1 /* 2 * QEMU IDE Emulation: PCI Bus support. 3 * 4 * Copyright (c) 2003 Fabrice Bellard 5 * Copyright (c) 2006 Openedhand Ltd. 6 * 7 * Permission is hereby granted, free of charge, to any person obtaining a copy 8 * of this software and associated documentation files (the "Software"), to deal 9 * in the Software without restriction, including without limitation the rights 10 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 11 * copies of the Software, and to permit persons to whom the Software is 12 * furnished to do so, subject to the following conditions: 13 * 14 * The above copyright notice and this permission notice shall be included in 15 * all copies or substantial portions of the Software. 16 * 17 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 18 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 19 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL 20 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 21 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 22 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN 23 * THE SOFTWARE. 24 */ 25 #include "qemu/osdep.h" 26 #include "hw/hw.h" 27 #include "hw/i386/pc.h" 28 #include "hw/pci/pci.h" 29 #include "hw/isa/isa.h" 30 #include "sysemu/block-backend.h" 31 #include "sysemu/dma.h" 32 #include "qemu/error-report.h" 33 #include "hw/ide/pci.h" 34 35 #define BMDMA_PAGE_SIZE 4096 36 37 #define BM_MIGRATION_COMPAT_STATUS_BITS \ 38 (IDE_RETRY_DMA | IDE_RETRY_PIO | \ 39 IDE_RETRY_READ | IDE_RETRY_FLUSH) 40 41 static void bmdma_start_dma(IDEDMA *dma, IDEState *s, 42 BlockCompletionFunc *dma_cb) 43 { 44 BMDMAState *bm = DO_UPCAST(BMDMAState, dma, dma); 45 46 bm->dma_cb = dma_cb; 47 bm->cur_prd_last = 0; 48 bm->cur_prd_addr = 0; 49 bm->cur_prd_len = 0; 50 51 if (bm->status & BM_STATUS_DMAING) { 52 bm->dma_cb(bmdma_active_if(bm), 0); 53 } 54 } 55 56 /** 57 * Prepare an sglist based on available PRDs. 58 * @limit: How many bytes to prepare total. 59 * 60 * Returns the number of bytes prepared, -1 on error. 61 * IDEState.io_buffer_size will contain the number of bytes described 62 * by the PRDs, whether or not we added them to the sglist. 63 */ 64 static int32_t bmdma_prepare_buf(IDEDMA *dma, int32_t limit) 65 { 66 BMDMAState *bm = DO_UPCAST(BMDMAState, dma, dma); 67 IDEState *s = bmdma_active_if(bm); 68 PCIDevice *pci_dev = PCI_DEVICE(bm->pci_dev); 69 struct { 70 uint32_t addr; 71 uint32_t size; 72 } prd; 73 int l, len; 74 75 pci_dma_sglist_init(&s->sg, pci_dev, 76 s->nsector / (BMDMA_PAGE_SIZE / 512) + 1); 77 s->io_buffer_size = 0; 78 for(;;) { 79 if (bm->cur_prd_len == 0) { 80 /* end of table (with a fail safe of one page) */ 81 if (bm->cur_prd_last || 82 (bm->cur_addr - bm->addr) >= BMDMA_PAGE_SIZE) { 83 return s->sg.size; 84 } 85 pci_dma_read(pci_dev, bm->cur_addr, &prd, 8); 86 bm->cur_addr += 8; 87 prd.addr = le32_to_cpu(prd.addr); 88 prd.size = le32_to_cpu(prd.size); 89 len = prd.size & 0xfffe; 90 if (len == 0) 91 len = 0x10000; 92 bm->cur_prd_len = len; 93 bm->cur_prd_addr = prd.addr; 94 bm->cur_prd_last = (prd.size & 0x80000000); 95 } 96 l = bm->cur_prd_len; 97 if (l > 0) { 98 uint64_t sg_len; 99 100 /* Don't add extra bytes to the SGList; consume any remaining 101 * PRDs from the guest, but ignore them. */ 102 sg_len = MIN(limit - s->sg.size, bm->cur_prd_len); 