1 | target-arm queue. This has the "plumb txattrs through various | 1 | A grab-bag of minor stuff for the end of the year. My to-review |
---|---|---|---|
2 | bits of exec.c" patches, and a collection of bug fixes from | 2 | queue is not empty, but it it at least in single figures... |
3 | various people. | ||
4 | 3 | ||
5 | thanks | ||
6 | -- PMM | 4 | -- PMM |
7 | 5 | ||
6 | The following changes since commit 5bfbd8170ce7acb98a1834ff49ed7340b0837144: | ||
8 | 7 | ||
9 | 8 | Merge remote-tracking branch 'remotes/vivier2/tags/trivial-branch-for-6.0-pull-request' into staging (2020-12-14 20:32:38 +0000) | |
10 | The following changes since commit a3ac12fba028df90f7b3dbec924995c126c41022: | ||
11 | |||
12 | Merge remote-tracking branch 'remotes/ehabkost/tags/numa-next-pull-request' into staging (2018-05-31 11:12:36 +0100) | ||
13 | 9 | ||
14 | are available in the Git repository at: | 10 | are available in the Git repository at: |
15 | 11 | ||
16 | git://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20180531 | 12 | https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20201215 |
17 | 13 | ||
18 | for you to fetch changes up to 49d1dca0520ea71bc21867fab6647f474fcf857b: | 14 | for you to fetch changes up to 23af268566069183285bebbdf95b1b37cb7c0942: |
19 | 15 | ||
20 | KVM: GIC: Fix memory leak due to calling kvm_init_irq_routing twice (2018-05-31 14:52:53 +0100) | 16 | hw/block/m25p80: Fix Numonyx fast read dummy cycle count (2020-12-15 13:39:30 +0000) |
21 | 17 | ||
22 | ---------------------------------------------------------------- | 18 | ---------------------------------------------------------------- |
23 | target-arm queue: | 19 | target-arm queue: |
24 | * target/arm: Honour FPCR.FZ in FRECPX | 20 | * gdbstub: Correct misparsing of vCont C/S requests |
25 | * MAINTAINERS: Add entries for newer MPS2 boards and devices | 21 | * openrisc: Move pic_cpu code into CPU object proper |
26 | * hw/intc/arm_gicv3: Fix APxR<n> register dispatching | 22 | * nios2: Move IIC code into CPU object proper |
27 | * arm_gicv3_kvm: fix bug in writing zero bits back to the in-kernel | 23 | * Improve reporting of ROM overlap errors |
28 | GIC state | 24 | * xlnx-versal: Add USB support |
29 | * tcg: Fix helper function vs host abi for float16 | 25 | * hw/misc/zynq_slcr: Avoid #DIV/0! error |
30 | * arm: fix qemu crash on startup with -bios option | 26 | * Numonyx: Fix dummy cycles and check for SPI mode on cmds |
31 | * arm: fix malloc type mismatch | ||
32 | * xlnx-zdma: Correct mem leaks and memset to zero on desc unaligned errors | ||
33 | * Correct CPACR reset value for v7 cores | ||
34 | * memory.h: Improve IOMMU related documentation | ||
35 | * exec: Plumb transaction attributes through various functions in | ||
36 | preparation for allowing IOMMUs to see them | ||
37 | * vmstate.h: Provide VMSTATE_BOOL_SUB_ARRAY | ||
38 | * ARM: ACPI: Fix use-after-free due to memory realloc | ||
39 | * KVM: GIC: Fix memory leak due to calling kvm_init_irq_routing twice | ||
40 | 27 | ||
41 | ---------------------------------------------------------------- | 28 | ---------------------------------------------------------------- |
42 | Francisco Iglesias (1): | 29 | Joe Komlodi (4): |
43 | xlnx-zdma: Correct mem leaks and memset to zero on desc unaligned errors | 30 | hw/block/m25p80: Make Numonyx config field names more accurate |
31 | hw/block/m25p80: Fix when VCFG XIP bit is set for Numonyx | ||
32 | hw/block/m25p80: Check SPI mode before running some Numonyx commands | ||
33 | hw/block/m25p80: Fix Numonyx fast read dummy cycle count | ||
44 | 34 | ||
45 | Igor Mammedov (1): | 35 | Peter Maydell (11): |
46 | arm: fix qemu crash on startup with -bios option | 36 | gdbstub: Correct misparsing of vCont C/S requests |
37 | hw/openrisc/openrisc_sim: Use IRQ splitter when connecting IRQ to multiple CPUs | ||
38 | hw/openrisc/openrisc_sim: Abstract out "get IRQ x of CPU y" | ||
39 | target/openrisc: Move pic_cpu code into CPU object proper | ||
40 | target/nios2: Move IIC code into CPU object proper | ||
41 | target/nios2: Move nios2_check_interrupts() into target/nios2 | ||
42 | target/nios2: Use deposit32() to update ipending register | ||
43 | hw/core/loader.c: Track last-seen ROM in rom_check_and_register_reset() | ||
44 | hw/core/loader.c: Improve reporting of ROM overlap errors | ||
45 | elf_ops.h: Don't truncate name of the ROM blobs we create | ||
46 | elf_ops.h: Be more verbose with ROM blob names | ||
47 | 47 | ||
48 | Jan Kiszka (1): | 48 | Philippe Mathieu-Daudé (1): |
49 | hw/intc/arm_gicv3: Fix APxR<n> register dispatching | 49 | hw/misc/zynq_slcr: Avoid #DIV/0! error |
50 | 50 | ||
51 | Paolo Bonzini (1): | 51 | Sai Pavan Boddu (2): |
52 | arm: fix malloc type mismatch | 52 | usb: Add versal-usb2-ctrl-regs module |
53 | usb: xlnx-usb-subsystem: Add xilinx usb subsystem | ||
53 | 54 | ||
54 | Peter Maydell (17): | 55 | Vikram Garhwal (2): |
55 | target/arm: Honour FPCR.FZ in FRECPX | 56 | usb: Add DWC3 model |
56 | MAINTAINERS: Add entries for newer MPS2 boards and devices | 57 | arm: xlnx-versal: Connect usb to virt-versal |
57 | Correct CPACR reset value for v7 cores | ||
58 | memory.h: Improve IOMMU related documentation | ||
59 | Make tb_invalidate_phys_addr() take a MemTxAttrs argument | ||
60 | Make address_space_translate{, _cached}() take a MemTxAttrs argument | ||
61 | Make address_space_map() take a MemTxAttrs argument | ||
62 | Make address_space_access_valid() take a MemTxAttrs argument | ||
63 | Make flatview_extend_translation() take a MemTxAttrs argument | ||
64 | Make memory_region_access_valid() take a MemTxAttrs argument | ||
65 | Make MemoryRegion valid.accepts callback take a MemTxAttrs argument | ||
66 | Make flatview_access_valid() take a MemTxAttrs argument | ||
67 | Make flatview_translate() take a MemTxAttrs argument | ||
68 | Make address_space_get_iotlb_entry() take a MemTxAttrs argument | ||
69 | Make flatview_do_translate() take a MemTxAttrs argument | ||
70 | Make address_space_translate_iommu take a MemTxAttrs argument | ||
71 | vmstate.h: Provide VMSTATE_BOOL_SUB_ARRAY | ||
72 | 58 | ||
73 | Richard Henderson (1): | 59 | include/hw/arm/xlnx-versal.h | 9 + |
74 | tcg: Fix helper function vs host abi for float16 | 60 | include/hw/elf_ops.h | 5 +- |
61 | include/hw/usb/hcd-dwc3.h | 55 +++ | ||
62 | include/hw/usb/xlnx-usb-subsystem.h | 45 ++ | ||
63 | include/hw/usb/xlnx-versal-usb2-ctrl-regs.h | 45 ++ | ||
64 | target/nios2/cpu.h | 3 - | ||
65 | target/openrisc/cpu.h | 1 - | ||
66 | gdbstub.c | 2 +- | ||
67 | hw/arm/xlnx-versal-virt.c | 55 +++ | ||
68 | hw/arm/xlnx-versal.c | 26 ++ | ||
69 | hw/block/m25p80.c | 158 +++++-- | ||
70 | hw/core/loader.c | 67 ++- | ||
71 | hw/intc/nios2_iic.c | 95 ---- | ||
72 | hw/misc/zynq_slcr.c | 5 + | ||
73 | hw/nios2/10m50_devboard.c | 13 +- | ||
74 | hw/nios2/cpu_pic.c | 67 --- | ||
75 | hw/openrisc/openrisc_sim.c | 46 +- | ||
76 | hw/openrisc/pic_cpu.c | 61 --- | ||
77 | hw/usb/hcd-dwc3.c | 689 ++++++++++++++++++++++++++++ | ||
78 | hw/usb/xlnx-usb-subsystem.c | 94 ++++ | ||
79 | hw/usb/xlnx-versal-usb2-ctrl-regs.c | 229 +++++++++ | ||
80 | softmmu/vl.c | 1 - | ||
81 | target/nios2/cpu.c | 29 ++ | ||
82 | target/nios2/op_helper.c | 9 + | ||
83 | target/openrisc/cpu.c | 32 ++ | ||
84 | MAINTAINERS | 1 - | ||
85 | hw/intc/meson.build | 1 - | ||
86 | hw/nios2/meson.build | 2 +- | ||
87 | hw/openrisc/Kconfig | 1 + | ||
88 | hw/openrisc/meson.build | 2 +- | ||
89 | hw/usb/Kconfig | 10 + | ||
90 | hw/usb/meson.build | 3 + | ||
91 | 32 files changed, 1557 insertions(+), 304 deletions(-) | ||
92 | create mode 100644 include/hw/usb/hcd-dwc3.h | ||
93 | create mode 100644 include/hw/usb/xlnx-usb-subsystem.h | ||
94 | create mode 100644 include/hw/usb/xlnx-versal-usb2-ctrl-regs.h | ||
95 | delete mode 100644 hw/intc/nios2_iic.c | ||
96 | delete mode 100644 hw/nios2/cpu_pic.c | ||
97 | delete mode 100644 hw/openrisc/pic_cpu.c | ||
98 | create mode 100644 hw/usb/hcd-dwc3.c | ||
99 | create mode 100644 hw/usb/xlnx-usb-subsystem.c | ||
100 | create mode 100644 hw/usb/xlnx-versal-usb2-ctrl-regs.c | ||
75 | 101 | ||
76 | Shannon Zhao (3): | ||
77 | arm_gicv3_kvm: increase clroffset accordingly | ||
78 | ARM: ACPI: Fix use-after-free due to memory realloc | ||
79 | KVM: GIC: Fix memory leak due to calling kvm_init_irq_routing twice | ||
80 | |||
81 | include/exec/exec-all.h | 5 +- | ||
82 | include/exec/helper-head.h | 2 +- | ||
83 | include/exec/memory-internal.h | 3 +- | ||
84 | include/exec/memory.h | 128 +++++++++++++++++++++++++++++++++++------ | ||
85 | include/migration/vmstate.h | 3 + | ||
86 | include/sysemu/dma.h | 6 +- | ||
87 | accel/tcg/translate-all.c | 4 +- | ||
88 | exec.c | 95 ++++++++++++++++++------------ | ||
89 | hw/arm/boot.c | 18 +++--- | ||
90 | hw/arm/virt-acpi-build.c | 20 +++++-- | ||
91 | hw/dma/xlnx-zdma.c | 10 +++- | ||
92 | hw/hppa/dino.c | 3 +- | ||
93 | hw/intc/arm_gic_kvm.c | 1 - | ||
94 | hw/intc/arm_gicv3_cpuif.c | 12 ++-- | ||
95 | hw/intc/arm_gicv3_kvm.c | 2 +- | ||
96 | hw/nvram/fw_cfg.c | 12 ++-- | ||
97 | hw/s390x/s390-pci-inst.c | 3 +- | ||
98 | hw/scsi/esp.c | 3 +- | ||
99 | hw/vfio/common.c | 3 +- | ||
100 | hw/virtio/vhost.c | 3 +- | ||
101 | hw/xen/xen_pt_msi.c | 3 +- | ||
102 | memory.c | 12 ++-- | ||
103 | memory_ldst.inc.c | 18 +++--- | ||
104 | target/arm/gdbstub.c | 3 +- | ||
105 | target/arm/helper-a64.c | 41 +++++++------ | ||
106 | target/arm/helper.c | 90 ++++++++++++++++------------- | ||
107 | target/ppc/mmu-hash64.c | 3 +- | ||
108 | target/riscv/helper.c | 2 +- | ||
109 | target/s390x/diag.c | 6 +- | ||
110 | target/s390x/excp_helper.c | 3 +- | ||
111 | target/s390x/mmu_helper.c | 3 +- | ||
112 | target/s390x/sigp.c | 3 +- | ||
113 | target/xtensa/op_helper.c | 3 +- | ||
114 | MAINTAINERS | 9 ++- | ||
115 | 34 files changed, 353 insertions(+), 182 deletions(-) | ||
116 | diff view generated by jsdifflib |
1 | Provide a VMSTATE_BOOL_SUB_ARRAY to go with VMSTATE_UINT8_SUB_ARRAY | 1 | In the vCont packet, two of the command actions (C and S) take an |
---|---|---|---|
2 | and friends. | 2 | argument specifying the signal to be sent to the process/thread, which is |
3 | sent as an ASCII string of two hex digits which immediately follow the | ||
4 | 'C' or 'S' character. | ||
3 | 5 | ||
6 | Our code for parsing this packet accidentally skipped the first of the | ||
7 | two bytes of the signal value, because it started parsing the hex string | ||
8 | at 'p + 1' when the preceding code had already moved past the 'C' or | ||
9 | 'S' with "cur_action = *p++". | ||
10 | |||
11 | This meant that we would only do the right thing for signals below | ||
12 | 10, and would misinterpret the rest. For instance, when the debugger | ||
13 | wants to send the process a SIGPROF (27 on x86-64) we mangle this into | ||
14 | a SIGSEGV (11). | ||
15 | |||
16 | Remove the accidental double increment. | ||
17 | |||
18 | Fixes: https://bugs.launchpad.net/qemu/+bug/1773743 | ||
4 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 19 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
20 | Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com> | ||
5 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | 21 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> |
6 | Message-id: 20180521140402.23318-23-peter.maydell@linaro.org | 22 | Message-id: 20201121210342.10089-1-peter.maydell@linaro.org |
7 | --- | 23 | --- |
8 | include/migration/vmstate.h | 3 +++ | 24 | gdbstub.c | 2 +- |
9 | 1 file changed, 3 insertions(+) | 25 | 1 file changed, 1 insertion(+), 1 deletion(-) |
10 | 26 | ||
11 | diff --git a/include/migration/vmstate.h b/include/migration/vmstate.h | 27 | diff --git a/gdbstub.c b/gdbstub.c |
12 | index XXXXXXX..XXXXXXX 100644 | 28 | index XXXXXXX..XXXXXXX 100644 |
13 | --- a/include/migration/vmstate.h | 29 | --- a/gdbstub.c |
14 | +++ b/include/migration/vmstate.h | 30 | +++ b/gdbstub.c |
15 | @@ -XXX,XX +XXX,XX @@ extern const VMStateInfo vmstate_info_qtailq; | 31 | @@ -XXX,XX +XXX,XX @@ static int gdb_handle_vcont(const char *p) |
16 | #define VMSTATE_BOOL_ARRAY(_f, _s, _n) \ | 32 | cur_action = *p++; |
17 | VMSTATE_BOOL_ARRAY_V(_f, _s, _n, 0) | 33 | if (cur_action == 'C' || cur_action == 'S') { |
18 | 34 | cur_action = qemu_tolower(cur_action); | |
19 | +#define VMSTATE_BOOL_SUB_ARRAY(_f, _s, _start, _num) \ | 35 | - res = qemu_strtoul(p + 1, &p, 16, &tmp); |
20 | + VMSTATE_SUB_ARRAY(_f, _s, _start, _num, 0, vmstate_info_bool, bool) | 36 | + res = qemu_strtoul(p, &p, 16, &tmp); |
21 | + | 37 | if (res) { |
22 | #define VMSTATE_UINT16_ARRAY_V(_f, _s, _n, _v) \ | 38 | goto out; |
23 | VMSTATE_ARRAY(_f, _s, _n, _v, vmstate_info_uint16, uint16_t) | 39 | } |
24 | |||
25 | -- | 40 | -- |
26 | 2.17.1 | 41 | 2.20.1 |
27 | 42 | ||
28 | 43 | diff view generated by jsdifflib |
1 | As part of plumbing MemTxAttrs down to the IOMMU translate method, | 1 | openrisc_sim_net_init() attempts to connect the IRQ line from the |
---|---|---|---|
2 | add MemTxAttrs as an argument to flatview_do_translate(). | 2 | ethernet device to both CPUs in an SMP configuration by simply caling |
3 | sysbus_connect_irq() for it twice. This doesn't work, because the | ||
4 | second connection simply overrides the first. | ||
5 | |||
6 | Fix this by creating a TYPE_SPLIT_IRQ to split the IRQ in the SMP | ||
7 | case. | ||
3 | 8 | ||
4 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
5 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | 10 | Reviewed-by: Stafford Horne <shorne@gmail.com> |
6 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | 11 | Message-id: 20201127225127.14770-2-peter.maydell@linaro.org |
7 | Message-id: 20180521140402.23318-13-peter.maydell@linaro.org | ||
8 | --- | 12 | --- |
9 | exec.c | 9 ++++++--- | 13 | hw/openrisc/openrisc_sim.c | 13 +++++++++++-- |
10 | 1 file changed, 6 insertions(+), 3 deletions(-) | 14 | hw/openrisc/Kconfig | 1 + |
15 | 2 files changed, 12 insertions(+), 2 deletions(-) | ||
11 | 16 | ||
12 | diff --git a/exec.c b/exec.c | 17 | diff --git a/hw/openrisc/openrisc_sim.c b/hw/openrisc/openrisc_sim.c |
13 | index XXXXXXX..XXXXXXX 100644 | 18 | index XXXXXXX..XXXXXXX 100644 |
14 | --- a/exec.c | 19 | --- a/hw/openrisc/openrisc_sim.c |
15 | +++ b/exec.c | 20 | +++ b/hw/openrisc/openrisc_sim.c |
16 | @@ -XXX,XX +XXX,XX @@ unassigned: | 21 | @@ -XXX,XX +XXX,XX @@ |
17 | * @is_write: whether the translation operation is for write | 22 | #include "hw/sysbus.h" |
18 | * @is_mmio: whether this can be MMIO, set true if it can | 23 | #include "sysemu/qtest.h" |
19 | * @target_as: the address space targeted by the IOMMU | 24 | #include "sysemu/reset.h" |
20 | + * @attrs: memory transaction attributes | 25 | +#include "hw/core/split-irq.h" |
21 | * | 26 | |
22 | * This function is called from RCU critical section | 27 | #define KERNEL_LOAD_ADDR 0x100 |
23 | */ | 28 | |
24 | @@ -XXX,XX +XXX,XX @@ static MemoryRegionSection flatview_do_translate(FlatView *fv, | 29 | @@ -XXX,XX +XXX,XX @@ static void openrisc_sim_net_init(hwaddr base, hwaddr descriptors, |
25 | hwaddr *page_mask_out, | 30 | |
26 | bool is_write, | 31 | s = SYS_BUS_DEVICE(dev); |
27 | bool is_mmio, | 32 | sysbus_realize_and_unref(s, &error_fatal); |
28 | - AddressSpace **target_as) | 33 | - for (i = 0; i < num_cpus; i++) { |
29 | + AddressSpace **target_as, | 34 | - sysbus_connect_irq(s, 0, cpu_irqs[i][irq_pin]); |
30 | + MemTxAttrs attrs) | 35 | + if (num_cpus > 1) { |
31 | { | 36 | + DeviceState *splitter = qdev_new(TYPE_SPLIT_IRQ); |
32 | MemoryRegionSection *section; | 37 | + qdev_prop_set_uint32(splitter, "num-lines", num_cpus); |
33 | IOMMUMemoryRegion *iommu_mr; | 38 | + qdev_realize_and_unref(splitter, NULL, &error_fatal); |
34 | @@ -XXX,XX +XXX,XX @@ IOMMUTLBEntry address_space_get_iotlb_entry(AddressSpace *as, hwaddr addr, | 39 | + for (i = 0; i < num_cpus; i++) { |
35 | * but page mask. | 40 | + qdev_connect_gpio_out(splitter, i, cpu_irqs[i][irq_pin]); |
36 | */ | 41 | + } |
37 | section = flatview_do_translate(address_space_to_flatview(as), addr, &xlat, | 42 | + sysbus_connect_irq(s, 0, qdev_get_gpio_in(splitter, 0)); |
38 | - NULL, &page_mask, is_write, false, &as); | 43 | + } else { |
39 | + NULL, &page_mask, is_write, false, &as, | 44 | + sysbus_connect_irq(s, 0, cpu_irqs[0][irq_pin]); |
40 | + attrs); | 45 | } |
41 | 46 | sysbus_mmio_map(s, 0, base); | |
42 | /* Illegal translation */ | 47 | sysbus_mmio_map(s, 1, descriptors); |
43 | if (section.mr == &io_mem_unassigned) { | 48 | diff --git a/hw/openrisc/Kconfig b/hw/openrisc/Kconfig |
44 | @@ -XXX,XX +XXX,XX @@ MemoryRegion *flatview_translate(FlatView *fv, hwaddr addr, hwaddr *xlat, | 49 | index XXXXXXX..XXXXXXX 100644 |
45 | 50 | --- a/hw/openrisc/Kconfig | |
46 | /* This can be MMIO, so setup MMIO bit. */ | 51 | +++ b/hw/openrisc/Kconfig |
47 | section = flatview_do_translate(fv, addr, xlat, plen, NULL, | 52 | @@ -XXX,XX +XXX,XX @@ config OR1K_SIM |
48 | - is_write, true, &as); | 53 | select SERIAL |
49 | + is_write, true, &as, attrs); | 54 | select OPENCORES_ETH |
50 | mr = section.mr; | 55 | select OMPIC |
51 | 56 | + select SPLIT_IRQ | |
52 | if (xen_enabled() && memory_access_is_direct(mr, is_write)) { | ||
53 | -- | 57 | -- |
54 | 2.17.1 | 58 | 2.20.1 |
55 | 59 | ||
56 | 60 | diff view generated by jsdifflib |
1 | As part of plumbing MemTxAttrs down to the IOMMU translate method, | 1 | We're about to refactor the OpenRISC pic_cpu code in a way that means |
---|---|---|---|
2 | add MemTxAttrs as an argument to flatview_translate(); all its | 2 | that just grabbing the whole qemu_irq[] array of inbound IRQs for a |
3 | callers now have attrs available. | 3 | CPU won't be possible any more. Abstract out a function for "return |
4 | the qemu_irq for IRQ x input of CPU y" so we can more easily replace | ||
5 | the implementation. | ||
4 | 6 | ||
5 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 7 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
6 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | 8 | Reviewed-by: Stafford Horne <shorne@gmail.com> |
7 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | 9 | Message-id: 20201127225127.14770-3-peter.maydell@linaro.org |
8 | Message-id: 20180521140402.23318-11-peter.maydell@linaro.org | ||
9 | --- | 10 | --- |
10 | include/exec/memory.h | 7 ++++--- | 11 | hw/openrisc/openrisc_sim.c | 38 +++++++++++++++++++++----------------- |
11 | exec.c | 17 +++++++++-------- | 12 | 1 file changed, 21 insertions(+), 17 deletions(-) |
12 | 2 files changed, 13 insertions(+), 11 deletions(-) | ||
13 | 13 | ||
14 | diff --git a/include/exec/memory.h b/include/exec/memory.h | 14 | diff --git a/hw/openrisc/openrisc_sim.c b/hw/openrisc/openrisc_sim.c |
15 | index XXXXXXX..XXXXXXX 100644 | 15 | index XXXXXXX..XXXXXXX 100644 |
16 | --- a/include/exec/memory.h | 16 | --- a/hw/openrisc/openrisc_sim.c |
17 | +++ b/include/exec/memory.h | 17 | +++ b/hw/openrisc/openrisc_sim.c |
18 | @@ -XXX,XX +XXX,XX @@ IOMMUTLBEntry address_space_get_iotlb_entry(AddressSpace *as, hwaddr addr, | 18 | @@ -XXX,XX +XXX,XX @@ static void main_cpu_reset(void *opaque) |
19 | */ | 19 | cpu_set_pc(cs, boot_info.bootstrap_pc); |
20 | MemoryRegion *flatview_translate(FlatView *fv, | 20 | } |
21 | hwaddr addr, hwaddr *xlat, | 21 | |
22 | - hwaddr *len, bool is_write); | 22 | +static qemu_irq get_cpu_irq(OpenRISCCPU *cpus[], int cpunum, int irq_pin) |
23 | + hwaddr *len, bool is_write, | 23 | +{ |
24 | + MemTxAttrs attrs); | 24 | + return cpus[cpunum]->env.irq[irq_pin]; |
25 | 25 | +} | |
26 | static inline MemoryRegion *address_space_translate(AddressSpace *as, | 26 | + |
27 | hwaddr addr, hwaddr *xlat, | 27 | static void openrisc_sim_net_init(hwaddr base, hwaddr descriptors, |
28 | @@ -XXX,XX +XXX,XX @@ static inline MemoryRegion *address_space_translate(AddressSpace *as, | 28 | - int num_cpus, qemu_irq **cpu_irqs, |
29 | MemTxAttrs attrs) | 29 | + int num_cpus, OpenRISCCPU *cpus[], |
30 | int irq_pin, NICInfo *nd) | ||
30 | { | 31 | { |
31 | return flatview_translate(address_space_to_flatview(as), | 32 | DeviceState *dev; |
32 | - addr, xlat, len, is_write); | 33 | @@ -XXX,XX +XXX,XX @@ static void openrisc_sim_net_init(hwaddr base, hwaddr descriptors, |
33 | + addr, xlat, len, is_write, attrs); | 34 | qdev_prop_set_uint32(splitter, "num-lines", num_cpus); |
35 | qdev_realize_and_unref(splitter, NULL, &error_fatal); | ||
36 | for (i = 0; i < num_cpus; i++) { | ||
37 | - qdev_connect_gpio_out(splitter, i, cpu_irqs[i][irq_pin]); | ||
38 | + qdev_connect_gpio_out(splitter, i, get_cpu_irq(cpus, i, irq_pin)); | ||
39 | } | ||
40 | sysbus_connect_irq(s, 0, qdev_get_gpio_in(splitter, 0)); | ||
41 | } else { | ||
42 | - sysbus_connect_irq(s, 0, cpu_irqs[0][irq_pin]); | ||
43 | + sysbus_connect_irq(s, 0, get_cpu_irq(cpus, 0, irq_pin)); | ||
44 | } | ||
45 | sysbus_mmio_map(s, 0, base); | ||
46 | sysbus_mmio_map(s, 1, descriptors); | ||
34 | } | 47 | } |
35 | 48 | ||
36 | /* address_space_access_valid: check for validity of accessing an address | 49 | static void openrisc_sim_ompic_init(hwaddr base, int num_cpus, |
37 | @@ -XXX,XX +XXX,XX @@ MemTxResult address_space_read(AddressSpace *as, hwaddr addr, | 50 | - qemu_irq **cpu_irqs, int irq_pin) |
38 | rcu_read_lock(); | 51 | + OpenRISCCPU *cpus[], int irq_pin) |
39 | fv = address_space_to_flatview(as); | ||
40 | l = len; | ||
41 | - mr = flatview_translate(fv, addr, &addr1, &l, false); | ||
42 | + mr = flatview_translate(fv, addr, &addr1, &l, false, attrs); | ||
43 | if (len == l && memory_access_is_direct(mr, false)) { | ||
44 | ptr = qemu_map_ram_ptr(mr->ram_block, addr1); | ||
45 | memcpy(buf, ptr, len); | ||
46 | diff --git a/exec.c b/exec.c | ||
47 | index XXXXXXX..XXXXXXX 100644 | ||
48 | --- a/exec.c | ||
49 | +++ b/exec.c | ||
50 | @@ -XXX,XX +XXX,XX @@ iotlb_fail: | ||
51 | |||
52 | /* Called from RCU critical section */ | ||
53 | MemoryRegion *flatview_translate(FlatView *fv, hwaddr addr, hwaddr *xlat, | ||
54 | - hwaddr *plen, bool is_write) | ||
55 | + hwaddr *plen, bool is_write, | ||
56 | + MemTxAttrs attrs) | ||
57 | { | 52 | { |
58 | MemoryRegion *mr; | 53 | DeviceState *dev; |
59 | MemoryRegionSection section; | 54 | SysBusDevice *s; |
60 | @@ -XXX,XX +XXX,XX @@ static MemTxResult flatview_write_continue(FlatView *fv, hwaddr addr, | 55 | @@ -XXX,XX +XXX,XX @@ static void openrisc_sim_ompic_init(hwaddr base, int num_cpus, |
56 | s = SYS_BUS_DEVICE(dev); | ||
57 | sysbus_realize_and_unref(s, &error_fatal); | ||
58 | for (i = 0; i < num_cpus; i++) { | ||
59 | - sysbus_connect_irq(s, i, cpu_irqs[i][irq_pin]); | ||
60 | + sysbus_connect_irq(s, i, get_cpu_irq(cpus, i, irq_pin)); | ||
61 | } | ||
62 | sysbus_mmio_map(s, 0, base); | ||
63 | } | ||
64 | @@ -XXX,XX +XXX,XX @@ static void openrisc_sim_init(MachineState *machine) | ||
65 | { | ||
66 | ram_addr_t ram_size = machine->ram_size; | ||
67 | const char *kernel_filename = machine->kernel_filename; | ||
68 | - OpenRISCCPU *cpu = NULL; | ||
69 | + OpenRISCCPU *cpus[2] = {}; | ||
70 | MemoryRegion *ram; | ||
71 | - qemu_irq *cpu_irqs[2]; | ||
72 | qemu_irq serial_irq; | ||
73 | int n; | ||
74 | unsigned int smp_cpus = machine->smp.cpus; | ||
75 | |||
76 | assert(smp_cpus >= 1 && smp_cpus <= 2); | ||
77 | for (n = 0; n < smp_cpus; n++) { | ||
78 | - cpu = OPENRISC_CPU(cpu_create(machine->cpu_type)); | ||
79 | - if (cpu == NULL) { | ||
80 | + cpus[n] = OPENRISC_CPU(cpu_create(machine->cpu_type)); | ||
81 | + if (cpus[n] == NULL) { | ||
82 | fprintf(stderr, "Unable to find CPU definition!\n"); | ||
83 | exit(1); | ||
61 | } | 84 | } |
62 | 85 | - cpu_openrisc_pic_init(cpu); | |
63 | l = len; | 86 | - cpu_irqs[n] = (qemu_irq *) cpu->env.irq; |
64 | - mr = flatview_translate(fv, addr, &addr1, &l, true); | 87 | + cpu_openrisc_pic_init(cpus[n]); |
65 | + mr = flatview_translate(fv, addr, &addr1, &l, true, attrs); | 88 | |
89 | - cpu_openrisc_clock_init(cpu); | ||
90 | + cpu_openrisc_clock_init(cpus[n]); | ||
91 | |||
92 | - qemu_register_reset(main_cpu_reset, cpu); | ||
93 | + qemu_register_reset(main_cpu_reset, cpus[n]); | ||
66 | } | 94 | } |
67 | 95 | ||
68 | return result; | 96 | ram = g_malloc(sizeof(*ram)); |
69 | @@ -XXX,XX +XXX,XX @@ static MemTxResult flatview_write(FlatView *fv, hwaddr addr, MemTxAttrs attrs, | 97 | @@ -XXX,XX +XXX,XX @@ static void openrisc_sim_init(MachineState *machine) |
70 | MemTxResult result = MEMTX_OK; | 98 | |
71 | 99 | if (nd_table[0].used) { | |
72 | l = len; | 100 | openrisc_sim_net_init(0x92000000, 0x92000400, smp_cpus, |
73 | - mr = flatview_translate(fv, addr, &addr1, &l, true); | 101 | - cpu_irqs, 4, nd_table); |
74 | + mr = flatview_translate(fv, addr, &addr1, &l, true, attrs); | 102 | + cpus, 4, nd_table); |
75 | result = flatview_write_continue(fv, addr, attrs, buf, len, | ||
76 | addr1, l, mr); | ||
77 | |||
78 | @@ -XXX,XX +XXX,XX @@ MemTxResult flatview_read_continue(FlatView *fv, hwaddr addr, | ||
79 | } | ||
80 | |||
81 | l = len; | ||
82 | - mr = flatview_translate(fv, addr, &addr1, &l, false); | ||
83 | + mr = flatview_translate(fv, addr, &addr1, &l, false, attrs); | ||
84 | } | 103 | } |
85 | 104 | ||
86 | return result; | 105 | if (smp_cpus > 1) { |
87 | @@ -XXX,XX +XXX,XX @@ static MemTxResult flatview_read(FlatView *fv, hwaddr addr, | 106 | - openrisc_sim_ompic_init(0x98000000, smp_cpus, cpu_irqs, 1); |
88 | MemoryRegion *mr; | 107 | + openrisc_sim_ompic_init(0x98000000, smp_cpus, cpus, 1); |
89 | 108 | ||
90 | l = len; | 109 | - serial_irq = qemu_irq_split(cpu_irqs[0][2], cpu_irqs[1][2]); |
91 | - mr = flatview_translate(fv, addr, &addr1, &l, false); | 110 | + serial_irq = qemu_irq_split(get_cpu_irq(cpus, 0, 2), |
92 | + mr = flatview_translate(fv, addr, &addr1, &l, false, attrs); | 111 | + get_cpu_irq(cpus, 1, 2)); |
93 | return flatview_read_continue(fv, addr, attrs, buf, len, | 112 | } else { |
94 | addr1, l, mr); | 113 | - serial_irq = cpu_irqs[0][2]; |
95 | } | 114 | + serial_irq = get_cpu_irq(cpus, 0, 2); |
96 | @@ -XXX,XX +XXX,XX @@ static bool flatview_access_valid(FlatView *fv, hwaddr addr, int len, | 115 | } |
97 | 116 | ||
98 | while (len > 0) { | 117 | serial_mm_init(get_system_memory(), 0x90000000, 0, serial_irq, |
99 | l = len; | ||
100 | - mr = flatview_translate(fv, addr, &xlat, &l, is_write); | ||
101 | + mr = flatview_translate(fv, addr, &xlat, &l, is_write, attrs); | ||
102 | if (!memory_access_is_direct(mr, is_write)) { | ||
103 | l = memory_access_size(mr, l, addr); | ||
104 | if (!memory_region_access_valid(mr, xlat, l, is_write, attrs)) { | ||
105 | @@ -XXX,XX +XXX,XX @@ flatview_extend_translation(FlatView *fv, hwaddr addr, | ||
106 | |||
107 | len = target_len; | ||
108 | this_mr = flatview_translate(fv, addr, &xlat, | ||
109 | - &len, is_write); | ||
110 | + &len, is_write, attrs); | ||
111 | if (this_mr != mr || xlat != base + done) { | ||
112 | return done; | ||
113 | } | ||
114 | @@ -XXX,XX +XXX,XX @@ void *address_space_map(AddressSpace *as, | ||
115 | l = len; | ||
116 | rcu_read_lock(); | ||
117 | fv = address_space_to_flatview(as); | ||
118 | - mr = flatview_translate(fv, addr, &xlat, &l, is_write); | ||
119 | + mr = flatview_translate(fv, addr, &xlat, &l, is_write, attrs); | ||
120 | |||
121 | if (!memory_access_is_direct(mr, is_write)) { | ||
122 | if (atomic_xchg(&bounce.in_use, true)) { | ||
123 | -- | 118 | -- |
124 | 2.17.1 | 119 | 2.20.1 |
125 | 120 | ||
126 | 121 | diff view generated by jsdifflib |
1 | As part of plumbing MemTxAttrs down to the IOMMU translate method, | 1 | The openrisc code uses an old style of interrupt handling, where a |
---|---|---|---|
2 | add MemTxAttrs as an argument to flatview_access_valid(). | 2 | separate standalone set of qemu_irqs invoke a function |
3 | Its callers now all have an attrs value to hand, so we can | 3 | openrisc_pic_cpu_handler() which signals the interrupt to the CPU |
4 | correct our earlier temporary use of MEMTXATTRS_UNSPECIFIED. | 4 | proper by directly calling cpu_interrupt() and cpu_reset_interrupt(). |
5 | Because CPU objects now inherit (indirectly) from TYPE_DEVICE, they | ||
6 | can have GPIO input lines themselves, and the neater modern way to | ||
7 | implement this is to simply have the CPU object itself provide the | ||
8 | input IRQ lines. | ||
5 | 9 | ||
10 | Create GPIO inputs to the OpenRISC CPU object, and make the only user | ||
11 | of cpu_openrisc_pic_init() wire up directly to those instead. | ||
12 | |||
13 | This allows us to delete the hw/openrisc/pic_cpu.c file entirely. | ||
14 | |||
15 | This fixes a trivial memory leak reported by Coverity of the IRQs | ||
16 | allocated in cpu_openrisc_pic_init(). | ||
17 | |||
18 | Fixes: Coverity CID 1421934 | ||
6 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 19 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
7 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | 20 | Reviewed-by: Stafford Horne <shorne@gmail.com> |
8 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | 21 | Message-id: 20201127225127.14770-4-peter.maydell@linaro.org |
9 | Message-id: 20180521140402.23318-10-peter.maydell@linaro.org | ||
10 | --- | 22 | --- |
11 | exec.c | 12 +++++------- | 23 | target/openrisc/cpu.h | 1 - |
12 | 1 file changed, 5 insertions(+), 7 deletions(-) | 24 | hw/openrisc/openrisc_sim.c | 3 +- |
25 | hw/openrisc/pic_cpu.c | 61 -------------------------------------- | ||
26 | target/openrisc/cpu.c | 32 ++++++++++++++++++++ | ||
27 | hw/openrisc/meson.build | 2 +- | ||
28 | 5 files changed, 34 insertions(+), 65 deletions(-) | ||
29 | delete mode 100644 hw/openrisc/pic_cpu.c | ||
13 | 30 | ||
14 | diff --git a/exec.c b/exec.c | 31 | diff --git a/target/openrisc/cpu.h b/target/openrisc/cpu.h |
15 | index XXXXXXX..XXXXXXX 100644 | 32 | index XXXXXXX..XXXXXXX 100644 |
16 | --- a/exec.c | 33 | --- a/target/openrisc/cpu.h |
17 | +++ b/exec.c | 34 | +++ b/target/openrisc/cpu.h |
18 | @@ -XXX,XX +XXX,XX @@ static MemTxResult flatview_read(FlatView *fv, hwaddr addr, | 35 | @@ -XXX,XX +XXX,XX @@ typedef struct CPUOpenRISCState { |
19 | static MemTxResult flatview_write(FlatView *fv, hwaddr addr, MemTxAttrs attrs, | 36 | uint32_t picmr; /* Interrupt mask register */ |
