qemu/hw/vmware_vga.c
<<
>>
Prefs
   1/*
   2 * QEMU VMware-SVGA "chipset".
   3 *
   4 * Copyright (c) 2007 Andrzej Zaborowski  <balrog@zabor.org>
   5 *
   6 * Permission is hereby granted, free of charge, to any person obtaining a copy
   7 * of this software and associated documentation files (the "Software"), to deal
   8 * in the Software without restriction, including without limitation the rights
   9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  10 * copies of the Software, and to permit persons to whom the Software is
  11 * furnished to do so, subject to the following conditions:
  12 *
  13 * The above copyright notice and this permission notice shall be included in
  14 * all copies or substantial portions of the Software.
  15 *
  16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  22 * THE SOFTWARE.
  23 */
  24#include "hw.h"
  25#include "loader.h"
  26#include "console.h"
  27#include "pci.h"
  28#include "vmware_vga.h"
  29
  30#define VERBOSE
  31#undef DIRECT_VRAM
  32#define HW_RECT_ACCEL
  33#define HW_FILL_ACCEL
  34#define HW_MOUSE_ACCEL
  35
  36# include "vga_int.h"
  37
  38struct vmsvga_state_s {
  39    VGACommonState vga;
  40
  41    int width;
  42    int height;
  43    int invalidated;
  44    int depth;
  45    int bypp;
  46    int enable;
  47    int config;
  48    struct {
  49        int id;
  50        int x;
  51        int y;
  52        int on;
  53    } cursor;
  54
  55    target_phys_addr_t vram_base;
  56
  57    int index;
  58    int scratch_size;
  59    uint32_t *scratch;
  60    int new_width;
  61    int new_height;
  62    uint32_t guest;
  63    uint32_t svgaid;
  64    uint32_t wred;
  65    uint32_t wgreen;
  66    uint32_t wblue;
  67    int syncing;
  68    int fb_size;
  69
  70    ram_addr_t fifo_offset;
  71    uint8_t *fifo_ptr;
  72    unsigned int fifo_size;
  73    target_phys_addr_t fifo_base;
  74
  75    union {
  76        uint32_t *fifo;
  77        struct __attribute__((__packed__)) {
  78            uint32_t min;
  79            uint32_t max;
  80            uint32_t next_cmd;
  81            uint32_t stop;
  82            /* Add registers here when adding capabilities.  */
  83            uint32_t fifo[0];
  84        } *cmd;
  85    };
  86
  87#define REDRAW_FIFO_LEN 512
  88    struct vmsvga_rect_s {
  89        int x, y, w, h;
  90    } redraw_fifo[REDRAW_FIFO_LEN];
  91    int redraw_fifo_first, redraw_fifo_last;
  92};
  93
  94struct pci_vmsvga_state_s {
  95    PCIDevice card;
  96    struct vmsvga_state_s chip;
  97};
  98
  99#define SVGA_MAGIC              0x900000UL
 100#define SVGA_MAKE_ID(ver)       (SVGA_MAGIC << 8 | (ver))
 101#define SVGA_ID_0               SVGA_MAKE_ID(0)
 102#define SVGA_ID_1               SVGA_MAKE_ID(1)
 103#define SVGA_ID_2               SVGA_MAKE_ID(2)
 104
 105#define SVGA_LEGACY_BASE_PORT   0x4560
 106#define SVGA_INDEX_PORT         0x0
 107#define SVGA_VALUE_PORT         0x1
 108#define SVGA_BIOS_PORT          0x2
 109
 110#define SVGA_VERSION_2
 111
 112#ifdef SVGA_VERSION_2
 113# define SVGA_ID                SVGA_ID_2
 114# define SVGA_IO_BASE           SVGA_LEGACY_BASE_PORT
 115# define SVGA_IO_MUL            1
 116# define SVGA_FIFO_SIZE         0x10000
 117# define SVGA_MEM_BASE          0xe0000000
 118# define SVGA_PCI_DEVICE_ID     PCI_DEVICE_ID_VMWARE_SVGA2
 119#else
 120# define SVGA_ID                SVGA_ID_1
 121# define SVGA_IO_BASE           SVGA_LEGACY_BASE_PORT
 122# define SVGA_IO_MUL            4
 123# define SVGA_FIFO_SIZE         0x10000
 124# define SVGA_MEM_BASE          0xe0000000
 125# define SVGA_PCI_DEVICE_ID     PCI_DEVICE_ID_VMWARE_SVGA
 126#endif
 127
 128enum {
 129    /* ID 0, 1 and 2 registers */
 130    SVGA_REG_ID = 0,
 131    SVGA_REG_ENABLE = 1,
 132    SVGA_REG_WIDTH = 2,
 133    SVGA_REG_HEIGHT = 3,
 134    SVGA_REG_MAX_WIDTH = 4,
 135    SVGA_REG_MAX_HEIGHT = 5,
 136    SVGA_REG_DEPTH = 6,
 137    SVGA_REG_BITS_PER_PIXEL = 7,        /* Current bpp in the guest */
 138    SVGA_REG_PSEUDOCOLOR = 8,
 139    SVGA_REG_RED_MASK = 9,
 140    SVGA_REG_GREEN_MASK = 10,
 141    SVGA_REG_BLUE_MASK = 11,
 142    SVGA_REG_BYTES_PER_LINE = 12,
 143    SVGA_REG_FB_START = 13,
 144    SVGA_REG_FB_OFFSET = 14,
 145    SVGA_REG_VRAM_SIZE = 15,
 146    SVGA_REG_FB_SIZE = 16,
 147
 148    /* ID 1 and 2 registers */
 149    SVGA_REG_CAPABILITIES = 17,
 150    SVGA_REG_MEM_START = 18,            /* Memory for command FIFO */
 151    SVGA_REG_MEM_SIZE = 19,
 152    SVGA_REG_CONFIG_DONE = 20,          /* Set when memory area configured */
 153    SVGA_REG_SYNC = 21,                 /* Write to force synchronization */
 154    SVGA_REG_BUSY = 22,                 /* Read to check if sync is done */
 155    SVGA_REG_GUEST_ID = 23,             /* Set guest OS identifier */
 156    SVGA_REG_CURSOR_ID = 24,            /* ID of cursor */
 157    SVGA_REG_CURSOR_X = 25,             /* Set cursor X position */
 158    SVGA_REG_CURSOR_Y = 26,             /* Set cursor Y position */
 159    SVGA_REG_CURSOR_ON = 27,            /* Turn cursor on/off */
