2 * Arm PrimeCell PL181 MultiMedia Card Interface
4 * Copyright (c) 2007 CodeSourcery.
5 * Written by Paul Brook
7 * This code is licenced under the GPL.
14 //#define DEBUG_PL181 1
17 #define DPRINTF(fmt, ...) \
18 do { printf("pl181: " fmt , ## __VA_ARGS__); } while (0)
20 #define DPRINTF(fmt, ...) do {} while(0)
23 #define PL181_FIFO_LEN 16
42 /* The linux 2.6.21 driver is buggy, and misbehaves if new data arrives
43 while it is reading the FIFO. We hack around this be defering
44 subsequent transfers until after the driver polls the status word.
45 http://www.arm.linux.org.uk/developer/patches/viewpatch.php?id=4446/1
48 uint32_t fifo
[PL181_FIFO_LEN
];
52 #define PL181_CMD_INDEX 0x3f
53 #define PL181_CMD_RESPONSE (1 << 6)
54 #define PL181_CMD_LONGRESP (1 << 7)
55 #define PL181_CMD_INTERRUPT (1 << 8)
56 #define PL181_CMD_PENDING (1 << 9)
57 #define PL181_CMD_ENABLE (1 << 10)
59 #define PL181_DATA_ENABLE (1 << 0)
60 #define PL181_DATA_DIRECTION (1 << 1)
61 #define PL181_DATA_MODE (1 << 2)
62 #define PL181_DATA_DMAENABLE (1 << 3)
64 #define PL181_STATUS_CMDCRCFAIL (1 << 0)
65 #define PL181_STATUS_DATACRCFAIL (1 << 1)
66 #define PL181_STATUS_CMDTIMEOUT (1 << 2)
67 #define PL181_STATUS_DATATIMEOUT (1 << 3)
68 #define PL181_STATUS_TXUNDERRUN (1 << 4)
69 #define PL181_STATUS_RXOVERRUN (1 << 5)
70 #define PL181_STATUS_CMDRESPEND (1 << 6)
71 #define PL181_STATUS_CMDSENT (1 << 7)
72 #define PL181_STATUS_DATAEND (1 << 8)
73 #define PL181_STATUS_DATABLOCKEND (1 << 10)
74 #define PL181_STATUS_CMDACTIVE (1 << 11)
75 #define PL181_STATUS_TXACTIVE (1 << 12)
76 #define PL181_STATUS_RXACTIVE (1 << 13)
77 #define PL181_STATUS_TXFIFOHALFEMPTY (1 << 14)
78 #define PL181_STATUS_RXFIFOHALFFULL (1 << 15)
79 #define PL181_STATUS_TXFIFOFULL (1 << 16)
80 #define PL181_STATUS_RXFIFOFULL (1 << 17)
81 #define PL181_STATUS_TXFIFOEMPTY (1 << 18)
82 #define PL181_STATUS_RXFIFOEMPTY (1 << 19)
83 #define PL181_STATUS_TXDATAAVLBL (1 << 20)
84 #define PL181_STATUS_RXDATAAVLBL (1 << 21)
86 #define PL181_STATUS_TX_FIFO (PL181_STATUS_TXACTIVE \
87 |PL181_STATUS_TXFIFOHALFEMPTY \
88 |PL181_STATUS_TXFIFOFULL \
89 |PL181_STATUS_TXFIFOEMPTY \
90 |PL181_STATUS_TXDATAAVLBL)
91 #define PL181_STATUS_RX_FIFO (PL181_STATUS_RXACTIVE \
92 |PL181_STATUS_RXFIFOHALFFULL \
93 |PL181_STATUS_RXFIFOFULL \
94 |PL181_STATUS_RXFIFOEMPTY \
95 |PL181_STATUS_RXDATAAVLBL)
97 static const unsigned char pl181_id
[] =
98 { 0x81, 0x11, 0x04, 0x00, 0x0d, 0xf0, 0x05, 0xb1 };
100 static void pl181_update(pl181_state
*s
)
103 for (i
= 0; i
< 2; i
++) {
104 qemu_set_irq(s
->irq
[i
], (s
->status
& s
->mask
[i
]) != 0);
108 static void pl181_fifo_push(pl181_state
*s
, uint32_t value
)
112 if (s
->fifo_len
== PL181_FIFO_LEN
) {
113 fprintf(stderr
, "pl181: FIFO overflow\n");
116 n
= (s
->fifo_pos
+ s
->fifo_len
) & (PL181_FIFO_LEN
- 1);
119 DPRINTF("FIFO push %08x\n", (int)value
);
122 static uint32_t pl181_fifo_pop(pl181_state
*s
)
126 if (s
->fifo_len
== 0) {
127 fprintf(stderr
, "pl181: FIFO underflow\n");
130 value
= s
->fifo
[s
->fifo_pos
];
132 s
->fifo_pos
= (s
->fifo_pos
+ 1) & (PL181_FIFO_LEN
- 1);
133 DPRINTF("FIFO pop %08x\n", (int)value
);
137 static void pl181_send_command(pl181_state
*s
)
140 uint8_t response
[16];
143 request
.cmd
= s
->cmd
& PL181_CMD_INDEX
;
144 request
.arg
= s
->cmdarg
;
145 DPRINTF("Command %d %08x\n", request
.cmd
, request
.arg
);
146 rlen
= sd_do_command(s
->card
, &request
, response
);
149 if (s
->cmd
& PL181_CMD_RESPONSE
) {
