#include "stddef.h" #include "protocol.h" #include "logf.h" #include "usb_ch9.h" extern unsigned char oc_codestart[]; extern unsigned char oc_codeend[]; extern unsigned char oc_stackstart[]; extern unsigned char oc_stackend[]; extern unsigned char oc_bufferstart[]; extern unsigned char oc_bufferend[]; #define oc_codesize ((size_t)(oc_codeend - oc_codestart)) #define oc_stacksize ((size_t)(oc_stackend - oc_stackstart)) #define oc_buffersize ((size_t)(oc_bufferend - oc_bufferstart)) /** * * Common * */ #define MIN(a,b) ((a) < (b) ? (a) : (b)) #define __REG_SET(reg) (*((volatile uint32_t *)(® + 1))) #define __REG_CLR(reg) (*((volatile uint32_t *)(® + 2))) #define __REG_TOG(reg) (*((volatile uint32_t *)(® + 3))) #define __BLOCK_SFTRST (1 << 31) #define __BLOCK_CLKGATE (1 << 30) #define __XTRACT(reg, field) ((reg & reg##__##field##_BM) >> reg##__##field##_BP) #define __XTRACT_EX(val, field) (((val) & field##_BM) >> field##_BP) #define __FIELD_SET(reg, field, val) reg = (reg & ~reg##__##field##_BM) | (val << reg##__##field##_BP) /** * * Global * */ enum stmp_family_t { UNKNOWN, STMP3600, STMP3700, STMP3770, STMP3780 }; enum stmp_family_t g_stmp_family = UNKNOWN; /** * * USB subsystem * */ #define USB_BASE 0x80080000 #define USB_NUM_ENDPOINTS 2 #define MAX_PKT_SIZE 1024 #define MAX_PKT_SIZE_EP0 64 /* USB device mode registers (Little Endian) */ #define REG_USBCMD (*(volatile unsigned int *)(USB_BASE+0x140)) #define REG_DEVICEADDR (*(volatile unsigned int *)(USB_BASE+0x154)) #define REG_ENDPOINTLISTADDR (*(volatile unsigned int *)(USB_BASE+0x158)) #define REG_PORTSC1 (*(volatile unsigned int *)(USB_BASE+0x184)) #define REG_USBMODE (*(volatile unsigned int *)(USB_BASE+0x1a8)) #define REG_ENDPTSETUPSTAT (*(volatile unsigned int *)(USB_BASE+0x1ac)) #define REG_ENDPTPRIME (*(volatile unsigned int *)(USB_BASE+0x1b0)) #define REG_ENDPTSTATUS (*(volatile unsigned int *)(USB_BASE+0x1b8)) #define REG_ENDPTCOMPLETE (*(volatile unsigned int *)(USB_BASE+0x1bc)) #define REG_ENDPTCTRL0 (*(volatile unsigned int *)(USB_BASE+0x1c0)) #define REG_ENDPTCTRL1 (*(volatile unsigned int *)(USB_BASE+0x1c4)) #define REG_ENDPTCTRL2 (*(volatile unsigned int *)(USB_BASE+0x1c8)) #define REG_ENDPTCTRL(_x_) (*(volatile unsigned int *)(USB_BASE+0x1c0+4*(_x_))) /* USB CMD Register Bit Masks */ #define USBCMD_RUN (0x00000001) #define USBCMD_CTRL_RESET (0x00000002) #define USBCMD_PERIODIC_SCHEDULE_EN (0x00000010) #define USBCMD_ASYNC_SCHEDULE_EN (0x00000020) #define USBCMD_INT_AA_DOORBELL (0x00000040) #define USBCMD_ASP (0x00000300) #define USBCMD_ASYNC_SCH_PARK_EN (0x00000800) #define USBCMD_SUTW (0x00002000) #define USBCMD_ATDTW (0x00004000) #define USBCMD_ITC (0x00FF0000) /* Device Address bit masks */ #define USBDEVICEADDRESS_MASK (0xFE000000) #define USBDEVICEADDRESS_BIT_POS (25) /* Endpoint Setup Status bit masks */ #define EPSETUP_STATUS_EP0 (0x00000001) /* PORTSCX Register Bit Masks */ #define PORTSCX_CURRENT_CONNECT_STATUS (0x00000001) #define PORTSCX_CONNECT_STATUS_CHANGE (0x00000002) #define PORTSCX_PORT_ENABLE (0x00000004) #define PORTSCX_PORT_EN_DIS_CHANGE (0x00000008) #define PORTSCX_OVER_CURRENT_ACT (0x00000010) #define PORTSCX_OVER_CURRENT_CHG (0x00000020) #define PORTSCX_PORT_FORCE_RESUME (0x00000040) #define PORTSCX_PORT_SUSPEND (0x00000080) #define PORTSCX_PORT_RESET (0x00000100) #define PORTSCX_LINE_STATUS_BITS (0x00000C00) #define PORTSCX_PORT_POWER (0x00001000) #define PORTSCX_PORT_INDICTOR_CTRL (0x0000C000) #define PORTSCX_PORT_TEST_CTRL (0x000F0000) #define PORTSCX_WAKE_ON_CONNECT_EN (0x00100000) #define PORTSCX_WAKE_ON_CONNECT_DIS (0x00200000) #define PORTSCX_WAKE_ON_OVER_CURRENT (0x00400000) #define PORTSCX_PHY_LOW_POWER_SPD (0x00800000) #define PORTSCX_PORT_FORCE_FULL_SPEED (0x01000000) #define PORTSCX_PORT_SPEED_MASK (0x0C000000) #define PORTSCX_PORT_WIDTH (0x10000000) #define PORTSCX_PHY_TYPE_SEL (0xC0000000) /* bit 11-10 are line status */ #define PORTSCX_LINE_STATUS_SE0 (0x00000000) #define PORTSCX_LINE_STATUS_JSTATE (0x00000400) #define PORTSCX_LINE_STATUS_KSTATE (0x00000800) #define PORTSCX_LINE_STATUS_UNDEF (0x00000C00) #define PORTSCX_LINE_STATUS_BIT_POS (10) /* bit 15-14 are port indicator control */ #define PORTSCX_PIC_OFF (0x00000000) #define PORTSCX_PIC_AMBER (0x00004000) #define PORTSCX_PIC_GREEN (0x00008000) #define PORTSCX_PIC_UNDEF (0x0000C000) #define PORTSCX_PIC_BIT_POS (14) /* bit 19-16 are port test control */ #define PORTSCX_PTC_DISABLE (0x00000000) #define PORTSCX_PTC_JSTATE (0x00010000) #define PORTSCX_PTC_KSTATE (0x00020000) #define PORTSCX_PTC_SE0NAK (0x00030000) #define PORTSCX_PTC_PACKET (0x00040000) #define PORTSCX_PTC_FORCE_EN (0x00050000) #define PORTSCX_PTC_BIT_POS (16) /* bit 27-26 are port speed */ #define PORTSCX_PORT_SPEED_FULL (0x00000000) #define PORTSCX_PORT_SPEED_LOW (0x04000000) #define PORTSCX_PORT_SPEED_HIGH (0x08000000) #define PORTSCX_PORT_SPEED_UNDEF (0x0C000000) #define PORTSCX_SPEED_BIT_POS (26) /* bit 28 is parallel transceiver width for UTMI interface */ #define PORTSCX_PTW (0x10000000) #define PORTSCX_PTW_8BIT (0x00000000) #define PORTSCX_PTW_16BIT (0x10000000) /* bit 31-30 are port transceiver select */ #define PORTSCX_PTS_UTMI (0x00000000) #define PORTSCX_PTS_CLASSIC (0x40000000) #define PORTSCX_PTS_ULPI (0x80000000) #define PORTSCX_PTS_FSLS (0xC0000000) #define PORTSCX_PTS_BIT_POS (30) /* USB MODE Register Bit Masks */ #define USBMODE_CTRL_MODE_IDLE (0x00000000) #define USBMODE_CTRL_MODE_DEVICE (0x00000002) #define USBMODE_CTRL_MODE_HOST (0x00000003) #define USBMODE_CTRL_MODE_RSV (0x00000001) #define USBMODE_SETUP_LOCK_OFF (0x00000008) #define USBMODE_STREAM_DISABLE (0x00000010) /* ENDPOINTCTRLx Register Bit Masks */ #define EPCTRL_TX_ENABLE (0x00800000) #define EPCTRL_TX_DATA_TOGGLE_RST (0x00400000) /* Not EP0 */ #define EPCTRL_TX_DATA_TOGGLE_INH (0x00200000) /* Not EP0 */ #define EPCTRL_TX_TYPE (0x000C0000) #define EPCTRL_TX_DATA_SOURCE (0x00020000) /* Not EP0 */ #define EPCTRL_TX_EP_STALL (0x00010000) #define EPCTRL_RX_ENABLE (0x00000080) #define EPCTRL_RX_DATA_TOGGLE_RST (0x00000040) /* Not EP0 */ #define EPCTRL_RX_DATA_TOGGLE_INH (0x00000020) /* Not EP0 */ #define EPCTRL_RX_TYPE (0x0000000C) #define EPCTRL_RX_DATA_SINK (0x00000002) /* Not EP0 */ #define EPCTRL_RX_EP_STALL (0x00000001) /* bit 19-18 and 3-2 are endpoint type */ #define EPCTRL_TX_EP_TYPE_SHIFT (18) #define EPCTRL_RX_EP_TYPE_SHIFT (2) #define QH_MULT_POS (30) #define QH_ZLT_SEL (0x20000000) #define QH_MAX_PKT_LEN_POS (16) #define QH_IOS (0x00008000) #define QH_NEXT_TERMINATE (0x00000001) #define QH_IOC (0x00008000) #define QH_MULTO (0x00000C00) #define QH_STATUS_HALT (0x00000040) #define QH_STATUS_ACTIVE (0x00000080) #define EP_QUEUE_CURRENT_OFFSET_MASK (0x00000FFF) #define EP_QUEUE_HEAD_NEXT_POINTER_MASK (0xFFFFFFE0) #define EP_QUEUE_FRINDEX_MASK (0x000007FF) #define EP_MAX_LENGTH_TRANSFER (0x4000) #define DTD_NEXT_TERMINATE (0x00000001) #define DTD_IOC (0x00008000) #define DTD_STATUS_ACTIVE (0x00000080) #define DTD_STATUS_HALTED (0x00000040) #define DTD_STATUS_DATA_BUFF_ERR (0x00000020) #define DTD_STATUS_TRANSACTION_ERR (0x00000008) #define DTD_RESERVED_FIELDS (0x80007300) #define DTD_ADDR_MASK (0xFFFFFFE0) #define DTD_PACKET_SIZE (0x7FFF0000) #define DTD_LENGTH_BIT_POS (16) #define DTD_ERROR_MASK (DTD_STATUS_HALTED | \ DTD_STATUS_DATA_BUFF_ERR | \ DTD_STATUS_TRANSACTION_ERR) /*-------------------------------------------------------------------------*/ /* manual: 32.13.2 Endpoint Transfer Descriptor (dTD) */ struct transfer_descriptor { unsigned int next_td_ptr; /* Next TD pointer(31-5), T(0) set indicate invalid */ unsigned int size_ioc_sts; /* Total bytes (30-16), IOC (15), MultO(11-10), STS (7-0) */ unsigned int buff_ptr0; /* Buffer pointer Page 0 */ unsigned int buff_ptr1; /* Buffer pointer Page 1 */ unsigned int buff_ptr2; /* Buffer pointer Page 2 */ unsigned int buff_ptr3; /* Buffer pointer Page 3 */ unsigned int buff_ptr4; /* Buffer pointer Page 4 */ unsigned int reserved; } __attribute__ ((packed)); static struct transfer_descriptor td_array[USB_NUM_ENDPOINTS*2] __attribute__((aligned(32))); /* manual: 32.13.1 Endpoint Queue Head (dQH) */ struct queue_head { unsigned int max_pkt_length; /* Mult(31-30) , Zlt(29) , Max Pkt len and IOS(15) */ unsigned int curr_dtd_ptr; /* Current dTD Pointer(31-5) */ struct transfer_descriptor dtd; /* dTD overlay */ unsigned int setup_buffer[2]; /* Setup data 8 bytes */ unsigned int reserved; /* for software use, pointer to the first TD */ unsigned int status; /* for software use, status of chain in progress */ unsigned int length; /* for software use, transfered bytes of chain in progress */ unsigned int wait; /* for softwate use, indicates if the transfer is blocking */ } __attribute__((packed)); static struct queue_head qh_array[USB_NUM_ENDPOINTS*2] __attribute__((aligned(2048))); static const unsigned int pipe2mask[] = { 0x01, 0x010000, 0x02, 0x020000, 0x04, 0x040000, 0x08, 0x080000, 0x10, 0x100000, }; /* return transfered size if wait=true */ static int prime_transfer(int ep_num, void *ptr, int len, bool send, bool wait) { int pipe = ep_num * 2 + (send ? 1 : 0); unsigned mask = pipe2mask[pipe]; struct transfer_descriptor *td = &td_array[pipe]; struct queue_head* qh = &qh_array[pipe]; /* prepare TD */ td->next_td_ptr = DTD_NEXT_TERMINATE; td->size_ioc_sts = (len<< DTD_LENGTH_BIT_POS) | DTD_STATUS_ACTIVE; td->buff_ptr0 = (unsigned int)ptr; td->buff_ptr1 = ((unsigned int)ptr & 0xfffff000) + 0x1000; td->buff_ptr2 = ((unsigned int)ptr & 0xfffff000) + 0x2000; td->buff_ptr3 = ((unsigned int)ptr & 0xfffff000) + 0x3000; td->buff_ptr4 = ((unsigned int)ptr & 0xfffff000) + 0x4000; td->reserved = 0; /* prime */ qh->dtd.next_td_ptr = (unsigned int)td; qh->dtd.size_ioc_sts &= ~(QH_STATUS_HALT | QH_STATUS_ACTIVE); REG_ENDPTPRIME |= mask; /* wait for priming to be taken into account */ while(!(REG_ENDPTSTATUS & mask)); /* wait for completion */ if(wait) { while(!(REG_ENDPTCOMPLETE & mask)); REG_ENDPTCOMPLETE = mask; /* memory barrier */ asm volatile("":::"memory"); /* return transfered size */ return len - (td->size_ioc_sts >> DTD_LENGTH_BIT_POS); } else return 0; } void usb_drv_set_address(int address) { REG_DEVICEADDR = address << USBDEVICEADDRESS_BIT_POS; } /* endpoints */ #define EP_CONTROL 0 #define DIR_OUT 0 #define DIR_IN 1 #define EP_DIR(ep) (((ep) & USB_ENDPOINT_DIR_MASK) ? DIR_IN : DIR_OUT) #define EP_NUM(ep) ((ep) & USB_ENDPOINT_NUMBER_MASK) static int usb_drv_send_nonblocking(int endpoint, void* ptr, int length) { return prime_transfer(EP_NUM(endpoint), ptr, length, true, false); } static int usb_drv_send(int endpoint, void* ptr, int length) { return prime_transfer(EP_NUM(endpoint), ptr, length, true, true); } static int usb_drv_recv(int endpoint, void* ptr, int length) { return prime_transfer(EP_NUM(endpoint), ptr, length, false, true); } static int usb_drv_recv_nonblocking(int endpoint, void* ptr, int length) { return prime_transfer(EP_NUM(endpoint), ptr, length, false, false); } static int usb_drv_port_speed(void) { return (REG_PORTSC1 & 0x08000000) ? 