]> git.proxmox.com Git - qemu.git/blame - hw/ide.c
projects / qemu.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
vga memory address fix
[qemu.git] / hw / ide.c
CommitLineData
5391d806
FB		 1/*
2 * QEMU IDE disk and CD-ROM Emulator
3 *
4 * Copyright (c) 2003 Fabrice Bellard
5 *
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
12 *
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
15 *
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
23 */
24#include <stdlib.h>
25#include <stdio.h>
26#include <stdarg.h>
27#include <string.h>
28#include <getopt.h>
29#include <inttypes.h>
30#include <unistd.h>
31#include <sys/mman.h>
32#include <fcntl.h>
33#include <signal.h>
34#include <time.h>
35#include <sys/time.h>
36#include <malloc.h>
37#include <termios.h>
38#include <sys/poll.h>
39#include <errno.h>
40#include <sys/wait.h>
41#include <netinet/in.h>
42
6b136f9e
FB		 43#define NO_THUNK_TYPE_SIZE
44#include "thunk.h"
45
5391d806
FB		 46#include "cpu.h"
47#include "exec-all.h"
48
49#include "vl.h"
50
5391d806
FB		 51/* debug IDE devices */
52//#define DEBUG_IDE
53//#define DEBUG_IDE_ATAPI
54
55/* Bits of HD_STATUS */
56#define ERR_STAT 0x01
57#define INDEX_STAT 0x02
58#define ECC_STAT 0x04 /* Corrected error */
59#define DRQ_STAT 0x08
60#define SEEK_STAT 0x10
61#define SRV_STAT 0x10
62#define WRERR_STAT 0x20
63#define READY_STAT 0x40
64#define BUSY_STAT 0x80
65
66/* Bits for HD_ERROR */
67#define MARK_ERR 0x01 /* Bad address mark */
68#define TRK0_ERR 0x02 /* couldn't find track 0 */
69#define ABRT_ERR 0x04 /* Command aborted */
70#define MCR_ERR 0x08 /* media change request */
71#define ID_ERR 0x10 /* ID field not found */
72#define MC_ERR 0x20 /* media changed */
73#define ECC_ERR 0x40 /* Uncorrectable ECC error */
74#define BBD_ERR 0x80 /* pre-EIDE meaning: block marked bad */
75#define ICRC_ERR 0x80 /* new meaning: CRC error during transfer */
76
77/* Bits of HD_NSECTOR */
78#define CD 0x01
79#define IO 0x02
80#define REL 0x04
81#define TAG_MASK 0xf8
82
83#define IDE_CMD_RESET 0x04
84#define IDE_CMD_DISABLE_IRQ 0x02
85
86/* ATA/ATAPI Commands pre T13 Spec */
87#define WIN_NOP 0x00
88/*
89 * 0x01->0x02 Reserved
90 */
91#define CFA_REQ_EXT_ERROR_CODE 0x03 /* CFA Request Extended Error Code */
92/*
93 * 0x04->0x07 Reserved
94 */
95#define WIN_SRST 0x08 /* ATAPI soft reset command */
96#define WIN_DEVICE_RESET 0x08
97/*
98 * 0x09->0x0F Reserved
99 */
100#define WIN_RECAL 0x10
101#define WIN_RESTORE WIN_RECAL
102/*
103 * 0x10->0x1F Reserved
104 */
105#define WIN_READ 0x20 /* 28-Bit */
106#define WIN_READ_ONCE 0x21 /* 28-Bit without retries */
107#define WIN_READ_LONG 0x22 /* 28-Bit */
108#define WIN_READ_LONG_ONCE 0x23 /* 28-Bit without retries */
109#define WIN_READ_EXT 0x24 /* 48-Bit */
110#define WIN_READDMA_EXT 0x25 /* 48-Bit */
111#define WIN_READDMA_QUEUED_EXT 0x26 /* 48-Bit */
112#define WIN_READ_NATIVE_MAX_EXT 0x27 /* 48-Bit */
113/*
114 * 0x28
115 */
116#define WIN_MULTREAD_EXT 0x29 /* 48-Bit */
117/*
118 * 0x2A->0x2F Reserved
119 */
120#define WIN_WRITE 0x30 /* 28-Bit */
121#define WIN_WRITE_ONCE 0x31 /* 28-Bit without retries */
122#define WIN_WRITE_LONG 0x32 /* 28-Bit */
123#define WIN_WRITE_LONG_ONCE 0x33 /* 28-Bit without retries */
124#define WIN_WRITE_EXT 0x34 /* 48-Bit */
125#define WIN_WRITEDMA_EXT 0x35 /* 48-Bit */
126#define WIN_WRITEDMA_QUEUED_EXT 0x36 /* 48-Bit */
127#define WIN_SET_MAX_EXT 0x37 /* 48-Bit */
128#define CFA_WRITE_SECT_WO_ERASE 0x38 /* CFA Write Sectors without erase */
129#define WIN_MULTWRITE_EXT 0x39 /* 48-Bit */
130/*
131 * 0x3A->0x3B Reserved
132 */
133#define WIN_WRITE_VERIFY 0x3C /* 28-Bit */
134/*
135 * 0x3D->0x3F Reserved
136 */
137#define WIN_VERIFY 0x40 /* 28-Bit - Read Verify Sectors */
138#define WIN_VERIFY_ONCE 0x41 /* 28-Bit - without retries */
139#define WIN_VERIFY_EXT 0x42 /* 48-Bit */
140/*
141 * 0x43->0x4F Reserved
142 */
143#define WIN_FORMAT 0x50
144/*
145 * 0x51->0x5F Reserved
146 */
147#define WIN_INIT 0x60
148/*
149 * 0x61->0x5F Reserved
150 */
151#define WIN_SEEK 0x70 /* 0x70-0x7F Reserved */
152#define CFA_TRANSLATE_SECTOR 0x87 /* CFA Translate Sector */
153#define WIN_DIAGNOSE 0x90
154#define WIN_SPECIFY 0x91 /* set drive geometry translation */
155#define WIN_DOWNLOAD_MICROCODE 0x92
156#define WIN_STANDBYNOW2 0x94
157#define WIN_STANDBY2 0x96
158#define WIN_SETIDLE2 0x97
159#define WIN_CHECKPOWERMODE2 0x98
160#define WIN_SLEEPNOW2 0x99
161/*
162 * 0x9A VENDOR
163 */
164#define WIN_PACKETCMD 0xA0 /* Send a packet command. */
165#define WIN_PIDENTIFY 0xA1 /* identify ATAPI device */
166#define WIN_QUEUED_SERVICE 0xA2
167#define WIN_SMART 0xB0 /* self-monitoring and reporting */
168#define CFA_ERASE_SECTORS 0xC0
