2 * QEMU AMD PC-Net II (Am79C970A) emulation
4 * Copyright (c) 2004 Antony T Curtis
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
25 /* This software was written to be compatible with the specification:
26 * AMD Am79C970A PCnet-PCI II Ethernet Controller Data-Sheet
27 * AMD Publication# 19436 Rev:E Amendment/0 Issue Date: June 2000
31 * On Sparc32, this is the Lance (Am7990) part of chip STP2000 (Master I/O), also
32 * produced as NCR89C100. See
33 * http://www.ibiblio.org/pub/historic-linux/early-ports/Sparc/NCR/NCR89C100.txt
35 * http://www.ibiblio.org/pub/historic-linux/early-ports/Sparc/NCR/NCR92C990.txt
38 #include "qemu/osdep.h"
41 #include "qemu/timer.h"
42 #include "qemu/sockets.h"
43 #include "sysemu/sysemu.h"
49 //#define PCNET_DEBUG_IO
50 //#define PCNET_DEBUG_BCR
51 //#define PCNET_DEBUG_CSR
52 //#define PCNET_DEBUG_RMD
53 //#define PCNET_DEBUG_TMD
54 //#define PCNET_DEBUG_MATCH
57 struct qemu_ether_header
{
58 uint8_t ether_dhost
[6];
59 uint8_t ether_shost
[6];
63 #define CSR_INIT(S) !!(((S)->csr[0])&0x0001)
64 #define CSR_STRT(S) !!(((S)->csr[0])&0x0002)
65 #define CSR_STOP(S) !!(((S)->csr[0])&0x0004)
66 #define CSR_TDMD(S) !!(((S)->csr[0])&0x0008)
67 #define CSR_TXON(S) !!(((S)->csr[0])&0x0010)
68 #define CSR_RXON(S) !!(((S)->csr[0])&0x0020)
69 #define CSR_INEA(S) !!(((S)->csr[0])&0x0040)
70 #define CSR_BSWP(S) !!(((S)->csr[3])&0x0004)
71 #define CSR_LAPPEN(S) !!(((S)->csr[3])&0x0020)
72 #define CSR_DXSUFLO(S) !!(((S)->csr[3])&0x0040)
73 #define CSR_ASTRP_RCV(S) !!(((S)->csr[4])&0x0800)
74 #define CSR_DPOLL(S) !!(((S)->csr[4])&0x1000)
75 #define CSR_SPND(S) !!(((S)->csr[5])&0x0001)
76 #define CSR_LTINTEN(S) !!(((S)->csr[5])&0x4000)
77 #define CSR_TOKINTD(S) !!(((S)->csr[5])&0x8000)
78 #define CSR_DRX(S) !!(((S)->csr[15])&0x0001)
79 #define CSR_DTX(S) !!(((S)->csr[15])&0x0002)
80 #define CSR_LOOP(S) !!(((S)->csr[15])&0x0004)
81 #define CSR_DXMTFCS(S) !!(((S)->csr[15])&0x0008)
82 #define CSR_INTL(S) !!(((S)->csr[15])&0x0040)
83 #define CSR_DRCVPA(S) !!(((S)->csr[15])&0x2000)
84 #define CSR_DRCVBC(S) !!(((S)->csr[15])&0x4000)
85 #define CSR_PROM(S) !!(((S)->csr[15])&0x8000)
87 #define CSR_CRBC(S) ((S)->csr[40])
88 #define CSR_CRST(S) ((S)->csr[41])
89 #define CSR_CXBC(S) ((S)->csr[42])
90 #define CSR_CXST(S) ((S)->csr[43])
91 #define CSR_NRBC(S) ((S)->csr[44])
92 #define CSR_NRST(S) ((S)->csr[45])
93 #define CSR_POLL(S) ((S)->csr[46])
94 #define CSR_PINT(S) ((S)->csr[47])
95 #define CSR_RCVRC(S) ((S)->csr[72])
96 #define CSR_XMTRC(S) ((S)->csr[74])
97 #define CSR_RCVRL(S) ((S)->csr[76])
98 #define CSR_XMTRL(S) ((S)->csr[78])
99 #define CSR_MISSC(S) ((S)->csr[112])
101 #define CSR_IADR(S) ((S)->csr[ 1] | ((uint32_t)(S)->csr[ 2] << 16))
102 #define CSR_CRBA(S) ((S)->csr[18] | ((uint32_t)(S)->csr[19] << 16))
103 #define CSR_CXBA(S) ((S)->csr[20] | ((uint32_t)(S)->csr[21] << 16))
104 #define CSR_NRBA(S) ((S)->csr[22] | ((uint32_t)(S)->csr[23] << 16))
105 #define CSR_BADR(S) ((S)->csr[24] | ((uint32_t)(S)->csr[25] << 16))
106 #define CSR_NRDA(S) ((S)->csr[26] | ((uint32_t)(S)->csr[27] << 16))
107 #define CSR_CRDA(S) ((S)->csr[28] | ((uint32_t)(S)->csr[29] << 16))
108 #define CSR_BADX(S) ((S)->csr[30] | ((uint32_t)(S)->csr[31] << 16))
109 #define CSR_NXDA(S) ((S)->csr[32] | ((uint32_t)(S)->csr[33] << 16))
110 #define CSR_CXDA(S) ((S)->csr[34] | ((uint32_t)(S)->csr[35] << 16))
111 #define CSR_NNRD(S) ((S)->csr[36] | ((uint32_t)(S)->csr[37] << 16))
112 #define CSR_NNXD(S) ((S)->csr[38] | ((uint32_t)(S)->csr[39] << 16))
113 #define CSR_PXDA(S) ((S)->csr[60] | ((uint32_t)(S)->csr[61] << 16))
114 #define CSR_NXBA(S) ((S)->csr[64] | ((uint32_t)(S)->csr[65] << 16))
116 #define PHYSADDR(S,A) \
117 (BCR_SSIZE32(S) ? (A) : (A) | ((0xff00 & (uint32_t)(S)->csr[2])<<16))
119 struct pcnet_initblk16
{
127 struct pcnet_initblk32
{
146 #define TMDL_BCNT_MASK 0x0fff
147 #define TMDL_BCNT_SH 0
148 #define TMDL_ONES_MASK 0xf000
149 #define TMDL_ONES_SH 12
151 #define TMDS_BPE_MASK 0x0080
152 #define TMDS_BPE_SH 7
153 #define TMDS_ENP_MASK 0x0100
154 #define TMDS_ENP_SH 8
155 #define TMDS_STP_MASK 0x0200
156 #define TMDS_STP_SH 9
157 #define TMDS_DEF_MASK 0x0400
158 #define TMDS_DEF_SH 10
159 #define TMDS_ONE_MASK 0x0800
160 #define TMDS_ONE_SH 11
161 #define TMDS_LTINT_MASK 0x1000
162 #define TMDS_LTINT_SH 12
163 #define TMDS_NOFCS_MASK 0x2000
164 #define TMDS_NOFCS_SH 13
165 #define TMDS_ADDFCS_MASK TMDS_NOFCS_MASK
166 #define TMDS_ADDFCS_SH TMDS_NOFCS_SH
167 #define TMDS_ERR_MASK 0x4000
168 #define TMDS_ERR_SH 14
169 #define TMDS_OWN_MASK 0x8000
170 #define TMDS_OWN_SH 15
172 #define TMDM_TRC_MASK 0x0000000f
173 #define TMDM_TRC_SH 0
174 #define TMDM_TDR_MASK 0x03ff0000
175 #define TMDM_TDR_SH 16
176 #define TMDM_RTRY_MASK 0x04000000
177 #define TMDM_RTRY_SH 26
178 #define TMDM_LCAR_MASK 0x08000000
179 #define TMDM_LCAR_SH 27
180 #define TMDM_LCOL_MASK 0x10000000
181 #define TMDM_LCOL_SH 28
182 #define TMDM_EXDEF_MASK 0x20000000
183 #define TMDM_EXDEF_SH 29
184 #define TMDM_UFLO_MASK 0x40000000
185 #define TMDM_UFLO_SH 30
186 #define TMDM_BUFF_MASK 0x80000000
187 #define TMDM_BUFF_SH 31
197 #define RMDL_BCNT_MASK 0x0fff
198 #define RMDL_BCNT_SH 0
