eepro100.c 66.1 KB
Newer Older
ths's avatar
ths committed
1
2
3
/*
 * QEMU i8255x (PRO100) emulation
 *
4
 * Copyright (C) 2006-2011 Stefan Weil
ths's avatar
ths committed
5
6
7
8
 *
 * Portions of the code are copies from grub / etherboot eepro100.c
 * and linux e100.c.
 *
9
 * This program is free software: you can redistribute it and/or modify
ths's avatar
ths committed
10
 * it under the terms of the GNU General Public License as published by
11
12
 * the Free Software Foundation, either version 2 of the License, or
 * (at your option) version 3 or any later version.
ths's avatar
ths committed
13
14
15
16
17
18
19
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
20
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
ths's avatar
ths committed
21
22
 *
 * Tested features (i82559):
Stefan Weil's avatar
Stefan Weil committed
23
 *      PXE boot (i386) ok
ths's avatar
ths committed
24
25
26
27
28
29
30
31
32
33
 *      Linux networking (i386) ok
 *
 * Untested:
 *      non-i386 platforms
 *      Windows networking
 *
 * References:
 *
 * Intel 8255x 10/100 Mbps Ethernet Controller Family
 * Open Source Software Developer Manual
Stefan Weil's avatar
Stefan Weil committed
34
35
36
37
38
39
40
41
 *
 * TODO:
 *      * PHY emulation should be separated from nic emulation.
 *        Most nic emulations could share the same phy code.
 *      * i82550 is untested. It is programmed like the i82559.
 *      * i82562 is untested. It is programmed like the i82559.
 *      * Power management (i82558 and later) is not implemented.
 *      * Wake-on-LAN is not implemented.
ths's avatar
ths committed
42
43
44
 */

#include <stddef.h>             /* offsetof */
pbrook's avatar
pbrook committed
45
46
47
#include "hw.h"
#include "pci.h"
#include "net.h"
ths's avatar
ths committed
48
#include "eeprom93xx.h"
49
#include "sysemu.h"
ths's avatar
ths committed
50
51
52

#define KiB 1024

53
/* Debug EEPRO100 card. */
54
55
56
#if 0
# define DEBUG_EEPRO100
#endif
ths's avatar
ths committed
57
58

#ifdef DEBUG_EEPRO100
59
#define logout(fmt, ...) fprintf(stderr, "EE100\t%-24s" fmt, __func__, ## __VA_ARGS__)
ths's avatar
ths committed
60
#else
61
#define logout(fmt, ...) ((void)0)
ths's avatar
ths committed
62
63
64
#endif

/* Set flags to 0 to disable debug output. */
65
66
67
68
69
#define INT     1       /* interrupt related actions */
#define MDI     1       /* mdi related actions */
#define OTHER   1
#define RXTX    1
#define EEPROM  1       /* eeprom related actions */
ths's avatar
ths committed
70
71
72

#define TRACE(flag, command) ((flag) ? (command) : (void)0)

73
#define missing(text) fprintf(stderr, "eepro100: feature is missing in this emulation: " text "\n")
ths's avatar
ths committed
74
75
76
77

#define MAX_ETH_FRAME_SIZE 1514

/* This driver supports several different devices which are declared here. */
78
#define i82550          0x82550
ths's avatar
ths committed
79
#define i82551          0x82551
80
#define i82557A         0x82557a
ths's avatar
ths committed
81
82
#define i82557B         0x82557b
#define i82557C         0x82557c
83
#define i82558A         0x82558a
ths's avatar
ths committed
84
#define i82558B         0x82558b
85
86
#define i82559A         0x82559a
#define i82559B         0x82559b
ths's avatar
ths committed
87
88
89
#define i82559C         0x82559c
#define i82559ER        0x82559e
#define i82562          0x82562
90
#define i82801          0x82801
ths's avatar
ths committed
91

92
/* Use 64 word EEPROM. TODO: could be a runtime option. */
ths's avatar
ths committed
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
#define EEPROM_SIZE     64

#define PCI_MEM_SIZE            (4 * KiB)
#define PCI_IO_SIZE             64
#define PCI_FLASH_SIZE          (128 * KiB)

#define BIT(n) (1 << (n))
#define BITS(n, m) (((0xffffffffU << (31 - n)) >> (31 - n + m)) << m)

/* The SCB accepts the following controls for the Tx and Rx units: */
#define  CU_NOP         0x0000  /* No operation. */
#define  CU_START       0x0010  /* CU start. */
#define  CU_RESUME      0x0020  /* CU resume. */
#define  CU_STATSADDR   0x0040  /* Load dump counters address. */
#define  CU_SHOWSTATS   0x0050  /* Dump statistical counters. */
#define  CU_CMD_BASE    0x0060  /* Load CU base address. */
#define  CU_DUMPSTATS   0x0070  /* Dump and reset statistical counters. */
#define  CU_SRESUME     0x00a0  /* CU static resume. */

#define  RU_NOP         0x0000
#define  RX_START       0x0001
#define  RX_RESUME      0x0002
Stefan Weil's avatar
Stefan Weil committed
115
#define  RU_ABORT       0x0004
ths's avatar
ths committed
116
117
118
119
120
#define  RX_ADDR_LOAD   0x0006
#define  RX_RESUMENR    0x0007
#define INT_MASK        0x0100
#define DRVR_INT        0x0200  /* Driver generated interrupt. */

121
122
123
124
125
126
127
128
129
130
typedef struct {
    PCIDeviceInfo pci;
    uint32_t device;
    uint16_t device_id;
    uint8_t revision;
    uint8_t stats_size;
    bool has_extended_tcb_support;
    bool power_management;
} E100PCIDeviceInfo;

ths's avatar
ths committed
131
132
133
/* Offsets to the various registers.
   All accesses need not be longword aligned. */
enum speedo_offsets {
134
    SCBStatus = 0,              /* Status Word. */
ths's avatar
ths committed
135
136
137
138
139
    SCBAck = 1,
    SCBCmd = 2,                 /* Rx/Command Unit command and status. */
    SCBIntmask = 3,
    SCBPointer = 4,             /* General purpose pointer. */
    SCBPort = 8,                /* Misc. commands and operands.  */
140
141
    SCBflash = 12,              /* Flash memory control. */
    SCBeeprom = 14,             /* EEPROM control. */
ths's avatar
ths committed
142
143
    SCBCtrlMDI = 16,            /* MDI interface control. */
    SCBEarlyRx = 20,            /* Early receive byte count. */
144
145
146
147
    SCBFlow = 24,               /* Flow Control. */
    SCBpmdr = 27,               /* Power Management Driver. */
    SCBgctrl = 28,              /* General Control. */
    SCBgstat = 29,              /* General Status. */
ths's avatar
ths committed
148
149
150
151
152
153
154
};

/* A speedo3 transmit buffer descriptor with two buffers... */
typedef struct {
    uint16_t status;
    uint16_t command;
    uint32_t link;              /* void * */
Stefan Weil's avatar
Stefan Weil committed
155
    uint32_t tbd_array_addr;    /* transmit buffer descriptor array address. */
ths's avatar
ths committed
156
157
158
    uint16_t tcb_bytes;         /* transmit command block byte count (in lower 14 bits */
    uint8_t tx_threshold;       /* transmit threshold */
    uint8_t tbd_count;          /* TBD number */
Stefan Weil's avatar
Stefan Weil committed
159
160
161
162
163
164
165
#if 0
    /* This constitutes two "TBD" entries: hdr and data */
    uint32_t tx_buf_addr0;  /* void *, header of frame to be transmitted.  */
    int32_t  tx_buf_size0;  /* Length of Tx hdr. */
    uint32_t tx_buf_addr1;  /* void *, data to be transmitted.  */
    int32_t  tx_buf_size1;  /* Length of Tx data. */
#endif
166
} eepro100_tx_t;
ths's avatar
ths committed
167
168
169
170
171
172
173
174
175
176

