1 /* SPDX-License-Identifier: GPL-2.0+ */
3 * Copyright 2004, 2007-2012 Freescale Semiconductor, Inc.
4 * Copyright (C) 2003 Motorola,Inc.
7 /* U-Boot Startup Code for Motorola 85xx PowerPC based Embedded Boards
9 * The processor starts at 0xfffffffc and the code is first executed in the
10 * last 4K page(0xfffff000-0xffffffff) in flash/rom.
14 #include <asm-offsets.h>
18 #include <ppc_asm.tmpl>
21 #include <asm/cache.h>
25 #define MSR_KERNEL ( MSR_ME ) /* Machine Check */
27 #define LAW_EN 0x80000000
29 #if defined(CONFIG_NAND_SPL) || \
30 (defined(CONFIG_SPL_BUILD) && CONFIG_IS_ENABLED(INIT_MINIMAL))
34 #if !defined(CONFIG_SPL) && !defined(CONFIG_SYS_RAMBOOT) && \
35 !defined(CONFIG_NXP_ESBC) && !defined(CONFIG_SRIO_PCIE_BOOT_SLAVE)
40 * Set up GOT: Global Offset Table
42 * Use r12 to access the GOT
45 GOT_ENTRY(_GOT2_TABLE_)
46 GOT_ENTRY(_FIXUP_TABLE_)
49 GOT_ENTRY(_start_of_vectors)
50 GOT_ENTRY(_end_of_vectors)
51 GOT_ENTRY(transfer_to_handler)
56 GOT_ENTRY(__bss_start)
60 * e500 Startup -- after reset only the last 4KB of the effective
61 * address space is mapped in the MMU L2 TLB1 Entry0. The .bootpg
62 * section is located at THIS LAST page and basically does three
63 * things: clear some registers, set up exception tables and
64 * add more TLB entries for 'larger spaces'(e.g. the boot rom) to
65 * continue the boot procedure.
67 * Once the boot rom is mapped by TLB entries we can proceed
68 * with normal startup.
76 /* Enable debug exception */
81 * If we got an ePAPR device tree pointer passed in as r3, we need that
82 * later in cpu_init_early_f(). Save it to a safe register before we
83 * clobber it so that we can fetch it from there later.
87 #ifdef CONFIG_SYS_FSL_ERRATUM_A004510
90 li r4,CONFIG_SYS_FSL_ERRATUM_A004510_SVR_REV
94 #ifdef CONFIG_SYS_FSL_ERRATUM_A004510_SVR_REV2
95 li r4,CONFIG_SYS_FSL_ERRATUM_A004510_SVR_REV2
100 /* Not a supported revision affected by erratum */
104 1: li r27,1 /* Remember for later that we have the erratum */
105 /* Erratum says set bits 55:60 to 001001 */
115 #ifdef CONFIG_SYS_FSL_ERRATUM_A005125
118 mfspr r3, SPRN_HDBCR0
120 mtspr SPRN_HDBCR0, r3
124 #if defined(CONFIG_NXP_ESBC) && defined(CONFIG_E500MC) && \
125 !defined(CONFIG_E6500)
126 /* ISBC uses L2 as stack.
127 * Disable L2 cache here so that u-boot can enable it later
128 * as part of it's normal flow
131 /* Check if L2 is enabled */
132 mfspr r3, SPRN_L2CSR0
134 ori r2, r2, L2CSR0_L2E@l
138 mfspr r3, SPRN_L2CSR0
140 lis r2,(L2CSR0_L2FL)@h
141 ori r2, r2, (L2CSR0_L2FL)@l
148 mfspr r3, SPRN_L2CSR0
152 mfspr r3, SPRN_L2CSR0
154 ori r2, r2, L2CSR0_L2E@l
164 /* clear registers/arrays not reset by hardware */
168 mtspr L1CSR0,r0 /* invalidate d-cache */
169 mtspr L1CSR1,r0 /* invalidate i-cache */
172 mtspr DBSR,r1 /* Clear all valid bits */
175 .macro create_tlb1_entry esel ts tsize epn wimg rpn perm phy_high scratch
176 lis \scratch, FSL_BOOKE_MAS0(1, \esel, 0)@h
177 ori \scratch, \scratch, FSL_BOOKE_MAS0(1, \esel, 0)@l
179 lis \scratch, FSL_BOOKE_MAS1(1, 1, 0, \ts, \tsize)@h
180 ori \scratch, \scratch, FSL_BOOKE_MAS1(1, 1, 0, \ts, \tsize)@l
182 lis \scratch, FSL_BOOKE_MAS2(\epn, \wimg)@h
183 ori \scratch, \scratch, FSL_BOOKE_MAS2(\epn, \wimg)@l
185 lis \scratch, FSL_BOOKE_MAS3(\rpn, 0, \perm)@h
186 ori \scratch, \scratch, FSL_BOOKE_MAS3(\rpn, 0, \perm)@l
188 lis \scratch, \phy_high@h
189 ori \scratch, \scratch, \phy_high@l
197 .macro create_tlb0_entry esel ts tsize epn wimg rpn perm phy_high scratch
198 lis \scratch, FSL_BOOKE_MAS0(0, \esel, 0)@h
199 ori \scratch, \scratch, FSL_BOOKE_MAS0(0, \esel, 0)@l
201 lis \scratch, FSL_BOOKE_MAS1(1, 0, 0, \ts, \tsize)@h
202 ori \scratch, \scratch, FSL_BOOKE_MAS1(1, 0, 0, \ts, \tsize)@l
204 lis \scratch, FSL_BOOKE_MAS2(\epn, \wimg)@h
205 ori \scratch, \scratch, FSL_BOOKE_MAS2(\epn, \wimg)@l
207 lis \scratch, FSL_BOOKE_MAS3(\rpn, 0, \perm)@h
208 ori \scratch, \scratch, FSL_BOOKE_MAS3(\rpn, 0, \perm)@l
210 lis \scratch, \phy_high@h
211 ori \scratch, \scratch, \phy_high@l
219 .macro delete_tlb1_entry esel scratch
220 lis \scratch, FSL_BOOKE_MAS0(1, \esel, 0)@h
221 ori \scratch, \scratch, FSL_BOOKE_MAS0(1, \esel, 0)@l
231 .macro delete_tlb0_entry esel epn wimg scratch
232 lis \scratch, FSL_BOOKE_MAS0(0, \esel, 0)@h
233 ori \scratch, \scratch, FSL_BOOKE_MAS0(0, \esel, 0)@l
237 lis \scratch, FSL_BOOKE_MAS2(\epn, \wimg)@h
238 ori \scratch, \scratch, FSL_BOOKE_MAS2(\epn, \wimg)@l
246 /* Interrupt vectors do not fit in minimal SPL. */
247 #if !defined(MINIMAL_SPL)
