March 2013 - SerialICE - mail.coreboot.org

New patch to review for serialice: fe98c8a Fix SMBus parser
by Kyösti Mälkki March 13, 2013

March 13, 2013

Kyösti Mälkki (kyosti.malkki(a)gmail.com) just uploaded a new patch set to gerrit, which you can find at http://review.coreboot.org/2703 -gerrit commit fe98c8a51a5a1a9cd28cb3cd9f8270288793e488 Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Tue Mar 12 00:18:13 2013 +0200 Fix SMBus parser If no SMBus device responds to an address (a NAK condition), the parser state machine did not log the transaction immediately. Once it did log it, the transaction already contained a different SMbus address. Bad output: 03ac.03b0 .H.. [0000:fff87a30] i801-smbus: 50 byte_data 02 => 08 0000.0000 .... [0000:fff87a01] i801-smbus: 52 byte_data 02 => 00 (TIMEOUT) 04bb.04be .H.. [0000:fff87a30] i801-smbus: 52 byte_data 02 => 08 Correct output: 03ac.03b0 .H.. [0000:fff87a30] i801-smbus: 50 byte_data 02 => 08 0465.0466 .H.. [0000:fff87a18] i801-smbus: 51 byte_data 02 => xx (TIMEOUT) 04bb.04be .H.. [0000:fff87a30] i801-smbus: 52 byte_data 02 => 08 Change-Id: I1ba5be04e7c16267c657bc612220adf9ea6e5673 Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> --- SerialICE/simba/smbus_host.lua | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/SerialICE/simba/smbus_host.lua b/SerialICE/simba/smbus_host.lua index 161bc42..1da4b0c 100644 --- a/SerialICE/simba/smbus_host.lua +++ b/SerialICE/simba/smbus_host.lua @@ -275,9 +275,9 @@ local function host_change_state(f, prev_state, new_state) host_jump(f, HOST_ACTIVE) end --- elseif smbus.state(f, HOST_FAIL) then --- dump_transaction(f, f.host.action) --- host_jump(f, HOST_ACTIVE) + elseif smbus.state(f, HOST_FAIL) then + dump_transaction(f, f.host.action) + host_jump(f, HOST_ACTIVE) end end

1 0

New patch to review for serialice: adcdf7d Move board and chipset files
by Kyösti Mälkki March 13, 2013

