Home | History | Annotate | Line # | Download | only in vr
flash_vrip.c revision 1.5
      1 /* $NetBSD: flash_vrip.c,v 1.5 2005/12/11 12:17:34 christos Exp $ */
      2 
      3 /*
      4  * Copyright (c) 2002 The NetBSD Foundation, Inc.
      5  * All rights reserved.
      6  *
      7  * This code is derived from software contributed to The NetBSD Foundation
      8  * by Naoto Shimazaki of YOKOGAWA Electric Corporation.
      9  *
     10  * Redistribution and use in source and binary forms, with or without
     11  * modification, are permitted provided that the following conditions
     12  * are met:
     13  * 1. Redistributions of source code must retain the above copyright
     14  *    notice, this list of conditions and the following disclaimer.
     15  * 2. Redistributions in binary form must reproduce the above copyright
     16  *    notice, this list of conditions and the following disclaimer in the
     17  *    documentation and/or other materials provided with the distribution.
     18  * 3. All advertising materials mentioning features or use of this software
     19  *    must display the following acknowledgement:
     20  *        This product includes software developed by the NetBSD
     21  *        Foundation, Inc. and its contributors.
     22  * 4. Neither the name of The NetBSD Foundation nor the names of its
     23  *    contributors may be used to endorse or promote products derived
     24  *    from this software without specific prior written permission.
     25  *
     26  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
     27  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
     28  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     29  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
     30  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     31  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     32  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     33  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
     34  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     35  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     36  * POSSIBILITY OF SUCH DAMAGE.
     37  */
     38 
     39 /*
     40  * Flash Memory Driver
     41  */
     42 
     43 #include <sys/cdefs.h>
     44 __KERNEL_RCSID(0, "$NetBSD: flash_vrip.c,v 1.5 2005/12/11 12:17:34 christos Exp $");
     45 
     46 #include <sys/param.h>
     47 #include <sys/conf.h>
     48 #include <sys/device.h>
     49 #include <sys/kernel.h>
     50 #include <sys/malloc.h>
     51 #include <sys/proc.h>
     52 #include <sys/systm.h>
     53 
     54 #include <machine/bus.h>
     55 
     56 #include <hpcmips/vr/vripif.h>
     57 #include <hpcmips/vr/cfireg.h>
     58 #include <hpcmips/vr/flashreg.h>
     59 #include <hpcmips/vr/flashvar.h>
     60 
     61 #ifdef FLASH_DEBUG
     62 int	flash_debug = 0;
     63 #define DPRINTF(x)	if (flash_debug) printf x
     64 #else
     65 #define DPRINTF(x)
     66 #endif
     67 
     68 static int flash_probe(struct device *, struct cfdata *, void *);
     69 static void flash_attach(struct device *, struct device *, void *);
