1 #include <console/console.h>
2 #include <device/pci.h>
3 #include <device/pci_ids.h>
4 #include <device/pci_ops.h>
8 #include <cpu/amd/lxdef.h>
9 #include <cpu/amd/vr.h>
11 // andrei: use the /lib copy of nrv2b
12 #include "../lib/nrv2b.c"
14 #define VSA2_BUFFER 0x60000
15 #define VSA2_ENTRY_POINT 0x60020
17 /* vsmsetup.c derived from vgabios.c. Derived from: */
19 /*------------------------------------------------------------ -*- C -*-
20 * 2 Kernel Monte a.k.a. Linux loading Linux on x86
22 * Erik Arjan Hendriks <hendriks@lanl.gov>
24 * This version is a derivative of the original two kernel monte
25 * which is (C) 2000 Scyld.
27 * Copyright (C) 2000 Scyld Computing Corporation
29 * This program is free software; you can redistribute it and/or modify
30 * it under the terms of the GNU General Public License as published by
31 * the Free Software Foundation; either version 2 of the License, or
32 * (at your option) any later version.
34 * This program is distributed in the hope that it will be useful,
35 * but WITHOUT ANY WARRANTY; without even the implied warranty of
36 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
37 * GNU General Public License for more details.
39 * You should have received a copy of the GNU General Public License
40 * along with this program; if not, write to the Free Software
41 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
43 * Portions related to the alpha architecture are:
45 * Copyright(C) 2001 University of California. LA-CC Number 01-67.
46 * This software has been authored by an employee or employees of the
47 * University of California, operator of the Los Alamos National
48 * Laboratory under Contract No. W-7405-ENG-36 with the U.S.
49 * Department of Energy. The U.S. Government has rights to use,
50 * reproduce, and distribute this software. If the software is
51 * modified to produce derivative works, such modified software should
52 * be clearly marked, so as not to confuse it with the version
53 * available from LANL.
55 * This software may be used and distributed according to the terms
56 * of the GNU General Public License, incorporated herein by
57 * reference to http://www.gnu.org/licenses/gpl.html.
59 * This software is provided by the author(s) "as is" and any express
60 * or implied warranties, including, but not limited to, the implied
61 * warranties of merchantability and fitness for a particular purpose
62 * are disclaimed. In no event shall the author(s) be liable for any
63 * direct, indirect, incidental, special, exemplary, or consequential
64 * damages (including, but not limited to, procurement of substitute
65 * goods or services; loss of use, data, or profits; or business
66 * interruption) however caused and on any theory of liability,
67 * whether in contract, strict liability, or tort (including
68 * negligence or otherwise) arising in any way out of the use of this
69 * software, even if advised of the possibility of such damage.
71 * $Id: vsmsetup.c,v 1.8 2006/09/08 12:47:57 andrei Exp $
72 *--------------------------------------------------------------------*/
74 /* Modified to be a self sufficient plug in so that it can be used
75 without reliance on other parts of core Linuxbios
76 (C) 2005 Nick.Barker9@btinternet.com
78 Used initially for epia-m where there are problems getting the bios
79 emulator to successfully run this bios.
