1
2
3
4
5
6
7
8
9
10
11
12
13
14#include "qemu/osdep.h"
15#include "qemu/main-loop.h"
16#include "qemu/module.h"
17#include "qemu/guest-random.h"
18#include "hw/irq.h"
19#include "hw/misc/imx_rngc.h"
20#include "migration/vmstate.h"
21
22#define RNGC_NAME "i.MX RNGC"
23
24#define RNGC_VER_ID 0x00
25#define RNGC_COMMAND 0x04
26#define RNGC_CONTROL 0x08
27#define RNGC_STATUS 0x0C
28#define RNGC_FIFO 0x14
29
30
31#define RNG_TYPE_RNGB 0x1
32#define V_MAJ 0x2
33#define V_MIN 0x40
34
35#define RNGC_CMD_BIT_SW_RST 0x40
36#define RNGC_CMD_BIT_CLR_ERR 0x20
37#define RNGC_CMD_BIT_CLR_INT 0x10
38#define RNGC_CMD_BIT_SEED 0x02
39#define RNGC_CMD_BIT_SELF_TEST 0x01
40
41#define RNGC_CTRL_BIT_MASK_ERR 0x40
42#define RNGC_CTRL_BIT_MASK_DONE 0x20
43#define RNGC_CTRL_BIT_AUTO_SEED 0x10
44
45
46#define OP_IDLE 0
47#define OP_RUN 1
48#define OP_DONE 2
49
50static uint64_t imx_rngc_read(void *opaque, hwaddr offset, unsigned size)
51{
52 IMXRNGCState *s = IMX_RNGC(opaque);
53 uint64_t val = 0;
54
55 switch (offset) {
56 case RNGC_VER_ID:
57 val |= RNG_TYPE_RNGB << 28 | V_MAJ << 8 | V_MIN;
58 break;
59
60 case RNGC_COMMAND:
61 if (s->op_seed == OP_RUN) {
62 val |= RNGC_CMD_BIT_SEED;
63 }
64 if (s->op_self_test == OP_RUN) {
65 val |= RNGC_CMD_BIT_SELF_TEST;
66 }
67 break;
68
69 case RNGC_CONTROL:
70
71
72
73
74 val |= s->mask;
75 if (s->auto_seed) {
76 val |= RNGC_CTRL_BIT_AUTO_SEED;
77 }
78
79
80
81
82
83 break;
84
85 case RNGC_STATUS:
86
87
88
89
90
91
92
93
94
95
96 val |= 5 << 12 | 5 << 8;
97
98
99 val |= 1 << 6;
100
101 if (s->op_seed == OP_DONE) {
102 val |= 1 << 5;
103 }
104 if (s->op_self_test == OP_DONE) {
105 val |= 1 << 4;
106 }
107 if (s->op_seed == OP_RUN || s->op_self_test == OP_RUN) {
108
109
110
111
112 val |= 1 << 1;
113 } else {
114
115
116
117
118 val |= 1;
119 }
120 break;
121
122 case RNGC_FIFO:
123 qemu_guest_getrandom_nofail(&val, sizeof(val));
124 break;
125 }
126
127 return val;
128}
129
130static void imx_rngc_do_reset(IMXRNGCState *s)
131{
132 s->op_self_test = OP_IDLE;
133 s->op_seed = OP_IDLE;
134 s->mask = 0;
135 s->auto_seed = false;
136}
137
138static void imx_rngc_write(void *opaque, hwaddr offset, uint64_t value,
139 unsigned size)
140{
141 IMXRNGCState *s = IMX_RNGC(opaque);
142
143 switch (offset) {
144 case RNGC_COMMAND:
145 if (value & RNGC_CMD_BIT_SW_RST) {
146 imx_rngc_do_reset(s);
147 }
148
149
150
151
152
153 if (value & (RNGC_CMD_BIT_CLR_ERR | RNGC_CMD_BIT_CLR_INT)) {
154 qemu_irq_lower(s->irq);
155 }
156
157 if (value & RNGC_CMD_BIT_SEED) {
158 s->op_seed = OP_RUN;
159 qemu_bh_schedule(s->seed_bh);
160 }
161
162 if (value & RNGC_CMD_BIT_SELF_TEST) {
163 s->op_self_test = OP_RUN;
