4 * Copyright (c) 2016 Jean-Christophe Dubois <jcd@tribudubois.net>
6 * This work is licensed under the terms of the GNU GPL, version 2 or later.
7 * See the COPYING file in the top-level directory.
11 #include "qemu/osdep.h"
12 #include "hw/ssi/imx_spi.h"
13 #include "sysemu/sysemu.h"
17 #define DEBUG_IMX_SPI 0
20 #define DPRINTF(fmt, args...) \
22 if (DEBUG_IMX_SPI) { \
23 fprintf(stderr, "[%s]%s: " fmt , TYPE_IMX_SPI, \
28 static const char *imx_spi_reg_name(uint32_t reg
)
30 static char unknown
[20];
34 return "ECSPI_RXDATA";
36 return "ECSPI_TXDATA";
38 return "ECSPI_CONREG";
40 return "ECSPI_CONFIGREG";
42 return "ECSPI_INTREG";
44 return "ECSPI_DMAREG";
46 return "ECSPI_STATREG";
48 return "ECSPI_PERIODREG";
50 return "ECSPI_TESTREG";
52 return "ECSPI_MSGDATA";
54 sprintf(unknown
, "%d ?", reg
);
59 static const VMStateDescription vmstate_imx_spi
= {
62 .minimum_version_id
= 1,
63 .fields
= (VMStateField
[]) {
64 VMSTATE_FIFO32(tx_fifo
, IMXSPIState
),
65 VMSTATE_FIFO32(rx_fifo
, IMXSPIState
),
66 VMSTATE_INT16(burst_length
, IMXSPIState
),
67 VMSTATE_UINT32_ARRAY(regs
, IMXSPIState
, ECSPI_MAX
),
72 static void imx_spi_txfifo_reset(IMXSPIState
*s
)
74 fifo32_reset(&s
->tx_fifo
);
75 s
->regs
[ECSPI_STATREG
] |= ECSPI_STATREG_TE
;
76 s
->regs
[ECSPI_STATREG
] &= ~ECSPI_STATREG_TF
;
79 static void imx_spi_rxfifo_reset(IMXSPIState
*s
)
81 fifo32_reset(&s
->rx_fifo
);
82 s
->regs
[ECSPI_STATREG
] &= ~ECSPI_STATREG_RR
;
83 s
->regs
[ECSPI_STATREG
] &= ~ECSPI_STATREG_RF
;
84 s
->regs
[ECSPI_STATREG
] &= ~ECSPI_STATREG_RO
;
87 static void imx_spi_update_irq(IMXSPIState
*s
)
91 if (fifo32_is_empty(&s
->rx_fifo
)) {
92 s
->regs
[ECSPI_STATREG
] &= ~ECSPI_STATREG_RR
;
94 s
->regs
[ECSPI_STATREG
] |= ECSPI_STATREG_RR
;
97 if (fifo32_is_full(&s
->rx_fifo
)) {
98 s
->regs
[ECSPI_STATREG
] |= ECSPI_STATREG_RF
;
100 s
->regs
[ECSPI_STATREG
] &= ~ECSPI_STATREG_RF
;
103 if (fifo32_is_empty(&s
->tx_fifo
)) {
104 s
->regs
[ECSPI_STATREG
] |= ECSPI_STATREG_TE
;
106 s
->regs
[ECSPI_STATREG
] &= ~ECSPI_STATREG_TE
;
109 if (fifo32_is_full(&s
->tx_fifo
)) {
110 s
->regs
[ECSPI_STATREG
] |= ECSPI_STATREG_TF
;
112 s
->regs
[ECSPI_STATREG
] &= ~ECSPI_STATREG_TF
;
115 level
= s
->regs
[ECSPI_STATREG
] & s
->regs
[ECSPI_INTREG
] ? 1 : 0;
117 qemu_set_irq(s
->irq
, level
);
119 DPRINTF("IRQ level is %d\n", level
);
122 static uint8_t imx_spi_selected_channel(IMXSPIState
*s
)
124 return EXTRACT(s
->regs
[ECSPI_CONREG
], ECSPI_CONREG_CHANNEL_SELECT
);
127 static uint32_t imx_spi_burst_length(IMXSPIState
*s
)
129 return EXTRACT(s
->regs
[ECSPI_CONREG
], ECSPI_CONREG_BURST_LENGTH
) + 1;
132 static bool imx_spi_is_enabled(IMXSPIState
*s
)
134 return s
->regs
[ECSPI_CONREG
] & ECSPI_CONREG_EN
;
137 static bool imx_spi_channel_is_master(IMXSPIState
*s
)
139 uint8_t mode
= EXTRACT(s
->regs
[ECSPI_CONREG
], ECSPI_CONREG_CHANNEL_MODE
);
141 return (mode
& (1 << imx_spi_selected_channel(s
))) ? true : false;
144 static bool imx_spi_is_multiple_master_burst(IMXSPIState
*s
)
146 uint8_t wave
= EXTRACT(s
->regs
[ECSPI_CONFIGREG
], ECSPI_CONFIGREG_SS_CTL
);
148 return imx_spi_channel_is_master(s
) &&
149 !(s
->regs
[ECSPI_CONREG
] & ECSPI_CONREG_SMC
) &&
150 ((wave
& (1 << imx_spi_selected_channel(s
))) ? true : false);
