Archipelago » qemu

/*

 * PXA270-based Clamshell PDA platforms.

 *

 * Copyright (c) 2006 Openedhand Ltd.

 * Written by Andrzej Zaborowski <balrog@zabor.org>

 *

 * This code is licensed under the GNU GPL v2.

 */

#include "vl.h"

#define spitz_printf(format, ...)        \

    fprintf(stderr, "%s: " format, __FUNCTION__, ##__VA_ARGS__)

#undef REG_FMT

#define REG_FMT                        "0x%02lx"

/* Spitz Flash */

#define FLASH_BASE                0x0c000000

#define FLASH_ECCLPLB                0x00        /* Line parity 7 - 0 bit */

#define FLASH_ECCLPUB                0x04        /* Line parity 15 - 8 bit */

#define FLASH_ECCCP                0x08        /* Column parity 5 - 0 bit */

#define FLASH_ECCCNTR                0x0c        /* ECC byte counter */

#define FLASH_ECCCLRR                0x10        /* Clear ECC */

#define FLASH_FLASHIO                0x14        /* Flash I/O */

#define FLASH_FLASHCTL                0x18        /* Flash Control */

#define FLASHCTL_CE0                (1 << 0)

#define FLASHCTL_CLE                (1 << 1)

#define FLASHCTL_ALE                (1 << 2)

#define FLASHCTL_WP                (1 << 3)

#define FLASHCTL_CE1                (1 << 4)

#define FLASHCTL_RYBY                (1 << 5)

#define FLASHCTL_NCE                (FLASHCTL_CE0 | FLASHCTL_CE1)

struct sl_nand_s {

    target_phys_addr_t target_base;

    struct nand_flash_s *nand;

    uint8_t ctl;

    struct ecc_state_s ecc;

};

static uint32_t sl_readb(void *opaque, target_phys_addr_t addr)

{

    struct sl_nand_s *s = (struct sl_nand_s *) opaque;

    int ryby;

    addr -= s->target_base;

    switch (addr) {

#define BSHR(byte, from, to)        ((s->ecc.lp[byte] >> (from - to)) & (1 << to))

    case FLASH_ECCLPLB:

        return BSHR(0, 4, 0) | BSHR(0, 5, 2) | BSHR(0, 6, 4) | BSHR(0, 7, 6) |

                BSHR(1, 4, 1) | BSHR(1, 5, 3) | BSHR(1, 6, 5) | BSHR(1, 7, 7);

#define BSHL(byte, from, to)        ((s->ecc.lp[byte] << (to - from)) & (1 << to))

    case FLASH_ECCLPUB:

        return BSHL(0, 0, 0) | BSHL(0, 1, 2) | BSHL(0, 2, 4) | BSHL(0, 3, 6) |

                BSHL(1, 0, 1) | BSHL(1, 1, 3) | BSHL(1, 2, 5) | BSHL(1, 3, 7);

    case FLASH_ECCCP:

        return s->ecc.cp;

    case FLASH_ECCCNTR:

        return s->ecc.count & 0xff;

    case FLASH_FLASHCTL:

        nand_getpins(s->nand, &ryby);

        if (ryby)

            return s->ctl | FLASHCTL_RYBY;

        else

            return s->ctl;

    case FLASH_FLASHIO:

        return ecc_digest(&s->ecc, nand_getio(s->nand));

    default:

        spitz_printf("Bad register offset " REG_FMT "\n", addr);

    }

    return 0;

}

static void sl_writeb(void *opaque, target_phys_addr_t addr,

                uint32_t value)

{

    struct sl_nand_s *s = (struct sl_nand_s *) opaque;

    addr -= s->target_base;

    switch (addr) {

    case FLASH_ECCCLRR:

        /* Value is ignored.  */

        ecc_reset(&s->ecc);

        break;

    case FLASH_FLASHCTL:

        s->ctl = value & 0xff & ~FLASHCTL_RYBY;

        nand_setpins(s->nand,

                        s->ctl & FLASHCTL_CLE,

                        s->ctl & FLASHCTL_ALE,

                        s->ctl & FLASHCTL_NCE,

                        s->ctl & FLASHCTL_WP,

                        0);

        break;

    case FLASH_FLASHIO:

        nand_setio(s->nand, ecc_digest(&s->ecc, value & 0xff));

        break;

    default:

        spitz_printf("Bad register offset " REG_FMT "\n", addr);

