2 * QEMU i8255x (PRO100) emulation
4 * Copyright (C) 2006-2011 Stefan Weil
6 * Portions of the code are copies from grub / etherboot eepro100.c
9 * This program is free software: you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License as published by
11 * the Free Software Foundation, either version 2 of the License, or
12 * (at your option) version 3 or any later version.
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU General Public License for more details.
19 * You should have received a copy of the GNU General Public License
20 * along with this program. If not, see <http://www.gnu.org/licenses/>.
22 * Tested features (i82559):
24 * Linux networking (i386) ok
32 * Intel 8255x 10/100 Mbps Ethernet Controller Family
33 * Open Source Software Developer Manual
36 * * PHY emulation should be separated from nic emulation.
37 * Most nic emulations could share the same phy code.
38 * * i82550 is untested. It is programmed like the i82559.
39 * * i82562 is untested. It is programmed like the i82559.
40 * * Power management (i82558 and later) is not implemented.
41 * * Wake-on-LAN is not implemented.
44 #include <stddef.h> /* offsetof */
48 #include "eeprom93xx.h"
53 /* Debug EEPRO100 card. */
55 # define DEBUG_EEPRO100
59 #define logout(fmt, ...) fprintf(stderr, "EE100\t%-24s" fmt, __func__, ## __VA_ARGS__)
61 #define logout(fmt, ...) ((void)0)
64 /* Set flags to 0 to disable debug output. */
65 #define INT 1 /* interrupt related actions */
66 #define MDI 1 /* mdi related actions */
69 #define EEPROM 1 /* eeprom related actions */
71 #define TRACE(flag, command) ((flag) ? (command) : (void)0)
73 #define missing(text) fprintf(stderr, "eepro100: feature is missing in this emulation: " text "\n")
75 #define MAX_ETH_FRAME_SIZE 1514
77 /* This driver supports several different devices which are declared here. */
78 #define i82550 0x82550
79 #define i82551 0x82551
80 #define i82557A 0x82557a
81 #define i82557B 0x82557b
82 #define i82557C 0x82557c
83 #define i82558A 0x82558a
84 #define i82558B 0x82558b
85 #define i82559A 0x82559a
86 #define i82559B 0x82559b
87 #define i82559C 0x82559c
88 #define i82559ER 0x82559e
89 #define i82562 0x82562
90 #define i82801 0x82801
92 /* Use 64 word EEPROM. TODO: could be a runtime option. */
93 #define EEPROM_SIZE 64
95 #define PCI_MEM_SIZE (4 * KiB)
96 #define PCI_IO_SIZE 64
97 #define PCI_FLASH_SIZE (128 * KiB)
99 #define BIT(n) (1 << (n))
100 #define BITS(n, m) (((0xffffffffU << (31 - n)) >> (31 - n + m)) << m)
102 /* The SCB accepts the following controls for the Tx and Rx units: */
103 #define CU_NOP 0x0000 /* No operation. */
104 #define CU_START 0x0010 /* CU start. */
105 #define CU_RESUME 0x0020 /* CU resume. */
106 #define CU_STATSADDR 0x0040 /* Load dump counters address. */
107 #define CU_SHOWSTATS 0x0050 /* Dump statistical counters. */
108 #define CU_CMD_BASE 0x0060 /* Load CU base address. */
109 #define CU_DUMPSTATS 0x0070 /* Dump and reset statistical counters. */
110 #define CU_SRESUME 0x00a0 /* CU static resume. */
112 #define RU_NOP 0x0000
113 #define RX_START 0x0001
114 #define RX_RESUME 0x0002
115 #define RU_ABORT 0x0004
116 #define RX_ADDR_LOAD 0x0006
117 #define RX_RESUMENR 0x0007
118 #define INT_MASK 0x0100
119 #define DRVR_INT 0x0200 /* Driver generated interrupt. */
127 bool has_extended_tcb_support
;
128 bool power_management
;
131 /* Offsets to the various registers.
132 All accesses need not be longword aligned. */
133 enum speedo_offsets
{
134 SCBStatus
= 0, /* Status Word. */
136 SCBCmd
= 2, /* Rx/Command Unit command and status. */
138 SCBPointer
= 4, /* General purpose pointer. */
139 SCBPort
= 8, /* Misc. commands and operands. */
140 SCBflash
= 12, /* Flash memory control. */
141 SCBeeprom
= 14, /* EEPROM control. */
142 SCBCtrlMDI
= 16, /* MDI interface control. */
143 SCBEarlyRx
= 20, /* Early receive byte count. */
144 SCBFlow
= 24, /* Flow Control. */
145 SCBpmdr
= 27, /* Power Management Driver. */
146 SCBgctrl
= 28, /* General Control. */
147 SCBgstat
= 29, /* General Status. */
150 /* A speedo3 transmit buffer descriptor with two buffers... */
154 uint32_t link
; /* void * */
155 uint32_t tbd_array_addr
; /* transmit buffer descriptor array address. */
156 uint16_t tcb_bytes
; /* transmit command block byte count (in lower 14 bits */
157 uint8_t tx_threshold
; /* transmit threshold */
158 uint8_t tbd_count
; /* TBD number */
160 /* This constitutes two "TBD" entries: hdr and data */
161 uint32_t tx_buf_addr0
; /* void *, header of frame to be transmitted. */
162 int32_t tx_buf_size0
; /* Length of Tx hdr. */
163 uint32_t tx_buf_addr1
; /* void *, data to be transmitted. */
164 int32_t tx_buf_size1
; /* Length of Tx data. */
168 /* Receive frame descriptor. */
172 uint32_t link
; /* struct RxFD * */
173 uint32_t rx_buf_addr
; /* void * */
176 char packet
[MAX_ETH_FRAME_SIZE
+ 4];
180 COMMAND_EL
= BIT(15),
185 COMMAND_CMD
= BITS(2, 0),
194 uint32_t tx_good_frames
, tx_max_collisions
, tx_late_collisions
,
195 tx_underruns
, tx_lost_crs
, tx_deferred
, tx_single_collisions
,
196 tx_multiple_collisions
, tx_total_collisions
;
197 uint32_t rx_good_frames
, rx_crc_errors
, rx_alignment_errors
,
198 rx_resource_errors
, rx_overrun_errors
, rx_cdt_errors
,
199 rx_short_frame_errors
;
200 uint32_t fc_xmt_pause
, fc_rcv_pause
, fc_rcv_unsupported
;
201 uint16_t xmt_tco_frames
, rcv_tco_frames
;
202 /* TODO: i82559 has six reserved statistics but a total of 24 dwords. */
203 uint32_t reserved
[4];
223 /* Hash register (multicast mask array, multiple individual addresses). */
228 uint8_t scb_stat
; /* SCB stat/ack byte */
229 uint8_t int_stat
; /* PCI interrupt status */
230 /* region must not be saved by nic_save. */
231 uint32_t region1
; /* PCI region 1 address */
234 uint32_t device
; /* device variant */
236 /* (cu_base + cu_offset) address the next command block in the command block list. */
237 uint32_t cu_base
; /* CU base address */
238 uint32_t cu_offset
; /* CU address offset */
239 /* (ru_base + ru_offset) address the RFD in the Receive Frame Area. */
240 uint32_t ru_base
; /* RU base address */
241 uint32_t ru_offset
; /* RU address offset */
242 uint32_t statsaddr
; /* pointer to eepro100_stats_t */
244 /* Temporary status information (no need to save these values),
245 * used while processing CU commands. */
246 eepro100_tx_t tx
; /* transmit buffer descriptor */
247 uint32_t cb_address
; /* = cu_base + cu_offset */
249 /* Statistical counters. Also used for wake-up packet (i82559). */
250 eepro100_stats_t statistics
;
252 /* Configuration bytes. */
253 uint8_t configuration
[22];
255 /* Data in mem is always in the byte order of the controller (le). */
256 uint8_t mem
[PCI_MEM_SIZE
];
257 /* vmstate for each particular nic */
258 VMStateDescription
*vmstate
;
260 /* Quasi static device properties (no need to save them). */
262 bool has_extended_tcb_support
;
265 /* Word indices in EEPROM. */
267 EEPROM_CNFG_MDIX
= 0x03,
269 EEPROM_PHY_ID
= 0x06,
270 EEPROM_VENDOR_ID
= 0x0c,
271 EEPROM_CONFIG_ASF
= 0x0d,
272 EEPROM_DEVICE_ID
= 0x23,
273 EEPROM_SMBUS_ADDR
= 0x90,
276 /* Bit values for EEPROM ID word. */
278 EEPROM_ID_MDM
= BIT(0), /* Modem */
279 EEPROM_ID_STB
= BIT(1), /* Standby Enable */
280 EEPROM_ID_WMR
= BIT(2), /* ??? */
281 EEPROM_ID_WOL
= BIT(5), /* Wake on LAN */
282 EEPROM_ID_DPD
= BIT(6), /* Deep Power Down */
283 EEPROM_ID_ALT
= BIT(7), /* */
284 /* BITS(10, 8) device revision */
285 EEPROM_ID_BD
= BIT(11), /* boot disable */
286 EEPROM_ID_ID
= BIT(13), /* id bit */
287 /* BITS(15, 14) signature */
288 EEPROM_ID_VALID
= BIT(14), /* signature for valid eeprom */
291 /* Default values for MDI (PHY) registers */
292 static const uint16_t eepro100_mdi_default
[] = {
293 /* MDI Registers 0 - 6, 7 */
294 0x3000, 0x780d, 0x02a8, 0x0154, 0x05e1, 0x0000, 0x0000, 0x0000,
295 /* MDI Registers 8 - 15 */
296 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
297 /* MDI Registers 16 - 31 */
298 0x0003, 0x0000, 0x0001, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
299 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
302 /* Readonly mask for MDI (PHY) registers */
303 static const uint16_t eepro100_mdi_mask
[] = {
304 0x0000, 0xffff, 0xffff, 0xffff, 0xc01f, 0xffff, 0xffff, 0x0000,
305 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
306 0x0fff, 0x0000, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff,
307 0xffff, 0xffff, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
311 static void stl_le_phys(target_phys_addr_t addr
, uint32_t val
)
313 val
= cpu_to_le32(val
);
314 cpu_physical_memory_write(addr
, &val
, sizeof(val
));
317 #define POLYNOMIAL 0x04c11db6
321 static unsigned compute_mcast_idx(const uint8_t * ep
)
328 for (i
= 0; i
< 6; i
++) {
330 for (j
= 0; j
< 8; j
++) {
331 carry
= ((crc
& 0x80000000L
) ?
