qemu/hw/display/bcm2835_fb.c
<<
>>
Prefs
   1/*
   2 * Raspberry Pi emulation (c) 2012 Gregory Estrade
   3 * Refactoring for Pi2 Copyright (c) 2015, Microsoft. Written by Andrew Baumann.
   4 * This code is licensed under the GNU GPLv2 and later.
   5 *
   6 * Heavily based on milkymist-vgafb.c, copyright terms below:
   7 *  QEMU model of the Milkymist VGA framebuffer.
   8 *
   9 *  Copyright (c) 2010-2012 Michael Walle <michael@walle.cc>
  10 *
  11 * This library is free software; you can redistribute it and/or
  12 * modify it under the terms of the GNU Lesser General Public
  13 * License as published by the Free Software Foundation; either
  14 * version 2 of the License, or (at your option) any later version.
  15 *
  16 * This library is distributed in the hope that it will be useful,
  17 * but WITHOUT ANY WARRANTY; without even the implied warranty of
  18 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  19 * Lesser General Public License for more details.
  20 *
  21 * You should have received a copy of the GNU Lesser General Public
  22 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
  23 *
  24 */
  25
  26#include "qemu/osdep.h"
  27#include "qapi/error.h"
  28#include "hw/display/bcm2835_fb.h"
  29#include "framebuffer.h"
  30#include "ui/pixel_ops.h"
  31#include "hw/misc/bcm2835_mbox_defs.h"
  32#include "qemu/log.h"
  33#include "qemu/module.h"
  34
  35#define DEFAULT_VCRAM_SIZE 0x4000000
  36#define BCM2835_FB_OFFSET  0x00100000
  37
  38/* Maximum permitted framebuffer size; experimentally determined on an rpi2 */
  39#define XRES_MAX 3840
  40#define YRES_MAX 2560
  41/* Framebuffer size used if guest requests zero size */
  42#define XRES_SMALL 592
  43#define YRES_SMALL 488
  44
  45static void fb_invalidate_display(void *opaque)
  46{
  47    BCM2835FBState *s = BCM2835_FB(opaque);
  48
  49    s->invalidate = true;
  50}
  51
  52static void draw_line_src16(void *opaque, uint8_t *dst, const uint8_t *src,
  53                            int width, int deststep)
  54{
  55    BCM2835FBState *s = opaque;
  56    uint16_t rgb565;
  57    uint32_t rgb888;
  58    uint8_t r, g, b;
  59    DisplaySurface *surface = qemu_console_surface(s->con);
  60    int bpp = surface_bits_per_pixel(surface);
  61
  62    while (width--) {
  63        switch (s->config.bpp) {
  64        case 8:
  65            /* lookup palette starting at video ram base
  66             * TODO: cache translation, rather than doing this each time!
  67             */
  68            rgb888 = ldl_le_phys(&s->dma_as, s->vcram_base + (*src << 2));
  69            r = (rgb888 >> 0) & 0xff;
  70            g = (rgb888 >> 8) & 0xff;
  71            b = (rgb888 >> 16) & 0xff;
  72            src++;
  73            break;
  74        case 16:
  75            rgb565 = lduw_le_p(src);
  76            r = ((rgb565 >> 11) & 0x1f) << 3;
  77            g = ((rgb565 >>  5) & 0x3f) << 2;
  78            b = ((rgb565 >>  0) & 0x1f) << 3;
  79            src += 2;
  80            break;
  81        case 24:
  82            rgb888 = ldl_le_p(src);
  83            r = (rgb888 >> 0) & 0xff;
  84            g = (rgb888 >> 8) & 0xff;
  85            b = (rgb888 >> 16) & 0xff;
  86            src += 3;
  87            break;
  88        case 32:
  89            rgb888 = ldl_le_p(src);
  90            r = (rgb888 >> 0) & 0xff;
  91            g = (rgb888 >> 8) & 0xff;
  92            b = (rgb888 >> 16) & 0xff;
  93            src += 4;
  94            break;
  95        default:
  96            r = 0;
  97            g = 0;
  98            b = 0;
  99            break;
 100        }
 101
 102        if (s->config.pixo == 0) {
 103            /* swap to BGR pixel format */
 104            uint8_t tmp = r;
 105            r = b;
 106            b = tmp;
 107        }
 108
 109        switch (bpp) {
 110        case 8:
 111            *dst++ = rgb_to_pixel8(r, g, b);
 112            break;
 113        case 15:
 114            *(uint16_t *)dst = rgb_to_pixel15(r, g, b);
 115            dst += 2;
 116            break;
 117        case 16:
 118            *(uint16_t *)dst = rgb_to_pixel16(r, g, b);
 119            dst += 2;
 120            break;
 121        case 24:
 122            rgb888 = rgb_to_pixel24(r, g, b);
 123            *dst++ = rgb888 & 0xff;
 124            *dst++ = (rgb888 >> 8) & 0xff;
 125            *dst++ = (rgb888 >> 16) & 0xff;
 126            break;
 127        case 32:
 128            *(uint32_t *)dst = rgb_to_pixel32(r, g, b);
 129            dst += 4;
 130            break;
 131        default:
 132            return;
 133        }
 134    }
 135}
 136
 137static bool fb_use_offsets(BCM2835FBConfig *config)
 138{
 139    /*
 140     * Return true if we should use the viewport offsets.
