]> git.proxmox.com Git - qemu.git/blame - hw/mac_dbdma.c
savevm: Add DeviceState param
[qemu.git] / hw / mac_dbdma.c
CommitLineData
3cbee15b
JM
1/*
2 * PowerMac descriptor-based DMA emulation
3 *
4 * Copyright (c) 2005-2007 Fabrice Bellard
5 * Copyright (c) 2007 Jocelyn Mayer
28ce5ce6
AJ
6 * Copyright (c) 2009 Laurent Vivier
7 *
8 * some parts from linux-2.6.28, arch/powerpc/include/asm/dbdma.h
9 *
10 * Definitions for using the Apple Descriptor-Based DMA controller
11 * in Power Macintosh computers.
12 *
13 * Copyright (C) 1996 Paul Mackerras.
14 *
15 * some parts from mol 0.9.71
16 *
17 * Descriptor based DMA emulation
18 *
19 * Copyright (C) 1998-2004 Samuel Rydh (samuel@ibrium.se)
3cbee15b
JM
20 *
21 * Permission is hereby granted, free of charge, to any person obtaining a copy
22 * of this software and associated documentation files (the "Software"), to deal
23 * in the Software without restriction, including without limitation the rights
24 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
25 * copies of the Software, and to permit persons to whom the Software is
26 * furnished to do so, subject to the following conditions:
27 *
28 * The above copyright notice and this permission notice shall be included in
29 * all copies or substantial portions of the Software.
30 *
31 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
32 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
33 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
34 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
35 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
36 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
37 * THE SOFTWARE.
38 */
87ecb68b 39#include "hw.h"
28ce5ce6
AJ
40#include "isa.h"
41#include "mac_dbdma.h"
3cbee15b 42
ea026b2f
BS
43/* debug DBDMA */
44//#define DEBUG_DBDMA
45
46#ifdef DEBUG_DBDMA
001faf32
BS
47#define DBDMA_DPRINTF(fmt, ...) \
48 do { printf("DBDMA: " fmt , ## __VA_ARGS__); } while (0)
ea026b2f 49#else
001faf32 50#define DBDMA_DPRINTF(fmt, ...)
ea026b2f
BS
51#endif
52
28ce5ce6
AJ
53/*
54 */
55
56/*
57 * DBDMA control/status registers. All little-endian.
58 */
3cbee15b 59
28ce5ce6
AJ
60#define DBDMA_CONTROL 0x00
61#define DBDMA_STATUS 0x01
62#define DBDMA_CMDPTR_HI 0x02
63#define DBDMA_CMDPTR_LO 0x03
64#define DBDMA_INTR_SEL 0x04
65#define DBDMA_BRANCH_SEL 0x05
66#define DBDMA_WAIT_SEL 0x06
67#define DBDMA_XFER_MODE 0x07
68#define DBDMA_DATA2PTR_HI 0x08
69#define DBDMA_DATA2PTR_LO 0x09
70#define DBDMA_RES1 0x0A
71#define DBDMA_ADDRESS_HI 0x0B
72#define DBDMA_BRANCH_ADDR_HI 0x0C
73#define DBDMA_RES2 0x0D
74#define DBDMA_RES3 0x0E
75#define DBDMA_RES4 0x0F
76
77#define DBDMA_REGS 16
78#define DBDMA_SIZE (DBDMA_REGS * sizeof(uint32_t))
79
80#define DBDMA_CHANNEL_SHIFT 7
81#define DBDMA_CHANNEL_SIZE (1 << DBDMA_CHANNEL_SHIFT)
82
83#define DBDMA_CHANNELS (0x1000 >> DBDMA_CHANNEL_SHIFT)
84
85/* Bits in control and status registers */
86
87#define RUN 0x8000
88#define PAUSE 0x4000
89#define FLUSH 0x2000
90#define WAKE 0x1000
91#define DEAD 0x0800
92#define ACTIVE 0x0400
93#define BT 0x0100
94#define DEVSTAT 0x00ff
95
96/*
97 * DBDMA command structure. These fields are all little-endian!
