hw/arm/raspi: fix CPRMAN base address
[qemu.git] / hw / ppc / pnv_bmc.c
1 /*
2 * QEMU PowerNV, BMC related functions
3 *
4 * Copyright (c) 2016-2017, IBM Corporation.
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License, version 2, as
8 * published by the Free Software Foundation.
9 *
10 * This program is distributed in the hope that it will be useful,
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 * GNU General Public License for more details.
14 *
15 * You should have received a copy of the GNU General Public License
16 * along with this program; if not, see <http://www.gnu.org/licenses/>.
17 */
18
19 #include "qemu/osdep.h"
20 #include "qemu-common.h"
21 #include "qapi/error.h"
22 #include "target/ppc/cpu.h"
23 #include "qemu/log.h"
24 #include "hw/ipmi/ipmi.h"
25 #include "hw/ppc/fdt.h"
26
27 #include "hw/ppc/pnv.h"
28
29 #include <libfdt.h>
30
31 /* TODO: include definition in ipmi.h */
32 #define IPMI_SDR_FULL_TYPE 1
33
34 /*
35 * OEM SEL Event data packet sent by BMC in response of a Read Event
36 * Message Buffer command
37 */
38 typedef struct OemSel {
39 /* SEL header */
40 uint8_t id[2];
41 uint8_t type;
42 uint8_t timestamp[4];
43 uint8_t manuf_id[3];
44
45 /* OEM SEL data (6 bytes) follows */
46 uint8_t netfun;
47 uint8_t cmd;
48 uint8_t data[4];
49 } OemSel;
50
51 #define SOFT_OFF 0x00
52 #define SOFT_REBOOT 0x01
53
54 static void pnv_gen_oem_sel(IPMIBmc *bmc, uint8_t reboot)
55 {
56 /* IPMI SEL Event are 16 bytes long */
57 OemSel sel = {
58 .id = { 0x55 , 0x55 },
59 .type = 0xC0, /* OEM */
60 .manuf_id = { 0x0, 0x0, 0x0 },
61 .timestamp = { 0x0, 0x0, 0x0, 0x0 },
62 .netfun = 0x3A, /* IBM */
63 .cmd = 0x04, /* AMI OEM SEL Power Notification */
64 .data = { reboot, 0xFF, 0xFF, 0xFF },
65 };
66
67 ipmi_bmc_gen_event(bmc, (uint8_t *) &sel, 0 /* do not log the event */);
68 }
69
70 void pnv_bmc_powerdown(IPMIBmc *bmc)
71 {
72 pnv_gen_oem_sel(bmc, SOFT_OFF);
73 }
74
75 void pnv_dt_bmc_sensors(IPMIBmc *bmc, void *fdt)
76 {
77 int offset;
78 int i;
79 const struct ipmi_sdr_compact *sdr;
80 uint16_t nextrec;
81
82 offset = fdt_add_subnode(fdt, 0, "bmc");
83 _FDT(offset);
84
85 _FDT((fdt_setprop_string(fdt, offset, "name", "bmc")));
86 offset = fdt_add_subnode(fdt, offset, "sensors");
87 _FDT(offset);
88
89 _FDT((fdt_setprop_cell(fdt, offset, "#address-cells", 0x1)));
90 _FDT((fdt_setprop_cell(fdt, offset, "#size-cells", 0x0)));
91
92 for (i = 0; !ipmi_bmc_sdr_find(bmc, i, &sdr, &nextrec); i++) {
93 int off;
94 char *name;
95
96 if (sdr->header.rec_type != IPMI_SDR_COMPACT_TYPE &&
97 sdr->header.rec_type != IPMI_SDR_FULL_TYPE) {
98 continue;
99 }
100
101 name = g_strdup_printf("sensor@%x", sdr->sensor_owner_number);
102 off = fdt_add_subnode(fdt, offset, name);
103 _FDT(off);
104 g_free(name);
105
