1 /* SPDX-License-Identifier: GPL-2.0+ */
3 * Copyright 2004, 2007-2012 Freescale Semiconductor, Inc.
4 * Copyright (C) 2003 Motorola,Inc.
7 /* U-Boot Startup Code for Motorola 85xx PowerPC based Embedded Boards
9 * The processor starts at 0xfffffffc and the code is first executed in the
10 * last 4K page(0xfffff000-0xffffffff) in flash/rom.
14 #include <asm-offsets.h>
19 #include <ppc_asm.tmpl>
22 #include <asm/cache.h>
26 #define MSR_KERNEL ( MSR_ME ) /* Machine Check */
28 #define LAW_EN 0x80000000
30 #if defined(CONFIG_NAND_SPL) || \
31 (defined(CONFIG_SPL_BUILD) && defined(CONFIG_SPL_INIT_MINIMAL))
35 #if !defined(CONFIG_SPL) && !defined(CONFIG_SYS_RAMBOOT) && \
36 !defined(CONFIG_NXP_ESBC) && !defined(CONFIG_SRIO_PCIE_BOOT_SLAVE)
41 * Set up GOT: Global Offset Table
43 * Use r12 to access the GOT
46 GOT_ENTRY(_GOT2_TABLE_)
47 GOT_ENTRY(_FIXUP_TABLE_)
51 GOT_ENTRY(_start_of_vectors)
52 GOT_ENTRY(_end_of_vectors)
53 GOT_ENTRY(transfer_to_handler)
58 GOT_ENTRY(__bss_start)
62 * e500 Startup -- after reset only the last 4KB of the effective
63 * address space is mapped in the MMU L2 TLB1 Entry0. The .bootpg
64 * section is located at THIS LAST page and basically does three
65 * things: clear some registers, set up exception tables and
66 * add more TLB entries for 'larger spaces'(e.g. the boot rom) to
67 * continue the boot procedure.
69 * Once the boot rom is mapped by TLB entries we can proceed
70 * with normal startup.
78 /* Enable debug exception */
83 * If we got an ePAPR device tree pointer passed in as r3, we need that
84 * later in cpu_init_early_f(). Save it to a safe register before we
85 * clobber it so that we can fetch it from there later.
89 #ifdef CONFIG_SYS_FSL_ERRATUM_A004510
92 li r4,CONFIG_SYS_FSL_ERRATUM_A004510_SVR_REV
96 #ifdef CONFIG_SYS_FSL_ERRATUM_A004510_SVR_REV2
97 li r4,CONFIG_SYS_FSL_ERRATUM_A004510_SVR_REV2
102 /* Not a supported revision affected by erratum */
106 1: li r27,1 /* Remember for later that we have the erratum */
107 /* Erratum says set bits 55:60 to 001001 */
117 #ifdef CONFIG_SYS_FSL_ERRATUM_A005125
120 mfspr r3, SPRN_HDBCR0
122 mtspr SPRN_HDBCR0, r3
126 #if defined(CONFIG_NXP_ESBC) && defined(CONFIG_E500MC) && \
127 !defined(CONFIG_E6500)
128 /* ISBC uses L2 as stack.
129 * Disable L2 cache here so that u-boot can enable it later
130 * as part of it's normal flow
133 /* Check if L2 is enabled */
134 mfspr r3, SPRN_L2CSR0
136 ori r2, r2, L2CSR0_L2E@l
140 mfspr r3, SPRN_L2CSR0
142 lis r2,(L2CSR0_L2FL)@h
143 ori r2, r2, (L2CSR0_L2FL)@l
150 mfspr r3, SPRN_L2CSR0
154 mfspr r3, SPRN_L2CSR0
156 ori r2, r2, L2CSR0_L2E@l
166 /* clear registers/arrays not reset by hardware */
170 mtspr L1CSR0,r0 /* invalidate d-cache */
171 mtspr L1CSR1,r0 /* invalidate i-cache */
174 mtspr DBSR,r1 /* Clear all valid bits */
177 .macro create_tlb1_entry esel ts tsize epn wimg rpn perm phy_high scratch
178 lis \scratch, FSL_BOOKE_MAS0(1, \esel, 0)@h
179 ori \scratch, \scratch, FSL_BOOKE_MAS0(1, \esel, 0)@l
181 lis \scratch, FSL_BOOKE_MAS1(1, 1, 0, \ts, \tsize)@h
182 ori \scratch, \scratch, FSL_BOOKE_MAS1(1, 1, 0, \ts, \tsize)@l
184 lis \scratch, FSL_BOOKE_MAS2(\epn, \wimg)@h
185 ori \scratch, \scratch, FSL_BOOKE_MAS2(\epn, \wimg)@l
187 lis \scratch, FSL_BOOKE_MAS3(\rpn, 0, \perm)@h
188 ori \scratch, \scratch, FSL_BOOKE_MAS3(\rpn, 0, \perm)@l
190 lis \scratch, \phy_high@h
191 ori \scratch, \scratch, \phy_high@l
199 .macro create_tlb0_entry esel ts tsize epn wimg rpn perm phy_high scratch
200 lis \scratch, FSL_BOOKE_MAS0(0, \esel, 0)@h
201 ori \scratch, \scratch, FSL_BOOKE_MAS0(0, \esel, 0)@l
203 lis \scratch, FSL_BOOKE_MAS1(1, 0, 0, \ts, \tsize)@h
204 ori \scratch, \scratch, FSL_BOOKE_MAS1(1, 0, 0, \ts, \tsize)@l
206 lis \scratch, FSL_BOOKE_MAS2(\epn, \wimg)@h
207 ori \scratch, \scratch, FSL_BOOKE_MAS2(\epn, \wimg)@l
209 lis \scratch, FSL_BOOKE_MAS3(\rpn, 0, \perm)@h
210 ori \scratch, \scratch, FSL_BOOKE_MAS3(\rpn, 0, \perm)@l
212 lis \scratch, \phy_high@h
213 ori \scratch, \scratch, \phy_high@l
221 .macro delete_tlb1_entry esel scratch
222 lis \scratch, FSL_BOOKE_MAS0(1, \esel, 0)@h
223 ori \scratch, \scratch, FSL_BOOKE_MAS0(1, \esel, 0)@l
233 .macro delete_tlb0_entry esel epn wimg scratch
234 lis \scratch, FSL_BOOKE_MAS0(0, \esel, 0)@h
235 ori \scratch, \scratch, FSL_BOOKE_MAS0(0, \esel, 0)@l
239 lis \scratch, FSL_BOOKE_MAS2(\epn, \wimg)@h
240 ori \scratch, \scratch, FSL_BOOKE_MAS2(\epn, \wimg)@l
248 /* Interrupt vectors do not fit in minimal SPL. */
249 #if !defined(MINIMAL_SPL)
