xref: /openbmc/qemu/hw/net/opencores_eth.c (revision ba632924)
1 /*
2  * OpenCores Ethernet MAC 10/100 + subset of
3  * National Semiconductors DP83848C 10/100 PHY
4  *
5  * http://opencores.org/svnget,ethmac?file=%2Ftrunk%2F%2Fdoc%2Feth_speci.pdf
6  * http://cache.national.com/ds/DP/DP83848C.pdf
7  *
8  * Copyright (c) 2011, Max Filippov, Open Source and Linux Lab.
9  * All rights reserved.
10  *
11  * Redistribution and use in source and binary forms, with or without
12  * modification, are permitted provided that the following conditions are met:
13  *     * Redistributions of source code must retain the above copyright
14  *       notice, this list of conditions and the following disclaimer.
15  *     * Redistributions in binary form must reproduce the above copyright
16  *       notice, this list of conditions and the following disclaimer in the
17  *       documentation and/or other materials provided with the distribution.
18  *     * Neither the name of the Open Source and Linux Lab nor the
19  *       names of its contributors may be used to endorse or promote products
20  *       derived from this software without specific prior written permission.
21  *
22  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
23  * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
24  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25  * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
26  * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
27  * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
28  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
29  * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
30  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
31  * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
32  */
33 
34 #include "qemu/osdep.h"
35 #include "hw/hw.h"
36 #include "hw/net/mii.h"
37 #include "hw/sysbus.h"
38 #include "net/net.h"
39 #include "net/eth.h"
40 #include "sysemu/sysemu.h"
41 #include "trace.h"
42 
43 /* RECSMALL is not used because it breaks tap networking in linux:
44  * incoming ARP responses are too short
45  */
46 #undef USE_RECSMALL
47 
48 #define GET_FIELD(v, field) (((v) & (field)) >> (field ## _LBN))
49 #define GET_REGBIT(s, reg, field) ((s)->regs[reg] & (reg ## _ ## field))
50 #define GET_REGFIELD(s, reg, field) \
51     GET_FIELD((s)->regs[reg], reg ## _ ## field)
52 
53 #define SET_FIELD(v, field, data) \
54     ((v) = (((v) & ~(field)) | (((data) << (field ## _LBN)) & (field))))
55 #define SET_REGFIELD(s, reg, field, data) \
56     SET_FIELD((s)->regs[reg], reg ## _ ## field, data)
57 
58 /* PHY MII registers */
59 enum {
60     MII_REG_MAX = 16,
61 };
62 
63 typedef struct Mii {
64     uint16_t regs[MII_REG_MAX];
65     bool link_ok;
66 } Mii;
67 
68 static void mii_set_link(Mii *s, bool link_ok)
69 {
70     if (link_ok) {
71         s->regs[MII_BMSR] |= MII_BMSR_LINK_ST;
72         s->regs[MII_ANLPAR] |= MII_ANLPAR_TXFD | MII_ANLPAR_TX |
73             MII_ANLPAR_10FD | MII_ANLPAR_10 | MII_ANLPAR_CSMACD;
74     } else {
75         s->regs[MII_BMSR] &= ~MII_BMSR_LINK_ST;
76         s->regs[MII_ANLPAR] &= 0x01ff;
77     }
78     s->link_ok = link_ok;
79 }
80 
81 static void mii_reset(Mii *s)
82 {
