target/arm: NS BusFault on vector table fetch escalates to NS HardFault
[qemu/ar7.git] / hw / char / bcm2835_aux.c
blob94679d276cbc00e231e4081391c6af6f17f72757
1 /*
2 * BCM2835 (Raspberry Pi / Pi 2) Aux block (mini UART and SPI).
3 * Copyright (c) 2015, Microsoft
4 * Written by Andrew Baumann
5 * Based on pl011.c, copyright terms below:
7 * Arm PrimeCell PL011 UART
9 * Copyright (c) 2006 CodeSourcery.
10 * Written by Paul Brook
12 * This code is licensed under the GPL.
14 * At present only the core UART functions (data path for tx/rx) are
15 * implemented. The following features/registers are unimplemented:
16 * - Line/modem control
17 * - Scratch register
18 * - Extra control
19 * - Baudrate
20 * - SPI interfaces
23 #include "qemu/osdep.h"
24 #include "hw/char/bcm2835_aux.h"
25 #include "qemu/log.h"
26 #include "qemu/module.h"
28 #define AUX_IRQ 0x0
29 #define AUX_ENABLES 0x4
30 #define AUX_MU_IO_REG 0x40
31 #define AUX_MU_IER_REG 0x44
32 #define AUX_MU_IIR_REG 0x48
33 #define AUX_MU_LCR_REG 0x4c
34 #define AUX_MU_MCR_REG 0x50
35 #define AUX_MU_LSR_REG 0x54
36 #define AUX_MU_MSR_REG 0x58
37 #define AUX_MU_SCRATCH 0x5c
38 #define AUX_MU_CNTL_REG 0x60
39 #define AUX_MU_STAT_REG 0x64
40 #define AUX_MU_BAUD_REG 0x68
42 /* bits in IER/IIR registers */
43 #define RX_INT 0x1
44 #define TX_INT 0x2
46 static void bcm2835_aux_update(BCM2835AuxState *s)
48 /* signal an interrupt if either:
49 * 1. rx interrupt is enabled and we have a non-empty rx fifo, or
50 * 2. the tx interrupt is enabled (since we instantly drain the tx fifo)
52 s->iir = 0;
53 if ((s->ier & RX_INT) && s->read_count != 0) {
54 s->iir |= RX_INT;
56 if (s->ier & TX_INT) {
57 s->iir |= TX_INT;
59 qemu_set_irq(s->irq, s->iir != 0);
62 static uint64_t bcm2835_aux_read(void *opaque, hwaddr offset, unsigned size)
64 BCM2835AuxState *s = opaque;
65 uint32_t c, res;
67 switch (offset) {
68 case AUX_IRQ:
69 return s->iir != 0;
71 case AUX_ENABLES:
72 return 1; /* mini UART permanently enabled */
74 case AUX_MU_IO_REG:
75 /* "DLAB bit set means access baudrate register" is NYI */
76 c = s->read_fifo[s->read_pos];
77 if (s->read_count > 0) {
78 s->read_count--;
79 if (++s->read_pos == BCM2835_AUX_RX_FIFO_LEN) {
80 s->read_pos = 0;
83 qemu_chr_fe_accept_input(&s->chr);
84 bcm2835_aux_update(s);
85 return c;
87 case AUX_MU_IER_REG:
88 /* "DLAB bit set means access baudrate register" is NYI */
89 return 0xc0 | s->ier; /* FIFO enables always read 1 */
91 case AUX_MU_IIR_REG:
92 res = 0xc0; /* FIFO enables */
93 /* The spec is unclear on what happens when both tx and rx
94 * interrupts are active, besides that this cannot occur. At
95 * present, we choose to prioritise the rx interrupt, since
96 * the tx fifo is always empty. */
97 if (s->read_count != 0) {
98 res |= 0x4;
99 } else {
100 res |= 0x2;
102 if (s->iir == 0) {
103 res |= 0x1;
105 return res;
107 case AUX_MU_LCR_REG:
108 qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_LCR_REG unsupported\n", __func__);
109 return 0;
111 case AUX_MU_MCR_REG:
112 qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_MCR_REG unsupported\n", __func__);
113 return 0;
115 case AUX_MU_LSR_REG:
116 res = 0x60; /* tx idle, empty */
117 if (s->read_count != 0) {
118 res |= 0x1;
120 return res;
122 case AUX_MU_MSR_REG:
123 qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_MSR_REG unsupported\n", __func__);
124 return 0;
126 case AUX_MU_SCRATCH:
127 qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_SCRATCH unsupported\n", __func__);
128 return 0;
130 case AUX_MU_CNTL_REG:
131 return 0x3; /* tx, rx enabled */
133 case AUX_MU_STAT_REG:
134 res = 0x30e; /* space in the output buffer, empty tx fifo, idle tx/rx */
135 if (s->read_count > 0) {
136 res |= 0x1; /* data in input buffer */
137 assert(s->read_count < BCM2835_AUX_RX_FIFO_LEN);
138 res |= ((uint32_t)s->read_count) << 16; /* rx fifo fill level */
140 return res;
142 case AUX_MU_BAUD_REG:
143 qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_BAUD_REG unsupported\n", __func__);
144 return 0;
146 default:
147 qemu_log_mask(LOG_GUEST_ERROR, "%s: Bad offset %"HWADDR_PRIx"\n",
148 __func__, offset);
149 return 0;
153 static void bcm2835_aux_write(void *opaque, hwaddr offset, uint64_t value,
