2 * Marvell MV88W8618 / Freecom MusicPal emulation.
4 * Copyright (c) 2008 Jan Kiszka
6 * This code is licensed under the GNU GPL v2.
8 * Contributions after 2012-01-13 are licensed under the terms of the
9 * GNU GPL, version 2 or (at your option) any later version.
12 #include "hw/sysbus.h"
13 #include "hw/arm/arm.h"
14 #include "hw/devices.h"
16 #include "sysemu/sysemu.h"
17 #include "hw/boards.h"
18 #include "hw/char/serial.h"
19 #include "qemu/timer.h"
20 #include "hw/ptimer.h"
21 #include "block/block.h"
22 #include "hw/block/flash.h"
23 #include "ui/console.h"
24 #include "hw/i2c/i2c.h"
25 #include "sysemu/blockdev.h"
26 #include "exec/address-spaces.h"
27 #include "ui/pixel_ops.h"
29 #define MP_MISC_BASE 0x80002000
30 #define MP_MISC_SIZE 0x00001000
32 #define MP_ETH_BASE 0x80008000
33 #define MP_ETH_SIZE 0x00001000
35 #define MP_WLAN_BASE 0x8000C000
36 #define MP_WLAN_SIZE 0x00000800
38 #define MP_UART1_BASE 0x8000C840
39 #define MP_UART2_BASE 0x8000C940
41 #define MP_GPIO_BASE 0x8000D000
42 #define MP_GPIO_SIZE 0x00001000
44 #define MP_FLASHCFG_BASE 0x90006000
45 #define MP_FLASHCFG_SIZE 0x00001000
47 #define MP_AUDIO_BASE 0x90007000
49 #define MP_PIC_BASE 0x90008000
50 #define MP_PIC_SIZE 0x00001000
52 #define MP_PIT_BASE 0x90009000
53 #define MP_PIT_SIZE 0x00001000
55 #define MP_LCD_BASE 0x9000c000
56 #define MP_LCD_SIZE 0x00001000
58 #define MP_SRAM_BASE 0xC0000000
59 #define MP_SRAM_SIZE 0x00020000
61 #define MP_RAM_DEFAULT_SIZE 32*1024*1024
62 #define MP_FLASH_SIZE_MAX 32*1024*1024
64 #define MP_TIMER1_IRQ 4
65 #define MP_TIMER2_IRQ 5
66 #define MP_TIMER3_IRQ 6
67 #define MP_TIMER4_IRQ 7
70 #define MP_UART1_IRQ 11
71 #define MP_UART2_IRQ 11
72 #define MP_GPIO_IRQ 12
74 #define MP_AUDIO_IRQ 30
76 /* Wolfson 8750 I2C address */
77 #define MP_WM_ADDR 0x1A
79 /* Ethernet register offsets */
80 #define MP_ETH_SMIR 0x010
81 #define MP_ETH_PCXR 0x408
82 #define MP_ETH_SDCMR 0x448
83 #define MP_ETH_ICR 0x450
84 #define MP_ETH_IMR 0x458
85 #define MP_ETH_FRDP0 0x480
86 #define MP_ETH_FRDP1 0x484
87 #define MP_ETH_FRDP2 0x488
88 #define MP_ETH_FRDP3 0x48C
89 #define MP_ETH_CRDP0 0x4A0
90 #define MP_ETH_CRDP1 0x4A4
91 #define MP_ETH_CRDP2 0x4A8
92 #define MP_ETH_CRDP3 0x4AC
93 #define MP_ETH_CTDP0 0x4E0
94 #define MP_ETH_CTDP1 0x4E4
97 #define MP_ETH_SMIR_DATA 0x0000FFFF
98 #define MP_ETH_SMIR_ADDR 0x03FF0000
99 #define MP_ETH_SMIR_OPCODE (1 << 26) /* Read value */
100 #define MP_ETH_SMIR_RDVALID (1 << 27)
103 #define MP_ETH_PHY1_BMSR 0x00210000
104 #define MP_ETH_PHY1_PHYSID1 0x00410000
105 #define MP_ETH_PHY1_PHYSID2 0x00610000
107 #define MP_PHY_BMSR_LINK 0x0004
108 #define MP_PHY_BMSR_AUTONEG 0x0008
110 #define MP_PHY_88E3015 0x01410E20
112 /* TX descriptor status */
113 #define MP_ETH_TX_OWN (1U << 31)
115 /* RX descriptor status */
116 #define MP_ETH_RX_OWN (1U << 31)
118 /* Interrupt cause/mask bits */
119 #define MP_ETH_IRQ_RX_BIT 0
120 #define MP_ETH_IRQ_RX (1 << MP_ETH_IRQ_RX_BIT)
121 #define MP_ETH_IRQ_TXHI_BIT 2
122 #define MP_ETH_IRQ_TXLO_BIT 3
124 /* Port config bits */
125 #define MP_ETH_PCXR_2BSM_BIT 28 /* 2-byte incoming suffix */
127 /* SDMA command bits */
128 #define MP_ETH_CMD_TXHI (1 << 23)
129 #define MP_ETH_CMD_TXLO (1 << 22)
131 typedef struct mv88w8618_tx_desc
{
139 typedef struct mv88w8618_rx_desc
{
142 uint16_t buffer_size
;
147 #define TYPE_MV88W8618_ETH "mv88w8618_eth"
148 #define MV88W8618_ETH(obj) \
149 OBJECT_CHECK(mv88w8618_eth_state, (obj), TYPE_MV88W8618_ETH)
151 typedef struct mv88w8618_eth_state
{
153 SysBusDevice parent_obj
;
162 uint32_t vlan_header
;
163 uint32_t tx_queue
[2];
164 uint32_t rx_queue
[4];
165 uint32_t frx_queue
[4];
169 } mv88w8618_eth_state
;
171 static void eth_rx_desc_put(uint32_t addr
, mv88w8618_rx_desc
*desc
)
173 cpu_to_le32s(&desc
->cmdstat
);
174 cpu_to_le16s(&desc
->bytes
);
175 cpu_to_le16s(&desc
->buffer_size
);
176 cpu_to_le32s(&desc
->buffer
);
177 cpu_to_le32s(&desc
->next
);
178 cpu_physical_memory_write(addr
, desc
, sizeof(*desc
));
181 static void eth_rx_desc_get(uint32_t addr
, mv88w8618_rx_desc
*desc
)
183 cpu_physical_memory_read(addr
, desc
, sizeof(*desc
));
184 le32_to_cpus(&desc
->cmdstat
);
185 le16_to_cpus(&desc
->bytes
);
186 le16_to_cpus(&desc
->buffer_size
);
187 le32_to_cpus(&desc
->buffer
);
188 le32_to_cpus(&desc
->next
);
191 static int eth_can_receive(NetClientState
*nc
)
196 static ssize_t
eth_receive(NetClientState
*nc
, const uint8_t *buf
, size_t size
)
198 mv88w8618_eth_state
*s
= qemu_get_nic_opaque(nc
);
200 mv88w8618_rx_desc desc
;
203 for (i
= 0; i
< 4; i
++) {
204 desc_addr
= s
->cur_rx
[i
];
209 eth_rx_desc_get(desc_addr
, &desc
);
210 if ((desc
.cmdstat
& MP_ETH_RX_OWN
) && desc
.buffer_size
>= size
) {
211 cpu_physical_memory_write(desc
.buffer
+ s
->vlan_header
,
213 desc
.bytes
= size
+ s
->vlan_header
;
214 desc
.cmdstat
&= ~MP_ETH_RX_OWN
;
215 s
->cur_rx
[i
] = desc
.next
;
217 s
->icr
|= MP_ETH_IRQ_RX
;
218 if (s
->icr
& s
->imr
) {
219 qemu_irq_raise(s
->irq
);
221 eth_rx_desc_put(desc_addr
, &desc
);
224 desc_addr
= desc
.next
;
225 } while (desc_addr
!= s
->rx_queue
[i
]);
230 static void eth_tx_desc_put(uint32_t addr
, mv88w8618_tx_desc
*desc
)
232 cpu_to_le32s(&desc
->cmdstat
);
233 cpu_to_le16s(&desc
->res
);
234 cpu_to_le16s(&desc
->bytes
);
235 cpu_to_le32s(&desc
