1 #include <console/console.h>
2 #include <device/device.h>
3 #include <device/pci.h>
4 #include <device/pci_ids.h>
5 #include <device/pci_ops.h>
12 /* vgabios.c. Derived from: */
14 /*------------------------------------------------------------ -*- C -*-
15 * 2 Kernel Monte a.k.a. Linux loading Linux on x86
17 * Erik Arjan Hendriks <hendriks@lanl.gov>
19 * This version is a derivative of the original two kernel monte
20 * which is (C) 2000 Scyld.
22 * Copyright (C) 2000 Scyld Computing Corporation
24 * This program is free software; you can redistribute it and/or modify
25 * it under the terms of the GNU General Public License as published by
26 * the Free Software Foundation; either version 2 of the License, or
27 * (at your option) any later version.
29 * This program is distributed in the hope that it will be useful,
30 * but WITHOUT ANY WARRANTY; without even the implied warranty of
31 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
32 * GNU General Public License for more details.
34 * You should have received a copy of the GNU General Public License
35 * along with this program; if not, write to the Free Software
36 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA.
38 * Portions related to the alpha architecture are:
40 * Copyright(C) 2001 University of California. LA-CC Number 01-67.
41 * This software has been authored by an employee or employees of the
42 * University of California, operator of the Los Alamos National
43 * Laboratory under Contract No. W-7405-ENG-36 with the U.S.
44 * Department of Energy. The U.S. Government has rights to use,
45 * reproduce, and distribute this software. If the software is
46 * modified to produce derivative works, such modified software should
47 * be clearly marked, so as not to confuse it with the version
48 * available from LANL.
50 * This software may be used and distributed according to the terms
51 * of the GNU General Public License, incorporated herein by
52 * reference to http://www.gnu.org/licenses/gpl.html.
54 * This software is provided by the author(s) "as is" and any express
55 * or implied warranties, including, but not limited to, the implied
56 * warranties of merchantability and fitness for a particular purpose
57 * are disclaimed. In no event shall the author(s) be liable for any
58 * direct, indirect, incidental, special, exemplary, or consequential
59 * damages (including, but not limited to, procurement of substitute
60 * goods or services; loss of use, data, or profits; or business
61 * interruption) however caused and on any theory of liability,
62 * whether in contract, strict liability, or tort (including
63 * negligence or otherwise) arising in any way out of the use of this
64 * software, even if advised of the possibility of such damage.
66 * $Id: vgabios.c,v 1.100 2006/09/12 15:31:49 indrek Exp $
67 *--------------------------------------------------------------------*/
69 /* Modified to be a self sufficient plug in so that it can be used
70 without reliance on other parts of core coreboot
71 (C) 2005 Nick.Barker9@btinternet.com
73 Used initially for epia-m where there are problems getting the bios
74 emulator to successfully run this bios.
77 /* Declare a temporary global descriptor table - necessary because the
78 Core part of the bios no longer sets up any 16 bit segments */
80 /* pointer to original gdt */
85 /* compute the table limit */
86 "__mygdt_limit = __mygdt_end - __mygdt - 1 \n"
89 " .word __mygdt_limit \n"
93 /* selgdt 0, unused */
94 " .word 0x0000, 0x0000 \n"
95 " .byte 0x00, 0x00, 0x00, 0x00 \n"
97 /* selgdt 8, unused */
98 " .word 0x0000, 0x0000 \n"
99 " .byte 0x00, 0x00, 0x00, 0x00 \n"
101 /* selgdt 0x10, flat code segment */
102 " .word 0xffff, 0x0000 \n"
103 " .byte 0x00, 0x9b, 0xcf, 0x00 \n"
105 /* selgdt 0x18, flat data segment */
106 " .word 0xffff, 0x0000 \n"
107 " .byte 0x00, 0x93, 0xcf, 0x00 \n"
109 /* selgdt 0x20, unused */
110 " .word 0x0000, 0x0000 \n"
111 " .byte 0x00, 0x00, 0x00, 0x00 \n"
113 /* selgdt 0x28 16-bit 64k code at 0x00000000 */
114 " .word 0xffff, 0x0000 \n"
115 " .byte 0, 0x9a, 0, 0 \n"
117 /* selgdt 0x30 16-bit 64k data at 0x00000000 */
118 " .word 0xffff, 0x0000 \n"
119 " .byte 0, 0x92, 0, 0 \n"
124 /* Declare a pointer to where our idt is going to be i.e. at mem zero */
125 __asm__ ("__myidt: \n"
133 /* The address arguments to this function are PHYSICAL ADDRESSES */
134 static void real_mode_switch_call_vga(unsigned long devfn)
136 __asm__ __volatile__ (
137 // paranoia -- does ecx get saved? not sure. This is
138 // the easiest safe thing to do.
