2 * QEMU AMD PC-Net II (Am79C970A) emulation
4 * Copyright (c) 2004 Antony T Curtis
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
19 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
25 /* This software was written to be compatible with the specification:
26 * AMD Am79C970A PCnet-PCI II Ethernet Controller Data-Sheet
27 * AMD Publication# 19436 Rev:E Amendment/0 Issue Date: June 2000
31 * On Sparc32, this is the Lance (Am7990) part of chip STP2000 (Master I/O), also
32 * produced as NCR89C100. See
33 * http://www.ibiblio.org/pub/historic-linux/early-ports/Sparc/NCR/NCR89C100.txt
35 * http://www.ibiblio.org/pub/historic-linux/early-ports/Sparc/NCR/NCR92C990.txt
40 #include "qemu/timer.h"
41 #include "qemu/sockets.h"
42 #include "sysemu/sysemu.h"
48 //#define PCNET_DEBUG_IO
49 //#define PCNET_DEBUG_BCR
50 //#define PCNET_DEBUG_CSR
51 //#define PCNET_DEBUG_RMD
52 //#define PCNET_DEBUG_TMD
53 //#define PCNET_DEBUG_MATCH
56 struct qemu_ether_header
{
57 uint8_t ether_dhost
[6];
58 uint8_t ether_shost
[6];
62 #define CSR_INIT(S) !!(((S)->csr[0])&0x0001)
63 #define CSR_STRT(S) !!(((S)->csr[0])&0x0002)
64 #define CSR_STOP(S) !!(((S)->csr[0])&0x0004)
65 #define CSR_TDMD(S) !!(((S)->csr[0])&0x0008)
66 #define CSR_TXON(S) !!(((S)->csr[0])&0x0010)
67 #define CSR_RXON(S) !!(((S)->csr[0])&0x0020)
68 #define CSR_INEA(S) !!(((S)->csr[0])&0x0040)
69 #define CSR_BSWP(S) !!(((S)->csr[3])&0x0004)
70 #define CSR_LAPPEN(S) !!(((S)->csr[3])&0x0020)
71 #define CSR_DXSUFLO(S) !!(((S)->csr[3])&0x0040)
72 #define CSR_ASTRP_RCV(S) !!(((S)->csr[4])&0x0800)
73 #define CSR_DPOLL(S) !!(((S)->csr[4])&0x1000)
74 #define CSR_SPND(S) !!(((S)->csr[5])&0x0001)
75 #define CSR_LTINTEN(S) !!(((S)->csr[5])&0x4000)
76 #define CSR_TOKINTD(S) !!(((S)->csr[5])&0x8000)
77 #define CSR_DRX(S) !!(((S)->csr[15])&0x0001)
78 #define CSR_DTX(S) !!(((S)->csr[15])&0x0002)
79 #define CSR_LOOP(S) !!(((S)->csr[15])&0x0004)
80 #define CSR_DXMTFCS(S) !!(((S)->csr[15])&0x0008)
81 #define CSR_INTL(S) !!(((S)->csr[15])&0x0040)
82 #define CSR_DRCVPA(S) !!(((S)->csr[15])&0x2000)
83 #define CSR_DRCVBC(S) !!(((S)->csr[15])&0x4000)
84 #define CSR_PROM(S) !!(((S)->csr[15])&0x8000)
86 #define CSR_CRBC(S) ((S)->csr[40])
87 #define CSR_CRST(S) ((S)->csr[41])
88 #define CSR_CXBC(S) ((S)->csr[42])
89 #define CSR_CXST(S) ((S)->csr[43])
90 #define CSR_NRBC(S) ((S)->csr[44])
91 #define CSR_NRST(S) ((S)->csr[45])
92 #define CSR_POLL(S) ((S)->csr[46])
93 #define CSR_PINT(S) ((S)->csr[47])
94 #define CSR_RCVRC(S) ((S)->csr[72])
95 #define CSR_XMTRC(S) ((S)->csr[74])
96 #define CSR_RCVRL(S) ((S)->csr[76])
97 #define CSR_XMTRL(S) ((S)->csr[78])
98 #define CSR_MISSC(S) ((S)->csr[112])
100 #define CSR_IADR(S) ((S)->csr[ 1] | ((uint32_t)(S)->csr[ 2] << 16))
101 #define CSR_CRBA(S) ((S)->csr[18] | ((uint32_t)(S)->csr[19] << 16))
102 #define CSR_CXBA(S) ((S)->csr[20] | ((uint32_t)(S)->csr[21] << 16))
103 #define CSR_NRBA(S) ((S)->csr[22] | ((uint32_t)(S)->csr[23] << 16))
104 #define CSR_BADR(S) ((S)->csr[24] | ((uint32_t)(S)->csr[25] << 16))
105 #define CSR_NRDA(S) ((S)->csr[26] | ((uint32_t)(S)->csr[27] << 16))
106 #define CSR_CRDA(S) ((S)->csr[28] | ((uint32_t)(S)->csr[29] << 16))
107 #define CSR_BADX(S) ((S)->csr[30] | ((uint32_t)(S)->csr[31] << 16))
108 #define CSR_NXDA(S) ((S)->csr[32] | ((uint32_t)(S)->csr[33] << 16))
109 #define CSR_CXDA(S) ((S)->csr[34] | ((uint32_t)(S)->csr[35] << 16))
110 #define CSR_NNRD(S) ((S)->csr[36] | ((uint32_t)(S)->csr[37] << 16))
111 #define CSR_NNXD(S) ((S)->csr[38] | ((uint32_t)(S)->csr[39] << 16))
112 #define CSR_PXDA(S) ((S)->csr[60] | ((uint32_t)(S)->csr[61] << 16))
113 #define CSR_NXBA(S) ((S)->csr[64] | ((uint32_t)(S)->csr[65] << 16))
115 #define PHYSADDR(S,A) \
116 (BCR_SSIZE32(S) ? (A) : (A) | ((0xff00 & (uint32_t)(S)->csr[2])<<16))
118 struct pcnet_initblk16
{
126 struct pcnet_initblk32
{
145 #define TMDL_BCNT_MASK 0x0fff
146 #define TMDL_BCNT_SH 0
147 #define TMDL_ONES_MASK 0xf000
148 #define TMDL_ONES_SH 12
150 #define TMDS_BPE_MASK 0x0080
151 #define TMDS_BPE_SH 7
152 #define TMDS_ENP_MASK 0x0100
153 #define TMDS_ENP_SH 8
154 #define TMDS_STP_MASK 0x0200
155 #define TMDS_STP_SH 9
156 #define TMDS_DEF_MASK 0x0400
157 #define TMDS_DEF_SH 10
158 #define TMDS_ONE_MASK 0x0800
159 #define TMDS_ONE_SH 11
160 #define TMDS_LTINT_MASK 0x1000
161 #define TMDS_LTINT_SH 12
162 #define TMDS_NOFCS_MASK 0x2000
163 #define TMDS_NOFCS_SH 13
164 #define TMDS_ADDFCS_MASK TMDS_NOFCS_MASK
165 #define TMDS_ADDFCS_SH TMDS_NOFCS_SH
166 #define TMDS_ERR_MASK 0x4000
167 #define TMDS_ERR_SH 14
168 #define TMDS_OWN_MASK 0x8000
169 #define TMDS_OWN_SH 15
171 #define TMDM_TRC_MASK 0x0000000f
172 #define TMDM_TRC_SH 0
173 #define TMDM_TDR_MASK 0x03ff0000
174 #define TMDM_TDR_SH 16
175 #define TMDM_RTRY_MASK 0x04000000
176 #define TMDM_RTRY_SH 26
177 #define TMDM_LCAR_MASK 0x08000000
178 #define TMDM_LCAR_SH 27
179 #define TMDM_LCOL_MASK 0x10000000
180 #define TMDM_LCOL_SH 28
181 #define TMDM_EXDEF_MASK 0x20000000
182 #define TMDM_EXDEF_SH 29
183 #define TMDM_UFLO_MASK 0x40000000
184 #define TMDM_UFLO_SH 30
185 #define TMDM_BUFF_MASK 0x80000000
186 #define TMDM_BUFF_SH 31