March 13, 2013

Kyösti Mälkki (kyosti.malkki(a)gmail.com) just uploaded a new patch set to gerrit, which you can find at http://review.coreboot.org/2704 -gerrit commit adcdf7dd2ceb767442bbfcfbfcae1aac57294c15 Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Sat Mar 9 10:37:43 2013 +0200 Move board and chipset files Add some structure to the tree and improve script loading. Change-Id: I18221246a706faa278032b4f6444bbcbb93cefeb Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> --- SerialICE/simba/aopen_dxpl_plus.lua | 142 ------ SerialICE/simba/asrock_775i65g.lua | 13 - SerialICE/simba/asus_p4p800_vm.lua | 84 ---- SerialICE/simba/chipset/i82801.lua | 182 ++++++++ SerialICE/simba/chipset/intel_bars.lua | 110 +++++ SerialICE/simba/chipset/intel_smbus.lua | 258 +++++++++++ SerialICE/simba/chipset/pc80.lua | 534 ++++++++++++++++++++++ SerialICE/simba/chipset/smbus_host.lua | 558 +++++++++++++++++++++++ SerialICE/simba/chipset/superio.lua | 262 +++++++++++ SerialICE/simba/chipset/via_bars.lua | 30 ++ SerialICE/simba/commell_lv_672.lua | 57 --- SerialICE/simba/conroexfire_esata2.lua | 86 ---- SerialICE/simba/i82801.lua | 182 -------- SerialICE/simba/intel_bars.lua | 110 ----- SerialICE/simba/intel_d845gbv2.lua | 92 ---- SerialICE/simba/intel_d946gzis.lua | 77 ---- SerialICE/simba/intel_smbus.lua | 258 ----------- SerialICE/simba/mainboard/aopen_dxpl_plus.lua | 142 ++++++ SerialICE/simba/mainboard/asrock_775i65g.lua | 13 + SerialICE/simba/mainboard/asus_p4p800_vm.lua | 84 ++++ SerialICE/simba/mainboard/commell_lv_672.lua | 57 +++ SerialICE/simba/mainboard/conroexfire_esata2.lua | 86 ++++ SerialICE/simba/mainboard/intel_d845gbv2.lua | 92 ++++ SerialICE/simba/mainboard/intel_d946gzis.lua | 77 ++++ SerialICE/simba/mainboard/msi_ms7133.lua | 69 +++ SerialICE/simba/mainboard/via_epia_m_850.lua | 164 +++++++ SerialICE/simba/msi_ms7133.lua | 69 --- SerialICE/simba/pc80.lua | 534 ---------------------- SerialICE/simba/serialice.lua | 17 +- SerialICE/simba/smbus_host.lua | 558 ----------------------- SerialICE/simba/superio.lua | 262 ----------- SerialICE/simba/via_bars.lua | 30 -- SerialICE/simba/via_epia_m_850.lua | 164 ------- 33 files changed, 2730 insertions(+), 2723 deletions(-) diff --git a/SerialICE/simba/aopen_dxpl_plus.lua b/SerialICE/simba/aopen_dxpl_plus.lua deleted file mode 100644 index e8284d3..0000000 --- a/SerialICE/simba/aopen_dxpl_plus.lua +++ /dev/null @@ -1,142 +0,0 @@ --- SerialICE --- --- Copyright (c) 2012 Kyösti Mälkki <kyosti.malkki(a)gmail.com> --- --- Permission is hereby granted, free of charge, to any person obtaining a copy --- of this software and associated documentation files (the "Software"), to deal --- in the Software without restriction, including without limitation the rights --- to use, copy, modify, merge, publish, distribute, sublicense, and/or sell --- copies of the Software, and to permit persons to whom the Software is --- furnished to do so, subject to the following conditions: --- --- The above copyright notice and this permission notice shall be included in --- all copies or substantial portions of the Software. --- --- THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR --- IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, --- FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL --- THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER --- LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, --- OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN --- THE SOFTWARE. --- - -dofile("i82801.lua") -dofile("intel_bars.lua") - --- ********************************************************** --- - -function mainboard_io_read(f, action) - -- Some timer loop - if ( action.addr == 0x61 ) then - if ( regs.eip == 0x1634 ) then - regs.ecx = 0x01 - return fake_action(f, action, 0x20) - end - if ( regs.eip == 0x163a ) then - regs.ecx = 0x01 - return fake_action(f, action, 0x30) - end - end - - -- IO slowdown - if action.addr == 0xed then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - if action.addr == 0xcfb then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - return skip_filter(f, action) -end - - -function mainboard_io_write(f, action) - - -- Catch RAM controller ready. - if action.addr == 0x80 and action.data == 0x2c and not ram_enabled() then - enable_ram() - end - - if action.addr == 0xcfb then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - if action.addr == 0xed then - if ( regs.eip == 0x1792 ) then - regs.ecx = 0x01 - end -if false then - -- SIPI delay - if ( regs.eip == 0xb3bc or regs.eip == 0xb3bf ) then - regs.ecx = 0x01 - end - if ( regs.eip == 0xb4ad or regs.eip == 0xb4af ) then - regs.ecx = 0x01 - end -end - ignore_action(f, action) - return drop_action(f, action, action.data) - end - - return skip_filter(f, action) -end - -function mainboard_io_pre(f, action) - if action.write then - return mainboard_io_write(f, action) - else - return mainboard_io_read(f, action) - end -end - -function mainboard_io_post(f, action) - if action.addr == 0xed or action.addr == 0xcfb then - return true - end - - -- If KBD controller returns status=0xff, clear 0x02. - if action.addr == 0x64 and not action.write and action.size == 1 then - if action.data == 0xff then - -- tag these but give out correct data - fake_action(f, action, action.data) - end - end -end - -filter_mainboard = { - name = "AOpen", - pre = mainboard_io_pre, - post = mainboard_io_post, - hide = hide_mainboard_io, - base = 0x0, - size = 0x10000 -} - - -function do_mainboard_setup() - enable_hook(io_hooks, filter_pci_io_cfg) - enable_hook(mem_hooks, filter_lapic) - enable_hook(mem_hooks, filter_ioapic) - - enable_hook(cpumsr_hooks, filter_intel_microcode) - enable_hook(cpuid_hooks, filter_multiprocessor) - - -- I have a hook to detect RAM initialisation from - -- a POST code I can skip this here - --enable_ram() - - enable_hook_pc80() - enable_hook_superio(0x2e, 0x07) - --enable_hook(io_hooks, filter_com1) - enable_hook_i82801dx() - northbridge_e7505() - - -- Apply mainboard hooks last, so they are the first ones to check - enable_hook(io_hooks, filter_mainboard) -end diff --git a/SerialICE/simba/asrock_775i65g.lua b/SerialICE/simba/asrock_775i65g.lua deleted file mode 100644 index 7aeb68d..0000000 --- a/SerialICE/simba/asrock_775i65g.lua +++ /dev/null @@ -1,13 +0,0 @@ - -dofile("i82801.lua") -dofile("intel_bars.lua") - -function do_mainboard_setup() - do_default_setup() - - enable_hook_i82801dx() - northbridge_i845() - - -- Apply mainboard hooks last, so they are the first ones to check - --enable_hook(io_hooks, filter_mainboard) -end diff --git a/SerialICE/simba/asus_p4p800_vm.lua b/SerialICE/simba/asus_p4p800_vm.lua deleted file mode 100644 index e4ed836..0000000 --- a/SerialICE/simba/asus_p4p800_vm.lua +++ /dev/null @@ -1,84 +0,0 @@ - - -function mainboard_io_read(f, action) - -- Some timer loop - if ( action.addr == 0x61 ) then - if ( regs.eip == 0x1634 ) then - regs.ecx = 0x01 - return fake_action(f, action, 0x20) - end - if ( regs.eip == 0x163a ) then - regs.ecx = 0x01 - return fake_action(f, action, 0x30) - end - end - - -- IO slowdown - if action.addr == 0xed then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - if action.addr == 0xcfb then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - return skip_filter(f, action) -end - - -function mainboard_io_write(f, action) - - - if action.addr == 0xcfb then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - if action.addr == 0xe1 then - ignore_action(f, action) - return drop_action(f, action, action.data) - end - - return skip_filter(f, action) -end - -function mainboard_io_pre(f, action) - if action.write then - return mainboard_io_write(f, action) - else - return mainboard_io_read(f, action) - end -end - -function mainboard_io_post(f, action) - if action.addr == 0xe1 or action.addr == 0xed or action.addr == 0xcfb then - return true - end - if action.addr == 0x80 and not action.write then - return true - end -end - -filter_mainboard = { - name = "test", - pre = mainboard_io_pre, - post = mainboard_io_post, - hide = hide_mainboard_io, - base = 0x0, - size = 0x10000 -} - -dofile("i82801.lua") -dofile("intel_bars.lua") - -function do_mainboard_setup() - do_default_setup() - - enable_hook_i82801dx() - northbridge_i845() - - -- Apply mainboard hooks last, so they are the first ones to check - enable_hook(io_hooks, filter_mainboard) -end diff --git a/SerialICE/simba/chipset/i82801.lua b/SerialICE/simba/chipset/i82801.lua new file mode 100644 index 0000000..24da007 --- /dev/null +++ b/SerialICE/simba/chipset/i82801.lua @@ -0,0 +1,182 @@ +-- ********************************************************** +-- +-- SMBus controller handling + + +load_filter("intel_smbus") + +function smbus_bar_hook(f, action) + intel_smbus_setup(action.data, 0x20) +end + +dev_sb_lpc = { + pci_dev = pci_bdf(0x0,0x1f,0x3,0x0), + name = "Smbus", + bar = {}, +} + +function enable_smbus_host_bar() + pci_cfg16_hook(dev_sb_lpc, 0x20, "SMBus", smbus_bar_hook) +end + + +-- ********************************************************** +-- + +dev_power = { + pci_dev = pci_bdf(0x0,0x1f,0x0,0x0), + name = "SYS", + bar = {}, + acpi = { f = nil }, + tco = { f = nil }, +} + +function pm_io_bar(f, action) + f.dev.acpi.name = "ACPI" + f.dev.acpi.val = action.data + f.dev.acpi.size = 0x60 + generic_io_bar(f.dev.acpi) + + f.dev.tco.name = "TCO" + f.dev.tco.val = action.data + 0x60 + f.dev.tco.size = 0x20 + generic_io_bar(f.dev.tco) +end + +function lpc_io_bar(f, action) + local base = bit32.band(action.data, 0xffff) + local mask = bit32.bor(bit32.rshift(action.data, 16), 3) + local size = mask + 1 + + base = bit32.band(base, bit32.bnot(mask)) + + add_bar(f.dev, f.reg, "LPC", size) + f.dev.bar[f.reg].val = base + generic_io_bar(f.dev.bar[f.reg]) +end + +function lpc_protect_serial_port(f, action) + drop_action(f, action, 0) +end + +-- ********************************************************** +-- +-- AC '97 controller handling + + +dev_audio = { + pci_dev = pci_bdf(0x0,0x1f,0x5,0x0), + name = "Audio", + bar = {} +} + +function enable_audio_bars() + add_io_bar(dev_audio, 0x10, "NAMBAR", 0x100) + add_io_bar(dev_audio, 0x14, "NABMBAR", 0x40) + add_mem_bar(dev_audio, 0x18, "MMBAR", 0x200) + add_mem_bar(dev_audio, 0x1C, "MBBAR", 0x100) +end + +dev_modem = { + pci_dev = pci_bdf(0x0,0x1f,0x6,0x0), + name = "Modem", + bar = {} +} + +function enable_modem_bars() + add_io_bar(dev_modem, 0x10, "MMBAR", 0x100) + add_io_bar(dev_modem, 0x14, "MBAR", 0x80) +end + + +-- ********************************************************** +-- +-- i82801dx + +function enable_dx_power_bars() + pci_cfg16_hook(dev_power, 0x40, "PM", pm_io_bar) + add_io_bar(dev_power, 0x58, "GPIO", 0x40) +end + +function enable_dx_lpc_bars() + pci_cfg8_hook(dev_power, 0xe0, "LPC", lpc_protect_serial_port) + pci_cfg8_hook(dev_power, 0xe6, "LPC", lpc_protect_serial_port) + + add_io_bar(dev_power, 0xe4, "LPC1", 0x80) + add_io_bar(dev_power, 0xec, "LPC2", 0x10) +end + +function enable_hook_i82801dx() + enable_smbus_host_bar() + enable_dx_power_bars() + enable_dx_lpc_bars() + enable_audio_bars() + enable_modem_bars() +end + +-- ********************************************************** +-- +-- i82801fx + +function enable_fx_power_bars() + pci_cfg16_hook(dev_power, 0x40, "PM", pm_io_bar) + add_io_bar(dev_power, 0x48, "GPIO", 0x40) +end + +function enable_fx_lpc_bars() + add_mem_bar(dev_power, 0xf0, "RCBA", 0x4000) + + pci_cfg8_hook(dev_power, 0x80, "LPC", lpc_protect_serial_port) + pci_cfg8_hook(dev_power, 0x82, "LPC", lpc_protect_serial_port) + + add_io_bar(dev_power, 0x84, "LPC1", 0x80) + add_io_bar(dev_power, 0x88, "LPC2", 0x40) +end + +function enable_hook_i82801fx() + enable_smbus_host_bar() + enable_fx_power_bars() + enable_fx_lpc_bars() +end + +-- ********************************************************** +-- +-- i82801gx + +-- ICH7 TPM +-- Phoenix "Secure" Core bails out if we don't pass the read on ;-) +filter_ich7_tpm = { + name = "ICH7 TPM", + pre = mem_target_only, + post = mem_post, + decode = F_RANGE, + base = 0xfed40000, + size = 0x00001000, + hide = true +} + +function enable_gx_power_bars() + pci_cfg16_hook(dev_power, 0x40, "PM", pm_io_bar) + add_io_bar(dev_power, 0x48, "GPIO", 0x40) +end + +function enable_gx_lpc_bars() + pci_cfg8_hook(dev_power, 0x80, "LPC", lpc_protect_serial_port) + pci_cfg8_hook(dev_power, 0x82, "LPC", lpc_protect_serial_port) + + pci_cfg32_hook(dev_power, 0x84, "LPC", lpc_io_bar) + pci_cfg32_hook(dev_power, 0x88, "LPC", lpc_io_bar) + pci_cfg32_hook(dev_power, 0x8c, "LPC", lpc_io_bar) + pci_cfg32_hook(dev_power, 0x90, "LPC", lpc_io_bar) +end + +function enable_hook_i82801gx() + enable_hook(mem_hooks, filter_ich7_tpm) + add_mem_bar(dev_power, 0xf0, "RCBA", 0x4000) + enable_smbus_host_bar() + enable_gx_power_bars() + enable_gx_lpc_bars() +end + + + diff --git a/SerialICE/simba/chipset/intel_bars.lua b/SerialICE/simba/chipset/intel_bars.lua new file mode 100644 index 0000000..0841a23 --- /dev/null +++ b/SerialICE/simba/chipset/intel_bars.lua @@ -0,0 +1,110 @@ +-- ********************************************************** +-- Intel i845 + +dev_i845_mch2 = { + pci_dev = pci_bdf(0x0,0x6,0x0,0x0), + name = "MCH", + bar = {} +} + +function northbridge_i845() + add_mem_bar(dev_i845_mch2, 0x10, "RCOMP", 0x1000) +end + +-- ********************************************************** +-- Intel e7505 + +dev_e7505_mch = { + pci_dev = pci_bdf(0x0,0x0,0x0,0x0), + name = "MCH", + bar = {} +} + +function northbridge_e7505() + add_mem_bar(dev_e7505_mch, 0x14, "RCOMP", 0x1000) +end + + +-- ********************************************************** +-- Intel 82915 PCIe BAR + +dev_i915 = { + pci_dev = pci_bdf(0,0,0,0), + name = "i915", + bar = {}, +} + +function i915_pcie_bar(f, action) + local baseaddr = bit32.band(action.data, 0xf0000000) + local size = 256*1024*1024 + + -- enable is 0:00.0 [054] .31 + if true then + pcie_mm_enable(f.dev, f.reg, baseaddr, size) + else + pcie_mm_disable(f.dev, f.reg, baseaddr, size) + end +end + +function northbridge_i915() + add_mem_bar(dev_i915, 0x40, "EPBAR", 4*1024) + add_mem_bar(dev_i915, 0x44, "MCHBAR", 16*1024) + add_mem_bar(dev_i915, 0x4c, "DMIBAR", 4*1024) + pci_cfg32_hook(dev_i915, 0x48, "PCI", i915_pcie_bar) +end + +-- ********************************************************** +-- Intel 82945 PCIe BAR + +function i945_pcie_bar(f, action) + local base = action.data + local sizebits = bit32.band(bit32.rshift(base, 1), 0x3) + local baseaddr = 0 + local size = 0 + + if sizebits == 0 then + size = 256*1024*1024 + baseaddr = bit32.band(base, 0xf0000000) + elseif sizebits == 1 then + size = 128*1024*1024 + baseaddr = bit32.band(base, 0xf8000000) + elseif sizebits == 2 then + size = 64*1024*1024 + baseaddr = bit32.band(base, 0xfc000000) + else + -- undefined, really + baseaddr = bit32.band(base, 0xfe000000) + size = 32*1024*1024 + end + + if bit32.band(base, 1) ~= 0 then + pcie_mm_enable(f.dev, f.reg, baseaddr, size) + else + pcie_mm_disable(f.dev, f.reg, baseaddr, size) + end +end + +dev_i945 = { + pci_dev = pci_bdf(0,0,0,0), + name = "i945", + bar = {}, +} + +function northbridge_i945() + add_mem_bar(dev_i945, 0x40, "EPBAR", 4*1024) + add_mem_bar(dev_i945, 0x44, "MCHBAR", 16*1024) + add_mem_bar(dev_i945, 0x4c, "DMIBAR", 4*1024) + add_mem_bar(dev_i945, 0x60, "(unknown)", 4*1024) + + pci_cfg32_hook(dev_i945, 0x48, "PCI", i945_pcie_bar) +end + +function northbridge_i946() + add_mem_bar(dev_i945, 0x40, "PXPEPBAR", 4*1024) + add_mem_bar(dev_i945, 0x48, "MCHBAR", 16*1024) + add_mem_bar(dev_i945, 0x68, "DMIBAR", 4*1024) + + pci_cfg32_hook(dev_i945, 0x60, "PCI", i945_pcie_bar) +end + + diff --git a/SerialICE/simba/chipset/intel_smbus.lua b/SerialICE/simba/chipset/intel_smbus.lua new file mode 100644 index 0000000..1c2606d --- /dev/null +++ b/SerialICE/simba/chipset/intel_smbus.lua @@ -0,0 +1,258 @@ + + +load_filter("smbus_host") + +-- ******************************************** +-- Intel 82801 SMBus Host controller + +I801_SMB_HSTSTS = 0 +I801_SMB_HSTCNT = 2 +I801_SMB_HSTCMD = 3 +I801_SMB_HSTADD = 4 +I801_SMB_HSTDAT0 = 5 +I801_SMB_HSTDAT1 = 6 +I801_SMB_BLKDAT = 7 +I801_SMB_PEC = 8 +I801_SMB_AUXSTS = 12 +I801_SMB_AUXCTL = 13 + +I801_QUICK = 0x00 +I801_BYTE = 0x04 +I801_BYTE_DATA = 0x08 +I801_WORD_DATA = 0x0C +I801_PROC_CALL = 0x10 +I801_BLOCK_DATA = 0x14 +I801_I2C_BLOCK_DATA = 0x18 +I801_BLOCK_PROCESS = 0x1C +I801_BLOCK_LAST = 0x34 -- 0x14 | 0x20 +I801_I2C_BLOCK_LAST = 0x38 -- 0x18 | 0x20 +I801_START = 0x40 +I801_PEC_EN = 0x80 + + +local function intel_smbus_get_protocol(f) + local proto = bit32.band(f.reg.control, 0x1c) + + if proto == I801_QUICK then + return SMBUS_QUICK + + elseif proto == I801_BYTE then + return SMBUS_BYTE + + elseif proto == I801_BYTE_DATA then + return SMBUS_BYTE_DATA + + elseif proto == I801_WORD_DATA then + return SMBUS_WORD_DATA + + elseif proto == I801_PROC_CALL then + return SMBUS_PROC_CALL + + elseif proto == I801_BLOCK_DATA then + return SMBUS_BLOCK_DATA + + elseif proto == I801_I2C_BLOCK_DATA then + return SMBUS_I2C_BLOCK_DATA + + elseif proto == I801_BLOCK_PROCESS then + return SMBUS_BLOCK_PROCESS + + else + printk(f, action, "Unknown protocol\n") + return SMBUS_NOOP + end +end + +local function intel_smbus_host_status(f, action) + if not action.write then + if smbus.passive(f) then + f.reg.status = action.data; + end + + if smbus.state(f, HOST_IDLE) then + if not smbus.passive(f) then + f.reg.status = 0x0 + end + if bit32.band(f.reg.status, 0x40) ~= 0 then + printk(f, action, "Host may be busy, ignoring.\n") + end + smbus.get_resource(f) + + elseif smbus.state(f, HOST_ACTIVE) then + f.reg.busy_count = 3 + + elseif smbus.state(f, HOST_STARTED) then + if not smbus.passive(f) then + f.reg.status = bit32.band(f.reg.status, 0xFE) + if f.reg.busy_count > 0 then + f.reg.busy_count = f.reg.busy_count - 1 + f.reg.status = bit32.bor(f.reg.status, 0x01) + end + if bit32.band(f.reg.status, 0x02) == 0 then + smbus_transaction(host) + end + end + + local irq = bit32.band(f.reg.status, 0x02) ~= 0 + local failures = bit32.band(f.reg.status, 0x1c) ~= 0 + local host_busy = bit32.band(f.reg.status, 0x01) ~= 0 + + if irq and not host_busy then + smbus.done(f) + end + if failures then + smbus.timeout(f) + end + end + + if not smbus.passive(f) then + action.data = f.reg.status; + f.reg.status = bit32.bor(f.reg.status, 0x40) + end + else + + if not smbus.passive(f) then + f.reg.status = bit32.band(f.reg.status, bit32.bnot(action.data)) + end + + local ack_irq = bit32.band(action.data, 0x02) ~= 0 + local release_host = bit32.band(action.data, 0x40) ~= 0 + local failures = bit32.band(action.data, 0x1c) ~= 0 + if release_host then + smbus.put_resource(f) + end + if failures then + smbus.timeout_ack(f) + end + if ack_irq then + smbus.ack(f) + end + end + +end + + +local function intel_smbus_host_control(f, action) + + if not action.write then + f.reg.block_ptr=0; + if not smbus.passive(f) then + action.data = bit32.band(f.reg.control, bit32.bnot(0x40)) + end + + else + + f.reg.control = action.data; + if bit32.band(f.reg.control, 0x80) ~= 0 then + printk(f, action, "No PEC simulation\n") + end + + local abort = bit32.band(f.reg.control, 0x02) ~= 0 + local start = bit32.band(f.reg.control, 0x40) ~= 0 + if abort then + smbus.abort(f) + end + if start then + f.reg.block_ptr=0; + smbus.update_register(f, action, SMB_REG_PROTO) + smbus.start(f, intel_smbus_get_protocol(f)) + end + end +end + + + +local function intel_smbus_block_data(f, action) + if f.reg.block_ptr < MAX_BLOCK_SRAM then + smbus.block_data(f, action, f.reg.block_ptr) + end + f.reg.block_ptr = f.reg.block_ptr + 1 + smbus.update_register(f, action, SMB_REG_BLOCK) +end + +local function intel_smbus_host_access(f, action) + local reg = bit32.band(action.addr, (f.size-1)) + + -- mirror hw register both ways + local data_write = 0 + + -- Store this to display CS:IP etc. + f.host.action = action + + if reg == I801_SMB_HSTSTS then + intel_smbus_host_status(f, action); + + elseif reg == I801_SMB_HSTCNT then + intel_smbus_host_control(f, action); + + elseif reg == I801_SMB_HSTCMD then + smbus.update_register(f, action, SMB_REG_CMD) + + elseif reg == I801_SMB_HSTADD then + smbus.update_register(f, action, SMB_REG_SLAVE) + + elseif reg == I801_SMB_HSTDAT0 then + smbus.update_register(f, action, SMB_REG_DATA0) + + elseif reg == I801_SMB_HSTDAT1 then + smbus.update_register(f, action, SMB_REG_DATA1) + + elseif reg == I801_SMB_BLKDAT then + intel_smbus_block_data(f, action); + + elseif reg == I801_SMB_AUXSTS then + if data_write then + f.reg.aux_sts = action.data; + else + action.data = f.reg.aux_sts; + end + + elseif reg == I801_SMB_AUXCTL then + if data_write then + f.reg.aux_ctl = action.data; + else + action.data = f.reg.aux_ctl; + end + + else + printk(f, action, "Unknown register 0x%02x\n", reg); + end +end + + +function intel_smbus_host_pre(f, action) + if action.write then + intel_smbus_host_access(f, action) + end + return handle_action(f, action) +end + +function intel_smbus_host_post(f, action) + if not action.write then + intel_smbus_host_access(f, action) + end + return true +end + + +local intel_smbus_host = { + name = "i801-smbus", + pre = intel_smbus_host_pre, + post = intel_smbus_host_post, + hide = hide_smbus_io, + base = 0x0, + size = 0x0, +} + +function intel_smbus_setup(base, size) + local f = intel_smbus_host + f.base = bit32.band(base, bit32.bnot(size-1)) + f.size = size + if not f.reg then + f.reg = { control = 0, status = 0, busy_count = 0, block_ptr = 0, aux_ctl = 0, aux_sts = 0 } + end + smbus.init(f) + + enable_hook(io_hooks, f) +end + diff --git a/SerialICE/simba/chipset/pc80.lua b/SerialICE/simba/chipset/pc80.lua new file mode 100644 index 0000000..35d01e3 --- /dev/null +++ b/SerialICE/simba/chipset/pc80.lua @@ -0,0 +1,534 @@ +-- ********************************************************** +-- +-- Debug POST port at IO 0x80 + +function debugport_post(f, action) + if action.write then + printk(f, action, "*** %02x ***\n", action.data) + return true + end + return false +end + +filter_debugport = { + name = "POST", + pre = handle_action, + post = debugport_post, + hide = true, + base = 0x80, + size = 0x1 +} + + +-- ********************************************************** +-- +-- i8259 PIC + +function i8259_pre(f, action) + local master = (bit32.rshift(0x05, action.addr) == 0x1) + local slave = (bit32.rshift(0x05, action.addr) == 0x5) + local reg = bit32.band(0x03, action.addr) + if reg == 0 or reg == 1 then + return handle_action(f, action) + end + return skip_filter(f, action) +end + +function i8259_post(f,action) + local reg = bit32.band(0x03, action.addr) + if reg == 0 or reg == 1 then + return true + end + return false +end + +function i8259_edge_pre(f, action) + return handle_action(f, action) +end + +function i8259_edge_post(f,action) + return true +end + +filter_i8259_master = { + name = "i8259 A", + pre = i8259_pre, + post = i8259_post, + hide = hide_i8259_io, + base = 0x20, + size = 0x20 +} + +filter_i8259_slave = { + name = "i8259 B", + pre = i8259_pre, + post = i8259_post, + hide = hide_i8259_io, + base = 0xa0, + size = 0x20 +} + +filter_i8259_edge = { + name = "i8259 C", + pre = i8259_edge_pre, + post = i8259_edge_post, + hide = hide_i8259_io, + base = 0x4d0, + size = 0x2 +} + +-- ********************************************************** +-- +-- i8237 DMA + +function i8237_pre(f, action) + if action.addr == 0x80 then + return skip_filter(f, action) + end + return handle_action(f, action) +end + +function i8237_post(f, action) + if action.addr == 0x80 then + return false + end + return true +end + + +filter_i8237_a = { + name = "i8237 A", + pre = i8237_pre, + post = i8237_post, + hide = hide_i8237_io, + base = 0x00, + size = 0x20 +} +filter_i8237_b = { + name = "i8237 B", + pre = i8237_pre, + post = i8237_post, + hide = hide_i8237_io, + base = 0x80, + size = 0x20 +} +filter_i8237_c = { + name = "i8237 C", + pre = i8237_pre, + post = i8237_post, + hide = hide_i8237_io, + base = 0xc0, + size = 0x20 +} + + +-- ********************************************************** +-- +-- i8254 IRQ0 and Speaker + +function i8254_pre(f, action) + + -- nothing to do on reads + if not action.write then + return handle_action(f, action) + end + + local reg = bit32.band(0x03, action.addr) + if reg >= 0x0 and reg < 0x03 then + local counter_n = 0 + local counter_p = 0 + if f.counter[reg].lsb then + f.counter[reg].lsb = f.counter[reg].after_lsb + counter_n = action.data + counter_p = bit32.band(0xff00, f.counter[reg].init) + else + counter_n = bit32.lshift(action.data, 8) + counter_p = bit32.band(0x00ff, f.counter[reg].init) + end + f.counter[reg].init = bit32.bor(counter_n, counter_p) + elseif reg == 0x03 then + local reg2 = bit32.rshift(action.data, 6) + local rwsel = bit32.band(0x3, bit32.rshift(action.data, 4)) + if reg2 == 0x3 then + if bit32.band(0x10, action.data) == 0 then + f.counter[0].readback = (bit32.band(0x2, action.data) ~= 0) + f.counter[1].readback = (bit32.band(0x4, action.data) ~= 0) + f.counter[2].readback = (bit32.band(0x8, action.data) ~= 0) + end + if bit32.band(0x20, action.data) == 0 then + f.counter[0].latch = (bit32.band(0x2, action.data) ~= 0) + f.counter[1].latch = (bit32.band(0x4, action.data) ~= 0) + f.counter[2].latch = (bit32.band(0x8, action.data) ~= 0) + end + elseif rwsel == 0x0 then + f.counter[reg2].latch = true + else + f.counter[reg2].mode = bit32.band(0xf, action.data) + if rwsel == 0x1 then + f.counter[reg2].lsb = true + f.counter[reg2].after_lsb = true + elseif rwsel == 0x2 then + f.counter[reg2].lsb = false + f.counter[reg2].after_lsb = false + elseif rwsel == 03 then + f.counter[reg2].lsb = true + f.counter[reg2].after_lsb = false + end + end + end + return handle_action(f, action) +end + +function i8254_post(f, action) + local reg = bit32.band(0x03, action.addr) + if reg >= 0x0 and reg < 0x03 then + if action.write then + local mode = bit32.band(0x0f, f.counter[reg].mode); + local modestr = "Mode" .. mode + if mode == 0x4 then + modestr = "Square Wave" + elseif mode == 0x6 then + modestr = "Rate Generator" + end + if bit32.band(0x01, mode) ~= 0 then + modestr = modestr .. " (BCD)" + end + + local period = 838 * f.counter[reg].init + if reg == 0 then + if period == 0 then + printk(f, action, "IRQ0 disabled\n") + else + printk(f, action, "IRQ0 (%s): %d ns\n", modestr, period) + end + elseif reg == 1 then + if period == 0 then + printk(f, action, "Refresh disabled\n") + else + printk(f, action, "Refresh (%s): %d ns\n", modestr, period) + end + elseif reg == 2 then + if period ~= 0 then + local spktone = 1193000 / f.counter[reg].init + printk(f, action, "Speaker Tone (%s): %d kHz\n", modestr, spktone) + end + end + else + if f.counter[reg].readback then + f.counter[reg].readback = false + f.counter[reg].status = action.data + printk(f, action, "[%d] status = %02x\n", reg, f.counter[reg].status) + end + if f.counter[reg].latch then + f.counter[reg].latch = false + f.counter[reg].current = action.data + printk(f, action, "[%d] current = %d\n", reg, f.counter[reg].current) + end + end + elseif reg == 0x03 then + end + return true +end + +i8254_counters = {} +i8254_counters[0x0] = { init=0, current=0, latch, readback, status=0 } +i8254_counters[0x1] = { init=0, current=0, latch, readback, status=0 } +i8254_counters[0x2] = { init=0, current=0, latch, readback, status=0 } + +filter_i8254_a = { + name = "i8254 A", + pre = i8254_pre, + post = i8254_post, + base = 0x40, + hide = hide_i8254_io, + size = 4, + counter = i8254_counters, +} +filter_i8254_b = { + name = "i8254 B", + pre = i8254_pre, + post = i8254_post, + base = 0x50, + hide = hide_i8254_io, + size = 4, + counter = i8254_counters, +} + + +-- ********************************************************** +-- +-- i8042 KBD, A20, Reset(?) + +function i8042_write(f, action) + if action.addr == 0x60 then + f.reg.data = action.data + f.reg.sts = bit32.band(f.reg.sts, 0xf7) + if (f.reg.cmd == 0xd1) then + f.reg.A20 = (bit32.band(0x02, action.data) == 0x02) + end + return handle_action(f, action) + end + if action.addr == 0x64 then + f.reg.cmd = action.data + f.reg.sts = bit32.bor(f.reg.sts, 0x0a) + return handle_action(f, action) + end + return skip_filter(f, action) +end + +function i8042_read(f, action) + if action.addr == 0x60 then + f.reg.sts = bit32.band(f.reg.sts, 0xfe) + return handle_action(f, action) + end + if action.addr == 0x64 then + return handle_action(f, action) + end + return skip_filter(f, action) +end + +function i8042_pre(f, action) + if (action.write) then + return i8042_write(f, action) + else + return i8042_read(f, action) + end +end + +function i8042_post(f, action) + if action.addr == 0x60 then + if action.write and f.reg.cmd == 0xd1 then + if f.reg.A20 then + printk(f, action, "A20 enabled\n") + else + printk(f, action, "A20 disabled\n") + end + end + return true + end + if action.addr == 0x64 then + return true + end + return false +end + +filter_i8042 = { + decode = F_FIXED, + name = "i8042", + pre = i8042_pre, + post = i8042_post, + hide = hide_i8042_io, + base = 0x60, + size = 0x5, + reg = { data = 0, sts = 0, cmd = 0, A20 = 0 } +} + + +-- ********************************************************** +-- +-- CMOS nvram + + +function nvram_bank(addr) + if bit32.band(0xfe, addr) == 0x70 then + return 1 + elseif bit32.band(0xfe, addr) == 0x72 then + return 2 + elseif bit32.band(0xfe, addr) == 0x74 then + return 2 + else + return 0 + end +end + +function nvram_write(f, action) + local val = action.data + local rtc = false + local is_index = (bit32.band(0x01, action.addr) == 0x0) + local bank = nvram_bank(action.addr) + + if bank == 1 then + if is_index then + f.reg.p70 = bit32.band(0x7f, val) + if f.reg.p70 < 0x0E then + rtc = true + end + else + f.nvram_data[f.reg.p70] = val + f.nvram_set[f.reg.p70] = true + if f.reg.p70 < 0x0E then + rtc = true + end + end + elseif bank == 2 then + if is_index then + f.reg.p72 = bit32.band(0x7f, val) + else + local index = 0x80 + f.reg.p72 + f.nvram_data[index] = val + f.nvram_set[index] = true + end + end + if cache_nvram and not rtc then + return fake_action(f, action, val) + else + return handle_action(f, action) + end +end + +function nvram_read(f, action) + local val = 0 + local rtc = false + local is_index = (bit32.band(0x01, action.addr) == 0x0) + local bank = nvram_bank(action.addr) + + if bank == 1 then + if is_index then + -- NMI returned as 0 + val = f.reg.p70 + if f.reg.p70 < 0x0E then + rtc = true + end + else + if f.reg.p70 < 0x0E then + rtc = true + elseif f.nvram_set[f.reg.p70] then + val = f.nvram_data[f.reg.p70] + end + end + else -- bank + if is_index then + -- NMI returned as 0 + val = f.reg.p72 + else + local index = 0x80 + f.reg.p72 + if f.nvram_set[index] then + val = f.nvram_data[index] + end + end + end + if cache_nvram and not rtc then + return fake_action(f, action, val) + else + return handle_action(f, action) + end +end + +function nvram_pre(f, action) + if (action.write) then + return nvram_write(f, action) + else + return nvram_read(f, action) + end +end + +function nvram_post(f, action) + if bit32.band(0x01, action.addr) == 0x0 then + return true + end + + local bank = nvram_bank(action.addr) + if (action.write) then + if bank == 1 then + printk(f, action, "[%02x] <= %02x\n", f.reg.p70, action.data) + elseif bank == 2 then + printk(f, action, "[%02x] <= %02x\n", 0x80 + f.reg.p72, action.data) + end + else + if bank == 1 then + printk(f, action, "[%02x] => %02x\n", f.reg.p70, action.data) + elseif bank == 2 then + printk(f, action, "[%02x] => %02x\n", 0x80 + f.reg.p72, action.data) + end + end + return true +end + +filter_nvram = { + name = "NVram", + pre = nvram_pre, + post = nvram_post, + base = 0x70, + size = 8, + hide = hide_nvram_io, + reg = { p70 = 0, p72 = 0 }, + nvram_data = {}, + nvram_set = {}, +} + + +-- ********************************************************** +-- +-- Reset at 0xcf9 + +function sys_rst_pre(f, action) + if action.size == 1 then + if action.write and bit32.band(action.data, 0x04) == 0x04 then + SerialICE_system_reset() + end + return handle_action(f, action) + end + return skip_filter(f, action) +end + +function sys_rst_post(f, action) + if action.size == 1 then + if action.write then + printk(f, action, "Control = %02x\n", action.data) + return true + end + end + return false +end + +filter_reset = { + name = "Reset", + pre = sys_rst_pre, + post = sys_rst_post, + hide = false, + base = 0xcf9, + size = 1 +} + +-- ********************************************************** +-- +-- VGA io + +function vga_io_pre(f, action) + return skip_filter(f, action) +end + +function vga_io_post(f, action) + return true +end + +filter_vga_io = { + name = "VGA", + pre = vga_io_pre, + post = vga_io_post, + hide = false, + base = 0x3c0, + size = 0x20, +} + + +-- ********************************************************** +-- +-- Enable all PC80 stuff + +function enable_hook_pc80() + enable_hook(io_hooks, filter_i8237_a) + enable_hook(io_hooks, filter_i8237_b) + enable_hook(io_hooks, filter_i8237_c) + enable_hook(io_hooks, filter_i8259_master) + enable_hook(io_hooks, filter_i8259_slave) + enable_hook(io_hooks, filter_i8259_edge) + enable_hook(io_hooks, filter_i8042) + enable_hook(io_hooks, filter_i8254_a) + enable_hook(io_hooks, filter_i8254_b) + enable_hook(io_hooks, filter_reset) + enable_hook(io_hooks, filter_nvram) + enable_hook(io_hooks, filter_vga_io) + enable_hook(io_hooks, filter_debugport) +end + diff --git a/SerialICE/simba/chipset/smbus_host.lua b/SerialICE/simba/chipset/smbus_host.lua new file mode 100644 index 0000000..1da4b0c --- /dev/null +++ b/SerialICE/simba/chipset/smbus_host.lua @@ -0,0 +1,558 @@ + + +local debug_smbus = false +smbus = {} + +smbus.host = { + state = { current = 0, jump_to = 0 }, + proto = 0, + start_proto = 0, + + passive = true, + signals = 0, + + slave = 0, + cmd = 0, + data0 = 0, + data1 = 0, + data0_valid = false, + data1_valid = false, + wr_data0 = 0, + wr_data1 = 0, + block_register = 0, + + block = {}, + max_index = 0, +} + +MAX_BLOCK_SRAM = 32 + +if true then + for i = 0, MAX_BLOCK_SRAM-1, 1 do + smbus.host.block[i] = { hw = 0, tmp = 0, hw_valid = false, tmp_valid = false } + end +end + +-- ******************* + +SIG_INUSE = 0 +SIG_RELEASE = 1 +SIG_START = 2 +SIG_ABORT = 3 +SIG_DONE = 4 +SIG_ACK = 5 +SIG_TIMEOUT = 6 +SIG_TIMEOUT_ACK = 7 +SIG_DATA_WRITE = 8 + +local function signal_reset(f) + f.host.signals = 0 +end + +local function signal_set(f, flag) + local mask = bit32.lshift(1, flag) + f.host.signals = bit32.bor(f.host.signals, mask) +end + +local function signal_clr(f, flag) + local mask = bit32.bnot(bit32.lshift(1, flag)) + f.host.signals = bit32.band(f.host.signals, mask) + +end + +local function signal_in(f, flag) + local mask = bit32.lshift(1, flag) + return bit32.band(f.host.signals, mask) ~= 0 +end + +-- ******************* + +-- SMBus Protocol Message Types +SMBUS_NOOP = 0 +SMBUS_QUICK = 1 +SMBUS_BYTE = 2 +SMBUS_BYTE_DATA = 3 +SMBUS_WORD_DATA = 4 +SMBUS_PROC_CALL = 5 +SMBUS_BLOCK_DATA = 6 +SMBUS_I2C_BLOCK_DATA = 7 +SMBUS_BLOCK_PROCESS = 8 + +local proto_name = {} +proto_name[SMBUS_NOOP] = "(no-op)" +proto_name[SMBUS_QUICK] = "quick" +proto_name[SMBUS_BYTE] = "byte" +proto_name[SMBUS_BYTE_DATA] = "byte_data" +proto_name[SMBUS_WORD_DATA] = "word_data" +proto_name[SMBUS_PROC_CALL] = "proc_call" +proto_name[SMBUS_BLOCK_DATA] = "block" +proto_name[SMBUS_I2C_BLOCK_DATA] = "i2c_block" +proto_name[SMBUS_BLOCK_PROCESS] = "block_process" + +-- SMBus Host +SMB_REG_CMD = 1 +SMB_REG_SLAVE = 2 +SMB_REG_DATA0 = 3 +SMB_REG_DATA1 = 4 +SMB_REG_BLOCK = 5 +SMB_REG_PROTO = 6 + + +local function dump_block(f, length) + local block = "" + local max_length = math.min(length, MAX_BLOCK_SRAM) + + for i=0, max_length-1, 1 do + if f.host.block[i].hw_valid then + block = block .. string.format(" %02x", f.host.block[i].hw) + else + block = block .. " xx" + end + end + return block +end + + +-- FIXME: Probably wrong for process calls and hw-dependent. +local function host_proto(f, proto) + return f.host.proto == proto +end + +local function host_reading(f) + return bit32.band(f.host.slave, 0x01) == 0x01 +end + + + +local function dump_transaction(f, action) + + local data0, data1, length, dir + local invalid_data = "xx" + local iodir = {} + iodir[0] = "<=" + iodir[1] = "=>" + + if host_reading(f) then + dir = iodir[1] + data0 = invalid_data + length = f.host.max_index + if f.host.data0_valid then + length = f.host.data0 + data0 = string.format("%02x", f.host.data0) + end + data1 = invalid_data + if f.host.data1_valid then + data1 = string.format("%02x", f.host.data1) + end + else + dir = iodir[0] + length = f.host.wr_data0 + data0 = string.format("%02x", f.host.wr_data0) + data1 = string.format("%02x", f.host.wr_data1) + end + + + local dump = string.format("%02x %s ", f.host.slave / 2, proto_name[f.host.proto]) + + if host_proto(f, SMBUS_QUICK) then + + elseif host_proto(f, SMBUS_BYTE) then + dump = dump .. string.format("%02x %s %s", f.host.cmd, dir, data0) + + elseif host_proto(f, SMBUS_BYTE_DATA) then + dump = dump .. string.format("%02x %s %s", f.host.cmd, dir, data0) + + elseif host_proto(f, SMBUS_WORD_DATA) then + dump = dump .. string.format("%02x %s %s%s", f.host.cmd, dir, data0, data1) + + elseif host_proto(f, SMBUS_PROC_CALL) then + dump = dump .. string.format("%02x %02x %02x %s %s %s", f.host.cmd, + f.host.wr_data0, f.host.wr_data1, iodir[1], data0, data1) + + elseif host_proto(f, SMBUS_BLOCK_DATA) then + dump = dump .. string.format("%02x len=%02d %s", f.host.cmd, length, dir) + dump = dump .. dump_block(f, length) .. "" + + elseif host_proto(f, SMBUS_I2C_BLOCK_DATA) then + dump = dump .. string.format("%02x %02x %02x len=%02d %s", + f.host.cmd, f.host.data0, f.host.data1, f.host.max_index, dir) + dump = dump .. dump_block(f, length) .. "" + + elseif host_proto(f, SMBUS_BLOCK_PROCESS) then + dump = dump .. string.format("%02x len=%02d %s", f.host.cmd, length, iodir[1]) + dump = dump .. dump_block(f, length) .. "" + else + dump = dump .. "Cannot parse command" + end + + if signal_in(f, SIG_TIMEOUT) then + dump = dump .. " (TIMEOUT) " + end + + printk(f, action, "%s\n", dump) +end + + +-- ******************* + +HOST_NOOP = 0 +HOST_IDLE = 1 +HOST_ACTIVE = 2 +HOST_STARTED = 3 +HOST_WAIT = 4 +HOST_COMPLETE = 5 +HOST_FAIL = 6 + +local ctrl_state = {} +ctrl_state[HOST_NOOP] = "noop" +ctrl_state[HOST_IDLE] = "idle" +ctrl_state[HOST_ACTIVE] = "active" +ctrl_state[HOST_STARTED] = "started" +ctrl_state[HOST_WAIT] = "wait" +ctrl_state[HOST_COMPLETE] = "complete" +ctrl_state[HOST_FAIL] = "failed" + +function dprintk(...) + if debug_smbus then + printk(...) + end +end + +local function host_jump(f, state) + f.host.state.jump_to = state +end + +local function host_change_state(f, prev_state, new_state) + + if new_state == HOST_NOOP then + --printk(f, f.host.action, "state switch to HOST_NOOP\n") + new_state = HOST_IDLE + end + + dprintk(f, f.host.action, "%s -> %s\n", + ctrl_state[prev_state], ctrl_state[new_state]) + + -- Jumping to current is no jump. + f.host.state.current = new_state + f.host.state.jump_to = new_state + + if smbus.state(f, HOST_IDLE) then + signal_reset(f) + + elseif smbus.state(f, HOST_ACTIVE) then + signal_reset(f) + signal_set(f, SIG_INUSE) + + elseif smbus.state(f, HOST_STARTED) then + local i + f.host.proto = f.host.start_proto + f.host.wr_data0 = f.host.data0 + f.host.wr_data1 = f.host.data1 + + -- Invalidation used with reads + f.host.data0_valid = false + f.host.data1_valid = false + + for i = 0, MAX_BLOCK_SRAM-1, 1 do + f.host.max_index = 0 + -- On block writes, previously read data in buffer is also valid. + if f.host.block[i].tmp_valid then + f.host.block[i].hw = f.host.block[i].tmp + f.host.block[i].tmp_valid = false + f.host.block[i].hw_valid = true + end + -- On block reads, no data in buffer is yet valid. + if host_reading(f) and host_proto(f, SMBUS_BLOCK_DATA) then + f.host.block[i].hw_valid = false; + end + end + + elseif smbus.state(f, HOST_COMPLETE) then + dump_transaction(f, f.host.action) + if signal_in(f, SIG_RELEASE) then + host_jump(f, HOST_IDLE) + else + host_jump(f, HOST_ACTIVE) + end + + elseif smbus.state(f, HOST_FAIL) then + dump_transaction(f, f.host.action) + host_jump(f, HOST_ACTIVE) + end + +end + +local function host_switch(f, new_state) + local prev_state = f.host.state.current + while prev_state ~= new_state do + host_change_state(f, prev_state, new_state) + prev_state = f.host.state.current + new_state = f.host.state.jump_to + end +end + +local function host_read_completed(f) + + if not host_reading(f) then + return true + end + + local complete = false + + if host_proto(f, SMBUS_QUICK) then + complete = true + + elseif host_proto(f, SMBUS_BYTE) then + complete = f.host.data0_valid + + elseif host_proto(f, SMBUS_BYTE_DATA) then + complete = f.host.data0_valid + + elseif host_proto(f, SMBUS_WORD_DATA) then + complete = f.host.data0_valid and f.host.data1_valid + + elseif host_proto(f, SMBUS_BLOCK_DATA) then + complete = f.host.data0_valid and f.host.max_index >= f.host.data0 + + elseif host_proto(f, SMBUS_PROC_CALL) or host_proto(f, SMBUS_I2C_BLOCK_DATA) + or host_proto(f, SMBUS_BLOCK_PROCESS) then + printk(f, f.host.action, "Unimplemented completion (proto %d)\n", f.host.proto) + end + return complete +end + + +-- Syncronize state machine according to input signals. +local function host_sync(f) + +-- if release and not smbus.state(f, HOST_ACTIVE) then +-- printk(f, f.host.action, "Premature reset of bit INUSE_STS\n") +-- end + if signal_in(f, SIG_ABORT) then + -- FIXME Killing on-going transaction. + host_switch(f, HOST_COMPLETE) + end + + if smbus.state(f, HOST_IDLE) then + if signal_in(f, SIG_INUSE) then + host_switch(f, HOST_ACTIVE) + end + if signal_in(f, SIG_START) then + host_switch(f, HOST_STARTED) + end + + elseif smbus.state(f, HOST_ACTIVE) then + if signal_in(f, SIG_START) then + host_switch(f, HOST_STARTED) + end + + elseif smbus.state(f, HOST_STARTED) then + if signal_in(f, SIG_TIMEOUT) then + host_switch(f, HOST_FAIL) + elseif signal_in(f, SIG_DONE) then + host_switch(f, HOST_WAIT) + end + + elseif smbus.state(f, HOST_WAIT) then + if signal_in(f, SIG_START) then + -- Restarting previous transaction. + host_switch(f, HOST_COMPLETE) + host_switch(f, HOST_STARTED) + elseif signal_in(f, SIG_ACK) and not host_reading(f) then + -- Complete after sw ack. + host_switch(f, HOST_COMPLETE) + elseif signal_in(f, SIG_DATA_WRITE) or host_read_completed(f) then + -- Complete after all data read or new data written + -- remain active + signal_clr(f, SIG_RELEASE) + host_switch(f, HOST_COMPLETE) + end + elseif smbus.state(f, HOST_FAIL) then + if signal_in(f, SIG_TIMEOUT_ACK) then + host_switch(f, HOST_COMPLETE) + end + end + + if signal_in(f, SIG_START) and not smbus.state(f, HOST_STARTED) then + printk(f, f.host.action, "Starting from illegal state\n"); + end + + signal_clr(f, SIG_DONE) + signal_clr(f, SIG_START) + signal_clr(f, SIG_DATA_WRITE) +end + + + +-- ******************************* + +-- Mutual exclusion. +function smbus.get_resource(f) + signal_set(f, SIG_INUSE) + host_sync(f) +end + +function smbus.put_resource(f) + signal_set(f, SIG_RELEASE) + host_sync(f) +end + +-- status +function smbus.state(f, state) + return f.host.state.current == state +end + +function smbus.passive(f) + return f.host.passive +end + +-- control +function smbus.start(f, proto) + signal_set(f, SIG_START) + f.host.start_proto = proto + host_sync(f) +end + +function smbus.timeout(f) + signal_set(f, SIG_TIMEOUT) + host_sync(f) +end + +function smbus.timeout_ack(f) + signal_set(f, SIG_TIMEOUT_ACK) + host_sync(f) +end + +function smbus.done(f) + signal_set(f, SIG_DONE) + host_sync(f) +end + +function smbus.ack(f) + signal_set(f, SIG_ACK) + host_sync(f) +end + +function smbus.abort(f) + signal_set(f, SIG_ABORT) + host_sync(f) +end + +-- A data read may complete and close an active transaction. +function smbus.data_read(f, action) + if not action.write then + signal_clr(f, SIG_DATA_WRITE) + host_sync(f) + end +end + +-- A data write will close active transaction. +function smbus.data_write(f, action) + if action.write then + signal_set(f, SIG_DATA_WRITE) + host_sync(f) + end +end + + + +function smbus.update_register(f, action, smb_reg) + + local data_write = action.write or smbus.passive(f) + + -- A write to data registers completes previous transaction. + smbus.data_write(f, action) + + if smb_reg == SMB_REG_SLAVE then + if data_write then + f.host.slave = action.data + else + action.data = f.host.slave + end + + elseif smb_reg == SMB_REG_CMD then + if data_write then + f.host.cmd = action.data + else + action.data = f.host.cmd + end + + elseif smb_reg == SMB_REG_DATA0 then + if data_write then + f.host.data0 = action.data + else + action.data = f.host.data0 + end + f.host.data0_valid = true + + elseif smb_reg == SMB_REG_DATA1 then + if data_write then + f.host.data1 = action.data + else + action.data = f.host.data1 + end + f.host.data1_valid = true + + elseif smb_reg == SMB_REG_BLOCK then + if data_write then + f.host.block_register = action.data + else + action.data = f.host.block_register + end + -- Nothing here, smbus.host_block_data updates datas. + -- This exist to check completion below for blocks. + elseif smb_reg == SMB_REG_PROTO then + -- Nothing here. Protocol updates when signalling start. + else + printk(f, f.host.action, "Undefined host register\n") + end + + -- New read data may complete a waiting transaction. + smbus.data_read(f, action) +end + +function smbus.block_data(f, action, index) + + if smbus.passive(f) then + if not action.write then + f.host.block[index].hw = action.data + f.host.block[index].hw_valid = true + end + f.host.block[index].tmp = action.data + f.host.block[index].tmp_valid = true + else + if action.write then + f.host.block[index].tmp = action.data + f.host.block[index].tmp_valid = true + else + action.data = 0xff + if f.host.block[index].tmp_valid then + action.data = f.host.block[index].tmp + elseif f.host.block[index].hw_valid then + action.data = f.host.block[index].hw + end + end + end + + -- Detect for block read completion via maximum indexed item. + if not action.write then + f.host.max_index = math.max(f.host.max_index, index+1) + end +end + +local init_action = { + name = "init", + cs = 0, + eip = 0, + my_id = 0, + parent_id = 0, +} +function smbus.init(f) + if not f.host then + f.host = smbus.host + f.host.action = init_action + end + host_switch(f, HOST_IDLE) +end + + diff --git a/SerialICE/simba/chipset/superio.lua b/SerialICE/simba/chipset/superio.lua new file mode 100644 index 0000000..7d6252c --- /dev/null +++ b/SerialICE/simba/chipset/superio.lua @@ -0,0 +1,262 @@ + + +function pnp_switch_ldn(f, data) + if not f.ldn[data] then + f.ldn[data] = { data = {}, set = {}, bar0 = {}, bar1 = {} } + end + f.pnp.active_ldn = data +end + +function pnp_select_cfg(f, data) + f.pnp.reg = data +end + +function pnp_store_cfg(f, data) + local reg = f.pnp.reg + if reg < 0x30 then + f.chip.data[reg] = data; + f.chip.set[reg] = true; + else + local ldn = f.pnp.active_ldn + f.ldn[ldn].data[reg] = data; + f.ldn[ldn].set[reg] = true; + end +end + + +-- ********************************************************** +-- +-- SuperIO device handling + +function superio_pnpdev(f) + return string.format("%s %02x:%02x", f.name, f.base, f.pnp.active_ldn) +end + +function superio_string(f) + if f.pnp.reg < 0x30 then + return string.format("%02x: ", f.base) + else + return string.format("%02x:%02x ", f.base, f.pnp.active_ldn) + end +end + +function superio_register_post(f, action) + local str = superio_string(f) + if action.write then + printk(f, action, "%s [%02x] <= %02x\n", str, f.pnp.reg, action.data) + else + printk(f, action, "%s [%02x] => %02x\n", str, f.pnp.reg, action.data) + end +end + +function superio_string_post(f, action, str2) + printk(f, action, "%s %s\n", superio_string(f), str2) +end + +function superio_try_enable_io(f, idx) + + local ldn = f.ldn[f.pnp.active_ldn] + + if ldn.set[0x30] and ldn.data[0x30] ~= 0x0 then + if idx == 0 and ldn.set[0x60] and ldn.set[0x61] then + local iobase = bit32.bor(bit32.lshift(ldn.data[0x60], 8), ldn.data[0x61]) + if not ldn.bar0.size then + ldn.bar0.size = 1 + end + if not ldn.bar0.name then + ldn.bar0.name = superio_pnpdev(f) + end + if iobase ~= 0x60 then + ldn.bar0.val = iobase + generic_io_bar(ldn.bar0) + ldn.bar0.f.decode = F_FIXED + end + end + if idx == 1 and ldn.set[0x62] and ldn.set[0x63] then + local iobase = bit32.bor(bit32.lshift(ldn.data[0x62], 8), ldn.data[0x63]) + if not ldn.bar1.size then + ldn.bar1.size = 1 + end + if not ldn.bar1.name then + ldn.bar1.name = superio_pnpdev(f) + end + if iobase ~= 0x64 then + ldn.bar1.val = iobase + generic_io_bar(ldn.bar1) + ldn.bar1.f.decode = F_FIXED + end + end + end +end + +function superio_try_enable_ldn(f, action) + local ldn = f.ldn[f.pnp.active_ldn] + + if ldn.set[0x30] and ldn.data[0x30] == 0x0 then + superio_string_post(f, action, "disabled") + else + superio_string_post(f, action, "enabled") + end +end + +function superio_pre(f, action) + if not action.write then + return handle_action(f, action) + end + + if action.addr == f.base then + pnp_select_cfg(f, action.data) + return handle_action(f, action) + end + + if action.addr == f.base + 0x01 then + -- Also creates new LDN instance, if necessary. + if f.pnp.reg == f.pnp.ldn_register then + pnp_switch_ldn(f, action.data) + end + + pnp_store_cfg(f, action.data) + + -- Don't allow that our SIO power gets disabled. + if f.pnp.reg == 0x02 then + return drop_action(f, action, 0) + end + + -- Don't mess with oscillator setup. + if f.pnp.reg == 0x24 then + return drop_action(f, action, 0) + end + return handle_action(f, action) + end + + -- should not reach here + return skip_filter(f, action) +end + +function superio_post(f, action) + + -- Do not log change of register or LDN. + if action.addr == f.base or f.pnp.reg == f.pnp.ldn_register then + return true + end + + if not action.write then + superio_register_post(f, action) + return true + end + + local ldn = f.ldn[f.pnp.active_ldn] + + -- Log base address once both bytes are set. + + if ( f.pnp.reg == 0x60 or f.pnp.reg == 0x61 ) then + superio_try_enable_io(f, 0) + return true + end + + if ( f.pnp.reg == 0x62 or f.pnp.reg == 0x63 ) then + superio_try_enable_io(f, 1) + return true + end + + if f.pnp.reg == 0x30 then + superio_try_enable_io(f, 0) + superio_try_enable_io(f, 1) + superio_try_enable_ldn(f, action) + return true + end + + if f.pnp.reg == 0x70 then + superio_string_post(f, action, string.format("irq = %d", ldn.data[0x70])) + return true + end + if f.pnp.reg == 0x72 then + superio_string_post(f, action, string.format("irq2 = %d", ldn.data[0x72])) + return true + end + + superio_register_post(f, action) + return true +end + + +filter_superio_2e = { + name = "PnP", + pre = superio_pre, + post = superio_post, + base = 0x2e, + size = 0x02, + hide = hide_superio_cfg, + chip = { data = {}, set = {} }, + pnp = { reg = 0, active_ldn = -1, ldn_register = 0 }, + ldn = {}, +} +filter_superio_4e = { + name = "PnP", + pre = superio_pre, + post = superio_post, + base = 0x4e, + size = 0x02, + hide = hide_superio_cfg, + chip = { data = {}, set = {} }, + pnp = { reg = 0, active_ldn = -1, ldn_register = 0 }, + ldn = {}, +} + + +function superio_get_filter(cfg_base) + if cfg_base == 0x2e then + return filter_superio_2e + elseif cfg_base == 0x4e then + return filter_superio_4e + else + return nil + end +end + +function superio_set_ldn_register(f, ldn_register) + f.pnp.ldn_register = ldn_register +end + +function superio_new_ldn(f, idx) + if not f.ldn[idx] then + f.ldn[idx] = { data = {}, set = {}, bar0 = {}, bar1 = {} } + end +end + +function superio_ldn_iobase0(f, idx, name, size) + f.ldn[idx].bar0.name = name + f.ldn[idx].bar0.size = size +end + +function superio_ldn_iobase1(f, idx, name, size) + f.ldn[idx].bar1.name = name + f.ldn[idx].bar1.size = size +end + +function enable_hook_superio(base, ldn_register) + local sio = superio_get_filter(base) + superio_set_ldn_register(sio, ldn_register) + enable_hook(io_hooks, sio) +end + +-- ********************************************************** +-- +-- Serial Port handling + +function com_pre(f, action) + if (action.write) then + return drop_action(f, action, action.data) + else + return drop_action(f, action, 0xff) + end +end + +filter_com1 = { + name = "COM1", + pre = com_pre, + post = io_post, + base = 0x3f8, + size = 8, + hide = false, +} diff --git a/SerialICE/simba/chipset/via_bars.lua b/SerialICE/simba/chipset/via_bars.lua new file mode 100644 index 0000000..7868535 --- /dev/null +++ b/SerialICE/simba/chipset/via_bars.lua @@ -0,0 +1,30 @@ + +function sb_pcie_bar(dev, reg, base) + local baseaddr = bit32.lshift(base, 16) + local size = 64*1024 + + pcie_mm_cfg_bar(baseaddr, size) +end + +dev_sb = { + pci_dev = pci_bdf(0,0x11,0,0), + name = "sb", + bar = {}, +} + +function nb_pcie_bar(dev, reg, base) + local size = 64*1024 + + pcie_mm_cfg_bar(base, size) +end + +dev_nb = { + pci_dev = pci_bdf(0,0,0,0), + name = "nb", + bar = {}, +} + +function northbridge_vx900() + pci_cfg16_hook(dev_sb, 0xbd, "SB_PCI", sb_pcie_bar) + pci_cfg32_hook(dev_nb, 0x0, "NB_PCI", nb_pcie_bar) +end diff --git a/SerialICE/simba/commell_lv_672.lua b/SerialICE/simba/commell_lv_672.lua deleted file mode 100644 index 2c7710d..0000000 --- a/SerialICE/simba/commell_lv_672.lua +++ /dev/null @@ -1,57 +0,0 @@ - -function mainboard_io_read(f, action) - -- IO slowdown - if action.addr == 0xeb then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - return skip_filter(f, action) -end - - -function mainboard_io_write(f, action) - -- IO slowdown - if action.addr == 0xeb then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - return skip_filter(f, action) -end - -function mainboard_io_pre(f, action) - if action.write then - return mainboard_io_write(f, action) - else - return mainboard_io_read(f, action) - end -end - -function mainboard_io_post(f, action) - if action.addr == 0x80 and not action.write then - return true - end -end - -filter_mainboard = { - name = "test", - pre = mainboard_io_pre, - post = mainboard_io_post, - hide = hide_mainboard_io, - base = 0x0, - size = 0x10000 -} - -dofile("i82801.lua") -dofile("intel_bars.lua") - -function do_mainboard_setup() - do_default_setup() - - enable_hook_i82801fx() - northbridge_i915() - - -- Apply mainboard hooks last, so they are the first ones to check - enable_hook(io_hooks, filter_mainboard) -end diff --git a/SerialICE/simba/conroexfire_esata2.lua b/SerialICE/simba/conroexfire_esata2.lua deleted file mode 100644 index d974d7c..0000000 --- a/SerialICE/simba/conroexfire_esata2.lua +++ /dev/null @@ -1,86 +0,0 @@ - - - -function mainboard_io_read(f, action) - -- Some timer loop - if ( action.addr == 0x61 ) then - if ( regs.eip == 0x1634 ) then - regs.ecx = 0x01 - return fake_action(f, action, 0x20) - end - if ( regs.eip == 0x163a ) then - regs.ecx = 0x01 - return fake_action(f, action, 0x30) - end - end - - -- IO slowdown - if action.addr == 0xed then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - if action.addr == 0xcfb then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - return skip_filter(f, action) -end - - -function mainboard_io_write(f, action) - - - if action.addr == 0xcfb then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - if action.addr == 0xe1 then - ignore_action(f, action) - return drop_action(f, action, action.data) - end - - return skip_filter(f, action) -end - -function mainboard_io_pre(f, action) - if action.write then - return mainboard_io_write(f, action) - else - return mainboard_io_read(f, action) - end -end - -function mainboard_io_post(f, action) - if action.addr == 0xe1 or action.addr == 0xed or action.addr == 0xcfb then - return true - end - if action.addr == 0x80 and not action.write then - return true - end -end - -filter_mainboard = { - name = "test", - pre = mainboard_io_pre, - post = mainboard_io_post, - hide = hide_mainboard_io, - base = 0x0, - size = 0x10000 -} - -dofile("i82801.lua") -dofile("intel_bars.lua") - -function do_mainboard_setup() - do_default_setup() - - enable_hook_i82801gx() - - northbridge_i945() - - -- Apply mainboard hooks last, so they are the first ones to check - enable_hook(io_hooks, filter_mainboard) -end diff --git a/SerialICE/simba/i82801.lua b/SerialICE/simba/i82801.lua deleted file mode 100644 index 96fc8c3..0000000 --- a/SerialICE/simba/i82801.lua +++ /dev/null @@ -1,182 +0,0 @@ --- ********************************************************** --- --- SMBus controller handling - - -dofile("intel_smbus.lua") - -function smbus_bar_hook(f, action) - intel_smbus_setup(action.data, 0x20) -end - -dev_sb_lpc = { - pci_dev = pci_bdf(0x0,0x1f,0x3,0x0), - name = "Smbus", - bar = {}, -} - -function enable_smbus_host_bar() - pci_cfg16_hook(dev_sb_lpc, 0x20, "SMBus", smbus_bar_hook) -end - - --- ********************************************************** --- - -dev_power = { - pci_dev = pci_bdf(0x0,0x1f,0x0,0x0), - name = "SYS", - bar = {}, - acpi = { f = nil }, - tco = { f = nil }, -} - -function pm_io_bar(f, action) - f.dev.acpi.name = "ACPI" - f.dev.acpi.val = action.data - f.dev.acpi.size = 0x60 - generic_io_bar(f.dev.acpi) - - f.dev.tco.name = "TCO" - f.dev.tco.val = action.data + 0x60 - f.dev.tco.size = 0x20 - generic_io_bar(f.dev.tco) -end - -function lpc_io_bar(f, action) - local base = bit32.band(action.data, 0xffff) - local mask = bit32.bor(bit32.rshift(action.data, 16), 3) - local size = mask + 1 - - base = bit32.band(base, bit32.bnot(mask)) - - add_bar(f.dev, f.reg, "LPC", size) - f.dev.bar[f.reg].val = base - generic_io_bar(f.dev.bar[f.reg]) -end - -function lpc_protect_serial_port(f, action) - drop_action(f, action, 0) -end - --- ********************************************************** --- --- AC '97 controller handling - - -dev_audio = { - pci_dev = pci_bdf(0x0,0x1f,0x5,0x0), - name = "Audio", - bar = {} -} - -function enable_audio_bars() - add_io_bar(dev_audio, 0x10, "NAMBAR", 0x100) - add_io_bar(dev_audio, 0x14, "NABMBAR", 0x40) - add_mem_bar(dev_audio, 0x18, "MMBAR", 0x200) - add_mem_bar(dev_audio, 0x1C, "MBBAR", 0x100) -end - -dev_modem = { - pci_dev = pci_bdf(0x0,0x1f,0x6,0x0), - name = "Modem", - bar = {} -} - -function enable_modem_bars() - add_io_bar(dev_modem, 0x10, "MMBAR", 0x100) - add_io_bar(dev_modem, 0x14, "MBAR", 0x80) -end - - --- ********************************************************** --- --- i82801dx - -function enable_dx_power_bars() - pci_cfg16_hook(dev_power, 0x40, "PM", pm_io_bar) - add_io_bar(dev_power, 0x58, "GPIO", 0x40) -end - -function enable_dx_lpc_bars() - pci_cfg8_hook(dev_power, 0xe0, "LPC", lpc_protect_serial_port) - pci_cfg8_hook(dev_power, 0xe6, "LPC", lpc_protect_serial_port) - - add_io_bar(dev_power, 0xe4, "LPC1", 0x80) - add_io_bar(dev_power, 0xec, "LPC2", 0x10) -end - -function enable_hook_i82801dx() - enable_smbus_host_bar() - enable_dx_power_bars() - enable_dx_lpc_bars() - enable_audio_bars() - enable_modem_bars() -end - --- ********************************************************** --- --- i82801fx - -function enable_fx_power_bars() - pci_cfg16_hook(dev_power, 0x40, "PM", pm_io_bar) - add_io_bar(dev_power, 0x48, "GPIO", 0x40) -end - -function enable_fx_lpc_bars() - add_mem_bar(dev_power, 0xf0, "RCBA", 0x4000) - - pci_cfg8_hook(dev_power, 0x80, "LPC", lpc_protect_serial_port) - pci_cfg8_hook(dev_power, 0x82, "LPC", lpc_protect_serial_port) - - add_io_bar(dev_power, 0x84, "LPC1", 0x80) - add_io_bar(dev_power, 0x88, "LPC2", 0x40) -end - -function enable_hook_i82801fx() - enable_smbus_host_bar() - enable_fx_power_bars() - enable_fx_lpc_bars() -end - --- ********************************************************** --- --- i82801gx - --- ICH7 TPM --- Phoenix "Secure" Core bails out if we don't pass the read on ;-) -filter_ich7_tpm = { - name = "ICH7 TPM", - pre = mem_target_only, - post = mem_post, - decode = F_RANGE, - base = 0xfed40000, - size = 0x00001000, - hide = true -} - -function enable_gx_power_bars() - pci_cfg16_hook(dev_power, 0x40, "PM", pm_io_bar) - add_io_bar(dev_power, 0x48, "GPIO", 0x40) -end - -function enable_gx_lpc_bars() - pci_cfg8_hook(dev_power, 0x80, "LPC", lpc_protect_serial_port) - pci_cfg8_hook(dev_power, 0x82, "LPC", lpc_protect_serial_port) - - pci_cfg32_hook(dev_power, 0x84, "LPC", lpc_io_bar) - pci_cfg32_hook(dev_power, 0x88, "LPC", lpc_io_bar) - pci_cfg32_hook(dev_power, 0x8c, "LPC", lpc_io_bar) - pci_cfg32_hook(dev_power, 0x90, "LPC", lpc_io_bar) -end - -function enable_hook_i82801gx() - enable_hook(mem_hooks, filter_ich7_tpm) - add_mem_bar(dev_power, 0xf0, "RCBA", 0x4000) - enable_smbus_host_bar() - enable_gx_power_bars() - enable_gx_lpc_bars() -end - - - diff --git a/SerialICE/simba/intel_bars.lua b/SerialICE/simba/intel_bars.lua deleted file mode 100644 index 0841a23..0000000 --- a/SerialICE/simba/intel_bars.lua +++ /dev/null @@ -1,110 +0,0 @@ --- ********************************************************** --- Intel i845 - -dev_i845_mch2 = { - pci_dev = pci_bdf(0x0,0x6,0x0,0x0), - name = "MCH", - bar = {} -} - -function northbridge_i845() - add_mem_bar(dev_i845_mch2, 0x10, "RCOMP", 0x1000) -end - --- ********************************************************** --- Intel e7505 - -dev_e7505_mch = { - pci_dev = pci_bdf(0x0,0x0,0x0,0x0), - name = "MCH", - bar = {} -} - -function northbridge_e7505() - add_mem_bar(dev_e7505_mch, 0x14, "RCOMP", 0x1000) -end - - --- ********************************************************** --- Intel 82915 PCIe BAR - -dev_i915 = { - pci_dev = pci_bdf(0,0,0,0), - name = "i915", - bar = {}, -} - -function i915_pcie_bar(f, action) - local baseaddr = bit32.band(action.data, 0xf0000000) - local size = 256*1024*1024 - - -- enable is 0:00.0 [054] .31 - if true then - pcie_mm_enable(f.dev, f.reg, baseaddr, size) - else - pcie_mm_disable(f.dev, f.reg, baseaddr, size) - end -end - -function northbridge_i915() - add_mem_bar(dev_i915, 0x40, "EPBAR", 4*1024) - add_mem_bar(dev_i915, 0x44, "MCHBAR", 16*1024) - add_mem_bar(dev_i915, 0x4c, "DMIBAR", 4*1024) - pci_cfg32_hook(dev_i915, 0x48, "PCI", i915_pcie_bar) -end - --- ********************************************************** --- Intel 82945 PCIe BAR - -function i945_pcie_bar(f, action) - local base = action.data - local sizebits = bit32.band(bit32.rshift(base, 1), 0x3) - local baseaddr = 0 - local size = 0 - - if sizebits == 0 then - size = 256*1024*1024 - baseaddr = bit32.band(base, 0xf0000000) - elseif sizebits == 1 then - size = 128*1024*1024 - baseaddr = bit32.band(base, 0xf8000000) - elseif sizebits == 2 then - size = 64*1024*1024 - baseaddr = bit32.band(base, 0xfc000000) - else - -- undefined, really - baseaddr = bit32.band(base, 0xfe000000) - size = 32*1024*1024 - end - - if bit32.band(base, 1) ~= 0 then - pcie_mm_enable(f.dev, f.reg, baseaddr, size) - else - pcie_mm_disable(f.dev, f.reg, baseaddr, size) - end -end - -dev_i945 = { - pci_dev = pci_bdf(0,0,0,0), - name = "i945", - bar = {}, -} - -function northbridge_i945() - add_mem_bar(dev_i945, 0x40, "EPBAR", 4*1024) - add_mem_bar(dev_i945, 0x44, "MCHBAR", 16*1024) - add_mem_bar(dev_i945, 0x4c, "DMIBAR", 4*1024) - add_mem_bar(dev_i945, 0x60, "(unknown)", 4*1024) - - pci_cfg32_hook(dev_i945, 0x48, "PCI", i945_pcie_bar) -end - -function northbridge_i946() - add_mem_bar(dev_i945, 0x40, "PXPEPBAR", 4*1024) - add_mem_bar(dev_i945, 0x48, "MCHBAR", 16*1024) - add_mem_bar(dev_i945, 0x68, "DMIBAR", 4*1024) - - pci_cfg32_hook(dev_i945, 0x60, "PCI", i945_pcie_bar) -end - - diff --git a/SerialICE/simba/intel_d845gbv2.lua b/SerialICE/simba/intel_d845gbv2.lua deleted file mode 100644 index 1f08dfc..0000000 --- a/SerialICE/simba/intel_d845gbv2.lua +++ /dev/null @@ -1,92 +0,0 @@ - - -function mainboard_io_read(f, action) - -- Some timer loop - if ( action.addr == 0x61 ) then - end - - -- IO slowdown - if action.addr == 0xed then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - if action.addr == 0xcfb then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - return skip_filter(f, action) -end - - -function mainboard_io_write(f, action) - - -- Catch RAM controller ready. - if action.addr == 0x80 and action.data == 0xd5 and not ram_enabled() then - -- enable_ram() - end - - if action.addr == 0xcfb then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - if action.addr == 0xe1 then - ignore_action(f, action) - return drop_action(f, action, action.data) - end - - return skip_filter(f, action) -end - -function mainboard_io_pre(f, action) - if action.write then - return mainboard_io_write(f, action) - else - return mainboard_io_read(f, action) - end -end - -function mainboard_io_post(f, action) - if action.addr == 0xe1 or action.addr == 0xed or action.addr == 0xcfb then - return true - end - if action.addr == 0x80 and not action.write then - return true - end -end - -filter_mainboard = { - name = "GEBV2", - pre = mainboard_io_pre, - post = mainboard_io_post, - hide = hide_mainboard_io, - base = 0x0, - size = 0x10000 -} - -dofile("i82801.lua") - -function do_mainboard_setup() - new_car_region(0xfef00000, 0x800) - - enable_hook(io_hooks, filter_pci_io_cfg) - enable_hook(mem_hooks, filter_lapic) - enable_hook(mem_hooks, filter_ioapic) - - enable_hook(cpumsr_hooks, filter_intel_microcode) - enable_hook(cpuid_hooks, filter_multiprocessor) - - -- I have a hook to detect RAM initialisation from - -- a POST code I can skip this here - enable_ram() - - enable_hook_pc80() - enable_hook_superio(0x2e, 0x07) - --enable_hook(io_hooks, filter_com1) - enable_hook_i82801dx() - - -- Apply mainboard hooks last, so they are the first ones to check - enable_hook(io_hooks, filter_mainboard) -end diff --git a/SerialICE/simba/intel_d946gzis.lua b/SerialICE/simba/intel_d946gzis.lua deleted file mode 100644 index da3338d..0000000 --- a/SerialICE/simba/intel_d946gzis.lua +++ /dev/null @@ -1,77 +0,0 @@ - - - -function mainboard_io_read(f, action) - -- IO slowdown - if action.addr == 0xed then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - if action.addr == 0xcfb then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - return skip_filter(f, action) -end - - -function mainboard_io_write(f, action) - - - if action.addr == 0xcfb then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - if action.addr == 0xe1 then - ignore_action(f, action) - return drop_action(f, action, action.data) - end - - return skip_filter(f, action) -end - -function mainboard_io_pre(f, action) - if action.write then - return mainboard_io_write(f, action) - else - return mainboard_io_read(f, action) - end -end - -function mainboard_io_post(f, action) - if action.addr == 0xe1 or action.addr == 0xed or action.addr == 0xcfb then - return true - end - if action.addr == 0x80 and not action.write then - return true - end -end - -filter_mainboard = { - name = "test", - pre = mainboard_io_pre, - post = mainboard_io_post, - hide = hide_mainboard_io, - base = 0x0, - size = 0x10000 -} - -dofile("i82801.lua") -dofile("intel_bars.lua") - -function do_mainboard_setup() - do_default_setup() - - enable_hook_i82801gx() - enable_hook(cpumsr_hooks, filter_intel_microcode) - enable_hook(cpuid_hooks, filter_multiprocessor) - northbridge_i946() - - new_car_region(0xfef00000,0x2000) - - -- Apply mainboard hooks last, so they are the first ones to check - enable_hook(io_hooks, filter_mainboard) -end diff --git a/SerialICE/simba/intel_smbus.lua b/SerialICE/simba/intel_smbus.lua deleted file mode 100644 index bfdf384..0000000 --- a/SerialICE/simba/intel_smbus.lua +++ /dev/null @@ -1,258 +0,0 @@ - - -dofile("smbus_host.lua") - --- ******************************************** --- Intel 82801 SMBus Host controller - -I801_SMB_HSTSTS = 0 -I801_SMB_HSTCNT = 2 -I801_SMB_HSTCMD = 3 -I801_SMB_HSTADD = 4 -I801_SMB_HSTDAT0 = 5 -I801_SMB_HSTDAT1 = 6 -I801_SMB_BLKDAT = 7 -I801_SMB_PEC = 8 -I801_SMB_AUXSTS = 12 -I801_SMB_AUXCTL = 13 - -I801_QUICK = 0x00 -I801_BYTE = 0x04 -I801_BYTE_DATA = 0x08 -I801_WORD_DATA = 0x0C -I801_PROC_CALL = 0x10 -I801_BLOCK_DATA = 0x14 -I801_I2C_BLOCK_DATA = 0x18 -I801_BLOCK_PROCESS = 0x1C -I801_BLOCK_LAST = 0x34 -- 0x14 | 0x20 -I801_I2C_BLOCK_LAST = 0x38 -- 0x18 | 0x20 -I801_START = 0x40 -I801_PEC_EN = 0x80 - - -local function intel_smbus_get_protocol(f) - local proto = bit32.band(f.reg.control, 0x1c) - - if proto == I801_QUICK then - return SMBUS_QUICK - - elseif proto == I801_BYTE then - return SMBUS_BYTE - - elseif proto == I801_BYTE_DATA then - return SMBUS_BYTE_DATA - - elseif proto == I801_WORD_DATA then - return SMBUS_WORD_DATA - - elseif proto == I801_PROC_CALL then - return SMBUS_PROC_CALL - - elseif proto == I801_BLOCK_DATA then - return SMBUS_BLOCK_DATA - - elseif proto == I801_I2C_BLOCK_DATA then - return SMBUS_I2C_BLOCK_DATA - - elseif proto == I801_BLOCK_PROCESS then - return SMBUS_BLOCK_PROCESS - - else - printk(f, action, "Unknown protocol\n") - return SMBUS_NOOP - end -end - -local function intel_smbus_host_status(f, action) - if not action.write then - if smbus.passive(f) then - f.reg.status = action.data; - end - - if smbus.state(f, HOST_IDLE) then - if not smbus.passive(f) then - f.reg.status = 0x0 - end - if bit32.band(f.reg.status, 0x40) ~= 0 then - printk(f, action, "Host may be busy, ignoring.