feat: add RIBP Timer V2 support with formal verification and tests

- Updated filelist to include new timer peripheral files.
- Enhanced formal file generation script to support timer target.
- Created timer formal design and properties for formal verification.
- Modified formal makefile to include timer targets and source files.
- Added timer-related source files to software makefile.
- Updated core and management wrappers to include debug halted signal.
- Implemented timer testbench for RTL simulation.
- Added regression tests for timer functionality in Python.
- Introduced timer helper functions in C tests for validation.
This commit is contained in:
maksyuki committed 2026-08-08 10:05:39 +08:00
1 parent 1eb342245c
commit 3aa3d937e1
46 files changed
+1877 -465

No files matched your search

+23
View File
@@ -5,6 +5,7 @@
#include <retrosoc/core/wait.h>
#include <retrosoc/hal/lcd.h>
#include <retrosoc/hal/spisd.h>
#include <retrosoc/hal/timer.h>
#include <retrosoc/hal/ws2812.h>
#include <retrosoc/lib/printf.h>
#include <retrosoc/lib/stdlib.h>
@@ -186,6 +187,27 @@ static int test_ws2812_helpers(void)
return 0;
}
static int test_timer_helpers(void)
{
rs_timer_period_t period;
if ((rs_timer_period_from_ms(72000000U, 1U, &period) != RS_OK) ||
(period.prescale != 0U) || (period.load != 71999U)) {
return 1;
}
if ((rs_timer_period_from_ms(72000000U, 1000U, &period) != RS_OK) ||
(period.prescale != 0U) || (period.load != 71999999U)) {
return 2;
}
if ((rs_timer_period_from_ms(0U, 1U, &period) != RS_EINVAL) ||
(rs_timer_period_from_ms(72000000U, 0U, &period) != RS_EINVAL) ||
(rs_timer_period_from_ms(72000000U, 1U, NULL) != RS_EINVAL) ||
(rs_timer_period_from_ms(UINT32_MAX, UINT32_MAX, &period) != RS_EINVAL)) {
return 3;
}
return 0;
}
static int test_wav_parser(void)
{
static const uint8_t wav[] = {
@@ -235,6 +257,7 @@ int main(void)
test_compiler_helpers(),
test_wait_helper(),
test_ws2812_helpers(),
test_timer_helpers(),
test_wav_parser(),
test_video_parser(),
};
+175
View File
@@ -0,0 +1,175 @@
`timescale 1ns / 1ps
module timer_tb;
localparam logic [31:0] CTRL_ENABLE = 32'h0000_0001;
localparam logic [31:0] CTRL_PERIODIC = 32'h0000_0002;
localparam logic [31:0] CTRL_ONE_SHOT = 32'h0000_0004;
localparam logic [31:0] CTRL_DIRECTION_DOWN = 32'h0000_0008;
localparam logic [31:0] CTRL_DEBUG_FREEZE = 32'h0000_0010;
localparam logic [31:0] CTRL_COMPARE_ENABLE = 32'h0000_0060;
logic clk_i = 1'b0;
logic rst_n_i = 1'b0;
logic debug_halted_i = 1'b0;
logic irq_o;
ribp_if ribp ();
always #5 clk_i = ~clk_i;
ribp_timer u_dut (
.clk_i,
.rst_n_i,
.debug_halted_i,
.ribp,
.irq_o
);
task automatic ribp_write(input logic [31:0] address, input logic [31:0] data,
input logic [3:0] strobe, input logic expected_error);
begin
@(negedge clk_i);
ribp.valid = 1'b1;
ribp.addr = address;
ribp.wdata = data;
ribp.wstrb = strobe;
do @(negedge clk_i); while (!ribp.ready);
if (ribp.resp_err !== expected_error) begin
$fatal(1, "write %h error=%b expected=%b", address, ribp.resp_err, expected_error);
end
ribp.valid = 1'b0;
ribp.wstrb = '0;
end
endtask