250 /* Setup interrupt vectors */
251 lis r1,CONFIG_SYS_MONITOR_BASE@h
254 li r4,CriticalInput@l
255 mtspr IVOR0,r4 /* 0: Critical input */
257 mtspr IVOR1,r4 /* 1: Machine check */
259 mtspr IVOR2,r4 /* 2: Data storage */
261 mtspr IVOR3,r4 /* 3: Instruction storage */
263 mtspr IVOR4,r4 /* 4: External interrupt */
265 mtspr IVOR5,r4 /* 5: Alignment */
267 mtspr IVOR6,r4 /* 6: Program check */
268 li r4,FPUnavailable@l
269 mtspr IVOR7,r4 /* 7: floating point unavailable */
271 mtspr IVOR8,r4 /* 8: System call */
272 /* 9: Auxiliary processor unavailable(unsupported) */
274 mtspr IVOR10,r4 /* 10: Decrementer */
275 li r4,IntervalTimer@l
276 mtspr IVOR11,r4 /* 11: Interval timer */
277 li r4,WatchdogTimer@l
278 mtspr IVOR12,r4 /* 12: Watchdog timer */
280 mtspr IVOR13,r4 /* 13: Data TLB error */
281 li r4,InstructionTLBError@l
282 mtspr IVOR14,r4 /* 14: Instruction TLB error */
283 li r4,DebugBreakpoint@l
284 mtspr IVOR15,r4 /* 15: Debug */
287 /* Clear and set up some registers. */
290 mtspr DEC,r0 /* prevent dec exceptions */
291 mttbl r0 /* prevent fit & wdt exceptions */
293 mtspr TSR,r1 /* clear all timer exception status */
294 mtspr TCR,r0 /* disable all */
295 mtspr ESR,r0 /* clear exception syndrome register */
296 mtspr MCSR,r0 /* machine check syndrome register */
297 mtxer r0 /* clear integer exception register */
299 #ifdef CONFIG_SYS_BOOK3E_HV
300 mtspr MAS8,r0 /* make sure MAS8 is clear */
303 /* Enable Time Base and Select Time Base Clock */
304 lis r0,HID0_EMCP@h /* Enable machine check */
305 #if defined(CONFIG_ENABLE_36BIT_PHYS)
306 ori r0,r0,HID0_ENMAS7@l /* Enable MAS7 */
308 #ifndef CONFIG_E500MC
309 ori r0,r0,HID0_TBEN@l /* Enable Timebase */
313 #if !defined(CONFIG_E500MC) && !defined(CONFIG_ARCH_QEMU_E500)
314 li r0,(HID1_ASTME|HID1_ABE)@l /* Addr streaming & broadcast */
317 cmpwi r3,0x50@l /* if we are rev 5.0 or greater set MBDD */
319 /* Set MBDD bit also */
320 ori r0, r0, HID1_MBDD@l
325 #ifdef CONFIG_SYS_FSL_ERRATUM_CPU_A003999
331 /* Enable Branch Prediction */
332 #if defined(CONFIG_BTB)
333 lis r0,BUCSR_ENABLE@h
334 ori r0,r0,BUCSR_ENABLE@l
338 #if defined(CONFIG_SYS_INIT_DBCR)
341 mtspr DBSR,r1 /* Clear all status bits */
342 lis r0,CONFIG_SYS_INIT_DBCR@h /* DBCR0[IDM] must be set */
343 ori r0,r0,CONFIG_SYS_INIT_DBCR@l
348 * Search for the TLB that covers the code we're executing, and shrink it
349 * so that it covers only this 4K page. That will ensure that any other
350 * TLB we create won't interfere with it. We assume that the TLB exists,
351 * which is why we don't check the Valid bit of MAS1. We also assume
354 * This is necessary, for example, when booting from the on-chip ROM,
355 * which (oddly) creates a single 4GB TLB that covers CCSR and DDR.
357 bl nexti /* Find our address */
358 nexti: mflr r1 /* R1 = our PC */
360 mtspr MAS6, r2 /* Assume the current PID and AS are 0 */
363 tlbsx 0, r1 /* This must succeed */
365 mfspr r14, MAS0 /* Save ESEL for later */
366 rlwinm r14, r14, 16, 0xfff
368 /* Set the size of the TLB to 4KB */
371 andc r3, r3, r2 /* Clear the TSIZE bits */
372 ori r3, r3, MAS1_TSIZE(BOOKE_PAGESZ_4K)@l
373 oris r3, r3, MAS1_IPROT@h
377 * Set the base address of the TLB to our PC. We assume that
378 * virtual == physical. We also assume that MAS2_EPN == MAS3_RPN.
381 ori r3, r3, MAS2_EPN@l /* R3 = MAS2_EPN */
383 and r1, r1, r3 /* Our PC, rounded down to the nearest page */
388 #ifdef CONFIG_SYS_FSL_ERRATUM_A004510
391 andi. r15, r2, MAS2_I|MAS2_G /* save the old I/G for later */
392 rlwinm r2, r2, 0, ~MAS2_I
396 mtspr MAS2, r2 /* Set the EPN to our PC base address */
401 mtspr MAS3, r2 /* Set the RPN to our PC base address */
408 * Clear out any other TLB entries that may exist, to avoid conflicts.
409 * Our TLB entry is in r14.
411 li r0, TLBIVAX_ALL | TLBIVAX_TLB0
415 mfspr r4, SPRN_TLB1CFG
416 rlwinm r4, r4, 0, TLBnCFG_NENTRY_MASK
421 rlwinm r5, r3, 16, MAS0_ESEL_MSK
423 beq 2f /* skip the entry we're executing from */
425 oris r5, r5, MAS0_TLBSEL(1)@h
436 #if defined(CONFIG_SYS_PPC_E500_DEBUG_TLB) && !defined(MINIMAL_SPL) && \
437 !defined(CONFIG_NXP_ESBC)
439 * TLB entry for debuggging in AS1
440 * Create temporary TLB entry in AS0 to handle debug exception
441 * As on debug exception MSR is cleared i.e. Address space is changed
442 * to 0. A TLB entry (in AS0) is required to handle debug exception generated
448 * TLB entry is created for IVPR + IVOR15 to map on valid OP code address
449 * bacause flash's virtual address maps to 0xff800000 - 0xffffffff.
