1/* SPDX-License-Identifier: GPL-2.0-only */
2.psize 0
3/*
4  wanXL serial card driver for Linux
5  card firmware part
6
7  Copyright (C) 2003 Krzysztof Halasa <khc@pm.waw.pl>
8
9
10
11
12
13	DPRAM BDs:
14	0x000 - 0x050 TX#0	0x050 - 0x140 RX#0
15	0x140 - 0x190 TX#1	0x190 - 0x280 RX#1
16	0x280 - 0x2D0 TX#2	0x2D0 - 0x3C0 RX#2
17	0x3C0 - 0x410 TX#3	0x410 - 0x500 RX#3
18
19
20	000 5FF 1536 Bytes Dual-Port RAM User Data / BDs
21	600 6FF 256 Bytes Dual-Port RAM User Data / BDs
22	700 7FF 256 Bytes Dual-Port RAM User Data / BDs
23	C00 CBF 192 Bytes Dual-Port RAM Parameter RAM Page 1
24	D00 DBF 192 Bytes Dual-Port RAM Parameter RAM Page 2
25	E00 EBF 192 Bytes Dual-Port RAM Parameter RAM Page 3
26	F00 FBF 192 Bytes Dual-Port RAM Parameter RAM Page 4
27
28	local interrupts		    level
29	NMI					7
30	PIT timer, CPM (RX/TX complete)		4
31	PCI9060	DMA and PCI doorbells		3
32	Cable - not used			1
33*/
34
35#include <linux/hdlc.h>
36#include <linux/hdlc/ioctl.h>
37#include "wanxl.h"
38
39/* memory addresses and offsets */
40
41MAX_RAM_SIZE	= 16 * 1024 * 1024	// max RAM supported by hardware
42
43PCI9060_VECTOR	= 0x0000006C
44CPM_IRQ_BASE	= 0x40
45ERROR_VECTOR	= CPM_IRQ_BASE * 4
46SCC1_VECTOR	= (CPM_IRQ_BASE + 0x1E) * 4
47SCC2_VECTOR	= (CPM_IRQ_BASE + 0x1D) * 4
48SCC3_VECTOR	= (CPM_IRQ_BASE + 0x1C) * 4
49SCC4_VECTOR	= (CPM_IRQ_BASE + 0x1B) * 4
50CPM_IRQ_LEVEL	= 4
51TIMER_IRQ	= 128
52TIMER_IRQ_LEVEL = 4
53PITR_CONST	= 0x100 + 16		// 1 Hz timer
54
55MBAR		= 0x0003FF00
56
57VALUE_WINDOW	= 0x40000000
58ORDER_WINDOW	= 0xC0000000
59
60PLX		= 0xFFF90000
61
62CSRA		= 0xFFFB0000
63CSRB		= 0xFFFB0002
64CSRC		= 0xFFFB0004
65CSRD		= 0xFFFB0006
66STATUS_CABLE_LL		= 0x2000
67STATUS_CABLE_DTR	= 0x1000
68
69DPRBASE		= 0xFFFC0000
70
71SCC1_BASE	= DPRBASE + 0xC00
72MISC_BASE	= DPRBASE + 0xCB0
73SCC2_BASE	= DPRBASE + 0xD00
74SCC3_BASE	= DPRBASE + 0xE00
75SCC4_BASE	= DPRBASE + 0xF00
76
77// offset from SCCx_BASE
78// SCC_xBASE contain offsets from DPRBASE and must be divisible by 8
79SCC_RBASE	= 0		// 16-bit RxBD base address
80SCC_TBASE	= 2		// 16-bit TxBD base address
81SCC_RFCR	= 4		// 8-bit Rx function code
82SCC_TFCR	= 5		// 8-bit Tx function code
83SCC_MRBLR	= 6		// 16-bit maximum Rx buffer length
84SCC_C_MASK	= 0x34		// 32-bit CRC constant
85SCC_C_PRES	= 0x38		// 32-bit CRC preset
86SCC_MFLR	= 0x46		// 16-bit max Rx frame length (without flags)
87
88REGBASE		= DPRBASE + 0x1000
89PICR		= REGBASE + 0x026	// 16-bit periodic irq control
90PITR		= REGBASE + 0x02A	// 16-bit periodic irq timing
91OR1		= REGBASE + 0x064	// 32-bit RAM bank #1 options
92CICR		= REGBASE + 0x540	// 32(24)-bit CP interrupt config
93CIMR		= REGBASE + 0x548	// 32-bit CP interrupt mask
94CISR		= REGBASE + 0x54C	// 32-bit CP interrupts in-service
95PADIR		= REGBASE + 0x550	// 16-bit PortA data direction bitmap
96PAPAR		= REGBASE + 0x552	// 16-bit PortA pin assignment bitmap
97PAODR		= REGBASE + 0x554	// 16-bit PortA open drain bitmap
98PADAT		= REGBASE + 0x556	// 16-bit PortA data register
99
100PCDIR		= REGBASE + 0x560	// 16-bit PortC data direction bitmap
101PCPAR		= REGBASE + 0x562	// 16-bit PortC pin assignment bitmap