196 #define RMDL_BCNT_MASK 0x0fff
197 #define RMDL_BCNT_SH 0
198 #define RMDL_ONES_MASK 0xf000
199 #define RMDL_ONES_SH 12
201 #define RMDS_BAM_MASK 0x0010
202 #define RMDS_BAM_SH 4
203 #define RMDS_LFAM_MASK 0x0020
204 #define RMDS_LFAM_SH 5
205 #define RMDS_PAM_MASK 0x0040
206 #define RMDS_PAM_SH 6
207 #define RMDS_BPE_MASK 0x0080
208 #define RMDS_BPE_SH 7
209 #define RMDS_ENP_MASK 0x0100
210 #define RMDS_ENP_SH 8
211 #define RMDS_STP_MASK 0x0200
212 #define RMDS_STP_SH 9
213 #define RMDS_BUFF_MASK 0x0400
214 #define RMDS_BUFF_SH 10
215 #define RMDS_CRC_MASK 0x0800
216 #define RMDS_CRC_SH 11
217 #define RMDS_OFLO_MASK 0x1000
218 #define RMDS_OFLO_SH 12
219 #define RMDS_FRAM_MASK 0x2000
220 #define RMDS_FRAM_SH 13
221 #define RMDS_ERR_MASK 0x4000
222 #define RMDS_ERR_SH 14
223 #define RMDS_OWN_MASK 0x8000
224 #define RMDS_OWN_SH 15
226 #define RMDM_MCNT_MASK 0x00000fff
227 #define RMDM_MCNT_SH 0
228 #define RMDM_ZEROS_MASK 0x0000f000
229 #define RMDM_ZEROS_SH 12
230 #define RMDM_RPC_MASK 0x00ff0000
231 #define RMDM_RPC_SH 16
232 #define RMDM_RCC_MASK 0xff000000
233 #define RMDM_RCC_SH 24
235 #define SET_FIELD(regp, name, field, value) \
236 (*(regp) = (*(regp) & ~(name ## _ ## field ## _MASK)) \
237 | ((value) << name ## _ ## field ## _SH))
239 #define GET_FIELD(reg, name, field) \
240 (((reg) & name ## _ ## field ## _MASK) >> name ## _ ## field ## _SH)
242 #define PRINT_TMD(T) printf( \
243 "TMD0 : TBADR=0x%08x\n" \
244 "TMD1 : OWN=%d, ERR=%d, FCS=%d, LTI=%d, " \
245 "ONE=%d, DEF=%d, STP=%d, ENP=%d,\n" \
246 " BPE=%d, BCNT=%d\n" \
247 "TMD2 : BUF=%d, UFL=%d, EXD=%d, LCO=%d, " \
248 "LCA=%d, RTR=%d,\n" \
249 " TDR=%d, TRC=%d\n", \
251 GET_FIELD((T)->status, TMDS, OWN), \
252 GET_FIELD((T)->status, TMDS, ERR), \
253 GET_FIELD((T)->status, TMDS, NOFCS), \
254 GET_FIELD((T)->status, TMDS, LTINT), \
255 GET_FIELD((T)->status, TMDS, ONE), \
256 GET_FIELD((T)->status, TMDS, DEF), \
257 GET_FIELD((T)->status, TMDS, STP), \
258 GET_FIELD((T)->status, TMDS, ENP), \
259 GET_FIELD((T)->status, TMDS, BPE), \
260 4096-GET_FIELD((T)->length, TMDL, BCNT), \
261 GET_FIELD((T)->misc, TMDM, BUFF), \
262 GET_FIELD((T)->misc, TMDM, UFLO), \
263 GET_FIELD((T)->misc, TMDM, EXDEF), \
264 GET_FIELD((T)->misc, TMDM, LCOL), \
265 GET_FIELD((T)->misc, TMDM, LCAR), \
266 GET_FIELD((T)->misc, TMDM, RTRY), \
267 GET_FIELD((T)->misc, TMDM, TDR), \
268 GET_FIELD((T)->misc, TMDM, TRC))
270 #define PRINT_RMD(R) printf( \
271 "RMD0 : RBADR=0x%08x\n" \
272 "RMD1 : OWN=%d, ERR=%d, FRAM=%d, OFLO=%d, " \
273 "CRC=%d, BUFF=%d, STP=%d, ENP=%d,\n " \
274 "BPE=%d, PAM=%d, LAFM=%d, BAM=%d, ONES=%d, BCNT=%d\n" \
275 "RMD2 : RCC=%d, RPC=%d, MCNT=%d, ZEROS=%d\n", \
277 GET_FIELD((R)->status, RMDS, OWN), \
278 GET_FIELD((R)->status, RMDS, ERR), \
279 GET_FIELD((R)->status, RMDS, FRAM), \
280 GET_FIELD((R)->status, RMDS, OFLO), \
281 GET_FIELD((R)->status, RMDS, CRC), \
282 GET_FIELD((R)->status, RMDS, BUFF), \
283 GET_FIELD((R)->status, RMDS, STP), \
284 GET_FIELD((R)->status, RMDS, ENP), \
285 GET_FIELD((R)->status, RMDS, BPE), \
286 GET_FIELD((R)->status, RMDS, PAM), \
287 GET_FIELD((R)->status, RMDS, LFAM), \
288 GET_FIELD((R)->status, RMDS, BAM), \
289 GET_FIELD((R)->buf_length, RMDL, ONES), \
290 4096-GET_FIELD((R)->buf_length, RMDL, BCNT), \
291 GET_FIELD((R)->msg_length, RMDM, RCC), \
292 GET_FIELD((R)->msg_length, RMDM, RPC), \
293 GET_FIELD((R)->msg_length, RMDM, MCNT), \
294 GET_FIELD((R)->msg_length, RMDM, ZEROS))
296 static inline void pcnet_tmd_load(PCNetState
*s
, struct pcnet_TMD
*tmd
,
299 if (!BCR_SSIZE32(s
)) {
305 s
->phys_mem_read(s
->dma_opaque
, addr
, (void *)&xda
, sizeof(xda
), 0);
306 tmd
->tbadr
= le32_to_cpu(xda
.tbadr
) & 0xffffff;
307 tmd
->length
= le16_to_cpu(xda
.length
);
308 tmd
->status
= (le32_to_cpu(xda
.tbadr
) >> 16) & 0xff00;
309 tmd
->misc
= le16_to_cpu(xda
.status
) << 16;
312 s
->phys_mem_read(s
->dma_opaque
, addr
, (void *)tmd
, sizeof(*tmd
), 0);
313 le32_to_cpus(&tmd
->tbadr
);
314 le16_to_cpus((uint16_t *)&tmd
->length
);
315 le16_to_cpus((uint16_t *)&tmd
->status
);
316 le32_to_cpus(&tmd
->misc
);
317 le32_to_cpus(&tmd
->res
);
318 if (BCR_SWSTYLE(s
) == 3) {
319 uint32_t tmp
= tmd
->tbadr
;
320 tmd
->tbadr
= tmd
->misc
;
326 static inline void pcnet_tmd_store(PCNetState
*s
, const struct pcnet_TMD
*tmd
,
329 if (!BCR_SSIZE32(s
)) {
335 xda
.tbadr
= cpu_to_le32((tmd
->tbadr
& 0xffffff) |
336 ((tmd
->status
& 0xff00) << 16));
337 xda
.length
= cpu_to_le16(tmd
->length
);
338 xda
.status
= cpu_to_le16(tmd
->misc
>> 16);
339 s
->phys_mem_write(s
->dma_opaque
, addr
, (void *)&xda
, sizeof(xda
), 0);
348 xda
.tbadr
= cpu_to_le32(tmd
->tbadr
);
349 xda
.length
= cpu_to_le16(tmd
->length
);
350 xda
.status
= cpu_to_le16(tmd
->status
);
351 xda
.misc
= cpu_to_le32(tmd
->misc
);
352 xda
.res
= cpu_to_le32(tmd
->res
);
353 if (BCR_SWSTYLE(s
) == 3) {
354 uint32_t tmp
= xda
.tbadr
;
355 xda
.tbadr
= xda
.misc
;
358 s
->phys_mem_write(s
->dma_opaque
, addr
, (void *)&xda
, sizeof(xda
), 0);
362 static inline void pcnet_rmd_load(PCNetState
*s
, struct pcnet_RMD
*rmd
,
365 if (!BCR_SSIZE32(s
)) {
371 s