450 * and this window is outside of 4K boot window.
452 create_tlb1_entry CONFIG_SYS_PPC_E500_DEBUG_TLB, \
453 0, BOOKE_PAGESZ_4M, \
454 CONFIG_SYS_MONITOR_BASE & 0xffc00000, MAS2_I|MAS2_G, \
455 0xffc00000, MAS3_SX|MAS3_SW|MAS3_SR, \
460 * TLB entry is created for IVPR + IVOR15 to map on valid OP code address
461 * because "nexti" will resize TLB to 4K
463 create_tlb1_entry CONFIG_SYS_PPC_E500_DEBUG_TLB, \
464 0, BOOKE_PAGESZ_256K, \
465 CONFIG_SYS_MONITOR_BASE & 0xfffc0000, MAS2_I, \
466 CONFIG_SYS_MONITOR_BASE & 0xfffc0000, MAS3_SX|MAS3_SW|MAS3_SR, \
472 * Relocate CCSR, if necessary. We relocate CCSR if (obviously) the default
473 * location is not where we want it. This typically happens on a 36-bit
474 * system, where we want to move CCSR to near the top of 36-bit address space.
476 * To move CCSR, we create two temporary TLBs, one for the old location, and
477 * another for the new location. On CoreNet systems, we also need to create
478 * a special, temporary LAW.
480 * As a general rule, TLB0 is used for short-term TLBs, and TLB1 is used for
481 * long-term TLBs, so we use TLB0 here.
483 #if (CONFIG_SYS_CCSRBAR_DEFAULT != CONFIG_SYS_CCSRBAR_PHYS)
485 #if !defined(CONFIG_SYS_CCSRBAR_PHYS_HIGH) || !defined(CONFIG_SYS_CCSRBAR_PHYS_LOW)
486 #error "CONFIG_SYS_CCSRBAR_PHYS_HIGH and CONFIG_SYS_CCSRBAR_PHYS_LOW) must be defined."
491 * Create a TLB for the new location of CCSR. Register R8 is reserved
492 * for the virtual address of this TLB (CONFIG_SYS_CCSRBAR).
494 lis r8, CONFIG_SYS_CCSRBAR@h
495 ori r8, r8, CONFIG_SYS_CCSRBAR@l
496 lis r9, (CONFIG_SYS_CCSRBAR + 0x1000)@h
497 ori r9, r9, (CONFIG_SYS_CCSRBAR + 0x1000)@l
498 create_tlb0_entry 0, \
499 0, BOOKE_PAGESZ_4K, \
500 CONFIG_SYS_CCSRBAR, MAS2_I|MAS2_G, \
501 CONFIG_SYS_CCSRBAR_PHYS_LOW, MAS3_SW|MAS3_SR, \
502 CONFIG_SYS_CCSRBAR_PHYS_HIGH, r3
504 * Create a TLB for the current location of CCSR. Register R9 is reserved
505 * for the virtual address of this TLB (CONFIG_SYS_CCSRBAR + 0x1000).
508 create_tlb0_entry 1, \
509 0, BOOKE_PAGESZ_4K, \
510 CONFIG_SYS_CCSRBAR + 0x1000, MAS2_I|MAS2_G, \
511 CONFIG_SYS_CCSRBAR_DEFAULT, MAS3_SW|MAS3_SR, \
512 0, r3 /* The default CCSR address is always a 32-bit number */
516 * We have a TLB for what we think is the current (old) CCSR. Let's
517 * verify that, otherwise we won't be able to move it.
518 * CONFIG_SYS_CCSRBAR_DEFAULT is always a 32-bit number, so we only
519 * need to compare the lower 32 bits of CCSRBAR on CoreNet systems.
522 lis r0, CONFIG_SYS_CCSRBAR_DEFAULT@h
523 ori r0, r0, CONFIG_SYS_CCSRBAR_DEFAULT@l
524 #ifdef CONFIG_FSL_CORENET
525 lwz r1, 4(r9) /* CCSRBARL */
527 lwz r1, 0(r9) /* CCSRBAR, shifted right by 12 */
534 * If the value we read from CCSRBARL is not what we expect, then
535 * enter an infinite loop. This will at least allow a debugger to
536 * halt execution and examine TLBs, etc. There's no point in going
540 bne infinite_debug_loop
542 #ifdef CONFIG_FSL_CORENET
544 #define CCSR_LAWBARH0 (CONFIG_SYS_CCSRBAR + 0x1000)
545 #define LAW_SIZE_4K 0xb
546 #define CCSRBAR_LAWAR (LAW_EN | (0x1e << 20) | LAW_SIZE_4K)
547 #define CCSRAR_C 0x80000000 /* Commit */
551 * On CoreNet systems, we create the temporary LAW using a special LAW
552 * target ID of 0x1e. LAWBARH is at offset 0xc00 in CCSR.
554 lis r0, CONFIG_SYS_CCSRBAR_PHYS_HIGH@h
555 ori r0, r0, CONFIG_SYS_CCSRBAR_PHYS_HIGH@l
556 lis r1, CONFIG_SYS_CCSRBAR_PHYS_LOW@h
557 ori r1, r1, CONFIG_SYS_CCSRBAR_PHYS_LOW@l
558 lis r2, CCSRBAR_LAWAR@h
559 ori r2, r2, CCSRBAR_LAWAR@l
561 stw r0, 0xc00(r9) /* LAWBARH0 */
562 stw r1, 0xc04(r9) /* LAWBARL0 */
564 stw r2, 0xc08(r9) /* LAWAR0 */
567 * Read back from LAWAR to ensure the update is complete. e500mc
568 * cores also require an isync.
570 lwz r0, 0xc08(r9) /* LAWAR0 */
574 * Read the current CCSRBARH and CCSRBARL using load word instructions.
575 * Follow this with an isync instruction. This forces any outstanding
576 * accesses to configuration space to completion.
