2 * QEMU i8255x (PRO100) emulation
4 * Copyright (c) 2006-2007 Stefan Weil
6 * Portions of the code are copies from grub / etherboot eepro100.c
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License as published by
11 * the Free Software Foundation; either version 2 of the License, or
12 * (at your option) any later version.
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU General Public License for more details.
19 * You should have received a copy of the GNU General Public License
20 * along with this program; if not, see <http://www.gnu.org/licenses/>.
22 * Tested features (i82559):
23 * PXE boot (i386) no valid link
24 * Linux networking (i386) ok
32 * Intel 8255x 10/100 Mbps Ethernet Controller Family
33 * Open Source Software Developer Manual
36 #if defined(TARGET_I386)
37 # warning "PXE boot still not working!"
40 #include <stddef.h> /* offsetof */
43 #include "loader.h" /* rom_add_option */
46 #include "eeprom93xx.h"
48 /* Common declarations for all PCI devices. */
50 #define PCI_CONFIG_8(offset, value) \
51 (pci_conf[offset] = (value))
52 #define PCI_CONFIG_16(offset, value) \
53 (*(uint16_t *)&pci_conf[offset] = cpu_to_le16(value))
54 #define PCI_CONFIG_32(offset, value) \
55 (*(uint32_t *)&pci_conf[offset] = cpu_to_le32(value))
59 /* Debug EEPRO100 card. */
60 //~ #define DEBUG_EEPRO100
63 #define logout(fmt, ...) fprintf(stderr, "EE100\t%-24s" fmt, __func__, ## __VA_ARGS__)
65 #define logout(fmt, ...) ((void)0)
68 /* Set flags to 0 to disable debug output. */
69 #define INT 1 /* interrupt related actions */
70 #define MDI 1 /* mdi related actions */
73 #define EEPROM 1 /* eeprom related actions */
75 #define TRACE(flag, command) ((flag) ? (command) : (void)0)
77 #define missing(text) fprintf(stderr, "eepro100: feature is missing in this emulation: " text "\n")
79 #define MAX_ETH_FRAME_SIZE 1514
81 /* This driver supports several different devices which are declared here. */
82 #define i82550 0x82550
83 #define i82551 0x82551
84 #define i82557A 0x82557a
85 #define i82557B 0x82557b
86 #define i82557C 0x82557c
87 #define i82558A 0x82558a
88 #define i82558B 0x82558b
89 #define i82559A 0x82559a
90 #define i82559B 0x82559b
91 #define i82559C 0x82559c
92 #define i82559ER 0x82559e
93 #define i82562 0x82562
95 /* Use 64 word EEPROM. TODO: could be a runtime option. */
96 #define EEPROM_SIZE 64
98 #define PCI_MEM_SIZE (4 * KiB)
99 #define PCI_IO_SIZE 64
100 #define PCI_FLASH_SIZE (128 * KiB)
102 #define BIT(n) (1 << (n))
103 #define BITS(n, m) (((0xffffffffU << (31 - n)) >> (31 - n + m)) << m)
105 /* The SCB accepts the following controls for the Tx and Rx units: */
106 #define CU_NOP 0x0000 /* No operation. */
107 #define CU_START 0x0010 /* CU start. */
108 #define CU_RESUME 0x0020 /* CU resume. */
109 #define CU_STATSADDR 0x0040 /* Load dump counters address. */
110 #define CU_SHOWSTATS 0x0050 /* Dump statistical counters. */
111 #define CU_CMD_BASE 0x0060 /* Load CU base address. */
112 #define CU_DUMPSTATS 0x0070 /* Dump and reset statistical counters. */
113 #define CU_SRESUME 0x00a0 /* CU static resume. */
115 #define RU_NOP 0x0000
116 #define RX_START 0x0001
117 #define RX_RESUME 0x0002
118 #define RX_ABORT 0x0004
119 #define RX_ADDR_LOAD 0x0006
120 #define RX_RESUMENR 0x0007
121 #define INT_MASK 0x0100
122 #define DRVR_INT 0x0200 /* Driver generated interrupt. */
124 /* Offsets to the various registers.
125 All accesses need not be longword aligned. */
126 enum speedo_offsets
{
129 SCBCmd
= 2, /* Rx/Command Unit command and status. */
131 SCBPointer
= 4, /* General purpose pointer. */
132 SCBPort
= 8, /* Misc. commands and operands. */
133 SCBflash
= 12, SCBeeprom
= 14, /* EEPROM and flash memory control. */
134 SCBCtrlMDI
= 16, /* MDI interface control. */
135 SCBEarlyRx
= 20, /* Early receive byte count. */
139 /* A speedo3 transmit buffer descriptor with two buffers... */
143 uint32_t link
; /* void * */
144 uint32_t tx_desc_addr
; /* transmit buffer decsriptor array address. */
145 uint16_t tcb_bytes
; /* transmit command block byte count (in lower 14 bits */
146 uint8_t tx_threshold
; /* transmit threshold */
147 uint8_t tbd_count
; /* TBD number */
148 //~ /* This constitutes two "TBD" entries: hdr and data */
149 //~ uint32_t tx_buf_addr0; /* void *, header of frame to be transmitted. */
150 //~ int32_t tx_buf_size0; /* Length of Tx hdr. */
151 //~ uint32_t tx_buf_addr1; /* void *, data to be transmitted. */
152 //~ int32_t tx_buf_size1; /* Length of Tx data. */
155 /* Receive frame descriptor. */
159 uint32_t link
; /* struct RxFD * */
160 uint32_t rx_buf_addr
; /* void * */
163 char packet
[MAX_ETH_FRAME_SIZE
+ 4];
167 uint32_t tx_good_frames
, tx_max_collisions
, tx_late_collisions
,
168 tx_underruns
, tx_lost_crs
, tx_deferred
, tx_single_collisions
,
169 tx_multiple_collisions
, tx_total_collisions
;
170 uint32_t rx_good_frames
, rx_crc_errors
, rx_alignment_errors
,
171 rx_resource_errors
, rx_overrun_errors
, rx_cdt_errors
,
172 rx_short_frame_errors
;
173 uint32_t fc_xmt_pause
, fc_rcv_pause
, fc_rcv_unsupported
;
174 uint16_t xmt_tco_frames
, rcv_tco_frames
;
175 /* TODO: i82559 has six reserved statistics but a total of 24 dwords. */
176 uint32_t reserved
[4];
196 uint8_t mult
[8]; /* multicast mask array */
200 uint8_t scb_stat
; /* SCB stat/ack byte */
201 uint8_t int_stat
; /* PCI interrupt status */
202 /* region must not be saved by nic_save. */
203 uint32_t region
[3]; /* PCI region addresses */
206 uint32_t device
; /* device variant */
208 /* (cu_base + cu_offset) address the next command block in the command block list. */
209 uint32_t cu_base
; /* CU base address */
210 uint32_t cu_offset
; /* CU address offset */
211 /* (ru_base + ru_offset) address the RFD in the Receive Frame Area. */
212 uint32_t ru_base
; /* RU base address */
213 uint32_t ru_offset
; /* RU address offset */
214 uint32_t statsaddr
; /* pointer to eepro100_stats_t */
216 /* Statistical counters. Also used for wake-up packet (i82559). */
217 eepro100_stats_t statistics
;
223 /* Configuration bytes. */
224 uint8_t configuration
[22];
226 /* Data in mem is always in the byte order of the controller (le). */
227 uint8_t mem
[PCI_MEM_SIZE
];
228 /* vmstate for each particular nic */
229 VMStateDescription
*vmstate
;
231 /* Quasi static device properties (no need to save them). */
233 bool has_extended_tcb_support
;
236 /* Default values for MDI (PHY) registers */
237 static const uint16_t eepro100_mdi_default
[] = {
238 /* MDI Registers 0 - 6, 7 */
239 0x3000, 0x780d, 0x02a8, 0x0154, 0x05e1, 0x0000, 0x0000, 0x0000,
240 /* MDI Registers 8 - 15 */
241 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
242 /* MDI Registers 16 - 31 */
243 0x0003, 0x0000, 0x0001, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
244 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
