Write faux memory fuzzer
This commit is contained in:
9
src/main/resources/csrc/SimMemFuzzer.c
Normal file
9
src/main/resources/csrc/SimMemFuzzer.c
Normal file
@@ -0,0 +1,9 @@
|
|||||||
|
#ifndef NO_VPI
|
||||||
|
#include <vpi_user.h>
|
||||||
|
#include <svdpi.h>
|
||||||
|
#endif
|
||||||
|
#include <stdio.h>
|
||||||
|
|
||||||
|
void memfuzz_init(void) {
|
||||||
|
printf("Hello from C!\n");
|
||||||
|
}
|
||||||
103
src/main/resources/vsrc/SimMemFuzzer.v
Normal file
103
src/main/resources/vsrc/SimMemFuzzer.v
Normal file
@@ -0,0 +1,103 @@
|
|||||||
|
// FIXME hardcoded
|
||||||
|
`define MEMTRACE_DATA_WIDTH 64
|
||||||
|
`define MAX_NUM_LANES 32
|
||||||
|
`define MEMTRACE_LOGSIZE_WIDTH 8
|
||||||
|
|
||||||
|
import "DPI-C" function void memfuzz_init(
|
||||||
|
);
|
||||||
|
|
||||||
|
// Make sure to sync the parameters for:
|
||||||
|
// (1) import "DPI-C" declaration
|
||||||
|
// (2) C function declaration
|
||||||
|
// (3) DPI function calls inside initial/always blocks
|
||||||
|
import "DPI-C" function void memtrace_query
|
||||||
|
(
|
||||||
|
input bit trace_read_ready,
|
||||||
|
input longint trace_read_cycle,
|
||||||
|
input int trace_read_lane_id,
|
||||||
|
output bit trace_read_valid,
|
||||||
|
output longint trace_read_address,
|
||||||
|
output bit trace_read_is_store,
|
||||||
|
output byte trace_read_size,
|
||||||
|
output longint trace_read_data,
|
||||||
|
output bit trace_read_finished
|
||||||
|
);
|
||||||
|
|
||||||
|
module SimMemFuzz #(parameter NUM_LANES = 4) (
|
||||||
|
input clock,
|
||||||
|
input reset
|
||||||
|
|
||||||
|
// input trace_read_ready,
|
||||||
|
// output [NUM_LANES-1:0] trace_read_valid,
|
||||||
|
// output [`MEMTRACE_DATA_WIDTH*NUM_LANES-1:0] trace_read_address,
|
||||||
|
// output [NUM_LANES-1:0] trace_read_is_store,
|
||||||
|
// output [`MEMTRACE_LOGSIZE_WIDTH*NUM_LANES-1:0] trace_read_size,
|
||||||
|
// output [`MEMTRACE_DATA_WIDTH*NUM_LANES-1:0] trace_read_data,
|
||||||
|
// output trace_read_finished
|
||||||
|
);
|
||||||
|
|
||||||
|
initial begin
|
||||||
|
memfuzz_init();
|
||||||
|
end
|
||||||
|
|
||||||
|
// bit __in_valid [NUM_LANES-1:0];
|
||||||
|
// longint __in_address [NUM_LANES-1:0];
|
||||||
|
// bit __in_is_store [NUM_LANES-1:0];
|
||||||
|
// reg [`MEMTRACE_LOGSIZE_WIDTH-1:0] __in_size [NUM_LANES-1:0];
|
||||||
|
// longint __in_data [NUM_LANES-1:0];
|
||||||
|
// bit __in_finished;
|
||||||
|
|
||||||
|
// genvar g;
|
||||||
|
// generate
|
||||||
|
// for (g = 0; g < NUM_LANES; g = g + 1) begin
|
||||||
|
// assign trace_read_valid[g] = __in_valid[g];
|
||||||
|
// assign trace_read_address[`MEMTRACE_DATA_WIDTH*(g+1)-1:`MEMTRACE_DATA_WIDTH*g] = __in_address[g];
|
||||||
|
|
||||||
|
// assign trace_read_is_store[g] = __in_is_store[g];
|
||||||
|
// assign trace_read_size[`MEMTRACE_LOGSIZE_WIDTH*(g+1)-1:`MEMTRACE_LOGSIZE_WIDTH*g] = __in_size[g];
|
||||||
|
// assign trace_read_data[`MEMTRACE_DATA_WIDTH*(g+1)-1:`MEMTRACE_DATA_WIDTH*g] = __in_data[g];
|
||||||
|
// end
|
||||||
|
// endgenerate
|
||||||
|
// assign trace_read_finished = __in_finished;
|
||||||
|
|
||||||
|
// initial begin
|
||||||
|
// /* $value$plusargs("uartlog=%s", __uartlog); */
|
||||||
|
// memtrace_init(FILENAME, HAS_SOURCE);
|
||||||
|
// end
|
||||||
|
|
||||||
|
// always @(posedge clock) begin
|
||||||
|
// if (reset) begin
|
||||||
|
// for (integer tid = 0; tid < NUM_LANES; tid = tid + 1) begin
|
||||||
|
// __in_valid[tid] = 1'b0;
|
||||||
|
// __in_address[tid] = `MEMTRACE_DATA_WIDTH'b0;
|
||||||
|
//
|
||||||
|
// __in_is_store[tid] = 1'b0;
|
||||||
|
// __in_size[tid] = `MEMTRACE_LOGSIZE_WIDTH'b0;
|
||||||
|
// __in_data[tid] = `MEMTRACE_DATA_WIDTH'b0;
|
||||||
|
// end
|
||||||
|
// __in_finished = 1'b0;
|
||||||
|
// end else begin
|
||||||
|
// // We have to write to __in_ regs only when trace_read_ready, or
|
||||||
|
// // otherwise we might overwrite lines that were previously valid
|
||||||
|
// // but the downstream missed by being not ready.
