Archipelago » qemu

/*

 * QEMU PC System Emulator

 * 

 * Copyright (c) 2003 Fabrice Bellard

 * 

 * Permission is hereby granted, free of charge, to any person obtaining a copy

 * of this software and associated documentation files (the "Software"), to deal

 * in the Software without restriction, including without limitation the rights

 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell

 * copies of the Software, and to permit persons to whom the Software is

 * furnished to do so, subject to the following conditions:

 *

 * The above copyright notice and this permission notice shall be included in

 * all copies or substantial portions of the Software.

 *

 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR

 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL

 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER

 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,

 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN

 * THE SOFTWARE.

 */

#include <stdlib.h>

#include <stdio.h>

#include <stdarg.h>

#include <string.h>

#include <getopt.h>

#include <inttypes.h>

#include <unistd.h>

#include <sys/mman.h>

#include <fcntl.h>

#include <signal.h>

#include <time.h>

#include <sys/time.h>

#include <malloc.h>

#include <termios.h>

#include <sys/poll.h>

#include <errno.h>

#include <sys/wait.h>

#include <sys/ioctl.h>

#include <sys/socket.h>

#include <linux/if.h>

#include <linux/if_tun.h>

#include "cpu.h"

#include "disas.h"

#include "thunk.h"

#include "vl.h"

#define DEFAULT_NETWORK_SCRIPT "/etc/qemu-ifup"

#define BIOS_FILENAME "bios.bin"

#define VGABIOS_FILENAME "vgabios.bin"

//#define DEBUG_UNUSED_IOPORT

//#define DEBUG_IRQ_LATENCY

/* output Bochs bios info messages */

//#define DEBUG_BIOS

//#define DEBUG_CMOS

/* debug PIC */

//#define DEBUG_PIC

/* debug NE2000 card */

//#define DEBUG_NE2000

/* debug PC keyboard */

//#define DEBUG_KBD

/* debug PC keyboard : only mouse */

//#define DEBUG_MOUSE

//#define DEBUG_SERIAL

#define PHYS_RAM_BASE     0xac000000

#define PHYS_RAM_MAX_SIZE (256 * 1024 * 1024)

#define KERNEL_LOAD_ADDR   0x00100000

#define INITRD_LOAD_ADDR   0x00400000

#define KERNEL_PARAMS_ADDR 0x00090000

#define GUI_REFRESH_INTERVAL 30 

/* from plex86 (BSD license) */

struct  __attribute__ ((packed)) linux_params {

  // For 0x00..0x3f, see 'struct screen_info' in linux/include/linux/tty.h.

  // I just padded out the VESA parts, rather than define them.

  /* 0x000 */ uint8_t   orig_x;

  /* 0x001 */ uint8_t   orig_y;

  /* 0x002 */ uint16_t  ext_mem_k;

  /* 0x004 */ uint16_t  orig_video_page;

  /* 0x006 */ uint8_t   orig_video_mode;

  /* 0x007 */ uint8_t   orig_video_cols;

  /* 0x008 */ uint16_t  unused1;

  /* 0x00a */ uint16_t  orig_video_ega_bx;

  /* 0x00c */ uint16_t  unused2;

  /* 0x00e */ uint8_t   orig_video_lines;

  /* 0x00f */ uint8_t   orig_video_isVGA;

  /* 0x010 */ uint16_t  orig_video_points;

  /* 0x012 */ uint8_t   pad0[0x20 - 0x12]; // VESA info.

  /* 0x020 */ uint16_t  cl_magic;  // Commandline magic number (0xA33F)

  /* 0x022 */ uint16_t  cl_offset; // Commandline offset.  Address of commandline

                                 // is calculated as 0x90000 + cl_offset, bu

                                 // only if cl_magic == 0xA33F.

  /* 0x024 */ uint8_t   pad1[0x40 - 0x24]; // VESA info.

  /* 0x040 */ uint8_t   apm_bios_info[20]; // struct apm_bios_info

  /* 0x054 */ uint8_t   pad2[0x80 - 0x54];

  // Following 2 from 'struct drive_info_struct' in drivers/block/cciss.h.

