1
A last arm pullreq before rc0. This is mostly bug fixes,
1
Patches for rc1: nothing major, just some minor bugfixes and
2
though you could call adding the missing local timer
2
code cleanups.
3
support to bcm2836_control a new feature I suppose --
4
in any case it's a small and localised change.
5
3
6
thanks
7
-- PMM
4
-- PMM
8
5
9
The following changes since commit 7074ab12c81a1b2b1e0e1c40983f56b2c5ccc494:
6
The following changes since commit f7e1914adad8885a5d4c70239ab90d901ed97e9f:
10
7
11
Merge remote-tracking branch 'remotes/vivier2/tags/trivial-branch-pull-request' into staging (2019-03-14 16:19:37 +0000)
8
Merge remote-tracking branch 'remotes/alistair/tags/pull-riscv-to-apply-20201109' into staging (2020-11-10 09:24:56 +0000)
12
9
13
are available in the Git repository at:
10
are available in the Git repository at:
14
11
15
https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20190315
12
https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20201110
16
13
17
for you to fetch changes up to 5de56742a3c91de3d646326bec43a989bba83ca4:
14
for you to fetch changes up to b6c56c8a9a4064ea783f352f43c5df6231a110fa:
18
15
19
target/arm: Check access permission to ADDVL/ADDPL/RDVL (2019-03-15 11:12:29 +0000)
16
target/arm/translate-neon.c: Handle VTBL UNDEF case before VFP access check (2020-11-10 11:03:48 +0000)
20
17
21
----------------------------------------------------------------
18
----------------------------------------------------------------
22
target-arm queue:
19
target-arm queue:
23
* Add missing SVE-enabled check to ADDVL/ADDPL/RDVL
20
* hw/arm/Kconfig: ARM_V7M depends on PTIMER
24
* virt-acpi-build: use PCIE_MMCFG_BUS to retrieve end_bus_number
21
* Minor coding style fixes
25
* virt-acpi-build: Fix SMMUv3 GSIV values
22
* docs: add some notes on the sbsa-ref machine
26
* Allow EL0 to write to arch timer registers, not just read them
23
* hw/arm/virt: Remove dependency on Cortex-A15 MPCore peripherals
27
* bcm2836_control: Implement local timer
24
* target/arm: Fix neon VTBL/VTBX for len > 1
25
* hw/arm/armsse: Correct expansion MPC interrupt lines
26
* hw/misc/stm32f2xx_syscfg: Remove extraneous IRQ
27
* hw/arm/nseries: Remove invalid/unnecessary n8x0_uart_setup()
28
* hw/arm/musicpal: Don't connect two qemu_irqs directly to the same input
29
* hw/arm/musicpal: Only use qdev_get_gpio_in() when necessary
30
* hw/arm/nseries: Check return value from load_image_targphys()
31
* tests/qtest/npcm7xx_rng-test: count runs properly
32
* target/arm/translate-neon.c: Handle VTBL UNDEF case before VFP access check
28
33
29
----------------------------------------------------------------
34
----------------------------------------------------------------
30
Amir Charif (1):
35
Alex Bennée (1):
31
target/arm: Check access permission to ADDVL/ADDPL/RDVL
36
docs: add some notes on the sbsa-ref machine
32
37
33
Dongjiu Geng (1):
38
AlexChen (1):
34
target/arm: change arch timer registers access permission
39
ssi: Fix bad printf format specifiers
35
40
36
Eric Auger (1):
41
Andrew Jones (1):
37
hw/arm/virt-acpi-build: Fix SMMUv3 GSIV values
42
hw/arm/Kconfig: ARM_V7M depends on PTIMER
38
43
39
Wei Yang (1):
44
Havard Skinnemoen (1):
40
hw/arm/virt-acpi-build: use PCIE_MMCFG_BUS to retrieve end_bus_number
45
tests/qtest/npcm7xx_rng-test: count runs properly
41
46
42
Zoltán Baldaszti (1):
47
Peter Maydell (2):
43
hw/intc/bcm2836_control: Implement local timer
48
hw/arm/nseries: Check return value from load_image_targphys()
49
target/arm/translate-neon.c: Handle VTBL UNDEF case before VFP access check
44
50
45
include/hw/intc/bcm2836_control.h | 9 ++++
51
Philippe Mathieu-Daudé (6):
46
hw/arm/virt-acpi-build.c | 6 +--
52
hw/arm/virt: Remove dependency on Cortex-A15 MPCore peripherals
47
hw/intc/bcm2836_control.c | 101 +++++++++++++++++++++++++++++++++++++-
53
hw/arm/armsse: Correct expansion MPC interrupt lines
48
target/arm/helper.c | 30 +++++------
54
hw/misc/stm32f2xx_syscfg: Remove extraneous IRQ
49
target/arm/translate-sve.c | 22 ++++++---
55
hw/arm/nseries: Remove invalid/unnecessary n8x0_uart_setup()
50
5 files changed, 140 insertions(+), 28 deletions(-)
56
hw/arm/musicpal: Don't connect two qemu_irqs directly to the same input
57
hw/arm/musicpal: Only use qdev_get_gpio_in() when necessary
51
58
59
Richard Henderson (1):
60
target/arm: Fix neon VTBL/VTBX for len > 1
61
62
Xinhao Zhang (3):
63
target/arm: add spaces around operator
64
target/arm: Don't use '#' flag of printf format
65
target/arm: add space before the open parenthesis '('
66
67
docs/system/arm/sbsa.rst | 32 ++++++++++++++++++++++
68
docs/system/target-arm.rst | 1 +
69
include/hw/misc/stm32f2xx_syscfg.h | 2 --
70
target/arm/helper.h | 2 +-
71
hw/arm/armsse.c | 3 +-
72
hw/arm/musicpal.c | 40 +++++++++++++++++----------
73
hw/arm/nseries.c | 26 ++++++++----------
74
hw/arm/stm32f205_soc.c | 1 -
75
hw/misc/stm32f2xx_syscfg.c | 2 --
76
hw/ssi/imx_spi.c | 2 +-
77
hw/ssi/xilinx_spi.c | 2 +-
78
target/arm/arch_dump.c | 8 +++---
79
target/arm/arm-semi.c | 8 +++---
80
target/arm/helper.c | 2 +-
81
target/arm/op_helper.c | 23 +++++++++-------
82
target/arm/translate-a64.c | 4 +--
83
target/arm/translate.c | 2 +-
84
tests/qtest/npcm7xx_rng-test.c | 2 +-
85
hw/arm/Kconfig | 3 +-
86
target/arm/translate-neon.c.inc | 56 ++++++++++++++------------------------
87
20 files changed, 123 insertions(+), 98 deletions(-)
88
create mode 100644 docs/system/arm/sbsa.rst
89
diff view generated by jsdifflib
New patch
1
From: Andrew Jones <drjones@redhat.com>
1
2
3
commit 32bd322a0134 ("hw/timer/armv7m_systick: Rewrite to use ptimers")
4
changed armv7m_systick to build on ptimers. Make sure we have ptimers
5
in the build when building armv7m_systick.
6
7
Signed-off-by: Andrew Jones <drjones@redhat.com>
8
Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>
9
Message-id: 20201104103343.30392-1-drjones@redhat.com
10
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
11
---
12
hw/arm/Kconfig | 1 +
13
1 file changed, 1 insertion(+)
14
15
diff --git a/hw/arm/Kconfig b/hw/arm/Kconfig
16
index XXXXXXX..XXXXXXX 100644
17
--- a/hw/arm/Kconfig
18
+++ b/hw/arm/Kconfig
19
@@ -XXX,XX +XXX,XX @@ config ZYNQ
20
21
config ARM_V7M
22
bool
23
+ select PTIMER
24
25
config ALLWINNER_A10
26
bool
27
--
28
2.20.1
29
30
diff view generated by jsdifflib
New patch
1
From: AlexChen <alex.chen@huawei.com>
1
2
3
We should use printf format specifier "%u" instead of "%d" for
4
argument of type "unsigned int".
5
6
Reported-by: Euler Robot <euler.robot@huawei.com>
7
Signed-off-by: Alex Chen <alex.chen@huawei.com>
8
Reviewed-by: Alistair Francis <alistair.francis@wdc.com>
9
Message-id: 5FA280F5.8060902@huawei.com
10
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
11
---
12
hw/ssi/imx_spi.c | 2 +-
13
hw/ssi/xilinx_spi.c | 2 +-
14
2 files changed, 2 insertions(+), 2 deletions(-)
15
16
diff --git a/hw/ssi/imx_spi.c b/hw/ssi/imx_spi.c
17
index XXXXXXX..XXXXXXX 100644
18
--- a/hw/ssi/imx_spi.c
19
+++ b/hw/ssi/imx_spi.c
20
@@ -XXX,XX +XXX,XX @@ static const char *imx_spi_reg_name(uint32_t reg)
21
case ECSPI_MSGDATA:
22
return "ECSPI_MSGDATA";
23
default:
24
- sprintf(unknown, "%d ?", reg);
25
+ sprintf(unknown, "%u ?", reg);
26
return unknown;
27
}
28
}
29
diff --git a/hw/ssi/xilinx_spi.c b/hw/ssi/xilinx_spi.c
30
index XXXXXXX..XXXXXXX 100644
31
--- a/hw/ssi/xilinx_spi.c
32
+++ b/hw/ssi/xilinx_spi.c
33
@@ -XXX,XX +XXX,XX @@ static void xlx_spi_update_irq(XilinxSPI *s)
34
irq chain unless things really changed. */
35
if (pending != s->irqline) {
36
s->irqline = pending;
37
- DB_PRINT("irq_change of state %d ISR:%x IER:%X\n",
38
+ DB_PRINT("irq_change of state %u ISR:%x IER:%X\n",
39
pending, s->regs[R_IPISR], s->regs[R_IPIER]);
40
qemu_set_irq(s->irq, pending);
41
}
42
--
43
2.20.1
44
45
diff view generated by jsdifflib
1
From: Dongjiu Geng <gengdongjiu@huawei.com>
1
From: Xinhao Zhang <zhangxinhao1@huawei.com>
2
2
3
Some generic arch timer registers are Config-RW in the EL0,
3
Fix code style. Operator needs spaces both sides.
