Merge remote branch 'mst/for_anthony' into staging
[qemu/mdroth.git] / hw / e1000.c
blob80b78bc618c73a4bf39b265895a41e82c5599cc0
1 /*
2 * QEMU e1000 emulation
4 * Software developer's manual:
5 * http://download.intel.com/design/network/manuals/8254x_GBe_SDM.pdf
7 * Nir Peleg, Tutis Systems Ltd. for Qumranet Inc.
8 * Copyright (c) 2008 Qumranet
9 * Based on work done by:
10 * Copyright (c) 2007 Dan Aloni
11 * Copyright (c) 2004 Antony T Curtis
13 * This library is free software; you can redistribute it and/or
14 * modify it under the terms of the GNU Lesser General Public
15 * License as published by the Free Software Foundation; either
16 * version 2 of the License, or (at your option) any later version.
18 * This library is distributed in the hope that it will be useful,
19 * but WITHOUT ANY WARRANTY; without even the implied warranty of
20 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
21 * Lesser General Public License for more details.
23 * You should have received a copy of the GNU Lesser General Public
24 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
28 #include "hw.h"
29 #include "pci.h"
30 #include "net.h"
31 #include "net/checksum.h"
32 #include "loader.h"
34 #include "e1000_hw.h"
36 #define E1000_DEBUG
38 #ifdef E1000_DEBUG
39 enum {
40 DEBUG_GENERAL, DEBUG_IO, DEBUG_MMIO, DEBUG_INTERRUPT,
41 DEBUG_RX, DEBUG_TX, DEBUG_MDIC, DEBUG_EEPROM,
42 DEBUG_UNKNOWN, DEBUG_TXSUM, DEBUG_TXERR, DEBUG_RXERR,
43 DEBUG_RXFILTER, DEBUG_NOTYET,
45 #define DBGBIT(x) (1<<DEBUG_##x)
46 static int debugflags = DBGBIT(TXERR) | DBGBIT(GENERAL);
48 #define DBGOUT(what, fmt, ...) do { \
49 if (debugflags & DBGBIT(what)) \
50 fprintf(stderr, "e1000: " fmt, ## __VA_ARGS__); \
51 } while (0)
52 #else
53 #define DBGOUT(what, fmt, ...) do {} while (0)
54 #endif
56 #define IOPORT_SIZE 0x40
57 #define PNPMMIO_SIZE 0x20000
60 * HW models:
61 * E1000_DEV_ID_82540EM works with Windows and Linux
62 * E1000_DEV_ID_82573L OK with windoze and Linux 2.6.22,
63 * appears to perform better than 82540EM, but breaks with Linux 2.6.18
64 * E1000_DEV_ID_82544GC_COPPER appears to work; not well tested
65 * Others never tested
67 enum { E1000_DEVID = E1000_DEV_ID_82540EM };
70 * May need to specify additional MAC-to-PHY entries --
71 * Intel's Windows driver refuses to initialize unless they match
73 enum {
74 PHY_ID2_INIT = E1000_DEVID == E1000_DEV_ID_82573L ? 0xcc2 :
75 E1000_DEVID == E1000_DEV_ID_82544GC_COPPER ? 0xc30 :
76 /* default to E1000_DEV_ID_82540EM */ 0xc20
79 typedef struct E1000State_st {
80 PCIDevice dev;
81 NICState *nic;
82 NICConf conf;
83 int mmio_index;
85 uint32_t mac_reg[0x8000];
86 uint16_t phy_reg[0x20];
87 uint16_t eeprom_data[64];
89 uint32_t rxbuf_size;
90 uint32_t rxbuf_min_shift;
91 int check_rxov;
92 struct e1000_tx {
93 unsigned char header[256];
94 unsigned char vlan_header[4];
95 /* Fields vlan and data must not be reordered or separated. */
96 unsigned char vlan[4];
97 unsigned char data[0x10000];
98 uint16_t size;
99 unsigned char sum_needed;
100 unsigned char vlan_needed;
101 uint8_t ipcss;
102 uint8_t ipcso;
103 uint16_t ipcse;
104 uint8_t tucss;
105 uint8_t tucso;
106 uint16_t tucse;
107 uint8_t hdr_len;
108 uint16_t mss;
109 uint32_t paylen;
110 uint16_t tso_frames;
111 char tse;
112 int8_t ip;
113 int8_t tcp;
114 char cptse; // current packet tse bit
115 } tx;
117 struct {
118 uint32_t val_in; // shifted in from guest driver
119 uint16_t bitnum_in;
120 uint16_t bitnum_out;
121 uint16_t reading;
122 uint32_t old_eecd;
123 } eecd_state;
124 } E1000State;
126 #define defreg(x) x = (E1000_##x>>2)
127 enum {
128 defreg(CTRL), defreg(EECD), defreg(EERD), defreg(GPRC),
129 defreg(GPTC), defreg(ICR), defreg(ICS), defreg(IMC),
130 defreg(IMS), defreg(LEDCTL), defreg(MANC), defreg(MDIC),
131 defreg(MPC), defreg(PBA), defreg(RCTL), defreg(RDBAH),
132 defreg(RDBAL), defreg(RDH), defreg(RDLEN), defreg(RDT),
133 defreg(STATUS), defreg(SWSM), defreg(TCTL), defreg(TDBAH),
134 defreg(TDBAL), defreg(TDH), defreg(TDLEN), defreg(TDT),
135 defreg(TORH), defreg(TORL), defreg(TOTH), defreg(TOTL),
136 defreg(TPR), defreg(TPT), defreg(TXDCTL), defreg(WUFC),
137 defreg(RA), defreg(MTA), defreg(CRCERRS),defreg(VFTA),
138 defreg(VET),
141 enum { PHY_R = 1, PHY_W = 2, PHY_RW = PHY_R | PHY_W };
142 static const char phy_regcap[0x20] = {
143 [PHY_STATUS] = PHY_R, [M88E1000_EXT_PHY_SPEC_CTRL] = PHY_RW,
144 [PHY_ID1] = PHY_R, [M88E1000_PHY_SPEC_CTRL] = PHY_RW,
145 [PHY_CTRL] = PHY_RW, [PHY_1000T_CTRL] = PHY_RW,
146 [PHY_LP_ABILITY] = PHY_R, [PHY_1000T_STATUS] = PHY_R,