/* Receive frame descriptor. */
typedef struct {
    int16_t status;
    uint16_t command;
    uint32_t link;              /* struct RxFD * */
    uint32_t rx_buf_addr;       /* void * */
    uint16_t count;
    uint16_t size;
    char packet[MAX_ETH_FRAME_SIZE + 4];
177
} eepro100_rx_t;
ths's avatar
ths committed
178

179
180
181
182
183
184
185
186
187
188
189
190
191
192
typedef enum {
    COMMAND_EL = BIT(15),
    COMMAND_S = BIT(14),
    COMMAND_I = BIT(13),
    COMMAND_NC = BIT(4),
    COMMAND_SF = BIT(3),
    COMMAND_CMD = BITS(2, 0),
} scb_command_bit;

typedef enum {
    STATUS_C = BIT(15),
    STATUS_OK = BIT(13),
} scb_status_bit;

ths's avatar
ths committed
193
194
typedef struct {
    uint32_t tx_good_frames, tx_max_collisions, tx_late_collisions,
195
196
             tx_underruns, tx_lost_crs, tx_deferred, tx_single_collisions,
             tx_multiple_collisions, tx_total_collisions;
ths's avatar
ths committed
197
    uint32_t rx_good_frames, rx_crc_errors, rx_alignment_errors,
198
199
             rx_resource_errors, rx_overrun_errors, rx_cdt_errors,
             rx_short_frame_errors;
ths's avatar
ths committed
200
201
    uint32_t fc_xmt_pause, fc_rcv_pause, fc_rcv_unsupported;
    uint16_t xmt_tco_frames, rcv_tco_frames;
202
203
    /* TODO: i82559 has six reserved statistics but a total of 24 dwords. */
    uint32_t reserved[4];
204
} eepro100_stats_t;
ths's avatar
ths committed
205
206
207
208
209
210
211

typedef enum {
    cu_idle = 0,
    cu_suspended = 1,
    cu_active = 2,
    cu_lpq_active = 2,
    cu_hqp_active = 3
212
} cu_state_t;
ths's avatar
ths committed
213
214
215
216
217
218

typedef enum {
    ru_idle = 0,
    ru_suspended = 1,
    ru_no_resources = 2,
    ru_ready = 4
219
} ru_state_t;
ths's avatar
ths committed
220
221

typedef struct {
222
    PCIDevice dev;
223
224
    /* Hash register (multicast mask array, multiple individual addresses). */
    uint8_t mult[8];
ths's avatar
ths committed
225
    int mmio_index;
226
    NICState *nic;
227
    NICConf conf;
ths's avatar
ths committed
228
229
    uint8_t scb_stat;           /* SCB stat/ack byte */
    uint8_t int_stat;           /* PCI interrupt status */
230
    /* region must not be saved by nic_save. */
231
    uint32_t region1;           /* PCI region 1 address */
ths's avatar
ths committed
232
    uint16_t mdimem[32];
233
    eeprom_t *eeprom;
ths's avatar
ths committed
234
235
236
237
238
239
240
241
    uint32_t device;            /* device variant */
    uint32_t pointer;
    /* (cu_base + cu_offset) address the next command block in the command block list. */
    uint32_t cu_base;           /* CU base address */
    uint32_t cu_offset;         /* CU address offset */
    /* (ru_base + ru_offset) address the RFD in the Receive Frame Area. */
    uint32_t ru_base;           /* RU base address */
    uint32_t ru_offset;         /* RU address offset */
242
    uint32_t statsaddr;         /* pointer to eepro100_stats_t */
243

244
245
246
247
248
    /* Temporary status information (no need to save these values),
     * used while processing CU commands. */
    eepro100_tx_t tx;           /* transmit buffer descriptor */
    uint32_t cb_address;        /* = cu_base + cu_offset */

249
250
251
    /* Statistical counters. Also used for wake-up packet (i82559). */
    eepro100_stats_t statistics;

ths's avatar
ths committed
252
253
254
255
256
    /* Configuration bytes. */
    uint8_t configuration[22];

    /* Data in mem is always in the byte order of the controller (le). */
    uint8_t mem[PCI_MEM_SIZE];
Juan Quintela's avatar
Juan Quintela committed
257
258
    /* vmstate for each particular nic */
    VMStateDescription *vmstate;
259
260
261
262

    /* Quasi static device properties (no need to save them). */
    uint16_t stats_size;
    bool has_extended_tcb_support;
ths's avatar
ths committed
263
264
} EEPRO100State;

Stefan Weil's avatar
Stefan Weil committed
265
266
267
268
269
270
271
272
273
274
275
/* Word indices in EEPROM. */
typedef enum {
    EEPROM_CNFG_MDIX  = 0x03,
    EEPROM_ID         = 0x05,
    EEPROM_PHY_ID     = 0x06,
    EEPROM_VENDOR_ID  = 0x0c,
    EEPROM_CONFIG_ASF = 0x0d,
    EEPROM_DEVICE_ID  = 0x23,
    EEPROM_SMBUS_ADDR = 0x90,
} EEPROMOffset;

276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
/* Bit values for EEPROM ID word. */
typedef enum {
    EEPROM_ID_MDM = BIT(0),     /* Modem */
    EEPROM_ID_STB = BIT(1),     /* Standby Enable */
    EEPROM_ID_WMR = BIT(2),     /* ??? */
    EEPROM_ID_WOL = BIT(5),     /* Wake on LAN */
    EEPROM_ID_DPD = BIT(6),     /* Deep Power Down */
    EEPROM_ID_ALT = BIT(7),     /* */
    /* BITS(10, 8) device revision */
    EEPROM_ID_BD = BIT(11),     /* boot disable */
    EEPROM_ID_ID = BIT(13),     /* id bit */
    /* BITS(15, 14) signature */
    EEPROM_ID_VALID = BIT(14),  /* signature for valid eeprom */
} eeprom_id_bit;

ths's avatar
ths committed
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
/* Default values for MDI (PHY) registers */
static const uint16_t eepro100_mdi_default[] = {
    /* MDI Registers 0 - 6, 7 */
    0x3000, 0x780d, 0x02a8, 0x0154, 0x05e1, 0x0000, 0x0000, 0x0000,
    /* MDI Registers 8 - 15 */
    0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
    /* MDI Registers 16 - 31 */
    0x0003, 0x0000, 0x0001, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
    0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
};

/* Readonly mask for MDI (PHY) registers */
static const uint16_t eepro100_mdi_mask[] = {
    0x0000, 0xffff, 0xffff, 0xffff, 0xc01f, 0xffff, 0xffff, 0x0000,
    0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
    0x0fff, 0x0000, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff,
    0xffff, 0xffff, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000, 0x0000,
};

310
311
312
313
314
315
316
/* XXX: optimize */
static void stl_le_phys(target_phys_addr_t addr, uint32_t val)
{
    val = cpu_to_le32(val);
    cpu_physical_memory_write(addr, (const uint8_t *)&val, sizeof(val));
}

ths's avatar
ths committed
317
318
319
320
#define POLYNOMIAL 0x04c11db6

/* From FreeBSD */
/* XXX: optimize */
Stefan Weil's avatar
Stefan Weil committed
321
static unsigned compute_mcast_idx(const uint8_t * ep)
ths's avatar
ths committed
322
323
324
325
326
327
328
329
330
331
332
333
{
    uint32_t crc;
    int carry, i, j;
    uint8_t b;

    crc = 0xffffffff;
    for (i = 0; i < 6; i++) {
        b = *ep++;
        for (j = 0; j < 8; j++) {
            carry = ((crc & 0x80000000L) ? 1 : 0) ^ (b & 0x01);
            crc <<= 1;
            b >>= 1;
334
            if (carry) {
ths's avatar
ths committed
335
                crc = ((crc ^ POLYNOMIAL) | carry);
336
            }
ths's avatar
ths committed
337
338
        }
    }
Stefan Weil's avatar
Stefan Weil committed
339
    return (crc & BITS(7, 2)) >> 2;
ths's avatar
ths committed
340
341
342
343
344
345
346
}

