git.oblomov.eu Git - linux-2.6/blob - drivers/net/eexpress.c

   1 /* Intel EtherExpress 16 device driver for Linux
   2  *
   3  * Written by John Sullivan, 1995
   4  *  based on original code by Donald Becker, with changes by
   5  *  Alan Cox and Pauline Middelink.
   6  *
   7  * Support for 8-bit mode by Zoltan Szilagyi <zoltans@cs.arizona.edu>
   8  *
   9  * Many modifications, and currently maintained, by
  10  *  Philip Blundell <philb@gnu.org>
  11  * Added the Compaq LTE  Alan Cox <alan@redhat.com>
  12  * Added MCA support Adam Fritzler <mid@auk.cx>
  13  *
  14  * Note - this driver is experimental still - it has problems on faster
  15  * machines. Someone needs to sit down and go through it line by line with
  16  * a databook...
  17  */
  18
  19 /* The EtherExpress 16 is a fairly simple card, based on a shared-memory
  20  * design using the i82586 Ethernet coprocessor.  It bears no relationship,
  21  * as far as I know, to the similarly-named "EtherExpress Pro" range.
  22  *
  23  * Historically, Linux support for these cards has been very bad.  However,
  24  * things seem to be getting better slowly.
  25  */
  26
  27 /* If your card is confused about what sort of interface it has (eg it
  28  * persistently reports "10baseT" when none is fitted), running 'SOFTSET /BART'
  29  * or 'SOFTSET /LISA' from DOS seems to help.
  30  */
  31
  32 /* Here's the scoop on memory mapping.
  33  *
  34  * There are three ways to access EtherExpress card memory: either using the
  35  * shared-memory mapping, or using PIO through the dataport, or using PIO
  36  * through the "shadow memory" ports.
  37  *
  38  * The shadow memory system works by having the card map some of its memory
  39  * as follows:
  40  *
  41  * (the low five bits of the SMPTR are ignored)
  42  *
  43  *  base+0x4000..400f      memory at SMPTR+0..15
  44  *  base+0x8000..800f      memory at SMPTR+16..31
  45  *  base+0xc000..c007      dubious stuff (memory at SMPTR+16..23 apparently)
  46  *  base+0xc008..c00f      memory at 0x0008..0x000f
  47  *
  48  * This last set (the one at c008) is particularly handy because the SCB
  49  * lives at 0x0008.  So that set of ports gives us easy random access to data
  50  * in the SCB without having to mess around setting up pointers and the like.
  51  * We always use this method to access the SCB (via the scb_xx() functions).
  52  *
  53  * Dataport access works by aiming the appropriate (read or write) pointer
  54  * at the first address you're interested in, and then reading or writing from
  55  * the dataport.  The pointers auto-increment after each transfer.  We use
  56  * this for data transfer.
  57  *
  58  * We don't use the shared-memory system because it allegedly doesn't work on
  59  * all cards, and because it's a bit more prone to go wrong (it's one more
  60  * thing to configure...).
  61  */
  62
  63 /* Known bugs:
  64  *
  65  * - The card seems to want to give us two interrupts every time something
  66  *   happens, where just one would be better.
  67  */
  68
  69 /*
  70  *
  71  * Note by Zoltan Szilagyi 10-12-96:
  72  *
  73  * I've succeeded in eliminating the "CU wedged" messages, and hence the
  74  * lockups, which were only occurring with cards running in 8-bit mode ("force
  75  * 8-bit operation" in Intel's SoftSet utility). This version of the driver
  76  * sets the 82586 and the ASIC to 8-bit mode at startup; it also stops the
  77  * CU before submitting a packet for transmission, and then restarts it as soon
  78  * as the process of handing the packet is complete. This is definitely an
  79  * unnecessary slowdown if the card is running in 16-bit mode; therefore one
  80  * should detect 16-bit vs 8-bit mode from the EEPROM settings and act
  81  * accordingly. In 8-bit mode with this bugfix I'm getting about 150 K/s for
  82  * ftp's, which is significantly better than I get in DOS, so the overhead of
  83  * stopping and restarting the CU with each transmit is not prohibitive in
  84  * practice.
  85  *
  86  * Update by David Woodhouse 11/5/99:
  87  *
  88  * I've seen "CU wedged" messages in 16-bit mode, on the Alpha architecture.
  89  * I assume that this is because 16-bit accesses are actually handled as two
  90  * 8-bit accesses.
  91  */
  92
  93 #ifdef __alpha__
  94 #define LOCKUP16 1
  95 #endif
  96 #ifndef LOCKUP16
  97 #define LOCKUP16 0
  98 #endif
  99
 100 #include <linux/module.h>
 101 #include <linux/kernel.h>
 102 #include <linux/types.h>
 103 #include <linux/fcntl.h>
 104 #include <linux/interrupt.h>
 105 #include <linux/ioport.h>
 106 #include <linux/string.h>
 107 #include <linux/in.h>
 108 #include <linux/delay.h>
 109 #include <linux/errno.h>
 110 #include <linux/init.h>
 111 #include <linux/netdevice.h>
 112 #include <linux/etherdevice.h>
 113 #include <linux/skbuff.h>
 114 #include <linux/slab.h>
 115 #include <linux/mca-legacy.h>
 116 #include <linux/spinlock.h>
 117 #include <linux/bitops.h>
 118 #include <linux/jiffies.h>
 119
 120 #include <asm/system.h>
 121 #include <asm/io.h>
 122 #include <asm/irq.h>
 123
 124 #ifndef NET_DEBUG
 125 #define NET_DEBUG 4
 126 #endif
 127
 128 #include "eexpress.h"
 129
 130 #define EEXP_IO_EXTENT  16
 131
 132 /*
 133  * Private data declarations
 134  */
 135
 136 struct net_local
 137 {
 138         struct net_device_stats stats;
 139         unsigned long last_tx;       /* jiffies when last transmit started */
 140         unsigned long init_time;     /* jiffies when eexp_hw_init586 called */
 141         unsigned short rx_first;     /* first rx buf, same as RX_BUF_START */
 142         unsigned short rx_last;      /* last rx buf */
 143         unsigned short rx_ptr;       /* first rx buf to look at */
 144         unsigned short tx_head;      /* next free tx buf */
 145         unsigned short tx_reap;      /* first in-use tx buf */
 146         unsigned short tx_tail;      /* previous tx buf to tx_head */
 147         unsigned short tx_link;      /* last known-executing tx buf */
 148         unsigned short last_tx_restart;   /* set to tx_link when we
 149                                              restart the CU */
 150         unsigned char started;
 151         unsigned short rx_buf_start;
 152         unsigned short rx_buf_end;
 153         unsigned short num_tx_bufs;
 154         unsigned short num_rx_bufs;
 155         unsigned char width;         /* 0 for 16bit, 1 for 8bit */
 156         unsigned char was_promisc;
 157         unsigned char old_mc_count;
 158         spinlock_t lock;
 159 };
 160
 161 /* This is the code and data that is downloaded to the EtherExpress card's
 162  * memory at boot time.