102PCSO		= REGBASE + 0x564	// 16-bit PortC special options
103PCDAT		= REGBASE + 0x566	// 16-bit PortC data register
104PCINT		= REGBASE + 0x568	// 16-bit PortC interrupt control
105CR		= REGBASE + 0x5C0	// 16-bit Command register
106
107SCC1_REGS	= REGBASE + 0x600
108SCC2_REGS	= REGBASE + 0x620
109SCC3_REGS	= REGBASE + 0x640
110SCC4_REGS	= REGBASE + 0x660
111SICR		= REGBASE + 0x6EC	// 32-bit SI clock route
112
113// offset from SCCx_REGS
114SCC_GSMR_L	= 0x00	// 32 bits
115SCC_GSMR_H	= 0x04	// 32 bits
116SCC_PSMR	= 0x08	// 16 bits
117SCC_TODR	= 0x0C	// 16 bits
118SCC_DSR		= 0x0E	// 16 bits
119SCC_SCCE	= 0x10	// 16 bits
120SCC_SCCM	= 0x14	// 16 bits
121SCC_SCCS	= 0x17	// 8 bits
122
123#if QUICC_MEMCPY_USES_PLX
124	.macro memcpy_from_pci src, dest, len // len must be < 8 MB
125	addl #3, \len
126	andl #0xFFFFFFFC, \len		// always copy n * 4 bytes
127	movel \src, PLX_DMA_0_PCI
128	movel \dest, PLX_DMA_0_LOCAL
129	movel \len, PLX_DMA_0_LENGTH
130	movel #0x0103, PLX_DMA_CMD_STS	// start channel 0 transfer
131	bsr memcpy_from_pci_run
132	.endm
133
134	.macro memcpy_to_pci src, dest, len
135	addl #3, \len
136	andl #0xFFFFFFFC, \len		// always copy n * 4 bytes
137	movel \src, PLX_DMA_1_LOCAL
138	movel \dest, PLX_DMA_1_PCI
139	movel \len, PLX_DMA_1_LENGTH
140	movel #0x0301, PLX_DMA_CMD_STS	// start channel 1 transfer
141	bsr memcpy_to_pci_run
142	.endm
143
144#else
145
146	.macro memcpy src, dest, len	// len must be < 65536 bytes
147	movel %d7, -(%sp)		// src and dest must be < 256 MB
148	movel \len, %d7			// bits 0 and 1
149	lsrl #2, \len
150	andl \len, \len
151	beq 99f				// only 0 - 3 bytes
152	subl #1, \len			// for dbf
15398:	movel (\src)+, (\dest)+
154	dbfw \len, 98b
15599:	movel %d7, \len
156	btstl #1, \len
157	beq 99f
158	movew (\src)+, (\dest)+
15999:	btstl #0, \len
160	beq 99f
161	moveb (\src)+, (\dest)+
16299:
163	movel (%sp)+, %d7
164	.endm
165
166	.macro memcpy_from_pci src, dest, len
167	addl #VALUE_WINDOW, \src
168	memcpy \src, \dest, \len
169	.endm
170
171	.macro memcpy_to_pci src, dest, len
172	addl #VALUE_WINDOW, \dest
173	memcpy \src, \dest, \len
174	.endm
175#endif
176
177
178	.macro wait_for_command
17999:	btstl #0, CR
180	bne 99b
181	.endm
182
183
184
185
186/****************************** card initialization *******************/
187	.text
188	.global _start
189_start:	bra init
190
191	.org _start + 4
192ch_status_addr:	.long 0, 0, 0, 0
193rx_descs_addr:	.long 0
194
195init:
196#if DETECT_RAM
197	movel OR1, %d0
198	andl #0xF00007FF, %d0		// mask AMxx bits
199	orl #0xFFFF800 & ~(MAX_RAM_SIZE - 1), %d0 // update RAM bank size
200	movel %d0, OR1
201#endif
202
203	addl #VALUE_WINDOW, rx_descs_addr // PCI addresses of shared data
204	clrl %d0			// D0 = 4 * port
205init_1:	tstl ch_status_addr(%d0)
206	beq init_2
207	addl #VALUE_WINDOW, ch_status_addr(%d0)
208init_2:	addl #4, %d0
209	cmpl #4 * 4, %d0
210	bne init_1
211
212	movel #pci9060_interrupt, PCI9060_VECTOR
213	movel #error_interrupt, ERROR_VECTOR
214	movel #port_interrupt_1, SCC1_VECTOR
215	movel #port_interrupt_2, SCC2_VECTOR