147 [PHY_AUTONEG_ADV] = PHY_RW, [M88E1000_RX_ERR_CNTR] = PHY_R,
148 [PHY_ID2] = PHY_R, [M88E1000_PHY_SPEC_STATUS] = PHY_R
151 static void
152 ioport_map(PCIDevice *pci_dev, int region_num, pcibus_t addr,
153 pcibus_t size, int type)
155 DBGOUT(IO, "e1000_ioport_map addr=0x%04"FMT_PCIBUS
156 " size=0x%08"FMT_PCIBUS"\n", addr, size);
159 static void
160 set_interrupt_cause(E1000State *s, int index, uint32_t val)
162 if (val)
163 val |= E1000_ICR_INT_ASSERTED;
164 s->mac_reg[ICR] = val;
165 s->mac_reg[ICS] = val;
166 qemu_set_irq(s->dev.irq[0], (s->mac_reg[IMS] & s->mac_reg[ICR]) != 0);
169 static void
170 set_ics(E1000State *s, int index, uint32_t val)
172 DBGOUT(INTERRUPT, "set_ics %x, ICR %x, IMR %x\n", val, s->mac_reg[ICR],
173 s->mac_reg[IMS]);
174 set_interrupt_cause(s, 0, val | s->mac_reg[ICR]);
177 static int
178 rxbufsize(uint32_t v)
180 v &= E1000_RCTL_BSEX | E1000_RCTL_SZ_16384 | E1000_RCTL_SZ_8192 |
181 E1000_RCTL_SZ_4096 | E1000_RCTL_SZ_2048 | E1000_RCTL_SZ_1024 |
182 E1000_RCTL_SZ_512 | E1000_RCTL_SZ_256;
183 switch (v) {
184 case E1000_RCTL_BSEX | E1000_RCTL_SZ_16384:
185 return 16384;
186 case E1000_RCTL_BSEX | E1000_RCTL_SZ_8192:
187 return 8192;
188 case E1000_RCTL_BSEX | E1000_RCTL_SZ_4096:
189 return 4096;
190 case E1000_RCTL_SZ_1024:
191 return 1024;
192 case E1000_RCTL_SZ_512:
193 return 512;
194 case E1000_RCTL_SZ_256:
195 return 256;
197 return 2048;
200 static void
201 set_ctrl(E1000State *s, int index, uint32_t val)
203 /* RST is self clearing */
204 s->mac_reg[CTRL] = val & ~E1000_CTRL_RST;
207 static void
208 set_rx_control(E1000State *s, int index, uint32_t val)
210 s->mac_reg[RCTL] = val;
211 s->rxbuf_size = rxbufsize(val);
212 s->rxbuf_min_shift = ((val / E1000_RCTL_RDMTS_QUAT) & 3) + 1;
213 DBGOUT(RX, "RCTL: %d, mac_reg[RCTL] = 0x%x\n", s->mac_reg[RDT],
214 s->mac_reg[RCTL]);
217 static void
218 set_mdic(E1000State *s, int index, uint32_t val)
220 uint32_t data = val & E1000_MDIC_DATA_MASK;
221 uint32_t addr = ((val & E1000_MDIC_REG_MASK) >> E1000_MDIC_REG_SHIFT);
223 if ((val & E1000_MDIC_PHY_MASK) >> E1000_MDIC_PHY_SHIFT != 1) // phy #
224 val = s->mac_reg[MDIC] | E1000_MDIC_ERROR;
225 else if (val & E1000_MDIC_OP_READ) {
226 DBGOUT(MDIC, "MDIC read reg 0x%x\n", addr);
227 if (!(phy_regcap[addr] & PHY_R)) {
228 DBGOUT(MDIC, "MDIC read reg %x unhandled\n", addr);
229 val |= E1000_MDIC_ERROR;
230 } else
231 val = (val ^ data) | s->phy_reg[addr];
232 } else if (val & E1000_MDIC_OP_WRITE) {
233 DBGOUT(MDIC, "MDIC write reg 0x%x, value 0x%x\n", addr, data);
234 if (!(phy_regcap[addr] & PHY_W)) {
235 DBGOUT(MDIC, "MDIC write reg %x unhandled\n", addr);
236 val |= E1000_MDIC_ERROR;
237 } else
238 s->phy_reg[addr] = data;
240 s->mac_reg[MDIC] = val | E1000_MDIC_READY;
241 set_ics(s, 0, E1000_ICR_MDAC);
244 static uint32_t
245 get_eecd(E1000State *s, int index)
247 uint32_t ret = E1000_EECD_PRES|E1000_EECD_GNT | s->eecd_state.old_eecd;
249 DBGOUT(EEPROM, "reading eeprom bit %d (reading %d)\n",
250 s->eecd_state.bitnum_out, s->eecd_state.reading);
251 if (!s->eecd_state.reading ||
252 ((s->eeprom_data[(s->eecd_state.bitnum_out >> 4) & 0x3f] >>
253 ((s->eecd_state.bitnum_out & 0xf) ^ 0xf))) & 1)
254 ret |= E1000_EECD_DO;
255 return ret;
258 static void
259 set_eecd(E1000State *s, int index, uint32_t val)
261 uint32_t oldval = s->eecd_state.old_eecd;
263 s->eecd_state.old_eecd = val & (E1000_EECD_SK | E1000_EECD_CS |
264 E1000_EECD_DI|E1000_EECD_FWE_MASK|E1000_EECD_REQ);
265 if (!(E1000_EECD_CS & val)) // CS inactive; nothing to do
266 return;
267 if (E1000_EECD_CS & (val ^ oldval)) { // CS rise edge; reset state
268 s->eecd_state.val_in = 0;
269 s->eecd_state.bitnum_in = 0;
270 s->eecd_state.bitnum_out = 0;
271 s->eecd_state.reading = 0;
273 if (!(E1000_EECD_SK & (val ^ oldval))) // no clock edge
274 return;
275 if (!(E1000_EECD_SK & val)) { // falling edge
276 s->eecd_state.bitnum_out++;
277 return;
279 s->eecd_state.val_in <<= 1;
280 if (val & E1000_EECD_DI)
281 s->eecd_state.val_in |= 1;
282 if (++s->eecd_state.bitnum_in == 9 && !s->eecd_state.reading) {
283 s->eecd_state.bitnum_out = ((s->eecd_state.val_in & 0x3f)<<4)-1;
284 s->eecd_state.reading = (((s->eecd_state.val_in >> 6) & 7) ==
285 EEPROM_READ_OPCODE_MICROWIRE);
287 DBGOUT(EEPROM, "eeprom bitnum in %d out %d, reading %d\n",
288 s->eecd_state.bitnum_in, s->eecd_state.bitnum_out,
289 s->eecd_state.reading);
292 static uint32_t
293 flash_eerd_read(E1000State *s, int x)
295 unsigned int index, r = s->mac_reg[EERD] & ~E1000_EEPROM_RW_REG_START;
