esp.c 19.2 KB
Newer Older
B
bellard 已提交
1
/*
2
 * QEMU ESP/NCR53C9x emulation
3
 *
P
pbrook 已提交
4
 * Copyright (c) 2005-2006 Fabrice Bellard
5
 *
B
bellard 已提交
6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */
24

P
Paul Brook 已提交
25
#include "sysbus.h"
P
pbrook 已提交
26
#include "scsi-disk.h"
27
#include "scsi.h"
B
bellard 已提交
28 29

/* debug ESP card */
B
bellard 已提交
30
//#define DEBUG_ESP
B
bellard 已提交
31

32
/*
33 34
 * On Sparc32, this is the ESP (NCR53C90) part of chip STP2000 (Master I/O),
 * also produced as NCR89C100. See
35 36 37 38 39
 * http://www.ibiblio.org/pub/historic-linux/early-ports/Sparc/NCR/NCR89C100.txt
 * and
 * http://www.ibiblio.org/pub/historic-linux/early-ports/Sparc/NCR/NCR53C9X.txt
 */

B
bellard 已提交
40
#ifdef DEBUG_ESP
41 42
#define DPRINTF(fmt, ...)                                       \
    do { printf("ESP: " fmt , ## __VA_ARGS__); } while (0)
B
bellard 已提交
43
#else
44
#define DPRINTF(fmt, ...) do {} while (0)
B
bellard 已提交
45 46
#endif

47 48
#define ESP_ERROR(fmt, ...)                                             \
    do { printf("ESP ERROR: %s: " fmt, __func__ , ## __VA_ARGS__); } while (0)
B
blueswir1 已提交
49

B
blueswir1 已提交
50
#define ESP_REGS 16
B
blueswir1 已提交
51
#define TI_BUFSZ 16
52

P
pbrook 已提交
53
typedef struct ESPState ESPState;
B
bellard 已提交
54

P
pbrook 已提交
55
struct ESPState {
P
Paul Brook 已提交
56
    SysBusDevice busdev;
57
    uint32_t it_shift;
58
    qemu_irq irq;
B
blueswir1 已提交
59 60
    uint8_t rregs[ESP_REGS];
    uint8_t wregs[ESP_REGS];
61
    int32_t ti_size;
62 63
    uint32_t ti_rptr, ti_wptr;
    uint8_t ti_buf[TI_BUFSZ];
B
blueswir1 已提交
64 65
    uint32_t sense;
    uint32_t dma;
T
ths 已提交
66
    SCSIDevice *scsi_dev[ESP_MAX_DEVS];
P
pbrook 已提交
67
    SCSIDevice *current_dev;
P
pbrook 已提交
68
    uint8_t cmdbuf[TI_BUFSZ];
B
blueswir1 已提交
69 70
    uint32_t cmdlen;
    uint32_t do_cmd;
P
pbrook 已提交
71

P
pbrook 已提交
72
    /* The amount of data left in the current DMA transfer.  */
P
pbrook 已提交
73
    uint32_t dma_left;
P
pbrook 已提交
74 75 76
    /* The size of the current DMA transfer.  Zero if no transfer is in
       progress.  */
    uint32_t dma_counter;
P
pbrook 已提交
77
    uint8_t *async_buf;
P
pbrook 已提交
78
    uint32_t async_len;
79 80 81

    espdma_memory_read_write dma_memory_read;
    espdma_memory_read_write dma_memory_write;
82
    void *dma_opaque;
P
pbrook 已提交
83
};
B
bellard 已提交
84

85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117
#define ESP_TCLO   0x0
#define ESP_TCMID  0x1
#define ESP_FIFO   0x2
#define ESP_CMD    0x3
#define ESP_RSTAT  0x4
#define ESP_WBUSID 0x4
#define ESP_RINTR  0x5
#define ESP_WSEL   0x5
#define ESP_RSEQ   0x6
#define ESP_WSYNTP 0x6
#define ESP_RFLAGS 0x7
#define ESP_WSYNO  0x7
#define ESP_CFG1   0x8
#define ESP_RRES1  0x9
#define ESP_WCCF   0x9
#define ESP_RRES2  0xa
#define ESP_WTEST  0xa
#define ESP_CFG2   0xb
#define ESP_CFG3   0xc
#define ESP_RES3   0xd
#define ESP_TCHI   0xe
#define ESP_RES4   0xf