247 /* Readonly mask for MDI (PHY) registers */
248 static const uint16_t eepro100_mdi_mask
[] = {
249 0x0000, 0xffff, 0xffff, 0xffff, 0xc01f, 0xffff, 0xffff, 0x0000,
250 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
251 0x0fff, 0x0000, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff,
252 0xffff, 0xffff, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
256 static void stl_le_phys(target_phys_addr_t addr
, uint32_t val
)
258 val
= cpu_to_le32(val
);
259 cpu_physical_memory_write(addr
, (const uint8_t *)&val
, sizeof(val
));
262 #define POLYNOMIAL 0x04c11db6
266 static int compute_mcast_idx(const uint8_t * ep
)
273 for (i
= 0; i
< 6; i
++) {
275 for (j
= 0; j
< 8; j
++) {
276 carry
= ((crc
& 0x80000000L
) ? 1 : 0) ^ (b
& 0x01);
280 crc
= ((crc
^ POLYNOMIAL
) | carry
);
287 #if defined(DEBUG_EEPRO100)
288 static const char *nic_dump(const uint8_t * buf
, unsigned size
)
290 static char dump
[3 * 16 + 1];
296 p
+= sprintf(p
, " %02x", *buf
++);
300 #endif /* DEBUG_EEPRO100 */
303 stat_ack_not_ours
= 0x00,
304 stat_ack_sw_gen
= 0x04,
306 stat_ack_cu_idle
= 0x20,
307 stat_ack_frame_rx
= 0x40,
308 stat_ack_cu_cmd_done
= 0x80,
309 stat_ack_not_present
= 0xFF,
310 stat_ack_rx
= (stat_ack_sw_gen
| stat_ack_rnr
| stat_ack_frame_rx
),
311 stat_ack_tx
= (stat_ack_cu_idle
| stat_ack_cu_cmd_done
),
314 static void disable_interrupt(EEPRO100State
* s
)
317 TRACE(INT
, logout("interrupt disabled\n"));
318 qemu_irq_lower(s
->dev
.irq
[0]);
323 static void enable_interrupt(EEPRO100State
* s
)
326 TRACE(INT
, logout("interrupt enabled\n"));
327 qemu_irq_raise(s
->dev
.irq
[0]);
332 static void eepro100_acknowledge(EEPRO100State
* s
)
334 s
->scb_stat
&= ~s
->mem
[SCBAck
];
335 s
->mem
[SCBAck
] = s
->scb_stat
;
336 if (s
->scb_stat
== 0) {
337 disable_interrupt(s
);
341 static void eepro100_interrupt(EEPRO100State
* s
, uint8_t stat
)
343 uint8_t mask
= ~s
->mem
[SCBIntmask
];
344 s
->mem
[SCBAck
] |= stat
;
345 stat
= s
->scb_stat
= s
->mem
[SCBAck
];
346 stat
&= (mask
| 0x0f);
347 //~ stat &= (~s->mem[SCBIntmask] | 0x0xf);
348 if (stat
&& (mask
& 0x01)) {
349 /* SCB mask and SCB Bit M do not disable interrupt. */
351 } else if (s
->int_stat
) {
352 disable_interrupt(s
);
356 static void eepro100_cx_interrupt(EEPRO100State
* s
)
358 /* CU completed action command. */
359 /* Transmit not ok (82557 only, not in emulation). */
360 eepro100_interrupt(s
, 0x80);
363 static void eepro100_cna_interrupt(EEPRO100State
* s
)
365 /* CU left the active state. */
366 eepro100_interrupt(s
, 0x20);
369 static void eepro100_fr_interrupt(EEPRO100State
* s
)
371 /* RU received a complete frame. */
372 eepro100_interrupt(s
, 0x40);
376 static void eepro100_rnr_interrupt(EEPRO100State
* s
)
378 /* RU is not ready. */
379 eepro100_interrupt(s
, 0x10);
383 static void eepro100_mdi_interrupt(EEPRO100State
* s
)
385 /* MDI completed read or write cycle. */
386 eepro100_interrupt(s
, 0x08);
389 static void eepro100_swi_interrupt(EEPRO100State
* s
)
391 /* Software has requested an interrupt. */
392 eepro100_interrupt(s
, 0x04);
396 static void eepro100_fcp_interrupt(EEPRO100State
* s
)
398 /* Flow control pause interrupt (82558 and later). */
399 eepro100_interrupt(s
, 0x01);
403 static void pci_reset(EEPRO100State
* s
)
405 uint32_t device
= s
->device
;
406 uint8_t *pci_conf
= s
->dev
.config
;
407 bool power_management
= 1;
409 TRACE(OTHER
, logout("%p\n", s
));
412 pci_config_set_vendor_id(pci_conf
, PCI_VENDOR_ID_INTEL
);
413 /* PCI Device ID depends on device and is set below. */
415 PCI_CONFIG_16(PCI_COMMAND
, 0x0000);
417 PCI_CONFIG_16(PCI_STATUS
, 0x2800);
418 /* PCI Revision ID */
419 PCI_CONFIG_8(PCI_REVISION_ID
, 0x08);
421 PCI_CONFIG_8(0x09, 0x00);
422 pci_config_set_class(pci_conf
, PCI_CLASS_NETWORK_ETHERNET
);
423 /* PCI Cache Line Size */
424 /* check cache line size!!! */
425 //~ PCI_CONFIG_8(0x0c, 0x00);
426 /* PCI Latency Timer */
427 PCI_CONFIG_8(0x0d, 0x20); // latency timer = 32 clocks
428 /* PCI Header Type */
429 /* BIST (built-in self test) */
430 #if defined(TARGET_I386)
431 // !!! workaround for buggy bios
432 //~ #define PCI_BASE_ADDRESS_MEM_PREFETCH 0
435 /* PCI Base Address Registers */
436 /* CSR Memory Mapped Base Address */
437 PCI_CONFIG_32(PCI_BASE_ADDRESS_0
,
438 PCI_BASE_ADDRESS_SPACE_MEMORY
|
439 PCI_BASE_ADDRESS_MEM_PREFETCH
);
440 /* CSR I/O Mapped Base Address */
441 PCI_CONFIG_32(PCI_BASE_ADDRESS_1
, PCI_BASE_ADDRESS_SPACE_IO
);
443 /* Flash Memory Mapped Base Address */
444 PCI_CONFIG_32(PCI_BASE_ADDRESS_2
,
445 0xfffe0000 | PCI_BASE_ADDRESS_SPACE_MEMORY
);
448 /* Expansion ROM Base Address (depends on boot disable!!!) */
449 PCI_CONFIG_32(0x30, 0x00000000);
450 /* Capability Pointer */
451 PCI_CONFIG_8(0x34, 0xdc);
454 PCI_CONFIG_8(0x3d, 1); // interrupt pin 0
456 PCI_CONFIG_8(0x3e, 0x08);
457 /* Maximum Latency */
458 PCI_CONFIG_8(0x3f, 0x18);
462 // TODO: check device id.
463 pci_config_set_device_id(pci_conf
, PCI_DEVICE_ID_INTEL_82551IT
);
464 /* Revision ID: 0x0c, 0x0d, 0x0e. */
465 PCI_CONFIG_8(PCI_REVISION_ID
, 0x0e);
466 // TODO: check size of statistical counters.
468 // TODO: check extended tcb support.
469 s
->has_extended_tcb_support
= 1;
472 pci_config_set_device_id(pci_conf
, PCI_DEVICE_ID_INTEL_82551IT
);
473 /* Revision ID: 0x0f, 0x10. */
474 PCI_CONFIG_8(PCI_REVISION_ID
, 0x0f);
475 // TODO: check size of statistical counters.
477 s
->has_extended_tcb_support
= 1;
480 pci_config_set_device_id(pci_conf
, PCI_DEVICE_ID_INTEL_82557
);
481 PCI_CONFIG_8(PCI_REVISION_ID
, 0x01);
482 PCI_CONFIG_8(0x34, 0x00);
483 power_management
= 0;
486 pci_config_set_device_id(pci_conf
, PCI_DEVICE_ID_INTEL_82557
);
487 PCI_CONFIG_8(PCI_REVISION_ID
, 0x02);
488 PCI_CONFIG_8(0x34, 0x00);
489 power_management
= 0;
492 pci_config_set_device_id(pci_conf
, PCI_DEVICE_ID_INTEL_82557
);
493 PCI_CONFIG_8(PCI_REVISION_ID
, 0x03);
494 PCI_CONFIG_8(0x34, 0x00);
495 power_management
= 0;
498 pci_config_set_device_id(pci_conf
, PCI_DEVICE_ID_INTEL_82557
);
499 PCI_CONFIG_16(PCI_STATUS
, 0x0290);
500 PCI_CONFIG_8(PCI_REVISION_ID
, 0x04);
502 s
->has_extended_tcb_support
= 1;
505 pci_config_set_device_id(pci_conf
, PCI_DEVICE_ID_INTEL_82557
);
506 PCI_CONFIG_16(PCI_STATUS
, 0x0290);
507 PCI_CONFIG_8(PCI_REVISION_ID
, 0x05);
509 s
->has_extended_tcb_support
= 1;
512 pci_config_set_device_id(pci_conf
, PCI_DEVICE_ID_INTEL_82557
);
513 PCI_CONFIG_16(PCI_STATUS
, 0x0290);
514 PCI_CONFIG_8(PCI_REVISION_ID
, 0x06);
516 s
->has_extended_tcb_support
= 1;
519 pci_config_set_device_id(pci_conf
, PCI_DEVICE_ID_INTEL_82557
);
520 PCI_CONFIG_16(PCI_STATUS
, 0x0290);
521 PCI_CONFIG_8(PCI_REVISION_ID
, 0x07);
523 s
->has_extended_tcb_support
= 1;
526 pci_config_set_device_id(pci_conf
, PCI_DEVICE_ID_INTEL_82557
);
527 PCI_CONFIG_16(PCI_STATUS
, 0x0290);
528 PCI_CONFIG_8(PCI_REVISION_ID
, 0x08);
529 // TODO: Windows wants revision id 0x0c.
