fdc-test.c 13.6 KB
Newer Older
K
Kevin Wolf 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49
/*
 * Floppy test cases.
 *
 * Copyright (c) 2012 Kevin Wolf <kwolf@redhat.com>
 *
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */

#include <stdint.h>
#include <string.h>
#include <stdio.h>

#include <glib.h>

#include "libqtest.h"
#include "qemu-common.h"

#define TEST_IMAGE_SIZE 1440 * 1024

#define FLOPPY_BASE 0x3f0
#define FLOPPY_IRQ 6

enum {
    reg_sra         = 0x0,
    reg_srb         = 0x1,
    reg_dor         = 0x2,
    reg_msr         = 0x4,
    reg_dsr         = 0x4,
    reg_fifo        = 0x5,
    reg_dir         = 0x7,
};

enum {
50
    CMD_SENSE_INT           = 0x08,
K
Kevin Wolf 已提交
51
    CMD_READ_ID             = 0x0a,
52
    CMD_SEEK                = 0x0f,
53
    CMD_VERIFY              = 0x16,
54 55 56
    CMD_READ                = 0xe6,
    CMD_RELATIVE_SEEK_OUT   = 0x8f,
    CMD_RELATIVE_SEEK_IN    = 0xcf,
K
Kevin Wolf 已提交
57 58 59
};

enum {
60 61
    BUSY    = 0x10,
    NONDMA  = 0x20,
K
Kevin Wolf 已提交
62 63 64 65 66 67
    RQM     = 0x80,
    DIO     = 0x40,

    DSKCHG  = 0x80,
};

68
static char test_image[] = "/tmp/qtest.XXXXXX";
K
Kevin Wolf 已提交
69 70 71 72

#define assert_bit_set(data, mask) g_assert_cmphex((data) & (mask), ==, (mask))
#define assert_bit_clear(data, mask) g_assert_cmphex((data) & (mask), ==, 0)

73 74 75 76 77 78
static uint8_t base = 0x70;

enum {
    CMOS_FLOPPY     = 0x10,
};

K
Kevin Wolf 已提交
79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99
static void floppy_send(uint8_t byte)
{
    uint8_t msr;

    msr = inb(FLOPPY_BASE + reg_msr);
    assert_bit_set(msr, RQM);
    assert_bit_clear(msr, DIO);

    outb(FLOPPY_BASE + reg_fifo, byte);
}

static uint8_t floppy_recv(void)
{
    uint8_t msr;

    msr = inb(FLOPPY_BASE + reg_msr);
    assert_bit_set(msr, RQM | DIO);

    return inb(FLOPPY_BASE + reg_fifo);
}

K
Kevin Wolf 已提交
100 101
/* pcn: Present Cylinder Number */
static void ack_irq(uint8_t *pcn)
K
Kevin Wolf 已提交
102
{
103 104
    uint8_t ret;

K
Kevin Wolf 已提交
105 106 107
    g_assert(get_irq(FLOPPY_IRQ));
    floppy_send(CMD_SENSE_INT);
    floppy_recv();
K
Kevin Wolf 已提交
108

109
    ret = floppy_recv();
K
Kevin Wolf 已提交
110 111 112
    if (pcn != NULL) {
        *pcn = ret;
    }
113

K
Kevin Wolf 已提交
114
    g_assert(!get_irq(FLOPPY_IRQ));
K
Kevin Wolf 已提交
115 116
}

117
static uint8_t send_read_command(uint8_t cmd)
118 119 120 121 122 123 124 125 126 127 128 129 130 131 132
{
    uint8_t drive = 0;
    uint8_t head = 0;
    uint8_t cyl = 0;
    uint8_t sect_addr = 1;
    uint8_t sect_size = 2;
    uint8_t eot = 1;
    uint8_t gap = 0x1b;
    uint8_t gpl = 0xff;

    uint8_t msr = 0;
    uint8_t st0;

    uint8_t ret = 0;

