2012-02-16 13:56:07 +04:00
|
|
|
/*
|
|
|
|
* Cortex-A15MPCore internal peripheral emulation.
|
|
|
|
*
|
|
|
|
* Copyright (c) 2012 Linaro Limited.
|
|
|
|
* Written by Peter Maydell.
|
|
|
|
*
|
|
|
|
* This program is free software; you can redistribute it and/or modify
|
|
|
|
* it under the terms of the GNU General Public License as published by
|
|
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
|
|
* (at your option) any later version.
|
|
|
|
*
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU General Public License along
|
|
|
|
* with this program; if not, see <http://www.gnu.org/licenses/>.
|
|
|
|
*/
|
|
|
|
|
2016-01-26 21:17:30 +03:00
|
|
|
#include "qemu/osdep.h"
|
include/qemu/osdep.h: Don't include qapi/error.h
Commit 57cb38b included qapi/error.h into qemu/osdep.h to get the
Error typedef. Since then, we've moved to include qemu/osdep.h
everywhere. Its file comment explains: "To avoid getting into
possible circular include dependencies, this file should not include
any other QEMU headers, with the exceptions of config-host.h,
compiler.h, os-posix.h and os-win32.h, all of which are doing a
similar job to this file and are under similar constraints."
qapi/error.h doesn't do a similar job, and it doesn't adhere to
similar constraints: it includes qapi-types.h. That's in excess of
100KiB of crap most .c files don't actually need.
Add the typedef to qemu/typedefs.h, and include that instead of
qapi/error.h. Include qapi/error.h in .c files that need it and don't
get it now. Include qapi-types.h in qom/object.h for uint16List.
Update scripts/clean-includes accordingly. Update it further to match
reality: replace config.h by config-target.h, add sysemu/os-posix.h,
sysemu/os-win32.h. Update the list of includes in the qemu/osdep.h
comment quoted above similarly.
This reduces the number of objects depending on qapi/error.h from "all
of them" to less than a third. Unfortunately, the number depending on
qapi-types.h shrinks only a little. More work is needed for that one.
Signed-off-by: Markus Armbruster <armbru@redhat.com>
[Fix compilation without the spice devel packages. - Paolo]
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
2016-03-14 11:01:28 +03:00
|
|
|
#include "qapi/error.h"
|
2019-05-23 17:35:07 +03:00
|
|
|
#include "qemu/module.h"
|
2013-06-30 23:31:01 +04:00
|
|
|
#include "hw/cpu/a15mpcore.h"
|
2019-08-12 08:23:42 +03:00
|
|
|
#include "hw/irq.h"
|
2019-08-12 08:23:51 +03:00
|
|
|
#include "hw/qdev-properties.h"
|
2013-03-05 04:34:43 +04:00
|
|
|
#include "sysemu/kvm.h"
|
2015-08-13 13:26:21 +03:00
|
|
|
#include "kvm_arm.h"
|
2012-02-16 13:56:07 +04:00
|
|
|
|
2012-04-13 15:39:07 +04:00
|
|
|
static void a15mp_priv_set_irq(void *opaque, int irq, int level)
|
|
|
|
{
|
|
|
|
A15MPPrivState *s = (A15MPPrivState *)opaque;
|
2013-06-30 23:20:26 +04:00
|
|
|
|
|
|
|
qemu_set_irq(qdev_get_gpio_in(DEVICE(&s->gic), irq), level);
|
2012-04-13 15:39:07 +04:00
|
|
|
}
|
|
|
|
|
2013-06-30 23:07:31 +04:00
|
|
|
static void a15mp_priv_initfn(Object *obj)
|
|
|
|
{
|
|
|
|
SysBusDevice *sbd = SYS_BUS_DEVICE(obj);
|
|
|
|
A15MPPrivState *s = A15MPCORE_PRIV(obj);
|
|
|
|
|
|
|
|
memory_region_init(&s->container, obj, "a15mp-priv-container", 0x8000);
|
|
|
|
sysbus_init_mmio(sbd, &s->container);
|
2013-06-30 23:20:26 +04:00
|
|
|
|
sysbus: Convert qdev_set_parent_bus() use with Coccinelle, part 2
This is the same transformation as in the previous commit, except
sysbus_init_child_obj() and realize are too separated for the commit's
Coccinelle script to handle, typically because sysbus_init_child_obj()
is in a device's instance_init() method, and the matching realize is
in its realize() method.
