Not very much here, but several people have fallen over

the vector operation segfault bug, so let's get the fix

into master.

The following changes since commit d418238dca7b4e0b124135827ead3076233052b1:

Merge remote-tracking branch 'remotes/rth/tags/pull-rng-20190522' into staging (2019-05-23 12:57:17 +0100)

https://git.linaro.org/people/pmaydell/qemu-arm.git tags/pull-target-arm-20190523

for you to fetch changes up to 98e4f4fdb8ea05d840f51f47125924c2bb9df2df:

hw/arm/exynos4210: QOM'ify the Exynos4210 SoC (2019-05-23 14:47:44 +0100)

* exynos4210: QOM'ify the Exynos4210 SoC

* exynos4210: Add DMA support for the Exynos4210

* arm_gicv3: Fix writes to ICC_CTLR_EL3

* arm_gicv3: Fix write of ICH_VMCR_EL2.{VBPR0, VBPR1}

* target/arm: Fix vector operation segfault

* target/arm: Minor improvements to BFXIL, EXTR

Alistair Francis (1):

target/arm: Fix vector operation segfault

Guenter Roeck (1):

hw/arm/exynos4210: Add DMA support for the Exynos4210

Peter Maydell (5):

arm: Move system_clock_scale to armv7m_systick.h

arm: Remove unnecessary includes of hw/arm/arm.h

arm: Rename hw/arm/arm.h to hw/arm/boot.h

hw/intc/arm_gicv3: Fix write of ICH_VMCR_EL2.{VBPR0, VBPR1}

hw/intc/arm_gicv3: Fix writes to ICC_CTLR_EL3

Philippe Mathieu-Daudé (3):

hw/arm/exynos4: Remove unuseful debug code

hw/arm/exynos4: Use the IEC binary prefix definitions

hw/arm/exynos4210: QOM'ify the Exynos4210 SoC

Richard Henderson (2):

target/arm: Use extract2 for EXTR

target/arm: Simplify BFXIL expansion

From: Philippe Mathieu-Daudé <philmd@redhat.com>

It eases code review, unit is explicit.

Signed-off-by: Philippe Mathieu-Daudé <philmd@redhat.com>

Reviewed-by: Alistair Francis <alistair.francis@wdc.com>

Message-id: 20190520214342.13709-3-philmd@redhat.com

hw/arm/exynos4_boards.c | 5 +++--

1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/hw/arm/exynos4_boards.c b/hw/arm/exynos4_boards.c

--- a/hw/arm/exynos4_boards.c

+++ b/hw/arm/exynos4_boards.c

@@ -XXX,XX +XXX,XX @@

*/

#include "qemu/osdep.h"

+#include "qemu/units.h"

#include "qapi/error.h"

#include "qemu/error-report.h"

#include "qemu-common.h"

@@ -XXX,XX +XXX,XX @@ static int exynos4_board_smp_bootreg_addr[EXYNOS4_NUM_OF_BOARDS] = {

};

static unsigned long exynos4_board_ram_size[EXYNOS4_NUM_OF_BOARDS] = {

- [EXYNOS4_BOARD_NURI] = 0x40000000,

- [EXYNOS4_BOARD_SMDKC210] = 0x40000000,

+ [EXYNOS4_BOARD_NURI] = 1 * GiB,

+ [EXYNOS4_BOARD_SMDKC210] = 1 * GiB,

};

static struct arm_boot_info exynos4_board_binfo = {

The hw/arm/arm.h header now only includes declarations relating

to boot.c code, so it is only needed by Arm board or SoC code.

