2 * Raspberry Pi emulation (c) 2012 Gregory Estrade
3 * This code is licensed under the GNU GPLv2 and later.
6 #include "qemu/osdep.h"
7 #include "qapi/error.h"
8 #include "hw/dma/bcm2835_dma.h"
10 /* DMA CS Control and Status bits */
11 #define BCM2708_DMA_ACTIVE (1 << 0)
12 #define BCM2708_DMA_END (1 << 1) /* GE */
13 #define BCM2708_DMA_INT (1 << 2)
14 #define BCM2708_DMA_ISPAUSED (1 << 4) /* Pause requested or not active */
15 #define BCM2708_DMA_ISHELD (1 << 5) /* Is held by DREQ flow control */
16 #define BCM2708_DMA_ERR (1 << 8)
17 #define BCM2708_DMA_ABORT (1 << 30) /* stop current CB, go to next, WO */
18 #define BCM2708_DMA_RESET (1 << 31) /* WO, self clearing */
20 /* DMA control block "info" field bits */
21 #define BCM2708_DMA_INT_EN (1 << 0)
22 #define BCM2708_DMA_TDMODE (1 << 1)
23 #define BCM2708_DMA_WAIT_RESP (1 << 3)
24 #define BCM2708_DMA_D_INC (1 << 4)
25 #define BCM2708_DMA_D_WIDTH (1 << 5)
26 #define BCM2708_DMA_D_DREQ (1 << 6)
27 #define BCM2708_DMA_D_IGNORE (1 << 7)
28 #define BCM2708_DMA_S_INC (1 << 8)
29 #define BCM2708_DMA_S_WIDTH (1 << 9)
30 #define BCM2708_DMA_S_DREQ (1 << 10)
31 #define BCM2708_DMA_S_IGNORE (1 << 11)
33 /* Register offsets */
34 #define BCM2708_DMA_CS 0x00 /* Control and Status */
35 #define BCM2708_DMA_ADDR 0x04 /* Control block address */
36 /* the current control block appears in the following registers - read only */
37 #define BCM2708_DMA_INFO 0x08
38 #define BCM2708_DMA_SOURCE_AD 0x0c
39 #define BCM2708_DMA_DEST_AD 0x10
40 #define BCM2708_DMA_TXFR_LEN 0x14
41 #define BCM2708_DMA_STRIDE 0x18
42 #define BCM2708_DMA_NEXTCB 0x1C
43 #define BCM2708_DMA_DEBUG 0x20
45 #define BCM2708_DMA_INT_STATUS 0xfe0 /* Interrupt status of each channel */
46 #define BCM2708_DMA_ENABLE 0xff0 /* Global enable bits for each channel */
48 #define BCM2708_DMA_CS_RW_MASK 0x30ff0001 /* All RW bits in DMA_CS */
50 static void bcm2835_dma_update(BCM2835DMAState
*s
, unsigned c
)
52 BCM2835DMAChan
*ch
= &s
->chan
[c
];
53 uint32_t data
, xlen
, ylen
;
54 int16_t dst_stride
, src_stride
;
56 if (!(s
->enable
& (1 << c
))) {
60 while ((s
->enable
& (1 << c
)) && (ch
->conblk_ad
!= 0)) {
62 ch
->ti
= ldl_le_phys(&s
->dma_as
, ch
->conblk_ad
);
63 ch
->source_ad
= ldl_le_phys(&s
->dma_as
, ch
->conblk_ad
+ 4);
64 ch
->dest_ad
= ldl_le_phys(&s
->dma_as
, ch
->conblk_ad
+ 8);
65 ch
->txfr_len
= ldl_le_phys(&s
->dma_as
, ch
->conblk_ad
+ 12);
66 ch
->stride
= ldl_le_phys(&s
->dma_as
, ch
->conblk_ad
+ 16);
67 ch
->nextconbk
= ldl_le_phys(&s
->dma_as
, ch
->conblk_ad
+ 20);
69 if (ch
->ti
& BCM2708_DMA_TDMODE
) {
70 /* 2D transfer mode */
71 ylen
= (ch
->txfr_len
>> 16) & 0x3fff;
72 xlen
= ch
->txfr_len
& 0xffff;
73 dst_stride
= ch
->stride
>> 16;
74 src_stride
= ch
->stride
& 0xffff;
83 /* Normal transfer mode */
85 if (ch
->ti
& BCM2708_DMA_S_IGNORE
) {
89 data
= ldl_le_phys(&s
->dma_as
, ch
->source_ad
);
91 if (ch
->ti
& BCM2708_DMA_S_INC
) {
95 if (ch
->ti
& BCM2708_DMA_D_IGNORE
) {
98 stl_le_phys(&s
->dma_as
, ch
->dest_ad
, data
);
100 if (ch
->ti
& BCM2708_DMA_D_INC
) {
104 /* update remaining transfer length */
106 if (ch
->ti
& BCM2708_DMA_TDMODE
) {
107 ch
->txfr_len
= (ylen