 163  */
 164
 165 static unsigned short start_code[] = {
 166 /* 0x0000 */
 167         0x0001,                 /* ISCP: busy - cleared after reset */
 168         0x0008,0x0000,0x0000,   /* offset,address (lo,hi) of SCB */
 169
 170         0x0000,0x0000,          /* SCB: status, commands */
 171         0x0000,0x0000,          /* links to first command block,
 172                                    first receive descriptor */
 173         0x0000,0x0000,          /* CRC error, alignment error counts */
 174         0x0000,0x0000,          /* out of resources, overrun error counts */
 175
 176         0x0000,0x0000,          /* pad */
 177         0x0000,0x0000,
 178
 179 /* 0x20 -- start of 82586 CU program */
 180 #define CONF_LINK 0x20
 181         0x0000,Cmd_Config,
 182         0x0032,                 /* link to next command */
 183         0x080c,                 /* 12 bytes follow : fifo threshold=8 */
 184         0x2e40,                 /* don't rx bad frames
 185                                  * SRDY/ARDY => ext. sync. : preamble len=8
 186                                  * take addresses from data buffers
 187                                  * 6 bytes/address
 188                                  */
 189         0x6000,                 /* default backoff method & priority
 190                                  * interframe spacing = 0x60 */
 191         0xf200,                 /* slot time=0x200
 192                                  * max collision retry = 0xf */
 193 #define CONF_PROMISC  0x2e
 194         0x0000,                 /* no HDLC : normal CRC : enable broadcast
 195                                  * disable promiscuous/multicast modes */
 196         0x003c,                 /* minimum frame length = 60 octets) */
 197
 198         0x0000,Cmd_SetAddr,
 199         0x003e,                 /* link to next command */
 200 #define CONF_HWADDR  0x38
 201         0x0000,0x0000,0x0000,   /* hardware address placed here */
 202
 203         0x0000,Cmd_MCast,
 204         0x0076,                 /* link to next command */
 205 #define CONF_NR_MULTICAST 0x44
 206         0x0000,                 /* number of multicast addresses */
 207 #define CONF_MULTICAST 0x46
 208         0x0000, 0x0000, 0x0000, /* some addresses */
 209         0x0000, 0x0000, 0x0000,
 210         0x0000, 0x0000, 0x0000,
 211         0x0000, 0x0000, 0x0000,
 212         0x0000, 0x0000, 0x0000,
 213         0x0000, 0x0000, 0x0000,
 214         0x0000, 0x0000, 0x0000,
 215         0x0000, 0x0000, 0x0000,
 216
 217 #define CONF_DIAG_RESULT  0x76
 218         0x0000, Cmd_Diag,
 219         0x007c,                 /* link to next command */
 220
 221         0x0000,Cmd_TDR|Cmd_INT,
 222         0x0084,
 223 #define CONF_TDR_RESULT  0x82
 224         0x0000,
 225
 226         0x0000,Cmd_END|Cmd_Nop, /* end of configure sequence */
 227         0x0084                  /* dummy link */
 228 };
 229
 230 /* maps irq number to EtherExpress magic value */
 231 static char irqrmap[] = { 0,0,1,2,3,4,0,0,0,1,5,6,0,0,0,0 };
 232
 233 #ifdef CONFIG_MCA_LEGACY
 234 /* mapping of the first four bits of the second POS register */
 235 static unsigned short mca_iomap[] = {
 236         0x270, 0x260, 0x250, 0x240, 0x230, 0x220, 0x210, 0x200,
 237         0x370, 0x360, 0x350, 0x340, 0x330, 0x320, 0x310, 0x300
 238 };
 239 /* bits 5-7 of the second POS register */
 240 static char mca_irqmap[] = { 12, 9, 3, 4, 5, 10, 11, 15 };
 241 #endif
 242
 243 /*
 244  * Prototypes for Linux interface
 245  */
 246
 247 static int eexp_open(struct net_device *dev);
 248 static int eexp_close(struct net_device *dev);
 249 static void eexp_timeout(struct net_device *dev);
 250 static struct net_device_stats *eexp_stats(struct net_device *dev);
 251 static int eexp_xmit(struct sk_buff *buf, struct net_device *dev);
 252
 253 static irqreturn_t eexp_irq(int irq, void *dev_addr);
 254 static void eexp_set_multicast(struct net_device *dev);
 255
 256 /*
 257  * Prototypes for hardware access functions
 258  */
 259
 260 static void eexp_hw_rx_pio(struct net_device *dev);
 261 static void eexp_hw_tx_pio(struct net_device *dev, unsigned short *buf,
 262                        unsigned short len);
 263 static int eexp_hw_probe(struct net_device *dev,unsigned short ioaddr);
 264 static unsigned short eexp_hw_readeeprom(unsigned short ioaddr,
 265                                          unsigned char location);
 266
 267 static unsigned short eexp_hw_lasttxstat(struct net_device *dev);
 268 static void eexp_hw_txrestart(struct net_device *dev);
 269
 270 static void eexp_hw_txinit    (struct net_device *dev);
 271 static void eexp_hw_rxinit    (struct net_device *dev);
 272
 273 static void eexp_hw_init586   (struct net_device *dev);
 274 static void eexp_setup_filter (struct net_device *dev);
 275
 276 static char *eexp_ifmap[]={"AUI", "BNC", "RJ45"};
 277 enum eexp_iftype {AUI=0, BNC=1, TPE=2};
 278
 279 #define STARTED_RU      2
 280 #define STARTED_CU      1
 281
 282 /*
 283  * Primitive hardware access functions.
 284  */
 285
 286 static inline unsigned short scb_status(struct net_device *dev)
 287 {
 288         return inw(dev->base_addr + 0xc008);
 289 }
 290
 291 static inline unsigned short scb_rdcmd(struct net_device *dev)
 292 {
 293         return inw(dev->base_addr + 0xc00a);
 294 }
 295
 296 static inline void scb_command(struct net_device *dev, unsigned short cmd)
 297 {
 298         outw(cmd, dev->base_addr + 0xc00a);
 299 }
 300
 301 static inline void scb_wrcbl(struct net_device *dev, unsigned short val)
 302 {
 303         outw(val, dev->base_addr + 0xc00c);
 304 }
 305
 306 static inline void scb_wrrfa(struct net_device *dev, unsigned short val)
 307 {
 308         outw(val, dev->base_addr + 0xc00e);
 309 }
 310
 311 static inline void set_loopback(struct net_device *dev)
 312 {
 313         outb(inb(dev->base_addr + Config) | 2, dev->base_addr + Config);
 314 }
 315
 316 static inline void clear_loopback(struct net_device *dev)
 317 {
 318         outb(inb(dev->base_addr + Config) & ~2, dev->base_addr + Config);
 319 }
 320
 321 static inline unsigned short int SHADOW(short int addr)
 322 {
 323         addr &= 0x1f;
 324         if (addr > 0xf) addr += 0x3ff0;
 325         return addr + 0x4000;
 326 }
 327
 328 /*
 329  * Linux interface
 330  */
 331
 332 /*
 333  * checks for presence of EtherExpress card
 334  */
 335
 336 static int __init do_express_probe(struct net_device *dev)
 337 {
 338         unsigned short *port;
 339         static unsigned short ports[] = { 0x240,0x300,0x310,0x270,0x320,0x340,0 };
 340         unsigned short ioaddr = dev->base_addr;
 341         int dev_irq = dev->irq;
 342         int err;
 343
 344         SET_MODULE_OWNER(dev);
 345
 346         dev->if_port = 0xff; /* not set */
 347
 348 #ifdef CONFIG_MCA_LEGACY
 349         if (MCA_bus) {
 350                 int slot = 0;
 351
 352                 /*
 353                  * Only find one card at a time.  Subsequent calls
 354                  * will find others, however, proper multicard MCA
 355                  * probing and setup can't be done with the
 356                  * old-style Space.c init routines.  -- ASF
 357                  */
 358                 while (slot != MCA_NOTFOUND) {
 359                         int pos0, pos1;
 360
 361                         slot = mca_find_unused_adapter(0x628B, slot);
 362                         if (slot == MCA_NOTFOUND)
 363                                 break;
 364
 365                         pos0 = mca_read_stored_pos(slot, 2);
 366                         pos1 = mca_read_stored_pos(slot, 3);
 367                         ioaddr = mca_iomap[pos1&0xf];
 368
 369                         dev->irq = mca_irqmap[(pos1>>4)&0x7];
 370
 371                         /*
 372                          * XXX: Transciever selection is done
 373                          * differently on the MCA version.