 160    SVGA_REG_HOST_BITS_PER_PIXEL = 28,  /* Current bpp in the host */
 161    SVGA_REG_SCRATCH_SIZE = 29,         /* Number of scratch registers */
 162    SVGA_REG_MEM_REGS = 30,             /* Number of FIFO registers */
 163    SVGA_REG_NUM_DISPLAYS = 31,         /* Number of guest displays */
 164    SVGA_REG_PITCHLOCK = 32,            /* Fixed pitch for all modes */
 165
 166    SVGA_PALETTE_BASE = 1024,           /* Base of SVGA color map */
 167    SVGA_PALETTE_END  = SVGA_PALETTE_BASE + 767,
 168    SVGA_SCRATCH_BASE = SVGA_PALETTE_BASE + 768,
 169};
 170
 171#define SVGA_CAP_NONE                   0
 172#define SVGA_CAP_RECT_FILL              (1 << 0)
 173#define SVGA_CAP_RECT_COPY              (1 << 1)
 174#define SVGA_CAP_RECT_PAT_FILL          (1 << 2)
 175#define SVGA_CAP_LEGACY_OFFSCREEN       (1 << 3)
 176#define SVGA_CAP_RASTER_OP              (1 << 4)
 177#define SVGA_CAP_CURSOR                 (1 << 5)
 178#define SVGA_CAP_CURSOR_BYPASS          (1 << 6)
 179#define SVGA_CAP_CURSOR_BYPASS_2        (1 << 7)
 180#define SVGA_CAP_8BIT_EMULATION         (1 << 8)
 181#define SVGA_CAP_ALPHA_CURSOR           (1 << 9)
 182#define SVGA_CAP_GLYPH                  (1 << 10)
 183#define SVGA_CAP_GLYPH_CLIPPING         (1 << 11)
 184#define SVGA_CAP_OFFSCREEN_1            (1 << 12)
 185#define SVGA_CAP_ALPHA_BLEND            (1 << 13)
 186#define SVGA_CAP_3D                     (1 << 14)
 187#define SVGA_CAP_EXTENDED_FIFO          (1 << 15)
 188#define SVGA_CAP_MULTIMON               (1 << 16)
 189#define SVGA_CAP_PITCHLOCK              (1 << 17)
 190
 191/*
 192 * FIFO offsets (seen as an array of 32-bit words)
 193 */
 194enum {
 195    /*
 196     * The original defined FIFO offsets
 197     */
 198    SVGA_FIFO_MIN = 0,
 199    SVGA_FIFO_MAX,      /* The distance from MIN to MAX must be at least 10K */
 200    SVGA_FIFO_NEXT_CMD,
 201    SVGA_FIFO_STOP,
 202
 203    /*
 204     * Additional offsets added as of SVGA_CAP_EXTENDED_FIFO
 205     */
 206    SVGA_FIFO_CAPABILITIES = 4,
 207    SVGA_FIFO_FLAGS,
 208    SVGA_FIFO_FENCE,
 209    SVGA_FIFO_3D_HWVERSION,
 210    SVGA_FIFO_PITCHLOCK,
 211};
 212
 213#define SVGA_FIFO_CAP_NONE              0
 214#define SVGA_FIFO_CAP_FENCE             (1 << 0)
 215#define SVGA_FIFO_CAP_ACCELFRONT        (1 << 1)
 216#define SVGA_FIFO_CAP_PITCHLOCK         (1 << 2)
 217
 218#define SVGA_FIFO_FLAG_NONE             0
 219#define SVGA_FIFO_FLAG_ACCELFRONT       (1 << 0)
 220
 221/* These values can probably be changed arbitrarily.  */
 222#define SVGA_SCRATCH_SIZE               0x8000
 223#define SVGA_MAX_WIDTH                  2360
 224#define SVGA_MAX_HEIGHT                 1770
 225
 226#ifdef VERBOSE
 227# define GUEST_OS_BASE          0x5001
 228static const char *vmsvga_guest_id[] = {
 229    [0x00] = "Dos",
 230    [0x01] = "Windows 3.1",
 231    [0x02] = "Windows 95",
 232    [0x03] = "Windows 98",
 233    [0x04] = "Windows ME",
 234    [0x05] = "Windows NT",
 235    [0x06] = "Windows 2000",
 236    [0x07] = "Linux",
 237    [0x08] = "OS/2",
 238    [0x09] = "an unknown OS",
 239    [0x0a] = "BSD",
 240    [0x0b] = "Whistler",
 241    [0x0c] = "an unknown OS",
 242    [0x0d] = "an unknown OS",
 243    [0x0e] = "an unknown OS",
 244    [0x0f] = "an unknown OS",
 245    [0x10] = "an unknown OS",
 246    [0x11] = "an unknown OS",
 247    [0x12] = "an unknown OS",
 248    [0x13] = "an unknown OS",
 249    [0x14] = "an unknown OS",
 250    [0x15] = "Windows 2003",
 251};
 252#endif
 253
 254enum {
 255    SVGA_CMD_INVALID_CMD = 0,
 256    SVGA_CMD_UPDATE = 1,
 257    SVGA_CMD_RECT_FILL = 2,
 258    SVGA_CMD_RECT_COPY = 3,
 259    SVGA_CMD_DEFINE_BITMAP = 4,
 260    SVGA_CMD_DEFINE_BITMAP_SCANLINE = 5,
 261    SVGA_CMD_DEFINE_PIXMAP = 6,
 262    SVGA_CMD_DEFINE_PIXMAP_SCANLINE = 7,
 263    SVGA_CMD_RECT_BITMAP_FILL = 8,
 264    SVGA_CMD_RECT_PIXMAP_FILL = 9,
 265    SVGA_CMD_RECT_BITMAP_COPY = 10,
 266    SVGA_CMD_RECT_PIXMAP_COPY = 11,
 267    SVGA_CMD_FREE_OBJECT = 12,
 268    SVGA_CMD_RECT_ROP_FILL = 13,
 269    SVGA_CMD_RECT_ROP_COPY = 14,
 270    SVGA_CMD_RECT_ROP_BITMAP_FILL = 15,
 271    SVGA_CMD_RECT_ROP_PIXMAP_FILL = 16,
 272    SVGA_CMD_RECT_ROP_BITMAP_COPY = 17,
 273    SVGA_CMD_RECT_ROP_PIXMAP_COPY = 18,
 274    SVGA_CMD_DEFINE_CURSOR = 19,
 275    SVGA_CMD_DISPLAY_CURSOR = 20,
 276    SVGA_CMD_MOVE_CURSOR = 21,
 277    SVGA_CMD_DEFINE_ALPHA_CURSOR = 22,
 278    SVGA_CMD_DRAW_GLYPH = 23,
 279    SVGA_CMD_DRAW_GLYPH_CLIPPED = 24,
 280    SVGA_CMD_UPDATE_VERBOSE = 25,
 281    SVGA_CMD_SURFACE_FILL = 26,
 282    SVGA_CMD_SURFACE_COPY = 27,
 283    SVGA_CMD_SURFACE_ALPHA_BLEND = 28,
 284    SVGA_CMD_FRONT_ROP_FILL = 29,
 285    SVGA_CMD_FENCE = 30,
 286};
 287
 288/* Legal values for the SVGA_REG_CURSOR_ON register in cursor bypass mode */
 289enum {
 290    SVGA_CURSOR_ON_HIDE = 0,
 291    SVGA_CURSOR_ON_SHOW = 1,
 292    SVGA_CURSOR_ON_REMOVE_FROM_FB = 2,
 293    SVGA_CURSOR_ON_RESTORE_TO_FB = 3,
 294};
 295
 296static inline void vmsvga_update_rect(struct vmsvga_state_s *s,