248 /* Setup interrupt vectors */
249 lis r1,CONFIG_VAL(SYS_MONITOR_BASE)@h
252 li r4,CriticalInput@l
253 mtspr IVOR0,r4 /* 0: Critical input */
255 mtspr IVOR1,r4 /* 1: Machine check */
257 mtspr IVOR2,r4 /* 2: Data storage */
259 mtspr IVOR3,r4 /* 3: Instruction storage */
261 mtspr IVOR4,r4 /* 4: External interrupt */
263 mtspr IVOR5,r4 /* 5: Alignment */
265 mtspr IVOR6,r4 /* 6: Program check */
266 li r4,FPUnavailable@l
267 mtspr IVOR7,r4 /* 7: floating point unavailable */
269 mtspr IVOR8,r4 /* 8: System call */
270 /* 9: Auxiliary processor unavailable(unsupported) */
272 mtspr IVOR10,r4 /* 10: Decrementer */
273 li r4,IntervalTimer@l
274 mtspr IVOR11,r4 /* 11: Interval timer */
275 li r4,WatchdogTimer@l
276 mtspr IVOR12,r4 /* 12: Watchdog timer */
278 mtspr IVOR13,r4 /* 13: Data TLB error */
279 li r4,InstructionTLBError@l
280 mtspr IVOR14,r4 /* 14: Instruction TLB error */
281 li r4,DebugBreakpoint@l
282 mtspr IVOR15,r4 /* 15: Debug */
285 /* Clear and set up some registers. */
288 mtspr DEC,r0 /* prevent dec exceptions */
289 mttbl r0 /* prevent fit & wdt exceptions */
291 mtspr TSR,r1 /* clear all timer exception status */
292 mtspr TCR,r0 /* disable all */
293 mtspr ESR,r0 /* clear exception syndrome register */
294 mtspr MCSR,r0 /* machine check syndrome register */
295 mtxer r0 /* clear integer exception register */
297 #ifdef CONFIG_SYS_BOOK3E_HV
298 mtspr MAS8,r0 /* make sure MAS8 is clear */
301 /* Enable Time Base and Select Time Base Clock */
302 lis r0,HID0_EMCP@h /* Enable machine check */
303 #if defined(CONFIG_ENABLE_36BIT_PHYS)
304 ori r0,r0,HID0_ENMAS7@l /* Enable MAS7 */
306 #ifndef CONFIG_E500MC
307 ori r0,r0,HID0_TBEN@l /* Enable Timebase */
311 #if !defined(CONFIG_E500MC) && !defined(CONFIG_ARCH_QEMU_E500)
312 li r0,(HID1_ASTME|HID1_ABE)@l /* Addr streaming & broadcast */
315 cmpwi r3,0x50@l /* if we are rev 5.0 or greater set MBDD */
317 /* Set MBDD bit also */
318 ori r0, r0, HID1_MBDD@l
323 #ifdef CONFIG_SYS_FSL_ERRATUM_CPU_A003999
329 /* Enable Branch Prediction */
330 #if defined(CONFIG_BTB)
331 lis r0,BUCSR_ENABLE@h
332 ori r0,r0,BUCSR_ENABLE@l
336 #if defined(CONFIG_SYS_INIT_DBCR)
339 mtspr DBSR,r1 /* Clear all status bits */
340 lis r0,CONFIG_SYS_INIT_DBCR@h /* DBCR0[IDM] must be set */
341 ori r0,r0,CONFIG_SYS_INIT_DBCR@l
346 * Search for the TLB that covers the code we're executing, and shrink it
347 * so that it covers only this 4K page. That will ensure that any other
348 * TLB we create won't interfere with it. We assume that the TLB exists,
349 * which is why we don't check the Valid bit of MAS1. We also assume
352 * This is necessary, for example, when booting from the on-chip ROM,
353 * which (oddly) creates a single 4GB TLB that covers CCSR and DDR.
355 bl nexti /* Find our address */
356 nexti: mflr r1 /* R1 = our PC */
358 mtspr MAS6, r2 /* Assume the current PID and AS are 0 */
361 tlbsx 0, r1 /* This must succeed */
363 mfspr r14, MAS0 /* Save ESEL for later */
364 rlwinm r14, r14, 16, 0xfff
366 /* Set the size of the TLB to 4KB */
369 andc r3, r3, r2 /* Clear the TSIZE bits */
370 ori r3, r3, MAS1_TSIZE(BOOKE_PAGESZ_4K)@l
371 oris r3, r3, MAS1_IPROT@h
375 * Set the base address of the TLB to our PC. We assume that
376 * virtual == physical. We also assume that MAS2_EPN == MAS3_RPN.
379 ori r3, r3, MAS2_EPN@l /* R3 = MAS2_EPN */
381 and r1, r1, r3 /* Our PC, rounded down to the nearest page */
386 #ifdef CONFIG_SYS_FSL_ERRATUM_A004510
389 andi. r15, r2, MAS2_I|MAS2_G /* save the old I/G for later */
390 rlwinm r2, r2, 0, ~MAS2_I
394 mtspr MAS2, r2 /* Set the EPN to our PC base address */
399 mtspr MAS3, r2 /* Set the RPN to our PC base address */
406 * Clear out any other TLB entries that may exist, to avoid conflicts.
407 * Our TLB entry is in r14.
409 li r0, TLBIVAX_ALL | TLBIVAX_TLB0
413 mfspr r4, SPRN_TLB1CFG
414 rlwinm r4, r4, 0, TLBnCFG_NENTRY_MASK
419 rlwinm r5, r3, 16, MAS0_ESEL_MSK
421 beq 2f /* skip the entry we're executing from */
423 oris r5, r5, MAS0_TLBSEL(1)@h
434 #if defined(CONFIG_SYS_PPC_E500_DEBUG_TLB) && !defined(MINIMAL_SPL) && \
435 !defined(CONFIG_NXP_ESBC)
437 * TLB entry for debuggging in AS1
438 * Create temporary TLB entry in AS0 to handle debug exception
439 * As on debug exception MSR is cleared i.e. Address space is changed
440 * to 0. A TLB entry (in AS0) is required to handle debug exception generated
446 * TLB entry is created for IVPR + IVOR15 to map on valid OP code address
447 * bacause flash's virtual address maps to 0xff800000 - 0xffffffff.