    }

}

static void sl_save(QEMUFile *f, void *opaque)

{

    struct sl_nand_s *s = (struct sl_nand_s *) opaque;

    qemu_put_8s(f, &s->ctl);

    ecc_put(f, &s->ecc);

}

static int sl_load(QEMUFile *f, void *opaque, int version_id)

{

    struct sl_nand_s *s = (struct sl_nand_s *) opaque;

    qemu_get_8s(f, &s->ctl);

    ecc_get(f, &s->ecc);

    return 0;

}

enum {

    FLASH_128M,

    FLASH_1024M,

};

static void sl_flash_register(struct pxa2xx_state_s *cpu, int size)

{

    int iomemtype;

    struct sl_nand_s *s;

    CPUReadMemoryFunc *sl_readfn[] = {

        sl_readb,

        sl_readb,

        sl_readb,

    };

    CPUWriteMemoryFunc *sl_writefn[] = {

        sl_writeb,

        sl_writeb,

        sl_writeb,

    };

    s = (struct sl_nand_s *) qemu_mallocz(sizeof(struct sl_nand_s));

    s->target_base = FLASH_BASE;

    s->ctl = 0;

    if (size == FLASH_128M)

        s->nand = nand_init(NAND_MFR_SAMSUNG, 0x73);

    else if (size == FLASH_1024M)

        s->nand = nand_init(NAND_MFR_SAMSUNG, 0xf1);

    iomemtype = cpu_register_io_memory(0, sl_readfn,

                    sl_writefn, s);

    cpu_register_physical_memory(s->target_base, 0x40, iomemtype);

    register_savevm("sl_flash", 0, 0, sl_save, sl_load, s);

}

/* Spitz Keyboard */

#define SPITZ_KEY_STROBE_NUM        11

#define SPITZ_KEY_SENSE_NUM        7

static const int spitz_gpio_key_sense[SPITZ_KEY_SENSE_NUM] = {

    12, 17, 91, 34, 36, 38, 39

};

static const int spitz_gpio_key_strobe[SPITZ_KEY_STROBE_NUM] = {

    88, 23, 24, 25, 26, 27, 52, 103, 107, 108, 114

};

/* Eighth additional row maps the special keys */

static int spitz_keymap[SPITZ_KEY_SENSE_NUM + 1][SPITZ_KEY_STROBE_NUM] = {

    { 0x1d, 0x02, 0x04, 0x06, 0x07, 0x08, 0x0a, 0x0b, 0x0e, 0x3f, 0x40 },

    {  -1 , 0x03, 0x05, 0x13, 0x15, 0x09, 0x17, 0x18, 0x19, 0x41, 0x42 },

    { 0x0f, 0x10, 0x12, 0x14, 0x22, 0x16, 0x24, 0x25,  -1 ,  -1 ,  -1  },

    { 0x3c, 0x11, 0x1f, 0x21, 0x2f, 0x23, 0x32, 0x26,  -1 , 0x36,  -1  },

    { 0x3b, 0x1e, 0x20, 0x2e, 0x30, 0x31, 0x34,  -1 , 0x1c, 0x2a,  -1  },

    { 0x44, 0x2c, 0x2d, 0x0c, 0x39, 0x33,  -1 , 0x48,  -1 ,  -1 , 0x3d },

    { 0x37, 0x38,  -1 , 0x45, 0x57, 0x58, 0x4b, 0x50, 0x4d,  -1 ,  -1  },

    { 0x52, 0x43, 0x01, 0x47, 0x49,  -1 ,  -1 ,  -1 ,  -1 ,  -1 ,  -1  },

};