579 lwz r0, 0(r9) /* CCSRBARH */
580 lwz r0, 4(r9) /* CCSRBARL */
584 * Write the new values for CCSRBARH and CCSRBARL to their old
585 * locations. The CCSRBARH has a shadow register. When the CCSRBARH
586 * has a new value written it loads a CCSRBARH shadow register. When
587 * the CCSRBARL is written, the CCSRBARH shadow register contents
588 * along with the CCSRBARL value are loaded into the CCSRBARH and
589 * CCSRBARL registers, respectively. Follow this with a sync
593 lis r0, CONFIG_SYS_CCSRBAR_PHYS_HIGH@h
594 ori r0, r0, CONFIG_SYS_CCSRBAR_PHYS_HIGH@l
595 lis r1, CONFIG_SYS_CCSRBAR_PHYS_LOW@h
596 ori r1, r1, CONFIG_SYS_CCSRBAR_PHYS_LOW@l
598 ori r2, r2, CCSRAR_C@l
600 stw r0, 0(r9) /* Write to CCSRBARH */
601 sync /* Make sure we write to CCSRBARH first */
602 stw r1, 4(r9) /* Write to CCSRBARL */
606 * Write a 1 to the commit bit (C) of CCSRAR at the old location.
607 * Follow this with a sync instruction.
612 /* Delete the temporary LAW */
621 #else /* #ifdef CONFIG_FSL_CORENET */
625 * Read the current value of CCSRBAR using a load word instruction
626 * followed by an isync. This forces all accesses to configuration
633 /* CONFIG_SYS_CCSRBAR_PHYS right shifted by 12 */
634 #define CCSRBAR_PHYS_RS12 ((CONFIG_SYS_CCSRBAR_PHYS_HIGH << 20) | \
635 (CONFIG_SYS_CCSRBAR_PHYS_LOW >> 12))
637 /* Write the new value to CCSRBAR. */
638 lis r0, CCSRBAR_PHYS_RS12@h
639 ori r0, r0, CCSRBAR_PHYS_RS12@l
644 * The manual says to perform a load of an address that does not
645 * access configuration space or the on-chip SRAM using an existing TLB,
646 * but that doesn't appear to be necessary. We will do the isync,
652 * Read the contents of CCSRBAR from its new location, followed by
658 #endif /* #ifdef CONFIG_FSL_CORENET */
660 /* Delete the temporary TLBs */
662 delete_tlb0_entry 0, CONFIG_SYS_CCSRBAR, MAS2_I|MAS2_G, r3
663 delete_tlb0_entry 1, CONFIG_SYS_CCSRBAR + 0x1000, MAS2_I|MAS2_G, r3
665 #endif /* #if (CONFIG_SYS_CCSRBAR_DEFAULT != CONFIG_SYS_CCSRBAR_PHYS) */
667 #if defined(CONFIG_SYS_FSL_QORIQ_CHASSIS2) && defined(CONFIG_E6500)
670 * Create a TLB for the MMR location of CCSR
671 * to access L2CSR0 register
673 create_tlb0_entry 0, \
674 0, BOOKE_PAGESZ_4K, \
675 CONFIG_SYS_CCSRBAR + 0xC20000, MAS2_I|MAS2_G, \
676 CONFIG_SYS_CCSRBAR_PHYS_LOW + 0xC20000, MAS3_SW|MAS3_SR, \
677 CONFIG_SYS_CCSRBAR_PHYS_HIGH, r3
679 enable_l2_cluster_l2:
680 /* enable L2 cache */
681 lis r3, (CONFIG_SYS_CCSRBAR + 0xC20000)@h
682 ori r3, r3, (CONFIG_SYS_CCSRBAR + 0xC20000)@l
683 li r4, 33 /* stash id */
685 lis r4, (L2CSR0_L2FI|L2CSR0_L2LFC)@h
686 ori r4, r4, (L2CSR0_L2FI|L2CSR0_L2LFC)@l
688 stw r4, 0(r3) /* invalidate L2 */
689 /* Poll till the bits are cleared */
697 /* L2PE must be set before L2 cache is enabled */
698 lis r4, (L2CSR0_L2PE)@h
699 ori r4, r4, (L2CSR0_L2PE)@l
701 stw r4, 0(r3) /* enable L2 parity/ECC error checking */
702 /* Poll till the bit is set */
710 lis r4, (L2CSR0_L2E|L2CSR0_L2PE)@h
711 ori r4, r4, (L2CSR0_L2REP_MODE)@l
713 stw r4, 0(r3) /* enable L2 */
714 /* Poll till the bit is set */
723 delete_tlb0_entry 0, CONFIG_SYS_CCSRBAR + 0xC20000, MAS2_I|MAS2_G, r3
727 * Enable the L1. On e6500, this has to be done
728 * after the L2 is up.
