Commit afeeceb0d79be886e83b56fb91cc6a2ca99888be
1 parent
e90e390c
microblaze: Add MMU emulation.
Signed-off-by: Edgar E. Iglesias <edgar.iglesias@gmail.com>
Showing
2 changed files
with
338 additions
and
0 deletions
target-microblaze/mmu.c
0 → 100644
1 | +/* | ||
2 | + * Microblaze MMU emulation for qemu. | ||
3 | + * | ||
4 | + * Copyright (c) 2009 Edgar E. Iglesias | ||
5 | + * | ||
6 | + * This library is free software; you can redistribute it and/or | ||
7 | + * modify it under the terms of the GNU Lesser General Public | ||
8 | + * License as published by the Free Software Foundation; either | ||
9 | + * version 2 of the License, or (at your option) any later version. | ||
10 | + * | ||
11 | + * This library is distributed in the hope that it will be useful, | ||
12 | + * but WITHOUT ANY WARRANTY; without even the implied warranty of | ||
13 | + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | ||
14 | + * Lesser General Public License for more details. | ||
15 | + * | ||
16 | + * You should have received a copy of the GNU Lesser General Public | ||
17 | + * License along with this library; if not, write to the Free Software | ||
18 | + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston MA 02110-1301 USA | ||
19 | + */ | ||
20 | +#include <stdio.h> | ||
21 | +#include <stdlib.h> | ||
22 | +#include <assert.h> | ||
23 | + | ||
24 | +#include "config.h" | ||
25 | +#include "cpu.h" | ||
26 | +#include "exec-all.h" | ||
27 | + | ||
28 | +#define D(x) | ||
29 | + | ||
30 | +static unsigned int tlb_decode_size(unsigned int f) | ||
31 | +{ | ||
32 | + static const unsigned int sizes[] = { | ||
33 | + 1 * 1024, 4 * 1024, 16 * 1024, 64 * 1024, 256 * 1024, | ||
34 | + 1 * 1024 * 1024, 4 * 1024 * 1024, 16 * 1024 * 1024 | ||
35 | + }; | ||
36 | + assert(f < ARRAY_SIZE(sizes)); | ||
37 | + return sizes[f]; | ||
38 | +} | ||
39 | + | ||
40 | +static void mmu_flush_idx(CPUState *env, unsigned idx) | ||
41 | +{ | ||
42 | + struct microblaze_mmu *mmu = &env->mmu; | ||
43 | + unsigned int tlb_size; | ||
44 | + uint32_t tlb_tag, end, t; | ||
45 | + | ||
46 | + t = mmu->rams[RAM_TAG][idx]; | ||
47 | + if (!(t & TLB_VALID)) | ||
48 | + return; | ||
49 | + | ||
50 | + tlb_tag = t & TLB_EPN_MASK; | ||
51 | + tlb_size = tlb_decode_size((t & TLB_PAGESZ_MASK) >> 7); | ||
52 | + end = tlb_tag + tlb_size; | ||
53 | + | ||
54 | + while (tlb_tag < end) { | ||
55 | + tlb_flush_page(env, tlb_tag); | ||
56 | + tlb_tag += TARGET_PAGE_SIZE; | ||
57 | + } | ||
58 | +} | ||
59 | + | ||
60 | +static void mmu_change_pid(CPUState *env, unsigned int newpid) | ||
61 | +{ | ||
62 | + struct microblaze_mmu *mmu = &env->mmu; | ||
63 | + unsigned int i; | ||
64 | + unsigned int tlb_size; | ||
65 | + uint32_t tlb_tag, mask, t; | ||
66 | + | ||
67 | + if (newpid & ~0xff) | ||
68 | + qemu_log("Illegal rpid=%x\n", newpid); | ||
69 | + | ||
70 | + for (i = 0; i < ARRAY_SIZE(mmu->rams[RAM_TAG]); i++) { | ||
71 | + /* Lookup and decode. */ | ||
72 | + t = mmu->rams[RAM_TAG][i]; | ||
73 | + if (t & TLB_VALID) { | ||
74 | + tlb_size = tlb_decode_size((t & TLB_PAGESZ_MASK) >> 7); | ||
75 | + mask = ~(tlb_size - 1); | ||
76 | + | ||
