[qemu.git] / hw / pckbd.c

/*
 * QEMU PC keyboard emulation
 *
 * Copyright (c) 2003 Fabrice Bellard
 *
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */
#include "hw.h"
#include "isa.h"
#include "pc.h"
#include "ps2.h"
#include "sysemu.h"

/* debug PC keyboard */
//#define DEBUG_KBD
#ifdef DEBUG_KBD
#define DPRINTF(fmt, ...)                                       \
    do { printf("KBD: " fmt , ## __VA_ARGS__); } while (0)
#else
#define DPRINTF(fmt, ...)
#endif

/*	Keyboard Controller Commands */
#define KBD_CCMD_READ_MODE	0x20	/* Read mode bits */
#define KBD_CCMD_WRITE_MODE	0x60	/* Write mode bits */
#define KBD_CCMD_GET_VERSION	0xA1	/* Get controller version */
#define KBD_CCMD_MOUSE_DISABLE	0xA7	/* Disable mouse interface */
#define KBD_CCMD_MOUSE_ENABLE	0xA8	/* Enable mouse interface */
#define KBD_CCMD_TEST_MOUSE	0xA9	/* Mouse interface test */
#define KBD_CCMD_SELF_TEST	0xAA	/* Controller self test */
#define KBD_CCMD_KBD_TEST	0xAB	/* Keyboard interface test */
#define KBD_CCMD_KBD_DISABLE	0xAD	/* Keyboard interface disable */
#define KBD_CCMD_KBD_ENABLE	0xAE	/* Keyboard interface enable */
#define KBD_CCMD_READ_INPORT    0xC0    /* read input port */
#define KBD_CCMD_READ_OUTPORT	0xD0    /* read output port */
#define KBD_CCMD_WRITE_OUTPORT	0xD1    /* write output port */
#define KBD_CCMD_WRITE_OBUF	0xD2
#define KBD_CCMD_WRITE_AUX_OBUF	0xD3    /* Write to output buffer as if
					   initiated by the auxiliary device */
#define KBD_CCMD_WRITE_MOUSE	0xD4	/* Write the following byte to the mouse */
#define KBD_CCMD_DISABLE_A20    0xDD    /* HP vectra only ? */
#define KBD_CCMD_ENABLE_A20     0xDF    /* HP vectra only ? */
#define KBD_CCMD_PULSE_BITS_3_0 0xF0    /* Pulse bits 3-0 of the output port P2. */
#define KBD_CCMD_RESET          0xFE    /* Pulse bit 0 of the output port P2 = CPU reset. */
#define KBD_CCMD_NO_OP          0xFF    /* Pulse no bits of the output port P2. */

/* Keyboard Commands */
#define KBD_CMD_SET_LEDS	0xED	/* Set keyboard leds */
#define KBD_CMD_ECHO     	0xEE
#define KBD_CMD_GET_ID 	        0xF2	/* get keyboard ID */
#define KBD_CMD_SET_RATE	0xF3	/* Set typematic rate */
#define KBD_CMD_ENABLE		0xF4	/* Enable scanning */
#define KBD_CMD_RESET_DISABLE	0xF5	/* reset and disable scanning */
#define KBD_CMD_RESET_ENABLE   	0xF6    /* reset and enable scanning */
#define KBD_CMD_RESET		0xFF	/* Reset */

/* Keyboard Replies */
#define KBD_REPLY_POR		0xAA	/* Power on reset */
#define KBD_REPLY_ACK		0xFA	/* Command ACK */
#define KBD_REPLY_RESEND	0xFE	/* Command NACK, send the cmd again */

/* Status Register Bits */
#define KBD_STAT_OBF 		0x01	/* Keyboard output buffer full */
#define KBD_STAT_IBF 		0x02	/* Keyboard input buffer full */
#define KBD_STAT_SELFTEST	0x04	/* Self test successful */
#define KBD_STAT_CMD		0x08	/* Last write was a command write (0=data) */
#define KBD_STAT_UNLOCKED	0x10	/* Zero if keyboard locked */
#define KBD_STAT_MOUSE_OBF	0x20	/* Mouse output buffer full */
#define KBD_STAT_GTO 		0x40	/* General receive/xmit timeout */
#define KBD_STAT_PERR 		0x80	/* Parity error */

/* Controller Mode Register Bits */
#define KBD_MODE_KBD_INT	0x01	/* Keyboard data generate IRQ1 */
#define KBD_MODE_MOUSE_INT	0x02	/* Mouse data generate IRQ12 */
#define KBD_MODE_SYS 		0x04	/* The system flag (?) */
#define KBD_MODE_NO_KEYLOCK	0x08	/* The keylock doesn't affect the keyboard if set */
#define KBD_MODE_DISABLE_KBD	0x10	/* Disable keyboard interface */
#define KBD_MODE_DISABLE_MOUSE	0x20	/* Disable mouse interface */
#define KBD_MODE_KCC 		0x40	/* Scan code conversion to PC format */
#define KBD_MODE_RFU		0x80

/* Output Port Bits */
#define KBD_OUT_RESET           0x01    /* 1=normal mode, 0=reset */
#define KBD_OUT_A20             0x02    /* x86 only */
#define KBD_OUT_OBF             0x10    /* Keyboard output buffer full */
#define KBD_OUT_MOUSE_OBF       0x20    /* Mouse output buffer full */