 297                int x, int y, int w, int h)
 298{
 299#ifndef DIRECT_VRAM
 300    int line;
 301    int bypl;
 302    int width;
 303    int start;
 304    uint8_t *src;
 305    uint8_t *dst;
 306
 307    if (x + w > s->width) {
 308        fprintf(stderr, "%s: update width too large x: %d, w: %d\n",
 309                        __FUNCTION__, x, w);
 310        x = MIN(x, s->width);
 311        w = s->width - x;
 312    }
 313
 314    if (y + h > s->height) {
 315        fprintf(stderr, "%s: update height too large y: %d, h: %d\n",
 316                        __FUNCTION__, y, h);
 317        y = MIN(y, s->height);
 318        h = s->height - y;
 319    }
 320
 321    line = h;
 322    bypl = s->bypp * s->width;
 323    width = s->bypp * w;
 324    start = s->bypp * x + bypl * y;
 325    src = s->vga.vram_ptr + start;
 326    dst = ds_get_data(s->vga.ds) + start;
 327
 328    for (; line > 0; line --, src += bypl, dst += bypl)
 329        memcpy(dst, src, width);
 330#endif
 331
 332    dpy_update(s->vga.ds, x, y, w, h);
 333}
 334
 335static inline void vmsvga_update_screen(struct vmsvga_state_s *s)
 336{
 337#ifndef DIRECT_VRAM
 338    memcpy(ds_get_data(s->vga.ds), s->vga.vram_ptr, s->bypp * s->width * s->height);
 339#endif
 340
 341    dpy_update(s->vga.ds, 0, 0, s->width, s->height);
 342}
 343
 344#ifdef DIRECT_VRAM
 345# define vmsvga_update_rect_delayed     vmsvga_update_rect
 346#else
 347static inline void vmsvga_update_rect_delayed(struct vmsvga_state_s *s,
 348                int x, int y, int w, int h)
 349{
 350    struct vmsvga_rect_s *rect = &s->redraw_fifo[s->redraw_fifo_last ++];
 351    s->redraw_fifo_last &= REDRAW_FIFO_LEN - 1;
 352    rect->x = x;
 353    rect->y = y;
 354    rect->w = w;
 355    rect->h = h;
 356}
 357#endif
 358
 359static inline void vmsvga_update_rect_flush(struct vmsvga_state_s *s)
 360{
 361    struct vmsvga_rect_s *rect;
 362    if (s->invalidated) {
 363        s->redraw_fifo_first = s->redraw_fifo_last;
 364        return;
 365    }
 366    /* Overlapping region updates can be optimised out here - if someone
 367     * knows a smart algorithm to do that, please share.  */
 368    while (s->redraw_fifo_first != s->redraw_fifo_last) {
 369        rect = &s->redraw_fifo[s->redraw_fifo_first ++];
 370        s->redraw_fifo_first &= REDRAW_FIFO_LEN - 1;
 371        vmsvga_update_rect(s, rect->x, rect->y, rect->w, rect->h);
 372    }
 373}
 374
 375#ifdef HW_RECT_ACCEL
 376static inline void vmsvga_copy_rect(struct vmsvga_state_s *s,
 377                int x0, int y0, int x1, int y1, int w, int h)
 378{
 379# ifdef DIRECT_VRAM
 380    uint8_t *vram = ds_get_data(s->ds);
 381# else
 382    uint8_t *vram = s->vga.vram_ptr;
 383# endif
 384    int bypl = s->bypp * s->width;
 385    int width = s->bypp * w;
 386    int line = h;
 387    uint8_t *ptr[2];
 388
 389# ifdef DIRECT_VRAM
 390    if (s->ds->dpy_copy)
 391        qemu_console_copy(s->ds, x0, y0, x1, y1, w, h);
 392    else
 393# endif
 394    {
 395        if (y1 > y0) {
 396            ptr[0] = vram + s->bypp * x0 + bypl * (y0 + h - 1);
 397            ptr[1] = vram + s->bypp * x1 + bypl * (y1 + h - 1);
 398            for (; line > 0; line --, ptr[0] -= bypl, ptr[1] -= bypl)
 399                memmove(ptr[1], ptr[0], width);
 400        } else {
 401            ptr[0] = vram + s->bypp * x0 + bypl * y0;
 402            ptr[1] = vram + s->bypp * x1 + bypl * y1;
 403            for (; line > 0; line --, ptr[0] += bypl, ptr[1] += bypl)
 404                memmove(ptr[1], ptr[0], width);
 405        }
 406    }
 407
 408    vmsvga_update_rect_delayed(s, x1, y1, w, h);
 409}
 410#endif
 411
 412#ifdef HW_FILL_ACCEL
 413static inline void vmsvga_fill_rect(struct vmsvga_state_s *s,
 414                uint32_t c, int x, int y, int w, int h)
 415{
 416# ifdef DIRECT_VRAM
 417    uint8_t *vram = ds_get_data(s->ds);
 418# else
 419    uint8_t *vram = s->vga.vram_ptr;
 420# endif
 421    int bypp = s->bypp;
 422    int bypl = bypp * s->width;
 423    int width = bypp * w;
 424    int line = h;
 425    int column;
 426    uint8_t *fst = vram + bypp * x + bypl * y;
 427    uint8_t *dst;
 428    uint8_t *src;
 429    uint8_t col[4];
 430
 431# ifdef DIRECT_VRAM
 432    if (s->ds->dpy_fill)
 433        s->ds->dpy_fill(s->ds, x, y, w, h, c);
 434    else
 435# endif
 436    {
 437        col[0] = c;
 438        col[1] = c >> 8;
 439        col[2] = c >> 16;
 440        col[3] = c >> 24;
 441
 442        if (line --) {
 443            dst = fst;
 444            src = col;
 445            for (column = width; column > 0; column --) {
 446                *(dst ++) = *(src ++);
 447                if (src - col == bypp)
 448                    src = col;
 449            }
 450            dst = fst;
 451            for (; line > 0; line --) {
 452                dst += bypl;
 453                memcpy(dst, fst, width);
 454            }
 455        }
 456    }
 457
 458    vmsvga_update_rect_delayed(s, x, y, w, h);
 459}
 460#endif
 461
 462struct vmsvga_cursor_definition_s {