#if defined(DEBUG_EEPRO100)
static const char *nic_dump(const uint8_t * buf, unsigned size)
{
    static char dump[3 * 16 + 1];
    char *p = &dump[0];
347
    if (size > 16) {
ths's avatar
ths committed
348
        size = 16;
349
    }
ths's avatar
ths committed
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
    while (size-- > 0) {
        p += sprintf(p, " %02x", *buf++);
    }
    return dump;
}
#endif                          /* DEBUG_EEPRO100 */

enum scb_stat_ack {
    stat_ack_not_ours = 0x00,
    stat_ack_sw_gen = 0x04,
    stat_ack_rnr = 0x10,
    stat_ack_cu_idle = 0x20,
    stat_ack_frame_rx = 0x40,
    stat_ack_cu_cmd_done = 0x80,
    stat_ack_not_present = 0xFF,
    stat_ack_rx = (stat_ack_sw_gen | stat_ack_rnr | stat_ack_frame_rx),
    stat_ack_tx = (stat_ack_cu_idle | stat_ack_cu_cmd_done),
};

static void disable_interrupt(EEPRO100State * s)
{
    if (s->int_stat) {
372
        TRACE(INT, logout("interrupt disabled\n"));
373
        qemu_irq_lower(s->dev.irq[0]);
ths's avatar
ths committed
374
375
376
377
378
379
380
        s->int_stat = 0;
    }
}

static void enable_interrupt(EEPRO100State * s)
{
    if (!s->int_stat) {
381
        TRACE(INT, logout("interrupt enabled\n"));
382
        qemu_irq_raise(s->dev.irq[0]);
ths's avatar
ths committed
383
384
385
386
387
388
389
390
391
392
393
394
395
        s->int_stat = 1;
    }
}

static void eepro100_acknowledge(EEPRO100State * s)
{
    s->scb_stat &= ~s->mem[SCBAck];
    s->mem[SCBAck] = s->scb_stat;
    if (s->scb_stat == 0) {
        disable_interrupt(s);
    }
}

396
static void eepro100_interrupt(EEPRO100State * s, uint8_t status)
ths's avatar
ths committed
397
398
{
    uint8_t mask = ~s->mem[SCBIntmask];
399
400
401
    s->mem[SCBAck] |= status;
    status = s->scb_stat = s->mem[SCBAck];
    status &= (mask | 0x0f);
Stefan Weil's avatar
Stefan Weil committed
402
403
404
#if 0
    status &= (~s->mem[SCBIntmask] | 0x0xf);
#endif
405
    if (status && (mask & 0x01)) {
ths's avatar
ths committed
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
        /* SCB mask and SCB Bit M do not disable interrupt. */
        enable_interrupt(s);
    } else if (s->int_stat) {
        disable_interrupt(s);
    }
}

static void eepro100_cx_interrupt(EEPRO100State * s)
{
    /* CU completed action command. */
    /* Transmit not ok (82557 only, not in emulation). */
    eepro100_interrupt(s, 0x80);
}

static void eepro100_cna_interrupt(EEPRO100State * s)
{
    /* CU left the active state. */
    eepro100_interrupt(s, 0x20);
}

static void eepro100_fr_interrupt(EEPRO100State * s)
{
    /* RU received a complete frame. */
    eepro100_interrupt(s, 0x40);
}

static void eepro100_rnr_interrupt(EEPRO100State * s)
{
    /* RU is not ready. */
    eepro100_interrupt(s, 0x10);
}

static void eepro100_mdi_interrupt(EEPRO100State * s)
{
    /* MDI completed read or write cycle. */
    eepro100_interrupt(s, 0x08);
}

static void eepro100_swi_interrupt(EEPRO100State * s)
{
    /* Software has requested an interrupt. */
    eepro100_interrupt(s, 0x04);
}

#if 0
static void eepro100_fcp_interrupt(EEPRO100State * s)
{
    /* Flow control pause interrupt (82558 and later). */
    eepro100_interrupt(s, 0x01);
}
#endif

458
static void e100_pci_reset(EEPRO100State * s, E100PCIDeviceInfo *e100_device)
ths's avatar
ths committed
459
460
{
    uint32_t device = s->device;
461
    uint8_t *pci_conf = s->dev.config;
ths's avatar
ths committed
462

463
    TRACE(OTHER, logout("%p\n", s));
ths's avatar
ths committed
464
465

    /* PCI Vendor ID */
466
    pci_config_set_vendor_id(pci_conf, PCI_VENDOR_ID_INTEL);
467
468
    /* PCI Device ID */
    pci_config_set_device_id(pci_conf, e100_device->device_id);
ths's avatar
ths committed
469
    /* PCI Status */
470
471
    pci_set_word(pci_conf + PCI_STATUS, PCI_STATUS_DEVSEL_MEDIUM |
                                        PCI_STATUS_FAST_BACK);
ths's avatar
ths committed
472
    /* PCI Revision ID */
473
    pci_config_set_revision(pci_conf, e100_device->revision);
474
    pci_config_set_class(pci_conf, PCI_CLASS_NETWORK_ETHERNET);
ths's avatar
ths committed
475
    /* PCI Latency Timer */
476
    pci_set_byte(pci_conf + PCI_LATENCY_TIMER, 0x20);   /* latency timer = 32 clocks */
477
    /* Capability Pointer is set by PCI framework. */
478
479
480
    /* Interrupt Line */
    /* Interrupt Pin */
    pci_set_byte(pci_conf + PCI_INTERRUPT_PIN, 1);      /* interrupt pin A */
ths's avatar
ths committed
481
    /* Minimum Grant */
482
    pci_set_byte(pci_conf + PCI_MIN_GNT, 0x08);
ths's avatar
ths committed
483
    /* Maximum Latency */
484
    pci_set_byte(pci_conf + PCI_MAX_LAT, 0x18);
ths's avatar
ths committed
485

486
487
488
    s->stats_size = e100_device->stats_size;
    s->has_extended_tcb_support = e100_device->has_extended_tcb_support;

ths's avatar
ths committed
489
    switch (device) {
490
    case i82550:
ths's avatar
ths committed
491
    case i82551:
492
    case i82557A:
ths's avatar
ths committed
493
494
    case i82557B:
    case i82557C:
495
    case i82558A:
ths's avatar
ths committed
496
    case i82558B:
497
498
    case i82559A:
    case i82559B:
499
500
    case i82559ER:
    case i82562:
501
    case i82801:
ths's avatar
ths committed
502
503
        break;
    case i82559C:
504
#if EEPROM_SIZE > 0
505
        pci_set_word(pci_conf + PCI_SUBSYSTEM_VENDOR_ID, PCI_VENDOR_ID_INTEL);
506
        pci_set_word(pci_conf + PCI_SUBSYSTEM_ID, 0x0040);
507
#endif
ths's avatar
ths committed
508
509
510
511
512
        break;
    default:
        logout("Device %X is undefined!\n", device);
    }

513
514
515
    /* Standard TxCB. */
    s->configuration[6] |= BIT(4);