4
which means the EL0 exception level can have write permission
5
if it is appropriately configured.
6
4
7
When VM access registers, QEMU firstly checks whether they have RW
5
Signed-off-by: Xinhao Zhang <zhangxinhao1@huawei.com>
8
permission, then check whether it is appropriately configured.
6
Signed-off-by: Kai Deng <dengkai1@huawei.com>
9
If they are defined to read only in EL0, even though they have been
7
Message-id: 20201103114529.638233-1-zhangxinhao1@huawei.com
10
appropriately configured, they still do not have write permission.
11
So need to add the write permission according to ARMV8 spec when
12
define it.
13
14
Signed-off-by: Dongjiu Geng <gengdongjiu@huawei.com>
15
Message-id: 1552395177-12608-1-git-send-email-gengdongjiu@huawei.com
16
Reviewed-by: Richard Henderson <richard.henderson@linaro.org>
17
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
8
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
18
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
9
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
19
---
10
---
20
target/arm/helper.c | 30 +++++++++++++++---------------
11
target/arm/arch_dump.c | 8 ++++----
21
1 file changed, 15 insertions(+), 15 deletions(-)
12
target/arm/arm-semi.c | 8 ++++----
13
target/arm/helper.c | 2 +-
14
3 files changed, 9 insertions(+), 9 deletions(-)
22
15
16
diff --git a/target/arm/arch_dump.c b/target/arm/arch_dump.c
17
index XXXXXXX..XXXXXXX 100644
18
--- a/target/arm/arch_dump.c
19
+++ b/target/arm/arch_dump.c
20
@@ -XXX,XX +XXX,XX @@ static int aarch64_write_elf64_prfpreg(WriteCoreDumpFunction f,
21
22
for (i = 0; i < 32; ++i) {
23
uint64_t *q = aa64_vfp_qreg(env, i);
24
- note.vfp.vregs[2*i + 0] = cpu_to_dump64(s, q[0]);
25
- note.vfp.vregs[2*i + 1] = cpu_to_dump64(s, q[1]);
26
+ note.vfp.vregs[2 * i + 0] = cpu_to_dump64(s, q[0]);
27
+ note.vfp.vregs[2 * i + 1] = cpu_to_dump64(s, q[1]);
28
}
29
30
if (s->dump_info.d_endian == ELFDATA2MSB) {
31
@@ -XXX,XX +XXX,XX @@ static int aarch64_write_elf64_prfpreg(WriteCoreDumpFunction f,
32
*/
33
for (i = 0; i < 32; ++i) {
34
uint64_t tmp = note.vfp.vregs[2*i];
35
- note.vfp.vregs[2*i] = note.vfp.vregs[2*i+1];
36
- note.vfp.vregs[2*i+1] = tmp;
37
+ note.vfp.vregs[2 * i] = note.vfp.vregs[2 * i + 1];
38
+ note.vfp.vregs[2 * i + 1] = tmp;
39
}
40
}
41
42
diff --git a/target/arm/arm-semi.c b/target/arm/arm-semi.c
43
index XXXXXXX..XXXXXXX 100644
44
--- a/target/arm/arm-semi.c
45
+++ b/target/arm/arm-semi.c
46
@@ -XXX,XX +XXX,XX @@ target_ulong do_arm_semihosting(CPUARMState *env)
47
if (use_gdb_syscalls()) {
48
arm_semi_open_guestfd = guestfd;
49
ret = arm_gdb_syscall(cpu, arm_semi_open_cb, "open,%s,%x,1a4", arg0,
50
- (int)arg2+1, gdb_open_modeflags[arg1]);
51
+ (int)arg2 + 1, gdb_open_modeflags[arg1]);
52
} else {
53
ret = set_swi_errno(env, open(s, open_modeflags[arg1], 0644));
54
if (ret == (uint32_t)-1) {
55
@@ -XXX,XX +XXX,XX @@ target_ulong do_arm_semihosting(CPUARMState *env)
56
GET_ARG(1);
57
if (use_gdb_syscalls()) {
58
ret = arm_gdb_syscall(cpu, arm_semi_cb, "unlink,%s",
59
- arg0, (int)arg1+1);
60
+ arg0, (int)arg1 + 1);
61
} else {
62
s = lock_user_string(arg0);
63
if (!s) {
64
@@ -XXX,XX +XXX,XX @@ target_ulong do_arm_semihosting(CPUARMState *env)
65
GET_ARG(3);
66
if (use_gdb_syscalls()) {
67
return arm_gdb_syscall(cpu, arm_semi_cb, "rename,%s,%s",
68
- arg0, (int)arg1+1, arg2, (int)arg3+1);
69
+ arg0, (int)arg1 + 1, arg2, (int)arg3 + 1);
70
} else {
71
char *s2;
72
s = lock_user_string(arg0);
73
@@ -XXX,XX +XXX,XX @@ target_ulong do_arm_semihosting(CPUARMState *env)
74
GET_ARG(1);
75
if (use_gdb_syscalls()) {
76
return arm_gdb_syscall(cpu, arm_semi_cb, "system,%s",
77
- arg0, (int)arg1+1);
78
+ arg0, (int)arg1 + 1);
79
} else {
80
s = lock_user_string(arg0);
81
if (!s) {
23
diff --git a/target/arm/helper.c b/target/arm/helper.c
82
diff --git a/target/arm/helper.c b/target/arm/helper.c
24
index XXXXXXX..XXXXXXX 100644
83
index XXXXXXX..XXXXXXX 100644
25
--- a/target/arm/helper.c
84
--- a/target/arm/helper.c
26
+++ b/target/arm/helper.c
85
+++ b/target/arm/helper.c
27
@@ -XXX,XX +XXX,XX @@ static const ARMCPRegInfo generic_timer_cp_reginfo[] = {
86
@@ -XXX,XX +XXX,XX @@ uint32_t HELPER(usad8)(uint32_t a, uint32_t b)
28
/* per-timer control */
87
uint32_t sum;
29
{ .name = "CNTP_CTL", .cp = 15, .crn = 14, .crm = 2, .opc1 = 0, .opc2 = 1,
88
sum = do_usad(a, b);
30
.secure = ARM_CP_SECSTATE_NS,
89
sum += do_usad(a >> 8, b >> 8);
31
- .type = ARM_CP_IO | ARM_CP_ALIAS, .access = PL1_RW | PL0_R,
90
- sum += do_usad(a >> 16, b >>16);
32
+ .type = ARM_CP_IO | ARM_CP_ALIAS, .access = PL0_RW,
91
+ sum += do_usad(a >> 16, b >> 16);
33
.accessfn = gt_ptimer_access,
92
sum += do_usad(a >> 24, b >> 24);
34
.fieldoffset = offsetoflow32(CPUARMState,
93
return sum;
35
cp15.c14_timer[GTIMER_PHYS].ctl),
94
}
36
@@ -XXX,XX +XXX,XX @@ static const ARMCPRegInfo generic_timer_cp_reginfo[] = {
37
{ .name = "CNTP_CTL_S",
38
.cp = 15, .crn = 14, .crm = 2, .opc1 = 0, .opc2 = 1,
39
.secure = ARM_CP_SECSTATE_S,
40
- .type = ARM_CP_IO | ARM_CP_ALIAS, .access = PL1_RW | PL0_R,
41
+ .type = ARM_CP_IO | ARM_CP_ALIAS, .access = PL0_RW,
42
.accessfn = gt_ptimer_access,
43
.fieldoffset = offsetoflow32(CPUARMState,
44
cp15.c14_timer[GTIMER_SEC].ctl),
45
@@ -XXX,XX +XXX,XX @@ static const ARMCPRegInfo generic_timer_cp_reginfo[] = {
46
},
47
{ .name = "CNTP_CTL_EL0", .state = ARM_CP_STATE_AA64,
48
.opc0 = 3, .opc1 = 3, .crn = 14, .crm = 2, .opc2 = 1,
49
- .type = ARM_CP_IO, .access = PL1_RW | PL0_R,
50
+ .type = ARM_CP_IO, .access = PL0_RW,
51
.accessfn = gt_ptimer_access,
52
.fieldoffset = offsetof(CPUARMState, cp15.c14_timer[GTIMER_PHYS].ctl),
53
.resetvalue = 0,
54
.writefn = gt_phys_ctl_write, .raw_writefn = raw_write,
55
},
56
{ .name = "CNTV_CTL", .cp = 15, .crn = 14, .crm = 3, .opc1 = 0, .opc2 = 1,
57
- .type = ARM_CP_IO | ARM_CP_ALIAS, .access = PL1_RW | PL0_R,
58
+ .type = ARM_CP_IO | ARM_CP_ALIAS, .access = PL0_RW,
59
.accessfn = gt_vtimer_access,
60
.fieldoffset = offsetoflow32(CPUARMState,
61
cp15.c14_timer[GTIMER_VIRT].ctl),
62
@@ -XXX,XX +XXX,XX @@ static const ARMCPRegInfo generic_timer_cp_reginfo[] = {
63
},
64
{ .name = "CNTV_CTL_EL0", .state = ARM_CP_STATE_AA64,
65
.opc0 = 3, .opc1 = 3, .crn = 14, .crm = 3, .opc2 = 1,
66
- .type = ARM_CP_IO, .access = PL1_RW | PL0_R,
67
+ .type = ARM_CP_IO, .access = PL0_RW,
68
.accessfn = gt_vtimer_access,
69
.fieldoffset = offsetof(CPUARMState, cp15.c14_timer[GTIMER_VIRT].ctl),
70
.resetvalue = 0,
71
@@ -XXX,XX +XXX,XX @@ static const ARMCPRegInfo generic_timer_cp_reginfo[] = {
72
/* TimerValue views: a 32 bit downcounting view of the underlying state */
73
{ .name = "CNTP_TVAL", .cp = 15, .crn = 14, .crm = 2, .opc1 = 0, .opc2 = 0,
74
.secure = ARM_CP_SECSTATE_NS,
75
- .type = ARM_CP_NO_RAW | ARM_CP_IO, .access = PL1_RW | PL0_R,
76
+ .type = ARM_CP_NO_RAW | ARM_CP_IO, .access = PL0_RW,
77
.accessfn = gt_ptimer_access,
78
.readfn = gt_phys_tval_read, .writefn = gt_phys_tval_write,
79
},
80
{ .name = "CNTP_TVAL_S",
81
.cp = 15, .crn = 14, .crm = 2, .opc1 = 0, .opc2 = 0,
