]> git.proxmox.com Git - qemu.git/blame - hw/sd/pl181.c
blockdev: Remove IF_* check for read-only blockdev_init
[qemu.git] / hw / sd / pl181.c
CommitLineData
5fafdf24 1/*
a1bb27b1
PB
2 * Arm PrimeCell PL181 MultiMedia Card Interface
3 *
4 * Copyright (c) 2007 CodeSourcery.
5 * Written by Paul Brook
6 *
8e31bf38 7 * This code is licensed under the GPL.
a1bb27b1
PB
8 */
9
9c17d615 10#include "sysemu/blockdev.h"
83c9f4ca
PB
11#include "hw/sysbus.h"
12#include "hw/sd.h"
a1bb27b1
PB
13
14//#define DEBUG_PL181 1
15
16#ifdef DEBUG_PL181
001faf32
BS
17#define DPRINTF(fmt, ...) \
18do { printf("pl181: " fmt , ## __VA_ARGS__); } while (0)
a1bb27b1 19#else
001faf32 20#define DPRINTF(fmt, ...) do {} while(0)
a1bb27b1
PB
21#endif
22
23#define PL181_FIFO_LEN 16
24
630f4442
AF
25#define TYPE_PL181 "pl181"
26#define PL181(obj) OBJECT_CHECK(PL181State, (obj), TYPE_PL181)
27
1d998d93 28typedef struct PL181State {
630f4442
AF
29 SysBusDevice parent_obj;
30
ca45842a 31 MemoryRegion iomem;
42a10898 32 SDState *card;
a1bb27b1
PB
33 uint32_t clock;
34 uint32_t power;
35 uint32_t cmdarg;
36 uint32_t cmd;
37 uint32_t datatimer;
38 uint32_t datalength;
39 uint32_t respcmd;
40 uint32_t response[4];
41 uint32_t datactrl;
42 uint32_t datacnt;
43 uint32_t status;
44 uint32_t mask[2];
624923be
PM
45 int32_t fifo_pos;
46 int32_t fifo_len;
6361cdb6
PB
47 /* The linux 2.6.21 driver is buggy, and misbehaves if new data arrives
48 while it is reading the FIFO. We hack around this be defering
49 subsequent transfers until after the driver polls the status word.
50 http://www.arm.linux.org.uk/developer/patches/viewpatch.php?id=4446/1
51 */
624923be 52 int32_t linux_hack;
a1bb27b1 53 uint32_t fifo[PL181_FIFO_LEN];
d537cf6c 54 qemu_irq irq[2];
c31a4724
PM
55 /* GPIO outputs for 'card is readonly' and 'card inserted' */
56 qemu_irq cardstatus[2];
1d998d93 57} PL181State;
a1bb27b1 58
624923be
PM
59static const VMStateDescription vmstate_pl181 = {
60 .name = "pl181",
61 .version_id = 1,
62 .minimum_version_id = 1,
63 .fields = (VMStateField[]) {
1d998d93
AF
64 VMSTATE_UINT32(clock, PL181State),
65 VMSTATE_UINT32(power, PL181State),
66 VMSTATE_UINT32(cmdarg, PL181State),
67 VMSTATE_UINT32(cmd, PL181State),
68 VMSTATE_UINT32(datatimer, PL181State),
69 VMSTATE_UINT32(datalength, PL181State),
70 VMSTATE_UINT32(respcmd, PL181State),
71 VMSTATE_UINT32_ARRAY(response, PL181State, 4),
72 VMSTATE_UINT32(datactrl, PL181State),
73 VMSTATE_UINT32(datacnt, PL181State),
74 VMSTATE_UINT32(status, PL181State),
75 VMSTATE_UINT32_ARRAY(mask, PL181State, 2),
76 VMSTATE_INT32(fifo_pos, PL181State),
77 VMSTATE_INT32(fifo_len, PL181State),
78 VMSTATE_INT32(linux_hack, PL181State),
79 VMSTATE_UINT32_ARRAY(fifo, PL181State, PL181_FIFO_LEN),
