qemu/hw/net/opencores_eth.c
<<
>>
Prefs
   1/*
   2 * OpenCores Ethernet MAC 10/100 + subset of
   3 * National Semiconductors DP83848C 10/100 PHY
   4 *
   5 * http://opencores.org/svnget,ethmac?file=%2Ftrunk%2F%2Fdoc%2Feth_speci.pdf
   6 * http://cache.national.com/ds/DP/DP83848C.pdf
   7 *
   8 * Copyright (c) 2011, Max Filippov, Open Source and Linux Lab.
   9 * All rights reserved.
  10 *
  11 * Redistribution and use in source and binary forms, with or without
  12 * modification, are permitted provided that the following conditions are met:
  13 *     * Redistributions of source code must retain the above copyright
  14 *       notice, this list of conditions and the following disclaimer.
  15 *     * Redistributions in binary form must reproduce the above copyright
  16 *       notice, this list of conditions and the following disclaimer in the
  17 *       documentation and/or other materials provided with the distribution.
  18 *     * Neither the name of the Open Source and Linux Lab nor the
  19 *       names of its contributors may be used to endorse or promote products
  20 *       derived from this software without specific prior written permission.
  21 *
  22 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
  23 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  24 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  25 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
  26 * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
  27 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  28 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
  29 * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  30 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
  31 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  32 */
  33
  34#include "qemu/osdep.h"
  35#include "hw/hw.h"
  36#include "hw/net/mii.h"
  37#include "hw/sysbus.h"
  38#include "net/net.h"
  39#include "net/eth.h"
  40#include "sysemu/sysemu.h"
  41#include "trace.h"
  42
  43/* RECSMALL is not used because it breaks tap networking in linux:
  44 * incoming ARP responses are too short
  45 */
  46#undef USE_RECSMALL
  47
  48#define GET_FIELD(v, field) (((v) & (field)) >> (field ## _LBN))
  49#define GET_REGBIT(s, reg, field) ((s)->regs[reg] & (reg ## _ ## field))
  50#define GET_REGFIELD(s, reg, field) \
  51    GET_FIELD((s)->regs[reg], reg ## _ ## field)
  52
  53#define SET_FIELD(v, field, data) \
  54    ((v) = (((v) & ~(field)) | (((data) << (field ## _LBN)) & (field))))
  55#define SET_REGFIELD(s, reg, field, data) \
  56    SET_FIELD((s)->regs[reg], reg ## _ ## field, data)
  57
  58/* PHY MII registers */
  59enum {
  60    MII_REG_MAX = 16,
  61};
  62
  63typedef struct Mii {
  64    uint16_t regs[MII_REG_MAX];
  65    bool link_ok;
  66} Mii;
  67
  68static void mii_set_link(Mii *s, bool link_ok)
  69{
  70    if (link_ok) {
  71        s->regs[MII_BMSR] |= MII_BMSR_LINK_ST;
