2 * Copyright 2004 Freescale Semiconductor.
3 * Copyright (C) 2003 Motorola,Inc.
4 * Xianghua Xiao<X.Xiao@motorola.com>
6 * See file CREDITS for list of people who contributed to this
9 * This program is free software; you can redistribute it and/or
10 * modify it under the terms of the GNU General Public License as
11 * published by the Free Software Foundation; either version 2 of
12 * the License, or (at your option) any later version.
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU General Public License for more details.
19 * You should have received a copy of the GNU General Public License
20 * along with this program; if not, write to the Free Software
21 * Foundation, Inc., 59 Temple Place, Suite 330, Boston,
25 /* U-Boot Startup Code for Motorola 85xx PowerPC based Embedded Boards
27 * The processor starts at 0xfffffffc and the code is first executed in the
28 * last 4K page(0xfffff000-0xffffffff) in flash/rom.
36 #define _LINUX_CONFIG_H 1 /* avoid reading Linux autoconf.h file */
38 #include <ppc_asm.tmpl>
41 #include <asm/cache.h>
44 #ifndef CONFIG_IDENT_STRING
45 #define CONFIG_IDENT_STRING ""
49 #define MSR_KERNEL ( MSR_ME ) /* Machine Check */
52 * Set up GOT: Global Offset Table
54 * Use r14 to access the GOT
57 GOT_ENTRY(_GOT2_TABLE_)
58 GOT_ENTRY(_FIXUP_TABLE_)
61 GOT_ENTRY(_start_of_vectors)
62 GOT_ENTRY(_end_of_vectors)
63 GOT_ENTRY(transfer_to_handler)
67 GOT_ENTRY(__bss_start)
71 * e500 Startup -- after reset only the last 4KB of the effective
72 * address space is mapped in the MMU L2 TLB1 Entry0. The .bootpg
73 * section is located at THIS LAST page and basically does three
74 * things: clear some registers, set up exception tables and
75 * add more TLB entries for 'larger spaces'(e.g. the boot rom) to
76 * continue the boot procedure.
78 * Once the boot rom is mapped by TLB entries we can proceed
79 * with normal startup.
88 lis r1, PVR_85xx_REV1@h
89 ori r1, r1, PVR_85xx_REV1@l
93 /* Semi-bogus errata fixup for Rev 1 */
98 * Before invalidating MMU L1/L2, read TLB1 Entry 0 and then
99 * write it back immediately to fixup a Rev 1 bug (Errata CPU4)
100 * for this initial TLB1 entry 0, otherwise the TLB1 entry 0
101 * will be invalidated (incorrectly).
111 * Clear and set up some registers.
112 * Note: Some registers need strict synchronization by
113 * sync/mbar/msync/isync when being "mtspr".
114 * BookE: isync before PID,tlbivax,tlbwe
115 * BookE: isync after MSR,PID; msync_isync after tlbivax & tlbwe
116 * E500: msync,isync before L1CSR0
117 * E500: isync after BBEAR,BBTAR,BUCSR,DBCR0,DBCR1,HID0,HID1,
118 * L1CSR0, L1CSR1, MAS[0,1,2,3,4,6],MMUCSR0, PID[0,1,2],
122 /* invalidate d-cache */
130 /* disable d-cache */
134 /* invalidate i-cache */
140 /* disable i-cache */
145 /* clear registers */
158 /* not needed and conflicts with some debuggers */
162 /* not needed and conflicts with some debuggers */
169 mtspr DBSR,r1 /* Clear all valid bits */
176 mtspr BUCSR,r0 /* disable branch prediction */
179 #if defined(CONFIG_ENABLE_36BIT_PHYS)
184 /* Setup interrupt vectors */
189 mtspr IVOR0,r1 /* 0: Critical input */
191 mtspr IVOR1,r1 /* 1: Machine check */
193 mtspr IVOR2,r1 /* 2: Data storage */
195 mtspr IVOR3,r1 /* 3: Instruction storage */
197 mtspr IVOR4,r1 /* 4: External interrupt */
199 mtspr IVOR5,r1 /* 5: Alignment */
201 mtspr IVOR6,r1 /* 6: Program check */
203 mtspr IVOR7,r1 /* 7: floating point unavailable */
205 mtspr IVOR8,r1 /* 8: System call */
206 /* 9: Auxiliary processor unavailable(unsupported) */
208 mtspr IVOR10,r1 /* 10: Decrementer */
210 mtspr IVOR11,r1 /* 11: Interval timer */
212 mtspr IVOR12,r1 /* 12: Watchdog timer */
214 mtspr IVOR13,r1 /* 13: Data TLB error */
216 mtspr IVOR14,r1 /* 14: Instruction TLB error */
218 mtspr IVOR15,r1 /* 15: Debug */
221 * Invalidate MMU L1/L2
223 * Note: There is a fixup earlier for Errata CPU4 on
224 * Rev 1 parts that must precede this MMU invalidation.
