[qemu.git] / hw / etraxfs_eth.c

/*
 * QEMU ETRAX Ethernet Controller.
 *
 * Copyright (c) 2008 Edgar E. Iglesias, Axis Communications AB.
 *
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */

#include <stdio.h>
#include "hw.h"
#include "net.h"

#include "etraxfs_dma.h"

#define D(x)

/* 
 * The MDIO extensions in the TDK PHY model were reversed engineered from the 
 * linux driver (PHYID and Diagnostics reg).
 * TODO: Add friendly names for the register nums.
 */
struct qemu_phy
{
	uint32_t regs[32];

	unsigned int (*read)(struct qemu_phy *phy, unsigned int req);
	void (*write)(struct qemu_phy *phy, unsigned int req, 
		      unsigned int data);
};

static unsigned int tdk_read(struct qemu_phy *phy, unsigned int req)
{
	int regnum;
	unsigned r = 0;

	regnum = req & 0x1f;

	switch (regnum) {
		case 1:
			/* MR1.	 */
			/* Speeds and modes.  */
			r |= (1 << 13) | (1 << 14);
			r |= (1 << 11) | (1 << 12);
			r |= (1 << 5); /* Autoneg complete.  */
			r |= (1 << 3); /* Autoneg able.	 */
			r |= (1 << 2); /* Link.	 */
			break;
		case 5:
			/* Link partner ability.
			   We are kind; always agree with whatever best mode
			   the guest advertises.  */
			r = 1 << 14; /* Success.  */
			/* Copy advertised modes.  */
			r |= phy->regs[4] & (15 << 5);
			/* Autoneg support.  */
			r |= 1;
			break;
		case 18:
		{
			/* Diagnostics reg.  */
			int duplex = 0;
			int speed_100 = 0;

			/* Are we advertising 100 half or 100 duplex ? */
			speed_100 = !!(phy->regs[4] & 0x180);
			/* Are we advertising 10 duplex or 100 duplex ? */
			duplex = !!(phy->regs[4] & 0x180);
			r = (speed_100 << 10) | (duplex << 11);
		}
		break;

		default:
			r = phy->regs[regnum];
			break;
	}
	D(printf("\n%s %x = reg[%d]\n", __func__, r, regnum));
	return r;
}

static void 
tdk_write(struct qemu_phy *phy, unsigned int req, unsigned int data)
{
	int regnum;

	regnum = req & 0x1f;
	D(printf("%s reg[%d] = %x\n", __func__, regnum, data));
	switch (regnum) {
		default:
			phy->regs[regnum] = data;
			break;
	}
}

static void 
tdk_init(struct qemu_phy *phy)
{
	phy->regs[0] = 0x3100;
	/* PHY Id.  */
	phy->regs[2] = 0x0300;
	phy->regs[3] = 0xe400;
	/* Autonegotiation advertisement reg.  */
	phy->regs[4] = 0x01E1;

	phy->read = tdk_read;
	phy->write = tdk_write;
}

struct qemu_mdio
{
	/* bus.	 */
	int mdc;
	int mdio;

	/* decoder.  */
	enum {
		PREAMBLE,
		SOF,
		OPC,
		ADDR,
		REQ,
		TURNAROUND,
		DATA
	} state;
	unsigned int drive;

	unsigned int cnt;
	unsigned int addr;
	unsigned int opc;
	unsigned int req;
	unsigned int data;

	struct qemu_phy *devs[32];
};

static void 
mdio_attach(struct qemu_mdio *bus, struct qemu_phy *phy, unsigned int addr)
{
	bus->devs[addr & 0x1f] = phy;
}

#ifdef USE_THIS_DEAD_CODE
static void 
mdio_detach(struct qemu_mdio *bus, struct qemu_phy *phy, unsigned int addr)
{
	bus->devs[addr & 0x1f] = NULL;	
}
#endif

static void mdio_read_req(struct qemu_mdio *bus)
{
	struct qemu_phy *phy;

	phy = bus->devs[bus->addr];
	if (phy && phy->read)
		bus->data = phy->read(phy, bus->req);
	else 
		bus->data = 0xffff;
}

static void mdio_write_req(struct qemu_mdio *bus)
{
	struct qemu_phy *phy;

	phy = bus->devs[bus->addr];
	if (phy && phy->write)
		phy->write(phy, bus->req, bus->data);
}

static void mdio_cycle(struct qemu_mdio *bus)
{
	bus->cnt++;

