xref: /qemu/hw/input/tsc210x.c (revision 7a4e543d)
1 /*
2  * TI TSC2102 (touchscreen/sensors/audio controller) emulator.
3  * TI TSC2301 (touchscreen/sensors/keypad).
4  *
5  * Copyright (c) 2006 Andrzej Zaborowski  <balrog@zabor.org>
6  * Copyright (C) 2008 Nokia Corporation
7  *
8  * This program is free software; you can redistribute it and/or
9  * modify it under the terms of the GNU General Public License as
10  * published by the Free Software Foundation; either version 2 or
11  * (at your option) version 3 of the License.
12  *
13  * This program is distributed in the hope that it will be useful,
14  * but WITHOUT ANY WARRANTY; without even the implied warranty of
15  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
16  * GNU General Public License for more details.
17  *
18  * You should have received a copy of the GNU General Public License along
19  * with this program; if not, see <http://www.gnu.org/licenses/>.
20  */
21 
22 #include "qemu/osdep.h"
23 #include "hw/hw.h"
24 #include "audio/audio.h"
25 #include "qemu/timer.h"
26 #include "ui/console.h"
27 #include "hw/arm/omap.h"	/* For I2SCodec and uWireSlave */
28 #include "hw/devices.h"
29 
30 #define TSC_DATA_REGISTERS_PAGE		0x0
31 #define TSC_CONTROL_REGISTERS_PAGE	0x1
32 #define TSC_AUDIO_REGISTERS_PAGE	0x2
33 
34 #define TSC_VERBOSE
35 
36 #define TSC_CUT_RESOLUTION(value, p)	((value) >> (16 - resolution[p]))
37 
38 typedef struct {
39     qemu_irq pint;
40     qemu_irq kbint;
41     qemu_irq davint;
42     QEMUTimer *timer;
43     QEMUSoundCard card;
44     uWireSlave chip;
45     I2SCodec codec;
46     uint8_t in_fifo[16384];
47     uint8_t out_fifo[16384];
48     uint16_t model;
49 
50     int x, y;
51     int pressure;
52 
53     int state, page, offset, irq;
54     uint16_t command, dav;
55 
56     int busy;
57     int enabled;
58     int host_mode;
59     int function;
60     int nextfunction;
61     int precision;
62     int nextprecision;
63     int filter;
64     int pin_func;
65     int ref;
66     int timing;
67     int noise;
68 
69     uint16_t audio_ctrl1;
70     uint16_t audio_ctrl2;
71     uint16_t audio_ctrl3;
72     uint16_t pll[3];
73     uint16_t volume;
74     int64_t volume_change;
75     int softstep;
76     uint16_t dac_power;
77     int64_t powerdown;
78     uint16_t filter_data[0x14];
79 
80     const char *name;
81     SWVoiceIn *adc_voice[1];
82     SWVoiceOut *dac_voice[1];
83     int i2s_rx_rate;
84     int i2s_tx_rate;
85 
86     int tr[8];
87 
88     struct {
89         uint16_t down;
90         uint16_t mask;
91         int scan;
92         int debounce;
93         int mode;
94         int intr;
95     } kb;
96 } TSC210xState;
97 
98 static const int resolution[4] = { 12, 8, 10, 12 };
99 
100 #define TSC_MODE_NO_SCAN	0x0
101 #define TSC_MODE_XY_SCAN	0x1
102 #define TSC_MODE_XYZ_SCAN	0x2
103 #define TSC_MODE_X		0x3
104 #define TSC_MODE_Y		0x4
105 #define TSC_MODE_Z		0x5
106 #define TSC_MODE_BAT1		0x6
107 #define TSC_MODE_BAT2		0x7
108 #define TSC_MODE_AUX		0x8
109 #define TSC_MODE_AUX_SCAN	0x9
110 #define TSC_MODE_TEMP1		0xa
111 #define TSC_MODE_PORT_SCAN	0xb
112 #define TSC_MODE_TEMP2		0xc
113 #define TSC_MODE_XX_DRV		0xd
114 #define TSC_MODE_YY_DRV		0xe
115 #define TSC_MODE_YX_DRV		0xf
116 
117 static const uint16_t mode_regs[16] = {
118     0x0000,	/* No scan */
119     0x0600,	/* X, Y scan */
120     0x0780,	/* X, Y, Z scan */
121     0x0400,	/* X */
122     0x0200,	/* Y */
123     0x0180,	/* Z */
124     0x0040,	/* BAT1 */
125     0x0030,	/* BAT2 */
126     0x0010,	/* AUX */
127     0x0010,	/* AUX scan */
128     0x0004,	/* TEMP1 */
129     0x0070,	/* Port scan */
130     0x0002,	/* TEMP2 */
131     0x0000,	/* X+, X- drivers */
132     0x0000,	/* Y+, Y- drivers */
133     0x0000,	/* Y+, X- drivers */
134 };
135 
136 #define X_TRANSFORM(s)			\
137     ((s->y * s->tr[0] - s->x * s->tr[1]) / s->tr[2] + s->tr[3])
138 #define Y_TRANSFORM(s)			\
139     ((s->y * s->tr[4] - s->x * s->tr[5]) / s->tr[6] + s->tr[7])
140 #define Z1_TRANSFORM(s)			\
141     ((400 - ((s)->x >> 7) + ((s)->pressure << 10)) << 4)
142 #define Z2_TRANSFORM(s)			\
143     ((4000 + ((s)->y >> 7) - ((s)->pressure << 10)) << 4)
144 
145 #define BAT1_VAL			0x8660
146 #define BAT2_VAL			0x0000
147 #define AUX1_VAL			0x35c0
148 #define AUX2_VAL			0xffff
149 #define TEMP1_VAL			0x8c70
150 #define TEMP2_VAL			0xa5b0
151 
152 #define TSC_POWEROFF_DELAY		50
153 #define TSC_SOFTSTEP_DELAY		50
154 
155 static void tsc210x_reset(TSC210xState *s)
156 {
157     s->state = 0;
158     s->pin_func = 2;
159     s->enabled = 0;
160     s->busy = 0;
161     s->nextfunction = 0;
162     s->ref = 0;
163     s->timing = 0;
164     s->irq = 0;
165     s->dav = 0;
166 
167     s->audio_ctrl1 = 0x0000;
168     s->audio_ctrl2 = 0x4410;
169     s->audio_ctrl3 = 0x0000;
170     s->pll[0] = 0x1004;
171     s->pll[1] = 0x0000;
172     s->pll[2] = 0x1fff;
173     s->volume = 0xffff;