98 */
99
100typedef struct dbdma_cmd {
101 uint16_t req_count; /* requested byte transfer count */
102 uint16_t command; /* command word (has bit-fields) */
103 uint32_t phy_addr; /* physical data address */
104 uint32_t cmd_dep; /* command-dependent field */
105 uint16_t res_count; /* residual count after completion */
106 uint16_t xfer_status; /* transfer status */
107} dbdma_cmd;
108
109/* DBDMA command values in command field */
110
111#define COMMAND_MASK 0xf000
112#define OUTPUT_MORE 0x0000 /* transfer memory data to stream */
113#define OUTPUT_LAST 0x1000 /* ditto followed by end marker */
114#define INPUT_MORE 0x2000 /* transfer stream data to memory */
115#define INPUT_LAST 0x3000 /* ditto, expect end marker */
116#define STORE_WORD 0x4000 /* write word (4 bytes) to device reg */
117#define LOAD_WORD 0x5000 /* read word (4 bytes) from device reg */
118#define DBDMA_NOP 0x6000 /* do nothing */
119#define DBDMA_STOP 0x7000 /* suspend processing */
120
121/* Key values in command field */
122
123#define KEY_MASK 0x0700
124#define KEY_STREAM0 0x0000 /* usual data stream */
125#define KEY_STREAM1 0x0100 /* control/status stream */
126#define KEY_STREAM2 0x0200 /* device-dependent stream */
127#define KEY_STREAM3 0x0300 /* device-dependent stream */
128#define KEY_STREAM4 0x0400 /* reserved */
129#define KEY_REGS 0x0500 /* device register space */
130#define KEY_SYSTEM 0x0600 /* system memory-mapped space */
131#define KEY_DEVICE 0x0700 /* device memory-mapped space */
132
133/* Interrupt control values in command field */
134
135#define INTR_MASK 0x0030
136#define INTR_NEVER 0x0000 /* don't interrupt */
137#define INTR_IFSET 0x0010 /* intr if condition bit is 1 */
138#define INTR_IFCLR 0x0020 /* intr if condition bit is 0 */
139#define INTR_ALWAYS 0x0030 /* always interrupt */
140
141/* Branch control values in command field */
142
143#define BR_MASK 0x000c
144#define BR_NEVER 0x0000 /* don't branch */
145#define BR_IFSET 0x0004 /* branch if condition bit is 1 */
146#define BR_IFCLR 0x0008 /* branch if condition bit is 0 */
147#define BR_ALWAYS 0x000c /* always branch */
148
149/* Wait control values in command field */
150
151#define WAIT_MASK 0x0003
152#define WAIT_NEVER 0x0000 /* don't wait */
153#define WAIT_IFSET 0x0001 /* wait if condition bit is 1 */
154#define WAIT_IFCLR 0x0002 /* wait if condition bit is 0 */
155#define WAIT_ALWAYS 0x0003 /* always wait */
156
157typedef struct DBDMA_channel {
158 int channel;
159 uint32_t regs[DBDMA_REGS];
160 qemu_irq irq;
b42ec42d
AJ
161 DBDMA_io io;
162 DBDMA_rw rw;
862c9280 163 DBDMA_flush flush;
28ce5ce6 164 dbdma_cmd current;
b42ec42d 165 int processing;
28ce5ce6
AJ
166} DBDMA_channel;
167
168#ifdef DEBUG_DBDMA
169static void dump_dbdma_cmd(dbdma_cmd *cmd)
170{
171 printf("dbdma_cmd %p\n", cmd);
172 printf(" req_count 0x%04x\n", le16_to_cpu(cmd->req_count));
173 printf(" command 0x%04x\n", le16_to_cpu(cmd->command));
174 printf(" phy_addr 0x%08x\n", le32_to_cpu(cmd->phy_addr));
