hw/misc/macio/cuda.c

   1 /*
   2  * QEMU PowerMac CUDA device support
   3  *
   4  * Copyright (c) 2004-2007 Fabrice Bellard
   5  * Copyright (c) 2007 Jocelyn Mayer
   6  *
   7  * Permission is hereby granted, free of charge, to any person obtaining a copy
   8  * of this software and associated documentation files (the "Software"), to deal
   9  * in the Software without restriction, including without limitation the rights
  10  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  11  * copies of the Software, and to permit persons to whom the Software is
  12  * furnished to do so, subject to the following conditions:
  13  *
  14  * The above copyright notice and this permission notice shall be included in
  15  * all copies or substantial portions of the Software.
  16  *
  17  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  18  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  19  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  20  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  21  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  22  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  23  * THE SOFTWARE.
  24  */
  25 #include "qemu/osdep.h"
  26 #include "hw/hw.h"
  27 #include "hw/ppc/mac.h"
  28 #include "hw/input/adb.h"
  29 #include "qemu/timer.h"
  30 #include "sysemu/sysemu.h"
  31
  32 /* XXX: implement all timer modes */
  33
  34 /* debug CUDA */
  35 //#define DEBUG_CUDA
  36
  37 /* debug CUDA packets */
  38 //#define DEBUG_CUDA_PACKET
  39
  40 #ifdef DEBUG_CUDA
  41 #define CUDA_DPRINTF(fmt, ...)                                  \
  42     do { printf("CUDA: " fmt , ## __VA_ARGS__); } while (0)
  43 #else
  44 #define CUDA_DPRINTF(fmt, ...)
  45 #endif
  46
  47 /* Bits in B data register: all active low */
  48 #define TREQ            0x08            /* Transfer request (input) */
  49 #define TACK            0x10            /* Transfer acknowledge (output) */
  50 #define TIP             0x20            /* Transfer in progress (output) */
  51
  52 /* Bits in ACR */
  53 #define SR_CTRL         0x1c            /* Shift register control bits */
  54 #define SR_EXT          0x0c            /* Shift on external clock */
  55 #define SR_OUT          0x10            /* Shift out if 1 */
  56
  57 /* Bits in IFR and IER */
  58 #define IER_SET         0x80            /* set bits in IER */
  59 #define IER_CLR         0               /* clear bits in IER */
  60 #define SR_INT          0x04            /* Shift register full/empty */
  61 #define SR_DATA_INT     0x08
  62 #define SR_CLOCK_INT    0x10
  63 #define T1_INT          0x40            /* Timer 1 interrupt */
  64 #define T2_INT          0x20            /* Timer 2 interrupt */
  65
  66 /* Bits in ACR */
  67 #define T1MODE          0xc0            /* Timer 1 mode */
  68 #define T1MODE_CONT     0x40            /*  continuous interrupts */
  69
  70 /* commands (1st byte) */
  71 #define ADB_PACKET      0
  72 #define CUDA_PACKET     1
  73 #define ERROR_PACKET    2
  74 #define TIMER_PACKET    3
  75 #define POWER_PACKET    4
  76 #define MACIIC_PACKET   5
  77 #define PMU_PACKET      6
  78
  79
  80 /* CUDA commands (2nd byte) */
  81 #define CUDA_WARM_START                 0x0
  82 #define CUDA_AUTOPOLL                   0x1
  83 #define CUDA_GET_6805_ADDR              0x2
  84 #define CUDA_GET_TIME                   0x3
  85 #define CUDA_GET_PRAM                   0x7
  86 #define CUDA_SET_6805_ADDR              0x8
  87 #define CUDA_SET_TIME                   0x9
  88 #define CUDA_POWERDOWN                  0xa
  89 #define CUDA_POWERUP_TIME               0xb
  90 #define CUDA_SET_PRAM                   0xc
  91 #define CUDA_MS_RESET                   0xd
  92 #define CUDA_SEND_DFAC                  0xe
  93 #define CUDA_BATTERY_SWAP_SENSE         0x10
  94 #define CUDA_RESET_SYSTEM               0x11
  95 #define CUDA_SET_IPL                    0x12
