if_wb.c revision 93818
1/*
2 * Copyright (c) 1997, 1998
3 *	Bill Paul <wpaul@ctr.columbia.edu>.  All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 *    notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 *    notice, this list of conditions and the following disclaimer in the
12 *    documentation and/or other materials provided with the distribution.
13 * 3. All advertising materials mentioning features or use of this software
14 *    must display the following acknowledgement:
15 *	This product includes software developed by Bill Paul.
16 * 4. Neither the name of the author nor the names of any co-contributors
17 *    may be used to endorse or promote products derived from this software
18 *    without specific prior written permission.
19 *
20 * THIS SOFTWARE IS PROVIDED BY Bill Paul AND CONTRIBUTORS ``AS IS'' AND
21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 * ARE DISCLAIMED.  IN NO EVENT SHALL Bill Paul OR THE VOICES IN HIS HEAD
24 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
25 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
26 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
27 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
28 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
29 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
30 * THE POSSIBILITY OF SUCH DAMAGE.
31 *
32 * $FreeBSD: head/sys/pci/if_wb.c 93818 2002-04-04 21:03:38Z jhb $
33 */
34
35/*
36 * Winbond fast ethernet PCI NIC driver
37 *
38 * Supports various cheap network adapters based on the Winbond W89C840F
39 * fast ethernet controller chip. This includes adapters manufactured by
40 * Winbond itself and some made by Linksys.
41 *
42 * Written by Bill Paul <wpaul@ctr.columbia.edu>
43 * Electrical Engineering Department
44 * Columbia University, New York City
45 */
46
47/*
48 * The Winbond W89C840F chip is a bus master; in some ways it resembles
49 * a DEC 'tulip' chip, only not as complicated. Unfortunately, it has
50 * one major difference which is that while the registers do many of
51 * the same things as a tulip adapter, the offsets are different: where
52 * tulip registers are typically spaced 8 bytes apart, the Winbond
53 * registers are spaced 4 bytes apart. The receiver filter is also
54 * programmed differently.
55 *
56 * Like the tulip, the Winbond chip uses small descriptors containing
57 * a status word, a control word and 32-bit areas that can either be used
58 * to point to two external data blocks, or to point to a single block
59 * and another descriptor in a linked list. Descriptors can be grouped
60 * together in blocks to form fixed length rings or can be chained
61 * together in linked lists. A single packet may be spread out over
62 * several descriptors if necessary.
63 *
64 * For the receive ring, this driver uses a linked list of descriptors,
65 * each pointing to a single mbuf cluster buffer, which us large enough
66 * to hold an entire packet. The link list is looped back to created a
67 * closed ring.
68 *
69 * For transmission, the driver creates a linked list of 'super descriptors'
70 * which each contain several individual descriptors linked toghether.
71 * Each 'super descriptor' contains WB_MAXFRAGS descriptors, which we
72 * abuse as fragment pointers. This allows us to use a buffer managment
73 * scheme very similar to that used in the ThunderLAN and Etherlink XL
74 * drivers.
75 *
76 * Autonegotiation is performed using the external PHY via the MII bus.
77 * The sample boards I have all use a Davicom PHY.
78 *
79 * Note: the author of the Linux driver for the Winbond chip alludes
80 * to some sort of flaw in the chip's design that seems to mandate some
81 * drastic workaround which signigicantly impairs transmit performance.
82 * I have no idea what he's on about: transmit performance with all
83 * three of my test boards seems fine.
84 */
85
86#include "opt_bdg.h"
87
88#include <sys/param.h>
89#include <sys/systm.h>
90#include <sys/sockio.h>
91#include <sys/mbuf.h>
92#include <sys/malloc.h>
93#include <sys/kernel.h>
94#include <sys/socket.h>
95#include <sys/queue.h>
96
97#include <net/if.h>
98#include <net/if_arp.h>
99#include <net/ethernet.h>
100#include <net/if_dl.h>
101#include <net/if_media.h>
102
103#include <net/bpf.h>
104
105#include <vm/vm.h>              /* for vtophys */
106#include <vm/pmap.h>            /* for vtophys */
107#include <machine/bus_memio.h>
108#include <machine/bus_pio.h>
109#include <machine/bus.h>
110#include <machine/resource.h>
111#include <sys/bus.h>
112#include <sys/rman.h>
113
114#include <pci/pcireg.h>
115#include <pci/pcivar.h>
116
117#include <dev/mii/mii.h>
118#include <dev/mii/miivar.h>
119
120/* "controller miibus0" required.  See GENERIC if you get errors here. */
121#include "miibus_if.h"
122
123#define WB_USEIOSPACE
124
125#include <pci/if_wbreg.h>
126
127MODULE_DEPEND(wb, miibus, 1, 1, 1);
128
129#ifndef lint
130static const char rcsid[] =
131  "$FreeBSD: head/sys/pci/if_wb.c 93818 2002-04-04 21:03:38Z jhb $";
132#endif
133
134/*
135 * Various supported device vendors/types and their names.
136 */
137static struct wb_type wb_devs[] = {
138	{ WB_VENDORID, WB_DEVICEID_840F,
139		"Winbond W89C840F 10/100BaseTX" },
140	{ CP_VENDORID, CP_DEVICEID_RL100,
141		"Compex RL100-ATX 10/100baseTX" },
142	{ 0, 0, NULL }
143};
144
145static int wb_probe		(device_t);
146static int wb_attach		(device_t);
147static int wb_detach		(device_t);
148
149static void wb_bfree		(caddr_t, void *args);
150static int wb_newbuf		(struct wb_softc *,
151					struct wb_chain_onefrag *,
152					struct mbuf *);
153static int wb_encap		(struct wb_softc *, struct wb_chain *,
154					struct mbuf *);
155
156static void wb_rxeof		(struct wb_softc *);
157static void wb_rxeoc		(struct wb_softc *);
158static void wb_txeof		(struct wb_softc *);
159static void wb_txeoc		(struct wb_softc *);
160static void wb_intr		(void *);
161static void wb_tick		(void *);
162static void wb_start		(struct ifnet *);
163static int wb_ioctl		(struct ifnet *, u_long, caddr_t);
164static void wb_init		(void *);
165static void wb_stop		(struct wb_softc *);
166static void wb_watchdog		(struct ifnet *);
167static void wb_shutdown		(device_t);
168static int wb_ifmedia_upd	(struct ifnet *);
169static void wb_ifmedia_sts	(struct ifnet *, struct ifmediareq *);
170
171static void wb_eeprom_putbyte	(struct wb_softc *, int);
172static void wb_eeprom_getword	(struct wb_softc *, int, u_int16_t *);
173static void wb_read_eeprom	(struct wb_softc *, caddr_t, int, int, int);
174static void wb_mii_sync		(struct wb_softc *);
175static void wb_mii_send		(struct wb_softc *, u_int32_t, int);
176static int wb_mii_readreg	(struct wb_softc *, struct wb_mii_frame *);
177static int wb_mii_writereg	(struct wb_softc *, struct wb_mii_frame *);
178
179static void wb_setcfg		(struct wb_softc *, u_int32_t);
180static u_int8_t wb_calchash	(caddr_t);
181static void wb_setmulti		(struct wb_softc *);
182static void wb_reset		(struct wb_softc *);
183static void wb_fixmedia		(struct wb_softc *);
184static int wb_list_rx_init	(struct wb_softc *);
185static int wb_list_tx_init	(struct wb_softc *);
186
187static int wb_miibus_readreg	(device_t, int, int);
188static int wb_miibus_writereg	(device_t, int, int, int);
189static void wb_miibus_statchg	(device_t);
190
191#ifdef WB_USEIOSPACE
192#define WB_RES			SYS_RES_IOPORT
193#define WB_RID			WB_PCI_LOIO
194#else
195#define WB_RES			SYS_RES_MEMORY
196#define WB_RID			WB_PCI_LOMEM
197#endif
198
199static device_method_t wb_methods[] = {
200	/* Device interface */
201	DEVMETHOD(device_probe,		wb_probe),
202	DEVMETHOD(device_attach,	wb_attach),
203	DEVMETHOD(device_detach,	wb_detach),
204	DEVMETHOD(device_shutdown,	wb_shutdown),
205
206	/* bus interface, for miibus */
207	DEVMETHOD(bus_print_child,	bus_generic_print_child),
208	DEVMETHOD(bus_driver_added,	bus_generic_driver_added),
209
210	/* MII interface */
211	DEVMETHOD(miibus_readreg,	wb_miibus_readreg),
212	DEVMETHOD(miibus_writereg,	wb_miibus_writereg),
213	DEVMETHOD(miibus_statchg,	wb_miibus_statchg),
214	{ 0, 0 }
215};
216
217static driver_t wb_driver = {
218	"wb",
219	wb_methods,
220	sizeof(struct wb_softc)
221};
222
223static devclass_t wb_devclass;
224
225DRIVER_MODULE(if_wb, pci, wb_driver, wb_devclass, 0, 0);
226DRIVER_MODULE(miibus, wb, miibus_driver, miibus_devclass, 0, 0);
227
228#define WB_SETBIT(sc, reg, x)				\
229	CSR_WRITE_4(sc, reg,				\
230		CSR_READ_4(sc, reg) | x)
231
232#define WB_CLRBIT(sc, reg, x)				\
233	CSR_WRITE_4(sc, reg,				\
234		CSR_READ_4(sc, reg) & ~x)
235
236#define SIO_SET(x)					\
237	CSR_WRITE_4(sc, WB_SIO,				\
238		CSR_READ_4(sc, WB_SIO) | x)
239
240#define SIO_CLR(x)					\
241	CSR_WRITE_4(sc, WB_SIO,				\
242		CSR_READ_4(sc, WB_SIO) & ~x)
243
244/*
245 * Send a read command and address to the EEPROM, check for ACK.