Perhaps a Coccinelle wizard could make it transform that pattern, but
I'm just a bungler, and the best I can do is transforming the two
separate parts separately:
@@
expression errp;
expression child;
symbol true;
@@
- object_property_set_bool(OBJECT(child), true, "realized", errp);
+ sysbus_realize(SYS_BUS_DEVICE(child), errp);
// only correct with a matching sysbus_init_child_obj() transformation!
@@
expression errp;
expression child;
symbol true;
@@
- object_property_set_bool(child, true, "realized", errp);
+ sysbus_realize(SYS_BUS_DEVICE(child), errp);
// only correct with a matching sysbus_init_child_obj() transformation!
@@
expression child;
@@
- qdev_init_nofail(DEVICE(child));
+ sysbus_realize(SYS_BUS_DEVICE(child), &error_fatal);
// only correct with a matching sysbus_init_child_obj() transformation!
@@
expression child;
expression dev;
@@
dev = DEVICE(child);
...
- qdev_init_nofail(dev);
+ sysbus_realize(SYS_BUS_DEVICE(dev), &error_fatal);
// only correct with a matching sysbus_init_child_obj() transformation!
@@
expression child;
identifier dev;
@@
DeviceState *dev = DEVICE(child);
...
- qdev_init_nofail(dev);
+ sysbus_realize(SYS_BUS_DEVICE(dev), &error_fatal);
// only correct with a matching sysbus_init_child_obj() transformation!
@@
expression parent, name, size, type;
expression child;
symbol true;
@@
- sysbus_init_child_obj(parent, name, child, size, type);
+ sysbus_init_child_XXX(parent, name, child, size, type);
@@
expression parent, propname, type;
expression child;
@@
- sysbus_init_child_XXX(parent, propname, child, sizeof(*child), type)
+ object_initialize_child(parent, propname, child, type)
@@
expression parent, propname, type;
expression child;
@@
- sysbus_init_child_XXX(parent, propname, &child, sizeof(child), type)
+ object_initialize_child(parent, propname, &child, type)
This script is *unsound*: we need to manually verify init and realize
conversions are properly paired.
This commit has only the pairs where object_initialize_child()'s
@child and sysbus_realize()'s @dev argument text match exactly within
the same source file.
Note that Coccinelle chokes on ARMSSE typedef vs. macro in
hw/arm/armsse.c. Worked around by temporarily renaming the macro for
the spatch run.
Signed-off-by: Markus Armbruster <armbru@redhat.com>
Acked-by: Alistair Francis <alistair.francis@wdc.com>
Reviewed-by: Paolo Bonzini <pbonzini@redhat.com>
Message-Id: <20200610053247.1583243-49-armbru@redhat.com>
2020-06-10 08:32:37 +03:00
|
|
|
object_initialize_child(obj, "gic", &s->gic, gic_class_name());
|
hw/cpu/a15mpcore: Fix introspection problem with the a15mpcore_priv device
There is a memory management problem when introspecting the a15mpcore_priv
device. It can be seen with valgrind when running QEMU like this:
echo "{'execute':'qmp_capabilities'} {'execute':'device-list-properties'," \
"'arguments':{'typename':'a15mpcore_priv'}}"\
"{'execute': 'human-monitor-command', " \
"'arguments': {'command-line': 'info qtree'}}" | \
valgrind -q aarch64-softmmu/qemu-system-aarch64 -M none,accel=qtest -qmp stdio
{"QMP": {"version": {"qemu": {"micro": 50, "minor": 12, "major": 2},
"package": "build-all"}, "capabilities": []}}
{"return": {}}
{"return": [{"name": "num-cpu", "type": "uint32"}, {"name": "num-irq",
"type": "uint32"}, {"name": "a15mp-priv-container[0]", "type":
"child<qemu:memory-region>"}]}
==24978== Invalid read of size 8
==24978== at 0x618EBA: qdev_print (qdev-monitor.c:686)
==24978== by 0x618EBA: qbus_print (qdev-monitor.c:719)
[...]
Use the new sysbus_init_child_obj() function to make sure that we get
the reference counting of the child objects right.