141 " mov %esp, __stack \n"
143 "__stack: .long 0 \n"
145 /* get devfn into %ecx */
146 " movl %esp, %ebp \n"
147 " movl 8(%ebp), %ecx \n"
149 " lgdt %cs:__mygdtaddr \n"
151 /* This configures CS properly for real mode. */
152 " ljmp $0x28, $__rms_16bit\n"
155 /* 16 bit code from here on... */
157 /* Load the segment registers w/ properly configured segment
158 * descriptors. They will retain these configurations (limits,
159 * writability, etc.) once protected mode is turned off. */
167 /* Turn off protection (bit 0 in CR0) */
168 " movl %cr0, %eax \n"
169 " andl $0xFFFFFFFE, %eax \n"
170 " movl %eax, %cr0 \n"
172 /* Now really going into real mode */
173 " ljmp $0, $__rms_real\n"
176 /* put the stack at the end of page zero.
177 * that way we can easily share it between real and protected,
178 * since the 16-bit ESP at segment 0 will work for any case. */
182 " movl $0x1000, %eax \n"
183 " movl %eax, %esp \n"
185 /* Load our 16 it idt */
190 /* Dump zeros in the other segregs */
198 /* run VGA BIOS at 0xc000:0003 */
199 " lcall $0xc000, $0x0003\n"
201 /* if we got here, just about done.
202 * Need to get back to protected mode */
203 " movl %cr0, %eax \n"
204 " orl $0x0000001, %eax\n" /* PE = 1 */
205 " movl %eax, %cr0 \n"
207 /* Now that we are in protected mode jump to a 32 bit code segment. */
208 " data32 ljmp $0x10, $vgarestart\n"
211 " movw $0x18, %ax \n"
218 /* restore proper gdt and idt */
219 " lgdt %cs:gdtarg \n"
224 " mov __stack, %esp \n"
229 __asm__ (".text\n""real_mode_switch_end:\n");
230 extern char real_mode_switch_end[];
232 /* ============================================================================================
236 void do_vgabios(device_t dev)
239 unsigned long busdevfn;
240 unsigned int rom = cbfs_load_optionrom(dev->vendor, dev->device, 0);
242 unsigned int size = 64*1024;
245 /* clear vga bios data area */
246 for (i = 0x400; i < 0x500; i++) {
247 *(unsigned char *) i = 0;
251 printk_debug("NO VGA FOUND\n");
254 printk_debug("found VGA: vid=%x, did=%x\n", dev->vendor, dev->device);
256 /* declare rom address here - keep any config data out of the way
257 * of core LXB stuff */
259 //pci_write_config32(dev, PCI_ROM_ADDRESS, rom|1);
260 printk_debug("rom base, size: %x\n", rom);
262 buf = (unsigned char *) rom;
263 if ((buf[0] == 0x55) && (buf[1] == 0xaa)) {
264 memcpy((void *) 0xc0000, buf, size);
266 // write_protect_vgabios(); // in northbridge, not universal
268 // check signature again
269 buf = (unsigned char *) 0xc0000;
270 if (buf[0]==0x55 && buf[1]==0xAA) {
271 busdevfn = (dev->bus->secondary << 8) | dev->path.pci.devfn;
272 printk_debug("bus/devfn = %#x\n", busdevfn);
274 real_mode_switch_call_vga(busdevfn);
276 printk_debug("Failed to copy VGA BIOS to 0xc0000\n");
278 printk_debug("BAD SIGNATURE 0x%x 0x%x\n", buf[0], buf[1]);
280 pci_write_config32(dev, PCI_ROM_ADDRESS, 0);
283 /* ============================================================================================
284 /* call vga bios int 10 function 0x4f14 to enable main console
286 * vga bios does not always autosence the main console so forcing it on is good !!