530 PCI_CONFIG_8(PCI_REVISION_ID
, 0x0c);
532 PCI_CONFIG_16(PCI_SUBSYSTEM_VENDOR_ID
, 0x8086);
533 PCI_CONFIG_16(PCI_SUBSYSTEM_ID
, 0x0040);
536 s
->has_extended_tcb_support
= 1;
539 pci_config_set_device_id(pci_conf
, PCI_DEVICE_ID_INTEL_82551IT
);
540 PCI_CONFIG_16(PCI_STATUS
, 0x0290);
541 PCI_CONFIG_8(PCI_REVISION_ID
, 0x09);
543 s
->has_extended_tcb_support
= 1;
546 // TODO: check device id.
547 pci_config_set_device_id(pci_conf
, PCI_DEVICE_ID_INTEL_82551IT
);
548 /* TODO: wrong revision id. */
549 PCI_CONFIG_8(PCI_REVISION_ID
, 0x0e);
551 s
->has_extended_tcb_support
= 1;
554 logout("Device %X is undefined!\n", device
);
557 s
->configuration
[6] |= BIT(5);
559 if (s
->stats_size
== 80) {
560 /* TODO: check TCO Statistical Counters bit. Documentation not clear. */
561 if (s
->configuration
[6] & BIT(2)) {
562 /* TCO statistical counters. */
563 assert(s
->configuration
[6] & BIT(5));
565 if (s
->configuration
[6] & BIT(5)) {
566 /* No extended statistical counters, i82557 compatible. */
569 /* i82558 compatible. */
574 if (s
->configuration
[6] & BIT(5)) {
575 /* No extended statistical counters. */
579 assert(s
->stats_size
> 0 && s
->stats_size
<= sizeof(s
->statistics
));
581 if (power_management
) {
582 /* Power Management Capabilities */
583 PCI_CONFIG_8(0xdc, 0x01);
584 /* Next Item Pointer */
586 PCI_CONFIG_16(0xde, 0x7e21);
587 /* TODO: Power Management Control / Status. */
588 /* TODO: Ethernet Power Consumption Registers (i82559 and later). */
592 if (device
== i82557C
|| device
== i82558B
|| device
== i82559C
) {
593 // TODO: get vendor id from EEPROM for i82557C or later.
594 // TODO: get device id from EEPROM for i82557C or later.
595 // TODO: status bit 4 can be disabled by EEPROM for i82558, i82559.
596 // TODO: header type is determined by EEPROM for i82559.
597 // TODO: get subsystem id from EEPROM for i82557C or later.
598 // TODO: get subsystem vendor id from EEPROM for i82557C or later.
599 // TODO: exp. rom baddr depends on a bit in EEPROM for i82558 or later.
600 // TODO: capability pointer depends on EEPROM for i82558.
601 logout("Get device id and revision from EEPROM!!!\n");
603 #endif /* EEPROM_SIZE > 0 */
606 static void nic_selective_reset(EEPRO100State
* s
)
609 uint16_t *eeprom_contents
= eeprom93xx_data(s
->eeprom
);
610 //~ eeprom93xx_reset(s->eeprom);
611 memcpy(eeprom_contents
, s
->conf
.macaddr
.a
, 6);
612 eeprom_contents
[0xa] = 0x4000;
613 if (s
->device
== i82557B
|| s
->device
== i82557C
)
614 eeprom_contents
[5] = 0x0100;
616 for (i
= 0; i
< EEPROM_SIZE
- 1; i
++) {
617 sum
+= eeprom_contents
[i
];
619 eeprom_contents
[EEPROM_SIZE
- 1] = 0xbaba - sum
;
620 TRACE(EEPROM
, logout("checksum=0x%04x\n", eeprom_contents
[EEPROM_SIZE
- 1]));
622 memset(s
->mem
, 0, sizeof(s
->mem
));
623 uint32_t val
= BIT(21);
624 memcpy(&s
->mem
[SCBCtrlMDI
], &val
, sizeof(val
));
626 assert(sizeof(s
->mdimem
) == sizeof(eepro100_mdi_default
));
627 memcpy(&s
->mdimem
[0], &eepro100_mdi_default
[0], sizeof(s
->mdimem
));
630 static void nic_reset(void *opaque
)
632 EEPRO100State
*s
= opaque
;
633 TRACE(OTHER
, logout("%p\n", s
));
634 nic_selective_reset(s
);
637 #if defined(DEBUG_EEPRO100)
638 static const char * const e100_reg
[PCI_IO_SIZE
/ 4] = {
642 "EEPROM/Flash Control",
644 "Receive DMA Byte Count",
646 "General Status/Control"
649 static char *regname(uint32_t addr
)
652 if (addr
< PCI_IO_SIZE
) {
653 const char *r
= e100_reg
[addr
/ 4];
655 snprintf(buf
, sizeof(buf
), "%s+%u", r
, addr
% 4);
657 snprintf(buf
, sizeof(buf
), "0x%02x", addr
);
660 snprintf(buf
, sizeof(buf
), "??? 0x%08x", addr
);
664 #endif /* DEBUG_EEPRO100 */
667 static uint16_t eepro100_read_status(EEPRO100State
* s
)
669 uint16_t val
= s
->status
;
670 TRACE(OTHER
, logout("val=0x%04x\n", val
));
674 static void eepro100_write_status(EEPRO100State
* s
, uint16_t val
)
676 TRACE(OTHER
, logout("val=0x%04x\n", val
));
681 /*****************************************************************************
685 ****************************************************************************/
688 static uint16_t eepro100_read_command(EEPRO100State
* s
)
690 uint16_t val
= 0xffff;
691 //~ TRACE(OTHER, logout("val=0x%04x\n", val));
696 /* Commands that can be put in a command list entry. */
701 CmdMulticastList
= 3,
703 CmdTDR
= 5, /* load microcode */
707 /* And some extra flags: */
708 CmdSuspend
= 0x4000, /* Suspend after completion. */
709 CmdIntr
= 0x2000, /* Interrupt after completion. */
710 CmdTxFlex
= 0x0008, /* Use "Flexible mode" for CmdTx command. */
713 static cu_state_t
get_cu_state(EEPRO100State
* s
)
715 return ((s
->mem
[SCBStatus
] >> 6) & 0x03);
718 static void set_cu_state(EEPRO100State
* s
, cu_state_t state
)
720 s
->mem
[SCBStatus
] = (s
->mem
[SCBStatus
] & 0x3f) + (state
<< 6);
723 static ru_state_t
get_ru_state(EEPRO100State
* s
)
725 return ((s
->mem
[SCBStatus
] >> 2) & 0x0f);
728 static void set_ru_state(EEPRO100State
* s
, ru_state_t state
)
730 s
->mem
[SCBStatus
] = (s
->mem
[SCBStatus
] & 0xc3) + (state
<< 2);
733 static void dump_statistics(EEPRO100State
* s
)
735 /* Dump statistical data. Most data is never changed by the emulation
736 * and always 0, so we first just copy the whole block and then those
737 * values which really matter.
738 * Number of data should check configuration!!!
