esp.c 20.1 KB
Newer Older
B
bellard 已提交
1
/*
2
 * QEMU ESP/NCR53C9x emulation
3
 *
P
pbrook 已提交
4
 * Copyright (c) 2005-2006 Fabrice Bellard
5
 *
B
bellard 已提交
6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */
24

P
Paul Brook 已提交
25
#include "sysbus.h"
G
Gerd Hoffmann 已提交
26
#include "scsi.h"
G
Gerd Hoffmann 已提交
27
#include "esp.h"
B
bellard 已提交
28 29

/* debug ESP card */
B
bellard 已提交
30
//#define DEBUG_ESP
B
bellard 已提交
31

32
/*
33 34
 * On Sparc32, this is the ESP (NCR53C90) part of chip STP2000 (Master I/O),
 * also produced as NCR89C100. See
35 36 37 38 39
 * http://www.ibiblio.org/pub/historic-linux/early-ports/Sparc/NCR/NCR89C100.txt
 * and
 * http://www.ibiblio.org/pub/historic-linux/early-ports/Sparc/NCR/NCR53C9X.txt
 */

B
bellard 已提交
40
#ifdef DEBUG_ESP
41 42
#define DPRINTF(fmt, ...)                                       \
    do { printf("ESP: " fmt , ## __VA_ARGS__); } while (0)
B
bellard 已提交
43
#else
44
#define DPRINTF(fmt, ...) do {} while (0)
B
bellard 已提交
45 46
#endif

47 48
#define ESP_ERROR(fmt, ...)                                             \
    do { printf("ESP ERROR: %s: " fmt, __func__ , ## __VA_ARGS__); } while (0)
B
blueswir1 已提交
49

B
blueswir1 已提交
50
#define ESP_REGS 16
B
blueswir1 已提交
51
#define TI_BUFSZ 16
52

P
pbrook 已提交
53
typedef struct ESPState ESPState;
B
bellard 已提交
54

P
pbrook 已提交
55
struct ESPState {
P
Paul Brook 已提交
56
    SysBusDevice busdev;
B
blueswir1 已提交
57 58
    uint8_t rregs[ESP_REGS];
    uint8_t wregs[ESP_REGS];
59 60
    qemu_irq irq;
    uint32_t it_shift;
61
    int32_t ti_size;
62
    uint32_t ti_rptr, ti_wptr;
P
Paolo Bonzini 已提交
63
    uint32_t status;
B
blueswir1 已提交
64
    uint32_t dma;
65
    uint8_t ti_buf[TI_BUFSZ];
66
    SCSIBus bus;
P
pbrook 已提交
67
    SCSIDevice *current_dev;
68
    SCSIRequest *current_req;
P
pbrook 已提交
69
    uint8_t cmdbuf[TI_BUFSZ];
B
blueswir1 已提交
70 71
    uint32_t cmdlen;
    uint32_t do_cmd;
P
pbrook 已提交
72

P
pbrook 已提交
73
    /* The amount of data left in the current DMA transfer.  */
P
pbrook 已提交
74
    uint32_t dma_left;
P
pbrook 已提交
75 76 77
    /* The size of the current DMA transfer.  Zero if no transfer is in
       progress.  */
    uint32_t dma_counter;
78 79
    int dma_enabled;

P
pbrook 已提交
80
    uint32_t async_len;
81
    uint8_t *async_buf;
82

83 84
    ESPDMAMemoryReadWriteFunc dma_memory_read;
    ESPDMAMemoryReadWriteFunc dma_memory_write;
85
    void *dma_opaque;
86
    void (*dma_cb)(ESPState *s);
P
pbrook 已提交
87
};
B
bellard 已提交
88

89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121
#define ESP_TCLO   0x0
#define ESP_TCMID  0x1
#define ESP_FIFO   0x2
#define ESP_CMD    0x3
#define ESP_RSTAT  0x4
#define ESP_WBUSID 0x4
#define ESP_RINTR  0x5
#define ESP_WSEL   0x5
#define ESP_RSEQ   0x6
#define ESP_WSYNTP 0x6
#define ESP_RFLAGS 0x7
#define ESP_WSYNO  0x7
#define ESP_CFG1   0x8
#define ESP_RRES1  0x9
#define ESP_WCCF   0x9
#define ESP_RRES2  0xa
#define ESP_WTEST  0xa
#define ESP_CFG2   0xb
#define ESP_CFG3   0xc
#define ESP_RES3   0xd
#define ESP_TCHI   0xe
#define ESP_RES4   0xf