164 qemu_bh_schedule(s->self_test_bh);
165 }
166 break;
167
168 case RNGC_CONTROL:
169
170
171
172
173
174 if (value & RNGC_CTRL_BIT_MASK_ERR) {
175 s->mask |= RNGC_CTRL_BIT_MASK_ERR;
176 } else {
177 s->mask &= ~RNGC_CTRL_BIT_MASK_ERR;
178 }
179
180 if (value & RNGC_CTRL_BIT_MASK_DONE) {
181 s->mask |= RNGC_CTRL_BIT_MASK_DONE;
182 } else {
183 s->mask &= ~RNGC_CTRL_BIT_MASK_DONE;
184 }
185
186 if (value & RNGC_CTRL_BIT_AUTO_SEED) {
187 s->auto_seed = true;
188 } else {
189 s->auto_seed = false;
190 }
191 break;
192 }
193}
194
195static const MemoryRegionOps imx_rngc_ops = {
196 .read = imx_rngc_read,
197 .write = imx_rngc_write,
198 .endianness = DEVICE_NATIVE_ENDIAN,
199};
200
201static void imx_rngc_self_test(void *opaque)
202{
203 IMXRNGCState *s = IMX_RNGC(opaque);
204
205 s->op_self_test = OP_DONE;
206 if (!(s->mask & RNGC_CTRL_BIT_MASK_DONE)) {
207 qemu_irq_raise(s->irq);
208 }
209}
210
211static void imx_rngc_seed(void *opaque)
212{
213 IMXRNGCState *s = IMX_RNGC(opaque);
214
215 s->op_seed = OP_DONE;
216 if (!(s->mask & RNGC_CTRL_BIT_MASK_DONE)) {
217 qemu_irq_raise(s->irq);
218 }
219}
220
221static void imx_rngc_realize(DeviceState *dev, Error **errp)
222{
223 IMXRNGCState *s = IMX_RNGC(dev);
224 SysBusDevice *sbd = SYS_BUS_DEVICE(dev);
225
226 memory_region_init_io(&s->iomem, OBJECT(s), &imx_rngc_ops, s,
227 TYPE_IMX_RNGC, 0x1000);
228 sysbus_init_mmio(sbd, &s->iomem);
229
230 sysbus_init_irq(sbd, &s->irq);
231 s->self_test_bh = qemu_bh_new(imx_rngc_self_test, s);
232 s->seed_bh = qemu_bh_new(imx_rngc_seed, s);
233}
234
235static void imx_rngc_reset(DeviceState *dev)
236{
237 IMXRNGCState *s = IMX_RNGC(dev);
238
239 imx_rngc_do_reset(s);
240}
241
242static const VMStateDescription vmstate_imx_rngc = {
243 .name = RNGC_NAME,
244 .version_id = 1,
245 .minimum_version_id = 1,
246 .fields = (VMStateField[]) {
247 VMSTATE_UINT8(op_self_test, IMXRNGCState),
248 VMSTATE_UINT8(op_seed, IMXRNGCState),
249 VMSTATE_UINT8(mask, IMXRNGCState),
250 VMSTATE_BOOL(auto_seed, IMXRNGCState),
251 VMSTATE_END_OF_LIST()
252 }
253};
254
255static void imx_rngc_class_init(ObjectClass *klass, void *data)
256{
257 DeviceClass *dc = DEVICE_CLASS(klass);
258
259 dc->realize = imx_rngc_realize;
260 dc->reset = imx_rngc_reset;
261 dc->desc = RNGC_NAME,
262 dc->vmsd = &vmstate_imx_rngc;
263}
264
265static const TypeInfo imx_rngc_info = {
266 .name = TYPE_IMX_RNGC,
267 .parent = TYPE_SYS_BUS_DEVICE,
268 .instance_size = sizeof(IMXRNGCState),
269 .class_init = imx_rngc_class_init,
270};
271
272static void imx_rngc_register_types(void)
273{
274 type_register_static(&imx_rngc_info);
275}
276
277type_init(imx_rngc_register_types)
278