133
    floppy_send(cmd);
134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158
    floppy_send(head << 2 | drive);
    g_assert(!get_irq(FLOPPY_IRQ));
    floppy_send(cyl);
    floppy_send(head);
    floppy_send(sect_addr);
    floppy_send(sect_size);
    floppy_send(eot);
    floppy_send(gap);
    floppy_send(gpl);

    uint8_t i = 0;
    uint8_t n = 2;
    for (; i < n; i++) {
        msr = inb(FLOPPY_BASE + reg_msr);
        if (msr == 0xd0) {
            break;
        }
        sleep(1);
    }

    if (i >= n) {
        return 1;
    }

    st0 = floppy_recv();
H
Hervé Poussineau 已提交
159
    if (st0 != 0x40) {
160 161 162 163 164 165 166 167 168 169 170 171 172
        ret = 1;
    }

    floppy_recv();
    floppy_recv();
    floppy_recv();
    floppy_recv();
    floppy_recv();
    floppy_recv();

    return ret;
}

173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220
static uint8_t send_read_no_dma_command(int nb_sect, uint8_t expected_st0)
{
    uint8_t drive = 0;
    uint8_t head = 0;
    uint8_t cyl = 0;
    uint8_t sect_addr = 1;
    uint8_t sect_size = 2;
    uint8_t eot = nb_sect;
    uint8_t gap = 0x1b;
    uint8_t gpl = 0xff;

    uint8_t msr = 0;
    uint8_t st0;

    uint8_t ret = 0;

    floppy_send(CMD_READ);
    floppy_send(head << 2 | drive);
    g_assert(!get_irq(FLOPPY_IRQ));
    floppy_send(cyl);
    floppy_send(head);
    floppy_send(sect_addr);
    floppy_send(sect_size);
    floppy_send(eot);
    floppy_send(gap);
    floppy_send(gpl);

    uint16_t i = 0;
    uint8_t n = 2;
    for (; i < n; i++) {
        msr = inb(FLOPPY_BASE + reg_msr);
        if (msr == (BUSY | NONDMA | DIO | RQM)) {
            break;
        }
        sleep(1);
    }

    if (i >= n) {
        return 1;
    }

    /* Non-DMA mode */
    for (i = 0; i < 512 * 2 * nb_sect; i++) {
        msr = inb(FLOPPY_BASE + reg_msr);
        assert_bit_set(msr, BUSY | RQM | DIO);
        inb(FLOPPY_BASE + reg_fifo);
    }

221 222 223 224
    msr = inb(FLOPPY_BASE + reg_msr);
    assert_bit_set(msr, BUSY | RQM | DIO);
    g_assert(get_irq(FLOPPY_IRQ));

225 226 227 228 229 230 231 232 233 234
    st0 = floppy_recv();
    if (st0 != expected_st0) {
        ret = 1;
    }

    floppy_recv();
    floppy_recv();
    floppy_recv();
    floppy_recv();
    floppy_recv();
235
    g_assert(get_irq(FLOPPY_IRQ));
236 237
    floppy_recv();

238 239 240 241 242 243
    /* Check that we're back in command phase */
    msr = inb(FLOPPY_BASE + reg_msr);
    assert_bit_clear(msr, BUSY | DIO);
    assert_bit_set(msr, RQM);
    g_assert(!get_irq(FLOPPY_IRQ));

244 245 246
    return ret;
}

K
Kevin Wolf 已提交
247
static void send_seek(int cyl)
K
Kevin Wolf 已提交
248 249 250 251 252 253 254 255
{
    int drive = 0;
    int head = 0;

    floppy_send(CMD_SEEK);
    floppy_send(head << 2 | drive);
    g_assert(!get_irq(FLOPPY_IRQ));
    floppy_send(cyl);
K
Kevin Wolf 已提交
256
    ack_irq(NULL);
K
Kevin Wolf 已提交
257 258
}

259
static uint8_t cmos_read(uint8_t reg)
K
Kevin Wolf 已提交
260
{
261 262 263
    outb(base + 0, reg);
    return inb(base + 1);
}
K
Kevin Wolf 已提交
264

265 266 267
static void test_cmos(void)
{
    uint8_t cmos;
K
Kevin Wolf 已提交
268

269 270 271
    cmos = cmos_read(CMOS_FLOPPY);
    g_assert(cmos == 0x40);
}
K
Kevin Wolf 已提交
272

273 274 275 276 277 278
static void test_no_media_on_start(void)
{
    uint8_t dir;