20 | const uint8_t *buf, int len); | 37 | uint32_t picsr; /* Interrupt contrl register*/ |
21 | static bool flatview_access_valid(FlatView *fv, hwaddr addr, int len, | ||
22 | - bool is_write); | ||
23 | + bool is_write, MemTxAttrs attrs); | ||
24 | |||
25 | static MemTxResult subpage_read(void *opaque, hwaddr addr, uint64_t *data, | ||
26 | unsigned len, MemTxAttrs attrs) | ||
27 | @@ -XXX,XX +XXX,XX @@ static bool subpage_accepts(void *opaque, hwaddr addr, | ||
28 | #endif | 38 | #endif |
29 | 39 | - void *irq[32]; /* Interrupt irq input */ | |
30 | return flatview_access_valid(subpage->fv, addr + subpage->base, | 40 | } CPUOpenRISCState; |
31 | - len, is_write); | 41 | |
32 | + len, is_write, attrs); | 42 | /** |
43 | diff --git a/hw/openrisc/openrisc_sim.c b/hw/openrisc/openrisc_sim.c | ||
44 | index XXXXXXX..XXXXXXX 100644 | ||
45 | --- a/hw/openrisc/openrisc_sim.c | ||
46 | +++ b/hw/openrisc/openrisc_sim.c | ||
47 | @@ -XXX,XX +XXX,XX @@ static void main_cpu_reset(void *opaque) | ||
48 | |||
49 | static qemu_irq get_cpu_irq(OpenRISCCPU *cpus[], int cpunum, int irq_pin) | ||
50 | { | ||
51 | - return cpus[cpunum]->env.irq[irq_pin]; | ||
52 | + return qdev_get_gpio_in_named(DEVICE(cpus[cpunum]), "IRQ", irq_pin); | ||
33 | } | 53 | } |
34 | 54 | ||
35 | static const MemoryRegionOps subpage_ops = { | 55 | static void openrisc_sim_net_init(hwaddr base, hwaddr descriptors, |
36 | @@ -XXX,XX +XXX,XX @@ static void cpu_notify_map_clients(void) | 56 | @@ -XXX,XX +XXX,XX @@ static void openrisc_sim_init(MachineState *machine) |
57 | fprintf(stderr, "Unable to find CPU definition!\n"); | ||
58 | exit(1); | ||
59 | } | ||
60 | - cpu_openrisc_pic_init(cpus[n]); | ||
61 | |||
62 | cpu_openrisc_clock_init(cpus[n]); | ||
63 | |||
64 | diff --git a/hw/openrisc/pic_cpu.c b/hw/openrisc/pic_cpu.c | ||
65 | deleted file mode 100644 | ||
66 | index XXXXXXX..XXXXXXX | ||
67 | --- a/hw/openrisc/pic_cpu.c | ||
68 | +++ /dev/null | ||
69 | @@ -XXX,XX +XXX,XX @@ | ||
70 | -/* | ||
71 | - * OpenRISC Programmable Interrupt Controller support. | ||
72 | - * | ||
73 | - * Copyright (c) 2011-2012 Jia Liu <proljc@gmail.com> | ||
74 | - * Feng Gao <gf91597@gmail.com> | ||
75 | - * | ||
76 | - * This library is free software; you can redistribute it and/or | ||
77 | - * modify it under the terms of the GNU Lesser General Public | ||
78 | - * License as published by the Free Software Foundation; either | ||
79 | - * version 2.1 of the License, or (at your option) any later version. | ||
80 | - * | ||
81 | - * This library is distributed in the hope that it will be useful, | ||
82 | - * but WITHOUT ANY WARRANTY; without even the implied warranty of | ||
83 | - * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | ||
84 | - * Lesser General Public License for more details. | ||
85 | - * | ||
86 | - * You should have received a copy of the GNU Lesser General Public | ||
87 | - * License along with this library; if not, see <http://www.gnu.org/licenses/>. | ||
88 | - */ | ||
89 | - | ||
90 | -#include "qemu/osdep.h" | ||
91 | -#include "hw/irq.h" | ||
92 | -#include "cpu.h" | ||
93 | - | ||
94 | -/* OpenRISC pic handler */ | ||
95 | -static void openrisc_pic_cpu_handler(void *opaque, int irq, int level) | ||
96 | -{ | ||
97 | - OpenRISCCPU *cpu = (OpenRISCCPU *)opaque; | ||
98 | - CPUState *cs = CPU(cpu); | ||
99 | - uint32_t irq_bit; | ||
100 | - | ||
101 | - if (irq > 31 || irq < 0) { | ||
102 | - return; | ||
103 | - } | ||
104 | - | ||
105 | - irq_bit = 1U << irq; | ||
106 | - | ||
107 | - if (level) { | ||
108 | - cpu->env.picsr |= irq_bit; | ||
109 | - } else { | ||
110 | - cpu->env.picsr &= ~irq_bit; | ||
111 | - } | ||
112 | - | ||
113 | - if (cpu->env.picsr & cpu->env.picmr) { | ||
114 | - cpu_interrupt(cs, CPU_INTERRUPT_HARD); | ||
115 | - } else { | ||
116 | - cpu_reset_interrupt(cs, CPU_INTERRUPT_HARD); | ||
117 | - cpu->env.picsr = 0; | ||
118 | - } | ||
119 | -} | ||
120 | - | ||
121 | -void cpu_openrisc_pic_init(OpenRISCCPU *cpu) | ||
122 | -{ | ||
123 | - int i; | ||
124 | - qemu_irq *qi; | ||
125 | - qi = qemu_allocate_irqs(openrisc_pic_cpu_handler, cpu, NR_IRQS); | ||
126 | - | ||
127 | - for (i = 0; i < NR_IRQS; i++) { | ||
128 | - cpu->env.irq[i] = qi[i]; | ||
129 | - } | ||
130 | -} | ||
131 | diff --git a/target/openrisc/cpu.c b/target/openrisc/cpu.c | ||
132 | index XXXXXXX..XXXXXXX 100644 | ||
133 | --- a/target/openrisc/cpu.c | ||
134 | +++ b/target/openrisc/cpu.c | ||
135 | @@ -XXX,XX +XXX,XX @@ static void openrisc_cpu_reset(DeviceState *dev) | ||
136 | #endif | ||
37 | } | 137 | } |
38 | 138 | ||
39 | static bool flatview_access_valid(FlatView *fv, hwaddr addr, int len, | 139 | +#ifndef CONFIG_USER_ONLY |
40 | - bool is_write) | 140 | +static void openrisc_cpu_set_irq(void *opaque, int irq, int level) |
41 | + bool is_write, MemTxAttrs attrs) | 141 | +{ |
142 | + OpenRISCCPU *cpu = (OpenRISCCPU *)opaque; | ||
143 | + CPUState *cs = CPU(cpu); | ||
144 | + uint32_t irq_bit; | ||
145 | + | ||
146 | + if (irq > 31 || irq < 0) { | ||
147 | + return; | ||
148 | + } | ||
149 | + | ||
150 | + irq_bit = 1U << irq; | ||
151 | + | ||
152 | + if (level) { | ||
153 | + cpu->env.picsr |= irq_bit; | ||
154 | + } else { | ||
155 | + cpu->env.picsr &= ~irq_bit; | ||
156 | + } | ||
157 | + | ||
158 | + if (cpu->env.picsr & cpu->env.picmr) { | ||
159 | + cpu_interrupt(cs, CPU_INTERRUPT_HARD); | ||
160 | + } else { | ||
161 | + cpu_reset_interrupt(cs, CPU_INTERRUPT_HARD); | ||
162 | + cpu->env.picsr = 0; | ||
163 | + } | ||
164 | +} | ||
165 | +#endif | ||
166 | + | ||
167 | static void openrisc_cpu_realizefn(DeviceState *dev, Error **errp) | ||
42 | { | 168 | { |
43 | MemoryRegion *mr; | 169 | CPUState *cs = CPU(dev); |
44 | hwaddr l, xlat; | 170 | @@ -XXX,XX +XXX,XX @@ static void openrisc_cpu_initfn(Object *obj) |
45 | @@ -XXX,XX +XXX,XX @@ static bool flatview_access_valid(FlatView *fv, hwaddr addr, int len, | 171 | OpenRISCCPU *cpu = OPENRISC_CPU(obj); |
46 | mr = flatview_translate(fv, addr, &xlat, &l, is_write); | 172 | |
47 | if (!memory_access_is_direct(mr, is_write)) { | 173 | cpu_set_cpustate_pointers(cpu); |
48 | l = memory_access_size(mr, l, addr); | 174 | + |
49 | - /* When our callers all have attrs we'll pass them through here */ | 175 | +#ifndef CONFIG_USER_ONLY |
50 | - if (!memory_region_access_valid(mr, xlat, l, is_write, | 176 | + qdev_init_gpio_in_named(DEVICE(cpu), openrisc_cpu_set_irq, "IRQ", NR_IRQS); |
51 | - MEMTXATTRS_UNSPECIFIED)) { | 177 | +#endif |
52 | + if (!memory_region_access_valid(mr, xlat, l, is_write, attrs)) { | ||
53 | return false; | ||
54 | } | ||
55 | } | ||
56 | @@ -XXX,XX +XXX,XX @@ bool address_space_access_valid(AddressSpace *as, hwaddr addr, | ||
57 | |||
58 | rcu_read_lock(); | ||
59 | fv = address_space_to_flatview(as); | ||
60 | - result = flatview_access_valid(fv, addr, len, is_write); | ||
61 | + result = flatview_access_valid(fv, addr, len, is_write, attrs); | ||
62 | rcu_read_unlock(); | ||
63 | return result; | ||
64 | } | 178 | } |
179 | |||
180 | /* CPU models */ | ||
181 | diff --git a/hw/openrisc/meson.build b/hw/openrisc/meson.build | ||
182 | index XXXXXXX..XXXXXXX 100644 | ||
183 | --- a/hw/openrisc/meson.build | ||
184 | +++ b/hw/openrisc/meson.build | ||
185 | @@ -XXX,XX +XXX,XX @@ | ||
186 | openrisc_ss = ss.source_set() | ||
187 | -openrisc_ss.add(files('pic_cpu.c', 'cputimer.c')) | ||
188 | +openrisc_ss.add(files('cputimer.c')) | ||
189 | openrisc_ss.add(when: 'CONFIG_OR1K_SIM', if_true: files('openrisc_sim.c')) | ||
190 | |||
191 | hw_arch += {'openrisc': openrisc_ss} | ||
65 | -- | 192 | -- |
66 | 2.17.1 | 193 | 2.20.1 |
67 | 194 | ||
68 | 195 | diff view generated by jsdifflib |
1 | Add entries to MAINTAINERS to cover the newer MPS2 boards and | 1 | The Nios2 architecture supports two different interrupt controller |
---|---|---|---|
2 | the new devices they use. | 2 | options: |
3 | 3 | ||
4 | * The IIC (Internal Interrupt Controller) is part of the CPU itself; | ||
5 | it has 32 IRQ input lines and no NMI support. Interrupt status is | ||
6 | queried and controlled via the CPU's ipending and istatus | ||
7 | registers. | ||
8 | |||
9 | * The EIC (External Interrupt Controller) interface allows the CPU | ||
10 | to connect to an external interrupt controller. The interface | ||
11 | allows the interrupt controller to present a packet of information | ||
12 | containing: | ||
13 | - handler address | ||
14 | - interrupt level | ||
15 | - register set | ||
16 | - NMI mode | ||
17 | |||
18 | QEMU does not model an EIC currently. We do model the IIC, but its | ||
19 | implementation is split across code in hw/nios2/cpu_pic.c and | ||
20 | hw/intc/nios2_iic.c. The code in those two files has no state of its | ||
21 | own -- the IIC state is in the Nios2CPU state struct. | ||
22 | |||
23 | Because CPU objects now inherit (indirectly) from TYPE_DEVICE, they | ||
24 | can have GPIO input lines themselves, so we can implement the IIC | ||
25 | directly in the CPU object the same way that real hardware does. | ||
26 | |||
27 | Create named "IRQ" GPIO inputs to the Nios2 CPU object, and make the | ||
28 | only user of the IIC wire up directly to those instead. | ||
29 | |||
30 | Note that the old code had an "NMI" concept which was entirely unused | ||
31 | and also as far as I can see not architecturally correct, since only | ||
32 | the EIC has a concept of an NMI. | ||
33 | |||
34 | This fixes a Coverity-reported trivial memory leak of the IRQ array | ||
35 | allocated in nios2_cpu_pic_init(). | ||
36 | |||
37 | Fixes: Coverity CID 1421916 | ||
4 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 38 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
5 | Message-id: 20180518153157.14899-1-peter.maydell@linaro.org | 39 | Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org> |
40 | Message-id: 20201129174022.26530-2-peter.maydell@linaro.org | ||
41 | Reviewed-by: Wentong Wu <wentong.wu@intel.com> | ||
42 | Tested-by: Wentong Wu <wentong.wu@intel.com> | ||
6 | --- | 43 | --- |
7 | MAINTAINERS | 9 +++++++-- | 44 | target/nios2/cpu.h | 1 - |
8 | 1 file changed, 7 insertions(+), 2 deletions(-) | 45 | hw/intc/nios2_iic.c | 95 --------------------------------------- |
9 | 46 | hw/nios2/10m50_devboard.c | 13 +----- | |
47 | hw/nios2/cpu_pic.c | 31 ------------- | ||
48 | target/nios2/cpu.c | 30 +++++++++++++ | ||
49 | MAINTAINERS | 1 - | ||
50 | hw/intc/meson.build | 1 - | ||
51 | 7 files changed, 32 insertions(+), 140 deletions(-) | ||
52 | delete mode 100644 hw/intc/nios2_iic.c | ||
53 | |||
54 | diff --git a/target/nios2/cpu.h b/target/nios2/cpu.h | ||
55 | index XXXXXXX..XXXXXXX 100644 | ||
56 | --- a/target/nios2/cpu.h | ||
57 | +++ b/target/nios2/cpu.h | ||
58 | @@ -XXX,XX +XXX,XX @@ void nios2_cpu_do_unaligned_access(CPUState *cpu, vaddr addr, | ||
59 | MMUAccessType access_type, | ||
60 | int mmu_idx, uintptr_t retaddr); | ||
61 | |||
62 | -qemu_irq *nios2_cpu_pic_init(Nios2CPU *cpu); | ||
63 | void nios2_check_interrupts(CPUNios2State *env); | ||
64 | |||
65 | void do_nios2_semihosting(CPUNios2State *env); | ||
66 | diff --git a/hw/intc/nios2_iic.c b/hw/intc/nios2_iic.c | ||
67 | deleted file mode 100644 | ||
68 | index XXXXXXX..XXXXXXX | ||
69 | --- a/hw/intc/nios2_iic.c | ||
70 | +++ /dev/null | ||
71 | @@ -XXX,XX +XXX,XX @@ | ||
72 | -/* | ||
73 | - * QEMU Altera Internal Interrupt Controller. | ||
74 | - * | ||
75 | - * Copyright (c) 2012 Chris Wulff <crwulff@gmail.com> | ||
76 | - * | ||
77 | - * This library is free software; you can redistribute it and/or | ||
78 | - * modify it under the terms of the GNU Lesser General Public | ||
79 | - * License as published by the Free Software Foundation; either | ||
80 | - * version 2.1 of the License, or (at your option) any later version. | ||
81 | - * | ||
82 | - * This library is distributed in the hope that it will be useful, | ||
83 | - * but WITHOUT ANY WARRANTY; without even the implied warranty of | ||
84 | - * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | ||
85 | - * Lesser General Public License for more details. | ||
86 | - * | ||
87 | - * You should have received a copy of the GNU Lesser General Public | ||
88 | - * License along with this library; if not, see | ||
89 | - * <http://www.gnu.org/licenses/lgpl-2.1.html> | ||
90 | - */ | ||
91 | - | ||
92 | -#include "qemu/osdep.h" | ||
93 | -#include "qemu/module.h" | ||
94 | -#include "qapi/error.h" | ||
95 | - | ||
96 | -#include "hw/irq.h" | ||
97 | -#include "hw/sysbus.h" | ||
98 | -#include "cpu.h" | ||
99 | -#include "qom/object.h" | ||
100 | - | ||
101 | -#define TYPE_ALTERA_IIC "altera,iic" | ||
102 | -OBJECT_DECLARE_SIMPLE_TYPE(AlteraIIC, ALTERA_IIC) | ||
103 | - | ||
104 | -struct AlteraIIC { | ||
105 | - SysBusDevice parent_obj; | ||
106 | - void *cpu; | ||
107 | - qemu_irq parent_irq; | ||
108 | -}; | ||
109 | - | ||
110 | -static void update_irq(AlteraIIC *pv) | ||
111 | -{ | ||
112 | - CPUNios2State *env = &((Nios2CPU *)(pv->cpu))->env; | ||
113 | - | ||
114 | - qemu_set_irq(pv->parent_irq, | ||
115 | - env->regs[CR_IPENDING] & env->regs[CR_IENABLE]); | ||
116 | -} | ||
117 | - | ||
118 | -static void irq_handler(void *opaque, int irq, int level) | ||
119 | -{ | ||
120 | - AlteraIIC *pv = opaque; | ||
121 | - CPUNios2State *env = &((Nios2CPU *)(pv->cpu))->env; | ||
122 | - | ||
123 | - env->regs[CR_IPENDING] &= ~(1 << irq); | ||
124 | - env->regs[CR_IPENDING] |= !!level << irq; | ||
125 | - | ||
126 | - update_irq(pv); | ||
127 | -} | ||
128 | - | ||
129 | -static void altera_iic_init(Object *obj) | ||
130 | -{ | ||
131 | - AlteraIIC *pv = ALTERA_IIC(obj); | ||
132 | - | ||
133 | - qdev_init_gpio_in(DEVICE(pv), irq_handler, 32); | ||
134 | - sysbus_init_irq(SYS_BUS_DEVICE(obj), &pv->parent_irq); | ||
135 | -} | ||
136 | - | ||
137 | -static void altera_iic_realize(DeviceState *dev, Error **errp) | ||
138 | -{ | ||
139 | - struct AlteraIIC *pv = ALTERA_IIC(dev); | ||
140 | - | ||
141 | - pv->cpu = object_property_get_link(OBJECT(dev), "cpu", &error_abort); | ||
142 | -} | ||
143 | - | ||
144 | -static void altera_iic_class_init(ObjectClass *klass, void *data) | ||
145 | -{ | ||
146 | - DeviceClass *dc = DEVICE_CLASS(klass); | ||
147 | - | ||
148 | - /* Reason: needs to be wired up, e.g. by nios2_10m50_ghrd_init() */ | ||
149 | - dc->user_creatable = false; | ||
150 | - dc->realize = altera_iic_realize; | ||
151 | -} | ||
152 | - | ||
153 | -static TypeInfo altera_iic_info = { | ||
154 | - .name = TYPE_ALTERA_IIC, | ||
155 | - .parent = TYPE_SYS_BUS_DEVICE, | ||
156 | - .instance_size = sizeof(AlteraIIC), | ||
157 | - .instance_init = altera_iic_init, | ||
158 | - .class_init = altera_iic_class_init, | ||
159 | -}; | ||
160 | - | ||
161 | -static void altera_iic_register(void) | ||
162 | -{ | ||
163 | - type_register_static(&altera_iic_info); | ||
164 | -} | ||
165 | - | ||
166 | -type_init(altera_iic_register) | ||
167 | diff --git a/hw/nios2/10m50_devboard.c b/hw/nios2/10m50_devboard.c | ||
168 | index XXXXXXX..XXXXXXX 100644 | ||
169 | --- a/hw/nios2/10m50_devboard.c | ||
170 | +++ b/hw/nios2/10m50_devboard.c | ||
171 | @@ -XXX,XX +XXX,XX @@ static void nios2_10m50_ghrd_init(MachineState *machine) | ||
172 | ram_addr_t tcm_size = 0x1000; /* 1 kiB, but QEMU limit is 4 kiB */ | ||
173 | ram_addr_t ram_base = 0x08000000; | ||
174 | ram_addr_t ram_size = 0x08000000; | ||
175 | - qemu_irq *cpu_irq, irq[32]; | ||
176 | + qemu_irq irq[32]; | ||
177 | int i; | ||
178 | |||
179 | /* Physical TCM (tb_ram_1k) with alias at 0xc0000000 */ | ||
180 | @@ -XXX,XX +XXX,XX @@ static void nios2_10m50_ghrd_init(MachineState *machine) | ||
181 | |||
182 | /* Create CPU -- FIXME */ | ||
183 | cpu = NIOS2_CPU(cpu_create(TYPE_NIOS2_CPU)); | ||
184 | - | ||
185 | - /* Register: CPU interrupt controller (PIC) */ | ||
186 | - cpu_irq = nios2_cpu_pic_init(cpu); | ||
187 | - | ||
188 | - /* Register: Internal Interrupt Controller (IIC) */ | ||
189 | - dev = qdev_new("altera,iic"); | ||
190 | - object_property_add_const_link(OBJECT(dev), "cpu", OBJECT(cpu)); | ||
191 | - sysbus_realize_and_unref(SYS_BUS_DEVICE(dev), &error_fatal); | ||
192 | - sysbus_connect_irq(SYS_BUS_DEVICE(dev), 0, cpu_irq[0]); | ||
193 | for (i = 0; i < 32; i++) { | ||
194 | - irq[i] = qdev_get_gpio_in(dev, i); | ||
195 | + irq[i] = qdev_get_gpio_in_named(DEVICE(cpu), "IRQ", i); | ||
196 | } | ||
197 | |||
198 | /* Register: Altera 16550 UART */ | ||
199 | diff --git a/hw/nios2/cpu_pic.c b/hw/nios2/cpu_pic.c | ||
200 | index XXXXXXX..XXXXXXX 100644 | ||
201 | --- a/hw/nios2/cpu_pic.c | ||
202 | +++ b/hw/nios2/cpu_pic.c | ||
203 | @@ -XXX,XX +XXX,XX @@ | ||
204 | |||
205 | #include "boot.h" | ||
206 | |||
207 | -static void nios2_pic_cpu_handler(void *opaque, int irq, int level) | ||
208 | -{ | ||
209 | - Nios2CPU *cpu = opaque; | ||
210 | - CPUNios2State *env = &cpu->env; | ||
211 | - CPUState *cs = CPU(cpu); | ||
212 | - int type = irq ? CPU_INTERRUPT_NMI : CPU_INTERRUPT_HARD; | ||
213 | - | ||
214 | - if (type == CPU_INTERRUPT_HARD) { | ||
215 | - env->irq_pending = level; | ||
216 | - | ||
217 | - if (level && (env->regs[CR_STATUS] & CR_STATUS_PIE)) { | ||
218 | - env->irq_pending = 0; | ||
219 | - cpu_interrupt(cs, type); | ||
220 | - } else if (!level) { | ||
221 | - env->irq_pending = 0; | ||
222 | - cpu_reset_interrupt(cs, type); | ||
223 | - } | ||
224 | - } else { | ||
225 | - if (level) { | ||
226 | - cpu_interrupt(cs, type); | ||
227 | - } else { | ||
228 | - cpu_reset_interrupt(cs, type); | ||
229 | - } | ||
230 | - } | ||
231 | -} | ||
232 | - | ||
233 | void nios2_check_interrupts(CPUNios2State *env) | ||
234 | { | ||
235 | if (env->irq_pending && | ||
236 | @@ -XXX,XX +XXX,XX @@ void nios2_check_interrupts(CPUNios2State *env) | ||
237 | cpu_interrupt(env_cpu(env), CPU_INTERRUPT_HARD); | ||
238 | } | ||
239 | } | ||
240 | - | ||
241 | -qemu_irq *nios2_cpu_pic_init(Nios2CPU *cpu) | ||
242 | -{ | ||
243 | - return qemu_allocate_irqs(nios2_pic_cpu_handler, cpu, 2); | ||
244 | -} | ||
245 | diff --git a/target/nios2/cpu.c b/target/nios2/cpu.c | ||
246 | index XXXXXXX..XXXXXXX 100644 | ||
247 | --- a/target/nios2/cpu.c | ||
248 | +++ b/target/nios2/cpu.c | ||
249 | @@ -XXX,XX +XXX,XX @@ static void nios2_cpu_reset(DeviceState *dev) | ||
250 | #endif | ||
251 | } | ||
252 | |||
253 | +#ifndef CONFIG_USER_ONLY | ||
254 | +static void nios2_cpu_set_irq(void *opaque, int irq, int level) | ||
255 | +{ | ||
256 | + Nios2CPU *cpu = opaque; | ||
257 | + CPUNios2State *env = &cpu->env; | ||
258 | + CPUState *cs = CPU(cpu); | ||
259 | + | ||
260 | + env->regs[CR_IPENDING] &= ~(1 << irq); | ||
261 | + env->regs[CR_IPENDING] |= !!level << irq; | ||
262 | + | ||
263 | + env->irq_pending = env->regs[CR_IPENDING] & env->regs[CR_IENABLE]; | ||
264 | + | ||
265 | + if (env->irq_pending && (env->regs[CR_STATUS] & CR_STATUS_PIE)) { | ||
266 | + env->irq_pending = 0; | ||
267 | + cpu_interrupt(cs, CPU_INTERRUPT_HARD); | ||
268 | + } else if (!env->irq_pending) { | ||
269 | + cpu_reset_interrupt(cs, CPU_INTERRUPT_HARD); | ||
270 | + } | ||
271 | +} | ||
272 | +#endif | ||
273 | + | ||
274 | static void nios2_cpu_initfn(Object *obj) | ||
275 | { | ||
276 | Nios2CPU *cpu = NIOS2_CPU(obj); | ||
277 | @@ -XXX,XX +XXX,XX @@ static void nios2_cpu_initfn(Object *obj) | ||
278 | |||
279 | #if !defined(CONFIG_USER_ONLY) | ||
280 | mmu_init(&cpu->env); | ||
281 | + | ||
282 | + /* | ||
283 | + * These interrupt lines model the IIC (internal interrupt | ||
284 | + * controller). QEMU does not currently support the EIC | ||
285 | + * (external interrupt controller) -- if we did it would be | ||
286 | + * a separate device in hw/intc with a custom interface to | ||
287 | + * the CPU, and boards using it would not wire up these IRQ lines. | ||
288 | + */ | ||
289 | + qdev_init_gpio_in_named(DEVICE(cpu), nios2_cpu_set_irq, "IRQ", 32); | ||
290 | #endif | ||
291 | } | ||
292 | |||
10 | diff --git a/MAINTAINERS b/MAINTAINERS | 293 | diff --git a/MAINTAINERS b/MAINTAINERS |
11 | index XXXXXXX..XXXXXXX 100644 | 294 | index XXXXXXX..XXXXXXX 100644 |
12 | --- a/MAINTAINERS | 295 | --- a/MAINTAINERS |
13 | +++ b/MAINTAINERS | 296 | +++ b/MAINTAINERS |
14 | @@ -XXX,XX +XXX,XX @@ F: hw/timer/cmsdk-apb-timer.c | 297 | @@ -XXX,XX +XXX,XX @@ M: Marek Vasut <marex@denx.de> |
15 | F: include/hw/timer/cmsdk-apb-timer.h | ||
16 | F: hw/char/cmsdk-apb-uart.c | ||
17 | F: include/hw/char/cmsdk-apb-uart.h | ||
18 | +F: hw/misc/tz-ppc.c | ||
19 | +F: include/hw/misc/tz-ppc.h | ||
20 | |||
21 | ARM cores | ||
22 | M: Peter Maydell <peter.maydell@linaro.org> | ||
23 | @@ -XXX,XX +XXX,XX @@ M: Peter Maydell <peter.maydell@linaro.org> | ||
24 | L: qemu-arm@nongnu.org | ||
25 | S: Maintained | 298 | S: Maintained |
26 | F: hw/arm/mps2.c | 299 | F: target/nios2/ |
27 | -F: hw/misc/mps2-scc.c | 300 | F: hw/nios2/ |
28 | -F: include/hw/misc/mps2-scc.h | 301 | -F: hw/intc/nios2_iic.c |
29 | +F: hw/arm/mps2-tz.c | 302 | F: disas/nios2.c |
30 | +F: hw/misc/mps2-*.c | 303 | F: default-configs/nios2-softmmu.mak |
31 | +F: include/hw/misc/mps2-*.h | 304 | |
32 | +F: hw/arm/iotkit.c | 305 | diff --git a/hw/intc/meson.build b/hw/intc/meson.build |
33 | +F: include/hw/arm/iotkit.h | 306 | index XXXXXXX..XXXXXXX 100644 |
34 | 307 | --- a/hw/intc/meson.build | |
35 | Musicpal | 308 | +++ b/hw/intc/meson.build |
36 | M: Jan Kiszka <jan.kiszka@web.de> | 309 | @@ -XXX,XX +XXX,XX @@ specific_ss.add(when: 'CONFIG_IBEX', if_true: files('ibex_plic.c')) |
310 | specific_ss.add(when: 'CONFIG_IOAPIC', if_true: files('ioapic.c')) | ||
311 | specific_ss.add(when: 'CONFIG_LOONGSON_LIOINTC', if_true: files('loongson_liointc.c')) | ||
312 | specific_ss.add(when: 'CONFIG_MIPS_CPS', if_true: files('mips_gic.c')) | ||
313 | -specific_ss.add(when: 'CONFIG_NIOS2', if_true: files('nios2_iic.c')) | ||
314 | specific_ss.add(when: 'CONFIG_OMAP', if_true: files('omap_intc.c')) | ||
315 | specific_ss.add(when: 'CONFIG_OMPIC', if_true: files('ompic.c')) | ||
316 | specific_ss.add(when: 'CONFIG_OPENPIC_KVM', if_true: files('openpic_kvm.c')) | ||
37 | -- | 317 | -- |
38 | 2.17.1 | 318 | 2.20.1 |
39 | 319 | ||
40 | 320 | diff view generated by jsdifflib |
1 | As part of plumbing MemTxAttrs down to the IOMMU translate method, | 1 | The function nios2_check_interrupts)() looks only at CPU-internal |
---|---|---|---|
2 | add MemTxAttrs as an argument to the MemoryRegion valid.accepts | 2 | state; it belongs in target/nios2, not hw/nios2. Move it into the |
3 | callback. We'll need this for subpage_accepts(). | 3 | same file as its only caller, so it can just be local to that file. |
4 | 4 | ||
5 | We could take the approach we used with the read and write | 5 | This removes the only remaining code from cpu_pic.c, so we can delete |
6 | callbacks and add new a new _with_attrs version, but since there | 6 | that file entirely. |
7 | are so few implementations of the accepts hook we just change | ||
8 | them all. | ||
9 | 7 | ||
10 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 8 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
11 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | 9 | Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org> |
12 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | 10 | Message-id: 20201129174022.26530-3-peter.maydell@linaro.org |
13 | Message-id: 20180521140402.23318-9-peter.maydell@linaro.org | 11 | Reviewed-by: Wentong Wu <wentong.wu@intel.com> |
12 | Tested-by: Wentong Wu <wentong.wu@intel.com> | ||
14 | --- | 13 | --- |
15 | include/exec/memory.h | 3 ++- | 14 | target/nios2/cpu.h | 2 -- |
16 | exec.c | 9 ++++++--- | 15 | hw/nios2/cpu_pic.c | 36 ------------------------------------ |
17 | hw/hppa/dino.c | 3 ++- | 16 | target/nios2/op_helper.c | 9 +++++++++ |
18 | hw/nvram/fw_cfg.c | 12 ++++++++---- | 17 | hw/nios2/meson.build | 2 +- |
19 | hw/scsi/esp.c | 3 ++- | 18 | 4 files changed, 10 insertions(+), 39 deletions(-) |
20 | hw/xen/xen_pt_msi.c | 3 ++- | 19 | delete mode 100644 hw/nios2/cpu_pic.c |
21 | memory.c | 5 +++-- | ||
22 | 7 files changed, 25 insertions(+), 13 deletions(-) | ||
23 | 20 | ||
24 | diff --git a/include/exec/memory.h b/include/exec/memory.h | 21 | diff --git a/target/nios2/cpu.h b/target/nios2/cpu.h |
25 | index XXXXXXX..XXXXXXX 100644 | 22 | index XXXXXXX..XXXXXXX 100644 |
26 | --- a/include/exec/memory.h | 23 | --- a/target/nios2/cpu.h |
27 | +++ b/include/exec/memory.h | 24 | +++ b/target/nios2/cpu.h |
28 | @@ -XXX,XX +XXX,XX @@ struct MemoryRegionOps { | 25 | @@ -XXX,XX +XXX,XX @@ void nios2_cpu_do_unaligned_access(CPUState *cpu, vaddr addr, |
29 | * as a machine check exception). | 26 | MMUAccessType access_type, |
30 | */ | 27 | int mmu_idx, uintptr_t retaddr); |
31 | bool (*accepts)(void *opaque, hwaddr addr, | 28 | |
32 | - unsigned size, bool is_write); | 29 | -void nios2_check_interrupts(CPUNios2State *env); |
33 | + unsigned size, bool is_write, | 30 | - |
34 | + MemTxAttrs attrs); | 31 | void do_nios2_semihosting(CPUNios2State *env); |
35 | } valid; | 32 | |
36 | /* Internal implementation constraints: */ | 33 | #define CPU_RESOLVING_TYPE TYPE_NIOS2_CPU |
37 | struct { | 34 | diff --git a/hw/nios2/cpu_pic.c b/hw/nios2/cpu_pic.c |
38 | diff --git a/exec.c b/exec.c | 35 | deleted file mode 100644 |
36 | index XXXXXXX..XXXXXXX | ||
37 | --- a/hw/nios2/cpu_pic.c | ||
38 | +++ /dev/null | ||
39 | @@ -XXX,XX +XXX,XX @@ | ||
40 | -/* | ||
41 | - * Altera Nios2 CPU PIC | ||
42 | - * | ||
43 | - * Copyright (c) 2016 Marek Vasut <marek.vasut@gmail.com> | ||
44 | - * | ||
45 | - * This library is free software; you can redistribute it and/or | ||
46 | - * modify it under the terms of the GNU Lesser General Public | ||
47 | - * License as published by the Free Software Foundation; either | ||
48 | - * version 2.1 of the License, or (at your option) any later version. | ||
49 | - * | ||
50 | - * This library is distributed in the hope that it will be useful, | ||
51 | - * but WITHOUT ANY WARRANTY; without even the implied warranty of | ||
52 | - * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | ||
53 | - * Lesser General Public License for more details. | ||
54 | - * | ||
55 | - * You should have received a copy of the GNU Lesser General Public | ||
56 | - * License along with this library; if not, see | ||
57 | - * <http://www.gnu.org/licenses/lgpl-2.1.html> | ||
58 | - */ | ||
59 | - | ||
60 | -#include "qemu/osdep.h" | ||
61 | -#include "cpu.h" | ||
62 | -#include "hw/irq.h" | ||
63 | - | ||
64 | -#include "qemu/config-file.h" | ||
65 | - | ||
66 | -#include "boot.h" | ||
67 | - | ||
68 | -void nios2_check_interrupts(CPUNios2State *env) | ||
69 | -{ | ||
70 | - if (env->irq_pending && | ||
71 | - (env->regs[CR_STATUS] & CR_STATUS_PIE)) { | ||
72 | - env->irq_pending = 0; | ||
73 | - cpu_interrupt(env_cpu(env), CPU_INTERRUPT_HARD); | ||
74 | - } | ||
75 | -} | ||
76 | diff --git a/target/nios2/op_helper.c b/target/nios2/op_helper.c | ||
39 | index XXXXXXX..XXXXXXX 100644 | 77 | index XXXXXXX..XXXXXXX 100644 |
40 | --- a/exec.c | 78 | --- a/target/nios2/op_helper.c |
41 | +++ b/exec.c | 79 | +++ b/target/nios2/op_helper.c |
42 | @@ -XXX,XX +XXX,XX @@ static void notdirty_mem_write(void *opaque, hwaddr ram_addr, | 80 | @@ -XXX,XX +XXX,XX @@ void helper_mmu_write(CPUNios2State *env, uint32_t rn, uint32_t v) |
81 | mmu_write(env, rn, v); | ||
43 | } | 82 | } |
44 | 83 | ||
45 | static bool notdirty_mem_accepts(void *opaque, hwaddr addr, | 84 | +static void nios2_check_interrupts(CPUNios2State *env) |
46 | - unsigned size, bool is_write) | 85 | +{ |
47 | + unsigned size, bool is_write, | 86 | + if (env->irq_pending && |
48 | + MemTxAttrs attrs) | 87 | + (env->regs[CR_STATUS] & CR_STATUS_PIE)) { |
88 | + env->irq_pending = 0; | ||
89 | + cpu_interrupt(env_cpu(env), CPU_INTERRUPT_HARD); | ||
90 | + } | ||
91 | +} | ||
92 | + | ||
93 | void helper_check_interrupts(CPUNios2State *env) | ||
49 | { | 94 | { |
50 | return is_write; | 95 | qemu_mutex_lock_iothread(); |
51 | } | 96 | diff --git a/hw/nios2/meson.build b/hw/nios2/meson.build |
52 | @@ -XXX,XX +XXX,XX @@ static MemTxResult subpage_write(void *opaque, hwaddr addr, | ||
53 | } | ||
54 | |||
55 | static bool subpage_accepts(void *opaque, hwaddr addr, | ||
56 | - unsigned len, bool is_write) | ||
57 | + unsigned len, bool is_write, | ||
58 | + MemTxAttrs attrs) | ||
59 | { | ||
60 | subpage_t *subpage = opaque; | ||
61 | #if defined(DEBUG_SUBPAGE) | ||
62 | @@ -XXX,XX +XXX,XX @@ static void readonly_mem_write(void *opaque, hwaddr addr, | ||
63 | } | ||
64 | |||
65 | static bool readonly_mem_accepts(void *opaque, hwaddr addr, | ||
66 | - unsigned size, bool is_write) | ||
67 | + unsigned size, bool is_write, | ||
68 | + MemTxAttrs attrs) | ||
69 | { | ||
70 | return is_write; | ||
71 | } | ||
72 | diff --git a/hw/hppa/dino.c b/hw/hppa/dino.c | ||
73 | index XXXXXXX..XXXXXXX 100644 | 97 | index XXXXXXX..XXXXXXX 100644 |
74 | --- a/hw/hppa/dino.c | 98 | --- a/hw/nios2/meson.build |
75 | +++ b/hw/hppa/dino.c | 99 | +++ b/hw/nios2/meson.build |
76 | @@ -XXX,XX +XXX,XX @@ static void gsc_to_pci_forwarding(DinoState *s) | 100 | @@ -XXX,XX +XXX,XX @@ |
77 | } | 101 | nios2_ss = ss.source_set() |
78 | 102 | -nios2_ss.add(files('boot.c', 'cpu_pic.c')) | |
79 | static bool dino_chip_mem_valid(void *opaque, hwaddr addr, | 103 | +nios2_ss.add(files('boot.c')) |
80 | - unsigned size, bool is_write) | 104 | nios2_ss.add(when: 'CONFIG_NIOS2_10M50', if_true: files('10m50_devboard.c')) |
81 | + unsigned size, bool is_write, | 105 | nios2_ss.add(when: 'CONFIG_NIOS2_GENERIC_NOMMU', if_true: files('generic_nommu.c')) |
82 | + MemTxAttrs attrs) | 106 | |
83 | { | ||
84 | switch (addr) { | ||
85 | case DINO_IAR0: | ||
86 | diff --git a/hw/nvram/fw_cfg.c b/hw/nvram/fw_cfg.c | ||
87 | index XXXXXXX..XXXXXXX 100644 | ||
88 | --- a/hw/nvram/fw_cfg.c | ||
89 | +++ b/hw/nvram/fw_cfg.c | ||
90 | @@ -XXX,XX +XXX,XX @@ static void fw_cfg_dma_mem_write(void *opaque, hwaddr addr, | ||
91 | } | ||
92 | |||
93 | static bool fw_cfg_dma_mem_valid(void *opaque, hwaddr addr, | ||
94 | - unsigned size, bool is_write) | ||
95 | + unsigned size, bool is_write, | ||
96 | + MemTxAttrs attrs) | ||
97 | { | ||
