buspirate_spi.c 8.52 KB
Newer Older
1 2 3
/*
 * This file is part of the flashrom project.
 *
4
 * Copyright (C) 2009, 2010 Carl-Daniel Hailfinger
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; version 2 of the License.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301 USA
 */

#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <ctype.h>
24
#include <unistd.h>
25
#include "flash.h"
26
#include "programmer.h"
27 28 29 30 31
#include "spi.h"

/* Change this to #define if you want to test without a serial implementation */
#undef FAKE_COMMUNICATION

32 33 34 35 36
struct buspirate_spispeeds {
	const char *name;
	const int speed;
};

37
#ifndef FAKE_COMMUNICATION
38
static int buspirate_serialport_setup(char *dev)
39 40 41 42 43 44 45
{
	/* 115200bps, 8 databits, no parity, 1 stopbit */
	sp_fd = sp_openserport(dev, 115200);
	return 0;
}
#else
#define buspirate_serialport_setup(...) 0
46
#define serialport_shutdown(...) 0
47 48
#define serialport_write(...) 0
#define serialport_read(...) 0
Patrick Georgi's avatar
Patrick Georgi committed
49
#define sp_flush_incoming(...) 0
50 51
#endif

52 53
static int buspirate_sendrecv(unsigned char *buf, unsigned int writecnt,
			      unsigned int readcnt)
54 55 56
{
	int i, ret = 0;

57
	msg_pspew("%s: write %i, read %i ", __func__, writecnt, readcnt);
58
	if (!writecnt && !readcnt) {
59
		msg_perr("Zero length command!\n");
60 61
		return 1;
	}
62
	msg_pspew("Sending");
63
	for (i = 0; i < writecnt; i++)
64
		msg_pspew(" 0x%02x", buf[i]);
65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81
#ifdef FAKE_COMMUNICATION
	/* Placate the caller for now. */
	if (readcnt) {
		buf[0] = 0x01;
		memset(buf + 1, 0xff, readcnt - 1);
	}
	ret = 0;
#else
	if (writecnt)
		ret = serialport_write(buf, writecnt);
	if (ret)
		return ret;
	if (readcnt)
		ret = serialport_read(buf, readcnt);
	if (ret)
		return ret;
#endif
82
	msg_pspew(", receiving");
83
	for (i = 0; i < readcnt; i++)
84 85
		msg_pspew(" 0x%02x", buf[i]);
	msg_pspew("\n");
86 87 88
	return 0;
}

89 90 91 92 93
static int buspirate_spi_send_command(struct flashctx *flash,
				      unsigned int writecnt,
				      unsigned int readcnt,
				      const unsigned char *writearr,
				      unsigned char *readarr);
94 95

static const struct spi_programmer spi_programmer_buspirate = {
96 97 98 99 100 101 102
	.type		= SPI_CONTROLLER_BUSPIRATE,
	.max_data_read	= 12,
	.max_data_write	= 12,
	.command	= buspirate_spi_send_command,
	.multicommand	= default_spi_send_multicommand,
	.read		= default_spi_read,
	.write_256	= default_spi_write_256,
103 104
};

105 106 107 108 109 110 111 112 113
static const struct buspirate_spispeeds spispeeds[] = {
	{"30k",		0x0},
	{"125k",	0x1},
	{"250k",	0x2},
	{"1M",		0x3},
	{"2M",		0x4},
	{"2.6M",	0x5},
	{"4M",		0x6},
	{"8M",		0x7},
114
	{NULL,		0x0},
115 116
};

117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151
static int buspirate_spi_shutdown(void *data)
{
	unsigned char buf[5];
	int ret = 0;

	/* Exit raw SPI mode (enter raw bitbang mode) */
	buf[0] = 0x00;
	ret = buspirate_sendrecv(buf, 1, 5);
	if (ret)
		return ret;
	if (memcmp(buf, "BBIO", 4)) {
		msg_perr("Entering raw bitbang mode failed!\n");
		return 1;
	}
	msg_pdbg("Raw bitbang mode version %c\n", buf[4]);
	if (buf[4] != '1') {
		msg_perr("Can't handle raw bitbang mode version %c!\n",
			buf[4]);
		return 1;
	}
	/* Reset Bus Pirate (return to user terminal) */
	buf[0] = 0x0f;
	ret = buspirate_sendrecv(buf, 1, 0);
	if (ret)
		return ret;