297 if ((s->mac_reg[EERD] & E1000_EEPROM_RW_REG_START) == 0)
298 return (s->mac_reg[EERD]);
300 if ((index = r >> E1000_EEPROM_RW_ADDR_SHIFT) > EEPROM_CHECKSUM_REG)
301 return (E1000_EEPROM_RW_REG_DONE | r);
303 return ((s->eeprom_data[index] << E1000_EEPROM_RW_REG_DATA) |
304 E1000_EEPROM_RW_REG_DONE | r);
307 static void
308 putsum(uint8_t *data, uint32_t n, uint32_t sloc, uint32_t css, uint32_t cse)
310 uint32_t sum;
312 if (cse && cse < n)
313 n = cse + 1;
314 if (sloc < n-1) {
315 sum = net_checksum_add(n-css, data+css);
316 cpu_to_be16wu((uint16_t *)(data + sloc),
317 net_checksum_finish(sum));
321 static inline int
322 vlan_enabled(E1000State *s)
324 return ((s->mac_reg[CTRL] & E1000_CTRL_VME) != 0);
327 static inline int
328 vlan_rx_filter_enabled(E1000State *s)
330 return ((s->mac_reg[RCTL] & E1000_RCTL_VFE) != 0);
333 static inline int
334 is_vlan_packet(E1000State *s, const uint8_t *buf)
336 return (be16_to_cpup((uint16_t *)(buf + 12)) ==
337 le16_to_cpup((uint16_t *)(s->mac_reg + VET)));
340 static inline int
341 is_vlan_txd(uint32_t txd_lower)
343 return ((txd_lower & E1000_TXD_CMD_VLE) != 0);
346 /* FCS aka Ethernet CRC-32. We don't get it from backends and can't
347 * fill it in, just pad descriptor length by 4 bytes unless guest
348 * told us to trip it off the packet. */
349 static inline int
350 fcs_len(E1000State *s)
352 return (s->mac_reg[RCTL] & E1000_RCTL_SECRC) ? 0 : 4;
355 static void
356 xmit_seg(E1000State *s)
358 uint16_t len, *sp;
359 unsigned int frames = s->tx.tso_frames, css, sofar, n;
360 struct e1000_tx *tp = &s->tx;
362 if (tp->tse && tp->cptse) {
363 css = tp->ipcss;
364 DBGOUT(TXSUM, "frames %d size %d ipcss %d\n",
365 frames, tp->size, css);
366 if (tp->ip) { // IPv4
367 cpu_to_be16wu((uint16_t *)(tp->data+css+2),
368 tp->size - css);
369 cpu_to_be16wu((uint16_t *)(tp->data+css+4),
370 be16_to_cpup((uint16_t *)(tp->data+css+4))+frames);
371 } else // IPv6
372 cpu_to_be16wu((uint16_t *)(tp->data+css+4),
373 tp->size - css);
374 css = tp->tucss;
375 len = tp->size - css;
376 DBGOUT(TXSUM, "tcp %d tucss %d len %d\n", tp->tcp, css, len);
377 if (tp->tcp) {
378 sofar = frames * tp->mss;
379 cpu_to_be32wu((uint32_t *)(tp->data+css+4), // seq
380 be32_to_cpupu((uint32_t *)(tp->data+css+4))+sofar);
381 if (tp->paylen - sofar > tp->mss)
382 tp->data[css + 13] &= ~9; // PSH, FIN
383 } else // UDP
384 cpu_to_be16wu((uint16_t *)(tp->data+css+4), len);
385 if (tp->sum_needed & E1000_TXD_POPTS_TXSM) {
386 // add pseudo-header length before checksum calculation
387 sp = (uint16_t *)(tp->data + tp->tucso);
388 cpu_to_be16wu(sp, be16_to_cpup(sp) + len);
390 tp->tso_frames++;
393 if (tp->sum_needed & E1000_TXD_POPTS_TXSM)
394 putsum(tp->data, tp->size, tp->tucso, tp->tucss, tp->tucse);
395 if (tp->sum_needed & E1000_TXD_POPTS_IXSM)
396 putsum(tp->data, tp->size, tp->ipcso, tp->ipcss, tp->ipcse);
397 if (tp->vlan_needed) {
398 memmove(tp->vlan, tp->data, 4);
399 memmove(tp->data, tp->data + 4, 8);
400 memcpy(tp->data + 8, tp->vlan_header, 4);
401 qemu_send_packet(&s->nic->nc, tp->vlan, tp->size + 4);
402 } else
403 qemu_send_packet(&s->nic->nc, tp->data, tp->size);
404 s->mac_reg[TPT]++;
405 s->mac_reg[GPTC]++;
406 n = s->mac_reg[TOTL];
407 if ((s->mac_reg[TOTL] += s->tx.size) < n)
408 s->mac_reg[TOTH]++;
411 static void
412 process_tx_desc(E1000State *s, struct e1000_tx_desc *dp)
414 uint32_t txd_lower = le32_to_cpu(dp->lower.data);
415 uint32_t dtype = txd_lower & (E1000_TXD_CMD_DEXT | E1000_TXD_DTYP_D);
416 unsigned int split_size = txd_lower & 0xffff, bytes, sz, op;
417 unsigned int msh = 0xfffff, hdr = 0;
418 uint64_t addr;
419 struct e1000_context_desc *xp = (struct e1000_context_desc *)dp;
420 struct e1000_tx *tp = &s->tx;
422 if (dtype == E1000_TXD_CMD_DEXT) { // context descriptor
423 op = le32_to_cpu(xp->cmd_and_length);
424 tp->ipcss = xp->lower_setup.ip_fields.ipcss;
425 tp->ipcso = xp->lower_setup.ip_fields.ipcso;
426 tp->ipcse = le16_to_cpu(xp->lower_setup.ip_fields.ipcse);
427 tp->tucss = xp->upper_setup.tcp_fields.tucss;
428 tp->tucso = xp->upper_setup.tcp_fields.tucso;
429 tp->tucse = le16_to_cpu(xp->upper_setup.tcp_fields.tucse);
430 tp->paylen = op & 0xfffff;
431 tp->hdr_len = xp->tcp_seg_setup.fields.hdr_len;
432 tp->mss = le16_to_cpu(xp->tcp_seg_setup.fields.mss);
433 tp->ip = (op & E1000_TXD_CMD_IP) ? 1 : 0;
434 tp->tcp = (op & E1000_TXD_CMD_TCP) ? 1 : 0;
435 tp->tse = (op & E1000_TXD_CMD_TSE) ? 1 : 0;
436 tp->tso_frames = 0;
437 if (tp->tucso == 0) { // this is probably wrong