98 | return !is_write || ((size == 4 && (addr == 0 || addr == 4)) || | ||
99 | (size == 8 && addr == 0)); | ||
100 | } | ||
101 | |||
102 | static bool fw_cfg_data_mem_valid(void *opaque, hwaddr addr, | ||
103 | - unsigned size, bool is_write) | ||
104 | + unsigned size, bool is_write, | ||
105 | + MemTxAttrs attrs) | ||
106 | { | ||
107 | return addr == 0; | ||
108 | } | ||
109 | @@ -XXX,XX +XXX,XX @@ static void fw_cfg_ctl_mem_write(void *opaque, hwaddr addr, | ||
110 | } | ||
111 | |||
112 | static bool fw_cfg_ctl_mem_valid(void *opaque, hwaddr addr, | ||
113 | - unsigned size, bool is_write) | ||
114 | + unsigned size, bool is_write, | ||
115 | + MemTxAttrs attrs) | ||
116 | { | ||
117 | return is_write && size == 2; | ||
118 | } | ||
119 | @@ -XXX,XX +XXX,XX @@ static void fw_cfg_comb_write(void *opaque, hwaddr addr, | ||
120 | } | ||
121 | |||
122 | static bool fw_cfg_comb_valid(void *opaque, hwaddr addr, | ||
123 | - unsigned size, bool is_write) | ||
124 | + unsigned size, bool is_write, | ||
125 | + MemTxAttrs attrs) | ||
126 | { | ||
127 | return (size == 1) || (is_write && size == 2); | ||
128 | } | ||
129 | diff --git a/hw/scsi/esp.c b/hw/scsi/esp.c | ||
130 | index XXXXXXX..XXXXXXX 100644 | ||
131 | --- a/hw/scsi/esp.c | ||
132 | +++ b/hw/scsi/esp.c | ||
133 | @@ -XXX,XX +XXX,XX @@ void esp_reg_write(ESPState *s, uint32_t saddr, uint64_t val) | ||
134 | } | ||
135 | |||
136 | static bool esp_mem_accepts(void *opaque, hwaddr addr, | ||
137 | - unsigned size, bool is_write) | ||
138 | + unsigned size, bool is_write, | ||
139 | + MemTxAttrs attrs) | ||
140 | { | ||
141 | return (size == 1) || (is_write && size == 4); | ||
142 | } | ||
143 | diff --git a/hw/xen/xen_pt_msi.c b/hw/xen/xen_pt_msi.c | ||
144 | index XXXXXXX..XXXXXXX 100644 | ||
145 | --- a/hw/xen/xen_pt_msi.c | ||
146 | +++ b/hw/xen/xen_pt_msi.c | ||
147 | @@ -XXX,XX +XXX,XX @@ static uint64_t pci_msix_read(void *opaque, hwaddr addr, | ||
148 | } | ||
149 | |||
150 | static bool pci_msix_accepts(void *opaque, hwaddr addr, | ||
151 | - unsigned size, bool is_write) | ||
152 | + unsigned size, bool is_write, | ||
153 | + MemTxAttrs attrs) | ||
154 | { | ||
155 | return !(addr & (size - 1)); | ||
156 | } | ||
157 | diff --git a/memory.c b/memory.c | ||
158 | index XXXXXXX..XXXXXXX 100644 | ||
159 | --- a/memory.c | ||
160 | +++ b/memory.c | ||
161 | @@ -XXX,XX +XXX,XX @@ static void unassigned_mem_write(void *opaque, hwaddr addr, | ||
162 | } | ||
163 | |||
164 | static bool unassigned_mem_accepts(void *opaque, hwaddr addr, | ||
165 | - unsigned size, bool is_write) | ||
166 | + unsigned size, bool is_write, | ||
167 | + MemTxAttrs attrs) | ||
168 | { | ||
169 | return false; | ||
170 | } | ||
171 | @@ -XXX,XX +XXX,XX @@ bool memory_region_access_valid(MemoryRegion *mr, | ||
172 | access_size = MAX(MIN(size, access_size_max), access_size_min); | ||
173 | for (i = 0; i < size; i += access_size) { | ||
174 | if (!mr->ops->valid.accepts(mr->opaque, addr + i, access_size, | ||
175 | - is_write)) { | ||
176 | + is_write, attrs)) { | ||
177 | return false; | ||
178 | } | ||
179 | } | ||
180 | -- | 107 | -- |
181 | 2.17.1 | 108 | 2.20.1 |
182 | 109 | ||
183 | 110 | diff view generated by jsdifflib |
1 | As part of plumbing MemTxAttrs down to the IOMMU translate method, | 1 | In nios2_cpu_set_irq(), use deposit32() rather than raw shift-and-mask |
---|---|---|---|
2 | add MemTxAttrs as an argument to address_space_translate_iommu(). | 2 | operations to set the appropriate bit in the ipending register. |
3 | 3 | ||
4 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 4 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
5 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | 5 | Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org> |
6 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | 6 | Message-id: 20201129174022.26530-4-peter.maydell@linaro.org |
7 | Message-id: 20180521140402.23318-14-peter.maydell@linaro.org | ||
8 | --- | 7 | --- |
9 | exec.c | 8 +++++--- | 8 | target/nios2/cpu.c | 3 +-- |
10 | 1 file changed, 5 insertions(+), 3 deletions(-) | 9 | 1 file changed, 1 insertion(+), 2 deletions(-) |
11 | 10 | ||
12 | diff --git a/exec.c b/exec.c | 11 | diff --git a/target/nios2/cpu.c b/target/nios2/cpu.c |
13 | index XXXXXXX..XXXXXXX 100644 | 12 | index XXXXXXX..XXXXXXX 100644 |
14 | --- a/exec.c | 13 | --- a/target/nios2/cpu.c |
15 | +++ b/exec.c | 14 | +++ b/target/nios2/cpu.c |
16 | @@ -XXX,XX +XXX,XX @@ address_space_translate_internal(AddressSpaceDispatch *d, hwaddr addr, hwaddr *x | 15 | @@ -XXX,XX +XXX,XX @@ static void nios2_cpu_set_irq(void *opaque, int irq, int level) |
17 | * @is_write: whether the translation operation is for write | 16 | CPUNios2State *env = &cpu->env; |
18 | * @is_mmio: whether this can be MMIO, set true if it can | 17 | CPUState *cs = CPU(cpu); |
19 | * @target_as: the address space targeted by the IOMMU | 18 | |
20 | + * @attrs: transaction attributes | 19 | - env->regs[CR_IPENDING] &= ~(1 << irq); |
21 | * | 20 | - env->regs[CR_IPENDING] |= !!level << irq; |
22 | * This function is called from RCU critical section. It is the common | 21 | + env->regs[CR_IPENDING] = deposit32(env->regs[CR_IPENDING], irq, 1, !!level); |
23 | * part of flatview_do_translate and address_space_translate_cached. | 22 | |
24 | @@ -XXX,XX +XXX,XX @@ static MemoryRegionSection address_space_translate_iommu(IOMMUMemoryRegion *iomm | 23 | env->irq_pending = env->regs[CR_IPENDING] & env->regs[CR_IENABLE]; |
25 | hwaddr *page_mask_out, | ||
26 | bool is_write, | ||
27 | bool is_mmio, | ||
28 | - AddressSpace **target_as) | ||
29 | + AddressSpace **target_as, | ||
30 | + MemTxAttrs attrs) | ||
31 | { | ||
32 | MemoryRegionSection *section; | ||
33 | hwaddr page_mask = (hwaddr)-1; | ||
34 | @@ -XXX,XX +XXX,XX @@ static MemoryRegionSection flatview_do_translate(FlatView *fv, | ||
35 | return address_space_translate_iommu(iommu_mr, xlat, | ||
36 | plen_out, page_mask_out, | ||
37 | is_write, is_mmio, | ||
38 | - target_as); | ||
39 | + target_as, attrs); | ||
40 | } | ||
41 | if (page_mask_out) { | ||
42 | /* Not behind an IOMMU, use default page size. */ | ||
43 | @@ -XXX,XX +XXX,XX @@ static inline MemoryRegion *address_space_translate_cached( | ||
44 | |||
45 | section = address_space_translate_iommu(iommu_mr, xlat, plen, | ||
46 | NULL, is_write, true, | ||
47 | - &target_as); | ||
48 | + &target_as, attrs); | ||
49 | return section.mr; | ||
50 | } | ||
51 | 24 | ||
52 | -- | 25 | -- |
53 | 2.17.1 | 26 | 2.20.1 |
54 | 27 | ||
55 | 28 | diff view generated by jsdifflib |
1 | As part of plumbing MemTxAttrs down to the IOMMU translate method, | 1 | In rom_check_and_register_reset() we detect overlaps by looking at |
---|---|---|---|
2 | add MemTxAttrs as an argument to tb_invalidate_phys_addr(). | 2 | whether the ROM blob we're currently examining is in the same address |
3 | Its callers either have an attrs value to hand, or don't care | 3 | space and starts before the previous ROM blob ends. (This works |
4 | and can use MEMTXATTRS_UNSPECIFIED. | 4 | because the ROM list is kept sorted in order by AddressSpace and then |
5 | by address.) | ||
6 | |||
7 | Instead of keeping the AddressSpace and last address of the previous ROM | ||
8 | blob in local variables, just keep a pointer to it. | ||
9 | |||
10 | This will allow us to print more useful information when we do detect | ||
11 | an overlap. | ||
5 | 12 | ||
6 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 13 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
7 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | 14 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> |
8 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | 15 | Message-id: 20201129203923.10622-2-peter.maydell@linaro.org |
9 | Message-id: 20180521140402.23318-3-peter.maydell@linaro.org | ||
10 | --- | 16 | --- |
11 | include/exec/exec-all.h | 5 +++-- | 17 | hw/core/loader.c | 23 +++++++++++++++-------- |
12 | accel/tcg/translate-all.c | 2 +- | 18 | 1 file changed, 15 insertions(+), 8 deletions(-) |
13 | exec.c | 2 +- | ||
14 | target/xtensa/op_helper.c | 3 ++- | ||
15 | 4 files changed, 7 insertions(+), 5 deletions(-) | ||
16 | 19 | ||
17 | diff --git a/include/exec/exec-all.h b/include/exec/exec-all.h | 20 | diff --git a/hw/core/loader.c b/hw/core/loader.c |
18 | index XXXXXXX..XXXXXXX 100644 | 21 | index XXXXXXX..XXXXXXX 100644 |
19 | --- a/include/exec/exec-all.h | 22 | --- a/hw/core/loader.c |
20 | +++ b/include/exec/exec-all.h | 23 | +++ b/hw/core/loader.c |
21 | @@ -XXX,XX +XXX,XX @@ void tlb_set_page_with_attrs(CPUState *cpu, target_ulong vaddr, | 24 | @@ -XXX,XX +XXX,XX @@ static void rom_reset(void *unused) |
22 | void tlb_set_page(CPUState *cpu, target_ulong vaddr, | ||
23 | hwaddr paddr, int prot, | ||
24 | int mmu_idx, target_ulong size); | ||
25 | -void tb_invalidate_phys_addr(AddressSpace *as, hwaddr addr); | ||
26 | +void tb_invalidate_phys_addr(AddressSpace *as, hwaddr addr, MemTxAttrs attrs); | ||
27 | void probe_write(CPUArchState *env, target_ulong addr, int size, int mmu_idx, | ||
28 | uintptr_t retaddr); | ||
29 | #else | ||
30 | @@ -XXX,XX +XXX,XX @@ static inline void tlb_flush_by_mmuidx_all_cpus_synced(CPUState *cpu, | ||
31 | uint16_t idxmap) | ||
32 | { | ||
33 | } | ||
34 | -static inline void tb_invalidate_phys_addr(AddressSpace *as, hwaddr addr) | ||
35 | +static inline void tb_invalidate_phys_addr(AddressSpace *as, hwaddr addr, | ||
36 | + MemTxAttrs attrs) | ||
37 | { | ||
38 | } | ||
39 | #endif | ||
40 | diff --git a/accel/tcg/translate-all.c b/accel/tcg/translate-all.c | ||
41 | index XXXXXXX..XXXXXXX 100644 | ||
42 | --- a/accel/tcg/translate-all.c | ||
43 | +++ b/accel/tcg/translate-all.c | ||
44 | @@ -XXX,XX +XXX,XX @@ static TranslationBlock *tb_find_pc(uintptr_t tc_ptr) | ||
45 | } | ||
46 | |||
47 | #if !defined(CONFIG_USER_ONLY) | ||
48 | -void tb_invalidate_phys_addr(AddressSpace *as, hwaddr addr) | ||
49 | +void tb_invalidate_phys_addr(AddressSpace *as, hwaddr addr, MemTxAttrs attrs) | ||
50 | { | ||
51 | ram_addr_t ram_addr; | ||
52 | MemoryRegion *mr; | ||
53 | diff --git a/exec.c b/exec.c | ||
54 | index XXXXXXX..XXXXXXX 100644 | ||
55 | --- a/exec.c | ||
56 | +++ b/exec.c | ||
57 | @@ -XXX,XX +XXX,XX @@ static void breakpoint_invalidate(CPUState *cpu, target_ulong pc) | ||
58 | if (phys != -1) { | ||
59 | /* Locks grabbed by tb_invalidate_phys_addr */ | ||
60 | tb_invalidate_phys_addr(cpu->cpu_ases[asidx].as, | ||
61 | - phys | (pc & ~TARGET_PAGE_MASK)); | ||
62 | + phys | (pc & ~TARGET_PAGE_MASK), attrs); | ||
63 | } | 25 | } |
64 | } | 26 | } |
65 | #endif | 27 | |
66 | diff --git a/target/xtensa/op_helper.c b/target/xtensa/op_helper.c | 28 | +/* Return true if two consecutive ROMs in the ROM list overlap */ |
67 | index XXXXXXX..XXXXXXX 100644 | 29 | +static bool roms_overlap(Rom *last_rom, Rom *this_rom) |
68 | --- a/target/xtensa/op_helper.c | 30 | +{ |
69 | +++ b/target/xtensa/op_helper.c | 31 | + if (!last_rom) { |
70 | @@ -XXX,XX +XXX,XX @@ static void tb_invalidate_virtual_addr(CPUXtensaState *env, uint32_t vaddr) | 32 | + return false; |
71 | int ret = xtensa_get_physical_addr(env, false, vaddr, 2, 0, | 33 | + } |
72 | &paddr, &page_size, &access); | 34 | + return last_rom->as == this_rom->as && |
73 | if (ret == 0) { | 35 | + last_rom->addr + last_rom->romsize > this_rom->addr; |
74 | - tb_invalidate_phys_addr(&address_space_memory, paddr); | 36 | +} |
75 | + tb_invalidate_phys_addr(&address_space_memory, paddr, | 37 | + |
76 | + MEMTXATTRS_UNSPECIFIED); | 38 | int rom_check_and_register_reset(void) |
77 | } | 39 | { |
78 | } | 40 | - hwaddr addr = 0; |
79 | 41 | MemoryRegionSection section; | |
42 | - Rom *rom; | ||
43 | - AddressSpace *as = NULL; | ||
44 | + Rom *rom, *last_rom = NULL; | ||
45 | |||
46 | QTAILQ_FOREACH(rom, &roms, next) { | ||
47 | if (rom->fw_file) { | ||
48 | continue; | ||
49 | } | ||
50 | if (!rom->mr) { | ||
51 | - if ((addr > rom->addr) && (as == rom->as)) { | ||
52 | + if (roms_overlap(last_rom, rom)) { | ||
53 | fprintf(stderr, "rom: requested regions overlap " | ||
54 | "(rom %s. free=0x" TARGET_FMT_plx | ||
55 | ", addr=0x" TARGET_FMT_plx ")\n", | ||
56 | - rom->name, addr, rom->addr); | ||
57 | + rom->name, last_rom->addr + last_rom->romsize, | ||
58 | + rom->addr); | ||
59 | return -1; | ||
60 | } | ||
61 | - addr = rom->addr; | ||
62 | - addr += rom->romsize; | ||
63 | - as = rom->as; | ||
64 | + last_rom = rom; | ||
65 | } | ||
66 | section = memory_region_find(rom->mr ? rom->mr : get_system_memory(), | ||
67 | rom->addr, 1); | ||
80 | -- | 68 | -- |
81 | 2.17.1 | 69 | 2.20.1 |
82 | 70 | ||
83 | 71 | diff view generated by jsdifflib |
1 | As part of plumbing MemTxAttrs down to the IOMMU translate method, | 1 | In rom_check_and_register_reset() we report to the user if there is |
---|---|---|---|
2 | add MemTxAttrs as an argument to address_space_get_iotlb_entry(). | 2 | a "ROM region overlap". This has a couple of problems: |
3 | * the reported information is not very easy to intepret | ||
4 | * the function just prints the overlap to stderr (and relies on | ||
5 | its single callsite in vl.c to do an error_report() and exit) | ||
6 | * only the first overlap encountered is diagnosed | ||
7 | |||
8 | Make this function use error_report() and error_printf() and | ||
9 | report a more user-friendly report with all the overlaps | ||
10 | diagnosed. | ||
11 | |||
12 | Sample old output: | ||
13 | |||
14 | rom: requested regions overlap (rom dtb. free=0x0000000000008000, addr=0x0000000000000000) | ||
15 | qemu-system-aarch64: rom check and register reset failed | ||
16 | |||
17 | Sample new output: | ||
18 | |||
19 | qemu-system-aarch64: Some ROM regions are overlapping | ||
20 | These ROM regions might have been loaded by direct user request or by default. | ||
21 | They could be BIOS/firmware images, a guest kernel, initrd or some other file loaded into guest memory. | ||
22 | Check whether you intended to load all this guest code, and whether it has been built to load to the correct addresses. | ||
23 | |||
24 | The following two regions overlap (in the cpu-memory-0 address space): | ||
25 | phdr #0: /home/petmay01/linaro/qemu-misc-tests/ldmia-fault.axf (addresses 0x0000000000000000 - 0x0000000000008000) | ||
26 | dtb (addresses 0x0000000000000000 - 0x0000000000100000) | ||
27 | |||
28 | The following two regions overlap (in the cpu-memory-0 address space): | ||
29 | phdr #1: /home/petmay01/linaro/qemu-misc-tests/bad-psci-call.axf (addresses 0x0000000040000000 - 0x0000000040000010) | ||
30 | phdr #0: /home/petmay01/linaro/qemu-misc-tests/bp-test.elf (addresses 0x0000000040000000 - 0x0000000040000020) | ||
3 | 31 | ||
4 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 32 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
5 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | ||
6 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | 33 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> |
7 | Message-id: 20180521140402.23318-12-peter.maydell@linaro.org | 34 | Message-id: 20201129203923.10622-3-peter.maydell@linaro.org |
8 | --- | 35 | --- |
9 | include/exec/memory.h | 2 +- | 36 | hw/core/loader.c | 48 ++++++++++++++++++++++++++++++++++++++++++------ |
10 | exec.c | 2 +- | 37 | softmmu/vl.c | 1 - |
11 | hw/virtio/vhost.c | 3 ++- | 38 | 2 files changed, 42 insertions(+), 7 deletions(-) |
12 | 3 files changed, 4 insertions(+), 3 deletions(-) | ||
13 | 39 | ||
14 | diff --git a/include/exec/memory.h b/include/exec/memory.h | 40 | diff --git a/hw/core/loader.c b/hw/core/loader.c |
15 | index XXXXXXX..XXXXXXX 100644 | 41 | index XXXXXXX..XXXXXXX 100644 |
16 | --- a/include/exec/memory.h | 42 | --- a/hw/core/loader.c |
17 | +++ b/include/exec/memory.h | 43 | +++ b/hw/core/loader.c |
18 | @@ -XXX,XX +XXX,XX @@ void address_space_cache_destroy(MemoryRegionCache *cache); | 44 | @@ -XXX,XX +XXX,XX @@ static bool roms_overlap(Rom *last_rom, Rom *this_rom) |
19 | * entry. Should be called from an RCU critical section. | 45 | last_rom->addr + last_rom->romsize > this_rom->addr; |
20 | */ | 46 | } |
21 | IOMMUTLBEntry address_space_get_iotlb_entry(AddressSpace *as, hwaddr addr, | 47 | |
22 | - bool is_write); | 48 | +static const char *rom_as_name(Rom *rom) |
23 | + bool is_write, MemTxAttrs attrs); | 49 | +{ |
24 | 50 | + const char *name = rom->as ? rom->as->name : NULL; | |
25 | /* address_space_translate: translate an address range into an address space | 51 | + return name ?: "anonymous"; |
26 | * into a MemoryRegion and an address range into that section. Should be | 52 | +} |
27 | diff --git a/exec.c b/exec.c | 53 | + |
28 | index XXXXXXX..XXXXXXX 100644 | 54 | +static void rom_print_overlap_error_header(void) |
29 | --- a/exec.c | 55 | +{ |
30 | +++ b/exec.c | 56 | + error_report("Some ROM regions are overlapping"); |
31 | @@ -XXX,XX +XXX,XX @@ static MemoryRegionSection flatview_do_translate(FlatView *fv, | 57 | + error_printf( |
32 | 58 | + "These ROM regions might have been loaded by " | |
33 | /* Called from RCU critical section */ | 59 | + "direct user request or by default.\n" |
34 | IOMMUTLBEntry address_space_get_iotlb_entry(AddressSpace *as, hwaddr addr, | 60 | + "They could be BIOS/firmware images, a guest kernel, " |
35 | - bool is_write) | 61 | + "initrd or some other file loaded into guest memory.\n" |
36 | + bool is_write, MemTxAttrs attrs) | 62 | + "Check whether you intended to load all this guest code, and " |
63 | + "whether it has been built to load to the correct addresses.\n"); | ||
64 | +} | ||
65 | + | ||
66 | +static void rom_print_one_overlap_error(Rom *last_rom, Rom *rom) | ||
67 | +{ | ||
68 | + error_printf( | ||
69 | + "\nThe following two regions overlap (in the %s address space):\n", | ||
70 | + rom_as_name(rom)); | ||
71 | + error_printf( | ||
72 | + " %s (addresses 0x" TARGET_FMT_plx " - 0x" TARGET_FMT_plx ")\n", | ||
73 | + last_rom->name, last_rom->addr, last_rom->addr + last_rom->romsize); | ||
74 | + error_printf( | ||
75 | + " %s (addresses 0x" TARGET_FMT_plx " - 0x" TARGET_FMT_plx ")\n", | ||
76 | + rom->name, rom->addr, rom->addr + rom->romsize); | ||
77 | +} | ||
78 | + | ||
79 | int rom_check_and_register_reset(void) | ||
37 | { | 80 | { |
38 | MemoryRegionSection section; | 81 | MemoryRegionSection section; |
39 | hwaddr xlat, page_mask; | 82 | Rom *rom, *last_rom = NULL; |
40 | diff --git a/hw/virtio/vhost.c b/hw/virtio/vhost.c | 83 | + bool found_overlap = false; |
84 | |||
85 | QTAILQ_FOREACH(rom, &roms, next) { | ||
86 | if (rom->fw_file) { | ||
87 | @@ -XXX,XX +XXX,XX @@ int rom_check_and_register_reset(void) | ||
88 | } | ||
89 | if (!rom->mr) { | ||
90 | if (roms_overlap(last_rom, rom)) { | ||
91 | - fprintf(stderr, "rom: requested regions overlap " | ||
92 | - "(rom %s. free=0x" TARGET_FMT_plx | ||
93 | - ", addr=0x" TARGET_FMT_plx ")\n", | ||
94 | - rom->name, last_rom->addr + last_rom->romsize, | ||
95 | - rom->addr); | ||
96 | - return -1; | ||
97 | + if (!found_overlap) { | ||
98 | + found_overlap = true; | ||
99 | + rom_print_overlap_error_header(); | ||
100 | + } | ||
101 | + rom_print_one_overlap_error(last_rom, rom); | ||
102 | + /* Keep going through the list so we report all overlaps */ | ||
103 | } | ||
104 | last_rom = rom; | ||
105 | } | ||
106 | @@ -XXX,XX +XXX,XX @@ int rom_check_and_register_reset(void) | ||
107 | rom->isrom = int128_nz(section.size) && memory_region_is_rom(section.mr); | ||
108 | memory_region_unref(section.mr); | ||
109 | } | ||
110 | + if (found_overlap) { | ||
111 | + return -1; | ||
112 | + } | ||
113 | + | ||
114 | qemu_register_reset(rom_reset, NULL); | ||
115 | roms_loaded = 1; | ||
116 | return 0; | ||
117 | diff --git a/softmmu/vl.c b/softmmu/vl.c | ||
41 | index XXXXXXX..XXXXXXX 100644 | 118 | index XXXXXXX..XXXXXXX 100644 |
42 | --- a/hw/virtio/vhost.c | 119 | --- a/softmmu/vl.c |
43 | +++ b/hw/virtio/vhost.c | 120 | +++ b/softmmu/vl.c |
44 | @@ -XXX,XX +XXX,XX @@ int vhost_device_iotlb_miss(struct vhost_dev *dev, uint64_t iova, int write) | 121 | @@ -XXX,XX +XXX,XX @@ static void qemu_machine_creation_done(void) |
45 | trace_vhost_iotlb_miss(dev, 1); | 122 | qemu_run_machine_init_done_notifiers(); |
46 | 123 | ||
47 | iotlb = address_space_get_iotlb_entry(dev->vdev->dma_as, | 124 | if (rom_check_and_register_reset() != 0) { |
48 | - iova, write); | 125 | - error_report("rom check and register reset failed"); |
49 | + iova, write, | 126 | exit(1); |
50 | + MEMTXATTRS_UNSPECIFIED); | 127 | } |
51 | if (iotlb.target_as != NULL) { | 128 | |
52 | ret = vhost_memory_region_lookup(dev, iotlb.translated_addr, | ||
53 | &uaddr, &len); | ||
54 | -- | 129 | -- |
55 | 2.17.1 | 130 | 2.20.1 |
56 | 131 | ||
57 | 132 | diff view generated by jsdifflib |
1 | The FRECPX instructions should (like most other floating point operations) | 1 | Currently the load_elf code assembles the ROM blob name into a |
---|---|---|---|
2 | honour the FPCR.FZ bit which specifies whether input denormals should | 2 | local 128 byte fixed-size array. Use g_strdup_printf() instead so |
3 | be flushed to zero (or FZ16 for the half-precision version). | 3 | that we don't truncate the pathname if it happens to be long. |
4 | We forgot to implement this, which doesn't affect the results (since | 4 | (This matters mostly for monitor 'info roms' output and for the |
5 | the calculation doesn't actually care about the mantissa bits) but did | 5 | error messages if ROM blobs overlap.) |
6 | mean we were failing to set the FPSR.IDC bit. | ||
7 | 6 | ||
8 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 7 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
9 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | 8 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> |
10 | Message-id: 20180521172712.19930-1-peter.maydell@linaro.org | 9 | Message-id: 20201129203923.10622-4-peter.maydell@linaro.org |
11 | --- | 10 | --- |
12 | target/arm/helper-a64.c | 6 ++++++ | 11 | include/hw/elf_ops.h | 4 ++-- |
13 | 1 file changed, 6 insertions(+) | 12 | 1 file changed, 2 insertions(+), 2 deletions(-) |
14 | 13 | ||
15 | diff --git a/target/arm/helper-a64.c b/target/arm/helper-a64.c | 14 | diff --git a/include/hw/elf_ops.h b/include/hw/elf_ops.h |
16 | index XXXXXXX..XXXXXXX 100644 | 15 | index XXXXXXX..XXXXXXX 100644 |
17 | --- a/target/arm/helper-a64.c | 16 | --- a/include/hw/elf_ops.h |
18 | +++ b/target/arm/helper-a64.c | 17 | +++ b/include/hw/elf_ops.h |
19 | @@ -XXX,XX +XXX,XX @@ float16 HELPER(frecpx_f16)(float16 a, void *fpstp) | 18 | @@ -XXX,XX +XXX,XX @@ static int glue(load_elf, SZ)(const char *name, int fd, |
20 | return nan; | 19 | uint64_t addr, low = (uint64_t)-1, high = 0; |
21 | } | 20 | GMappedFile *mapped_file = NULL; |
22 | 21 | uint8_t *data = NULL; | |
23 | + a = float16_squash_input_denormal(a, fpst); | 22 | - char label[128]; |
24 | + | 23 | int ret = ELF_LOAD_FAILED; |
25 | val16 = float16_val(a); | 24 | |
26 | sbit = 0x8000 & val16; | 25 | if (read(fd, &ehdr, sizeof(ehdr)) != sizeof(ehdr)) |
27 | exp = extract32(val16, 10, 5); | 26 | @@ -XXX,XX +XXX,XX @@ static int glue(load_elf, SZ)(const char *name, int fd, |
28 | @@ -XXX,XX +XXX,XX @@ float32 HELPER(frecpx_f32)(float32 a, void *fpstp) | 27 | */ |
29 | return nan; | 28 | if (mem_size != 0) { |
30 | } | 29 | if (load_rom) { |
31 | 30 | - snprintf(label, sizeof(label), "phdr #%d: %s", i, name); | |
32 | + a = float32_squash_input_denormal(a, fpst); | 31 | + g_autofree char *label = |
33 | + | 32 | + g_strdup_printf("phdr #%d: %s", i, name); |
34 | val32 = float32_val(a); | 33 | |
35 | sbit = 0x80000000ULL & val32; | 34 | /* |
36 | exp = extract32(val32, 23, 8); | 35 | * rom_add_elf_program() takes its own reference to |
37 | @@ -XXX,XX +XXX,XX @@ float64 HELPER(frecpx_f64)(float64 a, void *fpstp) | ||
38 | return nan; | ||
39 | } | ||
40 | |||
41 | + a = float64_squash_input_denormal(a, fpst); | ||
42 | + | ||
43 | val64 = float64_val(a); | ||
44 | sbit = 0x8000000000000000ULL & val64; | ||
45 | exp = extract64(float64_val(a), 52, 11); | ||
46 | -- | 36 | -- |
47 | 2.17.1 | 37 | 2.20.1 |
48 | 38 | ||
49 | 39 | diff view generated by jsdifflib |
1 | Add more detail to the documentation for memory_region_init_iommu() | 1 | Instead of making the ROM blob name something like: |
---|---|---|---|
2 | and other IOMMU-related functions and data structures. | 2 | phdr #0: /home/petmay01/linaro/qemu-misc-tests/ldmia-fault.axf |
3 | make it a little more self-explanatory for people who don't know | ||
4 | ELF format details: | ||
5 | /home/petmay01/linaro/qemu-misc-tests/ldmia-fault.axf ELF program header segment 0 | ||
3 | 6 | ||
4 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 7 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
5 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | 8 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> |
6 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | 9 | Message-id: 20201129203923.10622-5-peter.maydell@linaro.org |
7 | Reviewed-by: Eric Auger <eric.auger@redhat.com> | ||
8 | Message-id: 20180521140402.23318-2-peter.maydell@linaro.org | ||
9 | --- | 10 | --- |
10 | include/exec/memory.h | 105 ++++++++++++++++++++++++++++++++++++++---- | 11 | include/hw/elf_ops.h | 3 ++- |
11 | 1 file changed, 95 insertions(+), 10 deletions(-) | 12 | 1 file changed, 2 insertions(+), 1 deletion(-) |
12 | 13 | ||
13 | diff --git a/include/exec/memory.h b/include/exec/memory.h | 14 | diff --git a/include/hw/elf_ops.h b/include/hw/elf_ops.h |
14 | index XXXXXXX..XXXXXXX 100644 | 15 | index XXXXXXX..XXXXXXX 100644 |
15 | --- a/include/exec/memory.h | 16 | --- a/include/hw/elf_ops.h |
16 | +++ b/include/exec/memory.h | 17 | +++ b/include/hw/elf_ops.h |
17 | @@ -XXX,XX +XXX,XX @@ enum IOMMUMemoryRegionAttr { | 18 | @@ -XXX,XX +XXX,XX @@ static int glue(load_elf, SZ)(const char *name, int fd, |
18 | IOMMU_ATTR_SPAPR_TCE_FD | 19 | if (mem_size != 0) { |
19 | }; | 20 | if (load_rom) { |
20 | 21 | g_autofree char *label = | |
21 | +/** | 22 | - g_strdup_printf("phdr #%d: %s", i, name); |
22 | + * IOMMUMemoryRegionClass: | 23 | + g_strdup_printf("%s ELF program header segment %d", |
23 | + * | 24 | + name, i); |
24 | + * All IOMMU implementations need to subclass TYPE_IOMMU_MEMORY_REGION | 25 | |
25 | + * and provide an implementation of at least the @translate method here | 26 | /* |
26 | + * to handle requests to the memory region. Other methods are optional. | 27 | * rom_add_elf_program() takes its own reference to |
27 | + * | ||
28 | + * The IOMMU implementation must use the IOMMU notifier infrastructure | ||
29 | + * to report whenever mappings are changed, by calling | ||
30 | + * memory_region_notify_iommu() (or, if necessary, by calling | ||
31 | + * memory_region_notify_one() for each registered notifier). | ||
32 | + */ | ||
33 | typedef struct IOMMUMemoryRegionClass { | ||
34 | /* private */ | ||
35 | struct DeviceClass parent_class; | ||
36 | |||
37 | /* | ||
38 | - * Return a TLB entry that contains a given address. Flag should | ||
39 | - * be the access permission of this translation operation. We can | ||
40 | - * set flag to IOMMU_NONE to mean that we don't need any | ||
41 | - * read/write permission checks, like, when for region replay. | ||
42 | + * Return a TLB entry that contains a given address. | ||
43 | + * | ||
44 | + * The IOMMUAccessFlags indicated via @flag are optional and may | ||
45 | + * be specified as IOMMU_NONE to indicate that the caller needs | ||
46 | + * the full translation information for both reads and writes. If | ||
47 | + * the access flags are specified then the IOMMU implementation | ||
48 | + * may use this as an optimization, to stop doing a page table | ||
49 | + * walk as soon as it knows that the requested permissions are not | ||
50 | + * allowed. If IOMMU_NONE is passed then the IOMMU must do the | ||
51 | + * full page table walk and report the permissions in the returned | ||
52 | + * IOMMUTLBEntry. (Note that this implies that an IOMMU may not | ||
53 | + * return different mappings for reads and writes.) | ||
54 | + * | ||
55 | + * The returned information remains valid while the caller is | ||
56 | + * holding the big QEMU lock or is inside an RCU critical section; | ||
57 | + * if the caller wishes to cache the mapping beyond that it must | ||
58 | + * register an IOMMU notifier so it can invalidate its cached | ||
59 | + * information when the IOMMU mapping changes. | ||
60 | + * | ||
61 | + * @iommu: the IOMMUMemoryRegion | ||
62 | + * @hwaddr: address to be translated within the memory region | ||
63 | + * @flag: requested access permissions | ||
64 | */ | ||
65 | IOMMUTLBEntry (*translate)(IOMMUMemoryRegion *iommu, hwaddr addr, | ||
66 | IOMMUAccessFlags flag); | ||
67 | - /* Returns minimum supported page size */ | ||
68 | + /* Returns minimum supported page size in bytes. | ||
69 | + * If this method is not provided then the minimum is assumed to | ||
70 | + * be TARGET_PAGE_SIZE. | ||
71 | + * | ||
72 | + * @iommu: the IOMMUMemoryRegion | ||
73 | + */ | ||
74 | uint64_t (*get_min_page_size)(IOMMUMemoryRegion *iommu); | ||
75 | - /* Called when IOMMU Notifier flag changed */ | ||
76 | + /* Called when IOMMU Notifier flag changes (ie when the set of | ||
77 | + * events which IOMMU users are requesting notification for changes). | ||
78 | + * Optional method -- need not be provided if the IOMMU does not | ||
79 | + * need to know exactly which events must be notified. | ||
80 | + * | ||
81 | + * @iommu: the IOMMUMemoryRegion | ||
82 | + * @old_flags: events which previously needed to be notified | ||
83 | + * @new_flags: events which now need to be notified | ||
84 | + */ | ||
85 | void (*notify_flag_changed)(IOMMUMemoryRegion *iommu, | ||
86 | IOMMUNotifierFlag old_flags, | ||
87 | IOMMUNotifierFlag new_flags); | ||
88 | - /* Set this up to provide customized IOMMU replay function */ | ||
89 | + /* Called to handle memory_region_iommu_replay(). | ||
90 | + * | ||
91 | + * The default implementation of memory_region_iommu_replay() is to | ||
92 | + * call the IOMMU translate method for every page in the address space | ||
