Fix 32-bit overflow in parallels image support
[qemu-kvm/fedora.git] / hw / spitz.c
blobd9ff85eac10d05fbaf8c86d14d7e40cf29088493
1 /*
2 * PXA270-based Clamshell PDA platforms.
4 * Copyright (c) 2006 Openedhand Ltd.
5 * Written by Andrzej Zaborowski <balrog@zabor.org>
7 * This code is licensed under the GNU GPL v2.
8 */
10 #include "hw.h"
11 #include "pxa.h"
12 #include "arm-misc.h"
13 #include "sysemu.h"
14 #include "pcmcia.h"
15 #include "i2c.h"
16 #include "ssi.h"
17 #include "flash.h"
18 #include "qemu-timer.h"
19 #include "devices.h"
20 #include "sharpsl.h"
21 #include "console.h"
22 #include "block.h"
23 #include "audio/audio.h"
24 #include "boards.h"
26 #undef REG_FMT
27 #define REG_FMT "0x%02lx"
29 /* Spitz Flash */
30 #define FLASH_BASE 0x0c000000
31 #define FLASH_ECCLPLB 0x00 /* Line parity 7 - 0 bit */
32 #define FLASH_ECCLPUB 0x04 /* Line parity 15 - 8 bit */
33 #define FLASH_ECCCP 0x08 /* Column parity 5 - 0 bit */
34 #define FLASH_ECCCNTR 0x0c /* ECC byte counter */
35 #define FLASH_ECCCLRR 0x10 /* Clear ECC */
36 #define FLASH_FLASHIO 0x14 /* Flash I/O */
37 #define FLASH_FLASHCTL 0x18 /* Flash Control */
39 #define FLASHCTL_CE0 (1 << 0)
40 #define FLASHCTL_CLE (1 << 1)
41 #define FLASHCTL_ALE (1 << 2)
42 #define FLASHCTL_WP (1 << 3)
43 #define FLASHCTL_CE1 (1 << 4)
44 #define FLASHCTL_RYBY (1 << 5)
45 #define FLASHCTL_NCE (FLASHCTL_CE0 | FLASHCTL_CE1)
47 typedef struct {
48 NANDFlashState *nand;
49 uint8_t ctl;
50 ECCState ecc;
51 } SLNANDState;
53 static uint32_t sl_readb(void *opaque, target_phys_addr_t addr)
55 SLNANDState *s = (SLNANDState *) opaque;
56 int ryby;
58 switch (addr) {
59 #define BSHR(byte, from, to) ((s->ecc.lp[byte] >> (from - to)) & (1 << to))
60 case FLASH_ECCLPLB:
61 return BSHR(0, 4, 0) | BSHR(0, 5, 2) | BSHR(0, 6, 4) | BSHR(0, 7, 6) |
62 BSHR(1, 4, 1) | BSHR(1, 5, 3) | BSHR(1, 6, 5) | BSHR(1, 7, 7);
64 #define BSHL(byte, from, to) ((s->ecc.lp[byte] << (to - from)) & (1 << to))
65 case FLASH_ECCLPUB:
66 return BSHL(0, 0, 0) | BSHL(0, 1, 2) | BSHL(0, 2, 4) | BSHL(0, 3, 6) |
67 BSHL(1, 0, 1) | BSHL(1, 1, 3) | BSHL(1, 2, 5) | BSHL(1, 3, 7);
69 case FLASH_ECCCP:
70 return s->ecc.cp;
72 case FLASH_ECCCNTR:
73 return s->ecc.count & 0xff;
75 case FLASH_FLASHCTL:
76 nand_getpins(s->nand, &ryby);
77 if (ryby)
78 return s->ctl | FLASHCTL_RYBY;
79 else
80 return s->ctl;
82 case FLASH_FLASHIO:
83 return ecc_digest(&s->ecc, nand_getio(s->nand));
85 default:
86 zaurus_printf("Bad register offset " REG_FMT "\n", (unsigned long)addr);
88 return 0;
91 static uint32_t sl_readl(void *opaque, target_phys_addr_t addr)
93 SLNANDState *s = (SLNANDState *) opaque;
95 if (addr == FLASH_FLASHIO)
96 return ecc_digest(&s->ecc, nand_getio(s->nand)) |
97 (ecc_digest(&s->ecc, nand_getio(s->nand)) << 16);
99 return sl_readb(opaque, addr);
102 static void sl_writeb(void *opaque, target_phys_addr_t addr,
103 uint32_t value)
105 SLNANDState *s = (SLNANDState *) opaque;
107 switch (addr) {
108 case FLASH_ECCCLRR:
109 /* Value is ignored. */
110 ecc_reset(&s->ecc);
111 break;
113 case FLASH_FLASHCTL:
114 s->ctl = value & 0xff & ~FLASHCTL_RYBY;
115 nand_setpins(s->nand,
116 s->ctl & FLASHCTL_CLE,
117 s->ctl & FLASHCTL_ALE,
118 s->ctl & FLASHCTL_NCE,
119 s->ctl & FLASHCTL_WP,
121 break;
123 case FLASH_FLASHIO:
124 nand_setio(s->nand, ecc_digest(&s->ecc, value & 0xff));
125 break;
127 default:
128 zaurus_printf("Bad register offset " REG_FMT "\n", (unsigned long)addr);
132 static void sl_save(QEMUFile *f, void *opaque)
134 SLNANDState *s = (SLNANDState *) opaque;
136 qemu_put_8s(f, &s->ctl);
137 ecc_put(f, &s->ecc);
140 static int sl_load(QEMUFile *f, void *opaque, int version_id)
142 SLNANDState *s = (SLNANDState *) opaque;
144 qemu_get_8s(f, &s->ctl);
145 ecc_get(f, &s->ecc);
147 return 0;
150 enum {
151 FLASH_128M,
152 FLASH_1024M,
155 static void sl_flash_register(PXA2xxState *cpu, int size)
157 int iomemtype;
158 SLNANDState *s;
159 CPUReadMemoryFunc *sl_readfn[] = {
160 sl_readb,
161 sl_readb,
162 sl_readl,
164 CPUWriteMemoryFunc *sl_writefn[] = {
165 sl_writeb,
166 sl_writeb,
167 sl_writeb,
170 s = (SLNANDState *) qemu_mallocz(sizeof(SLNANDState));
171 s->ctl = 0;
172 if (size == FLASH_128M)
173 s->nand = nand_init(NAND_MFR_SAMSUNG, 0x73);