Remove some unnecessary inclusions of it from target/arm files

and from hw/intc/armv7m_nvic.c.

hw/intc/armv7m_nvic.c | 1 -

target/arm/arm-semi.c | 1 -

target/arm/cpu.c | 1 -

target/arm/cpu64.c | 1 -

target/arm/kvm.c | 1 -

target/arm/kvm32.c | 1 -

target/arm/kvm64.c | 1 -

7 files changed, 7 deletions(-)

diff --git a/hw/intc/armv7m_nvic.c b/hw/intc/armv7m_nvic.c

--- a/hw/intc/armv7m_nvic.c

+++ b/hw/intc/armv7m_nvic.c

@@ -XXX,XX +XXX,XX @@

#include "cpu.h"

#include "hw/sysbus.h"

#include "qemu/timer.h"

-#include "hw/arm/arm.h"

#include "hw/intc/armv7m_nvic.h"

#include "target/arm/cpu.h"

#include "exec/exec-all.h"

diff --git a/target/arm/arm-semi.c b/target/arm/arm-semi.c

index XXXXXXX..XXXXXXX 100644

--- a/target/arm/arm-semi.c

+++ b/target/arm/arm-semi.c

@@ -XXX,XX +XXX,XX @@

#include "qemu-common.h"

#include "exec/gdbstub.h"

-#include "hw/arm/arm.h"

#include "qemu/cutils.h"

diff --git a/target/arm/cpu.c b/target/arm/cpu.c

index XXXXXXX..XXXXXXX 100644

--- a/target/arm/cpu.c

+++ b/target/arm/cpu.c

@@ -XXX,XX +XXX,XX @@

#if !defined(CONFIG_USER_ONLY)

#include "hw/loader.h"

#endif

-#include "hw/arm/arm.h"

#include "sysemu/sysemu.h"

#include "sysemu/hw_accel.h"

#include "kvm_arm.h"

@@ -XXX,XX +XXX,XX @@

#if !defined(CONFIG_USER_ONLY)

#include "hw/loader.h"

#endif

-#include "hw/arm/arm.h"

#include "sysemu/sysemu.h"

#include "sysemu/kvm.h"

#include "kvm_arm.h"

diff --git a/target/arm/kvm.c b/target/arm/kvm.c

--- a/target/arm/kvm.c

+++ b/target/arm/kvm.c

@@ -XXX,XX +XXX,XX @@

#include "cpu.h"

#include "trace.h"

#include "internals.h"

-#include "hw/arm/arm.h"

#include "hw/pci/pci.h"

#include "exec/memattrs.h"

#include "exec/address-spaces.h"

diff --git a/target/arm/kvm32.c b/target/arm/kvm32.c

index XXXXXXX..XXXXXXX 100644

--- a/target/arm/kvm32.c

+++ b/target/arm/kvm32.c

@@ -XXX,XX +XXX,XX @@

#include "sysemu/kvm.h"

#include "kvm_arm.h"

#include "internals.h"

-#include "hw/arm/arm.h"

#include "qemu/log.h"

static inline void set_feature(uint64_t *features, int feature)

diff --git a/target/arm/kvm64.c b/target/arm/kvm64.c

index XXXXXXX..XXXXXXX 100644

--- a/target/arm/kvm64.c

+++ b/target/arm/kvm64.c

@@ -XXX,XX +XXX,XX @@

#include "sysemu/kvm.h"

#include "kvm_arm.h"

#include "internals.h"

-#include "hw/arm/arm.h"

static bool have_guest_debug;

From: Guenter Roeck <linux@roeck-us.net>

QEMU already supports pl330. Instantiate it for Exynos4210.

Relevant part of Linux arch/arm/boot/dts/exynos4.dtsi:

/ {

soc: soc {

amba {

pdma0: pdma@12680000 {

compatible = "arm,pl330", "arm,primecell";

reg = <0x12680000 0x1000>;

interrupts = <GIC_SPI 35 IRQ_TYPE_LEVEL_HIGH>;

clocks = <&clock CLK_PDMA0>;

clock-names = "apb_pclk";

#dma-cells = <1>;

#dma-channels = <8>;

#dma-requests = <32>;

};

pdma1: pdma@12690000 {

compatible = "arm,pl330", "arm,primecell";

reg = <0x12690000 0x1000>;

interrupts = <GIC_SPI 36 IRQ_TYPE_LEVEL_HIGH>;

clocks = <&clock CLK_PDMA1>;

clock-names = "apb_pclk";

#dma-cells = <1>;

#dma-channels = <8>;

#dma-requests = <32>;