  // Might be truncated?

  /* 0x080 */ uint8_t   hd0_info[16]; // hd0-disk-parameter from intvector 0x41

  /* 0x090 */ uint8_t   hd1_info[16]; // hd1-disk-parameter from intvector 0x46

  // System description table truncated to 16 bytes

  // From 'struct sys_desc_table_struct' in linux/arch/i386/kernel/setup.c.

  /* 0x0a0 */ uint16_t  sys_description_len;

  /* 0x0a2 */ uint8_t   sys_description_table[14];

                        // [0] machine id

                        // [1] machine submodel id

                        // [2] BIOS revision

                        // [3] bit1: MCA bus

  /* 0x0b0 */ uint8_t   pad3[0x1e0 - 0xb0];

  /* 0x1e0 */ uint32_t  alt_mem_k;

  /* 0x1e4 */ uint8_t   pad4[4];

  /* 0x1e8 */ uint8_t   e820map_entries;

  /* 0x1e9 */ uint8_t   eddbuf_entries; // EDD_NR

  /* 0x1ea */ uint8_t   pad5[0x1f1 - 0x1ea];

  /* 0x1f1 */ uint8_t   setup_sects; // size of setup.S, number of sectors

  /* 0x1f2 */ uint16_t  mount_root_rdonly; // MOUNT_ROOT_RDONLY (if !=0)

  /* 0x1f4 */ uint16_t  sys_size; // size of compressed kernel-part in the

                                // (b)zImage-file (in 16 byte units, rounded up)

  /* 0x1f6 */ uint16_t  swap_dev; // (unused AFAIK)

  /* 0x1f8 */ uint16_t  ramdisk_flags;

  /* 0x1fa */ uint16_t  vga_mode; // (old one)

  /* 0x1fc */ uint16_t  orig_root_dev; // (high=Major, low=minor)

  /* 0x1fe */ uint8_t   pad6[1];

  /* 0x1ff */ uint8_t   aux_device_info;

  /* 0x200 */ uint16_t  jump_setup; // Jump to start of setup code,

                                  // aka "reserved" field.

  /* 0x202 */ uint8_t   setup_signature[4]; // Signature for SETUP-header, ="HdrS"

  /* 0x206 */ uint16_t  header_format_version; // Version number of header format;

  /* 0x208 */ uint8_t   setup_S_temp0[8]; // Used by setup.S for communication with

                                        // boot loaders, look there.

  /* 0x210 */ uint8_t   loader_type;

                        // 0 for old one.

                        // else 0xTV:

                        //   T=0: LILO

                        //   T=1: Loadlin

                        //   T=2: bootsect-loader

                        //   T=3: SYSLINUX

                        //   T=4: ETHERBOOT

                        //   V=version

  /* 0x211 */ uint8_t   loadflags;

                        // bit0 = 1: kernel is loaded high (bzImage)

                        // bit7 = 1: Heap and pointer (see below) set by boot

                        //   loader.

  /* 0x212 */ uint16_t  setup_S_temp1;

  /* 0x214 */ uint32_t  kernel_start;

  /* 0x218 */ uint32_t  initrd_start;

  /* 0x21c */ uint32_t  initrd_size;

  /* 0x220 */ uint8_t   setup_S_temp2[4];

  /* 0x224 */ uint16_t  setup_S_heap_end_pointer;

  /* 0x226 */ uint8_t   pad7[0x2d0 - 0x226];

  /* 0x2d0 : Int 15, ax=e820 memory map. */

  // (linux/include/asm-i386/e820.h, 'struct e820entry')

#define E820MAX  32

#define E820_RAM  1

#define E820_RESERVED 2

#define E820_ACPI 3 /* usable as RAM once ACPI tables have been read */

#define E820_NVS  4

  struct {

    uint64_t addr;

    uint64_t size;

    uint32_t type;

    } e820map[E820MAX];

  /* 0x550 */ uint8_t   pad8[0x600 - 0x550];

  // BIOS Enhanced Disk Drive Services.