\n") - end - smbus.get_resource(f) - - elseif smbus.state(f, HOST_ACTIVE) then - f.reg.busy_count = 3 - - elseif smbus.state(f, HOST_STARTED) then - if not smbus.passive(f) then - f.reg.status = bit32.band(f.reg.status, 0xFE) - if f.reg.busy_count > 0 then - f.reg.busy_count = f.reg.busy_count - 1 - f.reg.status = bit32.bor(f.reg.status, 0x01) - end - if bit32.band(f.reg.status, 0x02) == 0 then - smbus_transaction(host) - end - end - - local irq = bit32.band(f.reg.status, 0x02) ~= 0 - local failures = bit32.band(f.reg.status, 0x1c) ~= 0 - local host_busy = bit32.band(f.reg.status, 0x01) ~= 0 - - if irq and not host_busy then - smbus.done(f) - end - if failures then - smbus.timeout(f) - end - end - - if not smbus.passive(f) then - action.data = f.reg.status; - f.reg.status = bit32.bor(f.reg.status, 0x40) - end - else - - if not smbus.passive(f) then - f.reg.status = bit32.band(f.reg.status, bit32.bnot(action.data)) - end - - local ack_irq = bit32.band(action.data, 0x02) ~= 0 - local release_host = bit32.band(action.data, 0x40) ~= 0 - local failures = bit32.band(action.data, 0x1c) ~= 0 - if release_host then - smbus.put_resource(f) - end - if failures then - smbus.timeout_ack(f) - end - if ack_irq then - smbus.ack(f) - end - end - -end - - -local function intel_smbus_host_control(f, action) - - if not action.write then - f.reg.block_ptr=0; - if not smbus.passive(f) then - action.data = bit32.band(f.reg.control, bit32.bnot(0x40)) - end - - else - - f.reg.control = action.data; - if bit32.band(f.reg.control, 0x80) ~= 0 then - printk(f, action, "No PEC simulation\n") - end - - local abort = bit32.band(f.reg.control, 0x02) ~= 0 - local start = bit32.band(f.reg.control, 0x40) ~= 0 - if abort then - smbus.abort(f) - end - if start then - f.reg.block_ptr=0; - smbus.update_register(f, action, SMB_REG_PROTO) - smbus.start(f, intel_smbus_get_protocol(f)) - end - end -end - - - -local function intel_smbus_block_data(f, action) - if f.reg.block_ptr < MAX_BLOCK_SRAM then - smbus.block_data(f, action, f.reg.block_ptr) - end - f.reg.block_ptr = f.reg.block_ptr + 1 - smbus.update_register(f, action, SMB_REG_BLOCK) -end - -local function intel_smbus_host_access(f, action) - local reg = bit32.band(action.addr, (f.size-1)) - - -- mirror hw register both ways - local data_write = 0 - - -- Store this to display CS:IP etc. - f.host.action = action - - if reg == I801_SMB_HSTSTS then - intel_smbus_host_status(f, action); - - elseif reg == I801_SMB_HSTCNT then - intel_smbus_host_control(f, action); - - elseif reg == I801_SMB_HSTCMD then - smbus.update_register(f, action, SMB_REG_CMD) - - elseif reg == I801_SMB_HSTADD then - smbus.update_register(f, action, SMB_REG_SLAVE) - - elseif reg == I801_SMB_HSTDAT0 then - smbus.update_register(f, action, SMB_REG_DATA0) - - elseif reg == I801_SMB_HSTDAT1 then - smbus.update_register(f, action, SMB_REG_DATA1) - - elseif reg == I801_SMB_BLKDAT then - intel_smbus_block_data(f, action); - - elseif reg == I801_SMB_AUXSTS then - if data_write then - f.reg.aux_sts = action.data; - else - action.data = f.reg.aux_sts; - end - - elseif reg == I801_SMB_AUXCTL then - if data_write then - f.reg.aux_ctl = action.data; - else - action.data = f.reg.aux_ctl; - end - - else - printk(f, action, "Unknown register 0x%02x\n", reg); - end -end - - -function intel_smbus_host_pre(f, action) - if action.write then - intel_smbus_host_access(f, action) - end - return handle_action(f, action) -end - -function intel_smbus_host_post(f, action) - if not action.write then - intel_smbus_host_access(f, action) - end - return true -end - - -local intel_smbus_host = { - name = "i801-smbus", - pre = intel_smbus_host_pre, - post = intel_smbus_host_post, - hide = hide_smbus_io, - base = 0x0, - size = 0x0, -} - -function intel_smbus_setup(base, size) - local f = intel_smbus_host - f.base = bit32.band(base, bit32.bnot(size-1)) - f.size = size - if not f.reg then - f.reg = { control = 0, status = 0, busy_count = 0, block_ptr = 0, aux_ctl = 0, aux_sts = 0 } - end - smbus.init(f) - - enable_hook(io_hooks, f) -end - diff --git a/SerialICE/simba/mainboard/aopen_dxpl_plus.lua b/SerialICE/simba/mainboard/aopen_dxpl_plus.lua new file mode 100644 index 0000000..1a4c715 --- /dev/null +++ b/SerialICE/simba/mainboard/aopen_dxpl_plus.lua @@ -0,0 +1,142 @@ +-- SerialICE +-- +-- Copyright (c) 2012 Kyösti Mälkki <kyosti.malkki(a)gmail.com> +-- +-- Permission is hereby granted, free of charge, to any person obtaining a copy +-- of this software and associated documentation files (the "Software"), to deal +-- in the Software without restriction, including without limitation the rights +-- to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +-- copies of the Software, and to permit persons to whom the Software is +-- furnished to do so, subject to the following conditions: +-- +-- The above copyright notice and this permission notice shall be included in +-- all copies or substantial portions of the Software. +-- +-- THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +-- IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +-- FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL +-- THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +-- LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +-- OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN +-- THE SOFTWARE. +-- + +load_filter("i82801") +load_filter("intel_bars") + +-- ********************************************************** +-- + +function mainboard_io_read(f, action) + -- Some timer loop + if ( action.addr == 0x61 ) then + if ( regs.eip == 0x1634 ) then + regs.ecx = 0x01 + return fake_action(f, action, 0x20) + end + if ( regs.eip == 0x163a ) then + regs.ecx = 0x01 + return fake_action(f, action, 0x30) + end + end + + -- IO slowdown + if action.addr == 0xed then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + if action.addr == 0xcfb then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + return skip_filter(f, action) +end + + +function mainboard_io_write(f, action) + + -- Catch RAM controller ready. + if action.addr == 0x80 and action.data == 0x2c and not ram_enabled() then + enable_ram() + end + + if action.addr == 0xcfb then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + if action.addr == 0xed then + if ( regs.eip == 0x1792 ) then + regs.ecx = 0x01 + end +if false then + -- SIPI delay + if ( regs.eip == 0xb3bc or regs.eip == 0xb3bf ) then + regs.ecx = 0x01 + end + if ( regs.eip == 0xb4ad or regs.eip == 0xb4af ) then + regs.ecx = 0x01 + end +end + ignore_action(f, action) + return drop_action(f, action, action.data) + end + + return skip_filter(f, action) +end + +function mainboard_io_pre(f, action) + if action.write then + return mainboard_io_write(f, action) + else + return mainboard_io_read(f, action) + end +end + +function mainboard_io_post(f, action) + if action.addr == 0xed or action.addr == 0xcfb then + return true + end + + -- If KBD controller returns status=0xff, clear 0x02. + if action.addr == 0x64 and not action.write and action.size == 1 then + if action.data == 0xff then + -- tag these but give out correct data + fake_action(f, action, action.data) + end + end +end + +filter_mainboard = { + name = "AOpen", + pre = mainboard_io_pre, + post = mainboard_io_post, + hide = hide_mainboard_io, + base = 0x0, + size = 0x10000 +} + + +function do_mainboard_setup() + enable_hook(io_hooks, filter_pci_io_cfg) + enable_hook(mem_hooks, filter_lapic) + enable_hook(mem_hooks, filter_ioapic) + + enable_hook(cpumsr_hooks, filter_intel_microcode) + enable_hook(cpuid_hooks, filter_multiprocessor) + + -- I have a hook to detect RAM initialisation from + -- a POST code I can skip this here + --enable_ram() + + enable_hook_pc80() + enable_hook_superio(0x2e, 0x07) + --enable_hook(io_hooks, filter_com1) + enable_hook_i82801dx() + northbridge_e7505() + + -- Apply mainboard hooks last, so they are the first ones to check + enable_hook(io_hooks, filter_mainboard) +end diff --git a/SerialICE/simba/mainboard/asrock_775i65g.lua b/SerialICE/simba/mainboard/asrock_775i65g.lua new file mode 100644 index 0000000..130b512 --- /dev/null +++ b/SerialICE/simba/mainboard/asrock_775i65g.lua @@ -0,0 +1,13 @@ + +load_filter("i82801") +load_filter("intel_bars") + +function do_mainboard_setup() + do_default_setup() + + enable_hook_i82801dx() + northbridge_i845() + + -- Apply mainboard hooks last, so they are the first ones to check + --enable_hook(io_hooks, filter_mainboard) +end diff --git a/SerialICE/simba/mainboard/asus_p4p800_vm.lua b/SerialICE/simba/mainboard/asus_p4p800_vm.lua new file mode 100644 index 0000000..88c4002 --- /dev/null +++ b/SerialICE/simba/mainboard/asus_p4p800_vm.lua @@ -0,0 +1,84 @@ + + +function mainboard_io_read(f, action) + -- Some timer loop + if ( action.addr == 0x61 ) then + if ( regs.eip == 0x1634 ) then + regs.ecx = 0x01 + return fake_action(f, action, 0x20) + end + if ( regs.eip == 0x163a ) then + regs.ecx = 0x01 + return fake_action(f, action, 0x30) + end + end + + -- IO slowdown + if action.addr == 0xed then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + if action.addr == 0xcfb then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + return skip_filter(f, action) +end + + +function mainboard_io_write(f, action) + + + if action.addr == 0xcfb then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + if action.addr == 0xe1 then + ignore_action(f, action) + return drop_action(f, action, action.data) + end + + return skip_filter(f, action) +end + +function mainboard_io_pre(f, action) + if action.write then + return mainboard_io_write(f, action) + else + return mainboard_io_read(f, action) + end +end + +function mainboard_io_post(f, action) + if action.addr == 0xe1 or action.addr == 0xed or action.addr == 0xcfb then + return true + end + if action.addr == 0x80 and not action.write then + return true + end +end + +filter_mainboard = { + name = "test", + pre = mainboard_io_pre, + post = mainboard_io_post, + hide = hide_mainboard_io, + base = 0x0, + size = 0x10000 +} + +load_filter("i82801") +load_filter("intel_bars") + +function do_mainboard_setup() + do_default_setup() + + enable_hook_i82801dx() + northbridge_i845() + + -- Apply mainboard hooks last, so they are the first ones to check + enable_hook(io_hooks, filter_mainboard) +end diff --git a/SerialICE/simba/mainboard/commell_lv_672.lua b/SerialICE/simba/mainboard/commell_lv_672.lua new file mode 100644 index 0000000..85e4421 --- /dev/null +++ b/SerialICE/simba/mainboard/commell_lv_672.lua @@ -0,0 +1,57 @@ + +function mainboard_io_read(f, action) + -- IO slowdown + if action.addr == 0xeb then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + return skip_filter(f, action) +end + + +function mainboard_io_write(f, action) + -- IO slowdown + if action.addr == 0xeb then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + return skip_filter(f, action) +end + +function mainboard_io_pre(f, action) + if action.write then + return mainboard_io_write(f, action) + else + return mainboard_io_read(f, action) + end +end + +function mainboard_io_post(f, action) + if action.addr == 0x80 and not action.write then + return true + end +end + +filter_mainboard = { + name = "test", + pre = mainboard_io_pre, + post = mainboard_io_post, + hide = hide_mainboard_io, + base = 0x0, + size = 0x10000 +} + +load_filter("i82801") +load_filter("intel_bars") + +function do_mainboard_setup() + do_default_setup() + + enable_hook_i82801fx() + northbridge_i915() + + -- Apply mainboard hooks last, so they are the first ones to check + enable_hook(io_hooks, filter_mainboard) +end diff --git a/SerialICE/simba/mainboard/conroexfire_esata2.lua b/SerialICE/simba/mainboard/conroexfire_esata2.lua new file mode 100644 index 0000000..4c95e6d --- /dev/null +++ b/SerialICE/simba/mainboard/conroexfire_esata2.lua @@ -0,0 +1,86 @@ + + + +function mainboard_io_read(f, action) + -- Some timer loop + if ( action.addr == 0x61 ) then + if ( regs.eip == 0x1634 ) then + regs.ecx = 0x01 + return fake_action(f, action, 0x20) + end + if ( regs.eip == 0x163a ) then + regs.ecx = 0x01 + return fake_action(f, action, 0x30) + end + end + + -- IO slowdown + if action.addr == 0xed then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + if action.addr == 0xcfb then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + return skip_filter(f, action) +end + + +function mainboard_io_write(f, action) + + + if action.addr == 0xcfb then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + if action.addr == 0xe1 then + ignore_action(f, action) + return drop_action(f, action, action.data) + end + + return skip_filter(f, action) +end + +function mainboard_io_pre(f, action) + if action.write then + return mainboard_io_write(f, action) + else + return mainboard_io_read(f, action) + end +end + +function mainboard_io_post(f, action) + if action.addr == 0xe1 or action.addr == 0xed or action.addr == 0xcfb then + return true + end + if action.addr == 0x80 and not action.write then + return true + end +end + +filter_mainboard = { + name = "test", + pre = mainboard_io_pre, + post = mainboard_io_post, + hide = hide_mainboard_io, + base = 0x0, + size = 0x10000 +} + +load_filter("i82801") +load_filter("intel_bars") + +function do_mainboard_setup() + do_default_setup() + + enable_hook_i82801gx() + + northbridge_i945() + + -- Apply mainboard hooks last, so they are the first ones to check + enable_hook(io_hooks, filter_mainboard) +end diff --git a/SerialICE/simba/mainboard/intel_d845gbv2.lua b/SerialICE/simba/mainboard/intel_d845gbv2.lua new file mode 100644 index 0000000..0224356 --- /dev/null +++ b/SerialICE/simba/mainboard/intel_d845gbv2.lua @@ -0,0 +1,92 @@ + + +function mainboard_io_read(f, action) + -- Some timer loop + if ( action.addr == 0x61 ) then + end + + -- IO slowdown + if action.addr == 0xed then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + if action.addr == 0xcfb then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + return skip_filter(f, action) +end + + +function mainboard_io_write(f, action) + + -- Catch RAM controller ready. + if action.addr == 0x80 and action.data == 0xd5 and not ram_enabled() then + -- enable_ram() + end + + if action.addr == 0xcfb then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + if action.addr == 0xe1 then + ignore_action(f, action) + return drop_action(f, action, action.data) + end + + return skip_filter(f, action) +end + +function mainboard_io_pre(f, action) + if action.write then + return mainboard_io_write(f, action) + else + return mainboard_io_read(f, action) + end +end + +function mainboard_io_post(f, action) + if action.addr == 0xe1 or action.addr == 0xed or action.addr == 0xcfb then + return true + end + if action.addr == 0x80 and not action.write then + return true + end +end + +filter_mainboard = { + name = "GEBV2", + pre = mainboard_io_pre, + post = mainboard_io_post, + hide = hide_mainboard_io, + base = 0x0, + size = 0x10000 +} + +load_filter("i82801") + +function do_mainboard_setup() + new_car_region(0xfef00000, 0x800) + + enable_hook(io_hooks, filter_pci_io_cfg) + enable_hook(mem_hooks, filter_lapic) + enable_hook(mem_hooks, filter_ioapic) + + enable_hook(cpumsr_hooks, filter_intel_microcode) + enable_hook(cpuid_hooks, filter_multiprocessor) + + -- I have a hook to detect RAM initialisation from + -- a POST code I can skip this here + enable_ram() + + enable_hook_pc80() + enable_hook_superio(0x2e, 0x07) + --enable_hook(io_hooks, filter_com1) + enable_hook_i82801dx() + + -- Apply mainboard hooks last, so they are the first ones to check + enable_hook(io_hooks, filter_mainboard) +end diff --git a/SerialICE/simba/mainboard/intel_d946gzis.lua b/SerialICE/simba/mainboard/intel_d946gzis.lua new file mode 100644 index 0000000..d1c92b1 --- /dev/null +++ b/SerialICE/simba/mainboard/intel_d946gzis.lua @@ -0,0 +1,77 @@ + + + +function mainboard_io_read(f, action) + -- IO slowdown + if action.addr == 0xed then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + if action.addr == 0xcfb then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + return skip_filter(f, action) +end + + +function mainboard_io_write(f, action) + + + if action.addr == 0xcfb then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + if action.addr == 0xe1 then + ignore_action(f, action) + return drop_action(f, action, action.data) + end + + return skip_filter(f, action) +end + +function mainboard_io_pre(f, action) + if action.write then + return mainboard_io_write(f, action) + else + return mainboard_io_read(f, action) + end +end + +function mainboard_io_post(f, action) + if action.addr == 0xe1 or action.addr == 0xed or action.addr == 0xcfb then + return true + end + if action.addr == 0x80 and not action.write then + return true + end +end + +filter_mainboard = { + name = "test", + pre = mainboard_io_pre, + post = mainboard_io_post, + hide = hide_mainboard_io, + base = 0x0, + size = 0x10000 +} + +load_filter("i82801") +load_filter("intel_bars") + +function do_mainboard_setup() + do_default_setup() + + enable_hook_i82801gx() + enable_hook(cpumsr_hooks, filter_intel_microcode) + enable_hook(cpuid_hooks, filter_multiprocessor) + northbridge_i946() + + new_car_region(0xfef00000,0x2000) + + -- Apply mainboard hooks last, so they are the first ones to check + enable_hook(io_hooks, filter_mainboard) +end diff --git a/SerialICE/simba/mainboard/msi_ms7133.lua b/SerialICE/simba/mainboard/msi_ms7133.lua new file mode 100644 index 0000000..2aec108 --- /dev/null +++ b/SerialICE/simba/mainboard/msi_ms7133.lua @@ -0,0 +1,69 @@ + +function mainboard_io_read(f, action) + -- IO slowdown + if action.addr == 0xed then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + if action.addr == 0xcfb then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + return skip_filter(f, action) +end + + +function mainboard_io_write(f, action) + if action.addr == 0xcfb then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + if action.addr == 0xe1 then + ignore_action(f, action) + return drop_action(f, action, action.data) + end + + return skip_filter(f, action) +end + +function mainboard_io_pre(f, action) + if action.write then + return mainboard_io_write(f, action) + else + return mainboard_io_read(f, action) + end +end + +function mainboard_io_post(f, action) + if action.addr == 0xe1 or action.addr == 0xed or action.addr == 0xcfb then + return true + end + if action.addr == 0x80 and not action.write then + return true + end +end + +filter_mainboard = { + name = "test", + pre = mainboard_io_pre, + post = mainboard_io_post, + hide = hide_mainboard_io, + base = 0x0, + size = 0x10000 +} + +load_filter("i82801") +load_filter("intel_bars") + +function do_mainboard_setup() + do_default_setup() + + enable_hook_i82801fx() + northbridge_i915() + + -- Apply mainboard hooks last, so they are the first ones to check + enable_hook(io_hooks, filter_mainboard) +end diff --git a/SerialICE/simba/mainboard/via_epia_m_850.lua b/SerialICE/simba/mainboard/via_epia_m_850.lua new file mode 100644 index 0000000..44f0fde --- /dev/null +++ b/SerialICE/simba/mainboard/via_epia_m_850.lua @@ -0,0 +1,164 @@ +-- SerialICE +-- +-- Copyright (c) 2012 Kyösti Mälkki <kyosti.malkki(a)gmail.com> +-- +-- Permission is hereby granted, free of charge, to any person obtaining a copy +-- of this software and associated documentation files (the "Software"), to deal +-- in the Software without restriction, including without limitation the rights +-- to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +-- copies of the Software, and to permit persons to whom the Software is +-- furnished to do so, subject to the following conditions: +-- +-- The above copyright notice and this permission notice shall be included in +-- all copies or substantial portions of the Software. +-- +-- THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +-- IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +-- FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL +-- THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +-- LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +-- OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN +-- THE SOFTWARE. +-- + + +-- ********************************************************** +-- + +function mainboard_io_read(f, action) + + -- IO slowdown + if action.addr == 0xed then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + -- IO slowdown + if action.addr == 0xeb then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + if action.addr == 0xcfb then + ignore_action(f, action) + return drop_action(f, action, 0) + end + + return skip_filter(f, action) +end + + +function mainboard_io_write(f, action) + + -- Catch RAM controller ready. + if action.addr == 0x80 and action.data == 0x2c and not ram_enabled() then + enable_ram() + end + +-- if action.addr == 0xcfb then +-- ignore_action(f, action) +-- return drop_action(f, action, 0) +-- end + + if action.addr == 0xeb then + ignore_action(f, action) + return drop_action(f, action, action.data) + end + + if action.addr == 0xed then + ignore_action(f, action) + return drop_action(f, action, action.data) + end + + return skip_filter(f, action) +end + +function mainboard_io_pre(f, action) + if action.write then + return mainboard_io_write(f, action) + else + return mainboard_io_read(f, action) + end +end + +function mainboard_io_post(f, action) + if action.addr == 0xeb or action.addr == 0xed then + return true + end + + -- If KBD controller returns status=0xff, clear 0x02. + if action.addr == 0x64 and not action.write and action.size == 1 then + if action.data == 0xff then + -- tag these but give out correct data + fake_action(f, action, action.data) + end + end +end + +filter_mainboard = { + name = "VIA", + pre = mainboard_io_pre, + post = mainboard_io_post, + hide = hide_mainboard_io, + base = 0x0, + size = 0x10000 +} + + + +-- MOVE THIS TO CHIPSET FILE + +load_filter("intel_smbus") +load_filter("via_bars") + +function smbus_bar_hook(dev, reg, base) + intel_smbus_setup(base, 0x20) +end + +dev_sb_lpc = { + pci_dev = pci_bdf(0x0,0x1f,0x3,0x0), + name = "Smbus", + bar = {}, +} + +dev_power = { + pci_dev = pci_bdf(0x0,0x11,0x0,0x0), + name = "SYS", + bar = {}, + acpi = { f = nil }, + tco = { f = nil }, +} + +function pm_io_bar(dev, reg, base) + dev.acpi.name = "ACPI" + dev.acpi.base = base + dev.acpi.size = 0x60 + generic_io_bar(dev.acpi) +end + + + +-- **************** + +function do_mainboard_setup() + enable_hook(io_hooks, filter_pci_io_cfg) + enable_hook(mem_hooks, filter_lapic) + enable_hook(mem_hooks, filter_ioapic) + + enable_hook(cpumsr_hooks, filter_intel_microcode) + enable_hook(cpuid_hooks, filter_multiprocessor) + + -- I have a hook to detect RAM initialisation from + -- a POST code I can skip this here + --enable_ram() + + enable_hook_pc80() + enable_hook_superio(0x4e, 0x07) + + northbridge_vx900() + pci_cfg16_hook(dev_power, 0x88, "PM", pm_io_bar) + pci_cfg16_hook(dev_power, 0xd0, "SMBus", smbus_bar_hook) + + -- Apply mainboard hooks last, so they are the first ones to check + enable_hook(io_hooks, filter_mainboard) +end diff --git a/SerialICE/simba/msi_ms7133.lua b/SerialICE/simba/msi_ms7133.lua deleted file mode 100644 index 039496f..0000000 --- a/SerialICE/simba/msi_ms7133.lua +++ /dev/null @@ -1,69 +0,0 @@ - -function mainboard_io_read(f, action) - -- IO slowdown - if action.addr == 0xed then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - if action.addr == 0xcfb then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - return skip_filter(f, action) -end - - -function mainboard_io_write(f, action) - if action.addr == 0xcfb then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - if action.addr == 0xe1 then - ignore_action(f, action) - return drop_action(f, action, action.data) - end - - return skip_filter(f, action) -end - -function mainboard_io_pre(f, action) - if action.write then - return mainboard_io_write(f, action) - else - return mainboard_io_read(f, action) - end -end - -function mainboard_io_post(f, action) - if action.addr == 0xe1 or action.addr == 0xed or action.addr == 0xcfb then - return true - end - if action.addr == 0x80 and not action.write then - return true - end -end - -filter_mainboard = { - name = "test", - pre = mainboard_io_pre, - post = mainboard_io_post, - hide = hide_mainboard_io, - base = 0x0, - size = 0x10000 -} - -dofile("i82801.lua") -dofile("intel_bars.lua") - -function do_mainboard_setup() - do_default_setup() - - enable_hook_i82801fx() - northbridge_i915() - - -- Apply mainboard hooks last, so they are the first ones to check - enable_hook(io_hooks, filter_mainboard) -end diff --git a/SerialICE/simba/pc80.lua b/SerialICE/simba/pc80.lua deleted file mode 100644 index 35d01e3..0000000 --- a/SerialICE/simba/pc80.lua +++ /dev/null @@ -1,534 +0,0 @@ --- ********************************************************** --- --- Debug POST port at IO 0x80 - -function debugport_post(f, action) - if action.write then - printk(f, action, "*** %02x ***\n", action.data) - return true - end - return false -end - -filter_debugport = { - name = "POST", - pre = handle_action, - post = debugport_post, - hide = true, - base = 0x80, - size = 0x1 -} - - --- ********************************************************** --- --- i8259 PIC - -function i8259_pre(f, action) - local master = (bit32.rshift(0x05, action.addr) == 0x1) - local slave = (bit32.rshift(0x05, action.addr) == 0x5) - local reg = bit32.band(0x03, action.addr) - if reg == 0 or reg == 1 then - return handle_action(f, action) - end - return skip_filter(f, action) -end - -function i8259_post(f,action) - local reg = bit32.band(0x03, action.addr) - if reg == 0 or reg == 1 then - return true - end - return false -end - -function i8259_edge_pre(f, action) - return handle_action(f, action) -end - -function i8259_edge_post(f,action) - return true -end - -filter_i8259_master = { - name = "i8259 A", - pre = i8259_pre, - post = i8259_post, - hide = hide_i8259_io, - base = 0x20, - size = 0x20 -} - -filter_i8259_slave = { - name = "i8259 B", - pre = i8259_pre, - post = i8259_post, - hide = hide_i8259_io, - base = 0xa0, - size = 0x20 -} - -filter_i8259_edge = { - name = "i8259 C", - pre = i8259_edge_pre, - post = i8259_edge_post, - hide = hide_i8259_io, - base = 0x4d0, - size = 0x2 -} - --- ********************************************************** --- --- i8237 DMA - -function i8237_pre(f, action) - if action.addr == 0x80 then - return skip_filter(f, action) - end - return handle_action(f, action) -end - -function i8237_post(f, action) - if action.addr == 0x80 then - return false - end - return true -end - - -filter_i8237_a = { - name = "i8237 A", - pre = i8237_pre, - post = i8237_post, - hide = hide_i8237_io, - base = 0x00, - size = 0x20 -} -filter_i8237_b = { - name = "i8237 B", - pre = i8237_pre, - post = i8237_post, - hide = hide_i8237_io, - base = 0x80, - size = 0x20 -} -filter_i8237_c = { - name = "i8237 C", - pre = i8237_pre, - post = i8237_post, - hide = hide_i8237_io, - base = 0xc0, - size = 0x20 -} - - --- ********************************************************** --- --- i8254 IRQ0 and Speaker - -function i8254_pre(f, action) - - -- nothing to do on reads - if not action.write then - return handle_action(f, action) - end - - local reg = bit32.band(0x03, action.addr) - if reg >= 0x0 and reg < 0x03 then - local counter_n = 0 - local counter_p = 0 - if f.counter[reg].lsb then - f.counter[reg].lsb = f.counter[reg].after_lsb - counter_n = action.data - counter_p = bit32.band(0xff00, f.counter[reg].init) - else - counter_n = bit32.lshift(action.data, 8) - counter_p = bit32.band(0x00ff, f.counter[reg].init) - end - f.counter[reg].init = bit32.bor(counter_n, counter_p) - elseif reg == 0x03 then - local reg2 = bit32.rshift(action.data, 6) - local rwsel = bit32.band(0x3, bit32.rshift(action.data, 4)) - if reg2 == 0x3 then - if bit32.band(0x10, action.data) == 0 then - f.counter[0].readback = (bit32.band(0x2, action.data) ~= 0) - f.counter[1].readback = (bit32.band(0x4, action.data) ~= 0) - f.counter[2].readback = (bit32.band(0x8, action.data) ~= 0) - end - if bit32.band(0x20, action.data) == 0 then - f.counter[0].latch = (bit32.band(0x2, action.data) ~= 0) - f.counter[1].latch = (bit32.band(0x4, action.data) ~= 0) - f.counter[2].latch = (bit32.band(0x8, action.data) ~= 0) - end - elseif rwsel == 0x0 then - f.counter[reg2].latch = true - else - f.counter[reg2].mode = bit32.band(0xf, action.data) - if rwsel == 0x1 then - f.counter[reg2].lsb = true - f.counter[reg2].after_lsb = true - elseif rwsel == 0x2 then - f.counter[reg2].lsb = false - f.counter[reg2].after_lsb = false - elseif rwsel == 03 then - f.counter[reg2].lsb = true - f.counter[reg2].after_lsb = false - end - end - end - return handle_action(f, action) -end - -function i8254_post(f, action) - local reg = bit32.band(0x03, action.addr) - if reg >= 0x0 and reg < 0x03 then - if action.write then - local mode = bit32.band(0x0f, f.counter[reg].mode); - local modestr = "Mode" .. mode - if mode == 0x4 then - modestr = "Square Wave" - elseif mode == 0x6 then - modestr = "Rate Generator" - end - if bit32.band(0x01, mode) ~= 0 then - modestr = modestr .. " (BCD)" - end - - local period = 838 * f.counter[reg].init - if reg == 0 then - if period == 0 then - printk(f, action, "IRQ0 disabled\n") - else - printk(f, action, "IRQ0 (%s): %d ns\n", modestr, period) - end - elseif reg == 1 then - if period == 0 then - printk(f, action, "Refresh disabled\n") - else - printk(f, action, "Refresh (%s): %d ns\n", modestr, period) - end - elseif reg == 2 then - if period ~= 0 then - local spktone = 1193000 / f.counter[reg].init - printk(f, action, "Speaker Tone (%s): %d kHz\n", modestr, spktone) - end - end - else - if f.counter[reg].readback then - f.counter[reg].readback = false - f.counter[reg].status = action.data - printk(f, action, "[%d] status = %02x\n", reg, f.counter[reg].status) - end - if f.counter[reg].latch then - f.counter[reg].latch = false - f.counter[reg].current = action.data - printk(f, action, "[%d] current = %d\n", reg, f.counter[reg].current) - end - end - elseif reg == 0x03 then - end - return true -end - -i8254_counters = {} -i8254_counters[0x0] = { init=0, current=0, latch, readback, status=0 } -i8254_counters[0x1] = { init=0, current=0, latch, readback, status=0 } -i8254_counters[0x2] = { init=0, current=0, latch, readback, status=0 } - -filter_i8254_a = { - name = "i8254 A", - pre = i8254_pre, - post = i8254_post, - base = 0x40, - hide = hide_i8254_io, - size = 4, - counter = i8254_counters, -} -filter_i8254_b = { - name = "i8254 B", - pre = i8254_pre, - post = i8254_post, - base = 0x50, - hide = hide_i8254_io, - size = 4, - counter = i8254_counters, -} - - --- ********************************************************** --- --- i8042 KBD, A20, Reset(?) - -function i8042_write(f, action) - if action.addr == 0x60 then - f.reg.data = action.data - f.reg.sts = bit32.band(f.reg.sts, 0xf7) - if (f.reg.cmd == 0xd1) then - f.reg.A20 = (bit32.band(0x02, action.data) == 0x02) - end - return handle_action(f, action) - end - if action.addr == 0x64 then - f.reg.cmd = action.data - f.reg.sts = bit32.bor(f.reg.sts, 0x0a) - return handle_action(f, action) - end - return skip_filter(f, action) -end - -function i8042_read(f, action) - if action.addr == 0x60 then - f.reg.sts = bit32.band(f.reg.sts, 0xfe) - return handle_action(f, action) - end - if action.addr == 0x64 then - return handle_action(f, action) - end - return skip_filter(f, action) -end - -function i8042_pre(f, action) - if (action.write) then - return i8042_write(f, action) - else - return i8042_read(f, action) - end -end - -function i8042_post(f, action) - if action.addr == 0x60 then - if action.write and f.reg.cmd == 0xd1 then - if f.reg.A20 then - printk(f, action, "A20 enabled\n") - else - printk(f, action, "A20 disabled\n") - end - end - return true - end - if action.addr == 0x64 then - return true - end - return false -end - -filter_i8042 = { - decode = F_FIXED, - name = "i8042", - pre = i8042_pre, - post = i8042_post, - hide = hide_i8042_io, - base = 0x60, - size = 0x5, - reg = { data = 0, sts = 0, cmd = 0, A20 = 0 } -} - - --- ********************************************************** --- --- CMOS nvram - - -function nvram_bank(addr) - if bit32.band(0xfe, addr) == 0x70 then - return 1 - elseif bit32.band(0xfe, addr) == 0x72 then - return 2 - elseif bit32.band(0xfe, addr) == 0x74 then - return 2 - else - return 0 - end -end - -function nvram_write(f, action) - local val = action.data - local rtc = false - local is_index = (bit32.band(0x01, action.addr) == 0x0) - local bank = nvram_bank(action.addr) - - if bank == 1 then - if is_index then - f.reg.p70 = bit32.band(0x7f, val) - if f.reg.p70 < 0x0E then - rtc = true - end - else - f.nvram_data[f.reg.p70] = val - f.nvram_set[f.reg.p70] = true - if f.reg.p70 < 0x0E then - rtc = true - end - end - elseif bank == 2 then - if is_index then - f.reg.p72 = bit32.band(0x7f, val) - else - local index = 0x80 + f.reg.p72 - f.nvram_data[index] = val - f.nvram_set[index] = true - end - end - if cache_nvram and not rtc then - return fake_action(f, action, val) - else - return handle_action(f, action) - end -end - -function nvram_read(f, action) - local val = 0 - local rtc = false - local is_index = (bit32.band(0x01, action.addr) == 0x0) - local bank = nvram_bank(action.addr) - - if bank == 1 then - if is_index then - -- NMI returned as 0 - val = f.reg.p70 - if f.reg.p70 < 0x0E then - rtc = true - end - else - if f.reg.p70 < 0x0E then - rtc = true - elseif f.nvram_set[f.reg.p70] then - val = f.nvram_data[f.reg.p70] - end - end - else -- bank - if is_index then - -- NMI returned as 0 - val = f.reg.p72 - else - local index = 0x80 + f.reg.p72 - if f.nvram_set[index] then - val = f.nvram_data[index] - end - end - end - if cache_nvram and not rtc then - return fake_action(f, action, val) - else - return handle_action(f, action) - end -end - -function nvram_pre(f, action) - if (action.write) then - return nvram_write(f, action) - else - return nvram_read(f, action) - end -end - -function nvram_post(f, action) - if bit32.band(0x01, action.addr) == 0x0 then - return true - end - - local bank = nvram_bank(action.addr) - if (action.write) then - if bank == 1 then - printk(f, action, "[%02x] <= %02x\n", f.reg.p70, action.data) - elseif bank == 2 then - printk(f, action, "[%02x] <= %02x\n", 0x80 + f.reg.p72, action.data) - end - else - if bank == 1 then - printk(f, action, "[%02x] => %02x\n", f.reg.p70, action.data) - elseif bank == 2 then - printk(f, action, "[%02x] => %02x\n", 0x80 + f.reg.p72, action.data) - end - end - return true -end - -filter_nvram = { - name = "NVram", - pre = nvram_pre, - post = nvram_post, - base = 0x70, - size = 8, - hide = hide_nvram_io, - reg = { p70 = 0, p72 = 0 }, - nvram_data = {}, - nvram_set = {}, -} - - --- ********************************************************** --- --- Reset at 0xcf9 - -function sys_rst_pre(f, action) - if action.size == 1 then - if action.write and bit32.band(action.data, 0x04) == 0x04 then - SerialICE_system_reset() - end - return handle_action(f, action) - end - return skip_filter(f, action) -end - -function sys_rst_post(f, action) - if action.size == 1 then - if action.write then - printk(f, action, "Control = %02x\n", action.data) - return true - end - end - return false -end - -filter_reset = { - name = "Reset", - pre = sys_rst_pre, - post = sys_rst_post, - hide = false, - base = 0xcf9, - size = 1 -} - --- ********************************************************** --- --- VGA io - -function vga_io_pre(f, action) - return skip_filter(f, action) -end - -function vga_io_post(f, action) - return true -end - -filter_vga_io = { - name = "VGA", - pre = vga_io_pre, - post = vga_io_post, - hide = false, - base = 0x3c0, - size = 0x20, -} - - --- ********************************************************** --- --- Enable all PC80 stuff - -function enable_hook_pc80() - enable_hook(io_hooks, filter_i8237_a) - enable_hook(io_hooks, filter_i8237_b) - enable_hook(io_hooks, filter_i8237_c) - enable_hook(io_hooks, filter_i8259_master) - enable_hook(io_hooks, filter_i8259_slave) - enable_hook(io_hooks, filter_i8259_edge) - enable_hook(io_hooks, filter_i8042) - enable_hook(io_hooks, filter_i8254_a) - enable_hook(io_hooks, filter_i8254_b) - enable_hook(io_hooks, filter_reset) - enable_hook(io_hooks, filter_nvram) - enable_hook(io_hooks, filter_vga_io) - enable_hook(io_hooks, filter_debugport) -end - diff --git a/SerialICE/simba/serialice.lua b/SerialICE/simba/serialice.lua index 4905da1..191a691 100644 --- a/SerialICE/simba/serialice.lua +++ b/SerialICE/simba/serialice.lua @@ -36,12 +36,18 @@ dofile("core_io.lua") dofile("memory.lua") dofile("cpu.lua") dofile("pci_cfg.lua") -dofile("pc80.lua") -dofile("superio.lua") dofile("mmio.lua") io.write("SerialICE: LUA script initialized.\n") +function load_filter(str) + local filename = "chipset/" .. str .. ".lua" + dofile(filename) +end + +load_filter("pc80") +load_filter("superio") + function do_minimal_setup() enable_hook(io_hooks, filter_io_fallback) enable_hook(mem_hooks, filter_mem_fallback) @@ -64,18 +70,19 @@ function do_default_setup() end end -mainboard_file = string.format("%s.lua", string.lower(string.gsub(SerialICE_mainboard, "[ -]", "_"))) +root_info("Mainboard %s connected.\n", SerialICE_mainboard) +local mainboard_file = string.format("mainboard/%s.lua", string.lower(string.gsub(SerialICE_mainboard, "[ -]", "_"))) local mainboard_lua, ferr = loadfile(mainboard_file) local mainboard_script = io.open(mainboard_file) if mainboard_script then io.close(mainboard_script) assert(mainboard_lua, ferr) mainboard_lua() - root_info("Mainboard script %s initialized.\n", mainboard_file) + root_info("Using script %s.\n", mainboard_file) do_minimal_setup() do_mainboard_setup() else - root_info("Mainboard script %s not found.\n", mainboard_file) + root_info("Script %s not found.\n", mainboard_file) do_minimal_setup() do_default_setup() end diff --git a/SerialICE/simba/smbus_host.lua b/SerialICE/simba/smbus_host.lua deleted file mode 100644 index 1da4b0c..0000000 --- a/SerialICE/simba/smbus_host.lua +++ /dev/null @@ -1,558 +0,0 @@ - - -local debug_smbus = false -smbus = {} - -smbus.host = { - state = { current = 0, jump_to = 0 }, - proto = 0, - start_proto = 0, - - passive = true, - signals = 0, - - slave = 0, - cmd = 0, - data0 = 0, - data1 = 0, - data0_valid = false, - data1_valid = false, - wr_data0 = 0, - wr_data1 = 0, - block_register = 0, - - block = {}, - max_index = 0, -} - -MAX_BLOCK_SRAM = 32 - -if true then - for i = 0, MAX_BLOCK_SRAM-1, 1 do - smbus.host.block[i] = { hw = 0, tmp = 0, hw_valid = false, tmp_valid = false } - end -end - --- ******************* - -SIG_INUSE = 0 -SIG_RELEASE = 1 -SIG_START = 2 -SIG_ABORT = 3 -SIG_DONE = 4 -SIG_ACK = 5 -SIG_TIMEOUT = 6 -SIG_TIMEOUT_ACK = 7 -SIG_DATA_WRITE = 8 - -local function signal_reset(f) - f.host.signals = 0 -end - -local function signal_set(f, flag) - local mask = bit32.lshift(1, flag) - f.host.signals = bit32.bor(f.host.signals, mask) -end - -local function signal_clr(f, flag) - local mask = bit32.bnot(bit32.lshift(1, flag)) - f.host.signals = bit32.band(f.host.signals, mask) - -end - -local function signal_in(f, flag) - local mask = bit32.lshift(1, flag) - return bit32.band(f.host.signals, mask) ~= 0 -end - --- ******************* - --- SMBus Protocol Message Types -SMBUS_NOOP = 0 -SMBUS_QUICK = 1 -SMBUS_BYTE = 2 -SMBUS_BYTE_DATA = 3 -SMBUS_WORD_DATA = 4 -SMBUS_PROC_CALL = 5 -SMBUS_BLOCK_DATA = 6 -SMBUS_I2C_BLOCK_DATA = 7 -SMBUS_BLOCK_PROCESS = 8 - -local proto_name = {} -proto_name[SMBUS_NOOP] = "(no-op)" -proto_name[SMBUS_QUICK] = "quick" -proto_name[SMBUS_BYTE] = "byte" -proto_name[SMBUS_BYTE_DATA] = "byte_data" -proto_name[SMBUS_WORD_DATA] = "word_data" -proto_name[SMBUS_PROC_CALL] = "proc_call" -proto_name[SMBUS_BLOCK_DATA] = "block" -proto_name[SMBUS_I2C_BLOCK_DATA] = "i2c_block" -proto_name[SMBUS_BLOCK_PROCESS] = "block_process" - --- SMBus Host -SMB_REG_CMD = 1 -SMB_REG_SLAVE = 2 -SMB_REG_DATA0 = 3 -SMB_REG_DATA1 = 4 -SMB_REG_BLOCK = 5 -SMB_REG_PROTO = 6 - - -local function dump_block(f, length) - local block = "" - local max_length = math.min(length, MAX_BLOCK_SRAM) - - for i=0, max_length-1, 1 do - if f.host.block[i].hw_valid then - block = block .. string.format(" %02x", f.host.block[i].hw) - else - block = block .. " xx" - end - end - return block -end - - --- FIXME: Probably wrong for process calls and hw-dependent. -local function host_proto(f, proto) - return f.host.proto == proto -end - -local function host_reading(f) - return bit32.band(f.host.slave, 0x01) == 0x01 -end - - - -local function dump_transaction(f, action) - - local data0, data1, length, dir - local invalid_data = "xx" - local iodir = {} - iodir[0] = "<=" - iodir[1] = "=>" - - if host_reading(f) then - dir = iodir[1] - data0 = invalid_data - length = f.host.max_index - if f.host.data0_valid then - length = f.host.data0 - data0 = string.format("%02x", f.host.data0) - end - data1 = invalid_data - if f.host.data1_valid then - data1 = string.format("%02x", f.host.data1) - end - else - dir = iodir[0] - length = f.host.wr_data0 - data0 = string.format("%02x", f.host.wr_data0) - data1 = string.format("%02x", f.host.wr_data1) - end - - - local dump = string.format("%02x %s ", f.host.slave / 2, proto_name[f.host.proto]) - - if host_proto(f, SMBUS_QUICK) then - - elseif host_proto(f, SMBUS_BYTE) then - dump = dump .. string.format("%02x %s %s", f.host.cmd, dir, data0) - - elseif host_proto(f, SMBUS_BYTE_DATA) then - dump = dump .. string.format("%02x %s %s", f.host.cmd, dir, data0) - - elseif host_proto(f, SMBUS_WORD_DATA) then - dump = dump .. string.format("%02x %s %s%s", f.host.cmd, dir, data0, data1) - - elseif host_proto(f, SMBUS_PROC_CALL) then - dump = dump .. string.format("%02x %02x %02x %s %s %s", f.host.cmd, - f.host.wr_data0, f.host.wr_data1, iodir[1], data0, data1) - - elseif host_proto(f, SMBUS_BLOCK_DATA) then - dump = dump .. string.format("%02x len=%02d %s", f.host.cmd, length, dir) - dump = dump .. dump_block(f, length) .. "" - - elseif host_proto(f, SMBUS_I2C_BLOCK_DATA) then - dump = dump .. string.format("%02x %02x %02x len=%02d %s", - f.host.cmd, f.host.data0, f.host.data1, f.host.max_index, dir) - dump = dump .. dump_block(f, length) .. "" - - elseif host_proto(f, SMBUS_BLOCK_PROCESS) then - dump = dump .. string.format("%02x len=%02d %s", f.host.cmd, length, iodir[1]) - dump = dump .. dump_block(f, length) .. "" - else - dump = dump .. "Cannot parse command" - end - - if signal_in(f, SIG_TIMEOUT) then - dump = dump .. " (TIMEOUT) " - end - - printk(f, action, "%s\n", dump) -end - - --- ******************* - -HOST_NOOP = 0 -HOST_IDLE = 1 -HOST_ACTIVE = 2 -HOST_STARTED = 3 -HOST_WAIT = 4 -HOST_COMPLETE = 5 -HOST_FAIL = 6 - -local ctrl_state = {} -ctrl_state[HOST_NOOP] = "noop" -ctrl_state[HOST_IDLE] = "idle" -ctrl_state[HOST_ACTIVE] = "active" -ctrl_state[HOST_STARTED] = "started" -ctrl_state[HOST_WAIT] = "wait" -ctrl_state[HOST_COMPLETE] = "complete" -ctrl_state[HOST_FAIL] = "failed" - -function dprintk(...) - if debug_smbus then - printk(...) - end -end - -local function host_jump(f, state) - f.host.state.jump_to = state -end - -local function host_change_state(f, prev_state, new_state) - - if new_state == HOST_NOOP then - --printk(f, f.host.action, "state switch to HOST_NOOP\n") - new_state = HOST_IDLE - end - - dprintk(f, f.host.action, "%s -> %s\n", - ctrl_state[prev_state], ctrl_state[new_state]) - - -- Jumping to current is no jump. - f.host.state.current = new_state - f.host.state.jump_to = new_state - - if smbus.state(f, HOST_IDLE) then - signal_reset(f) - - elseif smbus.state(f, HOST_ACTIVE) then - signal_reset(f) - signal_set(f, SIG_INUSE) - - elseif smbus.state(f, HOST_STARTED) then - local i - f.host.proto = f.host.start_proto - f.host.wr_data0 = f.host.data0 - f.host.wr_data1 = f.host.data1 - - -- Invalidation used with reads - f.host.data0_valid = false - f.host.data1_valid = false - - for i = 0, MAX_BLOCK_SRAM-1, 1 do - f.host.max_index = 0 - -- On block writes, previously read data in buffer is also valid. - if f.host.block[i].tmp_valid then - f.host.block[i].hw = f.host.block[i].tmp - f.host.block[i].tmp_valid = false - f.host.block[i].hw_valid = true - end - -- On block reads, no data in buffer is yet valid. - if host_reading(f) and host_proto(f, SMBUS_BLOCK_DATA) then - f.host.block[i].hw_valid = false; - end - end - - elseif smbus.state(f, HOST_COMPLETE) then - dump_transaction(f, f.host.action) - if signal_in(f, SIG_RELEASE) then - host_jump(f, HOST_IDLE) - else - host_jump(f, HOST_ACTIVE) - end - - elseif smbus.state(f, HOST_FAIL) then - dump_transaction(f, f.host.action) - host_jump(f, HOST_ACTIVE) - end - -end - -local function host_switch(f, new_state) - local prev_state = f.host.state.current - while prev_state ~= new_state do - host_change_state(f, prev_state, new_state) - prev_state = f.host.state.current - new_state = f.host.state.jump_to - end -end - -local function host_read_completed(f) - - if not host_reading(f) then - return true - end - - local complete = false - - if host_proto(f, SMBUS_QUICK) then - complete = true - - elseif host_proto(f, SMBUS_BYTE) then - complete = f.host.data0_valid - - elseif host_proto(f, SMBUS_BYTE_DATA) then - complete = f.host.data0_valid - - elseif host_proto(f, SMBUS_WORD_DATA) then - complete = f.host.data0_valid and f.host.data1_valid - - elseif host_proto(f, SMBUS_BLOCK_DATA) then - complete = f.host.data0_valid and f.host.max_index >= f.host.data0 - - elseif host_proto(f, SMBUS_PROC_CALL) or host_proto(f, SMBUS_I2C_BLOCK_DATA) - or host_proto(f, SMBUS_BLOCK_PROCESS) then - printk(f, f.host.action, "Unimplemented completion (proto %d)\n", f.host.proto) - end - return complete -end - - --- Syncronize state machine according to input signals. -local function host_sync(f) - --- if release and not smbus.state(f, HOST_ACTIVE) then --- printk(f, f.host.action, "Premature reset of bit INUSE_STS\n") --- end - if signal_in(f, SIG_ABORT) then - -- FIXME Killing on-going transaction. - host_switch(f, HOST_COMPLETE) - end - - if smbus.state(f, HOST_IDLE) then - if signal_in(f, SIG_INUSE) then - host_switch(f, HOST_ACTIVE) - end - if signal_in(f, SIG_START) then - host_switch(f, HOST_STARTED) - end - - elseif smbus.state(f, HOST_ACTIVE) then - if signal_in(f, SIG_START) then - host_switch(f, HOST_STARTED) - end - - elseif smbus.state(f, HOST_STARTED) then - if signal_in(f, SIG_TIMEOUT) then - host_switch(f, HOST_FAIL) - elseif signal_in(f, SIG_DONE) then - host_switch(f, HOST_WAIT) - end - - elseif smbus.state(f, HOST_WAIT) then - if signal_in(f, SIG_START) then - -- Restarting previous transaction. - host_switch(f, HOST_COMPLETE) - host_switch(f, HOST_STARTED) - elseif signal_in(f, SIG_ACK) and not host_reading(f) then - -- Complete after sw ack. - host_switch(f, HOST_COMPLETE) - elseif signal_in(f, SIG_DATA_WRITE) or host_read_completed(f) then - -- Complete after all data read or new data written - -- remain active - signal_clr(f, SIG_RELEASE) - host_switch(f, HOST_COMPLETE) - end - elseif smbus.state(f, HOST_FAIL) then - if signal_in(f, SIG_TIMEOUT_ACK) then - host_switch(f, HOST_COMPLETE) - end - end - - if signal_in(f, SIG_START) and not smbus.state(f, HOST_STARTED) then - printk(f, f.host.action, "Starting from illegal state\n"); - end - - signal_clr(f, SIG_DONE) - signal_clr(f, SIG_START) - signal_clr(f, SIG_DATA_WRITE) -end - - - --- ******************************* - --- Mutual exclusion. -function smbus.get_resource(f) - signal_set(f, SIG_INUSE) - host_sync(f) -end - -function smbus.put_resource(f) - signal_set(f, SIG_RELEASE) - host_sync(f) -end - --- status -function smbus.state(f, state) - return f.host.state.current == state -end - -function smbus.passive(f) - return f.host.passive -end - --- control -function smbus.start(f, proto) - signal_set(f, SIG_START) - f.host.start_proto = proto - host_sync(f) -end - -function smbus.timeout(f) - signal_set(f, SIG_TIMEOUT) - host_sync(f) -end - -function smbus.timeout_ack(f) - signal_set(f, SIG_TIMEOUT_ACK) - host_sync(f) -end - -function smbus.done(f) - signal_set(f, SIG_DONE) - host_sync(f) -end - -function smbus.ack(f) - signal_set(f, SIG_ACK) - host_sync(f) -end - -function smbus.abort(f) - signal_set(f, SIG_ABORT) - host_sync(f) -end - --- A data read may complete and close an active transaction. -function smbus.data_read(f, action) - if not action.write then - signal_clr(f, SIG_DATA_WRITE) - host_sync(f) - end -end - --- A data write will close active transaction. -function smbus.data_write(f, action) - if action.write then - signal_set(f, SIG_DATA_WRITE) - host_sync(f) - end -end - - - -function smbus.update_register(f, action, smb_reg) - - local data_write = action.write or smbus.passive(f) - - -- A write to data registers completes previous transaction. - smbus.data_write(f, action) - - if smb_reg == SMB_REG_SLAVE then - if data_write then - f.host.slave = action.data - else - action.data = f.host.slave - end - - elseif smb_reg == SMB_REG_CMD then - if data_write then - f.host.cmd = action.data - else - action.data = f.host.cmd - end - - elseif smb_reg == SMB_REG_DATA0 then - if data_write then - f.host.data0 = action.data - else - action.data = f.host.data0 - end - f.host.data0_valid = true - - elseif smb_reg == SMB_REG_DATA1 then - if data_write then - f.host.data1 = action.data - else - action.data = f.host.data1 - end - f.host.data1_valid = true - - elseif smb_reg == SMB_REG_BLOCK then - if data_write then - f.host.block_register = action.data - else - action.data = f.host.block_register - end - -- Nothing here, smbus.host_block_data updates datas. - -- This exist to check completion below for blocks. - elseif smb_reg == SMB_REG_PROTO then - -- Nothing here. Protocol updates when signalling start. - else - printk(f, f.host.action, "Undefined host register\n") - end - - -- New read data may complete a waiting transaction. - smbus.data_read(f, action) -end - -function smbus.block_data(f, action, index) - - if smbus.passive(f) then - if not action.write then - f.host.block[index].hw = action.data - f.host.block[index].hw_valid = true - end - f.host.block[index].tmp = action.data - f.host.block[index].tmp_valid = true - else - if action.write then - f.host.block[index].tmp = action.data - f.host.block[index].tmp_valid = true - else - action.data = 0xff - if f.host.block[index].tmp_valid then - action.data = f.host.block[index].tmp - elseif f.host.block[index].hw_valid then - action.data = f.host.block[index].hw - end - end - end - - -- Detect for block read completion via maximum indexed item. - if not action.write then - f.host.max_index = math.max(f.host.max_index, index+1) - end -end - -local init_action = { - name = "init", - cs = 0, - eip = 0, - my_id = 0, - parent_id = 0, -} -function smbus.init(f) - if not f.host then - f.host = smbus.host - f.host.action = init_action - end - host_switch(f, HOST_IDLE) -end - - diff --git a/SerialICE/simba/superio.lua b/SerialICE/simba/superio.lua deleted file mode 100644 index 7d6252c..0000000 --- a/SerialICE/simba/superio.lua +++ /dev/null @@ -1,262 +0,0 @@ - - -function pnp_switch_ldn(f, data) - if not f.ldn[data] then - f.ldn[data] = { data = {}, set = {}, bar0 = {}, bar1 = {} } - end - f.pnp.active_ldn = data -end - -function pnp_select_cfg(f, data) - f.pnp.reg = data -end - -function pnp_store_cfg(f, data) - local reg = f.pnp.reg - if reg < 0x30 then - f.chip.data[reg] = data; - f.chip.set[reg] = true; - else - local ldn = f.pnp.active_ldn - f.ldn[ldn].data[reg] = data; - f.ldn[ldn].set[reg] = true; - end -end - - --- ********************************************************** --- --- SuperIO device handling - -function superio_pnpdev(f) - return string.format("%s %02x:%02x", f.name, f.base, f.pnp.active_ldn) -end - -function superio_string(f) - if f.pnp.reg < 0x30 then - return string.format("%02x: ", f.base) - else - return string.format("%02x:%02x ", f.base, f.pnp.active_ldn) - end -end - -function superio_register_post(f, action) - local str = superio_string(f) - if action.write then - printk(f, action, "%s [%02x] <= %02x\n", str, f.pnp.reg, action.data) - else - printk(f, action, "%s [%02x] => %02x\n", str, f.pnp.reg, action.data) - end -end - -function superio_string_post(f, action, str2) - printk(f, action, "%s %s\n", superio_string(f), str2) -end - -function superio_try_enable_io(f, idx) - - local ldn = f.ldn[f.pnp.active_ldn] - - if ldn.set[0x30] and ldn.data[0x30] ~= 0x0 then - if idx == 0 and ldn.set[0x60] and ldn.set[0x61] then - local iobase = bit32.bor(bit32.lshift(ldn.data[0x60], 8), ldn.data[0x61]) - if not ldn.bar0.size then - ldn.bar0.size = 1 - end - if not ldn.bar0.name then - ldn.bar0.name = superio_pnpdev(f) - end - if iobase ~= 0x60 then - ldn.bar0.val = iobase - generic_io_bar(ldn.bar0) - ldn.bar0.f.decode = F_FIXED - end - end - if idx == 1 and ldn.set[0x62] and ldn.set[0x63] then - local iobase = bit32.bor(bit32.lshift(ldn.data[0x62], 8), ldn.data[0x63]) - if not ldn.bar1.size then - ldn.bar1.size = 1 - end - if not ldn.bar1.name then - ldn.bar1.name = superio_pnpdev(f) - end - if iobase ~= 0x64 then - ldn.bar1.val = iobase - generic_io_bar(ldn.bar1) - ldn.bar1.f.decode = F_FIXED - end - end - end -end - -function superio_try_enable_ldn(f, action) - local ldn = f.ldn[f.pnp.active_ldn] - - if ldn.set[0x30] and ldn.data[0x30] == 0x0 then - superio_string_post(f, action, "disabled") - else - superio_string_post(f, action, "enabled") - end -end - -function superio_pre(f, action) - if not action.write then - return handle_action(f, action) - end - - if action.addr == f.base then - pnp_select_cfg(f, action.data) - return handle_action(f, action) - end - - if action.addr == f.base + 0x01 then - -- Also creates new LDN instance, if necessary. - if f.pnp.reg == f.pnp.ldn_register then - pnp_switch_ldn(f, action.data) - end - - pnp_store_cfg(f, action.data) - - -- Don't allow that our SIO power gets disabled. - if f.pnp.reg == 0x02 then - return drop_action(f, action, 0) - end - - -- Don't mess with oscillator setup. - if f.pnp.reg == 0x24 then - return drop_action(f, action, 0) - end - return handle_action(f, action) - end - - -- should not reach here - return skip_filter(f, action) -end - -function superio_post(f, action) - - -- Do not log change of register or LDN. - if action.addr == f.base or f.pnp.reg == f.pnp.ldn_register then - return true - end - - if not action.write then - superio_register_post(f, action) - return true - end - - local ldn = f.ldn[f.pnp.active_ldn] - - -- Log base address once both bytes are set. - - if ( f.pnp.reg == 0x60 or f.pnp.reg == 0x61 ) then - superio_try_enable_io(f, 0) - return true - end - - if ( f.pnp.reg == 0x62 or f.pnp.reg == 0x63 ) then - superio_try_enable_io(f, 1) - return true - end - - if f.pnp.reg == 0x30 then - superio_try_enable_io(f, 0) - superio_try_enable_io(f, 1) - superio_try_enable_ldn(f, action) - return true - end - - if f.pnp.reg == 0x70 then - superio_string_post(f, action, string.format("irq = %d", ldn.data[0x70])) - return true - end - if f.pnp.reg == 0x72 then - superio_string_post(f, action, string.format("irq2 = %d", ldn.data[0x72])) - return true - end - - superio_register_post(f, action) - return true -end - - -filter_superio_2e = { - name = "PnP", - pre = superio_pre, - post = superio_post, - base = 0x2e, - size = 0x02, - hide = hide_superio_cfg, - chip = { data = {}, set = {} }, - pnp = { reg = 0, active_ldn = -1, ldn_register = 0 }, - ldn = {}, -} -filter_superio_4e = { - name = "PnP", - pre = superio_pre, - post = superio_post, - base = 0x4e, - size = 0x02, - hide = hide_superio_cfg, - chip = { data = {}, set = {} }, - pnp = { reg = 0, active_ldn = -1, ldn_register = 0 }, - ldn = {}, -} - - -function superio_get_filter(cfg_base) - if cfg_base == 0x2e then - return filter_superio_2e - elseif cfg_base == 0x4e then - return filter_superio_4e - else - return nil - end -end - -function superio_set_ldn_register(f, ldn_register) - f.pnp.ldn_register = ldn_register -end - -function superio_new_ldn(f, idx) - if not f.ldn[idx] then - f.ldn[idx] = { data = {}, set = {}, bar0 = {}, bar1 = {} } - end -end - -function superio_ldn_iobase0(f, idx, name, size) - f.ldn[idx].bar0.name = name - f.ldn[idx].bar0.size = size -end - -function superio_ldn_iobase1(f, idx, name, size) - f.ldn[idx].bar1.name = name - f.ldn[idx].bar1.size = size -end - -function enable_hook_superio(base, ldn_register) - local sio = superio_get_filter(base) - superio_set_ldn_register(sio, ldn_register) - enable_hook(io_hooks, sio) -end - --- ********************************************************** --- --- Serial Port handling - -function com_pre(f, action) - if (action.write) then - return drop_action(f, action, action.data) - else - return drop_action(f, action, 0xff) - end -end - -filter_com1 = { - name = "COM1", - pre = com_pre, - post = io_post, - base = 0x3f8, - size = 8, - hide = false, -} diff --git a/SerialICE/simba/via_bars.lua b/SerialICE/simba/via_bars.lua deleted file mode 100644 index 7868535..0000000 --- a/SerialICE/simba/via_bars.lua +++ /dev/null @@ -1,30 +0,0 @@ - -function sb_pcie_bar(dev, reg, base) - local baseaddr = bit32.lshift(base, 16) - local size = 64*1024 - - pcie_mm_cfg_bar(baseaddr, size) -end - -dev_sb = { - pci_dev = pci_bdf(0,0x11,0,0), - name = "sb", - bar = {}, -} - -function nb_pcie_bar(dev, reg, base) - local size = 64*1024 - - pcie_mm_cfg_bar(base, size) -end - -dev_nb = { - pci_dev = pci_bdf(0,0,0,0), - name = "nb", - bar = {}, -} - -function northbridge_vx900() - pci_cfg16_hook(dev_sb, 0xbd, "SB_PCI", sb_pcie_bar) - pci_cfg32_hook(dev_nb, 0x0, "NB_PCI", nb_pcie_bar) -end diff --git a/SerialICE/simba/via_epia_m_850.lua b/SerialICE/simba/via_epia_m_850.lua deleted file mode 100644 index b305353..0000000 --- a/SerialICE/simba/via_epia_m_850.lua +++ /dev/null @@ -1,164 +0,0 @@ --- SerialICE --- --- Copyright (c) 2012 Kyösti Mälkki <kyosti.malkki(a)gmail.com> --- --- Permission is hereby granted, free of charge, to any person obtaining a copy --- of this software and associated documentation files (the "Software"), to deal --- in the Software without restriction, including without limitation the rights --- to use, copy, modify, merge, publish, distribute, sublicense, and/or sell --- copies of the Software, and to permit persons to whom the Software is --- furnished to do so, subject to the following conditions: --- --- The above copyright notice and this permission notice shall be included in --- all copies or substantial portions of the Software. --- --- THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR --- IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, --- FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL --- THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER --- LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, --- OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN --- THE SOFTWARE. --- - - --- ********************************************************** --- - -function mainboard_io_read(f, action) - - -- IO slowdown - if action.addr == 0xed then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - -- IO slowdown - if action.addr == 0xeb then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - if action.addr == 0xcfb then - ignore_action(f, action) - return drop_action(f, action, 0) - end - - return skip_filter(f, action) -end - - -function mainboard_io_write(f, action) - - -- Catch RAM controller ready. - if action.addr == 0x80 and action.data == 0x2c and not ram_enabled() then - enable_ram() - end - --- if action.addr == 0xcfb then --- ignore_action(f, action) --- return drop_action(f, action, 0) --- end - - if action.addr == 0xeb then - ignore_action(f, action) - return drop_action(f, action, action.data) - end - - if action.addr == 0xed then - ignore_action(f, action) - return drop_action(f, action, action.data) - end - - return skip_filter(f, action) -end - -function mainboard_io_pre(f, action) - if action.write then - return mainboard_io_write(f, action) - else - return mainboard_io_read(f, action) - end -end - -function mainboard_io_post(f, action) - if action.addr == 0xeb or action.addr == 0xed then - return true - end - - -- If KBD controller returns status=0xff, clear 0x02. - if action.addr == 0x64 and not action.write and action.size == 1 then - if action.data == 0xff then - -- tag these but give out correct data - fake_action(f, action, action.data) - end - end -end - -filter_mainboard = { - name = "VIA", - pre = mainboard_io_pre, - post = mainboard_io_post, - hide = hide_mainboard_io, - base = 0x0, - size = 0x10000 -} - - - --- MOVE THIS TO CHIPSET FILE - -dofile("intel_smbus.lua") -dofile("via_bars.lua") - -function smbus_bar_hook(dev, reg, base) - intel_smbus_setup(base, 0x20) -end - -dev_sb_lpc = { - pci_dev = pci_bdf(0x0,0x1f,0x3,0x0), - name = "Smbus", - bar = {}, -} - -dev_power = { - pci_dev = pci_bdf(0x0,0x11,0x0,0x0), - name = "SYS", - bar = {}, - acpi = { f = nil }, - tco = { f = nil }, -} - -function pm_io_bar(dev, reg, base) - dev.acpi.name = "ACPI" - dev.acpi.base = base - dev.acpi.size = 0x60 - generic_io_bar(dev.acpi) -end - - - --- **************** - -function do_mainboard_setup() - enable_hook(io_hooks, filter_pci_io_cfg) - enable_hook(mem_hooks, filter_lapic) - enable_hook(mem_hooks, filter_ioapic) - - enable_hook(cpumsr_hooks, filter_intel_microcode) - enable_hook(cpuid_hooks, filter_multiprocessor) - - -- I have a hook to detect RAM initialisation from - -- a POST code I can skip this here - --enable_ram() - - enable_hook_pc80() - enable_hook_superio(0x4e, 0x07) - - northbridge_vx900() - pci_cfg16_hook(dev_power, 0x88, "PM", pm_io_bar) - pci_cfg16_hook(dev_power, 0xd0, "SMBus", smbus_bar_hook) - - -- Apply mainboard hooks last, so they are the first ones to check - enable_hook(io_hooks, filter_mainboard) -end