82
.secure = ARM_CP_SECSTATE_S,
83
- .type = ARM_CP_NO_RAW | ARM_CP_IO, .access = PL1_RW | PL0_R,
84
+ .type = ARM_CP_NO_RAW | ARM_CP_IO, .access = PL0_RW,
85
.accessfn = gt_ptimer_access,
86
.readfn = gt_sec_tval_read, .writefn = gt_sec_tval_write,
87
},
88
{ .name = "CNTP_TVAL_EL0", .state = ARM_CP_STATE_AA64,
89
.opc0 = 3, .opc1 = 3, .crn = 14, .crm = 2, .opc2 = 0,
90
- .type = ARM_CP_NO_RAW | ARM_CP_IO, .access = PL1_RW | PL0_R,
91
+ .type = ARM_CP_NO_RAW | ARM_CP_IO, .access = PL0_RW,
92
.accessfn = gt_ptimer_access, .resetfn = gt_phys_timer_reset,
93
.readfn = gt_phys_tval_read, .writefn = gt_phys_tval_write,
94
},
95
{ .name = "CNTV_TVAL", .cp = 15, .crn = 14, .crm = 3, .opc1 = 0, .opc2 = 0,
96
- .type = ARM_CP_NO_RAW | ARM_CP_IO, .access = PL1_RW | PL0_R,
97
+ .type = ARM_CP_NO_RAW | ARM_CP_IO, .access = PL0_RW,
98
.accessfn = gt_vtimer_access,
99
.readfn = gt_virt_tval_read, .writefn = gt_virt_tval_write,
100
},
101
{ .name = "CNTV_TVAL_EL0", .state = ARM_CP_STATE_AA64,
102
.opc0 = 3, .opc1 = 3, .crn = 14, .crm = 3, .opc2 = 0,
103
- .type = ARM_CP_NO_RAW | ARM_CP_IO, .access = PL1_RW | PL0_R,
104
+ .type = ARM_CP_NO_RAW | ARM_CP_IO, .access = PL0_RW,
105
.accessfn = gt_vtimer_access, .resetfn = gt_virt_timer_reset,
106
.readfn = gt_virt_tval_read, .writefn = gt_virt_tval_write,
107
},
108
@@ -XXX,XX +XXX,XX @@ static const ARMCPRegInfo generic_timer_cp_reginfo[] = {
109
/* Comparison value, indicating when the timer goes off */
110
{ .name = "CNTP_CVAL", .cp = 15, .crm = 14, .opc1 = 2,
111
.secure = ARM_CP_SECSTATE_NS,
112
- .access = PL1_RW | PL0_R,
113
+ .access = PL0_RW,
114
.type = ARM_CP_64BIT | ARM_CP_IO | ARM_CP_ALIAS,
115
.fieldoffset = offsetof(CPUARMState, cp15.c14_timer[GTIMER_PHYS].cval),
116
.accessfn = gt_ptimer_access,
117
@@ -XXX,XX +XXX,XX @@ static const ARMCPRegInfo generic_timer_cp_reginfo[] = {
118
},
119
{ .name = "CNTP_CVAL_S", .cp = 15, .crm = 14, .opc1 = 2,
120
.secure = ARM_CP_SECSTATE_S,
121
- .access = PL1_RW | PL0_R,
122
+ .access = PL0_RW,
123
.type = ARM_CP_64BIT | ARM_CP_IO | ARM_CP_ALIAS,
124
.fieldoffset = offsetof(CPUARMState, cp15.c14_timer[GTIMER_SEC].cval),
125
.accessfn = gt_ptimer_access,
126
@@ -XXX,XX +XXX,XX @@ static const ARMCPRegInfo generic_timer_cp_reginfo[] = {
127
},
128
{ .name = "CNTP_CVAL_EL0", .state = ARM_CP_STATE_AA64,
129
.opc0 = 3, .opc1 = 3, .crn = 14, .crm = 2, .opc2 = 2,
130
- .access = PL1_RW | PL0_R,
131
+ .access = PL0_RW,
132
.type = ARM_CP_IO,
133
.fieldoffset = offsetof(CPUARMState, cp15.c14_timer[GTIMER_PHYS].cval),
134
.resetvalue = 0, .accessfn = gt_ptimer_access,
135
.writefn = gt_phys_cval_write, .raw_writefn = raw_write,
136
},
137
{ .name = "CNTV_CVAL", .cp = 15, .crm = 14, .opc1 = 3,
138
- .access = PL1_RW | PL0_R,
139
+ .access = PL0_RW,
140
.type = ARM_CP_64BIT | ARM_CP_IO | ARM_CP_ALIAS,
141
.fieldoffset = offsetof(CPUARMState, cp15.c14_timer[GTIMER_VIRT].cval),
142
.accessfn = gt_vtimer_access,
143
@@ -XXX,XX +XXX,XX @@ static const ARMCPRegInfo generic_timer_cp_reginfo[] = {
144
},
145
{ .name = "CNTV_CVAL_EL0", .state = ARM_CP_STATE_AA64,
146
.opc0 = 3, .opc1 = 3, .crn = 14, .crm = 3, .opc2 = 2,
147
- .access = PL1_RW | PL0_R,
148
+ .access = PL0_RW,
149
.type = ARM_CP_IO,
150
.fieldoffset = offsetof(CPUARMState, cp15.c14_timer[GTIMER_VIRT].cval),
151
.resetvalue = 0, .accessfn = gt_vtimer_access,
152
--
95
--
153
2.20.1
96
2.20.1
154
97
155
98
diff view generated by jsdifflib
1
From: Wei Yang <richardw.yang@linux.intel.com>
1
From: Xinhao Zhang <zhangxinhao1@huawei.com>
2
2
3
This is more proper to use PCIE_MMCFG_BUS to retrieve end_bus_number.
3
Fix code style. Don't use '#' flag of printf format ('%#') in
4
format strings, use '0x' prefix instead
4
5
5
Signed-off-by: Wei Yang <richardw.yang@linux.intel.com>
6
Signed-off-by: Xinhao Zhang <zhangxinhao1@huawei.com>
6
Reviewed-by: Eric Auger <eric.auger@redhat.com>
7
Signed-off-by: Kai Deng <dengkai1@huawei.com>
7
Reviewed-by: Igor Mammedov <imammedo@redhat.com>
8
Message-id: 20201103114529.638233-2-zhangxinhao1@huawei.com
8
Message-id: 20190312074953.16671-1-richardw.yang@linux.intel.com
9
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
9
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
10
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
10
---
11
---
11
hw/arm/virt-acpi-build.c | 4 ++--
12
target/arm/translate-a64.c | 4 ++--
12
1 file changed, 2 insertions(+), 2 deletions(-)
13
1 file changed, 2 insertions(+), 2 deletions(-)
13
14
14
diff --git a/hw/arm/virt-acpi-build.c b/hw/arm/virt-acpi-build.c
15
diff --git a/target/arm/translate-a64.c b/target/arm/translate-a64.c
15
index XXXXXXX..XXXXXXX 100644
16
index XXXXXXX..XXXXXXX 100644
16
--- a/hw/arm/virt-acpi-build.c
17
--- a/target/arm/translate-a64.c
17
+++ b/hw/arm/virt-acpi-build.c
18
+++ b/target/arm/translate-a64.c
18
@@ -XXX,XX +XXX,XX @@ build_mcfg(GArray *table_data, BIOSLinker *linker, VirtMachineState *vms)
19
@@ -XXX,XX +XXX,XX @@ static void disas_simd_three_reg_same_fp16(DisasContext *s, uint32_t insn)
19
/* Only a single allocation so no need to play with segments */
20
gen_helper_advsimd_acgt_f16(tcg_res, tcg_op1, tcg_op2, fpst);
20
mcfg->allocation[0].pci_segment = cpu_to_le16(0);
21
break;
21
mcfg->allocation[0].start_bus_number = 0;
22
default:
22
- mcfg->allocation[0].end_bus_number = (memmap[ecam_id].size
23
- fprintf(stderr, "%s: insn %#04x, fpop %#2x @ %#" PRIx64 "\n",
23
- / PCIE_MMCFG_SIZE_MIN) - 1;
24
+ fprintf(stderr, "%s: insn 0x%04x, fpop 0x%2x @ 0x%" PRIx64 "\n",
24
+ mcfg->allocation[0].end_bus_number =
25
__func__, insn, fpopcode, s->pc_curr);
25
+ PCIE_MMCFG_BUS(memmap[ecam_id].size - 1);
26
g_assert_not_reached();
26
27
}
27
build_header(linker, table_data, (void *)(table_data->data + mcfg_start),
28
@@ -XXX,XX +XXX,XX @@ static void disas_simd_two_reg_misc_fp16(DisasContext *s, uint32_t insn)
28
"MCFG", table_data->len - mcfg_start, 1, NULL, NULL);
29
case 0x7f: /* FSQRT (vector) */
30
break;
31
default:
32
- fprintf(stderr, "%s: insn %#04x fpop %#2x\n", __func__, insn, fpop);
33
+ fprintf(stderr, "%s: insn 0x%04x fpop 0x%2x\n", __func__, insn, fpop);
34
g_assert_not_reached();
35
}
36
29
--
37
--
30
2.20.1
38
2.20.1
31
39
32
40
diff view generated by jsdifflib
New patch
1
From: Xinhao Zhang <zhangxinhao1@huawei.com>
1
2
3
Fix code style. Space required before the open parenthesis '('.
4
5
Signed-off-by: Xinhao Zhang <zhangxinhao1@huawei.com>
6
Signed-off-by: Kai Deng <dengkai1@huawei.com>
7
Message-id: 20201103114529.638233-3-zhangxinhao1@huawei.com
8
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
9
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
10
---
11
target/arm/translate.c | 2 +-
12
1 file changed, 1 insertion(+), 1 deletion(-)
13
14
diff --git a/target/arm/translate.c b/target/arm/translate.c
15
index XXXXXXX..XXXXXXX 100644
16
--- a/target/arm/translate.c
17
+++ b/target/arm/translate.c
18
@@ -XXX,XX +XXX,XX @@ static void arm_tr_tb_stop(DisasContextBase *dcbase, CPUState *cpu)
19
- Hardware watchpoints.