731 #ifdef CONFIG_SYS_CACHE_STASHING
732 /* set stash id to (coreID) * 2 + 32 + L1 CT (0) */
737 /* Enable/invalidate the I-Cache */
738 lis r2,(L1CSR1_ICFI|L1CSR1_ICLFR)@h
739 ori r2,r2,(L1CSR1_ICFI|L1CSR1_ICLFR)@l
746 lis r3,(L1CSR1_CPE|L1CSR1_ICE)@h
747 ori r3,r3,(L1CSR1_CPE|L1CSR1_ICE)@l
752 andi. r1,r3,L1CSR1_ICE@l
755 /* Enable/invalidate the D-Cache */
756 lis r2,(L1CSR0_DCFI|L1CSR0_DCLFR)@h
757 ori r2,r2,(L1CSR0_DCFI|L1CSR0_DCLFR)@l
764 lis r3,(L1CSR0_CPE|L1CSR0_DCE)@h
765 ori r3,r3,(L1CSR0_CPE|L1CSR0_DCE)@l
770 andi. r1,r3,L1CSR0_DCE@l
772 #ifdef CONFIG_SYS_FSL_ERRATUM_A004510
773 #define DCSR_LAWBARH0 (CONFIG_SYS_CCSRBAR + 0x1000)
774 #define LAW_SIZE_1M 0x13
775 #define DCSRBAR_LAWAR (LAW_EN | (0x1d << 20) | LAW_SIZE_1M)
781 * Create a TLB entry for CCSR
783 * We're executing out of TLB1 entry in r14, and that's the only
784 * TLB entry that exists. To allocate some TLB entries for our
785 * own use, flip a bit high enough that we won't flip it again
790 lis r0, MAS0_TLBSEL(1)@h
791 rlwimi r0, r8, 16, MAS0_ESEL_MSK
792 lis r1, FSL_BOOKE_MAS1(1, 1, 0, 0, BOOKE_PAGESZ_16M)@h
793 ori r1, r1, FSL_BOOKE_MAS1(1, 1, 0, 0, BOOKE_PAGESZ_16M)@l
794 lis r7, CONFIG_SYS_CCSRBAR@h
795 ori r7, r7, CONFIG_SYS_CCSRBAR@l
796 ori r2, r7, MAS2_I|MAS2_G
797 lis r3, FSL_BOOKE_MAS3(CONFIG_SYS_CCSRBAR_PHYS_LOW, 0, (MAS3_SW|MAS3_SR))@h
798 ori r3, r3, FSL_BOOKE_MAS3(CONFIG_SYS_CCSRBAR_PHYS_LOW, 0, (MAS3_SW|MAS3_SR))@l
799 lis r4, CONFIG_SYS_CCSRBAR_PHYS_HIGH@h
800 ori r4, r4, CONFIG_SYS_CCSRBAR_PHYS_HIGH@l
811 /* Map DCSR temporarily to physical address zero */
813 lis r3, DCSRBAR_LAWAR@h
814 ori r3, r3, DCSRBAR_LAWAR@l
816 stw r0, 0xc00(r7) /* LAWBARH0 */
817 stw r0, 0xc04(r7) /* LAWBARL0 */
819 stw r3, 0xc08(r7) /* LAWAR0 */
821 /* Read back from LAWAR to ensure the update is complete. */
822 lwz r3, 0xc08(r7) /* LAWAR0 */
825 /* Create a TLB entry for DCSR at zero */
828 lis r0, MAS0_TLBSEL(1)@h
829 rlwimi r0, r9, 16, MAS0_ESEL_MSK
830 lis r1, FSL_BOOKE_MAS1(1, 1, 0, 0, BOOKE_PAGESZ_1M)@h
831 ori r1, r1, FSL_BOOKE_MAS1(1, 1, 0, 0, BOOKE_PAGESZ_1M)@l
832 li r6, 0 /* DCSR effective address */
833 ori r2, r6, MAS2_I|MAS2_G
834 li r3, MAS3_SW|MAS3_SR
846 /* enable the timebase */
847 #define CTBENR 0xe2084
849 addis r4, r7, CTBENR@ha
855 .macro erratum_set_ccsr offset value
856 addis r3, r7, \offset@ha
858 addi r3, r3, \offset@l
863 .macro erratum_set_dcsr offset value
864 addis r3, r6, \offset@ha
866 addi r3, r3, \offset@l
871 erratum_set_dcsr 0xb0e08 0xe0201800
872 erratum_set_dcsr 0xb0e18 0xe0201800
873 erratum_set_dcsr 0xb0e38 0xe0400000
874 erratum_set_dcsr 0xb0008 0x00900000
875 erratum_set_dcsr 0xb0e40 0xe00a0000
876 erratum_set_ccsr 0x18600 CONFIG_SYS_FSL_CORENET_SNOOPVEC_COREONLY
877 #ifdef CONFIG_RAMBOOT_PBL
878 erratum_set_ccsr 0x10f00 0x495e5000
880 erratum_set_ccsr 0x10f00 0x415e5000
882 erratum_set_ccsr 0x11f00 0x415e5000
884 /* Make temp mapping uncacheable again, if it was initially */
889 rlwimi r4, r15, 0, MAS2_I
890 rlwimi r4, r15, 0, MAS2_G
897 /* Clear the cache */
898 lis r3,(L1CSR1_ICFI|L1CSR1_ICLFR)@h
899 ori r3,r3,(L1CSR1_ICFI|L1CSR1_ICLFR)@l
909 lis r3,(L1CSR1_CPE|L1CSR1_ICE)@h
910 ori r3,r3,(L1CSR1_CPE|L1CSR1_ICE)@l
920 /* Remove temporary mappings */
921 lis r0, MAS0_TLBSEL(1)@h
922 rlwimi r0, r9, 16, MAS0_ESEL_MSK
932 stw r3, 0xc08(r7) /* LAWAR0 */
936 lis r0, MAS0_TLBSEL(1)@h
937 rlwimi r0, r8, 16, MAS0_ESEL_MSK
948 /* r3 = addr, r4 = value, clobbers r5, r11, r12 */
950 /* Lock two cache lines into I-Cache */
952 mfspr r11, SPRN_L1CSR1
953 rlwinm r11, r11, 0, ~L1CSR1_ICUL
956 mtspr SPRN_L1CSR1, r11
967 mfspr r11, SPRN_L1CSR1
968 3: andi. r11, r11, L1CSR1_ICUL
975 mfspr r11, SPRN_L1CSR1
976 3: andi. r11, r11, L1CSR1_ICUL
981 /* Inside a locked cacheline, wait a while, write, then wait a while */
985 addis r11, r5, 0x10000@h /* wait 65536 timebase ticks */
986 4: mfspr r5, SPRN_TBRL
993 addis r11, r5, 0x10000@h /* wait 65536 timebase ticks */
994 4: mfspr r5, SPRN_TBRL
1001 * Fill out the rest of this cache line and the next with nops,
1002 * to ensure that nothing outside the locked area will be
1003 * fetched due to a branch.
