1 /* SPDX-License-Identifier: GPL-2.0+ */
3 * Copyright 2004, 2007-2012 Freescale Semiconductor, Inc.
4 * Copyright (C) 2003 Motorola,Inc.
7 /* U-Boot Startup Code for Motorola 85xx PowerPC based Embedded Boards
9 * The processor starts at 0xfffffffc and the code is first executed in the
10 * last 4K page(0xfffff000-0xffffffff) in flash/rom.
14 #include <asm-offsets.h>
18 #include <ppc_asm.tmpl>
21 #include <asm/cache.h>
25 #define MSR_KERNEL ( MSR_ME ) /* Machine Check */
27 #define LAW_EN 0x80000000
29 #if defined(CONFIG_NAND_SPL) || \
30 (defined(CONFIG_SPL_BUILD) && defined(CONFIG_SPL_INIT_MINIMAL))
34 #if !defined(CONFIG_SPL) && !defined(CONFIG_SYS_RAMBOOT) && \
35 !defined(CONFIG_NXP_ESBC) && !defined(CONFIG_SRIO_PCIE_BOOT_SLAVE)
40 * Set up GOT: Global Offset Table
42 * Use r12 to access the GOT
45 GOT_ENTRY(_GOT2_TABLE_)
46 GOT_ENTRY(_FIXUP_TABLE_)
50 GOT_ENTRY(_start_of_vectors)
51 GOT_ENTRY(_end_of_vectors)
52 GOT_ENTRY(transfer_to_handler)
57 GOT_ENTRY(__bss_start)
61 * e500 Startup -- after reset only the last 4KB of the effective
62 * address space is mapped in the MMU L2 TLB1 Entry0. The .bootpg
63 * section is located at THIS LAST page and basically does three
64 * things: clear some registers, set up exception tables and
65 * add more TLB entries for 'larger spaces'(e.g. the boot rom) to
66 * continue the boot procedure.
68 * Once the boot rom is mapped by TLB entries we can proceed
69 * with normal startup.
77 /* Enable debug exception */
82 * If we got an ePAPR device tree pointer passed in as r3, we need that
83 * later in cpu_init_early_f(). Save it to a safe register before we
84 * clobber it so that we can fetch it from there later.
88 #ifdef CONFIG_SYS_FSL_ERRATUM_A004510
91 li r4,CONFIG_SYS_FSL_ERRATUM_A004510_SVR_REV
95 #ifdef CONFIG_SYS_FSL_ERRATUM_A004510_SVR_REV2
96 li r4,CONFIG_SYS_FSL_ERRATUM_A004510_SVR_REV2
101 /* Not a supported revision affected by erratum */
105 1: li r27,1 /* Remember for later that we have the erratum */
106 /* Erratum says set bits 55:60 to 001001 */
116 #ifdef CONFIG_SYS_FSL_ERRATUM_A005125
119 mfspr r3, SPRN_HDBCR0
121 mtspr SPRN_HDBCR0, r3
125 #if defined(CONFIG_NXP_ESBC) && defined(CONFIG_E500MC) && \
126 !defined(CONFIG_E6500)
127 /* ISBC uses L2 as stack.
128 * Disable L2 cache here so that u-boot can enable it later
129 * as part of it's normal flow
132 /* Check if L2 is enabled */
133 mfspr r3, SPRN_L2CSR0
135 ori r2, r2, L2CSR0_L2E@l
139 mfspr r3, SPRN_L2CSR0
141 lis r2,(L2CSR0_L2FL)@h
142 ori r2, r2, (L2CSR0_L2FL)@l
149 mfspr r3, SPRN_L2CSR0
153 mfspr r3, SPRN_L2CSR0
155 ori r2, r2, L2CSR0_L2E@l
165 /* clear registers/arrays not reset by hardware */
169 mtspr L1CSR0,r0 /* invalidate d-cache */
170 mtspr L1CSR1,r0 /* invalidate i-cache */
173 mtspr DBSR,r1 /* Clear all valid bits */
176 .macro create_tlb1_entry esel ts tsize epn wimg rpn perm phy_high scratch
177 lis \scratch, FSL_BOOKE_MAS0(1, \esel, 0)@h
178 ori \scratch, \scratch, FSL_BOOKE_MAS0(1, \esel, 0)@l
180 lis \scratch, FSL_BOOKE_MAS1(1, 1, 0, \ts, \tsize)@h
181 ori \scratch, \scratch, FSL_BOOKE_MAS1(1, 1, 0, \ts, \tsize)@l
183 lis \scratch, FSL_BOOKE_MAS2(\epn, \wimg)@h
184 ori \scratch, \scratch, FSL_BOOKE_MAS2(\epn, \wimg)@l
186 lis \scratch, FSL_BOOKE_MAS3(\rpn, 0, \perm)@h
187 ori \scratch, \scratch, FSL_BOOKE_MAS3(\rpn, 0, \perm)@l
189 lis \scratch, \phy_high@h
190 ori \scratch, \scratch, \phy_high@l
198 .macro create_tlb0_entry esel ts tsize epn wimg rpn perm phy_high scratch
199 lis \scratch, FSL_BOOKE_MAS0(0, \esel, 0)@h
200 ori \scratch, \scratch, FSL_BOOKE_MAS0(0, \esel, 0)@l
202 lis \scratch, FSL_BOOKE_MAS1(1, 0, 0, \ts, \tsize)@h
203 ori \scratch, \scratch, FSL_BOOKE_MAS1(1, 0, 0, \ts, \tsize)@l
205 lis \scratch, FSL_BOOKE_MAS2(\epn, \wimg)@h
206 ori \scratch, \scratch, FSL_BOOKE_MAS2(\epn, \wimg)@l
208 lis \scratch, FSL_BOOKE_MAS3(\rpn, 0, \perm)@h
209 ori \scratch, \scratch, FSL_BOOKE_MAS3(\rpn, 0, \perm)@l
211 lis \scratch, \phy_high@h
212 ori \scratch, \scratch, \phy_high@l
220 .macro delete_tlb1_entry esel scratch
221 lis \scratch, FSL_BOOKE_MAS0(1, \esel, 0)@h
222 ori \scratch, \scratch, FSL_BOOKE_MAS0(1, \esel, 0)@l
232 .macro delete_tlb0_entry esel epn wimg scratch
233 lis \scratch, FSL_BOOKE_MAS0(0, \esel, 0)@h
234 ori \scratch, \scratch, FSL_BOOKE_MAS0(0, \esel, 0)@l
238 lis \scratch, FSL_BOOKE_MAS2(\epn, \wimg)@h
239 ori \scratch, \scratch, FSL_BOOKE_MAS2(\epn, \wimg)@l
247 /* Interrupt vectors do not fit in minimal SPL. */
248 #if !defined(MINIMAL_SPL)
