[qemu.git] / hw / pckbd.c

/*
 * QEMU PC keyboard emulation
 *
 * Copyright (c) 2003 Fabrice Bellard
 *
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */
#include "hw.h"
#include "isa.h"
#include "pc.h"
#include "ps2.h"
#include "sysemu.h"

/* debug PC keyboard */
//#define DEBUG_KBD
#ifdef DEBUG_KBD
#define DPRINTF(fmt, ...)                                       \
    do { printf("KBD: " fmt , ## __VA_ARGS__); } while (0)
#else
#define DPRINTF(fmt, ...)
#endif

/*	Keyboard Controller Commands */
#define KBD_CCMD_READ_MODE	0x20	/* Read mode bits */
#define KBD_CCMD_WRITE_MODE	0x60	/* Write mode bits */
#define KBD_CCMD_GET_VERSION	0xA1	/* Get controller version */
#define KBD_CCMD_MOUSE_DISABLE	0xA7	/* Disable mouse interface */
#define KBD_CCMD_MOUSE_ENABLE	0xA8	/* Enable mouse interface */
#define KBD_CCMD_TEST_MOUSE	0xA9	/* Mouse interface test */
#define KBD_CCMD_SELF_TEST	0xAA	/* Controller self test */
#define KBD_CCMD_KBD_TEST	0xAB	/* Keyboard interface test */
#define KBD_CCMD_KBD_DISABLE	0xAD	/* Keyboard interface disable */
#define KBD_CCMD_KBD_ENABLE	0xAE	/* Keyboard interface enable */
#define KBD_CCMD_READ_INPORT    0xC0    /* read input port */
#define KBD_CCMD_READ_OUTPORT	0xD0    /* read output port */
#define KBD_CCMD_WRITE_OUTPORT	0xD1    /* write output port */
#define KBD_CCMD_WRITE_OBUF	0xD2
#define KBD_CCMD_WRITE_AUX_OBUF	0xD3    /* Write to output buffer as if
					   initiated by the auxiliary device */
#define KBD_CCMD_WRITE_MOUSE	0xD4	/* Write the following byte to the mouse */
#define KBD_CCMD_DISABLE_A20    0xDD    /* HP vectra only ? */
#define KBD_CCMD_ENABLE_A20     0xDF    /* HP vectra only ? */
#define KBD_CCMD_RESET	        0xFE

/* Keyboard Commands */
#define KBD_CMD_SET_LEDS	0xED	/* Set keyboard leds */
#define KBD_CMD_ECHO     	0xEE
#define KBD_CMD_GET_ID 	        0xF2	/* get keyboard ID */
#define KBD_CMD_SET_RATE	0xF3	/* Set typematic rate */
#define KBD_CMD_ENABLE		0xF4	/* Enable scanning */
#define KBD_CMD_RESET_DISABLE	0xF5	/* reset and disable scanning */
#define KBD_CMD_RESET_ENABLE   	0xF6    /* reset and enable scanning */
#define KBD_CMD_RESET		0xFF	/* Reset */

/* Keyboard Replies */
#define KBD_REPLY_POR		0xAA	/* Power on reset */
#define KBD_REPLY_ACK		0xFA	/* Command ACK */
#define KBD_REPLY_RESEND	0xFE	/* Command NACK, send the cmd again */

/* Status Register Bits */
#define KBD_STAT_OBF 		0x01	/* Keyboard output buffer full */
#define KBD_STAT_IBF 		0x02	/* Keyboard input buffer full */
#define KBD_STAT_SELFTEST	0x04	/* Self test successful */
#define KBD_STAT_CMD		0x08	/* Last write was a command write (0=data) */
#define KBD_STAT_UNLOCKED	0x10	/* Zero if keyboard locked */
#define KBD_STAT_MOUSE_OBF	0x20	/* Mouse output buffer full */
#define KBD_STAT_GTO 		0x40	/* General receive/xmit timeout */
#define KBD_STAT_PERR 		0x80	/* Parity error */

/* Controller Mode Register Bits */
#define KBD_MODE_KBD_INT	0x01	/* Keyboard data generate IRQ1 */
#define KBD_MODE_MOUSE_INT	0x02	/* Mouse data generate IRQ12 */
#define KBD_MODE_SYS 		0x04	/* The system flag (?) */
#define KBD_MODE_NO_KEYLOCK	0x08	/* The keylock doesn't affect the keyboard if set */
#define KBD_MODE_DISABLE_KBD	0x10	/* Disable keyboard interface */
#define KBD_MODE_DISABLE_MOUSE	0x20	/* Disable mouse interface */
#define KBD_MODE_KCC 		0x40	/* Scan code conversion to PC format */
#define KBD_MODE_RFU		0x80

/* Output Port Bits */
#define KBD_OUT_RESET           0x01    /* 1=normal mode, 0=reset */
#define KBD_OUT_A20             0x02    /* x86 only */
#define KBD_OUT_OBF             0x10    /* Keyboard output buffer full */
#define KBD_OUT_MOUSE_OBF       0x20    /* Mouse output buffer full */

