1 /* 2 * rtl8139.c : U-Boot driver for the RealTek RTL8139 3 * 4 * Masami Komiya (mkomiya@sonare.it) 5 * 6 * Most part is taken from rtl8139.c of etherboot 7 * 8 */ 9 10 /* rtl8139.c - etherboot driver for the Realtek 8139 chipset 11 12 ported from the linux driver written by Donald Becker 13 by Rainer Bawidamann (Rainer.Bawidamann@informatik.uni-ulm.de) 1999 14 15 This software may be used and distributed according to the terms 16 of the GNU Public License, incorporated herein by reference. 17 18 changes to the original driver: 19 - removed support for interrupts, switching to polling mode (yuck!) 20 - removed support for the 8129 chip (external MII) 21 22 */ 23 24 /*********************************************************************/ 25 /* Revision History */ 26 /*********************************************************************/ 27 28 /* 29 28 Dec 2002 ken_yap@users.sourceforge.net (Ken Yap) 30 Put in virt_to_bus calls to allow Etherboot relocation. 31 32 06 Apr 2001 ken_yap@users.sourceforge.net (Ken Yap) 33 Following email from Hyun-Joon Cha, added a disable routine, otherwise 34 NIC remains live and can crash the kernel later. 35 36 4 Feb 2000 espenlaub@informatik.uni-ulm.de (Klaus Espenlaub) 37 Shuffled things around, removed the leftovers from the 8129 support 38 that was in the Linux driver and added a bit more 8139 definitions. 39 Moved the 8K receive buffer to a fixed, available address outside the 40 0x98000-0x9ffff range. This is a bit of a hack, but currently the only 41 way to make room for the Etherboot features that need substantial amounts 42 of code like the ANSI console support. Currently the buffer is just below 43 0x10000, so this even conforms to the tagged boot image specification, 44 which reserves the ranges 0x00000-0x10000 and 0x98000-0xA0000. My 45 interpretation of this "reserved" is that Etherboot may do whatever it 46 likes, as long as its environment is kept intact (like the BIOS 47 variables). Hopefully fixed rtl_poll() once and for all. The symptoms 48 were that if Etherboot was left at the boot menu for several minutes, the 49 first eth_poll failed. Seems like I am the only person who does this. 50 First of all I fixed the debugging code and then set out for a long bug 51 hunting session. It took me about a week full time work - poking around 52 various places in the driver, reading Don Becker's and Jeff Garzik's Linux 53 driver and even the FreeBSD driver (what a piece of crap!) - and 54 eventually spotted the nasty thing: the transmit routine was acknowledging 55 each and every interrupt pending, including the RxOverrun and RxFIFIOver 56 interrupts. This confused the RTL8139 thoroughly. It destroyed the 57 Rx ring contents by dumping the 2K FIFO contents right where we wanted to 58 get the next packet. Oh well, what fun. 59 60 18 Jan 2000 mdc@thinguin.org (Marty Connor) 61 Drastically simplified error handling. Basically, if any error 62 in transmission or reception occurs, the card is reset. 