hw/nand.c

   1 /*
   2  * Flash NAND memory emulation.  Based on "16M x 8 Bit NAND Flash
   3  * Memory" datasheet for the KM29U128AT / K9F2808U0A chips from
   4  * Samsung Electronic.
   5  *
   6  * Copyright (c) 2006 Openedhand Ltd.
   7  * Written by Andrzej Zaborowski <balrog@zabor.org>
   8  *
   9  * This code is licensed under the GNU GPL v2.
  10  */
  11
  12 #ifndef NAND_IO
  13
  14 # include "hw.h"
  15 # include "flash.h"
  16 # include "block.h"
  17 /* FIXME: Pass block device as an argument.  */
  18 # include "sysemu.h"
  19
  20 # define NAND_CMD_READ0         0x00
  21 # define NAND_CMD_READ1         0x01
  22 # define NAND_CMD_READ2         0x50
  23 # define NAND_CMD_LPREAD2       0x30
  24 # define NAND_CMD_NOSERIALREAD2 0x35
  25 # define NAND_CMD_RANDOMREAD1   0x05
  26 # define NAND_CMD_RANDOMREAD2   0xe0
  27 # define NAND_CMD_READID        0x90
  28 # define NAND_CMD_RESET         0xff
  29 # define NAND_CMD_PAGEPROGRAM1  0x80
  30 # define NAND_CMD_PAGEPROGRAM2  0x10
  31 # define NAND_CMD_CACHEPROGRAM2 0x15
  32 # define NAND_CMD_BLOCKERASE1   0x60
  33 # define NAND_CMD_BLOCKERASE2   0xd0
  34 # define NAND_CMD_READSTATUS    0x70
  35 # define NAND_CMD_COPYBACKPRG1  0x85
  36
  37 # define NAND_IOSTATUS_ERROR    (1 << 0)
  38 # define NAND_IOSTATUS_PLANE0   (1 << 1)
  39 # define NAND_IOSTATUS_PLANE1   (1 << 2)
  40 # define NAND_IOSTATUS_PLANE2   (1 << 3)
  41 # define NAND_IOSTATUS_PLANE3   (1 << 4)
  42 # define NAND_IOSTATUS_BUSY     (1 << 6)
  43 # define NAND_IOSTATUS_UNPROTCT (1 << 7)
  44
  45 # define MAX_PAGE               0x800
  46 # define MAX_OOB                0x40
  47
  48 struct NANDFlashState {
  49     uint8_t manf_id, chip_id;
  50     int size, pages;
  51     int page_shift, oob_shift, erase_shift, addr_shift;
  52     uint8_t *storage;
  53     BlockDriverState *bdrv;
  54     int mem_oob;
  55
  56     int cle, ale, ce, wp, gnd;
  57
  58     uint8_t io[MAX_PAGE + MAX_OOB + 0x400];
  59     uint8_t *ioaddr;
  60     int iolen;
  61
  62     uint32_t cmd, addr;
  63     int addrlen;
  64     int status;
  65     int offset;
  66
  67     void (*blk_write)(NANDFlashState *s);
  68     void (*blk_erase)(NANDFlashState *s);
  69     void (*blk_load)(NANDFlashState *s, uint32_t addr, int offset);
  70 };
  71
  72 # define NAND_NO_AUTOINCR       0x00000001
  73 # define NAND_BUSWIDTH_16       0x00000002
  74 # define NAND_NO_PADDING        0x00000004
  75 # define NAND_CACHEPRG          0x00000008
  76 # define NAND_COPYBACK          0x00000010
  77 # define NAND_IS_AND            0x00000020
  78 # define NAND_4PAGE_ARRAY       0x00000040
  79 # define NAND_NO_READRDY        0x00000100
  80 # define NAND_SAMSUNG_LP        (NAND_NO_PADDING | NAND_COPYBACK)
  81
  82 # define NAND_IO
  83
  84 # define PAGE(addr)             ((addr) >> ADDR_SHIFT)
  85 # define PAGE_START(page)       (PAGE(page) * (PAGE_SIZE + OOB_SIZE))
  86 # define PAGE_MASK              ((1 << ADDR_SHIFT) - 1)
  87 # define OOB_SHIFT              (PAGE_SHIFT - 5)
