2 * Faraday FTGMAC100 Gigabit Ethernet
4 * Copyright (C) 2016-2017, IBM Corporation.
6 * Based on Coldfire Fast Ethernet Controller emulation.
8 * Copyright (c) 2007 CodeSourcery.
10 * This code is licensed under the GPL version 2 or later. See the
11 * COPYING file in the top-level directory.
14 #include "qemu/osdep.h"
16 #include "hw/net/ftgmac100.h"
17 #include "sysemu/dma.h"
18 #include "qapi/error.h"
20 #include "qemu/module.h"
21 #include "net/checksum.h"
23 #include "hw/net/mii.h"
24 #include "hw/qdev-properties.h"
25 #include "migration/vmstate.h"
33 #define FTGMAC100_ISR 0x00
34 #define FTGMAC100_IER 0x04
35 #define FTGMAC100_MAC_MADR 0x08
36 #define FTGMAC100_MAC_LADR 0x0c
37 #define FTGMAC100_MATH0 0x10
38 #define FTGMAC100_MATH1 0x14
39 #define FTGMAC100_NPTXPD 0x18
40 #define FTGMAC100_RXPD 0x1C
41 #define FTGMAC100_NPTXR_BADR 0x20
42 #define FTGMAC100_RXR_BADR 0x24
43 #define FTGMAC100_HPTXPD 0x28
44 #define FTGMAC100_HPTXR_BADR 0x2c
45 #define FTGMAC100_ITC 0x30
46 #define FTGMAC100_APTC 0x34
47 #define FTGMAC100_DBLAC 0x38
48 #define FTGMAC100_REVR 0x40
49 #define FTGMAC100_FEAR1 0x44
50 #define FTGMAC100_RBSR 0x4c
51 #define FTGMAC100_TPAFCR 0x48
53 #define FTGMAC100_MACCR 0x50
54 #define FTGMAC100_MACSR 0x54
55 #define FTGMAC100_PHYCR 0x60
56 #define FTGMAC100_PHYDATA 0x64
57 #define FTGMAC100_FCR 0x68
60 * Interrupt status register & interrupt enable register
62 #define FTGMAC100_INT_RPKT_BUF (1 << 0)
63 #define FTGMAC100_INT_RPKT_FIFO (1 << 1)
64 #define FTGMAC100_INT_NO_RXBUF (1 << 2)
65 #define FTGMAC100_INT_RPKT_LOST (1 << 3)
66 #define FTGMAC100_INT_XPKT_ETH (1 << 4)
67 #define FTGMAC100_INT_XPKT_FIFO (1 << 5)
68 #define FTGMAC100_INT_NO_NPTXBUF (1 << 6)
69 #define FTGMAC100_INT_XPKT_LOST (1 << 7)
70 #define FTGMAC100_INT_AHB_ERR (1 << 8)
71 #define FTGMAC100_INT_PHYSTS_CHG (1 << 9)
72 #define FTGMAC100_INT_NO_HPTXBUF (1 << 10)
75 * Automatic polling timer control register
77 #define FTGMAC100_APTC_RXPOLL_CNT(x) ((x) & 0xf)
78 #define FTGMAC100_APTC_RXPOLL_TIME_SEL (1 << 4)
79 #define FTGMAC100_APTC_TXPOLL_CNT(x) (((x) >> 8) & 0xf)
80 #define FTGMAC100_APTC_TXPOLL_TIME_SEL (1 << 12)
83 * PHY control register
85 #define FTGMAC100_PHYCR_MIIRD (1 << 26)
86 #define FTGMAC100_PHYCR_MIIWR (1 << 27)
88 #define FTGMAC100_PHYCR_DEV(x) (((x) >> 16) & 0x1f)
89 #define FTGMAC100_PHYCR_REG(x) (((x) >> 21) & 0x1f)
94 #define FTGMAC100_PHYDATA_MIIWDATA(x) ((x) & 0xffff)
95 #define FTGMAC100_PHYDATA_MIIRDATA(x) (((x) >> 16) & 0xffff)
98 * PHY control register - New MDC/MDIO interface
100 #define FTGMAC100_PHYCR_NEW_DATA(x) (((x) >> 16) & 0xffff)
101 #define FTGMAC100_PHYCR_NEW_FIRE (1 << 15)
102 #define FTGMAC100_PHYCR_NEW_ST_22 (1 << 12)
103 #define FTGMAC100_PHYCR_NEW_OP(x) (((x) >> 10) & 3)
104 #define FTGMAC100_PHYCR_NEW_OP_WRITE 0x1
105 #define FTGMAC100_PHYCR_NEW_OP_READ 0x2
106 #define FTGMAC100_PHYCR_NEW_DEV(x) (((x) >> 5) & 0x1f)
107 #define FTGMAC100_PHYCR_NEW_REG(x) ((x) & 0x1f)
112 #define FTGMAC100_REVR_NEW_MDIO_INTERFACE (1 << 31)
115 * MAC control register
117 #define FTGMAC100_MACCR_TXDMA_EN (1 << 0)
118 #define FTGMAC100_MACCR_RXDMA_EN (1 << 1)
119 #define FTGMAC100_MACCR_TXMAC_EN (1 << 2)
120 #define FTGMAC100_MACCR_RXMAC_EN (1 << 3)
121 #define FTGMAC100_MACCR_RM_VLAN (1 << 4)
122 #define FTGMAC100_MACCR_HPTXR_EN (1 << 5)
123 #define FTGMAC100_MACCR_LOOP_EN (1 << 6)
124 #define FTGMAC100_MACCR_ENRX_IN_HALFTX (1 << 7)
125 #define FTGMAC100_MACCR_FULLDUP (1 << 8)
126 #define FTGMAC100_MACCR_GIGA_MODE (1 << 9)
127 #define FTGMAC100_MACCR_CRC_APD (1 << 10) /* not needed */
128 #define FTGMAC100_MACCR_RX_RUNT (1 << 12)
129 #define FTGMAC100_MACCR_JUMBO_LF (1 << 13)
130 #define FTGMAC100_MACCR_RX_ALL (1 << 14)
131 #define FTGMAC100_MACCR_HT_MULTI_EN (1 << 15)
132 #define FTGMAC100_MACCR_RX_MULTIPKT (1 << 16)
133 #define FTGMAC100_MACCR_RX_BROADPKT (1 << 17)
134 #define FTGMAC100_MACCR_DISCARD_CRCERR (1 << 18)