448 * and this window is outside of 4K boot window.
450 create_tlb1_entry CONFIG_SYS_PPC_E500_DEBUG_TLB, \
451 0, BOOKE_PAGESZ_4M, \
452 CONFIG_VAL(SYS_MONITOR_BASE) & 0xffc00000, MAS2_I|MAS2_G, \
453 0xffc00000, MAS3_SX|MAS3_SW|MAS3_SR, \
458 * TLB entry is created for IVPR + IVOR15 to map on valid OP code address
459 * because "nexti" will resize TLB to 4K
461 create_tlb1_entry CONFIG_SYS_PPC_E500_DEBUG_TLB, \
462 0, BOOKE_PAGESZ_256K, \
463 CONFIG_VAL(SYS_MONITOR_BASE) & 0xfffc0000, MAS2_I, \
464 CONFIG_VAL(SYS_MONITOR_BASE) & 0xfffc0000, MAS3_SX|MAS3_SW|MAS3_SR, \
470 * Relocate CCSR, if necessary. We relocate CCSR if (obviously) the default
471 * location is not where we want it. This typically happens on a 36-bit
472 * system, where we want to move CCSR to near the top of 36-bit address space.
474 * To move CCSR, we create two temporary TLBs, one for the old location, and
475 * another for the new location. On CoreNet systems, we also need to create
476 * a special, temporary LAW.
478 * As a general rule, TLB0 is used for short-term TLBs, and TLB1 is used for
479 * long-term TLBs, so we use TLB0 here.
481 #if (CONFIG_SYS_CCSRBAR_DEFAULT != CONFIG_SYS_CCSRBAR_PHYS)
483 #if !defined(CONFIG_SYS_CCSRBAR_PHYS_HIGH) || !defined(CONFIG_SYS_CCSRBAR_PHYS_LOW)
484 #error "CONFIG_SYS_CCSRBAR_PHYS_HIGH and CONFIG_SYS_CCSRBAR_PHYS_LOW) must be defined."
489 * Create a TLB for the new location of CCSR. Register R8 is reserved
490 * for the virtual address of this TLB (CONFIG_SYS_CCSRBAR).
492 lis r8, CONFIG_SYS_CCSRBAR@h
493 ori r8, r8, CONFIG_SYS_CCSRBAR@l
494 lis r9, (CONFIG_SYS_CCSRBAR + 0x1000)@h
495 ori r9, r9, (CONFIG_SYS_CCSRBAR + 0x1000)@l
496 create_tlb0_entry 0, \
497 0, BOOKE_PAGESZ_4K, \
498 CONFIG_SYS_CCSRBAR, MAS2_I|MAS2_G, \
499 CONFIG_SYS_CCSRBAR_PHYS_LOW, MAS3_SW|MAS3_SR, \
500 CONFIG_SYS_CCSRBAR_PHYS_HIGH, r3
502 * Create a TLB for the current location of CCSR. Register R9 is reserved
503 * for the virtual address of this TLB (CONFIG_SYS_CCSRBAR + 0x1000).
506 create_tlb0_entry 1, \
507 0, BOOKE_PAGESZ_4K, \
508 CONFIG_SYS_CCSRBAR + 0x1000, MAS2_I|MAS2_G, \
509 CONFIG_SYS_CCSRBAR_DEFAULT, MAS3_SW|MAS3_SR, \
510 0, r3 /* The default CCSR address is always a 32-bit number */
514 * We have a TLB for what we think is the current (old) CCSR. Let's
515 * verify that, otherwise we won't be able to move it.
516 * CONFIG_SYS_CCSRBAR_DEFAULT is always a 32-bit number, so we only
517 * need to compare the lower 32 bits of CCSRBAR on CoreNet systems.
520 lis r0, CONFIG_SYS_CCSRBAR_DEFAULT@h
521 ori r0, r0, CONFIG_SYS_CCSRBAR_DEFAULT@l
522 #ifdef CONFIG_FSL_CORENET
523 lwz r1, 4(r9) /* CCSRBARL */
525 lwz r1, 0(r9) /* CCSRBAR, shifted right by 12 */
532 * If the value we read from CCSRBARL is not what we expect, then
533 * enter an infinite loop. This will at least allow a debugger to
534 * halt execution and examine TLBs, etc. There's no point in going
538 bne infinite_debug_loop
540 #ifdef CONFIG_FSL_CORENET
542 #define CCSR_LAWBARH0 (CONFIG_SYS_CCSRBAR + 0x1000)
543 #define LAW_SIZE_4K 0xb
544 #define CCSRBAR_LAWAR (LAW_EN | (0x1e << 20) | LAW_SIZE_4K)
545 #define CCSRAR_C 0x80000000 /* Commit */
549 * On CoreNet systems, we create the temporary LAW using a special LAW
550 * target ID of 0x1e. LAWBARH is at offset 0xc00 in CCSR.
552 lis r0, CONFIG_SYS_CCSRBAR_PHYS_HIGH@h
553 ori r0, r0, CONFIG_SYS_CCSRBAR_PHYS_HIGH@l
554 lis r1, CONFIG_SYS_CCSRBAR_PHYS_LOW@h
555 ori r1, r1, CONFIG_SYS_CCSRBAR_PHYS_LOW@l
556 lis r2, CCSRBAR_LAWAR@h
557 ori r2, r2, CCSRBAR_LAWAR@l
559 stw r0, 0xc00(r9) /* LAWBARH0 */
560 stw r1, 0xc04(r9) /* LAWBARL0 */
562 stw r2, 0xc08(r9) /* LAWAR0 */
565 * Read back from LAWAR to ensure the update is complete. e500mc
566 * cores also require an isync.
568 lwz r0, 0xc08(r9) /* LAWAR0 */
572 * Read the current CCSRBARH and CCSRBARL using load word instructions.
573 * Follow this with an isync instruction. This forces any outstanding
574 * accesses to configuration space to completion.
