Statistics
| Branch: | Revision:

root / hw / usb-uhci.c @ c1699988

History | View | Annotate | Download (28.4 kB)

1 bb36d470 bellard
/*
2 bb36d470 bellard
 * USB UHCI controller emulation
3 5fafdf24 ths
 *
4 bb36d470 bellard
 * Copyright (c) 2005 Fabrice Bellard
5 5fafdf24 ths
 *
6 54f254f9 aliguori
 * Copyright (c) 2008 Max Krasnyansky
7 54f254f9 aliguori
 *     Magor rewrite of the UHCI data structures parser and frame processor
8 54f254f9 aliguori
 *     Support for fully async operation and multiple outstanding transactions
9 54f254f9 aliguori
 *
10 bb36d470 bellard
 * Permission is hereby granted, free of charge, to any person obtaining a copy
11 bb36d470 bellard
 * of this software and associated documentation files (the "Software"), to deal
12 bb36d470 bellard
 * in the Software without restriction, including without limitation the rights
13 bb36d470 bellard
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
14 bb36d470 bellard
 * copies of the Software, and to permit persons to whom the Software is
15 bb36d470 bellard
 * furnished to do so, subject to the following conditions:
16 bb36d470 bellard
 *
17 bb36d470 bellard
 * The above copyright notice and this permission notice shall be included in
18 bb36d470 bellard
 * all copies or substantial portions of the Software.
19 bb36d470 bellard
 *
20 bb36d470 bellard
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
21 bb36d470 bellard
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
22 bb36d470 bellard
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
23 bb36d470 bellard
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
24 bb36d470 bellard
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
25 bb36d470 bellard
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
26 bb36d470 bellard
 * THE SOFTWARE.
27 bb36d470 bellard
 */
28 87ecb68b pbrook
#include "hw.h"
29 87ecb68b pbrook
#include "usb.h"
30 87ecb68b pbrook
#include "pci.h"
31 87ecb68b pbrook
#include "qemu-timer.h"
32 bb36d470 bellard
33 bb36d470 bellard
//#define DEBUG
34 54f254f9 aliguori
//#define DEBUG_DUMP_DATA
35 bb36d470 bellard
36 96217e31 ths
#define UHCI_CMD_FGR      (1 << 4)
37 96217e31 ths
#define UHCI_CMD_EGSM     (1 << 3)
38 bb36d470 bellard
#define UHCI_CMD_GRESET   (1 << 2)
39 bb36d470 bellard
#define UHCI_CMD_HCRESET  (1 << 1)
40 bb36d470 bellard
#define UHCI_CMD_RS       (1 << 0)
41 bb36d470 bellard
42 bb36d470 bellard
#define UHCI_STS_HCHALTED (1 << 5)
43 bb36d470 bellard
#define UHCI_STS_HCPERR   (1 << 4)
44 bb36d470 bellard
#define UHCI_STS_HSERR    (1 << 3)
45 bb36d470 bellard
#define UHCI_STS_RD       (1 << 2)
46 bb36d470 bellard
#define UHCI_STS_USBERR   (1 << 1)
47 bb36d470 bellard
#define UHCI_STS_USBINT   (1 << 0)
48 bb36d470 bellard
49 bb36d470 bellard
#define TD_CTRL_SPD     (1 << 29)
50 bb36d470 bellard
#define TD_CTRL_ERROR_SHIFT  27
51 bb36d470 bellard
#define TD_CTRL_IOS     (1 << 25)
52 bb36d470 bellard
#define TD_CTRL_IOC     (1 << 24)
53 bb36d470 bellard
#define TD_CTRL_ACTIVE  (1 << 23)
54 bb36d470 bellard
#define TD_CTRL_STALL   (1 << 22)
55 bb36d470 bellard
#define TD_CTRL_BABBLE  (1 << 20)
56 bb36d470 bellard
#define TD_CTRL_NAK     (1 << 19)
57 bb36d470 bellard
#define TD_CTRL_TIMEOUT (1 << 18)
58 bb36d470 bellard
59 bb36d470 bellard
#define UHCI_PORT_RESET (1 << 9)
60 bb36d470 bellard
#define UHCI_PORT_LSDA  (1 << 8)
61 bb36d470 bellard
#define UHCI_PORT_ENC   (1 << 3)
62 bb36d470 bellard
#define UHCI_PORT_EN    (1 << 2)
63 bb36d470 bellard
#define UHCI_PORT_CSC   (1 << 1)
64 bb36d470 bellard
#define UHCI_PORT_CCS   (1 << 0)
65 bb36d470 bellard
66 bb36d470 bellard
#define FRAME_TIMER_FREQ 1000
67 bb36d470 bellard
68 bb36d470 bellard
#define FRAME_MAX_LOOPS  100
69 bb36d470 bellard
70 bb36d470 bellard
#define NB_PORTS 2
71 bb36d470 bellard
72 54f254f9 aliguori
#ifdef DEBUG
73 54f254f9 aliguori
#define dprintf printf
74 54f254f9 aliguori
75 0bf9e31a Blue Swirl
static const char *pid2str(int pid)
76 54f254f9 aliguori
{
77 54f254f9 aliguori
    switch (pid) {
78 54f254f9 aliguori
    case USB_TOKEN_SETUP: return "SETUP";
79 54f254f9 aliguori
    case USB_TOKEN_IN:    return "IN";
80 54f254f9 aliguori
    case USB_TOKEN_OUT:   return "OUT";
81 54f254f9 aliguori
    }
82 54f254f9 aliguori
    return "?";
83 54f254f9 aliguori
}
84 54f254f9 aliguori
85 54f254f9 aliguori
#else
86 54f254f9 aliguori
#define dprintf(...)
87 54f254f9 aliguori
#endif
88 54f254f9 aliguori
89 54f254f9 aliguori
#ifdef DEBUG_DUMP_DATA
90 54f254f9 aliguori
static void dump_data(const uint8_t *data, int len)
91 54f254f9 aliguori
{
92 54f254f9 aliguori
    int i;
93 54f254f9 aliguori
94 54f254f9 aliguori
    printf("uhci: data: ");
95 54f254f9 aliguori
    for(i = 0; i < len; i++)
96 54f254f9 aliguori
        printf(" %02x", data[i]);
97 54f254f9 aliguori
    printf("\n");
98 54f254f9 aliguori
}
99 54f254f9 aliguori
#else
100 54f254f9 aliguori
static void dump_data(const uint8_t *data, int len) {}
101 54f254f9 aliguori
#endif
102 54f254f9 aliguori
103 54f254f9 aliguori
/* 
104 54f254f9 aliguori
 * Pending async transaction.
105 54f254f9 aliguori
 * 'packet' must be the first field because completion
106 54f254f9 aliguori
 * handler does "(UHCIAsync *) pkt" cast.
