1 /* 2 * QEMU IDE Emulation: PCI Bus support. 3 * 4 * Copyright (c) 2003 Fabrice Bellard 5 * Copyright (c) 2006 Openedhand Ltd. 6 * 7 * Permission is hereby granted, free of charge, to any person obtaining a copy 8 * of this software and associated documentation files (the "Software"), to deal 9 * in the Software without restriction, including without limitation the rights 10 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 11 * copies of the Software, and to permit persons to whom the Software is 12 * furnished to do so, subject to the following conditions: 13 * 14 * The above copyright notice and this permission notice shall be included in 15 * all copies or substantial portions of the Software. 16 * 17 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 18 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 19 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL 20 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 21 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 22 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN 23 * THE SOFTWARE. 24 */ 25 #include "qemu/osdep.h" 26 #include <hw/hw.h> 27 #include <hw/i386/pc.h> 28 #include <hw/pci/pci.h> 29 #include <hw/isa/isa.h> 30 #include "sysemu/block-backend.h" 31 #include "sysemu/dma.h" 32 #include "qemu/error-report.h" 33 #include <hw/ide/pci.h> 34 35 #define BMDMA_PAGE_SIZE 4096 36 37 #define BM_MIGRATION_COMPAT_STATUS_BITS \ 38 (IDE_RETRY_DMA | IDE_RETRY_PIO | \ 39 IDE_RETRY_READ | IDE_RETRY_FLUSH) 40 41 static void bmdma_start_dma(IDEDMA *dma, IDEState *s, 42 BlockCompletionFunc *dma_cb) 43 { 44 BMDMAState *bm = DO_UPCAST(BMDMAState, dma, dma); 45 46 bm->dma_cb = dma_cb; 47 bm->cur_prd_last = 0; 48 bm->cur_prd_addr = 0; 49 bm->cur_prd_len = 0; 50 51 if (bm->status & BM_STATUS_DMAING) { 52 bm->dma_cb(bmdma_active_if(bm), 0); 53 } 54 } 55 56 /** 57 * Prepare an sglist based on available PRDs. 58 * @limit: How many bytes to prepare total. 59 * 60 * Returns the number of bytes prepared, -1 on error. 61 * IDEState.io_buffer_size will contain the number of bytes described 62 * by the PRDs, whether or not we added them to the sglist. 63 */ 64 static int32_t bmdma_prepare_buf(IDEDMA *dma, int32_t limit) 65 { 66 BMDMAState *bm = DO_UPCAST(BMDMAState, dma, dma); 67 IDEState *s = bmdma_active_if(bm); 68 PCIDevice *pci_dev = PCI_DEVICE(bm->pci_dev); 69 struct { 70 uint32_t addr; 71 uint32_t size; 72 } prd; 73 int l, len; 74 75 pci_dma_sglist_init(&s->sg, pci_dev, 76 s->nsector / (BMDMA_PAGE_SIZE / 512) + 1); 77 s->io_buffer_size = 0; 78 for(;;) { 79 if (bm->cur_prd_len == 0) { 80 /* end of table (with a fail safe of one page) */ 81 if (bm->cur_prd_last || 82 (bm->cur_addr - bm->addr) >= BMDMA_PAGE_SIZE) { 83 return s->sg.size; 84 } 85 pci_dma_read(pci_dev, bm->cur_addr, &prd, 8); 86 bm->cur_addr += 8; 87 prd.addr = le32_to_cpu(prd.addr); 88 prd.size = le32_to_cpu(prd.size); 89 len = prd.size & 0xfffe; 90 if (len == 0) 91 len = 0x10000; 92 bm->cur_prd_len = len; 93 bm->cur_prd_addr = prd.addr; 94 bm->cur_prd_last = (prd.size & 0x80000000); 95 } 96 l = bm->cur_prd_len; 97 if (l > 0) { 98 uint64_t sg_len; 99 100 /* Don't add extra bytes to the SGList; consume any remaining 101 * PRDs from the guest, but ignore them. */ 102 sg_len = MIN(limit - s->sg.size, bm->cur_prd_len); 103 if (sg_len) { 104 qemu_sglist_add(&s->sg, bm->cur_prd_addr, sg_len); 105 } 106 107 bm->cur_prd_addr += l; 108 bm->cur_prd_len -= l; 109 s->io_buffer_size += l; 110 } 111 } 112 113 qemu_sglist_destroy(&s->sg); 114 s->io_buffer_size = 0; 115 return -1; 116 } 117 118 /* return 0 if buffer completed */ 119 static int bmdma_rw_buf(IDEDMA *dma, int is_write) 120 { 121 BMDMAState *bm = DO_UPCAST(BMDMAState, dma, dma); 122 IDEState *s = bmdma_active_if(bm); 123 PCIDevice *pci_dev = PCI_DEVICE(bm->pci_dev); 124 struct { 125 uint32_t addr; 126 uint32_t size; 127 } prd; 128 int l, len; 129 130 for(;;) { 131 l = s->io_buffer_size - s->io_buffer_index; 132 if (l <= 0) 133 break; 134 if (bm->cur_prd_len == 0) { 135 /* end of table (with a fail safe of one page) */ 136 if (bm->cur_prd_last || 137 (bm->cur_addr - bm->addr) >= BMDMA_PAGE_SIZE) 138 return 0; 139 pci_dma_read(pci_dev, bm->cur_addr, &prd, 8); 140 bm->cur_addr += 8; 141 prd.addr = le32_to_cpu(prd.addr); 142 prd.size = le32_to_cpu(prd.size); 143 len = prd.size & 0xfffe; 144 if (len == 0) 145 len = 0x10000; 146 bm->cur_prd_len = len; 147 bm->cur_prd_addr = prd.addr; 148 bm->cur_prd_last = (prd.size & 0x80000000); 149 } 150 if (l > bm->cur_prd_len) 151 l = bm->cur_prd_len; 152 if (l > 0) { 153 if (is_write) { 154 pci_dma_write(pci_dev, bm->cur_prd_addr, 155 s->io_buffer + s->io_buffer_index, l); 156 } else { 157 pci_dma_read(pci_dev, bm->cur_prd_addr, 158 s->io_buffer + s->io_buffer_index, l); 159 } 160 bm->cur_prd_addr += l; 161 bm->cur_prd_len -= l; 162 s->io_buffer_index += l; 163 } 164 } 165 return 1; 166 } 167 168 static void bmdma_set_inactive(IDEDMA *dma, bool more) 169 { 170 BMDMAState *bm = DO_UPCAST(BMDMAState, dma, dma); 171 172 bm->dma_cb = NULL; 173 if (more) { 174 bm->status |= BM_STATUS_DMAING; 175 } else { 176 bm->status &= ~BM_STATUS_DMAING; 177 } 178 } 179 180 static void bmdma_restart_dma(IDEDMA *dma) 181 { 182 BMDMAState *bm = DO_UPCAST(BMDMAState, dma, dma); 183 184 bm->cur_addr = bm->addr; 185 } 186 187 static void bmdma_cancel(BMDMAState *bm) 188 { 189 if (bm->status & BM_STATUS_DMAING) { 190 /* cancel DMA request */ 191 bmdma_set_inactive(&bm->dma, false); 192 } 193 } 194 195 static void bmdma_reset(IDEDMA *dma) 196 { 197 BMDMAState *bm = DO_UPCAST(BMDMAState, dma, dma); 198 199 #ifdef DEBUG_IDE 200 printf("ide: dma_reset\n"); 201 #endif 202 bmdma_cancel(bm); 203 bm->cmd = 0; 204 bm->status = 0; 205 bm->addr = 0; 206 bm->cur_addr = 0; 207 bm->cur_prd_last = 0; 208 bm->cur_prd_addr = 0; 209 bm->cur_prd_len = 0; 210 } 211 212 static void bmdma_irq(void *opaque, int n, int level) 213 { 214 BMDMAState *bm = opaque; 215 216 if (!level) { 217 /* pass through lower */ 218 qemu_set_irq(bm->irq, level); 219 return; 220 } 221 222 bm->status |= BM_STATUS_INT; 223 224 /* trigger the real irq */ 225 qemu_set_irq(bm->irq, level); 226 } 227 228 void bmdma_cmd_writeb(BMDMAState *bm, uint32_t val) 229 { 230 #ifdef DEBUG_IDE 231 printf("%s: 0x%08x\n", __func__, val); 232 #endif 233 234 /* Ignore writes to SSBM if it keeps the old value */ 235 if ((val & BM_CMD_START) != (bm->cmd & BM_CMD_START)) { 236 if (!(val & BM_CMD_START)) { 237 ide_cancel_dma_sync(idebus_active_if(bm->bus)); 238 bm->status &= ~BM_STATUS_DMAING; 239 } else { 240 bm->cur_addr = bm->addr; 241 if (!