xref: /openbmc/qemu/hw/usb/tusb6010.c (revision 6016b7b4)
1 /*
2  * Texas Instruments TUSB6010 emulation.
3  * Based on reverse-engineering of a linux driver.
4  *
5  * Copyright (C) 2008 Nokia Corporation
6  * Written by Andrzej Zaborowski <andrew@openedhand.com>
7  *
8  * This program is free software; you can redistribute it and/or
9  * modify it under the terms of the GNU General Public License as
10  * published by the Free Software Foundation; either version 2 or
11  * (at your option) version 3 of the License.
12  *
13  * This program is distributed in the hope that it will be useful,
14  * but WITHOUT ANY WARRANTY; without even the implied warranty of
15  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
16  * GNU General Public License for more details.
17  *
18  * You should have received a copy of the GNU General Public License along
19  * with this program; if not, see <http://www.gnu.org/licenses/>.
20  */
21 
22 #include "qemu/osdep.h"
23 #include "qemu/module.h"
24 #include "qemu/timer.h"
25 #include "hw/usb.h"
26 #include "hw/usb/hcd-musb.h"
27 #include "hw/arm/omap.h"
28 #include "hw/hw.h"
29 #include "hw/irq.h"
30 #include "hw/sysbus.h"
31 #include "qom/object.h"
32 
33 #define TYPE_TUSB6010 "tusb6010"
34 OBJECT_DECLARE_SIMPLE_TYPE(TUSBState, TUSB6010)
35 
36 struct TUSBState {
37     SysBusDevice parent_obj;
38 
39     MemoryRegion iomem[2];
40     qemu_irq irq;
41     MUSBState *musb;
42     QEMUTimer *otg_timer;
43     QEMUTimer *pwr_timer;
44 
45     int power;
46     uint32_t scratch;
47     uint16_t test_reset;
48     uint32_t prcm_config;
49     uint32_t prcm_mngmt;
50     uint16_t otg_status;
51     uint32_t dev_config;
52     int host_mode;
53     uint32_t intr;
54     uint32_t intr_ok;
55     uint32_t mask;
56     uint32_t usbip_intr;
57     uint32_t usbip_mask;
58     uint32_t gpio_intr;
59     uint32_t gpio_mask;
60     uint32_t gpio_config;
61     uint32_t dma_intr;
62     uint32_t dma_mask;
63     uint32_t dma_map;
64     uint32_t dma_config;
65     uint32_t ep0_config;
66     uint32_t rx_config[15];
67     uint32_t tx_config[15];
68     uint32_t wkup_mask;
69     uint32_t pullup[2];
70     uint32_t control_config;
71     uint32_t otg_timer_val;
72 };
73 
74 #define TUSB_DEVCLOCK			60000000	/* 60 MHz */
75 
76 #define TUSB_VLYNQ_CTRL			0x004
77 
78 /* Mentor Graphics OTG core registers.  */
79 #define TUSB_BASE_OFFSET		0x400
80 
81 /* FIFO registers, 32-bit.  */
82 #define TUSB_FIFO_BASE			0x600
83 
84 /* Device System & Control registers, 32-bit.  */
85 #define TUSB_SYS_REG_BASE		0x800
86 
87 #define TUSB_DEV_CONF			(TUSB_SYS_REG_BASE + 0x000)
88 #define	TUSB_DEV_CONF_USB_HOST_MODE	(1 << 16)
89 #define	TUSB_DEV_CONF_PROD_TEST_MODE	(1 << 15)
90 #define	TUSB_DEV_CONF_SOFT_ID		(1 << 1)
91 #define	TUSB_DEV_CONF_ID_SEL		(1 << 0)
92 
93 #define TUSB_PHY_OTG_CTRL_ENABLE	(TUSB_SYS_REG_BASE + 0x004)
94 #define TUSB_PHY_OTG_CTRL		(TUSB_SYS_REG_BASE + 0x008)
95 #define	TUSB_PHY_OTG_CTRL_WRPROTECT	(0xa5 << 24)
96 #define	TUSB_PHY_OTG_CTRL_O_ID_PULLUP	(1 << 23)
97 #define	TUSB_PHY_OTG_CTRL_O_VBUS_DET_EN	(1 << 19)
98 #define	TUSB_PHY_OTG_CTRL_O_SESS_END_EN	(1 << 18)
99 #define	TUSB_PHY_OTG_CTRL_TESTM2	(1 << 17)
