1 // SPDX-License-Identifier: GPL-2.0-or-later
3 * cx18 firmware functions
5 * Copyright (C) 2007 Hans Verkuil <hverkuil@xs4all.nl>
6 * Copyright (C) 2008 Andy Walls <awalls@md.metrocast.net>
9 #include "cx18-driver.h"
13 #include "cx18-firmware.h"
14 #include "cx18-cards.h"
15 #include <linux/firmware.h>
17 #define CX18_PROC_SOFT_RESET 0xc70010
18 #define CX18_DDR_SOFT_RESET 0xc70014
19 #define CX18_CLOCK_SELECT1 0xc71000
20 #define CX18_CLOCK_SELECT2 0xc71004
21 #define CX18_HALF_CLOCK_SELECT1 0xc71008
22 #define CX18_HALF_CLOCK_SELECT2 0xc7100C
23 #define CX18_CLOCK_POLARITY1 0xc71010
24 #define CX18_CLOCK_POLARITY2 0xc71014
25 #define CX18_ADD_DELAY_ENABLE1 0xc71018
26 #define CX18_ADD_DELAY_ENABLE2 0xc7101C
27 #define CX18_CLOCK_ENABLE1 0xc71020
28 #define CX18_CLOCK_ENABLE2 0xc71024
30 #define CX18_REG_BUS_TIMEOUT_EN 0xc72024
32 #define CX18_FAST_CLOCK_PLL_INT 0xc78000
33 #define CX18_FAST_CLOCK_PLL_FRAC 0xc78004
34 #define CX18_FAST_CLOCK_PLL_POST 0xc78008
35 #define CX18_FAST_CLOCK_PLL_PRESCALE 0xc7800C
36 #define CX18_FAST_CLOCK_PLL_ADJUST_BANDWIDTH 0xc78010
38 #define CX18_SLOW_CLOCK_PLL_INT 0xc78014
39 #define CX18_SLOW_CLOCK_PLL_FRAC 0xc78018
40 #define CX18_SLOW_CLOCK_PLL_POST 0xc7801C
41 #define CX18_MPEG_CLOCK_PLL_INT 0xc78040
42 #define CX18_MPEG_CLOCK_PLL_FRAC 0xc78044
43 #define CX18_MPEG_CLOCK_PLL_POST 0xc78048
44 #define CX18_PLL_POWER_DOWN 0xc78088
45 #define CX18_SW1_INT_STATUS 0xc73104
46 #define CX18_SW1_INT_ENABLE_PCI 0xc7311C
47 #define CX18_SW2_INT_SET 0xc73140
48 #define CX18_SW2_INT_STATUS 0xc73144
49 #define CX18_ADEC_CONTROL 0xc78120
51 #define CX18_DDR_REQUEST_ENABLE 0xc80000
52 #define CX18_DDR_CHIP_CONFIG 0xc80004
53 #define CX18_DDR_REFRESH 0xc80008
54 #define CX18_DDR_TIMING1 0xc8000C
55 #define CX18_DDR_TIMING2 0xc80010
56 #define CX18_DDR_POWER_REG 0xc8001C
58 #define CX18_DDR_TUNE_LANE 0xc80048
59 #define CX18_DDR_INITIAL_EMRS 0xc80054
60 #define CX18_DDR_MB_PER_ROW_7 0xc8009C
61 #define CX18_DDR_BASE_63_ADDR 0xc804FC
63 #define CX18_WMB_CLIENT02 0xc90108
64 #define CX18_WMB_CLIENT05 0xc90114
65 #define CX18_WMB_CLIENT06 0xc90118
66 #define CX18_WMB_CLIENT07 0xc9011C
67 #define CX18_WMB_CLIENT08 0xc90120
68 #define CX18_WMB_CLIENT09 0xc90124
69 #define CX18_WMB_CLIENT10 0xc90128
70 #define CX18_WMB_CLIENT11 0xc9012C
71 #define CX18_WMB_CLIENT12 0xc90130
72 #define CX18_WMB_CLIENT13 0xc90134
73 #define CX18_WMB_CLIENT14 0xc90138
75 #define CX18_DSP0_INTERRUPT_MASK 0xd0004C
77 #define APU_ROM_SYNC1 0x6D676553 /* "mgeS" */
78 #define APU_ROM_SYNC2 0x72646548 /* "rdeH" */
80 struct cx18_apu_rom_seghdr {
87 static int load_cpu_fw_direct(const char *fn, u8 __iomem *mem, struct cx18 *cx)
89 const struct firmware *fw = NULL;
