1775616c3Spbrook /* 2775616c3Spbrook * SSI to SD card adapter. 3775616c3Spbrook * 45493e33fSPaul Brook * Copyright (c) 2007-2009 CodeSourcery. 5775616c3Spbrook * Written by Paul Brook 6775616c3Spbrook * 78e31bf38SMatthew Fernandez * This code is licensed under the GNU GPL v2. 86b620ca3SPaolo Bonzini * 96b620ca3SPaolo Bonzini * Contributions after 2012-01-13 are licensed under the terms of the 106b620ca3SPaolo Bonzini * GNU GPL, version 2 or (at your option) any later version. 11775616c3Spbrook */ 12775616c3Spbrook 130430891cSPeter Maydell #include "qemu/osdep.h" 149c17d615SPaolo Bonzini #include "sysemu/blockdev.h" 158fd06719SAlistair Francis #include "hw/ssi/ssi.h" 16d6454270SMarkus Armbruster #include "migration/vmstate.h" 17a27bd6c7SMarkus Armbruster #include "hw/qdev-properties.h" 18e3382ef0SSai Pavan Boddu #include "hw/sd/sd.h" 197673bb4cSCédric Le Goater #include "qapi/error.h" 202d174cc3SBin Meng #include "qemu/crc-ccitt.h" 210b8fa32fSMarkus Armbruster #include "qemu/module.h" 22db1015e9SEduardo Habkost #include "qom/object.h" 23775616c3Spbrook 24775616c3Spbrook //#define DEBUG_SSI_SD 1 25775616c3Spbrook 26775616c3Spbrook #ifdef DEBUG_SSI_SD 27001faf32SBlue Swirl #define DPRINTF(fmt, ...) \ 28001faf32SBlue Swirl do { printf("ssi_sd: " fmt , ## __VA_ARGS__); } while (0) 29001faf32SBlue Swirl #define BADF(fmt, ...) \ 30001faf32SBlue Swirl do { fprintf(stderr, "ssi_sd: error: " fmt , ## __VA_ARGS__); exit(1);} while (0) 31775616c3Spbrook #else 32001faf32SBlue Swirl #define DPRINTF(fmt, ...) do {} while(0) 33001faf32SBlue Swirl #define BADF(fmt, ...) \ 34001faf32SBlue Swirl do { fprintf(stderr, "ssi_sd: error: " fmt , ## __VA_ARGS__);} while (0) 35775616c3Spbrook #endif 36775616c3Spbrook 37775616c3Spbrook typedef enum { 382ccfd336SDr. David Alan Gilbert SSI_SD_CMD = 0, 39775616c3Spbrook SSI_SD_CMDARG, 40281c5c95SBin Meng SSI_SD_PREP_RESP, 41775616c3Spbrook SSI_SD_RESPONSE, 423a67cbe6SBin Meng SSI_SD_PREP_DATA, 43775616c3Spbrook SSI_SD_DATA_START, 44775616c3Spbrook SSI_SD_DATA_READ, 452d174cc3SBin Meng SSI_SD_DATA_CRC16, 46775616c3Spbrook } ssi_sd_mode; 47775616c3Spbrook 48db1015e9SEduardo Habkost struct ssi_sd_state { 49ec7e429bSPhilippe Mathieu-Daudé SSIPeripheral ssidev; 502ccfd336SDr. David Alan Gilbert uint32_t mode; 51775616c3Spbrook int cmd; 52775616c3Spbrook uint8_t cmdarg[4]; 53775616c3Spbrook uint8_t response[5]; 542d174cc3SBin Meng uint16_t crc16; 552ccfd336SDr. David Alan Gilbert int32_t arglen; 562ccfd336SDr. David Alan Gilbert int32_t response_pos; 572ccfd336SDr. David Alan Gilbert int32_t stopping; 58c3abd913SPhilippe Mathieu-Daudé SDBus sdbus; 59db1015e9SEduardo Habkost }; 60775616c3Spbrook 618046d44fSPeter Maydell #define TYPE_SSI_SD "ssi-sd" 628063396bSEduardo Habkost OBJECT_DECLARE_SIMPLE_TYPE(ssi_sd_state, SSI_SD) 638046d44fSPeter Maydell 64775616c3Spbrook /* State