/* Mouse Commands */
#define AUX_SET_SCALE11		0xE6	/* Set 1:1 scaling */
#define AUX_SET_SCALE21		0xE7	/* Set 2:1 scaling */
#define AUX_SET_RES		0xE8	/* Set resolution */
#define AUX_GET_SCALE		0xE9	/* Get scaling factor */
#define AUX_SET_STREAM		0xEA	/* Set stream mode */
#define AUX_POLL		0xEB	/* Poll */
#define AUX_RESET_WRAP		0xEC	/* Reset wrap mode */
#define AUX_SET_WRAP		0xEE	/* Set wrap mode */
#define AUX_SET_REMOTE		0xF0	/* Set remote mode */
#define AUX_GET_TYPE		0xF2	/* Get type */
#define AUX_SET_SAMPLE		0xF3	/* Set sample rate */
#define AUX_ENABLE_DEV		0xF4	/* Enable aux device */
#define AUX_DISABLE_DEV		0xF5	/* Disable aux device */
#define AUX_SET_DEFAULT		0xF6
#define AUX_RESET		0xFF	/* Reset aux device */
#define AUX_ACK			0xFA	/* Command byte ACK. */

#define MOUSE_STATUS_REMOTE     0x40
#define MOUSE_STATUS_ENABLED    0x20
#define MOUSE_STATUS_SCALE21    0x10

#define KBD_PENDING_KBD         1
#define KBD_PENDING_AUX         2

typedef struct KBDState {
    uint8_t write_cmd; /* if non zero, write data to port 60 is expected */
    uint8_t status;
    uint8_t mode;
    uint8_t outport;
    /* Bitmask of devices with data available.  */
    uint8_t pending;
    void *kbd;
    void *mouse;

    qemu_irq irq_kbd;
    qemu_irq irq_mouse;
    qemu_irq *a20_out;
    target_phys_addr_t mask;
} KBDState;

/* update irq and KBD_STAT_[MOUSE_]OBF */
/* XXX: not generating the irqs if KBD_MODE_DISABLE_KBD is set may be
   incorrect, but it avoids having to simulate exact delays */
static void kbd_update_irq(KBDState *s)
{
    int irq_kbd_level, irq_mouse_level;

    irq_kbd_level = 0;
    irq_mouse_level = 0;
    s->status &= ~(KBD_STAT_OBF | KBD_STAT_MOUSE_OBF);
    s->outport &= ~(KBD_OUT_OBF | KBD_OUT_MOUSE_OBF);
    if (s->pending) {
        s->status |= KBD_STAT_OBF;
        s->outport |= KBD_OUT_OBF;
        /* kbd data takes priority over aux data.  */
        if (s->pending == KBD_PENDING_AUX) {
            s->status |= KBD_STAT_MOUSE_OBF;
            s->outport |= KBD_OUT_MOUSE_OBF;
            if (s->mode & KBD_MODE_MOUSE_INT)
                irq_mouse_level = 1;
        } else {
            if ((s->mode & KBD_MODE_KBD_INT) &&
                !(s->mode & KBD_MODE_DISABLE_KBD))
                irq_kbd_level = 1;
        }
    }
    qemu_set_irq(s->irq_kbd, irq_kbd_level);
    qemu_set_irq(s->irq_mouse, irq_mouse_level);
}

static void kbd_update_kbd_irq(void *opaque, int level)
{
    KBDState *s = (KBDState *)opaque;

    if (level)
        s->pending |= KBD_PENDING_KBD;
    else
        s->pending &= ~KBD_PENDING_KBD;
    kbd_update_irq(s);
}

static void kbd_update_aux_irq(void *opaque, int level)
{
    KBDState *s = (KBDState *)opaque;

    if (level)
        s->pending |= KBD_PENDING_AUX;
    else
        s->pending &= ~KBD_PENDING_AUX;
    kbd_update_irq(s);
}

static uint32_t kbd_read_status(void *opaque, uint32_t addr)
{
    KBDState *s = opaque;
    int val;
    val = s->status;
    DPRINTF("kbd: read status=0x%02x\n", val);
    return val;
}

static void kbd_queue(KBDState *s, int b, int aux)
{
    if (aux)
        ps2_queue(s->mouse, b);
    else
        ps2_queue(s->kbd, b);
}

static void ioport92_write(void *opaque, uint32_t addr, uint32_t val)
{
    KBDState *s = opaque;

    DPRINTF("kbd: write outport=0x%02x\n", val);
    s->outport = val;
    if (s->a20_out) {
        qemu_set_irq(*s->a20_out, (val >> 1) & 1);
    }
    if (!(val & 1)) {
        qemu_system_reset_request();
    }
}

static uint32_t ioport92_read(void *opaque, uint32_t addr)
{
    KBDState *s = opaque;
    uint32_t ret;

    ret = s->outport;
    DPRINTF("kbd: read outport=0x%02x\n", ret);
    return ret;
}

static void kbd_write_command(void *opaque, uint32_t addr, uint32_t val)
{
    KBDState *s = opaque;

    DPRINTF("kbd: write cmd=0x%02x\n", val);

    /* Bits 3-0 of the output port P2 of the keyboard controller may be pulsed
     * low for approximately 6 micro seconds. Bits 3-0 of the KBD_CCMD_PULSE
     * command specify the output port bits to be pulsed.
     * 0: Bit should be pulsed. 1: Bit should not be modified.
     * The only useful version of this command is pulsing bit 0,
     * which does a CPU reset.
     */
    if((val & KBD_CCMD_PULSE_BITS_3_0) == KBD_CCMD_PULSE_BITS_3_0) {
        if(!(val & 1))
            val = KBD_CCMD_RESET;
        else
            val = KBD_CCMD_NO_OP;
    }