175 printf(" cmd_dep 0x%08x\n", le32_to_cpu(cmd->cmd_dep));
176 printf(" res_count 0x%04x\n", le16_to_cpu(cmd->res_count));
177 printf(" xfer_status 0x%04x\n", le16_to_cpu(cmd->xfer_status));
178}
179#else
180static void dump_dbdma_cmd(dbdma_cmd *cmd)
3cbee15b 181{
28ce5ce6
AJ
182}
183#endif
184static void dbdma_cmdptr_load(DBDMA_channel *ch)
185{
186 DBDMA_DPRINTF("dbdma_cmdptr_load 0x%08x\n",
ad674e53
AJ
187 ch->regs[DBDMA_CMDPTR_LO]);
188 cpu_physical_memory_read(ch->regs[DBDMA_CMDPTR_LO],
28ce5ce6 189 (uint8_t*)&ch->current, sizeof(dbdma_cmd));
3cbee15b
JM
190}
191
28ce5ce6 192static void dbdma_cmdptr_save(DBDMA_channel *ch)
3cbee15b 193{
28ce5ce6 194 DBDMA_DPRINTF("dbdma_cmdptr_save 0x%08x\n",
ad674e53 195 ch->regs[DBDMA_CMDPTR_LO]);
28ce5ce6
AJ
196 DBDMA_DPRINTF("xfer_status 0x%08x res_count 0x%04x\n",
197 le16_to_cpu(ch->current.xfer_status),
198 le16_to_cpu(ch->current.res_count));
ad674e53 199 cpu_physical_memory_write(ch->regs[DBDMA_CMDPTR_LO],
28ce5ce6 200 (uint8_t*)&ch->current, sizeof(dbdma_cmd));
3cbee15b
JM
201}
202
28ce5ce6 203static void kill_channel(DBDMA_channel *ch)
3cbee15b 204{
28ce5ce6
AJ
205 DBDMA_DPRINTF("kill_channel\n");
206
ad674e53
AJ
207 ch->regs[DBDMA_STATUS] |= DEAD;
208 ch->regs[DBDMA_STATUS] &= ~ACTIVE;
28ce5ce6
AJ
209
210 qemu_irq_raise(ch->irq);
211}
212
213static void conditional_interrupt(DBDMA_channel *ch)
214{
215 dbdma_cmd *current = &ch->current;
216 uint16_t intr;
217 uint16_t sel_mask, sel_value;
218 uint32_t status;
219 int cond;
220
221 DBDMA_DPRINTF("conditional_interrupt\n");
222
b42ec42d 223 intr = le16_to_cpu(current->command) & INTR_MASK;
28ce5ce6
AJ
224
225 switch(intr) {
226 case INTR_NEVER: /* don't interrupt */
227 return;
228 case INTR_ALWAYS: /* always interrupt */
229 qemu_irq_raise(ch->irq);
230 return;
231 }
232
ad674e53 233 status = ch->regs[DBDMA_STATUS] & DEVSTAT;
28ce5ce6 234
ad674e53
AJ
235 sel_mask = (ch->regs[DBDMA_INTR_SEL] >> 16) & 0x0f;
236 sel_value = ch->regs[DBDMA_INTR_SEL] & 0x0f;
28ce5ce6
AJ
237
238 cond = (status & sel_mask) == (sel_value & sel_mask);
239
240 switch(intr) {
241 case INTR_IFSET: /* intr if condition bit is 1 */
242 if (cond)
243 qemu_irq_raise(ch->irq);
244 return;
245 case INTR_IFCLR: /* intr if condition bit is 0 */
246 if (!cond)
247 qemu_irq_raise(ch->irq);
248 return;
249 }
250}
251
252static int conditional_wait(DBDMA_channel *ch)
253{
254 dbdma_cmd *current = &ch->current;
255 uint16_t wait;
256 uint16_t sel_mask, sel_value;
257 uint32_t status;
258 int cond;
259
260 DBDMA_DPRINTF("conditional_wait\n");
261
b42ec42d 262 wait = le16_to_cpu(current->command) & WAIT_MASK;
28ce5ce6
AJ
263
264 switch(wait) {
265 case WAIT_NEVER: /* don't wait */
266 return 0;
267 case WAIT_ALWAYS: /* always wait */
268 return 1;
269 }
270
ad674e53 271 status = ch->regs[DBDMA_STATUS] & DEVSTAT;
28ce5ce6 272
ad674e53
AJ
273 sel_mask = (ch->regs[DBDMA_WAIT_SEL] >> 16) & 0x0f;
274 sel_value = ch->regs[DBDMA_WAIT_SEL] & 0x0f;
28ce5ce6
AJ
275