438 DBGOUT(TXSUM, "TCP/UDP: cso 0!\n");
439 tp->tucso = tp->tucss + (tp->tcp ? 16 : 6);
441 return;
442 } else if (dtype == (E1000_TXD_CMD_DEXT | E1000_TXD_DTYP_D)) {
443 // data descriptor
444 tp->sum_needed = le32_to_cpu(dp->upper.data) >> 8;
445 tp->cptse = ( txd_lower & E1000_TXD_CMD_TSE ) ? 1 : 0;
446 } else
447 // legacy descriptor
448 tp->cptse = 0;
450 if (vlan_enabled(s) && is_vlan_txd(txd_lower) &&
451 (tp->cptse || txd_lower & E1000_TXD_CMD_EOP)) {
452 tp->vlan_needed = 1;
453 cpu_to_be16wu((uint16_t *)(tp->vlan_header),
454 le16_to_cpup((uint16_t *)(s->mac_reg + VET)));
455 cpu_to_be16wu((uint16_t *)(tp->vlan_header + 2),
456 le16_to_cpu(dp->upper.fields.special));
459 addr = le64_to_cpu(dp->buffer_addr);
460 if (tp->tse && tp->cptse) {
461 hdr = tp->hdr_len;
462 msh = hdr + tp->mss;
463 do {
464 bytes = split_size;
465 if (tp->size + bytes > msh)
466 bytes = msh - tp->size;
467 cpu_physical_memory_read(addr, tp->data + tp->size, bytes);
468 if ((sz = tp->size + bytes) >= hdr && tp->size < hdr)
469 memmove(tp->header, tp->data, hdr);
470 tp->size = sz;
471 addr += bytes;
472 if (sz == msh) {
473 xmit_seg(s);
474 memmove(tp->data, tp->header, hdr);
475 tp->size = hdr;
477 } while (split_size -= bytes);
478 } else if (!tp->tse && tp->cptse) {
479 // context descriptor TSE is not set, while data descriptor TSE is set
480 DBGOUT(TXERR, "TCP segmentaion Error\n");
481 } else {
482 cpu_physical_memory_read(addr, tp->data + tp->size, split_size);
483 tp->size += split_size;
486 if (!(txd_lower & E1000_TXD_CMD_EOP))
487 return;
488 if (!(tp->tse && tp->cptse && tp->size < hdr))
489 xmit_seg(s);
490 tp->tso_frames = 0;
491 tp->sum_needed = 0;
492 tp->vlan_needed = 0;
493 tp->size = 0;
494 tp->cptse = 0;
497 static uint32_t
498 txdesc_writeback(target_phys_addr_t base, struct e1000_tx_desc *dp)
500 uint32_t txd_upper, txd_lower = le32_to_cpu(dp->lower.data);
502 if (!(txd_lower & (E1000_TXD_CMD_RS|E1000_TXD_CMD_RPS)))
503 return 0;
504 txd_upper = (le32_to_cpu(dp->upper.data) | E1000_TXD_STAT_DD) &
505 ~(E1000_TXD_STAT_EC | E1000_TXD_STAT_LC | E1000_TXD_STAT_TU);
506 dp->upper.data = cpu_to_le32(txd_upper);
507 cpu_physical_memory_write(base + ((char *)&dp->upper - (char *)dp),
508 (void *)&dp->upper, sizeof(dp->upper));
509 return E1000_ICR_TXDW;
512 static void
513 start_xmit(E1000State *s)
515 target_phys_addr_t base;
516 struct e1000_tx_desc desc;
517 uint32_t tdh_start = s->mac_reg[TDH], cause = E1000_ICS_TXQE;
519 if (!(s->mac_reg[TCTL] & E1000_TCTL_EN)) {
520 DBGOUT(TX, "tx disabled\n");
521 return;
524 while (s->mac_reg[TDH] != s->mac_reg[TDT]) {
525 base = ((uint64_t)s->mac_reg[TDBAH] << 32) + s->mac_reg[TDBAL] +
526 sizeof(struct e1000_tx_desc) * s->mac_reg[TDH];
527 cpu_physical_memory_read(base, (void *)&desc, sizeof(desc));
529 DBGOUT(TX, "index %d: %p : %x %x\n", s->mac_reg[TDH],
530 (void *)(intptr_t)desc.buffer_addr, desc.lower.data,
531 desc.upper.data);
533 process_tx_desc(s, &desc);
534 cause |= txdesc_writeback(base, &desc);
536 if (++s->mac_reg[TDH] * sizeof(desc) >= s->mac_reg[TDLEN])
537 s->mac_reg[TDH] = 0;
539 * the following could happen only if guest sw assigns
540 * bogus values to TDT/TDLEN.
541 * there's nothing too intelligent we could do about this.
543 if (s->mac_reg[TDH] == tdh_start) {
544 DBGOUT(TXERR, "TDH wraparound @%x, TDT %x, TDLEN %x\n",
545 tdh_start, s->mac_reg[TDT], s->mac_reg[TDLEN]);
546 break;
549 set_ics(s, 0, cause);
552 static int
553 receive_filter(E1000State *s, const uint8_t *buf, int size)
555 static const uint8_t bcast[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
556 static const int mta_shift[] = {4, 3, 2, 0};
557 uint32_t f, rctl = s->mac_reg[RCTL], ra[2], *rp;
559 if (is_vlan_packet(s, buf) && vlan_rx_filter_enabled(s)) {
560 uint16_t vid = be16_to_cpup((uint16_t *)(buf + 14));
561 uint32_t vfta = le32_to_cpup((uint32_t *)(s->mac_reg + VFTA) +
562 ((vid >> 5) & 0x7f));
563 if ((vfta & (1 << (vid & 0x1f))) == 0)
564 return 0;
567 if (rctl & E1000_RCTL_UPE) // promiscuous
568 return 1;
570 if ((buf[0] & 1) && (rctl & E1000_RCTL_MPE)) // promiscuous mcast
571 return 1;
573 if ((rctl & E1000_RCTL_BAM) && !memcmp(buf, bcast, sizeof bcast))
574 return 1;
576 for (rp = s->mac_reg + RA; rp < s->mac_reg + RA + 32; rp += 2) {
577 if (!(rp[1] & E1000_RAH_AV))
578 continue;
579 ra[0] = cpu_to_le32(rp[0]);
580 ra[1] = cpu_to_le32(rp[1]);
581 if (!memcmp(buf, (uint8_t *)ra, 6)) {
582 DBGOUT(RXFILTER,
583 "unicast match[%d]: %02x:%02x:%02x:%02x:%02x:%02x\n",
584 (int)(rp - s->mac_reg - RA)/2,