#define SPITZ_GPIO_AK_INT        13        /* Remote control */

#define SPITZ_GPIO_SYNC                16        /* Sync button */

#define SPITZ_GPIO_ON_KEY        95        /* Power button */

#define SPITZ_GPIO_SWA                97        /* Lid */

#define SPITZ_GPIO_SWB                96        /* Tablet mode */

/* The special buttons are mapped to unused keys */

static const int spitz_gpiomap[5] = {

    SPITZ_GPIO_AK_INT, SPITZ_GPIO_SYNC, SPITZ_GPIO_ON_KEY,

    SPITZ_GPIO_SWA, SPITZ_GPIO_SWB,

};

static int spitz_gpio_invert[5] = { 0, 0, 0, 0, 0, };

struct spitz_keyboard_s {

    struct pxa2xx_state_s *cpu;

    int keymap[0x80];

    uint16_t keyrow[SPITZ_KEY_SENSE_NUM];

    uint16_t strobe_state;

    uint16_t sense_state;

    uint16_t pre_map[0x100];

    uint16_t modifiers;

    uint16_t imodifiers;

    uint8_t fifo[16];

    int fifopos, fifolen;

    QEMUTimer *kbdtimer;

};

static void spitz_keyboard_sense_update(struct spitz_keyboard_s *s)

{

    int i;

    uint16_t strobe, sense = 0;

    for (i = 0; i < SPITZ_KEY_SENSE_NUM; i ++) {

        strobe = s->keyrow[i] & s->strobe_state;

        if (strobe) {

            sense |= 1 << i;

            if (!(s->sense_state & (1 << i)))

                pxa2xx_gpio_set(s->cpu->gpio, spitz_gpio_key_sense[i], 1);

        } else if (s->sense_state & (1 << i))

            pxa2xx_gpio_set(s->cpu->gpio, spitz_gpio_key_sense[i], 0);

    }

    s->sense_state = sense;

}

static void spitz_keyboard_strobe(int line, int level,

                struct spitz_keyboard_s *s)

{

    int i;

    for (i = 0; i < SPITZ_KEY_STROBE_NUM; i ++)

        if (spitz_gpio_key_strobe[i] == line) {

            if (level)

                s->strobe_state |= 1 << i;

            else

                s->strobe_state &= ~(1 << i);

            spitz_keyboard_sense_update(s);

            break;

        }

}

static void spitz_keyboard_keydown(struct spitz_keyboard_s *s, int keycode)

{

    int spitz_keycode = s->keymap[keycode & 0x7f];

    if (spitz_keycode == -1)

        return;

    /* Handle the additional keys */

    if ((spitz_keycode >> 4) == SPITZ_KEY_SENSE_NUM) {

        pxa2xx_gpio_set(s->cpu->gpio, spitz_gpiomap[spitz_keycode & 0xf],

                        (keycode < 0x80) ^

                        spitz_gpio_invert[spitz_keycode & 0xf]);

        return;

    }

    if (keycode & 0x80)

        s->keyrow[spitz_keycode >> 4] &= ~(1 << (spitz_keycode & 0xf));

    else

        s->keyrow[spitz_keycode >> 4] |= 1 << (spitz_keycode & 0xf);

    spitz_keyboard_sense_update(s);

}

#define SHIFT        (1 << 7)

#define CTRL        (1 << 8)

#define FN        (1 << 9)

#define QUEUE_KEY(c)        s->fifo[(s->fifopos + s->fifolen ++) & 0xf] = c

static void spitz_keyboard_handler(struct spitz_keyboard_s *s, int keycode)

{

    uint16_t code;

    int mapcode;

    switch (keycode) {

    case 0x2a:        /* Left Shift */

        s->modifiers |= 1;

        break;

    case 0xaa:

        s->modifiers &= ~1;

        break;

    case 0x36:        /* Right Shift */

        s->modifiers |= 2;

        break;

    case 0xb6:

        s->modifiers &= ~2;

        break;

    case 0x1d:        /* Control */

        s->modifiers |= 4;

        break;

    case 0x9d:

        s->modifiers &= ~4;

        break;

    case 0x38:        /* Alt */

        s->modifiers |= 8;

        break;

    case 0xb8:

        s->modifiers &= ~8;

        break;

    }

    code = s->pre_map[mapcode = ((s->modifiers & 3) ?