};

mdma1: mdma@12850000 {

compatible = "arm,pl330", "arm,primecell";

reg = <0x12850000 0x1000>;

interrupts = <GIC_SPI 34 IRQ_TYPE_LEVEL_HIGH>;

clocks = <&clock CLK_MDMA>;

clock-names = "apb_pclk";

#dma-cells = <1>;

#dma-channels = <8>;

#dma-requests = <1>;

};

};

};

};

Signed-off-by: Guenter Roeck <linux@roeck-us.net>

Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>

Reviewed-by: Peter Maydell <peter.maydell@linaro.org>

Signed-off-by: Philippe Mathieu-Daudé <philmd@redhat.com>

Message-id: 20190520214342.13709-4-philmd@redhat.com

[PMD: Do not set default qdev properties, create the controllers in the SoC

rather than the board (Peter Maydell), add dtsi in commit message]

Signed-off-by: Philippe Mathieu-Daudé <philmd@redhat.com>

Reviewed-by: Peter Maydell <peter.maydell@linaro.org>

hw/arm/exynos4210.c | 26 ++++++++++++++++++++++++++

1 file changed, 26 insertions(+)

diff --git a/hw/arm/exynos4210.c b/hw/arm/exynos4210.c

--- a/hw/arm/exynos4210.c

+++ b/hw/arm/exynos4210.c

/* EHCI */

#define EXYNOS4210_EHCI_BASE_ADDR 0x12580000

+/* DMA */

+#define EXYNOS4210_PL330_BASE0_ADDR 0x12680000

+#define EXYNOS4210_PL330_BASE1_ADDR 0x12690000

+#define EXYNOS4210_PL330_BASE2_ADDR 0x12850000

+

static uint8_t chipid_and_omr[] = { 0x11, 0x02, 0x21, 0x43,

0x09, 0x00, 0x00, 0x00 };

@@ -XXX,XX +XXX,XX @@ static uint64_t exynos4210_calc_affinity(int cpu)

return (0x9 << ARM_AFF1_SHIFT) | cpu;

+static void pl330_create(uint32_t base, qemu_irq irq, int nreq)

+{

+ SysBusDevice *busdev;

+ DeviceState *dev;

+

+ dev = qdev_create(NULL, "pl330");

+ qdev_prop_set_uint8(dev, "num_periph_req", nreq);

+ qdev_init_nofail(dev);

+ busdev = SYS_BUS_DEVICE(dev);

+ sysbus_mmio_map(busdev, 0, base);

+ sysbus_connect_irq(busdev, 0, irq);

+}

+

Exynos4210State *exynos4210_init(MemoryRegion *system_mem)

{

Exynos4210State *s = g_new0(Exynos4210State, 1);

@@ -XXX,XX +XXX,XX @@ Exynos4210State *exynos4210_init(MemoryRegion *system_mem)

sysbus_create_simple(TYPE_EXYNOS4210_EHCI, EXYNOS4210_EHCI_BASE_ADDR,

s->irq_table[exynos4210_get_irq(28, 3)]);

+ /*** DMA controllers ***/

+ pl330_create(EXYNOS4210_PL330_BASE0_ADDR,

+ qemu_irq_invert(s->irq_table[exynos4210_get_irq(35, 1)]), 32);

+ pl330_create(EXYNOS4210_PL330_BASE1_ADDR,

+ qemu_irq_invert(s->irq_table[exynos4210_get_irq(36, 1)]), 32);

+ pl330_create(EXYNOS4210_PL330_BASE2_ADDR,

+ qemu_irq_invert(s->irq_table[exynos4210_get_irq(34, 1)]), 1);

+

return s;

}

From: Philippe Mathieu-Daudé <philmd@redhat.com>

Signed-off-by: Philippe Mathieu-Daudé <philmd@redhat.com>

Message-id: 20190520214342.13709-2-philmd@redhat.com

hw/arm/exynos4_boards.c | 24 ------------------------

1 file changed, 24 deletions(-)

diff --git a/hw/arm/exynos4_boards.c b/hw/arm/exynos4_boards.c

--- a/hw/arm/exynos4_boards.c

+++ b/hw/arm/exynos4_boards.c

#include "hw/net/lan9118.h"