->buffer
);
236 cpu_to_le32s(&desc
->next
);
237 cpu_physical_memory_write(addr
, desc
, sizeof(*desc
));
240 static void eth_tx_desc_get(uint32_t addr
, mv88w8618_tx_desc
*desc
)
242 cpu_physical_memory_read(addr
, desc
, sizeof(*desc
));
243 le32_to_cpus(&desc
->cmdstat
);
244 le16_to_cpus(&desc
->res
);
245 le16_to_cpus(&desc
->bytes
);
246 le32_to_cpus(&desc
->buffer
);
247 le32_to_cpus(&desc
->next
);
250 static void eth_send(mv88w8618_eth_state
*s
, int queue_index
)
252 uint32_t desc_addr
= s
->tx_queue
[queue_index
];
253 mv88w8618_tx_desc desc
;
259 eth_tx_desc_get(desc_addr
, &desc
);
260 next_desc
= desc
.next
;
261 if (desc
.cmdstat
& MP_ETH_TX_OWN
) {
264 cpu_physical_memory_read(desc
.buffer
, buf
, len
);
265 qemu_send_packet(qemu_get_queue(s
->nic
), buf
, len
);
267 desc
.cmdstat
&= ~MP_ETH_TX_OWN
;
268 s
->icr
|= 1 << (MP_ETH_IRQ_TXLO_BIT
- queue_index
);
269 eth_tx_desc_put(desc_addr
, &desc
);
271 desc_addr
= next_desc
;
272 } while (desc_addr
!= s
->tx_queue
[queue_index
]);
275 static uint64_t mv88w8618_eth_read(void *opaque
, hwaddr offset
,
278 mv88w8618_eth_state
*s
= opaque
;
282 if (s
->smir
& MP_ETH_SMIR_OPCODE
) {
283 switch (s
->smir
& MP_ETH_SMIR_ADDR
) {
284 case MP_ETH_PHY1_BMSR
:
285 return MP_PHY_BMSR_LINK
| MP_PHY_BMSR_AUTONEG
|
287 case MP_ETH_PHY1_PHYSID1
:
288 return (MP_PHY_88E3015
>> 16) | MP_ETH_SMIR_RDVALID
;
289 case MP_ETH_PHY1_PHYSID2
:
290 return (MP_PHY_88E3015
& 0xFFFF) | MP_ETH_SMIR_RDVALID
;
292 return MP_ETH_SMIR_RDVALID
;
303 case MP_ETH_FRDP0
... MP_ETH_FRDP3
:
304 return s
->frx_queue
[(offset
- MP_ETH_FRDP0
)/4];
306 case MP_ETH_CRDP0
... MP_ETH_CRDP3
:
307 return s
->rx_queue
[(offset
- MP_ETH_CRDP0
)/4];
309 case MP_ETH_CTDP0
... MP_ETH_CTDP1
:
310 return s
->tx_queue
[(offset
- MP_ETH_CTDP0
)/4];
317 static void mv88w8618_eth_write(void *opaque
, hwaddr offset
,
318 uint64_t value
, unsigned size
)
320 mv88w8618_eth_state
*s
= opaque
;
328 s
->vlan_header
= ((value
>> MP_ETH_PCXR_2BSM_BIT
) & 1) * 2;
332 if (value
& MP_ETH_CMD_TXHI
) {
335 if (value
& MP_ETH_CMD_TXLO
) {
338 if (value
& (MP_ETH_CMD_TXHI
| MP_ETH_CMD_TXLO
) && s
->icr
& s
->imr
) {
339 qemu_irq_raise(s
->irq
);
349 if (s
->icr
& s
->imr
) {
350 qemu_irq_raise(s
->irq
);
354 case MP_ETH_FRDP0
... MP_ETH_FRDP3
:
355 s
->frx_queue
[(offset
- MP_ETH_FRDP0
)/4] = value
;
358 case MP_ETH_CRDP0
... MP_ETH_CRDP3
:
359 s
->rx_queue
[(offset
- MP_ETH_CRDP0
)/4] =
360 s
->cur_rx
[(offset
- MP_ETH_CRDP0
)/4] = value
;
363 case MP_ETH_CTDP0
... MP_ETH_CTDP1
:
364 s
->tx_queue
[(offset
- MP_ETH_CTDP0
)/4] = value
;
369 static const MemoryRegionOps mv88w8618_eth_ops
= {
370 .read
= mv88w8618_eth_read
,
371 .write
= mv88w8618_eth_write
,
372 .endianness
= DEVICE_NATIVE_ENDIAN
,
375 static void eth_cleanup(NetClientState
*nc
)
377 mv88w8618_eth_state
*s
= qemu_get_nic_opaque(nc
);
382 static NetClientInfo net_mv88w8618_info
= {
383 .type
= NET_CLIENT_OPTIONS_KIND_NIC
,
384 .size
= sizeof(NICState
),
385 .can_receive
= eth_can_receive
,
386 .receive
= eth_receive
,
387 .cleanup
= eth_cleanup
,
390 static int mv88w8618_eth_init(SysBusDevice
*sbd
)
392 DeviceState
*dev
= DEVICE(sbd
);
393 mv88w8618_eth_state
*s
= MV88W8618_ETH(dev
);
395 sysbus_init_irq(sbd
, &s
->irq
);
396 s
->nic
= qemu_new_nic(&net_mv88w8618_info
, &s
->conf
,
397 object_get_typename(OBJECT(dev
)), dev
->id
, s
);
398 memory_region_init_io(&s
->iomem
, OBJECT(s
), &mv88w8618_eth_ops
, s
,
399 "mv88w8618-eth", MP_ETH_SIZE
);
400 sysbus_init_mmio(sbd
, &s
->iomem
);
404 static const VMStateDescription mv88w8618_eth_vmsd
= {
405 .name
= "mv88w8618_eth",
407 .minimum_version_id
= 1,
408 .minimum_version_id_old
= 1,
409 .fields
= (VMStateField
[]) {
410 VMSTATE_UINT32(smir
, mv88w8618_eth_state
),
411 VMSTATE_UINT32(icr
, mv88w8618_eth_state
),
412 VMSTATE_UINT32(imr
, mv88w8618_eth_state
),
413 VMSTATE_UINT32(vlan_header
, mv88w8618_eth_state
),
414 VMSTATE_UINT32_ARRAY(tx_queue
, mv88w8618_eth_state
, 2),
415 VMSTATE_UINT32_ARRAY(rx_queue
, mv88w8618_eth_state
, 4),
416 VMSTATE_UINT32_ARRAY(frx_queue
, mv88w8618_eth_state
, 4),
417 VMSTATE_UINT32_ARRAY(cur_rx
, mv88w8618_eth_state
, 4),
418 VMSTATE_END_OF_LIST()
422 static Property mv88w8618_eth_properties
[] = {
423 DEFINE_NIC_PROPERTIES(mv88w8618_eth_state
, conf
),
424 DEFINE_PROP_END_OF_LIST(),
427 static void mv88w8618_eth_class_init(ObjectClass
*klass
, void *data
)
429 DeviceClass
*dc
= DEVICE_CLASS(klass
);
430 SysBusDeviceClass
*k
= SYS_BUS_DEVICE_CLASS(klass
);
432 k
->init
= mv88w8618_eth_init
;
433 dc
->vmsd
= &mv88w8618_eth_vmsd
;
434 dc
->props
= mv88w8618_eth_properties
;
437 static const TypeInfo mv88w8618_eth_info
= {
438 .name
= TYPE_MV88W8618_ETH
,
439 .parent
= TYPE_SYS_BUS_DEVICE
,
440 .instance_size
= sizeof(mv88w8618_eth_state
),
441 .class_init
= mv88w8618_eth_class_init
,
444 /* LCD register offsets */
445 #define MP_LCD_IRQCTRL 0x180
446 #define MP_LCD_IRQSTAT 0x184
447 #define MP_LCD_SPICTRL 0x1ac
448 #define MP_LCD_INST 0x1bc
449 #define MP_LCD_DATA 0x1c0
452 #define MP_LCD_SPI_DATA 0x00100011
453 #define MP_LCD_SPI_CMD 0x00104011
454 #define MP_LCD_SPI_INVALID 0x00000000
457 #define MP_LCD_INST_SETPAGE0 0xB0
459 #define MP_LCD_INST_SETPAGE7 0xB7
461 #define MP_LCD_TEXTCOLOR 0xe0e0ff /* RRGGBB */
463 #define TYPE_MUSICPAL_LCD "musicpal_lcd"
