1775616c3Spbrook /* 2775616c3Spbrook * SSI to SD card adapter. 3775616c3Spbrook * 45493e33fSPaul Brook * Copyright (c) 2007-2009 CodeSourcery. 5775616c3Spbrook * Written by Paul Brook 6775616c3Spbrook * 78e31bf38SMatthew Fernandez * This code is licensed under the GNU GPL v2. 86b620ca3SPaolo Bonzini * 96b620ca3SPaolo Bonzini * Contributions after 2012-01-13 are licensed under the terms of the 106b620ca3SPaolo Bonzini * GNU GPL, version 2 or (at your option) any later version. 11775616c3Spbrook */ 12775616c3Spbrook 130430891cSPeter Maydell #include "qemu/osdep.h" 149c17d615SPaolo Bonzini #include "sysemu/blockdev.h" 158fd06719SAlistair Francis #include "hw/ssi/ssi.h" 16d6454270SMarkus Armbruster #include "migration/vmstate.h" 17a27bd6c7SMarkus Armbruster #include "hw/qdev-properties.h" 18e3382ef0SSai Pavan Boddu #include "hw/sd/sd.h" 197673bb4cSCédric Le Goater #include "qapi/error.h" 20*2d174cc3SBin Meng #include "qemu/crc-ccitt.h" 210b8fa32fSMarkus Armbruster #include "qemu/module.h" 22db1015e9SEduardo Habkost #include "qom/object.h" 23775616c3Spbrook 24775616c3Spbrook //#define DEBUG_SSI_SD 1 25775616c3Spbrook 26775616c3Spbrook #ifdef DEBUG_SSI_SD 27001faf32SBlue Swirl #define DPRINTF(fmt, ...) \ 28001faf32SBlue Swirl do { printf("ssi_sd: " fmt , ## __VA_ARGS__); } while (0) 29001faf32SBlue Swirl #define BADF(fmt, ...) \ 30001faf32SBlue Swirl do { fprintf(stderr, "ssi_sd: error: " fmt , ## __VA_ARGS__); exit(1);} while (0) 31775616c3Spbrook #else 32001faf32SBlue Swirl #define DPRINTF(fmt, ...) do {} while(0) 33001faf32SBlue Swirl #define BADF(fmt, ...) \ 34001faf32SBlue Swirl do { fprintf(stderr, "ssi_sd: error: " fmt , ## __VA_ARGS__);} while (0) 35775616c3Spbrook #endif 36775616c3Spbrook 37775616c3Spbrook typedef enum { 382ccfd336SDr. David Alan Gilbert SSI_SD_CMD = 0, 39775616c3Spbrook SSI_SD_CMDARG, 40281c5c95SBin Meng SSI_SD_PREP_RESP, 41775616c3Spbrook SSI_SD_RESPONSE, 42775616c3Spbrook SSI_SD_DATA_START, 43775616c3Spbrook SSI_SD_DATA_READ, 44*2d174cc3SBin Meng SSI_SD_DATA_CRC16, 45775616c3Spbrook } ssi_sd_mode; 46775616c3Spbrook 47db1015e9SEduardo Habkost struct ssi_sd_state { 48ec7e429bSPhilippe Mathieu-Daudé SSIPeripheral ssidev; 492ccfd336SDr. David Alan Gilbert uint32_t mode; 50775616c3Spbrook int cmd; 51775616c3Spbrook uint8_t cmdarg[4]; 52775616c3Spbrook uint8_t response[5]; 53*2d174cc3SBin Meng uint16_t crc16; 542ccfd336SDr. David Alan Gilbert int32_t arglen; 552ccfd336SDr. David Alan Gilbert int32_t response_pos; 562ccfd336SDr. David Alan Gilbert int32_t stopping; 57c3abd913SPhilippe Mathieu-Daudé SDBus sdbus; 58db1015e9SEduardo Habkost }; 59775616c3Spbrook 608046d44fSPeter Maydell #define TYPE_SSI_SD "ssi-sd" 618063396bSEduardo Habkost OBJECT_DECLARE_SIMPLE_TYPE(ssi_sd_state, SSI_SD) 