[qemu.git] / hw / pckbd.c

/*
 * QEMU PC keyboard emulation
 *
 * Copyright (c) 2003 Fabrice Bellard
 *
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */
#include "hw.h"
#include "isa.h"
#include "pc.h"
#include "ps2.h"
#include "sysemu.h"

/* debug PC keyboard */
//#define DEBUG_KBD
#ifdef DEBUG_KBD
#define DPRINTF(fmt, ...)                                       \
    do { printf("KBD: " fmt , ## __VA_ARGS__); } while (0)
#else
#define DPRINTF(fmt, ...)
#endif

/*	Keyboard Controller Commands */
#define KBD_CCMD_READ_MODE	0x20	/* Read mode bits */
#define KBD_CCMD_WRITE_MODE	0x60	/* Write mode bits */
#define KBD_CCMD_GET_VERSION	0xA1	/* Get controller version */
#define KBD_CCMD_MOUSE_DISABLE	0xA7	/* Disable mouse interface */
#define KBD_CCMD_MOUSE_ENABLE	0xA8	/* Enable mouse interface */
#define KBD_CCMD_TEST_MOUSE	0xA9	/* Mouse interface test */
#define KBD_CCMD_SELF_TEST	0xAA	/* Controller self test */
#define KBD_CCMD_KBD_TEST	0xAB	/* Keyboard interface test */
#define KBD_CCMD_KBD_DISABLE	0xAD	/* Keyboard interface disable */
#define KBD_CCMD_KBD_ENABLE	0xAE	/* Keyboard interface enable */
#define KBD_CCMD_READ_INPORT    0xC0    /* read input port */
#define KBD_CCMD_READ_OUTPORT	0xD0    /* read output port */
#define KBD_CCMD_WRITE_OUTPORT	0xD1    /* write output port */
#define KBD_CCMD_WRITE_OBUF	0xD2
#define KBD_CCMD_WRITE_AUX_OBUF	0xD3    /* Write to output buffer as if
					   initiated by the auxiliary device */
#define KBD_CCMD_WRITE_MOUSE	0xD4	/* Write the following byte to the mouse */
#define KBD_CCMD_DISABLE_A20    0xDD    /* HP vectra only ? */
#define KBD_CCMD_ENABLE_A20     0xDF    /* HP vectra only ? */
#define KBD_CCMD_PULSE_BITS_3_0 0xF0    /* Pulse bits 3-0 of the output port P2. */
#define KBD_CCMD_RESET          0xFE    /* Pulse bit 0 of the output port P2 = CPU reset. */
#define KBD_CCMD_NO_OP          0xFF    /* Pulse no bits of the output port P2. */

/* Keyboard Commands */
#define KBD_CMD_SET_LEDS	0xED	/* Set keyboard leds */
#define KBD_CMD_ECHO     	0xEE
#define KBD_CMD_GET_ID 	        0xF2	/* get keyboard ID */
#define KBD_CMD_SET_RATE	0xF3	/* Set typematic rate */
#define KBD_CMD_ENABLE		0xF4	/* Enable scanning */
#define KBD_CMD_RESET_DISABLE	0xF5	/* reset and disable scanning */
#define KBD_CMD_RESET_ENABLE   	0xF6    /* reset and enable scanning */
#define KBD_CMD_RESET		0xFF	/* Reset */

/* Keyboard Replies */
#define KBD_REPLY_POR		0xAA	/* Power on reset */
#define KBD_REPLY_ACK		0xFA	/* Command ACK */
#define KBD_REPLY_RESEND	0xFE	/* Command NACK, send the cmd again */

/* Status Register Bits */
#define KBD_STAT_OBF 		0x01	/* Keyboard output buffer full */
#define KBD_STAT_IBF 		0x02	/* Keyboard input buffer full */
#define KBD_STAT_SELFTEST	0x04	/* Self test successful */
#define KBD_STAT_CMD		0x08	/* Last write was a command write (0=data) */
#define KBD_STAT_UNLOCKED	0x10	/* Zero if keyboard locked */
#define KBD_STAT_MOUSE_OBF	0x20	/* Mouse output buffer full */
#define KBD_STAT_GTO 		0x40	/* General receive/xmit timeout */
#define KBD_STAT_PERR 		0x80	/* Parity error */

/* Controller Mode Register Bits */
#define KBD_MODE_KBD_INT	0x01	/* Keyboard data generate IRQ1 */
#define KBD_MODE_MOUSE_INT	0x02	/* Mouse data generate IRQ12 */
#define KBD_MODE_SYS 		0x04	/* The system flag (?) */
#define KBD_MODE_NO_KEYLOCK	0x08	/* The keylock doesn't affect the keyboard if set */
#define KBD_MODE_DISABLE_KBD	0x10	/* Disable keyboard interface */
#define KBD_MODE_DISABLE_MOUSE	0x20	/* Disable mouse interface */
#define KBD_MODE_KCC 		0x40	/* Scan code conversion to PC format */
#define KBD_MODE_RFU		0x80

/* Output Port Bits */
#define KBD_OUT_RESET           0x01    /* 1=normal mode, 0=reset */
#define KBD_OUT_A20             0x02    /* x86 only */
#define KBD_OUT_OBF             0x10    /* Keyboard output buffer full */
#define KBD_OUT_MOUSE_OBF       0x20    /* Mouse output buffer full */