231 * Invalidate all TLB0 entries.
237 * To avoid REV1 Errata CPU6 issues, make sure
238 * the instruction following tlbivax is not a store.
242 * After reset, CCSRBAR is located at CFG_CCSRBAR_DEFAULT, i.e.
243 * 0xff700000-0xff800000. We need add a TLB1 entry for this 1MB
244 * region before we can access any CCSR registers such as L2
245 * registers, Local Access Registers,etc. We will also re-allocate
246 * CFG_CCSRBAR_DEFAULT to CFG_CCSRBAR immediately after TLB1 setup.
248 * Please refer to board-specif directory for TLB1 entry configuration.
249 * (e.g. board/<yourboard>/init.S)
254 lwzu r4,0(r5) /* how many TLB1 entries we actually use */
272 #if (CFG_CCSRBAR_DEFAULT != CFG_CCSRBAR)
273 /* Special sequence needed to update CCSRBAR itself */
274 lis r4, CFG_CCSRBAR_DEFAULT@h
275 ori r4, r4, CFG_CCSRBAR_DEFAULT@l
277 lis r5, CFG_CCSRBAR@h
278 ori r5, r5, CFG_CCSRBAR@l
288 lis r3, CFG_CCSRBAR@h
289 lwz r5, CFG_CCSRBAR@l(r3)
294 /* set up local access windows, defined at board/<boardname>/init.S */
296 ori r7,r7,CFG_CCSRBAR@l
300 lwzu r5,0(r6) /* how many windows we actually use */
303 li r2,0x0c28 /* the first pair is reserved for boot-over-rio-or-pci */
314 /* Jump out the last 4K page and continue to 'normal' start */
319 mtspr SRR1,r0 /* Keep things disabled for now */
325 * r3 - 1st arg to board_init(): IMMP pointer
326 * r4 - 2nd arg to board_init(): boot flag
329 .long 0x27051956 /* U-BOOT Magic Number */
330 .globl version_string
332 .ascii U_BOOT_VERSION
333 .ascii " (", __DATE__, " - ", __TIME__, ")"
334 .ascii CONFIG_IDENT_STRING, "\0"
336 . = EXC_OFF_SYS_RESET
339 /* Clear and set up some registers. */
342 mtspr DEC,r0 /* prevent dec exceptions */
343 mttbl r0 /* prevent fit & wdt exceptions */
345 mtspr TSR,r1 /* clear all timer exception status */
346 mtspr TCR,r0 /* disable all */
347 mtspr ESR,r0 /* clear exception syndrome register */
348 mtspr MCSR,r0 /* machine check syndrome register */
349 mtxer r0 /* clear integer exception register */
350 lis r1,0x0002 /* set CE bit (Critical Exceptions) */
351 ori r1,r1,0x1200 /* set ME/DE bit */
352 mtmsr r1 /* change MSR */
355 /* Enable Time Base and Select Time Base Clock */
356 lis r0,HID0_EMCP@h /* Enable machine check */
357 ori r0,r0,0x4000 /* time base is processor clock */
358 #if defined(CONFIG_ENABLE_36BIT_PHYS)
359 ori r0,r0,0x0080 /* enable MAS7 updates */
363 #if defined(CONFIG_ADDR_STREAMING)
370 /* Enable Branch Prediction */
371 #if defined(CONFIG_BTB)
372 li r0,0x201 /* BBFI = 1, BPEN = 1 */
376 #if defined(CFG_INIT_DBCR)
379 mtspr DBSR,r1 /* Clear all status bits */
380 lis r0,CFG_INIT_DBCR@h /* DBCR0[IDM] must be set */
381 ori r0,r0,CFG_INIT_DBCR@l
385 /* L1 DCache is used for initial RAM */
389 mtspr L1CSR0, r2 /* enable/invalidate L1 Dcache */
392 /* Allocate Initial RAM in data cache.
