hw/net/opencores_eth.c

   1 /*
   2  * OpenCores Ethernet MAC 10/100 + subset of
   3  * National Semiconductors DP83848C 10/100 PHY
   4  *
   5  * http://opencores.org/svnget,ethmac?file=%2Ftrunk%2F%2Fdoc%2Feth_speci.pdf
   6  * http://cache.national.com/ds/DP/DP83848C.pdf
   7  *
   8  * Copyright (c) 2011, Max Filippov, Open Source and Linux Lab.
   9  * All rights reserved.
  10  *
  11  * Redistribution and use in source and binary forms, with or without
  12  * modification, are permitted provided that the following conditions are met:
  13  *     * Redistributions of source code must retain the above copyright
  14  *       notice, this list of conditions and the following disclaimer.
  15  *     * Redistributions in binary form must reproduce the above copyright
  16  *       notice, this list of conditions and the following disclaimer in the
  17  *       documentation and/or other materials provided with the distribution.
  18  *     * Neither the name of the Open Source and Linux Lab nor the
  19  *       names of its contributors may be used to endorse or promote products
  20  *       derived from this software without specific prior written permission.
  21  *
  22  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
  23  * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  24  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  25  * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
  26  * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
  27  * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  28  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
  29  * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  30  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
  31  * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  32  */
  33
  34 #include "hw/hw.h"
  35 #include "hw/sysbus.h"
  36 #include "net/net.h"
  37 #include "sysemu/sysemu.h"
  38 #include "trace.h"
  39
  40 /* RECSMALL is not used because it breaks tap networking in linux:
  41  * incoming ARP responses are too short
  42  */
  43 #undef USE_RECSMALL
  44
  45 #define GET_FIELD(v, field) (((v) & (field)) >> (field ## _LBN))
  46 #define GET_REGBIT(s, reg, field) ((s)->regs[reg] & (reg ## _ ## field))
  47 #define GET_REGFIELD(s, reg, field) \
  48     GET_FIELD((s)->regs[reg], reg ## _ ## field)
  49
  50 #define SET_FIELD(v, field, data) \
  51     ((v) = (((v) & ~(field)) | (((data) << (field ## _LBN)) & (field))))
  52 #define SET_REGFIELD(s, reg, field, data) \
  53     SET_FIELD((s)->regs[reg], reg ## _ ## field, data)
  54
  55 /* PHY MII registers */
  56 enum {
  57     MII_BMCR,
  58     MII_BMSR,
  59     MII_PHYIDR1,
  60     MII_PHYIDR2,
  61     MII_ANAR,
  62     MII_ANLPAR,
  63     MII_REG_MAX = 16,
  64 };
  65
  66 typedef struct Mii {
  67     uint16_t regs[MII_REG_MAX];
  68     bool link_ok;
  69 } Mii;
  70
  71 static void mii_set_link(Mii *s, bool link_ok)
  72 {