1 : 0) ^ (b
& 0x01);
335 crc
= ((crc
^ POLYNOMIAL
) | carry
);
339 return (crc
& BITS(7, 2)) >> 2;
342 #if defined(DEBUG_EEPRO100)
343 static const char *nic_dump(const uint8_t * buf
, unsigned size
)
345 static char dump
[3 * 16 + 1];
351 p
+= sprintf(p
, " %02x", *buf
++);
355 #endif /* DEBUG_EEPRO100 */
358 stat_ack_not_ours
= 0x00,
359 stat_ack_sw_gen
= 0x04,
361 stat_ack_cu_idle
= 0x20,
362 stat_ack_frame_rx
= 0x40,
363 stat_ack_cu_cmd_done
= 0x80,
364 stat_ack_not_present
= 0xFF,
365 stat_ack_rx
= (stat_ack_sw_gen
| stat_ack_rnr
| stat_ack_frame_rx
),
366 stat_ack_tx
= (stat_ack_cu_idle
| stat_ack_cu_cmd_done
),
369 static void disable_interrupt(EEPRO100State
* s
)
372 TRACE(INT
, logout("interrupt disabled\n"));
373 qemu_irq_lower(s
->dev
.irq
[0]);
378 static void enable_interrupt(EEPRO100State
* s
)
381 TRACE(INT
, logout("interrupt enabled\n"));
382 qemu_irq_raise(s
->dev
.irq
[0]);
387 static void eepro100_acknowledge(EEPRO100State
* s
)
389 s
->scb_stat
&= ~s
->mem
[SCBAck
];
390 s
->mem
[SCBAck
] = s
->scb_stat
;
391 if (s
->scb_stat
== 0) {
392 disable_interrupt(s
);
396 static void eepro100_interrupt(EEPRO100State
* s
, uint8_t status
)
398 uint8_t mask
= ~s
->mem
[SCBIntmask
];
399 s
->mem
[SCBAck
] |= status
;
400 status
= s
->scb_stat
= s
->mem
[SCBAck
];
401 status
&= (mask
| 0x0f);
403 status
&= (~s
->mem
[SCBIntmask
] | 0x0xf
);
405 if (status
&& (mask
& 0x01)) {
406 /* SCB mask and SCB Bit M do not disable interrupt. */
408 } else if (s
->int_stat
) {
409 disable_interrupt(s
);
413 static void eepro100_cx_interrupt(EEPRO100State
* s
)
415 /* CU completed action command. */
416 /* Transmit not ok (82557 only, not in emulation). */
417 eepro100_interrupt(s
, 0x80);
420 static void eepro100_cna_interrupt(EEPRO100State
* s
)
422 /* CU left the active state. */
423 eepro100_interrupt(s
, 0x20);
426 static void eepro100_fr_interrupt(EEPRO100State
* s
)
428 /* RU received a complete frame. */
429 eepro100_interrupt(s
, 0x40);
432 static void eepro100_rnr_interrupt(EEPRO100State
* s
)
434 /* RU is not ready. */
435 eepro100_interrupt(s
, 0x10);
438 static void eepro100_mdi_interrupt(EEPRO100State
* s
)
440 /* MDI completed read or write cycle. */
441 eepro100_interrupt(s
, 0x08);
444 static void eepro100_swi_interrupt(EEPRO100State
* s
)
446 /* Software has requested an interrupt. */
447 eepro100_interrupt(s
, 0x04);
451 static void eepro100_fcp_interrupt(EEPRO100State
* s
)
453 /* Flow control pause interrupt (82558 and later). */
454 eepro100_interrupt(s
, 0x01);
458 static void e100_pci_reset(EEPRO100State
* s
, E100PCIDeviceInfo
*e100_device
)
460 uint32_t device
= s
->device
;
461 uint8_t *pci_conf
= s
->dev
.config
;
463 TRACE(OTHER
, logout("%p\n", s
));
466 pci_config_set_vendor_id(pci_conf
, PCI_VENDOR_ID_INTEL
);
468 pci_config_set_device_id(pci_conf
, e100_device
->device_id
);
470 pci_set_word(pci_conf
+ PCI_STATUS
, PCI_STATUS_DEVSEL_MEDIUM
|
471 PCI_STATUS_FAST_BACK
);
472 /* PCI Revision ID */
473 pci_config_set_revision(pci_conf
, e100_device
->revision
);
474 pci_config_set_class(pci_conf
, PCI_CLASS_NETWORK_ETHERNET
);
475 /* PCI Latency Timer */
476 pci_set_byte(pci_conf
+ PCI_LATENCY_TIMER
, 0x20); /* latency timer = 32 clocks */
477 /* Capability Pointer is set by PCI framework. */
480 pci_set_byte(pci_conf
+ PCI_INTERRUPT_PIN
, 1); /* interrupt pin A */
482 pci_set_byte(pci_conf
+ PCI_MIN_GNT
, 0x08);
483 /* Maximum Latency */
484 pci_set_byte(pci_conf
+ PCI_MAX_LAT
, 0x18);
486 s
->stats_size
= e100_device
->stats_size
;
487 s
->has_extended_tcb_support
= e100_device
->has_extended_tcb_support
;
505 pci_set_word(pci_conf
+ PCI_SUBSYSTEM_VENDOR_ID
, PCI_VENDOR_ID_INTEL
);
506 pci_set_word(pci_conf
+ PCI_SUBSYSTEM_ID
, 0x0040);
510 logout("Device %X is undefined!\n", device
);
514 s
->configuration
[6] |= BIT(4);
516 /* Standard statistical counters. */
517 s
->configuration
[6] |= BIT(5);
519 if (s
->stats_size
== 80) {
520 /* TODO: check TCO Statistical Counters bit. Documentation not clear. */
521 if (s
->configuration
[6] & BIT(2)) {
522 /* TCO statistical counters. */
523 assert(s
->configuration
[6] & BIT(5));
525 if (s
->configuration
[6] & BIT(5)) {
526 /* No extended statistical counters, i82557 compatible. */
529 /* i82558 compatible. */
534 if (s
->configuration
[6] & BIT(5)) {
535 /* No extended statistical counters. */
539 assert(s
->stats_size
> 0 && s
->stats_size
<= sizeof(s
->statistics
));
541 if (e100_device
->power_management
) {
542 /* Power Management Capabilities */
543 int cfg_offset
= 0xdc;
544 int r
= pci_add_capability(&s
->dev
, PCI_CAP_ID_PM
,
545 cfg_offset
, PCI_PM_SIZEOF
);
547 pci_set_word(pci_conf
+ cfg_offset
+ PCI_PM_PMC
, 0x7e21);
548 #if 0 /* TODO: replace dummy code for power management emulation. */
549 /* TODO: Power Management Control / Status. */
550 pci_set_word(pci_conf
+ cfg_offset
+ PCI_PM_CTRL
, 0x0000);
551 /* TODO: Ethernet Power Consumption Registers (i82559 and later). */
552 pci_set_byte(pci_conf
+ cfg_offset
+ PCI_PM_PPB_EXTENSIONS
, 0x0000);
