esp.c 19.3 KB
Newer Older
B
bellard 已提交
1
/*
2
 * QEMU ESP/NCR53C9x emulation
3
 *
P
pbrook 已提交
4
 * Copyright (c) 2005-2006 Fabrice Bellard
5
 * Copyright (c) 2012 Herve Poussineau
6
 *
B
bellard 已提交
7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */
25

26
#include "hw/sysbus.h"
P
Paolo Bonzini 已提交
27
#include "hw/scsi/esp.h"
B
Blue Swirl 已提交
28
#include "trace.h"
29
#include "qemu/log.h"
B
bellard 已提交
30

31
/*
32 33
 * On Sparc32, this is the ESP (NCR53C90) part of chip STP2000 (Master I/O),
 * also produced as NCR89C100. See
34 35 36 37 38
 * http://www.ibiblio.org/pub/historic-linux/early-ports/Sparc/NCR/NCR89C100.txt
 * and
 * http://www.ibiblio.org/pub/historic-linux/early-ports/Sparc/NCR/NCR53C9X.txt
 */

B
blueswir1 已提交
39 40 41 42 43
static void esp_raise_irq(ESPState *s)
{
    if (!(s->rregs[ESP_RSTAT] & STAT_INT)) {
        s->rregs[ESP_RSTAT] |= STAT_INT;
        qemu_irq_raise(s->irq);
B
Blue Swirl 已提交
44
        trace_esp_raise_irq();
B
blueswir1 已提交
45 46 47 48 49 50 51 52
    }
}

static void esp_lower_irq(ESPState *s)
{
    if (s->rregs[ESP_RSTAT] & STAT_INT) {
        s->rregs[ESP_RSTAT] &= ~STAT_INT;
        qemu_irq_lower(s->irq);
B
Blue Swirl 已提交
53
        trace_esp_lower_irq();
B
blueswir1 已提交
54 55 56
    }
}

57
void esp_dma_enable(ESPState *s, int irq, int level)
58 59 60
{
    if (level) {
        s->dma_enabled = 1;
B
Blue Swirl 已提交
61
        trace_esp_dma_enable();
62 63 64 65 66
        if (s->dma_cb) {
            s->dma_cb(s);
            s->dma_cb = NULL;
        }
    } else {
B
Blue Swirl 已提交
67
        trace_esp_dma_disable();
68 69 70 71
        s->dma_enabled = 0;
    }
}

72
void esp_request_cancelled(SCSIRequest *req)
P
Paolo Bonzini 已提交
73
{
74
    ESPState *s = req->hba_private;
P
Paolo Bonzini 已提交
75 76 77 78 79 80 81 82

    if (req == s->current_req) {
        scsi_req_unref(s->current_req);
        s->current_req = NULL;
        s->current_dev = NULL;
    }
}

B
blueswir1 已提交
83
static uint32_t get_cmd(ESPState *s, uint8_t *buf)
B
bellard 已提交
84
{
P
pbrook 已提交
85
    uint32_t dmalen;
B
bellard 已提交
86 87
    int target;

B
blueswir1 已提交
88
    target = s->wregs[ESP_WBUSID] & BUSID_DID;
89
    if (s->dma) {
P
Paolo Bonzini 已提交
90 91 92
        dmalen = s->rregs[ESP_TCLO];
        dmalen |= s->rregs[ESP_TCMID] << 8;
        dmalen |= s->rregs[ESP_TCHI] << 16;
93
        s->dma_memory_read(s->dma_opaque, buf, dmalen);
94
    } else {
95 96
        dmalen = s->ti_size;
        memcpy(buf, s->ti_buf, dmalen);
97
        buf[0] = buf[2] >> 5;
98
    }
B
Blue Swirl 已提交
99
    trace_esp_get_cmd(dmalen, target);
P
pbrook 已提交
100

B
bellard 已提交
101
    s->ti_size = 0;
102 103
    s->ti_rptr = 0;
    s->ti_wptr = 0;
B
bellard 已提交
104

105
    if (s->current_req) {
P
pbrook 已提交
106
        /* Started a new command before the old one finished.  Cancel it.  */
P
Paolo Bonzini 已提交
107
        scsi_req_cancel(s->current_req);
P
pbrook 已提交
108 109 110
        s->async_len = 0;
    }