276 cond = (status & sel_mask) == (sel_value & sel_mask);
277
278 switch(wait) {
279 case WAIT_IFSET: /* wait if condition bit is 1 */
280 if (cond)
281 return 1;
282 return 0;
283 case WAIT_IFCLR: /* wait if condition bit is 0 */
284 if (!cond)
285 return 1;
286 return 0;
287 }
288 return 0;
289}
290
291static void next(DBDMA_channel *ch)
292{
293 uint32_t cp;
294
ad674e53 295 ch->regs[DBDMA_STATUS] &= ~BT;
28ce5ce6 296
ad674e53
AJ
297 cp = ch->regs[DBDMA_CMDPTR_LO];
298 ch->regs[DBDMA_CMDPTR_LO] = cp + sizeof(dbdma_cmd);
28ce5ce6
AJ
299 dbdma_cmdptr_load(ch);
300}
301
302static void branch(DBDMA_channel *ch)
303{
304 dbdma_cmd *current = &ch->current;
305
306 ch->regs[DBDMA_CMDPTR_LO] = current->cmd_dep;
ad674e53 307 ch->regs[DBDMA_STATUS] |= BT;
28ce5ce6
AJ
308 dbdma_cmdptr_load(ch);
309}
310
311static void conditional_branch(DBDMA_channel *ch)
312{
313 dbdma_cmd *current = &ch->current;
314 uint16_t br;
315 uint16_t sel_mask, sel_value;
316 uint32_t status;
317 int cond;
318
319 DBDMA_DPRINTF("conditional_branch\n");
320
321 /* check if we must branch */
322
b42ec42d 323 br = le16_to_cpu(current->command) & BR_MASK;
28ce5ce6
AJ
324
325 switch(br) {
326 case BR_NEVER: /* don't branch */
327 next(ch);
328 return;
329 case BR_ALWAYS: /* always branch */
330 branch(ch);
331 return;
332 }
333
ad674e53 334 status = ch->regs[DBDMA_STATUS] & DEVSTAT;
28ce5ce6 335
ad674e53
AJ
336 sel_mask = (ch->regs[DBDMA_BRANCH_SEL] >> 16) & 0x0f;
337 sel_value = ch->regs[DBDMA_BRANCH_SEL] & 0x0f;
28ce5ce6
AJ
338
339 cond = (status & sel_mask) == (sel_value & sel_mask);
340
341 switch(br) {
342 case BR_IFSET: /* branch if condition bit is 1 */
343 if (cond)
344 branch(ch);
345 else
346 next(ch);
347 return;
348 case BR_IFCLR: /* branch if condition bit is 0 */
349 if (!cond)
350 branch(ch);
351 else
352 next(ch);
353 return;
354 }
355}
356
b42ec42d
AJ
357static QEMUBH *dbdma_bh;
358static void channel_run(DBDMA_channel *ch);
28ce5ce6 359
b42ec42d 360static void dbdma_end(DBDMA_io *io)
28ce5ce6
AJ
361{
362 DBDMA_channel *ch = io->channel;
363 dbdma_cmd *current = &ch->current;
364
b42ec42d
AJ
365 if (conditional_wait(ch))
366 goto wait;
28ce5ce6 367
ad674e53
AJ
368 current->xfer_status = cpu_to_le16(ch->regs[DBDMA_STATUS]);
369 current->res_count = cpu_to_le16(io->len);
b42ec42d 370 dbdma_cmdptr_save(ch);
862c9280 371 if (io->is_last)
ad674e53 372 ch->regs[DBDMA_STATUS] &= ~FLUSH;
b42ec42d
AJ
373
374 conditional_interrupt(ch);
375 conditional_branch(ch);
28ce5ce6 376
b42ec42d
AJ
377wait:
378 ch->processing = 0;
ad674e53
AJ
379 if ((ch->regs[DBDMA_STATUS] & RUN) &&
380 (ch->regs[DBDMA_STATUS] & ACTIVE))
b42ec42d 381 channel_run(ch);
28ce5ce6
AJ
382}
383
b42ec42d 384static void start_output(DBDMA_channel *ch, int key, uint32_t addr,
28ce5ce6
AJ
385 uint16_t req_count, int is_last)
386{
28ce5ce6
AJ
387 DBDMA_DPRINTF("start_output\n");
388
389 /* KEY_REGS, KEY_DEVICE and KEY_STREAM
390 * are not implemented in the mac-io chip
391 */
392
393 DBDMA_DPRINTF("addr 0x%x key 0x%x\n", addr, key);