#include "hw/boards.h"

-#undef DEBUG

-

-//#define DEBUG

-

-#ifdef DEBUG

- #undef PRINT_DEBUG

- #define PRINT_DEBUG(fmt, args...) \

- do { \

- fprintf(stderr, " [%s:%d] "fmt, __func__, __LINE__, ##args); \

- } while (0)

-#else

- #define PRINT_DEBUG(fmt, args...) do {} while (0)

-#endif

-

#define SMDK_LAN9118_BASE_ADDR 0x05000000

typedef enum Exynos4BoardType {

@@ -XXX,XX +XXX,XX @@ exynos4_boards_init_common(MachineState *machine,

exynos4_board_binfo.gic_cpu_if_addr =

EXYNOS4210_SMP_PRIVATE_BASE_ADDR + 0x100;

- PRINT_DEBUG("\n ram_size: %luMiB [0x%08lx]\n"

- " kernel_filename: %s\n"

- " kernel_cmdline: %s\n"

- " initrd_filename: %s\n",

- exynos4_board_ram_size[board_type] / 1048576,

- exynos4_board_ram_size[board_type],

- machine->kernel_filename,

- machine->kernel_cmdline,

- machine->initrd_filename);

-

exynos4_boards_init_ram(s, get_system_memory(),

exynos4_board_ram_size[board_type]);

From: Alistair Francis <alistair.francis@wdc.com>

Commit 89e68b575 "target/arm: Use vector operations for saturation"

causes this abort() when booting QEMU ARM with a Cortex-A15:

0 0x00007ffff4c2382f in raise () at /usr/lib/libc.so.6

1 0x00007ffff4c0e672 in abort () at /usr/lib/libc.so.6

2 0x00005555559c1839 in disas_neon_data_insn (insn=<optimized out>, s=<optimized out>) at ./target/arm/translate.c:6673

3 0x00005555559c1839 in disas_neon_data_insn (s=<optimized out>, insn=<optimized out>) at ./target/arm/translate.c:6386

4 0x00005555559cd8a4 in disas_arm_insn (insn=4081107068, s=0x7fffe59a9510) at ./target/arm/translate.c:9289

5 0x00005555559cd8a4 in arm_tr_translate_insn (dcbase=0x7fffe59a9510, cpu=<optimized out>) at ./target/arm/translate.c:13612

6 0x00005555558d1d39 in translator_loop (ops=0x5555561cc580 <arm_translator_ops>, db=0x7fffe59a9510, cpu=0x55555686a2f0, tb=<optimized out>, max_insns=<optimized out>) at ./accel/tcg/translator.c:96

7 0x00005555559d10d4 in gen_intermediate_code (cpu=cpu@entry=0x55555686a2f0, tb=tb@entry=0x7fffd7840080 <code_gen_buffer+126091347>, max_insns=max_insns@entry=512) at ./target/arm/translate.c:13901

8 0x00005555558d06b9 in tb_gen_code (cpu=cpu@entry=0x55555686a2f0, pc=3067096216, cs_base=0, flags=192, cflags=-16252928, cflags@entry=524288) at ./accel/tcg/translate-all.c:1736

9 0x00005555558ce467 in tb_find (cf_mask=524288, tb_exit=1, last_tb=0x7fffd783e640 <code_gen_buffer+126084627>, cpu=0x1) at ./accel/tcg/cpu-exec.c:407

10 0x00005555558ce467 in cpu_exec (cpu=cpu@entry=0x55555686a2f0) at ./accel/tcg/cpu-exec.c:728

11 0x000055555588b0cf in tcg_cpu_exec (cpu=0x55555686a2f0) at ./cpus.c:1431

12 0x000055555588d223 in qemu_tcg_cpu_thread_fn (arg=0x55555686a2f0) at ./cpus.c:1735

13 0x000055555588d223 in qemu_tcg_cpu_thread_fn (arg=arg@entry=0x55555686a2f0) at ./cpus.c:1709

14 0x0000555555d2629a in qemu_thread_start (args=<optimized out>) at ./util/qemu-thread-posix.c:502

15 0x00007ffff4db8a92 in start_thread () at /usr/lib/libpthread.