249 /* Setup interrupt vectors */
250 lis r1,CONFIG_SYS_MONITOR_BASE@h
253 li r4,CriticalInput@l
254 mtspr IVOR0,r4 /* 0: Critical input */
256 mtspr IVOR1,r4 /* 1: Machine check */
258 mtspr IVOR2,r4 /* 2: Data storage */
260 mtspr IVOR3,r4 /* 3: Instruction storage */
262 mtspr IVOR4,r4 /* 4: External interrupt */
264 mtspr IVOR5,r4 /* 5: Alignment */
266 mtspr IVOR6,r4 /* 6: Program check */
267 li r4,FPUnavailable@l
268 mtspr IVOR7,r4 /* 7: floating point unavailable */
270 mtspr IVOR8,r4 /* 8: System call */
271 /* 9: Auxiliary processor unavailable(unsupported) */
273 mtspr IVOR10,r4 /* 10: Decrementer */
274 li r4,IntervalTimer@l
275 mtspr IVOR11,r4 /* 11: Interval timer */
276 li r4,WatchdogTimer@l
277 mtspr IVOR12,r4 /* 12: Watchdog timer */
279 mtspr IVOR13,r4 /* 13: Data TLB error */
280 li r4,InstructionTLBError@l
281 mtspr IVOR14,r4 /* 14: Instruction TLB error */
282 li r4,DebugBreakpoint@l
283 mtspr IVOR15,r4 /* 15: Debug */
286 /* Clear and set up some registers. */
289 mtspr DEC,r0 /* prevent dec exceptions */
290 mttbl r0 /* prevent fit & wdt exceptions */
292 mtspr TSR,r1 /* clear all timer exception status */
293 mtspr TCR,r0 /* disable all */
294 mtspr ESR,r0 /* clear exception syndrome register */
295 mtspr MCSR,r0 /* machine check syndrome register */
296 mtxer r0 /* clear integer exception register */
298 #ifdef CONFIG_SYS_BOOK3E_HV
299 mtspr MAS8,r0 /* make sure MAS8 is clear */
302 /* Enable Time Base and Select Time Base Clock */
303 lis r0,HID0_EMCP@h /* Enable machine check */
304 #if defined(CONFIG_ENABLE_36BIT_PHYS)
305 ori r0,r0,HID0_ENMAS7@l /* Enable MAS7 */
307 #ifndef CONFIG_E500MC
308 ori r0,r0,HID0_TBEN@l /* Enable Timebase */
312 #if !defined(CONFIG_E500MC) && !defined(CONFIG_ARCH_QEMU_E500)
313 li r0,(HID1_ASTME|HID1_ABE)@l /* Addr streaming & broadcast */
316 cmpwi r3,0x50@l /* if we are rev 5.0 or greater set MBDD */
318 /* Set MBDD bit also */
319 ori r0, r0, HID1_MBDD@l
324 #ifdef CONFIG_SYS_FSL_ERRATUM_CPU_A003999
330 /* Enable Branch Prediction */
331 #if defined(CONFIG_BTB)
332 lis r0,BUCSR_ENABLE@h
333 ori r0,r0,BUCSR_ENABLE@l
337 #if defined(CONFIG_SYS_INIT_DBCR)
340 mtspr DBSR,r1 /* Clear all status bits */
341 lis r0,CONFIG_SYS_INIT_DBCR@h /* DBCR0[IDM] must be set */
342 ori r0,r0,CONFIG_SYS_INIT_DBCR@l
347 * Search for the TLB that covers the code we're executing, and shrink it
348 * so that it covers only this 4K page. That will ensure that any other
349 * TLB we create won't interfere with it. We assume that the TLB exists,
350 * which is why we don't check the Valid bit of MAS1. We also assume
353 * This is necessary, for example, when booting from the on-chip ROM,
354 * which (oddly) creates a single 4GB TLB that covers CCSR and DDR.
356 bl nexti /* Find our address */
357 nexti: mflr r1 /* R1 = our PC */
359 mtspr MAS6, r2 /* Assume the current PID and AS are 0 */
362 tlbsx 0, r1 /* This must succeed */
364 mfspr r14, MAS0 /* Save ESEL for later */
365 rlwinm r14, r14, 16, 0xfff
367 /* Set the size of the TLB to 4KB */
370 andc r3, r3, r2 /* Clear the TSIZE bits */
371 ori r3, r3, MAS1_TSIZE(BOOKE_PAGESZ_4K)@l
372 oris r3, r3, MAS1_IPROT@h
376 * Set the base address of the TLB to our PC. We assume that
377 * virtual == physical. We also assume that MAS2_EPN == MAS3_RPN.
380 ori r3, r3, MAS2_EPN@l /* R3 = MAS2_EPN */
382 and r1, r1, r3 /* Our PC, rounded down to the nearest page */
387 #ifdef CONFIG_SYS_FSL_ERRATUM_A004510
390 andi. r15, r2, MAS2_I|MAS2_G /* save the old I/G for later */
391 rlwinm r2, r2, 0, ~MAS2_I
395 mtspr MAS2, r2 /* Set the EPN to our PC base address */
400 mtspr MAS3, r2 /* Set the RPN to our PC base address */
407 * Clear out any other TLB entries that may exist, to avoid conflicts.
408 * Our TLB entry is in r14.
410 li r0, TLBIVAX_ALL | TLBIVAX_TLB0
414 mfspr r4, SPRN_TLB1CFG
415 rlwinm r4, r4, 0, TLBnCFG_NENTRY_MASK
420 rlwinm r5, r3, 16, MAS0_ESEL_MSK
422 beq 2f /* skip the entry we're executing from */
424 oris r5, r5, MAS0_TLBSEL(1)@h
435 #if defined(CONFIG_SYS_PPC_E500_DEBUG_TLB) && !defined(MINIMAL_SPL) && \
436 !defined(CONFIG_NXP_ESBC)
438 * TLB entry for debuggging in AS1
439 * Create temporary TLB entry in AS0 to handle debug exception
440 * As on debug exception MSR is cleared i.e. Address space is changed
441 * to 0. A TLB entry (in AS0) is required to handle debug exception generated
447 * TLB entry is created for IVPR + IVOR15 to map on valid OP code address
448 * bacause flash's virtual address maps to 0xff800000 - 0xffffffff.