516
    /* Standard statistical counters. */
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
    s->configuration[6] |= BIT(5);

    if (s->stats_size == 80) {
        /* TODO: check TCO Statistical Counters bit. Documentation not clear. */
        if (s->configuration[6] & BIT(2)) {
            /* TCO statistical counters. */
            assert(s->configuration[6] & BIT(5));
        } else {
            if (s->configuration[6] & BIT(5)) {
                /* No extended statistical counters, i82557 compatible. */
                s->stats_size = 64;
            } else {
                /* i82558 compatible. */
                s->stats_size = 76;
            }
        }
    } else {
        if (s->configuration[6] & BIT(5)) {
            /* No extended statistical counters. */
            s->stats_size = 64;
        }
    }
    assert(s->stats_size > 0 && s->stats_size <= sizeof(s->statistics));

541
    if (e100_device->power_management) {
542
        /* Power Management Capabilities */
543
        int cfg_offset = 0xdc;
544
545
        int r = pci_add_capability(&s->dev, PCI_CAP_ID_PM,
                                   cfg_offset, PCI_PM_SIZEOF);
546
547
        assert(r >= 0);
        pci_set_word(pci_conf + cfg_offset + PCI_PM_PMC, 0x7e21);
548
#if 0 /* TODO: replace dummy code for power management emulation. */
549
550
551
552
        /* TODO: Power Management Control / Status. */
        pci_set_word(pci_conf + cfg_offset + PCI_PM_CTRL, 0x0000);
        /* TODO: Ethernet Power Consumption Registers (i82559 and later). */
        pci_set_byte(pci_conf + cfg_offset + PCI_PM_PPB_EXTENSIONS, 0x0000);
553
#endif
554
555
556
    }

#if EEPROM_SIZE > 0
ths's avatar
ths committed
557
    if (device == i82557C || device == i82558B || device == i82559C) {
Stefan Weil's avatar
Stefan Weil committed
558
559
560
561
562
563
564
565
566
567
        /*
        TODO: get vendor id from EEPROM for i82557C or later.
        TODO: get device id from EEPROM for i82557C or later.
        TODO: status bit 4 can be disabled by EEPROM for i82558, i82559.
        TODO: header type is determined by EEPROM for i82559.
        TODO: get subsystem id from EEPROM for i82557C or later.
        TODO: get subsystem vendor id from EEPROM for i82557C or later.
        TODO: exp. rom baddr depends on a bit in EEPROM for i82558 or later.
        TODO: capability pointer depends on EEPROM for i82558.
        */
ths's avatar
ths committed
568
569
        logout("Get device id and revision from EEPROM!!!\n");
    }
570
#endif /* EEPROM_SIZE > 0 */
ths's avatar
ths committed
571
572
573
574
575
576
}

static void nic_selective_reset(EEPRO100State * s)
{
    size_t i;
    uint16_t *eeprom_contents = eeprom93xx_data(s->eeprom);
Stefan Weil's avatar
Stefan Weil committed
577
578
579
#if 0
    eeprom93xx_reset(s->eeprom);
#endif
580
    memcpy(eeprom_contents, s->conf.macaddr.a, 6);
581
    eeprom_contents[EEPROM_ID] = EEPROM_ID_VALID;
582
583
    if (s->device == i82557B || s->device == i82557C)
        eeprom_contents[5] = 0x0100;
Stefan Weil's avatar
Stefan Weil committed
584
    eeprom_contents[EEPROM_PHY_ID] = 1;
ths's avatar
ths committed
585
586
587
588
589
    uint16_t sum = 0;
    for (i = 0; i < EEPROM_SIZE - 1; i++) {
        sum += eeprom_contents[i];
    }
    eeprom_contents[EEPROM_SIZE - 1] = 0xbaba - sum;
590
    TRACE(EEPROM, logout("checksum=0x%04x\n", eeprom_contents[EEPROM_SIZE - 1]));
ths's avatar
ths committed
591
592
593
594
595
596
597
598
599
600
601

    memset(s->mem, 0, sizeof(s->mem));
    uint32_t val = BIT(21);
    memcpy(&s->mem[SCBCtrlMDI], &val, sizeof(val));

    assert(sizeof(s->mdimem) == sizeof(eepro100_mdi_default));
    memcpy(&s->mdimem[0], &eepro100_mdi_default[0], sizeof(s->mdimem));
}

static void nic_reset(void *opaque)
{
602
    EEPRO100State *s = opaque;
603
    TRACE(OTHER, logout("%p\n", s));
604
    /* TODO: Clearing of hash register for selective reset, too? */
Stefan Weil's avatar
Stefan Weil committed
605
    memset(&s->mult[0], 0, sizeof(s->mult));
ths's avatar
ths committed
606
607
608
609
    nic_selective_reset(s);
}

#if defined(DEBUG_EEPRO100)
Stefan Weil's avatar
Stefan Weil committed
610
static const char * const e100_reg[PCI_IO_SIZE / 4] = {
ths's avatar
ths committed
611
612
613
614
615
616
    "Command/Status",
    "General Pointer",
    "Port",
    "EEPROM/Flash Control",
    "MDI Control",
    "Receive DMA Byte Count",
Stefan Weil's avatar
Stefan Weil committed
617
    "Flow Control",
ths's avatar
ths committed
618
619
620
621
622
    "General Status/Control"
};

static char *regname(uint32_t addr)
{
623
    static char buf[32];
ths's avatar
ths committed
624
    if (addr < PCI_IO_SIZE) {
Stefan Weil's avatar
Stefan Weil committed
625
        const char *r = e100_reg[addr / 4];
ths's avatar
ths committed
626
        if (r != 0) {
627
            snprintf(buf, sizeof(buf), "%s+%u", r, addr % 4);
ths's avatar
ths committed
628
        } else {
629
            snprintf(buf, sizeof(buf), "0x%02x", addr);
ths's avatar
ths committed
630
631
        }
    } else {
632
        snprintf(buf, sizeof(buf), "??? 0x%08x", addr);
ths's avatar
ths committed
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
    }
    return buf;
}
#endif                          /* DEBUG_EEPRO100 */

/*****************************************************************************
 *
 * Command emulation.
 *
 ****************************************************************************/

#if 0
static uint16_t eepro100_read_command(EEPRO100State * s)
{
    uint16_t val = 0xffff;
Stefan Weil's avatar
Stefan Weil committed
648
    TRACE(OTHER, logout("val=0x%04x\n", val));
ths's avatar
ths committed
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
    return val;
}
#endif

/* Commands that can be put in a command list entry. */
enum commands {
    CmdNOp = 0,
    CmdIASetup = 1,
    CmdConfigure = 2,
    CmdMulticastList = 3,
    CmdTx = 4,
    CmdTDR = 5,                 /* load microcode */
    CmdDump = 6,
    CmdDiagnose = 7,

    /* And some extra flags: */
    CmdSuspend = 0x4000,        /* Suspend after completion. */
    CmdIntr = 0x2000,           /* Interrupt after completion. */
    CmdTxFlex = 0x0008,         /* Use "Flexible mode" for CmdTx command. */
};

670
static cu_state_t get_cu_state(EEPRO100State * s)
ths's avatar
ths committed
671
{
672
    return ((s->mem[SCBStatus] & BITS(7, 6)) >> 6);
ths's avatar
ths committed
673
674
}

675
static void set_cu_state(EEPRO100State * s, cu_state_t state)
ths's avatar
ths committed
676
{
677
    s->mem[SCBStatus] = (s->mem[SCBStatus] & ~BITS(7, 6)) + (state << 6);
ths's avatar
ths committed
678
679
}

680
static ru_state_t get_ru_state(EEPRO100State * s)
ths's avatar
ths committed
681
{
682
    return ((s->mem[SCBStatus] & BITS(5, 2)) >> 2);
ths's avatar
ths committed
683
684
}