  96 #define CUDA_FILE_SERVER_FLAG           0x13
  97 #define CUDA_SET_AUTO_RATE              0x14
  98 #define CUDA_GET_AUTO_RATE              0x16
  99 #define CUDA_SET_DEVICE_LIST            0x19
 100 #define CUDA_GET_DEVICE_LIST            0x1a
 101 #define CUDA_SET_ONE_SECOND_MODE        0x1b
 102 #define CUDA_SET_POWER_MESSAGES         0x21
 103 #define CUDA_GET_SET_IIC                0x22
 104 #define CUDA_WAKEUP                     0x23
 105 #define CUDA_TIMER_TICKLE               0x24
 106 #define CUDA_COMBINED_FORMAT_IIC        0x25
 107
 108 #define CUDA_TIMER_FREQ (4700000 / 6)
 109
 110 /* CUDA returns time_t's offset from Jan 1, 1904, not 1970 */
 111 #define RTC_OFFSET                      2082844800
 112
 113 /* CUDA registers */
 114 #define CUDA_REG_B       0x00
 115 #define CUDA_REG_A       0x01
 116 #define CUDA_REG_DIRB    0x02
 117 #define CUDA_REG_DIRA    0x03
 118 #define CUDA_REG_T1CL    0x04
 119 #define CUDA_REG_T1CH    0x05
 120 #define CUDA_REG_T1LL    0x06
 121 #define CUDA_REG_T1LH    0x07
 122 #define CUDA_REG_T2CL    0x08
 123 #define CUDA_REG_T2CH    0x09
 124 #define CUDA_REG_SR      0x0a
 125 #define CUDA_REG_ACR     0x0b
 126 #define CUDA_REG_PCR     0x0c
 127 #define CUDA_REG_IFR     0x0d
 128 #define CUDA_REG_IER     0x0e
 129 #define CUDA_REG_ANH     0x0f
 130
 131 static void cuda_update(CUDAState *s);
 132 static void cuda_receive_packet_from_host(CUDAState *s,
 133                                           const uint8_t *data, int len);
 134 static void cuda_timer_update(CUDAState *s, CUDATimer *ti,
 135                               int64_t current_time);
 136
 137 static void cuda_update_irq(CUDAState *s)
 138 {
 139     if (s->ifr & s->ier & (SR_INT | T1_INT | T2_INT)) {
 140         qemu_irq_raise(s->irq);
 141     } else {
 142         qemu_irq_lower(s->irq);
 143     }
 144 }
 145
 146 static uint64_t get_tb(uint64_t time, uint64_t freq)
 147 {
 148     return muldiv64(time, freq, get_ticks_per_sec());
 149 }
 150
 151 static unsigned int get_counter(CUDATimer *ti)
 152 {
 153     int64_t d;
 154     unsigned int counter;
 155     uint64_t tb_diff;
 156     uint64_t current_time = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL);
 157
 158     /* Reverse of the tb calculation algorithm that Mac OS X uses on bootup. */
 159     tb_diff = get_tb(current_time, ti->frequency) - ti->load_time;
 160     d = (tb_diff * 0xBF401675E5DULL) / (ti->frequency << 24);
 161
 162     if (ti->index == 0) {
 163         /* the timer goes down from latch to -1 (period of latch + 2) */
 164         if (d <= (ti->counter_value + 1)) {
 165             counter = (ti->counter_value - d) & 0xffff;
 166         } else {
 167             counter = (d - (ti->counter_value + 1)) % (ti->latch + 2);
 168             counter = (ti->latch - counter) & 0xffff;
 169         }
 170     } else {
 171         counter = (ti->counter_value - d) & 0xffff;
 172     }
 173     return counter;
 174 }
 175
 176 static void set_counter(CUDAState *s, CUDATimer *ti, unsigned int val)
 177 {
 178     CUDA_DPRINTF("T%d.counter=%d\n", 1 + ti->index, val);
 179     ti->load_time = get_tb(qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL),
 180                            s->frequency);
 181     ti->counter_value = val;
 182     cuda_timer_update(s, ti, ti->load_time);
 183 }
 184
 185 static int64_t get_next_irq_time(CUDATimer *s, int64_t current_time)
 186 {
 187     int64_t d, next_time;
 188     unsigned int counter;
 189
 190     /* current counter value */
 191     d = muldiv64(current_time - s->load_time,
 192                  CUDA_TIMER_FREQ, get_ticks_per_sec());
 193     /* the timer goes down from latch to -1 (period of latch + 2) */
 194     if (d <= (s->counter_value + 1)) {
 195         counter = (s->counter_value - d) & 0xffff;
 196     } else {
 197         counter = (d - (s->counter_value + 1)) % (s->latch + 2);
