xref: /qemu/hw/sd/ssi-sd.c (revision 2d174cc38bf1e86ff0cf534510c0d097e3b23680)
1775616c3Spbrook /*
2775616c3Spbrook  * SSI to SD card adapter.
3775616c3Spbrook  *
45493e33fSPaul Brook  * Copyright (c) 2007-2009 CodeSourcery.
5775616c3Spbrook  * Written by Paul Brook
6775616c3Spbrook  *
78e31bf38SMatthew Fernandez  * This code is licensed under the GNU GPL v2.
86b620ca3SPaolo Bonzini  *
96b620ca3SPaolo Bonzini  * Contributions after 2012-01-13 are licensed under the terms of the
106b620ca3SPaolo Bonzini  * GNU GPL, version 2 or (at your option) any later version.
11775616c3Spbrook  */
12775616c3Spbrook 
130430891cSPeter Maydell #include "qemu/osdep.h"
149c17d615SPaolo Bonzini #include "sysemu/blockdev.h"
158fd06719SAlistair Francis #include "hw/ssi/ssi.h"
16d6454270SMarkus Armbruster #include "migration/vmstate.h"
17a27bd6c7SMarkus Armbruster #include "hw/qdev-properties.h"
18e3382ef0SSai Pavan Boddu #include "hw/sd/sd.h"
197673bb4cSCédric Le Goater #include "qapi/error.h"
20*2d174cc3SBin Meng #include "qemu/crc-ccitt.h"
210b8fa32fSMarkus Armbruster #include "qemu/module.h"
22db1015e9SEduardo Habkost #include "qom/object.h"
23775616c3Spbrook 
24775616c3Spbrook //#define DEBUG_SSI_SD 1
25775616c3Spbrook 
26775616c3Spbrook #ifdef DEBUG_SSI_SD
27001faf32SBlue Swirl #define DPRINTF(fmt, ...) \
28001faf32SBlue Swirl do { printf("ssi_sd: " fmt , ## __VA_ARGS__); } while (0)
29001faf32SBlue Swirl #define BADF(fmt, ...) \
30001faf32SBlue Swirl do { fprintf(stderr, "ssi_sd: error: " fmt , ## __VA_ARGS__); exit(1);} while (0)
31775616c3Spbrook #else
32001faf32SBlue Swirl #define DPRINTF(fmt, ...) do {} while(0)
33001faf32SBlue Swirl #define BADF(fmt, ...) \
34001faf32SBlue Swirl do { fprintf(stderr, "ssi_sd: error: " fmt , ## __VA_ARGS__);} while (0)
35775616c3Spbrook #endif
36775616c3Spbrook 
37775616c3Spbrook typedef enum {
382ccfd336SDr. David Alan Gilbert     SSI_SD_CMD = 0,
39775616c3Spbrook     SSI_SD_CMDARG,
40281c5c95SBin Meng     SSI_SD_PREP_RESP,
41775616c3Spbrook     SSI_SD_RESPONSE,
42775616c3Spbrook     SSI_SD_DATA_START,
43775616c3Spbrook     SSI_SD_DATA_READ,
44*2d174cc3SBin Meng     SSI_SD_DATA_CRC16,
45775616c3Spbrook } ssi_sd_mode;
46775616c3Spbrook 
47db1015e9SEduardo Habkost struct ssi_sd_state {
48ec7e429bSPhilippe Mathieu-Daudé     SSIPeripheral ssidev;
492ccfd336SDr. David Alan Gilbert     uint32_t mode;
50775616c3Spbrook     int cmd;
51775616c3Spbrook     uint8_t cmdarg[4];
52775616c3Spbrook     uint8_t response[5];
53*2d174cc3SBin Meng     uint16_t crc16;
542ccfd336SDr. David Alan Gilbert     int32_t arglen;
552ccfd336SDr. David Alan Gilbert     int32_t response_pos;
562ccfd336SDr. David Alan Gilbert     int32_t stopping;
57c3abd913SPhilippe Mathieu-Daudé     SDBus sdbus;
58db1015e9SEduardo Habkost };
59775616c3Spbrook 
608046d44fSPeter Maydell #define TYPE_SSI_SD "ssi-sd"
618063396bSEduardo Habkost OBJECT_DECLARE_SIMPLE_TYPE(ssi_sd_state, SSI_SD)
628046d44fSPeter Maydell 
63775616c3Spbrook /* State word bits.  */
64775616c3Spbrook #define SSI_SDR_LOCKED          0x0001
65775616c3Spbrook #define SSI_SDR_WP_ERASE        0x0002
66775616c3Spbrook #define SSI_SDR_ERROR           0x0004