|
||||||
|
// if (trace_read_ready) begin
|
||||||
|
// for (integer tid = 0; tid < NUM_LANES; tid = tid + 1) begin
|
||||||
|
// memtrace_query(
|
||||||
|
// trace_read_ready,
|
||||||
|
// trace_read_cycle,
|
||||||
|
// tid,
|
||||||
|
|
||||||
|
// __in_valid[tid],
|
||||||
|
// __in_address[tid],
|
||||||
|
|
||||||
|
// __in_is_store[tid],
|
||||||
|
// __in_size[tid],
|
||||||
|
// __in_data[tid],
|
||||||
|
|
||||||
|
// __in_finished
|
||||||
|
// );
|
||||||
|
// end
|
||||||
|
// end
|
||||||
|
// end
|
||||||
|
// end
|
||||||
|
endmodule
|
||||||
@@ -1695,6 +1695,18 @@ class MemTraceDriverImp(
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
class SimMemFuzzer extends BlackBox
|
||||||
|
with HasBlackBoxResource {
|
||||||
|
val io = IO(new Bundle {
|
||||||
|
val clock = Input(Clock())
|
||||||
|
val reset = Input(Bool())
|
||||||
|
})
|
||||||
|
|
||||||
|
addResource("/vsrc/SimDefaults.vh")
|
||||||
|
addResource("/vsrc/SimMemFuzzer.v")
|
||||||
|
addResource("/csrc/SimMemFuzzer.c")
|
||||||
|
}
|
||||||
|
|
||||||
class SimMemTrace(filename: String, numLanes: Int, traceHasSource: Boolean)
|
class SimMemTrace(filename: String, numLanes: Int, traceHasSource: Boolean)
|
||||||
extends BlackBox(
|
extends BlackBox(
|
||||||
Map(
|
Map(
|
||||||
@@ -2041,6 +2053,165 @@ object TLPrintf {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
class MemFuzzer(
|
||||||
|
config: CoalescerConfig,
|
||||||
|
)(implicit p: Parameters)
|
||||||
|
extends LazyModule {
|
||||||
|
val laneNodes = Seq.tabulate(config.numLanes) { i =>
|
||||||
|
val clientParam = Seq(
|
||||||
|
TLMasterParameters.v1(
|
||||||
|
name = "MemTraceDriver" + i.toString,
|
||||||
|
sourceId = IdRange(0, config.numOldSrcIds)
|
||||||
|
// visibility = Seq(AddressSet(0x0000, 0xffffff))
|
||||||
|
)
|
||||||
|
)
|
||||||
|
TLClientNode(Seq(TLMasterPortParameters.v1(clientParam)))
|
||||||
|
}
|
||||||
|
|
||||||
|
val node = TLIdentityNode()
|
||||||
|
laneNodes.foreach { l => node := l }
|
||||||
|
|
||||||
|
lazy val module = new MemFuzzerImp(this, config)
|
||||||
|
}
|
||||||
|
|
||||||
|
class MemFuzzerImp(
|
||||||
|
outer: MemFuzzer,
|
||||||
|
config: CoalescerConfig,
|
||||||
|
) extends LazyModuleImp(outer) {
|
||||||
|
val io = IO(new Bundle {
|
||||||
|
val finished = Output(Bool())
|
||||||
|
})
|
||||||
|
val sim = Module(new SimMemFuzzer)
|
||||||
|
sim.io.clock := clock
|
||||||
|
sim.io.reset := reset.asBool
|
||||||
|
|
||||||
|
// Read output from Verilog BlackBox
|
||||||
|
// Split output of SimMemTrace, which is flattened across all lanes,back to each lane's.
