af9e40aa8f
Drives defined with if!=none are for board initialization to wire up. Board code calls drive_get() or similar to find them, and creates devices with their qdev drive properties set accordingly. Except a few devices go on a fishing expedition for a suitable backend instead of exposing a drive property for board code to set: they call driver_get() or drive_get_next() in their realize() or init() method to implicitly connect to the "next" backend with a certain interface type. Picking up backends that way works when the devices are created by board code. But it's inappropriate for -device or device_add. Not only is this inconsistent with how the other block device models work (they connect to a backend explicitly identified by a "drive" property), it breaks when the "next" backend has been picked up by the board already. Example: $ qemu-system-arm -S -M connex -pflash flash.img -device ssi-sd Aborted (core dumped) Mark them with suitable FIXME comments. Cc: Andrzej Zaborowski <balrogg@gmail.com> Cc: Peter Crosthwaite <peter.crosthwaite@xilinx.com> Cc: "Andreas Färber" <andreas.faerber@web.de> Cc: Michael Walle <michael@walle.cc> Signed-off-by: Markus Armbruster <armbru@redhat.com>
290 lines
9.1 KiB
C
290 lines
9.1 KiB
C
/*
|
|
* SSI to SD card adapter.
|
|
*
|
|
* Copyright (c) 2007-2009 CodeSourcery.
|
|
* Written by Paul Brook
|
|
*
|
|
* This code is licensed under the GNU GPL v2.
|
|
*
|
|
* Contributions after 2012-01-13 are licensed under the terms of the
|
|
* GNU GPL, version 2 or (at your option) any later version.
|
|
*/
|
|
|
|
#include "sysemu/block-backend.h"
|
|
#include "sysemu/blockdev.h"
|
|
#include "hw/ssi.h"
|
|
#include "hw/sd.h"
|
|
|
|
//#define DEBUG_SSI_SD 1
|
|
|
|
#ifdef DEBUG_SSI_SD
|
|
#define DPRINTF(fmt, ...) \
|
|
do { printf("ssi_sd: " fmt , ## __VA_ARGS__); } while (0)
|
|
#define BADF(fmt, ...) \
|
|
do { fprintf(stderr, "ssi_sd: error: " fmt , ## __VA_ARGS__); exit(1);} while (0)
|
|
#else
|
|
#define DPRINTF(fmt, ...) do {} while(0)
|
|
#define BADF(fmt, ...) \
|
|
do { fprintf(stderr, "ssi_sd: error: " fmt , ## __VA_ARGS__);} while (0)
|
|
#endif
|
|
|
|
typedef enum {
|
|
SSI_SD_CMD,
|
|
SSI_SD_CMDARG,
|
|
SSI_SD_RESPONSE,
|
|
SSI_SD_DATA_START,
|
|
SSI_SD_DATA_READ,
|
|
} ssi_sd_mode;
|
|
|
|
typedef struct {
|
|
SSISlave ssidev;
|
|
ssi_sd_mode mode;
|
|
int cmd;
|
|
uint8_t cmdarg[4];
|
|
uint8_t response[5];
|
|
int arglen;
|
|
int response_pos;
|
|
int stopping;
|
|
SDState *sd;
|
|
} ssi_sd_state;
|
|
|
|
/* State word bits. */
|
|
#define SSI_SDR_LOCKED 0x0001
|
|
#define SSI_SDR_WP_ERASE 0x0002
|
|
#define SSI_SDR_ERROR 0x0004
|
|
#define SSI_SDR_CC_ERROR 0x0008
|
|
#define SSI_SDR_ECC_FAILED 0x0010
|
|
#define SSI_SDR_WP_VIOLATION 0x0020
|
|
#define SSI_SDR_ERASE_PARAM 0x0040
|
|
#define SSI_SDR_OUT_OF_RANGE 0x0080
|
|
#define SSI_SDR_IDLE 0x0100
|
|
#define SSI_SDR_ERASE_RESET 0x0200
|
|
#define SSI_SDR_ILLEGAL_COMMAND 0x0400
|
|
#define SSI_SDR_COM_CRC_ERROR 0x0800
|
|
#define SSI_SDR_ERASE_SEQ_ERROR 0x1000
|
|
#define SSI_SDR_ADDRESS_ERROR 0x2000
|
|
#define SSI_SDR_PARAMETER_ERROR 0x4000
|
|
|
|
static uint32_t ssi_sd_transfer(SSISlave *dev, uint32_t val)
|
|
{
|
|
