1 // SPDX-License-Identifier: GPL-2.0+
3 * (C) Copyright 2002-2004
4 * Brad Kemp, Seranoa Networks, Brad.Kemp@seranoa.com
6 * Copyright (C) 2003 Arabella Software Ltd.
7 * Yuli Barcohen <yuli@arabellasw.com>
13 * Tolunay Orkun <listmember@orkun.us>
16 /* The DEBUG define must be before common to enable debugging */
23 #include <fdt_support.h>
24 #include <asm/processor.h>
26 #include <asm/byteorder.h>
27 #include <asm/unaligned.h>
28 #include <environment.h>
29 #include <mtd/cfi_flash.h>
33 * This file implements a Common Flash Interface (CFI) driver for
36 * The width of the port and the width of the chips are determined at
37 * initialization. These widths are used to calculate the address for
38 * access CFI data structures.
41 * JEDEC Standard JESD68 - Common Flash Interface (CFI)
42 * JEDEC Standard JEP137-A Common Flash Interface (CFI) ID Codes
43 * Intel Application Note 646 Common Flash Interface (CFI) and Command Sets
44 * Intel 290667-008 3 Volt Intel StrataFlash Memory datasheet
45 * AMD CFI Specification, Release 2.0 December 1, 2001
46 * AMD/Spansion Application Note: Migration from Single-byte to Three-byte
47 * Device IDs, Publication Number 25538 Revision A, November 8, 2001
49 * Define CONFIG_SYS_WRITE_SWAPPED_DATA, if you have to swap the Bytes between
50 * reading and writing ... (yes there is such a Hardware).
53 DECLARE_GLOBAL_DATA_PTR;
55 static uint flash_offset_cfi[2] = { FLASH_OFFSET_CFI, FLASH_OFFSET_CFI_ALT };
56 #ifdef CONFIG_FLASH_CFI_MTD
57 static uint flash_verbose = 1;
59 #define flash_verbose 1
62 flash_info_t flash_info[CFI_MAX_FLASH_BANKS]; /* FLASH chips info */
65 * Check if chip width is defined. If not, start detecting with 8bit.
67 #ifndef CONFIG_SYS_FLASH_CFI_WIDTH
68 #define CONFIG_SYS_FLASH_CFI_WIDTH FLASH_CFI_8BIT
71 #ifdef CONFIG_CFI_FLASH_USE_WEAK_ACCESSORS
72 #define __maybe_weak __weak
74 #define __maybe_weak static
78 * 0xffff is an undefined value for the configuration register. When
79 * this value is returned, the configuration register shall not be
80 * written at all (default mode).
82 static u16 cfi_flash_config_reg(int i)
84 #ifdef CONFIG_SYS_CFI_FLASH_CONFIG_REGS
85 return ((u16 [])CONFIG_SYS_CFI_FLASH_CONFIG_REGS)[i];
91 #if defined(CONFIG_SYS_MAX_FLASH_BANKS_DETECT)
92 int cfi_flash_num_flash_banks = CONFIG_SYS_MAX_FLASH_BANKS_DETECT;
94 int cfi_flash_num_flash_banks;
97 #ifdef CONFIG_CFI_FLASH /* for driver model */
98 static void cfi_flash_init_dm(void)
102 cfi_flash_num_flash_banks = 0;
104 * The uclass_first_device() will probe the first device and
105 * uclass_next_device() will probe the rest if they exist. So
106 * that cfi_flash_probe() will get called assigning the base
107 * addresses that are available.
109 for (uclass_first_device(UCLASS_MTD, &dev);
111 uclass_next_device(&dev)) {
115 phys_addr_t cfi_flash_bank_addr(int i)
117 return flash_info[i].base;
120 __weak phys_addr_t cfi_flash_bank_addr(int i)
122 return ((phys_addr_t [])CONFIG_SYS_FLASH_BANKS_LIST)[i];
126 __weak unsigned long cfi_flash_bank_size(int i)
128 #ifdef CONFIG_SYS_FLASH_BANKS_SIZES
129 return ((unsigned long [])CONFIG_SYS_FLASH_BANKS_SIZES)[i];
135 __maybe_weak void flash_write8(u8 value, void *addr)
137 __raw_writeb(value, addr);
140 __maybe_weak void flash_write16(u16 value, void *addr)
142 __raw_writew(value, addr);
145 __maybe_weak void flash_write32(u32 value, void *addr)
147 __raw_writel(value, addr);
150 __maybe_weak void flash_write64(u64 value, void *addr)
152 /* No architectures currently implement __raw_writeq() */
153 *(volatile u64 *)addr = value;
156 __maybe_weak u8 flash_read8(void *addr)
158 return __raw_readb(addr);
161 __maybe_weak u16 flash_read16(void *addr)
163 return __raw_readw(addr);
166 __maybe_weak u32 flash_read32(void *addr)
168 return __raw_readl(addr);
171 __maybe_weak u64 flash_read64(void *addr)
173 /* No architectures currently implement __raw_readq() */
174 return *(volatile u64 *)addr;
177 /*-----------------------------------------------------------------------
179 #if defined(CONFIG_ENV_IS_IN_FLASH) || defined(CONFIG_ENV_ADDR_REDUND) || \
180 (CONFIG_SYS_MONITOR_BASE >= CONFIG_SYS_FLASH_BASE)
181 static flash_info_t *flash_get_info(ulong base)
186 for (i = 0; i < CONFIG_SYS_MAX_FLASH_BANKS; i++) {
187 info = &flash_info[i];
188 if (info->size && info->start[0] <= base &&
189 base <= info->start[0] + info->size - 1)
197 unsigned long flash_sector_size(flash_info_t *info, flash_sect_t sect)
199 if (sect != (info->sector_count - 1))
200 return info->start[sect + 1] - info->start[sect];
202 return info->start[0] + info->size - info->start[sect];
205 /*-----------------------------------------------------------------------
206 * create an address based on the offset and the port width
209 flash_map(flash_info_t *info, flash_sect_t sect, uint offset)
211 unsigned int byte_offset = offset * info->portwidth;
213 return (void *)(info->start[sect] + byte_offset);
216 static inline void flash_unmap(flash_info_t *info, flash_sect_t sect,
217 unsigned int offset, void *addr)
221 /*-----------------------------------------------------------------------
222 * make a proper sized command based on the port and chip widths
224 static void flash_make_cmd(flash_info_t *info, u32 cmd, void *cmdbuf)
229 #if defined(__LITTLE_ENDIAN) || defined(CONFIG_SYS_WRITE_SWAPPED_DATA)
230 u32 cmd_le = cpu_to_le32(cmd);
233 uchar *cp = (uchar *) cmdbuf;
235 for (i = info->portwidth; i > 0; i--) {
236 cword_offset = (info->portwidth - i) % info->chipwidth;
237 #if defined(__LITTLE_ENDIAN) || defined(CONFIG_SYS_WRITE_SWAPPED_DATA)
238 cp_offset = info->portwidth - i;
239 val = *((uchar *)&cmd_le + cword_offset);
242 val = *((uchar *)&cmd + sizeof(u32) - cword_offset - 1);
244 cp[cp_offset] = (cword_offset >= sizeof(u32)) ? 0x00 : val;
249 /*-----------------------------------------------------------------------
252 static void print_longlong(char *str, unsigned long long data)
258 for (i = 0; i < 8; i++)
259 sprintf(&str[i * 2], "%2.2x", *cp++);
262 static void flash_printqry(struct cfi_qry *qry)
267 for (x = 0; x < sizeof(struct cfi_qry); x += 16) {
269 for (y = 0; y < 16; y++)
270 debug("%2.2x ", p[x + y]);
272 for (y = 0; y < 16; y++) {
273 unsigned char c = p[x + y];
275 if (c >= 0x20 && c <= 0x7e)
285 /*-----------------------------------------------------------------------
286 * read a character at a port width address
288 static inline uchar flash_read_uchar(flash_info_t *info, uint offset)
293 cp = flash_map(info, 0, offset);
294 #if defined(__LITTLE_ENDIAN) || defined(CONFIG_SYS_WRITE_SWAPPED_DATA)
295 retval = flash_read8(cp);
297 retval = flash_read8(cp + info->portwidth - 1);
299 flash_unmap(info, 0, offset, cp);
303 /*-----------------------------------------------------------------------
304 * read a word at a port width address, assume 16bit bus
306 static inline ushort flash_read_word(flash_info_t *info, uint offset)
308 ushort *addr, retval;
310 addr = flash_map(info, 0, offset);
311 retval = flash_read16(addr);
312 flash_unmap(info, 0, offset, addr);
316 /*-----------------------------------------------------------------------
317 * read a long word by picking the least significant byte of each maximum
318 * port size word. Swap for ppc format.
