2 * Nordic Semiconductor nRF51 non-volatile memory
4 * It provides an interface to erase regions in flash memory.
5 * Furthermore it provides the user and factory information registers.
7 * Reference Manual: http://infocenter.nordicsemi.com/pdf/nRF51_RM_v3.0.pdf
9 * See nRF51 reference manual and product sheet sections:
10 * + Non-Volatile Memory Controller (NVMC)
11 * + Factory Information Configuration Registers (FICR)
12 * + User Information Configuration Registers (UICR)
14 * Copyright 2018 Steffen Görtz <contrib@steffen-goertz.de>
16 * This code is licensed under the GPL version 2 or later. See
17 * the COPYING file in the top-level directory.
20 #include "qemu/osdep.h"
21 #include "qapi/error.h"
23 #include "exec/address-spaces.h"
24 #include "hw/arm/nrf51.h"
25 #include "hw/nvram/nrf51_nvm.h"
28 * FICR Registers Assignments
35 * SIZERAMBLOCK[0] 0x038
36 * SIZERAMBLOCK[1] 0x03C
37 * SIZERAMBLOCK[2] 0x040
38 * SIZERAMBLOCK[3] 0x044
50 * DEVICEADDRTYPE 0x0A0
65 static const uint32_t ficr_content
[64] = {
66 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0x00000400,
67 0x00000100, 0xFFFFFFFF, 0xFFFFFFFF, 0x00000002, 0x00002000,
68 0x00002000, 0x00002000, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF,
69 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF,
70 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0x00000003,
71 0x12345678, 0x9ABCDEF1, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF,
72 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF,
73 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF,
74 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF,
75 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF,
76 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF,
77 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF,
78 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF, 0xFFFFFFFF
81 static uint64_t ficr_read(void *opaque
, hwaddr offset
, unsigned int size
)
83 assert(offset
< sizeof(ficr_content
));
84 return ficr_content
[offset
/ 4];
87 static void ficr_write(void *opaque
, hwaddr offset
, uint64_t value
,
90 /* Intentionally do nothing */
93 static const MemoryRegionOps ficr_ops
= {
96 .impl
.min_access_size
= 4,
97 .impl
.max_access_size
= 4,
98 .endianness
= DEVICE_LITTLE_ENDIAN
102 * UICR Registers Assignments
107 * BOOTLOADERADDR 0x014
169 static uint64_t uicr_read(void *opaque
, hwaddr offset
, unsigned int size
)
171 NRF51NVMState
*s
= NRF51_NVM(opaque
);
173 assert(offset
< sizeof(s
->uicr_content
));
174 return s
->uicr_content
[offset
/ 4];
177 static void uicr_write(void *opaque
, hwaddr offset
, uint64_t value
,
180 NRF51NVMState
*s
= NRF51_NVM(opaque
);
182 assert(offset
< sizeof(s
->uicr_content
));
183 s
->uicr_content
[offset
/ 4] = value
;
186 static const MemoryRegionOps uicr_ops
= {
189 .impl
.min_access_size
= 4,
190 .impl
.max_access_size
= 4,
191 .endianness
= DEVICE_LITTLE_ENDIAN
195 static uint64_t io_read(void *opaque
, hwaddr offset
, unsigned int size
)
197 NRF51NVMState
*s
= NRF51_NVM(opaque
);
201 case NRF51_NVMC_READY
:
202 r
= NRF51_NVMC_READY_READY
;
204 case NRF51_NVMC_CONFIG
:
208 qemu_log_mask(LOG_GUEST_ERROR
,
209 "%s: bad read offset 0x%" HWADDR_PRIx
"\n", __func__
, offset
);
216 static void io_write(void *opaque
, hwaddr offset
, uint64_t value
,
219 NRF51NVMState
*s
= NRF51_NVM(opaque
);
222 case NRF51_NVMC_CONFIG
:
223 s
->config
= value
& NRF51_NVMC_CONFIG_MASK
;
225 case NRF51_NVMC_ERASEPCR0
:
226 case NRF51_NVMC_ERASEPCR1
:
227 if (s
->config
& NRF51_NVMC_CONFIG_EEN
) {
228 /* Mask in-page sub address */
229 value
&= ~(NRF51_PAGE_SIZE
- 1);
230 if (value
<= (s
->flash_size
- NRF51_PAGE_SIZE
)) {
231 memset(s
->storage
+ value
, 0xFF, NRF51_PAGE_SIZE
);
232 memory_region_flush_rom_device(&s
->flash
