qemu/hw/intc/arm_gic.c
<<
>>
Prefs
   1/*
   2 * ARM Generic/Distributed Interrupt Controller
   3 *
   4 * Copyright (c) 2006-2007 CodeSourcery.
   5 * Written by Paul Brook
   6 *
   7 * This code is licensed under the GPL.
   8 */
   9
  10/* This file contains implementation code for the RealView EB interrupt
  11 * controller, MPCore distributed interrupt controller and ARMv7-M
  12 * Nested Vectored Interrupt Controller.
  13 * It is compiled in two ways:
  14 *  (1) as a standalone file to produce a sysbus device which is a GIC
  15 *  that can be used on the realview board and as one of the builtin
  16 *  private peripherals for the ARM MP CPUs (11MPCore, A9, etc)
  17 *  (2) by being directly #included into armv7m_nvic.c to produce the
  18 *  armv7m_nvic device.
  19 */
  20
  21#include "hw/sysbus.h"
  22#include "gic_internal.h"
  23#include "qom/cpu.h"
  24
  25//#define DEBUG_GIC
  26
  27#ifdef DEBUG_GIC
  28#define DPRINTF(fmt, ...) \
  29do { fprintf(stderr, "arm_gic: " fmt , ## __VA_ARGS__); } while (0)
  30#else
  31#define DPRINTF(fmt, ...) do {} while(0)
  32#endif
  33
  34static const uint8_t gic_id[] = {
  35    0x90, 0x13, 0x04, 0x00, 0x0d, 0xf0, 0x05, 0xb1
  36};
  37
  38#define NUM_CPU(s) ((s)->num_cpu)
  39
  40static inline int gic_get_current_cpu(GICState *s)
  41{
  42    if (s->num_cpu > 1) {
  43        return current_cpu->cpu_index;
  44    }
  45    return 0;
  46}
  47
  48/* TODO: Many places that call this routine could be optimized.  */
  49/* Update interrupt status after enabled or pending bits have been changed.  */
  50void gic_update(GICState *s)
  51{
  52    int best_irq;
  53    int best_prio;
  54    int irq;
  55    int level;
  56    int cpu;
  57    int cm;
  58
  59    for (cpu = 0; cpu < NUM_CPU(s); cpu++) {
  60        cm = 1 << cpu;
  61        s->current_pending[cpu] = 1023;
  62        if (!s->enabled || !s->cpu_enabled[cpu]) {
  63            qemu_irq_lower(s->parent_irq[cpu]);
  64            return;
  65        }
  66        best_prio = 0x100;
  67        best_irq = 1023;
  68        for (irq = 0; irq < s->num_irq; irq++) {
  69            if (GIC_TEST_ENABLED(irq, cm) && gic_test_pending(s, irq, cm) &&
  70                (irq < GIC_INTERNAL || GIC_TARGET(irq) & cm)) {
  71                if (GIC_GET_PRIORITY(irq, cpu) < best_prio) {
  72                    best_prio = GIC_GET_PRIORITY(irq, cpu);
  73                    best_irq = irq;
  74                }
  75            }
  76        }
  77        level = 0;
  78        if (best_prio < s->priority_mask[cpu]) {
  79            s->current_pending[cpu] = best_irq;
  80            if (best_prio < s->running_priority[cpu]) {
  81                DPRINTF("Raised pending IRQ %d (cpu %d)\n", best_irq, cpu);
  82                level = 1;
  83            }
  84        }
  85        qemu_set_irq(s->parent_irq[cpu], level);
  86    }
  87}
  88
  89void gic_set_pending_private(GICState *s, int cpu, int irq)
  90{
  91    int cm = 1 << cpu;
  92
  93    if (gic_test_pending(s, irq, cm)) {
  94        return;
  95    }
  96
  97    DPRINTF("Set %d pending cpu %d\n", irq, cpu);
  98    GIC_SET_PENDING(irq, cm);
  99    gic_update(s);
 100}
 101
 102static void gic_set_irq_11mpcore(GICState *s, int irq, int level,
 103                                 int cm, int target)
 104{
 105    if (level) {
 106        GIC_SET_LEVEL(irq, cm);
 107        if (GIC_TEST_EDGE_TRIGGER(irq) || GIC_TEST_ENABLED(irq, cm)) {
 108            DPRINTF("Set %d pending mask %x\n", irq, target);
 109            GIC_SET_PENDING(irq, target);
 110        }
 111    } else {
 112        GIC_CLEAR_LEVEL(irq, cm);
 113    }
 114}
 115
 116static void gic_set_irq_generic(GICState *s, int irq, int level,
 117                                int cm, int target)
 118{
 119    if (level) {
 120        GIC_SET_LEVEL(irq, cm);
 121        DPRINTF("Set %d pending mask %x\n", irq, target);
 122        if (GIC_TEST_EDGE_TRIGGER(irq)) {
 123            GIC_SET_PENDING(irq, target);
 124        }
 125    } else {
 126        GIC_CLEAR_LEVEL(irq, cm);
 127    }
 128}
 129
 130/* Process a change in an external IRQ input.  */
 131static void gic_set_irq(void *opaque, int irq, int level)
 132{
 133    /* Meaning of the 'irq' parameter:
 134     *  [0..N-1] : external interrupts
 135     *  [N..N+31] : PPI (internal) interrupts for CPU 0
 136     *  [N+32..N+63] : PPI (internal interrupts for CPU 1
 137     *  ...