135 #define FTGMAC100_MACCR_FAST_MODE (1 << 19)
136 #define FTGMAC100_MACCR_SW_RST (1 << 31)
139 * Transmit descriptor
141 #define FTGMAC100_TXDES0_TXBUF_SIZE(x) ((x) & 0x3fff)
142 #define FTGMAC100_TXDES0_EDOTR (1 << 15)
143 #define FTGMAC100_TXDES0_CRC_ERR (1 << 19)
144 #define FTGMAC100_TXDES0_LTS (1 << 28)
145 #define FTGMAC100_TXDES0_FTS (1 << 29)
146 #define FTGMAC100_TXDES0_EDOTR_ASPEED (1 << 30)
147 #define FTGMAC100_TXDES0_TXDMA_OWN (1 << 31)
149 #define FTGMAC100_TXDES1_VLANTAG_CI(x) ((x) & 0xffff)
150 #define FTGMAC100_TXDES1_INS_VLANTAG (1 << 16)
151 #define FTGMAC100_TXDES1_TCP_CHKSUM (1 << 17)
152 #define FTGMAC100_TXDES1_UDP_CHKSUM (1 << 18)
153 #define FTGMAC100_TXDES1_IP_CHKSUM (1 << 19)
154 #define FTGMAC100_TXDES1_LLC (1 << 22)
155 #define FTGMAC100_TXDES1_TX2FIC (1 << 30)
156 #define FTGMAC100_TXDES1_TXIC (1 << 31)
161 #define FTGMAC100_RXDES0_VDBC 0x3fff
162 #define FTGMAC100_RXDES0_EDORR (1 << 15)
163 #define FTGMAC100_RXDES0_MULTICAST (1 << 16)
164 #define FTGMAC100_RXDES0_BROADCAST (1 << 17)
165 #define FTGMAC100_RXDES0_RX_ERR (1 << 18)
166 #define FTGMAC100_RXDES0_CRC_ERR (1 << 19)
167 #define FTGMAC100_RXDES0_FTL (1 << 20)
168 #define FTGMAC100_RXDES0_RUNT (1 << 21)
169 #define FTGMAC100_RXDES0_RX_ODD_NB (1 << 22)
170 #define FTGMAC100_RXDES0_FIFO_FULL (1 << 23)
171 #define FTGMAC100_RXDES0_PAUSE_OPCODE (1 << 24)
172 #define FTGMAC100_RXDES0_PAUSE_FRAME (1 << 25)
173 #define FTGMAC100_RXDES0_LRS (1 << 28)
174 #define FTGMAC100_RXDES0_FRS (1 << 29)
175 #define FTGMAC100_RXDES0_EDORR_ASPEED (1 << 30)
176 #define FTGMAC100_RXDES0_RXPKT_RDY (1 << 31)
178 #define FTGMAC100_RXDES1_VLANTAG_CI 0xffff
179 #define FTGMAC100_RXDES1_PROT_MASK (0x3 << 20)
180 #define FTGMAC100_RXDES1_PROT_NONIP (0x0 << 20)
181 #define FTGMAC100_RXDES1_PROT_IP (0x1 << 20)
182 #define FTGMAC100_RXDES1_PROT_TCPIP (0x2 << 20)
183 #define FTGMAC100_RXDES1_PROT_UDPIP (0x3 << 20)
184 #define FTGMAC100_RXDES1_LLC (1 << 22)
185 #define FTGMAC100_RXDES1_DF (1 << 23)
186 #define FTGMAC100_RXDES1_VLANTAG_AVAIL (1 << 24)
187 #define FTGMAC100_RXDES1_TCP_CHKSUM_ERR (1 << 25)
188 #define FTGMAC100_RXDES1_UDP_CHKSUM_ERR (1 << 26)
189 #define FTGMAC100_RXDES1_IP_CHKSUM_ERR (1 << 27)
192 * Receive and transmit Buffer Descriptor
197 uint32_t des2
; /* not used by HW */
202 * Specific RTL8211E MII Registers
204 #define RTL8211E_MII_PHYCR 16 /* PHY Specific Control */
205 #define RTL8211E_MII_PHYSR 17 /* PHY Specific Status */
206 #define RTL8211E_MII_INER 18 /* Interrupt Enable */
207 #define RTL8211E_MII_INSR 19 /* Interrupt Status */
208 #define RTL8211E_MII_RXERC 24 /* Receive Error Counter */
209 #define RTL8211E_MII_LDPSR 27 /* Link Down Power Saving */
210 #define RTL8211E_MII_EPAGSR 30 /* Extension Page Select */
211 #define RTL8211E_MII_PAGSEL 31 /* Page Select */
214 * RTL8211E Interrupt Status
216 #define PHY_INT_AUTONEG_ERROR (1 << 15)
217 #define PHY_INT_PAGE_RECV (1 << 12)
218 #define PHY_INT_AUTONEG_COMPLETE (1 << 11)
219 #define PHY_INT_LINK_STATUS (1 << 10)
220 #define PHY_INT_ERROR (1 << 9)
221 #define PHY_INT_DOWN (1 << 8)
222 #define PHY_INT_JABBER (1 << 0)
225 * Max frame size for the receiving buffer
227 #define FTGMAC100_MAX_FRAME_SIZE 9220
229 /* Limits depending on the type of the frame
231 * 9216 for Jumbo frames (+ 4 for VLAN)
232 * 1518 for other frames (+ 4 for VLAN)
234 static int ftgmac100_max_frame_size(FTGMAC100State
*s
, uint16_t proto
)
236 int max
= (s
->maccr
& FTGMAC100_MACCR_JUMBO_LF
? 9216 : 1518);
238 return max
+ (proto
== ETH_P_VLAN
? 4 : 0);
241 static void ftgmac100_update_irq(FTGMAC100State
*s
)
243 qemu_set_irq(s
->irq
, s
->isr
& s
->ier
);
247 * The MII phy could raise a GPIO to the processor which in turn
248 * could be handled as an interrpt by the OS.
249 * For now we don't handle any GPIO/interrupt line, so the OS will
250 * have to poll for the PHY status.