174 else if (size == FLASH_1024M)
175 s->nand = nand_init(NAND_MFR_SAMSUNG, 0xf1);
177 iomemtype = cpu_register_io_memory(sl_readfn,
178 sl_writefn, s);
179 cpu_register_physical_memory(FLASH_BASE, 0x40, iomemtype);
181 register_savevm("sl_flash", 0, 0, sl_save, sl_load, s);
184 /* Spitz Keyboard */
186 #define SPITZ_KEY_STROBE_NUM 11
187 #define SPITZ_KEY_SENSE_NUM 7
189 static const int spitz_gpio_key_sense[SPITZ_KEY_SENSE_NUM] = {
190 12, 17, 91, 34, 36, 38, 39
193 static const int spitz_gpio_key_strobe[SPITZ_KEY_STROBE_NUM] = {
194 88, 23, 24, 25, 26, 27, 52, 103, 107, 108, 114
197 /* Eighth additional row maps the special keys */
198 static int spitz_keymap[SPITZ_KEY_SENSE_NUM + 1][SPITZ_KEY_STROBE_NUM] = {
199 { 0x1d, 0x02, 0x04, 0x06, 0x07, 0x08, 0x0a, 0x0b, 0x0e, 0x3f, 0x40 },
200 { -1 , 0x03, 0x05, 0x13, 0x15, 0x09, 0x17, 0x18, 0x19, 0x41, 0x42 },
201 { 0x0f, 0x10, 0x12, 0x14, 0x22, 0x16, 0x24, 0x25, -1 , -1 , -1 },
202 { 0x3c, 0x11, 0x1f, 0x21, 0x2f, 0x23, 0x32, 0x26, -1 , 0x36, -1 },
203 { 0x3b, 0x1e, 0x20, 0x2e, 0x30, 0x31, 0x34, -1 , 0x1c, 0x2a, -1 },
204 { 0x44, 0x2c, 0x2d, 0x0c, 0x39, 0x33, -1 , 0x48, -1 , -1 , 0x38 },
205 { 0x37, 0x3d, -1 , 0x45, 0x57, 0x58, 0x4b, 0x50, 0x4d, -1 , -1 },
206 { 0x52, 0x43, 0x01, 0x47, 0x49, -1 , -1 , -1 , -1 , -1 , -1 },
209 #define SPITZ_GPIO_AK_INT 13 /* Remote control */
210 #define SPITZ_GPIO_SYNC 16 /* Sync button */
211 #define SPITZ_GPIO_ON_KEY 95 /* Power button */
212 #define SPITZ_GPIO_SWA 97 /* Lid */
213 #define SPITZ_GPIO_SWB 96 /* Tablet mode */
215 /* The special buttons are mapped to unused keys */
216 static const int spitz_gpiomap[5] = {
217 SPITZ_GPIO_AK_INT, SPITZ_GPIO_SYNC, SPITZ_GPIO_ON_KEY,
218 SPITZ_GPIO_SWA, SPITZ_GPIO_SWB,
220 static int spitz_gpio_invert[5] = { 0, 0, 0, 0, 0, };
222 typedef struct {
223 qemu_irq sense[SPITZ_KEY_SENSE_NUM];
224 qemu_irq *strobe;
225 qemu_irq gpiomap[5];
226 int keymap[0x80];
227 uint16_t keyrow[SPITZ_KEY_SENSE_NUM];
228 uint16_t strobe_state;
229 uint16_t sense_state;
231 uint16_t pre_map[0x100];
232 uint16_t modifiers;
233 uint16_t imodifiers;
234 uint8_t fifo[16];
235 int fifopos, fifolen;
236 QEMUTimer *kbdtimer;
237 } SpitzKeyboardState;
239 static void spitz_keyboard_sense_update(SpitzKeyboardState *s)
241 int i;
242 uint16_t strobe, sense = 0;
243 for (i = 0; i < SPITZ_KEY_SENSE_NUM; i ++) {
244 strobe = s->keyrow[i] & s->strobe_state;
245 if (strobe) {
246 sense |= 1 << i;
247 if (!(s->sense_state & (1 << i)))
248 qemu_irq_raise(s->sense[i]);
249 } else if (s->sense_state & (1 << i))
250 qemu_irq_lower(s->sense[i]);
253 s->sense_state = sense;
256 static void spitz_keyboard_strobe(void *opaque, int line, int level)
258 SpitzKeyboardState *s = (SpitzKeyboardState *) opaque;
260 if (level)
261 s->strobe_state |= 1 << line;
262 else
263 s->strobe_state &= ~(1 << line);
264 spitz_keyboard_sense_update(s);
267 static void spitz_keyboard_keydown(SpitzKeyboardState *s, int keycode)
269 int spitz_keycode = s->keymap[keycode & 0x7f];
270 if (spitz_keycode == -1)
271 return;
273 /* Handle the additional keys */
274 if ((spitz_keycode >> 4) == SPITZ_KEY_SENSE_NUM) {
275 qemu_set_irq(s->gpiomap[spitz_keycode & 0xf], (keycode < 0x80) ^
276 spitz_gpio_invert[spitz_keycode & 0xf]);
277 return;
280 if (keycode & 0x80)
281 s->keyrow[spitz_keycode >> 4] &= ~(1 << (spitz_keycode & 0xf));
282 else
283 s->keyrow[spitz_keycode >> 4] |= 1 << (spitz_keycode & 0xf);
285 spitz_keyboard_sense_update(s);
288 #define SHIFT (1 << 7)
289 #define CTRL (1 << 8)
290 #define FN (1 << 9)
292 #define QUEUE_KEY(c) s->fifo[(s->fifopos + s->fifolen ++) & 0xf] = c
294 static void spitz_keyboard_handler(SpitzKeyboardState *s, int keycode)
296 uint16_t code;
297 int mapcode;
298 switch (keycode) {
299 case 0x2a: /* Left Shift */
300 s->modifiers |= 1;
301 break;
302 case 0xaa:
303 s->modifiers &= ~1;
304 break;
305 case 0x36: /* Right Shift */
306 s->modifiers |= 2;
307 break;
308 case 0xb6:
309 s->modifiers &= ~2;
310 break;
311 case 0x1d: /* Control */
312 s->modifiers |= 4;
313 break;
314 case 0x9d:
315 s->modifiers &= ~4;
316 break;
317 case 0x38: /* Alt */
318 s->modifiers |= 8;
319 break;
320 case 0xb8:
321 s->modifiers &= ~8;
322 break;
325 code = s->pre_map[mapcode = ((s->modifiers & 3) ?