	D(printf("mdc=%d mdio=%d state=%d cnt=%d drv=%d\n",
		bus->mdc, bus->mdio, bus->state, bus->cnt, bus->drive));
#if 0
	if (bus->mdc)
		printf("%d", bus->mdio);
#endif
	switch (bus->state)
	{
		case PREAMBLE:
			if (bus->mdc) {
				if (bus->cnt >= (32 * 2) && !bus->mdio) {
					bus->cnt = 0;
					bus->state = SOF;
					bus->data = 0;
				}
			}
			break;
		case SOF:
			if (bus->mdc) {
				if (bus->mdio != 1)
					printf("WARNING: no SOF\n");
				if (bus->cnt == 1*2) {
					bus->cnt = 0;
					bus->opc = 0;
					bus->state = OPC;
				}
			}
			break;
		case OPC:
			if (bus->mdc) {
				bus->opc <<= 1;
				bus->opc |= bus->mdio & 1;
				if (bus->cnt == 2*2) {
					bus->cnt = 0;
					bus->addr = 0;
					bus->state = ADDR;
				}
			}
			break;
		case ADDR:
			if (bus->mdc) {
				bus->addr <<= 1;
				bus->addr |= bus->mdio & 1;

				if (bus->cnt == 5*2) {
					bus->cnt = 0;
					bus->req = 0;
					bus->state = REQ;
				}
			}
			break;
		case REQ:
			if (bus->mdc) {
				bus->req <<= 1;
				bus->req |= bus->mdio & 1;
				if (bus->cnt == 5*2) {
					bus->cnt = 0;
					bus->state = TURNAROUND;
				}
			}
			break;
		case TURNAROUND:
			if (bus->mdc && bus->cnt == 2*2) {
				bus->mdio = 0;
				bus->cnt = 0;

				if (bus->opc == 2) {
					bus->drive = 1;
					mdio_read_req(bus);
					bus->mdio = bus->data & 1;
				}
				bus->state = DATA;
			}
			break;
		case DATA:			
			if (!bus->mdc) {
				if (bus->drive) {
					bus->mdio = !!(bus->data & (1 << 15));
					bus->data <<= 1;
				}
			} else {
				if (!bus->drive) {
					bus->data <<= 1;
					bus->data |= bus->mdio;
				}
				if (bus->cnt == 16 * 2) {
					bus->cnt = 0;
					bus->state = PREAMBLE;
					if (!bus->drive)
						mdio_write_req(bus);
					bus->drive = 0;
				}
			}
			break;
		default:
			break;
	}
}

/* ETRAX-FS Ethernet MAC block starts here.  */

#define RW_MA0_LO	  0x00
#define RW_MA0_HI	  0x04
#define RW_MA1_LO	  0x08
#define RW_MA1_HI	  0x0c
#define RW_GA_LO	  0x10
#define RW_GA_HI	  0x14
#define RW_GEN_CTRL	  0x18
#define RW_REC_CTRL	  0x1c
#define RW_TR_CTRL	  0x20
#define RW_CLR_ERR	  0x24
#define RW_MGM_CTRL	  0x28
#define R_STAT		  0x2c
#define FS_ETH_MAX_REGS	  0x5c

struct fs_eth
{
	CPUState *env;
	qemu_irq *irq;
	target_phys_addr_t base;
	VLANClientState *vc;
	int ethregs;

	/* Two addrs in the filter.  */
	uint8_t macaddr[2][6];
	uint32_t regs[FS_ETH_MAX_REGS];

	unsigned char rx_fifo[1536];
	int rx_fifo_len;
	int rx_fifo_pos;

	struct etraxfs_dma_client *dma_out;
	struct etraxfs_dma_client *dma_in;

	/* MDIO bus.  */
	struct qemu_mdio mdio_bus;
	/* PHY.	 */
	struct qemu_phy phy;
};

static uint32_t eth_rinvalid (void *opaque, target_phys_addr_t addr)
{
	struct fs_eth *eth = opaque;
	CPUState *env = eth->env;
	cpu_abort(env, "Unsupported short access. reg=" TARGET_FMT_plx "\n",
		  addr);
	return 0;
}

static uint32_t eth_readl (void *opaque, target_phys_addr_t addr)
{
	struct fs_eth *eth = opaque;
	uint32_t r = 0;

	/* Make addr relative to this instances base.  */
	addr -= eth->base;
	switch (addr) {
		case R_STAT:
			/* Attach an MDIO/PHY abstraction.  */
			r = eth->mdio_bus.mdio & 1;
			break;
	default:
		r = eth->regs[addr];
		D(printf ("%s %x\n", __func__, addr));
		break;
	}
	return r;
}

static void
eth_winvalid (void *opaque, target_phys_addr_t addr, uint32_t value)
{
	struct fs_eth *eth = opaque;
	CPUState *env = eth->env;
	cpu_abort(env, "Unsupported short access. reg=" TARGET_FMT_plx "\n",
		  addr);
}

static void eth_update_ma(struct fs_eth *eth, int ma)
{
	int reg;
	int i = 0;

	ma &= 1;

	reg = RW_MA0_LO;
	if (ma)
		reg = RW_MA1_LO;

	eth->macaddr[ma][i++] = eth->regs[reg];
	eth->macaddr[ma][i++] = eth->regs[reg] >> 8;
	eth->macaddr[ma][i++] = eth->regs[reg] >> 16;
	eth->macaddr[ma][i++] = eth->regs[reg] >> 24;
	eth->macaddr[ma][i++] = eth->regs[reg + 4];
	eth->macaddr[ma][i++] = eth->regs[reg + 4] >> 8;