557 if (device
== i82557C
|| device
== i82558B
|| device
== i82559C
) {
559 TODO: get vendor id from EEPROM for i82557C or later.
560 TODO: get device id from EEPROM for i82557C or later.
561 TODO: status bit 4 can be disabled by EEPROM for i82558, i82559.
562 TODO: header type is determined by EEPROM for i82559.
563 TODO: get subsystem id from EEPROM for i82557C or later.
564 TODO: get subsystem vendor id from EEPROM for i82557C or later.
565 TODO: exp. rom baddr depends on a bit in EEPROM for i82558 or later.
566 TODO: capability pointer depends on EEPROM for i82558.
568 logout("Get device id and revision from EEPROM!!!\n");
570 #endif /* EEPROM_SIZE > 0 */
573 static void nic_selective_reset(EEPRO100State
* s
)
576 uint16_t *eeprom_contents
= eeprom93xx_data(s
->eeprom
);
578 eeprom93xx_reset(s
->eeprom
);
580 memcpy(eeprom_contents
, s
->conf
.macaddr
.a
, 6);
581 eeprom_contents
[EEPROM_ID
] = EEPROM_ID_VALID
;
582 if (s
->device
== i82557B
|| s
->device
== i82557C
)
583 eeprom_contents
[5] = 0x0100;
584 eeprom_contents
[EEPROM_PHY_ID
] = 1;
586 for (i
= 0; i
< EEPROM_SIZE
- 1; i
++) {
587 sum
+= eeprom_contents
[i
];
589 eeprom_contents
[EEPROM_SIZE
- 1] = 0xbaba - sum
;
590 TRACE(EEPROM
, logout("checksum=0x%04x\n", eeprom_contents
[EEPROM_SIZE
- 1]));
592 memset(s
->mem
, 0, sizeof(s
->mem
));
593 uint32_t val
= BIT(21);
594 memcpy(&s
->mem
[SCBCtrlMDI
], &val
, sizeof(val
));
596 assert(sizeof(s
->mdimem
) == sizeof(eepro100_mdi_default
));
597 memcpy(&s
->mdimem
[0], &eepro100_mdi_default
[0], sizeof(s
->mdimem
));
600 static void nic_reset(void *opaque
)
602 EEPRO100State
*s
= opaque
;
603 TRACE(OTHER
, logout("%p\n", s
));
604 /* TODO: Clearing of hash register for selective reset, too? */
605 memset(&s
->mult
[0], 0, sizeof(s
->mult
));
606 nic_selective_reset(s
);
609 #if defined(DEBUG_EEPRO100)
610 static const char * const e100_reg
[PCI_IO_SIZE
/ 4] = {
614 "EEPROM/Flash Control",
616 "Receive DMA Byte Count",
618 "General Status/Control"
621 static char *regname(uint32_t addr
)
624 if (addr
< PCI_IO_SIZE
) {
625 const char *r
= e100_reg
[addr
/ 4];
627 snprintf(buf
, sizeof(buf
), "%s+%u", r
, addr
% 4);
629 snprintf(buf
, sizeof(buf
), "0x%02x", addr
);
632 snprintf(buf
, sizeof(buf
), "??? 0x%08x", addr
);
636 #endif /* DEBUG_EEPRO100 */
638 /*****************************************************************************
642 ****************************************************************************/
645 static uint16_t eepro100_read_command(EEPRO100State
* s
)
647 uint16_t val
= 0xffff;
648 TRACE(OTHER
, logout("val=0x%04x\n", val
));
653 /* Commands that can be put in a command list entry. */
658 CmdMulticastList
= 3,
660 CmdTDR
= 5, /* load microcode */
664 /* And some extra flags: */
665 CmdSuspend
= 0x4000, /* Suspend after completion. */
666 CmdIntr
= 0x2000, /* Interrupt after completion. */
667 CmdTxFlex
= 0x0008, /* Use "Flexible mode" for CmdTx command. */
670 static cu_state_t
get_cu_state(EEPRO100State
* s
)
672 return ((s
->mem
[SCBStatus
] & BITS(7, 6)) >> 6);
675 static void set_cu_state(EEPRO100State
* s
, cu_state_t state
)
677 s
->mem
[SCBStatus
] = (s
->mem
[SCBStatus
] & ~BITS(7, 6)) + (state
<< 6);
680 static ru_state_t
get_ru_state(EEPRO100State
* s
)
682 return ((s
->mem
[SCBStatus
] & BITS(5, 2)) >> 2);
685 static void set_ru_state(EEPRO100State
* s
, ru_state_t state
)
687 s
->mem
[SCBStatus
] = (s
->mem
[SCBStatus
] & ~BITS(5, 2)) + (state
<< 2);
690 static void dump_statistics(EEPRO100State
* s
)
692 /* Dump statistical data. Most data is never changed by the emulation
693 * and always 0, so we first just copy the whole block and then those
694 * values which really matter.
695 * Number of data should check configuration!!!
697 cpu_physical_memory_write(s
->statsaddr
, &s
->statistics
, s
->stats_size
);
698 stl_le_phys(s
->statsaddr
+ 0, s
->statistics
.tx_good_frames
);
699 stl_le_phys(s
->statsaddr
+ 36, s
->statistics
.rx_good_frames
);
700 stl_le_phys(s
->statsaddr
+ 48, s
->statistics
.rx_resource_errors
);
701 stl_le_phys(s
->statsaddr
+ 60, s
->statistics
.rx_short_frame_errors
);
703 stw_le_phys(s
->statsaddr
+ 76, s
->statistics
.xmt_tco_frames
);
704 stw_le_phys(s
->statsaddr
+ 78, s
->statistics
.rcv_tco_frames
);
705 missing("CU dump statistical counters");
709 static void read_cb(EEPRO100State
*s
)
711 cpu_physical_memory_read(s
->cb_address
, &s
->tx
, sizeof(s
->tx
));
712 s
->tx
.status
= le16_to_cpu(s
->tx
.status
);
713 s
->tx
.command
= le16_to_cpu(s
->tx
.command
);
714 s
->tx
.link
= le32_to_cpu(s
->tx
.link
);
715 s
->tx
.tbd_array_addr
= le32_to_cpu(s
->tx
.tbd_array_addr
);
716 s
->tx
.tcb_bytes
= le16_to_cpu(s
->tx
.tcb_bytes
);
719 static void tx_command(EEPRO100State
*s
)
721 uint32_t tbd_array
= le32_to_cpu(s
->tx
.tbd_array_addr
);
722 uint16_t tcb_bytes
= (le16_to_cpu(s
->tx
.tcb_bytes
) & 0x3fff);
723 /* Sends larger than MAX_ETH_FRAME_SIZE are allowed, up to 2600 bytes. */
726 uint32_t tbd_address
= s
->cb_address
+ 0x10;
728 ("transmit, TBD array address 0x%08x, TCB byte count 0x%04x, TBD count %u\n",
729 tbd_array
, tcb_bytes
, s
->tx
.tbd_count
));
731 if (tcb_bytes
> 2600) {
732 logout("TCB byte count too large, using 2600\n");
735 if (!((tcb_bytes
> 0) || (tbd_array
!= 0xffffffff))) {
737 ("illegal values of TBD array address and TCB byte count!\n");
739 assert(tcb_bytes
<= sizeof(buf
));
740 while (size
< tcb_bytes
) {
741 uint32_t tx_buffer_address
= ldl_phys(tbd_address
);
742 uint16_t tx_buffer_size
= lduw_phys(tbd_address
+ 4);
744 uint16_t tx_buffer_el
= lduw_phys(tbd_address
+ 6);
748 ("TBD (simplified mode): buffer address 0x%08x, size 0x%04x\n",
749 tx_buffer_address
, tx_buffer_size
));
750 tx_buffer_size
= MIN(tx_buffer_size
, sizeof(buf
) - size
);
751 cpu_physical_memory_read(tx_buffer_address
, &buf
[size
],
753 size
+= tx_buffer_size
;
755 if (tbd_array
== 0xffffffff) {
756 /* Simplified mode. Was already handled by code above. */
759 uint8_t tbd_count
= 0;
760 if (s
->has_extended_tcb_support
&& !(s
->configuration
[6] & BIT(4))) {
761 /* Extended Flexible TCB. */
762 for (; tbd_count
< 2; tbd_count
++) {
763 uint32_t tx_buffer_address
= ldl_phys(tbd_address
);
764 uint16_t tx_buffer_size
= lduw_phys(tbd_address
+ 4);
765 uint16_t tx_buffer_el
= lduw_phys(tbd_address
+ 6);
768 ("TBD (extended flexible mode): buffer address 0x%08x, size 0x%04x\n",
769 tx_buffer_address
, tx_buffer_size
));
770 tx_buffer_size
= MIN(tx_buffer_size
, sizeof(buf
) - size
);
771 cpu_physical_memory_read(tx_buffer_address
, &buf
[size
],
773 size
+= tx_buffer_size
;
774 if (tx_buffer_el
& 1) {
779 tbd_address
= tbd_array
;
780 for (; tbd_count
< s
->tx
.tbd_count
; tbd_count
++) {
781 uint32_t tx_buffer_address
= ldl_phys(tbd_address
);
782 uint16_t tx_buffer_size
= lduw_phys(tbd_address
+ 4);
783 uint16_t tx_buffer_el
= lduw_phys(tbd_address
+ 6);
786 ("TBD (flexible mode): buffer address 0x%08x, size 0x%04x\n",
787 tx_buffer_address
, tx_buffer_size
));
788 tx_buffer_size
= MIN(tx_buffer_size
, sizeof(buf
) - size
);
789 cpu_physical_memory_read(tx_buffer_address
, &buf
[size
],
791 size
+= tx_buffer_size
;
792 if (tx_buffer_el
& 1) {
797 TRACE(RXTX
, logout("%p sending frame, len=%d,%s\n", s
, size
, nic_dump(buf
, size
)));
798 qemu_send_packet(&s
->nic
->nc
, buf
, size
);
799 s
->statistics
.tx_good_frames
++;
800 /* Transmit with bad status would raise an CX/TNO interrupt.