83     memset(s->regs, 0, sizeof(s->regs));
84     s->regs[MII_BMCR] = MII_BMCR_AUTOEN;
85     s->regs[MII_BMSR] = MII_BMSR_100TX_FD | MII_BMSR_100TX_HD |
86         MII_BMSR_10T_FD | MII_BMSR_10T_HD | MII_BMSR_MFPS |
87         MII_BMSR_AN_COMP | MII_BMSR_AUTONEG;
88     s->regs[MII_PHYID1] = 0x2000;
89     s->regs[MII_PHYID2] = 0x5c90;
90     s->regs[MII_ANAR] = MII_ANAR_TXFD | MII_ANAR_TX |
91         MII_ANAR_10FD | MII_ANAR_10 | MII_ANAR_CSMACD;
92     mii_set_link(s, s->link_ok);
93 }
94 
95 static void mii_ro(Mii *s, uint16_t v)
96 {
97 }
98 
99 static void mii_write_bmcr(Mii *s, uint16_t v)
100 {
101     if (v & MII_BMCR_RESET) {
102         mii_reset(s);
103     } else {
104         s->regs[MII_BMCR] = v;
105     }
106 }
107 
108 static void mii_write_host(Mii *s, unsigned idx, uint16_t v)
109 {
110     static void (*reg_write[MII_REG_MAX])(Mii *s, uint16_t v) = {
111         [MII_BMCR] = mii_write_bmcr,
112         [MII_BMSR] = mii_ro,
113         [MII_PHYID1] = mii_ro,
114         [MII_PHYID2] = mii_ro,
115     };
116 
117     if (idx < MII_REG_MAX) {
118         trace_open_eth_mii_write(idx, v);
119         if (reg_write[idx]) {
120             reg_write[idx](s, v);
121         } else {
122             s->regs[idx] = v;
123         }
124     }
125 }
126 
127 static uint16_t mii_read_host(Mii *s, unsigned idx)
128 {
129     trace_open_eth_mii_read(idx, s->regs[idx]);
130     return s->regs[idx];
131 }
132 
133 /* OpenCores Ethernet registers */
134 enum {
135     MODER,
136     INT_SOURCE,
137     INT_MASK,
138     IPGT,
139     IPGR1,
140     IPGR2,
141     PACKETLEN,
142     COLLCONF,
143     TX_BD_NUM,
144     CTRLMODER,
145     MIIMODER,
146     MIICOMMAND,
147     MIIADDRESS,
148     MIITX_DATA,
149     MIIRX_DATA,
150     MIISTATUS,
151     MAC_ADDR0,
152     MAC_ADDR1,
153     HASH0,
154     HASH1,
155     TXCTRL,
156     REG_MAX,
157 };
158 
159 enum {
160     MODER_RECSMALL = 0x10000,
161     MODER_PAD = 0x8000,
162     MODER_HUGEN = 0x4000,
163     MODER_RST = 0x800,
164     MODER_LOOPBCK = 0x80,
165     MODER_PRO = 0x20,
166     MODER_IAM = 0x10,
167     MODER_BRO = 0x8,
168     MODER_TXEN = 0x2,
169     MODER_RXEN = 0x1,
170 };
171 
172 enum {
173     INT_SOURCE_BUSY = 0x10,
174     INT_SOURCE_RXB = 0x4,
175     INT_SOURCE_TXB = 0x1,
176 };
177 
178 enum {
179     PACKETLEN_MINFL = 0xffff0000,
180     PACKETLEN_MINFL_LBN = 16,
181     PACKETLEN_MAXFL = 0xffff,
182     PACKETLEN_MAXFL_LBN = 0,
183 };
184 
185 enum {
186     MIICOMMAND_WCTRLDATA = 0x4,
187     MIICOMMAND_RSTAT = 0x2,
188     MIICOMMAND_SCANSTAT = 0x1,
189 };
190 
191 enum {
192     MIIADDRESS_RGAD = 0x1f00,
193     MIIADDRESS_RGAD_LBN = 8,
194     MIIADDRESS_FIAD = 0x1f,
195     MIIADDRESS_FIAD_LBN = 0,
196 };
197 
198 enum {
199     MIITX_DATA_CTRLDATA = 0xffff,
200     MIITX_DATA_CTRLDATA_LBN = 0,
201 };
202 
203 enum {
204     MIIRX_DATA_PRSD = 0xffff,
205     MIIRX_DATA_PRSD_LBN = 0,
206 };
207 
208 enum {
209     MIISTATUS_LINKFAIL = 0x1,
210     MIISTATUS_LINKFAIL_LBN = 0,
211 };
212 
213 enum {
214     MAC_ADDR0_BYTE2 = 0xff000000,
215     MAC_ADDR0_BYTE2_LBN = 24,
216     MAC_ADDR0_BYTE3 = 0xff0000,
217     MAC_ADDR0_BYTE3_LBN = 16,
218     MAC_ADDR0_BYTE4 = 0xff00,
219     MAC_ADDR0_BYTE4_LBN = 8,