577 lwz r0, 0(r9) /* CCSRBARH */
578 lwz r0, 4(r9) /* CCSRBARL */
582 * Write the new values for CCSRBARH and CCSRBARL to their old
583 * locations. The CCSRBARH has a shadow register. When the CCSRBARH
584 * has a new value written it loads a CCSRBARH shadow register. When
585 * the CCSRBARL is written, the CCSRBARH shadow register contents
586 * along with the CCSRBARL value are loaded into the CCSRBARH and
587 * CCSRBARL registers, respectively. Follow this with a sync
591 lis r0, CONFIG_SYS_CCSRBAR_PHYS_HIGH@h
592 ori r0, r0, CONFIG_SYS_CCSRBAR_PHYS_HIGH@l
593 lis r1, CONFIG_SYS_CCSRBAR_PHYS_LOW@h
594 ori r1, r1, CONFIG_SYS_CCSRBAR_PHYS_LOW@l
596 ori r2, r2, CCSRAR_C@l
598 stw r0, 0(r9) /* Write to CCSRBARH */
599 sync /* Make sure we write to CCSRBARH first */
600 stw r1, 4(r9) /* Write to CCSRBARL */
604 * Write a 1 to the commit bit (C) of CCSRAR at the old location.
605 * Follow this with a sync instruction.
610 /* Delete the temporary LAW */
619 #else /* #ifdef CONFIG_FSL_CORENET */
623 * Read the current value of CCSRBAR using a load word instruction
624 * followed by an isync. This forces all accesses to configuration
631 /* CONFIG_SYS_CCSRBAR_PHYS right shifted by 12 */
632 #define CCSRBAR_PHYS_RS12 ((CONFIG_SYS_CCSRBAR_PHYS_HIGH << 20) | \
633 (CONFIG_SYS_CCSRBAR_PHYS_LOW >> 12))
635 /* Write the new value to CCSRBAR. */
636 lis r0, CCSRBAR_PHYS_RS12@h
637 ori r0, r0, CCSRBAR_PHYS_RS12@l
642 * The manual says to perform a load of an address that does not
643 * access configuration space or the on-chip SRAM using an existing TLB,
644 * but that doesn't appear to be necessary. We will do the isync,
650 * Read the contents of CCSRBAR from its new location, followed by
656 #endif /* #ifdef CONFIG_FSL_CORENET */
658 /* Delete the temporary TLBs */
660 delete_tlb0_entry 0, CONFIG_SYS_CCSRBAR, MAS2_I|MAS2_G, r3
661 delete_tlb0_entry 1, CONFIG_SYS_CCSRBAR + 0x1000, MAS2_I|MAS2_G, r3
663 #endif /* #if (CONFIG_SYS_CCSRBAR_DEFAULT != CONFIG_SYS_CCSRBAR_PHYS) */
665 #if defined(CONFIG_SYS_FSL_QORIQ_CHASSIS2) && defined(CONFIG_E6500)
668 * Create a TLB for the MMR location of CCSR
669 * to access L2CSR0 register
671 create_tlb0_entry 0, \
672 0, BOOKE_PAGESZ_4K, \
673 CONFIG_SYS_CCSRBAR + 0xC20000, MAS2_I|MAS2_G, \
674 CONFIG_SYS_CCSRBAR_PHYS_LOW + 0xC20000, MAS3_SW|MAS3_SR, \
675 CONFIG_SYS_CCSRBAR_PHYS_HIGH, r3
677 enable_l2_cluster_l2:
678 /* enable L2 cache */
679 lis r3, (CONFIG_SYS_CCSRBAR + 0xC20000)@h
680 ori r3, r3, (CONFIG_SYS_CCSRBAR + 0xC20000)@l
681 li r4, 33 /* stash id */
683 lis r4, (L2CSR0_L2FI|L2CSR0_L2LFC)@h
684 ori r4, r4, (L2CSR0_L2FI|L2CSR0_L2LFC)@l
686 stw r4, 0(r3) /* invalidate L2 */
687 /* Poll till the bits are cleared */
695 /* L2PE must be set before L2 cache is enabled */
696 lis r4, (L2CSR0_L2PE)@h
697 ori r4, r4, (L2CSR0_L2PE)@l
699 stw r4, 0(r3) /* enable L2 parity/ECC error checking */
700 /* Poll till the bit is set */
708 lis r4, (L2CSR0_L2E|L2CSR0_L2PE)@h
709 ori r4, r4, (L2CSR0_L2REP_MODE)@l
711 stw r4, 0(r3) /* enable L2 */
712 /* Poll till the bit is set */
721 delete_tlb0_entry 0, CONFIG_SYS_CCSRBAR + 0xC20000, MAS2_I|MAS2_G, r3
725 * Enable the L1. On e6500, this has to be done
726 * after the L2 is up.
