xref: /openbmc/u-boot/drivers/mtd/cfi_flash.c (revision 62e92077)
1 /*
2  * (C) Copyright 2002-2004
3  * Brad Kemp, Seranoa Networks, Brad.Kemp@seranoa.com
4  *
5  * Copyright (C) 2003 Arabella Software Ltd.
6  * Yuli Barcohen <yuli@arabellasw.com>
7  *
8  * Copyright (C) 2004
9  * Ed Okerson
10  *
11  * Copyright (C) 2006
12  * Tolunay Orkun <listmember@orkun.us>
13  *
14  * SPDX-License-Identifier:	GPL-2.0+
15  */
16 
17 /* The DEBUG define must be before common to enable debugging */
18 /* #define DEBUG	*/
19 
20 #include <common.h>
21 #include <asm/processor.h>
22 #include <asm/io.h>
23 #include <asm/byteorder.h>
24 #include <asm/unaligned.h>
25 #include <environment.h>
26 #include <mtd/cfi_flash.h>
27 #include <watchdog.h>
28 
29 /*
30  * This file implements a Common Flash Interface (CFI) driver for
31  * U-Boot.
32  *
33  * The width of the port and the width of the chips are determined at
34  * initialization.  These widths are used to calculate the address for
35  * access CFI data structures.
36  *
37  * References
38  * JEDEC Standard JESD68 - Common Flash Interface (CFI)
39  * JEDEC Standard JEP137-A Common Flash Interface (CFI) ID Codes
40  * Intel Application Note 646 Common Flash Interface (CFI) and Command Sets
41  * Intel 290667-008 3 Volt Intel StrataFlash Memory datasheet
42  * AMD CFI Specification, Release 2.0 December 1, 2001
43  * AMD/Spansion Application Note: Migration from Single-byte to Three-byte
44  *   Device IDs, Publication Number 25538 Revision A, November 8, 2001
45  *
46  * Define CONFIG_SYS_WRITE_SWAPPED_DATA, if you have to swap the Bytes between
47  * reading and writing ... (yes there is such a Hardware).
48  */
49 
50 static uint flash_offset_cfi[2] = { FLASH_OFFSET_CFI, FLASH_OFFSET_CFI_ALT };
51 #ifdef CONFIG_FLASH_CFI_MTD
52 static uint flash_verbose = 1;
53 #else
54 #define flash_verbose 1
55 #endif
56 
57 flash_info_t flash_info[CFI_MAX_FLASH_BANKS];	/* FLASH chips info */
58 
59 /*
60  * Check if chip width is defined. If not, start detecting with 8bit.
61  */
62 #ifndef CONFIG_SYS_FLASH_CFI_WIDTH
63 #define CONFIG_SYS_FLASH_CFI_WIDTH	FLASH_CFI_8BIT
64 #endif
65 
66 #ifdef CONFIG_CFI_FLASH_USE_WEAK_ACCESSORS
67 #define __maybe_weak __weak
68 #else
69 #define __maybe_weak static
70 #endif
71 
72 /*
73  * 0xffff is an undefined value for the configuration register. When
74  * this value is returned, the configuration register shall not be
75  * written at all (default mode).
76  */
77 static u16 cfi_flash_config_reg(int i)
78 {
79 #ifdef CONFIG_SYS_CFI_FLASH_CONFIG_REGS
80 	return ((u16 [])CONFIG_SYS_CFI_FLASH_CONFIG_REGS)[i];
81 #else
82 	return 0xffff;
83 #endif
84 }
85 
86 #if defined(CONFIG_SYS_MAX_FLASH_BANKS_DETECT)
87 int cfi_flash_num_flash_banks = CONFIG_SYS_MAX_FLASH_BANKS_DETECT;
88 #endif
89 
90 __weak phys_addr_t cfi_flash_bank_addr(int i)
91 {
92 	return ((phys_addr_t [])CONFIG_SYS_FLASH_BANKS_LIST)[i];
93 }
94 
95 __weak unsigned long cfi_flash_bank_size(int i)
96 {
97 #ifdef CONFIG_SYS_FLASH_BANKS_SIZES
98 	return ((unsigned long [])CONFIG_SYS_FLASH_BANKS_SIZES)[i];
99 #else
100 	return 0;
101 #endif
102 }
103 
104 __maybe_weak void flash_write8(u8 value, void *addr)
105 {
106 	__raw_writeb(value, addr);
107 }
108 
109 __maybe_weak void flash_write16(u16 value, void *addr)
110 {
111 	__raw_writew(value, addr);
112 }
113 
114 __maybe_weak void flash_write32(u32 value, void *addr)
115 {
116 	__raw_writel(value, addr);
117 }
118 
119 __maybe_weak void flash_write64(u64 value, void *addr)
120 {
121 	/* No architectures currently implement __raw_writeq() */
122 	*(volatile u64 *)addr = value;
123 }
124 
125 __maybe_weak u8 flash_read8(void *addr)
126 {
127 	return __raw_readb(addr);
128 }
129 
130 __maybe_weak u16 flash_read16(void *addr)
131 {
132 	return __raw_readw(addr);
133 }
134 
135 __maybe_weak u32 flash_read32(void *addr)
136 {
137 	return __raw_readl(addr);
138 }
139 
140 __maybe_weak u64 flash_read64(void *addr)
141 {
142 	/* No architectures currently implement __raw_readq() */
143 	return *(volatile u64 *)addr;
144 }
145 
146 /*-----------------------------------------------------------------------
147  */
148 #if defined(CONFIG_ENV_IS_IN_FLASH) || defined(CONFIG_ENV_ADDR_REDUND) || (CONFIG_SYS_MONITOR_BASE >= CONFIG_SYS_FLASH_BASE)
149 flash_info_t *flash_get_info(ulong base)
150 {
151 	int i;
152 	flash_info_t *info;
153 
154 	for (i = 0; i < CONFIG_SYS_MAX_FLASH_BANKS; i++) {
155 		info = &flash_info[i];
156 		if (info->size && info->start[0] <= base &&
157 		    base <= info->start[0] + info->size - 1)
158 			return info;
159 	}
160 
161 	return NULL;
162 }
163 #endif
164 
165 unsigned long flash_sector_size(flash_info_t *info, flash_sect_t sect)
166 {
167 	if (sect != (info->sector_count - 1))
168 		return info->start[sect + 1] - info->start[sect];
169 	else
170 		return info->start[0] + info->size - info->start[sect];
171 }
172 
173 /*-----------------------------------------------------------------------
174  * create an address based on the offset and the port width
175  */
176 static inline void *
177 flash_map (flash_info_t * info, flash_sect_t sect, uint offset)
178 {
179 	unsigned int byte_offset = offset * info->portwidth;
180 
181 	return (void *)(info->start[sect] + byte_offset);
182 }
183 
184 static inline void flash_unmap(flash_info_t *info, flash_sect_t sect,
185 		unsigned int offset, void *addr)
186 {
187 }
188 
189 /*-----------------------------------------------------------------------
190  * make a proper sized command based on the port and chip widths
191  */
192 static void flash_make_cmd(flash_info_t *info, u32 cmd, void *cmdbuf)
193 {
194 	int i;
195 	int cword_offset;
196 	int cp_offset;
197 #if defined(__LITTLE_ENDIAN) || defined(CONFIG_SYS_WRITE_SWAPPED_DATA)
198 	u32 cmd_le = cpu_to_le32(cmd);
199 #endif
200 	uchar val;
201 	uchar *cp = (uchar *) cmdbuf;
202 
203 	for (i = info->portwidth; i > 0; i--){
204 		cword_offset = (info->portwidth-i)%info->chipwidth;
205 #if defined(__LITTLE_ENDIAN) || defined(CONFIG_SYS_WRITE_SWAPPED_DATA)
206 		cp_offset = info->portwidth - i;
207 		val = *((uchar*)&cmd_le + cword_offset);
208 #else
209 		cp_offset = i - 1;
210 		val = *((uchar*)&cmd + sizeof(u32) - cword_offset - 1);
211 #endif
212 		cp[cp_offset] = (cword_offset >= sizeof(u32)) ? 0x00 : val;
213 	}
214 }
215 
216 #ifdef DEBUG
217 /*-----------------------------------------------------------------------
218  * Debug support
219  */
220 static void print_longlong (char *str, unsigned long long data)
221 {
222 	int i;
223 	char *cp;
224 
225 	cp = (char *) &data;
226 	for (i = 0; i < 8; i++)
227 		sprintf (&str[i * 2], "%2.2x", *cp++);
228 }
229 
230 static void flash_printqry (struct cfi_qry *qry)
231 {
232 	u8 *p = (u8 *)qry;
233 	int x, y;
234 
235 	for (x = 0; x < sizeof(struct cfi_qry); x += 16) {
236 		debug("%02x : ", x);
237 		for (y = 0; y < 16; y++)
238 			debug("%2.2x ", p[x + y]);
239 		debug(" ");
240 		for (y = 0; y < 16; y++) {
241 			unsigned char c = p[x + y];
242 			if (c >= 0x20 && c <= 0x7e)
243 				debug("%c", c);
244 			else
245 				debug(".");
246 		}
247 		debug("\n");
248 	}
249 }
250 #endif
251 
252 
253 /*-----------------------------------------------------------------------
254  * read a character at a port width address
255  */
256 static inline uchar flash_read_uchar (flash_info_t * info, uint offset)
257 {
258 	uchar *cp;
259 	uchar retval;
260 
261 	cp = flash_map (info, 0, offset);
262 #if defined(__LITTLE_ENDIAN) || defined(CONFIG_SYS_WRITE_SWAPPED_DATA)
263 	retval = flash_read8(cp);
264 #else
265 	retval = flash_read8(cp + info->portwidth - 1);
266 #endif
267 	flash_unmap (info, 0, offset, cp);
268 	return retval;
269 }
270 
271 /*-----------------------------------------------------------------------
272  * read a word at a port width address, assume 16bit bus
273  */
274 static inline ushort flash_read_word (flash_info_t * info, uint offset)
275 {
276 	ushort *addr, retval;
277 
278 	addr = flash_map (info, 0, offset);
279 	retval = flash_read16 (addr);
280 	flash_unmap (info, 0, offset, addr);
281 	return retval;
282 }
283 
284 
285 /*-----------------------------------------------------------------------
286  * read a long word by picking the least significant byte of each maximum
287  * port size word. Swap for ppc format.
