esp.c 20.1 KB
Newer Older
B
bellard 已提交
1
/*
2
 * QEMU ESP/NCR53C9x emulation
3
 *
P
pbrook 已提交
4
 * Copyright (c) 2005-2006 Fabrice Bellard
5
 *
B
bellard 已提交
6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */
24

P
Paul Brook 已提交
25
#include "sysbus.h"
G
Gerd Hoffmann 已提交
26
#include "scsi.h"
G
Gerd Hoffmann 已提交
27
#include "esp.h"
B
bellard 已提交
28 29

/* debug ESP card */
B
bellard 已提交
30
//#define DEBUG_ESP
B
bellard 已提交
31

32
/*
33 34
 * On Sparc32, this is the ESP (NCR53C90) part of chip STP2000 (Master I/O),
 * also produced as NCR89C100. See
35 36 37 38 39
 * http://www.ibiblio.org/pub/historic-linux/early-ports/Sparc/NCR/NCR89C100.txt
 * and
 * http://www.ibiblio.org/pub/historic-linux/early-ports/Sparc/NCR/NCR53C9X.txt
 */

B
bellard 已提交
40
#ifdef DEBUG_ESP
41 42
#define DPRINTF(fmt, ...)                                       \
    do { printf("ESP: " fmt , ## __VA_ARGS__); } while (0)
B
bellard 已提交
43
#else
44
#define DPRINTF(fmt, ...) do {} while (0)
B
bellard 已提交
45 46
#endif

47 48
#define ESP_ERROR(fmt, ...)                                             \
    do { printf("ESP ERROR: %s: " fmt, __func__ , ## __VA_ARGS__); } while (0)
B
blueswir1 已提交
49

B
blueswir1 已提交
50
#define ESP_REGS 16
B
blueswir1 已提交
51
#define TI_BUFSZ 16
52

P
pbrook 已提交
53
typedef struct ESPState ESPState;
B
bellard 已提交
54

P
pbrook 已提交
55
struct ESPState {
P
Paul Brook 已提交
56
    SysBusDevice busdev;
57
    uint32_t it_shift;
58
    qemu_irq irq;
B
blueswir1 已提交
59 60
    uint8_t rregs[ESP_REGS];
    uint8_t wregs[ESP_REGS];
61
    int32_t ti_size;
62 63
    uint32_t ti_rptr, ti_wptr;
    uint8_t ti_buf[TI_BUFSZ];
P
Paolo Bonzini 已提交
64
    uint32_t status;
B
blueswir1 已提交
65
    uint32_t dma;
66
    SCSIBus bus;
P
pbrook 已提交
67
    SCSIDevice *current_dev;
68
    SCSIRequest *current_req;
P
pbrook 已提交
69
    uint8_t cmdbuf[TI_BUFSZ];
B
blueswir1 已提交
70 71
    uint32_t cmdlen;
    uint32_t do_cmd;
P
pbrook 已提交
72

P
pbrook 已提交
73
    /* The amount of data left in the current DMA transfer.  */
P
pbrook 已提交
74
    uint32_t dma_left;
P
pbrook 已提交
75 76 77
    /* The size of the current DMA transfer.  Zero if no transfer is in
       progress.  */
    uint32_t dma_counter;
P
pbrook 已提交
78
    uint8_t *async_buf;
P
pbrook 已提交
79
    uint32_t async_len;
80

81 82
    ESPDMAMemoryReadWriteFunc dma_memory_read;
    ESPDMAMemoryReadWriteFunc dma_memory_write;
83
    void *dma_opaque;
84 85
    int dma_enabled;
    void (*dma_cb)(ESPState *s);
P
pbrook 已提交
86
};
B
bellard 已提交
87

88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120
#define ESP_TCLO   0x0
#define ESP_TCMID  0x1
#define ESP_FIFO   0x2
#define ESP_CMD    0x3
#define ESP_RSTAT  0x4
#define ESP_WBUSID 0x4
#define ESP_RINTR  0x5
#define ESP_WSEL   0x5
#define ESP_RSEQ   0x6
#define ESP_WSYNTP 0x6
#define ESP_RFLAGS 0x7
#define ESP_WSYNO  0x7
#define ESP_CFG1   0x8
#define ESP_RRES1  0x9
#define ESP_WCCF   0x9
#define ESP_RRES2  0xa
#define ESP_WTEST  0xa
#define ESP_CFG2   0xb
#define ESP_CFG3   0xc
#define ESP_RES3   0xd
#define ESP_TCHI   0xe
#define ESP_RES4   0xf

