2012-11-15 00:54:06 +04:00
|
|
|
/*
|
|
|
|
* q35.h
|
|
|
|
*
|
|
|
|
* Copyright (c) 2009 Isaku Yamahata <yamahata at valinux co jp>
|
|
|
|
* VA Linux Systems Japan K.K.
|
|
|
|
* Copyright (C) 2012 Jason Baron <jbaron@redhat.com>
|
|
|
|
*
|
|
|
|
* This program is free software; you can redistribute it and/or modify
|
|
|
|
* it under the terms of the GNU General Public License as published by
|
|
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
|
|
* (at your option) any later version.
|
|
|
|
*
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU General Public License for more details.
|
|
|
|
*
|
2019-01-23 17:51:23 +03:00
|
|
|
* You should have received a copy of the GNU General Public License
|
|
|
|
* along with this program; if not, see <http://www.gnu.org/licenses/>
|
2012-11-15 00:54:06 +04:00
|
|
|
*/
|
|
|
|
|
|
|
|
#ifndef HW_Q35_H
|
|
|
|
#define HW_Q35_H
|
|
|
|
|
2013-02-04 18:40:22 +04:00
|
|
|
#include "hw/hw.h"
|
2013-02-05 20:06:20 +04:00
|
|
|
#include "hw/isa/isa.h"
|
2013-02-04 18:40:22 +04:00
|
|
|
#include "hw/sysbus.h"
|
2013-02-05 20:06:20 +04:00
|
|
|
#include "hw/i386/pc.h"
|
|
|
|
#include "hw/isa/apm.h"
|
2013-02-04 18:40:22 +04:00
|
|
|
#include "hw/pci/pci.h"
|
|
|
|
#include "hw/pci/pcie_host.h"
|
2013-02-05 20:06:20 +04:00
|
|
|
#include "hw/acpi/acpi.h"
|
|
|
|
#include "hw/acpi/ich9.h"
|
|
|
|
#include "hw/pci-host/pam.h"
|
2014-08-16 09:55:40 +04:00
|
|
|
#include "hw/i386/intel_iommu.h"
|
2012-11-15 00:54:06 +04:00
|
|
|
|
|
|
|
#define TYPE_Q35_HOST_DEVICE "q35-pcihost"
|
|
|
|
#define Q35_HOST_DEVICE(obj) \
|
|
|
|
OBJECT_CHECK(Q35PCIHost, (obj), TYPE_Q35_HOST_DEVICE)
|
|
|
|
|
|
|
|
#define TYPE_MCH_PCI_DEVICE "mch"
|
|
|
|
#define MCH_PCI_DEVICE(obj) \
|
|
|
|
OBJECT_CHECK(MCHPCIState, (obj), TYPE_MCH_PCI_DEVICE)
|
|
|
|
|
|
|
|
typedef struct MCHPCIState {
|
2013-07-01 14:18:22 +04:00
|
|
|
/*< private >*/
|
|
|
|
PCIDevice parent_obj;
|
|
|
|
/*< public >*/
|
|
|
|
|
2012-11-15 00:54:06 +04:00
|
|
|
MemoryRegion *ram_memory;
|
|
|
|
MemoryRegion *pci_address_space;
|
|
|
|
MemoryRegion *system_memory;
|
|
|
|
MemoryRegion *address_space_io;
|
|
|
|
PAMMemoryRegion pam_regions[13];
|
2015-03-31 18:13:01 +03:00
|
|
|
MemoryRegion smram_region, open_high_smram;
|
|
|
|
MemoryRegion smram, low_smram, high_smram;
|
2015-04-20 11:55:09 +03:00
|
|
|
MemoryRegion tseg_blackhole, tseg_window;
|
2016-06-15 20:56:31 +03:00
|
|
|
Range pci_hole;
|
2016-06-22 15:24:49 +03:00
|
|
|
uint64_t below_4g_mem_size;
|
|
|
|
uint64_t above_4g_mem_size;
|
2013-07-29 18:47:57 +04:00
|
|
|
uint64_t pci_hole64_size;
|
2013-11-06 03:46:27 +04:00
|
|
|
uint32_t short_root_bus;
|
q35/mch: implement extended TSEG sizes
The q35 machine type currently lets the guest firmware select a 1MB, 2MB
or 8MB TSEG (basically, SMRAM) size. In edk2/OVMF, we use 8MB, but even
that is not enough when a lot of VCPUs (more than approx. 224) are
configured -- SMRAM footprint scales largely proportionally with VCPU
count.