 463    int width;
 464    int height;
 465    int id;
 466    int bpp;
 467    int hot_x;
 468    int hot_y;
 469    uint32_t mask[1024];
 470    uint32_t image[4096];
 471};
 472
 473#define SVGA_BITMAP_SIZE(w, h)          ((((w) + 31) >> 5) * (h))
 474#define SVGA_PIXMAP_SIZE(w, h, bpp)     (((((w) * (bpp)) + 31) >> 5) * (h))
 475
 476#ifdef HW_MOUSE_ACCEL
 477static inline void vmsvga_cursor_define(struct vmsvga_state_s *s,
 478                struct vmsvga_cursor_definition_s *c)
 479{
 480    int i;
 481    for (i = SVGA_BITMAP_SIZE(c->width, c->height) - 1; i >= 0; i --)
 482        c->mask[i] = ~c->mask[i];
 483
 484    if (s->vga.ds->cursor_define)
 485        s->vga.ds->cursor_define(c->width, c->height, c->bpp, c->hot_x, c->hot_y,
 486                        (uint8_t *) c->image, (uint8_t *) c->mask);
 487}
 488#endif
 489
 490#define CMD(f)  le32_to_cpu(s->cmd->f)
 491
 492static inline int vmsvga_fifo_empty(struct vmsvga_state_s *s)
 493{
 494    if (!s->config || !s->enable)
 495        return 1;
 496    return (s->cmd->next_cmd == s->cmd->stop);
 497}
 498
 499static inline uint32_t vmsvga_fifo_read_raw(struct vmsvga_state_s *s)
 500{
 501    uint32_t cmd = s->fifo[CMD(stop) >> 2];
 502    s->cmd->stop = cpu_to_le32(CMD(stop) + 4);
 503    if (CMD(stop) >= CMD(max))
 504        s->cmd->stop = s->cmd->min;
 505    return cmd;
 506}
 507
 508static inline uint32_t vmsvga_fifo_read(struct vmsvga_state_s *s)
 509{
 510    return le32_to_cpu(vmsvga_fifo_read_raw(s));
 511}
 512
 513static void vmsvga_fifo_run(struct vmsvga_state_s *s)
 514{
 515    uint32_t cmd, colour;
 516    int args = 0;
 517    int x, y, dx, dy, width, height;
 518    struct vmsvga_cursor_definition_s cursor;
 519    while (!vmsvga_fifo_empty(s))
 520        switch (cmd = vmsvga_fifo_read(s)) {
 521        case SVGA_CMD_UPDATE:
 522        case SVGA_CMD_UPDATE_VERBOSE:
 523            x = vmsvga_fifo_read(s);
 524            y = vmsvga_fifo_read(s);
 525            width = vmsvga_fifo_read(s);
 526            height = vmsvga_fifo_read(s);
 527            vmsvga_update_rect_delayed(s, x, y, width, height);
 528            break;
 529
 530        case SVGA_CMD_RECT_FILL:
 531            colour = vmsvga_fifo_read(s);
 532            x = vmsvga_fifo_read(s);
 533            y = vmsvga_fifo_read(s);
 534            width = vmsvga_fifo_read(s);
 535            height = vmsvga_fifo_read(s);
 536#ifdef HW_FILL_ACCEL
 537            vmsvga_fill_rect(s, colour, x, y, width, height);
 538            break;
 539#else
 540            goto badcmd;
 541#endif
 542
 543        case SVGA_CMD_RECT_COPY:
 544            x = vmsvga_fifo_read(s);
 545            y = vmsvga_fifo_read(s);
 546            dx = vmsvga_fifo_read(s);
 547            dy = vmsvga_fifo_read(s);
 548            width = vmsvga_fifo_read(s);
 549            height = vmsvga_fifo_read(s);
 550#ifdef HW_RECT_ACCEL
 551            vmsvga_copy_rect(s, x, y, dx, dy, width, height);
 552            break;
 553#else
 554            goto badcmd;
 555#endif
 556
 557        case SVGA_CMD_DEFINE_CURSOR:
 558            cursor.id = vmsvga_fifo_read(s);
 559            cursor.hot_x = vmsvga_fifo_read(s);
 560            cursor.hot_y = vmsvga_fifo_read(s);
 561            cursor.width = x = vmsvga_fifo_read(s);
 562            cursor.height = y = vmsvga_fifo_read(s);
 563            vmsvga_fifo_read(s);
 564            cursor.bpp = vmsvga_fifo_read(s);
 565            for (args = 0; args < SVGA_BITMAP_SIZE(x, y); args ++)
 566                cursor.mask[args] = vmsvga_fifo_read_raw(s);
 567            for (args = 0; args < SVGA_PIXMAP_SIZE(x, y, cursor.bpp); args ++)
 568                cursor.image[args] = vmsvga_fifo_read_raw(s);
 569#ifdef HW_MOUSE_ACCEL
 570            vmsvga_cursor_define(s, &cursor);
 571            break;
 572#else
 573            args = 0;
 574            goto badcmd;
 575#endif
 576
 577        /*
 578         * Other commands that we at least know the number of arguments
 579         * for so we can avoid FIFO desync if driver uses them illegally.
 580         */
 581        case SVGA_CMD_DEFINE_ALPHA_CURSOR:
 582            vmsvga_fifo_read(s);
 583            vmsvga_fifo_read(s);
 584            vmsvga_fifo_read(s);
 585            x = vmsvga_fifo_read(s);
 586            y = vmsvga_fifo_read(s);
 587            args = x * y;
 588            goto badcmd;
 589        case SVGA_CMD_RECT_ROP_FILL:
 590            args = 6;
 591            goto badcmd;
 592        case SVGA_CMD_RECT_ROP_COPY:
 593            args = 7;
 594            goto badcmd;
 595        case SVGA_CMD_DRAW_GLYPH_CLIPPED:
 596            vmsvga_fifo_read(s);
 597            vmsvga_fifo_read(s);
 598            args = 7 + (vmsvga_fifo_read(s) >> 2);
 599            goto badcmd;
 600        case SVGA_CMD_SURFACE_ALPHA_BLEND:
 601            args = 12;
 602            goto badcmd;
 603
 604        /*
 605         * Other commands that are not listed as depending on any
 606         * CAPABILITIES bits, but are not described in the README either.