 138     */
 139    GICState *s = (GICState *)opaque;
 140    int cm, target;
 141    if (irq < (s->num_irq - GIC_INTERNAL)) {
 142        /* The first external input line is internal interrupt 32.  */
 143        cm = ALL_CPU_MASK;
 144        irq += GIC_INTERNAL;
 145        target = GIC_TARGET(irq);
 146    } else {
 147        int cpu;
 148        irq -= (s->num_irq - GIC_INTERNAL);
 149        cpu = irq / GIC_INTERNAL;
 150        irq %= GIC_INTERNAL;
 151        cm = 1 << cpu;
 152        target = cm;
 153    }
 154
 155    assert(irq >= GIC_NR_SGIS);
 156
 157    if (level == GIC_TEST_LEVEL(irq, cm)) {
 158        return;
 159    }
 160
 161    if (s->revision == REV_11MPCORE || s->revision == REV_NVIC) {
 162        gic_set_irq_11mpcore(s, irq, level, cm, target);
 163    } else {
 164        gic_set_irq_generic(s, irq, level, cm, target);
 165    }
 166
 167    gic_update(s);
 168}
 169
 170static void gic_set_running_irq(GICState *s, int cpu, int irq)
 171{
 172    s->running_irq[cpu] = irq;
 173    if (irq == 1023) {
 174        s->running_priority[cpu] = 0x100;
 175    } else {
 176        s->running_priority[cpu] = GIC_GET_PRIORITY(irq, cpu);
 177    }
 178    gic_update(s);
 179}
 180
 181uint32_t gic_acknowledge_irq(GICState *s, int cpu)
 182{
 183    int ret, irq, src;
 184    int cm = 1 << cpu;
 185    irq = s->current_pending[cpu];
 186    if (irq == 1023
 187            || GIC_GET_PRIORITY(irq, cpu) >= s->running_priority[cpu]) {
 188        DPRINTF("ACK no pending IRQ\n");
 189        return 1023;
 190    }
 191    s->last_active[irq][cpu] = s->running_irq[cpu];
 192
 193    if (s->revision == REV_11MPCORE || s->revision == REV_NVIC) {
 194        /* Clear pending flags for both level and edge triggered interrupts.
 195         * Level triggered IRQs will be reasserted once they become inactive.
 196         */
 197        GIC_CLEAR_PENDING(irq, GIC_TEST_MODEL(irq) ? ALL_CPU_MASK : cm);
 198        ret = irq;
 199    } else {
 200        if (irq < GIC_NR_SGIS) {
 201            /* Lookup the source CPU for the SGI and clear this in the
 202             * sgi_pending map.  Return the src and clear the overall pending
 203             * state on this CPU if the SGI is not pending from any CPUs.