/* Mouse Commands */
#define AUX_SET_SCALE11		0xE6	/* Set 1:1 scaling */
#define AUX_SET_SCALE21		0xE7	/* Set 2:1 scaling */
#define AUX_SET_RES		0xE8	/* Set resolution */
#define AUX_GET_SCALE		0xE9	/* Get scaling factor */
#define AUX_SET_STREAM		0xEA	/* Set stream mode */
#define AUX_POLL		0xEB	/* Poll */
#define AUX_RESET_WRAP		0xEC	/* Reset wrap mode */
#define AUX_SET_WRAP		0xEE	/* Set wrap mode */
#define AUX_SET_REMOTE		0xF0	/* Set remote mode */
#define AUX_GET_TYPE		0xF2	/* Get type */
#define AUX_SET_SAMPLE		0xF3	/* Set sample rate */
#define AUX_ENABLE_DEV		0xF4	/* Enable aux device */
#define AUX_DISABLE_DEV		0xF5	/* Disable aux device */
#define AUX_SET_DEFAULT		0xF6
#define AUX_RESET		0xFF	/* Reset aux device */
#define AUX_ACK			0xFA	/* Command byte ACK. */

#define MOUSE_STATUS_REMOTE     0x40
#define MOUSE_STATUS_ENABLED    0x20
#define MOUSE_STATUS_SCALE21    0x10

#define KBD_PENDING_KBD         1
#define KBD_PENDING_AUX         2

typedef struct KBDState {
    uint8_t write_cmd; /* if non zero, write data to port 60 is expected */
    uint8_t status;
    uint8_t mode;
    uint8_t outport;
    /* Bitmask of devices with data available.  */
    uint8_t pending;
    void *kbd;
    void *mouse;

    qemu_irq irq_kbd;
    qemu_irq irq_mouse;
    qemu_irq *a20_out;
    target_phys_addr_t mask;
} KBDState;

/* update irq and KBD_STAT_[MOUSE_]OBF */
/* XXX: not generating the irqs if KBD_MODE_DISABLE_KBD is set may be
   incorrect, but it avoids having to simulate exact delays */
static void kbd_update_irq(KBDState *s)
{
    int irq_kbd_level, irq_mouse_level;

    irq_kbd_level = 0;
    irq_mouse_level = 0;
    s->status &= ~(KBD_STAT_OBF | KBD_STAT_MOUSE_OBF);
    s->outport &= ~(KBD_OUT_OBF | KBD_OUT_MOUSE_OBF);
    if (s->pending) {
        s->status |= KBD_STAT_OBF;
        s->outport |= KBD_OUT_OBF;
        /* kbd data takes priority over aux data.  */
        if (s->pending == KBD_PENDING_AUX) {
            s->status |= KBD_STAT_MOUSE_OBF;
            s->outport |= KBD_OUT_MOUSE_OBF;
            if (s->mode & KBD_MODE_MOUSE_INT)
                irq_mouse_level = 1;
        } else {
            if ((s->mode & KBD_MODE_KBD_INT) &&
                !(s->mode & KBD_MODE_DISABLE_KBD))
                irq_kbd_level = 1;
        }
    }
    qemu_set_irq(s->irq_kbd, irq_kbd_level);
    qemu_set_irq(s->irq_mouse, irq_mouse_level);
}

static void kbd_update_kbd_irq(void *opaque, int level)
{
    KBDState *s = (KBDState *)opaque;

    if (level)
        s->pending |= KBD_PENDING_KBD;
    else
        s->pending &= ~KBD_PENDING_KBD;
    kbd_update_irq(s);
}

static void kbd_update_aux_irq(void *opaque, int level)
{
    KBDState *s = (KBDState *)opaque;

    if (level)
        s->pending |= KBD_PENDING_AUX;
    else
        s->pending &= ~KBD_PENDING_AUX;
    kbd_update_irq(s);
}

static uint32_t kbd_read_status(void *opaque, uint32_t addr)
{
    KBDState *s = opaque;
    int val;
    val = s->status;
    DPRINTF("kbd: read status=0x%02x\n", val);
    return val;
}

static void kbd_queue(KBDState *s, int b, int aux)
{
    if (aux)
        ps2_queue(s->mouse, b);
    else
        ps2_queue(s->kbd, b);
}

static void outport_write(KBDState *s, uint32_t val)
{
    DPRINTF("kbd: write outport=0x%02x\n", val);
    s->outport = val;
    if (s->a20_out) {
        qemu_set_irq(*s->a20_out, (val >> 1) & 1);
    }
    if (!(val & 1)) {
        qemu_system_reset_request();
    }
}

static void kbd_write_command(void *opaque, uint32_t addr, uint32_t val)
{
    KBDState *s = opaque;

    DPRINTF("kbd: write cmd=0x%02x\n", val);

    /* Bits 3-0 of the output port P2 of the keyboard controller may be pulsed
     * low for approximately 6 micro seconds. Bits 3-0 of the KBD_CCMD_PULSE
     * command specify the output port bits to be pulsed.
     * 0: Bit should be pulsed. 1: Bit should not be modified.
     * The only useful version of this command is pulsing bit 0,
     * which does a CPU reset.
     */
    if((val & KBD_CCMD_PULSE_BITS_3_0) == KBD_CCMD_PULSE_BITS_3_0) {
        if(!(val & 1))
            val = KBD_CCMD_RESET;
        else
            val = KBD_CCMD_NO_OP;
    }