246 */
247static void wb_eeprom_putbyte(sc, addr)
248	struct wb_softc		*sc;
249	int			addr;
250{
251	register int		d, i;
252
253	d = addr | WB_EECMD_READ;
254
255	/*
256	 * Feed in each bit and stobe the clock.
257	 */
258	for (i = 0x400; i; i >>= 1) {
259		if (d & i) {
260			SIO_SET(WB_SIO_EE_DATAIN);
261		} else {
262			SIO_CLR(WB_SIO_EE_DATAIN);
263		}
264		DELAY(100);
265		SIO_SET(WB_SIO_EE_CLK);
266		DELAY(150);
267		SIO_CLR(WB_SIO_EE_CLK);
268		DELAY(100);
269	}
270
271	return;
272}
273
274/*
275 * Read a word of data stored in the EEPROM at address 'addr.'
276 */
277static void wb_eeprom_getword(sc, addr, dest)
278	struct wb_softc		*sc;
279	int			addr;
280	u_int16_t		*dest;
281{
282	register int		i;
283	u_int16_t		word = 0;
284
285	/* Enter EEPROM access mode. */
286	CSR_WRITE_4(sc, WB_SIO, WB_SIO_EESEL|WB_SIO_EE_CS);
287
288	/*
289	 * Send address of word we want to read.
290	 */
291	wb_eeprom_putbyte(sc, addr);
292
293	CSR_WRITE_4(sc, WB_SIO, WB_SIO_EESEL|WB_SIO_EE_CS);
294
295	/*
296	 * Start reading bits from EEPROM.
297	 */
298	for (i = 0x8000; i; i >>= 1) {
299		SIO_SET(WB_SIO_EE_CLK);
300		DELAY(100);
301		if (CSR_READ_4(sc, WB_SIO) & WB_SIO_EE_DATAOUT)
302			word |= i;
303		SIO_CLR(WB_SIO_EE_CLK);
304		DELAY(100);
305	}
306
307	/* Turn off EEPROM access mode. */
308	CSR_WRITE_4(sc, WB_SIO, 0);
309
310	*dest = word;
311
312	return;
313}
314
315/*
316 * Read a sequence of words from the EEPROM.
317 */
318static void wb_read_eeprom(sc, dest, off, cnt, swap)
319	struct wb_softc		*sc;
320	caddr_t			dest;
321	int			off;
322	int			cnt;
323	int			swap;
324{
325	int			i;
326	u_int16_t		word = 0, *ptr;
327
328	for (i = 0; i < cnt; i++) {
329		wb_eeprom_getword(sc, off + i, &word);
330		ptr = (u_int16_t *)(dest + (i * 2));
331		if (swap)
332			*ptr = ntohs(word);
333		else
334			*ptr = word;
335	}
336
337	return;
338}
339
340/*
341 * Sync the PHYs by setting data bit and strobing the clock 32 times.
342 */
343static void wb_mii_sync(sc)
344	struct wb_softc		*sc;
345{
346	register int		i;
347
348	SIO_SET(WB_SIO_MII_DIR|WB_SIO_MII_DATAIN);
349
350	for (i = 0; i < 32; i++) {
351		SIO_SET(WB_SIO_MII_CLK);
352		DELAY(1);
353		SIO_CLR(WB_SIO_MII_CLK);
354		DELAY(1);
355	}
356
357	return;
358}
359
360/*
361 * Clock a series of bits through the MII.
362 */
363static void wb_mii_send(sc, bits, cnt)
364	struct wb_softc		*sc;
365	u_int32_t		bits;
366	int			cnt;
367{
368	int			i;
369
370	SIO_CLR(WB_SIO_MII_CLK);
371
372	for (i = (0x1 << (cnt - 1)); i; i >>= 1) {
373                if (bits & i) {
374			SIO_SET(WB_SIO_MII_DATAIN);
375                } else {
376			SIO_CLR(WB_SIO_MII_DATAIN);
377                }
378		DELAY(1);
379		SIO_CLR(WB_SIO_MII_CLK);
380		DELAY(1);
381		SIO_SET(WB_SIO_MII_CLK);
382	}
383}
384
385/*
386 * Read an PHY register through the MII.
387 */
388static int wb_mii_readreg(sc, frame)
389	struct wb_softc		*sc;
390	struct wb_mii_frame	*frame;
391
392{
393	int			i, ack;
394
395	WB_LOCK(sc);
396
397	/*
398	 * Set up frame for RX.
399	 */
400	frame->mii_stdelim = WB_MII_STARTDELIM;
401	frame->mii_opcode = WB_MII_READOP;
402	frame->mii_turnaround = 0;
403	frame->mii_data = 0;
404
405	CSR_WRITE_4(sc, WB_SIO, 0);
406
407	/*
408 	 * Turn on data xmit.
409	 */
410	SIO_SET(WB_SIO_MII_DIR);
411
412	wb_mii_sync(sc);
413
414	/*
415	 * Send command/address info.
416	 */
417	wb_mii_send(sc, frame->mii_stdelim, 2);
418	wb_mii_send(sc, frame->mii_opcode, 2);
419	wb_mii_send(sc, frame->mii_phyaddr, 5);
420	wb_mii_send(sc, frame->mii_regaddr, 5);
421
422	/* Idle bit */
423	SIO_CLR((WB_SIO_MII_CLK|WB_SIO_MII_DATAIN));
424	DELAY(1);
425	SIO_SET(WB_SIO_MII_CLK);
426	DELAY(1);
427
428	/* Turn off xmit. */
429	SIO_CLR(WB_SIO_MII_DIR);
430	/* Check for ack */
431	SIO_CLR(WB_SIO_MII_CLK);
432	DELAY(1);
433	SIO_SET(WB_SIO_MII_CLK);
434	DELAY(1);
435	ack = CSR_READ_4(sc, WB_SIO) & WB_SIO_MII_DATAOUT;
436	SIO_CLR(WB_SIO_MII_CLK);
437	DELAY(1);
438	SIO_SET(WB_SIO_MII_CLK);
439	DELAY(1);
440
441	/*
442	 * Now try reading data bits. If the ack failed, we still
443	 * need to clock through 16 cycles to keep the PHY(s) in sync.
444	 */
445	if (ack) {
446		for(i = 0; i < 16; i++) {
447			SIO_CLR(WB_SIO_MII_CLK);
448			DELAY(1);
449			SIO_SET(WB_SIO_MII_CLK);
450			DELAY(1);
451		}
452		goto fail;
453	}
454
455	for (i = 0x8000; i; i >>= 1) {
456		SIO_CLR(WB_SIO_MII_CLK);
457		DELAY(1);
458		if (!ack) {
459			if (CSR_READ_4(sc, WB_SIO) & WB_SIO_MII_DATAOUT)
460				frame->mii_data |= i;
461			DELAY(1);
462		}
463		SIO_SET(WB_SIO_MII_CLK);
464		DELAY(1);
465	}
466
467fail:
468
469	SIO_CLR(WB_SIO_MII_CLK);
470	DELAY(1);
471	SIO_SET(WB_SIO_MII_CLK);
472	DELAY(1);
473
474	WB_UNLOCK(sc);
475
476	if (ack)
477		return(1);
478	return(0);
479}
480
481/*
482 * Write to a PHY register through the MII.
483 */
484static int wb_mii_writereg(sc, frame)
485	struct wb_softc		*sc;
486	struct wb_mii_frame	*frame;
487
488{
489	WB_LOCK(sc);
490
491	/*
492	 * Set up frame for TX.
493	 */
494
495	frame->mii_stdelim = WB_MII_STARTDELIM;
496	frame->mii_opcode = WB_MII_WRITEOP;
497	frame->mii_turnaround = WB_MII_TURNAROUND;
498
499	/*
500 	 * Turn on data output.