153 static void imx_spi_flush_txfifo(IMXSPIState
*s
)
158 DPRINTF("Begin: TX Fifo Size = %d, RX Fifo Size = %d\n",
159 fifo32_num_used(&s
->tx_fifo
), fifo32_num_used(&s
->rx_fifo
));
161 while (!fifo32_is_empty(&s
->tx_fifo
)) {
165 if (s
->burst_length
<= 0) {
166 s
->burst_length
= imx_spi_burst_length(s
);
168 DPRINTF("Burst length = %d\n", s
->burst_length
);
170 if (imx_spi_is_multiple_master_burst(s
)) {
171 s
->regs
[ECSPI_CONREG
] |= ECSPI_CONREG_XCH
;
175 tx
= fifo32_pop(&s
->tx_fifo
);
177 DPRINTF("data tx:0x%08x\n", tx
);
179 tx_burst
= MIN(s
->burst_length
, 32);
184 uint8_t byte
= tx
& 0xff;
186 DPRINTF("writing 0x%02x\n", (uint32_t)byte
);
188 /* We need to write one byte at a time */
189 byte
= ssi_transfer(s
->bus
, byte
);
191 DPRINTF("0x%02x read\n", (uint32_t)byte
);
194 rx
|= (byte
<< (index
* 8));
196 /* Remove 8 bits from the actual burst */
198 s
->burst_length
-= 8;
202 DPRINTF("data rx:0x%08x\n", rx
);
204 if (fifo32_is_full(&s
->rx_fifo
)) {
205 s
->regs
[ECSPI_STATREG
] |= ECSPI_STATREG_RO
;
207 fifo32_push(&s
->rx_fifo
, (uint8_t)rx
);
210 if (s
->burst_length
<= 0) {
211 if (!imx_spi_is_multiple_master_burst(s
)) {
212 s
->regs
[ECSPI_STATREG
] |= ECSPI_STATREG_TC
;
218 if (fifo32_is_empty(&s
->tx_fifo
)) {
219 s
->regs
[ECSPI_STATREG
] |= ECSPI_STATREG_TC
;
220 s
->regs
[ECSPI_CONREG
] &= ~ECSPI_CONREG_XCH
;
223 /* TODO: We should also use TDR and RDR bits */
225 DPRINTF("End: TX Fifo Size = %d, RX Fifo Size = %d\n",
226 fifo32_num_used(&s
->tx_fifo
), fifo32_num_used(&s
->rx_fifo
));
229 static void imx_spi_reset(DeviceState
*dev
)
231 IMXSPIState
*s
= IMX_SPI(dev
);
235 memset(s
->regs
, 0, sizeof(s
->regs
));
237 s
->regs
[ECSPI_STATREG
] = 0x00000003;
239 imx_spi_rxfifo_reset(s
);
240 imx_spi_txfifo_reset(s
);
242 imx_spi_update_irq(s
);
247 static uint64_t imx_spi_read(void *opaque
, hwaddr offset
, unsigned size
)
250 IMXSPIState
*s
= opaque
;
251 uint32_t index
= offset
>> 2;
253 if (index
>= ECSPI_MAX
) {
254 qemu_log_mask(LOG_GUEST_ERROR
, "[%s]%s: Bad register at offset 0x%"
255 HWADDR_PRIx
"\n", TYPE_IMX_SPI
, __func__
, offset
);
261 if (!imx_spi_is_enabled(s
)) {
263 } else if (fifo32_is_empty(&s
->rx_fifo
)) {
264 /* value is undefined */
267 /* read from the RX FIFO */
268 value
= fifo32_pop(&s
->rx_fifo
);
273 qemu_log_mask(LOG_GUEST_ERROR
, "[%s]%s: Trying to read from TX FIFO\n",
274 TYPE_IMX_SPI
, __func__
);
276 /* Reading from TXDATA gives 0 */
280 qemu_log_mask(LOG_GUEST_ERROR
, "[%s]%s: Trying to read from MSG FIFO\n",
281 TYPE_IMX_SPI
, __func__
);
283 /* Reading from MSGDATA gives 0 */
287 value
= s
->regs
[index
];
291 DPRINTF("reg[%s] => 0x%" PRIx32
"\n", imx_spi_reg_name(index
), value
);
293 imx_spi_update_irq(s
);
295 return (uint64_t)value
;
298 static void imx_spi_write(void *opaque
, hwaddr offset
, uint64_t value
,
301 IMXSPIState
*s
= opaque
;
302 uint32_t index
= offset
>> 2;
303 uint32_t change_mask
;
305 if (index
>= ECSPI_MAX
) {
306 qemu_log_mask(LOG_GUEST_ERROR
, "[%s]%s: Bad register at offset 0x%"
307 HWADDR_PRIx
"\n", TYPE_IMX_SPI
, __func__
, offset
);
311 DPRINTF("reg[%s] <= 0x%" PRIx32
"\n", imx_spi_reg_name(index
),
314 change_mask
= s
->regs
[index
] ^ value
;
318 qemu_log_mask(LOG_GUEST_ERROR