174     s->dac_power = 0x8540;
175     s->softstep = 1;
176     s->volume_change = 0;
177     s->powerdown = 0;
178     s->filter_data[0x00] = 0x6be3;
179     s->filter_data[0x01] = 0x9666;
180     s->filter_data[0x02] = 0x675d;
181     s->filter_data[0x03] = 0x6be3;
182     s->filter_data[0x04] = 0x9666;
183     s->filter_data[0x05] = 0x675d;
184     s->filter_data[0x06] = 0x7d83;
185     s->filter_data[0x07] = 0x84ee;
186     s->filter_data[0x08] = 0x7d83;
187     s->filter_data[0x09] = 0x84ee;
188     s->filter_data[0x0a] = 0x6be3;
189     s->filter_data[0x0b] = 0x9666;
190     s->filter_data[0x0c] = 0x675d;
191     s->filter_data[0x0d] = 0x6be3;
192     s->filter_data[0x0e] = 0x9666;
193     s->filter_data[0x0f] = 0x675d;
194     s->filter_data[0x10] = 0x7d83;
195     s->filter_data[0x11] = 0x84ee;
196     s->filter_data[0x12] = 0x7d83;
197     s->filter_data[0x13] = 0x84ee;
198 
199     s->i2s_tx_rate = 0;
200     s->i2s_rx_rate = 0;
201 
202     s->kb.scan = 1;
203     s->kb.debounce = 0;
204     s->kb.mask = 0x0000;
205     s->kb.mode = 3;
206     s->kb.intr = 0;
207 
208     qemu_set_irq(s->pint, !s->irq);
209     qemu_set_irq(s->davint, !s->dav);
210     qemu_irq_raise(s->kbint);
211 }
212 
213 typedef struct {
214     int rate;
215     int dsor;
216     int fsref;
217 } TSC210xRateInfo;
218 
219 /*  { rate,   dsor, fsref }	*/
220 static const TSC210xRateInfo tsc2102_rates[] = {
221     /* Fsref / 6.0 */
222     { 7350,	63,	1 },
223     { 8000,	63,	0 },
224     /* Fsref / 6.0 */
225     { 7350,	54,	1 },
226     { 8000,	54,	0 },
227     /* Fsref / 5.0 */
228     { 8820,	45,	1 },
229     { 9600,	45,	0 },
230     /* Fsref / 4.0 */
231     { 11025,	36,	1 },
232     { 12000,	36,	0 },
233     /* Fsref / 3.0 */
234     { 14700,	27,	1 },
235     { 16000,	27,	0 },
236     /* Fsref / 2.0 */
237     { 22050,	18,	1 },
238     { 24000,	18,	0 },
239     /* Fsref / 1.5 */
240     { 29400,	9,	1 },
241     { 32000,	9,	0 },
242     /* Fsref */
243     { 44100,	0,	1 },
244     { 48000,	0,	0 },
245 
246     { 0,	0, 	0 },
247 };
248 
249 static inline void tsc210x_out_flush(TSC210xState *s, int len)
250 {
251     uint8_t *data = s->codec.out.fifo + s->codec.out.start;
252     uint8_t *end = data + len;
253 
254     while (data < end)
255         data += AUD_write(s->dac_voice[0], data, end - data) ?: (end - data);
256 
257     s->codec.out.len -= len;
258     if (s->codec.out.len)
259         memmove(s->codec.out.fifo, end, s->codec.out.len);
260     s->codec.out.start = 0;
261 }
262 
263 static void tsc210x_audio_out_cb(TSC210xState *s, int free_b)
264 {
265     if (s->codec.out.len >= free_b) {
266         tsc210x_out_flush(s, free_b);
267         return;
268     }
269 
270     s->codec.out.size = MIN(free_b, 16384);
271     qemu_irq_raise(s->codec.tx_start);
272 }
273 
274 static void tsc2102_audio_rate_update(TSC210xState *s)
275 {
276     const TSC210xRateInfo *rate;
277 
278     s->codec.tx_rate = 0;
279     s->codec.rx_rate = 0;
280     if (s->dac_power & (1 << 15))				/* PWDNC */
281         return;
282 
283     for (rate = tsc2102_rates; rate->rate; rate ++)
284         if (rate->dsor == (s->audio_ctrl1 & 0x3f) &&		/* DACFS */
285                         rate->fsref == ((s->audio_ctrl3 >> 13) & 1))/* REFFS */
286             break;
287     if (!rate->rate) {
288         printf("%s: unknown sampling rate configured\n", __FUNCTION__);
289         return;
290     }
291 
292     s->codec.tx_rate = rate->rate;
293 }
294 
295 static void tsc2102_audio_output_update(TSC210xState *s)
296 {
297     int enable;
298     struct audsettings fmt;
299 
300     if (s->dac_voice[0]) {
301         tsc210x_out_flush(s, s->codec.out.len);
302         s->codec.out.size = 0;
303         AUD_set_active_out(s->dac_voice[0], 0);
304         AUD_close_out(&s->card, s->dac_voice[0]);
305         s->dac_voice[0] = NULL;
306     }
307     s->codec.cts = 0;
308 
309     enable =
310             (~s->dac_power & (1 << 15)) &&			/* PWDNC */
311             (~s->dac_power & (1 << 10));			/* DAPWDN */
312     if (!enable || !s->codec.tx_rate)
313         return;
314 
315     /* Force our own sampling rate even in slave DAC mode */
316     fmt.endianness = 0;
317     fmt.nchannels = 2;
318     fmt.freq = s->codec.tx_rate;
319     fmt.fmt = AUD_FMT_S16;
320 
321     s->dac_voice[0] = AUD_open_out(&s->card, s->dac_voice[0],
322                     "tsc2102.sink", s, (void *) tsc210x_audio_out_cb, &fmt);
323     if (s->dac_voice[0]) {
324         s->codec.cts = 1;
325         AUD_set_active_out(s->dac_voice[0], 1);
326     }
327 }
328 
329 static uint16_t tsc2102_data_register_read(TSC210xState *s, int reg)
330 {
331     switch (reg) {
332     case 0x00:	/* X */
333         s->dav &= 0xfbff;
334         return TSC_CUT_RESOLUTION(X_TRANSFORM(s), s->precision) +
335                 (s->noise & 3);
336 
337     case 0x01:	/* Y */
338         s->noise ++;
339         s->dav &= 0xfdff;