288  */
289 static ulong flash_read_long (flash_info_t * info, flash_sect_t sect,
290 			      uint offset)
291 {
292 	uchar *addr;
293 	ulong retval;
294 
295 #ifdef DEBUG
296 	int x;
297 #endif
298 	addr = flash_map (info, sect, offset);
299 
300 #ifdef DEBUG
301 	debug ("long addr is at %p info->portwidth = %d\n", addr,
302 	       info->portwidth);
303 	for (x = 0; x < 4 * info->portwidth; x++) {
304 		debug ("addr[%x] = 0x%x\n", x, flash_read8(addr + x));
305 	}
306 #endif
307 #if defined(__LITTLE_ENDIAN) || defined(CONFIG_SYS_WRITE_SWAPPED_DATA)
308 	retval = ((flash_read8(addr) << 16) |
309 		  (flash_read8(addr + info->portwidth) << 24) |
310 		  (flash_read8(addr + 2 * info->portwidth)) |
311 		  (flash_read8(addr + 3 * info->portwidth) << 8));
312 #else
313 	retval = ((flash_read8(addr + 2 * info->portwidth - 1) << 24) |
314 		  (flash_read8(addr + info->portwidth - 1) << 16) |
315 		  (flash_read8(addr + 4 * info->portwidth - 1) << 8) |
316 		  (flash_read8(addr + 3 * info->portwidth - 1)));
317 #endif
318 	flash_unmap(info, sect, offset, addr);
319 
320 	return retval;
321 }
322 
323 /*
324  * Write a proper sized command to the correct address
325  */
326 void flash_write_cmd (flash_info_t * info, flash_sect_t sect,
327 		      uint offset, u32 cmd)
328 {
329 
330 	void *addr;
331 	cfiword_t cword;
332 
333 	addr = flash_map (info, sect, offset);
334 	flash_make_cmd (info, cmd, &cword);
335 	switch (info->portwidth) {
336 	case FLASH_CFI_8BIT:
337 		debug ("fwc addr %p cmd %x %x 8bit x %d bit\n", addr, cmd,
338 		       cword.w8, info->chipwidth << CFI_FLASH_SHIFT_WIDTH);
339 		flash_write8(cword.w8, addr);
340 		break;
341 	case FLASH_CFI_16BIT:
342 		debug ("fwc addr %p cmd %x %4.4x 16bit x %d bit\n", addr,
343 		       cmd, cword.w16,
344 		       info->chipwidth << CFI_FLASH_SHIFT_WIDTH);
345 		flash_write16(cword.w16, addr);
346 		break;
347 	case FLASH_CFI_32BIT:
348 		debug ("fwc addr %p cmd %x %8.8x 32bit x %d bit\n", addr,
349 		       cmd, cword.w32,
350 		       info->chipwidth << CFI_FLASH_SHIFT_WIDTH);
351 		flash_write32(cword.w32, addr);
352 		break;
353 	case FLASH_CFI_64BIT:
354 #ifdef DEBUG
355 		{
356 			char str[20];
357 
358 			print_longlong (str, cword.w64);
359 
360 			debug ("fwrite addr %p cmd %x %s 64 bit x %d bit\n",
361 			       addr, cmd, str,
362 			       info->chipwidth << CFI_FLASH_SHIFT_WIDTH);
363 		}
364 #endif
365 		flash_write64(cword.w64, addr);
366 		break;
367 	}
368 
369 	/* Ensure all the instructions are fully finished */
370 	sync();
371 
372 	flash_unmap(info, sect, offset, addr);
373 }
374 
375 static void flash_unlock_seq (flash_info_t * info, flash_sect_t sect)
376 {
377 	flash_write_cmd (info, sect, info->addr_unlock1, AMD_CMD_UNLOCK_START);
378 	flash_write_cmd (info, sect, info->addr_unlock2, AMD_CMD_UNLOCK_ACK);
379 }
380 
381 /*-----------------------------------------------------------------------
382  */
383 static int flash_isequal (flash_info_t * info, flash_sect_t sect,
384 			  uint offset, uchar cmd)
385 {
386 	void *addr;
387 	cfiword_t cword;
388 	int retval;
389 
390 	addr = flash_map (info, sect, offset);
391 	flash_make_cmd (info, cmd, &cword);
392 
393 	debug ("is= cmd %x(%c) addr %p ", cmd, cmd, addr);
394 	switch (info->portwidth) {
395 	case FLASH_CFI_8BIT:
396 		debug ("is= %x %x\n", flash_read8(addr), cword.w8);
397 		retval = (flash_read8(addr) == cword.w8);
398 		break;
399 	case FLASH_CFI_16BIT:
400 		debug ("is= %4.4x %4.4x\n", flash_read16(addr), cword.w16);
401 		retval = (flash_read16(addr) == cword.w16);
402 		break;
403 	case FLASH_CFI_32BIT:
404 		debug ("is= %8.8x %8.8x\n", flash_read32(addr), cword.w32);
405 		retval = (flash_read32(addr) == cword.w32);
406 		break;
407 	case FLASH_CFI_64BIT:
408 #ifdef DEBUG
409 		{
410 			char str1[20];
411 			char str2[20];
412 
413 			print_longlong (str1, flash_read64(addr));
414 			print_longlong (str2, cword.w64);
415 			debug ("is= %s %s\n", str1, str2);
416 		}
417 #endif
418 		retval = (flash_read64(addr) == cword.w64);
419 		break;
420 	default:
421 		retval = 0;
422 		break;
423 	}
424 	flash_unmap(info, sect, offset, addr);
425 
426 	return retval;
427 }
428 
429 /*-----------------------------------------------------------------------
430  */
431 static int flash_isset (flash_info_t * info, flash_sect_t sect,
432 			uint offset, uchar cmd)
433 {
434 	void *addr;
435 	cfiword_t cword;
436 	int retval;
437 
438 	addr = flash_map (info, sect, offset);
439 	flash_make_cmd (info, cmd, &cword);
440 	switch (info->portwidth) {
441 	case FLASH_CFI_8BIT:
442 		retval = ((flash_read8(addr) & cword.w8) == cword.w8);
443 		break;
444 	case FLASH_CFI_16BIT:
445 		retval = ((flash_read16(addr) & cword.w16) == cword.w16);
446 		break;
447 	case FLASH_CFI_32BIT:
448 		retval = ((flash_read32(addr) & cword.w32) == cword.w32);
449 		break;
450 	case FLASH_CFI_64BIT:
451 		retval = ((flash_read64(addr) & cword.w64) == cword.w64);
452 		break;
453 	default:
454 		retval = 0;
455 		break;
456 	}
457 	flash_unmap(info, sect, offset, addr);
458 
459 	return retval;
460 }
461 
462 /*-----------------------------------------------------------------------
463  */
464 static int flash_toggle (flash_info_t * info, flash_sect_t sect,
465 			 uint offset, uchar cmd)
466 {
467 	void *addr;
468 	cfiword_t cword;
469 	int retval;
470 
471 	addr = flash_map (info, sect, offset);
472 	flash_make_cmd (info, cmd, &cword);
473 	switch (info->portwidth) {
474 	case FLASH_CFI_8BIT:
475 		retval = flash_read8(addr) != flash_read8(addr);
476 		break;
477 	case FLASH_CFI_16BIT:
478 		retval = flash_read16(addr) != flash_read16(addr);
479 		break;
480 	case FLASH_CFI_32BIT:
481 		retval = flash_read32(addr) != flash_read32(addr);
482 		break;
483 	case FLASH_CFI_64BIT:
484 		retval = ( (flash_read32( addr ) != flash_read32( addr )) ||
485 			   (flash_read32(addr+4) != flash_read32(addr+4)) );
486 		break;
487 	default:
488 		retval = 0;
489 		break;
490 	}
491 	flash_unmap(info, sect, offset, addr);
492 
493 	return retval;
494 }
495 
496 /*
497  * flash_is_busy - check to see if the flash is busy
498  *
499  * This routine checks the status of the chip and returns true if the
500  * chip is busy.
501  */
502 static int flash_is_busy (flash_info_t * info, flash_sect_t sect)
503 {
504 	int retval;
505 
506 	switch (info->vendor) {
507 	case CFI_CMDSET_INTEL_PROG_REGIONS:
508 	case CFI_CMDSET_INTEL_STANDARD:
509 	case CFI_CMDSET_INTEL_EXTENDED:
510 		retval = !flash_isset (info, sect, 0, FLASH_STATUS_DONE);
511 		break;
512 	case CFI_CMDSET_AMD_STANDARD:
513 	case CFI_CMDSET_AMD_EXTENDED:
514 #ifdef CONFIG_FLASH_CFI_LEGACY
515 	case CFI_CMDSET_AMD_LEGACY:
516 #endif
517 		retval = flash_toggle (info, sect, 0, AMD_STATUS_TOGGLE);
518 		break;
519 	default:
520 		retval = 0;
521 	}
522 	debug ("flash_is_busy: %d\n", retval);
523 	return retval;
524 }
525 
526 /*-----------------------------------------------------------------------
527  *  wait for XSR.7 to be set. Time out with an error if it does not.
528  *  This routine does not set the flash to read-array mode.
529  */
530 static int flash_status_check (flash_info_t * info, flash_sect_t sector,
531 			       ulong tout, char *prompt)
532 {
533 	ulong start;
534 
535 #if CONFIG_SYS_HZ != 1000
536 	if ((ulong)CONFIG_SYS_HZ > 100000)
537 		tout *= (ulong)CONFIG_SYS_HZ / 1000;  /* for a big HZ, avoid overflow */
538 	else
539 		tout = DIV_ROUND_UP(tout * (ulong)CONFIG_SYS_HZ, 1000);
540 #endif
541 
542 	/* Wait for command completion */
543 #ifdef CONFIG_SYS_LOW_RES_TIMER
544 	reset_timer();
545 #endif
546 	start = get_timer (0);
547 	WATCHDOG_RESET();
548 	while (flash_is_busy (info, sector)) {
549 		if (get_timer (start) > tout) {
550 			printf ("Flash %s timeout at address %lx data %lx\n",
551 				prompt, info->start[sector],
552 				flash_read_long (info, sector, 0));
553 			flash_write_cmd (info, sector, 0, info->cmd_reset);
554 			udelay(1);
555 			return ERR_TIMOUT;
556 		}
557 		udelay (1);		/* also triggers watchdog */
558 	}
559 	return ERR_OK;
560 }
561 
562 /*-----------------------------------------------------------------------
563  * Wait for XSR.7 to be set, if it times out print an error, otherwise
564  * do a full status check.
565  *
566  * This routine sets the flash to read-array mode.
567  */
568 static int flash_full_status_check (flash_info_t * info, flash_sect_t sector,
569 				    ulong tout, char *prompt)
570 {
571 	int retcode;
572 
573 	retcode = flash_status_check (info, sector, tout, prompt);
574 	switch (info->vendor) {
575 	case CFI_CMDSET_INTEL_PROG_REGIONS:
576 	case CFI_CMDSET_INTEL_EXTENDED:
577 	case CFI_CMDSET_INTEL_STANDARD:
578 		if ((retcode == ERR_OK)
579 		    && !flash_isequal (info, sector, 0, FLASH_STATUS_DONE)) {
580 			retcode = ERR_INVAL;
581 			printf ("Flash %s error at address %lx\n", prompt,
582 				info->start[sector]);
583 			if (flash_isset (info, sector, 0, FLASH_STATUS_ECLBS |
584 					 FLASH_STATUS_PSLBS)) {
585 				puts ("Command Sequence Error.\n");
586 			} else if (flash_isset (info, sector, 0,
587 						FLASH_STATUS_ECLBS)) {
588 				puts ("Block Erase Error.\n");
589 				retcode = ERR_NOT_ERASED;
590 			} else if (flash_isset (info, sector, 0,
591 						FLASH_STATUS_PSLBS)) {
592 				puts ("Locking Error\n");
593 			}
594 			if (flash_isset (info, sector, 0, FLASH_STATUS_DPS)) {
595 				puts ("Block locked.\n");
596 				retcode = ERR_PROTECTED;
597 			}
598 			if (flash_isset (info, sector, 0, FLASH_STATUS_VPENS))
599 				puts ("Vpp Low Error.\n");
600 		}
601 		flash_write_cmd (info, sector, 0, info->cmd_reset);
602 		udelay(1);
603 		break;
604 	default:
605 		break;
606 	}
607 	return retcode;
608 }
609 
610 static int use_flash_status_poll(flash_info_t *info)
611 {
612 #ifdef CONFIG_SYS_CFI_FLASH_STATUS_POLL
613 	if (info->vendor == CFI_CMDSET_AMD_EXTENDED ||
614 	    info->vendor == CFI_CMDSET_AMD_STANDARD)
615 		return 1;
616 #endif
617 	return 0;
618 }
619 
620 static int flash_status_poll(flash_info_t *info, void *src, void *dst,
621 			     ulong tout, char *prompt)
622 {
623 #ifdef CONFIG_SYS_CFI_FLASH_STATUS_POLL
624 	ulong start;
625 	int ready;
626 
627 #if CONFIG_SYS_HZ != 1000
628 	if ((ulong)CONFIG_SYS_HZ > 100000)
629 		tout *= (ulong)CONFIG_SYS_HZ / 1000;  /* for a big HZ, avoid overflow */
630 	else
631 		tout = DIV_ROUND_UP(tout * (ulong)CONFIG_SYS_HZ, 1000);
632 #endif
633 
634 	/* Wait for command completion */
635 #ifdef CONFIG_SYS_LOW_RES_TIMER
636 	reset_timer();
637 #endif
638 	start = get_timer(0);
639 	WATCHDOG_RESET();
640 	while (1) {
641 		switch (info->portwidth) {
642 		case FLASH_CFI_8BIT:
643 			ready = flash_read8(dst) == flash_read8(src);
644 			break;
645 		case FLASH_CFI_16BIT:
646 			ready = flash_read16(dst) == flash_read16(src);
647 			break;
648 		case FLASH_CFI_32BIT:
649 			ready = flash_read32(dst) == flash_read32(src);
650 			break;
651 		case FLASH_CFI_64BIT:
652 			ready = flash_read64(dst) == flash_read64(src);
653 			break;
654 		default:
655 			ready = 0;
656 			break;
657 		}
658 		if (ready)
659 			break;
660 		if (get_timer(start) > tout) {
661 			printf("Flash %s timeout at address %lx data %lx\n",
662 			       prompt, (ulong)dst, (ulong)flash_read8(dst));
663 			return ERR_TIMOUT;
664 		}
665 		udelay(1);		/* also triggers watchdog */
666 	}
667 #endif /* CONFIG_SYS_CFI_FLASH_STATUS_POLL */
668 	return ERR_OK;
669 }
670 
671 /*-----------------------------------------------------------------------
672  */
673 static void flash_add_byte (flash_info_t * info, cfiword_t * cword, uchar c)
674 {
675 #if defined(__LITTLE_ENDIAN) && !defined(CONFIG_SYS_WRITE_SWAPPED_DATA)
676 	unsigned short	w;
677 	unsigned int	l;
678 	unsigned long long ll;
679 #endif
680 
681 	switch (info->portwidth) {
682 	case FLASH_CFI_8BIT:
683 		cword->w8 = c;
684 		break;
685 	case FLASH_CFI_16BIT:
686 #if defined(__LITTLE_ENDIAN) && !defined(CONFIG_SYS_WRITE_SWAPPED_DATA)
687 		w = c;
688 		w <<= 8;
689 		cword->w16 = (cword->w16 >> 8) | w;
690 #else
691 		cword->w16 = (cword->w16 << 8) | c;
692 #endif
693 		break;
694 	case FLASH_CFI_32BIT:
695 #if defined(__LITTLE_ENDIAN) && !defined(CONFIG_SYS_WRITE_SWAPPED_DATA)
696 		l = c;
697 		l <<= 24;
698 		cword->w32 = (cword->w32 >> 8) | l;
699 #else
700 		cword->w32 = (cword->w32 << 8) | c;
701 #endif
702 		break;
703 	case FLASH_CFI_64BIT:
704 #if defined(__LITTLE_ENDIAN) && !defined(CONFIG_SYS_WRITE_SWAPPED_DATA)
705 		ll = c;
706 		ll <<= 56;
707 		cword->w64 = (cword->w64 >> 8) | ll;
708 #else
709 		cword->w64 = (cword->w64 << 8) | c;
710 #endif
711 		break;
712 	}
713 }
714 
715 /*
716  * Loop through the sector table starting from the previously found sector.
