Statistics
| Branch: | Revision:

root / hw / nand.c @ 7bd427d8

History | View | Annotate | Download (19.3 kB)

1 3e3d5815 balrog
/*
2 3e3d5815 balrog
 * Flash NAND memory emulation.  Based on "16M x 8 Bit NAND Flash
3 3e3d5815 balrog
 * Memory" datasheet for the KM29U128AT / K9F2808U0A chips from
4 3e3d5815 balrog
 * Samsung Electronic.
5 3e3d5815 balrog
 *
6 3e3d5815 balrog
 * Copyright (c) 2006 Openedhand Ltd.
7 3e3d5815 balrog
 * Written by Andrzej Zaborowski <balrog@zabor.org>
8 3e3d5815 balrog
 *
9 3e3d5815 balrog
 * This code is licensed under the GNU GPL v2.
10 3e3d5815 balrog
 */
11 3e3d5815 balrog
12 3e3d5815 balrog
#ifndef NAND_IO
13 3e3d5815 balrog
14 87ecb68b pbrook
# include "hw.h"
15 87ecb68b pbrook
# include "flash.h"
16 666daa68 Markus Armbruster
# include "blockdev.h"
17 87ecb68b pbrook
/* FIXME: Pass block device as an argument.  */
18 3e3d5815 balrog
19 3e3d5815 balrog
# define NAND_CMD_READ0                0x00
20 3e3d5815 balrog
# define NAND_CMD_READ1                0x01
21 3e3d5815 balrog
# define NAND_CMD_READ2                0x50
22 3e3d5815 balrog
# define NAND_CMD_LPREAD2        0x30
23 3e3d5815 balrog
# define NAND_CMD_NOSERIALREAD2        0x35
24 3e3d5815 balrog
# define NAND_CMD_RANDOMREAD1        0x05
25 3e3d5815 balrog
# define NAND_CMD_RANDOMREAD2        0xe0
26 3e3d5815 balrog
# define NAND_CMD_READID        0x90
27 3e3d5815 balrog
# define NAND_CMD_RESET                0xff
28 3e3d5815 balrog
# define NAND_CMD_PAGEPROGRAM1        0x80
29 3e3d5815 balrog
# define NAND_CMD_PAGEPROGRAM2        0x10
30 3e3d5815 balrog
# define NAND_CMD_CACHEPROGRAM2        0x15
31 3e3d5815 balrog
# define NAND_CMD_BLOCKERASE1        0x60
32 3e3d5815 balrog
# define NAND_CMD_BLOCKERASE2        0xd0
33 3e3d5815 balrog
# define NAND_CMD_READSTATUS        0x70
34 3e3d5815 balrog
# define NAND_CMD_COPYBACKPRG1        0x85
35 3e3d5815 balrog
36 3e3d5815 balrog
# define NAND_IOSTATUS_ERROR        (1 << 0)
37 3e3d5815 balrog
# define NAND_IOSTATUS_PLANE0        (1 << 1)
38 3e3d5815 balrog
# define NAND_IOSTATUS_PLANE1        (1 << 2)
39 3e3d5815 balrog
# define NAND_IOSTATUS_PLANE2        (1 << 3)
40 3e3d5815 balrog
# define NAND_IOSTATUS_PLANE3        (1 << 4)
41 3e3d5815 balrog
# define NAND_IOSTATUS_BUSY        (1 << 6)
42 3e3d5815 balrog
# define NAND_IOSTATUS_UNPROTCT        (1 << 7)
43 3e3d5815 balrog
44 3e3d5815 balrog
# define MAX_PAGE                0x800
45 3e3d5815 balrog
# define MAX_OOB                0x40
46 3e3d5815 balrog
47 bc24a225 Paul Brook
struct NANDFlashState {
48 3e3d5815 balrog
    uint8_t manf_id, chip_id;
49 3e3d5815 balrog
    int size, pages;
50 3e3d5815 balrog
    int page_shift, oob_shift, erase_shift, addr_shift;
51 3e3d5815 balrog
    uint8_t *storage;
52 3e3d5815 balrog
    BlockDriverState *bdrv;
53 3e3d5815 balrog
    int mem_oob;
54 3e3d5815 balrog
55 3e3d5815 balrog
    int cle, ale, ce, wp, gnd;
56 3e3d5815 balrog
57 3e3d5815 balrog
    uint8_t io[MAX_PAGE + MAX_OOB + 0x400];
58 3e3d5815 balrog
    uint8_t *ioaddr;
59 3e3d5815 balrog
    int iolen;
60 3e3d5815 balrog
61 3e3d5815 balrog
    uint32_t cmd, addr;
62 3e3d5815 balrog
    int addrlen;
63 3e3d5815 balrog
    int status;
64 3e3d5815 balrog
    int offset;
65 3e3d5815 balrog
66 bc24a225 Paul Brook
    void (*blk_write)(NANDFlashState *s);
67 bc24a225 Paul Brook
    void (*blk_erase)(NANDFlashState *s);
68 bc24a225 Paul Brook
    void (*blk_load)(NANDFlashState *s, uint32_t addr, int offset);
69 3e3d5815 balrog
};
70 3e3d5815 balrog
71 3e3d5815 balrog
# define NAND_NO_AUTOINCR        0x00000001
72 3e3d5815 balrog
# define NAND_BUSWIDTH_16        0x00000002
73 3e3d5815 balrog
# define NAND_NO_PADDING        0x00000004
74 3e3d5815 balrog
# define NAND_CACHEPRG                0x00000008
75 3e3d5815 balrog
# define NAND_COPYBACK                0x00000010
76 3e3d5815 balrog
# define NAND_IS_AND                0x00000020
77 3e3d5815 balrog
# define NAND_4PAGE_ARRAY        0x00000040
78 3e3d5815 balrog
# define NAND_NO_READRDY        0x00000100
79 3e3d5815 balrog
# define NAND_SAMSUNG_LP        (NAND_NO_PADDING | NAND_COPYBACK)
80 3e3d5815 balrog
81 3e3d5815 balrog
# define NAND_IO
82 3e3d5815 balrog
83 3e3d5815 balrog
# define PAGE(addr)                ((addr) >> ADDR_SHIFT)
84 3e3d5815 balrog
# define PAGE_START(page)        (PAGE(page) * (PAGE_SIZE + OOB_SIZE))
85 3e3d5815 balrog