801 * (82557 only). Emulation never has bad status. */
803 eepro100_cx_interrupt(s
);
807 static void set_multicast_list(EEPRO100State
*s
)
809 uint16_t multicast_count
= s
->tx
.tbd_array_addr
& BITS(13, 0);
811 memset(&s
->mult
[0], 0, sizeof(s
->mult
));
812 TRACE(OTHER
, logout("multicast list, multicast count = %u\n", multicast_count
));
813 for (i
= 0; i
< multicast_count
; i
+= 6) {
814 uint8_t multicast_addr
[6];
815 cpu_physical_memory_read(s
->cb_address
+ 10 + i
, multicast_addr
, 6);
816 TRACE(OTHER
, logout("multicast entry %s\n", nic_dump(multicast_addr
, 6)));
817 unsigned mcast_idx
= compute_mcast_idx(multicast_addr
);
818 assert(mcast_idx
< 64);
819 s
->mult
[mcast_idx
>> 3] |= (1 << (mcast_idx
& 7));
823 static void action_command(EEPRO100State
*s
)
830 uint16_t ok_status
= STATUS_OK
;
831 s
->cb_address
= s
->cu_base
+ s
->cu_offset
;
833 bit_el
= ((s
->tx
.command
& COMMAND_EL
) != 0);
834 bit_s
= ((s
->tx
.command
& COMMAND_S
) != 0);
835 bit_i
= ((s
->tx
.command
& COMMAND_I
) != 0);
836 bit_nc
= ((s
->tx
.command
& COMMAND_NC
) != 0);
838 bool bit_sf
= ((s
->tx
.command
& COMMAND_SF
) != 0);
840 s
->cu_offset
= s
->tx
.link
;
842 logout("val=(cu start), status=0x%04x, command=0x%04x, link=0x%08x\n",
843 s
->tx
.status
, s
->tx
.command
, s
->tx
.link
));
844 switch (s
->tx
.command
& COMMAND_CMD
) {
849 cpu_physical_memory_read(s
->cb_address
+ 8, &s
->conf
.macaddr
.a
[0], 6);
850 TRACE(OTHER
, logout("macaddr: %s\n", nic_dump(&s
->conf
.macaddr
.a
[0], 6)));
853 cpu_physical_memory_read(s
->cb_address
+ 8, &s
->configuration
[0],
854 sizeof(s
->configuration
));
855 TRACE(OTHER
, logout("configuration: %s\n",
856 nic_dump(&s
->configuration
[0], 16)));
857 TRACE(OTHER
, logout("configuration: %s\n",
858 nic_dump(&s
->configuration
[16],
859 ARRAY_SIZE(s
->configuration
) - 16)));
860 if (s
->configuration
[20] & BIT(6)) {
861 TRACE(OTHER
, logout("Multiple IA bit\n"));
864 case CmdMulticastList
:
865 set_multicast_list(s
);
869 missing("CmdTx: NC = 0");
876 TRACE(OTHER
, logout("load microcode\n"));
877 /* Starting with offset 8, the command contains
878 * 64 dwords microcode which we just ignore here. */
881 TRACE(OTHER
, logout("diagnose\n"));
882 /* Make sure error flag is not set. */
886 missing("undefined command");
890 /* Write new status. */
891 stw_phys(s
->cb_address
, s
->tx
.status
| ok_status
| STATUS_C
);
893 /* CU completed action. */
894 eepro100_cx_interrupt(s
);
897 /* CU becomes idle. Terminate command loop. */
898 set_cu_state(s
, cu_idle
);
899 eepro100_cna_interrupt(s
);
902 /* CU becomes suspended. Terminate command loop. */
903 set_cu_state(s
, cu_suspended
);
904 eepro100_cna_interrupt(s
);
907 /* More entries in list. */
908 TRACE(OTHER
, logout("CU list with at least one more entry\n"));
911 TRACE(OTHER
, logout("CU list empty\n"));
912 /* List is empty. Now CU is idle or suspended. */
915 static void eepro100_cu_command(EEPRO100State
* s
, uint8_t val
)
923 cu_state
= get_cu_state(s
);
924 if (cu_state
!= cu_idle
&& cu_state
!= cu_suspended
) {
925 /* Intel documentation says that CU must be idle or suspended
926 * for the CU start command. */
927 logout("unexpected CU state is %u\n", cu_state
);
929 set_cu_state(s
, cu_active
);
930 s
->cu_offset
= s
->pointer
;
934 if (get_cu_state(s
) != cu_suspended
) {
935 logout("bad CU resume from CU state %u\n", get_cu_state(s
));
936 /* Workaround for bad Linux eepro100 driver which resumes
937 * from idle state. */
939 missing("cu resume");
941 set_cu_state(s
, cu_suspended
);
943 if (get_cu_state(s
) == cu_suspended
) {
944 TRACE(OTHER
, logout("CU resuming\n"));
945 set_cu_state(s
, cu_active
);
950 /* Load dump counters address. */
951 s
->statsaddr
= s
->pointer
;
952 TRACE(OTHER
, logout("val=0x%02x (status address)\n", val
));
955 /* Dump statistical counters. */
956 TRACE(OTHER
, logout("val=0x%02x (dump stats)\n", val
));
958 stl_le_phys(s
->statsaddr
+ s
->stats_size
, 0xa005);
962 TRACE(OTHER
, logout("val=0x%02x (CU base address)\n", val
));
963 s
->cu_base
= s
->pointer
;
966 /* Dump and reset statistical counters. */
967 TRACE(OTHER
, logout("val=0x%02x (dump stats and reset)\n", val
));
969 stl_le_phys(s
->statsaddr
+ s
->stats_size
, 0xa007);
970 memset(&s
->statistics
, 0, sizeof(s
->statistics
));
973 /* CU static resume. */
974 missing("CU static resume");
977 missing("Undefined CU command");
981 static void eepro100_ru_command(EEPRO100State
* s
, uint8_t val
)
989 if (get_ru_state(s
) != ru_idle
) {
990 logout("RU state is %u, should be %u\n", get_ru_state(s
), ru_idle
);
992 assert(!"wrong RU state");
995 set_ru_state(s
, ru_ready
);
996 s
->ru_offset
= s
->pointer
;
997 TRACE(OTHER
, logout("val=0x%02x (rx start)\n", val
));
1001 if (get_ru_state(s
) != ru_suspended
) {
1002 logout("RU state is %u, should be %u\n", get_ru_state(s
),
1005 assert(!"wrong RU state");
1008 set_ru_state(s
, ru_ready
);
1012 if (get_ru_state(s
) == ru_ready
) {
1013 eepro100_rnr_interrupt(s
);
1015 set_ru_state(s
, ru_idle
);
1019 TRACE(OTHER
, logout("val=0x%02x (RU base address)\n", val
));
1020 s
->ru_base
= s
->pointer
;
1023 logout("val=0x%02x (undefined RU command)\n", val
);
1024 missing("Undefined SU command");
1028 static void eepro100_write_command(EEPRO100State
* s
, uint8_t val
)
1030 eepro100_ru_command(s
, val
& 0x0f);
1031 eepro100_cu_command(s
, val
& 0xf0);
1033 TRACE(OTHER
, logout("val=0x%02x\n", val
));
1035 /* Clear command byte after command was accepted. */
1039 /*****************************************************************************
1043 ****************************************************************************/
1045 #define EEPROM_CS 0x02
1046 #define EEPROM_SK 0x01
1047 #define EEPROM_DI 0x04
1048 #define EEPROM_DO 0x08
1050 static uint16_t eepro100_read_eeprom(EEPRO100State
* s
)
1053 memcpy(&val
, &s
->mem
[SCBeeprom
], sizeof(val
));
1054 if (eeprom93xx_read(s
->eeprom
)) {
1059 TRACE(EEPROM
, logout("val=0x%04x\n", val
));