717  * Searches forwards or backwards, dependent on the passed address.
718  */
719 static flash_sect_t find_sector (flash_info_t * info, ulong addr)
720 {
721 	static flash_sect_t saved_sector; /* previously found sector */
722 	static flash_info_t *saved_info; /* previously used flash bank */
723 	flash_sect_t sector = saved_sector;
724 
725 	if ((info != saved_info) || (sector >= info->sector_count))
726 		sector = 0;
727 
728 	while ((info->start[sector] < addr)
729 			&& (sector < info->sector_count - 1))
730 		sector++;
731 	while ((info->start[sector] > addr) && (sector > 0))
732 		/*
733 		 * also decrements the sector in case of an overshot
734 		 * in the first loop
735 		 */
736 		sector--;
737 
738 	saved_sector = sector;
739 	saved_info = info;
740 	return sector;
741 }
742 
743 /*-----------------------------------------------------------------------
744  */
745 static int flash_write_cfiword (flash_info_t * info, ulong dest,
746 				cfiword_t cword)
747 {
748 	void *dstaddr = (void *)dest;
749 	int flag;
750 	flash_sect_t sect = 0;
751 	char sect_found = 0;
752 
753 	/* Check if Flash is (sufficiently) erased */
754 	switch (info->portwidth) {
755 	case FLASH_CFI_8BIT:
756 		flag = ((flash_read8(dstaddr) & cword.w8) == cword.w8);
757 		break;
758 	case FLASH_CFI_16BIT:
759 		flag = ((flash_read16(dstaddr) & cword.w16) == cword.w16);
760 		break;
761 	case FLASH_CFI_32BIT:
762 		flag = ((flash_read32(dstaddr) & cword.w32) == cword.w32);
763 		break;
764 	case FLASH_CFI_64BIT:
765 		flag = ((flash_read64(dstaddr) & cword.w64) == cword.w64);
766 		break;
767 	default:
768 		flag = 0;
769 		break;
770 	}
771 	if (!flag)
772 		return ERR_NOT_ERASED;
773 
774 	/* Disable interrupts which might cause a timeout here */
775 	flag = disable_interrupts ();
776 
777 	switch (info->vendor) {
778 	case CFI_CMDSET_INTEL_PROG_REGIONS:
779 	case CFI_CMDSET_INTEL_EXTENDED:
780 	case CFI_CMDSET_INTEL_STANDARD:
781 		flash_write_cmd (info, 0, 0, FLASH_CMD_CLEAR_STATUS);
782 		flash_write_cmd (info, 0, 0, FLASH_CMD_WRITE);
783 		break;
784 	case CFI_CMDSET_AMD_EXTENDED:
785 	case CFI_CMDSET_AMD_STANDARD:
786 		sect = find_sector(info, dest);
787 		flash_unlock_seq (info, sect);
788 		flash_write_cmd (info, sect, info->addr_unlock1, AMD_CMD_WRITE);
789 		sect_found = 1;
790 		break;
791 #ifdef CONFIG_FLASH_CFI_LEGACY
792 	case CFI_CMDSET_AMD_LEGACY:
793 		sect = find_sector(info, dest);
794 		flash_unlock_seq (info, 0);
795 		flash_write_cmd (info, 0, info->addr_unlock1, AMD_CMD_WRITE);
796 		sect_found = 1;
797 		break;
798 #endif
799 	}
800 
801 	switch (info->portwidth) {
802 	case FLASH_CFI_8BIT:
803 		flash_write8(cword.w8, dstaddr);
804 		break;
805 	case FLASH_CFI_16BIT:
806 		flash_write16(cword.w16, dstaddr);
807 		break;
808 	case FLASH_CFI_32BIT:
809 		flash_write32(cword.w32, dstaddr);
810 		break;
811 	case FLASH_CFI_64BIT:
812 		flash_write64(cword.w64, dstaddr);
813 		break;
814 	}
815 
816 	/* re-enable interrupts if necessary */
817 	if (flag)
818 		enable_interrupts ();
819 
820 	if (!sect_found)
821 		sect = find_sector (info, dest);
822 
823 	if (use_flash_status_poll(info))
824 		return flash_status_poll(info, &cword, dstaddr,
825 					 info->write_tout, "write");
826 	else
827 		return flash_full_status_check(info, sect,
828 					       info->write_tout, "write");
829 }
830 
831 #ifdef CONFIG_SYS_FLASH_USE_BUFFER_WRITE
832 
833 static int flash_write_cfibuffer (flash_info_t * info, ulong dest, uchar * cp,
834 				  int len)
835 {
836 	flash_sect_t sector;
837 	int cnt;
838 	int retcode;
839 	void *src = cp;
840 	void *dst = (void *)dest;
841 	void *dst2 = dst;
842 	int flag = 1;
843 	uint offset = 0;
844 	unsigned int shift;
845 	uchar write_cmd;
846 
847 	switch (info->portwidth) {
848 	case FLASH_CFI_8BIT:
849 		shift = 0;
850 		break;
851 	case FLASH_CFI_16BIT:
852 		shift = 1;
853 		break;
854 	case FLASH_CFI_32BIT:
855 		shift = 2;
856 		break;
857 	case FLASH_CFI_64BIT:
858 		shift = 3;
859 		break;
860 	default:
861 		retcode = ERR_INVAL;
862 		goto out_unmap;
863 	}
864 
865 	cnt = len >> shift;
866 
867 	while ((cnt-- > 0) && (flag == 1)) {
868 		switch (info->portwidth) {
869 		case FLASH_CFI_8BIT:
870 			flag = ((flash_read8(dst2) & flash_read8(src)) ==
871 				flash_read8(src));
872 			src += 1, dst2 += 1;
873 			break;
874 		case FLASH_CFI_16BIT:
875 			flag = ((flash_read16(dst2) & flash_read16(src)) ==
876 				flash_read16(src));
877 			src += 2, dst2 += 2;
878 			break;
879 		case FLASH_CFI_32BIT:
880 			flag = ((flash_read32(dst2) & flash_read32(src)) ==
881 				flash_read32(src));
882 			src += 4, dst2 += 4;
883 			break;
884 		case FLASH_CFI_64BIT:
885 			flag = ((flash_read64(dst2) & flash_read64(src)) ==
886 				flash_read64(src));
887 			src += 8, dst2 += 8;
888 			break;
889 		}
890 	}
891 	if (!flag) {
892 		retcode = ERR_NOT_ERASED;
893 		goto out_unmap;
894 	}
895 
896 	src = cp;
897 	sector = find_sector (info, dest);
898 
899 	switch (info->vendor) {
900 	case CFI_CMDSET_INTEL_PROG_REGIONS:
901 	case CFI_CMDSET_INTEL_STANDARD:
902 	case CFI_CMDSET_INTEL_EXTENDED:
903 		write_cmd = (info->vendor == CFI_CMDSET_INTEL_PROG_REGIONS) ?