#define CMD_DMA 0x80
#define CMD_CMD 0x7f

#define CMD_NOP      0x00
#define CMD_FLUSH    0x01
#define CMD_RESET    0x02
#define CMD_BUSRESET 0x03
#define CMD_TI       0x10
#define CMD_ICCS     0x11
#define CMD_MSGACC   0x12
B
Blue Swirl 已提交
122
#define CMD_PAD      0x18
123
#define CMD_SATN     0x1a
124
#define CMD_SEL      0x41
125 126 127 128
#define CMD_SELATN   0x42
#define CMD_SELATNS  0x43
#define CMD_ENSEL    0x44

B
bellard 已提交
129 130 131 132
#define STAT_DO 0x00
#define STAT_DI 0x01
#define STAT_CD 0x02
#define STAT_ST 0x03
B
blueswir1 已提交
133 134
#define STAT_MO 0x06
#define STAT_MI 0x07
135
#define STAT_PIO_MASK 0x06
B
bellard 已提交
136 137

#define STAT_TC 0x10
P
pbrook 已提交
138 139
#define STAT_PE 0x20
#define STAT_GE 0x40
B
blueswir1 已提交
140
#define STAT_INT 0x80
B
bellard 已提交
141

B
blueswir1 已提交
142 143
#define BUSID_DID 0x07

B
bellard 已提交
144 145 146
#define INTR_FC 0x08
#define INTR_BS 0x10
#define INTR_DC 0x20
B
bellard 已提交
147
#define INTR_RST 0x80
B
bellard 已提交
148 149 150 151

#define SEQ_0 0x0
#define SEQ_CD 0x4

152 153 154 155
#define CFG1_RESREPT 0x40

#define TCHI_FAS100A 0x4

B
blueswir1 已提交
156 157 158 159 160
static void esp_raise_irq(ESPState *s)
{
    if (!(s->rregs[ESP_RSTAT] & STAT_INT)) {
        s->rregs[ESP_RSTAT] |= STAT_INT;
        qemu_irq_raise(s->irq);
B
Blue Swirl 已提交
161
        DPRINTF("Raise IRQ\n");
B
blueswir1 已提交
162 163 164 165 166 167 168 169
    }
}

static void esp_lower_irq(ESPState *s)
{
    if (s->rregs[ESP_RSTAT] & STAT_INT) {
        s->rregs[ESP_RSTAT] &= ~STAT_INT;
        qemu_irq_lower(s->irq);
B
Blue Swirl 已提交
170
        DPRINTF("Lower IRQ\n");
B
blueswir1 已提交
171 172 173
    }
}

174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191
static void esp_dma_enable(void *opaque, int irq, int level)
{
    DeviceState *d = opaque;
    ESPState *s = container_of(d, ESPState, busdev.qdev);

    if (level) {
        s->dma_enabled = 1;
        DPRINTF("Raise enable\n");
        if (s->dma_cb) {
            s->dma_cb(s);
            s->dma_cb = NULL;
        }
    } else {
        DPRINTF("Lower enable\n");
        s->dma_enabled = 0;
    }
}

P
Paolo Bonzini 已提交
192 193 194 195 196 197 198 199 200 201 202
static void esp_request_cancelled(SCSIRequest *req)
{
    ESPState *s = DO_UPCAST(ESPState, busdev.qdev, req->bus->qbus.parent);

    if (req == s->current_req) {
        scsi_req_unref(s->current_req);
        s->current_req = NULL;
        s->current_dev = NULL;
    }
}

B
blueswir1 已提交
203
static uint32_t get_cmd(ESPState *s, uint8_t *buf)
B
bellard 已提交
204
{
P
pbrook 已提交
205
    uint32_t dmalen;
B
bellard 已提交
206 207
    int target;

B
blueswir1 已提交
208
    target = s->wregs[ESP_WBUSID] & BUSID_DID;
209
    if (s->dma) {
210
        dmalen = s->rregs[ESP_TCLO] | (s->rregs[ESP_TCMID] << 8);
211
        s->dma_memory_read(s->dma_opaque, buf, dmalen);
212
    } else {
213 214
        dmalen = s->ti_size;
        memcpy(buf, s->ti_buf, dmalen);
215
        buf[0] = buf[2] >> 5;
216
    }
217
    DPRINTF("get_cmd: len %d target %d\n", dmalen, target);
P
pbrook 已提交
218

B
bellard 已提交
219
    s->ti_size = 0;
220 221
    s->ti_rptr = 0;
    s->ti_wptr = 0;
B
bellard 已提交
222