501	 */
502	SIO_SET(WB_SIO_MII_DIR);
503
504	wb_mii_sync(sc);
505
506	wb_mii_send(sc, frame->mii_stdelim, 2);
507	wb_mii_send(sc, frame->mii_opcode, 2);
508	wb_mii_send(sc, frame->mii_phyaddr, 5);
509	wb_mii_send(sc, frame->mii_regaddr, 5);
510	wb_mii_send(sc, frame->mii_turnaround, 2);
511	wb_mii_send(sc, frame->mii_data, 16);
512
513	/* Idle bit. */
514	SIO_SET(WB_SIO_MII_CLK);
515	DELAY(1);
516	SIO_CLR(WB_SIO_MII_CLK);
517	DELAY(1);
518
519	/*
520	 * Turn off xmit.
521	 */
522	SIO_CLR(WB_SIO_MII_DIR);
523
524	WB_UNLOCK(sc);
525
526	return(0);
527}
528
529static int wb_miibus_readreg(dev, phy, reg)
530	device_t		dev;
531	int			phy, reg;
532{
533	struct wb_softc		*sc;
534	struct wb_mii_frame	frame;
535
536	sc = device_get_softc(dev);
537
538	bzero((char *)&frame, sizeof(frame));
539
540	frame.mii_phyaddr = phy;
541	frame.mii_regaddr = reg;
542	wb_mii_readreg(sc, &frame);
543
544	return(frame.mii_data);
545}
546
547static int wb_miibus_writereg(dev, phy, reg, data)
548	device_t		dev;
549	int			phy, reg, data;
550{
551	struct wb_softc		*sc;
552	struct wb_mii_frame	frame;
553
554	sc = device_get_softc(dev);
555
556	bzero((char *)&frame, sizeof(frame));
557
558	frame.mii_phyaddr = phy;
559	frame.mii_regaddr = reg;
560	frame.mii_data = data;
561
562	wb_mii_writereg(sc, &frame);
563
564	return(0);
565}
566
567static void wb_miibus_statchg(dev)
568	device_t		dev;
569{
570	struct wb_softc		*sc;
571	struct mii_data		*mii;
572
573	sc = device_get_softc(dev);
574	WB_LOCK(sc);
575	mii = device_get_softc(sc->wb_miibus);
576	wb_setcfg(sc, mii->mii_media_active);
577	WB_UNLOCK(sc);
578
579	return;
580}
581
582static u_int8_t wb_calchash(addr)
583	caddr_t			addr;
584{
585	u_int32_t		crc, carry;
586	int			i, j;
587	u_int8_t		c;
588
589	/* Compute CRC for the address value. */
590	crc = 0xFFFFFFFF; /* initial value */
591
592	for (i = 0; i < 6; i++) {
593		c = *(addr + i);
594		for (j = 0; j < 8; j++) {
595			carry = ((crc & 0x80000000) ? 1 : 0) ^ (c & 0x01);
596			crc <<= 1;
597			c >>= 1;
598			if (carry)
599				crc = (crc ^ 0x04c11db6) | carry;
600		}
601	}
602
603	/*
604	 * return the filter bit position
605	 * Note: I arrived at the following nonsense
606	 * through experimentation. It's not the usual way to
607	 * generate the bit position but it's the only thing
608	 * I could come up with that works.
609	 */
610	return(~(crc >> 26) & 0x0000003F);
611}
612
613/*
614 * Program the 64-bit multicast hash filter.
615 */
616static void wb_setmulti(sc)
617	struct wb_softc		*sc;
618{
619	struct ifnet		*ifp;
620	int			h = 0;
621	u_int32_t		hashes[2] = { 0, 0 };
622	struct ifmultiaddr	*ifma;
623	u_int32_t		rxfilt;
624	int			mcnt = 0;
625
626	ifp = &sc->arpcom.ac_if;
627
628	rxfilt = CSR_READ_4(sc, WB_NETCFG);
629
630	if (ifp->if_flags & IFF_ALLMULTI || ifp->if_flags & IFF_PROMISC) {
631		rxfilt |= WB_NETCFG_RX_MULTI;
632		CSR_WRITE_4(sc, WB_NETCFG, rxfilt);
633		CSR_WRITE_4(sc, WB_MAR0, 0xFFFFFFFF);
634		CSR_WRITE_4(sc, WB_MAR1, 0xFFFFFFFF);
635		return;
636	}
637
638	/* first, zot all the existing hash bits */
639	CSR_WRITE_4(sc, WB_MAR0, 0);
640	CSR_WRITE_4(sc, WB_MAR1, 0);
641
642	/* now program new ones */
643	TAILQ_FOREACH(ifma, &ifp->if_multiaddrs, ifma_link) {
644		if (ifma->ifma_addr->sa_family != AF_LINK)
645			continue;
646		h = wb_calchash(LLADDR((struct sockaddr_dl *)ifma->ifma_addr));
647		if (h < 32)
648			hashes[0] |= (1 << h);
649		else
650			hashes[1] |= (1 << (h - 32));
651		mcnt++;
652	}
653
654	if (mcnt)
655		rxfilt |= WB_NETCFG_RX_MULTI;
656	else
657		rxfilt &= ~WB_NETCFG_RX_MULTI;
658
659	CSR_WRITE_4(sc, WB_MAR0, hashes[0]);
660	CSR_WRITE_4(sc, WB_MAR1, hashes[1]);
661	CSR_WRITE_4(sc, WB_NETCFG, rxfilt);
662
663	return;
664}
665
666/*
667 * The Winbond manual states that in order to fiddle with the
668 * 'full-duplex' and '100Mbps' bits in the netconfig register, we
669 * first have to put the transmit and/or receive logic in the idle state.
670 */
671static void wb_setcfg(sc, media)
672	struct wb_softc		*sc;
673	u_int32_t		media;
674{
675	int			i, restart = 0;
676
677	if (CSR_READ_4(sc, WB_NETCFG) & (WB_NETCFG_TX_ON|WB_NETCFG_RX_ON)) {
678		restart = 1;
679		WB_CLRBIT(sc, WB_NETCFG, (WB_NETCFG_TX_ON|WB_NETCFG_RX_ON));
680
681		for (i = 0; i < WB_TIMEOUT; i++) {
682			DELAY(10);
683			if ((CSR_READ_4(sc, WB_ISR) & WB_ISR_TX_IDLE) &&
684				(CSR_READ_4(sc, WB_ISR) & WB_ISR_RX_IDLE))
685				break;
686		}
687
688		if (i == WB_TIMEOUT)
689			printf("wb%d: failed to force tx and "
690				"rx to idle state\n", sc->wb_unit);
691	}
692
693	if (IFM_SUBTYPE(media) == IFM_10_T)
694		WB_CLRBIT(sc, WB_NETCFG, WB_NETCFG_100MBPS);
695	else
696		WB_SETBIT(sc, WB_NETCFG, WB_NETCFG_100MBPS);
697
698	if ((media & IFM_GMASK) == IFM_FDX)
699		WB_SETBIT(sc, WB_NETCFG, WB_NETCFG_FULLDUPLEX);
700	else
701		WB_CLRBIT(sc, WB_NETCFG, WB_NETCFG_FULLDUPLEX);
702
703	if (restart)
704		WB_SETBIT(sc, WB_NETCFG, WB_NETCFG_TX_ON|WB_NETCFG_RX_ON);
705
706	return;
707}
708
709static void wb_reset(sc)
710	struct wb_softc		*sc;
711{
712	register int		i;
713	struct mii_data		*mii;
714
715	CSR_WRITE_4(sc, WB_NETCFG, 0);
716	CSR_WRITE_4(sc, WB_BUSCTL, 0);
717	CSR_WRITE_4(sc, WB_TXADDR, 0);
718	CSR_WRITE_4(sc, WB_RXADDR, 0);
719
720	WB_SETBIT(sc, WB_BUSCTL, WB_BUSCTL_RESET);
721	WB_SETBIT(sc, WB_BUSCTL, WB_BUSCTL_RESET);
722
723	for (i = 0; i < WB_TIMEOUT; i++) {
724		DELAY(10);
725		if (!(CSR_READ_4(sc, WB_BUSCTL) & WB_BUSCTL_RESET))
726			break;
727	}
728	if (i == WB_TIMEOUT)
729		printf("wb%d: reset never completed!\n", sc->wb_unit);
730
731	/* Wait a little while for the chip to get its brains in order. */
732	DELAY(1000);
733
734	if (sc->wb_miibus == NULL)
735		return;
736
737	mii = device_get_softc(sc->wb_miibus);
738	if (mii == NULL)
739		return;
740
741        if (mii->mii_instance) {
742                struct mii_softc        *miisc;
743                LIST_FOREACH(miisc, &mii->mii_phys, mii_list)
744                        mii_phy_reset(miisc);
745        }
746
747        return;
748}
749
750static void wb_fixmedia(sc)
751	struct wb_softc		*sc;
752{
753	struct mii_data		*mii = NULL;
754	struct ifnet		*ifp;
755	u_int32_t		media;
756
757	if (sc->wb_miibus == NULL)
758		return;
759
760	mii = device_get_softc(sc->wb_miibus);
761	ifp = &sc->arpcom.ac_if;
762
763	mii_pollstat(mii);
764	if (IFM_SUBTYPE(mii->mii_media_active) == IFM_10_T) {
765		media = mii->mii_media_active & ~IFM_10_T;
766		media |= IFM_100_TX;
767	} else if (IFM_SUBTYPE(mii->mii_media_active) == IFM_100_TX) {
768		media = mii->mii_media_active & ~IFM_100_TX;
769		media |= IFM_10_T;
770	} else
771		return;
772
773	ifmedia_set(&mii->mii_media, media);
774
775	return;
776}
777
778/*
779 * Probe for a Winbond chip. Check the PCI vendor and device
780 * IDs against our list and return a device name if we find a match.