    switch(val) {
    case KBD_CCMD_READ_MODE:
        kbd_queue(s, s->mode, 0);
        break;
    case KBD_CCMD_WRITE_MODE:
    case KBD_CCMD_WRITE_OBUF:
    case KBD_CCMD_WRITE_AUX_OBUF:
    case KBD_CCMD_WRITE_MOUSE:
    case KBD_CCMD_WRITE_OUTPORT:
        s->write_cmd = val;
        break;
    case KBD_CCMD_MOUSE_DISABLE:
        s->mode |= KBD_MODE_DISABLE_MOUSE;
        break;
    case KBD_CCMD_MOUSE_ENABLE:
        s->mode &= ~KBD_MODE_DISABLE_MOUSE;
        break;
    case KBD_CCMD_TEST_MOUSE:
        kbd_queue(s, 0x00, 0);
        break;
    case KBD_CCMD_SELF_TEST:
        s->status |= KBD_STAT_SELFTEST;
        kbd_queue(s, 0x55, 0);
        break;
    case KBD_CCMD_KBD_TEST:
        kbd_queue(s, 0x00, 0);
        break;
    case KBD_CCMD_KBD_DISABLE:
        s->mode |= KBD_MODE_DISABLE_KBD;
        kbd_update_irq(s);
        break;
    case KBD_CCMD_KBD_ENABLE:
        s->mode &= ~KBD_MODE_DISABLE_KBD;
        kbd_update_irq(s);
        break;
    case KBD_CCMD_READ_INPORT:
        kbd_queue(s, 0x00, 0);
        break;
    case KBD_CCMD_READ_OUTPORT:
        kbd_queue(s, s->outport, 0);
        break;
    case KBD_CCMD_ENABLE_A20:
        if (s->a20_out) {
            qemu_irq_raise(*s->a20_out);
        }
        s->outport |= KBD_OUT_A20;
        break;
    case KBD_CCMD_DISABLE_A20:
        if (s->a20_out) {
            qemu_irq_lower(*s->a20_out);
        }
        s->outport &= ~KBD_OUT_A20;
        break;
    case KBD_CCMD_RESET:
        qemu_system_reset_request();
        break;
    case KBD_CCMD_NO_OP:
        /* ignore that */
        break;
    default:
        fprintf(stderr, "qemu: unsupported keyboard cmd=0x%02x\n", val);
        break;
    }
}

static uint32_t kbd_read_data(void *opaque, uint32_t addr)
{
    KBDState *s = opaque;
    uint32_t val;

    if (s->pending == KBD_PENDING_AUX)
        val = ps2_read_data(s->mouse);
    else
        val = ps2_read_data(s->kbd);

    DPRINTF("kbd: read data=0x%02x\n", val);
    return val;
}

static void kbd_write_data(void *opaque, uint32_t addr, uint32_t val)
{
    KBDState *s = opaque;

    DPRINTF("kbd: write data=0x%02x\n", val);

    switch(s->write_cmd) {
    case 0:
        ps2_write_keyboard(s->kbd, val);
        break;
    case KBD_CCMD_WRITE_MODE:
        s->mode = val;
        ps2_keyboard_set_translation(s->kbd, (s->mode & KBD_MODE_KCC) != 0);
        /* ??? */
        kbd_update_irq(s);
        break;
    case KBD_CCMD_WRITE_OBUF:
        kbd_queue(s, val, 0);
        break;
    case KBD_CCMD_WRITE_AUX_OBUF:
        kbd_queue(s, val, 1);
        break;
    case KBD_CCMD_WRITE_OUTPORT:
        ioport92_write(s, 0, val);
        break;
    case KBD_CCMD_WRITE_MOUSE:
        ps2_write_mouse(s->mouse, val);
        break;
    default:
        break;
    }
    s->write_cmd = 0;
}

static void kbd_reset(void *opaque)
{
    KBDState *s = opaque;

    s->mode = KBD_MODE_KBD_INT | KBD_MODE_MOUSE_INT;
    s->status = KBD_STAT_CMD | KBD_STAT_UNLOCKED;
    s->outport = KBD_OUT_RESET | KBD_OUT_A20;
}

static const VMStateDescription vmstate_kbd = {
    .name = "pckbd",
    .version_id = 3,
    .minimum_version_id = 3,
    .minimum_version_id_old = 3,
    .fields      = (VMStateField []) {
        VMSTATE_UINT8(write_cmd, KBDState),
        VMSTATE_UINT8(status, KBDState),
        VMSTATE_UINT8(mode, KBDState),
        VMSTATE_UINT8(pending, KBDState),
        VMSTATE_END_OF_LIST()
    }
};

/* Memory mapped interface */
static uint32_t kbd_mm_readb (void *opaque, target_phys_addr_t addr)
{
    KBDState *s = opaque;

    if (addr & s->mask)
        return kbd_read_status(s, 0) & 0xff;
    else
        return kbd_read_data(s, 0) & 0xff;
}

static void kbd_mm_writeb (void *opaque, target_phys_addr_t addr, uint32_t value)
{
    KBDState *s = opaque;

    if (addr & s->mask)
        kbd_write_command(s, 0, value & 0xff);
    else
        kbd_write_data(s, 0, value & 0xff);
}

static CPUReadMemoryFunc * const kbd_mm_read[] = {
    &kbd_mm_readb,
    &kbd_mm_readb,
    &kbd_mm_readb,
};

static CPUWriteMemoryFunc * const kbd_mm_write[] = {
    &kbd_mm_writeb,
    &kbd_mm_writeb,
    &kbd_mm_writeb,
};

void i8042_mm_init(qemu_irq kbd_irq, qemu_irq mouse_irq,
                   target_phys_addr_t base, ram_addr_t size,
                   target_phys_addr_t mask)
{
    KBDState *s = qemu_mallocz(sizeof(KBDState));
    int s_io_memory;

    s->irq_kbd = kbd_irq;
    s->irq_mouse = mouse_irq;
    s->mask = mask;

    vmstate_register(NULL, 0, &vmstate_kbd, s);
    s_io_memory = cpu_register_io_memory(kbd_mm_read, kbd_mm_write, s);
    cpu_register_physical_memory(base, size, s_io_memory);

    s->kbd = ps2_kbd_init(kbd_update_kbd_irq, s);
    s->mouse = ps2_mouse_init(kbd_update_aux_irq, s);
    qemu_register_reset(kbd_reset, s);
}

