2012-03-05 04:39:13 +00:00
|
|
|
/*
|
|
|
|
* Xilinx Zynq Baseboard System emulation.
|
|
|
|
*
|
|
|
|
* Copyright (c) 2010 Xilinx.
|
|
|
|
* Copyright (c) 2012 Peter A.G. Crosthwaite (peter.croshtwaite@petalogix.com)
|
|
|
|
* Copyright (c) 2012 Petalogix Pty Ltd.
|
|
|
|
* Written by Haibing Ma
|
|
|
|
*
|
|
|
|
* This program is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU General Public License
|
|
|
|
* as published by the Free Software Foundation; either version
|
|
|
|
* 2 of the License, or (at your option) any later version.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU General Public License along
|
|
|
|
* with this program; if not, see <http://www.gnu.org/licenses/>.
|
|
|
|
*/
|
|
|
|
|
2013-02-04 14:40:22 +00:00
|
|
|
#include "hw/sysbus.h"
|
2013-04-09 14:26:55 +00:00
|
|
|
#include "hw/arm/arm.h"
|
2012-10-24 06:43:34 +00:00
|
|
|
#include "net/net.h"
|
2012-12-17 17:19:49 +00:00
|
|
|
#include "exec/address-spaces.h"
|
2012-12-17 17:20:04 +00:00
|
|
|
#include "sysemu/sysemu.h"
|
2013-02-04 14:40:22 +00:00
|
|
|
#include "hw/boards.h"
|
2013-02-05 16:06:20 +00:00
|
|
|
#include "hw/block/flash.h"
|
2014-10-07 11:59:13 +00:00
|
|
|
#include "sysemu/block-backend.h"
|
2013-02-04 14:40:22 +00:00
|
|
|
#include "hw/loader.h"
|
|
|
|
#include "hw/ssi.h"
|
2013-12-17 19:42:28 +00:00
|
|
|
#include "qemu/error-report.h"
|
2012-08-03 06:08:48 +00:00
|
|
|
|
|
|
|
#define NUM_SPI_FLASHES 4
|
2012-10-15 04:40:21 +00:00
|
|
|
#define NUM_QSPI_FLASHES 2
|
|
|
|
#define NUM_QSPI_BUSSES 2
|
2012-03-05 04:39:13 +00:00
|
|
|
|
|
|
|
#define FLASH_SIZE (64 * 1024 * 1024)
|
|
|
|
#define FLASH_SECTOR_SIZE (128 * 1024)
|
|
|
|
|
|
|
|
#define IRQ_OFFSET 32 /* pic interrupts start from index 32 */
|
|
|
|
|
2013-12-17 19:42:29 +00:00
|
|
|
#define MPCORE_PERIPHBASE 0xF8F00000
|
2014-01-31 14:47:33 +00:00
|
|
|
#define ZYNQ_BOARD_MIDR 0x413FC090
|
2013-12-17 19:42:29 +00:00
|
|
|
|
2013-03-15 16:41:58 +00:00
|
|
|
static const int dma_irqs[8] = {
|
|
|
|
46, 47, 48, 49, 72, 73, 74, 75
|
|
|
|
};
|
|
|
|
|
2012-03-05 04:39:13 +00:00
|
|
|
static struct arm_boot_info zynq_binfo = {};
|
|
|
|
|
|
|
|
static void gem_init(NICInfo *nd, uint32_t base, qemu_irq irq)
|
|
|
|
{
|
|
|
|
DeviceState *dev;
|
|
|
|
SysBusDevice *s;
|
|
|
|
|
|
|
|
dev = qdev_create(NULL, "cadence_gem");
|
2014-01-04 01:58:43 +00:00
|
|
|
if (nd->used) {
|
|
|
|
qemu_check_nic_model(nd, "cadence_gem");
|
|
|
|
qdev_set_nic_properties(dev, nd);
|
|
|
|
}
|
2012-03-05 04:39:13 +00:00
|
|
|
qdev_init_nofail(dev);
|
2013-01-20 01:47:33 +00:00
|
|
|
s = SYS_BUS_DEVICE(dev);
|
2012-03-05 04:39:13 +00:00
|
|
|
sysbus_mmio_map(s, 0, base);
|
|
|
|
sysbus_connect_irq(s, 0, irq);
|
|
|
|
}
|
|
|
|
|
2012-10-15 04:40:21 +00:00
|
|
|
static inline void zynq_init_spi_flashes(uint32_t base_addr, qemu_irq irq,
