1 #include <console/console.h>
2 #include <device/pci.h>
3 #include <device/pci_ids.h>
4 #include <device/pci_ops.h>
11 /* vgabios.c. Derived from: */
13 /*------------------------------------------------------------ -*- C -*-
14 * 2 Kernel Monte a.k.a. Linux loading Linux on x86
16 * Erik Arjan Hendriks <hendriks@lanl.gov>
18 * This version is a derivative of the original two kernel monte
19 * which is (C) 2000 Scyld.
21 * Copyright (C) 2000 Scyld Computing Corporation
23 * This program is free software; you can redistribute it and/or modify
24 * it under the terms of the GNU General Public License as published by
25 * the Free Software Foundation; either version 2 of the License, or
26 * (at your option) any later version.
28 * This program is distributed in the hope that it will be useful,
29 * but WITHOUT ANY WARRANTY; without even the implied warranty of
30 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
31 * GNU General Public License for more details.
33 * You should have received a copy of the GNU General Public License
34 * along with this program; if not, write to the Free Software
35 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
37 * Portions related to the alpha architecture are:
39 * Copyright(C) 2001 University of California. LA-CC Number 01-67.
40 * This software has been authored by an employee or employees of the
41 * University of California, operator of the Los Alamos National
42 * Laboratory under Contract No. W-7405-ENG-36 with the U.S.
43 * Department of Energy. The U.S. Government has rights to use,
44 * reproduce, and distribute this software. If the software is
45 * modified to produce derivative works, such modified software should
46 * be clearly marked, so as not to confuse it with the version
47 * available from LANL.
49 * This software may be used and distributed according to the terms
50 * of the GNU General Public License, incorporated herein by
51 * reference to http://www.gnu.org/licenses/gpl.html.
53 * This software is provided by the author(s) "as is" and any express
54 * or implied warranties, including, but not limited to, the implied
55 * warranties of merchantability and fitness for a particular purpose
56 * are disclaimed. In no event shall the author(s) be liable for any
57 * direct, indirect, incidental, special, exemplary, or consequential
58 * damages (including, but not limited to, procurement of substitute
59 * goods or services; loss of use, data, or profits; or business
60 * interruption) however caused and on any theory of liability,
61 * whether in contract, strict liability, or tort (including
62 * negligence or otherwise) arising in any way out of the use of this
63 * software, even if advised of the possibility of such damage.
65 * $Id: vgabios.c,v 1.5 2004/10/06 17:33:52 rminnich Exp $
66 *--------------------------------------------------------------------*/
68 /* Modified to be a self sufficient plug in so that it can be used
69 without reliance on other parts of core coreboot
70 (C) 2005 Nick.Barker9@btinternet.com
72 Used initially for epia-m where there are problems getting the bios
73 emulator to successfully run this bios.
76 /* Declare a temporary global descriptor table - necessary because the
77 Core part of the bios no longer sets up any 16 bit segments */
79 /* pointer to original gdt */
84 /* compute the table limit */
85 "__mygdt_limit = __mygdt_end - __mygdt - 1 \n"
88 " .word __mygdt_limit \n"
92 /* selgdt 0, unused */
93 " .word 0x0000, 0x0000 \n"
94 " .byte 0x00, 0x00, 0x00, 0x00 \n"
96 /* selgdt 8, unused */
97 " .word 0x0000, 0x0000 \n"
98 " .byte 0x00, 0x00, 0x00, 0x00 \n"
100 /* selgdt 0x10, flat code segment */
101 " .word 0xffff, 0x0000 \n"
102 " .byte 0x00, 0x9b, 0xcf, 0x00 \n"
104 /* selgdt 0x18, flat data segment */
105 " .word 0xffff, 0x0000 \n"
106 " .byte 0x00, 0x93, 0xcf, 0x00 \n"
108 /* selgdt 0x20, unused */
109 " .word 0x0000, 0x0000 \n"
110 " .byte 0x00, 0x00, 0x00, 0x00 \n"
112 /* selgdt 0x28 16-bit 64k code at 0x00000000 */
113 " .word 0xffff, 0x0000 \n"
114 " .byte 0, 0x9a, 0, 0 \n"
116 /* selgdt 0x30 16-bit 64k data at 0x00000000 */
117 " .word 0xffff, 0x0000 \n"
118 " .byte 0, 0x92, 0, 0 \n"
123 /* Declare a pointer to where our idt is going to be i.e. at mem zero */
124 __asm__ ("__myidt: \n"
132 /* The address arguments to this function are PHYSICAL ADDRESSES */
133 static void real_mode_switch_call_vga(unsigned long devfn)
135 __asm__ __volatile__ (
136 // paranoia -- does ecx get saved? not sure. This is
137 // the easiest safe thing to do.