449 * and this window is outside of 4K boot window.
451 create_tlb1_entry CONFIG_SYS_PPC_E500_DEBUG_TLB, \
452 0, BOOKE_PAGESZ_4M, \
453 CONFIG_SYS_MONITOR_BASE & 0xffc00000, MAS2_I|MAS2_G, \
454 0xffc00000, MAS3_SX|MAS3_SW|MAS3_SR, \
459 * TLB entry is created for IVPR + IVOR15 to map on valid OP code address
460 * because "nexti" will resize TLB to 4K
462 create_tlb1_entry CONFIG_SYS_PPC_E500_DEBUG_TLB, \
463 0, BOOKE_PAGESZ_256K, \
464 CONFIG_SYS_MONITOR_BASE & 0xfffc0000, MAS2_I, \
465 CONFIG_SYS_MONITOR_BASE & 0xfffc0000, MAS3_SX|MAS3_SW|MAS3_SR, \
471 * Relocate CCSR, if necessary. We relocate CCSR if (obviously) the default
472 * location is not where we want it. This typically happens on a 36-bit
473 * system, where we want to move CCSR to near the top of 36-bit address space.
475 * To move CCSR, we create two temporary TLBs, one for the old location, and
476 * another for the new location. On CoreNet systems, we also need to create
477 * a special, temporary LAW.
479 * As a general rule, TLB0 is used for short-term TLBs, and TLB1 is used for
480 * long-term TLBs, so we use TLB0 here.
482 #if (CONFIG_SYS_CCSRBAR_DEFAULT != CONFIG_SYS_CCSRBAR_PHYS)
484 #if !defined(CONFIG_SYS_CCSRBAR_PHYS_HIGH) || !defined(CONFIG_SYS_CCSRBAR_PHYS_LOW)
485 #error "CONFIG_SYS_CCSRBAR_PHYS_HIGH and CONFIG_SYS_CCSRBAR_PHYS_LOW) must be defined."
490 * Create a TLB for the new location of CCSR. Register R8 is reserved
491 * for the virtual address of this TLB (CONFIG_SYS_CCSRBAR).
493 lis r8, CONFIG_SYS_CCSRBAR@h
494 ori r8, r8, CONFIG_SYS_CCSRBAR@l
495 lis r9, (CONFIG_SYS_CCSRBAR + 0x1000)@h
496 ori r9, r9, (CONFIG_SYS_CCSRBAR + 0x1000)@l
497 create_tlb0_entry 0, \
498 0, BOOKE_PAGESZ_4K, \
499 CONFIG_SYS_CCSRBAR, MAS2_I|MAS2_G, \
500 CONFIG_SYS_CCSRBAR_PHYS_LOW, MAS3_SW|MAS3_SR, \
501 CONFIG_SYS_CCSRBAR_PHYS_HIGH, r3
503 * Create a TLB for the current location of CCSR. Register R9 is reserved
504 * for the virtual address of this TLB (CONFIG_SYS_CCSRBAR + 0x1000).
507 create_tlb0_entry 1, \
508 0, BOOKE_PAGESZ_4K, \
509 CONFIG_SYS_CCSRBAR + 0x1000, MAS2_I|MAS2_G, \
510 CONFIG_SYS_CCSRBAR_DEFAULT, MAS3_SW|MAS3_SR, \
511 0, r3 /* The default CCSR address is always a 32-bit number */
515 * We have a TLB for what we think is the current (old) CCSR. Let's
516 * verify that, otherwise we won't be able to move it.
517 * CONFIG_SYS_CCSRBAR_DEFAULT is always a 32-bit number, so we only
518 * need to compare the lower 32 bits of CCSRBAR on CoreNet systems.
521 lis r0, CONFIG_SYS_CCSRBAR_DEFAULT@h
522 ori r0, r0, CONFIG_SYS_CCSRBAR_DEFAULT@l
523 #ifdef CONFIG_FSL_CORENET
524 lwz r1, 4(r9) /* CCSRBARL */
526 lwz r1, 0(r9) /* CCSRBAR, shifted right by 12 */
533 * If the value we read from CCSRBARL is not what we expect, then
534 * enter an infinite loop. This will at least allow a debugger to
535 * halt execution and examine TLBs, etc. There's no point in going
539 bne infinite_debug_loop
541 #ifdef CONFIG_FSL_CORENET
543 #define CCSR_LAWBARH0 (CONFIG_SYS_CCSRBAR + 0x1000)
544 #define LAW_SIZE_4K 0xb
545 #define CCSRBAR_LAWAR (LAW_EN | (0x1e << 20) | LAW_SIZE_4K)
546 #define CCSRAR_C 0x80000000 /* Commit */
550 * On CoreNet systems, we create the temporary LAW using a special LAW
551 * target ID of 0x1e. LAWBARH is at offset 0xc00 in CCSR.
553 lis r0, CONFIG_SYS_CCSRBAR_PHYS_HIGH@h
554 ori r0, r0, CONFIG_SYS_CCSRBAR_PHYS_HIGH@l
555 lis r1, CONFIG_SYS_CCSRBAR_PHYS_LOW@h
556 ori r1, r1, CONFIG_SYS_CCSRBAR_PHYS_LOW@l
557 lis r2, CCSRBAR_LAWAR@h
558 ori r2, r2, CCSRBAR_LAWAR@l
560 stw r0, 0xc00(r9) /* LAWBARH0 */
561 stw r1, 0xc04(r9) /* LAWBARL0 */
563 stw r2, 0xc08(r9) /* LAWAR0 */
566 * Read back from LAWAR to ensure the update is complete. e500mc
567 * cores also require an isync.
569 lwz r0, 0xc08(r9) /* LAWAR0 */
573 * Read the current CCSRBARH and CCSRBARL using load word instructions.
574 * Follow this with an isync instruction. This forces any outstanding
575 * accesses to configuration space to completion.