|
|
|
|
bool is_qspi)
|
2012-08-03 06:08:48 +00:00
|
|
|
{
|
|
|
|
DeviceState *dev;
|
|
|
|
SysBusDevice *busdev;
|
|
|
|
SSIBus *spi;
|
2012-12-11 11:30:37 +00:00
|
|
|
DeviceState *flash_dev;
|
2012-10-15 04:40:21 +00:00
|
|
|
int i, j;
|
|
|
|
int num_busses = is_qspi ? NUM_QSPI_BUSSES : 1;
|
|
|
|
int num_ss = is_qspi ? NUM_QSPI_FLASHES : NUM_SPI_FLASHES;
|
2012-08-03 06:08:48 +00:00
|
|
|
|
2013-06-03 16:17:41 +00:00
|
|
|
dev = qdev_create(NULL, is_qspi ? "xlnx.ps7-qspi" : "xlnx.ps7-spi");
|
2012-10-15 04:40:21 +00:00
|
|
|
qdev_prop_set_uint8(dev, "num-txrx-bytes", is_qspi ? 4 : 1);
|
|
|
|
qdev_prop_set_uint8(dev, "num-ss-bits", num_ss);
|
|
|
|
qdev_prop_set_uint8(dev, "num-busses", num_busses);
|
2012-08-03 06:08:48 +00:00
|
|
|
qdev_init_nofail(dev);
|
2013-01-20 01:47:33 +00:00
|
|
|
busdev = SYS_BUS_DEVICE(dev);
|
2012-08-03 06:08:48 +00:00
|
|
|
sysbus_mmio_map(busdev, 0, base_addr);
|
2012-10-15 04:40:21 +00:00
|
|
|
if (is_qspi) {
|
|
|
|
sysbus_mmio_map(busdev, 1, 0xFC000000);
|
|
|
|
}
|
2012-08-03 06:08:48 +00:00
|
|
|
sysbus_connect_irq(busdev, 0, irq);
|
|
|
|
|
2012-10-15 04:40:21 +00:00
|
|
|
for (i = 0; i < num_busses; ++i) {
|
|
|
|
char bus_name[16];
|
2012-08-03 06:08:48 +00:00
|
|
|
qemu_irq cs_line;
|
|
|
|
|
2012-10-15 04:40:21 +00:00
|
|
|
snprintf(bus_name, 16, "spi%d", i);
|
|
|
|
spi = (SSIBus *)qdev_get_child_bus(dev, bus_name);
|
|
|
|
|
|
|
|
for (j = 0; j < num_ss; ++j) {
|
2013-04-04 01:04:12 +00:00
|
|
|
flash_dev = ssi_create_slave(spi, "n25q128");
|
2012-08-03 06:08:48 +00:00
|
|
|
|
2014-05-20 06:31:33 +00:00
|
|
|
cs_line = qdev_get_gpio_in_named(flash_dev, SSI_GPIO_CS, 0);
|
2012-10-15 04:40:21 +00:00
|
|
|
sysbus_connect_irq(busdev, i * num_ss + j + 1, cs_line);
|
|
|
|
}
|
2012-08-03 06:08:48 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
}
|
|
|
|
|
2014-05-07 14:42:57 +00:00
|
|
|
static void zynq_init(MachineState *machine)
|
2012-03-05 04:39:13 +00:00
|
|
|
{
|
2014-05-07 14:42:57 +00:00
|
|
|
ram_addr_t ram_size = machine->ram_size;
|
|
|
|
const char *cpu_model = machine->cpu_model;
|
|
|
|
const char *kernel_filename = machine->kernel_filename;
|
|
|
|
const char *kernel_cmdline = machine->kernel_cmdline;
|
|
|
|
const char *initrd_filename = machine->initrd_filename;
|
2013-12-17 19:42:28 +00:00
|
|
|
ObjectClass *cpu_oc;
|
2012-05-14 00:55:25 +00:00
|
|
|
ARMCPU *cpu;
|
2012-03-05 04:39:13 +00:00
|
|
|
MemoryRegion *address_space_mem = get_system_memory();
|
|
|
|
MemoryRegion *ext_ram = g_new(MemoryRegion, 1);
|
|
|
|
MemoryRegion *ocm_ram = g_new(MemoryRegion, 1);
|
|
|
|
DeviceState *dev;
|
|
|
|
SysBusDevice *busdev;
|
|
|
|
qemu_irq pic[64];
|
2013-12-17 19:42:28 +00:00
|
|
|
Error *err = NULL;
|
2012-03-05 04:39:13 +00:00
|
|
|
int n;
|
|
|