  73     if (link_ok) {
  74         s->regs[MII_BMSR] |= 0x4;
  75         s->regs[MII_ANLPAR] |= 0x01e1;
  76     } else {
  77         s->regs[MII_BMSR] &= ~0x4;
  78         s->regs[MII_ANLPAR] &= 0x01ff;
  79     }
  80     s->link_ok = link_ok;
  81 }
  82
  83 static void mii_reset(Mii *s)
  84 {
  85     memset(s->regs, 0, sizeof(s->regs));
  86     s->regs[MII_BMCR] = 0x1000;
  87     s->regs[MII_BMSR] = 0x7848; /* no ext regs */
  88     s->regs[MII_PHYIDR1] = 0x2000;
  89     s->regs[MII_PHYIDR2] = 0x5c90;
  90     s->regs[MII_ANAR] = 0x01e1;
  91     mii_set_link(s, s->link_ok);
  92 }
  93
  94 static void mii_ro(Mii *s, uint16_t v)
  95 {
  96 }
  97
  98 static void mii_write_bmcr(Mii *s, uint16_t v)
  99 {
 100     if (v & 0x8000) {
 101         mii_reset(s);
 102     } else {
 103         s->regs[MII_BMCR] = v;
 104     }
 105 }
 106
 107 static void mii_write_host(Mii *s, unsigned idx, uint16_t v)
 108 {
 109     static void (*reg_write[MII_REG_MAX])(Mii *s, uint16_t v) = {
 110         [MII_BMCR] = mii_write_bmcr,
 111         [MII_BMSR] = mii_ro,
 112         [MII_PHYIDR1] = mii_ro,
 113         [MII_PHYIDR2] = mii_ro,
 114     };
 115
 116     if (idx < MII_REG_MAX) {
 117         trace_open_eth_mii_write(idx, v);
 118         if (reg_write[idx]) {
 119             reg_write[idx](s, v);
 120         } else {
 121             s->regs[idx] = v;
 122         }
 123     }
 124 }
 125
 126 static uint16_t mii_read_host(Mii *s, unsigned idx)
 127 {
 128     trace_open_eth_mii_read(idx, s->regs[idx]);
 129     return s->regs[idx];
 130 }
 131
 132 /* OpenCores Ethernet registers */
 133 enum {
 134     MODER,
 135     INT_SOURCE,
 136     INT_MASK,
 137     IPGT,
 138     IPGR1,
 139     IPGR2,
 140     PACKETLEN,
 141     COLLCONF,
 142     TX_BD_NUM,
 143     CTRLMODER,
 144     MIIMODER,
 145     MIICOMMAND,
 146     MIIADDRESS,
 147     MIITX_DATA,
 148     MIIRX_DATA,
 149     MIISTATUS,
 150     MAC_ADDR0,
 151     MAC_ADDR1,
 152     HASH0,
 153     HASH1,
 154     TXCTRL,
 155     REG_MAX,
 156 };
 157
 158 enum {
 159     MODER_RECSMALL = 0x10000,
 160     MODER_PAD = 0x8000,
 161     MODER_HUGEN = 0x4000,
 162     MODER_RST = 0x800,
 163     MODER_LOOPBCK = 0x80,
 164     MODER_PRO = 0x20,
 165     MODER_IAM = 0x10,
 166     MODER_BRO = 0x8,
 167     MODER_TXEN = 0x2,
 168     MODER_RXEN = 0x1,
 169 };
 170
 171 enum {
 172     INT_SOURCE_BUSY = 0x10,
 173     INT_SOURCE_RXB = 0x4,
 174     INT_SOURCE_TXB = 0x1,
 175 };
 176
 177 enum {
 178     PACKETLEN_MINFL = 0xffff0000,
 179     PACKETLEN_MINFL_LBN = 16,
 180     PACKETLEN_MAXFL = 0xffff,
 181     PACKETLEN_MAXFL_LBN = 0,
 182 };
 183
 184 enum {
 185     MIICOMMAND_WCTRLDATA = 0x4,
 186     MIICOMMAND_RSTAT = 0x2,
 187     MIICOMMAND_SCANSTAT = 0x1,
 188 };
 189
 190 enum {
 191     MIIADDRESS_RGAD = 0x1f00,
 192     MIIADDRESS_RGAD_LBN = 8,
 193     MIIADDRESS_FIAD = 0x1f,
 194     MIIADDRESS_FIAD_LBN = 0,
 195 };
 196