169#define WIN_MULTREAD 0xC4 /* read sectors using multiple mode*/
170#define WIN_MULTWRITE 0xC5 /* write sectors using multiple mode */
171#define WIN_SETMULT 0xC6 /* enable/disable multiple mode */
172#define WIN_READDMA_QUEUED 0xC7 /* read sectors using Queued DMA transfers */
173#define WIN_READDMA 0xC8 /* read sectors using DMA transfers */
174#define WIN_READDMA_ONCE 0xC9 /* 28-Bit - without retries */
175#define WIN_WRITEDMA 0xCA /* write sectors using DMA transfers */
176#define WIN_WRITEDMA_ONCE 0xCB /* 28-Bit - without retries */
177#define WIN_WRITEDMA_QUEUED 0xCC /* write sectors using Queued DMA transfers */
178#define CFA_WRITE_MULTI_WO_ERASE 0xCD /* CFA Write multiple without erase */
179#define WIN_GETMEDIASTATUS 0xDA
180#define WIN_ACKMEDIACHANGE 0xDB /* ATA-1, ATA-2 vendor */
181#define WIN_POSTBOOT 0xDC
182#define WIN_PREBOOT 0xDD
183#define WIN_DOORLOCK 0xDE /* lock door on removable drives */
184#define WIN_DOORUNLOCK 0xDF /* unlock door on removable drives */
185#define WIN_STANDBYNOW1 0xE0
186#define WIN_IDLEIMMEDIATE 0xE1 /* force drive to become "ready" */
187#define WIN_STANDBY 0xE2 /* Set device in Standby Mode */
188#define WIN_SETIDLE1 0xE3
189#define WIN_READ_BUFFER 0xE4 /* force read only 1 sector */
190#define WIN_CHECKPOWERMODE1 0xE5
191#define WIN_SLEEPNOW1 0xE6
192#define WIN_FLUSH_CACHE 0xE7
193#define WIN_WRITE_BUFFER 0xE8 /* force write only 1 sector */
194#define WIN_WRITE_SAME 0xE9 /* read ata-2 to use */
195 /* SET_FEATURES 0x22 or 0xDD */
196#define WIN_FLUSH_CACHE_EXT 0xEA /* 48-Bit */
197#define WIN_IDENTIFY 0xEC /* ask drive to identify itself */
198#define WIN_MEDIAEJECT 0xED
199#define WIN_IDENTIFY_DMA 0xEE /* same as WIN_IDENTIFY, but DMA */
200#define WIN_SETFEATURES 0xEF /* set special drive features */
201#define EXABYTE_ENABLE_NEST 0xF0
202#define WIN_SECURITY_SET_PASS 0xF1
203#define WIN_SECURITY_UNLOCK 0xF2
204#define WIN_SECURITY_ERASE_PREPARE 0xF3
205#define WIN_SECURITY_ERASE_UNIT 0xF4
206#define WIN_SECURITY_FREEZE_LOCK 0xF5
207#define WIN_SECURITY_DISABLE 0xF6
208#define WIN_READ_NATIVE_MAX 0xF8 /* return the native maximum address */
209#define WIN_SET_MAX 0xF9
210#define DISABLE_SEAGATE 0xFB
211
212/* set to 1 set disable mult support */
213#define MAX_MULT_SECTORS 8
214
215/* ATAPI defines */
216
217#define ATAPI_PACKET_SIZE 12
218
219/* The generic packet command opcodes for CD/DVD Logical Units,
220 * From Table 57 of the SFF8090 Ver. 3 (Mt. Fuji) draft standard. */
221#define GPCMD_BLANK 0xa1
222#define GPCMD_CLOSE_TRACK 0x5b
223#define GPCMD_FLUSH_CACHE 0x35
224#define GPCMD_FORMAT_UNIT 0x04
225#define GPCMD_GET_CONFIGURATION 0x46
226#define GPCMD_GET_EVENT_STATUS_NOTIFICATION 0x4a
227#define GPCMD_GET_PERFORMANCE 0xac
228#define GPCMD_INQUIRY 0x12
229#define GPCMD_LOAD_UNLOAD 0xa6
230#define GPCMD_MECHANISM_STATUS 0xbd
231#define GPCMD_MODE_SELECT_10 0x55
232#define GPCMD_MODE_SENSE_10 0x5a
233#define GPCMD_PAUSE_RESUME 0x4b
234#define GPCMD_PLAY_AUDIO_10 0x45
235#define GPCMD_PLAY_AUDIO_MSF 0x47
236#define GPCMD_PLAY_AUDIO_TI 0x48
237#define GPCMD_PLAY_CD 0xbc
238#define GPCMD_PREVENT_ALLOW_MEDIUM_REMOVAL 0x1e
239#define GPCMD_READ_10 0x28
240#define GPCMD_READ_12 0xa8
241#define GPCMD_READ_CDVD_CAPACITY 0x25
242#define GPCMD_READ_CD 0xbe
243#define GPCMD_READ_CD_MSF 0xb9
244#define GPCMD_READ_DISC_INFO 0x51
245#define GPCMD_READ_DVD_STRUCTURE 0xad
246#define GPCMD_READ_FORMAT_CAPACITIES 0x23
247#define GPCMD_READ_HEADER 0x44
248#define GPCMD_READ_TRACK_RZONE_INFO 0x52
249#define GPCMD_READ_SUBCHANNEL 0x42
250#define GPCMD_READ_TOC_PMA_ATIP 0x43
251#define GPCMD_REPAIR_RZONE_TRACK 0x58
252#define GPCMD_REPORT_KEY 0xa4
253#define GPCMD_REQUEST_SENSE 0x03
254#define GPCMD_RESERVE_RZONE_TRACK 0x53
255#define GPCMD_SCAN 0xba
256#define GPCMD_SEEK 0x2b
257#define GPCMD_SEND_DVD_STRUCTURE 0xad
258#define GPCMD_SEND_EVENT 0xa2
259#define GPCMD_SEND_KEY 0xa3
260#define GPCMD_SEND_OPC 0x54
261#define GPCMD_SET_READ_AHEAD 0xa7
262#define GPCMD_SET_STREAMING 0xb6
263#define GPCMD_START_STOP_UNIT 0x1b
264#define GPCMD_STOP_PLAY_SCAN 0x4e
265#define GPCMD_TEST_UNIT_READY 0x00
266#define GPCMD_VERIFY_10 0x2f
267#define GPCMD_WRITE_10 0x2a
268#define GPCMD_WRITE_AND_VERIFY_10 0x2e
269/* This is listed as optional in ATAPI 2.6, but is (curiously)
270 * missing from Mt. Fuji, Table 57. It _is_ mentioned in Mt. Fuji
271 * Table 377 as an MMC command for SCSi devices though... Most ATAPI
272 * drives support it. */
273#define GPCMD_SET_SPEED 0xbb
274/* This seems to be a SCSI specific CD-ROM opcode
275 * to play data at track/index */
276#define GPCMD_PLAYAUDIO_TI 0x48
277/*
278 * From MS Media Status Notification Support Specification. For
279 * older drives only.