|
|
|
|
|
if (!cpu_model) {
|
|
|
|
cpu_model = "cortex-a9";
|
|
|
|
}
|
2013-12-17 19:42:28 +00:00
|
|
|
cpu_oc = cpu_class_by_name(TYPE_ARM_CPU, cpu_model);
|
2012-03-05 04:39:13 +00:00
|
|
|
|
2013-12-17 19:42:28 +00:00
|
|
|
cpu = ARM_CPU(object_new(object_class_get_name(cpu_oc)));
|
|
|
|
|
2014-12-15 23:09:51 +00:00
|
|
|
/* By default A9 CPUs have EL3 enabled. This board does not
|
|
|
|
* currently support EL3 so the CPU EL3 property is disabled before
|
|
|
|
* realization.
|
|
|
|
*/
|
|
|
|
if (object_property_find(OBJECT(cpu), "has_el3", NULL)) {
|
|
|
|
object_property_set_bool(OBJECT(cpu), false, "has_el3", &err);
|
|
|
|
if (err) {
|
2015-02-12 12:55:05 +00:00
|
|
|
error_report_err(err);
|
2014-12-15 23:09:51 +00:00
|
|
|
exit(1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2014-01-31 14:47:33 +00:00
|
|
|
object_property_set_int(OBJECT(cpu), ZYNQ_BOARD_MIDR, "midr", &err);
|
|
|
|
if (err) {
|
2015-02-12 12:55:05 +00:00
|
|
|
error_report_err(err);
|
2014-01-31 14:47:33 +00:00
|
|
|
exit(1);
|
|
|
|
}
|
|
|
|
|
2013-12-17 19:42:29 +00:00
|
|
|
object_property_set_int(OBJECT(cpu), MPCORE_PERIPHBASE, "reset-cbar", &err);
|
|
|
|
if (err) {
|
2015-02-12 12:55:05 +00:00
|
|
|
error_report_err(err);
|
2013-12-17 19:42:29 +00:00
|
|
|
exit(1);
|
|
|
|
}
|
2013-12-17 19:42:28 +00:00
|
|
|
object_property_set_bool(OBJECT(cpu), true, "realized", &err);
|
|
|
|
if (err) {
|
2015-02-12 12:55:05 +00:00
|
|
|
error_report_err(err);
|
2012-03-05 04:39:13 +00:00
|
|
|
exit(1);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* max 2GB ram */
|
|
|
|
if (ram_size > 0x80000000) {
|
|
|
|
ram_size = 0x80000000;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* DDR remapped to address zero. */
|
2015-04-04 12:24:38 +00:00
|
|
|
memory_region_allocate_system_memory(ext_ram, NULL, "zynq.ext_ram",
|
|
|
|
ram_size);
|
2012-03-05 04:39:13 +00:00
|
|
|
memory_region_add_subregion(address_space_mem, 0, ext_ram);
|
|
|
|
|
|
|
|
/* 256K of on-chip memory */
|
2014-09-09 05:27:55 +00:00
|
|
|
memory_region_init_ram(ocm_ram, NULL, "zynq.ocm_ram", 256 << 10,
|
Fix bad error handling after memory_region_init_ram()
Symptom:
$ qemu-system-x86_64 -m 10000000
Unexpected error in ram_block_add() at /work/armbru/qemu/exec.c:1456:
upstream-qemu: cannot set up guest memory 'pc.ram': Cannot allocate memory
Aborted (core dumped)
Root cause: commit ef701d7 screwed up handling of out-of-memory
conditions. Before the commit, we report the error and exit(1), in
one place, ram_block_add(). The commit lifts the error handling up
the call chain some, to three places. Fine. Except it uses
&error_abort in these places, changing the behavior from exit(1) to
abort(), and thus undoing the work of commit 3922825 "exec: Don't
abort when we can't allocate guest memory".