ssi_sd_state *s = FROM_SSI_SLAVE(ssi_sd_state, dev);
|
|
|
|
/* Special case: allow CMD12 (STOP TRANSMISSION) while reading data. */
|
|
if (s->mode == SSI_SD_DATA_READ && val == 0x4d) {
|
|
s->mode = SSI_SD_CMD;
|
|
/* There must be at least one byte delay before the card responds. */
|
|
s->stopping = 1;
|
|
}
|
|
|
|
switch (s->mode) {
|
|
case SSI_SD_CMD:
|
|
if (val == 0xff) {
|
|
DPRINTF("NULL command\n");
|
|
return 0xff;
|
|
}
|
|
s->cmd = val & 0x3f;
|
|
s->mode = SSI_SD_CMDARG;
|
|
s->arglen = 0;
|
|
return 0xff;
|
|
case SSI_SD_CMDARG:
|
|
if (s->arglen == 4) {
|
|
SDRequest request;
|
|
uint8_t longresp[16];
|
|
/* FIXME: Check CRC. */
|
|
request.cmd = s->cmd;
|
|
request.arg = (s->cmdarg[0] << 24) | (s->cmdarg[1] << 16)
|
|
| (s->cmdarg[2] << 8) | s->cmdarg[3];
|
|
DPRINTF("CMD%d arg 0x%08x\n", s->cmd, request.arg);
|
|
s->arglen = sd_do_command(s->sd, &request, longresp);
|
|
if (s->arglen <= 0) {
|
|
s->arglen = 1;
|
|
s->response[0] = 4;
|
|
DPRINTF("SD command failed\n");
|
|
} else if (s->cmd == 58) {
|
|
/* CMD58 returns R3 response (OCR) */
|
|
DPRINTF("Returned OCR\n");
|
|
s->arglen = 5;
|
|
s->response[0] = 1;
|
|
memcpy(&s->response[1], longresp, 4);
|
|
} else if (s->arglen != 4) {
|
|
BADF("Unexpected response to cmd %d\n", s->cmd);
|
|
/* Illegal command is about as near as we can get. */
|
|
s->arglen = 1;
|
|
s->response[0] = 4;
|
|
} else {
|
|
/* All other commands return status. */
|
|
uint32_t cardstatus;
|
|
uint16_t status;
|
|
/* CMD13 returns a 2-byte statuse work. Other commands
|
|
only return the first byte. */
|
|
s->arglen = (s->cmd == 13) ? 2 : 1;
|
|
cardstatus = (longresp[0] << 24) | (longresp[1] << 16)
|
|
| (longresp[2] << 8) | longresp[3];
|
|
status = 0;
|
|
if (((cardstatus >> 9) & 0xf) < 4)
|
|
status |= SSI_SDR_IDLE;
|
|
if (cardstatus & ERASE_RESET)
|
|
status |= SSI_SDR_ERASE_RESET;
|
|
if (cardstatus & ILLEGAL_COMMAND)
|
|
status |= SSI_SDR_ILLEGAL_COMMAND;
|
|
if (cardstatus & COM_CRC_ERROR)
|
|
status |= SSI_SDR_COM_CRC_ERROR;
|
|
if (cardstatus & ERASE_SEQ_ERROR)
|
|
status |= SSI_SDR_ERASE_SEQ_ERROR;
|
|
if (cardstatus & ADDRESS_ERROR)
|
|
status |= SSI_SDR_ADDRESS_ERROR;
|
|
if (cardstatus & CARD_IS_LOCKED)
|
|
status |= SSI_SDR_LOCKED;
|
|
if (cardstatus & (LOCK_UNLOCK_FAILED | WP_ERASE_SKIP))
|
|
status |= SSI_SDR_WP_ERASE;
|
|
if (cardstatus & SD_ERROR)
|
|
status |= SSI_SDR_ERROR;
|
|
if (cardstatus & CC_ERROR)
|
|
status |= SSI_SDR_CC_ERROR;
|
|
if (cardstatus & CARD_ECC_FAILED)
|
|
status |= SSI_SDR_ECC_FAILED;
|
|
if (cardstatus & WP_VIOLATION)
|
|
status |= SSI_SDR_WP_VIOLATION;
|
|
if (cardstatus & ERASE_PARAM)
|
|
status |= SSI_SDR_ERASE_PARAM;
|
|
if (cardstatus & (OUT_OF_RANGE | CID_CSD_OVERWRITE))
|
|
status |= SSI_SDR_OUT_OF_RANGE;
|
|
/* ??? Don't know what Parameter Error really means, so
|
|
assume it's set if the second byte is nonzero. */
|
|
if (status & 0xff)
|
|
status |= SSI_SDR_PARAMETER_ERROR;
|
|
s->response[0] = status >> 8;
|
|
s->response[1] = status;
|
|
DPRINTF("Card status 0x%02x\n", status);
|
|
}
|
|
s->mode = SSI_SD_RESPONSE;
|
|
s->response_pos = 0;
|
|
} else {
|
|
s->cmdarg[s->arglen++] = val;
|
|
}
|
|
return 0xff;
|
|
case SSI_SD_RESPONSE:
|
|
if (s->stopping) {
|
|