20
Hardware breakpoints have already been handled and skip this code.
21
*/
22
- switch(dc->base.is_jmp) {
23
+ switch (dc->base.is_jmp) {
24
case DISAS_NEXT:
25
case DISAS_TOO_MANY:
26
gen_goto_tb(dc, 1, dc->base.pc_next);
27
--
28
2.20.1
29
30
diff view generated by jsdifflib
New patch
1
From: Alex Bennée <alex.bennee@linaro.org>
1
2
3
We should at least document what this machine is about.
4
5
Reviewed-by: Graeme Gregory <graeme@nuviainc.com>
6
Signed-off-by: Alex Bennée <alex.bennee@linaro.org>
7
Message-id: 20201104165254.24822-1-alex.bennee@linaro.org
8
Cc: Leif Lindholm <leif@nuviainc.com>
9
Cc: Shashi Mallela <shashi.mallela@linaro.org>
10
Signed-off-by: Alex Bennée <alex.bennee@linaro.org>
11
[PMM: fixed filename mismatch]
12
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
13
---
14
docs/system/arm/sbsa.rst | 32 ++++++++++++++++++++++++++++++++
15
docs/system/target-arm.rst | 1 +
16
2 files changed, 33 insertions(+)
17
create mode 100644 docs/system/arm/sbsa.rst
18
19
diff --git a/docs/system/arm/sbsa.rst b/docs/system/arm/sbsa.rst
20
new file mode 100644
21
index XXXXXXX..XXXXXXX
22
--- /dev/null
23
+++ b/docs/system/arm/sbsa.rst
24
@@ -XXX,XX +XXX,XX @@
25
+Arm Server Base System Architecture Reference board (``sbsa-ref``)
26
+==================================================================
27
+
28
+While the `virt` board is a generic board platform that doesn't match
29
+any real hardware the `sbsa-ref` board intends to look like real
30
+hardware. The `Server Base System Architecture
31
+<https://developer.arm.com/documentation/den0029/latest>` defines a
32
+minimum base line of hardware support and importantly how the firmware
33
+reports that to any operating system. It is a static system that
34
+reports a very minimal DT to the firmware for non-discoverable
35
+information about components affected by the qemu command line (i.e.
36
+cpus and memory). As a result it must have a firmware specifically
37
+built to expect a certain hardware layout (as you would in a real
38
+machine).
39
+
40
+It is intended to be a machine for developing firmware and testing
41
+standards compliance with operating systems.
42
+
43
+Supported devices
44
+"""""""""""""""""
45
+
46
+The sbsa-ref board supports:
47
+
48
+ - A configurable number of AArch64 CPUs
49
+ - GIC version 3
50
+ - System bus AHCI controller
51
+ - System bus EHCI controller
52
+ - CDROM and hard disc on AHCI bus
53
+ - E1000E ethernet card on PCIe bus
54
+ - VGA display adaptor on PCIe bus
55
+ - A generic SBSA watchdog device
56
+
57
diff --git a/docs/system/target-arm.rst b/docs/system/target-arm.rst
58
index XXXXXXX..XXXXXXX 100644
59
--- a/docs/system/target-arm.rst
60
+++ b/docs/system/target-arm.rst
61
@@ -XXX,XX +XXX,XX @@ undocumented; you can get a complete list by running
62
arm/mps2
63
arm/musca
64
arm/realview
65
+ arm/sbsa
66
arm/versatile
67
arm/vexpress
68
arm/aspeed
69
--
70
2.20.1
71
72
diff view generated by jsdifflib
New patch
1
From: Philippe Mathieu-Daudé <philmd@redhat.com>
1
2
3
When using a Cortex-A15, the Virt machine does not use any
4
MPCore peripherals. Remove the dependency.
5
6
Fixes: 7951c7b7c05 ("hw/arm: Express dependencies of the virt machine with Kconfig")
7
Reported-by: Miroslav Rezanina <mrezanin@redhat.com>
8
Signed-off-by: Philippe Mathieu-Daudé <philmd@redhat.com>
9
Message-id: 20201107114852.271922-1-philmd@redhat.com
10
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
11
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
12
---
13
hw/arm/Kconfig | 1 -
14
1 file changed, 1 deletion(-)
15
16
diff --git a/hw/arm/Kconfig b/hw/arm/Kconfig
17
index XXXXXXX..XXXXXXX 100644
18
--- a/hw/arm/Kconfig
19
+++ b/hw/arm/Kconfig
20
@@ -XXX,XX +XXX,XX @@ config ARM_VIRT
21
imply VFIO_PLATFORM
22
imply VFIO_XGMAC
23
imply TPM_TIS_SYSBUS
24
- select A15MPCORE
25
select ACPI
26
select ARM_SMMUV3
27
select GPIO_KEY
28
--
29
2.20.1
30
31
diff view generated by jsdifflib
1
From: Amir Charif <amir.charif@cea.fr>
1
From: Richard Henderson <richard.henderson@linaro.org>
2
2
3
These instructions do not trap when SVE is disabled in EL0,
3
The helper function did not get updated when we reorganized
4
causing them to be executed with wrong size information.
4
the vector register file for SVE. Since then, the neon dregs
5
are non-sequential and cannot be simply indexed.
5
6
6
Signed-off-by: Amir Charif <amir.charif@cea.fr>
7
At the same time, make the helper function operate on 64-bit
7
Message-id: 1552579248-31025-1-git-send-email-amir.charif@cea.fr
8
quantities so that we do not have to call it twice.
8
Reviewed-by: Richard Henderson <richard.henderson@linaro.org>
9
10
Fixes: c39c2b9043e
11
Reported-by: Ard Biesheuvel <ardb@kernel.org>
12
Signed-off-by: Richard Henderson <richard.henderson@linaro.org>
13
[PMM: use aa32_vfp_dreg() rather than opencoding]
14
Message-id: 20201105171126.88014-1-richard.henderson@linaro.org
9
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
15
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
10
[PMM: added 'target/arm' prefix to subject]
11
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
16
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
12
---
17
---
13
target/arm/translate-sve.c | 22 ++++++++++++++--------
18
target/arm/helper.h | 2 +-
14
1 file changed, 14 insertions(+), 8 deletions(-)
19
target/arm/op_helper.c | 23 +++++++++--------
20
target/arm/translate-neon.c.inc | 44 +++++++++++----------------------
21
3 files changed, 29 insertions(+), 40 deletions(-)
15
22
16
diff --git a/target/arm/translate-sve.c b/target/arm/translate-sve.c
23
diff --git a/target/arm/helper.h b/target/arm/helper.h
17
index XXXXXXX..XXXXXXX 100644
24
index XXXXXXX..XXXXXXX 100644
18
--- a/target/arm/translate-sve.c
25
--- a/target/arm/helper.h
19
+++ b/target/arm/translate-sve.c
26
+++ b/target/arm/helper.h
20
@@ -XXX,XX +XXX,XX @@ static bool trans_INDEX_rr(DisasContext *s, arg_INDEX_rr *a)
27
@@ -XXX,XX +XXX,XX @@ DEF_HELPER_FLAGS_2(rsqrte_f32, TCG_CALL_NO_RWG, f32, f32, ptr)
21
28
DEF_HELPER_FLAGS_2(rsqrte_f64, TCG_CALL_NO_RWG, f64, f64, ptr)
22
static bool trans_ADDVL(DisasContext *s, arg_ADDVL *a)
29
DEF_HELPER_FLAGS_1(recpe_u32, TCG_CALL_NO_RWG, i32, i32)
30
DEF_HELPER_FLAGS_1(rsqrte_u32, TCG_CALL_NO_RWG, i32, i32)
31
-DEF_HELPER_FLAGS_4(neon_tbl, TCG_CALL_NO_RWG, i32, i32, i32, ptr, i32)
32
+DEF_HELPER_FLAGS_4(neon_tbl, TCG_CALL_NO_RWG, i64, env, i32, i64, i64)
33
34
DEF_HELPER_3(shl_cc, i32, env, i32, i32)
35
DEF_HELPER_3(shr_cc, i32, env, i32, i32)
36
diff --git a/target/arm/op_helper.c b/target/arm/op_helper.c
37
index XXXXXXX..XXXXXXX 100644
38
--- a/target/arm/op_helper.c
39
+++ b/target/arm/op_helper.c
40
@@ -XXX,XX +XXX,XX @@ void raise_exception_ra(CPUARMState *env, uint32_t excp, uint32_t syndrome,
41
cpu_loop_exit_restore(cs, ra);
42
}
43
44
-uint32_t HELPER(neon_tbl)(uint32_t ireg, uint32_t def, void *vn,
45
- uint32_t maxindex)
46
+uint64_t HELPER(neon_tbl)(CPUARMState *env, uint32_t desc,
47
+ uint64_t ireg, uint64_t def)
23
{
48
{
24
- TCGv_i64 rd = cpu_reg_sp(s, a->rd);
49
- uint32_t val, shift;
25
- TCGv_i64 rn = cpu_reg_sp(s, a->rn);
50
- uint64_t *table = vn;
26
- tcg_gen_addi_i64(rd, rn, a->imm * vec_full_reg_size(s));
51
+ uint64_t tmp, val = 0;
27
+ if (sve_access_check(s)) {
52
+ uint32_t maxindex = ((desc & 3) + 1) * 8;
28
+ TCGv_i64 rd = cpu_reg_sp(s, a->rd);
53
+ uint32_t base_reg = desc >> 2;
29
+ TCGv_i64 rn = cpu_reg_sp(s, a->rn);
54
+ uint32_t shift, index, reg;
30
+ tcg_gen_addi_i64(rd, rn, a->imm * vec_full_reg_size(s));
55
31
+ }
56
- val = 0;
57
- for (shift = 0; shift < 32; shift += 8) {
58
- uint32_t index = (ireg >> shift) & 0xff;
59
+ for (shift = 0; shift < 64; shift += 8) {
60
+ index = (ireg >> shift) & 0xff;
61
if (index < maxindex) {
62
- uint32_t tmp = (table[index >> 3] >> ((index & 7) << 3)) & 0xff;
63
- val |= tmp << shift;
64
+ reg = base_reg + (index >> 3);
65
+ tmp = *aa32_vfp_dreg(env, reg);
66
+ tmp = ((tmp >> ((index & 7) << 3)) & 0xff) << shift;
67
} else {
68
- val |= def & (0xff << shift);
69
+ tmp = def & (0xffull << shift);
70
}
71
+ val |= tmp;
72
}
73
return val;
74
}
75
diff --git a/target/arm/translate-neon.c.inc b/target/arm/translate-neon.c.inc
76
index XXXXXXX..XXXXXXX 100644
77
--- a/target/arm/translate-neon.c.inc
78
+++ b/target/arm/translate-neon.c.inc
79
@@ -XXX,XX +XXX,XX @@ static bool trans_VEXT(DisasContext *s, arg_VEXT *a)
80
81
static bool trans_VTBL(DisasContext *s, arg_VTBL *a)
82
{
83
- int n;
84
- TCGv_i32 tmp, tmp2, tmp3, tmp4;
85
- TCGv_ptr ptr1;
86
+ TCGv_i64 val, def;
87
+ TCGv_i32 desc;
88
89
if (!arm_dc_feature(s, ARM_FEATURE_NEON)) {
90
return false;
91
@@ -XXX,XX +XXX,XX @@ static bool trans_VTBL(DisasContext *s, arg_VTBL *a)
92
return true;
93
}
94
95
- n = a->len + 1;
96
- if ((a->vn + n) > 32) {
97
+ if ((a->vn + a->len + 1) > 32) {
98
/*
99
* This is UNPREDICTABLE; we choose to UNDEF to avoid the
100
* helper function running off the end of the register file.