  88 # define OOB_SIZE               (1 << OOB_SHIFT)
  89 # define SECTOR(addr)           ((addr) >> (9 + ADDR_SHIFT - PAGE_SHIFT))
  90 # define SECTOR_OFFSET(addr)    ((addr) & ((511 >> PAGE_SHIFT) << 8))
  91
  92 # define PAGE_SIZE              256
  93 # define PAGE_SHIFT             8
  94 # define PAGE_SECTORS           1
  95 # define ADDR_SHIFT             8
  96 # include "nand.c"
  97 # define PAGE_SIZE              512
  98 # define PAGE_SHIFT             9
  99 # define PAGE_SECTORS           1
 100 # define ADDR_SHIFT             8
 101 # include "nand.c"
 102 # define PAGE_SIZE              2048
 103 # define PAGE_SHIFT             11
 104 # define PAGE_SECTORS           4
 105 # define ADDR_SHIFT             16
 106 # include "nand.c"
 107
 108 /* Information based on Linux drivers/mtd/nand/nand_ids.c */
 109 static const struct {
 110     int size;
 111     int width;
 112     int page_shift;
 113     int erase_shift;
 114     uint32_t options;
 115 } nand_flash_ids[0x100] = {
 116     [0 ... 0xff] = { 0 },
 117
 118     [0x6e] = { 1,       8,      8, 4, 0 },
 119     [0x64] = { 2,       8,      8, 4, 0 },
 120     [0x6b] = { 4,       8,      9, 4, 0 },
 121     [0xe8] = { 1,       8,      8, 4, 0 },
 122     [0xec] = { 1,       8,      8, 4, 0 },
 123     [0xea] = { 2,       8,      8, 4, 0 },
 124     [0xd5] = { 4,       8,      9, 4, 0 },
 125     [0xe3] = { 4,       8,      9, 4, 0 },
 126     [0xe5] = { 4,       8,      9, 4, 0 },
 127     [0xd6] = { 8,       8,      9, 4, 0 },
 128
 129     [0x39] = { 8,       8,      9, 4, 0 },
 130     [0xe6] = { 8,       8,      9, 4, 0 },
 131     [0x49] = { 8,       16,     9, 4, NAND_BUSWIDTH_16 },
 132     [0x59] = { 8,       16,     9, 4, NAND_BUSWIDTH_16 },
 133
 134     [0x33] = { 16,      8,      9, 5, 0 },
 135     [0x73] = { 16,      8,      9, 5, 0 },
 136     [0x43] = { 16,      16,     9, 5, NAND_BUSWIDTH_16 },
 137     [0x53] = { 16,      16,     9, 5, NAND_BUSWIDTH_16 },
 138
 139     [0x35] = { 32,      8,      9, 5, 0 },
 140     [0x75] = { 32,      8,      9, 5, 0 },
 141     [0x45] = { 32,      16,     9, 5, NAND_BUSWIDTH_16 },
 142     [0x55] = { 32,      16,     9, 5, NAND_BUSWIDTH_16 },
 143
 144     [0x36] = { 64,      8,      9, 5, 0 },
 145     [0x76] = { 64,      8,      9, 5, 0 },
 146     [0x46] = { 64,      16,     9, 5, NAND_BUSWIDTH_16 },
 147     [0x56] = { 64,      16,     9, 5, NAND_BUSWIDTH_16 },
 148
 149     [0x78] = { 128,     8,      9, 5, 0 },
 150     [0x39] = { 128,     8,      9, 5, 0 },
 151     [0x79] = { 128,     8,      9, 5, 0 },
 152     [0x72] = { 128,     16,     9, 5, NAND_BUSWIDTH_16 },
 153     [0x49] = { 128,     16,     9, 5, NAND_BUSWIDTH_16 },
 154     [0x74] = { 128,     16,     9, 5, NAND_BUSWIDTH_16 },
 155     [0x59] = { 128,     16,     9, 5, NAND_BUSWIDTH_16 },
 156
 157     [0x71] = { 256,     8,      9, 5, 0 },
 158
 159     /*
 160      * These are the new chips with large page size. The pagesize and the