P
Paolo Bonzini 已提交
111
    s->current_dev = scsi_device_find(&s->bus, 0, target, 0);
112
    if (!s->current_dev) {
P
pbrook 已提交
113
        // No such drive
B
blueswir1 已提交
114
        s->rregs[ESP_RSTAT] = 0;
115 116
        s->rregs[ESP_RINTR] = INTR_DC;
        s->rregs[ESP_RSEQ] = SEQ_0;
B
blueswir1 已提交
117
        esp_raise_irq(s);
B
blueswir1 已提交
118
        return 0;
B
bellard 已提交
119
    }
P
pbrook 已提交
120 121 122
    return dmalen;
}

123
static void do_busid_cmd(ESPState *s, uint8_t *buf, uint8_t busid)
P
pbrook 已提交
124 125 126
{
    int32_t datalen;
    int lun;
127
    SCSIDevice *current_lun;
P
pbrook 已提交
128

B
Blue Swirl 已提交
129
    trace_esp_do_busid_cmd(busid);
130
    lun = busid & 7;
P
Paolo Bonzini 已提交
131
    current_lun = scsi_device_find(&s->bus, 0, s->current_dev->id, lun);
132
    s->current_req = scsi_req_new(current_lun, 0, lun, buf, s);
133
    datalen = scsi_req_enqueue(s->current_req);
134 135
    s->ti_size = datalen;
    if (datalen != 0) {
B
blueswir1 已提交
136
        s->rregs[ESP_RSTAT] = STAT_TC;
P
pbrook 已提交
137
        s->dma_left = 0;
P
pbrook 已提交
138
        s->dma_counter = 0;
P
pbrook 已提交
139
        if (datalen > 0) {
140
            s->rregs[ESP_RSTAT] |= STAT_DI;
P
pbrook 已提交
141
        } else {
142
            s->rregs[ESP_RSTAT] |= STAT_DO;
B
bellard 已提交
143
        }
144
        scsi_req_continue(s->current_req);
B
bellard 已提交
145
    }
146 147
    s->rregs[ESP_RINTR] = INTR_BS | INTR_FC;
    s->rregs[ESP_RSEQ] = SEQ_CD;
B
blueswir1 已提交
148
    esp_raise_irq(s);
B
bellard 已提交
149 150
}

151 152 153 154 155 156 157
static void do_cmd(ESPState *s, uint8_t *buf)
{
    uint8_t busid = buf[0];

    do_busid_cmd(s, &buf[1], busid);
}

P
pbrook 已提交
158 159 160 161 162
static void handle_satn(ESPState *s)
{
    uint8_t buf[32];
    int len;

163
    if (s->dma && !s->dma_enabled) {
164 165 166
        s->dma_cb = handle_satn;
        return;
    }
P
pbrook 已提交
167 168 169 170 171
    len = get_cmd(s, buf);
    if (len)
        do_cmd(s, buf);
}

172 173 174 175 176
static void handle_s_without_atn(ESPState *s)
{
    uint8_t buf[32];
    int len;

177
    if (s->dma && !s->dma_enabled) {
178 179 180
        s->dma_cb = handle_s_without_atn;
        return;
    }
181 182 183 184 185 186
    len = get_cmd(s, buf);
    if (len) {
        do_busid_cmd(s, buf, 0);
    }
}

P
pbrook 已提交
187 188
static void handle_satn_stop(ESPState *s)
{
189
    if (s->dma && !s->dma_enabled) {
190 191 192
        s->dma_cb = handle_satn_stop;
        return;
    }
P
pbrook 已提交
193 194
    s->cmdlen = get_cmd(s, s->cmdbuf);
    if (s->cmdlen) {
B
Blue Swirl 已提交
195
        trace_esp_handle_satn_stop(s->cmdlen);
P
pbrook 已提交
196
        s->do_cmd = 1;
B
blueswir1 已提交
197
        s->rregs[ESP_RSTAT] = STAT_TC | STAT_CD;
198 199
        s->rregs[ESP_RINTR] = INTR_BS | INTR_FC;
        s->rregs[ESP_RSEQ] = SEQ_CD;
B
blueswir1 已提交
200
        esp_raise_irq(s);
P
pbrook 已提交
201 202 203
    }
}