This patch ensures that we don't hit the abort() in the second switch

case in disas_neon_data_insn() as we will return from the first case.

Signed-off-by: Alistair Francis <alistair.francis@wdc.com>

Reviewed-by: Richard Henderson <richard.henderson@linaro.org>

Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>

Reviewed-by: Alex Bennée <alex.bennee@linaro.org>

Tested-by: Alex Bennée <alex.bennee@linaro.org>

Message-id: ad91b397f360b2fc7f4087e476f7df5b04d42ddb.1558021877.git.alistair.francis@wdc.com

target/arm/translate.c | 4 ++--

1 file changed, 2 insertions(+), 2 deletions(-)

@@ -XXX,XX +XXX,XX @@ static int disas_neon_data_insn(DisasContext *s, uint32_t insn)

tcg_gen_gvec_4(rd_ofs, offsetof(CPUARMState, vfp.qc),

rn_ofs, rm_ofs, vec_size, vec_size,

(u ? uqadd_op : sqadd_op) + size);

- break;

+ return 0;

case NEON_3R_VQSUB:

tcg_gen_gvec_4(rd_ofs, offsetof(CPUARMState, vfp.qc),

rn_ofs, rm_ofs, vec_size, vec_size,

(u ? uqsub_op : sqsub_op) + size);

- break;

+ return 0;

case NEON_3R_VMUL: /* VMUL */

if (u) {

This is, after all, how we implement extract2 in tcg/aarch64.

target/arm/translate-a64.c | 38 ++++++++++++++++++++------------------

1 file changed, 20 insertions(+), 18 deletions(-)

diff --git a/target/arm/translate-a64.c b/target/arm/translate-a64.c

--- a/target/arm/translate-a64.c

+++ b/target/arm/translate-a64.c

@@ -XXX,XX +XXX,XX @@ static void disas_extract(DisasContext *s, uint32_t insn)

} else {

tcg_gen_ext32u_i64(tcg_rd, cpu_reg(s, rm));

}

- } else if (rm == rn) { /* ROR */

- tcg_rm = cpu_reg(s, rm);

- if (sf) {

- tcg_gen_rotri_i64(tcg_rd, tcg_rm, imm);

- } else {

- TCGv_i32 tmp = tcg_temp_new_i32();

- tcg_gen_extrl_i64_i32(tmp, tcg_rm);

- tcg_gen_rotri_i32(tmp, tmp, imm);

- tcg_gen_extu_i32_i64(tcg_rd, tmp);

- tcg_temp_free_i32(tmp);

- }

} else {

- tcg_rm = read_cpu_reg(s, rm, sf);

- tcg_rn = read_cpu_reg(s, rn, sf);

- tcg_gen_shri_i64(tcg_rm, tcg_rm, imm);

- tcg_gen_shli_i64(tcg_rn, tcg_rn, bitsize - imm);

- tcg_gen_or_i64(tcg_rd, tcg_rm, tcg_rn);

- if (!sf) {

- tcg_gen_ext32u_i64(tcg_rd, tcg_rd);

+ tcg_rm = cpu_reg(s, rm);

+ tcg_rn = cpu_reg(s, rn);

+

+ if (sf) {

+ /* Specialization to ROR happens in EXTRACT2. */

+ tcg_gen_extract2_i64(tcg_rd, tcg_rm, tcg_rn, imm);

+ } else {

+ TCGv_i32 t0 = tcg_temp_new_i32();

+

+ tcg_gen_extrl_i64_i32(t0, tcg_rm);

+ if (rm == rn) {

+ tcg_gen_rotri_i32(t0, t0, imm);

+ } else {

+ TCGv_i32 t1 = tcg_temp_new_i32();

+ tcg_gen_extrl_i64_i32(t1, tcg_rn);

+ tcg_gen_extract2_i32(t0, t0, t1, imm);

+ tcg_temp_free_i32(t1);

+ }

+ tcg_gen_extu_i32_i64(tcg_rd, t0);

+ tcg_temp_free_i32(t0);

}

}