            (keycode | SHIFT) :

            (keycode & ~SHIFT))];

    if (code != mapcode) {

#if 0

        if ((code & SHIFT) && !(s->modifiers & 1))

            QUEUE_KEY(0x2a | (keycode & 0x80));

        if ((code & CTRL ) && !(s->modifiers & 4))

            QUEUE_KEY(0x1d | (keycode & 0x80));

        if ((code & FN   ) && !(s->modifiers & 8))

            QUEUE_KEY(0x38 | (keycode & 0x80));

        if ((code & FN   ) && (s->modifiers & 1))

            QUEUE_KEY(0x2a | (~keycode & 0x80));

        if ((code & FN   ) && (s->modifiers & 2))

            QUEUE_KEY(0x36 | (~keycode & 0x80));

#else

        if (keycode & 0x80) {

            if ((s->imodifiers & 1   ) && !(s->modifiers & 1))

                QUEUE_KEY(0x2a | 0x80);

            if ((s->imodifiers & 4   ) && !(s->modifiers & 4))

                QUEUE_KEY(0x1d | 0x80);

            if ((s->imodifiers & 8   ) && !(s->modifiers & 8))

                QUEUE_KEY(0x38 | 0x80);

            if ((s->imodifiers & 0x10) && (s->modifiers & 1))

                QUEUE_KEY(0x2a);

            if ((s->imodifiers & 0x20) && (s->modifiers & 2))

                QUEUE_KEY(0x36);

            s->imodifiers = 0;

        } else {

            if ((code & SHIFT) && !((s->modifiers | s->imodifiers) & 1)) {

                QUEUE_KEY(0x2a);

                s->imodifiers |= 1;

            }

            if ((code & CTRL ) && !((s->modifiers | s->imodifiers) & 4)) {

                QUEUE_KEY(0x1d);

                s->imodifiers |= 4;

            }

            if ((code & FN   ) && !((s->modifiers | s->imodifiers) & 8)) {

                QUEUE_KEY(0x38);

                s->imodifiers |= 8;

            }

            if ((code & FN   ) && (s->modifiers & 1) &&

                            !(s->imodifiers & 0x10)) {

                QUEUE_KEY(0x2a | 0x80);

                s->imodifiers |= 0x10;

            }

            if ((code & FN   ) && (s->modifiers & 2) &&

                            !(s->imodifiers & 0x20)) {

                QUEUE_KEY(0x36 | 0x80);

                s->imodifiers |= 0x20;

            }

        }

#endif

    }

    QUEUE_KEY((code & 0x7f) | (keycode & 0x80));

}

static void spitz_keyboard_tick(void *opaque)

{

    struct spitz_keyboard_s *s = (struct spitz_keyboard_s *) opaque;

    if (s->fifolen) {

        spitz_keyboard_keydown(s, s->fifo[s->fifopos ++]);

        s->fifolen --;

        if (s->fifopos >= 16)

            s->fifopos = 0;

    }

    qemu_mod_timer(s->kbdtimer, qemu_get_clock(vm_clock) + ticks_per_sec / 32);

}

static void spitz_keyboard_pre_map(struct spitz_keyboard_s *s)

{

    int i;

    for (i = 0; i < 0x100; i ++)

        s->pre_map[i] = i;