223
    if (s->current_req) {
P
pbrook 已提交
224
        /* Started a new command before the old one finished.  Cancel it.  */
P
Paolo Bonzini 已提交
225
        scsi_req_cancel(s->current_req);
P
pbrook 已提交
226 227 228
        s->async_len = 0;
    }

229
    if (target >= ESP_MAX_DEVS || !s->bus.devs[target]) {
P
pbrook 已提交
230
        // No such drive
B
blueswir1 已提交
231
        s->rregs[ESP_RSTAT] = 0;
232 233
        s->rregs[ESP_RINTR] = INTR_DC;
        s->rregs[ESP_RSEQ] = SEQ_0;
B
blueswir1 已提交
234
        esp_raise_irq(s);
B
blueswir1 已提交
235
        return 0;
B
bellard 已提交
236
    }
237
    s->current_dev = s->bus.devs[target];
P
pbrook 已提交
238 239 240
    return dmalen;
}

241
static void do_busid_cmd(ESPState *s, uint8_t *buf, uint8_t busid)
P
pbrook 已提交
242 243 244 245
{
    int32_t datalen;
    int lun;

246 247
    DPRINTF("do_busid_cmd: busid 0x%x\n", busid);
    lun = busid & 7;
248 249
    s->current_req = scsi_req_new(s->current_dev, 0, lun, buf, NULL);
    datalen = scsi_req_enqueue(s->current_req);
250 251
    s->ti_size = datalen;
    if (datalen != 0) {
B
blueswir1 已提交
252
        s->rregs[ESP_RSTAT] = STAT_TC;
P
pbrook 已提交
253
        s->dma_left = 0;
P
pbrook 已提交
254
        s->dma_counter = 0;
P
pbrook 已提交
255
        if (datalen > 0) {
256
            s->rregs[ESP_RSTAT] |= STAT_DI;
P
pbrook 已提交
257
        } else {
258
            s->rregs[ESP_RSTAT] |= STAT_DO;
B
bellard 已提交
259
        }
260
        scsi_req_continue(s->current_req);
B
bellard 已提交
261
    }
262 263
    s->rregs[ESP_RINTR] = INTR_BS | INTR_FC;
    s->rregs[ESP_RSEQ] = SEQ_CD;
B
blueswir1 已提交
264
    esp_raise_irq(s);
B
bellard 已提交
265 266
}

267 268 269 270 271 272 273
static void do_cmd(ESPState *s, uint8_t *buf)
{
    uint8_t busid = buf[0];

    do_busid_cmd(s, &buf[1], busid);
}

P
pbrook 已提交
274 275 276 277 278
static void handle_satn(ESPState *s)
{
    uint8_t buf[32];
    int len;

279 280 281 282
    if (!s->dma_enabled) {
        s->dma_cb = handle_satn;
        return;
    }
P
pbrook 已提交
283 284 285 286 287
    len = get_cmd(s, buf);
    if (len)
        do_cmd(s, buf);
}

288 289 290 291 292
static void handle_s_without_atn(ESPState *s)
{
    uint8_t buf[32];
    int len;

293 294 295 296
    if (!s->dma_enabled) {
        s->dma_cb = handle_s_without_atn;
        return;
    }
297 298 299 300 301 302
    len = get_cmd(s, buf);
    if (len) {
        do_busid_cmd(s, buf, 0);
    }
}

P
pbrook 已提交
303 304
static void handle_satn_stop(ESPState *s)
{
305 306 307 308
    if (!s->dma_enabled) {
        s->dma_cb = handle_satn_stop;
        return;
    }
P
pbrook 已提交
309 310 311 312
    s->cmdlen = get_cmd(s, s->cmdbuf);
    if (s->cmdlen) {
        DPRINTF("Set ATN & Stop: cmdlen %d\n", s->cmdlen);
        s->do_cmd = 1;
B
blueswir1 已提交
313
        s->rregs[ESP_RSTAT] = STAT_TC | STAT_CD;
314 315
        s->rregs[ESP_RINTR] = INTR_BS | INTR_FC;
        s->rregs[ESP_RSEQ] = SEQ_CD;
B
blueswir1 已提交
316
        esp_raise_irq(s);
P
pbrook 已提交
317 318 319
    }
}