     70 
     71 const static struct flashops * find_command_set(u_int8_t cmdset0,
     72 						u_int8_t cmdset1);
     73 static int i28f128_probe(bus_space_tag_t, bus_space_handle_t);
     74 static int mbm29160_probe(bus_space_tag_t, bus_space_handle_t);
     75 static int is_block_same(struct flash_softc *, bus_size_t, const void *);
     76 static int probe_cfi(bus_space_tag_t iot, bus_space_handle_t ioh);
     77 
     78 static int intel_erase(struct flash_softc *, bus_size_t);
     79 static int intel_write(struct flash_softc *, bus_size_t);
     80 static int amd_erase(struct flash_softc *, bus_size_t);
     81 static int amd_write(struct flash_softc *, bus_size_t);
     82 
     83 extern struct cfdriver flash_cd;
     84 
     85 CFATTACH_DECL(flash_vrip, sizeof(struct flash_softc),
     86 	      flash_probe, flash_attach, NULL, NULL);
     87 
     88 dev_type_open(flashopen);
     89 dev_type_close(flashclose);
     90 dev_type_read(flashread);
     91 dev_type_write(flashwrite);
     92 
     93 const struct cdevsw flash_cdevsw = {
     94 	flashopen, flashclose, flashread, flashwrite, noioctl,
     95 	nostop, notty, nopoll, nommap, nokqfilter,
     96 };
     97 
     98 static const struct flash_command_set {
     99 	u_int8_t	fc_set0;
    100 	u_int8_t	fc_set1;
    101 	struct flashops	fc_ops;
    102 } flash_cmd[] = {
    103 	{
    104 		.fc_set0	= CFI_COMMSET_INTEL0,
    105 		.fc_set1	= CFI_COMMSET_INTEL1,
    106 		.fc_ops		= {
    107 			.fo_name	= "Intel",
    108 			.fo_erase	= intel_erase,
    109 			.fo_write	= intel_write,
    110 		}
    111 	},
    112 	{
    113 		.fc_set0	= CFI_COMMSET_AMDFJITU0,
    114 		.fc_set1	= CFI_COMMSET_AMDFJITU1,
    115 		.fc_ops		= {
    116 			.fo_name	= "AMD/Fujitsu",
    117 			.fo_erase	= amd_erase,
    118 			.fo_write	= amd_write,
    119 		}
    120 	},
    121 	{
    122 		.fc_set0	= 0,
    123 		.fc_set1	= 0,
    124 		.fc_ops		= {
    125 			.fo_name	= NULL,
    126 			.fo_erase	= NULL,
    127 			.fo_write	= NULL,
    128 		}
    129 	}
    130 };
    131 
    132 
    133 const static struct flashops *
    134 find_command_set(u_int8_t cmdset0, u_int8_t cmdset1)
    135 {
    136 	const struct flash_command_set	*fc;
    137 
    138 	for (fc = flash_cmd; fc->fc_ops.fo_name; fc++) {
    139 		if (cmdset0 == fc->fc_set0 && cmdset1 == fc->fc_set1)
    140 			return &fc->fc_ops;
    141 	}
    142 	return NULL;
    143 }
    144 
    145 static int
    146 probe_cfi(bus_space_tag_t iot, bus_space_handle_t ioh)
    147 {
    148 	const u_int8_t	*idstr = CFI_QUERY_ID_STR;
    149 	int		i;
    150 	u_int8_t	cmdset0;
    151 	u_int8_t	cmdset1;
    152 
    153 	/* start Common Flash Interface Query */
    154 	bus_space_write_2(iot, ioh, CFI_QUERY_OFFSET, CFI_READ_CFI_QUERY);
    155 
    156 	/* read CFI Query ID string */
    157 	i = CFI_QUERY_ID_STR_REG << 1;
    158 	do {
    159 		if (bus_space_read_2(iot, ioh, i) != *idstr) {
    160 			bus_space_write_2(iot, ioh, 0, FLASH_RESET);
    161 			return 1;
    162 		}
    163 		i += 2;
    164 		idstr++;
    165 	} while (*idstr);
    166 