 204             */
 205            assert(s->sgi_pending[irq][cpu] != 0);
 206            src = ctz32(s->sgi_pending[irq][cpu]);
 207            s->sgi_pending[irq][cpu] &= ~(1 << src);
 208            if (s->sgi_pending[irq][cpu] == 0) {
 209                GIC_CLEAR_PENDING(irq, GIC_TEST_MODEL(irq) ? ALL_CPU_MASK : cm);
 210            }
 211            ret = irq | ((src & 0x7) << 10);
 212        } else {
 213            /* Clear pending state for both level and edge triggered
 214             * interrupts. (level triggered interrupts with an active line
 215             * remain pending, see gic_test_pending)
 216             */
 217            GIC_CLEAR_PENDING(irq, GIC_TEST_MODEL(irq) ? ALL_CPU_MASK : cm);
 218            ret = irq;
 219        }
 220    }
 221
 222    gic_set_running_irq(s, cpu, irq);
 223    DPRINTF("ACK %d\n", irq);
 224    return ret;
 225}
 226
 227void gic_set_priority(GICState *s, int cpu, int irq, uint8_t val)
 228{
 229    if (irq < GIC_INTERNAL) {
 230        s->priority1[irq][cpu] = val;
 231    } else {
 232        s->priority2[(irq) - GIC_INTERNAL] = val;
 233    }
 234}
 235
 236void gic_complete_irq(GICState *s, int cpu, int irq)
 237{
 238    int update = 0;
 239    int cm = 1 << cpu;
 240    DPRINTF("EOI %d\n", irq);
 241    if (irq >= s->num_irq) {
 242        /* This handles two cases:
 243         * 1. If software writes the ID of a spurious interrupt [ie 1023]
 244         * to the GICC_EOIR, the GIC ignores that write.
 245         * 2. If software writes the number of a non-existent interrupt
 246         * this must be a subcase of "value written does not match the last
 247         * valid interrupt value read from the Interrupt Acknowledge
 248         * register" and so this is UNPREDICTABLE. We choose to ignore it.
 249         */
 250        return;
 251    }
 252    if (s->running_irq[cpu] == 1023)
 253        return; /* No active IRQ.  */
 254
 255    if (s->revision == REV_11MPCORE || s->revision == REV_NVIC) {
 256        /* Mark level triggered interrupts as pending if they are still
 257           raised.  */
 258        if (!GIC_TEST_EDGE_TRIGGER(irq) && GIC_TEST_ENABLED(irq, cm)
 259            && GIC_TEST_LEVEL(irq, cm) && (GIC_TARGET(irq) & cm) != 0) {
 260            DPRINTF("Set %d pending mask %x\n", irq, cm);
 261            GIC_SET_PENDING(irq, cm);
 262            update = 1;
 263        }
 264    }
 265
 266    if (irq != s->running_irq[cpu]) {
 267        /* Complete an IRQ that is not currently running.  */
 268        int tmp = s->running_irq[cpu];
 269        while (s->last_active[tmp][cpu] != 1023) {
 270            if (s->last_active[tmp][cpu] == irq) {
 271                s->last_active[tmp][cpu] = s->last_active[irq][cpu];
 272                break;
 273            }
 274            tmp = s->last_active[tmp][cpu];
 275        }
 276        if (update) {
 277            gic_update(s);
 278        }
 279    } else {
 280        /* Complete the current running IRQ.  */
 281        gic_set_running_irq(s, cpu, s->last_active[s->running_irq[cpu]][cpu]);
 282    }
 283}
 284
 285static uint32_t gic_dist_readb(void *opaque, hwaddr offset)
 286{
 287    GICState *s = (GICState *)opaque;
 288    uint32_t res;
 289    int irq;
 290    int i;
 291    int cpu;
 292    int cm;
 293    int mask;
 294
 295    cpu = gic_get_current_cpu(s);
 296    cm = 1 << cpu;
 297    if (offset < 0x100) {
 298        if (offset == 0)
 299            return s->enabled;
 300        if (offset == 4)
 301            return ((s->num_irq / 32) - 1) | ((NUM_CPU(s) - 1) << 5);
 302        if (offset < 0x08)
 303            return 0;
 304        if (offset >= 0x80) {
 305            /* Interrupt Security , RAZ/WI */
 306            return 0;
 307        }
 308        goto bad_reg;
 309    } else if (offset < 0x200) {
 310        /* Interrupt Set/Clear Enable.  */
 311        if (offset < 0x180)
 312            irq = (offset - 0x100) * 8;
 313        else
 314            irq = (offset - 0x180) * 8;