1063 static void eepro100_write_eeprom(eeprom_t
* eeprom
, uint8_t val
)
1065 TRACE(EEPROM
, logout("val=0x%02x\n", val
));
1067 /* mask unwriteable bits */
1069 val
= SET_MASKED(val
, 0x31, eeprom
->value
);
1072 int eecs
= ((val
& EEPROM_CS
) != 0);
1073 int eesk
= ((val
& EEPROM_SK
) != 0);
1074 int eedi
= ((val
& EEPROM_DI
) != 0);
1075 eeprom93xx_write(eeprom
, eecs
, eesk
, eedi
);
1078 static void eepro100_write_pointer(EEPRO100State
* s
, uint32_t val
)
1080 s
->pointer
= le32_to_cpu(val
);
1081 TRACE(OTHER
, logout("val=0x%08x\n", val
));
1084 /*****************************************************************************
1088 ****************************************************************************/
1090 #if defined(DEBUG_EEPRO100)
1091 static const char * const mdi_op_name
[] = {
1098 static const char * const mdi_reg_name
[] = {
1101 "PHY Identification (Word 1)",
1102 "PHY Identification (Word 2)",
1103 "Auto-Negotiation Advertisement",
1104 "Auto-Negotiation Link Partner Ability",
1105 "Auto-Negotiation Expansion"
1108 static const char *reg2name(uint8_t reg
)
1110 static char buffer
[10];
1111 const char *p
= buffer
;
1112 if (reg
< ARRAY_SIZE(mdi_reg_name
)) {
1113 p
= mdi_reg_name
[reg
];
1115 snprintf(buffer
, sizeof(buffer
), "reg=0x%02x", reg
);
1119 #endif /* DEBUG_EEPRO100 */
1121 static uint32_t eepro100_read_mdi(EEPRO100State
* s
)
1124 memcpy(&val
, &s
->mem
[0x10], sizeof(val
));
1126 #ifdef DEBUG_EEPRO100
1127 uint8_t raiseint
= (val
& BIT(29)) >> 29;
1128 uint8_t opcode
= (val
& BITS(27, 26)) >> 26;
1129 uint8_t phy
= (val
& BITS(25, 21)) >> 21;
1130 uint8_t reg
= (val
& BITS(20, 16)) >> 16;
1131 uint16_t data
= (val
& BITS(15, 0));
1133 /* Emulation takes no time to finish MDI transaction. */
1135 TRACE(MDI
, logout("val=0x%08x (int=%u, %s, phy=%u, %s, data=0x%04x\n",
1136 val
, raiseint
, mdi_op_name
[opcode
], phy
,
1137 reg2name(reg
), data
));
1141 static void eepro100_write_mdi(EEPRO100State
* s
, uint32_t val
)
1143 uint8_t raiseint
= (val
& BIT(29)) >> 29;
1144 uint8_t opcode
= (val
& BITS(27, 26)) >> 26;
1145 uint8_t phy
= (val
& BITS(25, 21)) >> 21;
1146 uint8_t reg
= (val
& BITS(20, 16)) >> 16;
1147 uint16_t data
= (val
& BITS(15, 0));
1148 TRACE(MDI
, logout("val=0x%08x (int=%u, %s, phy=%u, %s, data=0x%04x\n",
1149 val
, raiseint
, mdi_op_name
[opcode
], phy
, reg2name(reg
), data
));
1151 /* Unsupported PHY address. */
1153 logout("phy must be 1 but is %u\n", phy
);
1156 } else if (opcode
!= 1 && opcode
!= 2) {
1157 /* Unsupported opcode. */
1158 logout("opcode must be 1 or 2 but is %u\n", opcode
);
1160 } else if (reg
> 6) {
1161 /* Unsupported register. */
1162 logout("register must be 0...6 but is %u\n", reg
);
1165 TRACE(MDI
, logout("val=0x%08x (int=%u, %s, phy=%u, %s, data=0x%04x\n",
1166 val
, raiseint
, mdi_op_name
[opcode
], phy
,
1167 reg2name(reg
), data
));
1171 case 0: /* Control Register */
1172 if (data
& 0x8000) {
1173 /* Reset status and control registers to default. */
1174 s
->mdimem
[0] = eepro100_mdi_default
[0];
1175 s
->mdimem
[1] = eepro100_mdi_default
[1];
1176 data
= s
->mdimem
[reg
];
1178 /* Restart Auto Configuration = Normal Operation */
1182 case 1: /* Status Register */
1183 missing("not writable");
1184 data
= s
->mdimem
[reg
];
1186 case 2: /* PHY Identification Register (Word 1) */
1187 case 3: /* PHY Identification Register (Word 2) */
1188 missing("not implemented");
1190 case 4: /* Auto-Negotiation Advertisement Register */
1191 case 5: /* Auto-Negotiation Link Partner Ability Register */
1193 case 6: /* Auto-Negotiation Expansion Register */
1195 missing("not implemented");
1197 s
->mdimem
[reg
] = data
;
1198 } else if (opcode
== 2) {
1201 case 0: /* Control Register */
1202 if (data
& 0x8000) {
1203 /* Reset status and control registers to default. */
1204 s
->mdimem
[0] = eepro100_mdi_default
[0];
1205 s
->mdimem
[1] = eepro100_mdi_default
[1];
1208 case 1: /* Status Register */
1209 s
->mdimem
[reg
] |= 0x0020;
1211 case 2: /* PHY Identification Register (Word 1) */
1212 case 3: /* PHY Identification Register (Word 2) */
1213 case 4: /* Auto-Negotiation Advertisement Register */
1215 case 5: /* Auto-Negotiation Link Partner Ability Register */
1216 s
->mdimem
[reg
] = 0x41fe;
1218 case 6: /* Auto-Negotiation Expansion Register */
1219 s
->mdimem
[reg
] = 0x0001;
1222 data
= s
->mdimem
[reg
];
1224 /* Emulation takes no time to finish MDI transaction.
1225 * Set MDI bit in SCB status register. */
1226 s
->mem
[SCBAck
] |= 0x08;
1229 eepro100_mdi_interrupt(s
);
1232 val
= (val
& 0xffff0000) + data
;
1233 memcpy(&s
->mem
[0x10], &val
, sizeof(val
));
1236 /*****************************************************************************
1240 ****************************************************************************/
1242 #define PORT_SOFTWARE_RESET 0
1243 #define PORT_SELFTEST 1
1244 #define PORT_SELECTIVE_RESET 2
1246 #define PORT_SELECTION_MASK 3
1249 uint32_t st_sign
; /* Self Test Signature */
1250 uint32_t st_result
; /* Self Test Results */
1251 } eepro100_selftest_t
;
1253 static uint32_t eepro100_read_port(EEPRO100State
* s
)
1258 static void eepro100_write_port(EEPRO100State
* s
, uint32_t val
)
1260 val
= le32_to_cpu(val
);
1261 uint32_t address
= (val
& ~PORT_SELECTION_MASK
);
1262 uint8_t selection
= (val
& PORT_SELECTION_MASK
);
1263 switch (selection
) {
1264 case PORT_SOFTWARE_RESET
:
1268 TRACE(OTHER
, logout("selftest address=0x%08x\n", address
));
1269 eepro100_selftest_t data
;
1270 cpu_physical_memory_read(address
, &data
, sizeof(data
));
1271 data
.st_sign
= 0xffffffff;
1273 cpu_physical_memory_write(address
, &data
, sizeof(data
));
1275 case PORT_SELECTIVE_RESET
:
1276 TRACE(OTHER
, logout("selective reset, selftest address=0x%08x\n", address
));
1277 nic_selective_reset(s
);
1280 logout("val=0x%08x\n", val
);
1281 missing("unknown port selection");
1285 /*****************************************************************************
1287 * General hardware emulation.