280 */
281#define GPCMD_GET_MEDIA_STATUS 0xda
282
283/* Mode page codes for mode sense/set */
284#define GPMODE_R_W_ERROR_PAGE 0x01
285#define GPMODE_WRITE_PARMS_PAGE 0x05
286#define GPMODE_AUDIO_CTL_PAGE 0x0e
287#define GPMODE_POWER_PAGE 0x1a
288#define GPMODE_FAULT_FAIL_PAGE 0x1c
289#define GPMODE_TO_PROTECT_PAGE 0x1d
290#define GPMODE_CAPABILITIES_PAGE 0x2a
291#define GPMODE_ALL_PAGES 0x3f
292/* Not in Mt. Fuji, but in ATAPI 2.6 -- depricated now in favor
293 * of MODE_SENSE_POWER_PAGE */
294#define GPMODE_CDROM_PAGE 0x0d
295
296#define ATAPI_INT_REASON_CD 0x01 /* 0 = data transfer */
297#define ATAPI_INT_REASON_IO 0x02 /* 1 = transfer to the host */
298#define ATAPI_INT_REASON_REL 0x04
299#define ATAPI_INT_REASON_TAG 0xf8
300
301/* same constants as bochs */
302#define ASC_LOGICAL_BLOCK_OOR 0x21
303#define ASC_INV_FIELD_IN_CMD_PACKET 0x24
304#define ASC_MEDIUM_NOT_PRESENT 0x3a
305#define ASC_SAVING_PARAMETERS_NOT_SUPPORTED 0x39
306
307#define SENSE_NONE 0
308#define SENSE_NOT_READY 2
309#define SENSE_ILLEGAL_REQUEST 5
310#define SENSE_UNIT_ATTENTION 6
311
312struct IDEState;
313
314typedef void EndTransferFunc(struct IDEState *);
315
316typedef struct IDEState {
317 /* ide config */
318 int is_cdrom;
319 int cdrom_locked;
320 int cylinders, heads, sectors;
321 int64_t nb_sectors;
322 int mult_sectors;
323 int irq;
324 /* ide regs */
325 uint8_t feature;
326 uint8_t error;
327 uint16_t nsector; /* 0 is 256 to ease computations */
328 uint8_t sector;
329 uint8_t lcyl;
330 uint8_t hcyl;
331 uint8_t select;
332 uint8_t status;
333 /* 0x3f6 command, only meaningful for drive 0 */
334 uint8_t cmd;
335 /* depends on bit 4 in select, only meaningful for drive 0 */
336 struct IDEState *cur_drive;
337 BlockDriverState *bs;
338 /* ATAPI specific */
339 uint8_t sense_key;
340 uint8_t asc;
341 int packet_transfer_size;
342 int elementary_transfer_size;
343 int io_buffer_index;
344 int lba;
345 /* transfer handling */
346 int req_nb_sectors; /* number of sectors per interrupt */
347 EndTransferFunc *end_transfer_func;
348 uint8_t *data_ptr;
349 uint8_t *data_end;
350 uint8_t io_buffer[MAX_MULT_SECTORS*512 + 4];
351} IDEState;
352
353IDEState ide_state[MAX_DISKS];
354IDEState *ide_table[0x400 >> 3];
355
356static inline IDEState *get_ide_interface(uint32_t addr)
357{
358 return ide_table[addr >> 3];
359}
360
361static void padstr(char *str, const char *src, int len)
362{
363 int i, v;
364 for(i = 0; i < len; i++) {
365 if (*src)
366 v = *src++;
367 else
368 v = ' ';
369 *(char *)((long)str ^ 1) = v;
370 str++;
371 }
372}
373
bd0d90b2
FB		 374static void padstr8(uint8_t *buf, int buf_size, const char *src)
375{
376 int i;
377 for(i = 0; i < buf_size; i++) {
378 if (*src)
379 buf[i] = *src++;
380 else
381 buf[i] = ' ';
382 }
383}
384
5391d806
FB		 385static void ide_identify(IDEState *s)
386{
387 uint16_t *p;
388 unsigned int oldsize;
389
390 memset(s->io_buffer, 0, 512);
391 p = (uint16_t *)s->io_buffer;
392 stw_raw(p + 0, 0x0040);
393 stw_raw(p + 1, s->cylinders);
394 stw_raw(p + 3, s->heads);
395 stw_raw(p + 4, 512 * s->sectors); /* sectors */
396 stw_raw(p + 5, 512); /* sector size */
397 stw_raw(p + 6, s->sectors);
398 padstr((uint8_t *)(p + 10), "QM00001", 20); /* serial number */
399 stw_raw(p + 20, 3); /* buffer type */
400 stw_raw(p + 21, 512); /* cache size in sectors */
401 stw_raw(p + 22, 4); /* ecc bytes */
402 padstr((uint8_t *)(p + 23), QEMU_VERSION, 8); /* firmware version */
403 padstr((uint8_t *)(p + 27), "QEMU HARDDISK", 40); /* model */
404#if MAX_MULT_SECTORS > 1
405 stw_raw(p + 47, MAX_MULT_SECTORS);
406#endif
407 stw_raw(p + 48, 1); /* dword I/O */
408 stw_raw(p + 49, 1 << 9); /* LBA supported, no DMA */
409 stw_raw(p + 51, 0x200); /* PIO transfer cycle */
410 stw_raw(p + 52, 0x200); /* DMA transfer cycle */
411 stw_raw(p + 54, s->cylinders);
412 stw_raw(p + 55, s->heads);
413 stw_raw(p + 56, s->sectors);
414 oldsize = s->cylinders * s->heads * s->sectors;
415 stw_raw(p + 57, oldsize);
416 stw_raw(p + 58, oldsize >> 16);
417 if (s->mult_sectors)
418 stw_raw(p + 59, 0x100 | s->mult_sectors);
419 stw_raw(p + 60, s->nb_sectors);
420 stw_raw(p + 61, s->nb_sectors >> 16);
421 stw_raw(p + 80, (1 << 1) | (1 << 2));
422 stw_raw(p + 82, (1 << 14));
423 stw_raw(p + 83, (1 << 14));
424 stw_raw(p + 84, (1 << 14));
425 stw_raw(p + 85, (1 << 14));
426 stw_raw(p + 86, 0);
427 stw_raw(p + 87, (1 << 14));
428}
429
430static void ide_atapi_identify(IDEState *s)
431{
432 uint16_t *p;
433
434 memset(s->io_buffer, 0, 512);
435 p = (uint16_t *)s->io_buffer;
436 /* Removable CDROM, 50us response, 12 byte packets */
437 stw_raw(p + 0, (2 << 14) | (5 << 8) | (1 << 7) | (2 << 5) | (0 << 0));
438 stw_raw(p + 1, s->cylinders);
439 stw_raw(p + 3, s->heads);
440 stw_raw(p + 4, 512 * s->sectors); /* sectors */
441 stw_raw(p + 5, 512); /* sector size */
442 stw_raw(p + 6, s->sectors);
443 padstr((uint8_t *)(p + 10), "QM00001", 20); /* serial number */
444 stw_raw(p + 20, 3); /* buffer type */
445 stw_raw(p + 21, 512); /* cache size in sectors */
446 stw_raw(p + 22, 4); /* ecc bytes */
447 padstr((uint8_t *)(p + 23), QEMU_VERSION, 8); /* firmware version */
448 padstr((uint8_t *)(p + 27), "QEMU CD-ROM", 40); /* model */
449 stw_raw(p + 48, 1); /* dword I/O (XXX: should not be set on CDROM) */
450 stw_raw(p + 49, 1 << 9); /* LBA supported, no DMA */
