[ot] hw/riscv: ot_earlgrey: allow regions to be configured

Signed-off-by: James Wainwright <[email protected]>

Author: jwnrt

docs/opentitan/earlgrey.md

@@ -146,6 +146,22 @@ See [`tools.md`](tools.md)
   `-M ot-earlgrey,no_epmp_cfg=true` to disable the initial ePMP configuration, which can be very
   useful to execute arbitrary code on the Ibex core without requiring an OT ROM image to boot up.
 
+* `epmp_regions=<specification>` can be appended to the machine switch, _i.e._
+  `-M ot-earlgrey,epmp_regions=1:00000000:OFF:FL#2:0000bffc:NAPOT:FLRX` to configure the default
+  ePMP regions at startup. The specification string describes one or more regions separated with
+  a '#' character. Each region specification has the following syntax:
+  `<region index>:<address>:<mode>:<flags>` where:
+
+  - `<region index>` is the zero-based index of the region to configure.
+  - `<address>` is the hexadecimal address field for the region.
+  - `<mode>` is one of the following ePMP region modes: `OFF`, `TOR`, `NA4`, or `NAPOT`.
+  - `<flags>` is a set of the following uppercase characters denoting region flags:
+
+    - `L`: locked
+    - `R`: readable
+    - `W`: writable
+    - `X`: executable
+
 * `ignore_elf_entry=true` can be appended to the machine option switch, _i.e._
   `-M ot-earlgrey,ignore_elf_entry=true` to prevent the ELF entry point of a loaded application to
   update the vCPU reset vector at startup. When this option is used, with `-kernel` option for

hw/riscv/ot_earlgrey.c

@@ -197,7 +197,7 @@ enum OtEGBoardDevice {
 
 #define OT_EG_IBEX_WRAPPER_NUM_REGIONS 2u
 
-static const uint8_t ot_eg_pmp_cfgs[] = {
+static uint8_t ot_eg_pmp_cfgs[] = {
     /* clang-format off */
     IBEX_PMP_CFG(0, IBEX_PMP_MODE_OFF, 0, 0, 0),
     IBEX_PMP_CFG(0, IBEX_PMP_MODE_OFF, 0, 0, 0),
@@ -218,7 +218,7 @@ static const uint8_t ot_eg_pmp_cfgs[] = {
     /* clang-format on */
 };
 
-static const uint32_t ot_eg_pmp_addrs[] = {
+static uint32_t ot_eg_pmp_addrs[] = {
     /* clang-format off */
     IBEX_PMP_ADDR(0x00000000),
     IBEX_PMP_ADDR(0x00000000),
@@ -1492,6 +1492,8 @@ struct OtEGMachineState {
     bool no_epmp_cfg;
     bool ignore_elf_entry;
     bool verilator;
+    /* ePMP region specification string */
+    char *epmp_regions;
 };
 
 struct OtEGMachineClass {
@@ -1553,6 +1555,110 @@ static void ot_eg_soc_flash_ctrl_configure(
     }
 }
 