1010 mfspr r11, SPRN_L1CSR1
1011 rlwinm r11, r11, 0, ~L1CSR1_ICUL
1014 mtspr SPRN_L1CSR1, r11
1023 create_init_ram_area:
1024 lis r6,FSL_BOOKE_MAS0(1, 15, 0)@h
1025 ori r6,r6,FSL_BOOKE_MAS0(1, 15, 0)@l
1028 /* create a temp mapping in AS=1 to the 4M boot window */
1029 create_tlb1_entry 15, \
1030 1, BOOKE_PAGESZ_4M, \
1031 CONFIG_SYS_MONITOR_BASE & 0xffc00000, MAS2_I|MAS2_G, \
1032 0xffc00000, MAS3_SX|MAS3_SW|MAS3_SR, \
1035 #elif !defined(CONFIG_SYS_RAMBOOT) && defined(CONFIG_NXP_ESBC)
1036 /* create a temp mapping in AS = 1 for Flash mapping
1037 * created by PBL for ISBC code
1039 create_tlb1_entry 15, \
1040 1, BOOKE_PAGESZ_1M, \
1041 CONFIG_SYS_MONITOR_BASE & 0xfff00000, MAS2_I|MAS2_G, \
1042 CONFIG_SYS_PBI_FLASH_WINDOW & 0xfff00000, MAS3_SX|MAS3_SW|MAS3_SR, \
1046 * For Targets without CONFIG_SPL like P3, P5
1047 * and for targets with CONFIG_SPL like T1, T2, T4, only for
1048 * u-boot-spl i.e. CONFIG_SPL_BUILD
1050 #elif defined(CONFIG_RAMBOOT_PBL) && defined(CONFIG_NXP_ESBC) && \
1051 (!defined(CONFIG_SPL) || defined(CONFIG_SPL_BUILD))
1052 /* create a temp mapping in AS = 1 for mapping CONFIG_SYS_MONITOR_BASE
1053 * to L3 Address configured by PBL for ISBC code
1055 create_tlb1_entry 15, \
1056 1, BOOKE_PAGESZ_1M, \
1057 CONFIG_SYS_MONITOR_BASE & 0xfff00000, MAS2_I|MAS2_G, \
1058 CONFIG_SYS_INIT_L3_ADDR & 0xfff00000, MAS3_SX|MAS3_SW|MAS3_SR, \
1063 * create a temp mapping in AS=1 to the 1M CONFIG_SYS_MONITOR_BASE space, the main
1064 * image has been relocated to CONFIG_SYS_MONITOR_BASE on the second stage.
1066 create_tlb1_entry 15, \
1067 1, BOOKE_PAGESZ_1M, \
1068 CONFIG_SYS_MONITOR_BASE & 0xfff00000, MAS2_I|MAS2_G, \
1069 CONFIG_SYS_MONITOR_BASE & 0xfff00000, MAS3_SX|MAS3_SW|MAS3_SR, \
1073 /* create a temp mapping in AS=1 to the stack */
1074 #if defined(CONFIG_SYS_INIT_RAM_ADDR_PHYS_LOW) && \
1075 defined(CONFIG_SYS_INIT_RAM_ADDR_PHYS_HIGH)
1076 create_tlb1_entry 14, \
1077 1, BOOKE_PAGESZ_16K, \
1078 CONFIG_SYS_INIT_RAM_ADDR, 0, \
1079 CONFIG_SYS_INIT_RAM_ADDR_PHYS_LOW, MAS3_SX|MAS3_SW|MAS3_SR, \
1080 CONFIG_SYS_INIT_RAM_ADDR_PHYS_HIGH, r6
1083 create_tlb1_entry 14, \
1084 1, BOOKE_PAGESZ_16K, \
1085 CONFIG_SYS_INIT_RAM_ADDR, 0, \
1086 CONFIG_SYS_INIT_RAM_ADDR, MAS3_SX|MAS3_SW|MAS3_SR, \
1090 lis r6,MSR_IS|MSR_DS|MSR_DE@h
1091 ori r6,r6,MSR_IS|MSR_DS|MSR_DE@l
1093 ori r7,r7,switch_as@l
1100 /* L1 DCache is used for initial RAM */
1102 /* Allocate Initial RAM in data cache.
1104 lis r3,CONFIG_SYS_INIT_RAM_ADDR@h
1105 ori r3,r3,CONFIG_SYS_INIT_RAM_ADDR@l
1108 /* cache size * 1024 / (2 * L1 line size) */
1109 slwi r2, r2, (10 - 1 - L1_CACHE_SHIFT)
1114 #ifdef CONFIG_E6500 /* Lock/unlock L2 cache long with L1 */
1120 addi r3,r3,CONFIG_SYS_CACHELINE_SIZE
1123 /* Jump out the last 4K page and continue to 'normal' start */
1124 #if defined(CONFIG_SYS_RAMBOOT) || defined(CONFIG_SPL)
1125 /* We assume that we're already running at the address we're linked at */
1128 /* Calculate absolute address in FLASH and jump there */
1129 /*--------------------------------------------------------------*/
1130 lis r3,CONFIG_SYS_MONITOR_BASE@h
1131 ori r3,r3,CONFIG_SYS_MONITOR_BASE@l
1132 addi r3,r3,_start_cont - _start
1140 .long 0x27051956 /* U-BOOT Magic Number */
1141 .globl version_string
1143 .ascii U_BOOT_VERSION_STRING, "\0"
1148 /* Setup the stack in initial RAM,could be L2-as-SRAM or L1 dcache*/
1149 lis r3,(CONFIG_SYS_INIT_RAM_ADDR)@h
1150 ori r3,r3,((CONFIG_SYS_INIT_SP_OFFSET-16)&~0xf)@l /* Align to 16 */
1152 #if CONFIG_VAL(SYS_MALLOC_F_LEN)
1153 #if CONFIG_VAL(SYS_MALLOC_F_LEN) + GENERATED_GBL_DATA_SIZE > CONFIG_SYS_INIT_RAM_SIZE
1154 #error "SYS_MALLOC_F_LEN too large to fit into initial RAM."
