lsi: Fix value overflow in request tag processing
[qemu/mdroth.git] / hw / tosa.c
blobbc6591f06614ce140a9c4c5539cdb0bc24c636cc
1 /* vim:set shiftwidth=4 ts=4 et: */
2 /*
3 * PXA255 Sharp Zaurus SL-6000 PDA platform
5 * Copyright (c) 2008 Dmitry Baryshkov
7 * Code based on spitz platform by Andrzej Zaborowski <balrog@zabor.org>
8 * This code is licensed under the GNU GPL v2.
9 */
11 #include "hw.h"
12 #include "pxa.h"
13 #include "arm-misc.h"
14 #include "sysemu.h"
15 #include "devices.h"
16 #include "sharpsl.h"
17 #include "pcmcia.h"
18 #include "block.h"
19 #include "boards.h"
20 #include "i2c.h"
21 #include "ssi.h"
23 #define TOSA_RAM 0x04000000
24 #define TOSA_ROM 0x00800000
26 #define TOSA_GPIO_nSD_DETECT (9)
27 #define TOSA_GPIO_ON_RESET (19)
28 #define TOSA_GPIO_CF_IRQ (21) /* CF slot0 Ready */
29 #define TOSA_GPIO_CF_CD (13)
30 #define TOSA_GPIO_TC6393XB_INT (15)
31 #define TOSA_GPIO_JC_CF_IRQ (36) /* CF slot1 Ready */
33 #define TOSA_SCOOP_GPIO_BASE 1
34 #define TOSA_GPIO_IR_POWERDWN (TOSA_SCOOP_GPIO_BASE + 2)
35 #define TOSA_GPIO_SD_WP (TOSA_SCOOP_GPIO_BASE + 3)
36 #define TOSA_GPIO_PWR_ON (TOSA_SCOOP_GPIO_BASE + 4)
38 #define TOSA_SCOOP_JC_GPIO_BASE 1
39 #define TOSA_GPIO_BT_LED (TOSA_SCOOP_JC_GPIO_BASE + 0)
40 #define TOSA_GPIO_NOTE_LED (TOSA_SCOOP_JC_GPIO_BASE + 1)
41 #define TOSA_GPIO_CHRG_ERR_LED (TOSA_SCOOP_JC_GPIO_BASE + 2)
42 #define TOSA_GPIO_TC6393XB_L3V_ON (TOSA_SCOOP_JC_GPIO_BASE + 5)
43 #define TOSA_GPIO_WLAN_LED (TOSA_SCOOP_JC_GPIO_BASE + 7)
45 #define DAC_BASE 0x4e
46 #define DAC_CH1 0
47 #define DAC_CH2 1
49 static void tosa_microdrive_attach(PXA2xxState *cpu)
51 PCMCIACardState *md;
52 BlockDriverState *bs;
53 DriveInfo *dinfo;
55 dinfo = drive_get(IF_IDE, 0, 0);
56 if (!dinfo)
57 return;
58 bs = dinfo->bdrv;
59 if (bdrv_is_inserted(bs) && !bdrv_is_removable(bs)) {
60 md = dscm1xxxx_init(dinfo);
61 pxa2xx_pcmcia_attach(cpu->pcmcia[0], md);
65 static void tosa_out_switch(void *opaque, int line, int level)
67 switch (line) {
68 case 0:
69 fprintf(stderr, "blue LED %s.\n", level ? "on" : "off");
70 break;
71 case 1:
72 fprintf(stderr, "green LED %s.\n", level ? "on" : "off");
73 break;
74 case 2:
75 fprintf(stderr, "amber LED %s.\n", level ? "on" : "off");
76 break;
77 case 3:
78 fprintf(stderr, "wlan LED %s.\n", level ? "on" : "off");
79 break;
80 default:
81 fprintf(stderr, "Uhandled out event: %d = %d\n", line, level);
82 break;
87 static void tosa_gpio_setup(PXA2xxState *cpu,
88 ScoopInfo *scp0,
89 ScoopInfo *scp1,
90 TC6393xbState *tmio)
92 qemu_irq *outsignals = qemu_allocate_irqs(tosa_out_switch, cpu, 4);
93 /* MMC/SD host */
94 pxa2xx_mmci_handlers(cpu->mmc,
95 scoop_gpio_in_get(scp0)[TOSA_GPIO_SD_WP],
96 qemu_irq_invert(pxa2xx_gpio_in_get(cpu->gpio)[TOSA_GPIO_nSD_DETECT]));
98 /* Handle reset */
99 pxa2xx_gpio_out_set(cpu->gpio, TOSA_GPIO_ON_RESET, cpu->reset);
101 /* PCMCIA signals: card's IRQ and Card-Detect */
102 pxa2xx_pcmcia_set_irq_cb(cpu->pcmcia[0],
103 pxa2xx_gpio_in_get(cpu->gpio)[TOSA_GPIO_CF_IRQ],
104 pxa2xx_gpio_in_get(cpu->gpio)[TOSA_GPIO_CF_CD]);
106 pxa2xx_pcmcia_set_irq_cb(cpu->pcmcia[1],
107 pxa2xx_gpio_in_get(cpu->gpio)[TOSA_GPIO_JC_CF_IRQ],
108 NULL);
110 scoop_gpio_out_set(scp1, TOSA_GPIO_BT_LED, outsignals[0]);
111 scoop_gpio_out_set(scp1, TOSA_GPIO_NOTE_LED, outsignals[1]);
112 scoop_gpio_out_set(scp1, TOSA_GPIO_CHRG_ERR_LED, outsignals[2]);
113 scoop_gpio_out_set(scp1, TOSA_GPIO_WLAN_LED, outsignals[3]);
115 scoop_gpio_out_set(scp1, TOSA_GPIO_TC6393XB_L3V_ON, tc6393xb_l3v_get(tmio));
118 static uint32_t tosa_ssp_tansfer(SSISlave *dev, uint32_t value)