220     MAC_ADDR0_BYTE5 = 0xff,
221     MAC_ADDR0_BYTE5_LBN = 0,
222 };
223 
224 enum {
225     MAC_ADDR1_BYTE0 = 0xff00,
226     MAC_ADDR1_BYTE0_LBN = 8,
227     MAC_ADDR1_BYTE1 = 0xff,
228     MAC_ADDR1_BYTE1_LBN = 0,
229 };
230 
231 enum {
232     TXD_LEN = 0xffff0000,
233     TXD_LEN_LBN = 16,
234     TXD_RD = 0x8000,
235     TXD_IRQ = 0x4000,
236     TXD_WR = 0x2000,
237     TXD_PAD = 0x1000,
238     TXD_CRC = 0x800,
239     TXD_UR = 0x100,
240     TXD_RTRY = 0xf0,
241     TXD_RTRY_LBN = 4,
242     TXD_RL = 0x8,
243     TXD_LC = 0x4,
244     TXD_DF = 0x2,
245     TXD_CS = 0x1,
246 };
247 
248 enum {
249     RXD_LEN = 0xffff0000,
250     RXD_LEN_LBN = 16,
251     RXD_E = 0x8000,
252     RXD_IRQ = 0x4000,
253     RXD_WRAP = 0x2000,
254     RXD_CF = 0x100,
255     RXD_M = 0x80,
256     RXD_OR = 0x40,
257     RXD_IS = 0x20,
258     RXD_DN = 0x10,
259     RXD_TL = 0x8,
260     RXD_SF = 0x4,
261     RXD_CRC = 0x2,
262     RXD_LC = 0x1,
263 };
264 
265 typedef struct desc {
266     uint32_t len_flags;
267     uint32_t buf_ptr;
268 } desc;
269 
270 #define DEFAULT_PHY 1
271 
272 #define TYPE_OPEN_ETH "open_eth"
273 #define OPEN_ETH(obj) OBJECT_CHECK(OpenEthState, (obj), TYPE_OPEN_ETH)
274 
275 typedef struct OpenEthState {
276     SysBusDevice parent_obj;
277 
278     NICState *nic;
279     NICConf conf;
280     MemoryRegion reg_io;
281     MemoryRegion desc_io;
282     qemu_irq irq;
283 
284     Mii mii;
285     uint32_t regs[REG_MAX];
286     unsigned tx_desc;
287     unsigned rx_desc;
288     desc desc[128];
289 } OpenEthState;
290 
291 static desc *rx_desc(OpenEthState *s)
292 {
293     return s->desc + s->rx_desc;
294 }
295 
296 static desc *tx_desc(OpenEthState *s)
297 {
298     return s->desc + s->tx_desc;
299 }
300 
301 static void open_eth_update_irq(OpenEthState *s,
302         uint32_t old, uint32_t new)
303 {
304     if (!old != !new) {
305         trace_open_eth_update_irq(new);
306         qemu_set_irq(s->irq, new);
307     }
308 }
309 
310 static void open_eth_int_source_write(OpenEthState *s,
311         uint32_t val)
312 {
313     uint32_t old_val = s->regs[INT_SOURCE];
314 
315     s->regs[INT_SOURCE] = val;
316     open_eth_update_irq(s, old_val & s->regs[INT_MASK],
317             s->regs[INT_SOURCE] & s->regs[INT_MASK]);
318 }
319 
320 static void open_eth_set_link_status(NetClientState *nc)
321 {
322     OpenEthState *s = qemu_get_nic_opaque(nc);
323 
324     if (GET_REGBIT(s, MIICOMMAND, SCANSTAT)) {
325         SET_REGFIELD(s, MIISTATUS, LINKFAIL, nc->link_down);
326     }
327     mii_set_link(&s->mii, !nc->link_down);
328 }
329 
330 static void open_eth_reset(void *opaque)
331 {
332     OpenEthState *s = opaque;
333 
334     memset(s->regs, 0, sizeof(s->regs));
335     s->regs[MODER] = 0xa000;
336     s->regs[IPGT] = 0x12;
337     s->regs[IPGR1] = 0xc;
338     s->regs[IPGR2] = 0x12;
339     s->regs[PACKETLEN] = 0x400600;
340     s->regs[COLLCONF] = 0xf003f;
341     s->regs[TX_BD_NUM] = 0x40;
342     s->regs[MIIMODER] = 0x64;
343 
344     s->tx_desc = 0;
345     s->rx_desc = 0x40;
346 
347     mii_reset(&s->mii);
348     open_eth_set_link_status(qemu_get_queue(s->nic));
349 }
350 
351 static int open_eth_can_receive(NetClientState *nc)
352 {