	D(printf("set mac%d=%x.%x.%x.%x.%x.%x\n", ma,
		 eth->macaddr[ma][0], eth->macaddr[ma][1],
		 eth->macaddr[ma][2], eth->macaddr[ma][3],
		 eth->macaddr[ma][4], eth->macaddr[ma][5]));
}

static void
eth_writel (void *opaque, target_phys_addr_t addr, uint32_t value)
{
	struct fs_eth *eth = opaque;

	/* Make addr relative to this instances base.  */
	addr -= eth->base;
	switch (addr)
	{
		case RW_MA0_LO:
			eth->regs[addr] = value;
			eth_update_ma(eth, 0);
			break;
		case RW_MA0_HI:
			eth->regs[addr] = value;
			eth_update_ma(eth, 0);
			break;
		case RW_MA1_LO:
			eth->regs[addr] = value;
			eth_update_ma(eth, 1);
			break;
		case RW_MA1_HI:
			eth->regs[addr] = value;
			eth_update_ma(eth, 1);
			break;

		case RW_MGM_CTRL:
			/* Attach an MDIO/PHY abstraction.  */
			if (value & 2)
				eth->mdio_bus.mdio = value & 1;
			if (eth->mdio_bus.mdc != (value & 4))
				mdio_cycle(&eth->mdio_bus);
			eth->mdio_bus.mdc = !!(value & 4);
			break;

		default:
			eth->regs[addr] = value;
			D(printf ("%s %x %x\n",
				  __func__, addr, value));
			break;
	}
}

/* The ETRAX FS has a groupt address table (GAT) which works like a k=1 bloom
   filter dropping group addresses we have not joined.	The filter has 64
   bits (m). The has function is a simple nible xor of the group addr.	*/
static int eth_match_groupaddr(struct fs_eth *eth, const unsigned char *sa)
{
	unsigned int hsh;
	int m_individual = eth->regs[RW_REC_CTRL] & 4;
	int match;

	/* First bit on the wire of a MAC address signals multicast or
	   physical address.  */
	if (!m_individual && !sa[0] & 1)
		return 0;

	/* Calculate the hash index for the GA registers. */
	hsh = 0;
	hsh ^= (*sa) & 0x3f;
	hsh ^= ((*sa) >> 6) & 0x03;
	++sa;
	hsh ^= ((*sa) << 2) & 0x03c;
	hsh ^= ((*sa) >> 4) & 0xf;
	++sa;
	hsh ^= ((*sa) << 4) & 0x30;
	hsh ^= ((*sa) >> 2) & 0x3f;
	++sa;
	hsh ^= (*sa) & 0x3f;
	hsh ^= ((*sa) >> 6) & 0x03;
	++sa;
	hsh ^= ((*sa) << 2) & 0x03c;
	hsh ^= ((*sa) >> 4) & 0xf;
	++sa;
	hsh ^= ((*sa) << 4) & 0x30;
	hsh ^= ((*sa) >> 2) & 0x3f;

	hsh &= 63;
	if (hsh > 31)
		match = eth->regs[RW_GA_HI] & (1 << (hsh - 32));
	else
		match = eth->regs[RW_GA_LO] & (1 << hsh);
	D(printf("hsh=%x ga=%x.%x mtch=%d\n", hsh,
		 eth->regs[RW_GA_HI], eth->regs[RW_GA_LO], match));
	return match;
}

static int eth_can_receive(void *opaque)
{
	struct fs_eth *eth = opaque;
	int r;

	r = eth->rx_fifo_len == 0;
	if (!r) {
		/* TODO: signal fifo overrun.  */
		printf("PACKET LOSS!\n");
	}
	return r;
}

static void eth_receive(void *opaque, const uint8_t *buf, int size)
{
	unsigned char sa_bcast[6] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
	struct fs_eth *eth = opaque;
	int use_ma0 = eth->regs[RW_REC_CTRL] & 1;
	int use_ma1 = eth->regs[RW_REC_CTRL] & 2;
	int r_bcast = eth->regs[RW_REC_CTRL] & 8;

	if (size < 12)
		return;

	D(printf("%x.%x.%x.%x.%x.%x ma=%d %d bc=%d\n",
		 buf[0], buf[1], buf[2], buf[3], buf[4], buf[5],
		 use_ma0, use_ma1, r_bcast));
	       
	/* Does the frame get through the address filters?  */
	if ((!use_ma0 || memcmp(buf, eth->macaddr[0], 6))
	    && (!use_ma1 || memcmp(buf, eth->macaddr[1], 6))
	    && (!r_bcast || memcmp(buf, sa_bcast, 6))
	    && !eth_match_groupaddr(eth, buf))
		return;

	if (size > sizeof(eth->rx_fifo)) {
		/* TODO: signal error.	*/
	} else if (eth->rx_fifo_len) {
		/* FIFO overrun.  */
	} else {
		memcpy(eth->rx_fifo, buf, size);
		/* +4, HW passes the CRC to sw.	 */
		eth->rx_fifo_len = size + 4;
		eth->rx_fifo_pos = 0;
	}
}

static void eth_rx_pull(void *opaque)
{
	struct fs_eth *eth = opaque;
	int len;
	if (eth->rx_fifo_len) {		
		D(printf("%s %d\n", __func__, eth->rx_fifo_len));
#if 0
		{
			int i;
			for (i = 0; i < 32; i++)
				printf("%2.2x", eth->rx_fifo[i]);
			printf("\n");
		}
#endif
		len = etraxfs_dmac_input(eth->dma_in,
					 eth->rx_fifo + eth->rx_fifo_pos, 
					 eth->rx_fifo_len, 1);
		eth->rx_fifo_len -= len;
		eth->rx_fifo_pos += len;
	}
}

static int eth_tx_push(void *opaque, unsigned char *buf, int len)
{
	struct fs_eth *eth = opaque;