->phys_mem_read(s
->dma_opaque
, addr
, (void *)&rda
, sizeof(rda
), 0);
372 rmd
->rbadr
= le32_to_cpu(rda
.rbadr
) & 0xffffff;
373 rmd
->buf_length
= le16_to_cpu(rda
.buf_length
);
374 rmd
->status
= (le32_to_cpu(rda
.rbadr
) >> 16) & 0xff00;
375 rmd
->msg_length
= le16_to_cpu(rda
.msg_length
);
378 s
->phys_mem_read(s
->dma_opaque
, addr
, (void *)rmd
, sizeof(*rmd
), 0);
379 le32_to_cpus(&rmd
->rbadr
);
380 le16_to_cpus((uint16_t *)&rmd
->buf_length
);
381 le16_to_cpus((uint16_t *)&rmd
->status
);
382 le32_to_cpus(&rmd
->msg_length
);
383 le32_to_cpus(&rmd
->res
);
384 if (BCR_SWSTYLE(s
) == 3) {
385 uint32_t tmp
= rmd
->rbadr
;
386 rmd
->rbadr
= rmd
->msg_length
;
387 rmd
->msg_length
= tmp
;
392 static inline void pcnet_rmd_store(PCNetState
*s
, struct pcnet_RMD
*rmd
,
395 if (!BCR_SSIZE32(s
)) {
401 rda
.rbadr
= cpu_to_le32((rmd
->rbadr
& 0xffffff) |
402 ((rmd
->status
& 0xff00) << 16));
403 rda
.buf_length
= cpu_to_le16(rmd
->buf_length
);
404 rda
.msg_length
= cpu_to_le16(rmd
->msg_length
);
405 s
->phys_mem_write(s
->dma_opaque
, addr
, (void *)&rda
, sizeof(rda
), 0);
414 rda
.rbadr
= cpu_to_le32(rmd
->rbadr
);
415 rda
.buf_length
= cpu_to_le16(rmd
->buf_length
);
416 rda
.status
= cpu_to_le16(rmd
->status
);
417 rda
.msg_length
= cpu_to_le32(rmd
->msg_length
);
418 rda
.res
= cpu_to_le32(rmd
->res
);
419 if (BCR_SWSTYLE(s
) == 3) {
420 uint32_t tmp
= rda
.rbadr
;
421 rda
.rbadr
= rda
.msg_length
;
422 rda
.msg_length
= tmp
;
424 s
->phys_mem_write(s
->dma_opaque
, addr
, (void *)&rda
, sizeof(rda
), 0);
429 #define TMDLOAD(TMD,ADDR) pcnet_tmd_load(s,TMD,ADDR)
431 #define TMDSTORE(TMD,ADDR) pcnet_tmd_store(s,TMD,ADDR)
433 #define RMDLOAD(RMD,ADDR) pcnet_rmd_load(s,RMD,ADDR)
435 #define RMDSTORE(RMD,ADDR) pcnet_rmd_store(s,RMD,ADDR)
439 #define CHECK_RMD(ADDR,RES) do { \
440 struct pcnet_RMD rmd; \
441 RMDLOAD(&rmd,(ADDR)); \
442 (RES) |= (GET_FIELD(rmd.buf_length, RMDL, ONES) != 15) \
443 || (GET_FIELD(rmd.msg_length, RMDM, ZEROS) != 0); \
446 #define CHECK_TMD(ADDR,RES) do { \
447 struct pcnet_TMD tmd; \
448 TMDLOAD(&tmd,(ADDR)); \
449 (RES) |= (GET_FIELD(tmd.length, TMDL, ONES) != 15); \
454 #define CHECK_RMD(ADDR,RES) do { \
455 switch (BCR_SWSTYLE(s)) { \
459 s->phys_mem_read(s->dma_opaque, (ADDR), \
460 (void *)&rda[0], sizeof(rda), 0); \
461 (RES) |= (rda[2] & 0xf000)!=0xf000; \
462 (RES) |= (rda[3] & 0xf000)!=0x0000; \
469 s->phys_mem_read(s->dma_opaque, (ADDR), \
470 (void *)&rda[0], sizeof(rda), 0); \
471 (RES) |= (rda[1] & 0x0000f000L)!=0x0000f000L; \
472 (RES) |= (rda[2] & 0x0000f000L)!=0x00000000L; \
478 s->phys_mem_read(s->dma_opaque, (ADDR), \
479 (void *)&rda[0], sizeof(rda), 0); \
480 (RES) |= (rda[0] & 0x0000f000L)!=0x00000000L; \
481 (RES) |= (rda[1] & 0x0000f000L)!=0x0000f000L; \
487 #define CHECK_TMD(ADDR,RES) do { \
488 switch (BCR_SWSTYLE(s)) { \
492 s->phys_mem_read(s->dma_opaque, (ADDR), \
493 (void *)&xda[0], sizeof(xda), 0); \
494 (RES) |= (xda[2] & 0xf000)!=0xf000; \
502 s->phys_mem_read(s->dma_opaque, (ADDR), \
503 (void *)&xda[0], sizeof(xda), 0); \
504 (RES) |= (xda[1] & 0x0000f000L)!=0x0000f000L; \
512 #define PRINT_PKTHDR(BUF) do { \
513 struct qemu_ether_header *hdr = (void *)(BUF); \
514 printf("packet dhost=%02x:%02x:%02x:%02x:%02x:%02x, " \
515 "shost=%02x:%02x:%02x:%02x:%02x:%02x, " \
517 hdr->ether_dhost[0],hdr->ether_dhost[1],hdr->ether_dhost[2], \
518 hdr->ether_dhost[3],hdr->ether_dhost[4],hdr->ether_dhost[5], \
519 hdr->ether_shost[0],hdr->ether_shost[1],hdr->ether_shost[2], \
520 hdr->ether_shost[3],hdr->ether_shost[4],hdr->ether_shost[5], \
521 be16_to_cpu(hdr->ether_type)); \
524 #define MULTICAST_FILTER_LEN 8
526 static inline uint32_t lnc_mchash(const uint8_t *ether_addr
)
528 #define LNC_POLYNOMIAL 0xEDB88320UL
529 uint32_t crc
= 0xFFFFFFFF;
533 for (idx
= 0; idx
< 6; idx
++) {
534 for (data
= *ether_addr
++, bit
= 0; bit
< MULTICAST_FILTER_LEN
; bit
++) {
535 crc
= (crc
>> 1) ^ (((crc
^ data
) & 1) ? LNC_POLYNOMIAL
: 0);
540 #undef LNC_POLYNOMIAL
543 #define CRC(crc, ch) (crc = (crc >> 8) ^ crctab[(crc ^ (ch)) & 0xff])
545 /* generated using the AUTODIN II polynomial
546 * x^32 + x^26 + x^23 + x^22 + x^16 +
547 * x^12 + x^11 + x^10 + x^8 + x^7 + x^5 + x^4 + x^2 + x^1 + 1
549 static const uint32_t crctab
[256] = {
550 0x00000000, 0x77073096, 0xee0e612c, 0x990951ba,
551 0x076dc419, 0x706af48f, 0xe963a535, 0x9e6495a3,
552 0x0edb8832, 0x79dcb8a4, 0xe0d5e91e, 0x97d2d988,
553 0x09b64c2b, 0x7eb17cbd, 0xe7b82d07, 0x90bf1d91,
554 0x1db71064, 0x6ab020f2, 0xf3b97148, 0x84be41de,
555 0x1adad47d, 0x6ddde4eb, 0xf4d4b551, 0x83d385c7,
556 0x136c9856, 0x646ba8c0, 0xfd62f97a, 0x8a65c9ec,
557 0x14015c4f, 0x63066cd9, 0xfa0f3d63, 0x8d080df5,
558 0x3b6e20c8, 0x4c69105e, 0xd56041e4, 0xa2677172,
559 0x3c03e4d1, 0x4b04d447, 0xd20d85fd, 0xa50ab56b,
560 0x35b5a8fa, 0x42b2986c, 0xdbbbc9d6, 0xacbcf940,
561 0x32d86ce3, 0x45df5c75, 0xdcd60dcf, 0xabd13d59,
562 0x26d930ac, 0x51de003a, 0xc8d75180, 0xbfd06116,
563 0x21b4f4b5, 0x56b3c423, 0xcfba9599, 0xb8bda50f,
564 0x2802b89e, 0x5f058808, 0xc60cd9b2, 0xb10be924,
565 0x2f6f7c87, 0x58684c11, 0xc1611dab, 0xb6662d3d,