  72        s->regs[MII_ANLPAR] |= MII_ANLPAR_TXFD | MII_ANLPAR_TX |
  73            MII_ANLPAR_10FD | MII_ANLPAR_10 | MII_ANLPAR_CSMACD;
  74    } else {
  75        s->regs[MII_BMSR] &= ~MII_BMSR_LINK_ST;
  76        s->regs[MII_ANLPAR] &= 0x01ff;
  77    }
  78    s->link_ok = link_ok;
  79}
  80
  81static void mii_reset(Mii *s)
  82{
  83    memset(s->regs, 0, sizeof(s->regs));
  84    s->regs[MII_BMCR] = MII_BMCR_AUTOEN;
  85    s->regs[MII_BMSR] = MII_BMSR_100TX_FD | MII_BMSR_100TX_HD |
  86        MII_BMSR_10T_FD | MII_BMSR_10T_HD | MII_BMSR_MFPS |
  87        MII_BMSR_AN_COMP | MII_BMSR_AUTONEG;
  88    s->regs[MII_PHYID1] = 0x2000;
  89    s->regs[MII_PHYID2] = 0x5c90;
  90    s->regs[MII_ANAR] = MII_ANAR_TXFD | MII_ANAR_TX |
  91        MII_ANAR_10FD | MII_ANAR_10 | MII_ANAR_CSMACD;
  92    mii_set_link(s, s->link_ok);
  93}
  94
  95static void mii_ro(Mii *s, uint16_t v)
  96{
  97}
  98
  99static void mii_write_bmcr(Mii *s, uint16_t v)
 100{
 101    if (v & MII_BMCR_RESET) {
 102        mii_reset(s);
 103    } else {
 104        s->regs[MII_BMCR] = v;
 105    }
 106}
 107
 108static void mii_write_host(Mii *s, unsigned idx, uint16_t v)
 109{
 110    static void (*reg_write[MII_REG_MAX])(Mii *s, uint16_t v) = {
 111        [MII_BMCR] = mii_write_bmcr,
 112        [MII_BMSR] = mii_ro,
 113        [MII_PHYID1] = mii_ro,
 114        [MII_PHYID2] = mii_ro,
 115    };
 116
 117    if (idx < MII_REG_MAX) {
 118        trace_open_eth_mii_write(idx, v);
 119        if (reg_write[idx]) {
 120            reg_write[idx](s, v);
 121        } else {
 122            s->regs[idx] = v;
 123        }
 124    }
 125}
 126
 127static uint16_t mii_read_host(Mii *s, unsigned idx)
 128{
 129    trace_open_eth_mii_read(idx, s->regs[idx]);
 130    return s->regs[idx];
 131}
 132
 133/* OpenCores Ethernet registers */
 134enum {
 135    MODER,
 136    INT_SOURCE,
 137    INT_MASK,
 138    IPGT,
 139    IPGR1,
 140    IPGR2,
 141    PACKETLEN,
 142    COLLCONF,
 143    TX_BD_NUM,
 144    CTRLMODER,
 145    MIIMODER,
 146    MIICOMMAND,
 147    MIIADDRESS,
 148    MIITX_DATA,
 149    MIIRX_DATA,
 150    MIISTATUS,
 151    MAC_ADDR0,
 152    MAC_ADDR1,
 153    HASH0,
 154    HASH1,
 155    TXCTRL,
 156    REG_MAX,
 157};
 158
 159enum {
 160    MODER_RECSMALL = 0x10000,
 161    MODER_PAD = 0x8000,
 162    MODER_HUGEN = 0x4000,
 163    MODER_RST = 0x800,
 164    MODER_LOOPBCK = 0x80,
 165    MODER_PRO = 0x20,
 166    MODER_IAM = 0x10,
 167    MODER_BRO = 0x8,
 168    MODER_TXEN = 0x2,
 169    MODER_RXEN = 0x1,
 170};
 171
 172enum {
 173    INT_SOURCE_BUSY = 0x10,
 174    INT_SOURCE_RXB = 0x4,
 175    INT_SOURCE_TXB = 0x1,
 176};
 177
 178enum {
 179    PACKETLEN_MINFL = 0xffff0000,
 180    PACKETLEN_MINFL_LBN = 16,
 181    PACKETLEN_MAXFL = 0xffff,
 182    PACKETLEN_MAXFL_LBN = 0,
 183};
 184
 185enum {
 186    MIICOMMAND_WCTRLDATA = 0x4,
 187    MIICOMMAND_RSTAT = 0x2,