106 _FDT((fdt_setprop_cell(fdt, off, "reg", sdr->sensor_owner_number)));
107 _FDT((fdt_setprop_string(fdt, off, "name", "sensor")));
108 _FDT((fdt_setprop_string(fdt, off, "compatible", "ibm,ipmi-sensor")));
109 _FDT((fdt_setprop_cell(fdt, off, "ipmi-sensor-reading-type",
110 sdr->reading_type)));
111 _FDT((fdt_setprop_cell(fdt, off, "ipmi-entity-id",
112 sdr->entity_id)));
113 _FDT((fdt_setprop_cell(fdt, off, "ipmi-entity-instance",
114 sdr->entity_instance)));
115 _FDT((fdt_setprop_cell(fdt, off, "ipmi-sensor-type",
116 sdr->sensor_type)));
117 }
118 }
119
120 /*
121 * HIOMAP protocol handler
122 */
123 #define HIOMAP_C_RESET 1
124 #define HIOMAP_C_GET_INFO 2
125 #define HIOMAP_C_GET_FLASH_INFO 3
126 #define HIOMAP_C_CREATE_READ_WINDOW 4
127 #define HIOMAP_C_CLOSE_WINDOW 5
128 #define HIOMAP_C_CREATE_WRITE_WINDOW 6
129 #define HIOMAP_C_MARK_DIRTY 7
130 #define HIOMAP_C_FLUSH 8
131 #define HIOMAP_C_ACK 9
132 #define HIOMAP_C_ERASE 10
133 #define HIOMAP_C_DEVICE_NAME 11
134 #define HIOMAP_C_LOCK 12
135
136 #define BLOCK_SHIFT 12 /* 4K */
137
138 static uint16_t bytes_to_blocks(uint32_t bytes)
139 {
140 return bytes >> BLOCK_SHIFT;
141 }
142
143 static uint32_t blocks_to_bytes(uint16_t blocks)
144 {
145 return blocks << BLOCK_SHIFT;
146 }
147
148 static int hiomap_erase(PnvPnor *pnor, uint32_t offset, uint32_t size)
149 {
150 MemTxResult result;
151 int i;
152
153 for (i = 0; i < size / 4; i++) {
154 result = memory_region_dispatch_write(&pnor->mmio, offset + i * 4,
155 0xFFFFFFFF, MO_32,
156 MEMTXATTRS_UNSPECIFIED);
157 if (result != MEMTX_OK) {
158 return -1;
159 }
160 }
161 return 0;
162 }
163
164 static void hiomap_cmd(IPMIBmcSim *ibs, uint8_t *cmd, unsigned int cmd_len,
165 RspBuffer *rsp)
166 {
167 PnvPnor *pnor = PNV_PNOR(object_property_get_link(OBJECT(ibs), "pnor",
168 &error_abort));
169 uint32_t pnor_size = pnor->size;
170 uint32_t pnor_addr = PNOR_SPI_OFFSET;
171 bool readonly = false;
172
173 rsp_buffer_push(rsp, cmd[2]);
174 rsp_buffer_push(rsp, cmd[3]);
175
176 switch (cmd[2]) {
177 case HIOMAP_C_MARK_DIRTY:
178 case HIOMAP_C_FLUSH:
179 case HIOMAP_C_ACK:
180 break;
181
182 case HIOMAP_C_ERASE:
183 if (hiomap_erase(pnor, blocks_to_bytes(cmd[5] << 8 | cmd[4]),
184 blocks_to_bytes(cmd[7] << 8 | cmd[6]))) {
185 rsp_buffer_set_error(rsp, IPMI_CC_UNSPECIFIED);
186 }
187 break;
188
189 case HIOMAP_C_GET_INFO:
190 rsp_buffer_push(rsp, 2); /* Version 2 */
191 rsp_buffer_push(rsp, BLOCK_SHIFT); /* block size */
192 rsp_buffer_push(rsp, 0); /* Timeout */
193 rsp_buffer_push(rsp, 0); /* Timeout */
194 break;
195
196 case HIOMAP_C_GET_FLASH_INFO:
197 rsp_buffer_push(rsp, bytes_to_blocks(pnor_size) & 0xFF);
198 rsp_buffer_push(rsp, bytes_to_blocks(pnor_size) >> 8);
199 rsp_buffer_push(rsp, 0x01); /* erase size */
200 rsp_buffer_push(rsp, 0x00); /* erase size */