578 lwz r0, 0(r9) /* CCSRBARH */
579 lwz r0, 4(r9) /* CCSRBARL */
583 * Write the new values for CCSRBARH and CCSRBARL to their old
584 * locations. The CCSRBARH has a shadow register. When the CCSRBARH
585 * has a new value written it loads a CCSRBARH shadow register. When
586 * the CCSRBARL is written, the CCSRBARH shadow register contents
587 * along with the CCSRBARL value are loaded into the CCSRBARH and
588 * CCSRBARL registers, respectively. Follow this with a sync
592 lis r0, CONFIG_SYS_CCSRBAR_PHYS_HIGH@h
593 ori r0, r0, CONFIG_SYS_CCSRBAR_PHYS_HIGH@l
594 lis r1, CONFIG_SYS_CCSRBAR_PHYS_LOW@h
595 ori r1, r1, CONFIG_SYS_CCSRBAR_PHYS_LOW@l
597 ori r2, r2, CCSRAR_C@l
599 stw r0, 0(r9) /* Write to CCSRBARH */
600 sync /* Make sure we write to CCSRBARH first */
601 stw r1, 4(r9) /* Write to CCSRBARL */
605 * Write a 1 to the commit bit (C) of CCSRAR at the old location.
606 * Follow this with a sync instruction.
611 /* Delete the temporary LAW */
620 #else /* #ifdef CONFIG_FSL_CORENET */
624 * Read the current value of CCSRBAR using a load word instruction
625 * followed by an isync. This forces all accesses to configuration
632 /* CONFIG_SYS_CCSRBAR_PHYS right shifted by 12 */
633 #define CCSRBAR_PHYS_RS12 ((CONFIG_SYS_CCSRBAR_PHYS_HIGH << 20) | \
634 (CONFIG_SYS_CCSRBAR_PHYS_LOW >> 12))
636 /* Write the new value to CCSRBAR. */
637 lis r0, CCSRBAR_PHYS_RS12@h
638 ori r0, r0, CCSRBAR_PHYS_RS12@l
643 * The manual says to perform a load of an address that does not
644 * access configuration space or the on-chip SRAM using an existing TLB,
645 * but that doesn't appear to be necessary. We will do the isync,
651 * Read the contents of CCSRBAR from its new location, followed by
657 #endif /* #ifdef CONFIG_FSL_CORENET */
659 /* Delete the temporary TLBs */
661 delete_tlb0_entry 0, CONFIG_SYS_CCSRBAR, MAS2_I|MAS2_G, r3
662 delete_tlb0_entry 1, CONFIG_SYS_CCSRBAR + 0x1000, MAS2_I|MAS2_G, r3
664 #endif /* #if (CONFIG_SYS_CCSRBAR_DEFAULT != CONFIG_SYS_CCSRBAR_PHYS) */
666 #if defined(CONFIG_SYS_FSL_QORIQ_CHASSIS2) && defined(CONFIG_E6500)
669 * Create a TLB for the MMR location of CCSR
670 * to access L2CSR0 register
672 create_tlb0_entry 0, \
673 0, BOOKE_PAGESZ_4K, \
674 CONFIG_SYS_CCSRBAR + 0xC20000, MAS2_I|MAS2_G, \
675 CONFIG_SYS_CCSRBAR_PHYS_LOW + 0xC20000, MAS3_SW|MAS3_SR, \
676 CONFIG_SYS_CCSRBAR_PHYS_HIGH, r3
678 enable_l2_cluster_l2:
679 /* enable L2 cache */
680 lis r3, (CONFIG_SYS_CCSRBAR + 0xC20000)@h
681 ori r3, r3, (CONFIG_SYS_CCSRBAR + 0xC20000)@l
682 li r4, 33 /* stash id */
684 lis r4, (L2CSR0_L2FI|L2CSR0_L2LFC)@h
685 ori r4, r4, (L2CSR0_L2FI|L2CSR0_L2LFC)@l
687 stw r4, 0(r3) /* invalidate L2 */
688 /* Poll till the bits are cleared */
696 /* L2PE must be set before L2 cache is enabled */
697 lis r4, (L2CSR0_L2PE)@h
698 ori r4, r4, (L2CSR0_L2PE)@l
700 stw r4, 0(r3) /* enable L2 parity/ECC error checking */
701 /* Poll till the bit is set */
709 lis r4, (L2CSR0_L2E|L2CSR0_L2PE)@h
710 ori r4, r4, (L2CSR0_L2REP_MODE)@l
712 stw r4, 0(r3) /* enable L2 */
713 /* Poll till the bit is set */
722 delete_tlb0_entry 0, CONFIG_SYS_CCSRBAR + 0xC20000, MAS2_I|MAS2_G, r3
726 * Enable the L1. On e6500, this has to be done
727 * after the L2 is up.
