qemu/hw/apic.c
<<
>>
Prefs
   1/*
   2 *  APIC support
   3 *
   4 *  Copyright (c) 2004-2005 Fabrice Bellard
   5 *
   6 * This library is free software; you can redistribute it and/or
   7 * modify it under the terms of the GNU Lesser General Public
   8 * License as published by the Free Software Foundation; either
   9 * version 2 of the License, or (at your option) any later version.
  10 *
  11 * This library is distributed in the hope that it will be useful,
  12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  14 * Lesser General Public License for more details.
  15 *
  16 * You should have received a copy of the GNU Lesser General Public
  17 * License along with this library; if not, see <http://www.gnu.org/licenses/>
  18 */
  19#include "qemu/thread.h"
  20#include "apic_internal.h"
  21#include "apic.h"
  22#include "ioapic.h"
  23#include "pci/msi.h"
  24#include "qemu/host-utils.h"
  25#include "trace.h"
  26#include "pc.h"
  27#include "apic-msidef.h"
  28
  29#define MAX_APIC_WORDS 8
  30
  31#define SYNC_FROM_VAPIC                 0x1
  32#define SYNC_TO_VAPIC                   0x2
  33#define SYNC_ISR_IRR_TO_VAPIC           0x4
  34
  35static APICCommonState *local_apics[MAX_APICS + 1];
  36
  37static void apic_set_irq(APICCommonState *s, int vector_num, int trigger_mode);
  38static void apic_update_irq(APICCommonState *s);
  39static void apic_get_delivery_bitmask(uint32_t *deliver_bitmask,
  40                                      uint8_t dest, uint8_t dest_mode);
  41
  42/* Find first bit starting from msb */
  43static int fls_bit(uint32_t value)
  44{
  45    return 31 - clz32(value);
  46}
  47
  48/* Find first bit starting from lsb */
  49static int ffs_bit(uint32_t value)
  50{
  51    return ctz32(value);
  52}
  53
  54static inline void set_bit(uint32_t *tab, int index)
  55{
  56    int i, mask;
  57    i = index >> 5;
  58    mask = 1 << (index & 0x1f);
  59    tab[i] |= mask;
  60}
  61
  62static inline void reset_bit(uint32_t *tab, int index)
  63{
  64    int i, mask;
  65    i = index >> 5;
  66    mask = 1 << (index & 0x1f);
  67    tab[i] &= ~mask;
  68}
  69
  70static inline int get_bit(uint32_t *tab, int index)
  71{
  72    int i, mask;
  73    i = index >> 5;
  74    mask = 1 << (index & 0x1f);
  75    return !!(tab[i] & mask);
  76}
  77
  78/* return -1 if no bit is set */
  79static int get_highest_priority_int(uint32_t *tab)
  80{
  81    int i;
  82    for (i = 7; i >= 0; i--) {
  83        if (tab[i] != 0) {
  84            return i * 32 + fls_bit(tab[i]);
  85        }
  86    }
  87    return -1;
  88}
  89
  90static void apic_sync_vapic(APICCommonState *s, int sync_type)
  91{
  92    VAPICState vapic_state;
  93    size_t length;
  94    off_t start;
  95    int vector;
  96
  97    if (!s->vapic_paddr) {
  98        return;
  99    }
 100    if (sync_type & SYNC_FROM_VAPIC) {
 101        cpu_physical_memory_rw(s->vapic_paddr, (void *)&vapic_state,
 102                               sizeof(vapic_state), 0);
 103        s->tpr = vapic_state.tpr;
 104    }
 105    if (sync_type & (SYNC_TO_VAPIC | SYNC_ISR_IRR_TO_VAPIC)) {
 106        start = offsetof(VAPICState, isr);
 107        length = offsetof(VAPICState, enabled) - offsetof(VAPICState, isr);
 108
 109        if (sync_type & SYNC_TO_VAPIC) {
