6 * This work is licensed under the terms of the GNU GPL, version 2 or later.
7 * See the COPYING file in the top-level directory.
11 #include "qemu/osdep.h"
12 #include "hw/ssi/imx_spi.h"
13 #include "sysemu/sysemu.h"
17 #define DEBUG_IMX_SPI 0
20 #define DPRINTF(fmt, args...) \
22 if (DEBUG_IMX_SPI) { \
23 fprintf(stderr, "[%s]%s: " fmt , TYPE_IMX_SPI, \
28 static const char *imx_spi_reg_name(uint32_t reg)
30 static char unknown[20];
34 return "ECSPI_RXDATA";
36 return "ECSPI_TXDATA";
38 return "ECSPI_CONREG";
40 return "ECSPI_CONFIGREG";
42 return "ECSPI_INTREG";
44 return "ECSPI_DMAREG";
46 return "ECSPI_STATREG";
48 return "ECSPI_PERIODREG";
50 return "ECSPI_TESTREG";
52 return "ECSPI_MSGDATA";
54 sprintf(unknown, "%d ?", reg);
59 static const VMStateDescription vmstate_imx_spi = {
62 .minimum_version_id = 1,
63 .fields = (VMStateField[]) {
64 VMSTATE_FIFO32(tx_fifo, IMXSPIState),
65 VMSTATE_FIFO32(rx_fifo, IMXSPIState),
66 VMSTATE_INT16(burst_length, IMXSPIState),
67 VMSTATE_UINT32_ARRAY(regs, IMXSPIState, ECSPI_MAX),
72 static void imx_spi_txfifo_reset(IMXSPIState *s)
74 fifo32_reset(&s->tx_fifo);
75 s->regs[ECSPI_STATREG] |= ECSPI_STATREG_TE;
76 s->regs[ECSPI_STATREG] &= ~ECSPI_STATREG_TF;
79 static void imx_spi_rxfifo_reset(IMXSPIState *s)
81 fifo32_reset(&s->rx_fifo);
82 s->regs[ECSPI_STATREG] &= ~ECSPI_STATREG_RR;
83 s->regs[ECSPI_STATREG] &= ~ECSPI_STATREG_RF;
84 s->regs[ECSPI_STATREG] &= ~ECSPI_STATREG_RO;
87 static void imx_spi_update_irq(IMXSPIState *s)
91 if (fifo32_is_empty(&s->rx_fifo)) {
92 s->regs[ECSPI_STATREG] &= ~ECSPI_STATREG_RR;
94 s->regs[ECSPI_STATREG] |= ECSPI_STATREG_RR;
97 if (fifo32_is_full(&s->rx_fifo)) {
98 s->regs[ECSPI_STATREG] |= ECSPI_STATREG_RF;
100 s->regs[ECSPI_STATREG] &= ~ECSPI_STATREG_RF;
103 if (fifo32_is_empty(&s->tx_fifo)) {
104 s->regs[ECSPI_STATREG] |= ECSPI_STATREG_TE;
106 s->regs[ECSPI_STATREG] &= ~ECSPI_STATREG_TE;
109 if (fifo32_is_full(&s->tx_fifo)) {
110 s->regs[ECSPI_STATREG] |= ECSPI_STATREG_TF;
112 s->regs[ECSPI_STATREG] &= ~ECSPI_STATREG_TF;
115 level = s->regs[ECSPI_STATREG] & s->regs[ECSPI_INTREG] ? 1 : 0;
117 qemu_set_irq(s->irq, level);
119 DPRINTF("IRQ level is %d\n", level);
122 static uint8_t imx_spi_selected_channel(IMXSPIState *s)
124 return EXTRACT(s->regs[ECSPI_CONREG], ECSPI_CONREG_CHANNEL_SELECT);
127 static uint32_t imx_spi_burst_length(IMXSPIState *s)
129 return EXTRACT(s->regs[ECSPI_CONREG], ECSPI_CONREG_BURST_LENGTH) + 1;
132 static bool imx_spi_is_enabled(IMXSPIState *s)
134 return s->regs[ECSPI_CONREG] & ECSPI_CONREG_EN;
137 static bool imx_spi_channel_is_master(IMXSPIState *s)
139 uint8_t mode = EXTRACT(s->regs[ECSPI_CONREG], ECSPI_CONREG_CHANNEL_MODE);
141 return (mode & (1 << imx_spi_selected_channel(s))) ? true : false;
144 static bool imx_spi_is_multiple_master_burst(IMXSPIState *s)
146 uint8_t wave = EXTRACT(s->regs[ECSPI_CONFIGREG], ECSPI_CONFIGREG_SS_CTL);
148 return imx_spi_channel_is_master(s) &&
149 !(s->regs[ECSPI_CONREG] & ECSPI_CONREG_SMC) &&
150 ((wave & (1 << imx_spi_selected_channel(s))) ? true : false);
153 static void imx_spi_flush_txfifo(IMXSPIState *s)