P
pbrook 已提交
320
static void write_response(ESPState *s)
B
bellard 已提交
321
{
P
Paolo Bonzini 已提交
322 323
    DPRINTF("Transfer status (status=%d)\n", s->status);
    s->ti_buf[0] = s->status;
P
pbrook 已提交
324
    s->ti_buf[1] = 0;
325
    if (s->dma) {
326
        s->dma_memory_write(s->dma_opaque, s->ti_buf, 2);
B
blueswir1 已提交
327
        s->rregs[ESP_RSTAT] = STAT_TC | STAT_ST;
328 329
        s->rregs[ESP_RINTR] = INTR_BS | INTR_FC;
        s->rregs[ESP_RSEQ] = SEQ_CD;
330
    } else {
B
blueswir1 已提交
331 332 333
        s->ti_size = 2;
        s->ti_rptr = 0;
        s->ti_wptr = 0;
334
        s->rregs[ESP_RFLAGS] = 2;
335
    }
B
blueswir1 已提交
336
    esp_raise_irq(s);
B
bellard 已提交
337
}
338

P
pbrook 已提交
339 340
static void esp_dma_done(ESPState *s)
{
B
blueswir1 已提交
341
    s->rregs[ESP_RSTAT] |= STAT_TC;
342 343 344 345 346
    s->rregs[ESP_RINTR] = INTR_BS;
    s->rregs[ESP_RSEQ] = 0;
    s->rregs[ESP_RFLAGS] = 0;
    s->rregs[ESP_TCLO] = 0;
    s->rregs[ESP_TCMID] = 0;
B
blueswir1 已提交
347
    esp_raise_irq(s);
P
pbrook 已提交
348 349
}

P
pbrook 已提交
350 351
static void esp_do_dma(ESPState *s)
{
352
    uint32_t len;
P
pbrook 已提交
353
    int to_device;
P
pbrook 已提交
354

355
    to_device = (s->ti_size < 0);
P
pbrook 已提交
356
    len = s->dma_left;
P
pbrook 已提交
357 358
    if (s->do_cmd) {
        DPRINTF("command len %d + %d\n", s->cmdlen, len);
359
        s->dma_memory_read(s->dma_opaque, &s->cmdbuf[s->cmdlen], len);
P
pbrook 已提交
360 361 362 363 364
        s->ti_size = 0;
        s->cmdlen = 0;
        s->do_cmd = 0;
        do_cmd(s, s->cmdbuf);
        return;
P
pbrook 已提交
365 366 367 368 369 370 371 372 373
    }
    if (s->async_len == 0) {
        /* Defer until data is available.  */
        return;
    }
    if (len > s->async_len) {
        len = s->async_len;
    }
    if (to_device) {
374
        s->dma_memory_read(s->dma_opaque, s->async_buf, len);
P
pbrook 已提交
375
    } else {
376
        s->dma_memory_write(s->dma_opaque, s->async_buf, len);
P
pbrook 已提交
377 378 379 380
    }
    s->dma_left -= len;
    s->async_buf += len;
    s->async_len -= len;
P
pbrook 已提交
381 382 383 384
    if (to_device)
        s->ti_size += len;
    else
        s->ti_size -= len;
P
pbrook 已提交
385
    if (s->async_len == 0) {
386 387 388 389 390 391
        scsi_req_continue(s->current_req);
        /* If there is still data to be read from the device then
           complete the DMA operation immediately.  Otherwise defer
           until the scsi layer has completed.  */
        if (to_device || s->dma_left != 0 || s->ti_size == 0) {
            return;
P
pbrook 已提交
392
        }
P
pbrook 已提交
393
    }
394 395 396

    /* Partially filled a scsi buffer. Complete immediately.  */
    esp_dma_done(s);
P
pbrook 已提交
397 398
}

399
static void esp_command_complete(SCSIRequest *req, uint32_t status)
P
pbrook 已提交
400
{
401
    ESPState *s = DO_UPCAST(ESPState, busdev.qdev, req->bus->qbus.parent);
P
pbrook 已提交
402

403 404 405 406 407 408 409
    DPRINTF("SCSI Command complete\n");
    if (s->ti_size != 0) {
        DPRINTF("SCSI command completed unexpectedly\n");
    }
    s->ti_size = 0;
    s->dma_left = 0;
    s->async_len = 0;
410
    if (status) {
411 412
        DPRINTF("Command failed\n");
    }
413
    s->status = status;
414 415 416 417 418 419 420 421 422
    s->rregs[ESP_RSTAT] = STAT_ST;
    esp_dma_done(s);
    if (s->current_req) {
        scsi_req_unref(s->current_req);
        s->current_req = NULL;
        s->current_dev = NULL;
    }
}