1157 /* Leave 16+ byte for back chain termination and NULL return address */
1158 subi r3,r3,((CONFIG_VAL(SYS_MALLOC_F_LEN)+16+15)&~0xf)
1162 lis r4,(CONFIG_SYS_INIT_RAM_ADDR)@h
1163 ori r4,r4,(CONFIG_SYS_INIT_RAM_SIZE)@l
1172 #if CONFIG_VAL(SYS_MALLOC_F_LEN)
1173 lis r4,(CONFIG_SYS_INIT_RAM_ADDR)@h
1174 ori r4,r4,(CONFIG_SYS_GBL_DATA_OFFSET)@l
1176 addi r3,r3,16 /* Pre-relocation malloc area */
1177 stw r3,GD_MALLOC_BASE(r4)
1181 stw r0,0(r3) /* Terminate Back Chain */
1182 stw r0,+4(r3) /* NULL return address. */
1183 mr r1,r3 /* Transfer to SP(r1) */
1186 /* Needed for -msingle-pic-base */
1187 bl _GLOBAL_OFFSET_TABLE_@local-4
1190 /* Pass our potential ePAPR device tree pointer to cpu_init_early_f */
1195 /* switch back to AS = 0 */
1196 lis r3,(MSR_CE|MSR_ME|MSR_DE)@h
1197 ori r3,r3,(MSR_CE|MSR_ME|MSR_DE)@l
1201 bl cpu_init_f /* return boot_flag for calling board_init_f */
1205 /* NOTREACHED - board_init_f() does not return */
1208 .globl _start_of_vectors
1211 /* Critical input. */
1212 CRIT_EXCEPTION(0x0100, CriticalInput, CritcalInputException)
1215 MCK_EXCEPTION(0x200, MachineCheck, MachineCheckException)
1217 /* Data Storage exception. */
1218 STD_EXCEPTION(0x0300, DataStorage, UnknownException)
1220 /* Instruction Storage exception. */
1221 STD_EXCEPTION(0x0400, InstStorage, UnknownException)
1223 /* External Interrupt exception. */
1224 STD_EXCEPTION(0x0500, ExtInterrupt, ExtIntException)
1226 /* Alignment exception. */
1228 EXCEPTION_PROLOG(SRR0, SRR1)
1233 addi r3,r1,STACK_FRAME_OVERHEAD
1234 EXC_XFER_TEMPLATE(0x600, Alignment, AlignmentException,
1235 MSR_KERNEL, COPY_EE)
1237 /* Program check exception */
1239 EXCEPTION_PROLOG(SRR0, SRR1)
1240 addi r3,r1,STACK_FRAME_OVERHEAD
1241 EXC_XFER_TEMPLATE(0x700, ProgramCheck, ProgramCheckException,
1242 MSR_KERNEL, COPY_EE)
1244 /* No FPU on MPC85xx. This exception is not supposed to happen.
1246 STD_EXCEPTION(0x0800, FPUnavailable, UnknownException)
1247 STD_EXCEPTION(0x0900, SystemCall, UnknownException)
1248 STD_EXCEPTION(0x0a00, Decrementer, timer_interrupt)
1249 STD_EXCEPTION(0x0b00, IntervalTimer, UnknownException)
1250 STD_EXCEPTION(0x0c00, WatchdogTimer, UnknownException)
1252 STD_EXCEPTION(0x0d00, DataTLBError, UnknownException)
1253 STD_EXCEPTION(0x0e00, InstructionTLBError, UnknownException)
1255 CRIT_EXCEPTION(0x0f00, DebugBreakpoint, DebugException )
1257 .globl _end_of_vectors
1261 . = . + (0x100 - ( . & 0xff )) /* align for debug */
1264 * This code finishes saving the registers to the exception frame
1265 * and jumps to the appropriate handler for the exception.
1266 * Register r21 is pointer into trap frame, r1 has new stack pointer.
1267 * r23 is the address of the handler.
1269 .globl transfer_to_handler
1270 transfer_to_handler:
1278 mtspr SPRG2,r22 /* r1 is now kernel sp */
1280 mtctr r23 /* virtual address of handler */
1285 mfmsr r28 /* Disable interrupts */
1289 SYNC /* Some chip revs need this... */
1304 lwz r2,_NIP(r1) /* Restore environment */
1318 .globl invalidate_icache
1321 ori r0,r0,L1CSR1_ICFI
1326 blr /* entire I cache */
1328 .globl invalidate_dcache
1331 ori r0,r0,L1CSR0_DCFI
1338 .globl icache_enable
1341 bl invalidate_icache
1345 ori r4,r4,(L1CSR1_CPE | L1CSR1_ICE)@l
1346 oris r4,r4,(L1CSR1_CPE | L1CSR1_ICE)@h
1351 .globl icache_disable
1355 ori r3,r3,L1CSR1_ICE
1361 .globl icache_status
1364 andi. r3,r3,L1CSR1_ICE
1367 .globl dcache_enable
1370 bl invalidate_dcache
1374 ori r0,r0,(L1CSR0_CPE | L1CSR0_DCE)@l
1375 oris r0,r0,(L1CSR0_CPE | L1CSR0_DCE)@h
1382 .globl dcache_disable
1386 ori r4,r4,L1CSR0_DCE
1392 .globl dcache_status
1395 andi. r3,r3,L1CSR0_DCE
1398 /*------------------------------------------------------------------------------- */
1400 /* Description: Input 8 bits */
1401 /*------------------------------------------------------------------------------- */
1407 /*------------------------------------------------------------------------------- */
1408 /* Function: out8 */
1409 /* Description: Output 8 bits */
1410 /*------------------------------------------------------------------------------- */
1417 /*------------------------------------------------------------------------------- */
1418 /* Function: out16 */
1419 /* Description: Output 16 bits */
1420 /*------------------------------------------------------------------------------- */
1427 /*------------------------------------------------------------------------------- */
1428 /* Function: out16r */
1429 /* Description: Byte reverse and output 16 bits */
1430 /*------------------------------------------------------------------------------- */
1437 /*------------------------------------------------------------------------------- */
1438 /* Function: out32 */
1439 /* Description: Output 32 bits */
1440 /*------------------------------------------------------------------------------- */
1447 /*------------------------------------------------------------------------------- */
1448 /* Function: out32r */
1449 /* Description: Byte reverse and output 32 bits */
1450 /*------------------------------------------------------------------------------- */
1457 /*------------------------------------------------------------------------------- */
1458 /* Function: in16 */
1459 /* Description: Input 16 bits */
1460 /*------------------------------------------------------------------------------- */
1466 /*------------------------------------------------------------------------------- */
1467 /* Function: in16r */
1468 /* Description: Input 16 bits and byte reverse */
1469 /*------------------------------------------------------------------------------- */
1475 /*------------------------------------------------------------------------------- */
1476 /* Function: in32 */
1477 /* Description: Input 32 bits */
1478 /*------------------------------------------------------------------------------- */
1484 /*------------------------------------------------------------------------------- */
1485 /* Function: in32r */
1486 /* Description: Input 32 bits and byte reverse */
1487 /*------------------------------------------------------------------------------- */
1492 #endif /* !MINIMAL_SPL */
1494 /*------------------------------------------------------------------------------*/
1497 * void write_tlb(mas0, mas1, mas2, mas3, mas7)
1505 #ifdef CONFIG_ENABLE_36BIT_PHYS
1509 #ifdef CONFIG_SYS_BOOK3E_HV
1519 * void relocate_code(addr_sp, gd, addr_moni)
1521 * This "function" does not return, instead it continues in RAM
1522 * after relocating the monitor code.