82 /* Declare a temporary global descriptor table - necessary because the
83 Core part of the bios no longer sets up any 16 bit segments */
85 /* pointer to original gdt */
90 /* compute the table limit */
91 "__mygdt_limit = __mygdt_end - __mygdt - 1 \n"
94 " .word __mygdt_limit \n"
98 /* selgdt 0, unused */
99 " .word 0x0000, 0x0000 \n"
100 " .byte 0x00, 0x00, 0x00, 0x00 \n"
102 /* selgdt 8, unused */
103 " .word 0x0000, 0x0000 \n"
104 " .byte 0x00, 0x00, 0x00, 0x00 \n"
106 /* selgdt 0x10, flat code segment */
107 " .word 0xffff, 0x0000 \n"
108 " .byte 0x00, 0x9b, 0xcf, 0x00 \n"
110 /* selgdt 0x18, flat data segment */
111 " .word 0xffff, 0x0000 \n"
112 " .byte 0x00, 0x93, 0xcf, 0x00 \n"
114 /* selgdt 0x20, unused */
115 " .word 0x0000, 0x0000 \n"
116 " .byte 0x00, 0x00, 0x00, 0x00 \n"
118 /* selgdt 0x28 16-bit 64k code at 0x00000000 */
119 " .word 0xffff, 0x0000 \n"
120 " .byte 0, 0x9a, 0, 0 \n"
122 /* selgdt 0x30 16-bit 64k data at 0x00000000 */
123 " .word 0xffff, 0x0000 \n"
124 " .byte 0, 0x92, 0, 0 \n"
129 /* Declare a pointer to where our idt is going to be i.e. at mem zero */
130 __asm__ ("__myidt: \n"
138 /* The address arguments to this function are PHYSICAL ADDRESSES */
139 static void real_mode_switch_call_vsm(unsigned long smm, unsigned long sysm)
141 uint16_t entryHi = (VSA2_ENTRY_POINT & 0xffff0000) >> 4;
142 uint16_t entryLo = (VSA2_ENTRY_POINT & 0xffff);
144 __asm__ __volatile__ (
145 // paranoia -- does ecx get saved? not sure. This is
146 // the easiest safe thing to do.
149 " mov %%esp, __stack \n"
151 "__stack: .long 0 \n"
153 /* get devfn into %%ecx */
154 " movl %%esp, %%ebp \n"
156 /* I'm not happy about that pushal followed by esp-relative references.
157 * just do hard-codes for now
159 " movl 8(%%ebp), %%ecx \n"
160 " movl 12(%%ebp), %%edx \n"
166 " lgdt %%cs:__mygdtaddr \n"
168 /* This configures CS properly for real mode. */
169 " ljmp $0x28, $__rms_16bit\n"
172 /* 16 bit code from here on... */
174 /* Load the segment registers w/ properly configured segment
175 * descriptors. They will retain these configurations (limits,
176 * writability, etc.) once protected mode is turned off. */
177 " mov $0x30, %%ax \n"
184 /* Turn off protection (bit 0 in CR0) */
185 " movl %%cr0, %%eax \n"
186 " andl $0xFFFFFFFE, %%eax \n"
187 " movl %%eax, %%cr0 \n"
189 /* Now really going into real mode */
190 " ljmp $0, $__rms_real\n"
193 /* put the stack at the end of page zero.
194 * that way we can easily share it between real and protected,
195 * since the 16-bit ESP at segment 0 will work for any case. */
199 " movl $0x1000, %%eax \n"
200 " movl %%eax, %%esp \n"
202 /* Load our 16 it idt */
207 /* Dump zeros in the other segregs */
209 /* FixMe: Big real mode for gs, fs? */
212 " mov $0x40, %%ax \n"
214 //" mov %%cx, %%ax \n"
218 /* call the VSA2 entry point address */
221 /* if we got here, just about done.
222 * Need to get back to protected mode */
223 " movl %%cr0, %%eax \n"
224 " orl $0x0000001, %%eax\n" /* PE = 1 */
225 " movl %%eax, %%cr0 \n"
227 /* Now that we are in protected mode jump to a 32 bit code segment. */
228 " data32 ljmp $0x10, $vsmrestart\n"
231 " movw $0x18, %%ax \n"
238 /* restore proper gdt and idt */
239 " lgdt %%cs:gdtarg \n"
244 " mov __stack, %%esp \n"
246 :: "g" (smm), "g" (sysm), "g" (entryHi), "g" (entryLo));
249 __asm__ (".text\n""real_mode_switch_end:\n");
250 extern char real_mode_switch_end[];
252 // andrei: some VSA virtual register helpers: raw read and MSR read
254 uint32_t VSA_vrRead(uint16_t classIndex)
256 unsigned eax, ebx, ecx, edx;
259 "movw $0x0AC1C, %%dx \n"
260 "orl $0x0FC530000, %%eax \n"
261 "outl %%eax, %%dx \n"
265 : "=a" (eax), "=b" (ebx), "=c" (ecx), "=d" (edx)
272 uint32_t VSA_msrRead(uint32_t msrAddr)
274 unsigned eax, ebx, ecx, edx;
277 "movw $0x0AC1C, %%dx \n"