 110            assert(qemu_cpu_is_self(CPU(s->cpu)));
 111
 112            vapic_state.tpr = s->tpr;
 113            vapic_state.enabled = 1;
 114            start = 0;
 115            length = sizeof(VAPICState);
 116        }
 117
 118        vector = get_highest_priority_int(s->isr);
 119        if (vector < 0) {
 120            vector = 0;
 121        }
 122        vapic_state.isr = vector & 0xf0;
 123
 124        vapic_state.zero = 0;
 125
 126        vector = get_highest_priority_int(s->irr);
 127        if (vector < 0) {
 128            vector = 0;
 129        }
 130        vapic_state.irr = vector & 0xff;
 131
 132        cpu_physical_memory_write_rom(s->vapic_paddr + start,
 133                                      ((void *)&vapic_state) + start, length);
 134    }
 135}
 136
 137static void apic_vapic_base_update(APICCommonState *s)
 138{
 139    apic_sync_vapic(s, SYNC_TO_VAPIC);
 140}
 141
 142static void apic_local_deliver(APICCommonState *s, int vector)
 143{
 144    uint32_t lvt = s->lvt[vector];
 145    int trigger_mode;
 146
 147    trace_apic_local_deliver(vector, (lvt >> 8) & 7);
 148
 149    if (lvt & APIC_LVT_MASKED)
 150        return;
 151
 152    switch ((lvt >> 8) & 7) {
 153    case APIC_DM_SMI:
 154        cpu_interrupt(&s->cpu->env, CPU_INTERRUPT_SMI);
 155        break;
 156
 157    case APIC_DM_NMI:
 158        cpu_interrupt(&s->cpu->env, CPU_INTERRUPT_NMI);
 159        break;
 160
 161    case APIC_DM_EXTINT:
 162        cpu_interrupt(&s->cpu->env, CPU_INTERRUPT_HARD);
 163        break;
 164
 165    case APIC_DM_FIXED:
 166        trigger_mode = APIC_TRIGGER_EDGE;
 167        if ((vector == APIC_LVT_LINT0 || vector == APIC_LVT_LINT1) &&
 168            (lvt & APIC_LVT_LEVEL_TRIGGER))
 169            trigger_mode = APIC_TRIGGER_LEVEL;
 170        apic_set_irq(s, lvt & 0xff, trigger_mode);
 171    }
 172}
 173
 174void apic_deliver_pic_intr(DeviceState *d, int level)
 175{
 176    APICCommonState *s = DO_UPCAST(APICCommonState, busdev.qdev, d);
 177
 178    if (level) {
 179        apic_local_deliver(s, APIC_LVT_LINT0);
 180    } else {
 181        uint32_t lvt = s->lvt[APIC_LVT_LINT0];
 182
 183        switch ((lvt >> 8) & 7) {
 184        case APIC_DM_FIXED:
 185            if (!(lvt & APIC_LVT_LEVEL_TRIGGER))
 186                break;
 187            reset_bit(s->irr, lvt & 0xff);
 188            /* fall through */
 189        case APIC_DM_EXTINT:
 190            cpu_reset_interrupt(&s->cpu->env, CPU_INTERRUPT_HARD);
 191            break;
 192        }
 193    }
 194}
 195
 196static void apic_external_nmi(APICCommonState *s)
 197{
 198    apic_local_deliver(s, APIC_LVT_LINT1);
 199}
 200
 201#define foreach_apic(apic, deliver_bitmask, code) \
 202{\
 203    int __i, __j, __mask;\
 204    for(__i = 0; __i < MAX_APIC_WORDS; __i++) {\
 205        __mask = deliver_bitmask[__i];\
 206        if (__mask) {\
 207            for(__j = 0; __j < 32; __j++) {\
 208                if (__mask & (1 << __j)) {\
 209                    apic = local_apics[__i * 32 + __j];\
 210                    if (apic) {\
 211                        code;\
 212                    }\
 213                }\
 214            }\
 215        }\
 216    }\
 217}
 218
 219static void apic_bus_deliver(const uint32_t *deliver_bitmask,