P
pbrook 已提交
204
static void write_response(ESPState *s)
B
bellard 已提交
205
{
B
Blue Swirl 已提交
206
    trace_esp_write_response(s->status);
P
Paolo Bonzini 已提交
207
    s->ti_buf[0] = s->status;
P
pbrook 已提交
208
    s->ti_buf[1] = 0;
209
    if (s->dma) {
210
        s->dma_memory_write(s->dma_opaque, s->ti_buf, 2);
B
blueswir1 已提交
211
        s->rregs[ESP_RSTAT] = STAT_TC | STAT_ST;
212 213
        s->rregs[ESP_RINTR] = INTR_BS | INTR_FC;
        s->rregs[ESP_RSEQ] = SEQ_CD;
214
    } else {
B
blueswir1 已提交
215 216 217
        s->ti_size = 2;
        s->ti_rptr = 0;
        s->ti_wptr = 0;
218
        s->rregs[ESP_RFLAGS] = 2;
219
    }
B
blueswir1 已提交
220
    esp_raise_irq(s);
B
bellard 已提交
221
}
222

P
pbrook 已提交
223 224
static void esp_dma_done(ESPState *s)
{
B
blueswir1 已提交
225
    s->rregs[ESP_RSTAT] |= STAT_TC;
226 227 228 229 230
    s->rregs[ESP_RINTR] = INTR_BS;
    s->rregs[ESP_RSEQ] = 0;
    s->rregs[ESP_RFLAGS] = 0;
    s->rregs[ESP_TCLO] = 0;
    s->rregs[ESP_TCMID] = 0;
P
Paolo Bonzini 已提交
231
    s->rregs[ESP_TCHI] = 0;
B
blueswir1 已提交
232
    esp_raise_irq(s);
P
pbrook 已提交
233 234
}

P
pbrook 已提交
235 236
static void esp_do_dma(ESPState *s)
{
237
    uint32_t len;
P
pbrook 已提交
238
    int to_device;
P
pbrook 已提交
239

240
    to_device = (s->ti_size < 0);
P
pbrook 已提交
241
    len = s->dma_left;
P
pbrook 已提交
242
    if (s->do_cmd) {
B
Blue Swirl 已提交
243
        trace_esp_do_dma(s->cmdlen, len);
244
        s->dma_memory_read(s->dma_opaque, &s->cmdbuf[s->cmdlen], len);
P
pbrook 已提交
245 246 247 248 249
        s->ti_size = 0;
        s->cmdlen = 0;
        s->do_cmd = 0;
        do_cmd(s, s->cmdbuf);
        return;
P
pbrook 已提交
250 251 252 253 254 255 256 257 258
    }
    if (s->async_len == 0) {
        /* Defer until data is available.  */
        return;
    }
    if (len > s->async_len) {
        len = s->async_len;
    }
    if (to_device) {
259
        s->dma_memory_read(s->dma_opaque, s->async_buf, len);
P
pbrook 已提交
260
    } else {
261
        s->dma_memory_write(s->dma_opaque, s->async_buf, len);
P
pbrook 已提交
262 263 264 265
    }
    s->dma_left -= len;
    s->async_buf += len;
    s->async_len -= len;
P
pbrook 已提交
266 267 268 269
    if (to_device)
        s->ti_size += len;
    else
        s->ti_size -= len;
P
pbrook 已提交
270
    if (s->async_len == 0) {
271 272 273 274 275 276
        scsi_req_continue(s->current_req);
        /* If there is still data to be read from the device then
           complete the DMA operation immediately.  Otherwise defer
           until the scsi layer has completed.  */
        if (to_device || s->dma_left != 0 || s->ti_size == 0) {
            return;
P
pbrook 已提交
277
        }
P
pbrook 已提交
278
    }
279 280 281

    /* Partially filled a scsi buffer. Complete immediately.  */
    esp_dma_done(s);
P
pbrook 已提交
282 283
}

284
void esp_command_complete(SCSIRequest *req, uint32_t status,
285
                                 size_t resid)
P
pbrook 已提交
286
{
287
    ESPState *s = req->hba_private;
P
pbrook 已提交
288