904 					FLASH_CMD_WRITE_BUFFER_PROG : FLASH_CMD_WRITE_TO_BUFFER;
905 		flash_write_cmd (info, sector, 0, FLASH_CMD_CLEAR_STATUS);
906 		flash_write_cmd (info, sector, 0, FLASH_CMD_READ_STATUS);
907 		flash_write_cmd (info, sector, 0, write_cmd);
908 		retcode = flash_status_check (info, sector,
909 					      info->buffer_write_tout,
910 					      "write to buffer");
911 		if (retcode == ERR_OK) {
912 			/* reduce the number of loops by the width of
913 			 * the port */
914 			cnt = len >> shift;
915 			flash_write_cmd (info, sector, 0, cnt - 1);
916 			while (cnt-- > 0) {
917 				switch (info->portwidth) {
918 				case FLASH_CFI_8BIT:
919 					flash_write8(flash_read8(src), dst);
920 					src += 1, dst += 1;
921 					break;
922 				case FLASH_CFI_16BIT:
923 					flash_write16(flash_read16(src), dst);
924 					src += 2, dst += 2;
925 					break;
926 				case FLASH_CFI_32BIT:
927 					flash_write32(flash_read32(src), dst);
928 					src += 4, dst += 4;
929 					break;
930 				case FLASH_CFI_64BIT:
931 					flash_write64(flash_read64(src), dst);
932 					src += 8, dst += 8;
933 					break;
934 				default:
935 					retcode = ERR_INVAL;
936 					goto out_unmap;
937 				}
938 			}
939 			flash_write_cmd (info, sector, 0,
940 					 FLASH_CMD_WRITE_BUFFER_CONFIRM);
941 			retcode = flash_full_status_check (
942 				info, sector, info->buffer_write_tout,
943 				"buffer write");
944 		}
945 
946 		break;
947 
948 	case CFI_CMDSET_AMD_STANDARD:
949 	case CFI_CMDSET_AMD_EXTENDED:
950 		flash_unlock_seq(info,0);
951 
952 #ifdef CONFIG_FLASH_SPANSION_S29WS_N
953 		offset = ((unsigned long)dst - info->start[sector]) >> shift;
954 #endif
955 		flash_write_cmd(info, sector, offset, AMD_CMD_WRITE_TO_BUFFER);
956 		cnt = len >> shift;
957 		flash_write_cmd(info, sector, offset, cnt - 1);
958 
959 		switch (info->portwidth) {
960 		case FLASH_CFI_8BIT:
961 			while (cnt-- > 0) {
962 				flash_write8(flash_read8(src), dst);
963 				src += 1, dst += 1;
964 			}
965 			break;
966 		case FLASH_CFI_16BIT:
967 			while (cnt-- > 0) {
968 				flash_write16(flash_read16(src), dst);
969 				src += 2, dst += 2;
970 			}
971 			break;
972 		case FLASH_CFI_32BIT:
973 			while (cnt-- > 0) {
974 				flash_write32(flash_read32(src), dst);
975 				src += 4, dst += 4;
976 			}
977 			break;
978 		case FLASH_CFI_64BIT:
979 			while (cnt-- > 0) {
980 				flash_write64(flash_read64(src), dst);
981 				src += 8, dst += 8;
982 			}
983 			break;
984 		default:
985 			retcode = ERR_INVAL;
986 			goto out_unmap;
987 		}
988 
989 		flash_write_cmd (info, sector, 0, AMD_CMD_WRITE_BUFFER_CONFIRM);
990 		if (use_flash_status_poll(info))
991 			retcode = flash_status_poll(info, src - (1 << shift),
992 						    dst - (1 << shift),
993 						    info->buffer_write_tout,
994 						    "buffer write");
995 		else
996 			retcode = flash_full_status_check(info, sector,
997 							  info->buffer_write_tout,
998 							  "buffer write");
999 		break;
1000 
1001 	default:
1002 		debug ("Unknown Command Set\n");
1003 		retcode = ERR_INVAL;
1004 		break;
1005 	}
1006 
1007 out_unmap:
1008 	return retcode;
1009 }
1010 #endif /* CONFIG_SYS_FLASH_USE_BUFFER_WRITE */
1011 
1012 
1013 /*-----------------------------------------------------------------------
1014  */
1015 int flash_erase (flash_info_t * info, int s_first, int s_last)
1016 {
1017 	int rcode = 0;
1018 	int prot;
1019 	flash_sect_t sect;
1020 	int st;
1021 
1022 	if (info->flash_id != FLASH_MAN_CFI) {
1023 		puts ("Can't erase unknown flash type - aborted\n");
1024 		return 1;
1025 	}
1026 	if ((s_first < 0) || (s_first > s_last)) {
1027 		puts ("- no sectors to erase\n");
1028 		return 1;
1029 	}
1030 
1031 	prot = 0;
1032 	for (sect = s_first; sect <= s_last; ++sect) {
1033 		if (info->protect[sect]) {
1034 			prot++;
1035 		}
1036 	}
1037 	if (prot) {
1038 		printf ("- Warning: %d protected sectors will not be erased!\n",
1039 			prot);
1040 	} else if (flash_verbose) {
1041 		putc ('\n');
1042 	}
1043 
1044 
1045 	for (sect = s_first; sect <= s_last; sect++) {
1046 		if (ctrlc()) {
1047 			printf("\n");
1048 			return 1;
1049 		}
1050 
1051 		if (info->protect[sect] == 0) { /* not protected */
1052 #ifdef CONFIG_SYS_FLASH_CHECK_BLANK_BEFORE_ERASE
1053 			int k;
1054 			int size;
1055 			int erased;
1056 			u32 *flash;
1057 
1058 			/*
1059 			 * Check if whole sector is erased
1060 			 */
1061 			size = flash_sector_size(info, sect);
1062 			erased = 1;
1063 			flash = (u32 *)info->start[sect];
1064 			/* divide by 4 for longword access */
1065 			size = size >> 2;
1066 			for (k = 0; k < size; k++) {
1067 				if (flash_read32(flash++) != 0xffffffff) {
1068 					erased = 0;
1069 					break;
1070 				}
1071 			}
1072 			if (erased) {
1073 				if (flash_verbose)
1074 					putc(',');
1075 				continue;
1076 			}
1077 #endif
1078 			switch (info->vendor) {
1079 			case CFI_CMDSET_INTEL_PROG_REGIONS:
1080 			case CFI_CMDSET_INTEL_STANDARD:
1081 			case CFI_CMDSET_INTEL_EXTENDED:
1082 				flash_write_cmd (info, sect, 0,
1083 						 FLASH_CMD_CLEAR_STATUS);
1084 				flash_write_cmd (info, sect, 0,
1085 						 FLASH_CMD_BLOCK_ERASE);
1086 				flash_write_cmd (info, sect, 0,
1087 						 FLASH_CMD_ERASE_CONFIRM);
1088 				break;
1089 			case CFI_CMDSET_AMD_STANDARD:
1090 			case CFI_CMDSET_AMD_EXTENDED:
1091 				flash_unlock_seq (info, sect);
1092 				flash_write_cmd (info, sect,
1093 						info->addr_unlock1,
1094 						AMD_CMD_ERASE_START);
1095 				flash_unlock_seq (info, sect);
1096 				flash_write_cmd (info, sect, 0,
1097 						 info->cmd_erase_sector);
1098 				break;
1099 #ifdef CONFIG_FLASH_CFI_LEGACY
1100 			case CFI_CMDSET_AMD_LEGACY:
1101 				flash_unlock_seq (info, 0);
1102 				flash_write_cmd (info, 0, info->addr_unlock1,
1103 						AMD_CMD_ERASE_START);
1104 				flash_unlock_seq (info, 0);
1105 				flash_write_cmd (info, sect, 0,
1106 						AMD_CMD_ERASE_SECTOR);
1107 				break;
1108 #endif
1109 			default:
1110 				debug ("Unkown flash vendor %d\n",
1111 				       info->vendor);
1112 				break;
1113 			}
1114 
1115 			if (use_flash_status_poll(info)) {
1116 				cfiword_t cword;
1117 				void *dest;
1118 				cword.w64 = 0xffffffffffffffffULL;
1119 				dest = flash_map(info, sect, 0);
1120 				st = flash_status_poll(info, &cword, dest,
1121 						       info->erase_blk_tout, "erase");
1122 				flash_unmap(info, sect, 0, dest);
1123 			} else
1124 				st = flash_full_status_check(info, sect,
1125 							     info->erase_blk_tout,
1126 							     "erase");
1127 			if (st)
1128 				rcode = 1;
1129 			else if (flash_verbose)
1130 				putc ('.');
1131 		}
1132 	}
1133 
1134 	if (flash_verbose)
1135 		puts (" done\n");
1136 
1137 	return rcode;
1138 }
1139 
1140 #ifdef CONFIG_SYS_FLASH_EMPTY_INFO
1141 static int sector_erased(flash_info_t *info, int i)
1142 {
1143 	int k;
1144 	int size;
1145 	u32 *flash;
1146 
1147 	/*
1148 	 * Check if whole sector is erased
1149 	 */
1150 	size = flash_sector_size(info, i);
1151 	flash = (u32 *)info->start[i];
1152 	/* divide by 4 for longword access */
1153 	size = size >> 2;
1154 
1155 	for (k = 0; k < size; k++) {
1156 		if (flash_read32(flash++) != 0xffffffff)
1157 			return 0;	/* not erased */
1158 	}
1159 
1160 	return 1;			/* erased */
1161 }
1162 #endif /* CONFIG_SYS_FLASH_EMPTY_INFO */
1163 
1164 void flash_print_info (flash_info_t * info)
1165 {
1166 	int i;
1167 
1168 	if (info->flash_id != FLASH_MAN_CFI) {
1169 		puts ("missing or unknown FLASH type\n");
1170 		return;
1171 	}
1172 
1173 	printf ("%s flash (%d x %d)",
1174 		info->name,
1175 		(info->portwidth << 3), (info->chipwidth << 3));
1176 	if (info->size < 1024*1024)
1177 		printf ("  Size: %ld kB in %d Sectors\n",
1178 			info->size >> 10, info->sector_count);
1179 	else
1180 		printf ("  Size: %ld MB in %d Sectors\n",
1181 			info->size >> 20, info->sector_count);
1182 	printf ("  ");
1183 	switch (info->vendor) {
1184 		case CFI_CMDSET_INTEL_PROG_REGIONS:
1185 			printf ("Intel Prog Regions");
1186 			break;
1187 		case CFI_CMDSET_INTEL_STANDARD:
1188 			printf ("Intel Standard");
1189 			break;
1190 		case CFI_CMDSET_INTEL_EXTENDED:
1191 			printf ("Intel Extended");
1192 			break;
1193 		case CFI_CMDSET_AMD_STANDARD:
1194 			printf ("AMD Standard");
1195 			break;
1196 		case CFI_CMDSET_AMD_EXTENDED:
1197 			printf ("AMD Extended");
1198 			break;
1199 #ifdef CONFIG_FLASH_CFI_LEGACY
1200 		case CFI_CMDSET_AMD_LEGACY:
1201 			printf ("AMD Legacy");
1202 			break;
1203 #endif
1204 		default:
1205 			printf ("Unknown (%d)", info->vendor);
1206 			break;
1207 	}
1208 	printf (" command set, Manufacturer ID: 0x%02X, Device ID: 0x",
1209 		info->manufacturer_id);
1210 	printf (info->chipwidth == FLASH_CFI_16BIT ? "%04X" : "%02X",
1211 		info->device_id);
1212 	if ((info->device_id & 0xff) == 0x7E) {
1213 		printf(info->chipwidth == FLASH_CFI_16BIT ? "%04X" : "%02X",
1214 		info->device_id2);
1215 	}
1216 	if ((info->vendor == CFI_CMDSET_AMD_STANDARD) && (info->legacy_unlock))
1217 		printf("\n  Advanced Sector Protection (PPB) enabled");
1218 	printf ("\n  Erase timeout: %ld ms, write timeout: %ld ms\n",
1219 		info->erase_blk_tout,
1220 		info->write_tout);
1221 	if (info->buffer_size > 1) {
1222 		printf ("  Buffer write timeout: %ld ms, "
1223 			"buffer size: %d bytes\n",
1224 		info->buffer_write_tout,
1225 		info->buffer_size);
1226 	}
1227 
1228 	puts ("\n  Sector Start Addresses:");
1229 	for (i = 0; i < info->sector_count; ++i) {
1230 		if (ctrlc())
1231 			break;
1232 		if ((i % 5) == 0)
1233 			putc('\n');
1234 #ifdef CONFIG_SYS_FLASH_EMPTY_INFO
1235 		/* print empty and read-only info */
1236 		printf ("  %08lX %c %s ",
1237 			info->start[i],
1238 			sector_erased(info, i) ? 'E' : ' ',
1239 			info->protect[i] ? "RO" : "  ");
1240 #else	/* ! CONFIG_SYS_FLASH_EMPTY_INFO */
1241 		printf ("  %08lX   %s ",
1242 			info->start[i],
1243 			info->protect[i] ? "RO" : "  ");
1244 #endif
1245 	}
1246 	putc ('\n');
1247 	return;
1248 }
1249 
1250 /*-----------------------------------------------------------------------
1251  * This is used in a few places in write_buf() to show programming
1252  * progress.  Making it a function is nasty because it needs to do side
1253  * effect updates to digit and dots.  Repeated code is nasty too, so
1254  * we define it once here.
1255  */
1256 #ifdef CONFIG_FLASH_SHOW_PROGRESS
1257 #define FLASH_SHOW_PROGRESS(scale, dots, digit, dots_sub) \
1258 	if (flash_verbose) { \
1259 		dots -= dots_sub; \
1260 		if ((scale > 0) && (dots <= 0)) { \
1261 			if ((digit % 5) == 0) \
1262 				printf ("%d", digit / 5); \
1263 			else \
1264 				putc ('.'); \
1265 			digit--; \
1266 			dots += scale; \
1267 		} \
1268 	}
1269 #else
1270 #define FLASH_SHOW_PROGRESS(scale, dots, digit, dots_sub)
1271 #endif
1272 
1273 /*-----------------------------------------------------------------------
1274  * Copy memory to flash, returns:
1275  * 0 - OK
1276  * 1 - write timeout
1277  * 2 - Flash not erased
1278  */
1279 int write_buff (flash_info_t * info, uchar * src, ulong addr, ulong cnt)
1280 {
1281 	ulong wp;
1282 	uchar *p;
1283 	int aln;
1284 	cfiword_t cword;
1285 	int i, rc;
1286 #ifdef CONFIG_SYS_FLASH_USE_BUFFER_WRITE
1287 	int buffered_size;
1288 #endif
1289 #ifdef CONFIG_FLASH_SHOW_PROGRESS
1290 	int digit = CONFIG_FLASH_SHOW_PROGRESS;
1291 	int scale = 0;
1292 	int dots  = 0;
1293 
1294 	/*
1295 	 * Suppress if there are fewer than CONFIG_FLASH_SHOW_PROGRESS writes.