320 static ulong flash_read_long (flash_info_t *info, flash_sect_t sect,
329 addr = flash_map(info, sect, offset);
332 debug("long addr is at %p info->portwidth = %d\n", addr,
334 for (x = 0; x < 4 * info->portwidth; x++)
335 debug("addr[%x] = 0x%x\n", x, flash_read8(addr + x));
337 #if defined(__LITTLE_ENDIAN) || defined(CONFIG_SYS_WRITE_SWAPPED_DATA)
338 retval = ((flash_read8(addr) << 16) |
339 (flash_read8(addr + info->portwidth) << 24) |
340 (flash_read8(addr + 2 * info->portwidth)) |
341 (flash_read8(addr + 3 * info->portwidth) << 8));
343 retval = ((flash_read8(addr + 2 * info->portwidth - 1) << 24) |
344 (flash_read8(addr + info->portwidth - 1) << 16) |
345 (flash_read8(addr + 4 * info->portwidth - 1) << 8) |
346 (flash_read8(addr + 3 * info->portwidth - 1)));
348 flash_unmap(info, sect, offset, addr);
354 * Write a proper sized command to the correct address
356 static void flash_write_cmd(flash_info_t *info, flash_sect_t sect,
357 uint offset, u32 cmd)
362 addr = flash_map(info, sect, offset);
363 flash_make_cmd(info, cmd, &cword);
364 switch (info->portwidth) {
366 debug("fwc addr %p cmd %x %x 8bit x %d bit\n", addr, cmd,
367 cword.w8, info->chipwidth << CFI_FLASH_SHIFT_WIDTH);
368 flash_write8(cword.w8, addr);
370 case FLASH_CFI_16BIT:
371 debug("fwc addr %p cmd %x %4.4x 16bit x %d bit\n", addr,
373 info->chipwidth << CFI_FLASH_SHIFT_WIDTH);
374 flash_write16(cword.w16, addr);
376 case FLASH_CFI_32BIT:
377 debug("fwc addr %p cmd %x %8.8x 32bit x %d bit\n", addr,
379 info->chipwidth << CFI_FLASH_SHIFT_WIDTH);
380 flash_write32(cword.w32, addr);
382 case FLASH_CFI_64BIT:
387 print_longlong(str, cword.w64);
389 debug("fwrite addr %p cmd %x %s 64 bit x %d bit\n",
391 info->chipwidth << CFI_FLASH_SHIFT_WIDTH);
394 flash_write64(cword.w64, addr);
398 /* Ensure all the instructions are fully finished */
401 flash_unmap(info, sect, offset, addr);
404 static void flash_unlock_seq(flash_info_t *info, flash_sect_t sect)
406 flash_write_cmd(info, sect, info->addr_unlock1, AMD_CMD_UNLOCK_START);
407 flash_write_cmd(info, sect, info->addr_unlock2, AMD_CMD_UNLOCK_ACK);
410 /*-----------------------------------------------------------------------
412 static int flash_isequal(flash_info_t *info, flash_sect_t sect, uint offset,
419 addr = flash_map(info, sect, offset);
420 flash_make_cmd(info, cmd, &cword);
422 debug("is= cmd %x(%c) addr %p ", cmd, cmd, addr);
423 switch (info->portwidth) {
425 debug("is= %x %x\n", flash_read8(addr), cword.w8);
426 retval = (flash_read8(addr) == cword.w8);
428 case FLASH_CFI_16BIT:
429 debug("is= %4.4x %4.4x\n", flash_read16(addr), cword.w16);
430 retval = (flash_read16(addr) == cword.w16);
432 case FLASH_CFI_32BIT:
433 debug("is= %8.8x %8.8x\n", flash_read32(addr), cword.w32);
434 retval = (flash_read32(addr) == cword.w32);
436 case FLASH_CFI_64BIT:
442 print_longlong(str1, flash_read64(addr));
443 print_longlong(str2, cword.w64);
444 debug("is= %s %s\n", str1, str2);
447 retval = (flash_read64(addr) == cword.w64);
453 flash_unmap(info, sect, offset, addr);
458 /*-----------------------------------------------------------------------
460 static int flash_isset(flash_info_t *info, flash_sect_t sect, uint offset,
467 addr = flash_map(info, sect, offset);
468 flash_make_cmd(info, cmd, &cword);
469 switch (info->portwidth) {
471 retval = ((flash_read8(addr) & cword.w8) == cword.w8);
473 case FLASH_CFI_16BIT:
474 retval = ((flash_read16(addr) & cword.w16) == cword.w16);
476 case FLASH_CFI_32BIT:
477 retval = ((flash_read32(addr) & cword.w32) == cword.w32);
479 case FLASH_CFI_64BIT:
480 retval = ((flash_read64(addr) & cword.w64) == cword.w64);
486 flash_unmap(info, sect, offset, addr);
491 /*-----------------------------------------------------------------------
493 static int flash_toggle(flash_info_t *info, flash_sect_t sect, uint offset,
500 addr = flash_map(info, sect, offset);
501 flash_make_cmd(info, cmd, &cword);
502 switch (info->portwidth) {
504 retval = flash_read8(addr) != flash_read8(addr);
506 case FLASH_CFI_16BIT:
507 retval = flash_read16(addr) != flash_read16(addr);
509 case FLASH_CFI_32BIT:
510 retval = flash_read32(addr) != flash_read32(addr);
512 case FLASH_CFI_64BIT:
513 retval = ((flash_read32(addr) != flash_read32(addr)) ||
514 (flash_read32(addr + 4) != flash_read32(addr + 4)));
520 flash_unmap(info, sect, offset, addr);
526 * flash_is_busy - check to see if the flash is busy
528 * This routine checks the status of the chip and returns true if the
531 static int flash_is_busy(flash_info_t *info, flash_sect_t sect)
535 switch (info->vendor) {
536 case CFI_CMDSET_INTEL_PROG_REGIONS:
537 case CFI_CMDSET_INTEL_STANDARD:
538 case CFI_CMDSET_INTEL_EXTENDED:
539 retval = !flash_isset(info, sect, 0, FLASH_STATUS_DONE);
541 case CFI_CMDSET_AMD_STANDARD:
542 case CFI_CMDSET_AMD_EXTENDED:
543 #ifdef CONFIG_FLASH_CFI_LEGACY
544 case CFI_CMDSET_AMD_LEGACY:
546 if (info->sr_supported) {
547 flash_write_cmd(info, sect, info->addr_unlock1,
548 FLASH_CMD_READ_STATUS);
549 retval = !flash_isset(info, sect, 0,
552 retval = flash_toggle(info, sect, 0,
560 debug("%s: %d\n", __func__, retval);
564 /*-----------------------------------------------------------------------
565 * wait for XSR.7 to be set. Time out with an error if it does not.
566 * This routine does not set the flash to read-array mode.
568 static int flash_status_check(flash_info_t *info, flash_sect_t sector,
569 ulong tout, char *prompt)
573 #if CONFIG_SYS_HZ != 1000
574 /* Avoid overflow for large HZ */
575 if ((ulong)CONFIG_SYS_HZ > 100000)
576 tout *= (ulong)CONFIG_SYS_HZ / 1000;
578 tout = DIV_ROUND_UP(tout * (ulong)CONFIG_SYS_HZ, 1000);
581 /* Wait for command completion */
582 #ifdef CONFIG_SYS_LOW_RES_TIMER
585 start = get_timer(0);
587 while (flash_is_busy(info, sector)) {
588 if (get_timer(start) > tout) {
589 printf("Flash %s timeout at address %lx data %lx\n",
590 prompt, info->start[sector],
591 flash_read_long(info, sector, 0));
592 flash_write_cmd(info, sector, 0, info->cmd_reset);
596 udelay(1); /* also triggers watchdog */
601 /*-----------------------------------------------------------------------
602 * Wait for XSR.7 to be set, if it times out print an error, otherwise
603 * do a full status check.
605 * This routine sets the flash to read-array mode.
607 static int flash_full_status_check(flash_info_t *info, flash_sect_t sector,
608 ulong tout, char *prompt)
612 retcode = flash_status_check(info, sector, tout, prompt);
613 switch (info->vendor) {
614 case CFI_CMDSET_INTEL_PROG_REGIONS:
615 case CFI_CMDSET_INTEL_EXTENDED:
616 case CFI_CMDSET_INTEL_STANDARD:
617 if (retcode == ERR_OK &&
618 !flash_isset(info, sector, 0, FLASH_STATUS_DONE)) {
620 printf("Flash %s error at address %lx\n", prompt,
621 info->start[sector]);
622 if (flash_isset(info, sector, 0, FLASH_STATUS_ECLBS |
623 FLASH_STATUS_PSLBS)) {
624 puts("Command Sequence Error.\n");
625 } else if (flash_isset(info, sector, 0,
626 FLASH_STATUS_ECLBS)) {
627 puts("Block Erase Error.\n");
628 retcode = ERR_NOT_ERASED;
629 } else if (flash_isset(info, sector, 0,
630 FLASH_STATUS_PSLBS)) {
631 puts("Locking Error\n");
633 if (flash_isset(info, sector, 0, FLASH_STATUS_DPS)) {
634 puts("Block locked.\n");
635 retcode = ERR_PROTECTED;
637 if (flash_isset(info, sector, 0, FLASH_STATUS_VPENS))
638 puts("Vpp Low Error.\n");
640 flash_write_cmd(info, sector, 0, info->cmd_reset);
649 static int use_flash_status_poll(flash_info_t *info)
651 #ifdef CONFIG_SYS_CFI_FLASH_STATUS_POLL
652 if (info->vendor == CFI_CMDSET_AMD_EXTENDED ||
653 info->vendor == CFI_CMDSET_AMD_STANDARD)
659 static int flash_status_poll(flash_info_t *info, void *src, void *dst,
660 ulong tout, char *prompt)
662 #ifdef CONFIG_SYS_CFI_FLASH_STATUS_POLL
666 #if CONFIG_SYS_HZ != 1000
667 /* Avoid overflow for large HZ */
668 if ((ulong)CONFIG_SYS_HZ > 100000)
669 tout *= (ulong)CONFIG_SYS_HZ / 1000;
671 tout = DIV_ROUND_UP(tout * (ulong)CONFIG_SYS_HZ, 1000);
674 /* Wait for command completion */
675 #ifdef CONFIG_SYS_LOW_RES_TIMER
678 start = get_timer(0);
681 switch (info->portwidth) {
683 ready = flash_read8(dst) == flash_read8(src);
685 case FLASH_CFI_16BIT:
686 ready = flash_read16(dst) == flash_read16(src);
688 case FLASH_CFI_32BIT:
689 ready = flash_read32(dst) == flash_read32(src);
691 case FLASH_CFI_64BIT:
692 ready = flash_read64(dst) == flash_read64(src);
700 if (get_timer(start) > tout) {
701 printf("Flash %s timeout at address %lx data %lx\n",
702 prompt, (ulong)dst, (ulong)flash_read8(dst));
705 udelay(1); /* also triggers watchdog */
707 #endif /* CONFIG_SYS_CFI_FLASH_STATUS_POLL */
711 /*-----------------------------------------------------------------------
713 static void flash_add_byte(flash_info_t *info, cfiword_t *cword, uchar c)
715 #if defined(__LITTLE_ENDIAN) && !defined(CONFIG_SYS_WRITE_SWAPPED_DATA)
718 unsigned long long ll;
721 switch (info->portwidth) {
725 case FLASH_CFI_16BIT:
726 #if defined(__LITTLE_ENDIAN) && !defined(CONFIG_SYS_WRITE_SWAPPED_DATA)
729 cword->w16 = (cword->w16 >> 8) | w;
731 cword->w16 = (cword->w16 << 8) | c;
734 case FLASH_CFI_32BIT:
735 #if defined(__LITTLE_ENDIAN) && !defined(CONFIG_SYS_WRITE_SWAPPED_DATA)
738 cword->w32 = (cword->w32 >> 8) | l;
740 cword->w32 = (cword->w32 << 8) | c;
743 case FLASH_CFI_64BIT:
744 #if defined(__LITTLE_ENDIAN) && !defined(CONFIG_SYS_WRITE_SWAPPED_DATA)
747 cword->w64 = (cword->w64 >> 8) | ll;
749 cword->w64 = (cword->w64 << 8) | c;
756 * Loop through the sector table starting from the previously found sector.