#define CMD_DMA 0x80
#define CMD_CMD 0x7f

#define CMD_NOP      0x00
#define CMD_FLUSH    0x01
#define CMD_RESET    0x02
#define CMD_BUSRESET 0x03
#define CMD_TI       0x10
#define CMD_ICCS     0x11
#define CMD_MSGACC   0x12
B
Blue Swirl 已提交
121
#define CMD_PAD      0x18
122
#define CMD_SATN     0x1a
123
#define CMD_SEL      0x41
124 125 126 127
#define CMD_SELATN   0x42
#define CMD_SELATNS  0x43
#define CMD_ENSEL    0x44

B
bellard 已提交
128 129 130 131
#define STAT_DO 0x00
#define STAT_DI 0x01
#define STAT_CD 0x02
#define STAT_ST 0x03
B
blueswir1 已提交
132 133
#define STAT_MO 0x06
#define STAT_MI 0x07
134
#define STAT_PIO_MASK 0x06
B
bellard 已提交
135 136

#define STAT_TC 0x10
P
pbrook 已提交
137 138
#define STAT_PE 0x20
#define STAT_GE 0x40
B
blueswir1 已提交
139
#define STAT_INT 0x80
B
bellard 已提交
140

B
blueswir1 已提交
141 142
#define BUSID_DID 0x07

B
bellard 已提交
143 144 145
#define INTR_FC 0x08
#define INTR_BS 0x10
#define INTR_DC 0x20
B
bellard 已提交
146
#define INTR_RST 0x80
B
bellard 已提交
147 148 149 150

#define SEQ_0 0x0
#define SEQ_CD 0x4

151 152 153 154
#define CFG1_RESREPT 0x40

#define TCHI_FAS100A 0x4

B
blueswir1 已提交
155 156 157 158 159
static void esp_raise_irq(ESPState *s)
{
    if (!(s->rregs[ESP_RSTAT] & STAT_INT)) {
        s->rregs[ESP_RSTAT] |= STAT_INT;
        qemu_irq_raise(s->irq);
B
Blue Swirl 已提交
160
        DPRINTF("Raise IRQ\n");
B
blueswir1 已提交
161 162 163 164 165 166 167 168
    }
}

static void esp_lower_irq(ESPState *s)
{
    if (s->rregs[ESP_RSTAT] & STAT_INT) {
        s->rregs[ESP_RSTAT] &= ~STAT_INT;
        qemu_irq_lower(s->irq);
B
Blue Swirl 已提交
169
        DPRINTF("Lower IRQ\n");
B
blueswir1 已提交
170 171 172
    }
}

173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190
static void esp_dma_enable(void *opaque, int irq, int level)
{
    DeviceState *d = opaque;
    ESPState *s = container_of(d, ESPState, busdev.qdev);

    if (level) {
        s->dma_enabled = 1;
        DPRINTF("Raise enable\n");
        if (s->dma_cb) {
            s->dma_cb(s);
            s->dma_cb = NULL;
        }
    } else {
        DPRINTF("Lower enable\n");
        s->dma_enabled = 0;
    }
}

P
Paolo Bonzini 已提交
191 192 193 194 195 196 197 198 199 200 201
static void esp_request_cancelled(SCSIRequest *req)
{
    ESPState *s = DO_UPCAST(ESPState, busdev.qdev, req->bus->qbus.parent);

    if (req == s->current_req) {
        scsi_req_unref(s->current_req);
        s->current_req = NULL;
        s->current_dev = NULL;
    }
}

B
blueswir1 已提交
202
static uint32_t get_cmd(ESPState *s, uint8_t *buf)
B
bellard 已提交
203
{
P
pbrook 已提交
204
    uint32_t dmalen;
B
bellard 已提交
205 206
    int target;

B
blueswir1 已提交
207
    target = s->wregs[ESP_WBUSID] & BUSID_DID;
208
    if (s->dma) {
209
        dmalen = s->rregs[ESP_TCLO] | (s->rregs[ESP_TCMID] << 8);
210
        s->dma_memory_read(s->dma_opaque, buf, dmalen);
211
    } else {
212 213
        dmalen = s->ti_size;
        memcpy(buf, s->ti_buf, dmalen);
B
blueswir1 已提交
214
        buf[0] = 0;
215
    }
216
    DPRINTF("get_cmd: len %d target %d\n", dmalen, target);
P
pbrook 已提交
217

B
bellard 已提交
218
    s->ti_size = 0;
219 220
    s->ti_rptr = 0;
    s->ti_wptr = 0;
B
bellard 已提交
221