67775616c3Spbrook #define SSI_SDR_CC_ERROR        0x0008
68775616c3Spbrook #define SSI_SDR_ECC_FAILED      0x0010
69775616c3Spbrook #define SSI_SDR_WP_VIOLATION    0x0020
70775616c3Spbrook #define SSI_SDR_ERASE_PARAM     0x0040
71775616c3Spbrook #define SSI_SDR_OUT_OF_RANGE    0x0080
72775616c3Spbrook #define SSI_SDR_IDLE            0x0100
73775616c3Spbrook #define SSI_SDR_ERASE_RESET     0x0200
74775616c3Spbrook #define SSI_SDR_ILLEGAL_COMMAND 0x0400
75775616c3Spbrook #define SSI_SDR_COM_CRC_ERROR   0x0800
76775616c3Spbrook #define SSI_SDR_ERASE_SEQ_ERROR 0x1000
77775616c3Spbrook #define SSI_SDR_ADDRESS_ERROR   0x2000
78775616c3Spbrook #define SSI_SDR_PARAMETER_ERROR 0x4000
79775616c3Spbrook 
80ec7e429bSPhilippe Mathieu-Daudé static uint32_t ssi_sd_transfer(SSIPeripheral *dev, uint32_t val)
81775616c3Spbrook {
82213f63dfSPeter Maydell     ssi_sd_state *s = SSI_SD(dev);
83775616c3Spbrook 
84775616c3Spbrook     /* Special case: allow CMD12 (STOP TRANSMISSION) while reading data.  */
85775616c3Spbrook     if (s->mode == SSI_SD_DATA_READ && val == 0x4d) {
86775616c3Spbrook         s->mode = SSI_SD_CMD;
87775616c3Spbrook         /* There must be at least one byte delay before the card responds.  */
88775616c3Spbrook         s->stopping = 1;
89775616c3Spbrook     }
90775616c3Spbrook 
91775616c3Spbrook     switch (s->mode) {
92775616c3Spbrook     case SSI_SD_CMD:
93775616c3Spbrook         if (val == 0xff) {
94775616c3Spbrook             DPRINTF("NULL command\n");
95775616c3Spbrook             return 0xff;
96775616c3Spbrook         }
97775616c3Spbrook         s->cmd = val & 0x3f;
98775616c3Spbrook         s->mode = SSI_SD_CMDARG;
99775616c3Spbrook         s->arglen = 0;
100775616c3Spbrook         return 0xff;
101775616c3Spbrook     case SSI_SD_CMDARG:
102775616c3Spbrook         if (s->arglen == 4) {
103bc24a225SPaul Brook             SDRequest request;
104775616c3Spbrook             uint8_t longresp[16];
105775616c3Spbrook             /* FIXME: Check CRC.  */
106775616c3Spbrook             request.cmd = s->cmd;
107b3141c06SPhilippe Mathieu-Daudé             request.arg = ldl_be_p(s->cmdarg);
108775616c3Spbrook             DPRINTF("CMD%d arg 0x%08x\n", s->cmd, request.arg);
109c3abd913SPhilippe Mathieu-Daudé             s->arglen = sdbus_do_command(&s->sdbus, &request, longresp);
110775616c3Spbrook             if (s->arglen <= 0) {
111775616c3Spbrook                 s->arglen = 1;
112775616c3Spbrook                 s->response[0] = 4;
113775616c3Spbrook                 DPRINTF("SD command failed\n");
114775616c3Spbrook             } else if (s->cmd == 58) {
115775616c3Spbrook                 /* CMD58 returns R3 response (OCR)  */
116775616c3Spbrook                 DPRINTF("Returned OCR\n");
117775616c3Spbrook                 s->arglen = 5;
118775616c3Spbrook                 s->response[0] = 1;
119775616c3Spbrook                 memcpy(&s->response[1], longresp, 4);
120775616c3Spbrook             } else if (s->arglen != 4) {
121775616c3Spbrook                 BADF("Unexpected response to cmd %d\n", s->cmd);
122775616c3Spbrook                 /* Illegal command is about as near as we can get.  */