781 */
782static int wb_probe(dev)
783	device_t		dev;
784{
785	struct wb_type		*t;
786
787	t = wb_devs;
788
789	while(t->wb_name != NULL) {
790		if ((pci_get_vendor(dev) == t->wb_vid) &&
791		    (pci_get_device(dev) == t->wb_did)) {
792			device_set_desc(dev, t->wb_name);
793			return(0);
794		}
795		t++;
796	}
797
798	return(ENXIO);
799}
800
801/*
802 * Attach the interface. Allocate softc structures, do ifmedia
803 * setup and ethernet/BPF attach.
804 */
805static int wb_attach(dev)
806	device_t		dev;
807{
808	u_char			eaddr[ETHER_ADDR_LEN];
809	u_int32_t		command;
810	struct wb_softc		*sc;
811	struct ifnet		*ifp;
812	int			unit, error = 0, rid;
813
814	sc = device_get_softc(dev);
815	unit = device_get_unit(dev);
816
817	mtx_init(&sc->wb_mtx, device_get_nameunit(dev), MTX_NETWORK_LOCK,
818	    MTX_DEF | MTX_RECURSE);
819	WB_LOCK(sc);
820
821	/*
822	 * Handle power management nonsense.
823	 */
824
825	if (pci_get_powerstate(dev) != PCI_POWERSTATE_D0) {
826		u_int32_t		iobase, membase, irq;
827
828		/* Save important PCI config data. */
829		iobase = pci_read_config(dev, WB_PCI_LOIO, 4);
830		membase = pci_read_config(dev, WB_PCI_LOMEM, 4);
831		irq = pci_read_config(dev, WB_PCI_INTLINE, 4);
832
833		/* Reset the power state. */
834		printf("wb%d: chip is in D%d power mode "
835		    "-- setting to D0\n", unit,
836		    pci_get_powerstate(dev));
837		pci_set_powerstate(dev, PCI_POWERSTATE_D0);
838
839		/* Restore PCI config data. */
840		pci_write_config(dev, WB_PCI_LOIO, iobase, 4);
841		pci_write_config(dev, WB_PCI_LOMEM, membase, 4);
842		pci_write_config(dev, WB_PCI_INTLINE, irq, 4);
843	}
844
845	/*
846	 * Map control/status registers.
847	 */
848	pci_enable_busmaster(dev);
849	pci_enable_io(dev, SYS_RES_IOPORT);
850	pci_enable_io(dev, SYS_RES_MEMORY);
851	command = pci_read_config(dev, PCIR_COMMAND, 4);
852
853#ifdef WB_USEIOSPACE
854	if (!(command & PCIM_CMD_PORTEN)) {
855		printf("wb%d: failed to enable I/O ports!\n", unit);
856		error = ENXIO;
857		goto fail;
858	}
859#else
860	if (!(command & PCIM_CMD_MEMEN)) {
861		printf("wb%d: failed to enable memory mapping!\n", unit);
862		error = ENXIO;
863		goto fail;
864	}
865#endif
866
867	rid = WB_RID;
868	sc->wb_res = bus_alloc_resource(dev, WB_RES, &rid,
869	    0, ~0, 1, RF_ACTIVE);
870
871	if (sc->wb_res == NULL) {
872		printf("wb%d: couldn't map ports/memory\n", unit);
873		error = ENXIO;
874		goto fail;
875	}
876
877	sc->wb_btag = rman_get_bustag(sc->wb_res);
878	sc->wb_bhandle = rman_get_bushandle(sc->wb_res);
879
880	/* Allocate interrupt */
881	rid = 0;
882	sc->wb_irq = bus_alloc_resource(dev, SYS_RES_IRQ, &rid, 0, ~0, 1,
883	    RF_SHAREABLE | RF_ACTIVE);
884
885	if (sc->wb_irq == NULL) {
886		printf("wb%d: couldn't map interrupt\n", unit);
887		bus_release_resource(dev, WB_RES, WB_RID, sc->wb_res);
888		error = ENXIO;
889		goto fail;
890	}
891
892	error = bus_setup_intr(dev, sc->wb_irq, INTR_TYPE_NET,
893	    wb_intr, sc, &sc->wb_intrhand);
894
895	if (error) {
896		bus_release_resource(dev, SYS_RES_IRQ, 0, sc->wb_irq);
897		bus_release_resource(dev, WB_RES, WB_RID, sc->wb_res);
898		printf("wb%d: couldn't set up irq\n", unit);
899		goto fail;
900	}
901
902	/* Save the cache line size. */
903	sc->wb_cachesize = pci_read_config(dev, WB_PCI_CACHELEN, 4) & 0xFF;
904
905	/* Reset the adapter. */
906	wb_reset(sc);
907
908	/*
909	 * Get station address from the EEPROM.
910	 */
911	wb_read_eeprom(sc, (caddr_t)&eaddr, 0, 3, 0);
912
913	/*
914	 * A Winbond chip was detected. Inform the world.
915	 */
916	printf("wb%d: Ethernet address: %6D\n", unit, eaddr, ":");
917
918	sc->wb_unit = unit;
919	bcopy(eaddr, (char *)&sc->arpcom.ac_enaddr, ETHER_ADDR_LEN);
920
921	sc->wb_ldata = contigmalloc(sizeof(struct wb_list_data) + 8, M_DEVBUF,
922	    M_NOWAIT, 0, 0xffffffff, PAGE_SIZE, 0);
923
924	if (sc->wb_ldata == NULL) {
925		printf("wb%d: no memory for list buffers!\n", unit);
926		bus_teardown_intr(dev, sc->wb_irq, sc->wb_intrhand);
927		bus_release_resource(dev, SYS_RES_IRQ, 0, sc->wb_irq);
928		bus_release_resource(dev, WB_RES, WB_RID, sc->wb_res);
929		error = ENXIO;
930		goto fail;
931	}
932
933	bzero(sc->wb_ldata, sizeof(struct wb_list_data));
934
935	ifp = &sc->arpcom.ac_if;
936	ifp->if_softc = sc;
937	ifp->if_unit = unit;
938	ifp->if_name = "wb";
939	ifp->if_mtu = ETHERMTU;
940	ifp->if_flags = IFF_BROADCAST | IFF_SIMPLEX | IFF_MULTICAST;
941	ifp->if_ioctl = wb_ioctl;
942	ifp->if_output = ether_output;
943	ifp->if_start = wb_start;
944	ifp->if_watchdog = wb_watchdog;
945	ifp->if_init = wb_init;
946	ifp->if_baudrate = 10000000;
947	ifp->if_snd.ifq_maxlen = WB_TX_LIST_CNT - 1;
948
949	/*
950	 * Do MII setup.
951	 */
952	if (mii_phy_probe(dev, &sc->wb_miibus,
953	    wb_ifmedia_upd, wb_ifmedia_sts)) {
954		bus_teardown_intr(dev, sc->wb_irq, sc->wb_intrhand);
955		bus_release_resource(dev, SYS_RES_IRQ, 0, sc->wb_irq);
956		bus_release_resource(dev, WB_RES, WB_RID, sc->wb_res);
957		free(sc->wb_ldata_ptr, M_DEVBUF);
958		error = ENXIO;
959		goto fail;
960	}
961
962	/*
963	 * Call MI attach routine.
