1 #include <console/console.h>
2 #include <device/pci.h>
3 #include <device/pci_ids.h>
4 #include <device/pci_ops.h>
8 #include <cpu/amd/lxdef.h>
9 #include <cpu/amd/vr.h>
11 // andrei: use the /lib copy of nrv2b
12 #include "../lib/nrv2b.c"
14 #define VSA2_BUFFER 0x60000
15 #define VSA2_ENTRY_POINT 0x60020
17 /* vsmsetup.c derived from vgabios.c. Derived from: */
19 /*------------------------------------------------------------ -*- C -*-
20 * 2 Kernel Monte a.k.a. Linux loading Linux on x86
22 * Erik Arjan Hendriks <hendriks@lanl.gov>
24 * This version is a derivative of the original two kernel monte
25 * which is (C) 2000 Scyld.
27 * Copyright (C) 2000 Scyld Computing Corporation
29 * This program is free software; you can redistribute it and/or modify
30 * it under the terms of the GNU General Public License as published by
31 * the Free Software Foundation; either version 2 of the License, or
32 * (at your option) any later version.
34 * This program is distributed in the hope that it will be useful,
35 * but WITHOUT ANY WARRANTY; without even the implied warranty of
36 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
37 * GNU General Public License for more details.
39 * You should have received a copy of the GNU General Public License
40 * along with this program; if not, write to the Free Software
41 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
43 * Portions related to the alpha architecture are:
45 * Copyright(C) 2001 University of California. LA-CC Number 01-67.
46 * This software has been authored by an employee or employees of the
47 * University of California, operator of the Los Alamos National
48 * Laboratory under Contract No. W-7405-ENG-36 with the U.S.
49 * Department of Energy. The U.S. Government has rights to use,
50 * reproduce, and distribute this software. If the software is
51 * modified to produce derivative works, such modified software should
52 * be clearly marked, so as not to confuse it with the version
53 * available from LANL.
55 * This software may be used and distributed according to the terms
56 * of the GNU General Public License, incorporated herein by
57 * reference to http://www.gnu.org/licenses/gpl.html.
59 * This software is provided by the author(s) "as is" and any express
60 * or implied warranties, including, but not limited to, the implied
61 * warranties of merchantability and fitness for a particular purpose
62 * are disclaimed. In no event shall the author(s) be liable for any
63 * direct, indirect, incidental, special, exemplary, or consequential
64 * damages (including, but not limited to, procurement of substitute
65 * goods or services; loss of use, data, or profits; or business
66 * interruption) however caused and on any theory of liability,
67 * whether in contract, strict liability, or tort (including
68 * negligence or otherwise) arising in any way out of the use of this
69 * software, even if advised of the possibility of such damage.
71 * $Id: vsmsetup.c,v 1.8 2006/09/08 12:47:57 andrei Exp $
73 * Copyright (C) 2007 Advanced Micro Devices, Inc.
75 *--------------------------------------------------------------------*/
77 /* Modified to be a self sufficient plug in so that it can be used
78 without reliance on other parts of core coreboot
79 (C) 2005 Nick.Barker9@btinternet.com
81 Used initially for epia-m where there are problems getting the bios
82 emulator to successfully run this bios.