216	movel #port_interrupt_3, SCC3_VECTOR
217	movel #port_interrupt_4, SCC4_VECTOR
218	movel #timer_interrupt, TIMER_IRQ * 4
219
220	movel #0x78000000, CIMR		// only SCCx IRQs from CPM
221	movew #(TIMER_IRQ_LEVEL << 8) + TIMER_IRQ, PICR	// interrupt from PIT
222	movew #PITR_CONST, PITR
223
224	// SCC1=SCCa SCC2=SCCb SCC3=SCCc SCC4=SCCd prio=4 HP=-1 IRQ=64-79
225	movel #0xD41F40 + (CPM_IRQ_LEVEL << 13), CICR
226	movel #0x543, PLX_DMA_0_MODE	// 32-bit, Ready, Burst, IRQ
227	movel #0x543, PLX_DMA_1_MODE
228	movel #0x0, PLX_DMA_0_DESC	// from PCI to local
229	movel #0x8, PLX_DMA_1_DESC	// from local to PCI
230	movel #0x101, PLX_DMA_CMD_STS	// enable both DMA channels
231	// enable local IRQ, DMA, doorbells and PCI IRQ
232	orl #0x000F0300, PLX_INTERRUPT_CS
233
234#if DETECT_RAM
235	bsr ram_test
236#else
237	movel #1, PLX_MAILBOX_5		// non-zero value = init complete
238#endif
239	bsr check_csr
240
241	movew #0xFFFF, PAPAR		// all pins are clocks/data
242	clrw PADIR			// first function
243	clrw PCSO			// CD and CTS always active
244
245
246/****************************** main loop *****************************/
247
248main:	movel channel_stats, %d7	// D7 = doorbell + irq status
249	clrl channel_stats
250
251	tstl %d7
252	bne main_1
253	// nothing to do - wait for next event
254	stop #0x2200			// supervisor + IRQ level 2
255	movew #0x2700, %sr		// disable IRQs again
256	bra main
257
258main_1:	clrl %d0			// D0 = 4 * port
259	clrl %d6			// D6 = doorbell to host value
260
261main_l: btstl #DOORBELL_TO_CARD_CLOSE_0, %d7
262	beq main_op
263	bclrl #DOORBELL_TO_CARD_OPEN_0, %d7 // in case both bits are set
264	bsr close_port
265main_op:
266	btstl #DOORBELL_TO_CARD_OPEN_0, %d7
267	beq main_cl
268	bsr open_port
269main_cl:
270	btstl #DOORBELL_TO_CARD_TX_0, %d7
271	beq main_txend
272	bsr tx
273main_txend:
274	btstl #TASK_SCC_0, %d7
275	beq main_next
276	bsr tx_end
277	bsr rx
278
279main_next:
280	lsrl #1, %d7			// port status for next port
281	addl #4, %d0			// D0 = 4 * next port
282	cmpl #4 * 4, %d0
283	bne main_l
284	movel %d6, PLX_DOORBELL_FROM_CARD // signal the host
285	bra main
286
287
288/****************************** open port *****************************/
289
290open_port:				// D0 = 4 * port, D6 = doorbell to host
291	movel ch_status_addr(%d0), %a0	// A0 = port status address
292	tstl STATUS_OPEN(%a0)
293	bne open_port_ret		// port already open
294	movel #1, STATUS_OPEN(%a0)	// confirm the port is open
295// setup BDs
296	clrl tx_in(%d0)
297	clrl tx_out(%d0)
298	clrl tx_count(%d0)
299	clrl rx_in(%d0)
300
301	movel SICR, %d1			// D1 = clock settings in SICR
302	andl clocking_mask(%d0), %d1
303	cmpl #CLOCK_TXFROMRX, STATUS_CLOCKING(%a0)
304	bne open_port_clock_ext
305	orl clocking_txfromrx(%d0), %d1
306	bra open_port_set_clock
307
308open_port_clock_ext:
309	orl clocking_ext(%d0), %d1
310open_port_set_clock:
311	movel %d1, SICR			// update clock settings in SICR
312
313	orw #STATUS_CABLE_DTR, csr_output(%d0)	// DTR on
314	bsr check_csr			// call with disabled timer interrupt
315
316// Setup TX descriptors
317	movel first_buffer(%d0), %d1	// D1 = starting buffer address