 220                             uint8_t delivery_mode, uint8_t vector_num,
 221                             uint8_t trigger_mode)
 222{
 223    APICCommonState *apic_iter;
 224
 225    switch (delivery_mode) {
 226        case APIC_DM_LOWPRI:
 227            /* XXX: search for focus processor, arbitration */
 228            {
 229                int i, d;
 230                d = -1;
 231                for(i = 0; i < MAX_APIC_WORDS; i++) {
 232                    if (deliver_bitmask[i]) {
 233                        d = i * 32 + ffs_bit(deliver_bitmask[i]);
 234                        break;
 235                    }
 236                }
 237                if (d >= 0) {
 238                    apic_iter = local_apics[d];
 239                    if (apic_iter) {
 240                        apic_set_irq(apic_iter, vector_num, trigger_mode);
 241                    }
 242                }
 243            }
 244            return;
 245
 246        case APIC_DM_FIXED:
 247            break;
 248
 249        case APIC_DM_SMI:
 250            foreach_apic(apic_iter, deliver_bitmask,
 251                cpu_interrupt(&apic_iter->cpu->env, CPU_INTERRUPT_SMI)
 252            );
 253            return;
 254
 255        case APIC_DM_NMI:
 256            foreach_apic(apic_iter, deliver_bitmask,
 257                cpu_interrupt(&apic_iter->cpu->env, CPU_INTERRUPT_NMI)
 258            );
 259            return;
 260
 261        case APIC_DM_INIT:
 262            /* normal INIT IPI sent to processors */
 263            foreach_apic(apic_iter, deliver_bitmask,
 264                         cpu_interrupt(&apic_iter->cpu->env,
 265                                       CPU_INTERRUPT_INIT)
 266            );
 267            return;
 268
 269        case APIC_DM_EXTINT:
 270            /* handled in I/O APIC code */
 271            break;
 272
 273        default:
 274            return;
 275    }
 276
 277    foreach_apic(apic_iter, deliver_bitmask,
 278                 apic_set_irq(apic_iter, vector_num, trigger_mode) );
 279}
 280
 281void apic_deliver_irq(uint8_t dest, uint8_t dest_mode, uint8_t delivery_mode,
 282                      uint8_t vector_num, uint8_t trigger_mode)
 283{
 284    uint32_t deliver_bitmask[MAX_APIC_WORDS];
 285
 286    trace_apic_deliver_irq(dest, dest_mode, delivery_mode, vector_num,
 287                           trigger_mode);
 288
 289    apic_get_delivery_bitmask(deliver_bitmask, dest, dest_mode);
 290    apic_bus_deliver(deliver_bitmask, delivery_mode, vector_num, trigger_mode);
 291}
 292
 293static void apic_set_base(APICCommonState *s, uint64_t val)
 294{
 295    s->apicbase = (val & 0xfffff000) |
 296        (s->apicbase & (MSR_IA32_APICBASE_BSP | MSR_IA32_APICBASE_ENABLE));
 297    /* if disabled, cannot be enabled again */
 298    if (!(val & MSR_IA32_APICBASE_ENABLE)) {
 299        s->apicbase &= ~MSR_IA32_APICBASE_ENABLE;
 300        cpu_clear_apic_feature(&s->cpu->env);
 301        s->spurious_vec &= ~APIC_SV_ENABLE;
 302    }
 303}
 304
 305static void apic_set_tpr(APICCommonState *s, uint8_t val)
 306{
 307    /* Updates from cr8 are ignored while the VAPIC is active */
 308    if (!s->vapic_paddr) {
 309        s->tpr = val << 4;
 310        apic_update_irq(s);
 311    }
 312}
 313
 314static uint8_t apic_get_tpr(APICCommonState *s)
