1f1ae32a1SGerd Hoffmann /* 2f1ae32a1SGerd Hoffmann * QEMU USB EHCI Emulation 3f1ae32a1SGerd Hoffmann * 4f1ae32a1SGerd Hoffmann * Copyright(c) 2008 Emutex Ltd. (address@hidden) 5522079ddSHans de Goede * Copyright(c) 2011-2012 Red Hat, Inc. 6522079ddSHans de Goede * 7522079ddSHans de Goede * Red Hat Authors: 8522079ddSHans de Goede * Gerd Hoffmann <kraxel@redhat.com> 9522079ddSHans de Goede * Hans de Goede <hdegoede@redhat.com> 10f1ae32a1SGerd Hoffmann * 11f1ae32a1SGerd Hoffmann * EHCI project was started by Mark Burkley, with contributions by 12f1ae32a1SGerd Hoffmann * Niels de Vos. David S. Ahern continued working on it. Kevin Wolf, 13f1ae32a1SGerd Hoffmann * Jan Kiszka and Vincent Palatin contributed bugfixes. 14f1ae32a1SGerd Hoffmann * 15f1ae32a1SGerd Hoffmann * 16f1ae32a1SGerd Hoffmann * This library is free software; you can redistribute it and/or 17f1ae32a1SGerd Hoffmann * modify it under the terms of the GNU Lesser General Public 18f1ae32a1SGerd Hoffmann * License as published by the Free Software Foundation; either 19f1ae32a1SGerd Hoffmann * version 2 of the License, or(at your option) any later version. 20f1ae32a1SGerd Hoffmann * 21f1ae32a1SGerd Hoffmann * This library is distributed in the hope that it will be useful, 22f1ae32a1SGerd Hoffmann * but WITHOUT ANY WARRANTY; without even the implied warranty of 23f1ae32a1SGerd Hoffmann * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU 24f1ae32a1SGerd Hoffmann * Lesser General Public License for more details. 25f1ae32a1SGerd Hoffmann * 26f1ae32a1SGerd Hoffmann * You should have received a copy of the GNU General Public License 27f1ae32a1SGerd Hoffmann * along with this program; if not, see <http://www.gnu.org/licenses/>. 28f1ae32a1SGerd Hoffmann */ 29f1ae32a1SGerd Hoffmann 300bf96f94SGerd Hoffmann #include "hw/usb/hcd-ehci.h" 31f1ae32a1SGerd Hoffmann 32f1ae32a1SGerd Hoffmann /* Capability Registers Base Address - section 2.2 */ 3327a11324SPeter Crosthwaite #define CAPLENGTH 0x0000 /* 1-byte, 0x0001 reserved */ 3427a11324SPeter Crosthwaite #define HCIVERSION 0x0002 /* 2-bytes, i/f version # */ 3527a11324SPeter Crosthwaite #define HCSPARAMS 0x0004 /* 4-bytes, structural params */ 3627a11324SPeter Crosthwaite #define HCCPARAMS 0x0008 /* 4-bytes, capability params */ 37f1ae32a1SGerd Hoffmann #define EECP HCCPARAMS + 1 3827a11324SPeter Crosthwaite #define HCSPPORTROUTE1 0x000c 3927a11324SPeter Crosthwaite #define HCSPPORTROUTE2 0x0010 40f1ae32a1SGerd Hoffmann 4127a11324SPeter Crosthwaite #define USBCMD 0x0000 42f1ae32a1SGerd Hoffmann #define USBCMD_RUNSTOP (1 << 0) // run / Stop 43f1ae32a1SGerd Hoffmann #define USBCMD_HCRESET (1 << 1) // HC Reset 44f1ae32a1SGerd Hoffmann #define USBCMD_FLS (3 << 2) // Frame List Size 45f1ae32a1SGerd Hoffmann #define USBCMD_FLS_SH 2 // Frame List Size Shift 46f1ae32a1SGerd Hoffmann #define USBCMD_PSE (1 << 4) // Periodic Schedule Enable 47f1ae32a1SGerd Hoffmann #define USBCMD_ASE (1 << 5) // Asynch Schedule Enable 48f1ae32a1SGerd Hoffmann #define USBCMD_IAAD (1 << 6) // Int Asynch Advance Doorbell 49f1ae32a1SGerd Hoffmann #define USBCMD_LHCR (1 << 7) // Light Host Controller Reset 50f1ae32a1SGerd Hoffmann #define USBCMD_ASPMC (3 << 8) // Async Sched Park Mode Count 51f1ae32a1SGerd Hoffmann #define USBCMD_ASPME (1 << 11) // Async Sched Park Mode Enable 52f1ae32a1SGerd Hoffmann #define USBCMD_ITC (0x7f << 16) // Int Threshold Control 53f1ae32a1SGerd Hoffmann #define USBCMD_ITC_SH 16 // Int Threshold Control Shift 54f1ae32a1SGerd Hoffmann 5527a11324SPeter Crosthwaite #define USBSTS 0x0004 56f1ae32a1SGerd Hoffmann #define USBSTS_RO_MASK 0x0000003f 57f1ae32a1SGerd Hoffmann #define USBSTS_INT (1 << 0) // USB Interrupt 58f1ae32a1SGerd Hoffmann #define USBSTS_ERRINT (1 << 1) // Error Interrupt 59f1ae32a1SGerd Hoffmann #define USBSTS_PCD (1 << 2) // Port Change Detect 60f1ae32a1SGerd Hoffmann #define USBSTS_FLR (1 << 3) // Frame List Rollover 61f1ae32a1SGerd Hoffmann #define USBSTS_HSE (1 << 4) // Host System Error 62f1ae32a1SGerd Hoffmann #define USBSTS_IAA (1 << 5) // Interrupt on Async Advance 63f1ae32a1SGerd Hoffmann #define USBSTS_HALT (1 << 12) // HC Halted 64f1ae32a1SGerd Hoffmann #define USBSTS_REC (1 << 13) // Reclamation 65f1ae32a1SGerd Hoffmann #define USBSTS_PSS (1 << 14) // Periodic Schedule Status 66f1ae32a1SGerd Hoffmann #define USBSTS_ASS (1 << 15) // Asynchronous Schedule Status 67f1ae32a1SGerd Hoffmann 68f1ae32a1SGerd Hoffmann /* 69f1ae32a1SGerd Hoffmann * Interrupt enable bits correspond to the interrupt active bits in USBSTS 70f1ae32a1SGerd Hoffmann * so no need to redefine here. 71f1ae32a1SGerd Hoffmann */ 7227a11324SPeter Crosthwaite #define USBINTR 0x0008 73f1ae32a1SGerd Hoffmann #define USBINTR_MASK 0x0000003f 74f1ae32a1SGerd Hoffmann 7527a11324SPeter Crosthwaite #define FRINDEX 0x000c 7627a11324SPeter Crosthwaite #define CTRLDSSEGMENT 0x0010 7727a11324SPeter Crosthwaite #define PERIODICLISTBASE 0x0014 7827a11324SPeter Crosthwaite #define ASYNCLISTADDR 0x0018 79f1ae32a1SGerd Hoffmann #define ASYNCLISTADDR_MASK 0xffffffe0 80f1ae32a1SGerd Hoffmann 8127a11324SPeter Crosthwaite #define CONFIGFLAG 0x0040 82f1ae32a1SGerd Hoffmann 83f1ae32a1SGerd Hoffmann /* 84f1ae32a1SGerd Hoffmann * Bits that are reserved or are read-only are masked out of values 85f1ae32a1SGerd Hoffmann * written to us by software 86f1ae32a1SGerd Hoffmann */ 87f1ae32a1SGerd Hoffmann #define PORTSC_RO_MASK 0x007001c0 88f1ae32a1SGerd Hoffmann #define PORTSC_RWC_MASK 0x0000002a 89f1ae32a1SGerd Hoffmann #define PORTSC_WKOC_E (1 << 22) // Wake on Over Current Enable 90f1ae32a1SGerd Hoffmann #define PORTSC_WKDS_E (1 << 21) // Wake on Disconnect Enable 91f1ae32a1SGerd Hoffmann #define PORTSC_WKCN_E (1 << 20) // Wake on Connect Enable 92f1ae32a1SGerd Hoffmann #define PORTSC_PTC (15 << 16) // Port Test Control 93f1ae32a1SGerd Hoffmann #define PORTSC_PTC_SH 16 // Port Test Control shift 94f1ae32a1SGerd Hoffmann #define PORTSC_PIC (3 << 14) // Port Indicator Control 95f1ae32a1SGerd Hoffmann #define PORTSC_PIC_SH 14 // Port Indicator Control Shift 96f1ae32a1SGerd Hoffmann #define PORTSC_POWNER (1 << 13) // Port Owner 97f1ae32a1SGerd Hoffmann #define PORTSC_PPOWER (1 << 12) // Port Power 98f1ae32a1SGerd Hoffmann #define PORTSC_LINESTAT (3 << 10) // Port Line Status 99f1ae32a1SGerd Hoffmann #define PORTSC_LINESTAT_SH 10 // Port Line Status Shift 100f1ae32a1SGerd Hoffmann #define PORTSC_PRESET (1 << 8) // Port Reset 101f1ae32a1SGerd Hoffmann #define PORTSC_SUSPEND (1 << 7) // Port Suspend 102f1ae32a1SGerd Hoffmann #define PORTSC_FPRES (1 << 6) // Force Port Resume 103f1ae32a1SGerd Hoffmann #define PORTSC_OCC (1 << 5) // Over Current Change 104f1ae32a1SGerd Hoffmann #define PORTSC_OCA (1 << 4) // Over Current Active 105f1ae32a1SGerd Hoffmann #define PORTSC_PEDC (1 << 3) // Port Enable/Disable Change 106f1ae32a1SGerd Hoffmann #define PORTSC_PED (1 << 2) // Port Enable/Disable 107f1ae32a1SGerd Hoffmann #define PORTSC_CSC (1 << 1) // Connect Status Change 108f1ae32a1SGerd Hoffmann #define PORTSC_CONNECT (1 << 0) // Current Connect Status 109f1ae32a1SGerd Hoffmann 110f1ae32a1SGerd Hoffmann #define FRAME_TIMER_FREQ 1000 111f1ae32a1SGerd Hoffmann #define FRAME_TIMER_NS (1000000000 / FRAME_TIMER_FREQ) 1129359a58bSHans de Goede #define UFRAME_TIMER_NS (FRAME_TIMER_NS / 8) 113f1ae32a1SGerd Hoffmann 114f1ae32a1SGerd Hoffmann #define NB_MAXINTRATE 8 // Max rate at which controller issues ints 115f1ae32a1SGerd Hoffmann #define BUFF_SIZE 5*4096 // Max bytes to transfer per transaction 116f1ae32a1SGerd Hoffmann #define MAX_QH 100 // Max allowable queue heads in a chain 1179359a58bSHans de Goede #define MIN_UFR_PER_TICK 24 /* Min frames to process when catching up */ 1189359a58bSHans de Goede #define PERIODIC_ACTIVE 512 /* Micro-frames */ 119f1ae32a1SGerd Hoffmann 120f1ae32a1SGerd Hoffmann /* Internal periodic / asynchronous schedule state machine states 121f1ae32a1SGerd Hoffmann */ 122f1ae32a1SGerd Hoffmann typedef enum { 123f1ae32a1SGerd Hoffmann EST_INACTIVE = 1000, 124f1ae32a1SGerd Hoffmann EST_ACTIVE, 125f1ae32a1SGerd Hoffmann EST_EXECUTING, 126f1ae32a1SGerd Hoffmann EST_SLEEPING, 127f1ae32a1SGerd Hoffmann /* The following states are internal to the state machine function 128f1ae32a1SGerd Hoffmann */ 129f1ae32a1SGerd Hoffmann EST_WAITLISTHEAD, 130f1ae32a1SGerd Hoffmann EST_FETCHENTRY, 131f1ae32a1SGerd Hoffmann EST_FETCHQH, 132f1ae32a1SGerd Hoffmann EST_FETCHITD, 133f1ae32a1SGerd Hoffmann EST_FETCHSITD, 134f1ae32a1SGerd Hoffmann EST_ADVANCEQUEUE, 135f1ae32a1SGerd Hoffmann EST_FETCHQTD, 136f1ae32a1SGerd Hoffmann EST_EXECUTE, 137f1ae32a1SGerd Hoffmann EST_WRITEBACK, 138f1ae32a1SGerd Hoffmann EST_HORIZONTALQH 139f1ae32a1SGerd Hoffmann } EHCI_STATES; 140f1ae32a1SGerd Hoffmann 141f1ae32a1SGerd Hoffmann /* macros for accessing fields within next link pointer entry */ 142f1ae32a1SGerd Hoffmann #define NLPTR_GET(x) ((x) & 0xffffffe0) 143f1ae32a1SGerd Hoffmann #define NLPTR_TYPE_GET(x) (((x) >> 1) & 3) 144f1ae32a1SGerd Hoffmann #define NLPTR_TBIT(x) ((x) & 1) // 1=invalid, 0=valid 145f1ae32a1SGerd Hoffmann 146f1ae32a1SGerd Hoffmann /* link pointer types */ 147f1ae32a1SGerd Hoffmann #define NLPTR_TYPE_ITD 0 // isoc xfer descriptor 148f1ae32a1SGerd Hoffmann #define NLPTR_TYPE_QH 1 // queue head 149f1ae32a1SGerd Hoffmann #define NLPTR_TYPE_STITD 2 // split xaction, isoc xfer descriptor 150f1ae32a1SGerd Hoffmann #define NLPTR_TYPE_FSTN 3 // frame span traversal node 151f1ae32a1SGerd Hoffmann 152f1ae32a1SGerd Hoffmann #define SET_LAST_RUN_CLOCK(s) \ 153f1ae32a1SGerd Hoffmann (s)->last_run_ns = qemu_get_clock_ns(vm_clock); 154f1ae32a1SGerd Hoffmann 155f1ae32a1SGerd Hoffmann /* nifty macros from Arnon's EHCI version */ 156f1ae32a1SGerd Hoffmann #define get_field(data, field) \ 157f1ae32a1SGerd Hoffmann (((data) & field##_MASK) >> field##_SH) 158f1ae32a1SGerd Hoffmann 159f1ae32a1SGerd Hoffmann #define set_field(data, newval, field) do { \ 160f1ae32a1SGerd Hoffmann uint32_t val = *data; \ 161f1ae32a1SGerd Hoffmann val &= ~ field##_MASK; \ 162f1ae32a1SGerd Hoffmann val |= ((newval) << field##_SH) & field##_MASK; \ 163f1ae32a1SGerd Hoffmann *data = val; \ 164f1ae32a1SGerd Hoffmann } while(0) 165f1ae32a1SGerd Hoffmann 166f1ae32a1SGerd Hoffmann static const char *ehci_state_names[] = { 167f1ae32a1SGerd Hoffmann [EST_INACTIVE] = "INACTIVE", 168f1ae32a1SGerd Hoffmann [EST_ACTIVE] = "ACTIVE", 169f1ae32a1SGerd Hoffmann [EST_EXECUTING] = "EXECUTING", 170f1ae32a1SGerd Hoffmann [EST_SLEEPING] = "SLEEPING", 171f1ae32a1SGerd Hoffmann [EST_WAITLISTHEAD] = "WAITLISTHEAD", 172f1ae32a1SGerd Hoffmann [EST_FETCHENTRY] = "FETCH ENTRY", 173f1ae32a1SGerd Hoffmann [EST_FETCHQH] = "FETCH QH", 174f1ae32a1SGerd Hoffmann [EST_FETCHITD] = "FETCH ITD", 175f1ae32a1SGerd Hoffmann [EST_ADVANCEQUEUE] = "ADVANCEQUEUE", 176f1ae32a1SGerd Hoffmann [EST_FETCHQTD] = "FETCH QTD", 177f1ae32a1SGerd Hoffmann [EST_EXECUTE] = "EXECUTE", 178f1ae32a1SGerd Hoffmann [EST_WRITEBACK] = "WRITEBACK", 179f1ae32a1SGerd Hoffmann [EST_HORIZONTALQH] = "HORIZONTALQH", 180f1ae32a1SGerd Hoffmann }; 181f1ae32a1SGerd Hoffmann 182f1ae32a1SGerd Hoffmann static const char *ehci_mmio_names[] = { 183f1ae32a1SGerd Hoffmann [USBCMD] = "USBCMD", 184f1ae32a1SGerd Hoffmann [USBSTS] = "USBSTS", 185f1ae32a1SGerd Hoffmann [USBINTR] = "USBINTR", 186f1ae32a1SGerd Hoffmann [FRINDEX] = "FRINDEX", 187f1ae32a1SGerd Hoffmann [PERIODICLISTBASE] = "P-LIST BASE", 188f1ae32a1SGerd Hoffmann [ASYNCLISTADDR] = "A-LIST ADDR", 189f1ae32a1SGerd Hoffmann [CONFIGFLAG] = "CONFIGFLAG", 190f1ae32a1SGerd Hoffmann }; 191f1ae32a1SGerd Hoffmann 1924b63a0dfSHans de Goede static int ehci_state_executing(EHCIQueue *q); 1934b63a0dfSHans de Goede static int ehci_state_writeback(EHCIQueue *q); 194ff80ce59SHans de Goede static int ehci_state_advqueue(EHCIQueue *q); 195b4ea8664SHans de Goede static int ehci_fill_queue(EHCIPacket *p); 1962b3de6adSHans de Goede static void ehci_free_packet(EHCIPacket *p); 1974b63a0dfSHans de Goede 198f1ae32a1SGerd Hoffmann static const char *nr2str(const char **n, size_t len, uint32_t nr) 199f1ae32a1SGerd Hoffmann { 200f1ae32a1SGerd Hoffmann if (nr < len && n[nr] != NULL) { 201f1ae32a1SGerd Hoffmann return n[nr]; 202f1ae32a1SGerd Hoffmann } else { 203f1ae32a1SGerd Hoffmann return "unknown"; 204f1ae32a1SGerd Hoffmann } 205f1ae32a1SGerd Hoffmann } 206f1ae32a1SGerd Hoffmann 207f1ae32a1SGerd Hoffmann static const char *state2str(uint32_t state) 208f1ae32a1SGerd Hoffmann { 209f1ae32a1SGerd Hoffmann return nr2str(ehci_state_names, ARRAY_SIZE(ehci_state_names), state); 210f1ae32a1SGerd Hoffmann } 211f1ae32a1SGerd Hoffmann 212a8170e5eSAvi Kivity static const char *addr2str(hwaddr addr) 213f1ae32a1SGerd Hoffmann { 21427a11324SPeter Crosthwaite return nr2str(ehci_mmio_names, ARRAY_SIZE(ehci_mmio_names), addr); 215f1ae32a1SGerd Hoffmann } 216f1ae32a1SGerd Hoffmann 217f1ae32a1SGerd Hoffmann static void ehci_trace_usbsts(uint32_t mask, int state) 218f1ae32a1SGerd Hoffmann { 219f1ae32a1SGerd Hoffmann /* interrupts */ 220f1ae32a1SGerd Hoffmann if (mask & USBSTS_INT) { 221f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("INT", state); 222f1ae32a1SGerd Hoffmann } 223f1ae32a1SGerd Hoffmann if (mask & USBSTS_ERRINT) { 224f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("ERRINT", state); 225f1ae32a1SGerd Hoffmann } 226f1ae32a1SGerd Hoffmann if (mask & USBSTS_PCD) { 227f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("PCD", state); 228f1ae32a1SGerd Hoffmann } 229f1ae32a1SGerd Hoffmann if (mask & USBSTS_FLR) { 230f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("FLR", state); 231f1ae32a1SGerd Hoffmann } 232f1ae32a1SGerd Hoffmann if (mask & USBSTS_HSE) { 233f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("HSE", state); 234f1ae32a1SGerd Hoffmann } 235f1ae32a1SGerd Hoffmann if (mask & USBSTS_IAA) { 236f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("IAA", state); 237f1ae32a1SGerd Hoffmann } 238f1ae32a1SGerd Hoffmann 239f1ae32a1SGerd Hoffmann /* status */ 240f1ae32a1SGerd Hoffmann if (mask & USBSTS_HALT) { 241f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("HALT", state); 242f1ae32a1SGerd Hoffmann } 243f1ae32a1SGerd Hoffmann if (mask & USBSTS_REC) { 244f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("REC", state); 245f1ae32a1SGerd Hoffmann } 246f1ae32a1SGerd Hoffmann if (mask & USBSTS_PSS) { 247f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("PSS", state); 248f1ae32a1SGerd Hoffmann } 249f1ae32a1SGerd Hoffmann if (mask & USBSTS_ASS) { 250f1ae32a1SGerd Hoffmann trace_usb_ehci_usbsts("ASS", state); 251f1ae32a1SGerd Hoffmann } 252f1ae32a1SGerd Hoffmann } 253f1ae32a1SGerd Hoffmann 254f1ae32a1SGerd Hoffmann static inline void ehci_set_usbsts(EHCIState *s, int mask) 255f1ae32a1SGerd Hoffmann { 256f1ae32a1SGerd Hoffmann if ((s->usbsts & mask) == mask) { 257f1ae32a1SGerd Hoffmann return; 258f1ae32a1SGerd Hoffmann } 259f1ae32a1SGerd Hoffmann ehci_trace_usbsts(mask, 1); 260f1ae32a1SGerd Hoffmann s->usbsts |= mask; 261f1ae32a1SGerd Hoffmann } 262f1ae32a1SGerd Hoffmann 263f1ae32a1SGerd Hoffmann static inline void ehci_clear_usbsts(EHCIState *s, int mask) 264f1ae32a1SGerd Hoffmann { 265f1ae32a1SGerd Hoffmann if ((s->usbsts & mask) == 0) { 266f1ae32a1SGerd Hoffmann return; 267f1ae32a1SGerd Hoffmann } 268f1ae32a1SGerd Hoffmann ehci_trace_usbsts(mask, 0); 269f1ae32a1SGerd Hoffmann s->usbsts &= ~mask; 270f1ae32a1SGerd Hoffmann } 271f1ae32a1SGerd Hoffmann 2727efc17afSGerd Hoffmann /* update irq line */ 2737efc17afSGerd Hoffmann static inline void ehci_update_irq(EHCIState *s) 274f1ae32a1SGerd Hoffmann { 275f1ae32a1SGerd Hoffmann int level = 0; 276f1ae32a1SGerd Hoffmann 277f1ae32a1SGerd Hoffmann if ((s->usbsts & USBINTR_MASK) & s->usbintr) { 278f1ae32a1SGerd Hoffmann level = 1; 279f1ae32a1SGerd Hoffmann } 280f1ae32a1SGerd Hoffmann 2817efc17afSGerd Hoffmann trace_usb_ehci_irq(level, s->frindex, s->usbsts, s->usbintr); 282f1ae32a1SGerd Hoffmann qemu_set_irq(s->irq, level); 283f1ae32a1SGerd Hoffmann } 284f1ae32a1SGerd Hoffmann 2857efc17afSGerd Hoffmann /* flag interrupt condition */ 2867efc17afSGerd Hoffmann static inline void ehci_raise_irq(EHCIState *s, int intr) 287f1ae32a1SGerd Hoffmann { 2886d3b6d3dSGerd Hoffmann if (intr & (USBSTS_PCD | USBSTS_FLR | USBSTS_HSE)) { 2896d3b6d3dSGerd Hoffmann s->usbsts |= intr; 2906d3b6d3dSGerd Hoffmann ehci_update_irq(s); 2916d3b6d3dSGerd Hoffmann } else { 292f1ae32a1SGerd Hoffmann s->usbsts_pending |= intr; 293f1ae32a1SGerd Hoffmann } 2946d3b6d3dSGerd Hoffmann } 295f1ae32a1SGerd Hoffmann 2967efc17afSGerd Hoffmann /* 2977efc17afSGerd Hoffmann * Commit pending interrupts (added via ehci_raise_irq), 2987efc17afSGerd Hoffmann * at the rate allowed by "Interrupt Threshold Control". 