318	movel tx_first_bd(%d0), %a1	// A1 = starting TX BD address
319	movel #TX_BUFFERS - 2, %d2	// D2 = TX_BUFFERS - 1 counter
320	movel #0x18000000, %d3		// D3 = initial TX BD flags: Int + Last
321	cmpl #PARITY_NONE, STATUS_PARITY(%a0)
322	beq open_port_tx_loop
323	bsetl #26, %d3			// TX BD flag: Transmit CRC
324open_port_tx_loop:
325	movel %d3, (%a1)+		// TX flags + length
326	movel %d1, (%a1)+		// buffer address
327	addl #BUFFER_LENGTH, %d1
328	dbfw %d2, open_port_tx_loop
329
330	bsetl #29, %d3			// TX BD flag: Wrap (last BD)
331	movel %d3, (%a1)+		// Final TX flags + length
332	movel %d1, (%a1)+		// buffer address
333
334// Setup RX descriptors			// A1 = starting RX BD address
335	movel #RX_BUFFERS - 2, %d2	// D2 = RX_BUFFERS - 1 counter
336open_port_rx_loop:
337	movel #0x90000000, (%a1)+	// RX flags + length
338	movel %d1, (%a1)+		// buffer address
339	addl #BUFFER_LENGTH, %d1
340	dbfw %d2, open_port_rx_loop
341
342	movel #0xB0000000, (%a1)+	// Final RX flags + length
343	movel %d1, (%a1)+		// buffer address
344
345// Setup port parameters
346	movel scc_base_addr(%d0), %a1	// A1 = SCC_BASE address
347	movel scc_reg_addr(%d0), %a2	// A2 = SCC_REGS address
348
349	movel #0xFFFF, SCC_SCCE(%a2)	// clear status bits
350	movel #0x0000, SCC_SCCM(%a2)	// interrupt mask
351
352	movel tx_first_bd(%d0), %d1
353	movew %d1, SCC_TBASE(%a1)	// D1 = offset of first TxBD
354	addl #TX_BUFFERS * 8, %d1
355	movew %d1, SCC_RBASE(%a1)	// D1 = offset of first RxBD
356	moveb #0x8, SCC_RFCR(%a1)	// Intel mode, 1000
357	moveb #0x8, SCC_TFCR(%a1)
358
359// Parity settings
360	cmpl #PARITY_CRC16_PR1_CCITT, STATUS_PARITY(%a0)
361	bne open_port_parity_1
362	clrw SCC_PSMR(%a2)		// CRC16-CCITT
363	movel #0xF0B8, SCC_C_MASK(%a1)
364	movel #0xFFFF, SCC_C_PRES(%a1)
365	movew #HDLC_MAX_MRU + 2, SCC_MFLR(%a1) // 2 bytes for CRC
366	movew #2, parity_bytes(%d0)
367	bra open_port_2
368
369open_port_parity_1:
370	cmpl #PARITY_CRC32_PR1_CCITT, STATUS_PARITY(%a0)
371	bne open_port_parity_2
372	movew #0x0800, SCC_PSMR(%a2)	// CRC32-CCITT
373	movel #0xDEBB20E3, SCC_C_MASK(%a1)
374	movel #0xFFFFFFFF, SCC_C_PRES(%a1)
375	movew #HDLC_MAX_MRU + 4, SCC_MFLR(%a1) // 4 bytes for CRC
376	movew #4, parity_bytes(%d0)
377	bra open_port_2
378
379open_port_parity_2:
380	cmpl #PARITY_CRC16_PR0_CCITT, STATUS_PARITY(%a0)
381	bne open_port_parity_3
382	clrw SCC_PSMR(%a2)		// CRC16-CCITT preset 0
383	movel #0xF0B8, SCC_C_MASK(%a1)
384	clrl SCC_C_PRES(%a1)
385	movew #HDLC_MAX_MRU + 2, SCC_MFLR(%a1) // 2 bytes for CRC
386	movew #2, parity_bytes(%d0)
387	bra open_port_2
388
389open_port_parity_3:
390	cmpl #PARITY_CRC32_PR0_CCITT, STATUS_PARITY(%a0)
391	bne open_port_parity_4
392	movew #0x0800, SCC_PSMR(%a2)	// CRC32-CCITT preset 0
393	movel #0xDEBB20E3, SCC_C_MASK(%a1)
394	clrl SCC_C_PRES(%a1)
395	movew #HDLC_MAX_MRU + 4, SCC_MFLR(%a1) // 4 bytes for CRC
396	movew #4, parity_bytes(%d0)
397	bra open_port_2
398
399open_port_parity_4:
400	clrw SCC_PSMR(%a2)		// no parity
401	movel #0xF0B8, SCC_C_MASK(%a1)
402	movel #0xFFFF, SCC_C_PRES(%a1)
403	movew #HDLC_MAX_MRU, SCC_MFLR(%a1) // 0 bytes for CRC