  // (From linux/include/asm-i386/edd.h, 'struct edd_info')

  // Each 'struct edd_info is 78 bytes, times a max of 6 structs in array.

  /* 0x600 */ uint8_t   eddbuf[0x7d4 - 0x600];

  /* 0x7d4 */ uint8_t   pad9[0x800 - 0x7d4];

  /* 0x800 */ uint8_t   commandline[0x800];

  /* 0x1000 */

  uint64_t gdt_table[256];

  uint64_t idt_table[48];

};

#define KERNEL_CS     0x10

#define KERNEL_DS     0x18

/* XXX: use a two level table to limit memory usage */

#define MAX_IOPORTS 65536

static const char *bios_dir = CONFIG_QEMU_SHAREDIR;

char phys_ram_file[1024];

CPUX86State *global_env;

CPUX86State *cpu_single_env;

IOPortReadFunc *ioport_read_table[3][MAX_IOPORTS];

IOPortWriteFunc *ioport_write_table[3][MAX_IOPORTS];

BlockDriverState *bs_table[MAX_DISKS];

int vga_ram_size;

static DisplayState display_state;

int nographic;

int term_inited;

int64_t ticks_per_sec;

int boot_device = 'c';

/***********************************************************/

/* x86 io ports */

uint32_t default_ioport_readb(CPUX86State *env, uint32_t address)

{

#ifdef DEBUG_UNUSED_IOPORT

    fprintf(stderr, "inb: port=0x%04x\n", address);

#endif

    return 0xff;

}

void default_ioport_writeb(CPUX86State *env, uint32_t address, uint32_t data)

{

#ifdef DEBUG_UNUSED_IOPORT

    fprintf(stderr, "outb: port=0x%04x data=0x%02x\n", address, data);

#endif

}

/* default is to make two byte accesses */

uint32_t default_ioport_readw(CPUX86State *env, uint32_t address)

{

    uint32_t data;

    data = ioport_read_table[0][address & (MAX_IOPORTS - 1)](env, address);

    data |= ioport_read_table[0][(address + 1) & (MAX_IOPORTS - 1)](env, address + 1) << 8;

    return data;

}

void default_ioport_writew(CPUX86State *env, uint32_t address, uint32_t data)

{

    ioport_write_table[0][address & (MAX_IOPORTS - 1)](env, address, data & 0xff);

    ioport_write_table[0][(address + 1) & (MAX_IOPORTS - 1)](env, address + 1, (data >> 8) & 0xff);

}

uint32_t default_ioport_readl(CPUX86State *env, uint32_t address)

{

#ifdef DEBUG_UNUSED_IOPORT

    fprintf(stderr, "inl: port=0x%04x\n", address);

#endif

    return 0xffffffff;

}

void default_ioport_writel(CPUX86State *env, uint32_t address, uint32_t data)

{

#ifdef DEBUG_UNUSED_IOPORT

    fprintf(stderr, "outl: port=0x%04x data=0x%02x\n", address, data);

#endif

}

void init_ioports(void)

{

    int i;

    for(i = 0; i < MAX_IOPORTS; i++) {

        ioport_read_table[0][i] = default_ioport_readb;

        ioport_write_table[0][i] = default_ioport_writeb;

        ioport_read_table[1][i] = default_ioport_readw;

        ioport_write_table[1][i] = default_ioport_writew;

        ioport_read_table[2][i] = default_ioport_readl;

        ioport_write_table[2][i] = default_ioport_writel;

    }

}

/* size is the word size in byte */

int register_ioport_read(int start, int length, IOPortReadFunc *func, int size)

{

    int i, bsize;

    if (size == 1)

        bsize = 0;

    else if (size == 2)

        bsize = 1;

    else if (size == 4)

        bsize = 2;

    else

        return -1;

    for(i = start; i < start + length; i += size)

        ioport_read_table[bsize][i] = func;

    return 0;

}

/* size is the word size in byte */

int register_ioport_write(int start, int length, IOPortWriteFunc *func, int size)

{

    int i, bsize;

    if (size == 1)

        bsize = 0;

    else if (size == 2)

        bsize = 1;

    else if (size == 4)

        bsize = 2;

    else

        return -1;

    for(i = start; i < start + length; i += size)

        ioport_write_table[bsize][i] = func;

    return 0;