2997efc17afSGerd Hoffmann */ 3007efc17afSGerd Hoffmann static inline void ehci_commit_irq(EHCIState *s) 301f1ae32a1SGerd Hoffmann { 3027efc17afSGerd Hoffmann uint32_t itc; 3037efc17afSGerd Hoffmann 304f1ae32a1SGerd Hoffmann if (!s->usbsts_pending) { 305f1ae32a1SGerd Hoffmann return; 306f1ae32a1SGerd Hoffmann } 3077efc17afSGerd Hoffmann if (s->usbsts_frindex > s->frindex) { 3087efc17afSGerd Hoffmann return; 3097efc17afSGerd Hoffmann } 3107efc17afSGerd Hoffmann 3117efc17afSGerd Hoffmann itc = (s->usbcmd >> 16) & 0xff; 3127efc17afSGerd Hoffmann s->usbsts |= s->usbsts_pending; 313f1ae32a1SGerd Hoffmann s->usbsts_pending = 0; 3147efc17afSGerd Hoffmann s->usbsts_frindex = s->frindex + itc; 3157efc17afSGerd Hoffmann ehci_update_irq(s); 316f1ae32a1SGerd Hoffmann } 317f1ae32a1SGerd Hoffmann 318daf25307SGerd Hoffmann static void ehci_update_halt(EHCIState *s) 319daf25307SGerd Hoffmann { 320daf25307SGerd Hoffmann if (s->usbcmd & USBCMD_RUNSTOP) { 321daf25307SGerd Hoffmann ehci_clear_usbsts(s, USBSTS_HALT); 322daf25307SGerd Hoffmann } else { 323daf25307SGerd Hoffmann if (s->astate == EST_INACTIVE && s->pstate == EST_INACTIVE) { 324daf25307SGerd Hoffmann ehci_set_usbsts(s, USBSTS_HALT); 325daf25307SGerd Hoffmann } 326daf25307SGerd Hoffmann } 327daf25307SGerd Hoffmann } 328daf25307SGerd Hoffmann 329f1ae32a1SGerd Hoffmann static void ehci_set_state(EHCIState *s, int async, int state) 330f1ae32a1SGerd Hoffmann { 331f1ae32a1SGerd Hoffmann if (async) { 332f1ae32a1SGerd Hoffmann trace_usb_ehci_state("async", state2str(state)); 333f1ae32a1SGerd Hoffmann s->astate = state; 334b53f685dSGerd Hoffmann if (s->astate == EST_INACTIVE) { 335b53f685dSGerd Hoffmann ehci_clear_usbsts(s, USBSTS_ASS); 336daf25307SGerd Hoffmann ehci_update_halt(s); 337b53f685dSGerd Hoffmann } else { 338b53f685dSGerd Hoffmann ehci_set_usbsts(s, USBSTS_ASS); 339b53f685dSGerd Hoffmann } 340f1ae32a1SGerd Hoffmann } else { 341f1ae32a1SGerd Hoffmann trace_usb_ehci_state("periodic", state2str(state)); 342f1ae32a1SGerd Hoffmann s->pstate = state; 343b53f685dSGerd Hoffmann if (s->pstate == EST_INACTIVE) { 344b53f685dSGerd Hoffmann ehci_clear_usbsts(s, USBSTS_PSS); 345daf25307SGerd Hoffmann ehci_update_halt(s); 346b53f685dSGerd Hoffmann } else { 347b53f685dSGerd Hoffmann ehci_set_usbsts(s, USBSTS_PSS); 348b53f685dSGerd Hoffmann } 349f1ae32a1SGerd Hoffmann } 350f1ae32a1SGerd Hoffmann } 351f1ae32a1SGerd Hoffmann 352f1ae32a1SGerd Hoffmann static int ehci_get_state(EHCIState *s, int async) 353f1ae32a1SGerd Hoffmann { 354f1ae32a1SGerd Hoffmann return async ? s->astate : s->pstate; 355f1ae32a1SGerd Hoffmann } 356f1ae32a1SGerd Hoffmann 357f1ae32a1SGerd Hoffmann static void ehci_set_fetch_addr(EHCIState *s, int async, uint32_t addr) 358f1ae32a1SGerd Hoffmann { 359f1ae32a1SGerd Hoffmann if (async) { 360f1ae32a1SGerd Hoffmann s->a_fetch_addr = addr; 361f1ae32a1SGerd Hoffmann } else { 362f1ae32a1SGerd Hoffmann s->p_fetch_addr = addr; 363f1ae32a1SGerd Hoffmann } 364f1ae32a1SGerd Hoffmann } 365f1ae32a1SGerd Hoffmann 366f1ae32a1SGerd Hoffmann static int ehci_get_fetch_addr(EHCIState *s, int async) 367f1ae32a1SGerd Hoffmann { 368f1ae32a1SGerd Hoffmann return async ? s->a_fetch_addr : s->p_fetch_addr; 369f1ae32a1SGerd Hoffmann } 370f1ae32a1SGerd Hoffmann 371a8170e5eSAvi Kivity static void ehci_trace_qh(EHCIQueue *q, hwaddr addr, EHCIqh *qh) 372f1ae32a1SGerd Hoffmann { 373f1ae32a1SGerd Hoffmann /* need three here due to argument count limits */ 374f1ae32a1SGerd Hoffmann trace_usb_ehci_qh_ptrs(q, addr, qh->next, 375f1ae32a1SGerd Hoffmann qh->current_qtd, qh->next_qtd, qh->altnext_qtd); 376f1ae32a1SGerd Hoffmann trace_usb_ehci_qh_fields(addr, 377f1ae32a1SGerd Hoffmann get_field(qh->epchar, QH_EPCHAR_RL), 378f1ae32a1SGerd Hoffmann get_field(qh->epchar, QH_EPCHAR_MPLEN), 379f1ae32a1SGerd Hoffmann get_field(qh->epchar, QH_EPCHAR_EPS), 380f1ae32a1SGerd Hoffmann get_field(qh->epchar, QH_EPCHAR_EP), 381f1ae32a1SGerd Hoffmann get_field(qh->epchar, QH_EPCHAR_DEVADDR)); 382f1ae32a1SGerd Hoffmann trace_usb_ehci_qh_bits(addr, 383f1ae32a1SGerd Hoffmann (bool)(qh->epchar & QH_EPCHAR_C), 384f1ae32a1SGerd Hoffmann (bool)(qh->epchar & QH_EPCHAR_H), 385f1ae32a1SGerd Hoffmann (bool)(qh->epchar & QH_EPCHAR_DTC), 386f1ae32a1SGerd Hoffmann (bool)(qh->epchar & QH_EPCHAR_I)); 387f1ae32a1SGerd Hoffmann } 388f1ae32a1SGerd Hoffmann 389a8170e5eSAvi Kivity static void ehci_trace_qtd(EHCIQueue *q, hwaddr addr, EHCIqtd *qtd) 390f1ae32a1SGerd Hoffmann { 391f1ae32a1SGerd Hoffmann /* need three here due to argument count limits */ 392f1ae32a1SGerd Hoffmann trace_usb_ehci_qtd_ptrs(q, addr, qtd->next, qtd->altnext); 393f1ae32a1SGerd Hoffmann trace_usb_ehci_qtd_fields(addr, 394f1ae32a1SGerd Hoffmann get_field(qtd->token, QTD_TOKEN_TBYTES), 395f1ae32a1SGerd Hoffmann get_field(qtd->token, QTD_TOKEN_CPAGE), 396f1ae32a1SGerd Hoffmann get_field(qtd->token, QTD_TOKEN_CERR), 397f1ae32a1SGerd Hoffmann get_field(qtd->token, QTD_TOKEN_PID)); 398f1ae32a1SGerd Hoffmann trace_usb_ehci_qtd_bits(addr, 399f1ae32a1SGerd Hoffmann (bool)(qtd->token & QTD_TOKEN_IOC), 400f1ae32a1SGerd Hoffmann (bool)(qtd->token & QTD_TOKEN_ACTIVE), 401f1ae32a1SGerd Hoffmann (bool)(qtd->token & QTD_TOKEN_HALT), 402f1ae32a1SGerd Hoffmann (bool)(qtd->token & QTD_TOKEN_BABBLE), 403f1ae32a1SGerd Hoffmann (bool)(qtd->token & QTD_TOKEN_XACTERR)); 404f1ae32a1SGerd Hoffmann } 405f1ae32a1SGerd Hoffmann 406a8170e5eSAvi Kivity static void ehci_trace_itd(EHCIState *s, hwaddr addr, EHCIitd *itd) 407f1ae32a1SGerd Hoffmann { 408f1ae32a1SGerd Hoffmann trace_usb_ehci_itd(addr, itd->next, 409f1ae32a1SGerd Hoffmann get_field(itd->bufptr[1], ITD_BUFPTR_MAXPKT), 410f1ae32a1SGerd Hoffmann get_field(itd->bufptr[2], ITD_BUFPTR_MULT), 411f1ae32a1SGerd Hoffmann get_field(itd->bufptr[0], ITD_BUFPTR_EP), 412f1ae32a1SGerd Hoffmann get_field(itd->bufptr[0], ITD_BUFPTR_DEVADDR)); 413f1ae32a1SGerd Hoffmann } 414f1ae32a1SGerd Hoffmann 415a8170e5eSAvi Kivity static void ehci_trace_sitd(EHCIState *s, hwaddr addr, 416f1ae32a1SGerd Hoffmann EHCIsitd *sitd) 417f1ae32a1SGerd Hoffmann { 418f1ae32a1SGerd Hoffmann trace_usb_ehci_sitd(addr, sitd->next, 419f1ae32a1SGerd Hoffmann (bool)(sitd->results & SITD_RESULTS_ACTIVE)); 420f1ae32a1SGerd Hoffmann } 421f1ae32a1SGerd Hoffmann 4225c514681SGerd Hoffmann static void ehci_trace_guest_bug(EHCIState *s, const char *message) 4235c514681SGerd Hoffmann { 4245c514681SGerd Hoffmann trace_usb_ehci_guest_bug(message); 4255c514681SGerd Hoffmann fprintf(stderr, "ehci warning: %s\n", message); 4265c514681SGerd Hoffmann } 4275c514681SGerd Hoffmann 428ec807d12SGerd Hoffmann static inline bool ehci_enabled(EHCIState *s) 429ec807d12SGerd Hoffmann { 430ec807d12SGerd Hoffmann return s->usbcmd & USBCMD_RUNSTOP; 431ec807d12SGerd Hoffmann } 432ec807d12SGerd Hoffmann 433ec807d12SGerd Hoffmann static inline bool ehci_async_enabled(EHCIState *s) 434ec807d12SGerd Hoffmann { 435ec807d12SGerd Hoffmann return ehci_enabled(s) && (s->usbcmd & USBCMD_ASE); 436ec807d12SGerd Hoffmann } 437ec807d12SGerd Hoffmann 438ec807d12SGerd Hoffmann static inline bool ehci_periodic_enabled(EHCIState *s) 439ec807d12SGerd Hoffmann { 440ec807d12SGerd Hoffmann return ehci_enabled(s) && (s->usbcmd & USBCMD_PSE); 441ec807d12SGerd Hoffmann } 442ec807d12SGerd Hoffmann 443190d8492SHans de Goede /* Get an array of dwords from main memory */ 444190d8492SHans de Goede static inline int get_dwords(EHCIState *ehci, uint32_t addr, 445190d8492SHans de Goede uint32_t *buf, int num) 446190d8492SHans de Goede { 447190d8492SHans de Goede int i; 448190d8492SHans de Goede 449df32fd1cSPaolo Bonzini if (!ehci->as) { 450190d8492SHans de Goede ehci_raise_irq(ehci, USBSTS_HSE); 451190d8492SHans de Goede ehci->usbcmd &= ~USBCMD_RUNSTOP; 452190d8492SHans de Goede trace_usb_ehci_dma_error(); 453190d8492SHans de Goede return -1; 454190d8492SHans de Goede } 455190d8492SHans de Goede 456190d8492SHans de Goede for (i = 0; i < num; i++, buf++, addr += sizeof(*buf)) { 457df32fd1cSPaolo Bonzini dma_memory_read(ehci->as, addr, buf, sizeof(*buf)); 458190d8492SHans de Goede *buf = le32_to_cpu(*buf); 459190d8492SHans de Goede } 460190d8492SHans de Goede 461190d8492SHans de Goede return num; 462190d8492SHans de Goede } 463190d8492SHans de Goede 464190d8492SHans de Goede /* Put an array of dwords in to main memory */ 465190d8492SHans de Goede static inline int put_dwords(EHCIState *ehci, uint32_t addr, 466190d8492SHans de Goede uint32_t *buf, int num) 467190d8492SHans de Goede { 468190d8492SHans de Goede int i; 469190d8492SHans de Goede 470df32fd1cSPaolo Bonzini if (!ehci->as) { 471190d8492SHans de Goede ehci_raise_irq(ehci, USBSTS_HSE); 472190d8492SHans de Goede ehci->usbcmd &= ~USBCMD_RUNSTOP; 473190d8492SHans de Goede trace_usb_ehci_dma_error(); 474190d8492SHans de Goede return -1; 475190d8492SHans de Goede } 476190d8492SHans de Goede 477190d8492SHans de Goede for (i = 0; i < num; i++, buf++, addr += sizeof(*buf)) { 478190d8492SHans de Goede uint32_t tmp = cpu_to_le32(*buf); 479df32fd1cSPaolo Bonzini dma_memory_write(ehci->as, addr, &tmp, sizeof(tmp)); 480190d8492SHans de Goede } 481190d8492SHans de Goede 482190d8492SHans de Goede return num; 483190d8492SHans de Goede } 484190d8492SHans de Goede 48551e0c5d0SHans de Goede static int ehci_get_pid(EHCIqtd *qtd) 48651e0c5d0SHans de Goede { 48751e0c5d0SHans de Goede switch (get_field(qtd->token, QTD_TOKEN_PID)) { 48851e0c5d0SHans de Goede case 0: 48951e0c5d0SHans de Goede return USB_TOKEN_OUT; 49051e0c5d0SHans de Goede case 1: 49151e0c5d0SHans de Goede return USB_TOKEN_IN; 49251e0c5d0SHans de Goede case 2: 49351e0c5d0SHans de Goede return USB_TOKEN_SETUP; 49451e0c5d0SHans de Goede default: 49551e0c5d0SHans de Goede fprintf(stderr, "bad token\n"); 49651e0c5d0SHans de Goede return 0; 49751e0c5d0SHans de Goede } 49851e0c5d0SHans de Goede } 49951e0c5d0SHans de Goede 500c6432634SHans de Goede static bool ehci_verify_qh(EHCIQueue *q, EHCIqh *qh) 501c6432634SHans de Goede { 502c6432634SHans de Goede uint32_t devaddr = get_field(qh->epchar, QH_EPCHAR_DEVADDR); 503c6432634SHans de Goede uint32_t endp = get_field(qh->epchar, QH_EPCHAR_EP); 504c6432634SHans de Goede if ((devaddr != get_field(q->qh.epchar, QH_EPCHAR_DEVADDR)) || 505c6432634SHans de Goede (endp != get_field(q->qh.epchar, QH_EPCHAR_EP)) || 506c6432634SHans de Goede (qh->current_qtd != q->qh.current_qtd) || 507c6432634SHans de Goede (q->async && qh->next_qtd != q->qh.next_qtd) || 508c6432634SHans de Goede (memcmp(&qh->altnext_qtd, &q->qh.altnext_qtd, 509c6432634SHans de Goede 7 * sizeof(uint32_t)) != 0) || 510c6432634SHans de Goede (q->dev != NULL && q->dev->addr != devaddr)) { 511c6432634SHans de Goede return false; 512c6432634SHans de Goede } else { 513c6432634SHans de Goede return true; 514c6432634SHans de Goede } 515c6432634SHans de Goede } 516c6432634SHans de Goede 517c6432634SHans de Goede static bool ehci_verify_qtd(EHCIPacket *p, EHCIqtd *qtd) 518c6432634SHans de Goede { 519c6432634SHans de Goede if (p->qtdaddr != p->queue->qtdaddr || 520c6432634SHans de Goede (p->queue->async && !NLPTR_TBIT(p->qtd.next) && 521c6432634SHans de Goede (p->qtd.next != qtd->next)) || 522c6432634SHans de Goede (!NLPTR_TBIT(p->qtd.altnext) && (p->qtd.altnext != qtd->altnext)) || 523d066c57bSHans de Goede p->qtd.token != qtd->token || 524c6432634SHans de Goede p->qtd.bufptr[0] != qtd->bufptr[0]) { 525c6432634SHans de Goede return false; 526c6432634SHans de Goede } else { 527c6432634SHans de Goede return true; 528c6432634SHans de Goede } 529c6432634SHans de Goede } 530c6432634SHans de Goede 531bbbc39ccSHans de Goede static bool ehci_verify_pid(EHCIQueue *q, EHCIqtd *qtd) 532bbbc39ccSHans de Goede { 533bbbc39ccSHans de Goede int ep = get_field(q->qh.epchar, QH_EPCHAR_EP); 534bbbc39ccSHans de Goede int pid = ehci_get_pid(qtd); 535bbbc39ccSHans de Goede 536bbbc39ccSHans de Goede /* Note the pid changing is normal for ep 0 (the control ep) */ 537bbbc39ccSHans de Goede if (q->last_pid && ep != 0 && pid != q->last_pid) { 538bbbc39ccSHans de Goede return false; 539bbbc39ccSHans de Goede } else { 540bbbc39ccSHans de Goede return true; 541bbbc39ccSHans de Goede } 542bbbc39ccSHans de Goede } 543bbbc39ccSHans de Goede 544f881c8d3SHans de Goede /* Finish executing and writeback a packet outside of the regular 545f881c8d3SHans de Goede fetchqh -> fetchqtd -> execute -> writeback cycle */ 546f881c8d3SHans de Goede static void ehci_writeback_async_complete_packet(EHCIPacket *p) 547f881c8d3SHans de Goede { 548f881c8d3SHans de Goede EHCIQueue *q = p->queue; 5492b3de6adSHans de Goede EHCIqtd qtd; 5502b3de6adSHans de Goede EHCIqh qh; 551f881c8d3SHans de Goede int state; 552f881c8d3SHans de Goede 5532b3de6adSHans de Goede /* Verify the qh + qtd, like we do when going through fetchqh & fetchqtd */ 5542b3de6adSHans de Goede get_dwords(q->ehci, NLPTR_GET(q->qhaddr), 5552b3de6adSHans de Goede (uint32_t *) &qh, sizeof(EHCIqh) >> 2); 5562b3de6adSHans de Goede get_dwords(q->ehci, NLPTR_GET(q->qtdaddr), 5572b3de6adSHans de Goede (uint32_t *) &qtd, sizeof(EHCIqtd) >> 2); 5582b3de6adSHans de Goede if (!ehci_verify_qh(q, &qh) || !ehci_verify_qtd(p, &qtd)) { 5592b3de6adSHans de Goede p->async = EHCI_ASYNC_INITIALIZED; 5602b3de6adSHans de Goede ehci_free_packet(p); 5612b3de6adSHans de Goede return; 5622b3de6adSHans de Goede } 5632b3de6adSHans de Goede 564f881c8d3SHans de Goede state = ehci_get_state(q->ehci, q->async); 565f881c8d3SHans de Goede ehci_state_executing(q); 566f881c8d3SHans de Goede ehci_state_writeback(q); /* Frees the packet! */ 567f881c8d3SHans de Goede if (!(q->qh.token & QTD_TOKEN_HALT)) { 568f881c8d3SHans de Goede ehci_state_advqueue(q); 569f881c8d3SHans de Goede } 570f881c8d3SHans de Goede ehci_set_state(q->ehci, q->async, state); 571f881c8d3SHans de Goede } 572f881c8d3SHans de Goede 573eb36a88eSGerd Hoffmann /* packet management */ 574eb36a88eSGerd Hoffmann 575eb36a88eSGerd Hoffmann static EHCIPacket *ehci_alloc_packet(EHCIQueue *q) 576eb36a88eSGerd Hoffmann { 577eb36a88eSGerd Hoffmann EHCIPacket *p; 578eb36a88eSGerd Hoffmann 579eb36a88eSGerd Hoffmann p = g_new0(EHCIPacket, 1); 580eb36a88eSGerd Hoffmann p->queue = q; 581eb36a88eSGerd Hoffmann usb_packet_init(&p->packet); 582eb36a88eSGerd Hoffmann QTAILQ_INSERT_TAIL(&q->packets, p, next); 583eb36a88eSGerd Hoffmann trace_usb_ehci_packet_action(p->queue, p, "alloc"); 584eb36a88eSGerd Hoffmann return p; 585eb36a88eSGerd Hoffmann } 586eb36a88eSGerd Hoffmann 587eb36a88eSGerd Hoffmann static void ehci_free_packet(EHCIPacket *p) 588eb36a88eSGerd Hoffmann { 589e449f26bSHans de Goede if (p->async == EHCI_ASYNC_FINISHED && 590e449f26bSHans de Goede !