252 static void phy_update_irq(FTGMAC100State
*s
)
254 ftgmac100_update_irq(s
);
257 static void phy_update_link(FTGMAC100State
*s
)
259 /* Autonegotiation status mirrors link status. */
260 if (qemu_get_queue(s
->nic
)->link_down
) {
261 s
->phy_status
&= ~(MII_BMSR_LINK_ST
| MII_BMSR_AN_COMP
);
262 s
->phy_int
|= PHY_INT_DOWN
;
264 s
->phy_status
|= (MII_BMSR_LINK_ST
| MII_BMSR_AN_COMP
);
265 s
->phy_int
|= PHY_INT_AUTONEG_COMPLETE
;
270 static void ftgmac100_set_link(NetClientState
*nc
)
272 phy_update_link(FTGMAC100(qemu_get_nic_opaque(nc
)));
275 static void phy_reset(FTGMAC100State
*s
)
277 s
->phy_status
= (MII_BMSR_100TX_FD
| MII_BMSR_100TX_HD
| MII_BMSR_10T_FD
|
278 MII_BMSR_10T_HD
| MII_BMSR_EXTSTAT
| MII_BMSR_MFPS
|
279 MII_BMSR_AN_COMP
| MII_BMSR_AUTONEG
| MII_BMSR_LINK_ST
|
281 s
->phy_control
= (MII_BMCR_AUTOEN
| MII_BMCR_FD
| MII_BMCR_SPEED1000
);
282 s
->phy_advertise
= (MII_ANAR_PAUSE_ASYM
| MII_ANAR_PAUSE
| MII_ANAR_TXFD
|
283 MII_ANAR_TX
| MII_ANAR_10FD
| MII_ANAR_10
|
289 static uint16_t do_phy_read(FTGMAC100State
*s
, uint8_t reg
)
294 case MII_BMCR
: /* Basic Control */
295 val
= s
->phy_control
;
297 case MII_BMSR
: /* Basic Status */
300 case MII_PHYID1
: /* ID1 */
301 val
= RTL8211E_PHYID1
;
303 case MII_PHYID2
: /* ID2 */
304 val
= RTL8211E_PHYID2
;
306 case MII_ANAR
: /* Auto-neg advertisement */
307 val
= s
->phy_advertise
;
309 case MII_ANLPAR
: /* Auto-neg Link Partner Ability */
310 val
= (MII_ANLPAR_ACK
| MII_ANLPAR_PAUSE
| MII_ANLPAR_TXFD
|
311 MII_ANLPAR_TX
| MII_ANLPAR_10FD
| MII_ANLPAR_10
|
314 case MII_ANER
: /* Auto-neg Expansion */
317 case MII_CTRL1000
: /* 1000BASE-T control */
318 val
= (MII_CTRL1000_HALF
| MII_CTRL1000_FULL
);
320 case MII_STAT1000
: /* 1000BASE-T status */
321 val
= MII_STAT1000_FULL
;
323 case RTL8211E_MII_INSR
: /* Interrupt status. */
328 case RTL8211E_MII_INER
: /* Interrupt enable */
329 val
= s
->phy_int_mask
;
331 case RTL8211E_MII_PHYCR
:
332 case RTL8211E_MII_PHYSR
:
333 case RTL8211E_MII_RXERC
:
334 case RTL8211E_MII_LDPSR
:
335 case RTL8211E_MII_EPAGSR
:
336 case RTL8211E_MII_PAGSEL
:
337 qemu_log_mask(LOG_UNIMP
, "%s: reg %d not implemented\n",
342 qemu_log_mask(LOG_GUEST_ERROR
, "%s: Bad address at offset %d\n",
351 #define MII_BMCR_MASK (MII_BMCR_LOOPBACK | MII_BMCR_SPEED100 | \
352 MII_BMCR_SPEED | MII_BMCR_AUTOEN | MII_BMCR_PDOWN | \
353 MII_BMCR_FD | MII_BMCR_CTST)
354 #define MII_ANAR_MASK 0x2d7f
356 static void do_phy_write(FTGMAC100State
*s
, uint8_t reg
, uint16_t val
)
359 case MII_BMCR
: /* Basic Control */
360 if (val
& MII_BMCR_RESET
) {
363 s
->phy_control
= val
& MII_BMCR_MASK
;
364 /* Complete autonegotiation immediately. */
365 if (val
& MII_BMCR_AUTOEN
) {
366 s
->phy_status
|= MII_BMSR_AN_COMP
;
370 case MII_ANAR
: /* Auto-neg advertisement */
371 s
->phy_advertise
= (val
& MII_ANAR_MASK
) | MII_ANAR_TX
;
373 case RTL8211E_MII_INER
: /* Interrupt enable */
374 s
->phy_int_mask
= val
& 0xff;
377 case RTL8211E_MII_PHYCR
:
378 case RTL8211E_MII_PHYSR
:
379 case RTL8211E_MII_RXERC
:
380 case RTL8211E_MII_LDPSR
:
381 case RTL8211E_MII_EPAGSR
:
382 case RTL8211E_MII_PAGSEL
:
383 qemu_log_mask(LOG_UNIMP
, "%s: reg %d not implemented\n",
387 qemu_log_mask(LOG_GUEST_ERROR
, "%s: Bad address at offset %d\n",
393 static void do_phy_new_ctl(FTGMAC100State
*s
)
398 if (!(s
->phycr
& FTGMAC100_PHYCR_NEW_ST_22
)) {
399 qemu_log_mask(LOG_UNIMP
, "%s: unsupported ST code\n", __func__
);
404 if (!(s
->phycr
& FTGMAC100_PHYCR_NEW_FIRE
)) {
408 reg
= FTGMAC100_PHYCR_NEW_REG(s
->phycr
);
409 data
= FTGMAC100_PHYCR_NEW_DATA(s
->phycr
);
411 switch (FTGMAC100_PHYCR_NEW_OP(s
->phycr
)) {
412 case FTGMAC100_PHYCR_NEW_OP_WRITE
:
413 do_phy_write(s
, reg
, data
);
415 case FTGMAC100_PHYCR_NEW_OP_READ
:
416 s
->phydata
= do_phy_read(s
, reg
) & 0xffff;
419 qemu_log_mask(LOG_GUEST_ERROR
, "%s: invalid OP code %08x\n",
423 s
->phycr
&= ~FTGMAC100_PHYCR_NEW_FIRE
;
426 static void do_phy_ctl(FTGMAC100State