624923be
PM
80 VMSTATE_END_OF_LIST()
81 }
82};
83
a1bb27b1
PB
84#define PL181_CMD_INDEX 0x3f
85#define PL181_CMD_RESPONSE (1 << 6)
86#define PL181_CMD_LONGRESP (1 << 7)
87#define PL181_CMD_INTERRUPT (1 << 8)
88#define PL181_CMD_PENDING (1 << 9)
89#define PL181_CMD_ENABLE (1 << 10)
90
91#define PL181_DATA_ENABLE (1 << 0)
92#define PL181_DATA_DIRECTION (1 << 1)
93#define PL181_DATA_MODE (1 << 2)
94#define PL181_DATA_DMAENABLE (1 << 3)
95
96#define PL181_STATUS_CMDCRCFAIL (1 << 0)
97#define PL181_STATUS_DATACRCFAIL (1 << 1)
98#define PL181_STATUS_CMDTIMEOUT (1 << 2)
99#define PL181_STATUS_DATATIMEOUT (1 << 3)
100#define PL181_STATUS_TXUNDERRUN (1 << 4)
101#define PL181_STATUS_RXOVERRUN (1 << 5)
102#define PL181_STATUS_CMDRESPEND (1 << 6)
103#define PL181_STATUS_CMDSENT (1 << 7)
104#define PL181_STATUS_DATAEND (1 << 8)
105#define PL181_STATUS_DATABLOCKEND (1 << 10)
106#define PL181_STATUS_CMDACTIVE (1 << 11)
107#define PL181_STATUS_TXACTIVE (1 << 12)
108#define PL181_STATUS_RXACTIVE (1 << 13)
109#define PL181_STATUS_TXFIFOHALFEMPTY (1 << 14)
110#define PL181_STATUS_RXFIFOHALFFULL (1 << 15)
111#define PL181_STATUS_TXFIFOFULL (1 << 16)
112#define PL181_STATUS_RXFIFOFULL (1 << 17)
113#define PL181_STATUS_TXFIFOEMPTY (1 << 18)
114#define PL181_STATUS_RXFIFOEMPTY (1 << 19)
115#define PL181_STATUS_TXDATAAVLBL (1 << 20)
116#define PL181_STATUS_RXDATAAVLBL (1 << 21)
117
118#define PL181_STATUS_TX_FIFO (PL181_STATUS_TXACTIVE \
119 |PL181_STATUS_TXFIFOHALFEMPTY \
120 |PL181_STATUS_TXFIFOFULL \
121 |PL181_STATUS_TXFIFOEMPTY \
122 |PL181_STATUS_TXDATAAVLBL)
123#define PL181_STATUS_RX_FIFO (PL181_STATUS_RXACTIVE \
124 |PL181_STATUS_RXFIFOHALFFULL \
125 |PL181_STATUS_RXFIFOFULL \
126 |PL181_STATUS_RXFIFOEMPTY \
127 |PL181_STATUS_RXDATAAVLBL)
128
129static const unsigned char pl181_id[] =
130{ 0x81, 0x11, 0x04, 0x00, 0x0d, 0xf0, 0x05, 0xb1 };
131
1d998d93 132static void pl181_update(PL181State *s)
a1bb27b1
PB
133{
134 int i;
135 for (i = 0; i < 2; i++) {
d537cf6c 136 qemu_set_irq(s->irq[i], (s->status & s->mask[i]) != 0);
a1bb27b1
PB
137 }
138}
139
1d998d93 140static void pl181_fifo_push(PL181State *s, uint32_t value)
a1bb27b1
PB
141{
142 int n;
143
144 if (s->fifo_len == PL181_FIFO_LEN) {
145 fprintf(stderr, "pl181: FIFO overflow\n");
146 return;
147 }
148 n = (s->fifo_pos + s->fifo_len) & (PL181_FIFO_LEN - 1);
149 s->fifo_len++;
150 s->fifo[n] = value;
151 DPRINTF("FIFO push %08x\n", (int)value);
152}
153
1d998d93 154static uint32_t pl181_fifo_pop(PL181State *s)
a1bb27b1
PB
155{
156 uint32_t value;
157
158 if (s->fifo_len == 0) {
159 fprintf(stderr, "pl181: FIFO underflow\n");
160 return 0;
161 }
162 value = s->fifo[s->fifo_pos];
163 s->fifo_len--;
164 s->fifo_pos = (s->fifo_pos + 1) & (PL181_FIFO_LEN - 1);