 161      * erasesize is determined from the extended id bytes
 162      */
 163 # define LP_OPTIONS     (NAND_SAMSUNG_LP | NAND_NO_READRDY | NAND_NO_AUTOINCR)
 164 # define LP_OPTIONS16   (LP_OPTIONS | NAND_BUSWIDTH_16)
 165
 166     /* 512 Megabit */
 167     [0xa2] = { 64,      8,      0, 0, LP_OPTIONS },
 168     [0xf2] = { 64,      8,      0, 0, LP_OPTIONS },
 169     [0xb2] = { 64,      16,     0, 0, LP_OPTIONS16 },
 170     [0xc2] = { 64,      16,     0, 0, LP_OPTIONS16 },
 171
 172     /* 1 Gigabit */
 173     [0xa1] = { 128,     8,      0, 0, LP_OPTIONS },
 174     [0xf1] = { 128,     8,      0, 0, LP_OPTIONS },
 175     [0xb1] = { 128,     16,     0, 0, LP_OPTIONS16 },
 176     [0xc1] = { 128,     16,     0, 0, LP_OPTIONS16 },
 177
 178     /* 2 Gigabit */
 179     [0xaa] = { 256,     8,      0, 0, LP_OPTIONS },
 180     [0xda] = { 256,     8,      0, 0, LP_OPTIONS },
 181     [0xba] = { 256,     16,     0, 0, LP_OPTIONS16 },
 182     [0xca] = { 256,     16,     0, 0, LP_OPTIONS16 },
 183
 184     /* 4 Gigabit */
 185     [0xac] = { 512,     8,      0, 0, LP_OPTIONS },
 186     [0xdc] = { 512,     8,      0, 0, LP_OPTIONS },
 187     [0xbc] = { 512,     16,     0, 0, LP_OPTIONS16 },
 188     [0xcc] = { 512,     16,     0, 0, LP_OPTIONS16 },
 189
 190     /* 8 Gigabit */
 191     [0xa3] = { 1024,    8,      0, 0, LP_OPTIONS },
 192     [0xd3] = { 1024,    8,      0, 0, LP_OPTIONS },
 193     [0xb3] = { 1024,    16,     0, 0, LP_OPTIONS16 },
 194     [0xc3] = { 1024,    16,     0, 0, LP_OPTIONS16 },
 195
 196     /* 16 Gigabit */
 197     [0xa5] = { 2048,    8,      0, 0, LP_OPTIONS },
 198     [0xd5] = { 2048,    8,      0, 0, LP_OPTIONS },
 199     [0xb5] = { 2048,    16,     0, 0, LP_OPTIONS16 },
 200     [0xc5] = { 2048,    16,     0, 0, LP_OPTIONS16 },
 201 };
 202
 203 static void nand_reset(NANDFlashState *s)
 204 {
 205     s->cmd = NAND_CMD_READ0;
 206     s->addr = 0;
 207     s->addrlen = 0;
 208     s->iolen = 0;
 209     s->offset = 0;
 210     s->status &= NAND_IOSTATUS_UNPROTCT;
 211 }
 212
 213 static void nand_command(NANDFlashState *s)
 214 {
 215     switch (s->cmd) {
 216     case NAND_CMD_READ0:
 217         s->iolen = 0;
 218         break;
 219
 220     case NAND_CMD_READID:
 221         s->io[0] = s->manf_id;
 222         s->io[1] = s->chip_id;
 223         s->io[2] = 'Q';         /* Don't-care byte (often 0xa5) */
 224         if (nand_flash_ids[s->chip_id].options & NAND_SAMSUNG_LP)
 225             s->io[3] = 0x15;    /* Page Size, Block Size, Spare Size.. */
 226         else
 227             s->io[3] = 0xc0;    /* Multi-plane */
 228         s->ioaddr = s->io;
 229         s->iolen = 4;
 230         break;
 231
 232     case NAND_CMD_RANDOMREAD2:
 233     case NAND_CMD_NOSERIALREAD2:
 234         if (!(nand_flash_ids[s->chip_id].options & NAND_SAMSUNG_LP))
 235             break;
 236
 237         s->blk_load(s, s->addr, s->addr & ((1 << s->addr_shift) - 1));
 238         break;
 239
 240     case NAND_CMD_RESET:
 241         nand_reset(s);
 242         break;
 243