    167 	cmdset0 = bus_space_read_2(iot, ioh, CFI_PRIM_COMM_REG0 << 1);
    168 	cmdset1 = bus_space_read_2(iot, ioh, CFI_PRIM_COMM_REG1 << 1);
    169 
    170 	/* switch flash to read mode */
    171 	bus_space_write_2(iot, ioh, 0, FLASH_RESET);
    172 
    173 	if (!find_command_set(cmdset0, cmdset1))
    174 		return 1;
    175 
    176 	return 0;
    177 }
    178 
    179 static int
    180 flash_probe(struct device *parent, struct cfdata *match, void *aux)
    181 {
    182 	struct vrip_attach_args	*va = aux;
    183 	bus_space_handle_t	ioh;
    184 
    185 	if (bus_space_map(va->va_iot, va->va_addr, va->va_size, 0, &ioh))
    186 		return 0;
    187 	if (!probe_cfi(va->va_iot, ioh)) {
    188 		DPRINTF("CFI ID str and command set recognized\n");
    189 		goto detect;
    190 	}
    191 	if (!i28f128_probe(va->va_iot, ioh)) {
    192 		DPRINTF("28F128 detected\n");
    193 		goto detect;
    194 	}
    195 	if (!mbm29160_probe(va->va_iot, ioh)) {
    196 		DPRINTF("29LV160 detected\n");
    197 		goto detect;
    198 	}
    199 	return 0;
    200 
    201 detect:
    202 	bus_space_unmap(va->va_iot, ioh, va->va_size);
    203 	return 1;
    204 }
    205 
    206 static void
    207 flash_attach(struct device *parent, struct device *self, void *aux)
    208 {
    209 	struct flash_softc	*sc = (void *) self;
    210 	struct vrip_attach_args	*va = aux;
    211 	int			i;
    212 	int			fence;
    213 	bus_space_tag_t		iot = va->va_iot;
    214 	bus_space_handle_t	ioh;
    215 	size_t			block_size;
    216 
    217 	if (bus_space_map(iot, va->va_addr, va->va_size, 0, &ioh)) {
    218 		printf(": can't map i/o space\n");
    219                 return;
    220   	}
    221 
    222 	sc->sc_iot = iot;
    223 	sc->sc_ioh = ioh;
    224 	sc->sc_size = va->va_size;
    225 	sc->sc_status = 0;
    226 
    227 	/*
    228 	 * Read entire CFI structure
    229 	 */
    230 	bus_space_write_2(iot, ioh, CFI_QUERY_OFFSET, CFI_READ_CFI_QUERY);
    231 	for (i = 0; i < CFI_TOTAL_SIZE; i++) {
    232 		sc->sc_cfi_raw[i] = bus_space_read_2(iot, ioh, i << 1);
    233 	}
    234 	bus_space_write_2(iot, ioh, 0, FLASH_RESET);
    235 
    236 	sc->sc_ops = find_command_set(sc->sc_cfi_raw[CFI_PRIM_COMM_REG0],
    237 				      sc->sc_cfi_raw[CFI_PRIM_COMM_REG1]);
    238 	if (sc->sc_ops) {
    239 		printf(": using %s command set", sc->sc_ops->fo_name);
    240 	} else {
    241 		printf("opps sc->sc_ops is NULL\n");
    242 	}
    243 
    244 	/*
    245 	 * determine size of the largest block
    246 	 */
    247 	sc->sc_block_size = 0;
    248 	i = CFI_EBLK1_INFO_REG;
    249 	fence = sc->sc_cfi_raw[CFI_NUM_ERASE_BLK_REG] * CFI_EBLK_INFO_SIZE
    250 		+ i;
    251 	for (; i < fence; i += CFI_EBLK_INFO_SIZE) {
    252 		if (sc->sc_cfi_raw[i + CFI_EBLK_INFO_NSECT0] == 0
    253 		    && sc->sc_cfi_raw[i + CFI_EBLK_INFO_NSECT1] == 0)
    254 			continue;
    255 		block_size
    256 			= (sc->sc_cfi_raw[i + CFI_EBLK_INFO_SECSIZE0] << 8)
    257 			+ (sc->sc_cfi_raw[i + CFI_EBLK_INFO_SECSIZE1] << 16);
    258 		if (sc->sc_block_size < block_size)
    259 			sc->sc_block_size = block_size;
    260 	}
    261 