140 " mov %esp, __stack \n"
142 "__stack: .long 0 \n"
144 /* get devfn into %ecx */
145 " movl %esp, %ebp \n"
146 " movl 8(%ebp), %ecx \n"
148 " lgdt %cs:__mygdtaddr \n"
150 /* This configures CS properly for real mode. */
151 " ljmp $0x28, $__rms_16bit\n"
154 /* 16 bit code from here on... */
156 /* Load the segment registers w/ properly configured segment
157 * descriptors. They will retain these configurations (limits,
158 * writability, etc.) once protected mode is turned off. */
166 /* Turn off protection (bit 0 in CR0) */
167 " movl %cr0, %eax \n"
168 " andl $0xFFFFFFFE, %eax \n"
169 " movl %eax, %cr0 \n"
171 /* Now really going into real mode */
172 " ljmp $0, $__rms_real\n"
175 /* put the stack at the end of page zero.
176 * that way we can easily share it between real and protected,
177 * since the 16-bit ESP at segment 0 will work for any case.
181 " movl $0x1000, %eax \n"
182 " movl %eax, %esp \n"
184 /* Load our 16 it idt */
189 /* Dump zeros in the other segregs */
197 /* run VGA BIOS at 0xc000:0003 */
198 " lcall $0xc000, $0x0003\n"
200 /* if we got here, just about done.
201 * Need to get back to protected mode */
202 " movl %cr0, %eax \n"
203 " orl $0x0000001, %eax\n" /* PE = 1 */
204 " movl %eax, %cr0 \n"
206 /* Now that we are in protected mode jump to a 32 bit code segment. */
207 " data32 ljmp $0x10, $vgarestart\n"
210 " movw $0x18, %ax \n"
217 /* restore proper gdt and idt */
218 " lgdt %cs:gdtarg \n"
223 " mov __stack, %esp \n"
228 __asm__ (".text\n""real_mode_switch_end:\n");
229 extern char real_mode_switch_end[];
231 /* call vga bios int 10 function 0x4f14 to enable main console
232 epia-m does not always autosence the main console so forcing it on is good !! */
233 void vga_enable_console()
235 __asm__ __volatile__ (
236 /* paranoia -- does ecx get saved? not sure. This is
237 * the easiest safe thing to do. */
240 " mov %esp, __stack \n"
243 " lgdt %cs:__mygdtaddr \n"
245 /* This configures CS properly for real mode. */
246 " ljmp $0x28, $__vga_ec_16bit\n"
249 /* 16 bit code from here on... */
251 /* Load the segment registers w/ properly configured segment
252 * descriptors. They will retain these configurations (limits,
253 * writability, etc.) once protected mode is turned off. */
261 /* Turn off protection (bit 0 in CR0) */
262 " movl %cr0, %eax \n"
263 " andl $0xFFFFFFFE, %eax\n"
264 " movl %eax, %cr0 \n"
266 /* Now really going into real mode */
267 " ljmp $0, $__vga_ec_real \n"
270 /* put the stack at the end of page zero.
271 * that way we can easily share it between real and protected,
272 * since the 16-bit ESP at segment 0 will work for any case.
276 " movl $0x1000, %eax \n"
277 " movl %eax, %esp \n"
279 /* debugging for RGM */
281 " outb %al, $0x80 \n"
283 /* Load our 16 it idt */
288 /* Dump zeros in the other segregs */
294 /* ask bios to enable main console */
295 /* set up for int 10 call - values found from X server
296 * bios call routines */
297 " movw $0x4f14,%ax \n"
298 " movw $0x8003,%bx \n"
304 " movb $0x55, %al \n"
305 " outb %al, $0x80 \n"
307 /* if we got here, just about done.