# define PAGE_MASK                ((1 << ADDR_SHIFT) - 1)
86 3e3d5815 balrog
# define OOB_SHIFT                (PAGE_SHIFT - 5)
87 3e3d5815 balrog
# define OOB_SIZE                (1 << OOB_SHIFT)
88 3e3d5815 balrog
# define SECTOR(addr)                ((addr) >> (9 + ADDR_SHIFT - PAGE_SHIFT))
89 3e3d5815 balrog
# define SECTOR_OFFSET(addr)        ((addr) & ((511 >> PAGE_SHIFT) << 8))
90 3e3d5815 balrog
91 3e3d5815 balrog
# define PAGE_SIZE                256
92 3e3d5815 balrog
# define PAGE_SHIFT                8
93 3e3d5815 balrog
# define PAGE_SECTORS                1
94 3e3d5815 balrog
# define ADDR_SHIFT                8
95 3e3d5815 balrog
# include "nand.c"
96 3e3d5815 balrog
# define PAGE_SIZE                512
97 3e3d5815 balrog
# define PAGE_SHIFT                9
98 3e3d5815 balrog
# define PAGE_SECTORS                1
99 3e3d5815 balrog
# define ADDR_SHIFT                8
100 3e3d5815 balrog
# include "nand.c"
101 3e3d5815 balrog
# define PAGE_SIZE                2048
102 3e3d5815 balrog
# define PAGE_SHIFT                11
103 3e3d5815 balrog
# define PAGE_SECTORS                4
104 3e3d5815 balrog
# define ADDR_SHIFT                16
105 3e3d5815 balrog
# include "nand.c"
106 3e3d5815 balrog
107 3e3d5815 balrog
/* Information based on Linux drivers/mtd/nand/nand_ids.c */
108 bc24a225 Paul Brook
static const struct {
109 3e3d5815 balrog
    int size;
110 3e3d5815 balrog
    int width;
111 3e3d5815 balrog
    int page_shift;
112 3e3d5815 balrog
    int erase_shift;
113 3e3d5815 balrog
    uint32_t options;
114 3e3d5815 balrog
} nand_flash_ids[0x100] = {
115 3e3d5815 balrog
    [0 ... 0xff] = { 0 },
116 3e3d5815 balrog
117 3e3d5815 balrog
    [0x6e] = { 1,        8,        8, 4, 0 },
118 3e3d5815 balrog
    [0x64] = { 2,        8,        8, 4, 0 },
119 3e3d5815 balrog
    [0x6b] = { 4,        8,        9, 4, 0 },
120 3e3d5815 balrog
    [0xe8] = { 1,        8,        8, 4, 0 },
121 3e3d5815 balrog
    [0xec] = { 1,        8,        8, 4, 0 },
122 3e3d5815 balrog
    [0xea] = { 2,        8,        8, 4, 0 },
123 3e3d5815 balrog
    [0xd5] = { 4,        8,        9, 4, 0 },
124 3e3d5815 balrog
    [0xe3] = { 4,        8,        9, 4, 0 },
125 3e3d5815 balrog
    [0xe5] = { 4,        8,        9, 4, 0 },
126 3e3d5815 balrog
    [0xd6] = { 8,        8,        9, 4, 0 },
127 3e3d5815 balrog
128 3e3d5815 balrog
    [0x39] = { 8,        8,        9, 4, 0 },
129 3e3d5815 balrog
    [0xe6] = { 8,        8,        9, 4, 0 },
130 3e3d5815 balrog
    [0x49] = { 8,        16,        9, 4, NAND_BUSWIDTH_16 },
131 3e3d5815 balrog
    [0x59] = { 8,        16,        9, 4, NAND_BUSWIDTH_16 },
132 3e3d5815 balrog
133 3e3d5815 balrog
    [0x33] = { 16,        8,        9, 5, 0 },
134 3e3d5815 balrog
    [0x73] = { 16,        8,        9, 5, 0 },
135 3e3d5815 balrog
    [0x43] = { 16,        16,        9, 5, NAND_BUSWIDTH_16 },
136 3e3d5815 balrog
    [0x53] = { 16,        16,        9, 5, NAND_BUSWIDTH_16 },
137 3e3d5815 balrog
138 3e3d5815 balrog
    [0x35] = { 32,        8,        9, 5, 0 },
139 3e3d5815 balrog
    [0x75] = { 32,        8,        9, 5, 0 },
140 3e3d5815 balrog
    [0x45] = { 32,        16,        9, 5, NAND_BUSWIDTH_16 },
141 3e3d5815 balrog
    [0x55] = { 32,        16,        9, 5, NAND_BUSWIDTH_16 },
142 3e3d5815 balrog
143 3e3d5815 balrog
    [0x36] = { 64,        8,        9, 5, 0 },
144 3e3d5815 balrog
    [0x76] = { 64,        8,        9, 5, 0 },
145 3e3d5815 balrog
    [0x46] = { 64,        16,        9, 5, NAND_BUSWIDTH_16 },
146 3e3d5815 balrog
    [0x56] = { 64,        16,        9, 5, NAND_BUSWIDTH_16 },
147 3e3d5815 balrog
148 3e3d5815 balrog
    [0x78] = { 128,        8,        9, 5, 0 },
149 3e3d5815 balrog
    [0x39] = { 128,        8,        9, 5, 0 },
150 3e3d5815 balrog
    [0x79] = { 128,        8,        9, 5, 0 },
151 3e3d5815 balrog
    [0x72] = { 128,        16,        9, 5, NAND_BUSWIDTH_16 },
152 3e3d5815 balrog
    [0x49] = { 128,        16,        9, 5, NAND_BUSWIDTH_16 },
153 3e3d5815 balrog
    [0x74] = { 128,        16,        9, 5, NAND_BUSWIDTH_16 },
154 3e3d5815 balrog
    [0x59] = { 128,        16,        9, 5, NAND_BUSWIDTH_16 },
155 3e3d5815 balrog
156 3e3d5815 balrog
    [0x71] = { 256,        8,        9, 5, 0 },
157 3e3d5815 balrog
158 3e3d5815 balrog
    /*