757 * Searches forwards or backwards, dependent on the passed address.
759 static flash_sect_t find_sector(flash_info_t *info, ulong addr)
761 static flash_sect_t saved_sector; /* previously found sector */
762 static flash_info_t *saved_info; /* previously used flash bank */
763 flash_sect_t sector = saved_sector;
765 if (info != saved_info || sector >= info->sector_count)
768 while ((sector < info->sector_count - 1) &&
769 (info->start[sector] < addr))
771 while ((info->start[sector] > addr) && (sector > 0))
773 * also decrements the sector in case of an overshot
778 saved_sector = sector;
783 /*-----------------------------------------------------------------------
785 static int flash_write_cfiword(flash_info_t *info, ulong dest, cfiword_t cword)
787 void *dstaddr = (void *)dest;
789 flash_sect_t sect = 0;
792 /* Check if Flash is (sufficiently) erased */
793 switch (info->portwidth) {
795 flag = ((flash_read8(dstaddr) & cword.w8) == cword.w8);
797 case FLASH_CFI_16BIT:
798 flag = ((flash_read16(dstaddr) & cword.w16) == cword.w16);
800 case FLASH_CFI_32BIT:
801 flag = ((flash_read32(dstaddr) & cword.w32) == cword.w32);
803 case FLASH_CFI_64BIT:
804 flag = ((flash_read64(dstaddr) & cword.w64) == cword.w64);
811 return ERR_NOT_ERASED;
813 /* Disable interrupts which might cause a timeout here */
814 flag = disable_interrupts();
816 switch (info->vendor) {
817 case CFI_CMDSET_INTEL_PROG_REGIONS:
818 case CFI_CMDSET_INTEL_EXTENDED:
819 case CFI_CMDSET_INTEL_STANDARD:
820 flash_write_cmd(info, 0, 0, FLASH_CMD_CLEAR_STATUS);
821 flash_write_cmd(info, 0, 0, FLASH_CMD_WRITE);
823 case CFI_CMDSET_AMD_EXTENDED:
824 case CFI_CMDSET_AMD_STANDARD:
825 sect = find_sector(info, dest);
826 flash_unlock_seq(info, sect);
827 flash_write_cmd(info, sect, info->addr_unlock1, AMD_CMD_WRITE);
830 #ifdef CONFIG_FLASH_CFI_LEGACY
831 case CFI_CMDSET_AMD_LEGACY:
832 sect = find_sector(info, dest);
833 flash_unlock_seq(info, 0);
834 flash_write_cmd(info, 0, info->addr_unlock1, AMD_CMD_WRITE);
840 switch (info->portwidth) {
842 flash_write8(cword.w8, dstaddr);
844 case FLASH_CFI_16BIT:
845 flash_write16(cword.w16, dstaddr);
847 case FLASH_CFI_32BIT:
848 flash_write32(cword.w32, dstaddr);
850 case FLASH_CFI_64BIT:
851 flash_write64(cword.w64, dstaddr);
855 /* re-enable interrupts if necessary */
860 sect = find_sector(info, dest);
862 if (use_flash_status_poll(info))
863 return flash_status_poll(info, &cword, dstaddr,
864 info->write_tout, "write");
866 return flash_full_status_check(info, sect,
867 info->write_tout, "write");
870 #ifdef CONFIG_SYS_FLASH_USE_BUFFER_WRITE
872 static int flash_write_cfibuffer(flash_info_t *info, ulong dest, uchar *cp,
879 u8 *dst = (u8 *)dest;
886 switch (info->portwidth) {
890 case FLASH_CFI_16BIT:
893 case FLASH_CFI_32BIT:
896 case FLASH_CFI_64BIT:
906 while ((cnt-- > 0) && (flag == 1)) {
907 switch (info->portwidth) {
909 flag = ((flash_read8(dst2) & flash_read8(src)) ==
913 case FLASH_CFI_16BIT:
914 flag = ((flash_read16(dst2) & flash_read16(src)) ==
918 case FLASH_CFI_32BIT:
919 flag = ((flash_read32(dst2) & flash_read32(src)) ==
923 case FLASH_CFI_64BIT:
924 flag = ((flash_read64(dst2) & flash_read64(src)) ==
931 retcode = ERR_NOT_ERASED;
936 sector = find_sector(info, dest);
938 switch (info->vendor) {
939 case CFI_CMDSET_INTEL_PROG_REGIONS:
940 case CFI_CMDSET_INTEL_STANDARD:
941 case CFI_CMDSET_INTEL_EXTENDED:
942 write_cmd = (info->vendor == CFI_CMDSET_INTEL_PROG_REGIONS) ?