308 * Need to get back to protected mode */
309 " movl %cr0, %eax \n"
310 " orl $0x0000001, %eax\n" /* PE = 1 */
311 " movl %eax, %cr0 \n"
313 /* Now that we are in protected mode jump to a 32 bit code segment. */
314 " data32 ljmp $0x10, $vga_ec_restart\n"
317 " movw $0x18, %ax \n"
324 /* restore proper gdt and idt */
325 " lgdt %cs:gdtarg \n"
327 " .globl vga__ec_exit \n"
329 " mov __stack, %esp \n"
334 void do_vgabios(void)
337 unsigned long busdevfn;
338 unsigned int rom = 0;
340 unsigned int size = 64*1024;
343 /* clear vga bios data area */
344 for (i = 0x400; i < 0x500; i++) {
345 *(unsigned char *) i = 0;
348 dev = dev_find_class(PCI_CLASS_DISPLAY_VGA<<8 , 0);
351 printk_debug("NO VGA FOUND\n");
354 printk_debug("found VGA: vid=%x, did=%x\n", dev->vendor, dev->device);
356 /* declare rom address here - keep any config data out of the way
357 * of core LXB stuff */
360 pci_write_config32(dev, PCI_ROM_ADDRESS, rom|1);
361 printk_debug("rom base, size: %x\n", rom);
363 buf = (unsigned char *) rom;
364 if ((buf[0] == 0x55) && (buf[1] == 0xaa)) {
365 memcpy((void *) 0xc0000, buf, size);
367 write_protect_vgabios(); // in northbridge
369 // check signature again
370 buf = (unsigned char *) 0xc0000;
371 if (buf[0]==0x55 && buf[1]==0xAA) {
372 busdevfn = (dev->bus->secondary << 8) | dev->path.pci.devfn;
373 printk_debug("bus/devfn = %#x\n", busdevfn);
375 real_mode_switch_call_vga(busdevfn);
377 printk_debug("Failed to copy VGA BIOS to 0xc0000\n");
379 printk_debug("BAD SIGNATURE 0x%x 0x%x\n", buf[0], buf[1]);
381 pci_write_config32(dev, PCI_ROM_ADDRESS, 0);
385 // we had hoped to avoid this.
386 // this is a stub IDT only. It's main purpose is to ignore calls
388 // no longer. Dammit. We have to respond to these.
390 unsigned short offset, cs;
393 // from a handy writeup that andrey found.
396 // There are some assumptions we can make here.
397 // First, the Top Of Stack (TOS) is located on the top of page zero.
398 // we can share this stack between real and protected mode.
399 // that simplifies a lot of things ...
400 // we'll just push all the registers on the stack as longwords,
401 // and pop to protected mode.
402 // second, since this only ever runs as part of coreboot,
403 // we know all the segment register values -- so we don't save any.
404 // keep the handler that calls things small. It can do a call to
405 // more complex code in coreboot itself. This helps a lot as we don't
406 // have to do address fixup in this little stub, and calls are absolute
407 // so the handler is relocatable.
410 __asm__ __volatile__ (
415 " ljmp $0, $callbiosint16\n"
421 void debughandler(void)
423 __asm__ __volatile__ (
432 "end_debughandle: \n"
437 // Calling conventions. The first C function is called with this stuff
438 // on the stack. They look like value parameters, but note that if you
439 // modify them they will go back to the INTx function modified.
440 // the C function will call the biosint function with these as
441 // REFERENCE parameters. In this way, we can easily get
442 // returns back to the INTx caller (i.e. vgabios)
443 void callbiosint(void)
445 __asm__ __volatile__ (
452 // clean up the int #. To save space we put it in the lower
453 // byte. But the top 24 bits are junk.
454 " andl $0xff, %eax\n"
455 // this push does two things:
456 // - put the INT # on the stack as a parameter
457 // - provides us with a temp for the %cr0 mods.