159 3e3d5815 balrog
     * These are the new chips with large page size. The pagesize and the
160 3e3d5815 balrog
     * erasesize is determined from the extended id bytes
161 3e3d5815 balrog
     */
162 3e3d5815 balrog
# define LP_OPTIONS        (NAND_SAMSUNG_LP | NAND_NO_READRDY | NAND_NO_AUTOINCR)
163 3e3d5815 balrog
# define LP_OPTIONS16        (LP_OPTIONS | NAND_BUSWIDTH_16)
164 3e3d5815 balrog
165 3e3d5815 balrog
    /* 512 Megabit */
166 3e3d5815 balrog
    [0xa2] = { 64,        8,        0, 0, LP_OPTIONS },
167 3e3d5815 balrog
    [0xf2] = { 64,        8,        0, 0, LP_OPTIONS },
168 3e3d5815 balrog
    [0xb2] = { 64,        16,        0, 0, LP_OPTIONS16 },
169 3e3d5815 balrog
    [0xc2] = { 64,        16,        0, 0, LP_OPTIONS16 },
170 3e3d5815 balrog
171 3e3d5815 balrog
    /* 1 Gigabit */
172 3e3d5815 balrog
    [0xa1] = { 128,        8,        0, 0, LP_OPTIONS },
173 3e3d5815 balrog
    [0xf1] = { 128,        8,        0, 0, LP_OPTIONS },
174 3e3d5815 balrog
    [0xb1] = { 128,        16,        0, 0, LP_OPTIONS16 },
175 3e3d5815 balrog
    [0xc1] = { 128,        16,        0, 0, LP_OPTIONS16 },
176 3e3d5815 balrog
177 3e3d5815 balrog
    /* 2 Gigabit */
178 3e3d5815 balrog
    [0xaa] = { 256,        8,        0, 0, LP_OPTIONS },
179 3e3d5815 balrog
    [0xda] = { 256,        8,        0, 0, LP_OPTIONS },
180 3e3d5815 balrog
    [0xba] = { 256,        16,        0, 0, LP_OPTIONS16 },
181 3e3d5815 balrog
    [0xca] = { 256,        16,        0, 0, LP_OPTIONS16 },
182 3e3d5815 balrog
183 3e3d5815 balrog
    /* 4 Gigabit */
184 3e3d5815 balrog
    [0xac] = { 512,        8,        0, 0, LP_OPTIONS },
185 3e3d5815 balrog
    [0xdc] = { 512,        8,        0, 0, LP_OPTIONS },
186 3e3d5815 balrog
    [0xbc] = { 512,        16,        0, 0, LP_OPTIONS16 },
187 3e3d5815 balrog
    [0xcc] = { 512,        16,        0, 0, LP_OPTIONS16 },
188 3e3d5815 balrog
189 3e3d5815 balrog
    /* 8 Gigabit */
190 3e3d5815 balrog
    [0xa3] = { 1024,        8,        0, 0, LP_OPTIONS },
191 3e3d5815 balrog
    [0xd3] = { 1024,        8,        0, 0, LP_OPTIONS },
192 3e3d5815 balrog
    [0xb3] = { 1024,        16,        0, 0, LP_OPTIONS16 },
193 3e3d5815 balrog
    [0xc3] = { 1024,        16,        0, 0, LP_OPTIONS16 },
194 3e3d5815 balrog
195 3e3d5815 balrog
    /* 16 Gigabit */
196 3e3d5815 balrog
    [0xa5] = { 2048,        8,        0, 0, LP_OPTIONS },
197 3e3d5815 balrog
    [0xd5] = { 2048,        8,        0, 0, LP_OPTIONS },
198 3e3d5815 balrog
    [0xb5] = { 2048,        16,        0, 0, LP_OPTIONS16 },
199 3e3d5815 balrog
    [0xc5] = { 2048,        16,        0, 0, LP_OPTIONS16 },
200 3e3d5815 balrog
};
201 3e3d5815 balrog
202 bc24a225 Paul Brook
static void nand_reset(NANDFlashState *s)
203 3e3d5815 balrog
{
204 3e3d5815 balrog
    s->cmd = NAND_CMD_READ0;
205 3e3d5815 balrog
    s->addr = 0;
206 3e3d5815 balrog
    s->addrlen = 0;
207 3e3d5815 balrog
    s->iolen = 0;
208 3e3d5815 balrog
    s->offset = 0;
209 3e3d5815 balrog
    s->status &= NAND_IOSTATUS_UNPROTCT;
210 3e3d5815 balrog
}
211 3e3d5815 balrog
212 bc24a225 Paul Brook
static void nand_command(NANDFlashState *s)
213 3e3d5815 balrog
{
214 fccd2613 Edgar E. Iglesias
    unsigned int offset;
215 3e3d5815 balrog
    switch (s->cmd) {
216 3e3d5815 balrog
    case NAND_CMD_READ0:
217 3e3d5815 balrog
        s->iolen = 0;
218 3e3d5815 balrog
        break;
219 3e3d5815 balrog
220 3e3d5815 balrog
    case NAND_CMD_READID:
221 3e3d5815 balrog
        s->io[0] = s->manf_id;
222 3e3d5815 balrog
        s->io[1] = s->chip_id;
223 3e3d5815 balrog
        s->io[2] = 'Q';                /* Don't-care byte (often 0xa5) */
224 3e3d5815 balrog
        if (nand_flash_ids[s->chip_id].options & NAND_SAMSUNG_LP)
225 3e3d5815 balrog
            s->io[3] = 0x15;        /* Page Size, Block Size, Spare Size.. */
226 3e3d5815 balrog
        else
227 3e3d5815 balrog
            s->io[3] = 0xc0;        /* Multi-plane */
228 3e3d5815 balrog
        s->ioaddr = s->io;
229 3e3d5815 balrog
        s->iolen = 4;
230 3e3d5815 balrog
        break;
231 3e3d5815 balrog
232 3e3d5815 balrog
    case NAND_CMD_RANDOMREAD2:
233 3e3d5815 balrog
    case NAND_CMD_NOSERIALREAD2:
234 3e3d5815 balrog
        if (!(nand_flash_ids[s->chip_id].options & NAND_SAMSUNG_LP))
235 3e3d5815 balrog
            break;