typedef struct ISAKBDState {
    ISADevice dev;
    KBDState  kbd;
} ISAKBDState;

void i8042_isa_mouse_fake_event(void *opaque)
{
    ISADevice *dev = opaque;
    KBDState *s = &(DO_UPCAST(ISAKBDState, dev, dev)->kbd);

    ps2_mouse_fake_event(s->mouse);
}

void i8042_setup_a20_line(ISADevice *dev, qemu_irq *a20_out)
{
    KBDState *s = &(DO_UPCAST(ISAKBDState, dev, dev)->kbd);

    s->a20_out = a20_out;
}

static const VMStateDescription vmstate_kbd_isa = {
    .name = "pckbd",
    .version_id = 3,
    .minimum_version_id = 3,
    .minimum_version_id_old = 3,
    .fields      = (VMStateField []) {
        VMSTATE_STRUCT(kbd, ISAKBDState, 0, vmstate_kbd, KBDState),
        VMSTATE_END_OF_LIST()
    }
};

static int i8042_initfn(ISADevice *dev)
{
    KBDState *s = &(DO_UPCAST(ISAKBDState, dev, dev)->kbd);

    isa_init_irq(dev, &s->irq_kbd, 1);
    isa_init_irq(dev, &s->irq_mouse, 12);

    register_ioport_read(0x60, 1, 1, kbd_read_data, s);
    register_ioport_write(0x60, 1, 1, kbd_write_data, s);
    register_ioport_read(0x64, 1, 1, kbd_read_status, s);
    register_ioport_write(0x64, 1, 1, kbd_write_command, s);
    register_ioport_read(0x92, 1, 1, ioport92_read, s);
    register_ioport_write(0x92, 1, 1, ioport92_write, s);

    s->kbd = ps2_kbd_init(kbd_update_kbd_irq, s);
    s->mouse = ps2_mouse_init(kbd_update_aux_irq, s);
    qemu_register_reset(kbd_reset, s);
    return 0;
}

static ISADeviceInfo i8042_info = {
    .qdev.name     = "i8042",
    .qdev.size     = sizeof(ISAKBDState),
    .qdev.vmsd     = &vmstate_kbd_isa,
    .qdev.no_user  = 1,
    .init          = i8042_initfn,
};