 244     case NAND_CMD_PAGEPROGRAM1:
 245         s->ioaddr = s->io;
 246         s->iolen = 0;
 247         break;
 248
 249     case NAND_CMD_PAGEPROGRAM2:
 250         if (s->wp) {
 251             s->blk_write(s);
 252         }
 253         break;
 254
 255     case NAND_CMD_BLOCKERASE1:
 256         break;
 257
 258     case NAND_CMD_BLOCKERASE2:
 259         if (nand_flash_ids[s->chip_id].options & NAND_SAMSUNG_LP)
 260             s->addr <<= 16;
 261         else
 262             s->addr <<= 8;
 263
 264         if (s->wp) {
 265             s->blk_erase(s);
 266         }
 267         break;
 268
 269     case NAND_CMD_READSTATUS:
 270         s->io[0] = s->status;
 271         s->ioaddr = s->io;
 272         s->iolen = 1;
 273         break;
 274
 275     default:
 276         printf("%s: Unknown NAND command 0x%02x\n", __FUNCTION__, s->cmd);
 277     }
 278 }
 279
 280 static void nand_save(QEMUFile *f, void *opaque)
 281 {
 282     NANDFlashState *s = (NANDFlashState *) opaque;
 283     qemu_put_byte(f, s->cle);
 284     qemu_put_byte(f, s->ale);
 285     qemu_put_byte(f, s->ce);
 286     qemu_put_byte(f, s->wp);
 287     qemu_put_byte(f, s->gnd);
 288     qemu_put_buffer(f, s->io, sizeof(s->io));
 289     qemu_put_be32(f, s->ioaddr - s->io);
 290     qemu_put_be32(f, s->iolen);
 291
 292     qemu_put_be32s(f, &s->cmd);
 293     qemu_put_be32s(f, &s->addr);
 294     qemu_put_be32(f, s->addrlen);
 295     qemu_put_be32(f, s->status);
 296     qemu_put_be32(f, s->offset);
 297     /* XXX: do we want to save s->storage too? */
 298 }
 299
 300 static int nand_load(QEMUFile *f, void *opaque, int version_id)
 301 {
 302     NANDFlashState *s = (NANDFlashState *) opaque;
 303     s->cle = qemu_get_byte(f);
 304     s->ale = qemu_get_byte(f);
 305     s->ce = qemu_get_byte(f);
 306     s->wp = qemu_get_byte(f);
 307     s->gnd = qemu_get_byte(f);
 308     qemu_get_buffer(f, s->io, sizeof(s->io));
 309     s->ioaddr = s->io + qemu_get_be32(f);
 310     s->iolen = qemu_get_be32(f);
 311     if (s->ioaddr >= s->io + sizeof(s->io) || s->ioaddr < s->io)
 312         return -EINVAL;
 313
 314     qemu_get_be32s(f, &s->cmd);
 315     qemu_get_be32s(f, &s->addr);
 316     s->addrlen = qemu_get_be32(f);
 317     s->status = qemu_get_be32(f);
 318     s->offset = qemu_get_be32(f);
 319     return 0;
 320 }
 321
 322 uint32_t nand_readraw(struct nand_flash_s *s, uint32_t offset, void * dst, uint32_t length)
 323 {
 324         if (s->bdrv) {
 325         if (bdrv_pread(s->bdrv, offset, dst, length) == -1) {
 326             printf("%s: read error in offset %i\n", __FUNCTION__, offset);
 327             return 0;
 328         }
 329         return length;
 330         }
 331         if (s->storage) {
 332                 memcpy((uint8_t*)dst, s->storage + offset, length);
 333                 return length;
 334         }
 335         return 0;
 336 }
 337
 338 /*
 339  * Chip inputs are CLE, ALE, CE, WP, GND and eight I/O pins.  Chip
 340  * outputs are R/B and eight I/O pins.