word bits. */ 65775616c3Spbrook #define SSI_SDR_LOCKED 0x0001 66775616c3Spbrook #define SSI_SDR_WP_ERASE 0x0002 67775616c3Spbrook #define SSI_SDR_ERROR 0x0004 68775616c3Spbrook #define SSI_SDR_CC_ERROR 0x0008 69775616c3Spbrook #define SSI_SDR_ECC_FAILED 0x0010 70775616c3Spbrook #define SSI_SDR_WP_VIOLATION 0x0020 71775616c3Spbrook #define SSI_SDR_ERASE_PARAM 0x0040 72775616c3Spbrook #define SSI_SDR_OUT_OF_RANGE 0x0080 73775616c3Spbrook #define SSI_SDR_IDLE 0x0100 74775616c3Spbrook #define SSI_SDR_ERASE_RESET 0x0200 75775616c3Spbrook #define SSI_SDR_ILLEGAL_COMMAND 0x0400 76775616c3Spbrook #define SSI_SDR_COM_CRC_ERROR 0x0800 77775616c3Spbrook #define SSI_SDR_ERASE_SEQ_ERROR 0x1000 78775616c3Spbrook #define SSI_SDR_ADDRESS_ERROR 0x2000 79775616c3Spbrook #define SSI_SDR_PARAMETER_ERROR 0x4000 80775616c3Spbrook 81*bc1edaf2SBin Meng /* single block read/write, multiple block read */ 82*bc1edaf2SBin Meng #define SSI_TOKEN_SINGLE 0xfe 83*bc1edaf2SBin Meng 84*bc1edaf2SBin Meng /* dummy value - don't care */ 85*bc1edaf2SBin Meng #define SSI_DUMMY 0xff 86*bc1edaf2SBin Meng 87ec7e429bSPhilippe Mathieu-Daudé static uint32_t ssi_sd_transfer(SSIPeripheral *dev, uint32_t val) 88775616c3Spbrook { 89213f63dfSPeter Maydell ssi_sd_state *s = SSI_SD(dev); 90775616c3Spbrook 91775616c3Spbrook /* Special case: allow CMD12 (STOP TRANSMISSION) while reading data. */ 921fb85c42SBin Meng if (s->mode == SSI_SD_DATA_READ && val == 0x4c) { 93775616c3Spbrook s->mode = SSI_SD_CMD; 94775616c3Spbrook /* There must be at least one byte delay before the card responds. */ 95775616c3Spbrook s->stopping = 1; 96775616c3Spbrook } 97775616c3Spbrook 98775616c3Spbrook switch (s->mode) { 99775616c3Spbrook case SSI_SD_CMD: 100*bc1edaf2SBin Meng if (val == SSI_DUMMY) { 101775616c3Spbrook DPRINTF("NULL command\n"); 102*bc1edaf2SBin Meng return SSI_DUMMY; 103775616c3Spbrook } 104775616c3Spbrook s->cmd = val & 0x3f; 105775616c3Spbrook s->mode = SSI_SD_CMDARG; 106775616c3Spbrook s->arglen = 0; 107*bc1edaf2SBin Meng return SSI_DUMMY; 108775616c3Spbrook case SSI_SD_CMDARG: 109775616c3Spbrook if (s->arglen == 4) { 110bc24a225SPaul Brook SDRequest request; 111775616c3Spbrook uint8_t longresp[16]; 112775616c3Spbrook /* FIXME: Check CRC. */ 113775616c3Spbrook request.cmd = s->cmd; 114b3141c06SPhilippe Mathieu-Daudé request.arg = ldl_be_p(s->cmdarg); 115775616c3Spbrook DPRINTF("CMD%d arg 0x%08x\n", s->cmd, request.arg); 116c3abd913SPhilippe Mathieu-Daudé s->arglen = sdbus_do_command(&s->sdbus, &request, longresp); 117775616c3Spbrook if (s->arglen <= 0) { 118775616c3Spbrook s->arglen = 1; 119775616c3Spbrook s->response[0] = 4; 120775616c3Spbrook DPRINTF("SD command failed\n"); 121775616c3Spbrook } else if (s->cmd == 58) { 122775616c3Spbrook /* CMD58 returns R3 response (OCR) */ 123775616c3Spbrook DPRINTF("Returned OCR\n"); 124775616c3Spbrook s->arglen = 5; 125775616c3Spbrook s->response[0] = 1; 126775616c3Spbrook memcpy(&s->response[1], longresp, 4); 127775616c3Spbrook } else if (s->arglen != 4) { 128775616c3Spbrook BADF("Unexpected response to cmd %d\n", s->cmd); 129775616c3Spbrook /* Illegal command is about as near as we can get. */ 130775616c3Spbrook s->arglen = 1; 131775616c3Spbrook s->response[0] = 4; 132775616c3Spbrook } else { 133775616c3Spbrook /* All other commands return status. */ 134775616c3Spbrook uint32_t cardstatus; 135775616c3Spbrook uint16_t status; 136775616c3Spbrook /* CMD13 returns a 2-byte statuse work. Other commands 137775616c3Spbrook only return the first byte. */ 138775616c3Spbrook s->arglen = (s->cmd == 13) ? 2 : 1; 139b3141c06SPhilippe Mathieu-Daudé cardstatus = ldl_be_p(longresp); 140775616c3Spbrook status = 0; 141775616c3Spbrook if (((cardstatus >> 9) & 0xf) < 4) 142775616c3Spbrook status |= SSI_SDR_IDLE; 143775616c3Spbrook if (cardstatus & ERASE_RESET) 144775616c3Spbrook status |= SSI_SDR_ERASE_RESET; 145775616c3Spbrook if (cardstatus & ILLEGAL_COMMAND) 146775616c3Spbrook status |= SSI_SDR_ILLEGAL_COMMAND; 147775616c3Spbrook if (cardstatus & COM_CRC_ERROR) 148775616c3Spbrook status |= SSI_SDR_COM_CRC_ERROR; 149775616c3Spbrook if (cardstatus & ERASE_SEQ_ERROR) 150775616c3Spbrook status |= SSI_SDR_ERASE_SEQ_ERROR; 151775616c3Spbrook if (cardstatus & ADDRESS_ERROR) 152775616c3Spbrook status |= SSI_SDR_ADDRESS_ERROR; 153775616c3Spbrook if (cardstatus & CARD_IS_LOCKED) 154775616c3Spbrook status |= SSI_SDR_LOCKED; 155775616c3Spbrook if (cardstatus & (LOCK_UNLOCK_FAILED | WP_ERASE_SKIP)) 156775616c3Spbrook status |= SSI_SDR_WP_ERASE; 157775616c3Spbrook if (cardstatus & SD_ERROR) 158775616c3Spbrook status |= SSI_SDR_ERROR; 159775616c3Spbrook if (cardstatus & CC_ERROR) 160775616c3Spbrook status |= SSI_SDR_CC_ERROR; 161775616c3Spbrook if (cardstatus & CARD_ECC_FAILED) 162775616c3Spbrook status |= SSI_SDR_ECC_FAILED; 163775616c3Spbrook if (cardstatus & WP_VIOLATION) 164775616c3Spbrook status |= SSI_SDR_WP_VIOLATION; 165775616c3Spbrook if (cardstatus & ERASE_PARAM) 166775616c3Spbrook status |= SSI_SDR_ERASE_PARAM; 167775616c3Spbrook if (cardstatus & (OUT_OF_RANGE | CID_CSD_OVERWRITE)) 168775616c3Spbrook status |= SSI_SDR_OUT_OF_RANGE; 169775616c3Spbrook /* ??? Don't know what Parameter Error really means, so 170775616c3Spbrook assume it's set if the second byte is nonzero. */ 171775616c3Spbrook if (status & 0xff) 172775616c3Spbrook status |= SSI_SDR_PARAMETER_ERROR; 173775616c3Spbrook s->response[0] = status >> 8; 174775616c3Spbrook s->response[1] = status; 175775616c3Spbrook DPRINTF("Card status 0x%02x\n", status); 176775616c3Spbrook } 177281c5c95SBin Meng s->mode = SSI_SD_PREP_RESP; 178775616c3Spbrook s->response_pos = 0; 179775616c3Spbrook } else { 180775616c3Spbrook s->cmdarg[s->arglen++] = val; 181775616c3Spbrook } 182*bc1edaf2SBin Meng return SSI_DUMMY; 183281c5c95SBin Meng case SSI_SD_PREP_RESP: 184281c5c95SBin Meng DPRINTF("Prepare card response (Ncr)\n"); 185281c5c95SBin Meng s->mode = SSI_SD_RESPONSE; 186*bc1edaf2SBin Meng return SSI_DUMMY; 187775616c3Spbrook case SSI_SD_RESPONSE: 188775616c3Spbrook if (s->stopping) { 189775616c3Spbrook s->stopping = 0; 190*bc1edaf2SBin Meng return SSI_DUMMY; 191775616c3Spbrook } 192775616c3Spbrook if (s->response_pos < s->arglen) { 193775616c3Spbrook DPRINTF("Response 0x%02x\n", s->response[s->response_pos]); 194775616c3Spbrook return s->response[s->response_pos++]; 195775616c3Spbrook } 196c3abd913SPhilippe Mathieu-Daudé if (sdbus_data_ready(&s->sdbus)) { 197775616c3Spbrook DPRINTF("Data read\n"); 198775616c3Spbrook s->mode = SSI_SD_DATA_START; 199775616c3Spbrook } else { 200775616c3Spbrook DPRINTF("End of command\n"); 201775616c3Spbrook s->mode = SSI_SD_CMD; 202775616c3Spbrook } 203*bc1edaf2SBin Meng return SSI_DUMMY; 2043a67cbe6SBin Meng case SSI_SD_PREP_DATA: 2053a67cbe6SBin Meng DPRINTF("Prepare data block (Nac)\n"); 2063a67cbe6SBin Meng s->mode = SSI_SD_DATA_START; 207*bc1edaf2SBin Meng return SSI_DUMMY; 208775616c3Spbrook case SSI_SD_DATA_START: 209775616c3Spbrook DPRINTF("Start read block\n"); 210775616c3Spbrook s->mode = SSI_SD_DATA_READ; 2112d174cc3SBin Meng s->response_pos = 0; 212*bc1edaf2SBin Meng return SSI_TOKEN_SINGLE; 213775616c3Spbrook case SSI_SD_DATA_READ: 2148467f622SPhilippe Mathieu-Daudé val = sdbus_read_byte(&s->sdbus); 2152d174cc3SBin Meng s->crc16 = crc_ccitt_false(s->crc16, (uint8_t *)&val, 1); 216c3abd913SPhilippe Mathieu-Daudé if (!sdbus_data_ready(&s->sdbus)) { 217775616c3Spbrook DPRINTF("Data read end\n"); 2182d174cc3SBin Meng s->mode = SSI_SD_DATA_CRC16; 2192d174cc3SBin Meng } 2202d174cc3SBin Meng return val; 2212d174cc3SBin Meng case SSI_SD_DATA_CRC16: 2222d174cc3SBin Meng val = (s->crc16 & 0xff00) >> 8; 2232d174cc3SBin Meng s->crc16 <<= 8; 2242d174cc3SBin Meng s->response_pos++; 2252d174cc3SBin Meng if (s->response_pos == 2) { 2262d174cc3SBin Meng DPRINTF("CRC16 read end\n"); 227775616c3Spbrook s->mode = SSI_SD_CMD; 2282d174cc3SBin Meng s->response_pos = 0; 229775616c3Spbrook } 230775616c3Spbrook return val; 231775616c3Spbrook } 232775616c3Spbrook /* Should never happen. */ 233*bc1edaf2SBin Meng return SSI_DUMMY; 234775616c3Spbrook } 235775616c3Spbrook 2362ccfd336SDr. David Alan Gilbert static int ssi_sd_post_load(void *opaque, int version_id) 23723e39294Spbrook { 23823e39294Spbrook ssi_sd_state *s = (ssi_sd_state *)opaque; 23923e39294Spbrook 2402d174cc3SBin Meng if (s->mode > SSI_SD_DATA_CRC16) { 24123e39294Spbrook return -EINVAL; 2422ccfd336SDr. David Alan Gilbert } 243a9c380dbSMichael S. Tsirkin if (s->mode == SSI_SD_CMDARG && 244a9c380dbSMichael S. Tsirkin (s->arglen < 0 || s->arglen >= ARRAY_SIZE(s->cmdarg))) { 