101
*/
102
return false;
103
}
104
- n <<= 3;
105
- tmp = tcg_temp_new_i32();
106
- if (a->op) {
107
- read_neon_element32(tmp, a->vd, 0, MO_32);
108
- } else {
109
- tcg_gen_movi_i32(tmp, 0);
110
- }
111
- tmp2 = tcg_temp_new_i32();
112
- read_neon_element32(tmp2, a->vm, 0, MO_32);
113
- ptr1 = vfp_reg_ptr(true, a->vn);
114
- tmp4 = tcg_const_i32(n);
115
- gen_helper_neon_tbl(tmp2, tmp2, tmp, ptr1, tmp4);
116
117
+ desc = tcg_const_i32((a->vn << 2) | a->len);
118
+ def = tcg_temp_new_i64();
119
if (a->op) {
120
- read_neon_element32(tmp, a->vd, 1, MO_32);
121
+ read_neon_element64(def, a->vd, 0, MO_64);
122
} else {
123
- tcg_gen_movi_i32(tmp, 0);
124
+ tcg_gen_movi_i64(def, 0);
125
}
126
- tmp3 = tcg_temp_new_i32();
127
- read_neon_element32(tmp3, a->vm, 1, MO_32);
128
- gen_helper_neon_tbl(tmp3, tmp3, tmp, ptr1, tmp4);
129
- tcg_temp_free_i32(tmp);
130
- tcg_temp_free_i32(tmp4);
131
- tcg_temp_free_ptr(ptr1);
132
+ val = tcg_temp_new_i64();
133
+ read_neon_element64(val, a->vm, 0, MO_64);
134
135
- write_neon_element32(tmp2, a->vd, 0, MO_32);
136
- write_neon_element32(tmp3, a->vd, 1, MO_32);
137
- tcg_temp_free_i32(tmp2);
138
- tcg_temp_free_i32(tmp3);
139
+ gen_helper_neon_tbl(val, cpu_env, desc, val, def);
140
+ write_neon_element64(val, a->vd, 0, MO_64);
141
+
142
+ tcg_temp_free_i64(def);
143
+ tcg_temp_free_i64(val);
144
+ tcg_temp_free_i32(desc);
32
return true;
145
return true;
33
}
146
}
34
35
static bool trans_ADDPL(DisasContext *s, arg_ADDPL *a)
36
{
37
- TCGv_i64 rd = cpu_reg_sp(s, a->rd);
38
- TCGv_i64 rn = cpu_reg_sp(s, a->rn);
39
- tcg_gen_addi_i64(rd, rn, a->imm * pred_full_reg_size(s));
40
+ if (sve_access_check(s)) {
41
+ TCGv_i64 rd = cpu_reg_sp(s, a->rd);
42
+ TCGv_i64 rn = cpu_reg_sp(s, a->rn);
43
+ tcg_gen_addi_i64(rd, rn, a->imm * pred_full_reg_size(s));
44
+ }
45
return true;
46
}
47
48
static bool trans_RDVL(DisasContext *s, arg_RDVL *a)
49
{
50
- TCGv_i64 reg = cpu_reg(s, a->rd);
51
- tcg_gen_movi_i64(reg, a->imm * vec_full_reg_size(s));
52
+ if (sve_access_check(s)) {
53
+ TCGv_i64 reg = cpu_reg(s, a->rd);
54
+ tcg_gen_movi_i64(reg, a->imm * vec_full_reg_size(s));
55
+ }
56
return true;
57
}
58
147
59
--
148
--
60
2.20.1
149
2.20.1
61
150
62
151
diff view generated by jsdifflib
New patch
1
From: Philippe Mathieu-Daudé <f4bug@amsat.org>
1
2
3
We can use one MPC per SRAM bank, but we currently only wire the
4
IRQ from the first expansion MPC to the IRQ splitter. Fix that.
5
6
Fixes: bb75e16d5e6 ("hw/arm/iotkit: Wire up MPC interrupt lines")
7
Signed-off-by: Philippe Mathieu-Daudé <f4bug@amsat.org>
8
Message-id: 20201107193403.436146-2-f4bug@amsat.org
9
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
10
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
11
---
12
hw/arm/armsse.c | 3 ++-
13
1 file changed, 2 insertions(+), 1 deletion(-)
14
15
diff --git a/hw/arm/armsse.c b/hw/arm/armsse.c
16
index XXXXXXX..XXXXXXX 100644
17
--- a/hw/arm/armsse.c
18
+++ b/hw/arm/armsse.c
19
@@ -XXX,XX +XXX,XX @@ static void armsse_realize(DeviceState *dev, Error **errp)
20
qdev_get_gpio_in(dev_splitter, 0));
21
qdev_connect_gpio_out(dev_splitter, 0,
22
qdev_get_gpio_in_named(dev_secctl,
23
- "mpc_status", 0));
24
+ "mpc_status",
25
+ i - IOTS_NUM_EXP_MPC));
26
}
27
28
qdev_connect_gpio_out(dev_splitter, 1,
29
--
30
2.20.1
31
32
diff view generated by jsdifflib
New patch
1
From: Philippe Mathieu-Daudé <f4bug@amsat.org>
1
2
3
The system configuration controller (SYSCFG) doesn't have
4
any output IRQ (and the INTC input #71 belongs to the UART6).
5
Remove the invalid code.
6
7
Fixes: db635521a02 ("stm32f205: Add the stm32f205 SoC")
8
Signed-off-by: Philippe Mathieu-Daudé <f4bug@amsat.org>
9
Message-id: 20201107193403.436146-3-f4bug@amsat.org
10
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
11
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
12
---
13
include/hw/misc/stm32f2xx_syscfg.h | 2 --
14
hw/arm/stm32f205_soc.c | 1 -
15
hw/misc/stm32f2xx_syscfg.c | 2 --
16
3 files changed, 5 deletions(-)
17
18
diff --git a/include/hw/misc/stm32f2xx_syscfg.h b/include/hw/misc/stm32f2xx_syscfg.h
19
index XXXXXXX..XXXXXXX 100644
20
--- a/include/hw/misc/stm32f2xx_syscfg.h
21
+++ b/include/hw/misc/stm32f2xx_syscfg.h
22
@@ -XXX,XX +XXX,XX @@ struct STM32F2XXSyscfgState {
23
uint32_t syscfg_exticr3;
24
uint32_t syscfg_exticr4;
25
uint32_t syscfg_cmpcr;
26
-
27
- qemu_irq irq;
28
};
29
30
#endif /* HW_STM32F2XX_SYSCFG_H */
31
diff --git a/hw/arm/stm32f205_soc.c b/hw/arm/stm32f205_soc.c
32
index XXXXXXX..XXXXXXX 100644
33
--- a/hw/arm/stm32f205_soc.c
34
+++ b/hw/arm/stm32f205_soc.c
35
@@ -XXX,XX +XXX,XX @@ static void stm32f205_soc_realize(DeviceState *dev_soc, Error **errp)
36
}
37
busdev = SYS_BUS_DEVICE(dev);
38
sysbus_mmio_map(busdev, 0, 0x40013800);
39
- sysbus_connect_irq(busdev, 0, qdev_get_gpio_in(armv7m, 71));
40
41
/* Attach UART (uses USART registers) and USART controllers */
42
for (i = 0; i < STM_NUM_USARTS; i++) {
43
diff --git a/hw/misc/stm32f2xx_syscfg.c b/hw/misc/stm32f2xx_syscfg.c
44
index XXXXXXX..XXXXXXX 100644
45
--- a/hw/misc/stm32f2xx_syscfg.c
46
+++ b/hw/misc/stm32f2xx_syscfg.c
47
@@ -XXX,XX +XXX,XX @@ static void stm32f2xx_syscfg_init(Object *obj)
48
{
49
STM32F2XXSyscfgState *s = STM32F2XX_SYSCFG(obj);
50
51
- sysbus_init_irq(SYS_BUS_DEVICE(obj), &s->irq);
52
-
53
memory_region_init_io(&s->mmio, obj, &stm32f2xx_syscfg_ops, s,
54
TYPE_STM32F2XX_SYSCFG, 0x400);
55
sysbus_init_mmio(SYS_BUS_DEVICE(obj), &s->mmio);
56
--
57
2.20.1
58
59
diff view generated by jsdifflib
New patch
1
From: Philippe Mathieu-Daudé <f4bug@amsat.org>
1
2
3
omap2420_mpu_init() introduced in commit 827df9f3c5f ("Add basic
4
OMAP2 chip support") takes care of creating the 3 UARTs.
5
6
Then commit 58a26b477e9 ("Emulate a serial bluetooth HCI with H4+
7
extensions and attach to n8x0's UART") added n8x0_uart_setup()
8
which create the UART and connects it to an IRQ output,
9
overwritting the existing peripheral and its IRQ connection.