 607         */
 608        case SVGA_CMD_SURFACE_FILL:
 609        case SVGA_CMD_SURFACE_COPY:
 610        case SVGA_CMD_FRONT_ROP_FILL:
 611        case SVGA_CMD_FENCE:
 612        case SVGA_CMD_INVALID_CMD:
 613            break; /* Nop */
 614
 615        default:
 616        badcmd:
 617            while (args --)
 618                vmsvga_fifo_read(s);
 619            printf("%s: Unknown command 0x%02x in SVGA command FIFO\n",
 620                            __FUNCTION__, cmd);
 621            break;
 622        }
 623
 624    s->syncing = 0;
 625}
 626
 627static uint32_t vmsvga_index_read(void *opaque, uint32_t address)
 628{
 629    struct vmsvga_state_s *s = opaque;
 630    return s->index;
 631}
 632
 633static void vmsvga_index_write(void *opaque, uint32_t address, uint32_t index)
 634{
 635    struct vmsvga_state_s *s = opaque;
 636    s->index = index;
 637}
 638
 639static uint32_t vmsvga_value_read(void *opaque, uint32_t address)
 640{
 641    uint32_t caps;
 642    struct vmsvga_state_s *s = opaque;
 643    switch (s->index) {
 644    case SVGA_REG_ID:
 645        return s->svgaid;
 646
 647    case SVGA_REG_ENABLE:
 648        return s->enable;
 649
 650    case SVGA_REG_WIDTH:
 651        return s->width;
 652
 653    case SVGA_REG_HEIGHT:
 654        return s->height;
 655
 656    case SVGA_REG_MAX_WIDTH:
 657        return SVGA_MAX_WIDTH;
 658
 659    case SVGA_REG_MAX_HEIGHT:
 660        return SVGA_MAX_HEIGHT;
 661
 662    case SVGA_REG_DEPTH:
 663        return s->depth;
 664
 665    case SVGA_REG_BITS_PER_PIXEL:
 666        return (s->depth + 7) & ~7;
 667
 668    case SVGA_REG_PSEUDOCOLOR:
 669        return 0x0;
 670
 671    case SVGA_REG_RED_MASK:
 672        return s->wred;
 673    case SVGA_REG_GREEN_MASK:
 674        return s->wgreen;
 675    case SVGA_REG_BLUE_MASK:
 676        return s->wblue;
 677
 678    case SVGA_REG_BYTES_PER_LINE:
 679        return ((s->depth + 7) >> 3) * s->new_width;
 680
 681    case SVGA_REG_FB_START:
 682        return s->vram_base;
 683
 684    case SVGA_REG_FB_OFFSET:
 685        return 0x0;
 686
 687    case SVGA_REG_VRAM_SIZE:
 688        return s->vga.vram_size;
 689
 690    case SVGA_REG_FB_SIZE:
 691        return s->fb_size;
 692
 693    case SVGA_REG_CAPABILITIES:
 694        caps = SVGA_CAP_NONE;
 695#ifdef HW_RECT_ACCEL
 696        caps |= SVGA_CAP_RECT_COPY;
 697#endif
 698#ifdef HW_FILL_ACCEL
 699        caps |= SVGA_CAP_RECT_FILL;
 700#endif
 701#ifdef HW_MOUSE_ACCEL
 702        if (s->vga.ds->mouse_set)
 703            caps |= SVGA_CAP_CURSOR | SVGA_CAP_CURSOR_BYPASS_2 |
 704                    SVGA_CAP_CURSOR_BYPASS;
 705#endif
 706        return caps;
 707
 708    case SVGA_REG_MEM_START:
 709        return s->fifo_base;
 710
 711    case SVGA_REG_MEM_SIZE:
 712        return s->fifo_size;
 713
 714    case SVGA_REG_CONFIG_DONE:
 715        return s->config;
 716
 717    case SVGA_REG_SYNC:
 718    case SVGA_REG_BUSY:
 719        return s->syncing;
 720
 721    case SVGA_REG_GUEST_ID:
 722        return s->guest;
 723
 724    case SVGA_REG_CURSOR_ID:
 725        return s->cursor.id;
 726
 727    case SVGA_REG_CURSOR_X:
 728        return s->cursor.x;
 729
 730    case SVGA_REG_CURSOR_Y:
 731        return s->cursor.x;
 732
 733    case SVGA_REG_CURSOR_ON:
 734        return s->cursor.on;
 735
 736    case SVGA_REG_HOST_BITS_PER_PIXEL:
 737        return (s->depth + 7) & ~7;
 738
 739    case SVGA_REG_SCRATCH_SIZE:
 740        return s->scratch_size;
 741
 742    case SVGA_REG_MEM_REGS:
 743    case SVGA_REG_NUM_DISPLAYS:
 744    case SVGA_REG_PITCHLOCK:
 745    case SVGA_PALETTE_BASE ... SVGA_PALETTE_END:
 746        return 0;
 747
 748    default:
 749        if (s->index >= SVGA_SCRATCH_BASE &&
 750                s->index < SVGA_SCRATCH_BASE + s->scratch_size)
 751            return s->scratch[s->index - SVGA_SCRATCH_BASE];
 752        printf("%s: Bad register %02x\n", __FUNCTION__, s->index);
 753    }
 754
 755    return 0;
 756}
 757
 758static void vmsvga_value_write(void *opaque, uint32_t address, uint32_t value)
 759{
 760    struct vmsvga_state_s *s = opaque;
 761    switch (s->index) {
 762    case SVGA_REG_ID:
 763        if (value == SVGA_ID_2 || value == SVGA_ID_1 || value == SVGA_ID_0)
 764            s->svgaid = value;
 765        break;
 766
 767    case SVGA_REG_ENABLE:
 768        s->enable = value;