1 0

New patch to review for serialice: adb3f65 Fix RAM filters
by Kyösti Mälkki March 13, 2013

March 13, 2013

Kyösti Mälkki (kyosti.malkki(a)gmail.com) just uploaded a new patch set to gerrit, which you can find at http://review.coreboot.org/2702 -gerrit commit adb3f655e72259ae43dd883d604391bf6289b331 Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Tue Mar 12 10:09:13 2013 +0200 Fix RAM filters These filters had not been tested and had some typos in the names and missing .hide variables. Once enable_ram() is called, also register physical RAM on Qemu side from 1 MiB to 8 MiB. Change-Id: I4c398f006d684dfe71080a69664fa5c062e8a743 Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> --- SerialICE/simba/memory.lua | 58 +++++++++++++++++++++++++++---------------- SerialICE/simba/serialice.lua | 3 +++ 2 files changed, 40 insertions(+), 21 deletions(-) diff --git a/SerialICE/simba/memory.lua b/SerialICE/simba/memory.lua index b05f09c..bb09aef 100644 --- a/SerialICE/simba/memory.lua +++ b/SerialICE/simba/memory.lua @@ -53,7 +53,7 @@ function new_car_region(start, size) f.size = size f.pre = car_qemu_only f.post = car_post - f.hide = true + f.hide = hide_car enable_hook(mem_hooks, f) SerialICE_register_physical(start, size) end @@ -101,12 +101,15 @@ function mem_smi_vga(f, action) return true end +function mem_ram_post(f, action) + return true +end filter_ram_low = { - name = "MEM", - pre = mem_ram_low, - post = mem_post, - hide = true, + name = "RAM", + pre = mem_qemu_only, + post = mem_ram_post, + hide = hide_ram_low, base = 0x0, size = 0xa0000 } @@ -114,17 +117,17 @@ filter_ram_low = { filter_smi_vga = { name = "SMI_VGA", pre = mem_smi_vga, - post = mem_post, - hide = true, + post = mem_ram_post, + hide = hide_smi_vga, base = 0x000a0000, size = 0x00010000, } filter_ram_low_2 = { - name = "MEM", - pre = mem_ram_low, - post = mem_post, - hide = true, + name = "RAM", + pre = mem_qemu_only, + post = mem_ram_post, + hide = hide_ram_low, base = 0xc0000, size = 0x20000 } @@ -132,18 +135,30 @@ filter_ram_low_2 = { -- 3.25GB RAM. This is handled by SerialICE. -- FIXME: use TOLM here --- We refrain from backing up this memory in Qemu because Qemu would +tolm = 0xd0000000 +top_of_qemu_ram = 0x800000 + +-- We refrain from backing up most of memory in Qemu because Qemu would -- need lots of ram on the host and firmware usually does not intensively -- use high memory anyways. -filter_ram_high = { - name = "MEM", - pre = mem_target_only, - post = mem_post, - hide = true, + +filter_ram_high_qemu = { + name = "RAM", + pre = mem_qemu_only, + post = mem_ram_post, + hide = hide_ram_high, base = 0x100000, - size = 0xd0000000 - 0x100000 + size = top_of_qemu_ram - 0x100000, } +filter_ram_high = { + name = "RAM", + pre = mem_target_only, + post = mem_ram_post, + hide = hide_ram_high, + base = top_of_qemu_ram, + size = tolm - top_of_qemu_ram +} function ram_enabled() return ram_is_initialized @@ -153,6 +168,7 @@ function enable_ram() enable_hook(mem_hooks, filter_ram_low) enable_hook(mem_hooks, filter_smi_vga) enable_hook(mem_hooks, filter_ram_low_2) + enable_hook(mem_hooks, filter_ram_high_qemu) enable_hook(mem_hooks, filter_ram_high) -- Register low RAM 0x00000000 - 0x000dffff @@ -160,9 +176,9 @@ function enable_ram() -- SMI/VGA memory should go to the target... SerialICE_register_physical(0x000c0000, 0x20000) --printf("Low RAM accesses are now directed to Qemu.\n") + + -- Register high RAM + SerialICE_register_physical(0x100000, top_of_qemu_ram - 0x100000) ram_is_initialized = true end - - - diff --git a/SerialICE/simba/serialice.lua b/SerialICE/simba/serialice.lua index 434556f..2427ed5 100644 --- a/SerialICE/simba/serialice.lua +++ b/SerialICE/simba/serialice.lua @@ -27,6 +27,9 @@ io.write("SerialICE: Starting LUA script\n") -- Set to "false" to show undecoded access for the specified class hide_rom_access = true +hide_ram_low = true +hide_ram_high = true +hide_smi_vga = true hide_pci_io_cfg = true hide_pci_mm_cfg = true hide_nvram_io = true

1 0

Patch set updated for serialice: b676c48 Add runtime parameters file
by Kyösti Mälkki March 13, 2013

March 13, 2013

Kyösti Mälkki (kyosti.malkki(a)gmail.com) just uploaded a new patch set to gerrit, which you can find at http://review.coreboot.org/2599 -gerrit commit b676c485e43c27a5f81cd7a1eb2e5a2bb8cc5076 Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Wed Mar 6 20:02:24 2013 +0200 Add runtime parameters file Move parameters that control the verbosity of the replayer script in a separate file. Also set default of log_everything = false, as this is generally how one wants replay to behave. Change-Id: Iccf2b50874849228c51d99fa33dc3e86d9d584cb Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> --- SerialICE/simba/memory.lua | 10 ---------- SerialICE/simba/serialice.lua | 33 +-------------------------------- SerialICE/simba/user_env.lua | 36 ++++++++++++++++++++++++++++++++++++ 3 files changed, 37 insertions(+), 42 deletions(-) diff --git a/SerialICE/simba/memory.lua b/SerialICE/simba/memory.lua index bb09aef..c375166 100644 --- a/SerialICE/simba/memory.lua +++ b/SerialICE/simba/memory.lua @@ -132,16 +132,6 @@ filter_ram_low_2 = { size = 0x20000 } --- 3.25GB RAM. This is handled by SerialICE. --- FIXME: use TOLM here - -tolm = 0xd0000000 -top_of_qemu_ram = 0x800000 - --- We refrain from backing up most of memory in Qemu because Qemu would --- need lots of ram on the host and firmware usually does not intensively --- use high memory anyways. - filter_ram_high_qemu = { name = "RAM", pre = mem_qemu_only, diff --git a/SerialICE/simba/serialice.lua b/SerialICE/simba/serialice.lua index 2427ed5..4905da1 100644 --- a/SerialICE/simba/serialice.lua +++ b/SerialICE/simba/serialice.lua @@ -24,42 +24,11 @@ io.write("SerialICE: Starting LUA script\n") - --- Set to "false" to show undecoded access for the specified class -hide_rom_access = true -hide_ram_low = true -hide_ram_high = true -hide_smi_vga = true -hide_pci_io_cfg = true -hide_pci_mm_cfg = true -hide_nvram_io = true -hide_i8042_io = false -hide_i8237_io = true -hide_i8254_io = true -hide_i8259_io = true -hide_superio_cfg = true -hide_smbus_io = true -hide_mainboard_io = true - --- Set to "true" to log every memory and IO access -log_everything = true - - --- Use lua table for NVram --- RTC registers 0x0-0xd go to HW -cache_nvram = false - --- SMSC 0x07, Winbond 0x06 ? -DEFAULT_SUPERIO_LDN_REGISTER = 0x07 - -rom_size = 4 * 1024 * 1024 -rom_base = 0x100000000 - rom_size - - -- -------------------------------------------------------------------- -- This initialization is executed right after target communication -- has been established +dofile("user_env.lua") dofile("interface.lua") dofile("output.lua") dofile("hooks.lua") diff --git a/SerialICE/simba/user_env.lua b/SerialICE/simba/user_env.lua new file mode 100644 index 0000000..ff9f64d --- /dev/null +++ b/SerialICE/simba/user_env.lua @@ -0,0 +1,36 @@ +-- Set to "true" to show all memory and IO access in output +log_everything = false + +-- Set to "false" to show undecoded access for the specified class +hide_rom_access = true +hide_ram_low = true +hide_ram_high = true +hide_smi_vga = true +hide_car = true +hide_pci_io_cfg = true +hide_pci_mm_cfg = true +hide_nvram_io = true +hide_i8042_io = false +hide_i8237_io = true +hide_i8254_io = true +hide_i8259_io = true +hide_superio_cfg = true +hide_smbus_io = true +hide_mainboard_io = true + +-- Use lua table for NVram +-- RTC registers 0x0-0xd go to HW +cache_nvram = false + +-- SMSC 0x07, Winbond 0x06 ? +DEFAULT_SUPERIO_LDN_REGISTER = 0x07 + +-- FIXME: Use bios file image size here. +rom_size = 4 * 1024 * 1024 +rom_base = 0x100000000 - rom_size + +-- We refrain from backing up most of memory in Qemu because Qemu would +-- need lots of ram on the host and firmware usually does not intensively +-- use high memory anyways. +top_of_qemu_ram = 0x800000 +tolm = 0xd0000000

1 0

Patch merged into serialice/master: ee934c5 Only log Raw action lines from Qemu session
by gerrit＠coreboot.org March 11, 2013

March 11, 2013

the following patch was just integrated into master: commit ee934c5c446da7c8e4400307906182d4a4b68172 Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Tue Mar 5 09:40:28 2013 +0200 Only log Raw action lines from Qemu session The only lines a qemu session with SerialICE needs to write in the output are those produced with the core filters and marked with the flag Raw "R...". Everything else can be replayed from these. This is a principal change: the output of Qemu session is now completely raw and one must pass the logfile thru replayer to have simplified view. Change-Id: I6e4eebde41ca46072c545c02eabac848113bb5ee Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Reviewed-on: http://review.coreboot.org/2597 Tested-by: build bot (Jenkins) Reviewed-by: Stefan Reinauer <stefan.reinauer(a)coreboot.org> Build-Tested: build bot (Jenkins) at Wed Mar 6 21:16:58 2013, giving +1 Reviewed-By: Stefan Reinauer <stefan.reinauer(a)coreboot.org> at Sat Mar 9 00:38:19 2013, giving +2 See http://review.coreboot.org/2597 for details. -gerrit

1 0

Patch merged into serialice/master: 14d0526 Fix variable MTRR filter
by gerrit＠coreboot.org March 11, 2013

March 11, 2013

the following patch was just integrated into master: commit 14d052638246f5bc14f96f10d5ec8a07eef9091b Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Wed Mar 6 20:00:11 2013 +0200 Fix variable MTRR filter Separate this from the MSR fallback filter. This filter is not enabled by default and was actually broken because it did not check correctly for the MSR index. Change-Id: I83caabe38070bf45a534585f1243bc2fe9f0c724 Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Reviewed-on: http://review.coreboot.org/2596 Tested-by: build bot (Jenkins) Reviewed-by: Stefan Reinauer <stefan.reinauer(a)coreboot.org> Build-Tested: build bot (Jenkins) at Wed Mar 6 21:10:53 2013, giving +1 Reviewed-By: Stefan Reinauer <stefan.reinauer(a)coreboot.org> at Sat Mar 9 00:41:05 2013, giving +2 See http://review.coreboot.org/2596 for details. -gerrit

1 0

Patch merged into serialice/master: 1716296 Fix flag combinations
by gerrit＠coreboot.org March 11, 2013

March 11, 2013

the following patch was just integrated into master: commit 171629643a17091ef1710825ba7fe38626c5a892 Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Wed Mar 6 19:53:09 2013 +0200 Fix flag combinations In some rare case writes go to both hardware and qemu, so put those at different columns. Only one of "Undefined, Dropped or Faked" is possible at a time, place them on same column. Change-Id: I9b891e44ca1f044c68c21021599fa3a0f8dbae9e Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Reviewed-on: http://review.coreboot.org/2595 Tested-by: build bot (Jenkins) Reviewed-by: Idwer Vollering <vidwer(a)gmail.com> Reviewed-by: Stefan Reinauer <stefan.reinauer(a)coreboot.org> Build-Tested: build bot (Jenkins) at Wed Mar 6 21:04:52 2013, giving +1 Reviewed-By: Stefan Reinauer <stefan.reinauer(a)coreboot.org> at Sat Mar 9 00:40:44 2013, giving +2 See http://review.coreboot.org/2595 for details. -gerrit

1 0

Patch merged into serialice/master: f99e586 Fix output from superio filter
by gerrit＠coreboot.org March 11, 2013

March 11, 2013

the following patch was just integrated into master: commit f99e586ae3e022b1435ec8359e09c875fae5b876 Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Wed Mar 6 07:40:16 2013 +0200 Fix output from superio filter Do not use printf() directly, it could create orphaned lines without processed flags [RH..] or CS:EIP. Change-Id: I7c720792564d64790987814c600bb2e3830a5332 Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Reviewed-on: http://review.coreboot.org/2594 Tested-by: build bot (Jenkins) Reviewed-by: Stefan Reinauer <stefan.reinauer(a)coreboot.org> Build-Tested: build bot (Jenkins) at Wed Mar 6 20:58:51 2013, giving +1 Reviewed-By: Stefan Reinauer <stefan.reinauer(a)coreboot.org> at Sat Mar 9 00:40:25 2013, giving +2 See http://review.coreboot.org/2594 for details. -gerrit

1 0

Patch merged into serialice/master: e7c3c6d Add CPUID and MSR replayer
by gerrit＠coreboot.org March 11, 2013

March 11, 2013

the following patch was just integrated into master: commit e7c3c6d2c4a0e04a34d252d6737faa9f3d7aa474 Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Wed Mar 6 18:16:53 2013 +0200 Add CPUID and MSR replayer Previously replayer just copied the lines for CPUID and RDMSR/WRMSR from the log of Qemu run. Change-Id: I7230e86e8895f49516f18dbecd45e229c54dadc9 Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Reviewed-on: http://review.coreboot.org/2593 Tested-by: build bot (Jenkins) Reviewed-by: Stefan Reinauer <stefan.reinauer(a)coreboot.org> Build-Tested: build bot (Jenkins) at Wed Mar 6 20:52:51 2013, giving +1 Reviewed-By: Stefan Reinauer <stefan.reinauer(a)coreboot.org> at Sat Mar 9 00:40:08 2013, giving +2 See http://review.coreboot.org/2593 for details. -gerrit

1 0

Patch merged into serialice/master: bea1b12 Do not add RAM filters on default_setup()
by gerrit＠coreboot.org March 11, 2013

March 11, 2013

the following patch was just integrated into master: commit bea1b121f626311a85dfdd69c649458c1a13f88f Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Mon Mar 4 10:17:37 2013 +0200 Do not add RAM filters on default_setup() To forward JEDEC init cycles to dram memory banks, using the memory fallback -filter, we must not enable RAM filters already at start-up. A mainboard-specific hook shall call enable_ram() only after raminit and possible quick memtest have completed. Change-Id: I9b3c0283fd4dd15b4d12e96e02e70d8ccc77f835 Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Reviewed-on: http://review.coreboot.org/2580 Tested-by: build bot (Jenkins) Reviewed-by: Idwer Vollering <vidwer(a)gmail.com> Reviewed-by: Stefan Reinauer <stefan.reinauer(a)coreboot.org> Build-Tested: build bot (Jenkins) at Wed Mar 6 20:28:58 2013, giving +1 Reviewed-By: Stefan Reinauer <stefan.reinauer(a)coreboot.org> at Sat Mar 9 00:39:36 2013, giving +2 See http://review.coreboot.org/2580 for details. -gerrit

1 0

Patch merged into serialice/master: a5a5176 Refactor logging functions
by gerrit＠coreboot.org March 11, 2013

March 11, 2013

the following patch was just integrated into master: commit a5a5176c137e22eee9a08e697db15e1665533afb Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Sun Mar 3 14:07:18 2013 +0200 Refactor logging functions This adds root_info() and resource_info() functions to add informational lines (tagged with I...) in the log. This also fixes index and cs:eip values printed for these lines. Change-Id: Ib83140037ef4e910f2828783fd7505eac74fac2f Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Reviewed-on: http://review.coreboot.org/2579 Tested-by: build bot (Jenkins) Reviewed-by: Stefan Reinauer <stefan.reinauer(a)coreboot.org> Build-Tested: build bot (Jenkins) at Wed Mar 6 20:40:54 2013, giving +1 Reviewed-By: Stefan Reinauer <stefan.reinauer(a)coreboot.org> at Sat Mar 9 00:39:23 2013, giving +2 See http://review.coreboot.org/2579 for details. -gerrit

1 0

Patch set updated for serialice: 75bf1f3 Refactor matching filters to actions
by Kyösti Mälkki March 8, 2013

March 8, 2013

Kyösti Mälkki (kyosti.malkki(a)gmail.com) just uploaded a new patch set to gerrit, which you can find at http://review.coreboot.org/2598 -gerrit commit 75bf1f3ccddb3c1dc8331279c32a0791c63e733d Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Wed Mar 6 20:19:27 2013 +0200 Refactor matching filters to actions Each hooks list has some criteria when an action matches a filter. For memory and IO, the action address must be within the range of an enabled filter. For CPUID and MSR, the filter must be enabled, and the filter internally checks the index parameters. Change-Id: I6f035a0a39d1f94dc77e1b1dc16459b071ca871a Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> --- SerialICE/simba/hooks.lua | 58 ++++++++++++++++++++++------------------------- 1 file changed, 27 insertions(+), 31 deletions(-) diff --git a/SerialICE/simba/hooks.lua b/SerialICE/simba/hooks.lua index 4a0d529..c726e8c 100644 --- a/SerialICE/simba/hooks.lua +++ b/SerialICE/simba/hooks.lua @@ -3,8 +3,8 @@ froot = { id = 0, name = "SerialICE" } fresource = { id = 1, name = "Resource" } -function new_hooks(str) - return { list = nil, name = str } +function new_hooks(str, rule) + return { list = nil, name = str, match_filter = rule } end next_filter_id = 2 @@ -21,16 +21,26 @@ function new_parent_action() current_parent_id = action_id() end +function filter_in_range(f, action) + if f.enable and action.addr >= f.base and action.addr < f.base + f.size then + return true + end + return false +end + +function filter_enabled(f, action) + return f.enable +end -io_hooks = new_hooks("IO") -mem_hooks = new_hooks("MEM") +io_hooks = new_hooks("IO", filter_in_range) +mem_hooks = new_hooks("MEM", filter_in_range) -cpumsr_hooks = new_hooks("CPU MSR") -cpuid_hooks = new_hooks("CPUID") +cpumsr_hooks = new_hooks("CPU MSR", filter_enabled) +cpuid_hooks = new_hooks("CPUID", filter_enabled) function enable_hook(list, filter) if not filter then - root_info("Attempted to call enable_hook() with filter==nil\n") + root_info("Attempted to call enable_hook() with filter==nil\n") return end @@ -76,21 +86,14 @@ function walk_pre_hooks(list, action) local l = list.list local f = nil - local no_base_check = true - if list == io_hooks or list == mem_hooks then - no_base_check = false - end - while l and not logged do f = l.hook - if no_base_check or action.addr >= f.base and action.addr < f.base + f.size then - if f.enable and f.pre then - if f.pre(f, action) then - if not f.raw then - action.logged_pre = f - end - logged = true + if list.match_filter(f, action) then + if f.pre and f.pre(f, action) then + if not f.raw then + action.logged_pre = f end + logged = true end end l = l.next @@ -113,21 +116,14 @@ function walk_post_hooks(list, action) local l = list.list local f = nil - local no_base_check = true - if list == io_hooks or list == mem_hooks then - no_base_check = false - end - while l and not logged do f = l.hook - if no_base_check or action.addr >= f.base and action.addr < f.base + f.size then - if f.enable and f.post then - if f.post(f, action) then - if not f.raw then - action.logged_post = f - end - logged = false + if list.match_filter(f, action) then + if f.post and f.post(f, action) then + if not f.raw then + action.logged_post = f end + logged = false end end l = l.next

1 0

Patch merged into serialice/master: e663d08 Drop initial value of filter id
by gerrit＠coreboot.org March 7, 2013

March 7, 2013

the following patch was just integrated into master: commit e663d0803584e301261c8e1a10bd51768e0816c9 Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Sun Mar 3 19:02:39 2013 +0200 Drop initial value of filter id All filters are assigned id number in enable_hooks(). Change-Id: I3300676caa7ffacf163c41b2df55b18b9676e3b3 Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Reviewed-on: http://review.coreboot.org/2578 Tested-by: build bot (Jenkins) Reviewed-by: Idwer Vollering <vidwer(a)gmail.com> Reviewed-by: Stefan Reinauer <stefan.reinauer(a)coreboot.org> Build-Tested: build bot (Jenkins) at Wed Mar 6 20:46:52 2013, giving +1 Reviewed-By: Stefan Reinauer <stefan.reinauer(a)coreboot.org> at Fri Mar 8 00:57:55 2013, giving +2 See http://review.coreboot.org/2578 for details. -gerrit

1 0

Patch merged into serialice/master: aed7088 Treat PnP devices as fixed IO
by gerrit＠coreboot.org March 7, 2013

March 7, 2013

the following patch was just integrated into master: commit aed708888f8cd70b78c2461af1257a447e9d38ce Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Sun Mar 3 19:02:29 2013 +0200 Treat PnP devices as fixed IO Usually these ISA/LPC devices are discussed using fixed I/O addresses so change the log output. In example below, superio 2e:05 IO base registers for keyboard are programmed with 0x60 and 0x64 and that effectively disables the i8042 filter. We explicitly prevent this pair of addresses from being treated as PnP device. 0028.0029 RH.. [0000:0000] IO,i8042: outb 0064 <= d1 0028.002a RH.. [0000:0000] IO,i8042: inb 0064 => 11 0028.002b .H.. [0000:0000] i8042: A20 enabled 0028.002b RH.. [0000:0000] IO,i8042: outb 0060 <= df 0028.002c RH.. [0000:0000] IO,i8042: inb 0064 => 11 ... 0000.0000 I... [0000:0000] Resource: [0033] IO [0060-0060] = PnP 2e:05 0000.0000 I... [0000:0000] Resource: [0034] IO [0064-0064] = PnP 2e:05 ... 0706.0707 .H.. [0000:0000] PnP 2e:05: [0000] <= d1 0706.0708 .H.. [0000:0000] PnP 2e:05: [0000] => ff 0709.070a .H.. [0000:0000] PnP 2e:05: [0000] <= df 070b.070c .H.. [0000:0000] PnP 2e:05: [0000] => ff Change-Id: Ibec34fe656dea9efd22ab4530ef9efb99c9c665d Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Reviewed-on: http://review.coreboot.org/2577 Tested-by: build bot (Jenkins) Reviewed-by: Stefan Reinauer <stefan.reinauer(a)coreboot.org> Build-Tested: build bot (Jenkins) at Wed Mar 6 20:34:56 2013, giving +1 Reviewed-By: Stefan Reinauer <stefan.reinauer(a)coreboot.org> at Fri Mar 8 00:57:36 2013, giving +2 See http://review.coreboot.org/2577 for details. -gerrit