+/*
+ * Parse and apply the PMP configuration specification provided as a property.
+ *
+ * The specification string contains one or more region configurations separated
+ * by `#` characters. Each configuration has the following syntax:
+ *
+ * <region index>:<address>:<mode>:<flags>`
+ *
+ * - `<region index>` is the zero-based index of the region to configure.
+ * - `<address>` is the hexadecimal address field for the region.
+ * - `<mode>` is one of the following ePMP region modes: `OFF`, `TOR`, `NA4`, or `NAPOT`.
+ * - `<flags>` is a set of the following uppercase characters denoting region flags.
+ *
+ * The supported flags are:
+ *
+ * - `L`: locked
+ * - `R`: readable
+ * - `W`: writable
+ * - `X`: executable
+ */
+static void ot_eg_soc_configure_pmp(OtEGMachineState *ms, Error **errp) {
+    const char *config = ms->epmp_regions;
+
+    /* escape early if config is empty */
+    if (config == NULL || *config == '\0') {
+        return;
+    }
+
+    while (true) {
+        unsigned pmp_idx;
+        target_ulong addr;
+        char mode_str[6] = {0};
+        char flags[5] = {0};
+        unsigned len;
+
+        /* extract one region configuration from the string */
+        int parsed = sscanf(config, "%d:%8x:%5[^:]:%4[LRWX]%n", &pmp_idx, &addr, mode_str, flags, &len);
+
+        /* only accept when all parts of the configuration were present */
+        if (parsed != 4) {
+            error_setg(errp, "bad epmp format: expected 4 parts, got %d", parsed);
+            abort();
+        }
+
+        /* parse the mode */
+        unsigned mode;
+        if (strncmp(mode_str, "OFF", 3) == 0) {
+            mode = IBEX_PMP_MODE_OFF;
+        } else if(strncmp(mode_str, "TOR", 3) == 0) {
+            mode = IBEX_PMP_MODE_TOR;
+        } else if(strncmp(mode_str, "NA4", 3) == 0) {
+            mode = IBEX_PMP_MODE_NA4;
+        } else if(strncmp(mode_str, "NAPOT", 5) == 0) {
+            mode = IBEX_PMP_MODE_NAPOT;
+        } else {
+            error_setg(errp, "bad mode %s, expected `OFF`, `TOR`, `NA4`, or `NAPOT`", mode_str);
+            abort();
+        }
+
+        /* parse the flags */
+        bool l = false, r = false, w = false, x = false;
+        for (unsigned i = 0; flags[i]; i++) {
+            switch (flags[i]) {
+            case 'L':
+                l = true;
+                break;
+            case 'R':
+                r = true;
+                break;
+            case 'W':
+                w = true;
+                break;
+            case 'X':
+                x = true;
+                break;
+            default:
+                error_setg(errp, "bad flag %c, expected `L`, `R`, `W`, or `X`", flags[i]);
+                abort();
+            }
+        }
+
+        /* prepare the `PMPCFG` and `PMPADDR` codes */
+        uint8_t pmpcfg = IBEX_PMP_CFG(l, mode, x, w, r);
+        target_ulong pmpaddr = IBEX_PMP_ADDR(addr);
+
+        (void)pmp_idx;
+        (void)pmpcfg;
+        (void)pmpaddr;
+        ot_eg_pmp_cfgs[pmp_idx] = pmpcfg;
+        ot_eg_pmp_addrs[pmp_idx] = pmpaddr;
+
+        /* determine whether there are more configurations to parse */
+        if (config[len] == '#') {
+            config = config + len + 1;
+            continue;
+        } else if (config[len] == '\0') {
+            break;
+        } else {
+            error_setg(errp, "bad region format, expected `,` or end of string, got %c", config[len]);
+            abort();
+        }
+    }
+}
+
 static void ot_eg_soc_hart_configure(DeviceState *dev, const IbexDeviceDef *def,
                                      DeviceState *parent)
 {
@@ -1566,6 +1672,8 @@ static void ot_eg_soc_hart_configure(DeviceState *dev, const IbexDeviceDef *def,
         return;
     }
 
+    ot_eg_soc_configure_pmp(ms, &error_fatal);
+
     pmp_cfg = qlist_new();
     for (unsigned ix = 0; ix < ARRAY_SIZE(ot_eg_pmp_cfgs); ix++) {
         qlist_append_int(pmp_cfg, ot_eg_pmp_cfgs[ix]);
@@ -2006,6 +2114,28 @@ static void ot_eg_machine_set_verilator(Object *obj, bool value, Error **errp)
     s->verilator = value;
 }
 
+static char *ot_eg_machine_get_epmp_regions(Object *obj, Error **errp)
+{
+    OtEGMachineState *s = RISCV_OT_EG_MACHINE(obj);
+    (void)errp;
+
+    return s->epmp_regions;
+}
+
+static void ot_eg_machine_set_epmp_regions(Object *obj, const char *value, Error **errp)
+{
+    OtEGMachineState *s = RISCV_OT_EG_MACHINE(obj);
+    (void)errp;
+
+    if (s->epmp_regions) {
+        free(s->epmp_regions);
+    }
+
+    size_t len = strlen(value) + 1;
+    s->epmp_regions = g_malloc(len);
+    strcpy(s->epmp_regions, value);
+}
+
 static ResettableState *ot_eg_machine_get_reset_state(Object *obj)
 {
     OtEGMachineState *s = RISCV_OT_EG_MACHINE(obj);
@@ -2047,6 +2177,10 @@ static void ot_eg_machine_instance_init(Object *obj)
     object_property_add_bool(obj, "verilator", &ot_eg_machine_get_verilator,
                              &ot_eg_machine_set_verilator);
     object_property_set_description(obj, "verilator", "Use Verilator clocks");
+    object_property_add_str(obj, "epmp-regions", &ot_eg_machine_get_epmp_regions,
+                            &ot_eg_machine_set_epmp_regions);
+    object_property_set_description(obj, "epmp-regions",
+                                    "Set default ePMP memory region configuration");
 }
 
 static void ot_eg_machine_init(MachineState *state)