    s->pre_map[0x02 | SHIFT        ] = 0x02 | SHIFT;        /* exclam */

    s->pre_map[0x28 | SHIFT        ] = 0x03 | SHIFT;        /* quotedbl */

    s->pre_map[0x04 | SHIFT        ] = 0x04 | SHIFT;        /* numbersign */

    s->pre_map[0x05 | SHIFT        ] = 0x05 | SHIFT;        /* dollar */

    s->pre_map[0x06 | SHIFT        ] = 0x06 | SHIFT;        /* percent */

    s->pre_map[0x08 | SHIFT        ] = 0x07 | SHIFT;        /* ampersand */

    s->pre_map[0x28                ] = 0x08 | SHIFT;        /* apostrophe */

    s->pre_map[0x0a | SHIFT        ] = 0x09 | SHIFT;        /* parenleft */

    s->pre_map[0x0b | SHIFT        ] = 0x0a | SHIFT;        /* parenright */

    s->pre_map[0x29 | SHIFT        ] = 0x0b | SHIFT;        /* asciitilde */

    s->pre_map[0x03 | SHIFT        ] = 0x0c | SHIFT;        /* at */

    s->pre_map[0xd3                ] = 0x0e | FN;                /* Delete */

    s->pre_map[0x3a                ] = 0x0f | FN;                /* Caps_Lock */

    s->pre_map[0x07 | SHIFT        ] = 0x11 | FN;                /* asciicircum */

    s->pre_map[0x0d                ] = 0x12 | FN;                /* equal */

    s->pre_map[0x0d | SHIFT        ] = 0x13 | FN;                /* plus */

    s->pre_map[0x1a                ] = 0x14 | FN;                /* bracketleft */

    s->pre_map[0x1b                ] = 0x15 | FN;                /* bracketright */

    s->pre_map[0x27                ] = 0x22 | FN;                /* semicolon */

    s->pre_map[0x27 | SHIFT        ] = 0x23 | FN;                /* colon */

    s->pre_map[0x09 | SHIFT        ] = 0x24 | FN;                /* asterisk */

    s->pre_map[0x2b                ] = 0x25 | FN;                /* backslash */

    s->pre_map[0x2b | SHIFT        ] = 0x26 | FN;                /* bar */

    s->pre_map[0x0c | SHIFT        ] = 0x30 | FN;                /* underscore */

    s->pre_map[0x35                ] = 0x33 | SHIFT;        /* slash */

    s->pre_map[0x35 | SHIFT        ] = 0x34 | SHIFT;        /* question */

    s->pre_map[0x49                ] = 0x48 | FN;                /* Page_Up */

    s->pre_map[0x51                ] = 0x50 | FN;                /* Page_Down */

    s->modifiers = 0;

    s->imodifiers = 0;

    s->fifopos = 0;

    s->fifolen = 0;

    s->kbdtimer = qemu_new_timer(vm_clock, spitz_keyboard_tick, s);

    spitz_keyboard_tick(s);

}

#undef SHIFT

#undef CTRL

#undef FN

static void spitz_keyboard_save(QEMUFile *f, void *opaque)

{

    struct spitz_keyboard_s *s = (struct spitz_keyboard_s *) opaque;

    int i;

    qemu_put_be16s(f, &s->sense_state);

    qemu_put_be16s(f, &s->strobe_state);

    for (i = 0; i < 5; i ++)

        qemu_put_byte(f, spitz_gpio_invert[i]);

}

static int spitz_keyboard_load(QEMUFile *f, void *opaque, int version_id)

{

    struct spitz_keyboard_s *s = (struct spitz_keyboard_s *) opaque;

    int i;

    qemu_get_be16s(f, &s->sense_state);

    qemu_get_be16s(f, &s->strobe_state);

    for (i = 0; i < 5; i ++)

        spitz_gpio_invert[i] = qemu_get_byte(f);

    /* Release all pressed keys */

    memset(s->keyrow, 0, sizeof(s->keyrow));

    spitz_keyboard_sense_update(s);

    s->modifiers = 0;

    s->imodifiers = 0;

    s->fifopos = 0;

    s->fifolen = 0;

    return 0;

}

static void spitz_keyboard_register(struct pxa2xx_state_s *cpu)