423
static void esp_transfer_data(SCSIRequest *req, uint32_t len)
424 425 426 427
{
    ESPState *s = DO_UPCAST(ESPState, busdev.qdev, req->bus->qbus.parent);

    DPRINTF("transfer %d/%d\n", s->dma_left, s->ti_size);
428
    s->async_len = len;
429 430 431 432 433 434
    s->async_buf = scsi_req_get_buf(req);
    if (s->dma_left) {
        esp_do_dma(s);
    } else if (s->dma_counter != 0 && s->ti_size <= 0) {
        /* If this was the last part of a DMA transfer then the
           completion interrupt is deferred to here.  */
P
pbrook 已提交
435
        esp_dma_done(s);
P
pbrook 已提交
436
    }
P
pbrook 已提交
437 438
}

B
bellard 已提交
439 440
static void handle_ti(ESPState *s)
{
P
pbrook 已提交
441
    uint32_t dmalen, minlen;
B
bellard 已提交
442

443
    dmalen = s->rregs[ESP_TCLO] | (s->rregs[ESP_TCMID] << 8);
P
pbrook 已提交
444 445 446
    if (dmalen==0) {
      dmalen=0x10000;
    }
P
pbrook 已提交
447
    s->dma_counter = dmalen;
P
pbrook 已提交
448

P
pbrook 已提交
449 450
    if (s->do_cmd)
        minlen = (dmalen < 32) ? dmalen : 32;
451 452
    else if (s->ti_size < 0)
        minlen = (dmalen < -s->ti_size) ? dmalen : -s->ti_size;
P
pbrook 已提交
453 454
    else
        minlen = (dmalen < s->ti_size) ? dmalen : s->ti_size;
P
pbrook 已提交
455
    DPRINTF("Transfer Information len %d\n", minlen);
456
    if (s->dma) {
P
pbrook 已提交
457
        s->dma_left = minlen;
458
        s->rregs[ESP_RSTAT] &= ~STAT_TC;
P
pbrook 已提交
459
        esp_do_dma(s);
P
pbrook 已提交
460 461 462 463 464 465 466 467
    } else if (s->do_cmd) {
        DPRINTF("command len %d\n", s->cmdlen);
        s->ti_size = 0;
        s->cmdlen = 0;
        s->do_cmd = 0;
        do_cmd(s, s->cmdbuf);
        return;
    }
B
bellard 已提交
468 469
}

B
Blue Swirl 已提交
470
static void esp_hard_reset(DeviceState *d)
B
bellard 已提交
471
{
B
Blue Swirl 已提交
472
    ESPState *s = container_of(d, ESPState, busdev.qdev);
473

B
blueswir1 已提交
474 475
    memset(s->rregs, 0, ESP_REGS);
    memset(s->wregs, 0, ESP_REGS);
476
    s->rregs[ESP_TCHI] = TCHI_FAS100A; // Indicate fas100a
P
pbrook 已提交
477 478 479 480
    s->ti_size = 0;
    s->ti_rptr = 0;
    s->ti_wptr = 0;
    s->dma = 0;
P
pbrook 已提交
481
    s->do_cmd = 0;
482
    s->dma_cb = NULL;
B
blueswir1 已提交
483 484

    s->rregs[ESP_CFG1] = 7;
B
bellard 已提交
485 486
}

B
Blue Swirl 已提交
487 488 489 490 491 492 493 494
static void esp_soft_reset(DeviceState *d)
{
    ESPState *s = container_of(d, ESPState, busdev.qdev);

    qemu_irq_lower(s->irq);
    esp_hard_reset(d);
}

495 496
static void parent_esp_reset(void *opaque, int irq, int level)
{
B
Blue Swirl 已提交
497 498 499
    if (level) {
        esp_soft_reset(opaque);
    }
500 501
}

502 503 504 505 506 507 508 509 510 511 512 513
static void esp_gpio_demux(void *opaque, int irq, int level)
{
    switch (irq) {
    case 0:
        parent_esp_reset(opaque, irq, level);
        break;
    case 1:
        esp_dma_enable(opaque, irq, level);
        break;
    }
}

A
Anthony Liguori 已提交
514
static uint32_t esp_mem_readb(void *opaque, target_phys_addr_t addr)
B
bellard 已提交
515 516
{
    ESPState *s = opaque;
B
Blue Swirl 已提交
517
    uint32_t saddr, old_val;
B
bellard 已提交
518