245a9c380dbSMichael S. Tsirkin return -EINVAL; 246a9c380dbSMichael S. Tsirkin } 247a9c380dbSMichael S. Tsirkin if (s->mode == SSI_SD_RESPONSE && 248a9c380dbSMichael S. Tsirkin (s->response_pos < 0 || s->response_pos >= ARRAY_SIZE(s->response) || 249a9c380dbSMichael S. Tsirkin (!s->stopping && s->arglen > ARRAY_SIZE(s->response)))) { 250a9c380dbSMichael S. Tsirkin return -EINVAL; 251a9c380dbSMichael S. Tsirkin } 25223e39294Spbrook 25323e39294Spbrook return 0; 25423e39294Spbrook } 25523e39294Spbrook 2562ccfd336SDr. David Alan Gilbert static const VMStateDescription vmstate_ssi_sd = { 2572ccfd336SDr. David Alan Gilbert .name = "ssi_sd", 2583a67cbe6SBin Meng .version_id = 5, 2593a67cbe6SBin Meng .minimum_version_id = 5, 2602ccfd336SDr. David Alan Gilbert .post_load = ssi_sd_post_load, 2612ccfd336SDr. David Alan Gilbert .fields = (VMStateField []) { 2622ccfd336SDr. David Alan Gilbert VMSTATE_UINT32(mode, ssi_sd_state), 2632ccfd336SDr. David Alan Gilbert VMSTATE_INT32(cmd, ssi_sd_state), 2642ccfd336SDr. David Alan Gilbert VMSTATE_UINT8_ARRAY(cmdarg, ssi_sd_state, 4), 2652ccfd336SDr. David Alan Gilbert VMSTATE_UINT8_ARRAY(response, ssi_sd_state, 5), 2662d174cc3SBin Meng VMSTATE_UINT16(crc16, ssi_sd_state), 2672ccfd336SDr. David Alan Gilbert VMSTATE_INT32(arglen, ssi_sd_state), 2682ccfd336SDr. David Alan Gilbert VMSTATE_INT32(response_pos, ssi_sd_state), 2692ccfd336SDr. David Alan Gilbert VMSTATE_INT32(stopping, ssi_sd_state), 270ec7e429bSPhilippe Mathieu-Daudé VMSTATE_SSI_PERIPHERAL(ssidev, ssi_sd_state), 2712ccfd336SDr. David Alan Gilbert VMSTATE_END_OF_LIST() 2722ccfd336SDr. David Alan Gilbert } 2732ccfd336SDr. David Alan Gilbert }; 2742ccfd336SDr. David Alan Gilbert 275ec7e429bSPhilippe Mathieu-Daudé static void ssi_sd_realize(SSIPeripheral *d, Error **errp) 276775616c3Spbrook { 277de1b3800SVladimir Sementsov-Ogievskiy ERRP_GUARD(); 278213f63dfSPeter Maydell ssi_sd_state *s = SSI_SD(d); 279c3abd913SPhilippe Mathieu-Daudé DeviceState *carddev; 28013839974SMarkus Armbruster DriveInfo *dinfo; 281775616c3Spbrook 282c3abd913SPhilippe Mathieu-Daudé qbus_create_inplace(&s->sdbus, sizeof(s->sdbus), TYPE_SD_BUS, 283c3abd913SPhilippe Mathieu-Daudé DEVICE(d), "sd-bus"); 284c3abd913SPhilippe Mathieu-Daudé 285c3abd913SPhilippe Mathieu-Daudé /* Create and plug in the sd card */ 286af9e40aaSMarkus Armbruster /* FIXME use a qdev drive property instead of drive_get_next() */ 28713839974SMarkus Armbruster dinfo = drive_get_next(IF_SD); 2883e80f690SMarkus Armbruster carddev = qdev_new(TYPE_SD_CARD); 289c3abd913SPhilippe Mathieu-Daudé if (dinfo) { 2900c0e618dSMarkus Armbruster if (!qdev_prop_set_drive_err(carddev, "drive", 291de1b3800SVladimir Sementsov-Ogievskiy blk_by_legacy_dinfo(dinfo), errp)) { 292709dfb64SVladimir Sementsov-Ogievskiy goto fail; 293c3abd913SPhilippe Mathieu-Daudé } 294709dfb64SVladimir