199 #define RMDL_ONES_MASK 0xf000
200 #define RMDL_ONES_SH 12
202 #define RMDS_BAM_MASK 0x0010
203 #define RMDS_BAM_SH 4
204 #define RMDS_LFAM_MASK 0x0020
205 #define RMDS_LFAM_SH 5
206 #define RMDS_PAM_MASK 0x0040
207 #define RMDS_PAM_SH 6
208 #define RMDS_BPE_MASK 0x0080
209 #define RMDS_BPE_SH 7
210 #define RMDS_ENP_MASK 0x0100
211 #define RMDS_ENP_SH 8
212 #define RMDS_STP_MASK 0x0200
213 #define RMDS_STP_SH 9
214 #define RMDS_BUFF_MASK 0x0400
215 #define RMDS_BUFF_SH 10
216 #define RMDS_CRC_MASK 0x0800
217 #define RMDS_CRC_SH 11
218 #define RMDS_OFLO_MASK 0x1000
219 #define RMDS_OFLO_SH 12
220 #define RMDS_FRAM_MASK 0x2000
221 #define RMDS_FRAM_SH 13
222 #define RMDS_ERR_MASK 0x4000
223 #define RMDS_ERR_SH 14
224 #define RMDS_OWN_MASK 0x8000
225 #define RMDS_OWN_SH 15
227 #define RMDM_MCNT_MASK 0x00000fff
228 #define RMDM_MCNT_SH 0
229 #define RMDM_ZEROS_MASK 0x0000f000
230 #define RMDM_ZEROS_SH 12
231 #define RMDM_RPC_MASK 0x00ff0000
232 #define RMDM_RPC_SH 16
233 #define RMDM_RCC_MASK 0xff000000
234 #define RMDM_RCC_SH 24
236 #define SET_FIELD(regp, name, field, value) \
237 (*(regp) = (*(regp) & ~(name ## _ ## field ## _MASK)) \
238 | ((value) << name ## _ ## field ## _SH))
240 #define GET_FIELD(reg, name, field) \
241 (((reg) & name ## _ ## field ## _MASK) >> name ## _ ## field ## _SH)
243 #define PRINT_TMD(T) printf( \
244 "TMD0 : TBADR=0x%08x\n" \
245 "TMD1 : OWN=%d, ERR=%d, FCS=%d, LTI=%d, " \
246 "ONE=%d, DEF=%d, STP=%d, ENP=%d,\n" \
247 " BPE=%d, BCNT=%d\n" \
248 "TMD2 : BUF=%d, UFL=%d, EXD=%d, LCO=%d, " \
249 "LCA=%d, RTR=%d,\n" \
250 " TDR=%d, TRC=%d\n", \
252 GET_FIELD((T)->status, TMDS, OWN), \
253 GET_FIELD((T)->status, TMDS, ERR), \
254 GET_FIELD((T)->status, TMDS, NOFCS), \
255 GET_FIELD((T)->status, TMDS, LTINT), \
256 GET_FIELD((T)->status, TMDS, ONE), \
257 GET_FIELD((T)->status, TMDS, DEF), \
258 GET_FIELD((T)->status, TMDS, STP), \
259 GET_FIELD((T)->status, TMDS, ENP), \
260 GET_FIELD((T)->status, TMDS, BPE), \
261 4096-GET_FIELD((T)->length, TMDL, BCNT), \
262 GET_FIELD((T)->misc, TMDM, BUFF), \
263 GET_FIELD((T)->misc, TMDM, UFLO), \
264 GET_FIELD((T)->misc, TMDM, EXDEF), \
265 GET_FIELD((T)->misc, TMDM, LCOL), \
266 GET_FIELD((T)->misc, TMDM, LCAR), \
267 GET_FIELD((T)->misc, TMDM, RTRY), \
268 GET_FIELD((T)->misc, TMDM, TDR), \
269 GET_FIELD((T)->misc, TMDM, TRC))
271 #define PRINT_RMD(R) printf( \
272 "RMD0 : RBADR=0x%08x\n" \
273 "RMD1 : OWN=%d, ERR=%d, FRAM=%d, OFLO=%d, " \
274 "CRC=%d, BUFF=%d, STP=%d, ENP=%d,\n " \
275 "BPE=%d, PAM=%d, LAFM=%d, BAM=%d, ONES=%d, BCNT=%d\n" \
276 "RMD2 : RCC=%d, RPC=%d, MCNT=%d, ZEROS=%d\n", \
278 GET_FIELD((R)->status, RMDS, OWN), \
279 GET_FIELD((R)->status, RMDS, ERR), \
280 GET_FIELD((R)->status, RMDS, FRAM), \
281 GET_FIELD((R)->status, RMDS, OFLO), \
282 GET_FIELD((R)->status, RMDS, CRC), \
283 GET_FIELD((R)->status, RMDS, BUFF), \
284 GET_FIELD((R)->status, RMDS, STP), \
285 GET_FIELD((R)->status, RMDS, ENP), \
286 GET_FIELD((R)->status, RMDS, BPE), \
287 GET_FIELD((R)->status, RMDS, PAM), \
288 GET_FIELD((R)->status, RMDS, LFAM), \
289 GET_FIELD((R)->status, RMDS, BAM), \
290 GET_FIELD((R)->buf_length, RMDL, ONES), \
291 4096-GET_FIELD((R)->buf_length, RMDL, BCNT), \
292 GET_FIELD((R)->msg_length, RMDM, RCC), \
293 GET_FIELD((R)->msg_length, RMDM, RPC), \
294 GET_FIELD((R)->msg_length, RMDM, MCNT), \
295 GET_FIELD((R)->msg_length, RMDM, ZEROS))
297 static inline void pcnet_tmd_load(PCNetState
*s
, struct pcnet_TMD
*tmd
,
300 if (!BCR_SSIZE32(s
)) {
306 s
->phys_mem_read(s
->dma_opaque
, addr
, (void *)&xda
, sizeof(xda
), 0);
307 tmd
->tbadr
= le32_to_cpu(xda
.tbadr
) & 0xffffff;
308 tmd
->length
= le16_to_cpu(xda
.length
);
309 tmd
->status
= (le32_to_cpu(xda
.tbadr
) >> 16) & 0xff00;
310 tmd
->misc
= le16_to_cpu(xda
.status
) << 16;
313 s
->phys_mem_read(s
->dma_opaque
, addr
, (void *)tmd
, sizeof(*tmd
), 0);
314 le32_to_cpus(&tmd
->tbadr
);
315 le16_to_cpus((uint16_t *)&tmd
->length
);
316 le16_to_cpus((uint16_t *)&tmd
->status
);
317 le32_to_cpus(&tmd
->misc
);
318 le32_to_cpus(&tmd
->res
);
319 if (BCR_SWSTYLE(s
) == 3) {
320 uint32_t tmp
= tmd
->tbadr
;
321 tmd
->tbadr
= tmd
->misc
;
327 static inline void pcnet_tmd_store(PCNetState
*s
, const struct pcnet_TMD
*tmd
,
330 if (!BCR_SSIZE32(s
)) {
336 xda
.tbadr
= cpu_to_le32((tmd
->tbadr
& 0xffffff) |
337 ((tmd
->status
& 0xff00) << 16));
338 xda
.length
= cpu_to_le16(tmd
->length
);
339 xda
.status
= cpu_to_le16(tmd
->misc
>> 16);
340 s
->phys_mem_write(s
->dma_opaque
, addr
, (void *)&xda
, sizeof(xda
), 0);
349 xda
.tbadr
= cpu_to_le32(tmd
->tbadr
);
350 xda
.length
= cpu_to_le16(tmd
->length
);
351 xda
.status
= cpu_to_le16(tmd
->status
);
352 xda
.misc
= cpu_to_le32(tmd
->misc
);
353 xda
.res
= cpu_to_le32(tmd
->res
);
354 if (BCR_SWSTYLE(s
) == 3) {
355 uint32_t tmp
= xda
.tbadr
;
356 xda
.tbadr
= xda
.misc
;
359 s
->phys_mem_write(s
->dma_opaque
, addr
, (void *)&xda
, sizeof(xda
), 0);
363 static inline void pcnet_rmd_load(PCNetState
*s
, struct pcnet_RMD
*rmd
,
366 if (!BCR_SSIZE32(s
)) {
372 s
->phys_mem_read(s
->dma_opaque
, addr
, (void *)&rda
, sizeof(rda
), 0);
373 rmd
->rbadr