103 if (sg_len) { 104 qemu_sglist_add(&s->sg, bm->cur_prd_addr, sg_len); 105 } 106 107 bm->cur_prd_addr += l; 108 bm->cur_prd_len -= l; 109 s->io_buffer_size += l; 110 } 111 } 112 113 qemu_sglist_destroy(&s->sg); 114 s->io_buffer_size = 0; 115 return -1; 116 } 117 118 /* return 0 if buffer completed */ 119 static int bmdma_rw_buf(IDEDMA *dma, int is_write) 120 { 121 BMDMAState *bm = DO_UPCAST(BMDMAState, dma, dma); 122 IDEState *s = bmdma_active_if(bm); 123 PCIDevice *pci_dev = PCI_DEVICE(bm->pci_dev); 124 struct { 125 uint32_t addr; 126 uint32_t size; 127 } prd; 128 int l, len; 129 130 for(;;) { 131 l = s->io_buffer_size - s->io_buffer_index; 132 if (l <= 0) 133 break; 134 if (bm->cur_prd_len == 0) { 135 /* end of table (with a fail safe of one page) */ 136 if (bm->cur_prd_last || 137 (bm->cur_addr - bm->addr) >= BMDMA_PAGE_SIZE) 138 return 0; 139 pci_dma_read(pci_dev, bm->cur_addr, &prd, 8); 140 bm->cur_addr += 8; 141 prd.addr = le32_to_cpu(prd.addr); 142 prd.size = le32_to_cpu(prd.size); 143 len = prd.size & 0xfffe; 144 if (len == 0) 145 len = 0x10000; 146 bm->cur_prd_len = len; 147 bm->cur_prd_addr = prd.addr; 148 bm->cur_prd_last = (prd.size & 0x80000000); 149 } 150 if (l > bm->cur_prd_len) 151 l = bm->cur_prd_len; 152 if (l > 0) { 153 if (is_write) { 154 pci_dma_write(pci_dev, bm->cur_prd_addr, 155 s->io_buffer + s->io_buffer_index, l); 156 } else { 157 pci_dma_read(pci_dev, bm->cur_prd_addr, 158 s->io_buffer + s->io_buffer_index, l); 159 } 160 bm->cur_prd_addr += l; 161 bm->cur_prd_len -= l; 162 s->io_buffer_index += l; 163 } 164 } 165 return 1; 166 } 167 168 static void bmdma_set_inactive(IDEDMA *dma, bool more) 169 { 170 BMDMAState *bm = DO_UPCAST(BMDMAState, dma, dma); 171 172 bm->dma_cb = NULL; 173 if (more) { 174 bm->status |= BM_STATUS_DMAING; 175 } else { 176 bm->status &= ~BM_STATUS_DMAING; 177 } 178 } 179 180 static void bmdma_restart_dma(IDEDMA *dma) 181 { 182 BMDMAState *bm = DO_UPCAST(BMDMAState, dma, dma); 183 184 bm->cur_addr = bm->addr; 185 } 186 187 static void bmdma_cancel(BMDMAState *bm) 188 { 189 if (bm->status & BM_STATUS_DMAING) { 190 /* cancel DMA request */ 191 bmdma_set_inactive(&bm->dma, false); 192 } 193 } 194 195 static void bmdma_reset(IDEDMA *dma) 196 { 197 BMDMAState *bm = DO_UPCAST(BMDMAState, dma, dma); 198 199 #ifdef DEBUG_IDE 200 printf("ide: dma_reset\n"); 201 #endif 202 bmdma_cancel(bm); 203 bm->cmd = 0; 204 bm->status = 0; 205 bm->addr = 0; 206 bm->cur_addr = 0; 207 bm->cur_prd_last = 0; 208 bm->cur_prd_addr = 0; 209 bm->cur_prd_len = 0; 210 } 211 212 static void bmdma_irq(void *opaque, int n, int level) 213 { 214 BMDMAState *bm = opaque; 215 216 if (!level) { 217 /* pass through lower */ 218 qemu_set_irq(bm->irq, level); 219 return; 220 } 221 222 bm->status |= BM_STATUS_INT; 223 224 /* trigger the real irq */ 225 qemu_set_irq(bm->irq, level); 226 } 227 228 void bmdma_cmd_writeb(BMDMAState *bm, uint32_t val) 229 { 230 #ifdef DEBUG_IDE 231 printf("%s: 0x%08x\n", __func__, val); 232 #endif 233 234 /* Ignore writes to SSBM if it keeps the old value */ 235 if ((val & BM_CMD_START) != (bm->cmd & BM_CMD_START)) { 236 if (!(val & BM_CMD_START)) { 237 ide_cancel_dma_sync(idebus_active_if(bm->bus)); 238 bm->status &= ~BM_STATUS_DMAING; 239 } else { 240 bm->cur_addr = bm->addr; 241 if (!