107 54f254f9 aliguori
 */
108 54f254f9 aliguori
typedef struct UHCIAsync {
109 54f254f9 aliguori
    USBPacket packet;
110 54f254f9 aliguori
    struct UHCIAsync *next;
111 54f254f9 aliguori
    uint32_t  td;
112 54f254f9 aliguori
    uint32_t  token;
113 54f254f9 aliguori
    int8_t    valid;
114 54f254f9 aliguori
    uint8_t   done;
115 54f254f9 aliguori
    uint8_t   buffer[2048];
116 54f254f9 aliguori
} UHCIAsync;
117 54f254f9 aliguori
118 bb36d470 bellard
typedef struct UHCIPort {
119 bb36d470 bellard
    USBPort port;
120 bb36d470 bellard
    uint16_t ctrl;
121 bb36d470 bellard
} UHCIPort;
122 bb36d470 bellard
123 bb36d470 bellard
typedef struct UHCIState {
124 bb36d470 bellard
    PCIDevice dev;
125 b2317837 Gerd Hoffmann
    USBBus bus;
126 bb36d470 bellard
    uint16_t cmd; /* cmd register */
127 bb36d470 bellard
    uint16_t status;
128 bb36d470 bellard
    uint16_t intr; /* interrupt enable register */
129 bb36d470 bellard
    uint16_t frnum; /* frame number */
130 bb36d470 bellard
    uint32_t fl_base_addr; /* frame list base address */
131 bb36d470 bellard
    uint8_t sof_timing;
132 bb36d470 bellard
    uint8_t status2; /* bit 0 and 1 are used to generate UHCI_STS_USBINT */
133 bb36d470 bellard
    QEMUTimer *frame_timer;
134 bb36d470 bellard
    UHCIPort ports[NB_PORTS];
135 4d611c9a pbrook
136 4d611c9a pbrook
    /* Interrupts that should be raised at the end of the current frame.  */
137 4d611c9a pbrook
    uint32_t pending_int_mask;
138 54f254f9 aliguori
139 54f254f9 aliguori
    /* Active packets */
140 54f254f9 aliguori
    UHCIAsync *async_pending;
141 54f254f9 aliguori
    UHCIAsync *async_pool;
142 64e58fe5 Juan Quintela
    uint8_t num_ports_vmstate;
143 bb36d470 bellard
} UHCIState;
144 bb36d470 bellard
145 bb36d470 bellard
typedef struct UHCI_TD {
146 bb36d470 bellard
    uint32_t link;
147 bb36d470 bellard
    uint32_t ctrl; /* see TD_CTRL_xxx */
148 bb36d470 bellard
    uint32_t token;
149 bb36d470 bellard
    uint32_t buffer;
150 bb36d470 bellard
} UHCI_TD;
151 bb36d470 bellard
152 bb36d470 bellard
typedef struct UHCI_QH {
153 bb36d470 bellard
    uint32_t link;
154 bb36d470 bellard
    uint32_t el_link;
155 bb36d470 bellard
} UHCI_QH;
156 bb36d470 bellard
157 54f254f9 aliguori
static UHCIAsync *uhci_async_alloc(UHCIState *s)
158 54f254f9 aliguori
{
159 54f254f9 aliguori
    UHCIAsync *async = qemu_malloc(sizeof(UHCIAsync));
160 487414f1 aliguori
161 487414f1 aliguori
    memset(&async->packet, 0, sizeof(async->packet));
162 487414f1 aliguori
    async->valid = 0;
163 487414f1 aliguori
    async->td    = 0;
164 487414f1 aliguori
    async->token = 0;
165 487414f1 aliguori
    async->done  = 0;
166 487414f1 aliguori
    async->next  = NULL;
167 54f254f9 aliguori
168 54f254f9 aliguori
    return async;
169 54f254f9 aliguori
}
170 54f254f9 aliguori
171 54f254f9 aliguori
static void uhci_async_free(UHCIState *s, UHCIAsync *async)
172 54f254f9 aliguori
{
173 54f254f9 aliguori
    qemu_free(async);
174 54f254f9 aliguori
}
175 54f254f9 aliguori
176 54f254f9 aliguori
static void uhci_async_link(UHCIState *s, UHCIAsync *async)
177 54f254f9 aliguori
{
178 54f254f9 aliguori
    async->next = s->async_pending;
179 54f254f9 aliguori
    s->async_pending = async;
180 54f254f9 aliguori
}
181 54f254f9 aliguori
182 54f254f9 aliguori
static void uhci_async_unlink(UHCIState *s, UHCIAsync *async)
183 54f254f9 aliguori
{
184 54f254f9 aliguori
    UHCIAsync *curr = s->async_pending;
185 54f254f9 aliguori
    UHCIAsync **prev = &s->async_pending;
186 54f254f9 aliguori
187 54f254f9 aliguori
    while (curr) {
188 54f254f9 aliguori
        if (curr == async) {
189 54f254f9 aliguori
            *prev = curr->next;
190 54f254f9 aliguori
            return;
191 54f254f9 aliguori
        }
192 54f254f9 aliguori
193 54f254f9 aliguori
        prev = &curr->next;
194 54f254f9 aliguori
        curr = curr->next;
195 54f254f9 aliguori
    }
196 54f254f9 aliguori
}
197 54f254f9 aliguori
198 54f254f9 aliguori
static void uhci_async_cancel(UHCIState *s, UHCIAsync *async)
199 54f254f9 aliguori
{
200 54f254f9 aliguori
    dprintf("uhci: cancel td 0x%x token 0x%x done %u\n",
201 54f254f9 aliguori
           async->td, async->token, async->done);
202 54f254f9 aliguori
203 54f254f9 aliguori
    if (!async->done)
204 54f254f9 aliguori
        usb_cancel_packet(&async->packet);
205 54f254f9 aliguori
    uhci_async_free(s, async);
206 54f254f9 aliguori
}
207 54f254f9 aliguori
208 54f254f9 aliguori
/*
209 54f254f9 aliguori
 * Mark all outstanding async packets as invalid.
210 54f254f9 aliguori
 * This is used for canceling them when TDs are removed by the HCD.
211 54f254f9 aliguori
 */
212 54f254f9 aliguori
static UHCIAsync *uhci_async_validate_begin(UHCIState *s)
213 54f254f9 aliguori
{
214 54f254f9 aliguori
    UHCIAsync *async = s->async_pending;
215 54f254f9 aliguori
216 54f254f9 aliguori
    while (async) {
217 54f254f9 aliguori
        async->valid--;
218 54f254f9 aliguori
        async = async->next;
219 54f254f9 aliguori
    }
220 54f254f9 aliguori
    return NULL;
221 54f254f9 aliguori
}
222 54f254f9 aliguori
223 54f254f9 aliguori
/*
224 54f254f9 aliguori
 * Cancel async packets that are no longer valid
225 54f254f9 aliguori
 */
226 54f254f9 aliguori
static void uhci_async_validate_end(UHCIState *s)
227 54f254f9 aliguori
{
228 54f254f9 aliguori
    UHCIAsync *curr = s->async_pending;
229 54f254f9 aliguori
    UHCIAsync **prev = &s->async_pending;
230 54f254f9 aliguori
    UHCIAsync *next;
231 54f254f9 aliguori
232 54f254f9 aliguori
    while (curr) {
233 54f254f9 aliguori
        if (curr->valid > 0) {
234 54f254f9 aliguori
            prev = &curr->next;
235 54f254f9 aliguori
            curr = curr->next;
236 54f254f9 aliguori
            continue;
237 54f254f9 aliguori
        }
238 54f254f9 aliguori
239 54f254f9 aliguori
        next = curr->next;
240 54f254f9 aliguori
241 54f254f9 aliguori
        /* Unlink */
242 54f254f9 aliguori
        *prev = next;
243 54f254f9 aliguori
244 54f254f9 aliguori
        uhci_async_cancel(s, curr);
245 54f254f9 aliguori
246 54f254f9 aliguori
        curr = next;
247 54f254f9 aliguori
    }
248 54f254f9 aliguori
}
249 54f254f9 aliguori
250 54f254f9 aliguori
static void uhci_async_cancel_all(UHCIState *s)
251 54f254f9 aliguori
{
252 54f254f9 aliguori
    UHCIAsync *curr = s->async_pending;
253 54f254f9 aliguori
    UHCIAsync *next;
254 54f254f9 aliguori
255 54f254f9 aliguori
    while (curr) {
256 54f254f9 aliguori
        next = curr->next;
257 54f254f9 aliguori
258 54f254f9 aliguori
        uhci_async_cancel(s, curr);
259 54f254f9 aliguori
260 54f254f9 aliguori
        curr = next;
261 54f254f9 aliguori
    }
262 54f254f9 aliguori
263 54f254f9 aliguori
    s->async_pending = NULL;
264 54f254f9 aliguori
}
265 54f254f9 aliguori
266 54f254f9 aliguori
static UHCIAsync *uhci_async_find_td(UHCIState *s, uint32_t addr, uint32_t token)
267 54f254f9 aliguori
{
268 54f254f9 aliguori
    UHCIAsync *async = s->async_pending;
269 e8ee3c72 aurel32
    UHCIAsync *match = NULL;
270 e8ee3c72 aurel32
    int count = 0;
271 e8ee3c72 aurel32
272 e8ee3c72 aurel32
    /*
273 e8ee3c72 aurel32
     * We're looking for the best match here. ie both td addr and token.
274 e8ee3c72 aurel32
     * Otherwise we return last good match. ie just token.
275 e8ee3c72 aurel32
     * It's ok to match just token because it identifies the transaction
276 e8ee3c72 aurel32
     * rather well, token includes: device addr, endpoint, size, etc.
277 e8ee3c72 aurel32
     *
278 e8ee3c72 aurel32
     * Also since we queue async transactions in reverse order by returning
279 e8ee3c72 aurel32
     * last good match we restores the order.
280 e8ee3c72 aurel32
     *
281 e8ee3c72 aurel32
     * It's expected that we wont have a ton of outstanding transactions.
282 e8ee3c72 aurel32
     * If we ever do we'd want to optimize this algorithm.