= le32_to_cpu(rda
.rbadr
) & 0xffffff;
374 rmd
->buf_length
= le16_to_cpu(rda
.buf_length
);
375 rmd
->status
= (le32_to_cpu(rda
.rbadr
) >> 16) & 0xff00;
376 rmd
->msg_length
= le16_to_cpu(rda
.msg_length
);
379 s
->phys_mem_read(s
->dma_opaque
, addr
, (void *)rmd
, sizeof(*rmd
), 0);
380 le32_to_cpus(&rmd
->rbadr
);
381 le16_to_cpus((uint16_t *)&rmd
->buf_length
);
382 le16_to_cpus((uint16_t *)&rmd
->status
);
383 le32_to_cpus(&rmd
->msg_length
);
384 le32_to_cpus(&rmd
->res
);
385 if (BCR_SWSTYLE(s
) == 3) {
386 uint32_t tmp
= rmd
->rbadr
;
387 rmd
->rbadr
= rmd
->msg_length
;
388 rmd
->msg_length
= tmp
;
393 static inline void pcnet_rmd_store(PCNetState
*s
, struct pcnet_RMD
*rmd
,
396 if (!BCR_SSIZE32(s
)) {
402 rda
.rbadr
= cpu_to_le32((rmd
->rbadr
& 0xffffff) |
403 ((rmd
->status
& 0xff00) << 16));
404 rda
.buf_length
= cpu_to_le16(rmd
->buf_length
);
405 rda
.msg_length
= cpu_to_le16(rmd
->msg_length
);
406 s
->phys_mem_write(s
->dma_opaque
, addr
, (void *)&rda
, sizeof(rda
), 0);
415 rda
.rbadr
= cpu_to_le32(rmd
->rbadr
);
416 rda
.buf_length
= cpu_to_le16(rmd
->buf_length
);
417 rda
.status
= cpu_to_le16(rmd
->status
);
418 rda
.msg_length
= cpu_to_le32(rmd
->msg_length
);
419 rda
.res
= cpu_to_le32(rmd
->res
);
420 if (BCR_SWSTYLE(s
) == 3) {
421 uint32_t tmp
= rda
.rbadr
;
422 rda
.rbadr
= rda
.msg_length
;
423 rda
.msg_length
= tmp
;
425 s
->phys_mem_write(s
->dma_opaque
, addr
, (void *)&rda
, sizeof(rda
), 0);
430 #define TMDLOAD(TMD,ADDR) pcnet_tmd_load(s,TMD,ADDR)
432 #define TMDSTORE(TMD,ADDR) pcnet_tmd_store(s,TMD,ADDR)
434 #define RMDLOAD(RMD,ADDR) pcnet_rmd_load(s,RMD,ADDR)
436 #define RMDSTORE(RMD,ADDR) pcnet_rmd_store(s,RMD,ADDR)
440 #define CHECK_RMD(ADDR,RES) do { \
441 struct pcnet_RMD rmd; \
442 RMDLOAD(&rmd,(ADDR)); \
443 (RES) |= (GET_FIELD(rmd.buf_length, RMDL, ONES) != 15) \
444 || (GET_FIELD(rmd.msg_length, RMDM, ZEROS) != 0); \
447 #define CHECK_TMD(ADDR,RES) do { \
448 struct pcnet_TMD tmd; \
449 TMDLOAD(&tmd,(ADDR)); \
450 (RES) |= (GET_FIELD(tmd.length, TMDL, ONES) != 15); \
455 #define CHECK_RMD(ADDR,RES) do { \
456 switch (BCR_SWSTYLE(s)) { \
460 s->phys_mem_read(s->dma_opaque, (ADDR), \
461 (void *)&rda[0], sizeof(rda), 0); \
462 (RES) |= (rda[2] & 0xf000)!=0xf000; \
463 (RES) |= (rda[3] & 0xf000)!=0x0000; \
470 s->phys_mem_read(s->dma_opaque, (ADDR), \
471 (void *)&rda[0], sizeof(rda), 0); \
472 (RES) |= (rda[1] & 0x0000f000L)!=0x0000f000L; \
473 (RES) |= (rda[2] & 0x0000f000L)!=0x00000000L; \
479 s->phys_mem_read(s->dma_opaque, (ADDR), \
480 (void *)&rda[0], sizeof(rda), 0); \
481 (RES) |= (rda[0] & 0x0000f000L)!=0x00000000L; \
482 (RES) |= (rda[1] & 0x0000f000L)!=0x0000f000L; \
488 #define CHECK_TMD(ADDR,RES) do { \
489 switch (BCR_SWSTYLE(s)) { \
493 s->phys_mem_read(s->dma_opaque, (ADDR), \
494 (void *)&xda[0], sizeof(xda), 0); \
495 (RES) |= (xda[2] & 0xf000)!=0xf000; \
503 s->phys_mem_read(s->dma_opaque, (ADDR), \
504 (void *)&xda[0], sizeof(xda), 0); \
505 (RES) |= (xda[1] & 0x0000f000L)!=0x0000f000L; \
513 #define PRINT_PKTHDR(BUF) do { \
514 struct qemu_ether_header *hdr = (void *)(BUF); \
515 printf("packet dhost=%02x:%02x:%02x:%02x:%02x:%02x, " \
516 "shost=%02x:%02x:%02x:%02x:%02x:%02x, " \
518 hdr->ether_dhost[0],hdr->ether_dhost[1],hdr->ether_dhost[2], \
519 hdr->ether_dhost[3],hdr->ether_dhost[4],hdr->ether_dhost[5], \
520 hdr->ether_shost[0],hdr->ether_shost[1],hdr->ether_shost[2], \
521 hdr->ether_shost[3],hdr->ether_shost[4],hdr->ether_shost[5], \
522 be16_to_cpu(hdr->ether_type)); \
525 #define MULTICAST_FILTER_LEN 8
527 static inline uint32_t lnc_mchash(const uint8_t *ether_addr
)
529 #define LNC_POLYNOMIAL 0xEDB88320UL
530 uint32_t crc
= 0xFFFFFFFF;
534 for (idx
= 0; idx
< 6; idx
++) {
535 for (data
= *ether_addr
++, bit
= 0; bit
< MULTICAST_FILTER_LEN
; bit
++) {
536 crc
= (crc
>> 1) ^ (((crc
^ data
) & 1) ? LNC_POLYNOMIAL
: 0);
541 #undef LNC_POLYNOMIAL
544 #define CRC(crc, ch) (crc = (crc >> 8) ^ crctab[(crc ^ (ch)) & 0xff])
546 /* generated using the AUTODIN II polynomial
547 * x^32 + x^26 + x^23 + x^22 + x^16 +
548 * x^12 + x^11 + x^10 + x^8 + x^7 + x^5 + x^4 + x^2 + x^1 + 1
550 static const uint32_t crctab
[256] = {
551 0x00000000, 0x77073096, 0xee0e612c, 0x990951ba,
552 0x076dc419, 0x706af48f, 0xe963a535, 0x9e6495a3,
553 0x0edb8832, 0x79dcb8a4, 0xe0d5e91e, 0x97d2d988,
554 0x09b64c2b, 0x7eb17cbd, 0xe7b82d07, 0x90bf1d91,
555 0x1db71064, 0x6ab020f2, 0xf3b97148, 0x84be41de,
556 0x1adad47d, 0x6ddde4eb, 0xf4d4b551, 0x83d385c7,
557 0x136c9856, 0x646ba8c0, 0xfd62f97a, 0x8a65c9ec,
558 0x14015c4f, 0x63066cd9, 0xfa0f3d63, 0x8d080df5,
559 0x3b6e20c8, 0x4c69105e, 0xd56041e4, 0xa2677172,
560 0x3c03e4d1, 0x4b04d447, 0xd20d85fd, 0xa50ab56b,
561 0x35b5a8fa, 0x42b2986c, 0xdbbbc9d6, 0xacbcf940,
562 0x32d86ce3, 0x45df5c75, 0xdcd60dcf, 0xabd13d59,
563 0x26d930ac, 0x51de003a, 0xc8d75180, 0xbfd06116,
564 0x21b4f4b5, 0x56b3c423, 0xcfba9599, 0xb8bda50f,
565 0x2802b89e, 0x5f058808, 0xc60cd9b2, 0xb10be924,
566 0x2f6f7c87, 0x58684c11, 0xc1611dab, 0xb6662d3d,
567 0x76dc4190, 0x01db7106, 0x98d220bc, 0xefd5102a,
568 0x71b18589, 0x06b6b51f, 0x9fbfe4a5, 0xe8b8d433,
569 0x7807c9a2, 0x0f00f934, 0x9609a88e, 0xe10e9818,