Reviewed-by: Richard Henderson <richard.henderson@linaro.org>
Reviewed-by: Paolo Bonzini <pbonzini@redhat.com>
Reviewed-by: Eduardo Habkost <ehabkost@redhat.com>
Signed-off-by: Thomas Huth <thuth@redhat.com>
Reviewed-by: Alistair Francis <alistair.francis@wdc.com>
Message-id: 1531745974-17187-6-git-send-email-thuth@redhat.com
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
2018-07-16 15:59:22 +03:00
|
|
|
qdev_prop_set_uint32(DEVICE(&s->gic), "revision", 2);
|
2013-06-30 23:07:31 +04:00
|
|
|
}
|
|
|
|
|
2013-06-30 23:22:54 +04:00
|
|
|
static void a15mp_priv_realize(DeviceState *dev, Error **errp)
|
2012-02-16 13:56:07 +04:00
|
|
|
{
|
2013-06-30 23:22:54 +04:00
|
|
|
SysBusDevice *sbd = SYS_BUS_DEVICE(dev);
|
2013-06-30 23:03:27 +04:00
|
|
|
A15MPPrivState *s = A15MPCORE_PRIV(dev);
|
2013-06-30 23:20:26 +04:00
|
|
|
DeviceState *gicdev;
|
2012-04-13 15:39:07 +04:00
|
|
|
SysBusDevice *busdev;
|
2013-08-20 17:54:32 +04:00
|
|
|
int i;
|
2015-09-08 19:38:43 +03:00
|
|
|
bool has_el3;
|
2018-08-24 15:17:34 +03:00
|
|
|
bool has_el2 = false;
|
2015-09-08 19:38:43 +03:00
|
|
|
Object *cpuobj;
|
2012-04-13 15:39:07 +04:00
|
|
|
|
2013-06-30 23:20:26 +04:00
|
|
|
gicdev = DEVICE(&s->gic);
|
|
|
|
qdev_prop_set_uint32(gicdev, "num-cpu", s->num_cpu);
|
|
|
|
qdev_prop_set_uint32(gicdev, "num-irq", s->num_irq);
|
2015-09-08 19:38:43 +03:00
|
|
|
|
|
|
|
if (!kvm_irqchip_in_kernel()) {
|
|
|
|
/* Make the GIC's TZ support match the CPUs. We assume that
|
|
|
|
* either all the CPUs have TZ, or none do.
|
|
|
|
*/
|
|
|
|
cpuobj = OBJECT(qemu_get_cpu(0));
|
2015-09-14 16:39:49 +03:00
|
|
|
has_el3 = object_property_find(cpuobj, "has_el3", NULL) &&
|
2015-09-08 19:38:43 +03:00
|
|
|
object_property_get_bool(cpuobj, "has_el3", &error_abort);
|
|
|
|
qdev_prop_set_bit(gicdev, "has-security-extensions", has_el3);
|
2018-08-24 15:17:34 +03:00
|
|
|
/* Similarly for virtualization support */
|
|
|
|
has_el2 = object_property_find(cpuobj, "has_el2", NULL) &&
|
|
|
|
object_property_get_bool(cpuobj, "has_el2", &error_abort);
|
|
|
|
qdev_prop_set_bit(gicdev, "has-virtualization-extensions", has_el2);
|
2015-09-08 19:38:43 +03:00
|
|
|
}
|
|
|
|
|
error: Eliminate error_propagate() with Coccinelle, part 1
When all we do with an Error we receive into a local variable is
propagating to somewhere else, we can just as well receive it there
right away. Convert
if (!foo(..., &err)) {
...
error_propagate(errp, err);
...
return ...
}
to
if (!foo(..., errp)) {
...
...
return ...
}
where nothing else needs @err. Coccinelle script:
@rule1 forall@
identifier fun, err, errp, lbl;
expression list args, args2;
binary operator op;
constant c1, c2;
symbol false;
@@
if (
(
- fun(args, &err, args2)
+ fun(args, errp, args2)
|
- !fun(args, &err, args2)
+ !fun(args, errp, args2)
|
- fun(args, &err, args2) op c1
+ fun(args, errp, args2) op c1
)
)
{
... when != err
when != lbl:
when strict
- error_propagate(errp, err);
... when != err
(
return;
|
return c2;
|
return false;
)
}
@rule2 forall@
identifier fun, err, errp, lbl;
expression list args, args2;
expression var;
binary operator op;
constant c1, c2;
symbol false;
@@
- var = fun(args, &err, args2);
+ var = fun(args, errp, args2);
... when != err
if (
(
var
|
!var
|
var op c1
)
)
{
... when != err
when != lbl:
when strict
- error_propagate(errp, err);
... when != err
(
return;
|
return c2;
|
return false;
|
return var;
)
}
@depends on rule1 || rule2@
identifier err;
@@
- Error *err = NULL;
... when != err
Not exactly elegant, I'm afraid.