 341  *
 342  * CE, WP and R/B are active low.
 343  */
 344 void nand_setpins(NANDFlashState *s,
 345                 int cle, int ale, int ce, int wp, int gnd)
 346 {
 347     s->cle = cle;
 348     s->ale = ale;
 349     s->ce = ce;
 350     s->wp = wp;
 351     s->gnd = gnd;
 352     if (wp)
 353         s->status |= NAND_IOSTATUS_UNPROTCT;
 354     else
 355         s->status &= ~NAND_IOSTATUS_UNPROTCT;
 356 }
 357
 358 void nand_getpins(NANDFlashState *s, int *rb)
 359 {
 360     *rb = 1;
 361 }
 362
 363 void nand_setio(NANDFlashState *s, uint8_t value)
 364 {
 365     if (!s->ce && s->cle) {
 366         if (nand_flash_ids[s->chip_id].options & NAND_SAMSUNG_LP) {
 367             if (s->cmd == NAND_CMD_READ0 && value == NAND_CMD_LPREAD2)
 368                 return;
 369             if (value == NAND_CMD_RANDOMREAD1) {
 370                 s->addr &= ~((1 << s->addr_shift) - 1);
 371                 s->addrlen = 0;
 372                 return;
 373             }
 374         }
 375         if (value == NAND_CMD_READ0)
 376             s->offset = 0;
 377         else if (value == NAND_CMD_READ1) {
 378             s->offset = 0x100;
 379             value = NAND_CMD_READ0;
 380         }
 381         else if (value == NAND_CMD_READ2) {
 382             s->offset = 1 << s->page_shift;
 383             value = NAND_CMD_READ0;
 384         }
 385
 386         s->cmd = value;
 387
 388         if (s->cmd == NAND_CMD_READSTATUS ||
 389                 s->cmd == NAND_CMD_PAGEPROGRAM2 ||
 390                 s->cmd == NAND_CMD_BLOCKERASE1 ||
 391                 s->cmd == NAND_CMD_BLOCKERASE2 ||
 392                 s->cmd == NAND_CMD_NOSERIALREAD2 ||
 393                 s->cmd == NAND_CMD_RANDOMREAD2 ||
 394                 s->cmd == NAND_CMD_RESET)
 395             nand_command(s);
 396
 397         if (s->cmd != NAND_CMD_RANDOMREAD2) {
 398             s->addrlen = 0;
 399             s->addr = 0;
 400         }
 401     }
 402
 403     if (s->ale) {
 404         s->addr |= value << (s->addrlen * 8);
 405         s->addrlen ++;
 406
 407         if (s->addrlen == 1 && s->cmd == NAND_CMD_READID)
 408             nand_command(s);
 409
 410         if (!(nand_flash_ids[s->chip_id].options & NAND_SAMSUNG_LP) &&
 411                 s->addrlen == 3 && (
 412                     s->cmd == NAND_CMD_READ0 ||
 413                     s->cmd == NAND_CMD_PAGEPROGRAM1))
 414             nand_command(s);
 415         if ((nand_flash_ids[s->chip_id].options & NAND_SAMSUNG_LP) &&
 416                s->addrlen == 4 && (
 417                     s->cmd == NAND_CMD_READ0 ||
 418                     s->cmd == NAND_CMD_PAGEPROGRAM1))
 419             nand_command(s);
 420     }
 421
 422     if (!s->cle && !s->ale && s->cmd == NAND_CMD_PAGEPROGRAM1) {
 423         if (s->iolen < (1 << s->page_shift) + (1 << s->oob_shift))
 424             s->io[s->iolen ++] = value;
 425     } else if (!s->cle && !s->ale && s->cmd == NAND_CMD_COPYBACKPRG1) {
 426         if ((s->addr & ((1 << s->addr_shift) - 1)) <