92 u32 __iomem *dst = (u32 __iomem *)mem;
95 if (request_firmware(&fw, fn, &cx->pci_dev->dev)) {
96 CX18_ERR("Unable to open firmware %s\n", fn);
97 CX18_ERR("Did you put the firmware in the hotplug firmware directory?\n");
101 src = (const u32 *)fw->data;
103 for (i = 0; i < fw->size; i += 4096) {
104 cx18_setup_page(cx, i);
105 for (j = i; j < fw->size && j < i + 4096; j += 4) {
106 /* no need for endianness conversion on the ppc */
107 cx18_raw_writel(cx, *src, dst);
108 if (cx18_raw_readl(cx, dst) != *src) {
109 CX18_ERR("Mismatch at offset %x\n", i);
110 release_firmware(fw);
111 cx18_setup_page(cx, 0);
118 if (!test_bit(CX18_F_I_LOADED_FW, &cx->i_flags))
119 CX18_INFO("loaded %s firmware (%zu bytes)\n", fn, fw->size);
121 release_firmware(fw);
122 cx18_setup_page(cx, SCB_OFFSET);
126 static int load_apu_fw_direct(const char *fn, u8 __iomem *dst, struct cx18 *cx,
129 const struct firmware *fw = NULL;
133 struct cx18_apu_rom_seghdr seghdr;
139 if (request_firmware(&fw, fn, &cx->pci_dev->dev)) {
140 CX18_ERR("unable to open firmware %s\n", fn);
141 CX18_ERR("did you put the firmware in the hotplug firmware directory?\n");
142 cx18_setup_page(cx, 0);
147 src = (const u32 *)fw->data;
148 vers = fw->data + sizeof(seghdr);
151 apu_version = (vers[0] << 24) | (vers[4] << 16) | vers[32];
152 while (offset + sizeof(seghdr) < fw->size) {
153 const __le32 *shptr = (__force __le32 *)src + offset / 4;
155 seghdr.sync1 = le32_to_cpu(shptr[0]);
156 seghdr.sync2 = le32_to_cpu(shptr[1]);
157 seghdr.addr = le32_to_cpu(shptr[2]);
158 seghdr.size = le32_to_cpu(shptr[3]);
160 offset += sizeof(seghdr);
161 if (seghdr.sync1 != APU_ROM_SYNC1 ||
162 seghdr.sync2 != APU_ROM_SYNC2) {
163 offset += seghdr.size;
166 CX18_DEBUG_INFO("load segment %x-%x\n", seghdr.addr,
167 seghdr.addr + seghdr.size - 1);
168 if (*entry_addr == 0)
169 *entry_addr = seghdr.addr;
170 if (offset + seghdr.size > sz)
172 for (i = 0; i < seghdr.size; i += 4096) {
173 cx18_setup_page(cx, seghdr.addr + i);
174 for (j = i; j < seghdr.size && j < i + 4096; j += 4) {
175 /* no need for endianness conversion on the ppc */
176 cx18_raw_writel(cx, src[(offset + j) / 4],
177 dst + seghdr.addr + j);
178 if (cx18_raw_readl(cx, dst + seghdr.addr + j)
179 != src[(offset + j) / 4]) {
180 CX18_ERR("Mismatch at offset %x\n",
182 release_firmware(fw);
183 cx18_setup_page(cx, 0);
188 offset += seghdr.size;
190 if (!test_bit(CX18_F_I_LOADED_FW, &cx->i_flags))
191 CX18_INFO("loaded %s firmware V%08x (%zu bytes)\n",
192 fn, apu_version, fw->size);
194 release_firmware(fw);
195 cx18_setup_page(cx, 0);
199 void cx18_halt_firmware(struct cx18 *cx)
201 CX18_DEBUG_INFO("Preparing for firmware halt.\n");