The "when != lbl:" is necessary to avoid transforming
if (fun(args, &err)) {
goto out
}
...
out:
error_propagate(errp, err);
even though other paths to label out still need the error_propagate().
For an actual example, see sclp_realize().
Without the "when strict", Coccinelle transforms vfio_msix_setup(),
incorrectly. I don't know what exactly "when strict" does, only that
it helps here.
The match of return is narrower than what I want, but I can't figure
out how to express "return where the operand doesn't use @err". For
an example where it's too narrow, see vfio_intx_enable().
Silently fails to convert hw/arm/armsse.c, because Coccinelle gets
confused by ARMSSE being used both as typedef and function-like macro
there. Converted manually.
Line breaks tidied up manually. One nested declaration of @local_err
deleted manually. Preexisting unwanted blank line dropped in
hw/riscv/sifive_e.c.
Signed-off-by: Markus Armbruster <armbru@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Message-Id: <20200707160613.848843-35-armbru@redhat.com>
2020-07-07 19:06:02 +03:00
|
|
|
if (!sysbus_realize(SYS_BUS_DEVICE(&s->gic), errp)) {
|
2013-06-30 23:22:54 +04:00
|
|
|
return;
|
|
|
|
}
|
2013-06-30 23:20:26 +04:00
|
|
|
busdev = SYS_BUS_DEVICE(&s->gic);
|
2012-04-13 15:39:07 +04:00
|
|
|
|
|
|
|
/* Pass through outbound IRQ lines from the GIC */
|
2013-06-30 23:22:54 +04:00
|
|
|
sysbus_pass_irq(sbd, busdev);
|
2012-02-16 13:56:07 +04:00
|
|
|
|
2012-04-13 15:39:07 +04:00
|
|
|
/* Pass through inbound GPIO lines to the GIC */
|
2013-06-30 23:22:54 +04:00
|
|
|
qdev_init_gpio_in(dev, a15mp_priv_set_irq, s->num_irq - 32);
|
2012-02-16 13:56:07 +04:00
|
|
|
|
2013-08-20 17:54:32 +04:00
|
|
|
/* Wire the outputs from each CPU's generic timer to the
|
|
|
|
* appropriate GIC PPI inputs
|
|
|
|
*/
|
2013-08-21 20:36:35 +04:00
|
|
|
for (i = 0; i < s->num_cpu; i++) {
|
|
|
|
DeviceState *cpudev = DEVICE(qemu_get_cpu(i));
|
2013-08-20 17:54:32 +04:00
|
|
|
int ppibase = s->num_irq - 32 + i * 32;
|
2015-08-13 13:26:22 +03:00
|
|
|
int irq;
|
|
|
|
/* Mapping from the output timer irq lines from the CPU to the
|
|
|
|
* GIC PPI inputs used on the A15:
|
2013-08-20 17:54:32 +04:00
|
|
|
*/
|
2015-08-13 13:26:22 +03:00
|
|
|
const int timer_irq[] = {
|
|
|
|
[GTIMER_PHYS] = 30,
|
|
|
|
[GTIMER_VIRT] = 27,
|
|
|
|
[GTIMER_HYP] = 26,
|
|
|
|
[GTIMER_SEC] = 29,
|
|
|
|
};
|
|
|
|
for (irq = 0; irq < ARRAY_SIZE(timer_irq); irq++) {
|
|
|
|
qdev_connect_gpio_out(cpudev, irq,
|
|
|
|
qdev_get_gpio_in(gicdev,
|
|
|
|
ppibase + timer_irq[irq]));
|
|
|
|
}
|
2018-08-24 15:17:34 +03:00
|
|
|
if (has_el2) {
|
|
|
|
/* Connect the GIC maintenance interrupt to PPI ID 25 */
|
|
|
|
sysbus_connect_irq(SYS_BUS_DEVICE(gicdev), i + 4 * s->num_cpu,
|
|
|
|
qdev_get_gpio_in(gicdev, ppibase + 25));
|
|
|
|
}
|
2013-08-20 17:54:32 +04:00
|
|
|
}
|
|
|
|
|
2012-02-16 13:56:07 +04:00
|
|
|
/* Memory map (addresses are offsets from PERIPHBASE):
|
|
|
|
* 0x0000-0x0fff -- reserved
|
|
|
|
* 0x1000-0x1fff -- GIC Distributor