570 0x7f6a0dbb, 0x086d3d2d, 0x91646c97, 0xe6635c01,
571 0x6b6b51f4, 0x1c6c6162, 0x856530d8, 0xf262004e,
572 0x6c0695ed, 0x1b01a57b, 0x8208f4c1, 0xf50fc457,
573 0x65b0d9c6, 0x12b7e950, 0x8bbeb8ea, 0xfcb9887c,
574 0x62dd1ddf, 0x15da2d49, 0x8cd37cf3, 0xfbd44c65,
575 0x4db26158, 0x3ab551ce, 0xa3bc0074, 0xd4bb30e2,
576 0x4adfa541, 0x3dd895d7, 0xa4d1c46d, 0xd3d6f4fb,
577 0x4369e96a, 0x346ed9fc, 0xad678846, 0xda60b8d0,
578 0x44042d73, 0x33031de5, 0xaa0a4c5f, 0xdd0d7cc9,
579 0x5005713c, 0x270241aa, 0xbe0b1010, 0xc90c2086,
580 0x5768b525, 0x206f85b3, 0xb966d409, 0xce61e49f,
581 0x5edef90e, 0x29d9c998, 0xb0d09822, 0xc7d7a8b4,
582 0x59b33d17, 0x2eb40d81, 0xb7bd5c3b, 0xc0ba6cad,
583 0xedb88320, 0x9abfb3b6, 0x03b6e20c, 0x74b1d29a,
584 0xead54739, 0x9dd277af, 0x04db2615, 0x73dc1683,
585 0xe3630b12, 0x94643b84, 0x0d6d6a3e, 0x7a6a5aa8,
586 0xe40ecf0b, 0x9309ff9d, 0x0a00ae27, 0x7d079eb1,
587 0xf00f9344, 0x8708a3d2, 0x1e01f268, 0x6906c2fe,
588 0xf762575d, 0x806567cb, 0x196c3671, 0x6e6b06e7,
589 0xfed41b76, 0x89d32be0, 0x10da7a5a, 0x67dd4acc,
590 0xf9b9df6f, 0x8ebeeff9, 0x17b7be43, 0x60b08ed5,
591 0xd6d6a3e8, 0xa1d1937e, 0x38d8c2c4, 0x4fdff252,
592 0xd1bb67f1, 0xa6bc5767, 0x3fb506dd, 0x48b2364b,
593 0xd80d2bda, 0xaf0a1b4c, 0x36034af6, 0x41047a60,
594 0xdf60efc3, 0xa867df55, 0x316e8eef, 0x4669be79,
595 0xcb61b38c, 0xbc66831a, 0x256fd2a0, 0x5268e236,
596 0xcc0c7795, 0xbb0b4703, 0x220216b9, 0x5505262f,
597 0xc5ba3bbe, 0xb2bd0b28, 0x2bb45a92, 0x5cb36a04,
598 0xc2d7ffa7, 0xb5d0cf31, 0x2cd99e8b, 0x5bdeae1d,
599 0x9b64c2b0, 0xec63f226, 0x756aa39c, 0x026d930a,
600 0x9c0906a9, 0xeb0e363f, 0x72076785, 0x05005713,
601 0x95bf4a82, 0xe2b87a14, 0x7bb12bae, 0x0cb61b38,
602 0x92d28e9b, 0xe5d5be0d, 0x7cdcefb7, 0x0bdbdf21,
603 0x86d3d2d4, 0xf1d4e242, 0x68ddb3f8, 0x1fda836e,
604 0x81be16cd, 0xf6b9265b, 0x6fb077e1, 0x18b74777,
605 0x88085ae6, 0xff0f6a70, 0x66063bca, 0x11010b5c,
606 0x8f659eff, 0xf862ae69, 0x616bffd3, 0x166ccf45,
607 0xa00ae278, 0xd70dd2ee, 0x4e048354, 0x3903b3c2,
608 0xa7672661, 0xd06016f7, 0x4969474d, 0x3e6e77db,
609 0xaed16a4a, 0xd9d65adc, 0x40df0b66, 0x37d83bf0,
610 0xa9bcae53, 0xdebb9ec5, 0x47b2cf7f, 0x30b5ffe9,
611 0xbdbdf21c, 0xcabac28a, 0x53b39330, 0x24b4a3a6,
612 0xbad03605, 0xcdd70693, 0x54de5729, 0x23d967bf,
613 0xb3667a2e, 0xc4614ab8, 0x5d681b02, 0x2a6f2b94,
614 0xb40bbe37, 0xc30c8ea1, 0x5a05df1b, 0x2d02ef8d,
617 static inline int padr_match(PCNetState
*s
, const uint8_t *buf
, int size
)
619 struct qemu_ether_header
*hdr
= (void *)buf
;
621 s
->csr
[12] & 0xff, s
->csr
[12] >> 8,
622 s
->csr
[13] & 0xff, s
->csr
[13] >> 8,
623 s
->csr
[14] & 0xff, s
->csr
[14] >> 8
625 int result
= (!CSR_DRCVPA(s
)) && !memcmp(hdr
->ether_dhost
, padr
, 6);
626 #ifdef PCNET_DEBUG_MATCH
627 printf("packet dhost=%02x:%02x:%02x:%02x:%02x:%02x, "
628 "padr=%02x:%02x:%02x:%02x:%02x:%02x\n",
629 hdr
->ether_dhost
[0],hdr
->ether_dhost
[1],hdr
->ether_dhost
[2],
630 hdr
->ether_dhost
[3],hdr
->ether_dhost
[4],hdr
->ether_dhost
[5],
631 padr
[0],padr
[1],padr
[2],padr
[3],padr
[4],padr
[5]);
632 printf("padr_match result=%d\n", result
);
637 static inline int padr_bcast(PCNetState
*s
, const uint8_t *buf
, int size
)
639 static const uint8_t BCAST
[6] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
640 struct qemu_ether_header
*hdr
= (void *)buf
;
641 int result
= !CSR_DRCVBC(s
) && !memcmp(hdr
->ether_dhost
, BCAST
, 6);
642 #ifdef PCNET_DEBUG_MATCH
643 printf("padr_bcast result=%d\n", result
);
648 static inline int ladr_match(PCNetState
*s
, const uint8_t *buf
, int size
)
650 struct qemu_ether_header
*hdr
= (void *)buf
;
651 if ((*(hdr
->ether_dhost
)&0x01) &&
652 ((uint64_t *)&s
->csr
[8])[0] != 0LL) {
654 s
->csr
[8] & 0xff, s
->csr
[8] >> 8,
655 s
->csr
[9] & 0xff, s
->csr
[9] >> 8,
656 s
->csr
[10] & 0xff, s
->csr
[10] >> 8,
657 s
->csr
[11] & 0xff, s
->csr
[11] >> 8
659 int index
= lnc_mchash(hdr
->ether_dhost
) >> 26;
660 return !!(ladr
[index
>> 3] & (1 << (index
& 7)));
665 static inline hwaddr
pcnet_rdra_addr(PCNetState
*s
, int idx
)
670 return s
->rdra
+ ((CSR_RCVRL(s
) - idx
) * (BCR_SWSTYLE(s
) ? 16 : 8));
673 static inline int64_t pcnet_get_next_poll_time(PCNetState
*s
, int64_t current_time
)
675 int64_t next_time
= current_time
+
676 (65536 - (CSR_SPND(s
) ? 0 : CSR_POLL(s
))) * 30;
678 if (next_time
<= current_time
) {
679 next_time
= current_time
+ 1;
684 static void pcnet_poll(PCNetState
*s
);
685 static void pcnet_poll_timer(void *opaque
);
687 static uint32_t pcnet_csr_readw(PCNetState
*s
, uint32_t rap
);
688 static void pcnet_csr_writew(PCNetState
*s
, uint32_t rap
, uint32_t new_value
);
689 static void pcnet_bcr_writew(PCNetState
*s
, uint32_t rap
, uint32_t val
);
691 static void pcnet_s_reset(PCNetState
*s
)
693 trace_pcnet_s_reset(s
);
699 s
->bcr
[BCR_BSBC
] &= ~0x0080;
710 s
->csr
[12] = le16_to_cpu(((uint16_t *)&s
->prom
[0])[0]);
711 s
->csr
[13] = le16_to_cpu(((uint16_t *)&s
->prom
[0])[1]);
712 s
->csr
[14] = le16_to_cpu(((uint16_t *)&s
->prom
[0])[2]);
713 s
->csr
[15] &= 0x21c4;
722 s
->csr
[100] = 0x0200;
723 s
->csr
[103] = 0x0105;
724 s
->csr
[112] = 0x0000;
725 s
->csr
[114] = 0x0000;
726 s