394 if (!addr || key > KEY_STREAM3) {
395 kill_channel(ch);
b42ec42d 396 return;
28ce5ce6
AJ
397 }
398
b42ec42d 399 ch->io.addr = addr;
28ce5ce6
AJ
400 ch->io.len = req_count;
401 ch->io.is_last = is_last;
b42ec42d
AJ
402 ch->io.dma_end = dbdma_end;
403 ch->io.is_dma_out = 1;
404 ch->processing = 1;
a9ceb76d
AG
405 if (ch->rw) {
406 ch->rw(&ch->io);
407 }
28ce5ce6
AJ
408}
409
b42ec42d 410static void start_input(DBDMA_channel *ch, int key, uint32_t addr,
28ce5ce6
AJ
411 uint16_t req_count, int is_last)
412{
28ce5ce6
AJ
413 DBDMA_DPRINTF("start_input\n");
414
415 /* KEY_REGS, KEY_DEVICE and KEY_STREAM
416 * are not implemented in the mac-io chip
417 */
418
419 if (!addr || key > KEY_STREAM3) {
420 kill_channel(ch);
b42ec42d 421 return;
28ce5ce6
AJ
422 }
423
b42ec42d 424 ch->io.addr = addr;
28ce5ce6
AJ
425 ch->io.len = req_count;
426 ch->io.is_last = is_last;
b42ec42d
AJ
427 ch->io.dma_end = dbdma_end;
428 ch->io.is_dma_out = 0;
429 ch->processing = 1;
a9ceb76d
AG
430 if (ch->rw) {
431 ch->rw(&ch->io);
432 }
28ce5ce6
AJ
433}
434
b42ec42d 435static void load_word(DBDMA_channel *ch, int key, uint32_t addr,
28ce5ce6
AJ
436 uint16_t len)
437{
438 dbdma_cmd *current = &ch->current;
439 uint32_t val;
440
441 DBDMA_DPRINTF("load_word\n");
442
443 /* only implements KEY_SYSTEM */
444
445 if (key != KEY_SYSTEM) {
446 printf("DBDMA: LOAD_WORD, unimplemented key %x\n", key);
447 kill_channel(ch);
b42ec42d 448 return;
28ce5ce6
AJ
449 }
450
451 cpu_physical_memory_read(addr, (uint8_t*)&val, len);
452
453 if (len == 2)
454 val = (val << 16) | (current->cmd_dep & 0x0000ffff);
455 else if (len == 1)
456 val = (val << 24) | (current->cmd_dep & 0x00ffffff);
457
458 current->cmd_dep = val;
459
460 if (conditional_wait(ch))
b42ec42d 461 goto wait;
28ce5ce6 462
ad674e53 463 current->xfer_status = cpu_to_le16(ch->regs[DBDMA_STATUS]);
28ce5ce6 464 dbdma_cmdptr_save(ch);
ad674e53 465 ch->regs[DBDMA_STATUS] &= ~FLUSH;
28ce5ce6
AJ
466
467 conditional_interrupt(ch);
468 next(ch);
469
b42ec42d
AJ
470wait:
471 qemu_bh_schedule(dbdma_bh);
28ce5ce6
AJ
472}
473
b42ec42d 474static void store_word(DBDMA_channel *ch, int key, uint32_t addr,
28ce5ce6
AJ
475 uint16_t len)
476{
477 dbdma_cmd *current = &ch->current;
478 uint32_t val;
479
480 DBDMA_DPRINTF("store_word\n");
481
482 /* only implements KEY_SYSTEM */
483
484 if (key != KEY_SYSTEM) {
485 printf("DBDMA: STORE_WORD, unimplemented key %x\n", key);
486 kill_channel(ch);
b42ec42d 487 return;
28ce5ce6
AJ
488 }
489
490 val = current->cmd_dep;
491 if (len == 2)
492 val >>= 16;
493 else if (len == 1)
494 val >>= 24;
495
496 cpu_physical_memory_write(addr, (uint8_t*)&val, len);
497
498 if (conditional_wait(ch))
b42ec42d 499 goto wait;
28ce5ce6 500
ad674e53 501 current->xfer_status = cpu_to_le16(ch->regs[DBDMA_STATUS]);
28ce5ce6 502 dbdma_cmdptr_save(ch);
ad674e53 503 ch->regs[DBDMA_STATUS] &= ~FLUSH;
28ce5ce6
AJ
504
505 conditional_interrupt(ch);
506 next(ch);
507
b42ec42d
AJ
508wait:
509 qemu_bh_schedule(dbdma_bh);
