1 - | ||
22 | 8 files changed, 8 deletions(-) | ||
22 | 23 | ||
23 | diff --git a/hw/arm/boot.c b/hw/arm/boot.c | 24 | diff --git a/hw/arm/boot.c b/hw/arm/boot.c |
24 | index XXXXXXX..XXXXXXX 100644 | 25 | index XXXXXXX..XXXXXXX 100644 |
25 | --- a/hw/arm/boot.c | 26 | --- a/hw/arm/boot.c |
26 | +++ b/hw/arm/boot.c | 27 | +++ b/hw/arm/boot.c |
27 | @@ -XXX,XX +XXX,XX @@ static void arm_load_kernel_notify(Notifier *notifier, void *data) | 28 | @@ -XXX,XX +XXX,XX @@ |
28 | } | 29 | */ |
29 | info->is_linux = is_linux; | 30 | |
30 | 31 | #include "qemu/osdep.h" | |
31 | - for (cs = CPU(cpu); cs; cs = CPU_NEXT(cs)) { | 32 | -#include "qemu-common.h" |
32 | + for (cs = first_cpu; cs; cs = CPU_NEXT(cs)) { | 33 | #include "qemu/datadir.h" |
33 | ARM_CPU(cs)->env.boot_info = info; | 34 | #include "qemu/error-report.h" |
34 | } | 35 | #include "qapi/error.h" |
35 | } | 36 | diff --git a/hw/arm/digic_boards.c b/hw/arm/digic_boards.c |
37 | index XXXXXXX..XXXXXXX 100644 | ||
38 | --- a/hw/arm/digic_boards.c | ||
39 | +++ b/hw/arm/digic_boards.c | ||
40 | @@ -XXX,XX +XXX,XX @@ | ||
41 | |||
42 | #include "qemu/osdep.h" | ||
43 | #include "qapi/error.h" | ||
44 | -#include "qemu-common.h" | ||
45 | #include "qemu/datadir.h" | ||
46 | #include "hw/boards.h" | ||
47 | #include "qemu/error-report.h" | ||
48 | diff --git a/hw/arm/highbank.c b/hw/arm/highbank.c | ||
49 | index XXXXXXX..XXXXXXX 100644 | ||
50 | --- a/hw/arm/highbank.c | ||
51 | +++ b/hw/arm/highbank.c | ||
52 | @@ -XXX,XX +XXX,XX @@ | ||
53 | */ | ||
54 | |||
55 | #include "qemu/osdep.h" | ||
56 | -#include "qemu-common.h" | ||
57 | #include "qemu/datadir.h" | ||
58 | #include "qapi/error.h" | ||
59 | #include "hw/sysbus.h" | ||
60 | diff --git a/hw/arm/npcm7xx_boards.c b/hw/arm/npcm7xx_boards.c | ||
61 | index XXXXXXX..XXXXXXX 100644 | ||
62 | --- a/hw/arm/npcm7xx_boards.c | ||
63 | +++ b/hw/arm/npcm7xx_boards.c | ||
64 | @@ -XXX,XX +XXX,XX @@ | ||
65 | #include "hw/qdev-core.h" | ||
66 | #include "hw/qdev-properties.h" | ||
67 | #include "qapi/error.h" | ||
68 | -#include "qemu-common.h" | ||
69 | #include "qemu/datadir.h" | ||
70 | #include "qemu/units.h" | ||
71 | #include "sysemu/blockdev.h" | ||
72 | diff --git a/hw/arm/sbsa-ref.c b/hw/arm/sbsa-ref.c | ||
73 | index XXXXXXX..XXXXXXX 100644 | ||
74 | --- a/hw/arm/sbsa-ref.c | ||
75 | +++ b/hw/arm/sbsa-ref.c | ||
76 | @@ -XXX,XX +XXX,XX @@ | ||
77 | */ | ||
78 | |||
79 | #include "qemu/osdep.h" | ||
80 | -#include "qemu-common.h" | ||
81 | #include "qemu/datadir.h" | ||
82 | #include "qapi/error.h" | ||
83 | #include "qemu/error-report.h" | ||
84 | diff --git a/hw/arm/stm32f405_soc.c b/hw/arm/stm32f405_soc.c | ||
85 | index XXXXXXX..XXXXXXX 100644 | ||
86 | --- a/hw/arm/stm32f405_soc.c | ||
87 | +++ b/hw/arm/stm32f405_soc.c | ||
88 | @@ -XXX,XX +XXX,XX @@ | ||
89 | |||
90 | #include "qemu/osdep.h" | ||
91 | #include "qapi/error.h" | ||
92 | -#include "qemu-common.h" | ||
93 | #include "exec/address-spaces.h" | ||
94 | #include "sysemu/sysemu.h" | ||
95 | #include "hw/arm/stm32f405_soc.h" | ||
96 | diff --git a/hw/arm/vexpress.c b/hw/arm/vexpress.c | ||
97 | index XXXXXXX..XXXXXXX 100644 | ||
98 | --- a/hw/arm/vexpress.c | ||
99 | +++ b/hw/arm/vexpress.c | ||
100 | @@ -XXX,XX +XXX,XX @@ | ||
101 | |||
102 | #include "qemu/osdep.h" | ||
103 | #include "qapi/error.h" | ||
104 | -#include "qemu-common.h" | ||
105 | #include "qemu/datadir.h" | ||
106 | #include "cpu.h" | ||
107 | #include "hw/sysbus.h" | ||
108 | diff --git a/hw/arm/virt.c b/hw/arm/virt.c | ||
109 | index XXXXXXX..XXXXXXX 100644 | ||
110 | --- a/hw/arm/virt.c | ||
111 | +++ b/hw/arm/virt.c | ||
112 | @@ -XXX,XX +XXX,XX @@ | ||
113 | */ | ||
114 | |||
115 | #include "qemu/osdep.h" | ||
116 | -#include "qemu-common.h" | ||
117 | #include "qemu/datadir.h" | ||
118 | #include "qemu/units.h" | ||
119 | #include "qemu/option.h" | ||
36 | -- | 120 | -- |
37 | 2.17.0 | 121 | 2.25.1 |
38 | 122 | ||
39 | 123 | diff view generated by jsdifflib |
1 | From: Mathew Maidment <mathew1800@gmail.com> | 1 | The calculation of the length of TLB range invalidate operations |
---|---|---|---|
2 | in tlbi_aa64_range_get_length() is incorrect in two ways: | ||
3 | * the NUM field is 5 bits, but we read only 4 bits | ||
4 | * we miscalculate the page_shift value, because of an | ||
5 | off-by-one error: | ||
6 | TG 0b00 is invalid | ||
7 | TG 0b01 is 4K granule size == 4096 == 2^12 | ||
8 | TG 0b10 is 16K granule size == 16384 == 2^14 | ||
9 | TG 0b11 is 64K granule size == 65536 == 2^16 | ||
10 | so page_shift should be (TG - 1) * 2 + 12 | ||
2 | 11 | ||
3 | The duplication of id_tlbtr_reginfo was unintentionally added within | 12 | Thanks to the bug report submitter Cha HyunSoo for identifying |
4 | 3281af8114c6b8ead02f08b58e3c36895c1ea047 which should have been | 13 | both these errors. |
5 | id_mpuir_reginfo. | ||
6 | 14 | ||
7 | The effect was that for OMAP and StrongARM CPUs we would | 15 | Fixes: 84940ed82552d3c ("target/arm: Add support for FEAT_TLBIRANGE") |
8 | incorrectly UNDEF writes to MPUIR rather than NOPing them. | 16 | Resolves: https://gitlab.com/qemu-project/qemu/-/issues/734 |
9 | |||
10 | Signed-off-by: Mathew Maidment <mathew1800@gmail.com> | ||
11 | Message-id: 20180501184933.37609-2-mathew1800@gmail.com | ||
12 | [PMM: tweak commit message] | ||
13 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
14 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 17 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
18 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
19 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | ||
20 | Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org> | ||
21 | Message-id: 20211130173257.1274194-1-peter.maydell@linaro.org | ||
15 | --- | 22 | --- |
16 | target/arm/helper.c | 2 +- | 23 | target/arm/helper.c | 6 +++--- |
17 | 1 file changed, 1 insertion(+), 1 deletion(-) | 24 | 1 file changed, 3 insertions(+), 3 deletions(-) |
18 | 25 | ||
19 | diff --git a/target/arm/helper.c b/target/arm/helper.c | 26 | diff --git a/target/arm/helper.c b/target/arm/helper.c |
20 | index XXXXXXX..XXXXXXX 100644 | 27 | index XXXXXXX..XXXXXXX 100644 |
21 | --- a/target/arm/helper.c | 28 | --- a/target/arm/helper.c |
22 | +++ b/target/arm/helper.c | 29 | +++ b/target/arm/helper.c |
23 | @@ -XXX,XX +XXX,XX @@ void register_cp_regs_for_features(ARMCPU *cpu) | 30 | @@ -XXX,XX +XXX,XX @@ static uint64_t tlbi_aa64_range_get_length(CPUARMState *env, |
24 | for (r = id_cp_reginfo; r->type != ARM_CP_SENTINEL; r++) { | 31 | uint64_t exponent; |
25 | r->access = PL1_RW; | 32 | uint64_t length; |
26 | } | 33 | |
27 | - id_tlbtr_reginfo.access = PL1_RW; | 34 | - num = extract64(value, 39, 4); |
28 | + id_mpuir_reginfo.access = PL1_RW; | 35 | + num = extract64(value, 39, 5); |
29 | id_tlbtr_reginfo.access = PL1_RW; | 36 | scale = extract64(value, 44, 2); |
30 | } | 37 | page_size_granule = extract64(value, 46, 2); |
31 | if (arm_feature(env, ARM_FEATURE_V8)) { | 38 | |
39 | - page_shift = page_size_granule * 2 + 12; | ||
40 | - | ||
41 | if (page_size_granule == 0) { | ||
42 | qemu_log_mask(LOG_GUEST_ERROR, "Invalid page size granule %d\n", | ||
43 | page_size_granule); | ||
44 | return 0; | ||
45 | } | ||
46 | |||
47 | + page_shift = (page_size_granule - 1) * 2 + 12; | ||
48 | + | ||
49 | exponent = (5 * scale) + 1; | ||
50 | length = (num + 1) << (exponent + page_shift); | ||
51 | |||
32 | -- | 52 | -- |
33 | 2.17.0 | 53 | 2.25.1 |
34 | 54 | ||
35 | 55 | diff view generated by jsdifflib |
1 | From: Eric Auger <eric.auger@redhat.com> | 1 | From: Patrick Venture <venture@google.com> |
---|---|---|---|
2 | 2 | ||
3 | At the moment, the SMMUv3 does not support notification on | 3 | The rx_active boolean change to true should always trigger a try_read |
4 | TLB invalidation. So let's log an error as soon as such notifier | 4 | call that flushes the queue. |
5 | gets enabled. | ||
6 | 5 | ||
7 | Signed-off-by: Eric Auger <eric.auger@redhat.com> | 6 | Signed-off-by: Patrick Venture <venture@google.com> |
8 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 7 | Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org> |
9 | Message-id: 1524665762-31355-11-git-send-email-eric.auger@redhat.com | 8 | Message-id: 20211203221002.1719306-1-venture@google.com |
10 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
11 | --- | 10 | --- |
12 | hw/arm/smmuv3.c | 11 +++++++++++ | 11 | hw/net/npcm7xx_emc.c | 18 ++++++++---------- |
13 | 1 file changed, 11 insertions(+) | 12 | 1 file changed, 8 insertions(+), 10 deletions(-) |
14 | 13 | ||
15 | diff --git a/hw/arm/smmuv3.c b/hw/arm/smmuv3.c | 14 | diff --git a/hw/net/npcm7xx_emc.c b/hw/net/npcm7xx_emc.c |
16 | index XXXXXXX..XXXXXXX 100644 | 15 | index XXXXXXX..XXXXXXX 100644 |
17 | --- a/hw/arm/smmuv3.c | 16 | --- a/hw/net/npcm7xx_emc.c |
18 | +++ b/hw/arm/smmuv3.c | 17 | +++ b/hw/net/npcm7xx_emc.c |
19 | @@ -XXX,XX +XXX,XX @@ static void smmuv3_class_init(ObjectClass *klass, void *data) | 18 | @@ -XXX,XX +XXX,XX @@ static void emc_halt_rx(NPCM7xxEMCState *emc, uint32_t mista_flag) |
20 | dc->realize = smmu_realize; | 19 | emc_set_mista(emc, mista_flag); |
21 | } | 20 | } |
22 | 21 | ||
23 | +static void smmuv3_notify_flag_changed(IOMMUMemoryRegion *iommu, | 22 | +static void emc_enable_rx_and_flush(NPCM7xxEMCState *emc) |
24 | + IOMMUNotifierFlag old, | ||
25 | + IOMMUNotifierFlag new) | ||
26 | +{ | 23 | +{ |
27 | + if (old == IOMMU_NOTIFIER_NONE) { | 24 | + emc->rx_active = true; |
28 | + warn_report("SMMUV3 does not support vhost/vfio integration yet: " | 25 | + qemu_flush_queued_packets(qemu_get_queue(emc->nic)); |
29 | + "devices of those types will not function properly"); | ||
30 | + } | ||
31 | +} | 26 | +} |
32 | + | 27 | + |
33 | static void smmuv3_iommu_memory_region_class_init(ObjectClass *klass, | 28 | static void emc_set_next_tx_descriptor(NPCM7xxEMCState *emc, |
34 | void *data) | 29 | const NPCM7xxEMCTxDesc *tx_desc, |
30 | uint32_t desc_addr) | ||
31 | @@ -XXX,XX +XXX,XX @@ static ssize_t emc_receive(NetClientState *nc, const uint8_t *buf, size_t len1) | ||
32 | return len; | ||
33 | } | ||
34 | |||
35 | -static void emc_try_receive_next_packet(NPCM7xxEMCState *emc) | ||
36 | -{ | ||
37 | - if (emc_can_receive(qemu_get_queue(emc->nic))) { | ||
38 | - qemu_flush_queued_packets(qemu_get_queue(emc->nic)); | ||
39 | - } | ||
40 | -} | ||
41 | - | ||
42 | static uint64_t npcm7xx_emc_read(void *opaque, hwaddr offset, unsigned size) | ||
35 | { | 43 | { |
36 | IOMMUMemoryRegionClass *imrc = IOMMU_MEMORY_REGION_CLASS(klass); | 44 | NPCM7xxEMCState *emc = opaque; |