*s
)
428 uint8_t reg
= FTGMAC100_PHYCR_REG(s
->phycr
);
430 if (s
->phycr
& FTGMAC100_PHYCR_MIIWR
) {
431 do_phy_write(s
, reg
, s
->phydata
& 0xffff);
432 s
->phycr
&= ~FTGMAC100_PHYCR_MIIWR
;
433 } else if (s
->phycr
& FTGMAC100_PHYCR_MIIRD
) {
434 s
->phydata
= do_phy_read(s
, reg
) << 16;
435 s
->phycr
&= ~FTGMAC100_PHYCR_MIIRD
;
437 qemu_log_mask(LOG_GUEST_ERROR
, "%s: no OP code %08x\n",
442 static int ftgmac100_read_bd(FTGMAC100Desc
*bd
, dma_addr_t addr
)
444 if (dma_memory_read(&address_space_memory
, addr
, bd
, sizeof(*bd
))) {
445 qemu_log_mask(LOG_GUEST_ERROR
, "%s: failed to read descriptor @ 0x%"
446 HWADDR_PRIx
"\n", __func__
, addr
);
449 bd
->des0
= le32_to_cpu(bd
->des0
);
450 bd
->des1
= le32_to_cpu(bd
->des1
);
451 bd
->des2
= le32_to_cpu(bd
->des2
);
452 bd
->des3
= le32_to_cpu(bd
->des3
);
456 static int ftgmac100_write_bd(FTGMAC100Desc
*bd
, dma_addr_t addr
)
460 lebd
.des0
= cpu_to_le32(bd
->des0
);
461 lebd
.des1
= cpu_to_le32(bd
->des1
);
462 lebd
.des2
= cpu_to_le32(bd
->des2
);
463 lebd
.des3
= cpu_to_le32(bd
->des3
);
464 if (dma_memory_write(&address_space_memory
, addr
, &lebd
, sizeof(lebd
))) {
465 qemu_log_mask(LOG_GUEST_ERROR
, "%s: failed to write descriptor @ 0x%"
466 HWADDR_PRIx
"\n", __func__
, addr
);
472 static void ftgmac100_do_tx(FTGMAC100State
*s
, uint32_t tx_ring
,
473 uint32_t tx_descriptor
)
476 uint8_t *ptr
= s
->frame
;
477 uint32_t addr
= tx_descriptor
;
484 if (ftgmac100_read_bd(&bd
, addr
) ||
485 ((bd
.des0
& FTGMAC100_TXDES0_TXDMA_OWN
) == 0)) {
486 /* Run out of descriptors to transmit. */
487 s
->isr
|= FTGMAC100_INT_NO_NPTXBUF
;
491 /* record transmit flags as they are valid only on the first
493 if (bd
.des0
& FTGMAC100_TXDES0_FTS
) {
497 len
= FTGMAC100_TXDES0_TXBUF_SIZE(bd
.des0
);
498 if (frame_size
+ len
> sizeof(s
->frame
)) {
499 qemu_log_mask(LOG_GUEST_ERROR
, "%s: frame too big : %d bytes\n",
501 s
->isr
|= FTGMAC100_INT_XPKT_LOST
;
502 len
= sizeof(s
->frame
) - frame_size
;
505 if (dma_memory_read(&address_space_memory
, bd
.des3
, ptr
, len
)) {
506 qemu_log_mask(LOG_GUEST_ERROR
, "%s: failed to read packet @ 0x%x\n",
508 s
->isr
|= FTGMAC100_INT_NO_NPTXBUF
;
513 if (bd
.des0
& FTGMAC100_TXDES0_FTS
&&
514 bd
.des1
& FTGMAC100_TXDES1_INS_VLANTAG
&&
515 be16_to_cpu(PKT_GET_ETH_HDR(ptr
)->h_proto
) != ETH_P_VLAN
) {
516 if (frame_size
+ len
+ 4 > sizeof(s
->frame
)) {
517 qemu_log_mask(LOG_GUEST_ERROR
, "%s: frame too big : %d bytes\n",
519 s
->isr
|= FTGMAC100_INT_XPKT_LOST
;
520 len
= sizeof(s
->frame
) - frame_size
- 4;
522 memmove(ptr
+ 16, ptr
+ 12, len
- 12);
523 stw_be_p(ptr
+ 12, ETH_P_VLAN
);
524 stw_be_p(ptr
+ 14, bd
.des1
);
530 if (bd
.des0
& FTGMAC100_TXDES0_LTS
) {
531 if (flags
& FTGMAC100_TXDES1_IP_CHKSUM
) {
532 net_checksum_calculate(s
->frame
, frame_size
);
534 /* Last buffer in frame. */
535 qemu_send_packet(qemu_get_queue(s
->nic
), s
->frame
, frame_size
);
538 if (flags
& FTGMAC100_TXDES1_TXIC
) {
539 s
->isr
|= FTGMAC100_INT_XPKT_ETH
;
543 if (flags
& FTGMAC100_TXDES1_TX2FIC
) {
544 s
->isr
|= FTGMAC100_INT_XPKT_FIFO
;
546 bd
.des0
&= ~FTGMAC100_TXDES0_TXDMA_OWN
;
548 /* Write back the modified descriptor. */
549 ftgmac100_write_bd(&bd
, addr
);
550 /* Advance to the next descriptor. */
551 if (bd
.des0
& s
->txdes0_edotr
) {
554 addr
+= sizeof(FTGMAC100Desc
);
558 s
->tx_descriptor
= addr
;
560 ftgmac100_update_irq(s
);
563 static int ftgmac100_can_receive(NetClientState
*nc
)
565 FTGMAC100State
*s
= FTGMAC100(qemu_get_nic_opaque(nc
));
568 if ((s
->maccr
& (FTGMAC100_MACCR_RXDMA_EN
| FTGMAC100_MACCR_RXMAC_EN
))
569 != (FTGMAC100_MACCR_RXDMA_EN
| FTGMAC100_MACCR_RXMAC_EN
)) {
573 if (ftgmac100_read_bd(&bd
, s
->rx_descriptor
)) {
576 return !(bd
.des0
& FTGMAC100_RXDES0_RXPKT_RDY
);
580 * This is purely informative. The HW can poll the RW (and RX) ring
581 * buffers for available descriptors but we don't need to trigger a
582 * timer for that in qemu.