340         return TSC_CUT_RESOLUTION(Y_TRANSFORM(s), s->precision) ^
341                 (s->noise & 3);
342 
343     case 0x02:	/* Z1 */
344         s->dav &= 0xfeff;
345         return TSC_CUT_RESOLUTION(Z1_TRANSFORM(s), s->precision) -
346                 (s->noise & 3);
347 
348     case 0x03:	/* Z2 */
349         s->dav &= 0xff7f;
350         return TSC_CUT_RESOLUTION(Z2_TRANSFORM(s), s->precision) |
351                 (s->noise & 3);
352 
353     case 0x04:	/* KPData */
354         if ((s->model & 0xff00) == 0x2300) {
355             if (s->kb.intr && (s->kb.mode & 2)) {
356                 s->kb.intr = 0;
357                 qemu_irq_raise(s->kbint);
358             }
359             return s->kb.down;
360         }
361 
362         return 0xffff;
363 
364     case 0x05:	/* BAT1 */
365         s->dav &= 0xffbf;
366         return TSC_CUT_RESOLUTION(BAT1_VAL, s->precision) +
367                 (s->noise & 6);
368 
369     case 0x06:	/* BAT2 */
370         s->dav &= 0xffdf;
371         return TSC_CUT_RESOLUTION(BAT2_VAL, s->precision);
372 
373     case 0x07:	/* AUX1 */
374         s->dav &= 0xffef;
375         return TSC_CUT_RESOLUTION(AUX1_VAL, s->precision);
376 
377     case 0x08:	/* AUX2 */
378         s->dav &= 0xfff7;
379         return 0xffff;
380 
381     case 0x09:	/* TEMP1 */
382         s->dav &= 0xfffb;
383         return TSC_CUT_RESOLUTION(TEMP1_VAL, s->precision) -
384                 (s->noise & 5);
385 
386     case 0x0a:	/* TEMP2 */
387         s->dav &= 0xfffd;
388         return TSC_CUT_RESOLUTION(TEMP2_VAL, s->precision) ^
389                 (s->noise & 3);
390 
391     case 0x0b:	/* DAC */
392         s->dav &= 0xfffe;
393         return 0xffff;
394 
395     default:
396 #ifdef TSC_VERBOSE
397         fprintf(stderr, "tsc2102_data_register_read: "
398                         "no such register: 0x%02x\n", reg);
399 #endif
400         return 0xffff;
401     }
402 }
403 
404 static uint16_t tsc2102_control_register_read(
405                 TSC210xState *s, int reg)
406 {
407     switch (reg) {
408     case 0x00:	/* TSC ADC */
409         return (s->pressure << 15) | ((!s->busy) << 14) |
410                 (s->nextfunction << 10) | (s->nextprecision << 8) | s->filter;
411 
412     case 0x01:	/* Status / Keypad Control */
413         if ((s->model & 0xff00) == 0x2100)
414             return (s->pin_func << 14) | ((!s->enabled) << 13) |
415                     (s->host_mode << 12) | ((!!s->dav) << 11) | s->dav;
416         else
417             return (s->kb.intr << 15) | ((s->kb.scan || !s->kb.down) << 14) |
418                     (s->kb.debounce << 11);
419 
420     case 0x02:	/* DAC Control */
421         if ((s->model & 0xff00) == 0x2300)
422             return s->dac_power & 0x8000;
423         else
424             goto bad_reg;
425 
426     case 0x03:	/* Reference */
427         return s->ref;
428 
429     case 0x04:	/* Reset */
430         return 0xffff;
431 
432     case 0x05:	/* Configuration */
433         return s->timing;
434 
435     case 0x06:	/* Secondary configuration */
436         if ((s->model & 0xff00) == 0x2100)
437             goto bad_reg;
438         return ((!s->dav) << 15) | ((s->kb.mode & 1) << 14) | s->pll[2];
439 
440     case 0x10:	/* Keypad Mask */
441         if ((s->model & 0xff00) == 0x2100)
442             goto bad_reg;
443         return s->kb.mask;
444 
445     default:
446     bad_reg:
447 #ifdef TSC_VERBOSE
448         fprintf(stderr, "tsc2102_control_register_read: "
449                         "no such register: 0x%02x\n", reg);
450 #endif
451         return 0xffff;
452     }
453 }
454 
455 static uint16_t tsc2102_audio_register_read(TSC210xState *s, int reg)
456 {
457     int l_ch, r_ch;
458     uint16_t val;
459 
460     switch (reg) {
461     case 0x00:	/* Audio Control 1 */
462         return s->audio_ctrl1;
463 
464     case 0x01:
465         return 0xff00;
466 
467     case 0x02:	/* DAC Volume Control */
468         return s->volume;
469 
470     case 0x03:
471         return 0x8b00;
472 
473     case 0x04:	/* Audio Control 2 */
474         l_ch = 1;
475         r_ch = 1;
476         if (s->softstep && !(s->dac_power & (1 << 10))) {
477             l_ch = (qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) >
478                             s->volume_change + TSC_SOFTSTEP_DELAY);
479             r_ch = (qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) >
480                             s->volume_change + TSC_SOFTSTEP_DELAY);
481         }
482 
483         return s->audio_ctrl2 | (l_ch << 3) | (r_ch << 2);
484 
485     case 0x05:	/* Stereo DAC Power Control */
486         return 0x2aa0 | s->dac_power |
487                 (((s->dac_power & (1 << 10)) &&
488                   (qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) >
489                    s->powerdown + TSC_POWEROFF_DELAY)) << 6);
490 
491     case 0x06:	/* Audio Control 3 */