1526 * r5 = length in bytes
1527 * r6 = cachelinesize
1529 .globl relocate_code
1531 mr r1,r3 /* Set new stack pointer */
1532 mr r9,r4 /* Save copy of Init Data pointer */
1533 mr r10,r5 /* Save copy of Destination Address */
1536 #ifndef CONFIG_SPL_SKIP_RELOCATE
1537 mr r3,r5 /* Destination Address */
1538 lis r4,CONFIG_SYS_MONITOR_BASE@h /* Source Address */
1539 ori r4,r4,CONFIG_SYS_MONITOR_BASE@l
1540 lwz r5,GOT(__init_end)
1542 li r6,CONFIG_SYS_CACHELINE_SIZE /* Cache Line Size */
1547 * New GOT-PTR = (old GOT-PTR - CONFIG_SYS_MONITOR_BASE) + Destination Address
1553 /* First our own GOT */
1555 /* the the one used by the C code */
1565 beq cr1,4f /* In place copy is not necessary */
1566 beq 7f /* Protect against 0 count */
1585 * Now flush the cache: note that we must start from a cache aligned
1586 * address. Otherwise we might miss one cache line.
1590 beq 7f /* Always flush prefetch queue in any case */
1598 sync /* Wait for all dcbst to complete on bus */
1604 7: sync /* Wait for all icbi to complete on bus */
1608 * We are done. Do not return, instead branch to second part of board
1609 * initialization, now running from RAM.
1612 addi r0,r10,in_ram - _start
1615 * As IVPR is going to point RAM address,
1616 * Make sure IVOR15 has valid opcode to support debugger
1621 * Re-point the IVPR at RAM
1626 blr /* NEVER RETURNS! */
1632 * Relocation Function, r12 point to got2+0x8000
1634 * Adjust got2 pointers, no need to check for 0, this code
1635 * already puts a few entries in the table.
1637 li r0,__got2_entries@sectoff@l
1638 la r3,GOT(_GOT2_TABLE_)
1639 lwz r11,GOT(_GOT2_TABLE_)
1651 * Now adjust the fixups and the pointers to the fixups
1652 * in case we need to move ourselves again.
1654 li r0,__fixup_entries@sectoff@l
1655 lwz r3,GOT(_FIXUP_TABLE_)
1671 * Now clear BSS segment
1673 lwz r3,GOT(__bss_start)
1674 lwz r4,GOT(__bss_end)
1687 mr r3,r9 /* Init Data pointer */
1688 mr r4,r10 /* Destination Address */
1693 * Copy exception vector code to low memory
1696 * r7: source address, r8: end address, r9: target address
1701 bl _GLOBAL_OFFSET_TABLE_-4
1704 /* Update IVORs as per relocation */
1707 lwz r4,CriticalInput@got(r12)
1708 mtspr IVOR0,r4 /* 0: Critical input */
1709 lwz r4,MachineCheck@got(r12)
1710 mtspr IVOR1,r4 /* 1: Machine check */
1711 lwz r4,DataStorage@got(r12)
1712 mtspr IVOR2,r4 /* 2: Data storage */
1713 lwz r4,InstStorage@got(r12)
1714 mtspr IVOR3,r4 /* 3: Instruction storage */
1715 lwz r4,ExtInterrupt@got(r12)
1716 mtspr IVOR4,r4 /* 4: External interrupt */
1717 lwz r4,Alignment@got(r12)
1718 mtspr IVOR5,r4 /* 5: Alignment */
1719 lwz r4,ProgramCheck@got(r12)
1720 mtspr IVOR6,r4 /* 6: Program check */
1721 lwz r4,FPUnavailable@got(r12)
1722 mtspr IVOR7,r4 /* 7: floating point unavailable */
1723 lwz r4,SystemCall@got(r12)
1724 mtspr IVOR8,r4 /* 8: System call */
1725 /* 9: Auxiliary processor unavailable(unsupported) */
1726 lwz r4,Decrementer@got(r12)
1727 mtspr IVOR10,r4 /* 10: Decrementer */
1728 lwz r4,IntervalTimer@got(r12)
1729 mtspr IVOR11,r4 /* 11: Interval timer */
1730 lwz r4,WatchdogTimer@got(r12)
1731 mtspr IVOR12,r4 /* 12: Watchdog timer */
1732 lwz r4,DataTLBError@got(r12)
1733 mtspr IVOR13,r4 /* 13: Data TLB error */
1734 lwz r4,InstructionTLBError@got(r12)
1735 mtspr IVOR14,r4 /* 14: Instruction TLB error */
1736 lwz r4,DebugBreakpoint@got(r12)
1737 mtspr IVOR15,r4 /* 15: Debug */
1742 .globl unlock_ram_in_cache
1743 unlock_ram_in_cache:
1744 /* invalidate the INIT_RAM section */
1745 lis r3,(CONFIG_SYS_INIT_RAM_ADDR & ~(CONFIG_SYS_CACHELINE_SIZE-1))@h
1746 ori r3,r3,(CONFIG_SYS_INIT_RAM_ADDR & ~(CONFIG_SYS_CACHELINE_SIZE-1))@l
1749 slwi r4,r4,(10 - 1 - L1_CACHE_SHIFT)
1752 #ifdef CONFIG_E6500 /* lock/unlock L2 cache long with L1 */
1758 addi r3,r3,CONFIG_SYS_CACHELINE_SIZE
1762 /* Invalidate the TLB entries for the cache */
1763 lis r3,CONFIG_SYS_INIT_RAM_ADDR@h
1764 ori r3,r3,CONFIG_SYS_INIT_RAM_ADDR@l
1777 mfspr r3,SPRN_L1CFG0
1779 rlwinm r5,r3,9,3 /* Extract cache block size */
1780 twlgti r5,1 /* Only 32 and 64 byte cache blocks
1781 * are currently defined.
1784 subfic r6,r5,2 /* r6 = log2(1KiB / cache block size) -
1785 * log2(number of ways)
1787 slw r5,r4,r5 /* r5 = cache block size */
1789 rlwinm r7,r3,0,0xff /* Extract number of KiB in the cache */
1790 mulli r7,r7,13 /* An 8-way cache will require 13
1795 /* save off HID0 and set DCFA */
1797 ori r9,r8,HID0_DCFA@l
1804 1: lwz r3,0(r4) /* Load... */
1812 1: dcbf 0,r4 /* ...and flush. */
1821 #endif /* !MINIMAL_SPL */