 315{
 316    apic_sync_vapic(s, SYNC_FROM_VAPIC);
 317    return s->tpr >> 4;
 318}
 319
 320static int apic_get_ppr(APICCommonState *s)
 321{
 322    int tpr, isrv, ppr;
 323
 324    tpr = (s->tpr >> 4);
 325    isrv = get_highest_priority_int(s->isr);
 326    if (isrv < 0)
 327        isrv = 0;
 328    isrv >>= 4;
 329    if (tpr >= isrv)
 330        ppr = s->tpr;
 331    else
 332        ppr = isrv << 4;
 333    return ppr;
 334}
 335
 336static int apic_get_arb_pri(APICCommonState *s)
 337{
 338    /* XXX: arbitration */
 339    return 0;
 340}
 341
 342
 343/*
 344 * <0 - low prio interrupt,
 345 * 0  - no interrupt,
 346 * >0 - interrupt number
 347 */
 348static int apic_irq_pending(APICCommonState *s)
 349{
 350    int irrv, ppr;
 351    irrv = get_highest_priority_int(s->irr);
 352    if (irrv < 0) {
 353        return 0;
 354    }
 355    ppr = apic_get_ppr(s);
 356    if (ppr && (irrv & 0xf0) <= (ppr & 0xf0)) {
 357        return -1;
 358    }
 359
 360    return irrv;
 361}
 362
 363/* signal the CPU if an irq is pending */
 364static void apic_update_irq(APICCommonState *s)
 365{
 366    CPUState *cpu = CPU(s->cpu);
 367
 368    if (!(s->spurious_vec & APIC_SV_ENABLE)) {
 369        return;
 370    }
 371    if (!qemu_cpu_is_self(cpu)) {
 372        cpu_interrupt(&s->cpu->env, CPU_INTERRUPT_POLL);
 373    } else if (apic_irq_pending(s) > 0) {
 374        cpu_interrupt(&s->cpu->env, CPU_INTERRUPT_HARD);
 375    }
 376}
 377
 378void apic_poll_irq(DeviceState *d)
 379{
 380    APICCommonState *s = APIC_COMMON(d);
 381
 382    apic_sync_vapic(s, SYNC_FROM_VAPIC);
 383    apic_update_irq(s);
 384}
 385
 386static void apic_set_irq(APICCommonState *s, int vector_num, int trigger_mode)
 387{
 388    apic_report_irq_delivered(!get_bit(s->irr, vector_num));
 389
 390    set_bit(s->irr, vector_num);
 391    if (trigger_mode)
 392        set_bit(s->tmr, vector_num);
 393    else
 394        reset_bit(s->tmr, vector_num);
 395    if (s->vapic_paddr) {
 396        apic_sync_vapic(s, SYNC_ISR_IRR_TO_VAPIC);
 397        /*
 398         * The vcpu thread needs to see the new IRR before we pull its current
 399         * TPR value. That way, if we miss a lowering of the TRP, the guest
 400         * has the chance to notice the new IRR and poll for IRQs on its own.
 401         */
 402        smp_wmb();
 403        apic_sync_vapic(s, SYNC_FROM_VAPIC);
 404    }
 405    apic_update_irq(s);
 406}
 407
 408static void apic_eoi(APICCommonState *s)
 409{
 410    int isrv;
 411    isrv = get_highest_priority_int(s->isr);
 412    if (isrv < 0)
 413        return;
 414    reset_bit(s->isr, isrv);
 415    if (!(s->spurious_vec & APIC_SV_DIRECTED_IO) && get_bit(s->tmr, isrv)) {
 416        ioapic_eoi_broadcast(isrv);
 417    }
 418    apic_sync_vapic(s, SYNC_FROM_VAPIC | SYNC_TO_VAPIC);
 419    apic_update_irq(s);
 420}
 421
 422static int apic_find_dest(uint8_t dest)
 423{
 424    APICCommonState *apic = local_apics[dest];
 425    int i;
 426
 427    if (apic && apic->id == dest)
 428        return dest;  /* shortcut in case apic->id == apic->idx */
 429
 430    for (i = 0; i < MAX_APICS; i++) {
 431        apic = local_apics[i];
 432        if (apic && apic->id == dest)
 433            return i;
 434        if (!apic)