464 #define MUSICPAL_LCD(obj) \
465 OBJECT_CHECK(musicpal_lcd_state, (obj), TYPE_MUSICPAL_LCD)
467 typedef struct musicpal_lcd_state
{
469 SysBusDevice parent_obj
;
479 uint8_t video_ram
[128*64/8];
480 } musicpal_lcd_state
;
482 static uint8_t scale_lcd_color(musicpal_lcd_state
*s
, uint8_t col
)
484 switch (s
->brightness
) {
490 return (col
* s
->brightness
) / 7;
494 #define SET_LCD_PIXEL(depth, type) \
495 static inline void glue(set_lcd_pixel, depth) \
496 (musicpal_lcd_state *s, int x, int y, type col) \
499 DisplaySurface *surface = qemu_console_surface(s->con); \
500 type *pixel = &((type *) surface_data(surface))[(y * 128 * 3 + x) * 3]; \
502 for (dy = 0; dy < 3; dy++, pixel += 127 * 3) \
503 for (dx = 0; dx < 3; dx++, pixel++) \
506 SET_LCD_PIXEL(8, uint8_t)
507 SET_LCD_PIXEL(16, uint16_t)
508 SET_LCD_PIXEL(32, uint32_t)
510 static void lcd_refresh(void *opaque
)
512 musicpal_lcd_state
*s
= opaque
;
513 DisplaySurface
*surface
= qemu_console_surface(s
->con
);
516 switch (surface_bits_per_pixel(surface
)) {
519 #define LCD_REFRESH(depth, func) \
521 col = func(scale_lcd_color(s, (MP_LCD_TEXTCOLOR >> 16) & 0xff), \
522 scale_lcd_color(s, (MP_LCD_TEXTCOLOR >> 8) & 0xff), \
523 scale_lcd_color(s, MP_LCD_TEXTCOLOR & 0xff)); \
524 for (x = 0; x < 128; x++) { \
525 for (y = 0; y < 64; y++) { \
526 if (s->video_ram[x + (y/8)*128] & (1 << (y % 8))) { \
527 glue(set_lcd_pixel, depth)(s, x, y, col); \
529 glue(set_lcd_pixel, depth)(s, x, y, 0); \
534 LCD_REFRESH(8, rgb_to_pixel8
)
535 LCD_REFRESH(16, rgb_to_pixel16
)
536 LCD_REFRESH(32, (is_surface_bgr(surface
) ?
537 rgb_to_pixel32bgr
: rgb_to_pixel32
))
539 hw_error("unsupported colour depth %i\n",
540 surface_bits_per_pixel(surface
));
543 dpy_gfx_update(s
->con
, 0, 0, 128*3, 64*3);
546 static void lcd_invalidate(void *opaque
)
550 static void musicpal_lcd_gpio_brightness_in(void *opaque
, int irq
, int level
)
552 musicpal_lcd_state
*s
= opaque
;
553 s
->brightness
&= ~(1 << irq
);
554 s
->brightness
|= level
<< irq
;
557 static uint64_t musicpal_lcd_read(void *opaque
, hwaddr offset
,
560 musicpal_lcd_state
*s
= opaque
;
571 static void musicpal_lcd_write(void *opaque
, hwaddr offset
,
572 uint64_t value
, unsigned size
)
574 musicpal_lcd_state
*s
= opaque
;
582 if (value
== MP_LCD_SPI_DATA
|| value
== MP_LCD_SPI_CMD
) {
585 s
->mode
= MP_LCD_SPI_INVALID
;
590 if (value
>= MP_LCD_INST_SETPAGE0
&& value
<= MP_LCD_INST_SETPAGE7
) {
591 s
->page
= value
- MP_LCD_INST_SETPAGE0
;
597 if (s
->mode
== MP_LCD_SPI_CMD
) {
598 if (value
>= MP_LCD_INST_SETPAGE0
&&
599 value
<= MP_LCD_INST_SETPAGE7
) {
600 s
->page
= value
- MP_LCD_INST_SETPAGE0
;
603 } else if (s
->mode
== MP_LCD_SPI_DATA
) {
604 s
->video_ram
[s
->page
*128 + s
->page_off
] = value
;
605 s
->page_off
= (s
->page_off
+ 1) & 127;
611 static const MemoryRegionOps musicpal_lcd_ops
= {
612 .read
= musicpal_lcd_read
,
613 .write
= musicpal_lcd_write
,
614 .endianness
= DEVICE_NATIVE_ENDIAN
,
617 static const GraphicHwOps musicpal_gfx_ops
= {
618 .invalidate
= lcd_invalidate
,
619 .gfx_update
= lcd_refresh
,
622 static int musicpal_lcd_init(SysBusDevice
*sbd
)
624 DeviceState
*dev
= DEVICE(sbd
);
625 musicpal_lcd_state
*s
= MUSICPAL_LCD(dev
);
629 memory_region_init_io(&s
->iomem
, OBJECT(s
), &musicpal_lcd_ops
, s
,
630 "musicpal-lcd", MP_LCD_SIZE
);
631 sysbus_init_mmio(sbd
, &s
->iomem
);
633 s
->con
= graphic_console_init(dev
, 0, &musicpal_gfx_ops
, s
);
634 qemu_console_resize(s
->con
, 128*3, 64*3);
636 qdev_init_gpio_in(dev
, musicpal_lcd_gpio_brightness_in
, 3);
641 static const VMStateDescription musicpal_lcd_vmsd
= {
642 .name
= "musicpal_lcd",
644 .minimum_version_id
= 1,
645 .minimum_version_id_old
= 1,
646 .fields
= (VMStateField
[]) {
647 VMSTATE_UINT32(brightness
, musicpal_lcd_state
),
648 VMSTATE_UINT32(mode
, musicpal_lcd_state
),
649 VMSTATE_UINT32(irqctrl
, musicpal_lcd_state
),
650 VMSTATE_UINT32(page
, musicpal_lcd_state
),
651 VMSTATE_UINT32(page_off
, musicpal_lcd_state
),
652 VMSTATE_BUFFER(video_ram
, musicpal_lcd_state
),
653 VMSTATE_END_OF_LIST()
657 static void musicpal_lcd_class_init(ObjectClass
*klass
, void *data
)
659 DeviceClass
*dc
= DEVICE_CLASS(klass
);
660 SysBusDeviceClass
*k
= SYS_BUS_DEVICE_CLASS(klass
);
662 k
->init
= musicpal_lcd_init
;
663 dc
->vmsd
= &musicpal_lcd_vmsd
;
666 static const TypeInfo musicpal_lcd_info
= {
667 .name
= TYPE_MUSICPAL_LCD
,
668 .parent
= TYPE_SYS_BUS_DEVICE
,
669 .instance_size
= sizeof(musicpal_lcd_state
),
670 .class_init
= musicpal_lcd_class_init
,
673 /* PIC register offsets */
674 #define MP_PIC_STATUS 0x00
675 #define MP_PIC_ENABLE_SET 0x08
676 #define MP_PIC_ENABLE_CLR 0x0C
678 #define TYPE_MV88W8618_PIC "mv88w8618_pic"
679 #define MV88W8618_PIC(obj) \
680 OBJECT_CHECK(mv88w8618_pic_state, (obj), TYPE_MV88W8618_PIC)
682 typedef struct mv88w8618_pic_state
{
684 SysBusDevice parent_obj
;
691 } mv88w8618_pic_state
;
693 static void mv88w8618_pic_update(mv88w8618_pic_state
*s
)
695 qemu_set_irq(s
->parent_irq
, (s
->level
& s
->enabled
));
698 static void mv88w8618_pic_set_irq(void *opaque
, int irq
, int level
)
700 mv88w8618_pic_state
*s
= opaque
;
703 s
->level
|= 1 << irq
;
705 s
->level
&= ~(1 << irq
);
707 mv88w8618_pic_update(s
);
710 static uint64_t mv88w8618_pic_read(void *opaque