1296 	 */
1297 	if (cnt >= CONFIG_FLASH_SHOW_PROGRESS) {
1298 		scale = (int)((cnt + CONFIG_FLASH_SHOW_PROGRESS - 1) /
1299 			CONFIG_FLASH_SHOW_PROGRESS);
1300 	}
1301 #endif
1302 
1303 	/* get lower aligned address */
1304 	wp = (addr & ~(info->portwidth - 1));
1305 
1306 	/* handle unaligned start */
1307 	if ((aln = addr - wp) != 0) {
1308 		cword.w32 = 0;
1309 		p = (uchar *)wp;
1310 		for (i = 0; i < aln; ++i)
1311 			flash_add_byte (info, &cword, flash_read8(p + i));
1312 
1313 		for (; (i < info->portwidth) && (cnt > 0); i++) {
1314 			flash_add_byte (info, &cword, *src++);
1315 			cnt--;
1316 		}
1317 		for (; (cnt == 0) && (i < info->portwidth); ++i)
1318 			flash_add_byte (info, &cword, flash_read8(p + i));
1319 
1320 		rc = flash_write_cfiword (info, wp, cword);
1321 		if (rc != 0)
1322 			return rc;
1323 
1324 		wp += i;
1325 		FLASH_SHOW_PROGRESS(scale, dots, digit, i);
1326 	}
1327 
1328 	/* handle the aligned part */
1329 #ifdef CONFIG_SYS_FLASH_USE_BUFFER_WRITE
1330 	buffered_size = (info->portwidth / info->chipwidth);
1331 	buffered_size *= info->buffer_size;
1332 	while (cnt >= info->portwidth) {
1333 		/* prohibit buffer write when buffer_size is 1 */
1334 		if (info->buffer_size == 1) {
1335 			cword.w32 = 0;
1336 			for (i = 0; i < info->portwidth; i++)
1337 				flash_add_byte (info, &cword, *src++);
1338 			if ((rc = flash_write_cfiword (info, wp, cword)) != 0)
1339 				return rc;
1340 			wp += info->portwidth;
1341 			cnt -= info->portwidth;
1342 			continue;
1343 		}
1344 
1345 		/* write buffer until next buffered_size aligned boundary */
1346 		i = buffered_size - (wp % buffered_size);
1347 		if (i > cnt)
1348 			i = cnt;
1349 		if ((rc = flash_write_cfibuffer (info, wp, src, i)) != ERR_OK)
1350 			return rc;
1351 		i -= i & (info->portwidth - 1);
1352 		wp += i;
1353 		src += i;
1354 		cnt -= i;
1355 		FLASH_SHOW_PROGRESS(scale, dots, digit, i);
1356 		/* Only check every once in a while */
1357 		if ((cnt & 0xFFFF) < buffered_size && ctrlc())
1358 			return ERR_ABORTED;
1359 	}
1360 #else
1361 	while (cnt >= info->portwidth) {
1362 		cword.w32 = 0;
1363 		for (i = 0; i < info->portwidth; i++) {
1364 			flash_add_byte (info, &cword, *src++);
1365 		}
1366 		if ((rc = flash_write_cfiword (info, wp, cword)) != 0)
1367 			return rc;
1368 		wp += info->portwidth;
1369 		cnt -= info->portwidth;
1370 		FLASH_SHOW_PROGRESS(scale, dots, digit, info->portwidth);
1371 		/* Only check every once in a while */
1372 		if ((cnt & 0xFFFF) < info->portwidth && ctrlc())
1373 			return ERR_ABORTED;
1374 	}
1375 #endif /* CONFIG_SYS_FLASH_USE_BUFFER_WRITE */
1376 
1377 	if (cnt == 0) {
1378 		return (0);
1379 	}
1380 
1381 	/*
1382 	 * handle unaligned tail bytes
1383 	 */
1384 	cword.w32 = 0;
1385 	p = (uchar *)wp;
1386 	for (i = 0; (i < info->portwidth) && (cnt > 0); ++i) {
1387 		flash_add_byte (info, &cword, *src++);
1388 		--cnt;
1389 	}
1390 	for (; i < info->portwidth; ++i)
1391 		flash_add_byte (info, &cword, flash_read8(p + i));
1392 
1393 	return flash_write_cfiword (info, wp, cword);
1394 }
1395 
1396 static inline int manufact_match(flash_info_t *info, u32 manu)
1397 {
1398 	return info->manufacturer_id == ((manu & FLASH_VENDMASK) >> 16);
1399 }
1400 
1401 /*-----------------------------------------------------------------------
1402  */
1403 #ifdef CONFIG_SYS_FLASH_PROTECTION
1404 
1405 static int cfi_protect_bugfix(flash_info_t *info, long sector, int prot)
1406 {
1407 	if (manufact_match(info, INTEL_MANUFACT)
1408 	    && info->device_id == NUMONYX_256MBIT) {
1409 		/*
1410 		 * see errata called
1411 		 * "Numonyx Axcell P33/P30 Specification Update" :)
1412 		 */
1413 		flash_write_cmd(info, sector, 0, FLASH_CMD_READ_ID);
1414 		if (!flash_isequal(info, sector, FLASH_OFFSET_PROTECT,
1415 				   prot)) {
1416 			/*
1417 			 * cmd must come before FLASH_CMD_PROTECT + 20us
1418 			 * Disable interrupts which might cause a timeout here.
1419 			 */
1420 			int flag = disable_interrupts();
1421 			unsigned short cmd;
1422 
1423 			if (prot)
1424 				cmd = FLASH_CMD_PROTECT_SET;
1425 			else
1426 				cmd = FLASH_CMD_PROTECT_CLEAR;
1427 				flash_write_cmd(info, sector, 0,
1428 					  FLASH_CMD_PROTECT);
1429 			flash_write_cmd(info, sector, 0, cmd);
1430 			/* re-enable interrupts if necessary */
1431 			if (flag)
1432 				enable_interrupts();
1433 		}
1434 		return 1;
1435 	}
1436 	return 0;
1437 }
1438 
1439 int flash_real_protect (flash_info_t * info, long sector, int prot)
1440 {
1441 	int retcode = 0;
1442 
1443 	switch (info->vendor) {
1444 		case CFI_CMDSET_INTEL_PROG_REGIONS:
1445 		case CFI_CMDSET_INTEL_STANDARD:
1446 		case CFI_CMDSET_INTEL_EXTENDED:
1447 			if (!cfi_protect_bugfix(info, sector, prot)) {
1448 				flash_write_cmd(info, sector, 0,
1449 					 FLASH_CMD_CLEAR_STATUS);
1450 				flash_write_cmd(info, sector, 0,
1451 					FLASH_CMD_PROTECT);
1452 				if (prot)
1453 					flash_write_cmd(info, sector, 0,
1454 						FLASH_CMD_PROTECT_SET);
1455 				else
1456 					flash_write_cmd(info, sector, 0,
1457 						FLASH_CMD_PROTECT_CLEAR);
1458 
1459 			}
1460 			break;
1461 		case CFI_CMDSET_AMD_EXTENDED:
1462 		case CFI_CMDSET_AMD_STANDARD:
1463 			/* U-Boot only checks the first byte */
1464 			if (manufact_match(info, ATM_MANUFACT)) {
1465 				if (prot) {
1466 					flash_unlock_seq (info, 0);
1467 					flash_write_cmd (info, 0,
1468 							info->addr_unlock1,
1469 							ATM_CMD_SOFTLOCK_START);
1470 					flash_unlock_seq (info, 0);
1471 					flash_write_cmd (info, sector, 0,
1472 							ATM_CMD_LOCK_SECT);
1473 				} else {
1474 					flash_write_cmd (info, 0,
1475 							info->addr_unlock1,
1476 							AMD_CMD_UNLOCK_START);
1477 					if (info->device_id == ATM_ID_BV6416)
1478 						flash_write_cmd (info, sector,
1479 							0, ATM_CMD_UNLOCK_SECT);
1480 				}
1481 			}
1482 			if (info->legacy_unlock) {
1483 				int flag = disable_interrupts();
1484 				int lock_flag;
1485 
1486 				flash_unlock_seq(info, 0);
1487 				flash_write_cmd(info, 0, info->addr_unlock1,
1488 						AMD_CMD_SET_PPB_ENTRY);
1489 				lock_flag = flash_isset(info, sector, 0, 0x01);
1490 				if (prot) {
1491 					if (lock_flag) {
1492 						flash_write_cmd(info, sector, 0,
1493 							AMD_CMD_PPB_LOCK_BC1);
1494 						flash_write_cmd(info, sector, 0,
1495 							AMD_CMD_PPB_LOCK_BC2);
1496 					}
1497 					debug("sector %ld %slocked\n", sector,
1498 						lock_flag ? "" : "already ");
1499 				} else {
1500 					if (!lock_flag) {
1501 						debug("unlock %ld\n", sector);
1502 						flash_write_cmd(info, 0, 0,
1503 							AMD_CMD_PPB_UNLOCK_BC1);
1504 						flash_write_cmd(info, 0, 0,
1505 							AMD_CMD_PPB_UNLOCK_BC2);
1506 					}
1507 					debug("sector %ld %sunlocked\n", sector,
1508 						!lock_flag ? "" : "already ");
1509 				}
1510 				if (flag)
1511 					enable_interrupts();
1512 
1513 				if (flash_status_check(info, sector,
1514 						info->erase_blk_tout,
1515 						prot ? "protect" : "unprotect"))
1516 					printf("status check error\n");
1517 
1518 				flash_write_cmd(info, 0, 0,
1519 						AMD_CMD_SET_PPB_EXIT_BC1);
1520 				flash_write_cmd(info, 0, 0,
1521 						AMD_CMD_SET_PPB_EXIT_BC2);
1522 			}
1523 			break;
1524 #ifdef CONFIG_FLASH_CFI_LEGACY
1525 		case CFI_CMDSET_AMD_LEGACY:
1526 			flash_write_cmd (info, sector, 0, FLASH_CMD_CLEAR_STATUS);
1527 			flash_write_cmd (info, sector, 0, FLASH_CMD_PROTECT);
1528 			if (prot)
1529 				flash_write_cmd (info, sector, 0, FLASH_CMD_PROTECT_SET);
1530 			else
1531 				flash_write_cmd (info, sector, 0, FLASH_CMD_PROTECT_CLEAR);
1532 #endif
1533 	};
1534 
1535 	/*
1536 	 * Flash needs to be in status register read mode for
1537 	 * flash_full_status_check() to work correctly
1538 	 */
1539 	flash_write_cmd(info, sector, 0, FLASH_CMD_READ_STATUS);
1540 	if ((retcode =
1541 	     flash_full_status_check (info, sector, info->erase_blk_tout,
1542 				      prot ? "protect" : "unprotect")) == 0) {
1543 
1544 		info->protect[sector] = prot;
1545 
1546 		/*
1547 		 * On some of Intel's flash chips (marked via legacy_unlock)
1548 		 * unprotect unprotects all locking.