 769        s->config &= !!value;
 770        s->width = -1;
 771        s->height = -1;
 772        s->invalidated = 1;
 773        s->vga.invalidate(&s->vga);
 774        if (s->enable) {
 775          s->fb_size = ((s->depth + 7) >> 3) * s->new_width * s->new_height;
 776          vga_dirty_log_stop(&s->vga);
 777        } else {
 778          vga_dirty_log_start(&s->vga);
 779        }
 780        break;
 781
 782    case SVGA_REG_WIDTH:
 783        s->new_width = value;
 784        s->invalidated = 1;
 785        break;
 786
 787    case SVGA_REG_HEIGHT:
 788        s->new_height = value;
 789        s->invalidated = 1;
 790        break;
 791
 792    case SVGA_REG_DEPTH:
 793    case SVGA_REG_BITS_PER_PIXEL:
 794        if (value != s->depth) {
 795            printf("%s: Bad colour depth: %i bits\n", __FUNCTION__, value);
 796            s->config = 0;
 797        }
 798        break;
 799
 800    case SVGA_REG_CONFIG_DONE:
 801        if (value) {
 802            s->fifo = (uint32_t *) s->fifo_ptr;
 803            /* Check range and alignment.  */
 804            if ((CMD(min) | CMD(max) |
 805                        CMD(next_cmd) | CMD(stop)) & 3)
 806                break;
 807            if (CMD(min) < (uint8_t *) s->cmd->fifo - (uint8_t *) s->fifo)
 808                break;
 809            if (CMD(max) > SVGA_FIFO_SIZE)
 810                break;
 811            if (CMD(max) < CMD(min) + 10 * 1024)
 812                break;
 813        }
 814        s->config = !!value;
 815        break;
 816
 817    case SVGA_REG_SYNC:
 818        s->syncing = 1;
 819        vmsvga_fifo_run(s); /* Or should we just wait for update_display? */
 820        break;
 821
 822    case SVGA_REG_GUEST_ID:
 823        s->guest = value;
 824#ifdef VERBOSE
 825        if (value >= GUEST_OS_BASE && value < GUEST_OS_BASE +
 826                ARRAY_SIZE(vmsvga_guest_id))
 827            printf("%s: guest runs %s.\n", __FUNCTION__,
 828                            vmsvga_guest_id[value - GUEST_OS_BASE]);
 829#endif
 830        break;
 831
 832    case SVGA_REG_CURSOR_ID:
 833        s->cursor.id = value;
 834        break;
 835
 836    case SVGA_REG_CURSOR_X:
 837        s->cursor.x = value;
 838        break;
 839
 840    case SVGA_REG_CURSOR_Y:
 841        s->cursor.y = value;
 842        break;
 843
 844    case SVGA_REG_CURSOR_ON:
 845        s->cursor.on |= (value == SVGA_CURSOR_ON_SHOW);
 846        s->cursor.on &= (value != SVGA_CURSOR_ON_HIDE);
 847#ifdef HW_MOUSE_ACCEL
 848        if (s->vga.ds->mouse_set && value <= SVGA_CURSOR_ON_SHOW)
 849            s->vga.ds->mouse_set(s->cursor.x, s->cursor.y, s->cursor.on);
 850#endif
 851        break;
 852
 853    case SVGA_REG_MEM_REGS:
 854    case SVGA_REG_NUM_DISPLAYS:
 855    case SVGA_REG_PITCHLOCK:
 856    case SVGA_PALETTE_BASE ... SVGA_PALETTE_END:
 857        break;
 858
 859    default:
 860        if (s->index >= SVGA_SCRATCH_BASE &&
 861                s->index < SVGA_SCRATCH_BASE + s->scratch_size) {
 862            s->scratch[s->index - SVGA_SCRATCH_BASE] = value;
 863            break;
 864        }
 865        printf("%s: Bad register %02x\n", __FUNCTION__, s->index);
 866    }
 867}
 868
 869static uint32_t vmsvga_bios_read(void *opaque, uint32_t address)
 870{
 871    printf("%s: what are we supposed to return?\n", __FUNCTION__);
 872    return 0xcafe;
 873}
 874
 875static void vmsvga_bios_write(void *opaque, uint32_t address, uint32_t data)
 876{
 877    printf("%s: what are we supposed to do with (%08x)?\n",
 878                    __FUNCTION__, data);
 879}
 880
 881static inline void vmsvga_size(struct vmsvga_state_s *s)
 882{
 883    if (s->new_width != s->width || s->new_height != s->height) {
 884        s->width = s->new_width;
 885        s->height = s->new_height;
 886        qemu_console_resize(s->vga.ds, s->width, s->height);
 887        s->invalidated = 1;
 888    }
 889}
 890
 891static void vmsvga_update_display(void *opaque)
 892{
 893    struct vmsvga_state_s *s = opaque;
 894    if (!s->enable) {
 895        s->vga.update(&s->vga);
 896        return;
 897    }
 898
 899    vmsvga_size(s);
 900
 901    vmsvga_fifo_run(s);
 902    vmsvga_update_rect_flush(s);
 903
 904    /*
 905     * Is it more efficient to look at vram VGA-dirty bits or wait
 906     * for the driver to issue SVGA_CMD_UPDATE?