 198         counter = (s->latch - counter) & 0xffff;
 199     }
 200
 201     /* Note: we consider the irq is raised on 0 */
 202     if (counter == 0xffff) {
 203         next_time = d + s->latch + 1;
 204     } else if (counter == 0) {
 205         next_time = d + s->latch + 2;
 206     } else {
 207         next_time = d + counter;
 208     }
 209     CUDA_DPRINTF("latch=%d counter=%" PRId64 " delta_next=%" PRId64 "\n",
 210                  s->latch, d, next_time - d);
 211     next_time = muldiv64(next_time, get_ticks_per_sec(), CUDA_TIMER_FREQ) +
 212         s->load_time;
 213     if (next_time <= current_time)
 214         next_time = current_time + 1;
 215     return next_time;
 216 }
 217
 218 static void cuda_timer_update(CUDAState *s, CUDATimer *ti,
 219                               int64_t current_time)
 220 {
 221     if (!ti->timer)
 222         return;
 223     if (ti->index == 0 && (s->acr & T1MODE) != T1MODE_CONT) {
 224         timer_del(ti->timer);
 225     } else {
 226         ti->next_irq_time = get_next_irq_time(ti, current_time);
 227         timer_mod(ti->timer, ti->next_irq_time);
 228     }
 229 }
 230
 231 static void cuda_timer1(void *opaque)
 232 {
 233     CUDAState *s = opaque;
 234     CUDATimer *ti = &s->timers[0];
 235
 236     cuda_timer_update(s, ti, ti->next_irq_time);
 237     s->ifr |= T1_INT;
 238     cuda_update_irq(s);
 239 }
 240
 241 static void cuda_timer2(void *opaque)
 242 {
 243     CUDAState *s = opaque;
 244     CUDATimer *ti = &s->timers[1];
 245
 246     cuda_timer_update(s, ti, ti->next_irq_time);
 247     s->ifr |= T2_INT;
 248     cuda_update_irq(s);
 249 }
 250
 251 static void cuda_set_sr_int(void *opaque)
 252 {
 253     CUDAState *s = opaque;
 254
 255     CUDA_DPRINTF("CUDA: %s:%d\n", __func__, __LINE__);
 256     s->ifr |= SR_INT;
 257     cuda_update_irq(s);
 258 }
 259
 260 static void cuda_delay_set_sr_int(CUDAState *s)
 261 {
 262     int64_t expire;
 263
 264     if (s->dirb == 0xff) {
 265         /* Not in Mac OS, fire the IRQ directly */
 266         cuda_set_sr_int(s);
 267         return;
 268     }
 269
 270     CUDA_DPRINTF("CUDA: %s:%d\n", __func__, __LINE__);
 271
 272     expire = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) + 300 * SCALE_US;
 273     timer_mod(s->sr_delay_timer, expire);
 274 }
 275
 276 static uint32_t cuda_readb(void *opaque, hwaddr addr)
 277 {
 278     CUDAState *s = opaque;
 279     uint32_t val;
 280
 281     addr = (addr >> 9) & 0xf;
 282     switch(addr) {
 283     case CUDA_REG_B:
 284         val = s->b;
 285         break;
 286     case CUDA_REG_A:
 287         val = s->a;
 288         break;
 289     case CUDA_REG_DIRB:
 290         val = s->dirb;
 291         break;
 292     case CUDA_REG_DIRA:
 293         val = s->dira;
 294         break;
 295     case CUDA_REG_T1CL:
 296         val = get_counter(&s->timers[0]) & 0xff;
 297         s->ifr &= ~T1_INT;
 298         cuda_update_irq(s);
 299         break;
 300     case CUDA_REG_T1CH:
 301         val = get_counter(&s->timers[0]) >> 8;
 302         cuda_update_irq(s);
 303         break;
 304     case CUDA_REG_T1LL:
 305         val = s->timers[0].latch & 0xff;
 306         break;
 307     case CUDA_REG_T1LH:
 308         /* XXX: check this */
 309         val = (s->timers[0].latch >> 8) & 0xff;
 310         break;
 311     case CUDA_REG_T2CL:
 312         val = get_counter(&s->timers[1]) & 0xff;
 313         s->ifr &= ~T2_INT;
 314         cuda_update_irq(s);
 315         break;
 316     case CUDA_REG_T2CH:
 317         val = get_counter(&s->timers[1]) >> 8;
 318         break;
 319     case CUDA_REG_SR:
 320         val = s->sr;
 321         s->ifr &= ~(SR_INT | SR_CLOCK_INT | SR_DATA_INT);
 322         cuda_update_irq(s);
 323         break;
 324     case CUDA_REG_ACR:
 325         val = s->acr;
 326         break;
 327     case CUDA_REG_PCR:
 328         val = s->pcr;
