esp.c 19.5 KB
Newer Older
B
bellard 已提交
1
/*
2
 * QEMU ESP/NCR53C9x emulation
3
 *
P
pbrook 已提交
4
 * Copyright (c) 2005-2006 Fabrice Bellard
5
 *
B
bellard 已提交
6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */
24

P
Paul Brook 已提交
25
#include "sysbus.h"
P
pbrook 已提交
26
#include "scsi-disk.h"
27
#include "scsi.h"
B
bellard 已提交
28 29

/* debug ESP card */
B
bellard 已提交
30
//#define DEBUG_ESP
B
bellard 已提交
31

32
/*
33 34
 * On Sparc32, this is the ESP (NCR53C90) part of chip STP2000 (Master I/O),
 * also produced as NCR89C100. See
35 36 37 38 39
 * http://www.ibiblio.org/pub/historic-linux/early-ports/Sparc/NCR/NCR89C100.txt
 * and
 * http://www.ibiblio.org/pub/historic-linux/early-ports/Sparc/NCR/NCR53C9X.txt
 */

B
bellard 已提交
40
#ifdef DEBUG_ESP
41 42
#define DPRINTF(fmt, ...)                                       \
    do { printf("ESP: " fmt , ## __VA_ARGS__); } while (0)
B
bellard 已提交
43
#else
44
#define DPRINTF(fmt, ...) do {} while (0)
B
bellard 已提交
45 46
#endif

47 48
#define ESP_ERROR(fmt, ...)                                             \
    do { printf("ESP ERROR: %s: " fmt, __func__ , ## __VA_ARGS__); } while (0)
B
blueswir1 已提交
49

B
blueswir1 已提交
50
#define ESP_REGS 16
B
blueswir1 已提交
51
#define TI_BUFSZ 16
52

P
pbrook 已提交
53
typedef struct ESPState ESPState;
B
bellard 已提交
54

P
pbrook 已提交
55
struct ESPState {
P
Paul Brook 已提交
56
    SysBusDevice busdev;
57
    uint32_t it_shift;
58
    qemu_irq irq;
B
blueswir1 已提交
59 60
    uint8_t rregs[ESP_REGS];
    uint8_t wregs[ESP_REGS];
61
    int32_t ti_size;
62 63
    uint32_t ti_rptr, ti_wptr;
    uint8_t ti_buf[TI_BUFSZ];
B
blueswir1 已提交
64 65
    uint32_t sense;
    uint32_t dma;
T
ths 已提交
66
    SCSIDevice *scsi_dev[ESP_MAX_DEVS];
P
pbrook 已提交
67
    SCSIDevice *current_dev;
P
pbrook 已提交
68
    uint8_t cmdbuf[TI_BUFSZ];
B
blueswir1 已提交
69 70
    uint32_t cmdlen;
    uint32_t do_cmd;
P
pbrook 已提交
71

P
pbrook 已提交
72
    /* The amount of data left in the current DMA transfer.  */
P
pbrook 已提交
73
    uint32_t dma_left;
P
pbrook 已提交
74 75 76
    /* The size of the current DMA transfer.  Zero if no transfer is in
       progress.  */
    uint32_t dma_counter;
P
pbrook 已提交
77
    uint8_t *async_buf;
P
pbrook 已提交
78
    uint32_t async_len;
79 80 81

    espdma_memory_read_write dma_memory_read;
    espdma_memory_read_write dma_memory_write;
82
    void *dma_opaque;
P
pbrook 已提交
83
};
B
bellard 已提交
84

85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117
#define ESP_TCLO   0x0
#define ESP_TCMID  0x1
#define ESP_FIFO   0x2
#define ESP_CMD    0x3
#define ESP_RSTAT  0x4
#define ESP_WBUSID 0x4
#define ESP_RINTR  0x5
#define ESP_WSEL   0x5
#define ESP_RSEQ   0x6
#define ESP_WSYNTP 0x6
#define ESP_RFLAGS 0x7
#define ESP_WSYNO  0x7
#define ESP_CFG1   0x8
#define ESP_RRES1  0x9
#define ESP_WCCF   0x9
#define ESP_RRES2  0xa
#define ESP_WTEST  0xa
#define ESP_CFG2   0xb
#define ESP_CFG3   0xc
#define ESP_RES3   0xd
#define ESP_TCHI   0xe
#define ESP_RES4   0xf