63 Also, pointed all transmit descriptors to the same buffer to 64 save buffer space. This should decrease driver size and avoid 65 corruption because of exceeding 32K during runtime. 66 67 28 Jul 1999 (Matthias Meixner - meixner@rbg.informatik.tu-darmstadt.de) 68 rtl_poll was quite broken: it used the RxOK interrupt flag instead 69 of the RxBufferEmpty flag which often resulted in very bad 70 transmission performace - below 1kBytes/s. 71 72 */ 73 74 #include <common.h> 75 #include <malloc.h> 76 #include <net.h> 77 #include <asm/io.h> 78 #include <pci.h> 79 80 #if defined(CONFIG_CMD_NET) && defined(CONFIG_NET_MULTI) && \ 81 defined(CONFIG_RTL8139) 82 83 #define RTL_TIMEOUT 100000 84 85 #define ETH_FRAME_LEN 1514 86 #define ETH_ALEN 6 87 #define ETH_ZLEN 60 88 89 /* PCI Tuning Parameters 90 Threshold is bytes transferred to chip before transmission starts. */ 91 #define TX_FIFO_THRESH 256 /* In bytes, rounded down to 32 byte units. */ 92 #define RX_FIFO_THRESH 4 /* Rx buffer level before first PCI xfer. */ 93 #define RX_DMA_BURST 4 /* Maximum PCI burst, '4' is 256 bytes */ 94 #define TX_DMA_BURST 4 /* Calculate as 16<<val. */ 95 #define NUM_TX_DESC 4 /* Number of Tx descriptor registers. */ 96 #define TX_BUF_SIZE ETH_FRAME_LEN /* FCS is added by the chip */ 97 #define RX_BUF_LEN_IDX 0 /* 0, 1, 2 is allowed - 8,16,32K rx buffer */ 98 #define RX_BUF_LEN (8192 << RX_BUF_LEN_IDX) 99 100 #undef DEBUG_TX 101 #undef DEBUG_RX 102 103 #define currticks() get_timer(0) 104 #define bus_to_phys(a) pci_mem_to_phys((pci_dev_t)dev->priv, a) 105 #define phys_to_bus(a) pci_phys_to_mem((pci_dev_t)dev->priv, a) 106 107 /* Symbolic offsets to registers. */ 108 enum RTL8139_registers { 109 MAC0=0, /* Ethernet hardware address. */ 110 MAR0=8, /* Multicast filter. */ 111 TxStatus0=0x10, /* Transmit status (four 32bit registers). */ 112 TxAddr0=0x20, /* Tx descriptors (also four 32bit). */ 113 RxBuf=0x30, RxEarlyCnt=0x34, RxEarlyStatus=0x36, 114 ChipCmd=0x37, RxBufPtr=0x38, RxBufAddr=0x3A, 115 IntrMask=0x3C, IntrStatus=0x3E, 116 TxConfig=0x40, RxConfig=0x44, 117 Timer=0x48, /* general-purpose counter. */ 118 RxMissed=0x4C, /* 24 bits valid, write clears. */ 119 Cfg9346=0x50, Config0=0x51, Config1=0x52, 120 TimerIntrReg=0x54, /* intr if gp counter reaches this value */ 121 MediaStatus=0x58, 122 Config3=0x59, 123 MultiIntr=0x5C, 124 RevisionID=0x5E, /* revision of the RTL8139 chip */ 125 TxSummary=0x60, 126 MII_BMCR=0x62, MII_BMSR=0x64, NWayAdvert=0x66, NWayLPAR=0x68, 127 NWayExpansion=0x6A, 128 DisconnectCnt=0x6C, FalseCarrierCnt=0x6E, 129 NWayTestReg=0x70, 130 RxCnt=0x72, /* packet received counter */ 131 CSCR=0x74, /* chip status and configuration register */ 132 PhyParm1=0x78,TwisterParm=0x7c,PhyParm2=0x80, /* undocumented */ 133 /* from 0x84 onwards are a number of power management/wakeup frame 134 * definitions we will probably never need to know about. */ 135 }; 136 137 enum ChipCmdBits { 138 CmdReset=0x10, CmdRxEnb=0x08, CmdTxEnb=0x04, RxBufEmpty=0x01, }; 139 140 /* Interrupt register bits, using my own meaningful names. */ 141 enum IntrStatusBits { 142 PCIErr=0x8000, PCSTimeout=0x4000, CableLenChange= 