165 DPRINTF("FIFO pop %08x\n", (int)value);
166 return value;
167}
168
1d998d93 169static void pl181_send_command(PL181State *s)
a1bb27b1 170{
bc24a225 171 SDRequest request;
a1bb27b1
PB
172 uint8_t response[16];
173 int rlen;
174
175 request.cmd = s->cmd & PL181_CMD_INDEX;
176 request.arg = s->cmdarg;
177 DPRINTF("Command %d %08x\n", request.cmd, request.arg);
178 rlen = sd_do_command(s->card, &request, response);
179 if (rlen < 0)
180 goto error;
181 if (s->cmd & PL181_CMD_RESPONSE) {
8827b0fb 182#define RWORD(n) (((uint32_t)response[n] << 24) | (response[n + 1] << 16) \
a1bb27b1
PB
183 | (response[n + 2] << 8) | response[n + 3])
184 if (rlen == 0 || (rlen == 4 && (s->cmd & PL181_CMD_LONGRESP)))
185 goto error;
186 if (rlen != 4 && rlen != 16)
187 goto error;
188 s->response[0] = RWORD(0);
189 if (rlen == 4) {
190 s->response[1] = s->response[2] = s->response[3] = 0;
191 } else {
192 s->response[1] = RWORD(4);
193 s->response[2] = RWORD(8);
194 s->response[3] = RWORD(12) & ~1;
195 }
aa1f17c1 196 DPRINTF("Response received\n");
a1bb27b1
PB
197 s->status |= PL181_STATUS_CMDRESPEND;
198#undef RWORD
199 } else {
200 DPRINTF("Command sent\n");
201 s->status |= PL181_STATUS_CMDSENT;
202 }
203 return;
204
205error:
206 DPRINTF("Timeout\n");
207 s->status |= PL181_STATUS_CMDTIMEOUT;
208}
209
aa1f17c1 210/* Transfer data between the card and the FIFO. This is complicated by
a1bb27b1
PB
211 the FIFO holding 32-bit words and the card taking data in single byte
212 chunks. FIFO bytes are transferred in little-endian order. */
3b46e624 213
1d998d93 214static void pl181_fifo_run(PL181State *s)
a1bb27b1
PB
215{
216 uint32_t bits;
f21126df 217 uint32_t value = 0;
a1bb27b1 218 int n;
a1bb27b1
PB
219 int is_read;
220
221 is_read = (s->datactrl & PL181_DATA_DIRECTION) != 0;
6361cdb6
PB
222 if (s->datacnt != 0 && (!is_read || sd_data_ready(s->card))
223 && !s->linux_hack) {
bc3b26f5
PB
224 if (is_read) {
225 n = 0;
bc3b26f5 226 while (s->datacnt && s->fifo_len < PL181_FIFO_LEN) {
a1bb27b1 227 value |= (uint32_t)sd_read_data(s->card) << (n * 8);
bc3b26f5 228 s->datacnt--;
a1bb27b1
PB
229 n++;
230 if (n == 4) {
231 pl181_fifo_push(s, value);
a1bb27b1 232 n = 0;
bc3b26f5 233 value = 0;
a1bb27b1 234 }
bc3b26f5
PB
235 }
236 if (n != 0) {
237 pl181_fifo_push(s, value);
238 }
239 } else { /* write */
240 n = 0;
241 while (s->datacnt > 0 && (s->fifo_len > 0 || n > 0)) {
a1bb27b1
PB
242 if (n == 0) {
243 value = pl181_fifo_pop(s);
244 n = 4;
245 }
bc3b26f5
PB
246 n--;
247 s->datacnt--;
a1bb27b1
PB
248 sd_write_data(s->card, value & 0xff);
249 value >>= 8;
a1bb27b1 250 }
a1bb27b1
PB
251 }
252 }
253 s->status &= ~(PL181_STATUS_RX_FIFO | PL181_STATUS_TX_FIFO);
254 if (s->datacnt == 0) {