/* Mouse Commands */
#define AUX_SET_SCALE11		0xE6	/* Set 1:1 scaling */
#define AUX_SET_SCALE21		0xE7	/* Set 2:1 scaling */
#define AUX_SET_RES		0xE8	/* Set resolution */
#define AUX_GET_SCALE		0xE9	/* Get scaling factor */
#define AUX_SET_STREAM		0xEA	/* Set stream mode */
#define AUX_POLL		0xEB	/* Poll */
#define AUX_RESET_WRAP		0xEC	/* Reset wrap mode */
#define AUX_SET_WRAP		0xEE	/* Set wrap mode */
#define AUX_SET_REMOTE		0xF0	/* Set remote mode */
#define AUX_GET_TYPE		0xF2	/* Get type */
#define AUX_SET_SAMPLE		0xF3	/* Set sample rate */
#define AUX_ENABLE_DEV		0xF4	/* Enable aux device */
#define AUX_DISABLE_DEV		0xF5	/* Disable aux device */
#define AUX_SET_DEFAULT		0xF6
#define AUX_RESET		0xFF	/* Reset aux device */
#define AUX_ACK			0xFA	/* Command byte ACK. */

#define MOUSE_STATUS_REMOTE     0x40
#define MOUSE_STATUS_ENABLED    0x20
#define MOUSE_STATUS_SCALE21    0x10

#define KBD_PENDING_KBD         1
#define KBD_PENDING_AUX         2

typedef struct KBDState {
    uint8_t write_cmd; /* if non zero, write data to port 60 is expected */
    uint8_t status;
    uint8_t mode;
    uint8_t outport;
    /* Bitmask of devices with data available.  */
    uint8_t pending;
    void *kbd;
    void *mouse;

    qemu_irq irq_kbd;
    qemu_irq irq_mouse;
    qemu_irq *a20_out;
    target_phys_addr_t mask;
} KBDState;

/* update irq and KBD_STAT_[MOUSE_]OBF */
/* XXX: not generating the irqs if KBD_MODE_DISABLE_KBD is set may be
   incorrect, but it avoids having to simulate exact delays */
static void kbd_update_irq(KBDState *s)
{
    int irq_kbd_level, irq_mouse_level;

    irq_kbd_level = 0;
    irq_mouse_level = 0;
    s->status &= ~(KBD_STAT_OBF | KBD_STAT_MOUSE_OBF);
    s->outport &= ~(KBD_OUT_OBF | KBD_OUT_MOUSE_OBF);
    if (s->pending) {
        s->status |= KBD_STAT_OBF;
        s->outport |= KBD_OUT_OBF;
        /* kbd data takes priority over aux data.  */
        if (s->pending == KBD_PENDING_AUX) {
            s->status |= KBD_STAT_MOUSE_OBF;
            s->outport |= KBD_OUT_MOUSE_OBF;
            if (s->mode & KBD_MODE_MOUSE_INT)
                irq_mouse_level = 1;
        } else {
            if ((s->mode & KBD_MODE_KBD_INT) &&
                !(s->mode & KBD_MODE_DISABLE_KBD))
                irq_kbd_level = 1;
        }
    }
    qemu_set_irq(s->irq_kbd, irq_kbd_level);
    qemu_set_irq(s->irq_mouse, irq_mouse_level);
}

static void kbd_update_kbd_irq(void *opaque, int level)
{
    KBDState *s = (KBDState *)opaque;

    if (level)
        s->pending |= KBD_PENDING_KBD;
    else
        s->pending &= ~KBD_PENDING_KBD;
    kbd_update_irq(s);
}

static void kbd_update_aux_irq(void *opaque, int level)
{
    KBDState *s = (KBDState *)opaque;

    if (level)
        s->pending |= KBD_PENDING_AUX;
    else
        s->pending &= ~KBD_PENDING_AUX;
    kbd_update_irq(s);
}

static uint32_t kbd_read_status(void *opaque, uint32_t addr)
{
    KBDState *s = opaque;
    int val;
    val = s->status;
    DPRINTF("kbd: read status=0x%02x\n", val);
    return val;
}

static void kbd_queue(KBDState *s, int b, int aux)
{
    if (aux)
        ps2_queue(s->mouse, b);
    else
        ps2_queue(s->kbd, b);
}

static void ioport92_write(void *opaque, uint32_t addr, uint32_t val)
{
    KBDState *s = opaque;

    DPRINTF("kbd: write outport=0x%02x\n", val);
    s->outport = val;
    if (s->a20_out) {
        qemu_set_irq(*s->a20_out, (val >> 1) & 1);
    }
    if (!(val & 1)) {
        qemu_system_reset_request();
    }
}

static uint32_t ioport92_read(void *opaque, uint32_t addr)
{
    KBDState *s = opaque;
    uint32_t ret;

    ret = s->outport;
    DPRINTF("kbd: read outport=0x%02x\n", ret);
    return ret;
}

static void kbd_write_command(void *opaque, uint32_t addr, uint32_t val)
{
    KBDState *s = opaque;