 315        irq += GIC_BASE_IRQ;
 316        if (irq >= s->num_irq)
 317            goto bad_reg;
 318        res = 0;
 319        for (i = 0; i < 8; i++) {
 320            if (GIC_TEST_ENABLED(irq + i, cm)) {
 321                res |= (1 << i);
 322            }
 323        }
 324    } else if (offset < 0x300) {
 325        /* Interrupt Set/Clear Pending.  */
 326        if (offset < 0x280)
 327            irq = (offset - 0x200) * 8;
 328        else
 329            irq = (offset - 0x280) * 8;
 330        irq += GIC_BASE_IRQ;
 331        if (irq >= s->num_irq)
 332            goto bad_reg;
 333        res = 0;
 334        mask = (irq < GIC_INTERNAL) ?  cm : ALL_CPU_MASK;
 335        for (i = 0; i < 8; i++) {
 336            if (gic_test_pending(s, irq + i, mask)) {
 337                res |= (1 << i);
 338            }
 339        }
 340    } else if (offset < 0x400) {
 341        /* Interrupt Active.  */
 342        irq = (offset - 0x300) * 8 + GIC_BASE_IRQ;
 343        if (irq >= s->num_irq)
 344            goto bad_reg;
 345        res = 0;
 346        mask = (irq < GIC_INTERNAL) ?  cm : ALL_CPU_MASK;
 347        for (i = 0; i < 8; i++) {
 348            if (GIC_TEST_ACTIVE(irq + i, mask)) {
 349                res |= (1 << i);
 350            }
 351        }
 352    } else if (offset < 0x800) {
 353        /* Interrupt Priority.  */
 354        irq = (offset - 0x400) + GIC_BASE_IRQ;
 355        if (irq >= s->num_irq)
 356            goto bad_reg;
 357        res = GIC_GET_PRIORITY(irq, cpu);
 358    } else if (offset < 0xc00) {
 359        /* Interrupt CPU Target.  */
 360        if (s->num_cpu == 1 && s->revision != REV_11MPCORE) {
 361            /* For uniprocessor GICs these RAZ/WI */
 362            res = 0;
 363        } else {
 364            irq = (offset - 0x800) + GIC_BASE_IRQ;
 365            if (irq >= s->num_irq) {
 366                goto bad_reg;
 367            }
 368            if (irq >= 29 && irq <= 31) {
 369                res = cm;
 370            } else {
 371                res = GIC_TARGET(irq);
 372            }
 373        }
 374    } else if (offset < 0xf00) {
 375        /* Interrupt Configuration.  */
 376        irq = (offset - 0xc00) * 4 + GIC_BASE_IRQ;
 377        if (irq >= s->num_irq)
 378            goto bad_reg;
 379        res = 0;
 380        for (i = 0; i < 4; i++) {
 381            if (GIC_TEST_MODEL(irq + i))
 382                res |= (1 << (i * 2));
 383            if (GIC_TEST_EDGE_TRIGGER(irq + i))
 384                res |= (2 << (i * 2));
 385        }
 386    } else if (offset < 0xf10) {
 387        goto bad_reg;
 388    } else if (offset < 0xf30) {
 389        if (s->revision == REV_11MPCORE || s->revision == REV_NVIC) {
 390            goto bad_reg;
 391        }
 392
 393        if (offset < 0xf20) {
 394            /* GICD_CPENDSGIRn */
 395            irq = (offset - 0xf10);
 396        } else {
 397            irq = (offset - 0xf20);
 398            /* GICD_SPENDSGIRn */
 399        }
 400
 401        res = s->sgi_pending[irq][cpu];
 402    } else if (offset < 0xfe0) {
 403        goto bad_reg;
 404    } else /* offset >= 0xfe0 */ {
 405        if (offset & 3) {
 406            res = 0;
 407        } else {
 408            res = gic_id[(offset - 0xfe0) >> 2];
 409        }
 410    }
 411    return res;
 412bad_reg:
 413    qemu_log_mask(LOG_GUEST_ERROR,
 414                  "gic_dist_readb: Bad offset %x\n", (int)offset);
 415    return 0;
 416}
 417
 418static uint32_t gic_dist_readw(void *opaque, hwaddr offset)
 419{
 420    uint32_t val;
 421    val = gic_dist_readb(opaque, offset);
 422    val |= gic_dist_readb(opaque, offset + 1) << 8;
 423    return val;
 424}
 425
 426static uint32_t gic_dist_readl(void *opaque, hwaddr offset)
 427{
 428    uint32_t val;
 429    val = gic_dist_readw(opaque, offset);
 430    val |= gic_dist_readw(opaque, offset + 2) << 16;
 431    return val;
 432}
 433
 434static void gic_dist_writeb(void *opaque, hwaddr offset,
 435                            uint32_t value)