123775616c3Spbrook                 s->arglen = 1;
124775616c3Spbrook                 s->response[0] = 4;
125775616c3Spbrook             } else {
126775616c3Spbrook                 /* All other commands return status.  */
127775616c3Spbrook                 uint32_t cardstatus;
128775616c3Spbrook                 uint16_t status;
129775616c3Spbrook                 /* CMD13 returns a 2-byte statuse work. Other commands
130775616c3Spbrook                    only return the first byte.  */
131775616c3Spbrook                 s->arglen = (s->cmd == 13) ? 2 : 1;
132b3141c06SPhilippe Mathieu-Daudé                 cardstatus = ldl_be_p(longresp);
133775616c3Spbrook                 status = 0;
134775616c3Spbrook                 if (((cardstatus >> 9) & 0xf) < 4)
135775616c3Spbrook                     status |= SSI_SDR_IDLE;
136775616c3Spbrook                 if (cardstatus & ERASE_RESET)
137775616c3Spbrook                     status |= SSI_SDR_ERASE_RESET;
138775616c3Spbrook                 if (cardstatus & ILLEGAL_COMMAND)
139775616c3Spbrook                     status |= SSI_SDR_ILLEGAL_COMMAND;
140775616c3Spbrook                 if (cardstatus & COM_CRC_ERROR)
141775616c3Spbrook                     status |= SSI_SDR_COM_CRC_ERROR;
142775616c3Spbrook                 if (cardstatus & ERASE_SEQ_ERROR)
143775616c3Spbrook                     status |= SSI_SDR_ERASE_SEQ_ERROR;
144775616c3Spbrook                 if (cardstatus & ADDRESS_ERROR)
145775616c3Spbrook                     status |= SSI_SDR_ADDRESS_ERROR;
146775616c3Spbrook                 if (cardstatus & CARD_IS_LOCKED)
147775616c3Spbrook                     status |= SSI_SDR_LOCKED;
148775616c3Spbrook                 if (cardstatus & (LOCK_UNLOCK_FAILED | WP_ERASE_SKIP))
149775616c3Spbrook                     status |= SSI_SDR_WP_ERASE;
150775616c3Spbrook                 if (cardstatus & SD_ERROR)
151775616c3Spbrook                     status |= SSI_SDR_ERROR;
152775616c3Spbrook                 if (cardstatus & CC_ERROR)
153775616c3Spbrook                     status |= SSI_SDR_CC_ERROR;
154775616c3Spbrook                 if (cardstatus & CARD_ECC_FAILED)
155775616c3Spbrook                     status |= SSI_SDR_ECC_FAILED;
156775616c3Spbrook                 if (cardstatus & WP_VIOLATION)
157775616c3Spbrook                     status |= SSI_SDR_WP_VIOLATION;
158775616c3Spbrook                 if (cardstatus & ERASE_PARAM)
159775616c3Spbrook                     status |= SSI_SDR_ERASE_PARAM;
160775616c3Spbrook                 if (cardstatus & (OUT_OF_RANGE | CID_CSD_OVERWRITE))
161775616c3Spbrook                     status |= SSI_SDR_OUT_OF_RANGE;
162775616c3Spbrook                 /* ??? Don't know what Parameter Error really means, so
163775616c3Spbrook                    assume it's set if the second byte is nonzero.  */
164775616c3Spbrook                 if (status & 0xff)
165775616c3Spbrook                     status |= SSI_SDR_PARAMETER_ERROR;
166775616c3Spbrook                 s->response[0] = status >> 8;
167775616c3Spbrook                 s->response[1] = status;
168775616c3Spbrook                 DPRINTF("Card status 0x%02x\n", status);