{

    int i, j;

    struct spitz_keyboard_s *s;

    s = (struct spitz_keyboard_s *)

            qemu_mallocz(sizeof(struct spitz_keyboard_s));

    memset(s, 0, sizeof(struct spitz_keyboard_s));

    s->cpu = cpu;

    for (i = 0; i < 0x80; i ++)

        s->keymap[i] = -1;

    for (i = 0; i < SPITZ_KEY_SENSE_NUM + 1; i ++)

        for (j = 0; j < SPITZ_KEY_STROBE_NUM; j ++)

            if (spitz_keymap[i][j] != -1)

                s->keymap[spitz_keymap[i][j]] = (i << 4) | j;

    for (i = 0; i < SPITZ_KEY_STROBE_NUM; i ++)

        pxa2xx_gpio_handler_set(cpu->gpio, spitz_gpio_key_strobe[i],

                        (gpio_handler_t) spitz_keyboard_strobe, s);

    spitz_keyboard_pre_map(s);

    qemu_add_kbd_event_handler((QEMUPutKBDEvent *) spitz_keyboard_handler, s);

    register_savevm("spitz_keyboard", 0, 0,

                    spitz_keyboard_save, spitz_keyboard_load, s);

}

/* SCOOP devices */

struct scoop_info_s {

    target_phys_addr_t target_base;

    uint16_t status;

    uint16_t power;

    uint32_t gpio_level;

    uint32_t gpio_dir;

    uint32_t prev_level;

    struct {

        gpio_handler_t fn;

        void *opaque;

    } handler[16];

    uint16_t mcr;

    uint16_t cdr;

    uint16_t ccr;

    uint16_t irr;

    uint16_t imr;

    uint16_t isr;

    uint16_t gprr;

};

#define SCOOP_MCR        0x00

#define SCOOP_CDR        0x04

#define SCOOP_CSR        0x08

#define SCOOP_CPR        0x0c

#define SCOOP_CCR        0x10

#define SCOOP_IRR_IRM        0x14

#define SCOOP_IMR        0x18

#define SCOOP_ISR        0x1c

#define SCOOP_GPCR        0x20

#define SCOOP_GPWR        0x24

#define SCOOP_GPRR        0x28

static inline void scoop_gpio_handler_update(struct scoop_info_s *s) {

    uint32_t level, diff;

    int bit;

    level = s->gpio_level & s->gpio_dir;

    for (diff = s->prev_level ^ level; diff; diff ^= 1 << bit) {

        bit = ffs(diff) - 1;

        if (s->handler[bit].fn)

            s->handler[bit].fn(bit, (level >> bit) & 1,

                            s->handler[bit].opaque);

    }

    s->prev_level = level;

}

static uint32_t scoop_readb(void *opaque, target_phys_addr_t addr)

{

    struct scoop_info_s *s = (struct scoop_info_s *) opaque;

    addr -= s->target_base;

    switch (addr) {

    case SCOOP_MCR:

        return s->mcr;

    case SCOOP_CDR:

        return s->cdr;

    case SCOOP_CSR:

        return s->status;

    case SCOOP_CPR:

        return s->power;

    case SCOOP_CCR:

        return s->ccr;

    case SCOOP_IRR_IRM:

        return s->irr;

    case SCOOP_IMR:

        return s->imr;

    case SCOOP_ISR:

        return s->isr;

    case SCOOP_GPCR:

        return s->gpio_dir;

    case SCOOP_GPWR:

        return s->gpio_level;

    case SCOOP_GPRR:

        return s->gprr;

    default:

        spitz_printf("Bad register offset " REG_FMT "\n", addr);

    }

    return 0;

}

static void scoop_writeb(void *opaque, target_phys_addr_t addr, uint32_t value)

{

    struct scoop_info_s *s = (struct scoop_info_s *) opaque;

    addr -= s->target_base;

    value &= 0xffff;

    switch (addr) {

    case SCOOP_MCR:

        s->mcr = value;

        break;

    case SCOOP_CDR:

        s->cdr = value;

        break;

    case SCOOP_CPR:

        s->power = value;

        if (value & 0x80)

            s->power |= 0x8040;

        break;

    case SCOOP_CCR:

        s->ccr = value;

        break;

    case SCOOP_IRR_IRM:

        s->irr = value;

        break;

    case SCOOP_IMR:

        s->imr = value;

        break;

    case SCOOP_ISR:

        s->isr = value;

        break;

    case SCOOP_GPCR:

        s->gpio_dir = value;

        scoop_gpio_handler_update(s);

        break;

    case SCOOP_GPWR:

        s->gpio_level = value & s->gpio_dir;

        scoop_gpio_handler_update(s);

        break;

    case SCOOP_GPRR:

        s->gprr = value;

        break;

    default:

        spitz_printf("Bad register offset " REG_FMT "\n", addr);

