1f1ae32a1SGerd Hoffmann /* 2f1ae32a1SGerd Hoffmann * QEMU USB EHCI Emulation 3f1ae32a1SGerd Hoffmann * 4f1ae32a1SGerd Hoffmann * Copyright(c) 2008 Emutex Ltd. (address@hidden) 5522079ddSHans de Goede * Copyright(c) 2011-2012 Red Hat, Inc. 6522079ddSHans de Goede * 7522079ddSHans de Goede * Red Hat Authors: 8522079ddSHans de Goede * Gerd Hoffmann <kraxel@redhat.com> 9522079ddSHans de Goede * Hans de Goede <hdegoede@redhat.com> 10f1ae32a1SGerd Hoffmann * 11f1ae32a1SGerd Hoffmann * EHCI project was started by Mark Burkley, with contributions by 12f1ae32a1SGerd Hoffmann * Niels de Vos. David S. Ahern continued working on it. Kevin Wolf, 13f1ae32a1SGerd Hoffmann * Jan Kiszka and Vincent Palatin contributed bugfixes. 14f1ae32a1SGerd Hoffmann * 15f1ae32a1SGerd Hoffmann * 16f1ae32a1SGerd Hoffmann * This library is free software; you can redistribute it and/or 17f1ae32a1SGerd Hoffmann * modify it under the terms of the GNU Lesser General Public 18f1ae32a1SGerd Hoffmann * License as published by the Free Software Foundation; either 19f1ae32a1SGerd Hoffmann * version 2 of the License, or(at your option) any later version. 20f1ae32a1SGerd Hoffmann * 21f1ae32a1SGerd Hoffmann * This library is distributed in the hope that it will be useful, 22f1ae32a1SGerd Hoffmann * but WITHOUT ANY WARRANTY; without even the implied warranty of 23f1ae32a1SGerd Hoffmann * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU 24f1ae32a1SGerd Hoffmann * Lesser General Public License for more details. 25f1ae32a1SGerd Hoffmann * 26f1ae32a1SGerd Hoffmann * You should have received a copy of the GNU General Public License 27f1ae32a1SGerd Hoffmann * along with this program; if not, see <http://www.gnu.org/licenses/>. 28f1ae32a1SGerd Hoffmann */ 29f1ae32a1SGerd Hoffmann 30e532b2e0SPeter Maydell #include "qemu/osdep.h" 31da34e65cSMarkus Armbruster #include "qapi/error.h" 32381626a9SGerd Hoffmann #include "hw/usb/ehci-regs.h" 330bf96f94SGerd Hoffmann #include "hw/usb/hcd-ehci.h" 3412269616SStefan Weil #include "trace.h" 35*2ab4b135SAlistair Francis #include "qemu/error-report.h" 36f1ae32a1SGerd Hoffmann 37f1ae32a1SGerd Hoffmann #define FRAME_TIMER_FREQ 1000 3813566fe3SStefan Hajnoczi #define FRAME_TIMER_NS (NANOSECONDS_PER_SECOND / FRAME_TIMER_FREQ) 399359a58bSHans de Goede #define UFRAME_TIMER_NS (FRAME_TIMER_NS / 8) 40f1ae32a1SGerd Hoffmann 41f1ae32a1SGerd Hoffmann #define NB_MAXINTRATE 8 // Max rate at which controller issues ints 42f1ae32a1SGerd Hoffmann #define BUFF_SIZE 5*4096 // Max bytes to transfer per transaction 43f1ae32a1SGerd Hoffmann #define MAX_QH 100 // Max allowable queue heads in a chain 449359a58bSHans de Goede #define MIN_UFR_PER_TICK 24 /* Min frames to process when catching up */ 459359a58bSHans de Goede #define PERIODIC_ACTIVE 512 /* Micro-frames */ 46f1ae32a1SGerd Hoffmann 47f1ae32a1SGerd Hoffmann /* Internal periodic / asynchronous schedule state machine states 48f1ae32a1SGerd Hoffmann */ 49f1ae32a1SGerd Hoffmann typedef enum { 50f1ae32a1SGerd Hoffmann EST_INACTIVE = 1000, 51f1ae32a1SGerd Hoffmann EST_ACTIVE, 52f1ae32a1SGerd Hoffmann EST_EXECUTING, 53f1ae32a1SGerd Hoffmann EST_SLEEPING, 54f1ae32a1SGerd Hoffmann /* The following states are internal to the state machine function 55f1ae32a1SGerd Hoffmann */ 56f1ae32a1SGerd Hoffmann EST_WAITLISTHEAD, 57f1ae32a1SGerd Hoffmann EST_FETCHENTRY, 58f1ae32a1SGerd Hoffmann EST_FETCHQH, 59f1ae32a1SGerd Hoffmann EST_FETCHITD, 60f1ae32a1SGerd Hoffmann EST_FETCHSITD, 61f1ae32a1SGerd Hoffmann EST_ADVANCEQUEUE, 62f1ae32a1SGerd Hoffmann EST_FETCHQTD, 63f1ae32a1SGerd Hoffmann EST_EXECUTE, 64f1ae32a1SGerd Hoffmann EST_WRITEBACK, 65f1ae32a1SGerd Hoffmann EST_HORIZONTALQH 66f1ae32a1SGerd Hoffmann } EHCI_STATES; 67f1ae32a1SGerd Hoffmann 68f1ae32a1SGerd Hoffmann /* macros for accessing fields within next link pointer entry */ 69f1ae32a1SGerd Hoffmann #define NLPTR_GET(x) ((x) & 0xffffffe0) 70f1ae32a1SGerd Hoffmann #define NLPTR_TYPE_GET(x) (((x) >> 1) & 3) 71f1ae32a1SGerd Hoffmann #define NLPTR_TBIT(x) ((x) & 1) // 1=invalid, 0=valid 72f1ae32a1SGerd Hoffmann 73f1ae32a1SGerd Hoffmann /* link pointer types */ 74f1ae32a1SGerd Hoffmann #define NLPTR_TYPE_ITD 0 // isoc xfer descriptor 75f1ae32a1SGerd Hoffmann #define NLPTR_TYPE_QH 1 // queue head 76f1ae32a1SGerd Hoffmann #define NLPTR_TYPE_STITD 2 // split xaction, isoc xfer descriptor 77f1ae32a1SGerd Hoffmann #define NLPTR_TYPE_FSTN 3 // frame span traversal node 78f1ae32a1SGerd Hoffmann 79f1ae32a1SGerd Hoffmann #define SET_LAST_RUN_CLOCK(s) \ 80bc72ad67SAlex Bligh (s)->last_run_ns = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL); 81f1ae32a1SGerd Hoffmann 82f1ae32a1SGerd Hoffmann /* nifty macros from Arnon's EHCI version */ 83f1ae32a1SGerd Hoffmann #define get_field(data, field) \ 84f1ae32a1SGerd Hoffmann (((data) & field##_MASK) >> field##_SH) 85f1ae32a1SGerd Hoffmann 86f1ae32a1SGerd Hoffmann #define set_field(data, newval, field) do { \ 87f1ae32a1SGerd Hoffmann uint32_t val = *data; \ 88f1ae32a1SGerd Hoffmann val &= ~ field##_MASK; \ 89f1ae32a1SGerd Hoffmann val |= ((newval) << field##_SH) & field##_MASK; \ 90f1ae32a1SGerd Hoffmann *data = val; \ 91f1ae32a1SGerd Hoffmann } while(0) 92f1ae32a1SGerd Hoffmann 93f1ae32a1SGerd Hoffmann static const char *ehci_state_names[] = { 94f1ae32a1SGerd Hoffmann [EST_INACTIVE] = "INACTIVE", 95f1ae32a1SGerd Hoffmann [EST_ACTIVE] = "ACTIVE", 96f1ae32a1SGerd Hoffmann [EST_EXECUTING] = "EXECUTING", 97f1ae32a1SGerd Hoffmann [EST_SLEEPING] = "SLEEPING", 98f1ae32a1SGerd Hoffmann [EST_WAITLISTHEAD] = "WAITLISTHEAD", 99f1ae32a1SGerd Hoffmann [EST_FETCHENTRY] = "FETCH ENTRY", 100f1ae32a1SGerd Hoffmann [EST_FETCHQH] = "FETCH QH", 101f1ae32a1SGerd Hoffmann [EST_FETCHITD] = "FETCH ITD", 102f1ae32a1SGerd Hoffmann [EST_ADVANCEQUEUE] = "ADVANCEQUEUE", 103f1ae32a1SGerd Hoffmann [EST_FETCHQTD] = "FETCH QTD", 104f1ae32a1SGerd Hoffmann [EST_EXECUTE] = "EXECUTE", 105f1ae32a1SGerd Hoffmann [EST_WRITEBACK] = "WRITEBACK", 106f1ae32a1SGerd Hoffmann [EST_HORIZONTALQH] = "HORIZONTALQH", 107f1ae32a1SGerd Hoffmann }; 108f1ae32a1SGerd Hoffmann 109f1ae32a1SGerd Hoffmann static const char *ehci_mmio_names[] = { 110f1ae32a1SGerd Hoffmann [USBCMD] = "USBCMD", 111f1ae32a1SGerd Hoffmann [USBSTS] = "USBSTS", 112f1ae32a1SGerd Hoffmann [USBINTR] = "USBINTR", 113f1ae32a1SGerd Hoffmann [FRINDEX] = "FRINDEX", 114f1ae32a1SGerd Hoffmann [PERIODICLISTBASE] = "P-LIST BASE", 115f1ae32a1SGerd Hoffmann [ASYNCLISTADDR] = "A-LIST ADDR", 116f1ae32a1SGerd Hoffmann [CONFIGFLAG] = "CONFIGFLAG", 117f1ae32a1SGerd Hoffmann }; 118f1ae32a1SGerd Hoffmann 1194b63a0dfSHans de Goede static int ehci_state_executing(EHCIQueue *q); 1204b63a0dfSHans de Goede static int ehci_state_writeback(EHCIQueue *q); 121ff80ce59SHans de Goede static int ehci_state_advqueue(EHCIQueue *q); 122b4ea8664SHans de Goede static int ehci_fill_queue(EHCIPacket *p); 1232b3de6adSHans de Goede static void ehci_free_packet(EHCIPacket *p); 1244b63a0dfSHans de Goede 125f1ae32a1SGerd Hoffmann static const char *nr2str(const char **n, size_t len, uint32_t nr) 126f1ae32a1SGerd Hoffmann { 127f1ae32a1SGerd Hoffmann if (nr < len && n[nr] != NULL) { 128f1ae32a1SGerd Hoffmann return n[nr]; 129f1ae32a1SGerd Hoffmann } else { 130f1ae32a1SGerd Hoffmann return "unknown"; 131f1ae32a1SGerd Hoffmann } 132f1ae32a1SGerd Hoffmann } 133f1ae32a1SGerd Hoffmann 134f1ae32a1SGerd Hoffmann static const char *state2str(uint32_t state) 135f1ae32a1SGerd Hoffmann { 136f1ae32a1SGerd Hoffmann return nr2str(ehci_state_names, ARRAY_SIZE(ehci_state_names), state); 137f1ae32a1SGerd Hoffmann } 138f1ae32a1SGerd Hoffmann 139a8170e5eSAvi Kivity static const char *addr2str(hwaddr addr) 140f1ae32a1SGerd Hoffmann { 14127a11324SPeter Crosthwaite return nr2str(ehci_mmio_names, ARRAY_SIZE(ehci_mmio_names), addr); 142f1ae32a1SGerd Hoffmann } 143f1ae32a1SGerd Hoffmann 144f1ae32a1SGerd Hoffmann static void ehci_trace_usbsts(uint32_t mask, int state) 145f1ae32a1SGerd Hoffmann { 146f1ae32a1SGerd Hoffmann /* interrupts */ 147f1ae32a1SGerd Hoffmann if (mask & USBSTS_INT) { 148f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("INT", state); 149f1ae32a1SGerd Hoffmann } 150f1ae32a1SGerd Hoffmann if (mask & USBSTS_ERRINT) { 151f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("ERRINT", state); 152f1ae32a1SGerd Hoffmann } 153f1ae32a1SGerd Hoffmann if (mask & USBSTS_PCD) { 154f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("PCD", state); 155f1ae32a1SGerd Hoffmann } 156f1ae32a1SGerd Hoffmann if (mask & USBSTS_FLR) { 157f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("FLR", state); 158f1ae32a1SGerd Hoffmann } 159f1ae32a1SGerd Hoffmann if (mask & USBSTS_HSE) { 160f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("HSE", state); 161f1ae32a1SGerd Hoffmann } 162f1ae32a1SGerd Hoffmann if (mask & USBSTS_IAA) { 163f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("IAA", state); 164f1ae32a1SGerd Hoffmann } 165f1ae32a1SGerd Hoffmann 166f1ae32a1SGerd Hoffmann /* status */ 167f1ae32a1SGerd Hoffmann if (mask & USBSTS_HALT) { 168f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("HALT", state); 169f1ae32a1SGerd Hoffmann } 170f1ae32a1SGerd Hoffmann if (mask & USBSTS_REC) { 171f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("REC", state); 172f1ae32a1SGerd Hoffmann } 173f1ae32a1SGerd Hoffmann if (mask & USBSTS_PSS) { 174f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("PSS", state); 175f1ae32a1SGerd Hoffmann } 176f1ae32a1SGerd Hoffmann if (mask & USBSTS_ASS) { 177f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("ASS", state); 178f1ae32a1SGerd Hoffmann } 179f1ae32a1SGerd Hoffmann } 180f1ae32a1SGerd Hoffmann 181f1ae32a1SGerd Hoffmann static inline void ehci_set_usbsts(EHCIState *s, int mask) 182f1ae32a1SGerd Hoffmann { 183f1ae32a1SGerd Hoffmann if ((s->usbsts & mask) == mask) { 184f1ae32a1SGerd Hoffmann return; 185f1ae32a1SGerd Hoffmann } 186f1ae32a1SGerd Hoffmann ehci_trace_usbsts(mask, 1); 187f1ae32a1SGerd Hoffmann s->usbsts |= mask; 188f1ae32a1SGerd Hoffmann } 189f1ae32a1SGerd Hoffmann 190f1ae32a1SGerd Hoffmann static inline void ehci_clear_usbsts(EHCIState *s, int mask) 191f1ae32a1SGerd Hoffmann { 192f1ae32a1SGerd Hoffmann if ((s->usbsts & mask) == 0) { 193f1ae32a1SGerd Hoffmann return; 194f1ae32a1SGerd Hoffmann } 195f1ae32a1SGerd Hoffmann ehci_trace_usbsts(mask, 0); 196f1ae32a1SGerd Hoffmann s->usbsts &= ~mask; 197f1ae32a1SGerd Hoffmann } 198f1ae32a1SGerd Hoffmann 1997efc17afSGerd Hoffmann /* update irq line */ 2007efc17afSGerd Hoffmann static inline void ehci_update_irq(EHCIState *s) 201f1ae32a1SGerd Hoffmann { 202f1ae32a1SGerd Hoffmann int level = 0; 203f1ae32a1SGerd Hoffmann 204f1ae32a1SGerd Hoffmann if ((s->usbsts & USBINTR_MASK) & s->usbintr) { 205f1ae32a1SGerd Hoffmann level = 1; 206f1ae32a1SGerd Hoffmann } 207f1ae32a1SGerd Hoffmann 2087efc17afSGerd Hoffmann trace_usb_ehci_irq(level, s->frindex, s->usbsts, s->usbintr); 209f1ae32a1SGerd Hoffmann qemu_set_irq(s->irq, level); 210f1ae32a1SGerd Hoffmann } 211f1ae32a1SGerd Hoffmann 2127efc17afSGerd Hoffmann /* flag interrupt condition */ 2137efc17afSGerd Hoffmann static inline void ehci_raise_irq(EHCIState *s, int intr) 214f1ae32a1SGerd Hoffmann { 2156d3b6d3dSGerd Hoffmann if (intr & (USBSTS_PCD | USBSTS_FLR | USBSTS_HSE)) { 2166d3b6d3dSGerd Hoffmann s->usbsts |= intr; 2176d3b6d3dSGerd Hoffmann ehci_update_irq(s); 2186d3b6d3dSGerd Hoffmann } else { 219f1ae32a1SGerd Hoffmann s->usbsts_pending |= intr; 220f1ae32a1SGerd Hoffmann } 2216d3b6d3dSGerd Hoffmann } 222f1ae32a1SGerd Hoffmann 2237efc17afSGerd Hoffmann /* 2247efc17afSGerd Hoffmann * Commit pending interrupts (added via ehci_raise_irq), 2257efc17afSGerd Hoffmann * at the rate allowed by "Interrupt Threshold Control". 2267efc17afSGerd Hoffmann */ 2277efc17afSGerd Hoffmann static inline void ehci_commit_irq(EHCIState *s) 228f1ae32a1SGerd Hoffmann { 2297efc17afSGerd Hoffmann uint32_t itc; 2307efc17afSGerd Hoffmann 231f1ae32a1SGerd Hoffmann if (!s->usbsts_pending) { 232f1ae32a1SGerd Hoffmann return; 233f1ae32a1SGerd Hoffmann } 2347efc17afSGerd Hoffmann if (s->usbsts_frindex > s->frindex) { 2357efc17afSGerd Hoffmann return; 2367efc17afSGerd Hoffmann } 2377efc17afSGerd Hoffmann 2387efc17afSGerd Hoffmann itc = (s->usbcmd >> 16) & 0xff; 2397efc17afSGerd Hoffmann s->usbsts |= s->usbsts_pending; 240f1ae32a1SGerd Hoffmann s->usbsts_pending = 0; 2417efc17afSGerd Hoffmann s->usbsts_frindex = s->frindex + itc; 2427efc17afSGerd Hoffmann ehci_update_irq(s); 243f1ae32a1SGerd Hoffmann } 244f1ae32a1SGerd Hoffmann 245daf25307SGerd Hoffmann static void ehci_update_halt(EHCIState *s) 246daf25307SGerd Hoffmann { 247daf25307SGerd Hoffmann if (s->usbcmd & USBCMD_RUNSTOP) { 248daf25307SGerd Hoffmann ehci_clear_usbsts(s, USBSTS_HALT); 249daf25307SGerd Hoffmann } else { 250daf25307SGerd Hoffmann if (s->astate == EST_INACTIVE && s->pstate == EST_INACTIVE) { 251daf25307SGerd Hoffmann ehci_set_usbsts(s, USBSTS_HALT); 252daf25307SGerd Hoffmann } 253daf25307SGerd Hoffmann } 254daf25307SGerd Hoffmann } 255daf25307SGerd Hoffmann 256f1ae32a1SGerd Hoffmann static void ehci_set_state(EHCIState *s, int async, int state) 257f1ae32a1SGerd Hoffmann { 258f1ae32a1SGerd Hoffmann if (async) { 259f1ae32a1SGerd Hoffmann trace_usb_ehci_state("async", state2str(state)); 260f1ae32a1SGerd Hoffmann s->astate = state; 261b53f685dSGerd Hoffmann if (s->astate == EST_INACTIVE) { 262b53f685dSGerd Hoffmann ehci_clear_usbsts(s, USBSTS_ASS); 263daf25307SGerd Hoffmann ehci_update_halt(s); 264b53f685dSGerd Hoffmann } else { 265b53f685dSGerd Hoffmann ehci_set_usbsts(s, USBSTS_ASS); 266b53f685dSGerd Hoffmann } 267f1ae32a1SGerd Hoffmann } else { 268f1ae32a1SGerd Hoffmann trace_usb_ehci_state("periodic", state2str(state)); 269f1ae32a1SGerd Hoffmann s->pstate = state; 270b53f685dSGerd Hoffmann if (s->pstate == EST_INACTIVE) { 271b53f685dSGerd Hoffmann ehci_clear_usbsts(s, USBSTS_PSS); 272daf25307SGerd Hoffmann ehci_update_halt(s); 273b53f685dSGerd Hoffmann } else { 274b53f685dSGerd Hoffmann ehci_set_usbsts(s, USBSTS_PSS); 275b53f685dSGerd Hoffmann } 276f1ae32a1SGerd Hoffmann } 277f1ae32a1SGerd Hoffmann } 278f1ae32a1SGerd Hoffmann 279f1ae32a1SGerd Hoffmann static int ehci_get_state(EHCIState *s, int async) 280f1ae32a1SGerd Hoffmann { 281f1ae32a1SGerd Hoffmann return async ? s->astate : s->pstate; 282f1ae32a1SGerd Hoffmann } 283f1ae32a1SGerd Hoffmann 284f1ae32a1SGerd Hoffmann static void ehci_set_fetch_addr(EHCIState *s, int async, uint32_t addr) 285f1ae32a1SGerd Hoffmann { 286f1ae32a1SGerd Hoffmann if (async) { 287f1ae32a1SGerd Hoffmann s->a_fetch_addr = addr; 288f1ae32a1SGerd Hoffmann } else { 289f1ae32a1SGerd Hoffmann s->p_fetch_addr = addr; 290f1ae32a1SGerd Hoffmann } 291f1ae32a1SGerd Hoffmann } 292f1ae32a1SGerd Hoffmann 293f1ae32a1SGerd Hoffmann static int ehci_get_fetch_addr(EHCIState *s, int async) 294f1ae32a1SGerd Hoffmann { 295f1ae32a1SGerd Hoffmann return async ? s->a_fetch_addr : s->p_fetch_addr; 296f1ae32a1SGerd Hoffmann } 297f1ae32a1SGerd Hoffmann 298a8170e5eSAvi Kivity static void ehci_trace_qh(EHCIQueue *q, hwaddr addr, EHCIqh *qh) 299f1ae32a1SGerd Hoffmann { 300f1ae32a1SGerd Hoffmann /* need three here due to argument count limits */ 301f1ae32a1SGerd Hoffmann trace_usb_ehci_qh_ptrs(q, addr, qh->next, 302f1ae32a1SGerd Hoffmann qh->current_qtd, qh->next_qtd, qh->altnext_qtd); 303f1ae32a1SGerd Hoffmann trace_usb_ehci_qh_fields(addr, 304f1ae32a1SGerd Hoffmann get_field(qh->epchar, QH_EPCHAR_RL), 305f1ae32a1SGerd Hoffmann get_field(qh->epchar, QH_EPCHAR_MPLEN), 306f1ae32a1SGerd Hoffmann get_field(qh->epchar, QH_EPCHAR_EPS), 307f1ae32a1SGerd Hoffmann get_field(qh->epchar, QH_EPCHAR_EP), 308f1ae32a1SGerd Hoffmann get_field(qh->epchar, QH_EPCHAR_DEVADDR)); 309f1ae32a1SGerd Hoffmann trace_usb_ehci_qh_bits(addr, 310f1ae32a1SGerd Hoffmann (bool)(qh->epchar & QH_EPCHAR_C), 311f1ae32a1SGerd Hoffmann (bool)(qh->epchar & QH_EPCHAR_H), 312f1ae32a1SGerd Hoffmann (bool)(qh->epchar & QH_EPCHAR_DTC), 313f1ae32a1SGerd Hoffmann (bool)(qh->epchar & QH_EPCHAR_I)); 314f1ae32a1SGerd Hoffmann } 315f1ae32a1SGerd Hoffmann 316a8170e5eSAvi Kivity static void ehci_trace_qtd(EHCIQueue *q, hwaddr addr, EHCIqtd *qtd) 317f1ae32a1SGerd Hoffmann { 318f1ae32a1SGerd Hoffmann /* need three here due to argument count limits */ 319f1ae32a1SGerd Hoffmann trace_usb_ehci_qtd_ptrs(q, addr, qtd->next, qtd->altnext); 320f1ae32a1SGerd Hoffmann trace_usb_ehci_qtd_fields(addr, 321f1ae32a1SGerd Hoffmann get_field(qtd->token, QTD_TOKEN_TBYTES), 322f1ae32a1SGerd Hoffmann get_field(qtd->token, QTD_TOKEN_CPAGE), 323f1ae32a1SGerd Hoffmann get_field(qtd->token, QTD_TOKEN_CERR), 324f1ae32a1SGerd Hoffmann get_field(qtd->token, QTD_TOKEN_PID)); 325f1ae32a1SGerd Hoffmann trace_usb_ehci_qtd_bits(addr, 326f1ae32a1SGerd Hoffmann (bool)(qtd->token & QTD_TOKEN_IOC), 327f1ae32a1SGerd Hoffmann (bool)(qtd->token & QTD_TOKEN_ACTIVE), 328f1ae32a1SGerd Hoffmann (bool)(qtd->token & QTD_TOKEN_HALT), 329f1ae32a1SGerd Hoffmann (bool)(qtd->token & QTD_TOKEN_BABBLE), 330f1ae32a1SGerd Hoffmann (bool)(qtd->token & QTD_TOKEN_XACTERR)); 331f1ae32a1SGerd Hoffmann } 332f1ae32a1SGerd Hoffmann 333a8170e5eSAvi Kivity static void ehci_trace_itd(EHCIState *s, hwaddr addr, EHCIitd *itd) 334f1ae32a1SGerd Hoffmann { 335f1ae32a1SGerd Hoffmann trace_usb_ehci_itd(addr, itd->next, 336f1ae32a1SGerd Hoffmann get_field(itd->bufptr[1], ITD_BUFPTR_MAXPKT), 337f1ae32a1SGerd Hoffmann get_field(itd->bufptr[2], ITD_BUFPTR_MULT), 338f1ae32a1SGerd Hoffmann get_field(itd->bufptr[0], ITD_BUFPTR_EP), 339f1ae32a1SGerd Hoffmann get_field(itd->bufptr[0], ITD_BUFPTR_DEVADDR)); 340f1ae32a1SGerd Hoffmann } 341f1ae32a1SGerd Hoffmann 342a8170e5eSAvi Kivity static void ehci_trace_sitd(EHCIState *s, hwaddr addr, 343f1ae32a1SGerd Hoffmann EHCIsitd *sitd) 344f1ae32a1SGerd Hoffmann { 345f1ae32a1SGerd Hoffmann trace_usb_ehci_sitd(addr, sitd->next, 346f1ae32a1SGerd Hoffmann (bool)(sitd->results & SITD_RESULTS_ACTIVE)); 347f1ae32a1SGerd Hoffmann } 348f1ae32a1SGerd Hoffmann 3495c514681SGerd Hoffmann static void ehci_trace_guest_bug(EHCIState *s, const char *message) 3505c514681SGerd Hoffmann { 3515c514681SGerd Hoffmann trace_usb_ehci_guest_bug(message); 352*2ab4b135SAlistair Francis warn_report("%s", message); 3535c514681SGerd Hoffmann } 3545c514681SGerd Hoffmann 355ec807d12SGerd Hoffmann static inline bool ehci_enabled(EHCIState *s) 356ec807d12SGerd Hoffmann { 357ec807d12SGerd Hoffmann return s->usbcmd & USBCMD_RUNSTOP; 358ec807d12SGerd Hoffmann } 359ec807d12SGerd Hoffmann 360ec807d12SGerd Hoffmann static inline bool ehci_async_enabled(EHCIState *s) 361ec807d12SGerd Hoffmann { 362ec807d12SGerd Hoffmann return ehci_enabled(s) && (s->usbcmd & USBCMD_ASE); 363ec807d12SGerd Hoffmann } 364ec807d12SGerd Hoffmann 365ec807d12SGerd Hoffmann static inline bool ehci_periodic_enabled(EHCIState *s) 366ec807d12SGerd Hoffmann { 367ec807d12SGerd Hoffmann return ehci_enabled(s) && (s->usbcmd & USBCMD_PSE); 368ec807d12SGerd Hoffmann } 369ec807d12SGerd Hoffmann 370190d8492SHans de Goede /* Get an array of dwords from main memory */ 371190d8492SHans de Goede static inline int get_dwords(EHCIState *ehci, uint32_t addr, 372190d8492SHans de Goede uint32_t *buf, int num) 373190d8492SHans de Goede { 374190d8492SHans de Goede int i; 375190d8492SHans de Goede 376df32fd1cSPaolo Bonzini if (!ehci->as) { 377190d8492SHans de Goede ehci_raise_irq(ehci, USBSTS_HSE); 378190d8492SHans de Goede ehci->usbcmd &= ~USBCMD_RUNSTOP; 379190d8492SHans de Goede trace_usb_ehci_dma_error(); 380190d8492SHans de Goede return -1; 381190d8492SHans de Goede } 382190d8492SHans de Goede 383190d8492SHans de Goede for (i = 0; i < num; i++, buf++, addr += sizeof(*buf)) { 384df32fd1cSPaolo Bonzini dma_memory_read(ehci->as, addr, buf, sizeof(*buf)); 385190d8492SHans de Goede *buf = le32_to_cpu(*buf); 386190d8492SHans de Goede } 387190d8492SHans de Goede 388190d8492SHans de Goede return num; 389190d8492SHans de Goede } 390190d8492SHans de Goede 391190d8492SHans de Goede /* Put an array of dwords in to main memory */ 392190d8492SHans de Goede static inline int put_dwords(EHCIState *ehci, uint32_t addr, 393190d8492SHans de Goede uint32_t *buf, int num) 394190d8492SHans de Goede { 395190d8492SHans de Goede int i; 396190d8492SHans de Goede 397df32fd1cSPaolo Bonzini if (!ehci->as) { 398190d8492SHans de Goede ehci_raise_irq(ehci, USBSTS_HSE); 399190d8492SHans de Goede ehci->usbcmd &= ~USBCMD_RUNSTOP; 400190d8492SHans de Goede trace_usb_ehci_dma_error(); 401190d8492SHans de Goede return -1; 402190d8492SHans de Goede } 403190d8492SHans de Goede 404190d8492SHans de Goede for (i = 0; i < num; i++, buf++, addr += sizeof(*buf)) { 405190d8492SHans de Goede uint32_t tmp = cpu_to_le32(*buf); 406df32fd1cSPaolo Bonzini dma_memory_write(ehci->as, addr, &tmp, sizeof(tmp)); 407190d8492SHans de Goede } 408190d8492SHans de Goede 409190d8492SHans de Goede return num; 410190d8492SHans de Goede } 411190d8492SHans de Goede 41251e0c5d0SHans de Goede static int ehci_get_pid(EHCIqtd *qtd) 41351e0c5d0SHans de Goede { 41451e0c5d0SHans de Goede switch (get_field(qtd->token, QTD_TOKEN_PID)) { 41551e0c5d0SHans de Goede case 0: 41651e0c5d0SHans de Goede return USB_TOKEN_OUT; 41751e0c5d0SHans de Goede case 1: 41851e0c5d0SHans de Goede return USB_TOKEN_IN; 41951e0c5d0SHans de Goede case 2: 42051e0c5d0SHans de Goede return USB_TOKEN_SETUP; 42151e0c5d0SHans de Goede default: 42251e0c5d0SHans de Goede fprintf(stderr, "bad token\n"); 42351e0c5d0SHans de Goede return 0; 42451e0c5d0SHans de Goede } 42551e0c5d0SHans de Goede } 42651e0c5d0SHans de Goede 427c6432634SHans de Goede static bool ehci_verify_qh(EHCIQueue *q, EHCIqh *qh) 428c6432634SHans de Goede { 429c6432634SHans de Goede uint32_t devaddr = get_field(qh->epchar, QH_EPCHAR_DEVADDR); 430c6432634SHans de Goede uint32_t endp = get_field(qh->epchar, QH_EPCHAR_EP); 431c6432634SHans de Goede if ((devaddr != get_field(q->qh.epchar, QH_EPCHAR_DEVADDR)) || 432c6432634SHans de Goede (endp != get_field(q->qh.epchar, QH_EPCHAR_EP)) || 433c6432634SHans de Goede (qh->current_qtd != q->qh.current_qtd) || 434c6432634SHans de Goede (q->async && qh->next_qtd != q->qh.next_qtd) || 435c6432634SHans de Goede (memcmp(&qh->altnext_qtd, &q->qh.altnext_qtd, 436c6432634SHans de Goede 7 * sizeof(uint32_t)) != 0) || 437c6432634SHans de Goede (q->dev != NULL && q->dev->addr != devaddr)) { 438c6432634SHans de Goede return false; 439c6432634SHans de Goede } else { 440c6432634SHans de Goede return true; 441c6432634SHans de Goede } 442c6432634SHans de Goede } 443c6432634SHans de Goede 444c6432634SHans de Goede static bool ehci_verify_qtd(EHCIPacket *p, EHCIqtd *qtd) 445c6432634SHans de Goede { 446c6432634SHans de Goede if (p->qtdaddr != p->queue->qtdaddr || 447c6432634SHans de Goede (p->queue->async && !NLPTR_TBIT(p->qtd.next) && 448c6432634SHans de Goede (p->qtd.next != qtd->next)) || 449c6432634SHans de Goede (!NLPTR_TBIT(p->qtd.altnext) && (p->qtd.altnext != qtd->altnext)) || 450d066c57bSHans de Goede p->qtd.token != qtd->token || 451c6432634SHans de Goede p->qtd.bufptr[0] != qtd->bufptr[0]) { 452c6432634SHans de Goede return false; 453c6432634SHans de Goede } else { 454c6432634SHans de Goede return true; 455c6432634SHans de Goede } 456c6432634SHans de Goede } 457c6432634SHans de Goede 458bbbc39ccSHans de Goede static bool ehci_verify_pid(EHCIQueue *q, EHCIqtd *qtd) 459bbbc39ccSHans de Goede { 460bbbc39ccSHans de Goede int ep = get_field(q->qh.epchar, QH_EPCHAR_EP); 461bbbc39ccSHans de Goede int pid = ehci_get_pid(qtd); 462bbbc39ccSHans de Goede 463bbbc39ccSHans de Goede /* Note the pid changing is normal for ep 0 (the control ep) */ 464bbbc39ccSHans de Goede if (q->last_pid && ep != 0 && pid != q->last_pid) { 465bbbc39ccSHans de Goede return false; 466bbbc39ccSHans de Goede } else { 467bbbc39ccSHans de Goede return true; 468bbbc39ccSHans de Goede } 469bbbc39ccSHans de Goede } 470bbbc39ccSHans de Goede 471f881c8d3SHans de Goede /* Finish executing and writeback a packet outside of the regular 472f881c8d3SHans de Goede fetchqh -> fetchqtd -> execute -> writeback cycle */ 473f881c8d3SHans de Goede static void ehci_writeback_async_complete_packet(EHCIPacket *p) 474f881c8d3SHans de Goede { 475f881c8d3SHans de Goede EHCIQueue *q = p->queue; 4762b3de6adSHans de Goede EHCIqtd qtd; 4772b3de6adSHans de Goede EHCIqh qh; 478f881c8d3SHans de Goede int state; 479f881c8d3SHans de Goede 4802b3de6adSHans de Goede /* Verify the qh + qtd, like we do when going through fetchqh & fetchqtd */ 4812b3de6adSHans de Goede get_dwords(q->ehci, NLPTR_GET(q->qhaddr), 4822b3de6adSHans de Goede (uint32_t *) &qh, sizeof(EHCIqh) >> 2); 4832b3de6adSHans de Goede get_dwords(q->ehci, NLPTR_GET(q->qtdaddr), 4842b3de6adSHans de Goede (uint32_t *) &qtd, sizeof(EHCIqtd) >> 2); 4852b3de6adSHans de Goede if (!ehci_verify_qh(q, &qh) || !ehci_verify_qtd(p, &qtd)) { 4862b3de6adSHans de Goede p->async = EHCI_ASYNC_INITIALIZED; 4872b3de6adSHans de Goede ehci_free_packet(p); 4882b3de6adSHans de Goede return; 4892b3de6adSHans de Goede } 4902b3de6adSHans de Goede 491f881c8d3SHans de Goede state = ehci_get_state(q->ehci, q->async); 492f881c8d3SHans de Goede ehci_state_executing(q); 493f881c8d3SHans de Goede ehci_state_writeback(q); /* Frees the packet! */ 494f881c8d3SHans de Goede if (!(q->qh.token & QTD_TOKEN_HALT)) { 495f881c8d3SHans de Goede ehci_state_advqueue(q); 496f881c8d3SHans de Goede } 497f881c8d3SHans de Goede ehci_set_state(q->ehci, q->async, state); 498f881c8d3SHans de Goede } 499f881c8d3SHans de Goede 500eb36a88eSGerd Hoffmann /* packet management */ 501eb36a88eSGerd Hoffmann 502eb36a88eSGerd Hoffmann static EHCIPacket *ehci_alloc_packet(EHCIQueue *q) 503eb36a88eSGerd Hoffmann { 504eb36a88eSGerd Hoffmann EHCIPacket *p; 505eb36a88eSGerd Hoffmann 506eb36a88eSGerd Hoffmann p = g_new0(EHCIPacket, 1); 507eb36a88eSGerd Hoffmann p->queue = q; 508eb36a88eSGerd Hoffmann usb_packet_init(&p->packet); 509eb36a88eSGerd Hoffmann QTAILQ_INSERT_TAIL(&q->packets, p, next); 510eb36a88eSGerd Hoffmann trace_usb_ehci_packet_action(p->queue, p, "alloc"); 511eb36a88eSGerd Hoffmann return p; 512eb36a88eSGerd Hoffmann } 513eb36a88eSGerd Hoffmann 514eb36a88eSGerd Hoffmann static void ehci_free_packet(EHCIPacket *p) 515eb36a88eSGerd Hoffmann { 516e449f26bSHans de Goede if (p->async == EHCI_ASYNC_FINISHED && 517e449f26bSHans de Goede !(p->queue->qh.token & QTD_TOKEN_HALT)) { 518f881c8d3SHans de Goede ehci_writeback_async_complete_packet(p); 5194b63a0dfSHans de Goede return; 5204b63a0dfSHans de Goede } 521616789cdSGerd Hoffmann trace_usb_ehci_packet_action(p->queue, p, "free"); 522616789cdSGerd Hoffmann if (p->async == EHCI_ASYNC_INFLIGHT) { 523616789cdSGerd Hoffmann usb_cancel_packet(&p->packet); 524e449f26bSHans de Goede } 525e449f26bSHans de Goede if (p->async == EHCI_ASYNC_FINISHED && 526e449f26bSHans de Goede p->packet.status == USB_RET_SUCCESS) { 527e449f26bSHans de Goede fprintf(stderr, 528e449f26bSHans de Goede "EHCI: Dropping completed packet from halted %s ep %02X\n", 529e449f26bSHans de Goede (p->pid == USB_TOKEN_IN) ? "in" : "out", 530e449f26bSHans de Goede get_field(p->queue->qh.epchar, QH_EPCHAR_EP)); 531e449f26bSHans de Goede } 532e449f26bSHans de Goede if (p->async != EHCI_ASYNC_NONE) { 533616789cdSGerd Hoffmann usb_packet_unmap(&p->packet, &p->sgl); 534616789cdSGerd Hoffmann qemu_sglist_destroy(&p->sgl); 535616789cdSGerd Hoffmann } 536eb36a88eSGerd Hoffmann QTAILQ_REMOVE(&p->queue->packets, p, next); 537eb36a88eSGerd Hoffmann usb_packet_cleanup(&p->packet); 538eb36a88eSGerd Hoffmann g_free(p); 539eb36a88eSGerd Hoffmann } 540eb36a88eSGerd Hoffmann 541f1ae32a1SGerd Hoffmann /* queue management */ 542f1ae32a1SGerd Hoffmann 5438f6d5e26SGerd Hoffmann static EHCIQueue *ehci_alloc_queue(EHCIState *ehci, uint32_t addr, int async) 544f1ae32a1SGerd Hoffmann { 545f1ae32a1SGerd Hoffmann EHCIQueueHead *head = async ? &ehci->aqueues : &ehci->pqueues; 546f1ae32a1SGerd Hoffmann EHCIQueue *q; 547f1ae32a1SGerd Hoffmann 548f1ae32a1SGerd Hoffmann q = g_malloc0(sizeof(*q)); 549f1ae32a1SGerd Hoffmann q->ehci = ehci; 5508f6d5e26SGerd Hoffmann q->qhaddr = addr; 551ae0138a8SGerd Hoffmann q->async = async; 552eb36a88eSGerd Hoffmann QTAILQ_INIT(&q->packets); 553f1ae32a1SGerd Hoffmann QTAILQ_INSERT_HEAD(head, q, next); 554f1ae32a1SGerd Hoffmann trace_usb_ehci_queue_action(q, "alloc"); 555f1ae32a1SGerd Hoffmann return q; 556f1ae32a1SGerd Hoffmann } 557f1ae32a1SGerd Hoffmann 558f79738b0SHans de Goede static void ehci_queue_stopped(EHCIQueue *q) 559f79738b0SHans de Goede { 560f79738b0SHans de Goede int endp = get_field(q->qh.epchar, QH_EPCHAR_EP); 561f79738b0SHans de Goede 562f79738b0SHans de Goede if (!q->last_pid || !q->dev) { 563f79738b0SHans de Goede return; 564f79738b0SHans de Goede } 565f79738b0SHans de Goede 566f79738b0SHans de Goede usb_device_ep_stopped(q->dev, usb_ep_get(q->dev, q->last_pid, endp)); 567f79738b0SHans de Goede } 568f79738b0SHans de Goede 5695c514681SGerd Hoffmann static int ehci_cancel_queue(EHCIQueue *q) 570c7cdca3bSGerd Hoffmann { 571c7cdca3bSGerd Hoffmann EHCIPacket *p; 5725c514681SGerd Hoffmann int packets = 0; 573c7cdca3bSGerd Hoffmann 574c7cdca3bSGerd Hoffmann p = QTAILQ_FIRST(&q->packets); 575c7cdca3bSGerd Hoffmann if (p == NULL) { 576f79738b0SHans de Goede goto leave; 577c7cdca3bSGerd Hoffmann } 578c7cdca3bSGerd Hoffmann 579c7cdca3bSGerd Hoffmann trace_usb_ehci_queue_action(q, "cancel"); 580c7cdca3bSGerd Hoffmann do { 581c7cdca3bSGerd Hoffmann ehci_free_packet(p); 5825c514681SGerd Hoffmann packets++; 583c7cdca3bSGerd Hoffmann } while ((p = QTAILQ_FIRST(&q->packets)) != NULL); 584f79738b0SHans de Goede 585f79738b0SHans de Goede leave: 586f79738b0SHans de Goede ehci_queue_stopped(q); 5875c514681SGerd Hoffmann return packets; 588c7cdca3bSGerd Hoffmann } 589c7cdca3bSGerd Hoffmann 5905c514681SGerd Hoffmann static int ehci_reset_queue(EHCIQueue *q) 591dafe31fcSHans de Goede { 5925c514681SGerd Hoffmann int packets; 5935c514681SGerd Hoffmann 594dafe31fcSHans de Goede trace_usb_ehci_queue_action(q, "reset"); 5955c514681SGerd Hoffmann packets = ehci_cancel_queue(q); 596dafe31fcSHans de Goede q->dev = NULL; 597dafe31fcSHans de Goede q->qtdaddr = 0; 598bbbc39ccSHans de Goede q->last_pid = 0; 5995c514681SGerd Hoffmann return packets; 600dafe31fcSHans de Goede } 601dafe31fcSHans de Goede 6023a8ca08eSHans de Goede static void ehci_free_queue(EHCIQueue *q, const char *warn) 603f1ae32a1SGerd Hoffmann { 604ae0138a8SGerd Hoffmann EHCIQueueHead *head = q->async ? &q->ehci->aqueues : &q->ehci->pqueues; 6053a8ca08eSHans de Goede int cancelled; 606eb36a88eSGerd Hoffmann 607f1ae32a1SGerd Hoffmann trace_usb_ehci_queue_action(q, "free"); 6083a8ca08eSHans de Goede cancelled = ehci_cancel_queue(q); 6093a8ca08eSHans de Goede if (warn && cancelled > 0) { 6103a8ca08eSHans de Goede ehci_trace_guest_bug(q->ehci, warn); 6113a8ca08eSHans de Goede } 612f1ae32a1SGerd Hoffmann QTAILQ_REMOVE(head, q, next); 613f1ae32a1SGerd Hoffmann g_free(q); 614f1ae32a1SGerd Hoffmann } 615f1ae32a1SGerd Hoffmann 616f1ae32a1SGerd Hoffmann static EHCIQueue *ehci_find_queue_by_qh(EHCIState *ehci, uint32_t addr, 617f1ae32a1SGerd Hoffmann int async) 618f1ae32a1SGerd Hoffmann { 619f1ae32a1SGerd Hoffmann EHCIQueueHead *head = async ? &ehci->aqueues : &ehci->pqueues; 620f1ae32a1SGerd Hoffmann EHCIQueue *q; 621f1ae32a1SGerd Hoffmann 622f1ae32a1SGerd Hoffmann QTAILQ_FOREACH(q, head, next) { 623f1ae32a1SGerd Hoffmann if (addr == q->qhaddr) { 624f1ae32a1SGerd Hoffmann return q; 625f1ae32a1SGerd Hoffmann } 626f1ae32a1SGerd Hoffmann } 627f1ae32a1SGerd Hoffmann return NULL; 628f1ae32a1SGerd Hoffmann } 629f1ae32a1SGerd Hoffmann 6308f5457ebSHans de Goede static void ehci_queues_rip_unused(EHCIState *ehci, int async) 631f1ae32a1SGerd Hoffmann { 632f1ae32a1SGerd Hoffmann EHCIQueueHead *head = async ? &ehci->aqueues : &ehci->pqueues; 6338f5457ebSHans de Goede const char *warn = async ? "guest unlinked busy QH" : NULL; 6343a215326SGerd Hoffmann uint64_t maxage = FRAME_TIMER_NS * ehci->maxframes * 4; 635f1ae32a1SGerd Hoffmann EHCIQueue *q, *tmp; 636f1ae32a1SGerd Hoffmann 637f1ae32a1SGerd Hoffmann QTAILQ_FOREACH_SAFE(q, head, next, tmp) { 638f1ae32a1SGerd Hoffmann if (q->seen) { 639f1ae32a1SGerd Hoffmann q->seen = 0; 640f1ae32a1SGerd