37 | 45 | @@ -XXX,XX +XXX,XX @@ static void npcm7xx_emc_write(void *opaque, hwaddr offset, | |
38 | imrc->translate = smmuv3_translate; | 46 | emc->regs[REG_MGSTA] |= REG_MGSTA_RXHA; |
39 | + imrc->notify_flag_changed = smmuv3_notify_flag_changed; | 47 | } |
40 | } | 48 | if (value & REG_MCMDR_RXON) { |
41 | 49 | - emc->rx_active = true; | |
42 | static const TypeInfo smmuv3_type_info = { | 50 | + emc_enable_rx_and_flush(emc); |
51 | } else { | ||
52 | emc_halt_rx(emc, 0); | ||
53 | } | ||
54 | @@ -XXX,XX +XXX,XX @@ static void npcm7xx_emc_write(void *opaque, hwaddr offset, | ||
55 | break; | ||
56 | case REG_RSDR: | ||
57 | if (emc->regs[REG_MCMDR] & REG_MCMDR_RXON) { | ||
58 | - emc->rx_active = true; | ||
59 | - emc_try_receive_next_packet(emc); | ||
60 | + emc_enable_rx_and_flush(emc); | ||
61 | } | ||
62 | break; | ||
63 | case REG_MIIDA: | ||
43 | -- | 64 | -- |
44 | 2.17.0 | 65 | 2.25.1 |
45 | 66 | ||
46 | 67 | diff view generated by jsdifflib |
1 | From: Prem Mallappa <prem.mallappa@broadcom.com> | 1 | From: Jean-Philippe Brucker <jean-philippe@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | This patch builds the smmuv3 node in the ACPI IORT table. | 3 | When a virtio-iommu is instantiated, describe it using the ACPI VIOT |
4 | table. | ||
4 | 5 | ||
5 | The RID space of the root complex, which spans 0x0-0x10000 | 6 | Acked-by: Igor Mammedov <imammedo@redhat.com> |
6 | maps to streamid space 0x0-0x10000 in smmuv3, which in turn | 7 | Reviewed-by: Eric Auger <eric.auger@redhat.com> |
7 | maps to deviceid space 0x0-0x10000 in the ITS group. | 8 | Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org> |
8 | 9 | Message-id: 20211210170415.583179-2-jean-philippe@linaro.org | |
9 | The guest must feature the IOMMU probe deferral series | ||
10 | (https://lkml.org/lkml/2017/4/10/214) which fixes streamid | ||
11 | multiple lookup. This bug is not related to the SMMU emulation. | ||
12 | |||
13 | Signed-off-by: Prem Mallappa <prem.mallappa@broadcom.com> | ||
14 | Signed-off-by: Eric Auger <eric.auger@redhat.com> | ||
15 | Reviewed-by: Shannon Zhao <zhaoshenglong@huawei.com> | ||
16 | Message-id: 1524665762-31355-14-git-send-email-eric.auger@redhat.com | ||
17 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 10 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
18 | --- | 11 | --- |
19 | include/hw/acpi/acpi-defs.h | 15 ++++++++++ | 12 | hw/arm/virt-acpi-build.c | 7 +++++++ |
20 | hw/arm/virt-acpi-build.c | 55 ++++++++++++++++++++++++++++++++----- | 13 | hw/arm/Kconfig | 1 + |
21 | 2 files changed, 63 insertions(+), 7 deletions(-) | 14 | 2 files changed, 8 insertions(+) |
22 | 15 | ||
23 | diff --git a/include/hw/acpi/acpi-defs.h b/include/hw/acpi/acpi-defs.h | ||
24 | index XXXXXXX..XXXXXXX 100644 | ||
25 | --- a/include/hw/acpi/acpi-defs.h | ||
26 | +++ b/include/hw/acpi/acpi-defs.h | ||
27 | @@ -XXX,XX +XXX,XX @@ struct AcpiIortItsGroup { | ||
28 | } QEMU_PACKED; | ||
29 | typedef struct AcpiIortItsGroup AcpiIortItsGroup; | ||
30 | |||
31 | +struct AcpiIortSmmu3 { | ||
32 | + ACPI_IORT_NODE_HEADER_DEF | ||
33 | + uint64_t base_address; | ||
34 | + uint32_t flags; | ||
35 | + uint32_t reserved2; | ||
36 | + uint64_t vatos_address; | ||
37 | + uint32_t model; | ||
38 | + uint32_t event_gsiv; | ||
39 | + uint32_t pri_gsiv; | ||
40 | + uint32_t gerr_gsiv; | ||
41 | + uint32_t sync_gsiv; | ||
42 | + AcpiIortIdMapping id_mapping_array[0]; | ||
43 | +} QEMU_PACKED; | ||
44 | +typedef struct AcpiIortSmmu3 AcpiIortSmmu3; | ||
45 | + | ||
46 | struct AcpiIortRC { | ||
47 | ACPI_IORT_NODE_HEADER_DEF | ||
48 | AcpiIortMemoryAccess memory_properties; | ||
49 | diff --git a/hw/arm/virt-acpi-build.c b/hw/arm/virt-acpi-build.c | 16 | diff --git a/hw/arm/virt-acpi-build.c b/hw/arm/virt-acpi-build.c |
50 | index XXXXXXX..XXXXXXX 100644 | 17 | index XXXXXXX..XXXXXXX 100644 |
51 | --- a/hw/arm/virt-acpi-build.c | 18 | --- a/hw/arm/virt-acpi-build.c |
52 | +++ b/hw/arm/virt-acpi-build.c | 19 | +++ b/hw/arm/virt-acpi-build.c |
53 | @@ -XXX,XX +XXX,XX @@ build_rsdp(GArray *rsdp_table, BIOSLinker *linker, unsigned xsdt_tbl_offset) | 20 | @@ -XXX,XX +XXX,XX @@ |
54 | } | 21 | #include "kvm_arm.h" |
55 | 22 | #include "migration/vmstate.h" | |
56 | static void | 23 | #include "hw/acpi/ghes.h" |
57 | -build_iort(GArray *table_data, BIOSLinker *linker) | 24 | +#include "hw/acpi/viot.h" |
58 | +build_iort(GArray *table_data, BIOSLinker *linker, VirtMachineState *vms) | 25 | |
59 | { | 26 | #define ARM_SPI_BASE 32 |
60 | - int iort_start = table_data->len; | 27 | |
61 | + int nb_nodes, iort_start = table_data->len; | 28 | @@ -XXX,XX +XXX,XX @@ void virt_acpi_build(VirtMachineState *vms, AcpiBuildTables *tables) |
62 | AcpiIortIdMapping *idmap; | 29 | } |
63 | AcpiIortItsGroup *its; | 30 | #endif |
64 | AcpiIortTable *iort; | 31 | |
65 | - size_t node_size, iort_length; | 32 | + if (vms->iommu == VIRT_IOMMU_VIRTIO) { |
66 | + AcpiIortSmmu3 *smmu; | 33 | + acpi_add_table(table_offsets, tables_blob); |
67 | + size_t node_size, iort_length, smmu_offset = 0; | 34 | + build_viot(ms, tables_blob, tables->linker, vms->virtio_iommu_bdf, |
68 | AcpiIortRC *rc; | 35 | + vms->oem_id, vms->oem_table_id); |
69 | |||
70 | iort = acpi_data_push(table_data, sizeof(*iort)); | ||
71 | |||
72 | + if (vms->iommu == VIRT_IOMMU_SMMUV3) { | ||
73 | + nb_nodes = 3; /* RC, ITS, SMMUv3 */ | ||
74 | + } else { | ||
75 | + nb_nodes = 2; /* RC, ITS */ | ||
76 | + } | 36 | + } |
77 | + | 37 | + |
78 | iort_length = sizeof(*iort); | ||
79 | - iort->node_count = cpu_to_le32(2); /* RC and ITS nodes */ | ||
80 | + iort->node_count = cpu_to_le32(nb_nodes); | ||
81 | iort->node_offset = cpu_to_le32(sizeof(*iort)); | ||
82 | |||
83 | /* ITS group node */ | ||
84 | @@ -XXX,XX +XXX,XX @@ build_iort(GArray *table_data, BIOSLinker *linker) | ||
85 | its->its_count = cpu_to_le32(1); | ||
86 | its->identifiers[0] = 0; /* MADT translation_id */ | ||
87 | |||
88 | + if (vms->iommu == VIRT_IOMMU_SMMUV3) { | ||
89 | + int irq = vms->irqmap[VIRT_SMMU]; | ||
90 | + | ||
91 | + /* SMMUv3 node */ | ||
92 | + smmu_offset = iort->node_offset + node_size; | ||
93 | + node_size = sizeof(*smmu) + sizeof(*idmap); | ||
94 | + iort_length += node_size; | ||
95 | + smmu = acpi_data_push(table_data, node_size); | ||
96 | + | ||
97 | + smmu->type = ACPI_IORT_NODE_SMMU_V3; | ||
98 | + smmu->length = cpu_to_le16(node_size); | ||
99 | + smmu->mapping_count = cpu_to_le32(1); | ||
100 | + smmu->mapping_offset = cpu_to_le32(sizeof(*smmu)); | ||
101 | + smmu->base_address = cpu_to_le64(vms->memmap[VIRT_SMMU].base); | ||
102 | + smmu->event_gsiv = cpu_to_le32(irq); | ||
103 | + smmu->pri_gsiv = cpu_to_le32(irq + 1); | ||
104 | + smmu->gerr_gsiv = cpu_to_le32(irq + 2); | ||
105 | + smmu->sync_gsiv = cpu_to_le32(irq + 3); | ||
106 | + | ||
107 | + /* Identity RID mapping covering the whole input RID range */ | ||
108 | + idmap = &smmu->id_mapping_array[0]; | ||
109 | + idmap->input_base = 0; | ||
110 | + idmap->id_count = cpu_to_le32(0xFFFF); | ||
111 | + idmap->output_base = 0; | ||
112 | + /* output IORT node is the ITS group node (the first node) */ | ||
113 | + idmap->output_reference = cpu_to_le32(iort->node_offset); | ||
114 | + } | ||
115 | + | ||
116 | /* Root Complex Node */ | ||
117 | node_size = sizeof(*rc) + sizeof(*idmap); | ||
118 | iort_length += node_size; | ||
119 | @@ -XXX,XX +XXX,XX @@ build_iort(GArray *table_data, BIOSLinker *linker) | ||
120 | idmap->input_base = 0; | ||
121 | idmap->id_count = cpu_to_le32(0xFFFF); | ||
122 | idmap->output_base = 0; | ||
123 | - /* output IORT node is the ITS group node (the first node) */ | ||
124 | - idmap->output_reference = cpu_to_le32(iort->node_offset); | ||
125 | + | ||
126 | + if (vms->iommu == VIRT_IOMMU_SMMUV3) { | ||
127 | + /* output IORT node is the smmuv3 node */ | ||
128 | + idmap->output_reference = cpu_to_le32(smmu_offset); | ||
129 | + } else { | ||
130 | + /* output IORT node is the ITS group node (the first node) */ | ||
131 | + idmap->output_reference = cpu_to_le32(iort->node_offset); | ||
132 | + } | ||
133 | |||
134 | iort->length = cpu_to_le32(iort_length); | ||
135 | |||
136 | @@ -XXX,XX +XXX,XX @@ void virt_acpi_build(VirtMachineState *vms, AcpiBuildTables *tables) | ||
137 | |||
138 | if (its_class_name() && !vmc->no_its) { | ||
139 | acpi_add_table(table_offsets, tables_blob); | ||
140 | - build_iort(tables_blob, tables->linker); | ||
141 | + build_iort(tables_blob, tables->linker, vms); | ||
142 | } | ||
143 | |||
144 | /* XSDT is pointed to by RSDP */ | 38 | /* XSDT is pointed to by RSDP */ |
39 | xsdt = tables_blob->len; | ||
40 | build_xsdt(tables_blob, tables->linker, table_offsets, vms->oem_id, | ||
41 | diff --git a/hw/arm/Kconfig b/hw/arm/Kconfig | ||
42 | index XXXXXXX..XXXXXXX 100644 | ||
43 | --- a/hw/arm/Kconfig | ||
44 | +++ b/hw/arm/Kconfig | ||
45 | @@ -XXX,XX +XXX,XX @@ config ARM_VIRT | ||
46 | select DIMM | ||
47 | select ACPI_HW_REDUCED | ||
48 | select ACPI_APEI | ||
49 | + select ACPI_VIOT | ||
50 | |||
51 | config CHEETAH | ||
52 | bool | ||
145 | -- | 53 | -- |
146 | 2.17.0 | 54 | 2.25.1 |
147 | 55 | ||
148 | 56 | diff view generated by jsdifflib |
1 | From: Prem Mallappa <prem.mallappa@broadcom.com> | 1 | From: Jean-Philippe Brucker <jean-philippe@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | Add code to instantiate an smmuv3 in virt machine. A new iommu | 3 | virtio-iommu is now supported with ACPI VIOT as well as device tree. |
4 | integer member is introduced in VirtMachineState to store the type | 4 | Remove the restriction that prevents from instantiating a virtio-iommu |
5 | of the iommu in use. | 5 | device under ACPI. |
6 | 6 | ||
7 | Signed-off-by: Prem Mallappa <prem.mallappa@broadcom.com> | 7 | Acked-by: Igor Mammedov <imammedo@redhat.com> |
8 | Signed-off-by: Eric Auger <eric.auger@redhat.com> | 8 | Reviewed-by: Eric Auger <eric.auger@redhat.com> |
9 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 9 | Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org> |
10 | Message-id: 1524665762-31355-13-git-send-email-eric.auger@redhat.com | 10 | Message-id: 20211210170415.583179-3-jean-philippe@linaro.org |
11 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 11 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
12 | --- | 12 | --- |
13 | include/hw/arm/virt.h | 10 +++++++ | 13 | hw/arm/virt.c | 10 ++-------- |
14 | hw/arm/virt.c | 64 ++++++++++++++++++++++++++++++++++++++++++- | 14 | hw/virtio/virtio-iommu-pci.c | 12 ++---------- |
15 | 2 files changed, 73 insertions(+), 1 deletion(-) | 15 | 2 files changed, 4 insertions(+), 18 deletions(-) |