100 #define	TUSB_PHY_OTG_CTRL_TESTM1	(1 << 16)
101 #define	TUSB_PHY_OTG_CTRL_TESTM0	(1 << 15)
102 #define	TUSB_PHY_OTG_CTRL_TX_DATA2	(1 << 14)
103 #define	TUSB_PHY_OTG_CTRL_TX_GZ2	(1 << 13)
104 #define	TUSB_PHY_OTG_CTRL_TX_ENABLE2	(1 << 12)
105 #define	TUSB_PHY_OTG_CTRL_DM_PULLDOWN	(1 << 11)
106 #define	TUSB_PHY_OTG_CTRL_DP_PULLDOWN	(1 << 10)
107 #define	TUSB_PHY_OTG_CTRL_OSC_EN	(1 << 9)
108 #define	TUSB_PHY_OTG_CTRL_PHYREF_CLK(v)	(((v) & 3) << 7)
109 #define	TUSB_PHY_OTG_CTRL_PD		(1 << 6)
110 #define	TUSB_PHY_OTG_CTRL_PLL_ON	(1 << 5)
111 #define	TUSB_PHY_OTG_CTRL_EXT_RPU	(1 << 4)
112 #define	TUSB_PHY_OTG_CTRL_PWR_GOOD	(1 << 3)
113 #define	TUSB_PHY_OTG_CTRL_RESET		(1 << 2)
114 #define	TUSB_PHY_OTG_CTRL_SUSPENDM	(1 << 1)
115 #define	TUSB_PHY_OTG_CTRL_CLK_MODE	(1 << 0)
116 
117 /* OTG status register */
118 #define TUSB_DEV_OTG_STAT		(TUSB_SYS_REG_BASE + 0x00c)
119 #define	TUSB_DEV_OTG_STAT_PWR_CLK_GOOD	(1 << 8)
120 #define	TUSB_DEV_OTG_STAT_SESS_END	(1 << 7)
121 #define	TUSB_DEV_OTG_STAT_SESS_VALID	(1 << 6)
122 #define	TUSB_DEV_OTG_STAT_VBUS_VALID	(1 << 5)
123 #define	TUSB_DEV_OTG_STAT_VBUS_SENSE	(1 << 4)
124 #define	TUSB_DEV_OTG_STAT_ID_STATUS	(1 << 3)
125 #define	TUSB_DEV_OTG_STAT_HOST_DISCON	(1 << 2)
126 #define	TUSB_DEV_OTG_STAT_LINE_STATE	(3 << 0)
127 #define	TUSB_DEV_OTG_STAT_DP_ENABLE	(1 << 1)
128 #define	TUSB_DEV_OTG_STAT_DM_ENABLE	(1 << 0)
129 
130 #define TUSB_DEV_OTG_TIMER		(TUSB_SYS_REG_BASE + 0x010)
131 #define TUSB_DEV_OTG_TIMER_ENABLE	(1 << 31)
132 #define TUSB_DEV_OTG_TIMER_VAL(v)	((v) & 0x07ffffff)
133 #define TUSB_PRCM_REV			(TUSB_SYS_REG_BASE + 0x014)
134 
135 /* PRCM configuration register */
136 #define TUSB_PRCM_CONF			(TUSB_SYS_REG_BASE + 0x018)
137 #define	TUSB_PRCM_CONF_SFW_CPEN		(1 << 24)
138 #define	TUSB_PRCM_CONF_SYS_CLKSEL(v)	(((v) & 3) << 16)
139 
140 /* PRCM management register */
141 #define TUSB_PRCM_MNGMT			(TUSB_SYS_REG_BASE + 0x01c)
142 #define	TUSB_PRCM_MNGMT_SRP_FIX_TMR(v)	(((v) & 0xf) << 25)
143 #define	TUSB_PRCM_MNGMT_SRP_FIX_EN	(1 << 24)
144 #define	TUSB_PRCM_MNGMT_VBUS_VAL_TMR(v)	(((v) & 0xf) << 20)
145 #define	TUSB_PRCM_MNGMT_VBUS_VAL_FLT_EN	(1 << 19)
146 #define	TUSB_PRCM_MNGMT_DFT_CLK_DIS	(1 << 18)
147 #define	TUSB_PRCM_MNGMT_VLYNQ_CLK_DIS	(1 << 17)
148 #define	TUSB_PRCM_MNGMT_OTG_SESS_END_EN	(1 << 10)
149 #define	TUSB_PRCM_MNGMT_OTG_VBUS_DET_EN	(1 << 9)
150 #define	TUSB_PRCM_MNGMT_OTG_ID_PULLUP	(1 << 8)
151 #define	TUSB_PRCM_MNGMT_15_SW_EN	(1 << 4)
152 #define	TUSB_PRCM_MNGMT_33_SW_EN	(1 << 3)
153 #define	TUSB_PRCM_MNGMT_5V_CPEN		(1 << 2)
154 #define	TUSB_PRCM_MNGMT_PM_IDLE		(1 << 1)
155 #define	TUSB_PRCM_MNGMT_DEV_IDLE	(1 << 0)
156 
157 /* Wake-up source clear and mask registers */
158 #define TUSB_PRCM_WAKEUP_SOURCE		(TUSB_SYS_REG_BASE + 0x020)
159 #define TUSB_PRCM_WAKEUP_CLEAR		(TUSB_SYS_REG_BASE + 0x028)
160 #define TUSB_PRCM_WAKEUP_MASK		(TUSB_SYS_REG_BASE + 0x02c)
161 #define	TUSB_PRCM_WAKEUP_RESERVED_BITS	(0xffffe << 13)
162 #define	TUSB_PRCM_WGPIO_7		(1 << 12)
163 #define	TUSB_PRCM_WGPIO_6		(1 << 11)
164 #define	TUSB_PRCM_WGPIO_5		(1 << 10)
165 #define	TUSB_PRCM_WGPIO_4		(1 << 9)
166 #define	TUSB_PRCM_WGPIO_3		(1 << 8)
167 #define	TUSB_PRCM_WGPIO_2		(1 << 7)
168 #define	TUSB_PRCM_WGPIO_1		(1 << 6)