#define CMD_DMA 0x80
#define CMD_CMD 0x7f

#define CMD_NOP      0x00
#define CMD_FLUSH    0x01
#define CMD_RESET    0x02
#define CMD_BUSRESET 0x03
#define CMD_TI       0x10
#define CMD_ICCS     0x11
#define CMD_MSGACC   0x12
B
Blue Swirl 已提交
118
#define CMD_PAD      0x18
119
#define CMD_SATN     0x1a
120
#define CMD_SEL      0x41
121 122 123 124
#define CMD_SELATN   0x42
#define CMD_SELATNS  0x43
#define CMD_ENSEL    0x44

B
bellard 已提交
125 126 127 128
#define STAT_DO 0x00
#define STAT_DI 0x01
#define STAT_CD 0x02
#define STAT_ST 0x03
B
blueswir1 已提交
129 130
#define STAT_MO 0x06
#define STAT_MI 0x07
131
#define STAT_PIO_MASK 0x06
B
bellard 已提交
132 133

#define STAT_TC 0x10
P
pbrook 已提交
134 135
#define STAT_PE 0x20
#define STAT_GE 0x40
B
blueswir1 已提交
136
#define STAT_INT 0x80
B
bellard 已提交
137

B
blueswir1 已提交
138 139
#define BUSID_DID 0x07

B
bellard 已提交
140 141 142
#define INTR_FC 0x08
#define INTR_BS 0x10
#define INTR_DC 0x20
B
bellard 已提交
143
#define INTR_RST 0x80
B
bellard 已提交
144 145 146 147

#define SEQ_0 0x0
#define SEQ_CD 0x4

148 149 150 151
#define CFG1_RESREPT 0x40

#define TCHI_FAS100A 0x4

B
blueswir1 已提交
152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167
static void esp_raise_irq(ESPState *s)
{
    if (!(s->rregs[ESP_RSTAT] & STAT_INT)) {
        s->rregs[ESP_RSTAT] |= STAT_INT;
        qemu_irq_raise(s->irq);
    }
}

static void esp_lower_irq(ESPState *s)
{
    if (s->rregs[ESP_RSTAT] & STAT_INT) {
        s->rregs[ESP_RSTAT] &= ~STAT_INT;
        qemu_irq_lower(s->irq);
    }
}

B
blueswir1 已提交
168
static uint32_t get_cmd(ESPState *s, uint8_t *buf)
B
bellard 已提交
169
{
P
pbrook 已提交
170
    uint32_t dmalen;
B
bellard 已提交
171 172
    int target;

B
blueswir1 已提交
173
    target = s->wregs[ESP_WBUSID] & BUSID_DID;
174
    if (s->dma) {
175
        dmalen = s->rregs[ESP_TCLO] | (s->rregs[ESP_TCMID] << 8);
176
        s->dma_memory_read(s->dma_opaque, buf, dmalen);
177
    } else {
178 179
        dmalen = s->ti_size;
        memcpy(buf, s->ti_buf, dmalen);
B
blueswir1 已提交
180
        buf[0] = 0;
181
    }
182
    DPRINTF("get_cmd: len %d target %d\n", dmalen, target);
P
pbrook 已提交
183

B
bellard 已提交
184
    s->ti_size = 0;
185 186
    s->ti_rptr = 0;
    s->ti_wptr = 0;
B
bellard 已提交
187

P
pbrook 已提交
188 189
    if (s->current_dev) {
        /* Started a new command before the old one finished.  Cancel it.  */
T
ths 已提交
190
        s->current_dev->cancel_io(s->current_dev, 0);
P
pbrook 已提交
191 192 193
        s->async_len = 0;
    }

T
ths 已提交
194
    if (target >= ESP_MAX_DEVS || !s->scsi_dev[target]) {
P
pbrook 已提交
195
        // No such drive
B
blueswir1 已提交
196
        s->rregs[ESP_RSTAT] = 0;
197 198
        s->rregs[ESP_RINTR] = INTR_DC;
        s->rregs[ESP_RSEQ] = SEQ_0;
B
blueswir1 已提交
199
        esp_raise_irq(s);
B
blueswir1 已提交
200
        return 0;
B
bellard 已提交
201
    }
P
pbrook 已提交
202
    s->current_dev = s->scsi_dev[target];
P
pbrook 已提交
203 204 205 206 207 208 209 210 211 212
    return dmalen;
}

static void do_cmd(ESPState *s, uint8_t *buf)
{
    int32_t datalen;
    int lun;