Sementsov-Ogievskiy } 295709dfb64SVladimir Sementsov-Ogievskiy 296de1b3800SVladimir Sementsov-Ogievskiy if (!object_property_set_bool(OBJECT(carddev), "spi", true, errp)) { 297709dfb64SVladimir Sementsov-Ogievskiy goto fail; 298709dfb64SVladimir Sementsov-Ogievskiy } 299709dfb64SVladimir Sementsov-Ogievskiy 300de1b3800SVladimir Sementsov-Ogievskiy if (!qdev_realize_and_unref(carddev, BUS(&s->sdbus), errp)) { 301709dfb64SVladimir Sementsov-Ogievskiy goto fail; 3024f8a066bSKevin Wolf } 303709dfb64SVladimir Sementsov-Ogievskiy 304709dfb64SVladimir Sementsov-Ogievskiy return; 305709dfb64SVladimir Sementsov-Ogievskiy 306709dfb64SVladimir Sementsov-Ogievskiy fail: 307de1b3800SVladimir Sementsov-Ogievskiy error_prepend(errp, "failed to init SD card: "); 308775616c3Spbrook } 3095493e33fSPaul Brook 3108046d44fSPeter Maydell static void ssi_sd_reset(DeviceState *dev) 3118046d44fSPeter Maydell { 3128046d44fSPeter Maydell ssi_sd_state *s = SSI_SD(dev); 3138046d44fSPeter Maydell 3148046d44fSPeter Maydell s->mode = SSI_SD_CMD; 3158046d44fSPeter Maydell s->cmd = 0; 3168046d44fSPeter Maydell memset(s->cmdarg, 0, sizeof(s->cmdarg)); 3178046d44fSPeter Maydell memset(s->response, 0, sizeof(s->response)); 3182d174cc3SBin Meng s->crc16 = 0; 3198046d44fSPeter Maydell s->arglen = 0; 3208046d44fSPeter Maydell s->response_pos = 0; 3218046d44fSPeter Maydell s->stopping = 0; 3228046d44fSPeter Maydell } 3238046d44fSPeter Maydell 324cd6c4cf2SAnthony Liguori static void ssi_sd_class_init(ObjectClass *klass, void *data) 325cd6c4cf2SAnthony Liguori { 3262ccfd336SDr. David Alan Gilbert DeviceClass *dc = DEVICE_CLASS(klass); 327ec7e429bSPhilippe Mathieu-Daudé SSIPeripheralClass *k = SSI_PERIPHERAL_CLASS(klass); 328cd6c4cf2SAnthony Liguori 3297673bb4cSCédric Le Goater k->realize = ssi_sd_realize; 330cd6c4cf2SAnthony Liguori k->transfer = ssi_sd_transfer; 3318120e714SPeter A. G. Crosthwaite k->cs_polarity = SSI_CS_LOW; 3322ccfd336SDr. David Alan Gilbert dc->vmsd = &vmstate_ssi_sd; 3338046d44fSPeter Maydell dc->reset = ssi_sd_reset; 33461e9e3cbSMarkus Armbruster /* Reason: init() method uses drive_get_next() */ 33561e9e3cbSMarkus Armbruster dc->user_creatable = false; 336cd6c4cf2SAnthony Liguori } 337cd6c4cf2SAnthony Liguori 3388c43a6f0SAndreas Färber static const TypeInfo ssi_sd_info = { 3398046d44fSPeter Maydell .name = TYPE_SSI_SD, 340ec7e429bSPhilippe Mathieu-Daudé .parent = TYPE_SSI_PERIPHERAL, 34139bffca2SAnthony Liguori .instance_size = sizeof(ssi_sd_state), 342cd6c4cf2SAnthony Liguori .class_init = ssi_sd_class_init, 3435493e33fSPaul Brook }; 3445493e33fSPaul Brook 34583f7d43aSAndreas Färber static void ssi_sd_register_types(void) 3465493e33fSPaul Brook { 34739bffca2SAnthony Liguori type_register_static(&ssi_sd_info); 3485493e33fSPaul Brook } 3495493e33fSPaul Brook 35083f7d43aSAndreas Färber type_init(ssi_sd_register_types) 351