 188    MIICOMMAND_SCANSTAT = 0x1,
 189};
 190
 191enum {
 192    MIIADDRESS_RGAD = 0x1f00,
 193    MIIADDRESS_RGAD_LBN = 8,
 194    MIIADDRESS_FIAD = 0x1f,
 195    MIIADDRESS_FIAD_LBN = 0,
 196};
 197
 198enum {
 199    MIITX_DATA_CTRLDATA = 0xffff,
 200    MIITX_DATA_CTRLDATA_LBN = 0,
 201};
 202
 203enum {
 204    MIIRX_DATA_PRSD = 0xffff,
 205    MIIRX_DATA_PRSD_LBN = 0,
 206};
 207
 208enum {
 209    MIISTATUS_LINKFAIL = 0x1,
 210    MIISTATUS_LINKFAIL_LBN = 0,
 211};
 212
 213enum {
 214    MAC_ADDR0_BYTE2 = 0xff000000,
 215    MAC_ADDR0_BYTE2_LBN = 24,
 216    MAC_ADDR0_BYTE3 = 0xff0000,
 217    MAC_ADDR0_BYTE3_LBN = 16,
 218    MAC_ADDR0_BYTE4 = 0xff00,
 219    MAC_ADDR0_BYTE4_LBN = 8,
 220    MAC_ADDR0_BYTE5 = 0xff,
 221    MAC_ADDR0_BYTE5_LBN = 0,
 222};
 223
 224enum {
 225    MAC_ADDR1_BYTE0 = 0xff00,
 226    MAC_ADDR1_BYTE0_LBN = 8,
 227    MAC_ADDR1_BYTE1 = 0xff,
 228    MAC_ADDR1_BYTE1_LBN = 0,
 229};
 230
 231enum {
 232    TXD_LEN = 0xffff0000,
 233    TXD_LEN_LBN = 16,
 234    TXD_RD = 0x8000,
 235    TXD_IRQ = 0x4000,
 236    TXD_WR = 0x2000,
 237    TXD_PAD = 0x1000,
 238    TXD_CRC = 0x800,
 239    TXD_UR = 0x100,
 240    TXD_RTRY = 0xf0,
 241    TXD_RTRY_LBN = 4,
 242    TXD_RL = 0x8,
 243    TXD_LC = 0x4,
 244    TXD_DF = 0x2,
 245    TXD_CS = 0x1,
 246};
 247
 248enum {
 249    RXD_LEN = 0xffff0000,
 250    RXD_LEN_LBN = 16,
 251    RXD_E = 0x8000,
 252    RXD_IRQ = 0x4000,
 253    RXD_WRAP = 0x2000,
 254    RXD_CF = 0x100,
 255    RXD_M = 0x80,
 256    RXD_OR = 0x40,
 257    RXD_IS = 0x20,
 258    RXD_DN = 0x10,
 259    RXD_TL = 0x8,
 260    RXD_SF = 0x4,
 261    RXD_CRC = 0x2,
 262    RXD_LC = 0x1,
 263};
 264
 265typedef struct desc {
 266    uint32_t len_flags;
 267    uint32_t buf_ptr;
 268} desc;
 269
 270#define DEFAULT_PHY 1
 271
 272#define TYPE_OPEN_ETH "open_eth"
 273#define OPEN_ETH(obj) OBJECT_CHECK(OpenEthState, (obj), TYPE_OPEN_ETH)
 274
 275typedef struct OpenEthState {
 276    SysBusDevice parent_obj;
 277
 278    NICState *nic;
 279    NICConf conf;
 280    MemoryRegion reg_io;
 281    MemoryRegion desc_io;
 282    qemu_irq irq;
 283
 284    Mii mii;
 285    uint32_t regs[REG_MAX];
 286    unsigned tx_desc;
 287    unsigned rx_desc;
 288    desc desc[128];
 289} OpenEthState;
 290
 291static desc *rx_desc(OpenEthState *s)
 292{
 293    return s->desc + s->rx_desc;
 294}
 295
 296static desc *tx_desc(OpenEthState *s)
 297{
 298    return s->desc + s->tx_desc;
 299}
 300
 301static void open_eth_update_irq(OpenEthState *s,
 302        uint32_t old, uint32_t new)
 303{
 304    if (!old != !new) {
 305        trace_open_eth_update_irq(new);
 306        qemu_set_irq(s->irq, new);
 307    }
 308}
 309
 310static void open_eth_int_source_write(OpenEthState *s,
 311        uint32_t val)
 312{
 313    uint32_t old_val = s->regs[INT_SOURCE];
 314
 315    s->regs[INT_SOURCE] = val;
 316    open_eth_update_irq(s, old_val & s->regs[INT_MASK],