    DPRINTF("do_cmd: busid 0x%x\n", buf[0]);
    lun = buf[0] & 7;
T
ths 已提交
213
    datalen = s->current_dev->send_command(s->current_dev, 0, &buf[1], lun);
214 215
    s->ti_size = datalen;
    if (datalen != 0) {
B
blueswir1 已提交
216
        s->rregs[ESP_RSTAT] = STAT_TC;
P
pbrook 已提交
217
        s->dma_left = 0;
P
pbrook 已提交
218
        s->dma_counter = 0;
P
pbrook 已提交
219
        if (datalen > 0) {
220
            s->rregs[ESP_RSTAT] |= STAT_DI;
T
ths 已提交
221
            s->current_dev->read_data(s->current_dev, 0);
P
pbrook 已提交
222
        } else {
223
            s->rregs[ESP_RSTAT] |= STAT_DO;
T
ths 已提交
224
            s->current_dev->write_data(s->current_dev, 0);
B
bellard 已提交
225
        }
B
bellard 已提交
226
    }
227 228
    s->rregs[ESP_RINTR] = INTR_BS | INTR_FC;
    s->rregs[ESP_RSEQ] = SEQ_CD;
B
blueswir1 已提交
229
    esp_raise_irq(s);
B
bellard 已提交
230 231
}

P
pbrook 已提交
232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247
static void handle_satn(ESPState *s)
{
    uint8_t buf[32];
    int len;

    len = get_cmd(s, buf);
    if (len)
        do_cmd(s, buf);
}

static void handle_satn_stop(ESPState *s)
{
    s->cmdlen = get_cmd(s, s->cmdbuf);
    if (s->cmdlen) {
        DPRINTF("Set ATN & Stop: cmdlen %d\n", s->cmdlen);
        s->do_cmd = 1;
B
blueswir1 已提交
248
        s->rregs[ESP_RSTAT] = STAT_TC | STAT_CD;
249 250
        s->rregs[ESP_RINTR] = INTR_BS | INTR_FC;
        s->rregs[ESP_RSEQ] = SEQ_CD;
B
blueswir1 已提交
251
        esp_raise_irq(s);
P
pbrook 已提交
252 253 254
    }
}

P
pbrook 已提交
255
static void write_response(ESPState *s)
B
bellard 已提交
256
{
P
pbrook 已提交
257 258 259
    DPRINTF("Transfer status (sense=%d)\n", s->sense);
    s->ti_buf[0] = s->sense;
    s->ti_buf[1] = 0;
260
    if (s->dma) {
261
        s->dma_memory_write(s->dma_opaque, s->ti_buf, 2);
B
blueswir1 已提交
262
        s->rregs[ESP_RSTAT] = STAT_TC | STAT_ST;
263 264
        s->rregs[ESP_RINTR] = INTR_BS | INTR_FC;
        s->rregs[ESP_RSEQ] = SEQ_CD;
265
    } else {
B
blueswir1 已提交
266 267 268
        s->ti_size = 2;
        s->ti_rptr = 0;
        s->ti_wptr = 0;
269
        s->rregs[ESP_RFLAGS] = 2;
270
    }
B
blueswir1 已提交
271
    esp_raise_irq(s);
B
bellard 已提交
272
}
273

P
pbrook 已提交
274 275
static void esp_dma_done(ESPState *s)
{
B
blueswir1 已提交
276
    s->rregs[ESP_RSTAT] |= STAT_TC;
277 278 279 280 281
    s->rregs[ESP_RINTR] = INTR_BS;
    s->rregs[ESP_RSEQ] = 0;
    s->rregs[ESP_RFLAGS] = 0;
    s->rregs[ESP_TCLO] = 0;
    s->rregs[ESP_TCMID] = 0;
B
blueswir1 已提交
282
    esp_raise_irq(s);
P
pbrook 已提交
283 284
}

P
pbrook 已提交
285 286
static void esp_do_dma(ESPState *s)
{
287
    uint32_t len;
P
pbrook 已提交
288
    int to_device;
P
pbrook 已提交
289