158 DPRINTF("Begin: TX Fifo Size = %d, RX Fifo Size = %d\n",
159 fifo32_num_used(&s->tx_fifo), fifo32_num_used(&s->rx_fifo));
161 while (!fifo32_is_empty(&s->tx_fifo)) {
165 if (s->burst_length <= 0) {
166 s->burst_length = imx_spi_burst_length(s);
168 DPRINTF("Burst length = %d\n", s->burst_length);
170 if (imx_spi_is_multiple_master_burst(s)) {
171 s->regs[ECSPI_CONREG] |= ECSPI_CONREG_XCH;
175 tx = fifo32_pop(&s->tx_fifo);
177 DPRINTF("data tx:0x%08x\n", tx);
179 tx_burst = MIN(s->burst_length, 32);
184 uint8_t byte = tx & 0xff;
186 DPRINTF("writing 0x%02x\n", (uint32_t)byte);
188 /* We need to write one byte at a time */
189 byte = ssi_transfer(s->bus, byte);
191 DPRINTF("0x%02x read\n", (uint32_t)byte);
194 rx |= (byte << (index * 8));
196 /* Remove 8 bits from the actual burst */
198 s->burst_length -= 8;
202 DPRINTF("data rx:0x%08x\n", rx);
204 if (fifo32_is_full(&s->rx_fifo)) {
205 s->regs[ECSPI_STATREG] |= ECSPI_STATREG_RO;
207 fifo32_push(&s->rx_fifo, (uint8_t)rx);
210 if (s->burst_length <= 0) {
211 if (!imx_spi_is_multiple_master_burst(s)) {
212 s->regs[ECSPI_STATREG] |= ECSPI_STATREG_TC;
218 if (fifo32_is_empty(&s->tx_fifo)) {
219 s->regs[ECSPI_STATREG] |= ECSPI_STATREG_TC;
220 s->regs[ECSPI_CONREG] &= ~ECSPI_CONREG_XCH;
223 /* TODO: We should also use TDR and RDR bits */
225 DPRINTF("End: TX Fifo Size = %d, RX Fifo Size = %d\n",
226 fifo32_num_used(&s->tx_fifo), fifo32_num_used(&s->rx_fifo));
229 static void imx_spi_reset(DeviceState *dev)
231 IMXSPIState *s = IMX_SPI(dev);
235 memset(s->regs, 0, sizeof(s->regs));
237 s->regs[ECSPI_STATREG] = 0x00000003;
239 imx_spi_rxfifo_reset(s);
240 imx_spi_txfifo_reset(s);
242 imx_spi_update_irq(s);
247 static uint64_t imx_spi_read(void *opaque, hwaddr offset, unsigned size)
250 IMXSPIState *s = opaque;
251 uint32_t index = offset >> 2;
253 if (index >= ECSPI_MAX) {
254 qemu_log_mask(LOG_GUEST_ERROR, "[%s]%s: Bad register at offset 0x%"
255 HWADDR_PRIx "\n", TYPE_IMX_SPI, __func__, offset);
261 if (!imx_spi_is_enabled(s)) {
263 } else if (fifo32_is_empty(&s->rx_fifo)) {
264 /* value is undefined */
267 /* read from the RX FIFO */
268 value = fifo32_pop(&s->rx_fifo);
273 qemu_log_mask(LOG_GUEST_ERROR, "[%s]%s: Trying to read from TX FIFO\n",
274 TYPE_IMX_SPI, __func__);
276 /* Reading from TXDATA gives 0 */
280 qemu_log_mask(LOG_GUEST_ERROR, "[%s]%s: Trying to read from MSG FIFO\n",
281 TYPE_IMX_SPI, __func__);
283 /* Reading from MSGDATA gives 0 */
287 value = s->regs[index];
291 DPRINTF("reg[%s] => 0x%" PRIx32 "\n", imx_spi_reg_name(index), value);
293 imx_spi_update_irq(s);
295 return (uint64_t)value;
298 static void imx_spi_write(void *opaque, hwaddr offset, uint64_t value,
301 IMXSPIState *s = opaque;
302 uint32_t index = offset >> 2;
303 uint32_t change_mask;
305 if (index >= ECSPI_MAX) {
306 qemu_log_mask(LOG_GUEST_ERROR, "[%s]%s: Bad register at offset 0x%"
307 HWADDR_PRIx "\n", TYPE_IMX_SPI, __func__, offset);
311 DPRINTF("reg[%s] <= 0x%" PRIx32 "\n", imx_spi_reg_name(index),
314 change_mask = s->regs[index] ^ value;
318 qemu_log_mask(LOG_GUEST_ERROR, "[%s]%s: Trying to write to RX FIFO\n",
319 TYPE_IMX_SPI, __func__);