 374                          * How to get it to select something
 375                          * other than external/AUI is currently
 376                          * unknown.  This code is just for looks. -- ASF
 377                          */
 378                         if ((pos0 & 0x7) == 0x1)
 379                                 dev->if_port = AUI;
 380                         else if ((pos0 & 0x7) == 0x5) {
 381                                 if (pos1 & 0x80)
 382                                         dev->if_port = BNC;
 383                                 else
 384                                         dev->if_port = TPE;
 385                         }
 386
 387                         mca_set_adapter_name(slot, "Intel EtherExpress 16 MCA");
 388                         mca_set_adapter_procfn(slot, NULL, dev);
 389                         mca_mark_as_used(slot);
 390
 391                         break;
 392                 }
 393         }
 394 #endif
 395         if (ioaddr&0xfe00) {
 396                 if (!request_region(ioaddr, EEXP_IO_EXTENT, "EtherExpress"))
 397                         return -EBUSY;
 398                 err = eexp_hw_probe(dev,ioaddr);
 399                 release_region(ioaddr, EEXP_IO_EXTENT);
 400                 return err;
 401         } else if (ioaddr)
 402                 return -ENXIO;
 403
 404         for (port=&ports[0] ; *port ; port++ )
 405         {
 406                 unsigned short sum = 0;
 407                 int i;
 408                 if (!request_region(*port, EEXP_IO_EXTENT, "EtherExpress"))
 409                         continue;
 410                 for ( i=0 ; i<4 ; i++ )
 411                 {
 412                         unsigned short t;
 413                         t = inb(*port + ID_PORT);
 414                         sum |= (t>>4) << ((t & 0x03)<<2);
 415                 }
 416                 if (sum==0xbaba && !eexp_hw_probe(dev,*port)) {
 417                         release_region(*port, EEXP_IO_EXTENT);
 418                         return 0;
 419                 }
 420                 release_region(*port, EEXP_IO_EXTENT);
 421                 dev->irq = dev_irq;
 422         }
 423         return -ENODEV;
 424 }
 425
 426 #ifndef MODULE
 427 struct net_device * __init express_probe(int unit)
 428 {
 429         struct net_device *dev = alloc_etherdev(sizeof(struct net_local));
 430         int err;
 431
 432         if (!dev)
 433                 return ERR_PTR(-ENOMEM);
 434
 435         sprintf(dev->name, "eth%d", unit);
 436         netdev_boot_setup_check(dev);
 437
 438         err = do_express_probe(dev);
 439         if (!err)
 440                 return dev;
 441         free_netdev(dev);
 442         return ERR_PTR(err);
 443 }
 444 #endif
 445
 446 /*
 447  * open and initialize the adapter, ready for use
 448  */
 449
 450 static int eexp_open(struct net_device *dev)
 451 {
 452         int ret;
 453         unsigned short ioaddr = dev->base_addr;
 454         struct net_local *lp = netdev_priv(dev);
 455
 456 #if NET_DEBUG > 6
 457         printk(KERN_DEBUG "%s: eexp_open()\n", dev->name);
 458 #endif
 459
 460         if (!dev->irq || !irqrmap[dev->irq])
 461                 return -ENXIO;
 462
 463         ret = request_irq(dev->irq,&eexp_irq,0,dev->name,dev);
 464         if (ret) return ret;
 465
 466         if (!request_region(ioaddr, EEXP_IO_EXTENT, "EtherExpress")) {
 467                 printk(KERN_WARNING "EtherExpress io port %x, is busy.\n"
 468                         , ioaddr);
 469                 goto err_out1;
 470         }
 471         if (!request_region(ioaddr+0x4000, EEXP_IO_EXTENT, "EtherExpress shadow")) {
 472                 printk(KERN_WARNING "EtherExpress io port %x, is busy.\n"
 473                         , ioaddr+0x4000);
 474                 goto err_out2;
 475         }
 476         if (!request_region(ioaddr+0x8000, EEXP_IO_EXTENT, "EtherExpress shadow")) {
 477                 printk(KERN_WARNING "EtherExpress io port %x, is busy.\n"
 478                         , ioaddr+0x8000);
 479                 goto err_out3;
 480         }
 481         if (!request_region(ioaddr+0xc000, EEXP_IO_EXTENT, "EtherExpress shadow")) {
 482                 printk(KERN_WARNING "EtherExpress io port %x, is busy.\n"
 483                         , ioaddr+0xc000);
 484                 goto err_out4;
 485         }
 486
 487         if (lp->width) {
 488                 printk("%s: forcing ASIC to 8-bit mode\n", dev->name);
 489                 outb(inb(dev->base_addr+Config)&~4, dev->base_addr+Config);
 490         }
 491
 492         eexp_hw_init586(dev);
 493         netif_start_queue(dev);
 494 #if NET_DEBUG > 6
 495         printk(KERN_DEBUG "%s: leaving eexp_open()\n", dev->name);
 496 #endif
 497         return 0;
 498
 499         err_out4:
 500                 release_region(ioaddr+0x8000, EEXP_IO_EXTENT);
 501         err_out3:
 502                 release_region(ioaddr+0x4000, EEXP_IO_EXTENT);
 503         err_out2:
 504                 release_region(ioaddr, EEXP_IO_EXTENT);
 505         err_out1:
 506                 free_irq(dev->irq, dev);
 507                 return -EBUSY;
 508 }
 509
 510 /*
 511  * close and disable the interface, leaving the 586 in reset.
 512  */
 513
 514 static int eexp_close(struct net_device *dev)
 515 {
 516         unsigned short ioaddr = dev->base_addr;
 517         struct net_local *lp = netdev_priv(dev);
 518
 519         int irq = dev->irq;
 520
 521         netif_stop_queue(dev);
 522
 523         outb(SIRQ_dis|irqrmap[irq],ioaddr+SET_IRQ);
 524         lp->started = 0;
 525         scb_command(dev, SCB_CUsuspend|SCB_RUsuspend);
 526         outb(0,ioaddr+SIGNAL_CA);
 527         free_irq(irq,dev);
 528         outb(i586_RST,ioaddr+EEPROM_Ctrl);
 529         release_region(ioaddr, EEXP_IO_EXTENT);
 530         release_region(ioaddr+0x4000, 16);
 531         release_region(ioaddr+0x8000, 16);
 532         release_region(ioaddr+0xc000, 16);
 533
 534         return 0;
 535 }
 536
 537 /*
 538  * Return interface stats
 539  */
 540
 541 static struct net_device_stats *eexp_stats(struct net_device *dev)
 542 {
 543         struct net_local *lp = netdev_priv(dev);
 544
 545         return &lp->stats;
 546 }
 547
 548 /*
 549  * This gets called when a higher level thinks we are broken.  Check that
 550  * nothing has become jammed in the CU.
 551  */
 552
 553 static void unstick_cu(struct net_device *dev)
 554 {
 555         struct net_local *lp = netdev_priv(dev);
 556         unsigned short ioaddr = dev->base_addr;
 557
 558         if (lp->started)
 559         {
 560                 if (time_after(jiffies, dev->trans_start + 50))
 561                 {
 562                         if (lp->tx_link==lp->last_tx_restart)
 563                         {
 564                                 unsigned short boguscount=200,rsst;
 565                                 printk(KERN_WARNING "%s: Retransmit timed out, status %04x, resetting...\n",
 566                                        dev->name, scb_status(dev));
 567                                 eexp_hw_txinit(dev);
 568                                 lp->last_tx_restart = 0;
 569                                 scb_wrcbl(dev, lp->tx_link);
 570                                 scb_command(dev, SCB_CUstart);
 571                                 outb(0,ioaddr+SIGNAL_CA);
 572                                 while (!SCB_complete(rsst=scb_status(dev)))
 573                                 {
 574                                         if (!--boguscount)
 575                                         {
 576                                                 boguscount=200;
 577                                                 printk(KERN_WARNING "%s: Reset timed out status %04x, retrying...\n",
 578                                                        dev->name,rsst);
 579                                                 scb_wrcbl(dev, lp->tx_link);
 580                                                 scb_command(dev, SCB_CUstart);
 581                                                 outb(0,ioaddr+SIGNAL_CA);
 582                                         }
 583                                 }
 584                                 netif_wake_queue(dev);
 585                         }
 586                         else
 587                         {
 588                                 unsigned short status = scb_status(dev);
 589                                 if (SCB_CUdead(status))
 590                                 {
 591                                         unsigned short txstatus = eexp_hw_lasttxstat(dev);
 592                                         printk(KERN_WARNING "%s: Transmit timed out, CU not active status %04x %04x, restarting...\n",
 593                                                dev->name, status, txstatus);
 594                                         eexp_hw_txrestart(dev);
 595                                 }
 596                                 else
 597                                 {
 598                                         unsigned short txstatus = eexp_hw_lasttxstat(dev);
 599                                         if (netif_queue_stopped(dev) && !txstatus)
 600                                         {
 601                                                 printk(KERN_WARNING "%s: CU wedged, status %04x %04x, resetting...\n",
 602                                                        dev->name,status,txstatus);
 603                                                 eexp_hw_init586(dev);
 604                                                 netif_wake_queue(dev);
 605                                         }
 606                                         else
 607                                         {
 608                                                 printk(KERN_WARNING "%s: transmit timed out\n", dev->name);
 609                                         }
 610                                 }
 611                         }
 612                 }
 613         }
 614         else
 615         {
 616                 if (time_after(jiffies, lp->init_time + 10))
 617                 {
 618                         unsigned short status = scb_status(dev);
 619                         printk(KERN_WARNING "%s: i82586 startup timed out, status %04x, resetting...\n",
 620                                dev->name, status);
 621                         eexp_hw_init586(dev);
 622                         netif_wake_queue(dev);
 623                 }
 624         }
 625 }
 626
 627 static void eexp_timeout(struct net_device *dev)
 628 {
 629         struct net_local *lp = netdev_priv(dev);
 630 #ifdef CONFIG_SMP
 631         unsigned long flags;
 632 #endif
 633         int status;
 634
 635         disable_irq(dev->irq);
 636
 637         /*
 638          *      Best would be to use synchronize_irq(); spin_lock() here
 639          *      lets make it work first..
 640          */
 641
 642 #ifdef CONFIG_SMP
 643         spin_lock_irqsave(&lp->lock, flags);
 644 #endif
 645
 646         status = scb_status(dev);
 647         unstick_cu(dev);
 648         printk(KERN_INFO "%s: transmit timed out, %s?\n", dev->name,
 649                (SCB_complete(status)?"lost interrupt":
 650                 "board on fire"));
 651         lp->stats.tx_errors++;
 652         lp->last_tx = jiffies;
 653         if (!SCB_complete(status)) {
 654                 scb_command(dev, SCB_CUabort);
 655                 outb(0,dev->base_addr+SIGNAL_CA);
 656         }
 657         netif_wake_queue(dev);
 658 #ifdef CONFIG_SMP
 659         spin_unlock_irqrestore(&lp->lock, flags);
 660 #endif
 661 }
 662
 663 /*
 664  * Called to transmit a packet, or to allow us to right ourselves
 665  * if the kernel thinks we've died.
 666  */
 667 static int eexp_xmit(struct sk_buff *buf, struct net_device *dev)
 668 {
 669         struct net_local *lp = netdev_priv(dev);
 670         short length = buf->len;
 671 #ifdef CONFIG_SMP
 672         unsigned long flags;
 673 #endif
 674
 675 #if NET_DEBUG > 6
 676         printk(KERN_DEBUG "%s: eexp_xmit()\n", dev->name);
 677 #endif
 678
 679         if (buf->len < ETH_ZLEN) {
 680                 if (skb_padto(buf, ETH_ZLEN))
 681                         return 0;
 682                 length = ETH_ZLEN;
 683         }
 684
 685         disable_irq(dev->irq);
 686
 687         /*
 688          *      Best would be to use synchronize_irq(); spin_lock() here
 689          *      lets make it work first..