290
    to_device = (s->ti_size < 0);
P
pbrook 已提交
291
    len = s->dma_left;
P
pbrook 已提交
292 293
    if (s->do_cmd) {
        DPRINTF("command len %d + %d\n", s->cmdlen, len);
294
        s->dma_memory_read(s->dma_opaque, &s->cmdbuf[s->cmdlen], len);
P
pbrook 已提交
295 296 297 298 299
        s->ti_size = 0;
        s->cmdlen = 0;
        s->do_cmd = 0;
        do_cmd(s, s->cmdbuf);
        return;
P
pbrook 已提交
300 301 302 303 304 305 306 307 308
    }
    if (s->async_len == 0) {
        /* Defer until data is available.  */
        return;
    }
    if (len > s->async_len) {
        len = s->async_len;
    }
    if (to_device) {
309
        s->dma_memory_read(s->dma_opaque, s->async_buf, len);
P
pbrook 已提交
310
    } else {
311
        s->dma_memory_write(s->dma_opaque, s->async_buf, len);
P
pbrook 已提交
312 313 314 315
    }
    s->dma_left -= len;
    s->async_buf += len;
    s->async_len -= len;
P
pbrook 已提交
316 317 318 319
    if (to_device)
        s->ti_size += len;
    else
        s->ti_size -= len;
P
pbrook 已提交
320
    if (s->async_len == 0) {
P
pbrook 已提交
321
        if (to_device) {
322
            // ti_size is negative
T
ths 已提交
323
            s->current_dev->write_data(s->current_dev, 0);
P
pbrook 已提交
324
        } else {
T
ths 已提交
325
            s->current_dev->read_data(s->current_dev, 0);
P
pbrook 已提交
326
            /* If there is still data to be read from the device then
B
blueswir1 已提交
327
               complete the DMA operation immediately.  Otherwise defer
P
pbrook 已提交
328 329 330 331
               until the scsi layer has completed.  */
            if (s->dma_left == 0 && s->ti_size > 0) {
                esp_dma_done(s);
            }
P
pbrook 已提交
332
        }
P
pbrook 已提交
333 334
    } else {
        /* Partially filled a scsi buffer. Complete immediately.  */
P
pbrook 已提交
335 336
        esp_dma_done(s);
    }
P
pbrook 已提交
337 338
}

P
pbrook 已提交
339 340
static void esp_command_complete(void *opaque, int reason, uint32_t tag,
                                 uint32_t arg)
P
pbrook 已提交
341 342 343
{
    ESPState *s = (ESPState *)opaque;

P
pbrook 已提交
344 345 346 347 348
    if (reason == SCSI_REASON_DONE) {
        DPRINTF("SCSI Command complete\n");
        if (s->ti_size != 0)
            DPRINTF("SCSI command completed unexpectedly\n");
        s->ti_size = 0;
P
pbrook 已提交
349 350 351
        s->dma_left = 0;
        s->async_len = 0;
        if (arg)
P
pbrook 已提交
352
            DPRINTF("Command failed\n");
P
pbrook 已提交
353
        s->sense = arg;
354
        s->rregs[ESP_RSTAT] = STAT_ST;
P
pbrook 已提交
355 356
        esp_dma_done(s);
        s->current_dev = NULL;
P
pbrook 已提交
357 358
    } else {
        DPRINTF("transfer %d/%d\n", s->dma_left, s->ti_size);
P
pbrook 已提交
359
        s->async_len = arg;
T
ths 已提交
360
        s->async_buf = s->current_dev->get_buf(s->current_dev, 0);
P
pbrook 已提交
361
        if (s->dma_left) {
P
pbrook 已提交
362
            esp_do_dma(s);
P
pbrook 已提交
363 364 365 366 367
        } else if (s->dma_counter != 0 && s->ti_size <= 0) {
            /* If this was the last part of a DMA transfer then the
               completion interrupt is deferred to here.  */
            esp_dma_done(s);
        }
P
pbrook 已提交
368
    }
P
pbrook 已提交
369 370
}

B
bellard 已提交
371 372
static void handle_ti(ESPState *s)
{
P
pbrook 已提交
373
    uint32_t dmalen, minlen;
B
bellard 已提交
374

375
    dmalen = s->rregs[ESP_TCLO] | (s->rregs[ESP_TCMID] << 8);
P
pbrook 已提交
376 377 378
    if (dmalen==0) {
      dmalen=0x10000;
    }
P
pbrook 已提交
379
    s->dma_counter = dmalen;
P
pbrook 已提交
380