740 cpu_physical_memory_write(s
->statsaddr
,
741 (uint8_t *) & s
->statistics
, s
->stats_size
);
742 stl_le_phys(s
->statsaddr
+ 0, s
->statistics
.tx_good_frames
);
743 stl_le_phys(s
->statsaddr
+ 36, s
->statistics
.rx_good_frames
);
744 stl_le_phys(s
->statsaddr
+ 48, s
->statistics
.rx_resource_errors
);
745 stl_le_phys(s
->statsaddr
+ 60, s
->statistics
.rx_short_frame_errors
);
746 //~ stw_le_phys(s->statsaddr + 76, s->statistics.xmt_tco_frames);
747 //~ stw_le_phys(s->statsaddr + 78, s->statistics.rcv_tco_frames);
748 //~ missing("CU dump statistical counters");
751 static void action_command(EEPRO100State
*s
)
754 uint32_t cb_address
= s
->cu_base
+ s
->cu_offset
;
756 cpu_physical_memory_read(cb_address
, (uint8_t *) & tx
, sizeof(tx
));
757 uint16_t status
= le16_to_cpu(tx
.status
);
758 uint16_t command
= le16_to_cpu(tx
.command
);
760 ("val=0x%02x (cu start), status=0x%04x, command=0x%04x, link=0x%08x\n",
761 val
, status
, command
, tx
.link
);
762 bool bit_el
= ((command
& 0x8000) != 0);
763 bool bit_s
= ((command
& 0x4000) != 0);
764 bool bit_i
= ((command
& 0x2000) != 0);
765 bool bit_nc
= ((command
& 0x0010) != 0);
767 //~ bool bit_sf = ((command & 0x0008) != 0);
768 uint16_t cmd
= command
& 0x0007;
769 s
->cu_offset
= le32_to_cpu(tx
.link
);
775 cpu_physical_memory_read(cb_address
+ 8, &s
->conf
.macaddr
.a
[0], 6);
776 TRACE(OTHER
, logout("macaddr: %s\n", nic_dump(&s
->macaddr
[0], 6)));
779 cpu_physical_memory_read(cb_address
+ 8, &s
->configuration
[0],
780 sizeof(s
->configuration
));
781 TRACE(OTHER
, logout("configuration: %s\n", nic_dump(&s
->configuration
[0], 16)));
783 case CmdMulticastList
:
784 //~ missing("multicast list");
788 uint32_t tbd_array
= le32_to_cpu(tx
.tx_desc_addr
);
789 uint16_t tcb_bytes
= (le16_to_cpu(tx
.tcb_bytes
) & 0x3fff);
791 ("transmit, TBD array address 0x%08x, TCB byte count 0x%04x, TBD count %u\n",
792 tbd_array
, tcb_bytes
, tx
.tbd_count
));
795 missing("CmdTx: NC = 0");
800 if (tcb_bytes
> 2600) {
801 logout("TCB byte count too large, using 2600\n");
804 /* Next assertion fails for local configuration. */
805 //~ assert((tcb_bytes > 0) || (tbd_array != 0xffffffff));
806 if (!((tcb_bytes
> 0) || (tbd_array
!= 0xffffffff))) {
808 ("illegal values of TBD array address and TCB byte count!\n");
810 // sends larger than MAX_ETH_FRAME_SIZE are allowed, up to 2600 bytes
813 uint32_t tbd_address
= cb_address
+ 0x10;
814 assert(tcb_bytes
<= sizeof(buf
));
815 while (size
< tcb_bytes
) {
816 uint32_t tx_buffer_address
= ldl_phys(tbd_address
);
817 uint16_t tx_buffer_size
= lduw_phys(tbd_address
+ 4);
818 //~ uint16_t tx_buffer_el = lduw_phys(tbd_address + 6);
821 ("TBD (simplified mode): buffer address 0x%08x, size 0x%04x\n",
822 tx_buffer_address
, tx_buffer_size
));
823 tx_buffer_size
= MIN(tx_buffer_size
, sizeof(buf
) - size
);
824 cpu_physical_memory_read(tx_buffer_address
, &buf
[size
],
826 size
+= tx_buffer_size
;
828 if (tbd_array
== 0xffffffff) {
829 /* Simplified mode. Was already handled by code above. */
832 uint8_t tbd_count
= 0;
833 if (s
->has_extended_tcb_support
&& !(s
->configuration
[6] & BIT(4))) {
834 /* Extended Flexible TCB. */
835 for (; tbd_count
< 2; tbd_count
++) {
836 uint32_t tx_buffer_address
= ldl_phys(tbd_address
);
837 uint16_t tx_buffer_size
= lduw_phys(tbd_address
+ 4);
838 uint16_t tx_buffer_el
= lduw_phys(tbd_address
+ 6);
841 ("TBD (extended flexible mode): buffer address 0x%08x, size 0x%04x\n",
842 tx_buffer_address
, tx_buffer_size
));
843 tx_buffer_size
= MIN(tx_buffer_size
, sizeof(buf
) - size
);
844 cpu_physical_memory_read(tx_buffer_address
, &buf
[size
],
846 size
+= tx_buffer_size
;
847 if (tx_buffer_el
& 1) {
852 tbd_address
= tbd_array
;
853 for (; tbd_count
< tx
.tbd_count
; tbd_count
++) {
854 uint32_t tx_buffer_address
= ldl_phys(tbd_address
);
855 uint16_t tx_buffer_size
= lduw_phys(tbd_address
+ 4);
856 uint16_t tx_buffer_el
= lduw_phys(tbd_address
+ 6);
859 ("TBD (flexible mode): buffer address 0x%08x, size 0x%04x\n",
860 tx_buffer_address
, tx_buffer_size
));
861 tx_buffer_size
= MIN(tx_buffer_size
, sizeof(buf
) - size
);
862 cpu_physical_memory_read(tx_buffer_address
, &buf
[size
],
864 size
+= tx_buffer_size
;
865 if (tx_buffer_el
& 1) {
870 TRACE(RXTX
, logout("%p sending frame, len=%d,%s\n", s
, size
, nic_dump(buf
, size
)));
871 qemu_send_packet(&s
->nic
->nc
, buf
, size
);
872 s
->statistics
.tx_good_frames
++;
873 /* Transmit with bad status would raise an CX/TNO interrupt.
874 * (82557 only). Emulation never has bad status. */
875 //~ eepro100_cx_interrupt(s);
878 TRACE(OTHER
, logout("load microcode\n"));
879 /* Starting with offset 8, the command contains
880 * 64 dwords microcode which we just ignore here. */
883 missing("undefined command");
887 /* Write new status. */
888 stw_phys(cb_address
, status
| 0x8000 | (success
? 0x2000 : 0));
890 /* CU completed action. */
891 eepro100_cx_interrupt(s
);
894 /* CU becomes idle. Terminate command loop. */
895 set_cu_state(s
, cu_idle
);
896 eepro100_cna_interrupt(s
);
899 /* CU becomes suspended. Terminate command loop. */
900 set_cu_state(s
, cu_suspended
);
901 eepro100_cna_interrupt(s
);
904 /* More entries in list. */
905 TRACE(OTHER
, logout("CU list with at least one more entry\n"));
908 TRACE(OTHER
, logout("CU list empty\n"));
909 /* List is empty. Now CU is idle or suspended. */
912 static void eepro100_cu_command(EEPRO100State
* s
, uint8_t val
)
919 if (get_cu_state(s
) != cu_idle
) {
920 /* Intel documentation says that CU must be idle for the CU
921 * start command. Intel driver for Linux also starts the CU
922 * from suspended state. */
923 logout("CU state is %u, should be %u\n", get_cu_state(s
), cu_idle
);
924 //~ assert(!"wrong CU state");
926 set_cu_state(s
, cu_active
);
927 s
->cu_offset
= s
->pointer
;
931 if (get_cu_state(s
) != cu_suspended
) {
932 logout("bad CU resume from CU state %u\n", get_cu_state(s
));
933 /* Workaround for bad Linux eepro100 driver which resumes
934 * from idle state. */
935 //~ missing("cu resume");
936 set_cu_state(s
, cu_suspended
);
938 if (get_cu_state(s
) == cu_suspended
) {
939 TRACE(OTHER
, logout("CU resuming\n"));
940 set_cu_state(s
, cu_active
);
945 /* Load dump counters address. */
946 s
->statsaddr
= s
->pointer
;
947 TRACE(OTHER
, logout("val=0x%02x (status address)\n", val
));
950 /* Dump statistical counters. */
951 TRACE(OTHER
, logout("val=0x%02x (dump stats)\n", val
));
953 stl_le_phys(s
->statsaddr
+ s
->stats_size
, 0xa005);
957 TRACE(OTHER
, logout("val=0x%02x (CU base address)\n", val
));
958 s
->cu_base
= s
->pointer
;
961 /* Dump and reset statistical counters. */
962 TRACE(OTHER
, logout("val=0x%02x (dump stats and reset)\n", val
));
964 stl_le_phys(s
->statsaddr
+ s
->stats_size
, 0xa007);
965 memset(&s
->statistics
, 0, sizeof(s
->statistics
));
968 /* CU static resume. */
969 missing("CU static resume");
972 missing("Undefined CU command");
976 static void eepro100_ru_command(EEPRO100State
* s
, uint8_t val
)
984 if (get_ru_state(s
) != ru_idle
) {
985 logout("RU state is %u, should be %u\n", get_ru_state(s
), ru_idle
);
986 //~ assert(!"wrong RU state");
988 set_ru_state(s
, ru_ready
);
989 s
->ru_offset
= s
->pointer
;