169 #define	TUSB_PRCM_WGPIO_0		(1 << 5)
170 #define	TUSB_PRCM_WHOSTDISCON		(1 << 4)	/* Host disconnect */
171 #define	TUSB_PRCM_WBUS			(1 << 3)	/* USB bus resume */
172 #define	TUSB_PRCM_WNORCS		(1 << 2)	/* NOR chip select */
173 #define	TUSB_PRCM_WVBUS			(1 << 1)	/* OTG PHY VBUS */
174 #define	TUSB_PRCM_WID			(1 << 0)	/* OTG PHY ID detect */
175 
176 #define TUSB_PULLUP_1_CTRL		(TUSB_SYS_REG_BASE + 0x030)
177 #define TUSB_PULLUP_2_CTRL		(TUSB_SYS_REG_BASE + 0x034)
178 #define TUSB_INT_CTRL_REV		(TUSB_SYS_REG_BASE + 0x038)
179 #define TUSB_INT_CTRL_CONF		(TUSB_SYS_REG_BASE + 0x03c)
180 #define TUSB_USBIP_INT_SRC		(TUSB_SYS_REG_BASE + 0x040)
181 #define TUSB_USBIP_INT_SET		(TUSB_SYS_REG_BASE + 0x044)
182 #define TUSB_USBIP_INT_CLEAR		(TUSB_SYS_REG_BASE + 0x048)
183 #define TUSB_USBIP_INT_MASK		(TUSB_SYS_REG_BASE + 0x04c)
184 #define TUSB_DMA_INT_SRC		(TUSB_SYS_REG_BASE + 0x050)
185 #define TUSB_DMA_INT_SET		(TUSB_SYS_REG_BASE + 0x054)
186 #define TUSB_DMA_INT_CLEAR		(TUSB_SYS_REG_BASE + 0x058)
187 #define TUSB_DMA_INT_MASK		(TUSB_SYS_REG_BASE + 0x05c)
188 #define TUSB_GPIO_INT_SRC		(TUSB_SYS_REG_BASE + 0x060)
189 #define TUSB_GPIO_INT_SET		(TUSB_SYS_REG_BASE + 0x064)
190 #define TUSB_GPIO_INT_CLEAR		(TUSB_SYS_REG_BASE + 0x068)
191 #define TUSB_GPIO_INT_MASK		(TUSB_SYS_REG_BASE + 0x06c)
192 
193 /* NOR flash interrupt source registers */
194 #define TUSB_INT_SRC			(TUSB_SYS_REG_BASE + 0x070)
195 #define TUSB_INT_SRC_SET		(TUSB_SYS_REG_BASE + 0x074)
196 #define TUSB_INT_SRC_CLEAR		(TUSB_SYS_REG_BASE + 0x078)
197 #define TUSB_INT_MASK			(TUSB_SYS_REG_BASE + 0x07c)
198 #define	TUSB_INT_SRC_TXRX_DMA_DONE	(1 << 24)
199 #define	TUSB_INT_SRC_USB_IP_CORE	(1 << 17)
200 #define	TUSB_INT_SRC_OTG_TIMEOUT	(1 << 16)
201 #define	TUSB_INT_SRC_VBUS_SENSE_CHNG	(1 << 15)
202 #define	TUSB_INT_SRC_ID_STATUS_CHNG	(1 << 14)
203 #define	TUSB_INT_SRC_DEV_WAKEUP		(1 << 13)
204 #define	TUSB_INT_SRC_DEV_READY		(1 << 12)
205 #define	TUSB_INT_SRC_USB_IP_TX		(1 << 9)
206 #define	TUSB_INT_SRC_USB_IP_RX		(1 << 8)
207 #define	TUSB_INT_SRC_USB_IP_VBUS_ERR	(1 << 7)
208 #define	TUSB_INT_SRC_USB_IP_VBUS_REQ	(1 << 6)
209 #define	TUSB_INT_SRC_USB_IP_DISCON	(1 << 5)
210 #define	TUSB_INT_SRC_USB_IP_CONN	(1 << 4)
211 #define	TUSB_INT_SRC_USB_IP_SOF		(1 << 3)
212 #define	TUSB_INT_SRC_USB_IP_RST_BABBLE	(1 << 2)
213 #define	TUSB_INT_SRC_USB_IP_RESUME	(1 << 1)
214 #define	TUSB_INT_SRC_USB_IP_SUSPEND	(1 << 0)
215 
216 #define TUSB_GPIO_REV			(TUSB_SYS_REG_BASE + 0x080)
217 #define TUSB_GPIO_CONF			(TUSB_SYS_REG_BASE + 0x084)
218 #define TUSB_DMA_CTRL_REV		(TUSB_SYS_REG_BASE + 0x100)
219 #define TUSB_DMA_REQ_CONF		(TUSB_SYS_REG_BASE + 0x104)
220 #define TUSB_EP0_CONF			(TUSB_SYS_REG_BASE + 0x108)
221 #define TUSB_EP_IN_SIZE			(TUSB_SYS_REG_BASE + 0x10c)
222 #define TUSB_DMA_EP_MAP			(TUSB_SYS_REG_BASE + 0x148)
223 #define TUSB_EP_OUT_SIZE		(TUSB_SYS_REG_BASE + 0x14c)
224 #define TUSB_EP_MAX_PACKET_SIZE_OFFSET	(TUSB_SYS_REG_BASE + 0x188)
225 #define TUSB_SCRATCH_PAD		(TUSB_SYS_REG_BASE + 0x1c4)
226 #define TUSB_WAIT_COUNT			(TUSB_SYS_REG_BASE + 0x1c8)
227 #define TUSB_PROD_TEST_RESET		(TUSB_SYS_REG_BASE + 0x1d8)
228 
229 #define TUSB_DIDR1_LO			(TUSB_SYS_REG_BASE + 0x1f8)
230 #define TUSB_DIDR1_HI			(TUSB_SYS_REG_BASE + 0x1fc)