    switch(val) {
    case KBD_CCMD_READ_MODE:
        kbd_queue(s, s->mode, 0);
        break;
    case KBD_CCMD_WRITE_MODE:
    case KBD_CCMD_WRITE_OBUF:
    case KBD_CCMD_WRITE_AUX_OBUF:
    case KBD_CCMD_WRITE_MOUSE:
    case KBD_CCMD_WRITE_OUTPORT:
        s->write_cmd = val;
        break;
    case KBD_CCMD_MOUSE_DISABLE:
        s->mode |= KBD_MODE_DISABLE_MOUSE;
        break;
    case KBD_CCMD_MOUSE_ENABLE:
        s->mode &= ~KBD_MODE_DISABLE_MOUSE;
        break;
    case KBD_CCMD_TEST_MOUSE:
        kbd_queue(s, 0x00, 0);
        break;
    case KBD_CCMD_SELF_TEST:
        s->status |= KBD_STAT_SELFTEST;
        kbd_queue(s, 0x55, 0);
        break;
    case KBD_CCMD_KBD_TEST:
        kbd_queue(s, 0x00, 0);
        break;
    case KBD_CCMD_KBD_DISABLE:
        s->mode |= KBD_MODE_DISABLE_KBD;
        kbd_update_irq(s);
        break;
    case KBD_CCMD_KBD_ENABLE:
        s->mode &= ~KBD_MODE_DISABLE_KBD;
        kbd_update_irq(s);
        break;
    case KBD_CCMD_READ_INPORT:
        kbd_queue(s, 0x00, 0);
        break;
    case KBD_CCMD_READ_OUTPORT:
        kbd_queue(s, s->outport, 0);
        break;
    case KBD_CCMD_ENABLE_A20:
        if (s->a20_out) {
            qemu_irq_raise(*s->a20_out);
        }
        s->outport |= KBD_OUT_A20;
        break;
    case KBD_CCMD_DISABLE_A20:
        if (s->a20_out) {
            qemu_irq_lower(*s->a20_out);
        }
        s->outport &= ~KBD_OUT_A20;
        break;
    case KBD_CCMD_RESET:
        qemu_system_reset_request();
        break;
    case KBD_CCMD_NO_OP:
        /* ignore that */
        break;
    default:
        fprintf(stderr, "qemu: unsupported keyboard cmd=0x%02x\n", val);
        break;
    }
}

static uint32_t kbd_read_data(void *opaque, uint32_t addr)
{
    KBDState *s = opaque;
    uint32_t val;

    if (s->pending == KBD_PENDING_AUX)
        val = ps2_read_data(s->mouse);
    else
        val = ps2_read_data(s->kbd);

    DPRINTF("kbd: read data=0x%02x\n", val);
    return val;
}

static void kbd_write_data(void *opaque, uint32_t addr, uint32_t val)
{
    KBDState *s = opaque;

    DPRINTF("kbd: write data=0x%02x\n", val);

    switch(s->write_cmd) {
    case 0:
        ps2_write_keyboard(s->kbd, val);
        break;
    case KBD_CCMD_WRITE_MODE:
        s->mode = val;
        ps2_keyboard_set_translation(s->kbd, (s->mode & KBD_MODE_KCC) != 0);
        /* ??? */
        kbd_update_irq(s);
        break;
    case KBD_CCMD_WRITE_OBUF:
        kbd_queue(s, val, 0);
        break;
    case KBD_CCMD_WRITE_AUX_OBUF:
        kbd_queue(s, val, 1);
        break;
    case KBD_CCMD_WRITE_OUTPORT:
        outport_write(s, val);
        break;
    case KBD_CCMD_WRITE_MOUSE:
        ps2_write_mouse(s->mouse, val);
        break;
    default:
        break;
    }
    s->write_cmd = 0;
}

static void kbd_reset(void *opaque)
{
    KBDState *s = opaque;

    s->mode = KBD_MODE_KBD_INT | KBD_MODE_MOUSE_INT;
    s->status = KBD_STAT_CMD | KBD_STAT_UNLOCKED;
    s->outport = KBD_OUT_RESET | KBD_OUT_A20;
}

static const VMStateDescription vmstate_kbd = {
    .name = "pckbd",
    .version_id = 3,
    .minimum_version_id = 3,
    .minimum_version_id_old = 3,
    .fields      = (VMStateField []) {
        VMSTATE_UINT8(write_cmd, KBDState),
        VMSTATE_UINT8(status, KBDState),
        VMSTATE_UINT8(mode, KBDState),
        VMSTATE_UINT8(pending, KBDState),
        VMSTATE_END_OF_LIST()
    }
};

/* Memory mapped interface */
static uint32_t kbd_mm_readb (void *opaque, target_phys_addr_t addr)
{
    KBDState *s = opaque;

    if (addr & s->mask)
        return kbd_read_status(s, 0) & 0xff;
    else
        return kbd_read_data(s, 0) & 0xff;
}

static void kbd_mm_writeb (void *opaque, target_phys_addr_t addr, uint32_t value)
{
    KBDState *s = opaque;

    if (addr & s->mask)
        kbd_write_command(s, 0, value & 0xff);
    else
        kbd_write_data(s, 0, value & 0xff);
}

static CPUReadMemoryFunc * const kbd_mm_read[] = {
    &kbd_mm_readb,
    &kbd_mm_readb,
    &kbd_mm_readb,
};

static CPUWriteMemoryFunc * const kbd_mm_write[] = {
    &kbd_mm_writeb,
    &kbd_mm_writeb,
    &kbd_mm_writeb,
};

void i8042_mm_init(qemu_irq kbd_irq, qemu_irq mouse_irq,
                   target_phys_addr_t base, ram_addr_t size,
                   target_phys_addr_t mask)
{
    KBDState *s = qemu_mallocz(sizeof(KBDState));
    int s_io_memory;

    s->irq_kbd = kbd_irq;
    s->irq_mouse = mouse_irq;
    s->mask = mask;

    vmstate_register(NULL, 0, &vmstate_kbd, s);
    s_io_memory = cpu_register_io_memory(kbd_mm_read, kbd_mm_write, s,
                                         DEVICE_NATIVE_ENDIAN);
    cpu_register_physical_memory(base, size, s_io_memory);

    s->kbd = ps2_kbd_init(kbd_update_kbd_irq, s);
    s->mouse = ps2_mouse_init(kbd_update_aux_irq, s);
    qemu_register_reset(kbd_reset, s);
}