283 e8ee3c72 aurel32
     */
284 54f254f9 aliguori
285 54f254f9 aliguori
    while (async) {
286 e8ee3c72 aurel32
        if (async->token == token) {
287 e8ee3c72 aurel32
            /* Good match */
288 e8ee3c72 aurel32
            match = async;
289 e8ee3c72 aurel32
290 e8ee3c72 aurel32
            if (async->td == addr) {
291 e8ee3c72 aurel32
                /* Best match */
292 e8ee3c72 aurel32
                break;
293 54f254f9 aliguori
            }
294 54f254f9 aliguori
        }
295 54f254f9 aliguori
296 54f254f9 aliguori
        async = async->next;
297 e8ee3c72 aurel32
        count++;
298 54f254f9 aliguori
    }
299 e8ee3c72 aurel32
300 e8ee3c72 aurel32
    if (count > 64)
301 e8ee3c72 aurel32
        fprintf(stderr, "uhci: warning lots of async transactions\n");
302 e8ee3c72 aurel32
303 e8ee3c72 aurel32
    return match;
304 54f254f9 aliguori
}
305 54f254f9 aliguori
306 bb36d470 bellard
static void uhci_attach(USBPort *port1, USBDevice *dev);
307 bb36d470 bellard
308 bb36d470 bellard
static void uhci_update_irq(UHCIState *s)
309 bb36d470 bellard
{
310 bb36d470 bellard
    int level;
311 bb36d470 bellard
    if (((s->status2 & 1) && (s->intr & (1 << 2))) ||
312 bb36d470 bellard
        ((s->status2 & 2) && (s->intr & (1 << 3))) ||
313 bb36d470 bellard
        ((s->status & UHCI_STS_USBERR) && (s->intr & (1 << 0))) ||
314 bb36d470 bellard
        ((s->status & UHCI_STS_RD) && (s->intr & (1 << 1))) ||
315 bb36d470 bellard
        (s->status & UHCI_STS_HSERR) ||
316 bb36d470 bellard
        (s->status & UHCI_STS_HCPERR)) {
317 bb36d470 bellard
        level = 1;
318 bb36d470 bellard
    } else {
319 bb36d470 bellard
        level = 0;
320 bb36d470 bellard
    }
321 d537cf6c pbrook
    qemu_set_irq(s->dev.irq[3], level);
322 bb36d470 bellard
}
323 bb36d470 bellard
324 c8075ac3 Gleb Natapov
static void uhci_reset(void *opaque)
325 bb36d470 bellard
{
326 c8075ac3 Gleb Natapov
    UHCIState *s = opaque;
327 bb36d470 bellard
    uint8_t *pci_conf;
328 bb36d470 bellard
    int i;
329 bb36d470 bellard
    UHCIPort *port;
330 bb36d470 bellard
331 6f382b5e aliguori
    dprintf("uhci: full reset\n");
332 6f382b5e aliguori
333 bb36d470 bellard
    pci_conf = s->dev.config;
334 bb36d470 bellard
335 bb36d470 bellard
    pci_conf[0x6a] = 0x01; /* usb clock */
336 bb36d470 bellard
    pci_conf[0x6b] = 0x00;
337 bb36d470 bellard
    s->cmd = 0;
338 bb36d470 bellard
    s->status = 0;
339 bb36d470 bellard
    s->status2 = 0;
340 bb36d470 bellard
    s->intr = 0;
341 bb36d470 bellard
    s->fl_base_addr = 0;
342 bb36d470 bellard
    s->sof_timing = 64;
343 54f254f9 aliguori
344 bb36d470 bellard
    for(i = 0; i < NB_PORTS; i++) {
345 bb36d470 bellard
        port = &s->ports[i];
346 bb36d470 bellard
        port->ctrl = 0x0080;
347 a594cfbf bellard
        if (port->port.dev)
348 a594cfbf bellard
            uhci_attach(&port->port, port->port.dev);
349 bb36d470 bellard
    }
350 54f254f9 aliguori
351 54f254f9 aliguori
    uhci_async_cancel_all(s);
352 bb36d470 bellard
}
353 bb36d470 bellard
354 817afc61 Juan Quintela
static void uhci_pre_save(void *opaque)
355 b9dc033c balrog
{
356 b9dc033c balrog
    UHCIState *s = opaque;
357 b9dc033c balrog
358 6f382b5e aliguori
    uhci_async_cancel_all(s);
359 b9dc033c balrog
}
360 b9dc033c balrog
361 817afc61 Juan Quintela
static const VMStateDescription vmstate_uhci_port = {
362 817afc61 Juan Quintela
    .name = "uhci port",
363 817afc61 Juan Quintela
    .version_id = 1,
364 817afc61 Juan Quintela
    .minimum_version_id = 1,
365 817afc61 Juan Quintela
    .minimum_version_id_old = 1,
366 817afc61 Juan Quintela
    .fields      = (VMStateField []) {
367 817afc61 Juan Quintela
        VMSTATE_UINT16(ctrl, UHCIPort),
368 817afc61 Juan Quintela
        VMSTATE_END_OF_LIST()
369 817afc61 Juan Quintela
    }
370 817afc61 Juan Quintela
};
371 817afc61 Juan Quintela
372 817afc61 Juan Quintela
static const VMStateDescription vmstate_uhci = {
373 817afc61 Juan Quintela
    .name = "uhci",
374 817afc61 Juan Quintela
    .version_id = 1,
375 817afc61 Juan Quintela
    .minimum_version_id = 1,
376 817afc61 Juan Quintela
    .minimum_version_id_old = 1,
377 817afc61 Juan Quintela
    .pre_save = uhci_pre_save,
378 817afc61 Juan Quintela
    .fields      = (VMStateField []) {
379 817afc61 Juan Quintela
        VMSTATE_PCI_DEVICE(dev, UHCIState),
380 817afc61 Juan Quintela
        VMSTATE_UINT8_EQUAL(num_ports_vmstate, UHCIState),
381 817afc61 Juan Quintela
        VMSTATE_STRUCT_ARRAY(ports, UHCIState, NB_PORTS, 1,
382 817afc61 Juan Quintela
                             vmstate_uhci_port, UHCIPort),
383 817afc61 Juan Quintela
        VMSTATE_UINT16(cmd, UHCIState),
384 817afc61 Juan Quintela
        VMSTATE_UINT16(status, UHCIState),
385 817afc61 Juan Quintela
        VMSTATE_UINT16(intr, UHCIState),
386 817afc61 Juan Quintela
        VMSTATE_UINT16(frnum, UHCIState),
387 817afc61 Juan Quintela
        VMSTATE_UINT32(fl_base_addr, UHCIState),
388 817afc61 Juan Quintela
        VMSTATE_UINT8(sof_timing, UHCIState),
389 817afc61 Juan Quintela
        VMSTATE_UINT8(status2, UHCIState),
390 817afc61 Juan Quintela
        VMSTATE_TIMER(frame_timer, UHCIState),
391 817afc61 Juan Quintela
        VMSTATE_END_OF_LIST()
392 817afc61 Juan Quintela
    }
393 817afc61 Juan Quintela
};
394 b9dc033c balrog
395 bb36d470 bellard
static void uhci_ioport_writeb(void *opaque, uint32_t addr, uint32_t val)
396 bb36d470 bellard
{
397 bb36d470 bellard
    UHCIState *s = opaque;
398 3b46e624 ths
399 bb36d470 bellard
    addr &= 0x1f;
400 bb36d470 bellard
    switch(addr) {
401 bb36d470 bellard
    case 0x0c:
402 bb36d470 bellard
        s->sof_timing = val;
403 bb36d470 bellard
        break;
404 bb36d470 bellard
    }
405 bb36d470 bellard
}
406 bb36d470 bellard
407 bb36d470 bellard
static uint32_t uhci_ioport_readb(void *opaque, uint32_t addr)
408 bb36d470 bellard
{
409 bb36d470 bellard
    UHCIState *s = opaque;
410 bb36d470 bellard
    uint32_t val;
411 bb36d470 bellard
412 bb36d470 bellard
    addr &= 0x1f;
413 bb36d470 bellard
    switch(addr) {
414 bb36d470 bellard
    case 0x0c:
415 bb36d470 bellard
        val = s->sof_timing;
416 d80cfb3f pbrook
        break;
417 bb36d470 bellard
    default:
418 bb36d470 bellard
        val = 0xff;
419 bb36d470 bellard
        break;
420 bb36d470 bellard
    }
421 bb36d470 bellard
    return val;
422 bb36d470 bellard
}
423 bb36d470 bellard
424 bb36d470 bellard
static void uhci_ioport_writew(void *opaque, uint32_t addr, uint32_t val)
425 bb36d470 bellard
{
426 bb36d470 bellard
    UHCIState *s = opaque;
427 3b46e624 ths
428 bb36d470 bellard
    addr &= 0x1f;
429 54f254f9 aliguori
    dprintf("uhci: writew port=0x%04x val=0x%04x\n", addr, val);
430 54f254f9 aliguori
431 bb36d470 bellard
    switch(addr) {
432 bb36d470 bellard
    case 0x00:
433 bb36d470 bellard
        if ((val & UHCI_CMD_RS) && !(s->cmd & UHCI_CMD_RS)) {
434 bb36d470 bellard
            /* start frame processing */
435 bb36d470 bellard
            qemu_mod_timer(s->frame_timer, qemu_get_clock(vm_clock));
436 52328140 bellard
            s->status &= ~UHCI_STS_HCHALTED;
437 467d409f bellard
        } else if (!(val & UHCI_CMD_RS)) {
438 52328140 bellard