	D(printf("%s buf=%p len=%d\n", __func__, buf, len));
	qemu_send_packet(eth->vc, buf, len);
	return len;
}

static CPUReadMemoryFunc *eth_read[] = {
	&eth_rinvalid,
	&eth_rinvalid,
	&eth_readl,
};

static CPUWriteMemoryFunc *eth_write[] = {
	&eth_winvalid,
	&eth_winvalid,
	&eth_writel,
};

void *etraxfs_eth_init(NICInfo *nd, CPUState *env, 
		       qemu_irq *irq, target_phys_addr_t base)
{
	struct etraxfs_dma_client *dma = NULL;	
	struct fs_eth *eth = NULL;

	dma = qemu_mallocz(sizeof *dma * 2);
	if (!dma)
		return NULL;

	eth = qemu_mallocz(sizeof *eth);
	if (!eth)
		goto err;

	dma[0].client.push = eth_tx_push;
	dma[0].client.opaque = eth;
	dma[1].client.opaque = eth;
	dma[1].client.pull = eth_rx_pull;

	eth->env = env;
	eth->base = base;
	eth->irq = irq;
	eth->dma_out = dma;
	eth->dma_in = dma + 1;

	/* Connect the phy.  */
	tdk_init(&eth->phy);
	mdio_attach(&eth->mdio_bus, &eth->phy, 0x1);

	eth->ethregs = cpu_register_io_memory(0, eth_read, eth_write, eth);
	cpu_register_physical_memory (base, 0x5c, eth->ethregs);

	eth->vc = qemu_new_vlan_client(nd->vlan, 
				       eth_receive, eth_can_receive, eth);