85 /* Declare a temporary global descriptor table - necessary because the
86 Core part of the bios no longer sets up any 16 bit segments */
88 /* pointer to original gdt */
92 /* compute the table limit */
93 "__mygdt_limit = __mygdt_end - __mygdt - 1 \n"
95 " .word __mygdt_limit \n"
98 /* selgdt 0, unused */
99 " .word 0x0000, 0x0000 \n"
100 " .byte 0x00, 0x00, 0x00, 0x00 \n"
101 /* selgdt 8, unused */
102 " .word 0x0000, 0x0000 \n"
103 " .byte 0x00, 0x00, 0x00, 0x00 \n"
104 /* selgdt 0x10, flat code segment */
105 " .word 0xffff, 0x0000 \n"
106 " .byte 0x00, 0x9b, 0xcf, 0x00 \n"
107 /* selgdt 0x18, flat data segment */
108 " .word 0xffff, 0x0000 \n"
109 " .byte 0x00, 0x93, 0xcf, 0x00 \n"
110 /* selgdt 0x20, unused */
111 " .word 0x0000, 0x0000 \n"
112 " .byte 0x00, 0x00, 0x00, 0x00 \n"
113 /* selgdt 0x28 16-bit 64k code at 0x00000000 */
114 " .word 0xffff, 0x0000 \n"
115 " .byte 0, 0x9a, 0, 0 \n"
116 /* selgdt 0x30 16-bit 64k data at 0x00000000 */
117 " .word 0xffff, 0x0000 \n"
118 " .byte 0, 0x92, 0, 0 \n"
122 /* Declare a pointer to where our idt is going to be i.e. at mem zero */
132 /* The address arguments to this function are PHYSICAL ADDRESSES */
133 static void real_mode_switch_call_vsm(unsigned long smm, unsigned long sysm)
135 uint16_t entryHi = (VSA2_ENTRY_POINT & 0xffff0000) >> 4;
136 uint16_t entryLo = (VSA2_ENTRY_POINT & 0xffff);
138 __asm__ __volatile__(
139 // paranoia -- does ecx get saved? not sure. This is
140 // the easiest safe thing to do.
143 " mov %%esp, __stack \n"
145 "__stack: .long 0 \n"
147 /* get devfn into %%ecx */
148 " movl %%esp, %%ebp \n"
150 /* I'm not happy about that pushal followed by esp-relative
151 * references. Just do hard-codes for now
153 " movl 8(%%ebp), %%ecx \n"
154 " movl 12(%%ebp), %%edx \n"
159 " lgdt %%cs:__mygdtaddr \n"
160 /* This configures CS properly for real mode. */
161 " ljmp $0x28, $__rms_16bit\n"
164 /* 16 bit code from here on... */
165 /* Load the segment registers w/ properly configured segment
166 * descriptors. They will retain these configurations (limits,
167 * writability, etc.) once protected mode is turned off. */
168 " mov $0x30, %%ax \n"
174 /* Turn off protection (bit 0 in CR0) */
175 " movl %%cr0, %%eax \n"
176 " andl $0xFFFFFFFE, %%eax \n"
177 " movl %%eax, %%cr0 \n"
178 /* Now really going into real mode */
179 " ljmp $0, $__rms_real\n"
182 /* put the stack at the end of page zero.
183 * that way we can easily share it between real and protected,
184 * since the 16-bit ESP at segment 0 will work for any case.
190 " movl $0x1000, %%eax \n"
191 " movl %%eax, %%esp \n"
192 /* Load our 16 it idt */
196 /* Dump zeros in the other segregs */
198 /* FixMe: Big real mode for gs, fs? */
201 " mov $0x40, %%ax \n"
203 //" mov %%cx, %%ax \n"
206 /* call the VSA2 entry point address */
208 /* if we got here, just about done.
209 * Need to get back to protected mode */
210 " movl %%cr0, %%eax \n"
211 " orl $0x0000001, %%eax\n" /* PE = 1 */
212 " movl %%eax, %%cr0 \n"
213 /* Now that we are in protected mode jump to a 32 bit code segment. */
214 " data32 ljmp $0x10, $vsmrestart\n"
217 " movw $0x18, %%ax \n"
223 /* restore proper gdt and idt */
224 " lgdt %%cs:gdtarg \n"
228 " mov __stack, %%esp \n"
230 "g" (smm), "g"(sysm), "g"(entryHi), "g"(entryLo)
234 __asm__(".text\n" "real_mode_switch_end:\n");
235 extern char real_mode_switch_end[];
237 // andrei: some VSA virtual register helpers: raw read and MSR read
239 uint32_t VSA_vrRead(uint16_t classIndex)
241 unsigned eax, ebx, ecx, edx;
243 "movw $0x0AC1C, %%dx \n"
244 "orl $0x0FC530000, %%eax \n"
245 "outl %%eax, %%dx \n"
248 : "=a" (eax), "=b"(ebx), "=c"(ecx), "=d"(edx)
255 uint32_t VSA_msrRead(uint32_t msrAddr)
257 unsigned eax, ebx, ecx, edx;