B
Blue Swirl 已提交
289
    trace_esp_command_complete();
290
    if (s->ti_size != 0) {
B
Blue Swirl 已提交
291
        trace_esp_command_complete_unexpected();
292 293 294 295
    }
    s->ti_size = 0;
    s->dma_left = 0;
    s->async_len = 0;
296
    if (status) {
B
Blue Swirl 已提交
297
        trace_esp_command_complete_fail();
298
    }
299
    s->status = status;
300 301 302 303 304 305 306 307 308
    s->rregs[ESP_RSTAT] = STAT_ST;
    esp_dma_done(s);
    if (s->current_req) {
        scsi_req_unref(s->current_req);
        s->current_req = NULL;
        s->current_dev = NULL;
    }
}

309
void esp_transfer_data(SCSIRequest *req, uint32_t len)
310
{
311
    ESPState *s = req->hba_private;
312

B
Blue Swirl 已提交
313
    trace_esp_transfer_data(s->dma_left, s->ti_size);
314
    s->async_len = len;
315 316 317 318 319 320
    s->async_buf = scsi_req_get_buf(req);
    if (s->dma_left) {
        esp_do_dma(s);
    } else if (s->dma_counter != 0 && s->ti_size <= 0) {
        /* If this was the last part of a DMA transfer then the
           completion interrupt is deferred to here.  */
P
pbrook 已提交
321
        esp_dma_done(s);
P
pbrook 已提交
322
    }
P
pbrook 已提交
323 324
}

B
bellard 已提交
325 326
static void handle_ti(ESPState *s)
{
P
pbrook 已提交
327
    uint32_t dmalen, minlen;
B
bellard 已提交
328

329 330 331 332 333
    if (s->dma && !s->dma_enabled) {
        s->dma_cb = handle_ti;
        return;
    }

P
Paolo Bonzini 已提交
334 335 336
    dmalen = s->rregs[ESP_TCLO];
    dmalen |= s->rregs[ESP_TCMID] << 8;
    dmalen |= s->rregs[ESP_TCHI] << 16;
P
pbrook 已提交
337 338 339
    if (dmalen==0) {
      dmalen=0x10000;
    }
P
pbrook 已提交
340
    s->dma_counter = dmalen;
P
pbrook 已提交
341

P
pbrook 已提交
342 343
    if (s->do_cmd)
        minlen = (dmalen < 32) ? dmalen : 32;
344 345
    else if (s->ti_size < 0)
        minlen = (dmalen < -s->ti_size) ? dmalen : -s->ti_size;
P
pbrook 已提交
346 347
    else
        minlen = (dmalen < s->ti_size) ? dmalen : s->ti_size;
B
Blue Swirl 已提交
348
    trace_esp_handle_ti(minlen);
349
    if (s->dma) {
P
pbrook 已提交
350
        s->dma_left = minlen;
351
        s->rregs[ESP_RSTAT] &= ~STAT_TC;
P
pbrook 已提交
352
        esp_do_dma(s);
P
pbrook 已提交
353
    } else if (s->do_cmd) {
B
Blue Swirl 已提交
354
        trace_esp_handle_ti_cmd(s->cmdlen);
P
pbrook 已提交
355 356 357 358 359 360
        s->ti_size = 0;
        s->cmdlen = 0;
        s->do_cmd = 0;
        do_cmd(s, s->cmdbuf);
        return;
    }
B
bellard 已提交
361 362
}

363
void esp_hard_reset(ESPState *s)
B
bellard 已提交
364
{
B
blueswir1 已提交
365 366
    memset(s->rregs, 0, ESP_REGS);
    memset(s->wregs, 0, ESP_REGS);
367
    s->rregs[ESP_TCHI] = s->chip_id;
P
pbrook 已提交
368 369 370 371
    s->ti_size = 0;
    s->ti_rptr = 0;
    s->ti_wptr = 0;
    s->dma = 0;
P
pbrook 已提交
372
    s->do_cmd = 0;
373
    s->dma_cb = NULL;
B
blueswir1 已提交
374 375

    s->rregs[ESP_CFG1] = 7;
B
bellard 已提交
376 377
}

378
static void esp_soft_reset(ESPState *s)
B
Blue Swirl 已提交
379 380
{
    qemu_irq_lower(s->irq);
381
    esp_hard_reset(s);
B
Blue Swirl 已提交
382 383
}

384
static void parent_esp_reset(ESPState *s, int irq, int level)
385
{
B
Blue Swirl 已提交
386
    if (level) {
387
        esp_soft_reset(s);
B
Blue Swirl 已提交
388
    }
389 390
}