P
pbrook 已提交
381 382
    if (s->do_cmd)
        minlen = (dmalen < 32) ? dmalen : 32;
383 384
    else if (s->ti_size < 0)
        minlen = (dmalen < -s->ti_size) ? dmalen : -s->ti_size;
P
pbrook 已提交
385 386
    else
        minlen = (dmalen < s->ti_size) ? dmalen : s->ti_size;
P
pbrook 已提交
387
    DPRINTF("Transfer Information len %d\n", minlen);
388
    if (s->dma) {
P
pbrook 已提交
389
        s->dma_left = minlen;
390
        s->rregs[ESP_RSTAT] &= ~STAT_TC;
P
pbrook 已提交
391
        esp_do_dma(s);
P
pbrook 已提交
392 393 394 395 396 397 398 399
    } else if (s->do_cmd) {
        DPRINTF("command len %d\n", s->cmdlen);
        s->ti_size = 0;
        s->cmdlen = 0;
        s->do_cmd = 0;
        do_cmd(s, s->cmdbuf);
        return;
    }
B
bellard 已提交
400 401
}

B
blueswir1 已提交
402
static void esp_reset(void *opaque)
B
bellard 已提交
403 404
{
    ESPState *s = opaque;
405

B
blueswir1 已提交
406 407
    memset(s->rregs, 0, ESP_REGS);
    memset(s->wregs, 0, ESP_REGS);
408
    s->rregs[ESP_TCHI] = TCHI_FAS100A; // Indicate fas100a
P
pbrook 已提交
409 410 411 412
    s->ti_size = 0;
    s->ti_rptr = 0;
    s->ti_wptr = 0;
    s->dma = 0;
P
pbrook 已提交
413
    s->do_cmd = 0;
B
blueswir1 已提交
414 415

    s->rregs[ESP_CFG1] = 7;
B
bellard 已提交
416 417
}

418 419 420 421 422 423
static void parent_esp_reset(void *opaque, int irq, int level)
{
    if (level)
        esp_reset(opaque);
}

B
bellard 已提交
424 425 426
static uint32_t esp_mem_readb(void *opaque, target_phys_addr_t addr)
{
    ESPState *s = opaque;
B
Blue Swirl 已提交
427
    uint32_t saddr, old_val;
B
bellard 已提交
428

B
blueswir1 已提交
429
    saddr = addr >> s->it_shift;
B
bellard 已提交
430
    DPRINTF("read reg[%d]: 0x%2.2x\n", saddr, s->rregs[saddr]);
B
bellard 已提交
431
    switch (saddr) {
432
    case ESP_FIFO:
B
blueswir1 已提交
433 434
        if (s->ti_size > 0) {
            s->ti_size--;
435
            if ((s->rregs[ESP_RSTAT] & STAT_PIO_MASK) == 0) {
B
blueswir1 已提交
436 437
                /* Data out.  */
                ESP_ERROR("PIO data read not implemented\n");
438
                s->rregs[ESP_FIFO] = 0;
P
pbrook 已提交
439
            } else {
440
                s->rregs[ESP_FIFO] = s->ti_buf[s->ti_rptr++];
P
pbrook 已提交
441
            }
B
blueswir1 已提交
442
            esp_raise_irq(s);
B
blueswir1 已提交
443 444
        }
        if (s->ti_size == 0) {
445 446 447
            s->ti_rptr = 0;
            s->ti_wptr = 0;
        }
B
blueswir1 已提交
448
        break;
449
    case ESP_RINTR:
B
Blue Swirl 已提交
450 451 452 453 454 455
        /* Clear sequence step, interrupt register and all status bits
           except TC */
        old_val = s->rregs[ESP_RINTR];
        s->rregs[ESP_RINTR] = 0;
        s->rregs[ESP_RSTAT] &= ~STAT_TC;
        s->rregs[ESP_RSEQ] = SEQ_CD;
B
blueswir1 已提交
456
        esp_lower_irq(s);
B
Blue Swirl 已提交
457 458

        return old_val;
B
bellard 已提交
459
    default:
B
blueswir1 已提交
460
        break;
B
bellard 已提交
461
    }
B
bellard 已提交
462
    return s->rregs[saddr];
B
bellard 已提交
463 464 465 466 467 468 469
}

static void esp_mem_writeb(void *opaque, target_phys_addr_t addr, uint32_t val)
{
    ESPState *s = opaque;
    uint32_t saddr;