|
||||||
|
val laneReqs = Wire(Vec(config.numLanes, new TraceLine))
|
||||||
|
val addrW = laneReqs(0).address.getWidth
|
||||||
|
val sizeW = laneReqs(0).size.getWidth
|
||||||
|
val dataW = laneReqs(0).data.getWidth
|
||||||
|
laneReqs.zipWithIndex.foreach { case (req, i) =>
|
||||||
|
// req.valid := sim.io.trace_read.valid(i)
|
||||||
|
// req.source := 0.U // driver trace doesn't contain source id
|
||||||
|
// req.address := sim.io.trace_read.address(addrW * (i + 1) - 1, addrW * i)
|
||||||
|
// req.is_store := sim.io.trace_read.is_store(i)
|
||||||
|
// req.size := sim.io.trace_read.size(sizeW * (i + 1) - 1, sizeW * i)
|
||||||
|
// req.data := sim.io.trace_read.data(dataW * (i + 1) - 1, dataW * i)
|
||||||
|
req.valid := 0.U
|
||||||
|
req.source := 0.U // driver trace doesn't contain source id
|
||||||
|
req.address := 0.U
|
||||||
|
req.is_store := 0.U
|
||||||
|
req.size := 0.U
|
||||||
|
req.data := 0.U
|
||||||
|
}
|
||||||
|
|
||||||
|
val sourceGens = Seq.fill(config.numLanes)(
|
||||||
|
Module(
|
||||||
|
new SourceGenerator(
|
||||||
|
log2Ceil(config.numOldSrcIds),
|
||||||
|
ignoreInUse = false
|
||||||
|
)
|
||||||
|
)
|
||||||
|
)
|
||||||
|
|
||||||
|
// Take requests off of the queue and generate TL requests
|
||||||
|
(outer.laneNodes zip laneReqs).zipWithIndex.foreach {
|
||||||
|
case ((node, req), lane) =>
|
||||||
|
val (tlOut, edge) = node.out(0)
|
||||||
|
|
||||||
|
// Core only makes accesses of granularity larger than a word, so we want
|
||||||
|
// the trace driver to act so as well.
|
||||||
|
// That means if req.size is smaller than word size, we need to pad data
|
||||||
|
// with zeros to generate a word-size request, and set mask accordingly.
|
||||||
|
val offsetInWord = req.address % config.wordSizeInBytes.U
|
||||||
|
val subword = req.size < log2Ceil(config.wordSizeInBytes).U
|
||||||
|
|
||||||
|
// `mask` is currently unused
|
||||||
|
// val mask = Wire(UInt(config.wordSizeInBytes.W))
|
||||||
|
val wordData = Wire(UInt((config.wordSizeInBytes * 8 * 2).W))
|
||||||
|
val sizeInBytes = Wire(UInt((sizeW + 1).W))
|
||||||
|
sizeInBytes := (1.U) << req.size
|
||||||
|
// mask := Mux(subword, (~((~0.U(64.W)) << sizeInBytes)) << offsetInWord, ~0.U)
|
||||||
|
wordData := Mux(subword, req.data << (offsetInWord * 8.U), req.data)
|
||||||
|
val wordAlignedAddress =
|
||||||
|
req.address & ~((1 << log2Ceil(config.wordSizeInBytes)) - 1).U(addrW.W)
|
||||||
|
val wordAlignedSize = Mux(subword, 2.U, req.size)
|
||||||
|
|
||||||
|
val sourceGen = sourceGens(lane)
|
||||||
|
sourceGen.io.gen := tlOut.a.fire
|
||||||
|
sourceGen.io.reclaim.valid := tlOut.d.fire
|
||||||
|
sourceGen.io.reclaim.bits := tlOut.d.bits.source
|
||||||
|
sourceGen.io.meta := DontCare
|
||||||
|
|
||||||
|
val (plegal, pbits) = edge.Put(
|
||||||
|
fromSource = sourceGen.io.id.bits,
|
||||||
|
toAddress = wordAlignedAddress,
|
||||||
|
lgSize = wordAlignedSize, // trace line already holds log2(size)
|
||||||
|
// data should be aligned to beatBytes
|
||||||
|
data =
|
||||||
|
(wordData << (8.U * (wordAlignedAddress % edge.manager.beatBytes.U))).asUInt
|
||||||
|
)
|
||||||
|
val (glegal, gbits) = edge.Get(
|
||||||
|
fromSource = sourceGen.io.id.bits,
|
||||||
|
toAddress = wordAlignedAddress,
|
||||||
|
lgSize = wordAlignedSize
|
||||||
|
)
|
||||||
|
val legal = Mux(req.is_store, plegal, glegal)