391
uint64_t esp_reg_read(ESPState *s, uint32_t saddr)
392
{
393
    uint32_t old_val;
394

B
Blue Swirl 已提交
395
    trace_esp_mem_readb(saddr, s->rregs[saddr]);
B
bellard 已提交
396
    switch (saddr) {
397
    case ESP_FIFO:
B
blueswir1 已提交
398 399
        if (s->ti_size > 0) {
            s->ti_size--;
400
            if ((s->rregs[ESP_RSTAT] & STAT_PIO_MASK) == 0) {
B
blueswir1 已提交
401
                /* Data out.  */
402 403
                qemu_log_mask(LOG_UNIMP,
                              "esp: PIO data read not implemented\n");
404
                s->rregs[ESP_FIFO] = 0;
P
pbrook 已提交
405
            } else {
406
                s->rregs[ESP_FIFO] = s->ti_buf[s->ti_rptr++];
P
pbrook 已提交
407
            }
B
blueswir1 已提交
408
            esp_raise_irq(s);
B
blueswir1 已提交
409 410
        }
        if (s->ti_size == 0) {
411 412 413
            s->ti_rptr = 0;
            s->ti_wptr = 0;
        }
B
blueswir1 已提交
414
        break;
415
    case ESP_RINTR:
B
Blue Swirl 已提交
416 417 418 419 420 421
        /* Clear sequence step, interrupt register and all status bits
           except TC */
        old_val = s->rregs[ESP_RINTR];
        s->rregs[ESP_RINTR] = 0;
        s->rregs[ESP_RSTAT] &= ~STAT_TC;
        s->rregs[ESP_RSEQ] = SEQ_CD;
B
blueswir1 已提交
422
        esp_lower_irq(s);
B
Blue Swirl 已提交
423 424

        return old_val;
B
bellard 已提交
425
    default:
B
blueswir1 已提交
426
        break;
B
bellard 已提交
427
    }
B
bellard 已提交
428
    return s->rregs[saddr];
B
bellard 已提交
429 430
}

