Archipelago » qemu

/*

 * QEMU Lance emulation

 * 

 * Copyright (c) 2003-2004 Fabrice Bellard

 * 

 * Permission is hereby granted, free of charge, to any person obtaining a copy

 * of this software and associated documentation files (the "Software"), to deal

 * in the Software without restriction, including without limitation the rights

 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell

 * copies of the Software, and to permit persons to whom the Software is

 * furnished to do so, subject to the following conditions:

 *

 * The above copyright notice and this permission notice shall be included in

 * all copies or substantial portions of the Software.

 *

 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR

 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL

 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER

 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,

 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN

 * THE SOFTWARE.

 */

#include "vl.h"

/* debug LANCE card */

//#define DEBUG_LANCE

#ifndef LANCE_LOG_TX_BUFFERS

#define LANCE_LOG_TX_BUFFERS 4

#define LANCE_LOG_RX_BUFFERS 4

#endif

#define CRC_POLYNOMIAL_BE 0x04c11db7UL  /* Ethernet CRC, big endian */

#define CRC_POLYNOMIAL_LE 0xedb88320UL  /* Ethernet CRC, little endian */

#define LE_CSR0 0

#define LE_CSR1 1

#define LE_CSR2 2

#define LE_CSR3 3

#define LE_MAXREG (LE_CSR3 + 1)

#define LE_RDP  0

#define LE_RAP  1

#define LE_MO_PROM      0x8000  /* Enable promiscuous mode */

#define        LE_C0_ERR        0x8000        /* Error: set if BAB, SQE, MISS or ME is set */

#define        LE_C0_BABL        0x4000        /* BAB:  Babble: tx timeout. */

#define        LE_C0_CERR        0x2000        /* SQE:  Signal quality error */

#define        LE_C0_MISS        0x1000        /* MISS: Missed a packet */

#define        LE_C0_MERR        0x0800        /* ME:   Memory error */

#define        LE_C0_RINT        0x0400        /* Received interrupt */

#define        LE_C0_TINT        0x0200        /* Transmitter Interrupt */

#define        LE_C0_IDON        0x0100        /* IFIN: Init finished. */

#define        LE_C0_INTR        0x0080        /* Interrupt or error */

#define        LE_C0_INEA        0x0040        /* Interrupt enable */

#define        LE_C0_RXON        0x0020        /* Receiver on */

#define        LE_C0_TXON        0x0010        /* Transmitter on */

#define        LE_C0_TDMD        0x0008        /* Transmitter demand */

#define        LE_C0_STOP        0x0004        /* Stop the card */

#define        LE_C0_STRT        0x0002        /* Start the card */

#define        LE_C0_INIT        0x0001        /* Init the card */

#define        LE_C3_BSWP        0x4     /* SWAP */

#define        LE_C3_ACON        0x2        /* ALE Control */

#define        LE_C3_BCON        0x1        /* Byte control */

/* Receive message descriptor 1 */

#define LE_R1_OWN       0x80    /* Who owns the entry */

#define LE_R1_ERR       0x40    /* Error: if FRA, OFL, CRC or BUF is set */

#define LE_R1_FRA       0x20    /* FRA: Frame error */

#define LE_R1_OFL       0x10    /* OFL: Frame overflow */

#define LE_R1_CRC       0x08    /* CRC error */

#define LE_R1_BUF       0x04    /* BUF: Buffer error */

#define LE_R1_SOP       0x02    /* Start of packet */

#define LE_R1_EOP       0x01    /* End of packet */

#define LE_R1_POK       0x03    /* Packet is complete: SOP + EOP */

#define LE_T1_OWN       0x80    /* Lance owns the packet */

#define LE_T1_ERR       0x40    /* Error summary */

#define LE_T1_EMORE     0x10    /* Error: more than one retry needed */

#define LE_T1_EONE      0x08    /* Error: one retry needed */

#define LE_T1_EDEF      0x04    /* Error: deferred */

#define LE_T1_SOP       0x02    /* Start of packet */

#define LE_T1_EOP       0x01    /* End of packet */

#define LE_T1_POK        0x03        /* Packet is complete: SOP + EOP */

#define LE_T3_BUF       0x8000  /* Buffer error */

#define LE_T3_UFL       0x4000  /* Error underflow */

#define LE_T3_LCOL      0x1000  /* Error late collision */

#define LE_T3_CLOS      0x0800  /* Error carrier loss */

#define LE_T3_RTY       0x0400  /* Error retry */

#define LE_T3_TDR       0x03ff  /* Time Domain Reflectometry counter */

#define TX_RING_SIZE                        (1 << (LANCE_LOG_TX_BUFFERS))

#define TX_RING_MOD_MASK                (TX_RING_SIZE - 1)

#define TX_RING_LEN_BITS                ((LANCE_LOG_TX_BUFFERS) << 29)