236 fccd2613 Edgar E. Iglesias
        offset = s->addr & ((1 << s->addr_shift) - 1);
237 fccd2613 Edgar E. Iglesias
        s->blk_load(s, s->addr, offset);
238 fccd2613 Edgar E. Iglesias
        if (s->gnd)
239 fccd2613 Edgar E. Iglesias
            s->iolen = (1 << s->page_shift) - offset;
240 fccd2613 Edgar E. Iglesias
        else
241 fccd2613 Edgar E. Iglesias
            s->iolen = (1 << s->page_shift) + (1 << s->oob_shift) - offset;
242 3e3d5815 balrog
        break;
243 3e3d5815 balrog
244 3e3d5815 balrog
    case NAND_CMD_RESET:
245 3e3d5815 balrog
        nand_reset(s);
246 3e3d5815 balrog
        break;
247 3e3d5815 balrog
248 3e3d5815 balrog
    case NAND_CMD_PAGEPROGRAM1:
249 3e3d5815 balrog
        s->ioaddr = s->io;
250 3e3d5815 balrog
        s->iolen = 0;
251 3e3d5815 balrog
        break;
252 3e3d5815 balrog
253 3e3d5815 balrog
    case NAND_CMD_PAGEPROGRAM2:
254 3e3d5815 balrog
        if (s->wp) {
255 3e3d5815 balrog
            s->blk_write(s);
256 3e3d5815 balrog
        }
257 3e3d5815 balrog
        break;
258 3e3d5815 balrog
259 3e3d5815 balrog
    case NAND_CMD_BLOCKERASE1:
260 3e3d5815 balrog
        break;
261 3e3d5815 balrog
262 3e3d5815 balrog
    case NAND_CMD_BLOCKERASE2:
263 3e3d5815 balrog
        if (nand_flash_ids[s->chip_id].options & NAND_SAMSUNG_LP)
264 3e3d5815 balrog
            s->addr <<= 16;
265 3e3d5815 balrog
        else
266 3e3d5815 balrog
            s->addr <<= 8;
267 3e3d5815 balrog
268 3e3d5815 balrog
        if (s->wp) {
269 3e3d5815 balrog
            s->blk_erase(s);
270 3e3d5815 balrog
        }
271 3e3d5815 balrog
        break;
272 3e3d5815 balrog
273 3e3d5815 balrog
    case NAND_CMD_READSTATUS:
274 3e3d5815 balrog
        s->io[0] = s->status;
275 3e3d5815 balrog
        s->ioaddr = s->io;
276 3e3d5815 balrog
        s->iolen = 1;
277 3e3d5815 balrog
        break;
278 3e3d5815 balrog
279 3e3d5815 balrog
    default:
280 3e3d5815 balrog
        printf("%s: Unknown NAND command 0x%02x\n", __FUNCTION__, s->cmd);
281 3e3d5815 balrog
    }
282 3e3d5815 balrog
}
283 3e3d5815 balrog
284 aa941b94 balrog
static void nand_save(QEMUFile *f, void *opaque)
285 aa941b94 balrog
{
286 bc24a225 Paul Brook
    NANDFlashState *s = (NANDFlashState *) opaque;
287 aa941b94 balrog
    qemu_put_byte(f, s->cle);
288 aa941b94 balrog
    qemu_put_byte(f, s->ale);
289 aa941b94 balrog
    qemu_put_byte(f, s->ce);
290 aa941b94 balrog
    qemu_put_byte(f, s->wp);
291 aa941b94 balrog
    qemu_put_byte(f, s->gnd);
292 aa941b94 balrog
    qemu_put_buffer(f, s->io, sizeof(s->io));
293 aa941b94 balrog
    qemu_put_be32(f, s->ioaddr - s->io);
294 aa941b94 balrog
    qemu_put_be32(f, s->iolen);
295 aa941b94 balrog
296 aa941b94 balrog
    qemu_put_be32s(f, &s->cmd);
297 aa941b94 balrog
    qemu_put_be32s(f, &s->addr);
298 aa941b94 balrog
    qemu_put_be32(f, s->addrlen);
299 aa941b94 balrog
    qemu_put_be32(f, s->status);
300 aa941b94 balrog
    qemu_put_be32(f, s->offset);
301 aa941b94 balrog
    /* XXX: do we want to save s->storage too? */
302 aa941b94 balrog
}
303 aa941b94 balrog
304 aa941b94 balrog
static int nand_load(QEMUFile *f, void *opaque, int version_id)
305 aa941b94 balrog
{
306 bc24a225 Paul Brook
    NANDFlashState *s = (NANDFlashState *) opaque;
307 aa941b94 balrog
    s->cle = qemu_get_byte(f);
308 aa941b94 balrog
    s->ale = qemu_get_byte(f);
309 aa941b94 balrog
    s->ce = qemu_get_byte(f);
310 aa941b94 balrog
    s->wp = qemu_get_byte(f);
311 aa941b94 balrog
    s->gnd = qemu_get_byte(f);
312 aa941b94 balrog
    qemu_get_buffer(f, s->io, sizeof(s->io));
313 aa941b94 balrog
    s->ioaddr = s->io + qemu_get_be32(f);
314 aa941b94 balrog
    s->iolen = qemu_get_be32(f);
315 aa941b94 balrog
    if (s->ioaddr >= s->io + sizeof(s->io) || s->ioaddr < s->io)
316 aa941b94 balrog
        return -EINVAL;
317 aa941b94 balrog
318 aa941b94 balrog
    qemu_get_be32s(f, &s->cmd);
319 aa941b94 balrog
    qemu_get_be32s(f, &s->addr);
320 aa941b94 balrog
    s->addrlen = qemu_get_be32(f);
321 aa941b94 balrog
    s->status = qemu_get_be32(f);
322 aa941b94 balrog
    s->offset = qemu_get_be32(f);
323 aa941b94 balrog
    return 0;
324 aa941b94 balrog
}
325 aa941b94 balrog
326 3e3d5815 balrog
/*
327 3e3d5815 balrog
 * Chip inputs are CLE, ALE, CE, WP, GND and eight I/O pins.  Chip
328 3e3d5815 balrog
 * outputs are R/B and eight I/O pins.