964	 */
965	ether_ifattach(ifp, ETHER_BPF_SUPPORTED);
966	WB_UNLOCK(sc);
967	return(0);
968
969fail:
970	if (error)
971		device_delete_child(dev, sc->wb_miibus);
972	WB_UNLOCK(sc);
973	mtx_destroy(&sc->wb_mtx);
974
975	return(error);
976}
977
978static int wb_detach(dev)
979	device_t		dev;
980{
981	struct wb_softc		*sc;
982	struct ifnet		*ifp;
983
984	sc = device_get_softc(dev);
985	WB_LOCK(sc);
986	ifp = &sc->arpcom.ac_if;
987
988	wb_stop(sc);
989	ether_ifdetach(ifp, ETHER_BPF_SUPPORTED);
990
991	/* Delete any miibus and phy devices attached to this interface */
992	bus_generic_detach(dev);
993	device_delete_child(dev, sc->wb_miibus);
994
995	bus_teardown_intr(dev, sc->wb_irq, sc->wb_intrhand);
996	bus_release_resource(dev, SYS_RES_IRQ, 0, sc->wb_irq);
997	bus_release_resource(dev, WB_RES, WB_RID, sc->wb_res);
998
999	free(sc->wb_ldata_ptr, M_DEVBUF);
1000
1001	WB_UNLOCK(sc);
1002	mtx_destroy(&sc->wb_mtx);
1003
1004	return(0);
1005}
1006
1007/*
1008 * Initialize the transmit descriptors.
1009 */
1010static int wb_list_tx_init(sc)
1011	struct wb_softc		*sc;
1012{
1013	struct wb_chain_data	*cd;
1014	struct wb_list_data	*ld;
1015	int			i;
1016
1017	cd = &sc->wb_cdata;
1018	ld = sc->wb_ldata;
1019
1020	for (i = 0; i < WB_TX_LIST_CNT; i++) {
1021		cd->wb_tx_chain[i].wb_ptr = &ld->wb_tx_list[i];
1022		if (i == (WB_TX_LIST_CNT - 1)) {
1023			cd->wb_tx_chain[i].wb_nextdesc =
1024				&cd->wb_tx_chain[0];
1025		} else {
1026			cd->wb_tx_chain[i].wb_nextdesc =
1027				&cd->wb_tx_chain[i + 1];
1028		}
1029	}
1030
1031	cd->wb_tx_free = &cd->wb_tx_chain[0];
1032	cd->wb_tx_tail = cd->wb_tx_head = NULL;
1033
1034	return(0);
1035}
1036
1037
1038/*
1039 * Initialize the RX descriptors and allocate mbufs for them. Note that
1040 * we arrange the descriptors in a closed ring, so that the last descriptor
1041 * points back to the first.
1042 */
1043static int wb_list_rx_init(sc)
1044	struct wb_softc		*sc;
1045{
1046	struct wb_chain_data	*cd;
1047	struct wb_list_data	*ld;
1048	int			i;
1049
1050	cd = &sc->wb_cdata;
1051	ld = sc->wb_ldata;
1052
1053	for (i = 0; i < WB_RX_LIST_CNT; i++) {
1054		cd->wb_rx_chain[i].wb_ptr =
1055			(struct wb_desc *)&ld->wb_rx_list[i];
1056		cd->wb_rx_chain[i].wb_buf = (void *)&ld->wb_rxbufs[i];
1057		if (wb_newbuf(sc, &cd->wb_rx_chain[i], NULL) == ENOBUFS)
1058			return(ENOBUFS);
1059		if (i == (WB_RX_LIST_CNT - 1)) {
1060			cd->wb_rx_chain[i].wb_nextdesc = &cd->wb_rx_chain[0];
1061			ld->wb_rx_list[i].wb_next =
1062					vtophys(&ld->wb_rx_list[0]);
1063		} else {
1064			cd->wb_rx_chain[i].wb_nextdesc =
1065					&cd->wb_rx_chain[i + 1];
1066			ld->wb_rx_list[i].wb_next =
1067					vtophys(&ld->wb_rx_list[i + 1]);
1068		}
1069	}
1070
1071	cd->wb_rx_head = &cd->wb_rx_chain[0];
1072
1073	return(0);
1074}
1075
1076static void wb_bfree(buf, args)
1077	caddr_t			buf;
1078	void			*args;
1079{
1080	return;
1081}
1082
1083/*
1084 * Initialize an RX descriptor and attach an MBUF cluster.
1085 */
1086static int wb_newbuf(sc, c, m)
1087	struct wb_softc		*sc;
1088	struct wb_chain_onefrag	*c;
1089	struct mbuf		*m;
1090{
1091	struct mbuf		*m_new = NULL;
1092
1093	if (m == NULL) {
1094		MGETHDR(m_new, M_DONTWAIT, MT_DATA);
1095		if (m_new == NULL)
1096			return(ENOBUFS);
1097		m_new->m_data = c->wb_buf;
1098		m_new->m_pkthdr.len = m_new->m_len = WB_BUFBYTES;
1099		MEXTADD(m_new, c->wb_buf, WB_BUFBYTES, wb_bfree, NULL, 0,
1100		    EXT_NET_DRV);
1101	} else {
1102		m_new = m;
1103		m_new->m_len = m_new->m_pkthdr.len = WB_BUFBYTES;
1104		m_new->m_data = m_new->m_ext.ext_buf;
1105	}
1106
1107	m_adj(m_new, sizeof(u_int64_t));
1108
1109	c->wb_mbuf = m_new;
1110	c->wb_ptr->wb_data = vtophys(mtod(m_new, caddr_t));
1111	c->wb_ptr->wb_ctl = WB_RXCTL_RLINK | 1536;
1112	c->wb_ptr->wb_status = WB_RXSTAT;
1113
1114	return(0);
1115}
1116
1117/*
1118 * A frame has been uploaded: pass the resulting mbuf chain up to
1119 * the higher level protocols.
1120 */
1121static void wb_rxeof(sc)
1122	struct wb_softc		*sc;
1123{
1124        struct ether_header	*eh;
1125        struct mbuf		*m = NULL;
1126        struct ifnet		*ifp;
1127	struct wb_chain_onefrag	*cur_rx;
1128	int			total_len = 0;
1129	u_int32_t		rxstat;
1130
1131	ifp = &sc->arpcom.ac_if;
1132
1133	while(!((rxstat = sc->wb_cdata.wb_rx_head->wb_ptr->wb_status) &
1134							WB_RXSTAT_OWN)) {
1135		struct mbuf		*m0 = NULL;
1136
1137		cur_rx = sc->wb_cdata.wb_rx_head;
1138		sc->wb_cdata.wb_rx_head = cur_rx->wb_nextdesc;
1139
1140		m = cur_rx->wb_mbuf;
1141
1142		if ((rxstat & WB_RXSTAT_MIIERR) ||
1143		    (WB_RXBYTES(cur_rx->wb_ptr->wb_status) < WB_MIN_FRAMELEN) ||
1144		    (WB_RXBYTES(cur_rx->wb_ptr->wb_status) > 1536) ||
1145		    !(rxstat & WB_RXSTAT_LASTFRAG) ||
1146		    !(rxstat & WB_RXSTAT_RXCMP)) {
1147			ifp->if_ierrors++;
1148			wb_newbuf(sc, cur_rx, m);
1149			printf("wb%x: receiver babbling: possible chip "
1150				"bug, forcing reset\n", sc->wb_unit);
1151			wb_fixmedia(sc);
1152			wb_reset(sc);
1153			wb_init(sc);
1154			return;
1155		}
1156
1157		if (rxstat & WB_RXSTAT_RXERR) {
1158			ifp->if_ierrors++;
1159			wb_newbuf(sc, cur_rx, m);
1160			break;
1161		}
1162
1163		/* No errors; receive the packet. */
1164		total_len = WB_RXBYTES(cur_rx->wb_ptr->wb_status);
1165
1166		/*
1167		 * XXX The Winbond chip includes the CRC with every
1168		 * received frame, and there's no way to turn this
1169		 * behavior off (at least, I can't find anything in
1170	 	 * the manual that explains how to do it) so we have
1171		 * to trim off the CRC manually.
1172		 */
1173		total_len -= ETHER_CRC_LEN;
1174
1175		m0 = m_devget(mtod(m, char *), total_len, ETHER_ALIGN, ifp,
1176		    NULL);
1177		wb_newbuf(sc, cur_rx, m);
1178		if (m0 == NULL) {
1179			ifp->if_ierrors++;
1180			break;
1181		}
1182		m = m0;
1183
1184		ifp->if_ipackets++;
1185		eh = mtod(m, struct ether_header *);
1186
1187		/* Remove header from mbuf and pass it on. */
1188		m_adj(m, sizeof(struct ether_header));
1189		ether_input(ifp, eh, m);
1190	}
1191}
1192
1193void wb_rxeoc(sc)
1194	struct wb_softc		*sc;
1195{
1196	wb_rxeof(sc);
1197
1198	WB_CLRBIT(sc, WB_NETCFG, WB_NETCFG_RX_ON);
1199	CSR_WRITE_4(sc, WB_RXADDR, vtophys(&sc->wb_ldata->wb_rx_list[0]));
1200	WB_SETBIT(sc, WB_NETCFG, WB_NETCFG_RX_ON);
1201	if (CSR_READ_4(sc, WB_ISR) & WB_RXSTATE_SUSPEND)
1202		CSR_WRITE_4(sc, WB_RXSTART, 0xFFFFFFFF);
1203
1204	return;
1205}
1206
1207/*
1208 * A frame was downloaded to the chip. It's safe for us to clean up
1209 * the list buffers.