 317            s->regs[INT_SOURCE] & s->regs[INT_MASK]);
 318}
 319
 320static void open_eth_set_link_status(NetClientState *nc)
 321{
 322    OpenEthState *s = qemu_get_nic_opaque(nc);
 323
 324    if (GET_REGBIT(s, MIICOMMAND, SCANSTAT)) {
 325        SET_REGFIELD(s, MIISTATUS, LINKFAIL, nc->link_down);
 326    }
 327    mii_set_link(&s->mii, !nc->link_down);
 328}
 329
 330static void open_eth_reset(void *opaque)
 331{
 332    OpenEthState *s = opaque;
 333
 334    memset(s->regs, 0, sizeof(s->regs));
 335    s->regs[MODER] = 0xa000;
 336    s->regs[IPGT] = 0x12;
 337    s->regs[IPGR1] = 0xc;
 338    s->regs[IPGR2] = 0x12;
 339    s->regs[PACKETLEN] = 0x400600;
 340    s->regs[COLLCONF] = 0xf003f;
 341    s->regs[TX_BD_NUM] = 0x40;
 342    s->regs[MIIMODER] = 0x64;
 343
 344    s->tx_desc = 0;
 345    s->rx_desc = 0x40;
 346
 347    mii_reset(&s->mii);
 348    open_eth_set_link_status(qemu_get_queue(s->nic));
 349}
 350
 351static int open_eth_can_receive(NetClientState *nc)
 352{
 353    OpenEthState *s = qemu_get_nic_opaque(nc);
 354
 355    return GET_REGBIT(s, MODER, RXEN) &&
 356        (s->regs[TX_BD_NUM] < 0x80);
 357}
 358
 359static ssize_t open_eth_receive(NetClientState *nc,
 360        const uint8_t *buf, size_t size)
 361{
 362    OpenEthState *s = qemu_get_nic_opaque(nc);
 363    size_t maxfl = GET_REGFIELD(s, PACKETLEN, MAXFL);
 364    size_t minfl = GET_REGFIELD(s, PACKETLEN, MINFL);
 365    size_t fcsl = 4;
 366    bool miss = true;
 367
 368    trace_open_eth_receive((unsigned)size);
 369
 370    if (size >= 6) {
 371        static const uint8_t bcast_addr[] = {
 372            0xff, 0xff, 0xff, 0xff, 0xff, 0xff
 373        };
 374        if (memcmp(buf, bcast_addr, sizeof(bcast_addr)) == 0) {
 375            miss = GET_REGBIT(s, MODER, BRO);
 376        } else if ((buf[0] & 0x1) || GET_REGBIT(s, MODER, IAM)) {
 377            unsigned mcast_idx = net_crc32(buf, ETH_ALEN) >> 26;
 378            miss = !(s->regs[HASH0 + mcast_idx / 32] &
 379                    (1 << (mcast_idx % 32)));
 380            trace_open_eth_receive_mcast(
 381                    mcast_idx, s->regs[HASH0], s->regs[HASH1]);
 382        } else {
 383            miss = GET_REGFIELD(s, MAC_ADDR1, BYTE0) != buf[0] ||
 384                GET_REGFIELD(s, MAC_ADDR1, BYTE1) != buf[1] ||
 385                GET_REGFIELD(s, MAC_ADDR0, BYTE2) != buf[2] ||
 386                GET_REGFIELD(s, MAC_ADDR0, BYTE3) != buf[3] ||
 387                GET_REGFIELD(s, MAC_ADDR0, BYTE4) != buf[4] ||
 388                GET_REGFIELD(s, MAC_ADDR0, BYTE5) != buf[5];
 389        }
 390    }
 391
 392    if (miss && !GET_REGBIT(s, MODER, PRO)) {
 393        trace_open_eth_receive_reject();
 394        return size;
 395    }
 396
 397#ifdef USE_RECSMALL
 398    if (GET_REGBIT(s, MODER, RECSMALL) || size >= minfl) {
 399#else
 400    {
 401#endif
 402        static const uint8_t zero[64] = {0};