Hoffmann q->ts = ehci->last_run_ns; 641f1ae32a1SGerd Hoffmann continue; 642f1ae32a1SGerd Hoffmann } 6438f5457ebSHans de Goede if (ehci->last_run_ns < q->ts + maxage) { 644f1ae32a1SGerd Hoffmann continue; 645f1ae32a1SGerd Hoffmann } 6463a8ca08eSHans de Goede ehci_free_queue(q, warn); 647f1ae32a1SGerd Hoffmann } 648f1ae32a1SGerd Hoffmann } 649f1ae32a1SGerd Hoffmann 6508f5457ebSHans de Goede static void ehci_queues_rip_unseen(EHCIState *ehci, int async) 6518f5457ebSHans de Goede { 6528f5457ebSHans de Goede EHCIQueueHead *head = async ? &ehci->aqueues : &ehci->pqueues; 6538f5457ebSHans de Goede EHCIQueue *q, *tmp; 6548f5457ebSHans de Goede 6558f5457ebSHans de Goede QTAILQ_FOREACH_SAFE(q, head, next, tmp) { 6568f5457ebSHans de Goede if (!q->seen) { 6578f5457ebSHans de Goede ehci_free_queue(q, NULL); 6588f5457ebSHans de Goede } 6598f5457ebSHans de Goede } 6608f5457ebSHans de Goede } 6618f5457ebSHans de Goede 662f1ae32a1SGerd Hoffmann static void ehci_queues_rip_device(EHCIState *ehci, USBDevice *dev, int async) 663f1ae32a1SGerd Hoffmann { 664f1ae32a1SGerd Hoffmann EHCIQueueHead *head = async ? &ehci->aqueues : &ehci->pqueues; 665f1ae32a1SGerd Hoffmann EHCIQueue *q, *tmp; 666f1ae32a1SGerd Hoffmann 667f1ae32a1SGerd Hoffmann QTAILQ_FOREACH_SAFE(q, head, next, tmp) { 668e59928b3SGerd Hoffmann if (q->dev != dev) { 669f1ae32a1SGerd Hoffmann continue; 670f1ae32a1SGerd Hoffmann } 6713a8ca08eSHans de Goede ehci_free_queue(q, NULL); 672f1ae32a1SGerd Hoffmann } 673f1ae32a1SGerd Hoffmann } 674f1ae32a1SGerd Hoffmann 675f1ae32a1SGerd Hoffmann static void ehci_queues_rip_all(EHCIState *ehci, int async) 676f1ae32a1SGerd Hoffmann { 677f1ae32a1SGerd Hoffmann EHCIQueueHead *head = async ? &ehci->aqueues : &ehci->pqueues; 6783a8ca08eSHans de Goede const char *warn = async ? "guest stopped busy async schedule" : NULL; 679f1ae32a1SGerd Hoffmann EHCIQueue *q, *tmp; 680f1ae32a1SGerd Hoffmann 681f1ae32a1SGerd Hoffmann QTAILQ_FOREACH_SAFE(q, head, next, tmp) { 6823a8ca08eSHans de Goede ehci_free_queue(q, warn); 683f1ae32a1SGerd Hoffmann } 684f1ae32a1SGerd Hoffmann } 685f1ae32a1SGerd Hoffmann 686f1ae32a1SGerd Hoffmann /* Attach or detach a device on root hub */ 687f1ae32a1SGerd Hoffmann 688f1ae32a1SGerd Hoffmann static void ehci_attach(USBPort *port) 689f1ae32a1SGerd Hoffmann { 690f1ae32a1SGerd Hoffmann EHCIState *s = port->opaque; 691f1ae32a1SGerd Hoffmann uint32_t *portsc = &s->portsc[port->index]; 69230e9d412SGerd Hoffmann const char *owner = (*portsc & PORTSC_POWNER) ? "comp" : "ehci"; 693f1ae32a1SGerd Hoffmann 69430e9d412SGerd Hoffmann trace_usb_ehci_port_attach(port->index, owner, port->dev->product_desc); 695f1ae32a1SGerd Hoffmann 696f1ae32a1SGerd Hoffmann if (*portsc & PORTSC_POWNER) { 697f1ae32a1SGerd Hoffmann USBPort *companion = s->companion_ports[port->index]; 698f1ae32a1SGerd Hoffmann companion->dev = port->dev; 699f1ae32a1SGerd Hoffmann companion->ops->attach(companion); 700f1ae32a1SGerd Hoffmann return; 701f1ae32a1SGerd Hoffmann } 702f1ae32a1SGerd Hoffmann 703f1ae32a1SGerd Hoffmann *portsc |= PORTSC_CONNECT; 704f1ae32a1SGerd Hoffmann *portsc |= PORTSC_CSC; 705f1ae32a1SGerd Hoffmann 7067efc17afSGerd Hoffmann ehci_raise_irq(s, USBSTS_PCD); 707f1ae32a1SGerd Hoffmann } 708f1ae32a1SGerd Hoffmann 709f1ae32a1SGerd Hoffmann static void ehci_detach(USBPort *port) 710f1ae32a1SGerd Hoffmann { 711f1ae32a1SGerd Hoffmann EHCIState *s = port->opaque; 712f1ae32a1SGerd Hoffmann uint32_t *portsc = &s->portsc[port->index]; 71330e9d412SGerd Hoffmann const char *owner = (*portsc & PORTSC_POWNER) ? "comp" : "ehci"; 714f1ae32a1SGerd Hoffmann 71530e9d412SGerd Hoffmann trace_usb_ehci_port_detach(port->index, owner); 716f1ae32a1SGerd Hoffmann 717f1ae32a1SGerd Hoffmann if (*portsc & PORTSC_POWNER) { 718f1ae32a1SGerd Hoffmann USBPort *companion = s->companion_ports[port->index]; 719f1ae32a1SGerd Hoffmann companion->ops->detach(companion); 720f1ae32a1SGerd Hoffmann companion->dev = NULL; 721f1ae32a1SGerd Hoffmann /* 722f1ae32a1SGerd Hoffmann * EHCI spec 4.2.2: "When a disconnect occurs... On the event, 723f1ae32a1SGerd Hoffmann * the port ownership is returned immediately to the EHCI controller." 724f1ae32a1SGerd Hoffmann */ 725f1ae32a1SGerd Hoffmann *portsc &= ~PORTSC_POWNER; 726f1ae32a1SGerd Hoffmann return; 727f1ae32a1SGerd Hoffmann } 728f1ae32a1SGerd Hoffmann 729f1ae32a1SGerd Hoffmann ehci_queues_rip_device(s, port->dev, 0); 730f1ae32a1SGerd Hoffmann ehci_queues_rip_device(s, port->dev, 1); 731f1ae32a1SGerd Hoffmann 732cbf82fa0SGerd Hoffmann *portsc &= ~(PORTSC_CONNECT|PORTSC_PED|PORTSC_SUSPEND); 733f1ae32a1SGerd Hoffmann *portsc |= PORTSC_CSC; 734f1ae32a1SGerd Hoffmann 7357efc17afSGerd Hoffmann ehci_raise_irq(s, USBSTS_PCD); 736f1ae32a1SGerd Hoffmann } 737f1ae32a1SGerd Hoffmann 738f1ae32a1SGerd Hoffmann static void ehci_child_detach(USBPort *port, USBDevice *child) 739f1ae32a1SGerd Hoffmann { 740f1ae32a1SGerd Hoffmann EHCIState *s = port->opaque; 741f1ae32a1SGerd Hoffmann uint32_t portsc = s->portsc[port->index]; 742f1ae32a1SGerd Hoffmann 743f1ae32a1SGerd Hoffmann if (portsc & PORTSC_POWNER) { 744f1ae32a1SGerd Hoffmann USBPort *companion = s->companion_ports[port->index]; 745f1ae32a1SGerd Hoffmann companion->ops->child_detach(companion, child); 746f1ae32a1SGerd Hoffmann return; 747f1ae32a1SGerd Hoffmann } 748f1ae32a1SGerd Hoffmann 749f1ae32a1SGerd Hoffmann ehci_queues_rip_device(s, child, 0); 750f1ae32a1SGerd Hoffmann ehci_queues_rip_device(s, child, 1); 751f1ae32a1SGerd Hoffmann } 752f1ae32a1SGerd Hoffmann 753f1ae32a1SGerd Hoffmann static void ehci_wakeup(USBPort *port) 754f1ae32a1SGerd Hoffmann { 755f1ae32a1SGerd Hoffmann EHCIState *s = port->opaque; 756e489df40SGerd Hoffmann uint32_t *portsc = &s->portsc[port->index]; 757f1ae32a1SGerd Hoffmann 758e489df40SGerd Hoffmann if (*portsc & PORTSC_POWNER) { 759f1ae32a1SGerd Hoffmann USBPort *companion = s->companion_ports[port->index]; 760f1ae32a1SGerd Hoffmann if (companion->ops->wakeup) { 761f1ae32a1SGerd Hoffmann companion->ops->wakeup(companion); 76237952117SHans de Goede } 76337952117SHans de Goede return; 76437952117SHans de Goede } 76537952117SHans de Goede 766e489df40SGerd Hoffmann if (*portsc & PORTSC_SUSPEND) { 767e489df40SGerd Hoffmann trace_usb_ehci_port_wakeup(port->index); 768e489df40SGerd Hoffmann *portsc |= PORTSC_FPRES; 769e489df40SGerd Hoffmann ehci_raise_irq(s, USBSTS_PCD); 770e489df40SGerd Hoffmann } 771e489df40SGerd Hoffmann 7720f588df8SGerd Hoffmann qemu_bh_schedule(s->async_bh); 773f1ae32a1SGerd Hoffmann } 774f1ae32a1SGerd Hoffmann 775f4bbaaf5SMarkus Armbruster static void ehci_register_companion(USBBus *bus, USBPort *ports[], 776f4bbaaf5SMarkus Armbruster uint32_t portcount, uint32_t firstport, 777f4bbaaf5SMarkus Armbruster Error **errp) 778f1ae32a1SGerd Hoffmann { 779f1ae32a1SGerd Hoffmann EHCIState *s = container_of(bus, EHCIState, bus); 780f1ae32a1SGerd Hoffmann uint32_t i; 781f1ae32a1SGerd Hoffmann 782f1ae32a1SGerd Hoffmann if (firstport + portcount > NB_PORTS) { 7832e269f3dSMarkus Armbruster error_setg(errp, "firstport must be between 0 and %u", 7842e269f3dSMarkus Armbruster NB_PORTS - portcount); 785f4bbaaf5SMarkus Armbruster return; 786f1ae32a1SGerd Hoffmann } 787f1ae32a1SGerd Hoffmann 788f1ae32a1SGerd Hoffmann for (i = 0; i < portcount; i++) { 789f1ae32a1SGerd Hoffmann if (s->companion_ports[firstport + i]) { 7902e269f3dSMarkus Armbruster error_setg(errp, "firstport %u asks for ports %u-%u," 7912e269f3dSMarkus Armbruster " but port %u has a companion assigned already", 7922e269f3dSMarkus Armbruster firstport, firstport, firstport + portcount - 1, 7932e269f3dSMarkus Armbruster firstport + i); 794f4bbaaf5SMarkus Armbruster return; 795f1ae32a1SGerd Hoffmann } 796f1ae32a1SGerd Hoffmann } 797f1ae32a1SGerd Hoffmann 798f1ae32a1SGerd Hoffmann for (i = 0; i < portcount; i++) { 799f1ae32a1SGerd Hoffmann s->companion_ports[firstport + i] = ports[i]; 800f1ae32a1SGerd Hoffmann s->ports[firstport + i].speedmask |= 801f1ae32a1SGerd Hoffmann USB_SPEED_MASK_LOW | USB_SPEED_MASK_FULL; 802f1ae32a1SGerd Hoffmann /* Ensure devs attached before the initial reset go to the companion */ 803f1ae32a1SGerd Hoffmann s->portsc[firstport + i] = PORTSC_POWNER; 804f1ae32a1SGerd Hoffmann } 805f1ae32a1SGerd Hoffmann 806f1ae32a1SGerd Hoffmann s->companion_count++; 8073e4f910cSGerd Hoffmann s->caps[0x05] = (s->companion_count << 4) | portcount; 808f1ae32a1SGerd Hoffmann } 809f1ae32a1SGerd Hoffmann 8108550a02dSGerd Hoffmann static void ehci_wakeup_endpoint(USBBus *bus, USBEndpoint *ep, 8118550a02dSGerd Hoffmann unsigned int stream) 81280826240SHans de Goede { 81380826240SHans de Goede EHCIState *s = container_of(bus, EHCIState, bus); 81480826240SHans de Goede uint32_t portsc = s->portsc[ep->dev->port->index]; 81580826240SHans de Goede 81680826240SHans de Goede if (portsc & PORTSC_POWNER) { 81780826240SHans de Goede return; 81880826240SHans de Goede } 81980826240SHans de Goede 82080826240SHans de Goede s->periodic_sched_active = PERIODIC_ACTIVE; 82180826240SHans de Goede qemu_bh_schedule(s->async_bh); 82280826240SHans de Goede } 82380826240SHans de Goede 824f1ae32a1SGerd Hoffmann static USBDevice *ehci_find_device(EHCIState *ehci, uint8_t addr) 825f1ae32a1SGerd Hoffmann { 826f1ae32a1SGerd Hoffmann USBDevice *dev; 827f1ae32a1SGerd Hoffmann USBPort *port; 828f1ae32a1SGerd Hoffmann int i; 829f1ae32a1SGerd Hoffmann 830f1ae32a1SGerd Hoffmann for (i = 0; i < NB_PORTS; i++) { 831f1ae32a1SGerd Hoffmann port = &ehci->ports[i]; 832f1ae32a1SGerd Hoffmann if (!(ehci->portsc[i] & PORTSC_PED)) { 833f1ae32a1SGerd Hoffmann DPRINTF("Port %d not enabled\n", i); 834f1ae32a1SGerd Hoffmann continue; 835f1ae32a1SGerd Hoffmann } 836f1ae32a1SGerd Hoffmann dev = usb_find_device(port, addr); 837f1ae32a1SGerd Hoffmann if (dev != NULL) { 838f1ae32a1SGerd Hoffmann return dev; 839f1ae32a1SGerd Hoffmann } 840f1ae32a1SGerd Hoffmann } 841f1ae32a1SGerd Hoffmann return NULL; 842f1ae32a1SGerd Hoffmann } 843f1ae32a1SGerd Hoffmann 844f1ae32a1SGerd Hoffmann /* 4.1 host controller initialization */ 8454e289b1bSGonglei void ehci_reset(void *opaque) 846f1ae32a1SGerd Hoffmann { 847f1ae32a1SGerd Hoffmann EHCIState *s = opaque; 848f1ae32a1SGerd Hoffmann int i; 849f1ae32a1SGerd Hoffmann USBDevice *devs[NB_PORTS]; 850f1ae32a1SGerd Hoffmann 851f1ae32a1SGerd Hoffmann trace_usb_ehci_reset(); 852f1ae32a1SGerd Hoffmann 853f1ae32a1SGerd Hoffmann /* 854f1ae32a1SGerd Hoffmann * Do the detach before touching portsc, so that it correctly gets send to 855f1ae32a1SGerd Hoffmann * us or to our companion based on PORTSC_POWNER before the reset. 856f1ae32a1SGerd Hoffmann */ 857f1ae32a1SGerd Hoffmann for(i = 0; i < NB_PORTS; i++) { 858f1ae32a1SGerd Hoffmann devs[i] = s->ports[i].dev; 859f1ae32a1SGerd Hoffmann if (devs[i] && devs[i]->attached) { 860f1ae32a1SGerd Hoffmann usb_detach(&s->ports[i]); 861f1ae32a1SGerd Hoffmann } 862f1ae32a1SGerd Hoffmann } 863f1ae32a1SGerd Hoffmann 8643e4f910cSGerd Hoffmann memset(&s->opreg, 0x00, sizeof(s->opreg)); 8653e4f910cSGerd Hoffmann memset(&s->portsc, 0x00, sizeof(s->portsc)); 866f1ae32a1SGerd Hoffmann 867f1ae32a1SGerd Hoffmann s->usbcmd = NB_MAXINTRATE << USBCMD_ITC_SH; 868f1ae32a1SGerd Hoffmann s->usbsts = USBSTS_HALT; 8697efc17afSGerd Hoffmann s->usbsts_pending = 0; 8707efc17afSGerd Hoffmann s->usbsts_frindex = 0; 8715a866074SGerd Hoffmann ehci_update_irq(s); 872f1ae32a1SGerd Hoffmann 873f1ae32a1SGerd Hoffmann s->astate = EST_INACTIVE; 874f1ae32a1SGerd Hoffmann s->pstate = EST_INACTIVE; 875f1ae32a1SGerd Hoffmann 876f1ae32a1SGerd Hoffmann for(i = 0; i < NB_PORTS; i++) { 877f1ae32a1SGerd Hoffmann if (s->companion_ports[i]) { 878f1ae32a1SGerd Hoffmann s->portsc[i] = PORTSC_POWNER | PORTSC_PPOWER; 879f1ae32a1SGerd Hoffmann } else { 880f1ae32a1SGerd Hoffmann s->portsc[i] = PORTSC_PPOWER; 881f1ae32a1SGerd Hoffmann } 882f1ae32a1SGerd Hoffmann if (devs[i] && devs[i]->attached) { 883f1ae32a1SGerd Hoffmann usb_attach(&s->ports[i]); 884f1ae32a1SGerd Hoffmann usb_device_reset(devs[i]); 885f1ae32a1SGerd Hoffmann } 886f1ae32a1SGerd Hoffmann } 887f1ae32a1SGerd Hoffmann ehci_queues_rip_all(s, 0); 888f1ae32a1SGerd Hoffmann ehci_queues_rip_all(s, 1); 889bc72ad67SAlex Bligh timer_del(s->frame_timer); 8900fb3e299SGerd Hoffmann qemu_bh_cancel(s->async_bh); 891f1ae32a1SGerd Hoffmann } 892f1ae32a1SGerd Hoffmann 893a8170e5eSAvi Kivity static uint64_t ehci_caps_read(void *ptr, hwaddr addr, 8943e4f910cSGerd Hoffmann unsigned size) 8953e4f910cSGerd Hoffmann { 8963e4f910cSGerd Hoffmann EHCIState *s = ptr; 8973e4f910cSGerd Hoffmann return s->caps[addr]; 8983e4f910cSGerd Hoffmann } 8993e4f910cSGerd Hoffmann 900dff0367cSPrasad J Pandit static void ehci_caps_write(void *ptr, hwaddr addr, 901dff0367cSPrasad J Pandit uint64_t val, unsigned size) 902dff0367cSPrasad J Pandit { 903dff0367cSPrasad J Pandit } 904dff0367cSPrasad J Pandit 905a8170e5eSAvi Kivity static uint64_t ehci_opreg_read(void *ptr, hwaddr addr, 9063e4f910cSGerd Hoffmann unsigned size) 907f1ae32a1SGerd Hoffmann { 908f1ae32a1SGerd Hoffmann EHCIState *s = ptr; 909f1ae32a1SGerd Hoffmann uint32_t val; 910f1ae32a1SGerd Hoffmann 9119359a58bSHans de Goede switch (addr) { 9129359a58bSHans de Goede case FRINDEX: 9139359a58bSHans de Goede /* Round down to mult of 8, else it can go backwards on migration */ 9149359a58bSHans de Goede val = s->frindex & ~7; 9159359a58bSHans de Goede break; 9169359a58bSHans de Goede default: 9173e4f910cSGerd Hoffmann val = s->opreg[addr >> 2]; 9189359a58bSHans de Goede } 9199359a58bSHans de Goede 92027a11324SPeter Crosthwaite trace_usb_ehci_opreg_read(addr + s->opregbase, addr2str(addr), val); 921f1ae32a1SGerd Hoffmann return val; 922f1ae32a1SGerd Hoffmann } 923f1ae32a1SGerd Hoffmann 924a8170e5eSAvi Kivity static uint64_t ehci_port_read(void *ptr, hwaddr addr, 9253e4f910cSGerd Hoffmann unsigned size) 926f1ae32a1SGerd Hoffmann { 927f1ae32a1SGerd Hoffmann EHCIState *s = ptr; 928f1ae32a1SGerd Hoffmann uint32_t val; 929f1ae32a1SGerd Hoffmann 9303e4f910cSGerd Hoffmann val = s->portsc[addr >> 2]; 931cc8d6a84SKuo-Jung Su trace_usb_ehci_portsc_read(addr + s->portscbase, addr >> 2, val); 932f1ae32a1SGerd Hoffmann return val; 933f1ae32a1SGerd Hoffmann } 934f1ae32a1SGerd Hoffmann 935f1ae32a1SGerd Hoffmann static void handle_port_owner_write(EHCIState *s, int port, uint32_t owner) 936f1ae32a1SGerd Hoffmann { 937f1ae32a1SGerd Hoffmann USBDevice *dev = s->ports[port].dev; 938f1ae32a1SGerd Hoffmann uint32_t *portsc = &s->portsc[port]; 939f1ae32a1SGerd Hoffmann uint32_t orig; 940f1ae32a1SGerd Hoffmann 941f1ae32a1SGerd Hoffmann if (s->companion_ports[port] == NULL) 942f1ae32a1SGerd Hoffmann return; 943f1ae32a1SGerd Hoffmann 944f1ae32a1SGerd Hoffmann owner = owner & PORTSC_POWNER; 945f1ae32a1SGerd Hoffmann orig = *portsc & PORTSC_POWNER; 946f1ae32a1SGerd Hoffmann 947f1ae32a1SGerd Hoffmann if (!(owner ^ orig)) { 948f1ae32a1SGerd Hoffmann return; 949f1ae32a1SGerd Hoffmann } 950f1ae32a1SGerd Hoffmann 951f1ae32a1SGerd Hoffmann if (dev && dev->attached) { 952f1ae32a1SGerd Hoffmann usb_detach(&s->ports[port]); 953f1ae32a1SGerd Hoffmann } 954f1ae32a1SGerd Hoffmann 955f1ae32a1SGerd Hoffmann *portsc &= ~PORTSC_POWNER; 956f1ae32a1SGerd Hoffmann *portsc |= owner; 957f1ae32a1SGerd Hoffmann 958f1ae32a1SGerd Hoffmann if (dev && dev->attached) { 959f1ae32a1SGerd Hoffmann usb_attach(&s->ports[port]); 960f1ae32a1SGerd Hoffmann } 961f1ae32a1SGerd Hoffmann } 962f1ae32a1SGerd Hoffmann 963a8170e5eSAvi Kivity static void ehci_port_write(void *ptr, hwaddr addr, 9643e4f910cSGerd Hoffmann uint64_t val, unsigned size) 965f1ae32a1SGerd Hoffmann { 9663e4f910cSGerd Hoffmann EHCIState *s = ptr; 9673e4f910cSGerd Hoffmann int port = addr >> 2; 968f1ae32a1SGerd Hoffmann uint32_t *portsc = &s->portsc[port]; 9693e4f910cSGerd Hoffmann uint32_t old = *portsc; 970f1ae32a1SGerd Hoffmann USBDevice *dev = s->ports[port].dev; 971f1ae32a1SGerd Hoffmann 972cc8d6a84SKuo-Jung Su trace_usb_ehci_portsc_write(addr + s->portscbase, addr >> 2, val); 9733e4f910cSGerd Hoffmann 974f1ae32a1SGerd Hoffmann /* Clear rwc bits */ 975f1ae32a1SGerd Hoffmann *portsc &= ~(val & PORTSC_RWC_MASK); 976f1ae32a1SGerd Hoffmann /* The guest may clear, but not set the PED bit */ 977f1ae32a1SGerd Hoffmann *portsc &= val | ~PORTSC_PED; 978f1ae32a1SGerd Hoffmann /* POWNER is masked out by RO_MASK as it is RO when we've no companion */ 979f1ae32a1SGerd Hoffmann handle_port_owner_write(s, port, val); 980f1ae32a1SGerd Hoffmann /* And finally apply RO_MASK */ 981f1ae32a1SGerd Hoffmann val &= PORTSC_RO_MASK; 982f1ae32a1SGerd Hoffmann 983f1ae32a1SGerd Hoffmann if ((val & PORTSC_PRESET) && !