static void i8042_register(void)
{
    isa_qdev_register(&i8042_info);
}
device_init(i8042_register)
Commit	Line	Data
80cabfad FB	1	/*
80cabfad FB	2	* QEMU PC keyboard emulation
5fafdf24	3	*
80cabfad	4	* Copyright (c) 2003 Fabrice Bellard
5fafdf24	5	*
80cabfad FB	6	* Permission is hereby granted, free of charge, to any person obtaining a copy
	7	* of this software and associated documentation files (the "Software"), to deal
	8	* in the Software without restriction, including without limitation the rights
	9	* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
	10	* copies of the Software, and to permit persons to whom the Software is
	11	* furnished to do so, subject to the following conditions:
	12	*
	13	* The above copyright notice and this permission notice shall be included in
	14	* all copies or substantial portions of the Software.
	15	*
	16	* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
	17	* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
	18	* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
	19	* THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
	20	* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
	21	* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
	22	* THE SOFTWARE.
	23	*/
87ecb68b PB	24	#include "hw.h"
	25	#include "isa.h"
	26	#include "pc.h"
	27	#include "ps2.h"
	28	#include "sysemu.h"
80cabfad FB	29
	30	/* debug PC keyboard */
	31	//#define DEBUG_KBD
c86d2c23 BS	32	#ifdef DEBUG_KBD
	33	#define DPRINTF(fmt, ...) \
	34	do { printf("KBD: " fmt , ## __VA_ARGS__); } while (0)
	35	#else
	36	#define DPRINTF(fmt, ...)
	37	#endif
80cabfad	38
80cabfad FB	39	/* Keyboard Controller Commands */
	40	#define KBD_CCMD_READ_MODE 0x20 /* Read mode bits */
	41	#define KBD_CCMD_WRITE_MODE 0x60 /* Write mode bits */
	42	#define KBD_CCMD_GET_VERSION 0xA1 /* Get controller version */
	43	#define KBD_CCMD_MOUSE_DISABLE 0xA7 /* Disable mouse interface */
	44	#define KBD_CCMD_MOUSE_ENABLE 0xA8 /* Enable mouse interface */
	45	#define KBD_CCMD_TEST_MOUSE 0xA9 /* Mouse interface test */
	46	#define KBD_CCMD_SELF_TEST 0xAA /* Controller self test */
	47	#define KBD_CCMD_KBD_TEST 0xAB /* Keyboard interface test */
	48	#define KBD_CCMD_KBD_DISABLE 0xAD /* Keyboard interface disable */
	49	#define KBD_CCMD_KBD_ENABLE 0xAE /* Keyboard interface enable */
	50	#define KBD_CCMD_READ_INPORT 0xC0 /* read input port */
	51	#define KBD_CCMD_READ_OUTPORT 0xD0 /* read output port */
	52	#define KBD_CCMD_WRITE_OUTPORT 0xD1 /* write output port */
	53	#define KBD_CCMD_WRITE_OBUF 0xD2
	54	#define KBD_CCMD_WRITE_AUX_OBUF 0xD3 /* Write to output buffer as if
	55	initiated by the auxiliary device */
	56	#define KBD_CCMD_WRITE_MOUSE 0xD4 /* Write the following byte to the mouse */
	57	#define KBD_CCMD_DISABLE_A20 0xDD /* HP vectra only ? */
	58	#define KBD_CCMD_ENABLE_A20 0xDF /* HP vectra only ? */
5ccaa4ce BK	59	#define KBD_CCMD_PULSE_BITS_3_0 0xF0 /* Pulse bits 3-0 of the output port P2. */
	60	#define KBD_CCMD_RESET 0xFE /* Pulse bit 0 of the output port P2 = CPU reset. */
	61	#define KBD_CCMD_NO_OP 0xFF /* Pulse no bits of the output port P2. */
80cabfad FB	62
	63	/* Keyboard Commands */
	64	#define KBD_CMD_SET_LEDS 0xED /* Set keyboard leds */
	65	#define KBD_CMD_ECHO 0xEE
	66	#define KBD_CMD_GET_ID 0xF2 /* get keyboard ID */
	67	#define KBD_CMD_SET_RATE 0xF3 /* Set typematic rate */
	68	#define KBD_CMD_ENABLE 0xF4 /* Enable scanning */
	69	#define KBD_CMD_RESET_DISABLE 0xF5 /* reset and disable scanning */
	70	#define KBD_CMD_RESET_ENABLE 0xF6 /* reset and enable scanning */
	71	#define KBD_CMD_RESET 0xFF /* Reset */
	72
	73	/* Keyboard Replies */
	74	#define KBD_REPLY_POR 0xAA /* Power on reset */
	75	#define KBD_REPLY_ACK 0xFA /* Command ACK */
	76	#define KBD_REPLY_RESEND 0xFE /* Command NACK, send the cmd again */
	77
	78	/* Status Register Bits */
	79	#define KBD_STAT_OBF 0x01 /* Keyboard output buffer full */
	80	#define KBD_STAT_IBF 0x02 /* Keyboard input buffer full */
	81	#define KBD_STAT_SELFTEST 0x04 /* Self test successful */
	82	#define KBD_STAT_CMD 0x08 /* Last write was a command write (0=data) */
	83	#define KBD_STAT_UNLOCKED 0x10 /* Zero if keyboard locked */
	84	#define KBD_STAT_MOUSE_OBF 0x20 /* Mouse output buffer full */
	85	#define KBD_STAT_GTO 0x40 /* General receive/xmit timeout */
	86	#define KBD_STAT_PERR 0x80 /* Parity error */
	87
	88	/* Controller Mode Register Bits */
	89	#define KBD_MODE_KBD_INT 0x01 /* Keyboard data generate IRQ1 */
	90	#define KBD_MODE_MOUSE_INT 0x02 /* Mouse data generate IRQ12 */
	91	#define KBD_MODE_SYS 0x04 /* The system flag (?) */