0x2000, 143 RxFIFOOver=0x40, RxUnderrun=0x20, RxOverflow=0x10, 144 TxErr=0x08, TxOK=0x04, RxErr=0x02, RxOK=0x01, 145 }; 146 enum TxStatusBits { 147 TxHostOwns=0x2000, TxUnderrun=0x4000, TxStatOK=0x8000, 148 TxOutOfWindow=0x20000000, TxAborted=0x40000000, 149 TxCarrierLost=0x80000000, 150 }; 151 enum RxStatusBits { 152 RxMulticast=0x8000, RxPhysical=0x4000, RxBroadcast=0x2000, 153 RxBadSymbol=0x0020, RxRunt=0x0010, RxTooLong=0x0008, RxCRCErr=0x0004, 154 RxBadAlign=0x0002, RxStatusOK=0x0001, 155 }; 156 157 enum MediaStatusBits { 158 MSRTxFlowEnable=0x80, MSRRxFlowEnable=0x40, MSRSpeed10=0x08, 159 MSRLinkFail=0x04, MSRRxPauseFlag=0x02, MSRTxPauseFlag=0x01, 160 }; 161 162 enum MIIBMCRBits { 163 BMCRReset=0x8000, BMCRSpeed100=0x2000, BMCRNWayEnable=0x1000, 164 BMCRRestartNWay=0x0200, BMCRDuplex=0x0100, 165 }; 166 167 enum CSCRBits { 168 CSCR_LinkOKBit=0x0400, CSCR_LinkChangeBit=0x0800, 169 CSCR_LinkStatusBits=0x0f000, CSCR_LinkDownOffCmd=0x003c0, 170 CSCR_LinkDownCmd=0x0f3c0, 171 }; 172 173 /* Bits in RxConfig. */ 174 enum rx_mode_bits { 175 RxCfgWrap=0x80, 176 AcceptErr=0x20, AcceptRunt=0x10, AcceptBroadcast=0x08, 177 AcceptMulticast=0x04, AcceptMyPhys=0x02, AcceptAllPhys=0x01, 178 }; 179 180 static int ioaddr; 181 static unsigned int cur_rx,cur_tx; 182 183 /* The RTL8139 can only transmit from a contiguous, aligned memory block. */ 184 static unsigned char tx_buffer[TX_BUF_SIZE] __attribute__((aligned(4))); 185 static unsigned char rx_ring[RX_BUF_LEN+16] __attribute__((aligned(4))); 186 187 static int rtl8139_probe(struct eth_device *dev, bd_t *bis); 188 static int read_eeprom(int location, int addr_len); 189 static void rtl_reset(struct eth_device *dev); 190 static int rtl_transmit(struct eth_device *dev, volatile void *packet, int length); 191 static int rtl_poll(struct eth_device *dev); 192 static void rtl_disable(struct eth_device *dev); 193 #ifdef CONFIG_MCAST_TFTP/* This driver already accepts all b/mcast */ 194 static int rtl_bcast_addr (struct eth_device *dev, u8 bcast_mac, u8 set) 195 { 196 return (0); 197 } 198 #endif 199 200 static struct pci_device_id supported[] = { 201 {PCI_VENDOR_ID_REALTEK, PCI_DEVICE_ID_REALTEK_8139}, 202 {PCI_VENDOR_ID_DLINK, PCI_DEVICE_ID_DLINK_8139}, 203 {} 204 }; 205 206 int rtl8139_initialize(bd_t *bis) 207 { 208 pci_dev_t devno; 209 int card_number = 0; 210 struct eth_device *dev; 211 u32 iobase; 212 int idx=0; 213 214 while(1){ 215 /* Find RTL8139 */ 216 if ((devno = pci_find_devices(supported, idx++)) < 0) 217 break; 218 219 pci_read_config_dword(devno, PCI_BASE_ADDRESS_1, &iobase); 220 iobase &= ~0xf; 221 222 debug ("rtl8139: REALTEK RTL8139 @0x%x\n", iobase); 223 224 dev = (struct eth_device *)malloc(sizeof *dev); 225 226 sprintf (dev->name, "RTL8139#%d", card_number); 227 228 dev->priv = (void *) devno; 229 dev->iobase = (int)bus_to_phys(iobase); 230 dev->init = rtl8139_probe; 231 dev->halt = rtl_disable; 232 dev->send = rtl_transmit; 233 dev->recv = rtl_poll; 234 #ifdef CONFIG_MCAST_TFTP 235 dev->mcast = rtl_bcast_addr; 236 #endif 237 238 eth_register (dev); 239 