(bm->status & BM_STATUS_DMAING)) { 242 bm->status |= BM_STATUS_DMAING; 243 /* start dma transfer if possible */ 244 if (bm->dma_cb) 245 bm->dma_cb(bmdma_active_if(bm), 0); 246 } 247 } 248 } 249 250 bm->cmd = val & 0x09; 251 } 252 253 static uint64_t bmdma_addr_read(void *opaque, hwaddr addr, 254 unsigned width) 255 { 256 BMDMAState *bm = opaque; 257 uint32_t mask = (1ULL << (width * 8)) - 1; 258 uint64_t data; 259 260 data = (bm->addr >> (addr * 8)) & mask; 261 #ifdef DEBUG_IDE 262 printf("%s: 0x%08x\n", __func__, (unsigned)data); 263 #endif 264 return data; 265 } 266 267 static void bmdma_addr_write(void *opaque, hwaddr addr, 268 uint64_t data, unsigned width) 269 { 270 BMDMAState *bm = opaque; 271 int shift = addr * 8; 272 uint32_t mask = (1ULL << (width * 8)) - 1; 273 274 #ifdef DEBUG_IDE 275 printf("%s: 0x%08x\n", __func__, (unsigned)data); 276 #endif 277 bm->addr &= ~(mask << shift); 278 bm->addr |= ((data & mask) << shift) & ~3; 279 } 280 281 MemoryRegionOps bmdma_addr_ioport_ops = { 282 .read = bmdma_addr_read, 283 .write = bmdma_addr_write, 284 .endianness = DEVICE_LITTLE_ENDIAN, 285 }; 286 287 static bool ide_bmdma_current_needed(void *opaque) 288 { 289 BMDMAState *bm = opaque; 290 291 return (bm->cur_prd_len != 0); 292 } 293 294 static bool ide_bmdma_status_needed(void *opaque) 295 { 296 BMDMAState *bm = opaque; 297 298 /* Older versions abused some bits in the status register for internal 299 * error state. If any of these bits are set, we must add a subsection to 300 * transfer the real status register */ 301 uint8_t abused_bits = BM_MIGRATION_COMPAT_STATUS_BITS; 302 303 return ((bm->status & abused_bits) != 0); 304 } 305 306 static void ide_bmdma_pre_save(void *opaque) 307 { 308 BMDMAState *bm = opaque; 309 uint8_t abused_bits = BM_MIGRATION_COMPAT_STATUS_BITS; 310 311 bm->migration_retry_unit = bm->bus->retry_unit; 312 bm->migration_retry_sector_num = bm->bus->retry_sector_num; 313 bm->migration_retry_nsector = bm->bus->retry_nsector; 314 bm->migration_compat_status = 315 (bm->status & ~abused_bits) | (bm->bus->error_status & abused_bits); 316 } 317 318 /* This function accesses bm->bus->error_status which is loaded only after 319 * BMDMA itself. This is why the function is called from ide_pci_post_load 320 * instead of being registered with VMState where it would run too early. */ 321 static int ide_bmdma_post_load(void *opaque, int version_id) 322 { 323 BMDMAState *bm = opaque; 324 uint8_t abused_bits = BM_MIGRATION_COMPAT_STATUS_BITS; 325 326 if (bm->status == 0) { 327 bm->status = bm->migration_compat_status & ~abused_bits; 328 bm->bus->error_status |= bm->migration_compat_status & abused_bits; 329 } 330 if (bm->bus->error_status) { 331 bm->bus->retry_sector_num = bm->migration_retry_sector_num; 332 bm->bus->retry_nsector = bm->migration_retry_nsector; 333 bm->bus->retry_unit = bm->migration_retry_unit; 334 } 335 336 return 0; 337 } 338 339 static const VMStateDescription vmstate_bmdma_current = { 340 .name = "ide bmdma_current", 341 .version_id = 1, 342 .minimum_version_id = 1, 343 .needed = ide_bmdma_current_needed, 344 .fields = (VMStateField[]) { 345 VMSTATE_UINT32(cur_addr, BMDMAState), 346 