B
blueswir1 已提交
519
    saddr = addr >> s->it_shift;
B
bellard 已提交
520
    DPRINTF("read reg[%d]: 0x%2.2x\n", saddr, s->rregs[saddr]);
B
bellard 已提交
521
    switch (saddr) {
522
    case ESP_FIFO:
B
blueswir1 已提交
523 524
        if (s->ti_size > 0) {
            s->ti_size--;
525
            if ((s->rregs[ESP_RSTAT] & STAT_PIO_MASK) == 0) {
B
blueswir1 已提交
526 527
                /* Data out.  */
                ESP_ERROR("PIO data read not implemented\n");
528
                s->rregs[ESP_FIFO] = 0;
P
pbrook 已提交
529
            } else {
530
                s->rregs[ESP_FIFO] = s->ti_buf[s->ti_rptr++];
P
pbrook 已提交
531
            }
B
blueswir1 已提交
532
            esp_raise_irq(s);
B
blueswir1 已提交
533 534
        }
        if (s->ti_size == 0) {
535 536 537
            s->ti_rptr = 0;
            s->ti_wptr = 0;
        }
B
blueswir1 已提交
538
        break;
539
    case ESP_RINTR:
B
Blue Swirl 已提交
540 541 542 543 544 545
        /* Clear sequence step, interrupt register and all status bits
           except TC */
        old_val = s->rregs[ESP_RINTR];
        s->rregs[ESP_RINTR] = 0;
        s->rregs[ESP_RSTAT] &= ~STAT_TC;
        s->rregs[ESP_RSEQ] = SEQ_CD;
B
blueswir1 已提交
546
        esp_lower_irq(s);
B
Blue Swirl 已提交
547 548

        return old_val;
B
bellard 已提交
549
    default:
B
blueswir1 已提交
550
        break;
B
bellard 已提交
551
    }
B
bellard 已提交
552
    return s->rregs[saddr];
B
bellard 已提交
553 554
}

A
Anthony Liguori 已提交
555
static void esp_mem_writeb(void *opaque, target_phys_addr_t addr, uint32_t val)
B
bellard 已提交
556 557 558 559
{
    ESPState *s = opaque;
    uint32_t saddr;

