How to model a CPU using qemu?

Question

I need to add some hardware to a multicoe x86-64 processor and test it using simulation, so I was thinking of using QEMU. But I want to know the general idea of modeling a CPU in qemu. Any good document on this will be great. If it is too difficult to do, I might think about using just the PIN tool for simplistic simulation.

Also, is it possible to model unconventional hardware with QEMU, like some shared registers between different cores of a processor? And does the current implemented models properly simulate things like cache accesses? Does the qemu simulator measure the elapsed time precisely for simulation?

Answer 1

There are a number of questions here. When you say "add some hardware" what do you mean? A co-processor or some additional peripheral?

QEMU is a general purpose translator and has front-ends that translate a variety of architectures into it's common TCG op format which can then generate code for a variety of host architecture. It is designed to be fast and semantically accurate (i.e. instructions should behave as they do on real hardware). However it is not designed to simulate micro-architectures so things like cache modelling are outside of it's scope. While -icount mode provides for deterministic time during translation it is in no way related to the time a real processor would take to execute an instruction.

If you want to model and experiment with small kernels of functionality then perhaps PIN is a better tool for the job.