93 | + * with flag == IOMMU_NONE and then call the notifier if translate | ||
94 | + * returns a valid mapping. If this method is implemented then it | ||
95 | + * overrides the default behaviour, and must provide the full semantics | ||
96 | + * of memory_region_iommu_replay(), by calling @notifier for every | ||
97 | + * translation present in the IOMMU. | ||
98 | + * | ||
99 | + * Optional method -- an IOMMU only needs to provide this method | ||
100 | + * if the default is inefficient or produces undesirable side effects. | ||
101 | + * | ||
102 | + * Note: this is not related to record-and-replay functionality. | ||
103 | + */ | ||
104 | void (*replay)(IOMMUMemoryRegion *iommu, IOMMUNotifier *notifier); | ||
105 | |||
106 | - /* Get IOMMU misc attributes */ | ||
107 | - int (*get_attr)(IOMMUMemoryRegion *iommu, enum IOMMUMemoryRegionAttr, | ||
108 | + /* Get IOMMU misc attributes. This is an optional method that | ||
109 | + * can be used to allow users of the IOMMU to get implementation-specific | ||
110 | + * information. The IOMMU implements this method to handle calls | ||
111 | + * by IOMMU users to memory_region_iommu_get_attr() by filling in | ||
112 | + * the arbitrary data pointer for any IOMMUMemoryRegionAttr values that | ||
113 | + * the IOMMU supports. If the method is unimplemented then | ||
114 | + * memory_region_iommu_get_attr() will always return -EINVAL. | ||
115 | + * | ||
116 | + * @iommu: the IOMMUMemoryRegion | ||
117 | + * @attr: attribute being queried | ||
118 | + * @data: memory to fill in with the attribute data | ||
119 | + * | ||
120 | + * Returns 0 on success, or a negative errno; in particular | ||
121 | + * returns -EINVAL for unrecognized or unimplemented attribute types. | ||
122 | + */ | ||
123 | + int (*get_attr)(IOMMUMemoryRegion *iommu, enum IOMMUMemoryRegionAttr attr, | ||
124 | void *data); | ||
125 | } IOMMUMemoryRegionClass; | ||
126 | |||
127 | @@ -XXX,XX +XXX,XX @@ static inline void memory_region_init_reservation(MemoryRegion *mr, | ||
128 | * An IOMMU region translates addresses and forwards accesses to a target | ||
129 | * memory region. | ||
130 | * | ||
131 | + * The IOMMU implementation must define a subclass of TYPE_IOMMU_MEMORY_REGION. | ||
132 | + * @_iommu_mr should be a pointer to enough memory for an instance of | ||
133 | + * that subclass, @instance_size is the size of that subclass, and | ||
134 | + * @mrtypename is its name. This function will initialize @_iommu_mr as an | ||
135 | + * instance of the subclass, and its methods will then be called to handle | ||
136 | + * accesses to the memory region. See the documentation of | ||
137 | + * #IOMMUMemoryRegionClass for further details. | ||
138 | + * | ||
139 | * @_iommu_mr: the #IOMMUMemoryRegion to be initialized | ||
140 | * @instance_size: the IOMMUMemoryRegion subclass instance size | ||
141 | * @mrtypename: the type name of the #IOMMUMemoryRegion | ||
142 | @@ -XXX,XX +XXX,XX @@ void memory_region_register_iommu_notifier(MemoryRegion *mr, | ||
143 | * a notifier with the minimum page granularity returned by | ||
144 | * mr->iommu_ops->get_page_size(). | ||
145 | * | ||
146 | + * Note: this is not related to record-and-replay functionality. | ||
147 | + * | ||
148 | * @iommu_mr: the memory region to observe | ||
149 | * @n: the notifier to which to replay iommu mappings | ||
150 | */ | ||
151 | @@ -XXX,XX +XXX,XX @@ void memory_region_iommu_replay(IOMMUMemoryRegion *iommu_mr, IOMMUNotifier *n); | ||
152 | * memory_region_iommu_replay_all: replay existing IOMMU translations | ||
153 | * to all the notifiers registered. | ||
154 | * | ||
155 | + * Note: this is not related to record-and-replay functionality. | ||
156 | + * | ||
157 | * @iommu_mr: the memory region to observe | ||
158 | */ | ||
159 | void memory_region_iommu_replay_all(IOMMUMemoryRegion *iommu_mr); | ||
160 | @@ -XXX,XX +XXX,XX @@ void memory_region_unregister_iommu_notifier(MemoryRegion *mr, | ||
161 | * memory_region_iommu_get_attr: return an IOMMU attr if get_attr() is | ||
162 | * defined on the IOMMU. | ||
163 | * | ||
164 | - * Returns 0 if succeded, error code otherwise. | ||
165 | + * Returns 0 on success, or a negative errno otherwise. In particular, | ||
166 | + * -EINVAL indicates that the IOMMU does not support the requested | ||
167 | + * attribute. | ||
168 | * | ||
169 | * @iommu_mr: the memory region | ||
170 | * @attr: the requested attribute | ||
171 | -- | 28 | -- |
172 | 2.17.1 | 29 | 2.20.1 |
173 | 30 | ||
174 | 31 | diff view generated by jsdifflib |
1 | From: Shannon Zhao <zhaoshenglong@huawei.com> | 1 | From: Sai Pavan Boddu <sai.pavan.boddu@xilinx.com> |
---|---|---|---|
2 | 2 | ||
3 | kvm_irqchip_create called by kvm_init will call kvm_init_irq_routing to | 3 | This module emulates control registers of versal usb2 controller, this is added |
4 | initialize global capability variables. If we call kvm_init_irq_routing in | 4 | just to make guest happy. In general this module would control the phy-reset |
5 | GIC realize function, previous allocated memory will leak. | 5 | signal from usb controller, data coherency of the transactions, signals |
6 | 6 | the host system errors received from controller. | |
7 | Fix this by deleting the unnecessary call. | 7 | |
8 | 8 | Signed-off-by: Sai Pavan Boddu <sai.pavan.boddu@xilinx.com> | |
9 | Signed-off-by: Shannon Zhao <zhaoshenglong@huawei.com> | 9 | Signed-off-by: Vikram Garhwal <fnu.vikram@xilinx.com> |
10 | Reviewed-by: Eric Auger <eric.auger@redhat.com> | 10 | Reviewed-by: Edgar E. Iglesias <edgar.iglesias@xilinx.com> |
11 | Message-id: 1527750994-14360-1-git-send-email-zhaoshenglong@huawei.com | 11 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
12 | Message-id: 1607023357-5096-2-git-send-email-sai.pavan.boddu@xilinx.com | ||
12 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 13 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
13 | --- | 14 | --- |
14 | hw/intc/arm_gic_kvm.c | 1 - | 15 | include/hw/usb/xlnx-versal-usb2-ctrl-regs.h | 45 ++++ |
15 | hw/intc/arm_gicv3_kvm.c | 1 - | 16 | hw/usb/xlnx-versal-usb2-ctrl-regs.c | 229 ++++++++++++++++++++ |
16 | 2 files changed, 2 deletions(-) | 17 | hw/usb/meson.build | 1 + |
17 | 18 | 3 files changed, 275 insertions(+) | |
18 | diff --git a/hw/intc/arm_gic_kvm.c b/hw/intc/arm_gic_kvm.c | 19 | create mode 100644 include/hw/usb/xlnx-versal-usb2-ctrl-regs.h |
20 | create mode 100644 hw/usb/xlnx-versal-usb2-ctrl-regs.c | ||
21 | |||
22 | diff --git a/include/hw/usb/xlnx-versal-usb2-ctrl-regs.h b/include/hw/usb/xlnx-versal-usb2-ctrl-regs.h | ||
23 | new file mode 100644 | ||
24 | index XXXXXXX..XXXXXXX | ||
25 | --- /dev/null | ||
26 | +++ b/include/hw/usb/xlnx-versal-usb2-ctrl-regs.h | ||
27 | @@ -XXX,XX +XXX,XX @@ | ||
28 | +/* | ||
29 | + * QEMU model of the VersalUsb2CtrlRegs Register control/Status block for | ||
30 | + * USB2.0 controller | ||
31 | + * | ||
32 | + * Copyright (c) 2020 Xilinx Inc. Vikram Garhwal <fnu.vikram@xilinx.com> | ||
33 | + * | ||
34 | + * Permission is hereby granted, free of charge, to any person obtaining a copy | ||
35 | + * of this software and associated documentation files (the "Software"), to deal | ||
36 | + * in the Software without restriction, including without limitation the rights | ||
37 | + * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell | ||
38 | + * copies of the Software, and to permit persons to whom the Software is | ||
39 | + * furnished to do so, subject to the following conditions: | ||
40 | + * | ||
41 | + * The above copyright notice and this permission notice shall be included in | ||
42 | + * all copies or substantial portions of the Software. | ||
43 | + * | ||
44 | + * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR | ||
45 | + * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, | ||
46 | + * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL | ||
47 | + * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | ||
48 | + * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, | ||
49 | + * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN | ||
50 | + * THE SOFTWARE. | ||
51 | + */ | ||
52 | + | ||
53 | +#ifndef _XLNX_USB2_REGS_H_ | ||
54 | +#define _XLNX_USB2_REGS_H_ | ||
55 | + | ||
56 | +#define TYPE_XILINX_VERSAL_USB2_CTRL_REGS "xlnx.versal-usb2-ctrl-regs" | ||
57 | + | ||
58 | +#define XILINX_VERSAL_USB2_CTRL_REGS(obj) \ | ||
59 | + OBJECT_CHECK(VersalUsb2CtrlRegs, (obj), TYPE_XILINX_VERSAL_USB2_CTRL_REGS) | ||
60 | + | ||
61 | +#define USB2_REGS_R_MAX ((0x78 / 4) + 1) | ||
62 | + | ||
63 | +typedef struct VersalUsb2CtrlRegs { | ||
64 | + SysBusDevice parent_obj; | ||
65 | + MemoryRegion iomem; | ||
66 | + qemu_irq irq_ir; | ||
67 | + | ||
68 | + uint32_t regs[USB2_REGS_R_MAX]; | ||
69 | + RegisterInfo regs_info[USB2_REGS_R_MAX]; | ||
70 | +} VersalUsb2CtrlRegs; | ||
71 | + | ||
72 | +#endif | ||
73 | diff --git a/hw/usb/xlnx-versal-usb2-ctrl-regs.c b/hw/usb/xlnx-versal-usb2-ctrl-regs.c | ||
74 | new file mode 100644 | ||
75 | index XXXXXXX..XXXXXXX | ||
76 | --- /dev/null | ||
77 | +++ b/hw/usb/xlnx-versal-usb2-ctrl-regs.c | ||
78 | @@ -XXX,XX +XXX,XX @@ | ||
79 | +/* | ||
80 | + * QEMU model of the VersalUsb2CtrlRegs Register control/Status block for | ||
81 | + * USB2.0 controller | ||
82 | + * | ||
83 | + * This module should control phy_reset, permanent device plugs, frame length | ||
84 | + * time adjust & setting of coherency paths. None of which are emulated in | ||
85 | + * present model. | ||
86 | + * | ||
87 | + * Copyright (c) 2020 Xilinx Inc. Vikram Garhwal <fnu.vikram@xilinx.com> | ||
88 | + * | ||
89 | + * Permission is hereby granted, free of charge, to any person obtaining a copy | ||
90 | + * of this software and associated documentation files (the "Software"), to deal | ||
91 | + * in the Software without restriction, including without limitation the rights | ||
92 | + * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell | ||
93 | + * copies of the Software, and to permit persons to whom the Software is | ||
94 | + * furnished to do so, subject to the following conditions: | ||
95 | + * | ||
96 | + * The above copyright notice and this permission notice shall be included in | ||
97 | + * all copies or substantial portions of the Software. | ||
98 | + * | ||
99 | + * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR | ||
100 | + * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, | ||
101 | + * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL | ||
102 | + * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | ||
103 | + * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, | ||
104 | + * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN | ||
105 | + * THE SOFTWARE. | ||
106 | + */ | ||
107 | + | ||
108 | +#include "qemu/osdep.h" | ||
109 | +#include "hw/sysbus.h" | ||
110 | +#include "hw/irq.h" | ||
111 | +#include "hw/register.h" | ||
112 | +#include "qemu/bitops.h" | ||
113 | +#include "qemu/log.h" | ||
114 | +#include "qom/object.h" | ||
115 | +#include "migration/vmstate.h" | ||
116 | +#include "hw/usb/xlnx-versal-usb2-ctrl-regs.h" | ||
117 | + | ||
118 | +#ifndef XILINX_VERSAL_USB2_CTRL_REGS_ERR_DEBUG | ||
119 | +#define XILINX_VERSAL_USB2_CTRL_REGS_ERR_DEBUG 0 | ||
120 | +#endif | ||
121 | + | ||
122 | +REG32(BUS_FILTER, 0x30) | ||
123 | + FIELD(BUS_FILTER, BYPASS, 0, 4) | ||
124 | +REG32(PORT, 0x34) | ||
125 | + FIELD(PORT, HOST_SMI_BAR_WR, 4, 1) | ||
126 | + FIELD(PORT, HOST_SMI_PCI_CMD_REG_WR, 3, 1) | ||
127 | + FIELD(PORT, HOST_MSI_ENABLE, 2, 1) | ||
128 | + FIELD(PORT, PWR_CTRL_PRSNT, 1, 1) | ||
129 | + FIELD(PORT, HUB_PERM_ATTACH, 0, 1) | ||
130 | +REG32(JITTER_ADJUST, 0x38) | ||
131 | + FIELD(JITTER_ADJUST, FLADJ, 0, 6) | ||
132 | +REG32(BIGENDIAN, 0x40) | ||
133 | + FIELD(BIGENDIAN, ENDIAN_GS, 0, 1) | ||
134 | +REG32(COHERENCY, 0x44) | ||
135 | + FIELD(COHERENCY, USB_COHERENCY, 0, 1) | ||
136 | +REG32(XHC_BME, 0x48) | ||
137 | + FIELD(XHC_BME, XHC_BME, 0, 1) | ||
138 | +REG32(REG_CTRL, 0x60) | ||
139 | + FIELD(REG_CTRL, SLVERR_ENABLE, 0, 1) | ||
140 | +REG32(IR_STATUS, 0x64) | ||
141 | + FIELD(IR_STATUS, HOST_SYS_ERR, 1, 1) | ||
142 | + FIELD(IR_STATUS, ADDR_DEC_ERR, 0, 1) | ||
143 | +REG32(IR_MASK, 0x68) | ||
144 | + FIELD(IR_MASK, HOST_SYS_ERR, 1, 1) | ||
145 | + FIELD(IR_MASK, ADDR_DEC_ERR, 0, 1) | ||
146 | +REG32(IR_ENABLE, 0x6c) | ||
147 | + FIELD(IR_ENABLE, HOST_SYS_ERR, 1, 1) | ||
148 | + FIELD(IR_ENABLE, ADDR_DEC_ERR, 0, 1) | ||
149 | +REG32(IR_DISABLE, 0x70) | ||
150 | + FIELD(IR_DISABLE, HOST_SYS_ERR, 1, 1) | ||
151 | + FIELD(IR_DISABLE, ADDR_DEC_ERR, 0, 1) | ||
152 | +REG32(USB3, 0x78) | ||
153 | + | ||
154 | +static void ir_update_irq(VersalUsb2CtrlRegs *s) | ||
155 | +{ | ||
156 | + bool pending = s->regs[R_IR_STATUS] & ~s->regs[R_IR_MASK]; | ||
157 | + qemu_set_irq(s->irq_ir, pending); | ||
158 | +} | ||
159 | + | ||
160 | +static void ir_status_postw(RegisterInfo *reg, uint64_t val64) | ||
161 | +{ | ||
162 | + VersalUsb2CtrlRegs *s = XILINX_VERSAL_USB2_CTRL_REGS(reg->opaque); | ||
163 | + /* | ||
164 | + * TODO: This should also clear USBSTS.HSE field in USB XHCI register. | ||
165 | + * May be combine both the modules. | ||
166 | + */ | ||
167 | + ir_update_irq(s); | ||
168 | +} | ||
169 | + | ||
170 | +static uint64_t ir_enable_prew(RegisterInfo *reg, uint64_t val64) | ||
171 | +{ | ||
172 | + VersalUsb2CtrlRegs *s = XILINX_VERSAL_USB2_CTRL_REGS(reg->opaque); | ||
173 | + uint32_t val = val64; | ||
174 | + | ||
175 | + s->regs[R_IR_MASK] &= ~val; | ||
176 | + ir_update_irq(s); | ||
177 | + return 0; | ||
178 | +} | ||
179 | + | ||
180 | +static uint64_t ir_disable_prew(RegisterInfo *reg, uint64_t val64) | ||
181 | +{ | ||
182 | + VersalUsb2CtrlRegs *s = XILINX_VERSAL_USB2_CTRL_REGS(reg->opaque); | ||
183 | + uint32_t val = val64; | ||
184 | + | ||
185 | + s->regs[R_IR_MASK] |= val; | ||
186 | + ir_update_irq(s); | ||
187 | + return 0; | ||
188 | +} | ||
189 | + | ||
190 | +static const RegisterAccessInfo usb2_ctrl_regs_regs_info[] = { | ||
191 | + { .name = "BUS_FILTER", .addr = A_BUS_FILTER, | ||
192 | + .rsvd = 0xfffffff0, | ||
193 | + },{ .name = "PORT", .addr = A_PORT, | ||
194 | + .rsvd = 0xffffffe0, | ||
195 | + },{ .name = "JITTER_ADJUST", .addr = A_JITTER_ADJUST, | ||
196 | + .reset = 0x20, | ||
197 | + .rsvd = 0xffffffc0, | ||
198 | + },{ .name = "BIGENDIAN", .addr = A_BIGENDIAN, | ||
199 | + .rsvd = 0xfffffffe, | ||
200 | + },{ .name = "COHERENCY", .addr = A_COHERENCY, | ||
201 | + .rsvd = 0xfffffffe, | ||
202 | + },{ .name = "XHC_BME", .addr = A_XHC_BME, | ||
203 | + .reset = 0x1, | ||
204 | + .rsvd = 0xfffffffe, | ||
205 | + },{ .name = "REG_CTRL", .addr = A_REG_CTRL, | ||
206 | + .rsvd = 0xfffffffe, | ||
207 | + },{ .name = "IR_STATUS", .addr = A_IR_STATUS, | ||
208 | + .rsvd = 0xfffffffc, | ||
209 | + .w1c = 0x3, | ||
210 | + .post_write = ir_status_postw, | ||
211 | + },{ .name = "IR_MASK", .addr = A_IR_MASK, | ||
212 | + .reset = 0x3, | ||
213 | + .rsvd = 0xfffffffc, | ||
214 | + .ro = 0x3, | ||
215 | + },{ .name = "IR_ENABLE", .addr = A_IR_ENABLE, | ||
216 | + .rsvd = 0xfffffffc, | ||
217 | + .pre_write = ir_enable_prew, | ||
218 | + },{ .name = "IR_DISABLE", .addr = A_IR_DISABLE, | ||
219 | + .rsvd = 0xfffffffc, | ||
220 | + .pre_write = ir_disable_prew, | ||
221 | + },{ .name = "USB3", .addr = A_USB3, | ||
222 | + } | ||
223 | +}; | ||
224 | + | ||
225 | +static void usb2_ctrl_regs_reset_init(Object *obj, ResetType type) | ||
226 | +{ | ||
227 | + VersalUsb2CtrlRegs *s = XILINX_VERSAL_USB2_CTRL_REGS(obj); | ||
228 | + unsigned int i; | ||
229 | + | ||
230 | + for (i = 0; i < ARRAY_SIZE(s->regs_info); ++i) { | ||
231 | + register_reset(&s->regs_info[i]); | ||
232 | + } | ||
233 | +} | ||
234 | + | ||
235 | +static void usb2_ctrl_regs_reset_hold(Object *obj) | ||
236 | +{ | ||
237 | + VersalUsb2CtrlRegs *s = XILINX_VERSAL_USB2_CTRL_REGS(obj); | ||
238 | + | ||
239 | + ir_update_irq(s); | ||
240 | +} | ||
241 | + | ||
242 | +static const MemoryRegionOps usb2_ctrl_regs_ops = { | ||
243 | + .read = register_read_memory, | ||
244 | + .write = register_write_memory, | ||
245 | + .endianness = DEVICE_LITTLE_ENDIAN, | ||
246 | + .valid = { | ||
247 | + .min_access_size = 4, | ||
248 | + .max_access_size = 4, | ||
249 | + }, | ||
250 | +}; | ||
251 | + | ||
252 | +static void usb2_ctrl_regs_init(Object *obj) | ||
253 | +{ | ||
254 | + VersalUsb2CtrlRegs *s = XILINX_VERSAL_USB2_CTRL_REGS(obj); | ||
255 | + SysBusDevice *sbd = SYS_BUS_DEVICE(obj); | ||
256 | + RegisterInfoArray *reg_array; | ||
257 | + | ||
258 | + memory_region_init(&s->iomem, obj, TYPE_XILINX_VERSAL_USB2_CTRL_REGS, | ||
259 | + USB2_REGS_R_MAX * 4); | ||
260 | + reg_array = | ||
261 | + register_init_block32(DEVICE(obj), usb2_ctrl_regs_regs_info, | ||
262 | + ARRAY_SIZE(usb2_ctrl_regs_regs_info), | ||
263 | + s->regs_info, s->regs, | ||
264 | + &usb2_ctrl_regs_ops, | ||
265 | + XILINX_VERSAL_USB2_CTRL_REGS_ERR_DEBUG, | ||
266 | + USB2_REGS_R_MAX * 4); | ||
267 | + memory_region_add_subregion(&s->iomem, | ||
268 | + 0x0, | ||
269 | + ®_array->mem); | ||
270 | + sysbus_init_mmio(sbd, &s->iomem); | ||
271 | + sysbus_init_irq(sbd, &s->irq_ir); | ||
272 | +} | ||
273 | + | ||
274 | +static const VMStateDescription vmstate_usb2_ctrl_regs = { | ||
275 | + .name = TYPE_XILINX_VERSAL_USB2_CTRL_REGS, | ||
276 | + .version_id = 1, | ||
277 | + .minimum_version_id = 1, | ||
278 | + .fields = (VMStateField[]) { | ||
279 | + VMSTATE_UINT32_ARRAY(regs, VersalUsb2CtrlRegs, USB2_REGS_R_MAX), | ||
280 | + VMSTATE_END_OF_LIST(), | ||
281 | + } | ||
282 | +}; | ||
283 | + | ||
284 | +static void usb2_ctrl_regs_class_init(ObjectClass *klass, void *data) | ||
285 | +{ | ||
286 | + DeviceClass *dc = DEVICE_CLASS(klass); | ||
287 | + ResettableClass *rc = RESETTABLE_CLASS(klass); | ||
288 | + | ||
289 | + rc->phases.enter = usb2_ctrl_regs_reset_init; | ||
290 | + rc->phases.hold = usb2_ctrl_regs_reset_hold; | ||
291 | + dc->vmsd = &vmstate_usb2_ctrl_regs; | ||
292 | +} | ||
293 | + | ||
294 | +static const TypeInfo usb2_ctrl_regs_info = { | ||
295 | + .name = TYPE_XILINX_VERSAL_USB2_CTRL_REGS, | ||
296 | + .parent = TYPE_SYS_BUS_DEVICE, | ||
297 | + .instance_size = sizeof(VersalUsb2CtrlRegs), | ||
298 | + .class_init = usb2_ctrl_regs_class_init, | ||
299 | + .instance_init = usb2_ctrl_regs_init, | ||
300 | +}; | ||
301 | + | ||
302 | +static void usb2_ctrl_regs_register_types(void) | ||
303 | +{ | ||
304 | + type_register_static(&usb2_ctrl_regs_info); | ||
305 | +} | ||
306 | + | ||
307 | +type_init(usb2_ctrl_regs_register_types) | ||
308 | diff --git a/hw/usb/meson.build b/hw/usb/meson.build | ||
19 | index XXXXXXX..XXXXXXX 100644 | 309 | index XXXXXXX..XXXXXXX 100644 |
20 | --- a/hw/intc/arm_gic_kvm.c | 310 | --- a/hw/usb/meson.build |
21 | +++ b/hw/intc/arm_gic_kvm.c | 311 | +++ b/hw/usb/meson.build |
22 | @@ -XXX,XX +XXX,XX @@ static void kvm_arm_gic_realize(DeviceState *dev, Error **errp) | 312 | @@ -XXX,XX +XXX,XX @@ softmmu_ss.add(when: 'CONFIG_USB_DWC2', if_true: files('hcd-dwc2.c')) |
23 | 313 | softmmu_ss.add(when: 'CONFIG_TUSB6010', if_true: files('tusb6010.c')) | |
24 | if (kvm_has_gsi_routing()) { | 314 | softmmu_ss.add(when: 'CONFIG_IMX', if_true: files('chipidea.c')) |
25 | /* set up irq routing */ | 315 | softmmu_ss.add(when: 'CONFIG_IMX_USBPHY', if_true: files('imx-usb-phy.c')) |
26 | - kvm_init_irq_routing(kvm_state); | 316 | +specific_ss.add(when: 'CONFIG_XLNX_VERSAL', if_true: files('xlnx-versal-usb2-ctrl-regs.c')) |
27 | for (i = 0; i < s->num_irq - GIC_INTERNAL; ++i) { | 317 | |
28 | kvm_irqchip_add_irq_route(kvm_state, i, 0, i); | 318 | # emulated usb devices |
29 | } | 319 | softmmu_ss.add(when: 'CONFIG_USB', if_true: files('dev-hub.c')) |
30 | diff --git a/hw/intc/arm_gicv3_kvm.c b/hw/intc/arm_gicv3_kvm.c | ||
31 | index XXXXXXX..XXXXXXX 100644 | ||
32 | --- a/hw/intc/arm_gicv3_kvm.c | ||
33 | +++ b/hw/intc/arm_gicv3_kvm.c | ||
34 | @@ -XXX,XX +XXX,XX @@ static void kvm_arm_gicv3_realize(DeviceState *dev, Error **errp) | ||
35 | |||
36 | if (kvm_has_gsi_routing()) { | ||
37 | /* set up irq routing */ | ||
38 | - kvm_init_irq_routing(kvm_state); | ||
39 | for (i = 0; i < s->num_irq - GIC_INTERNAL; ++i) { | ||
40 | kvm_irqchip_add_irq_route(kvm_state, i, 0, i); | ||
41 | } | ||
42 | -- | 320 | -- |
43 | 2.17.1 | 321 | 2.20.1 |
44 | 322 | ||
45 | 323 | diff view generated by jsdifflib |
1 | From: Shannon Zhao <zhaoshenglong@huawei.com> | 1 | From: Vikram Garhwal <fnu.vikram@xilinx.com> |
---|---|---|---|
2 | 2 | ||
3 | It forgot to increase clroffset during the loop. So it only clear the | 3 | This patch adds skeleton model of dwc3 usb controller attached to |
4 | first 4 bytes. | 4 | xhci-sysbus device. It defines global register space of DWC3 controller, |
5 | global registers control the AXI/AHB interfaces properties, external FIFO | ||
6 | support and event count support. All of which are unimplemented at | ||
7 | present,we are only supporting core reset and read of ID register. | ||
5 | 8 | ||
6 | Fixes: 367b9f527becdd20ddf116e17a3c0c2bbc486920 | 9 | Signed-off-by: Vikram Garhwal <fnu.vikram@xilinx.com> |
7 | Cc: qemu-stable@nongnu.org | 10 | Signed-off-by: Sai Pavan Boddu <sai.pavan.boddu@xilinx.com> |
8 | Signed-off-by: Shannon Zhao <zhaoshenglong@huawei.com> | 11 | Reviewed-by: Edgar E. Iglesias <edgar.iglesias@xilinx.com> |
9 | Reviewed-by: Eric Auger <eric.auger@redhat.com> | 12 | Message-id: 1607023357-5096-3-git-send-email-sai.pavan.boddu@xilinx.com |
10 | Message-id: 1527047633-12368-1-git-send-email-zhaoshenglong@huawei.com | ||
11 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
12 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 13 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
13 | --- | 14 | --- |
14 | hw/intc/arm_gicv3_kvm.c | 1 + | 15 | include/hw/usb/hcd-dwc3.h | 55 +++ |
15 | 1 file changed, 1 insertion(+) | 16 | hw/usb/hcd-dwc3.c | 689 ++++++++++++++++++++++++++++++++++++++ |
17 | hw/usb/Kconfig | 5 + | ||
18 | hw/usb/meson.build | 1 + | ||
19 | 4 files changed, 750 insertions(+) | ||
20 | create mode 100644 include/hw/usb/hcd-dwc3.h | ||
21 | create mode 100644 hw/usb/hcd-dwc3.c | ||
16 | 22 | ||
17 | diff --git a/hw/intc/arm_gicv3_kvm.c b/hw/intc/arm_gicv3_kvm.c | 23 | diff --git a/include/hw/usb/hcd-dwc3.h b/include/hw/usb/hcd-dwc3.h |
24 | new file mode 100644 | ||
25 | index XXXXXXX..XXXXXXX | ||
26 | --- /dev/null | ||
27 | +++ b/include/hw/usb/hcd-dwc3.h | ||
28 | @@ -XXX,XX +XXX,XX @@ | ||
29 | +/* | ||
30 | + * QEMU model of the USB DWC3 host controller emulation. | ||
31 | + * | ||
32 | + * Copyright (c) 2020 Xilinx Inc. | ||
33 | + * | ||
34 | + * Written by Vikram Garhwal<fnu.vikram@xilinx.com> | ||
35 | + * | ||
36 | + * Permission is hereby granted, free of charge, to any person obtaining a copy | ||
37 | + * of this software and associated documentation files (the "Software"), to deal | ||
38 | + * in the Software without restriction, including without limitation the rights | ||
39 | + * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell | ||
40 | + * copies of the Software, and to permit persons to whom the Software is | ||
41 | + * furnished to do so, subject to the following conditions: | ||
42 | + * | ||
43 | + * The above copyright notice and this permission notice shall be included in | ||
44 | + * all copies or substantial portions of the Software. | ||
45 | + * | ||
46 | + * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR | ||
47 | + * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, | ||
48 | + * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL | ||
49 | + * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | ||
50 | + * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, | ||
51 | + * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN | ||
52 | + * THE SOFTWARE. | ||
53 | + */ | ||
54 | +#ifndef HCD_DWC3_H | ||
55 | +#define HCD_DWC3_H | ||
56 | + | ||
57 | +#include "hw/usb/hcd-xhci.h" | ||
58 | +#include "hw/usb/hcd-xhci-sysbus.h" | ||
59 | + | ||
60 | +#define TYPE_USB_DWC3 "usb_dwc3" | ||
61 | + | ||
62 | +#define USB_DWC3(obj) \ | ||
63 | + OBJECT_CHECK(USBDWC3, (obj), TYPE_USB_DWC3) | ||
64 | + | ||
65 | +#define USB_DWC3_R_MAX ((0x530 / 4) + 1) | ||
66 | +#define DWC3_SIZE 0x10000 | ||
67 | + | ||
68 | +typedef struct USBDWC3 { | ||
69 | + SysBusDevice parent_obj; | ||
70 | + MemoryRegion iomem; | ||
71 | + XHCISysbusState sysbus_xhci; | ||
72 | + | ||
73 | + uint32_t regs[USB_DWC3_R_MAX]; | ||
74 | + RegisterInfo regs_info[USB_DWC3_R_MAX]; | ||
75 | + | ||
76 | + struct { | ||
77 | + uint8_t mode; | ||
78 | + uint32_t dwc_usb3_user; | ||
79 | + } cfg; | ||
80 | + | ||
81 | +} USBDWC3; | ||
82 | + | ||
83 | +#endif | ||
84 | diff --git a/hw/usb/hcd-dwc3.c b/hw/usb/hcd-dwc3.c | ||
85 | new file mode 100644 | ||
86 | index XXXXXXX..XXXXXXX | ||
87 | --- /dev/null | ||
88 | +++ b/hw/usb/hcd-dwc3.c | ||
89 | @@ -XXX,XX +XXX,XX @@ | ||
90 | +/* | ||
91 | + * QEMU model of the USB DWC3 host controller emulation. | ||
92 | + * | ||
93 | + * This model defines global register space of DWC3 controller. Global | ||
94 | + * registers control the AXI/AHB interfaces properties, external FIFO support | ||
95 | + * and event count support. All of which are unimplemented at present. We are | ||
96 | + * only supporting core reset and read of ID register. | ||
97 | + * | ||
98 | + * Copyright (c) 2020 Xilinx Inc. Vikram Garhwal<fnu.vikram@xilinx.com> | ||
99 | + * | ||
100 | + * Permission is hereby granted, free of charge, to any person obtaining a copy | ||
101 | + * of this software and associated documentation files (the "Software"), to deal | ||
102 | + * in the Software without restriction, including without limitation the rights | ||
103 | + * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell | ||
104 | + * copies of the Software, and to permit persons to whom the Software is | ||
105 | + * furnished to do so, subject to the following conditions: | ||
106 | + * | ||
107 | + * The above copyright notice and this permission notice shall be included in | ||
108 | + * all copies or substantial portions of the Software. | ||
109 | + * | ||
110 | + * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR | ||
111 | + * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, | ||
112 | + * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL | ||
113 | + * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | ||
114 | + * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, | ||
115 | + * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN | ||
116 | + * THE SOFTWARE. | ||
117 | + */ | ||
118 | + | ||
119 | +#include "qemu/osdep.h" | ||
120 | +#include "hw/sysbus.h" | ||
121 | +#include "hw/register.h" | ||
122 | +#include "qemu/bitops.h" | ||
123 | +#include "qemu/log.h" | ||
124 | +#include "qom/object.h" | ||
125 | +#include "migration/vmstate.h" | ||
126 | +#include "hw/qdev-properties.h" | ||
127 | +#include "hw/usb/hcd-dwc3.h" | ||
128 | +#include "qapi/error.h" | ||
129 | + | ||
130 | +#ifndef USB_DWC3_ERR_DEBUG | ||
131 | +#define USB_DWC3_ERR_DEBUG 0 | ||
132 | +#endif | ||
133 | + | ||
134 | +#define HOST_MODE 1 | ||
135 | +#define FIFO_LEN 0x1000 | ||
136 | + | ||
137 | +REG32(GSBUSCFG0, 0x00) | ||
138 | + FIELD(GSBUSCFG0, DATRDREQINFO, 28, 4) | ||
139 | + FIELD(GSBUSCFG0, DESRDREQINFO, 24, 4) | ||
140 | + FIELD(GSBUSCFG0, DATWRREQINFO, 20, 4) | ||
141 | + FIELD(GSBUSCFG0, DESWRREQINFO, 16, 4) | ||
142 | + FIELD(GSBUSCFG0, RESERVED_15_12, 12, 4) | ||
143 | + FIELD(GSBUSCFG0, DATBIGEND, 11, 1) | ||
144 | + FIELD(GSBUSCFG0, DESBIGEND, 10, 1) | ||
145 | + FIELD(GSBUSCFG0, RESERVED_9_8, 8, 2) | ||
146 | + FIELD(GSBUSCFG0, INCR256BRSTENA, 7, 1) | ||
147 | + FIELD(GSBUSCFG0, INCR128BRSTENA, 6, 1) | ||
148 | + FIELD(GSBUSCFG0, INCR64BRSTENA, 5, 1) | ||
149 | + FIELD(GSBUSCFG0, INCR32BRSTENA, 4, 1) | ||
150 | + FIELD(GSBUSCFG0, INCR16BRSTENA, 3, 1) | ||
151 | + FIELD(GSBUSCFG0, INCR8BRSTENA, 2, 1) | ||
152 | + FIELD(GSBUSCFG0, INCR4BRSTENA, 1, 1) | ||
153 | + FIELD(GSBUSCFG0, INCRBRSTENA, 0, 1) | ||
154 | +REG32(GSBUSCFG1, 0x04) | ||
155 | + FIELD(GSBUSCFG1, RESERVED_31_13, 13, 19) | ||
156 | + FIELD(GSBUSCFG1, EN1KPAGE, 12, 1) | ||
157 | + FIELD(GSBUSCFG1, PIPETRANSLIMIT, 8, 4) | ||
158 | + FIELD(GSBUSCFG1, RESERVED_7_0, 0, 8) | ||
159 | +REG32(GTXTHRCFG, 0x08) | ||
160 | + FIELD(GTXTHRCFG, RESERVED_31, 31, 1) | ||
161 | + FIELD(GTXTHRCFG, RESERVED_30, 30, 1) | ||
162 | + FIELD(GTXTHRCFG, USBTXPKTCNTSEL, 29, 1) | ||
163 | + FIELD(GTXTHRCFG, RESERVED_28, 28, 1) | ||
164 | + FIELD(GTXTHRCFG, USBTXPKTCNT, 24, 4) | ||
165 | + FIELD(GTXTHRCFG, USBMAXTXBURSTSIZE, 16, 8) | ||
166 | + FIELD(GTXTHRCFG, RESERVED_15, 15, 1) | ||
167 | + FIELD(GTXTHRCFG, RESERVED_14, 14, 1) | ||
168 | + FIELD(GTXTHRCFG, RESERVED_13_11, 11, 3) | ||
169 | + FIELD(GTXTHRCFG, RESERVED_10_0, 0, 11) | ||
170 | +REG32(GRXTHRCFG, 0x0c) | ||
171 | + FIELD(GRXTHRCFG, RESERVED_31_30, 30, 2) | ||
172 | + FIELD(GRXTHRCFG, USBRXPKTCNTSEL, 29, 1) | ||
173 | + FIELD(GRXTHRCFG, RESERVED_28, 28, 1) | ||
174 | + FIELD(GRXTHRCFG, USBRXPKTCNT, 24, 4) | ||
175 | + FIELD(GRXTHRCFG, USBMAXRXBURSTSIZE, 19, 5) | ||
176 | + FIELD(GRXTHRCFG, RESERVED_18_16, 16, 3) | ||
177 | + FIELD(GRXTHRCFG, RESERVED_15, 15, 1) | ||
178 | + FIELD(GRXTHRCFG, RESERVED_14_13, 13, 2) | ||
179 | + FIELD(GRXTHRCFG, RESVISOCOUTSPC, 0, 13) | ||
180 | +REG32(GCTL, 0x10) | ||
181 | + FIELD(GCTL, PWRDNSCALE, 19, 13) | ||
182 | + FIELD(GCTL, MASTERFILTBYPASS, 18, 1) | ||
183 | + FIELD(GCTL, BYPSSETADDR, 17, 1) | ||
184 | + FIELD(GCTL, U2RSTECN, 16, 1) | ||
185 | + FIELD(GCTL, FRMSCLDWN, 14, 2) | ||
186 | + FIELD(GCTL, PRTCAPDIR, 12, 2) | ||
187 | + FIELD(GCTL, CORESOFTRESET, 11, 1) | ||
188 | + FIELD(GCTL, U1U2TIMERSCALE, 9, 1) | ||
189 | + FIELD(GCTL, DEBUGATTACH, 8, 1) | ||
190 | + FIELD(GCTL, RAMCLKSEL, 6, 2) | ||
191 | + FIELD(GCTL, SCALEDOWN, 4, 2) | ||
192 | + FIELD(GCTL, DISSCRAMBLE, 3, 1) | ||
193 | + FIELD(GCTL, U2EXIT_LFPS, 2, 1) | ||
194 | + FIELD(GCTL, GBLHIBERNATIONEN, 1, 1) | ||
195 | + FIELD(GCTL, DSBLCLKGTNG, 0, 1) | ||
196 | +REG32(GPMSTS, 0x14) | ||
197 | +REG32(GSTS, 0x18) | ||
198 | + FIELD(GSTS, CBELT, 20, 12) | ||
199 | + FIELD(GSTS, RESERVED_19_12, 12, 8) | ||