    DPRINTF("kbd: write cmd=0x%02x\n", val);
    switch(val) {
    case KBD_CCMD_READ_MODE:
        kbd_queue(s, s->mode, 0);
        break;
    case KBD_CCMD_WRITE_MODE:
    case KBD_CCMD_WRITE_OBUF:
    case KBD_CCMD_WRITE_AUX_OBUF:
    case KBD_CCMD_WRITE_MOUSE:
    case KBD_CCMD_WRITE_OUTPORT:
        s->write_cmd = val;
        break;
    case KBD_CCMD_MOUSE_DISABLE:
        s->mode |= KBD_MODE_DISABLE_MOUSE;
        break;
    case KBD_CCMD_MOUSE_ENABLE:
        s->mode &= ~KBD_MODE_DISABLE_MOUSE;
        break;
    case KBD_CCMD_TEST_MOUSE:
        kbd_queue(s, 0x00, 0);
        break;
    case KBD_CCMD_SELF_TEST:
        s->status |= KBD_STAT_SELFTEST;
        kbd_queue(s, 0x55, 0);
        break;
    case KBD_CCMD_KBD_TEST:
        kbd_queue(s, 0x00, 0);
        break;
    case KBD_CCMD_KBD_DISABLE:
        s->mode |= KBD_MODE_DISABLE_KBD;
        kbd_update_irq(s);
        break;
    case KBD_CCMD_KBD_ENABLE:
        s->mode &= ~KBD_MODE_DISABLE_KBD;
        kbd_update_irq(s);
        break;
    case KBD_CCMD_READ_INPORT:
        kbd_queue(s, 0x00, 0);
        break;
    case KBD_CCMD_READ_OUTPORT:
        kbd_queue(s, s->outport, 0);
        break;
    case KBD_CCMD_ENABLE_A20:
        if (s->a20_out) {
            qemu_irq_raise(*s->a20_out);
        }
        s->outport |= KBD_OUT_A20;
        break;
    case KBD_CCMD_DISABLE_A20:
        if (s->a20_out) {
            qemu_irq_lower(*s->a20_out);
        }
        s->outport &= ~KBD_OUT_A20;
        break;
    case KBD_CCMD_RESET:
        qemu_system_reset_request();
        break;
    case 0xff:
        /* ignore that - I don't know what is its use */
        break;
    default:
        fprintf(stderr, "qemu: unsupported keyboard cmd=0x%02x\n", val);
        break;
    }
}

static uint32_t kbd_read_data(void *opaque, uint32_t addr)
{
    KBDState *s = opaque;
    uint32_t val;

    if (s->pending == KBD_PENDING_AUX)
        val = ps2_read_data(s->mouse);
    else
        val = ps2_read_data(s->kbd);

    DPRINTF("kbd: read data=0x%02x\n", val);
    return val;
}

static void kbd_write_data(void *opaque, uint32_t addr, uint32_t val)
{
    KBDState *s = opaque;

    DPRINTF("kbd: write data=0x%02x\n", val);

    switch(s->write_cmd) {
    case 0:
        ps2_write_keyboard(s->kbd, val);
        break;
    case KBD_CCMD_WRITE_MODE:
        s->mode = val;
        ps2_keyboard_set_translation(s->kbd, (s->mode & KBD_MODE_KCC) != 0);
        /* ??? */
        kbd_update_irq(s);
        break;
    case KBD_CCMD_WRITE_OBUF:
        kbd_queue(s, val, 0);
        break;
    case KBD_CCMD_WRITE_AUX_OBUF:
        kbd_queue(s, val, 1);
        break;
    case KBD_CCMD_WRITE_OUTPORT:
        ioport92_write(s, 0, val);
        break;
    case KBD_CCMD_WRITE_MOUSE:
        ps2_write_mouse(s->mouse, val);
        break;
    default:
        break;
    }
    s->write_cmd = 0;
}

static void kbd_reset(void *opaque)
{
    KBDState *s = opaque;

    s->mode = KBD_MODE_KBD_INT | KBD_MODE_MOUSE_INT;
    s->status = KBD_STAT_CMD | KBD_STAT_UNLOCKED;
    s->outport = KBD_OUT_RESET | KBD_OUT_A20;
}

static const VMStateDescription vmstate_kbd = {
    .name = "pckbd",
    .version_id = 3,
    .minimum_version_id = 3,
    .minimum_version_id_old = 3,
    .fields      = (VMStateField []) {
        VMSTATE_UINT8(write_cmd, KBDState),
        VMSTATE_UINT8(status, KBDState),
        VMSTATE_UINT8(mode, KBDState),
        VMSTATE_UINT8(pending, KBDState),
        VMSTATE_END_OF_LIST()
    }
};

/* Memory mapped interface */
static uint32_t kbd_mm_readb (void *opaque, target_phys_addr_t addr)
{
    KBDState *s = opaque;

    if (addr & s->mask)
        return kbd_read_status(s, 0) & 0xff;
    else
        return kbd_read_data(s, 0) & 0xff;
}

static void kbd_mm_writeb (void *opaque, target_phys_addr_t addr, uint32_t value)
{
    KBDState *s = opaque;

    if (addr & s->mask)
        kbd_write_command(s, 0, value & 0xff);
    else
        kbd_write_data(s, 0, value & 0xff);
}

static CPUReadMemoryFunc * const kbd_mm_read[] = {
    &kbd_mm_readb,
    &kbd_mm_readb,
    &kbd_mm_readb,
};

static CPUWriteMemoryFunc * const kbd_mm_write[] = {
    &kbd_mm_writeb,
    &kbd_mm_writeb,
    &kbd_mm_writeb,
};

void i8042_mm_init(qemu_irq kbd_irq, qemu_irq mouse_irq,
                   target_phys_addr_t base, ram_addr_t size,
                   target_phys_addr_t mask)
{
    KBDState *s = qemu_mallocz(sizeof(KBDState));
    int s_io_memory;

    s->irq_kbd = kbd_irq;
    s->irq_mouse = mouse_irq;
    s->mask = mask;

    vmstate_register(NULL, 0, &vmstate_kbd, s);
    s_io_memory = cpu_register_io_memory(kbd_mm_read, kbd_mm_write, s);
    cpu_register_physical_memory(base, size, s_io_memory);

    s->kbd = ps2_kbd_init(kbd_update_kbd_irq, s);
    s->mouse = ps2_mouse_init(kbd_update_aux_irq, s);
    qemu_register_reset(kbd_reset, s);
}

typedef struct ISAKBDState {
    ISADevice dev;
    KBDState  kbd;
} ISAKBDState;