329 3e3d5815 balrog
 *
330 3e3d5815 balrog
 * CE, WP and R/B are active low.
331 3e3d5815 balrog
 */
332 bc24a225 Paul Brook
void nand_setpins(NANDFlashState *s,
333 3e3d5815 balrog
                int cle, int ale, int ce, int wp, int gnd)
334 3e3d5815 balrog
{
335 3e3d5815 balrog
    s->cle = cle;
336 3e3d5815 balrog
    s->ale = ale;
337 3e3d5815 balrog
    s->ce = ce;
338 3e3d5815 balrog
    s->wp = wp;
339 3e3d5815 balrog
    s->gnd = gnd;
340 3e3d5815 balrog
    if (wp)
341 3e3d5815 balrog
        s->status |= NAND_IOSTATUS_UNPROTCT;
342 3e3d5815 balrog
    else
343 3e3d5815 balrog
        s->status &= ~NAND_IOSTATUS_UNPROTCT;
344 3e3d5815 balrog
}
345 3e3d5815 balrog
346 bc24a225 Paul Brook
void nand_getpins(NANDFlashState *s, int *rb)
347 3e3d5815 balrog
{
348 3e3d5815 balrog
    *rb = 1;
349 3e3d5815 balrog
}
350 3e3d5815 balrog
351 bc24a225 Paul Brook
void nand_setio(NANDFlashState *s, uint8_t value)
352 3e3d5815 balrog
{
353 3e3d5815 balrog
    if (!s->ce && s->cle) {
354 3e3d5815 balrog
        if (nand_flash_ids[s->chip_id].options & NAND_SAMSUNG_LP) {
355 3e3d5815 balrog
            if (s->cmd == NAND_CMD_READ0 && value == NAND_CMD_LPREAD2)
356 3e3d5815 balrog
                return;
357 3e3d5815 balrog
            if (value == NAND_CMD_RANDOMREAD1) {
358 3e3d5815 balrog
                s->addr &= ~((1 << s->addr_shift) - 1);
359 3e3d5815 balrog
                s->addrlen = 0;
360 3e3d5815 balrog
                return;
361 3e3d5815 balrog
            }
362 3e3d5815 balrog
        }
363 3e3d5815 balrog
        if (value == NAND_CMD_READ0)
364 3e3d5815 balrog
            s->offset = 0;
365 3e3d5815 balrog
        else if (value == NAND_CMD_READ1) {
366 3e3d5815 balrog
            s->offset = 0x100;
367 3e3d5815 balrog
            value = NAND_CMD_READ0;
368 3e3d5815 balrog
        }
369 3e3d5815 balrog
        else if (value == NAND_CMD_READ2) {
370 3e3d5815 balrog
            s->offset = 1 << s->page_shift;
371 3e3d5815 balrog
            value = NAND_CMD_READ0;
372 3e3d5815 balrog
        }
373 3e3d5815 balrog
374 3e3d5815 balrog
        s->cmd = value;
375 3e3d5815 balrog
376 3e3d5815 balrog
        if (s->cmd == NAND_CMD_READSTATUS ||
377 3e3d5815 balrog
                s->cmd == NAND_CMD_PAGEPROGRAM2 ||
378 3e3d5815 balrog
                s->cmd == NAND_CMD_BLOCKERASE1 ||
379 3e3d5815 balrog
                s->cmd == NAND_CMD_BLOCKERASE2 ||
380 3e3d5815 balrog
                s->cmd == NAND_CMD_NOSERIALREAD2 ||
381 3e3d5815 balrog
                s->cmd == NAND_CMD_RANDOMREAD2 ||
382 3e3d5815 balrog
                s->cmd == NAND_CMD_RESET)
383 3e3d5815 balrog
            nand_command(s);
384 3e3d5815 balrog
385 3e3d5815 balrog
        if (s->cmd != NAND_CMD_RANDOMREAD2) {
386 3e3d5815 balrog
            s->addrlen = 0;
387 3e3d5815 balrog
        }
388 3e3d5815 balrog
    }
389 3e3d5815 balrog
390 3e3d5815 balrog
    if (s->ale) {
391 fccd2613 Edgar E. Iglesias
        unsigned int shift = s->addrlen * 8;
392 fccd2613 Edgar E. Iglesias
        unsigned int mask = ~(0xff << shift);
393 fccd2613 Edgar E. Iglesias
        unsigned int v = value << shift;
394 fccd2613 Edgar E. Iglesias
395 fccd2613 Edgar E. Iglesias
        s->addr = (s->addr & mask) | v;
396 3e3d5815 balrog
        s->addrlen ++;
397 3e3d5815 balrog
398 3e3d5815 balrog
        if (s->addrlen == 1 && s->cmd == NAND_CMD_READID)
399 3e3d5815 balrog
            nand_command(s);
400 3e3d5815 balrog
401 3e3d5815 balrog
        if (!(nand_flash_ids[s->chip_id].options & NAND_SAMSUNG_LP) &&
402 3e3d5815 balrog
                s->addrlen == 3 && (
403 3e3d5815 balrog
                    s->cmd == NAND_CMD_READ0 ||
404 3e3d5815 balrog
                    s->cmd == NAND_CMD_PAGEPROGRAM1))
405 3e3d5815 balrog
            nand_command(s);
406 3e3d5815 balrog
        if ((nand_flash_ids[s->chip_id].options & NAND_SAMSUNG_LP) &&
407 3e3d5815 balrog
               s->addrlen == 4 && (
408 3e3d5815 balrog
                    s->cmd == NAND_CMD_READ0 ||
409 3e3d5815 balrog
                    s->cmd == NAND_CMD_PAGEPROGRAM1))
410 3e3d5815 balrog
            nand_command(s);
411 3e3d5815 balrog
    }
412 3e3d5815 balrog
413 3e3d5815 balrog
    if (!s->cle && !s->ale && s->cmd == NAND_CMD_PAGEPROGRAM1) {
414 3e3d5815 balrog
        if (s->iolen < (1 << s->page_shift) + (1 << s->oob_shift))