    /* Media changed bit must be set all time after start if there is
     * no media in drive. */
K
Kevin Wolf 已提交
279 280 281 282
    dir = inb(FLOPPY_BASE + reg_dir);
    assert_bit_set(dir, DSKCHG);
    dir = inb(FLOPPY_BASE + reg_dir);
    assert_bit_set(dir, DSKCHG);
K
Kevin Wolf 已提交
283
    send_seek(1);
K
Kevin Wolf 已提交
284 285 286 287
    dir = inb(FLOPPY_BASE + reg_dir);
    assert_bit_set(dir, DSKCHG);
    dir = inb(FLOPPY_BASE + reg_dir);
    assert_bit_set(dir, DSKCHG);
288 289
}

290 291 292 293
static void test_read_without_media(void)
{
    uint8_t ret;

294
    ret = send_read_command(CMD_READ);
295 296 297
    g_assert(ret == 0);
}

298
static void test_media_insert(void)
299 300
{
    uint8_t dir;
K
Kevin Wolf 已提交
301

302
    /* Insert media in drive. DSKCHK should not be reset until a step pulse
K
Kevin Wolf 已提交
303
     * is sent. */
304
    qmp_discard_response("{'execute':'change', 'arguments':{"
305
                         " 'device':'floppy0', 'target': %s, 'arg': 'raw' }}",
306
                         test_image);
M
Max Reitz 已提交
307
    qmp_discard_response(""); /* ignore event (open -> close) */
K
Kevin Wolf 已提交
308 309 310 311 312 313

    dir = inb(FLOPPY_BASE + reg_dir);
    assert_bit_set(dir, DSKCHG);
    dir = inb(FLOPPY_BASE + reg_dir);
    assert_bit_set(dir, DSKCHG);

K
Kevin Wolf 已提交
314
    send_seek(0);
315 316 317 318 319 320
    dir = inb(FLOPPY_BASE + reg_dir);
    assert_bit_set(dir, DSKCHG);
    dir = inb(FLOPPY_BASE + reg_dir);
    assert_bit_set(dir, DSKCHG);

    /* Step to next track should clear DSKCHG bit. */
K
Kevin Wolf 已提交
321
    send_seek(1);
K
Kevin Wolf 已提交
322 323 324 325
    dir = inb(FLOPPY_BASE + reg_dir);
    assert_bit_clear(dir, DSKCHG);
    dir = inb(FLOPPY_BASE + reg_dir);
    assert_bit_clear(dir, DSKCHG);
326 327 328 329 330 331 332
}

static void test_media_change(void)
{
    uint8_t dir;

    test_media_insert();
333 334 335

    /* Eject the floppy and check that DSKCHG is set. Reading it out doesn't
     * reset the bit. */
336 337 338
    qmp_discard_response("{'execute':'eject', 'arguments':{"
                         " 'device':'floppy0' }}");
    qmp_discard_response(""); /* ignore event */
339 340 341 342 343 344

    dir = inb(FLOPPY_BASE + reg_dir);
    assert_bit_set(dir, DSKCHG);
    dir = inb(FLOPPY_BASE + reg_dir);
    assert_bit_set(dir, DSKCHG);

K
Kevin Wolf 已提交
345
    send_seek(0);
346 347 348 349 350
    dir = inb(FLOPPY_BASE + reg_dir);
    assert_bit_set(dir, DSKCHG);
    dir = inb(FLOPPY_BASE + reg_dir);
    assert_bit_set(dir, DSKCHG);

K
Kevin Wolf 已提交
351
    send_seek(1);
352 353 354 355
    dir = inb(FLOPPY_BASE + reg_dir);
    assert_bit_set(dir, DSKCHG);
    dir = inb(FLOPPY_BASE + reg_dir);
    assert_bit_set(dir, DSKCHG);
K
Kevin Wolf 已提交
356 357
}

358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379
static void test_sense_interrupt(void)
{
    int drive = 0;
    int head = 0;
    int cyl = 0;
    int ret = 0;

    floppy_send(CMD_SENSE_INT);
    ret = floppy_recv();
    g_assert(ret == 0x80);

    floppy_send(CMD_SEEK);
    floppy_send(head << 2 | drive);
    g_assert(!get_irq(FLOPPY_IRQ));
    floppy_send(cyl);

    floppy_send(CMD_SENSE_INT);
    ret = floppy_recv();
    g_assert(ret == 0x20);
    floppy_recv();
}

380 381 382 383 384
static void test_relative_seek(void)
{
    uint8_t drive = 0;
    uint8_t head = 0;
    uint8_t cyl = 1;
K
Kevin Wolf 已提交
385
    uint8_t pcn;
386 387