584 static uint32_t ftgmac100_rxpoll(FTGMAC100State
*s
)
588 * Speed TIME_SEL=0 TIME_SEL=1
590 * 10 51.2 ms 819.2 ms
591 * 100 5.12 ms 81.92 ms
592 * 1000 1.024 ms 16.384 ms
594 static const int div
[] = { 20, 200, 1000 };
596 uint32_t cnt
= 1024 * FTGMAC100_APTC_RXPOLL_CNT(s
->aptcr
);
597 uint32_t speed
= (s
->maccr
& FTGMAC100_MACCR_FAST_MODE
) ? 1 : 0;
599 if (s
->aptcr
& FTGMAC100_APTC_RXPOLL_TIME_SEL
) {
603 if (s
->maccr
& FTGMAC100_MACCR_GIGA_MODE
) {
607 return cnt
/ div
[speed
];
610 static void ftgmac100_reset(DeviceState
*d
)
612 FTGMAC100State
*s
= FTGMAC100(d
);
614 /* Reset the FTGMAC100 */
620 s
->rx_descriptor
= 0;
622 s
->tx_descriptor
= 0;
627 s
->dblac
= 0x00022f00;
641 static uint64_t ftgmac100_read(void *opaque
, hwaddr addr
, unsigned size
)
643 FTGMAC100State
*s
= FTGMAC100(opaque
);
645 switch (addr
& 0xff) {
650 case FTGMAC100_MAC_MADR
:
651 return (s
->conf
.macaddr
.a
[0] << 8) | s
->conf
.macaddr
.a
[1];
652 case FTGMAC100_MAC_LADR
:
653 return ((uint32_t) s
->conf
.macaddr
.a
[2] << 24) |
654 (s
->conf
.macaddr
.a
[3] << 16) | (s
->conf
.macaddr
.a
[4] << 8) |
655 s
->conf
.macaddr
.a
[5];
656 case FTGMAC100_MATH0
:
658 case FTGMAC100_MATH1
:
662 case FTGMAC100_DBLAC
:
666 case FTGMAC100_FEAR1
:
668 case FTGMAC100_TPAFCR
:
672 case FTGMAC100_MACCR
:
674 case FTGMAC100_PHYCR
:
676 case FTGMAC100_PHYDATA
:
679 /* We might want to support these one day */
680 case FTGMAC100_HPTXPD
: /* High Priority Transmit Poll Demand */
681 case FTGMAC100_HPTXR_BADR
: /* High Priority Transmit Ring Base Address */
682 case FTGMAC100_MACSR
: /* MAC Status Register (MACSR) */
683 qemu_log_mask(LOG_UNIMP
, "%s: read to unimplemented register 0x%"
684 HWADDR_PRIx
"\n", __func__
, addr
);
687 qemu_log_mask(LOG_GUEST_ERROR
, "%s: Bad address at offset 0x%"
688 HWADDR_PRIx
"\n", __func__
, addr
);
693 static void ftgmac100_write(void *opaque
, hwaddr addr
,
694 uint64_t value
, unsigned size
)
696 FTGMAC100State
*s
= FTGMAC100(opaque
);
698 switch (addr
& 0xff) {
699 case FTGMAC100_ISR
: /* Interrupt status */
702 case FTGMAC100_IER
: /* Interrupt control */
705 case FTGMAC100_MAC_MADR
: /* MAC */
706 s
->conf
.macaddr
.a
[0] = value
>> 8;
707 s
->conf
.macaddr
.a
[1] = value
;
709 case FTGMAC100_MAC_LADR
:
710 s
->conf
.macaddr
.a
[2] = value
>> 24;
711 s
->conf
.macaddr
.a
[3] = value
>> 16;
712 s
->conf
.macaddr
.a
[4] = value
>> 8;
713 s
->conf
.macaddr
.a
[5] = value
;
715 case FTGMAC100_MATH0
: /* Multicast Address Hash Table 0 */
718 case FTGMAC100_MATH1
: /* Multicast Address Hash Table 1 */
721 case FTGMAC100_ITC
: /* TODO: Interrupt Timer Control */
724 case FTGMAC100_RXR_BADR
: /* Ring buffer address */
726 s
->rx_descriptor
= s
->rx_ring
;
729 case FTGMAC100_RBSR
: /* DMA buffer size */
733 case FTGMAC100_NPTXR_BADR
: /* Transmit buffer address */
735 s
->tx_descriptor
= s
->tx_ring
;
738 case FTGMAC100_NPTXPD
: /* Trigger transmit */
739 if ((s
->maccr
& (FTGMAC100_MACCR_TXDMA_EN
| FTGMAC100_MACCR_TXMAC_EN
))
740 == (FTGMAC100_MACCR_TXDMA_EN
| FTGMAC100_MACCR_TXMAC_EN
)) {
741 /* TODO: high priority tx ring */
742 ftgmac100_do_tx(s
, s
->tx_ring
, s
->tx_descriptor
);
744 if (ftgmac100_can_receive(qemu_get_queue(s
->nic
))) {
745 qemu_flush_queued_packets(qemu_get_queue(s
->nic
));
749 case FTGMAC100_RXPD
: /* Receive Poll Demand Register */
750 if (ftgmac100_can_receive(qemu_get_queue(s
->nic
))) {
751 qemu_flush_queued_packets(qemu_get_queue(s
->nic
));
755 case FTGMAC100_APTC
: /* Automatic polling */
758 if (FTGMAC100_APTC_RXPOLL_CNT(s
->aptcr
)) {
762 if (FTGMAC100_APTC_TXPOLL_CNT(s
->aptcr
)) {
763 qemu_log_mask(LOG_UNIMP
, "%s: no transmit polling\n", __func__
);
767 case FTGMAC100_MACCR
: /* MAC Device control */
769 if (value
& FTGMAC100_MACCR_SW_RST
) {
770 ftgmac100_reset(DEVICE(s
));
773 if (ftgmac100_can_receive(qemu_get_queue(s
->nic
))) {
774 qemu_flush_queued_packets(qemu_get_queue(s
->nic
));
