/* * BCM2835 (Raspberry Pi / Pi 2) Aux block (mini UART and SPI). * Copyright (c) 2015, Microsoft * Written by Andrew Baumann * Based on pl011.c, copyright terms below: * * Arm PrimeCell PL011 UART * * Copyright (c) 2006 CodeSourcery. * Written by Paul Brook * * This code is licensed under the GPL. * * At present only the core UART functions (data path for tx/rx) are * implemented. The following features/registers are unimplemented: * - Line/modem control * - Scratch register * - Extra control * - Baudrate * - SPI interfaces */ #include "qemu/osdep.h" #include "hw/char/bcm2835_aux.h" #include "hw/irq.h" #include "hw/qdev-properties.h" #include "hw/qdev-properties-system.h" #include "migration/vmstate.h" #include "qemu/log.h" #include "qemu/module.h" #define AUX_IRQ 0x0 #define AUX_ENABLES 0x4 #define AUX_MU_IO_REG 0x40 #define AUX_MU_IER_REG 0x44 #define AUX_MU_IIR_REG 0x48 #define AUX_MU_LCR_REG 0x4c #define AUX_MU_MCR_REG 0x50 #define AUX_MU_LSR_REG 0x54 #define AUX_MU_MSR_REG 0x58 #define AUX_MU_SCRATCH 0x5c #define AUX_MU_CNTL_REG 0x60 #define AUX_MU_STAT_REG 0x64 #define AUX_MU_BAUD_REG 0x68 /* bits in IER/IIR registers */ #define RX_INT 0x1 #define TX_INT 0x2 static void bcm2835_aux_update(BCM2835AuxState *s) { /* signal an interrupt if either: * 1. rx interrupt is enabled and we have a non-empty rx fifo, or * 2. the tx interrupt is enabled (since we instantly drain the tx fifo) */ s->iir = 0; if ((s->ier & RX_INT) && s->read_count != 0) { s->iir |= RX_INT; } if (s->ier & TX_INT) { s->iir |= TX_INT; } qemu_set_irq(s->irq, s->iir != 0); } static uint64_t bcm2835_aux_read(void *opaque, hwaddr offset, unsigned size) { BCM2835AuxState *s = opaque; uint32_t c, res; switch (offset) { case AUX_IRQ: return s->iir != 0; case AUX_ENABLES: return 1; /* mini UART permanently enabled */ case AUX_MU_IO_REG: /* "DLAB bit set means access baudrate register" is NYI */ c = s->read_fifo[s->read_pos]; if (s->read_count > 0) { s->read_count--; if (++s->read_pos == BCM2835_AUX_RX_FIFO_LEN) { s->read_pos = 0; } } qemu_chr_fe_accept_input(&s->chr); bcm2835_aux_update(s); return c; case AUX_MU_IER_REG: /* "DLAB bit set means access baudrate register" is NYI */ return 0xc0 | s->ier; /* FIFO enables always read 1 */ case AUX_MU_IIR_REG: res = 0xc0; /* FIFO enables */ /* The spec is unclear on what happens when both tx and rx * interrupts are active, besides that this cannot occur. At * present, we choose to prioritise the rx interrupt, since * the tx fifo is always empty. */ if (s->read_count != 0) { res |= 0x4; } else { res |= 0x2; } if (s->iir == 0) { res |= 0x1; } return res; case AUX_MU_LCR_REG: qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_LCR_REG unsupported\n", __func__); return 0; case AUX_MU_MCR_REG: qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_MCR_REG unsupported\n", __func__); return 0; case AUX_MU_LSR_REG: res = 0x60; /* tx idle, empty */ if (s->read_count != 0) { res |= 0x1; } return res; case AUX_MU_MSR_REG: qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_MSR_REG unsupported\n", __func__); return 0; case AUX_MU_SCRATCH: qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_SCRATCH unsupported\n", __func__); return 0; case AUX_MU_CNTL_REG: return 0x3; /* tx, rx enabled */ case AUX_MU_STAT_REG: res = 0x30e; /* space in the output buffer, empty tx fifo, idle tx/rx */ if (s->read_count > 0) { res |= 0x1; /* data in input buffer */ assert(s->read_count < BCM2835_AUX_RX_FIFO_LEN); res |= ((uint32_t)s->read_count) << 16; /* rx fifo fill level */ } return res; case AUX_MU_BAUD_REG: qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_BAUD_REG unsupported\n", __func__); return 0; default: qemu_log_mask(LOG_GUEST_ERROR, "%s: Bad offset %"HWADDR_PRIx"\n", __func__, offset); return 0; } } static void bcm2835_aux_write(void *opaque, hwaddr offset, uint64_t value, unsigned size) { BCM2835AuxState *s = opaque; unsigned char ch; switch (offset) { case AUX_ENABLES: if (value != 1) { qemu_log_mask(LOG_UNIMP, "%s: unsupported attempt to enable SPI" " or disable UART: 0x%"PRIx64"\n", __func__, value); } break; case AUX_MU_IO_REG: /* "DLAB bit set means access baudrate register" is NYI */ ch = value; /* XXX this blocks entire thread. Rewrite to use * qemu_chr_fe_write and background I/O callbacks */ qemu_chr_fe_write_all(&s->chr, &ch, 1); break; case AUX_MU_IER_REG: /* "DLAB bit set means access baudrate register" is NYI */ s->ier = value & (TX_INT | RX_INT); bcm2835_aux_update(s); break; case AUX_MU_IIR_REG: if (value & 0x2) { s->read_count = 0; } break; case AUX_MU_LCR_REG: qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_LCR_REG unsupported\n", __func__); break; case AUX_MU_MCR_REG: qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_MCR_REG unsupported\n", __func__); break; case AUX_MU_SCRATCH: qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_SCRATCH unsupported\n", __func__); break; case AUX_MU_CNTL_REG: qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_CNTL_REG unsupported\n", __func__); break; case AUX_MU_BAUD_REG: qemu_log_mask(LOG_UNIMP, "%s: AUX_MU_BAUD_REG unsupported\n", __func__); break; default: qemu_log_mask(LOG_GUEST_ERROR, "%s: Bad offset %"HWADDR_PRIx"\n", __func__, offset); } bcm2835_aux_update(s); } static int bcm2835_aux_can_receive(void *opaque) { BCM2835AuxState *s = opaque; return s->read_count < BCM2835_AUX_RX_FIFO_LEN; } static void bcm2835_aux_put_fifo(void *opaque, uint8_t value) { BCM2835AuxState *s = opaque; int slot; slot = s->read_pos + s->read_count; if (slot >= BCM2835_AUX_RX_FIFO_LEN) { slot -= BCM2835_AUX_RX_FIFO_LEN; } s->read_fifo[slot] = value; s->read_count++; if (s->read_count == BCM2835_AUX_RX_FIFO_LEN) { /* buffer full */ } bcm2835_aux_update(s); } static void bcm2835_aux_receive(void *opaque, const uint8_t *buf, int size) { bcm2835_aux_put_fifo(opaque, *buf); } static const MemoryRegionOps bcm2835_aux_ops = { .read = bcm2835_aux_read, .write = bcm2835_aux_write, .endianness = DEVICE_NATIVE_ENDIAN, .impl.min_access_size = 4, .impl.max_access_size = 4, .valid.min_access_size = 1, .valid.max_access_size = 4, }; static const VMStateDescription vmstate_bcm2835_aux = { .name = TYPE_BCM2835_AUX, .version_id = 1, .minimum_version_id = 1, .fields = (VMStateField[]) { VMSTATE_UINT8_ARRAY(read_fifo, BCM2835AuxState, BCM2835_AUX_RX_FIFO_LEN), VMSTATE_UINT8(read_pos, BCM2835AuxState), VMSTATE_UINT8(read_count, BCM2835AuxState), VMSTATE_UINT8(ier, BCM2835AuxState), VMSTATE_UINT8(iir, BCM2835AuxState), VMSTATE_END_OF_LIST() } }; static void bcm2835_aux_init(Object *obj) { SysBusDevice *sbd = SYS_BUS_DEVICE(obj); BCM2835AuxState *s = BCM2835_AUX(obj); memory_region_init_io(&s->iomem, OBJECT(s), &bcm2835_aux_ops, s, TYPE_BCM2835_AUX, 0x100); sysbus_init_mmio(sbd, &s->iomem); sysbus_init_irq(sbd, &s->irq); } static void bcm2835_aux_realize(DeviceState *dev, Error **errp) { BCM2835AuxState *s = BCM2835_AUX(dev); qemu_chr_fe_set_handlers(&s->chr, bcm2835_aux_can_receive, bcm2835_aux_receive, NULL, NULL, s, NULL, true); } static Property bcm2835_aux_props[] = { DEFINE_PROP_CHR("chardev", BCM2835AuxState, chr), DEFINE_PROP_END_OF_LIST(), }; static void bcm2835_aux_class_init(ObjectClass *oc, void *data) { DeviceClass *dc = DEVICE_CLASS(oc); dc->realize = bcm2835_aux_realize; dc->vmsd = &vmstate_bcm2835_aux; set_bit(DEVICE_CATEGORY_INPUT, dc->categories); device_class_set_props(dc, bcm2835_aux_props); } static const TypeInfo bcm2835_aux_info = { .name = TYPE_BCM2835_AUX, .parent = TYPE_SYS_BUS_DEVICE, .instance_size = sizeof(BCM2835AuxState), .instance_init = bcm2835_aux_init, .class_init = bcm2835_aux_class_init, }; static void bcm2835_aux_register_types(void) { type_register_static(&bcm2835_aux_info); } type_init(bcm2835_aux_register_types)