    /* Send seek to track 0 */
K
Kevin Wolf 已提交
388
    send_seek(0);
389 390 391 392 393 394 395

    /* Send relative seek to increase track by 1 */
    floppy_send(CMD_RELATIVE_SEEK_IN);
    floppy_send(head << 2 | drive);
    g_assert(!get_irq(FLOPPY_IRQ));
    floppy_send(cyl);

K
Kevin Wolf 已提交
396 397
    ack_irq(&pcn);
    g_assert(pcn == 1);
398 399 400 401 402 403 404

    /* Send relative seek to decrease track by 1 */
    floppy_send(CMD_RELATIVE_SEEK_OUT);
    floppy_send(head << 2 | drive);
    g_assert(!get_irq(FLOPPY_IRQ));
    floppy_send(cyl);

K
Kevin Wolf 已提交
405 406
    ack_irq(&pcn);
    g_assert(pcn == 0);
407 408
}

K
Kevin Wolf 已提交
409 410 411 412 413 414
static void test_read_id(void)
{
    uint8_t drive = 0;
    uint8_t head = 0;
    uint8_t cyl;
    uint8_t st0;
415
    uint8_t msr;
K
Kevin Wolf 已提交
416 417 418 419 420 421 422 423

    /* Seek to track 0 and check with READ ID */
    send_seek(0);

    floppy_send(CMD_READ_ID);
    g_assert(!get_irq(FLOPPY_IRQ));
    floppy_send(head << 2 | drive);

424 425 426 427 428 429
    msr = inb(FLOPPY_BASE + reg_msr);
    if (!get_irq(FLOPPY_IRQ)) {
        assert_bit_set(msr, BUSY);
        assert_bit_clear(msr, RQM);
    }

K
Kevin Wolf 已提交
430 431 432 433 434
    while (!get_irq(FLOPPY_IRQ)) {
        /* qemu involves a timer with READ ID... */
        clock_step(1000000000LL / 50);
    }

435 436 437
    msr = inb(FLOPPY_BASE + reg_msr);
    assert_bit_set(msr, BUSY | RQM | DIO);

K
Kevin Wolf 已提交
438 439 440 441 442 443
    st0 = floppy_recv();
    floppy_recv();
    floppy_recv();
    cyl = floppy_recv();
    head = floppy_recv();
    floppy_recv();
444
    g_assert(get_irq(FLOPPY_IRQ));
K
Kevin Wolf 已提交
445
    floppy_recv();
446
    g_assert(!get_irq(FLOPPY_IRQ));
K
Kevin Wolf 已提交
447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466

    g_assert_cmpint(cyl, ==, 0);
    g_assert_cmpint(head, ==, 0);
    g_assert_cmpint(st0, ==, head << 2);

    /* Seek to track 8 on head 1 and check with READ ID */
    head = 1;
    cyl = 8;

    floppy_send(CMD_SEEK);
    floppy_send(head << 2 | drive);
    g_assert(!get_irq(FLOPPY_IRQ));
    floppy_send(cyl);
    g_assert(get_irq(FLOPPY_IRQ));
    ack_irq(NULL);

    floppy_send(CMD_READ_ID);
    g_assert(!get_irq(FLOPPY_IRQ));
    floppy_send(head << 2 | drive);

467 468 469 470 471 472
    msr = inb(FLOPPY_BASE + reg_msr);
    if (!get_irq(FLOPPY_IRQ)) {
        assert_bit_set(msr, BUSY);
        assert_bit_clear(msr, RQM);
    }

K
Kevin Wolf 已提交
473 474 475 476 477
    while (!get_irq(FLOPPY_IRQ)) {
        /* qemu involves a timer with READ ID... */
        clock_step(1000000000LL / 50);
    }

478 479 480
    msr = inb(FLOPPY_BASE + reg_msr);
    assert_bit_set(msr, BUSY | RQM | DIO);

K
Kevin Wolf 已提交
481 482 483 484 485 486
    st0 = floppy_recv();
    floppy_recv();
    floppy_recv();
    cyl = floppy_recv();
    head = floppy_recv();
    floppy_recv();
487
    g_assert(get_irq(FLOPPY_IRQ));
K
Kevin Wolf 已提交
488
    floppy_recv();
489
    g_assert(!get_irq(FLOPPY_IRQ));
K
Kevin Wolf 已提交
490 491 492 493 494 495

    g_assert_cmpint(cyl, ==, 8);
    g_assert_cmpint(head, ==, 1);
    g_assert_cmpint(st0, ==, head << 2);
}