990 TRACE(OTHER
, logout("val=0x%02x (rx start)\n", val
));
994 if (get_ru_state(s
) != ru_suspended
) {
995 logout("RU state is %u, should be %u\n", get_ru_state(s
),
997 //~ assert(!"wrong RU state");
999 set_ru_state(s
, ru_ready
);
1003 TRACE(OTHER
, logout("val=0x%02x (RU base address)\n", val
));
1004 s
->ru_base
= s
->pointer
;
1007 logout("val=0x%02x (undefined RU command)\n", val
);
1008 missing("Undefined SU command");
1012 static void eepro100_write_command(EEPRO100State
* s
, uint8_t val
)
1014 eepro100_ru_command(s
, val
& 0x0f);
1015 eepro100_cu_command(s
, val
& 0xf0);
1017 TRACE(OTHER
, logout("val=0x%02x\n", val
));
1019 /* Clear command byte after command was accepted. */
1023 /*****************************************************************************
1027 ****************************************************************************/
1029 #define EEPROM_CS 0x02
1030 #define EEPROM_SK 0x01
1031 #define EEPROM_DI 0x04
1032 #define EEPROM_DO 0x08
1034 static uint16_t eepro100_read_eeprom(EEPRO100State
* s
)
1037 memcpy(&val
, &s
->mem
[SCBeeprom
], sizeof(val
));
1038 if (eeprom93xx_read(s
->eeprom
)) {
1043 TRACE(EEPROM
, logout("val=0x%04x\n", val
));
1047 static void eepro100_write_eeprom(eeprom_t
* eeprom
, uint8_t val
)
1049 TRACE(EEPROM
, logout("val=0x%02x\n", val
));
1051 /* mask unwriteable bits */
1052 //~ val = SET_MASKED(val, 0x31, eeprom->value);
1054 int eecs
= ((val
& EEPROM_CS
) != 0);
1055 int eesk
= ((val
& EEPROM_SK
) != 0);
1056 int eedi
= ((val
& EEPROM_DI
) != 0);
1057 eeprom93xx_write(eeprom
, eecs
, eesk
, eedi
);
1060 static void eepro100_write_pointer(EEPRO100State
* s
, uint32_t val
)
1062 s
->pointer
= le32_to_cpu(val
);
1063 TRACE(OTHER
, logout("val=0x%08x\n", val
));
1066 /*****************************************************************************
1070 ****************************************************************************/
1072 #if defined(DEBUG_EEPRO100)
1073 static const char * const mdi_op_name
[] = {
1080 static const char * const mdi_reg_name
[] = {
1083 "PHY Identification (Word 1)",
1084 "PHY Identification (Word 2)",
1085 "Auto-Negotiation Advertisement",
1086 "Auto-Negotiation Link Partner Ability",
1087 "Auto-Negotiation Expansion"
1090 static const char *reg2name(uint8_t reg
)
1092 static char buffer
[10];
1093 const char *p
= buffer
;
1094 if (reg
< ARRAY_SIZE(mdi_reg_name
)) {
1095 p
= mdi_reg_name
[reg
];
1097 snprintf(buffer
, sizeof(buffer
), "reg=0x%02x", reg
);
1101 #endif /* DEBUG_EEPRO100 */
1103 static uint32_t eepro100_read_mdi(EEPRO100State
* s
)
1106 memcpy(&val
, &s
->mem
[0x10], sizeof(val
));
1108 #ifdef DEBUG_EEPRO100
1109 uint8_t raiseint
= (val
& BIT(29)) >> 29;
1110 uint8_t opcode
= (val
& BITS(27, 26)) >> 26;
1111 uint8_t phy
= (val
& BITS(25, 21)) >> 21;
1112 uint8_t reg
= (val
& BITS(20, 16)) >> 16;
1113 uint16_t data
= (val
& BITS(15, 0));
1115 /* Emulation takes no time to finish MDI transaction. */
1117 TRACE(MDI
, logout("val=0x%08x (int=%u, %s, phy=%u, %s, data=0x%04x\n",
1118 val
, raiseint
, mdi_op_name
[opcode
], phy
,
1119 reg2name(reg
), data
));
1123 static void eepro100_write_mdi(EEPRO100State
* s
, uint32_t val
)
1125 uint8_t raiseint
= (val
& BIT(29)) >> 29;
1126 uint8_t opcode
= (val
& BITS(27, 26)) >> 26;
1127 uint8_t phy
= (val
& BITS(25, 21)) >> 21;
1128 uint8_t reg
= (val
& BITS(20, 16)) >> 16;
1129 uint16_t data
= (val
& BITS(15, 0));
1130 TRACE(MDI
, logout("val=0x%08x (int=%u, %s, phy=%u, %s, data=0x%04x\n",
1131 val
, raiseint
, mdi_op_name
[opcode
], phy
, reg2name(reg
), data
));
1133 /* Unsupported PHY address. */
1134 //~ logout("phy must be 1 but is %u\n", phy);
1136 } else if (opcode
!= 1 && opcode
!= 2) {
1137 /* Unsupported opcode. */
1138 logout("opcode must be 1 or 2 but is %u\n", opcode
);
1140 } else if (reg
> 6) {
1141 /* Unsupported register. */
1142 logout("register must be 0...6 but is %u\n", reg
);
1145 TRACE(MDI
, logout("val=0x%08x (int=%u, %s, phy=%u, %s, data=0x%04x\n",
1146 val
, raiseint
, mdi_op_name
[opcode
], phy
,
1147 reg2name(reg
), data
));
1151 case 0: /* Control Register */
1152 if (data
& 0x8000) {
1153 /* Reset status and control registers to default. */
1154 s
->mdimem
[0] = eepro100_mdi_default
[0];
1155 s
->mdimem
[1] = eepro100_mdi_default
[1];
1156 data
= s
->mdimem
[reg
];
1158 /* Restart Auto Configuration = Normal Operation */
1162 case 1: /* Status Register */
1163 missing("not writable");
1164 data
= s
->mdimem
[reg
];
1166 case 2: /* PHY Identification Register (Word 1) */
1167 case 3: /* PHY Identification Register (Word 2) */
1168 missing("not implemented");
1170 case 4: /* Auto-Negotiation Advertisement Register */
1171 case 5: /* Auto-Negotiation Link Partner Ability Register */
1173 case 6: /* Auto-Negotiation Expansion Register */
1175 missing("not implemented");
1177 s
->mdimem
[reg
] = data
;
1178 } else if (opcode
== 2) {
1181 case 0: /* Control Register */
1182 if (data
& 0x8000) {
1183 /* Reset status and control registers to default. */
1184 s
->mdimem
[0] = eepro100_mdi_default
[0];
1185 s
->mdimem
[1] = eepro100_mdi_default
[1];
1188 case 1: /* Status Register */
1189 s
->mdimem
[reg
] |= 0x0020;
1191 case 2: /* PHY Identification Register (Word 1) */
1192 case 3: /* PHY Identification Register (Word 2) */
1193 case 4: /* Auto-Negotiation Advertisement Register */
1195 case 5: /* Auto-Negotiation Link Partner Ability Register */
1196 s
->mdimem
[reg
] = 0x41fe;
1198 case 6: /* Auto-Negotiation Expansion Register */
1199 s
->mdimem
[reg
] = 0x0001;
1202 data
= s
->mdimem
[reg
];
1204 /* Emulation takes no time to finish MDI transaction.
1205 * Set MDI bit in SCB status register. */
1206 s
->mem
[SCBAck
] |= 0x08;
1209 eepro100_mdi_interrupt(s
);
1212 val
= (val
& 0xffff0000) + data
;
1213 memcpy(&s
->mem
[0x10], &val
, sizeof(val
));
1216 /*****************************************************************************
1220 ****************************************************************************/
1222 #define PORT_SOFTWARE_RESET 0
1223 #define PORT_SELFTEST 1
1224 #define PORT_SELECTIVE_RESET 2
1226 #define PORT_SELECTION_MASK 3
1229 uint32_t st_sign
; /* Self Test Signature */
1230 uint32_t st_result
; /* Self Test Results */
1231 } eepro100_selftest_t
;
1233 static uint32_t eepro100_read_port(EEPRO100State
* s
)
1238 static void eepro100_write_port(EEPRO100State
* s
, uint32_t val
)
1240 val
= le32_to_cpu(val
);
1241 uint32_t address
= (val
& ~PORT_SELECTION_MASK
);
1242 uint8_t selection
= (val
& PORT_SELECTION_MASK
);
1243 switch (selection
) {
1244 case PORT_SOFTWARE_RESET
:
1248 TRACE(OTHER
, logout("selftest address=0x%08x\n", address
));
1249 eepro100_selftest_t data
;
1250 cpu_physical_memory_read(address
, (uint8_t *) & data
, sizeof(data
));
1251 data
.st_sign
= 0xffffffff;
1253 cpu_physical_memory_write(address
, (uint8_t *) & data
, sizeof(data
));
1255 case PORT_SELECTIVE_RESET
:
1256 TRACE(OTHER
, logout("selective reset, selftest address=0x%08x\n", address
));
1257 nic_selective_reset(s
);
1260 logout("val=0x%08x\n", val
);
1261 missing("unknown port selection");
1265 /*****************************************************************************
1267 * General hardware emulation.