10
This is incorrect.
11
12
Fortunately we don't need to fix this, because commit 6da68df7f9b
13
("hw/arm/nseries: Replace the bluetooth chardev with a "null"
14
chardev") removed the use of this peripheral. We can simply
15
remove the code.
16
17
Signed-off-by: Philippe Mathieu-Daudé <f4bug@amsat.org>
18
Message-id: 20201107193403.436146-4-f4bug@amsat.org
19
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
20
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
21
---
22
hw/arm/nseries.c | 11 -----------
23
1 file changed, 11 deletions(-)
24
25
diff --git a/hw/arm/nseries.c b/hw/arm/nseries.c
26
index XXXXXXX..XXXXXXX 100644
27
--- a/hw/arm/nseries.c
28
+++ b/hw/arm/nseries.c
29
@@ -XXX,XX +XXX,XX @@ static void n8x0_cbus_setup(struct n800_s *s)
30
cbus_attach(cbus, s->tahvo = tahvo_init(tahvo_irq, 1));
31
}
32
33
-static void n8x0_uart_setup(struct n800_s *s)
34
-{
35
- Chardev *radio = qemu_chr_new("bt-dummy-uart", "null", NULL);
36
- /*
37
- * Note: We used to connect N8X0_BT_RESET_GPIO and N8X0_BT_WKUP_GPIO
38
- * here, but this code has been removed with the bluetooth backend.
39
- */
40
- omap_uart_attach(s->mpu->uart[BT_UART], radio);
41
-}
42
-
43
static void n8x0_usb_setup(struct n800_s *s)
44
{
45
SysBusDevice *dev;
46
@@ -XXX,XX +XXX,XX @@ static void n8x0_init(MachineState *machine,
47
n8x0_spi_setup(s);
48
n8x0_dss_setup(s);
49
n8x0_cbus_setup(s);
50
- n8x0_uart_setup(s);
51
if (machine_usb(machine)) {
52
n8x0_usb_setup(s);
53
}
54
--
55
2.20.1
56
57
diff view generated by jsdifflib
New patch
1
From: Philippe Mathieu-Daudé <f4bug@amsat.org>
1
2
3
The MusicPal board code connects both of the IRQ outputs of the UART
4
to the same INTC qemu_irq. Connecting two qemu_irqs outputs directly
5
to the same input is not valid as it produces subtly wrong behaviour
6
(for instance if both the IRQ lines are high, and then one goes
7
low, the INTC input will see this as a high-to-low transition
8
even though the second IRQ line should still be holding it high).
9
10
This kind of wiring needs an explicitly created OR gate; add one.
11
12
Inspired-by: Peter Maydell <peter.maydell@linaro.org>
13
Signed-off-by: Philippe Mathieu-Daudé <f4bug@amsat.org>
14
Message-id: 20201107193403.436146-5-f4bug@amsat.org
15
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
16
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
17
---
18
hw/arm/musicpal.c | 17 +++++++++++++----
19
hw/arm/Kconfig | 1 +
20
2 files changed, 14 insertions(+), 4 deletions(-)
21
22
diff --git a/hw/arm/musicpal.c b/hw/arm/musicpal.c
23
index XXXXXXX..XXXXXXX 100644
24
--- a/hw/arm/musicpal.c
25
+++ b/hw/arm/musicpal.c
26
@@ -XXX,XX +XXX,XX @@
27
#include "ui/console.h"
28
#include "hw/i2c/i2c.h"
29
#include "hw/irq.h"
30
+#include "hw/or-irq.h"
31
#include "hw/audio/wm8750.h"
32
#include "sysemu/block-backend.h"
33
#include "sysemu/runstate.h"
34
@@ -XXX,XX +XXX,XX @@
35
#define MP_TIMER4_IRQ 7
36
#define MP_EHCI_IRQ 8
37
#define MP_ETH_IRQ 9
38
-#define MP_UART1_IRQ 11
39
-#define MP_UART2_IRQ 11
40
+#define MP_UART_SHARED_IRQ 11
41
#define MP_GPIO_IRQ 12
42
#define MP_RTC_IRQ 28
43
#define MP_AUDIO_IRQ 30
44
@@ -XXX,XX +XXX,XX @@ static void musicpal_init(MachineState *machine)
45
ARMCPU *cpu;
46
qemu_irq pic[32];
47
DeviceState *dev;
48
+ DeviceState *uart_orgate;
49
DeviceState *i2c_dev;
50
DeviceState *lcd_dev;
51
DeviceState *key_dev;
52
@@ -XXX,XX +XXX,XX @@ static void musicpal_init(MachineState *machine)
53
pic[MP_TIMER2_IRQ], pic[MP_TIMER3_IRQ],
54
pic[MP_TIMER4_IRQ], NULL);
55
56
- serial_mm_init(address_space_mem, MP_UART1_BASE, 2, pic[MP_UART1_IRQ],
57
+ /* Logically OR both UART IRQs together */
58
+ uart_orgate = DEVICE(object_new(TYPE_OR_IRQ));
59
+ object_property_set_int(OBJECT(uart_orgate), "num-lines", 2, &error_fatal);
60
+ qdev_realize_and_unref(uart_orgate, NULL, &error_fatal);
61
+ qdev_connect_gpio_out(DEVICE(uart_orgate), 0, pic[MP_UART_SHARED_IRQ]);
62
+
63
+ serial_mm_init(address_space_mem, MP_UART1_BASE, 2,
64
+ qdev_get_gpio_in(uart_orgate, 0),
65
1825000, serial_hd(0), DEVICE_NATIVE_ENDIAN);
66
- serial_mm_init(address_space_mem, MP_UART2_BASE, 2, pic[MP_UART2_IRQ],
67
+ serial_mm_init(address_space_mem, MP_UART2_BASE, 2,
68
+ qdev_get_gpio_in(uart_orgate, 1),
69
1825000, serial_hd(1), DEVICE_NATIVE_ENDIAN);
70
71
/* Register flash */
72
diff --git a/hw/arm/Kconfig b/hw/arm/Kconfig
73
index XXXXXXX..XXXXXXX 100644
74
--- a/hw/arm/Kconfig
75
+++ b/hw/arm/Kconfig
76
@@ -XXX,XX +XXX,XX @@ config MUSCA
77
78
config MUSICPAL
79
bool
80
+ select OR_IRQ
81
select BITBANG_I2C
82
select MARVELL_88W8618
83
select PTIMER
84
--
85
2.20.1
86
87
diff view generated by jsdifflib
New patch
1
From: Philippe Mathieu-Daudé <f4bug@amsat.org>
1
2
3
We don't need to fill the full pic[] array if we only use
4
few of the interrupt lines. Directly call qdev_get_gpio_in()
5
when necessary.
6
7
Signed-off-by: Philippe Mathieu-Daudé <f4bug@amsat.org>
8
Message-id: 20201107193403.436146-6-f4bug@amsat.org
9
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
10
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
11
---
12
hw/arm/musicpal.c | 25 +++++++++++++------------
13
1 file changed, 13 insertions(+), 12 deletions(-)
14
15
diff --git a/hw/arm/musicpal.c b/hw/arm/musicpal.c
16
index XXXXXXX..XXXXXXX 100644
17
--- a/hw/arm/musicpal.c
18
+++ b/hw/arm/musicpal.c
19
@@ -XXX,XX +XXX,XX @@ static struct arm_boot_info musicpal_binfo = {
20
static void musicpal_init(MachineState *machine)
21
{
22
ARMCPU *cpu;
23
- qemu_irq pic[32];
24
DeviceState *dev;
25
+ DeviceState *pic;
26
DeviceState *uart_orgate;
27
DeviceState *i2c_dev;
28
DeviceState *lcd_dev;
29
@@ -XXX,XX +XXX,XX @@ static void musicpal_init(MachineState *machine)
30
&error_fatal);
31
memory_region_add_subregion(address_space_mem, MP_SRAM_BASE, sram);
32
33
- dev = sysbus_create_simple(TYPE_MV88W8618_PIC, MP_PIC_BASE,
34
+ pic = sysbus_create_simple(TYPE_MV88W8618_PIC, MP_PIC_BASE,
35
qdev_get_gpio_in(DEVICE(cpu), ARM_CPU_IRQ));
36
- for (i = 0; i < 32; i++) {
37
- pic[i] = qdev_get_gpio_in(dev, i);
38
- }
39
- sysbus_create_varargs(TYPE_MV88W8618_PIT, MP_PIT_BASE, pic[MP_TIMER1_IRQ],
40
- pic[MP_TIMER2_IRQ], pic[MP_TIMER3_IRQ],
41
- pic[MP_TIMER4_IRQ], NULL);
42
+ sysbus_create_varargs(TYPE_MV88W8618_PIT, MP_PIT_BASE,
43
+ qdev_get_gpio_in(pic, MP_TIMER1_IRQ),
44
+ qdev_get_gpio_in(pic, MP_TIMER2_IRQ),
45
+ qdev_get_gpio_in(pic, MP_TIMER3_IRQ),
46
+ qdev_get_gpio_in(pic, MP_TIMER4_IRQ), NULL);
47
48
/* Logically OR both UART IRQs together */
49
uart_orgate = DEVICE(object_new(TYPE_OR_IRQ));
50
object_property_set_int(OBJECT(uart_orgate), "num-lines", 2, &error_fatal);
51
qdev_realize_and_unref(uart_orgate, NULL, &error_fatal);
52
- qdev_connect_gpio_out(DEVICE(uart_orgate), 0, pic[MP_UART_SHARED_IRQ]);
53
+ qdev_connect_gpio_out(DEVICE(uart_orgate), 0,
54
+ qdev_get_gpio_in(pic, MP_UART_SHARED_IRQ));
55
56
serial_mm_init(address_space_mem, MP_UART1_BASE, 2,
57
qdev_get_gpio_in(uart_orgate, 0),
58
@@ -XXX,XX +XXX,XX @@ static void musicpal_init(MachineState *machine)
59
OBJECT(get_system_memory()), &error_fatal);
60
sysbus_realize_and_unref(SYS_BUS_DEVICE(dev), &error_fatal);
61
sysbus_mmio_map(SYS_BUS_DEVICE(dev), 0, MP_ETH_BASE);
62
- sysbus_connect_irq(SYS_BUS_DEVICE(dev), 0, pic[MP_ETH_IRQ]);
63
+ sysbus_connect_irq(SYS_BUS_DEVICE(dev), 0,
64
+ qdev_get_gpio_in(pic, MP_ETH_IRQ));
65
66
sysbus_create_simple("mv88w8618_wlan", MP_WLAN_BASE, NULL);
67
68
sysbus_create_simple(TYPE_MUSICPAL_MISC, MP_MISC_BASE, NULL);
69
70
dev = sysbus_create_simple(TYPE_MUSICPAL_GPIO, MP_GPIO_BASE,
71
- pic[MP_GPIO_IRQ]);
72
+ qdev_get_gpio_in(pic, MP_GPIO_IRQ));
73
i2c_dev = sysbus_create_simple("gpio_i2c", -1, NULL);
74
i2c = (I2CBus *)qdev_get_child_bus(i2c_dev, "i2c");
75
76
@@ -XXX,XX +XXX,XX @@ static void musicpal_init(MachineState *machine)
77
NULL);
78
sysbus_realize_and_unref(s, &error_fatal);
79
sysbus_mmio_map(s, 0, MP_AUDIO_BASE);
80
- sysbus_connect_irq(s, 0, pic[MP_AUDIO_IRQ]);
81
+ sysbus_connect_irq(s, 0, qdev_get_gpio_in(pic, MP_AUDIO_IRQ));
82
83
musicpal_binfo.ram_size = MP_RAM_DEFAULT_SIZE;
84
arm_load_kernel(cpu, machine, &musicpal_binfo);
85
--
86
2.20.1
87
88
diff view generated by jsdifflib
New patch
1
The nseries machines have a codepath that allows them to load a
2
secondary bootloader. This code wasn't checking that the
3
load_image_targphys() succeeded. Check the return value and report
4
the error to the user.