 690          */
 691
 692 #ifdef CONFIG_SMP
 693         spin_lock_irqsave(&lp->lock, flags);
 694 #endif
 695
 696         {
 697                 unsigned short *data = (unsigned short *)buf->data;
 698
 699                 lp->stats.tx_bytes += length;
 700
 701                 eexp_hw_tx_pio(dev,data,length);
 702         }
 703         dev_kfree_skb(buf);
 704 #ifdef CONFIG_SMP
 705         spin_unlock_irqrestore(&lp->lock, flags);
 706 #endif
 707         enable_irq(dev->irq);
 708         return 0;
 709 }
 710
 711 /*
 712  * Handle an EtherExpress interrupt
 713  * If we've finished initializing, start the RU and CU up.
 714  * If we've already started, reap tx buffers, handle any received packets,
 715  * check to make sure we've not become wedged.
 716  */
 717
 718 static unsigned short eexp_start_irq(struct net_device *dev,
 719                                      unsigned short status)
 720 {
 721         unsigned short ack_cmd = SCB_ack(status);
 722         struct net_local *lp = netdev_priv(dev);
 723         unsigned short ioaddr = dev->base_addr;
 724         if ((dev->flags & IFF_UP) && !(lp->started & STARTED_CU)) {
 725                 short diag_status, tdr_status;
 726                 while (SCB_CUstat(status)==2)
 727                         status = scb_status(dev);
 728 #if NET_DEBUG > 4
 729                 printk("%s: CU went non-active (status %04x)\n",
 730                        dev->name, status);
 731 #endif
 732
 733                 outw(CONF_DIAG_RESULT & ~31, ioaddr + SM_PTR);
 734                 diag_status = inw(ioaddr + SHADOW(CONF_DIAG_RESULT));
 735                 if (diag_status & 1<<11) {
 736                         printk(KERN_WARNING "%s: 82586 failed self-test\n",
 737                                dev->name);
 738                 } else if (!(diag_status & 1<<13)) {
 739                         printk(KERN_WARNING "%s: 82586 self-test failed to complete\n", dev->name);
 740                 }
 741
 742                 outw(CONF_TDR_RESULT & ~31, ioaddr + SM_PTR);
 743                 tdr_status = inw(ioaddr + SHADOW(CONF_TDR_RESULT));
 744                 if (tdr_status & (TDR_SHORT|TDR_OPEN)) {
 745                         printk(KERN_WARNING "%s: TDR reports cable %s at %d tick%s\n", dev->name, (tdr_status & TDR_SHORT)?"short":"broken", tdr_status & TDR_TIME, ((tdr_status & TDR_TIME) != 1) ? "s" : "");
 746                 }
 747                 else if (tdr_status & TDR_XCVRPROBLEM) {
 748                         printk(KERN_WARNING "%s: TDR reports transceiver problem\n", dev->name);
 749                 }
 750                 else if (tdr_status & TDR_LINKOK) {
 751 #if NET_DEBUG > 4
 752                         printk(KERN_DEBUG "%s: TDR reports link OK\n", dev->name);
 753 #endif
 754                 } else {
 755                         printk("%s: TDR is ga-ga (status %04x)\n", dev->name,
 756                                tdr_status);
 757                 }
 758
 759                 lp->started |= STARTED_CU;
 760                 scb_wrcbl(dev, lp->tx_link);
 761                 /* if the RU isn't running, start it now */
 762                 if (!(lp->started & STARTED_RU)) {
 763                         ack_cmd |= SCB_RUstart;
 764                         scb_wrrfa(dev, lp->rx_buf_start);
 765                         lp->rx_ptr = lp->rx_buf_start;
 766                         lp->started |= STARTED_RU;
 767                 }
 768                 ack_cmd |= SCB_CUstart | 0x2000;
 769         }
 770
 771         if ((dev->flags & IFF_UP) && !(lp->started & STARTED_RU) && SCB_RUstat(status)==4)
 772                 lp->started|=STARTED_RU;
 773
 774         return ack_cmd;
 775 }
 776
 777 static void eexp_cmd_clear(struct net_device *dev)
 778 {
 779         unsigned long int oldtime = jiffies;
 780         while (scb_rdcmd(dev) && ((jiffies-oldtime)<10));
 781         if (scb_rdcmd(dev)) {
 782                 printk("%s: command didn't clear\n", dev->name);
 783         }
 784 }
 785
 786 static irqreturn_t eexp_irq(int irq, void *dev_info)
 787 {
 788         struct net_device *dev = dev_info;
 789         struct net_local *lp;
 790         unsigned short ioaddr,status,ack_cmd;
 791         unsigned short old_read_ptr, old_write_ptr;
 792
 793         lp = netdev_priv(dev);
 794         ioaddr = dev->base_addr;
 795
 796         spin_lock(&lp->lock);
 797
 798         old_read_ptr = inw(ioaddr+READ_PTR);
 799         old_write_ptr = inw(ioaddr+WRITE_PTR);
 800
 801         outb(SIRQ_dis|irqrmap[irq],ioaddr+SET_IRQ);
 802
 803
 804         status = scb_status(dev);
 805
 806 #if NET_DEBUG > 4
 807         printk(KERN_DEBUG "%s: interrupt (status %x)\n", dev->name, status);
 808 #endif
 809
 810         if (lp->started == (STARTED_CU | STARTED_RU)) {
 811
 812                 do {
 813                         eexp_cmd_clear(dev);
 814
 815                         ack_cmd = SCB_ack(status);
 816                         scb_command(dev, ack_cmd);
 817                         outb(0,ioaddr+SIGNAL_CA);
 818
 819                         eexp_cmd_clear(dev);
 820
 821                         if (SCB_complete(status)) {
 822                                 if (!eexp_hw_lasttxstat(dev)) {
 823                                         printk("%s: tx interrupt but no status\n", dev->name);
 824                                 }
 825                         }
 826
 827                         if (SCB_rxdframe(status))
 828                                 eexp_hw_rx_pio(dev);
 829
 830                         status = scb_status(dev);
 831                 } while (status & 0xc000);
 832
 833                 if (SCB_RUdead(status))
 834                 {
 835                         printk(KERN_WARNING "%s: RU stopped: status %04x\n",
 836                                dev->name,status);
 837 #if 0
 838                         printk(KERN_WARNING "%s: cur_rfd=%04x, cur_rbd=%04x\n", dev->name, lp->cur_rfd, lp->cur_rbd);
 839                         outw(lp->cur_rfd, ioaddr+READ_PTR);
 840                         printk(KERN_WARNING "%s: [%04x]\n", dev->name, inw(ioaddr+DATAPORT));
 841                         outw(lp->cur_rfd+6, ioaddr+READ_PTR);
 842                         printk(KERN_WARNING "%s: rbd is %04x\n", dev->name, rbd= inw(ioaddr+DATAPORT));
 843                         outw(rbd, ioaddr+READ_PTR);
 844                         printk(KERN_WARNING "%s: [%04x %04x] ", dev->name, inw(ioaddr+DATAPORT), inw(ioaddr+DATAPORT));
 845                         outw(rbd+8, ioaddr+READ_PTR);
 846                         printk("[%04x]\n", inw(ioaddr+DATAPORT));
 847 #endif
 848                         lp->stats.rx_errors++;
 849 #if 1
 850                         eexp_hw_rxinit(dev);
 851 #else
 852                         lp->cur_rfd = lp->first_rfd;
 853 #endif
 854                         scb_wrrfa(dev, lp->rx_buf_start);
 855                         scb_command(dev, SCB_RUstart);
 856                         outb(0,ioaddr+SIGNAL_CA);
 857                 }
 858         } else {
 859                 if (status & 0x8000)
 860                         ack_cmd = eexp_start_irq(dev, status);
 861                 else
 862                         ack_cmd = SCB_ack(status);
 863                 scb_command(dev, ack_cmd);
 864                 outb(0,ioaddr+SIGNAL_CA);
 865         }
 866
 867         eexp_cmd_clear(dev);
 868
 869         outb(SIRQ_en|irqrmap[irq],ioaddr+SET_IRQ);
 870
 871 #if NET_DEBUG > 6
 872         printk("%s: leaving eexp_irq()\n", dev->name);
 873 #endif
 874         outw(old_read_ptr, ioaddr+READ_PTR);
 875         outw(old_write_ptr, ioaddr+WRITE_PTR);
 876
 877         spin_unlock(&lp->lock);
 878         return IRQ_HANDLED;
 879 }
 880
 881 /*
 882  * Hardware access functions
 883  */
 884
 885 /*
 886  * Set the cable type to use.