28ce5ce6
AJ
510}
511
b42ec42d 512static void nop(DBDMA_channel *ch)
28ce5ce6
AJ
513{
514 dbdma_cmd *current = &ch->current;
515
516 if (conditional_wait(ch))
b42ec42d 517 goto wait;
28ce5ce6 518
ad674e53 519 current->xfer_status = cpu_to_le16(ch->regs[DBDMA_STATUS]);
28ce5ce6
AJ
520 dbdma_cmdptr_save(ch);
521
522 conditional_interrupt(ch);
523 conditional_branch(ch);
524
b42ec42d
AJ
525wait:
526 qemu_bh_schedule(dbdma_bh);
3cbee15b
JM
527}
528
b42ec42d 529static void stop(DBDMA_channel *ch)
3cbee15b 530{
ad674e53 531 ch->regs[DBDMA_STATUS] &= ~(ACTIVE|DEAD|FLUSH);
28ce5ce6
AJ
532
533 /* the stop command does not increment command pointer */
3cbee15b
JM
534}
535
b42ec42d 536static void channel_run(DBDMA_channel *ch)
3cbee15b 537{
28ce5ce6
AJ
538 dbdma_cmd *current = &ch->current;
539 uint16_t cmd, key;
540 uint16_t req_count;
541 uint32_t phy_addr;
542
543 DBDMA_DPRINTF("channel_run\n");
544 dump_dbdma_cmd(current);
545
546 /* clear WAKE flag at command fetch */
547
ad674e53 548 ch->regs[DBDMA_STATUS] &= ~WAKE;
28ce5ce6
AJ
549
550 cmd = le16_to_cpu(current->command) & COMMAND_MASK;
551
552 switch (cmd) {
553 case DBDMA_NOP:
b42ec42d
AJ
554 nop(ch);
555 return;
28ce5ce6
AJ
556
557 case DBDMA_STOP:
b42ec42d
AJ
558 stop(ch);
559 return;
28ce5ce6
AJ
560 }
561
562 key = le16_to_cpu(current->command) & 0x0700;
563 req_count = le16_to_cpu(current->req_count);
564 phy_addr = le32_to_cpu(current->phy_addr);
565
566 if (key == KEY_STREAM4) {
567 printf("command %x, invalid key 4\n", cmd);
568 kill_channel(ch);
b42ec42d 569 return;
28ce5ce6
AJ
570 }
571
572 switch (cmd) {
573 case OUTPUT_MORE:
b42ec42d
AJ
574 start_output(ch, key, phy_addr, req_count, 0);
575 return;
28ce5ce6
AJ
576
577 case OUTPUT_LAST:
b42ec42d
AJ
578 start_output(ch, key, phy_addr, req_count, 1);
579 return;
28ce5ce6
AJ
580
581 case INPUT_MORE:
b42ec42d
AJ
582 start_input(ch, key, phy_addr, req_count, 0);
583 return;
28ce5ce6
AJ
584
585 case INPUT_LAST:
b42ec42d
AJ
586 start_input(ch, key, phy_addr, req_count, 1);
587 return;
28ce5ce6
AJ
588 }
589
590 if (key < KEY_REGS) {
591 printf("command %x, invalid key %x\n", cmd, key);
592 key = KEY_SYSTEM;
593 }
594
595 /* for LOAD_WORD and STORE_WORD, req_count is on 3 bits
596 * and BRANCH is invalid
597 */
598
599 req_count = req_count & 0x0007;
600 if (req_count & 0x4) {
601 req_count = 4;
602 phy_addr &= ~3;
603 } else if (req_count & 0x2) {
604 req_count = 2;
605 phy_addr &= ~1;
606 } else
607 req_count = 1;
608
609 switch (cmd) {
610 case LOAD_WORD:
b42ec42d
AJ
611 load_word(ch, key, phy_addr, req_count);
612 return;
28ce5ce6
AJ
613
614 case STORE_WORD:
b42ec42d
AJ
615 store_word(ch, key, phy_addr, req_count);
616 return;
28ce5ce6 617 }
3cbee15b
JM
618}
619
28ce5ce6
AJ
620static void DBDMA_run (DBDMA_channel *ch)
621{
622 int channel;
28ce5ce6
AJ
623
624 for (channel = 0; channel < DBDMA_CHANNELS; channel++, ch++) {
ad674e53 625 uint32_t status = ch->regs[DBDMA_STATUS];
b42ec42d
AJ