16 | 16 | ||
17 | diff --git a/include/hw/arm/virt.h b/include/hw/arm/virt.h | ||
18 | index XXXXXXX..XXXXXXX 100644 | ||
19 | --- a/include/hw/arm/virt.h | ||
20 | +++ b/include/hw/arm/virt.h | ||
21 | @@ -XXX,XX +XXX,XX @@ | ||
22 | |||
23 | #define NUM_GICV2M_SPIS 64 | ||
24 | #define NUM_VIRTIO_TRANSPORTS 32 | ||
25 | +#define NUM_SMMU_IRQS 4 | ||
26 | |||
27 | #define ARCH_GICV3_MAINT_IRQ 9 | ||
28 | |||
29 | @@ -XXX,XX +XXX,XX @@ enum { | ||
30 | VIRT_GIC_V2M, | ||
31 | VIRT_GIC_ITS, | ||
32 | VIRT_GIC_REDIST, | ||
33 | + VIRT_SMMU, | ||
34 | VIRT_UART, | ||
35 | VIRT_MMIO, | ||
36 | VIRT_RTC, | ||
37 | @@ -XXX,XX +XXX,XX @@ enum { | ||
38 | VIRT_SECURE_MEM, | ||
39 | }; | ||
40 | |||
41 | +typedef enum VirtIOMMUType { | ||
42 | + VIRT_IOMMU_NONE, | ||
43 | + VIRT_IOMMU_SMMUV3, | ||
44 | + VIRT_IOMMU_VIRTIO, | ||
45 | +} VirtIOMMUType; | ||
46 | + | ||
47 | typedef struct MemMapEntry { | ||
48 | hwaddr base; | ||
49 | hwaddr size; | ||
50 | @@ -XXX,XX +XXX,XX @@ typedef struct { | ||
51 | bool its; | ||
52 | bool virt; | ||
53 | int32_t gic_version; | ||
54 | + VirtIOMMUType iommu; | ||
55 | struct arm_boot_info bootinfo; | ||
56 | const MemMapEntry *memmap; | ||
57 | const int *irqmap; | ||
58 | @@ -XXX,XX +XXX,XX @@ typedef struct { | ||
59 | uint32_t clock_phandle; | ||
60 | uint32_t gic_phandle; | ||
61 | uint32_t msi_phandle; | ||
62 | + uint32_t iommu_phandle; | ||
63 | int psci_conduit; | ||
64 | } VirtMachineState; | ||
65 | |||
66 | diff --git a/hw/arm/virt.c b/hw/arm/virt.c | 17 | diff --git a/hw/arm/virt.c b/hw/arm/virt.c |
67 | index XXXXXXX..XXXXXXX 100644 | 18 | index XXXXXXX..XXXXXXX 100644 |
68 | --- a/hw/arm/virt.c | 19 | --- a/hw/arm/virt.c |
69 | +++ b/hw/arm/virt.c | 20 | +++ b/hw/arm/virt.c |
70 | @@ -XXX,XX +XXX,XX @@ | 21 | @@ -XXX,XX +XXX,XX @@ static HotplugHandler *virt_machine_get_hotplug_handler(MachineState *machine, |
71 | #include "hw/smbios/smbios.h" | 22 | MachineClass *mc = MACHINE_GET_CLASS(machine); |
72 | #include "qapi/visitor.h" | 23 | |
73 | #include "standard-headers/linux/input.h" | 24 | if (device_is_dynamic_sysbus(mc, dev) || |
74 | +#include "hw/arm/smmuv3.h" | 25 | - (object_dynamic_cast(OBJECT(dev), TYPE_PC_DIMM))) { |
75 | 26 | + object_dynamic_cast(OBJECT(dev), TYPE_PC_DIMM) || | |
76 | #define DEFINE_VIRT_MACHINE_LATEST(major, minor, latest) \ | 27 | + object_dynamic_cast(OBJECT(dev), TYPE_VIRTIO_IOMMU_PCI)) { |
77 | static void virt_##major##_##minor##_class_init(ObjectClass *oc, \ | 28 | return HOTPLUG_HANDLER(machine); |
78 | @@ -XXX,XX +XXX,XX @@ static const MemMapEntry a15memmap[] = { | 29 | } |
79 | [VIRT_FW_CFG] = { 0x09020000, 0x00000018 }, | 30 | - if (object_dynamic_cast(OBJECT(dev), TYPE_VIRTIO_IOMMU_PCI)) { |
80 | [VIRT_GPIO] = { 0x09030000, 0x00001000 }, | 31 | - VirtMachineState *vms = VIRT_MACHINE(machine); |
81 | [VIRT_SECURE_UART] = { 0x09040000, 0x00001000 }, | 32 | - |
82 | + [VIRT_SMMU] = { 0x09050000, 0x00020000 }, | 33 | - if (!vms->bootinfo.firmware_loaded || !virt_is_acpi_enabled(vms)) { |
83 | [VIRT_MMIO] = { 0x0a000000, 0x00000200 }, | 34 | - return HOTPLUG_HANDLER(machine); |
84 | /* ...repeating for a total of NUM_VIRTIO_TRANSPORTS, each of that size */ | 35 | - } |
85 | [VIRT_PLATFORM_BUS] = { 0x0c000000, 0x02000000 }, | 36 | - } |
86 | @@ -XXX,XX +XXX,XX @@ static const int a15irqmap[] = { | 37 | return NULL; |
87 | [VIRT_SECURE_UART] = 8, | ||
88 | [VIRT_MMIO] = 16, /* ...to 16 + NUM_VIRTIO_TRANSPORTS - 1 */ | ||
89 | [VIRT_GIC_V2M] = 48, /* ...to 48 + NUM_GICV2M_SPIS - 1 */ | ||
90 | + [VIRT_SMMU] = 74, /* ...to 74 + NUM_SMMU_IRQS - 1 */ | ||
91 | [VIRT_PLATFORM_BUS] = 112, /* ...to 112 + PLATFORM_BUS_NUM_IRQS -1 */ | ||
92 | }; | ||
93 | |||
94 | @@ -XXX,XX +XXX,XX @@ static void create_pcie_irq_map(const VirtMachineState *vms, | ||
95 | 0x7 /* PCI irq */); | ||
96 | } | 38 | } |
97 | 39 | ||
98 | -static void create_pcie(const VirtMachineState *vms, qemu_irq *pic) | 40 | diff --git a/hw/virtio/virtio-iommu-pci.c b/hw/virtio/virtio-iommu-pci.c |
99 | +static void create_smmu(const VirtMachineState *vms, qemu_irq *pic, | 41 | index XXXXXXX..XXXXXXX 100644 |
100 | + PCIBus *bus) | 42 | --- a/hw/virtio/virtio-iommu-pci.c |
101 | +{ | 43 | +++ b/hw/virtio/virtio-iommu-pci.c |
102 | + char *node; | 44 | @@ -XXX,XX +XXX,XX @@ static void virtio_iommu_pci_realize(VirtIOPCIProxy *vpci_dev, Error **errp) |
103 | + const char compat[] = "arm,smmu-v3"; | 45 | VirtIOIOMMU *s = VIRTIO_IOMMU(vdev); |
104 | + int irq = vms->irqmap[VIRT_SMMU]; | 46 | |
105 | + int i; | 47 | if (!qdev_get_machine_hotplug_handler(DEVICE(vpci_dev))) { |
106 | + hwaddr base = vms->memmap[VIRT_SMMU].base; | 48 | - MachineClass *mc = MACHINE_GET_CLASS(qdev_get_machine()); |
107 | + hwaddr size = vms->memmap[VIRT_SMMU].size; | 49 | - |
108 | + const char irq_names[] = "eventq\0priq\0cmdq-sync\0gerror"; | 50 | - error_setg(errp, |
109 | + DeviceState *dev; | 51 | - "%s machine fails to create iommu-map device tree bindings", |
110 | + | 52 | - mc->name); |
111 | + if (vms->iommu != VIRT_IOMMU_SMMUV3 || !vms->iommu_phandle) { | 53 | - error_append_hint(errp, |
112 | + return; | 54 | - "Check your machine implements a hotplug handler " |
113 | + } | 55 | - "for the virtio-iommu-pci device\n"); |
114 | + | 56 | - error_append_hint(errp, "Check the guest is booted without FW or with " |
115 | + dev = qdev_create(NULL, "arm-smmuv3"); | 57 | - "-no-acpi\n"); |
116 | + | 58 | + error_setg(errp, "Check your machine implements a hotplug handler " |
117 | + object_property_set_link(OBJECT(dev), OBJECT(bus), "primary-bus", | 59 | + "for the virtio-iommu-pci device"); |
118 | + &error_abort); | 60 | return; |
119 | + qdev_init_nofail(dev); | 61 | } |
120 | + sysbus_mmio_map(SYS_BUS_DEVICE(dev), 0, base); | 62 | for (int i = 0; i < s->nb_reserved_regions; i++) { |
121 | + for (i = 0; i < NUM_SMMU_IRQS; i++) { | ||
122 | + sysbus_connect_irq(SYS_BUS_DEVICE(dev), i, pic[irq + i]); | ||
123 | + } | ||
124 | + | ||
125 | + node = g_strdup_printf("/smmuv3@%" PRIx64, base); | ||
126 | + qemu_fdt_add_subnode(vms->fdt, node); | ||
127 | + qemu_fdt_setprop(vms->fdt, node, "compatible", compat, sizeof(compat)); | ||
128 | + qemu_fdt_setprop_sized_cells(vms->fdt, node, "reg", 2, base, 2, size); | ||
129 | + | ||
130 | + qemu_fdt_setprop_cells(vms->fdt, node, "interrupts", | ||
131 | + GIC_FDT_IRQ_TYPE_SPI, irq , GIC_FDT_IRQ_FLAGS_EDGE_LO_HI, | ||
132 | + GIC_FDT_IRQ_TYPE_SPI, irq + 1, GIC_FDT_IRQ_FLAGS_EDGE_LO_HI, | ||
133 | + GIC_FDT_IRQ_TYPE_SPI, irq + 2, GIC_FDT_IRQ_FLAGS_EDGE_LO_HI, | ||
134 | + GIC_FDT_IRQ_TYPE_SPI, irq + 3, GIC_FDT_IRQ_FLAGS_EDGE_LO_HI); | ||
135 | + | ||
136 | + qemu_fdt_setprop(vms->fdt, node, "interrupt-names", irq_names, | ||
137 | + sizeof(irq_names)); | ||
138 | + | ||
139 | + qemu_fdt_setprop_cell(vms->fdt, node, "clocks", vms->clock_phandle); | ||
140 | + qemu_fdt_setprop_string(vms->fdt, node, "clock-names", "apb_pclk"); | ||
141 | + qemu_fdt_setprop(vms->fdt, node, "dma-coherent", NULL, 0); | ||
142 | + | ||
143 | + qemu_fdt_setprop_cell(vms->fdt, node, "#iommu-cells", 1); | ||
144 | + | ||
145 | + qemu_fdt_setprop_cell(vms->fdt, node, "phandle", vms->iommu_phandle); | ||
146 | + g_free(node); | ||
147 | +} | ||
148 | + | ||
149 | +static void create_pcie(VirtMachineState *vms, qemu_irq *pic) | ||
150 | { | ||
151 | hwaddr base_mmio = vms->memmap[VIRT_PCIE_MMIO].base; | ||
152 | hwaddr size_mmio = vms->memmap[VIRT_PCIE_MMIO].size; | ||
153 | @@ -XXX,XX +XXX,XX @@ static void create_pcie(const VirtMachineState *vms, qemu_irq *pic) | ||
154 | qemu_fdt_setprop_cell(vms->fdt, nodename, "#interrupt-cells", 1); | ||
155 | create_pcie_irq_map(vms, vms->gic_phandle, irq, nodename); | ||
156 | |||
157 | + if (vms->iommu) { | ||
158 | + vms->iommu_phandle = qemu_fdt_alloc_phandle(vms->fdt); | ||
159 | + | ||
160 | + create_smmu(vms, pic, pci->bus); | ||
161 | + | ||
162 | + qemu_fdt_setprop_cells(vms->fdt, nodename, "iommu-map", | ||
163 | + 0x0, vms->iommu_phandle, 0x0, 0x10000); | ||
164 | + } | ||
165 | + | ||
166 | g_free(nodename); | ||
167 | } | ||
168 | |||
169 | -- | 63 | -- |
170 | 2.17.0 | 64 | 2.25.1 |
171 | 65 | ||
172 | 66 | diff view generated by jsdifflib |
1 | From: Jan Kiszka <jan.kiszka@siemens.com> | 1 | From: Jean-Philippe Brucker <jean-philippe@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | This allows to pin the host controller in the Linux PCI domain space. | 3 | We do not support instantiating multiple IOMMUs. Before adding a |
4 | Linux requires that property to be available consistently or not at all, | 4 | virtio-iommu, check that no other IOMMU is present. This will detect |
5 | in which case the domain number becomes unstable on additions/removals. | 5 | both "iommu=smmuv3" machine parameter and another virtio-iommu instance. |
6 | Adding it here won't make a difference in practice for most setups as we | ||
7 | only expose one controller. | ||
8 | 6 | ||
9 | However, enabling Jailhouse on top may introduce another controller, and | 7 | Fixes: 70e89132c9 ("hw/arm/virt: Add the virtio-iommu device tree mappings") |
10 | that one would like to have stable address as well. So the property is | 8 | Reviewed-by: Eric Auger <eric.auger@redhat.com> |
11 | needed for the first controller as well. | 9 | Reviewed-by: Igor Mammedov <imammedo@redhat.com> |
12 | 10 | Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org> | |
13 | Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com> | 11 | Message-id: 20211210170415.583179-4-jean-philippe@linaro.org |
14 | Message-id: 3301c5bc-7b47-1b0e-8ce4-30435057a276@web.de | ||
15 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
16 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 12 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
17 | --- | 13 | --- |
18 | hw/arm/virt.c | 1 + | 14 | hw/arm/virt.c | 5 +++++ |
19 | 1 file changed, 1 insertion(+) | 15 | 1 file changed, 5 insertions(+) |
20 | 16 | ||
21 | diff --git a/hw/arm/virt.c b/hw/arm/virt.c | 17 | diff --git a/hw/arm/virt.c b/hw/arm/virt.c |
22 | index XXXXXXX..XXXXXXX 100644 | 18 | index XXXXXXX..XXXXXXX 100644 |
23 | --- a/hw/arm/virt.c | 19 | --- a/hw/arm/virt.c |
24 | +++ b/hw/arm/virt.c | 20 | +++ b/hw/arm/virt.c |
25 | @@ -XXX,XX +XXX,XX @@ static void create_pcie(const VirtMachineState *vms, qemu_irq *pic) | 21 | @@ -XXX,XX +XXX,XX @@ static void virt_machine_device_pre_plug_cb(HotplugHandler *hotplug_dev, |
26 | qemu_fdt_setprop_string(vms->fdt, nodename, "device_type", "pci"); | 22 | hwaddr db_start = 0, db_end = 0; |
27 | qemu_fdt_setprop_cell(vms->fdt, nodename, "#address-cells", 3); | 23 | char *resv_prop_str; |