(p->queue->qh.token & QTD_TOKEN_HALT)) { 591f881c8d3SHans de Goede ehci_writeback_async_complete_packet(p); 5924b63a0dfSHans de Goede return; 5934b63a0dfSHans de Goede } 594616789cdSGerd Hoffmann trace_usb_ehci_packet_action(p->queue, p, "free"); 595616789cdSGerd Hoffmann if (p->async == EHCI_ASYNC_INFLIGHT) { 596616789cdSGerd Hoffmann usb_cancel_packet(&p->packet); 597e449f26bSHans de Goede } 598e449f26bSHans de Goede if (p->async == EHCI_ASYNC_FINISHED && 599e449f26bSHans de Goede p->packet.status == USB_RET_SUCCESS) { 600e449f26bSHans de Goede fprintf(stderr, 601e449f26bSHans de Goede "EHCI: Dropping completed packet from halted %s ep %02X\n", 602e449f26bSHans de Goede (p->pid == USB_TOKEN_IN) ? "in" : "out", 603e449f26bSHans de Goede get_field(p->queue->qh.epchar, QH_EPCHAR_EP)); 604e449f26bSHans de Goede } 605e449f26bSHans de Goede if (p->async != EHCI_ASYNC_NONE) { 606616789cdSGerd Hoffmann usb_packet_unmap(&p->packet, &p->sgl); 607616789cdSGerd Hoffmann qemu_sglist_destroy(&p->sgl); 608616789cdSGerd Hoffmann } 609eb36a88eSGerd Hoffmann QTAILQ_REMOVE(&p->queue->packets, p, next); 610eb36a88eSGerd Hoffmann usb_packet_cleanup(&p->packet); 611eb36a88eSGerd Hoffmann g_free(p); 612eb36a88eSGerd Hoffmann } 613eb36a88eSGerd Hoffmann 614f1ae32a1SGerd Hoffmann /* queue management */ 615f1ae32a1SGerd Hoffmann 6168f6d5e26SGerd Hoffmann static EHCIQueue *ehci_alloc_queue(EHCIState *ehci, uint32_t addr, int async) 617f1ae32a1SGerd Hoffmann { 618f1ae32a1SGerd Hoffmann EHCIQueueHead *head = async ? &ehci->aqueues : &ehci->pqueues; 619f1ae32a1SGerd Hoffmann EHCIQueue *q; 620f1ae32a1SGerd Hoffmann 621f1ae32a1SGerd Hoffmann q = g_malloc0(sizeof(*q)); 622f1ae32a1SGerd Hoffmann q->ehci = ehci; 6238f6d5e26SGerd Hoffmann q->qhaddr = addr; 624ae0138a8SGerd Hoffmann q->async = async; 625eb36a88eSGerd Hoffmann QTAILQ_INIT(&q->packets); 626f1ae32a1SGerd Hoffmann QTAILQ_INSERT_HEAD(head, q, next); 627f1ae32a1SGerd Hoffmann trace_usb_ehci_queue_action(q, "alloc"); 628f1ae32a1SGerd Hoffmann return q; 629f1ae32a1SGerd Hoffmann } 630f1ae32a1SGerd Hoffmann 631f79738b0SHans de Goede static void ehci_queue_stopped(EHCIQueue *q) 632f79738b0SHans de Goede { 633f79738b0SHans de Goede int endp = get_field(q->qh.epchar, QH_EPCHAR_EP); 634f79738b0SHans de Goede 635f79738b0SHans de Goede if (!q->last_pid || !q->dev) { 636f79738b0SHans de Goede return; 637f79738b0SHans de Goede } 638f79738b0SHans de Goede 639f79738b0SHans de Goede usb_device_ep_stopped(q->dev, usb_ep_get(q->dev, q->last_pid, endp)); 640f79738b0SHans de Goede } 641f79738b0SHans de Goede 6425c514681SGerd Hoffmann static int ehci_cancel_queue(EHCIQueue *q) 643c7cdca3bSGerd Hoffmann { 644c7cdca3bSGerd Hoffmann EHCIPacket *p; 6455c514681SGerd Hoffmann int packets = 0; 646c7cdca3bSGerd Hoffmann 647c7cdca3bSGerd Hoffmann p = QTAILQ_FIRST(&q->packets); 648c7cdca3bSGerd Hoffmann if (p == NULL) { 649f79738b0SHans de Goede goto leave; 650c7cdca3bSGerd Hoffmann } 651c7cdca3bSGerd Hoffmann 652c7cdca3bSGerd Hoffmann trace_usb_ehci_queue_action(q, "cancel"); 653c7cdca3bSGerd Hoffmann do { 654c7cdca3bSGerd Hoffmann ehci_free_packet(p); 6555c514681SGerd Hoffmann packets++; 656c7cdca3bSGerd Hoffmann } while ((p = QTAILQ_FIRST(&q->packets)) != NULL); 657f79738b0SHans de Goede 658f79738b0SHans de Goede leave: 659f79738b0SHans de Goede ehci_queue_stopped(q); 6605c514681SGerd Hoffmann return packets; 661c7cdca3bSGerd Hoffmann } 662c7cdca3bSGerd Hoffmann 6635c514681SGerd Hoffmann static int ehci_reset_queue(EHCIQueue *q) 664dafe31fcSHans de Goede { 6655c514681SGerd Hoffmann int packets; 6665c514681SGerd Hoffmann 667dafe31fcSHans de Goede trace_usb_ehci_queue_action(q, "reset"); 6685c514681SGerd Hoffmann packets = ehci_cancel_queue(q); 669dafe31fcSHans de Goede q->dev = NULL; 670dafe31fcSHans de Goede q->qtdaddr = 0; 671bbbc39ccSHans de Goede q->last_pid = 0; 6725c514681SGerd Hoffmann return packets; 673dafe31fcSHans de Goede } 674dafe31fcSHans de Goede 6753a8ca08eSHans de Goede static void ehci_free_queue(EHCIQueue *q, const char *warn) 676f1ae32a1SGerd Hoffmann { 677ae0138a8SGerd Hoffmann EHCIQueueHead *head = q->async ? &q->ehci->aqueues : &q->ehci->pqueues; 6783a8ca08eSHans de Goede int cancelled; 679eb36a88eSGerd Hoffmann 680f1ae32a1SGerd Hoffmann trace_usb_ehci_queue_action(q, "free"); 6813a8ca08eSHans de Goede cancelled = ehci_cancel_queue(q); 6823a8ca08eSHans de Goede if (warn && cancelled > 0) { 6833a8ca08eSHans de Goede ehci_trace_guest_bug(q->ehci, warn); 6843a8ca08eSHans de Goede } 685f1ae32a1SGerd Hoffmann QTAILQ_REMOVE(head, q, next); 686f1ae32a1SGerd Hoffmann g_free(q); 687f1ae32a1SGerd Hoffmann } 688f1ae32a1SGerd Hoffmann 689f1ae32a1SGerd Hoffmann static EHCIQueue *ehci_find_queue_by_qh(EHCIState *ehci, uint32_t addr, 690f1ae32a1SGerd Hoffmann int async) 691f1ae32a1SGerd Hoffmann { 692f1ae32a1SGerd Hoffmann EHCIQueueHead *head = async ? &ehci->aqueues : &ehci->pqueues; 693f1ae32a1SGerd Hoffmann EHCIQueue *q; 694f1ae32a1SGerd Hoffmann 695f1ae32a1SGerd Hoffmann QTAILQ_FOREACH(q, head, next) { 696f1ae32a1SGerd Hoffmann if (addr == q->qhaddr) { 697f1ae32a1SGerd Hoffmann return q; 698f1ae32a1SGerd Hoffmann } 699f1ae32a1SGerd Hoffmann } 700f1ae32a1SGerd Hoffmann return NULL; 701f1ae32a1SGerd Hoffmann } 702f1ae32a1SGerd Hoffmann 7038f5457ebSHans de Goede static void ehci_queues_rip_unused(EHCIState *ehci, int async) 704f1ae32a1SGerd Hoffmann { 705f1ae32a1SGerd Hoffmann EHCIQueueHead *head = async ? &ehci->aqueues : &ehci->pqueues; 7068f5457ebSHans de Goede const char *warn = async ? "guest unlinked busy QH" : NULL; 7073a215326SGerd Hoffmann uint64_t maxage = FRAME_TIMER_NS * ehci->maxframes * 4; 708f1ae32a1SGerd Hoffmann EHCIQueue *q, *tmp; 709f1ae32a1SGerd Hoffmann 710f1ae32a1SGerd Hoffmann QTAILQ_FOREACH_SAFE(q, head, next, tmp) { 711f1ae32a1SGerd Hoffmann if (q->seen) { 712f1ae32a1SGerd Hoffmann q->seen = 0; 713f1ae32a1SGerd Hoffmann q->ts = ehci->last_run_ns; 714f1ae32a1SGerd Hoffmann continue; 715f1ae32a1SGerd Hoffmann } 7168f5457ebSHans de Goede if (ehci->last_run_ns < q->ts + maxage) { 717f1ae32a1SGerd Hoffmann continue; 718f1ae32a1SGerd Hoffmann } 7193a8ca08eSHans de Goede ehci_free_queue(q, warn); 720f1ae32a1SGerd Hoffmann } 721f1ae32a1SGerd Hoffmann } 722f1ae32a1SGerd Hoffmann 7238f5457ebSHans de Goede static void ehci_queues_rip_unseen(EHCIState *ehci, int async) 7248f5457ebSHans de Goede { 7258f5457ebSHans de Goede EHCIQueueHead *head = async ? &ehci->aqueues : &ehci->pqueues; 7268f5457ebSHans de Goede EHCIQueue *q, *tmp; 7278f5457ebSHans de Goede 7288f5457ebSHans de Goede QTAILQ_FOREACH_SAFE(q, head, next, tmp) { 7298f5457ebSHans de Goede if (!q->seen) { 7308f5457ebSHans de Goede ehci_free_queue(q, NULL); 7318f5457ebSHans de Goede } 7328f5457ebSHans de Goede } 7338f5457ebSHans de Goede } 7348f5457ebSHans de Goede 735f1ae32a1SGerd Hoffmann static void ehci_queues_rip_device(EHCIState *ehci, USBDevice *dev, int async) 736f1ae32a1SGerd Hoffmann { 737f1ae32a1SGerd Hoffmann EHCIQueueHead *head = async ? &ehci->aqueues : &ehci->pqueues; 738f1ae32a1SGerd Hoffmann EHCIQueue *q, *tmp; 739f1ae32a1SGerd Hoffmann 740f1ae32a1SGerd Hoffmann QTAILQ_FOREACH_SAFE(q, head, next, tmp) { 741e59928b3SGerd Hoffmann if (q->dev != dev) { 742f1ae32a1SGerd Hoffmann continue; 743f1ae32a1SGerd Hoffmann } 7443a8ca08eSHans de Goede ehci_free_queue(q, NULL); 745f1ae32a1SGerd Hoffmann } 746f1ae32a1SGerd Hoffmann } 747f1ae32a1SGerd Hoffmann 748f1ae32a1SGerd Hoffmann static void ehci_queues_rip_all(EHCIState *ehci, int async) 749f1ae32a1SGerd Hoffmann { 750f1ae32a1SGerd Hoffmann EHCIQueueHead *head = async ? &ehci->aqueues : &ehci->pqueues; 7513a8ca08eSHans de Goede const char *warn = async ? "guest stopped busy async schedule" : NULL; 752f1ae32a1SGerd Hoffmann EHCIQueue *q, *tmp; 753f1ae32a1SGerd Hoffmann 754f1ae32a1SGerd Hoffmann QTAILQ_FOREACH_SAFE(q, head, next, tmp) { 7553a8ca08eSHans de Goede ehci_free_queue(q, warn); 756f1ae32a1SGerd Hoffmann } 757f1ae32a1SGerd Hoffmann } 758f1ae32a1SGerd Hoffmann 759f1ae32a1SGerd Hoffmann /* Attach or detach a device on root hub */ 760f1ae32a1SGerd Hoffmann 761f1ae32a1SGerd Hoffmann static void ehci_attach(USBPort *port) 762f1ae32a1SGerd Hoffmann { 763f1ae32a1SGerd Hoffmann EHCIState *s = port->opaque; 764f1ae32a1SGerd Hoffmann uint32_t *portsc = &s->portsc[port->index]; 76530e9d412SGerd Hoffmann const char *owner = (*portsc & PORTSC_POWNER) ? "comp" : "ehci"; 766f1ae32a1SGerd Hoffmann 76730e9d412SGerd Hoffmann trace_usb_ehci_port_attach(port->index, owner, port->dev->product_desc); 768f1ae32a1SGerd Hoffmann 769f1ae32a1SGerd Hoffmann if (*portsc & PORTSC_POWNER) { 770f1ae32a1SGerd Hoffmann USBPort *companion = s->companion_ports[port->index]; 771f1ae32a1SGerd Hoffmann companion->dev = port->dev; 772f1ae32a1SGerd Hoffmann companion->ops->attach(companion); 773f1ae32a1SGerd Hoffmann return; 774f1ae32a1SGerd Hoffmann } 775f1ae32a1SGerd Hoffmann 776f1ae32a1SGerd Hoffmann *portsc |= PORTSC_CONNECT; 777f1ae32a1SGerd Hoffmann *portsc |= PORTSC_CSC; 778f1ae32a1SGerd Hoffmann 7797efc17afSGerd Hoffmann ehci_raise_irq(s, USBSTS_PCD); 780f1ae32a1SGerd Hoffmann } 781f1ae32a1SGerd Hoffmann 782f1ae32a1SGerd Hoffmann static void ehci_detach(USBPort *port) 783f1ae32a1SGerd Hoffmann { 784f1ae32a1SGerd Hoffmann EHCIState *s = port->opaque; 785f1ae32a1SGerd Hoffmann uint32_t *portsc = &s->portsc[port->index]; 78630e9d412SGerd Hoffmann const char *owner = (*portsc & PORTSC_POWNER) ? "comp" : "ehci"; 787f1ae32a1SGerd Hoffmann 78830e9d412SGerd Hoffmann trace_usb_ehci_port_detach(port->index, owner); 789f1ae32a1SGerd Hoffmann 790f1ae32a1SGerd Hoffmann if (*portsc & PORTSC_POWNER) { 791f1ae32a1SGerd Hoffmann USBPort *companion = s->companion_ports[port->index]; 792f1ae32a1SGerd Hoffmann companion->ops->detach(companion); 793f1ae32a1SGerd Hoffmann companion->dev = NULL; 794f1ae32a1SGerd Hoffmann /* 795f1ae32a1SGerd Hoffmann * EHCI spec 4.2.2: "When a disconnect occurs... On the event, 796f1ae32a1SGerd Hoffmann * the port ownership is returned immediately to the EHCI controller." 797f1ae32a1SGerd Hoffmann */ 798f1ae32a1SGerd Hoffmann *portsc &= ~PORTSC_POWNER; 799f1ae32a1SGerd Hoffmann return; 800f1ae32a1SGerd Hoffmann } 801f1ae32a1SGerd Hoffmann 802f1ae32a1SGerd Hoffmann ehci_queues_rip_device(s, port->dev, 0); 803f1ae32a1SGerd Hoffmann ehci_queues_rip_device(s, port->dev, 1); 804f1ae32a1SGerd Hoffmann 805f1ae32a1SGerd Hoffmann *portsc &= ~(PORTSC_CONNECT|PORTSC_PED); 806f1ae32a1SGerd Hoffmann *portsc |= PORTSC_CSC; 807f1ae32a1SGerd Hoffmann 8087efc17afSGerd Hoffmann ehci_raise_irq(s, USBSTS_PCD); 809f1ae32a1SGerd Hoffmann } 810f1ae32a1SGerd Hoffmann 811f1ae32a1SGerd Hoffmann static void ehci_child_detach(USBPort *port, USBDevice *child) 812f1ae32a1SGerd Hoffmann { 813f1ae32a1SGerd Hoffmann EHCIState *s = port->opaque; 814f1ae32a1SGerd Hoffmann uint32_t portsc = s->portsc[port->index]; 815f1ae32a1SGerd Hoffmann 816f1ae32a1SGerd Hoffmann if (portsc & PORTSC_POWNER) { 817f1ae32a1SGerd Hoffmann USBPort *companion = s->companion_ports[port->index]; 818f1ae32a1SGerd Hoffmann companion->ops->child_detach(companion, child); 819f1ae32a1SGerd Hoffmann return; 820f1ae32a1SGerd Hoffmann } 821f1ae32a1SGerd Hoffmann 822f1ae32a1SGerd Hoffmann ehci_queues_rip_device(s, child, 0); 823f1ae32a1SGerd Hoffmann ehci_queues_rip_device(s, child, 1); 824f1ae32a1SGerd Hoffmann } 825f1ae32a1SGerd Hoffmann 826f1ae32a1SGerd Hoffmann static void ehci_wakeup(USBPort *port) 827f1ae32a1SGerd Hoffmann { 828f1ae32a1SGerd Hoffmann EHCIState *s = port->opaque; 829f1ae32a1SGerd Hoffmann uint32_t portsc = s->portsc[port->index]; 830f1ae32a1SGerd Hoffmann 831f1ae32a1SGerd Hoffmann if (portsc & PORTSC_POWNER) { 832f1ae32a1SGerd Hoffmann USBPort *companion = s->companion_ports[port->index]; 833f1ae32a1SGerd Hoffmann if (companion->ops->wakeup) { 834f1ae32a1SGerd Hoffmann companion->ops->wakeup(companion); 83537952117SHans de Goede } 83637952117SHans de Goede return; 83737952117SHans de Goede } 83837952117SHans de Goede 8390f588df8SGerd Hoffmann qemu_bh_schedule(s->async_bh); 840f1ae32a1SGerd Hoffmann } 841f1ae32a1SGerd Hoffmann 842f1ae32a1SGerd Hoffmann static int ehci_register_companion(USBBus *bus, USBPort *ports[], 843f1ae32a1SGerd Hoffmann uint32_t portcount, uint32_t firstport) 844f1ae32a1SGerd Hoffmann { 845f1ae32a1SGerd Hoffmann EHCIState *s = container_of(bus, EHCIState, bus); 846f1ae32a1SGerd Hoffmann uint32_t i; 847f1ae32a1SGerd Hoffmann 848f1ae32a1SGerd Hoffmann if (firstport + portcount > NB_PORTS) { 849f1ae32a1SGerd Hoffmann qerror_report(QERR_INVALID_PARAMETER_VALUE, "firstport", 850f1ae32a1SGerd Hoffmann "firstport on masterbus"); 851f1ae32a1SGerd Hoffmann error_printf_unless_qmp( 852f1ae32a1SGerd Hoffmann "firstport value of %u makes companion take ports %u - %u, which " 853f1ae32a1SGerd Hoffmann "is outside of the valid range of 0 - %u\n", firstport, firstport, 854f1ae32a1SGerd Hoffmann firstport + portcount - 1, NB_PORTS - 1); 855f1ae32a1SGerd Hoffmann return -1; 856f1ae32a1SGerd Hoffmann } 857f1ae32a1SGerd Hoffmann 858f1ae32a1SGerd Hoffmann for (i = 0; i < portcount; i++) { 859f1ae32a1SGerd Hoffmann if (s->companion_ports[firstport + i]) { 860f1ae32a1SGerd Hoffmann qerror_report(QERR_INVALID_PARAMETER_VALUE, "masterbus", 861f1ae32a1SGerd Hoffmann "an USB masterbus"); 862f1ae32a1SGerd Hoffmann error_printf_unless_qmp( 863f1ae32a1SGerd Hoffmann "port %u on masterbus %s already has a companion assigned\n", 864f1ae32a1SGerd Hoffmann firstport + i, bus->qbus.name); 865f1ae32a1SGerd Hoffmann return -1; 866f1ae32a1SGerd Hoffmann } 867f1ae32a1SGerd Hoffmann } 868f1ae32a1SGerd Hoffmann 869f1ae32a1SGerd Hoffmann for (i = 0; i < portcount; i++) { 870f1ae32a1SGerd Hoffmann s->companion_ports[firstport + i] = ports[i]; 871f1ae32a1SGerd Hoffmann s->ports[firstport + i].speedmask |= 872f1ae32a1SGerd Hoffmann USB_SPEED_MASK_LOW | USB_SPEED_MASK_FULL; 873f1ae32a1SGerd Hoffmann /* Ensure devs attached before the initial reset go to the companion */ 874f1ae32a1SGerd Hoffmann s->portsc[firstport + i] = PORTSC_POWNER; 875f1ae32a1SGerd Hoffmann } 876f1ae32a1SGerd Hoffmann 877f1ae32a1SGerd Hoffmann s->companion_count++; 8783e4f910cSGerd Hoffmann s->caps[0x05] = (s->companion_count << 4) | portcount; 879f1ae32a1SGerd Hoffmann 880f1ae32a1SGerd Hoffmann return 0; 881f1ae32a1SGerd Hoffmann } 882f1ae32a1SGerd Hoffmann 8838550a02dSGerd Hoffmann static void ehci_wakeup_endpoint(USBBus *bus, USBEndpoint *ep, 8848550a02dSGerd Hoffmann unsigned int stream) 88580826240SHans de Goede { 88680826240SHans de Goede EHCIState *s = container_of(bus, EHCIState, bus); 88780826240SHans de Goede uint32_t portsc = s->portsc[ep->dev->port->index]; 88880826240SHans de Goede 88980826240SHans de Goede if (portsc & PORTSC_POWNER) { 89080826240SHans de Goede return; 89180826240SHans de Goede } 89280826240SHans de Goede 89380826240SHans de Goede s->periodic_sched_active = PERIODIC_ACTIVE; 89480826240SHans de Goede qemu_bh_schedule(s->async_bh); 89580826240SHans de Goede } 89680826240SHans de Goede 897f1ae32a1SGerd Hoffmann static USBDevice *ehci_find_device(EHCIState *ehci, uint8_t addr) 898f1ae32a1SGerd Hoffmann { 899f1ae32a1SGerd Hoffmann USBDevice *dev; 900f1ae32a1SGerd Hoffmann USBPort *port; 901f1ae32a1SGerd Hoffmann int i; 902f1ae32a1SGerd Hoffmann 903f1ae32a1SGerd Hoffmann for (i = 0; i < NB_PORTS; i++) { 904f1ae32a1SGerd Hoffmann port = &ehci->ports[i]; 905f1ae32a1SGerd Hoffmann if (!(ehci->portsc[i] & PORTSC_PED)) { 906f1ae32a1SGerd Hoffmann DPRINTF("Port %d not enabled\n", i); 907f1ae32a1SGerd Hoffmann continue; 908f1ae32a1SGerd Hoffmann } 909f1ae32a1SGerd Hoffmann dev = usb_find_device(port, addr); 910f1ae32a1SGerd Hoffmann if (dev != NULL) { 911f1ae32a1SGerd Hoffmann return dev; 912f1ae32a1SGerd Hoffmann } 913f1ae32a1SGerd Hoffmann } 914f1ae32a1SGerd Hoffmann return NULL; 915f1ae32a1SGerd Hoffmann } 916f1ae32a1SGerd Hoffmann 917f1ae32a1SGerd Hoffmann /* 4.1 host controller initialization */ 918f1ae32a1SGerd Hoffmann static void ehci_reset(void *opaque) 919f1ae32a1SGerd Hoffmann { 920f1ae32a1SGerd Hoffmann EHCIState *s = opaque; 921f1ae32a1SGerd Hoffmann int i; 922f1ae32a1SGerd Hoffmann USBDevice *devs[NB_PORTS]; 923f1ae32a1SGerd Hoffmann 924f1ae32a1SGerd Hoffmann trace_usb_ehci_reset(); 925f1ae32a1SGerd Hoffmann 926f1ae32a1SGerd Hoffmann /* 927f1ae32a1SGerd Hoffmann * Do the detach before touching portsc, so that it correctly gets send to 928f1ae32a1SGerd Hoffmann * us or to our companion based on PORTSC_POWNER before the reset. 