, value
,
236 qemu_log_mask(LOG_GUEST_ERROR
,
237 "%s: Flash erase at 0x%" HWADDR_PRIx
" while flash not erasable.\n",
241 case NRF51_NVMC_ERASEALL
:
242 if (value
== NRF51_NVMC_ERASE
) {
243 if (s
->config
& NRF51_NVMC_CONFIG_EEN
) {
244 memset(s
->storage
, 0xFF, s
->flash_size
);
245 memory_region_flush_rom_device(&s
->flash
, 0, s
->flash_size
);
246 memset(s
->uicr_content
, 0xFF, sizeof(s
->uicr_content
));
248 qemu_log_mask(LOG_GUEST_ERROR
, "%s: Flash not erasable.\n",
253 case NRF51_NVMC_ERASEUICR
:
254 if (value
== NRF51_NVMC_ERASE
) {
255 memset(s
->uicr_content
, 0xFF, sizeof(s
->uicr_content
));
260 qemu_log_mask(LOG_GUEST_ERROR
,
261 "%s: bad write offset 0x%" HWADDR_PRIx
"\n", __func__
, offset
);
265 static const MemoryRegionOps io_ops
= {
268 .impl
.min_access_size
= 4,
269 .impl
.max_access_size
= 4,
270 .endianness
= DEVICE_LITTLE_ENDIAN
,
274 static void flash_write(void *opaque
, hwaddr offset
, uint64_t value
,
277 NRF51NVMState
*s
= NRF51_NVM(opaque
);
279 if (s
->config
& NRF51_NVMC_CONFIG_WEN
) {
282 assert(offset
+ size
<= s
->flash_size
);
284 /* NOR Flash only allows bits to be flipped from 1's to 0's on write */
285 oldval
= ldl_le_p(s
->storage
+ offset
);
287 stl_le_p(s
->storage
+ offset
, oldval
);
289 memory_region_flush_rom_device(&s
->flash
, offset
, size
);
291 qemu_log_mask(LOG_GUEST_ERROR
,
292 "%s: Flash write 0x%" HWADDR_PRIx
" while flash not writable.\n",
299 static const MemoryRegionOps flash_ops
= {
300 .write
= flash_write
,
301 .valid
.min_access_size
= 4,
302 .valid
.max_access_size
= 4,
303 .endianness
= DEVICE_LITTLE_ENDIAN
,
306 static void nrf51_nvm_init(Object
*obj
)
308 NRF51NVMState
*s
= NRF51_NVM(obj
);
309 SysBusDevice
*sbd
= SYS_BUS_DEVICE(obj
);
311 memory_region_init_io(&s
->mmio
, obj
, &io_ops
, s
, "nrf51_soc.nvmc",
313 sysbus_init_mmio(sbd
, &s
->mmio
);
315 memory_region_init_io(&s
->ficr
, obj
, &ficr_ops
, s
, "nrf51_soc.ficr",
316 sizeof(ficr_content
));
317 sysbus_init_mmio(sbd
, &s
->ficr
);
319 memory_region_init_io(&s
->uicr
, obj
, &uicr_ops
, s
, "nrf51_soc.uicr",
320 sizeof(s
->uicr_content
));
321 sysbus_init_mmio(sbd
, &s
->uicr
);
324 static void nrf51_nvm_realize(DeviceState
*dev
, Error
**errp
)
326 NRF51NVMState
*s
= NRF51_NVM(dev
);
329 memory_region_init_rom_device(&s
->flash
, OBJECT(dev
), &flash_ops
, s
,
330 "nrf51_soc.flash", s
->flash_size
, &err
);
332 error_propagate(errp
, err
);
336 s
->storage
= memory_region_get_ram_ptr(&s
->flash
);
337 sysbus_init_mmio(SYS_BUS_DEVICE(dev
), &s
->flash
);
340 static void nrf51_nvm_reset(DeviceState
*dev
)
342 NRF51NVMState
*s
= NRF51_NVM(dev
);
345 memset(s
->uicr_content
, 0xFF, sizeof(s
->uicr_content
));
348 static Property nrf51_nvm_properties
[] = {
349 DEFINE_PROP_UINT32("flash-size", NRF51NVMState
, flash_size
, 0x40000),
350 DEFINE_PROP_END_OF_LIST(),
353 static const VMStateDescription vmstate_nvm
= {
354 .name
= "nrf51_soc.nvm",
356 .minimum_version_id
= 1,
357 .fields
= (VMStateField
[]) {
358 VMSTATE_UINT32_ARRAY(uicr_content
, NRF51NVMState
,
359 NRF51_UICR_FIXTURE_SIZE
),
360 VMSTATE_UINT32(config
, NRF51NVMState
),
361 VMSTATE_END_OF_LIST()
365 static void nrf51_nvm_class_init(ObjectClass
*klass
, void *data
)
367 DeviceClass
*dc
= DEVICE_CLASS(klass
);
369 dc
->props
= nrf51_nvm_properties
;
370 dc
->vmsd
= &vmstate_nvm
;
371 dc
->realize
= nrf51_nvm_realize
;
372 dc
->reset
= nrf51_nvm_reset
;
375 static const TypeInfo nrf51_nvm_info
= {
376 .name
= TYPE_NRF51_NVM
,
377 .parent
= TYPE_SYS_BUS_DEVICE
,
378 .instance_size
= sizeof(NRF51NVMState
),
379 .instance_init
= nrf51_nvm_init
,
380 .class_init
= nrf51_nvm_class_init
383 static void nrf51_nvm_register_types(void)
385 type_register_static(&nrf51_nvm_info
);
388 type_init(nrf51_nvm_register_types
)