628046d44fSPeter Maydell 63775616c3Spbrook /* State word bits. */ 64775616c3Spbrook #define SSI_SDR_LOCKED 0x0001 65775616c3Spbrook #define SSI_SDR_WP_ERASE 0x0002 66775616c3Spbrook #define SSI_SDR_ERROR 0x0004 67775616c3Spbrook #define SSI_SDR_CC_ERROR 0x0008 68775616c3Spbrook #define SSI_SDR_ECC_FAILED 0x0010 69775616c3Spbrook #define SSI_SDR_WP_VIOLATION 0x0020 70775616c3Spbrook #define SSI_SDR_ERASE_PARAM 0x0040 71775616c3Spbrook #define SSI_SDR_OUT_OF_RANGE 0x0080 72775616c3Spbrook #define SSI_SDR_IDLE 0x0100 73775616c3Spbrook #define SSI_SDR_ERASE_RESET 0x0200 74775616c3Spbrook #define SSI_SDR_ILLEGAL_COMMAND 0x0400 75775616c3Spbrook #define SSI_SDR_COM_CRC_ERROR 0x0800 76775616c3Spbrook #define SSI_SDR_ERASE_SEQ_ERROR 0x1000 77775616c3Spbrook #define SSI_SDR_ADDRESS_ERROR 0x2000 78775616c3Spbrook #define SSI_SDR_PARAMETER_ERROR 0x4000 79775616c3Spbrook 80ec7e429bSPhilippe Mathieu-Daudé static uint32_t ssi_sd_transfer(SSIPeripheral *dev, uint32_t val) 81775616c3Spbrook { 82213f63dfSPeter Maydell ssi_sd_state *s = SSI_SD(dev); 83775616c3Spbrook 84775616c3Spbrook /* Special case: allow CMD12 (STOP TRANSMISSION) while reading data. */ 85775616c3Spbrook if (s->mode == SSI_SD_DATA_READ && val == 0x4d) { 86775616c3Spbrook s->mode = SSI_SD_CMD; 87775616c3Spbrook /* There must be at least one byte delay before the card responds. */ 88775616c3Spbrook s->stopping = 1; 89775616c3Spbrook } 90775616c3Spbrook 91775616c3Spbrook switch (s->mode) { 92775616c3Spbrook case SSI_SD_CMD: 93775616c3Spbrook if (val == 0xff) { 94775616c3Spbrook DPRINTF("NULL command\n"); 95775616c3Spbrook return 0xff; 96775616c3Spbrook } 97775616c3Spbrook s->cmd = val & 0x3f; 98775616c3Spbrook s->mode = SSI_SD_CMDARG; 99775616c3Spbrook s->arglen = 0; 100775616c3Spbrook return 0xff; 101775616c3Spbrook case SSI_SD_CMDARG: 102775616c3Spbrook if (s->arglen == 4) { 103bc24a225SPaul Brook SDRequest request; 104775616c3Spbrook uint8_t longresp[16]; 105775616c3Spbrook /* FIXME: Check CRC. */ 106775616c3Spbrook request.cmd = s->cmd; 107b3141c06SPhilippe Mathieu-Daudé request.arg = ldl_be_p(s->cmdarg); 108775616c3Spbrook DPRINTF("CMD%d arg 0x%08x\n", s->cmd, request.arg); 109c3abd913SPhilippe Mathieu-Daudé s->arglen = sdbus_do_command(&s->sdbus, &request, longresp); 110775616c3Spbrook if (s->arglen <= 0) { 111775616c3Spbrook s->arglen = 1; 112775616c3Spbrook s->response[0] = 4; 113775616c3Spbrook DPRINTF("SD command failed\n"); 114775616c3Spbrook } else if (s->cmd == 58) { 115775616c3Spbrook /* CMD58 returns R3 response (OCR) */ 116775616c3Spbrook DPRINTF("Returned OCR\n"); 117775616c3Spbrook s->arglen = 5; 118775616c3Spbrook s->response[0] = 1; 119775616c3Spbrook memcpy(&s->response[1], longresp, 4); 120775616c3Spbrook } else if (s->arglen != 4) { 121775616c3Spbrook BADF("Unexpected response to cmd %d\n", s->cmd); 122775616c3Spbrook /* Illegal command is about as near as we can get. */ 123775616c3Spbrook s->arglen = 1; 124775616c3Spbrook s->response[0] = 4; 125775616c3Spbrook } else { 126775616c3Spbrook /* All other commands return status. */ 127775616c3Spbrook uint32_t cardstatus; 128775616c3Spbrook uint16_t status; 129775616c3Spbrook /* CMD13 returns a 2-byte statuse work. Other commands 130775616c3Spbrook only return the first byte. */ 131775616c3Spbrook s->arglen = (s->cmd == 13) ? 2 : 1; 132b3141c06SPhilippe Mathieu-Daudé cardstatus = ldl_be_p(longresp); 133775616c3Spbrook status = 0; 134775616c3Spbrook if (((cardstatus >> 9) & 0xf) < 4) 135775616c3Spbrook status |= SSI_SDR_IDLE; 136775616c3Spbrook if (cardstatus & ERASE_RESET) 137775616c3Spbrook status |= SSI_SDR_ERASE_RESET; 138775616c3Spbrook if (cardstatus & ILLEGAL_COMMAND) 139775616c3Spbrook status |= SSI_SDR_ILLEGAL_COMMAND; 140775616c3Spbrook if (cardstatus & COM_CRC_ERROR) 141775616c3Spbrook status |= SSI_SDR_COM_CRC_ERROR; 142775616c3Spbrook if (cardstatus & ERASE_SEQ_ERROR) 143775616c3Spbrook status |= SSI_SDR_ERASE_SEQ_ERROR; 144775616c3Spbrook if (cardstatus & ADDRESS_ERROR) 145775616c3Spbrook status |= SSI_SDR_ADDRESS_ERROR; 146775616c3Spbrook if (cardstatus & CARD_IS_LOCKED) 147775616c3Spbrook status |= SSI_SDR_LOCKED; 148775616c3Spbrook if (cardstatus & (LOCK_UNLOCK_FAILED | WP_ERASE_SKIP)) 149775616c3Spbrook status |= SSI_SDR_WP_ERASE; 150775616c3Spbrook if (cardstatus & SD_ERROR) 151775616c3Spbrook status |= SSI_SDR_ERROR; 152775616c3Spbrook if (cardstatus & CC_ERROR) 153775616c3Spbrook status |= SSI_SDR_CC_ERROR; 154775616c3Spbrook if (cardstatus & CARD_ECC_FAILED) 155775616c3Spbrook status |= SSI_SDR_ECC_FAILED; 156775616c3Spbrook if (cardstatus & WP_VIOLATION) 157775616c3Spbrook status |= SSI_SDR_WP_VIOLATION; 158775616c3Spbrook if (cardstatus & ERASE_PARAM) 159775616c3Spbrook status |= SSI_SDR_ERASE_PARAM; 160775616c3Spbrook if (cardstatus & (OUT_OF_RANGE | CID_CSD_OVERWRITE)) 161775616c3Spbrook status |= SSI_SDR_OUT_OF_RANGE; 162775616c3Spbrook /* ??? Don't know what Parameter Error really means, so 163775616c3Spbrook assume it's set if the second byte is nonzero. */ 164775616c3Spbrook if (status & 0xff) 165775616c3Spbrook status |= SSI_SDR_PARAMETER_ERROR; 166775616c3Spbrook s->response[0] = status >> 8; 167775616c3Spbrook s->response[1] = status; 168775616c3Spbrook DPRINTF("Card status 0x%02x\n", status); 169775616c3Spbrook } 170281c5c95SBin Meng s->mode = SSI_SD_PREP_RESP; 171775616c3Spbrook s->response_pos = 0; 172775616c3Spbrook } else { 173775616c3Spbrook s->cmdarg[s->arglen++] = val; 174775616c3Spbrook } 175775616c3Spbrook return 0xff; 176281c5c95SBin