929f1ae32a1SGerd Hoffmann */ 930f1ae32a1SGerd Hoffmann for(i = 0; i < NB_PORTS; i++) { 931f1ae32a1SGerd Hoffmann devs[i] = s->ports[i].dev; 932f1ae32a1SGerd Hoffmann if (devs[i] && devs[i]->attached) { 933f1ae32a1SGerd Hoffmann usb_detach(&s->ports[i]); 934f1ae32a1SGerd Hoffmann } 935f1ae32a1SGerd Hoffmann } 936f1ae32a1SGerd Hoffmann 9373e4f910cSGerd Hoffmann memset(&s->opreg, 0x00, sizeof(s->opreg)); 9383e4f910cSGerd Hoffmann memset(&s->portsc, 0x00, sizeof(s->portsc)); 939f1ae32a1SGerd Hoffmann 940f1ae32a1SGerd Hoffmann s->usbcmd = NB_MAXINTRATE << USBCMD_ITC_SH; 941f1ae32a1SGerd Hoffmann s->usbsts = USBSTS_HALT; 9427efc17afSGerd Hoffmann s->usbsts_pending = 0; 9437efc17afSGerd Hoffmann s->usbsts_frindex = 0; 944f1ae32a1SGerd Hoffmann 945f1ae32a1SGerd Hoffmann s->astate = EST_INACTIVE; 946f1ae32a1SGerd Hoffmann s->pstate = EST_INACTIVE; 947f1ae32a1SGerd Hoffmann 948f1ae32a1SGerd Hoffmann for(i = 0; i < NB_PORTS; i++) { 949f1ae32a1SGerd Hoffmann if (s->companion_ports[i]) { 950f1ae32a1SGerd Hoffmann s->portsc[i] = PORTSC_POWNER | PORTSC_PPOWER; 951f1ae32a1SGerd Hoffmann } else { 952f1ae32a1SGerd Hoffmann s->portsc[i] = PORTSC_PPOWER; 953f1ae32a1SGerd Hoffmann } 954f1ae32a1SGerd Hoffmann if (devs[i] && devs[i]->attached) { 955f1ae32a1SGerd Hoffmann usb_attach(&s->ports[i]); 956f1ae32a1SGerd Hoffmann usb_device_reset(devs[i]); 957f1ae32a1SGerd Hoffmann } 958f1ae32a1SGerd Hoffmann } 959f1ae32a1SGerd Hoffmann ehci_queues_rip_all(s, 0); 960f1ae32a1SGerd Hoffmann ehci_queues_rip_all(s, 1); 961f1ae32a1SGerd Hoffmann qemu_del_timer(s->frame_timer); 9620fb3e299SGerd Hoffmann qemu_bh_cancel(s->async_bh); 963f1ae32a1SGerd Hoffmann } 964f1ae32a1SGerd Hoffmann 965a8170e5eSAvi Kivity static uint64_t ehci_caps_read(void *ptr, hwaddr addr, 9663e4f910cSGerd Hoffmann unsigned size) 9673e4f910cSGerd Hoffmann { 9683e4f910cSGerd Hoffmann EHCIState *s = ptr; 9693e4f910cSGerd Hoffmann return s->caps[addr]; 9703e4f910cSGerd Hoffmann } 9713e4f910cSGerd Hoffmann 972a8170e5eSAvi Kivity static uint64_t ehci_opreg_read(void *ptr, hwaddr addr, 9733e4f910cSGerd Hoffmann unsigned size) 974f1ae32a1SGerd Hoffmann { 975f1ae32a1SGerd Hoffmann EHCIState *s = ptr; 976f1ae32a1SGerd Hoffmann uint32_t val; 977f1ae32a1SGerd Hoffmann 9789359a58bSHans de Goede switch (addr) { 9799359a58bSHans de Goede case FRINDEX: 9809359a58bSHans de Goede /* Round down to mult of 8, else it can go backwards on migration */ 9819359a58bSHans de Goede val = s->frindex & ~7; 9829359a58bSHans de Goede break; 9839359a58bSHans de Goede default: 9843e4f910cSGerd Hoffmann val = s->opreg[addr >> 2]; 9859359a58bSHans de Goede } 9869359a58bSHans de Goede 98727a11324SPeter Crosthwaite trace_usb_ehci_opreg_read(addr + s->opregbase, addr2str(addr), val); 988f1ae32a1SGerd Hoffmann return val; 989f1ae32a1SGerd Hoffmann } 990f1ae32a1SGerd Hoffmann 991a8170e5eSAvi Kivity static uint64_t ehci_port_read(void *ptr, hwaddr addr, 9923e4f910cSGerd Hoffmann unsigned size) 993f1ae32a1SGerd Hoffmann { 994f1ae32a1SGerd Hoffmann EHCIState *s = ptr; 995f1ae32a1SGerd Hoffmann uint32_t val; 996f1ae32a1SGerd Hoffmann 9973e4f910cSGerd Hoffmann val = s->portsc[addr >> 2]; 998*cc8d6a84SKuo-Jung Su trace_usb_ehci_portsc_read(addr + s->portscbase, addr >> 2, val); 999f1ae32a1SGerd Hoffmann return val; 1000f1ae32a1SGerd Hoffmann } 1001f1ae32a1SGerd Hoffmann 1002f1ae32a1SGerd Hoffmann static void handle_port_owner_write(EHCIState *s, int port, uint32_t owner) 1003f1ae32a1SGerd Hoffmann { 1004f1ae32a1SGerd Hoffmann USBDevice *dev = s->ports[port].dev; 1005f1ae32a1SGerd Hoffmann uint32_t *portsc = &s->portsc[port]; 1006f1ae32a1SGerd Hoffmann uint32_t orig; 1007f1ae32a1SGerd Hoffmann 1008f1ae32a1SGerd Hoffmann if (s->companion_ports[port] == NULL) 1009f1ae32a1SGerd Hoffmann return; 1010f1ae32a1SGerd Hoffmann 1011f1ae32a1SGerd Hoffmann owner = owner & PORTSC_POWNER; 1012f1ae32a1SGerd Hoffmann orig = *portsc & PORTSC_POWNER; 1013f1ae32a1SGerd Hoffmann 1014f1ae32a1SGerd Hoffmann if (!(owner ^ orig)) { 1015f1ae32a1SGerd Hoffmann return; 1016f1ae32a1SGerd Hoffmann } 1017f1ae32a1SGerd Hoffmann 1018f1ae32a1SGerd Hoffmann if (dev && dev->attached) { 1019f1ae32a1SGerd Hoffmann usb_detach(&s->ports[port]); 1020f1ae32a1SGerd Hoffmann } 1021f1ae32a1SGerd Hoffmann 1022f1ae32a1SGerd Hoffmann *portsc &= ~PORTSC_POWNER; 1023f1ae32a1SGerd Hoffmann *portsc |= owner; 1024f1ae32a1SGerd Hoffmann 1025f1ae32a1SGerd Hoffmann if (dev && dev->attached) { 1026f1ae32a1SGerd Hoffmann usb_attach(&s->ports[port]); 1027f1ae32a1SGerd Hoffmann } 1028f1ae32a1SGerd Hoffmann } 1029f1ae32a1SGerd Hoffmann 1030a8170e5eSAvi Kivity static void ehci_port_write(void *ptr, hwaddr addr, 10313e4f910cSGerd Hoffmann uint64_t val, unsigned size) 1032f1ae32a1SGerd Hoffmann { 10333e4f910cSGerd Hoffmann EHCIState *s = ptr; 10343e4f910cSGerd Hoffmann int port = addr >> 2; 1035f1ae32a1SGerd Hoffmann uint32_t *portsc = &s->portsc[port]; 10363e4f910cSGerd Hoffmann uint32_t old = *portsc; 1037f1ae32a1SGerd Hoffmann USBDevice *dev = s->ports[port].dev; 1038f1ae32a1SGerd Hoffmann 1039*cc8d6a84SKuo-Jung Su trace_usb_ehci_portsc_write(addr + s->portscbase, addr >> 2, val); 10403e4f910cSGerd Hoffmann 1041f1ae32a1SGerd Hoffmann /* Clear rwc bits */ 1042f1ae32a1SGerd Hoffmann *portsc &= ~(val & PORTSC_RWC_MASK); 1043f1ae32a1SGerd Hoffmann /* The guest may clear, but not set the PED bit */ 1044f1ae32a1SGerd Hoffmann *portsc &= val | ~PORTSC_PED; 1045f1ae32a1SGerd Hoffmann /* POWNER is masked out by RO_MASK as it is RO when we've no companion */ 1046f1ae32a1SGerd Hoffmann handle_port_owner_write(s, port, val); 1047f1ae32a1SGerd Hoffmann /* And finally apply RO_MASK */ 1048f1ae32a1SGerd Hoffmann val &= PORTSC_RO_MASK; 1049f1ae32a1SGerd Hoffmann 1050f1ae32a1SGerd Hoffmann if ((val & PORTSC_PRESET) && !(*portsc & PORTSC_PRESET)) { 1051f1ae32a1SGerd Hoffmann trace_usb_ehci_port_reset(port, 1); 1052f1ae32a1SGerd Hoffmann } 1053f1ae32a1SGerd Hoffmann 1054f1ae32a1SGerd Hoffmann if (!(val & PORTSC_PRESET) &&(*portsc & PORTSC_PRESET)) { 1055f1ae32a1SGerd Hoffmann trace_usb_ehci_port_reset(port, 0); 1056f1ae32a1SGerd Hoffmann if (dev && dev->attached) { 1057f1ae32a1SGerd Hoffmann usb_port_reset(&s->ports[port]); 1058f1ae32a1SGerd Hoffmann *portsc &= ~PORTSC_CSC; 1059f1ae32a1SGerd Hoffmann } 1060f1ae32a1SGerd Hoffmann 1061f1ae32a1SGerd Hoffmann /* 1062f1ae32a1SGerd Hoffmann * Table 2.16 Set the enable bit(and enable bit change) to indicate 1063f1ae32a1SGerd Hoffmann * to SW that this port has a high speed device attached 1064f1ae32a1SGerd Hoffmann */ 1065f1ae32a1SGerd Hoffmann if (dev && dev->attached && (dev->speedmask & USB_SPEED_MASK_HIGH)) { 1066f1ae32a1SGerd Hoffmann val |= PORTSC_PED; 1067f1ae32a1SGerd Hoffmann } 1068f1ae32a1SGerd Hoffmann } 1069f1ae32a1SGerd Hoffmann 1070f1ae32a1SGerd Hoffmann *portsc &= ~PORTSC_RO_MASK; 1071f1ae32a1SGerd Hoffmann *portsc |= val; 1072*cc8d6a84SKuo-Jung Su trace_usb_ehci_portsc_change(addr + s->portscbase, addr >> 2, *portsc, old); 1073f1ae32a1SGerd Hoffmann } 1074f1ae32a1SGerd Hoffmann 1075a8170e5eSAvi Kivity static void ehci_opreg_write(void *ptr, hwaddr addr, 10763e4f910cSGerd Hoffmann uint64_t val, unsigned size) 1077f1ae32a1SGerd Hoffmann { 1078f1ae32a1SGerd Hoffmann EHCIState *s = ptr; 10793e4f910cSGerd Hoffmann uint32_t *mmio = s->opreg + (addr >> 2); 1080f1ae32a1SGerd Hoffmann uint32_t old = *mmio; 1081f1ae32a1SGerd Hoffmann int i; 1082f1ae32a1SGerd Hoffmann 108327a11324SPeter Crosthwaite trace_usb_ehci_opreg_write(addr + s->opregbase, addr2str(addr), val); 1084f1ae32a1SGerd Hoffmann 108527a11324SPeter Crosthwaite switch (addr) { 1086f1ae32a1SGerd Hoffmann case USBCMD: 10877046530cSGerd Hoffmann if (val & USBCMD_HCRESET) { 10887046530cSGerd Hoffmann ehci_reset(s); 10897046530cSGerd Hoffmann val = s->usbcmd; 10907046530cSGerd Hoffmann break; 10917046530cSGerd Hoffmann } 10927046530cSGerd Hoffmann 1093f1ae32a1SGerd Hoffmann /* not supporting dynamic frame list size at the moment */ 1094f1ae32a1SGerd Hoffmann if ((val & USBCMD_FLS) && !(s->usbcmd & USBCMD_FLS)) { 1095f1ae32a1SGerd Hoffmann fprintf(stderr, "attempt to set frame list size -- value %d\n", 10963e4f910cSGerd Hoffmann (int)val & USBCMD_FLS); 1097f1ae32a1SGerd Hoffmann val &= ~USBCMD_FLS; 1098f1ae32a1SGerd Hoffmann } 109947d073ccSHans de Goede 1100a1c3e4b8SHans de Goede if (val & USBCMD_IAAD) { 1101a1c3e4b8SHans de Goede /* 1102a1c3e4b8SHans de Goede * Process IAAD immediately, otherwise the Linux IAAD watchdog may 1103a1c3e4b8SHans de Goede * trigger and re-use a qh without us seeing the unlink. 1104a1c3e4b8SHans de Goede */ 1105a1c3e4b8SHans de Goede s->async_stepdown = 0; 1106a1c3e4b8SHans de Goede qemu_bh_schedule(s->async_bh); 11071defcbd1SGerd Hoffmann trace_usb_ehci_doorbell_ring(); 1108a1c3e4b8SHans de Goede } 1109a1c3e4b8SHans de Goede 111047d073ccSHans de Goede if (((USBCMD_RUNSTOP | USBCMD_PSE | USBCMD_ASE) & val) != 111147d073ccSHans de Goede ((USBCMD_RUNSTOP | USBCMD_PSE | USBCMD_ASE) & s->usbcmd)) { 111247d073ccSHans de Goede if (s->pstate == EST_INACTIVE) { 111347d073ccSHans de Goede SET_LAST_RUN_CLOCK(s); 111447d073ccSHans de Goede } 111547d073ccSHans de Goede s->usbcmd = val; /* Set usbcmd for ehci_update_halt() */ 111647d073ccSHans de Goede ehci_update_halt(s); 111747d073ccSHans de Goede s->async_stepdown = 0; 11180262f65aSHans de Goede qemu_bh_schedule(s->async_bh); 111947d073ccSHans de Goede } 1120f1ae32a1SGerd Hoffmann break; 1121f1ae32a1SGerd Hoffmann 1122f1ae32a1SGerd Hoffmann case USBSTS: 1123a31f0531SJim Meyering val &= USBSTS_RO_MASK; // bits 6 through 31 are RO 1124a31f0531SJim Meyering ehci_clear_usbsts(s, val); // bits 0 through 5 are R/WC 1125f1ae32a1SGerd Hoffmann val = s->usbsts; 11267efc17afSGerd Hoffmann ehci_update_irq(s); 1127f1ae32a1SGerd Hoffmann break; 1128f1ae32a1SGerd Hoffmann 1129f1ae32a1SGerd Hoffmann case USBINTR: 1130f1ae32a1SGerd Hoffmann val &= USBINTR_MASK; 113140862309SGerd Hoffmann if (ehci_enabled(s) && (USBSTS_FLR & val)) { 113240862309SGerd Hoffmann qemu_bh_schedule(s->async_bh); 113340862309SGerd Hoffmann } 1134f1ae32a1SGerd Hoffmann break; 1135f1ae32a1SGerd Hoffmann 11368a771f77SHans de Goede case FRINDEX: 11379359a58bSHans de Goede val &= 0x00003fff; /* frindex is 14bits */ 11389359a58bSHans de Goede s->usbsts_frindex = val; 11398a771f77SHans de Goede break; 11408a771f77SHans de Goede 1141f1ae32a1SGerd Hoffmann case CONFIGFLAG: 1142f1ae32a1SGerd Hoffmann val &= 0x1; 1143f1ae32a1SGerd Hoffmann if (val) { 1144f1ae32a1SGerd Hoffmann for(i = 0; i < NB_PORTS; i++) 1145f1ae32a1SGerd Hoffmann handle_port_owner_write(s, i, 0); 1146f1ae32a1SGerd Hoffmann } 1147f1ae32a1SGerd Hoffmann break; 1148f1ae32a1SGerd Hoffmann 1149f1ae32a1SGerd Hoffmann case PERIODICLISTBASE: 1150ec807d12SGerd Hoffmann if (ehci_periodic_enabled(s)) { 1151f1ae32a1SGerd Hoffmann fprintf(stderr, 1152f1ae32a1SGerd Hoffmann "ehci: PERIODIC list base register set while periodic schedule\n" 1153f1ae32a1SGerd Hoffmann " is enabled and HC is enabled\n"); 1154f1ae32a1SGerd Hoffmann } 1155f1ae32a1SGerd Hoffmann break; 1156f1ae32a1SGerd Hoffmann 1157f1ae32a1SGerd Hoffmann case ASYNCLISTADDR: 1158ec807d12SGerd Hoffmann if (ehci_async_enabled(s)) { 1159f1ae32a1SGerd Hoffmann fprintf(stderr, 1160f1ae32a1SGerd Hoffmann "ehci: ASYNC list address register set while async schedule\n" 1161f1ae32a1SGerd Hoffmann " is enabled and HC is enabled\n"); 1162f1ae32a1SGerd Hoffmann } 1163f1ae32a1SGerd Hoffmann break; 1164f1ae32a1SGerd Hoffmann } 1165f1ae32a1SGerd Hoffmann 1166f1ae32a1SGerd Hoffmann *mmio = val; 116727a11324SPeter Crosthwaite trace_usb_ehci_opreg_change(addr + s->opregbase, addr2str(addr), 116827a11324SPeter Crosthwaite *mmio, old); 1169f1ae32a1SGerd Hoffmann } 1170f1ae32a1SGerd Hoffmann 1171a5e0139aSGerd Hoffmann /* 1172a5e0139aSGerd Hoffmann * Write the qh back to guest physical memory. This step isn't 1173a5e0139aSGerd Hoffmann * in the EHCI spec but we need to do it since we don't share 1174a5e0139aSGerd Hoffmann * physical memory with our guest VM. 1175a5e0139aSGerd Hoffmann * 1176a5e0139aSGerd Hoffmann * The first three dwords are read-only for the EHCI, so skip them 1177a5e0139aSGerd Hoffmann * when writing back the qh. 1178a5e0139aSGerd Hoffmann */ 1179a5e0139aSGerd Hoffmann static void ehci_flush_qh(EHCIQueue *q) 1180a5e0139aSGerd Hoffmann { 1181a5e0139aSGerd Hoffmann uint32_t *qh = (uint32_t *) &q->qh; 1182a5e0139aSGerd Hoffmann uint32_t dwords = sizeof(EHCIqh) >> 2; 1183a5e0139aSGerd Hoffmann uint32_t addr = NLPTR_GET(q->qhaddr); 1184a5e0139aSGerd Hoffmann 1185a5e0139aSGerd Hoffmann put_dwords(q->ehci, addr + 3 * sizeof(uint32_t), qh + 3, dwords - 3); 1186a5e0139aSGerd Hoffmann } 1187a5e0139aSGerd Hoffmann 1188f1ae32a1SGerd Hoffmann // 4.10.2 1189f1ae32a1SGerd Hoffmann 1190f1ae32a1SGerd Hoffmann static int ehci_qh_do_overlay(EHCIQueue *q) 1191f1ae32a1SGerd Hoffmann { 1192eb36a88eSGerd Hoffmann EHCIPacket *p = QTAILQ_FIRST(&q->packets); 1193f1ae32a1SGerd Hoffmann int i; 1194f1ae32a1SGerd Hoffmann int dtoggle; 1195f1ae32a1SGerd Hoffmann int ping; 1196f1ae32a1SGerd Hoffmann int eps; 1197f1ae32a1SGerd Hoffmann int reload; 1198f1ae32a1SGerd Hoffmann 1199eb36a88eSGerd Hoffmann assert(p != NULL); 1200eb36a88eSGerd Hoffmann assert(p->qtdaddr == q->qtdaddr); 1201eb36a88eSGerd Hoffmann 1202f1ae32a1SGerd Hoffmann // remember values in fields to preserve in qh after overlay 1203f1ae32a1SGerd Hoffmann 1204f1ae32a1SGerd Hoffmann dtoggle = q->qh.token & QTD_TOKEN_DTOGGLE; 1205f1ae32a1SGerd Hoffmann ping = q->qh.token & QTD_TOKEN_PING; 1206f1ae32a1SGerd Hoffmann 1207eb36a88eSGerd Hoffmann q->qh.current_qtd = p->qtdaddr; 1208eb36a88eSGerd Hoffmann q->qh.next_qtd = p->qtd.next; 1209eb36a88eSGerd Hoffmann q->qh.altnext_qtd = p->qtd.altnext; 1210eb36a88eSGerd Hoffmann q->qh.token = p->qtd.token; 1211f1ae32a1SGerd Hoffmann 1212f1ae32a1SGerd Hoffmann 1213f1ae32a1SGerd Hoffmann eps = get_field(q->qh.epchar, QH_EPCHAR_EPS); 1214f1ae32a1SGerd Hoffmann if (eps == EHCI_QH_EPS_HIGH) { 1215f1ae32a1SGerd Hoffmann q->qh.token &= ~QTD_TOKEN_PING; 1216f1ae32a1SGerd Hoffmann q->qh.token |= ping; 1217f1ae32a1SGerd Hoffmann } 1218f1ae32a1SGerd Hoffmann 1219f1ae32a1SGerd Hoffmann reload = get_field(q->qh.epchar, QH_EPCHAR_RL); 1220f1ae32a1SGerd Hoffmann set_field(&q->qh.altnext_qtd, reload, QH_ALTNEXT_NAKCNT); 1221f1ae32a1SGerd Hoffmann 1222f1ae32a1SGerd Hoffmann for (i = 0; i < 5; i++) { 1223eb36a88eSGerd Hoffmann q->qh.bufptr[i] = p->qtd.bufptr[i]; 1224f1ae32a1SGerd Hoffmann } 1225f1ae32a1SGerd Hoffmann 1226f1ae32a1SGerd Hoffmann if (!(q->qh.epchar & QH_EPCHAR_DTC)) { 1227f1ae32a1SGerd Hoffmann // preserve QH DT bit 1228f1ae32a1SGerd Hoffmann q->qh.token &= ~QTD_TOKEN_DTOGGLE; 1229f1ae32a1SGerd Hoffmann q->qh.token |= dtoggle; 1230f1ae32a1SGerd Hoffmann } 1231f1ae32a1SGerd Hoffmann 1232f1ae32a1SGerd Hoffmann q->qh.bufptr[1] &= ~BUFPTR_CPROGMASK_MASK; 1233f1ae32a1SGerd Hoffmann q->qh.bufptr[2] &= ~BUFPTR_FRAMETAG_MASK; 1234f1ae32a1SGerd Hoffmann 1235a5e0139aSGerd Hoffmann ehci_flush_qh(q); 1236f1ae32a1SGerd Hoffmann 1237f1ae32a1SGerd Hoffmann return 0; 1238f1ae32a1SGerd Hoffmann } 1239f1ae32a1SGerd Hoffmann 1240eb36a88eSGerd Hoffmann static int ehci_init_transfer(EHCIPacket *p) 1241f1ae32a1SGerd Hoffmann { 1242f1ae32a1SGerd Hoffmann uint32_t cpage, offset, bytes, plen; 1243f1ae32a1SGerd Hoffmann dma_addr_t page; 1244f1ae32a1SGerd Hoffmann 1245eb36a88eSGerd Hoffmann cpage = get_field(p->qtd.token, QTD_TOKEN_CPAGE); 1246eb36a88eSGerd Hoffmann bytes = get_field(p->qtd.token, QTD_TOKEN_TBYTES); 1247eb36a88eSGerd Hoffmann offset = p->qtd.bufptr[0] & ~QTD_BUFPTR_MASK; 1248df32fd1cSPaolo Bonzini qemu_sglist_init(&p->sgl, 5, p->queue->ehci->as); 1249f1ae32a1SGerd Hoffmann 1250f1ae32a1SGerd Hoffmann while (bytes > 0) { 1251f1ae32a1SGerd Hoffmann if (cpage > 4) { 1252f1ae32a1SGerd Hoffmann fprintf(stderr, "cpage out of range (%d)\n", cpage); 125301e26b0eSHans de Goede return -1; 1254f1ae32a1SGerd Hoffmann } 1255f1ae32a1SGerd Hoffmann 1256eb36a88eSGerd Hoffmann page = p->qtd.bufptr[cpage] & QTD_BUFPTR_MASK; 1257f1ae32a1SGerd Hoffmann page += offset; 1258f1ae32a1SGerd Hoffmann plen = bytes; 1259f1ae32a1SGerd Hoffmann if (plen > 4096 - offset) { 1260f1ae32a1SGerd Hoffmann plen = 4096 - offset; 1261f1ae32a1SGerd Hoffmann offset = 0; 1262f1ae32a1SGerd Hoffmann cpage++; 1263f1ae32a1SGerd Hoffmann } 1264f1ae32a1SGerd Hoffmann 1265eb36a88eSGerd Hoffmann qemu_sglist_add(&p->sgl, page, plen); 1266f1ae32a1SGerd Hoffmann bytes -= plen; 1267f1ae32a1SGerd Hoffmann } 1268f1ae32a1SGerd Hoffmann return 0; 1269f1ae32a1SGerd Hoffmann } 1270f1ae32a1SGerd Hoffmann 1271e696b1daSHans de Goede static void ehci_finish_transfer(EHCIQueue *q, int len) 1272f1ae32a1SGerd Hoffmann { 1273f1ae32a1SGerd Hoffmann uint32_t cpage, offset; 1274f1ae32a1SGerd Hoffmann 1275e696b1daSHans de Goede if (len > 0) { 1276f1ae32a1SGerd Hoffmann /* update cpage & offset */ 1277f1ae32a1SGerd Hoffmann cpage = get_field(q->qh.token, QTD_TOKEN_CPAGE); 1278f1ae32a1SGerd Hoffmann offset = q->qh.bufptr[0] & ~QTD_BUFPTR_MASK; 1279f1ae32a1SGerd Hoffmann 1280e696b1daSHans de Goede offset += len; 1281f1ae32a1SGerd Hoffmann cpage += offset >> QTD_BUFPTR_SH; 