 141     * Experimentally, the hardware seems to do this only if the
 142     * viewport size is larger than the physical screen. (It doesn't
 143     * prevent the guest setting this silly viewport setting, though...)
 144     */
 145    return config->xres_virtual > config->xres &&
 146        config->yres_virtual > config->yres;
 147}
 148
 149static void fb_update_display(void *opaque)
 150{
 151    BCM2835FBState *s = opaque;
 152    DisplaySurface *surface = qemu_console_surface(s->con);
 153    int first = 0;
 154    int last = 0;
 155    int src_width = 0;
 156    int dest_width = 0;
 157    uint32_t xoff = 0, yoff = 0;
 158
 159    if (s->lock || !s->config.xres) {
 160        return;
 161    }
 162
 163    src_width = bcm2835_fb_get_pitch(&s->config);
 164    if (fb_use_offsets(&s->config)) {
 165        xoff = s->config.xoffset;
 166        yoff = s->config.yoffset;
 167    }
 168
 169    dest_width = s->config.xres;
 170
 171    switch (surface_bits_per_pixel(surface)) {
 172    case 0:
 173        return;
 174    case 8:
 175        break;
 176    case 15:
 177        dest_width *= 2;
 178        break;
 179    case 16:
 180        dest_width *= 2;
 181        break;
 182    case 24:
 183        dest_width *= 3;
 184        break;
 185    case 32:
 186        dest_width *= 4;
 187        break;
 188    default:
 189        hw_error("bcm2835_fb: bad color depth\n");
 190        break;
 191    }
 192
 193    if (s->invalidate) {
 194        hwaddr base = s->config.base + xoff + (hwaddr)yoff * src_width;
 195        framebuffer_update_memory_section(&s->fbsection, s->dma_mr,
 196                                          base,
 197                                          s->config.yres, src_width);
 198    }
 199
 200    framebuffer_update_display(surface, &s->fbsection,
 201                               s->config.xres, s->config.yres,
 202                               src_width, dest_width, 0, s->invalidate,
 203                               draw_line_src16, s, &first, &last);
 204
 205    if (first >= 0) {
 206        dpy_gfx_update(s->con, 0, first, s->config.xres,
 207                       last - first + 1);
 208    }
 209
 210    s->invalidate = false;
 211}
 212
 213void bcm2835_fb_validate_config(BCM2835FBConfig *config)
 214{
 215    /*
 216     * Validate the config, and clip any bogus values into range,
 217     * as the hardware does. Note that fb_update_display() relies on
 218     * this happening to prevent it from performing out-of-range
 219     * accesses on redraw.
 220     */
 221    config->xres = MIN(config->xres, XRES_MAX);
 222    config->xres_virtual = MIN(config->xres_virtual, XRES_MAX);
 223    config->yres = MIN(config->yres, YRES_MAX);
 224    config->yres_virtual = MIN(config->yres_virtual, YRES_MAX);
 225
 226    /*
 227     * These are not minima: a 40x40 framebuffer will be accepted.
 228     * They're only used as defaults if the guest asks for zero size.