 887  */
 888
 889 static void eexp_hw_set_interface(struct net_device *dev)
 890 {
 891         unsigned char oldval = inb(dev->base_addr + 0x300e);
 892         oldval &= ~0x82;
 893         switch (dev->if_port) {
 894         case TPE:
 895                 oldval |= 0x2;
 896         case BNC:
 897                 oldval |= 0x80;
 898                 break;
 899         }
 900         outb(oldval, dev->base_addr+0x300e);
 901         mdelay(20);
 902 }
 903
 904 /*
 905  * Check all the receive buffers, and hand any received packets
 906  * to the upper levels. Basic sanity check on each frame
 907  * descriptor, though we don't bother trying to fix broken ones.
 908  */
 909
 910 static void eexp_hw_rx_pio(struct net_device *dev)
 911 {
 912         struct net_local *lp = netdev_priv(dev);
 913         unsigned short rx_block = lp->rx_ptr;
 914         unsigned short boguscount = lp->num_rx_bufs;
 915         unsigned short ioaddr = dev->base_addr;
 916         unsigned short status;
 917
 918 #if NET_DEBUG > 6
 919         printk(KERN_DEBUG "%s: eexp_hw_rx()\n", dev->name);
 920 #endif
 921
 922         do {
 923                 unsigned short rfd_cmd, rx_next, pbuf, pkt_len;
 924
 925                 outw(rx_block, ioaddr + READ_PTR);
 926                 status = inw(ioaddr + DATAPORT);
 927
 928                 if (FD_Done(status))
 929                 {
 930                         rfd_cmd = inw(ioaddr + DATAPORT);
 931                         rx_next = inw(ioaddr + DATAPORT);
 932                         pbuf = inw(ioaddr + DATAPORT);
 933
 934                         outw(pbuf, ioaddr + READ_PTR);
 935                         pkt_len = inw(ioaddr + DATAPORT);
 936
 937                         if (rfd_cmd!=0x0000)
 938                         {
 939                                 printk(KERN_WARNING "%s: rfd_cmd not zero:0x%04x\n",
 940                                        dev->name, rfd_cmd);
 941                                 continue;
 942                         }
 943                         else if (pbuf!=rx_block+0x16)
 944                         {
 945                                 printk(KERN_WARNING "%s: rfd and rbd out of sync 0x%04x 0x%04x\n",
 946                                        dev->name, rx_block+0x16, pbuf);
 947                                 continue;
 948                         }
 949                         else if ((pkt_len & 0xc000)!=0xc000)
 950                         {
 951                                 printk(KERN_WARNING "%s: EOF or F not set on received buffer (%04x)\n",
 952                                        dev->name, pkt_len & 0xc000);
 953                                 continue;
 954                         }
 955                         else if (!FD_OK(status))
 956                         {
 957                                 lp->stats.rx_errors++;
 958                                 if (FD_CRC(status))
 959                                         lp->stats.rx_crc_errors++;
 960                                 if (FD_Align(status))
 961                                         lp->stats.rx_frame_errors++;
 962                                 if (FD_Resrc(status))
 963                                         lp->stats.rx_fifo_errors++;
 964                                 if (FD_DMA(status))
 965                                         lp->stats.rx_over_errors++;
 966                                 if (FD_Short(status))
 967                                         lp->stats.rx_length_errors++;
 968                         }
 969                         else
 970                         {
 971                                 struct sk_buff *skb;
 972                                 pkt_len &= 0x3fff;
 973                                 skb = dev_alloc_skb(pkt_len+16);
 974                                 if (skb == NULL)
 975                                 {
 976                                         printk(KERN_WARNING "%s: Memory squeeze, dropping packet\n",dev->name);
 977                                         lp->stats.rx_dropped++;
 978                                         break;
 979                                 }
 980                                 skb_reserve(skb, 2);
 981                                 outw(pbuf+10, ioaddr+READ_PTR);
 982                                 insw(ioaddr+DATAPORT, skb_put(skb,pkt_len),(pkt_len+1)>>1);
 983                                 skb->protocol = eth_type_trans(skb,dev);
 984                                 netif_rx(skb);
 985                                 dev->last_rx = jiffies;
 986                                 lp->stats.rx_packets++;
 987                                 lp->stats.rx_bytes += pkt_len;
 988                         }
 989                         outw(rx_block, ioaddr+WRITE_PTR);
 990                         outw(0, ioaddr+DATAPORT);
 991                         outw(0, ioaddr+DATAPORT);
 992                         rx_block = rx_next;
 993                 }
 994         } while (FD_Done(status) && boguscount--);
 995         lp->rx_ptr = rx_block;
 996 }
 997
 998 /*
 999  * Hand a packet to the card for transmission
1000  * If we get here, we MUST have already checked
1001  * to make sure there is room in the transmit
1002  * buffer region.
1003  */
1004
1005 static void eexp_hw_tx_pio(struct net_device *dev, unsigned short *buf,
1006                        unsigned short len)
1007 {
1008         struct net_local *lp = netdev_priv(dev);
1009         unsigned short ioaddr = dev->base_addr;
1010
1011         if (LOCKUP16 || lp->width) {
1012                 /* Stop the CU so that there is no chance that it
1013                    jumps off to a bogus address while we are writing the
1014                    pointer to the next transmit packet in 8-bit mode --
1015                    this eliminates the "CU wedged" errors in 8-bit mode.
1016                    (Zoltan Szilagyi 10-12-96) */
1017                 scb_command(dev, SCB_CUsuspend);
1018                 outw(0xFFFF, ioaddr+SIGNAL_CA);
1019         }
1020
1021         outw(lp->tx_head, ioaddr + WRITE_PTR);
1022
1023         outw(0x0000, ioaddr + DATAPORT);
1024         outw(Cmd_INT|Cmd_Xmit, ioaddr + DATAPORT);
1025         outw(lp->tx_head+0x08, ioaddr + DATAPORT);
1026         outw(lp->tx_head+0x0e, ioaddr + DATAPORT);
1027
1028         outw(0x0000, ioaddr + DATAPORT);
1029         outw(0x0000, ioaddr + DATAPORT);
1030         outw(lp->tx_head+0x08, ioaddr + DATAPORT);
1031
1032         outw(0x8000|len, ioaddr + DATAPORT);
1033         outw(-1, ioaddr + DATAPORT);
1034         outw(lp->tx_head+0x16, ioaddr + DATAPORT);
1035         outw(0, ioaddr + DATAPORT);
1036
1037         outsw(ioaddr + DATAPORT, buf, (len+1)>>1);
1038
1039         outw(lp->tx_tail+0xc, ioaddr + WRITE_PTR);
1040         outw(lp->tx_head, ioaddr + DATAPORT);
1041
1042         dev->trans_start = jiffies;
1043         lp->tx_tail = lp->tx_head;
1044         if (lp->tx_head==TX_BUF_START+((lp->num_tx_bufs-1)*TX_BUF_SIZE))
1045                 lp->tx_head = TX_BUF_START;
1046         else
1047                 lp->tx_head += TX_BUF_SIZE;
1048         if (lp->tx_head != lp->tx_reap)
1049                 netif_wake_queue(dev);
1050
1051         if (LOCKUP16 || lp->width) {
1052                 /* Restart the CU so that the packet can actually
1053                    be transmitted. (Zoltan Szilagyi 10-12-96) */
1054                 scb_command(dev, SCB_CUresume);
1055                 outw(0xFFFF, ioaddr+SIGNAL_CA);
1056         }
1057
1058         lp->stats.tx_packets++;
1059         lp->last_tx = jiffies;
1060 }
1061
1062 /*
1063  * Sanity check the suspected EtherExpress card
1064  * Read hardware address, reset card, size memory and initialize buffer
1065  * memory pointers. These are held in dev->priv, in case someone has more
1066  * than one card in a machine.
1067  */
1068
1069 static int __init eexp_hw_probe(struct net_device *dev, unsigned short ioaddr)
1070 {
1071         unsigned short hw_addr[3];
1072         unsigned char buswidth;
1073         unsigned int memory_size;
1074         int i;
1075         unsigned short xsum = 0;
1076         struct net_local *lp = netdev_priv(dev);
1077
1078         printk("%s: EtherExpress 16 at %#x ",dev->name,ioaddr);
1079
1080         outb(ASIC_RST, ioaddr+EEPROM_Ctrl);
1081         outb(0, ioaddr+EEPROM_Ctrl);
1082         udelay(500);
1083         outb(i586_RST, ioaddr+EEPROM_Ctrl);
1084
1085         hw_addr[0] = eexp_hw_readeeprom(ioaddr,2);
1086         hw_addr[1] = eexp_hw_readeeprom(ioaddr,3);
1087         hw_addr[2] = eexp_hw_readeeprom(ioaddr,4);
1088
1089         /* Standard Address or Compaq LTE Address */
1090         if (!((hw_addr[2]==0x00aa && ((hw_addr[1] & 0xff00)==0x0000)) ||
1091               (hw_addr[2]==0x0080 && ((hw_addr[1] & 0xff00)==0x5F00))))
1092         {
1093                 printk(" rejected: invalid address %04x%04x%04x\n",
1094                         hw_addr[2],hw_addr[1],hw_addr[0]);
1095                 return -ENODEV;
1096         }
1097
1098         /* Calculate the EEPROM checksum.  Carry on anyway if it's bad,
1099          * though.