 436{
 437    GICState *s = (GICState *)opaque;
 438    int irq;
 439    int i;
 440    int cpu;
 441
 442    cpu = gic_get_current_cpu(s);
 443    if (offset < 0x100) {
 444        if (offset == 0) {
 445            s->enabled = (value & 1);
 446            DPRINTF("Distribution %sabled\n", s->enabled ? "En" : "Dis");
 447        } else if (offset < 4) {
 448            /* ignored.  */
 449        } else if (offset >= 0x80) {
 450            /* Interrupt Security Registers, RAZ/WI */
 451        } else {
 452            goto bad_reg;
 453        }
 454    } else if (offset < 0x180) {
 455        /* Interrupt Set Enable.  */
 456        irq = (offset - 0x100) * 8 + GIC_BASE_IRQ;
 457        if (irq >= s->num_irq)
 458            goto bad_reg;
 459        if (irq < GIC_NR_SGIS) {
 460            value = 0xff;
 461        }
 462
 463        for (i = 0; i < 8; i++) {
 464            if (value & (1 << i)) {
 465                int mask =
 466                    (irq < GIC_INTERNAL) ? (1 << cpu) : GIC_TARGET(irq + i);
 467                int cm = (irq < GIC_INTERNAL) ? (1 << cpu) : ALL_CPU_MASK;
 468
 469                if (!GIC_TEST_ENABLED(irq + i, cm)) {
 470                    DPRINTF("Enabled IRQ %d\n", irq + i);
 471                }
 472                GIC_SET_ENABLED(irq + i, cm);
 473                /* If a raised level triggered IRQ enabled then mark
 474                   is as pending.  */
 475                if (GIC_TEST_LEVEL(irq + i, mask)
 476                        && !GIC_TEST_EDGE_TRIGGER(irq + i)) {
 477                    DPRINTF("Set %d pending mask %x\n", irq + i, mask);
 478                    GIC_SET_PENDING(irq + i, mask);
 479                }
 480            }
 481        }
 482    } else if (offset < 0x200) {
 483        /* Interrupt Clear Enable.  */
 484        irq = (offset - 0x180) * 8 + GIC_BASE_IRQ;
 485        if (irq >= s->num_irq)
 486            goto bad_reg;
 487        if (irq < GIC_NR_SGIS) {
 488            value = 0;
 489        }
 490
 491        for (i = 0; i < 8; i++) {
 492            if (value & (1 << i)) {
 493                int cm = (irq < GIC_INTERNAL) ? (1 << cpu) : ALL_CPU_MASK;
 494
 495                if (GIC_TEST_ENABLED(irq + i, cm)) {
 496                    DPRINTF("Disabled IRQ %d\n", irq + i);
 497                }
 498                GIC_CLEAR_ENABLED(irq + i, cm);
 499            }
 500        }
 501    } else if (offset < 0x280) {
 502        /* Interrupt Set Pending.  */
 503        irq = (offset - 0x200) * 8 + GIC_BASE_IRQ;
 504        if (irq >= s->num_irq)
 505            goto bad_reg;
 506        if (irq < GIC_NR_SGIS) {
 507            value = 0;
 508        }
 509
 510        for (i = 0; i < 8; i++) {
 511            if (value & (1 << i)) {
 512                GIC_SET_PENDING(irq + i, GIC_TARGET(irq + i));
 513            }
 514        }
 515    } else if (offset < 0x300) {
 516        /* Interrupt Clear Pending.  */
 517        irq = (offset - 0x280) * 8 + GIC_BASE_IRQ;
 518        if (irq >= s->num_irq)
 519            goto bad_reg;
 520        if (irq < GIC_NR_SGIS) {
 521            value = 0;
 522        }
 523
 524        for (i = 0; i < 8; i++) {
 525            /* ??? This currently clears the pending bit for all CPUs, even
 526               for per-CPU interrupts.  It's unclear whether this is the
 527               corect behavior.  */
 528            if (value & (1 << i)) {
 529                GIC_CLEAR_PENDING(irq + i, ALL_CPU_MASK);
 530            }
 531        }
 532    } else if (offset < 0x400) {
 533        /* Interrupt Active.  */
 534        goto bad_reg;
 535    } else if (offset < 0x800) {
 536        /* Interrupt Priority.  */
 537        irq = (offset - 0x400) + GIC_BASE_IRQ;
 538        if (irq >= s->num_irq)
 539            goto bad_reg;
 540        gic_set_priority(s, cpu, irq, value);
 541    } else if (offset < 0xc00) {
 542        /* Interrupt CPU Target. RAZ/WI on uniprocessor GICs, with the
 543         * annoying exception of the 11MPCore's GIC.