 197 enum {
 198     MIITX_DATA_CTRLDATA = 0xffff,
 199     MIITX_DATA_CTRLDATA_LBN = 0,
 200 };
 201
 202 enum {
 203     MIIRX_DATA_PRSD = 0xffff,
 204     MIIRX_DATA_PRSD_LBN = 0,
 205 };
 206
 207 enum {
 208     MIISTATUS_LINKFAIL = 0x1,
 209     MIISTATUS_LINKFAIL_LBN = 0,
 210 };
 211
 212 enum {
 213     MAC_ADDR0_BYTE2 = 0xff000000,
 214     MAC_ADDR0_BYTE2_LBN = 24,
 215     MAC_ADDR0_BYTE3 = 0xff0000,
 216     MAC_ADDR0_BYTE3_LBN = 16,
 217     MAC_ADDR0_BYTE4 = 0xff00,
 218     MAC_ADDR0_BYTE4_LBN = 8,
 219     MAC_ADDR0_BYTE5 = 0xff,
 220     MAC_ADDR0_BYTE5_LBN = 0,
 221 };
 222
 223 enum {
 224     MAC_ADDR1_BYTE0 = 0xff00,
 225     MAC_ADDR1_BYTE0_LBN = 8,
 226     MAC_ADDR1_BYTE1 = 0xff,
 227     MAC_ADDR1_BYTE1_LBN = 0,
 228 };
 229
 230 enum {
 231     TXD_LEN = 0xffff0000,
 232     TXD_LEN_LBN = 16,
 233     TXD_RD = 0x8000,
 234     TXD_IRQ = 0x4000,
 235     TXD_WR = 0x2000,
 236     TXD_PAD = 0x1000,
 237     TXD_CRC = 0x800,
 238     TXD_UR = 0x100,
 239     TXD_RTRY = 0xf0,
 240     TXD_RTRY_LBN = 4,
 241     TXD_RL = 0x8,
 242     TXD_LC = 0x4,
 243     TXD_DF = 0x2,
 244     TXD_CS = 0x1,
 245 };
 246
 247 enum {
 248     RXD_LEN = 0xffff0000,
 249     RXD_LEN_LBN = 16,
 250     RXD_E = 0x8000,
 251     RXD_IRQ = 0x4000,
 252     RXD_WRAP = 0x2000,
 253     RXD_CF = 0x100,
 254     RXD_M = 0x80,
 255     RXD_OR = 0x40,
 256     RXD_IS = 0x20,
 257     RXD_DN = 0x10,
 258     RXD_TL = 0x8,
 259     RXD_SF = 0x4,
 260     RXD_CRC = 0x2,
 261     RXD_LC = 0x1,
 262 };
 263
 264 typedef struct desc {
 265     uint32_t len_flags;
 266     uint32_t buf_ptr;
 267 } desc;
 268
 269 #define DEFAULT_PHY 1
 270
 271 #define TYPE_OPEN_ETH "open_eth"
 272 #define OPEN_ETH(obj) OBJECT_CHECK(OpenEthState, (obj), TYPE_OPEN_ETH)
 273
 274 typedef struct OpenEthState {
 275     SysBusDevice parent_obj;
 276
 277     NICState *nic;
 278     NICConf conf;
 279     MemoryRegion reg_io;
 280     MemoryRegion desc_io;
 281     qemu_irq irq;
 282
 283     Mii mii;
 284     uint32_t regs[REG_MAX];
 285     unsigned tx_desc;
 286     unsigned rx_desc;
 287     desc desc[128];
 288 } OpenEthState;
 289
 290 static desc *rx_desc(OpenEthState *s)
 291 {
 292     return s->desc + s->rx_desc;
 293 }
 294
 295 static desc *tx_desc(OpenEthState *s)
 296 {
 297     return s->desc + s->tx_desc;
 298 }
 299
 300 static void open_eth_update_irq(OpenEthState *s,
 301         uint32_t old, uint32_t new)
 302 {
 303     if (!old != !new) {
 304         trace_open_eth_update_irq(new);
 305         qemu_set_irq(s->irq, new);
 306     }
 307 }
 308
 309 static void open_eth_int_source_write(OpenEthState *s,
 310         uint32_t val)
 311 {
 312     uint32_t old_val = s->regs[INT_SOURCE];
 313
 314     s->regs[INT_SOURCE] = val;
 315     open_eth_update_irq(s, old_val & s->regs[INT_MASK],
 316             s->regs[INT_SOURCE] & s->regs[INT_MASK]);
 317 }
 318
 319 static void open_eth_set_link_status(NetClientState *nc)