Introduce a new property for "mch" called "extended-tseg-mbytes", which
expresses (in megabytes) the user's choice of TSEG (SMRAM) size.
Invent a new, QEMU-specific register in the config space of the DRAM
Controller, at offset 0x50, in order to allow guest firmware to query the
TSEG (SMRAM) size.
According to Intel Document Number 316966-002, Table 5-1 "DRAM Controller
Register Address Map (D0:F0)":
Warning: Address locations that are not listed are considered Intel
Reserved registers locations. Reads to Reserved registers may
return non-zero values. Writes to reserved locations may
cause system failures.
All registers that are defined in the PCI 2.3 specification,
but are not necessary or implemented in this component are
simply not included in this document. The
reserved/unimplemented space in the PCI configuration header
space is not documented as such in this summary.
Offsets 0x50 and 0x51 are not listed in Table 5-1. They are also not part
of the standard PCI config space header. And they precede the capability
list as well, which starts at 0xe0 for this device.
When the guest writes value 0xffff to this register, the value that can be
read back is that of "mch.extended-tseg-mbytes" -- unless it remains
0xffff. The guest is required to write 0xffff first (as opposed to a
read-only register) because PCI config space is generally not cleared on
QEMU reset, and after S3 resume or reboot, new guest firmware running on
old QEMU could read a guest OS-injected value from this register.
After reading the available "extended" TSEG size, the guest firmware may
actually request that TSEG size by writing pattern 11b to the ESMRAMC
register's TSEG_SZ bit-field. (The Intel spec referenced above defines
only patterns 00b (1MB), 01b (2MB) and 10b (8MB); 11b is reserved.)
On the QEMU command line, the value can be set with
-global mch.extended-tseg-mbytes=N
The default value for 2.10+ q35 machine types is 16. The value is limited
to 0xfff (4095) at the moment, purely so that the product (4095 MB) can be
stored to the uint32_t variable "tseg_size" in mch_update_smram(). Users
are responsible for choosing sensible TSEG sizes.
On 2.9 and earlier q35 machine types, the default value is 0. This lets
the 11b bit pattern in ESMRAMC.TSEG_SZ, and the register at offset 0x50,
keep their original behavior.
When "extended-tseg-mbytes" is nonzero, the new register at offset 0x50 is
set to that value on reset, for completeness.
PCI config space is migrated automatically, so no VMSD changes are
necessary.
Cc: "Michael S. Tsirkin" <mst@redhat.com>
Cc: Gerd Hoffmann <kraxel@redhat.com>
Cc: Paolo Bonzini <pbonzini@redhat.com>
Ref: https://bugzilla.redhat.com/show_bug.cgi?id=1447027
Ref: https://lists.01.org/pipermail/edk2-devel/2017-May/010456.html
Signed-off-by: Laszlo Ersek <lersek@redhat.com>
Reviewed-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
2017-06-08 19:10:13 +03:00
|
|
|
uint16_t ext_tseg_mbytes;
|
2012-11-15 00:54:06 +04:00
|
|
|
} MCHPCIState;
|
|
|
|
|
|
|
|
typedef struct Q35PCIHost {
|
2013-07-01 14:18:22 +04:00
|
|
|
/*< private >*/
|
|
|
|
PCIExpressHost parent_obj;
|
|
|
|
/*< public >*/
|
|
|
|
|
2017-11-11 18:25:00 +03:00
|
|
|
bool pci_hole64_fix;
|
2012-11-15 00:54:06 +04:00
|
|
|
MCHPCIState mch;
|
|
|
|
} Q35PCIHost;
|
|
|
|
|
|
|
|
#define Q35_MASK(bit, ms_bit, ls_bit) \
|
|
|
|