255 s->status |= PL181_STATUS_DATAEND;
256 /* HACK: */
257 s->status |= PL181_STATUS_DATABLOCKEND;
258 DPRINTF("Transfer Complete\n");
259 }
6361cdb6 260 if (s->datacnt == 0 && s->fifo_len == 0) {
a1bb27b1
PB
261 s->datactrl &= ~PL181_DATA_ENABLE;
262 DPRINTF("Data engine idle\n");
263 } else {
264 /* Update FIFO bits. */
265 bits = PL181_STATUS_TXACTIVE | PL181_STATUS_RXACTIVE;
266 if (s->fifo_len == 0) {
267 bits |= PL181_STATUS_TXFIFOEMPTY;
268 bits |= PL181_STATUS_RXFIFOEMPTY;
269 } else {
270 bits |= PL181_STATUS_TXDATAAVLBL;
271 bits |= PL181_STATUS_RXDATAAVLBL;
272 }
273 if (s->fifo_len == 16) {
274 bits |= PL181_STATUS_TXFIFOFULL;
275 bits |= PL181_STATUS_RXFIFOFULL;
276 }
277 if (s->fifo_len <= 8) {
278 bits |= PL181_STATUS_TXFIFOHALFEMPTY;
279 }
280 if (s->fifo_len >= 8) {
281 bits |= PL181_STATUS_RXFIFOHALFFULL;
282 }
283 if (s->datactrl & PL181_DATA_DIRECTION) {
284 bits &= PL181_STATUS_RX_FIFO;
285 } else {
286 bits &= PL181_STATUS_TX_FIFO;
287 }
288 s->status |= bits;
289 }
290}
291
a8170e5e 292static uint64_t pl181_read(void *opaque, hwaddr offset,
ca45842a 293 unsigned size)
a1bb27b1 294{
1d998d93 295 PL181State *s = (PL181State *)opaque;
6361cdb6 296 uint32_t tmp;
a1bb27b1 297
a1bb27b1
PB
298 if (offset >= 0xfe0 && offset < 0x1000) {
299 return pl181_id[(offset - 0xfe0) >> 2];
300 }
301 switch (offset) {
302 case 0x00: /* Power */
303 return s->power;
304 case 0x04: /* Clock */
305 return s->clock;
306 case 0x08: /* Argument */
307 return s->cmdarg;
308 case 0x0c: /* Command */
309 return s->cmd;
310 case 0x10: /* RespCmd */
311 return s->respcmd;
312 case 0x14: /* Response0 */
313 return s->response[0];
314 case 0x18: /* Response1 */
315 return s->response[1];
316 case 0x1c: /* Response2 */
317 return s->response[2];
318 case 0x20: /* Response3 */
319 return s->response[3];
320 case 0x24: /* DataTimer */
321 return s->datatimer;
322 case 0x28: /* DataLength */
323 return s->datalength;
324 case 0x2c: /* DataCtrl */
325 return s->datactrl;
326 case 0x30: /* DataCnt */
327 return s->datacnt;
328 case 0x34: /* Status */
6361cdb6
PB
329 tmp = s->status;
330 if (s->linux_hack) {
331 s->linux_hack = 0;
332 pl181_fifo_run(s);
333 pl181_update(s);
334 }
335 return tmp;
a1bb27b1
PB
336 case 0x3c: /* Mask0 */
337 return s->mask[0];
338 case 0x40: /* Mask1 */
339 return s->mask[1];
340 case 0x48: /* FifoCnt */
6361cdb6
PB
341 /* The documentation is somewhat vague about exactly what FifoCnt
342 does. On real hardware it appears to be when decrememnted
66a0a2cb 343 when a word is transferred between the FIFO and the serial
6361cdb6 344 data engine. DataCnt is decremented after each byte is
66a0a2cb 345 transferred between the serial engine and the card.