200 | + FIELD(GSTS, SSIC_IP, 11, 1) | ||
201 | + FIELD(GSTS, OTG_IP, 10, 1) | ||
202 | + FIELD(GSTS, BC_IP, 9, 1) | ||
203 | + FIELD(GSTS, ADP_IP, 8, 1) | ||
204 | + FIELD(GSTS, HOST_IP, 7, 1) | ||
205 | + FIELD(GSTS, DEVICE_IP, 6, 1) | ||
206 | + FIELD(GSTS, CSRTIMEOUT, 5, 1) | ||
207 | + FIELD(GSTS, BUSERRADDRVLD, 4, 1) | ||
208 | + FIELD(GSTS, RESERVED_3_2, 2, 2) | ||
209 | + FIELD(GSTS, CURMOD, 0, 2) | ||
210 | +REG32(GUCTL1, 0x1c) | ||
211 | + FIELD(GUCTL1, RESUME_OPMODE_HS_HOST, 10, 1) | ||
212 | +REG32(GSNPSID, 0x20) | ||
213 | +REG32(GGPIO, 0x24) | ||
214 | + FIELD(GGPIO, GPO, 16, 16) | ||
215 | + FIELD(GGPIO, GPI, 0, 16) | ||
216 | +REG32(GUID, 0x28) | ||
217 | +REG32(GUCTL, 0x2c) | ||
218 | + FIELD(GUCTL, REFCLKPER, 22, 10) | ||
219 | + FIELD(GUCTL, NOEXTRDL, 21, 1) | ||
220 | + FIELD(GUCTL, RESERVED_20_18, 18, 3) | ||
221 | + FIELD(GUCTL, SPRSCTRLTRANSEN, 17, 1) | ||
222 | + FIELD(GUCTL, RESBWHSEPS, 16, 1) | ||
223 | + FIELD(GUCTL, RESERVED_15, 15, 1) | ||
224 | + FIELD(GUCTL, USBHSTINAUTORETRYEN, 14, 1) | ||
225 | + FIELD(GUCTL, ENOVERLAPCHK, 13, 1) | ||
226 | + FIELD(GUCTL, EXTCAPSUPPTEN, 12, 1) | ||
227 | + FIELD(GUCTL, INSRTEXTRFSBODI, 11, 1) | ||
228 | + FIELD(GUCTL, DTCT, 9, 2) | ||
229 | + FIELD(GUCTL, DTFT, 0, 9) | ||
230 | +REG32(GBUSERRADDRLO, 0x30) | ||
231 | +REG32(GBUSERRADDRHI, 0x34) | ||
232 | +REG32(GHWPARAMS0, 0x40) | ||
233 | + FIELD(GHWPARAMS0, GHWPARAMS0_31_24, 24, 8) | ||
234 | + FIELD(GHWPARAMS0, GHWPARAMS0_23_16, 16, 8) | ||
235 | + FIELD(GHWPARAMS0, GHWPARAMS0_15_8, 8, 8) | ||
236 | + FIELD(GHWPARAMS0, GHWPARAMS0_7_6, 6, 2) | ||
237 | + FIELD(GHWPARAMS0, GHWPARAMS0_5_3, 3, 3) | ||
238 | + FIELD(GHWPARAMS0, GHWPARAMS0_2_0, 0, 3) | ||
239 | +REG32(GHWPARAMS1, 0x44) | ||
240 | + FIELD(GHWPARAMS1, GHWPARAMS1_31, 31, 1) | ||
241 | + FIELD(GHWPARAMS1, GHWPARAMS1_30, 30, 1) | ||
242 | + FIELD(GHWPARAMS1, GHWPARAMS1_29, 29, 1) | ||
243 | + FIELD(GHWPARAMS1, GHWPARAMS1_28, 28, 1) | ||
244 | + FIELD(GHWPARAMS1, GHWPARAMS1_27, 27, 1) | ||
245 | + FIELD(GHWPARAMS1, GHWPARAMS1_26, 26, 1) | ||
246 | + FIELD(GHWPARAMS1, GHWPARAMS1_25_24, 24, 2) | ||
247 | + FIELD(GHWPARAMS1, GHWPARAMS1_23, 23, 1) | ||
248 | + FIELD(GHWPARAMS1, GHWPARAMS1_22_21, 21, 2) | ||
249 | + FIELD(GHWPARAMS1, GHWPARAMS1_20_15, 15, 6) | ||
250 | + FIELD(GHWPARAMS1, GHWPARAMS1_14_12, 12, 3) | ||
251 | + FIELD(GHWPARAMS1, GHWPARAMS1_11_9, 9, 3) | ||
252 | + FIELD(GHWPARAMS1, GHWPARAMS1_8_6, 6, 3) | ||
253 | + FIELD(GHWPARAMS1, GHWPARAMS1_5_3, 3, 3) | ||
254 | + FIELD(GHWPARAMS1, GHWPARAMS1_2_0, 0, 3) | ||
255 | +REG32(GHWPARAMS2, 0x48) | ||
256 | +REG32(GHWPARAMS3, 0x4c) | ||
257 | + FIELD(GHWPARAMS3, GHWPARAMS3_31, 31, 1) | ||
258 | + FIELD(GHWPARAMS3, GHWPARAMS3_30_23, 23, 8) | ||
259 | + FIELD(GHWPARAMS3, GHWPARAMS3_22_18, 18, 5) | ||
260 | + FIELD(GHWPARAMS3, GHWPARAMS3_17_12, 12, 6) | ||
261 | + FIELD(GHWPARAMS3, GHWPARAMS3_11, 11, 1) | ||
262 | + FIELD(GHWPARAMS3, GHWPARAMS3_10, 10, 1) | ||
263 | + FIELD(GHWPARAMS3, GHWPARAMS3_9_8, 8, 2) | ||
264 | + FIELD(GHWPARAMS3, GHWPARAMS3_7_6, 6, 2) | ||
265 | + FIELD(GHWPARAMS3, GHWPARAMS3_5_4, 4, 2) | ||
266 | + FIELD(GHWPARAMS3, GHWPARAMS3_3_2, 2, 2) | ||
267 | + FIELD(GHWPARAMS3, GHWPARAMS3_1_0, 0, 2) | ||
268 | +REG32(GHWPARAMS4, 0x50) | ||
269 | + FIELD(GHWPARAMS4, GHWPARAMS4_31_28, 28, 4) | ||
270 | + FIELD(GHWPARAMS4, GHWPARAMS4_27_24, 24, 4) | ||
271 | + FIELD(GHWPARAMS4, GHWPARAMS4_23, 23, 1) | ||
272 | + FIELD(GHWPARAMS4, GHWPARAMS4_22, 22, 1) | ||
273 | + FIELD(GHWPARAMS4, GHWPARAMS4_21, 21, 1) | ||
274 | + FIELD(GHWPARAMS4, GHWPARAMS4_20_17, 17, 4) | ||
275 | + FIELD(GHWPARAMS4, GHWPARAMS4_16_13, 13, 4) | ||
276 | + FIELD(GHWPARAMS4, GHWPARAMS4_12, 12, 1) | ||
277 | + FIELD(GHWPARAMS4, GHWPARAMS4_11, 11, 1) | ||
278 | + FIELD(GHWPARAMS4, GHWPARAMS4_10_9, 9, 2) | ||
279 | + FIELD(GHWPARAMS4, GHWPARAMS4_8_7, 7, 2) | ||
280 | + FIELD(GHWPARAMS4, GHWPARAMS4_6, 6, 1) | ||
281 | + FIELD(GHWPARAMS4, GHWPARAMS4_5_0, 0, 6) | ||
282 | +REG32(GHWPARAMS5, 0x54) | ||
283 | + FIELD(GHWPARAMS5, GHWPARAMS5_31_28, 28, 4) | ||
284 | + FIELD(GHWPARAMS5, GHWPARAMS5_27_22, 22, 6) | ||
285 | + FIELD(GHWPARAMS5, GHWPARAMS5_21_16, 16, 6) | ||
286 | + FIELD(GHWPARAMS5, GHWPARAMS5_15_10, 10, 6) | ||
287 | + FIELD(GHWPARAMS5, GHWPARAMS5_9_4, 4, 6) | ||
288 | + FIELD(GHWPARAMS5, GHWPARAMS5_3_0, 0, 4) | ||
289 | +REG32(GHWPARAMS6, 0x58) | ||
290 | + FIELD(GHWPARAMS6, GHWPARAMS6_31_16, 16, 16) | ||
291 | + FIELD(GHWPARAMS6, BUSFLTRSSUPPORT, 15, 1) | ||
292 | + FIELD(GHWPARAMS6, BCSUPPORT, 14, 1) | ||
293 | + FIELD(GHWPARAMS6, OTG_SS_SUPPORT, 13, 1) | ||
294 | + FIELD(GHWPARAMS6, ADPSUPPORT, 12, 1) | ||
295 | + FIELD(GHWPARAMS6, HNPSUPPORT, 11, 1) | ||
296 | + FIELD(GHWPARAMS6, SRPSUPPORT, 10, 1) | ||
297 | + FIELD(GHWPARAMS6, GHWPARAMS6_9_8, 8, 2) | ||
298 | + FIELD(GHWPARAMS6, GHWPARAMS6_7, 7, 1) | ||
299 | + FIELD(GHWPARAMS6, GHWPARAMS6_6, 6, 1) | ||
300 | + FIELD(GHWPARAMS6, GHWPARAMS6_5_0, 0, 6) | ||
301 | +REG32(GHWPARAMS7, 0x5c) | ||
302 | + FIELD(GHWPARAMS7, GHWPARAMS7_31_16, 16, 16) | ||
303 | + FIELD(GHWPARAMS7, GHWPARAMS7_15_0, 0, 16) | ||
304 | +REG32(GDBGFIFOSPACE, 0x60) | ||
305 | + FIELD(GDBGFIFOSPACE, SPACE_AVAILABLE, 16, 16) | ||
306 | + FIELD(GDBGFIFOSPACE, RESERVED_15_9, 9, 7) | ||
307 | + FIELD(GDBGFIFOSPACE, FIFO_QUEUE_SELECT, 0, 9) | ||
308 | +REG32(GUCTL2, 0x9c) | ||
309 | + FIELD(GUCTL2, RESERVED_31_26, 26, 6) | ||
310 | + FIELD(GUCTL2, EN_HP_PM_TIMER, 19, 7) | ||
311 | + FIELD(GUCTL2, NOLOWPWRDUR, 15, 4) | ||
312 | + FIELD(GUCTL2, RST_ACTBITLATER, 14, 1) | ||
313 | + FIELD(GUCTL2, RESERVED_13, 13, 1) | ||
314 | + FIELD(GUCTL2, DISABLECFC, 11, 1) | ||
315 | +REG32(GUSB2PHYCFG, 0x100) | ||
316 | + FIELD(GUSB2PHYCFG, U2_FREECLK_EXISTS, 30, 1) | ||
317 | + FIELD(GUSB2PHYCFG, ULPI_LPM_WITH_OPMODE_CHK, 29, 1) | ||
318 | + FIELD(GUSB2PHYCFG, RESERVED_25, 25, 1) | ||
319 | + FIELD(GUSB2PHYCFG, LSTRD, 22, 3) | ||
320 | + FIELD(GUSB2PHYCFG, LSIPD, 19, 3) | ||
321 | + FIELD(GUSB2PHYCFG, ULPIEXTVBUSINDIACTOR, 18, 1) | ||
322 | + FIELD(GUSB2PHYCFG, ULPIEXTVBUSDRV, 17, 1) | ||
323 | + FIELD(GUSB2PHYCFG, RESERVED_16, 16, 1) | ||
324 | + FIELD(GUSB2PHYCFG, ULPIAUTORES, 15, 1) | ||
325 | + FIELD(GUSB2PHYCFG, RESERVED_14, 14, 1) | ||
326 | + FIELD(GUSB2PHYCFG, USBTRDTIM, 10, 4) | ||
327 | + FIELD(GUSB2PHYCFG, XCVRDLY, 9, 1) | ||
328 | + FIELD(GUSB2PHYCFG, ENBLSLPM, 8, 1) | ||
329 | + FIELD(GUSB2PHYCFG, PHYSEL, 7, 1) | ||
330 | + FIELD(GUSB2PHYCFG, SUSPENDUSB20, 6, 1) | ||
331 | + FIELD(GUSB2PHYCFG, FSINTF, 5, 1) | ||
332 | + FIELD(GUSB2PHYCFG, ULPI_UTMI_SEL, 4, 1) | ||
333 | + FIELD(GUSB2PHYCFG, PHYIF, 3, 1) | ||
334 | + FIELD(GUSB2PHYCFG, TOUTCAL, 0, 3) | ||
335 | +REG32(GUSB2I2CCTL, 0x140) | ||
336 | +REG32(GUSB2PHYACC_ULPI, 0x180) | ||
337 | + FIELD(GUSB2PHYACC_ULPI, RESERVED_31_27, 27, 5) | ||
338 | + FIELD(GUSB2PHYACC_ULPI, DISUIPIDRVR, 26, 1) | ||
339 | + FIELD(GUSB2PHYACC_ULPI, NEWREGREQ, 25, 1) | ||
340 | + FIELD(GUSB2PHYACC_ULPI, VSTSDONE, 24, 1) | ||
341 | + FIELD(GUSB2PHYACC_ULPI, VSTSBSY, 23, 1) | ||
342 | + FIELD(GUSB2PHYACC_ULPI, REGWR, 22, 1) | ||
343 | + FIELD(GUSB2PHYACC_ULPI, REGADDR, 16, 6) | ||
344 | + FIELD(GUSB2PHYACC_ULPI, EXTREGADDR, 8, 8) | ||
345 | + FIELD(GUSB2PHYACC_ULPI, REGDATA, 0, 8) | ||
346 | +REG32(GTXFIFOSIZ0, 0x200) | ||
347 | + FIELD(GTXFIFOSIZ0, TXFSTADDR_N, 16, 16) | ||
348 | + FIELD(GTXFIFOSIZ0, TXFDEP_N, 0, 16) | ||
349 | +REG32(GTXFIFOSIZ1, 0x204) | ||
350 | + FIELD(GTXFIFOSIZ1, TXFSTADDR_N, 16, 16) | ||
351 | + FIELD(GTXFIFOSIZ1, TXFDEP_N, 0, 16) | ||
352 | +REG32(GTXFIFOSIZ2, 0x208) | ||
353 | + FIELD(GTXFIFOSIZ2, TXFSTADDR_N, 16, 16) | ||
354 | + FIELD(GTXFIFOSIZ2, TXFDEP_N, 0, 16) | ||
355 | +REG32(GTXFIFOSIZ3, 0x20c) | ||
356 | + FIELD(GTXFIFOSIZ3, TXFSTADDR_N, 16, 16) | ||
357 | + FIELD(GTXFIFOSIZ3, TXFDEP_N, 0, 16) | ||
358 | +REG32(GTXFIFOSIZ4, 0x210) | ||
359 | + FIELD(GTXFIFOSIZ4, TXFSTADDR_N, 16, 16) | ||
360 | + FIELD(GTXFIFOSIZ4, TXFDEP_N, 0, 16) | ||
361 | +REG32(GTXFIFOSIZ5, 0x214) | ||
362 | + FIELD(GTXFIFOSIZ5, TXFSTADDR_N, 16, 16) | ||
363 | + FIELD(GTXFIFOSIZ5, TXFDEP_N, 0, 16) | ||
364 | +REG32(GRXFIFOSIZ0, 0x280) | ||
365 | + FIELD(GRXFIFOSIZ0, RXFSTADDR_N, 16, 16) | ||
366 | + FIELD(GRXFIFOSIZ0, RXFDEP_N, 0, 16) | ||
367 | +REG32(GRXFIFOSIZ1, 0x284) | ||
368 | + FIELD(GRXFIFOSIZ1, RXFSTADDR_N, 16, 16) | ||
369 | + FIELD(GRXFIFOSIZ1, RXFDEP_N, 0, 16) | ||
370 | +REG32(GRXFIFOSIZ2, 0x288) | ||
371 | + FIELD(GRXFIFOSIZ2, RXFSTADDR_N, 16, 16) | ||
372 | + FIELD(GRXFIFOSIZ2, RXFDEP_N, 0, 16) | ||
373 | +REG32(GEVNTADRLO_0, 0x300) | ||
374 | +REG32(GEVNTADRHI_0, 0x304) | ||
375 | +REG32(GEVNTSIZ_0, 0x308) | ||
376 | + FIELD(GEVNTSIZ_0, EVNTINTRPTMASK, 31, 1) | ||
377 | + FIELD(GEVNTSIZ_0, RESERVED_30_16, 16, 15) | ||
378 | + FIELD(GEVNTSIZ_0, EVENTSIZ, 0, 16) | ||
379 | +REG32(GEVNTCOUNT_0, 0x30c) | ||
380 | + FIELD(GEVNTCOUNT_0, EVNT_HANDLER_BUSY, 31, 1) | ||
381 | + FIELD(GEVNTCOUNT_0, RESERVED_30_16, 16, 15) | ||
382 | + FIELD(GEVNTCOUNT_0, EVNTCOUNT, 0, 16) | ||
383 | +REG32(GEVNTADRLO_1, 0x310) | ||
384 | +REG32(GEVNTADRHI_1, 0x314) | ||
385 | +REG32(GEVNTSIZ_1, 0x318) | ||
386 | + FIELD(GEVNTSIZ_1, EVNTINTRPTMASK, 31, 1) | ||
387 | + FIELD(GEVNTSIZ_1, RESERVED_30_16, 16, 15) | ||
388 | + FIELD(GEVNTSIZ_1, EVENTSIZ, 0, 16) | ||
389 | +REG32(GEVNTCOUNT_1, 0x31c) | ||
390 | + FIELD(GEVNTCOUNT_1, EVNT_HANDLER_BUSY, 31, 1) | ||
391 | + FIELD(GEVNTCOUNT_1, RESERVED_30_16, 16, 15) | ||
392 | + FIELD(GEVNTCOUNT_1, EVNTCOUNT, 0, 16) | ||
393 | +REG32(GEVNTADRLO_2, 0x320) | ||
394 | +REG32(GEVNTADRHI_2, 0x324) | ||
395 | +REG32(GEVNTSIZ_2, 0x328) | ||
396 | + FIELD(GEVNTSIZ_2, EVNTINTRPTMASK, 31, 1) | ||
397 | + FIELD(GEVNTSIZ_2, RESERVED_30_16, 16, 15) | ||
398 | + FIELD(GEVNTSIZ_2, EVENTSIZ, 0, 16) | ||
399 | +REG32(GEVNTCOUNT_2, 0x32c) | ||
400 | + FIELD(GEVNTCOUNT_2, EVNT_HANDLER_BUSY, 31, 1) | ||
401 | + FIELD(GEVNTCOUNT_2, RESERVED_30_16, 16, 15) | ||
402 | + FIELD(GEVNTCOUNT_2, EVNTCOUNT, 0, 16) | ||
403 | +REG32(GEVNTADRLO_3, 0x330) | ||
404 | +REG32(GEVNTADRHI_3, 0x334) | ||
405 | +REG32(GEVNTSIZ_3, 0x338) | ||
406 | + FIELD(GEVNTSIZ_3, EVNTINTRPTMASK, 31, 1) | ||
407 | + FIELD(GEVNTSIZ_3, RESERVED_30_16, 16, 15) | ||
408 | + FIELD(GEVNTSIZ_3, EVENTSIZ, 0, 16) | ||
409 | +REG32(GEVNTCOUNT_3, 0x33c) | ||
410 | + FIELD(GEVNTCOUNT_3, EVNT_HANDLER_BUSY, 31, 1) | ||
411 | + FIELD(GEVNTCOUNT_3, RESERVED_30_16, 16, 15) | ||
412 | + FIELD(GEVNTCOUNT_3, EVNTCOUNT, 0, 16) | ||
413 | +REG32(GHWPARAMS8, 0x500) | ||
414 | +REG32(GTXFIFOPRIDEV, 0x510) | ||
415 | + FIELD(GTXFIFOPRIDEV, RESERVED_31_N, 6, 26) | ||
416 | + FIELD(GTXFIFOPRIDEV, GTXFIFOPRIDEV, 0, 6) | ||
417 | +REG32(GTXFIFOPRIHST, 0x518) | ||
418 | + FIELD(GTXFIFOPRIHST, RESERVED_31_16, 3, 29) | ||
419 | + FIELD(GTXFIFOPRIHST, GTXFIFOPRIHST, 0, 3) | ||
420 | +REG32(GRXFIFOPRIHST, 0x51c) | ||
421 | + FIELD(GRXFIFOPRIHST, RESERVED_31_16, 3, 29) | ||
422 | + FIELD(GRXFIFOPRIHST, GRXFIFOPRIHST, 0, 3) | ||
423 | +REG32(GDMAHLRATIO, 0x524) | ||
424 | + FIELD(GDMAHLRATIO, RESERVED_31_13, 13, 19) | ||
425 | + FIELD(GDMAHLRATIO, HSTRXFIFO, 8, 5) | ||
426 | + FIELD(GDMAHLRATIO, RESERVED_7_5, 5, 3) | ||
427 | + FIELD(GDMAHLRATIO, HSTTXFIFO, 0, 5) | ||
428 | +REG32(GFLADJ, 0x530) | ||
429 | + FIELD(GFLADJ, GFLADJ_REFCLK_240MHZDECR_PLS1, 31, 1) | ||
430 | + FIELD(GFLADJ, GFLADJ_REFCLK_240MHZ_DECR, 24, 7) | ||
431 | + FIELD(GFLADJ, GFLADJ_REFCLK_LPM_SEL, 23, 1) | ||
432 | + FIELD(GFLADJ, RESERVED_22, 22, 1) | ||
433 | + FIELD(GFLADJ, GFLADJ_REFCLK_FLADJ, 8, 14) | ||
434 | + FIELD(GFLADJ, GFLADJ_30MHZ_SDBND_SEL, 7, 1) | ||
435 | + FIELD(GFLADJ, GFLADJ_30MHZ, 0, 6) | ||
436 | + | ||
437 | +#define DWC3_GLOBAL_OFFSET 0xC100 | ||
438 | +static void reset_csr(USBDWC3 * s) | ||
439 | +{ | ||
440 | + int i = 0; | ||
441 | + /* | ||
442 | + * We reset all CSR regs except GCTL, GUCTL, GSTS, GSNPSID, GGPIO, GUID, | ||
443 | + * GUSB2PHYCFGn registers and GUSB3PIPECTLn registers. We will skip PHY | ||
444 | + * register as we don't implement them. | ||
445 | + */ | ||
446 | + for (i = 0; i < USB_DWC3_R_MAX; i++) { | ||
447 | + switch (i) { | ||
448 | + case R_GCTL: | ||
449 | + break; | ||
450 | + case R_GSTS: | ||
451 | + break; | ||
452 | + case R_GSNPSID: | ||
453 | + break; | ||
454 | + case R_GGPIO: | ||
455 | + break; | ||
456 | + case R_GUID: | ||
457 | + break; | ||
458 | + case R_GUCTL: | ||
459 | + break; | ||
460 | + case R_GHWPARAMS0...R_GHWPARAMS7: | ||
461 | + break; | ||
462 | + case R_GHWPARAMS8: | ||
463 | + break; | ||
464 | + default: | ||
465 | + register_reset(&s->regs_info[i]); | ||
466 | + break; | ||
467 | + } | ||
468 | + } | ||
469 | + | ||
470 | + xhci_sysbus_reset(DEVICE(&s->sysbus_xhci)); | ||
471 | +} | ||
472 | + | ||
473 | +static void usb_dwc3_gctl_postw(RegisterInfo *reg, uint64_t val64) | ||
474 | +{ | ||
475 | + USBDWC3 *s = USB_DWC3(reg->opaque); | ||
476 | + | ||
477 | + if (ARRAY_FIELD_EX32(s->regs, GCTL, CORESOFTRESET)) { | ||
478 | + reset_csr(s); | ||
479 | + } | ||
480 | +} | ||
481 | + | ||
482 | +static void usb_dwc3_guid_postw(RegisterInfo *reg, uint64_t val64) | ||
483 | +{ | ||
484 | + USBDWC3 *s = USB_DWC3(reg->opaque); | ||
485 | + | ||
486 | + s->regs[R_GUID] = s->cfg.dwc_usb3_user; | ||
487 | +} | ||
488 | + | ||
489 | +static const RegisterAccessInfo usb_dwc3_regs_info[] = { | ||
490 | + { .name = "GSBUSCFG0", .addr = A_GSBUSCFG0, | ||
491 | + .ro = 0xf300, | ||
492 | + .unimp = 0xffffffff, | ||
493 | + },{ .name = "GSBUSCFG1", .addr = A_GSBUSCFG1, | ||
494 | + .reset = 0x300, | ||
495 | + .ro = 0xffffe0ff, | ||
496 | + .unimp = 0xffffffff, | ||
497 | + },{ .name = "GTXTHRCFG", .addr = A_GTXTHRCFG, | ||
498 | + .ro = 0xd000ffff, | ||
499 | + .unimp = 0xffffffff, | ||
500 | + },{ .name = "GRXTHRCFG", .addr = A_GRXTHRCFG, | ||
501 | + .ro = 0xd007e000, | ||
502 | + .unimp = 0xffffffff, | ||
503 | + },{ .name = "GCTL", .addr = A_GCTL, | ||
504 | + .reset = 0x30c13004, .post_write = usb_dwc3_gctl_postw, | ||
505 | + },{ .name = "GPMSTS", .addr = A_GPMSTS, | ||
506 | + .ro = 0xfffffff, | ||
507 | + .unimp = 0xffffffff, | ||
508 | + },{ .name = "GSTS", .addr = A_GSTS, | ||
509 | + .reset = 0x7e800000, | ||
510 | + .ro = 0xffffffcf, | ||
511 | + .w1c = 0x30, | ||
512 | + .unimp = 0xffffffff, | ||
513 | + },{ .name = "GUCTL1", .addr = A_GUCTL1, | ||
514 | + .reset = 0x198a, | ||
515 | + .ro = 0x7800, | ||
516 | + .unimp = 0xffffffff, | ||
517 | + },{ .name = "GSNPSID", .addr = A_GSNPSID, | ||
518 | + .reset = 0x5533330a, | ||
519 | + .ro = 0xffffffff, | ||
520 | + },{ .name = "GGPIO", .addr = A_GGPIO, | ||
521 | + .ro = 0xffff, | ||
522 | + .unimp = 0xffffffff, | ||
523 | + },{ .name = "GUID", .addr = A_GUID, | ||
524 | + .reset = 0x12345678, .post_write = usb_dwc3_guid_postw, | ||
525 | + },{ .name = "GUCTL", .addr = A_GUCTL, | ||
526 | + .reset = 0x0c808010, | ||
527 | + .ro = 0x1c8000, | ||
528 | + .unimp = 0xffffffff, | ||
529 | + },{ .name = "GBUSERRADDRLO", .addr = A_GBUSERRADDRLO, | ||
530 | + .ro = 0xffffffff, | ||
531 | + },{ .name = "GBUSERRADDRHI", .addr = A_GBUSERRADDRHI, | ||
532 | + .ro = 0xffffffff, | ||
533 | + },{ .name = "GHWPARAMS0", .addr = A_GHWPARAMS0, | ||
534 | + .ro = 0xffffffff, | ||
535 | + },{ .name = "GHWPARAMS1", .addr = A_GHWPARAMS1, | ||
536 | + .ro = 0xffffffff, | ||
537 | + },{ .name = "GHWPARAMS2", .addr = A_GHWPARAMS2, | ||
538 | + .ro = 0xffffffff, | ||
539 | + },{ .name = "GHWPARAMS3", .addr = A_GHWPARAMS3, | ||
540 | + .ro = 0xffffffff, | ||
541 | + },{ .name = "GHWPARAMS4", .addr = A_GHWPARAMS4, | ||
542 | + .ro = 0xffffffff, | ||
543 | + },{ .name = "GHWPARAMS5", .addr = A_GHWPARAMS5, | ||
544 | + .ro = 0xffffffff, | ||
545 | + },{ .name = "GHWPARAMS6", .addr = A_GHWPARAMS6, | ||
546 | + .ro = 0xffffffff, | ||
547 | + },{ .name = "GHWPARAMS7", .addr = A_GHWPARAMS7, | ||
548 | + .ro = 0xffffffff, | ||
549 | + },{ .name = "GDBGFIFOSPACE", .addr = A_GDBGFIFOSPACE, | ||
550 | + .reset = 0xa0000, | ||
551 | + .ro = 0xfffffe00, | ||
552 | + .unimp = 0xffffffff, | ||
553 | + },{ .name = "GUCTL2", .addr = A_GUCTL2, | ||
554 | + .reset = 0x40d, | ||
555 | + .ro = 0x2000, | ||
556 | + .unimp = 0xffffffff, | ||
557 | + },{ .name = "GUSB2PHYCFG", .addr = A_GUSB2PHYCFG, | ||
558 | + .reset = 0x40102410, | ||
559 | + .ro = 0x1e014030, | ||
560 | + .unimp = 0xffffffff, | ||
561 | + },{ .name = "GUSB2I2CCTL", .addr = A_GUSB2I2CCTL, | ||
562 | + .ro = 0xffffffff, | ||
563 | + .unimp = 0xffffffff, | ||
564 | + },{ .name = "GUSB2PHYACC_ULPI", .addr = A_GUSB2PHYACC_ULPI, | ||
565 | + .ro = 0xfd000000, | ||
566 | + .unimp = 0xffffffff, | ||
567 | + },{ .name = "GTXFIFOSIZ0", .addr = A_GTXFIFOSIZ0, | ||
568 | + .reset = 0x2c7000a, | ||
569 | + .unimp = 0xffffffff, | ||
570 | + },{ .name = "GTXFIFOSIZ1", .addr = A_GTXFIFOSIZ1, | ||
571 | + .reset = 0x2d10103, | ||
572 | + .unimp = 0xffffffff, | ||
573 | + },{ .name = "GTXFIFOSIZ2", .addr = A_GTXFIFOSIZ2, | ||
574 | + .reset = 0x3d40103, | ||
575 | + .unimp = 0xffffffff, | ||
576 | + },{ .name = "GTXFIFOSIZ3", .addr = A_GTXFIFOSIZ3, | ||
577 | + .reset = 0x4d70083, | ||
578 | + .unimp = 0xffffffff, | ||
579 | + },{ .name = "GTXFIFOSIZ4", .addr = A_GTXFIFOSIZ4, | ||
580 | + .reset = 0x55a0083, | ||
581 | + .unimp = 0xffffffff, | ||
582 | + },{ .name = "GTXFIFOSIZ5", .addr = A_GTXFIFOSIZ5, | ||
583 | + .reset = 0x5dd0083, | ||
584 | + .unimp = 0xffffffff, | ||
585 | + },{ .name = "GRXFIFOSIZ0", .addr = A_GRXFIFOSIZ0, | ||
586 | + .reset = 0x1c20105, | ||
587 | + .unimp = 0xffffffff, | ||
588 | + },{ .name = "GRXFIFOSIZ1", .addr = A_GRXFIFOSIZ1, | ||
589 | + .reset = 0x2c70000, | ||
590 | + .unimp = 0xffffffff, | ||
591 | + },{ .name = "GRXFIFOSIZ2", .addr = A_GRXFIFOSIZ2, | ||
592 | + .reset = 0x2c70000, | ||
593 | + .unimp = 0xffffffff, | ||
594 | + },{ .name = "GEVNTADRLO_0", .addr = A_GEVNTADRLO_0, | ||
595 | + .unimp = 0xffffffff, | ||
596 | + },{ .name = "GEVNTADRHI_0", .addr = A_GEVNTADRHI_0, | ||
597 | + .unimp = 0xffffffff, | ||
598 | + },{ .name = "GEVNTSIZ_0", .addr = A_GEVNTSIZ_0, | ||
599 | + .ro = 0x7fff0000, | ||
600 | + .unimp = 0xffffffff, | ||
601 | + },{ .name = "GEVNTCOUNT_0", .addr = A_GEVNTCOUNT_0, | ||
602 | + .ro = 0x7fff0000, | ||
603 | + .unimp = 0xffffffff, | ||
604 | + },{ .name = "GEVNTADRLO_1", .addr = A_GEVNTADRLO_1, | ||
605 | + .unimp = 0xffffffff, | ||
606 | + },{ .name = "GEVNTADRHI_1", .addr = A_GEVNTADRHI_1, | ||
607 | + .unimp = 0xffffffff, | ||
608 | + },{ .name = "GEVNTSIZ_1", .addr = A_GEVNTSIZ_1, | ||
609 | + .ro = 0x7fff0000, | ||
610 | + .unimp = 0xffffffff, | ||
611 | + },{ .name = "GEVNTCOUNT_1", .addr = A_GEVNTCOUNT_1, | ||
612 | + .ro = 0x7fff0000, | ||
613 | + .unimp = 0xffffffff, | ||
614 | + },{ .name = "GEVNTADRLO_2", .addr = A_GEVNTADRLO_2, | ||
615 | + .unimp = 0xffffffff, | ||
616 | + },{ .name = "GEVNTADRHI_2", .addr = A_GEVNTADRHI_2, | ||
617 | + .unimp = 0xffffffff, | ||
618 | + },{ .name = "GEVNTSIZ_2", .addr = A_GEVNTSIZ_2, | ||
619 | + .ro = 0x7fff0000, | ||
620 | + .unimp = 0xffffffff, | ||
621 | + },{ .name = "GEVNTCOUNT_2", .addr = A_GEVNTCOUNT_2, | ||
622 | + .ro = 0x7fff0000, | ||
623 | + .unimp = 0xffffffff, | ||
624 | + },{ .name = "GEVNTADRLO_3", .addr = A_GEVNTADRLO_3, | ||
625 | + .unimp = 0xffffffff, | ||
626 | + },{ .name = "GEVNTADRHI_3", .addr = A_GEVNTADRHI_3, | ||
627 | + .unimp = 0xffffffff, | ||
628 | + },{ .name = "GEVNTSIZ_3", .addr = A_GEVNTSIZ_3, | ||
629 | + .ro = 0x7fff0000, | ||
630 | + .unimp = 0xffffffff, | ||
631 | + },{ .name = "GEVNTCOUNT_3", .addr = A_GEVNTCOUNT_3, | ||
632 | + .ro = 0x7fff0000, | ||
633 | + .unimp = 0xffffffff, | ||
634 | + },{ .name = "GHWPARAMS8", .addr = A_GHWPARAMS8, | ||
635 | + .ro = 0xffffffff, | ||
636 | + },{ .name = "GTXFIFOPRIDEV", .addr = A_GTXFIFOPRIDEV, | ||
637 | + .ro = 0xffffffc0, | ||
638 | + .unimp = 0xffffffff, | ||
639 | + },{ .name = "GTXFIFOPRIHST", .addr = A_GTXFIFOPRIHST, | ||
640 | + .ro = 0xfffffff8, | ||
641 | + .unimp = 0xffffffff, | ||
642 | + },{ .name = "GRXFIFOPRIHST", .addr = A_GRXFIFOPRIHST, | ||
643 | + .ro = 0xfffffff8, | ||
644 | + .unimp = 0xffffffff, | ||
645 | + },{ .name = "GDMAHLRATIO", .addr = A_GDMAHLRATIO, | ||
646 | + .ro = 0xffffe0e0, | ||
647 | + .unimp = 0xffffffff, | ||
648 | + },{ .name = "GFLADJ", .addr = A_GFLADJ, | ||
649 | + .reset = 0xc83f020, | ||
650 | + .rsvd = 0x40, | ||
651 | + .ro = 0x400040, | ||
652 | + .unimp = 0xffffffff, | ||
653 | + } | ||
654 | +}; | ||
655 | + | ||
656 | +static void usb_dwc3_reset(DeviceState *dev) | ||
657 | +{ | ||
658 | + USBDWC3 *s = USB_DWC3(dev); | ||
659 | + unsigned int i; | ||
660 | + | ||
661 | + for (i = 0; i < ARRAY_SIZE(s->regs_info); ++i) { | ||
662 | + switch (i) { | ||
663 | + case R_GHWPARAMS0...R_GHWPARAMS7: | ||
664 | + break; | ||
665 | + case R_GHWPARAMS8: | ||
666 | + break; | ||
667 | + default: | ||
668 | + register_reset(&s->regs_info[i]); | ||
669 | + }; | ||
670 | + } | ||
671 | + | ||
672 | + xhci_sysbus_reset(DEVICE(&s->sysbus_xhci)); | ||
673 | +} | ||
674 | + | ||
675 | +static const MemoryRegionOps usb_dwc3_ops = { | ||
676 | + .read = register_read_memory, | ||
677 | + .write = register_write_memory, | ||
678 | + .endianness = DEVICE_LITTLE_ENDIAN, | ||
679 | + .valid = { | ||
680 | + .min_access_size = 4, | ||
681 | + .max_access_size = 4, | ||
682 | + }, | ||
683 | +}; | ||
684 | + | ||
685 | +static void usb_dwc3_realize(DeviceState *dev, Error **errp) | ||
686 | +{ | ||
687 | + USBDWC3 *s = USB_DWC3(dev); | ||
688 | + SysBusDevice *sbd = SYS_BUS_DEVICE(dev); | ||
689 | + Error *err = NULL; | ||
690 | + | ||
691 | + sysbus_realize(SYS_BUS_DEVICE(&s->sysbus_xhci), &err); | ||
692 | + if (err) { | ||
693 | + error_propagate(errp, err); | ||
694 | + return; | ||
695 | + } | ||
696 | + | ||
697 | + memory_region_add_subregion(&s->iomem, 0, | ||
698 | + sysbus_mmio_get_region(SYS_BUS_DEVICE(&s->sysbus_xhci), 0)); | ||
699 | + sysbus_init_mmio(sbd, &s->iomem); | ||
700 | + | ||
701 | + /* | ||
702 | + * Device Configuration | ||
703 | + */ | ||
704 | + s->regs[R_GHWPARAMS0] = 0x40204048 | s->cfg.mode; | ||
705 | + s->regs[R_GHWPARAMS1] = 0x222493b; | ||
706 | + s->regs[R_GHWPARAMS2] = 0x12345678; | ||
707 | + s->regs[R_GHWPARAMS3] = 0x618c088; | ||
708 | + s->regs[R_GHWPARAMS4] = 0x47822004; | ||
709 | + s->regs[R_GHWPARAMS5] = 0x4202088; | ||
710 | + s->regs[R_GHWPARAMS6] = 0x7850c20; | ||
711 | + s->regs[R_GHWPARAMS7] = 0x0; | ||
712 | + s->regs[R_GHWPARAMS8] = 0x478; | ||
713 | +} | ||
714 | + | ||
715 | +static void usb_dwc3_init(Object *obj) | ||
716 | +{ | ||
717 | + USBDWC3 *s = USB_DWC3(obj); | ||
718 | + RegisterInfoArray *reg_array; | ||
719 | + | ||
720 | + memory_region_init(&s->iomem, obj, TYPE_USB_DWC3, DWC3_SIZE); | ||
721 | + reg_array = | ||
722 | + register_init_block32(DEVICE(obj), usb_dwc3_regs_info, | ||
723 | + ARRAY_SIZE(usb_dwc3_regs_info), | ||
724 | + s->regs_info, s->regs, | ||
725 | + &usb_dwc3_ops, | ||
726 | + USB_DWC3_ERR_DEBUG, | ||
727 | + USB_DWC3_R_MAX * 4); | ||
728 | + memory_region_add_subregion(&s->iomem, | ||
729 | + DWC3_GLOBAL_OFFSET, | ||
730 | + ®_array->mem); | ||
731 | + object_initialize_child(obj, "dwc3-xhci", &s->sysbus_xhci, | ||
732 | + TYPE_XHCI_SYSBUS); | ||
733 | + qdev_alias_all_properties(DEVICE(&s->sysbus_xhci), obj); | ||
734 | + | ||
735 | + s->cfg.mode = HOST_MODE; | ||
736 | +} | ||
737 | + | ||
738 | +static const VMStateDescription vmstate_usb_dwc3 = { | ||
739 | + .name = "usb-dwc3", | ||
740 | + .version_id = 1, | ||
741 | + .fields = (VMStateField[]) { | ||
742 | + VMSTATE_UINT32_ARRAY(regs, USBDWC3, USB_DWC3_R_MAX), | ||
743 | + VMSTATE_UINT8(cfg.mode, USBDWC3), | ||
744 | + VMSTATE_UINT32(cfg.dwc_usb3_user, USBDWC3), | ||
745 | + VMSTATE_END_OF_LIST() | ||
746 | + } | ||
747 | +}; | ||
748 | + | ||
749 | +static Property usb_dwc3_properties[] = { | ||
750 | + DEFINE_PROP_UINT32("DWC_USB3_USERID", USBDWC3, cfg.dwc_usb3_user, | ||
751 | + 0x12345678), | ||
752 | + DEFINE_PROP_END_OF_LIST(), | ||
753 | +}; | ||
754 | + | ||
755 | +static void usb_dwc3_class_init(ObjectClass *klass, void *data) | ||
756 | +{ | ||
757 | + DeviceClass *dc = DEVICE_CLASS(klass); | ||
758 | + | ||
759 | + dc->reset = usb_dwc3_reset; | ||
760 | + dc->realize = usb_dwc3_realize; | ||
761 | + dc->vmsd = &vmstate_usb_dwc3; | ||
762 | + device_class_set_props(dc, usb_dwc3_properties); | ||
763 | +} | ||
764 | + | ||
765 | +static const TypeInfo usb_dwc3_info = { | ||
766 | + .name = TYPE_USB_DWC3, | ||
767 | + .parent = TYPE_SYS_BUS_DEVICE, | ||
768 | + .instance_size = sizeof(USBDWC3), | ||
769 | + .class_init = usb_dwc3_class_init, | ||
770 | + .instance_init = usb_dwc3_init, | ||
771 | +}; | ||
772 | + | ||
773 | +static void usb_dwc3_register_types(void) | ||
774 | +{ | ||
775 | + type_register_static(&usb_dwc3_info); | ||
776 | +} | ||
777 | + | ||
778 | +type_init(usb_dwc3_register_types) | ||
779 | diff --git a/hw/usb/Kconfig b/hw/usb/Kconfig | ||
18 | index XXXXXXX..XXXXXXX 100644 | 780 | index XXXXXXX..XXXXXXX 100644 |
19 | --- a/hw/intc/arm_gicv3_kvm.c | 781 | --- a/hw/usb/Kconfig |
20 | +++ b/hw/intc/arm_gicv3_kvm.c | 782 | +++ b/hw/usb/Kconfig |
21 | @@ -XXX,XX +XXX,XX @@ static void kvm_dist_putbmp(GICv3State *s, uint32_t offset, | 783 | @@ -XXX,XX +XXX,XX @@ config IMX_USBPHY |
22 | if (clroffset != 0) { | 784 | bool |
23 | reg = 0; | 785 | default y |
24 | kvm_gicd_access(s, clroffset, ®, true); | 786 | depends on USB |
25 | + clroffset += 4; | 787 | + |
26 | } | 788 | +config USB_DWC3 |
27 | reg = *gic_bmp_ptr32(bmp, irq); | 789 | + bool |
28 | kvm_gicd_access(s, offset, ®, true); | 790 | + select USB_XHCI_SYSBUS |
791 | + select REGISTER | ||
792 | diff --git a/hw/usb/meson.build b/hw/usb/meson.build | ||
793 | index XXXXXXX..XXXXXXX 100644 | ||
794 | --- a/hw/usb/meson.build | ||
795 | +++ b/hw/usb/meson.build | ||
796 | @@ -XXX,XX +XXX,XX @@ softmmu_ss.add(when: 'CONFIG_USB_XHCI_SYSBUS', if_true: files('hcd-xhci-sysbus.c | ||
797 | softmmu_ss.add(when: 'CONFIG_USB_XHCI_NEC', if_true: files('hcd-xhci-nec.c')) | ||
798 | softmmu_ss.add(when: 'CONFIG_USB_MUSB', if_true: files('hcd-musb.c')) | ||
799 | softmmu_ss.add(when: 'CONFIG_USB_DWC2', if_true: files('hcd-dwc2.c')) | ||
800 | +softmmu_ss.add(when: 'CONFIG_USB_DWC3', if_true: files('hcd-dwc3.c')) | ||
801 | |||
802 | softmmu_ss.add(when: 'CONFIG_TUSB6010', if_true: files('tusb6010.c')) | ||
803 | softmmu_ss.add(when: 'CONFIG_IMX', if_true: files('chipidea.c')) | ||
29 | -- | 804 | -- |
30 | 2.17.1 | 805 | 2.20.1 |
31 | 806 | ||
32 | 807 | diff view generated by jsdifflib |
1 | From: Paolo Bonzini <pbonzini@redhat.com> | 1 | From: Sai Pavan Boddu <sai.pavan.boddu@xilinx.com> |
---|---|---|---|
2 | 2 | ||
3 | cpregs_keys is an uint32_t* so the allocation should use uint32_t. | 3 | This model is a top level integration wrapper for hcd-dwc3 and |
4 | g_new is even better because it is type-safe. | 4 | versal-usb2-ctrl-regs modules, this is used by xilinx versal soc's and |
5 | 5 | future xilinx usb subsystems would also be part of it. | |
6 | Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> | 6 | |
7 | Signed-off-by: Sai Pavan Boddu <sai.pavan.boddu@xilinx.com> | ||
8 | Reviewed-by: Edgar E. Iglesias <edgar.iglesias@xilinx.com> | ||
7 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | 9 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
8 | Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org> | 10 | Message-id: 1607023357-5096-4-git-send-email-sai.pavan.boddu@xilinx.com |
9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 11 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
10 | --- | 12 | --- |
11 | target/arm/gdbstub.c | 3 +-- | 13 | include/hw/usb/xlnx-usb-subsystem.h | 45 ++++++++++++++ |
12 | 1 file changed, 1 insertion(+), 2 deletions(-) | 14 | hw/usb/xlnx-usb-subsystem.c | 94 +++++++++++++++++++++++++++++ |
13 | 15 | hw/usb/Kconfig | 5 ++ | |
14 | diff --git a/target/arm/gdbstub.c b/target/arm/gdbstub.c | 16 | hw/usb/meson.build | 1 + |
17 | 4 files changed, 145 insertions(+) | ||
18 | create mode 100644 include/hw/usb/xlnx-usb-subsystem.h | ||
19 | create mode 100644 hw/usb/xlnx-usb-subsystem.c | ||
20 | |||
21 | diff --git a/include/hw/usb/xlnx-usb-subsystem.h b/include/hw/usb/xlnx-usb-subsystem.h | ||
22 | new file mode 100644 | ||
23 | index XXXXXXX..XXXXXXX | ||
24 | --- /dev/null | ||
25 | +++ b/include/hw/usb/xlnx-usb-subsystem.h | ||
26 | @@ -XXX,XX +XXX,XX @@ | ||
27 | +/* | ||
28 | + * QEMU model of the Xilinx usb subsystem | ||
29 | + * | ||
30 | + * Copyright (c) 2020 Xilinx Inc. Sai Pavan Boddu <sai.pavan.boddu@xilinx.com> | ||
31 | + * | ||
32 | + * Permission is hereby granted, free of charge, to any person obtaining a copy | ||
33 | + * of this software and associated documentation files (the "Software"), to deal | ||
34 | + * in the Software without restriction, including without limitation the rights | ||
35 | + * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell | ||
36 | + * copies of the Software, and to permit persons to whom the Software is | ||
37 | + * furnished to do so, subject to the following conditions: | ||
38 | + * | ||
39 | + * The above copyright notice and this permission notice shall be included in | ||
40 | + * all copies or substantial portions of the Software. | ||
41 | + * | ||
42 | + * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR | ||
43 | + * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, | ||
44 | + * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL | ||
45 | + * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | ||
46 | + * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, | ||
47 | + * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN | ||
48 | + * THE SOFTWARE. | ||
49 | + */ | ||
50 | + | ||
51 | +#ifndef _XLNX_VERSAL_USB_SUBSYSTEM_H_ | ||
52 | +#define _XLNX_VERSAL_USB_SUBSYSTEM_H_ | ||
53 | + | ||
54 | +#include "hw/usb/xlnx-versal-usb2-ctrl-regs.h" | ||
55 | +#include "hw/usb/hcd-dwc3.h" | ||
56 | + | ||
57 | +#define TYPE_XILINX_VERSAL_USB2 "xlnx.versal-usb2" | ||
58 | + | ||
59 | +#define VERSAL_USB2(obj) \ | ||
60 | + OBJECT_CHECK(VersalUsb2, (obj), TYPE_XILINX_VERSAL_USB2) | ||
61 | + | ||
62 | +typedef struct VersalUsb2 { | ||
63 | + SysBusDevice parent_obj; | ||
64 | + MemoryRegion dwc3_mr; | ||
65 | + MemoryRegion usb2Ctrl_mr; | ||
66 | + | ||