1210 */
1211static void wb_txeof(sc)
1212	struct wb_softc		*sc;
1213{
1214	struct wb_chain		*cur_tx;
1215	struct ifnet		*ifp;
1216
1217	ifp = &sc->arpcom.ac_if;
1218
1219	/* Clear the timeout timer. */
1220	ifp->if_timer = 0;
1221
1222	if (sc->wb_cdata.wb_tx_head == NULL)
1223		return;
1224
1225	/*
1226	 * Go through our tx list and free mbufs for those
1227	 * frames that have been transmitted.
1228	 */
1229	while(sc->wb_cdata.wb_tx_head->wb_mbuf != NULL) {
1230		u_int32_t		txstat;
1231
1232		cur_tx = sc->wb_cdata.wb_tx_head;
1233		txstat = WB_TXSTATUS(cur_tx);
1234
1235		if ((txstat & WB_TXSTAT_OWN) || txstat == WB_UNSENT)
1236			break;
1237
1238		if (txstat & WB_TXSTAT_TXERR) {
1239			ifp->if_oerrors++;
1240			if (txstat & WB_TXSTAT_ABORT)
1241				ifp->if_collisions++;
1242			if (txstat & WB_TXSTAT_LATECOLL)
1243				ifp->if_collisions++;
1244		}
1245
1246		ifp->if_collisions += (txstat & WB_TXSTAT_COLLCNT) >> 3;
1247
1248		ifp->if_opackets++;
1249		m_freem(cur_tx->wb_mbuf);
1250		cur_tx->wb_mbuf = NULL;
1251
1252		if (sc->wb_cdata.wb_tx_head == sc->wb_cdata.wb_tx_tail) {
1253			sc->wb_cdata.wb_tx_head = NULL;
1254			sc->wb_cdata.wb_tx_tail = NULL;
1255			break;
1256		}
1257
1258		sc->wb_cdata.wb_tx_head = cur_tx->wb_nextdesc;
1259	}
1260
1261	return;
1262}
1263
1264/*
1265 * TX 'end of channel' interrupt handler.
1266 */
1267static void wb_txeoc(sc)
1268	struct wb_softc		*sc;
1269{
1270	struct ifnet		*ifp;
1271
1272	ifp = &sc->arpcom.ac_if;
1273
1274	ifp->if_timer = 0;
1275
1276	if (sc->wb_cdata.wb_tx_head == NULL) {
1277		ifp->if_flags &= ~IFF_OACTIVE;
1278		sc->wb_cdata.wb_tx_tail = NULL;
1279	} else {
1280		if (WB_TXOWN(sc->wb_cdata.wb_tx_head) == WB_UNSENT) {
1281			WB_TXOWN(sc->wb_cdata.wb_tx_head) = WB_TXSTAT_OWN;
1282			ifp->if_timer = 5;
1283			CSR_WRITE_4(sc, WB_TXSTART, 0xFFFFFFFF);
1284		}
1285	}
1286
1287	return;
1288}
1289
1290static void wb_intr(arg)
1291	void			*arg;
1292{
1293	struct wb_softc		*sc;
1294	struct ifnet		*ifp;
1295	u_int32_t		status;
1296
1297	sc = arg;
1298	WB_LOCK(sc);
1299	ifp = &sc->arpcom.ac_if;
1300
1301	if (!(ifp->if_flags & IFF_UP)) {
1302		WB_UNLOCK(sc);
1303		return;
1304	}
1305
1306	/* Disable interrupts. */
1307	CSR_WRITE_4(sc, WB_IMR, 0x00000000);
1308
1309	for (;;) {
1310
1311		status = CSR_READ_4(sc, WB_ISR);
1312		if (status)
1313			CSR_WRITE_4(sc, WB_ISR, status);
1314
1315		if ((status & WB_INTRS) == 0)
1316			break;
1317
1318		if ((status & WB_ISR_RX_NOBUF) || (status & WB_ISR_RX_ERR)) {
1319			ifp->if_ierrors++;
1320			wb_reset(sc);
1321			if (status & WB_ISR_RX_ERR)
1322				wb_fixmedia(sc);
1323			wb_init(sc);
1324			continue;
1325		}
1326
1327		if (status & WB_ISR_RX_OK)
1328			wb_rxeof(sc);
1329
1330		if (status & WB_ISR_RX_IDLE)
1331			wb_rxeoc(sc);
1332
1333		if (status & WB_ISR_TX_OK)
1334			wb_txeof(sc);
1335
1336		if (status & WB_ISR_TX_NOBUF)
1337			wb_txeoc(sc);
1338
1339		if (status & WB_ISR_TX_IDLE) {
1340			wb_txeof(sc);
1341			if (sc->wb_cdata.wb_tx_head != NULL) {
1342				WB_SETBIT(sc, WB_NETCFG, WB_NETCFG_TX_ON);
1343				CSR_WRITE_4(sc, WB_TXSTART, 0xFFFFFFFF);
1344			}
1345		}
1346
1347		if (status & WB_ISR_TX_UNDERRUN) {
1348			ifp->if_oerrors++;
1349			wb_txeof(sc);
1350			WB_CLRBIT(sc, WB_NETCFG, WB_NETCFG_TX_ON);
1351			/* Jack up TX threshold */
1352			sc->wb_txthresh += WB_TXTHRESH_CHUNK;
1353			WB_CLRBIT(sc, WB_NETCFG, WB_NETCFG_TX_THRESH);
1354			WB_SETBIT(sc, WB_NETCFG, WB_TXTHRESH(sc->wb_txthresh));
1355			WB_SETBIT(sc, WB_NETCFG, WB_NETCFG_TX_ON);
1356		}
1357
1358		if (status & WB_ISR_BUS_ERR) {
1359			wb_reset(sc);
1360			wb_init(sc);
1361		}
1362
1363	}
1364
1365	/* Re-enable interrupts. */
1366	CSR_WRITE_4(sc, WB_IMR, WB_INTRS);
1367
1368	if (ifp->if_snd.ifq_head != NULL) {
1369		wb_start(ifp);
1370	}
1371
1372	WB_UNLOCK(sc);
1373
1374	return;
1375}
1376
1377static void wb_tick(xsc)
1378	void			*xsc;
1379{
1380	struct wb_softc		*sc;
1381	struct mii_data		*mii;
1382
1383	sc = xsc;
1384	WB_LOCK(sc);
1385	mii = device_get_softc(sc->wb_miibus);
1386
1387	mii_tick(mii);
1388
1389	sc->wb_stat_ch = timeout(wb_tick, sc, hz);
1390
1391	WB_UNLOCK(sc);
1392
1393	return;
1394}
1395
1396/*
1397 * Encapsulate an mbuf chain in a descriptor by coupling the mbuf data
1398 * pointers to the fragment pointers.
1399 */
1400static int wb_encap(sc, c, m_head)
1401	struct wb_softc		*sc;
1402	struct wb_chain		*c;
1403	struct mbuf		*m_head;
1404{
1405	int			frag = 0;
1406	struct wb_desc		*f = NULL;
1407	int			total_len;
1408	struct mbuf		*m;
1409
1410	/*
1411 	 * Start packing the mbufs in this chain into
1412	 * the fragment pointers. Stop when we run out
1413 	 * of fragments or hit the end of the mbuf chain.
1414	 */
1415	m = m_head;
1416	total_len = 0;
1417
1418	for (m = m_head, frag = 0; m != NULL; m = m->m_next) {
1419		if (m->m_len != 0) {
1420			if (frag == WB_MAXFRAGS)
1421				break;
1422			total_len += m->m_len;
1423			f = &c->wb_ptr->wb_frag[frag];
1424			f->wb_ctl = WB_TXCTL_TLINK | m->m_len;
1425			if (frag == 0) {
1426				f->wb_ctl |= WB_TXCTL_FIRSTFRAG;
1427				f->wb_status = 0;
1428			} else
1429				f->wb_status = WB_TXSTAT_OWN;
1430			f->wb_next = vtophys(&c->wb_ptr->wb_frag[frag + 1]);
1431			f->wb_data = vtophys(mtod(m, vm_offset_t));
1432			frag++;
1433		}
1434	}
1435
1436	/*
1437	 * Handle special case: we used up all 16 fragments,
1438	 * but we have more mbufs left in the chain. Copy the
1439	 * data into an mbuf cluster. Note that we don't
1440	 * bother clearing the values in the other fragment
1441	 * pointers/counters; it wouldn't gain us anything,
1442	 * and would waste cycles.