231 
232 /* Device System & Control register bitfields */
233 #define TUSB_INT_CTRL_CONF_INT_RLCYC(v)	(((v) & 0x7) << 18)
234 #define TUSB_INT_CTRL_CONF_INT_POLARITY	(1 << 17)
235 #define TUSB_INT_CTRL_CONF_INT_MODE	(1 << 16)
236 #define TUSB_GPIO_CONF_DMAREQ(v)	(((v) & 0x3f) << 24)
237 #define TUSB_DMA_REQ_CONF_BURST_SIZE(v)	(((v) & 3) << 26)
238 #define TUSB_DMA_REQ_CONF_DMA_RQ_EN(v)	(((v) & 0x3f) << 20)
239 #define TUSB_DMA_REQ_CONF_DMA_RQ_ASR(v)	(((v) & 0xf) << 16)
240 #define TUSB_EP0_CONFIG_SW_EN		(1 << 8)
241 #define TUSB_EP0_CONFIG_DIR_TX		(1 << 7)
242 #define TUSB_EP0_CONFIG_XFR_SIZE(v)	((v) & 0x7f)
243 #define TUSB_EP_CONFIG_SW_EN		(1 << 31)
244 #define TUSB_EP_CONFIG_XFR_SIZE(v)	((v) & 0x7fffffff)
245 #define TUSB_PROD_TEST_RESET_VAL	0xa596
246 
247 static void tusb_intr_update(TUSBState *s)
248 {
249     if (s->control_config & TUSB_INT_CTRL_CONF_INT_POLARITY)
250         qemu_set_irq(s->irq, s->intr & ~s->mask & s->intr_ok);
251     else
252         qemu_set_irq(s->irq, (!(s->intr & ~s->mask)) & s->intr_ok);
253 }
254 
255 static void tusb_usbip_intr_update(TUSBState *s)
256 {
257     /* TX interrupt in the MUSB */
258     if (s->usbip_intr & 0x0000ffff & ~s->usbip_mask)
259         s->intr |= TUSB_INT_SRC_USB_IP_TX;
260     else
261         s->intr &= ~TUSB_INT_SRC_USB_IP_TX;
262 
263     /* RX interrupt in the MUSB */
264     if (s->usbip_intr & 0xffff0000 & ~s->usbip_mask)
265         s->intr |= TUSB_INT_SRC_USB_IP_RX;
266     else
267         s->intr &= ~TUSB_INT_SRC_USB_IP_RX;
268 
269     /* XXX: What about TUSB_INT_SRC_USB_IP_CORE?  */
270 
271     tusb_intr_update(s);
272 }
273 
274 static void tusb_dma_intr_update(TUSBState *s)
275 {
276     if (s->dma_intr & ~s->dma_mask)
277         s->intr |= TUSB_INT_SRC_TXRX_DMA_DONE;
278     else
279         s->intr &= ~TUSB_INT_SRC_TXRX_DMA_DONE;
280 
281     tusb_intr_update(s);
282 }
283 
284 static void tusb_gpio_intr_update(TUSBState *s)
285 {
286     /* TODO: How is this signalled?  */
287 }
288 
289 static uint32_t tusb_async_readb(void *opaque, hwaddr addr)
290 {
291     TUSBState *s = (TUSBState *) opaque;
292 
293     switch (addr & 0xfff) {
294     case TUSB_BASE_OFFSET ... (TUSB_BASE_OFFSET | 0x1ff):
295         return musb_read[0](s->musb, addr & 0x1ff);
296 
297     case TUSB_FIFO_BASE ... (TUSB_FIFO_BASE | 0x1ff):
298         return musb_read[0](s->musb, 0x20 + ((addr >> 3) & 0x3c));
299     }
300 
301     printf("%s: unknown register at %03x\n",
302                     __func__, (int) (addr & 0xfff));
303     return 0;
304 }
305 
306 static uint32_t tusb_async_readh(void *opaque, hwaddr addr)
307 {
308     TUSBState *s = (TUSBState *) opaque;
309 
310     switch (addr & 0xfff) {
311     case TUSB_BASE_OFFSET ... (TUSB_BASE_OFFSET | 0x1ff):
312         return musb_read[1](s->musb, addr & 0x1ff);
313 
314     case TUSB_FIFO_BASE ... (TUSB_FIFO_BASE | 0x1ff):
315         return musb_read[1](s->musb, 0x20 + ((addr >> 3) & 0x3c));
316     }
317 
318     printf("%s: unknown register at %03x\n",
319                     __func__, (int) (addr & 0xfff));
320     return 0;
321 }
322 
323 static uint32_t tusb_async_readw(void *opaque, hwaddr addr)
324 {
325     TUSBState *s = (TUSBState *) opaque;