 435            break;
 436    }
 437
 438    return -1;
 439}
 440
 441static void apic_get_delivery_bitmask(uint32_t *deliver_bitmask,
 442                                      uint8_t dest, uint8_t dest_mode)
 443{
 444    APICCommonState *apic_iter;
 445    int i;
 446
 447    if (dest_mode == 0) {
 448        if (dest == 0xff) {
 449            memset(deliver_bitmask, 0xff, MAX_APIC_WORDS * sizeof(uint32_t));
 450        } else {
 451            int idx = apic_find_dest(dest);
 452            memset(deliver_bitmask, 0x00, MAX_APIC_WORDS * sizeof(uint32_t));
 453            if (idx >= 0)
 454                set_bit(deliver_bitmask, idx);
 455        }
 456    } else {
 457        /* XXX: cluster mode */
 458        memset(deliver_bitmask, 0x00, MAX_APIC_WORDS * sizeof(uint32_t));
 459        for(i = 0; i < MAX_APICS; i++) {
 460            apic_iter = local_apics[i];
 461            if (apic_iter) {
 462                if (apic_iter->dest_mode == 0xf) {
 463                    if (dest & apic_iter->log_dest)
 464                        set_bit(deliver_bitmask, i);
 465                } else if (apic_iter->dest_mode == 0x0) {
 466                    if ((dest & 0xf0) == (apic_iter->log_dest & 0xf0) &&
 467                        (dest & apic_iter->log_dest & 0x0f)) {
 468                        set_bit(deliver_bitmask, i);
 469                    }
 470                }
 471            } else {
 472                break;
 473            }
 474        }
 475    }
 476}
 477
 478static void apic_startup(APICCommonState *s, int vector_num)
 479{
 480    s->sipi_vector = vector_num;
 481    cpu_interrupt(&s->cpu->env, CPU_INTERRUPT_SIPI);
 482}
 483
 484void apic_sipi(DeviceState *d)
 485{
 486    APICCommonState *s = DO_UPCAST(APICCommonState, busdev.qdev, d);
 487
 488    cpu_reset_interrupt(&s->cpu->env, CPU_INTERRUPT_SIPI);
 489
 490    if (!s->wait_for_sipi)
 491        return;
 492    cpu_x86_load_seg_cache_sipi(s->cpu, s->sipi_vector);
 493    s->wait_for_sipi = 0;
 494}
 495
 496static void apic_deliver(DeviceState *d, uint8_t dest, uint8_t dest_mode,
 497                         uint8_t delivery_mode, uint8_t vector_num,
 498                         uint8_t trigger_mode)
 499{
 500    APICCommonState *s = DO_UPCAST(APICCommonState, busdev.qdev, d);
 501    uint32_t deliver_bitmask[MAX_APIC_WORDS];
 502    int dest_shorthand = (s->icr[0] >> 18) & 3;
 503    APICCommonState *apic_iter;
 504
 505    switch (dest_shorthand) {
 506    case 0:
 507        apic_get_delivery_bitmask(deliver_bitmask, dest, dest_mode);
 508        break;
 509    case 1:
 510        memset(deliver_bitmask, 0x00, sizeof(deliver_bitmask));
 511        set_bit(deliver_bitmask, s->idx);
 512        break;
 513    case 2:
 514        memset(deliver_bitmask, 0xff, sizeof(deliver_bitmask));
 515        break;
 516    case 3:
 517        memset(deliver_bitmask, 0xff, sizeof(deliver_bitmask));
 518        reset_bit(deliver_bitmask, s->idx);
 519        break;
 520    }
 521
 522    switch (delivery_mode) {
 523        case APIC_DM_INIT:
 524            {
 525                int trig_mode = (s->icr[0] >> 15) & 1;
 526                int level = (s->icr[0] >> 14) & 1;
 527                if (level == 0 && trig_mode == 1) {
 528                    foreach_apic(apic_iter, deliver_bitmask,