685
static void set_ru_state(EEPRO100State * s, ru_state_t state)
ths's avatar
ths committed
686
{
687
    s->mem[SCBStatus] = (s->mem[SCBStatus] & ~BITS(5, 2)) + (state << 2);
ths's avatar
ths committed
688
689
690
691
692
693
694
695
696
}

static void dump_statistics(EEPRO100State * s)
{
    /* Dump statistical data. Most data is never changed by the emulation
     * and always 0, so we first just copy the whole block and then those
     * values which really matter.
     * Number of data should check configuration!!!
     */
697
698
699
700
701
702
    cpu_physical_memory_write(s->statsaddr,
                              (uint8_t *) & s->statistics, s->stats_size);
    stl_le_phys(s->statsaddr + 0, s->statistics.tx_good_frames);
    stl_le_phys(s->statsaddr + 36, s->statistics.rx_good_frames);
    stl_le_phys(s->statsaddr + 48, s->statistics.rx_resource_errors);
    stl_le_phys(s->statsaddr + 60, s->statistics.rx_short_frame_errors);
Stefan Weil's avatar
Stefan Weil committed
703
704
705
706
707
#if 0
    stw_le_phys(s->statsaddr + 76, s->statistics.xmt_tco_frames);
    stw_le_phys(s->statsaddr + 78, s->statistics.rcv_tco_frames);
    missing("CU dump statistical counters");
#endif
ths's avatar
ths committed
708
709
}

710
711
712
713
714
715
716
717
718
719
static void read_cb(EEPRO100State *s)
{
    cpu_physical_memory_read(s->cb_address, (uint8_t *) &s->tx, sizeof(s->tx));
    s->tx.status = le16_to_cpu(s->tx.status);
    s->tx.command = le16_to_cpu(s->tx.command);
    s->tx.link = le32_to_cpu(s->tx.link);
    s->tx.tbd_array_addr = le32_to_cpu(s->tx.tbd_array_addr);
    s->tx.tcb_bytes = le16_to_cpu(s->tx.tcb_bytes);
}

720
721
static void tx_command(EEPRO100State *s)
{
Stefan Weil's avatar
Stefan Weil committed
722
    uint32_t tbd_array = le32_to_cpu(s->tx.tbd_array_addr);
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
    uint16_t tcb_bytes = (le16_to_cpu(s->tx.tcb_bytes) & 0x3fff);
    /* Sends larger than MAX_ETH_FRAME_SIZE are allowed, up to 2600 bytes. */
    uint8_t buf[2600];
    uint16_t size = 0;
    uint32_t tbd_address = s->cb_address + 0x10;
    TRACE(RXTX, logout
        ("transmit, TBD array address 0x%08x, TCB byte count 0x%04x, TBD count %u\n",
         tbd_array, tcb_bytes, s->tx.tbd_count));

    if (tcb_bytes > 2600) {
        logout("TCB byte count too large, using 2600\n");
        tcb_bytes = 2600;
    }
    if (!((tcb_bytes > 0) || (tbd_array != 0xffffffff))) {
        logout
            ("illegal values of TBD array address and TCB byte count!\n");
    }
    assert(tcb_bytes <= sizeof(buf));
    while (size < tcb_bytes) {
        uint32_t tx_buffer_address = ldl_phys(tbd_address);
        uint16_t tx_buffer_size = lduw_phys(tbd_address + 4);
Stefan Weil's avatar
Stefan Weil committed
744
745
746
#if 0
        uint16_t tx_buffer_el = lduw_phys(tbd_address + 6);
#endif
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
        tbd_address += 8;
        TRACE(RXTX, logout
            ("TBD (simplified mode): buffer address 0x%08x, size 0x%04x\n",
             tx_buffer_address, tx_buffer_size));
        tx_buffer_size = MIN(tx_buffer_size, sizeof(buf) - size);
        cpu_physical_memory_read(tx_buffer_address, &buf[size],
                                 tx_buffer_size);
        size += tx_buffer_size;
    }
    if (tbd_array == 0xffffffff) {
        /* Simplified mode. Was already handled by code above. */
    } else {
        /* Flexible mode. */
        uint8_t tbd_count = 0;
        if (s->has_extended_tcb_support && !(s->configuration[6] & BIT(4))) {
            /* Extended Flexible TCB. */
            for (; tbd_count < 2; tbd_count++) {
                uint32_t tx_buffer_address = ldl_phys(tbd_address);
                uint16_t tx_buffer_size = lduw_phys(tbd_address + 4);
                uint16_t tx_buffer_el = lduw_phys(tbd_address + 6);
                tbd_address += 8;
                TRACE(RXTX, logout
                    ("TBD (extended flexible mode): buffer address 0x%08x, size 0x%04x\n",
                     tx_buffer_address, tx_buffer_size));
                tx_buffer_size = MIN(tx_buffer_size, sizeof(buf) - size);
                cpu_physical_memory_read(tx_buffer_address, &buf[size],
                                         tx_buffer_size);
                size += tx_buffer_size;
                if (tx_buffer_el & 1) {
                    break;
                }
            }
        }
        tbd_address = tbd_array;
        for (; tbd_count < s->tx.tbd_count; tbd_count++) {
            uint32_t tx_buffer_address = ldl_phys(tbd_address);
            uint16_t tx_buffer_size = lduw_phys(tbd_address + 4);
            uint16_t tx_buffer_el = lduw_phys(tbd_address + 6);
            tbd_address += 8;
            TRACE(RXTX, logout
                ("TBD (flexible mode): buffer address 0x%08x, size 0x%04x\n",
                 tx_buffer_address, tx_buffer_size));
            tx_buffer_size = MIN(tx_buffer_size, sizeof(buf) - size);
            cpu_physical_memory_read(tx_buffer_address, &buf[size],
                                     tx_buffer_size);
            size += tx_buffer_size;
            if (tx_buffer_el & 1) {
                break;
            }
        }
    }
    TRACE(RXTX, logout("%p sending frame, len=%d,%s\n", s, size, nic_dump(buf, size)));
    qemu_send_packet(&s->nic->nc, buf, size);
    s->statistics.tx_good_frames++;
    /* Transmit with bad status would raise an CX/TNO interrupt.
     * (82557 only). Emulation never has bad status. */
Stefan Weil's avatar
Stefan Weil committed
803
804
805
#if 0
    eepro100_cx_interrupt(s);
#endif
806
807
}

Stefan Weil's avatar
Stefan Weil committed
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
static void set_multicast_list(EEPRO100State *s)
{
    uint16_t multicast_count = s->tx.tbd_array_addr & BITS(13, 0);
    uint16_t i;
    memset(&s->mult[0], 0, sizeof(s->mult));
    TRACE(OTHER, logout("multicast list, multicast count = %u\n", multicast_count));
    for (i = 0; i < multicast_count; i += 6) {
        uint8_t multicast_addr[6];
        cpu_physical_memory_read(s->cb_address + 10 + i, multicast_addr, 6);
        TRACE(OTHER, logout("multicast entry %s\n", nic_dump(multicast_addr, 6)));
        unsigned mcast_idx = compute_mcast_idx(multicast_addr);
        assert(mcast_idx < 64);
        s->mult[mcast_idx >> 3] |= (1 << (mcast_idx & 7));
    }
}