28 | qemu_fdt_setprop_cell(vms->fdt, nodename, "#size-cells", 2); | 24 | |
29 | + qemu_fdt_setprop_cell(vms->fdt, nodename, "linux,pci-domain", 0); | 25 | + if (vms->iommu != VIRT_IOMMU_NONE) { |
30 | qemu_fdt_setprop_cells(vms->fdt, nodename, "bus-range", 0, | 26 | + error_setg(errp, "virt machine does not support multiple IOMMUs"); |
31 | nr_pcie_buses - 1); | 27 | + return; |
32 | qemu_fdt_setprop(vms->fdt, nodename, "dma-coherent", NULL, 0); | 28 | + } |
29 | + | ||
30 | switch (vms->msi_controller) { | ||
31 | case VIRT_MSI_CTRL_NONE: | ||
32 | return; | ||
33 | -- | 33 | -- |
34 | 2.17.0 | 34 | 2.25.1 |
35 | 35 | ||
36 | 36 | diff view generated by jsdifflib |
1 | From: Eric Auger <eric.auger@redhat.com> | 1 | From: Jean-Philippe Brucker <jean-philippe@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | ARM virt machine now exposes a new "iommu" option. | 3 | To propagate errors to the caller of the pre_plug callback, use the |
4 | The SMMUv3 IOMMU is instantiated using -machine virt,iommu=smmuv3. | 4 | object_poperty_set*() functions directly instead of the qdev_prop_set*() |
5 | helpers. | ||
5 | 6 | ||
6 | Signed-off-by: Eric Auger <eric.auger@redhat.com> | 7 | Suggested-by: Igor Mammedov <imammedo@redhat.com> |
7 | Signed-off-by: Prem Mallappa <prem.mallappa@broadcom.com> | 8 | Reviewed-by: Eric Auger <eric.auger@redhat.com> |
8 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 9 | Reviewed-by: Igor Mammedov <imammedo@redhat.com> |
9 | Message-id: 1524665762-31355-15-git-send-email-eric.auger@redhat.com | 10 | Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org> |
11 | Message-id: 20211210170415.583179-5-jean-philippe@linaro.org | ||
10 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 12 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
11 | --- | 13 | --- |
12 | hw/arm/virt.c | 36 ++++++++++++++++++++++++++++++++++++ | 14 | hw/arm/virt.c | 5 +++-- |
13 | 1 file changed, 36 insertions(+) | 15 | 1 file changed, 3 insertions(+), 2 deletions(-) |
14 | 16 | ||
15 | diff --git a/hw/arm/virt.c b/hw/arm/virt.c | 17 | diff --git a/hw/arm/virt.c b/hw/arm/virt.c |
16 | index XXXXXXX..XXXXXXX 100644 | 18 | index XXXXXXX..XXXXXXX 100644 |
17 | --- a/hw/arm/virt.c | 19 | --- a/hw/arm/virt.c |
18 | +++ b/hw/arm/virt.c | 20 | +++ b/hw/arm/virt.c |
19 | @@ -XXX,XX +XXX,XX @@ static void virt_set_gic_version(Object *obj, const char *value, Error **errp) | 21 | @@ -XXX,XX +XXX,XX @@ static void virt_machine_device_pre_plug_cb(HotplugHandler *hotplug_dev, |
22 | db_start, db_end, | ||
23 | VIRTIO_IOMMU_RESV_MEM_T_MSI); | ||
24 | |||
25 | - qdev_prop_set_uint32(dev, "len-reserved-regions", 1); | ||
26 | - qdev_prop_set_string(dev, "reserved-regions[0]", resv_prop_str); | ||
27 | + object_property_set_uint(OBJECT(dev), "len-reserved-regions", 1, errp); | ||
28 | + object_property_set_str(OBJECT(dev), "reserved-regions[0]", | ||
29 | + resv_prop_str, errp); | ||
30 | g_free(resv_prop_str); | ||
20 | } | 31 | } |
21 | } | 32 | } |
22 | |||
23 | +static char *virt_get_iommu(Object *obj, Error **errp) | ||
24 | +{ | ||
25 | + VirtMachineState *vms = VIRT_MACHINE(obj); | ||
26 | + | ||
27 | + switch (vms->iommu) { | ||
28 | + case VIRT_IOMMU_NONE: | ||
29 | + return g_strdup("none"); | ||
30 | + case VIRT_IOMMU_SMMUV3: | ||
31 | + return g_strdup("smmuv3"); | ||
32 | + default: | ||
33 | + g_assert_not_reached(); | ||
34 | + } | ||
35 | +} | ||
36 | + | ||
37 | +static void virt_set_iommu(Object *obj, const char *value, Error **errp) | ||
38 | +{ | ||
39 | + VirtMachineState *vms = VIRT_MACHINE(obj); | ||
40 | + | ||
41 | + if (!strcmp(value, "smmuv3")) { | ||
42 | + vms->iommu = VIRT_IOMMU_SMMUV3; | ||
43 | + } else if (!strcmp(value, "none")) { | ||
44 | + vms->iommu = VIRT_IOMMU_NONE; | ||
45 | + } else { | ||
46 | + error_setg(errp, "Invalid iommu value"); | ||
47 | + error_append_hint(errp, "Valid values are none, smmuv3.\n"); | ||
48 | + } | ||
49 | +} | ||
50 | + | ||
51 | static CpuInstanceProperties | ||
52 | virt_cpu_index_to_props(MachineState *ms, unsigned cpu_index) | ||
53 | { | ||
54 | @@ -XXX,XX +XXX,XX @@ static void virt_2_12_instance_init(Object *obj) | ||
55 | NULL); | ||
56 | } | ||
57 | |||
58 | + /* Default disallows iommu instantiation */ | ||
59 | + vms->iommu = VIRT_IOMMU_NONE; | ||
60 | + object_property_add_str(obj, "iommu", virt_get_iommu, virt_set_iommu, NULL); | ||
61 | + object_property_set_description(obj, "iommu", | ||
62 | + "Set the IOMMU type. " | ||
63 | + "Valid values are none and smmuv3", | ||
64 | + NULL); | ||
65 | + | ||
66 | vms->memmap = a15memmap; | ||
67 | vms->irqmap = a15irqmap; | ||
68 | } | ||
69 | -- | 33 | -- |
70 | 2.17.0 | 34 | 2.25.1 |
71 | 35 | ||
72 | 36 | diff view generated by jsdifflib |
1 | From: Eric Auger <eric.auger@redhat.com> | 1 | From: Jean-Philippe Brucker <jean-philippe@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | The patch introduces the smmu base device and class for the ARM | 3 | Create empty data files and allow updates for the upcoming VIOT tests. |
4 | smmu. Devices for specific versions will be derived from this | ||
5 | base device. | ||
6 | 4 | ||
7 | We also introduce some important datatypes. | 5 | Acked-by: Igor Mammedov <imammedo@redhat.com> |
8 | 6 | Reviewed-by: Eric Auger <eric.auger@redhat.com> | |
9 | Signed-off-by: Eric Auger <eric.auger@redhat.com> | 7 | Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org> |
10 | Signed-off-by: Prem Mallappa <prem.mallappa@broadcom.com> | 8 | Message-id: 20211210170415.583179-6-jean-philippe@linaro.org |
11 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
12 | Message-id: 1524665762-31355-2-git-send-email-eric.auger@redhat.com | ||
13 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
14 | --- | 10 | --- |
15 | hw/arm/Makefile.objs | 1 + | 11 | tests/qtest/bios-tables-test-allowed-diff.h | 3 +++ |
16 | include/hw/arm/smmu-common.h | 123 ++++++++++++++++++++++++++++ | 12 | tests/data/acpi/q35/DSDT.viot | 0 |
17 | hw/arm/smmu-common.c | 81 ++++++++++++++++++ | 13 | tests/data/acpi/q35/VIOT.viot | 0 |
18 | default-configs/aarch64-softmmu.mak | 1 + | 14 | tests/data/acpi/virt/VIOT | 0 |
19 | 4 files changed, 206 insertions(+) | 15 | 4 files changed, 3 insertions(+) |
20 | create mode 100644 include/hw/arm/smmu-common.h | 16 | create mode 100644 tests/data/acpi/q35/DSDT.viot |
21 | create mode 100644 hw/arm/smmu-common.c | 17 | create mode 100644 tests/data/acpi/q35/VIOT.viot |
18 | create mode 100644 tests/data/acpi/virt/VIOT | ||
22 | 19 | ||
23 | diff --git a/hw/arm/Makefile.objs b/hw/arm/Makefile.objs | 20 | diff --git a/tests/qtest/bios-tables-test-allowed-diff.h b/tests/qtest/bios-tables-test-allowed-diff.h |
24 | index XXXXXXX..XXXXXXX 100644 | 21 | index XXXXXXX..XXXXXXX 100644 |
25 | --- a/hw/arm/Makefile.objs | 22 | --- a/tests/qtest/bios-tables-test-allowed-diff.h |
26 | +++ b/hw/arm/Makefile.objs | 23 | +++ b/tests/qtest/bios-tables-test-allowed-diff.h |
27 | @@ -XXX,XX +XXX,XX @@ obj-$(CONFIG_MPS2) += mps2-tz.o | 24 | @@ -1 +1,4 @@ |
28 | obj-$(CONFIG_MSF2) += msf2-soc.o msf2-som.o | 25 | /* List of comma-separated changed AML files to ignore */ |
29 | obj-$(CONFIG_IOTKIT) += iotkit.o | 26 | +"tests/data/acpi/virt/VIOT", |
30 | obj-$(CONFIG_FSL_IMX7) += fsl-imx7.o mcimx7d-sabre.o | 27 | +"tests/data/acpi/q35/DSDT.viot", |
31 | +obj-$(CONFIG_ARM_SMMUV3) += smmu-common.o | 28 | +"tests/data/acpi/q35/VIOT.viot", |
32 | diff --git a/include/hw/arm/smmu-common.h b/include/hw/arm/smmu-common.h | 29 | diff --git a/tests/data/acpi/q35/DSDT.viot b/tests/data/acpi/q35/DSDT.viot |
33 | new file mode 100644 | 30 | new file mode 100644 |
34 | index XXXXXXX..XXXXXXX | 31 | index XXXXXXX..XXXXXXX |
35 | --- /dev/null | 32 | diff --git a/tests/data/acpi/q35/VIOT.viot b/tests/data/acpi/q35/VIOT.viot |
36 | +++ b/include/hw/arm/smmu-common.h | ||
37 | @@ -XXX,XX +XXX,XX @@ | ||
38 | +/* | ||
39 | + * ARM SMMU Support | ||
40 | + * | ||
41 | + * Copyright (C) 2015-2016 Broadcom Corporation | ||
42 | + * Copyright (c) 2017 Red Hat, Inc. | ||
43 | + * Written by Prem Mallappa, Eric Auger | ||
44 | + * | ||
45 | + * This program is free software; you can redistribute it and/or modify | ||
46 | + * it under the terms of the GNU General Public License version 2 as | ||
47 | + * published by the Free Software Foundation. | ||
48 | + * | ||
49 | + * This program is distributed in the hope that it will be useful, | ||
50 | + * but WITHOUT ANY WARRANTY; without even the implied warranty of | ||
51 | + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | ||
52 | + * GNU General Public License for more details. | ||
53 | + * | ||
54 | + */ | ||
55 | + | ||
56 | +#ifndef HW_ARM_SMMU_COMMON_H | ||
57 | +#define HW_ARM_SMMU_COMMON_H | ||
58 | + | ||
59 | +#include "hw/sysbus.h" | ||
60 | +#include "hw/pci/pci.h" | ||
61 | + | ||
62 | +#define SMMU_PCI_BUS_MAX 256 | ||
63 | +#define SMMU_PCI_DEVFN_MAX 256 | ||
64 | + | ||
65 | +#define SMMU_MAX_VA_BITS 48 | ||
66 | + | ||
67 | +/* | ||
68 | + * Page table walk error types | ||
69 | + */ | ||
70 | +typedef enum { | ||
71 | + SMMU_PTW_ERR_NONE, | ||
72 | + SMMU_PTW_ERR_WALK_EABT, /* Translation walk external abort */ | ||
73 | + SMMU_PTW_ERR_TRANSLATION, /* Translation fault */ | ||
74 | + SMMU_PTW_ERR_ADDR_SIZE, /* Address Size fault */ | ||
75 | + SMMU_PTW_ERR_ACCESS, /* Access fault */ | ||
76 | + SMMU_PTW_ERR_PERMISSION, /* Permission fault */ | ||
77 | +} SMMUPTWEventType; | ||
78 | + | ||
79 | +typedef struct SMMUPTWEventInfo { | ||
80 | + SMMUPTWEventType type; | ||
81 | + dma_addr_t addr; /* fetched address that induced an abort, if any */ | ||
82 | +} SMMUPTWEventInfo; | ||
83 | + | ||
84 | +typedef struct SMMUTransTableInfo { | ||
85 | + bool disabled; /* is the translation table disabled? */ | ||
86 | + uint64_t ttb; /* TT base address */ | ||
87 | + uint8_t tsz; /* input range, ie. 2^(64 -tsz)*/ | ||
88 | + uint8_t granule_sz; /* granule page shift */ | ||
89 | +} SMMUTransTableInfo; | ||
90 | + | ||
91 | +/* | ||
92 | + * Generic structure populated by derived SMMU devices | ||
93 | + * after decoding the configuration information and used as | ||
94 | + * input to the page table walk | ||
95 | + */ | ||
96 | +typedef struct SMMUTransCfg { | ||
97 | + int stage; /* translation stage */ | ||
98 | + bool aa64; /* arch64 or aarch32 translation table */ | ||
99 | + bool disabled; /* smmu is disabled */ | ||
100 | + bool bypassed; /* translation is bypassed */ | ||
101 | + bool aborted; /* translation is aborted */ | ||
102 | + uint64_t ttb; /* TT base address */ | ||