278 "movl $0x0FC530007, %%eax \n"
279 "outl %%eax, %%dx \n"
283 : "=a" (eax), "=b" (ebx), "=c" (ecx), "=d" (edx)
290 void do_vsmbios(void)
293 unsigned long busdevfn;
294 unsigned int rom = 0;
296 unsigned int size = SMM_SIZE*1024;
298 unsigned long ilen, olen;
300 printk_err("do_vsmbios\n");
301 /* clear vsm bios data area */
302 for (i = 0x400; i < 0x500; i++) {
303 *(unsigned char *) i = 0;
306 /* declare rom address here - keep any config data out of the way
307 * of core LXB stuff */
309 /* this is the base of rom on the GX2 at present. At some point, this has to be
310 * much better parameterized
314 /* the VSA starts at the base of rom - 64 */
315 //rom = ((unsigned long) 0) - (ROM_SIZE + 64*1024);
319 buf = (unsigned char *) VSA2_BUFFER;
320 olen = unrv2b((uint8_t *)rom, buf, &ilen);
321 printk_debug("buf ilen %d olen%d\n", ilen, olen);
322 printk_debug("buf %p *buf %d buf[256k] %d\n",
323 buf, buf[0], buf[SMM_SIZE*1024]);
324 printk_debug("buf[0x20] signature is %x:%x:%x:%x\n",
325 buf[0x20] ,buf[0x21] ,buf[0x22],buf[0x23]);
326 /* check for post code at start of vsainit.bin. If you don't see it,
328 if ((buf[0x20] != 0xb0) || (buf[0x21] != 0x10) ||
329 (buf[0x22] != 0xe6) || (buf[0x23] != 0x80)) {
330 printk_err("do_vsmbios: no vsainit.bin signature, skipping!\n");
334 //memcpy((void *) VSA2_BUFFER, buf, size);
336 //for (i = 0; i < 0x800000; i++)
339 /* ecx gets smm, edx gets sysm */
340 printk_err("Call real_mode_switch_call_vsm\n");
341 real_mode_switch_call_vsm(MSR_GLIU0_SMM, MSR_GLIU0_SYSMEM);
343 /* restart timer 1 */
347 // check that VSA is running OK
348 if(VSA_vrRead(SIGNATURE) == VSA2_SIGNATURE)
349 printk_debug("do_vsmbios: VSA2 VR signature verified\n");
350 else printk_err("do_vsmbios: VSA2 VR signature not valid, install failed!\n");
354 // we had hoped to avoid this.
355 // this is a stub IDT only. It's main purpose is to ignore calls
357 // no longer. Dammit. We have to respond to these.
359 unsigned short offset, cs;
362 // from a handy writeup that andrey found.
365 // There are some assumptions we can make here.
366 // First, the Top Of Stack (TOS) is located on the top of page zero.
367 // we can share this stack between real and protected mode.
368 // that simplifies a lot of things ...
369 // we'll just push all the registers on the stack as longwords,
370 // and pop to protected mode.
371 // second, since this only ever runs as part of linuxbios,
372 // we know all the segment register values -- so we don't save any.
373 // keep the handler that calls things small. It can do a call to
374 // more complex code in linuxbios itself. This helps a lot as we don't
375 // have to do address fixup in this little stub, and calls are absolute
376 // so the handler is relocatable.
379 __asm__ __volatile__ (
384 " ljmp $0, $callbiosint16\n"
390 void debughandler(void)
392 __asm__ __volatile__ (
401 "end_debughandle: \n"
406 // Calling conventions. The first C function is called with this stuff
407 // on the stack. They look like value parameters, but note that if you
408 // modify them they will go back to the INTx function modified.
409 // the C function will call the biosint function with these as
410 // REFERENCE parameters. In this way, we can easily get
411 // returns back to the INTx caller (i.e. vgabios)
412 void callbiosint(void)
414 __asm__ __volatile__ (
421 // clean up the int #. To save space we put it in the lower
422 // byte. But the top 24 bits are junk.
423 " andl $0xff, %eax\n"
424 // this push does two things:
425 // - put the INT # on the stack as a parameter
426 // - provides us with a temp for the %cr0 mods.
431 " orl $0x00000001, %eax\n" /* PE = 1 */
433 /* Now that we are in protected mode jump to a 32 bit code segment. */
434 " data32 ljmp $0x10, $biosprotect\n"
437 " movw $0x18, %ax \n"
445 // back to real mode ...