326 (keycode | SHIFT) :
327 (keycode & ~SHIFT))];
329 if (code != mapcode) {
330 #if 0
331 if ((code & SHIFT) && !(s->modifiers & 1))
332 QUEUE_KEY(0x2a | (keycode & 0x80));
333 if ((code & CTRL ) && !(s->modifiers & 4))
334 QUEUE_KEY(0x1d | (keycode & 0x80));
335 if ((code & FN ) && !(s->modifiers & 8))
336 QUEUE_KEY(0x38 | (keycode & 0x80));
337 if ((code & FN ) && (s->modifiers & 1))
338 QUEUE_KEY(0x2a | (~keycode & 0x80));
339 if ((code & FN ) && (s->modifiers & 2))
340 QUEUE_KEY(0x36 | (~keycode & 0x80));
341 #else
342 if (keycode & 0x80) {
343 if ((s->imodifiers & 1 ) && !(s->modifiers & 1))
344 QUEUE_KEY(0x2a | 0x80);
345 if ((s->imodifiers & 4 ) && !(s->modifiers & 4))
346 QUEUE_KEY(0x1d | 0x80);
347 if ((s->imodifiers & 8 ) && !(s->modifiers & 8))
348 QUEUE_KEY(0x38 | 0x80);
349 if ((s->imodifiers & 0x10) && (s->modifiers & 1))
350 QUEUE_KEY(0x2a);
351 if ((s->imodifiers & 0x20) && (s->modifiers & 2))
352 QUEUE_KEY(0x36);
353 s->imodifiers = 0;
354 } else {
355 if ((code & SHIFT) && !((s->modifiers | s->imodifiers) & 1)) {
356 QUEUE_KEY(0x2a);
357 s->imodifiers |= 1;
359 if ((code & CTRL ) && !((s->modifiers | s->imodifiers) & 4)) {
360 QUEUE_KEY(0x1d);
361 s->imodifiers |= 4;
363 if ((code & FN ) && !((s->modifiers | s->imodifiers) & 8)) {
364 QUEUE_KEY(0x38);
365 s->imodifiers |= 8;
367 if ((code & FN ) && (s->modifiers & 1) &&
368 !(s->imodifiers & 0x10)) {
369 QUEUE_KEY(0x2a | 0x80);
370 s->imodifiers |= 0x10;
372 if ((code & FN ) && (s->modifiers & 2) &&
373 !(s->imodifiers & 0x20)) {
374 QUEUE_KEY(0x36 | 0x80);
375 s->imodifiers |= 0x20;
378 #endif
381 QUEUE_KEY((code & 0x7f) | (keycode & 0x80));
384 static void spitz_keyboard_tick(void *opaque)
386 SpitzKeyboardState *s = (SpitzKeyboardState *) opaque;
388 if (s->fifolen) {
389 spitz_keyboard_keydown(s, s->fifo[s->fifopos ++]);
390 s->fifolen --;
391 if (s->fifopos >= 16)
392 s->fifopos = 0;
395 qemu_mod_timer(s->kbdtimer, qemu_get_clock(vm_clock) + ticks_per_sec / 32);
398 static void spitz_keyboard_pre_map(SpitzKeyboardState *s)
400 int i;
401 for (i = 0; i < 0x100; i ++)
402 s->pre_map[i] = i;
403 s->pre_map[0x02 | SHIFT ] = 0x02 | SHIFT; /* exclam */
404 s->pre_map[0x28 | SHIFT ] = 0x03 | SHIFT; /* quotedbl */
405 s->pre_map[0x04 | SHIFT ] = 0x04 | SHIFT; /* numbersign */
406 s->pre_map[0x05 | SHIFT ] = 0x05 | SHIFT; /* dollar */
407 s->pre_map[0x06 | SHIFT ] = 0x06 | SHIFT; /* percent */
408 s->pre_map[0x08 | SHIFT ] = 0x07 | SHIFT; /* ampersand */
409 s->pre_map[0x28 ] = 0x08 | SHIFT; /* apostrophe */
410 s->pre_map[0x0a | SHIFT ] = 0x09 | SHIFT; /* parenleft */
411 s->pre_map[0x0b | SHIFT ] = 0x0a | SHIFT; /* parenright */
412 s->pre_map[0x29 | SHIFT ] = 0x0b | SHIFT; /* asciitilde */
413 s->pre_map[0x03 | SHIFT ] = 0x0c | SHIFT; /* at */
414 s->pre_map[0xd3 ] = 0x0e | FN; /* Delete */
415 s->pre_map[0x3a ] = 0x0f | FN; /* Caps_Lock */
416 s->pre_map[0x07 | SHIFT ] = 0x11 | FN; /* asciicircum */
417 s->pre_map[0x0d ] = 0x12 | FN; /* equal */
418 s->pre_map[0x0d | SHIFT ] = 0x13 | FN; /* plus */
419 s->pre_map[0x1a ] = 0x14 | FN; /* bracketleft */
420 s->pre_map[0x1b ] = 0x15 | FN; /* bracketright */
421 s->pre_map[0x1a | SHIFT ] = 0x16 | FN; /* braceleft */
422 s->pre_map[0x1b | SHIFT ] = 0x17 | FN; /* braceright */
423 s->pre_map[0x27 ] = 0x22 | FN; /* semicolon */
424 s->pre_map[0x27 | SHIFT ] = 0x23 | FN; /* colon */
425 s->pre_map[0x09 | SHIFT ] = 0x24 | FN; /* asterisk */
426 s->pre_map[0x2b ] = 0x25 | FN; /* backslash */
427 s->pre_map[0x2b | SHIFT ] = 0x26 | FN; /* bar */
428 s->pre_map[0x0c | SHIFT ] = 0x30 | FN; /* underscore */
429 s->pre_map[0x33 | SHIFT ] = 0x33 | FN; /* less */