 907     */
 908    if (s->invalidated) {
 909        s->invalidated = 0;
 910        vmsvga_update_screen(s);
 911    }
 912}
 913
 914static void vmsvga_reset(struct vmsvga_state_s *s)
 915{
 916    s->index = 0;
 917    s->enable = 0;
 918    s->config = 0;
 919    s->width = -1;
 920    s->height = -1;
 921    s->svgaid = SVGA_ID;
 922    s->depth = ds_get_bits_per_pixel(s->vga.ds);
 923    s->bypp = ds_get_bytes_per_pixel(s->vga.ds);
 924    s->cursor.on = 0;
 925    s->redraw_fifo_first = 0;
 926    s->redraw_fifo_last = 0;
 927    switch (s->depth) {
 928    case 8:
 929        s->wred   = 0x00000007;
 930        s->wgreen = 0x00000038;
 931        s->wblue  = 0x000000c0;
 932        break;
 933    case 15:
 934        s->wred   = 0x0000001f;
 935        s->wgreen = 0x000003e0;
 936        s->wblue  = 0x00007c00;
 937        break;
 938    case 16:
 939        s->wred   = 0x0000001f;
 940        s->wgreen = 0x000007e0;
 941        s->wblue  = 0x0000f800;
 942        break;
 943    case 24:
 944        s->wred   = 0x00ff0000;
 945        s->wgreen = 0x0000ff00;
 946        s->wblue  = 0x000000ff;
 947        break;
 948    case 32:
 949        s->wred   = 0x00ff0000;
 950        s->wgreen = 0x0000ff00;
 951        s->wblue  = 0x000000ff;
 952        break;
 953    }
 954    s->syncing = 0;
 955
 956    vga_dirty_log_start(&s->vga);
 957}
 958
 959static void vmsvga_invalidate_display(void *opaque)
 960{
 961    struct vmsvga_state_s *s = opaque;
 962    if (!s->enable) {
 963        s->vga.invalidate(&s->vga);
 964        return;
 965    }
 966
 967    s->invalidated = 1;
 968}
 969
 970/* save the vga display in a PPM image even if no display is
 971   available */
 972static void vmsvga_screen_dump(void *opaque, const char *filename)
 973{
 974    struct vmsvga_state_s *s = opaque;
 975    if (!s->enable) {
 976        s->vga.screen_dump(&s->vga, filename);
 977        return;
 978    }
 979
 980    if (s->depth == 32) {
 981        DisplaySurface *ds = qemu_create_displaysurface_from(s->width,
 982                s->height, 32, ds_get_linesize(s->vga.ds), s->vga.vram_ptr);
 983        ppm_save(filename, ds);
 984        qemu_free(ds);
 985    }
 986}
 987
 988static void vmsvga_text_update(void *opaque, console_ch_t *chardata)
 989{
 990    struct vmsvga_state_s *s = opaque;
 991
 992    if (s->vga.text_update)
 993        s->vga.text_update(&s->vga, chardata);
 994}
 995
 996#ifdef DIRECT_VRAM
 997static uint32_t vmsvga_vram_readb(void *opaque, target_phys_addr_t addr)
 998{
 999    struct vmsvga_state_s *s = opaque;
1000    if (addr < s->fb_size)
1001        return *(uint8_t *) (ds_get_data(s->ds) + addr);
1002    else
1003        return *(uint8_t *) (s->vram_ptr + addr);
1004}
1005
1006static uint32_t vmsvga_vram_readw(void *opaque, target_phys_addr_t addr)
1007{
1008    struct vmsvga_state_s *s = opaque;
1009    if (addr < s->fb_size)
1010        return *(uint16_t *) (ds_get_data(s->ds) + addr);
1011    else
1012        return *(uint16_t *) (s->vram_ptr + addr);
1013}
1014
1015static uint32_t vmsvga_vram_readl(void *opaque, target_phys_addr_t addr)
1016{
1017    struct vmsvga_state_s *s = opaque;
1018    if (addr < s->fb_size)
1019        return *(uint32_t *) (ds_get_data(s->ds) + addr);
1020    else
1021        return *(uint32_t *) (s->vram_ptr + addr);
1022}
1023
1024static void vmsvga_vram_writeb(void *opaque, target_phys_addr_t addr,
1025                uint32_t value)
1026{
1027    struct vmsvga_state_s *s = opaque;
1028    if (addr < s->fb_size)
1029        *(uint8_t *) (ds_get_data(s->ds) + addr) = value;
1030    else
1031        *(uint8_t *) (s->vram_ptr + addr) = value;
1032}
1033
1034static void vmsvga_vram_writew(void *opaque, target_phys_addr_t addr,
1035                uint32_t value)
1036{
1037    struct vmsvga_state_s *s = opaque;
1038    if (addr < s->fb_size)
1039        *(uint16_t *) (ds_get_data(s->ds) + addr) = value;
1040    else
1041        *(uint16_t *) (s->vram_ptr + addr) = value;
1042}
1043
1044static void vmsvga_vram_writel(void *opaque, target_phys_addr_t addr,
1045                uint32_t value)
1046{
1047    struct vmsvga_state_s *s = opaque;
1048    if (addr < s->fb_size)
1049        *(uint32_t *) (ds_get_data(s->ds) + addr) = value;
1050    else
1051        *(uint32_t *) (s->vram_ptr + addr) = value;
1052}
1053
1054static CPUReadMemoryFunc * const vmsvga_vram_read[] = {
1055    vmsvga_vram_readb,
1056    vmsvga_vram_readw,
1057    vmsvga_vram_readl,
1058};
1059
1060static CPUWriteMemoryFunc * const vmsvga_vram_write[] = {
1061    vmsvga_vram_writeb,
1062    vmsvga_vram_writew,
1063    vmsvga_vram_writel,
1064};
1065#endif
1066
1067static int vmsvga_post_load(void *opaque, int version_id)
1068{
1069    struct vmsvga_state_s *s = opaque;
1070
1071    s->invalidated = 1;
1072    if (s->config)
1073        s->fifo = (uint32_t *) s->fifo_ptr;
1074
1075    return 0;
1076}
1077
1078static const VMStateDescription vmstate_vmware_vga_internal = {
1079    .name = "vmware_vga_internal",
1080    .version_id = 0,
1081    .minimum_version_id = 0,
1082    .minimum_version_id_old = 0,
1083    .post_load = vmsvga_post_load,
1084    .fields      = (VMStateField []) {
1085        VMSTATE_INT32_EQUAL(depth, struct vmsvga_state_s),
1086        VMSTATE_INT32(enable, struct vmsvga_state_s),
1087        VMSTATE_INT32(config, struct vmsvga_state_s),
1088        VMSTATE_INT32(cursor.id, struct vmsvga_state_s),
1089        VMSTATE_INT32(cursor.x, struct vmsvga_state_s),
1090        VMSTATE_INT32(cursor.y, struct vmsvga_state_s),
1091        VMSTATE_INT32(cursor.on, struct vmsvga_state_s),
1092        VMSTATE_INT32(index, struct vmsvga_state_s),
1093        VMSTATE_VARRAY_INT32(scratch, struct vmsvga_state_s,
1094                             scratch_size, 0, vmstate_info_uint32, uint32_t),
1095        VMSTATE_INT32(new_width, struct vmsvga_state_s),
1096        VMSTATE_INT32(new_height, struct vmsvga_state_s),