288 static void vga_enable_console(void)
290 __asm__ __volatile__ (
291 /* paranoia -- does ecx get saved? not sure. This is
292 * the easiest safe thing to do. */
295 " mov %esp, __stack \n"
298 " lgdt %cs:__mygdtaddr \n"
300 /* This configures CS properly for real mode. */
301 " ljmp $0x28, $__vga_ec_16bit\n"
304 /* 16 bit code from here on... */
306 /* Load the segment registers w/ properly configured segment
307 * descriptors. They will retain these configurations (limits,
308 * writability, etc.) once protected mode is turned off. */
316 /* Turn off protection (bit 0 in CR0) */
317 " movl %cr0, %eax \n"
318 " andl $0xFFFFFFFE, %eax\n"
319 " movl %eax, %cr0 \n"
321 /* Now really going into real mode */
322 " ljmp $0, $__vga_ec_real \n"
325 /* put the stack at the end of page zero.
326 * that way we can easily share it between real and protected,
327 * since the 16-bit ESP at segment 0 will work for any case. */
331 " movl $0x1000, %eax \n"
332 " movl %eax, %esp \n"
334 /* debugging for RGM */
336 " outb %al, $0x80 \n"
338 /* Load our 16 it idt */
343 /* Dump zeros in the other segregs */
349 /* ask bios to enable main console */
350 /* set up for int 10 call - values found from X server
351 * bios call routines */
352 " movw $0x4f14,%ax \n"
353 " movw $0x8003,%bx \n"
359 " movb $0x55, %al \n"
360 " outb %al, $0x80 \n"
362 /* if we got here, just about done.
363 * Need to get back to protected mode */
364 " movl %cr0, %eax \n"
365 " orl $0x0000001, %eax\n" /* PE = 1 */
366 " movl %eax, %cr0 \n"
368 /* Now that we are in protected mode jump to a 32 bit code segment. */
369 " data32 ljmp $0x10, $vga_ec_restart\n"
372 " movw $0x18, %ax \n"
379 /* restore proper gdt and idt */
380 " lgdt %cs:gdtarg \n"
382 " .globl vga__ec_exit \n"
384 " mov __stack, %esp \n"
393 /* ============================================================================================
394 * real-mode interrupt handlers.
395 * These are handled because VGA ROMs tend to call bios ints in real mode
399 // we had hoped to avoid this.
400 // this is a stub IDT only. It's main purpose is to ignore calls
402 // no longer. Dammit. We have to respond to these.
404 unsigned short offset, cs;
407 // from a handy writeup that andrey found.
410 // There are some assumptions we can make here.
411 // First, the Top Of Stack (TOS) is located on the top of page zero.
412 // we can share this stack between real and protected mode.
413 // that simplifies a lot of things ...
414 // we'll just push all the registers on the stack as longwords,
415 // and pop to protected mode.
416 // second, since this only ever runs as part of coreboot,
417 // we know all the segment register values -- so we don't save any.
418 // keep the handler that calls things small. It can do a call to
419 // more complex code in coreboot itself. This helps a lot as we don't
420 // have to do address fixup in this little stub, and calls are absolute
421 // so the handler is relocatable.
422 void handler_vga(void)
424 __asm__ __volatile__ (
429 " ljmp $0, $callbiosint16\n"
435 void debughandler_vga(void)
437 __asm__ __volatile__ (
446 "end_debughandle: \n"
451 // Calling conventions. The first C function is called with this stuff
452 // on the stack. They look like value parameters, but note that if you
453 // modify them they will go back to the INTx function modified.
454 // the C function will call the biosint function with these as
455 // REFERENCE parameters. In this way, we can easily get
456 // returns back to the INTx caller (i.e. vgabios)
457 void callbiosint_vga(void)
459 __asm__ __volatile__ (
466 // clean up the int #. To save space we put it in the lower
467 // byte. But the top 24 bits are junk.
468 " andl $0xff, %eax\n"
469 // this push does two things:
470 // - put the INT # on the stack as a parameter
471 // - provides us with a temp for the %cr0 mods.
474 " orl $0x00000001, %eax\n" /* PE = 1 */
476 /* Now that we are in protected mode jump to a 32 bit code segment. */
477 " data32 ljmp $0x10, $biosprotect\n"
480 " movw $0x18, %ax \n"
487 " call biosint_vga \n"
488 // back to real mode ...