void i8042_isa_mouse_fake_event(void *opaque)
{
    ISADevice *dev = opaque;
    KBDState *s = &(DO_UPCAST(ISAKBDState, dev, dev)->kbd);

    ps2_mouse_fake_event(s->mouse);
}

void i8042_setup_a20_line(ISADevice *dev, qemu_irq *a20_out)
{
    KBDState *s = &(DO_UPCAST(ISAKBDState, dev, dev)->kbd);

    s->a20_out = a20_out;
}

static const VMStateDescription vmstate_kbd_isa = {
    .name = "pckbd",
    .version_id = 3,
    .minimum_version_id = 3,
    .minimum_version_id_old = 3,
    .fields      = (VMStateField []) {
        VMSTATE_STRUCT(kbd, ISAKBDState, 0, vmstate_kbd, KBDState),
        VMSTATE_END_OF_LIST()
    }
};

static int i8042_initfn(ISADevice *dev)
{
    KBDState *s = &(DO_UPCAST(ISAKBDState, dev, dev)->kbd);

    isa_init_irq(dev, &s->irq_kbd, 1);
    isa_init_irq(dev, &s->irq_mouse, 12);

    register_ioport_read(0x60, 1, 1, kbd_read_data, s);
    register_ioport_write(0x60, 1, 1, kbd_write_data, s);
    register_ioport_read(0x64, 1, 1, kbd_read_status, s);
    register_ioport_write(0x64, 1, 1, kbd_write_command, s);
    register_ioport_read(0x92, 1, 1, ioport92_read, s);
    register_ioport_write(0x92, 1, 1, ioport92_write, s);

    s->kbd = ps2_kbd_init(kbd_update_kbd_irq, s);
    s->mouse = ps2_mouse_init(kbd_update_aux_irq, s);
    qemu_register_reset(kbd_reset, s);
    return 0;
}

static ISADeviceInfo i8042_info = {
    .qdev.name     = "i8042",
    .qdev.size     = sizeof(ISAKBDState),
    .qdev.vmsd     = &vmstate_kbd_isa,
    .qdev.no_user  = 1,
    .init          = i8042_initfn,
};