 320 {
 321     OpenEthState *s = qemu_get_nic_opaque(nc);
 322
 323     if (GET_REGBIT(s, MIICOMMAND, SCANSTAT)) {
 324         SET_REGFIELD(s, MIISTATUS, LINKFAIL, nc->link_down);
 325     }
 326     mii_set_link(&s->mii, !nc->link_down);
 327 }
 328
 329 static void open_eth_reset(void *opaque)
 330 {
 331     OpenEthState *s = opaque;
 332
 333     memset(s->regs, 0, sizeof(s->regs));
 334     s->regs[MODER] = 0xa000;
 335     s->regs[IPGT] = 0x12;
 336     s->regs[IPGR1] = 0xc;
 337     s->regs[IPGR2] = 0x12;
 338     s->regs[PACKETLEN] = 0x400600;
 339     s->regs[COLLCONF] = 0xf003f;
 340     s->regs[TX_BD_NUM] = 0x40;
 341     s->regs[MIIMODER] = 0x64;
 342
 343     s->tx_desc = 0;
 344     s->rx_desc = 0x40;
 345
 346     mii_reset(&s->mii);
 347     open_eth_set_link_status(qemu_get_queue(s->nic));
 348 }
 349
 350 static int open_eth_can_receive(NetClientState *nc)
 351 {
 352     OpenEthState *s = qemu_get_nic_opaque(nc);
 353
 354     return GET_REGBIT(s, MODER, RXEN) &&
 355         (s->regs[TX_BD_NUM] < 0x80);
 356 }
 357
 358 static ssize_t open_eth_receive(NetClientState *nc,
 359         const uint8_t *buf, size_t size)
 360 {
 361     OpenEthState *s = qemu_get_nic_opaque(nc);
 362     size_t maxfl = GET_REGFIELD(s, PACKETLEN, MAXFL);
 363     size_t minfl = GET_REGFIELD(s, PACKETLEN, MINFL);
 364     size_t fcsl = 4;
 365     bool miss = true;
 366
 367     trace_open_eth_receive((unsigned)size);
 368
 369     if (size >= 6) {
 370         static const uint8_t bcast_addr[] = {
 371             0xff, 0xff, 0xff, 0xff, 0xff, 0xff
 372         };
 373         if (memcmp(buf, bcast_addr, sizeof(bcast_addr)) == 0) {
 374             miss = GET_REGBIT(s, MODER, BRO);
 375         } else if ((buf[0] & 0x1) || GET_REGBIT(s, MODER, IAM)) {
 376             unsigned mcast_idx = compute_mcast_idx(buf);
 377             miss = !(s->regs[HASH0 + mcast_idx / 32] &
 378                     (1 << (mcast_idx % 32)));
 379             trace_open_eth_receive_mcast(
 380                     mcast_idx, s->regs[HASH0], s->regs[HASH1]);
 381         } else {
 382             miss = GET_REGFIELD(s, MAC_ADDR1, BYTE0) != buf[0] ||
 383                 GET_REGFIELD(s, MAC_ADDR1, BYTE1) != buf[1] ||
 384                 GET_REGFIELD(s, MAC_ADDR0, BYTE2) != buf[2] ||
 385                 GET_REGFIELD(s, MAC_ADDR0, BYTE3) != buf[3] ||
 386                 GET_REGFIELD(s, MAC_ADDR0, BYTE4) != buf[4] ||
 387                 GET_REGFIELD(s, MAC_ADDR0, BYTE5) != buf[5];
 388         }
 389     }
 390
 391     if (miss && !GET_REGBIT(s, MODER, PRO)) {
 392         trace_open_eth_receive_reject();
 393         return size;
 394     }
 395
 396 #ifdef USE_RECSMALL
 397     if (GET_REGBIT(s, MODER, RECSMALL) || size >= minfl) {
 398 #else
 399     {
 400 #endif
 401         static const uint8_t zero[64] = {0};
 402         desc *desc = rx_desc(s);
 403         size_t copy_size = GET_REGBIT(s, MODER, HUGEN) ? 65536 : maxfl;