 529                                 apic_iter->arb_id = apic_iter->id );
 530                    return;
 531                }
 532            }
 533            break;
 534
 535        case APIC_DM_SIPI:
 536            foreach_apic(apic_iter, deliver_bitmask,
 537                         apic_startup(apic_iter, vector_num) );
 538            return;
 539    }
 540
 541    apic_bus_deliver(deliver_bitmask, delivery_mode, vector_num, trigger_mode);
 542}
 543
 544static bool apic_check_pic(APICCommonState *s)
 545{
 546    if (!apic_accept_pic_intr(&s->busdev.qdev) || !pic_get_output(isa_pic)) {
 547        return false;
 548    }
 549    apic_deliver_pic_intr(&s->busdev.qdev, 1);
 550    return true;
 551}
 552
 553int apic_get_interrupt(DeviceState *d)
 554{
 555    APICCommonState *s = DO_UPCAST(APICCommonState, busdev.qdev, d);
 556    int intno;
 557
 558    /* if the APIC is installed or enabled, we let the 8259 handle the
 559       IRQs */
 560    if (!s)
 561        return -1;
 562    if (!(s->spurious_vec & APIC_SV_ENABLE))
 563        return -1;
 564
 565    apic_sync_vapic(s, SYNC_FROM_VAPIC);
 566    intno = apic_irq_pending(s);
 567
 568    if (intno == 0) {
 569        apic_sync_vapic(s, SYNC_TO_VAPIC);
 570        return -1;
 571    } else if (intno < 0) {
 572        apic_sync_vapic(s, SYNC_TO_VAPIC);
 573        return s->spurious_vec & 0xff;
 574    }
 575    reset_bit(s->irr, intno);
 576    set_bit(s->isr, intno);
 577    apic_sync_vapic(s, SYNC_TO_VAPIC);
 578
 579    /* re-inject if there is still a pending PIC interrupt */
 580    apic_check_pic(s);
 581
 582    apic_update_irq(s);
 583
 584    return intno;
 585}
 586
 587int apic_accept_pic_intr(DeviceState *d)
 588{
 589    APICCommonState *s = DO_UPCAST(APICCommonState, busdev.qdev, d);
 590    uint32_t lvt0;
 591
 592    if (!s)
 593        return -1;
 594
 595    lvt0 = s->lvt[APIC_LVT_LINT0];
 596
 597    if ((s->apicbase & MSR_IA32_APICBASE_ENABLE) == 0 ||
 598        (lvt0 & APIC_LVT_MASKED) == 0)
 599        return 1;
 600
 601    return 0;
 602}
 603
 604static uint32_t apic_get_current_count(APICCommonState *s)
 605{
 606    int64_t d;
 607    uint32_t val;
 608    d = (qemu_get_clock_ns(vm_clock) - s->initial_count_load_time) >>
 609        s->count_shift;
 610    if (s->lvt[APIC_LVT_TIMER] & APIC_LVT_TIMER_PERIODIC) {
 611        /* periodic */
 612        val = s->initial_count - (d % ((uint64_t)s->initial_count + 1));
 613    } else {
 614        if (d >= s->initial_count)
 615            val = 0;
 616        else
 617            val = s->initial_count - d;
 618    }
 619    return val;
 620}
 621
 622static void apic_timer_update(APICCommonState *s, int64_t current_time)
 623{
 624    if (apic_next_timer(s, current_time)) {
 625        qemu_mod_timer(s->timer, s->next_time);
 626    } else {
 627        qemu_del_timer(s->timer);
 628    }
 629}
 630
 631static void apic_timer(void *opaque)
 632{
 633    APICCommonState *s = opaque;
 634
 635    apic_local_deliver(s, APIC_LVT_TIMER);
 636    apic_timer_update(s, s->next_time);
 637}
 638
 639static uint32_t apic_mem_readb(void *opaque, hwaddr addr)
 640{
 641    return 0;
 642}
 643
 644static uint32_t apic_mem_readw(void *opaque, hwaddr addr)
 645{
 646    return 0;
 647}
 648