492         val = s->audio_ctrl3 | 0x0001;
493         s->audio_ctrl3 &= 0xff3f;
494         return val;
495 
496     case 0x07:	/* LCH_BASS_BOOST_N0 */
497     case 0x08:	/* LCH_BASS_BOOST_N1 */
498     case 0x09:	/* LCH_BASS_BOOST_N2 */
499     case 0x0a:	/* LCH_BASS_BOOST_N3 */
500     case 0x0b:	/* LCH_BASS_BOOST_N4 */
501     case 0x0c:	/* LCH_BASS_BOOST_N5 */
502     case 0x0d:	/* LCH_BASS_BOOST_D1 */
503     case 0x0e:	/* LCH_BASS_BOOST_D2 */
504     case 0x0f:	/* LCH_BASS_BOOST_D4 */
505     case 0x10:	/* LCH_BASS_BOOST_D5 */
506     case 0x11:	/* RCH_BASS_BOOST_N0 */
507     case 0x12:	/* RCH_BASS_BOOST_N1 */
508     case 0x13:	/* RCH_BASS_BOOST_N2 */
509     case 0x14:	/* RCH_BASS_BOOST_N3 */
510     case 0x15:	/* RCH_BASS_BOOST_N4 */
511     case 0x16:	/* RCH_BASS_BOOST_N5 */
512     case 0x17:	/* RCH_BASS_BOOST_D1 */
513     case 0x18:	/* RCH_BASS_BOOST_D2 */
514     case 0x19:	/* RCH_BASS_BOOST_D4 */
515     case 0x1a:	/* RCH_BASS_BOOST_D5 */
516         return s->filter_data[reg - 0x07];
517 
518     case 0x1b:	/* PLL Programmability 1 */
519         return s->pll[0];
520 
521     case 0x1c:	/* PLL Programmability 2 */
522         return s->pll[1];
523 
524     case 0x1d:	/* Audio Control 4 */
525         return (!s->softstep) << 14;
526 
527     default:
528 #ifdef TSC_VERBOSE
529         fprintf(stderr, "tsc2102_audio_register_read: "
530                         "no such register: 0x%02x\n", reg);
531 #endif
532         return 0xffff;
533     }
534 }
535 
536 static void tsc2102_data_register_write(
537                 TSC210xState *s, int reg, uint16_t value)
538 {
539     switch (reg) {
540     case 0x00:	/* X */
541     case 0x01:	/* Y */
542     case 0x02:	/* Z1 */
543     case 0x03:	/* Z2 */
544     case 0x05:	/* BAT1 */
545     case 0x06:	/* BAT2 */
546     case 0x07:	/* AUX1 */
547     case 0x08:	/* AUX2 */
548     case 0x09:	/* TEMP1 */
549     case 0x0a:	/* TEMP2 */
550         return;
551 
552     default:
553 #ifdef TSC_VERBOSE
554         fprintf(stderr, "tsc2102_data_register_write: "
555                         "no such register: 0x%02x\n", reg);
556 #endif
557     }
558 }
559 
560 static void tsc2102_control_register_write(
561                 TSC210xState *s, int reg, uint16_t value)
562 {
563     switch (reg) {
564     case 0x00:	/* TSC ADC */
565         s->host_mode = value >> 15;
566         s->enabled = !(value & 0x4000);
567         if (s->busy && !s->enabled)
568             timer_del(s->timer);
569         s->busy &= s->enabled;
570         s->nextfunction = (value >> 10) & 0xf;
571         s->nextprecision = (value >> 8) & 3;
572         s->filter = value & 0xff;
573         return;
574 
575     case 0x01:	/* Status / Keypad Control */
576         if ((s->model & 0xff00) == 0x2100)
577             s->pin_func = value >> 14;
578 	else {
579             s->kb.scan = (value >> 14) & 1;
580             s->kb.debounce = (value >> 11) & 7;
581             if (s->kb.intr && s->kb.scan) {
582                 s->kb.intr = 0;
583                 qemu_irq_raise(s->kbint);
584             }
585         }
586         return;
587 
588     case 0x02:	/* DAC Control */
589         if ((s->model & 0xff00) == 0x2300) {
590             s->dac_power &= 0x7fff;
591             s->dac_power |= 0x8000 & value;
592         } else
593             goto bad_reg;
594         break;
595 
596     case 0x03:	/* Reference */
597         s->ref = value & 0x1f;
598         return;
599 
600     case 0x04:	/* Reset */
601         if (value == 0xbb00) {
602             if (s->busy)
603                 timer_del(s->timer);
604             tsc210x_reset(s);
605 #ifdef TSC_VERBOSE
606         } else {
607             fprintf(stderr, "tsc2102_control_register_write: "
608                             "wrong value written into RESET\n");
609 #endif
610         }
611         return;
612 
613     case 0x05:	/* Configuration */
614         s->timing = value & 0x3f;
615 #ifdef TSC_VERBOSE
616         if (value & ~0x3f)
617             fprintf(stderr, "tsc2102_control_register_write: "
618                             "wrong value written into CONFIG\n");
619 #endif
620         return;
621 
622     case 0x06:	/* Secondary configuration */
623         if ((s->model & 0xff00) == 0x2100)
624             goto bad_reg;
625         s->kb.mode = value >> 14;
626         s->pll[2] = value & 0x3ffff;
627         return;
628 
629     case 0x10:	/* Keypad Mask */
630         if ((s->model & 0xff00) == 0x2100)
631             goto bad_reg;
632         s->kb.mask = value;
633         return;
634 
635     default:
636     bad_reg:
637 #ifdef TSC_VERBOSE
638         fprintf(stderr, "tsc2102_control_register_write: "
639                         "no such register: 0x%02x\n", reg);
640 #endif
641     }
642 }
643 
644 static void tsc2102_audio_register_write(
645                 TSC210xState *s, int reg, uint16_t value)
646 {
647     switch (reg) {