169775616c3Spbrook             }
170281c5c95SBin Meng             s->mode = SSI_SD_PREP_RESP;
171775616c3Spbrook             s->response_pos = 0;
172775616c3Spbrook         } else {
173775616c3Spbrook             s->cmdarg[s->arglen++] = val;
174775616c3Spbrook         }
175775616c3Spbrook         return 0xff;
176281c5c95SBin Meng     case SSI_SD_PREP_RESP:
177281c5c95SBin Meng         DPRINTF("Prepare card response (Ncr)\n");
178281c5c95SBin Meng         s->mode = SSI_SD_RESPONSE;
179281c5c95SBin Meng         return 0xff;
180775616c3Spbrook     case SSI_SD_RESPONSE:
181775616c3Spbrook         if (s->stopping) {
182775616c3Spbrook             s->stopping = 0;
183775616c3Spbrook             return 0xff;
184775616c3Spbrook         }
185775616c3Spbrook         if (s->response_pos < s->arglen) {
186775616c3Spbrook             DPRINTF("Response 0x%02x\n", s->response[s->response_pos]);
187775616c3Spbrook             return s->response[s->response_pos++];
188775616c3Spbrook         }
189c3abd913SPhilippe Mathieu-Daudé         if (sdbus_data_ready(&s->sdbus)) {
190775616c3Spbrook             DPRINTF("Data read\n");
191775616c3Spbrook             s->mode = SSI_SD_DATA_START;
192775616c3Spbrook         } else {
193775616c3Spbrook             DPRINTF("End of command\n");
194775616c3Spbrook             s->mode = SSI_SD_CMD;
195775616c3Spbrook         }
196775616c3Spbrook         return 0xff;
197775616c3Spbrook     case SSI_SD_DATA_START:
198775616c3Spbrook         DPRINTF("Start read block\n");
199775616c3Spbrook         s->mode = SSI_SD_DATA_READ;
200*2d174cc3SBin Meng         s->response_pos = 0;
201775616c3Spbrook         return 0xfe;
202775616c3Spbrook     case SSI_SD_DATA_READ:
2038467f622SPhilippe Mathieu-Daudé         val = sdbus_read_byte(&s->sdbus);
204*2d174cc3SBin Meng         s->crc16 = crc_ccitt_false(s->crc16, (uint8_t *)&val, 1);
205c3abd913SPhilippe Mathieu-Daudé         if (!sdbus_data_ready(&s->sdbus)) {
206775616c3Spbrook             DPRINTF("Data read end\n");
207*2d174cc3SBin Meng             s->mode = SSI_SD_DATA_CRC16;
208*2d174cc3SBin Meng         }
209*2d174cc3SBin Meng         return val;
210*2d174cc3SBin Meng     case SSI_SD_DATA_CRC16:
211*2d174cc3SBin Meng         val = (s->crc16 & 0xff00) >> 8;
212*2d174cc3SBin Meng         s->crc16 <<= 8;
213*2d174cc3SBin Meng         s->response_pos++;
214*2d174cc3SBin Meng         if (s->response_pos == 2) {
215*2d174cc3SBin Meng             DPRINTF("CRC16 read end\n");
216775616c3Spbrook             s->mode = SSI_SD_CMD;
217*2d174cc3SBin Meng             s->response_pos = 0;
218775616c3Spbrook         }
219775616c3Spbrook         return val;
220775616c3Spbrook     }
221775616c3Spbrook     /* Should never happen.  */
222775616c3Spbrook     return 0xff;
223775616c3Spbrook }
224775616c3Spbrook 
2252ccfd336SDr. David Alan Gilbert static int ssi_sd_post_load(void *opaque, int version_id)
22623e39294Spbrook {
22723e39294Spbrook     ssi_sd_state *s = (ssi_sd_state *)opaque;
22823e39294Spbrook 
229*2d174cc3SBin Meng     if (s->mode > SSI_SD_DATA_CRC16) {
23023e39294Spbrook         return -EINVAL;
2312ccfd336SDr. David Alan Gilbert     }