103 | + uint8_t oas; /* output address width */ | ||
104 | + uint8_t tbi; /* Top Byte Ignore */ | ||
105 | + uint16_t asid; | ||
106 | + SMMUTransTableInfo tt[2]; | ||
107 | +} SMMUTransCfg; | ||
108 | + | ||
109 | +typedef struct SMMUDevice { | ||
110 | + void *smmu; | ||
111 | + PCIBus *bus; | ||
112 | + int devfn; | ||
113 | + IOMMUMemoryRegion iommu; | ||
114 | + AddressSpace as; | ||
115 | +} SMMUDevice; | ||
116 | + | ||
117 | +typedef struct SMMUNotifierNode { | ||
118 | + SMMUDevice *sdev; | ||
119 | + QLIST_ENTRY(SMMUNotifierNode) next; | ||
120 | +} SMMUNotifierNode; | ||
121 | + | ||
122 | +typedef struct SMMUPciBus { | ||
123 | + PCIBus *bus; | ||
124 | + SMMUDevice *pbdev[0]; /* Parent array is sparse, so dynamically alloc */ | ||
125 | +} SMMUPciBus; | ||
126 | + | ||
127 | +typedef struct SMMUState { | ||
128 | + /* <private> */ | ||
129 | + SysBusDevice dev; | ||
130 | + const char *mrtypename; | ||
131 | + MemoryRegion iomem; | ||
132 | + | ||
133 | + GHashTable *smmu_pcibus_by_busptr; | ||
134 | + GHashTable *configs; /* cache for configuration data */ | ||
135 | + GHashTable *iotlb; | ||
136 | + SMMUPciBus *smmu_pcibus_by_bus_num[SMMU_PCI_BUS_MAX]; | ||
137 | + PCIBus *pci_bus; | ||
138 | + QLIST_HEAD(, SMMUNotifierNode) notifiers_list; | ||
139 | + uint8_t bus_num; | ||
140 | + PCIBus *primary_bus; | ||
141 | +} SMMUState; | ||
142 | + | ||
143 | +typedef struct { | ||
144 | + /* <private> */ | ||
145 | + SysBusDeviceClass parent_class; | ||
146 | + | ||
147 | + /*< public >*/ | ||
148 | + | ||
149 | + DeviceRealize parent_realize; | ||
150 | + | ||
151 | +} SMMUBaseClass; | ||
152 | + | ||
153 | +#define TYPE_ARM_SMMU "arm-smmu" | ||
154 | +#define ARM_SMMU(obj) OBJECT_CHECK(SMMUState, (obj), TYPE_ARM_SMMU) | ||
155 | +#define ARM_SMMU_CLASS(klass) \ | ||
156 | + OBJECT_CLASS_CHECK(SMMUBaseClass, (klass), TYPE_ARM_SMMU) | ||
157 | +#define ARM_SMMU_GET_CLASS(obj) \ | ||
158 | + OBJECT_GET_CLASS(SMMUBaseClass, (obj), TYPE_ARM_SMMU) | ||
159 | + | ||
160 | +#endif /* HW_ARM_SMMU_COMMON */ | ||
161 | diff --git a/hw/arm/smmu-common.c b/hw/arm/smmu-common.c | ||
162 | new file mode 100644 | 33 | new file mode 100644 |
163 | index XXXXXXX..XXXXXXX | 34 | index XXXXXXX..XXXXXXX |
164 | --- /dev/null | 35 | diff --git a/tests/data/acpi/virt/VIOT b/tests/data/acpi/virt/VIOT |
165 | +++ b/hw/arm/smmu-common.c | 36 | new file mode 100644 |
166 | @@ -XXX,XX +XXX,XX @@ | 37 | index XXXXXXX..XXXXXXX |
167 | +/* | ||
168 | + * Copyright (C) 2014-2016 Broadcom Corporation | ||
169 | + * Copyright (c) 2017 Red Hat, Inc. | ||
170 | + * Written by Prem Mallappa, Eric Auger | ||
171 | + * | ||
172 | + * This program is free software; you can redistribute it and/or modify | ||
173 | + * it under the terms of the GNU General Public License version 2 as | ||
174 | + * published by the Free Software Foundation. | ||
175 | + * | ||
176 | + * This program is distributed in the hope that it will be useful, | ||
177 | + * but WITHOUT ANY WARRANTY; without even the implied warranty of | ||
178 | + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | ||
179 | + * GNU General Public License for more details. | ||
180 | + * | ||
181 | + * Author: Prem Mallappa <pmallapp@broadcom.com> | ||
182 | + * | ||
183 | + */ | ||
184 | + | ||
185 | +#include "qemu/osdep.h" | ||
186 | +#include "sysemu/sysemu.h" | ||
187 | +#include "exec/address-spaces.h" | ||
188 | +#include "trace.h" | ||
189 | +#include "exec/target_page.h" | ||
190 | +#include "qom/cpu.h" | ||
191 | +#include "hw/qdev-properties.h" | ||
192 | +#include "qapi/error.h" | ||
193 | + | ||
194 | +#include "qemu/error-report.h" | ||
195 | +#include "hw/arm/smmu-common.h" | ||
196 | + | ||
197 | +static void smmu_base_realize(DeviceState *dev, Error **errp) | ||
198 | +{ | ||
199 | + SMMUBaseClass *sbc = ARM_SMMU_GET_CLASS(dev); | ||
200 | + Error *local_err = NULL; | ||
201 | + | ||
202 | + sbc->parent_realize(dev, &local_err); | ||
203 | + if (local_err) { | ||
204 | + error_propagate(errp, local_err); | ||
205 | + return; | ||
206 | + } | ||
207 | +} | ||
208 | + | ||
209 | +static void smmu_base_reset(DeviceState *dev) | ||
210 | +{ | ||
211 | + /* will be filled later on */ | ||
212 | +} | ||
213 | + | ||
214 | +static Property smmu_dev_properties[] = { | ||
215 | + DEFINE_PROP_UINT8("bus_num", SMMUState, bus_num, 0), | ||
216 | + DEFINE_PROP_LINK("primary-bus", SMMUState, primary_bus, "PCI", PCIBus *), | ||
217 | + DEFINE_PROP_END_OF_LIST(), | ||
218 | +}; | ||
219 | + | ||
220 | +static void smmu_base_class_init(ObjectClass *klass, void *data) | ||
221 | +{ | ||
222 | + DeviceClass *dc = DEVICE_CLASS(klass); | ||
223 | + SMMUBaseClass *sbc = ARM_SMMU_CLASS(klass); | ||
224 | + | ||
225 | + dc->props = smmu_dev_properties; | ||
226 | + device_class_set_parent_realize(dc, smmu_base_realize, | ||
227 | + &sbc->parent_realize); | ||
228 | + dc->reset = smmu_base_reset; | ||
229 | +} | ||
230 | + | ||
231 | +static const TypeInfo smmu_base_info = { | ||
232 | + .name = TYPE_ARM_SMMU, | ||
233 | + .parent = TYPE_SYS_BUS_DEVICE, | ||
234 | + .instance_size = sizeof(SMMUState), | ||
235 | + .class_data = NULL, | ||
236 | + .class_size = sizeof(SMMUBaseClass), | ||
237 | + .class_init = smmu_base_class_init, | ||
238 | + .abstract = true, | ||
239 | +}; | ||
240 | + | ||
241 | +static void smmu_base_register_types(void) | ||
242 | +{ | ||
243 | + type_register_static(&smmu_base_info); | ||
244 | +} | ||
245 | + | ||
246 | +type_init(smmu_base_register_types) | ||
247 | + | ||
248 | diff --git a/default-configs/aarch64-softmmu.mak b/default-configs/aarch64-softmmu.mak | ||
249 | index XXXXXXX..XXXXXXX 100644 | ||
250 | --- a/default-configs/aarch64-softmmu.mak | ||
251 | +++ b/default-configs/aarch64-softmmu.mak | ||
252 | @@ -XXX,XX +XXX,XX @@ CONFIG_DDC=y | ||
253 | CONFIG_DPCD=y | ||
254 | CONFIG_XLNX_ZYNQMP=y | ||
255 | CONFIG_XLNX_ZYNQMP_ARM=y | ||
256 | +CONFIG_ARM_SMMUV3=y | ||
257 | -- | 38 | -- |
258 | 2.17.0 | 39 | 2.25.1 |
259 | 40 | ||
260 | 41 | diff view generated by jsdifflib |
1 | From: Eric Auger <eric.auger@redhat.com> | 1 | From: Jean-Philippe Brucker <jean-philippe@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | We introduce some helpers to handle wired IRQs and especially | 3 | Add two test cases for VIOT, one on the q35 machine and the other on |
4 | GERROR interrupt. SMMU writes GERROR register on GERROR event | 4 | virt. To test complex topologies the q35 test has two PCIe buses that |
5 | and SW acks GERROR interrupts by setting GERRORn. | 5 | bypass the IOMMU (and are therefore not described by VIOT), and two |
6 | buses that are translated by virtio-iommu. | ||
6 | 7 | ||
7 | The Wired interrupts are edge sensitive hence the pulse usage. | 8 | Reviewed-by: Eric Auger <eric.auger@redhat.com> |
8 | 9 | Reviewed-by: Igor Mammedov <imammedo@redhat.com> | |
9 | Signed-off-by: Eric Auger <eric.auger@redhat.com> | 10 | Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org> |
10 | Signed-off-by: Prem Mallappa <prem.mallappa@broadcom.com> | 11 | Message-id: 20211210170415.583179-7-jean-philippe@linaro.org |
11 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
12 | Message-id: 1524665762-31355-6-git-send-email-eric.auger@redhat.com | ||
13 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 12 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
14 | --- | 13 | --- |
15 | hw/arm/smmuv3-internal.h | 14 +++++++++ | 14 | tests/qtest/bios-tables-test.c | 38 ++++++++++++++++++++++++++++++++++ |
16 | hw/arm/smmuv3.c | 64 ++++++++++++++++++++++++++++++++++++++++ | 15 | 1 file changed, 38 insertions(+) |
17 | hw/arm/trace-events | 3 ++ | ||
18 | 3 files changed, 81 insertions(+) | ||
19 | 16 | ||
20 | diff --git a/hw/arm/smmuv3-internal.h b/hw/arm/smmuv3-internal.h | 17 | diff --git a/tests/qtest/bios-tables-test.c b/tests/qtest/bios-tables-test.c |
21 | index XXXXXXX..XXXXXXX 100644 | 18 | index XXXXXXX..XXXXXXX 100644 |
22 | --- a/hw/arm/smmuv3-internal.h | 19 | --- a/tests/qtest/bios-tables-test.c |
23 | +++ b/hw/arm/smmuv3-internal.h | 20 | +++ b/tests/qtest/bios-tables-test.c |
24 | @@ -XXX,XX +XXX,XX @@ static inline uint32_t smmuv3_idreg(int regoffset) | 21 | @@ -XXX,XX +XXX,XX @@ static void test_acpi_virt_tcg(void) |
25 | return smmuv3_ids[regoffset / 4]; | 22 | free_test_data(&data); |
26 | } | 23 | } |
27 | 24 | ||
28 | +static inline bool smmuv3_eventq_irq_enabled(SMMUv3State *s) | 25 | +static void test_acpi_q35_viot(void) |
29 | +{ | 26 | +{ |
30 | + return FIELD_EX32(s->irq_ctrl, IRQ_CTRL, EVENTQ_IRQEN); | 27 | + test_data data = { |
28 | + .machine = MACHINE_Q35, | ||
29 | + .variant = ".viot", | ||
30 | + }; | ||
31 | + | ||
32 | + /* | ||
33 | + * To keep things interesting, two buses bypass the IOMMU. | ||
34 | + * VIOT should only describes the other two buses. | ||
35 | + */ | ||
36 | + test_acpi_one("-machine default_bus_bypass_iommu=on " | ||
37 | + "-device virtio-iommu-pci " | ||
38 | + "-device pxb-pcie,bus_nr=0x10,id=pcie.100,bus=pcie.0 " | ||
39 | + "-device pxb-pcie,bus_nr=0x20,id=pcie.200,bus=pcie.0,bypass_iommu=on " | ||
40 | + "-device pxb-pcie,bus_nr=0x30,id=pcie.300,bus=pcie.0", | ||
41 | + &data); | ||
42 | + free_test_data(&data); | ||
31 | +} | 43 | +} |
32 | + | 44 | + |
33 | +static inline bool smmuv3_gerror_irq_enabled(SMMUv3State *s) | 45 | +static void test_acpi_virt_viot(void) |
34 | +{ | 46 | +{ |
35 | + return FIELD_EX32(s->irq_ctrl, IRQ_CTRL, GERROR_IRQEN); | 47 | + test_data data = { |
48 | + .machine = "virt", | ||
49 | + .uefi_fl1 = "pc-bios/edk2-aarch64-code.fd", | ||
50 | + .uefi_fl2 = "pc-bios/edk2-arm-vars.fd", | ||
51 | + .cd = "tests/data/uefi-boot-images/bios-tables-test.aarch64.iso.qcow2", | ||
52 | + .ram_start = 0x40000000ULL, | ||
53 | + .scan_len = 128ULL * 1024 * 1024, | ||
54 | + }; | ||
55 | + | ||
56 | + test_acpi_one("-cpu cortex-a57 " | ||
57 | + "-device virtio-iommu-pci", &data); | ||
58 | + free_test_data(&data); | ||
36 | +} | 59 | +} |
37 | + | 60 | + |
38 | +/* public until callers get introduced */ | 61 | static void test_oem_fields(test_data *data) |
39 | +void smmuv3_trigger_irq(SMMUv3State *s, SMMUIrq irq, uint32_t gerror_mask); | ||
40 | +void smmuv3_write_gerrorn(SMMUv3State *s, uint32_t gerrorn); | ||
41 | + | ||
42 | #endif | ||
43 | diff --git a/hw/arm/smmuv3.c b/hw/arm/smmuv3.c | ||
44 | index XXXXXXX..XXXXXXX 100644 | ||
45 | --- a/hw/arm/smmuv3.c | ||
46 | +++ b/hw/arm/smmuv3.c | ||
47 | @@ -XXX,XX +XXX,XX @@ | ||
48 | #include "hw/arm/smmuv3.h" | ||
49 | #include "smmuv3-internal.h" | ||
50 | |||
51 | +/** | ||