(*portsc & PORTSC_PRESET)) { 984f1ae32a1SGerd Hoffmann trace_usb_ehci_port_reset(port, 1); 985f1ae32a1SGerd Hoffmann } 986f1ae32a1SGerd Hoffmann 987f1ae32a1SGerd Hoffmann if (!(val & PORTSC_PRESET) &&(*portsc & PORTSC_PRESET)) { 988f1ae32a1SGerd Hoffmann trace_usb_ehci_port_reset(port, 0); 989f1ae32a1SGerd Hoffmann if (dev && dev->attached) { 990f1ae32a1SGerd Hoffmann usb_port_reset(&s->ports[port]); 991f1ae32a1SGerd Hoffmann *portsc &= ~PORTSC_CSC; 992f1ae32a1SGerd Hoffmann } 993f1ae32a1SGerd Hoffmann 994f1ae32a1SGerd Hoffmann /* 995f1ae32a1SGerd Hoffmann * Table 2.16 Set the enable bit(and enable bit change) to indicate 996f1ae32a1SGerd Hoffmann * to SW that this port has a high speed device attached 997f1ae32a1SGerd Hoffmann */ 998f1ae32a1SGerd Hoffmann if (dev && dev->attached && (dev->speedmask & USB_SPEED_MASK_HIGH)) { 999f1ae32a1SGerd Hoffmann val |= PORTSC_PED; 1000f1ae32a1SGerd Hoffmann } 1001f1ae32a1SGerd Hoffmann } 1002f1ae32a1SGerd Hoffmann 1003e489df40SGerd Hoffmann if ((val & PORTSC_SUSPEND) && !(*portsc & PORTSC_SUSPEND)) { 1004e489df40SGerd Hoffmann trace_usb_ehci_port_suspend(port); 1005e489df40SGerd Hoffmann } 1006e489df40SGerd Hoffmann if (!(val & PORTSC_FPRES) && (*portsc & PORTSC_FPRES)) { 1007e489df40SGerd Hoffmann trace_usb_ehci_port_resume(port); 1008e489df40SGerd Hoffmann val &= ~PORTSC_SUSPEND; 1009e489df40SGerd Hoffmann } 1010e489df40SGerd Hoffmann 1011f1ae32a1SGerd Hoffmann *portsc &= ~PORTSC_RO_MASK; 1012f1ae32a1SGerd Hoffmann *portsc |= val; 1013cc8d6a84SKuo-Jung Su trace_usb_ehci_portsc_change(addr + s->portscbase, addr >> 2, *portsc, old); 1014f1ae32a1SGerd Hoffmann } 1015f1ae32a1SGerd Hoffmann 1016a8170e5eSAvi Kivity static void ehci_opreg_write(void *ptr, hwaddr addr, 10173e4f910cSGerd Hoffmann uint64_t val, unsigned size) 1018f1ae32a1SGerd Hoffmann { 1019f1ae32a1SGerd Hoffmann EHCIState *s = ptr; 10203e4f910cSGerd Hoffmann uint32_t *mmio = s->opreg + (addr >> 2); 1021f1ae32a1SGerd Hoffmann uint32_t old = *mmio; 1022f1ae32a1SGerd Hoffmann int i; 1023f1ae32a1SGerd Hoffmann 102427a11324SPeter Crosthwaite trace_usb_ehci_opreg_write(addr + s->opregbase, addr2str(addr), val); 1025f1ae32a1SGerd Hoffmann 102627a11324SPeter Crosthwaite switch (addr) { 1027f1ae32a1SGerd Hoffmann case USBCMD: 10287046530cSGerd Hoffmann if (val & USBCMD_HCRESET) { 10297046530cSGerd Hoffmann ehci_reset(s); 10307046530cSGerd Hoffmann val = s->usbcmd; 10317046530cSGerd Hoffmann break; 10327046530cSGerd Hoffmann } 10337046530cSGerd Hoffmann 1034f1ae32a1SGerd Hoffmann /* not supporting dynamic frame list size at the moment */ 1035f1ae32a1SGerd Hoffmann if ((val & USBCMD_FLS) && !(s->usbcmd & USBCMD_FLS)) { 1036f1ae32a1SGerd Hoffmann fprintf(stderr, "attempt to set frame list size -- value %d\n", 10373e4f910cSGerd Hoffmann (int)val & USBCMD_FLS); 1038f1ae32a1SGerd Hoffmann val &= ~USBCMD_FLS; 1039f1ae32a1SGerd Hoffmann } 104047d073ccSHans de Goede 1041a1c3e4b8SHans de Goede if (val & USBCMD_IAAD) { 1042a1c3e4b8SHans de Goede /* 1043a1c3e4b8SHans de Goede * Process IAAD immediately, otherwise the Linux IAAD watchdog may 1044a1c3e4b8SHans de Goede * trigger and re-use a qh without us seeing the unlink. 1045a1c3e4b8SHans de Goede */ 1046a1c3e4b8SHans de Goede s->async_stepdown = 0; 1047a1c3e4b8SHans de Goede qemu_bh_schedule(s->async_bh); 10481defcbd1SGerd Hoffmann trace_usb_ehci_doorbell_ring(); 1049a1c3e4b8SHans de Goede } 1050a1c3e4b8SHans de Goede 105147d073ccSHans de Goede if (((USBCMD_RUNSTOP | USBCMD_PSE | USBCMD_ASE) & val) != 105247d073ccSHans de Goede ((USBCMD_RUNSTOP | USBCMD_PSE | USBCMD_ASE) & s->usbcmd)) { 105347d073ccSHans de Goede if (s->pstate == EST_INACTIVE) { 105447d073ccSHans de Goede SET_LAST_RUN_CLOCK(s); 105547d073ccSHans de Goede } 105647d073ccSHans de Goede s->usbcmd = val; /* Set usbcmd for ehci_update_halt() */ 105747d073ccSHans de Goede ehci_update_halt(s); 105847d073ccSHans de Goede s->async_stepdown = 0; 10590262f65aSHans de Goede qemu_bh_schedule(s->async_bh); 106047d073ccSHans de Goede } 1061f1ae32a1SGerd Hoffmann break; 1062f1ae32a1SGerd Hoffmann 1063f1ae32a1SGerd Hoffmann case USBSTS: 1064a31f0531SJim Meyering val &= USBSTS_RO_MASK; // bits 6 through 31 are RO 1065a31f0531SJim Meyering ehci_clear_usbsts(s, val); // bits 0 through 5 are R/WC 1066f1ae32a1SGerd Hoffmann val = s->usbsts; 10677efc17afSGerd Hoffmann ehci_update_irq(s); 1068f1ae32a1SGerd Hoffmann break; 1069f1ae32a1SGerd Hoffmann 1070f1ae32a1SGerd Hoffmann case USBINTR: 1071f1ae32a1SGerd Hoffmann val &= USBINTR_MASK; 107240862309SGerd Hoffmann if (ehci_enabled(s) && (USBSTS_FLR & val)) { 107340862309SGerd Hoffmann qemu_bh_schedule(s->async_bh); 107440862309SGerd Hoffmann } 1075f1ae32a1SGerd Hoffmann break; 1076f1ae32a1SGerd Hoffmann 10778a771f77SHans de Goede case FRINDEX: 10789359a58bSHans de Goede val &= 0x00003fff; /* frindex is 14bits */ 10799359a58bSHans de Goede s->usbsts_frindex = val; 10808a771f77SHans de Goede break; 10818a771f77SHans de Goede 1082f1ae32a1SGerd Hoffmann case CONFIGFLAG: 1083f1ae32a1SGerd Hoffmann val &= 0x1; 1084f1ae32a1SGerd Hoffmann if (val) { 1085f1ae32a1SGerd Hoffmann for(i = 0; i < NB_PORTS; i++) 1086f1ae32a1SGerd Hoffmann handle_port_owner_write(s, i, 0); 1087f1ae32a1SGerd Hoffmann } 1088f1ae32a1SGerd Hoffmann break; 1089f1ae32a1SGerd Hoffmann 1090f1ae32a1SGerd Hoffmann case PERIODICLISTBASE: 1091ec807d12SGerd Hoffmann if (ehci_periodic_enabled(s)) { 1092f1ae32a1SGerd Hoffmann fprintf(stderr, 1093f1ae32a1SGerd Hoffmann "ehci: PERIODIC list base register set while periodic schedule\n" 1094f1ae32a1SGerd Hoffmann " is enabled and HC is enabled\n"); 1095f1ae32a1SGerd Hoffmann } 1096f1ae32a1SGerd Hoffmann break; 1097f1ae32a1SGerd Hoffmann 1098f1ae32a1SGerd Hoffmann case ASYNCLISTADDR: 1099ec807d12SGerd Hoffmann if (ehci_async_enabled(s)) { 1100f1ae32a1SGerd Hoffmann fprintf(stderr, 1101f1ae32a1SGerd Hoffmann "ehci: ASYNC list address register set while async schedule\n" 1102f1ae32a1SGerd Hoffmann " is enabled and HC is enabled\n"); 1103f1ae32a1SGerd Hoffmann } 1104f1ae32a1SGerd Hoffmann break; 1105f1ae32a1SGerd Hoffmann } 1106f1ae32a1SGerd Hoffmann 1107f1ae32a1SGerd Hoffmann *mmio = val; 110827a11324SPeter Crosthwaite trace_usb_ehci_opreg_change(addr + s->opregbase, addr2str(addr), 110927a11324SPeter Crosthwaite *mmio, old); 1110f1ae32a1SGerd Hoffmann } 1111f1ae32a1SGerd Hoffmann 1112a5e0139aSGerd Hoffmann /* 1113a5e0139aSGerd Hoffmann * Write the qh back to guest physical memory. This step isn't 1114a5e0139aSGerd Hoffmann * in the EHCI spec but we need to do it since we don't share 1115a5e0139aSGerd Hoffmann * physical memory with our guest VM. 1116a5e0139aSGerd Hoffmann * 1117a5e0139aSGerd Hoffmann * The first three dwords are read-only for the EHCI, so skip them 1118a5e0139aSGerd Hoffmann * when writing back the qh. 1119a5e0139aSGerd Hoffmann */ 1120a5e0139aSGerd Hoffmann static void ehci_flush_qh(EHCIQueue *q) 1121a5e0139aSGerd Hoffmann { 1122a5e0139aSGerd Hoffmann uint32_t *qh = (uint32_t *) &q->qh; 1123a5e0139aSGerd Hoffmann uint32_t dwords = sizeof(EHCIqh) >> 2; 1124a5e0139aSGerd Hoffmann uint32_t addr = NLPTR_GET(q->qhaddr); 1125a5e0139aSGerd Hoffmann 1126a5e0139aSGerd Hoffmann put_dwords(q->ehci, addr + 3 * sizeof(uint32_t), qh + 3, dwords - 3); 1127a5e0139aSGerd Hoffmann } 1128a5e0139aSGerd Hoffmann 1129f1ae32a1SGerd Hoffmann // 4.10.2 1130f1ae32a1SGerd Hoffmann 1131f1ae32a1SGerd Hoffmann static int ehci_qh_do_overlay(EHCIQueue *q) 1132f1ae32a1SGerd Hoffmann { 1133eb36a88eSGerd Hoffmann EHCIPacket *p = QTAILQ_FIRST(&q->packets); 1134f1ae32a1SGerd Hoffmann int i; 1135f1ae32a1SGerd Hoffmann int dtoggle; 1136f1ae32a1SGerd Hoffmann int ping; 1137f1ae32a1SGerd Hoffmann int eps; 1138f1ae32a1SGerd Hoffmann int reload; 1139f1ae32a1SGerd Hoffmann 1140eb36a88eSGerd Hoffmann assert(p != NULL); 1141eb36a88eSGerd Hoffmann assert(p->qtdaddr == q->qtdaddr); 1142eb36a88eSGerd Hoffmann 1143f1ae32a1SGerd Hoffmann // remember values in fields to preserve in qh after overlay 1144f1ae32a1SGerd Hoffmann 1145f1ae32a1SGerd Hoffmann dtoggle = q->qh.token & QTD_TOKEN_DTOGGLE; 1146f1ae32a1SGerd Hoffmann ping = q->qh.token & QTD_TOKEN_PING; 1147f1ae32a1SGerd Hoffmann 1148eb36a88eSGerd Hoffmann q->qh.current_qtd = p->qtdaddr; 1149eb36a88eSGerd Hoffmann q->qh.next_qtd = p->qtd.next; 1150eb36a88eSGerd Hoffmann q->qh.altnext_qtd = p->qtd.altnext; 1151eb36a88eSGerd Hoffmann q->qh.token = p->qtd.token; 1152f1ae32a1SGerd Hoffmann 1153f1ae32a1SGerd Hoffmann 1154f1ae32a1SGerd Hoffmann eps = get_field(q->qh.epchar, QH_EPCHAR_EPS); 1155f1ae32a1SGerd Hoffmann if (eps == EHCI_QH_EPS_HIGH) { 1156f1ae32a1SGerd Hoffmann q->qh.token &= ~QTD_TOKEN_PING; 1157f1ae32a1SGerd Hoffmann q->qh.token |= ping; 1158f1ae32a1SGerd Hoffmann } 1159f1ae32a1SGerd Hoffmann 1160f1ae32a1SGerd Hoffmann reload = get_field(q->qh.epchar, QH_EPCHAR_RL); 1161f1ae32a1SGerd Hoffmann set_field(&q->qh.altnext_qtd, reload, QH_ALTNEXT_NAKCNT); 1162f1ae32a1SGerd Hoffmann 1163f1ae32a1SGerd Hoffmann for (i = 0; i < 5; i++) { 1164eb36a88eSGerd Hoffmann q->qh.bufptr[i] = p->qtd.bufptr[i]; 1165f1ae32a1SGerd Hoffmann } 1166f1ae32a1SGerd Hoffmann 1167f1ae32a1SGerd Hoffmann if (!(q->qh.epchar & QH_EPCHAR_DTC)) { 1168f1ae32a1SGerd Hoffmann // preserve QH DT bit 1169f1ae32a1SGerd Hoffmann q->qh.token &= ~QTD_TOKEN_DTOGGLE; 1170f1ae32a1SGerd Hoffmann q->qh.token |= dtoggle; 1171f1ae32a1SGerd Hoffmann } 1172f1ae32a1SGerd Hoffmann 1173f1ae32a1SGerd Hoffmann q->qh.bufptr[1] &= ~BUFPTR_CPROGMASK_MASK; 1174f1ae32a1SGerd Hoffmann q->qh.bufptr[2] &= ~BUFPTR_FRAMETAG_MASK; 1175f1ae32a1SGerd Hoffmann 1176a5e0139aSGerd Hoffmann ehci_flush_qh(q); 1177f1ae32a1SGerd Hoffmann 1178f1ae32a1SGerd Hoffmann return 0; 1179f1ae32a1SGerd Hoffmann } 1180f1ae32a1SGerd Hoffmann 1181eb36a88eSGerd Hoffmann static int ehci_init_transfer(EHCIPacket *p) 1182f1ae32a1SGerd Hoffmann { 1183f1ae32a1SGerd Hoffmann uint32_t cpage, offset, bytes, plen; 1184f1ae32a1SGerd Hoffmann dma_addr_t page; 1185f1ae32a1SGerd Hoffmann 1186eb36a88eSGerd Hoffmann cpage = get_field(p->qtd.token, QTD_TOKEN_CPAGE); 1187eb36a88eSGerd Hoffmann bytes = get_field(p->qtd.token, QTD_TOKEN_TBYTES); 1188eb36a88eSGerd Hoffmann offset = p->qtd.bufptr[0] & ~QTD_BUFPTR_MASK; 1189adbecc89SGerd Hoffmann qemu_sglist_init(&p->sgl, p->queue->ehci->device, 5, p->queue->ehci->as); 1190f1ae32a1SGerd Hoffmann 1191f1ae32a1SGerd Hoffmann while (bytes > 0) { 1192f1ae32a1SGerd Hoffmann if (cpage > 4) { 1193f1ae32a1SGerd Hoffmann fprintf(stderr, "cpage out of range (%d)\n", cpage); 1194791f9775SLi Qiang qemu_sglist_destroy(&p->sgl); 119501e26b0eSHans de Goede return -1; 1196f1ae32a1SGerd Hoffmann } 1197f1ae32a1SGerd Hoffmann 1198eb36a88eSGerd Hoffmann page = p->qtd.bufptr[cpage] & QTD_BUFPTR_MASK; 1199f1ae32a1SGerd Hoffmann page += offset; 1200f1ae32a1SGerd Hoffmann plen = bytes; 1201f1ae32a1SGerd Hoffmann if (plen > 4096 - offset) { 1202f1ae32a1SGerd Hoffmann plen = 4096 - offset; 1203f1ae32a1SGerd Hoffmann offset = 0; 1204f1ae32a1SGerd Hoffmann cpage++; 1205f1ae32a1SGerd Hoffmann } 1206f1ae32a1SGerd Hoffmann 1207eb36a88eSGerd Hoffmann qemu_sglist_add(&p->sgl, page, plen); 1208f1ae32a1SGerd Hoffmann bytes -= plen; 1209f1ae32a1SGerd Hoffmann } 1210f1ae32a1SGerd Hoffmann return 0; 1211f1ae32a1SGerd Hoffmann } 1212f1ae32a1SGerd Hoffmann 1213e696b1daSHans de Goede static void ehci_finish_transfer(EHCIQueue *q, int len) 1214f1ae32a1SGerd Hoffmann { 1215f1ae32a1SGerd Hoffmann uint32_t cpage, offset; 1216f1ae32a1SGerd Hoffmann 1217e696b1daSHans de Goede if (len > 0) { 1218f1ae32a1SGerd Hoffmann /* update cpage & offset */ 1219f1ae32a1SGerd Hoffmann cpage = get_field(q->qh.token, QTD_TOKEN_CPAGE); 1220f1ae32a1SGerd Hoffmann offset = q->qh.bufptr[0] & ~QTD_BUFPTR_MASK; 1221f1ae32a1SGerd Hoffmann 1222e696b1daSHans de Goede offset += len; 1223f1ae32a1SGerd Hoffmann cpage += offset >> QTD_BUFPTR_SH; 1224f1ae32a1SGerd Hoffmann offset &= ~QTD_BUFPTR_MASK; 1225f1ae32a1SGerd Hoffmann 1226f1ae32a1SGerd Hoffmann set_field(&q->qh.token, cpage, QTD_TOKEN_CPAGE); 1227f1ae32a1SGerd Hoffmann q->qh.bufptr[0] &= QTD_BUFPTR_MASK; 1228f1ae32a1SGerd Hoffmann q->qh.bufptr[0] |= offset; 1229f1ae32a1SGerd Hoffmann } 1230f1ae32a1SGerd Hoffmann } 1231f1ae32a1SGerd Hoffmann 1232f1ae32a1SGerd Hoffmann static void ehci_async_complete_packet(USBPort *port, USBPacket *packet) 1233f1ae32a1SGerd Hoffmann { 1234eb36a88eSGerd Hoffmann EHCIPacket *p; 1235f1ae32a1SGerd Hoffmann EHCIState *s = port->opaque; 1236f1ae32a1SGerd Hoffmann uint32_t portsc = s->portsc[port->index]; 1237f1ae32a1SGerd Hoffmann 1238f1ae32a1SGerd Hoffmann if (portsc & PORTSC_POWNER) { 1239f1ae32a1SGerd Hoffmann USBPort *companion = s->companion_ports[port->index]; 1240f1ae32a1SGerd Hoffmann companion->ops->complete(companion, packet); 1241f1ae32a1SGerd Hoffmann return; 1242f1ae32a1SGerd Hoffmann } 1243f1ae32a1SGerd Hoffmann 1244eb36a88eSGerd Hoffmann p = container_of(packet, EHCIPacket, packet); 1245eb36a88eSGerd Hoffmann assert(p->async == EHCI_ASYNC_INFLIGHT); 12460cae7b1aSHans de Goede 12479a77a0f5SHans de Goede if (packet->status == USB_RET_REMOVE_FROM_QUEUE) { 12480cae7b1aSHans de Goede trace_usb_ehci_packet_action(p->queue, p, "remove"); 12490cae7b1aSHans de Goede ehci_free_packet(p); 12500cae7b1aSHans de Goede return; 12510cae7b1aSHans de Goede } 12520cae7b1aSHans de Goede 12530cae7b1aSHans de Goede trace_usb_ehci_packet_action(p->queue, p, "wakeup"); 1254eb36a88eSGerd Hoffmann p->async = EHCI_ASYNC_FINISHED; 1255ae710b99SGerd Hoffmann 125680826240SHans de Goede if (!p->queue->async) { 125780826240SHans de Goede s->periodic_sched_active = PERIODIC_ACTIVE; 1258ae710b99SGerd Hoffmann } 125980826240SHans de Goede qemu_bh_schedule(s->async_bh); 1260f1ae32a1SGerd Hoffmann } 1261f1ae32a1SGerd Hoffmann 1262f1ae32a1SGerd Hoffmann static void ehci_execute_complete(EHCIQueue *q) 1263f1ae32a1SGerd Hoffmann { 1264eb36a88eSGerd Hoffmann EHCIPacket *p = QTAILQ_FIRST(&q->packets); 1265e696b1daSHans de Goede uint32_t tbytes; 1266eb36a88eSGerd Hoffmann 1267eb36a88eSGerd Hoffmann assert(p != NULL); 1268eb36a88eSGerd Hoffmann assert(p->qtdaddr == q->qtdaddr); 1269ef5b2344SHans de Goede assert(p->async == EHCI_ASYNC_INITIALIZED || 1270ef5b2344SHans de Goede p->async == EHCI_ASYNC_FINISHED); 1271f1ae32a1SGerd Hoffmann 1272e696b1daSHans de Goede DPRINTF("execute_complete: qhaddr 0x%x, next 0x%x, qtdaddr 0x%x, " 1273e696b1daSHans de Goede "status %d, actual_length %d\n", 1274e696b1daSHans de Goede q->qhaddr, q->qh.next, q->qtdaddr, 1275e696b1daSHans de Goede p->packet.status, p->packet.actual_length); 1276f1ae32a1SGerd Hoffmann 1277e696b1daSHans de Goede switch (p->packet.status) { 1278e696b1daSHans de Goede case USB_RET_SUCCESS: 1279e696b1daSHans de Goede break; 1280f1ae32a1SGerd Hoffmann case USB_RET_IOERROR: 1281f1ae32a1SGerd Hoffmann case USB_RET_NODEV: 1282f1ae32a1SGerd Hoffmann q->qh.token |= (QTD_TOKEN_HALT | QTD_TOKEN_XACTERR); 1283f1ae32a1SGerd Hoffmann set_field(&q->qh.token, 0, QTD_TOKEN_CERR); 12847efc17afSGerd Hoffmann ehci_raise_irq(q->ehci, USBSTS_ERRINT); 1285f1ae32a1SGerd Hoffmann break; 1286f1ae32a1SGerd Hoffmann case USB_RET_STALL: 1287f1ae32a1SGerd Hoffmann q->qh.token |= QTD_TOKEN_HALT; 12887efc17afSGerd Hoffmann ehci_raise_irq(q->ehci, USBSTS_ERRINT); 1289f1ae32a1SGerd Hoffmann break; 1290f1ae32a1SGerd Hoffmann case USB_RET_NAK: 1291f1ae32a1SGerd Hoffmann set_field(&q->qh.altnext_qtd, 0, QH_ALTNEXT_NAKCNT); 1292f1ae32a1SGerd Hoffmann return; /* We're not done yet with this transaction */ 1293f1ae32a1SGerd Hoffmann case USB_RET_BABBLE: 1294f1ae32a1SGerd Hoffmann q->qh.token |= (QTD_TOKEN_HALT | QTD_TOKEN_BABBLE); 12957efc17afSGerd Hoffmann