#define CMD_DMA 0x80
#define CMD_CMD 0x7f

#define CMD_NOP      0x00
#define CMD_FLUSH    0x01
#define CMD_RESET    0x02
#define CMD_BUSRESET 0x03
#define CMD_TI       0x10
#define CMD_ICCS     0x11
#define CMD_MSGACC   0x12
B
Blue Swirl 已提交
118
#define CMD_PAD      0x18
119
#define CMD_SATN     0x1a
120
#define CMD_SEL      0x41
121 122 123 124
#define CMD_SELATN   0x42
#define CMD_SELATNS  0x43
#define CMD_ENSEL    0x44

B
bellard 已提交
125 126 127 128
#define STAT_DO 0x00
#define STAT_DI 0x01
#define STAT_CD 0x02
#define STAT_ST 0x03
B
blueswir1 已提交
129 130
#define STAT_MO 0x06
#define STAT_MI 0x07
131
#define STAT_PIO_MASK 0x06
B
bellard 已提交
132 133

#define STAT_TC 0x10
P
pbrook 已提交
134 135
#define STAT_PE 0x20
#define STAT_GE 0x40
B
blueswir1 已提交
136
#define STAT_INT 0x80
B
bellard 已提交
137

B
blueswir1 已提交
138 139
#define BUSID_DID 0x07

B
bellard 已提交
140 141 142
#define INTR_FC 0x08
#define INTR_BS 0x10
#define INTR_DC 0x20
B
bellard 已提交
143
#define INTR_RST 0x80
B
bellard 已提交
144 145 146 147

#define SEQ_0 0x0
#define SEQ_CD 0x4

148 149 150 151
#define CFG1_RESREPT 0x40

#define TCHI_FAS100A 0x4

B
blueswir1 已提交
152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167
static void esp_raise_irq(ESPState *s)
{
    if (!(s->rregs[ESP_RSTAT] & STAT_INT)) {
        s->rregs[ESP_RSTAT] |= STAT_INT;
        qemu_irq_raise(s->irq);
    }
}

static void esp_lower_irq(ESPState *s)
{
    if (s->rregs[ESP_RSTAT] & STAT_INT) {
        s->rregs[ESP_RSTAT] &= ~STAT_INT;
        qemu_irq_lower(s->irq);
    }
}

B
blueswir1 已提交
168
static uint32_t get_cmd(ESPState *s, uint8_t *buf)
B
bellard 已提交
169
{
P
pbrook 已提交
170
    uint32_t dmalen;
B
bellard 已提交
171 172
    int target;

B
blueswir1 已提交
173
    target = s->wregs[ESP_WBUSID] & BUSID_DID;
174
    if (s->dma) {
175
        dmalen = s->rregs[ESP_TCLO] | (s->rregs[ESP_TCMID] << 8);
176
        s->dma_memory_read(s->dma_opaque, buf, dmalen);
177
    } else {
178 179
        dmalen = s->ti_size;
        memcpy(buf, s->ti_buf, dmalen);
B
blueswir1 已提交
180
        buf[0] = 0;
181
    }
182
    DPRINTF("get_cmd: len %d target %d\n", dmalen, target);
P
pbrook 已提交
183

B
bellard 已提交
184
    s->ti_size = 0;
185 186
    s->ti_rptr = 0;
    s->ti_wptr = 0;
B
bellard 已提交
187

P
pbrook 已提交
188 189
    if (s->current_dev) {
        /* Started a new command before the old one finished.  Cancel it.  */
T
ths 已提交
190
        s->current_dev->cancel_io(s->current_dev, 0);
P
pbrook 已提交
191 192 193
        s->async_len = 0;
    }

T
ths 已提交
194
    if (target >= ESP_MAX_DEVS || !s->scsi_dev[target]) {
P
pbrook 已提交
195
        // No such drive
B
blueswir1 已提交
196
        s->rregs[ESP_RSTAT] = 0;
197 198
        s->rregs[ESP_RINTR] = INTR_DC;
        s->rregs[ESP_RSEQ] = SEQ_0;
B
blueswir1 已提交
199
        esp_raise_irq(s);
B
blueswir1 已提交
200
        return 0;
B
bellard 已提交
201
    }
P
pbrook 已提交
202
    s->current_dev = s->scsi_dev[target];
P
pbrook 已提交
203 204 205
    return dmalen;
}

206
static void do_busid_cmd(ESPState *s, uint8_t *buf, uint8_t busid)
P
pbrook 已提交
207 208 209 210
{
    int32_t datalen;
    int lun;