, hwaddr offset
,
713 mv88w8618_pic_state
*s
= opaque
;
717 return s
->level
& s
->enabled
;
724 static void mv88w8618_pic_write(void *opaque
, hwaddr offset
,
725 uint64_t value
, unsigned size
)
727 mv88w8618_pic_state
*s
= opaque
;
730 case MP_PIC_ENABLE_SET
:
734 case MP_PIC_ENABLE_CLR
:
735 s
->enabled
&= ~value
;
739 mv88w8618_pic_update(s
);
742 static void mv88w8618_pic_reset(DeviceState
*d
)
744 mv88w8618_pic_state
*s
= MV88W8618_PIC(d
);
750 static const MemoryRegionOps mv88w8618_pic_ops
= {
751 .read
= mv88w8618_pic_read
,
752 .write
= mv88w8618_pic_write
,
753 .endianness
= DEVICE_NATIVE_ENDIAN
,
756 static int mv88w8618_pic_init(SysBusDevice
*dev
)
758 mv88w8618_pic_state
*s
= MV88W8618_PIC(dev
);
760 qdev_init_gpio_in(DEVICE(dev
), mv88w8618_pic_set_irq
, 32);
761 sysbus_init_irq(dev
, &s
->parent_irq
);
762 memory_region_init_io(&s
->iomem
, OBJECT(s
), &mv88w8618_pic_ops
, s
,
763 "musicpal-pic", MP_PIC_SIZE
);
764 sysbus_init_mmio(dev
, &s
->iomem
);
768 static const VMStateDescription mv88w8618_pic_vmsd
= {
769 .name
= "mv88w8618_pic",
771 .minimum_version_id
= 1,
772 .minimum_version_id_old
= 1,
773 .fields
= (VMStateField
[]) {
774 VMSTATE_UINT32(level
, mv88w8618_pic_state
),
775 VMSTATE_UINT32(enabled
, mv88w8618_pic_state
),
776 VMSTATE_END_OF_LIST()
780 static void mv88w8618_pic_class_init(ObjectClass
*klass
, void *data
)
782 DeviceClass
*dc
= DEVICE_CLASS(klass
);
783 SysBusDeviceClass
*k
= SYS_BUS_DEVICE_CLASS(klass
);
785 k
->init
= mv88w8618_pic_init
;
786 dc
->reset
= mv88w8618_pic_reset
;
787 dc
->vmsd
= &mv88w8618_pic_vmsd
;
790 static const TypeInfo mv88w8618_pic_info
= {
791 .name
= TYPE_MV88W8618_PIC
,
792 .parent
= TYPE_SYS_BUS_DEVICE
,
793 .instance_size
= sizeof(mv88w8618_pic_state
),
794 .class_init
= mv88w8618_pic_class_init
,
797 /* PIT register offsets */
798 #define MP_PIT_TIMER1_LENGTH 0x00
800 #define MP_PIT_TIMER4_LENGTH 0x0C
801 #define MP_PIT_CONTROL 0x10
802 #define MP_PIT_TIMER1_VALUE 0x14
804 #define MP_PIT_TIMER4_VALUE 0x20
805 #define MP_BOARD_RESET 0x34
807 /* Magic board reset value (probably some watchdog behind it) */
808 #define MP_BOARD_RESET_MAGIC 0x10000
810 typedef struct mv88w8618_timer_state
{
811 ptimer_state
*ptimer
;
815 } mv88w8618_timer_state
;
817 #define TYPE_MV88W8618_PIT "mv88w8618_pit"
818 #define MV88W8618_PIT(obj) \
819 OBJECT_CHECK(mv88w8618_pit_state, (obj), TYPE_MV88W8618_PIT)
821 typedef struct mv88w8618_pit_state
{
823 SysBusDevice parent_obj
;
827 mv88w8618_timer_state timer
[4];
828 } mv88w8618_pit_state
;
830 static void mv88w8618_timer_tick(void *opaque
)
832 mv88w8618_timer_state
*s
= opaque
;
834 qemu_irq_raise(s
->irq
);
837 static void mv88w8618_timer_init(SysBusDevice
*dev
, mv88w8618_timer_state
*s
,
842 sysbus_init_irq(dev
, &s
->irq
);
845 bh
= qemu_bh_new(mv88w8618_timer_tick
, s
);
846 s
->ptimer
= ptimer_init(bh
);
849 static uint64_t mv88w8618_pit_read(void *opaque
, hwaddr offset
,
852 mv88w8618_pit_state
*s
= opaque
;
853 mv88w8618_timer_state
*t
;
856 case MP_PIT_TIMER1_VALUE
... MP_PIT_TIMER4_VALUE
:
857 t
= &s
->timer
[(offset
-MP_PIT_TIMER1_VALUE
) >> 2];
858 return ptimer_get_count(t
->ptimer
);
865 static void mv88w8618_pit_write(void *opaque
, hwaddr offset
,
866 uint64_t value
, unsigned size
)
868 mv88w8618_pit_state
*s
= opaque
;
869 mv88w8618_timer_state
*t
;
873 case MP_PIT_TIMER1_LENGTH
... MP_PIT_TIMER4_LENGTH
:
874 t
= &s
->timer
[offset
>> 2];
877 ptimer_set_limit(t
->ptimer
, t
->limit
, 1);
879 ptimer_stop(t
->ptimer
);
884 for (i
= 0; i
< 4; i
++) {
886 if (value
& 0xf && t
->limit
> 0) {
887 ptimer_set_limit(t
->ptimer
, t
->limit
, 0);
888 ptimer_set_freq(t
->ptimer
, t
->freq
);
889 ptimer_run(t
->ptimer
, 0);
891 ptimer_stop(t
->ptimer
);
898 if (value
== MP_BOARD_RESET_MAGIC
) {
899 qemu_system_reset_request();
905 static void mv88w8618_pit_reset(DeviceState
*d
)
907 mv88w8618_pit_state
*s
= MV88W8618_PIT(d
);
910 for (i
= 0; i
< 4; i
++) {
911 ptimer_stop(s
->timer
[i
].ptimer
);
912 s
->timer
[i
].limit
= 0;
916 static const MemoryRegionOps mv88w8618_pit_ops
= {
917 .read
= mv88w8618_pit_read
,
918 .write
= mv88w8618_pit_write
,
919 .endianness
= DEVICE_NATIVE_ENDIAN
,
922 static int mv88w8618_pit_init(SysBusDevice
*dev
)
924 mv88w8618_pit_state
*s
= MV88W8618_PIT(dev
);
927 /* Letting them all run at 1 MHz is likely just a pragmatic
929 for (i
= 0; i
< 4; i
++) {
930 mv88w8618_timer_init(dev
, &s
->timer
[i
], 1000000);
933 memory_region_init_io(&s
->iomem
, OBJECT(s
), &mv88w8618_pit_ops
, s
,
934 "musicpal-pit", MP_PIT_SIZE
);
935 sysbus_init_mmio(dev
, &s
->iomem
);
939 static const VMStateDescription mv88w8618_timer_vmsd
= {
942 .minimum_version_id
= 1,
943 .minimum_version_id_old
= 1,
944 .fields
= (VMStateField
[]) {
945 VMSTATE_PTIMER(ptimer
, mv88w8618_timer_state
),
946 VMSTATE_UINT32(limit
, mv88w8618_timer_state
),
947 VMSTATE_END_OF_LIST()
951 static const VMStateDescription mv88w8618_pit_vmsd
= {
952 .name
= "mv88w8618_pit",
954 .minimum_version_id
= 1,
955 .minimum_version_id_old
= 1,
956 .fields
= (VMStateField
[]) {
957 VMSTATE_STRUCT_ARRAY(timer
, mv88w8618_pit_state
, 4, 1,
958 mv88w8618_timer_vmsd
, mv88w8618_timer_state
),
959 VMSTATE_END_OF_LIST()
963 static void mv88w8618_pit_class_init(ObjectClass
*klass
, void *data
)