 403        desc *desc = rx_desc(s);
 404        size_t copy_size = GET_REGBIT(s, MODER, HUGEN) ? 65536 : maxfl;
 405
 406        if (!(desc->len_flags & RXD_E)) {
 407            open_eth_int_source_write(s,
 408                    s->regs[INT_SOURCE] | INT_SOURCE_BUSY);
 409            return size;
 410        }
 411
 412        desc->len_flags &= ~(RXD_CF | RXD_M | RXD_OR |
 413                RXD_IS | RXD_DN | RXD_TL | RXD_SF | RXD_CRC | RXD_LC);
 414
 415        if (copy_size > size) {
 416            copy_size = size;
 417        } else {
 418            fcsl = 0;
 419        }
 420        if (miss) {
 421            desc->len_flags |= RXD_M;
 422        }
 423        if (GET_REGBIT(s, MODER, HUGEN) && size > maxfl) {
 424            desc->len_flags |= RXD_TL;
 425        }
 426#ifdef USE_RECSMALL
 427        if (size < minfl) {
 428            desc->len_flags |= RXD_SF;
 429        }
 430#endif
 431
 432        cpu_physical_memory_write(desc->buf_ptr, buf, copy_size);
 433
 434        if (GET_REGBIT(s, MODER, PAD) && copy_size < minfl) {
 435            if (minfl - copy_size > fcsl) {
 436                fcsl = 0;
 437            } else {
 438                fcsl -= minfl - copy_size;
 439            }
 440            while (copy_size < minfl) {
 441                size_t zero_sz = minfl - copy_size < sizeof(zero) ?
 442                    minfl - copy_size : sizeof(zero);
 443
 444                cpu_physical_memory_write(desc->buf_ptr + copy_size,
 445                        zero, zero_sz);
 446                copy_size += zero_sz;
 447            }
 448        }
 449
 450        /* There's no FCS in the frames handed to us by the QEMU, zero fill it.
 451         * Don't do it if the frame is cut at the MAXFL or padded with 4 or
 452         * more bytes to the MINFL.
 453         */
 454        cpu_physical_memory_write(desc->buf_ptr + copy_size, zero, fcsl);
 455        copy_size += fcsl;
 456
 457        SET_FIELD(desc->len_flags, RXD_LEN, copy_size);
 458
 459        if ((desc->len_flags & RXD_WRAP) || s->rx_desc == 0x7f) {
 460            s->rx_desc = s->regs[TX_BD_NUM];
 461        } else {
 462            ++s->rx_desc;
 463        }
 464        desc->len_flags &= ~RXD_E;
 465
 466        trace_open_eth_receive_desc(desc->buf_ptr, desc->len_flags);
 467
 468        if (desc->len_flags & RXD_IRQ) {
 469            open_eth_int_source_write(s,
 470                    s->regs[INT_SOURCE] | INT_SOURCE_RXB);
 471        }
 472    }
 473    return size;
 474}
 475
 476static NetClientInfo net_open_eth_info = {
 477    .type = NET_CLIENT_DRIVER_NIC,
 478    .size = sizeof(NICState),
 479    .can_receive = open_eth_can_receive,
 480    .receive = open_eth_receive,
 481    .link_status_changed = open_eth_set_link_status,
 482};
 483
 484static void open_eth_start_xmit(OpenEthState *s, desc *tx)
 485{
 486    uint8_t *buf = NULL;
 487    uint8_t buffer[0x600];