P
pbrook 已提交
222 223
    if (s->current_dev) {
        /* Started a new command before the old one finished.  Cancel it.  */
P
Paolo Bonzini 已提交
224
        scsi_req_cancel(s->current_req);
P
pbrook 已提交
225 226 227
        s->async_len = 0;
    }

228
    if (target >= ESP_MAX_DEVS || !s->bus.devs[target]) {
P
pbrook 已提交
229
        // No such drive
B
blueswir1 已提交
230
        s->rregs[ESP_RSTAT] = 0;
231 232
        s->rregs[ESP_RINTR] = INTR_DC;
        s->rregs[ESP_RSEQ] = SEQ_0;
B
blueswir1 已提交
233
        esp_raise_irq(s);
B
blueswir1 已提交
234
        return 0;
B
bellard 已提交
235
    }
236
    s->current_dev = s->bus.devs[target];
P
pbrook 已提交
237 238 239
    return dmalen;
}

240
static void do_busid_cmd(ESPState *s, uint8_t *buf, uint8_t busid)
P
pbrook 已提交
241 242 243 244
{
    int32_t datalen;
    int lun;

245 246
    DPRINTF("do_busid_cmd: busid 0x%x\n", busid);
    lun = busid & 7;
P
Paolo Bonzini 已提交
247
    s->current_req = scsi_req_new(s->current_dev, 0, lun);
248
    datalen = scsi_req_enqueue(s->current_req, buf);
249 250
    s->ti_size = datalen;
    if (datalen != 0) {
B
blueswir1 已提交
251
        s->rregs[ESP_RSTAT] = STAT_TC;
P
pbrook 已提交
252
        s->dma_left = 0;
P
pbrook 已提交
253
        s->dma_counter = 0;
P
pbrook 已提交
254
        if (datalen > 0) {
255
            s->rregs[ESP_RSTAT] |= STAT_DI;
P
pbrook 已提交
256
        } else {
257
            s->rregs[ESP_RSTAT] |= STAT_DO;
B
bellard 已提交
258
        }
259
        scsi_req_continue(s->current_req);
B
bellard 已提交
260
    }
261 262
    s->rregs[ESP_RINTR] = INTR_BS | INTR_FC;
    s->rregs[ESP_RSEQ] = SEQ_CD;
B
blueswir1 已提交
263
    esp_raise_irq(s);
B
bellard 已提交
264 265
}

266 267 268 269 270 271 272
static void do_cmd(ESPState *s, uint8_t *buf)
{
    uint8_t busid = buf[0];

    do_busid_cmd(s, &buf[1], busid);
}

P
pbrook 已提交
273 274 275 276 277
static void handle_satn(ESPState *s)
{
    uint8_t buf[32];
    int len;

278 279 280 281
    if (!s->dma_enabled) {
        s->dma_cb = handle_satn;
        return;
    }
P
pbrook 已提交
282 283 284 285 286
    len = get_cmd(s, buf);
    if (len)
        do_cmd(s, buf);
}

287 288 289 290 291
static void handle_s_without_atn(ESPState *s)
{
    uint8_t buf[32];
    int len;

292 293 294 295
    if (!s->dma_enabled) {
        s->dma_cb = handle_s_without_atn;
        return;
    }
296 297 298 299 300 301
    len = get_cmd(s, buf);
    if (len) {
        do_busid_cmd(s, buf, 0);
    }
}

P
pbrook 已提交
302 303
static void handle_satn_stop(ESPState *s)
{
304 305 306 307
    if (!s->dma_enabled) {
        s->dma_cb = handle_satn_stop;
        return;
    }
P
pbrook 已提交
308 309 310 311
    s->cmdlen = get_cmd(s, s->cmdbuf);
    if (s->cmdlen) {
        DPRINTF("Set ATN & Stop: cmdlen %d\n", s->cmdlen);
        s->do_cmd = 1;
B
blueswir1 已提交
312
        s->rregs[ESP_RSTAT] = STAT_TC | STAT_CD;
313 314
        s->rregs[ESP_RINTR] = INTR_BS | INTR_FC;
        s->rregs[ESP_RSEQ] = SEQ_CD;
B
blueswir1 已提交
315
        esp_raise_irq(s);
P
pbrook 已提交
316 317 318
    }
}