326     int offset = addr & 0xfff;
327     int epnum;
328     uint32_t ret;
329 
330     switch (offset) {
331     case TUSB_DEV_CONF:
332         return s->dev_config;
333 
334     case TUSB_BASE_OFFSET ... (TUSB_BASE_OFFSET | 0x1ff):
335         return musb_read[2](s->musb, offset & 0x1ff);
336 
337     case TUSB_FIFO_BASE ... (TUSB_FIFO_BASE | 0x1ff):
338         return musb_read[2](s->musb, 0x20 + ((addr >> 3) & 0x3c));
339 
340     case TUSB_PHY_OTG_CTRL_ENABLE:
341     case TUSB_PHY_OTG_CTRL:
342         return 0x00;	/* TODO */
343 
344     case TUSB_DEV_OTG_STAT:
345         ret = s->otg_status;
346 #if 0
347         if (!(s->prcm_mngmt & TUSB_PRCM_MNGMT_OTG_VBUS_DET_EN))
348             ret &= ~TUSB_DEV_OTG_STAT_VBUS_VALID;
349 #endif
350         return ret;
351     case TUSB_DEV_OTG_TIMER:
352         return s->otg_timer_val;
353 
354     case TUSB_PRCM_REV:
355         return 0x20;
356     case TUSB_PRCM_CONF:
357         return s->prcm_config;
358     case TUSB_PRCM_MNGMT:
359         return s->prcm_mngmt;
360     case TUSB_PRCM_WAKEUP_SOURCE:
361     case TUSB_PRCM_WAKEUP_CLEAR:	/* TODO: What does this one return?  */
362         return 0x00000000;
363     case TUSB_PRCM_WAKEUP_MASK:
364         return s->wkup_mask;
365 
366     case TUSB_PULLUP_1_CTRL:
367         return s->pullup[0];
368     case TUSB_PULLUP_2_CTRL:
369         return s->pullup[1];
370 
371     case TUSB_INT_CTRL_REV:
372         return 0x20;
373     case TUSB_INT_CTRL_CONF:
374         return s->control_config;
375 
376     case TUSB_USBIP_INT_SRC:
377     case TUSB_USBIP_INT_SET:	/* TODO: What do these two return?  */
378     case TUSB_USBIP_INT_CLEAR:
379         return s->usbip_intr;
380     case TUSB_USBIP_INT_MASK:
381         return s->usbip_mask;
382 
383     case TUSB_DMA_INT_SRC:
384     case TUSB_DMA_INT_SET:	/* TODO: What do these two return?  */
385     case TUSB_DMA_INT_CLEAR:
386         return s->dma_intr;
387     case TUSB_DMA_INT_MASK:
388         return s->dma_mask;
389 
390     case TUSB_GPIO_INT_SRC:	/* TODO: What do these two return?  */
391     case TUSB_GPIO_INT_SET:
392     case TUSB_GPIO_INT_CLEAR:
393         return s->gpio_intr;
394     case TUSB_GPIO_INT_MASK:
395         return s->gpio_mask;
396 
397     case TUSB_INT_SRC:
398     case TUSB_INT_SRC_SET:	/* TODO: What do these two return?  */
399     case TUSB_INT_SRC_CLEAR:
400         return s->intr;
401     case TUSB_INT_MASK:
402         return s->mask;
403 
404     case TUSB_GPIO_REV:
405         return 0x30;
406     case TUSB_GPIO_CONF:
407         return s->gpio_config;
408 
409     case TUSB_DMA_CTRL_REV:
410         return 0x30;
411     case TUSB_DMA_REQ_CONF:
412         return s->dma_config;
413     case TUSB_EP0_CONF:
414         return s->ep0_config;
415     case TUSB_EP_IN_SIZE ... (TUSB_EP_IN_SIZE + 0x3b):
416         epnum = (offset - TUSB_EP_IN_SIZE) >> 2;
417         return s->tx_config[epnum];
418     case TUSB_DMA_EP_MAP:
419         return s->dma_map;
420     case TUSB_EP_OUT_SIZE ... (TUSB_EP_OUT_SIZE + 0x3b):
421         epnum = (offset - TUSB_EP_OUT_SIZE) >> 2;
422         return s->rx_config[epnum];
423     case TUSB_EP_MAX_PACKET_SIZE_OFFSET ...