67 | + VersalUsb2CtrlRegs usb2Ctrl; | ||
68 | + USBDWC3 dwc3; | ||
69 | +} VersalUsb2; | ||
70 | + | ||
71 | +#endif | ||
72 | diff --git a/hw/usb/xlnx-usb-subsystem.c b/hw/usb/xlnx-usb-subsystem.c | ||
73 | new file mode 100644 | ||
74 | index XXXXXXX..XXXXXXX | ||
75 | --- /dev/null | ||
76 | +++ b/hw/usb/xlnx-usb-subsystem.c | ||
77 | @@ -XXX,XX +XXX,XX @@ | ||
78 | +/* | ||
79 | + * QEMU model of the Xilinx usb subsystem | ||
80 | + * | ||
81 | + * Copyright (c) 2020 Xilinx Inc. Sai Pavan Boddu <sai.pava.boddu@xilinx.com> | ||
82 | + * | ||
83 | + * Permission is hereby granted, free of charge, to any person obtaining a copy | ||
84 | + * of this software and associated documentation files (the "Software"), to deal | ||
85 | + * in the Software without restriction, including without limitation the rights | ||
86 | + * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell | ||
87 | + * copies of the Software, and to permit persons to whom the Software is | ||
88 | + * furnished to do so, subject to the following conditions: | ||
89 | + * | ||
90 | + * The above copyright notice and this permission notice shall be included in | ||
91 | + * all copies or substantial portions of the Software. | ||
92 | + * | ||
93 | + * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR | ||
94 | + * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, | ||
95 | + * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL | ||
96 | + * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | ||
97 | + * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, | ||
98 | + * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN | ||
99 | + * THE SOFTWARE. | ||
100 | + */ | ||
101 | + | ||
102 | +#include "qemu/osdep.h" | ||
103 | +#include "hw/sysbus.h" | ||
104 | +#include "hw/irq.h" | ||
105 | +#include "hw/register.h" | ||
106 | +#include "qemu/bitops.h" | ||
107 | +#include "qemu/log.h" | ||
108 | +#include "qom/object.h" | ||
109 | +#include "qapi/error.h" | ||
110 | +#include "hw/qdev-properties.h" | ||
111 | +#include "hw/usb/xlnx-usb-subsystem.h" | ||
112 | + | ||
113 | +static void versal_usb2_realize(DeviceState *dev, Error **errp) | ||
114 | +{ | ||
115 | + VersalUsb2 *s = VERSAL_USB2(dev); | ||
116 | + SysBusDevice *sbd = SYS_BUS_DEVICE(dev); | ||
117 | + Error *err = NULL; | ||
118 | + | ||
119 | + sysbus_realize(SYS_BUS_DEVICE(&s->dwc3), &err); | ||
120 | + if (err) { | ||
121 | + error_propagate(errp, err); | ||
122 | + return; | ||
123 | + } | ||
124 | + sysbus_realize(SYS_BUS_DEVICE(&s->usb2Ctrl), &err); | ||
125 | + if (err) { | ||
126 | + error_propagate(errp, err); | ||
127 | + return; | ||
128 | + } | ||
129 | + sysbus_init_mmio(sbd, &s->dwc3_mr); | ||
130 | + sysbus_init_mmio(sbd, &s->usb2Ctrl_mr); | ||
131 | + qdev_pass_gpios(DEVICE(&s->dwc3.sysbus_xhci), dev, SYSBUS_DEVICE_GPIO_IRQ); | ||
132 | +} | ||
133 | + | ||
134 | +static void versal_usb2_init(Object *obj) | ||
135 | +{ | ||
136 | + VersalUsb2 *s = VERSAL_USB2(obj); | ||
137 | + | ||
138 | + object_initialize_child(obj, "versal.dwc3", &s->dwc3, | ||
139 | + TYPE_USB_DWC3); | ||
140 | + object_initialize_child(obj, "versal.usb2-ctrl", &s->usb2Ctrl, | ||
141 | + TYPE_XILINX_VERSAL_USB2_CTRL_REGS); | ||
142 | + memory_region_init_alias(&s->dwc3_mr, obj, "versal.dwc3_alias", | ||
143 | + &s->dwc3.iomem, 0, DWC3_SIZE); | ||
144 | + memory_region_init_alias(&s->usb2Ctrl_mr, obj, "versal.usb2Ctrl_alias", | ||
145 | + &s->usb2Ctrl.iomem, 0, USB2_REGS_R_MAX * 4); | ||
146 | + qdev_alias_all_properties(DEVICE(&s->dwc3), obj); | ||
147 | + qdev_alias_all_properties(DEVICE(&s->dwc3.sysbus_xhci), obj); | ||
148 | + object_property_add_alias(obj, "dma", OBJECT(&s->dwc3.sysbus_xhci), "dma"); | ||
149 | +} | ||
150 | + | ||
151 | +static void versal_usb2_class_init(ObjectClass *klass, void *data) | ||
152 | +{ | ||
153 | + DeviceClass *dc = DEVICE_CLASS(klass); | ||
154 | + | ||
155 | + dc->realize = versal_usb2_realize; | ||
156 | +} | ||
157 | + | ||
158 | +static const TypeInfo versal_usb2_info = { | ||
159 | + .name = TYPE_XILINX_VERSAL_USB2, | ||
160 | + .parent = TYPE_SYS_BUS_DEVICE, | ||
161 | + .instance_size = sizeof(VersalUsb2), | ||
162 | + .class_init = versal_usb2_class_init, | ||
163 | + .instance_init = versal_usb2_init, | ||
164 | +}; | ||
165 | + | ||
166 | +static void versal_usb_types(void) | ||
167 | +{ | ||
168 | + type_register_static(&versal_usb2_info); | ||
169 | +} | ||
170 | + | ||
171 | +type_init(versal_usb_types) | ||
172 | diff --git a/hw/usb/Kconfig b/hw/usb/Kconfig | ||
15 | index XXXXXXX..XXXXXXX 100644 | 173 | index XXXXXXX..XXXXXXX 100644 |
16 | --- a/target/arm/gdbstub.c | 174 | --- a/hw/usb/Kconfig |
17 | +++ b/target/arm/gdbstub.c | 175 | +++ b/hw/usb/Kconfig |
18 | @@ -XXX,XX +XXX,XX @@ int arm_gen_dynamic_xml(CPUState *cs) | 176 | @@ -XXX,XX +XXX,XX @@ config USB_DWC3 |
19 | RegisterSysregXmlParam param = {cs, s}; | 177 | bool |
20 | 178 | select USB_XHCI_SYSBUS | |
21 | cpu->dyn_xml.num_cpregs = 0; | 179 | select REGISTER |
22 | - cpu->dyn_xml.cpregs_keys = g_malloc(sizeof(uint32_t *) * | 180 | + |
23 | - g_hash_table_size(cpu->cp_regs)); | 181 | +config XLNX_USB_SUBSYS |
24 | + cpu->dyn_xml.cpregs_keys = g_new(uint32_t, g_hash_table_size(cpu->cp_regs)); | 182 | + bool |
25 | g_string_printf(s, "<?xml version=\"1.0\"?>"); | 183 | + default y if XLNX_VERSAL |
26 | g_string_append_printf(s, "<!DOCTYPE target SYSTEM \"gdb-target.dtd\">"); | 184 | + select USB_DWC3 |
27 | g_string_append_printf(s, "<feature name=\"org.qemu.gdb.arm.sys.regs\">"); | 185 | diff --git a/hw/usb/meson.build b/hw/usb/meson.build |
186 | index XXXXXXX..XXXXXXX 100644 | ||
187 | --- a/hw/usb/meson.build | ||
188 | +++ b/hw/usb/meson.build | ||
189 | @@ -XXX,XX +XXX,XX @@ softmmu_ss.add(when: 'CONFIG_TUSB6010', if_true: files('tusb6010.c')) | ||
190 | softmmu_ss.add(when: 'CONFIG_IMX', if_true: files('chipidea.c')) | ||
191 | softmmu_ss.add(when: 'CONFIG_IMX_USBPHY', if_true: files('imx-usb-phy.c')) | ||
192 | specific_ss.add(when: 'CONFIG_XLNX_VERSAL', if_true: files('xlnx-versal-usb2-ctrl-regs.c')) | ||
193 | +specific_ss.add(when: 'CONFIG_XLNX_USB_SUBSYS', if_true: files('xlnx-usb-subsystem.c')) | ||
194 | |||
195 | # emulated usb devices | ||
196 | softmmu_ss.add(when: 'CONFIG_USB', if_true: files('dev-hub.c')) | ||
28 | -- | 197 | -- |
29 | 2.17.1 | 198 | 2.20.1 |
30 | 199 | ||
31 | 200 | diff view generated by jsdifflib |
1 | From: Richard Henderson <richard.henderson@linaro.org> | 1 | From: Vikram Garhwal <fnu.vikram@xilinx.com> |
---|---|---|---|
2 | 2 | ||
3 | Depending on the host abi, float16, aka uint16_t, values are | 3 | Connect VersalUsb2 subsystem to xlnx-versal SOC, its placed |
4 | passed and returned either zero-extended in the host register | 4 | in iou of lpd domain and configure it as dual port host controller. |
5 | or with garbage at the top of the host register. | 5 | Add the respective guest dts nodes for "xlnx-versal-virt" machine. |
6 | 6 | ||
7 | The tcg code generator has so far been assuming garbage, as that | 7 | Signed-off-by: Vikram Garhwal <fnu.vikram@xilinx.com> |
8 | matches the x86 abi, but this is incorrect for other host abis. | 8 | Signed-off-by: Sai Pavan Boddu <sai.pavan.boddu@xilinx.com> |
9 | Further, target/arm has so far been assuming zero-extended results, | 9 | Reviewed-by: Edgar E. Iglesias <edgar.iglesias@xilinx.com> |
10 | so that it may store the 16-bit value into a 32-bit slot with the | 10 | Message-id: 1607023357-5096-5-git-send-email-sai.pavan.boddu@xilinx.com |
11 | high 16-bits already clear. | ||
12 | |||
13 | Rectify both problems by mapping "f16" in the helper definition | ||
14 | to uint32_t instead of (a typedef for) uint16_t. This forces | ||
15 | the host compiler to assume garbage in the upper 16 bits on input | ||
16 | and to zero-extend the result on output. | ||
17 | |||
18 | Cc: qemu-stable@nongnu.org | ||
19 | Signed-off-by: Richard Henderson <richard.henderson@linaro.org> | ||
20 | Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org> | ||
21 | Tested-by: Laurent Desnogues <laurent.desnogues@gmail.com> | ||
22 | Message-id: 20180522175629.24932-1-richard.henderson@linaro.org | ||
23 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
24 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 11 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
25 | --- | 12 | --- |
26 | include/exec/helper-head.h | 2 +- | 13 | include/hw/arm/xlnx-versal.h | 9 ++++++ |
27 | target/arm/helper-a64.c | 35 +++++++++-------- | 14 | hw/arm/xlnx-versal-virt.c | 55 ++++++++++++++++++++++++++++++++++++ |
28 | target/arm/helper.c | 80 +++++++++++++++++++------------------- | 15 | hw/arm/xlnx-versal.c | 26 +++++++++++++++++ |
29 | 3 files changed, 59 insertions(+), 58 deletions(-) | 16 | 3 files changed, 90 insertions(+) |
30 | 17 | ||
31 | diff --git a/include/exec/helper-head.h b/include/exec/helper-head.h | 18 | diff --git a/include/hw/arm/xlnx-versal.h b/include/hw/arm/xlnx-versal.h |
32 | index XXXXXXX..XXXXXXX 100644 | 19 | index XXXXXXX..XXXXXXX 100644 |
33 | --- a/include/exec/helper-head.h | 20 | --- a/include/hw/arm/xlnx-versal.h |
34 | +++ b/include/exec/helper-head.h | 21 | +++ b/include/hw/arm/xlnx-versal.h |
35 | @@ -XXX,XX +XXX,XX @@ | 22 | @@ -XXX,XX +XXX,XX @@ |
36 | #define dh_ctype_int int | 23 | #include "hw/net/cadence_gem.h" |
37 | #define dh_ctype_i64 uint64_t | 24 | #include "hw/rtc/xlnx-zynqmp-rtc.h" |
38 | #define dh_ctype_s64 int64_t | 25 | #include "qom/object.h" |
39 | -#define dh_ctype_f16 float16 | 26 | +#include "hw/usb/xlnx-usb-subsystem.h" |
40 | +#define dh_ctype_f16 uint32_t | 27 | |
41 | #define dh_ctype_f32 float32 | 28 | #define TYPE_XLNX_VERSAL "xlnx-versal" |
42 | #define dh_ctype_f64 float64 | 29 | OBJECT_DECLARE_SIMPLE_TYPE(Versal, XLNX_VERSAL) |
43 | #define dh_ctype_ptr void * | 30 | @@ -XXX,XX +XXX,XX @@ struct Versal { |
44 | diff --git a/target/arm/helper-a64.c b/target/arm/helper-a64.c | 31 | PL011State uart[XLNX_VERSAL_NR_UARTS]; |
32 | CadenceGEMState gem[XLNX_VERSAL_NR_GEMS]; | ||
33 | XlnxZDMA adma[XLNX_VERSAL_NR_ADMAS]; | ||
34 | + VersalUsb2 usb; | ||
35 | } iou; | ||
36 | } lpd; | ||
37 | |||
38 | @@ -XXX,XX +XXX,XX @@ struct Versal { | ||
39 | |||
40 | #define VERSAL_UART0_IRQ_0 18 | ||
41 | #define VERSAL_UART1_IRQ_0 19 | ||
42 | +#define VERSAL_USB0_IRQ_0 22 | ||
43 | #define VERSAL_GEM0_IRQ_0 56 | ||
44 | #define VERSAL_GEM0_WAKE_IRQ_0 57 | ||
45 | #define VERSAL_GEM1_IRQ_0 58 | ||
46 | @@ -XXX,XX +XXX,XX @@ struct Versal { | ||
47 | #define MM_OCM 0xfffc0000U | ||
48 | #define MM_OCM_SIZE 0x40000 | ||
49 | |||
50 | +#define MM_USB2_CTRL_REGS 0xFF9D0000 | ||
51 | +#define MM_USB2_CTRL_REGS_SIZE 0x10000 | ||
52 | + | ||
53 | +#define MM_USB_0 0xFE200000 | ||
54 | +#define MM_USB_0_SIZE 0x10000 | ||
55 | + | ||
56 | #define MM_TOP_DDR 0x0 | ||
57 | #define MM_TOP_DDR_SIZE 0x80000000U | ||
58 | #define MM_TOP_DDR_2 0x800000000ULL | ||
59 | diff --git a/hw/arm/xlnx-versal-virt.c b/hw/arm/xlnx-versal-virt.c | ||
45 | index XXXXXXX..XXXXXXX 100644 | 60 | index XXXXXXX..XXXXXXX 100644 |
46 | --- a/target/arm/helper-a64.c | 61 | --- a/hw/arm/xlnx-versal-virt.c |
47 | +++ b/target/arm/helper-a64.c | 62 | +++ b/hw/arm/xlnx-versal-virt.c |
48 | @@ -XXX,XX +XXX,XX @@ static inline uint32_t float_rel_to_flags(int res) | 63 | @@ -XXX,XX +XXX,XX @@ struct VersalVirt { |
49 | return flags; | 64 | uint32_t ethernet_phy[2]; |
65 | uint32_t clk_125Mhz; | ||
66 | uint32_t clk_25Mhz; | ||
67 | + uint32_t usb; | ||
68 | + uint32_t dwc; | ||
69 | } phandle; | ||
70 | struct arm_boot_info binfo; | ||
71 | |||
72 | @@ -XXX,XX +XXX,XX @@ static void fdt_create(VersalVirt *s) | ||
73 | s->phandle.clk_25Mhz = qemu_fdt_alloc_phandle(s->fdt); | ||
74 | s->phandle.clk_125Mhz = qemu_fdt_alloc_phandle(s->fdt); | ||
75 | |||
76 | + s->phandle.usb = qemu_fdt_alloc_phandle(s->fdt); | ||
77 | + s->phandle.dwc = qemu_fdt_alloc_phandle(s->fdt); | ||
78 | /* Create /chosen node for load_dtb. */ | ||
79 | qemu_fdt_add_subnode(s->fdt, "/chosen"); | ||
80 | |||
81 | @@ -XXX,XX +XXX,XX @@ static void fdt_add_timer_nodes(VersalVirt *s) | ||
82 | compat, sizeof(compat)); | ||
50 | } | 83 | } |
51 | 84 | ||
52 | -uint64_t HELPER(vfp_cmph_a64)(float16 x, float16 y, void *fp_status) | 85 | +static void fdt_add_usb_xhci_nodes(VersalVirt *s) |
53 | +uint64_t HELPER(vfp_cmph_a64)(uint32_t x, uint32_t y, void *fp_status) | 86 | +{ |
87 | + const char clocknames[] = "bus_clk\0ref_clk"; | ||
88 | + const char irq_name[] = "dwc_usb3"; | ||
89 | + const char compatVersalDWC3[] = "xlnx,versal-dwc3"; | ||
90 | + const char compatDWC3[] = "snps,dwc3"; | ||
91 | + char *name = g_strdup_printf("/usb@%" PRIx32, MM_USB2_CTRL_REGS); | ||
92 | + | ||
93 | + qemu_fdt_add_subnode(s->fdt, name); | ||
94 | + qemu_fdt_setprop(s->fdt, name, "compatible", | ||
95 | + compatVersalDWC3, sizeof(compatVersalDWC3)); | ||
96 | + qemu_fdt_setprop_sized_cells(s->fdt, name, "reg", | ||
97 | + 2, MM_USB2_CTRL_REGS, | ||
98 | + 2, MM_USB2_CTRL_REGS_SIZE); | ||
99 | + qemu_fdt_setprop(s->fdt, name, "clock-names", | ||
100 | + clocknames, sizeof(clocknames)); | ||
101 | + qemu_fdt_setprop_cells(s->fdt, name, "clocks", | ||
102 | + s->phandle.clk_25Mhz, s->phandle.clk_125Mhz); | ||
103 | + qemu_fdt_setprop(s->fdt, name, "ranges", NULL, 0); | ||
104 | + qemu_fdt_setprop_cell(s->fdt, name, "#address-cells", 2); | ||
105 | + qemu_fdt_setprop_cell(s->fdt, name, "#size-cells", 2); | ||
106 | + qemu_fdt_setprop_cell(s->fdt, name, "phandle", s->phandle.usb); | ||
107 | + g_free(name); | ||
108 | + | ||
109 | + name = g_strdup_printf("/usb@%" PRIx32 "/dwc3@%" PRIx32, | ||
110 | + MM_USB2_CTRL_REGS, MM_USB_0); | ||
111 | + qemu_fdt_add_subnode(s->fdt, name); | ||
112 | + qemu_fdt_setprop(s->fdt, name, "compatible", | ||
113 | + compatDWC3, sizeof(compatDWC3)); | ||
114 | + qemu_fdt_setprop_sized_cells(s->fdt, name, "reg", | ||
115 | + 2, MM_USB_0, 2, MM_USB_0_SIZE); | ||
116 | + qemu_fdt_setprop(s->fdt, name, "interrupt-names", | ||
117 | + irq_name, sizeof(irq_name)); | ||
118 | + qemu_fdt_setprop_cells(s->fdt, name, "interrupts", | ||
119 | + GIC_FDT_IRQ_TYPE_SPI, VERSAL_USB0_IRQ_0, | ||
120 | + GIC_FDT_IRQ_FLAGS_LEVEL_HI); | ||
121 | + qemu_fdt_setprop_cell(s->fdt, name, | ||
122 | + "snps,quirk-frame-length-adjustment", 0x20); | ||
123 | + qemu_fdt_setprop_cells(s->fdt, name, "#stream-id-cells", 1); | ||
124 | + qemu_fdt_setprop_string(s->fdt, name, "dr_mode", "host"); | ||
125 | + qemu_fdt_setprop_string(s->fdt, name, "phy-names", "usb3-phy"); | ||
126 | + qemu_fdt_setprop(s->fdt, name, "snps,dis_u2_susphy_quirk", NULL, 0); | ||
127 | + qemu_fdt_setprop(s->fdt, name, "snps,dis_u3_susphy_quirk", NULL, 0); | ||
128 | + qemu_fdt_setprop(s->fdt, name, "snps,refclk_fladj", NULL, 0); | ||
129 | + qemu_fdt_setprop(s->fdt, name, "snps,mask_phy_reset", NULL, 0); | ||
130 | + qemu_fdt_setprop_cell(s->fdt, name, "phandle", s->phandle.dwc); | ||
131 | + qemu_fdt_setprop_string(s->fdt, name, "maximum-speed", "high-speed"); | ||
132 | + g_free(name); | ||
133 | +} | ||
134 | + | ||
135 | static void fdt_add_uart_nodes(VersalVirt *s) | ||
54 | { | 136 | { |
55 | return float_rel_to_flags(float16_compare_quiet(x, y, fp_status)); | 137 | uint64_t addrs[] = { MM_UART1, MM_UART0 }; |
56 | } | 138 | @@ -XXX,XX +XXX,XX @@ static void versal_virt_init(MachineState *machine) |
57 | 139 | fdt_add_gic_nodes(s); | |
58 | -uint64_t HELPER(vfp_cmpeh_a64)(float16 x, float16 y, void *fp_status) | 140 | fdt_add_timer_nodes(s); |
59 | +uint64_t HELPER(vfp_cmpeh_a64)(uint32_t x, uint32_t y, void *fp_status) | 141 | fdt_add_zdma_nodes(s); |
60 | { | 142 | + fdt_add_usb_xhci_nodes(s); |
61 | return float_rel_to_flags(float16_compare(x, y, fp_status)); | 143 | fdt_add_sd_nodes(s); |
62 | } | 144 | fdt_add_rtc_node(s); |
63 | @@ -XXX,XX +XXX,XX @@ uint64_t HELPER(neon_cgt_f64)(float64 a, float64 b, void *fpstp) | 145 | fdt_add_cpu_nodes(s, psci_conduit); |
64 | #define float64_three make_float64(0x4008000000000000ULL) | 146 | diff --git a/hw/arm/xlnx-versal.c b/hw/arm/xlnx-versal.c |
65 | #define float64_one_point_five make_float64(0x3FF8000000000000ULL) | ||
66 | |||
67 | -float16 HELPER(recpsf_f16)(float16 a, float16 b, void *fpstp) | ||
68 | +uint32_t HELPER(recpsf_f16)(uint32_t a, uint32_t b, void *fpstp) | ||
69 | { | ||
70 | float_status *fpst = fpstp; | ||
71 | |||
72 | @@ -XXX,XX +XXX,XX @@ float64 HELPER(recpsf_f64)(float64 a, float64 b, void *fpstp) | ||
73 | return float64_muladd(a, b, float64_two, 0, fpst); | ||
74 | } | ||
75 | |||
76 | -float16 HELPER(rsqrtsf_f16)(float16 a, float16 b, void *fpstp) | ||
77 | +uint32_t HELPER(rsqrtsf_f16)(uint32_t a, uint32_t b, void *fpstp) | ||
78 | { | ||
79 | float_status *fpst = fpstp; | ||
80 | |||
81 | @@ -XXX,XX +XXX,XX @@ uint64_t HELPER(neon_addlp_u16)(uint64_t a) | ||
82 | } | ||
83 | |||
84 | /* Floating-point reciprocal exponent - see FPRecpX in ARM ARM */ | ||
85 | -float16 HELPER(frecpx_f16)(float16 a, void *fpstp) | ||
86 | +uint32_t HELPER(frecpx_f16)(uint32_t a, void *fpstp) | ||
87 | { | ||
88 | float_status *fpst = fpstp; | ||
89 | uint16_t val16, sbit; | ||
90 | @@ -XXX,XX +XXX,XX @@ void HELPER(casp_be_parallel)(CPUARMState *env, uint32_t rs, uint64_t addr, | ||
91 | #define ADVSIMD_HELPER(name, suffix) HELPER(glue(glue(advsimd_, name), suffix)) | ||
92 | |||
93 | #define ADVSIMD_HALFOP(name) \ | ||
94 | -float16 ADVSIMD_HELPER(name, h)(float16 a, float16 b, void *fpstp) \ | ||
95 | +uint32_t ADVSIMD_HELPER(name, h)(uint32_t a, uint32_t b, void *fpstp) \ | ||
96 | { \ | ||
97 | float_status *fpst = fpstp; \ | ||
98 | return float16_ ## name(a, b, fpst); \ | ||
99 | @@ -XXX,XX +XXX,XX @@ ADVSIMD_HALFOP(mulx) | ||
100 | ADVSIMD_TWOHALFOP(mulx) | ||
101 | |||
102 | /* fused multiply-accumulate */ | ||
103 | -float16 HELPER(advsimd_muladdh)(float16 a, float16 b, float16 c, void *fpstp) | ||
104 | +uint32_t HELPER(advsimd_muladdh)(uint32_t a, uint32_t b, uint32_t c, | ||
105 | + void *fpstp) | ||
106 | { | ||
107 | float_status *fpst = fpstp; | ||
108 | return float16_muladd(a, b, c, 0, fpst); | ||
109 | @@ -XXX,XX +XXX,XX @@ uint32_t HELPER(advsimd_muladd2h)(uint32_t two_a, uint32_t two_b, | ||
110 | |||
111 | #define ADVSIMD_CMPRES(test) (test) ? 0xffff : 0 | ||
112 | |||
113 | -uint32_t HELPER(advsimd_ceq_f16)(float16 a, float16 b, void *fpstp) | ||
114 | +uint32_t HELPER(advsimd_ceq_f16)(uint32_t a, uint32_t b, void *fpstp) | ||
115 | { | ||
116 | float_status *fpst = fpstp; | ||
117 | int compare = float16_compare_quiet(a, b, fpst); | ||
118 | return ADVSIMD_CMPRES(compare == float_relation_equal); | ||
119 | } | ||
120 | |||
121 | -uint32_t HELPER(advsimd_cge_f16)(float16 a, float16 b, void *fpstp) | ||
122 | +uint32_t HELPER(advsimd_cge_f16)(uint32_t a, uint32_t b, void *fpstp) | ||
123 | { | ||
124 | float_status *fpst = fpstp; | ||
125 | int compare = float16_compare(a, b, fpst); | ||
126 | @@ -XXX,XX +XXX,XX @@ uint32_t HELPER(advsimd_cge_f16)(float16 a, float16 b, void *fpstp) | ||
127 | compare == float_relation_equal); | ||
128 | } | ||
129 | |||
130 | -uint32_t HELPER(advsimd_cgt_f16)(float16 a, float16 b, void *fpstp) | ||
131 | +uint32_t HELPER(advsimd_cgt_f16)(uint32_t a, uint32_t b, void *fpstp) | ||
132 | { | ||
133 | float_status *fpst = fpstp; | ||
134 | int compare = float16_compare(a, b, fpst); | ||
135 | return ADVSIMD_CMPRES(compare == float_relation_greater); | ||
136 | } | ||
137 | |||
138 | -uint32_t HELPER(advsimd_acge_f16)(float16 a, float16 b, void *fpstp) | ||
139 | +uint32_t HELPER(advsimd_acge_f16)(uint32_t a, uint32_t b, void *fpstp) | ||
140 | { | ||
141 | float_status *fpst = fpstp; | ||
142 | float16 f0 = float16_abs(a); | ||
143 | @@ -XXX,XX +XXX,XX @@ uint32_t HELPER(advsimd_acge_f16)(float16 a, float16 b, void *fpstp) | ||
144 | compare == float_relation_equal); | ||
145 | } | ||
146 | |||
147 | -uint32_t HELPER(advsimd_acgt_f16)(float16 a, float16 b, void *fpstp) | ||
148 | +uint32_t HELPER(advsimd_acgt_f16)(uint32_t a, uint32_t b, void *fpstp) | ||
149 | { | ||
150 | float_status *fpst = fpstp; | ||
151 | float16 f0 = float16_abs(a); | ||
152 | @@ -XXX,XX +XXX,XX @@ uint32_t HELPER(advsimd_acgt_f16)(float16 a, float16 b, void *fpstp) | ||
153 | } | ||
154 | |||
155 | /* round to integral */ | ||
156 | -float16 HELPER(advsimd_rinth_exact)(float16 x, void *fp_status) | ||
157 | +uint32_t HELPER(advsimd_rinth_exact)(uint32_t x, void *fp_status) | ||
158 | { | ||
159 | return float16_round_to_int(x, fp_status); | ||
160 | } | ||
161 | |||
162 | -float16 HELPER(advsimd_rinth)(float16 x, void *fp_status) | ||
163 | +uint32_t HELPER(advsimd_rinth)(uint32_t x, void *fp_status) | ||
164 | { | ||
165 | int old_flags = get_float_exception_flags(fp_status), new_flags; | ||
166 | float16 ret; | ||
167 | @@ -XXX,XX +XXX,XX @@ float16 HELPER(advsimd_rinth)(float16 x, void *fp_status) | ||
168 | * setting the mode appropriately before calling the helper. | ||
169 | */ | ||
170 | |||
171 | -uint32_t HELPER(advsimd_f16tosinth)(float16 a, void *fpstp) | ||
172 | +uint32_t HELPER(advsimd_f16tosinth)(uint32_t a, void *fpstp) | ||
173 | { | ||
174 | float_status *fpst = fpstp; | ||
175 | |||
176 | @@ -XXX,XX +XXX,XX @@ uint32_t HELPER(advsimd_f16tosinth)(float16 a, void *fpstp) | ||
177 | return float16_to_int16(a, fpst); | ||
178 | } | ||
179 | |||
180 | -uint32_t HELPER(advsimd_f16touinth)(float16 a, void *fpstp) | ||
181 | +uint32_t HELPER(advsimd_f16touinth)(uint32_t a, void *fpstp) | ||
182 | { | ||
183 | float_status *fpst = fpstp; | ||
184 | |||
185 | @@ -XXX,XX +XXX,XX @@ uint32_t HELPER(advsimd_f16touinth)(float16 a, void *fpstp) | ||
186 | * Square Root and Reciprocal square root | ||
187 | */ | ||
188 | |||
189 | -float16 HELPER(sqrt_f16)(float16 a, void *fpstp) | ||
190 | +uint32_t HELPER(sqrt_f16)(uint32_t a, void *fpstp) | ||
191 | { | ||
192 | float_status *s = fpstp; | ||
193 | |||
194 | diff --git a/target/arm/helper.c b/target/arm/helper.c | ||
195 | index XXXXXXX..XXXXXXX 100644 | 147 | index XXXXXXX..XXXXXXX 100644 |
196 | --- a/target/arm/helper.c | 148 | --- a/hw/arm/xlnx-versal.c |
197 | +++ b/target/arm/helper.c | 149 | +++ b/hw/arm/xlnx-versal.c |
198 | @@ -XXX,XX +XXX,XX @@ DO_VFP_cmp(d, float64) | 150 | @@ -XXX,XX +XXX,XX @@ static void versal_create_uarts(Versal *s, qemu_irq *pic) |
199 | |||
200 | /* Integer to float and float to integer conversions */ | ||
201 | |||
202 | -#define CONV_ITOF(name, fsz, sign) \ | ||
203 | - float##fsz HELPER(name)(uint32_t x, void *fpstp) \ | ||
204 | -{ \ | ||
205 | - float_status *fpst = fpstp; \ | ||
206 | - return sign##int32_to_##float##fsz((sign##int32_t)x, fpst); \ | ||
207 | +#define CONV_ITOF(name, ftype, fsz, sign) \ | ||
208 | +ftype HELPER(name)(uint32_t x, void *fpstp) \ | ||
209 | +{ \ | ||
210 | + float_status *fpst = fpstp; \ | ||
211 | + return sign##int32_to_##float##fsz((sign##int32_t)x, fpst); \ | ||
212 | } | ||
213 | |||
214 | -#define CONV_FTOI(name, fsz, sign, round) \ | ||
215 | -uint32_t HELPER(name)(float##fsz x, void *fpstp) \ | ||
216 | -{ \ | ||
217 | - float_status *fpst = fpstp; \ | ||
218 | - if (float##fsz##_is_any_nan(x)) { \ | ||
219 | - float_raise(float_flag_invalid, fpst); \ | ||
220 | - return 0; \ | ||
221 | - } \ | ||
222 | - return float##fsz##_to_##sign##int32##round(x, fpst); \ | ||
223 | +#define CONV_FTOI(name, ftype, fsz, sign, round) \ | ||
224 | +uint32_t HELPER(name)(ftype x, void *fpstp) \ | ||
225 | +{ \ | ||
226 | + float_status *fpst = fpstp; \ | ||
227 | + if (float##fsz##_is_any_nan(x)) { \ | ||
228 | + float_raise(float_flag_invalid, fpst); \ | ||
229 | + return 0; \ | ||
230 | + } \ | ||
231 | + return float##fsz##_to_##sign##int32##round(x, fpst); \ | ||
232 | } | ||
233 | |||
234 | -#define FLOAT_CONVS(name, p, fsz, sign) \ | ||
235 | -CONV_ITOF(vfp_##name##to##p, fsz, sign) \ | ||
236 | -CONV_FTOI(vfp_to##name##p, fsz, sign, ) \ | ||
237 | -CONV_FTOI(vfp_to##name##z##p, fsz, sign, _round_to_zero) | ||
238 | +#define FLOAT_CONVS(name, p, ftype, fsz, sign) \ | ||
239 | + CONV_ITOF(vfp_##name##to##p, ftype, fsz, sign) \ | ||
240 | + CONV_FTOI(vfp_to##name##p, ftype, fsz, sign, ) \ | ||
241 | + CONV_FTOI(vfp_to##name##z##p, ftype, fsz, sign, _round_to_zero) | ||
242 | |||
243 | -FLOAT_CONVS(si, h, 16, ) | ||
244 | -FLOAT_CONVS(si, s, 32, ) | ||
245 | -FLOAT_CONVS(si, d, 64, ) | ||
246 | -FLOAT_CONVS(ui, h, 16, u) | ||
247 | -FLOAT_CONVS(ui, s, 32, u) | ||
248 | -FLOAT_CONVS(ui, d, 64, u) | ||
249 | +FLOAT_CONVS(si, h, uint32_t, 16, ) | ||
250 | +FLOAT_CONVS(si, s, float32, 32, ) | ||
251 | +FLOAT_CONVS(si, d, float64, 64, ) | ||
252 | +FLOAT_CONVS(ui, h, uint32_t, 16, u) | ||
253 | +FLOAT_CONVS(ui, s, float32, 32, u) | ||
254 | +FLOAT_CONVS(ui, d, float64, 64, u) | ||
255 | |||
256 | #undef CONV_ITOF | ||
257 | #undef CONV_FTOI | ||
258 | @@ -XXX,XX +XXX,XX @@ static float16 do_postscale_fp16(float64 f, int shift, float_status *fpst) | ||
259 | return float64_to_float16(float64_scalbn(f, -shift, fpst), true, fpst); | ||
260 | } | ||
261 | |||
262 | -float16 HELPER(vfp_sltoh)(uint32_t x, uint32_t shift, void *fpst) | ||
263 | +uint32_t HELPER(vfp_sltoh)(uint32_t x, uint32_t shift, void *fpst) | ||
264 | { | ||
265 | return do_postscale_fp16(int32_to_float64(x, fpst), shift, fpst); | ||
266 | } | ||
267 | |||
268 | -float16 HELPER(vfp_ultoh)(uint32_t x, uint32_t shift, void *fpst) | ||
269 | +uint32_t HELPER(vfp_ultoh)(uint32_t x, uint32_t shift, void *fpst) | ||
270 | { | ||
271 | return do_postscale_fp16(uint32_to_float64(x, fpst), shift, fpst); | ||
272 | } | ||
273 | |||
274 | -float16 HELPER(vfp_sqtoh)(uint64_t x, uint32_t shift, void *fpst) | ||
275 | +uint32_t HELPER(vfp_sqtoh)(uint64_t x, uint32_t shift, void *fpst) | ||
276 | { | ||
277 | return do_postscale_fp16(int64_to_float64(x, fpst), shift, fpst); | ||
278 | } | ||
279 | |||
280 | -float16 HELPER(vfp_uqtoh)(uint64_t x, uint32_t shift, void *fpst) | ||
281 | +uint32_t HELPER(vfp_uqtoh)(uint64_t x, uint32_t shift, void *fpst) | ||
282 | { | ||
283 | return do_postscale_fp16(uint64_to_float64(x, fpst), shift, fpst); | ||
284 | } | ||
285 | @@ -XXX,XX +XXX,XX @@ static float64 do_prescale_fp16(float16 f, int shift, float_status *fpst) | ||
286 | } | 151 | } |
287 | } | 152 | } |
288 | 153 | ||
289 | -uint32_t HELPER(vfp_toshh)(float16 x, uint32_t shift, void *fpst) | 154 | +static void versal_create_usbs(Versal *s, qemu_irq *pic) |
290 | +uint32_t HELPER(vfp_toshh)(uint32_t x, uint32_t shift, void *fpst) | 155 | +{ |
156 | + DeviceState *dev; | ||
157 | + MemoryRegion *mr; | ||
158 | + | ||
159 | + object_initialize_child(OBJECT(s), "usb2", &s->lpd.iou.usb, | ||
160 | + TYPE_XILINX_VERSAL_USB2); | ||
161 | + dev = DEVICE(&s->lpd.iou.usb); | ||
162 | + | ||
163 | + object_property_set_link(OBJECT(dev), "dma", OBJECT(&s->mr_ps), | ||
164 | + &error_abort); | ||
165 | + qdev_prop_set_uint32(dev, "intrs", 1); | ||
166 | + qdev_prop_set_uint32(dev, "slots", 2); | ||
167 | + | ||
168 | + sysbus_realize(SYS_BUS_DEVICE(dev), &error_fatal); | ||
169 | + | ||
170 | + mr = sysbus_mmio_get_region(SYS_BUS_DEVICE(dev), 0); | ||
171 | + memory_region_add_subregion(&s->mr_ps, MM_USB_0, mr); | ||
172 | + | ||
173 | + sysbus_connect_irq(SYS_BUS_DEVICE(dev), 0, pic[VERSAL_USB0_IRQ_0]); | ||
174 | + | ||
175 | + mr = sysbus_mmio_get_region(SYS_BUS_DEVICE(dev), 1); | ||
176 | + memory_region_add_subregion(&s->mr_ps, MM_USB2_CTRL_REGS, mr); | ||
177 | +} | ||
178 | + | ||
179 | static void versal_create_gems(Versal *s, qemu_irq *pic) | ||
291 | { | 180 | { |
292 | return float64_to_int16(do_prescale_fp16(x, shift, fpst), fpst); | 181 | int i; |
293 | } | 182 | @@ -XXX,XX +XXX,XX @@ static void versal_realize(DeviceState *dev, Error **errp) |
294 | 183 | versal_create_apu_cpus(s); | |
295 | -uint32_t HELPER(vfp_touhh)(float16 x, uint32_t shift, void *fpst) | 184 | versal_create_apu_gic(s, pic); |
296 | +uint32_t HELPER(vfp_touhh)(uint32_t x, uint32_t shift, void *fpst) | 185 | versal_create_uarts(s, pic); |
297 | { | 186 | + versal_create_usbs(s, pic); |
298 | return float64_to_uint16(do_prescale_fp16(x, shift, fpst), fpst); | 187 | versal_create_gems(s, pic); |
299 | } | 188 | versal_create_admas(s, pic); |
300 | 189 | versal_create_sds(s, pic); | |
301 | -uint32_t HELPER(vfp_toslh)(float16 x, uint32_t shift, void *fpst) | ||
302 | +uint32_t HELPER(vfp_toslh)(uint32_t x, uint32_t shift, void *fpst) | ||
303 | { | ||
304 | return float64_to_int32(do_prescale_fp16(x, shift, fpst), fpst); | ||
305 | } | ||
306 | |||
307 | -uint32_t HELPER(vfp_toulh)(float16 x, uint32_t shift, void *fpst) | ||
308 | +uint32_t HELPER(vfp_toulh)(uint32_t x, uint32_t shift, void *fpst) | ||
309 | { | ||
310 | return float64_to_uint32(do_prescale_fp16(x, shift, fpst), fpst); | ||
311 | } | ||
312 | |||
313 | -uint64_t HELPER(vfp_tosqh)(float16 x, uint32_t shift, void *fpst) | ||
314 | +uint64_t HELPER(vfp_tosqh)(uint32_t x, uint32_t shift, void *fpst) | ||
315 | { | ||
316 | return float64_to_int64(do_prescale_fp16(x, shift, fpst), fpst); | ||
317 | } | ||
318 | |||
319 | -uint64_t HELPER(vfp_touqh)(float16 x, uint32_t shift, void *fpst) | ||
320 | +uint64_t HELPER(vfp_touqh)(uint32_t x, uint32_t shift, void *fpst) | ||
321 | { | ||
322 | return float64_to_uint64(do_prescale_fp16(x, shift, fpst), fpst); | ||
323 | } | ||
324 | @@ -XXX,XX +XXX,XX @@ uint32_t HELPER(set_neon_rmode)(uint32_t rmode, CPUARMState *env) | ||
325 | } | ||
326 | |||
327 | /* Half precision conversions. */ | ||
328 | -float32 HELPER(vfp_fcvt_f16_to_f32)(float16 a, void *fpstp, uint32_t ahp_mode) | ||
329 | +float32 HELPER(vfp_fcvt_f16_to_f32)(uint32_t a, void *fpstp, uint32_t ahp_mode) | ||
330 | { | ||
331 | /* Squash FZ16 to 0 for the duration of conversion. In this case, | ||
332 | * it would affect flushing input denormals. | ||
333 | @@ -XXX,XX +XXX,XX @@ float32 HELPER(vfp_fcvt_f16_to_f32)(float16 a, void *fpstp, uint32_t ahp_mode) | ||
334 | return r; | ||
335 | } | ||
336 | |||
337 | -float16 HELPER(vfp_fcvt_f32_to_f16)(float32 a, void *fpstp, uint32_t ahp_mode) | ||
338 | +uint32_t HELPER(vfp_fcvt_f32_to_f16)(float32 a, void *fpstp, uint32_t ahp_mode) | ||
339 | { | ||