1100          */
1101         for (i = 0; i < 64; i++)
1102                 xsum += eexp_hw_readeeprom(ioaddr, i);
1103         if (xsum != 0xbaba)
1104                 printk(" (bad EEPROM xsum 0x%02x)", xsum);
1105
1106         dev->base_addr = ioaddr;
1107         for ( i=0 ; i<6 ; i++ )
1108                 dev->dev_addr[i] = ((unsigned char *)hw_addr)[5-i];
1109
1110         {
1111                 static char irqmap[]={0, 9, 3, 4, 5, 10, 11, 0};
1112                 unsigned short setupval = eexp_hw_readeeprom(ioaddr,0);
1113
1114                 /* Use the IRQ from EEPROM if none was given */
1115                 if (!dev->irq)
1116                         dev->irq = irqmap[setupval>>13];
1117
1118                 if (dev->if_port == 0xff) {
1119                         dev->if_port = !(setupval & 0x1000) ? AUI :
1120                                 eexp_hw_readeeprom(ioaddr,5) & 0x1 ? TPE : BNC;
1121                 }
1122
1123                 buswidth = !((setupval & 0x400) >> 10);
1124         }
1125
1126         memset(lp, 0, sizeof(struct net_local));
1127         spin_lock_init(&lp->lock);
1128
1129         printk("(IRQ %d, %s connector, %d-bit bus", dev->irq,
1130                eexp_ifmap[dev->if_port], buswidth?8:16);
1131
1132         if (!request_region(dev->base_addr + 0x300e, 1, "EtherExpress"))
1133                 return -EBUSY;
1134
1135         eexp_hw_set_interface(dev);
1136
1137         release_region(dev->base_addr + 0x300e, 1);
1138
1139         /* Find out how much RAM we have on the card */
1140         outw(0, dev->base_addr + WRITE_PTR);
1141         for (i = 0; i < 32768; i++)
1142                 outw(0, dev->base_addr + DATAPORT);
1143
1144         for (memory_size = 0; memory_size < 64; memory_size++)
1145         {
1146                 outw(memory_size<<10, dev->base_addr + READ_PTR);
1147                 if (inw(dev->base_addr+DATAPORT))
1148                         break;
1149                 outw(memory_size<<10, dev->base_addr + WRITE_PTR);
1150                 outw(memory_size | 0x5000, dev->base_addr+DATAPORT);
1151                 outw(memory_size<<10, dev->base_addr + READ_PTR);
1152                 if (inw(dev->base_addr+DATAPORT) != (memory_size | 0x5000))
1153                         break;
1154         }
1155
1156         /* Sort out the number of buffers.  We may have 16, 32, 48 or 64k
1157          * of RAM to play with.
1158          */
1159         lp->num_tx_bufs = 4;
1160         lp->rx_buf_end = 0x3ff6;
1161         switch (memory_size)
1162         {
1163         case 64:
1164                 lp->rx_buf_end += 0x4000;
1165         case 48:
1166                 lp->num_tx_bufs += 4;
1167                 lp->rx_buf_end += 0x4000;
1168         case 32:
1169                 lp->rx_buf_end += 0x4000;
1170         case 16:
1171                 printk(", %dk RAM)\n", memory_size);
1172                 break;
1173         default:
1174                 printk(") bad memory size (%dk).\n", memory_size);
1175                 return -ENODEV;
1176                 break;
1177         }
1178
1179         lp->rx_buf_start = TX_BUF_START + (lp->num_tx_bufs*TX_BUF_SIZE);
1180         lp->width = buswidth;
1181
1182         dev->open = eexp_open;
1183         dev->stop = eexp_close;
1184         dev->hard_start_xmit = eexp_xmit;
1185         dev->get_stats = eexp_stats;
1186         dev->set_multicast_list = &eexp_set_multicast;
1187         dev->tx_timeout = eexp_timeout;
1188         dev->watchdog_timeo = 2*HZ;
1189
1190         return register_netdev(dev);
1191 }
1192
1193 /*
1194  * Read a word from the EtherExpress on-board serial EEPROM.
1195  * The EEPROM contains 64 words of 16 bits.
1196  */
1197 static unsigned short __init eexp_hw_readeeprom(unsigned short ioaddr,
1198                                                     unsigned char location)
1199 {
1200         unsigned short cmd = 0x180|(location&0x7f);
1201         unsigned short rval = 0,wval = EC_CS|i586_RST;
1202         int i;
1203
1204         outb(EC_CS|i586_RST,ioaddr+EEPROM_Ctrl);
1205         for (i=0x100 ; i ; i>>=1 )
1206         {
1207                 if (cmd&i)
1208                         wval |= EC_Wr;
1209                 else
1210                         wval &= ~EC_Wr;
1211
1212                 outb(wval,ioaddr+EEPROM_Ctrl);
1213                 outb(wval|EC_Clk,ioaddr+EEPROM_Ctrl);
1214                 eeprom_delay();
1215                 outb(wval,ioaddr+EEPROM_Ctrl);
1216                 eeprom_delay();
1217         }
1218         wval &= ~EC_Wr;
1219         outb(wval,ioaddr+EEPROM_Ctrl);
1220         for (i=0x8000 ; i ; i>>=1 )
1221         {
1222                 outb(wval|EC_Clk,ioaddr+EEPROM_Ctrl);
1223                 eeprom_delay();
1224                 if (inb(ioaddr+EEPROM_Ctrl)&EC_Rd)
1225                         rval |= i;
1226                 outb(wval,ioaddr+EEPROM_Ctrl);
1227                 eeprom_delay();
1228         }
1229         wval &= ~EC_CS;
1230         outb(wval|EC_Clk,ioaddr+EEPROM_Ctrl);
1231         eeprom_delay();
1232         outb(wval,ioaddr+EEPROM_Ctrl);
1233         eeprom_delay();
1234         return rval;
1235 }
1236
1237 /*
1238  * Reap tx buffers and return last transmit status.
1239  * if ==0 then either:
1240  *    a) we're not transmitting anything, so why are we here?
1241  *    b) we've died.
1242  * otherwise, Stat_Busy(return) means we've still got some packets
1243  * to transmit, Stat_Done(return) means our buffers should be empty
1244  * again
1245  */
1246
1247 static unsigned short eexp_hw_lasttxstat(struct net_device *dev)
1248 {
1249         struct net_local *lp = netdev_priv(dev);
1250         unsigned short tx_block = lp->tx_reap;
1251         unsigned short status;
1252
1253         if (!netif_queue_stopped(dev) && lp->tx_head==lp->tx_reap)
1254                 return 0x0000;
1255
1256         do
1257         {
1258                 outw(tx_block & ~31, dev->base_addr + SM_PTR);
1259                 status = inw(dev->base_addr + SHADOW(tx_block));
1260                 if (!Stat_Done(status))
1261                 {
1262                         lp->tx_link = tx_block;
1263                         return status;
1264                 }
1265                 else
1266                 {
1267                         lp->last_tx_restart = 0;
1268                         lp->stats.collisions += Stat_NoColl(status);
1269                         if (!Stat_OK(status))
1270                         {
1271                                 char *whatsup = NULL;
1272                                 lp->stats.tx_errors++;
1273                                 if (Stat_Abort(status))
1274                                         lp->stats.tx_aborted_errors++;
1275                                 if (Stat_TNoCar(status)) {
1276                                         whatsup = "aborted, no carrier";
1277                                         lp->stats.tx_carrier_errors++;
1278                                 }
1279                                 if (Stat_TNoCTS(status)) {
1280                                         whatsup = "aborted, lost CTS";
1281                                         lp->stats.tx_carrier_errors++;
1282                                 }
1283                                 if (Stat_TNoDMA(status)) {
1284                                         whatsup = "FIFO underran";
1285                                         lp->stats.tx_fifo_errors++;
1286                                 }
1287                                 if (Stat_TXColl(status)) {
1288                                         whatsup = "aborted, too many collisions";
1289                                         lp->stats.tx_aborted_errors++;
1290                                 }
1291                                 if (whatsup)
1292                                         printk(KERN_INFO "%s: transmit %s\n",
1293                                                dev->name, whatsup);
1294                         }
1295                         else
1296                                 lp->stats.tx_packets++;
1297                 }
1298                 if (tx_block == TX_BUF_START+((lp->num_tx_bufs-1)*TX_BUF_SIZE))
1299                         lp->tx_reap = tx_block = TX_BUF_START;
1300                 else
1301                         lp->tx_reap = tx_block += TX_BUF_SIZE;
1302                 netif_wake_queue(dev);
1303         }
1304         while (lp->tx_reap != lp->tx_head);
1305
1306         lp->tx_link = lp->tx_tail + 0x08;
1307
1308         return status;
1309 }
1310
1311 /*
1312  * This should never happen. It is called when some higher routine detects
1313  * that the CU has stopped, to try to restart it from the last packet we knew
1314  * we were working on, or the idle loop if we had finished for the time.