322 if (!imx_spi_is_enabled(s)) {
323 /* Ignore writes if device is disabled */
325 } else if (fifo32_is_full(&s->tx_fifo)) {
326 /* Ignore writes if queue is full */
330 fifo32_push(&s->tx_fifo, (uint32_t)value);
332 if (imx_spi_channel_is_master(s) &&
333 (s->regs[ECSPI_CONREG] & ECSPI_CONREG_SMC)) {
335 * Start emitting if current channel is master and SMC bit is
338 imx_spi_flush_txfifo(s);
343 /* the RO and TC bits are write-one-to-clear */
344 value &= ECSPI_STATREG_RO | ECSPI_STATREG_TC;
345 s->regs[ECSPI_STATREG] &= ~value;
349 s->regs[ECSPI_CONREG] = value;
351 if (!imx_spi_is_enabled(s)) {
352 /* device is disabled, so this is a reset */
353 imx_spi_reset(DEVICE(s));
357 if (imx_spi_channel_is_master(s)) {
360 /* We are in master mode */
362 for (i = 0; i < 4; i++) {
363 qemu_set_irq(s->cs_lines[i],
364 i == imx_spi_selected_channel(s) ? 0 : 1);
367 if ((value & change_mask & ECSPI_CONREG_SMC) &&
368 !fifo32_is_empty(&s->tx_fifo)) {
369 /* SMC bit is set and TX FIFO has some slots filled in */
370 imx_spi_flush_txfifo(s);
371 } else if ((value & change_mask & ECSPI_CONREG_XCH) &&
372 !(value & ECSPI_CONREG_SMC)) {
373 /* This is a request to start emitting */
374 imx_spi_flush_txfifo(s);
380 /* it is not clear from the spec what MSGDATA is for */
381 /* Anyway it is not used by Linux driver */
382 /* So for now we just ignore it */
383 qemu_log_mask(LOG_UNIMP,
384 "[%s]%s: Trying to write to MSGDATA, ignoring\n",
385 TYPE_IMX_SPI, __func__);
388 s->regs[index] = value;
393 imx_spi_update_irq(s);
396 static const struct MemoryRegionOps imx_spi_ops = {
397 .read = imx_spi_read,
398 .write = imx_spi_write,
399 .endianness = DEVICE_NATIVE_ENDIAN,
402 * Our device would not work correctly if the guest was doing
403 * unaligned access. This might not be a limitation on the real
404 * device but in practice there is no reason for a guest to access
405 * this device unaligned.
407 .min_access_size = 4,
408 .max_access_size = 4,
413 static void imx_spi_realize(DeviceState *dev, Error **errp)
415 IMXSPIState *s = IMX_SPI(dev);
418 s->bus = ssi_create_bus(dev, "spi");
420 memory_region_init_io(&s->iomem, OBJECT(dev), &imx_spi_ops, s,
421 TYPE_IMX_SPI, 0x1000);
422 sysbus_init_mmio(SYS_BUS_DEVICE(dev), &s->iomem);
423 sysbus_init_irq(SYS_BUS_DEVICE(dev), &s->irq);
425 ssi_auto_connect_slaves(dev, s->cs_lines, s->bus);
427 for (i = 0; i < 4; ++i) {
428 sysbus_init_irq(SYS_BUS_DEVICE(dev), &s->cs_lines[i]);
433 fifo32_create(&s->tx_fifo, ECSPI_FIFO_SIZE);
434 fifo32_create(&s->rx_fifo, ECSPI_FIFO_SIZE);
437 static void imx_spi_class_init(ObjectClass *klass, void *data)
439 DeviceClass *dc = DEVICE_CLASS(klass);
441 dc->realize = imx_spi_realize;
442 dc->vmsd = &vmstate_imx_spi;
443 dc->reset = imx_spi_reset;
444 dc->desc = "i.MX SPI Controller";
447 static const TypeInfo imx_spi_info = {
448 .name = TYPE_IMX_SPI,
449 .parent = TYPE_SYS_BUS_DEVICE,
450 .instance_size = sizeof(IMXSPIState),
451 .class_init = imx_spi_class_init,
454 static void imx_spi_register_types(void)
456 type_register_static(&imx_spi_info);
459 type_init(imx_spi_register_types)