648     case 0x00:	/* Audio Control 1 */
649         s->audio_ctrl1 = value & 0x0f3f;
650 #ifdef TSC_VERBOSE
651         if ((value & ~0x0f3f) || ((value & 7) != ((value >> 3) & 7)))
652             fprintf(stderr, "tsc2102_audio_register_write: "
653                             "wrong value written into Audio 1\n");
654 #endif
655         tsc2102_audio_rate_update(s);
656         tsc2102_audio_output_update(s);
657         return;
658 
659     case 0x01:
660 #ifdef TSC_VERBOSE
661         if (value != 0xff00)
662             fprintf(stderr, "tsc2102_audio_register_write: "
663                             "wrong value written into reg 0x01\n");
664 #endif
665         return;
666 
667     case 0x02:	/* DAC Volume Control */
668         s->volume = value;
669         s->volume_change = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL);
670         return;
671 
672     case 0x03:
673 #ifdef TSC_VERBOSE
674         if (value != 0x8b00)
675             fprintf(stderr, "tsc2102_audio_register_write: "
676                             "wrong value written into reg 0x03\n");
677 #endif
678         return;
679 
680     case 0x04:	/* Audio Control 2 */
681         s->audio_ctrl2 = value & 0xf7f2;
682 #ifdef TSC_VERBOSE
683         if (value & ~0xf7fd)
684             fprintf(stderr, "tsc2102_audio_register_write: "
685                             "wrong value written into Audio 2\n");
686 #endif
687         return;
688 
689     case 0x05:	/* Stereo DAC Power Control */
690         if ((value & ~s->dac_power) & (1 << 10))
691             s->powerdown = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL);
692 
693         s->dac_power = value & 0x9543;
694 #ifdef TSC_VERBOSE
695         if ((value & ~0x9543) != 0x2aa0)
696             fprintf(stderr, "tsc2102_audio_register_write: "
697                             "wrong value written into Power\n");
698 #endif
699         tsc2102_audio_rate_update(s);
700         tsc2102_audio_output_update(s);
701         return;
702 
703     case 0x06:	/* Audio Control 3 */
704         s->audio_ctrl3 &= 0x00c0;
705         s->audio_ctrl3 |= value & 0xf800;
706 #ifdef TSC_VERBOSE
707         if (value & ~0xf8c7)
708             fprintf(stderr, "tsc2102_audio_register_write: "
709                             "wrong value written into Audio 3\n");
710 #endif
711         tsc2102_audio_output_update(s);
712         return;
713 
714     case 0x07:	/* LCH_BASS_BOOST_N0 */
715     case 0x08:	/* LCH_BASS_BOOST_N1 */
716     case 0x09:	/* LCH_BASS_BOOST_N2 */
717     case 0x0a:	/* LCH_BASS_BOOST_N3 */
718     case 0x0b:	/* LCH_BASS_BOOST_N4 */
719     case 0x0c:	/* LCH_BASS_BOOST_N5 */
720     case 0x0d:	/* LCH_BASS_BOOST_D1 */
721     case 0x0e:	/* LCH_BASS_BOOST_D2 */
722     case 0x0f:	/* LCH_BASS_BOOST_D4 */
723     case 0x10:	/* LCH_BASS_BOOST_D5 */
724     case 0x11:	/* RCH_BASS_BOOST_N0 */
725     case 0x12:	/* RCH_BASS_BOOST_N1 */
726     case 0x13:	/* RCH_BASS_BOOST_N2 */
727     case 0x14:	/* RCH_BASS_BOOST_N3 */
728     case 0x15:	/* RCH_BASS_BOOST_N4 */
729     case 0x16:	/* RCH_BASS_BOOST_N5 */
730     case 0x17:	/* RCH_BASS_BOOST_D1 */
731     case 0x18:	/* RCH_BASS_BOOST_D2 */
732     case 0x19:	/* RCH_BASS_BOOST_D4 */
733     case 0x1a:	/* RCH_BASS_BOOST_D5 */
734         s->filter_data[reg - 0x07] = value;
735         return;
736 
737     case 0x1b:	/* PLL Programmability 1 */
738         s->pll[0] = value & 0xfffc;
739 #ifdef TSC_VERBOSE
740         if (value & ~0xfffc)
741             fprintf(stderr, "tsc2102_audio_register_write: "
742                             "wrong value written into PLL 1\n");
743 #endif
744         return;
745 
746     case 0x1c:	/* PLL Programmability 2 */
747         s->pll[1] = value & 0xfffc;
748 #ifdef TSC_VERBOSE
749         if (value & ~0xfffc)
750             fprintf(stderr, "tsc2102_audio_register_write: "
751                             "wrong value written into PLL 2\n");
752 #endif
753         return;
754 
755     case 0x1d:	/* Audio Control 4 */
756         s->softstep = !(value & 0x4000);
757 #ifdef TSC_VERBOSE
758         if (value & ~0x4000)
759             fprintf(stderr, "tsc2102_audio_register_write: "
760                             "wrong value written into Audio 4\n");
761 #endif
762         return;
763 
764     default:
765 #ifdef TSC_VERBOSE
766         fprintf(stderr, "tsc2102_audio_register_write: "
767                         "no such register: 0x%02x\n", reg);
768 #endif
769     }
770 }
771 
772 /* This handles most of the chip logic.  */
773 static void tsc210x_pin_update(TSC210xState *s)
774 {
775     int64_t expires;
776     int pin_state;
777 
778     switch (s->pin_func) {
779     case 0:
780         pin_state = s->pressure;
781         break;
782     case 1:
783         pin_state = !!s->dav;
784         break;
785     case 2:
786     default:
787         pin_state = s->pressure && !s->dav;
788     }
789 