}

void pstrcpy(char *buf, int buf_size, const char *str)

{

    int c;

    char *q = buf;

    if (buf_size <= 0)

        return;

    for(;;) {

        c = *str++;

        if (c == 0 || q >= buf + buf_size - 1)

            break;

        *q++ = c;

    }

    *q = '\0';

}

/* strcat and truncate. */

char *pstrcat(char *buf, int buf_size, const char *s)

{

    int len;

    len = strlen(buf);

    if (len < buf_size) 

        pstrcpy(buf + len, buf_size - len, s);

    return buf;

}

int load_kernel(const char *filename, uint8_t *addr)

{

    int fd, size, setup_sects;

    uint8_t bootsect[512];

    fd = open(filename, O_RDONLY);

    if (fd < 0)

        return -1;

    if (read(fd, bootsect, 512) != 512)

        goto fail;

    setup_sects = bootsect[0x1F1];

    if (!setup_sects)

        setup_sects = 4;

    /* skip 16 bit setup code */

    lseek(fd, (setup_sects + 1) * 512, SEEK_SET);

    size = read(fd, addr, 16 * 1024 * 1024);

    if (size < 0)

        goto fail;

    close(fd);

    return size;

 fail:

    close(fd);

    return -1;

}

/* return the size or -1 if error */

int load_image(const char *filename, uint8_t *addr)

{

    int fd, size;

    fd = open(filename, O_RDONLY);

    if (fd < 0)

        return -1;

    size = lseek(fd, 0, SEEK_END);

    lseek(fd, 0, SEEK_SET);

    if (read(fd, addr, size) != size) {

        close(fd);

        return -1;

    }

    close(fd);

    return size;

}

void cpu_x86_outb(CPUX86State *env, int addr, int val)

{

    ioport_write_table[0][addr & (MAX_IOPORTS - 1)](env, addr, val);

}

void cpu_x86_outw(CPUX86State *env, int addr, int val)

{

    ioport_write_table[1][addr & (MAX_IOPORTS - 1)](env, addr, val);

}

void cpu_x86_outl(CPUX86State *env, int addr, int val)

{

    ioport_write_table[2][addr & (MAX_IOPORTS - 1)](env, addr, val);

}

int cpu_x86_inb(CPUX86State *env, int addr)

{

    return ioport_read_table[0][addr & (MAX_IOPORTS - 1)](env, addr);

}

int cpu_x86_inw(CPUX86State *env, int addr)

{

    return ioport_read_table[1][addr & (MAX_IOPORTS - 1)](env, addr);

}

int cpu_x86_inl(CPUX86State *env, int addr)

{

    return ioport_read_table[2][addr & (MAX_IOPORTS - 1)](env, addr);

}

/***********************************************************/

void ioport80_write(CPUX86State *env, uint32_t addr, uint32_t data)

{

}

void hw_error(const char *fmt, ...)

{

    va_list ap;

    va_start(ap, fmt);

    fprintf(stderr, "qemu: hardware error: ");

    vfprintf(stderr, fmt, ap);

    fprintf(stderr, "\n");

#ifdef TARGET_I386

    cpu_x86_dump_state(global_env, stderr, X86_DUMP_FPU | X86_DUMP_CCOP);

#endif

    va_end(ap);

    abort();

}

/***********************************************************/

/* cmos emulation */

#define RTC_SECONDS             0

#define RTC_SECONDS_ALARM       1

#define RTC_MINUTES             2

#define RTC_MINUTES_ALARM       3

#define RTC_HOURS               4

#define RTC_HOURS_ALARM         5

#define RTC_ALARM_DONT_CARE    0xC0

#define RTC_DAY_OF_WEEK         6

#define RTC_DAY_OF_MONTH        7

#define RTC_MONTH               8

#define RTC_YEAR                9

#define RTC_REG_A               10

#define RTC_REG_B               11

#define RTC_REG_C               12

#define RTC_REG_D               13

/* PC cmos mappings */

#define REG_EQUIPMENT_BYTE          0x14

uint8_t cmos_data[128];

uint8_t cmos_index;

void cmos_ioport_write(CPUX86State *env, uint32_t addr, uint32_t data)