	return dma;
  err:
	qemu_free(eth);
	qemu_free(dma);
	return NULL;
}
Commit	Line	Data
a3ea5df5 EI	1	/*
	2	* QEMU ETRAX Ethernet Controller.
	3	*
	4	* Copyright (c) 2008 Edgar E. Iglesias, Axis Communications AB.
	5	*
	6	* Permission is hereby granted, free of charge, to any person obtaining a copy
	7	* of this software and associated documentation files (the "Software"), to deal
	8	* in the Software without restriction, including without limitation the rights
	9	* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
	10	* copies of the Software, and to permit persons to whom the Software is
	11	* furnished to do so, subject to the following conditions:
	12	*
	13	* The above copyright notice and this permission notice shall be included in
	14	* all copies or substantial portions of the Software.
	15	*
	16	* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
	17	* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
	18	* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
	19	* THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
	20	* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
	21	* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
	22	* THE SOFTWARE.
	23	*/
	24
	25	#include <stdio.h>
	26	#include "hw.h"
	27	#include "net.h"
	28
	29	#include "etraxfs_dma.h"
	30
	31	#define D(x)
	32
2e56350e EI	33	/*
	34	* The MDIO extensions in the TDK PHY model were reversed engineered from the
	35	* linux driver (PHYID and Diagnostics reg).
	36	* TODO: Add friendly names for the register nums.
	37	*/
a3ea5df5 EI	38	struct qemu_phy
	39	{
	40	uint32_t regs[32];
	41
	42	unsigned int (read)(struct qemu_phy phy, unsigned int req);
2e56350e EI	43	void (write)(struct qemu_phy phy, unsigned int req,
2e56350e EI	44	unsigned int data);
a3ea5df5 EI	45	};
	46
	47	static unsigned int tdk_read(struct qemu_phy *phy, unsigned int req)
	48	{
	49	int regnum;
	50	unsigned r = 0;
	51
	52	regnum = req & 0x1f;
	53
	54	switch (regnum) {
	55	case 1:
f6953f13	56	/* MR1. */
a3ea5df5 EI	57	/* Speeds and modes. */
	58	r \|= (1 << 13) \| (1 << 14);
	59	r \|= (1 << 11) \| (1 << 12);
	60	r \|= (1 << 5); /* Autoneg complete. */
f6953f13 EI	61	r \|= (1 << 3); /* Autoneg able. */
f6953f13 EI	62	r \|= (1 << 2); /* Link. */
a3ea5df5	63	break;
2e56350e EI	64	case 5:
	65	/* Link partner ability.
	66	We are kind; always agree with whatever best mode
	67	the guest advertises. */
	68	r = 1 << 14; /* Success. */
	69	/* Copy advertised modes. */
	70	r \|= phy->regs[4] & (15 << 5);
	71	/* Autoneg support. */
	72	r \|= 1;
	73	break;
	74	case 18:
	75	{
	76	/* Diagnostics reg. */
	77	int duplex = 0;
	78	int speed_100 = 0;
	79
	80	/* Are we advertising 100 half or 100 duplex ? */
	81	speed_100 = !!(phy->regs[4] & 0x180);
	82	/* Are we advertising 10 duplex or 100 duplex ? */
	83	duplex = !!(phy->regs[4] & 0x180);
	84	r = (speed_100 << 10) \| (duplex << 11);
	85	}
	86	break;
	87
a3ea5df5 EI	88	default:
	89	r = phy->regs[regnum];
	90	break;
	91	}
2e56350e	92	D(printf("\n%s %x = reg[%d]\n", __func__, r, regnum));
a3ea5df5 EI	93	return r;
	94	}
	95
	96	static void
	97	tdk_write(struct qemu_phy *phy, unsigned int req, unsigned int data)
	98	{
	99	int regnum;
	100
	101	regnum = req & 0x1f;
	102	D(printf("%s reg[%d] = %x\n", __func__, regnum, data));
	103	switch (regnum) {
	104	default:
	105	phy->regs[regnum] = data;
	106	break;
	107	}
	108	}
	109
	110	static void
	111	tdk_init(struct qemu_phy *phy)
	112	{
2e56350e EI	113	phy->regs[0] = 0x3100;
	114	/* PHY Id. */
	115	phy->regs[2] = 0x0300;
	116	phy->regs[3] = 0xe400;
	117	/* Autonegotiation advertisement reg. */
	118	phy->regs[4] = 0x01E1;
	119
a3ea5df5 EI	120	phy->read = tdk_read;
	121	phy->write = tdk_write;
	122	}
	123
	124	struct qemu_mdio
	125	{
f6953f13	126	/* bus. */
a3ea5df5 EI	127	int mdc;
	128	int mdio;
	129
	130	/* decoder. */
	131	enum {
	132	PREAMBLE,
	133	SOF,
	134	OPC,
	135	ADDR,
	136	REQ,
	137	TURNAROUND,
	138	DATA
	139	} state;
	140	unsigned int drive;
	141
	142	unsigned int cnt;
	143	unsigned int addr;