1269 ****************************************************************************/
1271 static uint8_t eepro100_read1(EEPRO100State
* s
, uint32_t addr
)
1274 if (addr
<= sizeof(s
->mem
) - sizeof(val
)) {
1275 memcpy(&val
, &s
->mem
[addr
], sizeof(val
));
1280 //~ val = eepro100_read_status(s);
1281 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1284 //~ val = eepro100_read_status(s);
1285 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1288 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1289 //~ val = eepro100_read_command(s);
1292 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1295 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1298 val
= eepro100_read_eeprom(s
);
1300 case 0x1b: /* PMDR (power management driver register) */
1302 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1304 case 0x1d: /* general status register */
1305 /* 100 Mbps full duplex, valid link */
1307 TRACE(OTHER
, logout("addr=General Status val=%02x\n", val
));
1310 logout("addr=%s val=0x%02x\n", regname(addr
), val
);
1311 missing("unknown byte read");
1316 static uint16_t eepro100_read2(EEPRO100State
* s
, uint32_t addr
)
1319 if (addr
<= sizeof(s
->mem
) - sizeof(val
)) {
1320 memcpy(&val
, &s
->mem
[addr
], sizeof(val
));
1325 //~ val = eepro100_read_status(s);
1327 TRACE(OTHER
, logout("addr=%s val=0x%04x\n", regname(addr
), val
));
1330 val
= eepro100_read_eeprom(s
);
1331 TRACE(OTHER
, logout("addr=%s val=0x%04x\n", regname(addr
), val
));
1334 logout("addr=%s val=0x%04x\n", regname(addr
), val
);
1335 missing("unknown word read");
1340 static uint32_t eepro100_read4(EEPRO100State
* s
, uint32_t addr
)
1343 if (addr
<= sizeof(s
->mem
) - sizeof(val
)) {
1344 memcpy(&val
, &s
->mem
[addr
], sizeof(val
));
1349 //~ val = eepro100_read_status(s);
1350 TRACE(OTHER
, logout("addr=%s val=0x%08x\n", regname(addr
), val
));
1353 //~ val = eepro100_read_pointer(s);
1354 TRACE(OTHER
, logout("addr=%s val=0x%08x\n", regname(addr
), val
));
1357 val
= eepro100_read_port(s
);
1358 TRACE(OTHER
, logout("addr=%s val=0x%08x\n", regname(addr
), val
));
1361 val
= eepro100_read_mdi(s
);
1364 logout("addr=%s val=0x%08x\n", regname(addr
), val
);
1365 missing("unknown longword read");
1370 static void eepro100_write1(EEPRO100State
* s
, uint32_t addr
, uint8_t val
)
1372 if (addr
<= sizeof(s
->mem
) - sizeof(val
)) {
1373 memcpy(&s
->mem
[addr
], &val
, sizeof(val
));
1376 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1380 //~ eepro100_write_status(s, val);
1383 eepro100_acknowledge(s
);
1386 eepro100_write_command(s
, val
);
1390 eepro100_swi_interrupt(s
);
1392 eepro100_interrupt(s
, 0);
1395 case SCBFlow
: /* does not exist on 82557 */
1399 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1402 eepro100_write_eeprom(s
->eeprom
, val
);
1405 logout("addr=%s val=0x%02x\n", regname(addr
), val
);
1406 missing("unknown byte write");
1410 static void eepro100_write2(EEPRO100State
* s
, uint32_t addr
, uint16_t val
)
1412 if (addr
<= sizeof(s
->mem
) - sizeof(val
)) {
1413 memcpy(&s
->mem
[addr
], &val
, sizeof(val
));
1416 TRACE(OTHER
, logout("addr=%s val=0x%04x\n", regname(addr
), val
));
1420 //~ eepro100_write_status(s, val);
1421 eepro100_acknowledge(s
);
1424 eepro100_write_command(s
, val
);
1425 eepro100_write1(s
, SCBIntmask
, val
>> 8);
1428 eepro100_write_eeprom(s
->eeprom
, val
);
1431 logout("addr=%s val=0x%04x\n", regname(addr
), val
);
1432 missing("unknown word write");
1436 static void eepro100_write4(EEPRO100State
* s
, uint32_t addr
, uint32_t val
)
1438 if (addr
<= sizeof(s
->mem
) - sizeof(val
)) {
1439 memcpy(&s
->mem
[addr
], &val
, sizeof(val
));
1444 eepro100_write_pointer(s
, val
);
1447 TRACE(OTHER
, logout("addr=%s val=0x%08x\n", regname(addr
), val
));
1448 eepro100_write_port(s
, val
);
1451 eepro100_write_mdi(s
, val
);
1454 logout("addr=%s val=0x%08x\n", regname(addr
), val
);
1455 missing("unknown longword write");
1459 /*****************************************************************************
1463 ****************************************************************************/
1465 static uint32_t ioport_read1(void *opaque
, uint32_t addr
)
1467 EEPRO100State
*s
= opaque
;
1468 //~ logout("addr=%s\n", regname(addr));
1469 return eepro100_read1(s
, addr
- s
->region
[1]);
1472 static uint32_t ioport_read2(void *opaque
, uint32_t addr
)
1474 EEPRO100State
*s
= opaque
;
1475 return eepro100_read2(s
, addr
- s
->region
[1]);
1478 static uint32_t ioport_read4(void *opaque
, uint32_t addr
)
1480 EEPRO100State
*s
= opaque
;
1481 return eepro100_read4(s
, addr
- s
->region
[1]);
1484 static void ioport_write1(void *opaque
, uint32_t addr
, uint32_t val
)
1486 EEPRO100State
*s
= opaque
;
1487 //~ logout("addr=%s val=0x%02x\n", regname(addr), val);
1488 eepro100_write1(s
, addr
- s
->region
[1], val
);
1491 static void ioport_write2(void *opaque
, uint32_t addr
, uint32_t val
)
1493 EEPRO100State
*s
= opaque
;
1494 eepro100_write2(s
, addr
- s
->region
[1], val
);
1497 static void ioport_write4(void *opaque
, uint32_t addr
, uint32_t val
)
1499 EEPRO100State
*s
= opaque
;
1500 eepro100_write4(s
, addr
- s
->region
[1], val
);
1503 /***********************************************************/
1504 /* PCI EEPRO100 definitions */
1506 static void pci_map(PCIDevice
* pci_dev
, int region_num
,
1507 pcibus_t addr
, pcibus_t size
, int type
)
1509 EEPRO100State
*s
= DO_UPCAST(EEPRO100State
, dev
, pci_dev
);
1511 TRACE(OTHER
, logout("region %d, addr=0x%08"FMT_PCIBUS
", "
1512 "size=0x%08"FMT_PCIBUS
", type=%d\n",
1513 region_num
, addr
, size
, type
));
1515 assert(region_num
== 1);
1516 register_ioport_write(addr
, size
, 1, ioport_write1
, s
);
1517 register_ioport_read(addr
, size
, 1, ioport_read1
, s
);
1518 register_ioport_write(addr
, size
, 2, ioport_write2
, s
);
1519 register_ioport_read(addr
, size
, 2, ioport_read2
, s
);
1520 register_ioport_write(addr
, size
, 4, ioport_write4
, s
);
1521 register_ioport_read(addr
, size
, 4, ioport_read4
, s
);
1523 s
->region
[region_num
] = addr
;
1526 /*****************************************************************************
1528 * Memory mapped I/O.
1530 ****************************************************************************/
1532 static void pci_mmio_writeb(void *opaque
, target_phys_addr_t addr
, uint32_t val
)
1534 EEPRO100State
*s
= opaque
;
1535 //~ logout("addr=%s val=0x%02x\n", regname(addr), val);
1536 eepro100_write1(s
, addr
, val
);
1539 static void pci_mmio_writew(void *opaque
, target_phys_addr_t addr
, uint32_t val
)
1541 EEPRO100State
*s
= opaque
;
1542 //~ logout("addr=%s val=0x%02x\n", regname(addr), val);
1543 eepro100_write2(s
, addr
, val
);
1546 static void pci_mmio_writel(void *opaque
, target_phys_addr_t addr
, uint32_t val
)
1548 EEPRO100State
*s
= opaque
;
1549 //~ logout("addr=%s val=0x%02x\n", regname(addr), val);
1550 eepro100_write4(s
, addr
, val
);
1553 static uint32_t pci_mmio_readb(void *opaque
, target_phys_addr_t addr
)
1555 EEPRO100State
*s
= opaque
;
1556 //~ logout("addr=%s\n", regname(addr));
1557 return eepro100_read1(s
, addr
);
1560 static uint32_t pci_mmio_readw(void *opaque
, target_phys_addr_t addr
)
1562 EEPRO100State
*s
= opaque
;
1563 //~ logout("addr=%s\n", regname(addr));
1564 return eepro100_read2(s
, addr
);
1567 static uint32_t pci_mmio_readl(void *opaque
, target_phys_addr_t addr
)
1569 EEPRO100State
*s
= opaque
;
1570 //~ logout("addr=%s\n", regname(addr));
1571 return eepro100_read4(s
, addr
);
1574 static CPUWriteMemoryFunc
* const pci_mmio_write
[] = {
1580 static CPUReadMemoryFunc
* const pci_mmio_read
[] = {
1586 static void pci_mmio_map(PCIDevice
* pci_dev
, int region_num
,
1587 pcibus_t addr
, pcibus_t size
, int type
)
1589 EEPRO100State
*s
= DO_UPCAST(EEPRO100State
, dev
, pci_dev
);
1591 TRACE(OTHER
, logout("region %d, addr=0x%08"FMT_PCIBUS
", "
1592 "size=0x%08"FMT_PCIBUS
", type=%d\n",
1593 region_num
, addr
, size
, type
));
1595 if (region_num
== 0) {
1596 /* Map control / status registers. */
1597 cpu_register_physical_memory(addr
, size
, s
->mmio_index
);
1598 s
->region
[region_num
] = addr
;
1602 static int nic_can_receive(VLANClientState
*nc
)
1604 EEPRO100State
*s
= DO_UPCAST(NICState
, nc
, nc
)->opaque
;
1605 TRACE(RXTX
, logout("%p\n", s
));
1606 return get_ru_state(s
) == ru_ready
;
1607 //~ return !eepro100_buffer_full(s);
1610 static ssize_t
nic_receive(VLANClientState
*nc
, const uint8_t * buf
, size_t size
)
1613 * - Magic packets should set bit 30 in power management driver register.
1614 * - Interesting packets should set bit 29 in power management driver register.
1616 EEPRO100State
*s
= DO_UPCAST(NICState
, nc
, nc
)->opaque
;
1617 uint16_t rfd_status
= 0xa000;
1618 static const uint8_t broadcast_macaddr
[6] =
1619 { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
1621 /* TODO: check multiple IA bit. */
1622 if (s
->configuration
[20] & BIT(6)) {
1623 missing("Multiple IA bit");
1627 if (s
->configuration
[8] & 0x80) {
1628 /* CSMA is disabled. */
1629 logout("%p received while CSMA is disabled\n", s
);
1631 } else if (size
< 64 && (s
->configuration
[7] & 1)) {
1632 /* Short frame and configuration byte 7/0 (discard short receive) set:
1633 * Short frame is discarded */
1634 logout("%p received short frame (%zu byte)\n", s
, size
);
1635 s
->statistics
.rx_short_frame_errors
++;
1637 } else if ((size
> MAX_ETH_FRAME_SIZE
+ 4) && !(s
->configuration
[18] & 8)) {
1638 /* Long frame and configuration byte 18/3 (long receive ok) not set:
1639 * Long frames are discarded. */
1640 logout("%p received long frame (%zu byte), ignored\n", s
, size
);
1642 } else if (memcmp(buf
, s
->conf
.macaddr
.a
, 6) == 0) { // !!!