    262 	if ((sc->sc_buf = malloc(sc->sc_block_size, M_DEVBUF, M_NOWAIT))
    263 	    == NULL) {
    264 		printf(": can't alloc buffer space\n");
    265 		return;
    266 	}
    267 
    268 	sc->sc_write_buffer_size
    269 		= 1 << (sc->sc_cfi_raw[CFI_MAX_WBUF_SIZE_REG0]
    270 			+ (sc->sc_cfi_raw[CFI_MAX_WBUF_SIZE_REG1] << 8));
    271 	sc->sc_typ_word_prog_timo
    272 		= 1 << sc->sc_cfi_raw[CFI_TYP_WORD_PROG_REG];
    273 	sc->sc_max_word_prog_timo
    274 		= 1 << sc->sc_cfi_raw[CFI_MAX_WORD_PROG_REG];
    275 	sc->sc_typ_buffer_write_timo
    276 		= 1 << sc->sc_cfi_raw[CFI_TYP_BUF_WRITE_REG];
    277 	sc->sc_max_buffer_write_timo
    278 		= 1 << sc->sc_cfi_raw[CFI_MAX_BUF_WRITE_REG];
    279 	sc->sc_typ_block_erase_timo
    280 		= 1 << sc->sc_cfi_raw[CFI_TYP_BLOCK_ERASE_REG];
    281 	sc->sc_max_block_erase_timo
    282 		= 1 << sc->sc_cfi_raw[CFI_MAX_BLOCK_ERASE_REG];
    283 
    284 	printf("\n");
    285 
    286 #ifdef FLASH_DEBUG
    287 	printf("read_cfi: extract cfi\n");
    288 	printf("max block size: %dbyte\n", sc->sc_block_size);
    289 	printf("write buffer size: %dbyte\n", sc->sc_write_buffer_size);
    290 	printf("typical word program timeout: %dusec\n",
    291 	       sc->sc_typ_word_prog_timo);
    292 	printf("maximam word program timeout: %dusec (%d time of typ)\n",
    293 	       sc->sc_typ_word_prog_timo * sc->sc_max_word_prog_timo,
    294 	       sc->sc_max_word_prog_timo);
    295 	printf("typical buffer write timeout: %dusec\n",
    296 	       sc->sc_typ_buffer_write_timo);
    297 	printf("maximam buffer write timeout: %dusec (%d time of typ)\n",
    298 	       sc->sc_typ_buffer_write_timo * sc->sc_max_buffer_write_timo,
    299 	       sc->sc_max_buffer_write_timo);
    300 	printf("typical block erase timeout: %dmsec\n",
    301 	       sc->sc_typ_block_erase_timo);
    302 	printf("maximam block erase timeout: %dmsec (%d time of typ)\n",
    303 	       sc->sc_typ_block_erase_timo * sc->sc_max_block_erase_timo,
    304 	       sc->sc_max_block_erase_timo);
    305 
    306 	printf("read_cfi: dump cfi\n");
    307 	for (i = 0; i < CFI_TOTAL_SIZE;) {
    308 		int	j;
    309 		for (j = 0; j < 16; j++) {
    310 			printf("%02x ", sc->sc_cfi_raw[i++]);
    311 		}
    312 		printf("\n");
    313 	}
    314 #endif
    315 }
    316 
    317 int
    318 flashopen(dev_t dev, int flag, int mode, struct lwp *l)
    319 {
    320 	struct flash_softc	*sc;
    321 
    322 	if ((sc = device_lookup(&flash_cd, minor(dev))) == NULL)
    323 		return ENXIO;
    324 	if (sc->sc_status & FLASH_ST_BUSY)
    325 		return EBUSY;
    326 	sc->sc_status |= FLASH_ST_BUSY;
    327 	return 0;
    328 }
    329 
    330 int
    331 flashclose(dev_t dev, int flag, int mode, struct lwp *l)
    332 {
    333 	struct flash_softc	*sc;
    334 
    335 	sc = device_lookup(&flash_cd, minor(dev));
    336 	sc->sc_status &= ~FLASH_ST_BUSY;
    337 	return 0;
    338 }
    339 
    340 int
    341 flashread(dev_t dev, struct uio *uio, int flag)
    342 {
    343 	struct flash_softc	*sc;
    344 	bus_space_tag_t		iot;
    345 	bus_space_handle_t	ioh;
    346 	bus_size_t		off;