211 212 213
    DPRINTF("do_busid_cmd: busid 0x%x\n", busid);
    lun = busid & 7;
    datalen = s->current_dev->send_command(s->current_dev, 0, buf, lun);
214 215
    s->ti_size = datalen;
    if (datalen != 0) {
B
blueswir1 已提交
216
        s->rregs[ESP_RSTAT] = STAT_TC;
P
pbrook 已提交
217
        s->dma_left = 0;
P
pbrook 已提交
218
        s->dma_counter = 0;
P
pbrook 已提交
219
        if (datalen > 0) {
220
            s->rregs[ESP_RSTAT] |= STAT_DI;
T
ths 已提交
221
            s->current_dev->read_data(s->current_dev, 0);
P
pbrook 已提交
222
        } else {
223
            s->rregs[ESP_RSTAT] |= STAT_DO;
T
ths 已提交
224
            s->current_dev->write_data(s->current_dev, 0);
B
bellard 已提交
225
        }
B
bellard 已提交
226
    }
227 228
    s->rregs[ESP_RINTR] = INTR_BS | INTR_FC;
    s->rregs[ESP_RSEQ] = SEQ_CD;
B
blueswir1 已提交
229
    esp_raise_irq(s);
B
bellard 已提交
230 231
}

232 233 234 235 236 237 238
static void do_cmd(ESPState *s, uint8_t *buf)
{
    uint8_t busid = buf[0];

    do_busid_cmd(s, &buf[1], busid);
}

P
pbrook 已提交
239 240 241 242 243 244 245 246 247 248
static void handle_satn(ESPState *s)
{
    uint8_t buf[32];
    int len;

    len = get_cmd(s, buf);
    if (len)
        do_cmd(s, buf);
}

249 250 251 252 253 254 255 256 257 258 259
static void handle_s_without_atn(ESPState *s)
{
    uint8_t buf[32];
    int len;

    len = get_cmd(s, buf);
    if (len) {
        do_busid_cmd(s, buf, 0);
    }
}

P
pbrook 已提交
260 261 262 263 264 265
static void handle_satn_stop(ESPState *s)
{
    s->cmdlen = get_cmd(s, s->cmdbuf);
    if (s->cmdlen) {
        DPRINTF("Set ATN & Stop: cmdlen %d\n", s->cmdlen);
        s->do_cmd = 1;
B
blueswir1 已提交
266
        s->rregs[ESP_RSTAT] = STAT_TC | STAT_CD;
267 268
        s->rregs[ESP_RINTR] = INTR_BS | INTR_FC;
        s->rregs[ESP_RSEQ] = SEQ_CD;
B
blueswir1 已提交
269
        esp_raise_irq(s);
P
pbrook 已提交
270 271 272
    }
}

P
pbrook 已提交
273
static void write_response(ESPState *s)
B
bellard 已提交
274
{
P
pbrook 已提交
275 276 277
    DPRINTF("Transfer status (sense=%d)\n", s->sense);
    s->ti_buf[0] = s->sense;
    s->ti_buf[1] = 0;
278
    if (s->dma) {
279
        s->dma_memory_write(s->dma_opaque, s->ti_buf, 2);
B
blueswir1 已提交
280
        s->rregs[ESP_RSTAT] = STAT_TC | STAT_ST;
281 282
        s->rregs[ESP_RINTR] = INTR_BS | INTR_FC;
        s->rregs[ESP_RSEQ] = SEQ_CD;
283
    } else {
B
blueswir1 已提交
284 285 286
        s->ti_size = 2;
        s->ti_rptr = 0;
        s->ti_wptr = 0;
287
        s->rregs[ESP_RFLAGS] = 2;
288
    }
B
blueswir1 已提交
289
    esp_raise_irq(s);
B
bellard 已提交
290
}
291

P
pbrook 已提交
292 293
static void esp_dma_done(ESPState *s)
{
B
blueswir1 已提交
294
    s->rregs[ESP_RSTAT] |= STAT_TC;
295 296 297 298 299
    s->rregs[ESP_RINTR] = INTR_BS;
    s->rregs[ESP_RSEQ] = 0;
    s->rregs[ESP_RFLAGS] = 0;
    s->rregs[ESP_TCLO] = 0;
    s->rregs[ESP_TCMID] = 0;
B
blueswir1 已提交
300
    esp_raise_irq(s);
P
pbrook 已提交
301 302
}