778 case FTGMAC100_PHYCR
: /* PHY Device control */
780 if (s
->revr
& FTGMAC100_REVR_NEW_MDIO_INTERFACE
) {
786 case FTGMAC100_PHYDATA
:
787 s
->phydata
= value
& 0xffff;
789 case FTGMAC100_DBLAC
: /* DMA Burst Length and Arbitration Control */
792 case FTGMAC100_REVR
: /* Feature Register */
795 case FTGMAC100_FEAR1
: /* Feature Register 1 */
798 case FTGMAC100_TPAFCR
: /* Transmit Priority Arbitration and FIFO Control */
801 case FTGMAC100_FCR
: /* Flow Control */
805 case FTGMAC100_HPTXPD
: /* High Priority Transmit Poll Demand */
806 case FTGMAC100_HPTXR_BADR
: /* High Priority Transmit Ring Base Address */
807 case FTGMAC100_MACSR
: /* MAC Status Register (MACSR) */
808 qemu_log_mask(LOG_UNIMP
, "%s: write to unimplemented register 0x%"
809 HWADDR_PRIx
"\n", __func__
, addr
);
812 qemu_log_mask(LOG_GUEST_ERROR
, "%s: Bad address at offset 0x%"
813 HWADDR_PRIx
"\n", __func__
, addr
);
817 ftgmac100_update_irq(s
);
820 static int ftgmac100_filter(FTGMAC100State
*s
, const uint8_t *buf
, size_t len
)
824 if (s
->maccr
& FTGMAC100_MACCR_RX_ALL
) {
828 switch (get_eth_packet_type(PKT_GET_ETH_HDR(buf
))) {
830 if (!(s
->maccr
& FTGMAC100_MACCR_RX_BROADPKT
)) {
835 if (!(s
->maccr
& FTGMAC100_MACCR_RX_MULTIPKT
)) {
836 if (!(s
->maccr
& FTGMAC100_MACCR_HT_MULTI_EN
)) {
840 mcast_idx
= net_crc32_le(buf
, ETH_ALEN
);
841 mcast_idx
= (~(mcast_idx
>> 2)) & 0x3f;
842 if (!(s
->math
[mcast_idx
/ 32] & (1 << (mcast_idx
% 32)))) {
848 if (memcmp(s
->conf
.macaddr
.a
, buf
, 6)) {
857 static ssize_t
ftgmac100_receive(NetClientState
*nc
, const uint8_t *buf
,
860 FTGMAC100State
*s
= FTGMAC100(qemu_get_nic_opaque(nc
));
869 uint32_t first
= FTGMAC100_RXDES0_FRS
;
870 uint16_t proto
= be16_to_cpu(PKT_GET_ETH_HDR(buf
)->h_proto
);
871 int max_frame_size
= ftgmac100_max_frame_size(s
, proto
);
873 if ((s
->maccr
& (FTGMAC100_MACCR_RXDMA_EN
| FTGMAC100_MACCR_RXMAC_EN
))
874 != (FTGMAC100_MACCR_RXDMA_EN
| FTGMAC100_MACCR_RXMAC_EN
)) {
878 /* TODO : Pad to minimum Ethernet frame length */
879 /* handle small packets. */
881 qemu_log_mask(LOG_GUEST_ERROR
, "%s: dropped frame of %zd bytes\n",
886 if (!ftgmac100_filter(s
, buf
, size
)) {
890 /* 4 bytes for the CRC. */
892 crc
= cpu_to_be32(crc32(~0, buf
, size
));
893 crc_ptr
= (uint8_t *) &crc
;
895 /* Huge frames are truncated. */
896 if (size
> max_frame_size
) {
897 qemu_log_mask(LOG_GUEST_ERROR
, "%s: frame too big : %zd bytes\n",
899 size
= max_frame_size
;
900 flags
|= FTGMAC100_RXDES0_FTL
;
903 switch (get_eth_packet_type(PKT_GET_ETH_HDR(buf
))) {
905 flags
|= FTGMAC100_RXDES0_BROADCAST
;
908 flags
|= FTGMAC100_RXDES0_MULTICAST
;
914 addr
= s
->rx_descriptor
;
916 if (!ftgmac100_can_receive(nc
)) {
917 qemu_log_mask(LOG_GUEST_ERROR
, "%s: Unexpected packet\n", __func__
);
921 if (ftgmac100_read_bd(&bd
, addr
) ||
922 (bd
.des0
& FTGMAC100_RXDES0_RXPKT_RDY
)) {
923 /* No descriptors available. Bail out. */
924 qemu_log_mask(LOG_GUEST_ERROR
, "%s: Lost end of frame\n",
926 s
->isr
|= FTGMAC100_INT_NO_RXBUF
;
929 buf_len
= (size
<= s
->rbsr
) ? size
: s
->rbsr
;
930 bd
.des0
|= buf_len
& 0x3fff;
933 /* The last 4 bytes are the CRC. */
938 if (first
&& proto
== ETH_P_VLAN
&& buf_len
>= 18) {
939 bd
.des1
= lduw_be_p(buf
+ 14) | FTGMAC100_RXDES1_VLANTAG_AVAIL
;
941 if (s
->maccr
& FTGMAC100_MACCR_RM_VLAN
) {
942 dma_memory_write(&address_space_memory
, buf_addr
, buf
, 12);
943 dma_memory_write(&address_space_memory
, buf_addr
+ 12, buf
+ 16,
946 dma_memory_write(&address_space_memory
, buf_addr
, buf
, buf_len
);
950 dma_memory_write(&address_space_memory
, buf_addr
, buf
, buf_len
);
954 dma_memory_write(&address_space_memory
, buf_addr
+ buf_len
,
959 bd
.des0
|= first
| FTGMAC100_RXDES0_RXPKT_RDY
;
962 /* Last buffer in frame. */
963 bd
.des0
|= flags
| FTGMAC100_RXDES0_LRS
;
964 s
->isr
|= FTGMAC100_INT_RPKT_BUF
;
966 s
->isr
|= FTGMAC100_INT_RPKT_FIFO
;
968 ftgmac100_write_bd(&bd
, addr
);