77 | + tlb_tag = t & TLB_EPN_MASK; | ||
78 | + if (mmu->tids[i] && ((mmu->regs[MMU_R_PID] & 0xff) == mmu->tids[i])) | ||
79 | + mmu_flush_idx(env, i); | ||
80 | + } | ||
81 | + } | ||
82 | +} | ||
83 | + | ||
84 | +/* rw - 0 = read, 1 = write, 2 = fetch. */ | ||
85 | +unsigned int mmu_translate(struct microblaze_mmu *mmu, | ||
86 | + struct microblaze_mmu_lookup *lu, | ||
87 | + target_ulong vaddr, int rw, int mmu_idx) | ||
88 | +{ | ||
89 | + unsigned int i, hit = 0; | ||
90 | + unsigned int tlb_ex = 0, tlb_wr = 0, tlb_zsel; | ||
91 | + unsigned int tlb_size; | ||
92 | + uint32_t tlb_tag, tlb_rpn, mask, t0; | ||
93 | + | ||
94 | + lu->err = ERR_MISS; | ||
95 | + for (i = 0; i < ARRAY_SIZE(mmu->rams[RAM_TAG]); i++) { | ||
96 | + uint32_t t, d; | ||
97 | + | ||
98 | + /* Lookup and decode. */ | ||
99 | + t = mmu->rams[RAM_TAG][i]; | ||
100 | + D(qemu_log("TLB %d valid=%d\n", i, t & TLB_VALID)); | ||
101 | + if (t & TLB_VALID) { | ||
102 | + tlb_size = tlb_decode_size((t & TLB_PAGESZ_MASK) >> 7); | ||
103 | + if (tlb_size < TARGET_PAGE_SIZE) { | ||
104 | + qemu_log("%d pages not supported\n", tlb_size); | ||
105 | + abort(); | ||
106 | + } | ||
107 | + | ||
108 | + mask = ~(tlb_size - 1); | ||
109 | + tlb_tag = t & TLB_EPN_MASK; | ||
110 | + if ((vaddr & mask) != (tlb_tag & mask)) { | ||
111 | + D(qemu_log("TLB %d vaddr=%x != tag=%x\n", | ||
112 | + i, vaddr & mask, tlb_tag & mask)); | ||
113 | + continue; | ||
114 | + } | ||
115 | + if (mmu->tids[i] | ||
116 | + && ((mmu->regs[MMU_R_PID] & 0xff) != mmu->tids[i])) { | ||
117 | + D(qemu_log("TLB %d pid=%x != tid=%x\n", | ||
118 | + i, mmu->regs[MMU_R_PID], mmu->tids[i])); | ||
119 | + continue; | ||
120 | + } | ||
121 | + | ||
122 | + /* Bring in the data part. */ | ||
123 | + d = mmu->rams[RAM_DATA][i]; | ||
124 | + tlb_ex = d & TLB_EX; | ||
125 | + tlb_wr = d & TLB_WR; | ||
126 | + | ||
127 | + /* Now lets see if there is a zone that overrides the protbits. */ | ||
128 | + tlb_zsel = (d >> 4) & 0xf; | ||
129 | + t0 = mmu->regs[MMU_R_ZPR] >> (30 - (tlb_zsel * 2)); | ||
130 | + t0 &= 0x3; | ||
131 | + switch (t0) { | ||
132 | + case 0: | ||
133 | + if (mmu_idx == MMU_USER_IDX) | ||
134 | + continue; | ||
135 | + break; | ||
136 | + case 2: | ||
137 | + if (mmu_idx != MMU_USER_IDX) { | ||
138 | + tlb_ex = 1; | ||
139 | + tlb_wr = 1; | ||
140 | + } | ||
141 | + break; | ||
142 | + case 3: | ||
143 | + tlb_ex = 1; | ||
144 | + tlb_wr = 1; | ||
145 | + break; | ||
146 | + } | ||
147 | + | ||
148 | + | ||
149 | + lu->err = ERR_PROT; | ||
150 | + lu->prot = PAGE_READ; | ||
151 | + if (tlb_wr) | ||
152 | + lu->prot |= PAGE_WRITE; | ||
153 | + else if (rw == 1) | ||
154 | + goto done; | ||
155 | + if (tlb_ex) | ||
156 | + lu->prot |=PAGE_EXEC; | ||
157 | + else if (rw == 2) { | ||
158 | + goto done; | ||
159 | + } | ||
160 | + | ||
161 | + tlb_rpn = d & TLB_RPN_MASK; | ||
162 | + | ||
163 | + lu->vaddr = tlb_tag; | ||
164 | + lu->paddr = tlb_rpn; | ||
165 | + lu->size = tlb_size; | ||
166 | + lu->err = ERR_HIT; | ||
167 | + lu->idx = i; | ||
168 | + hit = 1; | ||
169 | + goto done; | ||
170 | + } | ||
171 | + } | ||
172 | +done: | ||