404	clrw parity_bytes(%d0)
405
406open_port_2:
407	movel #0x00000003, SCC_GSMR_H(%a2) // RTSM
408	cmpl #ENCODING_NRZI, STATUS_ENCODING(%a0)
409	bne open_port_nrz
410	movel #0x10040900, SCC_GSMR_L(%a2) // NRZI: TCI Tend RECN+TENC=1
411	bra open_port_3
412
413open_port_nrz:
414	movel #0x10040000, SCC_GSMR_L(%a2) // NRZ: TCI Tend RECN+TENC=0
415open_port_3:
416	movew #BUFFER_LENGTH, SCC_MRBLR(%a1)
417	movel %d0, %d1
418	lsll #4, %d1			// D1 bits 7 and 6 = port
419	orl #1, %d1
420	movew %d1, CR			// Init SCC RX and TX params
421	wait_for_command
422
423	// TCI Tend ENR ENT
424	movew #0x001F, SCC_SCCM(%a2)	// TXE RXF BSY TXB RXB interrupts
425	orl #0x00000030, SCC_GSMR_L(%a2) // enable SCC
426open_port_ret:
427	rts
428
429
430/****************************** close port ****************************/
431
432close_port:				// D0 = 4 * port, D6 = doorbell to host
433	movel scc_reg_addr(%d0), %a0	// A0 = SCC_REGS address
434	clrw SCC_SCCM(%a0)		// no SCC interrupts
435	andl #0xFFFFFFCF, SCC_GSMR_L(%a0) // Disable ENT and ENR
436
437	andw #~STATUS_CABLE_DTR, csr_output(%d0) // DTR off
438	bsr check_csr			// call with disabled timer interrupt
439
440	movel ch_status_addr(%d0), %d1
441	clrl STATUS_OPEN(%d1)		// confirm the port is closed
442	rts
443
444
445/****************************** transmit packet ***********************/
446// queue packets for transmission
447tx:					// D0 = 4 * port, D6 = doorbell to host
448	cmpl #TX_BUFFERS, tx_count(%d0)
449	beq tx_ret			// all DB's = descs in use
450
451	movel tx_out(%d0), %d1
452	movel %d1, %d2			// D1 = D2 = tx_out BD# = desc#
453	mulul #DESC_LENGTH, %d2		// D2 = TX desc offset
454	addl ch_status_addr(%d0), %d2
455	addl #STATUS_TX_DESCS, %d2	// D2 = TX desc address
456	cmpl #PACKET_FULL, (%d2)	// desc status
457	bne tx_ret
458
459// queue it
460	movel 4(%d2), %a0		// PCI address
461	lsll #3, %d1			// BD is 8-bytes long
462	addl tx_first_bd(%d0), %d1	// D1 = current tx_out BD addr
463
464	movel 4(%d1), %a1		// A1 = dest address
465	movel 8(%d2), %d2		// D2 = length
466	movew %d2, 2(%d1)		// length into BD
467	memcpy_from_pci %a0, %a1, %d2
468	bsetl #31, (%d1)		// CP go ahead
469
470// update tx_out and tx_count
471	movel tx_out(%d0), %d1
472	addl #1, %d1
473	cmpl #TX_BUFFERS, %d1
474	bne tx_1
475	clrl %d1
476tx_1:	movel %d1, tx_out(%d0)
477
478	addl #1, tx_count(%d0)
479	bra tx
480
481tx_ret: rts
482
483
484/****************************** packet received ***********************/
485
486// Service receive buffers		// D0 = 4 * port, D6 = doorbell to host
487rx:	movel rx_in(%d0), %d1		// D1 = rx_in BD#
488	lsll #3, %d1			// BD is 8-bytes long
489	addl rx_first_bd(%d0), %d1	// D1 = current rx_in BD address
490	movew (%d1), %d2		// D2 = RX BD flags
491	btstl #15, %d2
492	bne rx_ret			// BD still empty
493
494	btstl #1, %d2
495	bne rx_overrun
496
497	tstw parity_bytes(%d0)
498	bne rx_parity
499	bclrl #2, %d2			// do not test for CRC errors
500rx_parity:
501	andw #0x0CBC, %d2		// mask status bits
502	cmpw #0x0C00, %d2		// correct frame
503	bne rx_bad_frame
504	clrl %d3
505	movew 2(%d1), %d3