1
5
6
While we're in the vicinity, fix the comment style of the
7
comment documenting what this image load is doing.
8
9
Fixes: Coverity CID 1192904
10
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
11
Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org>
12
Message-id: 20201103114918.11807-1-peter.maydell@linaro.org
13
---
14
hw/arm/nseries.c | 15 +++++++++++----
15
1 file changed, 11 insertions(+), 4 deletions(-)
16
17
diff --git a/hw/arm/nseries.c b/hw/arm/nseries.c
18
index XXXXXXX..XXXXXXX 100644
19
--- a/hw/arm/nseries.c
20
+++ b/hw/arm/nseries.c
21
@@ -XXX,XX +XXX,XX @@ static void n8x0_init(MachineState *machine,
22
/* No, wait, better start at the ROM. */
23
s->mpu->cpu->env.regs[15] = OMAP2_Q2_BASE + 0x400000;
24
25
- /* This is intended for loading the `secondary.bin' program from
26
+ /*
27
+ * This is intended for loading the `secondary.bin' program from
28
* Nokia images (the NOLO bootloader). The entry point seems
29
* to be at OMAP2_Q2_BASE + 0x400000.
30
*
31
@@ -XXX,XX +XXX,XX @@ static void n8x0_init(MachineState *machine,
32
* for them the entry point needs to be set to OMAP2_SRAM_BASE.
33
*
34
* The code above is for loading the `zImage' file from Nokia
35
- * images. */
36
- load_image_targphys(option_rom[0].name, OMAP2_Q2_BASE + 0x400000,
37
- machine->ram_size - 0x400000);
38
+ * images.
39
+ */
40
+ if (load_image_targphys(option_rom[0].name,
41
+ OMAP2_Q2_BASE + 0x400000,
42
+ machine->ram_size - 0x400000) < 0) {
43
+ error_report("Failed to load secondary bootloader %s",
44
+ option_rom[0].name);
45
+ exit(EXIT_FAILURE);
46
+ }
47
48
n800_setup_nolo_tags(nolo_tags);
49
cpu_physical_memory_write(OMAP2_SRAM_BASE, nolo_tags, 0x10000);
50
--
51
2.20.1
52
53
diff view generated by jsdifflib
1
From: Eric Auger <eric.auger@redhat.com>
1
From: Havard Skinnemoen <hskinnemoen@google.com>
2
2
3
The GSIV numbers of the SPI based interrupts is not correct as
3
The number of runs is equal to the number of 0-1 and 1-0 transitions,
4
ARM_SPI_BASE was not added to the irqmap[VIRT_SMMU] value. So
4
plus one. Currently, it's counting the number of times these transitions
5
this may collide with VIRTIO_MMIO irq window.
5
do _not_ happen, plus one.
6
6
7
Signed-off-by: Eric Auger <eric.auger@redhat.com>
7
Source:
8
Message-id: 20190312091031.5185-1-eric.auger@redhat.com
8
https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-22r1a.pdf
9
Reviewed-by: Shannon Zhao <shannon.zhaosl@gmail.com>
9
section 2.3.4 point (3).
10
11
Signed-off-by: Havard Skinnemoen <hskinnemoen@google.com>
12
Message-id: 20201103011457.2959989-2-hskinnemoen@google.com
13
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
10
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
14
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
11
---
15
---
12
hw/arm/virt-acpi-build.c | 2 +-
16
tests/qtest/npcm7xx_rng-test.c | 2 +-
13
1 file changed, 1 insertion(+), 1 deletion(-)
17
1 file changed, 1 insertion(+), 1 deletion(-)
14
18
15
diff --git a/hw/arm/virt-acpi-build.c b/hw/arm/virt-acpi-build.c
19
diff --git a/tests/qtest/npcm7xx_rng-test.c b/tests/qtest/npcm7xx_rng-test.c
16
index XXXXXXX..XXXXXXX 100644
20
index XXXXXXX..XXXXXXX 100644
17
--- a/hw/arm/virt-acpi-build.c
21
--- a/tests/qtest/npcm7xx_rng-test.c
18
+++ b/hw/arm/virt-acpi-build.c
22
+++ b/tests/qtest/npcm7xx_rng-test.c
19
@@ -XXX,XX +XXX,XX @@ build_iort(GArray *table_data, BIOSLinker *linker, VirtMachineState *vms)
23
@@ -XXX,XX +XXX,XX @@ static double calc_runs_p(const unsigned long *buf, unsigned int nr_bits)
20
its->identifiers[0] = 0; /* MADT translation_id */
24
pi = (double)nr_ones / nr_bits;
21
25
22
if (vms->iommu == VIRT_IOMMU_SMMUV3) {
26
for (k = 0; k < nr_bits - 1; k++) {
23
- int irq = vms->irqmap[VIRT_SMMU];
27
- vn_obs += !(test_bit(k, buf) ^ test_bit(k + 1, buf));
24
+ int irq = vms->irqmap[VIRT_SMMU] + ARM_SPI_BASE;
28
+ vn_obs += (test_bit(k, buf) ^ test_bit(k + 1, buf));
25
29
}
26
/* SMMUv3 node */
30
vn_obs += 1;
27
smmu_offset = iort_node_offset + node_size;
31
28
--
32
--
29
2.20.1
33
2.20.1
30
34
31
35
diff view generated by jsdifflib
1
From: Zoltán Baldaszti <bztemail@gmail.com>
1
Checks for UNDEF cases should go before the "is VFP enabled?" access
2
check, except in special cases. Move a stray UNDEF check in the VTBL
3
trans function up above the access check.
2
4
3
The BCM2836 control logic module includes a simple
5
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
4
"local timer" which is a programmable down-counter that
6
Reviewed-by: Richard Henderson <richard.henderson@linaro.org>
5
can generates an interrupt. Implement this functionality.
7
Message-id: 20201109145324.2859-1-peter.maydell@linaro.org
8
---
9
target/arm/translate-neon.c.inc | 8 ++++----
10
1 file changed, 4 insertions(+), 4 deletions(-)
6
11
7
Signed-off-by: Zoltán Baldaszti <bztemail@gmail.com>
12
diff --git a/target/arm/translate-neon.c.inc b/target/arm/translate-neon.c.inc
8
[PMM: wrote commit message; wrapped long line; tweaked
9
some comments to match the final version of the code]
10
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
11
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
12
---
13
include/hw/intc/bcm2836_control.h | 9 +++
14
hw/intc/bcm2836_control.c | 101 +++++++++++++++++++++++++++++-
15
2 files changed, 108 insertions(+), 2 deletions(-)
16
17
diff --git a/include/hw/intc/bcm2836_control.h b/include/hw/intc/bcm2836_control.h
18
index XXXXXXX..XXXXXXX 100644
13
index XXXXXXX..XXXXXXX 100644
19
--- a/include/hw/intc/bcm2836_control.h
14
--- a/target/arm/translate-neon.c.inc
20
+++ b/include/hw/intc/bcm2836_control.h
15
+++ b/target/arm/translate-neon.c.inc
21
@@ -XXX,XX +XXX,XX @@
16
@@ -XXX,XX +XXX,XX @@ static bool trans_VTBL(DisasContext *s, arg_VTBL *a)
22
* Rasperry Pi 2 emulation and refactoring Copyright (c) 2015, Microsoft
17
return false;
23
* Written by Andrew Baumann
24
*
25
+ * ARM Local Timer IRQ Copyright (c) 2019. Zoltán Baldaszti
26
+ * Added basic IRQ_TIMER interrupt support
27
+ *
28
* This code is licensed under the GNU GPLv2 and later.
29
*/
30
31
@@ -XXX,XX +XXX,XX @@
32
#define BCM2836_CONTROL_H
33
34
#include "hw/sysbus.h"
35
+#include "qemu/timer.h"
36
37
/* 4 mailboxes per core, for 16 total */
38
#define BCM2836_NCORES 4
39
@@ -XXX,XX +XXX,XX @@ typedef struct BCM2836ControlState {
40
bool gpu_irq, gpu_fiq;
41
uint8_t timerirqs[BCM2836_NCORES];
42
43
+ /* local timer */
44
+ QEMUTimer timer;
45
+ uint32_t local_timer_control;
46
+ uint8_t route_localtimer;
47
+
48
/* interrupt source registers, post-routing (also input-derived; visible) */
49
uint32_t irqsrc[BCM2836_NCORES];
50
uint32_t fiqsrc[BCM2836_NCORES];
51
diff --git a/hw/intc/bcm2836_control.c b/hw/intc/bcm2836_control.c
52
index XXXXXXX..XXXXXXX 100644
53
--- a/hw/intc/bcm2836_control.c
54
+++ b/hw/intc/bcm2836_control.c
55
@@ -XXX,XX +XXX,XX @@
56
* This code is licensed under the GNU GPLv2 and later.