394 lis r3, CFG_INIT_RAM_ADDR@h
395 ori r3, r3, CFG_INIT_RAM_ADDR@l
396 li r2, 512 /* 512*32=16K */
406 /* Calculate absolute address in FLASH and jump there */
407 /*--------------------------------------------------------------*/
408 lis r3, CFG_MONITOR_BASE@h
409 ori r3, r3, CFG_MONITOR_BASE@l
410 addi r3, r3, in_flash - _start + EXC_OFF_SYS_RESET
415 #endif /* CFG_RAMBOOT */
417 /* Setup the stack in initial RAM,could be L2-as-SRAM or L1 dcache*/
418 lis r1,CFG_INIT_RAM_ADDR@h
419 ori r1,r1,CFG_INIT_SP_OFFSET@l
423 stwu r0,-4(r1) /* Terminate call chain */
425 stwu r1,-8(r1) /* Save back chain and move SP */
426 lis r0,RESET_VECTOR@h /* Address of reset vector */
427 ori r0,r0, RESET_VECTOR@l
428 stwu r1,-8(r1) /* Save back chain and move SP */
429 stw r0,+12(r1) /* Save return addr (underflow vect) */
437 /* --FIXME-- machine check with MCSRRn and rfmci */
439 .globl _start_of_vectors
442 /* Critical input. */
443 CRIT_EXCEPTION(0x0100, CritcalInput, CritcalInputException)
445 /* Machine check --FIXME-- Should be MACH_EXCEPTION */
446 CRIT_EXCEPTION(0x0200, MachineCheck, MachineCheckException)
448 /* Data Storage exception. */
449 STD_EXCEPTION(0x0300, DataStorage, UnknownException)
451 /* Instruction Storage exception. */
452 STD_EXCEPTION(0x0400, InstStorage, UnknownException)
454 /* External Interrupt exception. */
455 STD_EXCEPTION(0x0500, ExtInterrupt, UnknownException)
457 /* Alignment exception. */
460 EXCEPTION_PROLOG(SRR0, SRR1)
465 addi r3,r1,STACK_FRAME_OVERHEAD
467 rlwimi r20,r23,0,16,16 /* copy EE bit from saved MSR */
468 lwz r6,GOT(transfer_to_handler)
472 .long AlignmentException - _start + EXC_OFF_SYS_RESET
473 .long int_return - _start + EXC_OFF_SYS_RESET
475 /* Program check exception */
478 EXCEPTION_PROLOG(SRR0, SRR1)
479 addi r3,r1,STACK_FRAME_OVERHEAD
481 rlwimi r20,r23,0,16,16 /* copy EE bit from saved MSR */
482 lwz r6,GOT(transfer_to_handler)
486 .long ProgramCheckException - _start + EXC_OFF_SYS_RESET
487 .long int_return - _start + EXC_OFF_SYS_RESET
489 /* No FPU on MPC85xx. This exception is not supposed to happen.
491 STD_EXCEPTION(0x0800, FPUnavailable, UnknownException)
495 * r0 - SYSCALL number
499 addis r11,r0,0 /* get functions table addr */
500 ori r11,r11,0 /* Note: this code is patched in trap_init */
501 addis r12,r0,0 /* get number of functions */
507 rlwinm r0,r0,2,0,31 /* fn_addr = fn_tbl[r0] */
511 li r20,0xd00-4 /* Get stack pointer */
513 subi r12,r12,12 /* Adjust stack pointer */
514 li r0,0xc00+_end_back-SystemCall
515 cmplw 0, r0, r12 /* Check stack overflow */
526 li r12,0xc00+_back-SystemCall
534 mfmsr r11 /* Disable interrupts */
538 SYNC /* Some chip revs need this... */
542 li r12,0xd00-4 /* restore regs */
552 addi r12,r12,12 /* Adjust stack pointer */
560 STD_EXCEPTION(0x0a00, Decrementer, timer_interrupt)
561 STD_EXCEPTION(0x0b00, IntervalTimer, UnknownException)
562 STD_EXCEPTION(0x0c00, WatchdogTimer, UnknownException)
564 STD_EXCEPTION(0x0d00, DataTLBError, UnknownException)
565 STD_EXCEPTION(0x0e00, InstructionTLBError, UnknownException)
567 CRIT_EXCEPTION(0x0f00, DebugBreakpoint, DebugException )
569 .globl _end_of_vectors
576 * This code finishes saving the registers to the exception frame
577 * and jumps to the appropriate handler for the exception.