	92	#define KBD_MODE_NO_KEYLOCK 0x08 /* The keylock doesn't affect the keyboard if set */
	93	#define KBD_MODE_DISABLE_KBD 0x10 /* Disable keyboard interface */
	94	#define KBD_MODE_DISABLE_MOUSE 0x20 /* Disable mouse interface */
	95	#define KBD_MODE_KCC 0x40 /* Scan code conversion to PC format */
	96	#define KBD_MODE_RFU 0x80
	97
956a3e6b BS	98	/* Output Port Bits */
	99	#define KBD_OUT_RESET 0x01 /* 1=normal mode, 0=reset */
	100	#define KBD_OUT_A20 0x02 /* x86 only */
	101	#define KBD_OUT_OBF 0x10 /* Keyboard output buffer full */
	102	#define KBD_OUT_MOUSE_OBF 0x20 /* Mouse output buffer full */
	103
80cabfad FB	104	/* Mouse Commands */
	105	#define AUX_SET_SCALE11 0xE6 /* Set 1:1 scaling */
	106	#define AUX_SET_SCALE21 0xE7 /* Set 2:1 scaling */
	107	#define AUX_SET_RES 0xE8 /* Set resolution */
	108	#define AUX_GET_SCALE 0xE9 /* Get scaling factor */
	109	#define AUX_SET_STREAM 0xEA /* Set stream mode */
	110	#define AUX_POLL 0xEB /* Poll */
	111	#define AUX_RESET_WRAP 0xEC /* Reset wrap mode */
	112	#define AUX_SET_WRAP 0xEE /* Set wrap mode */
	113	#define AUX_SET_REMOTE 0xF0 /* Set remote mode */
	114	#define AUX_GET_TYPE 0xF2 /* Get type */
	115	#define AUX_SET_SAMPLE 0xF3 /* Set sample rate */
	116	#define AUX_ENABLE_DEV 0xF4 /* Enable aux device */
	117	#define AUX_DISABLE_DEV 0xF5 /* Disable aux device */
	118	#define AUX_SET_DEFAULT 0xF6
	119	#define AUX_RESET 0xFF /* Reset aux device */
	120	#define AUX_ACK 0xFA /* Command byte ACK. */
	121
	122	#define MOUSE_STATUS_REMOTE 0x40
	123	#define MOUSE_STATUS_ENABLED 0x20
	124	#define MOUSE_STATUS_SCALE21 0x10
	125
daa57963 FB	126	#define KBD_PENDING_KBD 1
daa57963 FB	127	#define KBD_PENDING_AUX 2
80cabfad FB	128
80cabfad FB	129	typedef struct KBDState {
80cabfad FB	130	uint8_t write_cmd; /* if non zero, write data to port 60 is expected */
	131	uint8_t status;
	132	uint8_t mode;
956a3e6b	133	uint8_t outport;
daa57963	134	/* Bitmask of devices with data available. */
7783e9f0	135	uint8_t pending;
daa57963 FB	136	void *kbd;
daa57963 FB	137	void *mouse;
b7678d96	138
d537cf6c PB	139	qemu_irq irq_kbd;
d537cf6c PB	140	qemu_irq irq_mouse;
956a3e6b	141	qemu_irq *a20_out;
c227f099	142	target_phys_addr_t mask;
80cabfad FB	143	} KBDState;
80cabfad FB	144
80cabfad FB	145	/* update irq and KBD_STAT_[MOUSE_]OBF */
	146	/* XXX: not generating the irqs if KBD_MODE_DISABLE_KBD is set may be
	147	incorrect, but it avoids having to simulate exact delays */
	148	static void kbd_update_irq(KBDState *s)
	149	{
b7678d96	150	int irq_kbd_level, irq_mouse_level;
80cabfad	151
b7678d96 TS	152	irq_kbd_level = 0;
b7678d96 TS	153	irq_mouse_level = 0;
80cabfad	154	s->status &= ~(KBD_STAT_OBF \| KBD_STAT_MOUSE_OBF);
956a3e6b	155	s->outport &= ~(KBD_OUT_OBF \| KBD_OUT_MOUSE_OBF);
daa57963	156	if (s->pending) {
80cabfad	157	s->status \|= KBD_STAT_OBF;
956a3e6b	158	s->outport \|= KBD_OUT_OBF;
b92bb99b	159	/* kbd data takes priority over aux data. */
daa57963	160	if (s->pending == KBD_PENDING_AUX) {
80cabfad	161	s->status \|= KBD_STAT_MOUSE_OBF;
956a3e6b	162	s->outport \|= KBD_OUT_MOUSE_OBF;
80cabfad	163	if (s->mode & KBD_MODE_MOUSE_INT)
b7678d96	164	irq_mouse_level = 1;
80cabfad	165	} else {
5fafdf24	166	if ((s->mode & KBD_MODE_KBD_INT) &&
80cabfad	167	!(s->mode & KBD_MODE_DISABLE_KBD))
b7678d96	168	irq_kbd_level = 1;
80cabfad FB	169	}
80cabfad FB	170	}
d537cf6c PB	171	qemu_set_irq(s->irq_kbd, irq_kbd_level);
d537cf6c PB	172	qemu_set_irq(s->irq_mouse, irq_mouse_level);
80cabfad FB	173	}
80cabfad FB	174
daa57963	175	static void kbd_update_kbd_irq(void *opaque, int level)
80cabfad	176	{
daa57963	177	KBDState s = (KBDState )opaque;
80cabfad	178
daa57963 FB	179	if (level)
daa57963 FB	180	s->pending \|= KBD_PENDING_KBD;
80cabfad	181	else
daa57963	182	s->pending &= ~KBD_PENDING_KBD;
80cabfad FB	183	kbd_update_irq(s);
	184	}
	185
daa57963	186	static void kbd_update_aux_irq(void *opaque, int level)
80cabfad	187	{
daa57963 FB	188	KBDState s = (KBDState )opaque;
	189
	190	if (level)
	191	s->pending \|= KBD_PENDING_AUX;
	192	else
	193	s->pending &= ~KBD_PENDING_AUX;
	194	kbd_update_irq(s);
80cabfad FB	195	}
80cabfad FB	196
b41a2cd1	197	static uint32_t kbd_read_status(void *opaque, uint32_t addr)
80cabfad	198	{
b41a2cd1	199	KBDState *s = opaque;
80cabfad FB	200	int val;
80cabfad FB	201	val = s->status;
c86d2c23	202	DPRINTF("kbd: read status=0x%02x\n", val);
80cabfad FB	203	return val;
	204	}
	205
daa57963 FB	206	static void kbd_queue(KBDState *s, int b, int aux)
	207	{
	208	if (aux)
	209	ps2_queue(s->mouse, b);
	210	else
	211	ps2_queue(s->kbd, b);
	212	}