    }

}

CPUReadMemoryFunc *scoop_readfn[] = {

    scoop_readb,

    scoop_readb,

    scoop_readb,

};

CPUWriteMemoryFunc *scoop_writefn[] = {

    scoop_writeb,

    scoop_writeb,

    scoop_writeb,

};

static inline void scoop_gpio_set(struct scoop_info_s *s, int line, int level)

{

    if (line >= 16) {

        spitz_printf("No GPIO pin %i\n", line);

        return;

    }

    if (level)

        s->gpio_level |= (1 << line);

    else

        s->gpio_level &= ~(1 << line);

}

static inline void scoop_gpio_handler_set(struct scoop_info_s *s, int line,

                gpio_handler_t handler, void *opaque) {

    if (line >= 16) {

        spitz_printf("No GPIO pin %i\n", line);

        return;

    }

    s->handler[line].fn = handler;

    s->handler[line].opaque = opaque;

}

static void scoop_save(QEMUFile *f, void *opaque)

{

    struct scoop_info_s *s = (struct scoop_info_s *) opaque;

    qemu_put_be16s(f, &s->status);

    qemu_put_be16s(f, &s->power);

    qemu_put_be32s(f, &s->gpio_level);

    qemu_put_be32s(f, &s->gpio_dir);

    qemu_put_be32s(f, &s->prev_level);

    qemu_put_be16s(f, &s->mcr);

    qemu_put_be16s(f, &s->cdr);

    qemu_put_be16s(f, &s->ccr);

    qemu_put_be16s(f, &s->irr);

    qemu_put_be16s(f, &s->imr);

    qemu_put_be16s(f, &s->isr);

    qemu_put_be16s(f, &s->gprr);

}

static int scoop_load(QEMUFile *f, void *opaque, int version_id)

{

    struct scoop_info_s *s = (struct scoop_info_s *) opaque;

    qemu_get_be16s(f, &s->status);

    qemu_get_be16s(f, &s->power);

    qemu_get_be32s(f, &s->gpio_level);

    qemu_get_be32s(f, &s->gpio_dir);

    qemu_get_be32s(f, &s->prev_level);

    qemu_get_be16s(f, &s->mcr);

    qemu_get_be16s(f, &s->cdr);

    qemu_get_be16s(f, &s->ccr);

    qemu_get_be16s(f, &s->irr);

    qemu_get_be16s(f, &s->imr);

    qemu_get_be16s(f, &s->isr);

    qemu_get_be16s(f, &s->gprr);

    return 0;

}

static struct scoop_info_s *spitz_scoop_init(struct pxa2xx_state_s *cpu,

                int count) {

    int iomemtype;

    struct scoop_info_s *s;

    s = (struct scoop_info_s *)

            qemu_mallocz(sizeof(struct scoop_info_s) * 2);

    memset(s, 0, sizeof(struct scoop_info_s) * count);

    s[0].target_base = 0x10800000;

    s[1].target_base = 0x08800040;

    /* Ready */

    s[0].status = 0x02;

    s[1].status = 0x02;

    iomemtype = cpu_register_io_memory(0, scoop_readfn,

                    scoop_writefn, &s[0]);

    cpu_register_physical_memory(s[0].target_base, 0xfff, iomemtype);

    register_savevm("scoop", 0, 0, scoop_save, scoop_load, &s[0]);

    if (count < 2)

        return s;

    iomemtype = cpu_register_io_memory(0, scoop_readfn,

                    scoop_writefn, &s[1]);

    cpu_register_physical_memory(s[1].target_base, 0xfff, iomemtype);

    register_savevm("scoop", 1, 0, scoop_save, scoop_load, &s[1]);

    return s;