259 "movw $0x0AC1C, %%dx \n"
260 "movl $0x0FC530007, %%eax \n"
261 "outl %%eax, %%dx \n"
264 : "=a" (eax), "=b"(ebx), "=c"(ecx), "=d"(edx)
271 void do_vsmbios(void)
274 unsigned long busdevfn;
275 unsigned int rom = 0;
277 unsigned int size = SMM_SIZE * 1024;
279 unsigned long ilen, olen;
281 printk_err("do_vsmbios\n");
282 /* clear vsm bios data area */
283 for (i = 0x400; i < 0x500; i++) {
284 *(volatile unsigned char *)i = 0;
287 /* declare rom address here - keep any config data out of the way
288 * of core LXB stuff */
290 /* this is the base of rom on the LX at present. At some point, this has to be
291 * much better parameterized
294 //VSA is cat onto the end after LB builds
295 rom = ((unsigned long)0) - (CONFIG_ROM_SIZE + 36 * 1024);
296 buf = (unsigned char *)VSA2_BUFFER;
297 olen = unrv2b((uint8_t *) rom, buf, &ilen);
298 printk_debug("buf ilen %d olen%d\n", ilen, olen);
299 printk_debug("buf %p *buf %d buf[256k] %d\n",
300 buf, buf[0], buf[SMM_SIZE * 1024]);
301 printk_debug("buf[0x20] signature is %x:%x:%x:%x\n",
302 buf[0x20], buf[0x21], buf[0x22], buf[0x23]);
303 /* check for post code at start of vsainit.bin. If you don't see it,
305 if ((buf[0x20] != 0xb0) || (buf[0x21] != 0x10) ||
306 (buf[0x22] != 0xe6) || (buf[0x23] != 0x80)) {
307 printk_err("do_vsmbios: no vsainit.bin signature, skipping!\n");
311 /* ecx gets smm, edx gets sysm */
312 printk_err("Call real_mode_switch_call_vsm\n");
313 real_mode_switch_call_vsm(MSR_GLIU0_SMM, MSR_GLIU0_SYSMEM);
315 /* restart timer 1 */
319 // check that VSA is running OK
320 if (VSA_vrRead(SIGNATURE) == VSA2_SIGNATURE)
321 printk_debug("do_vsmbios: VSA2 VR signature verified\n");
324 ("do_vsmbios: VSA2 VR signature not valid, install failed!\n");
327 // we had hoped to avoid this.
328 // this is a stub IDT only. It's main purpose is to ignore calls
330 // no longer. Dammit. We have to respond to these.
332 unsigned short offset, cs;
335 // from a handy writeup that andrey found.
338 // There are some assumptions we can make here.
339 // First, the Top Of Stack (TOS) is located on the top of page zero.
340 // we can share this stack between real and protected mode.
341 // that simplifies a lot of things ...
342 // we'll just push all the registers on the stack as longwords,
343 // and pop to protected mode.
344 // second, since this only ever runs as part of coreboot,
345 // we know all the segment register values -- so we don't save any.
346 // keep the handler that calls things small. It can do a call to
347 // more complex code in coreboot itself. This helps a lot as we don't
348 // have to do address fixup in this little stub, and calls are absolute
349 // so the handler is relocatable.
352 __asm__ __volatile__(
357 " ljmp $0, $callbiosint16\n"
363 void debughandler(void)
365 __asm__ __volatile__(
374 "end_debughandle: \n"
379 // Calling conventions. The first C function is called with this stuff
380 // on the stack. They look like value parameters, but note that if you
381 // modify them they will go back to the INTx function modified.
382 // the C function will call the biosint function with these as
383 // REFERENCE parameters. In this way, we can easily get
384 // returns back to the INTx caller (i.e. vgabios)
385 void callbiosint(void)
387 __asm__ __volatile__(
394 // clean up the int #. To save space we put it in the lower
395 // byte. But the top 24 bits are junk.
396 " andl $0xff, %eax\n"
397 // this push does two things:
398 // - put the INT # on the stack as a parameter
399 // - provides us with a temp for the %cr0 mods.
404 " orl $0x00000001, %eax\n" /* PE = 1 */
406 /* Now that we are in protected mode jump to a 32 bit code segment. */
407 " data32 ljmp $0x10, $biosprotect\n"
418 // back to real mode ...