 649static void apic_mem_writeb(void *opaque, hwaddr addr, uint32_t val)
 650{
 651}
 652
 653static void apic_mem_writew(void *opaque, hwaddr addr, uint32_t val)
 654{
 655}
 656
 657static uint32_t apic_mem_readl(void *opaque, hwaddr addr)
 658{
 659    DeviceState *d;
 660    APICCommonState *s;
 661    uint32_t val;
 662    int index;
 663
 664    d = cpu_get_current_apic();
 665    if (!d) {
 666        return 0;
 667    }
 668    s = DO_UPCAST(APICCommonState, busdev.qdev, d);
 669
 670    index = (addr >> 4) & 0xff;
 671    switch(index) {
 672    case 0x02: /* id */
 673        val = s->id << 24;
 674        break;
 675    case 0x03: /* version */
 676        val = 0x11 | ((APIC_LVT_NB - 1) << 16); /* version 0x11 */
 677        break;
 678    case 0x08:
 679        apic_sync_vapic(s, SYNC_FROM_VAPIC);
 680        if (apic_report_tpr_access) {
 681            cpu_report_tpr_access(&s->cpu->env, TPR_ACCESS_READ);
 682        }
 683        val = s->tpr;
 684        break;
 685    case 0x09:
 686        val = apic_get_arb_pri(s);
 687        break;
 688    case 0x0a:
 689        /* ppr */
 690        val = apic_get_ppr(s);
 691        break;
 692    case 0x0b:
 693        val = 0;
 694        break;
 695    case 0x0d:
 696        val = s->log_dest << 24;
 697        break;
 698    case 0x0e:
 699        val = s->dest_mode << 28;
 700        break;
 701    case 0x0f:
 702        val = s->spurious_vec;
 703        break;
 704    case 0x10 ... 0x17:
 705        val = s->isr[index & 7];
 706        break;
 707    case 0x18 ... 0x1f:
 708        val = s->tmr[index & 7];
 709        break;
 710    case 0x20 ... 0x27:
 711        val = s->irr[index & 7];
 712        break;
 713    case 0x28:
 714        val = s->esr;
 715        break;
 716    case 0x30:
 717    case 0x31:
 718        val = s->icr[index & 1];
 719        break;
 720    case 0x32 ... 0x37:
 721        val = s->lvt[index - 0x32];
 722        break;
 723    case 0x38:
 724        val = s->initial_count;
 725        break;
 726    case 0x39:
 727        val = apic_get_current_count(s);
 728        break;
 729    case 0x3e:
 730        val = s->divide_conf;
 731        break;
 732    default:
 733        s->esr |= ESR_ILLEGAL_ADDRESS;
 734        val = 0;
 735        break;
 736    }
 737    trace_apic_mem_readl(addr, val);
 738    return val;
 739}
 740
 741static void apic_send_msi(hwaddr addr, uint32_t data)
 742{
 743    uint8_t dest = (addr & MSI_ADDR_DEST_ID_MASK) >> MSI_ADDR_DEST_ID_SHIFT;
 744    uint8_t vector = (data & MSI_DATA_VECTOR_MASK) >> MSI_DATA_VECTOR_SHIFT;
 745    uint8_t dest_mode = (addr >> MSI_ADDR_DEST_MODE_SHIFT) & 0x1;
 746    uint8_t trigger_mode = (data >> MSI_DATA_TRIGGER_SHIFT) & 0x1;
 747    uint8_t delivery = (data >> MSI_DATA_DELIVERY_MODE_SHIFT) & 0x7;
 748    /* XXX: Ignore redirection hint. */
 749    apic_deliver_irq(dest, dest_mode, delivery, vector, trigger_mode);
 750}
 751
 752static void apic_mem_writel(void *opaque, hwaddr addr, uint32_t val)
 753{
 754    DeviceState *d;
 755    APICCommonState *s;
 756    int index = (addr >> 4) & 0xff;
 757    if (addr > 0xfff || !index) {
 758        /* MSI and MMIO APIC are at the same memory location,
 759         * but actually not on the global bus: MSI is on PCI bus
 760         * APIC is connected directly to the CPU.