943 FLASH_CMD_WRITE_BUFFER_PROG :
944 FLASH_CMD_WRITE_TO_BUFFER;
945 flash_write_cmd(info, sector, 0, FLASH_CMD_CLEAR_STATUS);
946 flash_write_cmd(info, sector, 0, FLASH_CMD_READ_STATUS);
947 flash_write_cmd(info, sector, 0, write_cmd);
948 retcode = flash_status_check(info, sector,
949 info->buffer_write_tout,
951 if (retcode == ERR_OK) {
952 /* reduce the number of loops by the width of
956 flash_write_cmd(info, sector, 0, cnt - 1);
958 switch (info->portwidth) {
960 flash_write8(flash_read8(src), dst);
963 case FLASH_CFI_16BIT:
964 flash_write16(flash_read16(src), dst);
967 case FLASH_CFI_32BIT:
968 flash_write32(flash_read32(src), dst);
971 case FLASH_CFI_64BIT:
972 flash_write64(flash_read64(src), dst);
980 flash_write_cmd(info, sector, 0,
981 FLASH_CMD_WRITE_BUFFER_CONFIRM);
982 retcode = flash_full_status_check(
983 info, sector, info->buffer_write_tout,
989 case CFI_CMDSET_AMD_STANDARD:
990 case CFI_CMDSET_AMD_EXTENDED:
991 flash_unlock_seq(info, sector);
993 #ifdef CONFIG_FLASH_SPANSION_S29WS_N
994 offset = ((unsigned long)dst - info->start[sector]) >> shift;
996 flash_write_cmd(info, sector, offset, AMD_CMD_WRITE_TO_BUFFER);
998 flash_write_cmd(info, sector, offset, cnt - 1);
1000 switch (info->portwidth) {
1001 case FLASH_CFI_8BIT:
1003 flash_write8(flash_read8(src), dst);
1007 case FLASH_CFI_16BIT:
1009 flash_write16(flash_read16(src), dst);
1013 case FLASH_CFI_32BIT:
1015 flash_write32(flash_read32(src), dst);
1019 case FLASH_CFI_64BIT:
1021 flash_write64(flash_read64(src), dst);
1026 retcode = ERR_INVAL;
1030 flash_write_cmd(info, sector, 0, AMD_CMD_WRITE_BUFFER_CONFIRM);
1031 if (use_flash_status_poll(info))
1032 retcode = flash_status_poll(info, src - (1 << shift),
1034 info->buffer_write_tout,
1037 retcode = flash_full_status_check(info, sector,
1038 info->buffer_write_tout,
1043 debug("Unknown Command Set\n");
1044 retcode = ERR_INVAL;
1051 #endif /* CONFIG_SYS_FLASH_USE_BUFFER_WRITE */
1053 /*-----------------------------------------------------------------------
1055 int flash_erase(flash_info_t *info, int s_first, int s_last)
1062 if (info->flash_id != FLASH_MAN_CFI) {
1063 puts("Can't erase unknown flash type - aborted\n");
1066 if (s_first < 0 || s_first > s_last) {
1067 puts("- no sectors to erase\n");
1072 for (sect = s_first; sect <= s_last; ++sect)
1073 if (info->protect[sect])
1076 printf("- Warning: %d protected sectors will not be erased!\n",
1078 } else if (flash_verbose) {
1082 for (sect = s_first; sect <= s_last; sect++) {
1088 if (info->protect[sect] == 0) { /* not protected */
1089 #ifdef CONFIG_SYS_FLASH_CHECK_BLANK_BEFORE_ERASE
1096 * Check if whole sector is erased
1098 size = flash_sector_size(info, sect);
1100 flash = (u32 *)info->start[sect];
1101 /* divide by 4 for longword access */
1103 for (k = 0; k < size; k++) {
1104 if (flash_read32(flash++) != 0xffffffff) {
1115 switch (info->vendor) {
1116 case CFI_CMDSET_INTEL_PROG_REGIONS:
1117 case CFI_CMDSET_INTEL_STANDARD:
1118 case CFI_CMDSET_INTEL_EXTENDED:
1119 flash_write_cmd(info, sect, 0,
1120 FLASH_CMD_CLEAR_STATUS);
1121 flash_write_cmd(info, sect, 0,
1122 FLASH_CMD_BLOCK_ERASE);
1123 flash_write_cmd(info, sect, 0,
1124 FLASH_CMD_ERASE_CONFIRM);
1126 case CFI_CMDSET_AMD_STANDARD:
1127 case CFI_CMDSET_AMD_EXTENDED:
1128 flash_unlock_seq(info, sect);
1129 flash_write_cmd(info, sect,
1131 AMD_CMD_ERASE_START);
1132 flash_unlock_seq(info, sect);
1133 flash_write_cmd(info, sect, 0,
1134 info->cmd_erase_sector);
1136 #ifdef CONFIG_FLASH_CFI_LEGACY
1137 case CFI_CMDSET_AMD_LEGACY:
1138 flash_unlock_seq(info, 0);
1139 flash_write_cmd(info, 0, info->addr_unlock1,
1140 AMD_CMD_ERASE_START);
1141 flash_unlock_seq(info, 0);
1142 flash_write_cmd(info, sect, 0,
1143 AMD_CMD_ERASE_SECTOR);
1147 debug("Unknown flash vendor %d\n",
1152 if (use_flash_status_poll(info)) {
1156 cword.w64 = 0xffffffffffffffffULL;
1157 dest = flash_map(info, sect, 0);
1158 st = flash_status_poll(info, &cword, dest,
1159 info->erase_blk_tout,
1161 flash_unmap(info, sect, 0, dest);
1163 st = flash_full_status_check(info, sect,
1164 info->erase_blk_tout,
1170 else if (flash_verbose)
1181 #ifdef CONFIG_SYS_FLASH_EMPTY_INFO
1182 static int sector_erased(flash_info_t *info, int i)
1189 * Check if whole sector is erased
1191 size = flash_sector_size(info, i);
1192 flash = (u32 *)info->start[i];
1193 /* divide by 4 for longword access */
1196 for (k = 0; k < size; k++) {
1197 if (flash_read32(flash++) != 0xffffffff)
1198 return 0; /* not erased */
1201 return 1; /* erased */
1203 #endif /* CONFIG_SYS_FLASH_EMPTY_INFO */
1205 void flash_print_info(flash_info_t *info)
1209 if (info->flash_id != FLASH_MAN_CFI) {
1210 puts("missing or unknown FLASH type\n");
1214 printf("%s flash (%d x %d)",
1216 (info->portwidth << 3), (info->chipwidth << 3));
1217 if (info->size < 1024 * 1024)
1218 printf(" Size: %ld kB in %d Sectors\n",
1219 info->size >> 10, info->sector_count);
1221 printf(" Size: %ld MB in %d Sectors\n",
1222 info->size >> 20, info->sector_count);
1224 switch (info->vendor) {
1225 case CFI_CMDSET_INTEL_PROG_REGIONS:
1226 printf("Intel Prog Regions");
1228 case CFI_CMDSET_INTEL_STANDARD:
1229 printf("Intel Standard");
1231 case CFI_CMDSET_INTEL_EXTENDED:
1232 printf("Intel Extended");
1234 case CFI_CMDSET_AMD_STANDARD:
1235 printf("AMD Standard");
1237 case CFI_CMDSET_AMD_EXTENDED:
1238 printf("AMD Extended");
1240 #ifdef CONFIG_FLASH_CFI_LEGACY
1241 case CFI_CMDSET_AMD_LEGACY:
1242 printf("AMD Legacy");
1246 printf("Unknown (%d)", info->vendor);
1249 printf(" command set, Manufacturer ID: 0x%02X, Device ID: 0x",
1250 info->manufacturer_id);
1251 printf(info->chipwidth == FLASH_CFI_16BIT ? "%04X" : "%02X",
1253 if ((info->device_id & 0xff) == 0x7E) {
1254 printf(info->chipwidth == FLASH_CFI_16BIT ? "%04X" : "%02X",
1257 if (info->vendor == CFI_CMDSET_AMD_STANDARD && info->legacy_unlock)
1258 printf("\n Advanced Sector Protection (PPB) enabled");
1259 printf("\n Erase timeout: %ld ms, write timeout: %ld ms\n",
1260 info->erase_blk_tout, info->write_tout);
1261 if (info->buffer_size > 1) {
1262 printf(" Buffer write timeout: %ld ms, ",
1263 info->buffer_write_tout);
1264 printf("buffer size: %d bytes\n", info->buffer_size);
1267 puts("\n Sector Start Addresses:");
1268 for (i = 0; i < info->sector_count; ++i) {
1273 #ifdef CONFIG_SYS_FLASH_EMPTY_INFO
1274 /* print empty and read-only info */
1275 printf(" %08lX %c %s ",
1277 sector_erased(info, i) ? 'E' : ' ',
1278 info->protect[i] ? "RO" : " ");
1279 #else /* ! CONFIG_SYS_FLASH_EMPTY_INFO */
1280 printf(" %08lX %s ",
1282 info->protect[i] ? "RO" : " ");
1288 /*-----------------------------------------------------------------------
1289 * This is used in a few places in write_buf() to show programming
1290 * progress. Making it a function is nasty because it needs to do side
1291 * effect updates to digit and dots. Repeated code is nasty too, so
1292 * we define it once here.
1294 #ifdef CONFIG_FLASH_SHOW_PROGRESS
1295 #define FLASH_SHOW_PROGRESS(scale, dots, digit, dots_sub) \
1296 if (flash_verbose) { \
1298 if (scale > 0 && dots <= 0) { \
1299 if ((digit % 5) == 0) \
1300 printf("%d", digit / 5); \
1308 #define FLASH_SHOW_PROGRESS(scale, dots, digit, dots_sub)
1311 /*-----------------------------------------------------------------------
1312 * Copy memory to flash, returns:
1315 * 2 - Flash not erased
1317 int write_buff(flash_info_t *info, uchar *src, ulong addr, ulong cnt)
1324 #ifdef CONFIG_SYS_FLASH_USE_BUFFER_WRITE
1327 #ifdef CONFIG_FLASH_SHOW_PROGRESS
1328 int digit = CONFIG_FLASH_SHOW_PROGRESS;
1333 * Suppress if there are fewer than CONFIG_FLASH_SHOW_PROGRESS writes.