585 buf[0], buf[1], buf[2], buf[3], buf[4], buf[5]);
586 return 1;
589 DBGOUT(RXFILTER, "unicast mismatch: %02x:%02x:%02x:%02x:%02x:%02x\n",
590 buf[0], buf[1], buf[2], buf[3], buf[4], buf[5]);
592 f = mta_shift[(rctl >> E1000_RCTL_MO_SHIFT) & 3];
593 f = (((buf[5] << 8) | buf[4]) >> f) & 0xfff;
594 if (s->mac_reg[MTA + (f >> 5)] & (1 << (f & 0x1f)))
595 return 1;
596 DBGOUT(RXFILTER,
597 "dropping, inexact filter mismatch: %02x:%02x:%02x:%02x:%02x:%02x MO %d MTA[%d] %x\n",
598 buf[0], buf[1], buf[2], buf[3], buf[4], buf[5],
599 (rctl >> E1000_RCTL_MO_SHIFT) & 3, f >> 5,
600 s->mac_reg[MTA + (f >> 5)]);
602 return 0;
605 static void
606 e1000_set_link_status(VLANClientState *nc)
608 E1000State *s = DO_UPCAST(NICState, nc, nc)->opaque;
609 uint32_t old_status = s->mac_reg[STATUS];
611 if (nc->link_down)
612 s->mac_reg[STATUS] &= ~E1000_STATUS_LU;
613 else
614 s->mac_reg[STATUS] |= E1000_STATUS_LU;
616 if (s->mac_reg[STATUS] != old_status)
617 set_ics(s, 0, E1000_ICR_LSC);
620 static int
621 e1000_can_receive(VLANClientState *nc)
623 E1000State *s = DO_UPCAST(NICState, nc, nc)->opaque;
625 return (s->mac_reg[RCTL] & E1000_RCTL_EN);
628 static ssize_t
629 e1000_receive(VLANClientState *nc, const uint8_t *buf, size_t size)
631 E1000State *s = DO_UPCAST(NICState, nc, nc)->opaque;
632 struct e1000_rx_desc desc;
633 target_phys_addr_t base;
634 unsigned int n, rdt;
635 uint32_t rdh_start;
636 uint16_t vlan_special = 0;
637 uint8_t vlan_status = 0, vlan_offset = 0;
639 if (!(s->mac_reg[RCTL] & E1000_RCTL_EN))
640 return -1;
642 if (size > s->rxbuf_size) {
643 DBGOUT(RX, "packet too large for buffers (%lu > %d)\n",
644 (unsigned long)size, s->rxbuf_size);
645 return -1;
648 if (!receive_filter(s, buf, size))
649 return size;
651 if (vlan_enabled(s) && is_vlan_packet(s, buf)) {
652 vlan_special = cpu_to_le16(be16_to_cpup((uint16_t *)(buf + 14)));
653 memmove((uint8_t *)buf + 4, buf, 12);
654 vlan_status = E1000_RXD_STAT_VP;
655 vlan_offset = 4;
656 size -= 4;
659 rdh_start = s->mac_reg[RDH];
660 do {
661 if (s->mac_reg[RDH] == s->mac_reg[RDT] && s->check_rxov) {
662 set_ics(s, 0, E1000_ICS_RXO);
663 return -1;
665 base = ((uint64_t)s->mac_reg[RDBAH] << 32) + s->mac_reg[RDBAL] +
666 sizeof(desc) * s->mac_reg[RDH];
667 cpu_physical_memory_read(base, (void *)&desc, sizeof(desc));
668 desc.special = vlan_special;
669 desc.status |= (vlan_status | E1000_RXD_STAT_DD);
670 if (desc.buffer_addr) {
671 cpu_physical_memory_write(le64_to_cpu(desc.buffer_addr),
672 (void *)(buf + vlan_offset), size);
673 desc.length = cpu_to_le16(size + fcs_len(s));
674 desc.status |= E1000_RXD_STAT_EOP|E1000_RXD_STAT_IXSM;
675 } else // as per intel docs; skip descriptors with null buf addr
676 DBGOUT(RX, "Null RX descriptor!!\n");
677 cpu_physical_memory_write(base, (void *)&desc, sizeof(desc));
679 if (++s->mac_reg[RDH] * sizeof(desc) >= s->mac_reg[RDLEN])
680 s->mac_reg[RDH] = 0;
681 s->check_rxov = 1;
682 /* see comment in start_xmit; same here */
683 if (s->mac_reg[RDH] == rdh_start) {
684 DBGOUT(RXERR, "RDH wraparound @%x, RDT %x, RDLEN %x\n",
685 rdh_start, s->mac_reg[RDT], s->mac_reg[RDLEN]);
686 set_ics(s, 0, E1000_ICS_RXO);
687 return -1;
689 } while (desc.buffer_addr == 0);
691 s->mac_reg[GPRC]++;
692 s->mac_reg[TPR]++;
693 n = s->mac_reg[TORL];
694 if ((s->mac_reg[TORL] += size) < n)
695 s->mac_reg[TORH]++;
697 n = E1000_ICS_RXT0;
698 if ((rdt = s->mac_reg[RDT]) < s->mac_reg[RDH])
699 rdt += s->mac_reg[RDLEN] / sizeof(desc);
700 if (((rdt - s->mac_reg[RDH]) * sizeof(desc)) <= s->mac_reg[RDLEN] >>
701 s->rxbuf_min_shift)
702 n |= E1000_ICS_RXDMT0;
704 set_ics(s, 0, n);
706 return size;
709 static uint32_t
710 mac_readreg(E1000State *s, int index)
712 return s->mac_reg[index];
715 static uint32_t
716 mac_icr_read(E1000State *s, int index)
718 uint32_t ret = s->mac_reg[ICR];
720 DBGOUT(INTERRUPT, "ICR read: %x\n", ret);
721 set_interrupt_cause(s, 0, 0);
722 return ret;
725 static uint32_t
726 mac_read_clr4(E1000State *s, int index)
728 uint32_t ret = s->mac_reg[index];
730 s->mac_reg[index] = 0;
731 return ret;
734 static uint32_t
735 mac_read_clr8(E1000State *s, int index)
737 uint32_t ret = s->mac_reg[index];
739 s->mac_reg[index] = 0;
740 s->mac_reg[index-1] = 0;
741 return ret;
744 static void
745 mac_writereg(E1000State *s, int index, uint32_t val)
747 s->mac_reg[index] = val;
750 static void
751 set_rdt(E1000State *s, int index, uint32_t val)
753 s->check_rxov = 0;
754 s->mac_reg[index] = val & 0xffff;
757 static void