 544         */
 545        if (s->num_cpu != 1 || s->revision == REV_11MPCORE) {
 546            irq = (offset - 0x800) + GIC_BASE_IRQ;
 547            if (irq >= s->num_irq) {
 548                goto bad_reg;
 549            }
 550            if (irq < 29) {
 551                value = 0;
 552            } else if (irq < GIC_INTERNAL) {
 553                value = ALL_CPU_MASK;
 554            }
 555            s->irq_target[irq] = value & ALL_CPU_MASK;
 556        }
 557    } else if (offset < 0xf00) {
 558        /* Interrupt Configuration.  */
 559        irq = (offset - 0xc00) * 4 + GIC_BASE_IRQ;
 560        if (irq >= s->num_irq)
 561            goto bad_reg;
 562        if (irq < GIC_NR_SGIS)
 563            value |= 0xaa;
 564        for (i = 0; i < 4; i++) {
 565            if (s->revision == REV_11MPCORE || s->revision == REV_NVIC) {
 566                if (value & (1 << (i * 2))) {
 567                    GIC_SET_MODEL(irq + i);
 568                } else {
 569                    GIC_CLEAR_MODEL(irq + i);
 570                }
 571            }
 572            if (value & (2 << (i * 2))) {
 573                GIC_SET_EDGE_TRIGGER(irq + i);
 574            } else {
 575                GIC_CLEAR_EDGE_TRIGGER(irq + i);
 576            }
 577        }
 578    } else if (offset < 0xf10) {
 579        /* 0xf00 is only handled for 32-bit writes.  */
 580        goto bad_reg;
 581    } else if (offset < 0xf20) {
 582        /* GICD_CPENDSGIRn */
 583        if (s->revision == REV_11MPCORE || s->revision == REV_NVIC) {
 584            goto bad_reg;
 585        }
 586        irq = (offset - 0xf10);
 587
 588        s->sgi_pending[irq][cpu] &= ~value;
 589        if (s->sgi_pending[irq][cpu] == 0) {
 590            GIC_CLEAR_PENDING(irq, 1 << cpu);
 591        }
 592    } else if (offset < 0xf30) {
 593        /* GICD_SPENDSGIRn */
 594        if (s->revision == REV_11MPCORE || s->revision == REV_NVIC) {
 595            goto bad_reg;
 596        }
 597        irq = (offset - 0xf20);
 598
 599        GIC_SET_PENDING(irq, 1 << cpu);
 600        s->sgi_pending[irq][cpu] |= value;
 601    } else {
 602        goto bad_reg;
 603    }
 604    gic_update(s);
 605    return;
 606bad_reg:
 607    qemu_log_mask(LOG_GUEST_ERROR,
 608                  "gic_dist_writeb: Bad offset %x\n", (int)offset);
 609}
 610
 611static void gic_dist_writew(void *opaque, hwaddr offset,
 612                            uint32_t value)
 613{
 614    gic_dist_writeb(opaque, offset, value & 0xff);
 615    gic_dist_writeb(opaque, offset + 1, value >> 8);
 616}
 617
 618static void gic_dist_writel(void *opaque, hwaddr offset,
 619                            uint32_t value)
 620{
 621    GICState *s = (GICState *)opaque;
 622    if (offset == 0xf00) {
 623        int cpu;
 624        int irq;
 625        int mask;
 626        int target_cpu;
 627
 628        cpu = gic_get_current_cpu(s);
 629        irq = value & 0x3ff;
 630        switch ((value >> 24) & 3) {
 631        case 0:
 632            mask = (value >> 16) & ALL_CPU_MASK;
 633            break;
 634        case 1:
 635            mask = ALL_CPU_MASK ^ (1 << cpu);
 636            break;
 637        case 2:
 638            mask = 1 << cpu;
 639            break;
 640        default:
 641            DPRINTF("Bad Soft Int target filter\n");
 642            mask = ALL_CPU_MASK;
 643            break;
 644        }
 645        GIC_SET_PENDING(irq, mask);