1335 if (cnt >= CONFIG_FLASH_SHOW_PROGRESS) {
1336 scale = (int)((cnt + CONFIG_FLASH_SHOW_PROGRESS - 1) /
1337 CONFIG_FLASH_SHOW_PROGRESS);
1341 /* get lower aligned address */
1342 wp = (addr & ~(info->portwidth - 1));
1344 /* handle unaligned start */
1349 for (i = 0; i < aln; ++i)
1350 flash_add_byte(info, &cword, flash_read8(p + i));
1352 for (; (i < info->portwidth) && (cnt > 0); i++) {
1353 flash_add_byte(info, &cword, *src++);
1356 for (; (cnt == 0) && (i < info->portwidth); ++i)
1357 flash_add_byte(info, &cword, flash_read8(p + i));
1359 rc = flash_write_cfiword(info, wp, cword);
1364 FLASH_SHOW_PROGRESS(scale, dots, digit, i);
1367 /* handle the aligned part */
1368 #ifdef CONFIG_SYS_FLASH_USE_BUFFER_WRITE
1369 buffered_size = (info->portwidth / info->chipwidth);
1370 buffered_size *= info->buffer_size;
1371 while (cnt >= info->portwidth) {
1372 /* prohibit buffer write when buffer_size is 1 */
1373 if (info->buffer_size == 1) {
1375 for (i = 0; i < info->portwidth; i++)
1376 flash_add_byte(info, &cword, *src++);
1377 rc = flash_write_cfiword(info, wp, cword);
1380 wp += info->portwidth;
1381 cnt -= info->portwidth;
1385 /* write buffer until next buffered_size aligned boundary */
1386 i = buffered_size - (wp % buffered_size);
1389 rc = flash_write_cfibuffer(info, wp, src, i);
1392 i -= i & (info->portwidth - 1);
1396 FLASH_SHOW_PROGRESS(scale, dots, digit, i);
1397 /* Only check every once in a while */
1398 if ((cnt & 0xFFFF) < buffered_size && ctrlc())
1402 while (cnt >= info->portwidth) {
1404 for (i = 0; i < info->portwidth; i++)
1405 flash_add_byte(info, &cword, *src++);
1406 rc = flash_write_cfiword(info, wp, cword);
1409 wp += info->portwidth;
1410 cnt -= info->portwidth;
1411 FLASH_SHOW_PROGRESS(scale, dots, digit, info->portwidth);
1412 /* Only check every once in a while */
1413 if ((cnt & 0xFFFF) < info->portwidth && ctrlc())
1416 #endif /* CONFIG_SYS_FLASH_USE_BUFFER_WRITE */
1422 * handle unaligned tail bytes
1426 for (i = 0; (i < info->portwidth) && (cnt > 0); ++i) {
1427 flash_add_byte(info, &cword, *src++);
1430 for (; i < info->portwidth; ++i)
1431 flash_add_byte(info, &cword, flash_read8(p + i));
1433 return flash_write_cfiword(info, wp, cword);
1436 static inline int manufact_match(flash_info_t *info, u32 manu)
1438 return info->manufacturer_id == ((manu & FLASH_VENDMASK) >> 16);
1441 /*-----------------------------------------------------------------------
1443 #ifdef CONFIG_SYS_FLASH_PROTECTION
1445 static int cfi_protect_bugfix(flash_info_t *info, long sector, int prot)
1447 if (manufact_match(info, INTEL_MANUFACT) &&
1448 info->device_id == NUMONYX_256MBIT) {
1451 * "Numonyx Axcell P33/P30 Specification Update" :)
1453 flash_write_cmd(info, sector, 0, FLASH_CMD_READ_ID);
1454 if (!flash_isequal(info, sector, FLASH_OFFSET_PROTECT,
1457 * cmd must come before FLASH_CMD_PROTECT + 20us
1458 * Disable interrupts which might cause a timeout here.
1460 int flag = disable_interrupts();
1464 cmd = FLASH_CMD_PROTECT_SET;
1466 cmd = FLASH_CMD_PROTECT_CLEAR;
1468 flash_write_cmd(info, sector, 0, FLASH_CMD_PROTECT);
1469 flash_write_cmd(info, sector, 0, cmd);
1470 /* re-enable interrupts if necessary */
1472 enable_interrupts();
1479 int flash_real_protect(flash_info_t *info, long sector, int prot)
1483 switch (info->vendor) {
1484 case CFI_CMDSET_INTEL_PROG_REGIONS:
1485 case CFI_CMDSET_INTEL_STANDARD:
1486 case CFI_CMDSET_INTEL_EXTENDED:
1487 if (!cfi_protect_bugfix(info, sector, prot)) {
1488 flash_write_cmd(info, sector, 0,
1489 FLASH_CMD_CLEAR_STATUS);
1490 flash_write_cmd(info, sector, 0,
1493 flash_write_cmd(info, sector, 0,
1494 FLASH_CMD_PROTECT_SET);
1496 flash_write_cmd(info, sector, 0,
1497 FLASH_CMD_PROTECT_CLEAR);
1500 case CFI_CMDSET_AMD_EXTENDED:
1501 case CFI_CMDSET_AMD_STANDARD:
1502 /* U-Boot only checks the first byte */
1503 if (manufact_match(info, ATM_MANUFACT)) {
1505 flash_unlock_seq(info, 0);
1506 flash_write_cmd(info, 0,
1508 ATM_CMD_SOFTLOCK_START);
1509 flash_unlock_seq(info, 0);
1510 flash_write_cmd(info, sector, 0,
1513 flash_write_cmd(info, 0,
1515 AMD_CMD_UNLOCK_START);
1516 if (info->device_id == ATM_ID_BV6416)
1517 flash_write_cmd(info, sector,
1518 0, ATM_CMD_UNLOCK_SECT);
1521 if (info->legacy_unlock) {
1522 int flag = disable_interrupts();
1525 flash_unlock_seq(info, 0);
1526 flash_write_cmd(info, 0, info->addr_unlock1,
1527 AMD_CMD_SET_PPB_ENTRY);
1528 lock_flag = flash_isset(info, sector, 0, 0x01);
1531 flash_write_cmd(info, sector, 0,
1532 AMD_CMD_PPB_LOCK_BC1);
1533 flash_write_cmd(info, sector, 0,
1534 AMD_CMD_PPB_LOCK_BC2);
1536 debug("sector %ld %slocked\n", sector,
1537 lock_flag ? "" : "already ");
1540 debug("unlock %ld\n", sector);
1541 flash_write_cmd(info, 0, 0,
1542 AMD_CMD_PPB_UNLOCK_BC1);
1543 flash_write_cmd(info, 0, 0,
1544 AMD_CMD_PPB_UNLOCK_BC2);
1546 debug("sector %ld %sunlocked\n", sector,
1547 !lock_flag ? "" : "already ");
1550 enable_interrupts();
1552 if (flash_status_check(info, sector,
1553 info->erase_blk_tout,
1554 prot ? "protect" : "unprotect"))
1555 printf("status check error\n");
1557 flash_write_cmd(info, 0, 0,
1558 AMD_CMD_SET_PPB_EXIT_BC1);
1559 flash_write_cmd(info, 0, 0,
1560 AMD_CMD_SET_PPB_EXIT_BC2);
1563 #ifdef CONFIG_FLASH_CFI_LEGACY
1564 case CFI_CMDSET_AMD_LEGACY:
1565 flash_write_cmd(info, sector, 0, FLASH_CMD_CLEAR_STATUS);
1566 flash_write_cmd(info, sector, 0, FLASH_CMD_PROTECT);
1568 flash_write_cmd(info, sector, 0,
1569 FLASH_CMD_PROTECT_SET);
1571 flash_write_cmd(info, sector, 0,
1572 FLASH_CMD_PROTECT_CLEAR);
1577 * Flash needs to be in status register read mode for
1578 * flash_full_status_check() to work correctly
1580 flash_write_cmd(info, sector, 0, FLASH_CMD_READ_STATUS);
1581 retcode = flash_full_status_check(info, sector, info->erase_blk_tout,
1582 prot ? "protect" : "unprotect");
1584 info->protect[sector] = prot;
1587 * On some of Intel's flash chips (marked via legacy_unlock)
1588 * unprotect unprotects all locking.
1590 if (prot == 0 && info->legacy_unlock) {
1593 for (i = 0; i < info->sector_count; i++) {
1594 if (info->protect[i])
1595 flash_real_protect(info, i, 1);
1602 /*-----------------------------------------------------------------------
1603 * flash_read_user_serial - read the OneTimeProgramming cells
1605 void flash_read_user_serial(flash_info_t *info, void *buffer, int offset,
1612 src = flash_map(info, 0, FLASH_OFFSET_USER_PROTECTION);
1613 flash_write_cmd(info, 0, 0, FLASH_CMD_READ_ID);
1614 memcpy(dst, src + offset, len);
1615 flash_write_cmd(info, 0, 0, info->cmd_reset);
1617 flash_unmap(info, 0, FLASH_OFFSET_USER_PROTECTION, src);
1621 * flash_read_factory_serial - read the device Id from the protection area
1623 void flash_read_factory_serial(flash_info_t *info, void *buffer, int offset,
1628 src = flash_map(info, 0, FLASH_OFFSET_INTEL_PROTECTION);
1629 flash_write_cmd(info, 0, 0, FLASH_CMD_READ_ID);
1630 memcpy(buffer, src + offset, len);
1631 flash_write_cmd(info, 0, 0, info->cmd_reset);
1633 flash_unmap(info, 0, FLASH_OFFSET_INTEL_PROTECTION, src);
1636 #endif /* CONFIG_SYS_FLASH_PROTECTION */
1638 /*-----------------------------------------------------------------------
1639 * Reverse the order of the erase regions in the CFI QRY structure.
1640 * This is needed for chips that are either a) correctly detected as
1641 * top-boot, or b) buggy.
1643 static void cfi_reverse_geometry(struct cfi_qry *qry)
1648 for (i = 0, j = qry->num_erase_regions - 1; i < j; i++, j--) {
1649 tmp = get_unaligned(&qry->erase_region_info[i]);
1650 put_unaligned(get_unaligned(&qry->erase_region_info[j]),
1651 &qry->erase_region_info[i]);
1652 put_unaligned(tmp, &qry->erase_region_info[j]);
1656 /*-----------------------------------------------------------------------
1657 * read jedec ids from device and set corresponding fields in info struct
1659 * Note: assume cfi->vendor, cfi->portwidth and cfi->chipwidth are correct
1662 static void cmdset_intel_read_jedec_ids(flash_info_t *info)
1664 flash_write_cmd(info, 0, 0, FLASH_CMD_RESET);
1666 flash_write_cmd(info, 0, 0, FLASH_CMD_READ_ID);
1667 udelay(1000); /* some flash are slow to respond */
1668 info->manufacturer_id = flash_read_uchar(info,
1669 FLASH_OFFSET_MANUFACTURER_ID);
1670 info->device_id = (info->chipwidth == FLASH_CFI_16BIT) ?