s->stopping = 0;
|
|
return 0xff;
|
|
}
|
|
if (s->response_pos < s->arglen) {
|
|
DPRINTF("Response 0x%02x\n", s->response[s->response_pos]);
|
|
return s->response[s->response_pos++];
|
|
}
|
|
if (sd_data_ready(s->sd)) {
|
|
DPRINTF("Data read\n");
|
|
s->mode = SSI_SD_DATA_START;
|
|
} else {
|
|
DPRINTF("End of command\n");
|
|
s->mode = SSI_SD_CMD;
|
|
}
|
|
return 0xff;
|
|
case SSI_SD_DATA_START:
|
|
DPRINTF("Start read block\n");
|
|
s->mode = SSI_SD_DATA_READ;
|
|
return 0xfe;
|
|
case SSI_SD_DATA_READ:
|
|
val = sd_read_data(s->sd);
|
|
if (!sd_data_ready(s->sd)) {
|
|
DPRINTF("Data read end\n");
|
|
s->mode = SSI_SD_CMD;
|
|
}
|
|
return val;
|
|
}
|
|
/* Should never happen. */
|
|
return 0xff;
|
|
}
|
|
|
|
static void ssi_sd_save(QEMUFile *f, void *opaque)
|
|
{
|
|
SSISlave *ss = SSI_SLAVE(opaque);
|
|
ssi_sd_state *s = (ssi_sd_state *)opaque;
|
|
int i;
|
|
|
|
qemu_put_be32(f, s->mode);
|
|
qemu_put_be32(f, s->cmd);
|
|
for (i = 0; i < 4; i++)
|
|
qemu_put_be32(f, s->cmdarg[i]);
|
|
for (i = 0; i < 5; i++)
|
|
qemu_put_be32(f, s->response[i]);
|
|
qemu_put_be32(f, s->arglen);
|
|
qemu_put_be32(f, s->response_pos);
|
|
qemu_put_be32(f, s->stopping);
|
|
|
|
qemu_put_be32(f, ss->cs);
|
|
}
|
|
|
|
static int ssi_sd_load(QEMUFile *f, void *opaque, int version_id)
|
|
{
|
|
SSISlave *ss = SSI_SLAVE(opaque);
|
|
ssi_sd_state *s = (ssi_sd_state *)opaque;
|
|
int i;
|
|
|
|
if (version_id != 1)
|
|
return -EINVAL;
|
|
|
|
s->mode = qemu_get_be32(f);
|
|
s->cmd = qemu_get_be32(f);
|
|
for (i = 0; i < 4; i++)
|
|
s->cmdarg[i] = qemu_get_be32(f);
|
|
for (i = 0; i < 5; i++)
|
|
s->response[i] = qemu_get_be32(f);
|
|
s->arglen = qemu_get_be32(f);
|
|
if (s->mode == SSI_SD_CMDARG &&
|
|
(s->arglen < 0 || s->arglen >= ARRAY_SIZE(s->cmdarg))) {
|
|
return -EINVAL;
|
|
}
|
|
s->response_pos = qemu_get_be32(f);
|
|
s->stopping = qemu_get_be32(f);
|
|
if (s->mode == SSI_SD_RESPONSE &&
|
|
(s->response_pos < 0 || s->response_pos >= ARRAY_SIZE(s->response) ||
|
|
(!s->stopping && s->arglen > ARRAY_SIZE(s->response)))) {
|
|
return -EINVAL;
|
|
}
|
|
|
|
ss->cs = qemu_get_be32(f);
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int ssi_sd_init(SSISlave *d)
|
|
{
|
|
DeviceState *dev = DEVICE(d);
|
|
ssi_sd_state *s = FROM_SSI_SLAVE(ssi_sd_state, d);
|
|
DriveInfo *dinfo;
|
|
|
|
s->mode = SSI_SD_CMD;
|
|
/* FIXME use a qdev drive property instead of drive_get_next() */
|
|
dinfo = drive_get_next(IF_SD);
|
|
s->sd = sd_init(dinfo ? blk_by_legacy_dinfo(dinfo) : NULL, true);
|
|
if (s->sd == NULL) {
|
|
return -1;
|
|
}
|
|
register_savevm(dev, "ssi_sd", -1, 1, ssi_sd_save, ssi_sd_load, s);
|
|
return 0;
|
|
}
|
|
|
|
static void ssi_sd_class_init(ObjectClass *klass, void *data)
|
|
{
|
|
SSISlaveClass *k = SSI_SLAVE_CLASS(klass);
|
|
|
|
k->init = ssi_sd_init;
|
|
k->transfer = ssi_sd_transfer;
|
|
k->cs_polarity = SSI_CS_LOW;
|
|
}
|
|
|
|
static const TypeInfo ssi_sd_info = {
|
|
.name = "ssi-sd",
|
|
.parent = TYPE_SSI_SLAVE,
|
|
.instance_size = sizeof(ssi_sd_state),
|
|
.class_init = ssi_sd_class_init,
|
|
};
|
|
|
|
static void ssi_sd_register_types(void)
|
|
{
|
|
type_register_static(&ssi_sd_info);
|
|
}
|
|
|
|
type_init(ssi_sd_register_types)
|