 404
 405         if (!(desc->len_flags & RXD_E)) {
 406             open_eth_int_source_write(s,
 407                     s->regs[INT_SOURCE] | INT_SOURCE_BUSY);
 408             return size;
 409         }
 410
 411         desc->len_flags &= ~(RXD_CF | RXD_M | RXD_OR |
 412                 RXD_IS | RXD_DN | RXD_TL | RXD_SF | RXD_CRC | RXD_LC);
 413
 414         if (copy_size > size) {
 415             copy_size = size;
 416         } else {
 417             fcsl = 0;
 418         }
 419         if (miss) {
 420             desc->len_flags |= RXD_M;
 421         }
 422         if (GET_REGBIT(s, MODER, HUGEN) && size > maxfl) {
 423             desc->len_flags |= RXD_TL;
 424         }
 425 #ifdef USE_RECSMALL
 426         if (size < minfl) {
 427             desc->len_flags |= RXD_SF;
 428         }
 429 #endif
 430
 431         cpu_physical_memory_write(desc->buf_ptr, buf, copy_size);
 432
 433         if (GET_REGBIT(s, MODER, PAD) && copy_size < minfl) {
 434             if (minfl - copy_size > fcsl) {
 435                 fcsl = 0;
 436             } else {
 437                 fcsl -= minfl - copy_size;
 438             }
 439             while (copy_size < minfl) {
 440                 size_t zero_sz = minfl - copy_size < sizeof(zero) ?
 441                     minfl - copy_size : sizeof(zero);
 442
 443                 cpu_physical_memory_write(desc->buf_ptr + copy_size,
 444                         zero, zero_sz);
 445                 copy_size += zero_sz;
 446             }
 447         }
 448
 449         /* There's no FCS in the frames handed to us by the QEMU, zero fill it.
 450          * Don't do it if the frame is cut at the MAXFL or padded with 4 or
 451          * more bytes to the MINFL.
 452          */
 453         cpu_physical_memory_write(desc->buf_ptr + copy_size, zero, fcsl);
 454         copy_size += fcsl;
 455
 456         SET_FIELD(desc->len_flags, RXD_LEN, copy_size);
 457
 458         if ((desc->len_flags & RXD_WRAP) || s->rx_desc == 0x7f) {
 459             s->rx_desc = s->regs[TX_BD_NUM];
 460         } else {
 461             ++s->rx_desc;
 462         }
 463         desc->len_flags &= ~RXD_E;
 464
 465         trace_open_eth_receive_desc(desc->buf_ptr, desc->len_flags);
 466
 467         if (desc->len_flags & RXD_IRQ) {
 468             open_eth_int_source_write(s,
 469                     s->regs[INT_SOURCE] | INT_SOURCE_RXB);
 470         }
 471     }
 472     return size;
 473 }
 474
 475 static void open_eth_cleanup(NetClientState *nc)
 476 {
 477 }
 478
 479 static NetClientInfo net_open_eth_info = {
 480     .type = NET_CLIENT_OPTIONS_KIND_NIC,
 481     .size = sizeof(NICState),
 482     .can_receive = open_eth_can_receive,
 483     .receive = open_eth_receive,
 484     .cleanup = open_eth_cleanup,
 485     .link_status_changed = open_eth_set_link_status,
 486 };
 487
 488 static void open_eth_start_xmit(OpenEthState *s, desc *tx)
 489 {
 490     uint8_t buf[65536];