202 cx18_write_reg_expect(cx, 0x000F000F, CX18_PROC_SOFT_RESET,
203 0x0000000F, 0x000F000F);
204 cx18_write_reg_expect(cx, 0x00020002, CX18_ADEC_CONTROL,
205 0x00000002, 0x00020002);
208 void cx18_init_power(struct cx18 *cx, int lowpwr)
210 /* power-down Spare and AOM PLLs */
211 /* power-up fast, slow and mpeg PLLs */
212 cx18_write_reg(cx, 0x00000008, CX18_PLL_POWER_DOWN);
214 /* ADEC out of sleep */
215 cx18_write_reg_expect(cx, 0x00020000, CX18_ADEC_CONTROL,
216 0x00000000, 0x00020002);
219 * The PLL parameters are based on the external crystal frequency that
222 * NTSC Color subcarrier freq * 8 =
223 * 4.5 MHz/286 * 455/2 * 8 = 28.63636363... MHz
225 * The accidents of history and rationale that explain from where this
226 * combination of magic numbers originate can be found in:
228 * [1] Abrahams, I. C., "Choice of Chrominance Subcarrier Frequency in
229 * the NTSC Standards", Proceedings of the I-R-E, January 1954, pp 79-80
231 * [2] Abrahams, I. C., "The 'Frequency Interleaving' Principle in the
232 * NTSC Standards", Proceedings of the I-R-E, January 1954, pp 81-83
234 * As Mike Bradley has rightly pointed out, it's not the exact crystal
235 * frequency that matters, only that all parts of the driver and
236 * firmware are using the same value (close to the ideal value).
238 * Since I have a strong suspicion that, if the firmware ever assumes a
239 * crystal value at all, it will assume 28.636360 MHz, the crystal
240 * freq used in calculations in this driver will be:
242 * xtal_freq = 28.636360 MHz
244 * an error of less than 0.13 ppm which is way, way better than any off
245 * the shelf crystal will have for accuracy anyway.
247 * Below I aim to run the PLLs' VCOs near 400 MHz to minimize errors.
249 * Many thanks to Jeff Campbell and Mike Bradley for their extensive
250 * investigation, experimentation, testing, and suggested solutions of
251 * audio/video sync problems with SVideo and CVBS captures.
254 /* the fast clock is at 200/245 MHz */
255 /* 1 * xtal_freq * 0x0d.f7df9b8 / 2 = 200 MHz: 400 MHz pre post-divide*/
256 /* 1 * xtal_freq * 0x11.1c71eb8 / 2 = 245 MHz: 490 MHz pre post-divide*/
257 cx18_write_reg(cx, lowpwr ? 0xD : 0x11, CX18_FAST_CLOCK_PLL_INT);
258 cx18_write_reg(cx, lowpwr ? 0x1EFBF37 : 0x038E3D7,
259 CX18_FAST_CLOCK_PLL_FRAC);
261 cx18_write_reg(cx, 2, CX18_FAST_CLOCK_PLL_POST);
262 cx18_write_reg(cx, 1, CX18_FAST_CLOCK_PLL_PRESCALE);
263 cx18_write_reg(cx, 4, CX18_FAST_CLOCK_PLL_ADJUST_BANDWIDTH);
265 /* set slow clock to 125/120 MHz */
266 /* xtal_freq * 0x0d.1861a20 / 3 = 125 MHz: 375 MHz before post-divide */
267 /* xtal_freq * 0x0c.92493f8 / 3 = 120 MHz: 360 MHz before post-divide */
268 cx18_write_reg(cx, lowpwr ? 0xD : 0xC, CX18_SLOW_CLOCK_PLL_INT);