1 0

New patch to review for serialice: 5cd6375 Add parameters file
by Kyösti Mälkki March 6, 2013

March 6, 2013

Kyösti Mälkki (kyosti.malkki(a)gmail.com) just uploaded a new patch set to gerrit, which you can find at http://review.coreboot.org/2599 -gerrit commit 5cd63752e94ba16c996310ceb07fae7f22ea1752 Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Wed Mar 6 20:02:24 2013 +0200 Add parameters file Move parameters that control the verbosity of the replayer script in a separate file. Change-Id: Iccf2b50874849228c51d99fa33dc3e86d9d584cb Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> --- SerialICE/simba/memory.lua | 11 +++++------ SerialICE/simba/serialice.lua | 19 +------------------ SerialICE/simba/user_env.lua | 20 ++++++++++++++++++++ 3 files changed, 26 insertions(+), 24 deletions(-) diff --git a/SerialICE/simba/memory.lua b/SerialICE/simba/memory.lua index b05f09c..fd47cbd 100644 --- a/SerialICE/simba/memory.lua +++ b/SerialICE/simba/memory.lua @@ -53,7 +53,7 @@ function new_car_region(start, size) f.size = size f.pre = car_qemu_only f.post = car_post - f.hide = true + f.hide = hide_car enable_hook(mem_hooks, f) SerialICE_register_physical(start, size) end @@ -101,12 +101,11 @@ function mem_smi_vga(f, action) return true end - filter_ram_low = { name = "MEM", pre = mem_ram_low, post = mem_post, - hide = true, + hide = hide_ram, base = 0x0, size = 0xa0000 } @@ -115,7 +114,7 @@ filter_smi_vga = { name = "SMI_VGA", pre = mem_smi_vga, post = mem_post, - hide = true, + hide = hide_smi_vga, base = 0x000a0000, size = 0x00010000, } @@ -124,7 +123,7 @@ filter_ram_low_2 = { name = "MEM", pre = mem_ram_low, post = mem_post, - hide = true, + hide = hide_ram, base = 0xc0000, size = 0x20000 } @@ -139,7 +138,7 @@ filter_ram_high = { name = "MEM", pre = mem_target_only, post = mem_post, - hide = true, + hide = hide_ram_high, base = 0x100000, size = 0xd0000000 - 0x100000 } diff --git a/SerialICE/simba/serialice.lua b/SerialICE/simba/serialice.lua index 434556f..2a8fae0 100644 --- a/SerialICE/simba/serialice.lua +++ b/SerialICE/simba/serialice.lua @@ -24,24 +24,6 @@ io.write("SerialICE: Starting LUA script\n") - --- Set to "false" to show undecoded access for the specified class -hide_rom_access = true -hide_pci_io_cfg = true -hide_pci_mm_cfg = true -hide_nvram_io = true -hide_i8042_io = false -hide_i8237_io = true -hide_i8254_io = true -hide_i8259_io = true -hide_superio_cfg = true -hide_smbus_io = true -hide_mainboard_io = true - --- Set to "true" to log every memory and IO access -log_everything = true - - -- Use lua table for NVram -- RTC registers 0x0-0xd go to HW cache_nvram = false @@ -57,6 +39,7 @@ rom_base = 0x100000000 - rom_size -- This initialization is executed right after target communication -- has been established +dofile("user_env.lua") dofile("interface.lua") dofile("output.lua") dofile("hooks.lua") diff --git a/SerialICE/simba/user_env.lua b/SerialICE/simba/user_env.lua new file mode 100644 index 0000000..2a631d5 --- /dev/null +++ b/SerialICE/simba/user_env.lua @@ -0,0 +1,20 @@ +-- Set to "true" to show all memory and IO access in output +log_everything = false + +-- Set to "false" to show undecoded access for the specified class +hide_rom_access = true +hide_ram_low = true +hide_ram_high = true +hide_smi_vga = true +hide_car = true +hide_pci_io_cfg = true +hide_pci_mm_cfg = true +hide_nvram_io = true +hide_i8042_io = false +hide_i8237_io = true +hide_i8254_io = true +hide_i8259_io = true +hide_superio_cfg = true +hide_smbus_io = true +hide_mainboard_io = true +

1 0

New patch to review for serialice: fcd8a6c Refactor matching filters to actions
by Kyösti Mälkki March 6, 2013

March 6, 2013

Kyösti Mälkki (kyosti.malkki(a)gmail.com) just uploaded a new patch set to gerrit, which you can find at http://review.coreboot.org/2598 -gerrit commit fcd8a6c3c5080464a16bcf939dc31bc9210b319a Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Wed Mar 6 20:19:27 2013 +0200 Refactor matching filters to actions Each hooks list has some criteria when an action matches a filter. For memory and IO, the action address must be within the range of an enabled filter. For CPUID and MSR, the filter must be enabled, and the filter internally checks the index parameters. Change-Id: I6f035a0a39d1f94dc77e1b1dc16459b071ca871a Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> --- SerialICE/simba/hooks.lua | 56 ++++++++++++++++++++++------------------------- 1 file changed, 26 insertions(+), 30 deletions(-) diff --git a/SerialICE/simba/hooks.lua b/SerialICE/simba/hooks.lua index 4a0d529..8877cd7 100644 --- a/SerialICE/simba/hooks.lua +++ b/SerialICE/simba/hooks.lua @@ -3,8 +3,8 @@ froot = { id = 0, name = "SerialICE" } fresource = { id = 1, name = "Resource" } -function new_hooks(str) - return { list = nil, name = str } +function new_hooks(str, rule) + return { list = nil, name = str, match_filter = rule } end next_filter_id = 2 @@ -21,12 +21,22 @@ function new_parent_action() current_parent_id = action_id() end +function filter_in_range(f, action) + if f.enable and action.addr >= f.base and action.addr < f.base + f.size then + return true + end + return false +end + +function filter_enabled(f, action) + return f.enable +end -io_hooks = new_hooks("IO") -mem_hooks = new_hooks("MEM") +io_hooks = new_hooks("IO", filter_in_range) +mem_hooks = new_hooks("MEM", filter_in_range) -cpumsr_hooks = new_hooks("CPU MSR") -cpuid_hooks = new_hooks("CPUID") +cpumsr_hooks = new_hooks("CPU MSR", filter_enabled) +cpuid_hooks = new_hooks("CPUID", filter_enabled) function enable_hook(list, filter) if not filter then @@ -76,21 +86,14 @@ function walk_pre_hooks(list, action) local l = list.list local f = nil - local no_base_check = true - if list == io_hooks or list == mem_hooks then - no_base_check = false - end - while l and not logged do f = l.hook - if no_base_check or action.addr >= f.base and action.addr < f.base + f.size then - if f.enable and f.pre then - if f.pre(f, action) then - if not f.raw then - action.logged_pre = f - end - logged = true + if list.match_filter(f, action) then + if f.pre and f.pre(f, action) then + if not f.raw then + action.logged_pre = f end + logged = true end end l = l.next @@ -113,21 +116,14 @@ function walk_post_hooks(list, action) local l = list.list local f = nil - local no_base_check = true - if list == io_hooks or list == mem_hooks then - no_base_check = false - end - while l and not logged do f = l.hook - if no_base_check or action.addr >= f.base and action.addr < f.base + f.size then - if f.enable and f.post then - if f.post(f, action) then - if not f.raw then - action.logged_post = f - end - logged = false + if list.match_filter(f, action) then + if f.post and f.post(f, action) then + if not f.raw then + action.logged_post = f end + logged = false end end l = l.next

1 0

New patch to review for serialice: 10c41b5 Only log Raw action lines from Qemu session
by Kyösti Mälkki March 6, 2013

March 6, 2013

Kyösti Mälkki (kyosti.malkki(a)gmail.com) just uploaded a new patch set to gerrit, which you can find at http://review.coreboot.org/2597 -gerrit commit 10c41b5ed7c5718821bde96903e4a97fd12cf241 Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Tue Mar 5 09:40:28 2013 +0200 Only log Raw action lines from Qemu session The only lines a qemu session with SerialICE needs to write in the output are those produced with the core filters and marked with the flag Raw "R...". Everything else can be replayed from these. This is a principal change: the output of Qemu session is now completely raw and one must pass the logfile thru replayer to have simplified view. Change-Id: I6e4eebde41ca46072c545c02eabac848113bb5ee Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> --- SerialICE/simba/core_io.lua | 4 ++-- SerialICE/simba/cpu.lua | 4 +++- SerialICE/simba/hooks.lua | 24 ++++++++++++------------ SerialICE/simba/output.lua | 37 +++++++++++++++++++++++++++++++------ SerialICE/simba/replay.lua | 9 +-------- SerialICE/simba/serialice.lua | 4 ++-- SerialICE/simba/smbus_host.lua | 1 - 7 files changed, 51 insertions(+), 32 deletions(-) diff --git a/SerialICE/simba/core_io.lua b/SerialICE/simba/core_io.lua index 0aa67fd..08ae42e 100644 --- a/SerialICE/simba/core_io.lua +++ b/SerialICE/simba/core_io.lua @@ -8,7 +8,6 @@ F_RANGE = 2 function io_undefined(f, action) action.to_hw = true action.to_qemu = false - action.undefined = true return true end @@ -32,6 +31,7 @@ end filter_io_fallback = { name = "IO", + raw = true, pre = io_undefined, post = io_post, decode = F_FIXED, @@ -45,7 +45,6 @@ filter_io_fallback = { function mem_undefined(f, action) action.to_hw = true action.to_qemu = false - action.undefined = true return true end @@ -69,6 +68,7 @@ end filter_mem_fallback = { name = "MEM", + raw = true, pre = mem_undefined, post = mem_post, decode = F_FIXED, diff --git a/SerialICE/simba/cpu.lua b/SerialICE/simba/cpu.lua index 6dad741..02839a9 100644 --- a/SerialICE/simba/cpu.lua +++ b/SerialICE/simba/cpu.lua @@ -72,6 +72,7 @@ end filter_cpumsr_fallback = { name = "CPU MSR", + raw = true, pre = cpumsr_pre, post = cpumsr_post, } @@ -96,6 +97,7 @@ end filter_cpuid_fallback = { name = "CPUID", + raw = true, pre = cpuid_pre, post = cpuid_post, } @@ -114,7 +116,7 @@ function multicore_post(f, action) if not action.write and rin.eax == 0x01 then rout.ebx = bit32.band(0xff00ffff, rout.ebx); rout.ebx = bit32.bor(0x00010000, rout.ebx); - fake_action(f, action, 0) + return fake_action(f, action, 0) end return skip_filter(f, action) end diff --git a/SerialICE/simba/hooks.lua b/SerialICE/simba/hooks.lua index 01aea65..4a0d529 100644 --- a/SerialICE/simba/hooks.lua +++ b/SerialICE/simba/hooks.lua @@ -85,12 +85,16 @@ function walk_pre_hooks(list, action) f = l.hook if no_base_check or action.addr >= f.base and action.addr < f.base + f.size then if f.enable and f.pre then - logged = f.pre(f, action) + if f.pre(f, action) then + if not f.raw then + action.logged_pre = f + end + logged = true + end end end l = l.next end - if prev_filter ~= f and not action.ignore then prev_filter = f new_parent_action() @@ -118,15 +122,11 @@ function walk_post_hooks(list, action) f = l.hook if no_base_check or action.addr >= f.base and action.addr < f.base + f.size then if f.enable and f.post then - if no_base_check then - -- cpuid or cpumsr - logged = f.post(f, action) - else - -- io or mem - if f.post(f, action) then - action.f = f - logged = f.hide and not log_everything + if f.post(f, action) then + if not f.raw then + action.logged_post = f end + logged = false end end end @@ -218,9 +218,9 @@ function pre_action(action, dir_wr, addr, size, data) action.my_id = 0 -- no filter, not filtered - action.f = nil + action.logged_pre = nil + action.logged_post = nil action.ignore = false - action.undefined = false action.faked = false action.dropped = false action.to_hw = false diff --git a/SerialICE/simba/output.lua b/SerialICE/simba/output.lua index 10977ea..889dcc1 100644 --- a/SerialICE/simba/output.lua +++ b/SerialICE/simba/output.lua @@ -12,7 +12,21 @@ end function printk(f, action, fmt, ...) local str = "" - if action.undefined or action.f or action == cpu_action then + + -- For Qemu runs only Raw actions are logged + if not replaying and not f.raw then + return + end + + -- For replays, a post filter prevents further lines for the + -- same action from printing if it has property hide set. + if replaying and not log_everything then + if action.logged_post and action.logged_post.hide then + return + end + end + + if f.raw then str = str .. "R" elseif action.info_only then str = str .. "I" @@ -29,7 +43,7 @@ function printk(f, action, fmt, ...) else str = str .. "." end - if action.undefined then + if f.raw and not (action.logged_pre or action.logged_post) then str = str .. "U" elseif action.dropped then str = str .. "D" @@ -41,12 +55,23 @@ function printk(f, action, fmt, ...) print_address(action.parent_id, action.my_id, str, action.cs, action.eip) - if action.f then - printf("%s,%s: ", f.name, action.f.name) - printf(fmt, ...) - else + if not replaying then printf("%s: ", f.name) printf(fmt, ...) + else + if not f.raw then + printf("%s: ", f.name) + printf(fmt, ...) + elseif action.logged_post then + printf("%s: ", action.logged_post.name) + printf(fmt, ...) + elseif action.logged_pre then + printf("%s: ", action.logged_pre.name) + printf(fmt, ...) + else + printf("%s: ", f.name) + printf(fmt, ...) + end end end diff --git a/SerialICE/simba/replay.lua b/SerialICE/simba/replay.lua index 3ac0434..4632c05 100644 --- a/SerialICE/simba/replay.lua +++ b/SerialICE/simba/replay.lua @@ -1,5 +1,5 @@ -local verbose_log = false +replaying = true function SerialICE_register_physical() end @@ -176,8 +176,6 @@ function parse_headers() found, _, board = string.find(line, "SerialICE: Mainboard...:%s+(.+)") if found then SerialICE_mainboard = board - io.write(line) - io.write("\n") end end if string.find(line, "LUA script initialized.") then @@ -267,11 +265,6 @@ function parse_file() end parse_headers() - dofile("serialice.lua") - --- set logging -log_everything = verbose_log - parse_file() diff --git a/SerialICE/simba/serialice.lua b/SerialICE/simba/serialice.lua index 7cabf67..434556f 100644 --- a/SerialICE/simba/serialice.lua +++ b/SerialICE/simba/serialice.lua @@ -68,6 +68,8 @@ dofile("pc80.lua") dofile("superio.lua") dofile("mmio.lua") +io.write("SerialICE: LUA script initialized.\n") + function do_minimal_setup() enable_hook(io_hooks, filter_io_fallback) enable_hook(mem_hooks, filter_mem_fallback) @@ -106,7 +108,5 @@ else do_default_setup() end -root_info("LUA script initialized.\n") - return true diff --git a/SerialICE/simba/smbus_host.lua b/SerialICE/simba/smbus_host.lua index a407843..161bc42 100644 --- a/SerialICE/simba/smbus_host.lua +++ b/SerialICE/simba/smbus_host.lua @@ -186,7 +186,6 @@ local function dump_transaction(f, action) end if signal_in(f, SIG_TIMEOUT) then - action.undefined = true dump = dump .. " (TIMEOUT) " end

1 0

New patch to review for serialice: 4540b21 Add CPUID and MSR replayer
by Kyösti Mälkki March 6, 2013

March 6, 2013

Kyösti Mälkki (kyosti.malkki(a)gmail.com) just uploaded a new patch set to gerrit, which you can find at http://review.coreboot.org/2593 -gerrit commit 4540b218ef4dfef245f6b040e1d127eb791c21ef Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Wed Mar 6 18:16:53 2013 +0200 Add CPUID and MSR replayer Previously replayer just copied the lines for CPUID and RDMSR/WRMSR from the log of Qemu run. Change-Id: I7230e86e8895f49516f18dbecd45e229c54dadc9 Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> --- SerialICE/simba/replay.lua | 70 +++++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 69 insertions(+), 1 deletion(-) diff --git a/SerialICE/simba/replay.lua b/SerialICE/simba/replay.lua index 1f17f00..3ac0434 100644 --- a/SerialICE/simba/replay.lua +++ b/SerialICE/simba/replay.lua @@ -32,6 +32,25 @@ function replay_mem(dir_wr, addr, size, data) walk_post_hooks(mem_hooks, mem_action) end +function replay_msr(dir_wr, addr, hi, lo) + pre_action(cpu_action, dir_wr, 0, 0, 0) + load_regs(cpu_action.rin, lo, 0, addr, hi) + walk_pre_hooks(cpumsr_hooks, cpu_action) + post_action(cpu_action, 0) + load_regs(cpu_action.rout, lo, 0, addr, hi) + walk_post_hooks(cpumsr_hooks, cpu_action) +end + +function replay_cpuid(idx0, idx1, eax, ebx, ecx, edx) + pre_action(cpu_action, CPUID, 0, 0, 0) + load_regs(cpu_action.rin, idx0, 0, idx1, 0) + walk_pre_hooks(cpuid_hooks, cpu_action) + post_action(cpu_action, 0) + load_regs(cpu_action.rout, eax, ebx, ecx, edx) + walk_post_hooks(cpuid_hooks, cpu_action) +end + + function replay_unknown(str) local dummy = {} pre_action(dummy, false, 0, 0, 0) @@ -77,6 +96,50 @@ function parse_mem(line) return true end +function parse_cpumsr(line) + local msr_op = "CPU MSR%:%s+%[(%x+)%]%s+(<?=>?)%s+(%x+).(%x+)" + local msr_op_old = "CPU%:%s+[:rdw:]*msr%s+(%x+)%s+(<?=>?)%s+(%x+).(%x+)" + local found, ecx, dir, edx, eax + found, _, ecx, dir, edx, eax = string.find(line, msr_op) + if not found then + found, _, ecx, dir, edx, eax = string.find(line, msr_op_old) + end + if not found then + return false + end + local necx = tonumber(ecx, 16) + local nedx = tonumber(edx, 16) + local neax = tonumber(eax, 16) + if string.find("<=", dir) then + replay_msr(true, necx, nedx, neax) + else + replay_msr(false, necx, nedx, neax) + end + return true +end + +function parse_cpuid(line) + local id_op = "CPUID%: eax%: (%x+)%; ecx%: (%x+) => (%x+).(%x+).(%x+).(%x+)" + local id_op_old = "CPU%: CPUID eax%: (%x+)%; ecx%: (%x+) => (%x+).(%x+).(%x+).(%x+)" + local found, idx0, idx1, eax, ebx, ecx, edx + found, _, idx0, idx1, eax, ebx, ecx, edx = string.find(line, id_op) + if not found then + found, _, idx0, idx1, eax, ebx, ecx, edx = string.find(line, id_op_old) + end + if not found then + return false + end + local nidx0 = tonumber(idx0, 16) + local nidx1 = tonumber(idx1, 16) + local neax = tonumber(eax, 16) + local nebx = tonumber(ebx, 16) + local necx = tonumber(ecx, 16) + local nedx = tonumber(edx, 16) + replay_cpuid(nidx0, nidx1, neax, nebx, necx, nedx) + return true +end + + -- Old script already parsed PCI config, synthesize those IOs back. function parse_pci(line) local found, bus, dev, fn, reg, dir, data @@ -191,7 +254,12 @@ function parse_file() if not found then found = parse_mem(str) end - -- TODO: replay CPU MSR and CPUID lines + if not found then + found = parse_cpuid(str) + end + if not found then + found = parse_cpumsr(str) + end if not found then found = replay_unknown(str) end

1 0

New patch to review for serialice: abf616c Fix variable MTRR filter
by Kyösti Mälkki March 6, 2013

March 6, 2013

Kyösti Mälkki (kyosti.malkki(a)gmail.com) just uploaded a new patch set to gerrit, which you can find at http://review.coreboot.org/2596 -gerrit commit abf616c01e81c21084fe7112cd6a4f1545b6c268 Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Wed Mar 6 20:00:11 2013 +0200 Fix variable MTRR filter Separate this from the MSR fallback filter. This filter is not enabled by default and was actually broken because it did not check correctly for the MSR index. Change-Id: I83caabe38070bf45a534585f1243bc2fe9f0c724 Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> --- SerialICE/simba/cpu.lua | 32 ++++++++++++++++++++++++++++---- 1 file changed, 28 insertions(+), 4 deletions(-) diff --git a/SerialICE/simba/cpu.lua b/SerialICE/simba/cpu.lua index 22ccb33..6dad741 100644 --- a/SerialICE/simba/cpu.lua +++ b/SerialICE/simba/cpu.lua @@ -2,11 +2,14 @@ -- CPU MSR filters function var_mtrr_post(f, action) - local addr = action.rin.ecx local hi = action.rin.edx local lo = action.rin.eax + if not action.write then + return true + end + if addr % 2 == 0 then mt = lo % 0x100 if mt == 0 then memtype = "Uncacheable" @@ -25,8 +28,32 @@ function var_mtrr_post(f, action) end printk(f, action, "Set MTRR %x mask to %08x.%08x (%s)\n", (addr - 0x200) / 2, hi, bit32.band(lo, 0xfffff000), valid) end + return true +end + +function mtrr_pre(f, action) + local addr = action.rin.ecx + if addr >= 0x200 and addr < 0x210 then + return handle_action(f, action) + end + return false end +function mtrr_post(f, action) + local addr = action.rin.ecx + if addr >= 0x200 and addr < 0x210 then + return var_mtrr_post(f, action) + end + return false +end + +filter_mtrr = { + name = "MTRR", + pre = mtrr_pre, + post = mtrr_post, + hide = true, +} + function cpumsr_pre(f, action) return handle_action(f, action) end @@ -35,9 +62,6 @@ function cpumsr_post(f, action) if action.write then printk(f, action, "[%08x] <= %08x.%08x\n", action.rin.ecx, action.rin.edx, action.rin.eax) - if action.addr >= 0x200 and action.addr < 0x210 then - var_mtrr_post(f, action) - end else printk(f, action, "[%08x] => %08x.%08x\n", action.rin.ecx, action.rout.edx, action.rout.eax)

1 0

New patch to review for serialice: 32d7438 Fix flag combinations
by Kyösti Mälkki March 6, 2013

March 6, 2013

Kyösti Mälkki (kyosti.malkki(a)gmail.com) just uploaded a new patch set to gerrit, which you can find at http://review.coreboot.org/2595 -gerrit commit 32d7438bc4086c2a120b4b429a7e6c471d65072b Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Wed Mar 6 19:53:09 2013 +0200 Fix flag combinations In some rare case writes go to both hardware and qemu, so put those at different columns. Only one of "Undefined, Dropped or Faked" is possible at a time, place them on same column. Change-Id: I9b891e44ca1f044c68c21021599fa3a0f8dbae9e Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> --- SerialICE/simba/output.lua | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/SerialICE/simba/output.lua b/SerialICE/simba/output.lua index a01e074..10977ea 100644 --- a/SerialICE/simba/output.lua +++ b/SerialICE/simba/output.lua @@ -21,17 +21,17 @@ function printk(f, action, fmt, ...) end if action.to_hw then str = str .. "H" - elseif action.to_qemu then - str = str .. "Q" else str = str .. "." end - if action.undefined then - str = str .. "U" + if action.to_qemu then + str = str .. "Q" else str = str .. "." end - if action.dropped then + if action.undefined then + str = str .. "U" + elseif action.dropped then str = str .. "D" elseif action.faked then str = str .. "F"

1 0

New patch to review for serialice: 15ee1c0 Fix output from superio filter
by Kyösti Mälkki March 6, 2013

March 6, 2013

Kyösti Mälkki (kyosti.malkki(a)gmail.com) just uploaded a new patch set to gerrit, which you can find at http://review.coreboot.org/2594 -gerrit commit 15ee1c0e544e82b825abc018d744b9f19ee8a290 Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Wed Mar 6 07:40:16 2013 +0200 Fix output from superio filter Do not use printf() directly, it could create orphaned lines without processed flags [RH..] or CS:EIP. Change-Id: I7c720792564d64790987814c600bb2e3830a5332 Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> --- SerialICE/simba/superio.lua | 28 ++++++++++++++-------------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/SerialICE/simba/superio.lua b/SerialICE/simba/superio.lua index 14df145..7d6252c 100644 --- a/SerialICE/simba/superio.lua +++ b/SerialICE/simba/superio.lua @@ -32,23 +32,27 @@ function superio_pnpdev(f) return string.format("%s %02x:%02x", f.name, f.base, f.pnp.active_ldn) end -function superio_dev_post(f, action) +function superio_string(f) if f.pnp.reg < 0x30 then - printk(f, action, "%02x: ", f.base) + return string.format("%02x: ", f.base) else - printk(f, action, "%02x:%02x ", f.base, f.pnp.active_ldn) + return string.format("%02x:%02x ", f.base, f.pnp.active_ldn) end end function superio_register_post(f, action) - superio_dev_post(f, action) + local str = superio_string(f) if action.write then - printf("[%02x] <= %02x\n", f.pnp.reg, action.data) + printk(f, action, "%s [%02x] <= %02x\n", str, f.pnp.reg, action.data) else - printf("[%02x] => %02x\n", f.pnp.reg, action.data) + printk(f, action, "%s [%02x] => %02x\n", str, f.pnp.reg, action.data) end end +function superio_string_post(f, action, str2) + printk(f, action, "%s %s\n", superio_string(f), str2) +end + function superio_try_enable_io(f, idx) local ldn = f.ldn[f.pnp.active_ldn] @@ -89,11 +93,9 @@ function superio_try_enable_ldn(f, action) local ldn = f.ldn[f.pnp.active_ldn] if ldn.set[0x30] and ldn.data[0x30] == 0x0 then - superio_dev_post(f, action) - printf("disabled\n") + superio_string_post(f, action, "disabled") else - superio_dev_post(f, action) - printf("enabled\n") + superio_string_post(f, action, "enabled") end end @@ -165,13 +167,11 @@ function superio_post(f, action) end if f.pnp.reg == 0x70 then - superio_dev_post(f, action) - printf("irq = %d\n", ldn.data[0x70]) + superio_string_post(f, action, string.format("irq = %d", ldn.data[0x70])) return true end if f.pnp.reg == 0x72 then - superio_dev_post(f, action) - printf("irq2 = %d\n", ldn.data[0x72]) + superio_string_post(f, action, string.format("irq2 = %d", ldn.data[0x72])) return true end

1 0

Patch set updated for serialice: 25cea14 Do not add RAM filters on default_setup()
by Kyösti Mälkki March 6, 2013

March 6, 2013

Kyösti Mälkki (kyosti.malkki(a)gmail.com) just uploaded a new patch set to gerrit, which you can find at http://review.coreboot.org/2580 -gerrit commit 25cea143bd7c0ea477f115e51dfa319dde02d40d Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Mon Mar 4 10:17:37 2013 +0200 Do not add RAM filters on default_setup() To forward JEDEC init cycles to dram memory banks, using the memory fallback -filter, we must not enable RAM filters already at start-up. A mainboard-specific hook shall call enable_ram() only after raminit and possible quick memtest have completed. Change-Id: I9b3c0283fd4dd15b4d12e96e02e70d8ccc77f835 Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> --- SerialICE/simba/memory.lua | 49 ++++++++++++------------------------------- SerialICE/simba/serialice.lua | 1 - 2 files changed, 13 insertions(+), 37 deletions(-) diff --git a/SerialICE/simba/memory.lua b/SerialICE/simba/memory.lua index 4e60bad..b05f09c 100644 --- a/SerialICE/simba/memory.lua +++ b/SerialICE/simba/memory.lua @@ -13,12 +13,7 @@ function mem_qemu_rom_pre(f, action) end function mem_rom_post(f, action) - if not action.write then - return true - end - -- Writes to ROM space fall-thru to the fallback filter, - -- so they get logged there. - return false + return true end filter_rom_low = { @@ -81,21 +76,15 @@ end ram_is_initialized = false --- This is handled by SerialICE but *NOT* exclusively. --- Writes end up in Qemu memory, too -function mem_ram_low(f, action) - if ram_is_initialized then - -- RAM init is done. Send all RAM accesses - -- to Qemu. Using the target as storage would - -- only slow execution down. - action.to_hw = false - action.to_qemu = true - else - -- RAM init has not been marked done yet. - -- so send reads to the target only. - action.to_hw = true - action.to_qemu = action.write - end +function mem_qemu_only(f, action) + action.to_hw = false + action.to_qemu = true + return true +end + +function mem_target_only(f, action) + action.to_hw = true + action.to_qemu = false return true end @@ -113,14 +102,10 @@ function mem_smi_vga(f, action) end -function mem_post_pre_ram_only(f, action) - return ram_is_initialized -end - filter_ram_low = { name = "MEM", pre = mem_ram_low, - post = mem_post_pre_ram_only, + post = mem_post, hide = true, base = 0x0, size = 0xa0000 @@ -138,19 +123,12 @@ filter_smi_vga = { filter_ram_low_2 = { name = "MEM", pre = mem_ram_low, - post = mem_post_pre_ram_only, + post = mem_post, hide = true, base = 0xc0000, size = 0x20000 } - -function mem_target_only(f, action) - action.to_hw = true - action.to_qemu = false - return true -end - -- 3.25GB RAM. This is handled by SerialICE. -- FIXME: use TOLM here @@ -160,7 +138,7 @@ end filter_ram_high = { name = "MEM", pre = mem_target_only, - post = mem_post_pre_ram_only, + post = mem_post, hide = true, base = 0x100000, size = 0xd0000000 - 0x100000 @@ -172,7 +150,6 @@ function ram_enabled() end function enable_ram() - enable_hook(mem_hooks, filter_ram_low) enable_hook(mem_hooks, filter_smi_vga) enable_hook(mem_hooks, filter_ram_low_2) diff --git a/SerialICE/simba/serialice.lua b/SerialICE/simba/serialice.lua index 82a2b03..7cabf67 100644 --- a/SerialICE/simba/serialice.lua +++ b/SerialICE/simba/serialice.lua @@ -78,7 +78,6 @@ function do_minimal_setup() end function do_default_setup() - enable_ram() enable_hook(mem_hooks, filter_lapic) enable_hook(mem_hooks, filter_ioapic) enable_hook(io_hooks, filter_pci_io_cfg)

