Files
ppsspp/Core/MIPS/MeCore.cpp
T
Henrik RydgårdandClaude Opus 5.5 e52cc38866 ME: Reset, interrupts and the other registers homebrew runs the ME with
Sysreg (0xBC100000) gets the ME's reset bit (0x4C bit 2), the soft
interrupt (0x44, which interrupts the other CPU: the ME's controller from
the main CPU, PSP_MECODEC_INTR from the ME), the hardware mutex (0x48,
each CPU sets its own bit only while the other's is clear) and the clock
and config registers it writes. The ME's interrupt controller (0xBC300000,
write-1-to-clear, mask at 8) answers the ME only. All of it is the ME's
state and stays unhandled without an ME.

On the ME: interrupts to EBase with EPC and EXL, halt sleeping until an
unmasked interrupt, and Count, which doesn't run: it stays 0 across 10ms
with ERL set after reset and with Status cleared, and reads back what was
written. Reset keeps the GPRs and sets Status ERL/BEV/SR, which homebrew
relies on: mcidclan's samples run C on the stack Sony's ME code left. The
values are from a kernel probe on a PSP-1000 (sp 0x801FFFE0, COP0 22 = 1,
Status 0x20500404, mfic 0, which doesn't gate interrupts).

The main CPU runs base interrupt handlers the way interruptman calls them
(a0 intno, a1 arg, a2 interrupted pc; -2 disables), and interrupt 31 has
a stand-in for me_wrapper's handler, which homebrew releases first.

While the ME is emulated, any main CPU code may access hardware registers:
homebrew calls its own code in kernel mode through a kcall module. This
is a stopgap (g_kernelModeAnywhere, marked HACK): kernel mode should be
part of the CPU's state, switched on while a kernel module's export runs.
The memcpy/memmove replacements copy through MMIO when an end is a
register address, for code copied to the boot page.

mcidclan's me-soft-interrupt sample now runs, counting each interrupt in
both directions.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
2026-10-21 09:33:26 +02:00