729 #ifdef CONFIG_SYS_CACHE_STASHING
730 /* set stash id to (coreID) * 2 + 32 + L1 CT (0) */
735 /* Enable/invalidate the I-Cache */
736 lis r2,(L1CSR1_ICFI|L1CSR1_ICLFR)@h
737 ori r2,r2,(L1CSR1_ICFI|L1CSR1_ICLFR)@l
744 lis r3,(L1CSR1_CPE|L1CSR1_ICE)@h
745 ori r3,r3,(L1CSR1_CPE|L1CSR1_ICE)@l
750 andi. r1,r3,L1CSR1_ICE@l
753 /* Enable/invalidate the D-Cache */
754 lis r2,(L1CSR0_DCFI|L1CSR0_DCLFR)@h
755 ori r2,r2,(L1CSR0_DCFI|L1CSR0_DCLFR)@l
762 lis r3,(L1CSR0_CPE|L1CSR0_DCE)@h
763 ori r3,r3,(L1CSR0_CPE|L1CSR0_DCE)@l
768 andi. r1,r3,L1CSR0_DCE@l
770 #ifdef CONFIG_SYS_FSL_ERRATUM_A004510
771 #define DCSR_LAWBARH0 (CONFIG_SYS_CCSRBAR + 0x1000)
772 #define LAW_SIZE_1M 0x13
773 #define DCSRBAR_LAWAR (LAW_EN | (0x1d << 20) | LAW_SIZE_1M)
779 * Create a TLB entry for CCSR
781 * We're executing out of TLB1 entry in r14, and that's the only
782 * TLB entry that exists. To allocate some TLB entries for our
783 * own use, flip a bit high enough that we won't flip it again
788 lis r0, MAS0_TLBSEL(1)@h
789 rlwimi r0, r8, 16, MAS0_ESEL_MSK
790 lis r1, FSL_BOOKE_MAS1(1, 1, 0, 0, BOOKE_PAGESZ_16M)@h
791 ori r1, r1, FSL_BOOKE_MAS1(1, 1, 0, 0, BOOKE_PAGESZ_16M)@l
792 lis r7, CONFIG_SYS_CCSRBAR@h
793 ori r7, r7, CONFIG_SYS_CCSRBAR@l
794 ori r2, r7, MAS2_I|MAS2_G
795 lis r3, FSL_BOOKE_MAS3(CONFIG_SYS_CCSRBAR_PHYS_LOW, 0, (MAS3_SW|MAS3_SR))@h
796 ori r3, r3, FSL_BOOKE_MAS3(CONFIG_SYS_CCSRBAR_PHYS_LOW, 0, (MAS3_SW|MAS3_SR))@l
797 lis r4, CONFIG_SYS_CCSRBAR_PHYS_HIGH@h
798 ori r4, r4, CONFIG_SYS_CCSRBAR_PHYS_HIGH@l
809 /* Map DCSR temporarily to physical address zero */
811 lis r3, DCSRBAR_LAWAR@h
812 ori r3, r3, DCSRBAR_LAWAR@l
814 stw r0, 0xc00(r7) /* LAWBARH0 */
815 stw r0, 0xc04(r7) /* LAWBARL0 */
817 stw r3, 0xc08(r7) /* LAWAR0 */
819 /* Read back from LAWAR to ensure the update is complete. */
820 lwz r3, 0xc08(r7) /* LAWAR0 */
823 /* Create a TLB entry for DCSR at zero */
826 lis r0, MAS0_TLBSEL(1)@h
827 rlwimi r0, r9, 16, MAS0_ESEL_MSK
828 lis r1, FSL_BOOKE_MAS1(1, 1, 0, 0, BOOKE_PAGESZ_1M)@h
829 ori r1, r1, FSL_BOOKE_MAS1(1, 1, 0, 0, BOOKE_PAGESZ_1M)@l
830 li r6, 0 /* DCSR effective address */
831 ori r2, r6, MAS2_I|MAS2_G
832 li r3, MAS3_SW|MAS3_SR
844 /* enable the timebase */
845 #define CTBENR 0xe2084
847 addis r4, r7, CTBENR@ha
853 .macro erratum_set_ccsr offset value
854 addis r3, r7, \offset@ha
856 addi r3, r3, \offset@l
861 .macro erratum_set_dcsr offset value
862 addis r3, r6, \offset@ha
864 addi r3, r3, \offset@l
869 erratum_set_dcsr 0xb0e08 0xe0201800
870 erratum_set_dcsr 0xb0e18 0xe0201800
871 erratum_set_dcsr 0xb0e38 0xe0400000
872 erratum_set_dcsr 0xb0008 0x00900000
873 erratum_set_dcsr 0xb0e40 0xe00a0000
874 erratum_set_ccsr 0x18600 CONFIG_SYS_FSL_CORENET_SNOOPVEC_COREONLY
875 #ifdef CONFIG_RAMBOOT_PBL
876 erratum_set_ccsr 0x10f00 0x495e5000
878 erratum_set_ccsr 0x10f00 0x415e5000
880 erratum_set_ccsr 0x11f00 0x415e5000
882 /* Make temp mapping uncacheable again, if it was initially */
887 rlwimi r4, r15, 0, MAS2_I
888 rlwimi r4, r15, 0, MAS2_G
895 /* Clear the cache */
896 lis r3,(L1CSR1_ICFI|L1CSR1_ICLFR)@h
897 ori r3,r3,(L1CSR1_ICFI|L1CSR1_ICLFR)@l
907 lis r3,(L1CSR1_CPE|L1CSR1_ICE)@h
908 ori r3,r3,(L1CSR1_CPE|L1CSR1_ICE)@l
918 /* Remove temporary mappings */
919 lis r0, MAS0_TLBSEL(1)@h
920 rlwimi r0, r9, 16, MAS0_ESEL_MSK
930 stw r3, 0xc08(r7) /* LAWAR0 */
934 lis r0, MAS0_TLBSEL(1)@h
935 rlwimi r0, r8, 16, MAS0_ESEL_MSK
946 /* r3 = addr, r4 = value, clobbers r5, r11, r12 */
948 /* Lock two cache lines into I-Cache */
950 mfspr r11, SPRN_L1CSR1
951 rlwinm r11, r11, 0, ~L1CSR1_ICUL
954 mtspr SPRN_L1CSR1, r11
965 mfspr r11, SPRN_L1CSR1
966 3: andi. r11, r11, L1CSR1_ICUL
973 mfspr r11, SPRN_L1CSR1
974 3: andi. r11, r11, L1CSR1_ICUL
979 /* Inside a locked cacheline, wait a while, write, then wait a while */
983 addis r11, r5, 0x10000@h /* wait 65536 timebase ticks */
984 4: mfspr r5, SPRN_TBRL
991 addis r11, r5, 0x10000@h /* wait 65536 timebase ticks */
992 4: mfspr r5, SPRN_TBRL
999 * Fill out the rest of this cache line and the next with nops,
1000 * to ensure that nothing outside the locked area will be
1001 * fetched due to a branch.