6361cdb6
PB
346 We don't emulate this level of detail, so both can be the same. */
347 tmp = (s->datacnt + 3) >> 2;
348 if (s->linux_hack) {
349 s->linux_hack = 0;
350 pl181_fifo_run(s);
351 pl181_update(s);
352 }
353 return tmp;
a1bb27b1
PB
354 case 0x80: case 0x84: case 0x88: case 0x8c: /* FifoData */
355 case 0x90: case 0x94: case 0x98: case 0x9c:
356 case 0xa0: case 0xa4: case 0xa8: case 0xac:
357 case 0xb0: case 0xb4: case 0xb8: case 0xbc:
6361cdb6 358 if (s->fifo_len == 0) {
9351d708 359 qemu_log_mask(LOG_GUEST_ERROR, "pl181: Unexpected FIFO read\n");
a1bb27b1
PB
360 return 0;
361 } else {
362 uint32_t value;
a1bb27b1 363 value = pl181_fifo_pop(s);
6361cdb6 364 s->linux_hack = 1;
a1bb27b1
PB
365 pl181_fifo_run(s);
366 pl181_update(s);
367 return value;
368 }
369 default:
9351d708
PM
370 qemu_log_mask(LOG_GUEST_ERROR,
371 "pl181_read: Bad offset %x\n", (int)offset);
a1bb27b1
PB
372 return 0;
373 }
374}
375
a8170e5e 376static void pl181_write(void *opaque, hwaddr offset,
ca45842a 377 uint64_t value, unsigned size)
a1bb27b1 378{
1d998d93 379 PL181State *s = (PL181State *)opaque;
a1bb27b1 380
a1bb27b1
PB
381 switch (offset) {
382 case 0x00: /* Power */
383 s->power = value & 0xff;
384 break;
385 case 0x04: /* Clock */
386 s->clock = value & 0xff;
387 break;
388 case 0x08: /* Argument */
389 s->cmdarg = value;
390 break;
391 case 0x0c: /* Command */
392 s->cmd = value;
393 if (s->cmd & PL181_CMD_ENABLE) {
394 if (s->cmd & PL181_CMD_INTERRUPT) {
9351d708
PM
395 qemu_log_mask(LOG_UNIMP,
396 "pl181: Interrupt mode not implemented\n");
a1bb27b1 397 } if (s->cmd & PL181_CMD_PENDING) {
9351d708
PM
398 qemu_log_mask(LOG_UNIMP,
399 "pl181: Pending commands not implemented\n");
a1bb27b1
PB
400 } else {
401 pl181_send_command(s);
402 pl181_fifo_run(s);
403 }
404 /* The command has completed one way or the other. */
405 s->cmd &= ~PL181_CMD_ENABLE;
406 }
407 break;
408 case 0x24: /* DataTimer */
409 s->datatimer = value;
410 break;
411 case 0x28: /* DataLength */
412 s->datalength = value & 0xffff;
413 break;
414 case 0x2c: /* DataCtrl */
415 s->datactrl = value & 0xff;
416 if (value & PL181_DATA_ENABLE) {
417 s->datacnt = s->datalength;
a1bb27b1
PB
418 pl181_fifo_run(s);
419 }
420 break;
421 case 0x38: /* Clear */
422 s->status &= ~(value & 0x7ff);
423 break;
424 case 0x3c: /* Mask0 */
425 s->mask[0] = value;
426 break;
427 case 0x40: /* Mask1 */
428 s->mask[1] = value;
429 break;
430 case 0x80: case 0x84: case 0x88: case 0x8c: /* FifoData */
431 case 0x90: case 0x94: case 0x98: case 0x9c:
432 case 0xa0: case 0xa4: case 0xa8: case 0xac:
433 case 0xb0: case 0xb4: case 0xb8: case 0xbc:
6361cdb6 434 if (s->datacnt == 0) {