506	subw parity_bytes(%d0), %d3	// D3 = packet length
507	cmpw #HDLC_MAX_MRU, %d3
508	bgt rx_bad_frame
509
510rx_good_frame:
511	movel rx_out, %d2
512	mulul #DESC_LENGTH, %d2
513	addl rx_descs_addr, %d2		// D2 = RX desc address
514	cmpl #PACKET_EMPTY, (%d2)	// desc stat
515	bne rx_overrun
516
517	movel %d3, 8(%d2)
518	movel 4(%d1), %a0		// A0 = source address
519	movel 4(%d2), %a1
520	tstl %a1
521	beq rx_ignore_data
522	memcpy_to_pci %a0, %a1, %d3
523rx_ignore_data:
524	movel packet_full(%d0), (%d2)	// update desc stat
525
526// update D6 and rx_out
527	bsetl #DOORBELL_FROM_CARD_RX, %d6 // signal host that RX completed
528	movel rx_out, %d2
529	addl #1, %d2
530	cmpl #RX_QUEUE_LENGTH, %d2
531	bne rx_1
532	clrl %d2
533rx_1:	movel %d2, rx_out
534
535rx_free_bd:
536	andw #0xF000, (%d1)		// clear CM and error bits
537	bsetl #31, (%d1)		// free BD
538// update rx_in
539	movel rx_in(%d0), %d1
540	addl #1, %d1
541	cmpl #RX_BUFFERS, %d1
542	bne rx_2
543	clrl %d1
544rx_2:	movel %d1, rx_in(%d0)
545	bra rx
546
547rx_overrun:
548	movel ch_status_addr(%d0), %d2
549	addl #1, STATUS_RX_OVERRUNS(%d2)
550	bra rx_free_bd
551
552rx_bad_frame:
553	movel ch_status_addr(%d0), %d2
554	addl #1, STATUS_RX_FRAME_ERRORS(%d2)
555	bra rx_free_bd
556
557rx_ret: rts
558
559
560/****************************** packet transmitted ********************/
561
562// Service transmit buffers		// D0 = 4 * port, D6 = doorbell to host
563tx_end:	tstl tx_count(%d0)
564	beq tx_end_ret			// TX buffers already empty
565
566	movel tx_in(%d0), %d1
567	movel %d1, %d2			// D1 = D2 = tx_in BD# = desc#
568	lsll #3, %d1			// BD is 8-bytes long
569	addl tx_first_bd(%d0), %d1	// D1 = current tx_in BD address
570	movew (%d1), %d3		// D3 = TX BD flags
571	btstl #15, %d3
572	bne tx_end_ret			// BD still being transmitted
573
574// update D6, tx_in and tx_count
575	orl bell_tx(%d0), %d6		// signal host that TX desc freed
576	subl #1, tx_count(%d0)
577	movel tx_in(%d0), %d1
578	addl #1, %d1
579	cmpl #TX_BUFFERS, %d1
580	bne tx_end_1
581	clrl %d1
582tx_end_1:
583	movel %d1, tx_in(%d0)
584
585// free host's descriptor
586	mulul #DESC_LENGTH, %d2		// D2 = TX desc offset
587	addl ch_status_addr(%d0), %d2
588	addl #STATUS_TX_DESCS, %d2	// D2 = TX desc address
589	btstl #1, %d3
590	bne tx_end_underrun
591	movel #PACKET_SENT, (%d2)
592	bra tx_end
593
594tx_end_underrun:
595	movel #PACKET_UNDERRUN, (%d2)
596	bra tx_end
597
598tx_end_ret: rts
599
600
601/****************************** PLX PCI9060 DMA memcpy ****************/
602
603#if QUICC_MEMCPY_USES_PLX
604// called with interrupts disabled
605memcpy_from_pci_run:
606	movel %d0, -(%sp)
607	movew %sr, -(%sp)
608memcpy_1:
609	movel PLX_DMA_CMD_STS, %d0	// do not btst PLX register directly
610	btstl #4, %d0			// transfer done?
611	bne memcpy_end
612	stop #0x2200			// enable PCI9060 interrupts
613	movew #0x2700, %sr		// disable interrupts again
614	bra memcpy_1
615
616memcpy_to_pci_run:
617	movel %d0, -(%sp)
618	movew %sr, -(%sp)
619memcpy_2:
620	movel PLX_DMA_CMD_STS, %d0	// do not btst PLX register directly
621	btstl #12, %d0			// transfer done?