1282f1ae32a1SGerd Hoffmann offset &= ~QTD_BUFPTR_MASK; 1283f1ae32a1SGerd Hoffmann 1284f1ae32a1SGerd Hoffmann set_field(&q->qh.token, cpage, QTD_TOKEN_CPAGE); 1285f1ae32a1SGerd Hoffmann q->qh.bufptr[0] &= QTD_BUFPTR_MASK; 1286f1ae32a1SGerd Hoffmann q->qh.bufptr[0] |= offset; 1287f1ae32a1SGerd Hoffmann } 1288f1ae32a1SGerd Hoffmann } 1289f1ae32a1SGerd Hoffmann 1290f1ae32a1SGerd Hoffmann static void ehci_async_complete_packet(USBPort *port, USBPacket *packet) 1291f1ae32a1SGerd Hoffmann { 1292eb36a88eSGerd Hoffmann EHCIPacket *p; 1293f1ae32a1SGerd Hoffmann EHCIState *s = port->opaque; 1294f1ae32a1SGerd Hoffmann uint32_t portsc = s->portsc[port->index]; 1295f1ae32a1SGerd Hoffmann 1296f1ae32a1SGerd Hoffmann if (portsc & PORTSC_POWNER) { 1297f1ae32a1SGerd Hoffmann USBPort *companion = s->companion_ports[port->index]; 1298f1ae32a1SGerd Hoffmann companion->ops->complete(companion, packet); 1299f1ae32a1SGerd Hoffmann return; 1300f1ae32a1SGerd Hoffmann } 1301f1ae32a1SGerd Hoffmann 1302eb36a88eSGerd Hoffmann p = container_of(packet, EHCIPacket, packet); 1303eb36a88eSGerd Hoffmann assert(p->async == EHCI_ASYNC_INFLIGHT); 13040cae7b1aSHans de Goede 13059a77a0f5SHans de Goede if (packet->status == USB_RET_REMOVE_FROM_QUEUE) { 13060cae7b1aSHans de Goede trace_usb_ehci_packet_action(p->queue, p, "remove"); 13070cae7b1aSHans de Goede ehci_free_packet(p); 13080cae7b1aSHans de Goede return; 13090cae7b1aSHans de Goede } 13100cae7b1aSHans de Goede 13110cae7b1aSHans de Goede trace_usb_ehci_packet_action(p->queue, p, "wakeup"); 1312eb36a88eSGerd Hoffmann p->async = EHCI_ASYNC_FINISHED; 1313ae710b99SGerd Hoffmann 131480826240SHans de Goede if (!p->queue->async) { 131580826240SHans de Goede s->periodic_sched_active = PERIODIC_ACTIVE; 1316ae710b99SGerd Hoffmann } 131780826240SHans de Goede qemu_bh_schedule(s->async_bh); 1318f1ae32a1SGerd Hoffmann } 1319f1ae32a1SGerd Hoffmann 1320f1ae32a1SGerd Hoffmann static void ehci_execute_complete(EHCIQueue *q) 1321f1ae32a1SGerd Hoffmann { 1322eb36a88eSGerd Hoffmann EHCIPacket *p = QTAILQ_FIRST(&q->packets); 1323e696b1daSHans de Goede uint32_t tbytes; 1324eb36a88eSGerd Hoffmann 1325eb36a88eSGerd Hoffmann assert(p != NULL); 1326eb36a88eSGerd Hoffmann assert(p->qtdaddr == q->qtdaddr); 1327ef5b2344SHans de Goede assert(p->async == EHCI_ASYNC_INITIALIZED || 1328ef5b2344SHans de Goede p->async == EHCI_ASYNC_FINISHED); 1329f1ae32a1SGerd Hoffmann 1330e696b1daSHans de Goede DPRINTF("execute_complete: qhaddr 0x%x, next 0x%x, qtdaddr 0x%x, " 1331e696b1daSHans de Goede "status %d, actual_length %d\n", 1332e696b1daSHans de Goede q->qhaddr, q->qh.next, q->qtdaddr, 1333e696b1daSHans de Goede p->packet.status, p->packet.actual_length); 1334f1ae32a1SGerd Hoffmann 1335e696b1daSHans de Goede switch (p->packet.status) { 1336e696b1daSHans de Goede case USB_RET_SUCCESS: 1337e696b1daSHans de Goede break; 1338f1ae32a1SGerd Hoffmann case USB_RET_IOERROR: 1339f1ae32a1SGerd Hoffmann case USB_RET_NODEV: 1340f1ae32a1SGerd Hoffmann q->qh.token |= (QTD_TOKEN_HALT | QTD_TOKEN_XACTERR); 1341f1ae32a1SGerd Hoffmann set_field(&q->qh.token, 0, QTD_TOKEN_CERR); 13427efc17afSGerd Hoffmann ehci_raise_irq(q->ehci, USBSTS_ERRINT); 1343f1ae32a1SGerd Hoffmann break; 1344f1ae32a1SGerd Hoffmann case USB_RET_STALL: 1345f1ae32a1SGerd Hoffmann q->qh.token |= QTD_TOKEN_HALT; 13467efc17afSGerd Hoffmann ehci_raise_irq(q->ehci, USBSTS_ERRINT); 1347f1ae32a1SGerd Hoffmann break; 1348f1ae32a1SGerd Hoffmann case USB_RET_NAK: 1349f1ae32a1SGerd Hoffmann set_field(&q->qh.altnext_qtd, 0, QH_ALTNEXT_NAKCNT); 1350f1ae32a1SGerd Hoffmann return; /* We're not done yet with this transaction */ 1351f1ae32a1SGerd Hoffmann case USB_RET_BABBLE: 1352f1ae32a1SGerd Hoffmann q->qh.token |= (QTD_TOKEN_HALT | QTD_TOKEN_BABBLE); 13537efc17afSGerd Hoffmann ehci_raise_irq(q->ehci, USBSTS_ERRINT); 1354f1ae32a1SGerd Hoffmann break; 1355f1ae32a1SGerd Hoffmann default: 1356f1ae32a1SGerd Hoffmann /* should not be triggerable */ 1357e696b1daSHans de Goede fprintf(stderr, "USB invalid response %d\n", p->packet.status); 1358f1ae32a1SGerd Hoffmann assert(0); 1359f1ae32a1SGerd Hoffmann break; 1360f1ae32a1SGerd Hoffmann } 1361f1ae32a1SGerd Hoffmann 1362e696b1daSHans de Goede /* TODO check 4.12 for splits */ 1363e696b1daSHans de Goede tbytes = get_field(q->qh.token, QTD_TOKEN_TBYTES); 1364549a3c3dSHans de Goede if (tbytes && p->pid == USB_TOKEN_IN) { 1365e696b1daSHans de Goede tbytes -= p->packet.actual_length; 1366cf08a8a1SHans de Goede if (tbytes) { 1367cf08a8a1SHans de Goede /* 4.15.1.2 must raise int on a short input packet */ 1368cf08a8a1SHans de Goede ehci_raise_irq(q->ehci, USBSTS_INT); 136952c15e59SHans de Goede if (q->async) { 137052c15e59SHans de Goede q->ehci->int_req_by_async = true; 137152c15e59SHans de Goede } 1372cf08a8a1SHans de Goede } 1373f1ae32a1SGerd Hoffmann } else { 1374549a3c3dSHans de Goede tbytes = 0; 1375f1ae32a1SGerd Hoffmann } 1376549a3c3dSHans de Goede DPRINTF("updating tbytes to %d\n", tbytes); 1377549a3c3dSHans de Goede set_field(&q->qh.token, tbytes, QTD_TOKEN_TBYTES); 1378e696b1daSHans de Goede 1379e696b1daSHans de Goede ehci_finish_transfer(q, p->packet.actual_length); 1380e2f89926SDavid Gibson usb_packet_unmap(&p->packet, &p->sgl); 1381eb36a88eSGerd Hoffmann qemu_sglist_destroy(&p->sgl); 1382ef5b2344SHans de Goede p->async = EHCI_ASYNC_NONE; 1383f1ae32a1SGerd Hoffmann 1384f1ae32a1SGerd Hoffmann q->qh.token ^= QTD_TOKEN_DTOGGLE; 1385f1ae32a1SGerd Hoffmann q->qh.token &= ~QTD_TOKEN_ACTIVE; 1386f1ae32a1SGerd Hoffmann 1387f1ae32a1SGerd Hoffmann if (q->qh.token & QTD_TOKEN_IOC) { 13887efc17afSGerd Hoffmann ehci_raise_irq(q->ehci, USBSTS_INT); 138944272b0fSHans de Goede if (q->async) { 139044272b0fSHans de Goede q->ehci->int_req_by_async = true; 139144272b0fSHans de Goede } 1392f1ae32a1SGerd Hoffmann } 1393f1ae32a1SGerd Hoffmann } 1394f1ae32a1SGerd Hoffmann 139501e26b0eSHans de Goede /* 4.10.3 returns "again" */ 1396773dc9cdSGerd Hoffmann static int ehci_execute(EHCIPacket *p, const char *action) 1397f1ae32a1SGerd Hoffmann { 1398f1ae32a1SGerd Hoffmann USBEndpoint *ep; 1399f1ae32a1SGerd Hoffmann int endp; 14006ba43f1fSHans de Goede bool spd; 1401f1ae32a1SGerd Hoffmann 1402ef5b2344SHans de Goede assert(p->async == EHCI_ASYNC_NONE || 1403ef5b2344SHans de Goede p->async == EHCI_ASYNC_INITIALIZED); 1404ef5b2344SHans de Goede 14054224558fSGerd Hoffmann if (!(p->qtd.token & QTD_TOKEN_ACTIVE)) { 14064224558fSGerd Hoffmann fprintf(stderr, "Attempting to execute inactive qtd\n"); 140701e26b0eSHans de Goede return -1; 1408f1ae32a1SGerd Hoffmann } 1409f1ae32a1SGerd Hoffmann 1410549a3c3dSHans de Goede if (get_field(p->qtd.token, QTD_TOKEN_TBYTES) > BUFF_SIZE) { 14113a8ca08eSHans de Goede ehci_trace_guest_bug(p->queue->ehci, 14123a8ca08eSHans de Goede "guest requested more bytes than allowed"); 141301e26b0eSHans de Goede return -1; 1414f1ae32a1SGerd Hoffmann } 1415f1ae32a1SGerd Hoffmann 1416f79738b0SHans de Goede if (!ehci_verify_pid(p->queue, &p->qtd)) { 1417f79738b0SHans de Goede ehci_queue_stopped(p->queue); /* Mark the ep in the prev dir stopped */ 1418f79738b0SHans de Goede } 141951e0c5d0SHans de Goede p->pid = ehci_get_pid(&p->qtd); 1420bbbc39ccSHans de Goede p->queue->last_pid = p->pid; 1421ef5b2344SHans de Goede endp = get_field(p->queue->qh.epchar, QH_EPCHAR_EP); 1422ef5b2344SHans de Goede ep = usb_ep_get(p->queue->dev, p->pid, endp); 1423ef5b2344SHans de Goede 1424ef5b2344SHans de Goede if (p->async == EHCI_ASYNC_NONE) { 1425eb36a88eSGerd Hoffmann if (ehci_init_transfer(p) != 0) { 142601e26b0eSHans de Goede return -1; 1427f1ae32a1SGerd Hoffmann } 1428f1ae32a1SGerd Hoffmann 14296ba43f1fSHans de Goede spd = (p->pid == USB_TOKEN_IN && NLPTR_TBIT(p->qtd.altnext) == 0); 14308550a02dSGerd Hoffmann usb_packet_setup(&p->packet, p->pid, ep, 0, p->qtdaddr, spd, 1431a6fb2ddbSHans de Goede (p->qtd.token & QTD_TOKEN_IOC) != 0); 1432eb36a88eSGerd Hoffmann usb_packet_map(&p->packet, &p->sgl); 1433ef5b2344SHans de Goede p->async = EHCI_ASYNC_INITIALIZED; 1434ef5b2344SHans de Goede } 1435f1ae32a1SGerd Hoffmann 1436773dc9cdSGerd Hoffmann trace_usb_ehci_packet_action(p->queue, p, action); 14379a77a0f5SHans de Goede usb_handle_packet(p->queue->dev, &p->packet); 14389a77a0f5SHans de Goede DPRINTF("submit: qh 0x%x next 0x%x qtd 0x%x pid 0x%x len %zd endp 0x%x " 14399a77a0f5SHans de Goede "status %d actual_length %d\n", p->queue->qhaddr, p->qtd.next, 14409a77a0f5SHans de Goede p->qtdaddr, p->pid, p->packet.iov.size, endp, p->packet.status, 14419a77a0f5SHans de Goede p->packet.actual_length); 1442f1ae32a1SGerd Hoffmann 14439a77a0f5SHans de Goede if (p->packet.actual_length > BUFF_SIZE) { 1444f1ae32a1SGerd Hoffmann fprintf(stderr, "ret from usb_handle_packet > BUFF_SIZE\n"); 144501e26b0eSHans de Goede return -1; 1446f1ae32a1SGerd Hoffmann } 1447f1ae32a1SGerd Hoffmann 144801e26b0eSHans de Goede return 1; 1449f1ae32a1SGerd Hoffmann } 1450f1ae32a1SGerd Hoffmann 1451f1ae32a1SGerd Hoffmann /* 4.7.2 1452f1ae32a1SGerd Hoffmann */ 1453f1ae32a1SGerd Hoffmann 1454f1ae32a1SGerd Hoffmann static int ehci_process_itd(EHCIState *ehci, 1455e983395dSGerd Hoffmann EHCIitd *itd, 1456e983395dSGerd Hoffmann uint32_t addr) 1457f1ae32a1SGerd Hoffmann { 1458f1ae32a1SGerd Hoffmann USBDevice *dev; 1459f1ae32a1SGerd Hoffmann USBEndpoint *ep; 1460f1ae32a1SGerd Hoffmann uint32_t i, len, pid, dir, devaddr, endp; 1461f1ae32a1SGerd Hoffmann uint32_t pg, off, ptr1, ptr2, max, mult; 1462f1ae32a1SGerd Hoffmann 146380826240SHans de Goede ehci->periodic_sched_active = PERIODIC_ACTIVE; 146480826240SHans de Goede 1465f1ae32a1SGerd Hoffmann dir =(itd->bufptr[1] & ITD_BUFPTR_DIRECTION); 1466f1ae32a1SGerd Hoffmann devaddr = get_field(itd->bufptr[0], ITD_BUFPTR_DEVADDR); 1467f1ae32a1SGerd Hoffmann endp = get_field(itd->bufptr[0], ITD_BUFPTR_EP); 1468f1ae32a1SGerd Hoffmann max = get_field(itd->bufptr[1], ITD_BUFPTR_MAXPKT); 1469f1ae32a1SGerd Hoffmann mult = get_field(itd->bufptr[2], ITD_BUFPTR_MULT); 1470f1ae32a1SGerd Hoffmann 1471f1ae32a1SGerd Hoffmann for(i = 0; i < 8; i++) { 1472f1ae32a1SGerd Hoffmann if (itd->transact[i] & ITD_XACT_ACTIVE) { 1473f1ae32a1SGerd Hoffmann pg = get_field(itd->transact[i], ITD_XACT_PGSEL); 1474f1ae32a1SGerd Hoffmann off = itd->transact[i] & ITD_XACT_OFFSET_MASK; 1475f1ae32a1SGerd Hoffmann ptr1 = (itd->bufptr[pg] & ITD_BUFPTR_MASK); 1476f1ae32a1SGerd Hoffmann ptr2 = (itd->bufptr[pg+1] & ITD_BUFPTR_MASK); 1477f1ae32a1SGerd Hoffmann len = get_field(itd->transact[i], ITD_XACT_LENGTH); 1478f1ae32a1SGerd Hoffmann 1479f1ae32a1SGerd Hoffmann if (len > max * mult) { 1480f1ae32a1SGerd Hoffmann len = max * mult; 1481f1ae32a1SGerd Hoffmann } 1482f1ae32a1SGerd Hoffmann 1483f1ae32a1SGerd Hoffmann if (len > BUFF_SIZE) { 148401e26b0eSHans de Goede return -1; 1485f1ae32a1SGerd Hoffmann } 1486f1ae32a1SGerd Hoffmann 1487df32fd1cSPaolo Bonzini qemu_sglist_init(&ehci->isgl, 2, ehci->as); 1488f1ae32a1SGerd Hoffmann if (off + len > 4096) { 1489f1ae32a1SGerd Hoffmann /* transfer crosses page border */ 1490f1ae32a1SGerd Hoffmann uint32_t len2 = off + len - 4096; 1491f1ae32a1SGerd Hoffmann uint32_t len1 = len - len2; 1492f1ae32a1SGerd Hoffmann qemu_sglist_add(&ehci->isgl, ptr1 + off, len1); 1493f1ae32a1SGerd Hoffmann qemu_sglist_add(&ehci->isgl, ptr2, len2); 1494f1ae32a1SGerd Hoffmann } else { 1495f1ae32a1SGerd Hoffmann qemu_sglist_add(&ehci->isgl, ptr1 + off, len); 1496f1ae32a1SGerd Hoffmann } 1497f1ae32a1SGerd Hoffmann 1498f1ae32a1SGerd Hoffmann pid = dir ? USB_TOKEN_IN : USB_TOKEN_OUT; 1499f1ae32a1SGerd Hoffmann 1500f1ae32a1SGerd Hoffmann dev = ehci_find_device(ehci, devaddr); 1501f1ae32a1SGerd Hoffmann ep = usb_ep_get(dev, pid, endp); 15027ce86aa1SHans de Goede if (ep && ep->type == USB_ENDPOINT_XFER_ISOC) { 15038550a02dSGerd Hoffmann usb_packet_setup(&ehci->ipacket, pid, ep, 0, addr, false, 1504a6fb2ddbSHans de Goede (itd->transact[i] & ITD_XACT_IOC) != 0); 1505f1ae32a1SGerd Hoffmann usb_packet_map(&ehci->ipacket, &ehci->isgl); 15069a77a0f5SHans de Goede usb_handle_packet(dev, &ehci->ipacket); 1507e2f89926SDavid Gibson usb_packet_unmap(&ehci->ipacket, &ehci->isgl); 1508f1ae32a1SGerd Hoffmann } else { 1509f1ae32a1SGerd Hoffmann DPRINTF("ISOCH: attempt to addess non-iso endpoint\n"); 1510e696b1daSHans de Goede ehci->ipacket.status = USB_RET_NAK; 1511e696b1daSHans de Goede ehci->ipacket.actual_length = 0; 1512f1ae32a1SGerd Hoffmann } 1513f1ae32a1SGerd Hoffmann qemu_sglist_destroy(&ehci->isgl); 1514f1ae32a1SGerd Hoffmann 1515e696b1daSHans de Goede switch (ehci->ipacket.status) { 1516e696b1daSHans de Goede case USB_RET_SUCCESS: 1517e696b1daSHans de Goede break; 1518f1ae32a1SGerd Hoffmann default: 1519e696b1daSHans de Goede fprintf(stderr, "Unexpected iso usb result: %d\n", 1520e696b1daSHans de Goede ehci->ipacket.status); 1521f1ae32a1SGerd Hoffmann /* Fall through */ 1522f1ae32a1SGerd Hoffmann case USB_RET_IOERROR: 1523f1ae32a1SGerd Hoffmann case USB_RET_NODEV: 1524f1ae32a1SGerd Hoffmann /* 3.3.2: XACTERR is only allowed on IN transactions */ 1525f1ae32a1SGerd Hoffmann if (dir) { 1526f1ae32a1SGerd Hoffmann itd->transact[i] |= ITD_XACT_XACTERR; 15277efc17afSGerd Hoffmann ehci_raise_irq(ehci, USBSTS_ERRINT); 1528f1ae32a1SGerd Hoffmann } 1529f1ae32a1SGerd Hoffmann break; 1530f1ae32a1SGerd Hoffmann case USB_RET_BABBLE: 1531f1ae32a1SGerd Hoffmann itd->transact[i] |= ITD_XACT_BABBLE; 15327efc17afSGerd Hoffmann ehci_raise_irq(ehci, USBSTS_ERRINT); 1533f1ae32a1SGerd Hoffmann break; 1534f1ae32a1SGerd Hoffmann case USB_RET_NAK: 1535f1ae32a1SGerd Hoffmann /* no data for us, so do a zero-length transfer */ 1536e696b1daSHans de Goede ehci->ipacket.actual_length = 0; 1537f1ae32a1SGerd Hoffmann break; 1538f1ae32a1SGerd Hoffmann } 1539f1ae32a1SGerd Hoffmann if (!dir) { 1540e696b1daSHans de Goede set_field(&itd->transact[i], len - ehci->ipacket.actual_length, 1541e696b1daSHans de Goede ITD_XACT_LENGTH); /* OUT */ 1542f1ae32a1SGerd Hoffmann } else { 1543e696b1daSHans de Goede set_field(&itd->transact[i], ehci->ipacket.actual_length, 1544e696b1daSHans de Goede ITD_XACT_LENGTH); /* IN */ 1545f1ae32a1SGerd Hoffmann } 1546f1ae32a1SGerd Hoffmann if (itd->transact[i] & ITD_XACT_IOC) { 15477efc17afSGerd Hoffmann ehci_raise_irq(ehci, USBSTS_INT); 1548f1ae32a1SGerd Hoffmann } 1549f1ae32a1SGerd Hoffmann itd->transact[i] &= ~ITD_XACT_ACTIVE; 1550f1ae32a1SGerd Hoffmann } 1551f1ae32a1SGerd Hoffmann } 1552f1ae32a1SGerd Hoffmann return 0; 1553f1ae32a1SGerd Hoffmann } 1554f1ae32a1SGerd Hoffmann 1555cd665715SGerd Hoffmann 1556f1ae32a1SGerd Hoffmann /* This state is the entry point for asynchronous schedule 1557f1ae32a1SGerd Hoffmann * processing. Entry here consitutes a EHCI start event state (4.8.5) 1558f1ae32a1SGerd Hoffmann */ 1559f1ae32a1SGerd Hoffmann static int ehci_state_waitlisthead(EHCIState *ehci, int async) 1560f1ae32a1SGerd Hoffmann { 1561f1ae32a1SGerd Hoffmann EHCIqh qh; 1562f1ae32a1SGerd Hoffmann int i = 0; 1563f1ae32a1SGerd Hoffmann int again = 0; 1564f1ae32a1SGerd Hoffmann uint32_t entry = ehci->asynclistaddr; 1565f1ae32a1SGerd Hoffmann 1566f1ae32a1SGerd Hoffmann /* set reclamation flag at start event (4.8.6) */ 1567f1ae32a1SGerd Hoffmann if (async) { 1568f1ae32a1SGerd Hoffmann ehci_set_usbsts(ehci, USBSTS_REC); 1569f1ae32a1SGerd Hoffmann } 1570f1ae32a1SGerd Hoffmann 15718f5457ebSHans de Goede ehci_queues_rip_unused(ehci, async); 1572f1ae32a1SGerd Hoffmann 1573f1ae32a1SGerd Hoffmann /* Find the head of the list (4.9.1.1) */ 1574f1ae32a1SGerd Hoffmann for(i = 0; i < MAX_QH; i++) { 157555903f1dSGerd Hoffmann if (get_dwords(ehci, NLPTR_GET(entry), (uint32_t *) &qh, 157655903f1dSGerd Hoffmann sizeof(EHCIqh) >> 2) < 0) { 157755903f1dSGerd Hoffmann return 0; 157855903f1dSGerd Hoffmann } 1579f1ae32a1SGerd Hoffmann ehci_trace_qh(NULL, NLPTR_GET(entry), &qh); 1580f1ae32a1SGerd Hoffmann 1581f1ae32a1SGerd Hoffmann if (qh.epchar & QH_EPCHAR_H) { 1582f1ae32a1SGerd Hoffmann if (async) { 1583f1ae32a1SGerd Hoffmann entry |= (NLPTR_TYPE_QH << 1); 1584f1ae32a1SGerd Hoffmann } 1585f1ae32a1SGerd Hoffmann 1586f1ae32a1SGerd Hoffmann ehci_set_fetch_addr(ehci, async, entry); 1587f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_FETCHENTRY); 1588f1ae32a1SGerd Hoffmann again = 1; 1589f1ae32a1SGerd Hoffmann goto out; 1590f1ae32a1SGerd Hoffmann } 1591f1ae32a1SGerd Hoffmann 1592f1ae32a1SGerd Hoffmann entry = qh.next; 1593f1ae32a1SGerd Hoffmann if (entry == ehci->asynclistaddr) { 1594f1ae32a1SGerd Hoffmann break; 1595f1ae32a1SGerd Hoffmann } 1596f1ae32a1SGerd Hoffmann } 1597f1ae32a1SGerd Hoffmann 1598f1ae32a1SGerd Hoffmann /* no head found for list. */ 1599f1ae32a1SGerd Hoffmann 1600f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_ACTIVE); 1601f1ae32a1SGerd Hoffmann 1602f1ae32a1SGerd Hoffmann out: 1603f1ae32a1SGerd Hoffmann return again; 1604f1ae32a1SGerd Hoffmann } 1605f1ae32a1SGerd Hoffmann 1606f1ae32a1SGerd Hoffmann 1607f1ae32a1SGerd Hoffmann /* This state is the entry point for periodic schedule processing as 1608f1ae32a1SGerd Hoffmann * well as being a continuation state for async processing. 