 491     unsigned len = GET_FIELD(tx->len_flags, TXD_LEN);
 492     unsigned tx_len = len;
 493
 494     if ((tx->len_flags & TXD_PAD) &&
 495             tx_len < GET_REGFIELD(s, PACKETLEN, MINFL)) {
 496         tx_len = GET_REGFIELD(s, PACKETLEN, MINFL);
 497     }
 498     if (!GET_REGBIT(s, MODER, HUGEN) &&
 499             tx_len > GET_REGFIELD(s, PACKETLEN, MAXFL)) {
 500         tx_len = GET_REGFIELD(s, PACKETLEN, MAXFL);
 501     }
 502
 503     trace_open_eth_start_xmit(tx->buf_ptr, len, tx_len);
 504
 505     if (len > tx_len) {
 506         len = tx_len;
 507     }
 508     cpu_physical_memory_read(tx->buf_ptr, buf, len);
 509     if (tx_len > len) {
 510         memset(buf + len, 0, tx_len - len);
 511     }
 512     qemu_send_packet(qemu_get_queue(s->nic), buf, tx_len);
 513
 514     if (tx->len_flags & TXD_WR) {
 515         s->tx_desc = 0;
 516     } else {
 517         ++s->tx_desc;
 518         if (s->tx_desc >= s->regs[TX_BD_NUM]) {
 519             s->tx_desc = 0;
 520         }
 521     }
 522     tx->len_flags &= ~(TXD_RD | TXD_UR |
 523             TXD_RTRY | TXD_RL | TXD_LC | TXD_DF | TXD_CS);
 524     if (tx->len_flags & TXD_IRQ) {
 525         open_eth_int_source_write(s, s->regs[INT_SOURCE] | INT_SOURCE_TXB);
 526     }
 527
 528 }
 529
 530 static void open_eth_check_start_xmit(OpenEthState *s)
 531 {
 532     desc *tx = tx_desc(s);
 533     if (GET_REGBIT(s, MODER, TXEN) && s->regs[TX_BD_NUM] > 0 &&
 534             (tx->len_flags & TXD_RD) &&
 535             GET_FIELD(tx->len_flags, TXD_LEN) > 4) {
 536         open_eth_start_xmit(s, tx);
 537     }
 538 }
 539
 540 static uint64_t open_eth_reg_read(void *opaque,
 541         hwaddr addr, unsigned int size)
 542 {
 543     static uint32_t (*reg_read[REG_MAX])(OpenEthState *s) = {
 544     };
 545     OpenEthState *s = opaque;
 546     unsigned idx = addr / 4;
 547     uint64_t v = 0;
 548
 549     if (idx < REG_MAX) {
 550         if (reg_read[idx]) {
 551             v = reg_read[idx](s);
 552         } else {
 553             v = s->regs[idx];
 554         }
 555     }
 556     trace_open_eth_reg_read((uint32_t)addr, (uint32_t)v);
 557     return v;
 558 }
 559
 560 static void open_eth_notify_can_receive(OpenEthState *s)
 561 {
 562     NetClientState *nc = qemu_get_queue(s->nic);
 563
 564     if (open_eth_can_receive(nc)) {
 565         qemu_flush_queued_packets(nc);
 566     }
 567 }
 568
 569 static void open_eth_ro(OpenEthState *s, uint32_t val)
 570 {
 571 }
 572
 573 static void open_eth_moder_host_write(OpenEthState *s, uint32_t val)
 574 {
 575     uint32_t set = val & ~s->regs[MODER];
 576
 577     if (set & MODER_RST) {
 578         open_eth_reset(s);
 579     }
 580
 581     s->regs[MODER] = val;
 582
 583     if (set & MODER_RXEN) {
 584         s->rx_desc = s->regs[TX_BD_NUM];
 585         open_eth_notify_can_receive(s);
 586     }
 587     if (set & MODER_TXEN) {
 588         s->tx_desc = 0;