578 * Register r21 is pointer into trap frame, r1 has new stack pointer.
580 .globl transfer_to_handler
592 andi. r24,r23,0x3f00 /* get vector offset */
596 mtspr SPRG2,r22 /* r1 is now kernel sp */
598 lwz r24,0(r23) /* virtual address of handler */
599 lwz r23,4(r23) /* where to go when done */
604 rfi /* jump to handler, enable MMU */
607 mfmsr r28 /* Disable interrupts */
611 SYNC /* Some chip revs need this... */
626 lwz r2,_NIP(r1) /* Restore environment */
637 mfmsr r28 /* Disable interrupts */
641 SYNC /* Some chip revs need this... */
656 lwz r2,_NIP(r1) /* Restore environment */
658 mtspr 990,r2 /* SRR2 */
659 mtspr 991,r0 /* SRR3 */
673 blr /* entire I cache */
697 .globl icache_disable
701 ori r1,r1,0xfffffffe@l
728 .globl dcache_disable
732 ori r1,r1,0xfffffffe@l
766 /*------------------------------------------------------------------------------- */
768 /* Description: Input 8 bits */
769 /*------------------------------------------------------------------------------- */
775 /*------------------------------------------------------------------------------- */
777 /* Description: Output 8 bits */
778 /*------------------------------------------------------------------------------- */
784 /*------------------------------------------------------------------------------- */
785 /* Function: out16 */
786 /* Description: Output 16 bits */
787 /*------------------------------------------------------------------------------- */
793 /*------------------------------------------------------------------------------- */
794 /* Function: out16r */
795 /* Description: Byte reverse and output 16 bits */
796 /*------------------------------------------------------------------------------- */
802 /*------------------------------------------------------------------------------- */
803 /* Function: out32 */
804 /* Description: Output 32 bits */
805 /*------------------------------------------------------------------------------- */
811 /*------------------------------------------------------------------------------- */
812 /* Function: out32r */
813 /* Description: Byte reverse and output 32 bits */
814 /*------------------------------------------------------------------------------- */
820 /*------------------------------------------------------------------------------- */
822 /* Description: Input 16 bits */
823 /*------------------------------------------------------------------------------- */
829 /*------------------------------------------------------------------------------- */
830 /* Function: in16r */
831 /* Description: Input 16 bits and byte reverse */
832 /*------------------------------------------------------------------------------- */
838 /*------------------------------------------------------------------------------- */
840 /* Description: Input 32 bits */
841 /*------------------------------------------------------------------------------- */
847 /*------------------------------------------------------------------------------- */
848 /* Function: in32r */
849 /* Description: Input 32 bits and byte reverse */
850 /*------------------------------------------------------------------------------- */
856 /*------------------------------------------------------------------------------- */
857 /* Function: ppcDcbf */
858 /* Description: Data Cache block flush */
859 /* Input: r3 = effective address */
861 /*------------------------------------------------------------------------------- */
867 /*------------------------------------------------------------------------------- */
868 /* Function: ppcDcbi */
869 /* Description: Data Cache block Invalidate */
870 /* Input: r3 = effective address */
872 /*------------------------------------------------------------------------------- */
878 /*--------------------------------------------------------------------------
880 * Description: Data Cache block zero.
881 * Input: r3 = effective address
883 *-------------------------------------------------------------------------- */
890 /*------------------------------------------------------------------------------- */
891 /* Function: ppcSync */
892 /* Description: Processor Synchronize */
895 /*------------------------------------------------------------------------------- */
901 /*------------------------------------------------------------------------------*/
904 * void relocate_code (addr_sp, gd, addr_moni)
906 * This "function" does not return, instead it continues in RAM
907 * after relocating the monitor code.