1315  */
1316
1317 static void eexp_hw_txrestart(struct net_device *dev)
1318 {
1319         struct net_local *lp = netdev_priv(dev);
1320         unsigned short ioaddr = dev->base_addr;
1321
1322         lp->last_tx_restart = lp->tx_link;
1323         scb_wrcbl(dev, lp->tx_link);
1324         scb_command(dev, SCB_CUstart);
1325         outb(0,ioaddr+SIGNAL_CA);
1326
1327         {
1328                 unsigned short boguscount=50,failcount=5;
1329                 while (!scb_status(dev))
1330                 {
1331                         if (!--boguscount)
1332                         {
1333                                 if (--failcount)
1334                                 {
1335                                         printk(KERN_WARNING "%s: CU start timed out, status %04x, cmd %04x\n", dev->name, scb_status(dev), scb_rdcmd(dev));
1336                                         scb_wrcbl(dev, lp->tx_link);
1337                                         scb_command(dev, SCB_CUstart);
1338                                         outb(0,ioaddr+SIGNAL_CA);
1339                                         boguscount = 100;
1340                                 }
1341                                 else
1342                                 {
1343                                         printk(KERN_WARNING "%s: Failed to restart CU, resetting board...\n",dev->name);
1344                                         eexp_hw_init586(dev);
1345                                         netif_wake_queue(dev);
1346                                         return;
1347                                 }
1348                         }
1349                 }
1350         }
1351 }
1352
1353 /*
1354  * Writes down the list of transmit buffers into card memory.  Each
1355  * entry consists of an 82586 transmit command, followed by a jump
1356  * pointing to itself.  When we want to transmit a packet, we write
1357  * the data into the appropriate transmit buffer and then modify the
1358  * preceding jump to point at the new transmit command.  This means that
1359  * the 586 command unit is continuously active.
1360  */
1361
1362 static void eexp_hw_txinit(struct net_device *dev)
1363 {
1364         struct net_local *lp = netdev_priv(dev);
1365         unsigned short tx_block = TX_BUF_START;
1366         unsigned short curtbuf;
1367         unsigned short ioaddr = dev->base_addr;
1368
1369         for ( curtbuf=0 ; curtbuf<lp->num_tx_bufs ; curtbuf++ )
1370         {
1371                 outw(tx_block, ioaddr + WRITE_PTR);
1372
1373                 outw(0x0000, ioaddr + DATAPORT);
1374                 outw(Cmd_INT|Cmd_Xmit, ioaddr + DATAPORT);
1375                 outw(tx_block+0x08, ioaddr + DATAPORT);
1376                 outw(tx_block+0x0e, ioaddr + DATAPORT);
1377
1378                 outw(0x0000, ioaddr + DATAPORT);
1379                 outw(0x0000, ioaddr + DATAPORT);
1380                 outw(tx_block+0x08, ioaddr + DATAPORT);
1381
1382                 outw(0x8000, ioaddr + DATAPORT);
1383                 outw(-1, ioaddr + DATAPORT);
1384                 outw(tx_block+0x16, ioaddr + DATAPORT);
1385                 outw(0x0000, ioaddr + DATAPORT);
1386
1387                 tx_block += TX_BUF_SIZE;
1388         }
1389         lp->tx_head = TX_BUF_START;
1390         lp->tx_reap = TX_BUF_START;
1391         lp->tx_tail = tx_block - TX_BUF_SIZE;
1392         lp->tx_link = lp->tx_tail + 0x08;
1393         lp->rx_buf_start = tx_block;
1394
1395 }
1396
1397 /*
1398  * Write the circular list of receive buffer descriptors to card memory.
1399  * The end of the list isn't marked, which means that the 82586 receive
1400  * unit will loop until buffers become available (this avoids it giving us
1401  * "out of resources" messages).
1402  */
1403
1404 static void eexp_hw_rxinit(struct net_device *dev)
1405 {
1406         struct net_local *lp = netdev_priv(dev);
1407         unsigned short rx_block = lp->rx_buf_start;
1408         unsigned short ioaddr = dev->base_addr;
1409
1410         lp->num_rx_bufs = 0;
1411         lp->rx_first = lp->rx_ptr = rx_block;
1412         do
1413         {
1414                 lp->num_rx_bufs++;
1415
1416                 outw(rx_block, ioaddr + WRITE_PTR);
1417
1418                 outw(0, ioaddr + DATAPORT);  outw(0, ioaddr+DATAPORT);
1419                 outw(rx_block + RX_BUF_SIZE, ioaddr+DATAPORT);
1420                 outw(0xffff, ioaddr+DATAPORT);
1421
1422                 outw(0x0000, ioaddr+DATAPORT);
1423                 outw(0xdead, ioaddr+DATAPORT);
1424                 outw(0xdead, ioaddr+DATAPORT);
1425                 outw(0xdead, ioaddr+DATAPORT);
1426                 outw(0xdead, ioaddr+DATAPORT);
1427                 outw(0xdead, ioaddr+DATAPORT);
1428                 outw(0xdead, ioaddr+DATAPORT);
1429
1430                 outw(0x0000, ioaddr+DATAPORT);
1431                 outw(rx_block + RX_BUF_SIZE + 0x16, ioaddr+DATAPORT);
1432                 outw(rx_block + 0x20, ioaddr+DATAPORT);
1433                 outw(0, ioaddr+DATAPORT);
1434                 outw(RX_BUF_SIZE-0x20, ioaddr+DATAPORT);
1435
1436                 lp->rx_last = rx_block;
1437                 rx_block += RX_BUF_SIZE;
1438         } while (rx_block <= lp->rx_buf_end-RX_BUF_SIZE);
1439
1440
1441         /* Make first Rx frame descriptor point to first Rx buffer
1442            descriptor */
1443         outw(lp->rx_first + 6, ioaddr+WRITE_PTR);
1444         outw(lp->rx_first + 0x16, ioaddr+DATAPORT);
1445
1446         /* Close Rx frame descriptor ring */
1447         outw(lp->rx_last + 4, ioaddr+WRITE_PTR);
1448         outw(lp->rx_first, ioaddr+DATAPORT);
1449
1450         /* Close Rx buffer descriptor ring */
1451         outw(lp->rx_last + 0x16 + 2, ioaddr+WRITE_PTR);
1452         outw(lp->rx_first + 0x16, ioaddr+DATAPORT);
1453
1454 }
1455
1456 /*
1457  * Un-reset the 586, and start the configuration sequence. We don't wait for
1458  * this to finish, but allow the interrupt handler to start the CU and RU for
1459  * us.  We can't start the receive/transmission system up before we know that
1460  * the hardware is configured correctly.