154 unsigned size)
156 BCM2835AuxState *s = opaque;
157 unsigned char ch;
159 switch (offset) {
160 case AUX_ENABLES:
161 if (value != 1) {
162 qemu_log_mask(LOG_UNIMP, "%s: unsupported attempt to enable SPI "
163 "or disable UART\n", __func__);
165 break;
167 case AUX_MU_IO_REG:
168 /* "DLAB bit set means access baudrate register" is NYI */
169 ch = value;
170 /* XXX this blocks entire thread. Rewrite to use
171 * qemu_chr_fe_write and background I/O callbacks */
172 qemu_chr_fe_write_all(&s->chr, &ch, 1);
173 break;
175 case AUX_MU_IER_REG:
176 /* "DLAB bit set means access baudrate register" is NYI */
177 s->ier = value & (TX_INT | RX_INT);
178 bcm2835_aux_update(s);
179 break;
181 case AUX_MU_IIR_REG:
182 if (value & 0x2) {
183 s->read_count = 0;
185 break;
187 case AUX_MU_LCR_REG:
188 qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_LCR_REG unsupported\n", __func__);
189 break;
191 case AUX_MU_MCR_REG:
192 qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_MCR_REG unsupported\n", __func__);
193 break;
195 case AUX_MU_SCRATCH:
196 qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_SCRATCH unsupported\n", __func__);
197 break;
199 case AUX_MU_CNTL_REG:
200 qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_CNTL_REG unsupported\n", __func__);
201 break;
203 case AUX_MU_BAUD_REG:
204 qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_BAUD_REG unsupported\n", __func__);
205 break;
207 default:
208 qemu_log_mask(LOG_GUEST_ERROR, "%s: Bad offset %"HWADDR_PRIx"\n",
209 __func__, offset);
212 bcm2835_aux_update(s);
215 static int bcm2835_aux_can_receive(void *opaque)
217 BCM2835AuxState *s = opaque;
219 return s->read_count < BCM2835_AUX_RX_FIFO_LEN;
222 static void bcm2835_aux_put_fifo(void *opaque, uint8_t value)
224 BCM2835AuxState *s = opaque;
225 int slot;
227 slot = s->read_pos + s->read_count;
228 if (slot >= BCM2835_AUX_RX_FIFO_LEN) {
229 slot -= BCM2835_AUX_RX_FIFO_LEN;
231 s->read_fifo[slot] = value;
232 s->read_count++;
233 if (s->read_count == BCM2835_AUX_RX_FIFO_LEN) {
234 /* buffer full */
236 bcm2835_aux_update(s);
239 static void bcm2835_aux_receive(void *opaque, const uint8_t *buf, int size)
241 bcm2835_aux_put_fifo(opaque, *buf);
244 static const MemoryRegionOps bcm2835_aux_ops = {
245 .read = bcm2835_aux_read,
246 .write = bcm2835_aux_write,
247 .endianness = DEVICE_NATIVE_ENDIAN,
248 .valid.min_access_size = 4,
249 .valid.max_access_size = 4,
252 static const VMStateDescription vmstate_bcm2835_aux = {
253 .name = TYPE_BCM2835_AUX,
254 .version_id = 1,
255 .minimum_version_id = 1,
256 .fields = (VMStateField[]) {
257 VMSTATE_UINT8_ARRAY(read_fifo, BCM2835AuxState,
258 BCM2835_AUX_RX_FIFO_LEN),
259 VMSTATE_UINT8(read_pos, BCM2835AuxState),
260 VMSTATE_UINT8(read_count, BCM2835AuxState),
261 VMSTATE_UINT8(ier, BCM2835AuxState),
262 VMSTATE_UINT8(iir, BCM2835AuxState),
263 VMSTATE_END_OF_LIST()
267 static void bcm2835_aux_init(Object *obj)
269 SysBusDevice *sbd = SYS_BUS_DEVICE(obj);
270 BCM2835AuxState *s = BCM2835_AUX(obj);
272 memory_region_init_io(&s->iomem, OBJECT(s), &bcm2835_aux_ops, s,
273 TYPE_BCM2835_AUX, 0x100);
274 sysbus_init_mmio(sbd, &s->iomem);
275 sysbus_init_irq(sbd, &s->irq);
278 static void bcm2835_aux_realize(DeviceState *dev, Error **errp)
280 BCM2835AuxState *s = BCM2835_AUX(dev);
282 qemu_chr_fe_set_handlers(&s->chr, bcm2835_aux_can_receive,
283 bcm2835_aux_receive, NULL, NULL, s, NULL, true);
286 static Property bcm2835_aux_props[] = {
287 DEFINE_PROP_CHR("chardev", BCM2835AuxState, chr),
288 DEFINE_PROP_END_OF_LIST(),
291 static void bcm2835_aux_class_init(ObjectClass *oc, void *data)
293 DeviceClass *dc = DEVICE_CLASS(oc);
295 dc->realize = bcm2835_aux_realize;
296 dc->vmsd = &vmstate_bcm2835_aux;
297 set_bit(DEVICE_CATEGORY_INPUT, dc->categories);
298 dc->props = bcm2835_aux_props;
301 static const TypeInfo bcm2835_aux_info = {
302 .name = TYPE_BCM2835_AUX,
303 .parent = TYPE_SYS_BUS_DEVICE,
304 .instance_size = sizeof(BCM2835AuxState),
305 .instance_init = bcm2835_aux_init,
306 .class_init = bcm2835_aux_class_init,
309 static void bcm2835_aux_register_types(void)
311 type_register_static(&bcm2835_aux_info);
314 type_init(bcm2835_aux_register_types)