	144	unsigned int opc;
	145	unsigned int req;
	146	unsigned int data;
	147
	148	struct qemu_phy *devs[32];
	149	};
	150
	151	static void
	152	mdio_attach(struct qemu_mdio bus, struct qemu_phy phy, unsigned int addr)
	153	{
	154	bus->devs[addr & 0x1f] = phy;
	155	}
	156
d297f464	157	#ifdef USE_THIS_DEAD_CODE
a3ea5df5 EI	158	static void
	159	mdio_detach(struct qemu_mdio bus, struct qemu_phy phy, unsigned int addr)
	160	{
	161	bus->devs[addr & 0x1f] = NULL;
	162	}
d297f464	163	#endif
a3ea5df5 EI	164
	165	static void mdio_read_req(struct qemu_mdio *bus)
	166	{
	167	struct qemu_phy *phy;
	168
	169	phy = bus->devs[bus->addr];
	170	if (phy && phy->read)
	171	bus->data = phy->read(phy, bus->req);
	172	else
	173	bus->data = 0xffff;
	174	}
	175
	176	static void mdio_write_req(struct qemu_mdio *bus)
	177	{
	178	struct qemu_phy *phy;
	179
	180	phy = bus->devs[bus->addr];
	181	if (phy && phy->write)
	182	phy->write(phy, bus->req, bus->data);
	183	}
	184
	185	static void mdio_cycle(struct qemu_mdio *bus)
	186	{
	187	bus->cnt++;
	188
	189	D(printf("mdc=%d mdio=%d state=%d cnt=%d drv=%d\n",
	190	bus->mdc, bus->mdio, bus->state, bus->cnt, bus->drive));
	191	#if 0
	192	if (bus->mdc)
	193	printf("%d", bus->mdio);
	194	#endif
	195	switch (bus->state)
	196	{
	197	case PREAMBLE:
	198	if (bus->mdc) {
	199	if (bus->cnt >= (32 * 2) && !bus->mdio) {
	200	bus->cnt = 0;
	201	bus->state = SOF;
	202	bus->data = 0;
	203	}
	204	}
	205	break;
	206	case SOF:
	207	if (bus->mdc) {
	208	if (bus->mdio != 1)
	209	printf("WARNING: no SOF\n");
	210	if (bus->cnt == 1*2) {
	211	bus->cnt = 0;
	212	bus->opc = 0;
	213	bus->state = OPC;
	214	}
	215	}
	216	break;
	217	case OPC:
	218	if (bus->mdc) {
	219	bus->opc <<= 1;
	220	bus->opc \|= bus->mdio & 1;
	221	if (bus->cnt == 2*2) {
	222	bus->cnt = 0;
	223	bus->addr = 0;
	224	bus->state = ADDR;
	225	}
	226	}
	227	break;
228	case ADDR:
229	if (bus->mdc) {
230	bus->addr <<= 1;
231	bus->addr \|= bus->mdio & 1;
232
233	if (bus->cnt == 5*2) {
234	bus->cnt = 0;
235	bus->req = 0;
236	bus->state = REQ;
237	}
238	}
239	break;
240	case REQ:
241	if (bus->mdc) {
242	bus->req <<= 1;
243	bus->req \|= bus->mdio & 1;
244	if (bus->cnt == 5*2) {
245	bus->cnt = 0;
246	bus->state = TURNAROUND;
247	}
248	}
249	break;
250	case TURNAROUND:
251	if (bus->mdc && bus->cnt == 2*2) {
252	bus->mdio = 0;
253	bus->cnt = 0;
254
255	if (bus->opc == 2) {
256	bus->drive = 1;
257	mdio_read_req(bus);
258	bus->mdio = bus->data & 1;
259	}
260	bus->state = DATA;
261	}
262	break;
263	case DATA:
264	if (!bus->mdc) {
265	if (bus->drive) {
2e56350e EI	266	bus->mdio = !!(bus->data & (1 << 15));
2e56350e EI	267	bus->data <<= 1;
a3ea5df5 EI	268	}
	269	} else {
	270	if (!bus->drive) {
	271	bus->data <<= 1;
	272	bus->data \|= bus->mdio;
	273	}
	274	if (bus->cnt == 16 * 2) {
	275	bus->cnt = 0;
	276	bus->state = PREAMBLE;
2e56350e EI	277	if (!bus->drive)
	278	mdio_write_req(bus);
	279	bus->drive = 0;
a3ea5df5 EI	280	}
	281	}
	282	break;
	283	default:
	284	break;
	285	}
	286	}
	287
2e56350e EI	288	/* ETRAX-FS Ethernet MAC block starts here. */
2e56350e EI	289
f6953f13 EI	290	#define RW_MA0_LO 0x00
	291	#define RW_MA0_HI 0x04
	292	#define RW_MA1_LO 0x08
	293	#define RW_MA1_HI 0x0c
	294	#define RW_GA_LO 0x10
	295	#define RW_GA_HI 0x14
	296	#define RW_GEN_CTRL 0x18
	297	#define RW_REC_CTRL 0x1c
	298	#define RW_TR_CTRL 0x20
	299	#define RW_CLR_ERR 0x24
	300	#define RW_MGM_CTRL 0x28
	301	#define R_STAT 0x2c
	302	#define FS_ETH_MAX_REGS 0x5c
a3ea5df5 EI	303
	304	struct fs_eth
	305	{
f6953f13	306	CPUState *env;
a3ea5df5	307	qemu_irq *irq;
f6953f13	308	target_phys_addr_t base;
a3ea5df5	309	VLANClientState *vc;
a3ea5df5 EI	310	int ethregs;
a3ea5df5 EI	311
f6953f13 EI	312	/* Two addrs in the filter. */
f6953f13 EI	313	uint8_t macaddr[2][6];
a3ea5df5 EI	314	uint32_t regs[FS_ETH_MAX_REGS];
	315
	316	unsigned char rx_fifo[1536];
	317	int rx_fifo_len;
	318	int rx_fifo_pos;
	319
	320	struct etraxfs_dma_client *dma_out;
	321	struct etraxfs_dma_client *dma_in;
	322
	323	/* MDIO bus. */