{

    if (addr == 0x70) {

        cmos_index = data & 0x7f;

    } else {

#ifdef DEBUG_CMOS

        printf("cmos: write index=0x%02x val=0x%02x\n",

               cmos_index, data);

#endif        

        switch(addr) {

        case RTC_SECONDS_ALARM:

        case RTC_MINUTES_ALARM:

        case RTC_HOURS_ALARM:

            /* XXX: not supported */

            cmos_data[cmos_index] = data;

            break;

        case RTC_SECONDS:

        case RTC_MINUTES:

        case RTC_HOURS:

        case RTC_DAY_OF_WEEK:

        case RTC_DAY_OF_MONTH:

        case RTC_MONTH:

        case RTC_YEAR:

            cmos_data[cmos_index] = data;

            break;

        case RTC_REG_A:

        case RTC_REG_B:

            cmos_data[cmos_index] = data;

            break;

        case RTC_REG_C:

        case RTC_REG_D:

            /* cannot write to them */

            break;

        default:

            cmos_data[cmos_index] = data;

            break;

        }

    }

}

uint32_t cmos_ioport_read(CPUX86State *env, uint32_t addr)

{

    int ret;

    if (addr == 0x70) {

        return 0xff;

    } else {

        ret = cmos_data[cmos_index];

        switch(cmos_index) {

        case RTC_REG_A:

            /* toggle update-in-progress bit for Linux (same hack as

               plex86) */

            cmos_data[RTC_REG_A] ^= 0x80; 

            break;

        case RTC_REG_C:

            pic_set_irq(8, 0);

            cmos_data[RTC_REG_C] = 0x00; 

            break;

        }

#ifdef DEBUG_CMOS

        printf("cmos: read index=0x%02x val=0x%02x\n",

               cmos_index, ret);

#endif

        return ret;

    }

}

static inline int to_bcd(int a)

{

    return ((a / 10) << 4) | (a % 10);

}

void cmos_init(void)

{

    struct tm *tm;

    time_t ti;

    int val;

    ti = time(NULL);

    tm = gmtime(&ti);

    cmos_data[RTC_SECONDS] = to_bcd(tm->tm_sec);

    cmos_data[RTC_MINUTES] = to_bcd(tm->tm_min);

    cmos_data[RTC_HOURS] = to_bcd(tm->tm_hour);

    cmos_data[RTC_DAY_OF_WEEK] = to_bcd(tm->tm_wday);

    cmos_data[RTC_DAY_OF_MONTH] = to_bcd(tm->tm_mday);

    cmos_data[RTC_MONTH] = to_bcd(tm->tm_mon + 1);

    cmos_data[RTC_YEAR] = to_bcd(tm->tm_year % 100);

    cmos_data[RTC_REG_A] = 0x26;

    cmos_data[RTC_REG_B] = 0x02;

    cmos_data[RTC_REG_C] = 0x00;

    cmos_data[RTC_REG_D] = 0x80;

    /* various important CMOS locations needed by PC/Bochs bios */

    cmos_data[REG_EQUIPMENT_BYTE] = 0x02; /* FPU is there */

    cmos_data[REG_EQUIPMENT_BYTE] |= 0x04; /* PS/2 mouse installed */

    /* memory size */

    val = (phys_ram_size / 1024) - 1024;

    if (val > 65535)

        val = 65535;

    cmos_data[0x17] = val;

    cmos_data[0x18] = val >> 8;

    cmos_data[0x30] = val;

    cmos_data[0x31] = val >> 8;

    val = (phys_ram_size / 65536) - ((16 * 1024 * 1024) / 65536);

    if (val > 65535)

        val = 65535;

    cmos_data[0x34] = val;

    cmos_data[0x35] = val >> 8;

    switch(boot_device) {

    case 'a':

        cmos_data[0x3d] = 0x01; /* floppy boot */

        break;

    default:

    case 'c':

        cmos_data[0x3d] = 0x02; /* hard drive boot */

        break;

    case 'd':

        cmos_data[0x3d] = 0x03; /* CD-ROM boot */

        break;