The three places are:
* memory_region_init_ram()
Commit 4994653 (right after commit ef701d7) lifted the error
handling further, through memory_region_init_ram(), multiplying the
incorrect use of &error_abort. Later on, imitation of existing
(bad) code may have created more.
* memory_region_init_ram_ptr()
The &error_abort is still there.
* memory_region_init_rom_device()
Doesn't need fixing, because commit 33e0eb5 (soon after commit
ef701d7) lifted the error handling further, and in the process
changed it from &error_abort to passing it up the call chain.
Correct, because the callers are realize() methods.
Fix the error handling after memory_region_init_ram() with a
Coccinelle semantic patch:
@r@
expression mr, owner, name, size, err;
position p;
@@
memory_region_init_ram(mr, owner, name, size,
(
- &error_abort
+ &error_fatal
|
err@p
)
);
@script:python@
p << r.p;
@@
print "%s:%s:%s" % (p[0].file, p[0].line, p[0].column)
When the last argument is &error_abort, it gets replaced by
&error_fatal. This is the fix.
If the last argument is anything else, its position is reported. This
lets us check the fix is complete. Four positions get reported:
* ram_backend_memory_alloc()
Error is passed up the call chain, ultimately through
user_creatable_complete(). As far as I can tell, it's callers all
handle the error sanely.
* fsl_imx25_realize(), fsl_imx31_realize(), dp8393x_realize()
DeviceClass.realize() methods, errors handled sanely further up the
call chain.
We're good. Test case again behaves:
$ qemu-system-x86_64 -m 10000000
qemu-system-x86_64: cannot set up guest memory 'pc.ram': Cannot allocate memory
[Exit 1 ]
The next commits will repair the rest of commit ef701d7's damage.