353     OpenEthState *s = qemu_get_nic_opaque(nc);
354 
355     return GET_REGBIT(s, MODER, RXEN) &&
356         (s->regs[TX_BD_NUM] < 0x80);
357 }
358 
359 static ssize_t open_eth_receive(NetClientState *nc,
360         const uint8_t *buf, size_t size)
361 {
362     OpenEthState *s = qemu_get_nic_opaque(nc);
363     size_t maxfl = GET_REGFIELD(s, PACKETLEN, MAXFL);
364     size_t minfl = GET_REGFIELD(s, PACKETLEN, MINFL);
365     size_t fcsl = 4;
366     bool miss = true;
367 
368     trace_open_eth_receive((unsigned)size);
369 
370     if (size >= 6) {
371         static const uint8_t bcast_addr[] = {
372             0xff, 0xff, 0xff, 0xff, 0xff, 0xff
373         };
374         if (memcmp(buf, bcast_addr, sizeof(bcast_addr)) == 0) {
375             miss = GET_REGBIT(s, MODER, BRO);
376         } else if ((buf[0] & 0x1) || GET_REGBIT(s, MODER, IAM)) {
377             unsigned mcast_idx = net_crc32(buf, ETH_ALEN) >> 26;
378             miss = !(s->regs[HASH0 + mcast_idx / 32] &
379                     (1 << (mcast_idx % 32)));
380             trace_open_eth_receive_mcast(
381                     mcast_idx, s->regs[HASH0], s->regs[HASH1]);
382         } else {
383             miss = GET_REGFIELD(s, MAC_ADDR1, BYTE0) != buf[0] ||
384                 GET_REGFIELD(s, MAC_ADDR1, BYTE1) != buf[1] ||
385                 GET_REGFIELD(s, MAC_ADDR0, BYTE2) != buf[2] ||
386                 GET_REGFIELD(s, MAC_ADDR0, BYTE3) != buf[3] ||
387                 GET_REGFIELD(s, MAC_ADDR0, BYTE4) != buf[4] ||
388                 GET_REGFIELD(s, MAC_ADDR0, BYTE5) != buf[5];
389         }
390     }
391 
392     if (miss && !GET_REGBIT(s, MODER, PRO)) {
393         trace_open_eth_receive_reject();
394         return size;
395     }
396 
397 #ifdef USE_RECSMALL
398     if (GET_REGBIT(s, MODER, RECSMALL) || size >= minfl) {
399 #else
400     {
401 #endif
402         static const uint8_t zero[64] = {0};
403         desc *desc = rx_desc(s);
404         size_t copy_size = GET_REGBIT(s, MODER, HUGEN) ? 65536 : maxfl;
405 
406         if (!(desc->len_flags & RXD_E)) {
407             open_eth_int_source_write(s,
408                     s->regs[INT_SOURCE] | INT_SOURCE_BUSY);
409             return size;
410         }
411 
412         desc->len_flags &= ~(RXD_CF | RXD_M | RXD_OR |
413                 RXD_IS | RXD_DN | RXD_TL | RXD_SF | RXD_CRC | RXD_LC);
414 
415         if (copy_size > size) {
416             copy_size = size;
417         } else {
418             fcsl = 0;
419         }
420         if (miss) {
421             desc->len_flags |= RXD_M;
422         }
423         if (GET_REGBIT(s, MODER, HUGEN) && size > maxfl) {
424             desc->len_flags |= RXD_TL;
425         }
426 #ifdef USE_RECSMALL
427         if (size < minfl) {
428             desc->len_flags |= RXD_SF;
429         }
430 #endif
431 
432         cpu_physical_memory_write(desc->buf_ptr, buf, copy_size);
433 
434         if (GET_REGBIT(s, MODER, PAD) && copy_size < minfl) {
435             if (minfl - copy_size > fcsl) {
436                 fcsl = 0;
437             } else {
438                 fcsl -= minfl - copy_size;
439             }
440             while (copy_size < minfl) {
441                 size_t zero_sz = minfl - copy_size < sizeof(zero) ?