 761         * Mapping them on the global bus happens to work because
 762         * MSI registers are reserved in APIC MMIO and vice versa. */
 763        apic_send_msi(addr, val);
 764        return;
 765    }
 766
 767    d = cpu_get_current_apic();
 768    if (!d) {
 769        return;
 770    }
 771    s = DO_UPCAST(APICCommonState, busdev.qdev, d);
 772
 773    trace_apic_mem_writel(addr, val);
 774
 775    switch(index) {
 776    case 0x02:
 777        s->id = (val >> 24);
 778        break;
 779    case 0x03:
 780        break;
 781    case 0x08:
 782        if (apic_report_tpr_access) {
 783            cpu_report_tpr_access(&s->cpu->env, TPR_ACCESS_WRITE);
 784        }
 785        s->tpr = val;
 786        apic_sync_vapic(s, SYNC_TO_VAPIC);
 787        apic_update_irq(s);
 788        break;
 789    case 0x09:
 790    case 0x0a:
 791        break;
 792    case 0x0b: /* EOI */
 793        apic_eoi(s);
 794        break;
 795    case 0x0d:
 796        s->log_dest = val >> 24;
 797        break;
 798    case 0x0e:
 799        s->dest_mode = val >> 28;
 800        break;
 801    case 0x0f:
 802        s->spurious_vec = val & 0x1ff;
 803        apic_update_irq(s);
 804        break;
 805    case 0x10 ... 0x17:
 806    case 0x18 ... 0x1f:
 807    case 0x20 ... 0x27:
 808    case 0x28:
 809        break;
 810    case 0x30:
 811        s->icr[0] = val;
 812        apic_deliver(d, (s->icr[1] >> 24) & 0xff, (s->icr[0] >> 11) & 1,
 813                     (s->icr[0] >> 8) & 7, (s->icr[0] & 0xff),
 814                     (s->icr[0] >> 15) & 1);
 815        break;
 816    case 0x31:
 817        s->icr[1] = val;
 818        break;
 819    case 0x32 ... 0x37:
 820        {
 821            int n = index - 0x32;
 822            s->lvt[n] = val;
 823            if (n == APIC_LVT_TIMER) {
 824                apic_timer_update(s, qemu_get_clock_ns(vm_clock));
 825            } else if (n == APIC_LVT_LINT0 && apic_check_pic(s)) {
 826                apic_update_irq(s);
 827            }
 828        }
 829        break;
 830    case 0x38:
 831        s->initial_count = val;
 832        s->initial_count_load_time = qemu_get_clock_ns(vm_clock);
 833        apic_timer_update(s, s->initial_count_load_time);
 834        break;
 835    case 0x39:
 836        break;
 837    case 0x3e:
 838        {
 839            int v;
 840            s->divide_conf = val & 0xb;
 841            v = (s->divide_conf & 3) | ((s->divide_conf >> 1) & 4);
 842            s->count_shift = (v + 1) & 7;
 843        }
 844        break;
 845    default:
 846        s->esr |= ESR_ILLEGAL_ADDRESS;
 847        break;
 848    }
 849}
 850
 851static void apic_pre_save(APICCommonState *s)
 852{
 853    apic_sync_vapic(s, SYNC_FROM_VAPIC);
 854}
 855
 856static void apic_post_load(APICCommonState *s)
 857{
 858    if (s->timer_expiry != -1) {
 859        qemu_mod_timer(s->timer, s->timer_expiry);
 860    } else {
 861        qemu_del_timer(s->timer);
 862    }
 863}
 864
 865static const MemoryRegionOps apic_io_ops = {
 866    .old_mmio = {
 867        .read = { apic_mem_readb, apic_mem_readw, apic_mem_readl, },
 868        .write = { apic_mem_writeb, apic_mem_writew, apic_mem_writel, },
 869    },
 870    .endianness = DEVICE_NATIVE_ENDIAN,
 871};
 872
 873static void apic_init(APICCommonState *s)
 874{
 875    memory_region_init_io(&s->io_memory, &apic_io_ops, s, "apic-msi",
 876                          MSI_SPACE_SIZE);
 877
 878    s->timer = qemu_new_timer_ns(vm_clock, apic_timer, s);
 879    local_apics[s->idx] = s;
 880
 881    msi_supported = true;
 882}
 883
 884static void apic_class_init(ObjectClass *klass, void *data)
 885{
 886    APICCommonClass *k = APIC_COMMON_CLASS(klass);
 887
 888    k->init = apic_init;
 889    k->set_base = apic_set_base;
 890    k->set_tpr = apic_set_tpr;
 891    k->get_tpr = apic_get_tpr;
 892    k->vapic_base_update = apic_vapic_base_update;
 893    k->external_nmi = apic_external_nmi;
 894    k->pre_save = apic_pre_save;
 895    k->post_load = apic_post_load;
 896}
 897
 898static const TypeInfo apic_info = {
 899    .name          = "apic",
 900    .instance_size = sizeof(APICCommonState),
 901    .parent        = TYPE_APIC_COMMON,
 902    .class_init    = apic_class_init,
 903};
 904
 905static void apic_register_types(void)
 906{
 907    type_register_static(&apic_info);
 908}
 909
 910type_init(apic_register_types)
 911