758 set_16bit(E1000State *s, int index, uint32_t val)
760 s->mac_reg[index] = val & 0xffff;
763 static void
764 set_dlen(E1000State *s, int index, uint32_t val)
766 s->mac_reg[index] = val & 0xfff80;
769 static void
770 set_tctl(E1000State *s, int index, uint32_t val)
772 s->mac_reg[index] = val;
773 s->mac_reg[TDT] &= 0xffff;
774 start_xmit(s);
777 static void
778 set_icr(E1000State *s, int index, uint32_t val)
780 DBGOUT(INTERRUPT, "set_icr %x\n", val);
781 set_interrupt_cause(s, 0, s->mac_reg[ICR] & ~val);
784 static void
785 set_imc(E1000State *s, int index, uint32_t val)
787 s->mac_reg[IMS] &= ~val;
788 set_ics(s, 0, 0);
791 static void
792 set_ims(E1000State *s, int index, uint32_t val)
794 s->mac_reg[IMS] |= val;
795 set_ics(s, 0, 0);
798 #define getreg(x) [x] = mac_readreg
799 static uint32_t (*macreg_readops[])(E1000State *, int) = {
800 getreg(PBA), getreg(RCTL), getreg(TDH), getreg(TXDCTL),
801 getreg(WUFC), getreg(TDT), getreg(CTRL), getreg(LEDCTL),
802 getreg(MANC), getreg(MDIC), getreg(SWSM), getreg(STATUS),
803 getreg(TORL), getreg(TOTL), getreg(IMS), getreg(TCTL),
804 getreg(RDH), getreg(RDT), getreg(VET), getreg(ICS),
805 getreg(TDBAL), getreg(TDBAH), getreg(RDBAH), getreg(RDBAL),
806 getreg(TDLEN), getreg(RDLEN),
808 [TOTH] = mac_read_clr8, [TORH] = mac_read_clr8, [GPRC] = mac_read_clr4,
809 [GPTC] = mac_read_clr4, [TPR] = mac_read_clr4, [TPT] = mac_read_clr4,
810 [ICR] = mac_icr_read, [EECD] = get_eecd, [EERD] = flash_eerd_read,
811 [CRCERRS ... MPC] = &mac_readreg,
812 [RA ... RA+31] = &mac_readreg,
813 [MTA ... MTA+127] = &mac_readreg,
814 [VFTA ... VFTA+127] = &mac_readreg,
816 enum { NREADOPS = ARRAY_SIZE(macreg_readops) };
818 #define putreg(x) [x] = mac_writereg
819 static void (*macreg_writeops[])(E1000State *, int, uint32_t) = {
820 putreg(PBA), putreg(EERD), putreg(SWSM), putreg(WUFC),
821 putreg(TDBAL), putreg(TDBAH), putreg(TXDCTL), putreg(RDBAH),
822 putreg(RDBAL), putreg(LEDCTL), putreg(VET),
823 [TDLEN] = set_dlen, [RDLEN] = set_dlen, [TCTL] = set_tctl,
824 [TDT] = set_tctl, [MDIC] = set_mdic, [ICS] = set_ics,
825 [TDH] = set_16bit, [RDH] = set_16bit, [RDT] = set_rdt,
826 [IMC] = set_imc, [IMS] = set_ims, [ICR] = set_icr,
827 [EECD] = set_eecd, [RCTL] = set_rx_control, [CTRL] = set_ctrl,
828 [RA ... RA+31] = &mac_writereg,
829 [MTA ... MTA+127] = &mac_writereg,
830 [VFTA ... VFTA+127] = &mac_writereg,
832 enum { NWRITEOPS = ARRAY_SIZE(macreg_writeops) };
834 static void
835 e1000_mmio_writel(void *opaque, target_phys_addr_t addr, uint32_t val)
837 E1000State *s = opaque;
838 unsigned int index = (addr & 0x1ffff) >> 2;
840 #ifdef TARGET_WORDS_BIGENDIAN
841 val = bswap32(val);
842 #endif
843 if (index < NWRITEOPS && macreg_writeops[index])
844 macreg_writeops[index](s, index, val);
845 else if (index < NREADOPS && macreg_readops[index])
846 DBGOUT(MMIO, "e1000_mmio_writel RO %x: 0x%04x\n", index<<2, val);
847 else
848 DBGOUT(UNKNOWN, "MMIO unknown write addr=0x%08x,val=0x%08x\n",
849 index<<2, val);
852 static void
853 e1000_mmio_writew(void *opaque, target_phys_addr_t addr, uint32_t val)
855 // emulate hw without byte enables: no RMW
856 e1000_mmio_writel(opaque, addr & ~3,
857 (val & 0xffff) << (8*(addr & 3)));
860 static void
861 e1000_mmio_writeb(void *opaque, target_phys_addr_t addr, uint32_t val)
863 // emulate hw without byte enables: no RMW
864 e1000_mmio_writel(opaque, addr & ~3,
865 (val & 0xff) << (8*(addr & 3)));
868 static uint32_t
869 e1000_mmio_readl(void *opaque, target_phys_addr_t addr)
871 E1000State *s = opaque;
872 unsigned int index = (addr & 0x1ffff) >> 2;
874 if (index < NREADOPS && macreg_readops[index])
876 uint32_t val = macreg_readops[index](s, index);
877 #ifdef TARGET_WORDS_BIGENDIAN
878 val = bswap32(val);
879 #endif
880 return val;
882 DBGOUT(UNKNOWN, "MMIO unknown read addr=0x%08x\n", index<<2);
883 return 0;
886 static uint32_t
887 e1000_mmio_readb(void *opaque, target_phys_addr_t addr)
889 return ((e1000_mmio_readl(opaque, addr & ~3)) >>
890 (8 * (addr & 3))) & 0xff;
893 static uint32_t
894 e1000_mmio_readw(void *opaque, target_phys_addr_t addr)
896 return ((e1000_mmio_readl(opaque, addr & ~3)) >>
897 (8 * (addr & 3))) & 0xffff;
900 static bool is_version_1(void *opaque, int version_id)
902 return version_id == 1;
905 static const VMStateDescription vmstate_e1000 = {
906 .name = "e1000",
907 .version_id = 2,
908 .minimum_version_id = 1,
909 .minimum_version_id_old = 1,
910 .fields = (VMStateField []) {
911 VMSTATE_PCI_DEVICE(dev, E1000State),
912 VMSTATE_UNUSED_TEST(is_version_1, 4), /* was instance id */