->csr
[122] = 0x0000;
727 s
->csr
[124] = 0x0000;
732 static void pcnet_update_irq(PCNetState
*s
)
735 s
->csr
[0] &= ~0x0080;
738 if (((s
->csr
[0] & ~s
->csr
[3]) & 0x5f00) ||
739 (((s
->csr
[4]>>1) & ~s
->csr
[4]) & 0x0115) ||
740 (((s
->csr
[5]>>1) & s
->csr
[5]) & 0x0048))
742 if ((!(s
->csr
[3] & 0x4000) && !!(s
->csr
[0] & 0x4000)) /* BABL */ ||
743 (!(s
->csr
[3] & 0x1000) && !!(s
->csr
[0] & 0x1000)) /* MISS */ ||
744 (!(s
->csr
[3] & 0x0100) && !!(s
->csr
[0] & 0x0100)) /* IDON */ ||
745 (!(s
->csr
[3] & 0x0200) && !!(s
->csr
[0] & 0x0200)) /* TINT */ ||
746 (!(s
->csr
[3] & 0x0400) && !!(s
->csr
[0] & 0x0400)) /* RINT */ ||
747 (!(s
->csr
[3] & 0x0800) && !!(s
->csr
[0] & 0x0800)) /* MERR */ ||
748 (!(s
->csr
[4] & 0x0001) && !!(s
->csr
[4] & 0x0002)) /* JAB */ ||
749 (!(s
->csr
[4] & 0x0004) && !!(s
->csr
[4] & 0x0008)) /* TXSTRT */ ||
750 (!(s
->csr
[4] & 0x0010) && !!(s
->csr
[4] & 0x0020)) /* RCVO */ ||
751 (!(s
->csr
[4] & 0x0100) && !!(s
->csr
[4] & 0x0200)) /* MFCO */ ||
752 (!!(s
->csr
[5] & 0x0040) && !!(s
->csr
[5] & 0x0080)) /* EXDINT */ ||
753 (!!(s
->csr
[5] & 0x0008) && !!(s
->csr
[5] & 0x0010)) /* MPINT */)
761 if (!!(s
->csr
[4] & 0x0080) && CSR_INEA(s
)) { /* UINT */
762 s
->csr
[4] &= ~0x0080;
766 trace_pcnet_user_int(s
);
770 if (((s
->csr
[5]>>1) & s
->csr
[5]) & 0x0500)
772 if ((!!(s
->csr
[5] & 0x0400) && !!(s
->csr
[5] & 0x0800)) /* SINT */ ||
773 (!!(s
->csr
[5] & 0x0100) && !!(s
->csr
[5] & 0x0200)) /* SLPINT */ )
781 trace_pcnet_isr_change(s
, isr
, s
->isr
);
783 qemu_set_irq(s
->irq
, isr
);
787 static void pcnet_init(PCNetState
*s
)
790 uint16_t padr
[3], ladrf
[4], mode
;
793 trace_pcnet_init(s
, PHYSADDR(s
, CSR_IADR(s
)));
795 if (BCR_SSIZE32(s
)) {
796 struct pcnet_initblk32 initblk
;
797 s
->phys_mem_read(s
->dma_opaque
, PHYSADDR(s
,CSR_IADR(s
)),
798 (uint8_t *)&initblk
, sizeof(initblk
), 0);
799 mode
= le16_to_cpu(initblk
.mode
);
800 rlen
= initblk
.rlen
>> 4;
801 tlen
= initblk
.tlen
>> 4;
802 ladrf
[0] = le16_to_cpu(initblk
.ladrf
[0]);
803 ladrf
[1] = le16_to_cpu(initblk
.ladrf
[1]);
804 ladrf
[2] = le16_to_cpu(initblk
.ladrf
[2]);
805 ladrf
[3] = le16_to_cpu(initblk
.ladrf
[3]);
806 padr
[0] = le16_to_cpu(initblk
.padr
[0]);
807 padr
[1] = le16_to_cpu(initblk
.padr
[1]);
808 padr
[2] = le16_to_cpu(initblk
.padr
[2]);
809 rdra
= le32_to_cpu(initblk
.rdra
);
810 tdra
= le32_to_cpu(initblk
.tdra
);
812 struct pcnet_initblk16 initblk
;
813 s
->phys_mem_read(s
->dma_opaque
, PHYSADDR(s
,CSR_IADR(s
)),
814 (uint8_t *)&initblk
, sizeof(initblk
), 0);
815 mode
= le16_to_cpu(initblk
.mode
);
816 ladrf
[0] = le16_to_cpu(initblk
.ladrf
[0]);
817 ladrf
[1] = le16_to_cpu(initblk
.ladrf
[1]);
818 ladrf
[2] = le16_to_cpu(initblk
.ladrf
[2]);
819 ladrf
[3] = le16_to_cpu(initblk
.ladrf
[3]);
820 padr
[0] = le16_to_cpu(initblk
.padr
[0]);
821 padr
[1] = le16_to_cpu(initblk
.padr
[1]);
822 padr
[2] = le16_to_cpu(initblk
.padr
[2]);
823 rdra
= le32_to_cpu(initblk
.rdra
);
824 tdra
= le32_to_cpu(initblk
.tdra
);
831 trace_pcnet_rlen_tlen(s
, rlen
, tlen
);
833 CSR_RCVRL(s
) = (rlen
< 9) ? (1 << rlen
) : 512;
834 CSR_XMTRL(s
) = (tlen
< 9) ? (1 << tlen
) : 512;
835 s
->csr
[ 6] = (tlen
<< 12) | (rlen
<< 8);
837 s
->csr
[ 8] = ladrf
[0];
838 s
->csr
[ 9] = ladrf
[1];
839 s
->csr
[10] = ladrf
[2];
840 s
->csr
[11] = ladrf
[3];
841 s
->csr
[12] = padr
[0];
842 s
->csr
[13] = padr
[1];
843 s
->csr
[14] = padr
[2];
844 s
->rdra
= PHYSADDR(s
, rdra
);
845 s
->tdra
= PHYSADDR(s
, tdra
);
847 CSR_RCVRC(s
) = CSR_RCVRL(s
);
848 CSR_XMTRC(s
) = CSR_XMTRL(s
);
850 trace_pcnet_ss32_rdra_tdra(s
, BCR_SSIZE32(s
),
851 s
->rdra
, CSR_RCVRL(s
), s
->tdra
, CSR_XMTRL(s
));
854 s
->csr
[0] &= ~0x0004; /* clear STOP bit */
856 qemu_flush_queued_packets(qemu_get_queue(s
->nic
));
859 static void pcnet_start(PCNetState
*s
)
862 printf("pcnet_start\n");
866 s
->csr
[0] |= 0x0010; /* set TXON */
869 s
->csr
[0] |= 0x0020; /* set RXON */
871 s
->csr
[0] &= ~0x0004; /* clear STOP bit */
875 qemu_flush_queued_packets(qemu_get_queue(s
->nic
));
878 static void pcnet_stop(PCNetState
*s
)
881 printf("pcnet_stop\n");
883 s
->csr
[0] &= ~0xffeb;
885 s
->csr
[4] &= ~0x02c2;
886 s
->csr
[5] &= ~0x0011;
890 static void pcnet_rdte_poll(PCNetState
*s
)
892 s
->csr
[28] = s
->csr
[29] = 0;
896 hwaddr crda
= pcnet_rdra_addr(s
, CSR_RCVRC(s
));
897 hwaddr nrda
= pcnet_rdra_addr(s
, -1 + CSR_RCVRC(s
));
898 hwaddr nnrd
= pcnet_rdra_addr(s
, -2 + CSR_RCVRC(s
));
900 hwaddr crda
= s
->rdra
+
901 (CSR_RCVRL(s
) - CSR_RCVRC(s
)) *
902 (BCR_SWSTYLE(s
) ? 16 : 8 );
903 int nrdc
= CSR_RCVRC(s
)<=1 ? CSR_RCVRL(s
) : CSR_RCVRC(s
)-1;
904 hwaddr nrda
= s
->rdra
+
905 (CSR_RCVRL(s
) - nrdc
) *
906 (BCR_SWSTYLE(s
) ? 16 : 8 );
907 int nnrc
= nrdc
<=1 ? CSR_RCVRL(s
) : nrdc
-1;
908 hwaddr nnrd
= s
->rdra
+
909 (CSR_RCVRL(s
) - nnrc
) *
910 (BCR_SWSTYLE(s
) ? 16 : 8 );
913 CHECK_RMD(crda
, bad
);
915 CHECK_RMD(nrda
, bad
);
916 if (bad
|| (nrda
== crda
)) nrda
= 0;
917 CHECK_RMD(nnrd
, bad
);
918 if (bad
|| (nnrd
== crda
)) nnrd
= 0;
920 s
->csr
[28] = crda
& 0xffff;
921 s
->csr
[29] = crda
>> 16;
922 s
->csr
[26] = nrda
& 0xffff;
923 s
->csr
[27] = nrda