P
pbrook 已提交
319
static void write_response(ESPState *s)
B
bellard 已提交
320
{
P
Paolo Bonzini 已提交
321 322
    DPRINTF("Transfer status (status=%d)\n", s->status);
    s->ti_buf[0] = s->status;
P
pbrook 已提交
323
    s->ti_buf[1] = 0;
324
    if (s->dma) {
325
        s->dma_memory_write(s->dma_opaque, s->ti_buf, 2);
B
blueswir1 已提交
326
        s->rregs[ESP_RSTAT] = STAT_TC | STAT_ST;
327 328
        s->rregs[ESP_RINTR] = INTR_BS | INTR_FC;
        s->rregs[ESP_RSEQ] = SEQ_CD;
329
    } else {
B
blueswir1 已提交
330 331 332
        s->ti_size = 2;
        s->ti_rptr = 0;
        s->ti_wptr = 0;
333
        s->rregs[ESP_RFLAGS] = 2;
334
    }
B
blueswir1 已提交
335
    esp_raise_irq(s);
B
bellard 已提交
336
}
337

P
pbrook 已提交
338 339
static void esp_dma_done(ESPState *s)
{
B
blueswir1 已提交
340
    s->rregs[ESP_RSTAT] |= STAT_TC;
341 342 343 344 345
    s->rregs[ESP_RINTR] = INTR_BS;
    s->rregs[ESP_RSEQ] = 0;
    s->rregs[ESP_RFLAGS] = 0;
    s->rregs[ESP_TCLO] = 0;
    s->rregs[ESP_TCMID] = 0;
B
blueswir1 已提交
346
    esp_raise_irq(s);
P
pbrook 已提交
347 348
}

P
pbrook 已提交
349 350
static void esp_do_dma(ESPState *s)
{
351
    uint32_t len;
P
pbrook 已提交
352
    int to_device;
P
pbrook 已提交
353

354
    to_device = (s->ti_size < 0);
P
pbrook 已提交
355
    len = s->dma_left;
P
pbrook 已提交
356 357
    if (s->do_cmd) {
        DPRINTF("command len %d + %d\n", s->cmdlen, len);
358
        s->dma_memory_read(s->dma_opaque, &s->cmdbuf[s->cmdlen], len);
P
pbrook 已提交
359 360 361 362 363
        s->ti_size = 0;
        s->cmdlen = 0;
        s->do_cmd = 0;
        do_cmd(s, s->cmdbuf);
        return;
P
pbrook 已提交
364 365 366 367 368 369 370 371 372
    }
    if (s->async_len == 0) {
        /* Defer until data is available.  */
        return;
    }
    if (len > s->async_len) {
        len = s->async_len;
    }
    if (to_device) {
373
        s->dma_memory_read(s->dma_opaque, s->async_buf, len);
P
pbrook 已提交
374
    } else {
375
        s->dma_memory_write(s->dma_opaque, s->async_buf, len);
P
pbrook 已提交
376 377 378 379
    }
    s->dma_left -= len;
    s->async_buf += len;
    s->async_len -= len;
P
pbrook 已提交
380 381 382 383
    if (to_device)
        s->ti_size += len;
    else
        s->ti_size -= len;
P
pbrook 已提交
384
    if (s->async_len == 0) {
385 386 387 388 389 390
        scsi_req_continue(s->current_req);
        /* If there is still data to be read from the device then
           complete the DMA operation immediately.  Otherwise defer
           until the scsi layer has completed.  */
        if (to_device || s->dma_left != 0 || s->ti_size == 0) {
            return;
P
pbrook 已提交
391
        }
P
pbrook 已提交
392
    }
393 394 395

    /* Partially filled a scsi buffer. Complete immediately.  */
    esp_dma_done(s);
P
pbrook 已提交
396 397
}

398
static void esp_command_complete(SCSIRequest *req, uint32_t arg)
P
pbrook 已提交
399
{
400
    ESPState *s = DO_UPCAST(ESPState, busdev.qdev, req->bus->qbus.parent);
P
pbrook 已提交
401

402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433
    DPRINTF("SCSI Command complete\n");
    if (s->ti_size != 0) {
        DPRINTF("SCSI command completed unexpectedly\n");
    }
    s->ti_size = 0;
    s->dma_left = 0;
    s->async_len = 0;
    if (arg) {
        DPRINTF("Command failed\n");
    }
    s->status = arg;
    s->rregs[ESP_RSTAT] = STAT_ST;
    esp_dma_done(s);
    if (s->current_req) {
        scsi_req_unref(s->current_req);
        s->current_req = NULL;
        s->current_dev = NULL;
    }
}

static void esp_transfer_data(SCSIRequest *req, uint32_t arg)
{
    ESPState *s = DO_UPCAST(ESPState, busdev.qdev, req->bus->qbus.parent);