VMSTATE_UINT32(cur_prd_last, BMDMAState), 347 VMSTATE_UINT32(cur_prd_addr, BMDMAState), 348 VMSTATE_UINT32(cur_prd_len, BMDMAState), 349 VMSTATE_END_OF_LIST() 350 } 351 }; 352 353 static const VMStateDescription vmstate_bmdma_status = { 354 .name ="ide bmdma/status", 355 .version_id = 1, 356 .minimum_version_id = 1, 357 .needed = ide_bmdma_status_needed, 358 .fields = (VMStateField[]) { 359 VMSTATE_UINT8(status, BMDMAState), 360 VMSTATE_END_OF_LIST() 361 } 362 }; 363 364 static const VMStateDescription vmstate_bmdma = { 365 .name = "ide bmdma", 366 .version_id = 3, 367 .minimum_version_id = 0, 368 .pre_save = ide_bmdma_pre_save, 369 .fields = (VMStateField[]) { 370 VMSTATE_UINT8(cmd, BMDMAState), 371 VMSTATE_UINT8(migration_compat_status, BMDMAState), 372 VMSTATE_UINT32(addr, BMDMAState), 373 VMSTATE_INT64(migration_retry_sector_num, BMDMAState), 374 VMSTATE_UINT32(migration_retry_nsector, BMDMAState), 375 VMSTATE_UINT8(migration_retry_unit, BMDMAState), 376 VMSTATE_END_OF_LIST() 377 }, 378 .subsections = (const VMStateDescription*[]) { 379 &vmstate_bmdma_current, 380 &vmstate_bmdma_status, 381 NULL 382 } 383 }; 384 385 static int ide_pci_post_load(void *opaque, int version_id) 386 { 387 PCIIDEState *d = opaque; 388 int i; 389 390 for(i = 0; i < 2; i++) { 391 /* current versions always store 0/1, but older version 392 stored bigger values. We only need last bit */ 393 d->bmdma[i].migration_retry_unit &= 1; 394 ide_bmdma_post_load(&d->bmdma[i], -1); 395 } 396 397 return 0; 398 } 399 400 const VMStateDescription vmstate_ide_pci = { 401 .name = "ide", 402 .version_id = 3, 403 .minimum_version_id = 0, 404 .post_load = ide_pci_post_load, 405 .fields = (VMStateField[]) { 406 VMSTATE_PCI_DEVICE(parent_obj, PCIIDEState), 407 VMSTATE_STRUCT_ARRAY(bmdma, PCIIDEState, 2, 0, 408 vmstate_bmdma, BMDMAState), 409 VMSTATE_IDE_BUS_ARRAY(bus, PCIIDEState, 2), 410 VMSTATE_IDE_DRIVES(bus[0].ifs, PCIIDEState), 411 VMSTATE_IDE_DRIVES(bus[1].ifs, PCIIDEState), 412 VMSTATE_END_OF_LIST() 413 } 414 }; 415 416 void pci_ide_create_devs(PCIDevice *dev, DriveInfo **hd_table) 417 { 418 PCIIDEState *d = PCI_IDE(dev); 419 static const int bus[4] = { 0, 0, 1, 1 }; 420 static const int unit[4] = { 0, 1, 0, 1 }; 421 int i; 422 423 for (i = 0; i < 4; i++) { 424 if (hd_table[i] == NULL) 425 continue; 426 ide_create_drive(d->bus+bus[i], unit[i], hd_table[i]); 427 } 428 } 429 430 static const struct IDEDMAOps bmdma_ops = { 431 .start_dma = bmdma_start_dma, 432 .prepare_buf = bmdma_prepare_buf, 433 .rw_buf = bmdma_rw_buf, 434 .restart_dma = bmdma_restart_dma, 435 .set_inactive = bmdma_set_inactive, 436 .reset = bmdma_reset, 437 }; 438 439 void bmdma_init(IDEBus *bus, BMDMAState *bm, PCIIDEState *d) 440 { 441 if (bus->dma == &bm->dma) { 442 return; 443 } 444 445 bm->dma.ops = &bmdma_ops; 446 bus->dma = &bm->dma; 447 bm->irq = bus->irq; 448 bus->irq = qemu_allocate_irq(bmdma_irq, bm, 0); 449 bm->pci_dev = d; 450 } 451 452 static const TypeInfo pci_ide_type_info = { 453 .name = TYPE_PCI_IDE, 454 .parent = TYPE_PCI_DEVICE, 455 .instance_size = sizeof(PCIIDEState), 456 .abstract = true, 457 }; 458 459 static void pci_ide_register_types(void) 460 { 461 type_register_static(&pci_ide_type_info); 462 } 463 464 type_init(pci_ide_register_types) 465