|
2016-03-04 14:30:22 +03:00
|
|
|
* 0x2000-0x3fff -- GIC CPU interface
|
2018-08-24 15:17:34 +03:00
|
|
|
* 0x4000-0x4fff -- GIC virtual interface control for this CPU
|
|
|
|
* 0x5000-0x51ff -- GIC virtual interface control for CPU 0
|
|
|
|
* 0x5200-0x53ff -- GIC virtual interface control for CPU 1
|
|
|
|
* 0x5400-0x55ff -- GIC virtual interface control for CPU 2
|
|
|
|
* 0x5600-0x57ff -- GIC virtual interface control for CPU 3
|
|
|
|
* 0x6000-0x7fff -- GIC virtual CPU interface
|
2012-02-16 13:56:07 +04:00
|
|
|
*/
|
2012-04-13 15:39:07 +04:00
|
|
|
memory_region_add_subregion(&s->container, 0x1000,
|
|
|
|
sysbus_mmio_get_region(busdev, 0));
|
|
|
|
memory_region_add_subregion(&s->container, 0x2000,
|
|
|
|
sysbus_mmio_get_region(busdev, 1));
|
2018-08-24 15:17:34 +03:00
|
|
|
if (has_el2) {
|
|
|
|
memory_region_add_subregion(&s->container, 0x4000,
|
|
|
|
sysbus_mmio_get_region(busdev, 2));
|
|
|
|
memory_region_add_subregion(&s->container, 0x6000,
|
|
|
|
sysbus_mmio_get_region(busdev, 3));
|
|
|
|
for (i = 0; i < s->num_cpu; i++) {
|
|
|
|
hwaddr base = 0x5000 + i * 0x200;
|
|
|
|
MemoryRegion *mr = sysbus_mmio_get_region(busdev,
|
|
|
|
4 + s->num_cpu + i);
|
|
|
|
memory_region_add_subregion(&s->container, base, mr);
|
|
|
|
}
|
|
|
|
}
|
2012-02-16 13:56:07 +04:00
|
|
|
}
|
|
|
|
|
|
|
|
static Property a15mp_priv_properties[] = {
|
|
|
|
DEFINE_PROP_UINT32("num-cpu", A15MPPrivState, num_cpu, 1),
|
|
|
|
/* The Cortex-A15MP may have anything from 0 to 224 external interrupt
|
2013-07-05 17:54:41 +04:00
|
|
|
* IRQ lines (with another 32 internal). We default to 128+32, which
|
2012-02-16 13:56:07 +04:00
|
|
|
* is the number provided by the Cortex-A15MP test chip in the
|
|
|
|
* Versatile Express A15 development board.
|
|
|
|
* Other boards may differ and should set this property appropriately.
|
|
|
|
*/
|
2013-07-05 17:54:41 +04:00
|
|
|
DEFINE_PROP_UINT32("num-irq", A15MPPrivState, num_irq, 160),
|
2012-02-16 13:56:07 +04:00
|
|
|
DEFINE_PROP_END_OF_LIST(),
|
|
|
|
};
|
|
|
|
|
|
|
|
static void a15mp_priv_class_init(ObjectClass *klass, void *data)
|
|
|
|
{
|
|
|
|
DeviceClass *dc = DEVICE_CLASS(klass);
|
2013-06-30 23:22:54 +04:00
|
|
|
|
|
|
|
dc->realize = a15mp_priv_realize;
|
2020-01-10 18:30:32 +03:00
|
|
|
device_class_set_props(dc, a15mp_priv_properties);
|
2012-04-13 15:39:07 +04:00
|
|
|
/* We currently have no savable state */
|
2012-02-16 13:56:07 +04:00
|
|
|
}
|
|
|
|
|
2013-01-10 19:19:07 +04:00
|
|
|
static const TypeInfo a15mp_priv_info = {
|
2013-06-30 23:03:27 +04:00
|
|
|
.name = TYPE_A15MPCORE_PRIV,
|
2012-02-16 13:56:07 +04:00
|
|
|
.parent = TYPE_SYS_BUS_DEVICE,
|
|
|
|
.instance_size = sizeof(A15MPPrivState),
|
2013-06-30 23:07:31 +04:00
|
|
|
.instance_init = a15mp_priv_initfn,
|
2012-02-16 13:56:07 +04:00
|
|
|
.class_init = a15mp_priv_class_init,
|
|
|
|
};
|
|
|
|
|
|
|
|
static void a15mp_register_types(void)
|
|
|
|
{
|
|
|
|
type_register_static(&a15mp_priv_info);
|
|
|
|
}
|
|
|
|
|
|
|
|
type_init(a15mp_register_types)
|