913 VMSTATE_UNUSED(4), /* Was mmio_base. */
914 VMSTATE_UINT32(rxbuf_size, E1000State),
915 VMSTATE_UINT32(rxbuf_min_shift, E1000State),
916 VMSTATE_UINT32(eecd_state.val_in, E1000State),
917 VMSTATE_UINT16(eecd_state.bitnum_in, E1000State),
918 VMSTATE_UINT16(eecd_state.bitnum_out, E1000State),
919 VMSTATE_UINT16(eecd_state.reading, E1000State),
920 VMSTATE_UINT32(eecd_state.old_eecd, E1000State),
921 VMSTATE_UINT8(tx.ipcss, E1000State),
922 VMSTATE_UINT8(tx.ipcso, E1000State),
923 VMSTATE_UINT16(tx.ipcse, E1000State),
924 VMSTATE_UINT8(tx.tucss, E1000State),
925 VMSTATE_UINT8(tx.tucso, E1000State),
926 VMSTATE_UINT16(tx.tucse, E1000State),
927 VMSTATE_UINT32(tx.paylen, E1000State),
928 VMSTATE_UINT8(tx.hdr_len, E1000State),
929 VMSTATE_UINT16(tx.mss, E1000State),
930 VMSTATE_UINT16(tx.size, E1000State),
931 VMSTATE_UINT16(tx.tso_frames, E1000State),
932 VMSTATE_UINT8(tx.sum_needed, E1000State),
933 VMSTATE_INT8(tx.ip, E1000State),
934 VMSTATE_INT8(tx.tcp, E1000State),
935 VMSTATE_BUFFER(tx.header, E1000State),
936 VMSTATE_BUFFER(tx.data, E1000State),
937 VMSTATE_UINT16_ARRAY(eeprom_data, E1000State, 64),
938 VMSTATE_UINT16_ARRAY(phy_reg, E1000State, 0x20),
939 VMSTATE_UINT32(mac_reg[CTRL], E1000State),
940 VMSTATE_UINT32(mac_reg[EECD], E1000State),
941 VMSTATE_UINT32(mac_reg[EERD], E1000State),
942 VMSTATE_UINT32(mac_reg[GPRC], E1000State),
943 VMSTATE_UINT32(mac_reg[GPTC], E1000State),
944 VMSTATE_UINT32(mac_reg[ICR], E1000State),
945 VMSTATE_UINT32(mac_reg[ICS], E1000State),
946 VMSTATE_UINT32(mac_reg[IMC], E1000State),
947 VMSTATE_UINT32(mac_reg[IMS], E1000State),
948 VMSTATE_UINT32(mac_reg[LEDCTL], E1000State),
949 VMSTATE_UINT32(mac_reg[MANC], E1000State),
950 VMSTATE_UINT32(mac_reg[MDIC], E1000State),
951 VMSTATE_UINT32(mac_reg[MPC], E1000State),
952 VMSTATE_UINT32(mac_reg[PBA], E1000State),
953 VMSTATE_UINT32(mac_reg[RCTL], E1000State),
954 VMSTATE_UINT32(mac_reg[RDBAH], E1000State),
955 VMSTATE_UINT32(mac_reg[RDBAL], E1000State),
956 VMSTATE_UINT32(mac_reg[RDH], E1000State),
957 VMSTATE_UINT32(mac_reg[RDLEN], E1000State),
958 VMSTATE_UINT32(mac_reg[RDT], E1000State),
959 VMSTATE_UINT32(mac_reg[STATUS], E1000State),
960 VMSTATE_UINT32(mac_reg[SWSM], E1000State),
961 VMSTATE_UINT32(mac_reg[TCTL], E1000State),
962 VMSTATE_UINT32(mac_reg[TDBAH], E1000State),
963 VMSTATE_UINT32(mac_reg[TDBAL], E1000State),
964 VMSTATE_UINT32(mac_reg[TDH], E1000State),
965 VMSTATE_UINT32(mac_reg[TDLEN], E1000State),
966 VMSTATE_UINT32(mac_reg[TDT], E1000State),
967 VMSTATE_UINT32(mac_reg[TORH], E1000State),
968 VMSTATE_UINT32(mac_reg[TORL], E1000State),
969 VMSTATE_UINT32(mac_reg[TOTH], E1000State),
970 VMSTATE_UINT32(mac_reg[TOTL], E1000State),
971 VMSTATE_UINT32(mac_reg[TPR], E1000State),
972 VMSTATE_UINT32(mac_reg[TPT], E1000State),
973 VMSTATE_UINT32(mac_reg[TXDCTL], E1000State),
974 VMSTATE_UINT32(mac_reg[WUFC], E1000State),
975 VMSTATE_UINT32(mac_reg[VET], E1000State),
976 VMSTATE_UINT32_SUB_ARRAY(mac_reg, E1000State, RA, 32),
977 VMSTATE_UINT32_SUB_ARRAY(mac_reg, E1000State, MTA, 128),
978 VMSTATE_UINT32_SUB_ARRAY(mac_reg, E1000State, VFTA, 128),
979 VMSTATE_END_OF_LIST()
983 static const uint16_t e1000_eeprom_template[64] = {
984 0x0000, 0x0000, 0x0000, 0x0000, 0xffff, 0x0000, 0x0000, 0x0000,
985 0x3000, 0x1000, 0x6403, E1000_DEVID, 0x8086, E1000_DEVID, 0x8086, 0x3040,
986 0x0008, 0x2000, 0x7e14, 0x0048, 0x1000, 0x00d8, 0x0000, 0x2700,
987 0x6cc9, 0x3150, 0x0722, 0x040b, 0x0984, 0x0000, 0xc000, 0x0706,
988 0x1008, 0x0000, 0x0f04, 0x7fff, 0x4d01, 0xffff, 0xffff, 0xffff,
989 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff,
990 0x0100, 0x4000, 0x121c, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff,
991 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0xffff, 0x0000,
994 static const uint16_t phy_reg_init[] = {
995 [PHY_CTRL] = 0x1140, [PHY_STATUS] = 0x796d, // link initially up
996 [PHY_ID1] = 0x141, [PHY_ID2] = PHY_ID2_INIT,
997 [PHY_1000T_CTRL] = 0x0e00, [M88E1000_PHY_SPEC_CTRL] = 0x360,
998 [M88E1000_EXT_PHY_SPEC_CTRL] = 0x0d60, [PHY_AUTONEG_ADV] = 0xde1,
999 [PHY_LP_ABILITY] = 0x1e0, [PHY_1000T_STATUS] = 0x3c00,
1000 [M88E1000_PHY_SPEC_STATUS] = 0xac00,
1003 static const uint32_t mac_reg_init[] = {
1004 [PBA] = 0x00100030,
1005 [LEDCTL] = 0x602,
1006 [CTRL] = E1000_CTRL_SWDPIN2 | E1000_CTRL_SWDPIN0 |
1007 E1000_CTRL_SPD_1000 | E1000_CTRL_SLU,
1008 [STATUS] = 0x80000000 | E1000_STATUS_GIO_MASTER_ENABLE |
1009 E1000_STATUS_ASDV | E1000_STATUS_MTXCKOK |
1010 E1000_STATUS_SPEED_1000 | E1000_STATUS_FD |