1289 ****************************************************************************/
1291 static uint8_t eepro100_read1(EEPRO100State
* s
, uint32_t addr
)
1294 if (addr
<= sizeof(s
->mem
) - sizeof(val
)) {
1295 memcpy(&val
, &s
->mem
[addr
], sizeof(val
));
1301 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1304 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1306 val
= eepro100_read_command(s
);
1310 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1313 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1316 val
= eepro100_read_eeprom(s
);
1318 case SCBpmdr
: /* Power Management Driver Register */
1320 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1322 case SCBgstat
: /* General Status Register */
1323 /* 100 Mbps full duplex, valid link */
1325 TRACE(OTHER
, logout("addr=General Status val=%02x\n", val
));
1328 logout("addr=%s val=0x%02x\n", regname(addr
), val
);
1329 missing("unknown byte read");
1334 static uint16_t eepro100_read2(EEPRO100State
* s
, uint32_t addr
)
1337 if (addr
<= sizeof(s
->mem
) - sizeof(val
)) {
1338 memcpy(&val
, &s
->mem
[addr
], sizeof(val
));
1344 TRACE(OTHER
, logout("addr=%s val=0x%04x\n", regname(addr
), val
));
1347 val
= eepro100_read_eeprom(s
);
1348 TRACE(OTHER
, logout("addr=%s val=0x%04x\n", regname(addr
), val
));
1351 logout("addr=%s val=0x%04x\n", regname(addr
), val
);
1352 missing("unknown word read");
1357 static uint32_t eepro100_read4(EEPRO100State
* s
, uint32_t addr
)
1360 if (addr
<= sizeof(s
->mem
) - sizeof(val
)) {
1361 memcpy(&val
, &s
->mem
[addr
], sizeof(val
));
1366 TRACE(OTHER
, logout("addr=%s val=0x%08x\n", regname(addr
), val
));
1370 val
= eepro100_read_pointer(s
);
1372 TRACE(OTHER
, logout("addr=%s val=0x%08x\n", regname(addr
), val
));
1375 val
= eepro100_read_port(s
);
1376 TRACE(OTHER
, logout("addr=%s val=0x%08x\n", regname(addr
), val
));
1379 val
= eepro100_read_mdi(s
);
1382 logout("addr=%s val=0x%08x\n", regname(addr
), val
);
1383 missing("unknown longword read");
1388 static void eepro100_write1(EEPRO100State
* s
, uint32_t addr
, uint8_t val
)
1390 /* SCBStatus is readonly. */
1391 if (addr
> SCBStatus
&& addr
<= sizeof(s
->mem
) - sizeof(val
)) {
1392 memcpy(&s
->mem
[addr
], &val
, sizeof(val
));
1397 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1400 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1401 eepro100_acknowledge(s
);
1404 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1405 eepro100_write_command(s
, val
);
1408 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1410 eepro100_swi_interrupt(s
);
1412 eepro100_interrupt(s
, 0);
1415 case SCBFlow
: /* does not exist on 82557 */
1418 case SCBpmdr
: /* does not exist on 82557 */
1419 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1422 TRACE(OTHER
, logout("addr=%s val=0x%02x\n", regname(addr
), val
));
1423 eepro100_write_eeprom(s
->eeprom
, val
);
1426 logout("addr=%s val=0x%02x\n", regname(addr
), val
);
1427 missing("unknown byte write");
1431 static void eepro100_write2(EEPRO100State
* s
, uint32_t addr
, uint16_t val
)
1433 /* SCBStatus is readonly. */
1434 if (addr
> SCBStatus
&& addr
<= sizeof(s
->mem
) - sizeof(val
)) {
1435 memcpy(&s
->mem
[addr
], &val
, sizeof(val
));
1440 TRACE(OTHER
, logout("addr=%s val=0x%04x\n", regname(addr
), val
));
1441 s
->mem
[SCBAck
] = (val
>> 8);
1442 eepro100_acknowledge(s
);
1445 TRACE(OTHER
, logout("addr=%s val=0x%04x\n", regname(addr
), val
));
1446 eepro100_write_command(s
, val
);
1447 eepro100_write1(s
, SCBIntmask
, val
>> 8);
1450 TRACE(OTHER
, logout("addr=%s val=0x%04x\n", regname(addr
), val
));
1451 eepro100_write_eeprom(s
->eeprom
, val
);
1454 logout("addr=%s val=0x%04x\n", regname(addr
), val
);
1455 missing("unknown word write");
1459 static void eepro100_write4(EEPRO100State
* s
, uint32_t addr
, uint32_t val
)
1461 if (addr
<= sizeof(s
->mem
) - sizeof(val
)) {
1462 memcpy(&s
->mem
[addr
], &val
, sizeof(val
));
1467 eepro100_write_pointer(s
, val
);
1470 TRACE(OTHER
, logout("addr=%s val=0x%08x\n", regname(addr
), val
));
1471 eepro100_write_port(s
, val
);
1474 eepro100_write_mdi(s
, val
);
1477 logout("addr=%s val=0x%08x\n", regname(addr
), val
);
1478 missing("unknown longword write");
1482 /*****************************************************************************
1486 ****************************************************************************/
1488 static uint32_t ioport_read1(void *opaque
, uint32_t addr
)
1490 EEPRO100State
*s
= opaque
;
1492 logout("addr=%s\n", regname(addr
));
1494 return eepro100_read1(s
, addr
- s
->region1
);
1497 static uint32_t ioport_read2(void *opaque
, uint32_t addr
)
1499 EEPRO100State
*s
= opaque
;
1500 return eepro100_read2(s
, addr
- s
->region1
);
1503 static uint32_t ioport_read4(void *opaque
, uint32_t addr
)
1505 EEPRO100State
*s
= opaque
;
1506 return eepro100_read4(s
, addr
- s
->region1
);
1509 static void ioport_write1(void *opaque
, uint32_t addr
, uint32_t val
)
1511 EEPRO100State
*s
= opaque
;
1513 logout("addr=%s val=0x%02x\n", regname(addr
), val
);
1515 eepro100_write1(s
, addr
- s
->region1
, val
);
1518 static void ioport_write2(void *opaque
, uint32_t addr
, uint32_t val
)
1520 EEPRO100State
*s
= opaque
;
1521 eepro100_write2(s
, addr
- s
->region1
, val
);
1524 static void ioport_write4(void *opaque
, uint32_t addr
, uint32_t val
)
1526 EEPRO100State
*s
= opaque
;
1527 eepro100_write4(s
, addr
- s
->region1
, val
);
1530 /***********************************************************/
1531 /* PCI EEPRO100 definitions */
1533 static void pci_map(PCIDevice
* pci_dev
, int region_num
,
1534 pcibus_t addr
, pcibus_t size
, int type
)
1536 EEPRO100State
*s
= DO_UPCAST(EEPRO100State
, dev
, pci_dev
);
1538 TRACE(OTHER
, logout("region %d, addr=0x%08"FMT_PCIBUS
", "
1539 "size=0x%08"FMT_PCIBUS
", type=%d\n",
1540 region_num
, addr
, size
, type
));
1542 assert(region_num
== 1);
1543 register_ioport_write(addr
, size
, 1, ioport_write1
, s
);
1544 register_ioport_read(addr
, size
, 1, ioport_read1
, s
);
1545 register_ioport_write(addr
, size
, 2, ioport_write2
, s
);
1546 register_ioport_read(addr
, size
, 2, ioport_read2
, s
);
1547 register_ioport_write(addr
, size
, 4, ioport_write4
, s
);
1548 register_ioport_read(addr
, size
, 4, ioport_read4
, s
);
1553 /*****************************************************************************
1555 * Memory mapped I/O.
1557 ****************************************************************************/
1559 static void pci_mmio_writeb(void *opaque
, target_phys_addr_t addr
, uint32_t val
)
1561 EEPRO100State
*s
= opaque
;
1563 logout("addr=%s val=0x%02x\n", regname(addr
), val
);
1565 eepro100_write1(s
, addr
, val
);
1568 static void pci_mmio_writew(void *opaque
, target_phys_addr_t addr
, uint32_t val
)
1570 EEPRO100State
*s
= opaque
;
1572 logout("addr=%s val=0x%02x\n", regname(addr
), val
);
1574 eepro100_write2(s
, addr
, val
);
1577 static void pci_mmio_writel(void *opaque
, target_phys_addr_t addr
, uint32_t val
)
1579 EEPRO100State
*s
= opaque
;
1581 logout("addr=%s val=0x%02x\n", regname(addr
), val
);
1583 eepro100_write4(s
, addr
, val
);
1586 static uint32_t pci_mmio_readb(void *opaque
, target_phys_addr_t addr
)
1588 EEPRO100State
*s
= opaque
;
1590 logout("addr=%s\n", regname(addr
));
1592 return eepro100_read1(s
, addr
);
1595 static uint32_t pci_mmio_readw(void *opaque
, target_phys_addr_t addr
)
1597 EEPRO100State
*s
= opaque
;
1599 logout("addr=%s\n", regname(addr
));
1601 return eepro100_read2(s
, addr
);
1604 static uint32_t pci_mmio_readl(void *opaque
, target_phys_addr_t addr
)
1606 EEPRO100State
*s
= opaque
;
1608 logout("addr=%s\n", regname(addr
));
1610 return eepro100_read4(s
, addr
);
1613 static CPUWriteMemoryFunc
* const pci_mmio_write
[] = {
1619 static CPUReadMemoryFunc
* const pci_mmio_read
[] = {
1625 static int nic_can_receive(VLANClientState
*nc
)
1627 EEPRO100State
*s
= DO_UPCAST(NICState
, nc
, nc
)->opaque
;
1628 TRACE(RXTX
, logout("%p\n", s
));
1629 return get_ru_state(s
) == ru_ready
;
1631 return !eepro100_buffer_full(s
);
1635 static ssize_t
nic_receive(VLANClientState
*nc
, const uint8_t * buf
, size_t size
)
1638 * - Magic packets should set bit 30 in power management driver register.
1639 * - Interesting packets should set bit 29 in power management driver register.