622	bne memcpy_end
623	stop #0x2200			// enable PCI9060 interrupts
624	movew #0x2700, %sr		// disable interrupts again
625	bra memcpy_2
626
627memcpy_end:
628	movew (%sp)+, %sr
629	movel (%sp)+, %d0
630	rts
631#endif
632
633
634
635
636
637
638/****************************** PLX PCI9060 interrupt *****************/
639
640pci9060_interrupt:
641	movel %d0, -(%sp)
642
643	movel PLX_DOORBELL_TO_CARD, %d0
644	movel %d0, PLX_DOORBELL_TO_CARD	// confirm all requests
645	orl %d0, channel_stats
646
647	movel #0x0909, PLX_DMA_CMD_STS	// clear DMA ch #0 and #1 interrupts
648
649	movel (%sp)+, %d0
650	rte
651
652/****************************** SCC interrupts ************************/
653
654port_interrupt_1:
655	orl #0, SCC1_REGS + SCC_SCCE; // confirm SCC events
656	orl #1 << TASK_SCC_0, channel_stats
657	movel #0x40000000, CISR
658	rte
659
660port_interrupt_2:
661	orl #0, SCC2_REGS + SCC_SCCE; // confirm SCC events
662	orl #1 << TASK_SCC_1, channel_stats
663	movel #0x20000000, CISR
664	rte
665
666port_interrupt_3:
667	orl #0, SCC3_REGS + SCC_SCCE; // confirm SCC events
668	orl #1 << TASK_SCC_2, channel_stats
669	movel #0x10000000, CISR
670	rte
671
672port_interrupt_4:
673	orl #0, SCC4_REGS + SCC_SCCE; // confirm SCC events
674	orl #1 << TASK_SCC_3, channel_stats
675	movel #0x08000000, CISR
676	rte
677
678error_interrupt:
679	rte
680
681
682/****************************** cable and PM routine ******************/
683// modified registers: none
684check_csr:
685	movel %d0, -(%sp)
686	movel %d1, -(%sp)
687	movel %d2, -(%sp)
688	movel %a0, -(%sp)
689	movel %a1, -(%sp)
690
691	clrl %d0			// D0 = 4 * port
692	movel #CSRA, %a0		// A0 = CSR address
693
694check_csr_loop:
695	movew (%a0), %d1		// D1 = CSR input bits
696	andl #0xE7, %d1			// PM and cable sense bits (no DCE bit)
697	cmpw #STATUS_CABLE_V35 * (1 + 1 << STATUS_CABLE_PM_SHIFT), %d1
698	bne check_csr_1
699	movew #0x0E08, %d1
700	bra check_csr_valid
701
702check_csr_1:
703	cmpw #STATUS_CABLE_X21 * (1 + 1 << STATUS_CABLE_PM_SHIFT), %d1
704	bne check_csr_2
705	movew #0x0408, %d1
706	bra check_csr_valid
707
708check_csr_2:
709	cmpw #STATUS_CABLE_V24 * (1 + 1 << STATUS_CABLE_PM_SHIFT), %d1
710	bne check_csr_3
711	movew #0x0208, %d1
712	bra check_csr_valid
713
714check_csr_3:
715	cmpw #STATUS_CABLE_EIA530 * (1 + 1 << STATUS_CABLE_PM_SHIFT), %d1
716	bne check_csr_disable
717	movew #0x0D08, %d1
718	bra check_csr_valid
719
720check_csr_disable:
721	movew #0x0008, %d1		// D1 = disable everything
722	movew #0x80E7, %d2		// D2 = input mask: ignore DSR
723	bra check_csr_write
724
725check_csr_valid:			// D1 = mode and IRQ bits
726	movew csr_output(%d0), %d2
727	andw #0x3000, %d2		// D2 = requested LL and DTR bits
728	orw %d2, %d1			// D1 = all requested output bits
729	movew #0x80FF, %d2		// D2 = input mask: include DSR
730
731check_csr_write:
732	cmpw old_csr_output(%d0), %d1
733	beq check_csr_input
734	movew %d1, old_csr_output(%d0)
735	movew %d1, (%a0)		// Write CSR output bits
736
737check_csr_input:
738	movew (PCDAT), %d1
739	andw dcd_mask(%d0), %d1
740	beq check_csr_dcd_on		// DCD and CTS signals are negated
741	movew (%a0), %d1		// D1 = CSR input bits
742	andw #~STATUS_CABLE_DCD, %d1	// DCD off
743	bra check_csr_previous
744
745check_csr_dcd_on:
746	movew (%a0), %d1		// D1 = CSR input bits
747	orw #STATUS_CABLE_DCD, %d1	// DCD on
748check_csr_previous:
749	andw %d2, %d1			// input mask
750	movel ch_status_addr(%d0), %a1
751	cmpl STATUS_CABLE(%a1), %d1	// check for change
752	beq check_csr_next
753	movel %d1, STATUS_CABLE(%a1)	// update status
754	movel bell_cable(%d0), PLX_DOORBELL_FROM_CARD	// signal the host
755
756check_csr_next:
757	addl #2, %a0			// next CSR register
758	addl #4, %d0			// D0 = 4 * next port
759	cmpl #4 * 4, %d0
760	bne check_csr_loop
761
762	movel (%sp)+, %a1
763	movel (%sp)+, %a0