task automatic ribp_read(input logic [31:0] address, output logic [31:0] data,
input logic expected_error);
begin
@(negedge clk_i);
ribp.valid = 1'b1;
ribp.addr = address;
ribp.wdata = '0;
ribp.wstrb = '0;
do @(negedge clk_i); while (!ribp.ready);
data = ribp.rdata;
if (ribp.resp_err !== expected_error) begin
$fatal(1, "read %h error=%b expected=%b", address, ribp.resp_err, expected_error);
end
ribp.valid = 1'b0;
end
endtask
task automatic wait_inactive;
logic [31:0] status;
int cycles;
begin
status = '1;
cycles = 0;
while ((status[0] != 1'b0) && (cycles < 64)) begin
ribp_read(32'h0000_001C, status, 1'b0);
cycles++;
end
if (status[0] != 1'b0) $fatal(1, "timer did not enter inactive state");
end
endtask
logic [31:0] value;
logic [31:0] frozen_value;
logic [31:0] status;
logic [31:0] intr_state;
initial begin
ribp.valid = 1'b0;
ribp.addr = '0;
ribp.wdata = '0;
ribp.wstrb = '0;
repeat (4) @(posedge clk_i);
rst_n_i = 1'b1;
ribp_read(32'h0000_00F8, value, 1'b0);
if (value != 32'h0002_0000) $fatal(1, "unexpected timer version %h", value);
ribp_read(32'h0000_00FC, value, 1'b0);
if (value != 32'h00F2_1020) $fatal(1, "unexpected timer capability %h", value);
ribp_read(32'h0000_0100, value, 1'b1);
if (value != 32'd0) $fatal(1, "invalid read did not return zero");
ribp_read(32'h0000_0002, value, 1'b1);
ribp_write(32'h0000_0008, 32'h1234_5678, 4'hF, 1'b1);
ribp_read(32'h0000_002C, value, 1'b1);
ribp_write(32'h0000_0000, 32'h0000_0006, 4'hF, 1'b1);
// Free-running mode wraps naturally and stops without changing its value.
ribp_write(32'h0000_0000, CTRL_ENABLE, 4'hF, 1'b0);
repeat (6) @(posedge clk_i);
ribp_read(32'h0000_0008, value, 1'b0);
if (value == 32'd0) $fatal(1, "free-running timer did not advance");
ribp_write(32'h0000_0000, 32'd0, 4'hF, 1'b0);
// Up-counting periodic mode with both compare channels.
ribp_write(32'h0000_0010, 32'd1, 4'hF, 1'b0);
ribp_write(32'h0000_0014, 32'd1, 4'hF, 1'b0);
ribp_write(32'h0000_0018, 32'd2, 4'hF, 1'b0);
ribp_write(32'h0000_0004, 32'd3, 4'hF, 1'b0);
ribp_write(32'h0000_0024, 32'h0000_0007, 4'hF, 1'b0);
ribp_write(32'h0000_0000, CTRL_ENABLE | CTRL_PERIODIC | CTRL_COMPARE_ENABLE, 4'hF, 1'b0);
ribp_write(32'h0000_0010, 32'd0, 4'hF, 1'b1);
repeat (12) @(posedge clk_i);
ribp_read(32'h0000_0020, intr_state, 1'b0);
if (intr_state[2:0] != 3'b111 || !irq_o) begin
$fatal(1, "periodic compare/timeout state invalid: %h irq=%b", intr_state, irq_o);
end
ribp_write(32'h0000_0020, 32'h0000_0007, 4'h1, 1'b0);
ribp_write(32'h0000_0000, CTRL_PERIODIC | CTRL_COMPARE_ENABLE, 4'hF, 1'b0);
// Down-counting one-shot stops at zero and leaves a sticky timeout.
ribp_write(32'h0000_0004, 32'd2, 4'hF, 1'b0);
ribp_write(32'h0000_0020, 32'h0000_0007, 4'h1, 1'b0);
ribp_write(32'h0000_0000, CTRL_ENABLE | CTRL_ONE_SHOT | CTRL_DIRECTION_DOWN, 4'hF, 1'b0);
wait_inactive();
ribp_read(32'h0000_0008, value, 1'b0);
ribp_read(32'h0000_0020, intr_state, 1'b0);
if (value != 32'd0 || !intr_state[0]) begin
$fatal(1, "one-shot completion invalid value=%h state=%h", value, intr_state);
end
// Background load updates the next down-counting period without an immediate reload.