415 3e3d5815 balrog
            s->io[s->iolen ++] = value;
416 3e3d5815 balrog
    } else if (!s->cle && !s->ale && s->cmd == NAND_CMD_COPYBACKPRG1) {
417 3e3d5815 balrog
        if ((s->addr & ((1 << s->addr_shift) - 1)) <
418 3e3d5815 balrog
                (1 << s->page_shift) + (1 << s->oob_shift)) {
419 3e3d5815 balrog
            s->io[s->iolen + (s->addr & ((1 << s->addr_shift) - 1))] = value;
420 3e3d5815 balrog
            s->addr ++;
421 3e3d5815 balrog
        }
422 3e3d5815 balrog
    }
423 3e3d5815 balrog
}
424 3e3d5815 balrog
425 bc24a225 Paul Brook
uint8_t nand_getio(NANDFlashState *s)
426 3e3d5815 balrog
{
427 3e3d5815 balrog
    int offset;
428 5fafdf24 ths
429 3e3d5815 balrog
    /* Allow sequential reading */
430 3e3d5815 balrog
    if (!s->iolen && s->cmd == NAND_CMD_READ0) {
431 3e3d5815 balrog
        offset = (s->addr & ((1 << s->addr_shift) - 1)) + s->offset;
432 3e3d5815 balrog
        s->offset = 0;
433 3e3d5815 balrog
434 3e3d5815 balrog
        s->blk_load(s, s->addr, offset);
435 3e3d5815 balrog
        if (s->gnd)
436 3e3d5815 balrog
            s->iolen = (1 << s->page_shift) - offset;
437 3e3d5815 balrog
        else
438 3e3d5815 balrog
            s->iolen = (1 << s->page_shift) + (1 << s->oob_shift) - offset;
439 3e3d5815 balrog
    }
440 3e3d5815 balrog
441 3e3d5815 balrog
    if (s->ce || s->iolen <= 0)
442 3e3d5815 balrog
        return 0;
443 3e3d5815 balrog
444 3e3d5815 balrog
    s->iolen --;
445 fccd2613 Edgar E. Iglesias
    s->addr++;
446 3e3d5815 balrog
    return *(s->ioaddr ++);
447 3e3d5815 balrog
}
448 3e3d5815 balrog
449 bc24a225 Paul Brook
NANDFlashState *nand_init(int manf_id, int chip_id)
450 3e3d5815 balrog
{
451 3e3d5815 balrog
    int pagesize;
452 bc24a225 Paul Brook
    NANDFlashState *s;
453 751c6a17 Gerd Hoffmann
    DriveInfo *dinfo;
454 3e3d5815 balrog
455 3e3d5815 balrog
    if (nand_flash_ids[chip_id].size == 0) {
456 2ac71179 Paul Brook
        hw_error("%s: Unsupported NAND chip ID.\n", __FUNCTION__);
457 3e3d5815 balrog
    }
458 3e3d5815 balrog
459 bc24a225 Paul Brook
    s = (NANDFlashState *) qemu_mallocz(sizeof(NANDFlashState));
460 751c6a17 Gerd Hoffmann
    dinfo = drive_get(IF_MTD, 0, 0);
461 751c6a17 Gerd Hoffmann
    if (dinfo)
462 751c6a17 Gerd Hoffmann
        s->bdrv = dinfo->bdrv;
463 3e3d5815 balrog
    s->manf_id = manf_id;
464 3e3d5815 balrog
    s->chip_id = chip_id;
465 3e3d5815 balrog
    s->size = nand_flash_ids[s->chip_id].size << 20;
466 3e3d5815 balrog
    if (nand_flash_ids[s->chip_id].options & NAND_SAMSUNG_LP) {
467 3e3d5815 balrog
        s->page_shift = 11;
468 3e3d5815 balrog
        s->erase_shift = 6;
469 3e3d5815 balrog
    } else {
470 3e3d5815 balrog
        s->page_shift = nand_flash_ids[s->chip_id].page_shift;
471 3e3d5815 balrog
        s->erase_shift = nand_flash_ids[s->chip_id].erase_shift;
472 3e3d5815 balrog
    }
473 3e3d5815 balrog
474 3e3d5815 balrog
    switch (1 << s->page_shift) {
475 3e3d5815 balrog
    case 256:
476 3e3d5815 balrog
        nand_init_256(s);
477 3e3d5815 balrog
        break;
478 3e3d5815 balrog
    case 512:
479 3e3d5815 balrog
        nand_init_512(s);
480 3e3d5815 balrog
        break;
481 3e3d5815 balrog
    case 2048:
482 3e3d5815 balrog
        nand_init_2048(s);
483 3e3d5815 balrog
        break;
484 3e3d5815 balrog
    default:
485 2ac71179 Paul Brook
        hw_error("%s: Unsupported NAND block size.\n", __FUNCTION__);
486 3e3d5815 balrog
    }
487 3e3d5815 balrog
488 3e3d5815 balrog
    pagesize = 1 << s->oob_shift;
489 3e3d5815 balrog
    s->mem_oob = 1;
490 3e3d5815 balrog
    if (s->bdrv && bdrv_getlength(s->bdrv) >=
491 3e3d5815 balrog
                    (s->pages << s->page_shift) + (s->pages << s->oob_shift)) {
492 3e3d5815 balrog
        pagesize = 0;
493 3e3d5815 balrog
        s->mem_oob = 0;
494 3e3d5815 balrog
    }
495 3e3d5815 balrog
496 3e3d5815 balrog
    if (!s->bdrv)
497 3e3d5815 balrog
        pagesize += 1 << s->page_shift;
498 3e3d5815 balrog
    if (pagesize)
499 3e3d5815 balrog
        s->storage = (uint8_t *) memset(qemu_malloc(s->pages * pagesize),
500 3e3d5815 balrog
                        0xff, s->pages * pagesize);
501 48927926 pbrook
    /* Give s->ioaddr a sane value in case we save state before it
502 48927926 pbrook
       is used.  */
503 48927926 pbrook
    s->ioaddr = s->io;