451 stw_raw(p + 53, 3); /* words 64-70, 54-58 valid */
452 stw_raw(p + 63, 0x103); /* DMA modes XXX: may be incorrect */
453 stw_raw(p + 64, 1); /* PIO modes */
454 stw_raw(p + 65, 0xb4); /* minimum DMA multiword tx cycle time */
455 stw_raw(p + 66, 0xb4); /* recommended DMA multiword tx cycle time */
456 stw_raw(p + 67, 0x12c); /* minimum PIO cycle time without flow control */
457 stw_raw(p + 68, 0xb4); /* minimum PIO cycle time with IORDY flow control */
458
459 stw_raw(p + 71, 30); /* in ns */
460 stw_raw(p + 72, 30); /* in ns */
461
462 stw_raw(p + 80, 0x1e); /* support up to ATA/ATAPI-4 */
463}
464
465static void ide_set_signature(IDEState *s)
466{
467 s->select &= 0xf0; /* clear head */
468 /* put signature */
469 s->nsector = 1;
470 s->sector = 1;
471 if (s->is_cdrom) {
472 s->lcyl = 0x14;
473 s->hcyl = 0xeb;
474 } else if (s->bs) {
475 s->lcyl = 0;
476 s->hcyl = 0;
477 } else {
478 s->lcyl = 0xff;
479 s->hcyl = 0xff;
480 }
481}
482
483static inline void ide_abort_command(IDEState *s)
484{
485 s->status = READY_STAT | ERR_STAT;
486 s->error = ABRT_ERR;
487}
488
489static inline void ide_set_irq(IDEState *s)
490{
491 if (!(s->cmd & IDE_CMD_DISABLE_IRQ)) {
492 pic_set_irq(s->irq, 1);
493 }
494}
495
496/* prepare data transfer and tell what to do after */
497static void ide_transfer_start(IDEState *s, uint8_t *buf, int size,
498 EndTransferFunc *end_transfer_func)
499{
500 s->end_transfer_func = end_transfer_func;
501 s->data_ptr = buf;
502 s->data_end = buf + size;
503 s->status |= DRQ_STAT;
504}
505
506static void ide_transfer_stop(IDEState *s)
507{
508 s->end_transfer_func = ide_transfer_stop;
509 s->data_ptr = s->io_buffer;
510 s->data_end = s->io_buffer;
511 s->status &= ~DRQ_STAT;
512}
513
514static int64_t ide_get_sector(IDEState *s)
515{
516 int64_t sector_num;
517 if (s->select & 0x40) {
518 /* lba */
519 sector_num = ((s->select & 0x0f) << 24) | (s->hcyl << 16) |
520 (s->lcyl << 8) | s->sector;
521 } else {
522 sector_num = ((s->hcyl << 8) | s->lcyl) * s->heads * s->sectors +
523 (s->select & 0x0f) * s->sectors +
524 (s->sector - 1);
525 }
526 return sector_num;
527}
528
529static void ide_set_sector(IDEState *s, int64_t sector_num)
530{
531 unsigned int cyl, r;
532 if (s->select & 0x40) {
533 s->select = (s->select & 0xf0) | (sector_num >> 24);
534 s->hcyl = (sector_num >> 16);
535 s->lcyl = (sector_num >> 8);
536 s->sector = (sector_num);
537 } else {
538 cyl = sector_num / (s->heads * s->sectors);
539 r = sector_num % (s->heads * s->sectors);
540 s->hcyl = cyl >> 8;
541 s->lcyl = cyl;
542 s->select = (s->select & 0xf0) | (r / s->sectors);
543 s->sector = (r % s->sectors) + 1;
544 }
545}
546
547static void ide_sector_read(IDEState *s)
548{
549 int64_t sector_num;
550 int ret, n;
551
552 s->status = READY_STAT | SEEK_STAT;
a136e5a8 553 s->error = 0; /* not needed by IDE spec, but needed by Windows */
5391d806
FB		 554 sector_num = ide_get_sector(s);
555 n = s->nsector;
556 if (n == 0) {
557 /* no more sector to read from disk */
558 ide_transfer_stop(s);
559 } else {
560#if defined(DEBUG_IDE)
561 printf("read sector=%Ld\n", sector_num);
562#endif
563 if (n > s->req_nb_sectors)
564 n = s->req_nb_sectors;
565 ret = bdrv_read(s->bs, sector_num, s->io_buffer, n);
566 ide_transfer_start(s, s->io_buffer, 512 * n, ide_sector_read);
567 ide_set_irq(s);
568 ide_set_sector(s, sector_num + n);
569 s->nsector -= n;
570 }
571}
572
573static void ide_sector_write(IDEState *s)
574{
575 int64_t sector_num;
576 int ret, n, n1;
577
578 s->status = READY_STAT | SEEK_STAT;
579 sector_num = ide_get_sector(s);
580#if defined(DEBUG_IDE)
581 printf("write sector=%Ld\n", sector_num);
582#endif
583 n = s->nsector;
584 if (n > s->req_nb_sectors)
585 n = s->req_nb_sectors;
586 ret = bdrv_write(s->bs, sector_num, s->io_buffer, n);
587 s->nsector -= n;
588 if (s->nsector == 0) {
589 /* no more sector to write */
590 ide_transfer_stop(s);
591 } else {
592 n1 = s->nsector;
593 if (n1 > s->req_nb_sectors)
594 n1 = s->req_nb_sectors;
595 ide_transfer_start(s, s->io_buffer, 512 * n1, ide_sector_write);
596 }
597 ide_set_sector(s, sector_num + n);
598 ide_set_irq(s);
599}
600
601static void ide_atapi_cmd_ok(IDEState *s)
602{
603 s->error = 0;
604 s->status = READY_STAT;
605 s->nsector = (s->nsector & ~7) | ATAPI_INT_REASON_IO | ATAPI_INT_REASON_CD;
606 ide_set_irq(s);
607}
608
609static void ide_atapi_cmd_error(IDEState *s, int sense_key, int asc)
610{
611#ifdef DEBUG_IDE_ATAPI
612 printf("atapi_cmd_error: sense=0x%x asc=0x%x\n", sense_key, asc);
613#endif
614 s->error = sense_key << 4;
615 s->status = READY_STAT | ERR_STAT;
616 s->nsector = (s->nsector & ~7) | ATAPI_INT_REASON_IO | ATAPI_INT_REASON_CD;
617 s->sense_key = sense_key;
618 s->asc = asc;
619 ide_set_irq(s);
620}
621
622static inline void cpu_to_ube16(uint8_t *buf, int val)
623{
624 buf[0] = val >> 8;
625 buf[1] = val;
626}
627
628static inline void cpu_to_ube32(uint8_t *buf, unsigned int val)
629{
630 buf[0] = val >> 24;
631 buf[1] = val >> 16;
632 buf[2] = val >> 8;
633 buf[3] = val;
634}
635
636static inline int ube16_to_cpu(const uint8_t *buf)
637{
638 return (buf[0] << 8) | buf[1];
639}
640
641static inline int ube32_to_cpu(const uint8_t *buf)
642{
643 return (buf[0] << 24) | (buf[1] << 16) | (buf[2] << 8) | buf[3];
644}
645
646/* The whole ATAPI transfer logic is handled in this function */