Stefan Weil's avatar
Stefan Weil committed
824
static void action_command(EEPRO100State *s)
ths's avatar
ths committed
825
{
Stefan Weil's avatar
Stefan Weil committed
826
    for (;;) {
827
828
829
830
        bool bit_el;
        bool bit_s;
        bool bit_i;
        bool bit_nc;
831
        uint16_t ok_status = STATUS_OK;
832
833
834
835
836
837
838
839
840
841
842
843
844
845
        s->cb_address = s->cu_base + s->cu_offset;
        read_cb(s);
        bit_el = ((s->tx.command & COMMAND_EL) != 0);
        bit_s = ((s->tx.command & COMMAND_S) != 0);
        bit_i = ((s->tx.command & COMMAND_I) != 0);
        bit_nc = ((s->tx.command & COMMAND_NC) != 0);
#if 0
        bool bit_sf = ((s->tx.command & COMMAND_SF) != 0);
#endif
        s->cu_offset = s->tx.link;
        TRACE(OTHER,
              logout("val=(cu start), status=0x%04x, command=0x%04x, link=0x%08x\n",
                     s->tx.status, s->tx.command, s->tx.link));
        switch (s->tx.command & COMMAND_CMD) {
ths's avatar
ths committed
846
847
848
849
        case CmdNOp:
            /* Do nothing. */
            break;
        case CmdIASetup:
850
            cpu_physical_memory_read(s->cb_address + 8, &s->conf.macaddr.a[0], 6);
851
            TRACE(OTHER, logout("macaddr: %s\n", nic_dump(&s->conf.macaddr.a[0], 6)));
ths's avatar
ths committed
852
853
            break;
        case CmdConfigure:
854
            cpu_physical_memory_read(s->cb_address + 8, &s->configuration[0],
ths's avatar
ths committed
855
                                     sizeof(s->configuration));
856
857
858
859
860
861
862
863
            TRACE(OTHER, logout("configuration: %s\n",
                                nic_dump(&s->configuration[0], 16)));
            TRACE(OTHER, logout("configuration: %s\n",
                                nic_dump(&s->configuration[16],
                                ARRAY_SIZE(s->configuration) - 16)));
            if (s->configuration[20] & BIT(6)) {
                TRACE(OTHER, logout("Multiple IA bit\n"));
            }
ths's avatar
ths committed
864
865
            break;
        case CmdMulticastList:
Stefan Weil's avatar
Stefan Weil committed
866
            set_multicast_list(s);
ths's avatar
ths committed
867
868
            break;
        case CmdTx:
869
870
            if (bit_nc) {
                missing("CmdTx: NC = 0");
871
                ok_status = 0;
872
873
                break;
            }
874
            tx_command(s);
ths's avatar
ths committed
875
876
            break;
        case CmdTDR:
877
            TRACE(OTHER, logout("load microcode\n"));
ths's avatar
ths committed
878
879
880
            /* Starting with offset 8, the command contains
             * 64 dwords microcode which we just ignore here. */
            break;
Stefan Weil's avatar
Stefan Weil committed
881
882
883
884
885
        case CmdDiagnose:
            TRACE(OTHER, logout("diagnose\n"));
            /* Make sure error flag is not set. */
            s->tx.status = 0;
            break;
ths's avatar
ths committed
886
887
        default:
            missing("undefined command");
888
            ok_status = 0;
889
            break;
ths's avatar
ths committed
890
        }
891
        /* Write new status. */
892
        stw_phys(s->cb_address, s->tx.status | ok_status | STATUS_C);
ths's avatar
ths committed
893
894
895
896
897
        if (bit_i) {
            /* CU completed action. */
            eepro100_cx_interrupt(s);
        }
        if (bit_el) {
898
            /* CU becomes idle. Terminate command loop. */
ths's avatar
ths committed
899
900
            set_cu_state(s, cu_idle);
            eepro100_cna_interrupt(s);
Stefan Weil's avatar
Stefan Weil committed
901
            break;
ths's avatar
ths committed
902
        } else if (bit_s) {
Stefan Weil's avatar
Stefan Weil committed
903
            /* CU becomes suspended. Terminate command loop. */
ths's avatar
ths committed
904
905
            set_cu_state(s, cu_suspended);
            eepro100_cna_interrupt(s);
Stefan Weil's avatar
Stefan Weil committed
906
            break;
ths's avatar
ths committed
907
908
        } else {
            /* More entries in list. */
909
            TRACE(OTHER, logout("CU list with at least one more entry\n"));
ths's avatar
ths committed
910
        }
Stefan Weil's avatar
Stefan Weil committed
911
912
913
914
915
916
917
    }
    TRACE(OTHER, logout("CU list empty\n"));
    /* List is empty. Now CU is idle or suspended. */
}

static void eepro100_cu_command(EEPRO100State * s, uint8_t val)
{
Stefan Weil's avatar
Stefan Weil committed
918
    cu_state_t cu_state;
Stefan Weil's avatar
Stefan Weil committed
919
920
921
922
923
    switch (val) {
    case CU_NOP:
        /* No operation. */
        break;
    case CU_START:
Stefan Weil's avatar
Stefan Weil committed
924
925
926
927
928
        cu_state = get_cu_state(s);
        if (cu_state != cu_idle && cu_state != cu_suspended) {
            /* Intel documentation says that CU must be idle or suspended
             * for the CU start command. */
            logout("unexpected CU state is %u\n", cu_state);
Stefan Weil's avatar
Stefan Weil committed
929
930
931
932
        }
        set_cu_state(s, cu_active);
        s->cu_offset = s->pointer;
        action_command(s);
ths's avatar
ths committed
933
934
935
936
937
938
        break;
    case CU_RESUME:
        if (get_cu_state(s) != cu_suspended) {
            logout("bad CU resume from CU state %u\n", get_cu_state(s));
            /* Workaround for bad Linux eepro100 driver which resumes
             * from idle state. */
Stefan Weil's avatar
Stefan Weil committed
939
940
941
#if 0
            missing("cu resume");
#endif
ths's avatar
ths committed
942
943
944
            set_cu_state(s, cu_suspended);
        }
        if (get_cu_state(s) == cu_suspended) {
945
            TRACE(OTHER, logout("CU resuming\n"));
ths's avatar
ths committed
946
            set_cu_state(s, cu_active);
Stefan Weil's avatar
Stefan Weil committed
947
            action_command(s);
ths's avatar
ths committed
948
949
950
951
952
        }
        break;
    case CU_STATSADDR:
        /* Load dump counters address. */
        s->statsaddr = s->pointer;
953
        TRACE(OTHER, logout("val=0x%02x (status address)\n", val));
ths's avatar
ths committed
954
955
956
        break;
    case CU_SHOWSTATS:
        /* Dump statistical counters. */
957
        TRACE(OTHER, logout("val=0x%02x (dump stats)\n", val));
ths's avatar
ths committed
958
        dump_statistics(s);
959
        stl_le_phys(s->statsaddr + s->stats_size, 0xa005);
ths's avatar
ths committed
960
961
962
        break;
    case CU_CMD_BASE:
        /* Load CU base. */
963
        TRACE(OTHER, logout("val=0x%02x (CU base address)\n", val));
ths's avatar
ths committed
964
965
966
967
        s->cu_base = s->pointer;
        break;
    case CU_DUMPSTATS:
        /* Dump and reset statistical counters. */
968
        TRACE(OTHER, logout("val=0x%02x (dump stats and reset)\n", val));
ths's avatar
ths committed
969
        dump_statistics(s);
970
        stl_le_phys(s->statsaddr + s->stats_size, 0xa007);
ths's avatar
ths committed
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
        memset(&s->statistics, 0, sizeof(s->statistics));
        break;
    case CU_SRESUME:
        /* CU static resume. */
        missing("CU static resume");
        break;
    default:
        missing("Undefined CU command");
    }
}