446 " ljmp $0x28, $__rms_16bit2\n"
449 /* 16 bit code from here on... */
450 /* Load the segment registers w/ properly configured segment
451 * descriptors. They will retain these configurations (limits,
452 * writability, etc.) once protected mode is turned off. */
460 /* Turn off protection (bit 0 in CR0) */
461 " movl %cr0, %eax \n"
462 " andl $0xFFFFFFFE, %eax \n"
463 " movl %eax, %cr0 \n"
465 /* Now really going into real mode */
466 " ljmp $0, $__rms_real2 \n"
470 * FixME: where is esp? */
471 /* no need for a fix here. The esp is shared from 32-bit and 16-bit mode.
472 * you have to hack on the ss, but the esp remains the same across
478 /* debugging for RGM */
480 " outb %al, $0x80 \n"
482 /* Load our 16 bit idt */
487 /* Dump zeros in the other segregs */
494 /* pop the INT # that you pushed earlier */
511 int pcibios(unsigned long *pedi, unsigned long *pesi, unsigned long *pebp,
512 unsigned long *pesp, unsigned long *pebx, unsigned long *pedx,
513 unsigned long *pecx, unsigned long *peax, unsigned long *pflags);
515 int handleint21(unsigned long *pedi, unsigned long *pesi, unsigned long *pebp,
516 unsigned long *pesp, unsigned long *pebx, unsigned long *pedx,
517 unsigned long *pecx, unsigned long *peax, unsigned long *pflags
520 int biosint(unsigned long intnumber,
521 unsigned long gsfs, unsigned long dses,
522 unsigned long edi, unsigned long esi,
523 unsigned long ebp, unsigned long esp,
524 unsigned long ebx, unsigned long edx,
525 unsigned long ecx, unsigned long eax,
526 unsigned long cs_ip, unsigned short stackflags)
537 printk_debug("biosint: INT# 0x%lx\n", intnumber);
538 printk_debug("biosint: eax 0x%lx ebx 0x%lx ecx 0x%lx edx 0x%lx\n",
540 printk_debug("biosint: ebp 0x%lx esp 0x%lx edi 0x%lx esi 0x%lx\n",
542 printk_debug("biosint: ip 0x%x cs 0x%x flags 0x%x\n",
544 printk_debug("biosint: gs 0x%x fs 0x%x ds 0x%x es 0x%x\n",
545 gsfs >> 16, gsfs & 0xffff, dses >> 16, dses & 0xffff);
547 // cases in a good compiler are just as good as your own tables.
550 // These are not BIOS service, but the CPU-generated exceptions
551 printk_info("biosint: Oops, exception %u\n", intnumber);
553 printk_debug("Stack contents: ");
554 while (esp < 0x1000) {
555 printk_debug("0x%04x ", *(unsigned short *) esp);
560 printk_debug("biosint: Bailing out ... not now\n");
566 ret = pcibios( &edi, &esi, &ebp, &esp,
567 &ebx, &edx, &ecx, &eax, &flags);
575 ret=handleint21( &edi, &esi, &ebp, &esp,
576 &ebx, &edx, &ecx, &eax, &flags);
579 printk_info("BIOSINT: Unsupport int #0x%x\n",
584 flags |= 1; // carry flags
592 void setup_realmode_idt(void)
594 extern unsigned char idthandle, end_idthandle;
595 extern unsigned char debughandle, end_debughandle;
598 struct realidt *idts = (struct realidt *) 0;
599 int codesize = &end_idthandle - &idthandle;
600 unsigned char *intbyte, *codeptr;
602 // for each int, we create a customized little handler
603 // that just pushes %ax, puts the int # in %al,
604 // then calls the common interrupt handler.
605 // this necessitated because intel didn't know much about
606 // architecture when they did the 8086 (it shows)
607 // (hmm do they know anymore even now :-)
608 // obviously you can see I don't really care about memory
609 // efficiency. If I did I would probe back through the stack
610 // and get it that way. But that's really disgusting.