730 #ifdef CONFIG_SYS_CACHE_STASHING
731 /* set stash id to (coreID) * 2 + 32 + L1 CT (0) */
736 /* Enable/invalidate the I-Cache */
737 lis r2,(L1CSR1_ICFI|L1CSR1_ICLFR)@h
738 ori r2,r2,(L1CSR1_ICFI|L1CSR1_ICLFR)@l
745 lis r3,(L1CSR1_CPE|L1CSR1_ICE)@h
746 ori r3,r3,(L1CSR1_CPE|L1CSR1_ICE)@l
751 andi. r1,r3,L1CSR1_ICE@l
754 /* Enable/invalidate the D-Cache */
755 lis r2,(L1CSR0_DCFI|L1CSR0_DCLFR)@h
756 ori r2,r2,(L1CSR0_DCFI|L1CSR0_DCLFR)@l
763 lis r3,(L1CSR0_CPE|L1CSR0_DCE)@h
764 ori r3,r3,(L1CSR0_CPE|L1CSR0_DCE)@l
769 andi. r1,r3,L1CSR0_DCE@l
771 #ifdef CONFIG_SYS_FSL_ERRATUM_A004510
772 #define DCSR_LAWBARH0 (CONFIG_SYS_CCSRBAR + 0x1000)
773 #define LAW_SIZE_1M 0x13
774 #define DCSRBAR_LAWAR (LAW_EN | (0x1d << 20) | LAW_SIZE_1M)
780 * Create a TLB entry for CCSR
782 * We're executing out of TLB1 entry in r14, and that's the only
783 * TLB entry that exists. To allocate some TLB entries for our
784 * own use, flip a bit high enough that we won't flip it again
789 lis r0, MAS0_TLBSEL(1)@h
790 rlwimi r0, r8, 16, MAS0_ESEL_MSK
791 lis r1, FSL_BOOKE_MAS1(1, 1, 0, 0, BOOKE_PAGESZ_16M)@h
792 ori r1, r1, FSL_BOOKE_MAS1(1, 1, 0, 0, BOOKE_PAGESZ_16M)@l
793 lis r7, CONFIG_SYS_CCSRBAR@h
794 ori r7, r7, CONFIG_SYS_CCSRBAR@l
795 ori r2, r7, MAS2_I|MAS2_G
796 lis r3, FSL_BOOKE_MAS3(CONFIG_SYS_CCSRBAR_PHYS_LOW, 0, (MAS3_SW|MAS3_SR))@h
797 ori r3, r3, FSL_BOOKE_MAS3(CONFIG_SYS_CCSRBAR_PHYS_LOW, 0, (MAS3_SW|MAS3_SR))@l
798 lis r4, CONFIG_SYS_CCSRBAR_PHYS_HIGH@h
799 ori r4, r4, CONFIG_SYS_CCSRBAR_PHYS_HIGH@l
810 /* Map DCSR temporarily to physical address zero */
812 lis r3, DCSRBAR_LAWAR@h
813 ori r3, r3, DCSRBAR_LAWAR@l
815 stw r0, 0xc00(r7) /* LAWBARH0 */
816 stw r0, 0xc04(r7) /* LAWBARL0 */
818 stw r3, 0xc08(r7) /* LAWAR0 */
820 /* Read back from LAWAR to ensure the update is complete. */
821 lwz r3, 0xc08(r7) /* LAWAR0 */
824 /* Create a TLB entry for DCSR at zero */
827 lis r0, MAS0_TLBSEL(1)@h
828 rlwimi r0, r9, 16, MAS0_ESEL_MSK
829 lis r1, FSL_BOOKE_MAS1(1, 1, 0, 0, BOOKE_PAGESZ_1M)@h
830 ori r1, r1, FSL_BOOKE_MAS1(1, 1, 0, 0, BOOKE_PAGESZ_1M)@l
831 li r6, 0 /* DCSR effective address */
832 ori r2, r6, MAS2_I|MAS2_G
833 li r3, MAS3_SW|MAS3_SR
845 /* enable the timebase */
846 #define CTBENR 0xe2084
848 addis r4, r7, CTBENR@ha
854 .macro erratum_set_ccsr offset value
855 addis r3, r7, \offset@ha
857 addi r3, r3, \offset@l
862 .macro erratum_set_dcsr offset value
863 addis r3, r6, \offset@ha
865 addi r3, r3, \offset@l
870 erratum_set_dcsr 0xb0e08 0xe0201800
871 erratum_set_dcsr 0xb0e18 0xe0201800
872 erratum_set_dcsr 0xb0e38 0xe0400000
873 erratum_set_dcsr 0xb0008 0x00900000
874 erratum_set_dcsr 0xb0e40 0xe00a0000
875 erratum_set_ccsr 0x18600 CONFIG_SYS_FSL_CORENET_SNOOPVEC_COREONLY
876 #ifdef CONFIG_RAMBOOT_PBL
877 erratum_set_ccsr 0x10f00 0x495e5000
879 erratum_set_ccsr 0x10f00 0x415e5000
881 erratum_set_ccsr 0x11f00 0x415e5000
883 /* Make temp mapping uncacheable again, if it was initially */
888 rlwimi r4, r15, 0, MAS2_I
889 rlwimi r4, r15, 0, MAS2_G
896 /* Clear the cache */
897 lis r3,(L1CSR1_ICFI|L1CSR1_ICLFR)@h
898 ori r3,r3,(L1CSR1_ICFI|L1CSR1_ICLFR)@l
908 lis r3,(L1CSR1_CPE|L1CSR1_ICE)@h
909 ori r3,r3,(L1CSR1_CPE|L1CSR1_ICE)@l
919 /* Remove temporary mappings */
920 lis r0, MAS0_TLBSEL(1)@h
921 rlwimi r0, r9, 16, MAS0_ESEL_MSK
931 stw r3, 0xc08(r7) /* LAWAR0 */
935 lis r0, MAS0_TLBSEL(1)@h
936 rlwimi r0, r8, 16, MAS0_ESEL_MSK
947 /* r3 = addr, r4 = value, clobbers r5, r11, r12 */
949 /* Lock two cache lines into I-Cache */
951 mfspr r11, SPRN_L1CSR1
952 rlwinm r11, r11, 0, ~L1CSR1_ICUL
955 mtspr SPRN_L1CSR1, r11
966 mfspr r11, SPRN_L1CSR1
967 3: andi. r11, r11, L1CSR1_ICUL
974 mfspr r11, SPRN_L1CSR1
975 3: andi. r11, r11, L1CSR1_ICUL
980 /* Inside a locked cacheline, wait a while, write, then wait a while */
984 addis r11, r5, 0x10000@h /* wait 65536 timebase ticks */
985 4: mfspr r5, SPRN_TBRL
992 addis r11, r5, 0x10000@h /* wait 65536 timebase ticks */
993 4: mfspr r5, SPRN_TBRL
1000 * Fill out the rest of this cache line and the next with nops,
1001 * to ensure that nothing outside the locked area will be
1002 * fetched due to a branch.