150 #define RWORD(n) ((response[n] << 24) | (response[n + 1] << 16) \
151 | (response[n + 2] << 8) | response[n + 3])
152 if (rlen
== 0 || (rlen
== 4 && (s
->cmd
& PL181_CMD_LONGRESP
)))
154 if (rlen
!= 4 && rlen
!= 16)
156 s
->response
[0] = RWORD(0);
158 s
->response
[1] = s
->response
[2] = s
->response
[3] = 0;
160 s
->response
[1] = RWORD(4);
161 s
->response
[2] = RWORD(8);
162 s
->response
[3] = RWORD(12) & ~1;
164 DPRINTF("Response received\n");
165 s
->status
|= PL181_STATUS_CMDRESPEND
;
168 DPRINTF("Command sent\n");
169 s
->status
|= PL181_STATUS_CMDSENT
;
174 DPRINTF("Timeout\n");
175 s
->status
|= PL181_STATUS_CMDTIMEOUT
;
178 /* Transfer data between the card and the FIFO. This is complicated by
179 the FIFO holding 32-bit words and the card taking data in single byte
180 chunks. FIFO bytes are transferred in little-endian order. */
182 static void pl181_fifo_run(pl181_state
*s
)
189 is_read
= (s
->datactrl
& PL181_DATA_DIRECTION
) != 0;
190 if (s
->datacnt
!= 0 && (!is_read
|| sd_data_ready(s
->card
))
195 while (s
->datacnt
&& s
->fifo_len
< PL181_FIFO_LEN
) {
196 value
|= (uint32_t)sd_read_data(s
->card
) << (n
* 8);
200 pl181_fifo_push(s
, value
);
206 pl181_fifo_push(s
, value
);
210 while (s
->datacnt
> 0 && (s
->fifo_len
> 0 || n
> 0)) {
212 value
= pl181_fifo_pop(s
);
217 sd_write_data(s
->card
, value
& 0xff);
222 s
->status
&= ~(PL181_STATUS_RX_FIFO
| PL181_STATUS_TX_FIFO
);
223 if (s
->datacnt
== 0) {
224 s
->status
|= PL181_STATUS_DATAEND
;
226 s
->status
|= PL181_STATUS_DATABLOCKEND
;
227 DPRINTF("Transfer Complete\n");
229 if (s
->datacnt
== 0 && s
->fifo_len
== 0) {
230 s
->datactrl
&= ~PL181_DATA_ENABLE
;
231 DPRINTF("Data engine idle\n");
233 /* Update FIFO bits. */
234 bits
= PL181_STATUS_TXACTIVE
| PL181_STATUS_RXACTIVE
;
235 if (s
->fifo_len
== 0) {
236 bits
|= PL181_STATUS_TXFIFOEMPTY
;
237 bits
|= PL181_STATUS_RXFIFOEMPTY
;
239 bits
|= PL181_STATUS_TXDATAAVLBL
;
240 bits
|= PL181_STATUS_RXDATAAVLBL
;
242 if (s
->fifo_len
== 16) {
243 bits
|= PL181_STATUS_TXFIFOFULL
;
244 bits
|= PL181_STATUS_RXFIFOFULL
;
246 if (s
->fifo_len
<= 8) {
247 bits
|= PL181_STATUS_TXFIFOHALFEMPTY
;
249 if (s
->fifo_len
>= 8) {
250 bits
|= PL181_STATUS_RXFIFOHALFFULL
;
252 if (s
->datactrl
& PL181_DATA_DIRECTION
) {
253 bits
&= PL181_STATUS_RX_FIFO
;
255 bits
&= PL181_STATUS_TX_FIFO
;
261 static uint32_t pl181_read(void *opaque
, target_phys_addr_t offset
)
263 pl181_state
*s
= (pl181_state
*)opaque
;
266 if (offset
>= 0xfe0 && offset
< 0x1000) {
267 return pl181_id
[(offset
- 0xfe0) >> 2];
270 case 0x00: /* Power */
272 case 0x04: /* Clock */
274 case 0x08: /* Argument */
276 case 0x0c: /* Command */
278 case 0x10: /* RespCmd */
280 case 0x14: /* Response0 */
281 return s
->response
[0];
282 case 0x18: /* Response1 */
283 return s
->response
[1];
284 case 0x1c: /* Response2 */
285 return s
->response
[2];
286 case 0x20: /* Response3 */
287 return s
->response
[3];
288 case 0x24: /* DataTimer */
290 case 0x28: /* DataLength */
291 return s
->datalength
;
292 case 0x2c: /* DataCtrl */
294 case 0x30: /* DataCnt */
296 case 0x34: /* Status */
304 case 0x3c: /* Mask0 */
306 case 0x40: /* Mask1 */
308 case 0x48: /* FifoCnt */
309 /* The documentation is somewhat vague about exactly what FifoCnt
310 does. On real hardware it appears to be when decrememnted
311 when a word is transfered between the FIFO and the serial
312 data engine. DataCnt is decremented after each byte is
313 transfered between the serial engine and the card.