>> 16;
924 s
->csr
[36] = nnrd
& 0xffff;
925 s
->csr
[37] = nnrd
>> 16;
928 printf("pcnet: BAD RMD RECORDS AFTER 0x" TARGET_FMT_plx
"\n",
932 printf("pcnet: BAD RMD RDA=0x" TARGET_FMT_plx
"\n", crda
);
938 struct pcnet_RMD rmd
;
939 RMDLOAD(&rmd
, PHYSADDR(s
,CSR_CRDA(s
)));
940 CSR_CRBC(s
) = GET_FIELD(rmd
.buf_length
, RMDL
, BCNT
);
941 CSR_CRST(s
) = rmd
.status
;
942 #ifdef PCNET_DEBUG_RMD_X
943 printf("CRDA=0x%08x CRST=0x%04x RCVRC=%d RMDL=0x%04x RMDS=0x%04x RMDM=0x%08x\n",
944 PHYSADDR(s
,CSR_CRDA(s
)), CSR_CRST(s
), CSR_RCVRC(s
),
945 rmd
.buf_length
, rmd
.status
, rmd
.msg_length
);
949 CSR_CRBC(s
) = CSR_CRST(s
) = 0;
953 struct pcnet_RMD rmd
;
954 RMDLOAD(&rmd
, PHYSADDR(s
,CSR_NRDA(s
)));
955 CSR_NRBC(s
) = GET_FIELD(rmd
.buf_length
, RMDL
, BCNT
);
956 CSR_NRST(s
) = rmd
.status
;
958 CSR_NRBC(s
) = CSR_NRST(s
) = 0;
963 static int pcnet_tdte_poll(PCNetState
*s
)
965 s
->csr
[34] = s
->csr
[35] = 0;
967 hwaddr cxda
= s
->tdra
+
968 (CSR_XMTRL(s
) - CSR_XMTRC(s
)) *
969 (BCR_SWSTYLE(s
) ? 16 : 8);
971 CHECK_TMD(cxda
, bad
);
973 if (CSR_CXDA(s
) != cxda
) {
974 s
->csr
[60] = s
->csr
[34];
975 s
->csr
[61] = s
->csr
[35];
976 s
->csr
[62] = CSR_CXBC(s
);
977 s
->csr
[63] = CSR_CXST(s
);
979 s
->csr
[34] = cxda
& 0xffff;
980 s
->csr
[35] = cxda
>> 16;
982 printf("pcnet: BAD TMD XDA=0x%08x\n", cxda
);
988 struct pcnet_TMD tmd
;
990 TMDLOAD(&tmd
, PHYSADDR(s
,CSR_CXDA(s
)));
992 CSR_CXBC(s
) = GET_FIELD(tmd
.length
, TMDL
, BCNT
);
993 CSR_CXST(s
) = tmd
.status
;
995 CSR_CXBC(s
) = CSR_CXST(s
) = 0;
998 return !!(CSR_CXST(s
) & 0x8000);
1001 #define MIN_BUF_SIZE 60
1003 ssize_t
pcnet_receive(NetClientState
*nc
, const uint8_t *buf
, size_t size_
)
1005 PCNetState
*s
= qemu_get_nic_opaque(nc
);
1006 int is_padr
= 0, is_bcast
= 0, is_ladr
= 0;
1012 if (CSR_DRX(s
) || CSR_STOP(s
) || CSR_SPND(s
) || !size
||
1013 (CSR_LOOP(s
) && !s
->looptest
)) {
1017 printf("pcnet_receive size=%d\n", size
);
1020 /* if too small buffer, then expand it */
1021 if (size
< MIN_BUF_SIZE
) {
1022 memcpy(buf1
, buf
, size
);
1023 memset(buf1
+ size
, 0, MIN_BUF_SIZE
- size
);
1025 size
= MIN_BUF_SIZE
;
1029 || (is_padr
=padr_match(s
, buf
, size
))
1030 || (is_bcast
=padr_bcast(s
, buf
, size
))
1031 || (is_ladr
=ladr_match(s
, buf
, size
))) {
1035 if (!(CSR_CRST(s
) & 0x8000) && s
->rdra
) {
1036 struct pcnet_RMD rmd
;
1037 int rcvrc
= CSR_RCVRC(s
)-1,i
;
1039 for (i
= CSR_RCVRL(s
)-1; i
> 0; i
--, rcvrc
--) {
1041 rcvrc
= CSR_RCVRL(s
);
1043 (CSR_RCVRL(s
) - rcvrc
) *
1044 (BCR_SWSTYLE(s
) ? 16 : 8 );
1045 RMDLOAD(&rmd
, nrda
);
1046 if (GET_FIELD(rmd
.status
, RMDS
, OWN
)) {
1047 #ifdef PCNET_DEBUG_RMD
1048 printf("pcnet - scan buffer: RCVRC=%d PREV_RCVRC=%d\n",
1049 rcvrc
, CSR_RCVRC(s
));
1051 CSR_RCVRC(s
) = rcvrc
;
1058 if (!(CSR_CRST(s
) & 0x8000)) {
1059 #ifdef PCNET_DEBUG_RMD
1060 printf("pcnet - no buffer: RCVRC=%d\n", CSR_RCVRC(s
));
1062 s
->csr
[0] |= 0x1000; /* Set MISS flag */
1065 uint8_t *src
= s
->buffer
;
1066 hwaddr crda
= CSR_CRDA(s
);
1067 struct pcnet_RMD rmd
;
1072 #ifdef PCNET_DEBUG_RMD
1073 fprintf(stderr
, "pcnet: truncates rx packet.\n");
1077 memcpy(src
, buf
, size
);
1078 /* no need to compute the CRC */
1084 } else if (s
->looptest
== PCNET_LOOPTEST_CRC
||
1085 !CSR_DXMTFCS(s
) || size
< MIN_BUF_SIZE
+4) {
1089 while (p
!= &src
[size
])
1091 *(uint32_t *)p
= htonl(fcs
);
1097 while (p
!= &src
[size
])
1099 crc_err
= (*(uint32_t *)p
!= htonl(fcs
));
1102 #ifdef PCNET_DEBUG_MATCH
1106 RMDLOAD(&rmd
, PHYSADDR(s
,crda
));
1107 /*if (!CSR_LAPPEN(s))*/
1108 SET_FIELD(&rmd
.status
, RMDS
, STP
, 1);
1110 #define PCNET_RECV_STORE() do { \
1111 int count = MIN(4096 - GET_FIELD(rmd.buf_length, RMDL, BCNT),remaining); \
1112 hwaddr rbadr = PHYSADDR(s, rmd.rbadr); \
1113 s->phys_mem_write(s->dma_opaque, rbadr, src, count, CSR_BSWP(s)); \
1114 src += count; remaining -= count; \
1115 SET_FIELD(&rmd.status, RMDS, OWN, 0); \
1116 RMDSTORE(&rmd, PHYSADDR(s,crda)); \
1122 if ((remaining
> 0) && CSR_NRDA(s
)) {
1123 hwaddr nrda
= CSR_NRDA(s
);
1124 #ifdef PCNET_DEBUG_RMD
1127 RMDLOAD(&rmd
, PHYSADDR(s
,nrda
));
1128 if (GET_FIELD(rmd
.status
, RMDS
, OWN
)) {
1131 #ifdef PCNET_DEBUG_RMD
1134 if ((remaining
> 0) && (nrda
=CSR_NNRD(s
))) {
1135 RMDLOAD(&rmd
, PHYSADDR(s
,nrda
));
1136 if (GET_FIELD(rmd
.status
, RMDS
, OWN
)) {
1144 #undef PCNET_RECV_STORE
1146 RMDLOAD(&rmd
, PHYSADDR(s
,crda
));
1147 if (remaining
== 0) {
1148 SET_FIELD(&rmd
.msg_length
, RMDM
, MCNT
, size
);
1149 SET_FIELD(&rmd
.status
, RMDS
, ENP
, 1);
1150 SET_FIELD(&rmd
.status
, RMDS
, PAM
, !CSR_PROM(s
) && is_padr
);
1151 SET_FIELD(&rmd
.status
, RMDS
, LFAM
, !CSR_PROM(s
) && is_ladr
);
1152 SET_FIELD(&rmd
.status
, RMDS
, BAM
, !CSR_PROM(s
) && is_bcast
);
1154 SET_FIELD(&rmd
.status
, RMDS
, CRC
, 1);
1155 SET_FIELD(&rmd
.status
, RMDS
, ERR
, 1);
1158 SET_FIELD(&rmd
.status
, RMDS
, OFLO
, 1);
1159 SET_FIELD(&rmd
.status
, RMDS
, BUFF
, 1);
1160 SET_FIELD(&rmd
.status
, RMDS
, ERR
, 1);
1162 RMDSTORE(&rmd
, PHYSADDR(s
,crda
));
1163 s
->csr
[0] |= 0x0400;
1166 printf("RCVRC=%d CRDA=0x%08x BLKS=%d\n",
1167 CSR_RCVRC(s
), PHYSADDR(s
,CSR_CRDA(s