442                     minfl - copy_size : sizeof(zero);
443 
444                 cpu_physical_memory_write(desc->buf_ptr + copy_size,
445                         zero, zero_sz);
446                 copy_size += zero_sz;
447             }
448         }
449 
450         /* There's no FCS in the frames handed to us by the QEMU, zero fill it.
451          * Don't do it if the frame is cut at the MAXFL or padded with 4 or
452          * more bytes to the MINFL.
453          */
454         cpu_physical_memory_write(desc->buf_ptr + copy_size, zero, fcsl);
455         copy_size += fcsl;
456 
457         SET_FIELD(desc->len_flags, RXD_LEN, copy_size);
458 
459         if ((desc->len_flags & RXD_WRAP) || s->rx_desc == 0x7f) {
460             s->rx_desc = s->regs[TX_BD_NUM];
461         } else {
462             ++s->rx_desc;
463         }
464         desc->len_flags &= ~RXD_E;
465 
466         trace_open_eth_receive_desc(desc->buf_ptr, desc->len_flags);
467 
468         if (desc->len_flags & RXD_IRQ) {
469             open_eth_int_source_write(s,
470                     s->regs[INT_SOURCE] | INT_SOURCE_RXB);
471         }
472     }
473     return size;
474 }
475 
476 static NetClientInfo net_open_eth_info = {
477     .type = NET_CLIENT_DRIVER_NIC,
478     .size = sizeof(NICState),
479     .can_receive = open_eth_can_receive,
480     .receive = open_eth_receive,
481     .link_status_changed = open_eth_set_link_status,
482 };
483 
484 static void open_eth_start_xmit(OpenEthState *s, desc *tx)
485 {
486     uint8_t *buf = NULL;
487     uint8_t buffer[0x600];
488     unsigned len = GET_FIELD(tx->len_flags, TXD_LEN);
489     unsigned tx_len = len;
490 
491     if ((tx->len_flags & TXD_PAD) &&
492             tx_len < GET_REGFIELD(s, PACKETLEN, MINFL)) {
493         tx_len = GET_REGFIELD(s, PACKETLEN, MINFL);
494     }
495     if (!GET_REGBIT(s, MODER, HUGEN) &&
496             tx_len > GET_REGFIELD(s, PACKETLEN, MAXFL)) {
497         tx_len = GET_REGFIELD(s, PACKETLEN, MAXFL);
498     }
499 
500     trace_open_eth_start_xmit(tx->buf_ptr, len, tx_len);
501 
502     if (tx_len > sizeof(buffer)) {
503         buf = g_new(uint8_t, tx_len);
504     } else {
505         buf = buffer;
506     }
507     if (len > tx_len) {
508         len = tx_len;
509     }
510     cpu_physical_memory_read(tx->buf_ptr, buf, len);
511     if (tx_len > len) {
512         memset(buf + len, 0, tx_len - len);
513     }
514     qemu_send_packet(qemu_get_queue(s->nic), buf, tx_len);
515     if (tx_len > sizeof(buffer)) {
516         g_free(buf);
517     }
518 
519     if (tx->len_flags & TXD_WR) {
520         s->tx_desc = 0;
521     } else {
522         ++s->tx_desc;
523         if (s->tx_desc >= s->regs[TX_BD_NUM]) {
524             s->tx_desc = 0;
525         }
526     }
527     tx->len_flags &= ~(TXD_RD | TXD_UR |
528             TXD_RTRY | TXD_RL | TXD_LC | TXD_DF | TXD_CS);
529     if (tx->len_flags & TXD_IRQ) {
530         open_eth_int_source_write(s, s->regs[INT_SOURCE] | INT_SOURCE_TXB);
531     }
532 
533 }
534 
535 static void open_eth_check_start_xmit(OpenEthState *s)
536 {
537     desc *tx = tx_desc(s);
538     if (GET_REGBIT(s, MODER, TXEN) && s->regs[TX_BD_NUM] > 0 &&
539             (tx->len_flags & TXD_RD) &&
540             GET_FIELD(tx->len_flags, TXD_LEN) > 4) {
541         open_eth_start_xmit(s, tx);
542     }
543 }
544 
545 static uint64_t open_eth_reg_read(void *opaque,
546         hwaddr addr, unsigned int size)