647static void ide_atapi_cmd_reply_end(IDEState *s)
648{
649 int byte_count_limit, size;
650#ifdef DEBUG_IDE_ATAPI
651 printf("reply: tx_size=%d elem_tx_size=%d index=%d\n",
652 s->packet_transfer_size,
653 s->elementary_transfer_size,
654 s->io_buffer_index);
655#endif
656 if (s->packet_transfer_size <= 0) {
657 /* end of transfer */
658 ide_transfer_stop(s);
659 s->status = READY_STAT;
660 s->nsector = (s->nsector & ~7) | ATAPI_INT_REASON_IO | ATAPI_INT_REASON_CD;
661 ide_set_irq(s);
662#ifdef DEBUG_IDE_ATAPI
663 printf("status=0x%x\n", s->status);
664#endif
665 } else {
666 /* see if a new sector must be read */
667 if (s->lba != -1 && s->io_buffer_index >= 2048) {
668 bdrv_read(s->bs, (int64_t)s->lba << 2, s->io_buffer, 4);
669 s->lba++;
670 s->io_buffer_index = 0;
671 }
672 if (s->elementary_transfer_size > 0) {
673 /* there are some data left to transmit in this elementary
674 transfer */
675 size = 2048 - s->io_buffer_index;
676 if (size > s->elementary_transfer_size)
677 size = s->elementary_transfer_size;
678 ide_transfer_start(s, s->io_buffer + s->io_buffer_index,
679 size, ide_atapi_cmd_reply_end);
680 s->packet_transfer_size -= size;
681 s->elementary_transfer_size -= size;
682 s->io_buffer_index += size;
683 } else {
684 /* a new transfer is needed */
685 s->nsector = (s->nsector & ~7) | ATAPI_INT_REASON_IO;
686 byte_count_limit = s->lcyl | (s->hcyl << 8);
687#ifdef DEBUG_IDE_ATAPI
688 printf("byte_count_limit=%d\n", byte_count_limit);
689#endif
690 if (byte_count_limit == 0xffff)
691 byte_count_limit--;
692 size = s->packet_transfer_size;
693 if (size > byte_count_limit) {
694 /* byte count limit must be even if this case */
695 if (byte_count_limit & 1)
696 byte_count_limit--;
697 size = byte_count_limit;
5391d806 698 }
a136e5a8
FB		 699 s->lcyl = size;
700 s->hcyl = size >> 8;
5391d806
FB		 701 s->elementary_transfer_size = size;
702 /* we cannot transmit more than one sector at a time */
703 if (s->lba != -1) {
704 if (size > (2048 - s->io_buffer_index))
705 size = (2048 - s->io_buffer_index);
706 }
707 ide_transfer_start(s, s->io_buffer + s->io_buffer_index,
708 size, ide_atapi_cmd_reply_end);
709 s->packet_transfer_size -= size;
710 s->elementary_transfer_size -= size;
711 s->io_buffer_index += size;
712 ide_set_irq(s);
713#ifdef DEBUG_IDE_ATAPI
714 printf("status=0x%x\n", s->status);
715#endif
716 }
717 }
718}
719
720/* send a reply of 'size' bytes in s->io_buffer to an ATAPI command */
721static void ide_atapi_cmd_reply(IDEState *s, int size, int max_size)
722{
723 if (size > max_size)
724 size = max_size;
725 s->lba = -1; /* no sector read */
726 s->packet_transfer_size = size;
727 s->elementary_transfer_size = 0;
728 s->io_buffer_index = 0;
729
730 s->status = READY_STAT;
731 ide_atapi_cmd_reply_end(s);
732}
733
734/* start a CD-CDROM read command */
735static void ide_atapi_cmd_read(IDEState *s, int lba, int nb_sectors)
736{
737#ifdef DEBUG_IDE_ATAPI
738 printf("read: LBA=%d nb_sectors=%d\n", lba, nb_sectors);
739#endif
740 s->lba = lba;
741 s->packet_transfer_size = nb_sectors * 2048;
742 s->elementary_transfer_size = 0;
743 s->io_buffer_index = 2048;
744
745 s->status = READY_STAT;
746 ide_atapi_cmd_reply_end(s);
747}
748
749/* same toc as bochs. Return -1 if error or the toc length */
750static int cdrom_read_toc(IDEState *s, uint8_t *buf, int msf, int start_track)
751{
752 uint8_t *q;
753 int nb_sectors, len;
754
755 if (start_track > 1 && start_track != 0xaa)
756 return -1;
757 q = buf + 2;
758 *q++ = 1;
759 *q++ = 1;
760 if (start_track <= 1) {
761 *q++ = 0; /* reserved */
762 *q++ = 0x14; /* ADR, control */
763 *q++ = 1; /* track number */
764 *q++ = 0; /* reserved */
765 if (msf) {
766 *q++ = 0; /* reserved */
767 *q++ = 0; /* minute */
768 *q++ = 2; /* second */
769 *q++ = 0; /* frame */
770 } else {
771 /* sector 0 */
772 cpu_to_ube32(q, 0);
773 q += 4;
774 }
775 }
776 /* lead out track */
777 *q++ = 0; /* reserved */
778 *q++ = 0x16; /* ADR, control */
779 *q++ = 0xaa; /* track number */
780 *q++ = 0; /* reserved */
781 nb_sectors = s->nb_sectors >> 2;
782 if (msf) {
783 *q++ = 0; /* reserved */
784 *q++ = ((nb_sectors + 150) / 75) / 60;
785 *q++ = ((nb_sectors + 150) / 75) % 60;
786 *q++ = (nb_sectors + 150) % 75;
787 } else {
788 cpu_to_ube32(q, nb_sectors);
789 q += 4;
790 }
791 len = q - buf;
792 cpu_to_ube16(buf, len - 2);
793 return len;
794}
795
796static void ide_atapi_cmd(IDEState *s)
797{
798 const uint8_t *packet;
799 uint8_t *buf;
800 int max_len;
801
802 packet = s->io_buffer;
803 buf = s->io_buffer;
804#ifdef DEBUG_IDE_ATAPI
805 {
806 int i;
807 printf("ATAPI limit=0x%x packet:", s->lcyl | (s->hcyl << 8));
808 for(i = 0; i < ATAPI_PACKET_SIZE; i++) {
809 printf(" %02x", packet[i]);
810 }
811 printf("\n");
812 }
813#endif
814 switch(s->io_buffer[0]) {
815 case GPCMD_TEST_UNIT_READY:
816 if (s->bs) {
817 ide_atapi_cmd_ok(s);
818 } else {
819 ide_atapi_cmd_error(s, SENSE_NOT_READY,
820 ASC_MEDIUM_NOT_PRESENT);
821 }
822 break;
823 case GPCMD_MODE_SENSE_10:
824 {
825 int action, code;
826 max_len = ube16_to_cpu(packet + 7);
827 action = packet[2] >> 6;
828 code = packet[2] & 0x3f;
829 switch(action) {
830 case 0: /* current values */
831 switch(code) {
832 case 0x01: /* error recovery */
833 cpu_to_ube16(&buf[0], 16 + 6);
834 buf[2] = 0x70;