489 " ljmp $0x28, $__rms_16bit2\n"
492 /* 16 bit code from here on... */
493 /* Load the segment registers w/ properly configured segment
494 * descriptors. They will retain these configurations (limits,
495 * writability, etc.) once protected mode is turned off. */
503 /* Turn off protection (bit 0 in CR0) */
504 " movl %cr0, %eax \n"
505 " andl $0xFFFFFFFE, %eax \n"
506 " movl %eax, %cr0 \n"
508 /* Now really going into real mode */
509 " ljmp $0, $__rms_real2 \n"
513 * FixME: where is esp? */
517 /* ebugging for RGM */
519 " outb %al, $0x80 \n"
521 /* Load our 16 it idt */
526 /* Dump zeros in the other segregs */
533 /* pop the INT # that you pushed earlier */
554 int pcibios_vga(unsigned long *pedi, unsigned long *pesi, unsigned long *pebp,
555 unsigned long *pesp, unsigned long *pebx, unsigned long *pedx,
556 unsigned long *pecx, unsigned long *peax, unsigned long *pflags);
558 int handleint21_vga(unsigned long *pedi, unsigned long *pesi, unsigned long *pebp,
559 unsigned long *pesp, unsigned long *pebx, unsigned long *pedx,
560 unsigned long *pecx, unsigned long *peax, unsigned long *pflags
563 extern void vga_exit(void);
565 int biosint_vga(unsigned long intnumber,
566 unsigned long gsfs, unsigned long dses,
567 unsigned long edi, unsigned long esi,
568 unsigned long ebp, unsigned long esp,
569 unsigned long ebx, unsigned long edx,
570 unsigned long ecx, unsigned long eax,
571 unsigned long cs_ip, unsigned short stackflags)
582 printk_debug("biosint: INT# 0x%lx\n", intnumber);
583 printk_debug("biosint: eax 0x%lx ebx 0x%lx ecx 0x%lx edx 0x%lx\n",
585 printk_debug("biosint: ebp 0x%lx esp 0x%lx edi 0x%lx esi 0x%lx\n",
587 printk_debug("biosint: ip 0x%x cs 0x%x flags 0x%x\n",
590 // cases in a good compiler are just as good as your own tables.
593 // These are not BIOS service, but the CPU-generated exceptions
594 printk_info("biosint: Oops, exception %u\n", intnumber);
596 printk_debug("Stack contents: ");
597 while (esp < 0x1000) {
598 printk_debug("0x%04x ", *(unsigned short *) esp);
603 printk_debug("biosint: Bailing out\n");
609 ret = pcibios_vga( &edi, &esi, &ebp, &esp,
610 &ebx, &edx, &ecx, &eax, &flags);
618 ret=handleint21_vga( &edi, &esi, &ebp, &esp,
619 &ebx, &edx, &ecx, &eax, &flags);
622 printk_info("BIOSINT: Unsupport int #0x%x\n",
627 flags |= 1; // carry flags
640 READCONFBYTE = 0xb108,
641 READCONFWORD = 0xb109,
642 READCONFDWORD = 0xb10a,
643 WRITECONFBYTE = 0xb10b,
644 WRITECONFWORD = 0xb10c,
645 WRITECONFDWORD = 0xb10d
648 // errors go in AH. Just set these up so that word assigns
651 PCIBIOS_NODEV = 0x8600,
652 PCIBIOS_BADREG = 0x8700
656 pcibios_vga(unsigned long *pedi, unsigned long *pesi, unsigned long *pebp,
657 unsigned long *pesp, unsigned long *pebx, unsigned long *pedx,
658 unsigned long *pecx, unsigned long *peax, unsigned long *pflags)
660 unsigned long edi = *pedi;
661 unsigned long esi = *pesi;
662 unsigned long ebp = *pebp;
663 unsigned long esp = *pesp;
664 unsigned long ebx = *pebx;
665 unsigned long edx = *pedx;
666 unsigned long ecx = *pecx;
667 unsigned long eax = *peax;
668 unsigned long flags = *pflags;
669 unsigned short func = (unsigned short) eax;
671 unsigned short devid, vendorid, devfn;
672 short devindex; /* Use short to get rid of gabage in upper half of 32-bit register */
688 while ((dev = dev_find_device(vendorid, devid, dev))) {
694 unsigned short busdevfn;
696 // busnum is an unsigned char;
697 // devfn is an int, so we mask it off.
698 busdevfn = (dev->bus->secondary << 8)
699 | (dev->path.pci.devfn & 0xff);
700 printk_debug("0x%x: return 0x%x\n", func, busdevfn);
704 *peax = PCIBIOS_NODEV;
721 devfn = *pebx & 0xff;
724 dev = dev_find_slot(bus, devfn);
726 printk_debug("0x%x: BAD DEVICE bus %d devfn 0x%x\n", func, bus, devfn);
727 // idiots. the pcibios guys assumed you'd never pass a bad bus/devfn!