965 DeviceClass
*dc
= DEVICE_CLASS(klass
);
966 SysBusDeviceClass
*k
= SYS_BUS_DEVICE_CLASS(klass
);
968 k
->init
= mv88w8618_pit_init
;
969 dc
->reset
= mv88w8618_pit_reset
;
970 dc
->vmsd
= &mv88w8618_pit_vmsd
;
973 static const TypeInfo mv88w8618_pit_info
= {
974 .name
= TYPE_MV88W8618_PIT
,
975 .parent
= TYPE_SYS_BUS_DEVICE
,
976 .instance_size
= sizeof(mv88w8618_pit_state
),
977 .class_init
= mv88w8618_pit_class_init
,
980 /* Flash config register offsets */
981 #define MP_FLASHCFG_CFGR0 0x04
983 #define TYPE_MV88W8618_FLASHCFG "mv88w8618_flashcfg"
984 #define MV88W8618_FLASHCFG(obj) \
985 OBJECT_CHECK(mv88w8618_flashcfg_state, (obj), TYPE_MV88W8618_FLASHCFG)
987 typedef struct mv88w8618_flashcfg_state
{
989 SysBusDevice parent_obj
;
994 } mv88w8618_flashcfg_state
;
996 static uint64_t mv88w8618_flashcfg_read(void *opaque
,
1000 mv88w8618_flashcfg_state
*s
= opaque
;
1003 case MP_FLASHCFG_CFGR0
:
1011 static void mv88w8618_flashcfg_write(void *opaque
, hwaddr offset
,
1012 uint64_t value
, unsigned size
)
1014 mv88w8618_flashcfg_state
*s
= opaque
;
1017 case MP_FLASHCFG_CFGR0
:
1023 static const MemoryRegionOps mv88w8618_flashcfg_ops
= {
1024 .read
= mv88w8618_flashcfg_read
,
1025 .write
= mv88w8618_flashcfg_write
,
1026 .endianness
= DEVICE_NATIVE_ENDIAN
,
1029 static int mv88w8618_flashcfg_init(SysBusDevice
*dev
)
1031 mv88w8618_flashcfg_state
*s
= MV88W8618_FLASHCFG(dev
);
1033 s
->cfgr0
= 0xfffe4285; /* Default as set by U-Boot for 8 MB flash */
1034 memory_region_init_io(&s
->iomem
, OBJECT(s
), &mv88w8618_flashcfg_ops
, s
,
1035 "musicpal-flashcfg", MP_FLASHCFG_SIZE
);
1036 sysbus_init_mmio(dev
, &s
->iomem
);
1040 static const VMStateDescription mv88w8618_flashcfg_vmsd
= {
1041 .name
= "mv88w8618_flashcfg",
1043 .minimum_version_id
= 1,
1044 .minimum_version_id_old
= 1,
1045 .fields
= (VMStateField
[]) {
1046 VMSTATE_UINT32(cfgr0
, mv88w8618_flashcfg_state
),
1047 VMSTATE_END_OF_LIST()
1051 static void mv88w8618_flashcfg_class_init(ObjectClass
*klass
, void *data
)
1053 DeviceClass
*dc
= DEVICE_CLASS(klass
);
1054 SysBusDeviceClass
*k
= SYS_BUS_DEVICE_CLASS(klass
);
1056 k
->init
= mv88w8618_flashcfg_init
;
1057 dc
->vmsd
= &mv88w8618_flashcfg_vmsd
;
1060 static const TypeInfo mv88w8618_flashcfg_info
= {
1061 .name
= TYPE_MV88W8618_FLASHCFG
,
1062 .parent
= TYPE_SYS_BUS_DEVICE
,
1063 .instance_size
= sizeof(mv88w8618_flashcfg_state
),
1064 .class_init
= mv88w8618_flashcfg_class_init
,
1067 /* Misc register offsets */
1068 #define MP_MISC_BOARD_REVISION 0x18
1070 #define MP_BOARD_REVISION 0x31
1073 SysBusDevice parent_obj
;
1075 } MusicPalMiscState
;
1077 #define TYPE_MUSICPAL_MISC "musicpal-misc"
1078 #define MUSICPAL_MISC(obj) \
1079 OBJECT_CHECK(MusicPalMiscState, (obj), TYPE_MUSICPAL_MISC)
1081 static uint64_t musicpal_misc_read(void *opaque
, hwaddr offset
,
1085 case MP_MISC_BOARD_REVISION
:
1086 return MP_BOARD_REVISION
;
1093 static void musicpal_misc_write(void *opaque
, hwaddr offset
,
1094 uint64_t value
, unsigned size
)
1098 static const MemoryRegionOps musicpal_misc_ops
= {
1099 .read
= musicpal_misc_read
,
1100 .write
= musicpal_misc_write
,
1101 .endianness
= DEVICE_NATIVE_ENDIAN
,
1104 static void musicpal_misc_init(Object
*obj
)
1106 SysBusDevice
*sd
= SYS_BUS_DEVICE(obj
);
1107 MusicPalMiscState
*s
= MUSICPAL_MISC(obj
);
1109 memory_region_init_io(&s
->iomem
, OBJECT(s
), &musicpal_misc_ops
, NULL
,
1110 "musicpal-misc", MP_MISC_SIZE
);
1111 sysbus_init_mmio(sd
, &s
->iomem
);
1114 static const TypeInfo musicpal_misc_info
= {
1115 .name
= TYPE_MUSICPAL_MISC
,
1116 .parent
= TYPE_SYS_BUS_DEVICE
,
1117 .instance_init
= musicpal_misc_init
,
1118 .instance_size
= sizeof(MusicPalMiscState
),
1121 /* WLAN register offsets */
1122 #define MP_WLAN_MAGIC1 0x11c
1123 #define MP_WLAN_MAGIC2 0x124
1125 static uint64_t mv88w8618_wlan_read(void *opaque
, hwaddr offset
,
1129 /* Workaround to allow loading the binary-only wlandrv.ko crap
1130 * from the original Freecom firmware. */
1131 case MP_WLAN_MAGIC1
:
1133 case MP_WLAN_MAGIC2
:
1141 static void mv88w8618_wlan_write(void *opaque
, hwaddr offset
,
1142 uint64_t value
, unsigned size
)
1146 static const MemoryRegionOps mv88w8618_wlan_ops
= {
1147 .read
= mv88w8618_wlan_read
,
1148 .write
=mv88w8618_wlan_write
,
1149 .endianness
= DEVICE_NATIVE_ENDIAN
,
1152 static int mv88w8618_wlan_init(SysBusDevice
*dev
)
1154 MemoryRegion
*iomem
= g_new(MemoryRegion
, 1);
1156 memory_region_init_io(iomem
, OBJECT(dev
), &mv88w8618_wlan_ops
, NULL
,
1157 "musicpal-wlan", MP_WLAN_SIZE
);
1158 sysbus_init_mmio(dev
, iomem
);
1162 /* GPIO register offsets */
1163 #define MP_GPIO_OE_LO 0x008
1164 #define MP_GPIO_OUT_LO 0x00c
1165 #define MP_GPIO_IN_LO 0x010
1166 #define MP_GPIO_IER_LO 0x014
1167 #define MP_GPIO_IMR_LO 0x018
1168 #define MP_GPIO_ISR_LO 0x020
1169 #define MP_GPIO_OE_HI 0x508
1170 #define MP_GPIO_OUT_HI 0x50c
1171 #define MP_GPIO_IN_HI 0x510
1172 #define MP_GPIO_IER_HI 0x514
1173 #define MP_GPIO_IMR_HI 0x518
1174 #define MP_GPIO_ISR_HI 0x520
1176 /* GPIO bits & masks */
1177 #define MP_GPIO_LCD_BRIGHTNESS 0x00070000
1178 #define MP_GPIO_I2C_DATA_BIT 29
1179 #define MP_GPIO_I2C_CLOCK_BIT 30
1181 /* LCD brightness bits in GPIO_OE_HI */
1182 #define MP_OE_LCD_BRIGHTNESS 0x0007
1184 #define TYPE_MUSICPAL_GPIO "musicpal_gpio"