284 lines
7.7 KiB
C++

// Copyright (c) 2012- PPSSPP Project.
// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation, version 2.0 or later versions.
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License 2.0 for more details.
// A copy of the GPL 2.0 should have been included with the program.
// If not, see http://www.gnu.org/licenses/
// Official git repository and contact information can be found at
// https://github.com/hrydgard/ppsspp and http://www.ppsspp.org/.
#include <algorithm>
#include "Common/Log.h"
#include "Common/Serialize/Serializer.h"
#include "Common/Serialize/SerializeFuncs.h"
#include "Core/Config.h"
#include "Core/Core.h"
#include "Core/CoreTiming.h"
#include "Core/HLE/sceKernelInterrupt.h"
#include "Core/MemMap.h"
#include "Core/MIPS/MeCore.h"
#include "Core/MIPS/MIPSTables.h"
namespace MeCore {
// The ME's state after a reset, read on a PSP-1000 (a kernel-mode probe, not kept as a test: the
// values left over from Sony's ME code aren't deterministic): COP0 register 22 is 1, which sends it
// on to 0x40 from the reset vector; Status 0x20500404 (CU1, BEV, SR, IM2, ERL); the GPRs keep
// whatever was in them, sp 0x801FFFE0 from Sony's code (top of the 2MB eDRAM); mfic 0; Count 0, and
// it doesn't run, with ERL set or Status cleared.
// Sysreg 0x40 read 0x20000002 and 0x50 0xD61D.
static const u32 ME_CPU_ID = 1;
static const u32 RESET_STATUS = 0x20500404;
static const u32 STATUS_RESET_BITS = 0x00500004;
// Pending interrupts are checked between runs of this many cycles at most.
static const int INTERRUPT_CHECK_CYCLES = 256;
enum : u32 {
STATUS_IE = 0x01,
STATUS_EXL = 0x02,
STATUS_ERL = 0x04,
CAUSE_IP2 = 0x0400, // The interrupt controller.
CAUSE_IP7 = 0x8000, // Count reached Compare. Never on its own, since Count doesn't run.
CAUSE_IP_MASK = 0xFF00,
CAUSE_SOFT_IP = 0x0300,
CAUSE_EXCCODE_BD = 0x8000007C,
};
MEState *g_meState = nullptr;
static int meIntrEvent = -1;
// Booting the VSH counts as homebrew: vshmain.prx loads as an ELF.
bool Wanted(bool homebrew) {
return homebrew && g_Config.bEmulateMediaEngine;
}
static void MeIntrCallback(u64 userdata, int cyclesLate) {
__TriggerInterrupt(PSP_INTR_IMMEDIATE, PSP_MECODEC_INTR, PSP_INTR_SUB_NONE);
}
// Reset keeps the GPRs, and homebrew relies on that: mcidclan's samples run C on the stack Sony's
// code left in sp.
static void ResetCPU(MEState *me) {
MIPSState &cpu = me->cpu;
cpu.cop0[30] = cpu.pc; // ErrorEPC
cpu.cop0[12] |= STATUS_RESET_BITS;
cpu.pc = Memory::BOOT_PAGE_ADDRESS;
cpu.nextPC = 0;
cpu.inDelaySlot = false;
cpu.llBit = 0;
cpu.cop0[9] = 0;
me->halted = false;
me->interruptEnable = 0;
me->intcRaised = 0;
me->intcEnabled = 0;
}
// What Sony's ME code leaves, which homebrew finds there.
static void PowerOn(MEState *me) {
MIPSState &cpu = me->cpu;
cpu.InitRegisters();
cpu.cop0[12] = RESET_STATUS;
cpu.cop0[22] = ME_CPU_ID;
cpu.r[MIPS_REG_SP] = 0x80000000 + cpu.space->edramSize - 0x20;
me->ramConfig = 0x20000002;
me->busClock = 0xD61D;
// Held in reset, as the register says: a read-modify-write of it mustn't release the ME.
me->resetFlags = 4;
ResetCPU(me);
}
bool Init() {
_dbg_assert_(!g_meState);
Memory::AddressSpace *space = Memory::CreateMESpace();
if (!space) {
WARN_LOG(Log::ME, "No Media Engine address space on this platform, not emulating the ME");
return false;
}
g_meState = new MEState();
g_meState->cpu.space = space;
g_meState->cpu.noJit = true;
g_meState->tickBase = CoreTiming::GetTicks(&mipsr4k);
PowerOn(g_meState);
meIntrEvent = CoreTiming::RegisterEvent("MeIntr", &MeIntrCallback);
Memory::g_kernelModeAnywhere = true;
INFO_LOG(Log::ME, "Media Engine created, %d KB eDRAM", space->edramSize / 1024);