431
void esp_reg_write(ESPState *s, uint32_t saddr, uint64_t val)
B
bellard 已提交
432
{
B
Blue Swirl 已提交
433
    trace_esp_mem_writeb(saddr, s->wregs[saddr], val);
B
bellard 已提交
434
    switch (saddr) {
435 436
    case ESP_TCLO:
    case ESP_TCMID:
P
Paolo Bonzini 已提交
437
    case ESP_TCHI:
438
        s->rregs[ESP_RSTAT] &= ~STAT_TC;
439
        break;
440
    case ESP_FIFO:
P
pbrook 已提交
441 442
        if (s->do_cmd) {
            s->cmdbuf[s->cmdlen++] = val & 0xff;
B
blueswir1 已提交
443
        } else if (s->ti_size == TI_BUFSZ - 1) {
444
            trace_esp_error_fifo_overrun();
P
pbrook 已提交
445 446 447 448
        } else {
            s->ti_size++;
            s->ti_buf[s->ti_wptr++] = val & 0xff;
        }
B
blueswir1 已提交
449
        break;
450
    case ESP_CMD:
451
        s->rregs[saddr] = val;
452
        if (val & CMD_DMA) {
B
blueswir1 已提交
453
            s->dma = 1;
P
pbrook 已提交
454
            /* Reload DMA counter.  */
455 456
            s->rregs[ESP_TCLO] = s->wregs[ESP_TCLO];
            s->rregs[ESP_TCMID] = s->wregs[ESP_TCMID];
P
Paolo Bonzini 已提交
457
            s->rregs[ESP_TCHI] = s->wregs[ESP_TCHI];
B
blueswir1 已提交
458 459 460
        } else {
            s->dma = 0;
        }
461 462
        switch(val & CMD_CMD) {
        case CMD_NOP:
B
Blue Swirl 已提交
463
            trace_esp_mem_writeb_cmd_nop(val);
B
blueswir1 已提交
464
            break;
465
        case CMD_FLUSH:
B
Blue Swirl 已提交
466
            trace_esp_mem_writeb_cmd_flush(val);
B
bellard 已提交
467
            //s->ti_size = 0;
468 469
            s->rregs[ESP_RINTR] = INTR_FC;
            s->rregs[ESP_RSEQ] = 0;
470
            s->rregs[ESP_RFLAGS] = 0;
B
blueswir1 已提交
471
            break;
472
        case CMD_RESET:
B
Blue Swirl 已提交
473
            trace_esp_mem_writeb_cmd_reset(val);
474
            esp_soft_reset(s);
B
blueswir1 已提交
475
            break;
476
        case CMD_BUSRESET:
B
Blue Swirl 已提交
477
            trace_esp_mem_writeb_cmd_bus_reset(val);
478 479
            s->rregs[ESP_RINTR] = INTR_RST;
            if (!(s->wregs[ESP_CFG1] & CFG1_RESREPT)) {
B
blueswir1 已提交
480
                esp_raise_irq(s);
B
bellard 已提交
481
            }
B
blueswir1 已提交
482
            break;
483
        case CMD_TI:
B
blueswir1 已提交
484 485
            handle_ti(s);
            break;
486
        case CMD_ICCS:
B
Blue Swirl 已提交
487
            trace_esp_mem_writeb_cmd_iccs(val);
B
blueswir1 已提交
488
            write_response(s);
B
blueswir1 已提交
489 490
            s->rregs[ESP_RINTR] = INTR_FC;
            s->rregs[ESP_RSTAT] |= STAT_MI;
B
blueswir1 已提交
491
            break;
492
        case CMD_MSGACC:
B
Blue Swirl 已提交
493
            trace_esp_mem_writeb_cmd_msgacc(val);
494 495
            s->rregs[ESP_RINTR] = INTR_DC;
            s->rregs[ESP_RSEQ] = 0;
496 497
            s->rregs[ESP_RFLAGS] = 0;
            esp_raise_irq(s);
B
blueswir1 已提交
498
            break;
B
Blue Swirl 已提交
499
        case CMD_PAD:
B
Blue Swirl 已提交
500
            trace_esp_mem_writeb_cmd_pad(val);
B
Blue Swirl 已提交
501 502 503 504
            s->rregs[ESP_RSTAT] = STAT_TC;
            s->rregs[ESP_RINTR] = INTR_FC;
            s->rregs[ESP_RSEQ] = 0;
            break;
505
        case CMD_SATN:
B
Blue Swirl 已提交
506
            trace_esp_mem_writeb_cmd_satn(val);
B
blueswir1 已提交
507
            break;
508 509 510
        case CMD_RSTATN:
            trace_esp_mem_writeb_cmd_rstatn(val);
            break;
511
        case CMD_SEL:
B
Blue Swirl 已提交
512
            trace_esp_mem_writeb_cmd_sel(val);
513
            handle_s_without_atn(s);
514
            break;
515
        case CMD_SELATN:
B
Blue Swirl 已提交
516
            trace_esp_mem_writeb_cmd_selatn(val);
B
blueswir1 已提交
517 518
            handle_satn(s);
            break;
519
        case CMD_SELATNS:
B
Blue Swirl 已提交
520
            trace_esp_mem_writeb_cmd_selatns(val);
B
blueswir1 已提交
521 522
            handle_satn_stop(s);
            break;
523
        case CMD_ENSEL:
B
Blue Swirl 已提交
524
            trace_esp_mem_writeb_cmd_ensel(val);
525
            s->rregs[ESP_RINTR] = 0;
B
blueswir1 已提交
526
            break;
527 528 529 530 531
        case CMD_DISSEL:
            trace_esp_mem_writeb_cmd_dissel(val);
            s->rregs[ESP_RINTR] = 0;
            esp_raise_irq(s);
            break;
B
blueswir1 已提交
532
        default:
533
            trace_esp_error_unhandled_command(val);
B
blueswir1 已提交
534 535 536
            break;
        }
        break;
537
    case ESP_WBUSID ... ESP_WSYNO:
B
blueswir1 已提交
538
        break;
539
    case ESP_CFG1:
P
Paolo Bonzini 已提交
540 541
    case ESP_CFG2: case ESP_CFG3:
    case ESP_RES3: case ESP_RES4:
542 543
        s->rregs[saddr] = val;
        break;
544
    case ESP_WCCF ... ESP_WTEST:
545
        break;
B
bellard 已提交
546
    default:
547
        trace_esp_error_invalid_write(val, saddr);
B
blueswir1 已提交
548
        return;
B
bellard 已提交
549
    }
B
bellard 已提交
550
    s->wregs[saddr] = val;
B
bellard 已提交
551 552
}