969 if (bd
.des0
& s
->rxdes0_edorr
) {
972 addr
+= sizeof(FTGMAC100Desc
);
975 s
->rx_descriptor
= addr
;
977 ftgmac100_update_irq(s
);
981 static const MemoryRegionOps ftgmac100_ops
= {
982 .read
= ftgmac100_read
,
983 .write
= ftgmac100_write
,
984 .valid
.min_access_size
= 4,
985 .valid
.max_access_size
= 4,
986 .endianness
= DEVICE_LITTLE_ENDIAN
,
989 static void ftgmac100_cleanup(NetClientState
*nc
)
991 FTGMAC100State
*s
= FTGMAC100(qemu_get_nic_opaque(nc
));
996 static NetClientInfo net_ftgmac100_info
= {
997 .type
= NET_CLIENT_DRIVER_NIC
,
998 .size
= sizeof(NICState
),
999 .can_receive
= ftgmac100_can_receive
,
1000 .receive
= ftgmac100_receive
,
1001 .cleanup
= ftgmac100_cleanup
,
1002 .link_status_changed
= ftgmac100_set_link
,
1005 static void ftgmac100_realize(DeviceState
*dev
, Error
**errp
)
1007 FTGMAC100State
*s
= FTGMAC100(dev
);
1008 SysBusDevice
*sbd
= SYS_BUS_DEVICE(dev
);
1011 s
->txdes0_edotr
= FTGMAC100_TXDES0_EDOTR_ASPEED
;
1012 s
->rxdes0_edorr
= FTGMAC100_RXDES0_EDORR_ASPEED
;
1014 s
->txdes0_edotr
= FTGMAC100_TXDES0_EDOTR
;
1015 s
->rxdes0_edorr
= FTGMAC100_RXDES0_EDORR
;
1018 memory_region_init_io(&s
->iomem
, OBJECT(dev
), &ftgmac100_ops
, s
,
1019 TYPE_FTGMAC100
, 0x2000);
1020 sysbus_init_mmio(sbd
, &s
->iomem
);
1021 sysbus_init_irq(sbd
, &s
->irq
);
1022 qemu_macaddr_default_if_unset(&s
->conf
.macaddr
);
1024 s
->nic
= qemu_new_nic(&net_ftgmac100_info
, &s
->conf
,
1025 object_get_typename(OBJECT(dev
)), DEVICE(dev
)->id
,
1027 qemu_format_nic_info_str(qemu_get_queue(s
->nic
), s
->conf
.macaddr
.a
);
1030 static const VMStateDescription vmstate_ftgmac100
= {
1031 .name
= TYPE_FTGMAC100
,
1033 .minimum_version_id
= 1,
1034 .fields
= (VMStateField
[]) {
1035 VMSTATE_UINT32(irq_state
, FTGMAC100State
),
1036 VMSTATE_UINT32(isr
, FTGMAC100State
),
1037 VMSTATE_UINT32(ier
, FTGMAC100State
),
1038 VMSTATE_UINT32(rx_enabled
, FTGMAC100State
),
1039 VMSTATE_UINT32(rx_ring
, FTGMAC100State
),
1040 VMSTATE_UINT32(rbsr
, FTGMAC100State
),
1041 VMSTATE_UINT32(tx_ring
, FTGMAC100State
),
1042 VMSTATE_UINT32(rx_descriptor
, FTGMAC100State
),
1043 VMSTATE_UINT32(tx_descriptor
, FTGMAC100State
),
1044 VMSTATE_UINT32_ARRAY(math
, FTGMAC100State
, 2),
1045 VMSTATE_UINT32(itc
, FTGMAC100State
),
1046 VMSTATE_UINT32(aptcr
, FTGMAC100State
),
1047 VMSTATE_UINT32(dblac
, FTGMAC100State
),
1048 VMSTATE_UINT32(revr
, FTGMAC100State
),
1049 VMSTATE_UINT32(fear1
, FTGMAC100State
),
1050 VMSTATE_UINT32(tpafcr
, FTGMAC100State
),
1051 VMSTATE_UINT32(maccr
, FTGMAC100State
),
1052 VMSTATE_UINT32(phycr
, FTGMAC100State
),
1053 VMSTATE_UINT32(phydata
, FTGMAC100State
),
1054 VMSTATE_UINT32(fcr
, FTGMAC100State
),
1055 VMSTATE_UINT32(phy_status
, FTGMAC100State
),
1056 VMSTATE_UINT32(phy_control
, FTGMAC100State
),
1057 VMSTATE_UINT32(phy_advertise
, FTGMAC100State
),
1058 VMSTATE_UINT32(phy_int
, FTGMAC100State
),
1059 VMSTATE_UINT32(phy_int_mask
, FTGMAC100State
),
1060 VMSTATE_UINT32(txdes0_edotr
, FTGMAC100State
),
1061 VMSTATE_UINT32(rxdes0_edorr
, FTGMAC100State
),
1062 VMSTATE_END_OF_LIST()
1066 static Property ftgmac100_properties
[] = {
1067 DEFINE_PROP_BOOL("aspeed", FTGMAC100State
, aspeed
, false),
1068 DEFINE_NIC_PROPERTIES(FTGMAC100State
, conf
),
1069 DEFINE_PROP_END_OF_LIST(),
1072 static void ftgmac100_class_init(ObjectClass
*klass
, void *data
)
1074 DeviceClass
*dc
= DEVICE_CLASS(klass
);
1076 dc
->vmsd
= &vmstate_ftgmac100
;
1077 dc
->reset
= ftgmac100_reset
;
1078 dc
->props
= ftgmac100_properties
;
1079 set_bit(DEVICE_CATEGORY_NETWORK
, dc
->categories
);
1080 dc
->realize
= ftgmac100_realize
;
1081 dc
->desc
= "Faraday FTGMAC100 Gigabit Ethernet emulation";
1084 static const TypeInfo ftgmac100_info
= {
1085 .name
= TYPE_FTGMAC100
,
1086 .parent
= TYPE_SYS_BUS_DEVICE
,
1087 .instance_size
= sizeof(FTGMAC100State
),
1088 .class_init
= ftgmac100_class_init
,
1092 * AST2600 MII controller