((uint##bit##_t)(((1ULL << ((ms_bit) + 1)) - 1) & ~((1ULL << ls_bit) - 1)))
|
|
|
|
|
|
|
|
/*
|
|
|
|
* gmch part
|
|
|
|
*/
|
|
|
|
|
2016-06-22 15:24:49 +03:00
|
|
|
#define MCH_HOST_PROP_RAM_MEM "ram-mem"
|
|
|
|
#define MCH_HOST_PROP_PCI_MEM "pci-mem"
|
|
|
|
#define MCH_HOST_PROP_SYSTEM_MEM "system-mem"
|
|
|
|
#define MCH_HOST_PROP_IO_MEM "io-mem"
|
|
|
|
|
2012-11-15 00:54:06 +04:00
|
|
|
/* PCI configuration */
|
|
|
|
#define MCH_HOST_BRIDGE "MCH"
|
|
|
|
|
|
|
|
#define MCH_HOST_BRIDGE_CONFIG_ADDR 0xcf8
|
|
|
|
#define MCH_HOST_BRIDGE_CONFIG_DATA 0xcfc
|
|
|
|
|
|
|
|
/* D0:F0 configuration space */
|
2013-09-02 17:43:36 +04:00
|
|
|
#define MCH_HOST_BRIDGE_REVISION_DEFAULT 0x0
|
2012-11-15 00:54:06 +04:00
|
|
|
|
q35/mch: implement extended TSEG sizes
The q35 machine type currently lets the guest firmware select a 1MB, 2MB
or 8MB TSEG (basically, SMRAM) size. In edk2/OVMF, we use 8MB, but even
that is not enough when a lot of VCPUs (more than approx. 224) are
configured -- SMRAM footprint scales largely proportionally with VCPU
count.
Introduce a new property for "mch" called "extended-tseg-mbytes", which
expresses (in megabytes) the user's choice of TSEG (SMRAM) size.
Invent a new, QEMU-specific register in the config space of the DRAM
Controller, at offset 0x50, in order to allow guest firmware to query the
TSEG (SMRAM) size.
According to Intel Document Number 316966-002, Table 5-1 "DRAM Controller
Register Address Map (D0:F0)":
Warning: Address locations that are not listed are considered Intel
Reserved registers locations. Reads to Reserved registers may
return non-zero values. Writes to reserved locations may
cause system failures.
All registers that are defined in the PCI 2.3 specification,
but are not necessary or implemented in this component are
simply not included in this document. The
reserved/unimplemented space in the PCI configuration header
space is not documented as such in this summary.
Offsets 0x50 and 0x51 are not listed in Table 5-1. They are also not part
of the standard PCI config space header. And they precede the capability
list as well, which starts at 0xe0 for this device.
When the guest writes value 0xffff to this register, the value that can be
read back is that of "mch.extended-tseg-mbytes" -- unless it remains
0xffff. The guest is required to write 0xffff first (as opposed to a
read-only register) because PCI config space is generally not cleared on
QEMU reset, and after S3 resume or reboot, new guest firmware running on
old QEMU could read a guest OS-injected value from this register.
After reading the available "extended" TSEG size, the guest firmware may
actually request that TSEG size by writing pattern 11b to the ESMRAMC
register's TSEG_SZ bit-field. (The Intel spec referenced above defines
only patterns 00b (1MB), 01b (2MB) and 10b (8MB); 11b is reserved.)
On the QEMU command line, the value can be set with
-global mch.extended-tseg-mbytes=N
The default value for 2.10+ q35 machine types is 16. The value is limited
to 0xfff (4095) at the moment, purely so that the product (4095 MB) can be
stored to the uint32_t variable "tseg_size" in mch_update_smram(). Users
are responsible for choosing sensible TSEG sizes.
On 2.9 and earlier q35 machine types, the default value is 0. This lets
the 11b bit pattern in ESMRAMC.TSEG_SZ, and the register at offset 0x50,
keep their original behavior.