52 | + * smmuv3_trigger_irq - pulse @irq if enabled and update | ||
53 | + * GERROR register in case of GERROR interrupt | ||
54 | + * | ||
55 | + * @irq: irq type | ||
56 | + * @gerror_mask: mask of gerrors to toggle (relevant if @irq is GERROR) | ||
57 | + */ | ||
58 | +void smmuv3_trigger_irq(SMMUv3State *s, SMMUIrq irq, uint32_t gerror_mask) | ||
59 | +{ | ||
60 | + | ||
61 | + bool pulse = false; | ||
62 | + | ||
63 | + switch (irq) { | ||
64 | + case SMMU_IRQ_EVTQ: | ||
65 | + pulse = smmuv3_eventq_irq_enabled(s); | ||
66 | + break; | ||
67 | + case SMMU_IRQ_PRIQ: | ||
68 | + qemu_log_mask(LOG_UNIMP, "PRI not yet supported\n"); | ||
69 | + break; | ||
70 | + case SMMU_IRQ_CMD_SYNC: | ||
71 | + pulse = true; | ||
72 | + break; | ||
73 | + case SMMU_IRQ_GERROR: | ||
74 | + { | ||
75 | + uint32_t pending = s->gerror ^ s->gerrorn; | ||
76 | + uint32_t new_gerrors = ~pending & gerror_mask; | ||
77 | + | ||
78 | + if (!new_gerrors) { | ||
79 | + /* only toggle non pending errors */ | ||
80 | + return; | ||
81 | + } | ||
82 | + s->gerror ^= new_gerrors; | ||
83 | + trace_smmuv3_write_gerror(new_gerrors, s->gerror); | ||
84 | + | ||
85 | + pulse = smmuv3_gerror_irq_enabled(s); | ||
86 | + break; | ||
87 | + } | ||
88 | + } | ||
89 | + if (pulse) { | ||
90 | + trace_smmuv3_trigger_irq(irq); | ||
91 | + qemu_irq_pulse(s->irq[irq]); | ||
92 | + } | ||
93 | +} | ||
94 | + | ||
95 | +void smmuv3_write_gerrorn(SMMUv3State *s, uint32_t new_gerrorn) | ||
96 | +{ | ||
97 | + uint32_t pending = s->gerror ^ s->gerrorn; | ||
98 | + uint32_t toggled = s->gerrorn ^ new_gerrorn; | ||
99 | + | ||
100 | + if (toggled & ~pending) { | ||
101 | + qemu_log_mask(LOG_GUEST_ERROR, | ||
102 | + "guest toggles non pending errors = 0x%x\n", | ||
103 | + toggled & ~pending); | ||
104 | + } | ||
105 | + | ||
106 | + /* | ||
107 | + * We do not raise any error in case guest toggles bits corresponding | ||
108 | + * to not active IRQs (CONSTRAINED UNPREDICTABLE) | ||
109 | + */ | ||
110 | + s->gerrorn = new_gerrorn; | ||
111 | + | ||
112 | + trace_smmuv3_write_gerrorn(toggled & pending, s->gerrorn); | ||
113 | +} | ||
114 | + | ||
115 | static void smmuv3_init_regs(SMMUv3State *s) | ||
116 | { | 62 | { |
117 | /** | 63 | int i; |
118 | diff --git a/hw/arm/trace-events b/hw/arm/trace-events | 64 | @@ -XXX,XX +XXX,XX @@ int main(int argc, char *argv[]) |
119 | index XXXXXXX..XXXXXXX 100644 | 65 | qtest_add_func("acpi/q35/kvm/xapic", test_acpi_q35_kvm_xapic); |
120 | --- a/hw/arm/trace-events | 66 | qtest_add_func("acpi/q35/kvm/dmar", test_acpi_q35_kvm_dmar); |
121 | +++ b/hw/arm/trace-events | 67 | } |
122 | @@ -XXX,XX +XXX,XX @@ smmu_get_pte(uint64_t baseaddr, int index, uint64_t pteaddr, uint64_t pte) "base | 68 | + qtest_add_func("acpi/q35/viot", test_acpi_q35_viot); |
123 | 69 | } else if (strcmp(arch, "aarch64") == 0) { | |
124 | #hw/arm/smmuv3.c | 70 | if (has_tcg) { |
125 | smmuv3_read_mmio(uint64_t addr, uint64_t val, unsigned size, uint32_t r) "addr: 0x%"PRIx64" val:0x%"PRIx64" size: 0x%x(%d)" | 71 | qtest_add_func("acpi/virt", test_acpi_virt_tcg); |
126 | +smmuv3_trigger_irq(int irq) "irq=%d" | 72 | @@ -XXX,XX +XXX,XX @@ int main(int argc, char *argv[]) |
127 | +smmuv3_write_gerror(uint32_t toggled, uint32_t gerror) "toggled=0x%x, new GERROR=0x%x" | 73 | qtest_add_func("acpi/virt/memhp", test_acpi_virt_tcg_memhp); |
128 | +smmuv3_write_gerrorn(uint32_t acked, uint32_t gerrorn) "acked=0x%x, new GERRORN=0x%x" | 74 | qtest_add_func("acpi/virt/pxb", test_acpi_virt_tcg_pxb); |
75 | qtest_add_func("acpi/virt/oem-fields", test_acpi_oem_fields_virt); | ||
76 | + qtest_add_func("acpi/virt/viot", test_acpi_virt_viot); | ||
77 | } | ||
78 | } | ||
79 | ret = g_test_run(); | ||
129 | -- | 80 | -- |
130 | 2.17.0 | 81 | 2.25.1 |
131 | 82 | ||
132 | 83 | diff view generated by jsdifflib |
New patch | |||
---|---|---|---|
1 | 1 | From: Jean-Philippe Brucker <jean-philippe@linaro.org> | |
2 | |||
3 | Add expected blobs of the VIOT and DSDT table for the VIOT test on the | ||
4 | q35 machine. | ||
5 | |||
6 | Since the test instantiates a virtio device and two PCIe expander | ||
7 | bridges, DSDT.viot has more blocks than the base DSDT. | ||
8 | |||
9 | The VIOT table generated for the q35 test is: | ||
10 | |||
11 | [000h 0000 4] Signature : "VIOT" [Virtual I/O Translation Table] | ||
12 | [004h 0004 4] Table Length : 00000070 | ||
13 | [008h 0008 1] Revision : 00 | ||
14 | [009h 0009 1] Checksum : 3D | ||
15 | [00Ah 0010 6] Oem ID : "BOCHS " | ||
16 | [010h 0016 8] Oem Table ID : "BXPC " | ||
17 | [018h 0024 4] Oem Revision : 00000001 | ||
18 | [01Ch 0028 4] Asl Compiler ID : "BXPC" | ||
19 | [020h 0032 4] Asl Compiler Revision : 00000001 | ||
20 | |||
21 | [024h 0036 2] Node count : 0003 | ||
22 | [026h 0038 2] Node offset : 0030 | ||
23 | [028h 0040 8] Reserved : 0000000000000000 | ||
24 | |||
25 | [030h 0048 1] Type : 03 [VirtIO-PCI IOMMU] | ||
26 | [031h 0049 1] Reserved : 00 | ||
27 | [032h 0050 2] Length : 0010 | ||
28 | |||
29 | [034h 0052 2] PCI Segment : 0000 | ||
30 | [036h 0054 2] PCI BDF number : 0010 | ||
31 | [038h 0056 8] Reserved : 0000000000000000 | ||
32 | |||
33 | [040h 0064 1] Type : 01 [PCI Range] | ||
34 | [041h 0065 1] Reserved : 00 | ||
35 | [042h 0066 2] Length : 0018 | ||
36 | |||
37 | [044h 0068 4] Endpoint start : 00003000 | ||
38 | [048h 0072 2] PCI Segment start : 0000 | ||
39 | [04Ah 0074 2] PCI Segment end : 0000 | ||
40 | [04Ch 0076 2] PCI BDF start : 3000 | ||
41 | [04Eh 0078 2] PCI BDF end : 30FF | ||
42 | [050h 0080 2] Output node : 0030 | ||
43 | [052h 0082 6] Reserved : 000000000000 | ||
44 | |||
45 | [058h 0088 1] Type : 01 [PCI Range] | ||
46 | [059h 0089 1] Reserved : 00 | ||
47 | [05Ah 0090 2] Length : 0018 | ||
48 | |||
49 | [05Ch 0092 4] Endpoint start : 00001000 | ||
50 | [060h 0096 2] PCI Segment start : 0000 | ||
51 | [062h 0098 2] PCI Segment end : 0000 | ||
52 | [064h 0100 2] PCI BDF start : 1000 | ||
53 | [066h 0102 2] PCI BDF end : 10FF | ||
54 | [068h 0104 2] Output node : 0030 | ||
55 | [06Ah 0106 6] Reserved : 000000000000 | ||
56 | |||
57 | And the DSDT diff is: | ||
58 | |||
59 | @@ -XXX,XX +XXX,XX @@ | ||
60 | * | ||
61 | * Disassembling to symbolic ASL+ operators | ||
62 | * | ||
63 | - * Disassembly of tests/data/acpi/q35/DSDT, Fri Dec 10 15:03:08 2021 | ||
64 | + * Disassembly of /tmp/aml-H9Y5D1, Fri Dec 10 15:02:27 2021 | ||
65 | * | ||
66 | * Original Table Header: | ||
67 | * Signature "DSDT" | ||
68 | - * Length 0x00002061 (8289) | ||
69 | + * Length 0x000024B6 (9398) | ||
70 | * Revision 0x01 **** 32-bit table (V1), no 64-bit math support | ||
71 | - * Checksum 0xFA | ||
72 | + * Checksum 0xA7 | ||
73 | * OEM ID "BOCHS " | ||
74 | * OEM Table ID "BXPC " | ||
75 | * OEM Revision 0x00000001 (1) | ||
76 | @@ -XXX,XX +XXX,XX @@ | ||
77 | } | ||
78 | } | ||
79 | |||
80 | + Scope (\_SB) | ||
81 | + { | ||
82 | + Device (PC30) | ||
83 | + { | ||
84 | + Name (_UID, 0x30) // _UID: Unique ID | ||
85 | + Name (_BBN, 0x30) // _BBN: BIOS Bus Number | ||
86 | + Name (_HID, EisaId ("PNP0A08") /* PCI Express Bus */) // _HID: Hardware ID | ||
87 | + Name (_CID, EisaId ("PNP0A03") /* PCI Bus */) // _CID: Compatible ID | ||
88 | + Method (_OSC, 4, NotSerialized) // _OSC: Operating System Capabilities | ||
89 | + { | ||
90 | + CreateDWordField (Arg3, Zero, CDW1) | ||
91 | + If ((Arg0 == ToUUID ("33db4d5b-1ff7-401c-9657-7441c03dd766") /* PCI Host Bridge Device */)) | ||
92 | + { | ||
93 | + CreateDWordField (Arg3, 0x04, CDW2) | ||
94 | + CreateDWordField (Arg3, 0x08, CDW3) | ||
95 | + Local0 = CDW3 /* \_SB_.PC30._OSC.CDW3 */ | ||
96 | + Local0 &= 0x1F | ||
97 | + If ((Arg1 != One)) | ||
98 | + { | ||
99 | + CDW1 |= 0x08 | ||
100 | + } | ||
101 | + | ||
102 | + If ((CDW3 != Local0)) | ||
103 | + { | ||
104 | + CDW1 |= 0x10 | ||
105 | + } | ||
106 | + | ||
107 | + CDW3 = Local0 | ||
108 | + } | ||
109 | + Else | ||
110 | + { | ||
111 | + CDW1 |= 0x04 | ||
112 | + } | ||
113 | + | ||
114 | + Return (Arg3) | ||
115 | + } | ||
116 | + | ||
117 | + Method (_PRT, 0, NotSerialized) // _PRT: PCI Routing Table | ||
118 | + { | ||
119 | + Local0 = Package (0x80){} | ||
120 | + Local1 = Zero | ||
121 | + While ((Local1 < 0x80)) | ||
122 | + { | ||
123 | + Local2 = (Local1 >> 0x02) | ||
124 | + Local3 = ((Local1 + Local2) & 0x03) | ||
125 | + If ((Local3 == Zero)) | ||
126 | + { | ||
127 | + Local4 = Package (0x04) | ||
128 | + { | ||
129 | + Zero, | ||
130 | + Zero, | ||
131 | + LNKD, | ||
132 | + Zero | ||
133 | + } | ||
134 | + } | ||
135 | + | ||
136 | + If ((Local3 == One)) | ||
137 | + { | ||
138 | + Local4 = Package (0x04) | ||
139 | + { | ||
140 | + Zero, | ||
141 | + Zero, | ||
142 | + LNKA, | ||
143 | + Zero | ||
144 | + } | ||
145 | + } | ||
146 | + | ||
147 | + If ((Local3 == 0x02)) | ||
148 | + { | ||
149 | + Local4 = Package (0x04) | ||
150 | + { | ||
151 | + Zero, | ||
152 | + Zero, | ||
153 | + LNKB, | ||
154 | + Zero | ||
155 | + } | ||
156 | + } | ||
157 | + | ||
158 | + If ((Local3 == 0x03)) | ||
159 | + { | ||
160 | + Local4 = Package (0x04) | ||
161 | + { | ||
162 | + Zero, | ||
163 | + Zero, | ||
164 | + LNKC, | ||
165 | + Zero | ||
166 | + } | ||
167 | + } | ||
168 | + | ||
169 | + Local4 [Zero] = ((Local2 << 0x10) | 0xFFFF) | ||
170 | + Local4 [One] = (Local1 & 0x03) | ||
171 | + Local0 [Local1] = Local4 | ||
172 | + Local1++ | ||
173 | + } | ||
174 | + | ||
175 | + Return (Local0) | ||
176 | + } | ||
177 | + | ||
178 | + Name (_CRS, ResourceTemplate () // _CRS: Current Resource Settings | ||
179 | + { | ||
180 | + WordBusNumber (ResourceProducer, MinFixed, MaxFixed, PosDecode, | ||
181 | + 0x0000, // Granularity | ||
182 | + 0x0030, // Range Minimum | ||
183 | + 0x0030, // Range Maximum | ||
184 | + 0x0000, // Translation Offset | ||
185 | + 0x0001, // Length | ||
186 | + ,, ) | ||
187 | + }) | ||
188 | + } | ||
189 | + } | ||
190 | + | ||
191 | + Scope (\_SB) | ||
192 | + { | ||
193 | + Device (PC20) | ||
194 | + { | ||
195 | + Name (_UID, 0x20) // _UID: Unique ID | ||
196 | + Name (_BBN, 0x20) // _BBN: BIOS Bus Number | ||
197 | + Name (_HID, EisaId ("PNP0A08") /* PCI Express Bus */) // _HID: Hardware ID | ||
198 | + Name (_CID, EisaId ("PNP0A03") /* PCI Bus */) // _CID: Compatible ID | ||
199 | + Method (_OSC, 4, NotSerialized) // _OSC: Operating System Capabilities | ||
200 | + { | ||
201 | + CreateDWordField (Arg3, Zero, CDW1) | ||
202 | + If ((Arg0 == ToUUID ("33db4d5b-1ff7-401c-9657-7441c03dd766") /* PCI Host Bridge Device */)) | ||
203 | + { | ||
204 | + CreateDWordField (Arg3, 0x04, CDW2) | ||
205 | + CreateDWordField (Arg3, 0x08, CDW3) | ||