#define RX_RING_SIZE                        (1 << (LANCE_LOG_RX_BUFFERS))

#define RX_RING_MOD_MASK                (RX_RING_SIZE - 1)

#define RX_RING_LEN_BITS                ((LANCE_LOG_RX_BUFFERS) << 29)

#define PKT_BUF_SZ                1544

#define RX_BUFF_SIZE            PKT_BUF_SZ

#define TX_BUFF_SIZE            PKT_BUF_SZ

struct lance_rx_desc {

        unsigned short rmd0;        /* low address of packet */

        unsigned char  rmd1_bits;   /* descriptor bits */

        unsigned char  rmd1_hadr;   /* high address of packet */

        short    length;                /* This length is 2s complement (negative)!

                                     * Buffer length

                                     */

        unsigned short mblength;    /* This is the actual number of bytes received */

};

struct lance_tx_desc {

        unsigned short tmd0;        /* low address of packet */

        unsigned char  tmd1_bits;   /* descriptor bits */

        unsigned char  tmd1_hadr;   /* high address of packet */

        short length;                      /* Length is 2s complement (negative)! */

        unsigned short misc;

};

/* The LANCE initialization block, described in databook. */

/* On the Sparc, this block should be on a DMA region     */

struct lance_init_block {

        unsigned short mode;                /* Pre-set mode (reg. 15) */

        unsigned char phys_addr[6];     /* Physical ethernet address */

        unsigned filter[2];                /* Multicast filter. */

        /* Receive and transmit ring base, along with extra bits. */

        unsigned short rx_ptr;                /* receive descriptor addr */

        unsigned short rx_len;                /* receive len and high addr */

        unsigned short tx_ptr;                /* transmit descriptor addr */

        unsigned short tx_len;                /* transmit len and high addr */

        /* The Tx and Rx ring entries must aligned on 8-byte boundaries. */

        struct lance_rx_desc brx_ring[RX_RING_SIZE];

        struct lance_tx_desc btx_ring[TX_RING_SIZE];

        char   tx_buf [TX_RING_SIZE][TX_BUFF_SIZE];

        char   pad[2];                        /* align rx_buf for copy_and_sum(). */

        char   rx_buf [RX_RING_SIZE][RX_BUFF_SIZE];

};

#define LEDMA_REGS 4

#define LEDMA_MAXADDR (LEDMA_REGS * 4 - 1)

#if 0

/* Structure to describe the current status of DMA registers on the Sparc */

struct sparc_dma_registers {

    uint32_t cond_reg;        /* DMA condition register */

    uint32_t st_addr;        /* Start address of this transfer */

    uint32_t cnt;        /* How many bytes to transfer */

    uint32_t dma_test;        /* DMA test register */

};

#endif

typedef struct LANCEState {

    NetDriverState *nd;

    uint32_t leptr;

    uint16_t addr;

    uint16_t regs[LE_MAXREG];

    uint8_t phys[6]; /* mac address */

    int irq;

    unsigned int rxptr, txptr;

    uint32_t ledmaregs[LEDMA_REGS];

} LANCEState;

static void lance_send(void *opaque);

static void lance_reset(void *opaque)

{

    LANCEState *s = opaque;

    memcpy(s->phys, s->nd->macaddr, 6);

    s->rxptr = 0;

    s->txptr = 0;

    memset(s->regs, 0, LE_MAXREG * 2);

    s->regs[LE_CSR0] = LE_C0_STOP;

    memset(s->ledmaregs, 0, LEDMA_REGS * 4);

}

static uint32_t lance_mem_readw(void *opaque, target_phys_addr_t addr)

{

    LANCEState *s = opaque;

    uint32_t saddr;

    saddr = addr & LE_MAXREG;

    switch (saddr >> 1) {

    case LE_RDP:

        return s->regs[s->addr];

    case LE_RAP:

        return s->addr;

    default:

        break;

    }

    return 0;

}

static void lance_mem_writew(void *opaque, target_phys_addr_t addr, uint32_t val)

{

    LANCEState *s = opaque;

    uint32_t saddr;

    uint16_t reg;

    saddr = addr & LE_MAXREG;

    switch (saddr >> 1) {

    case LE_RDP:

        switch(s->addr) {

        case LE_CSR0:

            if (val & LE_C0_STOP) {

                s->regs[LE_CSR0] = LE_C0_STOP;

                break;

            }

            reg = s->regs[LE_CSR0];

            // 1 = clear for some bits

            reg &= ~(val & 0x7f00);

            // generated bits

            reg &= ~(LE_C0_ERR | LE_C0_INTR);

            if (reg & 0x7100)

                reg |= LE_C0_ERR;

            if (reg & 0x7f00)

                reg |= LE_C0_INTR;

            // direct bit

            reg &= ~LE_C0_INEA;

            reg |= val & LE_C0_INEA;