1009 mfspr r11, SPRN_L1CSR1
1010 rlwinm r11, r11, 0, ~L1CSR1_ICUL
1013 mtspr SPRN_L1CSR1, r11
1022 create_init_ram_area:
1023 lis r6,FSL_BOOKE_MAS0(1, 15, 0)@h
1024 ori r6,r6,FSL_BOOKE_MAS0(1, 15, 0)@l
1027 /* create a temp mapping in AS=1 to the 4M boot window */
1028 create_tlb1_entry 15, \
1029 1, BOOKE_PAGESZ_4M, \
1030 CONFIG_SYS_MONITOR_BASE & 0xffc00000, MAS2_I|MAS2_G, \
1031 0xffc00000, MAS3_SX|MAS3_SW|MAS3_SR, \
1034 #elif !defined(CONFIG_SYS_RAMBOOT) && defined(CONFIG_NXP_ESBC)
1035 /* create a temp mapping in AS = 1 for Flash mapping
1036 * created by PBL for ISBC code
1038 create_tlb1_entry 15, \
1039 1, BOOKE_PAGESZ_1M, \
1040 CONFIG_SYS_MONITOR_BASE & 0xfff00000, MAS2_I|MAS2_G, \
1041 CONFIG_SYS_PBI_FLASH_WINDOW & 0xfff00000, MAS3_SX|MAS3_SW|MAS3_SR, \
1045 * For Targets without CONFIG_SPL like P3, P5
1046 * and for targets with CONFIG_SPL like T1, T2, T4, only for
1047 * u-boot-spl i.e. CONFIG_SPL_BUILD
1049 #elif defined(CONFIG_RAMBOOT_PBL) && defined(CONFIG_NXP_ESBC) && \
1050 (!defined(CONFIG_SPL) || defined(CONFIG_SPL_BUILD))
1051 /* create a temp mapping in AS = 1 for mapping CONFIG_SYS_MONITOR_BASE
1052 * to L3 Address configured by PBL for ISBC code
1054 create_tlb1_entry 15, \
1055 1, BOOKE_PAGESZ_1M, \
1056 CONFIG_SYS_MONITOR_BASE & 0xfff00000, MAS2_I|MAS2_G, \
1057 CONFIG_SYS_INIT_L3_ADDR & 0xfff00000, MAS3_SX|MAS3_SW|MAS3_SR, \
1062 * create a temp mapping in AS=1 to the 1M CONFIG_SYS_MONITOR_BASE space, the main
1063 * image has been relocated to CONFIG_SYS_MONITOR_BASE on the second stage.
1065 create_tlb1_entry 15, \
1066 1, BOOKE_PAGESZ_1M, \
1067 CONFIG_SYS_MONITOR_BASE & 0xfff00000, MAS2_I|MAS2_G, \
1068 CONFIG_SYS_MONITOR_BASE & 0xfff00000, MAS3_SX|MAS3_SW|MAS3_SR, \
1072 /* create a temp mapping in AS=1 to the stack */
1073 #if defined(CONFIG_SYS_INIT_RAM_ADDR_PHYS_LOW) && \
1074 defined(CONFIG_SYS_INIT_RAM_ADDR_PHYS_HIGH)
1075 create_tlb1_entry 14, \
1076 1, BOOKE_PAGESZ_16K, \
1077 CONFIG_SYS_INIT_RAM_ADDR, 0, \
1078 CONFIG_SYS_INIT_RAM_ADDR_PHYS_LOW, MAS3_SX|MAS3_SW|MAS3_SR, \
1079 CONFIG_SYS_INIT_RAM_ADDR_PHYS_HIGH, r6
1082 create_tlb1_entry 14, \
1083 1, BOOKE_PAGESZ_16K, \
1084 CONFIG_SYS_INIT_RAM_ADDR, 0, \
1085 CONFIG_SYS_INIT_RAM_ADDR, MAS3_SX|MAS3_SW|MAS3_SR, \
1089 lis r6,MSR_IS|MSR_DS|MSR_DE@h
1090 ori r6,r6,MSR_IS|MSR_DS|MSR_DE@l
1092 ori r7,r7,switch_as@l
1099 /* L1 DCache is used for initial RAM */
1101 /* Allocate Initial RAM in data cache.
1103 lis r3,CONFIG_SYS_INIT_RAM_ADDR@h
1104 ori r3,r3,CONFIG_SYS_INIT_RAM_ADDR@l
1107 /* cache size * 1024 / (2 * L1 line size) */
1108 slwi r2, r2, (10 - 1 - L1_CACHE_SHIFT)
1113 #ifdef CONFIG_E6500 /* Lock/unlock L2 cache long with L1 */
1119 addi r3,r3,CONFIG_SYS_CACHELINE_SIZE
1122 /* Jump out the last 4K page and continue to 'normal' start */
1123 #if defined(CONFIG_SYS_RAMBOOT) || defined(CONFIG_SPL)
1124 /* We assume that we're already running at the address we're linked at */
1127 /* Calculate absolute address in FLASH and jump there */
1128 /*--------------------------------------------------------------*/
1129 lis r3,CONFIG_SYS_MONITOR_BASE@h
1130 ori r3,r3,CONFIG_SYS_MONITOR_BASE@l
1131 addi r3,r3,_start_cont - _start
1139 .long 0x27051956 /* U-BOOT Magic Number */
1143 /* Setup the stack in initial RAM,could be L2-as-SRAM or L1 dcache*/
1144 lis r3,(CONFIG_SYS_INIT_RAM_ADDR)@h
1145 ori r3,r3,((CONFIG_SYS_INIT_SP_OFFSET-16)&~0xf)@l /* Align to 16 */
1147 #if CONFIG_VAL(SYS_MALLOC_F_LEN)
1148 #if CONFIG_VAL(SYS_MALLOC_F_LEN) + GENERATED_GBL_DATA_SIZE > CONFIG_SYS_INIT_RAM_SIZE
1149 #error "SYS_MALLOC_F_LEN too large to fit into initial RAM."