A
Avi Kivity 已提交
553
static bool esp_mem_accepts(void *opaque, hwaddr addr,
A
Avi Kivity 已提交
554 555 556 557
                            unsigned size, bool is_write)
{
    return (size == 1) || (is_write && size == 4);
}
B
bellard 已提交
558

559
const VMStateDescription vmstate_esp = {
B
Blue Swirl 已提交
560 561 562 563 564 565 566 567 568 569 570
    .name ="esp",
    .version_id = 3,
    .minimum_version_id = 3,
    .minimum_version_id_old = 3,
    .fields      = (VMStateField []) {
        VMSTATE_BUFFER(rregs, ESPState),
        VMSTATE_BUFFER(wregs, ESPState),
        VMSTATE_INT32(ti_size, ESPState),
        VMSTATE_UINT32(ti_rptr, ESPState),
        VMSTATE_UINT32(ti_wptr, ESPState),
        VMSTATE_BUFFER(ti_buf, ESPState),
P
Paolo Bonzini 已提交
571
        VMSTATE_UINT32(status, ESPState),
B
Blue Swirl 已提交
572 573 574 575 576 577 578 579
        VMSTATE_UINT32(dma, ESPState),
        VMSTATE_BUFFER(cmdbuf, ESPState),
        VMSTATE_UINT32(cmdlen, ESPState),
        VMSTATE_UINT32(do_cmd, ESPState),
        VMSTATE_UINT32(dma_left, ESPState),
        VMSTATE_END_OF_LIST()
    }
};
B
bellard 已提交
580

581 582 583 584 585 586 587
typedef struct {
    SysBusDevice busdev;
    MemoryRegion iomem;
    uint32_t it_shift;
    ESPState esp;
} SysBusESPState;

A
Avi Kivity 已提交
588
static void sysbus_esp_mem_write(void *opaque, hwaddr addr,
589 590 591 592 593 594 595 596 597
                                 uint64_t val, unsigned int size)
{
    SysBusESPState *sysbus = opaque;
    uint32_t saddr;

    saddr = addr >> sysbus->it_shift;
    esp_reg_write(&sysbus->esp, saddr, val);
}

A
Avi Kivity 已提交
598
static uint64_t sysbus_esp_mem_read(void *opaque, hwaddr addr,
599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614
                                    unsigned int size)
{
    SysBusESPState *sysbus = opaque;
    uint32_t saddr;

    saddr = addr >> sysbus->it_shift;
    return esp_reg_read(&sysbus->esp, saddr);
}

static const MemoryRegionOps sysbus_esp_mem_ops = {
    .read = sysbus_esp_mem_read,
    .write = sysbus_esp_mem_write,
    .endianness = DEVICE_NATIVE_ENDIAN,
    .valid.accepts = esp_mem_accepts,
};

A
Avi Kivity 已提交
615
void esp_init(hwaddr espaddr, int it_shift,
616 617
              ESPDMAMemoryReadWriteFunc dma_memory_read,
              ESPDMAMemoryReadWriteFunc dma_memory_write,
618 619
              void *dma_opaque, qemu_irq irq, qemu_irq *reset,
              qemu_irq *dma_enable)
B
bellard 已提交
620
{
P
Paul Brook 已提交
621 622
    DeviceState *dev;
    SysBusDevice *s;
623
    SysBusESPState *sysbus;
G
Gerd Hoffmann 已提交
624
    ESPState *esp;
P
Paul Brook 已提交
625 626

    dev = qdev_create(NULL, "esp");
627 628
    sysbus = DO_UPCAST(SysBusESPState, busdev.qdev, dev);
    esp = &sysbus->esp;
G
Gerd Hoffmann 已提交
629 630 631
    esp->dma_memory_read = dma_memory_read;
    esp->dma_memory_write = dma_memory_write;
    esp->dma_opaque = dma_opaque;
632
    sysbus->it_shift = it_shift;
633 634
    /* XXX for now until rc4030 has been changed to use DMA enable signal */
    esp->dma_enabled = 1;
M
Markus Armbruster 已提交
635
    qdev_init_nofail(dev);
636
    s = SYS_BUS_DEVICE(dev);
P
Paul Brook 已提交
637 638
    sysbus_connect_irq(s, 0, irq);
    sysbus_mmio_map(s, 0, espaddr);
639
    *reset = qdev_get_gpio_in(dev, 0);
640
    *dma_enable = qdev_get_gpio_in(dev, 1);
P
Paul Brook 已提交
641
}
B
bellard 已提交
642