	/* Shut down serial port communication */
	ret = serialport_shutdown(NULL);
	if (ret)
		return ret;
	msg_pdbg("Bus Pirate shutdown completed.\n");

	return 0;
}

152 153 154 155
int buspirate_spi_init(void)
{
	unsigned char buf[512];
	char *dev = NULL;
156
	char *speed = NULL;
Carl-Daniel Hailfinger's avatar
Carl-Daniel Hailfinger committed
157 158 159
	int spispeed = 0x7;
	int ret = 0;
	int i;
160

161
	dev = extract_programmer_param("dev");
162
	if (!dev || !strlen(dev)) {
163
		msg_perr("No serial device given. Use flashrom -p "
164
			"buspirate_spi:dev=/dev/ttyUSB0\n");
165 166
		return 1;
	}
167

168
	speed = extract_programmer_param("spispeed");
169 170 171 172 173 174 175 176
	if (speed) {
		for (i = 0; spispeeds[i].name; i++)
			if (!strncasecmp(spispeeds[i].name, speed,
			    strlen(spispeeds[i].name))) {
				spispeed = spispeeds[i].speed;
				break;
			}
		if (!spispeeds[i].name)
177
			msg_perr("Invalid SPI speed, using default.\n");
178
	}
179 180
	free(speed);

181
	/* This works because speeds numbering starts at 0 and is contiguous. */
182
	msg_pdbg("SPI speed is %sHz\n", spispeeds[spispeed].name);
183 184 185 186

	ret = buspirate_serialport_setup(dev);
	if (ret)
		return ret;
187
	free(dev);
188

189 190 191
	if (register_shutdown(buspirate_spi_shutdown, NULL))
		return 1;

192 193 194 195 196 197 198 199 200
	/* This is the brute force version, but it should work. */
	for (i = 0; i < 19; i++) {
		/* Enter raw bitbang mode */
		buf[0] = 0x00;
		/* Send the command, don't read the response. */
		ret = buspirate_sendrecv(buf, 1, 0);
		if (ret)
			return ret;
		/* Read any response and discard it. */
Patrick Georgi's avatar
Patrick Georgi committed
201
		sp_flush_incoming();
202
	}
203 204 205 206 207 208
	/* USB is slow. The Bus Pirate is even slower. Apparently the flush
	 * action above is too fast or too early. Some stuff still remains in
	 * the pipe after the flush above, and one additional flush is not
	 * sufficient either. Use a 1.5 ms delay inside the loop to make
	 * mostly sure that at least one USB frame had time to arrive.
	 * Looping only 5 times is not sufficient and causes the
209
	 * occasional failure.
210 211 212 213 214 215 216
	 * Folding the delay into the loop above is not reliable either.
	 */
	for (i = 0; i < 10; i++) {
		usleep(1500);
		/* Read any response and discard it. */
		sp_flush_incoming();
	}
217 218 219 220 221 222
	/* Enter raw bitbang mode */
	buf[0] = 0x00;
	ret = buspirate_sendrecv(buf, 1, 5);
	if (ret)
		return ret;
	if (memcmp(buf, "BBIO", 4)) {
223
		msg_perr("Entering raw bitbang mode failed!\n");
224 225
		msg_pdbg("Got %02x%02x%02x%02x%02x\n",
			 buf[0], buf[1], buf[2], buf[3], buf[4]);
226 227
		return 1;
	}
228
	msg_pdbg("Raw bitbang mode version %c\n", buf[4]);
229
	if (buf[4] != '1') {
230
		msg_perr("Can't handle raw bitbang mode version %c!\n",
231 232 233 234 235 236
			buf[4]);
		return 1;
	}
	/* Enter raw SPI mode */
	buf[0] = 0x01;
	ret = buspirate_sendrecv(buf, 1, 4);
237 238
	if (ret)
		return ret;
239
	if (memcmp(buf, "SPI", 3)) {
240
		msg_perr("Entering raw SPI mode failed!\n");
241 242
		msg_pdbg("Got %02x%02x%02x%02x\n",
			 buf[0], buf[1], buf[2], buf[3]);
243 244
		return 1;
	}
245
	msg_pdbg("Raw SPI mode version %c\n", buf[3]);
246
	if (buf[3] != '1') {
247
		msg_perr("Can't handle raw SPI mode version %c!\n",
248 249 250 251 252 253 254 255 256 257
			buf[3]);
		return 1;
	}