1008 mfspr r11, SPRN_L1CSR1
1009 rlwinm r11, r11, 0, ~L1CSR1_ICUL
1012 mtspr SPRN_L1CSR1, r11
1021 create_init_ram_area:
1022 lis r6,FSL_BOOKE_MAS0(1, 15, 0)@h
1023 ori r6,r6,FSL_BOOKE_MAS0(1, 15, 0)@l
1026 /* create a temp mapping in AS=1 to the 4M boot window */
1027 create_tlb1_entry 15, \
1028 1, BOOKE_PAGESZ_4M, \
1029 CONFIG_VAL(SYS_MONITOR_BASE) & 0xffc00000, MAS2_I|MAS2_G, \
1030 0xffc00000, MAS3_SX|MAS3_SW|MAS3_SR, \
1033 #elif !defined(CONFIG_SYS_RAMBOOT) && defined(CONFIG_NXP_ESBC)
1034 /* create a temp mapping in AS = 1 for Flash mapping
1035 * created by PBL for ISBC code
1037 create_tlb1_entry 15, \
1038 1, BOOKE_PAGESZ_1M, \
1039 CONFIG_VAL(SYS_MONITOR_BASE) & 0xfff00000, MAS2_I|MAS2_G, \
1040 CONFIG_SYS_PBI_FLASH_WINDOW & 0xfff00000, MAS3_SX|MAS3_SW|MAS3_SR, \
1044 * For Targets without CONFIG_SPL like P3, P5
1045 * and for targets with CONFIG_SPL like T1, T2, T4, only for
1046 * u-boot-spl i.e. CONFIG_SPL_BUILD
1048 #elif defined(CONFIG_RAMBOOT_PBL) && defined(CONFIG_NXP_ESBC) && \
1049 (!defined(CONFIG_SPL) || defined(CONFIG_SPL_BUILD))
1050 /* create a temp mapping in AS = 1 for mapping CONFIG_VAL(SYS_MONITOR_BASE)
1051 * to L3 Address configured by PBL for ISBC code
1053 create_tlb1_entry 15, \
1054 1, BOOKE_PAGESZ_1M, \
1055 CONFIG_VAL(SYS_MONITOR_BASE) & 0xfff00000, MAS2_I|MAS2_G, \
1056 CONFIG_SYS_INIT_L3_ADDR & 0xfff00000, MAS3_SX|MAS3_SW|MAS3_SR, \
1061 * create a temp mapping in AS=1 to the 1M CONFIG_VAL(SYS_MONITOR_BASE) space, the main
1062 * image has been relocated to CONFIG_VAL(SYS_MONITOR_BASE) on the second stage.
1064 create_tlb1_entry 15, \
1065 1, BOOKE_PAGESZ_1M, \
1066 CONFIG_VAL(SYS_MONITOR_BASE) & 0xfff00000, MAS2_I|MAS2_G, \
1067 CONFIG_VAL(SYS_MONITOR_BASE) & 0xfff00000, MAS3_SX|MAS3_SW|MAS3_SR, \
1071 /* create a temp mapping in AS=1 to the stack */
1072 #if defined(CONFIG_SYS_INIT_RAM_ADDR_PHYS_LOW) && \
1073 defined(CONFIG_SYS_INIT_RAM_ADDR_PHYS_HIGH)
1074 create_tlb1_entry 14, \
1075 1, BOOKE_PAGESZ_16K, \
1076 CONFIG_SYS_INIT_RAM_ADDR, 0, \
1077 CONFIG_SYS_INIT_RAM_ADDR_PHYS_LOW, MAS3_SX|MAS3_SW|MAS3_SR, \
1078 CONFIG_SYS_INIT_RAM_ADDR_PHYS_HIGH, r6
1081 create_tlb1_entry 14, \
1082 1, BOOKE_PAGESZ_16K, \
1083 CONFIG_SYS_INIT_RAM_ADDR, 0, \
1084 CONFIG_SYS_INIT_RAM_ADDR, MAS3_SX|MAS3_SW|MAS3_SR, \
1088 lis r6,MSR_IS|MSR_DS|MSR_DE@h
1089 ori r6,r6,MSR_IS|MSR_DS|MSR_DE@l
1091 ori r7,r7,switch_as@l
1098 /* L1 DCache is used for initial RAM */
1100 /* Allocate Initial RAM in data cache.
1102 lis r3,CONFIG_SYS_INIT_RAM_ADDR@h
1103 ori r3,r3,CONFIG_SYS_INIT_RAM_ADDR@l
1106 /* cache size * 1024 / (2 * L1 line size) */
1107 slwi r2, r2, (10 - 1 - L1_CACHE_SHIFT)
1112 #ifdef CONFIG_E6500 /* Lock/unlock L2 cache long with L1 */
1118 addi r3,r3,CONFIG_SYS_CACHELINE_SIZE
1121 /* Jump out the last 4K page and continue to 'normal' start */
1122 #if defined(CONFIG_SYS_RAMBOOT) || defined(CONFIG_SPL)
1123 /* We assume that we're already running at the address we're linked at */
1126 /* Calculate absolute address in FLASH and jump there */
1127 /*--------------------------------------------------------------*/
1128 lis r3,CONFIG_VAL(SYS_MONITOR_BASE)@h
1129 ori r3,r3,CONFIG_VAL(SYS_MONITOR_BASE)@l
1130 addi r3,r3,_start_cont - _start_cont
1138 /* Setup the stack in initial RAM,could be L2-as-SRAM or L1 dcache*/
1139 lis r3,(CONFIG_SYS_INIT_RAM_ADDR)@h
1140 ori r3,r3,((CONFIG_SYS_INIT_SP_OFFSET-16)&~0xf)@l /* Align to 16 */
1142 #if CONFIG_VAL(SYS_MALLOC_F_LEN)
1143 #if CONFIG_VAL(SYS_MALLOC_F_LEN) + GENERATED_GBL_DATA_SIZE > CONFIG_SYS_INIT_RAM_SIZE
1144 #error "SYS_MALLOC_F_LEN too large to fit into initial RAM."