201 break;
202
203 case HIOMAP_C_CREATE_READ_WINDOW:
204 readonly = true;
205 /* Fall through */
206
207 case HIOMAP_C_CREATE_WRITE_WINDOW:
208 memory_region_set_readonly(&pnor->mmio, readonly);
209 memory_region_set_enabled(&pnor->mmio, true);
210
211 rsp_buffer_push(rsp, bytes_to_blocks(pnor_addr) & 0xFF);
212 rsp_buffer_push(rsp, bytes_to_blocks(pnor_addr) >> 8);
213 rsp_buffer_push(rsp, bytes_to_blocks(pnor_size) & 0xFF);
214 rsp_buffer_push(rsp, bytes_to_blocks(pnor_size) >> 8);
215 rsp_buffer_push(rsp, 0x00); /* offset */
216 rsp_buffer_push(rsp, 0x00); /* offset */
217 break;
218
219 case HIOMAP_C_CLOSE_WINDOW:
220 memory_region_set_enabled(&pnor->mmio, false);
221 break;
222
223 case HIOMAP_C_DEVICE_NAME:
224 case HIOMAP_C_RESET:
225 case HIOMAP_C_LOCK:
226 default:
227 qemu_log_mask(LOG_GUEST_ERROR, "HIOMAP: unknow command %02X\n", cmd[2]);
228 break;
229 }
230 }
231
232 #define HIOMAP 0x5a
233
234 static const IPMICmdHandler hiomap_cmds[] = {
235 [HIOMAP] = { hiomap_cmd, 3 },
236 };
237
238 static const IPMINetfn hiomap_netfn = {
239 .cmd_nums = ARRAY_SIZE(hiomap_cmds),
240 .cmd_handlers = hiomap_cmds
241 };
242
243
244 void pnv_bmc_set_pnor(IPMIBmc *bmc, PnvPnor *pnor)
245 {
246 object_ref(OBJECT(pnor));
247 object_property_add_const_link(OBJECT(bmc), "pnor", OBJECT(pnor));
248
249 /* Install the HIOMAP protocol handlers to access the PNOR */
250 ipmi_sim_register_netfn(IPMI_BMC_SIMULATOR(bmc), IPMI_NETFN_OEM,
251 &hiomap_netfn);
252 }
253
254 /*
255 * Instantiate the machine BMC. PowerNV uses the QEMU internal
256 * simulator but it could also be external.
257 */
258 IPMIBmc *pnv_bmc_create(PnvPnor *pnor)
259 {
260 Object *obj;
261
262 obj = object_new(TYPE_IPMI_BMC_SIMULATOR);
263 object_ref(OBJECT(pnor));
264 object_property_add_const_link(obj, "pnor", OBJECT(pnor));
265 qdev_realize(DEVICE(obj), NULL, &error_fatal);
266
267 /* Install the HIOMAP protocol handlers to access the PNOR */
268 ipmi_sim_register_netfn(IPMI_BMC_SIMULATOR(obj), IPMI_NETFN_OEM,
269 &hiomap_netfn);
270
271 return IPMI_BMC(obj);
272 }
273
274 typedef struct ForeachArgs {
275 const char *name;
276 Object *obj;
277 } ForeachArgs;
278
279 static int bmc_find(Object *child, void *opaque)
280 {
281 ForeachArgs *args = opaque;
282
283 if (object_dynamic_cast(child, args->name)) {
284 if (args->obj) {
285 return 1;
286 }
287 args->obj = child;
288 }
289 return 0;
290 }
291
292 IPMIBmc *pnv_bmc_find(Error **errp)
293 {
294 ForeachArgs args = { TYPE_IPMI_BMC_SIMULATOR, NULL };
295 int ret;
296
297 ret = object_child_foreach_recursive(object_get_root(), bmc_find, &args);
298 if (ret) {
299 error_setg(errp, "machine should have only one BMC device. "
300 "Use '-nodefaults'");
301 return NULL;
302 }
303
304 return args.obj ? IPMI_BMC(args.obj) : NULL;
305 }