Signed-off-by: Markus Armbruster <armbru@redhat.com>
Message-Id: <1441983105-26376-3-git-send-email-armbru@redhat.com>
Reviewed-by: Peter Crosthwaite <crosthwaite.peter@gmail.com>
2015-09-11 14:51:43 +00:00
|
|
|
&error_fatal);
|
2012-03-05 04:39:13 +00:00
|
|
|
vmstate_register_ram_global(ocm_ram);
|
|
|
|
memory_region_add_subregion(address_space_mem, 0xFFFC0000, ocm_ram);
|
|
|
|
|
|
|
|
DriveInfo *dinfo = drive_get(IF_PFLASH, 0, 0);
|
|
|
|
|
|
|
|
/* AMD */
|
|
|
|
pflash_cfi02_register(0xe2000000, NULL, "zynq.pflash", FLASH_SIZE,
|
2014-10-07 11:59:18 +00:00
|
|
|
dinfo ? blk_by_legacy_dinfo(dinfo) : NULL,
|
2014-10-07 11:59:13 +00:00
|
|
|
FLASH_SECTOR_SIZE,
|
2012-03-05 04:39:13 +00:00
|
|
|
FLASH_SIZE/FLASH_SECTOR_SIZE, 1,
|
|
|
|
1, 0x0066, 0x0022, 0x0000, 0x0000, 0x0555, 0x2aa,
|
|
|
|
0);
|
|
|
|
|
|
|
|
dev = qdev_create(NULL, "xilinx,zynq_slcr");
|
|
|
|
qdev_init_nofail(dev);
|
2013-01-20 01:47:33 +00:00
|
|
|
sysbus_mmio_map(SYS_BUS_DEVICE(dev), 0, 0xF8000000);
|
2012-03-05 04:39:13 +00:00
|
|
|
|
|
|
|
dev = qdev_create(NULL, "a9mpcore_priv");
|
|
|
|
qdev_prop_set_uint32(dev, "num-cpu", 1);
|
|
|
|
qdev_init_nofail(dev);
|
2013-01-20 01:47:33 +00:00
|
|
|
busdev = SYS_BUS_DEVICE(dev);
|
2013-12-17 19:42:29 +00:00
|
|
|
sysbus_mmio_map(busdev, 0, MPCORE_PERIPHBASE);
|
2013-08-20 13:54:30 +00:00
|
|
|
sysbus_connect_irq(busdev, 0,
|
|
|
|
qdev_get_gpio_in(DEVICE(cpu), ARM_CPU_IRQ));
|
2012-03-05 04:39:13 +00:00
|
|
|
|
|
|
|
for (n = 0; n < 64; n++) {
|
|
|
|
pic[n] = qdev_get_gpio_in(dev, n);
|
|
|
|
}
|
|
|
|
|
2012-10-15 04:40:21 +00:00
|
|
|
zynq_init_spi_flashes(0xE0006000, pic[58-IRQ_OFFSET], false);
|
|
|
|
zynq_init_spi_flashes(0xE0007000, pic[81-IRQ_OFFSET], false);
|
|
|
|
zynq_init_spi_flashes(0xE000D000, pic[51-IRQ_OFFSET], true);
|
2012-08-03 06:08:48 +00:00
|
|
|
|
2012-10-29 01:34:38 +00:00
|
|
|
sysbus_create_simple("xlnx,ps7-usb", 0xE0002000, pic[53-IRQ_OFFSET]);
|
2013-02-07 06:58:15 +00:00
|
|
|
sysbus_create_simple("xlnx,ps7-usb", 0xE0003000, pic[76-IRQ_OFFSET]);
|
2012-10-29 01:34:38 +00:00
|
|
|
|
2012-03-05 04:39:13 +00:00
|
|
|
sysbus_create_simple("cadence_uart", 0xE0000000, pic[59-IRQ_OFFSET]);
|
|
|
|
sysbus_create_simple("cadence_uart", 0xE0001000, pic[82-IRQ_OFFSET]);
|
|
|
|
|
|
|
|
sysbus_create_varargs("cadence_ttc", 0xF8001000,
|
|
|
|
pic[42-IRQ_OFFSET], pic[43-IRQ_OFFSET], pic[44-IRQ_OFFSET], NULL);
|
|
|
|
sysbus_create_varargs("cadence_ttc", 0xF8002000,
|
|
|
|
pic[69-IRQ_OFFSET], pic[70-IRQ_OFFSET], pic[71-IRQ_OFFSET], NULL);