 589         open_eth_check_start_xmit(s);
 590     }
 591 }
 592
 593 static void open_eth_int_source_host_write(OpenEthState *s, uint32_t val)
 594 {
 595     uint32_t old = s->regs[INT_SOURCE];
 596
 597     s->regs[INT_SOURCE] &= ~val;
 598     open_eth_update_irq(s, old & s->regs[INT_MASK],
 599             s->regs[INT_SOURCE] & s->regs[INT_MASK]);
 600 }
 601
 602 static void open_eth_int_mask_host_write(OpenEthState *s, uint32_t val)
 603 {
 604     uint32_t old = s->regs[INT_MASK];
 605
 606     s->regs[INT_MASK] = val;
 607     open_eth_update_irq(s, s->regs[INT_SOURCE] & old,
 608             s->regs[INT_SOURCE] & s->regs[INT_MASK]);
 609 }
 610
 611 static void open_eth_tx_bd_num_host_write(OpenEthState *s, uint32_t val)
 612 {
 613     if (val < 0x80) {
 614         bool enable = s->regs[TX_BD_NUM] == 0x80;
 615
 616         s->regs[TX_BD_NUM] = val;
 617         if (enable) {
 618             open_eth_notify_can_receive(s);
 619         }
 620     }
 621 }
 622
 623 static void open_eth_mii_command_host_write(OpenEthState *s, uint32_t val)
 624 {
 625     unsigned fiad = GET_REGFIELD(s, MIIADDRESS, FIAD);
 626     unsigned rgad = GET_REGFIELD(s, MIIADDRESS, RGAD);
 627
 628     if (val & MIICOMMAND_WCTRLDATA) {
 629         if (fiad == DEFAULT_PHY) {
 630             mii_write_host(&s->mii, rgad,
 631                     GET_REGFIELD(s, MIITX_DATA, CTRLDATA));
 632         }
 633     }
 634     if (val & MIICOMMAND_RSTAT) {
 635         if (fiad == DEFAULT_PHY) {
 636             SET_REGFIELD(s, MIIRX_DATA, PRSD,
 637                     mii_read_host(&s->mii, rgad));
 638         } else {
 639             s->regs[MIIRX_DATA] = 0xffff;
 640         }
 641         SET_REGFIELD(s, MIISTATUS, LINKFAIL, qemu_get_queue(s->nic)->link_down);
 642     }
 643 }
 644
 645 static void open_eth_mii_tx_host_write(OpenEthState *s, uint32_t val)
 646 {
 647     SET_REGFIELD(s, MIITX_DATA, CTRLDATA, val);
 648     if (GET_REGFIELD(s, MIIADDRESS, FIAD) == DEFAULT_PHY) {
 649         mii_write_host(&s->mii, GET_REGFIELD(s, MIIADDRESS, RGAD),
 650                 GET_REGFIELD(s, MIITX_DATA, CTRLDATA));
 651     }
 652 }
 653
 654 static void open_eth_reg_write(void *opaque,
 655         hwaddr addr, uint64_t val, unsigned int size)
 656 {
 657     static void (*reg_write[REG_MAX])(OpenEthState *s, uint32_t val) = {
 658         [MODER] = open_eth_moder_host_write,
 659         [INT_SOURCE] = open_eth_int_source_host_write,
 660         [INT_MASK] = open_eth_int_mask_host_write,
 661         [TX_BD_NUM] = open_eth_tx_bd_num_host_write,
 662         [MIICOMMAND] = open_eth_mii_command_host_write,
 663         [MIITX_DATA] = open_eth_mii_tx_host_write,
 664         [MIISTATUS] = open_eth_ro,
 665     };
 666     OpenEthState *s = opaque;
 667     unsigned idx = addr / 4;
 668
 669     if (idx < REG_MAX) {
 670         trace_open_eth_reg_write((uint32_t)addr, (uint32_t)val);
 671         if (reg_write[idx]) {