static void i8042_register(void)
{
    isa_qdev_register(&i8042_info);
}
device_init(i8042_register)
Commit	Line	Data
80cabfad FB	1	/*
80cabfad FB	2	* QEMU PC keyboard emulation
5fafdf24	3	*
80cabfad	4	* Copyright (c) 2003 Fabrice Bellard
5fafdf24	5	*
80cabfad FB	6	* Permission is hereby granted, free of charge, to any person obtaining a copy
	7	* of this software and associated documentation files (the "Software"), to deal
	8	* in the Software without restriction, including without limitation the rights
	9	* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
	10	* copies of the Software, and to permit persons to whom the Software is
	11	* furnished to do so, subject to the following conditions:
	12	*
	13	* The above copyright notice and this permission notice shall be included in
	14	* all copies or substantial portions of the Software.
	15	*
	16	* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
	17	* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
	18	* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
	19	* THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
	20	* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
	21	* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
	22	* THE SOFTWARE.
	23	*/
87ecb68b PB	24	#include "hw.h"
	25	#include "isa.h"
	26	#include "pc.h"
	27	#include "ps2.h"
	28	#include "sysemu.h"
80cabfad FB	29
	30	/* debug PC keyboard */
	31	//#define DEBUG_KBD
c86d2c23 BS	32	#ifdef DEBUG_KBD
	33	#define DPRINTF(fmt, ...) \
	34	do { printf("KBD: " fmt , ## __VA_ARGS__); } while (0)
	35	#else
	36	#define DPRINTF(fmt, ...)
	37	#endif
80cabfad	38
80cabfad FB	39	/* Keyboard Controller Commands */
	40	#define KBD_CCMD_READ_MODE 0x20 /* Read mode bits */
	41	#define KBD_CCMD_WRITE_MODE 0x60 /* Write mode bits */
	42	#define KBD_CCMD_GET_VERSION 0xA1 /* Get controller version */
	43	#define KBD_CCMD_MOUSE_DISABLE 0xA7 /* Disable mouse interface */
	44	#define KBD_CCMD_MOUSE_ENABLE 0xA8 /* Enable mouse interface */
	45	#define KBD_CCMD_TEST_MOUSE 0xA9 /* Mouse interface test */
	46	#define KBD_CCMD_SELF_TEST 0xAA /* Controller self test */
	47	#define KBD_CCMD_KBD_TEST 0xAB /* Keyboard interface test */
	48	#define KBD_CCMD_KBD_DISABLE 0xAD /* Keyboard interface disable */
	49	#define KBD_CCMD_KBD_ENABLE 0xAE /* Keyboard interface enable */
	50	#define KBD_CCMD_READ_INPORT 0xC0 /* read input port */
	51	#define KBD_CCMD_READ_OUTPORT 0xD0 /* read output port */
	52	#define KBD_CCMD_WRITE_OUTPORT 0xD1 /* write output port */
	53	#define KBD_CCMD_WRITE_OBUF 0xD2
	54	#define KBD_CCMD_WRITE_AUX_OBUF 0xD3 /* Write to output buffer as if
	55	initiated by the auxiliary device */
	56	#define KBD_CCMD_WRITE_MOUSE 0xD4 /* Write the following byte to the mouse */
	57	#define KBD_CCMD_DISABLE_A20 0xDD /* HP vectra only ? */
	58	#define KBD_CCMD_ENABLE_A20 0xDF /* HP vectra only ? */
	59	#define KBD_CCMD_RESET 0xFE
	60
	61	/* Keyboard Commands */
	62	#define KBD_CMD_SET_LEDS 0xED /* Set keyboard leds */
	63	#define KBD_CMD_ECHO 0xEE
	64	#define KBD_CMD_GET_ID 0xF2 /* get keyboard ID */
	65	#define KBD_CMD_SET_RATE 0xF3 /* Set typematic rate */
	66	#define KBD_CMD_ENABLE 0xF4 /* Enable scanning */
	67	#define KBD_CMD_RESET_DISABLE 0xF5 /* reset and disable scanning */
	68	#define KBD_CMD_RESET_ENABLE 0xF6 /* reset and enable scanning */
	69	#define KBD_CMD_RESET 0xFF /* Reset */
	70
	71	/* Keyboard Replies */
	72	#define KBD_REPLY_POR 0xAA /* Power on reset */
	73	#define KBD_REPLY_ACK 0xFA /* Command ACK */
	74	#define KBD_REPLY_RESEND 0xFE /* Command NACK, send the cmd again */
	75
	76	/* Status Register Bits */
	77	#define KBD_STAT_OBF 0x01 /* Keyboard output buffer full */
	78	#define KBD_STAT_IBF 0x02 /* Keyboard input buffer full */
	79	#define KBD_STAT_SELFTEST 0x04 /* Self test successful */
	80	#define KBD_STAT_CMD 0x08 /* Last write was a command write (0=data) */
	81	#define KBD_STAT_UNLOCKED 0x10 /* Zero if keyboard locked */
	82	#define KBD_STAT_MOUSE_OBF 0x20 /* Mouse output buffer full */
	83	#define KBD_STAT_GTO 0x40 /* General receive/xmit timeout */
	84	#define KBD_STAT_PERR 0x80 /* Parity error */
	85
	86	/* Controller Mode Register Bits */
	87	#define KBD_MODE_KBD_INT 0x01 /* Keyboard data generate IRQ1 */
	88	#define KBD_MODE_MOUSE_INT 0x02 /* Mouse data generate IRQ12 */
	89	#define KBD_MODE_SYS 0x04 /* The system flag (?) */