173 | + D(qemu_log("MMU vaddr=%x rw=%d tlb_wr=%d tlb_ex=%d hit=%d\n", | ||
174 | + vaddr, rw, tlb_wr, tlb_ex, hit)); | ||
175 | + return hit; | ||
176 | +} | ||
177 | + | ||
178 | +/* Writes/reads to the MMU's special regs end up here. */ | ||
179 | +uint32_t mmu_read(CPUState *env, uint32_t rn) | ||
180 | +{ | ||
181 | + unsigned int i; | ||
182 | + uint32_t r; | ||
183 | + | ||
184 | + switch (rn) { | ||
185 | + /* Reads to HI/LO trig reads from the mmu rams. */ | ||
186 | + case MMU_R_TLBLO: | ||
187 | + case MMU_R_TLBHI: | ||
188 | + i = env->mmu.regs[MMU_R_TLBX] & 0xff; | ||
189 | + r = env->mmu.rams[rn & 1][i]; | ||
190 | + if (rn == MMU_R_TLBHI) | ||
191 | + env->mmu.regs[MMU_R_PID] = env->mmu.tids[i]; | ||
192 | + break; | ||
193 | + default: | ||
194 | + r = env->mmu.regs[rn]; | ||
195 | + break; | ||
196 | + } | ||
197 | + D(qemu_log("%s rn=%d=%x\n", __func__, rn, r)); | ||
198 | + return r; | ||
199 | +} | ||
200 | + | ||
201 | +void mmu_write(CPUState *env, uint32_t rn, uint32_t v) | ||
202 | +{ | ||
203 | + unsigned int i; | ||
204 | + D(qemu_log("%s rn=%d=%x old=%x\n", __func__, rn, v, env->mmu.regs[rn])); | ||
205 | + | ||
206 | + switch (rn) { | ||
207 | + /* Writes to HI/LO trig writes to the mmu rams. */ | ||
208 | + case MMU_R_TLBLO: | ||
209 | + case MMU_R_TLBHI: | ||
210 | + i = env->mmu.regs[MMU_R_TLBX] & 0xff; | ||
211 | + if (rn == MMU_R_TLBHI) { | ||
212 | + if (i < 3 && !(v & TLB_VALID) && qemu_loglevel_mask(~0)) | ||
213 | + qemu_log("invalidating index %x at pc=%x\n", | ||
214 | + i, env->sregs[SR_PC]); | ||
215 | + env->mmu.tids[i] = env->mmu.regs[MMU_R_PID] & 0xff; | ||
216 | + mmu_flush_idx(env, i); | ||
217 | + } | ||
218 | + env->mmu.rams[rn & 1][i] = v; | ||
219 | + | ||
220 | + D(qemu_log("%s ram[%d][%d]=%x\n", __func__, rn & 1, i, v)); | ||
221 | + break; | ||
222 | + case MMU_R_ZPR: | ||
223 | + case MMU_R_PID: | ||
224 | + if (v != env->mmu.regs[rn]) { | ||
225 | + mmu_change_pid(env, v); | ||
226 | + env->mmu.regs[rn] = v; | ||
227 | + } | ||
228 | + break; | ||
229 | + case MMU_R_TLBSX: | ||
230 | + { | ||
231 | + struct microblaze_mmu_lookup lu; | ||
232 | + int hit; | ||
233 | + hit = mmu_translate(&env->mmu, &lu, | ||
234 | + v & TLB_EPN_MASK, 0, cpu_mmu_index(env)); | ||
235 | + if (hit) { | ||
236 | + env->mmu.regs[MMU_R_TLBX] = lu.idx; | ||
237 | + } else | ||
238 | + env->mmu.regs[MMU_R_TLBX] |= 0x80000000; | ||
239 | + break; | ||
240 | + } | ||
241 | + default: | ||
242 | + env->mmu.regs[rn] = v; | ||
243 | + break; | ||
244 | + } | ||
245 | +} | ||
246 | + | ||
247 | +void mmu_init(struct microblaze_mmu *mmu) | ||
248 | +{ | ||
249 | + memset(mmu, 0, sizeof *mmu); | ||
250 | +} |
target-microblaze/mmu.h
0 → 100644
1 | +/* | ||
2 | + * Microblaze MMU emulation for qemu. | ||
3 | + * | ||
4 | + * Copyright (c) 2009 Edgar E. Iglesias | ||
5 | + * | ||
6 | + * This library is free software; you can redistribute it and/or | ||
7 | + * modify it under the terms of the GNU Lesser General Public | ||
8 | + * License as published by the Free Software Foundation; either | ||
9 | + * version 2 of the License, or (at your option) any later version. | ||
10 | + * | ||