120 fprintf(stderr, "TG: %d %02x\n", value >> 5, value & 0x1f);
121 return 0;
124 static int tosa_ssp_init(SSISlave *dev)
126 /* Nothing to do. */
127 return 0;
130 typedef struct {
131 i2c_slave i2c;
132 int len;
133 char buf[3];
134 } TosaDACState;
136 static int tosa_dac_send(i2c_slave *i2c, uint8_t data)
138 TosaDACState *s = FROM_I2C_SLAVE(TosaDACState, i2c);
139 s->buf[s->len] = data;
140 if (s->len ++ > 2) {
141 #ifdef VERBOSE
142 fprintf(stderr, "%s: message too long (%i bytes)\n", __FUNCTION__, s->len);
143 #endif
144 return 1;
147 if (s->len == 2) {
148 fprintf(stderr, "dac: channel %d value 0x%02x\n",
149 s->buf[0], s->buf[1]);
152 return 0;
155 static void tosa_dac_event(i2c_slave *i2c, enum i2c_event event)
157 TosaDACState *s = FROM_I2C_SLAVE(TosaDACState, i2c);
158 s->len = 0;
159 switch (event) {
160 case I2C_START_SEND:
161 break;
162 case I2C_START_RECV:
163 printf("%s: recv not supported!!!\n", __FUNCTION__);
164 break;
165 case I2C_FINISH:
166 #ifdef VERBOSE
167 if (s->len < 2)
168 printf("%s: message too short (%i bytes)\n", __FUNCTION__, s->len);
169 if (s->len > 2)
170 printf("%s: message too long\n", __FUNCTION__);
171 #endif
172 break;
173 default:
174 break;
178 static int tosa_dac_recv(i2c_slave *s)
180 printf("%s: recv not supported!!!\n", __FUNCTION__);
181 return -1;
184 static int tosa_dac_init(i2c_slave *i2c)
186 /* Nothing to do. */
187 return 0;
190 static void tosa_tg_init(PXA2xxState *cpu)
192 i2c_bus *bus = pxa2xx_i2c_bus(cpu->i2c[0]);
193 i2c_create_slave(bus, "tosa_dac", DAC_BASE);
194 ssi_create_slave(cpu->ssp[1], "tosa-ssp");
198 static struct arm_boot_info tosa_binfo = {
199 .loader_start = PXA2XX_SDRAM_BASE,
200 .ram_size = 0x04000000,
203 static void tosa_init(ram_addr_t ram_size,
204 const char *boot_device,
205 const char *kernel_filename, const char *kernel_cmdline,
206 const char *initrd_filename, const char *cpu_model)
208 PXA2xxState *cpu;
209 TC6393xbState *tmio;
210 ScoopInfo *scp0, *scp1;
212 if (!cpu_model)
213 cpu_model = "pxa255";
215 cpu = pxa255_init(tosa_binfo.ram_size);
217 cpu_register_physical_memory(0, TOSA_ROM,
218 qemu_ram_alloc(TOSA_ROM) | IO_MEM_ROM);
220 tmio = tc6393xb_init(0x10000000,
221 pxa2xx_gpio_in_get(cpu->gpio)[TOSA_GPIO_TC6393XB_INT]);
223 scp0 = scoop_init(cpu, 0, 0x08800000);
224 scp1 = scoop_init(cpu, 1, 0x14800040);
226 tosa_gpio_setup(cpu, scp0, scp1, tmio);
228 tosa_microdrive_attach(cpu);
230 tosa_tg_init(cpu);
232 /* Setup initial (reset) machine state */
233 cpu->env->regs[15] = tosa_binfo.loader_start;
235 tosa_binfo.kernel_filename = kernel_filename;
236 tosa_binfo.kernel_cmdline = kernel_cmdline;
237 tosa_binfo.initrd_filename = initrd_filename;
238 tosa_binfo.board_id = 0x208;
239 arm_load_kernel(cpu->env, &tosa_binfo);
240 sl_bootparam_write(SL_PXA_PARAM_BASE);
243 static QEMUMachine tosapda_machine = {
244 .name = "tosa",
245 .desc = "Tosa PDA (PXA255)",
246 .init = tosa_init,
249 static void tosapda_machine_init(void)
251 qemu_register_machine(&tosapda_machine);
254 machine_init(tosapda_machine_init);
256 static I2CSlaveInfo tosa_dac_info = {
257 .qdev.name = "tosa_dac",
258 .qdev.size = sizeof(TosaDACState),
259 .init = tosa_dac_init,
260 .event = tosa_dac_event,
261 .recv = tosa_dac_recv,
262 .send = tosa_dac_send
265 static SSISlaveInfo tosa_ssp_info = {
266 .qdev.name = "tosa-ssp",
267 .qdev.size = sizeof(SSISlave),
268 .init = tosa_ssp_init,
269 .transfer = tosa_ssp_tansfer
272 static void tosa_register_devices(void)
274 i2c_register_slave(&tosa_dac_info);
275 ssi_register_slave(&tosa_ssp_info);
278 device_init(tosa_register_devices)