424             (TUSB_EP_MAX_PACKET_SIZE_OFFSET + 0x3b):
425         return 0x00000000;	/* TODO */
426     case TUSB_WAIT_COUNT:
427         return 0x00;		/* TODO */
428 
429     case TUSB_SCRATCH_PAD:
430         return s->scratch;
431 
432     case TUSB_PROD_TEST_RESET:
433         return s->test_reset;
434 
435     /* DIE IDs */
436     case TUSB_DIDR1_LO:
437         return 0xa9453c59;
438     case TUSB_DIDR1_HI:
439         return 0x54059adf;
440     }
441 
442     printf("%s: unknown register at %03x\n", __func__, offset);
443     return 0;
444 }
445 
446 static void tusb_async_writeb(void *opaque, hwaddr addr,
447                 uint32_t value)
448 {
449     TUSBState *s = (TUSBState *) opaque;
450 
451     switch (addr & 0xfff) {
452     case TUSB_BASE_OFFSET ... (TUSB_BASE_OFFSET | 0x1ff):
453         musb_write[0](s->musb, addr & 0x1ff, value);
454         break;
455 
456     case TUSB_FIFO_BASE ... (TUSB_FIFO_BASE | 0x1ff):
457         musb_write[0](s->musb, 0x20 + ((addr >> 3) & 0x3c), value);
458         break;
459 
460     default:
461         printf("%s: unknown register at %03x\n",
462                         __func__, (int) (addr & 0xfff));
463         return;
464     }
465 }
466 
467 static void tusb_async_writeh(void *opaque, hwaddr addr,
468                 uint32_t value)
469 {
470     TUSBState *s = (TUSBState *) opaque;
471 
472     switch (addr & 0xfff) {
473     case TUSB_BASE_OFFSET ... (TUSB_BASE_OFFSET | 0x1ff):
474         musb_write[1](s->musb, addr & 0x1ff, value);
475         break;
476 
477     case TUSB_FIFO_BASE ... (TUSB_FIFO_BASE | 0x1ff):
478         musb_write[1](s->musb, 0x20 + ((addr >> 3) & 0x3c), value);
479         break;
480 
481     default:
482         printf("%s: unknown register at %03x\n",
483                         __func__, (int) (addr & 0xfff));
484         return;
485     }
486 }
487 
488 static void tusb_async_writew(void *opaque, hwaddr addr,
489                 uint32_t value)
490 {
491     TUSBState *s = (TUSBState *) opaque;
492     int offset = addr & 0xfff;
493     int epnum;
494 
495     switch (offset) {
496     case TUSB_VLYNQ_CTRL:
497         break;
498 
499     case TUSB_BASE_OFFSET ... (TUSB_BASE_OFFSET | 0x1ff):
500         musb_write[2](s->musb, offset & 0x1ff, value);
501         break;
502 
503     case TUSB_FIFO_BASE ... (TUSB_FIFO_BASE | 0x1ff):
504         musb_write[2](s->musb, 0x20 + ((addr >> 3) & 0x3c), value);
505         break;
506 
507     case TUSB_DEV_CONF:
508         s->dev_config = value;
509         s->host_mode = (value & TUSB_DEV_CONF_USB_HOST_MODE);
510         if (value & TUSB_DEV_CONF_PROD_TEST_MODE)
511             hw_error("%s: Product Test mode not allowed\n", __func__);
512         break;
513 
514     case TUSB_PHY_OTG_CTRL_ENABLE:
515     case TUSB_PHY_OTG_CTRL:
516         return;		/* TODO */
517     case TUSB_DEV_OTG_TIMER:
518         s->otg_timer_val = value;
519         if (value & TUSB_DEV_OTG_TIMER_ENABLE)
520             timer_mod(s->otg_timer, qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) +
521                             muldiv64(TUSB_DEV_OTG_TIMER_VAL(value),
522                                      NANOSECONDS_PER_SECOND, TUSB_DEVCLOCK));
523         else
524             timer_del(s->otg_timer);
525         break;
526 
527     case TUSB_PRCM_CONF:
528         s->prcm_config = value;
529         break;
530     case TUSB_PRCM_MNGMT:
531         s->prcm_mngmt = value;
532         break;
533     case TUSB_PRCM_WAKEUP_CLEAR:
534         break;
535     case TUSB_PRCM_WAKEUP_MASK:
536         s->wkup_mask = value;
537         break;
538 
539     case TUSB_PULLUP_1_CTRL:
540         s->pullup[0] = value;
541         break;
542     case TUSB_PULLUP_2_CTRL:
543         s->pullup[1] = value;
544         break;
545     case TUSB_INT_CTRL_CONF:
546         s->control_config = value;
547         tusb_intr_update(s);
548         break;
549 
550     case TUSB_USBIP_INT_SET:
551         s->usbip_intr |= value;
552         tusb_usbip_intr_update(s);
553         break;
554     case TUSB_USBIP_INT_CLEAR:
555         s->usbip_intr &= ~value;
556         tusb_usbip_intr_update(s);
557         musb_core_intr_clear(s->musb, ~value);
558         break;
559     case TUSB_USBIP_INT_MASK:
560         s->usbip_mask = value;
561         tusb_usbip_intr_update(s);
562         break;
563 
564     case TUSB_DMA_INT_SET:
565         s->dma_intr |= value;
566         tusb_dma_intr_update(s);
567         break;
568     case TUSB_DMA_INT_CLEAR:
569         s->dma_intr &= ~value;
570         tusb_dma_intr_update(s);
571         break;
572     case TUSB_DMA_INT_MASK:
573         s->dma_mask = value;
574         tusb_dma_intr_update(s);
575         break;
576 
577     case TUSB_GPIO_INT_SET:
578         s->gpio_intr |= value;
579         tusb_gpio_intr_update(s);
580         break;
581     case TUSB_GPIO_INT_CLEAR:
582         s->gpio_intr &= ~value;
583         tusb_gpio_intr_update(s);
584         break;
585     case TUSB_GPIO_INT_MASK:
586         s->gpio_mask = value;
587         tusb_gpio_intr_update(s);
588         break;
589 
590     case TUSB_INT_SRC_SET:
591         s->intr |= value;
592         tusb_intr_update(s);
593         break;
594     case TUSB_INT_SRC_CLEAR:
595         s->intr &= ~value;
596         tusb_intr_update(s);
597         break;
598     case TUSB_INT_MASK:
599         s->mask = value;
600         tusb_intr_update(s);
601         break;
602 
603     case TUSB_GPIO_CONF:
604         s->gpio_config = value;
605         break;
606     case TUSB_DMA_REQ_CONF:
607         s->dma_config = value;
608         break;
609     case TUSB_EP0_CONF:
610         s->ep0_config = value & 0x1ff;
611         musb_set_size(s->musb, 0, TUSB_EP0_CONFIG_XFR_SIZE(value),
612                         value & TUSB_EP0_CONFIG_DIR_TX);
613         break;
614     case TUSB_EP_IN_SIZE ... (TUSB_EP_IN_SIZE + 0x3b):
615         epnum = (offset - TUSB_EP_IN_SIZE) >> 2;
616         s->tx_config[epnum] = value;
617         musb_set_size(s->musb, epnum + 1, TUSB_EP_CONFIG_XFR_SIZE(value), 1);
618         break;
619     case TUSB_DMA_EP_MAP:
620         s->dma_map = value;
621         break;
622     case TUSB_EP_OUT_SIZE ... (TUSB_EP_OUT_SIZE + 0x3b):
623         epnum = (offset - TUSB_EP_OUT_SIZE) >> 2;
624         s->rx_config[epnum] = value;
625         musb_set_size(s->musb, epnum + 1, TUSB_EP_CONFIG_XFR_SIZE(value), 0);
626         break;
627     case TUSB_EP_MAX_PACKET_SIZE_OFFSET ...
628             (TUSB_EP_MAX_PACKET_SIZE_OFFSET + 0x3b):
629         return;		/* TODO */
630     case TUSB_WAIT_COUNT:
631         return;		/* TODO */
632 
633     case TUSB_SCRATCH_PAD:
634         s->scratch = value;
635         break;
636 
637     case TUSB_PROD_TEST_RESET:
638         s->test_reset = value;
639         break;
640 
641     default:
642         printf("%s: unknown register at %03x\n", __func__, offset);
643         return;
644     }
645 }
646 
647 static uint64_t tusb_async_readfn(void *opaque, hwaddr addr, unsigned size)
648 {
649     switch (size) {
650     case 1:
651         return tusb_async_readb(opaque, addr);
652     case 2:
653         return tusb_async_readh(opaque, addr);
654     case 4:
655         return tusb_async_readw(opaque, addr);
656     default:
657         g_assert_not_reached();
658     }
659 }
660 
661 static void tusb_async_writefn(void *opaque, hwaddr addr,
662                                uint64_t value, unsigned size)
663 {
664     switch (size) {
665     case 1:
666         tusb_async_writeb(opaque, addr, value);
667         break;
668     case 2:
669         tusb_async_writeh(opaque, addr, value);
670         break;
671     case 4:
672         tusb_async_writew(opaque, addr, value);
673         break;
674     default:
675         g_assert_not_reached();
676     }
677 }
678 
679 static const MemoryRegionOps tusb_async_ops = {
680     .read = tusb_async_readfn,
681     .write = tusb_async_writefn,
682     .valid.min_access_size = 1,
683     .valid.max_access_size = 4,
684     .endianness = DEVICE_NATIVE_ENDIAN,
685 };
686 
687 static void tusb_otg_tick(void *opaque)
688 {
689     TUSBState *s = (TUSBState *) opaque;
690 
691     s->otg_timer_val = 0;
692     s->intr |= TUSB_INT_SRC_OTG_TIMEOUT;
693     tusb_intr_update(s);
694 }
695 
696 static void tusb_power_tick(void *opaque)
697 {
698     TUSBState *s = (TUSBState *) opaque;
699 
700     if (s->power) {
701         s->intr_ok = ~0;
702         tusb_intr_update(s);
703     }
704 }
705 
706 static void tusb_musb_core_intr(void *opaque, int source, int level)
707 {
708     TUSBState *s = (TUSBState *) opaque;
709     uint16_t otg_status = s->otg_status;
710 
711     switch (source) {
712     case musb_set_vbus:
713         if (level)