911 * r5 = length in bytes
916 mr r1, r3 /* Set new stack pointer */
917 mr r9, r4 /* Save copy of Init Data pointer */
918 mr r10, r5 /* Save copy of Destination Address */
920 mr r3, r5 /* Destination Address */
921 lis r4, CFG_MONITOR_BASE@h /* Source Address */
922 ori r4, r4, CFG_MONITOR_BASE@l
923 lwz r5,GOT(__init_end)
925 li r6, CFG_CACHELINE_SIZE /* Cache Line Size */
930 * New GOT-PTR = (old GOT-PTR - CFG_MONITOR_BASE) + Destination Address
936 /* First our own GOT */
938 /* the the one used by the C code */
948 beq cr1,4f /* In place copy is not necessary */
949 beq 7f /* Protect against 0 count */
968 * Now flush the cache: note that we must start from a cache aligned
969 * address. Otherwise we might miss one cache line.
973 beq 7f /* Always flush prefetch queue in any case */
981 sync /* Wait for all dcbst to complete on bus */
987 7: sync /* Wait for all icbi to complete on bus */
991 * Re-point the IVPR at RAM
996 * We are done. Do not return, instead branch to second part of board
997 * initialization, now running from RAM.
1000 addi r0, r10, in_ram - _start + EXC_OFF_SYS_RESET
1002 blr /* NEVER RETURNS! */
1007 * Relocation Function, r14 point to got2+0x8000
1009 * Adjust got2 pointers, no need to check for 0, this code
1010 * already puts a few entries in the table.
1012 li r0,__got2_entries@sectoff@l
1013 la r3,GOT(_GOT2_TABLE_)
1014 lwz r11,GOT(_GOT2_TABLE_)
1024 * Now adjust the fixups and the pointers to the fixups
1025 * in case we need to move ourselves again.
1027 2: li r0,__fixup_entries@sectoff@l
1028 lwz r3,GOT(_FIXUP_TABLE_)
1042 * Now clear BSS segment
1044 lwz r3,GOT(__bss_start)
1058 mr r3, r9 /* Init Data pointer */
1059 mr r4, r10 /* Destination Address */
1063 * Copy exception vector code to low memory
1066 * r7: source address, r8: end address, r9: target address
1071 lwz r8, GOT(_end_of_vectors)
1073 li r9, 0x100 /* reset vector always at 0x100 */
1076 bgelr /* return if r7>=r8 - just in case */
1078 mflr r4 /* save link register */
1088 * relocate `hdlr' and `int_return' entries
1090 li r7, .L_MachineCheck - _start + EXC_OFF_SYS_RESET
1092 li r7, .L_DataStorage - _start + EXC_OFF_SYS_RESET
1094 li r7, .L_InstStorage - _start + EXC_OFF_SYS_RESET
1096 li r7, .L_ExtInterrupt - _start + EXC_OFF_SYS_RESET
1098 li r7, .L_Alignment - _start + EXC_OFF_SYS_RESET
1100 li r7, .L_ProgramCheck - _start + EXC_OFF_SYS_RESET
1102 li r7, .L_FPUnavailable - _start + EXC_OFF_SYS_RESET
1104 li r7, .L_Decrementer - _start + EXC_OFF_SYS_RESET
1106 li r7, .L_IntervalTimer - _start + EXC_OFF_SYS_RESET
1107 li r8, _end_of_vectors - _start + EXC_OFF_SYS_RESET
1110 addi r7, r7, 0x100 /* next exception vector */
1117 mtlr r4 /* restore link register */
1121 * Function: relocate entries for one exception vector
1124 lwz r0, 0(r7) /* hdlr ... */
1125 add r0, r0, r3 /* ... += dest_addr */
1128 lwz r0, 4(r7) /* int_return ... */
1129 add r0, r0, r3 /* ... += dest_addr */
1134 #ifdef CFG_INIT_RAM_LOCK
1135 .globl unlock_ram_in_cache
1136 unlock_ram_in_cache:
1137 /* invalidate the INIT_RAM section */
1138 lis r3, (CFG_INIT_RAM_ADDR & ~31)@h
1139 ori r3, r3, (CFG_INIT_RAM_ADDR & ~31)@l
1146 sync /* Wait for all icbi to complete on bus */