 329         break;
 330     case CUDA_REG_IFR:
 331         val = s->ifr;
 332         if (s->ifr & s->ier) {
 333             val |= 0x80;
 334         }
 335         break;
 336     case CUDA_REG_IER:
 337         val = s->ier | 0x80;
 338         break;
 339     default:
 340     case CUDA_REG_ANH:
 341         val = s->anh;
 342         break;
 343     }
 344     if (addr != CUDA_REG_IFR || val != 0) {
 345         CUDA_DPRINTF("read: reg=0x%x val=%02x\n", (int)addr, val);
 346     }
 347
 348     return val;
 349 }
 350
 351 static void cuda_writeb(void *opaque, hwaddr addr, uint32_t val)
 352 {
 353     CUDAState *s = opaque;
 354
 355     addr = (addr >> 9) & 0xf;
 356     CUDA_DPRINTF("write: reg=0x%x val=%02x\n", (int)addr, val);
 357
 358     switch(addr) {
 359     case CUDA_REG_B:
 360         s->b = val;
 361         cuda_update(s);
 362         break;
 363     case CUDA_REG_A:
 364         s->a = val;
 365         break;
 366     case CUDA_REG_DIRB:
 367         s->dirb = val;
 368         break;
 369     case CUDA_REG_DIRA:
 370         s->dira = val;
 371         break;
 372     case CUDA_REG_T1CL:
 373         s->timers[0].latch = (s->timers[0].latch & 0xff00) | val;
 374         cuda_timer_update(s, &s->timers[0], qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL));
 375         break;
 376     case CUDA_REG_T1CH:
 377         s->timers[0].latch = (s->timers[0].latch & 0xff) | (val << 8);
 378         s->ifr &= ~T1_INT;
 379         set_counter(s, &s->timers[0], s->timers[0].latch);
 380         break;
 381     case CUDA_REG_T1LL:
 382         s->timers[0].latch = (s->timers[0].latch & 0xff00) | val;
 383         cuda_timer_update(s, &s->timers[0], qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL));
 384         break;
 385     case CUDA_REG_T1LH:
 386         s->timers[0].latch = (s->timers[0].latch & 0xff) | (val << 8);
 387         s->ifr &= ~T1_INT;
 388         cuda_timer_update(s, &s->timers[0], qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL));
 389         break;
 390     case CUDA_REG_T2CL:
 391         s->timers[1].latch = (s->timers[1].latch & 0xff00) | val;
 392         break;
 393     case CUDA_REG_T2CH:
 394         /* To ensure T2 generates an interrupt on zero crossing with the
 395            common timer code, write the value directly from the latch to
 396            the counter */
 397         s->timers[1].latch = (s->timers[1].latch & 0xff) | (val << 8);
 398         s->ifr &= ~T2_INT;
 399         set_counter(s, &s->timers[1], s->timers[1].latch);
 400         break;
 401     case CUDA_REG_SR:
 402         s->sr = val;
 403         break;
 404     case CUDA_REG_ACR:
 405         s->acr = val;
 406         cuda_timer_update(s, &s->timers[0], qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL));
 407         cuda_update(s);
 408         break;
 409     case CUDA_REG_PCR:
 410         s->pcr = val;
 411         break;
 412     case CUDA_REG_IFR:
 413         /* reset bits */
 414         s->ifr &= ~val;
 415         cuda_update_irq(s);
 416         break;
 417     case CUDA_REG_IER:
 418         if (val & IER_SET) {
 419             /* set bits */
 420             s->ier |= val & 0x7f;
 421         } else {
 422             /* reset bits */
 423             s->ier &= ~val;
 424         }
 425         cuda_update_irq(s);
 426         break;
 427     default:
 428     case CUDA_REG_ANH:
 429         s->anh = val;
 430         break;
 431     }
 432 }
 433
 434 /* NOTE: TIP and TREQ are negated */
 435 static void cuda_update(CUDAState *s)
 436 {
 437     int packet_received, len;
 438
 439     packet_received = 0;
 440     if (!(s->b & TIP)) {
 441         /* transfer requested from host */
 442
 443         if (s->acr & SR_OUT) {
 444             /* data output */
 445             if ((s->b & (TACK | TIP)) != (s->last_b & (TACK | TIP))) {
 446                 if (s->data_out_index < sizeof(s->data_out)) {