When "extended-tseg-mbytes" is nonzero, the new register at offset 0x50 is
set to that value on reset, for completeness.
PCI config space is migrated automatically, so no VMSD changes are
necessary.
Cc: "Michael S. Tsirkin" <mst@redhat.com>
Cc: Gerd Hoffmann <kraxel@redhat.com>
Cc: Paolo Bonzini <pbonzini@redhat.com>
Ref: https://bugzilla.redhat.com/show_bug.cgi?id=1447027
Ref: https://lists.01.org/pipermail/edk2-devel/2017-May/010456.html
Signed-off-by: Laszlo Ersek <lersek@redhat.com>
Reviewed-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
2017-06-08 19:10:13 +03:00
|
|
|
#define MCH_HOST_BRIDGE_EXT_TSEG_MBYTES 0x50
|
|
|
|
#define MCH_HOST_BRIDGE_EXT_TSEG_MBYTES_SIZE 2
|
|
|
|
#define MCH_HOST_BRIDGE_EXT_TSEG_MBYTES_QUERY 0xffff
|
|
|
|
#define MCH_HOST_BRIDGE_EXT_TSEG_MBYTES_MAX 0xfff
|
|
|
|
|
2012-11-15 00:54:06 +04:00
|
|
|
#define MCH_HOST_BRIDGE_PCIEXBAR 0x60 /* 64bit register */
|
|
|
|
#define MCH_HOST_BRIDGE_PCIEXBAR_SIZE 8 /* 64bit register */
|
|
|
|
#define MCH_HOST_BRIDGE_PCIEXBAR_DEFAULT 0xb0000000
|
2013-05-30 13:57:26 +04:00
|
|
|
#define MCH_HOST_BRIDGE_PCIEXBAR_MAX (0x10000000) /* 256M */
|
2012-11-15 00:54:06 +04:00
|
|
|
#define MCH_HOST_BRIDGE_PCIEXBAR_ADMSK Q35_MASK(64, 35, 28)
|
|
|
|
#define MCH_HOST_BRIDGE_PCIEXBAR_128ADMSK ((uint64_t)(1 << 26))
|
|
|
|
#define MCH_HOST_BRIDGE_PCIEXBAR_64ADMSK ((uint64_t)(1 << 25))
|
|
|
|
#define MCH_HOST_BRIDGE_PCIEXBAR_LENGTH_MASK ((uint64_t)(0x3 << 1))
|
|
|
|
#define MCH_HOST_BRIDGE_PCIEXBAR_LENGTH_256M ((uint64_t)(0x0 << 1))
|
|
|
|
#define MCH_HOST_BRIDGE_PCIEXBAR_LENGTH_128M ((uint64_t)(0x1 << 1))
|
|
|
|
#define MCH_HOST_BRIDGE_PCIEXBAR_LENGTH_64M ((uint64_t)(0x2 << 1))
|
|
|
|
#define MCH_HOST_BRIDGE_PCIEXBAR_LENGTH_RVD ((uint64_t)(0x3 << 1))
|
|
|
|
#define MCH_HOST_BRIDGE_PCIEXBAREN ((uint64_t)1)
|
|
|
|
|
|
|
|
#define MCH_HOST_BRIDGE_PAM_NB 7
|
|
|
|
#define MCH_HOST_BRIDGE_PAM_SIZE 7
|
|
|
|
#define MCH_HOST_BRIDGE_PAM0 0x90
|
|
|
|
#define MCH_HOST_BRIDGE_PAM_BIOS_AREA 0xf0000
|
|
|
|
#define MCH_HOST_BRIDGE_PAM_AREA_SIZE 0x10000 /* 16KB */
|
|
|
|
#define MCH_HOST_BRIDGE_PAM1 0x91