430 s->pre_map[0x35 ] = 0x33 | SHIFT; /* slash */
431 s->pre_map[0x34 | SHIFT ] = 0x34 | FN; /* greater */
432 s->pre_map[0x35 | SHIFT ] = 0x34 | SHIFT; /* question */
433 s->pre_map[0x49 ] = 0x48 | FN; /* Page_Up */
434 s->pre_map[0x51 ] = 0x50 | FN; /* Page_Down */
436 s->modifiers = 0;
437 s->imodifiers = 0;
438 s->fifopos = 0;
439 s->fifolen = 0;
440 s->kbdtimer = qemu_new_timer(vm_clock, spitz_keyboard_tick, s);
441 spitz_keyboard_tick(s);
444 #undef SHIFT
445 #undef CTRL
446 #undef FN
448 static void spitz_keyboard_save(QEMUFile *f, void *opaque)
450 SpitzKeyboardState *s = (SpitzKeyboardState *) opaque;
451 int i;
453 qemu_put_be16s(f, &s->sense_state);
454 qemu_put_be16s(f, &s->strobe_state);
455 for (i = 0; i < 5; i ++)
456 qemu_put_byte(f, spitz_gpio_invert[i]);
459 static int spitz_keyboard_load(QEMUFile *f, void *opaque, int version_id)
461 SpitzKeyboardState *s = (SpitzKeyboardState *) opaque;
462 int i;
464 qemu_get_be16s(f, &s->sense_state);
465 qemu_get_be16s(f, &s->strobe_state);
466 for (i = 0; i < 5; i ++)
467 spitz_gpio_invert[i] = qemu_get_byte(f);
469 /* Release all pressed keys */
470 memset(s->keyrow, 0, sizeof(s->keyrow));
471 spitz_keyboard_sense_update(s);
472 s->modifiers = 0;
473 s->imodifiers = 0;
474 s->fifopos = 0;
475 s->fifolen = 0;
477 return 0;
480 static void spitz_keyboard_register(PXA2xxState *cpu)
482 int i, j;
483 SpitzKeyboardState *s;
485 s = (SpitzKeyboardState *)
486 qemu_mallocz(sizeof(SpitzKeyboardState));
487 memset(s, 0, sizeof(SpitzKeyboardState));
489 for (i = 0; i < 0x80; i ++)
490 s->keymap[i] = -1;
491 for (i = 0; i < SPITZ_KEY_SENSE_NUM + 1; i ++)
492 for (j = 0; j < SPITZ_KEY_STROBE_NUM; j ++)
493 if (spitz_keymap[i][j] != -1)
494 s->keymap[spitz_keymap[i][j]] = (i << 4) | j;
496 for (i = 0; i < SPITZ_KEY_SENSE_NUM; i ++)
497 s->sense[i] = pxa2xx_gpio_in_get(cpu->gpio)[spitz_gpio_key_sense[i]];
499 for (i = 0; i < 5; i ++)
500 s->gpiomap[i] = pxa2xx_gpio_in_get(cpu->gpio)[spitz_gpiomap[i]];
502 s->strobe = qemu_allocate_irqs(spitz_keyboard_strobe, s,
503 SPITZ_KEY_STROBE_NUM);
504 for (i = 0; i < SPITZ_KEY_STROBE_NUM; i ++)
505 pxa2xx_gpio_out_set(cpu->gpio, spitz_gpio_key_strobe[i], s->strobe[i]);
507 spitz_keyboard_pre_map(s);
508 qemu_add_kbd_event_handler((QEMUPutKBDEvent *) spitz_keyboard_handler, s);
510 register_savevm("spitz_keyboard", 0, 0,
511 spitz_keyboard_save, spitz_keyboard_load, s);
514 /* LCD backlight controller */
516 #define LCDTG_RESCTL 0x00
517 #define LCDTG_PHACTRL 0x01
518 #define LCDTG_DUTYCTRL 0x02
519 #define LCDTG_POWERREG0 0x03
520 #define LCDTG_POWERREG1 0x04
521 #define LCDTG_GPOR3 0x05
522 #define LCDTG_PICTRL 0x06
523 #define LCDTG_POLCTRL 0x07
525 typedef struct {
526 SSISlave ssidev;
527 int bl_intensity;
528 int bl_power;
529 } SpitzLCDTG;
531 static void spitz_bl_update(SpitzLCDTG *s)
533 if (s->bl_power && s->bl_intensity)
534 zaurus_printf("LCD Backlight now at %i/63\n", s->bl_intensity);
535 else
536 zaurus_printf("LCD Backlight now off\n");
539 /* FIXME: Implement GPIO properly and remove this hack. */
540 static SpitzLCDTG *spitz_lcdtg;
542 static inline void spitz_bl_bit5(void *opaque, int line, int level)
544 SpitzLCDTG *s = spitz_lcdtg;
545 int prev = s->bl_intensity;
547 if (level)
548 s->bl_intensity &= ~0x20;
549 else
550 s->bl_intensity |= 0x20;
552 if (s->bl_power && prev != s->bl_intensity)
553 spitz_bl_update(s);
556 static inline void spitz_bl_power(void *opaque, int line, int level)
558 SpitzLCDTG *s = spitz_lcdtg;
559 s->bl_power = !!level;
560 spitz_bl_update(s);
563 static uint32_t spitz_lcdtg_transfer(SSISlave *dev, uint32_t value)