(bm->status & BM_STATUS_DMAING)) { 242 bm->status |= BM_STATUS_DMAING; 243 /* start dma transfer if possible */ 244 if (bm->dma_cb) 245 bm->dma_cb(bmdma_active_if(bm), 0); 246 } 247 } 248 } 249 250 bm->cmd = val & 0x09; 251 } 252 253 static uint64_t bmdma_addr_read(void *opaque, hwaddr addr, 254 unsigned width) 255 { 256 BMDMAState *bm = opaque; 257 uint32_t mask = (1ULL << (width * 8)) - 1; 258 uint64_t data; 259 260 data = (bm->addr >> (addr * 8)) & mask; 261 #ifdef DEBUG_IDE 262 printf("%s: 0x%08x\n", __func__, (unsigned)data); 263 #endif 264 return data; 265 } 266 267 static void bmdma_addr_write(void *opaque, hwaddr addr, 268 uint64_t data, unsigned width) 269 { 270 BMDMAState *bm = opaque; 271 int shift = addr * 8; 272 uint32_t mask = (1ULL << (width * 8)) - 1; 273 274 #ifdef DEBUG_IDE 275 printf("%s: 0x%08x\n", __func__, (unsigned)data); 276 #endif 277 bm->addr &= ~(mask << shift); 278 bm->addr |= ((data & mask) << shift) & ~3; 279 } 280 281 MemoryRegionOps bmdma_addr_ioport_ops = { 282 .read = bmdma_addr_read, 283 .write = bmdma_addr_write, 284 .endianness = DEVICE_LITTLE_ENDIAN, 285 }; 286 287 static bool ide_bmdma_current_needed(void *opaque) 288 { 289 BMDMAState *bm = opaque; 290 291 return (bm->cur_prd_len != 0); 292 } 293 294 static bool ide_bmdma_status_needed(void *opaque) 295 { 296 BMDMAState *bm = opaque; 297 298 /* Older versions abused some bits in the status register for internal 299 * error state. If any of these bits are set, we must add a subsection to 300 * transfer the real status register */ 301 uint8_t abused_bits = BM_MIGRATION_COMPAT_STATUS_BITS; 302 303 return ((bm->status & abused_bits) != 0); 304 } 305 306 static void ide_bmdma_pre_save(void *opaque) 307 { 308 BMDMAState *bm = opaque; 309 uint8_t abused_bits = BM_MIGRATION_COMPAT_STATUS_BITS; 310 311 if (!(bm->status & BM_STATUS_DMAING) && bm->dma_cb) { 312 bm->bus->error_status = 313 ide_dma_cmd_to_retry(bmdma_active_if(bm)->dma_cmd); 314 } 315 bm->migration_retry_unit = bm->bus->retry_unit; 316 bm->migration_retry_sector_num = bm->bus->retry_sector_num; 317 bm->migration_retry_nsector = bm->bus->retry_nsector; 318 bm->migration_compat_status = 319 (bm->status & ~abused_bits) | (bm->bus->error_status & abused_bits); 320 } 321 322 /* This function accesses bm->bus->error_status which is loaded only after 323 * BMDMA itself. This is why the function is called from ide_pci_post_load 324 * instead of being registered with VMState where it would run too early. */ 325 static int ide_bmdma_post_load(void *opaque, int version_id) 326 { 327 BMDMAState *bm = opaque; 328 uint8_t abused_bits = BM_MIGRATION_COMPAT_STATUS_BITS; 329 330 if (bm->status == 0) { 331 bm->status = bm->migration_compat_status & ~abused_bits; 332 bm->bus->error_status |= bm->migration_compat_status & abused_bits; 333 } 334 if (bm->bus->error_status) { 335 bm->bus->retry_sector_num = bm->migration_retry_sector_num; 336 bm->bus->retry_nsector = bm->migration_retry_nsector; 337 bm->bus->retry_unit = bm->migration_retry_unit; 338 } 339 340 return 0; 341 } 342 343 static const VMStateDescription vmstate_bmdma_current = { 344 .name = "ide bmdma_current", 345 .version_id = 1, 346 .minimum_version_id = 1, 347 .needed = ide_bmdma_current_needed, 348 .fields = (VMStateField[]) { 349 