1 : 0; } static void usb_drv_stall(int endpoint, bool stall, bool in) { int ep_num = EP_NUM(endpoint); if(in) { if(stall) REG_ENDPTCTRL(ep_num) |= EPCTRL_TX_EP_STALL; else REG_ENDPTCTRL(ep_num) &= ~EPCTRL_TX_EP_STALL; } else { if (stall) REG_ENDPTCTRL(ep_num) |= EPCTRL_RX_EP_STALL; else REG_ENDPTCTRL(ep_num) &= ~EPCTRL_RX_EP_STALL; } } static void usb_drv_configure_endpoint(int ep_num, int type) { REG_ENDPTCTRL(ep_num) = EPCTRL_RX_DATA_TOGGLE_RST | EPCTRL_RX_ENABLE | EPCTRL_TX_DATA_TOGGLE_RST | EPCTRL_TX_ENABLE | (type << EPCTRL_RX_EP_TYPE_SHIFT) | (type << EPCTRL_TX_EP_TYPE_SHIFT); } /** * * Clkctrl * */ #define HW_CLKCTRL_BASE 0x80040000 #define HW_CLKCTRL_PLLCTRL0 (*(volatile uint32_t *)(HW_CLKCTRL_BASE + 0x0)) #define HW_CLKCTRL_PLLCTRL0__BYPASS (1 << 17) /* STMP3600 only */ #define HW_CLKCTRL_PLLCTRL0__POWER (1 << 16) #define HW_CLKCTRL_PLLCTRL0__EN_USB_CLKS (1 << 18) #define HW_CLKCTRL_PLLCTRL1 (*(volatile uint32_t *)(HW_CLKCTRL_BASE + 0x10)) #define HW_CLKCTRL_PLLCTRL1__LOCK (1 << 31) /* STMP3600 only */ #define HW_CLKCTRL_CPUCLKCTRL (*(volatile uint32_t *)(HW_CLKCTRL_BASE + 0x20)) #define HW_CLKCTRL_CPUCLKCTRL__DIV_BP 0 #define HW_CLKCTRL_CPUCLKCTRL__DIV_BM 0x3ff #define HW_CLKCTRL_CPUCLKCTRL__WAIT_PLL_LOCK (1 << 30) /* STMP3600 */ #define HW_CLKCTRL_HBUSCLKCTRL (*(volatile uint32_t *)(HW_CLKCTRL_BASE + 0x30)) /* STMP3600 only */ #define HW_CLKCTRL_XBUSCLKCTRL (*(volatile uint32_t *)(HW_CLKCTRL_BASE + 0x40)) #define HW_CLKCTRL_XBUSCLKCTRL__DIV_BP 0 #define HW_CLKCTRL_XBUSCLKCTRL__DIV_BM 0x3ff /* STMP3600 only */ #define HW_CLKCTRL_UTMICLKCTRL (*(volatile uint32_t *)(HW_CLKCTRL_BASE + 0x70)) #define HW_CLKCTRL_UTMICLKCTRL__UTMI_CLK30M_GATE (1 << 30) #define HW_CLKCTRL_UTMICLKCTRL__UTMI_CLK120M_GATE (1 << 31) /** * * Digctl * */ /* Digital control */ #define HW_DIGCTL_BASE 0x8001C000 #define HW_DIGCTL_CTRL (*(volatile uint32_t *)(HW_DIGCTL_BASE + 0)) #define HW_DIGCTL_CTRL__USB_CLKGATE (1 << 2) #define HW_DIGCTL_MICROSECONDS (*(volatile uint32_t *)(HW_DIGCTL_BASE + 0xC0)) #define HW_DIGCTL_CHIPID (*(volatile uint32_t *)(HW_DIGCTL_BASE + 0x310)) #define HW_DIGCTL_CHIPID__PRODUCT_CODE_BP 16 #define HW_DIGCTL_CHIPID__PRODUCT_CODE_BM 0xffff0000 #define HW_DIGCTL_CHIPID__REVISION_BP 0 #define HW_DIGCTL_CHIPID__REVISION_BM 0xff static bool imx233_us_elapsed(uint32_t ref, unsigned us_delay) { uint32_t cur = HW_DIGCTL_MICROSECONDS; if(ref + us_delay <= ref) return !(cur > ref) && !(cur < (ref + us_delay)); else return (cur < ref) || cur >= (ref + us_delay); } static void udelay(unsigned us) { uint32_t ref = HW_DIGCTL_MICROSECONDS; while(!imx233_us_elapsed(ref, us)); } #define HZ 1000000 /** * * USB PHY * */ /* USB Phy */ #define HW_USBPHY_BASE 0x8007C000 #define HW_USBPHY_PWD (*(volatile uint32_t *)(HW_USBPHY_BASE + 0)) #define HW_USBPHY_CTRL (*(volatile uint32_t *)(HW_USBPHY_BASE + 0x30)) /** * * DCP * */ #define HW_DCP_BASE 0x80028000 #define HW_DCP_CTRL (*(volatile unsigned long *)(HW_DCP_BASE + 0x0)) #define HW_DCP_STAT (*(volatile unsigned long *)(HW_DCP_BASE + 0x10)) #define HW_DCP_STAT__IRQ(x) (1 << (x)) #define HW_DCP_CHANNELCTRL (*(volatile unsigned long *)(HW_DCP_BASE + 0x20)) #define HW_DCP_CHANNELCTRL__ENABLE_CHANNEL(x) (1 << (x)) #define HW_DCP_CH0CMDPTR (*(volatile unsigned long *)(HW_DCP_BASE + 0x100)) #define HW_DCP_CH0SEMA (*(volatile unsigned long *)(HW_DCP_BASE + 0x110)) #define HW_DCP_CH0SEMA__INCREMENT(x) (x) #define HW_DCP_CH0SEMA__VALUE_BP 16 #define HW_DCP_CH0SEMA__VALUE_BM (0xff << 16) #define HW_DCP_CH0STAT (*(volatile unsigned long *)(HW_DCP_BASE + 0x120)) #define HW_DCP_CTRL0__INTERRUPT_ENABLE (1 << 0) #define HW_DCP_CTRL0__DECR_SEMAPHORE (1 << 1) #define HW_DCP_CTRL0__ENABLE_MEMCOPY (1 << 4) #define HW_DCP_CTRL0__ENABLE_CIPHER (1 << 5) #define HW_DCP_CTRL0__ENABLE_HASH (1 << 6) #define HW_DCP_CTRL0__CIPHER_ENCRYPT (1 << 8) #define HW_DCP_CTRL0__CIPHER_INIT (1 << 9) #define HW_DCP_CTRL0__OTP_KEY (1 << 10) #define HW_DCP_CTRL0__HASH_INIT (1 << 12) #define HW_DCP_CTRL0__HASH_TERM (1 << 13) #define HW_DCP_CTRL0__HASH_OUTPUT (1 << 15) #define HW_DCP_CTRL1__CIPHER_SELECT_BP 0 #define HW_DCP_CTRL1__CIPHER_SELECT_BM 0xf #define HW_DCP_CTRL1__CIPHER_SELECT__AES128 0 #define HW_DCP_CTRL1__CIPHER_MODE_BP 4 #define HW_DCP_CTRL1__CIPHER_MODE_BM 0xf0 #define HW_DCP_CTRL1__CIPHER_MODE__CBC (1 << 4) #define HW_DCP_CTRL1__HASH_SELECT_BP 4 #define HW_DCP_CTRL1__HASH_SELECT_BM 0xf00 struct dcp_packet_t { unsigned long next; unsigned long ctrl0; unsigned long ctrl1; unsigned long src_buf; unsigned long dst_buf; unsigned long buf_sz; unsigned long payload_ptr; unsigned long status; } __attribute__((packed)); /** * * Misc * */ void memcpy(void *dest, const void *src, size_t n); void memmove(void *dest, const void *src, size_t n); void memset(void *dst, int value, size_t n); /** * * USB stack * */ static struct usb_device_descriptor __attribute__((aligned(2))) device_descriptor= { .bLength = sizeof(struct usb_device_descriptor), .bDescriptorType = USB_DT_DEVICE, .bcdUSB = 0x0200, .bDeviceClass = USB_CLASS_PER_INTERFACE, .bDeviceSubClass = 0, .bDeviceProtocol = 0, .bMaxPacketSize0 = 64, .idVendor = HWSTUB_USB_VID, .idProduct = HWSTUB_USB_PID, .bcdDevice = HWSTUB_VERSION_MAJOR << 8 | HWSTUB_VERSION_MINOR, .iManufacturer = 1, .iProduct = 2, .iSerialNumber = 3, .bNumConfigurations = 1 }; #define USB_MAX_CURRENT 200 static struct usb_config_descriptor __attribute__((aligned(2))) config_descriptor = { .bLength = sizeof(struct usb_config_descriptor), .bDescriptorType = USB_DT_CONFIG, .wTotalLength = 0, /* will be filled in later */ .bNumInterfaces = 1, .bConfigurationValue = 1, .iConfiguration = 0, .bmAttributes = USB_CONFIG_ATT_ONE | USB_CONFIG_ATT_SELFPOWER, .bMaxPower = (USB_MAX_CURRENT + 1) / 2, /* In 2mA units */ }; /* main interface */ static struct usb_interface_descriptor __attribute__((aligned(2))) interface_descriptor = { .bLength = sizeof(struct usb_interface_descriptor), .bDescriptorType = USB_DT_INTERFACE, .bInterfaceNumber = 0, .bAlternateSetting = 0, .bNumEndpoints = 3, .bInterfaceClass = HWSTUB_CLASS, .bInterfaceSubClass = HWSTUB_SUBCLASS, .bInterfaceProtocol = HWSTUB_PROTOCOL, .iInterface = 4 }; static struct usb_endpoint_descriptor __attribute__((aligned(2))) endpoint_descriptor = { .bLength = sizeof(struct usb_endpoint_descriptor), .bDescriptorType = USB_DT_ENDPOINT, .bEndpointAddress = 0, .bmAttributes = USB_ENDPOINT_XFER_BULK, .wMaxPacketSize = 0, .bInterval = 0 }; static const struct usb_string_descriptor __attribute__((aligned(2))) usb_string_iManufacturer = { 24, USB_DT_STRING, {'R', 'o', 'c', 'k', 'b', 'o', 'x', '.', 'o', 'r', 'g'} }; static const struct usb_string_descriptor __attribute__((aligned(2))) usb_string_iProduct = { 52, USB_DT_STRING, {'R', 'o', 'c', 'k', 'b', 'o', 'x', ' ', 'h', 'a', 'r', 'd', 'w', 'a', 'r', 'e', ' ', 'e', 'm', 'u', 'l', 'a', 't', 'e', 'r'} }; static struct usb_string_descriptor __attribute__((aligned(2))) usb_string_iSerial = { 84, USB_DT_STRING, {'0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0', '0'} }; static struct usb_string_descriptor __attribute__((aligned(2))) usb_string_iInterface = { 28, USB_DT_STRING, {'A', 'c', 'i', 'd', ' ', '0' + (HWSTUB_VERSION_MAJOR >> 4), '0' + (HWSTUB_VERSION_MAJOR & 0xf), '.', '0' + (HWSTUB_VERSION_MINOR >> 4), '0' + (HWSTUB_VERSION_MINOR & 0xf), '.', '0' + (HWSTUB_VERSION_REV >> 4), '0' + (HWSTUB_VERSION_REV & 0xf) } }; /* this is stringid #0: languages supported */ static const struct usb_string_descriptor __attribute__((aligned(2))) lang_descriptor = { 4, USB_DT_STRING, {0x0409} /* LANGID US English */ }; #define USB_NUM_STRINGS 5 static const struct usb_string_descriptor* const usb_strings[USB_NUM_STRINGS] = { &lang_descriptor, &usb_string_iManufacturer, &usb_string_iProduct, &usb_string_iSerial, &usb_string_iInterface }; uint8_t *usb_buffer = oc_bufferstart; uint32_t usb_buffer_size = 0; #define EP_BULK 1 #define EP_INT 2 static void set_config(void) { usb_drv_configure_endpoint(EP_BULK, USB_ENDPOINT_XFER_BULK); usb_drv_configure_endpoint(EP_INT, USB_ENDPOINT_XFER_INT); } static void handle_std_dev_desc(struct usb_ctrlrequest *req) { int size; const void* ptr = NULL; unsigned index = req->wValue & 0xff; switch(req->wValue >> 8) { case USB_DT_DEVICE: ptr = &device_descriptor; size = sizeof(struct usb_device_descriptor); break; case USB_DT_OTHER_SPEED_CONFIG: case USB_DT_CONFIG: { int max_packet_size; /* config desc */ if((req->wValue >> 8) ==USB_DT_CONFIG) { max_packet_size = (usb_drv_port_speed() ? 