1671 flash_read_word(info, FLASH_OFFSET_DEVICE_ID) :
1672 flash_read_uchar(info, FLASH_OFFSET_DEVICE_ID);
1673 flash_write_cmd(info, 0, 0, FLASH_CMD_RESET);
1676 static int cmdset_intel_init(flash_info_t *info, struct cfi_qry *qry)
1678 info->cmd_reset = FLASH_CMD_RESET;
1680 cmdset_intel_read_jedec_ids(info);
1681 flash_write_cmd(info, 0, info->cfi_offset, FLASH_CMD_CFI);
1683 #ifdef CONFIG_SYS_FLASH_PROTECTION
1684 /* read legacy lock/unlock bit from intel flash */
1685 if (info->ext_addr) {
1686 info->legacy_unlock =
1687 flash_read_uchar(info, info->ext_addr + 5) & 0x08;
1694 static void cmdset_amd_read_jedec_ids(flash_info_t *info)
1700 flash_write_cmd(info, 0, 0, AMD_CMD_RESET);
1701 flash_unlock_seq(info, 0);
1702 flash_write_cmd(info, 0, info->addr_unlock1, FLASH_CMD_READ_ID);
1703 udelay(1000); /* some flash are slow to respond */
1705 manu_id = flash_read_uchar(info, FLASH_OFFSET_MANUFACTURER_ID);
1706 /* JEDEC JEP106Z specifies ID codes up to bank 7 */
1707 while (manu_id == FLASH_CONTINUATION_CODE && bank_id < 0x800) {
1709 manu_id = flash_read_uchar(info,
1710 bank_id | FLASH_OFFSET_MANUFACTURER_ID);
1712 info->manufacturer_id = manu_id;
1714 debug("info->ext_addr = 0x%x, cfi_version = 0x%x\n",
1715 info->ext_addr, info->cfi_version);
1716 if (info->ext_addr && info->cfi_version >= 0x3134) {
1717 /* read software feature (at 0x53) */
1718 feature = flash_read_uchar(info, info->ext_addr + 0x13);
1719 debug("feature = 0x%x\n", feature);
1720 info->sr_supported = feature & 0x1;
1723 switch (info->chipwidth) {
1724 case FLASH_CFI_8BIT:
1725 info->device_id = flash_read_uchar(info,
1726 FLASH_OFFSET_DEVICE_ID);
1727 if (info->device_id == 0x7E) {
1728 /* AMD 3-byte (expanded) device ids */
1729 info->device_id2 = flash_read_uchar(info,
1730 FLASH_OFFSET_DEVICE_ID2);
1731 info->device_id2 <<= 8;
1732 info->device_id2 |= flash_read_uchar(info,
1733 FLASH_OFFSET_DEVICE_ID3);
1736 case FLASH_CFI_16BIT:
1737 info->device_id = flash_read_word(info,
1738 FLASH_OFFSET_DEVICE_ID);
1739 if ((info->device_id & 0xff) == 0x7E) {
1740 /* AMD 3-byte (expanded) device ids */
1741 info->device_id2 = flash_read_uchar(info,
1742 FLASH_OFFSET_DEVICE_ID2);
1743 info->device_id2 <<= 8;
1744 info->device_id2 |= flash_read_uchar(info,
1745 FLASH_OFFSET_DEVICE_ID3);
1751 flash_write_cmd(info, 0, 0, AMD_CMD_RESET);
1755 static int cmdset_amd_init(flash_info_t *info, struct cfi_qry *qry)
1757 info->cmd_reset = AMD_CMD_RESET;
1758 info->cmd_erase_sector = AMD_CMD_ERASE_SECTOR;
1760 cmdset_amd_read_jedec_ids(info);
1761 flash_write_cmd(info, 0, info->cfi_offset, FLASH_CMD_CFI);
1763 #ifdef CONFIG_SYS_FLASH_PROTECTION
1764 if (info->ext_addr) {
1765 /* read sector protect/unprotect scheme (at 0x49) */
1766 if (flash_read_uchar(info, info->ext_addr + 9) == 0x8)
1767 info->legacy_unlock = 1;
1774 #ifdef CONFIG_FLASH_CFI_LEGACY
1775 static void flash_read_jedec_ids(flash_info_t *info)
1777 info->manufacturer_id = 0;
1778 info->device_id = 0;
1779 info->device_id2 = 0;
1781 switch (info->vendor) {
1782 case CFI_CMDSET_INTEL_PROG_REGIONS:
1783 case CFI_CMDSET_INTEL_STANDARD:
1784 case CFI_CMDSET_INTEL_EXTENDED:
1785 cmdset_intel_read_jedec_ids(info);
1787 case CFI_CMDSET_AMD_STANDARD:
1788 case CFI_CMDSET_AMD_EXTENDED:
1789 cmdset_amd_read_jedec_ids(info);
1796 /*-----------------------------------------------------------------------
1797 * Call board code to request info about non-CFI flash.
1798 * board_flash_get_legacy needs to fill in at least:
1799 * info->portwidth, info->chipwidth and info->interface for Jedec probing.
1801 static int flash_detect_legacy(phys_addr_t base, int banknum)
1803 flash_info_t *info = &flash_info[banknum];
1805 if (board_flash_get_legacy(base, banknum, info)) {
1806 /* board code may have filled info completely. If not, we
1807 * use JEDEC ID probing.
1809 if (!info->vendor) {
1811 CFI_CMDSET_AMD_STANDARD,
1812 CFI_CMDSET_INTEL_STANDARD
1816 for (i = 0; i < ARRAY_SIZE(modes); i++) {
1817 info->vendor = modes[i];
1819 (ulong)map_physmem(base,
1822 if (info->portwidth == FLASH_CFI_8BIT &&
1823 info->interface == FLASH_CFI_X8X16) {
1824 info->addr_unlock1 = 0x2AAA;
1825 info->addr_unlock2 = 0x5555;
1827 info->addr_unlock1 = 0x5555;
1828 info->addr_unlock2 = 0x2AAA;
1830 flash_read_jedec_ids(info);
1831 debug("JEDEC PROBE: ID %x %x %x\n",
1832 info->manufacturer_id,
1835 if (jedec_flash_match(info, info->start[0]))
1838 unmap_physmem((void *)info->start[0],
1843 switch (info->vendor) {
1844 case CFI_CMDSET_INTEL_PROG_REGIONS:
1845 case CFI_CMDSET_INTEL_STANDARD:
1846 case CFI_CMDSET_INTEL_EXTENDED:
1847 info->cmd_reset = FLASH_CMD_RESET;
1849 case CFI_CMDSET_AMD_STANDARD:
1850 case CFI_CMDSET_AMD_EXTENDED:
1851 case CFI_CMDSET_AMD_LEGACY:
1852 info->cmd_reset = AMD_CMD_RESET;
1855 info->flash_id = FLASH_MAN_CFI;
1858 return 0; /* use CFI */
1861 static inline int flash_detect_legacy(phys_addr_t base, int banknum)
1863 return 0; /* use CFI */
1867 /*-----------------------------------------------------------------------
1868 * detect if flash is compatible with the Common Flash Interface (CFI)
1869 * http://www.jedec.org/download/search/jesd68.pdf
1871 static void flash_read_cfi(flash_info_t *info, void *buf, unsigned int start,
1877 for (i = 0; i < len; i++)
1878 p[i] = flash_read_uchar(info, start + i);
1881 static void __flash_cmd_reset(flash_info_t *info)
1884 * We do not yet know what kind of commandset to use, so we issue
1885 * the reset command in both Intel and AMD variants, in the hope
1886 * that AMD flash roms ignore the Intel command.
1888 flash_write_cmd(info, 0, 0, AMD_CMD_RESET);
1890 flash_write_cmd(info, 0, 0, FLASH_CMD_RESET);
1893 void flash_cmd_reset(flash_info_t *info)
1894 __attribute__((weak, alias("__flash_cmd_reset")));
1896 static int __flash_detect_cfi(flash_info_t *info, struct cfi_qry *qry)
1900 /* Issue FLASH reset command */
1901 flash_cmd_reset(info);
1903 for (cfi_offset = 0; cfi_offset < ARRAY_SIZE(flash_offset_cfi);
1905 flash_write_cmd(info, 0, flash_offset_cfi[cfi_offset],
1907 if (flash_isequal(info, 0, FLASH_OFFSET_CFI_RESP, 'Q') &&
1908 flash_isequal(info, 0, FLASH_OFFSET_CFI_RESP + 1, 'R') &&
1909 flash_isequal(info, 0, FLASH_OFFSET_CFI_RESP + 2, 'Y')) {
1910 flash_read_cfi(info, qry, FLASH_OFFSET_CFI_RESP,
1911 sizeof(struct cfi_qry));
1912 info->interface = le16_to_cpu(qry->interface_desc);
1914 info->cfi_offset = flash_offset_cfi[cfi_offset];
1915 debug("device interface is %d\n",
1917 debug("found port %d chip %d ",
1918 info->portwidth, info->chipwidth);
1919 debug("port %d bits chip %d bits\n",
1920 info->portwidth << CFI_FLASH_SHIFT_WIDTH,
1921 info->chipwidth << CFI_FLASH_SHIFT_WIDTH);
1923 /* calculate command offsets as in the Linux driver */
1924 info->addr_unlock1 = 0x555;
1925 info->addr_unlock2 = 0x2aa;
1928 * modify the unlock address if we are
1929 * in compatibility mode
1931 if (/* x8/x16 in x8 mode */
1932 (info->chipwidth == FLASH_CFI_BY8 &&
1933 info->interface == FLASH_CFI_X8X16) ||
1934 /* x16/x32 in x16 mode */
1935 (info->chipwidth == FLASH_CFI_BY16 &&
1936 info->interface == FLASH_CFI_X16X32)) {
1937 info->addr_unlock1 = 0xaaa;
1938 info->addr_unlock2 = 0x555;
1941 info->name = "CFI conformant";
1949 static int flash_detect_cfi(flash_info_t *info, struct cfi_qry *qry)
1951 debug("flash detect cfi\n");
1953 for (info->portwidth = CONFIG_SYS_FLASH_CFI_WIDTH;
1954 info->portwidth <= FLASH_CFI_64BIT; info->portwidth <<= 1) {
1955 for (info->chipwidth = FLASH_CFI_BY8;
1956 info->chipwidth <= info->portwidth;
1957 info->chipwidth <<= 1)
1958 if (__flash_detect_cfi(info, qry))
1961 debug("not found\n");
1966 * Manufacturer-specific quirks. Add workarounds for geometry
1967 * reversal, etc. here.