1549 		 */
1550 		if ((prot == 0) && (info->legacy_unlock)) {
1551 			flash_sect_t i;
1552 
1553 			for (i = 0; i < info->sector_count; i++) {
1554 				if (info->protect[i])
1555 					flash_real_protect (info, i, 1);
1556 			}
1557 		}
1558 	}
1559 	return retcode;
1560 }
1561 
1562 /*-----------------------------------------------------------------------
1563  * flash_read_user_serial - read the OneTimeProgramming cells
1564  */
1565 void flash_read_user_serial (flash_info_t * info, void *buffer, int offset,
1566 			     int len)
1567 {
1568 	uchar *src;
1569 	uchar *dst;
1570 
1571 	dst = buffer;
1572 	src = flash_map (info, 0, FLASH_OFFSET_USER_PROTECTION);
1573 	flash_write_cmd (info, 0, 0, FLASH_CMD_READ_ID);
1574 	memcpy (dst, src + offset, len);
1575 	flash_write_cmd (info, 0, 0, info->cmd_reset);
1576 	udelay(1);
1577 	flash_unmap(info, 0, FLASH_OFFSET_USER_PROTECTION, src);
1578 }
1579 
1580 /*
1581  * flash_read_factory_serial - read the device Id from the protection area
1582  */
1583 void flash_read_factory_serial (flash_info_t * info, void *buffer, int offset,
1584 				int len)
1585 {
1586 	uchar *src;
1587 
1588 	src = flash_map (info, 0, FLASH_OFFSET_INTEL_PROTECTION);
1589 	flash_write_cmd (info, 0, 0, FLASH_CMD_READ_ID);
1590 	memcpy (buffer, src + offset, len);
1591 	flash_write_cmd (info, 0, 0, info->cmd_reset);
1592 	udelay(1);
1593 	flash_unmap(info, 0, FLASH_OFFSET_INTEL_PROTECTION, src);
1594 }
1595 
1596 #endif /* CONFIG_SYS_FLASH_PROTECTION */
1597 
1598 /*-----------------------------------------------------------------------
1599  * Reverse the order of the erase regions in the CFI QRY structure.
1600  * This is needed for chips that are either a) correctly detected as
1601  * top-boot, or b) buggy.
1602  */
1603 static void cfi_reverse_geometry(struct cfi_qry *qry)
1604 {
1605 	unsigned int i, j;
1606 	u32 tmp;
1607 
1608 	for (i = 0, j = qry->num_erase_regions - 1; i < j; i++, j--) {
1609 		tmp = get_unaligned(&(qry->erase_region_info[i]));
1610 		put_unaligned(get_unaligned(&(qry->erase_region_info[j])),
1611 			      &(qry->erase_region_info[i]));
1612 		put_unaligned(tmp, &(qry->erase_region_info[j]));
1613 	}
1614 }
1615 
1616 /*-----------------------------------------------------------------------
1617  * read jedec ids from device and set corresponding fields in info struct
1618  *
1619  * Note: assume cfi->vendor, cfi->portwidth and cfi->chipwidth are correct
1620  *
1621  */
1622 static void cmdset_intel_read_jedec_ids(flash_info_t *info)
1623 {
1624 	flash_write_cmd(info, 0, 0, FLASH_CMD_RESET);
1625 	udelay(1);
1626 	flash_write_cmd(info, 0, 0, FLASH_CMD_READ_ID);
1627 	udelay(1000); /* some flash are slow to respond */
1628 	info->manufacturer_id = flash_read_uchar (info,
1629 					FLASH_OFFSET_MANUFACTURER_ID);
1630 	info->device_id = (info->chipwidth == FLASH_CFI_16BIT) ?
1631 			flash_read_word (info, FLASH_OFFSET_DEVICE_ID) :
1632 			flash_read_uchar (info, FLASH_OFFSET_DEVICE_ID);
1633 	flash_write_cmd(info, 0, 0, FLASH_CMD_RESET);
1634 }
1635 
1636 static int cmdset_intel_init(flash_info_t *info, struct cfi_qry *qry)
1637 {
1638 	info->cmd_reset = FLASH_CMD_RESET;
1639 
1640 	cmdset_intel_read_jedec_ids(info);
1641 	flash_write_cmd(info, 0, info->cfi_offset, FLASH_CMD_CFI);
1642 
1643 #ifdef CONFIG_SYS_FLASH_PROTECTION
1644 	/* read legacy lock/unlock bit from intel flash */
1645 	if (info->ext_addr) {
1646 		info->legacy_unlock = flash_read_uchar (info,
1647 				info->ext_addr + 5) & 0x08;
1648 	}
1649 #endif
1650 
1651 	return 0;
1652 }
1653 
1654 static void cmdset_amd_read_jedec_ids(flash_info_t *info)
1655 {
1656 	ushort bankId = 0;
1657 	uchar  manuId;
1658 
1659 	flash_write_cmd(info, 0, 0, AMD_CMD_RESET);
1660 	flash_unlock_seq(info, 0);
1661 	flash_write_cmd(info, 0, info->addr_unlock1, FLASH_CMD_READ_ID);
1662 	udelay(1000); /* some flash are slow to respond */
1663 
1664 	manuId = flash_read_uchar (info, FLASH_OFFSET_MANUFACTURER_ID);
1665 	/* JEDEC JEP106Z specifies ID codes up to bank 7 */
1666 	while (manuId == FLASH_CONTINUATION_CODE && bankId < 0x800) {
1667 		bankId += 0x100;
1668 		manuId = flash_read_uchar (info,
1669 			bankId | FLASH_OFFSET_MANUFACTURER_ID);
1670 	}
1671 	info->manufacturer_id = manuId;
1672 
1673 	switch (info->chipwidth){
1674 	case FLASH_CFI_8BIT:
1675 		info->device_id = flash_read_uchar (info,
1676 						FLASH_OFFSET_DEVICE_ID);
1677 		if (info->device_id == 0x7E) {
1678 			/* AMD 3-byte (expanded) device ids */
1679 			info->device_id2 = flash_read_uchar (info,
1680 						FLASH_OFFSET_DEVICE_ID2);
1681 			info->device_id2 <<= 8;
1682 			info->device_id2 |= flash_read_uchar (info,
1683 						FLASH_OFFSET_DEVICE_ID3);
1684 		}
1685 		break;
1686 	case FLASH_CFI_16BIT:
1687 		info->device_id = flash_read_word (info,
1688 						FLASH_OFFSET_DEVICE_ID);
1689 		if ((info->device_id & 0xff) == 0x7E) {
1690 			/* AMD 3-byte (expanded) device ids */
1691 			info->device_id2 = flash_read_uchar (info,
1692 						FLASH_OFFSET_DEVICE_ID2);
1693 			info->device_id2 <<= 8;
1694 			info->device_id2 |= flash_read_uchar (info,
1695 						FLASH_OFFSET_DEVICE_ID3);
1696 		}
1697 		break;
1698 	default:
1699 		break;
1700 	}
1701 	flash_write_cmd(info, 0, 0, AMD_CMD_RESET);
1702 	udelay(1);
1703 }
1704 
1705 static int cmdset_amd_init(flash_info_t *info, struct cfi_qry *qry)
1706 {
1707 	info->cmd_reset = AMD_CMD_RESET;
1708 	info->cmd_erase_sector = AMD_CMD_ERASE_SECTOR;
1709 
1710 	cmdset_amd_read_jedec_ids(info);
1711 	flash_write_cmd(info, 0, info->cfi_offset, FLASH_CMD_CFI);
1712 
1713 #ifdef CONFIG_SYS_FLASH_PROTECTION
1714 	if (info->ext_addr) {
1715 		/* read sector protect/unprotect scheme (at 0x49) */
1716 		if (flash_read_uchar(info, info->ext_addr + 9) == 0x8)
1717 			info->legacy_unlock = 1;
1718 	}
1719 #endif
1720 
1721 	return 0;
1722 }
1723 
1724 #ifdef CONFIG_FLASH_CFI_LEGACY
1725 static void flash_read_jedec_ids (flash_info_t * info)
1726 {
1727 	info->manufacturer_id = 0;
1728 	info->device_id       = 0;
1729 	info->device_id2      = 0;
1730 
1731 	switch (info->vendor) {
1732 	case CFI_CMDSET_INTEL_PROG_REGIONS:
1733 	case CFI_CMDSET_INTEL_STANDARD:
1734 	case CFI_CMDSET_INTEL_EXTENDED:
1735 		cmdset_intel_read_jedec_ids(info);
1736 		break;
1737 	case CFI_CMDSET_AMD_STANDARD:
1738 	case CFI_CMDSET_AMD_EXTENDED:
1739 		cmdset_amd_read_jedec_ids(info);
1740 		break;
1741 	default:
1742 		break;
1743 	}
1744 }
1745 
1746 /*-----------------------------------------------------------------------
1747  * Call board code to request info about non-CFI flash.
1748  * board_flash_get_legacy needs to fill in at least:
1749  * info->portwidth, info->chipwidth and info->interface for Jedec probing.
1750  */
1751 static int flash_detect_legacy(phys_addr_t base, int banknum)
1752 {
1753 	flash_info_t *info = &flash_info[banknum];
1754 
1755 	if (board_flash_get_legacy(base, banknum, info)) {
1756 		/* board code may have filled info completely. If not, we
1757 		   use JEDEC ID probing. */
1758 		if (!info->vendor) {
1759 			int modes[] = {
1760 				CFI_CMDSET_AMD_STANDARD,
1761 				CFI_CMDSET_INTEL_STANDARD
1762 			};
1763 			int i;
1764 
1765 			for (i = 0; i < ARRAY_SIZE(modes); i++) {
1766 				info->vendor = modes[i];
1767 				info->start[0] =
1768 					(ulong)map_physmem(base,
1769 							   info->portwidth,
1770 							   MAP_NOCACHE);
1771 				if (info->portwidth == FLASH_CFI_8BIT
1772 					&& info->interface == FLASH_CFI_X8X16) {
1773 					info->addr_unlock1 = 0x2AAA;
1774 					info->addr_unlock2 = 0x5555;
1775 				} else {
1776 					info->addr_unlock1 = 0x5555;
1777 					info->addr_unlock2 = 0x2AAA;
1778 				}
1779 				flash_read_jedec_ids(info);
1780 				debug("JEDEC PROBE: ID %x %x %x\n",
1781 						info->manufacturer_id,
1782 						info->device_id,
1783 						info->device_id2);
1784 				if (jedec_flash_match(info, info->start[0]))
1785 					break;
1786 				else
1787 					unmap_physmem((void *)info->start[0],
1788 						      info->portwidth);
1789 			}
1790 		}
1791 
1792 		switch(info->vendor) {
1793 		case CFI_CMDSET_INTEL_PROG_REGIONS:
1794 		case CFI_CMDSET_INTEL_STANDARD:
1795 		case CFI_CMDSET_INTEL_EXTENDED:
1796 			info->cmd_reset = FLASH_CMD_RESET;
1797 			break;
1798 		case CFI_CMDSET_AMD_STANDARD:
1799 		case CFI_CMDSET_AMD_EXTENDED:
1800 		case CFI_CMDSET_AMD_LEGACY:
1801 			info->cmd_reset = AMD_CMD_RESET;
1802 			break;
1803 		}
1804 		info->flash_id = FLASH_MAN_CFI;
1805 		return 1;
1806 	}
1807 	return 0; /* use CFI */
1808 }
1809 #else
1810 static inline int flash_detect_legacy(phys_addr_t base, int banknum)
1811 {
1812 	return 0; /* use CFI */
1813 }
1814 #endif
1815 
1816 /*-----------------------------------------------------------------------
1817  * detect if flash is compatible with the Common Flash Interface (CFI)
1818  * http://www.jedec.org/download/search/jesd68.pdf
1819  */
1820 static void flash_read_cfi (flash_info_t *info, void *buf,
1821 		unsigned int start, size_t len)
1822 {
1823 	u8 *p = buf;
1824 	unsigned int i;
1825 
1826 	for (i = 0; i < len; i++)
1827 		p[i] = flash_read_uchar(info, start + i);
1828 }
1829 
1830 static void __flash_cmd_reset(flash_info_t *info)
1831 {
1832 	/*
1833 	 * We do not yet know what kind of commandset to use, so we issue
1834 	 * the reset command in both Intel and AMD variants, in the hope
1835 	 * that AMD flash roms ignore the Intel command.