1461  */
1462
1463 static void eexp_hw_init586(struct net_device *dev)
1464 {
1465         struct net_local *lp = netdev_priv(dev);
1466         unsigned short ioaddr = dev->base_addr;
1467         int i;
1468
1469 #if NET_DEBUG > 6
1470         printk("%s: eexp_hw_init586()\n", dev->name);
1471 #endif
1472
1473         lp->started = 0;
1474
1475         set_loopback(dev);
1476
1477         outb(SIRQ_dis|irqrmap[dev->irq],ioaddr+SET_IRQ);
1478
1479         /* Download the startup code */
1480         outw(lp->rx_buf_end & ~31, ioaddr + SM_PTR);
1481         outw(lp->width?0x0001:0x0000, ioaddr + 0x8006);
1482         outw(0x0000, ioaddr + 0x8008);
1483         outw(0x0000, ioaddr + 0x800a);
1484         outw(0x0000, ioaddr + 0x800c);
1485         outw(0x0000, ioaddr + 0x800e);
1486
1487         for (i = 0; i < (sizeof(start_code)); i+=32) {
1488                 int j;
1489                 outw(i, ioaddr + SM_PTR);
1490                 for (j = 0; j < 16; j+=2)
1491                         outw(start_code[(i+j)/2],
1492                              ioaddr+0x4000+j);
1493                 for (j = 0; j < 16; j+=2)
1494                         outw(start_code[(i+j+16)/2],
1495                              ioaddr+0x8000+j);
1496         }
1497
1498         /* Do we want promiscuous mode or multicast? */
1499         outw(CONF_PROMISC & ~31, ioaddr+SM_PTR);
1500         i = inw(ioaddr+SHADOW(CONF_PROMISC));
1501         outw((dev->flags & IFF_PROMISC)?(i|1):(i & ~1),
1502              ioaddr+SHADOW(CONF_PROMISC));
1503         lp->was_promisc = dev->flags & IFF_PROMISC;
1504 #if 0
1505         eexp_setup_filter(dev);
1506 #endif
1507
1508         /* Write our hardware address */
1509         outw(CONF_HWADDR & ~31, ioaddr+SM_PTR);
1510         outw(((unsigned short *)dev->dev_addr)[0], ioaddr+SHADOW(CONF_HWADDR));
1511         outw(((unsigned short *)dev->dev_addr)[1],
1512              ioaddr+SHADOW(CONF_HWADDR+2));
1513         outw(((unsigned short *)dev->dev_addr)[2],
1514              ioaddr+SHADOW(CONF_HWADDR+4));
1515
1516         eexp_hw_txinit(dev);
1517         eexp_hw_rxinit(dev);
1518
1519         outb(0,ioaddr+EEPROM_Ctrl);
1520         mdelay(5);
1521
1522         scb_command(dev, 0xf000);
1523         outb(0,ioaddr+SIGNAL_CA);
1524
1525         outw(0, ioaddr+SM_PTR);
1526
1527         {
1528                 unsigned short rboguscount=50,rfailcount=5;
1529                 while (inw(ioaddr+0x4000))
1530                 {
1531                         if (!--rboguscount)
1532                         {
1533                                 printk(KERN_WARNING "%s: i82586 reset timed out, kicking...\n",
1534                                         dev->name);
1535                                 scb_command(dev, 0);
1536                                 outb(0,ioaddr+SIGNAL_CA);
1537                                 rboguscount = 100;
1538                                 if (!--rfailcount)
1539                                 {
1540                                         printk(KERN_WARNING "%s: i82586 not responding, giving up.\n",
1541                                                 dev->name);
1542                                         return;
1543                                 }
1544                         }
1545                 }
1546         }
1547
1548         scb_wrcbl(dev, CONF_LINK);
1549         scb_command(dev, 0xf000|SCB_CUstart);
1550         outb(0,ioaddr+SIGNAL_CA);
1551
1552         {
1553                 unsigned short iboguscount=50,ifailcount=5;
1554                 while (!scb_status(dev))
1555                 {
1556                         if (!--iboguscount)
1557                         {
1558                                 if (--ifailcount)
1559                                 {
1560                                         printk(KERN_WARNING "%s: i82586 initialization timed out, status %04x, cmd %04x\n",
1561                                                 dev->name, scb_status(dev), scb_rdcmd(dev));
1562                                         scb_wrcbl(dev, CONF_LINK);
1563                                         scb_command(dev, 0xf000|SCB_CUstart);
1564                                         outb(0,ioaddr+SIGNAL_CA);
1565                                         iboguscount = 100;
1566                                 }
1567                                 else
1568                                 {
1569                                         printk(KERN_WARNING "%s: Failed to initialize i82586, giving up.\n",dev->name);
1570                                         return;
1571                                 }
1572                         }
1573                 }
1574         }
1575
1576         clear_loopback(dev);
1577         outb(SIRQ_en|irqrmap[dev->irq],ioaddr+SET_IRQ);
1578
1579         lp->init_time = jiffies;
1580 #if NET_DEBUG > 6
1581         printk("%s: leaving eexp_hw_init586()\n", dev->name);
1582 #endif
1583         return;
1584 }
1585
1586 static void eexp_setup_filter(struct net_device *dev)
1587 {
1588         struct dev_mc_list *dmi = dev->mc_list;
1589         unsigned short ioaddr = dev->base_addr;
1590         int count = dev->mc_count;
1591         int i;
1592         if (count > 8) {
1593                 printk(KERN_INFO "%s: too many multicast addresses (%d)\n",
1594                        dev->name, count);
1595                 count = 8;
1596         }
1597
1598         outw(CONF_NR_MULTICAST & ~31, ioaddr+SM_PTR);
1599         outw(count, ioaddr+SHADOW(CONF_NR_MULTICAST));
1600         for (i = 0; i < count; i++) {
1601                 unsigned short *data = (unsigned short *)dmi->dmi_addr;
1602                 if (!dmi) {
1603                         printk(KERN_INFO "%s: too few multicast addresses\n", dev->name);
1604                         break;
1605                 }
1606                 if (dmi->dmi_addrlen != ETH_ALEN) {
1607                         printk(KERN_INFO "%s: invalid multicast address length given.\n", dev->name);
1608                         continue;
1609                 }
1610                 outw((CONF_MULTICAST+(6*i)) & ~31, ioaddr+SM_PTR);
1611                 outw(data[0], ioaddr+SHADOW(CONF_MULTICAST+(6*i)));
1612                 outw((CONF_MULTICAST+(6*i)+2) & ~31, ioaddr+SM_PTR);
1613                 outw(data[1], ioaddr+SHADOW(CONF_MULTICAST+(6*i)+2));
1614                 outw((CONF_MULTICAST+(6*i)+4) & ~31, ioaddr+SM_PTR);
1615                 outw(data[2], ioaddr+SHADOW(CONF_MULTICAST+(6*i)+4));
1616         }
1617 }
1618
1619 /*
1620  * Set or clear the multicast filter for this adaptor.
1621  */
1622 static void
1623 eexp_set_multicast(struct net_device *dev)
1624 {
1625         unsigned short ioaddr = dev->base_addr;
1626         struct net_local *lp = netdev_priv(dev);
1627         int kick = 0, i;
1628         if ((dev->flags & IFF_PROMISC) != lp->was_promisc) {
1629                 outw(CONF_PROMISC & ~31, ioaddr+SM_PTR);
1630                 i = inw(ioaddr+SHADOW(CONF_PROMISC));
1631                 outw((dev->flags & IFF_PROMISC)?(i|1):(i & ~1),
1632                      ioaddr+SHADOW(CONF_PROMISC));
1633                 lp->was_promisc = dev->flags & IFF_PROMISC;
1634                 kick = 1;
1635         }
1636         if (!(dev->flags & IFF_PROMISC)) {
1637                 eexp_setup_filter(dev);
1638                 if (lp->old_mc_count != dev->mc_count) {
1639                         kick = 1;
1640                         lp->old_mc_count = dev->mc_count;
1641                 }
1642         }
1643         if (kick) {
1644                 unsigned long oj;
1645                 scb_command(dev, SCB_CUsuspend);
1646                 outb(0, ioaddr+SIGNAL_CA);
1647                 outb(0, ioaddr+SIGNAL_CA);
1648 #if 0
1649                 printk("%s: waiting for CU to go suspended\n", dev->name);
1650 #endif
1651                 oj = jiffies;
1652                 while ((SCB_CUstat(scb_status(dev)) == 2) &&
1653                        (time_after(jiffies, oj + 2000)));
1654                 if (SCB_CUstat(scb_status(dev)) == 2)
1655                         printk("%s: warning, CU didn't stop\n", dev->name);
1656                 lp->started &= ~(STARTED_CU);
1657                 scb_wrcbl(dev, CONF_LINK);
1658                 scb_command(dev, SCB_CUstart);
1659                 outb(0, ioaddr+SIGNAL_CA);
1660         }
1661 }
1662
1663
1664 /*
1665  * MODULE stuff
1666  */
1667
1668 #ifdef MODULE
1669
1670 #define EEXP_MAX_CARDS     4    /* max number of cards to support */
1671
1672 static struct net_device *dev_eexp[EEXP_MAX_CARDS];
1673 static int irq[EEXP_MAX_CARDS];
1674 static int io[EEXP_MAX_CARDS];
1675
1676 module_param_array(io, int, NULL, 0);
1677 module_param_array(irq, int, NULL, 0);
1678 MODULE_PARM_DESC(io, "EtherExpress 16 I/O base address(es)");
1679 MODULE_PARM_DESC(irq, "EtherExpress 16 IRQ number(s)");
1680 MODULE_LICENSE("GPL");
1681
1682
1683 /* Ideally the user would give us io=, irq= for every card.  If any parameters
1684  * are specified, we verify and then use them.  If no parameters are given, we
1685  * autoprobe for one card only.
1686  */
1687 int __init init_module(void)
1688 {
1689         struct net_device *dev;
1690         int this_dev, found = 0;
1691
1692         for (this_dev = 0; this_dev < EEXP_MAX_CARDS; this_dev++) {
1693                 dev = alloc_etherdev(sizeof(struct net_local));
1694                 dev->irq = irq[this_dev];
1695                 dev->base_addr = io[this_dev];
1696                 if (io[this_dev] == 0) {
1697                         if (this_dev)
1698                                 break;
1699                         printk(KERN_NOTICE "eexpress.c: Module autoprobe not recommended, give io=xx.\n");
1700                 }
1701                 if (do_express_probe(dev) == 0) {
1702                         dev_eexp[this_dev] = dev;
1703                         found++;
1704                         continue;
1705                 }
1706                 printk(KERN_WARNING "eexpress.c: Failed to register card at 0x%x.\n", io[this_dev]);
1707                 free_netdev(dev);
1708                 break;
1709         }
1710         if (found)
1711                 return 0;
1712         return -ENXIO;
1713 }
1714
1715 void __exit cleanup_module(void)
1716 {
1717         int this_dev;
1718
1719         for (this_dev = 0; this_dev < EEXP_MAX_CARDS; this_dev++) {
1720                 struct net_device *dev = dev_eexp[this_dev];
1721                 if (dev) {
1722                         unregister_netdev(dev);
1723                         free_netdev(dev);
1724                 }
1725         }
1726 }
1727 #endif
1728
1729 /*
1730  * Local Variables:
1731  *  c-file-style: "linux"
1732  *  tab-width: 8
1733  * End:
1734  */