qemu-devel.nongnu.org archive mirror
 help / color / mirror / Atom feed
From: Beth Kon <eak@us.ibm.com>
To: Andriy Gapon <avg@icyb.net.ua>
Cc: qemu-devel@nongnu.org
Subject: Re: [Qemu-devel] Re: hpet emulation problems
Date: Tue, 21 Jul 2009 14:16:49 -0400	[thread overview]
Message-ID: <4A660611.6040801@us.ibm.com> (raw)
In-Reply-To: <4A65BA5A.5000608@icyb.net.ua>

Andriy Gapon wrote:
> I obtained qemu code and looked through hw/hpet.c, below are some observations.
>
>
> on 21/07/2009 15:29 Andriy Gapon said the following:
>   
>> I observe the following problems with qemu-emulated HPET:
>>
>> 1. setting lower 32bits of a 64-bit register clears the higher 32 bits;
>> At least this happens with TIMn_CONF register - I set some bits at offset 0x100
>> and all bits at 0x104 become cleared. The problem is aggravated by the fact that
>> those bits are supposed to be RO - they specify interrupt routing capabilities.
>>     
>
> This probably happens because of the following.
> New value is set using a filter function, e.g.:
> timer->config = hpet_fixup_reg(new_val, old_val,
>                                HPET_TN_CFG_WRITE_MASK);
> But old_val was set to:
> old_val = hpet_ram_readl(opaque, addr);
>
> Apparently hpet_ram_readl returns value in the lower 32 bits and thus higher 32
> bits are lost.
> timer->config is a 64-bit variable that is supposed to hold all bits of TIMn_CONF
> (judging from hpet_ram_readl).
>
>   
>> 2. Setting interrupt type to level-triggered has no effect in the sense that
>> interrupt status bits are not set in GINTR_STA when interrupts are generated.
>>     
>
> From the code I see that level-triggered interrupts are not supposed to be
> supported at all:
> if (new_val & HPET_TIMER_TYPE_LEVEL) {
>     printf("qemu: level-triggered hpet not supported\n");
>     exit (-1);
> }
>
> The code is quite harsh in calling exit(), but it is incorrect too.
> This how HPET_TIMER_TYPE_LEVEL is defined:
> #define HPET_TIMER_TYPE_LEVEL 1
> #define HPET_TIMER_TYPE_EDGE 0
>
> But Interrupt Type is bit #1 in TIMn_CONF, bit #0 is reserved and is typically
> zero. The check should be:
> if (new_val & (HPET_TIMER_TYPE_LEVEL << 1))
> or something like that.
>
> But maybe level-triggered HPET interrupts could be supported after all.
>   
Thanks for catching these bugs! I'll submit corrections shortly.

As far as supporting level-triggered interrupts, all the guests I tested 
used edge-triggered interrupts, so this is what I implemented as a first 
pass. I don't think there is any reason not to implement 
level-triggered, though I am not planning to work on that at this point.

  reply	other threads:[~2009-07-21 18:17 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2009-07-21 12:29 [Qemu-devel] hpet emulation problems Andriy Gapon
2009-07-21 12:53 ` [Qemu-devel] " Andriy Gapon
2009-07-21 18:16   ` Beth Kon [this message]
2009-07-21 18:26     ` Andriy Gapon
2009-07-23 10:10       ` Andriy Gapon

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4A660611.6040801@us.ibm.com \
    --to=eak@us.ibm.com \
    --cc=avg@icyb.net.ua \
    --cc=qemu-devel@nongnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).