    DPRINTF("transfer %d/%d\n", s->dma_left, s->ti_size);
    s->async_len = arg;
    s->async_buf = scsi_req_get_buf(req);
    if (s->dma_left) {
        esp_do_dma(s);
    } else if (s->dma_counter != 0 && s->ti_size <= 0) {
        /* If this was the last part of a DMA transfer then the
           completion interrupt is deferred to here.  */
P
pbrook 已提交
434
        esp_dma_done(s);
P
pbrook 已提交
435
    }
P
pbrook 已提交
436 437
}

B
bellard 已提交
438 439
static void handle_ti(ESPState *s)
{
P
pbrook 已提交
440
    uint32_t dmalen, minlen;
B
bellard 已提交
441

442
    dmalen = s->rregs[ESP_TCLO] | (s->rregs[ESP_TCMID] << 8);
P
pbrook 已提交
443 444 445
    if (dmalen==0) {
      dmalen=0x10000;
    }
P
pbrook 已提交
446
    s->dma_counter = dmalen;
P
pbrook 已提交
447

P
pbrook 已提交
448 449
    if (s->do_cmd)
        minlen = (dmalen < 32) ? dmalen : 32;
450 451
    else if (s->ti_size < 0)
        minlen = (dmalen < -s->ti_size) ? dmalen : -s->ti_size;
P
pbrook 已提交
452 453
    else
        minlen = (dmalen < s->ti_size) ? dmalen : s->ti_size;
P
pbrook 已提交
454
    DPRINTF("Transfer Information len %d\n", minlen);
455
    if (s->dma) {
P
pbrook 已提交
456
        s->dma_left = minlen;
457
        s->rregs[ESP_RSTAT] &= ~STAT_TC;
P
pbrook 已提交
458
        esp_do_dma(s);
P
pbrook 已提交
459 460 461 462 463 464 465 466
    } else if (s->do_cmd) {
        DPRINTF("command len %d\n", s->cmdlen);
        s->ti_size = 0;
        s->cmdlen = 0;
        s->do_cmd = 0;
        do_cmd(s, s->cmdbuf);
        return;
    }
B
bellard 已提交
467 468
}

B
Blue Swirl 已提交
469
static void esp_hard_reset(DeviceState *d)
B
bellard 已提交
470
{
B
Blue Swirl 已提交
471
    ESPState *s = container_of(d, ESPState, busdev.qdev);
472

B
blueswir1 已提交
473 474
    memset(s->rregs, 0, ESP_REGS);
    memset(s->wregs, 0, ESP_REGS);
475
    s->rregs[ESP_TCHI] = TCHI_FAS100A; // Indicate fas100a
P
pbrook 已提交
476 477 478 479
    s->ti_size = 0;
    s->ti_rptr = 0;
    s->ti_wptr = 0;
    s->dma = 0;
P
pbrook 已提交
480
    s->do_cmd = 0;
481
    s->dma_cb = NULL;
B
blueswir1 已提交
482 483

    s->rregs[ESP_CFG1] = 7;
B
bellard 已提交
484 485
}

B
Blue Swirl 已提交
486 487 488 489 490 491 492 493
static void esp_soft_reset(DeviceState *d)
{
    ESPState *s = container_of(d, ESPState, busdev.qdev);

    qemu_irq_lower(s->irq);
    esp_hard_reset(d);
}

494 495
static void parent_esp_reset(void *opaque, int irq, int level)
{
B
Blue Swirl 已提交
496 497 498
    if (level) {
        esp_soft_reset(opaque);
    }
499 500
}

501 502 503 504 505 506 507 508 509 510 511 512
static void esp_gpio_demux(void *opaque, int irq, int level)
{
    switch (irq) {
    case 0:
        parent_esp_reset(opaque, irq, level);
        break;
    case 1:
        esp_dma_enable(opaque, irq, level);
        break;
    }
}

A
Anthony Liguori 已提交
513
static uint32_t esp_mem_readb(void *opaque, target_phys_addr_t addr)
B
bellard 已提交
514 515
{
    ESPState *s = opaque;
B
Blue Swirl 已提交
516
    uint32_t saddr, old_val;
B
bellard 已提交
517