1609f1ae32a1SGerd Hoffmann */ 1610f1ae32a1SGerd Hoffmann static int ehci_state_fetchentry(EHCIState *ehci, int async) 1611f1ae32a1SGerd Hoffmann { 1612f1ae32a1SGerd Hoffmann int again = 0; 1613f1ae32a1SGerd Hoffmann uint32_t entry = ehci_get_fetch_addr(ehci, async); 1614f1ae32a1SGerd Hoffmann 1615f1ae32a1SGerd Hoffmann if (NLPTR_TBIT(entry)) { 1616f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_ACTIVE); 1617f1ae32a1SGerd Hoffmann goto out; 1618f1ae32a1SGerd Hoffmann } 1619f1ae32a1SGerd Hoffmann 1620f1ae32a1SGerd Hoffmann /* section 4.8, only QH in async schedule */ 1621f1ae32a1SGerd Hoffmann if (async && (NLPTR_TYPE_GET(entry) != NLPTR_TYPE_QH)) { 1622f1ae32a1SGerd Hoffmann fprintf(stderr, "non queue head request in async schedule\n"); 1623f1ae32a1SGerd Hoffmann return -1; 1624f1ae32a1SGerd Hoffmann } 1625f1ae32a1SGerd Hoffmann 1626f1ae32a1SGerd Hoffmann switch (NLPTR_TYPE_GET(entry)) { 1627f1ae32a1SGerd Hoffmann case NLPTR_TYPE_QH: 1628f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_FETCHQH); 1629f1ae32a1SGerd Hoffmann again = 1; 1630f1ae32a1SGerd Hoffmann break; 1631f1ae32a1SGerd Hoffmann 1632f1ae32a1SGerd Hoffmann case NLPTR_TYPE_ITD: 1633f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_FETCHITD); 1634f1ae32a1SGerd Hoffmann again = 1; 1635f1ae32a1SGerd Hoffmann break; 1636f1ae32a1SGerd Hoffmann 1637f1ae32a1SGerd Hoffmann case NLPTR_TYPE_STITD: 1638f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_FETCHSITD); 1639f1ae32a1SGerd Hoffmann again = 1; 1640f1ae32a1SGerd Hoffmann break; 1641f1ae32a1SGerd Hoffmann 1642f1ae32a1SGerd Hoffmann default: 1643f1ae32a1SGerd Hoffmann /* TODO: handle FSTN type */ 1644f1ae32a1SGerd Hoffmann fprintf(stderr, "FETCHENTRY: entry at %X is of type %d " 1645f1ae32a1SGerd Hoffmann "which is not supported yet\n", entry, NLPTR_TYPE_GET(entry)); 1646f1ae32a1SGerd Hoffmann return -1; 1647f1ae32a1SGerd Hoffmann } 1648f1ae32a1SGerd Hoffmann 1649f1ae32a1SGerd Hoffmann out: 1650f1ae32a1SGerd Hoffmann return again; 1651f1ae32a1SGerd Hoffmann } 1652f1ae32a1SGerd Hoffmann 1653f1ae32a1SGerd Hoffmann static EHCIQueue *ehci_state_fetchqh(EHCIState *ehci, int async) 1654f1ae32a1SGerd Hoffmann { 1655c6432634SHans de Goede uint32_t entry; 1656f1ae32a1SGerd Hoffmann EHCIQueue *q; 1657dafe31fcSHans de Goede EHCIqh qh; 1658f1ae32a1SGerd Hoffmann 1659f1ae32a1SGerd Hoffmann entry = ehci_get_fetch_addr(ehci, async); 1660f1ae32a1SGerd Hoffmann q = ehci_find_queue_by_qh(ehci, entry, async); 1661f1ae32a1SGerd Hoffmann if (NULL == q) { 16628f6d5e26SGerd Hoffmann q = ehci_alloc_queue(ehci, entry, async); 1663f1ae32a1SGerd Hoffmann } 1664f1ae32a1SGerd Hoffmann 16658f6d5e26SGerd Hoffmann q->seen++; 1666f1ae32a1SGerd Hoffmann if (q->seen > 1) { 1667f1ae32a1SGerd Hoffmann /* we are going in circles -- stop processing */ 1668f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_ACTIVE); 1669f1ae32a1SGerd Hoffmann q = NULL; 1670f1ae32a1SGerd Hoffmann goto out; 1671f1ae32a1SGerd Hoffmann } 1672f1ae32a1SGerd Hoffmann 167355903f1dSGerd Hoffmann if (get_dwords(ehci, NLPTR_GET(q->qhaddr), 167455903f1dSGerd Hoffmann (uint32_t *) &qh, sizeof(EHCIqh) >> 2) < 0) { 167555903f1dSGerd Hoffmann q = NULL; 167655903f1dSGerd Hoffmann goto out; 167755903f1dSGerd Hoffmann } 1678dafe31fcSHans de Goede ehci_trace_qh(q, NLPTR_GET(q->qhaddr), &qh); 1679f1ae32a1SGerd Hoffmann 1680dafe31fcSHans de Goede /* 1681dafe31fcSHans de Goede * The overlay area of the qh should never be changed by the guest, 1682dafe31fcSHans de Goede * except when idle, in which case the reset is a nop. 1683dafe31fcSHans de Goede */ 1684c6432634SHans de Goede if (!ehci_verify_qh(q, &qh)) { 16855c514681SGerd Hoffmann if (ehci_reset_queue(q) > 0) { 16865c514681SGerd Hoffmann ehci_trace_guest_bug(ehci, "guest updated active QH"); 16875c514681SGerd Hoffmann } 1688e59928b3SGerd Hoffmann } 1689dafe31fcSHans de Goede q->qh = qh; 1690dafe31fcSHans de Goede 1691cae5d3f4SHans de Goede q->transact_ctr = get_field(q->qh.epcap, QH_EPCAP_MULT); 1692cae5d3f4SHans de Goede if (q->transact_ctr == 0) { /* Guest bug in some versions of windows */ 1693cae5d3f4SHans de Goede q->transact_ctr = 4; 1694cae5d3f4SHans de Goede } 1695cae5d3f4SHans de Goede 1696e59928b3SGerd Hoffmann if (q->dev == NULL) { 1697c6432634SHans de Goede q->dev = ehci_find_device(q->ehci, 1698c6432634SHans de Goede get_field(q->qh.epchar, QH_EPCHAR_DEVADDR)); 1699e59928b3SGerd Hoffmann } 1700e59928b3SGerd Hoffmann 1701f1ae32a1SGerd Hoffmann if (async && (q->qh.epchar & QH_EPCHAR_H)) { 1702f1ae32a1SGerd Hoffmann 1703f1ae32a1SGerd Hoffmann /* EHCI spec version 1.0 Section 4.8.3 & 4.10.1 */ 1704f1ae32a1SGerd Hoffmann if (ehci->usbsts & USBSTS_REC) { 1705f1ae32a1SGerd Hoffmann ehci_clear_usbsts(ehci, USBSTS_REC); 1706f1ae32a1SGerd Hoffmann } else { 1707f1ae32a1SGerd Hoffmann DPRINTF("FETCHQH: QH 0x%08x. H-bit set, reclamation status reset" 1708f1ae32a1SGerd Hoffmann " - done processing\n", q->qhaddr); 1709f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_ACTIVE); 1710f1ae32a1SGerd Hoffmann q = NULL; 1711f1ae32a1SGerd Hoffmann goto out; 1712f1ae32a1SGerd Hoffmann } 1713f1ae32a1SGerd Hoffmann } 1714f1ae32a1SGerd Hoffmann 1715f1ae32a1SGerd Hoffmann #if EHCI_DEBUG 1716f1ae32a1SGerd Hoffmann if (q->qhaddr != q->qh.next) { 1717f1ae32a1SGerd Hoffmann DPRINTF("FETCHQH: QH 0x%08x (h %x halt %x active %x) next 0x%08x\n", 1718f1ae32a1SGerd Hoffmann q->qhaddr, 1719f1ae32a1SGerd Hoffmann q->qh.epchar & QH_EPCHAR_H, 1720f1ae32a1SGerd Hoffmann q->qh.token & QTD_TOKEN_HALT, 1721f1ae32a1SGerd Hoffmann q->qh.token & QTD_TOKEN_ACTIVE, 1722f1ae32a1SGerd Hoffmann q->qh.next); 1723f1ae32a1SGerd Hoffmann } 1724f1ae32a1SGerd Hoffmann #endif 1725f1ae32a1SGerd Hoffmann 1726f1ae32a1SGerd Hoffmann if (q->qh.token & QTD_TOKEN_HALT) { 1727f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_HORIZONTALQH); 1728f1ae32a1SGerd Hoffmann 1729f1ae32a1SGerd Hoffmann } else if ((q->qh.token & QTD_TOKEN_ACTIVE) && 1730f1ae32a1SGerd Hoffmann (NLPTR_TBIT(q->qh.current_qtd) == 0)) { 1731f1ae32a1SGerd Hoffmann q->qtdaddr = q->qh.current_qtd; 1732f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_FETCHQTD); 1733f1ae32a1SGerd Hoffmann 1734f1ae32a1SGerd Hoffmann } else { 1735f1ae32a1SGerd Hoffmann /* EHCI spec version 1.0 Section 4.10.2 */ 1736f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_ADVANCEQUEUE); 1737f1ae32a1SGerd Hoffmann } 1738f1ae32a1SGerd Hoffmann 1739f1ae32a1SGerd Hoffmann out: 1740f1ae32a1SGerd Hoffmann return q; 1741f1ae32a1SGerd Hoffmann } 1742f1ae32a1SGerd Hoffmann 1743f1ae32a1SGerd Hoffmann static int ehci_state_fetchitd(EHCIState *ehci, int async) 1744f1ae32a1SGerd Hoffmann { 1745f1ae32a1SGerd Hoffmann uint32_t entry; 1746f1ae32a1SGerd Hoffmann EHCIitd itd; 1747f1ae32a1SGerd Hoffmann 1748f1ae32a1SGerd Hoffmann assert(!async); 1749f1ae32a1SGerd Hoffmann entry = ehci_get_fetch_addr(ehci, async); 1750f1ae32a1SGerd Hoffmann 175155903f1dSGerd Hoffmann if (get_dwords(ehci, NLPTR_GET(entry), (uint32_t *) &itd, 175255903f1dSGerd Hoffmann sizeof(EHCIitd) >> 2) < 0) { 175355903f1dSGerd Hoffmann return -1; 175455903f1dSGerd Hoffmann } 1755f1ae32a1SGerd Hoffmann ehci_trace_itd(ehci, entry, &itd); 1756f1ae32a1SGerd Hoffmann 1757e983395dSGerd Hoffmann if (ehci_process_itd(ehci, &itd, entry) != 0) { 1758f1ae32a1SGerd Hoffmann return -1; 1759f1ae32a1SGerd Hoffmann } 1760f1ae32a1SGerd Hoffmann 1761f1ae32a1SGerd Hoffmann put_dwords(ehci, NLPTR_GET(entry), (uint32_t *) &itd, 1762f1ae32a1SGerd Hoffmann sizeof(EHCIitd) >> 2); 1763f1ae32a1SGerd Hoffmann ehci_set_fetch_addr(ehci, async, itd.next); 1764f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_FETCHENTRY); 1765f1ae32a1SGerd Hoffmann 1766f1ae32a1SGerd Hoffmann return 1; 1767f1ae32a1SGerd Hoffmann } 1768f1ae32a1SGerd Hoffmann 1769f1ae32a1SGerd Hoffmann static int ehci_state_fetchsitd(EHCIState *ehci, int async) 1770f1ae32a1SGerd Hoffmann { 1771f1ae32a1SGerd Hoffmann uint32_t entry; 1772f1ae32a1SGerd Hoffmann EHCIsitd sitd; 1773f1ae32a1SGerd Hoffmann 1774f1ae32a1SGerd Hoffmann assert(!async); 1775f1ae32a1SGerd Hoffmann entry = ehci_get_fetch_addr(ehci, async); 1776f1ae32a1SGerd Hoffmann 177755903f1dSGerd Hoffmann if (get_dwords(ehci, NLPTR_GET(entry), (uint32_t *)&sitd, 177855903f1dSGerd Hoffmann sizeof(EHCIsitd) >> 2) < 0) { 177955903f1dSGerd Hoffmann return 0; 178055903f1dSGerd Hoffmann } 1781f1ae32a1SGerd Hoffmann ehci_trace_sitd(ehci, entry, &sitd); 1782f1ae32a1SGerd Hoffmann 1783f1ae32a1SGerd Hoffmann if (!(sitd.results & SITD_RESULTS_ACTIVE)) { 1784f1ae32a1SGerd Hoffmann /* siTD is not active, nothing to do */; 1785f1ae32a1SGerd Hoffmann } else { 1786f1ae32a1SGerd Hoffmann /* TODO: split transfers are not implemented */ 1787f1ae32a1SGerd Hoffmann fprintf(stderr, "WARNING: Skipping active siTD\n"); 1788f1ae32a1SGerd Hoffmann } 1789f1ae32a1SGerd Hoffmann 1790f1ae32a1SGerd Hoffmann ehci_set_fetch_addr(ehci, async, sitd.next); 1791f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_FETCHENTRY); 1792f1ae32a1SGerd Hoffmann return 1; 1793f1ae32a1SGerd Hoffmann } 1794f1ae32a1SGerd Hoffmann 1795f1ae32a1SGerd Hoffmann /* Section 4.10.2 - paragraph 3 */ 1796ae0138a8SGerd Hoffmann static int ehci_state_advqueue(EHCIQueue *q) 1797f1ae32a1SGerd Hoffmann { 1798f1ae32a1SGerd Hoffmann #if 0 1799f1ae32a1SGerd Hoffmann /* TO-DO: 4.10.2 - paragraph 2 1800f1ae32a1SGerd Hoffmann * if I-bit is set to 1 and QH is not active 1801f1ae32a1SGerd Hoffmann * go to horizontal QH 1802f1ae32a1SGerd Hoffmann */ 1803f1ae32a1SGerd Hoffmann if (I-bit set) { 1804f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_HORIZONTALQH); 1805f1ae32a1SGerd Hoffmann goto out; 1806f1ae32a1SGerd Hoffmann } 1807f1ae32a1SGerd Hoffmann #endif 1808f1ae32a1SGerd Hoffmann 1809f1ae32a1SGerd Hoffmann /* 1810f1ae32a1SGerd Hoffmann * want data and alt-next qTD is valid 1811f1ae32a1SGerd Hoffmann */ 1812f1ae32a1SGerd Hoffmann if (((q->qh.token & QTD_TOKEN_TBYTES_MASK) != 0) && 1813f1ae32a1SGerd Hoffmann (NLPTR_TBIT(q->qh.altnext_qtd) == 0)) { 1814f1ae32a1SGerd Hoffmann q->qtdaddr = q->qh.altnext_qtd; 1815ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_FETCHQTD); 1816f1ae32a1SGerd Hoffmann 1817f1ae32a1SGerd Hoffmann /* 1818f1ae32a1SGerd Hoffmann * next qTD is valid 1819f1ae32a1SGerd Hoffmann */ 1820f1ae32a1SGerd Hoffmann } else if (NLPTR_TBIT(q->qh.next_qtd) == 0) { 1821f1ae32a1SGerd Hoffmann q->qtdaddr = q->qh.next_qtd; 1822ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_FETCHQTD); 1823f1ae32a1SGerd Hoffmann 1824f1ae32a1SGerd Hoffmann /* 1825f1ae32a1SGerd Hoffmann * no valid qTD, try next QH 1826f1ae32a1SGerd Hoffmann */ 1827f1ae32a1SGerd Hoffmann } else { 1828ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_HORIZONTALQH); 1829f1ae32a1SGerd Hoffmann } 1830f1ae32a1SGerd Hoffmann 1831f1ae32a1SGerd Hoffmann return 1; 1832f1ae32a1SGerd Hoffmann } 1833f1ae32a1SGerd Hoffmann 1834f1ae32a1SGerd Hoffmann /* Section 4.10.2 - paragraph 4 */ 1835ae0138a8SGerd Hoffmann static int ehci_state_fetchqtd(EHCIQueue *q) 1836f1ae32a1SGerd Hoffmann { 1837eb36a88eSGerd Hoffmann EHCIqtd qtd; 1838eb36a88eSGerd Hoffmann EHCIPacket *p; 1839b4ea8664SHans de Goede int again = 1; 1840f1ae32a1SGerd Hoffmann 184155903f1dSGerd Hoffmann if (get_dwords(q->ehci, NLPTR_GET(q->qtdaddr), (uint32_t *) &qtd, 184255903f1dSGerd Hoffmann sizeof(EHCIqtd) >> 2) < 0) { 184355903f1dSGerd Hoffmann return 0; 184455903f1dSGerd Hoffmann } 1845eb36a88eSGerd Hoffmann ehci_trace_qtd(q, NLPTR_GET(q->qtdaddr), &qtd); 1846f1ae32a1SGerd Hoffmann 1847773dc9cdSGerd Hoffmann p = QTAILQ_FIRST(&q->packets); 1848287fd3f1SGerd Hoffmann if (p != NULL) { 1849c6432634SHans de Goede if (!ehci_verify_qtd(p, &qtd)) { 1850287fd3f1SGerd Hoffmann ehci_cancel_queue(q); 1851d066c57bSHans de Goede if (qtd.token & QTD_TOKEN_ACTIVE) { 1852d066c57bSHans de Goede ehci_trace_guest_bug(q->ehci, "guest updated active qTD"); 1853d066c57bSHans de Goede } 1854287fd3f1SGerd Hoffmann p = NULL; 1855287fd3f1SGerd Hoffmann } else { 1856287fd3f1SGerd Hoffmann p->qtd = qtd; 1857287fd3f1SGerd Hoffmann ehci_qh_do_overlay(q); 1858287fd3f1SGerd Hoffmann } 1859287fd3f1SGerd Hoffmann } 1860287fd3f1SGerd Hoffmann 1861287fd3f1SGerd Hoffmann if (!(qtd.token & QTD_TOKEN_ACTIVE)) { 1862287fd3f1SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_HORIZONTALQH); 1863287fd3f1SGerd Hoffmann } else if (p != NULL) { 1864adf47834SHans de Goede switch (p->async) { 1865adf47834SHans de Goede case EHCI_ASYNC_NONE: 1866ef5b2344SHans de Goede case EHCI_ASYNC_INITIALIZED: 1867cae5d3f4SHans de Goede /* Not yet executed (MULT), or previously nacked (int) packet */ 1868adf47834SHans de Goede ehci_set_state(q->ehci, q->async, EST_EXECUTE); 1869adf47834SHans de Goede break; 1870adf47834SHans de Goede case EHCI_ASYNC_INFLIGHT: 1871b4ea8664SHans de Goede /* Check if the guest has added new tds to the queue */ 187201e26b0eSHans de Goede again = ehci_fill_queue(QTAILQ_LAST(&q->packets, pkts_head)); 1873ef5b2344SHans de Goede /* Unfinished async handled packet, go horizontal */ 1874ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_HORIZONTALQH); 1875adf47834SHans de Goede break; 1876adf47834SHans de Goede case EHCI_ASYNC_FINISHED: 1877e3fdfd48SHans de Goede /* Complete executing of the packet */ 1878ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_EXECUTING); 1879adf47834SHans de Goede break; 1880773dc9cdSGerd Hoffmann } 1881287fd3f1SGerd Hoffmann } else { 1882eb36a88eSGerd Hoffmann p = ehci_alloc_packet(q); 1883eb36a88eSGerd Hoffmann p->qtdaddr = q->qtdaddr; 1884eb36a88eSGerd Hoffmann p->qtd = qtd; 1885ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_EXECUTE); 1886f1ae32a1SGerd Hoffmann } 1887f1ae32a1SGerd Hoffmann 1888f1ae32a1SGerd Hoffmann return again; 1889f1ae32a1SGerd Hoffmann } 1890f1ae32a1SGerd Hoffmann 1891ae0138a8SGerd Hoffmann static int ehci_state_horizqh(EHCIQueue *q) 1892f1ae32a1SGerd Hoffmann { 1893f1ae32a1SGerd Hoffmann int again = 0; 1894f1ae32a1SGerd Hoffmann 1895ae0138a8SGerd Hoffmann if (ehci_get_fetch_addr(q->ehci, q->async) != q->qh.next) { 1896ae0138a8SGerd Hoffmann ehci_set_fetch_addr(q->ehci, q->async, q->qh.next); 1897ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_FETCHENTRY); 1898f1ae32a1SGerd Hoffmann again = 1; 1899f1ae32a1SGerd Hoffmann } else { 1900ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_ACTIVE); 1901f1ae32a1SGerd Hoffmann } 1902f1ae32a1SGerd Hoffmann 1903f1ae32a1SGerd Hoffmann return again; 1904f1ae32a1SGerd Hoffmann } 1905f1ae32a1SGerd Hoffmann 190601e26b0eSHans de Goede /* Returns "again" */ 1907eff6dce7SHans de Goede static int ehci_fill_queue(EHCIPacket *p) 1908773dc9cdSGerd Hoffmann { 190936dfe324SHans de Goede USBEndpoint *ep = p->packet.ep; 1910773dc9cdSGerd Hoffmann EHCIQueue *q = p->queue; 1911773dc9cdSGerd Hoffmann EHCIqtd qtd = p->qtd; 1912601a2347SHans de Goede uint32_t qtdaddr; 1913773dc9cdSGerd Hoffmann 1914773dc9cdSGerd Hoffmann for (;;) { 1915773dc9cdSGerd Hoffmann if (NLPTR_TBIT(qtd.next) != 0) { 1916773dc9cdSGerd Hoffmann break; 1917773dc9cdSGerd Hoffmann } 1918773dc9cdSGerd Hoffmann qtdaddr = qtd.next; 1919e3a36bceSHans de Goede /* 1920e3a36bceSHans de Goede * Detect circular td lists, Windows creates these, counting on the 1921e3a36bceSHans de Goede * active bit going low after execution to make the queue stop. 1922e3a36bceSHans de Goede */ 1923601a2347SHans de Goede QTAILQ_FOREACH(p, &q->packets, next) { 1924601a2347SHans de Goede if (p->qtdaddr == qtdaddr) { 1925601a2347SHans de Goede goto leave; 1926601a2347SHans de Goede } 1927e3a36bceSHans de Goede } 192855903f1dSGerd Hoffmann if (get_dwords(q->ehci, NLPTR_GET(qtdaddr), 192955903f1dSGerd Hoffmann (uint32_t *) &qtd, sizeof(EHCIqtd) >> 2) < 0) { 193055903f1dSGerd Hoffmann return -1; 193155903f1dSGerd Hoffmann } 1932773dc9cdSGerd Hoffmann ehci_trace_qtd(q, NLPTR_GET(qtdaddr), &qtd); 1933773dc9cdSGerd Hoffmann if (!