)), pktcount
);
1169 #ifdef PCNET_DEBUG_RMD
1173 while (pktcount
--) {
1174 if (CSR_RCVRC(s
) <= 1) {
1175 CSR_RCVRC(s
) = CSR_RCVRL(s
);
1187 pcnet_update_irq(s
);
1192 void pcnet_set_link_status(NetClientState
*nc
)
1194 PCNetState
*d
= qemu_get_nic_opaque(nc
);
1196 d
->lnkst
= nc
->link_down
? 0 : 0x40;
1199 static void pcnet_transmit(PCNetState
*s
)
1201 hwaddr xmit_cxda
= 0;
1202 int count
= CSR_XMTRL(s
)-1;
1208 s
->csr
[0] &= ~0x0008;
1215 if (pcnet_tdte_poll(s
)) {
1216 struct pcnet_TMD tmd
;
1218 TMDLOAD(&tmd
, PHYSADDR(s
,CSR_CXDA(s
)));
1220 #ifdef PCNET_DEBUG_TMD
1221 printf(" TMDLOAD 0x%08x\n", PHYSADDR(s
,CSR_CXDA(s
)));
1224 if (GET_FIELD(tmd
.status
, TMDS
, STP
)) {
1226 xmit_cxda
= PHYSADDR(s
,CSR_CXDA(s
));
1227 if (BCR_SWSTYLE(s
) != 1)
1228 add_crc
= GET_FIELD(tmd
.status
, TMDS
, ADDFCS
);
1230 if (s
->lnkst
== 0 &&
1231 (!CSR_LOOP(s
) || (!CSR_INTL(s
) && !BCR_TMAULOOP(s
)))) {
1232 SET_FIELD(&tmd
.misc
, TMDM
, LCAR
, 1);
1233 SET_FIELD(&tmd
.status
, TMDS
, ERR
, 1);
1234 SET_FIELD(&tmd
.status
, TMDS
, OWN
, 0);
1235 s
->csr
[0] |= 0xa000; /* ERR | CERR */
1240 if (s
->xmit_pos
< 0) {
1244 bcnt
= 4096 - GET_FIELD(tmd
.length
, TMDL
, BCNT
);
1246 /* if multi-tmd packet outsizes s->buffer then skip it silently.
1247 * Note: this is not what real hw does.
1248 * Last four bytes of s->buffer are used to store CRC FCS code.
1250 if (s
->xmit_pos
+ bcnt
> sizeof(s
->buffer
) - 4) {
1255 s
->phys_mem_read(s
->dma_opaque
, PHYSADDR(s
, tmd
.tbadr
),
1256 s
->buffer
+ s
->xmit_pos
, bcnt
, CSR_BSWP(s
));
1257 s
->xmit_pos
+= bcnt
;
1259 if (!GET_FIELD(tmd
.status
, TMDS
, ENP
)) {
1264 printf("pcnet_transmit size=%d\n", s
->xmit_pos
);
1267 if (BCR_SWSTYLE(s
) == 1)
1268 add_crc
= !GET_FIELD(tmd
.status
, TMDS
, NOFCS
);
1269 s
->looptest
= add_crc
? PCNET_LOOPTEST_CRC
: PCNET_LOOPTEST_NOCRC
;
1270 pcnet_receive(qemu_get_queue(s
->nic
), s
->buffer
, s
->xmit_pos
);
1274 qemu_send_packet(qemu_get_queue(s
->nic
), s
->buffer
,
1279 s
->csr
[0] &= ~0x0008; /* clear TDMD */
1280 s
->csr
[4] |= 0x0004; /* set TXSTRT */
1284 SET_FIELD(&tmd
.status
, TMDS
, OWN
, 0);
1285 TMDSTORE(&tmd
, PHYSADDR(s
,CSR_CXDA(s
)));
1287 || (CSR_LTINTEN(s
) && GET_FIELD(tmd
.status
, TMDS
, LTINT
))) {
1288 s
->csr
[0] |= 0x0200; /* set TINT */
1290 if (CSR_XMTRC(s
) <= 1) {
1291 CSR_XMTRC(s
) = CSR_XMTRL(s
);
1298 } else if (s
->xmit_pos
>= 0) {
1299 struct pcnet_TMD tmd
;
1300 TMDLOAD(&tmd
, xmit_cxda
);
1301 SET_FIELD(&tmd
.misc
, TMDM
, BUFF
, 1);
1302 SET_FIELD(&tmd
.misc
, TMDM
, UFLO
, 1);
1303 SET_FIELD(&tmd
.status
, TMDS
, ERR
, 1);
1304 SET_FIELD(&tmd
.status
, TMDS
, OWN
, 0);
1305 TMDSTORE(&tmd
, xmit_cxda
);
1306 s
->csr
[0] |= 0x0200; /* set TINT */
1307 if (!CSR_DXSUFLO(s
)) {
1308 s
->csr
[0] &= ~0x0010;
1309 } else if (count
--) {
1317 static void pcnet_poll(PCNetState
*s
)
1323 if (CSR_TDMD(s
) || (CSR_TXON(s
) && !CSR_DPOLL(s
) && pcnet_tdte_poll(s
))) {
1324 /* prevent recursion */
1332 static void pcnet_poll_timer(void *opaque
)
1334 PCNetState
*s
= opaque
;
1336 timer_del(s
->poll_timer
);
1342 pcnet_update_irq(s
);
1344 if (!CSR_STOP(s
) && !CSR_SPND(s
) && !CSR_DPOLL(s
)) {
1345 uint64_t now
= qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL
) * 33;
1346 if (!s
->timer
|| !now
) {
1349 uint64_t t
= now
- s
->timer
+ CSR_POLL(s
);
1352 CSR_POLL(s
) = CSR_PINT(s
);
1357 timer_mod(s
->poll_timer
,
1358 pcnet_get_next_poll_time(s
,qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL
)));
1363 static void pcnet_csr_writew(PCNetState
*s
, uint32_t rap
, uint32_t new_value
)
1365 uint16_t val
= new_value
;
1366 #ifdef PCNET_DEBUG_CSR
1367 printf("pcnet_csr_writew rap=%d val=0x%04x\n", rap
, val
);
1371 s
->csr
[0] &= ~(val
& 0x7f00); /* Clear any interrupt flags */
1373 s
->csr
[0] = (s
->csr
[0] & ~0x0040) | (val
& 0x0048);
1375 val
= (val
& 0x007f) | (s
->csr
[0] & 0x7f00);
1377 /* IFF STOP, STRT and INIT are set, clear STRT and INIT */
1378 if ((val
& 7) == 7) {
1381 if (!CSR_STOP(s
) && (val
& 4)) {
1384 if (!CSR_INIT(s
) && (val
& 1)) {
1387 if (!CSR_STRT(s
) && (val
& 2)) {
1404 case 18: /* CRBAL */
1405 case 19: /* CRBAU */
1406 case 20: /* CXBAL */
1407 case 21: /* CXBAU */
1408 case 22: /* NRBAU */
1409 case 23: /* NRBAU */
1433 case 47: /* POLLINT */
1437 case 76: /* RCVRL */
1438 case 78: /* XMTRL */
1439 val
= (val
> 0) ? val
: 512;
1442 if (CSR_STOP(s
) || CSR_SPND(s
)) {
1449 s
->csr
[4] &= ~(val
& 0x026a);
1450 val
&= ~0x026a; val
|= s
->csr
[4] & 0x026a;
1453 s
->csr
[5] &= ~(val
& 0x0a90);
1454 val
&= ~0x0a90; val
|= s
->csr
[5] & 0x0a90;
1457 pcnet_csr_writew(s
,1,val
);
1460 pcnet_csr_writew(s
,2,val
);
1463 pcnet_bcr_writew(s
,BCR_SWS
,val
);
1471 static uint32_t pcnet_csr_readw(PCNetState
*s
, uint32_t rap
)
1476 pcnet_update_irq(s
);
1478 val
|= (val
& 0x7800) ? 0x8000 : 0;
1481 return pcnet_csr_readw(s
,1);
1483 return pcnet_csr_readw(s
,2);
1485 return pcnet_bcr_readw(s
,BCR_SWS
);
1494 #ifdef PCNET_DEBUG_CSR
1495 printf("pcnet_csr_readw rap=%d val=0x%04x\n", rap
, val
);
1500 static void pcnet_bcr_writew(PCNetState
*s
, uint32_t rap
, uint32_t val
)
1503 #ifdef PCNET_DEBUG_BCR