, "[%s]%s: Trying to write to RX FIFO\n",
319 TYPE_IMX_SPI
, __func__
);
322 if (!imx_spi_is_enabled(s
)) {
323 /* Ignore writes if device is disabled */
325 } else if (fifo32_is_full(&s
->tx_fifo
)) {
326 /* Ignore writes if queue is full */
330 fifo32_push(&s
->tx_fifo
, (uint32_t)value
);
332 if (imx_spi_channel_is_master(s
) &&
333 (s
->regs
[ECSPI_CONREG
] & ECSPI_CONREG_SMC
)) {
335 * Start emitting if current channel is master and SMC bit is
338 imx_spi_flush_txfifo(s
);
343 /* the RO and TC bits are write-one-to-clear */
344 value
&= ECSPI_STATREG_RO
| ECSPI_STATREG_TC
;
345 s
->regs
[ECSPI_STATREG
] &= ~value
;
349 s
->regs
[ECSPI_CONREG
] = value
;
351 if (!imx_spi_is_enabled(s
)) {
352 /* device is disabled, so this is a reset */
353 imx_spi_reset(DEVICE(s
));
357 if (imx_spi_channel_is_master(s
)) {
360 /* We are in master mode */
362 for (i
= 0; i
< 4; i
++) {
363 qemu_set_irq(s
->cs_lines
[i
],
364 i
== imx_spi_selected_channel(s
) ? 0 : 1);
367 if ((value
& change_mask
& ECSPI_CONREG_SMC
) &&
368 !fifo32_is_empty(&s
->tx_fifo
)) {
369 /* SMC bit is set and TX FIFO has some slots filled in */
370 imx_spi_flush_txfifo(s
);
371 } else if ((value
& change_mask
& ECSPI_CONREG_XCH
) &&
372 !(value
& ECSPI_CONREG_SMC
)) {
373 /* This is a request to start emitting */
374 imx_spi_flush_txfifo(s
);
380 /* it is not clear from the spec what MSGDATA is for */
381 /* Anyway it is not used by Linux driver */
382 /* So for now we just ignore it */
383 qemu_log_mask(LOG_UNIMP
,
384 "[%s]%s: Trying to write to MSGDATA, ignoring\n",
385 TYPE_IMX_SPI
, __func__
);
388 s
->regs
[index
] = value
;
393 imx_spi_update_irq(s
);
396 static const struct MemoryRegionOps imx_spi_ops
= {
397 .read
= imx_spi_read
,
398 .write
= imx_spi_write
,
399 .endianness
= DEVICE_NATIVE_ENDIAN
,
402 * Our device would not work correctly if the guest was doing
403 * unaligned access. This might not be a limitation on the real
404 * device but in practice there is no reason for a guest to access
405 * this device unaligned.
407 .min_access_size
= 4,
408 .max_access_size
= 4,
413 static void imx_spi_realize(DeviceState
*dev
, Error
**errp
)
415 IMXSPIState
*s
= IMX_SPI(dev
);
418 s
->bus
= ssi_create_bus(dev
, "spi");
420 memory_region_init_io(&s
->iomem
, OBJECT(dev
), &imx_spi_ops
, s
,
421 TYPE_IMX_SPI
, 0x1000);
422 sysbus_init_mmio(SYS_BUS_DEVICE(dev
), &s
->iomem
);
423 sysbus_init_irq(SYS_BUS_DEVICE(dev
), &s
->irq
);
425 ssi_auto_connect_slaves(dev
, s
->cs_lines
, s
->bus
);
427 for (i
= 0; i
< 4; ++i
) {
428 sysbus_init_irq(SYS_BUS_DEVICE(dev
), &s
->cs_lines
[i
]);
433 fifo32_create(&s
->tx_fifo
, ECSPI_FIFO_SIZE
);
434 fifo32_create(&s
->rx_fifo
, ECSPI_FIFO_SIZE
);
437 static void imx_spi_class_init(ObjectClass
*klass
, void *data
)
439 DeviceClass
*dc
= DEVICE_CLASS(klass
);
441 dc
->realize
= imx_spi_realize
;
442 dc
->vmsd
= &vmstate_imx_spi
;
443 dc
->reset
= imx_spi_reset
;
444 dc
->desc
= "i.MX SPI Controller";
447 static const TypeInfo imx_spi_info
= {
448 .name
= TYPE_IMX_SPI
,
449 .parent
= TYPE_SYS_BUS_DEVICE
,
450 .instance_size
= sizeof(IMXSPIState
),
451 .class_init
= imx_spi_class_init
,
454 static void imx_spi_register_types(void)
456 type_register_static(&imx_spi_info
);
459 type_init(imx_spi_register_types
)