    347 	int			total;
    348 	int			count;
    349 	int			error;
    350 
    351 	sc = device_lookup(&flash_cd, minor(dev));
    352 	iot = sc->sc_iot;
    353 	ioh = sc->sc_ioh;
    354 
    355 	off = uio->uio_offset;
    356 	total = min(sc->sc_size - off, uio->uio_resid);
    357 
    358 	while (total > 0) {
    359 		count = min(sc->sc_block_size, uio->uio_resid);
    360 		bus_space_read_region_1(iot, ioh, off, sc->sc_buf, count);
    361 		if ((error = uiomove(sc->sc_buf, count, uio)) != 0)
    362 			return error;
    363 		off += count;
    364 		total -= count;
    365 	}
    366 	return 0;
    367 }
    368 
    369 
    370 int
    371 flashwrite(dev_t dev, struct uio *uio, int flag)
    372 {
    373 	struct flash_softc	*sc;
    374 	bus_space_tag_t		iot;
    375 	bus_space_handle_t	ioh;
    376 	bus_size_t		off;
    377 	int			stat;
    378 	int			error;
    379 
    380 	sc = device_lookup(&flash_cd, minor(dev));
    381 
    382 	if (sc->sc_size < uio->uio_offset + uio->uio_resid)
    383 		return ENOSPC;
    384 	if (uio->uio_offset % sc->sc_block_size)
    385 		return EINVAL;
    386 	if (uio->uio_resid % sc->sc_block_size)
    387 		return EINVAL;
    388 
    389 	iot = sc->sc_iot;
    390 	ioh = sc->sc_ioh;
    391 
    392 	for (off = uio->uio_offset;
    393 	     uio->uio_resid > 0;
    394 	     off += sc->sc_block_size) {
    395 		if ((error = uiomove(sc->sc_buf, sc->sc_block_size, uio)) != 0)
    396 			return error;
    397 		if (is_block_same(sc, off, sc->sc_buf))
    398 			continue;
    399 		if ((stat = flash_block_erase(sc, off)) != 0) {
    400 			printf("block erase failed status = 0x%x\n", stat);
    401 			return EIO;
    402 		}
    403 		if ((stat = flash_block_write(sc, off)) != 0) {
    404 			printf("block write failed status = 0x%x\n", stat);
    405 			return EIO;
    406 		}
    407 	}
    408 	return 0;
    409 }
    410 
    411 /*
    412  * XXX
    413  * this function is too much specific for the device.
    414  */
    415 static int
    416 i28f128_probe(bus_space_tag_t iot, bus_space_handle_t ioh)
    417 {
    418 	static const u_int8_t	vendor_code[] = {
    419 		0x89,	/* manufacturer code: 	intel */
    420 		0x18,	/* device code:		28F128 */
    421 	};
    422 
    423 	static const u_int8_t	idstr[] = {
    424 		'Q', 'R', 'Y',
    425 		0x01, 0x00,
    426 		0x31, 0x00,
    427 		0xff
    428 	};
    429 
    430 	int	i;
    431 
    432 	/* start Common Flash Interface Query */
    433 	bus_space_write_2(iot, ioh, 0, CFI_READ_CFI_QUERY);
    434 	/* read CFI Query ID string */
    435 	for (i = 0; idstr[i] != 0xff; i++) {
    436 		if (bus_space_read_2(iot, ioh, (0x10 + i) << 1) != idstr[i])
    437 			return 1;
    438 	}
    439 
    440 	/* read manufacturer code and device code */
    441 	if (bus_space_read_2(iot, ioh, 0x00) != vendor_code[0])
    442 		return 1;
    443 	if (bus_space_read_2(iot, ioh, 0x02) != vendor_code[1])
    444 		return 1;
    445 
    446 	bus_space_write_2(iot, ioh, 0, I28F128_RESET);
    447 	return 0;
    448 }
    449 
    450 /*
    451  * XXX
    452  * this function is too much specific for the device.