            s->status |= UHCI_STS_HCHALTED;
439 bb36d470 bellard
        }
440 bb36d470 bellard
        if (val & UHCI_CMD_GRESET) {
441 bb36d470 bellard
            UHCIPort *port;
442 bb36d470 bellard
            USBDevice *dev;
443 bb36d470 bellard
            int i;
444 bb36d470 bellard
445 bb36d470 bellard
            /* send reset on the USB bus */
446 bb36d470 bellard
            for(i = 0; i < NB_PORTS; i++) {
447 bb36d470 bellard
                port = &s->ports[i];
448 a594cfbf bellard
                dev = port->port.dev;
449 bb36d470 bellard
                if (dev) {
450 4d611c9a pbrook
                    usb_send_msg(dev, USB_MSG_RESET);
451 bb36d470 bellard
                }
452 bb36d470 bellard
            }
453 bb36d470 bellard
            uhci_reset(s);
454 bb36d470 bellard
            return;
455 bb36d470 bellard
        }
456 5e9ab4c4 bellard
        if (val & UHCI_CMD_HCRESET) {
457 bb36d470 bellard
            uhci_reset(s);
458 bb36d470 bellard
            return;
459 bb36d470 bellard
        }
460 bb36d470 bellard
        s->cmd = val;
461 bb36d470 bellard
        break;
462 bb36d470 bellard
    case 0x02:
463 bb36d470 bellard
        s->status &= ~val;
464 bb36d470 bellard
        /* XXX: the chip spec is not coherent, so we add a hidden
465 bb36d470 bellard
           register to distinguish between IOC and SPD */
466 bb36d470 bellard
        if (val & UHCI_STS_USBINT)
467 bb36d470 bellard
            s->status2 = 0;
468 bb36d470 bellard
        uhci_update_irq(s);
469 bb36d470 bellard
        break;
470 bb36d470 bellard
    case 0x04:
471 bb36d470 bellard
        s->intr = val;
472 bb36d470 bellard
        uhci_update_irq(s);
473 bb36d470 bellard
        break;
474 bb36d470 bellard
    case 0x06:
475 bb36d470 bellard
        if (s->status & UHCI_STS_HCHALTED)
476 bb36d470 bellard
            s->frnum = val & 0x7ff;
477 bb36d470 bellard
        break;
478 bb36d470 bellard
    case 0x10 ... 0x1f:
479 bb36d470 bellard
        {
480 bb36d470 bellard
            UHCIPort *port;
481 bb36d470 bellard
            USBDevice *dev;
482 bb36d470 bellard
            int n;
483 bb36d470 bellard
484 bb36d470 bellard
            n = (addr >> 1) & 7;
485 bb36d470 bellard
            if (n >= NB_PORTS)
486 bb36d470 bellard
                return;
487 bb36d470 bellard
            port = &s->ports[n];
488 a594cfbf bellard
            dev = port->port.dev;
489 bb36d470 bellard
            if (dev) {
490 bb36d470 bellard
                /* port reset */
491 5fafdf24 ths
                if ( (val & UHCI_PORT_RESET) &&
492 bb36d470 bellard
                     !(port->ctrl & UHCI_PORT_RESET) ) {
493 4d611c9a pbrook
                    usb_send_msg(dev, USB_MSG_RESET);
494 bb36d470 bellard
                }
495 bb36d470 bellard
            }
496 bb36d470 bellard
            port->ctrl = (port->ctrl & 0x01fb) | (val & ~0x01fb);
497 bb36d470 bellard
            /* some bits are reset when a '1' is written to them */
498 bb36d470 bellard
            port->ctrl &= ~(val & 0x000a);
499 bb36d470 bellard
        }
500 bb36d470 bellard
        break;
501 bb36d470 bellard
    }
502 bb36d470 bellard
}
503 bb36d470 bellard
504 bb36d470 bellard
static uint32_t uhci_ioport_readw(void *opaque, uint32_t addr)
505 bb36d470 bellard
{
506 bb36d470 bellard
    UHCIState *s = opaque;
507 bb36d470 bellard
    uint32_t val;
508 bb36d470 bellard
509 bb36d470 bellard
    addr &= 0x1f;
510 bb36d470 bellard
    switch(addr) {
511 bb36d470 bellard
    case 0x00:
512 bb36d470 bellard
        val = s->cmd;
513 bb36d470 bellard
        break;
514 bb36d470 bellard
    case 0x02:
515 bb36d470 bellard
        val = s->status;
516 bb36d470 bellard
        break;
517 bb36d470 bellard
    case 0x04:
518 bb36d470 bellard
        val = s->intr;
519 bb36d470 bellard
        break;
520 bb36d470 bellard
    case 0x06:
521 bb36d470 bellard
        val = s->frnum;
522 bb36d470 bellard
        break;
523 bb36d470 bellard
    case 0x10 ... 0x1f:
524 bb36d470 bellard
        {
525 bb36d470 bellard
            UHCIPort *port;
526 bb36d470 bellard
            int n;
527 bb36d470 bellard
            n = (addr >> 1) & 7;
528 5fafdf24 ths
            if (n >= NB_PORTS)
529 bb36d470 bellard
                goto read_default;
530 bb36d470 bellard
            port = &s->ports[n];
531 bb36d470 bellard
            val = port->ctrl;
532 bb36d470 bellard
        }
533 bb36d470 bellard
        break;
534 bb36d470 bellard
    default:
535 bb36d470 bellard
    read_default:
536 bb36d470 bellard
        val = 0xff7f; /* disabled port */
537 bb36d470 bellard
        break;
538 bb36d470 bellard
    }
539 54f254f9 aliguori
540 54f254f9 aliguori
    dprintf("uhci: readw port=0x%04x val=0x%04x\n", addr, val);
541 54f254f9 aliguori
542 bb36d470 bellard
    return val;
543 bb36d470 bellard
}
544 bb36d470 bellard
545 bb36d470 bellard
static void uhci_ioport_writel(void *opaque, uint32_t addr, uint32_t val)
546 bb36d470 bellard
{
547 bb36d470 bellard
    UHCIState *s = opaque;
548 bb36d470 bellard
549 bb36d470 bellard
    addr &= 0x1f;
550 54f254f9 aliguori
    dprintf("uhci: writel port=0x%04x val=0x%08x\n", addr, val);
551 54f254f9 aliguori
552 bb36d470 bellard
    switch(addr) {
553 bb36d470 bellard
    case 0x08:
554 bb36d470 bellard
        s->fl_base_addr = val & ~0xfff;
555 bb36d470 bellard
        break;
556 bb36d470 bellard
    }
557 bb36d470 bellard
}
558 bb36d470 bellard
559 bb36d470 bellard
static uint32_t uhci_ioport_readl(void *opaque, uint32_t addr)
560 bb36d470 bellard
{
561 bb36d470 bellard
    UHCIState *s = opaque;
562 bb36d470 bellard
    uint32_t val;
563 bb36d470 bellard
564 bb36d470 bellard
    addr &= 0x1f;
565 bb36d470 bellard
    switch(addr) {
566 bb36d470 bellard
    case 0x08:
567 bb36d470 bellard
        val = s->fl_base_addr;
568 bb36d470 bellard
        break;
569 bb36d470 bellard
    default:
570 bb36d470 bellard
        val = 0xffffffff;
571 bb36d470 bellard
        break;
572 bb36d470 bellard
    }
573 bb36d470 bellard
    return val;
574 bb36d470 bellard
}
575 bb36d470 bellard
576 96217e31 ths
/* signal resume if controller suspended */
577 96217e31 ths
static void uhci_resume (void *opaque)
578 96217e31 ths
{
579 96217e31 ths
    UHCIState *s = (UHCIState *)opaque;
580 96217e31 ths
581 96217e31 ths
    if (!s)
582 96217e31 ths
        return;
583 96217e31 ths
584 96217e31 ths
    if (s->cmd & UHCI_CMD_EGSM) {
585 96217e31 ths
        s->cmd |= UHCI_CMD_FGR;
586 96217e31 ths
        s->status |= UHCI_STS_RD;
587 96217e31 ths
        uhci_update_irq(s);
588 96217e31 ths
    }
589 96217e31 ths
}
590 96217e31 ths
591 bb36d470 bellard
static void uhci_attach(USBPort *port1, USBDevice *dev)
592 bb36d470 bellard
{
593 bb36d470 bellard
    UHCIState *s = port1->opaque;
594 bb36d470 bellard
    UHCIPort *port = &s->ports[port1->index];
595 bb36d470 bellard
596 bb36d470 bellard
    if (dev) {
597 a594cfbf bellard
        if (port->port.dev) {
598 bb36d470 bellard
            usb_attach(port1, NULL);
599 bb36d470 bellard
        }
600 bb36d470 bellard
        /* set connect status */
601 61064870 pbrook
        port->ctrl |= UHCI_PORT_CCS | UHCI_PORT_CSC;
602 61064870 pbrook
603 bb36d470 bellard
        /* update speed */
604 bb36d470 bellard