566 0x76dc4190, 0x01db7106, 0x98d220bc, 0xefd5102a,
567 0x71b18589, 0x06b6b51f, 0x9fbfe4a5, 0xe8b8d433,
568 0x7807c9a2, 0x0f00f934, 0x9609a88e, 0xe10e9818,
569 0x7f6a0dbb, 0x086d3d2d, 0x91646c97, 0xe6635c01,
570 0x6b6b51f4, 0x1c6c6162, 0x856530d8, 0xf262004e,
571 0x6c0695ed, 0x1b01a57b, 0x8208f4c1, 0xf50fc457,
572 0x65b0d9c6, 0x12b7e950, 0x8bbeb8ea, 0xfcb9887c,
573 0x62dd1ddf, 0x15da2d49, 0x8cd37cf3, 0xfbd44c65,
574 0x4db26158, 0x3ab551ce, 0xa3bc0074, 0xd4bb30e2,
575 0x4adfa541, 0x3dd895d7, 0xa4d1c46d, 0xd3d6f4fb,
576 0x4369e96a, 0x346ed9fc, 0xad678846, 0xda60b8d0,
577 0x44042d73, 0x33031de5, 0xaa0a4c5f, 0xdd0d7cc9,
578 0x5005713c, 0x270241aa, 0xbe0b1010, 0xc90c2086,
579 0x5768b525, 0x206f85b3, 0xb966d409, 0xce61e49f,
580 0x5edef90e, 0x29d9c998, 0xb0d09822, 0xc7d7a8b4,
581 0x59b33d17, 0x2eb40d81, 0xb7bd5c3b, 0xc0ba6cad,
582 0xedb88320, 0x9abfb3b6, 0x03b6e20c, 0x74b1d29a,
583 0xead54739, 0x9dd277af, 0x04db2615, 0x73dc1683,
584 0xe3630b12, 0x94643b84, 0x0d6d6a3e, 0x7a6a5aa8,
585 0xe40ecf0b, 0x9309ff9d, 0x0a00ae27, 0x7d079eb1,
586 0xf00f9344, 0x8708a3d2, 0x1e01f268, 0x6906c2fe,
587 0xf762575d, 0x806567cb, 0x196c3671, 0x6e6b06e7,
588 0xfed41b76, 0x89d32be0, 0x10da7a5a, 0x67dd4acc,
589 0xf9b9df6f, 0x8ebeeff9, 0x17b7be43, 0x60b08ed5,
590 0xd6d6a3e8, 0xa1d1937e, 0x38d8c2c4, 0x4fdff252,
591 0xd1bb67f1, 0xa6bc5767, 0x3fb506dd, 0x48b2364b,
592 0xd80d2bda, 0xaf0a1b4c, 0x36034af6, 0x41047a60,
593 0xdf60efc3, 0xa867df55, 0x316e8eef, 0x4669be79,
594 0xcb61b38c, 0xbc66831a, 0x256fd2a0, 0x5268e236,
595 0xcc0c7795, 0xbb0b4703, 0x220216b9, 0x5505262f,
596 0xc5ba3bbe, 0xb2bd0b28, 0x2bb45a92, 0x5cb36a04,
597 0xc2d7ffa7, 0xb5d0cf31, 0x2cd99e8b, 0x5bdeae1d,
598 0x9b64c2b0, 0xec63f226, 0x756aa39c, 0x026d930a,
599 0x9c0906a9, 0xeb0e363f, 0x72076785, 0x05005713,
600 0x95bf4a82, 0xe2b87a14, 0x7bb12bae, 0x0cb61b38,
601 0x92d28e9b, 0xe5d5be0d, 0x7cdcefb7, 0x0bdbdf21,
602 0x86d3d2d4, 0xf1d4e242, 0x68ddb3f8, 0x1fda836e,
603 0x81be16cd, 0xf6b9265b, 0x6fb077e1, 0x18b74777,
604 0x88085ae6, 0xff0f6a70, 0x66063bca, 0x11010b5c,
605 0x8f659eff, 0xf862ae69, 0x616bffd3, 0x166ccf45,
606 0xa00ae278, 0xd70dd2ee, 0x4e048354, 0x3903b3c2,
607 0xa7672661, 0xd06016f7, 0x4969474d, 0x3e6e77db,
608 0xaed16a4a, 0xd9d65adc, 0x40df0b66, 0x37d83bf0,
609 0xa9bcae53, 0xdebb9ec5, 0x47b2cf7f, 0x30b5ffe9,
610 0xbdbdf21c, 0xcabac28a, 0x53b39330, 0x24b4a3a6,
611 0xbad03605, 0xcdd70693, 0x54de5729, 0x23d967bf,
612 0xb3667a2e, 0xc4614ab8, 0x5d681b02, 0x2a6f2b94,
613 0xb40bbe37, 0xc30c8ea1, 0x5a05df1b, 0x2d02ef8d,
616 static inline int padr_match(PCNetState
*s
, const uint8_t *buf
, int size
)
618 struct qemu_ether_header
*hdr
= (void *)buf
;
620 s
->csr
[12] & 0xff, s
->csr
[12] >> 8,
621 s
->csr
[13] & 0xff, s
->csr
[13] >> 8,
622 s
->csr
[14] & 0xff, s
->csr
[14] >> 8
624 int result
= (!CSR_DRCVPA(s
)) && !memcmp(hdr
->ether_dhost
, padr
, 6);
625 #ifdef PCNET_DEBUG_MATCH
626 printf("packet dhost=%02x:%02x:%02x:%02x:%02x:%02x, "
627 "padr=%02x:%02x:%02x:%02x:%02x:%02x\n",
628 hdr
->ether_dhost
[0],hdr
->ether_dhost
[1],hdr
->ether_dhost
[2],
629 hdr
->ether_dhost
[3],hdr
->ether_dhost
[4],hdr
->ether_dhost
[5],
630 padr
[0],padr
[1],padr
[2],padr
[3],padr
[4],padr
[5]);
631 printf("padr_match result=%d\n", result
);
636 static inline int padr_bcast(PCNetState
*s
, const uint8_t *buf
, int size
)
638 static const uint8_t BCAST
[6] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
639 struct qemu_ether_header
*hdr
= (void *)buf
;
640 int result
= !CSR_DRCVBC(s
) && !memcmp(hdr
->ether_dhost
, BCAST
, 6);
641 #ifdef PCNET_DEBUG_MATCH
642 printf("padr_bcast result=%d\n", result
);
647 static inline int ladr_match(PCNetState
*s
, const uint8_t *buf
, int size
)
649 struct qemu_ether_header
*hdr
= (void *)buf
;
650 if ((*(hdr
->ether_dhost
)&0x01) &&
651 ((uint64_t *)&s
->csr
[8])[0] != 0LL) {
653 s
->csr
[8] & 0xff, s
->csr
[8] >> 8,
654 s
->csr
[9] & 0xff, s
->csr
[9] >> 8,
655 s
->csr
[10] & 0xff, s
->csr
[10] >> 8,
656 s
->csr
[11] & 0xff, s
->csr
[11] >> 8
658 int index
= lnc_mchash(hdr
->ether_dhost
) >> 26;
659 return !!(ladr
[index
>> 3] & (1 << (index
& 7)));
664 static inline hwaddr
pcnet_rdra_addr(PCNetState
*s
, int idx
)
666 while (idx
< 1) idx
+= CSR_RCVRL(s
);
667 return s
->rdra
+ ((CSR_RCVRL(s
) - idx
) * (BCR_SWSTYLE(s
) ? 16 : 8));
670 static inline int64_t pcnet_get_next_poll_time(PCNetState
*s
, int64_t current_time
)
672 int64_t next_time
= current_time
+
673 (65536 - (CSR_SPND(s
) ? 0 : CSR_POLL(s
))) * 30;
674 if (next_time
<= current_time
)
675 next_time
= current_time
+ 1;
679 static void pcnet_poll(PCNetState
*s
);
680 static void pcnet_poll_timer(void *opaque
);
682 static uint32_t pcnet_csr_readw(PCNetState
*s
, uint32_t rap
);
683 static void pcnet_csr_writew(PCNetState
*s
, uint32_t rap
, uint32_t new_value
);
684 static void pcnet_bcr_writew(PCNetState
*s
, uint32_t rap
, uint32_t val
);
686 static void pcnet_s_reset(PCNetState
*s
)
688 trace_pcnet_s_reset(s
);
694 s
->bcr
[BCR_BSBC
] &= ~0x0080;
705 s
->csr
[12] = le16_to_cpu(((uint16_t *)&s
->prom
[0])[0]);
706 s
->csr
[13] = le16_to_cpu(((uint16_t *)&s
->prom
[0])[1]);
707 s
->csr
[14] = le16_to_cpu(((uint16_t *)&s