ehci_raise_irq(q->ehci, USBSTS_ERRINT); 1296f1ae32a1SGerd Hoffmann break; 1297f1ae32a1SGerd Hoffmann default: 1298f1ae32a1SGerd Hoffmann /* should not be triggerable */ 1299e696b1daSHans de Goede fprintf(stderr, "USB invalid response %d\n", p->packet.status); 1300dfc6f865SStefan Weil g_assert_not_reached(); 1301f1ae32a1SGerd Hoffmann break; 1302f1ae32a1SGerd Hoffmann } 1303f1ae32a1SGerd Hoffmann 1304e696b1daSHans de Goede /* TODO check 4.12 for splits */ 1305e696b1daSHans de Goede tbytes = get_field(q->qh.token, QTD_TOKEN_TBYTES); 1306549a3c3dSHans de Goede if (tbytes && p->pid == USB_TOKEN_IN) { 1307e696b1daSHans de Goede tbytes -= p->packet.actual_length; 1308cf08a8a1SHans de Goede if (tbytes) { 1309cf08a8a1SHans de Goede /* 4.15.1.2 must raise int on a short input packet */ 1310cf08a8a1SHans de Goede ehci_raise_irq(q->ehci, USBSTS_INT); 131152c15e59SHans de Goede if (q->async) { 131252c15e59SHans de Goede q->ehci->int_req_by_async = true; 131352c15e59SHans de Goede } 1314cf08a8a1SHans de Goede } 1315f1ae32a1SGerd Hoffmann } else { 1316549a3c3dSHans de Goede tbytes = 0; 1317f1ae32a1SGerd Hoffmann } 1318549a3c3dSHans de Goede DPRINTF("updating tbytes to %d\n", tbytes); 1319549a3c3dSHans de Goede set_field(&q->qh.token, tbytes, QTD_TOKEN_TBYTES); 1320e696b1daSHans de Goede 1321e696b1daSHans de Goede ehci_finish_transfer(q, p->packet.actual_length); 1322e2f89926SDavid Gibson usb_packet_unmap(&p->packet, &p->sgl); 1323eb36a88eSGerd Hoffmann qemu_sglist_destroy(&p->sgl); 1324ef5b2344SHans de Goede p->async = EHCI_ASYNC_NONE; 1325f1ae32a1SGerd Hoffmann 1326f1ae32a1SGerd Hoffmann q->qh.token ^= QTD_TOKEN_DTOGGLE; 1327f1ae32a1SGerd Hoffmann q->qh.token &= ~QTD_TOKEN_ACTIVE; 1328f1ae32a1SGerd Hoffmann 1329f1ae32a1SGerd Hoffmann if (q->qh.token & QTD_TOKEN_IOC) { 13307efc17afSGerd Hoffmann ehci_raise_irq(q->ehci, USBSTS_INT); 133144272b0fSHans de Goede if (q->async) { 133244272b0fSHans de Goede q->ehci->int_req_by_async = true; 133344272b0fSHans de Goede } 1334f1ae32a1SGerd Hoffmann } 1335f1ae32a1SGerd Hoffmann } 1336f1ae32a1SGerd Hoffmann 133701e26b0eSHans de Goede /* 4.10.3 returns "again" */ 1338773dc9cdSGerd Hoffmann static int ehci_execute(EHCIPacket *p, const char *action) 1339f1ae32a1SGerd Hoffmann { 1340f1ae32a1SGerd Hoffmann USBEndpoint *ep; 1341f1ae32a1SGerd Hoffmann int endp; 13426ba43f1fSHans de Goede bool spd; 1343f1ae32a1SGerd Hoffmann 1344ef5b2344SHans de Goede assert(p->async == EHCI_ASYNC_NONE || 1345ef5b2344SHans de Goede p->async == EHCI_ASYNC_INITIALIZED); 1346ef5b2344SHans de Goede 13474224558fSGerd Hoffmann if (!(p->qtd.token & QTD_TOKEN_ACTIVE)) { 13484224558fSGerd Hoffmann fprintf(stderr, "Attempting to execute inactive qtd\n"); 134901e26b0eSHans de Goede return -1; 1350f1ae32a1SGerd Hoffmann } 1351f1ae32a1SGerd Hoffmann 1352549a3c3dSHans de Goede if (get_field(p->qtd.token, QTD_TOKEN_TBYTES) > BUFF_SIZE) { 13533a8ca08eSHans de Goede ehci_trace_guest_bug(p->queue->ehci, 13543a8ca08eSHans de Goede "guest requested more bytes than allowed"); 135501e26b0eSHans de Goede return -1; 1356f1ae32a1SGerd Hoffmann } 1357f1ae32a1SGerd Hoffmann 1358f79738b0SHans de Goede if (!ehci_verify_pid(p->queue, &p->qtd)) { 1359f79738b0SHans de Goede ehci_queue_stopped(p->queue); /* Mark the ep in the prev dir stopped */ 1360f79738b0SHans de Goede } 136151e0c5d0SHans de Goede p->pid = ehci_get_pid(&p->qtd); 1362bbbc39ccSHans de Goede p->queue->last_pid = p->pid; 1363ef5b2344SHans de Goede endp = get_field(p->queue->qh.epchar, QH_EPCHAR_EP); 1364ef5b2344SHans de Goede ep = usb_ep_get(p->queue->dev, p->pid, endp); 1365ef5b2344SHans de Goede 1366ef5b2344SHans de Goede if (p->async == EHCI_ASYNC_NONE) { 1367eb36a88eSGerd Hoffmann if (ehci_init_transfer(p) != 0) { 136801e26b0eSHans de Goede return -1; 1369f1ae32a1SGerd Hoffmann } 1370f1ae32a1SGerd Hoffmann 13716ba43f1fSHans de Goede spd = (p->pid == USB_TOKEN_IN && NLPTR_TBIT(p->qtd.altnext) == 0); 13728550a02dSGerd Hoffmann usb_packet_setup(&p->packet, p->pid, ep, 0, p->qtdaddr, spd, 1373a6fb2ddbSHans de Goede (p->qtd.token & QTD_TOKEN_IOC) != 0); 1374eb36a88eSGerd Hoffmann usb_packet_map(&p->packet, &p->sgl); 1375ef5b2344SHans de Goede p->async = EHCI_ASYNC_INITIALIZED; 1376ef5b2344SHans de Goede } 1377f1ae32a1SGerd Hoffmann 1378773dc9cdSGerd Hoffmann trace_usb_ehci_packet_action(p->queue, p, action); 13799a77a0f5SHans de Goede usb_handle_packet(p->queue->dev, &p->packet); 13809a77a0f5SHans de Goede DPRINTF("submit: qh 0x%x next 0x%x qtd 0x%x pid 0x%x len %zd endp 0x%x " 13819a77a0f5SHans de Goede "status %d actual_length %d\n", p->queue->qhaddr, p->qtd.next, 13829a77a0f5SHans de Goede p->qtdaddr, p->pid, p->packet.iov.size, endp, p->packet.status, 13839a77a0f5SHans de Goede p->packet.actual_length); 1384f1ae32a1SGerd Hoffmann 13859a77a0f5SHans de Goede if (p->packet.actual_length > BUFF_SIZE) { 1386f1ae32a1SGerd Hoffmann fprintf(stderr, "ret from usb_handle_packet > BUFF_SIZE\n"); 138701e26b0eSHans de Goede return -1; 1388f1ae32a1SGerd Hoffmann } 1389f1ae32a1SGerd Hoffmann 139001e26b0eSHans de Goede return 1; 1391f1ae32a1SGerd Hoffmann } 1392f1ae32a1SGerd Hoffmann 1393f1ae32a1SGerd Hoffmann /* 4.7.2 1394f1ae32a1SGerd Hoffmann */ 1395f1ae32a1SGerd Hoffmann 1396f1ae32a1SGerd Hoffmann static int ehci_process_itd(EHCIState *ehci, 1397e983395dSGerd Hoffmann EHCIitd *itd, 1398e983395dSGerd Hoffmann uint32_t addr) 1399f1ae32a1SGerd Hoffmann { 1400f1ae32a1SGerd Hoffmann USBDevice *dev; 1401f1ae32a1SGerd Hoffmann USBEndpoint *ep; 1402a49923d2SGerd Hoffmann uint32_t i, len, pid, dir, devaddr, endp; 1403f1ae32a1SGerd Hoffmann uint32_t pg, off, ptr1, ptr2, max, mult; 1404f1ae32a1SGerd Hoffmann 140580826240SHans de Goede ehci->periodic_sched_active = PERIODIC_ACTIVE; 140680826240SHans de Goede 1407f1ae32a1SGerd Hoffmann dir =(itd->bufptr[1] & ITD_BUFPTR_DIRECTION); 1408f1ae32a1SGerd Hoffmann devaddr = get_field(itd->bufptr[0], ITD_BUFPTR_DEVADDR); 1409f1ae32a1SGerd Hoffmann endp = get_field(itd->bufptr[0], ITD_BUFPTR_EP); 1410f1ae32a1SGerd Hoffmann max = get_field(itd->bufptr[1], ITD_BUFPTR_MAXPKT); 1411f1ae32a1SGerd Hoffmann mult = get_field(itd->bufptr[2], ITD_BUFPTR_MULT); 1412f1ae32a1SGerd Hoffmann 1413f1ae32a1SGerd Hoffmann for(i = 0; i < 8; i++) { 1414f1ae32a1SGerd Hoffmann if (itd->transact[i] & ITD_XACT_ACTIVE) { 1415f1ae32a1SGerd Hoffmann pg = get_field(itd->transact[i], ITD_XACT_PGSEL); 1416f1ae32a1SGerd Hoffmann off = itd->transact[i] & ITD_XACT_OFFSET_MASK; 1417f1ae32a1SGerd Hoffmann len = get_field(itd->transact[i], ITD_XACT_LENGTH); 1418f1ae32a1SGerd Hoffmann 1419f1ae32a1SGerd Hoffmann if (len > max * mult) { 1420f1ae32a1SGerd Hoffmann len = max * mult; 1421f1ae32a1SGerd Hoffmann } 142249d925ceSPrasad J Pandit if (len > BUFF_SIZE || pg > 6) { 142301e26b0eSHans de Goede return -1; 1424f1ae32a1SGerd Hoffmann } 1425f1ae32a1SGerd Hoffmann 142649d925ceSPrasad J Pandit ptr1 = (itd->bufptr[pg] & ITD_BUFPTR_MASK); 1427adbecc89SGerd Hoffmann qemu_sglist_init(&ehci->isgl, ehci->device, 2, ehci->as); 1428f1ae32a1SGerd Hoffmann if (off + len > 4096) { 1429f1ae32a1SGerd Hoffmann /* transfer crosses page border */ 143049d925ceSPrasad J Pandit if (pg == 6) { 1431b16c129dSLi Qiang qemu_sglist_destroy(&ehci->isgl); 143249d925ceSPrasad J Pandit return -1; /* avoid page pg + 1 */ 143349d925ceSPrasad J Pandit } 143449d925ceSPrasad J Pandit ptr2 = (itd->bufptr[pg + 1] & ITD_BUFPTR_MASK); 1435f1ae32a1SGerd Hoffmann uint32_t len2 = off + len - 4096; 1436f1ae32a1SGerd Hoffmann uint32_t len1 = len - len2; 1437f1ae32a1SGerd Hoffmann qemu_sglist_add(&ehci->isgl, ptr1 + off, len1); 1438f1ae32a1SGerd Hoffmann qemu_sglist_add(&ehci->isgl, ptr2, len2); 1439f1ae32a1SGerd Hoffmann } else { 1440f1ae32a1SGerd Hoffmann qemu_sglist_add(&ehci->isgl, ptr1 + off, len); 1441f1ae32a1SGerd Hoffmann } 1442f1ae32a1SGerd Hoffmann 1443f1ae32a1SGerd Hoffmann pid = dir ? USB_TOKEN_IN : USB_TOKEN_OUT; 1444f1ae32a1SGerd Hoffmann 1445f1ae32a1SGerd Hoffmann dev = ehci_find_device(ehci, devaddr); 1446f1ae32a1SGerd Hoffmann ep = usb_ep_get(dev, pid, endp); 14477ce86aa1SHans de Goede if (ep && ep->type == USB_ENDPOINT_XFER_ISOC) { 14488550a02dSGerd Hoffmann usb_packet_setup(&ehci->ipacket, pid, ep, 0, addr, false, 1449a6fb2ddbSHans de Goede (itd->transact[i] & ITD_XACT_IOC) != 0); 1450f1ae32a1SGerd Hoffmann usb_packet_map(&ehci->ipacket, &ehci->isgl); 14519a77a0f5SHans de Goede usb_handle_packet(dev, &ehci->ipacket); 1452e2f89926SDavid Gibson usb_packet_unmap(&ehci->ipacket, &ehci->isgl); 1453f1ae32a1SGerd Hoffmann } else { 1454f1ae32a1SGerd Hoffmann DPRINTF("ISOCH: attempt to addess non-iso endpoint\n"); 1455e696b1daSHans de Goede ehci->ipacket.status = USB_RET_NAK; 1456e696b1daSHans de Goede ehci->ipacket.actual_length = 0; 1457f1ae32a1SGerd Hoffmann } 1458f1ae32a1SGerd Hoffmann qemu_sglist_destroy(&ehci->isgl); 1459f1ae32a1SGerd Hoffmann 1460e696b1daSHans de Goede switch (ehci->ipacket.status) { 1461e696b1daSHans de Goede case USB_RET_SUCCESS: 1462e696b1daSHans de Goede break; 1463f1ae32a1SGerd Hoffmann default: 1464e696b1daSHans de Goede fprintf(stderr, "Unexpected iso usb result: %d\n", 1465e696b1daSHans de Goede ehci->ipacket.status); 1466f1ae32a1SGerd Hoffmann /* Fall through */ 1467f1ae32a1SGerd Hoffmann case USB_RET_IOERROR: 1468f1ae32a1SGerd Hoffmann case USB_RET_NODEV: 1469f1ae32a1SGerd Hoffmann /* 3.3.2: XACTERR is only allowed on IN transactions */ 1470f1ae32a1SGerd Hoffmann if (dir) { 1471f1ae32a1SGerd Hoffmann itd->transact[i] |= ITD_XACT_XACTERR; 14727efc17afSGerd Hoffmann ehci_raise_irq(ehci, USBSTS_ERRINT); 1473f1ae32a1SGerd Hoffmann } 1474f1ae32a1SGerd Hoffmann break; 1475f1ae32a1SGerd Hoffmann case USB_RET_BABBLE: 1476f1ae32a1SGerd Hoffmann itd->transact[i] |= ITD_XACT_BABBLE; 14777efc17afSGerd Hoffmann ehci_raise_irq(ehci, USBSTS_ERRINT); 1478f1ae32a1SGerd Hoffmann break; 1479f1ae32a1SGerd Hoffmann case USB_RET_NAK: 1480f1ae32a1SGerd Hoffmann /* no data for us, so do a zero-length transfer */ 1481e696b1daSHans de Goede ehci->ipacket.actual_length = 0; 1482f1ae32a1SGerd Hoffmann break; 1483f1ae32a1SGerd Hoffmann } 1484f1ae32a1SGerd Hoffmann if (!dir) { 1485e696b1daSHans de Goede set_field(&itd->transact[i], len - ehci->ipacket.actual_length, 1486e696b1daSHans de Goede ITD_XACT_LENGTH); /* OUT */ 1487f1ae32a1SGerd Hoffmann } else { 1488e696b1daSHans de Goede set_field(&itd->transact[i], ehci->ipacket.actual_length, 1489e696b1daSHans de Goede ITD_XACT_LENGTH); /* IN */ 1490f1ae32a1SGerd Hoffmann } 1491f1ae32a1SGerd Hoffmann if (itd->transact[i] & ITD_XACT_IOC) { 14927efc17afSGerd Hoffmann ehci_raise_irq(ehci, USBSTS_INT); 1493f1ae32a1SGerd Hoffmann } 1494f1ae32a1SGerd Hoffmann itd->transact[i] &= ~ITD_XACT_ACTIVE; 1495f1ae32a1SGerd Hoffmann } 1496f1ae32a1SGerd Hoffmann } 1497a49923d2SGerd Hoffmann return 0; 1498f1ae32a1SGerd Hoffmann } 1499f1ae32a1SGerd Hoffmann 1500cd665715SGerd Hoffmann 1501f1ae32a1SGerd Hoffmann /* This state is the entry point for asynchronous schedule 1502f1ae32a1SGerd Hoffmann * processing. Entry here consitutes a EHCI start event state (4.8.5) 1503f1ae32a1SGerd Hoffmann */ 1504f1ae32a1SGerd Hoffmann static int ehci_state_waitlisthead(EHCIState *ehci, int async) 1505f1ae32a1SGerd Hoffmann { 1506f1ae32a1SGerd Hoffmann EHCIqh qh; 1507f1ae32a1SGerd Hoffmann int i = 0; 1508f1ae32a1SGerd Hoffmann int again = 0; 1509f1ae32a1SGerd Hoffmann uint32_t entry = ehci->asynclistaddr; 1510f1ae32a1SGerd Hoffmann 1511f1ae32a1SGerd Hoffmann /* set reclamation flag at start event (4.8.6) */ 1512f1ae32a1SGerd Hoffmann if (async) { 1513f1ae32a1SGerd Hoffmann ehci_set_usbsts(ehci, USBSTS_REC); 1514f1ae32a1SGerd Hoffmann } 1515f1ae32a1SGerd Hoffmann 15168f5457ebSHans de Goede ehci_queues_rip_unused(ehci, async); 1517f1ae32a1SGerd Hoffmann 1518f1ae32a1SGerd Hoffmann /* Find the head of the list (4.9.1.1) */ 1519f1ae32a1SGerd Hoffmann for(i = 0; i < MAX_QH; i++) { 152055903f1dSGerd Hoffmann if (get_dwords(ehci, NLPTR_GET(entry), (uint32_t *) &qh, 152155903f1dSGerd Hoffmann sizeof(EHCIqh) >> 2) < 0) { 152255903f1dSGerd Hoffmann return 0; 152355903f1dSGerd Hoffmann } 1524f1ae32a1SGerd Hoffmann ehci_trace_qh(NULL, NLPTR_GET(entry), &qh); 1525f1ae32a1SGerd Hoffmann 1526f1ae32a1SGerd Hoffmann if (qh.epchar & QH_EPCHAR_H) { 1527f1ae32a1SGerd Hoffmann if (async) { 1528f1ae32a1SGerd Hoffmann entry |= (NLPTR_TYPE_QH << 1); 1529f1ae32a1SGerd Hoffmann } 1530f1ae32a1SGerd Hoffmann 1531f1ae32a1SGerd Hoffmann ehci_set_fetch_addr(ehci, async, entry); 1532f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_FETCHENTRY); 1533f1ae32a1SGerd Hoffmann again = 1; 1534f1ae32a1SGerd Hoffmann goto out; 1535f1ae32a1SGerd Hoffmann } 1536f1ae32a1SGerd Hoffmann 1537f1ae32a1SGerd Hoffmann entry = qh.next; 1538f1ae32a1SGerd Hoffmann if (entry == ehci->asynclistaddr) { 1539f1ae32a1SGerd Hoffmann break; 1540f1ae32a1SGerd Hoffmann } 1541f1ae32a1SGerd Hoffmann } 1542f1ae32a1SGerd Hoffmann 1543f1ae32a1SGerd Hoffmann /* no head found for list. */ 1544f1ae32a1SGerd Hoffmann 1545f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_ACTIVE); 1546f1ae32a1SGerd Hoffmann 1547f1ae32a1SGerd Hoffmann out: 1548f1ae32a1SGerd Hoffmann return again; 1549f1ae32a1SGerd Hoffmann } 1550f1ae32a1SGerd Hoffmann 1551f1ae32a1SGerd Hoffmann 1552f1ae32a1SGerd Hoffmann /* This state is the entry point for periodic schedule processing as 1553f1ae32a1SGerd Hoffmann * well as being a continuation state for async processing. 1554f1ae32a1SGerd Hoffmann */ 1555f1ae32a1SGerd Hoffmann static int ehci_state_fetchentry(EHCIState *ehci, int async) 1556f1ae32a1SGerd Hoffmann { 1557f1ae32a1SGerd Hoffmann int again = 0; 1558f1ae32a1SGerd Hoffmann uint32_t entry = ehci_get_fetch_addr(ehci, async); 1559f1ae32a1SGerd Hoffmann 1560f1ae32a1SGerd Hoffmann if (NLPTR_TBIT(entry)) { 1561f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_ACTIVE); 1562f1ae32a1SGerd Hoffmann goto out; 1563f1ae32a1SGerd Hoffmann } 1564f1ae32a1SGerd Hoffmann 1565f1ae32a1SGerd Hoffmann /* section 4.8, only QH in async schedule */ 1566f1ae32a1SGerd Hoffmann if (async && (NLPTR_TYPE_GET(entry) != NLPTR_TYPE_QH)) { 1567f1ae32a1SGerd Hoffmann fprintf(stderr, "non queue head request in async schedule\n"); 1568f1ae32a1SGerd Hoffmann return -1; 1569f1ae32a1SGerd Hoffmann } 1570f1ae32a1SGerd Hoffmann 1571f1ae32a1SGerd Hoffmann switch (NLPTR_TYPE_GET(entry)) { 1572f1ae32a1SGerd Hoffmann case NLPTR_TYPE_QH: 1573f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_FETCHQH); 1574f1ae32a1SGerd Hoffmann again = 1; 1575f1ae32a1SGerd Hoffmann break; 1576f1ae32a1SGerd Hoffmann 1577f1ae32a1SGerd Hoffmann case NLPTR_TYPE_ITD: 1578f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_FETCHITD); 1579f1ae32a1SGerd Hoffmann again = 1; 1580f1ae32a1SGerd Hoffmann break; 1581f1ae32a1SGerd Hoffmann 1582f1ae32a1SGerd Hoffmann case NLPTR_TYPE_STITD: 1583f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_FETCHSITD); 1584f1ae32a1SGerd Hoffmann again = 1; 1585f1ae32a1SGerd Hoffmann break; 1586f1ae32a1SGerd Hoffmann 1587f1ae32a1SGerd Hoffmann default: 1588f1ae32a1SGerd Hoffmann /* TODO: handle FSTN type */ 1589f1ae32a1SGerd Hoffmann fprintf(stderr, "FETCHENTRY: entry at %X is of type %d " 1590f1ae32a1SGerd Hoffmann "which is not supported yet\n", entry, NLPTR_TYPE_GET(entry)); 1591f1ae32a1SGerd Hoffmann return -1; 1592f1ae32a1SGerd Hoffmann } 1593f1ae32a1SGerd Hoffmann 1594f1ae32a1SGerd Hoffmann out: 1595f1ae32a1SGerd Hoffmann return again; 1596f1ae32a1SGerd Hoffmann } 1597f1ae32a1SGerd Hoffmann 1598f1ae32a1SGerd Hoffmann static EHCIQueue *ehci_state_fetchqh(EHCIState *ehci, int async) 1599f1ae32a1SGerd Hoffmann { 1600c6432634SHans de Goede uint32_t entry; 1601f1ae32a1SGerd Hoffmann EHCIQueue *q; 1602dafe31fcSHans de Goede EHCIqh qh; 1603f1ae32a1SGerd Hoffmann 1604f1ae32a1SGerd Hoffmann entry = ehci_get_fetch_addr(ehci, async); 1605f1ae32a1SGerd Hoffmann q = ehci_find_queue_by_qh(ehci, entry, async); 1606d0657b2aSGonglei if (q == NULL) { 16078f6d5e26SGerd Hoffmann q = ehci_alloc_queue(ehci, entry, async); 1608f1ae32a1SGerd Hoffmann } 1609f1ae32a1SGerd Hoffmann 16108f6d5e26SGerd Hoffmann q->seen++; 1611f1ae32a1SGerd