1094 #define ASPEED_MII_PHYCR_FIRE BIT(31)
1095 #define ASPEED_MII_PHYCR_ST_22 BIT(28)
1096 #define ASPEED_MII_PHYCR_OP(x) ((x) & (ASPEED_MII_PHYCR_OP_WRITE | \
1097 ASPEED_MII_PHYCR_OP_READ))
1098 #define ASPEED_MII_PHYCR_OP_WRITE BIT(26)
1099 #define ASPEED_MII_PHYCR_OP_READ BIT(27)
1100 #define ASPEED_MII_PHYCR_DATA(x) (x & 0xffff)
1101 #define ASPEED_MII_PHYCR_PHY(x) (((x) >> 21) & 0x1f)
1102 #define ASPEED_MII_PHYCR_REG(x) (((x) >> 16) & 0x1f)
1104 #define ASPEED_MII_PHYDATA_IDLE BIT(16)
1106 static void aspeed_mii_transition(AspeedMiiState
*s
, bool fire
)
1109 s
->phycr
|= ASPEED_MII_PHYCR_FIRE
;
1110 s
->phydata
&= ~ASPEED_MII_PHYDATA_IDLE
;
1112 s
->phycr
&= ~ASPEED_MII_PHYCR_FIRE
;
1113 s
->phydata
|= ASPEED_MII_PHYDATA_IDLE
;
1117 static void aspeed_mii_do_phy_ctl(AspeedMiiState
*s
)
1122 if (!(s
->phycr
& ASPEED_MII_PHYCR_ST_22
)) {
1123 aspeed_mii_transition(s
, !ASPEED_MII_PHYCR_FIRE
);
1124 qemu_log_mask(LOG_UNIMP
, "%s: unsupported ST code\n", __func__
);
1129 if (!(s
->phycr
& ASPEED_MII_PHYCR_FIRE
)) {
1133 reg
= ASPEED_MII_PHYCR_REG(s
->phycr
);
1134 data
= ASPEED_MII_PHYCR_DATA(s
->phycr
);
1136 switch (ASPEED_MII_PHYCR_OP(s
->phycr
)) {
1137 case ASPEED_MII_PHYCR_OP_WRITE
:
1138 do_phy_write(s
->nic
, reg
, data
);
1140 case ASPEED_MII_PHYCR_OP_READ
:
1141 s
->phydata
= (s
->phydata
& ~0xffff) | do_phy_read(s
->nic
, reg
);
1144 qemu_log_mask(LOG_GUEST_ERROR
, "%s: invalid OP code %08x\n",
1145 __func__
, s
->phycr
);
1148 aspeed_mii_transition(s
, !ASPEED_MII_PHYCR_FIRE
);
1151 static uint64_t aspeed_mii_read(void *opaque
, hwaddr addr
, unsigned size
)
1153 AspeedMiiState
*s
= ASPEED_MII(opaque
);
1161 g_assert_not_reached();
1165 static void aspeed_mii_write(void *opaque
, hwaddr addr
,
1166 uint64_t value
, unsigned size
)
1168 AspeedMiiState
*s
= ASPEED_MII(opaque
);
1172 s
->phycr
= value
& ~(s
->phycr
& ASPEED_MII_PHYCR_FIRE
);
1175 s
->phydata
= value
& ~(0xffff | ASPEED_MII_PHYDATA_IDLE
);
1178 g_assert_not_reached();
1181 aspeed_mii_transition(s
, !!(s
->phycr
& ASPEED_MII_PHYCR_FIRE
));
1182 aspeed_mii_do_phy_ctl(s
);
1185 static const MemoryRegionOps aspeed_mii_ops
= {
1186 .read
= aspeed_mii_read
,
1187 .write
= aspeed_mii_write
,
1188 .valid
.min_access_size
= 4,
1189 .valid
.max_access_size
= 4,
1190 .endianness
= DEVICE_LITTLE_ENDIAN
,
1193 static void aspeed_mii_reset(DeviceState
*dev
)
1195 AspeedMiiState
*s
= ASPEED_MII(dev
);
1200 aspeed_mii_transition(s
, !!(s
->phycr
& ASPEED_MII_PHYCR_FIRE
));
1203 static void aspeed_mii_realize(DeviceState
*dev
, Error
**errp
)
1205 AspeedMiiState
*s
= ASPEED_MII(dev
);
1206 SysBusDevice
*sbd
= SYS_BUS_DEVICE(dev
);
1210 memory_region_init_io(&s
->iomem
, OBJECT(dev
), &aspeed_mii_ops
, s
,
1211 TYPE_ASPEED_MII
, 0x8);
1212 sysbus_init_mmio(sbd
, &s
->iomem
);
1215 static const VMStateDescription vmstate_aspeed_mii
= {
1216 .name
= TYPE_ASPEED_MII
,
1218 .minimum_version_id
= 1,
1219 .fields
= (VMStateField
[]) {
1220 VMSTATE_UINT32(phycr
, FTGMAC100State
),
1221 VMSTATE_UINT32(phydata
, FTGMAC100State
),
1222 VMSTATE_END_OF_LIST()
1226 static Property aspeed_mii_properties
[] = {
1227 DEFINE_PROP_LINK("nic", AspeedMiiState
, nic
, TYPE_FTGMAC100
,
1229 DEFINE_PROP_END_OF_LIST(),
1232 static void aspeed_mii_class_init(ObjectClass
*klass
, void *data
)
1234 DeviceClass
*dc
= DEVICE_CLASS(klass
);
1236 dc
->vmsd
= &vmstate_aspeed_mii
;
1237 dc
->reset
= aspeed_mii_reset
;
1238 dc
->realize
= aspeed_mii_realize
;
1239 dc
->desc
= "Aspeed MII controller";
1240 dc
->props
= aspeed_mii_properties
;
1243 static const TypeInfo aspeed_mii_info
= {
1244 .name
= TYPE_ASPEED_MII
,
1245 .parent
= TYPE_SYS_BUS_DEVICE
,
1246 .instance_size
= sizeof(AspeedMiiState
),
1247 .class_init
= aspeed_mii_class_init
,
1250 static void ftgmac100_register_types(void)
1252 type_register_static(&ftgmac100_info
);
1253 type_register_static(&aspeed_mii_info
);
1256 type_init(ftgmac100_register_types
)