Meng case SSI_SD_PREP_RESP: 177281c5c95SBin Meng DPRINTF("Prepare card response (Ncr)\n"); 178281c5c95SBin Meng s->mode = SSI_SD_RESPONSE; 179281c5c95SBin Meng return 0xff; 180775616c3Spbrook case SSI_SD_RESPONSE: 181775616c3Spbrook if (s->stopping) { 182775616c3Spbrook s->stopping = 0; 183775616c3Spbrook return 0xff; 184775616c3Spbrook } 185775616c3Spbrook if (s->response_pos < s->arglen) { 186775616c3Spbrook DPRINTF("Response 0x%02x\n", s->response[s->response_pos]); 187775616c3Spbrook return s->response[s->response_pos++]; 188775616c3Spbrook } 189c3abd913SPhilippe Mathieu-Daudé if (sdbus_data_ready(&s->sdbus)) { 190775616c3Spbrook DPRINTF("Data read\n"); 191775616c3Spbrook s->mode = SSI_SD_DATA_START; 192775616c3Spbrook } else { 193775616c3Spbrook DPRINTF("End of command\n"); 194775616c3Spbrook s->mode = SSI_SD_CMD; 195775616c3Spbrook } 196775616c3Spbrook return 0xff; 197775616c3Spbrook case SSI_SD_DATA_START: 198775616c3Spbrook DPRINTF("Start read block\n"); 199775616c3Spbrook s->mode = SSI_SD_DATA_READ; 200*2d174cc3SBin Meng s->response_pos = 0; 201775616c3Spbrook return 0xfe; 202775616c3Spbrook case SSI_SD_DATA_READ: 2038467f622SPhilippe Mathieu-Daudé val = sdbus_read_byte(&s->sdbus); 204*2d174cc3SBin Meng s->crc16 = crc_ccitt_false(s->crc16, (uint8_t *)&val, 1); 205c3abd913SPhilippe Mathieu-Daudé if (!sdbus_data_ready(&s->sdbus)) { 206775616c3Spbrook DPRINTF("Data read end\n"); 207*2d174cc3SBin Meng s->mode = SSI_SD_DATA_CRC16; 208*2d174cc3SBin Meng } 209*2d174cc3SBin Meng return val; 210*2d174cc3SBin Meng case SSI_SD_DATA_CRC16: 211*2d174cc3SBin Meng val = (s->crc16 & 0xff00) >> 8; 212*2d174cc3SBin Meng s->crc16 <<= 8; 213*2d174cc3SBin Meng s->response_pos++; 214*2d174cc3SBin Meng if (s->response_pos == 2) { 215*2d174cc3SBin Meng DPRINTF("CRC16 read end\n"); 216775616c3Spbrook s->mode = SSI_SD_CMD; 217*2d174cc3SBin Meng s->response_pos = 0; 218775616c3Spbrook } 219775616c3Spbrook return val; 220775616c3Spbrook } 221775616c3Spbrook /* Should never happen. */ 222775616c3Spbrook return 0xff; 223775616c3Spbrook } 224775616c3Spbrook 2252ccfd336SDr. David Alan Gilbert static int ssi_sd_post_load(void *opaque, int version_id) 22623e39294Spbrook { 22723e39294Spbrook ssi_sd_state *s = (ssi_sd_state *)opaque; 22823e39294Spbrook 229*2d174cc3SBin Meng if (s->mode > SSI_SD_DATA_CRC16) { 23023e39294Spbrook return -EINVAL; 2312ccfd336SDr. David Alan Gilbert } 232a9c380dbSMichael S. Tsirkin if (s->mode == SSI_SD_CMDARG && 233a9c380dbSMichael S. Tsirkin (s->arglen < 0 || s->arglen >= ARRAY_SIZE(s->cmdarg))) { 234a9c380dbSMichael S. Tsirkin return -EINVAL; 235a9c380dbSMichael S. Tsirkin } 236a9c380dbSMichael S. Tsirkin if (s->mode == SSI_SD_RESPONSE && 237a9c380dbSMichael S. Tsirkin (s->response_pos < 