565 SpitzLCDTG *s = FROM_SSI_SLAVE(SpitzLCDTG, dev);
566 int addr;
567 addr = value >> 5;
568 value &= 0x1f;
570 switch (addr) {
571 case LCDTG_RESCTL:
572 if (value)
573 zaurus_printf("LCD in QVGA mode\n");
574 else
575 zaurus_printf("LCD in VGA mode\n");
576 break;
578 case LCDTG_DUTYCTRL:
579 s->bl_intensity &= ~0x1f;
580 s->bl_intensity |= value;
581 if (s->bl_power)
582 spitz_bl_update(s);
583 break;
585 case LCDTG_POWERREG0:
586 /* Set common voltage to M62332FP */
587 break;
589 return 0;
592 static void spitz_lcdtg_save(QEMUFile *f, void *opaque)
594 SpitzLCDTG *s = (SpitzLCDTG *)opaque;
595 qemu_put_be32(f, s->bl_intensity);
596 qemu_put_be32(f, s->bl_power);
599 static int spitz_lcdtg_load(QEMUFile *f, void *opaque, int version_id)
601 SpitzLCDTG *s = (SpitzLCDTG *)opaque;
602 s->bl_intensity = qemu_get_be32(f);
603 s->bl_power = qemu_get_be32(f);
604 return 0;
607 static void spitz_lcdtg_init(SSISlave *dev)
609 SpitzLCDTG *s = FROM_SSI_SLAVE(SpitzLCDTG, dev);
611 spitz_lcdtg = s;
612 s->bl_power = 0;
613 s->bl_intensity = 0x20;
615 register_savevm("spitz-lcdtg", -1, 1,
616 spitz_lcdtg_save, spitz_lcdtg_load, s);
619 /* SSP devices */
621 #define CORGI_SSP_PORT 2
623 #define SPITZ_GPIO_LCDCON_CS 53
624 #define SPITZ_GPIO_ADS7846_CS 14
625 #define SPITZ_GPIO_MAX1111_CS 20
626 #define SPITZ_GPIO_TP_INT 11
628 static DeviceState *max1111;
630 /* "Demux" the signal based on current chipselect */
631 typedef struct {
632 SSISlave ssidev;
633 SSIBus *bus[3];
634 int enable[3];
635 } CorgiSSPState;
637 static uint32_t corgi_ssp_transfer(SSISlave *dev, uint32_t value)
639 CorgiSSPState *s = FROM_SSI_SLAVE(CorgiSSPState, dev);
640 int i;
642 for (i = 0; i < 3; i++) {
643 if (s->enable[i]) {
644 return ssi_transfer(s->bus[i], value);
647 return 0;
650 static void corgi_ssp_gpio_cs(void *opaque, int line, int level)
652 CorgiSSPState *s = (CorgiSSPState *)opaque;
653 assert(line >= 0 && line < 3);
654 s->enable[line] = !level;
657 #define MAX1111_BATT_VOLT 1
658 #define MAX1111_BATT_TEMP 2
659 #define MAX1111_ACIN_VOLT 3
661 #define SPITZ_BATTERY_TEMP 0xe0 /* About 2.9V */
662 #define SPITZ_BATTERY_VOLT 0xd0 /* About 4.0V */
663 #define SPITZ_CHARGEON_ACIN 0x80 /* About 5.0V */
665 static void spitz_adc_temp_on(void *opaque, int line, int level)
667 if (!max1111)
668 return;
670 if (level)
671 max111x_set_input(max1111, MAX1111_BATT_TEMP, SPITZ_BATTERY_TEMP);
672 else
673 max111x_set_input(max1111, MAX1111_BATT_TEMP, 0);
676 static void spitz_ssp_save(QEMUFile *f, void *opaque)
678 CorgiSSPState *s = (CorgiSSPState *)opaque;
679 int i;
681 for (i = 0; i < 3; i++) {
682 qemu_put_be32(f, s->enable[i]);
686 static int spitz_ssp_load(QEMUFile *f, void *opaque, int version_id)
688 CorgiSSPState *s = (CorgiSSPState *)opaque;
689 int i;
691 if (version_id != 1) {
692 return -EINVAL;
694 for (i = 0; i < 3; i++) {
695 s->enable[i] = qemu_get_be32(f);
697 return 0;
700 static void corgi_ssp_init(SSISlave *dev)
702 CorgiSSPState *s = FROM_SSI_SLAVE(CorgiSSPState, dev);
704 qdev_init_gpio_in(&dev->qdev, corgi_ssp_gpio_cs, 3);
705 s->bus[0] = ssi_create_bus(&dev->qdev, "ssi0");
706 s->bus[1] = ssi_create_bus(&dev->qdev, "ssi1");
707 s->bus[2] = ssi_create_bus(&dev->qdev, "ssi2");
709 register_savevm("spitz_ssp", -1, 1, spitz_ssp_save, spitz_ssp_load, s);
712 static void spitz_ssp_attach(PXA2xxState *cpu)
714 DeviceState *mux;
715 DeviceState *dev;
716 void *bus;
718 mux = ssi_create_slave(cpu->ssp[CORGI_SSP_PORT - 1], "corgi-ssp");
720 bus = qdev_get_child_bus(mux, "ssi0");
721 dev = ssi_create_slave(bus, "spitz-lcdtg");
723 bus = qdev_get_child_bus(mux, "ssi1");