B
blueswir1 已提交
518
    saddr = addr >> s->it_shift;
B
bellard 已提交
519
    DPRINTF("read reg[%d]: 0x%2.2x\n", saddr, s->rregs[saddr]);
B
bellard 已提交
520
    switch (saddr) {
521
    case ESP_FIFO:
B
blueswir1 已提交
522 523
        if (s->ti_size > 0) {
            s->ti_size--;
524
            if ((s->rregs[ESP_RSTAT] & STAT_PIO_MASK) == 0) {
B
blueswir1 已提交
525 526
                /* Data out.  */
                ESP_ERROR("PIO data read not implemented\n");
527
                s->rregs[ESP_FIFO] = 0;
P
pbrook 已提交
528
            } else {
529
                s->rregs[ESP_FIFO] = s->ti_buf[s->ti_rptr++];
P
pbrook 已提交
530
            }
B
blueswir1 已提交
531
            esp_raise_irq(s);
B
blueswir1 已提交
532 533
        }
        if (s->ti_size == 0) {
534 535 536
            s->ti_rptr = 0;
            s->ti_wptr = 0;
        }
B
blueswir1 已提交
537
        break;
538
    case ESP_RINTR:
B
Blue Swirl 已提交
539 540 541 542 543 544
        /* Clear sequence step, interrupt register and all status bits
           except TC */
        old_val = s->rregs[ESP_RINTR];
        s->rregs[ESP_RINTR] = 0;
        s->rregs[ESP_RSTAT] &= ~STAT_TC;
        s->rregs[ESP_RSEQ] = SEQ_CD;
B
blueswir1 已提交
545
        esp_lower_irq(s);
B
Blue Swirl 已提交
546 547

        return old_val;
B
bellard 已提交
548
    default:
B
blueswir1 已提交
549
        break;
B
bellard 已提交
550
    }
B
bellard 已提交
551
    return s->rregs[saddr];
B
bellard 已提交
552 553
}

A
Anthony Liguori 已提交
554
static void esp_mem_writeb(void *opaque, target_phys_addr_t addr, uint32_t val)
B
bellard 已提交
555 556 557 558
{
    ESPState *s = opaque;
    uint32_t saddr;