1443	 */
1444	if (m != NULL) {
1445		struct mbuf		*m_new = NULL;
1446
1447		MGETHDR(m_new, M_DONTWAIT, MT_DATA);
1448		if (m_new == NULL)
1449			return(1);
1450		if (m_head->m_pkthdr.len > MHLEN) {
1451			MCLGET(m_new, M_DONTWAIT);
1452			if (!(m_new->m_flags & M_EXT)) {
1453				m_freem(m_new);
1454				return(1);
1455			}
1456		}
1457		m_copydata(m_head, 0, m_head->m_pkthdr.len,
1458					mtod(m_new, caddr_t));
1459		m_new->m_pkthdr.len = m_new->m_len = m_head->m_pkthdr.len;
1460		m_freem(m_head);
1461		m_head = m_new;
1462		f = &c->wb_ptr->wb_frag[0];
1463		f->wb_status = 0;
1464		f->wb_data = vtophys(mtod(m_new, caddr_t));
1465		f->wb_ctl = total_len = m_new->m_len;
1466		f->wb_ctl |= WB_TXCTL_TLINK|WB_TXCTL_FIRSTFRAG;
1467		frag = 1;
1468	}
1469
1470	if (total_len < WB_MIN_FRAMELEN) {
1471		f = &c->wb_ptr->wb_frag[frag];
1472		f->wb_ctl = WB_MIN_FRAMELEN - total_len;
1473		f->wb_data = vtophys(&sc->wb_cdata.wb_pad);
1474		f->wb_ctl |= WB_TXCTL_TLINK;
1475		f->wb_status = WB_TXSTAT_OWN;
1476		frag++;
1477	}
1478
1479	c->wb_mbuf = m_head;
1480	c->wb_lastdesc = frag - 1;
1481	WB_TXCTL(c) |= WB_TXCTL_LASTFRAG;
1482	WB_TXNEXT(c) = vtophys(&c->wb_nextdesc->wb_ptr->wb_frag[0]);
1483
1484	return(0);
1485}
1486
1487/*
1488 * Main transmit routine. To avoid having to do mbuf copies, we put pointers
1489 * to the mbuf data regions directly in the transmit lists. We also save a
1490 * copy of the pointers since the transmit list fragment pointers are
1491 * physical addresses.
1492 */
1493
1494static void wb_start(ifp)
1495	struct ifnet		*ifp;
1496{
1497	struct wb_softc		*sc;
1498	struct mbuf		*m_head = NULL;
1499	struct wb_chain		*cur_tx = NULL, *start_tx;
1500
1501	sc = ifp->if_softc;
1502	WB_LOCK(sc);
1503
1504	/*
1505	 * Check for an available queue slot. If there are none,
1506	 * punt.
1507	 */
1508	if (sc->wb_cdata.wb_tx_free->wb_mbuf != NULL) {
1509		ifp->if_flags |= IFF_OACTIVE;
1510		WB_UNLOCK(sc);
1511		return;
1512	}
1513
1514	start_tx = sc->wb_cdata.wb_tx_free;
1515
1516	while(sc->wb_cdata.wb_tx_free->wb_mbuf == NULL) {
1517		IF_DEQUEUE(&ifp->if_snd, m_head);
1518		if (m_head == NULL)
1519			break;
1520
1521		/* Pick a descriptor off the free list. */
1522		cur_tx = sc->wb_cdata.wb_tx_free;
1523		sc->wb_cdata.wb_tx_free = cur_tx->wb_nextdesc;
1524
1525		/* Pack the data into the descriptor. */
1526		wb_encap(sc, cur_tx, m_head);
1527
1528		if (cur_tx != start_tx)
1529			WB_TXOWN(cur_tx) = WB_TXSTAT_OWN;
1530
1531		/*
1532		 * If there's a BPF listener, bounce a copy of this frame
1533		 * to him.
1534		 */
1535		if (ifp->if_bpf)
1536			bpf_mtap(ifp, cur_tx->wb_mbuf);
1537	}
1538
1539	/*
1540	 * If there are no packets queued, bail.
1541	 */
1542	if (cur_tx == NULL) {
1543		WB_UNLOCK(sc);
1544		return;
1545	}
1546
1547	/*
1548	 * Place the request for the upload interrupt
1549	 * in the last descriptor in the chain. This way, if
1550	 * we're chaining several packets at once, we'll only
1551	 * get an interupt once for the whole chain rather than
1552	 * once for each packet.
1553	 */
1554	WB_TXCTL(cur_tx) |= WB_TXCTL_FINT;
1555	cur_tx->wb_ptr->wb_frag[0].wb_ctl |= WB_TXCTL_FINT;
1556	sc->wb_cdata.wb_tx_tail = cur_tx;
1557
1558	if (sc->wb_cdata.wb_tx_head == NULL) {
1559		sc->wb_cdata.wb_tx_head = start_tx;
1560		WB_TXOWN(start_tx) = WB_TXSTAT_OWN;
1561		CSR_WRITE_4(sc, WB_TXSTART, 0xFFFFFFFF);
1562	} else {
1563		/*
1564		 * We need to distinguish between the case where
1565		 * the own bit is clear because the chip cleared it
1566		 * and where the own bit is clear because we haven't
1567		 * set it yet. The magic value WB_UNSET is just some
1568		 * ramdomly chosen number which doesn't have the own
1569	 	 * bit set. When we actually transmit the frame, the
1570		 * status word will have _only_ the own bit set, so
1571		 * the txeoc handler will be able to tell if it needs
1572		 * to initiate another transmission to flush out pending
1573		 * frames.
1574		 */
1575		WB_TXOWN(start_tx) = WB_UNSENT;
1576	}
1577
1578	/*
1579	 * Set a timeout in case the chip goes out to lunch.
1580	 */
1581	ifp->if_timer = 5;
1582	WB_UNLOCK(sc);
1583
1584	return;
1585}
1586
1587static void wb_init(xsc)
1588	void			*xsc;
1589{
1590	struct wb_softc		*sc = xsc;
1591	struct ifnet		*ifp = &sc->arpcom.ac_if;
1592	int			i;
1593	struct mii_data		*mii;
1594
1595	WB_LOCK(sc);
1596	mii = device_get_softc(sc->wb_miibus);
1597
1598	/*
1599	 * Cancel pending I/O and free all RX/TX buffers.
1600	 */
1601	wb_stop(sc);
1602	wb_reset(sc);
1603
1604	sc->wb_txthresh = WB_TXTHRESH_INIT;
1605
1606	/*
1607	 * Set cache alignment and burst length.
1608	 */
1609#ifdef foo
1610	CSR_WRITE_4(sc, WB_BUSCTL, WB_BUSCTL_CONFIG);
1611	WB_CLRBIT(sc, WB_NETCFG, WB_NETCFG_TX_THRESH);
1612	WB_SETBIT(sc, WB_NETCFG, WB_TXTHRESH(sc->wb_txthresh));
1613#endif
1614
1615	CSR_WRITE_4(sc, WB_BUSCTL, WB_BUSCTL_MUSTBEONE|WB_BUSCTL_ARBITRATION);
1616	WB_SETBIT(sc, WB_BUSCTL, WB_BURSTLEN_16LONG);
1617	switch(sc->wb_cachesize) {
1618	case 32:
1619		WB_SETBIT(sc, WB_BUSCTL, WB_CACHEALIGN_32LONG);
1620		break;
1621	case 16:
1622		WB_SETBIT(sc, WB_BUSCTL, WB_CACHEALIGN_16LONG);
1623		break;
1624	case 8:
1625		WB_SETBIT(sc, WB_BUSCTL, WB_CACHEALIGN_8LONG);
1626		break;
1627	case 0:
1628	default:
1629		WB_SETBIT(sc, WB_BUSCTL, WB_CACHEALIGN_NONE);
1630		break;
1631	}
1632
1633	/* This doesn't tend to work too well at 100Mbps. */
1634	WB_CLRBIT(sc, WB_NETCFG, WB_NETCFG_TX_EARLY_ON);
1635
1636	/* Init our MAC address */
1637	for (i = 0; i < ETHER_ADDR_LEN; i++) {
1638		CSR_WRITE_1(sc, WB_NODE0 + i, sc->arpcom.ac_enaddr[i]);
1639	}
1640
1641	/* Init circular RX list. */
1642	if (wb_list_rx_init(sc) == ENOBUFS) {
1643		printf("wb%d: initialization failed: no "
1644			"memory for rx buffers\n", sc->wb_unit);
1645		wb_stop(sc);
1646		WB_UNLOCK(sc);
1647		return;
1648	}
1649
1650	/* Init TX descriptors. */
1651	wb_list_tx_init(sc);
1652
1653	/* If we want promiscuous mode, set the allframes bit. */
1654	if (ifp->if_flags & IFF_PROMISC) {
1655		WB_SETBIT(sc, WB_NETCFG, WB_NETCFG_RX_ALLPHYS);
1656	} else {
1657		WB_CLRBIT(sc, WB_NETCFG, WB_NETCFG_RX_ALLPHYS);
1658	}
1659
1660	/*
1661	 * Set capture broadcast bit to capture broadcast frames.