1 0

Patch set updated for serialice: b144de9 Drop initial value of filter id
by Kyösti Mälkki March 6, 2013

March 6, 2013

Kyösti Mälkki (kyosti.malkki(a)gmail.com) just uploaded a new patch set to gerrit, which you can find at http://review.coreboot.org/2578 -gerrit commit b144de957420c7ac874a0618173ffd58c636c618 Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Sun Mar 3 19:02:39 2013 +0200 Drop initial value of filter id All filters are assigned id number in enable_hooks(). Change-Id: I3300676caa7ffacf163c41b2df55b18b9676e3b3 Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> --- SerialICE/simba/aopen_dxpl_plus.lua | 1 - SerialICE/simba/asus_p4p800_vm.lua | 1 - SerialICE/simba/commell_lv_672.lua | 1 - SerialICE/simba/conroexfire_esata2.lua | 1 - SerialICE/simba/core_io.lua | 2 -- SerialICE/simba/cpu.lua | 5 ----- SerialICE/simba/hooks.lua | 10 +++------- SerialICE/simba/i82801.lua | 1 - SerialICE/simba/intel_d845gbv2.lua | 1 - SerialICE/simba/intel_d946gzis.lua | 1 - SerialICE/simba/intel_smbus.lua | 1 - SerialICE/simba/memory.lua | 7 ------- SerialICE/simba/mmio.lua | 2 -- SerialICE/simba/msi_ms7133.lua | 1 - SerialICE/simba/output.lua | 1 - SerialICE/simba/pc80.lua | 13 ------------- SerialICE/simba/pci_cfg.lua | 3 --- SerialICE/simba/superio.lua | 3 --- SerialICE/simba/via_epia_m_850.lua | 1 - 19 files changed, 3 insertions(+), 53 deletions(-) diff --git a/SerialICE/simba/aopen_dxpl_plus.lua b/SerialICE/simba/aopen_dxpl_plus.lua index bc5459c..e8284d3 100644 --- a/SerialICE/simba/aopen_dxpl_plus.lua +++ b/SerialICE/simba/aopen_dxpl_plus.lua @@ -110,7 +110,6 @@ function mainboard_io_post(f, action) end filter_mainboard = { - id = -1, name = "AOpen", pre = mainboard_io_pre, post = mainboard_io_post, diff --git a/SerialICE/simba/asus_p4p800_vm.lua b/SerialICE/simba/asus_p4p800_vm.lua index fbc8c44..e4ed836 100644 --- a/SerialICE/simba/asus_p4p800_vm.lua +++ b/SerialICE/simba/asus_p4p800_vm.lua @@ -62,7 +62,6 @@ function mainboard_io_post(f, action) end filter_mainboard = { - id = -1, name = "test", pre = mainboard_io_pre, post = mainboard_io_post, diff --git a/SerialICE/simba/commell_lv_672.lua b/SerialICE/simba/commell_lv_672.lua index 9ebf6ea..2c7710d 100644 --- a/SerialICE/simba/commell_lv_672.lua +++ b/SerialICE/simba/commell_lv_672.lua @@ -35,7 +35,6 @@ function mainboard_io_post(f, action) end filter_mainboard = { - id = -1, name = "test", pre = mainboard_io_pre, post = mainboard_io_post, diff --git a/SerialICE/simba/conroexfire_esata2.lua b/SerialICE/simba/conroexfire_esata2.lua index 5f8b198..d974d7c 100644 --- a/SerialICE/simba/conroexfire_esata2.lua +++ b/SerialICE/simba/conroexfire_esata2.lua @@ -63,7 +63,6 @@ function mainboard_io_post(f, action) end filter_mainboard = { - id = -1, name = "test", pre = mainboard_io_pre, post = mainboard_io_post, diff --git a/SerialICE/simba/core_io.lua b/SerialICE/simba/core_io.lua index 37db0ea..0aa67fd 100644 --- a/SerialICE/simba/core_io.lua +++ b/SerialICE/simba/core_io.lua @@ -31,7 +31,6 @@ function io_post(f, action) end filter_io_fallback = { - id = -1, name = "IO", pre = io_undefined, post = io_post, @@ -69,7 +68,6 @@ function mem_post(f, action) end filter_mem_fallback = { - id = -1, name = "MEM", pre = mem_undefined, post = mem_post, diff --git a/SerialICE/simba/cpu.lua b/SerialICE/simba/cpu.lua index 9c2c72b..22ccb33 100644 --- a/SerialICE/simba/cpu.lua +++ b/SerialICE/simba/cpu.lua @@ -47,7 +47,6 @@ end filter_cpumsr_fallback = { - id = -1, name = "CPU MSR", pre = cpumsr_pre, post = cpumsr_post, @@ -72,7 +71,6 @@ function cpuid_post(f, action) end filter_cpuid_fallback = { - id = -1, name = "CPUID", pre = cpuid_pre, post = cpuid_post, @@ -98,7 +96,6 @@ function multicore_post(f, action) end filter_multiprocessor = { - id = -1, name = "Multiprocessor Count", pre = multicore_pre, post = multicore_post, @@ -127,7 +124,6 @@ function intel_microcode_post(f, action) end filter_intel_microcode = { - id = -1, name = "Microcode Update", pre = intel_microcode_pre, post = intel_microcode_post, @@ -156,7 +152,6 @@ function amd_microcode_post(f, action) end filter_amd_microcode = { - id = -1, name = "Microcode Update", pre = amd_microcode_pre, post = amd_microcode_post, diff --git a/SerialICE/simba/hooks.lua b/SerialICE/simba/hooks.lua index 29f574a..72e1a55 100644 --- a/SerialICE/simba/hooks.lua +++ b/SerialICE/simba/hooks.lua @@ -39,10 +39,8 @@ function enable_hook(list, filter) l = l.next end if not found then - if (filter.id < 0) then - filter.id = next_filter_id - next_filter_id = next_filter_id + 1 - end + filter.id = next_filter_id + next_filter_id = next_filter_id + 1 list.list = { next = list.list, hook = filter } end if (list == io_hooks) then @@ -71,7 +69,7 @@ function disable_hook(list, filter) printks(froot, "id=%04x disabled\n", filter.id) filter.enable = false else - printks(filter, "disabled\n", filter.id) + printks(filter, "disabled\n") filter.enable = false end end @@ -147,7 +145,6 @@ end function generic_io_bar(bar) if not bar.f then local f = {} - f.id = -1 f.pre = handle_action f.post = io_post f.decode = F_RANGE @@ -167,7 +164,6 @@ end function generic_mmio_bar(bar) if not bar.f then local f = {} - f.id = -1 f.pre = handle_action f.post = mem_post f.decode = F_RANGE diff --git a/SerialICE/simba/i82801.lua b/SerialICE/simba/i82801.lua index a1571f9..96fc8c3 100644 --- a/SerialICE/simba/i82801.lua +++ b/SerialICE/simba/i82801.lua @@ -146,7 +146,6 @@ end -- ICH7 TPM -- Phoenix "Secure" Core bails out if we don't pass the read on ;-) filter_ich7_tpm = { - id = -1, name = "ICH7 TPM", pre = mem_target_only, post = mem_post, diff --git a/SerialICE/simba/intel_d845gbv2.lua b/SerialICE/simba/intel_d845gbv2.lua index 43921ee..1f08dfc 100644 --- a/SerialICE/simba/intel_d845gbv2.lua +++ b/SerialICE/simba/intel_d845gbv2.lua @@ -58,7 +58,6 @@ function mainboard_io_post(f, action) end filter_mainboard = { - id = -1, name = "GEBV2", pre = mainboard_io_pre, post = mainboard_io_post, diff --git a/SerialICE/simba/intel_d946gzis.lua b/SerialICE/simba/intel_d946gzis.lua index ea46ba3..da3338d 100644 --- a/SerialICE/simba/intel_d946gzis.lua +++ b/SerialICE/simba/intel_d946gzis.lua @@ -51,7 +51,6 @@ function mainboard_io_post(f, action) end filter_mainboard = { - id = -1, name = "test", pre = mainboard_io_pre, post = mainboard_io_post, diff --git a/SerialICE/simba/intel_smbus.lua b/SerialICE/simba/intel_smbus.lua index daa0b9d..bfdf384 100644 --- a/SerialICE/simba/intel_smbus.lua +++ b/SerialICE/simba/intel_smbus.lua @@ -236,7 +236,6 @@ end local intel_smbus_host = { - id = -1, name = "i801-smbus", pre = intel_smbus_host_pre, post = intel_smbus_host_post, diff --git a/SerialICE/simba/memory.lua b/SerialICE/simba/memory.lua index 11bc6ed..4e60bad 100644 --- a/SerialICE/simba/memory.lua +++ b/SerialICE/simba/memory.lua @@ -22,7 +22,6 @@ function mem_rom_post(f, action) end filter_rom_low = { - id = -1, name = "ROM_LO", pre = mem_qemu_rom_pre, post = mem_rom_post, @@ -31,7 +30,6 @@ filter_rom_low = { size = 0x20000 } filter_rom_high = { - id = -1, name = "ROM_HI", pre = mem_qemu_rom_pre, post = mem_rom_post, @@ -55,7 +53,6 @@ end function new_car_region(start, size) f = {} - f.id = -1 f.name = "CAR" f.base = start f.size = size @@ -121,7 +118,6 @@ function mem_post_pre_ram_only(f, action) end filter_ram_low = { - id = -1, name = "MEM", pre = mem_ram_low, post = mem_post_pre_ram_only, @@ -131,7 +127,6 @@ filter_ram_low = { } filter_smi_vga = { - id = -1, name = "SMI_VGA", pre = mem_smi_vga, post = mem_post, @@ -141,7 +136,6 @@ filter_smi_vga = { } filter_ram_low_2 = { - id = -1, name = "MEM", pre = mem_ram_low, post = mem_post_pre_ram_only, @@ -164,7 +158,6 @@ end -- need lots of ram on the host and firmware usually does not intensively -- use high memory anyways. filter_ram_high = { - id = -1, name = "MEM", pre = mem_target_only, post = mem_post_pre_ram_only, diff --git a/SerialICE/simba/mmio.lua b/SerialICE/simba/mmio.lua index 681953b..c6ba1e5 100644 --- a/SerialICE/simba/mmio.lua +++ b/SerialICE/simba/mmio.lua @@ -17,7 +17,6 @@ function mem_lapic(f, action) end filter_lapic = { - id = -1, name = "LAPIC", pre = mem_lapic, post = mem_post, @@ -29,7 +28,6 @@ filter_lapic = { -- IOAPIC filter_ioapic = { - id = -1, name = "IOAPIC", pre = mem_target_only, post = mem_post, diff --git a/SerialICE/simba/msi_ms7133.lua b/SerialICE/simba/msi_ms7133.lua index 41bd7bf..039496f 100644 --- a/SerialICE/simba/msi_ms7133.lua +++ b/SerialICE/simba/msi_ms7133.lua @@ -47,7 +47,6 @@ function mainboard_io_post(f, action) end filter_mainboard = { - id = -1, name = "test", pre = mainboard_io_pre, post = mainboard_io_post, diff --git a/SerialICE/simba/output.lua b/SerialICE/simba/output.lua index c006248..fac895d 100644 --- a/SerialICE/simba/output.lua +++ b/SerialICE/simba/output.lua @@ -6,7 +6,6 @@ froot = { } fresource = { - id = -1, name = "Resource", } diff --git a/SerialICE/simba/pc80.lua b/SerialICE/simba/pc80.lua index a9f4f0c..35d01e3 100644 --- a/SerialICE/simba/pc80.lua +++ b/SerialICE/simba/pc80.lua @@ -11,7 +11,6 @@ function debugport_post(f, action) end filter_debugport = { - id = -1, name = "POST", pre = handle_action, post = debugport_post, @@ -52,7 +51,6 @@ function i8259_edge_post(f,action) end filter_i8259_master = { - id = -1, name = "i8259 A", pre = i8259_pre, post = i8259_post, @@ -62,7 +60,6 @@ filter_i8259_master = { } filter_i8259_slave = { - id = -1, name = "i8259 B", pre = i8259_pre, post = i8259_post, @@ -72,7 +69,6 @@ filter_i8259_slave = { } filter_i8259_edge = { - id = -1, name = "i8259 C", pre = i8259_edge_pre, post = i8259_edge_post, @@ -101,7 +97,6 @@ end filter_i8237_a = { - id = -1, name = "i8237 A", pre = i8237_pre, post = i8237_post, @@ -110,7 +105,6 @@ filter_i8237_a = { size = 0x20 } filter_i8237_b = { - id = -1, name = "i8237 B", pre = i8237_pre, post = i8237_post, @@ -119,7 +113,6 @@ filter_i8237_b = { size = 0x20 } filter_i8237_c = { - id = -1, name = "i8237 C", pre = i8237_pre, post = i8237_post, @@ -243,7 +236,6 @@ i8254_counters[0x1] = { init=0, current=0, latch, readback, status=0 } i8254_counters[0x2] = { init=0, current=0, latch, readback, status=0 } filter_i8254_a = { - id = -1, name = "i8254 A", pre = i8254_pre, post = i8254_post, @@ -253,7 +245,6 @@ filter_i8254_a = { counter = i8254_counters, } filter_i8254_b = { - id = -1, name = "i8254 B", pre = i8254_pre, post = i8254_post, @@ -322,7 +313,6 @@ function i8042_post(f, action) end filter_i8042 = { - id = -1, decode = F_FIXED, name = "i8042", pre = i8042_pre, @@ -455,7 +445,6 @@ function nvram_post(f, action) end filter_nvram = { - id = -1, name = "NVram", pre = nvram_pre, post = nvram_post, @@ -493,7 +482,6 @@ function sys_rst_post(f, action) end filter_reset = { - id = -1, name = "Reset", pre = sys_rst_pre, post = sys_rst_post, @@ -515,7 +503,6 @@ function vga_io_post(f, action) end filter_vga_io = { - id = -1, name = "VGA", pre = vga_io_pre, post = vga_io_post, diff --git a/SerialICE/simba/pci_cfg.lua b/SerialICE/simba/pci_cfg.lua index 47a061d..d874e9f 100644 --- a/SerialICE/simba/pci_cfg.lua +++ b/SerialICE/simba/pci_cfg.lua @@ -16,7 +16,6 @@ function add_pci_cfg_hook(dev, reg, size, func) bit32.band(0xff,bit32.rshift(bdfr, 20)), bit32.band(0x1f,bit32.rshift(bdfr, 15)), bit32.band(0x7,bit32.rshift(bdfr, 12)), bit32.band(0xfff,bdfr)) local filter = { - id = -1, base = bdfr, dev = dev, reg = reg, @@ -272,7 +271,6 @@ function pci_io_cfg_post(f, action) end filter_pci_io_cfg = { - id = -1, name = "PCI", pre = pci_io_cfg_pre, post = pci_io_cfg_post, @@ -305,7 +303,6 @@ function pci_mm_cfg_post(f, action) end filter_pci_mm_cfg = { - id = -1, pre = pci_mm_cfg_pre, post = pci_mm_cfg_post, hide = hide_pci_mm_cfg, diff --git a/SerialICE/simba/superio.lua b/SerialICE/simba/superio.lua index 7f6210c..14df145 100644 --- a/SerialICE/simba/superio.lua +++ b/SerialICE/simba/superio.lua @@ -181,7 +181,6 @@ end filter_superio_2e = { - id = -1, name = "PnP", pre = superio_pre, post = superio_post, @@ -193,7 +192,6 @@ filter_superio_2e = { ldn = {}, } filter_superio_4e = { - id = -1, name = "PnP", pre = superio_pre, post = superio_post, @@ -255,7 +253,6 @@ function com_pre(f, action) end filter_com1 = { - id = -1, name = "COM1", pre = com_pre, post = io_post, diff --git a/SerialICE/simba/via_epia_m_850.lua b/SerialICE/simba/via_epia_m_850.lua index e4649c4..b305353 100644 --- a/SerialICE/simba/via_epia_m_850.lua +++ b/SerialICE/simba/via_epia_m_850.lua @@ -96,7 +96,6 @@ function mainboard_io_post(f, action) end filter_mainboard = { - id = -1, name = "VIA", pre = mainboard_io_pre, post = mainboard_io_post,

1 0

Patch set updated for serialice: 26fa5fa Refactor logging functions
by Kyösti Mälkki March 6, 2013

March 6, 2013

Kyösti Mälkki (kyosti.malkki(a)gmail.com) just uploaded a new patch set to gerrit, which you can find at http://review.coreboot.org/2579 -gerrit commit 26fa5fae6d632fa918b1933b182647c511987f92 Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Sun Mar 3 14:07:18 2013 +0200 Refactor logging functions This adds root_info() and resource_info() functions to add informational lines (tagged with I...) in the log. This also fixes index and cs:eip values printed for these lines. Change-Id: Ib83140037ef4e910f2828783fd7505eac74fac2f Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> --- SerialICE/simba/hooks.lua | 61 +++++++++++++++++++------------------------ SerialICE/simba/output.lua | 34 ++++++++++++++---------- SerialICE/simba/pci_cfg.lua | 6 ++--- SerialICE/simba/serialice.lua | 6 ++--- 4 files changed, 53 insertions(+), 54 deletions(-) diff --git a/SerialICE/simba/hooks.lua b/SerialICE/simba/hooks.lua index 72e1a55..01aea65 100644 --- a/SerialICE/simba/hooks.lua +++ b/SerialICE/simba/hooks.lua @@ -1,10 +1,13 @@ -function new_list() - return { list = nil } +froot = { id = 0, name = "SerialICE" } +fresource = { id = 1, name = "Resource" } + +function new_hooks(str) + return { list = nil, name = str } end -next_filter_id = 1 +next_filter_id = 2 next_action_id = 1 current_parent_id = 0 @@ -19,16 +22,15 @@ function new_parent_action() end -io_hooks = new_list() -mem_hooks = new_list() - -cpumsr_hooks = new_list() -cpuid_hooks = new_list() +io_hooks = new_hooks("IO") +mem_hooks = new_hooks("MEM") +cpumsr_hooks = new_hooks("CPU MSR") +cpuid_hooks = new_hooks("CPUID") function enable_hook(list, filter) if not filter then - printks(froot, "Enable_hook called with filter==nil\n") + root_info("Attempted to call enable_hook() with filter==nil\n") return end @@ -40,37 +42,27 @@ function enable_hook(list, filter) end if not found then filter.id = next_filter_id + filter.list = list next_filter_id = next_filter_id + 1 list.list = { next = list.list, hook = filter } end - if (list == io_hooks) then - printks(fresource, "[%04x] IO [%04x-%04x] = %s\n", - filter.id, filter.base, filter.base + filter.size - 1, filter.name) - elseif (list == mem_hooks) then - printks(fresource, "[%04x] MEM [%08x-%08x] = %s\n", - filter.id, filter.base, filter.base + filter.size - 1, filter.name) - else - printks(fresource, "[%04x] %s\n", filter.id, filter.name) - end + update_hook(filter) filter.enable = true end -function disable_hook(list, filter) - if not filter then - return - end - local l = list.list - local found = false - while l and not found do - found = (l.hook == filter) - l = l.next +function disable_hook(f) + if f.id and f.enable and f.enable == true then + resource_info(f, "disabled") end - if found then - printks(froot, "id=%04x disabled\n", filter.id) - filter.enable = false + f.enable = false +end + +function update_hook(f) + if f.list == io_hooks or f.list == mem_hooks then + resource_info(f, "[%04x-%04x] = %s", + f.base, f.base + f.size - 1, f.name) else - printks(filter, "disabled\n") - filter.enable = false + resource_info(f, "%s", f.name) end end @@ -157,7 +149,7 @@ function generic_io_bar(bar) if (bar.f.base ~= 0) then enable_hook(io_hooks, bar.f) else - disable_hook(io_hooks, bar.f) + disable_hook(bar.f) end end @@ -176,7 +168,7 @@ function generic_mmio_bar(bar) if bar.f.base ~= 0 then enable_hook(mem_hooks, bar.f) else - disable_hook(mem_hooks, bar.f) + disable_hook(bar.f) end end @@ -233,6 +225,7 @@ function pre_action(action, dir_wr, addr, size, data) action.dropped = false action.to_hw = false action.to_qemu = false + action.info_only = false action.write = dir_wr action.addr = addr diff --git a/SerialICE/simba/output.lua b/SerialICE/simba/output.lua index fac895d..a01e074 100644 --- a/SerialICE/simba/output.lua +++ b/SerialICE/simba/output.lua @@ -1,14 +1,4 @@ - -froot = { - id = 0, - name = "SerialICE", -} - -fresource = { - name = "Resource", -} - -- ------------------------------------------------------------------- -- logging functions @@ -24,6 +14,8 @@ function printk(f, action, fmt, ...) local str = "" if action.undefined or action.f or action == cpu_action then str = str .. "R" + elseif action.info_only then + str = str .. "I" else str = str .. "." end @@ -58,10 +50,24 @@ function printk(f, action, fmt, ...) end end -function printks(f, fmt, ...) - print_address(0,0,"I...",0,0) - printf("%s: ", f.name) - printf(fmt, ...) +info_action = {} + +function print_info(f, str) + pre_action(info_action) + info_action.info_only = true + info_action.parent_id = current_parent_id + info_action.my_id = next_action_id + printk(f, info_action, "%s", str) +end + +function root_info(fmt, ...) + print_info(froot, string.format(fmt, ...)) +end + +function resource_info(f, fmt, ...) + print_info(fresource, + string.format("[%04x] %s ", f.id, f.list.name) .. + string.format(fmt, ...) .. "\n") end function trim (s) diff --git a/SerialICE/simba/pci_cfg.lua b/SerialICE/simba/pci_cfg.lua index d874e9f..e7bdf65 100644 --- a/SerialICE/simba/pci_cfg.lua +++ b/SerialICE/simba/pci_cfg.lua @@ -8,11 +8,11 @@ pci_cfg_action = {} PCI_CFG_READ = false PCI_CFG_WRITE = true -pci_cfg_hooks = new_list() +pci_cfg_hooks = new_hooks("PCI") function add_pci_cfg_hook(dev, reg, size, func) local bdfr = bit32.bor(dev.pci_dev, reg) - local name = string.format("PCI %x:%02x.%x [%04x]", + local name = string.format("%x:%02x.%x [%03x]", bit32.band(0xff,bit32.rshift(bdfr, 20)), bit32.band(0x1f,bit32.rshift(bdfr, 15)), bit32.band(0x7,bit32.rshift(bdfr, 12)), bit32.band(0xfff,bdfr)) local filter = { @@ -327,6 +327,6 @@ end function pcie_mm_disable(dev, reg, base, size) if dev.bar and dev.bar[reg] and dev.bar[reg].f then - disable_hook(mem_hooks, dev.bar[reg].f) + disable_hook(dev.bar[reg].f) end end diff --git a/SerialICE/simba/serialice.lua b/SerialICE/simba/serialice.lua index 61e2fd1..82a2b03 100644 --- a/SerialICE/simba/serialice.lua +++ b/SerialICE/simba/serialice.lua @@ -98,16 +98,16 @@ if mainboard_script then io.close(mainboard_script) assert(mainboard_lua, ferr) mainboard_lua() - printks(froot, "Mainboard script %s initialized.\n", mainboard_file) + root_info("Mainboard script %s initialized.\n", mainboard_file) do_minimal_setup() do_mainboard_setup() else - printks(froot, "Mainboard script %s not found.\n", mainboard_file) + root_info("Mainboard script %s not found.\n", mainboard_file) do_minimal_setup() do_default_setup() end -printks(froot, "LUA script initialized.\n") +root_info("LUA script initialized.\n") return true

1 0

Patch set updated for serialice: 03bea52 Treat PnP devices as fixed IO
by Kyösti Mälkki March 6, 2013

March 6, 2013

Kyösti Mälkki (kyosti.malkki(a)gmail.com) just uploaded a new patch set to gerrit, which you can find at http://review.coreboot.org/2577 -gerrit commit 03bea525ad9c9fa3b5b0c8ffb83717d454fd1cbf Author: Kyösti Mälkki <kyosti.malkki(a)gmail.com> Date: Sun Mar 3 19:02:29 2013 +0200 Treat PnP devices as fixed IO Usually these ISA/LPC devices are discussed using fixed I/O addresses so change the log output. In example below, superio 2e:05 IO base registers for keyboard are programmed with 0x60 and 0x64 and that effectively disables the i8042 filter. We explicitly prevent this pair of addresses from being treated as PnP device. 0028.0029 RH.. [0000:0000] IO,i8042: outb 0064 <= d1 0028.002a RH.. [0000:0000] IO,i8042: inb 0064 => 11 0028.002b .H.. [0000:0000] i8042: A20 enabled 0028.002b RH.. [0000:0000] IO,i8042: outb 0060 <= df 0028.002c RH.. [0000:0000] IO,i8042: inb 0064 => 11 ... 0000.0000 I... [0000:0000] Resource: [0033] IO [0060-0060] = PnP 2e:05 0000.0000 I... [0000:0000] Resource: [0034] IO [0064-0064] = PnP 2e:05 ... 0706.0707 .H.. [0000:0000] PnP 2e:05: [0000] <= d1 0706.0708 .H.. [0000:0000] PnP 2e:05: [0000] => ff 0709.070a .H.. [0000:0000] PnP 2e:05: [0000] <= df 070b.070c .H.. [0000:0000] PnP 2e:05: [0000] => ff Change-Id: Ibec34fe656dea9efd22ab4530ef9efb99c9c665d Signed-off-by: Kyösti Mälkki <kyosti.malkki(a)gmail.com> --- SerialICE/simba/pc80.lua | 1 + SerialICE/simba/superio.lua | 14 ++++++++++---- 2 files changed, 11 insertions(+), 4 deletions(-) diff --git a/SerialICE/simba/pc80.lua b/SerialICE/simba/pc80.lua index 7ce439c..a9f4f0c 100644 --- a/SerialICE/simba/pc80.lua +++ b/SerialICE/simba/pc80.lua @@ -323,6 +323,7 @@ end filter_i8042 = { id = -1, + decode = F_FIXED, name = "i8042", pre = i8042_pre, post = i8042_post, diff --git a/SerialICE/simba/superio.lua b/SerialICE/simba/superio.lua index 1248af5..7f6210c 100644 --- a/SerialICE/simba/superio.lua +++ b/SerialICE/simba/superio.lua @@ -62,8 +62,11 @@ function superio_try_enable_io(f, idx) if not ldn.bar0.name then ldn.bar0.name = superio_pnpdev(f) end - ldn.bar0.val = iobase - generic_io_bar(ldn.bar0) + if iobase ~= 0x60 then + ldn.bar0.val = iobase + generic_io_bar(ldn.bar0) + ldn.bar0.f.decode = F_FIXED + end end if idx == 1 and ldn.set[0x62] and ldn.set[0x63] then local iobase = bit32.bor(bit32.lshift(ldn.data[0x62], 8), ldn.data[0x63]) @@ -73,8 +76,11 @@ function superio_try_enable_io(f, idx) if not ldn.bar1.name then ldn.bar1.name = superio_pnpdev(f) end - ldn.bar1.val = iobase - generic_io_bar(ldn.bar1) + if iobase ~= 0x64 then + ldn.bar1.val = iobase + generic_io_bar(ldn.bar1) + ldn.bar1.f.decode = F_FIXED + end end end end

1 0