728 *peax = PCIBIOS_BADREG;
733 byte = pci_read_config8(dev, reg);
737 word = pci_read_config16(dev, reg);
741 dword = pci_read_config32(dev, reg);
746 pci_write_config8(dev, reg, byte);
750 pci_write_config16(dev, reg, word);
754 pci_write_config32(dev, reg, dword);
759 retval = PCIBIOS_BADREG;
760 printk_debug("0x%x: bus %d devfn 0x%x reg 0x%x val 0x%lx\n",
761 func, bus, devfn, reg, *pecx);
767 printk_err("UNSUPPORTED PCIBIOS FUNCTION 0x%x\n", func);
774 int handleint21_vga(unsigned long *edi, unsigned long *esi, unsigned long *ebp,
775 unsigned long *esp, unsigned long *ebx, unsigned long *edx,
776 unsigned long *ecx, unsigned long *eax, unsigned long *flags)
785 *ebx=0x545; // MCLK = 133, 32M frame buffer, 256 M main memory
794 *ecx = (*ecx & 0xffffff00 ) | 2; // panel type = 2 = 1024 * 768
799 *ebx= (*ebx & 0xffff0000) | 2;
800 *ecx= (*ecx & 0xffff0000) | 0x401; // PAL + crt only
801 *edx= (*edx & 0xffff0000) | 0; // TV Layout - default
814 /* ============================================================================================
815 * This function sets up bios and pci interrupt handlers for real mode
816 * This is needed when running VGA BIOS in real mode
820 void setup_realmode_idt_vga(void)
822 extern unsigned char idthandle, end_idthandle;
823 extern unsigned char debughandle, end_debughandle;
826 struct realidt *idts = (struct realidt *) 0;
827 int codesize = &end_idthandle - &idthandle;
828 unsigned char *intbyte, *codeptr;
830 // for each int, we create a customized little handler
831 // that just pushes %ax, puts the int # in %al,
832 // then calls the common interrupt handler.
833 // this necessitated because intel didn't know much about
834 // architecture when they did the 8086 (it shows)
835 // (hmm do they know anymore even now :-)
836 // obviously you can see I don't really care about memory
837 // efficiency. If I did I would probe back through the stack
838 // and get it that way. But that's really disgusting.
839 for (i = 0; i < 256; i++) {
841 codeptr = (char*) 4096 + i * codesize;
842 idts[i].offset = (unsigned) codeptr;
843 memcpy(codeptr, &idthandle, codesize);
844 intbyte = codeptr + 3;
848 // fixed entry points
850 // VGA BIOSes tend to hardcode f000:f065 as the previous handler of
852 // calling convention here is the same as INTs, we can reuse
853 // the int entry code.
854 codeptr = (char*) 0xff065;
855 memcpy(codeptr, &idthandle, codesize);
856 intbyte = codeptr + 3;
857 *intbyte = 0x42; /* int42 is the relocated int10 */
859 /* debug handler - useful to set a programmable delay between instructions if the
860 TF bit is set upon call to real mode */
862 idts[1].offset = 16384;
863 memcpy(16384, &debughandle, &end_debughandle - &debughandle);
882 /* ============================================================================================
883 * initializes vga bios during device initialization
885 static void vga_init(device_t dev)
887 struct drivers_pci_realmode_config *cfg = (struct drivers_pci_realmode_config *)dev->chip_info;
889 // code to make vga init go through the emulator - as of yet this does not workfor the epia-m
893 // code to make vga init run in real mode - does work but against the current coreboot philosophy
894 printk_debug("INSTALL REAL-MODE IDT\n");
895 setup_realmode_idt();
896 printk_debug("DO THE VGA BIOS\n");
899 vga_enable_console();
901 pci_write_config32(dev,0x30,0);
905 // device operations : on vga device init, call vga_init
906 static struct device_operations drivers_pci_realmode_dev_ops = {
908 .read_resources = pci_dev_read_resources,
909 .set_resources = pci_dev_set_resources,
910 .enable_resources = pci_dev_enable_resources,
915 /* ============================================================================================
916 * FIRST LOOP : traversing static.c list and enabling all chips found in there
917 * set given device operations descriptor to call vga_initialize
920 void vga_configure_pci(device_t dev){
921 printk_debug("Setting VGA callback\n");
922 dev->ops = &drivers_pci_realmode_dev_ops;
925 // PCI VGA device operations
926 struct chip_operations drivers_pci_realmode_ops = {
927 .enable_dev = vga_configure_pci,