724 dev = ssi_create_slave(bus, "ads7846");
725 qdev_connect_gpio_out(dev, 0,
726 pxa2xx_gpio_in_get(cpu->gpio)[SPITZ_GPIO_TP_INT]);
728 bus = qdev_get_child_bus(mux, "ssi2");
729 max1111 = ssi_create_slave(bus, "max1111");
730 max111x_set_input(max1111, MAX1111_BATT_VOLT, SPITZ_BATTERY_VOLT);
731 max111x_set_input(max1111, MAX1111_BATT_TEMP, 0);
732 max111x_set_input(max1111, MAX1111_ACIN_VOLT, SPITZ_CHARGEON_ACIN);
734 pxa2xx_gpio_out_set(cpu->gpio, SPITZ_GPIO_LCDCON_CS,
735 qdev_get_gpio_in(mux, 0));
736 pxa2xx_gpio_out_set(cpu->gpio, SPITZ_GPIO_ADS7846_CS,
737 qdev_get_gpio_in(mux, 1));
738 pxa2xx_gpio_out_set(cpu->gpio, SPITZ_GPIO_MAX1111_CS,
739 qdev_get_gpio_in(mux, 2));
742 /* CF Microdrive */
744 static void spitz_microdrive_attach(PXA2xxState *cpu, int slot)
746 PCMCIACardState *md;
747 int index;
748 BlockDriverState *bs;
750 index = drive_get_index(IF_IDE, 0, 0);
751 if (index == -1)
752 return;
753 bs = drives_table[index].bdrv;
754 if (bdrv_is_inserted(bs) && !bdrv_is_removable(bs)) {
755 md = dscm1xxxx_init(bs);
756 pxa2xx_pcmcia_attach(cpu->pcmcia[slot], md);
760 /* Wm8750 and Max7310 on I2C */
762 #define AKITA_MAX_ADDR 0x18
763 #define SPITZ_WM_ADDRL 0x1b
764 #define SPITZ_WM_ADDRH 0x1a
766 #define SPITZ_GPIO_WM 5
768 #ifdef HAS_AUDIO
769 static void spitz_wm8750_addr(void *opaque, int line, int level)
771 i2c_slave *wm = (i2c_slave *) opaque;
772 if (level)
773 i2c_set_slave_address(wm, SPITZ_WM_ADDRH);
774 else
775 i2c_set_slave_address(wm, SPITZ_WM_ADDRL);
777 #endif
779 static void spitz_i2c_setup(PXA2xxState *cpu)
781 /* Attach the CPU on one end of our I2C bus. */
782 i2c_bus *bus = pxa2xx_i2c_bus(cpu->i2c[0]);
784 #ifdef HAS_AUDIO
785 DeviceState *wm;
787 /* Attach a WM8750 to the bus */
788 wm = i2c_create_slave(bus, "wm8750", 0);
790 spitz_wm8750_addr(wm, 0, 0);
791 pxa2xx_gpio_out_set(cpu->gpio, SPITZ_GPIO_WM,
792 qemu_allocate_irqs(spitz_wm8750_addr, wm, 1)[0]);
793 /* .. and to the sound interface. */
794 cpu->i2s->opaque = wm;
795 cpu->i2s->codec_out = wm8750_dac_dat;
796 cpu->i2s->codec_in = wm8750_adc_dat;
797 wm8750_data_req_set(wm, cpu->i2s->data_req, cpu->i2s);
798 #endif
801 static void spitz_akita_i2c_setup(PXA2xxState *cpu)
803 /* Attach a Max7310 to Akita I2C bus. */
804 i2c_create_slave(pxa2xx_i2c_bus(cpu->i2c[0]), "max7310",
805 AKITA_MAX_ADDR);
808 /* Other peripherals */
810 static void spitz_out_switch(void *opaque, int line, int level)
812 switch (line) {
813 case 0:
814 zaurus_printf("Charging %s.\n", level ? "off" : "on");
815 break;
816 case 1:
817 zaurus_printf("Discharging %s.\n", level ? "on" : "off");
818 break;
819 case 2:
820 zaurus_printf("Green LED %s.\n", level ? "on" : "off");
821 break;
822 case 3:
823 zaurus_printf("Orange LED %s.\n", level ? "on" : "off");
824 break;
825 case 4:
826 spitz_bl_bit5(opaque, line, level);
827 break;
828 case 5:
829 spitz_bl_power(opaque, line, level);
830 break;
831 case 6:
832 spitz_adc_temp_on(opaque, line, level);
833 break;
837 #define SPITZ_SCP_LED_GREEN 1
838 #define SPITZ_SCP_JK_B 2
839 #define SPITZ_SCP_CHRG_ON 3
840 #define SPITZ_SCP_MUTE_L 4
841 #define SPITZ_SCP_MUTE_R 5
842 #define SPITZ_SCP_CF_POWER 6
843 #define SPITZ_SCP_LED_ORANGE 7
844 #define SPITZ_SCP_JK_A 8
845 #define SPITZ_SCP_ADC_TEMP_ON 9
846 #define SPITZ_SCP2_IR_ON 1
847 #define SPITZ_SCP2_AKIN_PULLUP 2
848 #define SPITZ_SCP2_BACKLIGHT_CONT 7
849 #define SPITZ_SCP2_BACKLIGHT_ON 8
850 #define SPITZ_SCP2_MIC_BIAS 9
852 static void spitz_scoop_gpio_setup(PXA2xxState *cpu,
853 ScoopInfo *scp0, ScoopInfo *scp1)
855 qemu_irq *outsignals = qemu_allocate_irqs(spitz_out_switch, cpu, 8);