504 aa941b94 balrog
505 0be71e32 Alex Williamson
    register_savevm(NULL, "nand", -1, 0, nand_save, nand_load, s);
506 aa941b94 balrog
507 3e3d5815 balrog
    return s;
508 3e3d5815 balrog
}
509 3e3d5815 balrog
510 bc24a225 Paul Brook
void nand_done(NANDFlashState *s)
511 3e3d5815 balrog
{
512 3e3d5815 balrog
    if (s->bdrv) {
513 3e3d5815 balrog
        bdrv_close(s->bdrv);
514 3e3d5815 balrog
        bdrv_delete(s->bdrv);
515 3e3d5815 balrog
    }
516 3e3d5815 balrog
517 3e3d5815 balrog
    if (!s->bdrv || s->mem_oob)
518 5f6eab3f Jean-Christophe DUBOIS
        qemu_free(s->storage);
519 3e3d5815 balrog
520 5f6eab3f Jean-Christophe DUBOIS
    qemu_free(s);
521 3e3d5815 balrog
}
522 3e3d5815 balrog
523 3e3d5815 balrog
#else
524 3e3d5815 balrog
525 3e3d5815 balrog
/* Program a single page */
526 bc24a225 Paul Brook
static void glue(nand_blk_write_, PAGE_SIZE)(NANDFlashState *s)
527 3e3d5815 balrog
{
528 3e3d5815 balrog
    uint32_t off, page, sector, soff;
529 3e3d5815 balrog
    uint8_t iobuf[(PAGE_SECTORS + 2) * 0x200];
530 3e3d5815 balrog
    if (PAGE(s->addr) >= s->pages)
531 3e3d5815 balrog
        return;
532 3e3d5815 balrog
533 3e3d5815 balrog
    if (!s->bdrv) {
534 3e3d5815 balrog
        memcpy(s->storage + PAGE_START(s->addr) + (s->addr & PAGE_MASK) +
535 3e3d5815 balrog
                        s->offset, s->io, s->iolen);
536 3e3d5815 balrog
    } else if (s->mem_oob) {
537 3e3d5815 balrog
        sector = SECTOR(s->addr);
538 3e3d5815 balrog
        off = (s->addr & PAGE_MASK) + s->offset;
539 3e3d5815 balrog
        soff = SECTOR_OFFSET(s->addr);
540 3e3d5815 balrog
        if (bdrv_read(s->bdrv, sector, iobuf, PAGE_SECTORS) == -1) {
541 3e3d5815 balrog
            printf("%s: read error in sector %i\n", __FUNCTION__, sector);
542 3e3d5815 balrog
            return;
543 3e3d5815 balrog
        }
544 3e3d5815 balrog
545 3e3d5815 balrog
        memcpy(iobuf + (soff | off), s->io, MIN(s->iolen, PAGE_SIZE - off));
546 3e3d5815 balrog
        if (off + s->iolen > PAGE_SIZE) {
547 3e3d5815 balrog
            page = PAGE(s->addr);
548 3e3d5815 balrog
            memcpy(s->storage + (page << OOB_SHIFT), s->io + PAGE_SIZE - off,
549 3e3d5815 balrog
                            MIN(OOB_SIZE, off + s->iolen - PAGE_SIZE));
550 3e3d5815 balrog
        }
551 3e3d5815 balrog
552 3e3d5815 balrog
        if (bdrv_write(s->bdrv, sector, iobuf, PAGE_SECTORS) == -1)
553 3e3d5815 balrog
            printf("%s: write error in sector %i\n", __FUNCTION__, sector);
554 3e3d5815 balrog
    } else {
555 3e3d5815 balrog
        off = PAGE_START(s->addr) + (s->addr & PAGE_MASK) + s->offset;
556 3e3d5815 balrog
        sector = off >> 9;
557 3e3d5815 balrog
        soff = off & 0x1ff;
558 3e3d5815 balrog
        if (bdrv_read(s->bdrv, sector, iobuf, PAGE_SECTORS + 2) == -1) {
559 3e3d5815 balrog
            printf("%s: read error in sector %i\n", __FUNCTION__, sector);
560 3e3d5815 balrog
            return;
561 3e3d5815 balrog
        }
562 3e3d5815 balrog
563 3e3d5815 balrog
        memcpy(iobuf + soff, s->io, s->iolen);
564 3e3d5815 balrog
565 3e3d5815 balrog
        if (bdrv_write(s->bdrv, sector, iobuf, PAGE_SECTORS + 2) == -1)
566 3e3d5815 balrog
            printf("%s: write error in sector %i\n", __FUNCTION__, sector);
567 3e3d5815 balrog
    }
568 3e3d5815 balrog
    s->offset = 0;
569 3e3d5815 balrog
}
570 3e3d5815 balrog
571 3e3d5815 balrog
/* Erase a single block */
572 bc24a225 Paul Brook
static void glue(nand_blk_erase_, PAGE_SIZE)(NANDFlashState *s)
573 3e3d5815 balrog
{
574 3e3d5815 balrog
    uint32_t i, page, addr;
575 3e3d5815 balrog
    uint8_t iobuf[0x200] = { [0 ... 0x1ff] = 0xff, };
576 3e3d5815 balrog
    addr = s->addr & ~((1 << (ADDR_SHIFT + s->erase_shift)) - 1);
577 3e3d5815 balrog
578 3e3d5815 balrog
    if (PAGE(addr) >= s->pages)
579 3e3d5815 balrog
        return;
580 3e3d5815 balrog
581 3e3d5815 balrog
    if (!s->bdrv) {
582 3e3d5815 balrog
        memset(s->storage + PAGE_START(addr),
583 3e3d5815 balrog
                        0xff, (PAGE_SIZE + OOB_SIZE) << s->erase_shift);
584 3e3d5815 balrog
    } else if (s->mem_oob) {
585 3e3d5815 balrog
        memset(s->storage + (PAGE(addr) << OOB_SHIFT),
586 3e3d5815 balrog
                        0xff, OOB_SIZE << s->erase_shift);
587 3e3d5815 balrog
        i = SECTOR(addr);
588 3e3d5815 balrog
