/* * Intel XScale PXA255/270 MultiMediaCard/SD/SDIO Controller emulation. * * Copyright (c) 2006 Openedhand Ltd. * Written by Andrzej Zaborowski * * This code is licensed under the GPLv2. * * Contributions after 2012-01-13 are licensed under the terms of the * GNU GPL, version 2 or (at your option) any later version. */ #include "qemu/osdep.h" #include "qapi/error.h" #include "hw/hw.h" #include "hw/irq.h" #include "hw/sysbus.h" #include "hw/arm/pxa.h" #include "hw/sd/sd.h" #include "hw/qdev.h" #include "hw/qdev-properties.h" #include "qemu/error-report.h" #include "qemu/log.h" #include "qemu/module.h" #include "trace.h" #define TYPE_PXA2XX_MMCI "pxa2xx-mmci" #define PXA2XX_MMCI(obj) OBJECT_CHECK(PXA2xxMMCIState, (obj), TYPE_PXA2XX_MMCI) #define TYPE_PXA2XX_MMCI_BUS "pxa2xx-mmci-bus" #define PXA2XX_MMCI_BUS(obj) OBJECT_CHECK(SDBus, (obj), TYPE_PXA2XX_MMCI_BUS) struct PXA2xxMMCIState { SysBusDevice parent_obj; MemoryRegion iomem; qemu_irq irq; qemu_irq rx_dma; qemu_irq tx_dma; qemu_irq inserted; qemu_irq readonly; BlockBackend *blk; SDBus sdbus; uint32_t status; uint32_t clkrt; uint32_t spi; uint32_t cmdat; uint32_t resp_tout; uint32_t read_tout; int32_t blklen; int32_t numblk; uint32_t intmask; uint32_t intreq; int32_t cmd; uint32_t arg; int32_t active; int32_t bytesleft; uint8_t tx_fifo[64]; uint32_t tx_start; uint32_t tx_len; uint8_t rx_fifo[32]; uint32_t rx_start; uint32_t rx_len; uint16_t resp_fifo[9]; uint32_t resp_len; int32_t cmdreq; }; static bool pxa2xx_mmci_vmstate_validate(void *opaque, int version_id) { PXA2xxMMCIState *s = opaque; return s->tx_start < ARRAY_SIZE(s->tx_fifo) && s->rx_start < ARRAY_SIZE(s->rx_fifo) && s->tx_len <= ARRAY_SIZE(s->tx_fifo) && s->rx_len <= ARRAY_SIZE(s->rx_fifo) && s->resp_len <= ARRAY_SIZE(s->resp_fifo); } static const VMStateDescription vmstate_pxa2xx_mmci = { .name = "pxa2xx-mmci", .version_id = 2, .minimum_version_id = 2, .fields = (VMStateField[]) { VMSTATE_UINT32(status, PXA2xxMMCIState), VMSTATE_UINT32(clkrt, PXA2xxMMCIState), VMSTATE_UINT32(spi, PXA2xxMMCIState), VMSTATE_UINT32(cmdat, PXA2xxMMCIState), VMSTATE_UINT32(resp_tout, PXA2xxMMCIState), VMSTATE_UINT32(read_tout, PXA2xxMMCIState), VMSTATE_INT32(blklen, PXA2xxMMCIState), VMSTATE_INT32(numblk, PXA2xxMMCIState), VMSTATE_UINT32(intmask, PXA2xxMMCIState), VMSTATE_UINT32(intreq, PXA2xxMMCIState), VMSTATE_INT32(cmd, PXA2xxMMCIState), VMSTATE_UINT32(arg, PXA2xxMMCIState), VMSTATE_INT32(cmdreq, PXA2xxMMCIState), VMSTATE_INT32(active, PXA2xxMMCIState), VMSTATE_INT32(bytesleft, PXA2xxMMCIState), VMSTATE_UINT32(tx_start, PXA2xxMMCIState), VMSTATE_UINT32(tx_len, PXA2xxMMCIState), VMSTATE_UINT32(rx_start, PXA2xxMMCIState), VMSTATE_UINT32(rx_len, PXA2xxMMCIState), VMSTATE_UINT32(resp_len, PXA2xxMMCIState), VMSTATE_VALIDATE("fifo size