512 : 64); config_descriptor.bDescriptorType = USB_DT_CONFIG; } else { max_packet_size=(usb_drv_port_speed() ? 64 : 512); config_descriptor.bDescriptorType = USB_DT_OTHER_SPEED_CONFIG; } size = sizeof(struct usb_config_descriptor); /* interface */ memcpy(usb_buffer + size, (void *)&interface_descriptor, sizeof(interface_descriptor)); size += sizeof(interface_descriptor); /* endpoint 1: bulk out */ endpoint_descriptor.bEndpointAddress = EP_BULK | USB_DIR_OUT; endpoint_descriptor.bmAttributes = USB_ENDPOINT_XFER_BULK; endpoint_descriptor.wMaxPacketSize = 512; memcpy(usb_buffer + size, (void *)&endpoint_descriptor, sizeof(endpoint_descriptor)); size += sizeof(endpoint_descriptor); /* endpoint 2: bulk in */ endpoint_descriptor.bEndpointAddress = EP_BULK | USB_DIR_IN; endpoint_descriptor.bmAttributes = USB_ENDPOINT_XFER_BULK; endpoint_descriptor.wMaxPacketSize = 512; memcpy(usb_buffer + size, (void *)&endpoint_descriptor, sizeof(endpoint_descriptor)); size += sizeof(endpoint_descriptor); /* endpoint 3: int in */ endpoint_descriptor.bEndpointAddress = EP_INT | USB_DIR_IN; endpoint_descriptor.bmAttributes = USB_ENDPOINT_XFER_INT; endpoint_descriptor.wMaxPacketSize = 1024; memcpy(usb_buffer + size, (void *)&endpoint_descriptor, sizeof(endpoint_descriptor)); size += sizeof(endpoint_descriptor); /* fix config descriptor */ config_descriptor.bNumInterfaces = 1; config_descriptor.wTotalLength = size; memcpy(usb_buffer, (void *)&config_descriptor, sizeof(config_descriptor)); ptr = usb_buffer; break; } case USB_DT_STRING: if(index < USB_NUM_STRINGS) { size = usb_strings[index]->bLength; ptr = usb_strings[index]; } else usb_drv_stall(EP_CONTROL, true, true); break; default: break; } if(ptr) { int length = MIN(size, req->wLength); if(ptr != usb_buffer) memcpy(usb_buffer, ptr, length); usb_drv_send(EP_CONTROL, usb_buffer, length); usb_drv_recv(EP_CONTROL, NULL, 0); } else usb_drv_stall(EP_CONTROL, true, true); } static void handle_std_dev_req(struct usb_ctrlrequest *req) { switch(req->bRequest) { case USB_REQ_GET_CONFIGURATION: usb_buffer[0] = 1; usb_drv_send(EP_CONTROL, usb_buffer, 1); usb_drv_recv(EP_CONTROL, NULL, 0); break; case USB_REQ_SET_CONFIGURATION: usb_drv_send(EP_CONTROL, NULL, 0); set_config(); break; case USB_REQ_GET_DESCRIPTOR: handle_std_dev_desc(req); break; case USB_REQ_SET_ADDRESS: usb_drv_send(EP_CONTROL, NULL, 0); usb_drv_set_address(req->wValue); break; case USB_REQ_GET_STATUS: usb_buffer[0] = 0; usb_buffer[1] = 0; usb_drv_send(EP_CONTROL, usb_buffer, 2); usb_drv_recv(EP_CONTROL, NULL, 0); break; default: usb_drv_stall(EP_CONTROL, true, true); } } static void handle_std_req(struct usb_ctrlrequest *req) { switch(req->bRequestType & USB_RECIP_MASK) { case USB_RECIP_DEVICE: return handle_std_dev_req(req); default: usb_drv_stall(EP_CONTROL, true, true); } } struct usb_resp_info_version_t g_version = { .major = HWSTUB_VERSION_MAJOR, .minor = HWSTUB_VERSION_MINOR, .revision = HWSTUB_VERSION_REV }; struct usb_resp_info_layout_t g_layout; struct usb_resp_info_stmp_t g_stmp; struct usb_resp_info_features_t g_features = { .feature_mask = HWSTUB_FEATURE_LOG | HWSTUB_FEATURE_MEM | HWSTUB_FEATURE_CALL | HWSTUB_FEATURE_JUMP | HWSTUB_FEATURE_AES_OTP }; static void fill_layout_info(void) { g_layout.oc_code_start = (uint32_t)oc_codestart; g_layout.oc_code_size = oc_codesize; g_layout.oc_stack_start = (uint32_t)oc_stackstart; g_layout.oc_stack_size = oc_stacksize; g_layout.oc_buffer_start = (uint32_t)oc_bufferstart; g_layout.oc_buffer_size = oc_buffersize; } static void fill_stmp_info(void) { g_stmp.chipid = __XTRACT(HW_DIGCTL_CHIPID, PRODUCT_CODE); g_stmp.rev = __XTRACT(HW_DIGCTL_CHIPID, REVISION); g_stmp.is_supported = g_stmp.chipid == 0x3780 || g_stmp.chipid == 0x3700 || g_stmp.chipid == 0x3b00; } static void handle_get_info(struct usb_ctrlrequest *req) { void *ptr = NULL; int size = 0; switch(req->wIndex) { case HWSTUB_INFO_VERSION: ptr = &g_version; size = sizeof(g_version); break; case HWSTUB_INFO_LAYOUT: fill_layout_info(); ptr = &g_layout; size = sizeof(g_layout); break; case HWSTUB_INFO_STMP: fill_stmp_info(); ptr = &g_stmp; size = sizeof(g_stmp); break; case HWSTUB_INFO_FEATURES: ptr = &g_features; size = sizeof(g_features); break; default: usb_drv_stall(EP_CONTROL, true, true); } if(ptr) { int length = MIN(size, req->wLength); if(ptr != usb_buffer) memcpy(usb_buffer, ptr, length); usb_drv_send(EP_CONTROL, usb_buffer, length); usb_drv_recv(EP_CONTROL, NULL, 0); } } static void handle_get_log(struct usb_ctrlrequest *req) { enable_logf(false); int length = logf_readback(usb_buffer, MIN(req->wLength, usb_buffer_size)); usb_drv_send(EP_CONTROL, usb_buffer, length); usb_drv_recv(EP_CONTROL, NULL, 0); enable_logf(true); } static void handle_rw_mem(struct usb_ctrlrequest *req) { uint32_t addr = req->wValue | req->wIndex << 16; uint16_t length = req->wLength; if(req->bRequestType & USB_DIR_IN) { memcpy(usb_buffer, (void *)addr, length); asm volatile("nop" : : : "memory"); usb_drv_send(EP_CONTROL, usb_buffer, length); usb_drv_recv(EP_CONTROL, NULL, 0); } else { int size = usb_drv_recv(EP_CONTROL, usb_buffer, length); asm volatile("nop" : : : "memory"); if(size != length) usb_drv_stall(EP_CONTROL, true, true); else { memcpy((void *)addr, usb_buffer, length); usb_drv_send(EP_CONTROL, NULL, 0); } } } static void handle_call_jump(struct usb_ctrlrequest *req) { uint32_t addr = req->wValue | req->wIndex << 16; if(req->bRequest == HWSTUB_CALL) ((void (*)(void))addr)(); else { /* disconnect to make sure usb/dma won't interfere */ REG_USBCMD &= ~USBCMD_RUN; REG_USBCMD |= USBCMD_CTRL_RESET; asm volatile("bx %0\n" : : "r" (addr) : "memory"); } } static void do_aes_otp(void *buffer, unsigned length, unsigned params) { static struct dcp_packet_t dcp_packet; bool encrypt = !!(params & HWSTUB_AES_OTP_ENCRYPT); /* reset DCP */ __REG_SET(HW_DCP_CTRL) = 0x80000000; /* clear clock gate */ __REG_CLR(HW_DCP_CTRL) = 0xc0000000; /* enable dma for channel 0 */ __REG_SET(HW_DCP_CHANNELCTRL) = HW_DCP_CHANNELCTRL__ENABLE_CHANNEL(0); /* prepare packet */ dcp_packet.next = 0; dcp_packet.ctrl0 = HW_DCP_CTRL0__INTERRUPT_ENABLE | HW_DCP_CTRL0__DECR_SEMAPHORE | HW_DCP_CTRL0__CIPHER_INIT | HW_DCP_CTRL0__ENABLE_CIPHER | HW_DCP_CTRL0__OTP_KEY | (encrypt ? HW_DCP_CTRL0__CIPHER_ENCRYPT : 0); dcp_packet.ctrl1 = HW_DCP_CTRL1__CIPHER_SELECT__AES128 | HW_DCP_CTRL1__CIPHER_MODE__CBC; dcp_packet.src_buf = (unsigned long)buffer + 16; dcp_packet.dst_buf = (unsigned long)buffer + 16; dcp_packet.buf_sz = length - 16; dcp_packet.payload_ptr = (unsigned long)buffer; dcp_packet.status = 0; asm volatile("":::"memory"); /* kick */ HW_DCP_CH0CMDPTR = (unsigned long)&dcp_packet; HW_DCP_CH0SEMA = HW_DCP_CH0SEMA__INCREMENT(1); /* wait */ while(!(HW_DCP_STAT & HW_DCP_STAT__IRQ(0))); usb_drv_send_nonblocking(EP_INT, buffer, length); } static void handle_aes_otp(struct usb_ctrlrequest *req) { uint16_t length = req->wLength; int size = usb_drv_recv(EP_CONTROL, usb_buffer, length); if(size != length) usb_drv_stall(EP_CONTROL, true, true); else usb_drv_send(EP_CONTROL, NULL, 0); do_aes_otp(usb_buffer, length, req->wValue); } static void handle_class_dev_req(struct usb_ctrlrequest *req) { switch(req->bRequest) { case HWSTUB_GET_INFO: handle_get_info(req); break; case HWSTUB_GET_LOG: handle_get_log(req); break; case HWSTUB_RW_MEM: handle_rw_mem(req); break; case HWSTUB_CALL: case HWSTUB_JUMP: handle_call_jump(req); break; case HWSTUB_AES_OTP: handle_aes_otp(req); break; default: usb_drv_stall(EP_CONTROL, true, true); } } static void handle_class_req(struct usb_ctrlrequest *req) { switch(req->bRequestType & USB_RECIP_MASK) { case USB_RECIP_DEVICE: return handle_class_dev_req(req); default: usb_drv_stall(EP_CONTROL, true, true); } } /** * * Main * */ void main(uint32_t arg) { usb_buffer_size = oc_buffersize; logf("hwstub %d.