9351d708 435 qemu_log_mask(LOG_GUEST_ERROR, "pl181: Unexpected FIFO write\n");
a1bb27b1 436 } else {
a1bb27b1
PB
437 pl181_fifo_push(s, value);
438 pl181_fifo_run(s);
439 }
440 break;
441 default:
9351d708
PM
442 qemu_log_mask(LOG_GUEST_ERROR,
443 "pl181_write: Bad offset %x\n", (int)offset);
a1bb27b1
PB
444 }
445 pl181_update(s);
446}
447
ca45842a
AK
448static const MemoryRegionOps pl181_ops = {
449 .read = pl181_read,
450 .write = pl181_write,
451 .endianness = DEVICE_NATIVE_ENDIAN,
a1bb27b1
PB
452};
453
624923be 454static void pl181_reset(DeviceState *d)
a1bb27b1 455{
630f4442 456 PL181State *s = PL181(d);
a1bb27b1
PB
457
458 s->power = 0;
459 s->cmdarg = 0;
460 s->cmd = 0;
461 s->datatimer = 0;
462 s->datalength = 0;
463 s->respcmd = 0;
464 s->response[0] = 0;
465 s->response[1] = 0;
466 s->response[2] = 0;
467 s->response[3] = 0;
468 s->datatimer = 0;
469 s->datalength = 0;
470 s->datactrl = 0;
471 s->datacnt = 0;
472 s->status = 0;
6361cdb6 473 s->linux_hack = 0;
a1bb27b1
PB
474 s->mask[0] = 0;
475 s->mask[1] = 0;
c31a4724
PM
476
477 /* We can assume our GPIO outputs have been wired up now */
478 sd_set_cb(s->card, s->cardstatus[0], s->cardstatus[1]);
a1bb27b1
PB
479}
480
630f4442 481static int pl181_init(SysBusDevice *sbd)
a1bb27b1 482{
630f4442
AF
483 DeviceState *dev = DEVICE(sbd);
484 PL181State *s = PL181(dev);
13839974 485 DriveInfo *dinfo;
a1bb27b1 486
29776739 487 memory_region_init_io(&s->iomem, OBJECT(s), &pl181_ops, s, "pl181", 0x1000);
630f4442
AF
488 sysbus_init_mmio(sbd, &s->iomem);
489 sysbus_init_irq(sbd, &s->irq[0]);
490 sysbus_init_irq(sbd, &s->irq[1]);
491 qdev_init_gpio_out(dev, s->cardstatus, 2);
13839974 492 dinfo = drive_get_next(IF_SD);
6790f59d 493 s->card = sd_init(dinfo ? dinfo->bdrv : NULL, false);
4f8a066b
KW
494 if (s->card == NULL) {
495 return -1;
496 }
497
81a322d4 498 return 0;
a1bb27b1 499}
aa9311d8 500
999e12bb
AL
501static void pl181_class_init(ObjectClass *klass, void *data)
502{
503 SysBusDeviceClass *sdc = SYS_BUS_DEVICE_CLASS(klass);
39bffca2 504 DeviceClass *k = DEVICE_CLASS(klass);
999e12bb
AL
505
506 sdc->init = pl181_init;
39bffca2
AL
507 k->vmsd = &vmstate_pl181;
508 k->reset = pl181_reset;
509 k->no_user = 1;
999e12bb
AL
510}
511
8c43a6f0 512static const TypeInfo pl181_info = {
630f4442 513 .name = TYPE_PL181,
39bffca2 514 .parent = TYPE_SYS_BUS_DEVICE,
1d998d93 515 .instance_size = sizeof(PL181State),
39bffca2 516 .class_init = pl181_class_init,
624923be
PM
517};
518
83f7d43a 519static void pl181_register_types(void)
aa9311d8 520{
39bffca2 521 type_register_static(&pl181_info);
aa9311d8
PB
522}
523
83f7d43a 524type_init(pl181_register_types)