419 " ljmp $0x28, $__rms_16bit2\n"
422 /* 16 bit code from here on... */
423 /* Load the segment registers w/ properly configured segment
424 * descriptors. They will retain these configurations (limits,
425 * writability, etc.) once protected mode is turned off. */
432 /* Turn off protection (bit 0 in CR0) */
433 " movl %cr0, %eax \n"
434 " andl $0xFFFFFFFE, %eax \n"
435 " movl %eax, %cr0 \n"
436 /* Now really going into real mode */
437 " ljmp $0, $__rms_real2 \n"
440 * FixME: where is esp? */
441 /* no need for a fix here. The esp is shared from 32-bit and 16-bit mode.
442 * you have to hack on the ss, but the esp remains the same across
447 /* debugging for RGM */
449 " outb %al, $0x80 \n"
450 /* Load our 16 bit idt */
454 /* Dump zeros in the other segregs */
460 /* pop the INT # that you pushed earlier */
477 int pcibios(unsigned long *pedi, unsigned long *pesi, unsigned long *pebp,
478 unsigned long *pesp, unsigned long *pebx, unsigned long *pedx,
479 unsigned long *pecx, unsigned long *peax, unsigned long *pflags);
481 int handleint21(unsigned long *pedi, unsigned long *pesi, unsigned long *pebp,
482 unsigned long *pesp, unsigned long *pebx, unsigned long *pedx,
483 unsigned long *pecx, unsigned long *peax,
484 unsigned long *pflags);
486 int biosint(unsigned long intnumber,
487 unsigned long gsfs, unsigned long dses,
488 unsigned long edi, unsigned long esi,
489 unsigned long ebp, unsigned long esp,
490 unsigned long ebx, unsigned long edx,
491 unsigned long ecx, unsigned long eax,
492 unsigned long cs_ip, unsigned short stackflags)
503 printk_debug("biosint: INT# 0x%lx\n", intnumber);
504 printk_debug("biosint: eax 0x%lx ebx 0x%lx ecx 0x%lx edx 0x%lx\n",
506 printk_debug("biosint: ebp 0x%lx esp 0x%lx edi 0x%lx esi 0x%lx\n",
508 printk_debug("biosint: ip 0x%x cs 0x%x flags 0x%x\n",
510 printk_debug("biosint: gs 0x%x fs 0x%x ds 0x%x es 0x%x\n",
511 gsfs >> 16, gsfs & 0xffff, dses >> 16, dses & 0xffff);
513 // cases in a good compiler are just as good as your own tables.
516 // These are not BIOS service, but the CPU-generated exceptions
517 printk_info("biosint: Oops, exception %u\n", intnumber);
519 printk_debug("Stack contents: ");
520 while (esp < 0x1000) {
521 printk_debug("0x%04x ", *(unsigned short *)esp);
526 printk_debug("biosint: Bailing out ... not now\n");
532 ret = pcibios(&edi, &esi, &ebp, &esp,
533 &ebx, &edx, &ecx, &eax, &flags);
541 ret = handleint21(&edi, &esi, &ebp, &esp,
542 &ebx, &edx, &ecx, &eax, &flags);
545 printk_info("BIOSINT: Unsupport int #0x%x\n", intnumber);
549 flags |= 1; // carry flags
556 void setup_realmode_idt(void)
558 extern unsigned char idthandle, end_idthandle;
559 extern unsigned char debughandle, end_debughandle;
562 struct realidt *idts = (struct realidt *)0;
563 int codesize = &end_idthandle - &idthandle;
564 unsigned char *intbyte, *codeptr;
566 // for each int, we create a customized little handler
567 // that just pushes %ax, puts the int # in %al,
568 // then calls the common interrupt handler.
569 // this necessitated because intel didn't know much about
570 // architecture when they did the 8086 (it shows)
571 // (hmm do they know anymore even now :-)
572 // obviously you can see I don't really care about memory
573 // efficiency. If I did I would probe back through the stack
574 // and get it that way. But that's really disgusting.