Hoffmann if (q->seen > 1) { 1612f1ae32a1SGerd Hoffmann /* we are going in circles -- stop processing */ 1613f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_ACTIVE); 1614f1ae32a1SGerd Hoffmann q = NULL; 1615f1ae32a1SGerd Hoffmann goto out; 1616f1ae32a1SGerd Hoffmann } 1617f1ae32a1SGerd Hoffmann 161855903f1dSGerd Hoffmann if (get_dwords(ehci, NLPTR_GET(q->qhaddr), 161955903f1dSGerd Hoffmann (uint32_t *) &qh, sizeof(EHCIqh) >> 2) < 0) { 162055903f1dSGerd Hoffmann q = NULL; 162155903f1dSGerd Hoffmann goto out; 162255903f1dSGerd Hoffmann } 1623dafe31fcSHans de Goede ehci_trace_qh(q, NLPTR_GET(q->qhaddr), &qh); 1624f1ae32a1SGerd Hoffmann 1625dafe31fcSHans de Goede /* 1626dafe31fcSHans de Goede * The overlay area of the qh should never be changed by the guest, 1627dafe31fcSHans de Goede * except when idle, in which case the reset is a nop. 1628dafe31fcSHans de Goede */ 1629c6432634SHans de Goede if (!ehci_verify_qh(q, &qh)) { 16305c514681SGerd Hoffmann if (ehci_reset_queue(q) > 0) { 16315c514681SGerd Hoffmann ehci_trace_guest_bug(ehci, "guest updated active QH"); 16325c514681SGerd Hoffmann } 1633e59928b3SGerd Hoffmann } 1634dafe31fcSHans de Goede q->qh = qh; 1635dafe31fcSHans de Goede 1636cae5d3f4SHans de Goede q->transact_ctr = get_field(q->qh.epcap, QH_EPCAP_MULT); 1637cae5d3f4SHans de Goede if (q->transact_ctr == 0) { /* Guest bug in some versions of windows */ 1638cae5d3f4SHans de Goede q->transact_ctr = 4; 1639cae5d3f4SHans de Goede } 1640cae5d3f4SHans de Goede 1641e59928b3SGerd Hoffmann if (q->dev == NULL) { 1642c6432634SHans de Goede q->dev = ehci_find_device(q->ehci, 1643c6432634SHans de Goede get_field(q->qh.epchar, QH_EPCHAR_DEVADDR)); 1644e59928b3SGerd Hoffmann } 1645e59928b3SGerd Hoffmann 1646f1ae32a1SGerd Hoffmann if (async && (q->qh.epchar & QH_EPCHAR_H)) { 1647f1ae32a1SGerd Hoffmann 1648f1ae32a1SGerd Hoffmann /* EHCI spec version 1.0 Section 4.8.3 & 4.10.1 */ 1649f1ae32a1SGerd Hoffmann if (ehci->usbsts & USBSTS_REC) { 1650f1ae32a1SGerd Hoffmann ehci_clear_usbsts(ehci, USBSTS_REC); 1651f1ae32a1SGerd Hoffmann } else { 1652f1ae32a1SGerd Hoffmann DPRINTF("FETCHQH: QH 0x%08x. H-bit set, reclamation status reset" 1653f1ae32a1SGerd Hoffmann " - done processing\n", q->qhaddr); 1654f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_ACTIVE); 1655f1ae32a1SGerd Hoffmann q = NULL; 1656f1ae32a1SGerd Hoffmann goto out; 1657f1ae32a1SGerd Hoffmann } 1658f1ae32a1SGerd Hoffmann } 1659f1ae32a1SGerd Hoffmann 1660f1ae32a1SGerd Hoffmann #if EHCI_DEBUG 1661f1ae32a1SGerd Hoffmann if (q->qhaddr != q->qh.next) { 1662f1ae32a1SGerd Hoffmann DPRINTF("FETCHQH: QH 0x%08x (h %x halt %x active %x) next 0x%08x\n", 1663f1ae32a1SGerd Hoffmann q->qhaddr, 1664f1ae32a1SGerd Hoffmann q->qh.epchar & QH_EPCHAR_H, 1665f1ae32a1SGerd Hoffmann q->qh.token & QTD_TOKEN_HALT, 1666f1ae32a1SGerd Hoffmann q->qh.token & QTD_TOKEN_ACTIVE, 1667f1ae32a1SGerd Hoffmann q->qh.next); 1668f1ae32a1SGerd Hoffmann } 1669f1ae32a1SGerd Hoffmann #endif 1670f1ae32a1SGerd Hoffmann 1671f1ae32a1SGerd Hoffmann if (q->qh.token & QTD_TOKEN_HALT) { 1672f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_HORIZONTALQH); 1673f1ae32a1SGerd Hoffmann 1674f1ae32a1SGerd Hoffmann } else if ((q->qh.token & QTD_TOKEN_ACTIVE) && 1675f1ae32a1SGerd Hoffmann (NLPTR_TBIT(q->qh.current_qtd) == 0)) { 1676f1ae32a1SGerd Hoffmann q->qtdaddr = q->qh.current_qtd; 1677f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_FETCHQTD); 1678f1ae32a1SGerd Hoffmann 1679f1ae32a1SGerd Hoffmann } else { 1680f1ae32a1SGerd Hoffmann /* EHCI spec version 1.0 Section 4.10.2 */ 1681f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_ADVANCEQUEUE); 1682f1ae32a1SGerd Hoffmann } 1683f1ae32a1SGerd Hoffmann 1684f1ae32a1SGerd Hoffmann out: 1685f1ae32a1SGerd Hoffmann return q; 1686f1ae32a1SGerd Hoffmann } 1687f1ae32a1SGerd Hoffmann 1688f1ae32a1SGerd Hoffmann static int ehci_state_fetchitd(EHCIState *ehci, int async) 1689f1ae32a1SGerd Hoffmann { 1690f1ae32a1SGerd Hoffmann uint32_t entry; 1691f1ae32a1SGerd Hoffmann EHCIitd itd; 1692f1ae32a1SGerd Hoffmann 1693f1ae32a1SGerd Hoffmann assert(!async); 1694f1ae32a1SGerd Hoffmann entry = ehci_get_fetch_addr(ehci, async); 1695f1ae32a1SGerd Hoffmann 169655903f1dSGerd Hoffmann if (get_dwords(ehci, NLPTR_GET(entry), (uint32_t *) &itd, 169755903f1dSGerd Hoffmann sizeof(EHCIitd) >> 2) < 0) { 169855903f1dSGerd Hoffmann return -1; 169955903f1dSGerd Hoffmann } 1700f1ae32a1SGerd Hoffmann ehci_trace_itd(ehci, entry, &itd); 1701f1ae32a1SGerd Hoffmann 1702e983395dSGerd Hoffmann if (ehci_process_itd(ehci, &itd, entry) != 0) { 1703f1ae32a1SGerd Hoffmann return -1; 1704f1ae32a1SGerd Hoffmann } 1705f1ae32a1SGerd Hoffmann 1706f1ae32a1SGerd Hoffmann put_dwords(ehci, NLPTR_GET(entry), (uint32_t *) &itd, 1707f1ae32a1SGerd Hoffmann sizeof(EHCIitd) >> 2); 1708f1ae32a1SGerd Hoffmann ehci_set_fetch_addr(ehci, async, itd.next); 1709f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_FETCHENTRY); 1710f1ae32a1SGerd Hoffmann 1711f1ae32a1SGerd Hoffmann return 1; 1712f1ae32a1SGerd Hoffmann } 1713f1ae32a1SGerd Hoffmann 1714f1ae32a1SGerd Hoffmann static int ehci_state_fetchsitd(EHCIState *ehci, int async) 1715f1ae32a1SGerd Hoffmann { 1716f1ae32a1SGerd Hoffmann uint32_t entry; 1717f1ae32a1SGerd Hoffmann EHCIsitd sitd; 1718f1ae32a1SGerd Hoffmann 1719f1ae32a1SGerd Hoffmann assert(!async); 1720f1ae32a1SGerd Hoffmann entry = ehci_get_fetch_addr(ehci, async); 1721f1ae32a1SGerd Hoffmann 172255903f1dSGerd Hoffmann if (get_dwords(ehci, NLPTR_GET(entry), (uint32_t *)&sitd, 172355903f1dSGerd Hoffmann sizeof(EHCIsitd) >> 2) < 0) { 172455903f1dSGerd Hoffmann return 0; 172555903f1dSGerd Hoffmann } 1726f1ae32a1SGerd Hoffmann ehci_trace_sitd(ehci, entry, &sitd); 1727f1ae32a1SGerd Hoffmann 1728f1ae32a1SGerd Hoffmann if (!(sitd.results & SITD_RESULTS_ACTIVE)) { 1729f1ae32a1SGerd Hoffmann /* siTD is not active, nothing to do */; 1730f1ae32a1SGerd Hoffmann } else { 1731f1ae32a1SGerd Hoffmann /* TODO: split transfers are not implemented */ 1732*2ab4b135SAlistair Francis warn_report("Skipping active siTD"); 1733f1ae32a1SGerd Hoffmann } 1734f1ae32a1SGerd Hoffmann 1735f1ae32a1SGerd Hoffmann ehci_set_fetch_addr(ehci, async, sitd.next); 1736f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_FETCHENTRY); 1737f1ae32a1SGerd Hoffmann return 1; 1738f1ae32a1SGerd Hoffmann } 1739f1ae32a1SGerd Hoffmann 1740f1ae32a1SGerd Hoffmann /* Section 4.10.2 - paragraph 3 */ 1741ae0138a8SGerd Hoffmann static int ehci_state_advqueue(EHCIQueue *q) 1742f1ae32a1SGerd Hoffmann { 1743f1ae32a1SGerd Hoffmann #if 0 1744f1ae32a1SGerd Hoffmann /* TO-DO: 4.10.2 - paragraph 2 1745f1ae32a1SGerd Hoffmann * if I-bit is set to 1 and QH is not active 1746f1ae32a1SGerd Hoffmann * go to horizontal QH 1747f1ae32a1SGerd Hoffmann */ 1748f1ae32a1SGerd Hoffmann if (I-bit set) { 1749f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_HORIZONTALQH); 1750f1ae32a1SGerd Hoffmann goto out; 1751f1ae32a1SGerd Hoffmann } 1752f1ae32a1SGerd Hoffmann #endif 1753f1ae32a1SGerd Hoffmann 1754f1ae32a1SGerd Hoffmann /* 1755f1ae32a1SGerd Hoffmann * want data and alt-next qTD is valid 1756f1ae32a1SGerd Hoffmann */ 1757f1ae32a1SGerd Hoffmann if (((q->qh.token & QTD_TOKEN_TBYTES_MASK) != 0) && 1758f1ae32a1SGerd Hoffmann (NLPTR_TBIT(q->qh.altnext_qtd) == 0)) { 1759f1ae32a1SGerd Hoffmann q->qtdaddr = q->qh.altnext_qtd; 1760ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_FETCHQTD); 1761f1ae32a1SGerd Hoffmann 1762f1ae32a1SGerd Hoffmann /* 1763f1ae32a1SGerd Hoffmann * next qTD is valid 1764f1ae32a1SGerd Hoffmann */ 1765f1ae32a1SGerd Hoffmann } else if (NLPTR_TBIT(q->qh.next_qtd) == 0) { 1766f1ae32a1SGerd Hoffmann q->qtdaddr = q->qh.next_qtd; 1767ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_FETCHQTD); 1768f1ae32a1SGerd Hoffmann 1769f1ae32a1SGerd Hoffmann /* 1770f1ae32a1SGerd Hoffmann * no valid qTD, try next QH 1771f1ae32a1SGerd Hoffmann */ 1772f1ae32a1SGerd Hoffmann } else { 1773ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_HORIZONTALQH); 1774f1ae32a1SGerd Hoffmann } 1775f1ae32a1SGerd Hoffmann 1776f1ae32a1SGerd Hoffmann return 1; 1777f1ae32a1SGerd Hoffmann } 1778f1ae32a1SGerd Hoffmann 1779f1ae32a1SGerd Hoffmann /* Section 4.10.2 - paragraph 4 */ 1780ae0138a8SGerd Hoffmann static int ehci_state_fetchqtd(EHCIQueue *q) 1781f1ae32a1SGerd Hoffmann { 1782eb36a88eSGerd Hoffmann EHCIqtd qtd; 1783eb36a88eSGerd Hoffmann EHCIPacket *p; 1784b4ea8664SHans de Goede int again = 1; 1785f1ae32a1SGerd Hoffmann 178655903f1dSGerd Hoffmann if (get_dwords(q->ehci, NLPTR_GET(q->qtdaddr), (uint32_t *) &qtd, 178755903f1dSGerd Hoffmann sizeof(EHCIqtd) >> 2) < 0) { 178855903f1dSGerd Hoffmann return 0; 178955903f1dSGerd Hoffmann } 1790eb36a88eSGerd Hoffmann ehci_trace_qtd(q, NLPTR_GET(q->qtdaddr), &qtd); 1791f1ae32a1SGerd Hoffmann 1792773dc9cdSGerd Hoffmann p = QTAILQ_FIRST(&q->packets); 1793287fd3f1SGerd Hoffmann if (p != NULL) { 1794c6432634SHans de Goede if (!ehci_verify_qtd(p, &qtd)) { 1795287fd3f1SGerd Hoffmann ehci_cancel_queue(q); 1796d066c57bSHans de Goede if (qtd.token & QTD_TOKEN_ACTIVE) { 1797d066c57bSHans de Goede ehci_trace_guest_bug(q->ehci, "guest updated active qTD"); 1798d066c57bSHans de Goede } 1799287fd3f1SGerd Hoffmann p = NULL; 1800287fd3f1SGerd Hoffmann } else { 1801287fd3f1SGerd Hoffmann p->qtd = qtd; 1802287fd3f1SGerd Hoffmann ehci_qh_do_overlay(q); 1803287fd3f1SGerd Hoffmann } 1804287fd3f1SGerd Hoffmann } 1805287fd3f1SGerd Hoffmann 1806287fd3f1SGerd Hoffmann if (!(qtd.token & QTD_TOKEN_ACTIVE)) { 1807287fd3f1SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_HORIZONTALQH); 1808287fd3f1SGerd Hoffmann } else if (p != NULL) { 1809adf47834SHans de Goede switch (p->async) { 1810adf47834SHans de Goede case EHCI_ASYNC_NONE: 1811ef5b2344SHans de Goede case EHCI_ASYNC_INITIALIZED: 1812cae5d3f4SHans de Goede /* Not yet executed (MULT), or previously nacked (int) packet */ 1813adf47834SHans de Goede ehci_set_state(q->ehci, q->async, EST_EXECUTE); 1814adf47834SHans de Goede break; 1815adf47834SHans de Goede case EHCI_ASYNC_INFLIGHT: 1816b4ea8664SHans de Goede /* Check if the guest has added new tds to the queue */ 181701e26b0eSHans de Goede again = ehci_fill_queue(QTAILQ_LAST(&q->packets, pkts_head)); 1818ef5b2344SHans de Goede /* Unfinished async handled packet, go horizontal */ 1819ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_HORIZONTALQH); 1820adf47834SHans de Goede break; 1821adf47834SHans de Goede case EHCI_ASYNC_FINISHED: 1822e3fdfd48SHans de Goede /* Complete executing of the packet */ 1823ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_EXECUTING); 1824adf47834SHans de Goede break; 1825773dc9cdSGerd Hoffmann } 1826287fd3f1SGerd Hoffmann } else { 1827eb36a88eSGerd Hoffmann p = ehci_alloc_packet(q); 1828eb36a88eSGerd Hoffmann p->qtdaddr = q->qtdaddr; 1829eb36a88eSGerd Hoffmann p->qtd = qtd; 1830ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_EXECUTE); 1831f1ae32a1SGerd Hoffmann } 1832f1ae32a1SGerd Hoffmann 1833f1ae32a1SGerd Hoffmann return again; 1834f1ae32a1SGerd Hoffmann } 1835f1ae32a1SGerd Hoffmann 1836ae0138a8SGerd Hoffmann static int ehci_state_horizqh(EHCIQueue *q) 1837f1ae32a1SGerd Hoffmann { 1838f1ae32a1SGerd Hoffmann int again = 0; 1839f1ae32a1SGerd Hoffmann 1840ae0138a8SGerd Hoffmann if (ehci_get_fetch_addr(q->ehci, q->async) != q->qh.next) { 1841ae0138a8SGerd Hoffmann ehci_set_fetch_addr(q->ehci, q->async, q->qh.next); 1842ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_FETCHENTRY); 1843f1ae32a1SGerd Hoffmann again = 1; 1844f1ae32a1SGerd Hoffmann } else { 1845ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_ACTIVE); 1846f1ae32a1SGerd Hoffmann } 1847f1ae32a1SGerd Hoffmann 1848f1ae32a1SGerd Hoffmann return again; 1849f1ae32a1SGerd Hoffmann } 1850f1ae32a1SGerd Hoffmann 185101e26b0eSHans de Goede /* Returns "again" */ 1852eff6dce7SHans de Goede static int ehci_fill_queue(EHCIPacket *p) 1853773dc9cdSGerd Hoffmann { 185436dfe324SHans de Goede USBEndpoint *ep = p->packet.ep; 1855773dc9cdSGerd Hoffmann EHCIQueue *q = p->queue; 1856773dc9cdSGerd Hoffmann EHCIqtd qtd = p->qtd; 1857601a2347SHans de Goede uint32_t qtdaddr; 1858773dc9cdSGerd Hoffmann 1859773dc9cdSGerd Hoffmann for (;;) { 1860773dc9cdSGerd Hoffmann if (NLPTR_TBIT(qtd.next) != 0) { 1861773dc9cdSGerd Hoffmann break; 1862773dc9cdSGerd Hoffmann } 1863773dc9cdSGerd Hoffmann qtdaddr = qtd.next; 1864e3a36bceSHans de Goede /* 1865e3a36bceSHans de Goede * Detect circular td lists, Windows creates these, counting on the 1866e3a36bceSHans de Goede * active bit going low after execution to make the queue stop. 1867e3a36bceSHans de Goede */ 1868601a2347SHans de Goede QTAILQ_FOREACH(p, &q->packets, next) { 1869601a2347SHans de Goede if (p->qtdaddr == qtdaddr) { 1870601a2347SHans de Goede goto leave; 1871601a2347SHans de Goede } 1872e3a36bceSHans de Goede } 187355903f1dSGerd Hoffmann if (get_dwords(q->ehci, NLPTR_GET(qtdaddr), 187455903f1dSGerd Hoffmann (uint32_t *) &qtd, sizeof(EHCIqtd) >> 2) < 0) { 187555903f1dSGerd Hoffmann return -1; 187655903f1dSGerd Hoffmann } 1877773dc9cdSGerd Hoffmann ehci_trace_qtd(q, NLPTR_GET(qtdaddr), &qtd); 1878773dc9cdSGerd Hoffmann if (!(qtd.token & QTD_TOKEN_ACTIVE)) { 1879773dc9cdSGerd Hoffmann break; 1880773dc9cdSGerd Hoffmann } 1881bbbc39ccSHans de Goede if (!ehci_verify_pid(q, &qtd)) { 1882bbbc39ccSHans de Goede ehci_trace_guest_bug(q->ehci, "guest queued token with wrong pid"); 1883bbbc39ccSHans de Goede break; 1884bbbc39ccSHans de Goede } 1885773dc9cdSGerd Hoffmann p = ehci_alloc_packet(q); 1886773dc9cdSGerd Hoffmann p->qtdaddr = qtdaddr; 1887773dc9cdSGerd Hoffmann p->qtd = qtd; 188801e26b0eSHans de Goede if (ehci_execute(p, "queue") == -1) { 188901e26b0eSHans de Goede return -1; 1890eff6dce7SHans de Goede } 189101e26b0eSHans de Goede assert(p->packet.status == USB_RET_ASYNC); 1892773dc9cdSGerd Hoffmann p->async = EHCI_ASYNC_INFLIGHT; 1893773dc9cdSGerd Hoffmann } 1894601a2347SHans de Goede leave: 189536dfe324SHans de Goede usb_device_flush_ep_queue(ep->dev, ep); 189601e26b0eSHans de Goede return 1; 1897773dc9cdSGerd Hoffmann } 1898773dc9cdSGerd Hoffmann 1899ae0138a8SGerd Hoffmann static int ehci_state_execute(EHCIQueue *q) 1900f1ae32a1SGerd Hoffmann { 1901eb36a88eSGerd Hoffmann EHCIPacket *p = QTAILQ_FIRST(&q->packets); 1902f1ae32a1SGerd Hoffmann int again = 0; 1903f1ae32a1SGerd Hoffmann 1904eb36a88eSGerd Hoffmann assert(p != NULL); 1905eb36a88eSGerd Hoffmann assert(p->qtdaddr == q->qtdaddr); 1906eb36a88eSGerd Hoffmann 1907f1ae32a1SGerd Hoffmann if (ehci_qh_do_overlay(q) != 0) { 1908f1ae32a1SGerd Hoffmann return -1; 1909f1ae32a1SGerd Hoffmann } 1910f1ae32a1SGerd Hoffmann 1911f1ae32a1SGerd Hoffmann // TODO verify enough time remains in the uframe as in 4.4.1.1 1912f1ae32a1SGerd Hoffmann // TODO write back ptr to async list when done or out of time 1913f1ae32a1SGerd Hoffmann 1914cae5d3f4SHans de Goede /* 4.10.3, bottom of page 82, go horizontal on transaction counter == 0 */ 1915cae5d3f4SHans de Goede if (!q->async && q->transact_ctr == 0) { 1916ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_HORIZONTALQH); 1917f1ae32a1SGerd Hoffmann again = 1; 1918f1ae32a1SGerd Hoffmann goto out; 1919f1ae32a1SGerd Hoffmann } 1920f1ae32a1SGerd Hoffmann 1921ae0138a8SGerd Hoffmann if (q->async) { 1922f1ae32a1SGerd Hoffmann ehci_set_usbsts(q->ehci, USBSTS_REC); 1923f1ae32a1SGerd Hoffmann } 1924f1ae32a1SGerd Hoffmann 192501e26b0eSHans de Goede again = ehci_execute(p, "process"); 192601e26b0eSHans de Goede if (again == -1) { 1927f1ae32a1SGerd Hoffmann goto out; 1928f1ae32a1SGerd Hoffmann } 192901e26b0eSHans de Goede if (p->packet.status == USB_RET_ASYNC) { 1930f1ae32a1SGerd Hoffmann ehci_flush_qh(q); 1931773dc9cdSGerd Hoffmann trace_usb_ehci_packet_action(p->queue, p, "async"); 1932eb36a88eSGerd Hoffmann p->async = EHCI_ASYNC_INFLIGHT; 1933ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_HORIZONTALQH); 1934cae5d3f4SHans de Goede if (q->async) { 193501e26b0eSHans de Goede again = ehci_fill_queue(p); 1936cae5d3f4SHans de Goede } else { 1937cae5d3f4SHans de Goede again = 1; 1938cae5d3f4SHans de Goede } 1939f1ae32a1SGerd Hoffmann