 447                     CUDA_DPRINTF("send: %02x\n", s->sr);
 448                     s->data_out[s->data_out_index++] = s->sr;
 449                     cuda_delay_set_sr_int(s);
 450                 }
 451             }
 452         } else {
 453             if (s->data_in_index < s->data_in_size) {
 454                 /* data input */
 455                 if ((s->b & (TACK | TIP)) != (s->last_b & (TACK | TIP))) {
 456                     s->sr = s->data_in[s->data_in_index++];
 457                     CUDA_DPRINTF("recv: %02x\n", s->sr);
 458                     /* indicate end of transfer */
 459                     if (s->data_in_index >= s->data_in_size) {
 460                         s->b = (s->b | TREQ);
 461                     }
 462                     cuda_delay_set_sr_int(s);
 463                 }
 464             }
 465         }
 466     } else {
 467         /* no transfer requested: handle sync case */
 468         if ((s->last_b & TIP) && (s->b & TACK) != (s->last_b & TACK)) {
 469             /* update TREQ state each time TACK change state */
 470             if (s->b & TACK)
 471                 s->b = (s->b | TREQ);
 472             else
 473                 s->b = (s->b & ~TREQ);
 474             cuda_delay_set_sr_int(s);
 475         } else {
 476             if (!(s->last_b & TIP)) {
 477                 /* handle end of host to cuda transfer */
 478                 packet_received = (s->data_out_index > 0);
 479                 /* always an IRQ at the end of transfer */
 480                 cuda_delay_set_sr_int(s);
 481             }
 482             /* signal if there is data to read */
 483             if (s->data_in_index < s->data_in_size) {
 484                 s->b = (s->b & ~TREQ);
 485             }
 486         }
 487     }
 488
 489     s->last_acr = s->acr;
 490     s->last_b = s->b;
 491
 492     /* NOTE: cuda_receive_packet_from_host() can call cuda_update()
 493        recursively */
 494     if (packet_received) {
 495         len = s->data_out_index;
 496         s->data_out_index = 0;
 497         cuda_receive_packet_from_host(s, s->data_out, len);
 498     }
 499 }
 500
 501 static void cuda_send_packet_to_host(CUDAState *s,
 502                                      const uint8_t *data, int len)
 503 {
 504 #ifdef DEBUG_CUDA_PACKET
 505     {
 506         int i;
 507         printf("cuda_send_packet_to_host:\n");
 508         for(i = 0; i < len; i++)
 509             printf(" %02x", data[i]);
 510         printf("\n");
 511     }
 512 #endif
 513     memcpy(s->data_in, data, len);
 514     s->data_in_size = len;
 515     s->data_in_index = 0;
 516     cuda_update(s);
 517     cuda_delay_set_sr_int(s);
 518 }
 519
 520 static void cuda_adb_poll(void *opaque)
 521 {
 522     CUDAState *s = opaque;
 523     uint8_t obuf[ADB_MAX_OUT_LEN + 2];
 524     int olen;
 525
 526     olen = adb_poll(&s->adb_bus, obuf + 2);
 527     if (olen > 0) {
 528         obuf[0] = ADB_PACKET;
 529         obuf[1] = 0x40; /* polled data */
 530         cuda_send_packet_to_host(s, obuf, olen + 2);
 531     }
 532     timer_mod(s->adb_poll_timer,
 533                    qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) +
 534                    (get_ticks_per_sec() / (1000 / s->autopoll_rate_ms)));
 535 }
 536
 537 /* description of commands */
 538 typedef struct CudaCommand {
 539     uint8_t command;
 540     const char *name;
 541     bool (*handler)(CUDAState *s,
 542                     const uint8_t *in_args, int in_len,
 543                     uint8_t *out_args, int *out_len);
 544 } CudaCommand;
 545
 546 static bool cuda_cmd_autopoll(CUDAState *s,
 547                               const uint8_t *in_data, int in_len,
 548                               uint8_t *out_data, int *out_len)
 549 {
 550     int autopoll;
 551
 552     if (in_len != 1) {
 553         return false;
 554     }
 555