1185 #define MUSICPAL_GPIO(obj) \
1186 OBJECT_CHECK(musicpal_gpio_state, (obj), TYPE_MUSICPAL_GPIO)
1188 typedef struct musicpal_gpio_state
{
1190 SysBusDevice parent_obj
;
1194 uint32_t lcd_brightness
;
1201 qemu_irq out
[5]; /* 3 brightness out + 2 lcd (data and clock ) */
1202 } musicpal_gpio_state
;
1204 static void musicpal_gpio_brightness_update(musicpal_gpio_state
*s
) {
1206 uint32_t brightness
;
1208 /* compute brightness ratio */
1209 switch (s
->lcd_brightness
) {
1243 /* set lcd brightness GPIOs */
1244 for (i
= 0; i
<= 2; i
++) {
1245 qemu_set_irq(s
->out
[i
], (brightness
>> i
) & 1);
1249 static void musicpal_gpio_pin_event(void *opaque
, int pin
, int level
)
1251 musicpal_gpio_state
*s
= opaque
;
1252 uint32_t mask
= 1 << pin
;
1253 uint32_t delta
= level
<< pin
;
1254 uint32_t old
= s
->in_state
& mask
;
1256 s
->in_state
&= ~mask
;
1257 s
->in_state
|= delta
;
1259 if ((old
^ delta
) &&
1260 ((level
&& (s
->imr
& mask
)) || (!level
&& (s
->ier
& mask
)))) {
1262 qemu_irq_raise(s
->irq
);
1266 static uint64_t musicpal_gpio_read(void *opaque
, hwaddr offset
,
1269 musicpal_gpio_state
*s
= opaque
;
1272 case MP_GPIO_OE_HI
: /* used for LCD brightness control */
1273 return s
->lcd_brightness
& MP_OE_LCD_BRIGHTNESS
;
1275 case MP_GPIO_OUT_LO
:
1276 return s
->out_state
& 0xFFFF;
1277 case MP_GPIO_OUT_HI
:
1278 return s
->out_state
>> 16;
1281 return s
->in_state
& 0xFFFF;
1283 return s
->in_state
>> 16;
1285 case MP_GPIO_IER_LO
:
1286 return s
->ier
& 0xFFFF;
1287 case MP_GPIO_IER_HI
:
1288 return s
->ier
>> 16;
1290 case MP_GPIO_IMR_LO
:
1291 return s
->imr
& 0xFFFF;
1292 case MP_GPIO_IMR_HI
:
1293 return s
->imr
>> 16;
1295 case MP_GPIO_ISR_LO
:
1296 return s
->isr
& 0xFFFF;
1297 case MP_GPIO_ISR_HI
:
1298 return s
->isr
>> 16;
1305 static void musicpal_gpio_write(void *opaque
, hwaddr offset
,
1306 uint64_t value
, unsigned size
)
1308 musicpal_gpio_state
*s
= opaque
;
1310 case MP_GPIO_OE_HI
: /* used for LCD brightness control */
1311 s
->lcd_brightness
= (s
->lcd_brightness
& MP_GPIO_LCD_BRIGHTNESS
) |
1312 (value
& MP_OE_LCD_BRIGHTNESS
);
1313 musicpal_gpio_brightness_update(s
);
1316 case MP_GPIO_OUT_LO
:
1317 s
->out_state
= (s
->out_state
& 0xFFFF0000) | (value
& 0xFFFF);
1319 case MP_GPIO_OUT_HI
:
1320 s
->out_state
= (s
->out_state
& 0xFFFF) | (value
<< 16);
1321 s
->lcd_brightness
= (s
->lcd_brightness
& 0xFFFF) |
1322 (s
->out_state
& MP_GPIO_LCD_BRIGHTNESS
);
1323 musicpal_gpio_brightness_update(s
);
1324 qemu_set_irq(s
->out
[3], (s
->out_state
>> MP_GPIO_I2C_DATA_BIT
) & 1);
1325 qemu_set_irq(s
->out
[4], (s
->out_state
>> MP_GPIO_I2C_CLOCK_BIT
) & 1);
1328 case MP_GPIO_IER_LO
:
1329 s
->ier
= (s
->ier
& 0xFFFF0000) | (value
& 0xFFFF);
1331 case MP_GPIO_IER_HI
:
1332 s
->ier
= (s
->ier
& 0xFFFF) | (value
<< 16);
1335 case MP_GPIO_IMR_LO
:
1336 s
->imr
= (s
->imr
& 0xFFFF0000) | (value
& 0xFFFF);
1338 case MP_GPIO_IMR_HI
:
1339 s
->imr
= (s
->imr
& 0xFFFF) | (value
<< 16);
1344 static const MemoryRegionOps musicpal_gpio_ops
= {
1345 .read
= musicpal_gpio_read
,
1346 .write
= musicpal_gpio_write
,
1347 .endianness
= DEVICE_NATIVE_ENDIAN
,
1350 static void musicpal_gpio_reset(DeviceState
*d
)
1352 musicpal_gpio_state
*s
= MUSICPAL_GPIO(d
);
1354 s
->lcd_brightness
= 0;
1356 s
->in_state
= 0xffffffff;
1362 static int musicpal_gpio_init(SysBusDevice
*sbd
)
1364 DeviceState
*dev
= DEVICE(sbd
);
1365 musicpal_gpio_state
*s
= MUSICPAL_GPIO(dev
);
1367 sysbus_init_irq(sbd
, &s
->irq
);
1369 memory_region_init_io(&s
->iomem
, OBJECT(s
), &musicpal_gpio_ops
, s
,
1370 "musicpal-gpio", MP_GPIO_SIZE
);
1371 sysbus_init_mmio(sbd
, &s
->iomem
);
1373 qdev_init_gpio_out(dev
, s
->out
, ARRAY_SIZE(s
->out
));
1375 qdev_init_gpio_in(dev
, musicpal_gpio_pin_event
, 32);
1380 static const VMStateDescription musicpal_gpio_vmsd
= {
1381 .name
= "musicpal_gpio",
1383 .minimum_version_id
= 1,
1384 .minimum_version_id_old
= 1,
1385 .fields
= (VMStateField
[]) {
1386 VMSTATE_UINT32(lcd_brightness
, musicpal_gpio_state
),
1387 VMSTATE_UINT32(out_state
, musicpal_gpio_state
),
1388 VMSTATE_UINT32(in_state
, musicpal_gpio_state
),
1389 VMSTATE_UINT32(ier
, musicpal_gpio_state
),
1390 VMSTATE_UINT32(imr
, musicpal_gpio_state
),
1391 VMSTATE_UINT32(isr
, musicpal_gpio_state
),
1392 VMSTATE_END_OF_LIST()
1396 static void musicpal_gpio_class_init(ObjectClass
*klass
, void *data
)
1398 DeviceClass
*dc
= DEVICE_CLASS(klass
);
1399 SysBusDeviceClass
*k
= SYS_BUS_DEVICE_CLASS(klass
);
1401 k
->init
= musicpal_gpio_init
;
1402 dc
->reset
= musicpal_gpio_reset
;
1403 dc
->vmsd
= &musicpal_gpio_vmsd
;
1406 static const TypeInfo musicpal_gpio_info
= {
1407 .name
= TYPE_MUSICPAL_GPIO
,
1408 .parent
= TYPE_SYS_BUS_DEVICE
,
1409 .instance_size
= sizeof(musicpal_gpio_state
),
1410 .class_init
= musicpal_gpio_class_init
,
1413 /* Keyboard codes & masks */
1414 #define KEY_RELEASED 0x80
1415 #define KEY_CODE 0x7f
1417 #define KEYCODE_TAB 0x0f
1418 #define KEYCODE_ENTER 0x1c
1419 #define KEYCODE_F 0x21
1420 #define KEYCODE_M 0x32
1422 #define KEYCODE_EXTENDED 0xe0
1423 #define KEYCODE_UP 0x48
1424 #define KEYCODE_DOWN 0x50
1425 #define KEYCODE_LEFT 0x4b
1426 #define KEYCODE_RIGHT 0x4d
1428 #define MP_KEY_WHEEL_VOL (1 << 0)
1429 #define MP_KEY_WHEEL_VOL_INV (1 << 1)
1430 #define MP_KEY_WHEEL_NAV (1 << 2)