206 | + Local0 = CDW3 /* \_SB_.PC20._OSC.CDW3 */ | ||
207 | + Local0 &= 0x1F | ||
208 | + If ((Arg1 != One)) | ||
209 | + { | ||
210 | + CDW1 |= 0x08 | ||
211 | + } | ||
212 | + | ||
213 | + If ((CDW3 != Local0)) | ||
214 | + { | ||
215 | + CDW1 |= 0x10 | ||
216 | + } | ||
217 | + | ||
218 | + CDW3 = Local0 | ||
219 | + } | ||
220 | + Else | ||
221 | + { | ||
222 | + CDW1 |= 0x04 | ||
223 | + } | ||
224 | + | ||
225 | + Return (Arg3) | ||
226 | + } | ||
227 | + | ||
228 | + Method (_PRT, 0, NotSerialized) // _PRT: PCI Routing Table | ||
229 | + { | ||
230 | + Local0 = Package (0x80){} | ||
231 | + Local1 = Zero | ||
232 | + While ((Local1 < 0x80)) | ||
233 | + { | ||
234 | + Local2 = (Local1 >> 0x02) | ||
235 | + Local3 = ((Local1 + Local2) & 0x03) | ||
236 | + If ((Local3 == Zero)) | ||
237 | + { | ||
238 | + Local4 = Package (0x04) | ||
239 | + { | ||
240 | + Zero, | ||
241 | + Zero, | ||
242 | + LNKD, | ||
243 | + Zero | ||
244 | + } | ||
245 | + } | ||
246 | + | ||
247 | + If ((Local3 == One)) | ||
248 | + { | ||
249 | + Local4 = Package (0x04) | ||
250 | + { | ||
251 | + Zero, | ||
252 | + Zero, | ||
253 | + LNKA, | ||
254 | + Zero | ||
255 | + } | ||
256 | + } | ||
257 | + | ||
258 | + If ((Local3 == 0x02)) | ||
259 | + { | ||
260 | + Local4 = Package (0x04) | ||
261 | + { | ||
262 | + Zero, | ||
263 | + Zero, | ||
264 | + LNKB, | ||
265 | + Zero | ||
266 | + } | ||
267 | + } | ||
268 | + | ||
269 | + If ((Local3 == 0x03)) | ||
270 | + { | ||
271 | + Local4 = Package (0x04) | ||
272 | + { | ||
273 | + Zero, | ||
274 | + Zero, | ||
275 | + LNKC, | ||
276 | + Zero | ||
277 | + } | ||
278 | + } | ||
279 | + | ||
280 | + Local4 [Zero] = ((Local2 << 0x10) | 0xFFFF) | ||
281 | + Local4 [One] = (Local1 & 0x03) | ||
282 | + Local0 [Local1] = Local4 | ||
283 | + Local1++ | ||
284 | + } | ||
285 | + | ||
286 | + Return (Local0) | ||
287 | + } | ||
288 | + | ||
289 | + Name (_CRS, ResourceTemplate () // _CRS: Current Resource Settings | ||
290 | + { | ||
291 | + WordBusNumber (ResourceProducer, MinFixed, MaxFixed, PosDecode, | ||
292 | + 0x0000, // Granularity | ||
293 | + 0x0020, // Range Minimum | ||
294 | + 0x0020, // Range Maximum | ||
295 | + 0x0000, // Translation Offset | ||
296 | + 0x0001, // Length | ||
297 | + ,, ) | ||
298 | + }) | ||
299 | + } | ||
300 | + } | ||
301 | + | ||
302 | + Scope (\_SB) | ||
303 | + { | ||
304 | + Device (PC10) | ||
305 | + { | ||
306 | + Name (_UID, 0x10) // _UID: Unique ID | ||
307 | + Name (_BBN, 0x10) // _BBN: BIOS Bus Number | ||
308 | + Name (_HID, EisaId ("PNP0A08") /* PCI Express Bus */) // _HID: Hardware ID | ||
309 | + Name (_CID, EisaId ("PNP0A03") /* PCI Bus */) // _CID: Compatible ID | ||
310 | + Method (_OSC, 4, NotSerialized) // _OSC: Operating System Capabilities | ||
311 | + { | ||
312 | + CreateDWordField (Arg3, Zero, CDW1) | ||
313 | + If ((Arg0 == ToUUID ("33db4d5b-1ff7-401c-9657-7441c03dd766") /* PCI Host Bridge Device */)) | ||
314 | + { | ||
315 | + CreateDWordField (Arg3, 0x04, CDW2) | ||
316 | + CreateDWordField (Arg3, 0x08, CDW3) | ||
317 | + Local0 = CDW3 /* \_SB_.PC10._OSC.CDW3 */ | ||
318 | + Local0 &= 0x1F | ||
319 | + If ((Arg1 != One)) | ||
320 | + { | ||
321 | + CDW1 |= 0x08 | ||
322 | + } | ||
323 | + | ||
324 | + If ((CDW3 != Local0)) | ||
325 | + { | ||
326 | + CDW1 |= 0x10 | ||
327 | + } | ||
328 | + | ||
329 | + CDW3 = Local0 | ||
330 | + } | ||
331 | + Else | ||
332 | + { | ||
333 | + CDW1 |= 0x04 | ||
334 | + } | ||
335 | + | ||
336 | + Return (Arg3) | ||
337 | + } | ||
338 | + | ||
339 | + Method (_PRT, 0, NotSerialized) // _PRT: PCI Routing Table | ||
340 | + { | ||
341 | + Local0 = Package (0x80){} | ||
342 | + Local1 = Zero | ||
343 | + While ((Local1 < 0x80)) | ||
344 | + { | ||
345 | + Local2 = (Local1 >> 0x02) | ||
346 | + Local3 = ((Local1 + Local2) & 0x03) | ||
347 | + If ((Local3 == Zero)) | ||
348 | + { | ||
349 | + Local4 = Package (0x04) | ||
350 | + { | ||
351 | + Zero, | ||
352 | + Zero, | ||
353 | + LNKD, | ||
354 | + Zero | ||
355 | + } | ||
356 | + } | ||
357 | + | ||
358 | + If ((Local3 == One)) | ||
359 | + { | ||
360 | + Local4 = Package (0x04) | ||
361 | + { | ||
362 | + Zero, | ||
363 | + Zero, | ||
364 | + LNKA, | ||
365 | + Zero | ||
366 | + } | ||
367 | + } | ||
368 | + | ||
369 | + If ((Local3 == 0x02)) | ||
370 | + { | ||
371 | + Local4 = Package (0x04) | ||
372 | + { | ||
373 | + Zero, | ||
374 | + Zero, | ||
375 | + LNKB, | ||
376 | + Zero | ||
377 | + } | ||
378 | + } | ||
379 | + | ||
380 | + If ((Local3 == 0x03)) | ||
381 | + { | ||
382 | + Local4 = Package (0x04) | ||
383 | + { | ||
384 | + Zero, | ||
385 | + Zero, | ||
386 | + LNKC, | ||
387 | + Zero | ||
388 | + } | ||
389 | + } | ||
390 | + | ||
391 | + Local4 [Zero] = ((Local2 << 0x10) | 0xFFFF) | ||
392 | + Local4 [One] = (Local1 & 0x03) | ||
393 | + Local0 [Local1] = Local4 | ||
394 | + Local1++ | ||
395 | + } | ||
396 | + | ||
397 | + Return (Local0) | ||
398 | + } | ||
399 | + | ||
400 | + Name (_CRS, ResourceTemplate () // _CRS: Current Resource Settings | ||
401 | + { | ||
402 | + WordBusNumber (ResourceProducer, MinFixed, MaxFixed, PosDecode, | ||
403 | + 0x0000, // Granularity | ||
404 | + 0x0010, // Range Minimum | ||
405 | + 0x0010, // Range Maximum | ||
406 | + 0x0000, // Translation Offset | ||
407 | + 0x0001, // Length | ||
408 | + ,, ) | ||
409 | + }) | ||
410 | + } | ||
411 | + } | ||
412 | + | ||
413 | Scope (\_SB.PCI0) | ||
414 | { | ||
415 | Name (_CRS, ResourceTemplate () // _CRS: Current Resource Settings | ||
416 | @@ -XXX,XX +XXX,XX @@ | ||
417 | WordBusNumber (ResourceProducer, MinFixed, MaxFixed, PosDecode, | ||
418 | 0x0000, // Granularity | ||
419 | 0x0000, // Range Minimum | ||
420 | - 0x00FF, // Range Maximum | ||
421 | + 0x000F, // Range Maximum | ||
422 | 0x0000, // Translation Offset | ||
423 | - 0x0100, // Length | ||
424 | + 0x0010, // Length | ||
425 | ,, ) | ||
426 | IO (Decode16, | ||
427 | 0x0CF8, // Range Minimum | ||
428 | @@ -XXX,XX +XXX,XX @@ | ||
429 | } | ||
430 | } | ||
431 | |||
432 | + Device (S10) | ||
433 | + { | ||
434 | + Name (_ADR, 0x00020000) // _ADR: Address | ||
435 | + } | ||
436 | + | ||
437 | + Device (S18) | ||
438 | + { | ||
439 | + Name (_ADR, 0x00030000) // _ADR: Address | ||
440 | + } | ||
441 | + | ||
442 | + Device (S20) | ||
443 | + { | ||
444 | + Name (_ADR, 0x00040000) // _ADR: Address | ||
445 | + } | ||
446 | + | ||
447 | + Device (S28) | ||
448 | + { | ||
449 | + Name (_ADR, 0x00050000) // _ADR: Address | ||
450 | + } | ||
451 | + | ||
452 | Method (PCNT, 0, NotSerialized) | ||
453 | { | ||
454 | } | ||
455 | |||
456 | Reviewed-by: Eric Auger <eric.auger@redhat.com> | ||
457 | Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org> | ||
458 | Message-id: 20211210170415.583179-8-jean-philippe@linaro.org | ||
459 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
460 | --- | ||
461 | tests/qtest/bios-tables-test-allowed-diff.h | 2 -- | ||
462 | tests/data/acpi/q35/DSDT.viot | Bin 0 -> 9398 bytes | ||
463 | tests/data/acpi/q35/VIOT.viot | Bin 0 -> 112 bytes | ||
464 | 3 files changed, 2 deletions(-) | ||
465 | |||
466 | diff --git a/tests/qtest/bios-tables-test-allowed-diff.h b/tests/qtest/bios-tables-test-allowed-diff.h | ||
467 | index XXXXXXX..XXXXXXX 100644 | ||
468 | --- a/tests/qtest/bios-tables-test-allowed-diff.h | ||
469 | +++ b/tests/qtest/bios-tables-test-allowed-diff.h | ||
470 | @@ -XXX,XX +XXX,XX @@ | ||
471 | /* List of comma-separated changed AML files to ignore */ | ||
472 | "tests/data/acpi/virt/VIOT", | ||
473 | -"tests/data/acpi/q35/DSDT.viot", | ||
474 | -"tests/data/acpi/q35/VIOT.viot", | ||
475 | diff --git a/tests/data/acpi/q35/DSDT.viot b/tests/data/acpi/q35/DSDT.viot | ||
476 | index XXXXXXX..XXXXXXX 100644 | ||
477 | GIT binary patch | ||
478 | literal 9398 | ||
479 | zcmeHNO>7&-8J*>iv|O&FB}G~Oi$yp||57BBoWHhc5OS9yDTx$CQgH$r;8Idr*-4Q_ | ||
480 | z5(9Az1F`}niVsB-)<KW7p`g9Br(A2Gm-gmc1N78GFS!;)e2V(MnH_0{q<{#yMgn&C | ||
481 | zn|*J-d9yqFhO_H6z19~`FlPL*u<DkZ*}|)JH;X@mF-FI<cPg<fti9tEN*yB^i5czN | ||
482 | zNq&q?!OZ;BE3B7{KWzJ-`Tn~f`9?Qj8~2^N8{Oc8J%57{==w%rS#;nOCp*nTr@iZ1 | ||
483 | zb+?i;JLQUJ=O0?8*>S~D)a>NF1~WVB6^~_B#yhJ`H+JU@=6aXs`?Yv)J2h=N?drcS | ||
484 | zeLZ*n<<Bm^n}6`jfBx#u8&(W}1?)}iF9o#mZ~E2+zwdn7yK3AbIzKnxpZ>JRPm3~# | ||
485 | z&ICS{+_OayRW-l=Mtk=~uaS3o8z<_udd|(wqg`&JnVPfCe>BUOO`Su3e>pff_^UW% | ||
486 | z&JE^NO`)=Amg~iqRB1pPscP?(>#ZuY8GHCmlEvD$9g3%4Db~Dfz2SATnddvrR-Oe^ | ||
487 | z;s;dJec!hnzi)ri^I6YN9vtkm{^TdUF8h7gX8-<Qe4p)GQ=)AtYx2VcwdLVAEXEjG | ||
488 | z^Mj|UHPqkj-LsWuzQem1>F3atdZn=zv3$#RmZzSHN+6-yyU#8cJb=YDilX&sl}vNm | ||
489 | znkgAR^O<3kj4if>{ly5fwRfMWuC5=lrlvKPX~i#654Cp}R_d*JS$9laZ$ra6)<ns8 | ||
490 | zFZy28G%xP(nit&F>LDi%G<tIc=TY=gl$jSD&Uv!Yat~XR46h%rI$!}a%!|xG7u8Zn | ||
491 | zeY8_|n=K>xz_v_W8VX$W-Fg-qFWcT}7MCyz{%%{ia7hZ>Law-k6NOr}VI&_48U=2l | ||
492 | zwqDKFE8eTwwozDdms#e?x?5a|v>&JF;2_v0L~z5n%BYU^52<*cWuD4|GYUm@1+?)) | ||
493 | zte^45>Rz)t*<T5V#={r>@t@{%?^i#W{i=HAZ*Dc9y59Va-+#P!jrGs;u38a{fLr`N | ||
494 | zvT@rUu>DljxJ?^&Z?-?vyJn3C>3D=qux{Y*bs5|5n)Qmi$TD^Zdn4GU$ocJS2Hh-< | ||
495 | z`xPI^^+v0nUVdjMos8k`WGl7hA`{03ju%<lrgAHSpd^DRf-*}_#Ly0mB!LSfVgWcQ | ||
496 | z&T$@~G9)JI=hz5m0vkrel+Xy{Oh7pkAu-V!j*W7rY(bO}Q$nMH2`FbGB&N)QaV4<4 | ||
497 | zo)~9JXiP9=;}NPl<C@MmXG&;XFlFNrsyfFsonxFSp<}vEgsRSQP3O3#b6nSnP}ON_ | ||
498 | zI!#Tdsp~|j>ckUB>FI=~GokB5sOq#dotCE4(sd$KbtW~PNlj-`*NIToiD#j5J#9^= | ||
499 | zt?NXn>YUJYPG~wObe#xQos*i*NloXZt`niEb4t@WrRki~bs|)CI+{*L)9L6s5vn>< | ||
500 | zn$DD_Go|Z9sOn5>I@6lYw5}7Os&iV?Ij!lO)^#FOb!If38BJ$K*NIToIiu;E(R9w} | ||
501 | zIuWWmPiZ<&X*y5oIuWWmF_XaEC!a&Jn$B5WCqh-{X-(&8P3LJ{Cqh-{8P3dyPr@^t | ||
502 | zSqL9?X9Uwd3W@23*s~h*tj0X6GZCuHa~kuU#yqDp5vt7d8uPryJg+kms?5hU=3^T3 | ||
503 | zF`bD}WnSP+=`t5MQ$FJ_2&Q~+BP6E0f^%BVIW6a$o)e+SX~IDBih-7z6{O~7YTy`& | ||
504 | zLjy&Cv?7QikV#>n0>>@MV8oK`Gmun34-FKdlm-J8SZSaNlnhir4-FI{S|bfqV8e)V | ||
505 | zss<{chX#reE#g=hsKAC%sF6d-Km}BWs!kZFsFpKfpbC@>6rprQGEjt4Ck#|zITHq| | ||
506 | zK*>M_l;<P^MJRQ`Kn0dFVW0|>3{*fllMEE0)CmI>Sk8ojDo`>|0p(0GP=xY&!axO< | ||
507 | zGhv_#lnhirIg<<&q0|Wj6<E%MfhtfkPyyvkGEjt4Ck#|zITHq|K*>M_lrzad5lWpf | ||
508 | zP=V!47^ngz0~JutBm+e#b;3XemNQ|X3X}{~Ksl2P6rt1!0~J`#gn=qhGEf2KOfpb} | ||
509 | zQYQ>lU^x>8szAv=1(Y+%KoLrvFi?TzOc<yFB?A>u&LjgxD0RX>1(q{mpbC@>R6seC | ||
510 | z3>2Z%2?G^a&V+#~P%=;f<xDbAgi<FARA4z12C6{GKn0XD$v_cGoiI>=<xCi;0wn_# | ||
511 | zP|hR+MJRQ`Kn0dFVW0|>3{*fllMEE0)CmI>Sk8ojDo`>|0p(0GP=rz^3{+q_69%e4 | ||
512 | z$v_2^Gs!>^N}VuJf#pmXr~)Me6;RG314Srx!axxz28u{EP=u<1B2)}iVZuNaCK;&0 | ||
513 | zBm-5LFi?dF167!0pbC==RAItE6($T+VUmF=Ofpb~2?JG_Fi?d_2C6X0Kouqo6p_5T | ||
514 | zFi=FeV!SiSKoR0H$dH(_Z(*Q_WZ%L-5y`$K14StNmJAdjmWs}HV4<vU_xO+1efmLq | ||