|
|
|
|
|
2014-01-04 01:58:43 +00:00
|
|
|
gem_init(&nd_table[0], 0xE000B000, pic[54-IRQ_OFFSET]);
|
|
|
|
gem_init(&nd_table[1], 0xE000C000, pic[77-IRQ_OFFSET]);
|
2012-03-05 04:39:13 +00:00
|
|
|
|
2013-02-28 18:23:14 +00:00
|
|
|
dev = qdev_create(NULL, "generic-sdhci");
|
|
|
|
qdev_init_nofail(dev);
|
|
|
|
sysbus_mmio_map(SYS_BUS_DEVICE(dev), 0, 0xE0100000);
|
|
|
|
sysbus_connect_irq(SYS_BUS_DEVICE(dev), 0, pic[56-IRQ_OFFSET]);
|
|
|
|
|
|
|
|
dev = qdev_create(NULL, "generic-sdhci");
|
|
|
|
qdev_init_nofail(dev);
|
|
|
|
sysbus_mmio_map(SYS_BUS_DEVICE(dev), 0, 0xE0101000);
|
|
|
|
sysbus_connect_irq(SYS_BUS_DEVICE(dev), 0, pic[79-IRQ_OFFSET]);
|
|
|
|
|
2013-03-15 16:41:58 +00:00
|
|
|
dev = qdev_create(NULL, "pl330");
|
|
|
|
qdev_prop_set_uint8(dev, "num_chnls", 8);
|
|
|
|
qdev_prop_set_uint8(dev, "num_periph_req", 4);
|
|
|
|
qdev_prop_set_uint8(dev, "num_events", 16);
|
|
|
|
|
|
|
|
qdev_prop_set_uint8(dev, "data_width", 64);
|
|
|
|
qdev_prop_set_uint8(dev, "wr_cap", 8);
|
|
|
|
qdev_prop_set_uint8(dev, "wr_q_dep", 16);
|
|
|
|
qdev_prop_set_uint8(dev, "rd_cap", 8);
|
|
|
|
qdev_prop_set_uint8(dev, "rd_q_dep", 16);
|
|
|
|
qdev_prop_set_uint16(dev, "data_buffer_dep", 256);
|
|
|
|
|
|
|
|
qdev_init_nofail(dev);
|
|
|
|
busdev = SYS_BUS_DEVICE(dev);
|
|
|
|
sysbus_mmio_map(busdev, 0, 0xF8003000);
|
|
|
|
sysbus_connect_irq(busdev, 0, pic[45-IRQ_OFFSET]); /* abort irq line */
|
|
|
|
for (n = 0; n < 8; ++n) { /* event irqs */
|
|
|
|
sysbus_connect_irq(busdev, n + 1, pic[dma_irqs[n] - IRQ_OFFSET]);
|
|
|
|
}
|
|
|
|
|
2012-03-05 04:39:13 +00:00
|
|
|
zynq_binfo.ram_size = ram_size;
|
|
|
|
zynq_binfo.kernel_filename = kernel_filename;
|
|
|
|
zynq_binfo.kernel_cmdline = kernel_cmdline;
|
|
|
|
zynq_binfo.initrd_filename = initrd_filename;
|
|
|
|
zynq_binfo.nb_cpus = 1;
|
|
|
|
zynq_binfo.board_id = 0xd32;
|
|
|
|
zynq_binfo.loader_start = 0;
|
2013-05-29 20:29:20 +00:00
|
|
|
arm_load_kernel(ARM_CPU(first_cpu), &zynq_binfo);
|
2012-03-05 04:39:13 +00:00
|
|
|
}
|
|
|
|
|
2015-09-04 18:37:08 +00:00
|
|
|
static void zynq_machine_init(MachineClass *mc)
|
2012-03-05 04:39:13 +00:00
|
|
|
{
|
2015-09-04 18:37:08 +00:00
|
|
|
mc->desc = "Xilinx Zynq Platform Baseboard for Cortex-A9";
|
|
|
|
mc->init = zynq_init;
|
|
|
|
mc->block_default_type = IF_SCSI;
|
|
|
|
mc->max_cpus = 1;
|
|
|
|
mc->no_sdcard = 1;
|
2012-03-05 04:39:13 +00:00
|
|
|
}
|
|
|
|
|
2015-09-04 18:37:08 +00:00
|
|
|
DEFINE_MACHINE("xilinx-zynq-a9", zynq_machine_init)
|