        if (dev->speed == USB_SPEED_LOW)
605 bb36d470 bellard
            port->ctrl |= UHCI_PORT_LSDA;
606 bb36d470 bellard
        else
607 bb36d470 bellard
            port->ctrl &= ~UHCI_PORT_LSDA;
608 96217e31 ths
609 96217e31 ths
        uhci_resume(s);
610 96217e31 ths
611 a594cfbf bellard
        port->port.dev = dev;
612 bb36d470 bellard
        /* send the attach message */
613 4d611c9a pbrook
        usb_send_msg(dev, USB_MSG_ATTACH);
614 bb36d470 bellard
    } else {
615 bb36d470 bellard
        /* set connect status */
616 61064870 pbrook
        if (port->ctrl & UHCI_PORT_CCS) {
617 61064870 pbrook
            port->ctrl &= ~UHCI_PORT_CCS;
618 61064870 pbrook
            port->ctrl |= UHCI_PORT_CSC;
619 bb36d470 bellard
        }
620 bb36d470 bellard
        /* disable port */
621 bb36d470 bellard
        if (port->ctrl & UHCI_PORT_EN) {
622 bb36d470 bellard
            port->ctrl &= ~UHCI_PORT_EN;
623 bb36d470 bellard
            port->ctrl |= UHCI_PORT_ENC;
624 bb36d470 bellard
        }
625 96217e31 ths
626 96217e31 ths
        uhci_resume(s);
627 96217e31 ths
628 a594cfbf bellard
        dev = port->port.dev;
629 bb36d470 bellard
        if (dev) {
630 bb36d470 bellard
            /* send the detach message */
631 4d611c9a pbrook
            usb_send_msg(dev, USB_MSG_DETACH);
632 bb36d470 bellard
        }
633 a594cfbf bellard
        port->port.dev = NULL;
634 bb36d470 bellard
    }
635 bb36d470 bellard
}
636 bb36d470 bellard
637 4d611c9a pbrook
static int uhci_broadcast_packet(UHCIState *s, USBPacket *p)
638 bb36d470 bellard
{
639 bb36d470 bellard
    int i, ret;
640 bb36d470 bellard
641 54f254f9 aliguori
    dprintf("uhci: packet enter. pid %s addr 0x%02x ep %d len %d\n",
642 54f254f9 aliguori
           pid2str(p->pid), p->devaddr, p->devep, p->len);
643 5d808245 aurel32
    if (p->pid == USB_TOKEN_OUT || p->pid == USB_TOKEN_SETUP)
644 54f254f9 aliguori
        dump_data(p->data, p->len);
645 54f254f9 aliguori
646 54f254f9 aliguori
    ret = USB_RET_NODEV;
647 54f254f9 aliguori
    for (i = 0; i < NB_PORTS && ret == USB_RET_NODEV; i++) {
648 54f254f9 aliguori
        UHCIPort *port = &s->ports[i];
649 54f254f9 aliguori
        USBDevice *dev = port->port.dev;
650 54f254f9 aliguori
651 54f254f9 aliguori
        if (dev && (port->ctrl & UHCI_PORT_EN))
652 806b6024 Gerd Hoffmann
            ret = dev->info->handle_packet(dev, p);
653 bb36d470 bellard
    }
654 54f254f9 aliguori
655 54f254f9 aliguori
    dprintf("uhci: packet exit. ret %d len %d\n", ret, p->len);
656 54f254f9 aliguori
    if (p->pid == USB_TOKEN_IN && ret > 0)
657 54f254f9 aliguori
        dump_data(p->data, ret);
658 54f254f9 aliguori
659 54f254f9 aliguori
    return ret;
660 bb36d470 bellard
}
661 bb36d470 bellard
662 54f254f9 aliguori
static void uhci_async_complete(USBPacket * packet, void *opaque);
663 54f254f9 aliguori
static void uhci_process_frame(UHCIState *s);
664 4d611c9a pbrook
665 bb36d470 bellard
/* return -1 if fatal error (frame must be stopped)
666 bb36d470 bellard
          0 if TD successful
667 bb36d470 bellard
          1 if TD unsuccessful or inactive
668 bb36d470 bellard
*/
669 54f254f9 aliguori
static int uhci_complete_td(UHCIState *s, UHCI_TD *td, UHCIAsync *async, uint32_t *int_mask)
670 bb36d470 bellard
{
671 54f254f9 aliguori
    int len = 0, max_len, err, ret;
672 bb36d470 bellard
    uint8_t pid;
673 bb36d470 bellard
674 54f254f9 aliguori
    max_len = ((td->token >> 21) + 1) & 0x7ff;
675 54f254f9 aliguori
    pid = td->token & 0xff;
676 54f254f9 aliguori
677 54f254f9 aliguori
    ret = async->packet.len;
678 54f254f9 aliguori
679 54f254f9 aliguori
    if (td->ctrl & TD_CTRL_IOC)
680 bb36d470 bellard
        *int_mask |= 0x01;
681 3b46e624 ths
682 54f254f9 aliguori
    if (td->ctrl & TD_CTRL_IOS)
683 54f254f9 aliguori
        td->ctrl &= ~TD_CTRL_ACTIVE;
684 bb36d470 bellard
685 54f254f9 aliguori
    if (ret < 0)
686 54f254f9 aliguori
        goto out;
687 b9dc033c balrog
688 54f254f9 aliguori
    len = async->packet.len;
689 54f254f9 aliguori
    td->ctrl = (td->ctrl & ~0x7ff) | ((len - 1) & 0x7ff);
690 54f254f9 aliguori
691 54f254f9 aliguori
    /* The NAK bit may have been set by a previous frame, so clear it
692 54f254f9 aliguori
       here.  The docs are somewhat unclear, but win2k relies on this
693 54f254f9 aliguori
       behavior.  */
694 54f254f9 aliguori
    td->ctrl &= ~(TD_CTRL_ACTIVE | TD_CTRL_NAK);
695 54f254f9 aliguori
696 54f254f9 aliguori
    if (pid == USB_TOKEN_IN) {
697 54f254f9 aliguori
        if (len > max_len) {
698 4d611c9a pbrook
            len = max_len;
699 54f254f9 aliguori
            ret = USB_RET_BABBLE;
700 54f254f9 aliguori
            goto out;
701 4d611c9a pbrook
        }
702 b9dc033c balrog
703 54f254f9 aliguori
        if (len > 0) {
704 54f254f9 aliguori
            /* write the data back */
705 54f254f9 aliguori
            cpu_physical_memory_write(td->buffer, async->buffer, len);
706 54f254f9 aliguori
        }
707 54f254f9 aliguori
708 54f254f9 aliguori
        if ((td->ctrl & TD_CTRL_SPD) && len < max_len) {
709 bb36d470 bellard
            *int_mask |= 0x02;
710 bb36d470 bellard
            /* short packet: do not update QH */
711 54f254f9 aliguori
            dprintf("uhci: short packet. td 0x%x token 0x%x\n", async->td, async->token);
712 bb36d470 bellard
            return 1;
713 bb36d470 bellard
        }
714 54f254f9 aliguori
    }
715 54f254f9 aliguori
716 54f254f9 aliguori
    /* success */
717 54f254f9 aliguori
    return 0;
718 54f254f9 aliguori
719 54f254f9 aliguori
out:
720 54f254f9 aliguori
    switch(ret) {
721 54f254f9 aliguori
    case USB_RET_STALL:
722 54f254f9 aliguori
        td->ctrl |= TD_CTRL_STALL;
723 54f254f9 aliguori
        td->ctrl &= ~TD_CTRL_ACTIVE;
724 54f254f9 aliguori
        return 1;
725 54f254f9 aliguori
726 54f254f9 aliguori
    case USB_RET_BABBLE:
727 54f254f9 aliguori
        td->ctrl |= TD_CTRL_BABBLE | TD_CTRL_STALL;
728 54f254f9 aliguori
        td->ctrl &= ~TD_CTRL_ACTIVE;
729 54f254f9 aliguori
        /* frame interrupted */
730 54f254f9 aliguori
        return -1;
731 54f254f9 aliguori
732 54f254f9 aliguori
    case USB_RET_NAK:
733 54f254f9 aliguori
        td->ctrl |= TD_CTRL_NAK;
734 54f254f9 aliguori
        if (pid == USB_TOKEN_SETUP)
735 54f254f9 aliguori
            break;
736 54f254f9 aliguori
        return 1;
737 54f254f9 aliguori
738 54f254f9 aliguori
    case USB_RET_NODEV:
739 54f254f9 aliguori
    default:
740 54f254f9 aliguori
        break;
741 54f254f9 aliguori
    }
742 54f254f9 aliguori
743 54f254f9 aliguori
    /* Retry the TD if error count is not zero */
744 54f254f9 aliguori
745 54f254f9 aliguori
    td->ctrl |= TD_CTRL_TIMEOUT;
746 54f254f9 aliguori
    err = (td->ctrl >> TD_CTRL_ERROR_SHIFT) & 3;
747 54f254f9 aliguori
    if (err != 0) {
748 54f254f9 aliguori
        err--;
749 54f254f9 aliguori
        if (err == 0) {
750 bb36d470 bellard
            td->ctrl &= ~TD_CTRL_ACTIVE;
751 54f254f9 aliguori
            s->status |= UHCI_STS_USBERR;
752 54f254f9 aliguori
            uhci_update_irq(s);
753 bb36d470 bellard
        }
754 bb36d470 bellard
    }
755 54f254f9 aliguori
    td->ctrl = (td->ctrl & ~(3 << TD_CTRL_ERROR_SHIFT)) |