1431 #define MP_KEY_WHEEL_NAV_INV (1 << 3)
1432 #define MP_KEY_BTN_FAVORITS (1 << 4)
1433 #define MP_KEY_BTN_MENU (1 << 5)
1434 #define MP_KEY_BTN_VOLUME (1 << 6)
1435 #define MP_KEY_BTN_NAVIGATION (1 << 7)
1437 #define TYPE_MUSICPAL_KEY "musicpal_key"
1438 #define MUSICPAL_KEY(obj) \
1439 OBJECT_CHECK(musicpal_key_state, (obj), TYPE_MUSICPAL_KEY)
1441 typedef struct musicpal_key_state
{
1443 SysBusDevice parent_obj
;
1447 uint32_t kbd_extended
;
1448 uint32_t pressed_keys
;
1450 } musicpal_key_state
;
1452 static void musicpal_key_event(void *opaque
, int keycode
)
1454 musicpal_key_state
*s
= opaque
;
1458 if (keycode
== KEYCODE_EXTENDED
) {
1459 s
->kbd_extended
= 1;
1463 if (s
->kbd_extended
) {
1464 switch (keycode
& KEY_CODE
) {
1466 event
= MP_KEY_WHEEL_NAV
| MP_KEY_WHEEL_NAV_INV
;
1470 event
= MP_KEY_WHEEL_NAV
;
1474 event
= MP_KEY_WHEEL_VOL
| MP_KEY_WHEEL_VOL_INV
;
1478 event
= MP_KEY_WHEEL_VOL
;
1482 switch (keycode
& KEY_CODE
) {
1484 event
= MP_KEY_BTN_FAVORITS
;
1488 event
= MP_KEY_BTN_VOLUME
;
1492 event
= MP_KEY_BTN_NAVIGATION
;
1496 event
= MP_KEY_BTN_MENU
;
1499 /* Do not repeat already pressed buttons */
1500 if (!(keycode
& KEY_RELEASED
) && (s
->pressed_keys
& event
)) {
1506 /* Raise GPIO pin first if repeating a key */
1507 if (!(keycode
& KEY_RELEASED
) && (s
->pressed_keys
& event
)) {
1508 for (i
= 0; i
<= 7; i
++) {
1509 if (event
& (1 << i
)) {
1510 qemu_set_irq(s
->out
[i
], 1);
1514 for (i
= 0; i
<= 7; i
++) {
1515 if (event
& (1 << i
)) {
1516 qemu_set_irq(s
->out
[i
], !!(keycode
& KEY_RELEASED
));
1519 if (keycode
& KEY_RELEASED
) {
1520 s
->pressed_keys
&= ~event
;
1522 s
->pressed_keys
|= event
;
1526 s
->kbd_extended
= 0;
1529 static int musicpal_key_init(SysBusDevice
*sbd
)
1531 DeviceState
*dev
= DEVICE(sbd
);
1532 musicpal_key_state
*s
= MUSICPAL_KEY(dev
);
1534 memory_region_init(&s
->iomem
, OBJECT(s
), "dummy", 0);
1535 sysbus_init_mmio(sbd
, &s
->iomem
);
1537 s
->kbd_extended
= 0;
1538 s
->pressed_keys
= 0;
1540 qdev_init_gpio_out(dev
, s
->out
, ARRAY_SIZE(s
->out
));
1542 qemu_add_kbd_event_handler(musicpal_key_event
, s
);
1547 static const VMStateDescription musicpal_key_vmsd
= {
1548 .name
= "musicpal_key",
1550 .minimum_version_id
= 1,
1551 .minimum_version_id_old
= 1,
1552 .fields
= (VMStateField
[]) {
1553 VMSTATE_UINT32(kbd_extended
, musicpal_key_state
),
1554 VMSTATE_UINT32(pressed_keys
, musicpal_key_state
),
1555 VMSTATE_END_OF_LIST()
1559 static void musicpal_key_class_init(ObjectClass
*klass
, void *data
)
1561 DeviceClass
*dc
= DEVICE_CLASS(klass
);
1562 SysBusDeviceClass
*k
= SYS_BUS_DEVICE_CLASS(klass
);
1564 k
->init
= musicpal_key_init
;
1565 dc
->vmsd
= &musicpal_key_vmsd
;
1568 static const TypeInfo musicpal_key_info
= {
1569 .name
= TYPE_MUSICPAL_KEY
,
1570 .parent
= TYPE_SYS_BUS_DEVICE
,
1571 .instance_size
= sizeof(musicpal_key_state
),
1572 .class_init
= musicpal_key_class_init
,
1575 static struct arm_boot_info musicpal_binfo
= {
1576 .loader_start
= 0x0,
1580 static void musicpal_init(QEMUMachineInitArgs
*args
)
1582 const char *cpu_model
= args
->cpu_model
;
1583 const char *kernel_filename
= args
->kernel_filename
;
1584 const char *kernel_cmdline
= args
->kernel_cmdline
;
1585 const char *initrd_filename
= args
->initrd_filename
;
1589 DeviceState
*i2c_dev
;
1590 DeviceState
*lcd_dev
;
1591 DeviceState
*key_dev
;
1592 DeviceState
*wm8750_dev
;
1596 unsigned long flash_size
;
1598 MemoryRegion
*address_space_mem
= get_system_memory();
1599 MemoryRegion
*ram
= g_new(MemoryRegion
, 1);
1600 MemoryRegion
*sram
= g_new(MemoryRegion
, 1);
1603 cpu_model
= "arm926";
1605 cpu
= cpu_arm_init(cpu_model
);
1607 fprintf(stderr
, "Unable to find CPU definition\n");
1611 /* For now we use a fixed - the original - RAM size */
1612 memory_region_init_ram(ram
, NULL
, "musicpal.ram", MP_RAM_DEFAULT_SIZE
);
1613 vmstate_register_ram_global(ram
);
1614 memory_region_add_subregion(address_space_mem
, 0, ram
);
1616 memory_region_init_ram(sram
, NULL
, "musicpal.sram", MP_SRAM_SIZE
);
1617 vmstate_register_ram_global(sram
);
1618 memory_region_add_subregion(address_space_mem
, MP_SRAM_BASE
, sram
);
1620 dev
= sysbus_create_simple(TYPE_MV88W8618_PIC
, MP_PIC_BASE
,
1621 qdev_get_gpio_in(DEVICE(cpu
), ARM_CPU_IRQ
));
1622 for (i
= 0; i
< 32; i
++) {
1623 pic
[i
] = qdev_get_gpio_in(dev
, i
);
1625 sysbus_create_varargs(TYPE_MV88W8618_PIT
, MP_PIT_BASE
, pic
[MP_TIMER1_IRQ
],
1626 pic
[MP_TIMER2_IRQ
], pic
[MP_TIMER3_IRQ
],
1627 pic
[MP_TIMER4_IRQ
], NULL
);
1629 if (serial_hds
[0]) {
1630 serial_mm_init(address_space_mem
, MP_UART1_BASE
, 2, pic
[MP_UART1_IRQ
],
1631 1825000, serial_hds
[0], DEVICE_NATIVE_ENDIAN
);
1633 if (serial_hds
[1]) {
1634 serial_mm_init(address_space_mem
, MP_UART2_BASE
, 2, pic
[MP_UART2_IRQ
],
1635 1825000, serial_hds
[1], DEVICE_NATIVE_ENDIAN
);
1638 /* Register flash */
1639 dinfo
= drive_get(IF_PFLASH
, 0, 0);
1641 flash_size
= bdrv_getlength(dinfo
->bdrv
);
1642 if (flash_size
!= 8*1024*1024 && flash_size
!= 16*1024*1024 &&
1643 flash_size
!= 32*1024*1024) {
1644 fprintf(stderr
, "Invalid flash image size\n");
1649 * The original U-Boot accesses the flash at 0xFE000000 instead of
1650 * 0xFF800000 (if there is 8 MB flash). So remap flash access if the
1651 * image is smaller than 32 MB.