goto out; 1940f1ae32a1SGerd Hoffmann } 1941f1ae32a1SGerd Hoffmann 1942ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_EXECUTING); 1943f1ae32a1SGerd Hoffmann again = 1; 1944f1ae32a1SGerd Hoffmann 1945f1ae32a1SGerd Hoffmann out: 1946f1ae32a1SGerd Hoffmann return again; 1947f1ae32a1SGerd Hoffmann } 1948f1ae32a1SGerd Hoffmann 1949ae0138a8SGerd Hoffmann static int ehci_state_executing(EHCIQueue *q) 1950f1ae32a1SGerd Hoffmann { 1951eb36a88eSGerd Hoffmann EHCIPacket *p = QTAILQ_FIRST(&q->packets); 1952f1ae32a1SGerd Hoffmann 1953eb36a88eSGerd Hoffmann assert(p != NULL); 1954eb36a88eSGerd Hoffmann assert(p->qtdaddr == q->qtdaddr); 1955eb36a88eSGerd Hoffmann 1956f1ae32a1SGerd Hoffmann ehci_execute_complete(q); 1957f1ae32a1SGerd Hoffmann 1958cae5d3f4SHans de Goede /* 4.10.3 */ 1959cae5d3f4SHans de Goede if (!q->async && q->transact_ctr > 0) { 1960cae5d3f4SHans de Goede q->transact_ctr--; 1961f1ae32a1SGerd Hoffmann } 1962f1ae32a1SGerd Hoffmann 1963f1ae32a1SGerd Hoffmann /* 4.10.5 */ 1964e696b1daSHans de Goede if (p->packet.status == USB_RET_NAK) { 1965ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_HORIZONTALQH); 1966f1ae32a1SGerd Hoffmann } else { 1967ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_WRITEBACK); 1968f1ae32a1SGerd Hoffmann } 1969f1ae32a1SGerd Hoffmann 1970f1ae32a1SGerd Hoffmann ehci_flush_qh(q); 1971574ef171SHans de Goede return 1; 1972f1ae32a1SGerd Hoffmann } 1973f1ae32a1SGerd Hoffmann 1974f1ae32a1SGerd Hoffmann 1975ae0138a8SGerd Hoffmann static int ehci_state_writeback(EHCIQueue *q) 1976f1ae32a1SGerd Hoffmann { 1977eb36a88eSGerd Hoffmann EHCIPacket *p = QTAILQ_FIRST(&q->packets); 19784ed1c57aSGerd Hoffmann uint32_t *qtd, addr; 1979f1ae32a1SGerd Hoffmann int again = 0; 1980f1ae32a1SGerd Hoffmann 1981f1ae32a1SGerd Hoffmann /* Write back the QTD from the QH area */ 1982eb36a88eSGerd Hoffmann assert(p != NULL); 1983eb36a88eSGerd Hoffmann assert(p->qtdaddr == q->qtdaddr); 1984eb36a88eSGerd Hoffmann 1985eb36a88eSGerd Hoffmann ehci_trace_qtd(q, NLPTR_GET(p->qtdaddr), (EHCIqtd *) &q->qh.next_qtd); 19864ed1c57aSGerd Hoffmann qtd = (uint32_t *) &q->qh.next_qtd; 19874ed1c57aSGerd Hoffmann addr = NLPTR_GET(p->qtdaddr); 19884ed1c57aSGerd Hoffmann put_dwords(q->ehci, addr + 2 * sizeof(uint32_t), qtd + 2, 2); 1989eb36a88eSGerd Hoffmann ehci_free_packet(p); 1990f1ae32a1SGerd Hoffmann 1991f1ae32a1SGerd Hoffmann /* 1992f1ae32a1SGerd Hoffmann * EHCI specs say go horizontal here. 1993f1ae32a1SGerd Hoffmann * 1994f1ae32a1SGerd Hoffmann * We can also advance the queue here for performance reasons. We 1995f1ae32a1SGerd Hoffmann * need to take care to only take that shortcut in case we've 1996f1ae32a1SGerd Hoffmann * processed the qtd just written back without errors, i.e. halt 1997f1ae32a1SGerd Hoffmann * bit is clear. 1998f1ae32a1SGerd Hoffmann */ 1999f1ae32a1SGerd Hoffmann if (q->qh.token & QTD_TOKEN_HALT) { 2000ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_HORIZONTALQH); 2001f1ae32a1SGerd Hoffmann again = 1; 2002f1ae32a1SGerd Hoffmann } else { 2003ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_ADVANCEQUEUE); 2004f1ae32a1SGerd Hoffmann again = 1; 2005f1ae32a1SGerd Hoffmann } 2006f1ae32a1SGerd Hoffmann return again; 2007f1ae32a1SGerd Hoffmann } 2008f1ae32a1SGerd Hoffmann 2009f1ae32a1SGerd Hoffmann /* 2010f1ae32a1SGerd Hoffmann * This is the state machine that is common to both async and periodic 2011f1ae32a1SGerd Hoffmann */ 2012f1ae32a1SGerd Hoffmann 2013ae0138a8SGerd Hoffmann static void ehci_advance_state(EHCIState *ehci, int async) 2014f1ae32a1SGerd Hoffmann { 2015f1ae32a1SGerd Hoffmann EHCIQueue *q = NULL; 20161ae3f2f1SGerd Hoffmann int itd_count = 0; 2017f1ae32a1SGerd Hoffmann int again; 2018f1ae32a1SGerd Hoffmann 2019f1ae32a1SGerd Hoffmann do { 2020f1ae32a1SGerd Hoffmann switch(ehci_get_state(ehci, async)) { 2021f1ae32a1SGerd Hoffmann case EST_WAITLISTHEAD: 2022f1ae32a1SGerd Hoffmann again = ehci_state_waitlisthead(ehci, async); 2023f1ae32a1SGerd Hoffmann break; 2024f1ae32a1SGerd Hoffmann 2025f1ae32a1SGerd Hoffmann case EST_FETCHENTRY: 2026f1ae32a1SGerd Hoffmann again = ehci_state_fetchentry(ehci, async); 2027f1ae32a1SGerd Hoffmann break; 2028f1ae32a1SGerd Hoffmann 2029f1ae32a1SGerd Hoffmann case EST_FETCHQH: 2030f1ae32a1SGerd Hoffmann q = ehci_state_fetchqh(ehci, async); 2031ae0138a8SGerd Hoffmann if (q != NULL) { 2032ae0138a8SGerd Hoffmann assert(q->async == async); 2033ae0138a8SGerd Hoffmann again = 1; 2034ae0138a8SGerd Hoffmann } else { 2035ae0138a8SGerd Hoffmann again = 0; 2036ae0138a8SGerd Hoffmann } 2037f1ae32a1SGerd Hoffmann break; 2038f1ae32a1SGerd Hoffmann 2039f1ae32a1SGerd Hoffmann case EST_FETCHITD: 2040f1ae32a1SGerd Hoffmann again = ehci_state_fetchitd(ehci, async); 20411ae3f2f1SGerd Hoffmann itd_count++; 2042f1ae32a1SGerd Hoffmann break; 2043f1ae32a1SGerd Hoffmann 2044f1ae32a1SGerd Hoffmann case EST_FETCHSITD: 2045f1ae32a1SGerd Hoffmann again = ehci_state_fetchsitd(ehci, async); 20461ae3f2f1SGerd Hoffmann itd_count++; 2047f1ae32a1SGerd Hoffmann break; 2048f1ae32a1SGerd Hoffmann 2049f1ae32a1SGerd Hoffmann case EST_ADVANCEQUEUE: 2050cc8d2b65SMarkus Armbruster assert(q != NULL); 2051ae0138a8SGerd Hoffmann again = ehci_state_advqueue(q); 2052f1ae32a1SGerd Hoffmann break; 2053f1ae32a1SGerd Hoffmann 2054f1ae32a1SGerd Hoffmann case EST_FETCHQTD: 2055cc8d2b65SMarkus Armbruster assert(q != NULL); 2056ae0138a8SGerd Hoffmann again = ehci_state_fetchqtd(q); 2057f1ae32a1SGerd Hoffmann break; 2058f1ae32a1SGerd Hoffmann 2059f1ae32a1SGerd Hoffmann case EST_HORIZONTALQH: 2060cc8d2b65SMarkus Armbruster assert(q != NULL); 2061ae0138a8SGerd Hoffmann again = ehci_state_horizqh(q); 2062f1ae32a1SGerd Hoffmann break; 2063f1ae32a1SGerd Hoffmann 2064f1ae32a1SGerd Hoffmann case EST_EXECUTE: 2065cc8d2b65SMarkus Armbruster assert(q != NULL); 2066ae0138a8SGerd Hoffmann again = ehci_state_execute(q); 20673a215326SGerd Hoffmann if (async) { 20683a215326SGerd Hoffmann ehci->async_stepdown = 0; 20693a215326SGerd Hoffmann } 2070f1ae32a1SGerd Hoffmann break; 2071f1ae32a1SGerd Hoffmann 2072f1ae32a1SGerd Hoffmann case EST_EXECUTING: 2073f1ae32a1SGerd Hoffmann assert(q != NULL); 20743a215326SGerd Hoffmann if (async) { 20753a215326SGerd Hoffmann ehci->async_stepdown = 0; 20763a215326SGerd Hoffmann } 2077ae0138a8SGerd Hoffmann again = ehci_state_executing(q); 2078f1ae32a1SGerd Hoffmann break; 2079f1ae32a1SGerd Hoffmann 2080f1ae32a1SGerd Hoffmann case EST_WRITEBACK: 2081f1ae32a1SGerd Hoffmann assert(q != NULL); 2082ae0138a8SGerd Hoffmann again = ehci_state_writeback(q); 208380826240SHans de Goede if (!async) { 208480826240SHans de Goede ehci->periodic_sched_active = PERIODIC_ACTIVE; 208580826240SHans de Goede } 2086f1ae32a1SGerd Hoffmann break; 2087f1ae32a1SGerd Hoffmann 2088f1ae32a1SGerd Hoffmann default: 2089f1ae32a1SGerd Hoffmann fprintf(stderr, "Bad state!\n"); 2090f1ae32a1SGerd Hoffmann again = -1; 2091dfc6f865SStefan Weil g_assert_not_reached(); 2092f1ae32a1SGerd Hoffmann break; 2093f1ae32a1SGerd Hoffmann } 2094f1ae32a1SGerd Hoffmann 20951ae3f2f1SGerd Hoffmann if (again < 0 || itd_count > 16) { 20961ae3f2f1SGerd Hoffmann /* TODO: notify guest (raise HSE irq?) */ 2097f1ae32a1SGerd Hoffmann fprintf(stderr, "processing error - resetting ehci HC\n"); 2098f1ae32a1SGerd Hoffmann ehci_reset(ehci); 2099f1ae32a1SGerd Hoffmann again = 0; 2100f1ae32a1SGerd Hoffmann } 2101f1ae32a1SGerd Hoffmann } 2102f1ae32a1SGerd Hoffmann while (again); 2103f1ae32a1SGerd Hoffmann } 2104f1ae32a1SGerd Hoffmann 2105f1ae32a1SGerd Hoffmann static void ehci_advance_async_state(EHCIState *ehci) 2106f1ae32a1SGerd Hoffmann { 2107f1ae32a1SGerd Hoffmann const int async = 1; 2108f1ae32a1SGerd Hoffmann 2109f1ae32a1SGerd Hoffmann switch(ehci_get_state(ehci, async)) { 2110f1ae32a1SGerd Hoffmann case EST_INACTIVE: 2111ec807d12SGerd Hoffmann if (!ehci_async_enabled(ehci)) { 2112f1ae32a1SGerd Hoffmann break; 2113f1ae32a1SGerd Hoffmann } 2114f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_ACTIVE); 2115f1ae32a1SGerd Hoffmann // No break, fall through to ACTIVE 2116f1ae32a1SGerd Hoffmann 2117f1ae32a1SGerd Hoffmann case EST_ACTIVE: 2118ec807d12SGerd Hoffmann if (!ehci_async_enabled(ehci)) { 2119f1ae32a1SGerd Hoffmann ehci_queues_rip_all(ehci, async); 2120f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_INACTIVE); 2121f1ae32a1SGerd Hoffmann break; 2122f1ae32a1SGerd Hoffmann } 2123f1ae32a1SGerd Hoffmann 2124f1ae32a1SGerd Hoffmann /* make sure guest has acknowledged the doorbell interrupt */ 2125f1ae32a1SGerd Hoffmann /* TO-DO: is this really needed? */ 2126f1ae32a1SGerd Hoffmann if (ehci->usbsts & USBSTS_IAA) { 2127f1ae32a1SGerd Hoffmann DPRINTF("IAA status bit still set.\n"); 2128f1ae32a1SGerd Hoffmann break; 2129f1ae32a1SGerd Hoffmann } 2130f1ae32a1SGerd Hoffmann 2131f1ae32a1SGerd Hoffmann /* check that address register has been set */ 2132f1ae32a1SGerd Hoffmann if (ehci->asynclistaddr == 0) { 2133f1ae32a1SGerd Hoffmann break; 2134f1ae32a1SGerd Hoffmann } 2135f1ae32a1SGerd Hoffmann 2136f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_WAITLISTHEAD); 2137f1ae32a1SGerd Hoffmann ehci_advance_state(ehci, async); 2138f1ae32a1SGerd Hoffmann 2139f1ae32a1SGerd Hoffmann /* If the doorbell is set, the guest wants to make a change to the 2140f1ae32a1SGerd Hoffmann * schedule. The host controller needs to release cached data. 2141f1ae32a1SGerd Hoffmann * (section 4.8.2) 2142f1ae32a1SGerd Hoffmann */ 2143f1ae32a1SGerd Hoffmann if (ehci->usbcmd & USBCMD_IAAD) { 2144f1ae32a1SGerd Hoffmann /* Remove all unseen qhs from the async qhs queue */ 21458f5457ebSHans de Goede ehci_queues_rip_unseen(ehci, async); 21461defcbd1SGerd Hoffmann trace_usb_ehci_doorbell_ack(); 2147f1ae32a1SGerd Hoffmann ehci->usbcmd &= ~USBCMD_IAAD; 21487efc17afSGerd Hoffmann ehci_raise_irq(ehci, USBSTS_IAA); 2149f1ae32a1SGerd Hoffmann } 2150f1ae32a1SGerd Hoffmann break; 2151f1ae32a1SGerd Hoffmann 2152f1ae32a1SGerd Hoffmann default: 2153f1ae32a1SGerd Hoffmann /* this should only be due to a developer mistake */ 2154f1ae32a1SGerd Hoffmann fprintf(stderr, "ehci: Bad asynchronous state %d. " 2155f1ae32a1SGerd Hoffmann "Resetting to active\n", ehci->astate); 2156dfc6f865SStefan Weil g_assert_not_reached(); 2157f1ae32a1SGerd Hoffmann } 2158f1ae32a1SGerd Hoffmann } 2159f1ae32a1SGerd Hoffmann 2160f1ae32a1SGerd Hoffmann static void ehci_advance_periodic_state(EHCIState *ehci) 2161f1ae32a1SGerd Hoffmann { 2162f1ae32a1SGerd Hoffmann uint32_t entry; 2163f1ae32a1SGerd Hoffmann uint32_t list; 2164f1ae32a1SGerd Hoffmann const int async = 0; 2165f1ae32a1SGerd Hoffmann 2166f1ae32a1SGerd Hoffmann // 4.6 2167f1ae32a1SGerd Hoffmann 2168f1ae32a1SGerd Hoffmann switch(ehci_get_state(ehci, async)) { 2169f1ae32a1SGerd Hoffmann case EST_INACTIVE: 2170ec807d12SGerd Hoffmann if (!(ehci->frindex & 7) && ehci_periodic_enabled(ehci)) { 2171f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_ACTIVE); 2172f1ae32a1SGerd Hoffmann // No break, fall through to ACTIVE 2173f1ae32a1SGerd Hoffmann } else 2174f1ae32a1SGerd Hoffmann break; 2175f1ae32a1SGerd Hoffmann 2176f1ae32a1SGerd Hoffmann case EST_ACTIVE: 2177ec807d12SGerd Hoffmann if (!(ehci->frindex & 7) && !ehci_periodic_enabled(ehci)) { 2178f1ae32a1SGerd Hoffmann ehci_queues_rip_all(ehci, async); 2179f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_INACTIVE); 2180f1ae32a1SGerd Hoffmann break; 2181f1ae32a1SGerd Hoffmann } 2182f1ae32a1SGerd Hoffmann 2183f1ae32a1SGerd Hoffmann list = ehci->periodiclistbase & 0xfffff000; 2184f1ae32a1SGerd Hoffmann /* check that register has been set */ 2185f1ae32a1SGerd Hoffmann if (list == 0) { 2186f1ae32a1SGerd Hoffmann break; 2187f1ae32a1SGerd Hoffmann } 2188f1ae32a1SGerd Hoffmann list |= ((ehci->frindex & 0x1ff8) >> 1); 2189f1ae32a1SGerd Hoffmann 219055903f1dSGerd Hoffmann if (get_dwords(ehci, list, &entry, 1) < 0) { 219155903f1dSGerd Hoffmann break; 219255903f1dSGerd Hoffmann } 2193f1ae32a1SGerd Hoffmann 2194f1ae32a1SGerd Hoffmann DPRINTF("PERIODIC state adv fr=%d. [%08X] -> %08X\n", 2195f1ae32a1SGerd Hoffmann ehci->frindex / 8, list, entry); 2196f1ae32a1SGerd Hoffmann ehci_set_fetch_addr(ehci, async,entry); 2197f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_FETCHENTRY); 2198f1ae32a1SGerd Hoffmann ehci_advance_state(ehci, async); 21998f5457ebSHans de Goede ehci_queues_rip_unused(ehci, async); 2200f1ae32a1SGerd Hoffmann break; 2201f1ae32a1SGerd Hoffmann 2202f1ae32a1SGerd Hoffmann default: 2203f1ae32a1SGerd Hoffmann /* this should only be due to a developer mistake */ 2204f1ae32a1SGerd Hoffmann fprintf(stderr, "ehci: Bad periodic state %d. " 2205f1ae32a1SGerd Hoffmann "Resetting to active\n", ehci->pstate); 2206dfc6f865SStefan Weil g_assert_not_reached(); 2207f1ae32a1SGerd Hoffmann } 2208f1ae32a1SGerd Hoffmann } 2209f1ae32a1SGerd Hoffmann 22109359a58bSHans de Goede static void ehci_update_frindex(EHCIState *ehci, int uframes) 22116ceced0bSGerd Hoffmann { 22129359a58bSHans de Goede if (!ehci_enabled(ehci) && ehci->pstate == EST_INACTIVE) { 22136ceced0bSGerd Hoffmann return; 22146ceced0bSGerd Hoffmann } 22156ceced0bSGerd Hoffmann 221672aa364bSEvgeny Yakovlev /* Generate FLR interrupt if frame index rolls over 0x2000 */ 221772aa364bSEvgeny Yakovlev if ((ehci->frindex % 0x2000) + uframes >= 0x2000) { 22187efc17afSGerd Hoffmann ehci_raise_irq(ehci, USBSTS_FLR); 22196ceced0bSGerd Hoffmann } 22206ceced0bSGerd Hoffmann 222172aa364bSEvgeny Yakovlev /* How many times will frindex roll over 0x4000 with this frame count? 222272aa364bSEvgeny Yakovlev * usbsts_frindex is decremented by 0x4000 on rollover until it reaches 0 222372aa364bSEvgeny Yakovlev */ 222472aa364bSEvgeny Yakovlev int rollovers = (ehci->frindex + uframes) / 0x4000; 222572aa364bSEvgeny Yakovlev if (rollovers > 0) { 222672aa364bSEvgeny Yakovlev if (ehci->usbsts_frindex >= (rollovers * 0x4000)) { 222772aa364bSEvgeny Yakovlev ehci->usbsts_frindex -= 0x4000 * rollovers; 22287efc17afSGerd Hoffmann } else { 22297efc17afSGerd Hoffmann ehci->usbsts_frindex = 0; 22307efc17afSGerd Hoffmann } 22316ceced0bSGerd Hoffmann } 223272aa364bSEvgeny Yakovlev 223372aa364bSEvgeny Yakovlev ehci->frindex = (ehci->frindex + uframes) % 0x4000; 22346ceced0bSGerd Hoffmann } 22356ceced0bSGerd Hoffmann 22363bfecee2SGerd Hoffmann static void ehci_work_bh(void *opaque) 2237f1ae32a1SGerd Hoffmann { 2238f1ae32a1SGerd Hoffmann EHCIState *ehci = opaque; 22397efc17afSGerd Hoffmann int need_timer = 0; 2240f1ae32a1SGerd Hoffmann int64_t expire_time, t_now; 2241f1ae32a1SGerd Hoffmann uint64_t ns_elapsed; 22423ae7eb88SGerd Hoffmann uint64_t uframes, skipped_uframes; 2243f1ae32a1SGerd Hoffmann int i; 2244f1ae32a1SGerd Hoffmann 2245ad3c5412SGerd Hoffmann if (ehci->working) { 2246ad3c5412SGerd Hoffmann return; 2247ad3c5412SGerd Hoffmann } 2248ad3c5412SGerd Hoffmann ehci->working = true; 2249ad3c5412SGerd Hoffmann 2250bc72ad67SAlex Bligh t_now = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL); 2251f1ae32a1SGerd Hoffmann ns_elapsed = t_now - ehci->last_run_ns; 22529359a58bSHans de Goede uframes = ns_elapsed / UFRAME_TIMER_NS; 2253f1ae32a1SGerd Hoffmann 22543a215326SGerd Hoffmann if (ehci_periodic_enabled(ehci) || ehci->pstate != EST_INACTIVE) { 22557efc17afSGerd Hoffmann need_timer++; 22563a215326SGerd Hoffmann 22579359a58bSHans de Goede if (uframes > (ehci->maxframes * 8)) { 22589359a58bSHans de Goede skipped_uframes = uframes - (ehci->maxframes * 8); 22599359a58bSHans de Goede ehci_update_frindex(ehci, skipped_uframes); 22609359a58bSHans de Goede ehci->last_run_ns += UFRAME_TIMER_NS * skipped_uframes; 22619359a58bSHans de Goede uframes -= skipped_uframes; 22629359a58bSHans de Goede DPRINTF("WARNING - EHCI skipped %d uframes\n", skipped_uframes); 2263f1ae32a1SGerd Hoffmann } 2264f1ae32a1SGerd Hoffmann 22659359a58bSHans de Goede for (i = 0; i < uframes; i++) { 22668f74ed1eSHans de Goede /* 22678f74ed1eSHans de Goede * If we're running behind schedule, we should not catch up 22688f74ed1eSHans de Goede * too fast, as that will make some guests unhappy: 22699359a58bSHans de Goede * 1) We must process a minimum of MIN_UFR_PER_TICK frames, 22708f74ed1eSHans de Goede * otherwise