B
blueswir1 已提交
470
    saddr = addr >> s->it_shift;
471 472
    DPRINTF("write reg[%d]: 0x%2.2x -> 0x%2.2x\n", saddr, s->wregs[saddr],
            val);
B
bellard 已提交
473
    switch (saddr) {
474 475 476
    case ESP_TCLO:
    case ESP_TCMID:
        s->rregs[ESP_RSTAT] &= ~STAT_TC;
477
        break;
478
    case ESP_FIFO:
P
pbrook 已提交
479 480
        if (s->do_cmd) {
            s->cmdbuf[s->cmdlen++] = val & 0xff;
B
blueswir1 已提交
481 482
        } else if (s->ti_size == TI_BUFSZ - 1) {
            ESP_ERROR("fifo overrun\n");
P
pbrook 已提交
483 484 485 486
        } else {
            s->ti_size++;
            s->ti_buf[s->ti_wptr++] = val & 0xff;
        }
B
blueswir1 已提交
487
        break;
488
    case ESP_CMD:
489
        s->rregs[saddr] = val;
490
        if (val & CMD_DMA) {
B
blueswir1 已提交
491
            s->dma = 1;
P
pbrook 已提交
492
            /* Reload DMA counter.  */
493 494
            s->rregs[ESP_TCLO] = s->wregs[ESP_TCLO];
            s->rregs[ESP_TCMID] = s->wregs[ESP_TCMID];
B
blueswir1 已提交
495 496 497
        } else {
            s->dma = 0;
        }
498 499
        switch(val & CMD_CMD) {
        case CMD_NOP:
B
blueswir1 已提交
500 501
            DPRINTF("NOP (%2.2x)\n", val);
            break;
502
        case CMD_FLUSH:
B
blueswir1 已提交
503
            DPRINTF("Flush FIFO (%2.2x)\n", val);
B
bellard 已提交
504
            //s->ti_size = 0;
505 506
            s->rregs[ESP_RINTR] = INTR_FC;
            s->rregs[ESP_RSEQ] = 0;
507
            s->rregs[ESP_RFLAGS] = 0;
B
blueswir1 已提交
508
            break;
509
        case CMD_RESET:
B
blueswir1 已提交
510 511 512
            DPRINTF("Chip reset (%2.2x)\n", val);
            esp_reset(s);
            break;
513
        case CMD_BUSRESET:
B
blueswir1 已提交
514
            DPRINTF("Bus reset (%2.2x)\n", val);
515 516
            s->rregs[ESP_RINTR] = INTR_RST;
            if (!(s->wregs[ESP_CFG1] & CFG1_RESREPT)) {
B
blueswir1 已提交
517
                esp_raise_irq(s);
B
bellard 已提交
518
            }
B
blueswir1 已提交
519
            break;
520
        case CMD_TI:
B
blueswir1 已提交
521 522
            handle_ti(s);
            break;
523
        case CMD_ICCS:
B
blueswir1 已提交
524 525
            DPRINTF("Initiator Command Complete Sequence (%2.2x)\n", val);
            write_response(s);
B
blueswir1 已提交
526 527
            s->rregs[ESP_RINTR] = INTR_FC;
            s->rregs[ESP_RSTAT] |= STAT_MI;
B
blueswir1 已提交
528
            break;
529
        case CMD_MSGACC:
B
blueswir1 已提交
530
            DPRINTF("Message Accepted (%2.2x)\n", val);
531 532
            s->rregs[ESP_RINTR] = INTR_DC;
            s->rregs[ESP_RSEQ] = 0;
533 534
            s->rregs[ESP_RFLAGS] = 0;
            esp_raise_irq(s);
B
blueswir1 已提交
535
            break;
B
Blue Swirl 已提交
536 537 538 539 540 541
        case CMD_PAD:
            DPRINTF("Transfer padding (%2.2x)\n", val);
            s->rregs[ESP_RSTAT] = STAT_TC;
            s->rregs[ESP_RINTR] = INTR_FC;
            s->rregs[ESP_RSEQ] = 0;
            break;
542
        case CMD_SATN:
B
blueswir1 已提交
543 544
            DPRINTF("Set ATN (%2.2x)\n", val);
            break;
545 546 547 548
        case CMD_SEL:
            DPRINTF("Select without ATN (%2.2x)\n", val);
            handle_satn(s);
            break;
549
        case CMD_SELATN:
550
            DPRINTF("Select with ATN (%2.2x)\n", val);
B
blueswir1 已提交
551 552
            handle_satn(s);
            break;
553
        case CMD_SELATNS:
554
            DPRINTF("Select with ATN & stop (%2.2x)\n", val);
B
blueswir1 已提交
555 556
            handle_satn_stop(s);
            break;
557
        case CMD_ENSEL:
B
blueswir1 已提交
558
            DPRINTF("Enable selection (%2.2x)\n", val);
559
            s->rregs[ESP_RINTR] = 0;
B
blueswir1 已提交
560
            break;
B
blueswir1 已提交
561
        default:
B
blueswir1 已提交
562
            ESP_ERROR("Unhandled ESP command (%2.2x)\n", val);
B
blueswir1 已提交
563 564 565
            break;
        }
        break;
566
    case ESP_WBUSID ... ESP_WSYNO:
B
blueswir1 已提交
567
        break;
568
    case ESP_CFG1:
569 570
        s->rregs[saddr] = val;
        break;
571
    case ESP_WCCF ... ESP_WTEST:
572
        break;
573
    case ESP_CFG2 ... ESP_RES4:
574 575
        s->rregs[saddr] = val;
        break;
B
bellard 已提交
576
    default:
B
blueswir1 已提交
577 578
        ESP_ERROR("invalid write of 0x%02x at [0x%x]\n", val, saddr);
        return;
B
bellard 已提交
579
    }
B
bellard 已提交
580
    s->wregs[saddr] = val;
B
bellard 已提交
581 582
}