1152 /* Leave 16+ byte for back chain termination and NULL return address */
1153 subi r3,r3,((CONFIG_VAL(SYS_MALLOC_F_LEN)+16+15)&~0xf)
1157 lis r4,(CONFIG_SYS_INIT_RAM_ADDR)@h
1158 ori r4,r4,(CONFIG_SYS_INIT_RAM_SIZE)@l
1167 #if CONFIG_VAL(SYS_MALLOC_F_LEN)
1168 lis r4,(CONFIG_SYS_INIT_RAM_ADDR)@h
1169 ori r4,r4,(CONFIG_SYS_GBL_DATA_OFFSET)@l
1171 addi r3,r3,16 /* Pre-relocation malloc area */
1172 stw r3,GD_MALLOC_BASE(r4)
1176 stw r0,0(r3) /* Terminate Back Chain */
1177 stw r0,+4(r3) /* NULL return address. */
1178 mr r1,r3 /* Transfer to SP(r1) */
1181 /* Needed for -msingle-pic-base */
1182 bl _GLOBAL_OFFSET_TABLE_@local-4
1185 /* Pass our potential ePAPR device tree pointer to cpu_init_early_f */
1190 /* switch back to AS = 0 */
1191 lis r3,(MSR_CE|MSR_ME|MSR_DE)@h
1192 ori r3,r3,(MSR_CE|MSR_ME|MSR_DE)@l
1196 bl cpu_init_f /* return boot_flag for calling board_init_f */
1200 /* NOTREACHED - board_init_f() does not return */
1203 .globl _start_of_vectors
1206 /* Critical input. */
1207 CRIT_EXCEPTION(0x0100, CriticalInput, CritcalInputException)
1210 MCK_EXCEPTION(0x200, MachineCheck, MachineCheckException)
1212 /* Data Storage exception. */
1213 STD_EXCEPTION(0x0300, DataStorage, UnknownException)
1215 /* Instruction Storage exception. */
1216 STD_EXCEPTION(0x0400, InstStorage, UnknownException)
1218 /* External Interrupt exception. */
1219 STD_EXCEPTION(0x0500, ExtInterrupt, ExtIntException)
1221 /* Alignment exception. */
1223 EXCEPTION_PROLOG(SRR0, SRR1)
1228 addi r3,r1,STACK_FRAME_OVERHEAD
1229 EXC_XFER_TEMPLATE(0x600, Alignment, AlignmentException,
1230 MSR_KERNEL, COPY_EE)
1232 /* Program check exception */
1234 EXCEPTION_PROLOG(SRR0, SRR1)
1235 addi r3,r1,STACK_FRAME_OVERHEAD
1236 EXC_XFER_TEMPLATE(0x700, ProgramCheck, ProgramCheckException,
1237 MSR_KERNEL, COPY_EE)
1239 /* No FPU on MPC85xx. This exception is not supposed to happen.
1241 STD_EXCEPTION(0x0800, FPUnavailable, UnknownException)
1242 STD_EXCEPTION(0x0900, SystemCall, UnknownException)
1243 STD_EXCEPTION(0x0a00, Decrementer, timer_interrupt)
1244 STD_EXCEPTION(0x0b00, IntervalTimer, UnknownException)
1245 STD_EXCEPTION(0x0c00, WatchdogTimer, UnknownException)
1247 STD_EXCEPTION(0x0d00, DataTLBError, UnknownException)
1248 STD_EXCEPTION(0x0e00, InstructionTLBError, UnknownException)
1250 CRIT_EXCEPTION(0x0f00, DebugBreakpoint, DebugException )
1252 .globl _end_of_vectors
1256 . = . + (0x100 - ( . & 0xff )) /* align for debug */
1259 * This code finishes saving the registers to the exception frame
1260 * and jumps to the appropriate handler for the exception.
1261 * Register r21 is pointer into trap frame, r1 has new stack pointer.
1262 * r23 is the address of the handler.
1264 .globl transfer_to_handler
1265 transfer_to_handler:
1273 mtspr SPRG2,r22 /* r1 is now kernel sp */
1275 mtctr r23 /* virtual address of handler */
1280 mfmsr r28 /* Disable interrupts */
1284 SYNC /* Some chip revs need this... */
1299 lwz r2,_NIP(r1) /* Restore environment */
1313 .globl invalidate_icache
1316 ori r0,r0,L1CSR1_ICFI
1321 blr /* entire I cache */
1323 .globl invalidate_dcache
1326 ori r0,r0,L1CSR0_DCFI
1333 .globl icache_enable
1336 bl invalidate_icache
1340 ori r4,r4,(L1CSR1_CPE | L1CSR1_ICE)@l
1341 oris r4,r4,(L1CSR1_CPE | L1CSR1_ICE)@h
1346 .globl icache_disable
1350 ori r3,r3,L1CSR1_ICE
1356 .globl icache_status
1359 andi. r3,r3,L1CSR1_ICE
1362 .globl dcache_enable
1365 bl invalidate_dcache
1369 ori r0,r0,(L1CSR0_CPE | L1CSR0_DCE)@l
1370 oris r0,r0,(L1CSR0_CPE | L1CSR0_DCE)@h
1377 .globl dcache_disable
1381 ori r4,r4,L1CSR0_DCE
1387 .globl dcache_status
1390 andi. r3,r3,L1CSR0_DCE
1393 /*------------------------------------------------------------------------------- */
1395 /* Description: Input 8 bits */
1396 /*------------------------------------------------------------------------------- */
1402 /*------------------------------------------------------------------------------- */
1403 /* Function: out8 */
1404 /* Description: Output 8 bits */
1405 /*------------------------------------------------------------------------------- */
1412 /*------------------------------------------------------------------------------- */
1413 /* Function: out16 */
1414 /* Description: Output 16 bits */
1415 /*------------------------------------------------------------------------------- */
1422 /*------------------------------------------------------------------------------- */
1423 /* Function: out16r */
1424 /* Description: Byte reverse and output 16 bits */
1425 /*------------------------------------------------------------------------------- */
1432 /*------------------------------------------------------------------------------- */
1433 /* Function: out32 */
1434 /* Description: Output 32 bits */
1435 /*------------------------------------------------------------------------------- */
1442 /*------------------------------------------------------------------------------- */
1443 /* Function: out32r */
1444 /* Description: Byte reverse and output 32 bits */
1445 /*------------------------------------------------------------------------------- */
1452 /*------------------------------------------------------------------------------- */
1453 /* Function: in16 */
1454 /* Description: Input 16 bits */
1455 /*------------------------------------------------------------------------------- */
1461 /*------------------------------------------------------------------------------- */
1462 /* Function: in16r */
1463 /* Description: Input 16 bits and byte reverse */
1464 /*------------------------------------------------------------------------------- */
1470 /*------------------------------------------------------------------------------- */
1471 /* Function: in32 */
1472 /* Description: Input 32 bits */
1473 /*------------------------------------------------------------------------------- */
1479 /*------------------------------------------------------------------------------- */
1480 /* Function: in32r */
1481 /* Description: Input 32 bits and byte reverse */
1482 /*------------------------------------------------------------------------------- */
1487 #endif /* !MINIMAL_SPL */
1489 /*------------------------------------------------------------------------------*/
1492 * void write_tlb(mas0, mas1, mas2, mas3, mas7)
1500 #ifdef CONFIG_ENABLE_36BIT_PHYS
1504 #ifdef CONFIG_SYS_BOOK3E_HV
1514 * void relocate_code(addr_sp, gd, addr_moni)
1516 * This "function" does not return, instead it continues in RAM
1517 * after relocating the monitor code.