P
pbrook 已提交
303 304
static void esp_do_dma(ESPState *s)
{
305
    uint32_t len;
P
pbrook 已提交
306
    int to_device;
P
pbrook 已提交
307

308
    to_device = (s->ti_size < 0);
P
pbrook 已提交
309
    len = s->dma_left;
P
pbrook 已提交
310 311
    if (s->do_cmd) {
        DPRINTF("command len %d + %d\n", s->cmdlen, len);
312
        s->dma_memory_read(s->dma_opaque, &s->cmdbuf[s->cmdlen], len);
P
pbrook 已提交
313 314 315 316 317
        s->ti_size = 0;
        s->cmdlen = 0;
        s->do_cmd = 0;
        do_cmd(s, s->cmdbuf);
        return;
P
pbrook 已提交
318 319 320 321 322 323 324 325 326
    }
    if (s->async_len == 0) {
        /* Defer until data is available.  */
        return;
    }
    if (len > s->async_len) {
        len = s->async_len;
    }
    if (to_device) {
327
        s->dma_memory_read(s->dma_opaque, s->async_buf, len);
P
pbrook 已提交
328
    } else {
329
        s->dma_memory_write(s->dma_opaque, s->async_buf, len);
P
pbrook 已提交
330 331 332 333
    }
    s->dma_left -= len;
    s->async_buf += len;
    s->async_len -= len;
P
pbrook 已提交
334 335 336 337
    if (to_device)
        s->ti_size += len;
    else
        s->ti_size -= len;
P
pbrook 已提交
338
    if (s->async_len == 0) {
P
pbrook 已提交
339
        if (to_device) {
340
            // ti_size is negative
T
ths 已提交
341
            s->current_dev->write_data(s->current_dev, 0);
P
pbrook 已提交
342
        } else {
T
ths 已提交
343
            s->current_dev->read_data(s->current_dev, 0);
P
pbrook 已提交
344
            /* If there is still data to be read from the device then
B
blueswir1 已提交
345
               complete the DMA operation immediately.  Otherwise defer
P
pbrook 已提交
346 347 348 349
               until the scsi layer has completed.  */
            if (s->dma_left == 0 && s->ti_size > 0) {
                esp_dma_done(s);
            }
P
pbrook 已提交
350
        }
P
pbrook 已提交
351 352
    } else {
        /* Partially filled a scsi buffer. Complete immediately.  */
P
pbrook 已提交
353 354
        esp_dma_done(s);
    }
P
pbrook 已提交
355 356
}

P
pbrook 已提交
357 358
static void esp_command_complete(void *opaque, int reason, uint32_t tag,
                                 uint32_t arg)
P
pbrook 已提交
359 360 361
{
    ESPState *s = (ESPState *)opaque;

P
pbrook 已提交
362 363 364 365 366
    if (reason == SCSI_REASON_DONE) {
        DPRINTF("SCSI Command complete\n");
        if (s->ti_size != 0)
            DPRINTF("SCSI command completed unexpectedly\n");
        s->ti_size = 0;
P
pbrook 已提交
367 368 369
        s->dma_left = 0;
        s->async_len = 0;
        if (arg)
P
pbrook 已提交
370
            DPRINTF("Command failed\n");
P
pbrook 已提交
371
        s->sense = arg;
372
        s->rregs[ESP_RSTAT] = STAT_ST;
P
pbrook 已提交
373 374
        esp_dma_done(s);
        s->current_dev = NULL;
P
pbrook 已提交
375 376
    } else {
        DPRINTF("transfer %d/%d\n", s->dma_left, s->ti_size);
P
pbrook 已提交
377
        s->async_len = arg;
T
ths 已提交
378
        s->async_buf = s->current_dev->get_buf(s->current_dev, 0);
P
pbrook 已提交
379
        if (s->dma_left) {
P
pbrook 已提交
380
            esp_do_dma(s);
P
pbrook 已提交
381 382 383 384 385
        } else if (s->dma_counter != 0 && s->ti_size <= 0) {
            /* If this was the last part of a DMA transfer then the
               completion interrupt is deferred to here.  */
            esp_dma_done(s);
        }
P
pbrook 已提交
386
    }
P
pbrook 已提交
387 388
}

B
bellard 已提交
389 390
static void handle_ti(ESPState *s)
{
P
pbrook 已提交
391
    uint32_t dmalen, minlen;
B
bellard 已提交
392