269 cx18_write_reg(cx, lowpwr ? 0x30C344 : 0x124927F,
270 CX18_SLOW_CLOCK_PLL_FRAC);
271 cx18_write_reg(cx, 3, CX18_SLOW_CLOCK_PLL_POST);
273 /* mpeg clock pll 54MHz */
274 /* xtal_freq * 0xf.15f17f0 / 8 = 54 MHz: 432 MHz before post-divide */
275 cx18_write_reg(cx, 0xF, CX18_MPEG_CLOCK_PLL_INT);
276 cx18_write_reg(cx, 0x2BE2FE, CX18_MPEG_CLOCK_PLL_FRAC);
277 cx18_write_reg(cx, 8, CX18_MPEG_CLOCK_PLL_POST);
280 /* APU = SC or SC/2 = 125/62.5 */
285 /* VIM2 = disabled */
286 /* PCI = FC/2 = 90 */
288 /* DEMUX = disabled */
289 /* AO = SC/2 = 62.5 */
295 cx18_write_reg_expect(cx, 0xFFFF0020, CX18_CLOCK_SELECT1,
296 0x00000020, 0xFFFFFFFF);
297 cx18_write_reg_expect(cx, 0xFFFF0004, CX18_CLOCK_SELECT2,
298 0x00000004, 0xFFFFFFFF);
300 /* This doesn't explicitly set every clock select */
301 cx18_write_reg_expect(cx, 0x00060004, CX18_CLOCK_SELECT1,
302 0x00000004, 0x00060006);
303 cx18_write_reg_expect(cx, 0x00060006, CX18_CLOCK_SELECT2,
304 0x00000006, 0x00060006);
307 cx18_write_reg_expect(cx, 0xFFFF0002, CX18_HALF_CLOCK_SELECT1,
308 0x00000002, 0xFFFFFFFF);
309 cx18_write_reg_expect(cx, 0xFFFF0104, CX18_HALF_CLOCK_SELECT2,
310 0x00000104, 0xFFFFFFFF);
311 cx18_write_reg_expect(cx, 0xFFFF9026, CX18_CLOCK_ENABLE1,
312 0x00009026, 0xFFFFFFFF);
313 cx18_write_reg_expect(cx, 0xFFFF3105, CX18_CLOCK_ENABLE2,
314 0x00003105, 0xFFFFFFFF);
317 void cx18_init_memory(struct cx18 *cx)
319 cx18_msleep_timeout(10, 0);
320 cx18_write_reg_expect(cx, 0x00010000, CX18_DDR_SOFT_RESET,
321 0x00000000, 0x00010001);
322 cx18_msleep_timeout(10, 0);
324 cx18_write_reg(cx, cx->card->ddr.chip_config, CX18_DDR_CHIP_CONFIG);
326 cx18_msleep_timeout(10, 0);
328 cx18_write_reg(cx, cx->card->ddr.refresh, CX18_DDR_REFRESH);
329 cx18_write_reg(cx, cx->card->ddr.timing1, CX18_DDR_TIMING1);
330 cx18_write_reg(cx, cx->card->ddr.timing2, CX18_DDR_TIMING2);
332 cx18_msleep_timeout(10, 0);
334 /* Initialize DQS pad time */
335 cx18_write_reg(cx, cx->card->ddr.tune_lane, CX18_DDR_TUNE_LANE);
336 cx18_write_reg(cx, cx->card->ddr.initial_emrs, CX18_DDR_INITIAL_EMRS);
338 cx18_msleep_timeout(10, 0);
340 cx18_write_reg_expect(cx, 0x00020000, CX18_DDR_SOFT_RESET,
341 0x00000000, 0x00020002);
342 cx18_msleep_timeout(10, 0);
344 /* use power-down mode when idle */
345 cx18_write_reg(cx, 0x00000010, CX18_DDR_POWER_REG);
347 cx18_write_reg_expect(cx, 0x00010001, CX18_REG_BUS_TIMEOUT_EN,
348 0x00000001, 0x00010001);
350 cx18_write_reg(cx, 0x48, CX18_DDR_MB_PER_ROW_7);
351 cx18_write_reg(cx, 0xE0000, CX18_DDR_BASE_63_ADDR);
353 cx18_write_reg(cx, 0x00000101, CX18_WMB_CLIENT02); /* AO */
354 cx18_write_reg(cx, 0x00000101, CX18_WMB_CLIENT09); /* AI2 */
355 cx18_write_reg(cx, 0x00000101, CX18_WMB_CLIENT05); /* VIM1 */