B
blueswir1 已提交
560
    saddr = addr >> s->it_shift;
561 562
    DPRINTF("write reg[%d]: 0x%2.2x -> 0x%2.2x\n", saddr, s->wregs[saddr],
            val);
B
bellard 已提交
563
    switch (saddr) {
564 565 566
    case ESP_TCLO:
    case ESP_TCMID:
        s->rregs[ESP_RSTAT] &= ~STAT_TC;
567
        break;
568
    case ESP_FIFO:
P
pbrook 已提交
569 570
        if (s->do_cmd) {
            s->cmdbuf[s->cmdlen++] = val & 0xff;
B
blueswir1 已提交
571 572
        } else if (s->ti_size == TI_BUFSZ - 1) {
            ESP_ERROR("fifo overrun\n");
P
pbrook 已提交
573 574 575 576
        } else {
            s->ti_size++;
            s->ti_buf[s->ti_wptr++] = val & 0xff;
        }
B
blueswir1 已提交
577
        break;
578
    case ESP_CMD:
579
        s->rregs[saddr] = val;
580
        if (val & CMD_DMA) {
B
blueswir1 已提交
581
            s->dma = 1;
P
pbrook 已提交
582
            /* Reload DMA counter.  */
583 584
            s->rregs[ESP_TCLO] = s->wregs[ESP_TCLO];
            s->rregs[ESP_TCMID] = s->wregs[ESP_TCMID];
B
blueswir1 已提交
585 586 587
        } else {
            s->dma = 0;
        }
588 589
        switch(val & CMD_CMD) {
        case CMD_NOP:
B
blueswir1 已提交
590 591
            DPRINTF("NOP (%2.2x)\n", val);
            break;
592
        case CMD_FLUSH:
B
blueswir1 已提交
593
            DPRINTF("Flush FIFO (%2.2x)\n", val);
B
bellard 已提交
594
            //s->ti_size = 0;
595 596
            s->rregs[ESP_RINTR] = INTR_FC;
            s->rregs[ESP_RSEQ] = 0;
597
            s->rregs[ESP_RFLAGS] = 0;
B
blueswir1 已提交
598
            break;
599
        case CMD_RESET:
B
blueswir1 已提交
600
            DPRINTF("Chip reset (%2.2x)\n", val);
B
Blue Swirl 已提交
601
            esp_soft_reset(&s->busdev.qdev);
B
blueswir1 已提交
602
            break;
603
        case CMD_BUSRESET:
B
blueswir1 已提交
604
            DPRINTF("Bus reset (%2.2x)\n", val);
605 606
            s->rregs[ESP_RINTR] = INTR_RST;
            if (!(s->wregs[ESP_CFG1] & CFG1_RESREPT)) {
B
blueswir1 已提交
607
                esp_raise_irq(s);
B
bellard 已提交
608
            }
B
blueswir1 已提交
609
            break;
610
        case CMD_TI:
B
blueswir1 已提交
611 612
            handle_ti(s);
            break;
613
        case CMD_ICCS:
B
blueswir1 已提交
614 615
            DPRINTF("Initiator Command Complete Sequence (%2.2x)\n", val);
            write_response(s);
B
blueswir1 已提交
616 617
            s->rregs[ESP_RINTR] = INTR_FC;
            s->rregs[ESP_RSTAT] |= STAT_MI;
B
blueswir1 已提交
618
            break;
619
        case CMD_MSGACC:
B
blueswir1 已提交
620
            DPRINTF("Message Accepted (%2.2x)\n", val);
621 622
            s->rregs[ESP_RINTR] = INTR_DC;
            s->rregs[ESP_RSEQ] = 0;
623 624
            s->rregs[ESP_RFLAGS] = 0;
            esp_raise_irq(s);
B
blueswir1 已提交
625
            break;
B
Blue Swirl 已提交
626 627 628 629 630 631
        case CMD_PAD:
            DPRINTF("Transfer padding (%2.2x)\n", val);
            s->rregs[ESP_RSTAT] = STAT_TC;
            s->rregs[ESP_RINTR] = INTR_FC;
            s->rregs[ESP_RSEQ] = 0;
            break;
632
        case CMD_SATN:
B
blueswir1 已提交
633 634
            DPRINTF("Set ATN (%2.2x)\n", val);
            break;
635 636
        case CMD_SEL:
            DPRINTF("Select without ATN (%2.2x)\n", val);
637
            handle_s_without_atn(s);
638
            break;
639
        case CMD_SELATN:
640
            DPRINTF("Select with ATN (%2.2x)\n", val);
B
blueswir1 已提交
641 642
            handle_satn(s);
            break;
643
        case CMD_SELATNS:
644
            DPRINTF("Select with ATN & stop (%2.2x)\n", val);
B
blueswir1 已提交
645 646
            handle_satn_stop(s);
            break;
647
        case CMD_ENSEL:
B
blueswir1 已提交
648
            DPRINTF("Enable selection (%2.2x)\n", val);
649
            s->rregs[ESP_RINTR] = 0;
B
blueswir1 已提交
650
            break;
B
blueswir1 已提交
651
        default:
B
blueswir1 已提交
652
            ESP_ERROR("Unhandled ESP command (%2.2x)\n", val);
B
blueswir1 已提交
653 654 655
            break;
        }
        break;
656
    case ESP_WBUSID ... ESP_WSYNO:
B
blueswir1 已提交
657
        break;
658
    case ESP_CFG1:
659 660
        s->rregs[saddr] = val;
        break;
661
    case ESP_WCCF ... ESP_WTEST:
662
        break;
663
    case ESP_CFG2 ... ESP_RES4:
664 665
        s->rregs[saddr] = val;
        break;
B
bellard 已提交
666
    default:
B
blueswir1 已提交
667 668
        ESP_ERROR("invalid write of 0x%02x at [0x%x]\n", val, saddr);
        return;
B
bellard 已提交
669
    }
B
bellard 已提交
670
    s->wregs[saddr] = val;
B
bellard 已提交
671 672
}

673
static CPUReadMemoryFunc * const esp_mem_read[3] = {
B
bellard 已提交
674
    esp_mem_readb,
675 676
    NULL,
    NULL,
B
bellard 已提交
677 678
};

679
static CPUWriteMemoryFunc * const esp_mem_write[3] = {
B
bellard 已提交
680
    esp_mem_writeb,
681
    NULL,
682
    esp_mem_writeb,
B
bellard 已提交
683 684
};