1504 printf("pcnet_bcr_writew rap=%d val=0x%04x\n", rap
, val
);
1508 if (!(CSR_STOP(s
) || CSR_SPND(s
)))
1511 switch (val
& 0x00ff) {
1523 printf("Bad SWSTYLE=0x%02x\n", val
& 0xff);
1528 printf("BCR_SWS=0x%04x\n", val
);
1547 uint32_t pcnet_bcr_readw(PCNetState
*s
, uint32_t rap
)
1556 val
= s
->bcr
[rap
] & ~0x8000;
1557 val
|= (val
& 0x017f & s
->lnkst
) ? 0x8000 : 0;
1560 val
= rap
< 32 ? s
->bcr
[rap
] : 0;
1563 #ifdef PCNET_DEBUG_BCR
1564 printf("pcnet_bcr_readw rap=%d val=0x%04x\n", rap
, val
);
1569 void pcnet_h_reset(void *opaque
)
1571 PCNetState
*s
= opaque
;
1573 s
->bcr
[BCR_MSRDA
] = 0x0005;
1574 s
->bcr
[BCR_MSWRA
] = 0x0005;
1575 s
->bcr
[BCR_MC
] = 0x0002;
1576 s
->bcr
[BCR_LNKST
] = 0x00c0;
1577 s
->bcr
[BCR_LED1
] = 0x0084;
1578 s
->bcr
[BCR_LED2
] = 0x0088;
1579 s
->bcr
[BCR_LED3
] = 0x0090;
1580 s
->bcr
[BCR_FDC
] = 0x0000;
1581 s
->bcr
[BCR_BSBC
] = 0x9001;
1582 s
->bcr
[BCR_EECAS
] = 0x0002;
1583 s
->bcr
[BCR_SWS
] = 0x0200;
1584 s
->bcr
[BCR_PLAT
] = 0xff06;
1587 pcnet_update_irq(s
);
1588 pcnet_poll_timer(s
);
1591 void pcnet_ioport_writew(void *opaque
, uint32_t addr
, uint32_t val
)
1593 PCNetState
*s
= opaque
;
1594 pcnet_poll_timer(s
);
1595 #ifdef PCNET_DEBUG_IO
1596 printf("pcnet_ioport_writew addr=0x%08x val=0x%04x\n", addr
, val
);
1599 switch (addr
& 0x0f) {
1600 case 0x00: /* RDP */
1601 pcnet_csr_writew(s
, s
->rap
, val
);
1604 s
->rap
= val
& 0x7f;
1607 pcnet_bcr_writew(s
, s
->rap
, val
);
1611 pcnet_update_irq(s
);
1614 uint32_t pcnet_ioport_readw(void *opaque
, uint32_t addr
)
1616 PCNetState
*s
= opaque
;
1618 pcnet_poll_timer(s
);
1620 switch (addr
& 0x0f) {
1621 case 0x00: /* RDP */
1622 val
= pcnet_csr_readw(s
, s
->rap
);
1632 val
= pcnet_bcr_readw(s
, s
->rap
);
1636 pcnet_update_irq(s
);
1637 #ifdef PCNET_DEBUG_IO
1638 printf("pcnet_ioport_readw addr=0x%08x val=0x%04x\n", addr
, val
& 0xffff);
1643 void pcnet_ioport_writel(void *opaque
, uint32_t addr
, uint32_t val
)
1645 PCNetState
*s
= opaque
;
1646 pcnet_poll_timer(s
);
1647 #ifdef PCNET_DEBUG_IO
1648 printf("pcnet_ioport_writel addr=0x%08x val=0x%08x\n", addr
, val
);
1651 switch (addr
& 0x0f) {
1652 case 0x00: /* RDP */
1653 pcnet_csr_writew(s
, s
->rap
, val
& 0xffff);
1656 s
->rap
= val
& 0x7f;
1659 pcnet_bcr_writew(s
, s
->rap
, val
& 0xffff);
1662 } else if ((addr
& 0x0f) == 0) {
1663 /* switch device to dword i/o mode */
1664 pcnet_bcr_writew(s
, BCR_BSBC
, pcnet_bcr_readw(s
, BCR_BSBC
) | 0x0080);
1665 #ifdef PCNET_DEBUG_IO
1666 printf("device switched into dword i/o mode\n");
1669 pcnet_update_irq(s
);
1672 uint32_t pcnet_ioport_readl(void *opaque
, uint32_t addr
)
1674 PCNetState
*s
= opaque
;
1676 pcnet_poll_timer(s
);
1678 switch (addr
& 0x0f) {
1679 case 0x00: /* RDP */
1680 val
= pcnet_csr_readw(s
, s
->rap
);
1690 val
= pcnet_bcr_readw(s
, s
->rap
);
1694 pcnet_update_irq(s
);
1695 #ifdef PCNET_DEBUG_IO
1696 printf("pcnet_ioport_readl addr=0x%08x val=0x%08x\n", addr
, val
);
1701 static bool is_version_2(void *opaque
, int version_id
)
1703 return version_id
== 2;
1706 const VMStateDescription vmstate_pcnet
= {
1709 .minimum_version_id
= 2,
1710 .fields
= (VMStateField
[]) {
1711 VMSTATE_INT32(rap
, PCNetState
),
1712 VMSTATE_INT32(isr
, PCNetState
),
1713 VMSTATE_INT32(lnkst
, PCNetState
),
1714 VMSTATE_UINT32(rdra
, PCNetState
),
1715 VMSTATE_UINT32(tdra
, PCNetState
),
1716 VMSTATE_BUFFER(prom
, PCNetState
),
1717 VMSTATE_UINT16_ARRAY(csr
, PCNetState
, 128),
1718 VMSTATE_UINT16_ARRAY(bcr
, PCNetState
, 32),
1719 VMSTATE_UINT64(timer
, PCNetState
),
1720 VMSTATE_INT32(xmit_pos
, PCNetState
),
1721 VMSTATE_BUFFER(buffer
, PCNetState
),
1722 VMSTATE_UNUSED_TEST(is_version_2
, 4),
1723 VMSTATE_INT32(tx_busy
, PCNetState
),
1724 VMSTATE_TIMER_PTR(poll_timer
, PCNetState
),
1725 VMSTATE_END_OF_LIST()
1729 void pcnet_common_init(DeviceState
*dev
, PCNetState
*s
, NetClientInfo
*info
)
1734 s
->poll_timer
= timer_new_ns(QEMU_CLOCK_VIRTUAL
, pcnet_poll_timer
, s
);
1736 qemu_macaddr_default_if_unset(&s
->conf
.macaddr
);
1737 s
->nic
= qemu_new_nic(info
, &s
->conf
, object_get_typename(OBJECT(dev
)), dev
->id
, s
);
1738 qemu_format_nic_info_str(qemu_get_queue(s
->nic
), s
->conf
.macaddr
.a
);
1740 /* Initialize the PROM */
1743 Datasheet: http://pdfdata.datasheetsite.com/web/24528/AM79C970A.pdf
1746 memcpy(s
->prom
, s
->conf
.macaddr
.a
, 6);
1747 /* Reserved Location: must be 00h */
1748 s
->prom
[6] = s
->prom
[7] = 0x00;
1749 /* Reserved Location: must be 00h */
1751 /* Hardware ID: must be 11h if compatibility to AMD drivers is desired */
1753 /* User programmable space, init with 0 */
1754 s
->prom
[10] = s
->prom
[11] = 0x00;
1755 /* LSByte of two-byte checksum, which is the sum of bytes 00h-0Bh
1756 and bytes 0Eh and 0Fh, must therefore be initialized with 0! */
1757 s
->prom
[12] = s
->prom
[13] = 0x00;
1758 /* Must be ASCII W (57h) if compatibility to AMD
1759 driver software is desired */
1760 s
->prom
[14] = s
->prom
[15] = 0x57;
1762 for (i
= 0, checksum
= 0; i
< 16; i
++) {
1763 checksum
+= s
->prom
[i
];
1765 *(uint16_t *)&s
->prom
[12] = cpu_to_le16(checksum
);
1767 s
->lnkst
= 0x40; /* initial link state: up */