->prom
[0])[2]);
708 s
->csr
[15] &= 0x21c4;
717 s
->csr
[100] = 0x0200;
718 s
->csr
[103] = 0x0105;
719 s
->csr
[112] = 0x0000;
720 s
->csr
[114] = 0x0000;
721 s
->csr
[122] = 0x0000;
722 s
->csr
[124] = 0x0000;
727 static void pcnet_update_irq(PCNetState
*s
)
730 s
->csr
[0] &= ~0x0080;
733 if (((s
->csr
[0] & ~s
->csr
[3]) & 0x5f00) ||
734 (((s
->csr
[4]>>1) & ~s
->csr
[4]) & 0x0115) ||
735 (((s
->csr
[5]>>1) & s
->csr
[5]) & 0x0048))
737 if ((!(s
->csr
[3] & 0x4000) && !!(s
->csr
[0] & 0x4000)) /* BABL */ ||
738 (!(s
->csr
[3] & 0x1000) && !!(s
->csr
[0] & 0x1000)) /* MISS */ ||
739 (!(s
->csr
[3] & 0x0100) && !!(s
->csr
[0] & 0x0100)) /* IDON */ ||
740 (!(s
->csr
[3] & 0x0200) && !!(s
->csr
[0] & 0x0200)) /* TINT */ ||
741 (!(s
->csr
[3] & 0x0400) && !!(s
->csr
[0] & 0x0400)) /* RINT */ ||
742 (!(s
->csr
[3] & 0x0800) && !!(s
->csr
[0] & 0x0800)) /* MERR */ ||
743 (!(s
->csr
[4] & 0x0001) && !!(s
->csr
[4] & 0x0002)) /* JAB */ ||
744 (!(s
->csr
[4] & 0x0004) && !!(s
->csr
[4] & 0x0008)) /* TXSTRT */ ||
745 (!(s
->csr
[4] & 0x0010) && !!(s
->csr
[4] & 0x0020)) /* RCVO */ ||
746 (!(s
->csr
[4] & 0x0100) && !!(s
->csr
[4] & 0x0200)) /* MFCO */ ||
747 (!!(s
->csr
[5] & 0x0040) && !!(s
->csr
[5] & 0x0080)) /* EXDINT */ ||
748 (!!(s
->csr
[5] & 0x0008) && !!(s
->csr
[5] & 0x0010)) /* MPINT */)
756 if (!!(s
->csr
[4] & 0x0080) && CSR_INEA(s
)) { /* UINT */
757 s
->csr
[4] &= ~0x0080;
761 trace_pcnet_user_int(s
);
765 if (((s
->csr
[5]>>1) & s
->csr
[5]) & 0x0500)
767 if ((!!(s
->csr
[5] & 0x0400) && !!(s
->csr
[5] & 0x0800)) /* SINT */ ||
768 (!!(s
->csr
[5] & 0x0100) && !!(s
->csr
[5] & 0x0200)) /* SLPINT */ )
776 trace_pcnet_isr_change(s
, isr
, s
->isr
);
778 qemu_set_irq(s
->irq
, isr
);
782 static void pcnet_init(PCNetState
*s
)
785 uint16_t padr
[3], ladrf
[4], mode
;
788 trace_pcnet_init(s
, PHYSADDR(s
, CSR_IADR(s
)));
790 if (BCR_SSIZE32(s
)) {
791 struct pcnet_initblk32 initblk
;
792 s
->phys_mem_read(s
->dma_opaque
, PHYSADDR(s
,CSR_IADR(s
)),
793 (uint8_t *)&initblk
, sizeof(initblk
), 0);
794 mode
= le16_to_cpu(initblk
.mode
);
795 rlen
= initblk
.rlen
>> 4;
796 tlen
= initblk
.tlen
>> 4;
797 ladrf
[0] = le16_to_cpu(initblk
.ladrf
[0]);
798 ladrf
[1] = le16_to_cpu(initblk
.ladrf
[1]);
799 ladrf
[2] = le16_to_cpu(initblk
.ladrf
[2]);
800 ladrf
[3] = le16_to_cpu(initblk
.ladrf
[3]);
801 padr
[0] = le16_to_cpu(initblk
.padr
[0]);
802 padr
[1] = le16_to_cpu(initblk
.padr
[1]);
803 padr
[2] = le16_to_cpu(initblk
.padr
[2]);
804 rdra
= le32_to_cpu(initblk
.rdra
);
805 tdra
= le32_to_cpu(initblk
.tdra
);
807 struct pcnet_initblk16 initblk
;
808 s
->phys_mem_read(s
->dma_opaque
, PHYSADDR(s
,CSR_IADR(s
)),
809 (uint8_t *)&initblk
, sizeof(initblk
), 0);
810 mode
= le16_to_cpu(initblk
.mode
);
811 ladrf
[0] = le16_to_cpu(initblk
.ladrf
[0]);
812 ladrf
[1] = le16_to_cpu(initblk
.ladrf
[1]);
813 ladrf
[2] = le16_to_cpu(initblk
.ladrf
[2]);
814 ladrf
[3] = le16_to_cpu(initblk
.ladrf
[3]);
815 padr
[0] = le16_to_cpu(initblk
.padr
[0]);
816 padr
[1] = le16_to_cpu(initblk
.padr
[1]);
817 padr
[2] = le16_to_cpu(initblk
.padr
[2]);
818 rdra
= le32_to_cpu(initblk
.rdra
);
819 tdra
= le32_to_cpu(initblk
.tdra
);
826 trace_pcnet_rlen_tlen(s
, rlen
, tlen
);
828 CSR_RCVRL(s
) = (rlen
< 9) ? (1 << rlen
) : 512;
829 CSR_XMTRL(s
) = (tlen
< 9) ? (1 << tlen
) : 512;
830 s
->csr
[ 6] = (tlen
<< 12) | (rlen
<< 8);
832 s
->csr
[ 8] = ladrf
[0];
833 s
->csr
[ 9] = ladrf
[1];
834 s
->csr
[10] = ladrf
[2];
835 s
->csr
[11] = ladrf
[3];
836 s
->csr
[12] = padr
[0];
837 s
->csr
[13] = padr
[1];
838 s
->csr
[14] = padr
[2];
839 s
->rdra
= PHYSADDR(s
, rdra
);
840 s
->tdra
= PHYSADDR(s
, tdra
);
842 CSR_RCVRC(s
) = CSR_RCVRL(s
);
843 CSR_XMTRC(s
) = CSR_XMTRL(s
);
845 trace_pcnet_ss32_rdra_tdra(s
, BCR_SSIZE32(s
),
846 s
->rdra
, CSR_RCVRL(s
), s
->tdra
, CSR_XMTRL(s
));
849 s
->csr
[0] &= ~0x0004; /* clear STOP bit */
851 qemu_flush_queued_packets(qemu_get_queue(s
->nic
));
854 static void pcnet_start(PCNetState
*s
)
857 printf("pcnet_start\n");
861 s
->csr
[0] |= 0x0010; /* set TXON */
864 s
->csr
[0] |= 0x0020; /* set RXON */
866 s
->csr
[0] &= ~0x0004; /* clear STOP bit */
870 qemu_flush_queued_packets(qemu_get_queue(s
->nic
));
873 static void pcnet_stop(PCNetState
*s
)
876 printf("pcnet_stop\n");
878 s
->csr
[0] &= ~0xffeb;
880 s
->csr
[4] &= ~0x02c2;
881 s
->csr
[5] &= ~0x0011;
885 static void pcnet_rdte_poll(PCNetState
*s
)
887 s
->csr
[28] = s
->csr
[29] = 0;
891 hwaddr crda
= pcnet_rdra_addr(s
, CSR_RCVRC(s
));
892 hwaddr nrda
= pcnet_rdra_addr(s
, -1 + CSR_RCVRC(s
));
893 hwaddr nnrd
= pcnet_rdra_addr(s
, -2 + CSR_RCVRC(s
));
895 hwaddr crda
= s
->rdra
+
896 (CSR_RCVRL(s
) - CSR_RCVRC(s
)) *
897 (BCR_SWSTYLE(s
) ? 16 : 8 );
898 int nrdc
= CSR_RCVRC(s
)<=1 ? CSR_RCVRL(s
) : CSR_RCVRC(s
)-1;
899 hwaddr nrda
= s
->rdra
+
900 (CSR_RCVRL(s
) - nrdc
) *
901 (BCR_SWSTYLE(s
) ? 16 : 8 );
902 int nnrc
= nrdc
<=1 ? CSR_RCVRL(s
) : nrdc
-1;
903 hwaddr nnrd
= s
->rdra
+
904 (CSR_RCVRL(s
) - nnrc
) *
905 (BCR_SWSTYLE(s
) ? 16 : 8 );
908 CHECK_RMD(crda
, bad
);
910 CHECK_RMD(nrda
, bad
);
911 if (bad
|| (nrda
== crda