857 scoop_gpio_out_set(scp0, SPITZ_SCP_CHRG_ON, outsignals[0]);
858 scoop_gpio_out_set(scp0, SPITZ_SCP_JK_B, outsignals[1]);
859 scoop_gpio_out_set(scp0, SPITZ_SCP_LED_GREEN, outsignals[2]);
860 scoop_gpio_out_set(scp0, SPITZ_SCP_LED_ORANGE, outsignals[3]);
862 if (scp1) {
863 scoop_gpio_out_set(scp1, SPITZ_SCP2_BACKLIGHT_CONT, outsignals[4]);
864 scoop_gpio_out_set(scp1, SPITZ_SCP2_BACKLIGHT_ON, outsignals[5]);
867 scoop_gpio_out_set(scp0, SPITZ_SCP_ADC_TEMP_ON, outsignals[6]);
870 #define SPITZ_GPIO_HSYNC 22
871 #define SPITZ_GPIO_SD_DETECT 9
872 #define SPITZ_GPIO_SD_WP 81
873 #define SPITZ_GPIO_ON_RESET 89
874 #define SPITZ_GPIO_BAT_COVER 90
875 #define SPITZ_GPIO_CF1_IRQ 105
876 #define SPITZ_GPIO_CF1_CD 94
877 #define SPITZ_GPIO_CF2_IRQ 106
878 #define SPITZ_GPIO_CF2_CD 93
880 static int spitz_hsync;
882 static void spitz_lcd_hsync_handler(void *opaque, int line, int level)
884 PXA2xxState *cpu = (PXA2xxState *) opaque;
885 qemu_set_irq(pxa2xx_gpio_in_get(cpu->gpio)[SPITZ_GPIO_HSYNC], spitz_hsync);
886 spitz_hsync ^= 1;
889 static void spitz_gpio_setup(PXA2xxState *cpu, int slots)
891 qemu_irq lcd_hsync;
893 * Bad hack: We toggle the LCD hsync GPIO on every GPIO status
894 * read to satisfy broken guests that poll-wait for hsync.
895 * Simulating a real hsync event would be less practical and
896 * wouldn't guarantee that a guest ever exits the loop.
898 spitz_hsync = 0;
899 lcd_hsync = qemu_allocate_irqs(spitz_lcd_hsync_handler, cpu, 1)[0];
900 pxa2xx_gpio_read_notifier(cpu->gpio, lcd_hsync);
901 pxa2xx_lcd_vsync_notifier(cpu->lcd, lcd_hsync);
903 /* MMC/SD host */
904 pxa2xx_mmci_handlers(cpu->mmc,
905 pxa2xx_gpio_in_get(cpu->gpio)[SPITZ_GPIO_SD_WP],
906 pxa2xx_gpio_in_get(cpu->gpio)[SPITZ_GPIO_SD_DETECT]);
908 /* Battery lock always closed */
909 qemu_irq_raise(pxa2xx_gpio_in_get(cpu->gpio)[SPITZ_GPIO_BAT_COVER]);
911 /* Handle reset */
912 pxa2xx_gpio_out_set(cpu->gpio, SPITZ_GPIO_ON_RESET, cpu->reset);
914 /* PCMCIA signals: card's IRQ and Card-Detect */
915 if (slots >= 1)
916 pxa2xx_pcmcia_set_irq_cb(cpu->pcmcia[0],
917 pxa2xx_gpio_in_get(cpu->gpio)[SPITZ_GPIO_CF1_IRQ],
918 pxa2xx_gpio_in_get(cpu->gpio)[SPITZ_GPIO_CF1_CD]);
919 if (slots >= 2)
920 pxa2xx_pcmcia_set_irq_cb(cpu->pcmcia[1],
921 pxa2xx_gpio_in_get(cpu->gpio)[SPITZ_GPIO_CF2_IRQ],
922 pxa2xx_gpio_in_get(cpu->gpio)[SPITZ_GPIO_CF2_CD]);
924 /* Initialise the screen rotation related signals */
925 spitz_gpio_invert[3] = 0; /* Always open */
926 if (graphic_rotate) { /* Tablet mode */
927 spitz_gpio_invert[4] = 0;
928 } else { /* Portrait mode */
929 spitz_gpio_invert[4] = 1;
931 qemu_set_irq(pxa2xx_gpio_in_get(cpu->gpio)[SPITZ_GPIO_SWA],
932 spitz_gpio_invert[3]);
933 qemu_set_irq(pxa2xx_gpio_in_get(cpu->gpio)[SPITZ_GPIO_SWB],
934 spitz_gpio_invert[4]);
937 /* Board init. */
938 enum spitz_model_e { spitz, akita, borzoi, terrier };
940 #define SPITZ_RAM 0x04000000
941 #define SPITZ_ROM 0x00800000
943 static struct arm_boot_info spitz_binfo = {
944 .loader_start = PXA2XX_SDRAM_BASE,
945 .ram_size = 0x04000000,
948 static void spitz_common_init(ram_addr_t ram_size,
949 const char *kernel_filename,
950 const char *kernel_cmdline, const char *initrd_filename,
951 const char *cpu_model, enum spitz_model_e model, int arm_id)
953 PXA2xxState *cpu;
954 ScoopInfo *scp0, *scp1 = NULL;
956 if (!cpu_model)
957 cpu_model = (model == terrier) ? "pxa270-c5" : "pxa270-c0";
959 /* Setup CPU & memory */
960 cpu = pxa270_init(spitz_binfo.ram_size, cpu_model);
962 sl_flash_register(cpu, (model == spitz) ? FLASH_128M : FLASH_1024M);
964 cpu_register_physical_memory(0, SPITZ_ROM,
965 qemu_ram_alloc(SPITZ_ROM) | IO_MEM_ROM);