460 " orl $0x00000001, %eax\n" /* PE = 1 */
462 /* Now that we are in protected mode jump to a 32 bit code segment. */
463 " data32 ljmp $0x10, $biosprotect\n"
466 " movw $0x18, %ax \n"
474 // back to real mode ...
475 " ljmp $0x28, $__rms_16bit2\n"
478 /* 16 bit code from here on... */
479 /* Load the segment registers w/ properly configured segment
480 * descriptors. They will retain these configurations (limits,
481 * writability, etc.) once protected mode is turned off. */
489 /* Turn off protection (bit 0 in CR0) */
490 " movl %cr0, %eax \n"
491 " andl $0xFFFFFFFE, %eax \n"
492 " movl %eax, %cr0 \n"
494 /* Now really going into real mode */
495 " ljmp $0, $__rms_real2 \n"
499 * FixME: where is esp? */
503 /* ebugging for RGM */
505 " outb %al, $0x80 \n"
507 /* Load our 16 it idt */
512 /* Dump zeros in the other segregs */
519 /* pop the INT # that you pushed earlier */
536 int pcibios(unsigned long *pedi, unsigned long *pesi, unsigned long *pebp,
537 unsigned long *pesp, unsigned long *pebx, unsigned long *pedx,
538 unsigned long *pecx, unsigned long *peax, unsigned long *pflags);
540 int handleint21(unsigned long *pedi, unsigned long *pesi, unsigned long *pebp,
541 unsigned long *pesp, unsigned long *pebx, unsigned long *pedx,
542 unsigned long *pecx, unsigned long *peax, unsigned long *pflags
545 extern void vga_exit(void);
547 int biosint(unsigned long intnumber,
548 unsigned long gsfs, unsigned long dses,
549 unsigned long edi, unsigned long esi,
550 unsigned long ebp, unsigned long esp,
551 unsigned long ebx, unsigned long edx,
552 unsigned long ecx, unsigned long eax,
553 unsigned long cs_ip, unsigned short stackflags)
564 printk_debug("biosint: INT# 0x%lx\n", intnumber);
565 printk_debug("biosint: eax 0x%lx ebx 0x%lx ecx 0x%lx edx 0x%lx\n",
567 printk_debug("biosint: ebp 0x%lx esp 0x%lx edi 0x%lx esi 0x%lx\n",
569 printk_debug("biosint: ip 0x%x cs 0x%x flags 0x%x\n",
572 // cases in a good compiler are just as good as your own tables.
575 // These are not BIOS service, but the CPU-generated exceptions
576 printk_info("biosint: Oops, exception %u\n", intnumber);
578 printk_debug("Stack contents: ");
579 while (esp < 0x1000) {
580 printk_debug("0x%04x ", *(unsigned short *) esp);
585 printk_debug("biosint: Bailing out\n");
591 ret = pcibios( &edi, &esi, &ebp, &esp,
592 &ebx, &edx, &ecx, &eax, &flags);
600 ret=handleint21( &edi, &esi, &ebp, &esp,
601 &ebx, &edx, &ecx, &eax, &flags);
604 printk_info("BIOSINT: Unsupport int #0x%x\n",
609 flags |= 1; // carry flags
617 void setup_realmode_idt(void)
619 extern unsigned char idthandle, end_idthandle;
620 extern unsigned char debughandle, end_debughandle;
623 struct realidt *idts = (struct realidt *) 0;
624 int codesize = &end_idthandle - &idthandle;
625 unsigned char *intbyte, *codeptr;
627 // for each int, we create a customized little handler
628 // that just pushes %ax, puts the int # in %al,
629 // then calls the common interrupt handler.
630 // this necessitated because intel didn't know much about
631 // architecture when they did the 8086 (it shows)
632 // (hmm do they know anymore even now :-)
633 // obviously you can see I don't really care about memory
634 // efficiency. If I did I would probe back through the stack
635 // and get it that way. But that's really disgusting.