incorrect", pxa2xx_mmci_vmstate_validate), VMSTATE_UINT8_ARRAY(tx_fifo, PXA2xxMMCIState, 64), VMSTATE_UINT8_ARRAY(rx_fifo, PXA2xxMMCIState, 32), VMSTATE_UINT16_ARRAY(resp_fifo, PXA2xxMMCIState, 9), VMSTATE_END_OF_LIST() } }; #define MMC_STRPCL 0x00 /* MMC Clock Start/Stop register */ #define MMC_STAT 0x04 /* MMC Status register */ #define MMC_CLKRT 0x08 /* MMC Clock Rate register */ #define MMC_SPI 0x0c /* MMC SPI Mode register */ #define MMC_CMDAT 0x10 /* MMC Command/Data register */ #define MMC_RESTO 0x14 /* MMC Response Time-Out register */ #define MMC_RDTO 0x18 /* MMC Read Time-Out register */ #define MMC_BLKLEN 0x1c /* MMC Block Length register */ #define MMC_NUMBLK 0x20 /* MMC Number of Blocks register */ #define MMC_PRTBUF 0x24 /* MMC Buffer Partly Full register */ #define MMC_I_MASK 0x28 /* MMC Interrupt Mask register */ #define MMC_I_REG 0x2c /* MMC Interrupt Request register */ #define MMC_CMD 0x30 /* MMC Command register */ #define MMC_ARGH 0x34 /* MMC Argument High register */ #define MMC_ARGL 0x38 /* MMC Argument Low register */ #define MMC_RES 0x3c /* MMC Response FIFO */ #define MMC_RXFIFO 0x40 /* MMC Receive FIFO */ #define MMC_TXFIFO 0x44 /* MMC Transmit FIFO */ #define MMC_RDWAIT 0x48 /* MMC RD_WAIT register */ #define MMC_BLKS_REM 0x4c /* MMC Blocks Remaining register */ /* Bitfield masks */ #define STRPCL_STOP_CLK (1 << 0) #define STRPCL_STRT_CLK (1 << 1) #define STAT_TOUT_RES (1 << 1) #define STAT_CLK_EN (1 << 8) #define STAT_DATA_DONE (1 << 11) #define STAT_PRG_DONE (1 << 12) #define STAT_END_CMDRES (1 << 13) #define SPI_SPI_MODE (1 << 0) #define CMDAT_RES_TYPE (3 << 0) #define CMDAT_DATA_EN (1 << 2) #define CMDAT_WR_RD (1 << 3) #define CMDAT_DMA_EN (1 << 7) #define CMDAT_STOP_TRAN (1 << 10) #define INT_DATA_DONE (1 << 0) #define INT_PRG_DONE (1 << 1) #define INT_END_CMD (1 << 2) #define INT_STOP_CMD (1 << 3) #define INT_CLK_OFF (1 << 4) #define INT_RXFIFO_REQ (1 << 5) #define INT_TXFIFO_REQ (1 << 6) #define INT_TINT (1 << 7) #define INT_DAT_ERR (1 << 8) #define INT_RES_ERR (1 << 9) #define INT_RD_STALLED (1 << 10) #define INT_SDIO_INT (1 << 11) #define INT_SDIO_SACK (1 << 12) #define PRTBUF_PRT_BUF (1 << 0) /* Route internal interrupt lines to the global IC and DMA */ static void pxa2xx_mmci_int_update(PXA2xxMMCIState *s) { uint32_t mask = s->intmask; if (s->cmdat & CMDAT_DMA_EN) { mask |= INT_RXFIFO_REQ | INT_TXFIFO_REQ; qemu_set_irq(s->rx_dma, !!(s->intreq & INT_RXFIFO_REQ)); qemu_set_irq(s->tx_dma, !!(s->intreq & INT_TXFIFO_REQ)); } qemu_set_irq(s->irq, !!