static void eepro100_ru_command(EEPRO100State * s, uint8_t val)
{
    switch (val) {
    case RU_NOP:
        /* No operation. */
        break;
    case RX_START:
        /* RU start. */
        if (get_ru_state(s) != ru_idle) {
            logout("RU state is %u, should be %u\n", get_ru_state(s), ru_idle);
Stefan Weil's avatar
Stefan Weil committed
992
993
994
#if 0
            assert(!"wrong RU state");
#endif
ths's avatar
ths committed
995
996
997
        }
        set_ru_state(s, ru_ready);
        s->ru_offset = s->pointer;
998
        TRACE(OTHER, logout("val=0x%02x (rx start)\n", val));
ths's avatar
ths committed
999
1000
1001
1002
1003
1004
        break;
    case RX_RESUME:
        /* Restart RU. */
        if (get_ru_state(s) != ru_suspended) {
            logout("RU state is %u, should be %u\n", get_ru_state(s),
                   ru_suspended);
Stefan Weil's avatar
Stefan Weil committed
1005
1006
1007
#if 0
            assert(!"wrong RU state");
#endif
ths's avatar
ths committed
1008
1009
1010
        }
        set_ru_state(s, ru_ready);
        break;
Stefan Weil's avatar
Stefan Weil committed
1011
1012
1013
1014
1015
1016
1017
    case RU_ABORT:
        /* RU abort. */
        if (get_ru_state(s) == ru_ready) {
            eepro100_rnr_interrupt(s);
        }
        set_ru_state(s, ru_idle);
        break;
ths's avatar
ths committed
1018
1019
    case RX_ADDR_LOAD:
        /* Load RU base. */
1020
        TRACE(OTHER, logout("val=0x%02x (RU base address)\n", val));
ths's avatar
ths committed
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
        s->ru_base = s->pointer;
        break;
    default:
        logout("val=0x%02x (undefined RU command)\n", val);
        missing("Undefined SU command");
    }
}

static void eepro100_write_command(EEPRO100State * s, uint8_t val)
{
    eepro100_ru_command(s, val & 0x0f);
    eepro100_cu_command(s, val & 0xf0);
    if ((val) == 0) {
1034
        TRACE(OTHER, logout("val=0x%02x\n", val));
ths's avatar
ths committed
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
    }
    /* Clear command byte after command was accepted. */
    s->mem[SCBCmd] = 0;
}

/*****************************************************************************
 *
 * EEPROM emulation.
 *
 ****************************************************************************/

#define EEPROM_CS       0x02
#define EEPROM_SK       0x01
#define EEPROM_DI       0x04
#define EEPROM_DO       0x08

static uint16_t eepro100_read_eeprom(EEPRO100State * s)
{
    uint16_t val;
    memcpy(&val, &s->mem[SCBeeprom], sizeof(val));
    if (eeprom93xx_read(s->eeprom)) {
        val |= EEPROM_DO;
    } else {
        val &= ~EEPROM_DO;
    }
1060
    TRACE(EEPROM, logout("val=0x%04x\n", val));
ths's avatar
ths committed
1061
1062
1063
    return val;
}

1064
static void eepro100_write_eeprom(eeprom_t * eeprom, uint8_t val)
ths's avatar
ths committed
1065
{
1066
    TRACE(EEPROM, logout("val=0x%02x\n", val));
ths's avatar
ths committed
1067
1068

    /* mask unwriteable bits */
Stefan Weil's avatar
Stefan Weil committed
1069
1070
1071
#if 0
    val = SET_MASKED(val, 0x31, eeprom->value);
#endif
ths's avatar
ths committed
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081

    int eecs = ((val & EEPROM_CS) != 0);
    int eesk = ((val & EEPROM_SK) != 0);
    int eedi = ((val & EEPROM_DI) != 0);
    eeprom93xx_write(eeprom, eecs, eesk, eedi);
}

static void eepro100_write_pointer(EEPRO100State * s, uint32_t val)
{
    s->pointer = le32_to_cpu(val);
1082
    TRACE(OTHER, logout("val=0x%08x\n", val));
ths's avatar
ths committed
1083
1084
1085
1086
1087
1088
1089
1090
1091
}

/*****************************************************************************
 *
 * MDI emulation.
 *
 ****************************************************************************/

#if defined(DEBUG_EEPRO100)
1092
static const char * const mdi_op_name[] = {
ths's avatar
ths committed
1093
1094
1095
1096
1097
1098
    "opcode 0",
    "write",
    "read",
    "opcode 3"
};

1099
static const char * const mdi_reg_name[] = {
ths's avatar
ths committed
1100
1101
1102
1103
1104
1105
1106
1107
    "Control",
    "Status",
    "PHY Identification (Word 1)",
    "PHY Identification (Word 2)",
    "Auto-Negotiation Advertisement",
    "Auto-Negotiation Link Partner Ability",
    "Auto-Negotiation Expansion"
};
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119

static const char *reg2name(uint8_t reg)
{
    static char buffer[10];
    const char *p = buffer;
    if (reg < ARRAY_SIZE(mdi_reg_name)) {
        p = mdi_reg_name[reg];
    } else {
        snprintf(buffer, sizeof(buffer), "reg=0x%02x", reg);
    }
    return p;
}
ths's avatar
ths committed
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
#endif                          /* DEBUG_EEPRO100 */

static uint32_t eepro100_read_mdi(EEPRO100State * s)
{
    uint32_t val;
    memcpy(&val, &s->mem[0x10], sizeof(val));

#ifdef DEBUG_EEPRO100
    uint8_t raiseint = (val & BIT(29)) >> 29;
    uint8_t opcode = (val & BITS(27, 26)) >> 26;
    uint8_t phy = (val & BITS(25, 21)) >> 21;
    uint8_t reg = (val & BITS(20, 16)) >> 16;
    uint16_t data = (val & BITS(15, 0));
#endif
    /* Emulation takes no time to finish MDI transaction. */
    val |= BIT(28);
    TRACE(MDI, logout("val=0x%08x (int=%u, %s, phy=%u, %s, data=0x%04x\n",
                      val, raiseint, mdi_op_name[opcode], phy,
1138
                      reg2name(reg), data));
ths's avatar
ths committed
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
    return val;
}