)) nrda
= 0;
912 CHECK_RMD(nnrd
, bad
);
913 if (bad
|| (nnrd
== crda
)) nnrd
= 0;
915 s
->csr
[28] = crda
& 0xffff;
916 s
->csr
[29] = crda
>> 16;
917 s
->csr
[26] = nrda
& 0xffff;
918 s
->csr
[27] = nrda
>> 16;
919 s
->csr
[36] = nnrd
& 0xffff;
920 s
->csr
[37] = nnrd
>> 16;
923 printf("pcnet: BAD RMD RECORDS AFTER 0x" TARGET_FMT_plx
"\n",
927 printf("pcnet: BAD RMD RDA=0x" TARGET_FMT_plx
"\n",
934 struct pcnet_RMD rmd
;
935 RMDLOAD(&rmd
, PHYSADDR(s
,CSR_CRDA(s
)));
936 CSR_CRBC(s
) = GET_FIELD(rmd
.buf_length
, RMDL
, BCNT
);
937 CSR_CRST(s
) = rmd
.status
;
938 #ifdef PCNET_DEBUG_RMD_X
939 printf("CRDA=0x%08x CRST=0x%04x RCVRC=%d RMDL=0x%04x RMDS=0x%04x RMDM=0x%08x\n",
940 PHYSADDR(s
,CSR_CRDA(s
)), CSR_CRST(s
), CSR_RCVRC(s
),
941 rmd
.buf_length
, rmd
.status
, rmd
.msg_length
);
945 CSR_CRBC(s
) = CSR_CRST(s
) = 0;
949 struct pcnet_RMD rmd
;
950 RMDLOAD(&rmd
, PHYSADDR(s
,CSR_NRDA(s
)));
951 CSR_NRBC(s
) = GET_FIELD(rmd
.buf_length
, RMDL
, BCNT
);
952 CSR_NRST(s
) = rmd
.status
;
954 CSR_NRBC(s
) = CSR_NRST(s
) = 0;
959 static int pcnet_tdte_poll(PCNetState
*s
)
961 s
->csr
[34] = s
->csr
[35] = 0;
963 hwaddr cxda
= s
->tdra
+
964 (CSR_XMTRL(s
) - CSR_XMTRC(s
)) *
965 (BCR_SWSTYLE(s
) ? 16 : 8);
967 CHECK_TMD(cxda
, bad
);
969 if (CSR_CXDA(s
) != cxda
) {
970 s
->csr
[60] = s
->csr
[34];
971 s
->csr
[61] = s
->csr
[35];
972 s
->csr
[62] = CSR_CXBC(s
);
973 s
->csr
[63] = CSR_CXST(s
);
975 s
->csr
[34] = cxda
& 0xffff;
976 s
->csr
[35] = cxda
>> 16;
978 printf("pcnet: BAD TMD XDA=0x%08x\n", cxda
);
984 struct pcnet_TMD tmd
;
986 TMDLOAD(&tmd
, PHYSADDR(s
,CSR_CXDA(s
)));
988 CSR_CXBC(s
) = GET_FIELD(tmd
.length
, TMDL
, BCNT
);
989 CSR_CXST(s
) = tmd
.status
;
991 CSR_CXBC(s
) = CSR_CXST(s
) = 0;
994 return !!(CSR_CXST(s
) & 0x8000);
997 #define MIN_BUF_SIZE 60
999 ssize_t
pcnet_receive(NetClientState
*nc
, const uint8_t *buf
, size_t size_
)
1001 PCNetState
*s
= qemu_get_nic_opaque(nc
);
1002 int is_padr
= 0, is_bcast
= 0, is_ladr
= 0;
1008 if (CSR_DRX(s
) || CSR_STOP(s
) || CSR_SPND(s
) || !size
||
1009 (CSR_LOOP(s
) && !s
->looptest
)) {
1013 printf("pcnet_receive size=%d\n", size
);
1016 /* if too small buffer, then expand it */
1017 if (size
< MIN_BUF_SIZE
) {
1018 memcpy(buf1
, buf
, size
);
1019 memset(buf1
+ size
, 0, MIN_BUF_SIZE
- size
);
1021 size
= MIN_BUF_SIZE
;
1025 || (is_padr
=padr_match(s
, buf
, size
))
1026 || (is_bcast
=padr_bcast(s
, buf
, size
))
1027 || (is_ladr
=ladr_match(s
, buf
, size
))) {
1031 if (!(CSR_CRST(s
) & 0x8000) && s
->rdra
) {
1032 struct pcnet_RMD rmd
;
1033 int rcvrc
= CSR_RCVRC(s
)-1,i
;
1035 for (i
= CSR_RCVRL(s
)-1; i
> 0; i
--, rcvrc
--) {
1037 rcvrc
= CSR_RCVRL(s
);
1039 (CSR_RCVRL(s
) - rcvrc
) *
1040 (BCR_SWSTYLE(s
) ? 16 : 8 );
1041 RMDLOAD(&rmd
, nrda
);
1042 if (GET_FIELD(rmd
.status
, RMDS
, OWN
)) {
1043 #ifdef PCNET_DEBUG_RMD
1044 printf("pcnet - scan buffer: RCVRC=%d PREV_RCVRC=%d\n",
1045 rcvrc
, CSR_RCVRC(s
));
1047 CSR_RCVRC(s
) = rcvrc
;
1054 if (!(CSR_CRST(s
) & 0x8000)) {
1055 #ifdef PCNET_DEBUG_RMD
1056 printf("pcnet - no buffer: RCVRC=%d\n", CSR_RCVRC(s
));
1058 s
->csr
[0] |= 0x1000; /* Set MISS flag */
1061 uint8_t *src
= s
->buffer
;
1062 hwaddr crda
= CSR_CRDA(s
);
1063 struct pcnet_RMD rmd
;
1067 memcpy(src
, buf
, size
);
1068 /* no need to compute the CRC */
1074 } else if (s
->looptest
== PCNET_LOOPTEST_CRC
||
1075 !CSR_DXMTFCS(s
) || size
< MIN_BUF_SIZE
+4) {
1079 while (p
!= &src
[size
])
1081 *(uint32_t *)p
= htonl(fcs
);
1087 while (p
!= &src
[size
-4])
1089 crc_err
= (*(uint32_t *)p
!= htonl(fcs
));
1092 #ifdef PCNET_DEBUG_MATCH
1096 RMDLOAD(&rmd
, PHYSADDR(s
,crda
));
1097 /*if (!CSR_LAPPEN(s))*/
1098 SET_FIELD(&rmd
.status
, RMDS
, STP
, 1);
1100 #define PCNET_RECV_STORE() do { \
1101 int count = MIN(4096 - GET_FIELD(rmd.buf_length, RMDL, BCNT),remaining); \
1102 hwaddr rbadr = PHYSADDR(s, rmd.rbadr); \
1103 s->phys_mem_write(s->dma_opaque, rbadr, src, count, CSR_BSWP(s)); \
1104 src += count; remaining -= count; \
1105 SET_FIELD(&rmd.status, RMDS, OWN, 0); \
1106 RMDSTORE(&rmd, PHYSADDR(s,crda)); \
1112 if ((remaining
> 0) && CSR_NRDA(s
)) {
1113 hwaddr nrda
= CSR_NRDA(s
);
1114 #ifdef PCNET_DEBUG_RMD
1117 RMDLOAD(&rmd
, PHYSADDR(s
,nrda
));
1118 if (GET_FIELD(rmd
.status
, RMDS
, OWN
)) {
1121 #ifdef PCNET_DEBUG_RMD
1124 if ((remaining
> 0) && (nrda
=CSR_NNRD(s
))) {
1125 RMDLOAD(&rmd
, PHYSADDR(s
,nrda
));
1126 if (GET_FIELD(rmd
.status
, RMDS
, OWN
)) {
1134 #undef PCNET_RECV_STORE
1136 RMDLOAD(&rmd
, PHYSADDR(s
,crda
));
1137 if (remaining
== 0) {
1138 SET_FIELD(&rmd
.msg_length
, RMDM
, MCNT
, size
);
1139 SET_FIELD(&rmd
.status
, RMDS
, ENP
, 1);
1140 SET_FIELD(&rmd
.status
, RMDS
, PAM
, !CSR_PROM(s
) && is_padr
);
1141 SET_FIELD(&rmd
.status
, RMDS
, LFAM
, !CSR_PROM(s
) && is_ladr
);
1142 SET_FIELD(&rmd
.status
, RMDS
, BAM
, !CSR_PROM(s
) && is_bcast
);
1144 SET_FIELD(&rmd
.status
, RMDS
, CRC
, 1);
1145 SET_FIELD(&rmd
.status
, RMDS
, ERR
, 1);
1148 SET_FIELD(&rmd
.status
, RMDS
, OFLO
, 1);
1149 SET_FIELD(&rmd
.status
, RMDS
, BUFF
, 1);
1150 SET_FIELD(&rmd
.status
, RMDS
, ERR
, 1);
1152 RMDSTORE(&rmd