393
    dmalen = s->rregs[ESP_TCLO] | (s->rregs[ESP_TCMID] << 8);
P
pbrook 已提交
394 395 396
    if (dmalen==0) {
      dmalen=0x10000;
    }
P
pbrook 已提交
397
    s->dma_counter = dmalen;
P
pbrook 已提交
398

P
pbrook 已提交
399 400
    if (s->do_cmd)
        minlen = (dmalen < 32) ? dmalen : 32;
401 402
    else if (s->ti_size < 0)
        minlen = (dmalen < -s->ti_size) ? dmalen : -s->ti_size;
P
pbrook 已提交
403 404
    else
        minlen = (dmalen < s->ti_size) ? dmalen : s->ti_size;
P
pbrook 已提交
405
    DPRINTF("Transfer Information len %d\n", minlen);
406
    if (s->dma) {
P
pbrook 已提交
407
        s->dma_left = minlen;
408
        s->rregs[ESP_RSTAT] &= ~STAT_TC;
P
pbrook 已提交
409
        esp_do_dma(s);
P
pbrook 已提交
410 411 412 413 414 415 416 417
    } else if (s->do_cmd) {
        DPRINTF("command len %d\n", s->cmdlen);
        s->ti_size = 0;
        s->cmdlen = 0;
        s->do_cmd = 0;
        do_cmd(s, s->cmdbuf);
        return;
    }
B
bellard 已提交
418 419
}

B
blueswir1 已提交
420
static void esp_reset(void *opaque)
B
bellard 已提交
421 422
{
    ESPState *s = opaque;
423

B
blueswir1 已提交
424 425
    memset(s->rregs, 0, ESP_REGS);
    memset(s->wregs, 0, ESP_REGS);
426
    s->rregs[ESP_TCHI] = TCHI_FAS100A; // Indicate fas100a
P
pbrook 已提交
427 428 429 430
    s->ti_size = 0;
    s->ti_rptr = 0;
    s->ti_wptr = 0;
    s->dma = 0;
P
pbrook 已提交
431
    s->do_cmd = 0;
B
blueswir1 已提交
432 433

    s->rregs[ESP_CFG1] = 7;
B
bellard 已提交
434 435
}

436 437 438 439 440 441
static void parent_esp_reset(void *opaque, int irq, int level)
{
    if (level)
        esp_reset(opaque);
}

B
bellard 已提交
442 443 444
static uint32_t esp_mem_readb(void *opaque, target_phys_addr_t addr)
{
    ESPState *s = opaque;
B
Blue Swirl 已提交
445
    uint32_t saddr, old_val;
B
bellard 已提交
446

B
blueswir1 已提交
447
    saddr = addr >> s->it_shift;
B
bellard 已提交
448
    DPRINTF("read reg[%d]: 0x%2.2x\n", saddr, s->rregs[saddr]);
B
bellard 已提交
449
    switch (saddr) {
450
    case ESP_FIFO:
B
blueswir1 已提交
451 452
        if (s->ti_size > 0) {
            s->ti_size--;
453
            if ((s->rregs[ESP_RSTAT] & STAT_PIO_MASK) == 0) {
B
blueswir1 已提交
454 455
                /* Data out.  */
                ESP_ERROR("PIO data read not implemented\n");
456
                s->rregs[ESP_FIFO] = 0;
P
pbrook 已提交
457
            } else {
458
                s->rregs[ESP_FIFO] = s->ti_buf[s->ti_rptr++];
P
pbrook 已提交
459
            }
B
blueswir1 已提交
460
            esp_raise_irq(s);
B
blueswir1 已提交
461 462
        }
        if (s->ti_size == 0) {
463 464 465
            s->ti_rptr = 0;
            s->ti_wptr = 0;
        }
B
blueswir1 已提交
466
        break;
467
    case ESP_RINTR:
B
Blue Swirl 已提交
468 469 470 471 472 473
        /* Clear sequence step, interrupt register and all status bits
           except TC */
        old_val = s->rregs[ESP_RINTR];
        s->rregs[ESP_RINTR] = 0;
        s->rregs[ESP_RSTAT] &= ~STAT_TC;
        s->rregs[ESP_RSEQ] = SEQ_CD;
B
blueswir1 已提交
474
        esp_lower_irq(s);
B
Blue Swirl 已提交
475 476

        return old_val;
B
bellard 已提交
477
    default:
B
blueswir1 已提交
478
        break;
B
bellard 已提交
479
    }
B
bellard 已提交
480
    return s->rregs[saddr];
B
bellard 已提交
481 482 483 484 485 486 487
}

static void esp_mem_writeb(void *opaque, target_phys_addr_t addr, uint32_t val)
{
    ESPState *s = opaque;
    uint32_t saddr;