611 for (i = 0; i < 256; i++) {
613 codeptr = (unsigned char*) 4096 + i * codesize;
614 idts[i].offset = (unsigned) codeptr;
615 memcpy(codeptr, &idthandle, codesize);
616 intbyte = codeptr + 3;
620 // fixed entry points
622 // VGA BIOSes tend to hardcode f000:f065 as the previous handler of
624 // calling convention here is the same as INTs, we can reuse
625 // the int entry code.
626 codeptr = (unsigned char*) 0xff065;
627 memcpy(codeptr, &idthandle, codesize);
628 intbyte = codeptr + 3;
629 *intbyte = 0x42; /* int42 is the relocated int10 */
631 /* debug handler - useful to set a programmable delay between instructions if the
632 TF bit is set upon call to real mode */
634 idts[1].offset = 16384;
635 memcpy((void*)16384, &debughandle, &end_debughandle - &debughandle);
643 READCONFBYTE = 0xb108,
644 READCONFWORD = 0xb109,
645 READCONFDWORD = 0xb10a,
646 WRITECONFBYTE = 0xb10b,
647 WRITECONFWORD = 0xb10c,
648 WRITECONFDWORD = 0xb10d
651 // errors go in AH. Just set these up so that word assigns
654 PCIBIOS_NODEV = 0x8600,
655 PCIBIOS_BADREG = 0x8700
659 pcibios(unsigned long *pedi, unsigned long *pesi, unsigned long *pebp,
660 unsigned long *pesp, unsigned long *pebx, unsigned long *pedx,
661 unsigned long *pecx, unsigned long *peax, unsigned long *pflags)
663 unsigned long edi = *pedi;
664 unsigned long esi = *pesi;
665 unsigned long ebp = *pebp;
666 unsigned long esp = *pesp;
667 unsigned long ebx = *pebx;
668 unsigned long edx = *pedx;
669 unsigned long ecx = *pecx;
670 unsigned long eax = *peax;
671 unsigned long flags = *pflags;
672 unsigned short func = (unsigned short) eax;
674 unsigned short devid, vendorid, devfn;
675 short devindex; /* Use short to get rid of gabage in upper half of 32-bit register */
691 while ((dev = dev_find_device(vendorid, devid, dev))) {
697 unsigned short busdevfn;
699 // busnum is an unsigned char;
700 // devfn is an int, so we mask it off.
701 busdevfn = (dev->bus->secondary << 8)
702 | (dev->path.u.pci.devfn & 0xff);
703 printk_debug("0x%x: return 0x%x\n", func, busdevfn);
707 *peax = PCIBIOS_NODEV;
724 devfn = *pebx & 0xff;
727 dev = dev_find_slot(bus, devfn);
729 printk_debug("0x%x: BAD DEVICE bus %d devfn 0x%x\n", func, bus, devfn);
730 // idiots. the pcibios guys assumed you'd never pass a bad bus/devfn!
731 *peax = PCIBIOS_BADREG;
736 byte = pci_read_config8(dev, reg);
740 word = pci_read_config16(dev, reg);
744 dword = pci_read_config32(dev, reg);
749 pci_write_config8(dev, reg, byte);
753 pci_write_config16(dev, reg, word);
757 pci_write_config32(dev, reg, dword);
762 retval = PCIBIOS_BADREG;
763 printk_debug("0x%x: bus %d devfn 0x%x reg 0x%x val 0x%lx\n",
764 func, bus, devfn, reg, *pecx);
770 printk_err("UNSUPPORTED PCIBIOS FUNCTION 0x%x\n", func);
777 int handleint21(unsigned long *edi, unsigned long *esi, unsigned long *ebp,
778 unsigned long *esp, unsigned long *ebx, unsigned long *edx,
779 unsigned long *ecx, unsigned long *eax, unsigned long *flags)
782 printk_debug("handleint21, eax 0x%x\n", *eax);
789 *ebx=0x545; // MCLK = 133, 32M frame buffer, 256 M main memory
798 *ecx = (*ecx & 0xffffff00 ) | 2; // panel type = 2 = 1024 * 768
803 *ebx= (*ebx & 0xffff0000) | 2;
804 *ecx= (*ecx & 0xffff0000) | 0x401; // PAL + crt only
805 *edx= (*edx & 0xffff0000) | 0; // TV Layout - default