|
|
|
|
#define MCH_HOST_BRIDGE_PAM_EXPAN_AREA 0xc0000
|
|
|
|
#define MCH_HOST_BRIDGE_PAM_EXPAN_SIZE 0x04000
|
|
|
|
#define MCH_HOST_BRIDGE_PAM2 0x92
|
|
|
|
#define MCH_HOST_BRIDGE_PAM3 0x93
|
|
|
|
#define MCH_HOST_BRIDGE_PAM4 0x94
|
|
|
|
#define MCH_HOST_BRIDGE_PAM_EXBIOS_AREA 0xe0000
|
|
|
|
#define MCH_HOST_BRIDGE_PAM_EXBIOS_SIZE 0x04000
|
|
|
|
#define MCH_HOST_BRIDGE_PAM5 0x95
|
|
|
|
#define MCH_HOST_BRIDGE_PAM6 0x96
|
|
|
|
#define MCH_HOST_BRIDGE_PAM_WE_HI ((uint8_t)(0x2 << 4))
|
|
|
|
#define MCH_HOST_BRIDGE_PAM_RE_HI ((uint8_t)(0x1 << 4))
|
|
|
|
#define MCH_HOST_BRIDGE_PAM_HI_MASK ((uint8_t)(0x3 << 4))
|
|
|
|
#define MCH_HOST_BRIDGE_PAM_WE_LO ((uint8_t)0x2)
|
|
|
|
#define MCH_HOST_BRIDGE_PAM_RE_LO ((uint8_t)0x1)
|
|
|
|
#define MCH_HOST_BRIDGE_PAM_LO_MASK ((uint8_t)0x3)
|
|
|
|
#define MCH_HOST_BRIDGE_PAM_WE ((uint8_t)0x2)
|
|
|
|
#define MCH_HOST_BRIDGE_PAM_RE ((uint8_t)0x1)
|
|
|
|
#define MCH_HOST_BRIDGE_PAM_MASK ((uint8_t)0x3)
|
|
|
|
|
2014-02-28 14:28:03 +04:00
|
|
|
#define MCH_HOST_BRIDGE_SMRAM 0x9d
|
2015-03-31 18:13:01 +03:00
|
|
|
#define MCH_HOST_BRIDGE_SMRAM_SIZE 2
|
2012-11-15 00:54:06 +04:00
|
|
|
#define MCH_HOST_BRIDGE_SMRAM_D_OPEN ((uint8_t)(1 << 6))
|
|
|
|
#define MCH_HOST_BRIDGE_SMRAM_D_CLS ((uint8_t)(1 << 5))
|
|
|
|
#define MCH_HOST_BRIDGE_SMRAM_D_LCK ((uint8_t)(1 << 4))
|
|
|
|
#define MCH_HOST_BRIDGE_SMRAM_G_SMRAME ((uint8_t)(1 << 3))
|
|
|
|
#define MCH_HOST_BRIDGE_SMRAM_C_BASE_SEG_MASK ((uint8_t)0x7)
|
|
|
|
#define MCH_HOST_BRIDGE_SMRAM_C_BASE_SEG ((uint8_t)0x2) /* hardwired to b010 */
|
|
|
|
#define MCH_HOST_BRIDGE_SMRAM_C_BASE 0xa0000
|
|
|
|
#define MCH_HOST_BRIDGE_SMRAM_C_END 0xc0000
|
|
|
|
#define MCH_HOST_BRIDGE_SMRAM_C_SIZE 0x20000
|
|
|
|
#define MCH_HOST_BRIDGE_UPPER_SYSTEM_BIOS_END 0x100000
|
2015-04-15 17:43:24 +03:00
|
|
|
#define MCH_HOST_BRIDGE_SMRAM_DEFAULT \
|
|
|
|
MCH_HOST_BRIDGE_SMRAM_C_BASE_SEG
|
2015-04-15 17:48:12 +03:00
|
|
|
#define MCH_HOST_BRIDGE_SMRAM_WMASK \
|
|
|
|
(MCH_HOST_BRIDGE_SMRAM_D_OPEN | \
|
|
|
|
MCH_HOST_BRIDGE_SMRAM_D_CLS | \
|
|
|
|
MCH_HOST_BRIDGE_SMRAM_D_LCK | \