756 54f254f9 aliguori
        (err << TD_CTRL_ERROR_SHIFT);
757 54f254f9 aliguori
    return 1;
758 bb36d470 bellard
}
759 bb36d470 bellard
760 54f254f9 aliguori
static int uhci_handle_td(UHCIState *s, uint32_t addr, UHCI_TD *td, uint32_t *int_mask)
761 54f254f9 aliguori
{
762 54f254f9 aliguori
    UHCIAsync *async;
763 5d808245 aurel32
    int len = 0, max_len;
764 54f254f9 aliguori
    uint8_t pid;
765 54f254f9 aliguori
766 54f254f9 aliguori
    /* Is active ? */
767 54f254f9 aliguori
    if (!(td->ctrl & TD_CTRL_ACTIVE))
768 54f254f9 aliguori
        return 1;
769 54f254f9 aliguori
770 54f254f9 aliguori
    async = uhci_async_find_td(s, addr, td->token);
771 54f254f9 aliguori
    if (async) {
772 54f254f9 aliguori
        /* Already submitted */
773 a145ea51 aliguori
        async->valid = 32;
774 54f254f9 aliguori
775 54f254f9 aliguori
        if (!async->done)
776 54f254f9 aliguori
            return 1;
777 54f254f9 aliguori
778 54f254f9 aliguori
        uhci_async_unlink(s, async);
779 54f254f9 aliguori
        goto done;
780 54f254f9 aliguori
    }
781 54f254f9 aliguori
782 54f254f9 aliguori
    /* Allocate new packet */
783 54f254f9 aliguori
    async = uhci_async_alloc(s);
784 54f254f9 aliguori
    if (!async)
785 54f254f9 aliguori
        return 1;
786 54f254f9 aliguori
787 54f254f9 aliguori
    async->valid = 10;
788 54f254f9 aliguori
    async->td    = addr;
789 54f254f9 aliguori
    async->token = td->token;
790 54f254f9 aliguori
791 54f254f9 aliguori
    max_len = ((td->token >> 21) + 1) & 0x7ff;
792 54f254f9 aliguori
    pid = td->token & 0xff;
793 54f254f9 aliguori
794 54f254f9 aliguori
    async->packet.pid     = pid;
795 54f254f9 aliguori
    async->packet.devaddr = (td->token >> 8) & 0x7f;
796 54f254f9 aliguori
    async->packet.devep   = (td->token >> 15) & 0xf;
797 54f254f9 aliguori
    async->packet.data    = async->buffer;
798 54f254f9 aliguori
    async->packet.len     = max_len;
799 54f254f9 aliguori
    async->packet.complete_cb     = uhci_async_complete;
800 54f254f9 aliguori
    async->packet.complete_opaque = s;
801 54f254f9 aliguori
802 54f254f9 aliguori
    switch(pid) {
803 54f254f9 aliguori
    case USB_TOKEN_OUT:
804 54f254f9 aliguori
    case USB_TOKEN_SETUP:
805 54f254f9 aliguori
        cpu_physical_memory_read(td->buffer, async->buffer, max_len);
806 5d808245 aurel32
        len = uhci_broadcast_packet(s, &async->packet);
807 5d808245 aurel32
        if (len >= 0)
808 5d808245 aurel32
            len = max_len;
809 54f254f9 aliguori
        break;
810 54f254f9 aliguori
811 54f254f9 aliguori
    case USB_TOKEN_IN:
812 5d808245 aurel32
        len = uhci_broadcast_packet(s, &async->packet);
813 54f254f9 aliguori
        break;
814 54f254f9 aliguori
815 54f254f9 aliguori
    default:
816 54f254f9 aliguori
        /* invalid pid : frame interrupted */
817 54f254f9 aliguori
        uhci_async_free(s, async);
818 54f254f9 aliguori
        s->status |= UHCI_STS_HCPERR;
819 54f254f9 aliguori
        uhci_update_irq(s);
820 54f254f9 aliguori
        return -1;
821 54f254f9 aliguori
    }
822 54f254f9 aliguori
 
823 5d808245 aurel32
    if (len == USB_RET_ASYNC) {
824 54f254f9 aliguori
        uhci_async_link(s, async);
825 54f254f9 aliguori
        return 2;
826 54f254f9 aliguori
    }
827 54f254f9 aliguori
828 5d808245 aurel32
    async->packet.len = len;
829 54f254f9 aliguori
830 54f254f9 aliguori
done:
831 5d808245 aurel32
    len = uhci_complete_td(s, td, async, int_mask);
832 54f254f9 aliguori
    uhci_async_free(s, async);
833 5d808245 aurel32
    return len;
834 54f254f9 aliguori
}
835 54f254f9 aliguori
836 54f254f9 aliguori
static void uhci_async_complete(USBPacket *packet, void *opaque)
837 4d611c9a pbrook
{
838 4d611c9a pbrook
    UHCIState *s = opaque;
839 54f254f9 aliguori
    UHCIAsync *async = (UHCIAsync *) packet;
840 54f254f9 aliguori
841 54f254f9 aliguori
    dprintf("uhci: async complete. td 0x%x token 0x%x\n", async->td, async->token);
842 54f254f9 aliguori
843 54f254f9 aliguori
    async->done = 1;
844 54f254f9 aliguori
845 54f254f9 aliguori
    uhci_process_frame(s);
846 54f254f9 aliguori
}
847 54f254f9 aliguori
848 54f254f9 aliguori
static int is_valid(uint32_t link)
849 54f254f9 aliguori
{
850 54f254f9 aliguori
    return (link & 1) == 0;
851 54f254f9 aliguori
}
852 54f254f9 aliguori
853 54f254f9 aliguori
static int is_qh(uint32_t link)
854 54f254f9 aliguori
{
855 54f254f9 aliguori
    return (link & 2) != 0;
856 54f254f9 aliguori
}
857 54f254f9 aliguori
858 54f254f9 aliguori
static int depth_first(uint32_t link)
859 54f254f9 aliguori
{
860 54f254f9 aliguori
    return (link & 4) != 0;
861 54f254f9 aliguori
}
862 54f254f9 aliguori
863 54f254f9 aliguori
/* QH DB used for detecting QH loops */
864 54f254f9 aliguori
#define UHCI_MAX_QUEUES 128
865 54f254f9 aliguori
typedef struct {
866 54f254f9 aliguori
    uint32_t addr[UHCI_MAX_QUEUES];
867 54f254f9 aliguori
    int      count;
868 54f254f9 aliguori
} QhDb;
869 54f254f9 aliguori
870 54f254f9 aliguori
static void qhdb_reset(QhDb *db)
871 54f254f9 aliguori
{
872 54f254f9 aliguori
    db->count = 0;
873 54f254f9 aliguori
}
874 54f254f9 aliguori
875 54f254f9 aliguori
/* Add QH to DB. Returns 1 if already present or DB is full. */
876 54f254f9 aliguori
static int qhdb_insert(QhDb *db, uint32_t addr)
877 54f254f9 aliguori
{
878 54f254f9 aliguori
    int i;
879 54f254f9 aliguori
    for (i = 0; i < db->count; i++)
880 54f254f9 aliguori
        if (db->addr[i] == addr)
881 54f254f9 aliguori
            return 1;
882 54f254f9 aliguori
883 54f254f9 aliguori
    if (db->count >= UHCI_MAX_QUEUES)
884 54f254f9 aliguori
        return 1;
885 54f254f9 aliguori
886 54f254f9 aliguori
    db->addr[db->count++] = addr;
887 54f254f9 aliguori
    return 0;
888 54f254f9 aliguori
}
889 54f254f9 aliguori
890 54f254f9 aliguori
static void uhci_process_frame(UHCIState *s)
891 54f254f9 aliguori
{
892 54f254f9 aliguori
    uint32_t frame_addr, link, old_td_ctrl, val, int_mask;
893 54f254f9 aliguori
    uint32_t curr_qh;
894 54f254f9 aliguori
    int cnt, ret;
895 4d611c9a pbrook
    UHCI_TD td;
896 54f254f9 aliguori
    UHCI_QH qh;
897 54f254f9 aliguori
    QhDb qhdb;
898 4d611c9a pbrook
899 54f254f9 aliguori
    frame_addr = s->fl_base_addr + ((s->frnum & 0x3ff) << 2);
900 54f254f9 aliguori
901 54f254f9 aliguori
    dprintf("uhci: processing frame %d addr 0x%x\n" , s->frnum, frame_addr);
902 54f254f9 aliguori
903 54f254f9 aliguori
    cpu_physical_memory_read(frame_addr, (uint8_t *)&link, 4);
904 54f254f9 aliguori
    le32_to_cpus(&link);
905 b9dc033c balrog
906 54f254f9 aliguori
    int_mask = 0;
907 54f254f9 aliguori
    curr_qh  = 0;
908 54f254f9 aliguori
909 54f254f9 aliguori
    qhdb_reset(&qhdb);
910 54f254f9 aliguori
911 54f254f9 aliguori
    for (cnt = FRAME_MAX_LOOPS; is_valid(link) && cnt; cnt--) {
912 54f254f9 aliguori
        if (is_qh(link)) {
913 54f254f9 aliguori
            /* QH */
914 54f254f9 aliguori
915 54f254f9 aliguori
            if (qhdb_insert(&qhdb, link)) {
916 54f254f9 aliguori
                /*
917 54f254f9 aliguori
                 * We're going in circles. Which is not a bug because
918 54f254f9 aliguori
                 * HCD is allowed to do that as part of the BW management. 