typedef struct ISAKBDState {
    ISADevice dev;
    KBDState  kbd;
} ISAKBDState;

void i8042_isa_mouse_fake_event(void *opaque)
{
    ISADevice *dev = opaque;
    KBDState *s = &(DO_UPCAST(ISAKBDState, dev, dev)->kbd);

    ps2_mouse_fake_event(s->mouse);
}

void i8042_setup_a20_line(ISADevice *dev, qemu_irq *a20_out)
{
    KBDState *s = &(DO_UPCAST(ISAKBDState, dev, dev)->kbd);

    s->a20_out = a20_out;
}

static const VMStateDescription vmstate_kbd_isa = {
    .name = "pckbd",
    .version_id = 3,
    .minimum_version_id = 3,
    .minimum_version_id_old = 3,
    .fields      = (VMStateField []) {
        VMSTATE_STRUCT(kbd, ISAKBDState, 0, vmstate_kbd, KBDState),
        VMSTATE_END_OF_LIST()
    }
};

static int i8042_initfn(ISADevice *dev)
{
    KBDState *s = &(DO_UPCAST(ISAKBDState, dev, dev)->kbd);

    isa_init_irq(dev, &s->irq_kbd, 1);
    isa_init_irq(dev, &s->irq_mouse, 12);

    register_ioport_read(0x60, 1, 1, kbd_read_data, s);
    register_ioport_write(0x60, 1, 1, kbd_write_data, s);
    isa_init_ioport(dev, 0x60);
    register_ioport_read(0x64, 1, 1, kbd_read_status, s);
    register_ioport_write(0x64, 1, 1, kbd_write_command, s);
    isa_init_ioport(dev, 0x64);

    s->kbd = ps2_kbd_init(kbd_update_kbd_irq, s);
    s->mouse = ps2_mouse_init(kbd_update_aux_irq, s);
    qemu_register_reset(kbd_reset, s);
    return 0;
}

static ISADeviceInfo i8042_info = {
    .qdev.name     = "i8042",
    .qdev.size     = sizeof(ISAKBDState),
    .qdev.vmsd     = &vmstate_kbd_isa,
    .qdev.no_user  = 1,
    .init          = i8042_initfn,
};