%d.%d\n", HWSTUB_VERSION_MAJOR, HWSTUB_VERSION_MINOR, HWSTUB_VERSION_REV); logf("argument: 0x%08x\n", arg); /* detect family */ uint16_t product_code = __XTRACT(HW_DIGCTL_CHIPID, PRODUCT_CODE); if(product_code >= 0x3600 && product_code < 0x3700) { logf("identified STMP3600 family\n"); g_stmp_family = STMP3600; } else if(product_code == 0x3700) { logf("identified STMP3700 family\n"); g_stmp_family = STMP3700; } else if(product_code == 0x37b0) { logf("identified STMP3770 family\n"); g_stmp_family = STMP3770; } else if(product_code == 0x3780) { logf("identified STMP3780 family\n"); g_stmp_family = STMP3780; } else logf("cannot identify family: 0x%x\n", product_code); /* we don't know if USB was connected or not. In USB recovery mode it will * but in other cases it might not be. In doubt, disconnect */ REG_USBCMD &= ~USBCMD_RUN; if(g_stmp_family == STMP3600) { /* CPU clock is always derived from PLL, if we switch to PLL, cpu will * run at 480 MHz unprepared ! That's bad so prepare to run at slow sleed * (1.2MHz) for a safe transition */ HW_CLKCTRL_CPUCLKCTRL = HW_CLKCTRL_CPUCLKCTRL__WAIT_PLL_LOCK | 400; /* We need to ensure that XBUS < HBUS but HBUS will be 1.2 MHz after the * switch so lower XBUS too */ HW_CLKCTRL_XBUSCLKCTRL = 20; /* Power PLL */ __REG_SET(HW_CLKCTRL_PLLCTRL0) = HW_CLKCTRL_PLLCTRL0__POWER; HW_CLKCTRL_PLLCTRL0 = (HW_CLKCTRL_PLLCTRL0 & ~0x3ff) | 480; /* Wait lock */ while(!(HW_CLKCTRL_PLLCTRL1 & HW_CLKCTRL_PLLCTRL1__LOCK)); /* Switch to PLL source */ __REG_CLR(HW_CLKCTRL_PLLCTRL0) = HW_CLKCTRL_PLLCTRL0__BYPASS; /* Get back XBUS = 24 MHz and CPU = HBUS = 64MHz */ HW_CLKCTRL_CPUCLKCTRL = 7; HW_CLKCTRL_HBUSCLKCTRL = 7; HW_CLKCTRL_XBUSCLKCTRL = 1; __REG_CLR(HW_CLKCTRL_UTMICLKCTRL) = HW_CLKCTRL_UTMICLKCTRL__UTMI_CLK120M_GATE; __REG_CLR(HW_CLKCTRL_UTMICLKCTRL) = HW_CLKCTRL_UTMICLKCTRL__UTMI_CLK30M_GATE; } else __REG_SET(HW_CLKCTRL_PLLCTRL0) = HW_CLKCTRL_PLLCTRL0__POWER; /* enable USB PHY PLL */ __REG_SET(HW_CLKCTRL_PLLCTRL0) = HW_CLKCTRL_PLLCTRL0__EN_USB_CLKS; /* power up USB PHY */ __REG_CLR(HW_USBPHY_CTRL) = __BLOCK_CLKGATE | __BLOCK_SFTRST; HW_USBPHY_PWD = 0; /* enable USB controller */ __REG_CLR(HW_DIGCTL_CTRL) = HW_DIGCTL_CTRL__USB_CLKGATE; /* reset the controller */ REG_USBCMD |= USBCMD_CTRL_RESET; while (REG_USBCMD & USBCMD_CTRL_RESET); /* put it in device mode */ REG_USBMODE = USBMODE_CTRL_MODE_DEVICE; /* reset address */ REG_DEVICEADDR = 0; /* prepare qh array */ qh_array[0].max_pkt_length = 1 << 29 | MAX_PKT_SIZE_EP0 << 16; qh_array[1].max_pkt_length = 1 << 29 | MAX_PKT_SIZE_EP0 << 16; qh_array[2].max_pkt_length = 1 << 29 | MAX_PKT_SIZE << 16; qh_array[3].max_pkt_length = 1 << 29 | MAX_PKT_SIZE << 16; /* setup qh */ REG_ENDPOINTLISTADDR = (unsigned int)qh_array; /* clear setup status */ REG_ENDPTSETUPSTAT = EPSETUP_STATUS_EP0; /* run! */ REG_USBCMD |= USBCMD_RUN; while(1) { /* wait for setup */ while(!(REG_ENDPTSETUPSTAT & EPSETUP_STATUS_EP0)) ; /* clear setup status */ REG_ENDPTSETUPSTAT = EPSETUP_STATUS_EP0; /* check request */ asm volatile("":::"memory"); struct usb_ctrlrequest *req = (void *)&qh_array[0].setup_buffer[0]; switch(req->bRequestType & USB_TYPE_MASK) { case USB_TYPE_STANDARD: handle_std_req(req); break; case USB_TYPE_CLASS: handle_class_req(req); break; default: usb_drv_stall(EP_CONTROL, true, true); } } }