 427                 (1 << s->page_shift) + (1 << s->oob_shift)) {
 428             s->io[s->iolen + (s->addr & ((1 << s->addr_shift) - 1))] = value;
 429             s->addr ++;
 430         }
 431     }
 432 }
 433
 434 uint8_t nand_getio(NANDFlashState *s)
 435 {
 436     int offset;
 437
 438     /* Allow sequential reading */
 439     if (!s->iolen && s->cmd == NAND_CMD_READ0) {
 440         offset = (s->addr & ((1 << s->addr_shift) - 1)) + s->offset;
 441         s->offset = 0;
 442
 443         s->blk_load(s, s->addr, offset);
 444         if (s->gnd)
 445             s->iolen = (1 << s->page_shift) - offset;
 446         else
 447             s->iolen = (1 << s->page_shift) + (1 << s->oob_shift) - offset;
 448     }
 449
 450     if (s->ce || s->iolen <= 0)
 451         return 0;
 452
 453     s->iolen --;
 454     return *(s->ioaddr ++);
 455 }
 456
 457 NANDFlashState *nand_init(int manf_id, int chip_id)
 458 {
 459     int pagesize;
 460     NANDFlashState *s;
 461     int index;
 462
 463     if (nand_flash_ids[chip_id].size == 0) {
 464         hw_error("%s: Unsupported NAND chip ID.\n", __FUNCTION__);
 465     }
 466
 467     s = (NANDFlashState *) qemu_mallocz(sizeof(NANDFlashState));
 468     index = drive_get_index(IF_MTD, 0, 0);
 469     if (index != -1)
 470         s->bdrv = drives_table[index].bdrv;
 471     s->manf_id = manf_id;
 472     s->chip_id = chip_id;
 473     s->size = nand_flash_ids[s->chip_id].size << 20;
 474     if (nand_flash_ids[s->chip_id].options & NAND_SAMSUNG_LP) {
 475         s->page_shift = 11;
 476         s->erase_shift = 6;
 477     } else {
 478         s->page_shift = nand_flash_ids[s->chip_id].page_shift;
 479         s->erase_shift = nand_flash_ids[s->chip_id].erase_shift;
 480     }
 481
 482     switch (1 << s->page_shift) {
 483     case 256:
 484         nand_init_256(s);
 485         break;
 486     case 512:
 487         nand_init_512(s);
 488         break;
 489     case 2048:
 490         nand_init_2048(s);
 491         break;
 492     default:
 493         hw_error("%s: Unsupported NAND block size.\n", __FUNCTION__);
 494     }
 495
 496     pagesize = 1 << s->oob_shift;
 497     s->mem_oob = 1;
 498     if (s->bdrv && bdrv_getlength(s->bdrv) >=
 499                     (s->pages << s->page_shift) + (s->pages << s->oob_shift)) {
 500         pagesize = 0;
 501         s->mem_oob = 0;
 502     }
 503
 504     if (!s->bdrv)
 505         pagesize += 1 << s->page_shift;
 506     if (pagesize)
 507         s->storage = (uint8_t *) memset(qemu_malloc(s->pages * pagesize),
 508                         0xff, s->pages * pagesize);
 509     /* Give s->ioaddr a sane value in case we save state before it
 510        is used.  */
 511     s->ioaddr = s->io;
 512
 513     register_savevm("nand", -1, 0, nand_save, nand_load, s);
 514
 515     return s;
 516 }
 517
 518 void nand_done(NANDFlashState *s)
 519 {
 520     if (s->bdrv) {
 521         bdrv_close(s->bdrv);
 522         bdrv_delete(s->bdrv);
 523     }