|
|
|
|
MCH_HOST_BRIDGE_SMRAM_G_SMRAME)
|
2015-04-14 15:03:22 +03:00
|
|
|
#define MCH_HOST_BRIDGE_SMRAM_WMASK_LCK \
|
|
|
|
MCH_HOST_BRIDGE_SMRAM_D_CLS
|
2012-11-15 00:54:06 +04:00
|
|
|
|
|
|
|
#define MCH_HOST_BRIDGE_ESMRAMC 0x9e
|
2015-03-31 18:13:01 +03:00
|
|
|
#define MCH_HOST_BRIDGE_ESMRAMC_H_SMRAME ((uint8_t)(1 << 7))
|
|
|
|
#define MCH_HOST_BRIDGE_ESMRAMC_E_SMERR ((uint8_t)(1 << 6))
|
|
|
|
#define MCH_HOST_BRIDGE_ESMRAMC_SM_CACHE ((uint8_t)(1 << 5))
|
|
|
|
#define MCH_HOST_BRIDGE_ESMRAMC_SM_L1 ((uint8_t)(1 << 4))
|
|
|
|
#define MCH_HOST_BRIDGE_ESMRAMC_SM_L2 ((uint8_t)(1 << 3))
|
2014-02-28 14:28:03 +04:00
|
|
|
#define MCH_HOST_BRIDGE_ESMRAMC_TSEG_SZ_MASK ((uint8_t)(0x3 << 1))
|
|
|
|
#define MCH_HOST_BRIDGE_ESMRAMC_TSEG_SZ_1MB ((uint8_t)(0x0 << 1))
|
|
|
|
#define MCH_HOST_BRIDGE_ESMRAMC_TSEG_SZ_2MB ((uint8_t)(0x1 << 1))
|
|
|
|
#define MCH_HOST_BRIDGE_ESMRAMC_TSEG_SZ_8MB ((uint8_t)(0x2 << 1))
|
|
|
|
#define MCH_HOST_BRIDGE_ESMRAMC_T_EN ((uint8_t)1)
|
2015-04-15 17:43:24 +03:00
|
|
|
#define MCH_HOST_BRIDGE_ESMRAMC_DEFAULT \
|
|
|
|
(MCH_HOST_BRIDGE_ESMRAMC_SM_CACHE | \
|
|
|
|
MCH_HOST_BRIDGE_ESMRAMC_SM_L1 | \
|
|
|
|
MCH_HOST_BRIDGE_ESMRAMC_SM_L2)
|
2015-04-15 17:48:12 +03:00
|
|
|
#define MCH_HOST_BRIDGE_ESMRAMC_WMASK \
|
|
|
|
(MCH_HOST_BRIDGE_ESMRAMC_H_SMRAME | \
|
|
|
|
MCH_HOST_BRIDGE_ESMRAMC_TSEG_SZ_MASK | \
|
|
|
|
MCH_HOST_BRIDGE_ESMRAMC_T_EN)
|
2015-04-14 15:03:22 +03:00
|
|
|
#define MCH_HOST_BRIDGE_ESMRAMC_WMASK_LCK 0
|
2012-11-15 00:54:06 +04:00
|
|
|
|
|
|
|
/* D1:F0 PCIE* port*/
|
|
|
|
#define MCH_PCIE_DEV 1
|
|
|
|
#define MCH_PCIE_FUNC 0
|
|
|
|
|
2013-07-24 19:56:10 +04:00
|
|
|
uint64_t mch_mcfg_base(void);
|
|
|
|
|
2016-07-14 08:56:17 +03:00
|
|
|
/*
|
2016-11-19 22:47:15 +03:00
|
|
|
* Arbitrary but unique BNF number for IOAPIC device.
|
2016-07-14 08:56:17 +03:00
|
|
|
*
|
|
|
|
* TODO: make sure there would have no conflict with real PCI bus
|
|
|
|
*/
|
|
|
|
#define Q35_PSEUDO_BUS_PLATFORM (0xff)
|
|
|
|
#define Q35_PSEUDO_DEVFN_IOAPIC (0x00)
|
|
|
|
|
2012-11-15 00:54:06 +04:00
|
|
|
#endif /* HW_Q35_H */
|