B
blueswir1 已提交
559
    saddr = addr >> s->it_shift;
560 561
    DPRINTF("write reg[%d]: 0x%2.2x -> 0x%2.2x\n", saddr, s->wregs[saddr],
            val);
B
bellard 已提交
562
    switch (saddr) {
563 564 565
    case ESP_TCLO:
    case ESP_TCMID:
        s->rregs[ESP_RSTAT] &= ~STAT_TC;
566
        break;
567
    case ESP_FIFO:
P
pbrook 已提交
568 569
        if (s->do_cmd) {
            s->cmdbuf[s->cmdlen++] = val & 0xff;
B
blueswir1 已提交
570 571
        } else if (s->ti_size == TI_BUFSZ - 1) {
            ESP_ERROR("fifo overrun\n");
P
pbrook 已提交
572 573 574 575
        } else {
            s->ti_size++;
            s->ti_buf[s->ti_wptr++] = val & 0xff;
        }
B
blueswir1 已提交
576
        break;
577
    case ESP_CMD:
578
        s->rregs[saddr] = val;
579
        if (val & CMD_DMA) {
B
blueswir1 已提交
580
            s->dma = 1;
P
pbrook 已提交
581
            /* Reload DMA counter.  */
582 583
            s->rregs[ESP_TCLO] = s->wregs[ESP_TCLO];
            s->rregs[ESP_TCMID] = s->wregs[ESP_TCMID];
B
blueswir1 已提交
584 585 586
        } else {
            s->dma = 0;
        }
587 588
        switch(val & CMD_CMD) {
        case CMD_NOP:
B
blueswir1 已提交
589 590
            DPRINTF("NOP (%2.2x)\n", val);
            break;
591
        case CMD_FLUSH:
B
blueswir1 已提交
592
            DPRINTF("Flush FIFO (%2.2x)\n", val);
B
bellard 已提交
593
            //s->ti_size = 0;
594 595
            s->rregs[ESP_RINTR] = INTR_FC;
            s->rregs[ESP_RSEQ] = 0;
596
            s->rregs[ESP_RFLAGS] = 0;
B
blueswir1 已提交
597
            break;
598
        case CMD_RESET:
B
blueswir1 已提交
599
            DPRINTF("Chip reset (%2.2x)\n", val);
B
Blue Swirl 已提交
600
            esp_soft_reset(&s->busdev.qdev);
B
blueswir1 已提交
601
            break;
602
        case CMD_BUSRESET:
B
blueswir1 已提交
603
            DPRINTF("Bus reset (%2.2x)\n", val);
604 605
            s->rregs[ESP_RINTR] = INTR_RST;
            if (!(s->wregs[ESP_CFG1] & CFG1_RESREPT)) {
B
blueswir1 已提交
606
                esp_raise_irq(s);
B
bellard 已提交
607
            }
B
blueswir1 已提交
608
            break;
609
        case CMD_TI:
B
blueswir1 已提交
610 611
            handle_ti(s);
            break;
612
        case CMD_ICCS:
B
blueswir1 已提交
613 614
            DPRINTF("Initiator Command Complete Sequence (%2.2x)\n", val);
            write_response(s);
B
blueswir1 已提交
615 616
            s->rregs[ESP_RINTR] = INTR_FC;
            s->rregs[ESP_RSTAT] |= STAT_MI;
B
blueswir1 已提交
617
            break;
618
        case CMD_MSGACC:
B
blueswir1 已提交
619
            DPRINTF("Message Accepted (%2.2x)\n", val);
620 621
            s->rregs[ESP_RINTR] = INTR_DC;
            s->rregs[ESP_RSEQ] = 0;
622 623
            s->rregs[ESP_RFLAGS] = 0;
            esp_raise_irq(s);
B
blueswir1 已提交
624
            break;
B
Blue Swirl 已提交
625 626 627 628 629 630
        case CMD_PAD:
            DPRINTF("Transfer padding (%2.2x)\n", val);
            s->rregs[ESP_RSTAT] = STAT_TC;
            s->rregs[ESP_RINTR] = INTR_FC;
            s->rregs[ESP_RSEQ] = 0;
            break;
631
        case CMD_SATN:
B
blueswir1 已提交
632 633
            DPRINTF("Set ATN (%2.2x)\n", val);
            break;
634 635
        case CMD_SEL:
            DPRINTF("Select without ATN (%2.2x)\n", val);
636
            handle_s_without_atn(s);
637
            break;
638
        case CMD_SELATN:
639
            DPRINTF("Select with ATN (%2.2x)\n", val);
B
blueswir1 已提交
640 641
            handle_satn(s);
            break;
642
        case CMD_SELATNS:
643
            DPRINTF("Select with ATN & stop (%2.2x)\n", val);
B
blueswir1 已提交
644 645
            handle_satn_stop(s);
            break;
646
        case CMD_ENSEL:
B
blueswir1 已提交
647
            DPRINTF("Enable selection (%2.2x)\n", val);
648
            s->rregs[ESP_RINTR] = 0;
B
blueswir1 已提交
649
            break;
B
blueswir1 已提交
650
        default:
B
blueswir1 已提交
651
            ESP_ERROR("Unhandled ESP command (%2.2x)\n", val);
B
blueswir1 已提交
652 653 654
            break;
        }
        break;
655
    case ESP_WBUSID ... ESP_WSYNO:
B
blueswir1 已提交
656
        break;
657
    case ESP_CFG1:
658 659
        s->rregs[saddr] = val;
        break;
660
    case ESP_WCCF ... ESP_WTEST:
661
        break;
662
    case ESP_CFG2 ... ESP_RES4:
663 664
        s->rregs[saddr] = val;
        break;
B
bellard 已提交
665
    default:
B
blueswir1 已提交
666 667
        ESP_ERROR("invalid write of 0x%02x at [0x%x]\n", val, saddr);
        return;
B
bellard 已提交
668
    }
B
bellard 已提交
669
    s->wregs[saddr] = val;
B
bellard 已提交
670 671
}

672
static CPUReadMemoryFunc * const esp_mem_read[3] = {
B
bellard 已提交
673
    esp_mem_readb,
674 675
    NULL,
    NULL,
B
bellard 已提交
676 677
};

678
static CPUWriteMemoryFunc * const esp_mem_write[3] = {
B
bellard 已提交
679
    esp_mem_writeb,
680
    NULL,
681
    esp_mem_writeb,
B
bellard 已提交
682 683
};