 524
 525     if (!s->bdrv || s->mem_oob)
 526         free(s->storage);
 527
 528     free(s);
 529 }
 530
 531 #else
 532
 533 /* Program a single page */
 534 static void glue(nand_blk_write_, PAGE_SIZE)(NANDFlashState *s)
 535 {
 536     uint32_t off, page, sector, soff;
 537     uint8_t iobuf[(PAGE_SECTORS + 2) * 0x200];
 538     if (PAGE(s->addr) >= s->pages)
 539         return;
 540
 541     if (!s->bdrv) {
 542         memcpy(s->storage + PAGE_START(s->addr) + (s->addr & PAGE_MASK) +
 543                         s->offset, s->io, s->iolen);
 544     } else if (s->mem_oob) {
 545         sector = SECTOR(s->addr);
 546         off = (s->addr & PAGE_MASK) + s->offset;
 547         soff = SECTOR_OFFSET(s->addr);
 548         if (bdrv_read(s->bdrv, sector, iobuf, PAGE_SECTORS) == -1) {
 549             printf("%s: read error in sector %i\n", __FUNCTION__, sector);
 550             return;
 551         }
 552
 553         memcpy(iobuf + (soff | off), s->io, MIN(s->iolen, PAGE_SIZE - off));
 554         if (off + s->iolen > PAGE_SIZE) {
 555             page = PAGE(s->addr);
 556             memcpy(s->storage + (page << OOB_SHIFT), s->io + PAGE_SIZE - off,
 557                             MIN(OOB_SIZE, off + s->iolen - PAGE_SIZE));
 558         }
 559
 560         if (bdrv_write(s->bdrv, sector, iobuf, PAGE_SECTORS) == -1)
 561             printf("%s: write error in sector %i\n", __FUNCTION__, sector);
 562     } else {
 563         off = PAGE_START(s->addr) + (s->addr & PAGE_MASK) + s->offset;
 564         sector = off >> 9;
 565         soff = off & 0x1ff;
 566         if (bdrv_read(s->bdrv, sector, iobuf, PAGE_SECTORS + 2) == -1) {
 567             printf("%s: read error in sector %i\n", __FUNCTION__, sector);
 568             return;
 569         }
 570
 571         memcpy(iobuf + soff, s->io, s->iolen);
 572
 573         if (bdrv_write(s->bdrv, sector, iobuf, PAGE_SECTORS + 2) == -1)
 574             printf("%s: write error in sector %i\n", __FUNCTION__, sector);
 575     }
 576     s->offset = 0;
 577 }
 578
 579 /* Erase a single block */
 580 static void glue(nand_blk_erase_, PAGE_SIZE)(NANDFlashState *s)
 581 {
 582     uint32_t i, page, addr;
 583     uint8_t iobuf[0x200] = { [0 ... 0x1ff] = 0xff, };
 584     addr = s->addr & ~((1 << (ADDR_SHIFT + s->erase_shift)) - 1);
 585
 586     if (PAGE(addr) >= s->pages)
 587         return;
 588
 589     if (!s->bdrv) {
 590         memset(s->storage + PAGE_START(addr),
 591                         0xff, (PAGE_SIZE + OOB_SIZE) << s->erase_shift);
 592     } else if (s->mem_oob) {
 593         memset(s->storage + (PAGE(addr) << OOB_SHIFT),
 594                         0xff, OOB_SIZE << s->erase_shift);
 595         i = SECTOR(addr);
 596         page = SECTOR(addr + (ADDR_SHIFT + s->erase_shift));
 597         for (; i < page; i ++)
 598             if (bdrv_write(s->bdrv, i, iobuf, 1) == -1)
 599                 printf("%s: write error in sector %i\n", __FUNCTION__, i);
 600     } else {
 601         addr = PAGE_START(addr);