636 for (i = 0; i < 256; i++) {
638 codeptr = (char*) 4096 + i * codesize;
639 idts[i].offset = (unsigned) codeptr;
640 memcpy(codeptr, &idthandle, codesize);
641 intbyte = codeptr + 3;
645 // fixed entry points
647 // VGA BIOSes tend to hardcode f000:f065 as the previous handler of
649 // calling convention here is the same as INTs, we can reuse
650 // the int entry code.
651 codeptr = (char*) 0xff065;
652 memcpy(codeptr, &idthandle, codesize);
653 intbyte = codeptr + 3;
654 *intbyte = 0x42; /* int42 is the relocated int10 */
656 /* debug handler - useful to set a programmable delay between instructions if the
657 TF bit is set upon call to real mode */
659 idts[1].offset = 16384;
660 memcpy(16384, &debughandle, &end_debughandle - &debughandle);
670 READCONFBYTE = 0xb108,
671 READCONFWORD = 0xb109,
672 READCONFDWORD = 0xb10a,
673 WRITECONFBYTE = 0xb10b,
674 WRITECONFWORD = 0xb10c,
675 WRITECONFDWORD = 0xb10d
678 // errors go in AH. Just set these up so that word assigns
681 PCIBIOS_NODEV = 0x8600,
682 PCIBIOS_BADREG = 0x8700
686 pcibios(unsigned long *pedi, unsigned long *pesi, unsigned long *pebp,
687 unsigned long *pesp, unsigned long *pebx, unsigned long *pedx,
688 unsigned long *pecx, unsigned long *peax, unsigned long *pflags)
690 unsigned long edi = *pedi;
691 unsigned long esi = *pesi;
692 unsigned long ebp = *pebp;
693 unsigned long esp = *pesp;
694 unsigned long ebx = *pebx;
695 unsigned long edx = *pedx;
696 unsigned long ecx = *pecx;
697 unsigned long eax = *peax;
698 unsigned long flags = *pflags;
699 unsigned short func = (unsigned short) eax;
701 unsigned short devid, vendorid, devfn;
702 short devindex; /* Use short to get rid of gabage in upper half of 32-bit register */
718 while ((dev = dev_find_device(vendorid, devid, dev))) {
724 unsigned short busdevfn;
726 // busnum is an unsigned char;
727 // devfn is an int, so we mask it off.
728 busdevfn = (dev->bus->secondary << 8)
729 | (dev->path.pci.devfn & 0xff);
730 printk_debug("0x%x: return 0x%x\n", func, busdevfn);
734 *peax = PCIBIOS_NODEV;
751 devfn = *pebx & 0xff;
754 dev = dev_find_slot(bus, devfn);
756 printk_debug("0x%x: BAD DEVICE bus %d devfn 0x%x\n", func, bus, devfn);
757 // idiots. the pcibios guys assumed you'd never pass a bad bus/devfn!
758 *peax = PCIBIOS_BADREG;
763 byte = pci_read_config8(dev, reg);
767 word = pci_read_config16(dev, reg);
771 dword = pci_read_config32(dev, reg);
776 pci_write_config8(dev, reg, byte);
780 pci_write_config16(dev, reg, word);
784 pci_write_config32(dev, reg, dword);
789 retval = PCIBIOS_BADREG;
790 printk_debug("0x%x: bus %d devfn 0x%x reg 0x%x val 0x%lx\n",
791 func, bus, devfn, reg, *pecx);
797 printk_err("UNSUPPORTED PCIBIOS FUNCTION 0x%x\n", func);
804 int handleint21(unsigned long *edi, unsigned long *esi, unsigned long *ebp,
805 unsigned long *esp, unsigned long *ebx, unsigned long *edx,
806 unsigned long *ecx, unsigned long *eax, unsigned long *flags)
815 *ebx=0x545; // MCLK = 133, 32M frame buffer, 256 M main memory
824 *ecx = (*ecx & 0xffffff00 ) | 2; // panel type = 2 = 1024 * 768
829 *ebx= (*ebx & 0xffff0000) | 2;
830 *ecx= (*ecx & 0xffff0000) | 0x401; // PAL + crt only
831 *edx= (*edx & 0xffff0000) | 0; // TV Layout - default