<< 16) | xlen
;
114 ch
->source_ad
+= src_stride
;
115 ch
->dest_ad
+= dst_stride
;
118 ch
->cs
|= BCM2708_DMA_END
;
119 if (ch
->ti
& BCM2708_DMA_INT_EN
) {
120 ch
->cs
|= BCM2708_DMA_INT
;
121 s
->int_status
|= (1 << c
);
122 qemu_set_irq(ch
->irq
, 1);
125 /* Process next CB */
126 ch
->conblk_ad
= ch
->nextconbk
;
129 ch
->cs
&= ~BCM2708_DMA_ACTIVE
;
130 ch
->cs
|= BCM2708_DMA_ISPAUSED
;
133 static void bcm2835_dma_chan_reset(BCM2835DMAChan
*ch
)
139 static uint64_t bcm2835_dma_read(BCM2835DMAState
*s
, hwaddr offset
,
140 unsigned size
, unsigned c
)
146 assert(c
< BCM2835_DMA_NCHANS
);
154 case BCM2708_DMA_ADDR
:
157 case BCM2708_DMA_INFO
:
160 case BCM2708_DMA_SOURCE_AD
:
163 case BCM2708_DMA_DEST_AD
:
166 case BCM2708_DMA_TXFR_LEN
:
169 case BCM2708_DMA_STRIDE
:
172 case BCM2708_DMA_NEXTCB
:
175 case BCM2708_DMA_DEBUG
:
179 qemu_log_mask(LOG_GUEST_ERROR
, "%s: Bad offset %"HWADDR_PRIx
"\n",
186 static void bcm2835_dma_write(BCM2835DMAState
*s
, hwaddr offset
,
187 uint64_t value
, unsigned size
, unsigned c
)
193 assert(c
< BCM2835_DMA_NCHANS
);
200 if (value
& BCM2708_DMA_RESET
) {
201 bcm2835_dma_chan_reset(ch
);
203 if (value
& BCM2708_DMA_ABORT
) {
204 /* abort is a no-op, since we always run to completion */
206 if (value
& BCM2708_DMA_END
) {
207 ch
->cs
&= ~BCM2708_DMA_END
;
209 if (value
& BCM2708_DMA_INT
) {
210 ch
->cs
&= ~BCM2708_DMA_INT
;
211 s
->int_status
&= ~(1 << c
);
212 qemu_set_irq(ch
->irq
, 0);
214 ch
->cs
&= ~BCM2708_DMA_CS_RW_MASK
;
215 ch
->cs
|= (value
& BCM2708_DMA_CS_RW_MASK
);
216 if (!(oldcs
& BCM2708_DMA_ACTIVE
) && (ch
->cs
& BCM2708_DMA_ACTIVE
)) {
217 bcm2835_dma_update(s
, c
);
220 case BCM2708_DMA_ADDR
:
221 ch
->conblk_ad
= value
;
223 case BCM2708_DMA_DEBUG
:
227 qemu_log_mask(LOG_GUEST_ERROR
, "%s: Bad offset %"HWADDR_PRIx
"\n",
233 static uint64_t bcm2835_dma0_read(void *opaque
, hwaddr offset
, unsigned size
)
235 BCM2835DMAState
*s
= opaque
;
237 if (offset
< 0xf00) {
238 return bcm2835_dma_read(s
, (offset
& 0xff), size
, (offset
>> 8) & 0xf);
241 case BCM2708_DMA_INT_STATUS
:
242 return s
->int_status
;
243 case BCM2708_DMA_ENABLE
:
246 qemu_log_mask(LOG_GUEST_ERROR
, "%s: Bad offset %"HWADDR_PRIx
"\n",
253 static uint64_t bcm2835_dma15_read(void *opaque
, hwaddr offset
, unsigned size
)
255 return bcm2835_dma_read(opaque
, (offset
& 0xff), size
, 15);
258 static void bcm2835_dma0_write(void *opaque
, hwaddr offset
, uint64_t value
,
261 BCM2835DMAState
*s
= opaque
;
263 if (offset
< 0xf00) {
264 bcm2835_dma_write(s
, (offset
& 0xff), value
, size
, (offset
>> 8) & 0xf);
267 case BCM2708_DMA_INT_STATUS
:
269 case BCM2708_DMA_ENABLE
:
270 s
->enable
= (value
& 0xffff);
273 qemu_log_mask(LOG_GUEST_ERROR
, "%s: Bad offset %"HWADDR_PRIx
"\n",
280 static void bcm2835_dma15_write(void *opaque
, hwaddr offset
, uint64_t value
,
283 bcm2835_dma_write(opaque
, (offset
& 0xff), value
, size
, 15);
286 static const MemoryRegionOps bcm2835_dma0_ops
= {
287 .read
= bcm2835_dma0_read
,
288 .write
= bcm2835_dma0_write
,
289 .endianness
= DEVICE_NATIVE_ENDIAN
,
290 .valid
.min_access_size
= 4,
291 .valid
.max_access_size
= 4,
294 static const MemoryRegionOps bcm2835_dma15_ops