1969 static void flash_fixup_amd(flash_info_t *info, struct cfi_qry *qry)
1971 /* check if flash geometry needs reversal */
1972 if (qry->num_erase_regions > 1) {
1973 /* reverse geometry if top boot part */
1974 if (info->cfi_version < 0x3131) {
1975 /* CFI < 1.1, try to guess from device id */
1976 if ((info->device_id & 0x80) != 0)
1977 cfi_reverse_geometry(qry);
1978 } else if (flash_read_uchar(info, info->ext_addr + 0xf) == 3) {
1979 /* CFI >= 1.1, deduct from top/bottom flag */
1980 /* note: ext_addr is valid since cfi_version > 0 */
1981 cfi_reverse_geometry(qry);
1986 static void flash_fixup_atmel(flash_info_t *info, struct cfi_qry *qry)
1988 int reverse_geometry = 0;
1990 /* Check the "top boot" bit in the PRI */
1991 if (info->ext_addr && !(flash_read_uchar(info, info->ext_addr + 6) & 1))
1992 reverse_geometry = 1;
1994 /* AT49BV6416(T) list the erase regions in the wrong order.
1995 * However, the device ID is identical with the non-broken
1996 * AT49BV642D they differ in the high byte.
1998 if (info->device_id == 0xd6 || info->device_id == 0xd2)
1999 reverse_geometry = !reverse_geometry;
2001 if (reverse_geometry)
2002 cfi_reverse_geometry(qry);
2005 static void flash_fixup_stm(flash_info_t *info, struct cfi_qry *qry)
2007 /* check if flash geometry needs reversal */
2008 if (qry->num_erase_regions > 1) {
2009 /* reverse geometry if top boot part */
2010 if (info->cfi_version < 0x3131) {
2011 /* CFI < 1.1, guess by device id */
2012 if (info->device_id == 0x22CA || /* M29W320DT */
2013 info->device_id == 0x2256 || /* M29W320ET */
2014 info->device_id == 0x22D7) { /* M29W800DT */
2015 cfi_reverse_geometry(qry);
2017 } else if (flash_read_uchar(info, info->ext_addr + 0xf) == 3) {
2018 /* CFI >= 1.1, deduct from top/bottom flag */
2019 /* note: ext_addr is valid since cfi_version > 0 */
2020 cfi_reverse_geometry(qry);
2025 static void flash_fixup_sst(flash_info_t *info, struct cfi_qry *qry)
2028 * SST, for many recent nor parallel flashes, says they are
2029 * CFI-conformant. This is not true, since qry struct.
2030 * reports a std. AMD command set (0x0002), while SST allows to
2031 * erase two different sector sizes for the same memory.
2032 * 64KB sector (SST call it block) needs 0x30 to be erased.
2033 * 4KB sector (SST call it sector) needs 0x50 to be erased.
2034 * Since CFI query detect the 4KB number of sectors, users expects
2035 * a sector granularity of 4KB, and it is here set.
2037 if (info->device_id == 0x5D23 || /* SST39VF3201B */
2038 info->device_id == 0x5C23) { /* SST39VF3202B */
2039 /* set sector granularity to 4KB */
2040 info->cmd_erase_sector = 0x50;
2044 static void flash_fixup_num(flash_info_t *info, struct cfi_qry *qry)
2047 * The M29EW devices seem to report the CFI information wrong
2048 * when it's in 8 bit mode.
2049 * There's an app note from Numonyx on this issue.
2050 * So adjust the buffer size for M29EW while operating in 8-bit mode
2052 if (qry->max_buf_write_size > 0x8 &&
2053 info->device_id == 0x7E &&
2054 (info->device_id2 == 0x2201 ||
2055 info->device_id2 == 0x2301 ||
2056 info->device_id2 == 0x2801 ||
2057 info->device_id2 == 0x4801)) {
2058 debug("Adjusted buffer size on Numonyx flash");
2059 debug(" M29EW family in 8 bit mode\n");
2060 qry->max_buf_write_size = 0x8;
2065 * The following code cannot be run from FLASH!
2068 ulong flash_get_size(phys_addr_t base, int banknum)
2070 flash_info_t *info = &flash_info[banknum];
2072 flash_sect_t sect_cnt;
2076 uchar num_erase_regions;
2077 int erase_region_size;
2078 int erase_region_count;
2080 unsigned long max_size;
2082 memset(&qry, 0, sizeof(qry));
2085 info->cfi_version = 0;
2086 #ifdef CONFIG_SYS_FLASH_PROTECTION
2087 info->legacy_unlock = 0;
2090 info->start[0] = (ulong)map_physmem(base, info->portwidth, MAP_NOCACHE);
2092 if (flash_detect_cfi(info, &qry)) {
2093 info->vendor = le16_to_cpu(get_unaligned(&qry.p_id));
2094 info->ext_addr = le16_to_cpu(get_unaligned(&qry.p_adr));
2095 num_erase_regions = qry.num_erase_regions;
2097 if (info->ext_addr) {
2098 info->cfi_version = (ushort)flash_read_uchar(info,
2099 info->ext_addr + 3) << 8;
2100 info->cfi_version |= (ushort)flash_read_uchar(info,
2101 info->ext_addr + 4);
2105 flash_printqry(&qry);
2108 switch (info->vendor) {
2109 case CFI_CMDSET_INTEL_PROG_REGIONS:
2110 case CFI_CMDSET_INTEL_STANDARD:
2111 case CFI_CMDSET_INTEL_EXTENDED:
2112 cmdset_intel_init(info, &qry);
2114 case CFI_CMDSET_AMD_STANDARD:
2115 case CFI_CMDSET_AMD_EXTENDED:
2116 cmdset_amd_init(info, &qry);
2119 printf("CFI: Unknown command set 0x%x\n",
2122 * Unfortunately, this means we don't know how
2123 * to get the chip back to Read mode. Might
2124 * as well try an Intel-style reset...
2126 flash_write_cmd(info, 0, 0, FLASH_CMD_RESET);
2130 /* Do manufacturer-specific fixups */
2131 switch (info->manufacturer_id) {
2132 case 0x0001: /* AMD */
2133 case 0x0037: /* AMIC */
2134 flash_fixup_amd(info, &qry);
2137 flash_fixup_atmel(info, &qry);
2140 flash_fixup_stm(info, &qry);
2142 case 0x00bf: /* SST */
2143 flash_fixup_sst(info, &qry);
2145 case 0x0089: /* Numonyx */
2146 flash_fixup_num(info, &qry);
2150 debug("manufacturer is %d\n", info->vendor);
2151 debug("manufacturer id is 0x%x\n", info->manufacturer_id);
2152 debug("device id is 0x%x\n", info->device_id);
2153 debug("device id2 is 0x%x\n", info->device_id2);
2154 debug("cfi version is 0x%04x\n", info->cfi_version);
2156 size_ratio = info->portwidth / info->chipwidth;
2157 /* if the chip is x8/x16 reduce the ratio by half */
2158 if (info->interface == FLASH_CFI_X8X16 &&
2159 info->chipwidth == FLASH_CFI_BY8) {
2162 debug("size_ratio %d port %d bits chip %d bits\n",
2163 size_ratio, info->portwidth << CFI_FLASH_SHIFT_WIDTH,
2164 info->chipwidth << CFI_FLASH_SHIFT_WIDTH);
2165 info->size = 1 << qry.dev_size;
2166 /* multiply the size by the number of chips */
2167 info->size *= size_ratio;
2168 max_size = cfi_flash_bank_size(banknum);
2169 if (max_size && info->size > max_size) {
2170 debug("[truncated from %ldMiB]", info->size >> 20);
2171 info->size = max_size;
2173 debug("found %d erase regions\n", num_erase_regions);
2176 for (i = 0; i < num_erase_regions; i++) {
2177 if (i > NUM_ERASE_REGIONS) {
2178 printf("%d erase regions found, only %d used\n",
2179 num_erase_regions, NUM_ERASE_REGIONS);
2183 tmp = le32_to_cpu(get_unaligned(
2184 &qry.erase_region_info[i]));
2185 debug("erase region %u: 0x%08lx\n", i, tmp);
2187 erase_region_count = (tmp & 0xffff) + 1;
2190 (tmp & 0xffff) ? ((tmp & 0xffff) * 256) : 128;
2191 debug("erase_region_count = %d ", erase_region_count);
2192 debug("erase_region_size = %d\n", erase_region_size);
2193 for (j = 0; j < erase_region_count; j++) {
2194 if (sector - base >= info->size)
2196 if (sect_cnt >= CONFIG_SYS_MAX_FLASH_SECT) {
2197 printf("ERROR: too many flash sectors\n");
2200 info->start[sect_cnt] =
2201 (ulong)map_physmem(sector,
2204 sector += (erase_region_size * size_ratio);
2207 * Only read protection status from
2208 * supported devices (intel...)