643 644
static const struct SCSIBusInfo esp_scsi_info = {
    .tcq = false,
P
Paolo Bonzini 已提交
645 646
    .max_target = ESP_MAX_DEVS,
    .max_lun = 7,
647

648
    .transfer_data = esp_transfer_data,
P
Paolo Bonzini 已提交
649 650
    .complete = esp_command_complete,
    .cancel = esp_request_cancelled
P
Paolo Bonzini 已提交
651 652
};

653
static void sysbus_esp_gpio_demux(void *opaque, int irq, int level)
P
Paul Brook 已提交
654
{
655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672
    DeviceState *d = opaque;
    SysBusESPState *sysbus = container_of(d, SysBusESPState, busdev.qdev);
    ESPState *s = &sysbus->esp;

    switch (irq) {
    case 0:
        parent_esp_reset(s, irq, level);
        break;
    case 1:
        esp_dma_enable(opaque, irq, level);
        break;
    }
}

static int sysbus_esp_init(SysBusDevice *dev)
{
    SysBusESPState *sysbus = FROM_SYSBUS(SysBusESPState, dev);
    ESPState *s = &sysbus->esp;
B
bellard 已提交
673

P
Paul Brook 已提交
674
    sysbus_init_irq(dev, &s->irq);
675
    assert(sysbus->it_shift != -1);
B
bellard 已提交
676

677
    s->chip_id = TCHI_FAS100A;
678 679 680
    memory_region_init_io(&sysbus->iomem, &sysbus_esp_mem_ops, sysbus,
                          "esp", ESP_REGS << sysbus->it_shift);
    sysbus_init_mmio(dev, &sysbus->iomem);
B
bellard 已提交
681

682
    qdev_init_gpio_in(&dev->qdev, sysbus_esp_gpio_demux, 2);
683

684
    scsi_bus_new(&s->bus, &dev->qdev, &esp_scsi_info);
685
    return scsi_bus_legacy_handle_cmdline(&s->bus);
686
}
P
Paul Brook 已提交
687

688 689 690 691 692 693 694 695 696 697 698 699 700 701 702
static void sysbus_esp_hard_reset(DeviceState *dev)
{
    SysBusESPState *sysbus = DO_UPCAST(SysBusESPState, busdev.qdev, dev);
    esp_hard_reset(&sysbus->esp);
}

static const VMStateDescription vmstate_sysbus_esp_scsi = {
    .name = "sysbusespscsi",
    .version_id = 0,
    .minimum_version_id = 0,
    .minimum_version_id_old = 0,
    .fields = (VMStateField[]) {
        VMSTATE_STRUCT(esp, SysBusESPState, 0, vmstate_esp, ESPState),
        VMSTATE_END_OF_LIST()
    }
703 704
};

705
static void sysbus_esp_class_init(ObjectClass *klass, void *data)
706
{
707
    DeviceClass *dc = DEVICE_CLASS(klass);
708 709
    SysBusDeviceClass *k = SYS_BUS_DEVICE_CLASS(klass);

710 711 712
    k->init = sysbus_esp_init;
    dc->reset = sysbus_esp_hard_reset;
    dc->vmsd = &vmstate_sysbus_esp_scsi;
713 714
}

715
static const TypeInfo sysbus_esp_info = {
716 717
    .name          = "esp",
    .parent        = TYPE_SYS_BUS_DEVICE,
718 719
    .instance_size = sizeof(SysBusESPState),
    .class_init    = sysbus_esp_class_init,
B
Blue Swirl 已提交
720 721
};

A
Andreas Färber 已提交
722
static void esp_register_types(void)
P
Paul Brook 已提交
723
{
724
    type_register_static(&sysbus_esp_info);
P
Paul Brook 已提交
725 726
}

A
Andreas Färber 已提交
727
type_init(esp_register_types)