 556     autopoll = (in_data[0] != 0);
 557     if (autopoll != s->autopoll) {
 558         s->autopoll = autopoll;
 559         if (autopoll) {
 560             timer_mod(s->adb_poll_timer,
 561                       qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) +
 562                       (get_ticks_per_sec() / (1000 / s->autopoll_rate_ms)));
 563         } else {
 564             timer_del(s->adb_poll_timer);
 565         }
 566     }
 567     return true;
 568 }
 569
 570 static bool cuda_cmd_set_autorate(CUDAState *s,
 571                                   const uint8_t *in_data, int in_len,
 572                                   uint8_t *out_data, int *out_len)
 573 {
 574     if (in_len != 1) {
 575         return false;
 576     }
 577
 578     /* we don't want a period of 0 ms */
 579     /* FIXME: check what real hardware does */
 580     if (in_data[0] == 0) {
 581         return false;
 582     }
 583
 584     s->autopoll_rate_ms = in_data[0];
 585     if (s->autopoll) {
 586         timer_mod(s->adb_poll_timer,
 587                   qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) +
 588                   (get_ticks_per_sec() / (1000 / s->autopoll_rate_ms)));
 589     }
 590     return true;
 591 }
 592
 593 static const CudaCommand handlers[] = {
 594     { CUDA_AUTOPOLL, "AUTOPOLL", cuda_cmd_autopoll },
 595     { CUDA_SET_AUTO_RATE, "SET_AUTO_RATE",  cuda_cmd_set_autorate },
 596 };
 597
 598 static void cuda_receive_packet(CUDAState *s,
 599                                 const uint8_t *data, int len)
 600 {
 601     uint8_t obuf[16] = { CUDA_PACKET, 0, data[0] };
 602     int i, out_len = 0;
 603     uint32_t ti;
 604
 605     for (i = 0; i < ARRAY_SIZE(handlers); i++) {
 606         const CudaCommand *desc = &handlers[i];
 607         if (desc->command == data[0]) {
 608             CUDA_DPRINTF("handling command %s\n", desc->name);
 609             out_len = 0;
 610             if (desc->handler(s, data + 1, len - 1, obuf + 3, &out_len)) {
 611                 cuda_send_packet_to_host(s, obuf, 3 + out_len);
 612             } else {
 613                 qemu_log_mask(LOG_GUEST_ERROR,
 614                               "CUDA: %s: wrong parameters %d\n",
 615                               desc->name, len);
 616                 obuf[0] = ERROR_PACKET;
 617                 obuf[1] = 0x5; /* bad parameters */
 618                 obuf[2] = CUDA_PACKET;
 619                 obuf[3] = data[0];
 620                 cuda_send_packet_to_host(s, obuf, 4);
 621             }
 622             return;
 623         }
 624     }
 625
 626     switch(data[0]) {
 627     case CUDA_GET_6805_ADDR:
 628         cuda_send_packet_to_host(s, obuf, 3);
 629         return;
 630     case CUDA_SET_TIME:
 631         ti = (((uint32_t)data[1]) << 24) + (((uint32_t)data[2]) << 16) + (((uint32_t)data[3]) << 8) + data[4];
 632         s->tick_offset = ti - (qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) / get_ticks_per_sec());
 633         cuda_send_packet_to_host(s, obuf, 3);
 634         return;
 635     case CUDA_GET_TIME:
 636         ti = s->tick_offset + (qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) / get_ticks_per_sec());
 637         obuf[3] = ti >> 24;
 638         obuf[4] = ti >> 16;
 639         obuf[5] = ti >> 8;
 640         obuf[6] = ti;
 641         cuda_send_packet_to_host(s, obuf, 7);
 642         return;
 643     case CUDA_FILE_SERVER_FLAG:
 644     case CUDA_SET_DEVICE_LIST:
 645     case CUDA_SET_POWER_MESSAGES:
 646         cuda_send_packet_to_host(s, obuf, 3);
 647         return;
 648     case CUDA_POWERDOWN:
 649         cuda_send_packet_to_host(s, obuf, 3);
 650         qemu_system_shutdown_request();
 651         return;
 652     case CUDA_RESET_SYSTEM:
 653         cuda_send_packet_to_host(s, obuf, 3);
 654         qemu_system_reset_request();
 655         return;
 656     case CUDA_COMBINED_FORMAT_IIC:
 657         obuf[0] = ERROR_PACKET;
 658         obuf[1] = 0x5;
 659         obuf[2] = CUDA_PACKET;
 660         obuf[3] = data[0];
 661         cuda_send_packet_to_host(s, obuf, 4);
 662         return;
 663     case CUDA_GET_SET_IIC:
 664         if (len == 4) {
 665             cuda_send_packet_to_host(s, obuf, 3);
 666         } else {
 667             obuf[0] = ERROR_PACKET;
 668             obuf[1] = 0x2;
 669             obuf[2] = CUDA_PACKET;
 670             obuf[3] = data[0];
 671             cuda_send_packet_to_host(s, obuf, 4);
 672         }
 673         return;
 674     default:
 675         break;
 676     }
 677
 678     qemu_log_mask(LOG_GUEST_ERROR, "CUDA: unknown command 0x%02x\n", data[0]);
 679     obuf[0] = ERROR_PACKET;
 680     obuf[1] = 0x2; /* unknown command */
 681     obuf[2] = CUDA_PACKET;
 682     obuf[3] = data[0];
 683     cuda_send_packet_to_host(s, obuf, 4);
 684 }
 685
 686 static void cuda_receive_packet_from_host(CUDAState *s,
 687                                           const uint8_t *data, int len)
 688 {
 689 #ifdef DEBUG_CUDA_PACKET
 690     {
 691         int i;
 692         printf("cuda_receive_packet_from_host:\n");
 693         for(i = 0; i < len; i++)
 694             printf(" %02x", data[i]);
 695         printf("\n");
 696     }
 697 #endif
 698     switch(data[0]) {
 699     case ADB_PACKET:
 700         {
 701             uint8_t obuf[ADB_MAX_OUT_LEN + 3];
 702             int olen;
 703             olen = adb_request(&s->adb_bus, obuf + 2, data + 1, len - 1);
 704             if (olen > 0) {
 705                 obuf[0] = ADB_PACKET;
 706                 obuf[1] = 0x00;
 707                 cuda_send_packet_to_host(s, obuf, olen + 2);
 708             } else {
 709                 /* error */
 710                 obuf[0] = ADB_PACKET;
 711                 obuf[1] = -olen;
 712                 obuf[2] = data[1];
 713                 olen = 0;
 714                 cuda_send_packet_to_host(s, obuf, olen + 3);
 715             }
 716         }
 717         break;
 718     case CUDA_PACKET:
 719         cuda_receive_packet(s, data + 1, len - 1);
 720         break;
 721     }
 722 }
 723
 724 static void cuda_writew (void *opaque, hwaddr addr, uint32_t value)
 725 {
 726 }
 727
 728 static void cuda_writel (void *opaque, hwaddr addr, uint32_t value)
 729 {
 730 }
 731
 732 static uint32_t cuda_readw (void *opaque, hwaddr addr)
 733 {
 734     return 0;
 735 }
 736
 737 static uint32_t cuda_readl (void *opaque, hwaddr addr)
 738 {
 739     return 0;
 740 }
 741
 742 static const MemoryRegionOps cuda_ops = {
 743     .old_mmio = {
 744         .write = {
 745             cuda_writeb,
 746             cuda_writew,
 747             cuda_writel,
 748         },
 749         .read = {
 750             cuda_readb,
 751             cuda_readw,
 752             cuda_readl,
 753         },
 754     },
 755     .endianness = DEVICE_NATIVE_ENDIAN,
 756 };
 757
 758 static bool cuda_timer_exist(void *opaque, int version_id)
 759 {
 760     CUDATimer *s = opaque;
 761
 762     return s->timer != NULL;
 763 }
 764
 765 static const VMStateDescription vmstate_cuda_timer = {
 766     .name = "cuda_timer",
 767     .version_id = 0,
 768     .minimum_version_id = 0,
 769     .fields = (VMStateField[]) {
 770         VMSTATE_UINT16(latch, CUDATimer),
 771         VMSTATE_UINT16(counter_value, CUDATimer),
 772         VMSTATE_INT64(load_time, CUDATimer),
 773         VMSTATE_INT64(next_irq_time, CUDATimer),
 774         VMSTATE_TIMER_PTR_TEST(timer, CUDATimer, cuda_timer_exist),
 775         VMSTATE_END_OF_LIST()
 776     }
 777 };
 778
 779 static const VMStateDescription vmstate_cuda = {
 780     .name = "cuda",
 781     .version_id = 4,
 782     .minimum_version_id = 4,
 783     .fields = (VMStateField[]) {
 784         VMSTATE_UINT8(a, CUDAState),
 785         VMSTATE_UINT8(b, CUDAState),
 786         VMSTATE_UINT8(last_b, CUDAState),