835 buf[3] = 0;
836 buf[4] = 0;
837 buf[5] = 0;
838 buf[6] = 0;
839 buf[7] = 0;
840
841 buf[8] = 0x01;
842 buf[9] = 0x06;
843 buf[10] = 0x00;
844 buf[11] = 0x05;
845 buf[12] = 0x00;
846 buf[13] = 0x00;
847 buf[14] = 0x00;
848 buf[15] = 0x00;
849 ide_atapi_cmd_reply(s, 16, max_len);
850 break;
851 case 0x2a:
852 cpu_to_ube16(&buf[0], 28 + 6);
853 buf[2] = 0x70;
854 buf[3] = 0;
855 buf[4] = 0;
856 buf[5] = 0;
857 buf[6] = 0;
858 buf[7] = 0;
859
860 buf[8] = 0x2a;
861 buf[9] = 0x12;
862 buf[10] = 0x00;
863 buf[11] = 0x00;
864
865 buf[12] = 0x70;
866 buf[13] = 3 << 5;
867 buf[14] = (1 << 0) | (1 << 3) | (1 << 5);
868 if (s->cdrom_locked)
869 buf[6] |= 1 << 1;
870 buf[15] = 0x00;
871 cpu_to_ube16(&buf[16], 706);
872 buf[18] = 0;
873 buf[19] = 2;
874 cpu_to_ube16(&buf[20], 512);
875 cpu_to_ube16(&buf[22], 706);
876 buf[24] = 0;
877 buf[25] = 0;
878 buf[26] = 0;
879 buf[27] = 0;
880 ide_atapi_cmd_reply(s, 28, max_len);
881 break;
882 default:
883 goto error_cmd;
884 }
885 break;
886 case 1: /* changeable values */
887 goto error_cmd;
888 case 2: /* default values */
889 goto error_cmd;
890 default:
891 case 3: /* saved values */
892 ide_atapi_cmd_error(s, SENSE_ILLEGAL_REQUEST,
893 ASC_SAVING_PARAMETERS_NOT_SUPPORTED);
894 break;
895 }
896 }
897 break;
898 case GPCMD_REQUEST_SENSE:
899 max_len = packet[4];
900 memset(buf, 0, 18);
901 buf[0] = 0x70 | (1 << 7);
902 buf[2] = s->sense_key;
903 buf[7] = 10;
904 buf[12] = s->asc;
905 ide_atapi_cmd_reply(s, 18, max_len);
906 break;
907 case GPCMD_PREVENT_ALLOW_MEDIUM_REMOVAL:
908 if (s->bs) {
909 s->cdrom_locked = packet[4] & 1;
910 ide_atapi_cmd_ok(s);
911 } else {
912 ide_atapi_cmd_error(s, SENSE_NOT_READY,
913 ASC_MEDIUM_NOT_PRESENT);
914 }
915 break;
916 case GPCMD_READ_10:
917 case GPCMD_READ_12:
918 {
919 int nb_sectors, lba;
920
921 if (!s->bs) {
922 ide_atapi_cmd_error(s, SENSE_NOT_READY,
923 ASC_MEDIUM_NOT_PRESENT);
924 break;
925 }
926 if (packet[0] == GPCMD_READ_10)
927 nb_sectors = ube16_to_cpu(packet + 7);
928 else
929 nb_sectors = ube32_to_cpu(packet + 6);
930 lba = ube32_to_cpu(packet + 2);
931 if (nb_sectors == 0) {
932 ide_atapi_cmd_ok(s);
933 break;
934 }
935 if (((int64_t)(lba + nb_sectors) << 2) > s->nb_sectors) {
936 ide_atapi_cmd_error(s, SENSE_ILLEGAL_REQUEST,
937 ASC_LOGICAL_BLOCK_OOR);
938 break;
939 }
940 ide_atapi_cmd_read(s, lba, nb_sectors);
941 }
942 break;
943 case GPCMD_SEEK:
944 {
945 int lba;
946 if (!s->bs) {
947 ide_atapi_cmd_error(s, SENSE_NOT_READY,
948 ASC_MEDIUM_NOT_PRESENT);
949 break;
950 }
951 lba = ube32_to_cpu(packet + 2);
952 if (((int64_t)lba << 2) > s->nb_sectors) {
953 ide_atapi_cmd_error(s, SENSE_ILLEGAL_REQUEST,
954 ASC_LOGICAL_BLOCK_OOR);
955 break;
956 }
957 ide_atapi_cmd_ok(s);
958 }
959 break;
960 case GPCMD_START_STOP_UNIT:
961 {
962 int start, eject;
963 start = packet[4] & 1;
964 eject = (packet[4] >> 1) & 1;
965
966 /* XXX: currently none implemented */
967 ide_atapi_cmd_ok(s);
968 }
969 break;
970 case GPCMD_MECHANISM_STATUS:
971 {
972 max_len = ube16_to_cpu(packet + 8);
973 cpu_to_ube16(buf, 0);
974 /* no current LBA */
975 buf[2] = 0;
976 buf[3] = 0;
977 buf[4] = 0;
978 buf[5] = 1;
979 cpu_to_ube16(buf + 6, 0);
980 ide_atapi_cmd_reply(s, 8, max_len);
981 }
982 break;
983 case GPCMD_READ_TOC_PMA_ATIP:
984 {
985 int format, msf, start_track, len;
986
987 if (!s->bs) {
988 ide_atapi_cmd_error(s, SENSE_NOT_READY,
989 ASC_MEDIUM_NOT_PRESENT);
990 break;
991 }
992 max_len = ube16_to_cpu(packet + 7);
993 format = packet[9] >> 6;
994 msf = (packet[1] >> 1) & 1;
995 start_track = packet[6];
996 switch(format) {
997 case 0:
998 len = cdrom_read_toc(s, buf, msf, start_track);
999 if (len < 0)
1000 goto error_cmd;
1001 ide_atapi_cmd_reply(s, len, max_len);
1002 break;
1003 case 1:
1004 /* multi session : only a single session defined */
1005 memset(buf, 0, 12);
1006 buf[1] = 0x0a;
1007 buf[2] = 0x01;
1008 buf[3] = 0x01;
1009 ide_atapi_cmd_reply(s, 12, max_len);
1010 break;
1011 default:
1012 goto error_cmd;
1013 }
1014 }
1015 break;
1016 case GPCMD_READ_CDVD_CAPACITY:
1017 if (!s->bs) {
1018 ide_atapi_cmd_error(s, SENSE_NOT_READY,
1019 ASC_MEDIUM_NOT_PRESENT);
1020 break;
1021 }
1022 /* NOTE: it is really the number of sectors minus 1 */
1023 cpu_to_ube32(buf, (s->nb_sectors >> 2) - 1);
1024 cpu_to_ube32(buf + 4, 2048);
1025 ide_atapi_cmd_reply(s, 8, 8);
1026 break;
bd0d90b2
FB		 1027 case GPCMD_INQUIRY:
1028 max_len = packet[4];
1029 buf[0] = 0x05; /* CD-ROM */
1030 buf[1] = 0x80; /* removable */
1031 buf[2] = 0x00; /* ISO */
1032 buf[3] = 0x21; /* ATAPI-2 (XXX: put ATAPI-4 ?) */
1033 buf[4] = 31; /* additionnal length */
1034 buf[5] = 0; /* reserved */
1035 buf[6] = 0; /* reserved */
1036 buf[7] = 0; /* reserved */
1037 padstr8(buf + 8, 8, "QEMU");
1038 padstr8(buf + 16, 16, "QEMU CD-ROM");
1039 padstr8(buf + 32, 4, QEMU_VERSION);
1040 ide_atapi_cmd_reply(s, 36, max_len);
1041 break;
5391d806
FB		 1042 default:
1043 error_cmd:
1044 ide_atapi_cmd_error(s, SENSE_ILLEGAL_REQUEST,
1045 ASC_INV_FIELD_IN_CMD_PACKET);
1046 break;
1047 }
1048}
1049
7138fcfb 1050static void ide_ioport_write(CPUState *env, uint32_t addr, uint32_t val)
5391d806
FB		 1051{
1052 IDEState *ide_if = get_ide_interface(addr);
1053 IDEState *s = ide_if->cur_drive;
1054 int unit, n;
1055
1056#ifdef DEBUG_IDE
1057 printf("IDE: write addr=0x%x val=0x%02x\n", addr, val);