232a9c380dbSMichael S. Tsirkin     if (s->mode == SSI_SD_CMDARG &&
233a9c380dbSMichael S. Tsirkin         (s->arglen < 0 || s->arglen >= ARRAY_SIZE(s->cmdarg))) {
234a9c380dbSMichael S. Tsirkin         return -EINVAL;
235a9c380dbSMichael S. Tsirkin     }
236a9c380dbSMichael S. Tsirkin     if (s->mode == SSI_SD_RESPONSE &&
237a9c380dbSMichael S. Tsirkin         (s->response_pos < 0 || s->response_pos >= ARRAY_SIZE(s->response) ||
238a9c380dbSMichael S. Tsirkin         (!s->stopping && s->arglen > ARRAY_SIZE(s->response)))) {
239a9c380dbSMichael S. Tsirkin         return -EINVAL;
240a9c380dbSMichael S. Tsirkin     }
24123e39294Spbrook 
24223e39294Spbrook     return 0;
24323e39294Spbrook }
24423e39294Spbrook 
2452ccfd336SDr. David Alan Gilbert static const VMStateDescription vmstate_ssi_sd = {
2462ccfd336SDr. David Alan Gilbert     .name = "ssi_sd",
247*2d174cc3SBin Meng     .version_id = 4,
248*2d174cc3SBin Meng     .minimum_version_id = 4,
2492ccfd336SDr. David Alan Gilbert     .post_load = ssi_sd_post_load,
2502ccfd336SDr. David Alan Gilbert     .fields = (VMStateField []) {
2512ccfd336SDr. David Alan Gilbert         VMSTATE_UINT32(mode, ssi_sd_state),
2522ccfd336SDr. David Alan Gilbert         VMSTATE_INT32(cmd, ssi_sd_state),
2532ccfd336SDr. David Alan Gilbert         VMSTATE_UINT8_ARRAY(cmdarg, ssi_sd_state, 4),
2542ccfd336SDr. David Alan Gilbert         VMSTATE_UINT8_ARRAY(response, ssi_sd_state, 5),
255*2d174cc3SBin Meng         VMSTATE_UINT16(crc16, ssi_sd_state),
2562ccfd336SDr. David Alan Gilbert         VMSTATE_INT32(arglen, ssi_sd_state),
2572ccfd336SDr. David Alan Gilbert         VMSTATE_INT32(response_pos, ssi_sd_state),
2582ccfd336SDr. David Alan Gilbert         VMSTATE_INT32(stopping, ssi_sd_state),
259ec7e429bSPhilippe Mathieu-Daudé         VMSTATE_SSI_PERIPHERAL(ssidev, ssi_sd_state),
2602ccfd336SDr. David Alan Gilbert         VMSTATE_END_OF_LIST()
2612ccfd336SDr. David Alan Gilbert     }
2622ccfd336SDr. David Alan Gilbert };
2632ccfd336SDr. David Alan Gilbert 
264ec7e429bSPhilippe Mathieu-Daudé static void ssi_sd_realize(SSIPeripheral *d, Error **errp)
265775616c3Spbrook {
266de1b3800SVladimir Sementsov-Ogievskiy     ERRP_GUARD();
267213f63dfSPeter Maydell     ssi_sd_state *s = SSI_SD(d);
268c3abd913SPhilippe Mathieu-Daudé     DeviceState *carddev;
26913839974SMarkus Armbruster     DriveInfo *dinfo;
270775616c3Spbrook 
271c3abd913SPhilippe Mathieu-Daudé     qbus_create_inplace(&s->sdbus, sizeof(s->sdbus), TYPE_SD_BUS,
272c3abd913SPhilippe Mathieu-Daudé                         DEVICE(d), "sd-bus");
273c3abd913SPhilippe Mathieu-Daudé 
274c3abd913SPhilippe Mathieu-Daudé     /* Create and plug in the sd card */
275af9e40aaSMarkus Armbruster     /* FIXME use a qdev drive property instead of drive_get_next() */
27613839974SMarkus Armbruster     dinfo = drive_get_next(IF_SD);
2773e80f690SMarkus Armbruster     carddev = qdev_new(TYPE_SD_CARD);
278c3abd913SPhilippe Mathieu-Daudé     if (dinfo) {
2790c0e618dSMarkus Armbruster         if (!qdev_prop_set_drive_err(carddev, "drive",
280de1b3800SVladimir Sementsov-Ogievskiy                                      blk_by_legacy_dinfo(dinfo), errp)) {