, PHYSADDR(s
,crda
));
1153 s
->csr
[0] |= 0x0400;
1156 printf("RCVRC=%d CRDA=0x%08x BLKS=%d\n",
1157 CSR_RCVRC(s
), PHYSADDR(s
,CSR_CRDA(s
)), pktcount
);
1159 #ifdef PCNET_DEBUG_RMD
1163 while (pktcount
--) {
1164 if (CSR_RCVRC(s
) <= 1)
1165 CSR_RCVRC(s
) = CSR_RCVRL(s
);
1176 pcnet_update_irq(s
);
1181 void pcnet_set_link_status(NetClientState
*nc
)
1183 PCNetState
*d
= qemu_get_nic_opaque(nc
);
1185 d
->lnkst
= nc
->link_down
? 0 : 0x40;
1188 static void pcnet_transmit(PCNetState
*s
)
1190 hwaddr xmit_cxda
= 0;
1191 int count
= CSR_XMTRL(s
)-1;
1197 s
->csr
[0] &= ~0x0008;
1204 if (pcnet_tdte_poll(s
)) {
1205 struct pcnet_TMD tmd
;
1207 TMDLOAD(&tmd
, PHYSADDR(s
,CSR_CXDA(s
)));
1209 #ifdef PCNET_DEBUG_TMD
1210 printf(" TMDLOAD 0x%08x\n", PHYSADDR(s
,CSR_CXDA(s
)));
1213 if (GET_FIELD(tmd
.status
, TMDS
, STP
)) {
1215 xmit_cxda
= PHYSADDR(s
,CSR_CXDA(s
));
1216 if (BCR_SWSTYLE(s
) != 1)
1217 add_crc
= GET_FIELD(tmd
.status
, TMDS
, ADDFCS
);
1219 if (s
->lnkst
== 0 &&
1220 (!CSR_LOOP(s
) || (!CSR_INTL(s
) && !BCR_TMAULOOP(s
)))) {
1221 SET_FIELD(&tmd
.misc
, TMDM
, LCAR
, 1);
1222 SET_FIELD(&tmd
.status
, TMDS
, ERR
, 1);
1223 SET_FIELD(&tmd
.status
, TMDS
, OWN
, 0);
1224 s
->csr
[0] |= 0xa000; /* ERR | CERR */
1229 if (s
->xmit_pos
< 0) {
1233 bcnt
= 4096 - GET_FIELD(tmd
.length
, TMDL
, BCNT
);
1235 /* if multi-tmd packet outsizes s->buffer then skip it silently.
1236 Note: this is not what real hw does */
1237 if (s
->xmit_pos
+ bcnt
> sizeof(s
->buffer
)) {
1242 s
->phys_mem_read(s
->dma_opaque
, PHYSADDR(s
, tmd
.tbadr
),
1243 s
->buffer
+ s
->xmit_pos
, bcnt
, CSR_BSWP(s
));
1244 s
->xmit_pos
+= bcnt
;
1246 if (!GET_FIELD(tmd
.status
, TMDS
, ENP
)) {
1251 printf("pcnet_transmit size=%d\n", s
->xmit_pos
);
1254 if (BCR_SWSTYLE(s
) == 1)
1255 add_crc
= !GET_FIELD(tmd
.status
, TMDS
, NOFCS
);
1256 s
->looptest
= add_crc
? PCNET_LOOPTEST_CRC
: PCNET_LOOPTEST_NOCRC
;
1257 pcnet_receive(qemu_get_queue(s
->nic
), s
->buffer
, s
->xmit_pos
);
1261 qemu_send_packet(qemu_get_queue(s
->nic
), s
->buffer
,
1266 s
->csr
[0] &= ~0x0008; /* clear TDMD */
1267 s
->csr
[4] |= 0x0004; /* set TXSTRT */
1271 SET_FIELD(&tmd
.status
, TMDS
, OWN
, 0);
1272 TMDSTORE(&tmd
, PHYSADDR(s
,CSR_CXDA(s
)));
1273 if (!CSR_TOKINTD(s
) || (CSR_LTINTEN(s
) && GET_FIELD(tmd
.status
, TMDS
, LTINT
)))
1274 s
->csr
[0] |= 0x0200; /* set TINT */
1276 if (CSR_XMTRC(s
)<=1)
1277 CSR_XMTRC(s
) = CSR_XMTRL(s
);
1284 if (s
->xmit_pos
>= 0) {
1285 struct pcnet_TMD tmd
;
1286 TMDLOAD(&tmd
, xmit_cxda
);
1287 SET_FIELD(&tmd
.misc
, TMDM
, BUFF
, 1);
1288 SET_FIELD(&tmd
.misc
, TMDM
, UFLO
, 1);
1289 SET_FIELD(&tmd
.status
, TMDS
, ERR
, 1);
1290 SET_FIELD(&tmd
.status
, TMDS
, OWN
, 0);
1291 TMDSTORE(&tmd
, xmit_cxda
);
1292 s
->csr
[0] |= 0x0200; /* set TINT */
1293 if (!CSR_DXSUFLO(s
)) {
1294 s
->csr
[0] &= ~0x0010;
1303 static void pcnet_poll(PCNetState
*s
)
1310 (CSR_TXON(s
) && !CSR_DPOLL(s
) && pcnet_tdte_poll(s
)))
1312 /* prevent recursion */
1320 static void pcnet_poll_timer(void *opaque
)
1322 PCNetState
*s
= opaque
;
1324 timer_del(s
->poll_timer
);
1330 pcnet_update_irq(s
);
1332 if (!CSR_STOP(s
) && !CSR_SPND(s
) && !CSR_DPOLL(s
)) {
1333 uint64_t now
= qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL
) * 33;
1334 if (!s
->timer
|| !now
)
1337 uint64_t t
= now
- s
->timer
+ CSR_POLL(s
);
1340 CSR_POLL(s
) = CSR_PINT(s
);
1344 timer_mod(s
->poll_timer
,
1345 pcnet_get_next_poll_time(s
,qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL
)));
1350 static void pcnet_csr_writew(PCNetState
*s
, uint32_t rap
, uint32_t new_value
)
1352 uint16_t val
= new_value
;
1353 #ifdef PCNET_DEBUG_CSR
1354 printf("pcnet_csr_writew rap=%d val=0x%04x\n", rap
, val
);
1358 s
->csr
[0] &= ~(val
& 0x7f00); /* Clear any interrupt flags */
1360 s
->csr
[0] = (s
->csr
[0] & ~0x0040) | (val
& 0x0048);
1362 val
= (val
& 0x007f) | (s
->csr
[0] & 0x7f00);
1364 /* IFF STOP, STRT and INIT are set, clear STRT and INIT */
1368 if (!CSR_STOP(s
) && (val
& 4))
1371 if (!CSR_INIT(s
) && (val
& 1))
1374 if (!CSR_STRT(s
) && (val
& 2))
1391 case 18: /* CRBAL */
1392 case 19: /* CRBAU */
1393 case 20: /* CXBAL */
1394 case 21: /* CXBAU */
1395 case 22: /* NRBAU */
1396 case 23: /* NRBAU */
1420 case 47: /* POLLINT */
1423 case 76: /* RCVRL */
1424 case 78: /* XMTRL */
1426 if (CSR_STOP(s
) || CSR_SPND(s
))
1432 s
->csr
[4] &= ~(val
& 0x026a);
1433 val
&= ~0x026a; val
|= s
->csr
[4] & 0x026a;
1436 s
->csr
[5] &= ~(val
& 0x0a90);
1437 val
&= ~0x0a90; val
|= s
->csr
[5] & 0x0a90;
1440 pcnet_csr_writew(s
,1,val
);
1443 pcnet_csr_writew(s
,2,val
);
1446 pcnet_bcr_writew(s
,BCR_SWS
,val
);
1454 static uint32_t pcnet_csr_readw(PCNetState
*s
, uint32_t rap
)
1459 pcnet_update_irq(s
);
1461 val
|= (val
& 0x7800) ? 0x8000 : 0;
1464 return pcnet_csr_readw(s
,1);
1466 return pcnet_csr_readw(s
,2);
1468 return pcnet_bcr_readw(s
,BCR_SWS
);
1477 #ifdef PCNET_DEBUG_CSR
1478 printf("pcnet_csr_readw rap=%d val=0x%04x\n", rap
, val
);
1483 static void pcnet_bcr_writew(PCNetState
*s
, uint32_t rap
, uint32_t val
)
1486 #ifdef PCNET_DEBUG_BCR
1487 printf("pcnet_bcr_writew rap=%d val=0x%04x\n", rap