}

/* LCD backlight controller */

#define LCDTG_RESCTL        0x00

#define LCDTG_PHACTRL        0x01

#define LCDTG_DUTYCTRL        0x02

#define LCDTG_POWERREG0        0x03

#define LCDTG_POWERREG1        0x04

#define LCDTG_GPOR3        0x05

#define LCDTG_PICTRL        0x06

#define LCDTG_POLCTRL        0x07

static int bl_intensity, bl_power;

static void spitz_bl_update(struct pxa2xx_state_s *s)

{

    if (bl_power && bl_intensity)

        spitz_printf("LCD Backlight now at %i/63\n", bl_intensity);

    else

        spitz_printf("LCD Backlight now off\n");

}

static void spitz_bl_bit5(int line, int level, void *opaque)

{

    int prev = bl_intensity;

    if (level)

        bl_intensity &= ~0x20;

    else

        bl_intensity |= 0x20;

    if (bl_power && prev != bl_intensity)

        spitz_bl_update((struct pxa2xx_state_s *) opaque);

}

static void spitz_bl_power(int line, int level, void *opaque)

{

    bl_power = !!level;

    spitz_bl_update((struct pxa2xx_state_s *) opaque);

}

static void spitz_lcdtg_dac_put(void *opaque, uint8_t cmd)

{

    int addr, value;

    addr = cmd >> 5;

    value = cmd & 0x1f;

    switch (addr) {

    case LCDTG_RESCTL:

        if (value)

            spitz_printf("LCD in QVGA mode\n");

        else

            spitz_printf("LCD in VGA mode\n");

        break;

    case LCDTG_DUTYCTRL:

        bl_intensity &= ~0x1f;

        bl_intensity |= value;

        if (bl_power)

            spitz_bl_update((struct pxa2xx_state_s *) opaque);

        break;

    case LCDTG_POWERREG0:

        /* Set common voltage to M62332FP */

        break;

    }

}

/* SSP devices */

#define CORGI_SSP_PORT                2

#define SPITZ_GPIO_LCDCON_CS        53

#define SPITZ_GPIO_ADS7846_CS        14

#define SPITZ_GPIO_MAX1111_CS        20

#define SPITZ_GPIO_TP_INT        11

static int lcd_en, ads_en, max_en;

static struct max111x_s *max1111;

static struct ads7846_state_s *ads7846;

/* "Demux" the signal based on current chipselect */

static uint32_t corgi_ssp_read(void *opaque)

{

    if (lcd_en)

        return 0;

    if (ads_en)

        return ads7846_read(ads7846);

    if (max_en)

        return max111x_read(max1111);

    return 0;

}

static void corgi_ssp_write(void *opaque, uint32_t value)

{

    if (lcd_en)

        spitz_lcdtg_dac_put(opaque, value);

    if (ads_en)

        ads7846_write(ads7846, value);

    if (max_en)

        max111x_write(max1111, value);

}

static void corgi_ssp_gpio_cs(int line, int level, struct pxa2xx_state_s *s)

{

    if (line == SPITZ_GPIO_LCDCON_CS)

        lcd_en = !level;

    else if (line == SPITZ_GPIO_ADS7846_CS)

        ads_en = !level;

    else if (line == SPITZ_GPIO_MAX1111_CS)

        max_en = !level;

}

#define MAX1111_BATT_VOLT        1

#define MAX1111_BATT_TEMP        2

#define MAX1111_ACIN_VOLT        3

#define SPITZ_BATTERY_TEMP        0xe0        /* About 2.9V */

#define SPITZ_BATTERY_VOLT        0xd0        /* About 4.0V */

#define SPITZ_CHARGEON_ACIN        0x80        /* About 5.0V */

static void spitz_adc_temp_on(int line, int level, void *opaque)

{

    if (!max1111)

        return;

    if (level)

        max111x_set_input(max1111, MAX1111_BATT_TEMP, SPITZ_BATTERY_TEMP);

    else

        max111x_set_input(max1111, MAX1111_BATT_TEMP, 0);

}

static void spitz_pendown_set(void *opaque, int line, int level)

{

    struct pxa2xx_state_s *cpu = (struct pxa2xx_state_s *) opaque;

    pxa2xx_gpio_set(cpu->gpio, SPITZ_GPIO_TP_INT, level);