1641 EEPRO100State
*s
= DO_UPCAST(NICState
, nc
, nc
)->opaque
;
1642 uint16_t rfd_status
= 0xa000;
1643 static const uint8_t broadcast_macaddr
[6] =
1644 { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
1646 if (s
->configuration
[8] & 0x80) {
1647 /* CSMA is disabled. */
1648 logout("%p received while CSMA is disabled\n", s
);
1650 } else if (size
< 64 && (s
->configuration
[7] & BIT(0))) {
1651 /* Short frame and configuration byte 7/0 (discard short receive) set:
1652 * Short frame is discarded */
1653 logout("%p received short frame (%zu byte)\n", s
, size
);
1654 s
->statistics
.rx_short_frame_errors
++;
1658 } else if ((size
> MAX_ETH_FRAME_SIZE
+ 4) && !(s
->configuration
[18] & BIT(3))) {
1659 /* Long frame and configuration byte 18/3 (long receive ok) not set:
1660 * Long frames are discarded. */
1661 logout("%p received long frame (%zu byte), ignored\n", s
, size
);
1663 } else if (memcmp(buf
, s
->conf
.macaddr
.a
, 6) == 0) { /* !!! */
1664 /* Frame matches individual address. */
1665 /* TODO: check configuration byte 15/4 (ignore U/L). */
1666 TRACE(RXTX
, logout("%p received frame for me, len=%zu\n", s
, size
));
1667 } else if (memcmp(buf
, broadcast_macaddr
, 6) == 0) {
1668 /* Broadcast frame. */
1669 TRACE(RXTX
, logout("%p received broadcast, len=%zu\n", s
, size
));
1670 rfd_status
|= 0x0002;
1671 } else if (buf
[0] & 0x01) {
1672 /* Multicast frame. */
1673 TRACE(RXTX
, logout("%p received multicast, len=%zu,%s\n", s
, size
, nic_dump(buf
, size
)));
1674 if (s
->configuration
[21] & BIT(3)) {
1675 /* Multicast all bit is set, receive all multicast frames. */
1677 unsigned mcast_idx
= compute_mcast_idx(buf
);
1678 assert(mcast_idx
< 64);
1679 if (s
->mult
[mcast_idx
>> 3] & (1 << (mcast_idx
& 7))) {
1680 /* Multicast frame is allowed in hash table. */
1681 } else if (s
->configuration
[15] & BIT(0)) {
1682 /* Promiscuous: receive all. */
1683 rfd_status
|= 0x0004;
1685 TRACE(RXTX
, logout("%p multicast ignored\n", s
));
1689 /* TODO: Next not for promiscuous mode? */
1690 rfd_status
|= 0x0002;
1691 } else if (s
->configuration
[15] & BIT(0)) {
1692 /* Promiscuous: receive all. */
1693 TRACE(RXTX
, logout("%p received frame in promiscuous mode, len=%zu\n", s
, size
));
1694 rfd_status
|= 0x0004;
1695 } else if (s
->configuration
[20] & BIT(6)) {
1696 /* Multiple IA bit set. */
1697 unsigned mcast_idx
= compute_mcast_idx(buf
);
1698 assert(mcast_idx
< 64);
1699 if (s
->mult
[mcast_idx
>> 3] & (1 << (mcast_idx
& 7))) {
1700 TRACE(RXTX
, logout("%p accepted, multiple IA bit set\n", s
));
1702 TRACE(RXTX
, logout("%p frame ignored, multiple IA bit set\n", s
));
1706 TRACE(RXTX
, logout("%p received frame, ignored, len=%zu,%s\n", s
, size
,
1707 nic_dump(buf
, size
)));
1711 if (get_ru_state(s
) != ru_ready
) {
1712 /* No resources available. */
1713 logout("no resources, state=%u\n", get_ru_state(s
));
1714 /* TODO: RNR interrupt only at first failed frame? */
1715 eepro100_rnr_interrupt(s
);
1716 s
->statistics
.rx_resource_errors
++;
1718 assert(!"no resources");
1724 cpu_physical_memory_read(s
->ru_base
+ s
->ru_offset
, &rx
,
1725 offsetof(eepro100_rx_t
, packet
));
1726 uint16_t rfd_command
= le16_to_cpu(rx
.command
);
1727 uint16_t rfd_size
= le16_to_cpu(rx
.size
);
1729 if (size
> rfd_size
) {
1730 logout("Receive buffer (%" PRId16
" bytes) too small for data "
1731 "(%zu bytes); data truncated\n", rfd_size
, size
);
1735 rfd_status
|= 0x0080;
1737 TRACE(OTHER
, logout("command 0x%04x, link 0x%08x, addr 0x%08x, size %u\n",
1738 rfd_command
, rx
.link
, rx
.rx_buf_addr
, rfd_size
));
1739 stw_phys(s
->ru_base
+ s
->ru_offset
+ offsetof(eepro100_rx_t
, status
),
1741 stw_phys(s
->ru_base
+ s
->ru_offset
+ offsetof(eepro100_rx_t
, count
), size
);
1742 /* Early receive interrupt not supported. */
1744 eepro100_er_interrupt(s
);
1746 /* Receive CRC Transfer not supported. */
1747 if (s
->configuration
[18] & BIT(2)) {
1748 missing("Receive CRC Transfer");
1751 /* TODO: check stripping enable bit. */
1753 assert(!(s
->configuration
[17] & BIT(0)));
1755 cpu_physical_memory_write(s
->ru_base
+ s
->ru_offset
+
1756 offsetof(eepro100_rx_t
, packet
), buf
, size
);
1757 s
->statistics
.rx_good_frames
++;
1758 eepro100_fr_interrupt(s
);
1759 s
->ru_offset
= le32_to_cpu(rx
.link
);
1760 if (rfd_command
& COMMAND_EL
) {
1761 /* EL bit is set, so this was the last frame. */
1762 logout("receive: Running out of frames\n");
1763 set_ru_state(s
, ru_suspended
);
1765 if (rfd_command
& COMMAND_S
) {
1767 set_ru_state(s
, ru_suspended
);
1772 static const VMStateDescription vmstate_eepro100
= {
1774 .minimum_version_id
= 2,
1775 .minimum_version_id_old
= 2,
1776 .fields
= (VMStateField
[]) {
1777 VMSTATE_PCI_DEVICE(dev
, EEPRO100State
),
1779 VMSTATE_BUFFER(mult
, EEPRO100State
),
1780 VMSTATE_BUFFER(mem
, EEPRO100State
),
1781 /* Save all members of struct between scb_stat and mem. */
1782 VMSTATE_UINT8(scb_stat
, EEPRO100State
),
1783 VMSTATE_UINT8(int_stat
, EEPRO100State
),
1784 VMSTATE_UNUSED(3*4),
1785 VMSTATE_MACADDR(conf
.macaddr
, EEPRO100State
),
1786 VMSTATE_UNUSED(19*4),
1787 VMSTATE_UINT16_ARRAY(mdimem
, EEPRO100State
, 32),
1788 /* The eeprom should be saved and restored by its own routines. */
1789 VMSTATE_UINT32(device
, EEPRO100State
),
1790 /* TODO check device. */
1791 VMSTATE_UINT32(pointer
, EEPRO100State
),
1792 VMSTATE_UINT32(cu_base
, EEPRO100State
),
1793 VMSTATE_UINT32(cu_offset
, EEPRO100State
),
1794 VMSTATE_UINT32(ru_base
, EEPRO100State
),
1795 VMSTATE_UINT32(ru_offset
, EEPRO100State
),
1796 VMSTATE_UINT32(statsaddr
, EEPRO100State
),
1797 /* Save eepro100_stats_t statistics. */
1798 VMSTATE_UINT32(statistics
.tx_good_frames
, EEPRO100State
),
1799 VMSTATE_UINT32(statistics
.tx_max_collisions
, EEPRO100State
),
1800 VMSTATE_UINT32(statistics
.tx_late_collisions
, EEPRO100State
),
1801 VMSTATE_UINT32(statistics
.tx_underruns
, EEPRO100State
),
1802 VMSTATE_UINT32(statistics
.tx_lost_crs
, EEPRO100State
),
1803 VMSTATE_UINT32(statistics
.tx_deferred
, EEPRO100State
),
1804 VMSTATE_UINT32(statistics
.tx_single_collisions
, EEPRO100State
),
1805 VMSTATE_UINT32(statistics
.tx_multiple_collisions
, EEPRO100State
),
1806 VMSTATE_UINT32(statistics
.tx_total_collisions
, EEPRO100State
),
1807 VMSTATE_UINT32(statistics
.rx_good_frames
, EEPRO100State
),
1808 VMSTATE_UINT32(statistics
.rx_crc_errors
, EEPRO100State
),
1809 VMSTATE_UINT32(statistics
.rx_alignment_errors
, EEPRO100State
),
1810 VMSTATE_UINT32(statistics
.rx_resource_errors
, EEPRO100State
),
1811 VMSTATE_UINT32(statistics
.rx_overrun_errors
, EEPRO100State
),