790     if (!s->enabled)
791         pin_state = 0;
792 
793     if (pin_state != s->irq) {
794         s->irq = pin_state;
795         qemu_set_irq(s->pint, !s->irq);
796     }
797 
798     switch (s->nextfunction) {
799     case TSC_MODE_XY_SCAN:
800     case TSC_MODE_XYZ_SCAN:
801         if (!s->pressure)
802             return;
803         break;
804 
805     case TSC_MODE_X:
806     case TSC_MODE_Y:
807     case TSC_MODE_Z:
808         if (!s->pressure)
809             return;
810         /* Fall through */
811     case TSC_MODE_BAT1:
812     case TSC_MODE_BAT2:
813     case TSC_MODE_AUX:
814     case TSC_MODE_TEMP1:
815     case TSC_MODE_TEMP2:
816         if (s->dav)
817             s->enabled = 0;
818         break;
819 
820     case TSC_MODE_AUX_SCAN:
821     case TSC_MODE_PORT_SCAN:
822         break;
823 
824     case TSC_MODE_NO_SCAN:
825     case TSC_MODE_XX_DRV:
826     case TSC_MODE_YY_DRV:
827     case TSC_MODE_YX_DRV:
828     default:
829         return;
830     }
831 
832     if (!s->enabled || s->busy || s->dav)
833         return;
834 
835     s->busy = 1;
836     s->precision = s->nextprecision;
837     s->function = s->nextfunction;
838     expires = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) + (get_ticks_per_sec() >> 10);
839     timer_mod(s->timer, expires);
840 }
841 
842 static uint16_t tsc210x_read(TSC210xState *s)
843 {
844     uint16_t ret = 0x0000;
845 
846     if (!s->command)
847         fprintf(stderr, "tsc210x_read: SPI underrun!\n");
848 
849     switch (s->page) {
850     case TSC_DATA_REGISTERS_PAGE:
851         ret = tsc2102_data_register_read(s, s->offset);
852         if (!s->dav)
853             qemu_irq_raise(s->davint);
854         break;
855     case TSC_CONTROL_REGISTERS_PAGE:
856         ret = tsc2102_control_register_read(s, s->offset);
857         break;
858     case TSC_AUDIO_REGISTERS_PAGE:
859         ret = tsc2102_audio_register_read(s, s->offset);
860         break;
861     default:
862         hw_error("tsc210x_read: wrong memory page\n");
863     }
864 
865     tsc210x_pin_update(s);
866 
867     /* Allow sequential reads.  */
868     s->offset ++;
869     s->state = 0;
870     return ret;
871 }
872 
873 static void tsc210x_write(TSC210xState *s, uint16_t value)
874 {
875     /*
876      * This is a two-state state machine for reading
877      * command and data every second time.
878      */
879     if (!s->state) {
880         s->command = value >> 15;
881         s->page = (value >> 11) & 0x0f;
882         s->offset = (value >> 5) & 0x3f;
883         s->state = 1;
884     } else {
885         if (s->command)
886             fprintf(stderr, "tsc210x_write: SPI overrun!\n");
887         else
888             switch (s->page) {
889             case TSC_DATA_REGISTERS_PAGE:
890                 tsc2102_data_register_write(s, s->offset, value);
891                 break;
892             case TSC_CONTROL_REGISTERS_PAGE:
893                 tsc2102_control_register_write(s, s->offset, value);
894                 break;
895             case TSC_AUDIO_REGISTERS_PAGE:
896                 tsc2102_audio_register_write(s, s->offset, value);
897                 break;
898             default:
899                 hw_error("tsc210x_write: wrong memory page\n");
900             }
901 
902         tsc210x_pin_update(s);
903         s->state = 0;
904     }
905 }
906 
907 uint32_t tsc210x_txrx(void *opaque, uint32_t value, int len)
908 {
909     TSC210xState *s = opaque;
910     uint32_t ret = 0;
911 
912     if (len != 16)
913         hw_error("%s: FIXME: bad SPI word width %i\n", __FUNCTION__, len);
914 
915     /* TODO: sequential reads etc - how do we make sure the host doesn't
916      * unintentionally read out a conversion result from a register while
917      * transmitting the command word of the next command?  */
918     if (!value || (s->state && s->command))
919         ret = tsc210x_read(s);
920     if (value || (s->state && !s->command))
921         tsc210x_write(s, value);
922 
923     return ret;
924 }
925 
926 static void tsc210x_timer_tick(void *opaque)
927 {
928     TSC210xState *s = opaque;
929 
930     /* Timer ticked -- a set of conversions has been finished.  */
931 
932     if (!s->busy)
933         return;
934 
935     s->busy = 0;
936     s->dav |= mode_regs[s->function];
937     tsc210x_pin_update(s);
938     qemu_irq_lower(s->davint);
939 }
940 
941 static void tsc210x_touchscreen_event(void *opaque,
942                 int x, int y, int z, int buttons_state)
943 {
944     TSC210xState *s = opaque;
945     int p = s->pressure;
946 
947     if (buttons_state) {
948         s->x = x;
949         s->y = y;
950     }
951     s->pressure = !!buttons_state;
952 
953     /*
954      * Note: We would get better responsiveness in the guest by
955      * signaling TS events immediately, but for now we simulate
956      * the first conversion delay for sake of correctness.