764	movel (%sp)+, %d2
765	movel (%sp)+, %d1
766	movel (%sp)+, %d0
767	rts
768
769
770/****************************** timer interrupt ***********************/
771
772timer_interrupt:
773	bsr check_csr
774	rte
775
776
777/****************************** RAM sizing and test *******************/
778#if DETECT_RAM
779ram_test:
780	movel #0x12345678, %d1		// D1 = test value
781	movel %d1, (128 * 1024 - 4)
782	movel #128 * 1024, %d0		// D0 = RAM size tested
783ram_test_size:
784	cmpl #MAX_RAM_SIZE, %d0
785	beq ram_test_size_found
786	movel %d0, %a0
787	addl #128 * 1024 - 4, %a0
788	cmpl (%a0), %d1
789	beq ram_test_size_check
790ram_test_next_size:
791	lsll #1, %d0
792	bra ram_test_size
793
794ram_test_size_check:
795	eorl #0xFFFFFFFF, %d1
796	movel %d1, (128 * 1024 - 4)
797	cmpl (%a0), %d1
798	bne ram_test_next_size
799
800ram_test_size_found:			// D0 = RAM size
801	movel %d0, %a0			// A0 = fill ptr
802	subl #firmware_end + 4, %d0
803	lsrl #2, %d0
804	movel %d0, %d1			// D1 = DBf counter
805ram_test_fill:
806	movel %a0, -(%a0)
807	dbfw %d1, ram_test_fill
808	subl #0x10000, %d1
809	cmpl #0xFFFFFFFF, %d1
810	bne ram_test_fill
811
812ram_test_loop:				// D0 = DBf counter
813	cmpl (%a0)+, %a0
814	dbnew %d0, ram_test_loop
815	bne ram_test_found_bad
816	subl #0x10000, %d0
817	cmpl #0xFFFFFFFF, %d0
818	bne ram_test_loop
819	bra ram_test_all_ok
820
821ram_test_found_bad:
822	subl #4, %a0
823ram_test_all_ok:
824	movel %a0, PLX_MAILBOX_5
825	rts
826#endif
827
828
829/****************************** constants *****************************/
830
831scc_reg_addr:
832	.long SCC1_REGS, SCC2_REGS, SCC3_REGS, SCC4_REGS
833scc_base_addr:
834	.long SCC1_BASE, SCC2_BASE, SCC3_BASE, SCC4_BASE
835
836tx_first_bd:
837	.long DPRBASE
838	.long DPRBASE + (TX_BUFFERS + RX_BUFFERS) * 8
839	.long DPRBASE + (TX_BUFFERS + RX_BUFFERS) * 8 * 2
840	.long DPRBASE + (TX_BUFFERS + RX_BUFFERS) * 8 * 3
841
842rx_first_bd:
843	.long DPRBASE + TX_BUFFERS * 8
844	.long DPRBASE + TX_BUFFERS * 8 + (TX_BUFFERS + RX_BUFFERS) * 8
845	.long DPRBASE + TX_BUFFERS * 8 + (TX_BUFFERS + RX_BUFFERS) * 8 * 2
846	.long DPRBASE + TX_BUFFERS * 8 + (TX_BUFFERS + RX_BUFFERS) * 8 * 3
847
848first_buffer:
849	.long BUFFERS_ADDR
850	.long BUFFERS_ADDR + (TX_BUFFERS + RX_BUFFERS) * BUFFER_LENGTH
851	.long BUFFERS_ADDR + (TX_BUFFERS + RX_BUFFERS) * BUFFER_LENGTH * 2
852	.long BUFFERS_ADDR + (TX_BUFFERS + RX_BUFFERS) * BUFFER_LENGTH * 3
853
854bell_tx:
855	.long 1 << DOORBELL_FROM_CARD_TX_0, 1 << DOORBELL_FROM_CARD_TX_1
856	.long 1 << DOORBELL_FROM_CARD_TX_2, 1 << DOORBELL_FROM_CARD_TX_3
857
858bell_cable:
859	.long 1 << DOORBELL_FROM_CARD_CABLE_0, 1 << DOORBELL_FROM_CARD_CABLE_1
860	.long 1 << DOORBELL_FROM_CARD_CABLE_2, 1 << DOORBELL_FROM_CARD_CABLE_3
861
862packet_full:
863	.long PACKET_FULL, PACKET_FULL + 1, PACKET_FULL + 2, PACKET_FULL + 3
864
865clocking_ext:
866	.long 0x0000002C, 0x00003E00, 0x002C0000, 0x3E000000
867clocking_txfromrx:
868	.long 0x0000002D, 0x00003F00, 0x002D0000, 0x3F000000
869clocking_mask:
870	.long 0x000000FF, 0x0000FF00, 0x00FF0000, 0xFF000000
871dcd_mask:
872	.word 0x020, 0, 0x080, 0, 0x200, 0, 0x800
873
874	.ascii "wanXL firmware\n"
875	.asciz "Copyright (C) 2003 Krzysztof Halasa <khc@pm.waw.pl>\n"
876
877
878/****************************** variables *****************************/
879
880		.align 4
881channel_stats:	.long 0
882
883tx_in:		.long 0, 0, 0, 0	// transmitted
884tx_out:		.long 0, 0, 0, 0	// received from host for transmission
885tx_count:	.long 0, 0, 0, 0	// currently in transmit queue
886
887rx_in:		.long 0, 0, 0, 0	// received from port
888rx_out:		.long 0			// transmitted to host
889parity_bytes:	.word 0, 0, 0, 0, 0, 0, 0 // only 4 words are used
890
891csr_output:	.word 0
892old_csr_output:	.word 0, 0, 0, 0, 0, 0, 0
893		.align 4
894firmware_end:				// must be dword-aligned
895