2210 switch (info->vendor) {
2211 case CFI_CMDSET_INTEL_PROG_REGIONS:
2212 case CFI_CMDSET_INTEL_EXTENDED:
2213 case CFI_CMDSET_INTEL_STANDARD:
2215 * Set flash to read-id mode. Otherwise
2216 * reading protected status is not
2219 flash_write_cmd(info, sect_cnt, 0,
2221 info->protect[sect_cnt] =
2222 flash_isset(info, sect_cnt,
2223 FLASH_OFFSET_PROTECT,
2224 FLASH_STATUS_PROTECT);
2225 flash_write_cmd(info, sect_cnt, 0,
2228 case CFI_CMDSET_AMD_EXTENDED:
2229 case CFI_CMDSET_AMD_STANDARD:
2230 if (!info->legacy_unlock) {
2231 /* default: not protected */
2232 info->protect[sect_cnt] = 0;
2236 /* Read protection (PPB) from sector */
2237 flash_write_cmd(info, 0, 0,
2239 flash_unlock_seq(info, 0);
2240 flash_write_cmd(info, 0,
2243 info->protect[sect_cnt] =
2246 FLASH_OFFSET_PROTECT,
2247 FLASH_STATUS_PROTECT);
2250 /* default: not protected */
2251 info->protect[sect_cnt] = 0;
2258 info->sector_count = sect_cnt;
2259 info->buffer_size = 1 << le16_to_cpu(qry.max_buf_write_size);
2260 tmp = 1 << qry.block_erase_timeout_typ;
2261 info->erase_blk_tout = tmp *
2262 (1 << qry.block_erase_timeout_max);
2263 tmp = (1 << qry.buf_write_timeout_typ) *
2264 (1 << qry.buf_write_timeout_max);
2266 /* round up when converting to ms */
2267 info->buffer_write_tout = (tmp + 999) / 1000;
2268 tmp = (1 << qry.word_write_timeout_typ) *
2269 (1 << qry.word_write_timeout_max);
2270 /* round up when converting to ms */
2271 info->write_tout = (tmp + 999) / 1000;
2272 info->flash_id = FLASH_MAN_CFI;
2273 if (info->interface == FLASH_CFI_X8X16 &&
2274 info->chipwidth == FLASH_CFI_BY8) {
2275 /* XXX - Need to test on x8/x16 in parallel. */
2276 info->portwidth >>= 1;
2279 flash_write_cmd(info, 0, 0, info->cmd_reset);
2282 return (info->size);
2285 #ifdef CONFIG_FLASH_CFI_MTD
2286 void flash_set_verbose(uint v)
2292 static void cfi_flash_set_config_reg(u32 base, u16 val)
2294 #ifdef CONFIG_SYS_CFI_FLASH_CONFIG_REGS
2296 * Only set this config register if really defined
2297 * to a valid value (0xffff is invalid)
2303 * Set configuration register. Data is "encrypted" in the 16 lower
2306 flash_write16(FLASH_CMD_SETUP, (void *)(base + (val << 1)));
2307 flash_write16(FLASH_CMD_SET_CR_CONFIRM, (void *)(base + (val << 1)));
2310 * Finally issue reset-command to bring device back to
2313 flash_write16(FLASH_CMD_RESET, (void *)base);
2317 /*-----------------------------------------------------------------------
2320 static void flash_protect_default(void)
2322 #if defined(CONFIG_SYS_FLASH_AUTOPROTECT_LIST)
2327 } apl[] = CONFIG_SYS_FLASH_AUTOPROTECT_LIST;
2330 /* Monitor protection ON by default */
2331 #if (CONFIG_SYS_MONITOR_BASE >= CONFIG_SYS_FLASH_BASE) && \
2332 (!defined(CONFIG_MONITOR_IS_IN_RAM))
2333 flash_protect(FLAG_PROTECT_SET,
2334 CONFIG_SYS_MONITOR_BASE,
2335 CONFIG_SYS_MONITOR_BASE + monitor_flash_len - 1,
2336 flash_get_info(CONFIG_SYS_MONITOR_BASE));
2339 /* Environment protection ON by default */
2340 #ifdef CONFIG_ENV_IS_IN_FLASH
2341 flash_protect(FLAG_PROTECT_SET,
2343 CONFIG_ENV_ADDR + CONFIG_ENV_SECT_SIZE - 1,
2344 flash_get_info(CONFIG_ENV_ADDR));
2347 /* Redundant environment protection ON by default */
2348 #ifdef CONFIG_ENV_ADDR_REDUND
2349 flash_protect(FLAG_PROTECT_SET,
2350 CONFIG_ENV_ADDR_REDUND,
2351 CONFIG_ENV_ADDR_REDUND + CONFIG_ENV_SECT_SIZE - 1,
2352 flash_get_info(CONFIG_ENV_ADDR_REDUND));
2355 #if defined(CONFIG_SYS_FLASH_AUTOPROTECT_LIST)
2356 for (i = 0; i < ARRAY_SIZE(apl); i++) {
2357 debug("autoprotecting from %08lx to %08lx\n",
2358 apl[i].start, apl[i].start + apl[i].size - 1);
2359 flash_protect(FLAG_PROTECT_SET,
2361 apl[i].start + apl[i].size - 1,
2362 flash_get_info(apl[i].start));
2367 unsigned long flash_init(void)
2369 unsigned long size = 0;
2372 #ifdef CONFIG_SYS_FLASH_PROTECTION
2373 /* read environment from EEPROM */
2376 env_get_f("unlock", s, sizeof(s));
2379 #ifdef CONFIG_CFI_FLASH /* for driver model */
2380 cfi_flash_init_dm();
2383 /* Init: no FLASHes known */
2384 for (i = 0; i < CONFIG_SYS_MAX_FLASH_BANKS; ++i) {
2385 flash_info[i].flash_id = FLASH_UNKNOWN;
2387 /* Optionally write flash configuration register */
2388 cfi_flash_set_config_reg(cfi_flash_bank_addr(i),
2389 cfi_flash_config_reg(i));
2391 if (!flash_detect_legacy(cfi_flash_bank_addr(i), i))
2392 flash_get_size(cfi_flash_bank_addr(i), i);
2393 size += flash_info[i].size;
2394 if (flash_info[i].flash_id == FLASH_UNKNOWN) {
2395 #ifndef CONFIG_SYS_FLASH_QUIET_TEST
2396 printf("## Unknown flash on Bank %d ", i + 1);
2397 printf("- Size = 0x%08lx = %ld MB\n",
2399 flash_info[i].size >> 20);
2400 #endif /* CONFIG_SYS_FLASH_QUIET_TEST */
2402 #ifdef CONFIG_SYS_FLASH_PROTECTION
2403 else if (strcmp(s, "yes") == 0) {
2405 * Only the U-Boot image and it's environment
2406 * is protected, all other sectors are
2407 * unprotected (unlocked) if flash hardware
2408 * protection is used (CONFIG_SYS_FLASH_PROTECTION)
2409 * and the environment variable "unlock" is
2412 if (flash_info[i].legacy_unlock) {
2416 * Disable legacy_unlock temporarily,
2417 * since flash_real_protect would
2418 * relock all other sectors again
2421 flash_info[i].legacy_unlock = 0;
2424 * Legacy unlocking (e.g. Intel J3) ->
2425 * unlock only one sector. This will
2426 * unlock all sectors.
2428 flash_real_protect(&flash_info[i], 0, 0);
2430 flash_info[i].legacy_unlock = 1;
2433 * Manually mark other sectors as
2434 * unlocked (unprotected)
2436 for (k = 1; k < flash_info[i].sector_count; k++)
2437 flash_info[i].protect[k] = 0;
2440 * No legancy unlocking -> unlock all sectors
2442 flash_protect(FLAG_PROTECT_CLEAR,
2443 flash_info[i].start[0],
2444 flash_info[i].start[0]
2445 + flash_info[i].size - 1,
2449 #endif /* CONFIG_SYS_FLASH_PROTECTION */
2452 flash_protect_default();
2453 #ifdef CONFIG_FLASH_CFI_MTD
2460 #ifdef CONFIG_CFI_FLASH /* for driver model */
2461 static int cfi_flash_probe(struct udevice *dev)
2463 const fdt32_t *cell;
2467 addrc = dev_read_addr_cells(dev);
2468 sizec = dev_read_size_cells(dev);
2470 /* decode regs; there may be multiple reg tuples. */
2471 cell = dev_read_prop(dev, "reg", &len);
2475 len /= sizeof(fdt32_t);
2479 addr = dev_translate_address(dev, cell + idx);
2481 flash_info[cfi_flash_num_flash_banks].dev = dev;
2482 flash_info[cfi_flash_num_flash_banks].base = addr;
2483 cfi_flash_num_flash_banks++;
2485 idx += addrc + sizec;
2487 gd->bd->bi_flashstart = flash_info[0].base;
2492 static const struct udevice_id cfi_flash_ids[] = {
2493 { .compatible = "cfi-flash" },
2494 { .compatible = "jedec-flash" },
2498 U_BOOT_DRIVER(cfi_flash) = {
2499 .name = "cfi_flash",
2501 .of_match = cfi_flash_ids,
2502 .probe = cfi_flash_probe,
2504 #endif /* CONFIG_CFI_FLASH */