575 for (i = 0; i < 256; i++) {
577 codeptr = (unsigned char *)4096 + i * codesize;
578 idts[i].offset = (unsigned)codeptr;
579 memcpy(codeptr, &idthandle, codesize);
580 intbyte = codeptr + 3;
584 // fixed entry points
586 // VGA BIOSes tend to hardcode f000:f065 as the previous handler of
588 // calling convention here is the same as INTs, we can reuse
589 // the int entry code.
590 codeptr = (unsigned char *)0xff065;
591 memcpy(codeptr, &idthandle, codesize);
592 intbyte = codeptr + 3;
593 *intbyte = 0x42; /* int42 is the relocated int10 */
595 /* debug handler - useful to set a programmable delay between instructions if the
596 TF bit is set upon call to real mode */
598 idts[1].offset = 16384;
599 memcpy((void *)16384, &debughandle, &end_debughandle - &debughandle);
605 READCONFBYTE = 0xb108,
606 READCONFWORD = 0xb109,
607 READCONFDWORD = 0xb10a,
608 WRITECONFBYTE = 0xb10b,
609 WRITECONFWORD = 0xb10c,
610 WRITECONFDWORD = 0xb10d
613 // errors go in AH. Just set these up so that word assigns
616 PCIBIOS_NODEV = 0x8600,
617 PCIBIOS_BADREG = 0x8700
621 pcibios(unsigned long *pedi, unsigned long *pesi, unsigned long *pebp,
622 unsigned long *pesp, unsigned long *pebx, unsigned long *pedx,
623 unsigned long *pecx, unsigned long *peax, unsigned long *pflags)
625 unsigned long edi = *pedi;
626 unsigned long esi = *pesi;
627 unsigned long ebp = *pebp;
628 unsigned long esp = *pesp;
629 unsigned long ebx = *pebx;
630 unsigned long edx = *pedx;
631 unsigned long ecx = *pecx;
632 unsigned long eax = *peax;
633 unsigned long flags = *pflags;
634 unsigned short func = (unsigned short)eax;
636 unsigned short devid, vendorid, devfn;
637 short devindex; /* Use short to get rid of gabage in upper half of 32-bit register */
653 while ((dev = dev_find_device(vendorid, devid, dev))) {
659 unsigned short busdevfn;
661 // busnum is an unsigned char;
662 // devfn is an int, so we mask it off.
663 busdevfn = (dev->bus->secondary << 8)
664 | (dev->path.pci.devfn & 0xff);
665 printk_debug("0x%x: return 0x%x\n", func,
670 *peax = PCIBIOS_NODEV;
687 devfn = *pebx & 0xff;
690 dev = dev_find_slot(bus, devfn);
693 ("0x%x: BAD DEVICE bus %d devfn 0x%x\n",
695 // idiots. the pcibios guys assumed you'd never pass a bad bus/devfn!
696 *peax = PCIBIOS_BADREG;
701 byte = pci_read_config8(dev, reg);
705 word = pci_read_config16(dev, reg);
709 dword = pci_read_config32(dev, reg);
714 pci_write_config8(dev, reg, byte);
718 pci_write_config16(dev, reg, word);
722 pci_write_config32(dev, reg, dword);
727 retval = PCIBIOS_BADREG;
729 ("0x%x: bus %d devfn 0x%x reg 0x%x val 0x%lx\n",
730 func, bus, devfn, reg, *pecx);
736 printk_err("UNSUPPORTED PCIBIOS FUNCTION 0x%x\n", func);
743 int handleint21(unsigned long *edi, unsigned long *esi, unsigned long *ebp,
744 unsigned long *esp, unsigned long *ebx, unsigned long *edx,
745 unsigned long *ecx, unsigned long *eax, unsigned long *flags)
748 printk_debug("handleint21, eax 0x%x\n", *eax);
749 switch (*eax & 0xffff) {
754 *ebx = 0x545; // MCLK = 133, 32M frame buffer, 256 M main memory
763 *ecx = (*ecx & 0xffffff00) | 2; // panel type = 2 = 1024 * 768
768 *ebx = (*ebx & 0xffff0000) | 2;
769 *ecx = (*ecx & 0xffff0000) | 0x401; // PAL + crt only
770 *edx = (*edx & 0xffff0000) | 0; // TV Layout - default