957      */
958     if (p != s->pressure)
959         tsc210x_pin_update(s);
960 }
961 
962 static void tsc210x_i2s_swallow(TSC210xState *s)
963 {
964     if (s->dac_voice[0])
965         tsc210x_out_flush(s, s->codec.out.len);
966     else
967         s->codec.out.len = 0;
968 }
969 
970 static void tsc210x_i2s_set_rate(TSC210xState *s, int in, int out)
971 {
972     s->i2s_tx_rate = out;
973     s->i2s_rx_rate = in;
974 }
975 
976 static void tsc210x_save(QEMUFile *f, void *opaque)
977 {
978     TSC210xState *s = (TSC210xState *) opaque;
979     int64_t now = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL);
980     int i;
981 
982     qemu_put_be16(f, s->x);
983     qemu_put_be16(f, s->y);
984     qemu_put_byte(f, s->pressure);
985 
986     qemu_put_byte(f, s->state);
987     qemu_put_byte(f, s->page);
988     qemu_put_byte(f, s->offset);
989     qemu_put_byte(f, s->command);
990 
991     qemu_put_byte(f, s->irq);
992     qemu_put_be16s(f, &s->dav);
993 
994     timer_put(f, s->timer);
995     qemu_put_byte(f, s->enabled);
996     qemu_put_byte(f, s->host_mode);
997     qemu_put_byte(f, s->function);
998     qemu_put_byte(f, s->nextfunction);
999     qemu_put_byte(f, s->precision);
1000     qemu_put_byte(f, s->nextprecision);
1001     qemu_put_byte(f, s->filter);
1002     qemu_put_byte(f, s->pin_func);
1003     qemu_put_byte(f, s->ref);
1004     qemu_put_byte(f, s->timing);
1005     qemu_put_be32(f, s->noise);
1006 
1007     qemu_put_be16s(f, &s->audio_ctrl1);
1008     qemu_put_be16s(f, &s->audio_ctrl2);
1009     qemu_put_be16s(f, &s->audio_ctrl3);
1010     qemu_put_be16s(f, &s->pll[0]);
1011     qemu_put_be16s(f, &s->pll[1]);
1012     qemu_put_be16s(f, &s->volume);
1013     qemu_put_sbe64(f, (s->volume_change - now));
1014     qemu_put_sbe64(f, (s->powerdown - now));
1015     qemu_put_byte(f, s->softstep);
1016     qemu_put_be16s(f, &s->dac_power);
1017 
1018     for (i = 0; i < 0x14; i ++)
1019         qemu_put_be16s(f, &s->filter_data[i]);
1020 }
1021 
1022 static int tsc210x_load(QEMUFile *f, void *opaque, int version_id)
1023 {
1024     TSC210xState *s = (TSC210xState *) opaque;
1025     int64_t now = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL);
1026     int i;
1027 
1028     s->x = qemu_get_be16(f);
1029     s->y = qemu_get_be16(f);
1030     s->pressure = qemu_get_byte(f);
1031 
1032     s->state = qemu_get_byte(f);
1033     s->page = qemu_get_byte(f);
1034     s->offset = qemu_get_byte(f);
1035     s->command = qemu_get_byte(f);
1036 
1037     s->irq = qemu_get_byte(f);
1038     qemu_get_be16s(f, &s->dav);
1039 
1040     timer_get(f, s->timer);
1041     s->enabled = qemu_get_byte(f);
1042     s->host_mode = qemu_get_byte(f);
1043     s->function = qemu_get_byte(f);
1044     if (s->function < 0 || s->function >= ARRAY_SIZE(mode_regs)) {
1045         return -EINVAL;
1046     }
1047     s->nextfunction = qemu_get_byte(f);
1048     if (s->nextfunction < 0 || s->nextfunction >= ARRAY_SIZE(mode_regs)) {
1049         return -EINVAL;
1050     }
1051     s->precision = qemu_get_byte(f);
1052     if (s->precision < 0 || s->precision >= ARRAY_SIZE(resolution)) {
1053         return -EINVAL;
1054     }
1055     s->nextprecision = qemu_get_byte(f);
1056     if (s->nextprecision < 0 || s->nextprecision >= ARRAY_SIZE(resolution)) {
1057         return -EINVAL;
1058     }
1059     s->filter = qemu_get_byte(f);
1060     s->pin_func = qemu_get_byte(f);
1061     s->ref = qemu_get_byte(f);
1062     s->timing = qemu_get_byte(f);
1063     s->noise = qemu_get_be32(f);
1064 
1065     qemu_get_be16s(f, &s->audio_ctrl1);
1066     qemu_get_be16s(f, &s->audio_ctrl2);
1067     qemu_get_be16s(f, &s->audio_ctrl3);
1068     qemu_get_be16s(f, &s->pll[0]);
1069     qemu_get_be16s(f, &s->pll[1]);
1070     qemu_get_be16s(f, &s->volume);
1071     s->volume_change = qemu_get_sbe64(f) + now;
1072     s->powerdown = qemu_get_sbe64(f) + now;
1073     s->softstep = qemu_get_byte(f);
1074     qemu_get_be16s(f, &s->dac_power);
1075 
1076     for (i = 0; i < 0x14; i ++)
1077         qemu_get_be16s(f, &s->filter_data[i]);
1078 
1079     s->busy = timer_pending(s->timer);
1080     qemu_set_irq(s->pint, !s->irq);
1081     qemu_set_irq(s->davint, !s->dav);
1082 
1083     return 0;
1084 }
1085 
1086 uWireSlave *tsc2102_init(qemu_irq pint)
1087 {
1088     TSC210xState *s;
1089 
1090     s = g_new0(TSC210xState, 1);
1091     s->x = 160;
1092     s->y = 160;
1093     s->pressure = 0;
1094     s->precision = s->nextprecision = 0;
1095     s->timer = timer_new_ns(QEMU_CLOCK_VIRTUAL, tsc210x_timer_tick, s);
1096     s->pint = pint;
1097     s->model = 0x2102;
1098     s->name = "tsc2102";
1099 
1100     s->tr[0] = 0;
1101     s->tr[1] = 1;
1102     s->tr[2] = 1;
1103     s->tr[3] = 0;
1104     s->tr[4] = 1;
1105     s->tr[5] = 0;
1106     s->tr[6] = 1;
1107     s->tr[7] = 0;
1108 
1109     s->chip.opaque = s;
1110     s->chip.send = (void *) tsc210x_write;
1111     s->chip.receive = (void *) tsc210x_read;
1112 
1113     s->codec.opaque = s;
1114     s->codec.tx_swallow = (void *) tsc210x_i2s_swallow;
1115     s->codec.set_rate = (void *) tsc210x_i2s_set_rate;
1116     s->codec.in.fifo = s->in_fifo;