(qtd.token & QTD_TOKEN_ACTIVE)) { 1934773dc9cdSGerd Hoffmann break; 1935773dc9cdSGerd Hoffmann } 1936bbbc39ccSHans de Goede if (!ehci_verify_pid(q, &qtd)) { 1937bbbc39ccSHans de Goede ehci_trace_guest_bug(q->ehci, "guest queued token with wrong pid"); 1938bbbc39ccSHans de Goede break; 1939bbbc39ccSHans de Goede } 1940773dc9cdSGerd Hoffmann p = ehci_alloc_packet(q); 1941773dc9cdSGerd Hoffmann p->qtdaddr = qtdaddr; 1942773dc9cdSGerd Hoffmann p->qtd = qtd; 194301e26b0eSHans de Goede if (ehci_execute(p, "queue") == -1) { 194401e26b0eSHans de Goede return -1; 1945eff6dce7SHans de Goede } 194601e26b0eSHans de Goede assert(p->packet.status == USB_RET_ASYNC); 1947773dc9cdSGerd Hoffmann p->async = EHCI_ASYNC_INFLIGHT; 1948773dc9cdSGerd Hoffmann } 1949601a2347SHans de Goede leave: 195036dfe324SHans de Goede usb_device_flush_ep_queue(ep->dev, ep); 195101e26b0eSHans de Goede return 1; 1952773dc9cdSGerd Hoffmann } 1953773dc9cdSGerd Hoffmann 1954ae0138a8SGerd Hoffmann static int ehci_state_execute(EHCIQueue *q) 1955f1ae32a1SGerd Hoffmann { 1956eb36a88eSGerd Hoffmann EHCIPacket *p = QTAILQ_FIRST(&q->packets); 1957f1ae32a1SGerd Hoffmann int again = 0; 1958f1ae32a1SGerd Hoffmann 1959eb36a88eSGerd Hoffmann assert(p != NULL); 1960eb36a88eSGerd Hoffmann assert(p->qtdaddr == q->qtdaddr); 1961eb36a88eSGerd Hoffmann 1962f1ae32a1SGerd Hoffmann if (ehci_qh_do_overlay(q) != 0) { 1963f1ae32a1SGerd Hoffmann return -1; 1964f1ae32a1SGerd Hoffmann } 1965f1ae32a1SGerd Hoffmann 1966f1ae32a1SGerd Hoffmann // TODO verify enough time remains in the uframe as in 4.4.1.1 1967f1ae32a1SGerd Hoffmann // TODO write back ptr to async list when done or out of time 1968f1ae32a1SGerd Hoffmann 1969cae5d3f4SHans de Goede /* 4.10.3, bottom of page 82, go horizontal on transaction counter == 0 */ 1970cae5d3f4SHans de Goede if (!q->async && q->transact_ctr == 0) { 1971ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_HORIZONTALQH); 1972f1ae32a1SGerd Hoffmann again = 1; 1973f1ae32a1SGerd Hoffmann goto out; 1974f1ae32a1SGerd Hoffmann } 1975f1ae32a1SGerd Hoffmann 1976ae0138a8SGerd Hoffmann if (q->async) { 1977f1ae32a1SGerd Hoffmann ehci_set_usbsts(q->ehci, USBSTS_REC); 1978f1ae32a1SGerd Hoffmann } 1979f1ae32a1SGerd Hoffmann 198001e26b0eSHans de Goede again = ehci_execute(p, "process"); 198101e26b0eSHans de Goede if (again == -1) { 1982f1ae32a1SGerd Hoffmann goto out; 1983f1ae32a1SGerd Hoffmann } 198401e26b0eSHans de Goede if (p->packet.status == USB_RET_ASYNC) { 1985f1ae32a1SGerd Hoffmann ehci_flush_qh(q); 1986773dc9cdSGerd Hoffmann trace_usb_ehci_packet_action(p->queue, p, "async"); 1987eb36a88eSGerd Hoffmann p->async = EHCI_ASYNC_INFLIGHT; 1988ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_HORIZONTALQH); 1989cae5d3f4SHans de Goede if (q->async) { 199001e26b0eSHans de Goede again = ehci_fill_queue(p); 1991cae5d3f4SHans de Goede } else { 1992cae5d3f4SHans de Goede again = 1; 1993cae5d3f4SHans de Goede } 1994f1ae32a1SGerd Hoffmann goto out; 1995f1ae32a1SGerd Hoffmann } 1996f1ae32a1SGerd Hoffmann 1997ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_EXECUTING); 1998f1ae32a1SGerd Hoffmann again = 1; 1999f1ae32a1SGerd Hoffmann 2000f1ae32a1SGerd Hoffmann out: 2001f1ae32a1SGerd Hoffmann return again; 2002f1ae32a1SGerd Hoffmann } 2003f1ae32a1SGerd Hoffmann 2004ae0138a8SGerd Hoffmann static int ehci_state_executing(EHCIQueue *q) 2005f1ae32a1SGerd Hoffmann { 2006eb36a88eSGerd Hoffmann EHCIPacket *p = QTAILQ_FIRST(&q->packets); 2007f1ae32a1SGerd Hoffmann 2008eb36a88eSGerd Hoffmann assert(p != NULL); 2009eb36a88eSGerd Hoffmann assert(p->qtdaddr == q->qtdaddr); 2010eb36a88eSGerd Hoffmann 2011f1ae32a1SGerd Hoffmann ehci_execute_complete(q); 2012f1ae32a1SGerd Hoffmann 2013cae5d3f4SHans de Goede /* 4.10.3 */ 2014cae5d3f4SHans de Goede if (!q->async && q->transact_ctr > 0) { 2015cae5d3f4SHans de Goede q->transact_ctr--; 2016f1ae32a1SGerd Hoffmann } 2017f1ae32a1SGerd Hoffmann 2018f1ae32a1SGerd Hoffmann /* 4.10.5 */ 2019e696b1daSHans de Goede if (p->packet.status == USB_RET_NAK) { 2020ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_HORIZONTALQH); 2021f1ae32a1SGerd Hoffmann } else { 2022ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_WRITEBACK); 2023f1ae32a1SGerd Hoffmann } 2024f1ae32a1SGerd Hoffmann 2025f1ae32a1SGerd Hoffmann ehci_flush_qh(q); 2026574ef171SHans de Goede return 1; 2027f1ae32a1SGerd Hoffmann } 2028f1ae32a1SGerd Hoffmann 2029f1ae32a1SGerd Hoffmann 2030ae0138a8SGerd Hoffmann static int ehci_state_writeback(EHCIQueue *q) 2031f1ae32a1SGerd Hoffmann { 2032eb36a88eSGerd Hoffmann EHCIPacket *p = QTAILQ_FIRST(&q->packets); 20334ed1c57aSGerd Hoffmann uint32_t *qtd, addr; 2034f1ae32a1SGerd Hoffmann int again = 0; 2035f1ae32a1SGerd Hoffmann 2036f1ae32a1SGerd Hoffmann /* Write back the QTD from the QH area */ 2037eb36a88eSGerd Hoffmann assert(p != NULL); 2038eb36a88eSGerd Hoffmann assert(p->qtdaddr == q->qtdaddr); 2039eb36a88eSGerd Hoffmann 2040eb36a88eSGerd Hoffmann ehci_trace_qtd(q, NLPTR_GET(p->qtdaddr), (EHCIqtd *) &q->qh.next_qtd); 20414ed1c57aSGerd Hoffmann qtd = (uint32_t *) &q->qh.next_qtd; 20424ed1c57aSGerd Hoffmann addr = NLPTR_GET(p->qtdaddr); 20434ed1c57aSGerd Hoffmann put_dwords(q->ehci, addr + 2 * sizeof(uint32_t), qtd + 2, 2); 2044eb36a88eSGerd Hoffmann ehci_free_packet(p); 2045f1ae32a1SGerd Hoffmann 2046f1ae32a1SGerd Hoffmann /* 2047f1ae32a1SGerd Hoffmann * EHCI specs say go horizontal here. 2048f1ae32a1SGerd Hoffmann * 2049f1ae32a1SGerd Hoffmann * We can also advance the queue here for performance reasons. We 2050f1ae32a1SGerd Hoffmann * need to take care to only take that shortcut in case we've 2051f1ae32a1SGerd Hoffmann * processed the qtd just written back without errors, i.e. halt 2052f1ae32a1SGerd Hoffmann * bit is clear. 2053f1ae32a1SGerd Hoffmann */ 2054f1ae32a1SGerd Hoffmann if (q->qh.token & QTD_TOKEN_HALT) { 2055ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_HORIZONTALQH); 2056f1ae32a1SGerd Hoffmann again = 1; 2057f1ae32a1SGerd Hoffmann } else { 2058ae0138a8SGerd Hoffmann ehci_set_state(q->ehci, q->async, EST_ADVANCEQUEUE); 2059f1ae32a1SGerd Hoffmann again = 1; 2060f1ae32a1SGerd Hoffmann } 2061f1ae32a1SGerd Hoffmann return again; 2062f1ae32a1SGerd Hoffmann } 2063f1ae32a1SGerd Hoffmann 2064f1ae32a1SGerd Hoffmann /* 2065f1ae32a1SGerd Hoffmann * This is the state machine that is common to both async and periodic 2066f1ae32a1SGerd Hoffmann */ 2067f1ae32a1SGerd Hoffmann 2068ae0138a8SGerd Hoffmann static void ehci_advance_state(EHCIState *ehci, int async) 2069f1ae32a1SGerd Hoffmann { 2070f1ae32a1SGerd Hoffmann EHCIQueue *q = NULL; 2071f1ae32a1SGerd Hoffmann int again; 2072f1ae32a1SGerd Hoffmann 2073f1ae32a1SGerd Hoffmann do { 2074f1ae32a1SGerd Hoffmann switch(ehci_get_state(ehci, async)) { 2075f1ae32a1SGerd Hoffmann case EST_WAITLISTHEAD: 2076f1ae32a1SGerd Hoffmann again = ehci_state_waitlisthead(ehci, async); 2077f1ae32a1SGerd Hoffmann break; 2078f1ae32a1SGerd Hoffmann 2079f1ae32a1SGerd Hoffmann case EST_FETCHENTRY: 2080f1ae32a1SGerd Hoffmann again = ehci_state_fetchentry(ehci, async); 2081f1ae32a1SGerd Hoffmann break; 2082f1ae32a1SGerd Hoffmann 2083f1ae32a1SGerd Hoffmann case EST_FETCHQH: 2084f1ae32a1SGerd Hoffmann q = ehci_state_fetchqh(ehci, async); 2085ae0138a8SGerd Hoffmann if (q != NULL) { 2086ae0138a8SGerd Hoffmann assert(q->async == async); 2087ae0138a8SGerd Hoffmann again = 1; 2088ae0138a8SGerd Hoffmann } else { 2089ae0138a8SGerd Hoffmann again = 0; 2090ae0138a8SGerd Hoffmann } 2091f1ae32a1SGerd Hoffmann break; 2092f1ae32a1SGerd Hoffmann 2093f1ae32a1SGerd Hoffmann case EST_FETCHITD: 2094f1ae32a1SGerd Hoffmann again = ehci_state_fetchitd(ehci, async); 2095f1ae32a1SGerd Hoffmann break; 2096f1ae32a1SGerd Hoffmann 2097f1ae32a1SGerd Hoffmann case EST_FETCHSITD: 2098f1ae32a1SGerd Hoffmann again = ehci_state_fetchsitd(ehci, async); 2099f1ae32a1SGerd Hoffmann break; 2100f1ae32a1SGerd Hoffmann 2101f1ae32a1SGerd Hoffmann case EST_ADVANCEQUEUE: 2102cc8d2b65SMarkus Armbruster assert(q != NULL); 2103ae0138a8SGerd Hoffmann again = ehci_state_advqueue(q); 2104f1ae32a1SGerd Hoffmann break; 2105f1ae32a1SGerd Hoffmann 2106f1ae32a1SGerd Hoffmann case EST_FETCHQTD: 2107cc8d2b65SMarkus Armbruster assert(q != NULL); 2108ae0138a8SGerd Hoffmann again = ehci_state_fetchqtd(q); 2109f1ae32a1SGerd Hoffmann break; 2110f1ae32a1SGerd Hoffmann 2111f1ae32a1SGerd Hoffmann case EST_HORIZONTALQH: 2112cc8d2b65SMarkus Armbruster assert(q != NULL); 2113ae0138a8SGerd Hoffmann again = ehci_state_horizqh(q); 2114f1ae32a1SGerd Hoffmann break; 2115f1ae32a1SGerd Hoffmann 2116f1ae32a1SGerd Hoffmann case EST_EXECUTE: 2117cc8d2b65SMarkus Armbruster assert(q != NULL); 2118ae0138a8SGerd Hoffmann again = ehci_state_execute(q); 21193a215326SGerd Hoffmann if (async) { 21203a215326SGerd Hoffmann ehci->async_stepdown = 0; 21213a215326SGerd Hoffmann } 2122f1ae32a1SGerd Hoffmann break; 2123f1ae32a1SGerd Hoffmann 2124f1ae32a1SGerd Hoffmann case EST_EXECUTING: 2125f1ae32a1SGerd Hoffmann assert(q != NULL); 21263a215326SGerd Hoffmann if (async) { 21273a215326SGerd Hoffmann ehci->async_stepdown = 0; 21283a215326SGerd Hoffmann } 2129ae0138a8SGerd Hoffmann again = ehci_state_executing(q); 2130f1ae32a1SGerd Hoffmann break; 2131f1ae32a1SGerd Hoffmann 2132f1ae32a1SGerd Hoffmann case EST_WRITEBACK: 2133f1ae32a1SGerd Hoffmann assert(q != NULL); 2134ae0138a8SGerd Hoffmann again = ehci_state_writeback(q); 213580826240SHans de Goede if (!async) { 213680826240SHans de Goede ehci->periodic_sched_active = PERIODIC_ACTIVE; 213780826240SHans de Goede } 2138f1ae32a1SGerd Hoffmann break; 2139f1ae32a1SGerd Hoffmann 2140f1ae32a1SGerd Hoffmann default: 2141f1ae32a1SGerd Hoffmann fprintf(stderr, "Bad state!\n"); 2142f1ae32a1SGerd Hoffmann again = -1; 2143f1ae32a1SGerd Hoffmann assert(0); 2144f1ae32a1SGerd Hoffmann break; 2145f1ae32a1SGerd Hoffmann } 2146f1ae32a1SGerd Hoffmann 2147f1ae32a1SGerd Hoffmann if (again < 0) { 2148f1ae32a1SGerd Hoffmann fprintf(stderr, "processing error - resetting ehci HC\n"); 2149f1ae32a1SGerd Hoffmann ehci_reset(ehci); 2150f1ae32a1SGerd Hoffmann again = 0; 2151f1ae32a1SGerd Hoffmann } 2152f1ae32a1SGerd Hoffmann } 2153f1ae32a1SGerd Hoffmann while (again); 2154f1ae32a1SGerd Hoffmann } 2155f1ae32a1SGerd Hoffmann 2156f1ae32a1SGerd Hoffmann static void ehci_advance_async_state(EHCIState *ehci) 2157f1ae32a1SGerd Hoffmann { 2158f1ae32a1SGerd Hoffmann const int async = 1; 2159f1ae32a1SGerd Hoffmann 2160f1ae32a1SGerd Hoffmann switch(ehci_get_state(ehci, async)) { 2161f1ae32a1SGerd Hoffmann case EST_INACTIVE: 2162ec807d12SGerd Hoffmann if (!ehci_async_enabled(ehci)) { 2163f1ae32a1SGerd Hoffmann break; 2164f1ae32a1SGerd Hoffmann } 2165f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_ACTIVE); 2166f1ae32a1SGerd Hoffmann // No break, fall through to ACTIVE 2167f1ae32a1SGerd Hoffmann 2168f1ae32a1SGerd Hoffmann case EST_ACTIVE: 2169ec807d12SGerd Hoffmann if (!ehci_async_enabled(ehci)) { 2170f1ae32a1SGerd Hoffmann ehci_queues_rip_all(ehci, async); 2171f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_INACTIVE); 2172f1ae32a1SGerd Hoffmann break; 2173f1ae32a1SGerd Hoffmann } 2174f1ae32a1SGerd Hoffmann 2175f1ae32a1SGerd Hoffmann /* make sure guest has acknowledged the doorbell interrupt */ 2176f1ae32a1SGerd Hoffmann /* TO-DO: is this really needed? */ 2177f1ae32a1SGerd Hoffmann if (ehci->usbsts & USBSTS_IAA) { 2178f1ae32a1SGerd Hoffmann DPRINTF("IAA status bit still set.\n"); 2179f1ae32a1SGerd Hoffmann break; 2180f1ae32a1SGerd Hoffmann } 2181f1ae32a1SGerd Hoffmann 2182f1ae32a1SGerd Hoffmann /* check that address register has been set */ 2183f1ae32a1SGerd Hoffmann if (ehci->asynclistaddr == 0) { 2184f1ae32a1SGerd Hoffmann break; 2185f1ae32a1SGerd Hoffmann } 2186f1ae32a1SGerd Hoffmann 2187f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_WAITLISTHEAD); 2188f1ae32a1SGerd Hoffmann ehci_advance_state(ehci, async); 2189f1ae32a1SGerd Hoffmann 2190f1ae32a1SGerd Hoffmann /* If the doorbell is set, the guest wants to make a change to the 2191f1ae32a1SGerd Hoffmann * schedule. The host controller needs to release cached data. 2192f1ae32a1SGerd Hoffmann * (section 4.8.2) 2193f1ae32a1SGerd Hoffmann */ 2194f1ae32a1SGerd Hoffmann if (ehci->usbcmd & USBCMD_IAAD) { 2195f1ae32a1SGerd Hoffmann /* Remove all unseen qhs from the async qhs queue */ 21968f5457ebSHans de Goede ehci_queues_rip_unseen(ehci, async); 21971defcbd1SGerd Hoffmann trace_usb_ehci_doorbell_ack(); 2198f1ae32a1SGerd Hoffmann ehci->usbcmd &= ~USBCMD_IAAD; 21997efc17afSGerd Hoffmann ehci_raise_irq(ehci, USBSTS_IAA); 2200f1ae32a1SGerd Hoffmann } 2201f1ae32a1SGerd Hoffmann break; 2202f1ae32a1SGerd Hoffmann 2203f1ae32a1SGerd Hoffmann default: 2204f1ae32a1SGerd Hoffmann /* this should only be due to a developer mistake */ 2205f1ae32a1SGerd Hoffmann fprintf(stderr, "ehci: Bad asynchronous state %d. " 2206f1ae32a1SGerd Hoffmann "Resetting to active\n", ehci->astate); 2207f1ae32a1SGerd Hoffmann assert(0); 2208f1ae32a1SGerd Hoffmann } 2209f1ae32a1SGerd Hoffmann } 2210f1ae32a1SGerd Hoffmann 2211f1ae32a1SGerd Hoffmann static void ehci_advance_periodic_state(EHCIState *ehci) 2212f1ae32a1SGerd Hoffmann { 2213f1ae32a1SGerd Hoffmann uint32_t entry; 2214f1ae32a1SGerd Hoffmann uint32_t list; 2215f1ae32a1SGerd Hoffmann const int async = 0; 2216f1ae32a1SGerd Hoffmann 2217f1ae32a1SGerd Hoffmann // 4.6 2218f1ae32a1SGerd Hoffmann 2219f1ae32a1SGerd Hoffmann switch(ehci_get_state(ehci, async)) { 2220f1ae32a1SGerd Hoffmann case EST_INACTIVE: 2221ec807d12SGerd Hoffmann if (!(ehci->frindex & 7) && ehci_periodic_enabled(ehci)) { 2222f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_ACTIVE); 2223f1ae32a1SGerd Hoffmann // No break, fall through to ACTIVE 2224f1ae32a1SGerd Hoffmann } else 2225f1ae32a1SGerd Hoffmann break; 2226f1ae32a1SGerd Hoffmann 2227f1ae32a1SGerd Hoffmann case EST_ACTIVE: 2228ec807d12SGerd Hoffmann if (!