1058#endif
1059 addr &= 7;
1060 switch(addr) {
1061 case 0:
1062 break;
1063 case 1:
1064 s->feature = val;
1065 break;
1066 case 2:
1067 if (val == 0)
1068 val = 256;
1069 s->nsector = val;
1070 break;
1071 case 3:
1072 s->sector = val;
1073 break;
1074 case 4:
1075 s->lcyl = val;
1076 break;
1077 case 5:
1078 s->hcyl = val;
1079 break;
1080 case 6:
1081 /* select drive */
1082 unit = (val >> 4) & 1;
1083 s = ide_if + unit;
1084 ide_if->cur_drive = s;
1085 s->select = val;
1086 break;
1087 default:
1088 case 7:
1089 /* command */
1090#if defined(DEBUG_IDE)
1091 printf("ide: CMD=%02x\n", val);
1092#endif
1093 switch(val) {
1094 case WIN_IDENTIFY:
1095 if (s->bs && !s->is_cdrom) {
1096 ide_identify(s);
1097 s->status = READY_STAT;
1098 ide_transfer_start(s, s->io_buffer, 512, ide_transfer_stop);
1099 } else {
1100 if (s->is_cdrom) {
1101 ide_set_signature(s);
1102 }
1103 ide_abort_command(s);
1104 }
1105 ide_set_irq(s);
1106 break;
1107 case WIN_SPECIFY:
1108 case WIN_RECAL:
a136e5a8 1109 s->error = 0;
5391d806
FB		 1110 s->status = READY_STAT;
1111 ide_set_irq(s);
1112 break;
1113 case WIN_SETMULT:
1114 if (s->nsector > MAX_MULT_SECTORS ||
1115 s->nsector == 0 ||
1116 (s->nsector & (s->nsector - 1)) != 0) {
1117 ide_abort_command(s);
1118 } else {
1119 s->mult_sectors = s->nsector;
1120 s->status = READY_STAT;
1121 }
1122 ide_set_irq(s);
1123 break;
4ce900b4
FB		 1124 case WIN_VERIFY:
1125 case WIN_VERIFY_ONCE:
1126 /* do sector number check ? */
1127 s->status = READY_STAT;
1128 ide_set_irq(s);
1129 break;
5391d806
FB		 1130 case WIN_READ:
1131 case WIN_READ_ONCE:
6b136f9e
FB		 1132 if (!s->bs)
1133 goto abort_cmd;
5391d806
FB		 1134 s->req_nb_sectors = 1;
1135 ide_sector_read(s);
1136 break;
1137 case WIN_WRITE:
1138 case WIN_WRITE_ONCE:
a136e5a8 1139 s->error = 0;
5391d806
FB		 1140 s->status = SEEK_STAT;
1141 s->req_nb_sectors = 1;
1142 ide_transfer_start(s, s->io_buffer, 512, ide_sector_write);
1143 break;
1144 case WIN_MULTREAD:
1145 if (!s->mult_sectors)
1146 goto abort_cmd;
1147 s->req_nb_sectors = s->mult_sectors;
1148 ide_sector_read(s);
1149 break;
1150 case WIN_MULTWRITE:
1151 if (!s->mult_sectors)
1152 goto abort_cmd;
a136e5a8 1153 s->error = 0;
5391d806
FB		 1154 s->status = SEEK_STAT;
1155 s->req_nb_sectors = s->mult_sectors;
1156 n = s->nsector;
1157 if (n > s->req_nb_sectors)
1158 n = s->req_nb_sectors;
1159 ide_transfer_start(s, s->io_buffer, 512 * n, ide_sector_write);
1160 break;
1161 case WIN_READ_NATIVE_MAX:
1162 ide_set_sector(s, s->nb_sectors - 1);
1163 s->status = READY_STAT;
1164 ide_set_irq(s);
1165 break;
a136e5a8
FB		 1166 case WIN_CHECKPOWERMODE1:
1167 s->nsector = 0xff; /* device active or idle */
1168 s->status = READY_STAT;
1169 ide_set_irq(s);
1170 break;
5391d806
FB		 1171
1172 /* ATAPI commands */
1173 case WIN_PIDENTIFY:
1174 if (s->is_cdrom) {
1175 ide_atapi_identify(s);
1176 s->status = READY_STAT;
1177 ide_transfer_start(s, s->io_buffer, 512, ide_transfer_stop);
1178 } else {
1179 ide_abort_command(s);
1180 }
1181 ide_set_irq(s);
1182 break;
1183 case WIN_SRST:
1184 if (!s->is_cdrom)
1185 goto abort_cmd;
1186 ide_set_signature(s);
6b136f9e 1187 s->status = 0x00; /* NOTE: READY is _not_ set */
5391d806
FB		 1188 s->error = 0x01;
1189 break;
1190 case WIN_PACKETCMD:
1191 if (!s->is_cdrom)
1192 goto abort_cmd;
1193 /* DMA or overlapping commands not supported */
1194 if ((s->feature & 0x03) != 0)
1195 goto abort_cmd;
1196 s->nsector = 1;
1197 ide_transfer_start(s, s->io_buffer, ATAPI_PACKET_SIZE,
1198 ide_atapi_cmd);
1199 break;
1200 default:
1201 abort_cmd:
1202 ide_abort_command(s);
1203 ide_set_irq(s);
1204 break;
1205 }
1206 }
1207}
1208
7138fcfb 1209static uint32_t ide_ioport_read(CPUState *env, uint32_t addr1)
5391d806
FB		 1210{
1211 IDEState *s = get_ide_interface(addr1)->cur_drive;
1212 uint32_t addr;
1213 int ret;
1214
1215 addr = addr1 & 7;
1216 switch(addr) {
1217 case 0:
1218 ret = 0xff;
1219 break;
1220 case 1:
1221 ret = s->error;
1222 break;
1223 case 2:
1224 ret = s->nsector & 0xff;
1225 break;
1226 case 3:
1227 ret = s->sector;
1228 break;
1229 case 4:
1230 ret = s->lcyl;
1231 break;
1232 case 5:
1233 ret = s->hcyl;
1234 break;
1235 case 6:
1236 ret = s->select;
1237 break;
1238 default:
1239 case 7:
1240 ret = s->status;
1241 pic_set_irq(s->irq, 0);
1242 break;
1243 }
1244#ifdef DEBUG_IDE
1245 printf("ide: read addr=0x%x val=%02x\n", addr1, ret);
1246#endif
1247 return ret;
1248}
1249
7138fcfb 1250static uint32_t ide_status_read(CPUState *env, uint32_t addr)
5391d806
FB		 1251{
1252 IDEState *s = get_ide_interface(addr)->cur_drive;
1253 int ret;
1254 ret = s->status;
1255#ifdef DEBUG_IDE
1256 printf("ide: read status addr=0x%x val=%02x\n", addr, ret);
1257#endif
1258 return ret;
1259}
1260
7138fcfb 1261static void ide_cmd_write(CPUState *env, uint32_t addr, uint32_t val)
5391d806
FB		 1262{
1263 IDEState *ide_if = get_ide_interface(addr);
1264 IDEState *s;
1265 int i;
1266
1267#ifdef DEBUG_IDE
1268 printf("ide: write control addr=0x%x val=%02x\n", addr, val);
1269#endif
1270 /* common for both drives */
1271 if (!(ide_if[0].cmd & IDE_CMD_RESET) &&
1272 (val & IDE_CMD_RESET)) {
1273 /* reset low to high */
1274 for(i = 0;i < 2; i++) {
1275 s = &ide_if[i];
1276 s->status = BUSY_STAT | SEEK_STAT;
1277 s->error = 0x01;
1278 }
1279 } else if ((ide_if[0].cmd & IDE_CMD_RESET) &&