B
Blue Swirl 已提交
685 686 687 688 689 690 691 692 693 694 695 696
static const VMStateDescription vmstate_esp = {
    .name ="esp",
    .version_id = 3,
    .minimum_version_id = 3,
    .minimum_version_id_old = 3,
    .fields      = (VMStateField []) {
        VMSTATE_BUFFER(rregs, ESPState),
        VMSTATE_BUFFER(wregs, ESPState),
        VMSTATE_INT32(ti_size, ESPState),
        VMSTATE_UINT32(ti_rptr, ESPState),
        VMSTATE_UINT32(ti_wptr, ESPState),
        VMSTATE_BUFFER(ti_buf, ESPState),
P
Paolo Bonzini 已提交
697
        VMSTATE_UINT32(status, ESPState),
B
Blue Swirl 已提交
698 699 700 701 702 703 704 705
        VMSTATE_UINT32(dma, ESPState),
        VMSTATE_BUFFER(cmdbuf, ESPState),
        VMSTATE_UINT32(cmdlen, ESPState),
        VMSTATE_UINT32(do_cmd, ESPState),
        VMSTATE_UINT32(dma_left, ESPState),
        VMSTATE_END_OF_LIST()
    }
};
B
bellard 已提交
706

A
Anthony Liguori 已提交
707
void esp_init(target_phys_addr_t espaddr, int it_shift,
708 709
              ESPDMAMemoryReadWriteFunc dma_memory_read,
              ESPDMAMemoryReadWriteFunc dma_memory_write,
710 711
              void *dma_opaque, qemu_irq irq, qemu_irq *reset,
              qemu_irq *dma_enable)
B
bellard 已提交
712
{
P
Paul Brook 已提交
713 714
    DeviceState *dev;
    SysBusDevice *s;
G
Gerd Hoffmann 已提交
715
    ESPState *esp;
P
Paul Brook 已提交
716 717

    dev = qdev_create(NULL, "esp");
G
Gerd Hoffmann 已提交
718 719 720 721 722
    esp = DO_UPCAST(ESPState, busdev.qdev, dev);
    esp->dma_memory_read = dma_memory_read;
    esp->dma_memory_write = dma_memory_write;
    esp->dma_opaque = dma_opaque;
    esp->it_shift = it_shift;
723 724
    /* XXX for now until rc4030 has been changed to use DMA enable signal */
    esp->dma_enabled = 1;
M
Markus Armbruster 已提交
725
    qdev_init_nofail(dev);
P
Paul Brook 已提交
726 727 728
    s = sysbus_from_qdev(dev);
    sysbus_connect_irq(s, 0, irq);
    sysbus_mmio_map(s, 0, espaddr);
729
    *reset = qdev_get_gpio_in(dev, 0);
730
    *dma_enable = qdev_get_gpio_in(dev, 1);
P
Paul Brook 已提交
731
}
B
bellard 已提交
732

P
Paolo Bonzini 已提交
733
static const struct SCSIBusOps esp_scsi_ops = {
734
    .transfer_data = esp_transfer_data,
P
Paolo Bonzini 已提交
735 736
    .complete = esp_command_complete,
    .cancel = esp_request_cancelled
P
Paolo Bonzini 已提交
737 738
};

739
static int esp_init1(SysBusDevice *dev)
P
Paul Brook 已提交
740 741 742
{
    ESPState *s = FROM_SYSBUS(ESPState, dev);
    int esp_io_memory;
B
bellard 已提交
743

P
Paul Brook 已提交
744 745
    sysbus_init_irq(dev, &s->irq);
    assert(s->it_shift != -1);
B
bellard 已提交
746

747 748
    esp_io_memory = cpu_register_io_memory(esp_mem_read, esp_mem_write, s,
                                           DEVICE_NATIVE_ENDIAN);
P
Paul Brook 已提交
749
    sysbus_init_mmio(dev, ESP_REGS << s->it_shift, esp_io_memory);
B
bellard 已提交
750

751
    qdev_init_gpio_in(&dev->qdev, esp_gpio_demux, 2);
752

P
Paolo Bonzini 已提交
753
    scsi_bus_new(&s->bus, &dev->qdev, 0, ESP_MAX_DEVS, &esp_scsi_ops);
754
    return scsi_bus_legacy_handle_cmdline(&s->bus);
755
}
P
Paul Brook 已提交
756

B
Blue Swirl 已提交
757 758 759 760 761
static SysBusDeviceInfo esp_info = {
    .init = esp_init1,
    .qdev.name  = "esp",
    .qdev.size  = sizeof(ESPState),
    .qdev.vmsd  = &vmstate_esp,
B
Blue Swirl 已提交
762
    .qdev.reset = esp_hard_reset,
B
Blue Swirl 已提交
763 764 765 766 767
    .qdev.props = (Property[]) {
        {.name = NULL}
    }
};

P
Paul Brook 已提交
768 769
static void esp_register_devices(void)
{
B
Blue Swirl 已提交
770
    sysbus_register_withprop(&esp_info);
P
Paul Brook 已提交
771 772 773
}

device_init(esp_register_devices)