 229     */
 230    if (config->xres == 0) {
 231        config->xres = XRES_SMALL;
 232    }
 233    if (config->yres == 0) {
 234        config->yres = YRES_SMALL;
 235    }
 236    if (config->xres_virtual == 0) {
 237        config->xres_virtual = config->xres;
 238    }
 239    if (config->yres_virtual == 0) {
 240        config->yres_virtual = config->yres;
 241    }
 242
 243    if (fb_use_offsets(config)) {
 244        /* Clip the offsets so the viewport is within the physical screen */
 245        config->xoffset = MIN(config->xoffset,
 246                              config->xres_virtual - config->xres);
 247        config->yoffset = MIN(config->yoffset,
 248                              config->yres_virtual - config->yres);
 249    }
 250}
 251
 252void bcm2835_fb_reconfigure(BCM2835FBState *s, BCM2835FBConfig *newconfig)
 253{
 254    s->lock = true;
 255
 256    s->config = *newconfig;
 257
 258    s->invalidate = true;
 259    qemu_console_resize(s->con, s->config.xres, s->config.yres);
 260    s->lock = false;
 261}
 262
 263static void bcm2835_fb_mbox_push(BCM2835FBState *s, uint32_t value)
 264{
 265    uint32_t pitch;
 266    uint32_t size;
 267    BCM2835FBConfig newconf;
 268
 269    value &= ~0xf;
 270
 271    newconf.xres = ldl_le_phys(&s->dma_as, value);
 272    newconf.yres = ldl_le_phys(&s->dma_as, value + 4);
 273    newconf.xres_virtual = ldl_le_phys(&s->dma_as, value + 8);
 274    newconf.yres_virtual = ldl_le_phys(&s->dma_as, value + 12);
 275    newconf.bpp = ldl_le_phys(&s->dma_as, value + 20);
 276    newconf.xoffset = ldl_le_phys(&s->dma_as, value + 24);
 277    newconf.yoffset = ldl_le_phys(&s->dma_as, value + 28);
 278
 279    newconf.base = s->vcram_base | (value & 0xc0000000);
 280    newconf.base += BCM2835_FB_OFFSET;
 281
 282    bcm2835_fb_validate_config(&newconf);
 283
 284    pitch = bcm2835_fb_get_pitch(&newconf);
 285    size = bcm2835_fb_get_size(&newconf);
 286
 287    stl_le_phys(&s->dma_as, value + 16, pitch);
 288    stl_le_phys(&s->dma_as, value + 32, newconf.base);
 289    stl_le_phys(&s->dma_as, value + 36, size);
 290
 291    bcm2835_fb_reconfigure(s, &newconf);
 292}
 293
 294static uint64_t bcm2835_fb_read(void *opaque, hwaddr offset, unsigned size)
 295{
 296    BCM2835FBState *s = opaque;
 297    uint32_t res = 0;
 298
 299    switch (offset) {
 300    case MBOX_AS_DATA:
 301        res = MBOX_CHAN_FB;
 302        s->pending = false;
 303        qemu_set_irq(s->mbox_irq, 0);
 304        break;
 305
 306    case MBOX_AS_PENDING:
 307        res = s->pending;
 308        break;
 309
 310    default:
 311        qemu_log_mask(LOG_GUEST_ERROR, "%s: Bad offset %"HWADDR_PRIx"\n",
 312                      __func__, offset);
 313        return 0;
 314    }
 315
 316    return res;
 317}
 318
 319static void bcm2835_fb_write(void *opaque, hwaddr offset, uint64_t value,
 320                             unsigned size)
 321{
 322    BCM2835FBState *s = opaque;
 323
 324    switch (offset) {
 325    case MBOX_AS_DATA:
 326        /* bcm2835_mbox should check our pending status before pushing */
 327        assert(!s->pending);
 328        s->pending = true;
 329        bcm2835_fb_mbox_push(s, value);
 330        qemu_set_irq(s->mbox_irq, 1);
 331        break;
 332
 333    default:
 334        qemu_log_mask(LOG_GUEST_ERROR, "%s: Bad offset %"HWADDR_PRIx"\n",
 335                      __func__, offset);
 336        return;
 337    }
 338}
 339
 340static const MemoryRegionOps bcm2835_fb_ops = {
 341    .read = bcm2835_fb_read,
 342    .write = bcm2835_fb_write,
 343    .endianness = DEVICE_NATIVE_ENDIAN,
 344    .valid.min_access_size = 4,
 345    .valid.max_access_size = 4,
 346};
 347
 348static const VMStateDescription vmstate_bcm2835_fb = {
 349    .name = TYPE_BCM2835_FB,
 350    .version_id = 1,
 351    .minimum_version_id = 1,
 352    .fields = (VMStateField[]) {
 353        VMSTATE_BOOL(lock, BCM2835FBState),
 354        VMSTATE_BOOL(invalidate, BCM2835FBState),
 355        VMSTATE_BOOL(pending, BCM2835FBState),
 356        VMSTATE_UINT32(config.xres, BCM2835FBState),