340 | /* Squash FZ16 to 0 for the duration of conversion. In this case, | ||
341 | * it would affect flushing output denormals. | ||
342 | @@ -XXX,XX +XXX,XX @@ float16 HELPER(vfp_fcvt_f32_to_f16)(float32 a, void *fpstp, uint32_t ahp_mode) | ||
343 | return r; | ||
344 | } | ||
345 | |||
346 | -float64 HELPER(vfp_fcvt_f16_to_f64)(float16 a, void *fpstp, uint32_t ahp_mode) | ||
347 | +float64 HELPER(vfp_fcvt_f16_to_f64)(uint32_t a, void *fpstp, uint32_t ahp_mode) | ||
348 | { | ||
349 | /* Squash FZ16 to 0 for the duration of conversion. In this case, | ||
350 | * it would affect flushing input denormals. | ||
351 | @@ -XXX,XX +XXX,XX @@ float64 HELPER(vfp_fcvt_f16_to_f64)(float16 a, void *fpstp, uint32_t ahp_mode) | ||
352 | return r; | ||
353 | } | ||
354 | |||
355 | -float16 HELPER(vfp_fcvt_f64_to_f16)(float64 a, void *fpstp, uint32_t ahp_mode) | ||
356 | +uint32_t HELPER(vfp_fcvt_f64_to_f16)(float64 a, void *fpstp, uint32_t ahp_mode) | ||
357 | { | ||
358 | /* Squash FZ16 to 0 for the duration of conversion. In this case, | ||
359 | * it would affect flushing output denormals. | ||
360 | @@ -XXX,XX +XXX,XX @@ static bool round_to_inf(float_status *fpst, bool sign_bit) | ||
361 | g_assert_not_reached(); | ||
362 | } | ||
363 | |||
364 | -float16 HELPER(recpe_f16)(float16 input, void *fpstp) | ||
365 | +uint32_t HELPER(recpe_f16)(uint32_t input, void *fpstp) | ||
366 | { | ||
367 | float_status *fpst = fpstp; | ||
368 | float16 f16 = float16_squash_input_denormal(input, fpst); | ||
369 | @@ -XXX,XX +XXX,XX @@ static uint64_t recip_sqrt_estimate(int *exp , int exp_off, uint64_t frac) | ||
370 | return extract64(estimate, 0, 8) << 44; | ||
371 | } | ||
372 | |||
373 | -float16 HELPER(rsqrte_f16)(float16 input, void *fpstp) | ||
374 | +uint32_t HELPER(rsqrte_f16)(uint32_t input, void *fpstp) | ||
375 | { | ||
376 | float_status *s = fpstp; | ||
377 | float16 f16 = float16_squash_input_denormal(input, s); | ||
378 | -- | 190 | -- |
379 | 2.17.1 | 191 | 2.20.1 |
380 | 192 | ||
381 | 193 | diff view generated by jsdifflib |
1 | From: Shannon Zhao <zhaoshenglong@huawei.com> | 1 | From: Philippe Mathieu-Daudé <f4bug@amsat.org> |
---|---|---|---|
2 | 2 | ||
3 | acpi_data_push uses g_array_set_size to resize the memory size. If there | 3 | Malicious user can set the feedback divisor for the PLLs |
4 | is no enough contiguous memory, the address will be changed. So previous | 4 | to zero, triggering a floating-point exception (SIGFPE). |
5 | pointer could not be used any more. It must update the pointer and use | ||
6 | the new one. | ||
7 | 5 | ||
8 | Also, previous codes wrongly use le32 conversion of iort->node_offset | 6 | As the datasheet [*] is not clear how hardware behaves |
9 | for subsequent computations that will result incorrect value if host is | 7 | when these bits are zeroes, use the maximum divisor |
10 | not litlle endian. So use the non-converted one instead. | 8 | possible (128) to avoid the software FPE. |
11 | 9 | ||
12 | Signed-off-by: Shannon Zhao <zhaoshenglong@huawei.com> | 10 | [*] Zynq-7000 TRM, UG585 (v1.12.2) |
13 | Reviewed-by: Eric Auger <eric.auger@redhat.com> | 11 | B.28 System Level Control Registers (slcr) |
14 | Message-id: 1527663951-14552-1-git-send-email-zhaoshenglong@huawei.com | 12 | -> "Register (slcr) ARM_PLL_CTRL" |
13 | 25.10.4 PLLs | ||
14 | -> "Software-Controlled PLL Update" | ||
15 | |||
16 | Fixes: 38867cb7ec9 ("hw/misc/zynq_slcr: add clock generation for uarts") | ||
17 | Reported-by: Gaoning Pan <pgn@zju.edu.cn> | ||
18 | Signed-off-by: Philippe Mathieu-Daudé <f4bug@amsat.org> | ||
19 | Reviewed-by: Alistair Francis <alistair.francis@wdc.com> | ||
20 | Reviewed-by: Edgar E. Iglesias <edgar.iglesias@xilinx.com> | ||
21 | Reviewed-by: Damien Hedde <damien.hedde@greensocs.com> | ||
22 | Message-id: 20201210141610.884600-1-f4bug@amsat.org | ||
15 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 23 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
16 | --- | 24 | --- |
17 | hw/arm/virt-acpi-build.c | 20 +++++++++++++++----- | 25 | hw/misc/zynq_slcr.c | 5 +++++ |
18 | 1 file changed, 15 insertions(+), 5 deletions(-) | 26 | 1 file changed, 5 insertions(+) |
19 | 27 | ||
20 | diff --git a/hw/arm/virt-acpi-build.c b/hw/arm/virt-acpi-build.c | 28 | diff --git a/hw/misc/zynq_slcr.c b/hw/misc/zynq_slcr.c |
21 | index XXXXXXX..XXXXXXX 100644 | 29 | index XXXXXXX..XXXXXXX 100644 |
22 | --- a/hw/arm/virt-acpi-build.c | 30 | --- a/hw/misc/zynq_slcr.c |
23 | +++ b/hw/arm/virt-acpi-build.c | 31 | +++ b/hw/misc/zynq_slcr.c |
24 | @@ -XXX,XX +XXX,XX @@ build_iort(GArray *table_data, BIOSLinker *linker, VirtMachineState *vms) | 32 | @@ -XXX,XX +XXX,XX @@ static uint64_t zynq_slcr_compute_pll(uint64_t input, uint32_t ctrl_reg) |
25 | AcpiIortItsGroup *its; | 33 | return 0; |
26 | AcpiIortTable *iort; | ||
27 | AcpiIortSmmu3 *smmu; | ||
28 | - size_t node_size, iort_length, smmu_offset = 0; | ||
29 | + size_t node_size, iort_node_offset, iort_length, smmu_offset = 0; | ||
30 | AcpiIortRC *rc; | ||
31 | |||
32 | iort = acpi_data_push(table_data, sizeof(*iort)); | ||
33 | @@ -XXX,XX +XXX,XX @@ build_iort(GArray *table_data, BIOSLinker *linker, VirtMachineState *vms) | ||
34 | |||
35 | iort_length = sizeof(*iort); | ||
36 | iort->node_count = cpu_to_le32(nb_nodes); | ||
37 | - iort->node_offset = cpu_to_le32(sizeof(*iort)); | ||
38 | + /* | ||
39 | + * Use a copy in case table_data->data moves during acpi_data_push | ||
40 | + * operations. | ||
41 | + */ | ||
42 | + iort_node_offset = sizeof(*iort); | ||
43 | + iort->node_offset = cpu_to_le32(iort_node_offset); | ||
44 | |||
45 | /* ITS group node */ | ||
46 | node_size = sizeof(*its) + sizeof(uint32_t); | ||
47 | @@ -XXX,XX +XXX,XX @@ build_iort(GArray *table_data, BIOSLinker *linker, VirtMachineState *vms) | ||
48 | int irq = vms->irqmap[VIRT_SMMU]; | ||
49 | |||
50 | /* SMMUv3 node */ | ||
51 | - smmu_offset = iort->node_offset + node_size; | ||
52 | + smmu_offset = iort_node_offset + node_size; | ||
53 | node_size = sizeof(*smmu) + sizeof(*idmap); | ||
54 | iort_length += node_size; | ||
55 | smmu = acpi_data_push(table_data, node_size); | ||
56 | @@ -XXX,XX +XXX,XX @@ build_iort(GArray *table_data, BIOSLinker *linker, VirtMachineState *vms) | ||
57 | idmap->id_count = cpu_to_le32(0xFFFF); | ||
58 | idmap->output_base = 0; | ||
59 | /* output IORT node is the ITS group node (the first node) */ | ||
60 | - idmap->output_reference = cpu_to_le32(iort->node_offset); | ||
61 | + idmap->output_reference = cpu_to_le32(iort_node_offset); | ||
62 | } | 34 | } |
63 | 35 | ||
64 | /* Root Complex Node */ | 36 | + /* Consider zero feedback as maximum divide ratio possible */ |
65 | @@ -XXX,XX +XXX,XX @@ build_iort(GArray *table_data, BIOSLinker *linker, VirtMachineState *vms) | 37 | + if (!mult) { |
66 | idmap->output_reference = cpu_to_le32(smmu_offset); | 38 | + mult = 1 << R_xxx_PLL_CTRL_PLL_FPDIV_LENGTH; |
67 | } else { | 39 | + } |
68 | /* output IORT node is the ITS group node (the first node) */ | 40 | + |
69 | - idmap->output_reference = cpu_to_le32(iort->node_offset); | 41 | /* frequency multiplier -> period division */ |
70 | + idmap->output_reference = cpu_to_le32(iort_node_offset); | 42 | return input / mult; |
71 | } | 43 | } |
72 | |||
73 | + /* | ||
74 | + * Update the pointer address in case table_data->data moves during above | ||
75 | + * acpi_data_push operations. | ||
76 | + */ | ||
77 | + iort = (AcpiIortTable *)(table_data->data + iort_start); | ||
78 | iort->length = cpu_to_le32(iort_length); | ||
79 | |||
80 | build_header(linker, table_data, (void *)(table_data->data + iort_start), | ||
81 | -- | 44 | -- |
82 | 2.17.1 | 45 | 2.20.1 |
83 | 46 | ||
84 | 47 | diff view generated by jsdifflib |
1 | From: Jan Kiszka <jan.kiszka@siemens.com> | 1 | From: Joe Komlodi <joe.komlodi@xilinx.com> |
---|---|---|---|
2 | 2 | ||
3 | There was a nasty flip in identifying which register group an access is | 3 | The previous naming of the configuration registers made it sound like that if |
4 | targeting. The issue caused spuriously raised priorities of the guest | 4 | the bits were set the settings would be enabled, while the opposite is true. |
5 | when handing CPUs over in the Jailhouse hypervisor. | ||
6 | 5 | ||
7 | Cc: qemu-stable@nongnu.org | 6 | Signed-off-by: Joe Komlodi <komlodi@xilinx.com> |
8 | Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com> | 7 | Reviewed-by: Francisco Iglesias <francisco.iglesias@xilinx.com> |
9 | Message-id: 28b927d3-da58-bce4-cc13-bfec7f9b1cb9@siemens.com | 8 | Message-id: 1605568264-26376-2-git-send-email-komlodi@xilinx.com |
10 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
11 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
12 | --- | 10 | --- |
13 | hw/intc/arm_gicv3_cpuif.c | 12 ++++++------ | 11 | hw/block/m25p80.c | 12 ++++++------ |
14 | 1 file changed, 6 insertions(+), 6 deletions(-) | 12 | 1 file changed, 6 insertions(+), 6 deletions(-) |
15 | 13 | ||
16 | diff --git a/hw/intc/arm_gicv3_cpuif.c b/hw/intc/arm_gicv3_cpuif.c | 14 | diff --git a/hw/block/m25p80.c b/hw/block/m25p80.c |
17 | index XXXXXXX..XXXXXXX 100644 | 15 | index XXXXXXX..XXXXXXX 100644 |
18 | --- a/hw/intc/arm_gicv3_cpuif.c | 16 | --- a/hw/block/m25p80.c |
19 | +++ b/hw/intc/arm_gicv3_cpuif.c | 17 | +++ b/hw/block/m25p80.c |
20 | @@ -XXX,XX +XXX,XX @@ static uint64_t icv_ap_read(CPUARMState *env, const ARMCPRegInfo *ri) | 18 | @@ -XXX,XX +XXX,XX @@ typedef struct FlashPartInfo { |
21 | { | 19 | #define VCFG_WRAP_SEQUENTIAL 0x2 |
22 | GICv3CPUState *cs = icc_cs_from_env(env); | 20 | #define NVCFG_XIP_MODE_DISABLED (7 << 9) |
23 | int regno = ri->opc2 & 3; | 21 | #define NVCFG_XIP_MODE_MASK (7 << 9) |
24 | - int grp = ri->crm & 1 ? GICV3_G0 : GICV3_G1NS; | 22 | -#define VCFG_XIP_MODE_ENABLED (1 << 3) |
25 | + int grp = (ri->crm & 1) ? GICV3_G1NS : GICV3_G0; | 23 | +#define VCFG_XIP_MODE_DISABLED (1 << 3) |
26 | uint64_t value = cs->ich_apr[grp][regno]; | 24 | #define CFG_DUMMY_CLK_LEN 4 |
27 | 25 | #define NVCFG_DUMMY_CLK_POS 12 | |
28 | trace_gicv3_icv_ap_read(ri->crm & 1, regno, gicv3_redist_affid(cs), value); | 26 | #define VCFG_DUMMY_CLK_POS 4 |
29 | @@ -XXX,XX +XXX,XX @@ static void icv_ap_write(CPUARMState *env, const ARMCPRegInfo *ri, | 27 | @@ -XXX,XX +XXX,XX @@ typedef struct FlashPartInfo { |
30 | { | 28 | #define EVCFG_VPP_ACCELERATOR (1 << 3) |
31 | GICv3CPUState *cs = icc_cs_from_env(env); | 29 | #define EVCFG_RESET_HOLD_ENABLED (1 << 4) |
32 | int regno = ri->opc2 & 3; | 30 | #define NVCFG_DUAL_IO_MASK (1 << 2) |
33 | - int grp = ri->crm & 1 ? GICV3_G0 : GICV3_G1NS; | 31 | -#define EVCFG_DUAL_IO_ENABLED (1 << 6) |
34 | + int grp = (ri->crm & 1) ? GICV3_G1NS : GICV3_G0; | 32 | +#define EVCFG_DUAL_IO_DISABLED (1 << 6) |
35 | 33 | #define NVCFG_QUAD_IO_MASK (1 << 3) | |
36 | trace_gicv3_icv_ap_write(ri->crm & 1, regno, gicv3_redist_affid(cs), value); | 34 | -#define EVCFG_QUAD_IO_ENABLED (1 << 7) |
37 | 35 | +#define EVCFG_QUAD_IO_DISABLED (1 << 7) | |
38 | @@ -XXX,XX +XXX,XX @@ static uint64_t icc_ap_read(CPUARMState *env, const ARMCPRegInfo *ri) | 36 | #define NVCFG_4BYTE_ADDR_MASK (1 << 0) |
39 | uint64_t value; | 37 | #define NVCFG_LOWER_SEGMENT_MASK (1 << 1) |
40 | 38 | ||
41 | int regno = ri->opc2 & 3; | 39 | @@ -XXX,XX +XXX,XX @@ static void reset_memory(Flash *s) |
42 | - int grp = ri->crm & 1 ? GICV3_G0 : GICV3_G1; | 40 | s->volatile_cfg |= VCFG_WRAP_SEQUENTIAL; |
43 | + int grp = (ri->crm & 1) ? GICV3_G1 : GICV3_G0; | 41 | if ((s->nonvolatile_cfg & NVCFG_XIP_MODE_MASK) |
44 | 42 | != NVCFG_XIP_MODE_DISABLED) { | |
45 | if (icv_access(env, grp == GICV3_G0 ? HCR_FMO : HCR_IMO)) { | 43 | - s->volatile_cfg |= VCFG_XIP_MODE_ENABLED; |
46 | return icv_ap_read(env, ri); | 44 | + s->volatile_cfg |= VCFG_XIP_MODE_DISABLED; |
47 | @@ -XXX,XX +XXX,XX @@ static void icc_ap_write(CPUARMState *env, const ARMCPRegInfo *ri, | 45 | } |
48 | GICv3CPUState *cs = icc_cs_from_env(env); | 46 | s->volatile_cfg |= deposit32(s->volatile_cfg, |
49 | 47 | VCFG_DUMMY_CLK_POS, | |
50 | int regno = ri->opc2 & 3; | 48 | @@ -XXX,XX +XXX,XX @@ static void reset_memory(Flash *s) |
51 | - int grp = ri->crm & 1 ? GICV3_G0 : GICV3_G1; | 49 | s->enh_volatile_cfg |= EVCFG_VPP_ACCELERATOR; |
52 | + int grp = (ri->crm & 1) ? GICV3_G1 : GICV3_G0; | 50 | s->enh_volatile_cfg |= EVCFG_RESET_HOLD_ENABLED; |
53 | 51 | if (s->nonvolatile_cfg & NVCFG_DUAL_IO_MASK) { | |
54 | if (icv_access(env, grp == GICV3_G0 ? HCR_FMO : HCR_IMO)) { | 52 | - s->enh_volatile_cfg |= EVCFG_DUAL_IO_ENABLED; |
55 | icv_ap_write(env, ri, value); | 53 | + s->enh_volatile_cfg |= EVCFG_DUAL_IO_DISABLED; |
56 | @@ -XXX,XX +XXX,XX @@ static uint64_t ich_ap_read(CPUARMState *env, const ARMCPRegInfo *ri) | 54 | } |
57 | { | 55 | if (s->nonvolatile_cfg & NVCFG_QUAD_IO_MASK) { |
58 | GICv3CPUState *cs = icc_cs_from_env(env); | 56 | - s->enh_volatile_cfg |= EVCFG_QUAD_IO_ENABLED; |
59 | int regno = ri->opc2 & 3; | 57 | + s->enh_volatile_cfg |= EVCFG_QUAD_IO_DISABLED; |
60 | - int grp = ri->crm & 1 ? GICV3_G0 : GICV3_G1NS; | 58 | } |
61 | + int grp = (ri->crm & 1) ? GICV3_G1NS : GICV3_G0; | 59 | if (!(s->nonvolatile_cfg & NVCFG_4BYTE_ADDR_MASK)) { |
62 | uint64_t value; | 60 | s->four_bytes_address_mode = true; |
63 | |||
64 | value = cs->ich_apr[grp][regno]; | ||
65 | @@ -XXX,XX +XXX,XX @@ static void ich_ap_write(CPUARMState *env, const ARMCPRegInfo *ri, | ||
66 | { | ||
67 | GICv3CPUState *cs = icc_cs_from_env(env); | ||
68 | int regno = ri->opc2 & 3; | ||
69 | - int grp = ri->crm & 1 ? GICV3_G0 : GICV3_G1NS; | ||
70 | + int grp = (ri->crm & 1) ? GICV3_G1NS : GICV3_G0; | ||
71 | |||
72 | trace_gicv3_ich_ap_write(ri->crm & 1, regno, gicv3_redist_affid(cs), value); | ||
73 | |||
74 | -- | 61 | -- |
75 | 2.17.1 | 62 | 2.20.1 |
76 | 63 | ||
77 | 64 | diff view generated by jsdifflib |
1 | From: Francisco Iglesias <frasse.iglesias@gmail.com> | 1 | From: Joe Komlodi <joe.komlodi@xilinx.com> |
---|---|---|---|
2 | 2 | ||
3 | Coverity found that the string return by 'object_get_canonical_path' was not | 3 | VCFG XIP is set (disabled) when the NVCFG XIP bits are all set (disabled). |
4 | being freed at two locations in the model (CID 1391294 and CID 1391293) and | ||
5 | also that a memset was being called with a value greater than the max of a byte | ||
6 | on the second argument (CID 1391286). This patch corrects this by adding the | ||
7 | freeing of the strings and also changing to memset to zero instead on | ||
8 | descriptor unaligned errors. | ||
9 | 4 | ||
10 | Signed-off-by: Francisco Iglesias <frasse.iglesias@gmail.com> | 5 | Signed-off-by: Joe Komlodi <komlodi@xilinx.com> |
11 | Reviewed-by: Edgar E. Iglesias <edgar.iglesias@xilinx.com> | 6 | Reviewed-by: Francisco Iglesias <francisco.iglesias@xilinx.com> |
12 | Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org> | 7 | Message-id: 1605568264-26376-3-git-send-email-komlodi@xilinx.com |
13 | Message-id: 20180528184859.3530-1-frasse.iglesias@gmail.com | ||
14 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
15 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 8 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
16 | --- | 9 | --- |
17 | hw/dma/xlnx-zdma.c | 10 +++++++--- | 10 | hw/block/m25p80.c | 2 +- |
18 | 1 file changed, 7 insertions(+), 3 deletions(-) | 11 | 1 file changed, 1 insertion(+), 1 deletion(-) |
19 | 12 | ||
20 | diff --git a/hw/dma/xlnx-zdma.c b/hw/dma/xlnx-zdma.c | 13 | diff --git a/hw/block/m25p80.c b/hw/block/m25p80.c |
21 | index XXXXXXX..XXXXXXX 100644 | 14 | index XXXXXXX..XXXXXXX 100644 |
22 | --- a/hw/dma/xlnx-zdma.c | 15 | --- a/hw/block/m25p80.c |
23 | +++ b/hw/dma/xlnx-zdma.c | 16 | +++ b/hw/block/m25p80.c |
24 | @@ -XXX,XX +XXX,XX @@ static bool zdma_load_descriptor(XlnxZDMA *s, uint64_t addr, void *buf) | 17 | @@ -XXX,XX +XXX,XX @@ static void reset_memory(Flash *s) |
25 | qemu_log_mask(LOG_GUEST_ERROR, | 18 | s->volatile_cfg |= VCFG_DUMMY; |
26 | "zdma: unaligned descriptor at %" PRIx64, | 19 | s->volatile_cfg |= VCFG_WRAP_SEQUENTIAL; |
27 | addr); | 20 | if ((s->nonvolatile_cfg & NVCFG_XIP_MODE_MASK) |
28 | - memset(buf, 0xdeadbeef, sizeof(XlnxZDMADescr)); | 21 | - != NVCFG_XIP_MODE_DISABLED) { |
29 | + memset(buf, 0x0, sizeof(XlnxZDMADescr)); | 22 | + == NVCFG_XIP_MODE_DISABLED) { |
30 | s->error = true; | 23 | s->volatile_cfg |= VCFG_XIP_MODE_DISABLED; |
31 | return false; | 24 | } |
32 | } | 25 | s->volatile_cfg |= deposit32(s->volatile_cfg, |
33 | @@ -XXX,XX +XXX,XX @@ static uint64_t zdma_read(void *opaque, hwaddr addr, unsigned size) | ||
34 | RegisterInfo *r = &s->regs_info[addr / 4]; | ||
35 | |||
36 | if (!r->data) { | ||
37 | + gchar *path = object_get_canonical_path(OBJECT(s)); | ||
38 | qemu_log("%s: Decode error: read from %" HWADDR_PRIx "\n", | ||
39 | - object_get_canonical_path(OBJECT(s)), | ||
40 | + path, | ||
41 | addr); | ||
42 | + g_free(path); | ||
43 | ARRAY_FIELD_DP32(s->regs, ZDMA_CH_ISR, INV_APB, true); | ||
44 | zdma_ch_imr_update_irq(s); | ||
45 | return 0; | ||
46 | @@ -XXX,XX +XXX,XX @@ static void zdma_write(void *opaque, hwaddr addr, uint64_t value, | ||
47 | RegisterInfo *r = &s->regs_info[addr / 4]; | ||
48 | |||
49 | if (!r->data) { | ||
50 | + gchar *path = object_get_canonical_path(OBJECT(s)); | ||
51 | qemu_log("%s: Decode error: write to %" HWADDR_PRIx "=%" PRIx64 "\n", | ||
52 | - object_get_canonical_path(OBJECT(s)), | ||
53 | + path, | ||
54 | addr, value); | ||
55 | + g_free(path); | ||
56 | ARRAY_FIELD_DP32(s->regs, ZDMA_CH_ISR, INV_APB, true); | ||
57 | zdma_ch_imr_update_irq(s); | ||
58 | return; | ||
59 | -- | 26 | -- |
60 | 2.17.1 | 27 | 2.20.1 |
61 | 28 | ||
62 | 29 | diff view generated by jsdifflib |
1 | In commit f0aff255700 we made cpacr_write() enforce that some CPACR | 1 | From: Joe Komlodi <joe.komlodi@xilinx.com> |
---|---|---|---|
2 | bits are RAZ/WI and some are RAO/WI for ARMv7 cores. Unfortunately | ||
3 | we forgot to also update the register's reset value. The effect | ||
4 | was that (a) a guest that read CPACR on reset would not see ones in | ||
5 | the RAO bits, and (b) if you did a migration before the guest did | ||
6 | a write to the CPACR then the migration would fail because the | ||
7 | destination would enforce the RAO bits and then complain that they | ||
8 | didn't match the zero value from the source. | ||
9 | 2 | ||
10 | Implement reset for the CPACR using a custom reset function | 3 | Some Numonyx flash commands cannot be executed in DIO and QIO mode, such as |
11 | that just calls cpacr_write(), to avoid having to duplicate | 4 | trying to do DPP or DOR when in QIO mode. |
12 | the logic for which bits are RAO. | ||
13 | 5 | ||
14 | This bug would affect migration for TCG CPUs which are ARMv7 | 6 | Signed-off-by: Joe Komlodi <komlodi@xilinx.com> |
15 | with VFP but without one of Neon or VFPv3. | 7 | Reviewed-by: Francisco Iglesias <francisco.iglesias@xilinx.com> |
8 | Message-id: 1605568264-26376-4-git-send-email-komlodi@xilinx.com | ||
9 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
10 | --- | ||
11 | hw/block/m25p80.c | 114 ++++++++++++++++++++++++++++++++++++++-------- | ||
12 | 1 file changed, 95 insertions(+), 19 deletions(-) | ||
16 | 13 | ||
17 | Reported-by: Cédric Le Goater <clg@kaod.org> | 14 | diff --git a/hw/block/m25p80.c b/hw/block/m25p80.c |
18 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
19 | Tested-by: Cédric Le Goater <clg@kaod.org> | ||
20 | Message-id: 20180522173713.26282-1-peter.maydell@linaro.org | ||
21 | --- | ||
22 | target/arm/helper.c | 10 +++++++++- | ||
23 | 1 file changed, 9 insertions(+), 1 deletion(-) | ||
24 | |||
25 | diff --git a/target/arm/helper.c b/target/arm/helper.c | ||
26 | index XXXXXXX..XXXXXXX 100644 | 15 | index XXXXXXX..XXXXXXX 100644 |
27 | --- a/target/arm/helper.c | 16 | --- a/hw/block/m25p80.c |
28 | +++ b/target/arm/helper.c | 17 | +++ b/hw/block/m25p80.c |
29 | @@ -XXX,XX +XXX,XX @@ static void cpacr_write(CPUARMState *env, const ARMCPRegInfo *ri, | 18 | @@ -XXX,XX +XXX,XX @@ typedef enum { |
30 | env->cp15.cpacr_el1 = value; | 19 | MAN_GENERIC, |
20 | } Manufacturer; | ||
21 | |||
22 | +typedef enum { | ||
23 | + MODE_STD = 0, | ||
24 | + MODE_DIO = 1, | ||
25 | + MODE_QIO = 2 | ||
26 | +} SPIMode; | ||
27 | + | ||
28 | #define M25P80_INTERNAL_DATA_BUFFER_SZ 16 | ||
29 | |||
30 | struct Flash { | ||
31 | @@ -XXX,XX +XXX,XX @@ static void reset_memory(Flash *s) | ||
32 | trace_m25p80_reset_done(s); | ||
31 | } | 33 | } |
32 | 34 | ||
33 | +static void cpacr_reset(CPUARMState *env, const ARMCPRegInfo *ri) | 35 | +static uint8_t numonyx_mode(Flash *s) |
34 | +{ | 36 | +{ |
35 | + /* Call cpacr_write() so that we reset with the correct RAO bits set | 37 | + if (!(s->enh_volatile_cfg & EVCFG_QUAD_IO_DISABLED)) { |
36 | + * for our CPU features. | 38 | + return MODE_QIO; |
37 | + */ | 39 | + } else if (!(s->enh_volatile_cfg & EVCFG_DUAL_IO_DISABLED)) { |
38 | + cpacr_write(env, ri, 0); | 40 | + return MODE_DIO; |
41 | + } else { | ||
42 | + return MODE_STD; | ||
43 | + } | ||
39 | +} | 44 | +} |
40 | + | 45 | + |
41 | static CPAccessResult cpacr_access(CPUARMState *env, const ARMCPRegInfo *ri, | 46 | static void decode_fast_read_cmd(Flash *s) |
42 | bool isread) | ||
43 | { | 47 | { |
44 | @@ -XXX,XX +XXX,XX @@ static const ARMCPRegInfo v6_cp_reginfo[] = { | 48 | s->needed_bytes = get_addr_length(s); |
45 | { .name = "CPACR", .state = ARM_CP_STATE_BOTH, .opc0 = 3, | 49 | @@ -XXX,XX +XXX,XX @@ static void decode_new_cmd(Flash *s, uint32_t value) |
46 | .crn = 1, .crm = 0, .opc1 = 0, .opc2 = 2, .accessfn = cpacr_access, | 50 | case ERASE4_32K: |
47 | .access = PL1_RW, .fieldoffset = offsetof(CPUARMState, cp15.cpacr_el1), | 51 | case ERASE_SECTOR: |
48 | - .resetvalue = 0, .writefn = cpacr_write }, | 52 | case ERASE4_SECTOR: |
49 | + .resetfn = cpacr_reset, .writefn = cpacr_write }, | 53 | - case READ: |
50 | REGINFO_SENTINEL | 54 | - case READ4: |
51 | }; | 55 | - case DPP: |
52 | 56 | - case QPP: | |
57 | - case QPP_4: | ||
58 | case PP: | ||
59 | case PP4: | ||
60 | - case PP4_4: | ||
61 | case DIE_ERASE: | ||
62 | case RDID_90: | ||
63 | case RDID_AB: | ||
64 | @@ -XXX,XX +XXX,XX @@ static void decode_new_cmd(Flash *s, uint32_t value) | ||
65 | s->len = 0; | ||
66 | s->state = STATE_COLLECTING_DATA; | ||
67 | break; | ||
68 | + case READ: | ||
69 | + case READ4: | ||
70 | + if (get_man(s) != MAN_NUMONYX || numonyx_mode(s) == MODE_STD) { | ||
71 | + s->needed_bytes = get_addr_length(s); | ||
72 | + s->pos = 0; | ||
73 | + s->len = 0; | ||
74 | + s->state = STATE_COLLECTING_DATA; | ||
75 | + } else { | ||
76 | + qemu_log_mask(LOG_GUEST_ERROR, "M25P80: Cannot execute cmd %x in " | ||
77 | + "DIO or QIO mode\n", s->cmd_in_progress); | ||
78 | + } | ||
79 | + break; | ||
80 | + case DPP: | ||
81 | + if (get_man(s) != MAN_NUMONYX || numonyx_mode(s) != MODE_QIO) { | ||
82 | + s->needed_bytes = get_addr_length(s); | ||
83 | + s->pos = 0; | ||
84 | + s->len = 0; | ||
85 | + s->state = STATE_COLLECTING_DATA; | ||
86 | + } else { | ||
87 | + qemu_log_mask(LOG_GUEST_ERROR, "M25P80: Cannot execute cmd %x in " | ||
88 | + "QIO mode\n", s->cmd_in_progress); | ||
89 | + } | ||
90 | + break; | ||
91 | + case QPP: | ||
92 | + case QPP_4: | ||
93 | + case PP4_4: | ||
94 | + if (get_man(s) != MAN_NUMONYX || numonyx_mode(s) != MODE_DIO) { | ||
95 | + s->needed_bytes = get_addr_length(s); | ||
96 | + s->pos = 0; | ||
97 | + s->len = 0; | ||
98 | + s->state = STATE_COLLECTING_DATA; | ||
99 | + } else { | ||
100 | + qemu_log_mask(LOG_GUEST_ERROR, "M25P80: Cannot execute cmd %x in " | ||
101 | + "DIO mode\n", s->cmd_in_progress); | ||
102 | + } | ||
103 | + break; | ||
104 | |||
105 | case FAST_READ: | ||
106 | case FAST_READ4: | ||
107 | + decode_fast_read_cmd(s); | ||
108 | + break; | ||
109 | case DOR: | ||
110 | case DOR4: | ||
111 | + if (get_man(s) != MAN_NUMONYX || numonyx_mode(s) != MODE_QIO) { | ||
112 | + decode_fast_read_cmd(s); | ||
113 | + } else { | ||
114 | + qemu_log_mask(LOG_GUEST_ERROR, "M25P80: Cannot execute cmd %x in " | ||
115 | + "QIO mode\n", s->cmd_in_progress); | ||
116 | + } | ||
117 | + break; | ||
118 | case QOR: | ||
119 | case QOR4: | ||
120 | - decode_fast_read_cmd(s); | ||
121 | + if (get_man(s) != MAN_NUMONYX || numonyx_mode(s) != MODE_DIO) { | ||
122 | + decode_fast_read_cmd(s); | ||
123 | + } else { | ||
124 | + qemu_log_mask(LOG_GUEST_ERROR, "M25P80: Cannot execute cmd %x in " | ||
125 | + "DIO mode\n", s->cmd_in_progress); | ||
126 | + } | ||
127 | break; | ||
128 | |||
129 | case DIOR: | ||
130 | case DIOR4: | ||
131 | - decode_dio_read_cmd(s); | ||
132 | + if (get_man(s) != MAN_NUMONYX || numonyx_mode(s) != MODE_QIO) { | ||
133 | + decode_dio_read_cmd(s); | ||
134 | + } else { | ||
135 | + qemu_log_mask(LOG_GUEST_ERROR, "M25P80: Cannot execute cmd %x in " | ||
136 | + "QIO mode\n", s->cmd_in_progress); | ||
137 | + } | ||
138 | break; | ||
139 | |||
140 | case QIOR: | ||
141 | case QIOR4: | ||
142 | - decode_qio_read_cmd(s); | ||
143 | + if (get_man(s) != MAN_NUMONYX || numonyx_mode(s) != MODE_DIO) { | ||
144 | + decode_qio_read_cmd(s); | ||
145 | + } else { | ||
146 | + qemu_log_mask(LOG_GUEST_ERROR, "M25P80: Cannot execute cmd %x in " | ||
147 | + "DIO mode\n", s->cmd_in_progress); | ||
148 | + } | ||
149 | break; | ||
150 | |||
151 | case WRSR: | ||
152 | @@ -XXX,XX +XXX,XX @@ static void decode_new_cmd(Flash *s, uint32_t value) | ||
153 | break; | ||
154 | |||
155 | case JEDEC_READ: | ||
156 | - trace_m25p80_populated_jedec(s); | ||
157 | - for (i = 0; i < s->pi->id_len; i++) { | ||
158 | - s->data[i] = s->pi->id[i]; | ||
159 | - } | ||
160 | - for (; i < SPI_NOR_MAX_ID_LEN; i++) { | ||
161 | - s->data[i] = 0; | ||
162 | - } | ||
163 | + if (get_man(s) != MAN_NUMONYX || numonyx_mode(s) == MODE_STD) { | ||
164 | + trace_m25p80_populated_jedec(s); | ||
165 | + for (i = 0; i < s->pi->id_len; i++) { | ||
166 | + s->data[i] = s->pi->id[i]; | ||
167 | + } | ||
168 | + for (; i < SPI_NOR_MAX_ID_LEN; i++) { | ||
169 | + s->data[i] = 0; | ||
170 | + } | ||
171 | |||
172 | - s->len = SPI_NOR_MAX_ID_LEN; | ||
173 | - s->pos = 0; | ||
174 | - s->state = STATE_READING_DATA; | ||
175 | + s->len = SPI_NOR_MAX_ID_LEN; | ||
176 | + s->pos = 0; | ||
177 | + s->state = STATE_READING_DATA; | ||
178 | + } else { | ||
179 | + qemu_log_mask(LOG_GUEST_ERROR, "M25P80: Cannot execute JEDEC read " | ||
180 | + "in DIO or QIO mode\n"); | ||
181 | + } | ||
182 | break; | ||
183 | |||
184 | case RDCR: | ||
53 | -- | 185 | -- |
54 | 2.17.1 | 186 | 2.20.1 |
55 | 187 | ||
56 | 188 | diff view generated by jsdifflib |
1 | From: Igor Mammedov <imammedo@redhat.com> | 1 | From: Joe Komlodi <joe.komlodi@xilinx.com> |
---|---|---|---|
2 | 2 | ||
3 | When QEMU is started with following CLI | 3 | Numonyx chips determine the number of cycles to wait based on bits 7:4 |
4 | -machine virt,gic-version=3,accel=kvm -cpu host -bios AAVMF_CODE.fd | 4 | in the volatile configuration register. |
5 | it crashes with abort at | ||
6 | accel/kvm/kvm-all.c:2164: | ||
7 | KVM_SET_DEVICE_ATTR failed: Group 6 attr 0x000000000000c665: Invalid argument | ||
8 | 5 | ||
9 | Which is caused by implicit dependency of kvm_arm_gicv3_reset() on | 6 | However, if these bits are 0x0 or 0xF, the number of dummy cycles to |
10 | arm_gicv3_icc_reset() where the later is called by CPU reset | 7 | wait is 10 for QIOR and QIOR4 commands or when in QIO mode, and otherwise 8 for |
11 | reset callback. | 8 | the currently supported fast read commands. [1] |
12 | 9 | ||
13 | However commit: | 10 | [1] |
14 | 3b77f6c arm/boot: split load_dtb() from arm_load_kernel() | 11 | https://www.micron.com/-/media/client/global/documents/products/data-sheet/nor-flash/serial-nor/mt25q/die-rev-b/mt25q_qlkt_u_02g_cbb_0.pdf?rev=9b167fbf2b3645efba6385949a72e453 |
15 | broke CPU reset callback registration in case | ||
16 | 12 | ||
17 | arm_load_kernel() | 13 | Signed-off-by: Joe Komlodi <komlodi@xilinx.com> |
18 | ... | 14 | Reviewed-by: Francisco Iglesias <francisco.iglesias@xilinx.com> |
19 | if (!info->kernel_filename || info->firmware_loaded) | 15 | Message-id: 1605568264-26376-5-git-send-email-komlodi@xilinx.com |
20 | |||
21 | branch is taken, i.e. it's sufficient to provide a firmware | ||
22 | or do not provide kernel on CLI to skip cpu reset callback | ||
23 | registration, where before offending commit the callback | ||
24 | has been registered unconditionally. | ||
25 | |||
26 | Fix it by registering the callback right at the beginning of | ||
27 | arm_load_kernel() unconditionally instead of doing it at the end. | ||
28 | |||
29 | NOTE: | ||
30 | we probably should eliminate that dependency anyways as well as | ||
31 | separate arch CPU reset parts from arm_load_kernel() into CPU | ||
32 | itself, but that refactoring that I probably would have to do | ||
33 | anyways later for CPU hotplug to work. | ||
34 | |||
35 | Reported-by: Auger Eric <eric.auger@redhat.com> | ||
36 | Signed-off-by: Igor Mammedov <imammedo@redhat.com> | ||
37 | Reviewed-by: Eric Auger <eric.auger@redhat.com> | ||
38 | Tested-by: Eric Auger <eric.auger@redhat.com> | ||
39 | Message-id: 1527070950-208350-1-git-send-email-imammedo@redhat.com | ||
40 | Reviewed-by: Peter Maydell <peter.maydell@linaro.org> | ||
41 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | 16 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> |
42 | --- | 17 | --- |
43 | hw/arm/boot.c | 18 +++++++++--------- | 18 | hw/block/m25p80.c | 30 +++++++++++++++++++++++++++--- |
44 | 1 file changed, 9 insertions(+), 9 deletions(-) | 19 | 1 file changed, 27 insertions(+), 3 deletions(-) |
45 | 20 | ||
46 | diff --git a/hw/arm/boot.c b/hw/arm/boot.c | 21 | diff --git a/hw/block/m25p80.c b/hw/block/m25p80.c |
47 | index XXXXXXX..XXXXXXX 100644 | 22 | index XXXXXXX..XXXXXXX 100644 |
48 | --- a/hw/arm/boot.c | 23 | --- a/hw/block/m25p80.c |
49 | +++ b/hw/arm/boot.c | 24 | +++ b/hw/block/m25p80.c |
50 | @@ -XXX,XX +XXX,XX @@ void arm_load_kernel(ARMCPU *cpu, struct arm_boot_info *info) | 25 | @@ -XXX,XX +XXX,XX @@ static uint8_t numonyx_mode(Flash *s) |
51 | static const ARMInsnFixup *primary_loader; | 26 | } |
52 | AddressSpace *as = arm_boot_address_space(cpu, info); | 27 | } |