1836 	 */
1837 	flash_write_cmd(info, 0, 0, AMD_CMD_RESET);
1838 	udelay(1);
1839 	flash_write_cmd(info, 0, 0, FLASH_CMD_RESET);
1840 }
1841 void flash_cmd_reset(flash_info_t *info)
1842 	__attribute__((weak,alias("__flash_cmd_reset")));
1843 
1844 static int __flash_detect_cfi (flash_info_t * info, struct cfi_qry *qry)
1845 {
1846 	int cfi_offset;
1847 
1848 	/* Issue FLASH reset command */
1849 	flash_cmd_reset(info);
1850 
1851 	for (cfi_offset = 0; cfi_offset < ARRAY_SIZE(flash_offset_cfi);
1852 	     cfi_offset++) {
1853 		flash_write_cmd (info, 0, flash_offset_cfi[cfi_offset],
1854 				 FLASH_CMD_CFI);
1855 		if (flash_isequal (info, 0, FLASH_OFFSET_CFI_RESP, 'Q')
1856 		    && flash_isequal (info, 0, FLASH_OFFSET_CFI_RESP + 1, 'R')
1857 		    && flash_isequal (info, 0, FLASH_OFFSET_CFI_RESP + 2, 'Y')) {
1858 			flash_read_cfi(info, qry, FLASH_OFFSET_CFI_RESP,
1859 					sizeof(struct cfi_qry));
1860 			info->interface	= le16_to_cpu(qry->interface_desc);
1861 
1862 			info->cfi_offset = flash_offset_cfi[cfi_offset];
1863 			debug ("device interface is %d\n",
1864 			       info->interface);
1865 			debug ("found port %d chip %d ",
1866 			       info->portwidth, info->chipwidth);
1867 			debug ("port %d bits chip %d bits\n",
1868 			       info->portwidth << CFI_FLASH_SHIFT_WIDTH,
1869 			       info->chipwidth << CFI_FLASH_SHIFT_WIDTH);
1870 
1871 			/* calculate command offsets as in the Linux driver */
1872 			info->addr_unlock1 = 0x555;
1873 			info->addr_unlock2 = 0x2aa;
1874 
1875 			/*
1876 			 * modify the unlock address if we are
1877 			 * in compatibility mode
1878 			 */
1879 			if (	/* x8/x16 in x8 mode */
1880 				((info->chipwidth == FLASH_CFI_BY8) &&
1881 					(info->interface == FLASH_CFI_X8X16)) ||
1882 				/* x16/x32 in x16 mode */
1883 				((info->chipwidth == FLASH_CFI_BY16) &&
1884 					(info->interface == FLASH_CFI_X16X32)))
1885 			{
1886 				info->addr_unlock1 = 0xaaa;
1887 				info->addr_unlock2 = 0x555;
1888 			}
1889 
1890 			info->name = "CFI conformant";
1891 			return 1;
1892 		}
1893 	}
1894 
1895 	return 0;
1896 }
1897 
1898 static int flash_detect_cfi (flash_info_t * info, struct cfi_qry *qry)
1899 {
1900 	debug ("flash detect cfi\n");
1901 
1902 	for (info->portwidth = CONFIG_SYS_FLASH_CFI_WIDTH;
1903 	     info->portwidth <= FLASH_CFI_64BIT; info->portwidth <<= 1) {
1904 		for (info->chipwidth = FLASH_CFI_BY8;
1905 		     info->chipwidth <= info->portwidth;
1906 		     info->chipwidth <<= 1)
1907 			if (__flash_detect_cfi(info, qry))
1908 				return 1;
1909 	}
1910 	debug ("not found\n");
1911 	return 0;
1912 }
1913 
1914 /*
1915  * Manufacturer-specific quirks. Add workarounds for geometry
1916  * reversal, etc. here.
1917  */
1918 static void flash_fixup_amd(flash_info_t *info, struct cfi_qry *qry)
1919 {
1920 	/* check if flash geometry needs reversal */
1921 	if (qry->num_erase_regions > 1) {
1922 		/* reverse geometry if top boot part */
1923 		if (info->cfi_version < 0x3131) {
1924 			/* CFI < 1.1, try to guess from device id */
1925 			if ((info->device_id & 0x80) != 0)
1926 				cfi_reverse_geometry(qry);
1927 		} else if (flash_read_uchar(info, info->ext_addr + 0xf) == 3) {
1928 			/* CFI >= 1.1, deduct from top/bottom flag */
1929 			/* note: ext_addr is valid since cfi_version > 0 */
1930 			cfi_reverse_geometry(qry);
1931 		}
1932 	}
1933 }
1934 
1935 static void flash_fixup_atmel(flash_info_t *info, struct cfi_qry *qry)
1936 {
1937 	int reverse_geometry = 0;
1938 
1939 	/* Check the "top boot" bit in the PRI */
1940 	if (info->ext_addr && !(flash_read_uchar(info, info->ext_addr + 6) & 1))
1941 		reverse_geometry = 1;
1942 
1943 	/* AT49BV6416(T) list the erase regions in the wrong order.
1944 	 * However, the device ID is identical with the non-broken
1945 	 * AT49BV642D they differ in the high byte.
1946 	 */
1947 	if (info->device_id == 0xd6 || info->device_id == 0xd2)
1948 		reverse_geometry = !reverse_geometry;
1949 
1950 	if (reverse_geometry)
1951 		cfi_reverse_geometry(qry);
1952 }
1953 
1954 static void flash_fixup_stm(flash_info_t *info, struct cfi_qry *qry)
1955 {
1956 	/* check if flash geometry needs reversal */
1957 	if (qry->num_erase_regions > 1) {
1958 		/* reverse geometry if top boot part */
1959 		if (info->cfi_version < 0x3131) {
1960 			/* CFI < 1.1, guess by device id */
1961 			if (info->device_id == 0x22CA || /* M29W320DT */
1962 			    info->device_id == 0x2256 || /* M29W320ET */
1963 			    info->device_id == 0x22D7) { /* M29W800DT */
1964 				cfi_reverse_geometry(qry);
1965 			}
1966 		} else if (flash_read_uchar(info, info->ext_addr + 0xf) == 3) {
1967 			/* CFI >= 1.1, deduct from top/bottom flag */
1968 			/* note: ext_addr is valid since cfi_version > 0 */
1969 			cfi_reverse_geometry(qry);
1970 		}
1971 	}
1972 }
1973 
1974 static void flash_fixup_sst(flash_info_t *info, struct cfi_qry *qry)
1975 {
1976 	/*
1977 	 * SST, for many recent nor parallel flashes, says they are
1978 	 * CFI-conformant. This is not true, since qry struct.
1979 	 * reports a std. AMD command set (0x0002), while SST allows to
1980 	 * erase two different sector sizes for the same memory.
1981 	 * 64KB sector (SST call it block)  needs 0x30 to be erased.
1982 	 * 4KB  sector (SST call it sector) needs 0x50 to be erased.
1983 	 * Since CFI query detect the 4KB number of sectors, users expects
1984 	 * a sector granularity of 4KB, and it is here set.
1985 	 */
1986 	if (info->device_id == 0x5D23 || /* SST39VF3201B */
1987 	    info->device_id == 0x5C23) { /* SST39VF3202B */
1988 		/* set sector granularity to 4KB */
1989 		info->cmd_erase_sector=0x50;
1990 	}
1991 }
1992 
1993 static void flash_fixup_num(flash_info_t *info, struct cfi_qry *qry)
1994 {
1995 	/*
1996 	 * The M29EW devices seem to report the CFI information wrong
1997 	 * when it's in 8 bit mode.
1998 	 * There's an app note from Numonyx on this issue.
1999 	 * So adjust the buffer size for M29EW while operating in 8-bit mode
2000 	 */
2001 	if (((qry->max_buf_write_size) > 0x8) &&
2002 			(info->device_id == 0x7E) &&
2003 			(info->device_id2 == 0x2201 ||
2004 			info->device_id2 == 0x2301 ||
2005 			info->device_id2 == 0x2801 ||
2006 			info->device_id2 == 0x4801)) {
2007 		debug("Adjusted buffer size on Numonyx flash"
2008 			" M29EW family in 8 bit mode\n");
2009 		qry->max_buf_write_size = 0x8;
2010 	}
2011 }
2012 
2013 /*
2014  * The following code cannot be run from FLASH!
2015  *
2016  */
2017 ulong flash_get_size (phys_addr_t base, int banknum)
2018 {
2019 	flash_info_t *info = &flash_info[banknum];
2020 	int i, j;
2021 	flash_sect_t sect_cnt;
2022 	phys_addr_t sector;
2023 	unsigned long tmp;
2024 	int size_ratio;
2025 	uchar num_erase_regions;
2026 	int erase_region_size;
2027 	int erase_region_count;
2028 	struct cfi_qry qry;
2029 	unsigned long max_size;
2030 
2031 	memset(&qry, 0, sizeof(qry));
2032 
2033 	info->ext_addr = 0;
2034 	info->cfi_version = 0;
2035 #ifdef CONFIG_SYS_FLASH_PROTECTION
2036 	info->legacy_unlock = 0;
2037 #endif
2038 
2039 	info->start[0] = (ulong)map_physmem(base, info->portwidth, MAP_NOCACHE);
2040 
2041 	if (flash_detect_cfi (info, &qry)) {
2042 		info->vendor = le16_to_cpu(get_unaligned(&(qry.p_id)));
2043 		info->ext_addr = le16_to_cpu(get_unaligned(&(qry.p_adr)));
2044 		num_erase_regions = qry.num_erase_regions;
2045 
2046 		if (info->ext_addr) {
2047 			info->cfi_version = (ushort) flash_read_uchar (info,
2048 						info->ext_addr + 3) << 8;
2049 			info->cfi_version |= (ushort) flash_read_uchar (info,
2050 						info->ext_addr + 4);
2051 		}
2052 
2053 #ifdef DEBUG
2054 		flash_printqry (&qry);
2055 #endif
2056 
2057 		switch (info->vendor) {
2058 		case CFI_CMDSET_INTEL_PROG_REGIONS:
2059 		case CFI_CMDSET_INTEL_STANDARD:
2060 		case CFI_CMDSET_INTEL_EXTENDED:
2061 			cmdset_intel_init(info, &qry);
2062 			break;
2063 		case CFI_CMDSET_AMD_STANDARD:
2064 		case CFI_CMDSET_AMD_EXTENDED:
2065 			cmdset_amd_init(info, &qry);
2066 			break;
2067 		default:
2068 			printf("CFI: Unknown command set 0x%x\n",
2069 					info->vendor);
2070 			/*
2071 			 * Unfortunately, this means we don't know how
2072 			 * to get the chip back to Read mode. Might
2073 			 * as well try an Intel-style reset...