1521 * r5 = length in bytes
1522 * r6 = cachelinesize
1524 .globl relocate_code
1526 mr r1,r3 /* Set new stack pointer */
1527 mr r9,r4 /* Save copy of Init Data pointer */
1528 mr r10,r5 /* Save copy of Destination Address */
1531 #ifndef CONFIG_SPL_SKIP_RELOCATE
1532 mr r3,r5 /* Destination Address */
1533 lis r4,CONFIG_SYS_MONITOR_BASE@h /* Source Address */
1534 ori r4,r4,CONFIG_SYS_MONITOR_BASE@l
1535 lwz r5,GOT(__init_end)
1537 li r6,CONFIG_SYS_CACHELINE_SIZE /* Cache Line Size */
1542 * New GOT-PTR = (old GOT-PTR - CONFIG_SYS_MONITOR_BASE) + Destination Address
1548 /* First our own GOT */
1550 /* the the one used by the C code */
1560 beq cr1,4f /* In place copy is not necessary */
1561 beq 7f /* Protect against 0 count */
1580 * Now flush the cache: note that we must start from a cache aligned
1581 * address. Otherwise we might miss one cache line.
1585 beq 7f /* Always flush prefetch queue in any case */
1593 sync /* Wait for all dcbst to complete on bus */
1599 7: sync /* Wait for all icbi to complete on bus */
1603 * We are done. Do not return, instead branch to second part of board
1604 * initialization, now running from RAM.
1607 addi r0,r10,in_ram - _start
1610 * As IVPR is going to point RAM address,
1611 * Make sure IVOR15 has valid opcode to support debugger
1616 * Re-point the IVPR at RAM
1621 blr /* NEVER RETURNS! */
1627 * Relocation Function, r12 point to got2+0x8000
1629 * Adjust got2 pointers, no need to check for 0, this code
1630 * already puts a few entries in the table.
1632 li r0,__got2_entries@sectoff@l
1633 la r3,GOT(_GOT2_TABLE_)
1634 lwz r11,GOT(_GOT2_TABLE_)
1646 * Now adjust the fixups and the pointers to the fixups
1647 * in case we need to move ourselves again.
1649 li r0,__fixup_entries@sectoff@l
1650 lwz r3,GOT(_FIXUP_TABLE_)
1666 * Now clear BSS segment
1668 lwz r3,GOT(__bss_start)
1669 lwz r4,GOT(__bss_end)
1682 mr r3,r9 /* Init Data pointer */
1683 mr r4,r10 /* Destination Address */
1688 * Copy exception vector code to low memory
1691 * r7: source address, r8: end address, r9: target address
1696 bl _GLOBAL_OFFSET_TABLE_-4
1699 /* Update IVORs as per relocation */
1702 lwz r4,CriticalInput@got(r12)
1703 mtspr IVOR0,r4 /* 0: Critical input */
1704 lwz r4,MachineCheck@got(r12)
1705 mtspr IVOR1,r4 /* 1: Machine check */
1706 lwz r4,DataStorage@got(r12)
1707 mtspr IVOR2,r4 /* 2: Data storage */
1708 lwz r4,InstStorage@got(r12)
1709 mtspr IVOR3,r4 /* 3: Instruction storage */
1710 lwz r4,ExtInterrupt@got(r12)
1711 mtspr IVOR4,r4 /* 4: External interrupt */
1712 lwz r4,Alignment@got(r12)
1713 mtspr IVOR5,r4 /* 5: Alignment */
1714 lwz r4,ProgramCheck@got(r12)
1715 mtspr IVOR6,r4 /* 6: Program check */
1716 lwz r4,FPUnavailable@got(r12)
1717 mtspr IVOR7,r4 /* 7: floating point unavailable */
1718 lwz r4,SystemCall@got(r12)
1719 mtspr IVOR8,r4 /* 8: System call */
1720 /* 9: Auxiliary processor unavailable(unsupported) */
1721 lwz r4,Decrementer@got(r12)
1722 mtspr IVOR10,r4 /* 10: Decrementer */
1723 lwz r4,IntervalTimer@got(r12)
1724 mtspr IVOR11,r4 /* 11: Interval timer */
1725 lwz r4,WatchdogTimer@got(r12)
1726 mtspr IVOR12,r4 /* 12: Watchdog timer */
1727 lwz r4,DataTLBError@got(r12)
1728 mtspr IVOR13,r4 /* 13: Data TLB error */
1729 lwz r4,InstructionTLBError@got(r12)
1730 mtspr IVOR14,r4 /* 14: Instruction TLB error */
1731 lwz r4,DebugBreakpoint@got(r12)
1732 mtspr IVOR15,r4 /* 15: Debug */
1737 .globl unlock_ram_in_cache
1738 unlock_ram_in_cache:
1739 /* invalidate the INIT_RAM section */
1740 lis r3,(CONFIG_SYS_INIT_RAM_ADDR & ~(CONFIG_SYS_CACHELINE_SIZE-1))@h
1741 ori r3,r3,(CONFIG_SYS_INIT_RAM_ADDR & ~(CONFIG_SYS_CACHELINE_SIZE-1))@l
1744 slwi r4,r4,(10 - 1 - L1_CACHE_SHIFT)
1747 #ifdef CONFIG_E6500 /* lock/unlock L2 cache long with L1 */
1753 addi r3,r3,CONFIG_SYS_CACHELINE_SIZE
1757 /* Invalidate the TLB entries for the cache */
1758 lis r3,CONFIG_SYS_INIT_RAM_ADDR@h
1759 ori r3,r3,CONFIG_SYS_INIT_RAM_ADDR@l
1772 mfspr r3,SPRN_L1CFG0
1774 rlwinm r5,r3,9,3 /* Extract cache block size */
1775 twlgti r5,1 /* Only 32 and 64 byte cache blocks
1776 * are currently defined.
1779 subfic r6,r5,2 /* r6 = log2(1KiB / cache block size) -
1780 * log2(number of ways)
1782 slw r5,r4,r5 /* r5 = cache block size */
1784 rlwinm r7,r3,0,0xff /* Extract number of KiB in the cache */
1785 mulli r7,r7,13 /* An 8-way cache will require 13
1790 /* save off HID0 and set DCFA */
1792 ori r9,r8,HID0_DCFA@l
1799 1: lwz r3,0(r4) /* Load... */
1807 1: dcbf 0,r4 /* ...and flush. */
1816 #endif /* !MINIMAL_SPL */