	324	struct qemu_mdio mdio_bus;
f6953f13	325	/* PHY. */
a3ea5df5 EI	326	struct qemu_phy phy;
	327	};
	328
	329	static uint32_t eth_rinvalid (void *opaque, target_phys_addr_t addr)
	330	{
f6953f13 EI	331	struct fs_eth *eth = opaque;
f6953f13 EI	332	CPUState *env = eth->env;
d27b2e50 EI	333	cpu_abort(env, "Unsupported short access. reg=" TARGET_FMT_plx "\n",
d27b2e50 EI	334	addr);
f6953f13	335	return 0;
a3ea5df5 EI	336	}
	337
	338	static uint32_t eth_readl (void *opaque, target_phys_addr_t addr)
	339	{
f6953f13	340	struct fs_eth *eth = opaque;
f6953f13	341	uint32_t r = 0;
a3ea5df5	342
f6953f13 EI	343	/* Make addr relative to this instances base. */
	344	addr -= eth->base;
	345	switch (addr) {
a3ea5df5 EI	346	case R_STAT:
	347	/* Attach an MDIO/PHY abstraction. */
	348	r = eth->mdio_bus.mdio & 1;
	349	break;
f6953f13	350	default:
a3ea5df5	351	r = eth->regs[addr];
d27b2e50	352	D(printf ("%s %x\n", __func__, addr));
f6953f13 EI	353	break;
	354	}
	355	return r;
a3ea5df5 EI	356	}
	357
	358	static void
	359	eth_winvalid (void *opaque, target_phys_addr_t addr, uint32_t value)
	360	{
f6953f13 EI	361	struct fs_eth *eth = opaque;
f6953f13 EI	362	CPUState *env = eth->env;
d27b2e50 EI	363	cpu_abort(env, "Unsupported short access. reg=" TARGET_FMT_plx "\n",
d27b2e50 EI	364	addr);
f6953f13 EI	365	}
	366
	367	static void eth_update_ma(struct fs_eth *eth, int ma)
	368	{
	369	int reg;
	370	int i = 0;
	371
	372	ma &= 1;
	373
	374	reg = RW_MA0_LO;
	375	if (ma)
	376	reg = RW_MA1_LO;
	377
	378	eth->macaddr[ma][i++] = eth->regs[reg];
	379	eth->macaddr[ma][i++] = eth->regs[reg] >> 8;
	380	eth->macaddr[ma][i++] = eth->regs[reg] >> 16;
	381	eth->macaddr[ma][i++] = eth->regs[reg] >> 24;
	382	eth->macaddr[ma][i++] = eth->regs[reg + 4];
	383	eth->macaddr[ma][i++] = eth->regs[reg + 4] >> 8;
	384
	385	D(printf("set mac%d=%x.%x.%x.%x.%x.%x\n", ma,
	386	eth->macaddr[ma][0], eth->macaddr[ma][1],
	387	eth->macaddr[ma][2], eth->macaddr[ma][3],
	388	eth->macaddr[ma][4], eth->macaddr[ma][5]));
a3ea5df5 EI	389	}
	390
	391	static void
	392	eth_writel (void *opaque, target_phys_addr_t addr, uint32_t value)
	393	{
f6953f13	394	struct fs_eth *eth = opaque;
f6953f13 EI	395
	396	/* Make addr relative to this instances base. */
	397	addr -= eth->base;
	398	switch (addr)
	399	{
	400	case RW_MA0_LO:
	401	eth->regs[addr] = value;
	402	eth_update_ma(eth, 0);
	403	break;
	404	case RW_MA0_HI:
	405	eth->regs[addr] = value;
	406	eth_update_ma(eth, 0);
	407	break;
	408	case RW_MA1_LO:
	409	eth->regs[addr] = value;
	410	eth_update_ma(eth, 1);
	411	break;
	412	case RW_MA1_HI:
	413	eth->regs[addr] = value;
	414	eth_update_ma(eth, 1);
	415	break;
a3ea5df5	416
a3ea5df5 EI	417	case RW_MGM_CTRL:
	418	/* Attach an MDIO/PHY abstraction. */
	419	if (value & 2)
	420	eth->mdio_bus.mdio = value & 1;
	421	if (eth->mdio_bus.mdc != (value & 4))
	422	mdio_cycle(&eth->mdio_bus);
	423	eth->mdio_bus.mdc = !!(value & 4);
	424	break;
	425
f6953f13 EI	426	default:
f6953f13 EI	427	eth->regs[addr] = value;
9bcd77d6 EI	428	D(printf ("%s %x %x\n",
9bcd77d6 EI	429	__func__, addr, value));
f6953f13 EI	430	break;
	431	}
	432	}
	433
	434	/* The ETRAX FS has a groupt address table (GAT) which works like a k=1 bloom
	435	filter dropping group addresses we have not joined. The filter has 64
	436	bits (m). The has function is a simple nible xor of the group addr. */
	437	static int eth_match_groupaddr(struct fs_eth eth, const unsigned char sa)
	438	{
	439	unsigned int hsh;
	440	int m_individual = eth->regs[RW_REC_CTRL] & 4;
	441	int match;
	442
	443	/* First bit on the wire of a MAC address signals multicast or
	444	physical address. */
	445	if (!m_individual && !sa[0] & 1)
	446	return 0;
	447
	448	/* Calculate the hash index for the GA registers. */
	449	hsh = 0;
	450	hsh ^= (*sa) & 0x3f;
	451	hsh ^= ((*sa) >> 6) & 0x03;
	452	++sa;
	453	hsh ^= ((*sa) << 2) & 0x03c;
	454	hsh ^= ((*sa) >> 4) & 0xf;
	455	++sa;
	456	hsh ^= ((*sa) << 4) & 0x30;
	457	hsh ^= ((*sa) >> 2) & 0x3f;
	458	++sa;
	459	hsh ^= (*sa) & 0x3f;