(s->intreq & ~mask)); } static void pxa2xx_mmci_fifo_update(PXA2xxMMCIState *s) { if (!s->active) return; if (s->cmdat & CMDAT_WR_RD) { while (s->bytesleft && s->tx_len) { sdbus_write_data(&s->sdbus, s->tx_fifo[s->tx_start++]); s->tx_start &= 0x1f; s->tx_len --; s->bytesleft --; } if (s->bytesleft) s->intreq |= INT_TXFIFO_REQ; } else while (s->bytesleft && s->rx_len < 32) { s->rx_fifo[(s->rx_start + (s->rx_len ++)) & 0x1f] = sdbus_read_data(&s->sdbus); s->bytesleft --; s->intreq |= INT_RXFIFO_REQ; } if (!s->bytesleft) { s->active = 0; s->intreq |= INT_DATA_DONE; s->status |= STAT_DATA_DONE; if (s->cmdat & CMDAT_WR_RD) { s->intreq |= INT_PRG_DONE; s->status |= STAT_PRG_DONE; } } pxa2xx_mmci_int_update(s); } static void pxa2xx_mmci_wakequeues(PXA2xxMMCIState *s) { int rsplen, i; SDRequest request; uint8_t response[16]; s->active = 1; s->rx_len = 0; s->tx_len = 0; s->cmdreq = 0; request.cmd = s->cmd; request.arg = s->arg; request.crc = 0; /* FIXME */ rsplen = sdbus_do_command(&s->sdbus, &request, response); s->intreq |= INT_END_CMD; memset(s->resp_fifo, 0, sizeof(s->resp_fifo)); switch (s->cmdat & CMDAT_RES_TYPE) { #define PXAMMCI_RESP(wd, value0, value1) \ s->resp_fifo[(wd) + 0] |= (value0); \ s->resp_fifo[(wd) + 1] |= (value1) << 8; case 0: /* No response */ goto complete; case 1: /* R1, R4, R5 or R6 */ if (rsplen < 4) goto timeout; goto complete; case 2: /* R2 */ if (rsplen < 16) goto timeout; goto complete; case 3: /* R3 */ if (rsplen < 4) goto timeout; goto complete; complete: for (i = 0; rsplen > 0; i ++, rsplen -= 2) { PXAMMCI_RESP(i, response[i * 2], response[i * 2 + 1]); } s->status |= STAT_END_CMDRES; if (!(s->cmdat & CMDAT_DATA_EN)) s->active = 0; else s->bytesleft = s->numblk * s->blklen; s->resp_len = 0; break; timeout: s->active = 0; s->status |= STAT_TOUT_RES; break; } pxa2xx_mmci_fifo_update(s); } static uint64_t pxa2xx_mmci_read(void *opaque, hwaddr offset, unsigned size) { PXA2xxMMCIState *s = (PXA2xxMMCIState *) opaque; uint32_t ret = 0; switch (offset) { case MMC_STRPCL: break; case MMC_STAT: ret = s->status; break; case MMC_CLKRT: ret = s->clkrt; break; case MMC_SPI: ret = s->spi; break; case MMC_CMDAT: ret = s->cmdat; break; case MMC_RESTO: ret = s->resp_tout; break; case MMC_RDTO: ret = s->read_tout; break; case MMC_BLKLEN: ret = s->blklen; break; case MMC_NUMBLK: ret = s->numblk; break; case MMC_PRTBUF: break; case MMC_I_MASK: ret = s->intmask; break; case MMC_I_REG: ret = s->intreq; break; case MMC_CMD: ret = s->cmd | 0x40; break; case MMC_ARGH: ret = s->arg >> 16; break; case MMC_ARGL: ret = s->arg & 0xffff; break; case MMC_RES: ret = (s->resp_len < 9) ? s->resp_fifo[s->resp_len++] : 0; break; case MMC_RXFIFO: while (size-- && s->rx_len) { ret |= s->rx_fifo[s->rx_start++] << (size << 3); s->rx_start &= 0x1f; s->rx_len --; } s->intreq &= ~INT_RXFIFO_REQ; pxa2xx_mmci_fifo_update(s); break; case MMC_RDWAIT: break; case MMC_BLKS_REM: ret = s->numblk; break; default: qemu_log_mask(LOG_GUEST_ERROR, "%s: incorrect register 0x%02" HWADDR_PRIx "\n", __func__, offset); } trace_pxa2xx_mmci_read(size, offset, ret); return ret; } static void pxa2xx_mmci_write(void *opaque, hwaddr offset, uint64_t value, unsigned size) { PXA2xxMMCIState *s = (PXA2xxMMCIState *) opaque; trace_pxa2xx_mmci_write(size, offset, value); switch (offset) { case MMC_STRPCL: if (value & STRPCL_STRT_CLK) { s->status |= STAT_CLK_EN; s->intreq &= ~INT_CLK_OFF; if (s->cmdreq && !