547 {
548     static uint32_t (*reg_read[REG_MAX])(OpenEthState *s) = {
549     };
550     OpenEthState *s = opaque;
551     unsigned idx = addr / 4;
552     uint64_t v = 0;
553 
554     if (idx < REG_MAX) {
555         if (reg_read[idx]) {
556             v = reg_read[idx](s);
557         } else {
558             v = s->regs[idx];
559         }
560     }
561     trace_open_eth_reg_read((uint32_t)addr, (uint32_t)v);
562     return v;
563 }
564 
565 static void open_eth_notify_can_receive(OpenEthState *s)
566 {
567     NetClientState *nc = qemu_get_queue(s->nic);
568 
569     if (open_eth_can_receive(nc)) {
570         qemu_flush_queued_packets(nc);
571     }
572 }
573 
574 static void open_eth_ro(OpenEthState *s, uint32_t val)
575 {
576 }
577 
578 static void open_eth_moder_host_write(OpenEthState *s, uint32_t val)
579 {
580     uint32_t set = val & ~s->regs[MODER];
581 
582     if (set & MODER_RST) {
583         open_eth_reset(s);
584     }
585 
586     s->regs[MODER] = val;
587 
588     if (set & MODER_RXEN) {
589         s->rx_desc = s->regs[TX_BD_NUM];
590         open_eth_notify_can_receive(s);
591     }
592     if (set & MODER_TXEN) {
593         s->tx_desc = 0;
594         open_eth_check_start_xmit(s);
595     }
596 }
597 
598 static void open_eth_int_source_host_write(OpenEthState *s, uint32_t val)
599 {
600     uint32_t old = s->regs[INT_SOURCE];
601 
602     s->regs[INT_SOURCE] &= ~val;
603     open_eth_update_irq(s, old & s->regs[INT_MASK],
604             s->regs[INT_SOURCE] & s->regs[INT_MASK]);
605 }
606 
607 static void open_eth_int_mask_host_write(OpenEthState *s, uint32_t val)
608 {
609     uint32_t old = s->regs[INT_MASK];
610 
611     s->regs[INT_MASK] = val;
612     open_eth_update_irq(s, s->regs[INT_SOURCE] & old,
613             s->regs[INT_SOURCE] & s->regs[INT_MASK]);
614 }
615 
616 static void open_eth_tx_bd_num_host_write(OpenEthState *s, uint32_t val)
617 {
618     if (val < 0x80) {
619         bool enable = s->regs[TX_BD_NUM] == 0x80;
620 
621         s->regs[TX_BD_NUM] = val;
622         if (enable) {
623             open_eth_notify_can_receive(s);
624         }
625     }
626 }
627 
628 static void open_eth_mii_command_host_write(OpenEthState *s, uint32_t val)
629 {
630     unsigned fiad = GET_REGFIELD(s, MIIADDRESS, FIAD);
631     unsigned rgad = GET_REGFIELD(s, MIIADDRESS, RGAD);
632 
633     if (val & MIICOMMAND_WCTRLDATA) {
634         if (fiad == DEFAULT_PHY) {
635             mii_write_host(&s->mii, rgad,
636                     GET_REGFIELD(s, MIITX_DATA, CTRLDATA));
637         }
638     }
639     if (val & MIICOMMAND_RSTAT) {
640         if (fiad == DEFAULT_PHY) {
641             SET_REGFIELD(s, MIIRX_DATA, PRSD,
642                     mii_read_host(&s->mii, rgad));
643         } else {
644             s->regs[MIIRX_DATA] = 0xffff;
645         }
646         SET_REGFIELD(s, MIISTATUS, LINKFAIL, qemu_get_queue(s->nic)->link_down);
647     }
648 }
649 
650 static void open_eth_mii_tx_host_write(OpenEthState *s, uint32_t val)
651 {
652     SET_REGFIELD(s, MIITX_DATA, CTRLDATA, val);
653     if (GET_REGFIELD(s, MIIADDRESS, FIAD) == DEFAULT_PHY) {
654         mii_write_host(&s->mii, GET_REGFIELD(s, MIIADDRESS, RGAD),
655                 GET_REGFIELD(s, MIITX_DATA, CTRLDATA));
656     }
657 }
658 
659 static void open_eth_reg_write(void *opaque,
660         hwaddr addr, uint64_t val, unsigned int size)
661 {
662     static void (*reg_write[REG_MAX])(OpenEthState *s, uint32_t val) = {