return true;
}
void Shutdown() {
if (!g_meState) {
return;
}
delete g_meState;
g_meState = nullptr;
Memory::DestroyMESpace();
Memory::g_kernelModeAnywhere = false;
}
void DoState(PointerWrap &p) {
auto s = p.Section("MeCore", 1);
if (!s) {
return;
}
bool present = g_meState != nullptr;
Do(p, present);
if (p.mode == PointerWrap::MODE_READ) {
if (!present) {
Shutdown();
} else if (!g_meState) {
if (!Init()) {
p.SetError(PointerWrap::ERROR_FAILURE);
return;
}
// Compiled for user mode.
mipsr4k.ClearJitCacheDeferred();
}
}
if (!g_meState) {
return;
}
MEState *me = g_meState;
me->cpu.DoState(p);
Do(p, me->inReset);
Do(p, me->halted);
Do(p, me->tickBase);
Do(p, me->interruptEnable);
Do(p, me->intcRaised);
Do(p, me->intcEnabled);
Do(p, me->resetFlags);
Do(p, me->busClock);
Do(p, me->nmiFlags);
Do(p, me->ramConfig);
Do(p, me->mutex);
DoArray(p, me->memProtect, ARRAY_SIZE(me->memProtect));
DoArray(p, me->cpu.space->GetPointerUnchecked(0), me->cpu.space->edramSize);
DoArray(p, me->cpu.space->GetPointerUnchecked(0x04000000), me->cpu.space->localSize);
Do(p, meIntrEvent);
CoreTiming::RestoreRegisterEvent(meIntrEvent, "MeIntr", &MeIntrCallback);
}
static u32 PendingInterrupts(const MEState *me) {
u32 cause = me->cpu.cop0[13] & CAUSE_IP_MASK;
if (me->intcRaised & me->intcEnabled) {
cause |= CAUSE_IP2;
}
return cause;
}
// An unmasked interrupt wakes it from halt, and is taken if interrupts are enabled. Never in a
// delay slot: the run loop only stops outside one.
static void CheckInterrupts(MEState *me) {
MIPSState &cpu = me->cpu;
u32 &status = cpu.cop0[12];
if ((PendingInterrupts(me) & status & CAUSE_IP_MASK) == 0) {
return;
}
me->halted = false;
// mfic reads 0 after reset, and homebrew takes interrupts without mtic, so it doesn't gate them.
if ((status & (STATUS_IE | STATUS_EXL | STATUS_ERL)) != STATUS_IE) {
return;
}
// Interrupts go straight to EBase (COP0 25), with ExcCode 0.
cpu.cop0[14] = cpu.pc;
cpu.cop0[13] &= ~CAUSE_EXCCODE_BD;
status |= STATUS_EXL;
cpu.pc = cpu.cop0[25];
cpu.llBit = 0;
}
void RunFor(int cycles) {
MEState *me = g_meState;
if (cycles <= 0) {
return;
}
me->tickBase += cycles;
if (me->inReset) {
return;
}
MIPSState &cpu = me->cpu;
cpu.downcount += cycles;
while (cpu.downcount >= 0 && coreState == CORE_RUNNING_CPU) {
CheckInterrupts(me);
if (me->halted) {
cpu.downcount = -1;
} else {
// Run a part, with the rest set aside so the clock stays right.
const int part = std::min(cpu.downcount, INTERRUPT_CHECK_CYCLES);
const int rest = cpu.downcount - part;
cpu.downcount = part;
me->tickBase -= rest;
MIPSInterpret_RunDowncount(&cpu);
cpu.downcount += rest;
me->tickBase += rest;
}
}
}
void SetReset(bool asserted) {
MEState *me = g_meState;
if (asserted) {
me->inReset = true;
} else if (me->inReset) {
ResetCPU(me);
me->inReset = false;
}
}
u64 GetTicks() {
return (u64)(g_meState->tickBase - g_meState->cpu.downcount);
}
u32 ReadCop0(int reg) {
MEState *me = g_meState;
switch (reg) {
case 13:
return (me->cpu.cop0[13] & ~CAUSE_IP_MASK) | PendingInterrupts(me);
default:
return me->cpu.cop0[reg];
}
}
void WriteCop0(int reg, u32 value) {
MEState *me = g_meState;
switch (reg) {
case 11:
me->cpu.cop0[11] = value;
me->cpu.cop0[13] &= ~CAUSE_IP7;
break;
case 13:
me->cpu.cop0[13] = (me->cpu.cop0[13] & ~CAUSE_SOFT_IP) | (value & CAUSE_SOFT_IP);
break;
default:
me->cpu.cop0[reg] = value;
break;
}
}
void Halt() {
g_meState->halted = true;
// Ends the run, the rest of it spent halted.
g_meState->cpu.downcount = std::min(g_meState->cpu.downcount, -1);
}
void RaiseInterrupt(u32 sources) {
g_meState->intcRaised |= sources;
}
void InterruptMainCPU() {
CoreTiming::ScheduleEvent(0, meIntrEvent);
}
} // namespace MeCore