1097        VMSTATE_UINT32(guest, struct vmsvga_state_s),
1098        VMSTATE_UINT32(svgaid, struct vmsvga_state_s),
1099        VMSTATE_INT32(syncing, struct vmsvga_state_s),
1100        VMSTATE_INT32(fb_size, struct vmsvga_state_s),
1101        VMSTATE_END_OF_LIST()
1102    }
1103};
1104
1105static const VMStateDescription vmstate_vmware_vga = {
1106    .name = "vmware_vga",
1107    .version_id = 0,
1108    .minimum_version_id = 0,
1109    .minimum_version_id_old = 0,
1110    .fields      = (VMStateField []) {
1111        VMSTATE_PCI_DEVICE(card, struct pci_vmsvga_state_s),
1112        VMSTATE_STRUCT(chip, struct pci_vmsvga_state_s, 0,
1113                       vmstate_vmware_vga_internal, struct vmsvga_state_s),
1114        VMSTATE_END_OF_LIST()
1115    }
1116};
1117
1118static void vmsvga_init(struct vmsvga_state_s *s, int vga_ram_size)
1119{
1120    s->scratch_size = SVGA_SCRATCH_SIZE;
1121    s->scratch = qemu_malloc(s->scratch_size * 4);
1122
1123    s->vga.ds = graphic_console_init(vmsvga_update_display,
1124                                     vmsvga_invalidate_display,
1125                                     vmsvga_screen_dump,
1126                                     vmsvga_text_update, s);
1127
1128
1129    s->fifo_size = SVGA_FIFO_SIZE;
1130    s->fifo_offset = qemu_ram_alloc(s->fifo_size);
1131    s->fifo_ptr = qemu_get_ram_ptr(s->fifo_offset);
1132
1133    vga_common_init(&s->vga, vga_ram_size);
1134    vga_init(&s->vga);
1135    vmstate_register(0, &vmstate_vga_common, &s->vga);
1136
1137    vga_init_vbe(&s->vga);
1138
1139    rom_add_vga(VGABIOS_FILENAME);
1140
1141    vmsvga_reset(s);
1142}
1143
1144static void pci_vmsvga_map_ioport(PCIDevice *pci_dev, int region_num,
1145                pcibus_t addr, pcibus_t size, int type)
1146{
1147    struct pci_vmsvga_state_s *d = (struct pci_vmsvga_state_s *) pci_dev;
1148    struct vmsvga_state_s *s = &d->chip;
1149
1150    register_ioport_read(addr + SVGA_IO_MUL * SVGA_INDEX_PORT,
1151                    1, 4, vmsvga_index_read, s);
1152    register_ioport_write(addr + SVGA_IO_MUL * SVGA_INDEX_PORT,
1153                    1, 4, vmsvga_index_write, s);
1154    register_ioport_read(addr + SVGA_IO_MUL * SVGA_VALUE_PORT,
1155                    1, 4, vmsvga_value_read, s);
1156    register_ioport_write(addr + SVGA_IO_MUL * SVGA_VALUE_PORT,
1157                    1, 4, vmsvga_value_write, s);
1158    register_ioport_read(addr + SVGA_IO_MUL * SVGA_BIOS_PORT,
1159                    1, 4, vmsvga_bios_read, s);
1160    register_ioport_write(addr + SVGA_IO_MUL * SVGA_BIOS_PORT,
1161                    1, 4, vmsvga_bios_write, s);
1162}
1163
1164static void pci_vmsvga_map_mem(PCIDevice *pci_dev, int region_num,
1165                pcibus_t addr, pcibus_t size, int type)
1166{
1167    struct pci_vmsvga_state_s *d = (struct pci_vmsvga_state_s *) pci_dev;
1168    struct vmsvga_state_s *s = &d->chip;
1169    ram_addr_t iomemtype;
1170
1171    s->vram_base = addr;
1172#ifdef DIRECT_VRAM
1173    iomemtype = cpu_register_io_memory(vmsvga_vram_read,
1174                    vmsvga_vram_write, s);
1175#else
1176    iomemtype = s->vga.vram_offset | IO_MEM_RAM;
1177#endif
1178    cpu_register_physical_memory(s->vram_base, s->vga.vram_size,
1179                    iomemtype);
1180
1181    s->vga.map_addr = addr;
1182    s->vga.map_end = addr + s->vga.vram_size;
1183    vga_dirty_log_restart(&s->vga);
1184}
1185
1186static void pci_vmsvga_map_fifo(PCIDevice *pci_dev, int region_num,
1187                pcibus_t addr, pcibus_t size, int type)
1188{
1189    struct pci_vmsvga_state_s *d = (struct pci_vmsvga_state_s *) pci_dev;
1190    struct vmsvga_state_s *s = &d->chip;
1191    ram_addr_t iomemtype;
1192
1193    s->fifo_base = addr;
1194    iomemtype = s->fifo_offset | IO_MEM_RAM;
1195    cpu_register_physical_memory(s->fifo_base, s->fifo_size,
1196                    iomemtype);
1197}
1198
1199static int pci_vmsvga_initfn(PCIDevice *dev)
1200{
1201    struct pci_vmsvga_state_s *s =
1202        DO_UPCAST(struct pci_vmsvga_state_s, card, dev);
1203
1204    pci_config_set_vendor_id(s->card.config, PCI_VENDOR_ID_VMWARE);
1205    pci_config_set_device_id(s->card.config, SVGA_PCI_DEVICE_ID);
1206    s->card.config[PCI_COMMAND]         = 0x07;         /* I/O + Memory */
1207    pci_config_set_class(s->card.config, PCI_CLASS_DISPLAY_VGA);
1208    s->card.config[0x0c]                = 0x08;         /* Cache line size */
1209    s->card.config[0x0d]                = 0x40;         /* Latency timer */
1210    s->card.config[PCI_HEADER_TYPE]     = PCI_HEADER_TYPE_NORMAL;
1211    s->card.config[0x2c]                = PCI_VENDOR_ID_VMWARE & 0xff;
1212    s->card.config[0x2d]                = PCI_VENDOR_ID_VMWARE >> 8;
1213    s->card.config[0x2e]                = SVGA_PCI_DEVICE_ID & 0xff;
1214    s->card.config[0x2f]                = SVGA_PCI_DEVICE_ID >> 8;
1215    s->card.config[0x3c]                = 0xff;         /* End */
1216
1217    pci_register_bar(&s->card, 0, 0x10,
1218                    PCI_BASE_ADDRESS_SPACE_IO, pci_vmsvga_map_ioport);
1219    pci_register_bar(&s->card, 1, VGA_RAM_SIZE,
1220                    PCI_BASE_ADDRESS_MEM_PREFETCH, pci_vmsvga_map_mem);
1221
1222    pci_register_bar(&s->card, 2, SVGA_FIFO_SIZE,
1223                     PCI_BASE_ADDRESS_MEM_PREFETCH, pci_vmsvga_map_fifo);
1224
1225    vmsvga_init(&s->chip, VGA_RAM_SIZE);
1226
1227    return 0;
1228}
1229
1230void pci_vmsvga_init(PCIBus *bus)
1231{
1232    pci_create_simple(bus, -1, "vmware-svga");
1233}
1234
1235static PCIDeviceInfo vmsvga_info = {
1236    .qdev.name    = "vmware-svga",
1237    .qdev.size    = sizeof(struct pci_vmsvga_state_s),
1238    .qdev.vmsd    = &vmstate_vmware_vga,
1239    .init         = pci_vmsvga_initfn,
1240};
1241
1242static void vmsvga_register(void)
1243{
1244    pci_qdev_register(&vmsvga_info);
1245}
1246device_init(vmsvga_register);
1247