1662	 */
1663	if (ifp->if_flags & IFF_BROADCAST) {
1664		WB_SETBIT(sc, WB_NETCFG, WB_NETCFG_RX_BROAD);
1665	} else {
1666		WB_CLRBIT(sc, WB_NETCFG, WB_NETCFG_RX_BROAD);
1667	}
1668
1669	/*
1670	 * Program the multicast filter, if necessary.
1671	 */
1672	wb_setmulti(sc);
1673
1674	/*
1675	 * Load the address of the RX list.
1676	 */
1677	WB_CLRBIT(sc, WB_NETCFG, WB_NETCFG_RX_ON);
1678	CSR_WRITE_4(sc, WB_RXADDR, vtophys(&sc->wb_ldata->wb_rx_list[0]));
1679
1680	/*
1681	 * Enable interrupts.
1682	 */
1683	CSR_WRITE_4(sc, WB_IMR, WB_INTRS);
1684	CSR_WRITE_4(sc, WB_ISR, 0xFFFFFFFF);
1685
1686	/* Enable receiver and transmitter. */
1687	WB_SETBIT(sc, WB_NETCFG, WB_NETCFG_RX_ON);
1688	CSR_WRITE_4(sc, WB_RXSTART, 0xFFFFFFFF);
1689
1690	WB_CLRBIT(sc, WB_NETCFG, WB_NETCFG_TX_ON);
1691	CSR_WRITE_4(sc, WB_TXADDR, vtophys(&sc->wb_ldata->wb_tx_list[0]));
1692	WB_SETBIT(sc, WB_NETCFG, WB_NETCFG_TX_ON);
1693
1694	mii_mediachg(mii);
1695
1696	ifp->if_flags |= IFF_RUNNING;
1697	ifp->if_flags &= ~IFF_OACTIVE;
1698
1699	sc->wb_stat_ch = timeout(wb_tick, sc, hz);
1700	WB_UNLOCK(sc);
1701
1702	return;
1703}
1704
1705/*
1706 * Set media options.
1707 */
1708static int wb_ifmedia_upd(ifp)
1709	struct ifnet		*ifp;
1710{
1711	struct wb_softc		*sc;
1712
1713	sc = ifp->if_softc;
1714
1715	if (ifp->if_flags & IFF_UP)
1716		wb_init(sc);
1717
1718	return(0);
1719}
1720
1721/*
1722 * Report current media status.
1723 */
1724static void wb_ifmedia_sts(ifp, ifmr)
1725	struct ifnet		*ifp;
1726	struct ifmediareq	*ifmr;
1727{
1728	struct wb_softc		*sc;
1729	struct mii_data		*mii;
1730
1731	sc = ifp->if_softc;
1732
1733	mii = device_get_softc(sc->wb_miibus);
1734
1735	mii_pollstat(mii);
1736	ifmr->ifm_active = mii->mii_media_active;
1737	ifmr->ifm_status = mii->mii_media_status;
1738
1739	return;
1740}
1741
1742static int wb_ioctl(ifp, command, data)
1743	struct ifnet		*ifp;
1744	u_long			command;
1745	caddr_t			data;
1746{
1747	struct wb_softc		*sc = ifp->if_softc;
1748	struct mii_data		*mii;
1749	struct ifreq		*ifr = (struct ifreq *) data;
1750	int			error = 0;
1751
1752	WB_LOCK(sc);
1753
1754	switch(command) {
1755	case SIOCSIFADDR:
1756	case SIOCGIFADDR:
1757	case SIOCSIFMTU:
1758		error = ether_ioctl(ifp, command, data);
1759		break;
1760	case SIOCSIFFLAGS:
1761		if (ifp->if_flags & IFF_UP) {
1762			wb_init(sc);
1763		} else {
1764			if (ifp->if_flags & IFF_RUNNING)
1765				wb_stop(sc);
1766		}
1767		error = 0;
1768		break;
1769	case SIOCADDMULTI:
1770	case SIOCDELMULTI:
1771		wb_setmulti(sc);
1772		error = 0;
1773		break;
1774	case SIOCGIFMEDIA:
1775	case SIOCSIFMEDIA:
1776		mii = device_get_softc(sc->wb_miibus);
1777		error = ifmedia_ioctl(ifp, ifr, &mii->mii_media, command);
1778		break;
1779	default:
1780		error = EINVAL;
1781		break;
1782	}
1783
1784	WB_UNLOCK(sc);
1785
1786	return(error);
1787}
1788
1789static void wb_watchdog(ifp)
1790	struct ifnet		*ifp;
1791{
1792	struct wb_softc		*sc;
1793
1794	sc = ifp->if_softc;
1795
1796	WB_LOCK(sc);
1797	ifp->if_oerrors++;
1798	printf("wb%d: watchdog timeout\n", sc->wb_unit);
1799#ifdef foo
1800	if (!(wb_phy_readreg(sc, PHY_BMSR) & PHY_BMSR_LINKSTAT))
1801		printf("wb%d: no carrier - transceiver cable problem?\n",
1802								sc->wb_unit);
1803#endif
1804	wb_stop(sc);
1805	wb_reset(sc);
1806	wb_init(sc);
1807
1808	if (ifp->if_snd.ifq_head != NULL)
1809		wb_start(ifp);
1810	WB_UNLOCK(sc);
1811
1812	return;
1813}
1814
1815/*
1816 * Stop the adapter and free any mbufs allocated to the
1817 * RX and TX lists.
1818 */
1819static void wb_stop(sc)
1820	struct wb_softc		*sc;
1821{
1822	register int		i;
1823	struct ifnet		*ifp;
1824
1825	WB_LOCK(sc);
1826	ifp = &sc->arpcom.ac_if;
1827	ifp->if_timer = 0;
1828
1829	untimeout(wb_tick, sc, sc->wb_stat_ch);
1830
1831	WB_CLRBIT(sc, WB_NETCFG, (WB_NETCFG_RX_ON|WB_NETCFG_TX_ON));
1832	CSR_WRITE_4(sc, WB_IMR, 0x00000000);
1833	CSR_WRITE_4(sc, WB_TXADDR, 0x00000000);
1834	CSR_WRITE_4(sc, WB_RXADDR, 0x00000000);
1835
1836	/*
1837	 * Free data in the RX lists.
1838	 */
1839	for (i = 0; i < WB_RX_LIST_CNT; i++) {
1840		if (sc->wb_cdata.wb_rx_chain[i].wb_mbuf != NULL) {
1841			m_freem(sc->wb_cdata.wb_rx_chain[i].wb_mbuf);
1842			sc->wb_cdata.wb_rx_chain[i].wb_mbuf = NULL;
1843		}
1844	}
1845	bzero((char *)&sc->wb_ldata->wb_rx_list,
1846		sizeof(sc->wb_ldata->wb_rx_list));
1847
1848	/*
1849	 * Free the TX list buffers.
1850	 */
1851	for (i = 0; i < WB_TX_LIST_CNT; i++) {
1852		if (sc->wb_cdata.wb_tx_chain[i].wb_mbuf != NULL) {
1853			m_freem(sc->wb_cdata.wb_tx_chain[i].wb_mbuf);
1854			sc->wb_cdata.wb_tx_chain[i].wb_mbuf = NULL;
1855		}
1856	}
1857
1858	bzero((char *)&sc->wb_ldata->wb_tx_list,
1859		sizeof(sc->wb_ldata->wb_tx_list));
1860
1861	ifp->if_flags &= ~(IFF_RUNNING | IFF_OACTIVE);
1862	WB_UNLOCK(sc);
1863
1864	return;
1865}
1866
1867/*
1868 * Stop all chip I/O so that the kernel's probe routines don't
1869 * get confused by errant DMAs when rebooting.
1870 */
1871static void wb_shutdown(dev)
1872	device_t		dev;
1873{
1874	struct wb_softc		*sc;
1875
1876	sc = device_get_softc(dev);
1877	wb_stop(sc);
1878
1879	return;
1880}
1881