static void i8042_register(void)
{
    isa_qdev_register(&i8042_info);
}
device_init(i8042_register)
Commit	Line	Data
80cabfad FB	1	/*
80cabfad FB	2	* QEMU PC keyboard emulation
5fafdf24	3	*
80cabfad	4	* Copyright (c) 2003 Fabrice Bellard
5fafdf24	5	*
80cabfad FB	6	* Permission is hereby granted, free of charge, to any person obtaining a copy
	7	* of this software and associated documentation files (the "Software"), to deal
	8	* in the Software without restriction, including without limitation the rights
	9	* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
	10	* copies of the Software, and to permit persons to whom the Software is
	11	* furnished to do so, subject to the following conditions:
	12	*
	13	* The above copyright notice and this permission notice shall be included in
	14	* all copies or substantial portions of the Software.
	15	*
	16	* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
	17	* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
	18	* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
	19	* THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
	20	* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
	21	* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
	22	* THE SOFTWARE.
	23	*/
87ecb68b PB	24	#include "hw.h"
	25	#include "isa.h"
	26	#include "pc.h"
	27	#include "ps2.h"
	28	#include "sysemu.h"
80cabfad FB	29
	30	/* debug PC keyboard */
	31	//#define DEBUG_KBD
c86d2c23 BS	32	#ifdef DEBUG_KBD
	33	#define DPRINTF(fmt, ...) \
	34	do { printf("KBD: " fmt , ## __VA_ARGS__); } while (0)
	35	#else
	36	#define DPRINTF(fmt, ...)
	37	#endif
80cabfad	38
80cabfad FB	39	/* Keyboard Controller Commands */
	40	#define KBD_CCMD_READ_MODE 0x20 /* Read mode bits */
	41	#define KBD_CCMD_WRITE_MODE 0x60 /* Write mode bits */
	42	#define KBD_CCMD_GET_VERSION 0xA1 /* Get controller version */
	43	#define KBD_CCMD_MOUSE_DISABLE 0xA7 /* Disable mouse interface */
	44	#define KBD_CCMD_MOUSE_ENABLE 0xA8 /* Enable mouse interface */
	45	#define KBD_CCMD_TEST_MOUSE 0xA9 /* Mouse interface test */
	46	#define KBD_CCMD_SELF_TEST 0xAA /* Controller self test */
	47	#define KBD_CCMD_KBD_TEST 0xAB /* Keyboard interface test */
	48	#define KBD_CCMD_KBD_DISABLE 0xAD /* Keyboard interface disable */
	49	#define KBD_CCMD_KBD_ENABLE 0xAE /* Keyboard interface enable */
	50	#define KBD_CCMD_READ_INPORT 0xC0 /* read input port */
	51	#define KBD_CCMD_READ_OUTPORT 0xD0 /* read output port */
	52	#define KBD_CCMD_WRITE_OUTPORT 0xD1 /* write output port */
	53	#define KBD_CCMD_WRITE_OBUF 0xD2
	54	#define KBD_CCMD_WRITE_AUX_OBUF 0xD3 /* Write to output buffer as if
	55	initiated by the auxiliary device */
	56	#define KBD_CCMD_WRITE_MOUSE 0xD4 /* Write the following byte to the mouse */
	57	#define KBD_CCMD_DISABLE_A20 0xDD /* HP vectra only ? */
	58	#define KBD_CCMD_ENABLE_A20 0xDF /* HP vectra only ? */
5ccaa4ce BK	59	#define KBD_CCMD_PULSE_BITS_3_0 0xF0 /* Pulse bits 3-0 of the output port P2. */
	60	#define KBD_CCMD_RESET 0xFE /* Pulse bit 0 of the output port P2 = CPU reset. */
	61	#define KBD_CCMD_NO_OP 0xFF /* Pulse no bits of the output port P2. */
80cabfad FB	62
	63	/* Keyboard Commands */
	64	#define KBD_CMD_SET_LEDS 0xED /* Set keyboard leds */
	65	#define KBD_CMD_ECHO 0xEE
	66	#define KBD_CMD_GET_ID 0xF2 /* get keyboard ID */
	67	#define KBD_CMD_SET_RATE 0xF3 /* Set typematic rate */
	68	#define KBD_CMD_ENABLE 0xF4 /* Enable scanning */
	69	#define KBD_CMD_RESET_DISABLE 0xF5 /* reset and disable scanning */
	70	#define KBD_CMD_RESET_ENABLE 0xF6 /* reset and enable scanning */
	71	#define KBD_CMD_RESET 0xFF /* Reset */
	72
	73	/* Keyboard Replies */
	74	#define KBD_REPLY_POR 0xAA /* Power on reset */
	75	#define KBD_REPLY_ACK 0xFA /* Command ACK */
	76	#define KBD_REPLY_RESEND 0xFE /* Command NACK, send the cmd again */
	77
	78	/* Status Register Bits */
	79	#define KBD_STAT_OBF 0x01 /* Keyboard output buffer full */
	80	#define KBD_STAT_IBF 0x02 /* Keyboard input buffer full */
	81	#define KBD_STAT_SELFTEST 0x04 /* Self test successful */
	82	#define KBD_STAT_CMD 0x08 /* Last write was a command write (0=data) */
	83	#define KBD_STAT_UNLOCKED 0x10 /* Zero if keyboard locked */
	84	#define KBD_STAT_MOUSE_OBF 0x20 /* Mouse output buffer full */
	85	#define KBD_STAT_GTO 0x40 /* General receive/xmit timeout */
	86	#define KBD_STAT_PERR 0x80 /* Parity error */
	87
	88	/* Controller Mode Register Bits */
	89	#define KBD_MODE_KBD_INT 0x01 /* Keyboard data generate IRQ1 */