919 54f254f9 aliguori
                 * In our case though it makes no sense to spin here. Sync transations 
920 54f254f9 aliguori
                 * are already done, and async completion handler will re-process 
921 54f254f9 aliguori
                 * the frame when something is ready.
922 54f254f9 aliguori
                 */
923 54f254f9 aliguori
                dprintf("uhci: detected loop. qh 0x%x\n", link);
924 54f254f9 aliguori
                break;
925 54f254f9 aliguori
            }
926 54f254f9 aliguori
927 54f254f9 aliguori
            cpu_physical_memory_read(link & ~0xf, (uint8_t *) &qh, sizeof(qh));
928 54f254f9 aliguori
            le32_to_cpus(&qh.link);
929 54f254f9 aliguori
            le32_to_cpus(&qh.el_link);
930 54f254f9 aliguori
931 54f254f9 aliguori
            dprintf("uhci: QH 0x%x load. link 0x%x elink 0x%x\n",
932 54f254f9 aliguori
                    link, qh.link, qh.el_link);
933 54f254f9 aliguori
934 54f254f9 aliguori
            if (!is_valid(qh.el_link)) {
935 54f254f9 aliguori
                /* QH w/o elements */
936 54f254f9 aliguori
                curr_qh = 0;
937 54f254f9 aliguori
                link = qh.link;
938 54f254f9 aliguori
            } else {
939 54f254f9 aliguori
                /* QH with elements */
940 54f254f9 aliguori
                    curr_qh = link;
941 54f254f9 aliguori
                    link = qh.el_link;
942 54f254f9 aliguori
            }
943 54f254f9 aliguori
            continue;
944 54f254f9 aliguori
        }
945 54f254f9 aliguori
946 54f254f9 aliguori
        /* TD */
947 54f254f9 aliguori
        cpu_physical_memory_read(link & ~0xf, (uint8_t *) &td, sizeof(td));
948 b9dc033c balrog
        le32_to_cpus(&td.link);
949 b9dc033c balrog
        le32_to_cpus(&td.ctrl);
950 b9dc033c balrog
        le32_to_cpus(&td.token);
951 b9dc033c balrog
        le32_to_cpus(&td.buffer);
952 b9dc033c balrog
953 54f254f9 aliguori
        dprintf("uhci: TD 0x%x load. link 0x%x ctrl 0x%x token 0x%x qh 0x%x\n", 
954 54f254f9 aliguori
                link, td.link, td.ctrl, td.token, curr_qh);
955 54f254f9 aliguori
956 54f254f9 aliguori
        old_td_ctrl = td.ctrl;
957 54f254f9 aliguori
        ret = uhci_handle_td(s, link, &td, &int_mask);
958 b9dc033c balrog
        if (old_td_ctrl != td.ctrl) {
959 54f254f9 aliguori
            /* update the status bits of the TD */
960 b9dc033c balrog
            val = cpu_to_le32(td.ctrl);
961 b9dc033c balrog
            cpu_physical_memory_write((link & ~0xf) + 4,
962 54f254f9 aliguori
                                      (const uint8_t *)&val, sizeof(val));
963 b9dc033c balrog
        }
964 54f254f9 aliguori
965 54f254f9 aliguori
        if (ret < 0) {
966 54f254f9 aliguori
            /* interrupted frame */
967 54f254f9 aliguori
            break;
968 b9dc033c balrog
        }
969 b9dc033c balrog
970 54f254f9 aliguori
        if (ret == 2 || ret == 1) {
971 54f254f9 aliguori
            dprintf("uhci: TD 0x%x %s. link 0x%x ctrl 0x%x token 0x%x qh 0x%x\n",
972 54f254f9 aliguori
                    link, ret == 2 ? "pend" : "skip",
973 54f254f9 aliguori
                    td.link, td.ctrl, td.token, curr_qh);
974 b9dc033c balrog
975 54f254f9 aliguori
            link = curr_qh ? qh.link : td.link;
976 54f254f9 aliguori
            continue;
977 4d611c9a pbrook
        }
978 54f254f9 aliguori
979 54f254f9 aliguori
        /* completed TD */
980 54f254f9 aliguori
981 54f254f9 aliguori
        dprintf("uhci: TD 0x%x done. link 0x%x ctrl 0x%x token 0x%x qh 0x%x\n", 
982 54f254f9 aliguori
                link, td.link, td.ctrl, td.token, curr_qh);
983 54f254f9 aliguori
984 54f254f9 aliguori
        link = td.link;
985 54f254f9 aliguori
986 54f254f9 aliguori
        if (curr_qh) {
987 54f254f9 aliguori
            /* update QH element link */
988 54f254f9 aliguori
            qh.el_link = link;
989 4d611c9a pbrook
            val = cpu_to_le32(qh.el_link);
990 54f254f9 aliguori
            cpu_physical_memory_write((curr_qh & ~0xf) + 4,
991 54f254f9 aliguori
                                          (const uint8_t *)&val, sizeof(val));
992 54f254f9 aliguori
993 54f254f9 aliguori
            if (!depth_first(link)) {
994 54f254f9 aliguori
               /* done with this QH */
995 54f254f9 aliguori
996 54f254f9 aliguori
               dprintf("uhci: QH 0x%x done. link 0x%x elink 0x%x\n",
997 54f254f9 aliguori
                       curr_qh, qh.link, qh.el_link);
998 54f254f9 aliguori
999 54f254f9 aliguori
               curr_qh = 0;
1000 54f254f9 aliguori
               link    = qh.link;
1001 54f254f9 aliguori
            }
1002 4d611c9a pbrook
        }
1003 54f254f9 aliguori
1004 54f254f9 aliguori
        /* go to the next entry */
1005 4d611c9a pbrook
    }
1006 54f254f9 aliguori
1007 54f254f9 aliguori
    s->pending_int_mask = int_mask;
1008 4d611c9a pbrook
}
1009 4d611c9a pbrook
1010 bb36d470 bellard
static void uhci_frame_timer(void *opaque)
1011 bb36d470 bellard
{
1012 bb36d470 bellard
    UHCIState *s = opaque;
1013 bb36d470 bellard
    int64_t expire_time;
1014 bb36d470 bellard
1015 bb36d470 bellard
    if (!(s->cmd & UHCI_CMD_RS)) {
1016 54f254f9 aliguori
        /* Full stop */
1017 bb36d470 bellard
        qemu_del_timer(s->frame_timer);
1018 52328140 bellard
        /* set hchalted bit in status - UHCI11D 2.1.2 */
1019 52328140 bellard
        s->status |= UHCI_STS_HCHALTED;
1020 6f382b5e aliguori
1021 6f382b5e aliguori
        dprintf("uhci: halted\n");
1022 bb36d470 bellard
        return;
1023 bb36d470 bellard
    }
1024 54f254f9 aliguori
1025 54f254f9 aliguori
    /* Complete the previous frame */
1026 4d611c9a pbrook
    if (s->pending_int_mask) {
1027 4d611c9a pbrook
        s->status2 |= s->pending_int_mask;
1028 54f254f9 aliguori
        s->status  |= UHCI_STS_USBINT;
1029 4d611c9a pbrook
        uhci_update_irq(s);
1030 4d611c9a pbrook
    }