, val
);
1491 if (!(CSR_STOP(s
) || CSR_SPND(s
)))
1494 switch (val
& 0x00ff) {
1506 printf("Bad SWSTYLE=0x%02x\n", val
& 0xff);
1511 printf("BCR_SWS=0x%04x\n", val
);
1530 uint32_t pcnet_bcr_readw(PCNetState
*s
, uint32_t rap
)
1539 val
= s
->bcr
[rap
] & ~0x8000;
1540 val
|= (val
& 0x017f & s
->lnkst
) ? 0x8000 : 0;
1543 val
= rap
< 32 ? s
->bcr
[rap
] : 0;
1546 #ifdef PCNET_DEBUG_BCR
1547 printf("pcnet_bcr_readw rap=%d val=0x%04x\n", rap
, val
);
1552 void pcnet_h_reset(void *opaque
)
1554 PCNetState
*s
= opaque
;
1556 s
->bcr
[BCR_MSRDA
] = 0x0005;
1557 s
->bcr
[BCR_MSWRA
] = 0x0005;
1558 s
->bcr
[BCR_MC
] = 0x0002;
1559 s
->bcr
[BCR_LNKST
] = 0x00c0;
1560 s
->bcr
[BCR_LED1
] = 0x0084;
1561 s
->bcr
[BCR_LED2
] = 0x0088;
1562 s
->bcr
[BCR_LED3
] = 0x0090;
1563 s
->bcr
[BCR_FDC
] = 0x0000;
1564 s
->bcr
[BCR_BSBC
] = 0x9001;
1565 s
->bcr
[BCR_EECAS
] = 0x0002;
1566 s
->bcr
[BCR_SWS
] = 0x0200;
1567 s
->bcr
[BCR_PLAT
] = 0xff06;
1570 pcnet_update_irq(s
);
1571 pcnet_poll_timer(s
);
1574 void pcnet_ioport_writew(void *opaque
, uint32_t addr
, uint32_t val
)
1576 PCNetState
*s
= opaque
;
1577 pcnet_poll_timer(s
);
1578 #ifdef PCNET_DEBUG_IO
1579 printf("pcnet_ioport_writew addr=0x%08x val=0x%04x\n", addr
, val
);
1582 switch (addr
& 0x0f) {
1583 case 0x00: /* RDP */
1584 pcnet_csr_writew(s
, s
->rap
, val
);
1587 s
->rap
= val
& 0x7f;
1590 pcnet_bcr_writew(s
, s
->rap
, val
);
1594 pcnet_update_irq(s
);
1597 uint32_t pcnet_ioport_readw(void *opaque
, uint32_t addr
)
1599 PCNetState
*s
= opaque
;
1601 pcnet_poll_timer(s
);
1603 switch (addr
& 0x0f) {
1604 case 0x00: /* RDP */
1605 val
= pcnet_csr_readw(s
, s
->rap
);
1615 val
= pcnet_bcr_readw(s
, s
->rap
);
1619 pcnet_update_irq(s
);
1620 #ifdef PCNET_DEBUG_IO
1621 printf("pcnet_ioport_readw addr=0x%08x val=0x%04x\n", addr
, val
& 0xffff);
1626 void pcnet_ioport_writel(void *opaque
, uint32_t addr
, uint32_t val
)
1628 PCNetState
*s
= opaque
;
1629 pcnet_poll_timer(s
);
1630 #ifdef PCNET_DEBUG_IO
1631 printf("pcnet_ioport_writel addr=0x%08x val=0x%08x\n", addr
, val
);
1634 switch (addr
& 0x0f) {
1635 case 0x00: /* RDP */
1636 pcnet_csr_writew(s
, s
->rap
, val
& 0xffff);
1639 s
->rap
= val
& 0x7f;
1642 pcnet_bcr_writew(s
, s
->rap
, val
& 0xffff);
1646 if ((addr
& 0x0f) == 0) {
1647 /* switch device to dword i/o mode */
1648 pcnet_bcr_writew(s
, BCR_BSBC
, pcnet_bcr_readw(s
, BCR_BSBC
) | 0x0080);
1649 #ifdef PCNET_DEBUG_IO
1650 printf("device switched into dword i/o mode\n");
1653 pcnet_update_irq(s
);
1656 uint32_t pcnet_ioport_readl(void *opaque
, uint32_t addr
)
1658 PCNetState
*s
= opaque
;
1660 pcnet_poll_timer(s
);
1662 switch (addr
& 0x0f) {
1663 case 0x00: /* RDP */
1664 val
= pcnet_csr_readw(s
, s
->rap
);
1674 val
= pcnet_bcr_readw(s
, s
->rap
);
1678 pcnet_update_irq(s
);
1679 #ifdef PCNET_DEBUG_IO
1680 printf("pcnet_ioport_readl addr=0x%08x val=0x%08x\n", addr
, val
);
1685 static bool is_version_2(void *opaque
, int version_id
)
1687 return version_id
== 2;
1690 const VMStateDescription vmstate_pcnet
= {
1693 .minimum_version_id
= 2,
1694 .fields
= (VMStateField
[]) {
1695 VMSTATE_INT32(rap
, PCNetState
),
1696 VMSTATE_INT32(isr
, PCNetState
),
1697 VMSTATE_INT32(lnkst
, PCNetState
),
1698 VMSTATE_UINT32(rdra
, PCNetState
),
1699 VMSTATE_UINT32(tdra
, PCNetState
),
1700 VMSTATE_BUFFER(prom
, PCNetState
),
1701 VMSTATE_UINT16_ARRAY(csr
, PCNetState
, 128),
1702 VMSTATE_UINT16_ARRAY(bcr
, PCNetState
, 32),
1703 VMSTATE_UINT64(timer
, PCNetState
),
1704 VMSTATE_INT32(xmit_pos
, PCNetState
),
1705 VMSTATE_BUFFER(buffer
, PCNetState
),
1706 VMSTATE_UNUSED_TEST(is_version_2
, 4),
1707 VMSTATE_INT32(tx_busy
, PCNetState
),
1708 VMSTATE_TIMER_PTR(poll_timer
, PCNetState
),
1709 VMSTATE_END_OF_LIST()
1713 void pcnet_common_init(DeviceState
*dev
, PCNetState
*s
, NetClientInfo
*info
)
1718 s
->poll_timer
= timer_new_ns(QEMU_CLOCK_VIRTUAL
, pcnet_poll_timer
, s
);
1720 qemu_macaddr_default_if_unset(&s
->conf
.macaddr
);
1721 s
->nic
= qemu_new_nic(info
, &s
->conf
, object_get_typename(OBJECT(dev
)), dev
->id
, s
);
1722 qemu_format_nic_info_str(qemu_get_queue(s
->nic
), s
->conf
.macaddr
.a
);
1724 /* Initialize the PROM */
1727 Datasheet: http://pdfdata.datasheetsite.com/web/24528/AM79C970A.pdf
1730 memcpy(s
->prom
, s
->conf
.macaddr
.a
, 6);
1731 /* Reserved Location: must be 00h */
1732 s
->prom
[6] = s
->prom
[7] = 0x00;
1733 /* Reserved Location: must be 00h */
1735 /* Hardware ID: must be 11h if compatibility to AMD drivers is desired */
1737 /* User programmable space, init with 0 */
1738 s
->prom
[10] = s
->prom
[11] = 0x00;
1739 /* LSByte of two-byte checksum, which is the sum of bytes 00h-0Bh
1740 and bytes 0Eh and 0Fh, must therefore be initialized with 0! */
1741 s
->prom
[12] = s
->prom
[13] = 0x00;
1742 /* Must be ASCII W (57h) if compatibility to AMD
1743 driver software is desired */
1744 s
->prom
[14] = s
->prom
[15] = 0x57;
1746 for (i
= 0, checksum
= 0; i
< 16; i
++) {
1747 checksum
+= s
->prom
[i
];
1749 *(uint16_t *)&s
->prom
[12] = cpu_to_le16(checksum
);
1751 s
->lnkst
= 0x40; /* initial link state: up */