    }

    register_ioport_write(0x70, 2, cmos_ioport_write, 1);

    register_ioport_read(0x70, 2, cmos_ioport_read, 1);

}

/***********************************************************/

/* 8259 pic emulation */

typedef struct PicState {

    uint8_t last_irr; /* edge detection */

    uint8_t irr; /* interrupt request register */

    uint8_t imr; /* interrupt mask register */

    uint8_t isr; /* interrupt service register */

    uint8_t priority_add; /* used to compute irq priority */

    uint8_t irq_base;

    uint8_t read_reg_select;

    uint8_t special_mask;

    uint8_t init_state;

    uint8_t auto_eoi;

    uint8_t rotate_on_autoeoi;

    uint8_t init4; /* true if 4 byte init */

} PicState;

/* 0 is master pic, 1 is slave pic */

PicState pics[2];

int pic_irq_requested;

/* set irq level. If an edge is detected, then the IRR is set to 1 */

static inline void pic_set_irq1(PicState *s, int irq, int level)

{

    int mask;

    mask = 1 << irq;

    if (level) {

        if ((s->last_irr & mask) == 0)

            s->irr |= mask;

        s->last_irr |= mask;

    } else {

        s->last_irr &= ~mask;

    }

}

static inline int get_priority(PicState *s, int mask)

{

    int priority;

    if (mask == 0)

        return -1;

    priority = 7;

    while ((mask & (1 << ((priority + s->priority_add) & 7))) == 0)

        priority--;

    return priority;

}

/* return the pic wanted interrupt. return -1 if none */

static int pic_get_irq(PicState *s)

{

    int mask, cur_priority, priority;

    mask = s->irr & ~s->imr;

    priority = get_priority(s, mask);

    if (priority < 0)

        return -1;

    /* compute current priority */

    cur_priority = get_priority(s, s->isr);

    if (priority > cur_priority) {

        /* higher priority found: an irq should be generated */

        return priority;

    } else {

        return -1;

    }

}

/* raise irq to CPU if necessary. must be called every time the active

   irq may change */

static void pic_update_irq(void)

{

    int irq2, irq;

    /* first look at slave pic */

    irq2 = pic_get_irq(&pics[1]);

    if (irq2 >= 0) {

        /* if irq request by slave pic, signal master PIC */

        pic_set_irq1(&pics[0], 2, 1);

        pic_set_irq1(&pics[0], 2, 0);

    }

    /* look at requested irq */

    irq = pic_get_irq(&pics[0]);

    if (irq >= 0) {

        if (irq == 2) {

            /* from slave pic */

            pic_irq_requested = 8 + irq2;

        } else {

            /* from master pic */

            pic_irq_requested = irq;

        }

        cpu_x86_interrupt(global_env, CPU_INTERRUPT_HARD);

    }

}

#ifdef DEBUG_IRQ_LATENCY

int64_t irq_time[16];

int64_t cpu_get_ticks(void);

#endif

#if defined(DEBUG_PIC)

int irq_level[16];

#endif

void pic_set_irq(int irq, int level)

{

#if defined(DEBUG_PIC)

    if (level != irq_level[irq]) {

        printf("pic_set_irq: irq=%d level=%d\n", irq, level);

        irq_level[irq] = level;

    }

#endif

#ifdef DEBUG_IRQ_LATENCY

    if (level) {

        irq_time[irq] = cpu_get_ticks();

    }

#endif

    pic_set_irq1(&pics[irq >> 3], irq & 7, level);

    pic_update_irq();

}

int cpu_x86_get_pic_interrupt(CPUX86State *env)

{

    int irq, irq2, intno;

    /* signal the pic that the irq was acked by the CPU */

    irq = pic_irq_requested;

#ifdef DEBUG_IRQ_LATENCY

    printf("IRQ%d latency=%0.3fus\n", 

           irq, 

           (double)(cpu_get_ticks() - irq_time[irq]) * 1000000.0 / ticks_per_sec);