	213
956a3e6b BS	214	static void ioport92_write(void *opaque, uint32_t addr, uint32_t val)
	215	{
	216	KBDState *s = opaque;
	217
c86d2c23	218	DPRINTF("kbd: write outport=0x%02x\n", val);
956a3e6b BS	219	s->outport = val;
	220	if (s->a20_out) {
	221	qemu_set_irq(*s->a20_out, (val >> 1) & 1);
	222	}
	223	if (!(val & 1)) {
	224	qemu_system_reset_request();
	225	}
	226	}
	227
	228	static uint32_t ioport92_read(void *opaque, uint32_t addr)
	229	{
	230	KBDState *s = opaque;
c86d2c23	231	uint32_t ret;
956a3e6b	232
c86d2c23 BS	233	ret = s->outport;
	234	DPRINTF("kbd: read outport=0x%02x\n", ret);
	235	return ret;
956a3e6b BS	236	}
956a3e6b BS	237
b41a2cd1	238	static void kbd_write_command(void *opaque, uint32_t addr, uint32_t val)
80cabfad	239	{
b41a2cd1	240	KBDState *s = opaque;
80cabfad	241
c86d2c23	242	DPRINTF("kbd: write cmd=0x%02x\n", val);
5ccaa4ce BK	243
	244	/* Bits 3-0 of the output port P2 of the keyboard controller may be pulsed
	245	* low for approximately 6 micro seconds. Bits 3-0 of the KBD_CCMD_PULSE
	246	* command specify the output port bits to be pulsed.
	247	* 0: Bit should be pulsed. 1: Bit should not be modified.
	248	* The only useful version of this command is pulsing bit 0,
	249	* which does a CPU reset.
	250	*/
	251	if((val & KBD_CCMD_PULSE_BITS_3_0) == KBD_CCMD_PULSE_BITS_3_0) {
	252	if(!(val & 1))
	253	val = KBD_CCMD_RESET;
	254	else
	255	val = KBD_CCMD_NO_OP;
	256	}
	257
80cabfad FB	258	switch(val) {
80cabfad FB	259	case KBD_CCMD_READ_MODE:
889bec69	260	kbd_queue(s, s->mode, 0);
80cabfad FB	261	break;
	262	case KBD_CCMD_WRITE_MODE:
	263	case KBD_CCMD_WRITE_OBUF:
	264	case KBD_CCMD_WRITE_AUX_OBUF:
	265	case KBD_CCMD_WRITE_MOUSE:
	266	case KBD_CCMD_WRITE_OUTPORT:
	267	s->write_cmd = val;
	268	break;
	269	case KBD_CCMD_MOUSE_DISABLE:
	270	s->mode \|= KBD_MODE_DISABLE_MOUSE;
	271	break;
	272	case KBD_CCMD_MOUSE_ENABLE:
	273	s->mode &= ~KBD_MODE_DISABLE_MOUSE;
	274	break;
	275	case KBD_CCMD_TEST_MOUSE:
	276	kbd_queue(s, 0x00, 0);
	277	break;
	278	case KBD_CCMD_SELF_TEST:
	279	s->status \|= KBD_STAT_SELFTEST;
	280	kbd_queue(s, 0x55, 0);
	281	break;
	282	case KBD_CCMD_KBD_TEST:
	283	kbd_queue(s, 0x00, 0);
	284	break;
	285	case KBD_CCMD_KBD_DISABLE:
	286	s->mode \|= KBD_MODE_DISABLE_KBD;
	287	kbd_update_irq(s);
	288	break;
	289	case KBD_CCMD_KBD_ENABLE:
	290	s->mode &= ~KBD_MODE_DISABLE_KBD;
	291	kbd_update_irq(s);
	292	break;
	293	case KBD_CCMD_READ_INPORT:
	294	kbd_queue(s, 0x00, 0);
	295	break;
	296	case KBD_CCMD_READ_OUTPORT:
956a3e6b	297	kbd_queue(s, s->outport, 0);
80cabfad	298	break;
80cabfad	299	case KBD_CCMD_ENABLE_A20:
956a3e6b BS	300	if (s->a20_out) {
	301	qemu_irq_raise(*s->a20_out);
	302	}
	303	s->outport \|= KBD_OUT_A20;
80cabfad FB	304	break;
80cabfad FB	305	case KBD_CCMD_DISABLE_A20:
956a3e6b BS	306	if (s->a20_out) {
	307	qemu_irq_lower(*s->a20_out);
	308	}
	309	s->outport &= ~KBD_OUT_A20;
80cabfad	310	break;
80cabfad	311	case KBD_CCMD_RESET:
d7d02e3c	312	qemu_system_reset_request();
80cabfad	313	break;
5ccaa4ce BK	314	case KBD_CCMD_NO_OP:
5ccaa4ce BK	315	/* ignore that */
80cabfad FB	316	break;
	317	default:
	318	fprintf(stderr, "qemu: unsupported keyboard cmd=0x%02x\n", val);
	319	break;
	320	}
	321	}
	322
b41a2cd1	323	static uint32_t kbd_read_data(void *opaque, uint32_t addr)
80cabfad	324	{
63066f4f	325	KBDState *s = opaque;
e41c0f26	326	uint32_t val;
80cabfad	327
daa57963	328	if (s->pending == KBD_PENDING_AUX)
e41c0f26 AZ	329	val = ps2_read_data(s->mouse);
	330	else
	331	val = ps2_read_data(s->kbd);
80cabfad	332
c86d2c23	333	DPRINTF("kbd: read data=0x%02x\n", val);
e41c0f26	334	return val;
80cabfad FB	335	}
80cabfad FB	336
9596ebb7	337	static void kbd_write_data(void *opaque, uint32_t addr, uint32_t val)
80cabfad	338	{
b41a2cd1	339	KBDState *s = opaque;
80cabfad	340
c86d2c23	341	DPRINTF("kbd: write data=0x%02x\n", val);
80cabfad FB	342
	343	switch(s->write_cmd) {
	344	case 0:
daa57963	345	ps2_write_keyboard(s->kbd, val);
80cabfad FB	346	break;
	347	case KBD_CCMD_WRITE_MODE:
	348	s->mode = val;
f94f5d71	349	ps2_keyboard_set_translation(s->kbd, (s->mode & KBD_MODE_KCC) != 0);
daa57963	350	/* ??? */
80cabfad FB	351	kbd_update_irq(s);
	352	break;
	353	case KBD_CCMD_WRITE_OBUF:
	354	kbd_queue(s, val, 0);
	355	break;
	356	case KBD_CCMD_WRITE_AUX_OBUF:
	357	kbd_queue(s, val, 1);
	358	break;
	359	case KBD_CCMD_WRITE_OUTPORT:
956a3e6b	360	ioport92_write(s, 0, val);
80cabfad FB	361	break;
80cabfad FB	362	case KBD_CCMD_WRITE_MOUSE:
daa57963	363	ps2_write_mouse(s->mouse, val);
80cabfad FB	364	break;
	365	default:
	366	break;
	367	}
	368	s->write_cmd = 0;
	369	}