 357        VMSTATE_UINT32(config.yres, BCM2835FBState),
 358        VMSTATE_UINT32(config.xres_virtual, BCM2835FBState),
 359        VMSTATE_UINT32(config.yres_virtual, BCM2835FBState),
 360        VMSTATE_UINT32(config.xoffset, BCM2835FBState),
 361        VMSTATE_UINT32(config.yoffset, BCM2835FBState),
 362        VMSTATE_UINT32(config.bpp, BCM2835FBState),
 363        VMSTATE_UINT32(config.base, BCM2835FBState),
 364        VMSTATE_UNUSED(8), /* Was pitch and size */
 365        VMSTATE_UINT32(config.pixo, BCM2835FBState),
 366        VMSTATE_UINT32(config.alpha, BCM2835FBState),
 367        VMSTATE_END_OF_LIST()
 368    }
 369};
 370
 371static const GraphicHwOps vgafb_ops = {
 372    .invalidate  = fb_invalidate_display,
 373    .gfx_update  = fb_update_display,
 374};
 375
 376static void bcm2835_fb_init(Object *obj)
 377{
 378    BCM2835FBState *s = BCM2835_FB(obj);
 379
 380    memory_region_init_io(&s->iomem, obj, &bcm2835_fb_ops, s, TYPE_BCM2835_FB,
 381                          0x10);
 382    sysbus_init_mmio(SYS_BUS_DEVICE(s), &s->iomem);
 383    sysbus_init_irq(SYS_BUS_DEVICE(s), &s->mbox_irq);
 384}
 385
 386static void bcm2835_fb_reset(DeviceState *dev)
 387{
 388    BCM2835FBState *s = BCM2835_FB(dev);
 389
 390    s->pending = false;
 391
 392    s->config = s->initial_config;
 393
 394    s->invalidate = true;
 395    s->lock = false;
 396}
 397
 398static void bcm2835_fb_realize(DeviceState *dev, Error **errp)
 399{
 400    BCM2835FBState *s = BCM2835_FB(dev);
 401    Error *err = NULL;
 402    Object *obj;
 403
 404    if (s->vcram_base == 0) {
 405        error_setg(errp, "%s: required vcram-base property not set", __func__);
 406        return;
 407    }
 408
 409    obj = object_property_get_link(OBJECT(dev), "dma-mr", &err);
 410    if (obj == NULL) {
 411        error_setg(errp, "%s: required dma-mr link not found: %s",
 412                   __func__, error_get_pretty(err));
 413        return;
 414    }
 415
 416    /* Fill in the parts of initial_config that are not set by QOM properties */
 417    s->initial_config.xres_virtual = s->initial_config.xres;
 418    s->initial_config.yres_virtual = s->initial_config.yres;
 419    s->initial_config.xoffset = 0;
 420    s->initial_config.yoffset = 0;
 421    s->initial_config.base = s->vcram_base + BCM2835_FB_OFFSET;
 422
 423    s->dma_mr = MEMORY_REGION(obj);
 424    address_space_init(&s->dma_as, s->dma_mr, NULL);
 425
 426    bcm2835_fb_reset(dev);
 427
 428    s->con = graphic_console_init(dev, 0, &vgafb_ops, s);
 429    qemu_console_resize(s->con, s->config.xres, s->config.yres);
 430}
 431
 432static Property bcm2835_fb_props[] = {
 433    DEFINE_PROP_UINT32("vcram-base", BCM2835FBState, vcram_base, 0),/*required*/
 434    DEFINE_PROP_UINT32("vcram-size", BCM2835FBState, vcram_size,
 435                       DEFAULT_VCRAM_SIZE),
 436    DEFINE_PROP_UINT32("xres", BCM2835FBState, initial_config.xres, 640),
 437    DEFINE_PROP_UINT32("yres", BCM2835FBState, initial_config.yres, 480),
 438    DEFINE_PROP_UINT32("bpp", BCM2835FBState, initial_config.bpp, 16),
 439    DEFINE_PROP_UINT32("pixo", BCM2835FBState,
 440                       initial_config.pixo, 1), /* 1=RGB, 0=BGR */
 441    DEFINE_PROP_UINT32("alpha", BCM2835FBState,
 442                       initial_config.alpha, 2), /* alpha ignored */
 443    DEFINE_PROP_END_OF_LIST()
 444};
 445
 446static void bcm2835_fb_class_init(ObjectClass *klass, void *data)
 447{
 448    DeviceClass *dc = DEVICE_CLASS(klass);
 449
 450    dc->props = bcm2835_fb_props;
 451    dc->realize = bcm2835_fb_realize;
 452    dc->reset = bcm2835_fb_reset;
 453    dc->vmsd = &vmstate_bcm2835_fb;
 454}
 455
 456static TypeInfo bcm2835_fb_info = {
 457    .name          = TYPE_BCM2835_FB,
 458    .parent        = TYPE_SYS_BUS_DEVICE,
 459    .instance_size = sizeof(BCM2835FBState),
 460    .class_init    = bcm2835_fb_class_init,
 461    .instance_init = bcm2835_fb_init,
 462};
 463
 464static void bcm2835_fb_register_types(void)
 465{
 466    type_register_static(&bcm2835_fb_info);
 467}
 468
 469type_init(bcm2835_fb_register_types)
 470