1280 !(val & IDE_CMD_RESET)) {
1281 /* high to low */
1282 for(i = 0;i < 2; i++) {
1283 s = &ide_if[i];
6b136f9e
FB		 1284 if (s->is_cdrom)
1285 s->status = 0x00; /* NOTE: READY is _not_ set */
1286 else
1287 s->status = READY_STAT;
5391d806
FB		 1288 ide_set_signature(s);
1289 }
1290 }
1291
1292 ide_if[0].cmd = val;
1293 ide_if[1].cmd = val;
1294}
1295
7138fcfb 1296static void ide_data_writew(CPUState *env, uint32_t addr, uint32_t val)
5391d806
FB		 1297{
1298 IDEState *s = get_ide_interface(addr)->cur_drive;
1299 uint8_t *p;
1300
1301 p = s->data_ptr;
1302 *(uint16_t *)p = tswap16(val);
1303 p += 2;
1304 s->data_ptr = p;
1305 if (p >= s->data_end)
1306 s->end_transfer_func(s);
1307}
1308
7138fcfb 1309static uint32_t ide_data_readw(CPUState *env, uint32_t addr)
5391d806
FB		 1310{
1311 IDEState *s = get_ide_interface(addr)->cur_drive;
1312 uint8_t *p;
1313 int ret;
1314 p = s->data_ptr;
1315 ret = tswap16(*(uint16_t *)p);
1316 p += 2;
1317 s->data_ptr = p;
1318 if (p >= s->data_end)
1319 s->end_transfer_func(s);
1320 return ret;
1321}
1322
7138fcfb 1323static void ide_data_writel(CPUState *env, uint32_t addr, uint32_t val)
5391d806
FB		 1324{
1325 IDEState *s = get_ide_interface(addr)->cur_drive;
1326 uint8_t *p;
1327
1328 p = s->data_ptr;
1329 *(uint32_t *)p = tswap32(val);
1330 p += 4;
1331 s->data_ptr = p;
1332 if (p >= s->data_end)
1333 s->end_transfer_func(s);
1334}
1335
7138fcfb 1336static uint32_t ide_data_readl(CPUState *env, uint32_t addr)
5391d806
FB		 1337{
1338 IDEState *s = get_ide_interface(addr)->cur_drive;
1339 uint8_t *p;
1340 int ret;
1341
1342 p = s->data_ptr;
1343 ret = tswap32(*(uint32_t *)p);
1344 p += 4;
1345 s->data_ptr = p;
1346 if (p >= s->data_end)
1347 s->end_transfer_func(s);
1348 return ret;
1349}
1350
1351static void ide_reset(IDEState *s)
1352{
1353 s->mult_sectors = MAX_MULT_SECTORS;
1354 s->cur_drive = s;
1355 s->select = 0xa0;
1356 s->status = READY_STAT;
1357 ide_set_signature(s);
1358}
1359
1360struct partition {
1361 uint8_t boot_ind; /* 0x80 - active */
1362 uint8_t head; /* starting head */
1363 uint8_t sector; /* starting sector */
1364 uint8_t cyl; /* starting cylinder */
1365 uint8_t sys_ind; /* What partition type */
1366 uint8_t end_head; /* end head */
1367 uint8_t end_sector; /* end sector */
1368 uint8_t end_cyl; /* end cylinder */
1369 uint32_t start_sect; /* starting sector counting from 0 */
1370 uint32_t nr_sects; /* nr of sectors in partition */
1371} __attribute__((packed));
1372
1373/* try to guess the IDE geometry from the MSDOS partition table */
1374static void ide_guess_geometry(IDEState *s)
1375{
1376 uint8_t buf[512];
1377 int ret, i;
1378 struct partition *p;
1379 uint32_t nr_sects;
1380
1381 if (s->cylinders != 0)
1382 return;
1383 ret = bdrv_read(s->bs, 0, buf, 1);
1384 if (ret < 0)
1385 return;
1386 /* test msdos magic */
1387 if (buf[510] != 0x55 || buf[511] != 0xaa)
1388 return;
1389 for(i = 0; i < 4; i++) {
1390 p = ((struct partition *)(buf + 0x1be)) + i;
1391 nr_sects = tswap32(p->nr_sects);
1392 if (nr_sects && p->end_head) {
1393 /* We make the assumption that the partition terminates on
1394 a cylinder boundary */
1395 s->heads = p->end_head + 1;
1396 s->sectors = p->end_sector & 63;
1397 s->cylinders = s->nb_sectors / (s->heads * s->sectors);
1398#if 0
1399 printf("guessed partition: CHS=%d %d %d\n",
1400 s->cylinders, s->heads, s->sectors);
1401#endif
1402 }
1403 }
1404}
1405
1406void ide_init(void)
1407{
1408 IDEState *s;
1409 int i, cylinders, iobase, iobase2;
1410 int64_t nb_sectors;
1411 static const int ide_iobase[2] = { 0x1f0, 0x170 };
1412 static const int ide_iobase2[2] = { 0x3f6, 0x376 };
1413 static const int ide_irq[2] = { 14, 15 };
1414
1415 for(i = 0; i < MAX_DISKS; i++) {
1416 s = &ide_state[i];
1417 s->bs = bs_table[i];
1418 if (s->bs) {
1419 bdrv_get_geometry(s->bs, &nb_sectors);
1420 s->nb_sectors = nb_sectors;
1421 ide_guess_geometry(s);
1422 if (s->cylinders == 0) {
1423 /* if no geometry, use a LBA compatible one */
1424 cylinders = nb_sectors / (16 * 63);
1425 if (cylinders > 16383)
1426 cylinders = 16383;
1427 else if (cylinders < 2)
1428 cylinders = 2;
1429 s->cylinders = cylinders;
1430 s->heads = 16;
1431 s->sectors = 63;
1432 }
1433 }
1434 s->irq = ide_irq[i >> 1];
1435 ide_reset(s);
1436 }
1437 for(i = 0; i < (MAX_DISKS / 2); i++) {
1438 iobase = ide_iobase[i];
1439 iobase2 = ide_iobase2[i];
1440 ide_table[iobase >> 3] = &ide_state[2 * i];
1441 if (ide_iobase2[i])
1442 ide_table[iobase2 >> 3] = &ide_state[2 * i];
1443 register_ioport_write(iobase, 8, ide_ioport_write, 1);
1444 register_ioport_read(iobase, 8, ide_ioport_read, 1);
1445 register_ioport_read(iobase2, 1, ide_status_read, 1);
1446 register_ioport_write(iobase2, 1, ide_cmd_write, 1);
1447
1448 /* data ports */
1449 register_ioport_write(iobase, 2, ide_data_writew, 2);
1450 register_ioport_read(iobase, 2, ide_data_readw, 2);
1451 register_ioport_write(iobase, 4, ide_data_writel, 4);
1452 register_ioport_read(iobase, 4, ide_data_readl, 4);
1453 }
1454}
1455
1456void ide_set_geometry(int n, int cyls, int heads, int secs)
1457{
1458 ide_state[n].cylinders = cyls;
1459 ide_state[n].heads = heads;
1460 ide_state[n].sectors = secs;
1461}
1462
1463void ide_set_cdrom(int n, int is_cdrom)
1464{
1465 ide_state[n].is_cdrom = is_cdrom;
1466}
Qemu copy for testing