    453  */
    454 static int
    455 mbm29160_probe(bus_space_tag_t iot, bus_space_handle_t ioh)
    456 {
    457 	static const u_int16_t	vendor_code[] = {
    458 		0x0004,	/* manufacturer code: 	intel */
    459 		0x2249,	/* device code:		29LV160BE */
    460 	};
    461 
    462 	static const u_int8_t	idstr[] = {
    463 		'Q', 'R', 'Y',
    464 		0x02, 0x00,
    465 		0x40, 0x00,
    466 		0xff
    467 	};
    468 
    469 	int	i;
    470 
    471 	/* start Common Flash Interface Query */
    472 	bus_space_write_2(iot, ioh, 0xaa, CFI_READ_CFI_QUERY);
    473 	/* read CFI Query ID string */
    474 	for (i = 0; idstr[i] != 0xff; i++) {
    475 		if (bus_space_read_2(iot, ioh, (0x10 + i) << 1) != idstr[i])
    476 			return 1;
    477 	}
    478 
    479 	bus_space_write_2(iot, ioh, 0, 0xff);
    480 
    481 	/* read manufacturer code and device code */
    482 	bus_space_write_2(iot, ioh, 0x555 << 1, 0xaa);
    483 	bus_space_write_2(iot, ioh, 0x2aa << 1, 0x55);
    484 	bus_space_write_2(iot, ioh, 0x555 << 1, 0x90);
    485 	if (bus_space_read_2(iot, ioh, 0x00) != vendor_code[0])
    486 		return 1;
    487 	if (bus_space_read_2(iot, ioh, 0x02) != vendor_code[1])
    488 		return 1;
    489 
    490 	bus_space_write_2(iot, ioh, 0, 0xff);
    491 	return 0;
    492 }
    493 
    494 static int
    495 is_block_same(struct flash_softc *sc, bus_size_t offset, const void *bufp)
    496 {
    497 	bus_space_tag_t		iot = sc->sc_iot;
    498 	bus_space_handle_t	ioh = sc->sc_ioh;
    499 	const u_int8_t		*p = bufp;
    500 	int			count = sc->sc_block_size;
    501 
    502 	while (count-- > 0) {
    503 		if (bus_space_read_1(iot, ioh, offset++) != *p++)
    504 			return 0;
    505 	}
    506 	return 1;
    507 }
    508 
    509 static int
    510 intel_erase(struct flash_softc *sc, bus_size_t offset)
    511 {
    512 	bus_space_tag_t		iot = sc->sc_iot;
    513 	bus_space_handle_t	ioh = sc->sc_ioh;
    514 	int			status;
    515 	int			i;
    516 
    517 	bus_space_write_2(iot, ioh, offset, I28F128_BLK_ERASE_1ST);
    518 	bus_space_write_2(iot, ioh, offset, I28F128_BLK_ERASE_2ND);
    519 
    520 	status = 0;
    521 	for (i = sc->sc_max_block_erase_timo; i > 0; i--) {
    522 		tsleep(sc, PRIBIO, "blockerase",
    523 		       1 + (sc->sc_typ_block_erase_timo * hz) / 1000);
    524 		if ((status = bus_space_read_2(iot, ioh, offset))
    525 		    & I28F128_S_READY)
    526 			break;
    527 	}
    528 	if (i == 0)
    529 		status |= FLASH_TIMEOUT;
    530 
    531 	bus_space_write_2(iot, ioh, offset, I28F128_CLEAR_STATUS);
    532 	bus_space_write_2(iot, ioh, offset, I28F128_RESET);
    533 
    534 	return status & (FLASH_TIMEOUT
    535 			 | I28F128_S_ERASE_SUSPEND
    536 			 | I28F128_S_COMSEQ_ERROR
    537 			 | I28F128_S_ERASE_ERROR
    538 			 | I28F128_S_BLOCK_LOCKED);
    539 }
    540 
    541 static int
    542 intel_write(struct flash_softc *sc, bus_size_t offset)
    543 {
    544 	bus_space_tag_t		iot = sc->sc_iot;
    545 	bus_space_handle_t	ioh = sc->sc_ioh;
    546 	int			wbuf_size;
    547 	int			timo;