 488    unsigned len = GET_FIELD(tx->len_flags, TXD_LEN);
 489    unsigned tx_len = len;
 490
 491    if ((tx->len_flags & TXD_PAD) &&
 492            tx_len < GET_REGFIELD(s, PACKETLEN, MINFL)) {
 493        tx_len = GET_REGFIELD(s, PACKETLEN, MINFL);
 494    }
 495    if (!GET_REGBIT(s, MODER, HUGEN) &&
 496            tx_len > GET_REGFIELD(s, PACKETLEN, MAXFL)) {
 497        tx_len = GET_REGFIELD(s, PACKETLEN, MAXFL);
 498    }
 499
 500    trace_open_eth_start_xmit(tx->buf_ptr, len, tx_len);
 501
 502    if (tx_len > sizeof(buffer)) {
 503        buf = g_new(uint8_t, tx_len);
 504    } else {
 505        buf = buffer;
 506    }
 507    if (len > tx_len) {
 508        len = tx_len;
 509    }
 510    cpu_physical_memory_read(tx->buf_ptr, buf, len);
 511    if (tx_len > len) {
 512        memset(buf + len, 0, tx_len - len);
 513    }
 514    qemu_send_packet(qemu_get_queue(s->nic), buf, tx_len);
 515    if (tx_len > sizeof(buffer)) {
 516        g_free(buf);
 517    }
 518
 519    if (tx->len_flags & TXD_WR) {
 520        s->tx_desc = 0;
 521    } else {
 522        ++s->tx_desc;
 523        if (s->tx_desc >= s->regs[TX_BD_NUM]) {
 524            s->tx_desc = 0;
 525        }
 526    }
 527    tx->len_flags &= ~(TXD_RD | TXD_UR |
 528            TXD_RTRY | TXD_RL | TXD_LC | TXD_DF | TXD_CS);
 529    if (tx->len_flags & TXD_IRQ) {
 530        open_eth_int_source_write(s, s->regs[INT_SOURCE] | INT_SOURCE_TXB);
 531    }
 532
 533}
 534
 535static void open_eth_check_start_xmit(OpenEthState *s)
 536{
 537    desc *tx = tx_desc(s);
 538    if (GET_REGBIT(s, MODER, TXEN) && s->regs[TX_BD_NUM] > 0 &&
 539            (tx->len_flags & TXD_RD) &&
 540            GET_FIELD(tx->len_flags, TXD_LEN) > 4) {
 541        open_eth_start_xmit(s, tx);
 542    }
 543}
 544
 545static uint64_t open_eth_reg_read(void *opaque,
 546        hwaddr addr, unsigned int size)
 547{
 548    static uint32_t (*reg_read[REG_MAX])(OpenEthState *s) = {
 549    };
 550    OpenEthState *s = opaque;
 551    unsigned idx = addr / 4;
 552    uint64_t v = 0;
 553
 554    if (idx < REG_MAX) {
 555        if (reg_read[idx]) {
 556            v = reg_read[idx](s);
 557        } else {
 558            v = s->regs[idx];
 559        }
 560    }
 561    trace_open_eth_reg_read((uint32_t)addr, (uint32_t)v);
 562    return v;
 563}
 564
 565static void open_eth_notify_can_receive(OpenEthState *s)
 566{
 567    NetClientState *nc = qemu_get_queue(s->nic);
 568
 569    if (open_eth_can_receive(nc)) {
 570        qemu_flush_queued_packets(nc);
 571    }
 572}
 573
 574static void open_eth_ro(OpenEthState *s, uint32_t val)
 575{
 576}
 577
 578static void open_eth_moder_host_write(OpenEthState *s, uint32_t val)
 579{
 580    uint32_t set = val & ~s->regs[MODER];
 581
 582    if (set & MODER_RST) {
 583        open_eth_reset(s);
 584    }
 585
 586    s->regs[MODER] = val;
 587
 588    if (set & MODER_RXEN) {
 589        s->rx_desc = s->regs[TX_BD_NUM];