	90	#define KBD_MODE_NO_KEYLOCK 0x08 /* The keylock doesn't affect the keyboard if set */
	91	#define KBD_MODE_DISABLE_KBD 0x10 /* Disable keyboard interface */
	92	#define KBD_MODE_DISABLE_MOUSE 0x20 /* Disable mouse interface */
	93	#define KBD_MODE_KCC 0x40 /* Scan code conversion to PC format */
	94	#define KBD_MODE_RFU 0x80
	95
956a3e6b BS	96	/* Output Port Bits */
	97	#define KBD_OUT_RESET 0x01 /* 1=normal mode, 0=reset */
	98	#define KBD_OUT_A20 0x02 /* x86 only */
	99	#define KBD_OUT_OBF 0x10 /* Keyboard output buffer full */
	100	#define KBD_OUT_MOUSE_OBF 0x20 /* Mouse output buffer full */
	101
80cabfad FB	102	/* Mouse Commands */
	103	#define AUX_SET_SCALE11 0xE6 /* Set 1:1 scaling */
	104	#define AUX_SET_SCALE21 0xE7 /* Set 2:1 scaling */
	105	#define AUX_SET_RES 0xE8 /* Set resolution */
	106	#define AUX_GET_SCALE 0xE9 /* Get scaling factor */
	107	#define AUX_SET_STREAM 0xEA /* Set stream mode */
	108	#define AUX_POLL 0xEB /* Poll */
	109	#define AUX_RESET_WRAP 0xEC /* Reset wrap mode */
	110	#define AUX_SET_WRAP 0xEE /* Set wrap mode */
	111	#define AUX_SET_REMOTE 0xF0 /* Set remote mode */
	112	#define AUX_GET_TYPE 0xF2 /* Get type */
	113	#define AUX_SET_SAMPLE 0xF3 /* Set sample rate */
	114	#define AUX_ENABLE_DEV 0xF4 /* Enable aux device */
	115	#define AUX_DISABLE_DEV 0xF5 /* Disable aux device */
	116	#define AUX_SET_DEFAULT 0xF6
	117	#define AUX_RESET 0xFF /* Reset aux device */
	118	#define AUX_ACK 0xFA /* Command byte ACK. */
	119
	120	#define MOUSE_STATUS_REMOTE 0x40
	121	#define MOUSE_STATUS_ENABLED 0x20
	122	#define MOUSE_STATUS_SCALE21 0x10
	123
daa57963 FB	124	#define KBD_PENDING_KBD 1
daa57963 FB	125	#define KBD_PENDING_AUX 2
80cabfad FB	126
80cabfad FB	127	typedef struct KBDState {
80cabfad FB	128	uint8_t write_cmd; /* if non zero, write data to port 60 is expected */
	129	uint8_t status;
	130	uint8_t mode;
956a3e6b	131	uint8_t outport;
daa57963	132	/* Bitmask of devices with data available. */
7783e9f0	133	uint8_t pending;
daa57963 FB	134	void *kbd;
daa57963 FB	135	void *mouse;
b7678d96	136
d537cf6c PB	137	qemu_irq irq_kbd;
d537cf6c PB	138	qemu_irq irq_mouse;
956a3e6b	139	qemu_irq *a20_out;
c227f099	140	target_phys_addr_t mask;
80cabfad FB	141	} KBDState;
80cabfad FB	142
80cabfad FB	143	/* update irq and KBD_STAT_[MOUSE_]OBF */
	144	/* XXX: not generating the irqs if KBD_MODE_DISABLE_KBD is set may be
	145	incorrect, but it avoids having to simulate exact delays */
	146	static void kbd_update_irq(KBDState *s)
	147	{
b7678d96	148	int irq_kbd_level, irq_mouse_level;
80cabfad	149
b7678d96 TS	150	irq_kbd_level = 0;
b7678d96 TS	151	irq_mouse_level = 0;
80cabfad	152	s->status &= ~(KBD_STAT_OBF \| KBD_STAT_MOUSE_OBF);
956a3e6b	153	s->outport &= ~(KBD_OUT_OBF \| KBD_OUT_MOUSE_OBF);
daa57963	154	if (s->pending) {
80cabfad	155	s->status \|= KBD_STAT_OBF;
956a3e6b	156	s->outport \|= KBD_OUT_OBF;
b92bb99b	157	/* kbd data takes priority over aux data. */
daa57963	158	if (s->pending == KBD_PENDING_AUX) {
80cabfad	159	s->status \|= KBD_STAT_MOUSE_OBF;
956a3e6b	160	s->outport \|= KBD_OUT_MOUSE_OBF;
80cabfad	161	if (s->mode & KBD_MODE_MOUSE_INT)
b7678d96	162	irq_mouse_level = 1;
80cabfad	163	} else {
5fafdf24	164	if ((s->mode & KBD_MODE_KBD_INT) &&
80cabfad	165	!(s->mode & KBD_MODE_DISABLE_KBD))
b7678d96	166	irq_kbd_level = 1;
80cabfad FB	167	}
80cabfad FB	168	}
d537cf6c PB	169	qemu_set_irq(s->irq_kbd, irq_kbd_level);
d537cf6c PB	170	qemu_set_irq(s->irq_mouse, irq_mouse_level);
80cabfad FB	171	}
80cabfad FB	172
daa57963	173	static void kbd_update_kbd_irq(void *opaque, int level)
80cabfad	174	{
daa57963	175	KBDState s = (KBDState )opaque;
80cabfad	176
daa57963 FB	177	if (level)
daa57963 FB	178	s->pending \|= KBD_PENDING_KBD;
80cabfad	179	else
daa57963	180	s->pending &= ~KBD_PENDING_KBD;
80cabfad FB	181	kbd_update_irq(s);
	182	}
	183
daa57963	184	static void kbd_update_aux_irq(void *opaque, int level)
80cabfad	185	{
daa57963 FB	186	KBDState s = (KBDState )opaque;
	187
	188	if (level)
	189	s->pending \|= KBD_PENDING_AUX;
	190	else
	191	s->pending &= ~KBD_PENDING_AUX;
	192	kbd_update_irq(s);
80cabfad FB	193	}
80cabfad FB	194
b41a2cd1	195	static uint32_t kbd_read_status(void *opaque, uint32_t addr)
80cabfad	196	{
b41a2cd1	197	KBDState *s = opaque;
80cabfad FB	198	int val;
80cabfad FB	199	val = s->status;
c86d2c23	200	DPRINTF("kbd: read status=0x%02x\n", val);
80cabfad FB	201	return val;