	90	#define KBD_MODE_MOUSE_INT 0x02 /* Mouse data generate IRQ12 */
	91	#define KBD_MODE_SYS 0x04 /* The system flag (?) */
	92	#define KBD_MODE_NO_KEYLOCK 0x08 /* The keylock doesn't affect the keyboard if set */
	93	#define KBD_MODE_DISABLE_KBD 0x10 /* Disable keyboard interface */
	94	#define KBD_MODE_DISABLE_MOUSE 0x20 /* Disable mouse interface */
	95	#define KBD_MODE_KCC 0x40 /* Scan code conversion to PC format */
	96	#define KBD_MODE_RFU 0x80
	97
956a3e6b BS	98	/* Output Port Bits */
	99	#define KBD_OUT_RESET 0x01 /* 1=normal mode, 0=reset */
	100	#define KBD_OUT_A20 0x02 /* x86 only */
	101	#define KBD_OUT_OBF 0x10 /* Keyboard output buffer full */
	102	#define KBD_OUT_MOUSE_OBF 0x20 /* Mouse output buffer full */
	103
80cabfad FB	104	/* Mouse Commands */
	105	#define AUX_SET_SCALE11 0xE6 /* Set 1:1 scaling */
	106	#define AUX_SET_SCALE21 0xE7 /* Set 2:1 scaling */
	107	#define AUX_SET_RES 0xE8 /* Set resolution */
	108	#define AUX_GET_SCALE 0xE9 /* Get scaling factor */
	109	#define AUX_SET_STREAM 0xEA /* Set stream mode */
	110	#define AUX_POLL 0xEB /* Poll */
	111	#define AUX_RESET_WRAP 0xEC /* Reset wrap mode */
	112	#define AUX_SET_WRAP 0xEE /* Set wrap mode */
	113	#define AUX_SET_REMOTE 0xF0 /* Set remote mode */
	114	#define AUX_GET_TYPE 0xF2 /* Get type */
	115	#define AUX_SET_SAMPLE 0xF3 /* Set sample rate */
	116	#define AUX_ENABLE_DEV 0xF4 /* Enable aux device */
	117	#define AUX_DISABLE_DEV 0xF5 /* Disable aux device */
	118	#define AUX_SET_DEFAULT 0xF6
	119	#define AUX_RESET 0xFF /* Reset aux device */
	120	#define AUX_ACK 0xFA /* Command byte ACK. */
	121
	122	#define MOUSE_STATUS_REMOTE 0x40
	123	#define MOUSE_STATUS_ENABLED 0x20
	124	#define MOUSE_STATUS_SCALE21 0x10
	125
daa57963 FB	126	#define KBD_PENDING_KBD 1
daa57963 FB	127	#define KBD_PENDING_AUX 2
80cabfad FB	128
80cabfad FB	129	typedef struct KBDState {
80cabfad FB	130	uint8_t write_cmd; /* if non zero, write data to port 60 is expected */
	131	uint8_t status;
	132	uint8_t mode;
956a3e6b	133	uint8_t outport;
daa57963	134	/* Bitmask of devices with data available. */
7783e9f0	135	uint8_t pending;
daa57963 FB	136	void *kbd;
daa57963 FB	137	void *mouse;
b7678d96	138
d537cf6c PB	139	qemu_irq irq_kbd;
d537cf6c PB	140	qemu_irq irq_mouse;
956a3e6b	141	qemu_irq *a20_out;
c227f099	142	target_phys_addr_t mask;
80cabfad FB	143	} KBDState;
80cabfad FB	144
80cabfad FB	145	/* update irq and KBD_STAT_[MOUSE_]OBF */
	146	/* XXX: not generating the irqs if KBD_MODE_DISABLE_KBD is set may be
	147	incorrect, but it avoids having to simulate exact delays */
	148	static void kbd_update_irq(KBDState *s)
	149	{
b7678d96	150	int irq_kbd_level, irq_mouse_level;
80cabfad	151
b7678d96 TS	152	irq_kbd_level = 0;
b7678d96 TS	153	irq_mouse_level = 0;
80cabfad	154	s->status &= ~(KBD_STAT_OBF \| KBD_STAT_MOUSE_OBF);
956a3e6b	155	s->outport &= ~(KBD_OUT_OBF \| KBD_OUT_MOUSE_OBF);
daa57963	156	if (s->pending) {
80cabfad	157	s->status \|= KBD_STAT_OBF;
956a3e6b	158	s->outport \|= KBD_OUT_OBF;
b92bb99b	159	/* kbd data takes priority over aux data. */
daa57963	160	if (s->pending == KBD_PENDING_AUX) {
80cabfad	161	s->status \|= KBD_STAT_MOUSE_OBF;
956a3e6b	162	s->outport \|= KBD_OUT_MOUSE_OBF;
80cabfad	163	if (s->mode & KBD_MODE_MOUSE_INT)
b7678d96	164	irq_mouse_level = 1;
80cabfad	165	} else {
5fafdf24	166	if ((s->mode & KBD_MODE_KBD_INT) &&
80cabfad	167	!(s->mode & KBD_MODE_DISABLE_KBD))
b7678d96	168	irq_kbd_level = 1;
80cabfad FB	169	}
80cabfad FB	170	}
d537cf6c PB	171	qemu_set_irq(s->irq_kbd, irq_kbd_level);
d537cf6c PB	172	qemu_set_irq(s->irq_mouse, irq_mouse_level);
80cabfad FB	173	}
80cabfad FB	174
daa57963	175	static void kbd_update_kbd_irq(void *opaque, int level)
80cabfad	176	{
daa57963	177	KBDState s = (KBDState )opaque;
80cabfad	178
daa57963 FB	179	if (level)
daa57963 FB	180	s->pending \|= KBD_PENDING_KBD;
80cabfad	181	else
daa57963	182	s->pending &= ~KBD_PENDING_KBD;
80cabfad FB	183	kbd_update_irq(s);
	184	}
	185
daa57963	186	static void kbd_update_aux_irq(void *opaque, int level)
80cabfad	187	{
daa57963 FB	188	KBDState s = (KBDState )opaque;
	189
	190	if (level)
	191	s->pending \|= KBD_PENDING_AUX;
	192	else
	193	s->pending &= ~KBD_PENDING_AUX;
	194	kbd_update_irq(s);
80cabfad FB	195	}
80cabfad FB	196
b41a2cd1	197	static uint32_t kbd_read_status(void *opaque, uint32_t addr)
80cabfad	198	{
b41a2cd1	199	KBDState *s = opaque;
80cabfad FB	200	int val;
80cabfad FB	201	val = s->status;
c86d2c23	202	DPRINTF("kbd: read status=0x%02x\n", val);
80cabfad FB	203	return val;
	204	}
	205