 646        target_cpu = ctz32(mask);
 647        while (target_cpu < GIC_NCPU) {
 648            s->sgi_pending[irq][target_cpu] |= (1 << cpu);
 649            mask &= ~(1 << target_cpu);
 650            target_cpu = ctz32(mask);
 651        }
 652        gic_update(s);
 653        return;
 654    }
 655    gic_dist_writew(opaque, offset, value & 0xffff);
 656    gic_dist_writew(opaque, offset + 2, value >> 16);
 657}
 658
 659static const MemoryRegionOps gic_dist_ops = {
 660    .old_mmio = {
 661        .read = { gic_dist_readb, gic_dist_readw, gic_dist_readl, },
 662        .write = { gic_dist_writeb, gic_dist_writew, gic_dist_writel, },
 663    },
 664    .endianness = DEVICE_NATIVE_ENDIAN,
 665};
 666
 667static uint32_t gic_cpu_read(GICState *s, int cpu, int offset)
 668{
 669    switch (offset) {
 670    case 0x00: /* Control */
 671        return s->cpu_enabled[cpu];
 672    case 0x04: /* Priority mask */
 673        return s->priority_mask[cpu];
 674    case 0x08: /* Binary Point */
 675        return s->bpr[cpu];
 676    case 0x0c: /* Acknowledge */
 677        return gic_acknowledge_irq(s, cpu);
 678    case 0x14: /* Running Priority */
 679        return s->running_priority[cpu];
 680    case 0x18: /* Highest Pending Interrupt */
 681        return s->current_pending[cpu];
 682    case 0x1c: /* Aliased Binary Point */
 683        return s->abpr[cpu];
 684    case 0xd0: case 0xd4: case 0xd8: case 0xdc:
 685        return s->apr[(offset - 0xd0) / 4][cpu];
 686    default:
 687        qemu_log_mask(LOG_GUEST_ERROR,
 688                      "gic_cpu_read: Bad offset %x\n", (int)offset);
 689        return 0;
 690    }
 691}
 692
 693static void gic_cpu_write(GICState *s, int cpu, int offset, uint32_t value)
 694{
 695    switch (offset) {
 696    case 0x00: /* Control */
 697        s->cpu_enabled[cpu] = (value & 1);
 698        DPRINTF("CPU %d %sabled\n", cpu, s->cpu_enabled[cpu] ? "En" : "Dis");
 699        break;
 700    case 0x04: /* Priority mask */
 701        s->priority_mask[cpu] = (value & 0xff);
 702        break;
 703    case 0x08: /* Binary Point */
 704        s->bpr[cpu] = (value & 0x7);
 705        break;
 706    case 0x10: /* End Of Interrupt */
 707        return gic_complete_irq(s, cpu, value & 0x3ff);
 708    case 0x1c: /* Aliased Binary Point */
 709        if (s->revision >= 2) {
 710            s->abpr[cpu] = (value & 0x7);
 711        }
 712        break;
 713    case 0xd0: case 0xd4: case 0xd8: case 0xdc:
 714        qemu_log_mask(LOG_UNIMP, "Writing APR not implemented\n");
 715        break;
 716    default:
 717        qemu_log_mask(LOG_GUEST_ERROR,
 718                      "gic_cpu_write: Bad offset %x\n", (int)offset);
 719        return;
 720    }
 721    gic_update(s);
 722}
 723
 724/* Wrappers to read/write the GIC CPU interface for the current CPU */
 725static uint64_t gic_thiscpu_read(void *opaque, hwaddr addr,
 726                                 unsigned size)
 727{
 728    GICState *s = (GICState *)opaque;
 729    return gic_cpu_read(s, gic_get_current_cpu(s), addr);
 730}
 731
 732static void gic_thiscpu_write(void *opaque, hwaddr addr,
 733                              uint64_t value, unsigned size)
 734{
 735    GICState *s = (GICState *)opaque;
 736    gic_cpu_write(s, gic_get_current_cpu(s), addr, value);
 737}
 738
 739/* Wrappers to read/write the GIC CPU interface for a specific CPU.
 740 * These just decode the opaque pointer into GICState* + cpu id.