53 | 28 | ||
54 | + /* CPU objects (unlike devices) are not automatically reset on system | 29 | +static uint8_t numonyx_extract_cfg_num_dummies(Flash *s) |
55 | + * reset, so we must always register a handler to do so. If we're | 30 | +{ |
56 | + * actually loading a kernel, the handler is also responsible for | 31 | + uint8_t num_dummies; |
57 | + * arranging that we start it correctly. | 32 | + uint8_t mode; |
58 | + */ | 33 | + assert(get_man(s) == MAN_NUMONYX); |
59 | + for (cs = first_cpu; cs; cs = CPU_NEXT(cs)) { | 34 | + |
60 | + qemu_register_reset(do_cpu_reset, ARM_CPU(cs)); | 35 | + mode = numonyx_mode(s); |
36 | + num_dummies = extract32(s->volatile_cfg, 4, 4); | ||
37 | + | ||
38 | + if (num_dummies == 0x0 || num_dummies == 0xf) { | ||
39 | + switch (s->cmd_in_progress) { | ||
40 | + case QIOR: | ||
41 | + case QIOR4: | ||
42 | + num_dummies = 10; | ||
43 | + break; | ||
44 | + default: | ||
45 | + num_dummies = (mode == MODE_QIO) ? 10 : 8; | ||
46 | + break; | ||
47 | + } | ||
61 | + } | 48 | + } |
62 | + | 49 | + |
63 | /* The board code is not supposed to set secure_board_setup unless | 50 | + return num_dummies; |
64 | * running its code in secure mode is actually possible, and KVM | 51 | +} |
65 | * doesn't support secure. | 52 | + |
66 | @@ -XXX,XX +XXX,XX @@ void arm_load_kernel(ARMCPU *cpu, struct arm_boot_info *info) | 53 | static void decode_fast_read_cmd(Flash *s) |
67 | ARM_CPU(cs)->env.boot_info = info; | 54 | { |
68 | } | 55 | s->needed_bytes = get_addr_length(s); |
69 | 56 | @@ -XXX,XX +XXX,XX @@ static void decode_fast_read_cmd(Flash *s) | |
70 | - /* CPU objects (unlike devices) are not automatically reset on system | 57 | s->needed_bytes += 8; |
71 | - * reset, so we must always register a handler to do so. If we're | 58 | break; |
72 | - * actually loading a kernel, the handler is also responsible for | 59 | case MAN_NUMONYX: |
73 | - * arranging that we start it correctly. | 60 | - s->needed_bytes += extract32(s->volatile_cfg, 4, 4); |
74 | - */ | 61 | + s->needed_bytes += numonyx_extract_cfg_num_dummies(s); |
75 | - for (cs = first_cpu; cs; cs = CPU_NEXT(cs)) { | 62 | break; |
76 | - qemu_register_reset(do_cpu_reset, ARM_CPU(cs)); | 63 | case MAN_MACRONIX: |
77 | - } | 64 | if (extract32(s->volatile_cfg, 6, 2) == 1) { |
78 | - | 65 | @@ -XXX,XX +XXX,XX @@ static void decode_dio_read_cmd(Flash *s) |
79 | if (!info->skip_dtb_autoload && have_dtb(info)) { | 66 | ); |
80 | if (arm_load_dtb(info->dtb_start, info, info->dtb_limit, as) < 0) { | 67 | break; |
81 | exit(1); | 68 | case MAN_NUMONYX: |
69 | - s->needed_bytes += extract32(s->volatile_cfg, 4, 4); | ||
70 | + s->needed_bytes += numonyx_extract_cfg_num_dummies(s); | ||
71 | break; | ||
72 | case MAN_MACRONIX: | ||
73 | switch (extract32(s->volatile_cfg, 6, 2)) { | ||
74 | @@ -XXX,XX +XXX,XX @@ static void decode_qio_read_cmd(Flash *s) | ||
75 | ); | ||
76 | break; | ||
77 | case MAN_NUMONYX: | ||
78 | - s->needed_bytes += extract32(s->volatile_cfg, 4, 4); | ||
79 | + s->needed_bytes += numonyx_extract_cfg_num_dummies(s); | ||
80 | break; | ||
81 | case MAN_MACRONIX: | ||
82 | switch (extract32(s->volatile_cfg, 6, 2)) { | ||
82 | -- | 83 | -- |
83 | 2.17.1 | 84 | 2.20.1 |
84 | 85 | ||
85 | 86 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | As part of plumbing MemTxAttrs down to the IOMMU translate method, | ||
2 | add MemTxAttrs as an argument to address_space_translate() | ||
3 | and address_space_translate_cached(). Callers either have an | ||
4 | attrs value to hand, or don't care and can use MEMTXATTRS_UNSPECIFIED. | ||
5 | 1 | ||
6 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
7 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | ||
8 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
9 | Message-id: 20180521140402.23318-4-peter.maydell@linaro.org | ||
10 | --- | ||
11 | include/exec/memory.h | 4 +++- | ||
12 | accel/tcg/translate-all.c | 2 +- | ||
13 | exec.c | 14 +++++++++----- | ||
14 | hw/vfio/common.c | 3 ++- | ||
15 | memory_ldst.inc.c | 18 +++++++++--------- | ||
16 | target/riscv/helper.c | 2 +- | ||
17 | 6 files changed, 25 insertions(+), 18 deletions(-) | ||
18 | |||
19 | diff --git a/include/exec/memory.h b/include/exec/memory.h | ||
20 | index XXXXXXX..XXXXXXX 100644 | ||
21 | --- a/include/exec/memory.h | ||
22 | +++ b/include/exec/memory.h | ||
23 | @@ -XXX,XX +XXX,XX @@ IOMMUTLBEntry address_space_get_iotlb_entry(AddressSpace *as, hwaddr addr, | ||
24 | * #MemoryRegion. | ||
25 | * @len: pointer to length | ||
26 | * @is_write: indicates the transfer direction | ||
27 | + * @attrs: memory attributes | ||
28 | */ | ||
29 | MemoryRegion *flatview_translate(FlatView *fv, | ||
30 | hwaddr addr, hwaddr *xlat, | ||
31 | @@ -XXX,XX +XXX,XX @@ MemoryRegion *flatview_translate(FlatView *fv, | ||
32 | |||
33 | static inline MemoryRegion *address_space_translate(AddressSpace *as, | ||
34 | hwaddr addr, hwaddr *xlat, | ||
35 | - hwaddr *len, bool is_write) | ||
36 | + hwaddr *len, bool is_write, | ||
37 | + MemTxAttrs attrs) | ||
38 | { | ||
39 | return flatview_translate(address_space_to_flatview(as), | ||
40 | addr, xlat, len, is_write); | ||
41 | diff --git a/accel/tcg/translate-all.c b/accel/tcg/translate-all.c | ||
42 | index XXXXXXX..XXXXXXX 100644 | ||
43 | --- a/accel/tcg/translate-all.c | ||
44 | +++ b/accel/tcg/translate-all.c | ||
45 | @@ -XXX,XX +XXX,XX @@ void tb_invalidate_phys_addr(AddressSpace *as, hwaddr addr, MemTxAttrs attrs) | ||
46 | hwaddr l = 1; | ||
47 | |||
48 | rcu_read_lock(); | ||
49 | - mr = address_space_translate(as, addr, &addr, &l, false); | ||
50 | + mr = address_space_translate(as, addr, &addr, &l, false, attrs); | ||
51 | if (!(memory_region_is_ram(mr) | ||
52 | || memory_region_is_romd(mr))) { | ||
53 | rcu_read_unlock(); | ||
54 | diff --git a/exec.c b/exec.c | ||
55 | index XXXXXXX..XXXXXXX 100644 | ||
56 | --- a/exec.c | ||
57 | +++ b/exec.c | ||
58 | @@ -XXX,XX +XXX,XX @@ static inline void cpu_physical_memory_write_rom_internal(AddressSpace *as, | ||
59 | rcu_read_lock(); | ||
60 | while (len > 0) { | ||
61 | l = len; | ||
62 | - mr = address_space_translate(as, addr, &addr1, &l, true); | ||
63 | + mr = address_space_translate(as, addr, &addr1, &l, true, | ||
64 | + MEMTXATTRS_UNSPECIFIED); | ||
65 | |||
66 | if (!(memory_region_is_ram(mr) || | ||
67 | memory_region_is_romd(mr))) { | ||
68 | @@ -XXX,XX +XXX,XX @@ void address_space_cache_destroy(MemoryRegionCache *cache) | ||
69 | */ | ||
70 | static inline MemoryRegion *address_space_translate_cached( | ||
71 | MemoryRegionCache *cache, hwaddr addr, hwaddr *xlat, | ||
72 | - hwaddr *plen, bool is_write) | ||
73 | + hwaddr *plen, bool is_write, MemTxAttrs attrs) | ||
74 | { | ||
75 | MemoryRegionSection section; | ||
76 | MemoryRegion *mr; | ||
77 | @@ -XXX,XX +XXX,XX @@ address_space_read_cached_slow(MemoryRegionCache *cache, hwaddr addr, | ||
78 | MemoryRegion *mr; | ||
79 | |||
80 | l = len; | ||
81 | - mr = address_space_translate_cached(cache, addr, &addr1, &l, false); | ||
82 | + mr = address_space_translate_cached(cache, addr, &addr1, &l, false, | ||
83 | + MEMTXATTRS_UNSPECIFIED); | ||
84 | flatview_read_continue(cache->fv, | ||
85 | addr, MEMTXATTRS_UNSPECIFIED, buf, len, | ||
86 | addr1, l, mr); | ||
87 | @@ -XXX,XX +XXX,XX @@ address_space_write_cached_slow(MemoryRegionCache *cache, hwaddr addr, | ||
88 | MemoryRegion *mr; | ||
89 | |||
90 | l = len; | ||
91 | - mr = address_space_translate_cached(cache, addr, &addr1, &l, true); | ||
92 | + mr = address_space_translate_cached(cache, addr, &addr1, &l, true, | ||
93 | + MEMTXATTRS_UNSPECIFIED); | ||
94 | flatview_write_continue(cache->fv, | ||
95 | addr, MEMTXATTRS_UNSPECIFIED, buf, len, | ||
96 | addr1, l, mr); | ||
97 | @@ -XXX,XX +XXX,XX @@ bool cpu_physical_memory_is_io(hwaddr phys_addr) | ||
98 | |||
99 | rcu_read_lock(); | ||
100 | mr = address_space_translate(&address_space_memory, | ||
101 | - phys_addr, &phys_addr, &l, false); | ||
102 | + phys_addr, &phys_addr, &l, false, | ||
103 | + MEMTXATTRS_UNSPECIFIED); | ||
104 | |||
105 | res = !(memory_region_is_ram(mr) || memory_region_is_romd(mr)); | ||
106 | rcu_read_unlock(); | ||
107 | diff --git a/hw/vfio/common.c b/hw/vfio/common.c | ||
108 | index XXXXXXX..XXXXXXX 100644 | ||
109 | --- a/hw/vfio/common.c | ||
110 | +++ b/hw/vfio/common.c | ||
111 | @@ -XXX,XX +XXX,XX @@ static bool vfio_get_vaddr(IOMMUTLBEntry *iotlb, void **vaddr, | ||
112 | */ | ||
113 | mr = address_space_translate(&address_space_memory, | ||
114 | iotlb->translated_addr, | ||
115 | - &xlat, &len, writable); | ||
116 | + &xlat, &len, writable, | ||
117 | + MEMTXATTRS_UNSPECIFIED); | ||
118 | if (!memory_region_is_ram(mr)) { | ||
119 | error_report("iommu map to non memory area %"HWADDR_PRIx"", | ||
120 | xlat); | ||
121 | diff --git a/memory_ldst.inc.c b/memory_ldst.inc.c | ||
122 | index XXXXXXX..XXXXXXX 100644 | ||
123 | --- a/memory_ldst.inc.c | ||
124 | +++ b/memory_ldst.inc.c | ||
125 | @@ -XXX,XX +XXX,XX @@ static inline uint32_t glue(address_space_ldl_internal, SUFFIX)(ARG1_DECL, | ||
126 | bool release_lock = false; | ||
127 | |||
128 | RCU_READ_LOCK(); | ||
129 | - mr = TRANSLATE(addr, &addr1, &l, false); | ||
130 | + mr = TRANSLATE(addr, &addr1, &l, false, attrs); | ||
131 | if (l < 4 || !IS_DIRECT(mr, false)) { | ||
132 | release_lock |= prepare_mmio_access(mr); | ||
133 | |||
134 | @@ -XXX,XX +XXX,XX @@ static inline uint64_t glue(address_space_ldq_internal, SUFFIX)(ARG1_DECL, | ||
135 | bool release_lock = false; | ||
136 | |||
137 | RCU_READ_LOCK(); | ||
138 | - mr = TRANSLATE(addr, &addr1, &l, false); | ||
139 | + mr = TRANSLATE(addr, &addr1, &l, false, attrs); | ||
140 | if (l < 8 || !IS_DIRECT(mr, false)) { | ||
141 | release_lock |= prepare_mmio_access(mr); | ||
142 | |||
143 | @@ -XXX,XX +XXX,XX @@ uint32_t glue(address_space_ldub, SUFFIX)(ARG1_DECL, | ||
144 | bool release_lock = false; | ||
145 | |||
146 | RCU_READ_LOCK(); | ||
147 | - mr = TRANSLATE(addr, &addr1, &l, false); | ||
148 | + mr = TRANSLATE(addr, &addr1, &l, false, attrs); | ||
149 | if (!IS_DIRECT(mr, false)) { | ||
150 | release_lock |= prepare_mmio_access(mr); | ||
151 | |||
152 | @@ -XXX,XX +XXX,XX @@ static inline uint32_t glue(address_space_lduw_internal, SUFFIX)(ARG1_DECL, | ||
153 | bool release_lock = false; | ||
154 | |||
155 | RCU_READ_LOCK(); | ||
156 | - mr = TRANSLATE(addr, &addr1, &l, false); | ||
157 | + mr = TRANSLATE(addr, &addr1, &l, false, attrs); | ||
158 | if (l < 2 || !IS_DIRECT(mr, false)) { | ||
159 | release_lock |= prepare_mmio_access(mr); | ||
160 | |||
161 | @@ -XXX,XX +XXX,XX @@ void glue(address_space_stl_notdirty, SUFFIX)(ARG1_DECL, | ||
162 | bool release_lock = false; | ||
163 | |||
164 | RCU_READ_LOCK(); | ||
165 | - mr = TRANSLATE(addr, &addr1, &l, true); | ||
166 | + mr = TRANSLATE(addr, &addr1, &l, true, attrs); | ||
167 | if (l < 4 || !IS_DIRECT(mr, true)) { | ||
168 | release_lock |= prepare_mmio_access(mr); | ||
169 | |||
170 | @@ -XXX,XX +XXX,XX @@ static inline void glue(address_space_stl_internal, SUFFIX)(ARG1_DECL, | ||
171 | bool release_lock = false; | ||
172 | |||
173 | RCU_READ_LOCK(); | ||
174 | - mr = TRANSLATE(addr, &addr1, &l, true); | ||
175 | + mr = TRANSLATE(addr, &addr1, &l, true, attrs); | ||
176 | if (l < 4 || !IS_DIRECT(mr, true)) { | ||
177 | release_lock |= prepare_mmio_access(mr); | ||
178 | |||
179 | @@ -XXX,XX +XXX,XX @@ void glue(address_space_stb, SUFFIX)(ARG1_DECL, | ||
180 | bool release_lock = false; | ||
181 | |||
182 | RCU_READ_LOCK(); | ||
183 | - mr = TRANSLATE(addr, &addr1, &l, true); | ||
184 | + mr = TRANSLATE(addr, &addr1, &l, true, attrs); | ||
185 | if (!IS_DIRECT(mr, true)) { | ||
186 | release_lock |= prepare_mmio_access(mr); | ||
187 | r = memory_region_dispatch_write(mr, addr1, val, 1, attrs); | ||
188 | @@ -XXX,XX +XXX,XX @@ static inline void glue(address_space_stw_internal, SUFFIX)(ARG1_DECL, | ||
189 | bool release_lock = false; | ||
190 | |||
191 | RCU_READ_LOCK(); | ||
192 | - mr = TRANSLATE(addr, &addr1, &l, true); | ||
193 | + mr = TRANSLATE(addr, &addr1, &l, true, attrs); | ||
194 | if (l < 2 || !IS_DIRECT(mr, true)) { | ||
195 | release_lock |= prepare_mmio_access(mr); | ||
196 | |||
197 | @@ -XXX,XX +XXX,XX @@ static void glue(address_space_stq_internal, SUFFIX)(ARG1_DECL, | ||
198 | bool release_lock = false; | ||
199 | |||
200 | RCU_READ_LOCK(); | ||
201 | - mr = TRANSLATE(addr, &addr1, &l, true); | ||
202 | + mr = TRANSLATE(addr, &addr1, &l, true, attrs); | ||
203 | if (l < 8 || !IS_DIRECT(mr, true)) { | ||
204 | release_lock |= prepare_mmio_access(mr); | ||
205 | |||
206 | diff --git a/target/riscv/helper.c b/target/riscv/helper.c | ||
207 | index XXXXXXX..XXXXXXX 100644 | ||
208 | --- a/target/riscv/helper.c | ||
209 | +++ b/target/riscv/helper.c | ||
210 | @@ -XXX,XX +XXX,XX @@ restart: | ||
211 | MemoryRegion *mr; | ||
212 | hwaddr l = sizeof(target_ulong), addr1; | ||
213 | mr = address_space_translate(cs->as, pte_addr, | ||
214 | - &addr1, &l, false); | ||
215 | + &addr1, &l, false, MEMTXATTRS_UNSPECIFIED); | ||
216 | if (memory_access_is_direct(mr, true)) { | ||
217 | target_ulong *pte_pa = | ||
218 | qemu_map_ram_ptr(mr->ram_block, addr1); | ||
219 | -- | ||
220 | 2.17.1 | ||
221 | |||
222 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | As part of plumbing MemTxAttrs down to the IOMMU translate method, | ||
2 | add MemTxAttrs as an argument to address_space_map(). | ||
3 | Its callers either have an attrs value to hand, or don't care | ||
4 | and can use MEMTXATTRS_UNSPECIFIED. | ||
5 | 1 | ||
6 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
7 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | ||
8 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
9 | Message-id: 20180521140402.23318-5-peter.maydell@linaro.org | ||
10 | --- | ||
11 | include/exec/memory.h | 3 ++- | ||
12 | include/sysemu/dma.h | 3 ++- | ||
13 | exec.c | 6 ++++-- | ||
14 | target/ppc/mmu-hash64.c | 3 ++- | ||
15 | 4 files changed, 10 insertions(+), 5 deletions(-) | ||
16 | |||
17 | diff --git a/include/exec/memory.h b/include/exec/memory.h | ||
18 | index XXXXXXX..XXXXXXX 100644 | ||
19 | --- a/include/exec/memory.h | ||
20 | +++ b/include/exec/memory.h | ||
21 | @@ -XXX,XX +XXX,XX @@ bool address_space_access_valid(AddressSpace *as, hwaddr addr, int len, bool is_ | ||
22 | * @addr: address within that address space | ||
23 | * @plen: pointer to length of buffer; updated on return | ||
24 | * @is_write: indicates the transfer direction | ||
25 | + * @attrs: memory attributes | ||
26 | */ | ||
27 | void *address_space_map(AddressSpace *as, hwaddr addr, | ||
28 | - hwaddr *plen, bool is_write); | ||
29 | + hwaddr *plen, bool is_write, MemTxAttrs attrs); | ||
30 | |||
31 | /* address_space_unmap: Unmaps a memory region previously mapped by address_space_map() | ||
32 | * | ||
33 | diff --git a/include/sysemu/dma.h b/include/sysemu/dma.h | ||
34 | index XXXXXXX..XXXXXXX 100644 | ||
35 | --- a/include/sysemu/dma.h | ||
36 | +++ b/include/sysemu/dma.h | ||
37 | @@ -XXX,XX +XXX,XX @@ static inline void *dma_memory_map(AddressSpace *as, | ||
38 | hwaddr xlen = *len; | ||
39 | void *p; | ||
40 | |||
41 | - p = address_space_map(as, addr, &xlen, dir == DMA_DIRECTION_FROM_DEVICE); | ||
42 | + p = address_space_map(as, addr, &xlen, dir == DMA_DIRECTION_FROM_DEVICE, | ||
43 | + MEMTXATTRS_UNSPECIFIED); | ||
44 | *len = xlen; | ||
45 | return p; | ||
46 | } | ||
47 | diff --git a/exec.c b/exec.c | ||
48 | index XXXXXXX..XXXXXXX 100644 | ||
49 | --- a/exec.c | ||
50 | +++ b/exec.c | ||
51 | @@ -XXX,XX +XXX,XX @@ flatview_extend_translation(FlatView *fv, hwaddr addr, | ||
52 | void *address_space_map(AddressSpace *as, | ||
53 | hwaddr addr, | ||
54 | hwaddr *plen, | ||
55 | - bool is_write) | ||
56 | + bool is_write, | ||
57 | + MemTxAttrs attrs) | ||
58 | { | ||
59 | hwaddr len = *plen; | ||
60 | hwaddr l, xlat; | ||
61 | @@ -XXX,XX +XXX,XX @@ void *cpu_physical_memory_map(hwaddr addr, | ||
62 | hwaddr *plen, | ||
63 | int is_write) | ||
64 | { | ||
65 | - return address_space_map(&address_space_memory, addr, plen, is_write); | ||
66 | + return address_space_map(&address_space_memory, addr, plen, is_write, | ||
67 | + MEMTXATTRS_UNSPECIFIED); | ||
68 | } | ||
69 | |||
70 | void cpu_physical_memory_unmap(void *buffer, hwaddr len, | ||
71 | diff --git a/target/ppc/mmu-hash64.c b/target/ppc/mmu-hash64.c | ||
72 | index XXXXXXX..XXXXXXX 100644 | ||
73 | --- a/target/ppc/mmu-hash64.c | ||
74 | +++ b/target/ppc/mmu-hash64.c | ||
75 | @@ -XXX,XX +XXX,XX @@ const ppc_hash_pte64_t *ppc_hash64_map_hptes(PowerPCCPU *cpu, | ||
76 | return NULL; | ||
77 | } | ||
78 | |||
79 | - hptes = address_space_map(CPU(cpu)->as, base + pte_offset, &plen, false); | ||
80 | + hptes = address_space_map(CPU(cpu)->as, base + pte_offset, &plen, false, | ||
81 | + MEMTXATTRS_UNSPECIFIED); | ||
82 | if (plen < (n * HASH_PTE_SIZE_64)) { | ||
83 | hw_error("%s: Unable to map all requested HPTEs\n", __func__); | ||
84 | } | ||
85 | -- | ||
86 | 2.17.1 | ||
87 | |||
88 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | As part of plumbing MemTxAttrs down to the IOMMU translate method, | ||
2 | add MemTxAttrs as an argument to address_space_access_valid(). | ||
3 | Its callers either have an attrs value to hand, or don't care | ||
4 | and can use MEMTXATTRS_UNSPECIFIED. | ||
5 | 1 | ||
6 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
7 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | ||
8 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
9 | Message-id: 20180521140402.23318-6-peter.maydell@linaro.org | ||
10 | --- | ||
11 | include/exec/memory.h | 4 +++- | ||
12 | include/sysemu/dma.h | 3 ++- | ||
13 | exec.c | 3 ++- | ||
14 | target/s390x/diag.c | 6 ++++-- | ||
15 | target/s390x/excp_helper.c | 3 ++- | ||
16 | target/s390x/mmu_helper.c | 3 ++- | ||
17 | target/s390x/sigp.c | 3 ++- | ||
18 | 7 files changed, 17 insertions(+), 8 deletions(-) | ||
19 | |||
20 | diff --git a/include/exec/memory.h b/include/exec/memory.h | ||
21 | index XXXXXXX..XXXXXXX 100644 | ||
22 | --- a/include/exec/memory.h | ||
23 | +++ b/include/exec/memory.h | ||
24 | @@ -XXX,XX +XXX,XX @@ static inline MemoryRegion *address_space_translate(AddressSpace *as, | ||
25 | * @addr: address within that address space | ||
26 | * @len: length of the area to be checked | ||
27 | * @is_write: indicates the transfer direction | ||
28 | + * @attrs: memory attributes | ||
29 | */ | ||
30 | -bool address_space_access_valid(AddressSpace *as, hwaddr addr, int len, bool is_write); | ||
31 | +bool address_space_access_valid(AddressSpace *as, hwaddr addr, int len, | ||
32 | + bool is_write, MemTxAttrs attrs); | ||
33 | |||
34 | /* address_space_map: map a physical memory region into a host virtual address | ||
35 | * | ||
36 | diff --git a/include/sysemu/dma.h b/include/sysemu/dma.h | ||
37 | index XXXXXXX..XXXXXXX 100644 | ||
38 | --- a/include/sysemu/dma.h | ||
39 | +++ b/include/sysemu/dma.h | ||
40 | @@ -XXX,XX +XXX,XX @@ static inline bool dma_memory_valid(AddressSpace *as, | ||
41 | DMADirection dir) | ||
42 | { | ||
43 | return address_space_access_valid(as, addr, len, | ||
44 | - dir == DMA_DIRECTION_FROM_DEVICE); | ||
45 | + dir == DMA_DIRECTION_FROM_DEVICE, | ||
46 | + MEMTXATTRS_UNSPECIFIED); | ||
47 | } | ||
48 | |||
49 | static inline int dma_memory_rw_relaxed(AddressSpace *as, dma_addr_t addr, | ||
50 | diff --git a/exec.c b/exec.c | ||
51 | index XXXXXXX..XXXXXXX 100644 | ||
52 | --- a/exec.c | ||
53 | +++ b/exec.c | ||
54 | @@ -XXX,XX +XXX,XX @@ static bool flatview_access_valid(FlatView *fv, hwaddr addr, int len, | ||
55 | } | ||
56 | |||
57 | bool address_space_access_valid(AddressSpace *as, hwaddr addr, | ||
58 | - int len, bool is_write) | ||
59 | + int len, bool is_write, | ||
60 | + MemTxAttrs attrs) | ||
61 | { | ||
62 | FlatView *fv; | ||
63 | bool result; | ||
64 | diff --git a/target/s390x/diag.c b/target/s390x/diag.c | ||
65 | index XXXXXXX..XXXXXXX 100644 | ||
66 | --- a/target/s390x/diag.c | ||
67 | +++ b/target/s390x/diag.c | ||
68 | @@ -XXX,XX +XXX,XX @@ void handle_diag_308(CPUS390XState *env, uint64_t r1, uint64_t r3, uintptr_t ra) | ||
69 | return; | ||
70 | } | ||
71 | if (!address_space_access_valid(&address_space_memory, addr, | ||
72 | - sizeof(IplParameterBlock), false)) { | ||
73 | + sizeof(IplParameterBlock), false, | ||
74 | + MEMTXATTRS_UNSPECIFIED)) { | ||
75 | s390_program_interrupt(env, PGM_ADDRESSING, ILEN_AUTO, ra); | ||
76 | return; | ||
77 | } | ||
78 | @@ -XXX,XX +XXX,XX @@ out: | ||
79 | return; | ||
80 | } | ||
81 | if (!address_space_access_valid(&address_space_memory, addr, | ||
82 | - sizeof(IplParameterBlock), true)) { | ||
83 | + sizeof(IplParameterBlock), true, | ||
84 | + MEMTXATTRS_UNSPECIFIED)) { | ||
85 | s390_program_interrupt(env, PGM_ADDRESSING, ILEN_AUTO, ra); | ||
86 | return; | ||
87 | } | ||
88 | diff --git a/target/s390x/excp_helper.c b/target/s390x/excp_helper.c | ||
89 | index XXXXXXX..XXXXXXX 100644 | ||
90 | --- a/target/s390x/excp_helper.c | ||
91 | +++ b/target/s390x/excp_helper.c | ||
92 | @@ -XXX,XX +XXX,XX @@ int s390_cpu_handle_mmu_fault(CPUState *cs, vaddr orig_vaddr, int size, | ||
93 | |||
94 | /* check out of RAM access */ | ||
95 | if (!address_space_access_valid(&address_space_memory, raddr, | ||
96 | - TARGET_PAGE_SIZE, rw)) { | ||
97 | + TARGET_PAGE_SIZE, rw, | ||
98 | + MEMTXATTRS_UNSPECIFIED)) { | ||
99 | DPRINTF("%s: raddr %" PRIx64 " > ram_size %" PRIx64 "\n", __func__, | ||
100 | (uint64_t)raddr, (uint64_t)ram_size); | ||
101 | trigger_pgm_exception(env, PGM_ADDRESSING, ILEN_AUTO); | ||
102 | diff --git a/target/s390x/mmu_helper.c b/target/s390x/mmu_helper.c | ||
103 | index XXXXXXX..XXXXXXX 100644 | ||
104 | --- a/target/s390x/mmu_helper.c | ||
105 | +++ b/target/s390x/mmu_helper.c | ||
106 | @@ -XXX,XX +XXX,XX @@ static int translate_pages(S390CPU *cpu, vaddr addr, int nr_pages, | ||
107 | return ret; | ||
108 | } | ||
109 | if (!address_space_access_valid(&address_space_memory, pages[i], | ||
110 | - TARGET_PAGE_SIZE, is_write)) { | ||
111 | + TARGET_PAGE_SIZE, is_write, | ||
112 | + MEMTXATTRS_UNSPECIFIED)) { | ||
113 | trigger_access_exception(env, PGM_ADDRESSING, ILEN_AUTO, 0); | ||
114 | return -EFAULT; | ||
115 | } | ||
116 | diff --git a/target/s390x/sigp.c b/target/s390x/sigp.c | ||
117 | index XXXXXXX..XXXXXXX 100644 | ||
118 | --- a/target/s390x/sigp.c | ||
119 | +++ b/target/s390x/sigp.c | ||
120 | @@ -XXX,XX +XXX,XX @@ static void sigp_set_prefix(CPUState *cs, run_on_cpu_data arg) | ||
121 | cpu_synchronize_state(cs); | ||
122 | |||
123 | if (!address_space_access_valid(&address_space_memory, addr, | ||
124 | - sizeof(struct LowCore), false)) { | ||
125 | + sizeof(struct LowCore), false, | ||
126 | + MEMTXATTRS_UNSPECIFIED)) { | ||
127 | set_sigp_status(si, SIGP_STAT_INVALID_PARAMETER); | ||
128 | return; | ||
129 | } | ||
130 | -- | ||
131 | 2.17.1 | ||
132 | |||
133 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | As part of plumbing MemTxAttrs down to the IOMMU translate method, | ||
2 | add MemTxAttrs as an argument to flatview_extend_translation(). | ||
3 | Its callers either have an attrs value to hand, or don't care | ||
4 | and can use MEMTXATTRS_UNSPECIFIED. | ||
5 | 1 | ||
6 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
7 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | ||
8 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
9 | Message-id: 20180521140402.23318-7-peter.maydell@linaro.org | ||
10 | --- | ||
11 | exec.c | 15 ++++++++++----- | ||
12 | 1 file changed, 10 insertions(+), 5 deletions(-) | ||
13 | |||
14 | diff --git a/exec.c b/exec.c | ||
15 | index XXXXXXX..XXXXXXX 100644 | ||
16 | --- a/exec.c | ||
17 | +++ b/exec.c | ||
18 | @@ -XXX,XX +XXX,XX @@ bool address_space_access_valid(AddressSpace *as, hwaddr addr, | ||
19 | |||
20 | static hwaddr | ||
21 | flatview_extend_translation(FlatView *fv, hwaddr addr, | ||
22 | - hwaddr target_len, | ||
23 | - MemoryRegion *mr, hwaddr base, hwaddr len, | ||
24 | - bool is_write) | ||
25 | + hwaddr target_len, | ||
26 | + MemoryRegion *mr, hwaddr base, hwaddr len, | ||
27 | + bool is_write, MemTxAttrs attrs) | ||
28 | { | ||
29 | hwaddr done = 0; | ||
30 | hwaddr xlat; | ||
31 | @@ -XXX,XX +XXX,XX @@ void *address_space_map(AddressSpace *as, | ||
32 | |||
33 | memory_region_ref(mr); | ||
34 | *plen = flatview_extend_translation(fv, addr, len, mr, xlat, | ||
35 | - l, is_write); | ||
36 | + l, is_write, attrs); | ||
37 | ptr = qemu_ram_ptr_length(mr->ram_block, xlat, plen, true); | ||
38 | rcu_read_unlock(); | ||
39 | |||
40 | @@ -XXX,XX +XXX,XX @@ int64_t address_space_cache_init(MemoryRegionCache *cache, | ||
41 | mr = cache->mrs.mr; | ||
42 | memory_region_ref(mr); | ||
43 | if (memory_access_is_direct(mr, is_write)) { | ||
44 | + /* We don't care about the memory attributes here as we're only | ||
45 | + * doing this if we found actual RAM, which behaves the same | ||
46 | + * regardless of attributes; so UNSPECIFIED is fine. | ||
47 | + */ | ||
48 | l = flatview_extend_translation(cache->fv, addr, len, mr, | ||
49 | - cache->xlat, l, is_write); | ||
50 | + cache->xlat, l, is_write, | ||
51 | + MEMTXATTRS_UNSPECIFIED); | ||
52 | cache->ptr = qemu_ram_ptr_length(mr->ram_block, cache->xlat, &l, true); | ||
53 | } else { | ||
54 | cache->ptr = NULL; | ||
55 | -- | ||
56 | 2.17.1 | ||
57 | |||
58 | diff view generated by jsdifflib |
Deleted patch | |||
---|---|---|---|
1 | As part of plumbing MemTxAttrs down to the IOMMU translate method, | ||
2 | add MemTxAttrs as an argument to memory_region_access_valid(). | ||
3 | Its callers either have an attrs value to hand, or don't care | ||
4 | and can use MEMTXATTRS_UNSPECIFIED. | ||
5 | 1 | ||
6 | The callsite in flatview_access_valid() is part of a recursive | ||
7 | loop flatview_access_valid() -> memory_region_access_valid() -> | ||
8 | subpage_accepts() -> flatview_access_valid(); we make it pass | ||
9 | MEMTXATTRS_UNSPECIFIED for now, until the next several commits | ||
10 | have plumbed an attrs parameter through the rest of the loop | ||
11 | and we can add an attrs parameter to flatview_access_valid(). | ||
12 | |||
13 | Signed-off-by: Peter Maydell <peter.maydell@linaro.org> | ||
14 | Reviewed-by: Alex Bennée <alex.bennee@linaro.org> | ||
15 | Reviewed-by: Richard Henderson <richard.henderson@linaro.org> | ||
16 | Message-id: 20180521140402.23318-8-peter.maydell@linaro.org | ||
17 | --- | ||
18 | include/exec/memory-internal.h | 3 ++- | ||
19 | exec.c | 4 +++- | ||
20 | hw/s390x/s390-pci-inst.c | 3 ++- | ||
21 | memory.c | 7 ++++--- | ||
22 | 4 files changed, 11 insertions(+), 6 deletions(-) | ||
23 | |||
24 | diff --git a/include/exec/memory-internal.h b/include/exec/memory-internal.h | ||
25 | index XXXXXXX..XXXXXXX 100644 | ||
26 | --- a/include/exec/memory-internal.h | ||
27 | +++ b/include/exec/memory-internal.h | ||
28 | @@ -XXX,XX +XXX,XX @@ void flatview_unref(FlatView *view); | ||
29 | extern const MemoryRegionOps unassigned_mem_ops; | ||
30 | |||
31 | bool memory_region_access_valid(MemoryRegion *mr, hwaddr addr, | ||
32 | - unsigned size, bool is_write); | ||
33 | + unsigned size, bool is_write, | ||
34 | + MemTxAttrs attrs); | ||
35 | |||
36 | void flatview_add_to_dispatch(FlatView *fv, MemoryRegionSection *section); | ||
37 | AddressSpaceDispatch *address_space_dispatch_new(FlatView *fv); | ||
38 | diff --git a/exec.c b/exec.c | ||
39 | index XXXXXXX..XXXXXXX 100644 | ||
40 | --- a/exec.c | ||
41 | +++ b/exec.c | ||
42 | @@ -XXX,XX +XXX,XX @@ static bool flatview_access_valid(FlatView *fv, hwaddr addr, int len, | ||
43 | mr = flatview_translate(fv, addr, &xlat, &l, is_write); | ||
44 | if (!memory_access_is_direct(mr, is_write)) { | ||
45 | l = memory_access_size(mr, l, addr); | ||
46 | - if (!memory_region_access_valid(mr, xlat, l, is_write)) { | ||
47 | + /* When our callers all have attrs we'll pass them through here */ | ||
48 | + if (!memory_region_access_valid(mr, xlat, l, is_write, | ||
49 | + MEMTXATTRS_UNSPECIFIED)) { | ||
50 | return false; | ||
51 | } | ||
52 | } | ||
53 | diff --git a/hw/s390x/s390-pci-inst.c b/hw/s390x/s390-pci-inst.c | ||
54 | index XXXXXXX..XXXXXXX 100644 | ||
55 | --- a/hw/s390x/s390-pci-inst.c | ||
56 | +++ b/hw/s390x/s390-pci-inst.c | ||
57 | @@ -XXX,XX +XXX,XX @@ int pcistb_service_call(S390CPU *cpu, uint8_t r1, uint8_t r3, uint64_t gaddr, | ||
58 | mr = s390_get_subregion(mr, offset, len); | ||
59 | offset -= mr->addr; | ||
60 | |||
61 | - if (!memory_region_access_valid(mr, offset, len, true)) { | ||
62 | + if (!memory_region_access_valid(mr, offset, len, true, | ||
63 | + MEMTXATTRS_UNSPECIFIED)) { | ||
64 | s390_program_interrupt(env, PGM_OPERAND, 6, ra); | ||
65 | return 0; | ||
66 | } | ||
67 | diff --git a/memory.c b/memory.c | ||
68 | index XXXXXXX..XXXXXXX 100644 | ||
69 | --- a/memory.c | ||
70 | +++ b/memory.c | ||
71 | @@ -XXX,XX +XXX,XX @@ static const MemoryRegionOps ram_device_mem_ops = { | ||
72 | bool memory_region_access_valid(MemoryRegion *mr, | ||
73 | hwaddr addr, | ||
74 | unsigned size, | ||
75 | - bool is_write) | ||
76 | + bool is_write, | ||
77 | + MemTxAttrs attrs) | ||
78 | { | ||
79 | int access_size_min, access_size_max; | ||
80 | int access_size, i; | ||
81 | @@ -XXX,XX +XXX,XX @@ MemTxResult memory_region_dispatch_read(MemoryRegion *mr, | ||
82 | { | ||
83 | MemTxResult r; | ||
84 | |||
85 | - if (!memory_region_access_valid(mr, addr, size, false)) { | ||
86 | + if (!memory_region_access_valid(mr, addr, size, false, attrs)) { | ||
87 | *pval = unassigned_mem_read(mr, addr, size); | ||
88 | return MEMTX_DECODE_ERROR; | ||
89 | } | ||
90 | @@ -XXX,XX +XXX,XX @@ MemTxResult memory_region_dispatch_write(MemoryRegion *mr, | ||
91 | unsigned size, | ||
92 | MemTxAttrs attrs) | ||
93 | { | ||
94 | - if (!memory_region_access_valid(mr, addr, size, true)) { | ||
95 | + if (!memory_region_access_valid(mr, addr, size, true, attrs)) { | ||
96 | unassigned_mem_write(mr, addr, data, size); | ||
97 | return MEMTX_DECODE_ERROR; | ||
98 | } | ||
99 | -- | ||
100 | 2.17.1 | ||
101 | |||
102 | diff view generated by jsdifflib |