1147 /* Leave 16+ byte for back chain termination and NULL return address */
1148 subi r3,r3,((CONFIG_VAL(SYS_MALLOC_F_LEN)+16+15)&~0xf)
1152 lis r4,(CONFIG_SYS_INIT_RAM_ADDR)@h
1153 ori r4,r4,(CONFIG_SYS_INIT_RAM_SIZE)@l
1162 #if CONFIG_VAL(SYS_MALLOC_F_LEN)
1163 lis r4,CONFIG_SYS_INIT_SP_ADDR@h
1164 ori r4,r4,CONFIG_SYS_INIT_SP_ADDR@l
1166 addi r3,r3,16 /* Pre-relocation malloc area */
1167 stw r3,GD_MALLOC_BASE(r4)
1171 stw r0,0(r3) /* Terminate Back Chain */
1172 stw r0,+4(r3) /* NULL return address. */
1173 mr r1,r3 /* Transfer to SP(r1) */
1176 /* Needed for -msingle-pic-base */
1177 bl _GLOBAL_OFFSET_TABLE_@local-4
1180 /* Pass our potential ePAPR device tree pointer to cpu_init_early_f */
1185 /* switch back to AS = 0 */
1186 lis r3,(MSR_CE|MSR_ME|MSR_DE)@h
1187 ori r3,r3,(MSR_CE|MSR_ME|MSR_DE)@l
1191 bl cpu_init_f /* return boot_flag for calling board_init_f */
1195 /* NOTREACHED - board_init_f() does not return */
1198 .globl _start_of_vectors
1201 /* Critical input. */
1202 CRIT_EXCEPTION(0x0100, CriticalInput, CritcalInputException)
1205 MCK_EXCEPTION(0x200, MachineCheck, MachineCheckException)
1207 /* Data Storage exception. */
1208 STD_EXCEPTION(0x0300, DataStorage, UnknownException)
1210 /* Instruction Storage exception. */
1211 STD_EXCEPTION(0x0400, InstStorage, UnknownException)
1213 /* External Interrupt exception. */
1214 STD_EXCEPTION(0x0500, ExtInterrupt, ExtIntException)
1216 /* Alignment exception. */
1218 EXCEPTION_PROLOG(SRR0, SRR1)
1223 addi r3,r1,STACK_FRAME_OVERHEAD
1224 EXC_XFER_TEMPLATE(0x600, Alignment, AlignmentException,
1225 MSR_KERNEL, COPY_EE)
1227 /* Program check exception */
1229 EXCEPTION_PROLOG(SRR0, SRR1)
1230 addi r3,r1,STACK_FRAME_OVERHEAD
1231 EXC_XFER_TEMPLATE(0x700, ProgramCheck, ProgramCheckException,
1232 MSR_KERNEL, COPY_EE)
1234 /* No FPU on MPC85xx. This exception is not supposed to happen.
1236 STD_EXCEPTION(0x0800, FPUnavailable, UnknownException)
1237 STD_EXCEPTION(0x0900, SystemCall, UnknownException)
1238 STD_EXCEPTION(0x0a00, Decrementer, timer_interrupt)
1239 STD_EXCEPTION(0x0b00, IntervalTimer, UnknownException)
1240 STD_EXCEPTION(0x0c00, WatchdogTimer, UnknownException)
1242 STD_EXCEPTION(0x0d00, DataTLBError, UnknownException)
1243 STD_EXCEPTION(0x0e00, InstructionTLBError, UnknownException)
1245 CRIT_EXCEPTION(0x0f00, DebugBreakpoint, DebugException )
1247 .globl _end_of_vectors
1251 . = . + (0x100 - ( . & 0xff )) /* align for debug */
1254 * This code finishes saving the registers to the exception frame
1255 * and jumps to the appropriate handler for the exception.
1256 * Register r21 is pointer into trap frame, r1 has new stack pointer.
1257 * r23 is the address of the handler.
1259 .globl transfer_to_handler
1260 transfer_to_handler:
1268 mtspr SPRG2,r22 /* r1 is now kernel sp */
1270 mtctr r23 /* virtual address of handler */
1275 mfmsr r28 /* Disable interrupts */
1279 SYNC /* Some chip revs need this... */
1294 lwz r2,_NIP(r1) /* Restore environment */
1308 .globl invalidate_icache
1311 ori r0,r0,L1CSR1_ICFI
1316 blr /* entire I cache */
1318 .globl invalidate_dcache
1321 ori r0,r0,L1CSR0_DCFI
1328 .globl icache_enable
1331 bl invalidate_icache
1335 ori r4,r4,(L1CSR1_CPE | L1CSR1_ICE)@l
1336 oris r4,r4,(L1CSR1_CPE | L1CSR1_ICE)@h
1341 .globl icache_disable
1345 ori r3,r3,L1CSR1_ICE
1351 .globl icache_status
1354 andi. r3,r3,L1CSR1_ICE
1357 .globl dcache_enable
1360 bl invalidate_dcache
1364 ori r0,r0,(L1CSR0_CPE | L1CSR0_DCE)@l
1365 oris r0,r0,(L1CSR0_CPE | L1CSR0_DCE)@h
1372 .globl dcache_disable
1376 ori r4,r4,L1CSR0_DCE
1382 .globl dcache_status
1385 andi. r3,r3,L1CSR0_DCE
1388 /*------------------------------------------------------------------------------- */
1390 /* Description: Input 8 bits */
1391 /*------------------------------------------------------------------------------- */
1397 /*------------------------------------------------------------------------------- */
1398 /* Function: out8 */
1399 /* Description: Output 8 bits */
1400 /*------------------------------------------------------------------------------- */
1407 /*------------------------------------------------------------------------------- */
1408 /* Function: out16 */
1409 /* Description: Output 16 bits */
1410 /*------------------------------------------------------------------------------- */
1417 /*------------------------------------------------------------------------------- */
1418 /* Function: out16r */
1419 /* Description: Byte reverse and output 16 bits */
1420 /*------------------------------------------------------------------------------- */
1427 /*------------------------------------------------------------------------------- */
1428 /* Function: out32 */
1429 /* Description: Output 32 bits */
1430 /*------------------------------------------------------------------------------- */
1437 /*------------------------------------------------------------------------------- */
1438 /* Function: out32r */
1439 /* Description: Byte reverse and output 32 bits */
1440 /*------------------------------------------------------------------------------- */
1447 /*------------------------------------------------------------------------------- */
1448 /* Function: in16 */
1449 /* Description: Input 16 bits */
1450 /*------------------------------------------------------------------------------- */
1456 /*------------------------------------------------------------------------------- */
1457 /* Function: in16r */
1458 /* Description: Input 16 bits and byte reverse */
1459 /*------------------------------------------------------------------------------- */
1465 /*------------------------------------------------------------------------------- */
1466 /* Function: in32 */
1467 /* Description: Input 32 bits */
1468 /*------------------------------------------------------------------------------- */
1474 /*------------------------------------------------------------------------------- */
1475 /* Function: in32r */
1476 /* Description: Input 32 bits and byte reverse */
1477 /*------------------------------------------------------------------------------- */
1482 #endif /* !MINIMAL_SPL */
1484 /*------------------------------------------------------------------------------*/
1487 * void write_tlb(mas0, mas1, mas2, mas3, mas7)
1495 #ifdef CONFIG_ENABLE_36BIT_PHYS
1499 #ifdef CONFIG_SYS_BOOK3E_HV
1509 * void relocate_code(addr_sp, gd, addr_moni)
1511 * This "function" does not return, instead it continues in RAM
1512 * after relocating the monitor code.