	460	hsh ^= ((*sa) >> 6) & 0x03;
	461	++sa;
	462	hsh ^= ((*sa) << 2) & 0x03c;
	463	hsh ^= ((*sa) >> 4) & 0xf;
	464	++sa;
	465	hsh ^= ((*sa) << 4) & 0x30;
	466	hsh ^= ((*sa) >> 2) & 0x3f;
	467
	468	hsh &= 63;
	469	if (hsh > 31)
	470	match = eth->regs[RW_GA_HI] & (1 << (hsh - 32));
	471	else
	472	match = eth->regs[RW_GA_LO] & (1 << hsh);
	473	D(printf("hsh=%x ga=%x.%x mtch=%d\n", hsh,
	474	eth->regs[RW_GA_HI], eth->regs[RW_GA_LO], match));
	475	return match;
a3ea5df5 EI	476	}
	477
	478	static int eth_can_receive(void *opaque)
	479	{
	480	struct fs_eth *eth = opaque;
	481	int r;
	482
	483	r = eth->rx_fifo_len == 0;
	484	if (!r) {
	485	/* TODO: signal fifo overrun. */
	486	printf("PACKET LOSS!\n");
	487	}
	488	return r;
	489	}
	490
	491	static void eth_receive(void opaque, const uint8_t buf, int size)
	492	{
f6953f13	493	unsigned char sa_bcast[6] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
a3ea5df5	494	struct fs_eth *eth = opaque;
f6953f13 EI	495	int use_ma0 = eth->regs[RW_REC_CTRL] & 1;
	496	int use_ma1 = eth->regs[RW_REC_CTRL] & 2;
	497	int r_bcast = eth->regs[RW_REC_CTRL] & 8;
	498
	499	if (size < 12)
	500	return;
	501
	502	D(printf("%x.%x.%x.%x.%x.%x ma=%d %d bc=%d\n",
	503	buf[0], buf[1], buf[2], buf[3], buf[4], buf[5],
	504	use_ma0, use_ma1, r_bcast));
	505
	506	/* Does the frame get through the address filters? */
	507	if ((!use_ma0 \|\| memcmp(buf, eth->macaddr[0], 6))
	508	&& (!use_ma1 \|\| memcmp(buf, eth->macaddr[1], 6))
	509	&& (!r_bcast \|\| memcmp(buf, sa_bcast, 6))
	510	&& !eth_match_groupaddr(eth, buf))
	511	return;
	512
a3ea5df5	513	if (size > sizeof(eth->rx_fifo)) {
f6953f13 EI	514	/* TODO: signal error. */
	515	} else if (eth->rx_fifo_len) {
	516	/* FIFO overrun. */
a3ea5df5 EI	517	} else {
a3ea5df5 EI	518	memcpy(eth->rx_fifo, buf, size);
f6953f13	519	/* +4, HW passes the CRC to sw. */
a3ea5df5 EI	520	eth->rx_fifo_len = size + 4;
	521	eth->rx_fifo_pos = 0;
	522	}
	523	}
	524
	525	static void eth_rx_pull(void *opaque)
	526	{
	527	struct fs_eth *eth = opaque;
	528	int len;
	529	if (eth->rx_fifo_len) {
	530	D(printf("%s %d\n", __func__, eth->rx_fifo_len));
	531	#if 0
	532	{
	533	int i;
	534	for (i = 0; i < 32; i++)
	535	printf("%2.2x", eth->rx_fifo[i]);
	536	printf("\n");
	537	}
	538	#endif
	539	len = etraxfs_dmac_input(eth->dma_in,
	540	eth->rx_fifo + eth->rx_fifo_pos,
	541	eth->rx_fifo_len, 1);
	542	eth->rx_fifo_len -= len;
	543	eth->rx_fifo_pos += len;
	544	}
	545	}
	546
	547	static int eth_tx_push(void opaque, unsigned char buf, int len)
	548	{
	549	struct fs_eth *eth = opaque;
	550
	551	D(printf("%s buf=%p len=%d\n", __func__, buf, len));
	552	qemu_send_packet(eth->vc, buf, len);
	553	return len;
	554	}
	555
	556	static CPUReadMemoryFunc *eth_read[] = {
2e56350e EI	557	&eth_rinvalid,
	558	&eth_rinvalid,
	559	&eth_readl,
a3ea5df5 EI	560	};
	561
	562	static CPUWriteMemoryFunc *eth_write[] = {
2e56350e EI	563	&eth_winvalid,
	564	&eth_winvalid,
	565	&eth_writel,
a3ea5df5 EI	566	};
	567
	568	void etraxfs_eth_init(NICInfo nd, CPUState *env,
	569	qemu_irq *irq, target_phys_addr_t base)
	570	{
	571	struct etraxfs_dma_client *dma = NULL;
	572	struct fs_eth *eth = NULL;
	573
	574	dma = qemu_mallocz(sizeof dma 2);
	575	if (!dma)
	576	return NULL;
	577
	578	eth = qemu_mallocz(sizeof *eth);
	579	if (!eth)
	580	goto err;
	581
	582	dma[0].client.push = eth_tx_push;
	583	dma[0].client.opaque = eth;
	584	dma[1].client.opaque = eth;
	585	dma[1].client.pull = eth_rx_pull;
	586
	587	eth->env = env;
	588	eth->base = base;
	589	eth->irq = irq;
	590	eth->dma_out = dma;
	591	eth->dma_in = dma + 1;
a3ea5df5 EI	592
	593	/* Connect the phy. */
	594	tdk_init(&eth->phy);
	595	mdio_attach(&eth->mdio_bus, &eth->phy, 0x1);
	596
	597	eth->ethregs = cpu_register_io_memory(0, eth_read, eth_write, eth);
	598	cpu_register_physical_memory (base, 0x5c, eth->ethregs);
	599
	600	eth->vc = qemu_new_vlan_client(nd->vlan,
	601	eth_receive, eth_can_receive, eth);
	602
	603	return dma;
	604	err:
	605	qemu_free(eth);
	606	qemu_free(dma);
	607	return NULL;
	608	}