 787         VMSTATE_UINT8(dira, CUDAState),
 788         VMSTATE_UINT8(dirb, CUDAState),
 789         VMSTATE_UINT8(sr, CUDAState),
 790         VMSTATE_UINT8(acr, CUDAState),
 791         VMSTATE_UINT8(last_acr, CUDAState),
 792         VMSTATE_UINT8(pcr, CUDAState),
 793         VMSTATE_UINT8(ifr, CUDAState),
 794         VMSTATE_UINT8(ier, CUDAState),
 795         VMSTATE_UINT8(anh, CUDAState),
 796         VMSTATE_INT32(data_in_size, CUDAState),
 797         VMSTATE_INT32(data_in_index, CUDAState),
 798         VMSTATE_INT32(data_out_index, CUDAState),
 799         VMSTATE_UINT8(autopoll, CUDAState),
 800         VMSTATE_UINT8(autopoll_rate_ms, CUDAState),
 801         VMSTATE_BUFFER(data_in, CUDAState),
 802         VMSTATE_BUFFER(data_out, CUDAState),
 803         VMSTATE_UINT32(tick_offset, CUDAState),
 804         VMSTATE_STRUCT_ARRAY(timers, CUDAState, 2, 1,
 805                              vmstate_cuda_timer, CUDATimer),
 806         VMSTATE_TIMER_PTR(adb_poll_timer, CUDAState),
 807         VMSTATE_TIMER_PTR(sr_delay_timer, CUDAState),
 808         VMSTATE_END_OF_LIST()
 809     }
 810 };
 811
 812 static void cuda_reset(DeviceState *dev)
 813 {
 814     CUDAState *s = CUDA(dev);
 815
 816     s->b = 0;
 817     s->a = 0;
 818     s->dirb = 0xff;
 819     s->dira = 0;
 820     s->sr = 0;
 821     s->acr = 0;
 822     s->pcr = 0;
 823     s->ifr = 0;
 824     s->ier = 0;
 825     //    s->ier = T1_INT | SR_INT;
 826     s->anh = 0;
 827     s->data_in_size = 0;
 828     s->data_in_index = 0;
 829     s->data_out_index = 0;
 830     s->autopoll = 0;
 831
 832     s->timers[0].latch = 0xffff;
 833     set_counter(s, &s->timers[0], 0xffff);
 834
 835     s->timers[1].latch = 0xffff;
 836
 837     s->sr_delay_timer = timer_new_ns(QEMU_CLOCK_VIRTUAL, cuda_set_sr_int, s);
 838 }
 839
 840 static void cuda_realizefn(DeviceState *dev, Error **errp)
 841 {
 842     CUDAState *s = CUDA(dev);
 843     struct tm tm;
 844
 845     s->timers[0].timer = timer_new_ns(QEMU_CLOCK_VIRTUAL, cuda_timer1, s);
 846     s->timers[0].frequency = s->frequency;
 847     s->timers[1].timer = timer_new_ns(QEMU_CLOCK_VIRTUAL, cuda_timer2, s);
 848     s->timers[1].frequency = (SCALE_US * 6000) / 4700;
 849
 850     qemu_get_timedate(&tm, 0);
 851     s->tick_offset = (uint32_t)mktimegm(&tm) + RTC_OFFSET;
 852
 853     s->adb_poll_timer = timer_new_ns(QEMU_CLOCK_VIRTUAL, cuda_adb_poll, s);
 854     s->autopoll_rate_ms = 20;
 855 }
 856
 857 static void cuda_initfn(Object *obj)
 858 {
 859     SysBusDevice *d = SYS_BUS_DEVICE(obj);
 860     CUDAState *s = CUDA(obj);
 861     int i;
 862
 863     memory_region_init_io(&s->mem, obj, &cuda_ops, s, "cuda", 0x2000);
 864     sysbus_init_mmio(d, &s->mem);
 865     sysbus_init_irq(d, &s->irq);
 866
 867     for (i = 0; i < ARRAY_SIZE(s->timers); i++) {
 868         s->timers[i].index = i;
 869     }
 870
 871     qbus_create_inplace(&s->adb_bus, sizeof(s->adb_bus), TYPE_ADB_BUS,
 872                         DEVICE(obj), "adb.0");
 873 }
 874
 875 static Property cuda_properties[] = {
 876     DEFINE_PROP_UINT64("frequency", CUDAState, frequency, 0),
 877     DEFINE_PROP_END_OF_LIST()
 878 };
 879
 880 static void cuda_class_init(ObjectClass *oc, void *data)
 881 {
 882     DeviceClass *dc = DEVICE_CLASS(oc);
 883
 884     dc->realize = cuda_realizefn;
 885     dc->reset = cuda_reset;
 886     dc->vmsd = &vmstate_cuda;
 887     dc->props = cuda_properties;
 888     set_bit(DEVICE_CATEGORY_BRIDGE, dc->categories);
 889 }
 890
 891 static const TypeInfo cuda_type_info = {
 892     .name = TYPE_CUDA,
 893     .parent = TYPE_SYS_BUS_DEVICE,
 894     .instance_size = sizeof(CUDAState),
 895     .instance_init = cuda_initfn,
 896     .class_init = cuda_class_init,
 897 };
 898
 899 static void cuda_register_types(void)
 900 {
 901     type_register_static(&cuda_type_info);
 902 }
 903
 904 type_init(cuda_register_types)