1117     s->codec.out.fifo = s->out_fifo;
1118 
1119     tsc210x_reset(s);
1120 
1121     qemu_add_mouse_event_handler(tsc210x_touchscreen_event, s, 1,
1122                     "QEMU TSC2102-driven Touchscreen");
1123 
1124     AUD_register_card(s->name, &s->card);
1125 
1126     qemu_register_reset((void *) tsc210x_reset, s);
1127     register_savevm(NULL, s->name, -1, 0,
1128                     tsc210x_save, tsc210x_load, s);
1129 
1130     return &s->chip;
1131 }
1132 
1133 uWireSlave *tsc2301_init(qemu_irq penirq, qemu_irq kbirq, qemu_irq dav)
1134 {
1135     TSC210xState *s;
1136 
1137     s = g_new0(TSC210xState, 1);
1138     s->x = 400;
1139     s->y = 240;
1140     s->pressure = 0;
1141     s->precision = s->nextprecision = 0;
1142     s->timer = timer_new_ns(QEMU_CLOCK_VIRTUAL, tsc210x_timer_tick, s);
1143     s->pint = penirq;
1144     s->kbint = kbirq;
1145     s->davint = dav;
1146     s->model = 0x2301;
1147     s->name = "tsc2301";
1148 
1149     s->tr[0] = 0;
1150     s->tr[1] = 1;
1151     s->tr[2] = 1;
1152     s->tr[3] = 0;
1153     s->tr[4] = 1;
1154     s->tr[5] = 0;
1155     s->tr[6] = 1;
1156     s->tr[7] = 0;
1157 
1158     s->chip.opaque = s;
1159     s->chip.send = (void *) tsc210x_write;
1160     s->chip.receive = (void *) tsc210x_read;
1161 
1162     s->codec.opaque = s;
1163     s->codec.tx_swallow = (void *) tsc210x_i2s_swallow;
1164     s->codec.set_rate = (void *) tsc210x_i2s_set_rate;
1165     s->codec.in.fifo = s->in_fifo;
1166     s->codec.out.fifo = s->out_fifo;
1167 
1168     tsc210x_reset(s);
1169 
1170     qemu_add_mouse_event_handler(tsc210x_touchscreen_event, s, 1,
1171                     "QEMU TSC2301-driven Touchscreen");
1172 
1173     AUD_register_card(s->name, &s->card);
1174 
1175     qemu_register_reset((void *) tsc210x_reset, s);
1176     register_savevm(NULL, s->name, -1, 0, tsc210x_save, tsc210x_load, s);
1177 
1178     return &s->chip;
1179 }
1180 
1181 I2SCodec *tsc210x_codec(uWireSlave *chip)
1182 {
1183     TSC210xState *s = (TSC210xState *) chip->opaque;
1184 
1185     return &s->codec;
1186 }
1187 
1188 /*
1189  * Use tslib generated calibration data to generate ADC input values
1190  * from the touchscreen.  Assuming 12-bit precision was used during
1191  * tslib calibration.
1192  */
1193 void tsc210x_set_transform(uWireSlave *chip,
1194                 MouseTransformInfo *info)
1195 {
1196     TSC210xState *s = (TSC210xState *) chip->opaque;
1197 #if 0
1198     int64_t ltr[8];
1199 
1200     ltr[0] = (int64_t) info->a[1] * info->y;
1201     ltr[1] = (int64_t) info->a[4] * info->x;
1202     ltr[2] = (int64_t) info->a[1] * info->a[3] -
1203             (int64_t) info->a[4] * info->a[0];
1204     ltr[3] = (int64_t) info->a[2] * info->a[4] -
1205             (int64_t) info->a[5] * info->a[1];
1206     ltr[4] = (int64_t) info->a[0] * info->y;
1207     ltr[5] = (int64_t) info->a[3] * info->x;
1208     ltr[6] = (int64_t) info->a[4] * info->a[0] -
1209             (int64_t) info->a[1] * info->a[3];
1210     ltr[7] = (int64_t) info->a[2] * info->a[3] -
1211             (int64_t) info->a[5] * info->a[0];
1212 
1213     /* Avoid integer overflow */
1214     s->tr[0] = ltr[0] >> 11;
1215     s->tr[1] = ltr[1] >> 11;
1216     s->tr[2] = muldiv64(ltr[2], 1, info->a[6]);
1217     s->tr[3] = muldiv64(ltr[3], 1 << 4, ltr[2]);
1218     s->tr[4] = ltr[4] >> 11;
1219     s->tr[5] = ltr[5] >> 11;
1220     s->tr[6] = muldiv64(ltr[6], 1, info->a[6]);
1221     s->tr[7] = muldiv64(ltr[7], 1 << 4, ltr[6]);
1222 #else
1223 
1224     /* This version assumes touchscreen X & Y axis are parallel or
1225      * perpendicular to LCD's  X & Y axis in some way.  */
1226     if (abs(info->a[0]) > abs(info->a[1])) {
1227         s->tr[0] = 0;
1228         s->tr[1] = -info->a[6] * info->x;
1229         s->tr[2] = info->a[0];
1230         s->tr[3] = -info->a[2] / info->a[0];
1231         s->tr[4] = info->a[6] * info->y;
1232         s->tr[5] = 0;
1233         s->tr[6] = info->a[4];
1234         s->tr[7] = -info->a[5] / info->a[4];
1235     } else {
1236         s->tr[0] = info->a[6] * info->y;
1237         s->tr[1] = 0;
1238         s->tr[2] = info->a[1];
1239         s->tr[3] = -info->a[2] / info->a[1];
1240         s->tr[4] = 0;
1241         s->tr[5] = -info->a[6] * info->x;
1242         s->tr[6] = info->a[3];
1243         s->tr[7] = -info->a[5] / info->a[3];
1244     }
1245 
1246     s->tr[0] >>= 11;
1247     s->tr[1] >>= 11;
1248     s->tr[3] <<= 4;
1249     s->tr[4] >>= 11;
1250     s->tr[5] >>= 11;
1251     s->tr[7] <<= 4;
1252 #endif
1253 }
1254 
1255 void tsc210x_key_event(uWireSlave *chip, int key, int down)
1256 {
1257     TSC210xState *s = (TSC210xState *) chip->opaque;
1258 
1259     if (down)
1260         s->kb.down |= 1 << key;
1261     else
1262         s->kb.down &= ~(1 << key);
1263 
1264     if (down && (s->kb.down & ~s->kb.mask) && !s->kb.intr) {
1265         s->kb.intr = 1;
1266         qemu_irq_lower(s->kbint);
1267     } else if (s->kb.intr && !(s->kb.down & ~s->kb.mask) &&
1268                     !(s->kb.mode & 1)) {
1269         s->kb.intr = 0;
1270         qemu_irq_raise(s->kbint);
1271     }
1272 }
1273