ribp_write(32'h0000_0020, 32'h0000_0007, 4'h1, 1'b0);
ribp_write(32'h0000_0004, 32'd5, 4'hF, 1'b0);
ribp_write(32'h0000_0010, 32'd3, 4'hF, 1'b0);
ribp_write(32'h0000_0000, CTRL_ENABLE | CTRL_PERIODIC | CTRL_DIRECTION_DOWN, 4'hF, 1'b0);
ribp_read(32'h0000_0008, value, 1'b0);
ribp_write(32'h0000_000C, 32'd1, 4'hF, 1'b0);
ribp_read(32'h0000_0008, frozen_value, 1'b0);
if (frozen_value == 32'd1) $fatal(1, "BGLOAD changed the live counter immediately");
repeat (32) @(posedge clk_i);
ribp_read(32'h0000_0008, value, 1'b0);
if (value > 32'd1) $fatal(1, "BGLOAD was not used by the next period: %h", value);
ribp_write(32'h0000_0000, CTRL_PERIODIC | CTRL_DIRECTION_DOWN, 4'hF, 1'b0);
// Debug freeze stops both prescaler and counter while keeping RIBP readable.
ribp_write(32'h0000_0004, 32'd20, 4'hF, 1'b0);
ribp_write(32'h0000_0010, 32'd0, 4'hF, 1'b0);
ribp_write(32'h0000_0000, CTRL_ENABLE | CTRL_PERIODIC | CTRL_DEBUG_FREEZE, 4'hF, 1'b0);
debug_halted_i = 1'b1;
repeat (2) @(posedge clk_i);
ribp_read(32'h0000_0008, frozen_value, 1'b0);
repeat (8) @(posedge clk_i);
ribp_read(32'h0000_0008, value, 1'b0);
ribp_read(32'h0000_001C, status, 1'b0);
if (value != frozen_value || status[1:0] != 2'b11) begin
$fatal(1, "debug freeze invalid before=%h after=%h status=%h", frozen_value, value, status);
end
debug_halted_i = 1'b0;
repeat (4) @(posedge clk_i);
ribp_read(32'h0000_0008, value, 1'b0);
if (value == frozen_value) $fatal(1, "timer did not resume after debug halt");
// Software interrupt test and W1C clear.
ribp_write(32'h0000_002C, 32'h0000_0006, 4'h1, 1'b0);
ribp_read(32'h0000_0020, intr_state, 1'b0);
if ((intr_state[2:1] != 2'b11) || !irq_o) $fatal(1, "interrupt test failed");
ribp_write(32'h0000_0020, 32'h0000_0007, 4'h1, 1'b0);
$display("RIBP Timer V2 register, mode, interrupt, and error test passed");
$finish;
end
endmodule
+60
View File
@@ -0,0 +1,60 @@
"""RIBP Timer V2 RTL regression tests."""
from __future__ import annotations
import shutil
import subprocess
import sys
from pathlib import Path
ROOT = Path(__file__).resolve().parents[1]
PERIPHERAL = ROOT / "rtl/ip/ribp/peripheral"
def test_timer_modes_interrupts_and_errors(tmp_path: Path) -> None:
iverilog = shutil.which("iverilog")
vvp = shutil.which("vvp")
if iverilog is None or vvp is None:
return
common = ROOT / "rtl/managed/clusterip/common/rtl"
source_list = tmp_path / "timer.fl"
source_list.write_text(
"\n".join(
[
"+define+SV_ASSRT_DISABLE",
f"+incdir+{common}",
f"+incdir+{common / 'interface'}",
f"+incdir+{common / 'utils'}",
f"+incdir+{common / 'clkrst'}",
f"+incdir+{PERIPHERAL}",
str(common / "interface/ribp_if.sv"),
str(common / "utils/register.sv"),
str(common / "clkrst/counter.sv"),
str(PERIPHERAL / "timer_core.sv"),
str(PERIPHERAL / "timer_reg.sv"),
str(PERIPHERAL / "ribp_timer.sv"),
str(ROOT / "tests/rtl/timer_tb.sv"),
"",
]
),
encoding="utf-8",
)
converted = tmp_path / "timer_tb.v"
subprocess.run(
[
sys.executable,
str(ROOT / "rtl/mini/script/convt_sv2v.py"),
"-f",
str(source_list),
"--output",
str(converted),
],
check=True,
)
simulation = tmp_path / "timer_tb"
subprocess.run(
[iverilog, "-g2012", "-s", "timer_tb", "-o", str(simulation), str(converted)],
check=True,
)
result = subprocess.run([vvp, str(simulation)], text=True, capture_output=True, check=True)
assert "RIBP Timer V2 register, mode, interrupt, and error test passed" in result.stdout