	202	}
	203
daa57963 FB	204	static void kbd_queue(KBDState *s, int b, int aux)
	205	{
	206	if (aux)
	207	ps2_queue(s->mouse, b);
	208	else
	209	ps2_queue(s->kbd, b);
	210	}
	211
956a3e6b BS	212	static void ioport92_write(void *opaque, uint32_t addr, uint32_t val)
	213	{
	214	KBDState *s = opaque;
	215
c86d2c23	216	DPRINTF("kbd: write outport=0x%02x\n", val);
956a3e6b BS	217	s->outport = val;
	218	if (s->a20_out) {
	219	qemu_set_irq(*s->a20_out, (val >> 1) & 1);
	220	}
	221	if (!(val & 1)) {
	222	qemu_system_reset_request();
	223	}
	224	}
	225
	226	static uint32_t ioport92_read(void *opaque, uint32_t addr)
	227	{
	228	KBDState *s = opaque;
c86d2c23	229	uint32_t ret;
956a3e6b	230
c86d2c23 BS	231	ret = s->outport;
	232	DPRINTF("kbd: read outport=0x%02x\n", ret);
	233	return ret;
956a3e6b BS	234	}
956a3e6b BS	235
b41a2cd1	236	static void kbd_write_command(void *opaque, uint32_t addr, uint32_t val)
80cabfad	237	{
b41a2cd1	238	KBDState *s = opaque;
80cabfad	239
c86d2c23	240	DPRINTF("kbd: write cmd=0x%02x\n", val);
80cabfad FB	241	switch(val) {
80cabfad FB	242	case KBD_CCMD_READ_MODE:
889bec69	243	kbd_queue(s, s->mode, 0);
80cabfad FB	244	break;
	245	case KBD_CCMD_WRITE_MODE:
	246	case KBD_CCMD_WRITE_OBUF:
	247	case KBD_CCMD_WRITE_AUX_OBUF:
	248	case KBD_CCMD_WRITE_MOUSE:
	249	case KBD_CCMD_WRITE_OUTPORT:
	250	s->write_cmd = val;
	251	break;
	252	case KBD_CCMD_MOUSE_DISABLE:
	253	s->mode \|= KBD_MODE_DISABLE_MOUSE;
	254	break;
	255	case KBD_CCMD_MOUSE_ENABLE:
	256	s->mode &= ~KBD_MODE_DISABLE_MOUSE;
	257	break;
	258	case KBD_CCMD_TEST_MOUSE:
	259	kbd_queue(s, 0x00, 0);
	260	break;
	261	case KBD_CCMD_SELF_TEST:
	262	s->status \|= KBD_STAT_SELFTEST;
	263	kbd_queue(s, 0x55, 0);
	264	break;
	265	case KBD_CCMD_KBD_TEST:
	266	kbd_queue(s, 0x00, 0);
	267	break;
	268	case KBD_CCMD_KBD_DISABLE:
	269	s->mode \|= KBD_MODE_DISABLE_KBD;
	270	kbd_update_irq(s);
	271	break;
	272	case KBD_CCMD_KBD_ENABLE:
	273	s->mode &= ~KBD_MODE_DISABLE_KBD;
	274	kbd_update_irq(s);
	275	break;
	276	case KBD_CCMD_READ_INPORT:
	277	kbd_queue(s, 0x00, 0);
	278	break;
	279	case KBD_CCMD_READ_OUTPORT:
956a3e6b	280	kbd_queue(s, s->outport, 0);
80cabfad	281	break;
80cabfad	282	case KBD_CCMD_ENABLE_A20:
956a3e6b BS	283	if (s->a20_out) {
	284	qemu_irq_raise(*s->a20_out);
	285	}
	286	s->outport \|= KBD_OUT_A20;
80cabfad FB	287	break;
80cabfad FB	288	case KBD_CCMD_DISABLE_A20:
956a3e6b BS	289	if (s->a20_out) {
	290	qemu_irq_lower(*s->a20_out);
	291	}
	292	s->outport &= ~KBD_OUT_A20;
80cabfad	293	break;
80cabfad	294	case KBD_CCMD_RESET:
d7d02e3c	295	qemu_system_reset_request();
80cabfad FB	296	break;
	297	case 0xff:
	298	/* ignore that - I don't know what is its use */
	299	break;
	300	default:
	301	fprintf(stderr, "qemu: unsupported keyboard cmd=0x%02x\n", val);
	302	break;
	303	}
	304	}
	305
b41a2cd1	306	static uint32_t kbd_read_data(void *opaque, uint32_t addr)
80cabfad	307	{
63066f4f	308	KBDState *s = opaque;
e41c0f26	309	uint32_t val;
80cabfad	310
daa57963	311	if (s->pending == KBD_PENDING_AUX)
e41c0f26 AZ	312	val = ps2_read_data(s->mouse);
	313	else
	314	val = ps2_read_data(s->kbd);
80cabfad	315
c86d2c23	316	DPRINTF("kbd: read data=0x%02x\n", val);
e41c0f26	317	return val;
80cabfad FB	318	}
80cabfad FB	319
9596ebb7	320	static void kbd_write_data(void *opaque, uint32_t addr, uint32_t val)
80cabfad	321	{
b41a2cd1	322	KBDState *s = opaque;
80cabfad	323
c86d2c23	324	DPRINTF("kbd: write data=0x%02x\n", val);
80cabfad FB	325
	326	switch(s->write_cmd) {
	327	case 0:
daa57963	328	ps2_write_keyboard(s->kbd, val);
80cabfad FB	329	break;
	330	case KBD_CCMD_WRITE_MODE:
	331	s->mode = val;
f94f5d71	332	ps2_keyboard_set_translation(s->kbd, (s->mode & KBD_MODE_KCC) != 0);
daa57963	333	/* ??? */
80cabfad FB	334	kbd_update_irq(s);
	335	break;
	336	case KBD_CCMD_WRITE_OBUF:
	337	kbd_queue(s, val, 0);
	338	break;
	339	case KBD_CCMD_WRITE_AUX_OBUF:
	340	kbd_queue(s, val, 1);
	341	break;
	342	case KBD_CCMD_WRITE_OUTPORT:
956a3e6b	343	ioport92_write(s, 0, val);
80cabfad FB	344	break;
80cabfad FB	345	case KBD_CCMD_WRITE_MOUSE:
daa57963	346	ps2_write_mouse(s->mouse, val);
80cabfad FB	347	break;
	348	default:
	349	break;
	350	}
	351	s->write_cmd = 0;
	352	}
	353
d7d02e3c	354	static void kbd_reset(void *opaque)
80cabfad	355	{
d7d02e3c	356	KBDState *s = opaque;
80cabfad	357
80cabfad FB	358	s->mode = KBD_MODE_KBD_INT \| KBD_MODE_MOUSE_INT;