(s->cmdat & CMDAT_STOP_TRAN)) { s->status &= STAT_CLK_EN; pxa2xx_mmci_wakequeues(s); } } if (value & STRPCL_STOP_CLK) { s->status &= ~STAT_CLK_EN; s->intreq |= INT_CLK_OFF; s->active = 0; } pxa2xx_mmci_int_update(s); break; case MMC_CLKRT: s->clkrt = value & 7; break; case MMC_SPI: s->spi = value & 0xf; if (value & SPI_SPI_MODE) { qemu_log_mask(LOG_GUEST_ERROR, "%s: attempted to use card in SPI mode\n", __func__); } break; case MMC_CMDAT: s->cmdat = value & 0x3dff; s->active = 0; s->cmdreq = 1; if (!(value & CMDAT_STOP_TRAN)) { s->status &= STAT_CLK_EN; if (s->status & STAT_CLK_EN) pxa2xx_mmci_wakequeues(s); } pxa2xx_mmci_int_update(s); break; case MMC_RESTO: s->resp_tout = value & 0x7f; break; case MMC_RDTO: s->read_tout = value & 0xffff; break; case MMC_BLKLEN: s->blklen = value & 0xfff; break; case MMC_NUMBLK: s->numblk = value & 0xffff; break; case MMC_PRTBUF: if (value & PRTBUF_PRT_BUF) { s->tx_start ^= 32; s->tx_len = 0; } pxa2xx_mmci_fifo_update(s); break; case MMC_I_MASK: s->intmask = value & 0x1fff; pxa2xx_mmci_int_update(s); break; case MMC_CMD: s->cmd = value & 0x3f; break; case MMC_ARGH: s->arg &= 0x0000ffff; s->arg |= value << 16; break; case MMC_ARGL: s->arg &= 0xffff0000; s->arg |= value & 0x0000ffff; break; case MMC_TXFIFO: while (size-- && s->tx_len < 0x20) s->tx_fifo[(s->tx_start + (s->tx_len ++)) & 0x1f] = (value >> (size << 3)) & 0xff; s->intreq &= ~INT_TXFIFO_REQ; pxa2xx_mmci_fifo_update(s); break; case MMC_RDWAIT: case MMC_BLKS_REM: break; default: qemu_log_mask(LOG_GUEST_ERROR, "%s: incorrect reg 0x%02" HWADDR_PRIx " " "(value 0x%08" PRIx64 ")\n", __func__, offset, value); } } static const MemoryRegionOps pxa2xx_mmci_ops = { .read = pxa2xx_mmci_read, .write = pxa2xx_mmci_write, .endianness = DEVICE_NATIVE_ENDIAN, }; PXA2xxMMCIState *pxa2xx_mmci_init(MemoryRegion *sysmem, hwaddr base, BlockBackend *blk, qemu_irq irq, qemu_irq rx_dma, qemu_irq tx_dma) { DeviceState *dev, *carddev; SysBusDevice *sbd; PXA2xxMMCIState *s; Error *err = NULL; dev = qdev_create(NULL, TYPE_PXA2XX_MMCI); s = PXA2XX_MMCI(dev); sbd = SYS_BUS_DEVICE(dev); sysbus_mmio_map(sbd, 0, base); sysbus_connect_irq(sbd, 0, irq); qdev_connect_gpio_out_named(dev, "rx-dma", 0, rx_dma); qdev_connect_gpio_out_named(dev, "tx-dma", 0, tx_dma); /* Create and plug in the sd card */ carddev = qdev_create(qdev_get_child_bus(dev, "sd-bus"), TYPE_SD_CARD); qdev_prop_set_drive(carddev, "drive", blk, &err); if (err) { error_report("failed to init SD card: %s", error_get_pretty(err)); return NULL; } object_property_set_bool(OBJECT(carddev), true, "realized", &err); if (err) { error_report("failed to init SD card: %s", error_get_pretty(err)); return NULL; } return s; } static void pxa2xx_mmci_set_inserted(DeviceState *dev, bool inserted) { PXA2xxMMCIState *s = PXA2XX_MMCI(dev); qemu_set_irq(s->inserted, inserted); } static void pxa2xx_mmci_set_readonly(DeviceState *dev, bool readonly) { PXA2xxMMCIState *s = PXA2XX_MMCI(dev); qemu_set_irq(s->readonly, readonly); } void pxa2xx_mmci_handlers(PXA2xxMMCIState *s, qemu_irq readonly, qemu_irq coverswitch) { DeviceState *dev = DEVICE(s); s->readonly = readonly; s->inserted = coverswitch; pxa2xx_mmci_set_inserted(dev, sdbus_get_inserted(&s->sdbus)); pxa2xx_mmci_set_readonly(dev, sdbus_get_readonly(&s->sdbus)); } static void pxa2xx_mmci_reset(DeviceState *d) { PXA2xxMMCIState *s = PXA2XX_MMCI(d); s->status = 0; s->clkrt = 0; s->spi = 0; s->cmdat = 0; s->resp_tout = 0; s->read_tout = 0; s->blklen = 0; s->numblk = 0; s->intmask = 0; s->intreq = 0; s->cmd = 0; s->arg = 0; s->active = 0; s->bytesleft = 0; s->tx_start = 0; s->tx_len = 0; s->rx_start = 0; s->rx_len = 0; s->resp_len = 0; s->cmdreq = 0; memset(s->tx_fifo, 0, sizeof(s->tx_fifo)); memset(s->rx_fifo, 0, sizeof(s->rx_fifo)); memset(s->resp_fifo, 0, sizeof(s->resp_fifo)); } static void pxa2xx_mmci_instance_init(Object *obj) { PXA2xxMMCIState *s = PXA2XX_MMCI(obj); SysBusDevice *sbd = SYS_BUS_DEVICE(obj); DeviceState *dev = DEVICE(obj); memory_region_init_io(&s->iomem, obj, &pxa2xx_mmci_ops, s, "pxa2xx-mmci", 0x00100000); sysbus_init_mmio(sbd, &s->iomem); sysbus_init_irq(sbd, &s->irq); qdev_init_gpio_out_named(dev, &s->rx_dma, "rx-dma", 1); qdev_init_gpio_out_named(dev, &s->tx_dma, "tx-dma", 1); qbus_create_inplace(&s->sdbus, sizeof(s->sdbus), TYPE_PXA2XX_MMCI_BUS, DEVICE(obj), "sd-bus"); } static void pxa2xx_mmci_class_init(ObjectClass *klass, void *data) { DeviceClass *dc = DEVICE_CLASS(klass); dc->vmsd = &vmstate_pxa2xx_mmci; dc->reset = pxa2xx_mmci_reset; } static void pxa2xx_mmci_bus_class_init(ObjectClass *klass, void *data) { SDBusClass *sbc = SD_BUS_CLASS(klass); sbc->set_inserted = pxa2xx_mmci_set_inserted; sbc->set_readonly = pxa2xx_mmci_set_readonly; } static const TypeInfo pxa2xx_mmci_info = { .name = TYPE_PXA2XX_MMCI, .parent = TYPE_SYS_BUS_DEVICE, .instance_size = sizeof(PXA2xxMMCIState), .instance_init = pxa2xx_mmci_instance_init, .class_init = pxa2xx_mmci_class_init, }; static const TypeInfo pxa2xx_mmci_bus_info = { .name = TYPE_PXA2XX_MMCI_BUS, .parent = TYPE_SD_BUS, .instance_size = sizeof(SDBus), .class_init = pxa2xx_mmci_bus_class_init, }; static void pxa2xx_mmci_register_types(void) { type_register_static(&pxa2xx_mmci_info); type_register_static(&pxa2xx_mmci_bus_info); } type_init(pxa2xx_mmci_register_types)