static void eepro100_write_mdi(EEPRO100State * s, uint32_t val)
{
    uint8_t raiseint = (val & BIT(29)) >> 29;
    uint8_t opcode = (val & BITS(27, 26)) >> 26;
    uint8_t phy = (val & BITS(25, 21)) >> 21;
    uint8_t reg = (val & BITS(20, 16)) >> 16;
    uint16_t data = (val & BITS(15, 0));
1149
1150
    TRACE(MDI, logout("val=0x%08x (int=%u, %s, phy=%u, %s, data=0x%04x\n",
          val, raiseint, mdi_op_name[opcode], phy, reg2name(reg), data));
ths's avatar
ths committed
1151
1152
    if (phy != 1) {
        /* Unsupported PHY address. */
Stefan Weil's avatar
Stefan Weil committed
1153
1154
1155
#if 0
        logout("phy must be 1 but is %u\n", phy);
#endif
ths's avatar
ths committed
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
        data = 0;
    } else if (opcode != 1 && opcode != 2) {
        /* Unsupported opcode. */
        logout("opcode must be 1 or 2 but is %u\n", opcode);
        data = 0;
    } else if (reg > 6) {
        /* Unsupported register. */
        logout("register must be 0...6 but is %u\n", reg);
        data = 0;
    } else {
        TRACE(MDI, logout("val=0x%08x (int=%u, %s, phy=%u, %s, data=0x%04x\n",
                          val, raiseint, mdi_op_name[opcode], phy,
1168
                          reg2name(reg), data));
ths's avatar
ths committed
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
1251
        if (opcode == 1) {
            /* MDI write */
            switch (reg) {
            case 0:            /* Control Register */
                if (data & 0x8000) {
                    /* Reset status and control registers to default. */
                    s->mdimem[0] = eepro100_mdi_default[0];
                    s->mdimem[1] = eepro100_mdi_default[1];
                    data = s->mdimem[reg];
                } else {
                    /* Restart Auto Configuration = Normal Operation */
                    data &= ~0x0200;
                }
                break;
            case 1:            /* Status Register */
                missing("not writable");
                data = s->mdimem[reg];
                break;
            case 2:            /* PHY Identification Register (Word 1) */
            case 3:            /* PHY Identification Register (Word 2) */
                missing("not implemented");
                break;
            case 4:            /* Auto-Negotiation Advertisement Register */
            case 5:            /* Auto-Negotiation Link Partner Ability Register */
                break;
            case 6:            /* Auto-Negotiation Expansion Register */
            default:
                missing("not implemented");
            }
            s->mdimem[reg] = data;
        } else if (opcode == 2) {
            /* MDI read */
            switch (reg) {
            case 0:            /* Control Register */
                if (data & 0x8000) {
                    /* Reset status and control registers to default. */
                    s->mdimem[0] = eepro100_mdi_default[0];
                    s->mdimem[1] = eepro100_mdi_default[1];
                }
                break;
            case 1:            /* Status Register */
                s->mdimem[reg] |= 0x0020;
                break;
            case 2:            /* PHY Identification Register (Word 1) */
            case 3:            /* PHY Identification Register (Word 2) */
            case 4:            /* Auto-Negotiation Advertisement Register */
                break;
            case 5:            /* Auto-Negotiation Link Partner Ability Register */
                s->mdimem[reg] = 0x41fe;
                break;
            case 6:            /* Auto-Negotiation Expansion Register */
                s->mdimem[reg] = 0x0001;
                break;
            }
            data = s->mdimem[reg];
        }
        /* Emulation takes no time to finish MDI transaction.
         * Set MDI bit in SCB status register. */
        s->mem[SCBAck] |= 0x08;
        val |= BIT(28);
        if (raiseint) {
            eepro100_mdi_interrupt(s);
        }
    }
    val = (val & 0xffff0000) + data;
    memcpy(&s->mem[0x10], &val, sizeof(val));
}

/*****************************************************************************
 *
 * Port emulation.
 *
 ****************************************************************************/

#define PORT_SOFTWARE_RESET     0
#define PORT_SELFTEST           1
#define PORT_SELECTIVE_RESET    2
#define PORT_DUMP               3
#define PORT_SELECTION_MASK     3

typedef struct {
    uint32_t st_sign;           /* Self Test Signature */
    uint32_t st_result;         /* Self Test Results */
1252
} eepro100_selftest_t;
ths's avatar
ths committed
1253
1254
1255
1256
1257
1258
1259
1260
1261
1262
1263
1264
1265
1266
1267
1268

static uint32_t eepro100_read_port(EEPRO100State * s)
{
    return 0;
}

static void eepro100_write_port(EEPRO100State * s, uint32_t val)
{
    val = le32_to_cpu(val);
    uint32_t address = (val & ~PORT_SELECTION_MASK);
    uint8_t selection = (val & PORT_SELECTION_MASK);
    switch (selection) {
    case PORT_SOFTWARE_RESET:
        nic_reset(s);
        break;
    case PORT_SELFTEST:
1269
        TRACE(OTHER, logout("selftest address=0x%08x\n", address));
1270
        eepro100_selftest_t data;
ths's avatar
ths committed
1271
1272
1273
1274
1275
1276
        cpu_physical_memory_read(address, (uint8_t *) & data, sizeof(data));
        data.st_sign = 0xffffffff;
        data.st_result = 0;
        cpu_physical_memory_write(address, (uint8_t *) & data, sizeof(data));
        break;
    case PORT_SELECTIVE_RESET:
1277
        TRACE(OTHER, logout("selective reset, selftest address=0x%08x\n", address));
ths's avatar
ths committed
1278
1279
1280
1281
1282
1283
1284
1285
1286
1287
1288
1289
1290
1291
1292
1293
        nic_selective_reset(s);
        break;
    default:
        logout("val=0x%08x\n", val);
        missing("unknown port selection");
    }
}

/*****************************************************************************
 *
 * General hardware emulation.
 *
 ****************************************************************************/

static uint8_t eepro100_read1(EEPRO100State * s, uint32_t addr)
{
1294
    uint8_t val = 0;
ths's avatar
ths committed
1295
1296
1297
1298
1299
1300
1301
    if (addr <= sizeof(s->mem) - sizeof(val)) {
        memcpy(&val, &s->mem[addr], sizeof(val));
    }

    switch (addr) {
    case SCBStatus:
    case SCBAck:
1302
        TRACE(OTHER, logout("addr=%s val=0x%02x\n", regname(addr), val));
ths's avatar
ths committed
1303
1304
        break;
    case SCBCmd:
1305
        TRACE(OTHER, logout("addr=%s val=0x%02x\n", regname(addr), val));
Stefan Weil's avatar
Stefan Weil committed
1306
1307
1308
#if 0
        val = eepro100_read_command(s);
#endif
ths's avatar
ths committed
1309
1310
        break;
    case SCBIntmask:
1311
        TRACE(OTHER, logout("addr=%s val=0x%02x\n", regname(addr), val));
ths's avatar
ths committed
1312
1313
        break;
    case SCBPort + 3:
1314
        TRACE(OTHER, logout("addr=%s val=0x%02x\n", regname(addr), val));
ths's avatar
ths committed
1315
1316
1317
1318
        break;
    case SCBeeprom:
        val = eepro100_read_eeprom(s);
        break;
1319
    case SCBpmdr:       /* Power Management Driver Register */
ths's avatar
ths committed
1320
        val = 0;
1321
        TRACE(OTHER, logout("addr=%s val=0x%02x\n", regname(addr), val));
ths's avatar
ths committed
1322
        break;
1323
    case SCBgstat:      /* General Status Register */
ths's avatar
ths committed
1324
1325
        /* 100 Mbps full duplex, valid link */
        val = 0x07;
1326
        TRACE(OTHER, logout("addr=General Status val=%02x\n", val));
ths's avatar
ths committed
1327
1328
1329
1330
1331
1332
1333
1334
1335
1336
        break;
    default:
        logout("addr=%s val=0x%02x\n", regname(addr), val);
        missing("unknown byte read");
    }
    return val;
}

static uint16_t eepro100_read2(EEPRO100State * s, uint32_t addr)
{
1337
    uint16_t val = 0;
ths's avatar
ths committed
1338
1339
1340
1341
1342
1343
    if (addr <= sizeof(s->mem) - sizeof(val)) {
        memcpy(&val, &s->mem[addr], sizeof(val));
    }

    switch (addr) {
    case SCBStatus:
1344
    case SCBCmd:
1345
        TRACE(OTHER, logout("addr=%s val=0x%04x\n", regname(addr), val));
ths's avatar
ths committed
1346
1347
1348
        break;
    case SCBeeprom:
        val = eepro100_read_eeprom(s);
1349
        TRACE(OTHER, logout("addr=%s val=0x%04x\n", regname(addr), val));
ths's avatar
ths committed
1350
1351
1352
1353
1354
1355
1356
1357
1358
1359
        break;
    default:
        logout("addr=%s val=0x%04x\n", regname(addr), val);
        missing("unknown word read");
    }
    return val;
}

static uint32_t eepro100_read4(EEPRO100State * s, uint32_t addr)
{
1360
    uint32_t val = 0;
ths's avatar
ths committed
1361
1362
1363
1364
1365
1366
    if (addr <= sizeof(s->mem) - sizeof(val)) {
        memcpy(&val, &s->mem[addr], sizeof(val));
    }

    switch (addr) {
    case SCBStatus:
1367
        TRACE(OTHER, logout("addr=%s val=0x%08x\n", regname(addr), val));
ths's avatar
ths committed
1368
1369