1011 E1000_STATUS_LU,
1012 [MANC] = E1000_MANC_EN_MNG2HOST | E1000_MANC_RCV_TCO_EN |
1013 E1000_MANC_ARP_EN | E1000_MANC_0298_EN |
1014 E1000_MANC_RMCP_EN,
1017 /* PCI interface */
1019 static CPUWriteMemoryFunc * const e1000_mmio_write[] = {
1020 e1000_mmio_writeb, e1000_mmio_writew, e1000_mmio_writel
1023 static CPUReadMemoryFunc * const e1000_mmio_read[] = {
1024 e1000_mmio_readb, e1000_mmio_readw, e1000_mmio_readl
1027 static void
1028 e1000_mmio_map(PCIDevice *pci_dev, int region_num,
1029 pcibus_t addr, pcibus_t size, int type)
1031 E1000State *d = DO_UPCAST(E1000State, dev, pci_dev);
1032 int i;
1033 const uint32_t excluded_regs[] = {
1034 E1000_MDIC, E1000_ICR, E1000_ICS, E1000_IMS,
1035 E1000_IMC, E1000_TCTL, E1000_TDT, PNPMMIO_SIZE
1039 DBGOUT(MMIO, "e1000_mmio_map addr=0x%08"FMT_PCIBUS" 0x%08"FMT_PCIBUS"\n",
1040 addr, size);
1042 cpu_register_physical_memory(addr, PNPMMIO_SIZE, d->mmio_index);
1043 qemu_register_coalesced_mmio(addr, excluded_regs[0]);
1045 for (i = 0; excluded_regs[i] != PNPMMIO_SIZE; i++)
1046 qemu_register_coalesced_mmio(addr + excluded_regs[i] + 4,
1047 excluded_regs[i + 1] -
1048 excluded_regs[i] - 4);
1051 static void
1052 e1000_cleanup(VLANClientState *nc)
1054 E1000State *s = DO_UPCAST(NICState, nc, nc)->opaque;
1056 s->nic = NULL;
1059 static int
1060 pci_e1000_uninit(PCIDevice *dev)
1062 E1000State *d = DO_UPCAST(E1000State, dev, dev);
1064 cpu_unregister_io_memory(d->mmio_index);
1065 qemu_del_vlan_client(&d->nic->nc);
1066 return 0;
1069 static void e1000_reset(void *opaque)
1071 E1000State *d = opaque;
1073 memset(d->phy_reg, 0, sizeof d->phy_reg);
1074 memmove(d->phy_reg, phy_reg_init, sizeof phy_reg_init);
1075 memset(d->mac_reg, 0, sizeof d->mac_reg);
1076 memmove(d->mac_reg, mac_reg_init, sizeof mac_reg_init);
1077 d->rxbuf_min_shift = 1;
1078 memset(&d->tx, 0, sizeof d->tx);
1081 static NetClientInfo net_e1000_info = {
1082 .type = NET_CLIENT_TYPE_NIC,
1083 .size = sizeof(NICState),
1084 .can_receive = e1000_can_receive,
1085 .receive = e1000_receive,
1086 .cleanup = e1000_cleanup,
1087 .link_status_changed = e1000_set_link_status,
1090 static int pci_e1000_init(PCIDevice *pci_dev)
1092 E1000State *d = DO_UPCAST(E1000State, dev, pci_dev);
1093 uint8_t *pci_conf;
1094 uint16_t checksum = 0;
1095 int i;
1096 uint8_t *macaddr;
1098 pci_conf = d->dev.config;
1100 pci_config_set_vendor_id(pci_conf, PCI_VENDOR_ID_INTEL);
1101 pci_config_set_device_id(pci_conf, E1000_DEVID);
1102 /* TODO: we have no capabilities, so why is this bit set? */
1103 pci_set_word(pci_conf + PCI_STATUS, PCI_STATUS_CAP_LIST);
1104 pci_conf[PCI_REVISION_ID] = 0x03;
1105 pci_config_set_class(pci_conf, PCI_CLASS_NETWORK_ETHERNET);
1106 /* TODO: RST# value should be 0, PCI spec 6.2.4 */
1107 pci_conf[PCI_CACHE_LINE_SIZE] = 0x10;
1109 /* TODO: RST# value should be 0 if programmable, PCI spec 6.2.4 */
1110 pci_conf[PCI_INTERRUPT_PIN] = 1; // interrupt pin 0
1112 d->mmio_index = cpu_register_io_memory(e1000_mmio_read,
1113 e1000_mmio_write, d);
1115 pci_register_bar((PCIDevice *)d, 0, PNPMMIO_SIZE,
1116 PCI_BASE_ADDRESS_SPACE_MEMORY, e1000_mmio_map);
1118 pci_register_bar((PCIDevice *)d, 1, IOPORT_SIZE,
1119 PCI_BASE_ADDRESS_SPACE_IO, ioport_map);
1121 memmove(d->eeprom_data, e1000_eeprom_template,
1122 sizeof e1000_eeprom_template);
1123 qemu_macaddr_default_if_unset(&d->conf.macaddr);
1124 macaddr = d->conf.macaddr.a;
1125 for (i = 0; i < 3; i++)
1126 d->eeprom_data[i] = (macaddr[2*i+1]<<8) | macaddr[2*i];
1127 for (i = 0; i < EEPROM_CHECKSUM_REG; i++)
1128 checksum += d->eeprom_data[i];
1129 checksum = (uint16_t) EEPROM_SUM - checksum;
1130 d->eeprom_data[EEPROM_CHECKSUM_REG] = checksum;
1132 d->nic = qemu_new_nic(&net_e1000_info, &d->conf,
1133 d->dev.qdev.info->name, d->dev.qdev.id, d);
1135 qemu_format_nic_info_str(&d->nic->nc, macaddr);
1136 return 0;
1139 static void qdev_e1000_reset(DeviceState *dev)
1141 E1000State *d = DO_UPCAST(E1000State, dev.qdev, dev);
1142 e1000_reset(d);
1145 static PCIDeviceInfo e1000_info = {
1146 .qdev.name = "e1000",
1147 .qdev.desc = "Intel Gigabit Ethernet",
1148 .qdev.size = sizeof(E1000State),
1149 .qdev.reset = qdev_e1000_reset,
1150 .qdev.vmsd = &vmstate_e1000,
1151 .init = pci_e1000_init,
1152 .exit = pci_e1000_uninit,
1153 .romfile = "pxe-e1000.bin",
1154 .qdev.props = (Property[]) {
1155 DEFINE_NIC_PROPERTIES(E1000State, conf),
1156 DEFINE_PROP_END_OF_LIST(),
1160 static void e1000_register_devices(void)
1162 pci_qdev_register(&e1000_info);
1165 device_init(e1000_register_devices)