B
blueswir1 已提交
488
    saddr = addr >> s->it_shift;
489 490
    DPRINTF("write reg[%d]: 0x%2.2x -> 0x%2.2x\n", saddr, s->wregs[saddr],
            val);
B
bellard 已提交
491
    switch (saddr) {
492 493 494
    case ESP_TCLO:
    case ESP_TCMID:
        s->rregs[ESP_RSTAT] &= ~STAT_TC;
495
        break;
496
    case ESP_FIFO:
P
pbrook 已提交
497 498
        if (s->do_cmd) {
            s->cmdbuf[s->cmdlen++] = val & 0xff;
B
blueswir1 已提交
499 500
        } else if (s->ti_size == TI_BUFSZ - 1) {
            ESP_ERROR("fifo overrun\n");
P
pbrook 已提交
501 502 503 504
        } else {
            s->ti_size++;
            s->ti_buf[s->ti_wptr++] = val & 0xff;
        }
B
blueswir1 已提交
505
        break;
506
    case ESP_CMD:
507
        s->rregs[saddr] = val;
508
        if (val & CMD_DMA) {
B
blueswir1 已提交
509
            s->dma = 1;
P
pbrook 已提交
510
            /* Reload DMA counter.  */
511 512
            s->rregs[ESP_TCLO] = s->wregs[ESP_TCLO];
            s->rregs[ESP_TCMID] = s->wregs[ESP_TCMID];
B
blueswir1 已提交
513 514 515
        } else {
            s->dma = 0;
        }
516 517
        switch(val & CMD_CMD) {
        case CMD_NOP:
B
blueswir1 已提交
518 519
            DPRINTF("NOP (%2.2x)\n", val);
            break;
520
        case CMD_FLUSH:
B
blueswir1 已提交
521
            DPRINTF("Flush FIFO (%2.2x)\n", val);
B
bellard 已提交
522
            //s->ti_size = 0;
523 524
            s->rregs[ESP_RINTR] = INTR_FC;
            s->rregs[ESP_RSEQ] = 0;
525
            s->rregs[ESP_RFLAGS] = 0;
B
blueswir1 已提交
526
            break;
527
        case CMD_RESET:
B
blueswir1 已提交
528 529 530
            DPRINTF("Chip reset (%2.2x)\n", val);
            esp_reset(s);
            break;
531
        case CMD_BUSRESET:
B
blueswir1 已提交
532
            DPRINTF("Bus reset (%2.2x)\n", val);
533 534
            s->rregs[ESP_RINTR] = INTR_RST;
            if (!(s->wregs[ESP_CFG1] & CFG1_RESREPT)) {
B
blueswir1 已提交
535
                esp_raise_irq(s);
B
bellard 已提交
536
            }
B
blueswir1 已提交
537
            break;
538
        case CMD_TI:
B
blueswir1 已提交
539 540
            handle_ti(s);
            break;
541
        case CMD_ICCS:
B
blueswir1 已提交
542 543
            DPRINTF("Initiator Command Complete Sequence (%2.2x)\n", val);
            write_response(s);
B
blueswir1 已提交
544 545
            s->rregs[ESP_RINTR] = INTR_FC;
            s->rregs[ESP_RSTAT] |= STAT_MI;
B
blueswir1 已提交
546
            break;
547
        case CMD_MSGACC:
B
blueswir1 已提交
548
            DPRINTF("Message Accepted (%2.2x)\n", val);
549 550
            s->rregs[ESP_RINTR] = INTR_DC;
            s->rregs[ESP_RSEQ] = 0;
551 552
            s->rregs[ESP_RFLAGS] = 0;
            esp_raise_irq(s);
B
blueswir1 已提交
553
            break;
B
Blue Swirl 已提交
554 555 556 557 558 559
        case CMD_PAD:
            DPRINTF("Transfer padding (%2.2x)\n", val);
            s->rregs[ESP_RSTAT] = STAT_TC;
            s->rregs[ESP_RINTR] = INTR_FC;
            s->rregs[ESP_RSEQ] = 0;
            break;
560
        case CMD_SATN:
B
blueswir1 已提交
561 562
            DPRINTF("Set ATN (%2.2x)\n", val);
            break;
563 564
        case CMD_SEL:
            DPRINTF("Select without ATN (%2.2x)\n", val);
565
            handle_s_without_atn(s);
566
            break;
567
        case CMD_SELATN:
568
            DPRINTF("Select with ATN (%2.2x)\n", val);
B
blueswir1 已提交
569 570
            handle_satn(s);
            break;
571
        case CMD_SELATNS:
572
            DPRINTF("Select with ATN & stop (%2.2x)\n", val);
B
blueswir1 已提交
573 574
            handle_satn_stop(s);
            break;
575
        case CMD_ENSEL:
B
blueswir1 已提交
576
            DPRINTF("Enable selection (%2.2x)\n", val);
577
            s->rregs[ESP_RINTR] = 0;
B
blueswir1 已提交
578
            break;
B
blueswir1 已提交
579
        default:
B
blueswir1 已提交
580
            ESP_ERROR("Unhandled ESP command (%2.2x)\n", val);
B
blueswir1 已提交
581 582 583
            break;
        }
        break;
584
    case ESP_WBUSID ... ESP_WSYNO:
B
blueswir1 已提交
585
        break;
586
    case ESP_CFG1:
587 588
        s->rregs[saddr] = val;
        break;
589
    case ESP_WCCF ... ESP_WTEST:
590
        break;
591
    case ESP_CFG2 ... ESP_RES4:
592 593
        s->rregs[saddr] = val;
        break;
B
bellard 已提交
594
    default:
B
blueswir1 已提交
595 596
        ESP_ERROR("invalid write of 0x%02x at [0x%x]\n", val, saddr);
        return;
B
bellard 已提交
597
    }
B
bellard 已提交
598
    s->wregs[saddr] = val;
B
bellard 已提交
599 600
}