240 card_number++; 241 242 pci_write_config_byte (devno, PCI_LATENCY_TIMER, 0x20); 243 244 udelay (10 * 1000); 245 } 246 247 return card_number; 248 } 249 250 static int rtl8139_probe(struct eth_device *dev, bd_t *bis) 251 { 252 int i; 253 int speed10, fullduplex; 254 int addr_len; 255 unsigned short *ap = (unsigned short *)dev->enetaddr; 256 257 ioaddr = dev->iobase; 258 259 /* Bring the chip out of low-power mode. */ 260 outb(0x00, ioaddr + Config1); 261 262 addr_len = read_eeprom(0,8) == 0x8129 ? 8 : 6; 263 for (i = 0; i < 3; i++) 264 *ap++ = le16_to_cpu (read_eeprom(i + 7, addr_len)); 265 266 speed10 = inb(ioaddr + MediaStatus) & MSRSpeed10; 267 fullduplex = inw(ioaddr + MII_BMCR) & BMCRDuplex; 268 269 rtl_reset(dev); 270 271 if (inb(ioaddr + MediaStatus) & MSRLinkFail) { 272 printf("Cable not connected or other link failure\n"); 273 return -1 ; 274 } 275 276 return 0; 277 } 278 279 /* Serial EEPROM section. */ 280 281 /* EEPROM_Ctrl bits. */ 282 #define EE_SHIFT_CLK 0x04 /* EEPROM shift clock. */ 283 #define EE_CS 0x08 /* EEPROM chip select. */ 284 #define EE_DATA_WRITE 0x02 /* EEPROM chip data in. */ 285 #define EE_WRITE_0 0x00 286 #define EE_WRITE_1 0x02 287 #define EE_DATA_READ 0x01 /* EEPROM chip data out. */ 288 #define EE_ENB (0x80 | EE_CS) 289 290 /* 291 Delay between EEPROM clock transitions. 292 No extra delay is needed with 33Mhz PCI, but 66Mhz may change this. 293 */ 294 295 #define eeprom_delay() inl(ee_addr) 296 297 /* The EEPROM commands include the alway-set leading bit. */ 298 #define EE_WRITE_CMD (5) 299 #define EE_READ_CMD (6) 300 #define EE_ERASE_CMD (7) 301 302 static int read_eeprom(int location, int addr_len) 303 { 304 int i; 305 unsigned int retval = 0; 306 long ee_addr = ioaddr + Cfg9346; 307 int read_cmd = location | (EE_READ_CMD << addr_len); 308 309 outb(EE_ENB & ~EE_CS, ee_addr); 310 outb(EE_ENB, ee_addr); 311 eeprom_delay(); 312 313 /* Shift the read command bits out. */ 314 for (i = 4 + addr_len; i >= 0; i--) { 315 int dataval = (read_cmd & (1 << i)) ? EE_DATA_WRITE : 0; 316 outb(EE_ENB | dataval, ee_addr); 317 eeprom_delay(); 318 outb(EE_ENB | dataval | EE_SHIFT_CLK, ee_addr); 319 eeprom_delay(); 320 } 321 outb(EE_ENB, ee_addr); 322 eeprom_delay(); 323 324 for (i = 16; i > 0; i--) { 325 outb(EE_ENB | EE_SHIFT_CLK, ee_addr); 326 eeprom_delay(); 327 retval = (retval << 1) | ((inb(ee_addr) & EE_DATA_READ) ? 1 : 0); 328 outb(EE_ENB, ee_addr); 329 eeprom_delay(); 330 } 331 332 /* Terminate the EEPROM access. */ 333 outb(~EE_CS, ee_addr); 334 eeprom_delay(); 335 return retval; 336 } 337 338 static const unsigned int rtl8139_rx_config = 339 (RX_BUF_LEN_IDX << 11) | 340 (RX_FIFO_THRESH << 13) | 341 (RX_DMA_BURST << 8); 342 343 static void set_rx_mode(struct eth_device *dev) { 344 unsigned int mc_filter[2]; 345 int rx_mode; 346 /* !IFF_PROMISC */ 347 rx_mode = AcceptBroadcast | AcceptMulticast | AcceptMyPhys; 348 mc_filter[1] = mc_filter[0] = 0xffffffff; 349 350 outl(rtl8139_rx_config | rx_mode, ioaddr + RxConfig); 351 352 outl(mc_filter[0], ioaddr + MAR0 + 0); 353 outl(mc_filter[1], ioaddr + MAR0 + 4); 354 } 355 356 static void rtl_reset(struct eth_device *dev) 357 { 358 int i; 359 360 outb(CmdReset, ioaddr + ChipCmd); 361 362 cur_rx = 0; 363 cur_tx = 0; 364 365 /* Give the chip 10ms to finish the reset. */ 366 for (i=0; i<100; ++i){ 367 if ((inb(ioaddr + ChipCmd) & CmdReset) == 0) break; 368 udelay (100); /* wait 100us */ 369 } 370 371 372 for (i = 0; i < ETH_ALEN; i++) 373 outb(dev->enetaddr[i], ioaddr + MAC0 + i); 374 375 /* Must enable Tx/Rx before setting transfer thresholds! */ 376 outb(CmdRxEnb | CmdTxEnb, ioaddr + ChipCmd); 377 outl((RX_FIFO_THRESH<<13) | (RX_BUF_LEN_IDX<<11) | (RX_DMA_BURST<<8), 378 ioaddr + RxConfig); /* accept no frames yet! */ 379 outl((TX_DMA_BURST<<8)|0x03000000, ioaddr + TxConfig); 380 381 /* The Linux driver changes Config1 here to use a different LED pattern 382 * for half duplex or full/autodetect duplex (for full/autodetect, the 383 * outputs are TX/RX, Link10/100, FULL, while for half duplex it uses 384 * TX/RX, Link100, Link10). This is messy, because it doesn't match 385 * the inscription on the mounting bracket. It should not be changed 386 * from the configuration EEPROM default, because the card manufacturer 387 * should have set that to match the card. */ 388 389 #ifdef DEBUG_RX 390 printf("rx ring address is %X\n",(unsigned long)rx_ring); 391 #endif 392 flush_cache((unsigned long)rx_ring, RX_BUF_LEN); 393 outl(phys_to_bus((int)rx_ring), ioaddr + RxBuf); 394 395 /* If we add multicast support, the MAR0 register would have to be 396 * initialized to 0xffffffffffffffff (two 32 bit accesses). Etherboot 397 * only needs broadcast (for ARP/RARP/BOOTP/DHCP) and unicast. */ 398 399 outb(CmdRxEnb | CmdTxEnb, ioaddr + ChipCmd); 400 401 outl(rtl8139_rx_config, ioaddr + RxConfig); 402 403 /* Start the chip's Tx and Rx process. */ 404 outl(0, ioaddr + RxMissed); 405 406 /* set_rx_mode */ 407 set_rx_mode(dev); 408 409 /* Disable all known interrupts by setting the interrupt mask. */ 410 outw(0, ioaddr + IntrMask); 411 } 412 413 static int rtl_transmit(struct eth_device *dev, volatile void *packet, int length) 414 { 415 unsigned int status; 416 unsigned long txstatus; 417 unsigned int len = length; 418 int i = 0; 419 420 ioaddr = dev->iobase; 421 422 memcpy((char *)tx_buffer, (char *)packet, (int)length); 423 424 #ifdef DEBUG_TX 425 printf("sending %d bytes\n", len); 426 #endif 427 428 /* Note: RTL8139 doesn't auto-pad, send minimum payload (another 4 429 * bytes are sent automatically for the FCS, totalling to 64 bytes). */ 430 while (len < ETH_ZLEN) { 431 tx_buffer[len++] = '\0'; 432 } 433 434 flush_cache((unsigned long)tx_buffer, length); 435 outl(phys_to_bus((int)tx_buffer), ioaddr + TxAddr0 + cur_tx*4); 436 outl(((TX_FIFO_THRESH<<11) & 0x003f0000) | len, 437 ioaddr + TxStatus0 + cur_tx*4); 438 439 do { 440 status = inw(ioaddr + IntrStatus); 441 /* Only acknlowledge interrupt sources we can properly handle 442 * here - the RxOverflow/RxFIFOOver MUST be handled in the 443 * rtl_poll() function. */ 444 outw(status & (TxOK | TxErr | PCIErr), ioaddr + IntrStatus); 445 if ((status & (TxOK | TxErr | PCIErr)) != 0) break; 446 udelay(10); 447 } while (i++ < RTL_TIMEOUT); 448 449 txstatus = inl(ioaddr + TxStatus0 + cur_tx*4); 450 451 if (status & TxOK) { 452 cur_tx = (cur_tx + 1) % NUM_TX_DESC; 453 #ifdef DEBUG_TX 454 printf("tx done (%d ticks), status %hX txstatus %X\n", 455 to-currticks(), status, txstatus); 456 #endif 457 return length; 458 } else { 459 #ifdef DEBUG_TX 460 printf("tx timeout/error (%d usecs), status %hX txstatus %X\n", 461 10*i, status, txstatus); 462 #endif 463 rtl_reset(dev); 464 465 return 0; 466 } 467 } 468 469 static int rtl_poll(struct eth_device *dev) 470 { 471 unsigned int status; 472 unsigned int ring_offs; 473 unsigned int rx_size, rx_status; 474 int length=0; 475 476 ioaddr = dev->iobase; 477 478 if (inb(ioaddr + ChipCmd) & RxBufEmpty) { 479 return 0; 480 } 481 482 status = inw(ioaddr + IntrStatus); 483 /* See below for the rest of the interrupt acknowledges. */ 484 outw(status & ~(RxFIFOOver | RxOverflow | RxOK), ioaddr + IntrStatus); 485 486 #ifdef DEBUG_RX 487 printf("rtl_poll: int %hX ", status); 488 #endif 489 490 ring_offs = cur_rx % RX_BUF_LEN; 491 /* ring_offs is guaranteed being 4-byte aligned */ 492 rx_status = le32_to_cpu(*(unsigned int *)(rx_ring + ring_offs)); 493 rx_size = rx_status >> 16; 494 rx_status &= 0xffff; 495 496 if ((rx_status & (RxBadSymbol|RxRunt|RxTooLong|RxCRCErr|RxBadAlign)) || 497 (rx_size < ETH_ZLEN) || (rx_size > ETH_FRAME_LEN + 4)) { 498 printf("rx error %hX\n", rx_status); 499 rtl_reset(dev); /* this clears all interrupts still pending */ 500 return 0; 501 } 502 503 /* Received a good packet */ 504 length = rx_size - 4; /* no one cares about the FCS */ 505 if (ring_offs+4+rx_size-4 > RX_BUF_LEN) { 506 int semi_count = RX_BUF_LEN - ring_offs - 4; 507 unsigned char rxdata[RX_BUF_LEN]; 508 509 memcpy(rxdata, rx_ring + ring_offs + 4, semi_count); 510 memcpy(&(rxdata[semi_count]), rx_ring, rx_size-4-semi_count); 511 512 NetReceive(rxdata, length); 513 #ifdef DEBUG_RX 514 printf("rx packet %d+%d bytes", semi_count,rx_size-4-semi_count); 515 #endif 516 } else { 517 NetReceive(rx_ring + ring_offs + 4, length); 518 #ifdef DEBUG_RX 519 printf("rx packet %d bytes", rx_size-4); 520 #endif 521 } 522 flush_cache((unsigned long)rx_ring, RX_BUF_LEN); 523 524 cur_rx = (cur_rx + rx_size + 4 + 3) & ~3; 525 outw(cur_rx - 16, ioaddr + RxBufPtr); 526 /* See RTL8139 Programming Guide V0.1 for the official handling of 527 * Rx overflow situations. The document itself contains basically no 528 * usable information, except for a few exception handling rules. */ 529 outw(status & (RxFIFOOver | RxOverflow | RxOK), ioaddr + IntrStatus); 530 return length; 531 } 532 533 static void rtl_disable(struct eth_device *dev) 534 { 535 int i; 536 537 ioaddr = dev->iobase; 538 539 /* reset the chip */ 540 outb(CmdReset, ioaddr + ChipCmd); 541 542 /* Give the chip 10ms to finish the reset. */ 543 for (i=0; i<100; ++i){ 544 if ((inb(ioaddr + ChipCmd) & CmdReset) == 0) break; 545 udelay (100); /* wait 100us */ 546 } 547 } 548 #endif 549