 590        open_eth_notify_can_receive(s);
 591    }
 592    if (set & MODER_TXEN) {
 593        s->tx_desc = 0;
 594        open_eth_check_start_xmit(s);
 595    }
 596}
 597
 598static void open_eth_int_source_host_write(OpenEthState *s, uint32_t val)
 599{
 600    uint32_t old = s->regs[INT_SOURCE];
 601
 602    s->regs[INT_SOURCE] &= ~val;
 603    open_eth_update_irq(s, old & s->regs[INT_MASK],
 604            s->regs[INT_SOURCE] & s->regs[INT_MASK]);
 605}
 606
 607static void open_eth_int_mask_host_write(OpenEthState *s, uint32_t val)
 608{
 609    uint32_t old = s->regs[INT_MASK];
 610
 611    s->regs[INT_MASK] = val;
 612    open_eth_update_irq(s, s->regs[INT_SOURCE] & old,
 613            s->regs[INT_SOURCE] & s->regs[INT_MASK]);
 614}
 615
 616static void open_eth_tx_bd_num_host_write(OpenEthState *s, uint32_t val)
 617{
 618    if (val < 0x80) {
 619        bool enable = s->regs[TX_BD_NUM] == 0x80;
 620
 621        s->regs[TX_BD_NUM] = val;
 622        if (enable) {
 623            open_eth_notify_can_receive(s);
 624        }
 625    }
 626}
 627
 628static void open_eth_mii_command_host_write(OpenEthState *s, uint32_t val)
 629{
 630    unsigned fiad = GET_REGFIELD(s, MIIADDRESS, FIAD);
 631    unsigned rgad = GET_REGFIELD(s, MIIADDRESS, RGAD);
 632
 633    if (val & MIICOMMAND_WCTRLDATA) {
 634        if (fiad == DEFAULT_PHY) {
 635            mii_write_host(&s->mii, rgad,
 636                    GET_REGFIELD(s, MIITX_DATA, CTRLDATA));
 637        }
 638    }
 639    if (val & MIICOMMAND_RSTAT) {
 640        if (fiad == DEFAULT_PHY) {
 641            SET_REGFIELD(s, MIIRX_DATA, PRSD,
 642                    mii_read_host(&s->mii, rgad));
 643        } else {
 644            s->regs[MIIRX_DATA] = 0xffff;
 645        }
 646        SET_REGFIELD(s, MIISTATUS, LINKFAIL, qemu_get_queue(s->nic)->link_down);
 647    }
 648}
 649
 650static void open_eth_mii_tx_host_write(OpenEthState *s, uint32_t val)
 651{
 652    SET_REGFIELD(s, MIITX_DATA, CTRLDATA, val);
 653    if (GET_REGFIELD(s, MIIADDRESS, FIAD) == DEFAULT_PHY) {
 654        mii_write_host(&s->mii, GET_REGFIELD(s, MIIADDRESS, RGAD),
 655                GET_REGFIELD(s, MIITX_DATA, CTRLDATA));
 656    }
 657}
 658
 659static void open_eth_reg_write(void *opaque,
 660        hwaddr addr, uint64_t val, unsigned int size)
 661{
 662    static void (*reg_write[REG_MAX])(OpenEthState *s, uint32_t val) = {
 663        [MODER] = open_eth_moder_host_write,
 664        [INT_SOURCE] = open_eth_int_source_host_write,
 665        [INT_MASK] = open_eth_int_mask_host_write,
 666        [TX_BD_NUM] = open_eth_tx_bd_num_host_write,
 667        [MIICOMMAND] = open_eth_mii_command_host_write,
 668        [MIITX_DATA] = open_eth_mii_tx_host_write,
 669        [MIISTATUS] = open_eth_ro,
 670    };
 671    OpenEthState *s = opaque;
 672    unsigned idx = addr / 4;
 673
 674    if (idx < REG_MAX) {