314 We don't emulate this level of detail, so both can be the same. */
315 tmp
= (s
->datacnt
+ 3) >> 2;
322 case 0x80: case 0x84: case 0x88: case 0x8c: /* FifoData */
323 case 0x90: case 0x94: case 0x98: case 0x9c:
324 case 0xa0: case 0xa4: case 0xa8: case 0xac:
325 case 0xb0: case 0xb4: case 0xb8: case 0xbc:
326 if (s
->fifo_len
== 0) {
327 fprintf(stderr
, "pl181: Unexpected FIFO read\n");
331 value
= pl181_fifo_pop(s
);
338 hw_error("pl181_read: Bad offset %x\n", (int)offset
);
343 static void pl181_write(void *opaque
, target_phys_addr_t offset
,
346 pl181_state
*s
= (pl181_state
*)opaque
;
349 case 0x00: /* Power */
350 s
->power
= value
& 0xff;
352 case 0x04: /* Clock */
353 s
->clock
= value
& 0xff;
355 case 0x08: /* Argument */
358 case 0x0c: /* Command */
360 if (s
->cmd
& PL181_CMD_ENABLE
) {
361 if (s
->cmd
& PL181_CMD_INTERRUPT
) {
362 fprintf(stderr
, "pl181: Interrupt mode not implemented\n");
364 } if (s
->cmd
& PL181_CMD_PENDING
) {
365 fprintf(stderr
, "pl181: Pending commands not implemented\n");
368 pl181_send_command(s
);
371 /* The command has completed one way or the other. */
372 s
->cmd
&= ~PL181_CMD_ENABLE
;
375 case 0x24: /* DataTimer */
376 s
->datatimer
= value
;
378 case 0x28: /* DataLength */
379 s
->datalength
= value
& 0xffff;
381 case 0x2c: /* DataCtrl */
382 s
->datactrl
= value
& 0xff;
383 if (value
& PL181_DATA_ENABLE
) {
384 s
->datacnt
= s
->datalength
;
388 case 0x38: /* Clear */
389 s
->status
&= ~(value
& 0x7ff);
391 case 0x3c: /* Mask0 */
394 case 0x40: /* Mask1 */
397 case 0x80: case 0x84: case 0x88: case 0x8c: /* FifoData */
398 case 0x90: case 0x94: case 0x98: case 0x9c:
399 case 0xa0: case 0xa4: case 0xa8: case 0xac:
400 case 0xb0: case 0xb4: case 0xb8: case 0xbc:
401 if (s
->datacnt
== 0) {
402 fprintf(stderr
, "pl181: Unexpected FIFO write\n");
404 pl181_fifo_push(s
, value
);
409 hw_error("pl181_write: Bad offset %x\n", (int)offset
);
414 static CPUReadMemoryFunc
* const pl181_readfn
[] = {
420 static CPUWriteMemoryFunc
* const pl181_writefn
[] = {
426 static void pl181_reset(void *opaque
)
428 pl181_state
*s
= (pl181_state
*)opaque
;
450 static int pl181_init(SysBusDevice
*dev
)
453 pl181_state
*s
= FROM_SYSBUS(pl181_state
, dev
);
454 BlockDriverState
*bd
;
456 iomemtype
= cpu_register_io_memory(pl181_readfn
,
458 sysbus_init_mmio(dev
, 0x1000, iomemtype
);
459 sysbus_init_irq(dev
, &s
->irq
[0]);
460 sysbus_init_irq(dev
, &s
->irq
[1]);
461 bd
= qdev_init_bdrv(&dev
->qdev
, IF_SD
);
462 s
->card
= sd_init(bd
, 0);
463 qemu_register_reset(pl181_reset
, s
);
465 /* ??? Save/restore. */
469 static void pl181_register_devices(void)
471 sysbus_register_dev("pl181", sizeof(pl181_state
), pl181_init
);
474 device_init(pl181_register_devices
)