 741 */
 742static uint64_t gic_do_cpu_read(void *opaque, hwaddr addr,
 743                                unsigned size)
 744{
 745    GICState **backref = (GICState **)opaque;
 746    GICState *s = *backref;
 747    int id = (backref - s->backref);
 748    return gic_cpu_read(s, id, addr);
 749}
 750
 751static void gic_do_cpu_write(void *opaque, hwaddr addr,
 752                             uint64_t value, unsigned size)
 753{
 754    GICState **backref = (GICState **)opaque;
 755    GICState *s = *backref;
 756    int id = (backref - s->backref);
 757    gic_cpu_write(s, id, addr, value);
 758}
 759
 760static const MemoryRegionOps gic_thiscpu_ops = {
 761    .read = gic_thiscpu_read,
 762    .write = gic_thiscpu_write,
 763    .endianness = DEVICE_NATIVE_ENDIAN,
 764};
 765
 766static const MemoryRegionOps gic_cpu_ops = {
 767    .read = gic_do_cpu_read,
 768    .write = gic_do_cpu_write,
 769    .endianness = DEVICE_NATIVE_ENDIAN,
 770};
 771
 772void gic_init_irqs_and_distributor(GICState *s)
 773{
 774    SysBusDevice *sbd = SYS_BUS_DEVICE(s);
 775    int i;
 776
 777    i = s->num_irq - GIC_INTERNAL;
 778    /* For the GIC, also expose incoming GPIO lines for PPIs for each CPU.
 779     * GPIO array layout is thus:
 780     *  [0..N-1] SPIs
 781     *  [N..N+31] PPIs for CPU 0
 782     *  [N+32..N+63] PPIs for CPU 1
 783     *   ...
 784     */
 785    if (s->revision != REV_NVIC) {
 786        i += (GIC_INTERNAL * s->num_cpu);
 787    }
 788    qdev_init_gpio_in(DEVICE(s), gic_set_irq, i);
 789    for (i = 0; i < NUM_CPU(s); i++) {
 790        sysbus_init_irq(sbd, &s->parent_irq[i]);
 791    }
 792    memory_region_init_io(&s->iomem, OBJECT(s), &gic_dist_ops, s,
 793                          "gic_dist", 0x1000);
 794}
 795
 796static void arm_gic_realize(DeviceState *dev, Error **errp)
 797{
 798    /* Device instance realize function for the GIC sysbus device */
 799    int i;
 800    GICState *s = ARM_GIC(dev);
 801    SysBusDevice *sbd = SYS_BUS_DEVICE(dev);
 802    ARMGICClass *agc = ARM_GIC_GET_CLASS(s);
 803    Error *local_err = NULL;
 804
 805    agc->parent_realize(dev, &local_err);
 806    if (local_err) {
 807        error_propagate(errp, local_err);
 808        return;
 809    }
 810
 811    gic_init_irqs_and_distributor(s);
 812
 813    /* Memory regions for the CPU interfaces (NVIC doesn't have these):
 814     * a region for "CPU interface for this core", then a region for
 815     * "CPU interface for core 0", "for core 1", ...
 816     * NB that the memory region size of 0x100 applies for the 11MPCore
 817     * and also cores following the GIC v1 spec (ie A9).
 818     * GIC v2 defines a larger memory region (0x1000) so this will need
 819     * to be extended when we implement A15.
 820     */
 821    memory_region_init_io(&s->cpuiomem[0], OBJECT(s), &gic_thiscpu_ops, s,
 822                          "gic_cpu", 0x100);
 823    for (i = 0; i < NUM_CPU(s); i++) {
 824        s->backref[i] = s;
 825        memory_region_init_io(&s->cpuiomem[i+1], OBJECT(s), &gic_cpu_ops,
 826                              &s->backref[i], "gic_cpu", 0x100);
 827    }
 828    /* Distributor */
 829    sysbus_init_mmio(sbd, &s->iomem);
 830    /* cpu interfaces (one for "current cpu" plus one per cpu) */
 831    for (i = 0; i <= NUM_CPU(s); i++) {
 832        sysbus_init_mmio(sbd, &s->cpuiomem[i]);
 833    }
 834}
 835
 836static void arm_gic_class_init(ObjectClass *klass, void *data)
 837{
 838    DeviceClass *dc = DEVICE_CLASS(klass);
 839    ARMGICClass *agc = ARM_GIC_CLASS(klass);
 840
 841    agc->parent_realize = dc->realize;
 842    dc->realize = arm_gic_realize;
 843}
 844
 845static const TypeInfo arm_gic_info = {
 846    .name = TYPE_ARM_GIC,
 847    .parent = TYPE_ARM_GIC_COMMON,
 848    .instance_size = sizeof(GICState),
 849    .class_init = arm_gic_class_init,
 850    .class_size = sizeof(ARMGICClass),
 851};
 852
 853static void arm_gic_register_types(void)
 854{
 855    type_register_static(&arm_gic_info);
 856}
 857
 858type_init(arm_gic_register_types)
 859