967 /* Setup peripherals */
968 spitz_keyboard_register(cpu);
970 spitz_ssp_attach(cpu);
972 scp0 = scoop_init(cpu, 0, 0x10800000);
973 if (model != akita) {
974 scp1 = scoop_init(cpu, 1, 0x08800040);
977 spitz_scoop_gpio_setup(cpu, scp0, scp1);
979 spitz_gpio_setup(cpu, (model == akita) ? 1 : 2);
981 spitz_i2c_setup(cpu);
983 if (model == akita)
984 spitz_akita_i2c_setup(cpu);
986 if (model == terrier)
987 /* A 6.0 GB microdrive is permanently sitting in CF slot 1. */
988 spitz_microdrive_attach(cpu, 1);
989 else if (model != akita)
990 /* A 4.0 GB microdrive is permanently sitting in CF slot 0. */
991 spitz_microdrive_attach(cpu, 0);
993 /* Setup initial (reset) machine state */
994 cpu->env->regs[15] = spitz_binfo.loader_start;
996 spitz_binfo.kernel_filename = kernel_filename;
997 spitz_binfo.kernel_cmdline = kernel_cmdline;
998 spitz_binfo.initrd_filename = initrd_filename;
999 spitz_binfo.board_id = arm_id;
1000 arm_load_kernel(cpu->env, &spitz_binfo);
1001 sl_bootparam_write(SL_PXA_PARAM_BASE);
1004 static void spitz_init(ram_addr_t ram_size,
1005 const char *boot_device,
1006 const char *kernel_filename, const char *kernel_cmdline,
1007 const char *initrd_filename, const char *cpu_model)
1009 spitz_common_init(ram_size, kernel_filename,
1010 kernel_cmdline, initrd_filename, cpu_model, spitz, 0x2c9);
1013 static void borzoi_init(ram_addr_t ram_size,
1014 const char *boot_device,
1015 const char *kernel_filename, const char *kernel_cmdline,
1016 const char *initrd_filename, const char *cpu_model)
1018 spitz_common_init(ram_size, kernel_filename,
1019 kernel_cmdline, initrd_filename, cpu_model, borzoi, 0x33f);
1022 static void akita_init(ram_addr_t ram_size,
1023 const char *boot_device,
1024 const char *kernel_filename, const char *kernel_cmdline,
1025 const char *initrd_filename, const char *cpu_model)
1027 spitz_common_init(ram_size, kernel_filename,
1028 kernel_cmdline, initrd_filename, cpu_model, akita, 0x2e8);
1031 static void terrier_init(ram_addr_t ram_size,
1032 const char *boot_device,
1033 const char *kernel_filename, const char *kernel_cmdline,
1034 const char *initrd_filename, const char *cpu_model)
1036 spitz_common_init(ram_size, kernel_filename,
1037 kernel_cmdline, initrd_filename, cpu_model, terrier, 0x33f);
1040 static QEMUMachine akitapda_machine = {
1041 .name = "akita",
1042 .desc = "Akita PDA (PXA270)",
1043 .init = akita_init,
1046 static QEMUMachine spitzpda_machine = {
1047 .name = "spitz",
1048 .desc = "Spitz PDA (PXA270)",
1049 .init = spitz_init,
1052 static QEMUMachine borzoipda_machine = {
1053 .name = "borzoi",
1054 .desc = "Borzoi PDA (PXA270)",
1055 .init = borzoi_init,
1058 static QEMUMachine terrierpda_machine = {
1059 .name = "terrier",
1060 .desc = "Terrier PDA (PXA270)",
1061 .init = terrier_init,
1064 static void spitz_machine_init(void)
1066 qemu_register_machine(&akitapda_machine);
1067 qemu_register_machine(&spitzpda_machine);
1068 qemu_register_machine(&borzoipda_machine);
1069 qemu_register_machine(&terrierpda_machine);
1072 machine_init(spitz_machine_init);
1074 static SSISlaveInfo corgi_ssp_info = {
1075 .qdev.name = "corgi-ssp",
1076 .qdev.size = sizeof(CorgiSSPState),
1077 .init = corgi_ssp_init,
1078 .transfer = corgi_ssp_transfer
1081 static SSISlaveInfo spitz_lcdtg_info = {
1082 .qdev.name = "spitz-lcdtg",
1083 .qdev.size = sizeof(SpitzLCDTG),
1084 .init = spitz_lcdtg_init,
1085 .transfer = spitz_lcdtg_transfer
1088 static void spitz_register_devices(void)
1090 ssi_register_slave(&corgi_ssp_info);
1091 ssi_register_slave(&spitz_lcdtg_info);
1094 device_init(spitz_register_devices)