626 if (!ch->processing && (status & RUN) && (status & ACTIVE))
627 channel_run(ch);
28ce5ce6 628 }
28ce5ce6
AJ
629}
630
631static void DBDMA_run_bh(void *opaque)
632{
633 DBDMA_channel *ch = opaque;
634
635 DBDMA_DPRINTF("DBDMA_run_bh\n");
636
637 DBDMA_run(ch);
638}
639
640void DBDMA_register_channel(void *dbdma, int nchan, qemu_irq irq,
862c9280 641 DBDMA_rw rw, DBDMA_flush flush,
28ce5ce6
AJ
642 void *opaque)
643{
644 DBDMA_channel *ch = ( DBDMA_channel *)dbdma + nchan;
645
646 DBDMA_DPRINTF("DBDMA_register_channel 0x%x\n", nchan);
647
648 ch->irq = irq;
649 ch->channel = nchan;
b42ec42d 650 ch->rw = rw;
862c9280 651 ch->flush = flush;
28ce5ce6
AJ
652 ch->io.opaque = opaque;
653 ch->io.channel = ch;
654}
655
656void DBDMA_schedule(void)
657{
d9f75a4e 658 qemu_notify_event();
28ce5ce6
AJ
659}
660
661static void
662dbdma_control_write(DBDMA_channel *ch)
663{
664 uint16_t mask, value;
665 uint32_t status;
666
ad674e53
AJ
667 mask = (ch->regs[DBDMA_CONTROL] >> 16) & 0xffff;
668 value = ch->regs[DBDMA_CONTROL] & 0xffff;
28ce5ce6
AJ
669
670 value &= (RUN | PAUSE | FLUSH | WAKE | DEVSTAT);
671
ad674e53 672 status = ch->regs[DBDMA_STATUS];
28ce5ce6
AJ
673
674 status = (value & mask) | (status & ~mask);
675
676 if (status & WAKE)
677 status |= ACTIVE;
678 if (status & RUN) {
679 status |= ACTIVE;
680 status &= ~DEAD;
681 }
682 if (status & PAUSE)
683 status &= ~ACTIVE;
ad674e53 684 if ((ch->regs[DBDMA_STATUS] & RUN) && !(status & RUN)) {
28ce5ce6
AJ
685 /* RUN is cleared */
686 status &= ~(ACTIVE|DEAD);
687 }
688
689 DBDMA_DPRINTF(" status 0x%08x\n", status);
690
ad674e53 691 ch->regs[DBDMA_STATUS] = status;
28ce5ce6 692
b42ec42d
AJ
693 if (status & ACTIVE)
694 qemu_bh_schedule(dbdma_bh);
a9ceb76d 695 if ((status & FLUSH) && ch->flush)
862c9280 696 ch->flush(&ch->io);
28ce5ce6
AJ
697}
698
699static void dbdma_writel (void *opaque,
c227f099 700 target_phys_addr_t addr, uint32_t value)
28ce5ce6
AJ
701{
702 int channel = addr >> DBDMA_CHANNEL_SHIFT;
703 DBDMA_channel *ch = (DBDMA_channel *)opaque + channel;
704 int reg = (addr - (channel << DBDMA_CHANNEL_SHIFT)) >> 2;
705
706 DBDMA_DPRINTF("writel 0x" TARGET_FMT_plx " <= 0x%08x\n", addr, value);
707 DBDMA_DPRINTF("channel 0x%x reg 0x%x\n",
708 (uint32_t)addr >> DBDMA_CHANNEL_SHIFT, reg);
709
ad674e53 710 value = bswap32(value);
ad674e53 711
28ce5ce6
AJ
712 /* cmdptr cannot be modified if channel is RUN or ACTIVE */
713
714 if (reg == DBDMA_CMDPTR_LO &&
ad674e53 715 (ch->regs[DBDMA_STATUS] & (RUN | ACTIVE)))
28ce5ce6
AJ
716 return;
717
718 ch->regs[reg] = value;
719
720 switch(reg) {
721 case DBDMA_CONTROL:
722 dbdma_control_write(ch);
723 break;
724 case DBDMA_CMDPTR_LO:
725 /* 16-byte aligned */
ad674e53 726 ch->regs[DBDMA_CMDPTR_LO] &= ~0xf;
28ce5ce6
AJ
727 dbdma_cmdptr_load(ch);
728 break;
729 case DBDMA_STATUS:
730 case DBDMA_INTR_SEL:
731 case DBDMA_BRANCH_SEL:
732 case DBDMA_WAIT_SEL:
733 /* nothing to do */
734 break;
735 case DBDMA_XFER_MODE:
736 case DBDMA_CMDPTR_HI:
737 case DBDMA_DATA2PTR_HI:
738 case DBDMA_DATA2PTR_LO:
739 case DBDMA_ADDRESS_HI:
740 case DBDMA_BRANCH_ADDR_HI:
741 case DBDMA_RES1:
742 case DBDMA_RES2:
743 case DBDMA_RES3:
744 case DBDMA_RES4:
745 /* unused */
746 break;
747 }
748}
749
c227f099 750static uint32_t dbdma_readl (void *opaque, target_phys_addr_t addr)
3cbee15b 751{
28ce5ce6
AJ
752 uint32_t value;
753 int channel = addr >> DBDMA_CHANNEL_SHIFT;
754 DBDMA_channel *ch = (DBDMA_channel *)opaque + channel;
755 int reg = (addr - (channel << DBDMA_CHANNEL_SHIFT)) >> 2;
ea026b2f 756
28ce5ce6
AJ
757 value = ch->regs[reg];
758
759 DBDMA_DPRINTF("readl 0x" TARGET_FMT_plx " => 0x%08x\n", addr, value);
760 DBDMA_DPRINTF("channel 0x%x reg 0x%x\n",
761 (uint32_t)addr >> DBDMA_CHANNEL_SHIFT, reg);
762
763 switch(reg) {
764 case DBDMA_CONTROL:
765 value = 0;
766 break;
767 case DBDMA_STATUS:
768 case DBDMA_CMDPTR_LO:
769 case DBDMA_INTR_SEL:
770 case DBDMA_BRANCH_SEL:
771 case DBDMA_WAIT_SEL:
772 /* nothing to do */
773 break;
774 case DBDMA_XFER_MODE:
775 case DBDMA_CMDPTR_HI:
776 case DBDMA_DATA2PTR_HI:
777 case DBDMA_DATA2PTR_LO:
778 case DBDMA_ADDRESS_HI:
779 case DBDMA_BRANCH_ADDR_HI:
780 /* unused */
781 value = 0;
782 break;
783 case DBDMA_RES1:
784 case DBDMA_RES2:
785 case DBDMA_RES3:
786 case DBDMA_RES4:
787 /* reserved */
788 break;
789 }
790
ad674e53 791 value = bswap32(value);
28ce5ce6 792 return value;
3cbee15b
JM
793}
794
d60efc6b 795static CPUWriteMemoryFunc * const dbdma_write[] = {
28ce5ce6
AJ
796 NULL,
797 NULL,
798 dbdma_writel,
3cbee15b
JM
799};
800
d60efc6b 801static CPUReadMemoryFunc * const dbdma_read[] = {
28ce5ce6
AJ
802 NULL,
803 NULL,
804 dbdma_readl,
3cbee15b
JM
805};
806
9b64997f
BS
807static void dbdma_save(QEMUFile *f, void *opaque)
808{
28ce5ce6
AJ
809 DBDMA_channel *s = opaque;
810 unsigned int i, j;
811
812 for (i = 0; i < DBDMA_CHANNELS; i++)
813 for (j = 0; j < DBDMA_REGS; j++)
814 qemu_put_be32s(f, &s[i].regs[j]);
9b64997f
BS
815}
816
817static int dbdma_load(QEMUFile *f, void *opaque, int version_id)
818{
28ce5ce6
AJ
819 DBDMA_channel *s = opaque;
820 unsigned int i, j;
821
822 if (version_id != 2)
9b64997f
BS
823 return -EINVAL;
824
28ce5ce6
AJ
825 for (i = 0; i < DBDMA_CHANNELS; i++)
826 for (j = 0; j < DBDMA_REGS; j++)
827 qemu_get_be32s(f, &s[i].regs[j]);
828
9b64997f
BS
829 return 0;
830}
831
6e6b7363
BS
832static void dbdma_reset(void *opaque)
833{
28ce5ce6
AJ
834 DBDMA_channel *s = opaque;
835 int i;
836
837 for (i = 0; i < DBDMA_CHANNELS; i++)
838 memset(s[i].regs, 0, DBDMA_SIZE);
6e6b7363
BS
839}
840
28ce5ce6 841void* DBDMA_init (int *dbdma_mem_index)
3cbee15b 842{
28ce5ce6
AJ
843 DBDMA_channel *s;
844
845 s = qemu_mallocz(sizeof(DBDMA_channel) * DBDMA_CHANNELS);
28ce5ce6 846
1eed09cb 847 *dbdma_mem_index = cpu_register_io_memory(dbdma_read, dbdma_write, s);
0be71e32 848 register_savevm(NULL, "dbdma", -1, 1, dbdma_save, dbdma_load, s);
a08d4367 849 qemu_register_reset(dbdma_reset, s);
28ce5ce6
AJ
850
851 dbdma_bh = qemu_bh_new(DBDMA_run_bh, s);
852
853 return s;
3cbee15b 854}