714             otg_status |= TUSB_DEV_OTG_STAT_VBUS_VALID;
715         else
716             otg_status &= ~TUSB_DEV_OTG_STAT_VBUS_VALID;
717 
718         /* XXX: only if TUSB_PHY_OTG_CTRL_OTG_VBUS_DET_EN set?  */
719         /* XXX: only if TUSB_PRCM_MNGMT_OTG_VBUS_DET_EN set?  */
720         if (s->otg_status != otg_status) {
721             s->otg_status = otg_status;
722             s->intr |= TUSB_INT_SRC_VBUS_SENSE_CHNG;
723             tusb_intr_update(s);
724         }
725         break;
726 
727     case musb_set_session:
728         /* XXX: only if TUSB_PHY_OTG_CTRL_OTG_SESS_END_EN set?  */
729         /* XXX: only if TUSB_PRCM_MNGMT_OTG_SESS_END_EN set?  */
730         if (level) {
731             s->otg_status |= TUSB_DEV_OTG_STAT_SESS_VALID;
732             s->otg_status &= ~TUSB_DEV_OTG_STAT_SESS_END;
733         } else {
734             s->otg_status &= ~TUSB_DEV_OTG_STAT_SESS_VALID;
735             s->otg_status |= TUSB_DEV_OTG_STAT_SESS_END;
736         }
737 
738         /* XXX: some IRQ or anything?  */
739         break;
740 
741     case musb_irq_tx:
742     case musb_irq_rx:
743         s->usbip_intr = musb_core_intr_get(s->musb);
744         /* Fall through.  */
745     default:
746         if (level)
747             s->intr |= 1 << source;
748         else
749             s->intr &= ~(1 << source);
750         tusb_intr_update(s);
751         break;
752     }
753 }
754 
755 static void tusb6010_power(TUSBState *s, int on)
756 {
757     if (!on) {
758         s->power = 0;
759     } else if (!s->power && on) {
760         s->power = 1;
761         /* Pull the interrupt down after TUSB6010 comes up.  */
762         s->intr_ok = 0;
763         tusb_intr_update(s);
764         timer_mod(s->pwr_timer, qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) +
765                   NANOSECONDS_PER_SECOND / 2);
766     }
767 }
768 
769 static void tusb6010_irq(void *opaque, int source, int level)
770 {
771     if (source) {
772         tusb_musb_core_intr(opaque, source - 1, level);
773     } else {
774         tusb6010_power(opaque, level);
775     }
776 }
777 
778 static void tusb6010_reset(DeviceState *dev)
779 {
780     TUSBState *s = TUSB6010(dev);
781     int i;
782 
783     s->test_reset = TUSB_PROD_TEST_RESET_VAL;
784     s->host_mode = 0;
785     s->dev_config = 0;
786     s->otg_status = 0;	/* !TUSB_DEV_OTG_STAT_ID_STATUS means host mode */
787     s->power = 0;
788     s->mask = 0xffffffff;
789     s->intr = 0x00000000;
790     s->otg_timer_val = 0;
791     s->scratch = 0;
792     s->prcm_config = 0;
793     s->prcm_mngmt = 0;
794     s->intr_ok = 0;
795     s->usbip_intr = 0;
796     s->usbip_mask = 0;
797     s->gpio_intr = 0;
798     s->gpio_mask = 0;
799     s->gpio_config = 0;
800     s->dma_intr = 0;
801     s->dma_mask = 0;
802     s->dma_map = 0;
803     s->dma_config = 0;
804     s->ep0_config = 0;
805     s->wkup_mask = 0;
806     s->pullup[0] = s->pullup[1] = 0;
807     s->control_config = 0;
808     for (i = 0; i < 15; i++) {
809         s->rx_config[i] = s->tx_config[i] = 0;
810     }
811     musb_reset(s->musb);
812 }
813 
814 static void tusb6010_realize(DeviceState *dev, Error **errp)
815 {
816     TUSBState *s = TUSB6010(dev);
817     SysBusDevice *sbd = SYS_BUS_DEVICE(dev);
818 
819     s->otg_timer = timer_new_ns(QEMU_CLOCK_VIRTUAL, tusb_otg_tick, s);
820     s->pwr_timer = timer_new_ns(QEMU_CLOCK_VIRTUAL, tusb_power_tick, s);
821     memory_region_init_io(&s->iomem[1], OBJECT(s), &tusb_async_ops, s,
822                           "tusb-async", UINT32_MAX);
823     sysbus_init_mmio(sbd, &s->iomem[0]);
824     sysbus_init_mmio(sbd, &s->iomem[1]);
825     sysbus_init_irq(sbd, &s->irq);
826     qdev_init_gpio_in(dev, tusb6010_irq, musb_irq_max + 1);
827     s->musb = musb_init(dev, 1);
828 }
829 
830 static void tusb6010_class_init(ObjectClass *klass, void *data)
831 {
832     DeviceClass *dc = DEVICE_CLASS(klass);
833 
834     dc->realize = tusb6010_realize;
835     dc->reset = tusb6010_reset;
836 }
837 
838 static const TypeInfo tusb6010_info = {
839     .name          = TYPE_TUSB6010,
840     .parent        = TYPE_SYS_BUS_DEVICE,
841     .instance_size = sizeof(TUSBState),
842     .class_init    = tusb6010_class_init,
843 };
844 
845 static void tusb6010_register_types(void)
846 {
847     type_register_static(&tusb6010_info);
848 }
849 
850 type_init(tusb6010_register_types)
851