	/* Initial setup (SPI peripherals config): Enable power, CS high, AUX */
	buf[0] = 0x40 | 0xb;
	ret = buspirate_sendrecv(buf, 1, 1);
	if (ret)
		return 1;
	if (buf[0] != 0x01) {
258
		msg_perr("Protocol error while setting power/CS/AUX!\n");
259 260 261
		return 1;
	}

262 263
	/* Set SPI speed */
	buf[0] = 0x60 | spispeed;
264 265 266 267
	ret = buspirate_sendrecv(buf, 1, 1);
	if (ret)
		return 1;
	if (buf[0] != 0x01) {
268
		msg_perr("Protocol error while setting SPI speed!\n");
269 270 271 272 273 274 275 276 277
		return 1;
	}
	
	/* Set SPI config: output type, idle, clock edge, sample */
	buf[0] = 0x80 | 0xa;
	ret = buspirate_sendrecv(buf, 1, 1);
	if (ret)
		return 1;
	if (buf[0] != 0x01) {
278
		msg_perr("Protocol error while setting SPI config!\n");
279 280 281 282 283 284 285 286 287
		return 1;
	}

	/* De-assert CS# */
	buf[0] = 0x03;
	ret = buspirate_sendrecv(buf, 1, 1);
	if (ret)
		return 1;
	if (buf[0] != 0x01) {
288
		msg_perr("Protocol error while raising CS#!\n");
289 290 291
		return 1;
	}

292
	register_spi_programmer(&spi_programmer_buspirate);
293 294 295 296

	return 0;
}

297 298 299 300 301
static int buspirate_spi_send_command(struct flashctx *flash,
				      unsigned int writecnt,
				      unsigned int readcnt,
				      const unsigned char *writearr,
				      unsigned char *readarr)
302 303
{
	static unsigned char *buf = NULL;
304 305
	unsigned int i = 0;
	int ret = 0;
306 307 308 309

	if (writecnt > 16 || readcnt > 16 || (readcnt + writecnt) > 16)
		return SPI_INVALID_LENGTH;

310 311
	/* 3 bytes extra for CS#, len, CS#. */
	buf = realloc(buf, writecnt + readcnt + 3);
312
	if (!buf) {
313
		msg_perr("Out of memory!\n");
314 315 316 317 318 319 320 321 322 323
		exit(1); // -1
	}

	/* Assert CS# */
	buf[i++] = 0x02;

	buf[i++] = 0x10 | (writecnt + readcnt - 1);
	memcpy(buf + i, writearr, writecnt);
	i += writecnt;
	memset(buf + i, 0, readcnt);
324 325 326 327 328 329 330 331 332

	i += readcnt;
	/* De-assert CS# */
	buf[i++] = 0x03;

	ret = buspirate_sendrecv(buf, i, i);

	if (ret) {
		msg_perr("Bus Pirate communication error!\n");
333
		return SPI_GENERIC_ERROR;
334 335
	}

336
	if (buf[0] != 0x01) {
337
		msg_perr("Protocol error while lowering CS#!\n");
338 339 340
		return SPI_GENERIC_ERROR;
	}

341 342
	if (buf[1] != 0x01) {
		msg_perr("Protocol error while reading/writing SPI!\n");
343
		return SPI_GENERIC_ERROR;
344 345 346
	}

	if (buf[i - 1] != 0x01) {
347
		msg_perr("Protocol error while raising CS#!\n");
348 349 350
		return SPI_GENERIC_ERROR;
	}

351 352 353
	/* Skip CS#, length, writearr. */
	memcpy(readarr, buf + 2 + writecnt, readcnt);

354 355
	return ret;
}