 602         page = addr >> 9;
 603         if (bdrv_read(s->bdrv, page, iobuf, 1) == -1)
 604             printf("%s: read error in sector %i\n", __FUNCTION__, page);
 605         memset(iobuf + (addr & 0x1ff), 0xff, (~addr & 0x1ff) + 1);
 606         if (bdrv_write(s->bdrv, page, iobuf, 1) == -1)
 607             printf("%s: write error in sector %i\n", __FUNCTION__, page);
 608
 609         memset(iobuf, 0xff, 0x200);
 610         i = (addr & ~0x1ff) + 0x200;
 611         for (addr += ((PAGE_SIZE + OOB_SIZE) << s->erase_shift) - 0x200;
 612                         i < addr; i += 0x200)
 613             if (bdrv_write(s->bdrv, i >> 9, iobuf, 1) == -1)
 614                 printf("%s: write error in sector %i\n", __FUNCTION__, i >> 9);
 615
 616         page = i >> 9;
 617         if (bdrv_read(s->bdrv, page, iobuf, 1) == -1)
 618             printf("%s: read error in sector %i\n", __FUNCTION__, page);
 619         memset(iobuf, 0xff, ((addr - 1) & 0x1ff) + 1);
 620         if (bdrv_write(s->bdrv, page, iobuf, 1) == -1)
 621             printf("%s: write error in sector %i\n", __FUNCTION__, page);
 622     }
 623 }
 624
 625 static void glue(nand_blk_load_, PAGE_SIZE)(NANDFlashState *s,
 626                 uint32_t addr, int offset)
 627 {
 628     if (PAGE(addr) >= s->pages)
 629         return;
 630
 631     if (s->bdrv) {
 632         if (s->mem_oob) {
 633             if (bdrv_read(s->bdrv, SECTOR(addr), s->io, PAGE_SECTORS) == -1)
 634                 printf("%s: read error in sector %i\n",
 635                                 __FUNCTION__, SECTOR(addr));
 636             memcpy(s->io + SECTOR_OFFSET(s->addr) + PAGE_SIZE,
 637                             s->storage + (PAGE(s->addr) << OOB_SHIFT),
 638                             OOB_SIZE);
 639             s->ioaddr = s->io + SECTOR_OFFSET(s->addr) + offset;
 640         } else {
 641             if (bdrv_read(s->bdrv, PAGE_START(addr) >> 9,
 642                                     s->io, (PAGE_SECTORS + 2)) == -1)
 643                 printf("%s: read error in sector %i\n",
 644                                 __FUNCTION__, PAGE_START(addr) >> 9);
 645             s->ioaddr = s->io + (PAGE_START(addr) & 0x1ff) + offset;
 646         }
 647     } else {
 648         memcpy(s->io, s->storage + PAGE_START(s->addr) +
 649                         offset, PAGE_SIZE + OOB_SIZE - offset);
 650         s->ioaddr = s->io;
 651     }
 652
 653     s->addr &= PAGE_SIZE - 1;
 654     s->addr += PAGE_SIZE;
 655 }
 656
 657 static void glue(nand_init_, PAGE_SIZE)(NANDFlashState *s)
 658 {
 659     s->oob_shift = PAGE_SHIFT - 5;
 660     s->pages = s->size >> PAGE_SHIFT;
 661     s->addr_shift = ADDR_SHIFT;
 662
 663     s->blk_erase = glue(nand_blk_erase_, PAGE_SIZE);
 664     s->blk_write = glue(nand_blk_write_, PAGE_SIZE);
 665     s->blk_load = glue(nand_blk_load_, PAGE_SIZE);
 666 }
 667
 668 # undef PAGE_SIZE
 669 # undef PAGE_SHIFT
 670 # undef PAGE_SECTORS
 671 # undef ADDR_SHIFT
 672 #endif  /* NAND_IO */