57
*
58
* At present, only implements interrupt routing, and mailboxes (i.e.,
59
- * not local timer, PMU interrupt, or AXI counters).
60
+ * not PMU interrupt, or AXI counters).
61
+ *
62
+ * ARM Local Timer IRQ Copyright (c) 2019. Zoltán Baldaszti
63
*
64
* Ref:
65
* https://www.raspberrypi.org/documentation/hardware/raspberrypi/bcm2836/QA7_rev3.4.pdf
66
@@ -XXX,XX +XXX,XX @@
67
#include "qemu/log.h"
68
69
#define REG_GPU_ROUTE 0x0c
70
+#define REG_LOCALTIMERROUTING 0x24
71
+#define REG_LOCALTIMERCONTROL 0x34
72
+#define REG_LOCALTIMERACK 0x38
73
#define REG_TIMERCONTROL 0x40
74
#define REG_MBOXCONTROL 0x50
75
#define REG_IRQSRC 0x60
76
@@ -XXX,XX +XXX,XX @@
77
#define IRQ_TIMER 11
78
#define IRQ_MAX IRQ_TIMER
79
80
+#define LOCALTIMER_FREQ 38400000
81
+#define LOCALTIMER_INTFLAG (1 << 31)
82
+#define LOCALTIMER_RELOAD (1 << 30)
83
+#define LOCALTIMER_INTENABLE (1 << 29)
84
+#define LOCALTIMER_ENABLE (1 << 28)
85
+#define LOCALTIMER_VALUE(x) ((x) & 0xfffffff)
86
+
87
static void deliver_local(BCM2836ControlState *s, uint8_t core, uint8_t irq,
88
uint32_t controlreg, uint8_t controlidx)
89
{
90
@@ -XXX,XX +XXX,XX @@ static void bcm2836_control_update(BCM2836ControlState *s)
91
s->fiqsrc[s->route_gpu_fiq] |= (uint32_t)1 << IRQ_GPU;
92
}
18
}
93
19
94
+ /*
20
- if (!vfp_access_check(s)) {
95
+ * handle the control module 'local timer' interrupt for one of the
21
- return true;
96
+ * cores' IRQ/FIQ; this is distinct from the per-CPU timer
22
- }
97
+ * interrupts handled below.
23
-
98
+ */
24
if ((a->vn + a->len + 1) > 32) {
99
+ if ((s->local_timer_control & LOCALTIMER_INTENABLE) &&
25
/*
100
+ (s->local_timer_control & LOCALTIMER_INTFLAG)) {
26
* This is UNPREDICTABLE; we choose to UNDEF to avoid the
101
+ if (s->route_localtimer & 4) {
27
@@ -XXX,XX +XXX,XX @@ static bool trans_VTBL(DisasContext *s, arg_VTBL *a)
102
+ s->fiqsrc[(s->route_localtimer & 3)] |= (uint32_t)1 << IRQ_TIMER;
28
return false;
103
+ } else {
29
}
104
+ s->irqsrc[(s->route_localtimer & 3)] |= (uint32_t)1 << IRQ_TIMER;
30
105
+ }
31
+ if (!vfp_access_check(s)) {
32
+ return true;
106
+ }
33
+ }
107
+
34
+
108
for (i = 0; i < BCM2836_NCORES; i++) {
35
desc = tcg_const_i32((a->vn << 2) | a->len);
109
/* handle local timer interrupts for this core */
36
def = tcg_temp_new_i64();
110
if (s->timerirqs[i]) {
37
if (a->op) {
111
@@ -XXX,XX +XXX,XX @@ static void bcm2836_control_set_gpu_fiq(void *opaque, int irq, int level)
112
bcm2836_control_update(s);
113
}
114
115
+static void bcm2836_control_local_timer_set_next(void *opaque)
116
+{
117
+ BCM2836ControlState *s = opaque;
118
+ uint64_t next_event;
119
+
120
+ assert(LOCALTIMER_VALUE(s->local_timer_control) > 0);
121
+
122
+ next_event = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) +
123
+ muldiv64(LOCALTIMER_VALUE(s->local_timer_control),
124
+ NANOSECONDS_PER_SECOND, LOCALTIMER_FREQ);
125
+ timer_mod(&s->timer, next_event);
126
+}
127
+
128
+static void bcm2836_control_local_timer_tick(void *opaque)
129
+{
130
+ BCM2836ControlState *s = opaque;
131
+
132
+ bcm2836_control_local_timer_set_next(s);
133
+
134
+ s->local_timer_control |= LOCALTIMER_INTFLAG;
135
+ bcm2836_control_update(s);
136
+}
137
+
138
+static void bcm2836_control_local_timer_control(void *opaque, uint32_t val)
139
+{
140
+ BCM2836ControlState *s = opaque;
141
+
142
+ s->local_timer_control = val;
143
+ if (val & LOCALTIMER_ENABLE) {
144
+ bcm2836_control_local_timer_set_next(s);
145
+ } else {
146
+ timer_del(&s->timer);
147
+ }
148
+}
149
+
150
+static void bcm2836_control_local_timer_ack(void *opaque, uint32_t val)
151
+{
152
+ BCM2836ControlState *s = opaque;
153
+
154
+ if (val & LOCALTIMER_INTFLAG) {
155
+ s->local_timer_control &= ~LOCALTIMER_INTFLAG;
156
+ }
157
+ if ((val & LOCALTIMER_RELOAD) &&
158
+ (s->local_timer_control & LOCALTIMER_ENABLE)) {
159
+ bcm2836_control_local_timer_set_next(s);
160
+ }
161
+}
162
+
163
static uint64_t bcm2836_control_read(void *opaque, hwaddr offset, unsigned size)
164
{
165
BCM2836ControlState *s = opaque;
166
@@ -XXX,XX +XXX,XX @@ static uint64_t bcm2836_control_read(void *opaque, hwaddr offset, unsigned size)
167
assert(s->route_gpu_fiq < BCM2836_NCORES
168
&& s->route_gpu_irq < BCM2836_NCORES);
169
return ((uint32_t)s->route_gpu_fiq << 2) | s->route_gpu_irq;
170
+ } else if (offset == REG_LOCALTIMERROUTING) {
171
+ return s->route_localtimer;
172
+ } else if (offset == REG_LOCALTIMERCONTROL) {
173
+ return s->local_timer_control;
174
+ } else if (offset == REG_LOCALTIMERACK) {
175
+ return 0;
176
} else if (offset >= REG_TIMERCONTROL && offset < REG_MBOXCONTROL) {
177
return s->timercontrol[(offset - REG_TIMERCONTROL) >> 2];
178
} else if (offset >= REG_MBOXCONTROL && offset < REG_IRQSRC) {
179
@@ -XXX,XX +XXX,XX @@ static void bcm2836_control_write(void *opaque, hwaddr offset,
180
if (offset == REG_GPU_ROUTE) {
181
s->route_gpu_irq = val & 0x3;
182
s->route_gpu_fiq = (val >> 2) & 0x3;
183
+ } else if (offset == REG_LOCALTIMERROUTING) {
184
+ s->route_localtimer = val & 7;
185
+ } else if (offset == REG_LOCALTIMERCONTROL) {
186
+ bcm2836_control_local_timer_control(s, val);
187
+ } else if (offset == REG_LOCALTIMERACK) {
188
+ bcm2836_control_local_timer_ack(s, val);
189
} else if (offset >= REG_TIMERCONTROL && offset < REG_MBOXCONTROL) {
190
s->timercontrol[(offset - REG_TIMERCONTROL) >> 2] = val & 0xff;
191
} else if (offset >= REG_MBOXCONTROL && offset < REG_IRQSRC) {
192
@@ -XXX,XX +XXX,XX @@ static void bcm2836_control_reset(DeviceState *d)
193
194
s->route_gpu_irq = s->route_gpu_fiq = 0;
195
196
+ timer_del(&s->timer);
197
+ s->route_localtimer = 0;
198
+ s->local_timer_control = 0;
199
+
200
for (i = 0; i < BCM2836_NCORES; i++) {
201
s->timercontrol[i] = 0;
202
s->mailboxcontrol[i] = 0;
203
@@ -XXX,XX +XXX,XX @@ static void bcm2836_control_init(Object *obj)
204
/* outputs to CPU cores */
205
qdev_init_gpio_out_named(dev, s->irq, "irq", BCM2836_NCORES);
206
qdev_init_gpio_out_named(dev, s->fiq, "fiq", BCM2836_NCORES);
207
+
208
+ /* create a qemu virtual timer */
209
+ timer_init_ns(&s->timer, QEMU_CLOCK_VIRTUAL,
210
+ bcm2836_control_local_timer_tick, s);
211
}
212
213
static const VMStateDescription vmstate_bcm2836_control = {
214
.name = TYPE_BCM2836_CONTROL,
215
- .version_id = 1,
216
+ .version_id = 2,
217
.minimum_version_id = 1,
218
.fields = (VMStateField[]) {
219
VMSTATE_UINT32_ARRAY(mailboxes, BCM2836ControlState,
220
@@ -XXX,XX +XXX,XX @@ static const VMStateDescription vmstate_bcm2836_control = {
221
VMSTATE_UINT32_ARRAY(timercontrol, BCM2836ControlState, BCM2836_NCORES),
222
VMSTATE_UINT32_ARRAY(mailboxcontrol, BCM2836ControlState,
223
BCM2836_NCORES),
224
+ VMSTATE_TIMER_V(timer, BCM2836ControlState, 2),
225
+ VMSTATE_UINT32_V(local_timer_control, BCM2836ControlState, 2),
226
+ VMSTATE_UINT8_V(route_localtimer, BCM2836ControlState, 2),
227
VMSTATE_END_OF_LIST()
228
}
229
};
230
--
38
--
231
2.20.1
39
2.20.1
232
40
233
41
diff view generated by jsdifflib