1812 VMSTATE_UINT32(statistics
.rx_cdt_errors
, EEPRO100State
),
1813 VMSTATE_UINT32(statistics
.rx_short_frame_errors
, EEPRO100State
),
1814 VMSTATE_UINT32(statistics
.fc_xmt_pause
, EEPRO100State
),
1815 VMSTATE_UINT32(statistics
.fc_rcv_pause
, EEPRO100State
),
1816 VMSTATE_UINT32(statistics
.fc_rcv_unsupported
, EEPRO100State
),
1817 VMSTATE_UINT16(statistics
.xmt_tco_frames
, EEPRO100State
),
1818 VMSTATE_UINT16(statistics
.rcv_tco_frames
, EEPRO100State
),
1819 /* Configuration bytes. */
1820 VMSTATE_BUFFER(configuration
, EEPRO100State
),
1821 VMSTATE_END_OF_LIST()
1825 static void nic_cleanup(VLANClientState
*nc
)
1827 EEPRO100State
*s
= DO_UPCAST(NICState
, nc
, nc
)->opaque
;
1832 static int pci_nic_uninit(PCIDevice
*pci_dev
)
1834 EEPRO100State
*s
= DO_UPCAST(EEPRO100State
, dev
, pci_dev
);
1836 cpu_unregister_io_memory(s
->mmio_index
);
1837 vmstate_unregister(&pci_dev
->qdev
, s
->vmstate
, s
);
1838 eeprom93xx_free(&pci_dev
->qdev
, s
->eeprom
);
1839 qemu_del_vlan_client(&s
->nic
->nc
);
1843 static NetClientInfo net_eepro100_info
= {
1844 .type
= NET_CLIENT_TYPE_NIC
,
1845 .size
= sizeof(NICState
),
1846 .can_receive
= nic_can_receive
,
1847 .receive
= nic_receive
,
1848 .cleanup
= nic_cleanup
,
1851 static int e100_nic_init(PCIDevice
*pci_dev
)
1853 EEPRO100State
*s
= DO_UPCAST(EEPRO100State
, dev
, pci_dev
);
1854 E100PCIDeviceInfo
*e100_device
= DO_UPCAST(E100PCIDeviceInfo
, pci
.qdev
,
1855 pci_dev
->qdev
.info
);
1857 TRACE(OTHER
, logout("\n"));
1859 s
->device
= e100_device
->device
;
1861 e100_pci_reset(s
, e100_device
);
1863 /* Add 64 * 2 EEPROM. i82557 and i82558 support a 64 word EEPROM,
1864 * i82559 and later support 64 or 256 word EEPROM. */
1865 s
->eeprom
= eeprom93xx_new(&pci_dev
->qdev
, EEPROM_SIZE
);
1867 /* Handler for memory-mapped I/O */
1869 cpu_register_io_memory(pci_mmio_read
, pci_mmio_write
, s
,
1870 DEVICE_NATIVE_ENDIAN
);
1872 pci_register_bar_simple(&s
->dev
, 0, PCI_MEM_SIZE
,
1873 PCI_BASE_ADDRESS_MEM_PREFETCH
, s
->mmio_index
);
1875 pci_register_bar(&s
->dev
, 1, PCI_IO_SIZE
, PCI_BASE_ADDRESS_SPACE_IO
,
1877 pci_register_bar_simple(&s
->dev
, 2, PCI_FLASH_SIZE
, 0, s
->mmio_index
);
1879 qemu_macaddr_default_if_unset(&s
->conf
.macaddr
);
1880 logout("macaddr: %s\n", nic_dump(&s
->conf
.macaddr
.a
[0], 6));
1881 assert(s
->region1
== 0);
1885 s
->nic
= qemu_new_nic(&net_eepro100_info
, &s
->conf
,
1886 pci_dev
->qdev
.info
->name
, pci_dev
->qdev
.id
, s
);
1888 qemu_format_nic_info_str(&s
->nic
->nc
, s
->conf
.macaddr
.a
);
1889 TRACE(OTHER
, logout("%s\n", s
->nic
->nc
.info_str
));
1891 qemu_register_reset(nic_reset
, s
);
1893 s
->vmstate
= qemu_malloc(sizeof(vmstate_eepro100
));
1894 memcpy(s
->vmstate
, &vmstate_eepro100
, sizeof(vmstate_eepro100
));
1895 s
->vmstate
->name
= s
->nic
->nc
.model
;
1896 vmstate_register(&pci_dev
->qdev
, -1, s
->vmstate
, s
);
1898 add_boot_device_path(s
->conf
.bootindex
, &pci_dev
->qdev
, "/ethernet-phy@0");
1903 static E100PCIDeviceInfo e100_devices
[] = {
1905 .pci
.qdev
.name
= "i82550",
1906 .pci
.qdev
.desc
= "Intel i82550 Ethernet",
1908 /* TODO: check device id. */
1909 .device_id
= PCI_DEVICE_ID_INTEL_82551IT
,
1910 /* Revision ID: 0x0c, 0x0d, 0x0e. */
1912 /* TODO: check size of statistical counters. */
1914 /* TODO: check extended tcb support. */
1915 .has_extended_tcb_support
= true,
1916 .power_management
= true,
1918 .pci
.qdev
.name
= "i82551",
1919 .pci
.qdev
.desc
= "Intel i82551 Ethernet",
1921 .device_id
= PCI_DEVICE_ID_INTEL_82551IT
,
1922 /* Revision ID: 0x0f, 0x10. */
1924 /* TODO: check size of statistical counters. */
1926 .has_extended_tcb_support
= true,
1927 .power_management
= true,
1929 .pci
.qdev
.name
= "i82557a",
1930 .pci
.qdev
.desc
= "Intel i82557A Ethernet",
1932 .device_id
= PCI_DEVICE_ID_INTEL_82557
,
1934 .power_management
= false,
1936 .pci
.qdev
.name
= "i82557b",
1937 .pci
.qdev
.desc
= "Intel i82557B Ethernet",
1939 .device_id
= PCI_DEVICE_ID_INTEL_82557
,
1941 .power_management
= false,
1943 .pci
.qdev
.name
= "i82557c",
1944 .pci
.qdev
.desc
= "Intel i82557C Ethernet",
1946 .device_id
= PCI_DEVICE_ID_INTEL_82557
,
1948 .power_management
= false,
1950 .pci
.qdev
.name
= "i82558a",
1951 .pci
.qdev
.desc
= "Intel i82558A Ethernet",
1953 .device_id
= PCI_DEVICE_ID_INTEL_82557
,
1956 .has_extended_tcb_support
= true,
1957 .power_management
= true,
1959 .pci
.qdev
.name
= "i82558b",
1960 .pci
.qdev
.desc
= "Intel i82558B Ethernet",
1962 .device_id
= PCI_DEVICE_ID_INTEL_82557
,
1965 .has_extended_tcb_support
= true,
1966 .power_management
= true,
1968 .pci
.qdev
.name
= "i82559a",
1969 .pci
.qdev
.desc
= "Intel i82559A Ethernet",
1971 .device_id
= PCI_DEVICE_ID_INTEL_82557
,
1974 .has_extended_tcb_support
= true,
1975 .power_management
= true,
1977 .pci
.qdev
.name
= "i82559b",
1978 .pci
.qdev
.desc
= "Intel i82559B Ethernet",
1980 .device_id
= PCI_DEVICE_ID_INTEL_82557
,
1983 .has_extended_tcb_support
= true,
1984 .power_management
= true,
1986 .pci
.qdev
.name
= "i82559c",
1987 .pci
.qdev
.desc
= "Intel i82559C Ethernet",
1989 .device_id
= PCI_DEVICE_ID_INTEL_82557
,
1993 /* TODO: Windows wants revision id 0x0c. */
1996 .has_extended_tcb_support
= true,
1997 .power_management
= true,
1999 .pci
.qdev
.name
= "i82559er",
2000 .pci
.qdev
.desc
= "Intel i82559ER Ethernet",
2002 .device_id
= PCI_DEVICE_ID_INTEL_82551IT
,
2005 .has_extended_tcb_support
= true,
2006 .power_management
= true,
2008 .pci
.qdev
.name
= "i82562",
2009 .pci
.qdev
.desc
= "Intel i82562 Ethernet",
2011 /* TODO: check device id. */
2012 .device_id
= PCI_DEVICE_ID_INTEL_82551IT
,
2013 /* TODO: wrong revision id. */
2016 .has_extended_tcb_support
= true,
2017 .power_management
= true,
2019 /* Toshiba Tecra 8200. */
2020 .pci
.qdev
.name
= "i82801",
2021 .pci
.qdev
.desc
= "Intel i82801 Ethernet",
2023 .device_id
= 0x2449,
2026 .has_extended_tcb_support
= true,
2027 .power_management
= true,
2031 static Property e100_properties
[] = {
2032 DEFINE_NIC_PROPERTIES(EEPRO100State
, conf
),
2033 DEFINE_PROP_END_OF_LIST(),
2036 static void eepro100_register_devices(void)
2039 for (i
= 0; i
< ARRAY_SIZE(e100_devices
); i
++) {
2040 PCIDeviceInfo
*pci_dev
= &e100_devices
[i
].pci
;
2041 /* We use the same rom file for all device ids.
2042 QEMU fixes the device id during rom load. */
2043 pci_dev
->romfile
= "gpxe-eepro100-80861209.rom";
2044 pci_dev
->init
= e100_nic_init
;
2045 pci_dev
->exit
= pci_nic_uninit
;
2046 pci_dev
->qdev
.props
= e100_properties
;
2047 pci_dev
->qdev
.size
= sizeof(EEPRO100State
);
2048 pci_qdev_register(pci_dev
);
2052 device_init(eepro100_register_devices
)