0 || s->response_pos >= ARRAY_SIZE(s->response) || 238a9c380dbSMichael S. Tsirkin (!s->stopping && s->arglen > ARRAY_SIZE(s->response)))) { 239a9c380dbSMichael S. Tsirkin return -EINVAL; 240a9c380dbSMichael S. Tsirkin } 24123e39294Spbrook 24223e39294Spbrook return 0; 24323e39294Spbrook } 24423e39294Spbrook 2452ccfd336SDr. David Alan Gilbert static const VMStateDescription vmstate_ssi_sd = { 2462ccfd336SDr. David Alan Gilbert .name = "ssi_sd", 247*2d174cc3SBin Meng .version_id = 4, 248*2d174cc3SBin Meng .minimum_version_id = 4, 2492ccfd336SDr. David Alan Gilbert .post_load = ssi_sd_post_load, 2502ccfd336SDr. David Alan Gilbert .fields = (VMStateField []) { 2512ccfd336SDr. David Alan Gilbert VMSTATE_UINT32(mode, ssi_sd_state), 2522ccfd336SDr. David Alan Gilbert VMSTATE_INT32(cmd, ssi_sd_state), 2532ccfd336SDr. David Alan Gilbert VMSTATE_UINT8_ARRAY(cmdarg, ssi_sd_state, 4), 2542ccfd336SDr. David Alan Gilbert VMSTATE_UINT8_ARRAY(response, ssi_sd_state, 5), 255*2d174cc3SBin Meng VMSTATE_UINT16(crc16, ssi_sd_state), 2562ccfd336SDr. David Alan Gilbert VMSTATE_INT32(arglen, ssi_sd_state), 2572ccfd336SDr. David Alan Gilbert VMSTATE_INT32(response_pos, ssi_sd_state), 2582ccfd336SDr. David Alan Gilbert VMSTATE_INT32(stopping, ssi_sd_state), 259ec7e429bSPhilippe Mathieu-Daudé VMSTATE_SSI_PERIPHERAL(ssidev, ssi_sd_state), 2602ccfd336SDr. David Alan Gilbert VMSTATE_END_OF_LIST() 2612ccfd336SDr. David Alan Gilbert } 2622ccfd336SDr. David Alan Gilbert }; 2632ccfd336SDr. David Alan Gilbert 264ec7e429bSPhilippe Mathieu-Daudé static void ssi_sd_realize(SSIPeripheral *d, Error **errp) 265775616c3Spbrook { 266de1b3800SVladimir Sementsov-Ogievskiy ERRP_GUARD(); 267213f63dfSPeter Maydell ssi_sd_state *s = SSI_SD(d); 268c3abd913SPhilippe Mathieu-Daudé DeviceState *carddev; 26913839974SMarkus Armbruster DriveInfo *dinfo; 270775616c3Spbrook 271c3abd913SPhilippe Mathieu-Daudé qbus_create_inplace(&s->sdbus, sizeof(s->sdbus), TYPE_SD_BUS, 272c3abd913SPhilippe Mathieu-Daudé DEVICE(d), "sd-bus"); 273c3abd913SPhilippe Mathieu-Daudé 274c3abd913SPhilippe Mathieu-Daudé /* Create and plug in the sd card */ 275af9e40aaSMarkus Armbruster /* FIXME use a qdev drive property instead of drive_get_next() */ 27613839974SMarkus Armbruster dinfo = drive_get_next(IF_SD); 2773e80f690SMarkus Armbruster carddev = qdev_new(TYPE_SD_CARD); 278c3abd913SPhilippe Mathieu-Daudé if (dinfo) { 2790c0e618dSMarkus Armbruster if (!qdev_prop_set_drive_err(carddev, "drive", 280de1b3800SVladimir Sementsov-Ogievskiy blk_by_legacy_dinfo(dinfo), errp)) { 281709dfb64SVladimir Sementsov-Ogievskiy goto fail; 282c3abd913SPhilippe Mathieu-Daudé } 283709dfb64SVladimir Sementsov-Ogievskiy } 284709dfb64SVladimir Sementsov-Ogievskiy 285de1b3800SVladimir Sementsov-Ogievskiy