VMSTATE_UINT32(cur_addr, BMDMAState), 350 VMSTATE_UINT32(cur_prd_last, BMDMAState), 351 VMSTATE_UINT32(cur_prd_addr, BMDMAState), 352 VMSTATE_UINT32(cur_prd_len, BMDMAState), 353 VMSTATE_END_OF_LIST() 354 } 355 }; 356 357 static const VMStateDescription vmstate_bmdma_status = { 358 .name ="ide bmdma/status", 359 .version_id = 1, 360 .minimum_version_id = 1, 361 .needed = ide_bmdma_status_needed, 362 .fields = (VMStateField[]) { 363 VMSTATE_UINT8(status, BMDMAState), 364 VMSTATE_END_OF_LIST() 365 } 366 }; 367 368 static const VMStateDescription vmstate_bmdma = { 369 .name = "ide bmdma", 370 .version_id = 3, 371 .minimum_version_id = 0, 372 .pre_save = ide_bmdma_pre_save, 373 .fields = (VMStateField[]) { 374 VMSTATE_UINT8(cmd, BMDMAState), 375 VMSTATE_UINT8(migration_compat_status, BMDMAState), 376 VMSTATE_UINT32(addr, BMDMAState), 377 VMSTATE_INT64(migration_retry_sector_num, BMDMAState), 378 VMSTATE_UINT32(migration_retry_nsector, BMDMAState), 379 VMSTATE_UINT8(migration_retry_unit, BMDMAState), 380 VMSTATE_END_OF_LIST() 381 }, 382 .subsections = (const VMStateDescription*[]) { 383 &vmstate_bmdma_current, 384 &vmstate_bmdma_status, 385 NULL 386 } 387 }; 388 389 static int ide_pci_post_load(void *opaque, int version_id) 390 { 391 PCIIDEState *d = opaque; 392 int i; 393 394 for(i = 0; i < 2; i++) { 395 /* current versions always store 0/1, but older version 396 stored bigger values. We only need last bit */ 397 d->bmdma[i].migration_retry_unit &= 1; 398 ide_bmdma_post_load(&d->bmdma[i], -1); 399 } 400 401 return 0; 402 } 403 404 const VMStateDescription vmstate_ide_pci = { 405 .name = "ide", 406 .version_id = 3, 407 .minimum_version_id = 0, 408 .post_load = ide_pci_post_load, 409 .fields = (VMStateField[]) { 410 VMSTATE_PCI_DEVICE(parent_obj, PCIIDEState), 411 VMSTATE_STRUCT_ARRAY(bmdma, PCIIDEState, 2, 0, 412 vmstate_bmdma, BMDMAState), 413 VMSTATE_IDE_BUS_ARRAY(bus, PCIIDEState, 2), 414 VMSTATE_IDE_DRIVES(bus[0].ifs, PCIIDEState), 415 VMSTATE_IDE_DRIVES(bus[1].ifs, PCIIDEState), 416 VMSTATE_END_OF_LIST() 417 } 418 }; 419 420 void pci_ide_create_devs(PCIDevice *dev, DriveInfo **hd_table) 421 { 422 PCIIDEState *d = PCI_IDE(dev); 423 static const int bus[4] = { 0, 0, 1, 1 }; 424 static const int unit[4] = { 0, 1, 0, 1 }; 425 int i; 426 427 for (i = 0; i < 4; i++) { 428 if (hd_table[i] == NULL) 429 continue; 430 ide_create_drive(d->bus+bus[i], unit[i], hd_table[i]); 431 } 432 } 433 434 static const struct IDEDMAOps bmdma_ops = { 435 .start_dma = bmdma_start_dma, 436 .prepare_buf = bmdma_prepare_buf, 437 .rw_buf = bmdma_rw_buf, 438 .restart_dma = bmdma_restart_dma, 439 .set_inactive = bmdma_set_inactive, 440 .reset = bmdma_reset, 441 }; 442 443 void bmdma_init(IDEBus *bus, BMDMAState *bm, PCIIDEState *d) 444 { 445 if (bus->dma == &bm->dma) { 446 return; 447 } 448 449 bm->dma.ops = &bmdma_ops; 450 bus->dma = &bm->dma; 451 bm->irq = bus->irq; 452 bus->irq = qemu_allocate_irq(bmdma_irq, bm, 0); 453 bm->pci_dev = d; 454 } 455 456 static const TypeInfo pci_ide_type_info = { 457 .name = TYPE_PCI_IDE, 458 .parent = TYPE_PCI_DEVICE, 459 .instance_size = sizeof(PCIIDEState), 460 .abstract = true, 461 }; 462 463 static void pci_ide_register_types(void) 464 { 465 type_register_static(&pci_ide_type_info); 466 } 467 468 type_init(pci_ide_register_types) 469