            // exclusive bits

            if (val & LE_C0_INIT) {

                reg |= LE_C0_IDON | LE_C0_INIT;

                reg &= ~LE_C0_STOP;

            }

            else if (val & LE_C0_STRT) {

                reg |= LE_C0_STRT | LE_C0_RXON | LE_C0_TXON;

                reg &= ~LE_C0_STOP;

            }

            s->regs[LE_CSR0] = reg;

            // trigger bits

            //if (val & LE_C0_TDMD)

            if ((s->regs[LE_CSR0] & LE_C0_INTR) && (s->regs[LE_CSR0] & LE_C0_INEA))

                pic_set_irq(s->irq, 1);

            break;

        case LE_CSR1:

            s->leptr = (s->leptr & 0xffff0000) | (val & 0xffff);

            s->regs[s->addr] = val;

            break;

        case LE_CSR2:

            s->leptr = (s->leptr & 0xffff) | ((val & 0xffff) << 16);

            s->regs[s->addr] = val;

            break;

        case LE_CSR3:

            s->regs[s->addr] = val;

            break;

        }

        break;

    case LE_RAP:

        if (val < LE_MAXREG)

            s->addr = val;

        break;

    default:

        break;

    }

    lance_send(s);

}

static CPUReadMemoryFunc *lance_mem_read[3] = {

    lance_mem_readw,

    lance_mem_readw,

    lance_mem_readw,

};

static CPUWriteMemoryFunc *lance_mem_write[3] = {

    lance_mem_writew,

    lance_mem_writew,

    lance_mem_writew,

};

/* return the max buffer size if the LANCE can receive more data */

static int lance_can_receive(void *opaque)

{

    LANCEState *s = opaque;

    uint32_t dmaptr = s->leptr + s->ledmaregs[3];

    struct lance_init_block *ib;

    int i;

    uint16_t temp;

    if ((s->regs[LE_CSR0] & LE_C0_STOP) == LE_C0_STOP)

        return 0;

    ib = (void *) iommu_translate(dmaptr);

    for (i = 0; i < RX_RING_SIZE; i++) {

        cpu_physical_memory_read((uint32_t)&ib->brx_ring[i].rmd1_bits, (void *) &temp, 1);

        temp &= 0xff;

        if (temp == (LE_R1_OWN)) {

#ifdef DEBUG_LANCE

            fprintf(stderr, "lance: can receive %d\n", RX_BUFF_SIZE);

#endif

            return RX_BUFF_SIZE;

        }

    }

#ifdef DEBUG_LANCE

    fprintf(stderr, "lance: cannot receive\n");

#endif

    return 0;

}

#define MIN_BUF_SIZE 60

static void lance_receive(void *opaque, const uint8_t *buf, int size)

{

    LANCEState *s = opaque;

    uint32_t dmaptr = s->leptr + s->ledmaregs[3];

    struct lance_init_block *ib;

    unsigned int i, old_rxptr, j;

    uint16_t temp;

    if ((s->regs[LE_CSR0] & LE_C0_STOP) == LE_C0_STOP)

        return;

    ib = (void *) iommu_translate(dmaptr);

    old_rxptr = s->rxptr;

    for (i = s->rxptr; i != ((old_rxptr - 1) & RX_RING_MOD_MASK); i = (i + 1) & RX_RING_MOD_MASK) {

        cpu_physical_memory_read((uint32_t)&ib->brx_ring[i].rmd1_bits, (void *) &temp, 1);

        if (temp == (LE_R1_OWN)) {

            s->rxptr = (s->rxptr + 1) & RX_RING_MOD_MASK;

            temp = size;

            bswap16s(&temp);

            cpu_physical_memory_write((uint32_t)&ib->brx_ring[i].mblength, (void *) &temp, 2);

#if 0

            cpu_physical_memory_write((uint32_t)&ib->rx_buf[i], buf, size);

#else

            for (j = 0; j < size; j++) {

                cpu_physical_memory_write(((uint32_t)&ib->rx_buf[i]) + j, &buf[j], 1);

            }

#endif

            temp = LE_R1_POK;

            cpu_physical_memory_write((uint32_t)&ib->brx_ring[i].rmd1_bits, (void *) &temp, 1);

            s->regs[LE_CSR0] |= LE_C0_RINT | LE_C0_INTR;

            if ((s->regs[LE_CSR0] & LE_C0_INTR) && (s->regs[LE_CSR0] & LE_C0_INEA))

                pic_set_irq(s->irq, 1);

#ifdef DEBUG_LANCE

            fprintf(stderr, "lance: got packet, len %d\n", size);

#endif

            return;

        }

    }

}

static void lance_send(void *opaque)