663         [MODER] = open_eth_moder_host_write,
664         [INT_SOURCE] = open_eth_int_source_host_write,
665         [INT_MASK] = open_eth_int_mask_host_write,
666         [TX_BD_NUM] = open_eth_tx_bd_num_host_write,
667         [MIICOMMAND] = open_eth_mii_command_host_write,
668         [MIITX_DATA] = open_eth_mii_tx_host_write,
669         [MIISTATUS] = open_eth_ro,
670     };
671     OpenEthState *s = opaque;
672     unsigned idx = addr / 4;
673 
674     if (idx < REG_MAX) {
675         trace_open_eth_reg_write((uint32_t)addr, (uint32_t)val);
676         if (reg_write[idx]) {
677             reg_write[idx](s, val);
678         } else {
679             s->regs[idx] = val;
680         }
681     }
682 }
683 
684 static uint64_t open_eth_desc_read(void *opaque,
685         hwaddr addr, unsigned int size)
686 {
687     OpenEthState *s = opaque;
688     uint64_t v = 0;
689 
690     addr &= 0x3ff;
691     memcpy(&v, (uint8_t *)s->desc + addr, size);
692     trace_open_eth_desc_read((uint32_t)addr, (uint32_t)v);
693     return v;
694 }
695 
696 static void open_eth_desc_write(void *opaque,
697         hwaddr addr, uint64_t val, unsigned int size)
698 {
699     OpenEthState *s = opaque;
700 
701     addr &= 0x3ff;
702     trace_open_eth_desc_write((uint32_t)addr, (uint32_t)val);
703     memcpy((uint8_t *)s->desc + addr, &val, size);
704     open_eth_check_start_xmit(s);
705 }
706 
707 
708 static const MemoryRegionOps open_eth_reg_ops = {
709     .read = open_eth_reg_read,
710     .write = open_eth_reg_write,
711 };
712 
713 static const MemoryRegionOps open_eth_desc_ops = {
714     .read = open_eth_desc_read,
715     .write = open_eth_desc_write,
716 };
717 
718 static void sysbus_open_eth_realize(DeviceState *dev, Error **errp)
719 {
720     SysBusDevice *sbd = SYS_BUS_DEVICE(dev);
721     OpenEthState *s = OPEN_ETH(dev);
722 
723     memory_region_init_io(&s->reg_io, OBJECT(dev), &open_eth_reg_ops, s,
724             "open_eth.regs", 0x54);
725     sysbus_init_mmio(sbd, &s->reg_io);
726 
727     memory_region_init_io(&s->desc_io, OBJECT(dev), &open_eth_desc_ops, s,
728             "open_eth.desc", 0x400);
729     sysbus_init_mmio(sbd, &s->desc_io);
730 
731     sysbus_init_irq(sbd, &s->irq);
732 
733     s->nic = qemu_new_nic(&net_open_eth_info, &s->conf,
734                           object_get_typename(OBJECT(s)), dev->id, s);
735 }
736 
737 static void qdev_open_eth_reset(DeviceState *dev)
738 {
739     OpenEthState *d = OPEN_ETH(dev);
740 
741     open_eth_reset(d);
742 }
743 
744 static Property open_eth_properties[] = {
745     DEFINE_NIC_PROPERTIES(OpenEthState, conf),
746     DEFINE_PROP_END_OF_LIST(),
747 };
748 
749 static void open_eth_class_init(ObjectClass *klass, void *data)
750 {
751     DeviceClass *dc = DEVICE_CLASS(klass);
752 
753     dc->realize = sysbus_open_eth_realize;
754     set_bit(DEVICE_CATEGORY_NETWORK, dc->categories);
755     dc->desc = "Opencores 10/100 Mbit Ethernet";
756     dc->reset = qdev_open_eth_reset;
757     dc->props = open_eth_properties;
758 }
759 
760 static const TypeInfo open_eth_info = {
761     .name          = TYPE_OPEN_ETH,
762     .parent        = TYPE_SYS_BUS_DEVICE,
763     .instance_size = sizeof(OpenEthState),
764     .class_init    = open_eth_class_init,
765 };
766 
767 static void open_eth_register_types(void)
768 {
769     type_register_static(&open_eth_info);
770 }
771 
772 type_init(open_eth_register_types)
773