we will never catch up 22718f74ed1eSHans de Goede * 2) Process frames until the guest has requested an irq (IOC) 22728f74ed1eSHans de Goede */ 22739359a58bSHans de Goede if (i >= MIN_UFR_PER_TICK) { 22748f74ed1eSHans de Goede ehci_commit_irq(ehci); 22758f74ed1eSHans de Goede if ((ehci->usbsts & USBINTR_MASK) & ehci->usbintr) { 22768f74ed1eSHans de Goede break; 22778f74ed1eSHans de Goede } 22788f74ed1eSHans de Goede } 227980826240SHans de Goede if (ehci->periodic_sched_active) { 228080826240SHans de Goede ehci->periodic_sched_active--; 228180826240SHans de Goede } 2282f020ed36SGerd Hoffmann ehci_update_frindex(ehci, 1); 22839359a58bSHans de Goede if ((ehci->frindex & 7) == 0) { 2284f020ed36SGerd Hoffmann ehci_advance_periodic_state(ehci); 22859359a58bSHans de Goede } 22869359a58bSHans de Goede ehci->last_run_ns += UFRAME_TIMER_NS; 2287f1ae32a1SGerd Hoffmann } 22883a215326SGerd Hoffmann } else { 228980826240SHans de Goede ehci->periodic_sched_active = 0; 22909359a58bSHans de Goede ehci_update_frindex(ehci, uframes); 22919359a58bSHans de Goede ehci->last_run_ns += UFRAME_TIMER_NS * uframes; 22923a215326SGerd Hoffmann } 2293f1ae32a1SGerd Hoffmann 229480826240SHans de Goede if (ehci->periodic_sched_active) { 229580826240SHans de Goede ehci->async_stepdown = 0; 229680826240SHans de Goede } else if (ehci->async_stepdown < ehci->maxframes / 2) { 229780826240SHans de Goede ehci->async_stepdown++; 229880826240SHans de Goede } 229980826240SHans de Goede 2300f1ae32a1SGerd Hoffmann /* Async is not inside loop since it executes everything it can once 2301f1ae32a1SGerd Hoffmann * called 2302f1ae32a1SGerd Hoffmann */ 23033a215326SGerd Hoffmann if (ehci_async_enabled(ehci) || ehci->astate != EST_INACTIVE) { 23047efc17afSGerd Hoffmann need_timer++; 2305afb7a0b8SGerd Hoffmann ehci_advance_async_state(ehci); 23063a215326SGerd Hoffmann } 2307f1ae32a1SGerd Hoffmann 23087efc17afSGerd Hoffmann ehci_commit_irq(ehci); 23097efc17afSGerd Hoffmann if (ehci->usbsts_pending) { 23107efc17afSGerd Hoffmann need_timer++; 23117efc17afSGerd Hoffmann ehci->async_stepdown = 0; 2312f1ae32a1SGerd Hoffmann } 2313f0ad01f9SGerd Hoffmann 231440862309SGerd Hoffmann if (ehci_enabled(ehci) && (ehci->usbintr & USBSTS_FLR)) { 231540862309SGerd Hoffmann need_timer++; 231640862309SGerd Hoffmann } 231740862309SGerd Hoffmann 23187efc17afSGerd Hoffmann if (need_timer) { 231944272b0fSHans de Goede /* If we've raised int, we speed up the timer, so that we quickly 232044272b0fSHans de Goede * notice any new packets queued up in response */ 232144272b0fSHans de Goede if (ehci->int_req_by_async && (ehci->usbsts & USBSTS_INT)) { 232273bcb24dSRutuja Shah expire_time = t_now + 232373bcb24dSRutuja Shah NANOSECONDS_PER_SECOND / (FRAME_TIMER_FREQ * 4); 232444272b0fSHans de Goede ehci->int_req_by_async = false; 232544272b0fSHans de Goede } else { 232673bcb24dSRutuja Shah expire_time = t_now + (NANOSECONDS_PER_SECOND 2327afb7a0b8SGerd Hoffmann * (ehci->async_stepdown+1) / FRAME_TIMER_FREQ); 232844272b0fSHans de Goede } 2329bc72ad67SAlex Bligh timer_mod(ehci->frame_timer, expire_time); 23307efc17afSGerd Hoffmann } 2331ad3c5412SGerd Hoffmann 2332ad3c5412SGerd Hoffmann ehci->working = false; 2333daf25307SGerd Hoffmann } 2334f1ae32a1SGerd Hoffmann 23353bfecee2SGerd Hoffmann static void ehci_work_timer(void *opaque) 23363bfecee2SGerd Hoffmann { 23373bfecee2SGerd Hoffmann EHCIState *ehci = opaque; 23383bfecee2SGerd Hoffmann 23393bfecee2SGerd Hoffmann qemu_bh_schedule(ehci->async_bh); 23403bfecee2SGerd Hoffmann } 23413bfecee2SGerd Hoffmann 23423e4f910cSGerd Hoffmann static const MemoryRegionOps ehci_mmio_caps_ops = { 23433e4f910cSGerd Hoffmann .read = ehci_caps_read, 2344dff0367cSPrasad J Pandit .write = ehci_caps_write, 23453e4f910cSGerd Hoffmann .valid.min_access_size = 1, 23463e4f910cSGerd Hoffmann .valid.max_access_size = 4, 23473e4f910cSGerd Hoffmann .impl.min_access_size = 1, 23483e4f910cSGerd Hoffmann .impl.max_access_size = 1, 23493e4f910cSGerd Hoffmann .endianness = DEVICE_LITTLE_ENDIAN, 23503e4f910cSGerd Hoffmann }; 23513e4f910cSGerd Hoffmann 23523e4f910cSGerd Hoffmann static const MemoryRegionOps ehci_mmio_opreg_ops = { 23533e4f910cSGerd Hoffmann .read = ehci_opreg_read, 23543e4f910cSGerd Hoffmann .write = ehci_opreg_write, 23553e4f910cSGerd Hoffmann .valid.min_access_size = 4, 23563e4f910cSGerd Hoffmann .valid.max_access_size = 4, 23573e4f910cSGerd Hoffmann .endianness = DEVICE_LITTLE_ENDIAN, 23583e4f910cSGerd Hoffmann }; 23593e4f910cSGerd Hoffmann 23603e4f910cSGerd Hoffmann static const MemoryRegionOps ehci_mmio_port_ops = { 23613e4f910cSGerd Hoffmann .read = ehci_port_read, 23623e4f910cSGerd Hoffmann .write = ehci_port_write, 23633e4f910cSGerd Hoffmann .valid.min_access_size = 4, 23643e4f910cSGerd Hoffmann .valid.max_access_size = 4, 2365f1ae32a1SGerd Hoffmann .endianness = DEVICE_LITTLE_ENDIAN, 2366f1ae32a1SGerd Hoffmann }; 2367f1ae32a1SGerd Hoffmann 2368f1ae32a1SGerd Hoffmann static USBPortOps ehci_port_ops = { 2369f1ae32a1SGerd Hoffmann .attach = ehci_attach, 2370f1ae32a1SGerd Hoffmann .detach = ehci_detach, 2371f1ae32a1SGerd Hoffmann .child_detach = ehci_child_detach, 2372f1ae32a1SGerd Hoffmann .wakeup = ehci_wakeup, 2373f1ae32a1SGerd Hoffmann .complete = ehci_async_complete_packet, 2374f1ae32a1SGerd Hoffmann }; 2375f1ae32a1SGerd Hoffmann 2376ec56214fSGerd Hoffmann static USBBusOps ehci_bus_ops_companion = { 2377f1ae32a1SGerd Hoffmann .register_companion = ehci_register_companion, 237880826240SHans de Goede .wakeup_endpoint = ehci_wakeup_endpoint, 2379f1ae32a1SGerd Hoffmann }; 2380ec56214fSGerd Hoffmann static USBBusOps ehci_bus_ops_standalone = { 2381ec56214fSGerd Hoffmann .wakeup_endpoint = ehci_wakeup_endpoint, 2382ec56214fSGerd Hoffmann }; 2383f1ae32a1SGerd Hoffmann 23849359a58bSHans de Goede static void usb_ehci_pre_save(void *opaque) 23859359a58bSHans de Goede { 23869359a58bSHans de Goede EHCIState *ehci = opaque; 23879359a58bSHans de Goede uint32_t new_frindex; 23889359a58bSHans de Goede 23899359a58bSHans de Goede /* Round down frindex to a multiple of 8 for migration compatibility */ 23909359a58bSHans de Goede new_frindex = ehci->frindex & ~7; 23919359a58bSHans de Goede ehci->last_run_ns -= (ehci->frindex - new_frindex) * UFRAME_TIMER_NS; 23929359a58bSHans de Goede ehci->frindex = new_frindex; 23939359a58bSHans de Goede } 23949359a58bSHans de Goede 23959a773408SGerd Hoffmann static int usb_ehci_post_load(void *opaque, int version_id) 23969a773408SGerd Hoffmann { 23979a773408SGerd Hoffmann EHCIState *s = opaque; 23989a773408SGerd Hoffmann int i; 23999a773408SGerd Hoffmann 24009a773408SGerd Hoffmann for (i = 0; i < NB_PORTS; i++) { 24019a773408SGerd Hoffmann USBPort *companion = s->companion_ports[i]; 24029a773408SGerd Hoffmann if (companion == NULL) { 24039a773408SGerd Hoffmann continue; 24049a773408SGerd Hoffmann } 24059a773408SGerd Hoffmann if (s->portsc[i] & PORTSC_POWNER) { 24069a773408SGerd Hoffmann companion->dev = s->ports[i].dev; 24079a773408SGerd Hoffmann } else { 24089a773408SGerd Hoffmann companion->dev = NULL; 24099a773408SGerd Hoffmann } 24109a773408SGerd Hoffmann } 24119a773408SGerd Hoffmann 24129a773408SGerd Hoffmann return 0; 24139a773408SGerd Hoffmann } 24149a773408SGerd Hoffmann 2415ceab6f96SHans de Goede static void usb_ehci_vm_state_change(void *opaque, int running, RunState state) 2416ceab6f96SHans de Goede { 2417ceab6f96SHans de Goede EHCIState *ehci = opaque; 2418ceab6f96SHans de Goede 2419ceab6f96SHans de Goede /* 2420ceab6f96SHans de Goede * We don't migrate the EHCIQueue-s, instead we rebuild them for the 2421ceab6f96SHans de Goede * schedule in guest memory. We must do the rebuilt ASAP, so that 2422ceab6f96SHans de Goede * USB-devices which have async handled packages have a packet in the 2423ceab6f96SHans de Goede * ep queue to match the completion with. 2424ceab6f96SHans de Goede */ 2425ceab6f96SHans de Goede if (state == RUN_STATE_RUNNING) { 2426ceab6f96SHans de Goede ehci_advance_async_state(ehci); 2427ceab6f96SHans de Goede } 2428ceab6f96SHans de Goede 2429ceab6f96SHans de Goede /* 2430ceab6f96SHans de Goede * The schedule rebuilt from guest memory could cause the migration dest 2431ceab6f96SHans de Goede * to miss a QH unlink, and fail to cancel packets, since the unlinked QH 2432ceab6f96SHans de Goede * will never have existed on the destination. Therefor we must flush the 2433ceab6f96SHans de Goede * async schedule on savevm to catch any not yet noticed unlinks. 2434ceab6f96SHans de Goede */ 2435ceab6f96SHans de Goede if (state == RUN_STATE_SAVE_VM) { 2436ceab6f96SHans de Goede ehci_advance_async_state(ehci); 2437ceab6f96SHans de Goede ehci_queues_rip_unseen(ehci, 1); 2438ceab6f96SHans de Goede } 2439ceab6f96SHans de Goede } 2440ceab6f96SHans de Goede 24410bf96f94SGerd Hoffmann const VMStateDescription vmstate_ehci = { 24425010d4dcSPeter Crosthwaite .name = "ehci-core", 24436d3b6d3dSGerd Hoffmann .version_id = 2, 24446d3b6d3dSGerd Hoffmann .minimum_version_id = 1, 24459359a58bSHans de Goede .pre_save = usb_ehci_pre_save, 24469a773408SGerd Hoffmann .post_load = usb_ehci_post_load, 24479a773408SGerd Hoffmann .fields = (VMStateField[]) { 24489a773408SGerd Hoffmann /* mmio registers */ 24499a773408SGerd Hoffmann VMSTATE_UINT32(usbcmd, EHCIState), 24509a773408SGerd Hoffmann VMSTATE_UINT32(usbsts, EHCIState), 24516d3b6d3dSGerd Hoffmann VMSTATE_UINT32_V(usbsts_pending, EHCIState, 2), 24526d3b6d3dSGerd Hoffmann VMSTATE_UINT32_V(usbsts_frindex, EHCIState, 2), 24539a773408SGerd Hoffmann VMSTATE_UINT32(usbintr, EHCIState), 24549a773408SGerd Hoffmann VMSTATE_UINT32(frindex, EHCIState), 24559a773408SGerd Hoffmann VMSTATE_UINT32(ctrldssegment, EHCIState), 24569a773408SGerd Hoffmann VMSTATE_UINT32(periodiclistbase, EHCIState), 24579a773408SGerd Hoffmann VMSTATE_UINT32(asynclistaddr, EHCIState), 24589a773408SGerd Hoffmann VMSTATE_UINT32(configflag, EHCIState), 24599a773408SGerd Hoffmann VMSTATE_UINT32(portsc[0], EHCIState), 24609a773408SGerd Hoffmann VMSTATE_UINT32(portsc[1], EHCIState), 24619a773408SGerd Hoffmann VMSTATE_UINT32(portsc[2], EHCIState), 24629a773408SGerd Hoffmann VMSTATE_UINT32(portsc[3], EHCIState), 24639a773408SGerd Hoffmann VMSTATE_UINT32(portsc[4], EHCIState), 24649a773408SGerd Hoffmann VMSTATE_UINT32(portsc[5], EHCIState), 24659a773408SGerd Hoffmann /* frame timer */ 2466e720677eSPaolo Bonzini VMSTATE_TIMER_PTR(frame_timer, EHCIState), 24679a773408SGerd Hoffmann VMSTATE_UINT64(last_run_ns, EHCIState), 24689a773408SGerd Hoffmann VMSTATE_UINT32(async_stepdown, EHCIState), 24699a773408SGerd Hoffmann /* schedule state */ 24709a773408SGerd Hoffmann VMSTATE_UINT32(astate, EHCIState), 24719a773408SGerd Hoffmann VMSTATE_UINT32(pstate, EHCIState), 24729a773408SGerd Hoffmann VMSTATE_UINT32(a_fetch_addr, EHCIState), 24739a773408SGerd Hoffmann VMSTATE_UINT32(p_fetch_addr, EHCIState), 24749a773408SGerd Hoffmann VMSTATE_END_OF_LIST() 24759a773408SGerd Hoffmann } 2476f1ae32a1SGerd Hoffmann }; 2477f1ae32a1SGerd Hoffmann 247808f4c90bSAndreas Färber void usb_ehci_realize(EHCIState *s, DeviceState *dev, Error **errp) 2479f1ae32a1SGerd Hoffmann { 2480f1ae32a1SGerd Hoffmann int i; 2481f1ae32a1SGerd Hoffmann 2482cc8d6a84SKuo-Jung Su if (s->portnr > NB_PORTS) { 2483cc8d6a84SKuo-Jung Su error_setg(errp, "Too many ports! Max. port number is %d.", 2484cc8d6a84SKuo-Jung Su NB_PORTS); 2485cc8d6a84SKuo-Jung Su return; 2486cc8d6a84SKuo-Jung Su } 24872a7f2630SGerd Hoffmann if (s->maxframes < 8 || s->maxframes > 512) { 24882a7f2630SGerd Hoffmann error_setg(errp, "maxframes %d out if range (8 .. 512)", 24892a7f2630SGerd Hoffmann s->maxframes); 24902a7f2630SGerd Hoffmann return; 24912a7f2630SGerd Hoffmann } 2492cc8d6a84SKuo-Jung Su 2493ec56214fSGerd Hoffmann usb_bus_new(&s->bus, sizeof(s->bus), s->companion_enable ? 2494ec56214fSGerd Hoffmann &ehci_bus_ops_companion : &ehci_bus_ops_standalone, dev); 2495cc8d6a84SKuo-Jung Su for (i = 0; i < s->portnr; i++) { 2496d4614cc3SAndreas Färber usb_register_port(&s->bus, &s->ports[i], s, i, &ehci_port_ops, 2497d4614cc3SAndreas Färber USB_SPEED_MASK_HIGH); 2498d4614cc3SAndreas Färber s->ports[i].dev = 0; 2499d4614cc3SAndreas Färber } 2500d4614cc3SAndreas Färber 25013bfecee2SGerd Hoffmann s->frame_timer = timer_new_ns(QEMU_CLOCK_VIRTUAL, ehci_work_timer, s); 25023bfecee2SGerd Hoffmann s->async_bh = qemu_bh_new(ehci_work_bh, s); 2503adbecc89SGerd Hoffmann s->device = dev; 2504d4614cc3SAndreas Färber 250505a36991SGonglei s->vmstate = qemu_add_vm_change_state_handler(usb_ehci_vm_state_change, s); 2506d4614cc3SAndreas Färber } 2507d4614cc3SAndreas Färber 25084e130cf6SGonglei void usb_ehci_unrealize(EHCIState *s, DeviceState *dev, Error **errp) 25094e130cf6SGonglei { 2510d733f74cSGonglei trace_usb_ehci_unrealize(); 2511d733f74cSGonglei 25124e130cf6SGonglei if (s->frame_timer) { 25134e130cf6SGonglei timer_del(s->frame_timer); 25144e130cf6SGonglei timer_free(s->frame_timer); 25154e130cf6SGonglei s->frame_timer = NULL; 25164e130cf6SGonglei } 25174e130cf6SGonglei if (s->async_bh) { 25184e130cf6SGonglei qemu_bh_delete(s->async_bh); 25194e130cf6SGonglei } 25204e130cf6SGonglei 25214e130cf6SGonglei ehci_queues_rip_all(s, 0); 25224e130cf6SGonglei ehci_queues_rip_all(s, 1); 25234e130cf6SGonglei 25244e130cf6SGonglei memory_region_del_subregion(&s->mem, &s->mem_caps); 25254e130cf6SGonglei memory_region_del_subregion(&s->mem, &s->mem_opreg); 25264e130cf6SGonglei memory_region_del_subregion(&s->mem, &s->mem_ports); 25274e130cf6SGonglei 25284e130cf6SGonglei usb_bus_release(&s->bus); 25294e130cf6SGonglei 25304e130cf6SGonglei if (s->vmstate) { 25314e130cf6SGonglei qemu_del_vm_change_state_handler(s->vmstate); 25324e130cf6SGonglei } 25334e130cf6SGonglei } 25344e130cf6SGonglei 2535d4614cc3SAndreas Färber void usb_ehci_init(EHCIState *s, DeviceState *dev) 2536d4614cc3SAndreas Färber { 25373e4f910cSGerd Hoffmann /* 2.2 host controller interface version */ 253827a11324SPeter Crosthwaite s->caps[0x00] = (uint8_t)(s->opregbase - s->capsbase); 25393e4f910cSGerd Hoffmann s->caps[0x01] = 0x00; 25403e4f910cSGerd Hoffmann s->caps[0x02] = 0x00; 25413e4f910cSGerd Hoffmann s->caps[0x03] = 0x01; /* HC version */ 2542cc8d6a84SKuo-Jung Su s->caps[0x04] = s->portnr; /* Number of downstream ports */ 25433e4f910cSGerd Hoffmann s->caps[0x05] = 0x00; /* No companion ports at present */ 25443e4f910cSGerd Hoffmann s->caps[0x06] = 0x00; 25453e4f910cSGerd Hoffmann s->caps[0x07] = 0x00; 25463e4f910cSGerd Hoffmann s->caps[0x08] = 0x80; /* We can cache whole frame, no 64-bit */ 25473e4f910cSGerd Hoffmann s->caps[0x0a] = 0x00; 25483e4f910cSGerd Hoffmann s->caps[0x0b] = 0x00; 2549f1ae32a1SGerd Hoffmann 2550f1ae32a1SGerd Hoffmann QTAILQ_INIT(&s->aqueues); 2551f1ae32a1SGerd Hoffmann QTAILQ_INIT(&s->pqueues); 25527341ea07SHans de Goede usb_packet_init(&s->ipacket); 2553f1ae32a1SGerd Hoffmann 255422fc860bSPaolo Bonzini memory_region_init(&s->mem, OBJECT(dev), "ehci", MMIO_SIZE); 255522fc860bSPaolo Bonzini memory_region_init_io(&s->mem_caps, OBJECT(dev), &ehci_mmio_caps_ops, s, 255627a11324SPeter Crosthwaite "capabilities", CAPA_SIZE); 255722fc860bSPaolo Bonzini memory_region_init_io(&s->mem_opreg, OBJECT(dev), &ehci_mmio_opreg_ops, s, 2558cc8d6a84SKuo-Jung Su "operational", s->portscbase); 255922fc860bSPaolo Bonzini memory_region_init_io(&s->mem_ports, OBJECT(dev), &ehci_mmio_port_ops, s, 2560cc8d6a84SKuo-Jung Su "ports", 4 * s->portnr); 25613e4f910cSGerd Hoffmann 256227a11324SPeter Crosthwaite memory_region_add_subregion(&s->mem, s->capsbase, &s->mem_caps); 256327a11324SPeter Crosthwaite memory_region_add_subregion(&s->mem, s->opregbase, &s->mem_opreg); 2564cc8d6a84SKuo-Jung Su memory_region_add_subregion(&s->mem, s->opregbase + s->portscbase, 256527a11324SPeter Crosthwaite &s->mem_ports); 25665010d4dcSPeter Crosthwaite } 25673e4f910cSGerd Hoffmann 2568d710e1e7SLi Qiang void usb_ehci_finalize(EHCIState *s) 2569d710e1e7SLi Qiang { 2570d710e1e7SLi Qiang usb_packet_cleanup(&s->ipacket); 2571d710e1e7SLi Qiang } 2572d710e1e7SLi Qiang 2573f1ae32a1SGerd Hoffmann /* 2574f1ae32a1SGerd Hoffmann * vim: expandtab ts=4 2575f1ae32a1SGerd Hoffmann */ 2576