281709dfb64SVladimir Sementsov-Ogievskiy             goto fail;
282c3abd913SPhilippe Mathieu-Daudé         }
283709dfb64SVladimir Sementsov-Ogievskiy     }
284709dfb64SVladimir Sementsov-Ogievskiy 
285de1b3800SVladimir Sementsov-Ogievskiy     if (!object_property_set_bool(OBJECT(carddev), "spi", true, errp)) {
286709dfb64SVladimir Sementsov-Ogievskiy         goto fail;
287709dfb64SVladimir Sementsov-Ogievskiy     }
288709dfb64SVladimir Sementsov-Ogievskiy 
289de1b3800SVladimir Sementsov-Ogievskiy     if (!qdev_realize_and_unref(carddev, BUS(&s->sdbus), errp)) {
290709dfb64SVladimir Sementsov-Ogievskiy         goto fail;
2914f8a066bSKevin Wolf     }
292709dfb64SVladimir Sementsov-Ogievskiy 
293709dfb64SVladimir Sementsov-Ogievskiy     return;
294709dfb64SVladimir Sementsov-Ogievskiy 
295709dfb64SVladimir Sementsov-Ogievskiy fail:
296de1b3800SVladimir Sementsov-Ogievskiy     error_prepend(errp, "failed to init SD card: ");
297775616c3Spbrook }
2985493e33fSPaul Brook 
2998046d44fSPeter Maydell static void ssi_sd_reset(DeviceState *dev)
3008046d44fSPeter Maydell {
3018046d44fSPeter Maydell     ssi_sd_state *s = SSI_SD(dev);
3028046d44fSPeter Maydell 
3038046d44fSPeter Maydell     s->mode = SSI_SD_CMD;
3048046d44fSPeter Maydell     s->cmd = 0;
3058046d44fSPeter Maydell     memset(s->cmdarg, 0, sizeof(s->cmdarg));
3068046d44fSPeter Maydell     memset(s->response, 0, sizeof(s->response));
307*2d174cc3SBin Meng     s->crc16 = 0;
3088046d44fSPeter Maydell     s->arglen = 0;
3098046d44fSPeter Maydell     s->response_pos = 0;
3108046d44fSPeter Maydell     s->stopping = 0;
3118046d44fSPeter Maydell }
3128046d44fSPeter Maydell 
313cd6c4cf2SAnthony Liguori static void ssi_sd_class_init(ObjectClass *klass, void *data)
314cd6c4cf2SAnthony Liguori {
3152ccfd336SDr. David Alan Gilbert     DeviceClass *dc = DEVICE_CLASS(klass);
316ec7e429bSPhilippe Mathieu-Daudé     SSIPeripheralClass *k = SSI_PERIPHERAL_CLASS(klass);
317cd6c4cf2SAnthony Liguori 
3187673bb4cSCédric Le Goater     k->realize = ssi_sd_realize;
319cd6c4cf2SAnthony Liguori     k->transfer = ssi_sd_transfer;
3208120e714SPeter A. G. Crosthwaite     k->cs_polarity = SSI_CS_LOW;
3212ccfd336SDr. David Alan Gilbert     dc->vmsd = &vmstate_ssi_sd;
3228046d44fSPeter Maydell     dc->reset = ssi_sd_reset;
32361e9e3cbSMarkus Armbruster     /* Reason: init() method uses drive_get_next() */
32461e9e3cbSMarkus Armbruster     dc->user_creatable = false;
325cd6c4cf2SAnthony Liguori }
326cd6c4cf2SAnthony Liguori 
3278c43a6f0SAndreas Färber static const TypeInfo ssi_sd_info = {
3288046d44fSPeter Maydell     .name          = TYPE_SSI_SD,
329ec7e429bSPhilippe Mathieu-Daudé     .parent        = TYPE_SSI_PERIPHERAL,
33039bffca2SAnthony Liguori     .instance_size = sizeof(ssi_sd_state),
331cd6c4cf2SAnthony Liguori     .class_init    = ssi_sd_class_init,
3325493e33fSPaul Brook };
3335493e33fSPaul Brook 
33483f7d43aSAndreas Färber static void ssi_sd_register_types(void)
3355493e33fSPaul Brook {
33639bffca2SAnthony Liguori     type_register_static(&ssi_sd_info);
3375493e33fSPaul Brook }
3385493e33fSPaul Brook 
33983f7d43aSAndreas Färber type_init(ssi_sd_register_types)
340