 672             reg_write[idx](s, val);
 673         } else {
 674             s->regs[idx] = val;
 675         }
 676     }
 677 }
 678
 679 static uint64_t open_eth_desc_read(void *opaque,
 680         hwaddr addr, unsigned int size)
 681 {
 682     OpenEthState *s = opaque;
 683     uint64_t v = 0;
 684
 685     addr &= 0x3ff;
 686     memcpy(&v, (uint8_t *)s->desc + addr, size);
 687     trace_open_eth_desc_read((uint32_t)addr, (uint32_t)v);
 688     return v;
 689 }
 690
 691 static void open_eth_desc_write(void *opaque,
 692         hwaddr addr, uint64_t val, unsigned int size)
 693 {
 694     OpenEthState *s = opaque;
 695
 696     addr &= 0x3ff;
 697     trace_open_eth_desc_write((uint32_t)addr, (uint32_t)val);
 698     memcpy((uint8_t *)s->desc + addr, &val, size);
 699     open_eth_check_start_xmit(s);
 700 }
 701
 702
 703 static const MemoryRegionOps open_eth_reg_ops = {
 704     .read = open_eth_reg_read,
 705     .write = open_eth_reg_write,
 706 };
 707
 708 static const MemoryRegionOps open_eth_desc_ops = {
 709     .read = open_eth_desc_read,
 710     .write = open_eth_desc_write,
 711 };
 712
 713 static int sysbus_open_eth_init(SysBusDevice *sbd)
 714 {
 715     DeviceState *dev = DEVICE(sbd);
 716     OpenEthState *s = OPEN_ETH(dev);
 717
 718     memory_region_init_io(&s->reg_io, OBJECT(dev), &open_eth_reg_ops, s,
 719             "open_eth.regs", 0x54);
 720     sysbus_init_mmio(sbd, &s->reg_io);
 721
 722     memory_region_init_io(&s->desc_io, OBJECT(dev), &open_eth_desc_ops, s,
 723             "open_eth.desc", 0x400);
 724     sysbus_init_mmio(sbd, &s->desc_io);
 725
 726     sysbus_init_irq(sbd, &s->irq);
 727
 728     s->nic = qemu_new_nic(&net_open_eth_info, &s->conf,
 729                           object_get_typename(OBJECT(s)), dev->id, s);
 730     return 0;
 731 }
 732
 733 static void qdev_open_eth_reset(DeviceState *dev)
 734 {
 735     OpenEthState *d = OPEN_ETH(dev);
 736
 737     open_eth_reset(d);
 738 }
 739
 740 static Property open_eth_properties[] = {
 741     DEFINE_NIC_PROPERTIES(OpenEthState, conf),
 742     DEFINE_PROP_END_OF_LIST(),
 743 };
 744
 745 static void open_eth_class_init(ObjectClass *klass, void *data)
 746 {
 747     DeviceClass *dc = DEVICE_CLASS(klass);
 748     SysBusDeviceClass *k = SYS_BUS_DEVICE_CLASS(klass);
 749
 750     k->init = sysbus_open_eth_init;
 751     set_bit(DEVICE_CATEGORY_NETWORK, dc->categories);
 752     dc->desc = "Opencores 10/100 Mbit Ethernet";
 753     dc->reset = qdev_open_eth_reset;
 754     dc->props = open_eth_properties;
 755 }
 756
 757 static const TypeInfo open_eth_info = {
 758     .name          = TYPE_OPEN_ETH,
 759     .parent        = TYPE_SYS_BUS_DEVICE,
 760     .instance_size = sizeof(OpenEthState),
 761     .class_init    = open_eth_class_init,
 762 };
 763
 764 static void open_eth_register_types(void)
 765 {
 766     type_register_static(&open_eth_info);
 767 }
 768
 769 type_init(open_eth_register_types)