583
static CPUReadMemoryFunc * const esp_mem_read[3] = {
B
bellard 已提交
584
    esp_mem_readb,
585 586
    NULL,
    NULL,
B
bellard 已提交
587 588
};

589
static CPUWriteMemoryFunc * const esp_mem_write[3] = {
B
bellard 已提交
590
    esp_mem_writeb,
591
    NULL,
592
    esp_mem_writeb,
B
bellard 已提交
593 594 595 596 597
};

static void esp_save(QEMUFile *f, void *opaque)
{
    ESPState *s = opaque;
B
bellard 已提交
598

B
blueswir1 已提交
599 600
    qemu_put_buffer(f, s->rregs, ESP_REGS);
    qemu_put_buffer(f, s->wregs, ESP_REGS);
B
blueswir1 已提交
601
    qemu_put_sbe32s(f, &s->ti_size);
602 603 604
    qemu_put_be32s(f, &s->ti_rptr);
    qemu_put_be32s(f, &s->ti_wptr);
    qemu_put_buffer(f, s->ti_buf, TI_BUFSZ);
B
blueswir1 已提交
605
    qemu_put_be32s(f, &s->sense);
606
    qemu_put_be32s(f, &s->dma);
B
blueswir1 已提交
607 608 609 610 611
    qemu_put_buffer(f, s->cmdbuf, TI_BUFSZ);
    qemu_put_be32s(f, &s->cmdlen);
    qemu_put_be32s(f, &s->do_cmd);
    qemu_put_be32s(f, &s->dma_left);
    // There should be no transfers in progress, so dma_counter is not saved
B
bellard 已提交
612 613 614 615 616
}

static int esp_load(QEMUFile *f, void *opaque, int version_id)
{
    ESPState *s = opaque;
617

B
blueswir1 已提交
618 619
    if (version_id != 3)
        return -EINVAL; // Cannot emulate 2
B
bellard 已提交
620

B
blueswir1 已提交
621 622
    qemu_get_buffer(f, s->rregs, ESP_REGS);
    qemu_get_buffer(f, s->wregs, ESP_REGS);
B
blueswir1 已提交
623
    qemu_get_sbe32s(f, &s->ti_size);
624 625 626
    qemu_get_be32s(f, &s->ti_rptr);
    qemu_get_be32s(f, &s->ti_wptr);
    qemu_get_buffer(f, s->ti_buf, TI_BUFSZ);
B
blueswir1 已提交
627
    qemu_get_be32s(f, &s->sense);
628
    qemu_get_be32s(f, &s->dma);
B
blueswir1 已提交
629 630 631 632
    qemu_get_buffer(f, s->cmdbuf, TI_BUFSZ);
    qemu_get_be32s(f, &s->cmdlen);
    qemu_get_be32s(f, &s->do_cmd);
    qemu_get_be32s(f, &s->dma_left);
B
bellard 已提交
633