(ehci->frindex & 7) && !ehci_periodic_enabled(ehci)) { 2229f1ae32a1SGerd Hoffmann ehci_queues_rip_all(ehci, async); 2230f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_INACTIVE); 2231f1ae32a1SGerd Hoffmann break; 2232f1ae32a1SGerd Hoffmann } 2233f1ae32a1SGerd Hoffmann 2234f1ae32a1SGerd Hoffmann list = ehci->periodiclistbase & 0xfffff000; 2235f1ae32a1SGerd Hoffmann /* check that register has been set */ 2236f1ae32a1SGerd Hoffmann if (list == 0) { 2237f1ae32a1SGerd Hoffmann break; 2238f1ae32a1SGerd Hoffmann } 2239f1ae32a1SGerd Hoffmann list |= ((ehci->frindex & 0x1ff8) >> 1); 2240f1ae32a1SGerd Hoffmann 224155903f1dSGerd Hoffmann if (get_dwords(ehci, list, &entry, 1) < 0) { 224255903f1dSGerd Hoffmann break; 224355903f1dSGerd Hoffmann } 2244f1ae32a1SGerd Hoffmann 2245f1ae32a1SGerd Hoffmann DPRINTF("PERIODIC state adv fr=%d. [%08X] -> %08X\n", 2246f1ae32a1SGerd Hoffmann ehci->frindex / 8, list, entry); 2247f1ae32a1SGerd Hoffmann ehci_set_fetch_addr(ehci, async,entry); 2248f1ae32a1SGerd Hoffmann ehci_set_state(ehci, async, EST_FETCHENTRY); 2249f1ae32a1SGerd Hoffmann ehci_advance_state(ehci, async); 22508f5457ebSHans de Goede ehci_queues_rip_unused(ehci, async); 2251f1ae32a1SGerd Hoffmann break; 2252f1ae32a1SGerd Hoffmann 2253f1ae32a1SGerd Hoffmann default: 2254f1ae32a1SGerd Hoffmann /* this should only be due to a developer mistake */ 2255f1ae32a1SGerd Hoffmann fprintf(stderr, "ehci: Bad periodic state %d. " 2256f1ae32a1SGerd Hoffmann "Resetting to active\n", ehci->pstate); 2257f1ae32a1SGerd Hoffmann assert(0); 2258f1ae32a1SGerd Hoffmann } 2259f1ae32a1SGerd Hoffmann } 2260f1ae32a1SGerd Hoffmann 22619359a58bSHans de Goede static void ehci_update_frindex(EHCIState *ehci, int uframes) 22626ceced0bSGerd Hoffmann { 22636ceced0bSGerd Hoffmann int i; 22646ceced0bSGerd Hoffmann 22659359a58bSHans de Goede if (!ehci_enabled(ehci) && ehci->pstate == EST_INACTIVE) { 22666ceced0bSGerd Hoffmann return; 22676ceced0bSGerd Hoffmann } 22686ceced0bSGerd Hoffmann 22699359a58bSHans de Goede for (i = 0; i < uframes; i++) { 22709359a58bSHans de Goede ehci->frindex++; 22716ceced0bSGerd Hoffmann 22726ceced0bSGerd Hoffmann if (ehci->frindex == 0x00002000) { 22737efc17afSGerd Hoffmann ehci_raise_irq(ehci, USBSTS_FLR); 22746ceced0bSGerd Hoffmann } 22756ceced0bSGerd Hoffmann 22766ceced0bSGerd Hoffmann if (ehci->frindex == 0x00004000) { 22777efc17afSGerd Hoffmann ehci_raise_irq(ehci, USBSTS_FLR); 22786ceced0bSGerd Hoffmann ehci->frindex = 0; 2279ffa1f2e0SHans de Goede if (ehci->usbsts_frindex >= 0x00004000) { 22807efc17afSGerd Hoffmann ehci->usbsts_frindex -= 0x00004000; 22817efc17afSGerd Hoffmann } else { 22827efc17afSGerd Hoffmann ehci->usbsts_frindex = 0; 22837efc17afSGerd Hoffmann } 22846ceced0bSGerd Hoffmann } 22856ceced0bSGerd Hoffmann } 22866ceced0bSGerd Hoffmann } 22876ceced0bSGerd Hoffmann 2288f1ae32a1SGerd Hoffmann static void ehci_frame_timer(void *opaque) 2289f1ae32a1SGerd Hoffmann { 2290f1ae32a1SGerd Hoffmann EHCIState *ehci = opaque; 22917efc17afSGerd Hoffmann int need_timer = 0; 2292f1ae32a1SGerd Hoffmann int64_t expire_time, t_now; 2293f1ae32a1SGerd Hoffmann uint64_t ns_elapsed; 22949359a58bSHans de Goede int uframes, skipped_uframes; 2295f1ae32a1SGerd Hoffmann int i; 2296f1ae32a1SGerd Hoffmann 2297f1ae32a1SGerd Hoffmann t_now = qemu_get_clock_ns(vm_clock); 2298f1ae32a1SGerd Hoffmann ns_elapsed = t_now - ehci->last_run_ns; 22999359a58bSHans de Goede uframes = ns_elapsed / UFRAME_TIMER_NS; 2300f1ae32a1SGerd Hoffmann 23013a215326SGerd Hoffmann if (ehci_periodic_enabled(ehci) || ehci->pstate != EST_INACTIVE) { 23027efc17afSGerd Hoffmann need_timer++; 23033a215326SGerd Hoffmann 23049359a58bSHans de Goede if (uframes > (ehci->maxframes * 8)) { 23059359a58bSHans de Goede skipped_uframes = uframes - (ehci->maxframes * 8); 23069359a58bSHans de Goede ehci_update_frindex(ehci, skipped_uframes); 23079359a58bSHans de Goede ehci->last_run_ns += UFRAME_TIMER_NS * skipped_uframes; 23089359a58bSHans de Goede uframes -= skipped_uframes; 23099359a58bSHans de Goede DPRINTF("WARNING - EHCI skipped %d uframes\n", skipped_uframes); 2310f1ae32a1SGerd Hoffmann } 2311f1ae32a1SGerd Hoffmann 23129359a58bSHans de Goede for (i = 0; i < uframes; i++) { 23138f74ed1eSHans de Goede /* 23148f74ed1eSHans de Goede * If we're running behind schedule, we should not catch up 23158f74ed1eSHans de Goede * too fast, as that will make some guests unhappy: 23169359a58bSHans de Goede * 1) We must process a minimum of MIN_UFR_PER_TICK frames, 23178f74ed1eSHans de Goede * otherwise we will never catch up 23188f74ed1eSHans de Goede * 2) Process frames until the guest has requested an irq (IOC) 23198f74ed1eSHans de Goede */ 23209359a58bSHans de Goede if (i >= MIN_UFR_PER_TICK) { 23218f74ed1eSHans de Goede ehci_commit_irq(ehci); 23228f74ed1eSHans de Goede if ((ehci->usbsts & USBINTR_MASK) & ehci->usbintr) { 23238f74ed1eSHans de Goede break; 23248f74ed1eSHans de Goede } 23258f74ed1eSHans de Goede } 232680826240SHans de Goede if (ehci->periodic_sched_active) { 232780826240SHans de Goede ehci->periodic_sched_active--; 232880826240SHans de Goede } 2329f020ed36SGerd Hoffmann ehci_update_frindex(ehci, 1); 23309359a58bSHans de Goede if ((ehci->frindex & 7) == 0) { 2331f020ed36SGerd Hoffmann ehci_advance_periodic_state(ehci); 23329359a58bSHans de Goede } 23339359a58bSHans de Goede ehci->last_run_ns += UFRAME_TIMER_NS; 2334f1ae32a1SGerd Hoffmann } 23353a215326SGerd Hoffmann } else { 233680826240SHans de Goede ehci->periodic_sched_active = 0; 23379359a58bSHans de Goede ehci_update_frindex(ehci, uframes); 23389359a58bSHans de Goede ehci->last_run_ns += UFRAME_TIMER_NS * uframes; 23393a215326SGerd Hoffmann } 2340f1ae32a1SGerd Hoffmann 234180826240SHans de Goede if (ehci->periodic_sched_active) { 234280826240SHans de Goede ehci->async_stepdown = 0; 234380826240SHans de Goede } else if (ehci->async_stepdown < ehci->maxframes / 2) { 234480826240SHans de Goede ehci->async_stepdown++; 234580826240SHans de Goede } 234680826240SHans de Goede 2347f1ae32a1SGerd Hoffmann /* Async is not inside loop since it executes everything it can once 2348f1ae32a1SGerd Hoffmann * called 2349f1ae32a1SGerd Hoffmann */ 23503a215326SGerd Hoffmann if (ehci_async_enabled(ehci) || ehci->astate != EST_INACTIVE) { 23517efc17afSGerd Hoffmann need_timer++; 2352afb7a0b8SGerd Hoffmann ehci_advance_async_state(ehci); 23533a215326SGerd Hoffmann } 2354f1ae32a1SGerd Hoffmann 23557efc17afSGerd Hoffmann ehci_commit_irq(ehci); 23567efc17afSGerd Hoffmann if (ehci->usbsts_pending) { 23577efc17afSGerd Hoffmann need_timer++; 23587efc17afSGerd Hoffmann ehci->async_stepdown = 0; 2359f1ae32a1SGerd Hoffmann } 2360f0ad01f9SGerd Hoffmann 236140862309SGerd Hoffmann if (ehci_enabled(ehci) && (ehci->usbintr & USBSTS_FLR)) { 236240862309SGerd Hoffmann need_timer++; 236340862309SGerd Hoffmann } 236440862309SGerd Hoffmann 23657efc17afSGerd Hoffmann if (need_timer) { 236644272b0fSHans de Goede /* If we've raised int, we speed up the timer, so that we quickly 236744272b0fSHans de Goede * notice any new packets queued up in response */ 236844272b0fSHans de Goede if (ehci->int_req_by_async && (ehci->usbsts & USBSTS_INT)) { 236952c15e59SHans de Goede expire_time = t_now + get_ticks_per_sec() / (FRAME_TIMER_FREQ * 4); 237044272b0fSHans de Goede ehci->int_req_by_async = false; 237144272b0fSHans de Goede } else { 2372afb7a0b8SGerd Hoffmann expire_time = t_now + (get_ticks_per_sec() 2373afb7a0b8SGerd Hoffmann * (ehci->async_stepdown+1) / FRAME_TIMER_FREQ); 237444272b0fSHans de Goede } 23757efc17afSGerd Hoffmann qemu_mod_timer(ehci->frame_timer, expire_time); 23767efc17afSGerd Hoffmann } 2377daf25307SGerd Hoffmann } 2378f1ae32a1SGerd Hoffmann 23793e4f910cSGerd Hoffmann static const MemoryRegionOps ehci_mmio_caps_ops = { 23803e4f910cSGerd Hoffmann .read = ehci_caps_read, 23813e4f910cSGerd Hoffmann .valid.min_access_size = 1, 23823e4f910cSGerd Hoffmann .valid.max_access_size = 4, 23833e4f910cSGerd Hoffmann .impl.min_access_size = 1, 23843e4f910cSGerd Hoffmann .impl.max_access_size = 1, 23853e4f910cSGerd Hoffmann .endianness = DEVICE_LITTLE_ENDIAN, 23863e4f910cSGerd Hoffmann }; 23873e4f910cSGerd Hoffmann 23883e4f910cSGerd Hoffmann static const MemoryRegionOps ehci_mmio_opreg_ops = { 23893e4f910cSGerd Hoffmann .read = ehci_opreg_read, 23903e4f910cSGerd Hoffmann .write = ehci_opreg_write, 23913e4f910cSGerd Hoffmann .valid.min_access_size = 4, 23923e4f910cSGerd Hoffmann .valid.max_access_size = 4, 23933e4f910cSGerd Hoffmann .endianness = DEVICE_LITTLE_ENDIAN, 23943e4f910cSGerd Hoffmann }; 23953e4f910cSGerd Hoffmann 23963e4f910cSGerd Hoffmann static const MemoryRegionOps ehci_mmio_port_ops = { 23973e4f910cSGerd Hoffmann .read = ehci_port_read, 23983e4f910cSGerd Hoffmann .write = ehci_port_write, 23993e4f910cSGerd Hoffmann .valid.min_access_size = 4, 24003e4f910cSGerd Hoffmann .valid.max_access_size = 4, 2401f1ae32a1SGerd Hoffmann .endianness = DEVICE_LITTLE_ENDIAN, 2402f1ae32a1SGerd Hoffmann }; 2403f1ae32a1SGerd Hoffmann 2404f1ae32a1SGerd Hoffmann static USBPortOps ehci_port_ops = { 2405f1ae32a1SGerd Hoffmann .attach = ehci_attach, 2406f1ae32a1SGerd Hoffmann .detach = ehci_detach, 2407f1ae32a1SGerd Hoffmann .child_detach = ehci_child_detach, 2408f1ae32a1SGerd Hoffmann .wakeup = ehci_wakeup, 2409f1ae32a1SGerd Hoffmann .complete = ehci_async_complete_packet, 2410f1ae32a1SGerd Hoffmann }; 2411f1ae32a1SGerd Hoffmann 2412f1ae32a1SGerd Hoffmann static USBBusOps ehci_bus_ops = { 2413f1ae32a1SGerd Hoffmann .register_companion = ehci_register_companion, 241480826240SHans de Goede .wakeup_endpoint = ehci_wakeup_endpoint, 2415f1ae32a1SGerd Hoffmann }; 2416f1ae32a1SGerd Hoffmann 24179359a58bSHans de Goede static void usb_ehci_pre_save(void *opaque) 24189359a58bSHans de Goede { 24199359a58bSHans de Goede EHCIState *ehci = opaque; 24209359a58bSHans de Goede uint32_t new_frindex; 24219359a58bSHans de Goede 24229359a58bSHans de Goede /* Round down frindex to a multiple of 8 for migration compatibility */ 24239359a58bSHans de Goede new_frindex = ehci->frindex & ~7; 24249359a58bSHans de Goede ehci->last_run_ns -= (ehci->frindex - new_frindex) * UFRAME_TIMER_NS; 24259359a58bSHans de Goede ehci->frindex = new_frindex; 24269359a58bSHans de Goede } 24279359a58bSHans de Goede 24289a773408SGerd Hoffmann static int usb_ehci_post_load(void *opaque, int version_id) 24299a773408SGerd Hoffmann { 24309a773408SGerd Hoffmann EHCIState *s = opaque; 24319a773408SGerd Hoffmann int i; 24329a773408SGerd Hoffmann 24339a773408SGerd Hoffmann for (i = 0; i < NB_PORTS; i++) { 24349a773408SGerd Hoffmann USBPort *companion = s->companion_ports[i]; 24359a773408SGerd Hoffmann if (companion == NULL) { 24369a773408SGerd Hoffmann continue; 24379a773408SGerd Hoffmann } 24389a773408SGerd Hoffmann if (s->portsc[i] & PORTSC_POWNER) { 24399a773408SGerd Hoffmann companion->dev = s->ports[i].dev; 24409a773408SGerd Hoffmann } else { 24419a773408SGerd Hoffmann companion->dev = NULL; 24429a773408SGerd Hoffmann } 24439a773408SGerd Hoffmann } 24449a773408SGerd Hoffmann 24459a773408SGerd Hoffmann return 0; 24469a773408SGerd Hoffmann } 24479a773408SGerd Hoffmann 2448ceab6f96SHans de Goede static void usb_ehci_vm_state_change(void *opaque, int running, RunState state) 2449ceab6f96SHans de Goede { 2450ceab6f96SHans de Goede EHCIState *ehci = opaque; 2451ceab6f96SHans de Goede 2452ceab6f96SHans de Goede /* 2453ceab6f96SHans de Goede * We don't migrate the EHCIQueue-s, instead we rebuild them for the 2454ceab6f96SHans de Goede * schedule in guest memory. We must do the rebuilt ASAP, so that 2455ceab6f96SHans de Goede * USB-devices which have async handled packages have a packet in the 2456ceab6f96SHans de Goede * ep queue to match the completion with. 2457ceab6f96SHans de Goede */ 2458ceab6f96SHans de Goede if (state == RUN_STATE_RUNNING) { 2459ceab6f96SHans de Goede ehci_advance_async_state(ehci); 2460ceab6f96SHans de Goede } 2461ceab6f96SHans de Goede 2462ceab6f96SHans de Goede /* 2463ceab6f96SHans de Goede * The schedule rebuilt from guest memory could cause the migration dest 2464ceab6f96SHans de Goede * to miss a QH unlink, and fail to cancel packets, since the unlinked QH 2465ceab6f96SHans de Goede * will never have existed on the destination. Therefor we must flush the 2466ceab6f96SHans de Goede * async schedule on savevm to catch any not yet noticed unlinks. 2467ceab6f96SHans de Goede */ 2468ceab6f96SHans de Goede if (state == RUN_STATE_SAVE_VM) { 2469ceab6f96SHans de Goede ehci_advance_async_state(ehci); 2470ceab6f96SHans de Goede ehci_queues_rip_unseen(ehci, 1); 2471ceab6f96SHans de Goede } 2472ceab6f96SHans de Goede } 2473ceab6f96SHans de Goede 24740bf96f94SGerd Hoffmann const VMStateDescription vmstate_ehci = { 24755010d4dcSPeter Crosthwaite .name = "ehci-core", 24766d3b6d3dSGerd Hoffmann .version_id = 2, 24776d3b6d3dSGerd Hoffmann .minimum_version_id = 1, 24789359a58bSHans de Goede .pre_save = usb_ehci_pre_save, 24799a773408SGerd Hoffmann .post_load = usb_ehci_post_load, 24809a773408SGerd Hoffmann .fields = (VMStateField[]) { 24819a773408SGerd Hoffmann /* mmio registers */ 24829a773408SGerd Hoffmann VMSTATE_UINT32(usbcmd, EHCIState), 24839a773408SGerd Hoffmann VMSTATE_UINT32(usbsts, EHCIState), 24846d3b6d3dSGerd Hoffmann VMSTATE_UINT32_V(usbsts_pending, EHCIState, 2), 24856d3b6d3dSGerd Hoffmann VMSTATE_UINT32_V(usbsts_frindex, EHCIState, 2), 24869a773408SGerd Hoffmann VMSTATE_UINT32(usbintr, EHCIState), 24879a773408SGerd Hoffmann VMSTATE_UINT32(frindex, EHCIState), 24889a773408SGerd Hoffmann VMSTATE_UINT32(ctrldssegment, EHCIState), 24899a773408SGerd Hoffmann VMSTATE_UINT32(periodiclistbase, EHCIState), 24909a773408SGerd Hoffmann VMSTATE_UINT32(asynclistaddr, EHCIState), 24919a773408SGerd Hoffmann VMSTATE_UINT32(configflag, EHCIState), 24929a773408SGerd Hoffmann VMSTATE_UINT32(portsc[0], EHCIState), 24939a773408SGerd Hoffmann VMSTATE_UINT32(portsc[1], EHCIState), 24949a773408SGerd Hoffmann VMSTATE_UINT32(portsc[2], EHCIState), 24959a773408SGerd Hoffmann VMSTATE_UINT32(portsc[3], EHCIState), 24969a773408SGerd Hoffmann VMSTATE_UINT32(portsc[4], EHCIState), 24979a773408SGerd Hoffmann VMSTATE_UINT32(portsc[5], EHCIState), 24989a773408SGerd Hoffmann /* frame timer */ 24999a773408SGerd Hoffmann VMSTATE_TIMER(frame_timer, EHCIState), 25009a773408SGerd Hoffmann VMSTATE_UINT64(last_run_ns, EHCIState), 25019a773408SGerd Hoffmann VMSTATE_UINT32(async_stepdown, EHCIState), 25029a773408SGerd Hoffmann /* schedule state */ 25039a773408SGerd Hoffmann VMSTATE_UINT32(astate, EHCIState), 25049a773408SGerd Hoffmann VMSTATE_UINT32(pstate, EHCIState), 25059a773408SGerd Hoffmann VMSTATE_UINT32(a_fetch_addr, EHCIState), 25069a773408SGerd Hoffmann VMSTATE_UINT32(p_fetch_addr, EHCIState), 25079a773408SGerd Hoffmann VMSTATE_END_OF_LIST() 25089a773408SGerd Hoffmann } 2509f1ae32a1SGerd Hoffmann }; 2510f1ae32a1SGerd Hoffmann 251108f4c90bSAndreas Färber void usb_ehci_realize(EHCIState *s, DeviceState *dev, Error **errp) 2512f1ae32a1SGerd Hoffmann { 2513f1ae32a1SGerd Hoffmann int i; 2514f1ae32a1SGerd Hoffmann 2515*cc8d6a84SKuo-Jung Su if (s->portnr > NB_PORTS) { 2516*cc8d6a84SKuo-Jung Su error_setg(errp, "Too many ports! Max. port number is %d.", 2517*cc8d6a84SKuo-Jung Su NB_PORTS); 2518*cc8d6a84SKuo-Jung Su return; 2519*cc8d6a84SKuo-Jung Su } 2520*cc8d6a84SKuo-Jung Su 2521d4614cc3SAndreas Färber usb_bus_new(&s->bus, &ehci_bus_ops, dev); 2522*cc8d6a84SKuo-Jung Su for (i = 0; i < s->portnr; i++) { 2523d4614cc3SAndreas Färber usb_register_port(&s->bus, &s->ports[i], s, i, &ehci_port_ops, 2524d4614cc3SAndreas Färber USB_SPEED_MASK_HIGH); 2525d4614cc3SAndreas Färber s->ports[i].dev = 0; 2526d4614cc3SAndreas Färber } 2527d4614cc3SAndreas Färber 2528d4614cc3SAndreas Färber s->frame_timer = qemu_new_timer_ns(vm_clock, ehci_frame_timer, s); 2529d4614cc3SAndreas Färber s->async_bh = qemu_bh_new(ehci_frame_timer, s); 2530d4614cc3SAndreas Färber 2531d4614cc3SAndreas Färber qemu_register_reset(ehci_reset, s); 2532d4614cc3SAndreas Färber qemu_add_vm_change_state_handler(usb_ehci_vm_state_change, s); 2533d4614cc3SAndreas Färber } 2534d4614cc3SAndreas Färber 2535d4614cc3SAndreas Färber void usb_ehci_init(EHCIState *s, DeviceState *dev) 2536d4614cc3SAndreas Färber { 25373e4f910cSGerd Hoffmann /* 2.2 host controller interface version */ 253827a11324SPeter Crosthwaite s->caps[0x00] = (uint8_t)(s->opregbase - s->capsbase); 25393e4f910cSGerd Hoffmann s->caps[0x01] = 0x00; 25403e4f910cSGerd Hoffmann s->caps[0x02] = 0x00; 25413e4f910cSGerd Hoffmann s->caps[0x03] = 0x01; /* HC version */ 2542*cc8d6a84SKuo-Jung Su s->caps[0x04] = s->portnr; /* Number of downstream ports */ 25433e4f910cSGerd Hoffmann s->caps[0x05] = 0x00; /* No companion ports at present */ 25443e4f910cSGerd Hoffmann s->caps[0x06] = 0x00; 25453e4f910cSGerd Hoffmann s->caps[0x07] = 0x00; 25463e4f910cSGerd Hoffmann s->caps[0x08] = 0x80; /* We can cache whole frame, no 64-bit */ 25473e4f910cSGerd Hoffmann s->caps[0x0a] = 0x00; 25483e4f910cSGerd Hoffmann s->caps[0x0b] = 0x00; 2549f1ae32a1SGerd Hoffmann 2550f1ae32a1SGerd Hoffmann QTAILQ_INIT(&s->aqueues); 2551f1ae32a1SGerd Hoffmann QTAILQ_INIT(&s->pqueues); 25527341ea07SHans de Goede usb_packet_init(&s->ipacket); 2553f1ae32a1SGerd Hoffmann 25543e4f910cSGerd Hoffmann memory_region_init(&s->mem, "ehci", MMIO_SIZE); 25553e4f910cSGerd Hoffmann memory_region_init_io(&s->mem_caps, &ehci_mmio_caps_ops, s, 255627a11324SPeter Crosthwaite "capabilities", CAPA_SIZE); 25573e4f910cSGerd Hoffmann memory_region_init_io(&s->mem_opreg, &ehci_mmio_opreg_ops, s, 2558*cc8d6a84SKuo-Jung Su "operational", s->portscbase); 25593e4f910cSGerd Hoffmann memory_region_init_io(&s->mem_ports, &ehci_mmio_port_ops, s, 2560*cc8d6a84SKuo-Jung Su "ports", 4 * s->portnr); 25613e4f910cSGerd Hoffmann 256227a11324SPeter Crosthwaite memory_region_add_subregion(&s->mem, s->capsbase, &s->mem_caps); 256327a11324SPeter Crosthwaite memory_region_add_subregion(&s->mem, s->opregbase, &s->mem_opreg); 2564*cc8d6a84SKuo-Jung Su memory_region_add_subregion(&s->mem, s->opregbase + s->portscbase, 256527a11324SPeter Crosthwaite &s->mem_ports); 25665010d4dcSPeter Crosthwaite } 25673e4f910cSGerd Hoffmann 2568f1ae32a1SGerd Hoffmann /* 2569f1ae32a1SGerd Hoffmann * vim: expandtab ts=4 2570f1ae32a1SGerd Hoffmann */ 2571