#endif

#if defined(DEBUG_PIC)

    printf("pic_interrupt: irq=%d\n", irq);

#endif

    if (irq >= 8) {

        irq2 = irq & 7;

        pics[1].isr |= (1 << irq2);

        pics[1].irr &= ~(1 << irq2);

        irq = 2;

        intno = pics[1].irq_base + irq2;

    } else {

        intno = pics[0].irq_base + irq;

    }

    pics[0].isr |= (1 << irq);

    pics[0].irr &= ~(1 << irq);

    return intno;

}

void pic_ioport_write(CPUX86State *env, uint32_t addr, uint32_t val)

{

    PicState *s;

    int priority;

#ifdef DEBUG_PIC

    printf("pic_write: addr=0x%02x val=0x%02x\n", addr, val);

#endif

    s = &pics[addr >> 7];

    addr &= 1;

    if (addr == 0) {

        if (val & 0x10) {

            /* init */

            memset(s, 0, sizeof(PicState));

            s->init_state = 1;

            s->init4 = val & 1;

            if (val & 0x02)

                hw_error("single mode not supported");

            if (val & 0x08)

                hw_error("level sensitive irq not supported");

        } else if (val & 0x08) {

            if (val & 0x02)

                s->read_reg_select = val & 1;

            if (val & 0x40)

                s->special_mask = (val >> 5) & 1;

        } else {

            switch(val) {

            case 0x00:

            case 0x80:

                s->rotate_on_autoeoi = val >> 7;

                break;

            case 0x20: /* end of interrupt */

            case 0xa0:

                priority = get_priority(s, s->isr);

                if (priority >= 0) {

                    s->isr &= ~(1 << ((priority + s->priority_add) & 7));

                }

                if (val == 0xa0)

                    s->priority_add = (s->priority_add + 1) & 7;

                pic_update_irq();

                break;

            case 0x60 ... 0x67:

                priority = val & 7;

                s->isr &= ~(1 << priority);

                pic_update_irq();

                break;

            case 0xc0 ... 0xc7:

                s->priority_add = (val + 1) & 7;

                pic_update_irq();

                break;

            case 0xe0 ... 0xe7:

                priority = val & 7;

                s->isr &= ~(1 << priority);

                s->priority_add = (priority + 1) & 7;

                pic_update_irq();

                break;

            }

        }

    } else {

        switch(s->init_state) {

        case 0:

            /* normal mode */

            s->imr = val;

            pic_update_irq();

            break;

        case 1:

            s->irq_base = val & 0xf8;

            s->init_state = 2;

            break;

        case 2:

            if (s->init4) {

                s->init_state = 3;

            } else {

                s->init_state = 0;

            }

            break;

        case 3:

            s->auto_eoi = (val >> 1) & 1;

            s->init_state = 0;

            break;

        }

    }

}

uint32_t pic_ioport_read(CPUX86State *env, uint32_t addr1)

{

    PicState *s;

    unsigned int addr;

    int ret;

    addr = addr1;

    s = &pics[addr >> 7];

    addr &= 1;

    if (addr == 0) {

        if (s->read_reg_select)

            ret = s->isr;

        else

            ret = s->irr;

    } else {

        ret = s->imr;

    }

#ifdef DEBUG_PIC

    printf("pic_read: addr=0x%02x val=0x%02x\n", addr1, ret);

#endif

    return ret;

}

void pic_init(void)

{

    register_ioport_write(0x20, 2, pic_ioport_write, 1);

    register_ioport_read(0x20, 2, pic_ioport_read, 1);

    register_ioport_write(0xa0, 2, pic_ioport_write, 1);

    register_ioport_read(0xa0, 2, pic_ioport_read, 1);

}

/***********************************************************/

/* 8253 PIT emulation */

#define PIT_FREQ 1193182

#define RW_STATE_LSB 0

#define RW_STATE_MSB 1

#define RW_STATE_WORD0 2

#define RW_STATE_WORD1 3

#define RW_STATE_LATCHED_WORD0 4

#define RW_STATE_LATCHED_WORD1 5