496 497 498 499 500 501
static void test_read_no_dma_1(void)
{
    uint8_t ret;

    outb(FLOPPY_BASE + reg_dor, inb(FLOPPY_BASE + reg_dor) & ~0x08);
    send_seek(0);
H
Hervé Poussineau 已提交
502
    ret = send_read_no_dma_command(1, 0x04);
503 504 505 506 507 508 509 510 511
    g_assert(ret == 0);
}

static void test_read_no_dma_18(void)
{
    uint8_t ret;

    outb(FLOPPY_BASE + reg_dor, inb(FLOPPY_BASE + reg_dor) & ~0x08);
    send_seek(0);
H
Hervé Poussineau 已提交
512
    ret = send_read_no_dma_command(18, 0x04);
513 514 515 516 517 518 519 520 521 522 523 524 525
    g_assert(ret == 0);
}

static void test_read_no_dma_19(void)
{
    uint8_t ret;

    outb(FLOPPY_BASE + reg_dor, inb(FLOPPY_BASE + reg_dor) & ~0x08);
    send_seek(0);
    ret = send_read_no_dma_command(19, 0x20);
    g_assert(ret == 0);
}

526 527 528 529 530 531 532 533
static void test_verify(void)
{
    uint8_t ret;

    ret = send_read_command(CMD_VERIFY);
    g_assert(ret == 0);
}

B
Blue Swirl 已提交
534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549
/* success if no crash or abort */
static void fuzz_registers(void)
{
    unsigned int i;

    for (i = 0; i < 1000; i++) {
        uint8_t reg, val;

        reg = (uint8_t)g_test_rand_int_range(0, 8);
        val = (uint8_t)g_test_rand_int_range(0, 256);

        outb(FLOPPY_BASE + reg, val);
        inb(FLOPPY_BASE + reg);
    }
}

K
Kevin Wolf 已提交
550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571
int main(int argc, char **argv)
{
    const char *arch = qtest_get_arch();
    int fd;
    int ret;

    /* Check architecture */
    if (strcmp(arch, "i386") && strcmp(arch, "x86_64")) {
        g_test_message("Skipping test for non-x86\n");
        return 0;
    }

    /* Create a temporary raw image */
    fd = mkstemp(test_image);
    g_assert(fd >= 0);
    ret = ftruncate(fd, TEST_IMAGE_SIZE);
    g_assert(ret == 0);
    close(fd);

    /* Run the tests */
    g_test_init(&argc, &argv, NULL);

572
    qtest_start(NULL);
K
Kevin Wolf 已提交
573
    qtest_irq_intercept_in(global_qtest, "ioapic");
574 575
    qtest_add_func("/fdc/cmos", test_cmos);
    qtest_add_func("/fdc/no_media_on_start", test_no_media_on_start);
576
    qtest_add_func("/fdc/read_without_media", test_read_without_media);
K
Kevin Wolf 已提交
577
    qtest_add_func("/fdc/media_change", test_media_change);
578
    qtest_add_func("/fdc/sense_interrupt", test_sense_interrupt);
579
    qtest_add_func("/fdc/relative_seek", test_relative_seek);
K
Kevin Wolf 已提交
580
    qtest_add_func("/fdc/read_id", test_read_id);
581
    qtest_add_func("/fdc/verify", test_verify);
582
    qtest_add_func("/fdc/media_insert", test_media_insert);
583 584 585
    qtest_add_func("/fdc/read_no_dma_1", test_read_no_dma_1);
    qtest_add_func("/fdc/read_no_dma_18", test_read_no_dma_18);
    qtest_add_func("/fdc/read_no_dma_19", test_read_no_dma_19);
B
Blue Swirl 已提交
586
    qtest_add_func("/fdc/fuzz-registers", fuzz_registers);
K
Kevin Wolf 已提交
587 588 589 590

    ret = g_test_run();

    /* Cleanup */
591
    qtest_end();
K
Kevin Wolf 已提交
592 593 594 595
    unlink(test_image);

    return ret;
}