{

    LANCEState *s = opaque;

    uint32_t dmaptr = s->leptr + s->ledmaregs[3];

    struct lance_init_block *ib;

    unsigned int i, old_txptr, j;

    uint16_t temp;

    char pkt_buf[PKT_BUF_SZ];

    if ((s->regs[LE_CSR0] & LE_C0_STOP) == LE_C0_STOP)

        return;

    ib = (void *) iommu_translate(dmaptr);

    old_txptr = s->txptr;

    for (i = s->txptr; i != ((old_txptr - 1) & TX_RING_MOD_MASK); i = (i + 1) & TX_RING_MOD_MASK) {

        cpu_physical_memory_read((uint32_t)&ib->btx_ring[i].tmd1_bits, (void *) &temp, 1);

        if (temp == (LE_T1_POK|LE_T1_OWN)) {

            cpu_physical_memory_read((uint32_t)&ib->btx_ring[i].length, (void *) &temp, 2);

            bswap16s(&temp);

            temp = (~temp) + 1;

#if 0

            cpu_physical_memory_read((uint32_t)&ib->tx_buf[i], pkt_buf, temp);

#else

            for (j = 0; j < temp; j++) {

                cpu_physical_memory_read((uint32_t)&ib->tx_buf[i] + j, &pkt_buf[j], 1);

            }

#endif

#ifdef DEBUG_LANCE

            fprintf(stderr, "lance: sending packet, len %d\n", temp);

#endif

            qemu_send_packet(s->nd, pkt_buf, temp);

            temp = LE_T1_POK;

            cpu_physical_memory_write((uint32_t)&ib->btx_ring[i].tmd1_bits, (void *) &temp, 1);

            s->txptr = (s->txptr + 1) & TX_RING_MOD_MASK;

            s->regs[LE_CSR0] |= LE_C0_TINT | LE_C0_INTR;

        }

    }

}

static uint32_t ledma_mem_readl(void *opaque, target_phys_addr_t addr)

{

    LANCEState *s = opaque;

    uint32_t saddr;

    saddr = (addr & LEDMA_MAXADDR) >> 2;

    return s->ledmaregs[saddr];

}

static void ledma_mem_writel(void *opaque, target_phys_addr_t addr, uint32_t val)

{

    LANCEState *s = opaque;

    uint32_t saddr;

    saddr = (addr & LEDMA_MAXADDR) >> 2;

    s->ledmaregs[saddr] = val;

}

static CPUReadMemoryFunc *ledma_mem_read[3] = {

    ledma_mem_readl,

    ledma_mem_readl,

    ledma_mem_readl,

};

static CPUWriteMemoryFunc *ledma_mem_write[3] = {

    ledma_mem_writel,

    ledma_mem_writel,

    ledma_mem_writel,

};

static void lance_save(QEMUFile *f, void *opaque)

{

    LANCEState *s = opaque;

    int i;

    qemu_put_be32s(f, &s->leptr);

    qemu_put_be16s(f, &s->addr);

    for (i = 0; i < LE_MAXREG; i ++)

        qemu_put_be16s(f, &s->regs[i]);

    qemu_put_buffer(f, s->phys, 6);

    qemu_put_be32s(f, &s->irq);

    for (i = 0; i < LEDMA_REGS; i ++)

        qemu_put_be32s(f, &s->ledmaregs[i]);

}

static int lance_load(QEMUFile *f, void *opaque, int version_id)

{

    LANCEState *s = opaque;

    int i;

    if (version_id != 1)

        return -EINVAL;

    qemu_get_be32s(f, &s->leptr);

    qemu_get_be16s(f, &s->addr);

    for (i = 0; i < LE_MAXREG; i ++)

        qemu_get_be16s(f, &s->regs[i]);

    qemu_get_buffer(f, s->phys, 6);

    qemu_get_be32s(f, &s->irq);

    for (i = 0; i < LEDMA_REGS; i ++)

        qemu_get_be32s(f, &s->ledmaregs[i]);

    return 0;

}

void lance_init(NetDriverState *nd, int irq, uint32_t leaddr, uint32_t ledaddr)

{

    LANCEState *s;

    int lance_io_memory, ledma_io_memory;

    s = qemu_mallocz(sizeof(LANCEState));

    if (!s)

        return;

    s->nd = nd;

    s->irq = irq;

    lance_io_memory = cpu_register_io_memory(0, lance_mem_read, lance_mem_write, s);

    cpu_register_physical_memory(leaddr, 8, lance_io_memory);

    ledma_io_memory = cpu_register_io_memory(0, ledma_mem_read, ledma_mem_write, s);

    cpu_register_physical_memory(ledaddr, 16, ledma_io_memory);

    lance_reset(s);

    qemu_add_read_packet(nd, lance_can_receive, lance_receive, s);

    register_savevm("lance", leaddr, 1, lance_save, lance_load, s);

    qemu_register_reset(lance_reset, s);

}