601
static CPUReadMemoryFunc * const esp_mem_read[3] = {
B
bellard 已提交
602
    esp_mem_readb,
603 604
    NULL,
    NULL,
B
bellard 已提交
605 606
};

607
static CPUWriteMemoryFunc * const esp_mem_write[3] = {
B
bellard 已提交
608
    esp_mem_writeb,
609
    NULL,
610
    esp_mem_writeb,
B
bellard 已提交
611 612 613 614 615
};

static void esp_save(QEMUFile *f, void *opaque)
{
    ESPState *s = opaque;
B
bellard 已提交
616

B
blueswir1 已提交
617 618
    qemu_put_buffer(f, s->rregs, ESP_REGS);
    qemu_put_buffer(f, s->wregs, ESP_REGS);
B
blueswir1 已提交
619
    qemu_put_sbe32s(f, &s->ti_size);
620 621 622
    qemu_put_be32s(f, &s->ti_rptr);
    qemu_put_be32s(f, &s->ti_wptr);
    qemu_put_buffer(f, s->ti_buf, TI_BUFSZ);
B
blueswir1 已提交
623
    qemu_put_be32s(f, &s->sense);
624
    qemu_put_be32s(f, &s->dma);
B
blueswir1 已提交
625 626 627 628 629
    qemu_put_buffer(f, s->cmdbuf, TI_BUFSZ);
    qemu_put_be32s(f, &s->cmdlen);
    qemu_put_be32s(f, &s->do_cmd);
    qemu_put_be32s(f, &s->dma_left);
    // There should be no transfers in progress, so dma_counter is not saved
B
bellard 已提交
630 631 632 633 634
}

static int esp_load(QEMUFile *f, void *opaque, int version_id)
{
    ESPState *s = opaque;
635

B
blueswir1 已提交
636 637
    if (version_id != 3)
        return -EINVAL; // Cannot emulate 2
B
bellard 已提交
638

B
blueswir1 已提交
639 640
    qemu_get_buffer(f, s->rregs, ESP_REGS);
    qemu_get_buffer(f, s->wregs, ESP_REGS);
B
blueswir1 已提交
641
    qemu_get_sbe32s(f, &s->ti_size);
642 643 644
    qemu_get_be32s(f, &s->ti_rptr);
    qemu_get_be32s(f, &s->ti_wptr);
    qemu_get_buffer(f, s->ti_buf, TI_BUFSZ);
B
blueswir1 已提交
645
    qemu_get_be32s(f, &s->sense);
646
    qemu_get_be32s(f, &s->dma);
B
blueswir1 已提交
647 648 649 650
    qemu_get_buffer(f, s->cmdbuf, TI_BUFSZ);
    qemu_get_be32s(f, &s->cmdlen);
    qemu_get_be32s(f, &s->do_cmd);
    qemu_get_be32s(f, &s->dma_left);
B
bellard 已提交
651