1516 * r5 = length in bytes
1517 * r6 = cachelinesize
1519 .globl relocate_code
1521 mr r1,r3 /* Set new stack pointer */
1522 mr r9,r4 /* Save copy of Init Data pointer */
1523 mr r10,r5 /* Save copy of Destination Address */
1526 #ifndef CONFIG_SPL_SKIP_RELOCATE
1527 mr r3,r5 /* Destination Address */
1528 lis r4,CONFIG_VAL(SYS_MONITOR_BASE)@h /* Source Address */
1529 ori r4,r4,CONFIG_VAL(SYS_MONITOR_BASE)@l
1530 lwz r5,GOT(__init_end)
1532 li r6,CONFIG_SYS_CACHELINE_SIZE /* Cache Line Size */
1537 * New GOT-PTR = (old GOT-PTR - CONFIG_VAL(SYS_MONITOR_BASE)) + Destination Address
1543 /* First our own GOT */
1545 /* the the one used by the C code */
1555 beq cr1,4f /* In place copy is not necessary */
1556 beq 7f /* Protect against 0 count */
1575 * Now flush the cache: note that we must start from a cache aligned
1576 * address. Otherwise we might miss one cache line.
1580 beq 7f /* Always flush prefetch queue in any case */
1588 sync /* Wait for all dcbst to complete on bus */
1594 7: sync /* Wait for all icbi to complete on bus */
1598 * We are done. Do not return, instead branch to second part of board
1599 * initialization, now running from RAM.
1602 addi r0,r10,in_ram - _start_cont
1605 * As IVPR is going to point RAM address,
1606 * Make sure IVOR15 has valid opcode to support debugger
1611 * Re-point the IVPR at RAM
1616 blr /* NEVER RETURNS! */
1622 * Relocation Function, r12 point to got2+0x8000
1624 * Adjust got2 pointers, no need to check for 0, this code
1625 * already puts a few entries in the table.
1627 li r0,__got2_entries@sectoff@l
1628 la r3,GOT(_GOT2_TABLE_)
1629 lwz r11,GOT(_GOT2_TABLE_)
1641 * Now adjust the fixups and the pointers to the fixups
1642 * in case we need to move ourselves again.
1644 li r0,__fixup_entries@sectoff@l
1645 lwz r3,GOT(_FIXUP_TABLE_)
1661 * Now clear BSS segment
1663 lwz r3,GOT(__bss_start)
1664 lwz r4,GOT(__bss_end)
1677 mr r3,r9 /* Init Data pointer */
1678 mr r4,r10 /* Destination Address */
1683 * Copy exception vector code to low memory
1686 * r7: source address, r8: end address, r9: target address
1691 bl _GLOBAL_OFFSET_TABLE_-4
1694 /* Update IVORs as per relocation */
1697 lwz r4,CriticalInput@got(r12)
1698 mtspr IVOR0,r4 /* 0: Critical input */
1699 lwz r4,MachineCheck@got(r12)
1700 mtspr IVOR1,r4 /* 1: Machine check */
1701 lwz r4,DataStorage@got(r12)
1702 mtspr IVOR2,r4 /* 2: Data storage */
1703 lwz r4,InstStorage@got(r12)
1704 mtspr IVOR3,r4 /* 3: Instruction storage */
1705 lwz r4,ExtInterrupt@got(r12)
1706 mtspr IVOR4,r4 /* 4: External interrupt */
1707 lwz r4,Alignment@got(r12)
1708 mtspr IVOR5,r4 /* 5: Alignment */
1709 lwz r4,ProgramCheck@got(r12)
1710 mtspr IVOR6,r4 /* 6: Program check */
1711 lwz r4,FPUnavailable@got(r12)
1712 mtspr IVOR7,r4 /* 7: floating point unavailable */
1713 lwz r4,SystemCall@got(r12)
1714 mtspr IVOR8,r4 /* 8: System call */
1715 /* 9: Auxiliary processor unavailable(unsupported) */
1716 lwz r4,Decrementer@got(r12)
1717 mtspr IVOR10,r4 /* 10: Decrementer */
1718 lwz r4,IntervalTimer@got(r12)
1719 mtspr IVOR11,r4 /* 11: Interval timer */
1720 lwz r4,WatchdogTimer@got(r12)
1721 mtspr IVOR12,r4 /* 12: Watchdog timer */
1722 lwz r4,DataTLBError@got(r12)
1723 mtspr IVOR13,r4 /* 13: Data TLB error */
1724 lwz r4,InstructionTLBError@got(r12)
1725 mtspr IVOR14,r4 /* 14: Instruction TLB error */
1726 lwz r4,DebugBreakpoint@got(r12)
1727 mtspr IVOR15,r4 /* 15: Debug */
1732 .globl unlock_ram_in_cache
1733 unlock_ram_in_cache:
1734 /* invalidate the INIT_RAM section */
1735 lis r3,(CONFIG_SYS_INIT_RAM_ADDR & ~(CONFIG_SYS_CACHELINE_SIZE-1))@h
1736 ori r3,r3,(CONFIG_SYS_INIT_RAM_ADDR & ~(CONFIG_SYS_CACHELINE_SIZE-1))@l
1739 slwi r4,r4,(10 - 1 - L1_CACHE_SHIFT)
1742 #ifdef CONFIG_E6500 /* lock/unlock L2 cache long with L1 */
1748 addi r3,r3,CONFIG_SYS_CACHELINE_SIZE
1752 /* Invalidate the TLB entries for the cache */
1753 lis r3,CONFIG_SYS_INIT_RAM_ADDR@h
1754 ori r3,r3,CONFIG_SYS_INIT_RAM_ADDR@l
1767 mfspr r3,SPRN_L1CFG0
1769 rlwinm r5,r3,9,3 /* Extract cache block size */
1770 twlgti r5,1 /* Only 32 and 64 byte cache blocks
1771 * are currently defined.
1774 subfic r6,r5,2 /* r6 = log2(1KiB / cache block size) -
1775 * log2(number of ways)
1777 slw r5,r4,r5 /* r5 = cache block size */
1779 rlwinm r7,r3,0,0xff /* Extract number of KiB in the cache */
1780 mulli r7,r7,13 /* An 8-way cache will require 13
1785 /* save off HID0 and set DCFA */
1787 ori r9,r8,HID0_DCFA@l
1794 1: lwz r3,0(r4) /* Load... */
1802 1: dcbf 0,r4 /* ...and flush. */
1811 #endif /* !MINIMAL_SPL */