356 cx18_write_reg(cx, 0x00000101, CX18_WMB_CLIENT06); /* AI1 */
357 cx18_write_reg(cx, 0x00000101, CX18_WMB_CLIENT07); /* 3D comb */
358 cx18_write_reg(cx, 0x00000101, CX18_WMB_CLIENT10); /* ME */
359 cx18_write_reg(cx, 0x00000101, CX18_WMB_CLIENT12); /* ENC */
360 cx18_write_reg(cx, 0x00000101, CX18_WMB_CLIENT13); /* PK */
361 cx18_write_reg(cx, 0x00000101, CX18_WMB_CLIENT11); /* RC */
362 cx18_write_reg(cx, 0x00000101, CX18_WMB_CLIENT14); /* AVO */
365 #define CX18_CPU_FIRMWARE "v4l-cx23418-cpu.fw"
366 #define CX18_APU_FIRMWARE "v4l-cx23418-apu.fw"
368 int cx18_firmware_init(struct cx18 *cx)
372 u32 api_args[MAX_MB_ARGUMENTS];
374 /* Allow chip to control CLKRUN */
375 cx18_write_reg(cx, 0x5, CX18_DSP0_INTERRUPT_MASK);
377 /* Stop the firmware */
378 cx18_write_reg_expect(cx, 0x000F000F, CX18_PROC_SOFT_RESET,
379 0x0000000F, 0x000F000F);
381 cx18_msleep_timeout(1, 0);
383 /* If the CPU is still running */
384 if ((cx18_read_reg(cx, CX18_PROC_SOFT_RESET) & 8) == 0) {
385 CX18_ERR("%s: couldn't stop CPU to load firmware\n", __func__);
389 cx18_sw1_irq_enable(cx, IRQ_CPU_TO_EPU | IRQ_APU_TO_EPU);
390 cx18_sw2_irq_enable(cx, IRQ_CPU_TO_EPU_ACK | IRQ_APU_TO_EPU_ACK);
392 sz = load_cpu_fw_direct(CX18_CPU_FIRMWARE, cx->enc_mem, cx);
396 /* The SCB & IPC area *must* be correct before starting the firmwares */
400 sz = load_apu_fw_direct(CX18_APU_FIRMWARE, cx->enc_mem, cx,
405 /* Start the CPU. The CPU will take care of the APU for us. */
406 cx18_write_reg_expect(cx, 0x00080000, CX18_PROC_SOFT_RESET,
407 0x00000000, 0x00080008);
409 /* Wait up to 500 ms for the APU to come out of reset */
411 retries < 50 && (cx18_read_reg(cx, CX18_PROC_SOFT_RESET) & 1) == 1;
413 cx18_msleep_timeout(10, 0);
415 cx18_msleep_timeout(200, 0);
418 (cx18_read_reg(cx, CX18_PROC_SOFT_RESET) & 1) == 1) {
419 CX18_ERR("Could not start the CPU\n");
424 * The CPU had once before set up to receive an interrupt for it's
425 * outgoing IRQ_CPU_TO_EPU_ACK to us. If it ever does this, we get an
426 * interrupt when it sends us an ack, but by the time we process it,
427 * that flag in the SW2 status register has been cleared by the CPU
428 * firmware. We'll prevent that not so useful condition from happening
429 * by clearing the CPU's interrupt enables for Ack IRQ's we want to
432 cx18_sw2_irq_disable_cpu(cx, IRQ_CPU_TO_EPU_ACK | IRQ_APU_TO_EPU_ACK);
434 /* Try a benign command to see if the CPU is alive and well */
435 sz = cx18_vapi_result(cx, api_args, CX18_CPU_DEBUG_PEEK32, 1, 0);
439 /* initialize GPIO */
440 cx18_write_reg_expect(cx, 0x14001400, 0xc78110, 0x00001400, 0x14001400);
444 MODULE_FIRMWARE(CX18_CPU_FIRMWARE);
445 MODULE_FIRMWARE(CX18_APU_FIRMWARE);