B
bellard 已提交
652 653 654
    return 0;
}

P
Paul Brook 已提交
655
static void esp_scsi_attach(DeviceState *host, BlockDriverState *bd, int id)
T
ths 已提交
656
{
P
Paul Brook 已提交
657
    ESPState *s = FROM_SYSBUS(ESPState, sysbus_from_qdev(host));
T
ths 已提交
658 659 660

    if (id < 0) {
        for (id = 0; id < ESP_MAX_DEVS; id++) {
B
blueswir1 已提交
661 662
            if (id == (s->rregs[ESP_CFG1] & 0x7))
                continue;
T
ths 已提交
663 664 665 666 667 668 669 670 671 672
            if (s->scsi_dev[id] == NULL)
                break;
        }
    }
    if (id >= ESP_MAX_DEVS) {
        DPRINTF("Bad Device ID %d\n", id);
        return;
    }
    if (s->scsi_dev[id]) {
        DPRINTF("Destroying device %d\n", id);
T
ths 已提交
673
        s->scsi_dev[id]->destroy(s->scsi_dev[id]);
T
ths 已提交
674 675 676
    }
    DPRINTF("Attaching block device %d\n", id);
    /* Command queueing is not implemented.  */
677 678 679
    s->scsi_dev[id] = scsi_generic_init(bd, 0, esp_command_complete, s);
    if (s->scsi_dev[id] == NULL)
        s->scsi_dev[id] = scsi_disk_init(bd, 0, esp_command_complete, s);
T
ths 已提交
680 681
}

P
Paul Brook 已提交
682 683 684 685
void esp_init(target_phys_addr_t espaddr, int it_shift,
              espdma_memory_read_write dma_memory_read,
              espdma_memory_read_write dma_memory_write,
              void *dma_opaque, qemu_irq irq, qemu_irq *reset)
B
bellard 已提交
686
{
P
Paul Brook 已提交
687 688
    DeviceState *dev;
    SysBusDevice *s;
G
Gerd Hoffmann 已提交
689
    ESPState *esp;
P
Paul Brook 已提交
690 691

    dev = qdev_create(NULL, "esp");
G
Gerd Hoffmann 已提交
692 693 694 695 696
    esp = DO_UPCAST(ESPState, busdev.qdev, dev);
    esp->dma_memory_read = dma_memory_read;
    esp->dma_memory_write = dma_memory_write;
    esp->dma_opaque = dma_opaque;
    esp->it_shift = it_shift;
P
Paul Brook 已提交
697 698 699 700
    qdev_init(dev);
    s = sysbus_from_qdev(dev);
    sysbus_connect_irq(s, 0, irq);
    sysbus_mmio_map(s, 0, espaddr);
701
    *reset = qdev_get_gpio_in(dev, 0);
P
Paul Brook 已提交
702
}
B
bellard 已提交
703

704
static int esp_init1(SysBusDevice *dev)
P
Paul Brook 已提交
705 706 707
{
    ESPState *s = FROM_SYSBUS(ESPState, dev);
    int esp_io_memory;
B
bellard 已提交
708

P
Paul Brook 已提交
709 710
    sysbus_init_irq(dev, &s->irq);
    assert(s->it_shift != -1);
B
bellard 已提交
711

712
    esp_io_memory = cpu_register_io_memory(esp_mem_read, esp_mem_write, s);
P
Paul Brook 已提交
713
    sysbus_init_mmio(dev, ESP_REGS << s->it_shift, esp_io_memory);
B
bellard 已提交
714 715 716

    esp_reset(s);

P
Paul Brook 已提交
717
    register_savevm("esp", -1, 3, esp_save, esp_load, s);
718
    qemu_register_reset(esp_reset, s);
B
bellard 已提交
719

P
Paul Brook 已提交
720
    qdev_init_gpio_in(&dev->qdev, parent_esp_reset, 1);
721

P
Paul Brook 已提交
722
    scsi_bus_new(&dev->qdev, esp_scsi_attach);
723
    return 0;
724
}
P
Paul Brook 已提交
725 726 727 728 729 730 731

static void esp_register_devices(void)
{
    sysbus_register_dev("esp", sizeof(ESPState), esp_init1);
}

device_init(esp_register_devices)