1643 /* Frame matches individual address. */
1644 /* TODO: check configuration byte 15/4 (ignore U/L). */
1645 TRACE(RXTX
, logout("%p received frame for me, len=%zu\n", s
, size
));
1646 } else if (memcmp(buf
, broadcast_macaddr
, 6) == 0) {
1647 /* Broadcast frame. */
1648 TRACE(RXTX
, logout("%p received broadcast, len=%zu\n", s
, size
));
1649 rfd_status
|= 0x0002;
1650 } else if (buf
[0] & 0x01) { // !!!
1651 /* Multicast frame. */
1652 TRACE(RXTX
, logout("%p received multicast, len=%zu\n", s
, size
));
1653 /* TODO: check multicast all bit. */
1654 if (s
->configuration
[21] & BIT(3)) {
1655 missing("Multicast All bit");
1657 int mcast_idx
= compute_mcast_idx(buf
);
1658 if (!(s
->mult
[mcast_idx
>> 3] & (1 << (mcast_idx
& 7)))) {
1661 rfd_status
|= 0x0002;
1662 } else if (s
->configuration
[15] & 1) {
1663 /* Promiscuous: receive all. */
1664 TRACE(RXTX
, logout("%p received frame in promiscuous mode, len=%zu\n", s
, size
));
1665 rfd_status
|= 0x0004;
1667 TRACE(RXTX
, logout("%p received frame, ignored, len=%zu,%s\n", s
, size
,
1668 nic_dump(buf
, size
)));
1672 if (get_ru_state(s
) != ru_ready
) {
1673 /* No resources available. */
1674 logout("no resources, state=%u\n", get_ru_state(s
));
1675 s
->statistics
.rx_resource_errors
++;
1676 //~ assert(!"no resources");
1680 //~ $3 = {status = 0x0, command = 0xc000, link = 0x2d220, rx_buf_addr = 0x207dc, count = 0x0, size = 0x5f8, packet = {0x0 <repeats 1518 times>}}
1682 cpu_physical_memory_read(s
->ru_base
+ s
->ru_offset
, (uint8_t *) & rx
,
1683 offsetof(eepro100_rx_t
, packet
));
1684 uint16_t rfd_command
= le16_to_cpu(rx
.command
);
1685 uint16_t rfd_size
= le16_to_cpu(rx
.size
);
1687 if (size
> rfd_size
) {
1688 logout("Receive buffer (%" PRId16
" bytes) too small for data "
1689 "(%zu bytes); data truncated\n", rfd_size
, size
);
1693 rfd_status
|= 0x0080;
1695 TRACE(OTHER
, logout("command 0x%04x, link 0x%08x, addr 0x%08x, size %u\n",
1696 rfd_command
, rx
.link
, rx
.rx_buf_addr
, rfd_size
));
1697 stw_phys(s
->ru_base
+ s
->ru_offset
+ offsetof(eepro100_rx_t
, status
),
1699 stw_phys(s
->ru_base
+ s
->ru_offset
+ offsetof(eepro100_rx_t
, count
), size
);
1700 /* Early receive interrupt not supported. */
1701 //~ eepro100_er_interrupt(s);
1702 /* Receive CRC Transfer not supported. */
1703 if (s
->configuration
[18] & 4) {
1704 missing("Receive CRC Transfer");
1707 /* TODO: check stripping enable bit. */
1708 //~ assert(!(s->configuration[17] & 1));
1709 cpu_physical_memory_write(s
->ru_base
+ s
->ru_offset
+
1710 offsetof(eepro100_rx_t
, packet
), buf
, size
);
1711 s
->statistics
.rx_good_frames
++;
1712 eepro100_fr_interrupt(s
);
1713 s
->ru_offset
= le32_to_cpu(rx
.link
);
1714 if (rfd_command
& 0x8000) {
1715 /* EL bit is set, so this was the last frame. */
1716 logout("receive: Running out of frames\n");
1717 set_ru_state(s
, ru_suspended
);
1719 if (rfd_command
& 0x4000) {
1721 set_ru_state(s
, ru_suspended
);
1726 static const VMStateDescription vmstate_eepro100
= {
1728 .minimum_version_id
= 2,
1729 .minimum_version_id_old
= 2,
1730 .fields
= (VMStateField
[]) {
1731 VMSTATE_PCI_DEVICE(dev
, EEPRO100State
),
1733 VMSTATE_BUFFER(mult
, EEPRO100State
),
1734 VMSTATE_BUFFER(mem
, EEPRO100State
),
1735 /* Save all members of struct between scb_stat and mem. */
1736 VMSTATE_UINT8(scb_stat
, EEPRO100State
),
1737 VMSTATE_UINT8(int_stat
, EEPRO100State
),
1738 VMSTATE_UNUSED(3*4),
1739 VMSTATE_MACADDR(conf
.macaddr
, EEPRO100State
),
1740 VMSTATE_UNUSED(19*4),
1741 VMSTATE_UINT16_ARRAY(mdimem
, EEPRO100State
, 32),
1742 /* The eeprom should be saved and restored by its own routines. */
1743 VMSTATE_UINT32(device
, EEPRO100State
),
1744 /* TODO check device. */
1745 VMSTATE_UINT32(pointer
, EEPRO100State
),
1746 VMSTATE_UINT32(cu_base
, EEPRO100State
),
1747 VMSTATE_UINT32(cu_offset
, EEPRO100State
),
1748 VMSTATE_UINT32(ru_base
, EEPRO100State
),
1749 VMSTATE_UINT32(ru_offset
, EEPRO100State
),
1750 VMSTATE_UINT32(statsaddr
, EEPRO100State
),
1751 /* Save eepro100_stats_t statistics. */
1752 VMSTATE_UINT32(statistics
.tx_good_frames
, EEPRO100State
),
1753 VMSTATE_UINT32(statistics
.tx_max_collisions
, EEPRO100State
),
1754 VMSTATE_UINT32(statistics
.tx_late_collisions
, EEPRO100State
),
1755 VMSTATE_UINT32(statistics
.tx_underruns
, EEPRO100State
),
1756 VMSTATE_UINT32(statistics
.tx_lost_crs
, EEPRO100State
),
1757 VMSTATE_UINT32(statistics
.tx_deferred
, EEPRO100State
),
1758 VMSTATE_UINT32(statistics
.tx_single_collisions
, EEPRO100State
),
1759 VMSTATE_UINT32(statistics
.tx_multiple_collisions
, EEPRO100State
),
1760 VMSTATE_UINT32(statistics
.tx_total_collisions
, EEPRO100State
),
1761 VMSTATE_UINT32(statistics
.rx_good_frames
, EEPRO100State
),
1762 VMSTATE_UINT32(statistics
.rx_crc_errors
, EEPRO100State
),
1763 VMSTATE_UINT32(statistics
.rx_alignment_errors
, EEPRO100State
),
1764 VMSTATE_UINT32(statistics
.rx_resource_errors
, EEPRO100State
),
1765 VMSTATE_UINT32(statistics
.rx_overrun_errors
, EEPRO100State
),
1766 VMSTATE_UINT32(statistics
.rx_cdt_errors
, EEPRO100State
),
1767 VMSTATE_UINT32(statistics
.rx_short_frame_errors
, EEPRO100State
),
1768 VMSTATE_UINT32(statistics
.fc_xmt_pause
, EEPRO100State
),
1769 VMSTATE_UINT32(statistics
.fc_rcv_pause
, EEPRO100State
),
1770 VMSTATE_UINT32(statistics
.fc_rcv_unsupported
, EEPRO100State
),
1771 VMSTATE_UINT16(statistics
.xmt_tco_frames
, EEPRO100State
),
1772 VMSTATE_UINT16(statistics
.rcv_tco_frames
, EEPRO100State
),
1774 VMSTATE_UINT16(status
, EEPRO100State
),
1776 /* Configuration bytes. */
1777 VMSTATE_BUFFER(configuration
, EEPRO100State
),
1778 VMSTATE_END_OF_LIST()
1782 static void nic_cleanup(VLANClientState
*nc
)
1784 EEPRO100State
*s
= DO_UPCAST(NICState
, nc
, nc
)->opaque
;
1789 static int pci_nic_uninit(PCIDevice
*pci_dev
)
1791 EEPRO100State
*s
= DO_UPCAST(EEPRO100State
, dev
, pci_dev
);
1793 cpu_unregister_io_memory(s
->mmio_index
);
1794 vmstate_unregister(s
->vmstate
, s
);
1795 eeprom93xx_free(s
->eeprom
);
1796 qemu_del_vlan_client(&s
->nic
->nc
);
1800 static NetClientInfo net_eepro100_info
= {
1801 .type
= NET_CLIENT_TYPE_NIC
,