11 | + * This library is distributed in the hope that it will be useful, | ||
12 | + * but WITHOUT ANY WARRANTY; without even the implied warranty of | ||
13 | + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | ||
14 | + * Lesser General Public License for more details. | ||
15 | + * | ||
16 | + * You should have received a copy of the GNU Lesser General Public | ||
17 | + * License along with this library; if not, write to the Free Software | ||
18 | + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston MA 02110-1301 USA | ||
19 | + */ | ||
20 | + | ||
21 | +#define MMU_R_PID 0 | ||
22 | +#define MMU_R_ZPR 1 | ||
23 | +#define MMU_R_TLBX 2 | ||
24 | +#define MMU_R_TLBLO 3 | ||
25 | +#define MMU_R_TLBHI 4 | ||
26 | +#define MMU_R_TLBSX 5 | ||
27 | + | ||
28 | +#define RAM_DATA 1 | ||
29 | +#define RAM_TAG 0 | ||
30 | + | ||
31 | +/* Tag portion */ | ||
32 | +#define TLB_EPN_MASK 0xFFFFFC00 /* Effective Page Number */ | ||
33 | +#define TLB_PAGESZ_MASK 0x00000380 | ||
34 | +#define TLB_PAGESZ(x) (((x) & 0x7) << 7) | ||
35 | +#define PAGESZ_1K 0 | ||
36 | +#define PAGESZ_4K 1 | ||
37 | +#define PAGESZ_16K 2 | ||
38 | +#define PAGESZ_64K 3 | ||
39 | +#define PAGESZ_256K 4 | ||
40 | +#define PAGESZ_1M 5 | ||
41 | +#define PAGESZ_4M 6 | ||
42 | +#define PAGESZ_16M 7 | ||
43 | +#define TLB_VALID 0x00000040 /* Entry is valid */ | ||
44 | + | ||
45 | +/* Data portion */ | ||
46 | +#define TLB_RPN_MASK 0xFFFFFC00 /* Real Page Number */ | ||
47 | +#define TLB_PERM_MASK 0x00000300 | ||
48 | +#define TLB_EX 0x00000200 /* Instruction execution allowed */ | ||
49 | +#define TLB_WR 0x00000100 /* Writes permitted */ | ||
50 | +#define TLB_ZSEL_MASK 0x000000F0 | ||
51 | +#define TLB_ZSEL(x) (((x) & 0xF) << 4) | ||
52 | +#define TLB_ATTR_MASK 0x0000000F | ||
53 | +#define TLB_W 0x00000008 /* Caching is write-through */ | ||
54 | +#define TLB_I 0x00000004 /* Caching is inhibited */ | ||
55 | +#define TLB_M 0x00000002 /* Memory is coherent */ | ||
56 | +#define TLB_G 0x00000001 /* Memory is guarded from prefetch */ | ||
57 | + | ||
58 | +#define TLB_ENTRIES 64 | ||
59 | + | ||
60 | +struct microblaze_mmu | ||
61 | +{ | ||
62 | + /* Data and tag brams. */ | ||
63 | + uint32_t rams[2][TLB_ENTRIES]; | ||
64 | + /* We keep a separate ram for the tids to avoid the 48 bit tag width. */ | ||
65 | + uint8_t tids[TLB_ENTRIES]; | ||
66 | + /* Control flops. */ | ||
67 | + uint32_t regs[8];; | ||
68 | +}; | ||
69 | + | ||
70 | +struct microblaze_mmu_lookup | ||
71 | +{ | ||
72 | + uint32_t paddr; | ||
73 | + uint32_t vaddr; | ||
74 | + unsigned int size; | ||
75 | + unsigned int idx; | ||
76 | + int prot; | ||
77 | + enum { | ||
78 | + ERR_PROT, ERR_MISS, ERR_HIT | ||
79 | + } err; | ||
80 | +}; | ||
81 | + | ||
82 | +void mmu_flip_um(CPUState *env, unsigned int um); | ||
83 | +unsigned int mmu_translate(struct microblaze_mmu *mmu, | ||
84 | + struct microblaze_mmu_lookup *lu, | ||
85 | + target_ulong vaddr, int rw, int mmu_idx); | ||
86 | +uint32_t mmu_read(CPUState *env, uint32_t rn); | ||
87 | +void mmu_write(CPUState *env, uint32_t rn, uint32_t v); | ||
88 | +void mmu_init(struct microblaze_mmu *mmu); |