B
Blue Swirl 已提交
684 685 686 687 688 689 690 691 692 693 694 695
static const VMStateDescription vmstate_esp = {
    .name ="esp",
    .version_id = 3,
    .minimum_version_id = 3,
    .minimum_version_id_old = 3,
    .fields      = (VMStateField []) {
        VMSTATE_BUFFER(rregs, ESPState),
        VMSTATE_BUFFER(wregs, ESPState),
        VMSTATE_INT32(ti_size, ESPState),
        VMSTATE_UINT32(ti_rptr, ESPState),
        VMSTATE_UINT32(ti_wptr, ESPState),
        VMSTATE_BUFFER(ti_buf, ESPState),
P
Paolo Bonzini 已提交
696
        VMSTATE_UINT32(status, ESPState),
B
Blue Swirl 已提交
697 698 699 700 701 702 703 704
        VMSTATE_UINT32(dma, ESPState),
        VMSTATE_BUFFER(cmdbuf, ESPState),
        VMSTATE_UINT32(cmdlen, ESPState),
        VMSTATE_UINT32(do_cmd, ESPState),
        VMSTATE_UINT32(dma_left, ESPState),
        VMSTATE_END_OF_LIST()
    }
};
B
bellard 已提交
705

A
Anthony Liguori 已提交
706
void esp_init(target_phys_addr_t espaddr, int it_shift,
707 708
              ESPDMAMemoryReadWriteFunc dma_memory_read,
              ESPDMAMemoryReadWriteFunc dma_memory_write,
709 710
              void *dma_opaque, qemu_irq irq, qemu_irq *reset,
              qemu_irq *dma_enable)
B
bellard 已提交
711
{
P
Paul Brook 已提交
712 713
    DeviceState *dev;
    SysBusDevice *s;
G
Gerd Hoffmann 已提交
714
    ESPState *esp;
P
Paul Brook 已提交
715 716

    dev = qdev_create(NULL, "esp");
G
Gerd Hoffmann 已提交
717 718 719 720 721
    esp = DO_UPCAST(ESPState, busdev.qdev, dev);
    esp->dma_memory_read = dma_memory_read;
    esp->dma_memory_write = dma_memory_write;
    esp->dma_opaque = dma_opaque;
    esp->it_shift = it_shift;
722 723
    /* XXX for now until rc4030 has been changed to use DMA enable signal */
    esp->dma_enabled = 1;
M
Markus Armbruster 已提交
724
    qdev_init_nofail(dev);
P
Paul Brook 已提交
725 726 727
    s = sysbus_from_qdev(dev);
    sysbus_connect_irq(s, 0, irq);
    sysbus_mmio_map(s, 0, espaddr);
728
    *reset = qdev_get_gpio_in(dev, 0);
729
    *dma_enable = qdev_get_gpio_in(dev, 1);
P
Paul Brook 已提交
730
}
B
bellard 已提交
731

P
Paolo Bonzini 已提交
732
static const struct SCSIBusOps esp_scsi_ops = {
733
    .transfer_data = esp_transfer_data,
P
Paolo Bonzini 已提交
734 735
    .complete = esp_command_complete,
    .cancel = esp_request_cancelled
P
Paolo Bonzini 已提交
736 737
};

738
static int esp_init1(SysBusDevice *dev)
P
Paul Brook 已提交
739 740 741
{
    ESPState *s = FROM_SYSBUS(ESPState, dev);
    int esp_io_memory;
B
bellard 已提交
742

P
Paul Brook 已提交
743 744
    sysbus_init_irq(dev, &s->irq);
    assert(s->it_shift != -1);
B
bellard 已提交
745

746 747
    esp_io_memory = cpu_register_io_memory(esp_mem_read, esp_mem_write, s,
                                           DEVICE_NATIVE_ENDIAN);
P
Paul Brook 已提交
748
    sysbus_init_mmio(dev, ESP_REGS << s->it_shift, esp_io_memory);
B
bellard 已提交
749

750
    qdev_init_gpio_in(&dev->qdev, esp_gpio_demux, 2);
751

P
Paolo Bonzini 已提交
752
    scsi_bus_new(&s->bus, &dev->qdev, 0, ESP_MAX_DEVS, &esp_scsi_ops);
753
    return scsi_bus_legacy_handle_cmdline(&s->bus);
754
}
P
Paul Brook 已提交
755

B
Blue Swirl 已提交
756 757 758 759 760
static SysBusDeviceInfo esp_info = {
    .init = esp_init1,
    .qdev.name  = "esp",
    .qdev.size  = sizeof(ESPState),
    .qdev.vmsd  = &vmstate_esp,
B
Blue Swirl 已提交
761
    .qdev.reset = esp_hard_reset,
B
Blue Swirl 已提交
762 763 764 765 766
    .qdev.props = (Property[]) {
        {.name = NULL}
    }
};

P
Paul Brook 已提交
767 768
static void esp_register_devices(void)
{
B
Blue Swirl 已提交
769
    sysbus_register_withprop(&esp_info);
P
Paul Brook 已提交
770 771 772
}

device_init(esp_register_devices)