2074 			 */
2075 			flash_write_cmd(info, 0, 0, FLASH_CMD_RESET);
2076 			return 0;
2077 		}
2078 
2079 		/* Do manufacturer-specific fixups */
2080 		switch (info->manufacturer_id) {
2081 		case 0x0001: /* AMD */
2082 		case 0x0037: /* AMIC */
2083 			flash_fixup_amd(info, &qry);
2084 			break;
2085 		case 0x001f:
2086 			flash_fixup_atmel(info, &qry);
2087 			break;
2088 		case 0x0020:
2089 			flash_fixup_stm(info, &qry);
2090 			break;
2091 		case 0x00bf: /* SST */
2092 			flash_fixup_sst(info, &qry);
2093 			break;
2094 		case 0x0089: /* Numonyx */
2095 			flash_fixup_num(info, &qry);
2096 			break;
2097 		}
2098 
2099 		debug ("manufacturer is %d\n", info->vendor);
2100 		debug ("manufacturer id is 0x%x\n", info->manufacturer_id);
2101 		debug ("device id is 0x%x\n", info->device_id);
2102 		debug ("device id2 is 0x%x\n", info->device_id2);
2103 		debug ("cfi version is 0x%04x\n", info->cfi_version);
2104 
2105 		size_ratio = info->portwidth / info->chipwidth;
2106 		/* if the chip is x8/x16 reduce the ratio by half */
2107 		if ((info->interface == FLASH_CFI_X8X16)
2108 		    && (info->chipwidth == FLASH_CFI_BY8)) {
2109 			size_ratio >>= 1;
2110 		}
2111 		debug ("size_ratio %d port %d bits chip %d bits\n",
2112 		       size_ratio, info->portwidth << CFI_FLASH_SHIFT_WIDTH,
2113 		       info->chipwidth << CFI_FLASH_SHIFT_WIDTH);
2114 		info->size = 1 << qry.dev_size;
2115 		/* multiply the size by the number of chips */
2116 		info->size *= size_ratio;
2117 		max_size = cfi_flash_bank_size(banknum);
2118 		if (max_size && (info->size > max_size)) {
2119 			debug("[truncated from %ldMiB]", info->size >> 20);
2120 			info->size = max_size;
2121 		}
2122 		debug ("found %d erase regions\n", num_erase_regions);
2123 		sect_cnt = 0;
2124 		sector = base;
2125 		for (i = 0; i < num_erase_regions; i++) {
2126 			if (i > NUM_ERASE_REGIONS) {
2127 				printf ("%d erase regions found, only %d used\n",
2128 					num_erase_regions, NUM_ERASE_REGIONS);
2129 				break;
2130 			}
2131 
2132 			tmp = le32_to_cpu(get_unaligned(
2133 						&(qry.erase_region_info[i])));
2134 			debug("erase region %u: 0x%08lx\n", i, tmp);
2135 
2136 			erase_region_count = (tmp & 0xffff) + 1;
2137 			tmp >>= 16;
2138 			erase_region_size =
2139 				(tmp & 0xffff) ? ((tmp & 0xffff) * 256) : 128;
2140 			debug ("erase_region_count = %d erase_region_size = %d\n",
2141 				erase_region_count, erase_region_size);
2142 			for (j = 0; j < erase_region_count; j++) {
2143 				if (sector - base >= info->size)
2144 					break;
2145 				if (sect_cnt >= CONFIG_SYS_MAX_FLASH_SECT) {
2146 					printf("ERROR: too many flash sectors\n");
2147 					break;
2148 				}
2149 				info->start[sect_cnt] =
2150 					(ulong)map_physmem(sector,
2151 							   info->portwidth,
2152 							   MAP_NOCACHE);
2153 				sector += (erase_region_size * size_ratio);
2154 
2155 				/*
2156 				 * Only read protection status from
2157 				 * supported devices (intel...)
2158 				 */
2159 				switch (info->vendor) {
2160 				case CFI_CMDSET_INTEL_PROG_REGIONS:
2161 				case CFI_CMDSET_INTEL_EXTENDED:
2162 				case CFI_CMDSET_INTEL_STANDARD:
2163 					/*
2164 					 * Set flash to read-id mode. Otherwise
2165 					 * reading protected status is not
2166 					 * guaranteed.
2167 					 */
2168 					flash_write_cmd(info, sect_cnt, 0,
2169 							FLASH_CMD_READ_ID);
2170 					info->protect[sect_cnt] =
2171 						flash_isset (info, sect_cnt,
2172 							     FLASH_OFFSET_PROTECT,
2173 							     FLASH_STATUS_PROTECT);
2174 					break;
2175 				case CFI_CMDSET_AMD_EXTENDED:
2176 				case CFI_CMDSET_AMD_STANDARD:
2177 					if (!info->legacy_unlock) {
2178 						/* default: not protected */
2179 						info->protect[sect_cnt] = 0;
2180 						break;
2181 					}
2182 
2183 					/* Read protection (PPB) from sector */
2184 					flash_write_cmd(info, 0, 0,
2185 							info->cmd_reset);
2186 					flash_unlock_seq(info, 0);
2187 					flash_write_cmd(info, 0,
2188 							info->addr_unlock1,
2189 							FLASH_CMD_READ_ID);
2190 					info->protect[sect_cnt] =
2191 						flash_isset(
2192 							info, sect_cnt,
2193 							FLASH_OFFSET_PROTECT,
2194 							FLASH_STATUS_PROTECT);
2195 					break;
2196 				default:
2197 					/* default: not protected */
2198 					info->protect[sect_cnt] = 0;
2199 				}
2200 
2201 				sect_cnt++;
2202 			}
2203 		}
2204 
2205 		info->sector_count = sect_cnt;
2206 		info->buffer_size = 1 << le16_to_cpu(qry.max_buf_write_size);
2207 		tmp = 1 << qry.block_erase_timeout_typ;
2208 		info->erase_blk_tout = tmp *
2209 			(1 << qry.block_erase_timeout_max);
2210 		tmp = (1 << qry.buf_write_timeout_typ) *
2211 			(1 << qry.buf_write_timeout_max);
2212 
2213 		/* round up when converting to ms */
2214 		info->buffer_write_tout = (tmp + 999) / 1000;
2215 		tmp = (1 << qry.word_write_timeout_typ) *
2216 			(1 << qry.word_write_timeout_max);
2217 		/* round up when converting to ms */
2218 		info->write_tout = (tmp + 999) / 1000;
2219 		info->flash_id = FLASH_MAN_CFI;
2220 		if ((info->interface == FLASH_CFI_X8X16) &&
2221 		    (info->chipwidth == FLASH_CFI_BY8)) {
2222 			/* XXX - Need to test on x8/x16 in parallel. */
2223 			info->portwidth >>= 1;
2224 		}
2225 
2226 		flash_write_cmd (info, 0, 0, info->cmd_reset);
2227 	}
2228 
2229 	return (info->size);
2230 }
2231 
2232 #ifdef CONFIG_FLASH_CFI_MTD
2233 void flash_set_verbose(uint v)
2234 {
2235 	flash_verbose = v;
2236 }
2237 #endif
2238 
2239 static void cfi_flash_set_config_reg(u32 base, u16 val)
2240 {
2241 #ifdef CONFIG_SYS_CFI_FLASH_CONFIG_REGS
2242 	/*
2243 	 * Only set this config register if really defined
2244 	 * to a valid value (0xffff is invalid)
2245 	 */
2246 	if (val == 0xffff)
2247 		return;
2248 
2249 	/*
2250 	 * Set configuration register. Data is "encrypted" in the 16 lower
2251 	 * address bits.
2252 	 */
2253 	flash_write16(FLASH_CMD_SETUP, (void *)(base + (val << 1)));
2254 	flash_write16(FLASH_CMD_SET_CR_CONFIRM, (void *)(base + (val << 1)));
2255 
2256 	/*
2257 	 * Finally issue reset-command to bring device back to
2258 	 * read-array mode
2259 	 */
2260 	flash_write16(FLASH_CMD_RESET, (void *)base);
2261 #endif
2262 }
2263 
2264 /*-----------------------------------------------------------------------
2265  */
2266 
2267 void flash_protect_default(void)
2268 {
2269 #if defined(CONFIG_SYS_FLASH_AUTOPROTECT_LIST)
2270 	int i;
2271 	struct apl_s {
2272 		ulong start;
2273 		ulong size;
2274 	} apl[] = CONFIG_SYS_FLASH_AUTOPROTECT_LIST;
2275 #endif
2276 
2277 	/* Monitor protection ON by default */
2278 #if (CONFIG_SYS_MONITOR_BASE >= CONFIG_SYS_FLASH_BASE) && \
2279 	(!defined(CONFIG_MONITOR_IS_IN_RAM))
2280 	flash_protect(FLAG_PROTECT_SET,
2281 		       CONFIG_SYS_MONITOR_BASE,
2282 		       CONFIG_SYS_MONITOR_BASE + monitor_flash_len  - 1,
2283 		       flash_get_info(CONFIG_SYS_MONITOR_BASE));
2284 #endif
2285 
2286 	/* Environment protection ON by default */
2287 #ifdef CONFIG_ENV_IS_IN_FLASH
2288 	flash_protect(FLAG_PROTECT_SET,
2289 		       CONFIG_ENV_ADDR,
2290 		       CONFIG_ENV_ADDR + CONFIG_ENV_SECT_SIZE - 1,
2291 		       flash_get_info(CONFIG_ENV_ADDR));
2292 #endif
2293 
2294 	/* Redundant environment protection ON by default */
2295 #ifdef CONFIG_ENV_ADDR_REDUND
2296 	flash_protect(FLAG_PROTECT_SET,
2297 		       CONFIG_ENV_ADDR_REDUND,
2298 		       CONFIG_ENV_ADDR_REDUND + CONFIG_ENV_SECT_SIZE - 1,
2299 		       flash_get_info(CONFIG_ENV_ADDR_REDUND));
2300 #endif
2301 
2302 #if defined(CONFIG_SYS_FLASH_AUTOPROTECT_LIST)
2303 	for (i = 0; i < ARRAY_SIZE(apl); i++) {
2304 		debug("autoprotecting from %08lx to %08lx\n",
2305 		      apl[i].start, apl[i].start + apl[i].size - 1);
2306 		flash_protect(FLAG_PROTECT_SET,
2307 			       apl[i].start,
2308 			       apl[i].start + apl[i].size - 1,
2309 			       flash_get_info(apl[i].start));
2310 	}
2311 #endif
2312 }
2313 
2314 unsigned long flash_init (void)
2315 {
2316 	unsigned long size = 0;
2317 	int i;
2318 
2319 #ifdef CONFIG_SYS_FLASH_PROTECTION
2320 	/* read environment from EEPROM */
2321 	char s[64];
2322 	getenv_f("unlock", s, sizeof(s));
2323 #endif
2324 
2325 	/* Init: no FLASHes known */
2326 	for (i = 0; i < CONFIG_SYS_MAX_FLASH_BANKS; ++i) {
2327 		flash_info[i].flash_id = FLASH_UNKNOWN;
2328 
2329 		/* Optionally write flash configuration register */
2330 		cfi_flash_set_config_reg(cfi_flash_bank_addr(i),
2331 					 cfi_flash_config_reg(i));
2332 
2333 		if (!flash_detect_legacy(cfi_flash_bank_addr(i), i))
2334 			flash_get_size(cfi_flash_bank_addr(i), i);
2335 		size += flash_info[i].size;
2336 		if (flash_info[i].flash_id == FLASH_UNKNOWN) {
2337 #ifndef CONFIG_SYS_FLASH_QUIET_TEST
2338 			printf ("## Unknown flash on Bank %d "
2339 				"- Size = 0x%08lx = %ld MB\n",
2340 				i+1, flash_info[i].size,
2341 				flash_info[i].size >> 20);
2342 #endif /* CONFIG_SYS_FLASH_QUIET_TEST */
2343 		}
2344 #ifdef CONFIG_SYS_FLASH_PROTECTION
2345 		else if (strcmp(s, "yes") == 0) {
2346 			/*
2347 			 * Only the U-Boot image and it's environment
2348 			 * is protected, all other sectors are
2349 			 * unprotected (unlocked) if flash hardware
2350 			 * protection is used (CONFIG_SYS_FLASH_PROTECTION)
2351 			 * and the environment variable "unlock" is
2352 			 * set to "yes".
2353 			 */
2354 			if (flash_info[i].legacy_unlock) {
2355 				int k;
2356 
2357 				/*
2358 				 * Disable legacy_unlock temporarily,
2359 				 * since flash_real_protect would
2360 				 * relock all other sectors again
2361 				 * otherwise.
2362 				 */
2363 				flash_info[i].legacy_unlock = 0;
2364 
2365 				/*
2366 				 * Legacy unlocking (e.g. Intel J3) ->
2367 				 * unlock only one sector. This will
2368 				 * unlock all sectors.
2369 				 */
2370 				flash_real_protect (&flash_info[i], 0, 0);
2371 
2372 				flash_info[i].legacy_unlock = 1;
2373 
2374 				/*
2375 				 * Manually mark other sectors as
2376 				 * unlocked (unprotected)
2377 				 */
2378 				for (k = 1; k < flash_info[i].sector_count; k++)
2379 					flash_info[i].protect[k] = 0;
2380 			} else {
2381 				/*
2382 				 * No legancy unlocking -> unlock all sectors
2383 				 */
2384 				flash_protect (FLAG_PROTECT_CLEAR,
2385 					       flash_info[i].start[0],
2386 					       flash_info[i].start[0]
2387 					       + flash_info[i].size - 1,
2388 					       &flash_info[i]);
2389 			}
2390 		}
2391 #endif /* CONFIG_SYS_FLASH_PROTECTION */
2392 	}
2393 
2394 	flash_protect_default();
2395 #ifdef CONFIG_FLASH_CFI_MTD
2396 	cfi_mtd_init();
2397 #endif
2398 
2399 	return (size);
2400 }
2401