1031 b9dc033c balrog
1032 54f254f9 aliguori
    /* Start new frame */
1033 54f254f9 aliguori
    s->frnum = (s->frnum + 1) & 0x7ff;
1034 54f254f9 aliguori
1035 54f254f9 aliguori
    dprintf("uhci: new frame #%u\n" , s->frnum);
1036 54f254f9 aliguori
1037 54f254f9 aliguori
    uhci_async_validate_begin(s);
1038 54f254f9 aliguori
1039 54f254f9 aliguori
    uhci_process_frame(s);
1040 54f254f9 aliguori
1041 54f254f9 aliguori
    uhci_async_validate_end(s);
1042 b9dc033c balrog
1043 bb36d470 bellard
    /* prepare the timer for the next frame */
1044 5fafdf24 ths
    expire_time = qemu_get_clock(vm_clock) +
1045 6ee093c9 Juan Quintela
        (get_ticks_per_sec() / FRAME_TIMER_FREQ);
1046 bb36d470 bellard
    qemu_mod_timer(s->frame_timer, expire_time);
1047 bb36d470 bellard
}
1048 bb36d470 bellard
1049 5fafdf24 ths
static void uhci_map(PCIDevice *pci_dev, int region_num,
1050 bb36d470 bellard
                    uint32_t addr, uint32_t size, int type)
1051 bb36d470 bellard
{
1052 bb36d470 bellard
    UHCIState *s = (UHCIState *)pci_dev;
1053 bb36d470 bellard
1054 bb36d470 bellard
    register_ioport_write(addr, 32, 2, uhci_ioport_writew, s);
1055 bb36d470 bellard
    register_ioport_read(addr, 32, 2, uhci_ioport_readw, s);
1056 bb36d470 bellard
    register_ioport_write(addr, 32, 4, uhci_ioport_writel, s);
1057 bb36d470 bellard
    register_ioport_read(addr, 32, 4, uhci_ioport_readl, s);
1058 bb36d470 bellard
    register_ioport_write(addr, 32, 1, uhci_ioport_writeb, s);
1059 bb36d470 bellard
    register_ioport_read(addr, 32, 1, uhci_ioport_readb, s);
1060 bb36d470 bellard
}
1061 bb36d470 bellard
1062 6cf9b6f1 Gerd Hoffmann
static int usb_uhci_common_initfn(UHCIState *s)
1063 bb36d470 bellard
{
1064 6cf9b6f1 Gerd Hoffmann
    uint8_t *pci_conf = s->dev.config;
1065 bb36d470 bellard
    int i;
1066 bb36d470 bellard
1067 bb36d470 bellard
    pci_conf[0x08] = 0x01; // revision number
1068 bb36d470 bellard
    pci_conf[0x09] = 0x00;
1069 173a543b blueswir1
    pci_config_set_class(pci_conf, PCI_CLASS_SERIAL_USB);
1070 6407f373 Isaku Yamahata
    pci_conf[PCI_HEADER_TYPE] = PCI_HEADER_TYPE_NORMAL; // header_type
1071 f04308e4 bellard
    pci_conf[0x3d] = 4; // interrupt pin 3
1072 38ca0f6d pbrook
    pci_conf[0x60] = 0x10; // release number
1073 3b46e624 ths
1074 b2317837 Gerd Hoffmann
    usb_bus_new(&s->bus, &s->dev.qdev);
1075 bb36d470 bellard
    for(i = 0; i < NB_PORTS; i++) {
1076 b2317837 Gerd Hoffmann
        usb_register_port(&s->bus, &s->ports[i].port, s, i, uhci_attach);
1077 bb36d470 bellard
    }
1078 bb36d470 bellard
    s->frame_timer = qemu_new_timer(vm_clock, uhci_frame_timer, s);
1079 64e58fe5 Juan Quintela
    s->num_ports_vmstate = NB_PORTS;
1080 bb36d470 bellard
1081 a08d4367 Jan Kiszka
    qemu_register_reset(uhci_reset, s);
1082 bb36d470 bellard
1083 38ca0f6d pbrook
    /* Use region 4 for consistency with real hardware.  BSD guests seem
1084 38ca0f6d pbrook
       to rely on this.  */
1085 28c2c264 Avi Kivity
    pci_register_bar(&s->dev, 4, 0x20,
1086 bb36d470 bellard
                           PCI_ADDRESS_SPACE_IO, uhci_map);
1087 6f382b5e aliguori
1088 817afc61 Juan Quintela
    vmstate_register(0, &vmstate_uhci, s);
1089 6cf9b6f1 Gerd Hoffmann
    return 0;
1090 bb36d470 bellard
}
1091 afcc3cdf ths
1092 6cf9b6f1 Gerd Hoffmann
static int usb_uhci_piix3_initfn(PCIDevice *dev)
1093 afcc3cdf ths
{
1094 6cf9b6f1 Gerd Hoffmann
    UHCIState *s = DO_UPCAST(UHCIState, dev, dev);
1095 6cf9b6f1 Gerd Hoffmann
    uint8_t *pci_conf = s->dev.config;
1096 6cf9b6f1 Gerd Hoffmann
1097 6cf9b6f1 Gerd Hoffmann
    pci_config_set_vendor_id(pci_conf, PCI_VENDOR_ID_INTEL);
1098 6cf9b6f1 Gerd Hoffmann
    pci_config_set_device_id(pci_conf, PCI_DEVICE_ID_INTEL_82371SB_2);
1099 6cf9b6f1 Gerd Hoffmann
    return usb_uhci_common_initfn(s);
1100 6cf9b6f1 Gerd Hoffmann
}
1101 6cf9b6f1 Gerd Hoffmann
1102 6cf9b6f1 Gerd Hoffmann
static int usb_uhci_piix4_initfn(PCIDevice *dev)
1103 6cf9b6f1 Gerd Hoffmann
{
1104 6cf9b6f1 Gerd Hoffmann
    UHCIState *s = DO_UPCAST(UHCIState, dev, dev);
1105 6cf9b6f1 Gerd Hoffmann
    uint8_t *pci_conf = s->dev.config;
1106 afcc3cdf ths
1107 deb54399 aliguori
    pci_config_set_vendor_id(pci_conf, PCI_VENDOR_ID_INTEL);
1108 deb54399 aliguori
    pci_config_set_device_id(pci_conf, PCI_DEVICE_ID_INTEL_82371AB_2);
1109 6cf9b6f1 Gerd Hoffmann
    return usb_uhci_common_initfn(s);
1110 6cf9b6f1 Gerd Hoffmann
}
1111 afcc3cdf ths
1112 6cf9b6f1 Gerd Hoffmann
static PCIDeviceInfo uhci_info[] = {
1113 6cf9b6f1 Gerd Hoffmann
    {
1114 6cf9b6f1 Gerd Hoffmann
        .qdev.name    = "PIIX3 USB-UHCI",
1115 6cf9b6f1 Gerd Hoffmann
        .qdev.size    = sizeof(UHCIState),
1116 6cf9b6f1 Gerd Hoffmann
        .init         = usb_uhci_piix3_initfn,
1117 6cf9b6f1 Gerd Hoffmann
    },{
1118 6cf9b6f1 Gerd Hoffmann
        .qdev.name    = "PIIX4 USB-UHCI",
1119 6cf9b6f1 Gerd Hoffmann
        .qdev.size    = sizeof(UHCIState),
1120 6cf9b6f1 Gerd Hoffmann
        .init         = usb_uhci_piix4_initfn,
1121 6cf9b6f1 Gerd Hoffmann
    },{
1122 6cf9b6f1 Gerd Hoffmann
        /* end of list */
1123 afcc3cdf ths
    }
1124 6cf9b6f1 Gerd Hoffmann
};
1125 afcc3cdf ths
1126 6cf9b6f1 Gerd Hoffmann
static void uhci_register(void)
1127 6cf9b6f1 Gerd Hoffmann
{
1128 6cf9b6f1 Gerd Hoffmann
    pci_qdev_register_many(uhci_info);
1129 6cf9b6f1 Gerd Hoffmann
}
1130 6cf9b6f1 Gerd Hoffmann
device_init(uhci_register);
1131 afcc3cdf ths
1132 6cf9b6f1 Gerd Hoffmann
void usb_uhci_piix3_init(PCIBus *bus, int devfn)
1133 6cf9b6f1 Gerd Hoffmann
{
1134 6cf9b6f1 Gerd Hoffmann
    pci_create_simple(bus, devfn, "PIIX3 USB-UHCI");
1135 6cf9b6f1 Gerd Hoffmann
}
1136 54f254f9 aliguori
1137 6cf9b6f1 Gerd Hoffmann
void usb_uhci_piix4_init(PCIBus *bus, int devfn)
1138 6cf9b6f1 Gerd Hoffmann
{
1139 6cf9b6f1 Gerd Hoffmann
    pci_create_simple(bus, devfn, "PIIX4 USB-UHCI");
1140 afcc3cdf ths
}