 675        trace_open_eth_reg_write((uint32_t)addr, (uint32_t)val);
 676        if (reg_write[idx]) {
 677            reg_write[idx](s, val);
 678        } else {
 679            s->regs[idx] = val;
 680        }
 681    }
 682}
 683
 684static uint64_t open_eth_desc_read(void *opaque,
 685        hwaddr addr, unsigned int size)
 686{
 687    OpenEthState *s = opaque;
 688    uint64_t v = 0;
 689
 690    addr &= 0x3ff;
 691    memcpy(&v, (uint8_t *)s->desc + addr, size);
 692    trace_open_eth_desc_read((uint32_t)addr, (uint32_t)v);
 693    return v;
 694}
 695
 696static void open_eth_desc_write(void *opaque,
 697        hwaddr addr, uint64_t val, unsigned int size)
 698{
 699    OpenEthState *s = opaque;
 700
 701    addr &= 0x3ff;
 702    trace_open_eth_desc_write((uint32_t)addr, (uint32_t)val);
 703    memcpy((uint8_t *)s->desc + addr, &val, size);
 704    open_eth_check_start_xmit(s);
 705}
 706
 707
 708static const MemoryRegionOps open_eth_reg_ops = {
 709    .read = open_eth_reg_read,
 710    .write = open_eth_reg_write,
 711};
 712
 713static const MemoryRegionOps open_eth_desc_ops = {
 714    .read = open_eth_desc_read,
 715    .write = open_eth_desc_write,
 716};
 717
 718static void sysbus_open_eth_realize(DeviceState *dev, Error **errp)
 719{
 720    SysBusDevice *sbd = SYS_BUS_DEVICE(dev);
 721    OpenEthState *s = OPEN_ETH(dev);
 722
 723    memory_region_init_io(&s->reg_io, OBJECT(dev), &open_eth_reg_ops, s,
 724            "open_eth.regs", 0x54);
 725    sysbus_init_mmio(sbd, &s->reg_io);
 726
 727    memory_region_init_io(&s->desc_io, OBJECT(dev), &open_eth_desc_ops, s,
 728            "open_eth.desc", 0x400);
 729    sysbus_init_mmio(sbd, &s->desc_io);
 730
 731    sysbus_init_irq(sbd, &s->irq);
 732
 733    s->nic = qemu_new_nic(&net_open_eth_info, &s->conf,
 734                          object_get_typename(OBJECT(s)), dev->id, s);
 735}
 736
 737static void qdev_open_eth_reset(DeviceState *dev)
 738{
 739    OpenEthState *d = OPEN_ETH(dev);
 740
 741    open_eth_reset(d);
 742}
 743
 744static Property open_eth_properties[] = {
 745    DEFINE_NIC_PROPERTIES(OpenEthState, conf),
 746    DEFINE_PROP_END_OF_LIST(),
 747};
 748
 749static void open_eth_class_init(ObjectClass *klass, void *data)
 750{
 751    DeviceClass *dc = DEVICE_CLASS(klass);
 752
 753    dc->realize = sysbus_open_eth_realize;
 754    set_bit(DEVICE_CATEGORY_NETWORK, dc->categories);
 755    dc->desc = "Opencores 10/100 Mbit Ethernet";
 756    dc->reset = qdev_open_eth_reset;
 757    dc->props = open_eth_properties;
 758}
 759
 760static const TypeInfo open_eth_info = {
 761    .name          = TYPE_OPEN_ETH,
 762    .parent        = TYPE_SYS_BUS_DEVICE,
 763    .instance_size = sizeof(OpenEthState),
 764    .class_init    = open_eth_class_init,
 765};
 766
 767static void open_eth_register_types(void)
 768{
 769    type_register_static(&open_eth_info);
 770}
 771
 772type_init(open_eth_register_types)
 773