    548 	int			status;
    549 	bus_size_t		fence;
    550 	int			i;
    551 	const u_int16_t		*p;
    552 
    553 	/* wbuf_size = size in u_int16_t */
    554 	wbuf_size = sc->sc_write_buffer_size >> 1;
    555 
    556 	p = (u_int16_t *) sc->sc_buf;
    557 	fence = offset + sc->sc_block_size;
    558 	do {
    559 		status = 0;
    560 		for (timo = sc->sc_max_buffer_write_timo; timo > 0; timo--) {
    561 			bus_space_write_2(iot, ioh, offset,
    562 					  I28F128_WRITE_BUFFER);
    563 			status = bus_space_read_2(iot, ioh, offset);
    564 			if (status & I28F128_XS_BUF_AVAIL)
    565 				break;
    566 			DELAY(sc->sc_typ_buffer_write_timo);
    567 		}
    568 		if (timo == 0) {
    569 			status |= FLASH_TIMEOUT;
    570 			goto errout;
    571 		}
    572 
    573 		bus_space_write_2(iot, ioh, offset, wbuf_size - 1);
    574 
    575 		for (i = wbuf_size; i > 0; i--, p++, offset += 2)
    576 			bus_space_write_2(iot, ioh, offset, *p);
    577 
    578 		bus_space_write_2(iot, ioh, offset, I28F128_WBUF_CONFIRM);
    579 
    580 		do {
    581 			bus_space_write_2(iot, ioh, offset,
    582 					  I28F128_READ_STATUS);
    583 			status = bus_space_read_2(iot, ioh, offset);
    584 		} while (!(status & I28F128_S_READY));
    585 
    586 	} while (offset < fence);
    587 
    588 	bus_space_write_2(iot, ioh, offset, I28F128_CLEAR_STATUS);
    589 	bus_space_write_2(iot, ioh, offset, I28F128_RESET);
    590 
    591 	return 0;
    592 
    593 errout:
    594 	bus_space_write_2(iot, ioh, offset, I28F128_CLEAR_STATUS);
    595 	bus_space_write_2(iot, ioh, offset, I28F128_RESET);
    596 
    597 	status &= (FLASH_TIMEOUT
    598 		   | I28F128_S_PROG_ERROR
    599 		   | I28F128_S_COMSEQ_ERROR
    600 		   | I28F128_S_LOW_VOLTAGE
    601 		   | I28F128_S_PROG_SUSPEND
    602 		   | I28F128_S_BLOCK_LOCKED);
    603 	return status;
    604 }
    605 
    606 static int
    607 amd_erase_sector(struct flash_softc *sc, bus_size_t offset)
    608 {
    609 	bus_space_tag_t		iot = sc->sc_iot;
    610 	bus_space_handle_t	ioh = sc->sc_ioh;
    611 	int			i;
    612 
    613 	DPRINTF(("amd_erase_sector offset = %08lx\n", offset));
    614 
    615 	bus_space_write_2(iot, ioh,
    616 			  MBM29LV160_COMM_ADDR0, MBM29LV160_COMM_CMD0);
    617 	bus_space_write_2(iot, ioh,
    618 			  MBM29LV160_COMM_ADDR1, MBM29LV160_COMM_CMD1);
    619 	bus_space_write_2(iot, ioh,
    620 			  MBM29LV160_COMM_ADDR2, MBM29LV160_ESECT_CMD2);
    621 	bus_space_write_2(iot, ioh,
    622 			  MBM29LV160_COMM_ADDR3, MBM29LV160_ESECT_CMD3);
    623 	bus_space_write_2(iot, ioh,
    624 			  MBM29LV160_COMM_ADDR4, MBM29LV160_ESECT_CMD4);
    625 	bus_space_write_2(iot, ioh, offset, MBM29LV160_ESECT_CMD5);
    626 
    627 	for (i = sc->sc_max_block_erase_timo; i > 0; i--) {
    628 		tsleep(sc, PRIBIO, "blockerase",
    629 		       1 + (sc->sc_typ_block_erase_timo * hz) / 1000);
    630 		if (bus_space_read_2(iot, ioh, offset) == 0xffff)
    631 			return 0;
    632 	}
    633 
    634 	return FLASH_TIMEOUT;
    635 }
    636 
    637 static int