= {
295 .read
= bcm2835_dma15_read
,
296 .write
= bcm2835_dma15_write
,
297 .endianness
= DEVICE_NATIVE_ENDIAN
,
298 .valid
.min_access_size
= 4,
299 .valid
.max_access_size
= 4,
302 static const VMStateDescription vmstate_bcm2835_dma_chan
= {
303 .name
= TYPE_BCM2835_DMA
"-chan",
305 .minimum_version_id
= 1,
306 .fields
= (VMStateField
[]) {
307 VMSTATE_UINT32(cs
, BCM2835DMAChan
),
308 VMSTATE_UINT32(conblk_ad
, BCM2835DMAChan
),
309 VMSTATE_UINT32(ti
, BCM2835DMAChan
),
310 VMSTATE_UINT32(source_ad
, BCM2835DMAChan
),
311 VMSTATE_UINT32(dest_ad
, BCM2835DMAChan
),
312 VMSTATE_UINT32(txfr_len
, BCM2835DMAChan
),
313 VMSTATE_UINT32(stride
, BCM2835DMAChan
),
314 VMSTATE_UINT32(nextconbk
, BCM2835DMAChan
),
315 VMSTATE_UINT32(debug
, BCM2835DMAChan
),
316 VMSTATE_END_OF_LIST()
320 static const VMStateDescription vmstate_bcm2835_dma
= {
321 .name
= TYPE_BCM2835_DMA
,
323 .minimum_version_id
= 1,
324 .fields
= (VMStateField
[]) {
325 VMSTATE_STRUCT_ARRAY(chan
, BCM2835DMAState
, BCM2835_DMA_NCHANS
, 1,
326 vmstate_bcm2835_dma_chan
, BCM2835DMAChan
),
327 VMSTATE_UINT32(int_status
, BCM2835DMAState
),
328 VMSTATE_UINT32(enable
, BCM2835DMAState
),
329 VMSTATE_END_OF_LIST()
333 static void bcm2835_dma_init(Object
*obj
)
335 BCM2835DMAState
*s
= BCM2835_DMA(obj
);
338 /* DMA channels 0-14 occupy a contiguous block of IO memory, along
339 * with the global enable and interrupt status bits. Channel 15
340 * has the same register map, but is mapped at a discontiguous
341 * address in a separate IO block.
343 memory_region_init_io(&s
->iomem0
, OBJECT(s
), &bcm2835_dma0_ops
, s
,
344 TYPE_BCM2835_DMA
, 0x1000);
345 sysbus_init_mmio(SYS_BUS_DEVICE(s
), &s
->iomem0
);
347 memory_region_init_io(&s
->iomem15
, OBJECT(s
), &bcm2835_dma15_ops
, s
,
348 TYPE_BCM2835_DMA
"-chan15", 0x100);
349 sysbus_init_mmio(SYS_BUS_DEVICE(s
), &s
->iomem15
);
351 for (n
= 0; n
< 16; n
++) {
352 sysbus_init_irq(SYS_BUS_DEVICE(s
), &s
->chan
[n
].irq
);
356 static void bcm2835_dma_reset(DeviceState
*dev
)
358 BCM2835DMAState
*s
= BCM2835_DMA(dev
);
363 for (n
= 0; n
< BCM2835_DMA_NCHANS
; n
++) {
364 bcm2835_dma_chan_reset(&s
->chan
[n
]);
368 static void bcm2835_dma_realize(DeviceState
*dev
, Error
**errp
)
370 BCM2835DMAState
*s
= BCM2835_DMA(dev
);
374 obj
= object_property_get_link(OBJECT(dev
), "dma-mr", &err
);
376 error_setg(errp
, "%s: required dma-mr link not found: %s",
377 __func__
, error_get_pretty(err
));
381 s
->dma_mr
= MEMORY_REGION(obj
);
382 address_space_init(&s
->dma_as
, s
->dma_mr
, NULL
);
384 bcm2835_dma_reset(dev
);
387 static void bcm2835_dma_class_init(ObjectClass
*klass
, void *data
)
389 DeviceClass
*dc
= DEVICE_CLASS(klass
);
391 dc
->realize
= bcm2835_dma_realize
;
392 dc
->reset
= bcm2835_dma_reset
;
393 dc
->vmsd
= &vmstate_bcm2835_dma
;
396 static TypeInfo bcm2835_dma_info
= {
397 .name
= TYPE_BCM2835_DMA
,
398 .parent
= TYPE_SYS_BUS_DEVICE
,
399 .instance_size
= sizeof(BCM2835DMAState
),
400 .class_init
= bcm2835_dma_class_init
,
401 .instance_init
= bcm2835_dma_init
,
404 static void bcm2835_dma_register_types(void)
406 type_register_static(&bcm2835_dma_info
);
409 type_init(bcm2835_dma_register_types
)