80cabfad FB	359	s->status = KBD_STAT_CMD \| KBD_STAT_UNLOCKED;
956a3e6b	360	s->outport = KBD_OUT_RESET \| KBD_OUT_A20;
80cabfad FB	361	}
80cabfad FB	362
3c619b59 JQ	363	static const VMStateDescription vmstate_kbd = {
	364	.name = "pckbd",
	365	.version_id = 3,
	366	.minimum_version_id = 3,
	367	.minimum_version_id_old = 3,
	368	.fields = (VMStateField []) {
	369	VMSTATE_UINT8(write_cmd, KBDState),
	370	VMSTATE_UINT8(status, KBDState),
	371	VMSTATE_UINT8(mode, KBDState),
	372	VMSTATE_UINT8(pending, KBDState),
	373	VMSTATE_END_OF_LIST()
	374	}
	375	};
675376f2	376
b92bb99b	377	/* Memory mapped interface */
c227f099	378	static uint32_t kbd_mm_readb (void *opaque, target_phys_addr_t addr)
b92bb99b TS	379	{
	380	KBDState *s = opaque;
	381
4efbe58f	382	if (addr & s->mask)
80355292	383	return kbd_read_status(s, 0) & 0xff;
4efbe58f AJ	384	else
4efbe58f AJ	385	return kbd_read_data(s, 0) & 0xff;
b92bb99b TS	386	}
b92bb99b TS	387
c227f099	388	static void kbd_mm_writeb (void *opaque, target_phys_addr_t addr, uint32_t value)
b92bb99b TS	389	{
	390	KBDState *s = opaque;
	391
4efbe58f	392	if (addr & s->mask)
80355292	393	kbd_write_command(s, 0, value & 0xff);
4efbe58f AJ	394	else
4efbe58f AJ	395	kbd_write_data(s, 0, value & 0xff);
b92bb99b TS	396	}
b92bb99b TS	397
d60efc6b	398	static CPUReadMemoryFunc * const kbd_mm_read[] = {
b92bb99b TS	399	&kbd_mm_readb,
	400	&kbd_mm_readb,
	401	&kbd_mm_readb,
	402	};
	403
d60efc6b	404	static CPUWriteMemoryFunc * const kbd_mm_write[] = {
b92bb99b TS	405	&kbd_mm_writeb,
	406	&kbd_mm_writeb,
	407	&kbd_mm_writeb,
	408	};
	409
71db710f	410	void i8042_mm_init(qemu_irq kbd_irq, qemu_irq mouse_irq,
c227f099 AL	411	target_phys_addr_t base, ram_addr_t size,
c227f099 AL	412	target_phys_addr_t mask)
b92bb99b	413	{
5acd0646	414	KBDState *s = qemu_mallocz(sizeof(KBDState));
b92bb99b TS	415	int s_io_memory;
	416
	417	s->irq_kbd = kbd_irq;
	418	s->irq_mouse = mouse_irq;
4efbe58f	419	s->mask = mask;
b92bb99b	420
0be71e32	421	vmstate_register(NULL, 0, &vmstate_kbd, s);
1eed09cb	422	s_io_memory = cpu_register_io_memory(kbd_mm_read, kbd_mm_write, s);
4efbe58f	423	cpu_register_physical_memory(base, size, s_io_memory);
b92bb99b TS	424
	425	s->kbd = ps2_kbd_init(kbd_update_kbd_irq, s);
	426	s->mouse = ps2_mouse_init(kbd_update_aux_irq, s);
a08d4367	427	qemu_register_reset(kbd_reset, s);
b92bb99b	428	}
da85ccfb GH	429
	430	typedef struct ISAKBDState {
	431	ISADevice dev;
	432	KBDState kbd;
	433	} ISAKBDState;
	434
956a3e6b BS	435	void i8042_isa_mouse_fake_event(void *opaque)
	436	{
	437	ISADevice *dev = opaque;
	438	KBDState *s = &(DO_UPCAST(ISAKBDState, dev, dev)->kbd);
	439
	440	ps2_mouse_fake_event(s->mouse);
	441	}
	442
	443	void i8042_setup_a20_line(ISADevice dev, qemu_irq a20_out)
	444	{
	445	KBDState *s = &(DO_UPCAST(ISAKBDState, dev, dev)->kbd);
	446
	447	s->a20_out = a20_out;
	448	}
	449
d05ac8fa	450	static const VMStateDescription vmstate_kbd_isa = {
be73cfe2 JQ	451	.name = "pckbd",
	452	.version_id = 3,
	453	.minimum_version_id = 3,
	454	.minimum_version_id_old = 3,
	455	.fields = (VMStateField []) {
	456	VMSTATE_STRUCT(kbd, ISAKBDState, 0, vmstate_kbd, KBDState),
	457	VMSTATE_END_OF_LIST()
	458	}
	459	};
	460
81a322d4	461	static int i8042_initfn(ISADevice *dev)
da85ccfb GH	462	{
	463	KBDState *s = &(DO_UPCAST(ISAKBDState, dev, dev)->kbd);
	464
2e15e23b GH	465	isa_init_irq(dev, &s->irq_kbd, 1);
2e15e23b GH	466	isa_init_irq(dev, &s->irq_mouse, 12);
da85ccfb	467
86c86157 GH	468	register_ioport_read(0x60, 1, 1, kbd_read_data, s);
	469	register_ioport_write(0x60, 1, 1, kbd_write_data, s);
	470	register_ioport_read(0x64, 1, 1, kbd_read_status, s);
	471	register_ioport_write(0x64, 1, 1, kbd_write_command, s);
956a3e6b BS	472	register_ioport_read(0x92, 1, 1, ioport92_read, s);
956a3e6b BS	473	register_ioport_write(0x92, 1, 1, ioport92_write, s);
da85ccfb GH	474
	475	s->kbd = ps2_kbd_init(kbd_update_kbd_irq, s);
	476	s->mouse = ps2_mouse_init(kbd_update_aux_irq, s);
da85ccfb	477	qemu_register_reset(kbd_reset, s);
81a322d4	478	return 0;
da85ccfb GH	479	}
	480
	481	static ISADeviceInfo i8042_info = {
	482	.qdev.name = "i8042",
	483	.qdev.size = sizeof(ISAKBDState),
be73cfe2	484	.qdev.vmsd = &vmstate_kbd_isa,
da85ccfb GH	485	.qdev.no_user = 1,
	486	.init = i8042_initfn,
	487	};
	488
	489	static void i8042_register(void)
	490	{
	491	isa_qdev_register(&i8042_info);
	492	}
	493	device_init(i8042_register)