|
||||||
|
val bits = Mux(req.is_store, pbits, gbits)
|
||||||
|
|
||||||
|
tlOut.a.valid := req.valid && sourceGen.io.id.valid
|
||||||
|
// req.ready := tlOut.a.ready && sourceGen.io.id.valid
|
||||||
|
|
||||||
|
when(tlOut.a.fire) {
|
||||||
|
assert(legal, "illegal TL req gen")
|
||||||
|
}
|
||||||
|
tlOut.a.bits := bits
|
||||||
|
tlOut.b.ready := true.B
|
||||||
|
tlOut.c.valid := false.B
|
||||||
|
tlOut.d.ready := true.B
|
||||||
|
tlOut.e.valid := false.B
|
||||||
|
|
||||||
|
// debug
|
||||||
|
dontTouch(req)
|
||||||
|
when(tlOut.a.valid) {
|
||||||
|
TLPrintf(
|
||||||
|
"MemFuzzer",
|
||||||
|
tlOut.a.bits.source,
|
||||||
|
tlOut.a.bits.address,
|
||||||
|
tlOut.a.bits.size,
|
||||||
|
tlOut.a.bits.mask,
|
||||||
|
req.is_store,
|
||||||
|
tlOut.a.bits.data,
|
||||||
|
req.data
|
||||||
|
)
|
||||||
|
}
|
||||||
|
dontTouch(tlOut.a)
|
||||||
|
dontTouch(tlOut.d)
|
||||||
|
}
|
||||||
|
|
||||||
|
// Give some slack time after trace EOF to get some outstanding responses
|
||||||
|
// back.
|
||||||
|
// val traceFinished = RegInit(false.B)
|
||||||
|
// when(sim.io.trace_read.finished) {
|
||||||
|
// traceFinished := true.B
|
||||||
|
// }
|
||||||
|
// io.finished := traceFinished
|
||||||
|
io.finished := true.B
|
||||||
|
|
||||||
|
// FIXME:
|
||||||
|
//
|
||||||
|
// currently the .cc file ouptuts finished=true while it still need to issue one more request
|
||||||
|
// val noValidReqs = sim.io.trace_read.valid === 0.U
|
||||||
|
// val allReqReclaimed = !(sourceGens.map(_.io.inflight).reduce(_ || _))
|
||||||
|
|
||||||
|
// when(traceFinished && allReqReclaimed && noValidReqs) {
|
||||||
|
// assert(
|
||||||
|
// false.B,
|
||||||
|
// "\n\n\nsimulation Successfully finished\n\n\n (this assertion intentional fail upon MemTracer termination)"
|
||||||
|
// )
|
||||||
|
// }
|
||||||
|
}
|
||||||
// Synthesizable unit tests
|
// Synthesizable unit tests
|
||||||
|
|
||||||
class DummyDriver(config: CoalescerConfig)(implicit p: Parameters)
|
class DummyDriver(config: CoalescerConfig)(implicit p: Parameters)
|
||||||
|
|||||||
@@ -62,14 +62,14 @@ class FuzzerTile private (
|
|||||||
require(p(CoalescerKey).isDefined, "FuzzerTile requires coalescer key to be defined")
|
require(p(CoalescerKey).isDefined, "FuzzerTile requires coalescer key to be defined")
|
||||||
val coalParam = p(CoalescerKey).get
|
val coalParam = p(CoalescerKey).get
|
||||||
val coalescer = LazyModule(new CoalescingUnit(coalParam))
|
val coalescer = LazyModule(new CoalescingUnit(coalParam))
|
||||||
val tracer = LazyModule(new MemTraceDriver(coalParam, "fixme"))
|
val fuzzer = LazyModule(new MemFuzzer(coalParam))
|
||||||
|
|
||||||
coalescer.cpuNode :=* TLWidthWidget(4) :=* tracer.node
|
coalescer.cpuNode :=* TLWidthWidget(4) :=* fuzzer.node
|
||||||
masterNode :=* coalescer.aggregateNode
|
masterNode :=* coalescer.aggregateNode
|
||||||
|
|
||||||
override lazy val module = new FuzzerTileModuleImp(this)
|
override lazy val module = new FuzzerTileModuleImp(this)
|
||||||
}
|
}
|
||||||
|
|
||||||
class FuzzerTileModuleImp(outer: FuzzerTile) extends BaseTileModuleImp(outer) {
|
class FuzzerTileModuleImp(outer: FuzzerTile) extends BaseTileModuleImp(outer) {
|
||||||
outer.reportCease(Some(true.B))
|
outer.reportCease(Some(outer.fuzzer.module.io.finished))
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user