if (!object_property_set_bool(OBJECT(carddev), "spi", true, errp)) { 286709dfb64SVladimir Sementsov-Ogievskiy goto fail; 287709dfb64SVladimir Sementsov-Ogievskiy } 288709dfb64SVladimir Sementsov-Ogievskiy 289de1b3800SVladimir Sementsov-Ogievskiy if (!qdev_realize_and_unref(carddev, BUS(&s->sdbus), errp)) { 290709dfb64SVladimir Sementsov-Ogievskiy goto fail; 2914f8a066bSKevin Wolf } 292709dfb64SVladimir Sementsov-Ogievskiy 293709dfb64SVladimir Sementsov-Ogievskiy return; 294709dfb64SVladimir Sementsov-Ogievskiy 295709dfb64SVladimir Sementsov-Ogievskiy fail: 296de1b3800SVladimir Sementsov-Ogievskiy error_prepend(errp, "failed to init SD card: "); 297775616c3Spbrook } 2985493e33fSPaul Brook 2998046d44fSPeter Maydell static void ssi_sd_reset(DeviceState *dev) 3008046d44fSPeter Maydell { 3018046d44fSPeter Maydell ssi_sd_state *s = SSI_SD(dev); 3028046d44fSPeter Maydell 3038046d44fSPeter Maydell s->mode = SSI_SD_CMD; 3048046d44fSPeter Maydell s->cmd = 0; 3058046d44fSPeter Maydell memset(s->cmdarg, 0, sizeof(s->cmdarg)); 3068046d44fSPeter Maydell memset(s->response, 0, sizeof(s->response)); 307*2d174cc3SBin Meng s->crc16 = 0; 3088046d44fSPeter Maydell s->arglen = 0; 3098046d44fSPeter Maydell s->response_pos = 0; 3108046d44fSPeter Maydell s->stopping = 0; 3118046d44fSPeter Maydell } 3128046d44fSPeter Maydell 313cd6c4cf2SAnthony Liguori static void ssi_sd_class_init(ObjectClass *klass, void *data) 314cd6c4cf2SAnthony Liguori { 3152ccfd336SDr. David Alan Gilbert DeviceClass *dc = DEVICE_CLASS(klass); 316ec7e429bSPhilippe Mathieu-Daudé SSIPeripheralClass *k = SSI_PERIPHERAL_CLASS(klass); 317cd6c4cf2SAnthony Liguori 3187673bb4cSCédric Le Goater k->realize = ssi_sd_realize; 319cd6c4cf2SAnthony Liguori k->transfer = ssi_sd_transfer; 3208120e714SPeter A. G. Crosthwaite k->cs_polarity = SSI_CS_LOW; 3212ccfd336SDr. David Alan Gilbert dc->vmsd = &vmstate_ssi_sd; 3228046d44fSPeter Maydell dc->reset = ssi_sd_reset; 32361e9e3cbSMarkus Armbruster /* Reason: init() method uses drive_get_next() */ 32461e9e3cbSMarkus Armbruster dc->user_creatable = false; 325cd6c4cf2SAnthony Liguori } 326cd6c4cf2SAnthony Liguori 3278c43a6f0SAndreas Färber static const TypeInfo ssi_sd_info = { 3288046d44fSPeter Maydell .name = TYPE_SSI_SD, 329ec7e429bSPhilippe Mathieu-Daudé .parent = TYPE_SSI_PERIPHERAL, 33039bffca2SAnthony Liguori .instance_size = sizeof(ssi_sd_state), 331cd6c4cf2SAnthony Liguori .class_init = ssi_sd_class_init, 3325493e33fSPaul Brook }; 3335493e33fSPaul Brook 33483f7d43aSAndreas Färber static void ssi_sd_register_types(void) 3355493e33fSPaul Brook { 33639bffca2SAnthony Liguori type_register_static(&ssi_sd_info); 3375493e33fSPaul Brook } 3385493e33fSPaul Brook 33983f7d43aSAndreas Färber type_init(ssi_sd_register_types) 340