515 | zZ;W>N_U)fP6Qy6Nw5mbt9Y(#emWSi66=>tq#xoh#Ue=0qyhxi8ZOUe5y0V7VfPUhp | ||
516 | zwX=;ymc+i5%sg9Ja~lZ&8oAV@mHc>&CHP9v4R(jhtT?un;O4e9#pno)Xkh7OWgK&a | ||
517 | zyj=3Iv0OuoK_;5rOr5f(Kb~ZXDBO+V`OWYo#_C08imwChQxnjdd?wZLDou8aj;$SD | ||
518 | zGDYiA3<$Tu<JnHL(KPOChi#zrR32t83}naR$+ym4P_h?z_5#|cW-nw$XD_sOtE62l | ||
519 | zrD3@*)NVyiklt0&yF9%+klsBey&I<Y2E<!f(E8TuJte)z(|ZHyy<^gQVfx}=`q&B5 | ||
520 | z7nSryp1wGczIaUfVwiq$Fn#<4=@*ssi#+|}K>EdF(l3VTOM~ghPLRH&q%ZOGrGfON | ||
521 | zW73zx^yR_y<0nX8R??Sw`tm^f@-gYlNFSp|*<gA{q?Zp5Oe-+l#rmyYmKozi9y=P> | ||
522 | zVReJU*h=ZuVXiS$ohTbw-O#v9>(yZbGE|)?8(H1ZIKvV!jWa0>vy!3eMA^vdhQ>`s | ||
523 | zuMSg{q3T50$m)j1!HixV<}X9liL#N^4c*tL^y)CF8LCc{jjV3yKAqL8!%SzWI#H%q | ||
524 | z=bSrQ&)%JCRttF5g4Zf`6l?y@>PzD7MA^D>wBlcH6r1ucwJ<p0O%rZ?JzIY3-QdmZ | ||
525 | zzs|n>`a5r3e|z)wcUaqS>nqFQ-8x}eCF4u`OWUxqst-@1rSmUs%WmKP5e0dcb?e2N | ||
526 | z;Z|x*!);VwF|Yuhqs^khqOM!@u*jY!WYldISF(V6`BoNd&6Qfk3>X#SuD^7J>p_D= | ||
527 | zBPa51y^_n#=cpOt#Zf$ya$Ae9Mfz56n|<i!a=ELS@)%a{^NIH3SDuN<R~sah1km#P | ||
528 | zU@?*f%<rG=4W1wgfi;C?_n|W@%lm$&8YfvNOJodIg&IcIpIJQRHr<+ej11GQ6)&eF | ||
529 | z2Lam*jIH}#y0>KnY%4JQfOYS$*uU%f#@$U6`N8I3N-lV?5ErFCdv~xDmu2(wexld4 | ||
530 | z4v^;aVAT2k6GJ^m*FD(Wqc(Qg^)6a<?}h$zLoj}4;PP!+(O{@!a1y-hoAhF_7!z+6 | ||
531 | zslpAmNtYbjHrw-~#SPVk_FUf>-Obg6yV`8o$8_`PyJe_;bY5_EMBfBfWU!Q=*9HsG | ||
532 | z%_Cda{@_Krr!oHVhv9+y+T5qR8zZ2aZ>5r!$*|f$^U%yBUYfR&B!+EYy_PwL!BeUi | ||
533 | zJH^}r3r9Q+B)X@Z)fk=P13w&7x#wBtXTZ)g>WITPg5r&pQc!nmyrmk#S(>>b9xnNr | ||
534 | zx_b#v9Xv-Y><Wb%?S^0Xe&<)bbKl_=Z|3C$tf|F<bYzE*mfHB;uC)`q-?buaBe?l? | ||
535 | zcLTpK*k<49Z32`K?|nSBMFqxTK^_IE-li2fEGdK~(ZdoKBl6ab4a;Hler#`xvEXJG | ||
536 | zb?<E%EZExfX>jcOVhS*0rS~RS1dA#xhkv@Nct@#q?LyeKS<$uFec!bw>{@uu$gZ6a | ||
537 | zyVen1i{1BKd%~`D7|m$;U0a<I*3I7%^N%N%lGYdU_GS!gaR8T$NA@GzFi~z`l7hdl | ||
538 | zarZy6590|88pi(1zq;V(>38zM0sT&<zX;R5$1w3;`_JMG`;&I&0Y23DMx1%@(w(R9 | ||
539 | z4M$j;D5J+Gy%fijRQsctzFKf&cv|BAz#YLq3CZJWDdtL4u1u1|mkdcUp7|sxJC+?Y | ||
540 | z_@@s`v3j}Q7*z>6X~cwUxUL8G1KT)_XTp!KAbs;vCp{K3&~_X@+ew=-D}v`2MbFV0 | ||
541 | zQsVsL=rXi-pI*G|iiz;VTCutgUs)hDzV1+4?8KcoP3xROf<M%qC6lgVdpFt4<-|uM | ||
542 | z=#rl_b1#YjSIl6Toj2z_hOZcKupkdE(LozC(fN=FY(x|sk)ym|;Rq2E1xJWD%Z!ol | ||
543 | Gu>S+TT-130 | ||
544 | |||
545 | literal 0 | ||
546 | HcmV?d00001 | ||
547 | |||
548 | diff --git a/tests/data/acpi/q35/VIOT.viot b/tests/data/acpi/q35/VIOT.viot | ||
549 | index XXXXXXX..XXXXXXX 100644 | ||
550 | GIT binary patch | ||
551 | literal 112 | ||
552 | zcmWIZ^baXu00LVle`k+i1*eDrX9XZ&1PX!JAex!M0Hgv8m>C3sGzdcgBZCA3T-xBj | ||
553 | Q0Zb)W9Hva*zW_`e0M!8s0RR91 | ||
554 | |||
555 | literal 0 | ||
556 | HcmV?d00001 | ||
557 | |||
558 | -- | ||
559 | 2.25.1 | ||
560 | |||
561 | diff view generated by jsdifflib |
1 | From: Thomas Huth <thuth@redhat.com> | 1 | From: Jean-Philippe Brucker <jean-philippe@linaro.org> |
---|---|---|---|
2 | 2 | ||
3 | When running omap1/2 or pxa2xx based ARM machines with -nodefaults, | 3 | The VIOT blob contains the following: |
4 | they bail out immediately complaining about a "missing SecureDigital | ||
5 | device". That's not how the "default" devices in vl.c are meant to | ||
6 | work - it should be possible for a board to also start up without | ||
7 | default devices. So let's turn the error message and exit() into | ||
8 | a warning instead. | ||
9 | 4 | ||
10 | Signed-off-by: Thomas Huth <thuth@redhat.com> | 5 | [000h 0000 4] Signature : "VIOT" [Virtual I/O Translation Table] |
11 | Message-id: 1525326811-3233-1-git-send-email-thuth@redhat.com | 6 | [004h 0004 4] Table Length : 00000058 |
12 | Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org> | 7 | [008h 0008 1] Revision : 00 |
13 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 8 | [009h 0009 1] Checksum : 66 |
9 | [00Ah 0010 6] Oem ID : "BOCHS " | ||
10 | [010h 0016 8] Oem Table ID : "BXPC " | ||
11 | [018h 0024 4] Oem Revision : 00000001 | ||
12 | [01Ch 0028 4] Asl Compiler ID : "BXPC" | ||
13 | [020h 0032 4] Asl Compiler Revision : 00000001 | ||
14 | |||
15 | [024h 0036 2] Node count : 0002 | ||
16 | [026h 0038 2] Node offset : 0030 | ||
17 | [028h 0040 8] Reserved : 0000000000000000 | ||
18 | |||
19 | [030h 0048 1] Type : 03 [VirtIO-PCI IOMMU] | ||
20 | [031h 0049 1] Reserved : 00 | ||
21 | [032h 0050 2] Length : 0010 | ||
22 | |||
23 | [034h 0052 2] PCI Segment : 0000 | ||
24 | [036h 0054 2] PCI BDF number : 0008 | ||
25 | [038h 0056 8] Reserved : 0000000000000000 | ||
26 | |||
27 | [040h 0064 1] Type : 01 [PCI Range] | ||
28 | [041h 0065 1] Reserved : 00 | ||
29 | [042h 0066 2] Length : 0018 | ||
30 | |||
31 | [044h 0068 4] Endpoint start : 00000000 | ||
32 | [048h 0072 2] PCI Segment start : 0000 | ||
33 | [04Ah 0074 2] PCI Segment end : 0000 | ||
34 | [04Ch 0076 2] PCI BDF start : 0000 | ||
35 | [04Eh 0078 2] PCI BDF end : 00FF | ||
36 | [050h 0080 2] Output node : 0030 | ||
37 | [052h 0082 6] Reserved : 000000000000 | ||
38 | |||
39 | Acked-by: Ani Sinha <ani@anisinha.ca> | ||
40 | Reviewed-by: Eric Auger <eric.auger@redhat.com> | ||
41 | Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org> | ||
42 | Message-id: 20211210170415.583179-9-jean-philippe@linaro.org | ||
14 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 43 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
15 | --- | 44 | --- |
16 | hw/arm/omap1.c | 8 ++++---- | 45 | tests/qtest/bios-tables-test-allowed-diff.h | 1 - |
17 | hw/arm/omap2.c | 8 ++++---- | 46 | tests/data/acpi/virt/VIOT | Bin 0 -> 88 bytes |
18 | hw/arm/pxa2xx.c | 15 +++++++-------- | 47 | 2 files changed, 1 deletion(-) |
19 | 3 files changed, 15 insertions(+), 16 deletions(-) | ||
20 | 48 | ||
21 | diff --git a/hw/arm/omap1.c b/hw/arm/omap1.c | 49 | diff --git a/tests/qtest/bios-tables-test-allowed-diff.h b/tests/qtest/bios-tables-test-allowed-diff.h |
22 | index XXXXXXX..XXXXXXX 100644 | 50 | index XXXXXXX..XXXXXXX 100644 |
23 | --- a/hw/arm/omap1.c | 51 | --- a/tests/qtest/bios-tables-test-allowed-diff.h |
24 | +++ b/hw/arm/omap1.c | 52 | +++ b/tests/qtest/bios-tables-test-allowed-diff.h |
25 | @@ -XXX,XX +XXX,XX @@ | 53 | @@ -1,2 +1 @@ |
26 | #include "hw/arm/soc_dma.h" | 54 | /* List of comma-separated changed AML files to ignore */ |
27 | #include "sysemu/block-backend.h" | 55 | -"tests/data/acpi/virt/VIOT", |
28 | #include "sysemu/blockdev.h" | 56 | diff --git a/tests/data/acpi/virt/VIOT b/tests/data/acpi/virt/VIOT |
29 | +#include "sysemu/qtest.h" | ||
30 | #include "qemu/range.h" | ||
31 | #include "hw/sysbus.h" | ||
32 | #include "qemu/cutils.h" | ||
33 | @@ -XXX,XX +XXX,XX @@ struct omap_mpu_state_s *omap310_mpu_init(MemoryRegion *system_memory, | ||
34 | omap_findclk(s, "dpll3")); | ||
35 | |||
36 | dinfo = drive_get(IF_SD, 0, 0); | ||
37 | - if (!dinfo) { | ||
38 | - error_report("missing SecureDigital device"); | ||
39 | - exit(1); | ||
40 | + if (!dinfo && !qtest_enabled()) { | ||
41 | + warn_report("missing SecureDigital device"); | ||
42 | } | ||
43 | s->mmc = omap_mmc_init(0xfffb7800, system_memory, | ||
44 | - blk_by_legacy_dinfo(dinfo), | ||
45 | + dinfo ? blk_by_legacy_dinfo(dinfo) : NULL, | ||
46 | qdev_get_gpio_in(s->ih[1], OMAP_INT_OQN), | ||
47 | &s->drq[OMAP_DMA_MMC_TX], | ||
48 | omap_findclk(s, "mmc_ck")); | ||
49 | diff --git a/hw/arm/omap2.c b/hw/arm/omap2.c | ||
50 | index XXXXXXX..XXXXXXX 100644 | 57 | index XXXXXXX..XXXXXXX 100644 |
51 | --- a/hw/arm/omap2.c | 58 | GIT binary patch |
52 | +++ b/hw/arm/omap2.c | 59 | literal 88 |
53 | @@ -XXX,XX +XXX,XX @@ | 60 | zcmWIZ^bd((0D?3pe`k+i1*eDrX9XZ&1PX!JAexE60Hgv8m>C3sGzXN&z`)2L0cSHX |
54 | #include "cpu.h" | 61 | I{D-Rq0Q5fy0RR91 |
55 | #include "sysemu/block-backend.h" | 62 | |
56 | #include "sysemu/blockdev.h" | 63 | literal 0 |
57 | +#include "sysemu/qtest.h" | 64 | HcmV?d00001 |
58 | #include "hw/boards.h" | 65 | |
59 | #include "hw/hw.h" | ||
60 | #include "hw/arm/arm.h" | ||
61 | @@ -XXX,XX +XXX,XX @@ struct omap_mpu_state_s *omap2420_mpu_init(MemoryRegion *sysmem, | ||
62 | s->drq[OMAP24XX_DMA_GPMC]); | ||
63 | |||
64 | dinfo = drive_get(IF_SD, 0, 0); | ||
65 | - if (!dinfo) { | ||
66 | - error_report("missing SecureDigital device"); | ||
67 | - exit(1); | ||
68 | + if (!dinfo && !qtest_enabled()) { | ||
69 | + warn_report("missing SecureDigital device"); | ||
70 | } | ||
71 | s->mmc = omap2_mmc_init(omap_l4tao(s->l4, 9), | ||
72 | - blk_by_legacy_dinfo(dinfo), | ||
73 | + dinfo ? blk_by_legacy_dinfo(dinfo) : NULL, | ||
74 | qdev_get_gpio_in(s->ih[0], OMAP_INT_24XX_MMC_IRQ), | ||
75 | &s->drq[OMAP24XX_DMA_MMC1_TX], | ||
76 | omap_findclk(s, "mmc_fclk"), omap_findclk(s, "mmc_iclk")); | ||
77 | diff --git a/hw/arm/pxa2xx.c b/hw/arm/pxa2xx.c | ||
78 | index XXXXXXX..XXXXXXX 100644 | ||
79 | --- a/hw/arm/pxa2xx.c | ||
80 | +++ b/hw/arm/pxa2xx.c | ||
81 | @@ -XXX,XX +XXX,XX @@ | ||
82 | #include "chardev/char-fe.h" | ||
83 | #include "sysemu/block-backend.h" | ||
84 | #include "sysemu/blockdev.h" | ||
85 | +#include "sysemu/qtest.h" | ||
86 | #include "qemu/cutils.h" | ||
87 | |||
88 | static struct { | ||
89 | @@ -XXX,XX +XXX,XX @@ PXA2xxState *pxa270_init(MemoryRegion *address_space, | ||
90 | s->gpio = pxa2xx_gpio_init(0x40e00000, s->cpu, s->pic, 121); | ||
91 | |||
92 | dinfo = drive_get(IF_SD, 0, 0); | ||
93 | - if (!dinfo) { | ||
94 | - error_report("missing SecureDigital device"); | ||
95 | - exit(1); | ||
96 | + if (!dinfo && !qtest_enabled()) { | ||
97 | + warn_report("missing SecureDigital device"); | ||
98 | } | ||
99 | s->mmc = pxa2xx_mmci_init(address_space, 0x41100000, | ||
100 | - blk_by_legacy_dinfo(dinfo), | ||
101 | + dinfo ? blk_by_legacy_dinfo(dinfo) : NULL, | ||
102 | qdev_get_gpio_in(s->pic, PXA2XX_PIC_MMC), | ||
103 | qdev_get_gpio_in(s->dma, PXA2XX_RX_RQ_MMCI), | ||
104 | qdev_get_gpio_in(s->dma, PXA2XX_TX_RQ_MMCI)); | ||
105 | @@ -XXX,XX +XXX,XX @@ PXA2xxState *pxa255_init(MemoryRegion *address_space, unsigned int sdram_size) | ||
106 | s->gpio = pxa2xx_gpio_init(0x40e00000, s->cpu, s->pic, 85); | ||
107 | |||
108 | dinfo = drive_get(IF_SD, 0, 0); | ||
109 | - if (!dinfo) { | ||
110 | - error_report("missing SecureDigital device"); | ||
111 | - exit(1); | ||
112 | + if (!dinfo && !qtest_enabled()) { | ||
113 | + warn_report("missing SecureDigital device"); | ||
114 | } | ||
115 | s->mmc = pxa2xx_mmci_init(address_space, 0x41100000, | ||
116 | - blk_by_legacy_dinfo(dinfo), | ||
117 | + dinfo ? blk_by_legacy_dinfo(dinfo) : NULL, | ||
118 | qdev_get_gpio_in(s->pic, PXA2XX_PIC_MMC), | ||
119 | qdev_get_gpio_in(s->dma, PXA2XX_RX_RQ_MMCI), | ||
120 | qdev_get_gpio_in(s->dma, PXA2XX_TX_RQ_MMCI)); | ||
121 | -- | 66 | -- |
122 | 2.17.0 | 67 | 2.25.1 |
123 | 68 | ||
124 | 69 | diff view generated by jsdifflib |