1653 #ifdef TARGET_WORDS_BIGENDIAN
1654 pflash_cfi02_register(0x100000000ULL
-MP_FLASH_SIZE_MAX
, NULL
,
1655 "musicpal.flash", flash_size
,
1656 dinfo
->bdrv
, 0x10000,
1657 (flash_size
+ 0xffff) >> 16,
1658 MP_FLASH_SIZE_MAX
/ flash_size
,
1659 2, 0x00BF, 0x236D, 0x0000, 0x0000,
1662 pflash_cfi02_register(0x100000000ULL
-MP_FLASH_SIZE_MAX
, NULL
,
1663 "musicpal.flash", flash_size
,
1664 dinfo
->bdrv
, 0x10000,
1665 (flash_size
+ 0xffff) >> 16,
1666 MP_FLASH_SIZE_MAX
/ flash_size
,
1667 2, 0x00BF, 0x236D, 0x0000, 0x0000,
1672 sysbus_create_simple(TYPE_MV88W8618_FLASHCFG
, MP_FLASHCFG_BASE
, NULL
);
1674 qemu_check_nic_model(&nd_table
[0], "mv88w8618");
1675 dev
= qdev_create(NULL
, TYPE_MV88W8618_ETH
);
1676 qdev_set_nic_properties(dev
, &nd_table
[0]);
1677 qdev_init_nofail(dev
);
1678 sysbus_mmio_map(SYS_BUS_DEVICE(dev
), 0, MP_ETH_BASE
);
1679 sysbus_connect_irq(SYS_BUS_DEVICE(dev
), 0, pic
[MP_ETH_IRQ
]);
1681 sysbus_create_simple("mv88w8618_wlan", MP_WLAN_BASE
, NULL
);
1683 sysbus_create_simple(TYPE_MUSICPAL_MISC
, MP_MISC_BASE
, NULL
);
1685 dev
= sysbus_create_simple(TYPE_MUSICPAL_GPIO
, MP_GPIO_BASE
,
1687 i2c_dev
= sysbus_create_simple("gpio_i2c", -1, NULL
);
1688 i2c
= (I2CBus
*)qdev_get_child_bus(i2c_dev
, "i2c");
1690 lcd_dev
= sysbus_create_simple(TYPE_MUSICPAL_LCD
, MP_LCD_BASE
, NULL
);
1691 key_dev
= sysbus_create_simple(TYPE_MUSICPAL_KEY
, -1, NULL
);
1694 qdev_connect_gpio_out(i2c_dev
, 0,
1695 qdev_get_gpio_in(dev
, MP_GPIO_I2C_DATA_BIT
));
1697 qdev_connect_gpio_out(dev
, 3, qdev_get_gpio_in(i2c_dev
, 0));
1699 qdev_connect_gpio_out(dev
, 4, qdev_get_gpio_in(i2c_dev
, 1));
1701 for (i
= 0; i
< 3; i
++) {
1702 qdev_connect_gpio_out(dev
, i
, qdev_get_gpio_in(lcd_dev
, i
));
1704 for (i
= 0; i
< 4; i
++) {
1705 qdev_connect_gpio_out(key_dev
, i
, qdev_get_gpio_in(dev
, i
+ 8));
1707 for (i
= 4; i
< 8; i
++) {
1708 qdev_connect_gpio_out(key_dev
, i
, qdev_get_gpio_in(dev
, i
+ 15));
1711 wm8750_dev
= i2c_create_slave(i2c
, "wm8750", MP_WM_ADDR
);
1712 dev
= qdev_create(NULL
, "mv88w8618_audio");
1713 s
= SYS_BUS_DEVICE(dev
);
1714 qdev_prop_set_ptr(dev
, "wm8750", wm8750_dev
);
1715 qdev_init_nofail(dev
);
1716 sysbus_mmio_map(s
, 0, MP_AUDIO_BASE
);
1717 sysbus_connect_irq(s
, 0, pic
[MP_AUDIO_IRQ
]);
1719 musicpal_binfo
.ram_size
= MP_RAM_DEFAULT_SIZE
;
1720 musicpal_binfo
.kernel_filename
= kernel_filename
;
1721 musicpal_binfo
.kernel_cmdline
= kernel_cmdline
;
1722 musicpal_binfo
.initrd_filename
= initrd_filename
;
1723 arm_load_kernel(cpu
, &musicpal_binfo
);
1726 static QEMUMachine musicpal_machine
= {
1728 .desc
= "Marvell 88w8618 / MusicPal (ARM926EJ-S)",
1729 .init
= musicpal_init
,
1732 static void musicpal_machine_init(void)
1734 qemu_register_machine(&musicpal_machine
);
1737 machine_init(musicpal_machine_init
);
1739 static void mv88w8618_wlan_class_init(ObjectClass
*klass
, void *data
)
1741 SysBusDeviceClass
*sdc
= SYS_BUS_DEVICE_CLASS(klass
);
1743 sdc
->init
= mv88w8618_wlan_init
;
1746 static const TypeInfo mv88w8618_wlan_info
= {
1747 .name
= "mv88w8618_wlan",
1748 .parent
= TYPE_SYS_BUS_DEVICE
,
1749 .instance_size
= sizeof(SysBusDevice
),
1750 .class_init
= mv88w8618_wlan_class_init
,
1753 static void musicpal_register_types(void)
1755 type_register_static(&mv88w8618_pic_info
);
1756 type_register_static(&mv88w8618_pit_info
);
1757 type_register_static(&mv88w8618_flashcfg_info
);
1758 type_register_static(&mv88w8618_eth_info
);
1759 type_register_static(&mv88w8618_wlan_info
);
1760 type_register_static(&musicpal_lcd_info
);
1761 type_register_static(&musicpal_gpio_info
);
1762 type_register_static(&musicpal_key_info
);
1763 type_register_static(&musicpal_misc_info
);
1766 type_init(musicpal_register_types
)