    638 amd_erase(struct flash_softc *sc, bus_size_t offset)
    639 {
    640 	static const struct mbm29lv_subsect {
    641 		u_int16_t	devcode;
    642 		u_int32_t	subsect_mask;
    643 		u_int32_t	subsect_addr;
    644 	} subsect[] = {
    645 		{
    646 			MBM29LV160TE_DEVCODE,
    647 			MBM29LV160_SUBSECT_MASK,
    648 			MBM29LV160TE_SUBSECT_ADDR
    649 		},
    650 		{
    651 			MBM29LV160BE_DEVCODE,
    652 			MBM29LV160_SUBSECT_MASK,
    653 			MBM29LV160BE_SUBSECT_ADDR
    654 		},
    655 		{ 0, 0, 0 }
    656 	};
    657 
    658 	bus_space_tag_t			iot = sc->sc_iot;
    659 	bus_space_handle_t		ioh = sc->sc_ioh;
    660 	u_int16_t			devcode;
    661 	const struct mbm29lv_subsect	*ss;
    662 	bus_size_t			fence;
    663 	int				step;
    664 	int				status;
    665 
    666 	bus_space_write_2(iot, ioh,
    667 			  MBM29LV160_COMM_ADDR0, MBM29LV160_COMM_CMD0);
    668 	bus_space_write_2(iot, ioh,
    669 			  MBM29LV160_COMM_ADDR1, MBM29LV160_COMM_CMD1);
    670 	bus_space_write_2(iot, ioh,
    671 			  MBM29LV160_COMM_ADDR2, MBM29LV160_SIGN_CMD2);
    672 	devcode = bus_space_read_2(iot, ioh, MBM29LV160_DEVCODE_REG);
    673 
    674 	for (ss = subsect; ss->devcode; ss++) {
    675 		if (ss->devcode == devcode)
    676 			break;
    677 	}
    678 	if (ss->devcode == 0) {
    679 		printf("flash: amd_erase(): unknown device code %04x\n",
    680 		       devcode);
    681 		return -1;
    682 	}
    683 
    684 	DPRINTF(("flash: amd_erase(): devcode = %04x subsect = %08x\n",
    685 		 devcode, ss->subsect_addr));
    686 
    687 	fence = offset + sc->sc_block_size;
    688 	step = (offset & ss->subsect_mask) == ss->subsect_addr
    689 		? MBM29LV160_SUBSECT_SIZE : MBM29LV160_SECT_SIZE;
    690 	do {
    691 		if ((status = amd_erase_sector(sc, offset)) != 0)
    692 			return status;
    693 		offset += step;
    694 	} while (offset < fence);
    695 
    696 	return 0;
    697 }
    698 
    699 static int
    700 amd_write(struct flash_softc *sc, bus_size_t offset)
    701 {
    702 	bus_space_tag_t		iot = sc->sc_iot;
    703 	bus_space_handle_t	ioh = sc->sc_ioh;
    704 	int			timo;
    705 	bus_size_t		fence;
    706 	const u_int16_t		*p;
    707 
    708 	p = (u_int16_t *) sc->sc_buf;
    709 	fence = offset + sc->sc_block_size;
    710 	do {
    711 		bus_space_write_2(iot, ioh,
    712 				  MBM29LV160_COMM_ADDR0,
    713 				  MBM29LV160_COMM_CMD0);
    714 		bus_space_write_2(iot, ioh,
    715 				  MBM29LV160_COMM_ADDR1,
    716 				  MBM29LV160_COMM_CMD1);
    717 		bus_space_write_2(iot, ioh,
    718 				  MBM29LV160_COMM_ADDR2,
    719 				  MBM29LV160_PROG_CMD2);
    720 		bus_space_write_2(iot, ioh, offset, *p);
    721 
    722 		for (timo = sc->sc_max_word_prog_timo; timo > 0; timo--) {
    723 			if (bus_space_read_2(iot, ioh, offset) == *p)
    724 				break;
    725 			DELAY(sc->sc_typ_word_prog_timo);
    726 		}
    727 		if (timo == 0)
    728 			return FLASH_TIMEOUT;
    729 
    730 		p++;
    731 		offset += 2;
    732 	} while (offset < fence);
    733 
    734 	return 0;
    735 }
    736