daa57963 FB	206	static void kbd_queue(KBDState *s, int b, int aux)
	207	{
	208	if (aux)
	209	ps2_queue(s->mouse, b);
	210	else
	211	ps2_queue(s->kbd, b);
	212	}
	213
4b78a802	214	static void outport_write(KBDState *s, uint32_t val)
956a3e6b	215	{
c86d2c23	216	DPRINTF("kbd: write outport=0x%02x\n", val);
956a3e6b BS	217	s->outport = val;
	218	if (s->a20_out) {
	219	qemu_set_irq(*s->a20_out, (val >> 1) & 1);
	220	}
	221	if (!(val & 1)) {
	222	qemu_system_reset_request();
	223	}
	224	}
	225
b41a2cd1	226	static void kbd_write_command(void *opaque, uint32_t addr, uint32_t val)
80cabfad	227	{
b41a2cd1	228	KBDState *s = opaque;
80cabfad	229
c86d2c23	230	DPRINTF("kbd: write cmd=0x%02x\n", val);
5ccaa4ce BK	231
	232	/* Bits 3-0 of the output port P2 of the keyboard controller may be pulsed
	233	* low for approximately 6 micro seconds. Bits 3-0 of the KBD_CCMD_PULSE
	234	* command specify the output port bits to be pulsed.
	235	* 0: Bit should be pulsed. 1: Bit should not be modified.
	236	* The only useful version of this command is pulsing bit 0,
	237	* which does a CPU reset.
	238	*/
	239	if((val & KBD_CCMD_PULSE_BITS_3_0) == KBD_CCMD_PULSE_BITS_3_0) {
	240	if(!(val & 1))
	241	val = KBD_CCMD_RESET;
	242	else
	243	val = KBD_CCMD_NO_OP;
	244	}
	245
80cabfad FB	246	switch(val) {
80cabfad FB	247	case KBD_CCMD_READ_MODE:
889bec69	248	kbd_queue(s, s->mode, 0);
80cabfad FB	249	break;
	250	case KBD_CCMD_WRITE_MODE:
	251	case KBD_CCMD_WRITE_OBUF:
	252	case KBD_CCMD_WRITE_AUX_OBUF:
	253	case KBD_CCMD_WRITE_MOUSE:
	254	case KBD_CCMD_WRITE_OUTPORT:
	255	s->write_cmd = val;
	256	break;
	257	case KBD_CCMD_MOUSE_DISABLE:
	258	s->mode \|= KBD_MODE_DISABLE_MOUSE;
	259	break;
	260	case KBD_CCMD_MOUSE_ENABLE:
	261	s->mode &= ~KBD_MODE_DISABLE_MOUSE;
	262	break;
	263	case KBD_CCMD_TEST_MOUSE:
	264	kbd_queue(s, 0x00, 0);
	265	break;
	266	case KBD_CCMD_SELF_TEST:
	267	s->status \|= KBD_STAT_SELFTEST;
	268	kbd_queue(s, 0x55, 0);
	269	break;
	270	case KBD_CCMD_KBD_TEST:
	271	kbd_queue(s, 0x00, 0);
	272	break;
	273	case KBD_CCMD_KBD_DISABLE:
	274	s->mode \|= KBD_MODE_DISABLE_KBD;
	275	kbd_update_irq(s);
	276	break;
	277	case KBD_CCMD_KBD_ENABLE:
	278	s->mode &= ~KBD_MODE_DISABLE_KBD;
	279	kbd_update_irq(s);
	280	break;
	281	case KBD_CCMD_READ_INPORT:
	282	kbd_queue(s, 0x00, 0);
	283	break;
	284	case KBD_CCMD_READ_OUTPORT:
956a3e6b	285	kbd_queue(s, s->outport, 0);
80cabfad	286	break;
80cabfad	287	case KBD_CCMD_ENABLE_A20:
956a3e6b BS	288	if (s->a20_out) {
	289	qemu_irq_raise(*s->a20_out);
	290	}
	291	s->outport \|= KBD_OUT_A20;
80cabfad FB	292	break;
80cabfad FB	293	case KBD_CCMD_DISABLE_A20:
956a3e6b BS	294	if (s->a20_out) {
	295	qemu_irq_lower(*s->a20_out);
	296	}
	297	s->outport &= ~KBD_OUT_A20;
80cabfad	298	break;
80cabfad	299	case KBD_CCMD_RESET:
d7d02e3c	300	qemu_system_reset_request();
80cabfad	301	break;
5ccaa4ce BK	302	case KBD_CCMD_NO_OP:
5ccaa4ce BK	303	/* ignore that */
80cabfad FB	304	break;
	305	default:
	306	fprintf(stderr, "qemu: unsupported keyboard cmd=0x%02x\n", val);
	307	break;
	308	}
	309	}
	310
b41a2cd1	311	static uint32_t kbd_read_data(void *opaque, uint32_t addr)
80cabfad	312	{
63066f4f	313	KBDState *s = opaque;
e41c0f26	314	uint32_t val;
80cabfad	315
daa57963	316	if (s->pending == KBD_PENDING_AUX)
e41c0f26 AZ	317	val = ps2_read_data(s->mouse);
	318	else
	319	val = ps2_read_data(s->kbd);
80cabfad	320
c86d2c23	321	DPRINTF("kbd: read data=0x%02x\n", val);
e41c0f26	322	return val;
80cabfad FB	323	}
80cabfad FB	324
9596ebb7	325	static void kbd_write_data(void *opaque, uint32_t addr, uint32_t val)
80cabfad	326	{
b41a2cd1	327	KBDState *s = opaque;
80cabfad	328
c86d2c23	329	DPRINTF("kbd: write data=0x%02x\n", val);
80cabfad FB	330
	331	switch(s->write_cmd) {
	332	case 0:
daa57963	333	ps2_write_keyboard(s->kbd, val);
80cabfad FB	334	break;
	335	case KBD_CCMD_WRITE_MODE:
	336	s->mode = val;
f94f5d71	337	ps2_keyboard_set_translation(s->kbd, (s->mode & KBD_MODE_KCC) != 0);
daa57963	338	/* ??? */
80cabfad FB	339	kbd_update_irq(s);
	340	break;
	341	case KBD_CCMD_WRITE_OBUF:
	342	kbd_queue(s, val, 0);
	343	break;
	344	case KBD_CCMD_WRITE_AUX_OBUF:
	345	kbd_queue(s, val, 1);
	346	break;
	347	case KBD_CCMD_WRITE_OUTPORT:
4b78a802	348	outport_write(s, val);
80cabfad FB	349	break;
80cabfad FB	350	case KBD_CCMD_WRITE_MOUSE:
daa57963	351	ps2_write_mouse(s->mouse, val);
80cabfad FB	352	break;
	353	default:
	354	break;
	355	}
	356	s->write_cmd = 0;
	357	}
	358
d7d02e3c	359	static void kbd_reset(void *opaque)
80cabfad	360	{
d7d02e3c	361	KBDState *s = opaque;