	370
d7d02e3c	371	static void kbd_reset(void *opaque)
80cabfad	372	{
d7d02e3c	373	KBDState *s = opaque;
80cabfad	374
80cabfad FB	375	s->mode = KBD_MODE_KBD_INT \| KBD_MODE_MOUSE_INT;
80cabfad FB	376	s->status = KBD_STAT_CMD \| KBD_STAT_UNLOCKED;
956a3e6b	377	s->outport = KBD_OUT_RESET \| KBD_OUT_A20;
80cabfad FB	378	}
80cabfad FB	379
3c619b59 JQ	380	static const VMStateDescription vmstate_kbd = {
	381	.name = "pckbd",
	382	.version_id = 3,
	383	.minimum_version_id = 3,
	384	.minimum_version_id_old = 3,
	385	.fields = (VMStateField []) {
	386	VMSTATE_UINT8(write_cmd, KBDState),
	387	VMSTATE_UINT8(status, KBDState),
	388	VMSTATE_UINT8(mode, KBDState),
	389	VMSTATE_UINT8(pending, KBDState),
	390	VMSTATE_END_OF_LIST()
	391	}
	392	};
675376f2	393
b92bb99b	394	/* Memory mapped interface */
c227f099	395	static uint32_t kbd_mm_readb (void *opaque, target_phys_addr_t addr)
b92bb99b TS	396	{
	397	KBDState *s = opaque;
	398
4efbe58f	399	if (addr & s->mask)
80355292	400	return kbd_read_status(s, 0) & 0xff;
4efbe58f AJ	401	else
4efbe58f AJ	402	return kbd_read_data(s, 0) & 0xff;
b92bb99b TS	403	}
b92bb99b TS	404
c227f099	405	static void kbd_mm_writeb (void *opaque, target_phys_addr_t addr, uint32_t value)
b92bb99b TS	406	{
	407	KBDState *s = opaque;
	408
4efbe58f	409	if (addr & s->mask)
80355292	410	kbd_write_command(s, 0, value & 0xff);
4efbe58f AJ	411	else
4efbe58f AJ	412	kbd_write_data(s, 0, value & 0xff);
b92bb99b TS	413	}
b92bb99b TS	414
d60efc6b	415	static CPUReadMemoryFunc * const kbd_mm_read[] = {
b92bb99b TS	416	&kbd_mm_readb,
	417	&kbd_mm_readb,
	418	&kbd_mm_readb,
	419	};
	420
d60efc6b	421	static CPUWriteMemoryFunc * const kbd_mm_write[] = {
b92bb99b TS	422	&kbd_mm_writeb,
	423	&kbd_mm_writeb,
	424	&kbd_mm_writeb,
	425	};
	426
71db710f	427	void i8042_mm_init(qemu_irq kbd_irq, qemu_irq mouse_irq,
c227f099 AL	428	target_phys_addr_t base, ram_addr_t size,
c227f099 AL	429	target_phys_addr_t mask)
b92bb99b	430	{
5acd0646	431	KBDState *s = qemu_mallocz(sizeof(KBDState));
b92bb99b TS	432	int s_io_memory;
	433
	434	s->irq_kbd = kbd_irq;
	435	s->irq_mouse = mouse_irq;
4efbe58f	436	s->mask = mask;
b92bb99b	437
0be71e32	438	vmstate_register(NULL, 0, &vmstate_kbd, s);
1eed09cb	439	s_io_memory = cpu_register_io_memory(kbd_mm_read, kbd_mm_write, s);
4efbe58f	440	cpu_register_physical_memory(base, size, s_io_memory);
b92bb99b TS	441
	442	s->kbd = ps2_kbd_init(kbd_update_kbd_irq, s);
	443	s->mouse = ps2_mouse_init(kbd_update_aux_irq, s);
a08d4367	444	qemu_register_reset(kbd_reset, s);
b92bb99b	445	}
da85ccfb GH	446
	447	typedef struct ISAKBDState {
	448	ISADevice dev;
	449	KBDState kbd;
	450	} ISAKBDState;
	451
956a3e6b BS	452	void i8042_isa_mouse_fake_event(void *opaque)
	453	{
	454	ISADevice *dev = opaque;
	455	KBDState *s = &(DO_UPCAST(ISAKBDState, dev, dev)->kbd);
	456
	457	ps2_mouse_fake_event(s->mouse);
	458	}
	459
	460	void i8042_setup_a20_line(ISADevice dev, qemu_irq a20_out)
	461	{
	462	KBDState *s = &(DO_UPCAST(ISAKBDState, dev, dev)->kbd);
	463
	464	s->a20_out = a20_out;
	465	}
	466
d05ac8fa	467	static const VMStateDescription vmstate_kbd_isa = {
be73cfe2 JQ	468	.name = "pckbd",
	469	.version_id = 3,
	470	.minimum_version_id = 3,
	471	.minimum_version_id_old = 3,
	472	.fields = (VMStateField []) {
	473	VMSTATE_STRUCT(kbd, ISAKBDState, 0, vmstate_kbd, KBDState),
	474	VMSTATE_END_OF_LIST()
	475	}
	476	};
	477
81a322d4	478	static int i8042_initfn(ISADevice *dev)
da85ccfb GH	479	{
	480	KBDState *s = &(DO_UPCAST(ISAKBDState, dev, dev)->kbd);
	481
2e15e23b GH	482	isa_init_irq(dev, &s->irq_kbd, 1);
2e15e23b GH	483	isa_init_irq(dev, &s->irq_mouse, 12);
da85ccfb	484
86c86157 GH	485	register_ioport_read(0x60, 1, 1, kbd_read_data, s);
	486	register_ioport_write(0x60, 1, 1, kbd_write_data, s);
	487	register_ioport_read(0x64, 1, 1, kbd_read_status, s);
	488	register_ioport_write(0x64, 1, 1, kbd_write_command, s);
956a3e6b BS	489	register_ioport_read(0x92, 1, 1, ioport92_read, s);
956a3e6b BS	490	register_ioport_write(0x92, 1, 1, ioport92_write, s);
da85ccfb GH	491
	492	s->kbd = ps2_kbd_init(kbd_update_kbd_irq, s);
	493	s->mouse = ps2_mouse_init(kbd_update_aux_irq, s);
da85ccfb	494	qemu_register_reset(kbd_reset, s);
81a322d4	495	return 0;
da85ccfb GH	496	}
	497
	498	static ISADeviceInfo i8042_info = {
	499	.qdev.name = "i8042",
	500	.qdev.size = sizeof(ISAKBDState),
be73cfe2	501	.qdev.vmsd = &vmstate_kbd_isa,
da85ccfb GH	502	.qdev.no_user = 1,
	503	.init = i8042_initfn,
	504	};
	505
	506	static void i8042_register(void)
	507	{
	508	isa_qdev_register(&i8042_info);
	509	}
	510	device_init(i8042_register)