1802 .size
= sizeof(NICState
),
1803 .can_receive
= nic_can_receive
,
1804 .receive
= nic_receive
,
1805 .cleanup
= nic_cleanup
,
1808 static int nic_init(PCIDevice
*pci_dev
, uint32_t device
)
1810 EEPRO100State
*s
= DO_UPCAST(EEPRO100State
, dev
, pci_dev
);
1812 TRACE(OTHER
, logout("\n"));
1818 /* Add 64 * 2 EEPROM. i82557 and i82558 support a 64 word EEPROM,
1819 * i82559 and later support 64 or 256 word EEPROM. */
1820 s
->eeprom
= eeprom93xx_new(EEPROM_SIZE
);
1822 /* Handler for memory-mapped I/O */
1824 cpu_register_io_memory(pci_mmio_read
, pci_mmio_write
, s
);
1826 pci_register_bar(&s
->dev
, 0, PCI_MEM_SIZE
,
1827 PCI_BASE_ADDRESS_SPACE_MEMORY
|
1828 PCI_BASE_ADDRESS_MEM_PREFETCH
, pci_mmio_map
);
1829 pci_register_bar(&s
->dev
, 1, PCI_IO_SIZE
, PCI_BASE_ADDRESS_SPACE_IO
,
1831 pci_register_bar(&s
->dev
, 2, PCI_FLASH_SIZE
, PCI_BASE_ADDRESS_SPACE_MEMORY
,
1834 qemu_macaddr_default_if_unset(&s
->conf
.macaddr
);
1835 logout("macaddr: %s\n", nic_dump(&s
->macaddr
[0], 6));
1836 assert(s
->region
[1] == 0);
1840 s
->nic
= qemu_new_nic(&net_eepro100_info
, &s
->conf
,
1841 pci_dev
->qdev
.info
->name
, pci_dev
->qdev
.id
, s
);
1843 qemu_format_nic_info_str(&s
->nic
->nc
, s
->conf
.macaddr
.a
);
1844 TRACE(OTHER
, logout("%s\n", s
->nic
->nc
.info_str
));
1846 qemu_register_reset(nic_reset
, s
);
1848 s
->vmstate
= qemu_malloc(sizeof(vmstate_eepro100
));
1849 memcpy(s
->vmstate
, &vmstate_eepro100
, sizeof(vmstate_eepro100
));
1850 s
->vmstate
->name
= s
->nic
->nc
.model
;
1851 vmstate_register(-1, s
->vmstate
, s
);
1853 if (!pci_dev
->qdev
.hotplugged
) {
1854 static int loaded
= 0;
1857 snprintf(fname
, sizeof(fname
), "pxe-%s.bin", s
->nic
->nc
.model
);
1858 rom_add_option(fname
);
1865 static int pci_i82550_init(PCIDevice
*pci_dev
)
1867 return nic_init(pci_dev
, i82550
);
1870 static int pci_i82551_init(PCIDevice
*pci_dev
)
1872 return nic_init(pci_dev
, i82551
);
1875 static int pci_i82557a_init(PCIDevice
*pci_dev
)
1877 return nic_init(pci_dev
, i82557A
);
1880 static int pci_i82557b_init(PCIDevice
*pci_dev
)
1882 return nic_init(pci_dev
, i82557B
);
1885 static int pci_i82557c_init(PCIDevice
*pci_dev
)
1887 return nic_init(pci_dev
, i82557C
);
1890 static int pci_i82558a_init(PCIDevice
*pci_dev
)
1892 return nic_init(pci_dev
, i82558A
);
1895 static int pci_i82558b_init(PCIDevice
*pci_dev
)
1897 return nic_init(pci_dev
, i82558B
);
1900 static int pci_i82559a_init(PCIDevice
*pci_dev
)
1902 return nic_init(pci_dev
, i82559A
);
1905 static int pci_i82559b_init(PCIDevice
*pci_dev
)
1907 return nic_init(pci_dev
, i82559B
);
1910 static int pci_i82559c_init(PCIDevice
*pci_dev
)
1912 return nic_init(pci_dev
, i82559C
);
1915 static int pci_i82559er_init(PCIDevice
*pci_dev
)
1917 return nic_init(pci_dev
, i82559ER
);
1920 static int pci_i82562_init(PCIDevice
*pci_dev
)
1922 return nic_init(pci_dev
, i82562
);
1925 static PCIDeviceInfo eepro100_info
[] = {
1927 .qdev
.name
= "i82550",
1928 .qdev
.size
= sizeof(EEPRO100State
),
1929 .init
= pci_i82550_init
,
1930 .exit
= pci_nic_uninit
,
1931 .qdev
.props
= (Property
[]) {
1932 DEFINE_NIC_PROPERTIES(EEPRO100State
, conf
),
1933 DEFINE_PROP_END_OF_LIST(),
1936 .qdev
.name
= "i82551",
1937 .qdev
.size
= sizeof(EEPRO100State
),
1938 .init
= pci_i82551_init
,
1939 .exit
= pci_nic_uninit
,
1940 .qdev
.props
= (Property
[]) {
1941 DEFINE_NIC_PROPERTIES(EEPRO100State
, conf
),
1942 DEFINE_PROP_END_OF_LIST(),
1945 .qdev
.name
= "i82557a",
1946 .qdev
.size
= sizeof(EEPRO100State
),
1947 .init
= pci_i82557a_init
,
1948 .exit
= pci_nic_uninit
,
1949 .qdev
.props
= (Property
[]) {
1950 DEFINE_NIC_PROPERTIES(EEPRO100State
, conf
),
1951 DEFINE_PROP_END_OF_LIST(),
1954 .qdev
.name
= "i82557b",
1955 .qdev
.size
= sizeof(EEPRO100State
),
1956 .init
= pci_i82557b_init
,
1957 .exit
= pci_nic_uninit
,
1958 .qdev
.props
= (Property
[]) {
1959 DEFINE_NIC_PROPERTIES(EEPRO100State
, conf
),
1960 DEFINE_PROP_END_OF_LIST(),
1963 .qdev
.name
= "i82557c",
1964 .qdev
.size
= sizeof(EEPRO100State
),
1965 .init
= pci_i82557c_init
,
1966 .exit
= pci_nic_uninit
,
1967 .qdev
.props
= (Property
[]) {
1968 DEFINE_NIC_PROPERTIES(EEPRO100State
, conf
),
1969 DEFINE_PROP_END_OF_LIST(),
1972 .qdev
.name
= "i82558a",
1973 .qdev
.size
= sizeof(EEPRO100State
),
1974 .init
= pci_i82558a_init
,
1975 .exit
= pci_nic_uninit
,
1976 .qdev
.props
= (Property
[]) {
1977 DEFINE_NIC_PROPERTIES(EEPRO100State
, conf
),
1978 DEFINE_PROP_END_OF_LIST(),
1981 .qdev
.name
= "i82558b",
1982 .qdev
.size
= sizeof(EEPRO100State
),
1983 .init
= pci_i82558b_init
,
1984 .exit
= pci_nic_uninit
,
1985 .qdev
.props
= (Property
[]) {
1986 DEFINE_NIC_PROPERTIES(EEPRO100State
, conf
),
1987 DEFINE_PROP_END_OF_LIST(),
1990 .qdev
.name
= "i82559a",
1991 .qdev
.size
= sizeof(EEPRO100State
),
1992 .init
= pci_i82559a_init
,
1993 .exit
= pci_nic_uninit
,
1994 .qdev
.props
= (Property
[]) {
1995 DEFINE_NIC_PROPERTIES(EEPRO100State
, conf
),
1996 DEFINE_PROP_END_OF_LIST(),
1999 .qdev
.name
= "i82559b",
2000 .qdev
.size
= sizeof(EEPRO100State
),
2001 .init
= pci_i82559b_init
,
2002 .exit
= pci_nic_uninit
,
2003 .qdev
.props
= (Property
[]) {
2004 DEFINE_NIC_PROPERTIES(EEPRO100State
, conf
),
2005 DEFINE_PROP_END_OF_LIST(),
2008 .qdev
.name
= "i82559c",
2009 .qdev
.size
= sizeof(EEPRO100State
),
2010 .init
= pci_i82559c_init
,
2011 .exit
= pci_nic_uninit
,
2012 .qdev
.props
= (Property
[]) {
2013 DEFINE_NIC_PROPERTIES(EEPRO100State
, conf
),
2014 DEFINE_PROP_END_OF_LIST(),
2017 .qdev
.name
= "i82559er",
2018 .qdev
.size
= sizeof(EEPRO100State
),
2019 .init
= pci_i82559er_init
,
2020 .exit
= pci_nic_uninit
,
2021 .qdev
.props
= (Property
[]) {
2022 DEFINE_NIC_PROPERTIES(EEPRO100State
, conf
),
2023 DEFINE_PROP_END_OF_LIST(),
2026 .qdev
.name
= "i82562",
2027 .qdev
.size
= sizeof(EEPRO100State
),
2028 .init
= pci_i82562_init
,
2029 .exit
= pci_nic_uninit
,
2030 .qdev
.props
= (Property
[]) {
2031 DEFINE_NIC_PROPERTIES(EEPRO100State
, conf
),
2032 DEFINE_PROP_END_OF_LIST(),
2039 static void eepro100_register_devices(void)
2041 pci_qdev_register_many(eepro100_info
);
2044 device_init(eepro100_register_devices
)