80cabfad	362
80cabfad FB	363	s->mode = KBD_MODE_KBD_INT \| KBD_MODE_MOUSE_INT;
80cabfad FB	364	s->status = KBD_STAT_CMD \| KBD_STAT_UNLOCKED;
956a3e6b	365	s->outport = KBD_OUT_RESET \| KBD_OUT_A20;
80cabfad FB	366	}
80cabfad FB	367
3c619b59 JQ	368	static const VMStateDescription vmstate_kbd = {
	369	.name = "pckbd",
	370	.version_id = 3,
	371	.minimum_version_id = 3,
	372	.minimum_version_id_old = 3,
	373	.fields = (VMStateField []) {
	374	VMSTATE_UINT8(write_cmd, KBDState),
	375	VMSTATE_UINT8(status, KBDState),
	376	VMSTATE_UINT8(mode, KBDState),
	377	VMSTATE_UINT8(pending, KBDState),
	378	VMSTATE_END_OF_LIST()
	379	}
	380	};
675376f2	381
b92bb99b	382	/* Memory mapped interface */
c227f099	383	static uint32_t kbd_mm_readb (void *opaque, target_phys_addr_t addr)
b92bb99b TS	384	{
	385	KBDState *s = opaque;
	386
4efbe58f	387	if (addr & s->mask)
80355292	388	return kbd_read_status(s, 0) & 0xff;
4efbe58f AJ	389	else
4efbe58f AJ	390	return kbd_read_data(s, 0) & 0xff;
b92bb99b TS	391	}
b92bb99b TS	392
c227f099	393	static void kbd_mm_writeb (void *opaque, target_phys_addr_t addr, uint32_t value)
b92bb99b TS	394	{
	395	KBDState *s = opaque;
	396
4efbe58f	397	if (addr & s->mask)
80355292	398	kbd_write_command(s, 0, value & 0xff);
4efbe58f AJ	399	else
4efbe58f AJ	400	kbd_write_data(s, 0, value & 0xff);
b92bb99b TS	401	}
b92bb99b TS	402
d60efc6b	403	static CPUReadMemoryFunc * const kbd_mm_read[] = {
b92bb99b TS	404	&kbd_mm_readb,
	405	&kbd_mm_readb,
	406	&kbd_mm_readb,
	407	};
	408
d60efc6b	409	static CPUWriteMemoryFunc * const kbd_mm_write[] = {
b92bb99b TS	410	&kbd_mm_writeb,
	411	&kbd_mm_writeb,
	412	&kbd_mm_writeb,
	413	};
	414
71db710f	415	void i8042_mm_init(qemu_irq kbd_irq, qemu_irq mouse_irq,
c227f099 AL	416	target_phys_addr_t base, ram_addr_t size,
c227f099 AL	417	target_phys_addr_t mask)
b92bb99b	418	{
5acd0646	419	KBDState *s = qemu_mallocz(sizeof(KBDState));
b92bb99b TS	420	int s_io_memory;
	421
	422	s->irq_kbd = kbd_irq;
	423	s->irq_mouse = mouse_irq;
4efbe58f	424	s->mask = mask;
b92bb99b	425
0be71e32	426	vmstate_register(NULL, 0, &vmstate_kbd, s);
2507c12a AG	427	s_io_memory = cpu_register_io_memory(kbd_mm_read, kbd_mm_write, s,
2507c12a AG	428	DEVICE_NATIVE_ENDIAN);
4efbe58f	429	cpu_register_physical_memory(base, size, s_io_memory);
b92bb99b TS	430
	431	s->kbd = ps2_kbd_init(kbd_update_kbd_irq, s);
	432	s->mouse = ps2_mouse_init(kbd_update_aux_irq, s);
a08d4367	433	qemu_register_reset(kbd_reset, s);
b92bb99b	434	}
da85ccfb GH	435
	436	typedef struct ISAKBDState {
	437	ISADevice dev;
	438	KBDState kbd;
	439	} ISAKBDState;
	440
956a3e6b BS	441	void i8042_isa_mouse_fake_event(void *opaque)
	442	{
	443	ISADevice *dev = opaque;
	444	KBDState *s = &(DO_UPCAST(ISAKBDState, dev, dev)->kbd);
	445
	446	ps2_mouse_fake_event(s->mouse);
	447	}
	448
	449	void i8042_setup_a20_line(ISADevice dev, qemu_irq a20_out)
	450	{
	451	KBDState *s = &(DO_UPCAST(ISAKBDState, dev, dev)->kbd);
	452
	453	s->a20_out = a20_out;
	454	}
	455
d05ac8fa	456	static const VMStateDescription vmstate_kbd_isa = {
be73cfe2 JQ	457	.name = "pckbd",
	458	.version_id = 3,
	459	.minimum_version_id = 3,
	460	.minimum_version_id_old = 3,
	461	.fields = (VMStateField []) {
	462	VMSTATE_STRUCT(kbd, ISAKBDState, 0, vmstate_kbd, KBDState),
	463	VMSTATE_END_OF_LIST()
	464	}
	465	};
	466
81a322d4	467	static int i8042_initfn(ISADevice *dev)
da85ccfb GH	468	{
	469	KBDState *s = &(DO_UPCAST(ISAKBDState, dev, dev)->kbd);
	470
2e15e23b GH	471	isa_init_irq(dev, &s->irq_kbd, 1);
2e15e23b GH	472	isa_init_irq(dev, &s->irq_mouse, 12);
da85ccfb	473
86c86157 GH	474	register_ioport_read(0x60, 1, 1, kbd_read_data, s);
86c86157 GH	475	register_ioport_write(0x60, 1, 1, kbd_write_data, s);
dee41d58	476	isa_init_ioport(dev, 0x60);
86c86157 GH	477	register_ioport_read(0x64, 1, 1, kbd_read_status, s);
86c86157 GH	478	register_ioport_write(0x64, 1, 1, kbd_write_command, s);
dee41d58	479	isa_init_ioport(dev, 0x64);
da85ccfb GH	480
	481	s->kbd = ps2_kbd_init(kbd_update_kbd_irq, s);
	482	s->mouse = ps2_mouse_init(kbd_update_aux_irq, s);
da85ccfb	483	qemu_register_reset(kbd_reset, s);
81a322d4	484	return 0;
da85ccfb GH	485	}
	486
	487	static ISADeviceInfo i8042_info = {
	488	.qdev.name = "i8042",
	489	.qdev.size = sizeof(ISAKBDState),
be73cfe2	490	.qdev.vmsd = &vmstate_kbd_isa,
da85ccfb GH	491	.qdev.no_user = 1,
	492	.init = i8042_initfn,
	493	};
	494
	495	static void i8042_register(void)
	496	{
	497	isa_qdev_register(&i8042_info);
	498	}
	499	device_init(i8042_register)