        page = SECTOR(addr + (ADDR_SHIFT + s->erase_shift));
589 3e3d5815 balrog
        for (; i < page; i ++)
590 3e3d5815 balrog
            if (bdrv_write(s->bdrv, i, iobuf, 1) == -1)
591 3e3d5815 balrog
                printf("%s: write error in sector %i\n", __FUNCTION__, i);
592 3e3d5815 balrog
    } else {
593 3e3d5815 balrog
        addr = PAGE_START(addr);
594 3e3d5815 balrog
        page = addr >> 9;
595 3e3d5815 balrog
        if (bdrv_read(s->bdrv, page, iobuf, 1) == -1)
596 3e3d5815 balrog
            printf("%s: read error in sector %i\n", __FUNCTION__, page);
597 3e3d5815 balrog
        memset(iobuf + (addr & 0x1ff), 0xff, (~addr & 0x1ff) + 1);
598 3e3d5815 balrog
        if (bdrv_write(s->bdrv, page, iobuf, 1) == -1)
599 3e3d5815 balrog
            printf("%s: write error in sector %i\n", __FUNCTION__, page);
600 3e3d5815 balrog
601 3e3d5815 balrog
        memset(iobuf, 0xff, 0x200);
602 3e3d5815 balrog
        i = (addr & ~0x1ff) + 0x200;
603 3e3d5815 balrog
        for (addr += ((PAGE_SIZE + OOB_SIZE) << s->erase_shift) - 0x200;
604 3e3d5815 balrog
                        i < addr; i += 0x200)
605 3e3d5815 balrog
            if (bdrv_write(s->bdrv, i >> 9, iobuf, 1) == -1)
606 3e3d5815 balrog
                printf("%s: write error in sector %i\n", __FUNCTION__, i >> 9);
607 3e3d5815 balrog
608 3e3d5815 balrog
        page = i >> 9;
609 3e3d5815 balrog
        if (bdrv_read(s->bdrv, page, iobuf, 1) == -1)
610 3e3d5815 balrog
            printf("%s: read error in sector %i\n", __FUNCTION__, page);
611 a07dec22 balrog
        memset(iobuf, 0xff, ((addr - 1) & 0x1ff) + 1);
612 3e3d5815 balrog
        if (bdrv_write(s->bdrv, page, iobuf, 1) == -1)
613 3e3d5815 balrog
            printf("%s: write error in sector %i\n", __FUNCTION__, page);
614 3e3d5815 balrog
    }
615 3e3d5815 balrog
}
616 3e3d5815 balrog
617 bc24a225 Paul Brook
static void glue(nand_blk_load_, PAGE_SIZE)(NANDFlashState *s,
618 3e3d5815 balrog
                uint32_t addr, int offset)
619 3e3d5815 balrog
{
620 3e3d5815 balrog
    if (PAGE(addr) >= s->pages)
621 3e3d5815 balrog
        return;
622 3e3d5815 balrog
623 3e3d5815 balrog
    if (s->bdrv) {
624 3e3d5815 balrog
        if (s->mem_oob) {
625 3e3d5815 balrog
            if (bdrv_read(s->bdrv, SECTOR(addr), s->io, PAGE_SECTORS) == -1)
626 3e3d5815 balrog
                printf("%s: read error in sector %i\n",
627 3e3d5815 balrog
                                __FUNCTION__, SECTOR(addr));
628 3e3d5815 balrog
            memcpy(s->io + SECTOR_OFFSET(s->addr) + PAGE_SIZE,
629 3e3d5815 balrog
                            s->storage + (PAGE(s->addr) << OOB_SHIFT),
630 3e3d5815 balrog
                            OOB_SIZE);
631 3e3d5815 balrog
            s->ioaddr = s->io + SECTOR_OFFSET(s->addr) + offset;
632 3e3d5815 balrog
        } else {
633 3e3d5815 balrog
            if (bdrv_read(s->bdrv, PAGE_START(addr) >> 9,
634 3e3d5815 balrog
                                    s->io, (PAGE_SECTORS + 2)) == -1)
635 3e3d5815 balrog
                printf("%s: read error in sector %i\n",
636 3e3d5815 balrog
                                __FUNCTION__, PAGE_START(addr) >> 9);
637 3e3d5815 balrog
            s->ioaddr = s->io + (PAGE_START(addr) & 0x1ff) + offset;
638 3e3d5815 balrog
        }
639 3e3d5815 balrog
    } else {
640 3e3d5815 balrog
        memcpy(s->io, s->storage + PAGE_START(s->addr) +
641 3e3d5815 balrog
                        offset, PAGE_SIZE + OOB_SIZE - offset);
642 3e3d5815 balrog
        s->ioaddr = s->io;
643 3e3d5815 balrog
    }
644 3e3d5815 balrog
}
645 3e3d5815 balrog
646 bc24a225 Paul Brook
static void glue(nand_init_, PAGE_SIZE)(NANDFlashState *s)
647 3e3d5815 balrog
{
648 3e3d5815 balrog
    s->oob_shift = PAGE_SHIFT - 5;
649 3e3d5815 balrog
    s->pages = s->size >> PAGE_SHIFT;
650 3e3d5815 balrog
    s->addr_shift = ADDR_SHIFT;
651 3e3d5815 balrog
652 3e3d5815 balrog
    s->blk_erase = glue(nand_blk_erase_, PAGE_SIZE);
653 3e3d5815 balrog
    s->blk_write = glue(nand_blk_write_, PAGE_SIZE);
654 3e3d5815 balrog
    s->blk_load = glue(nand_blk_load_, PAGE_SIZE);
655 3e3d5815 balrog
}
656 3e3d5815 balrog
657 3e3d5815 balrog
# undef PAGE_SIZE
658 3e3d5815 balrog
# undef PAGE_SHIFT
659 3e3d5815 balrog
# undef PAGE_SECTORS
660 3e3d5815 balrog
# undef ADDR_SHIFT
661 3e3d5815 balrog
#endif        /* NAND_IO */