B
bellard 已提交
634 635 636
    return 0;
}

P
Paul Brook 已提交
637
static void esp_scsi_attach(DeviceState *host, BlockDriverState *bd, int id)
T
ths 已提交
638
{
P
Paul Brook 已提交
639
    ESPState *s = FROM_SYSBUS(ESPState, sysbus_from_qdev(host));
T
ths 已提交
640 641 642

    if (id < 0) {
        for (id = 0; id < ESP_MAX_DEVS; id++) {
B
blueswir1 已提交
643 644
            if (id == (s->rregs[ESP_CFG1] & 0x7))
                continue;
T
ths 已提交
645 646 647 648 649 650 651 652 653 654
            if (s->scsi_dev[id] == NULL)
                break;
        }
    }
    if (id >= ESP_MAX_DEVS) {
        DPRINTF("Bad Device ID %d\n", id);
        return;
    }
    if (s->scsi_dev[id]) {
        DPRINTF("Destroying device %d\n", id);
T
ths 已提交
655
        s->scsi_dev[id]->destroy(s->scsi_dev[id]);
T
ths 已提交
656 657 658
    }
    DPRINTF("Attaching block device %d\n", id);
    /* Command queueing is not implemented.  */
659 660 661
    s->scsi_dev[id] = scsi_generic_init(bd, 0, esp_command_complete, s);
    if (s->scsi_dev[id] == NULL)
        s->scsi_dev[id] = scsi_disk_init(bd, 0, esp_command_complete, s);
T
ths 已提交
662 663
}

P
Paul Brook 已提交
664 665 666 667
void esp_init(target_phys_addr_t espaddr, int it_shift,
              espdma_memory_read_write dma_memory_read,
              espdma_memory_read_write dma_memory_write,
              void *dma_opaque, qemu_irq irq, qemu_irq *reset)
B
bellard 已提交
668
{
P
Paul Brook 已提交
669 670
    DeviceState *dev;
    SysBusDevice *s;
G
Gerd Hoffmann 已提交
671
    ESPState *esp;
P
Paul Brook 已提交
672 673

    dev = qdev_create(NULL, "esp");
G
Gerd Hoffmann 已提交
674 675 676 677 678
    esp = DO_UPCAST(ESPState, busdev.qdev, dev);
    esp->dma_memory_read = dma_memory_read;
    esp->dma_memory_write = dma_memory_write;
    esp->dma_opaque = dma_opaque;
    esp->it_shift = it_shift;
P
Paul Brook 已提交
679 680 681 682
    qdev_init(dev);
    s = sysbus_from_qdev(dev);
    sysbus_connect_irq(s, 0, irq);
    sysbus_mmio_map(s, 0, espaddr);
683
    *reset = qdev_get_gpio_in(dev, 0);
P
Paul Brook 已提交
684
}
B
bellard 已提交
685

686
static int esp_init1(SysBusDevice *dev)
P
Paul Brook 已提交
687 688 689
{
    ESPState *s = FROM_SYSBUS(ESPState, dev);
    int esp_io_memory;
B
bellard 已提交
690

P
Paul Brook 已提交
691 692
    sysbus_init_irq(dev, &s->irq);
    assert(s->it_shift != -1);
B
bellard 已提交
693

694
    esp_io_memory = cpu_register_io_memory(esp_mem_read, esp_mem_write, s);
P
Paul Brook 已提交
695
    sysbus_init_mmio(dev, ESP_REGS << s->it_shift, esp_io_memory);
B
bellard 已提交
696 697 698

    esp_reset(s);

P
Paul Brook 已提交
699
    register_savevm("esp", -1, 3, esp_save, esp_load, s);
700
    qemu_register_reset(esp_reset, s);
B
bellard 已提交
701

P
Paul Brook 已提交
702
    qdev_init_gpio_in(&dev->qdev, parent_esp_reset, 1);
703

P
Paul Brook 已提交
704
    scsi_bus_new(&dev->qdev, esp_scsi_attach);
705
    return 0;
706
}
P
Paul Brook 已提交
707 708 709 710 711 712 713

static void esp_register_devices(void)
{
    sysbus_register_dev("esp", sizeof(ESPState), esp_init1);
}

device_init(esp_register_devices)