--- /dev/null
+/***************************************************************************\r
+ *   Copyright (C) 2008 by John McCarthy                                   *\r
+ *   jgmcc@magma.ca                                                        *\r
+ *                                                                         *\r
+ *   Copyright (C) 2008 by Spencer Oliver                                  *\r
+ *   spen@spen-soft.co.uk                                                  *\r
+ *                                                                         *\r
+ *   Copyright (C) 2008 by David T.L. Wong                                 *\r
+ *                                                                         *\r
+ *   This program is free software; you can redistribute it and/or modify  *\r
+ *   it under the terms of the GNU General Public License as published by  *\r
+ *   the Free Software Foundation; either version 2 of the License, or     *\r
+ *   (at your option) any later version.                                   *\r
+ *                                                                         *\r
+ *   This program is distributed in the hope that it will be useful,       *\r
+ *   but WITHOUT ANY WARRANTY; without even the implied warranty of        *\r
+ *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the         *\r
+ *   GNU General Public License for more details.                          *\r
+ *                                                                         *\r
+ *   You should have received a copy of the GNU General Public License     *\r
+ *   along with this program; if not, write to the                         *\r
+ *   Free Software Foundation, Inc.,                                       *\r
+ *   59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.             *\r
+ ***************************************************************************/\r
+#ifdef HAVE_CONFIG_H\r
+#include "config.h"\r
+#endif\r
+\r
+#include <string.h>\r
+#include "log.h"\r
+#include "mips32.h"\r
+#include "mips32_dmaacc.h"\r
+\r
+/*\r
+ * The following logic shamelessly cloned from HairyDairyMaid's wrt54g_debrick\r
+ * to support the Broadcom BCM5352 SoC in the Linksys WRT54GL wireless router\r
+ * (and any others that support EJTAG DMA transfers).\r
+ * Note: This only supports memory read/write. Since the BCM5352 doesn't\r
+ * appear to support PRACC accesses, all debug functions except halt\r
+ * do not work.  Still, this does allow erasing/writing flash as well as\r
+ * displaying/modifying memory and memory mapped registers.\r
+ */\r
+\r
+static int ejtag_dma_read(mips_ejtag_t *ejtag_info, u32 addr, u32 *data)\r
+{\r
+       u32 v;\r
+       u32 ctrl_reg;\r
+       int   retries = RETRY_ATTEMPTS;\r
+\r
+begin_ejtag_dma_read:\r
+\r
+       // Setup Address\r
+       v = addr;\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_ADDRESS, NULL);\r
+       mips_ejtag_drscan_32(ejtag_info, &v);\r
+\r
+       // Initiate DMA Read & set DSTRT\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_CONTROL, NULL);\r
+       ctrl_reg = EJTAG_CTRL_DMAACC | EJTAG_CTRL_DRWN | EJTAG_CTRL_DMA_WORD | EJTAG_CTRL_DSTRT | EJTAG_CTRL_PROBEN | EJTAG_CTRL_PRACC;\r
+       mips_ejtag_drscan_32(ejtag_info, &ctrl_reg);\r
+\r
+       // Wait for DSTRT to Clear\r
+       do {\r
+               ctrl_reg = EJTAG_CTRL_DMAACC | EJTAG_CTRL_PROBEN | EJTAG_CTRL_PRACC;\r
+               mips_ejtag_drscan_32(ejtag_info, &ctrl_reg);\r
+       } while(ctrl_reg & EJTAG_CTRL_DSTRT);\r
+\r
+       // Read Data\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_DATA, NULL);\r
+       mips_ejtag_drscan_32(ejtag_info, data);\r
+\r
+       // Clear DMA & Check DERR\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_CONTROL, NULL);\r
+       ctrl_reg = EJTAG_CTRL_PROBEN | EJTAG_CTRL_PRACC;\r
+       mips_ejtag_drscan_32(ejtag_info, &ctrl_reg);\r
+       if (ctrl_reg  & EJTAG_CTRL_DERR)\r
+       {\r
+               if (retries--) {\r
+                       printf("DMA Read Addr = %08x  Data = ERROR ON READ (retrying)\n", addr);\r
+                       goto begin_ejtag_dma_read;\r
+               } else  printf("DMA Read Addr = %08x  Data = ERROR ON READ\n", addr);\r
+               return ERROR_JTAG_DEVICE_ERROR;\r
+       }\r
+\r
+       return ERROR_OK;\r
+}\r
+\r
+static int ejtag_dma_read_h(mips_ejtag_t *ejtag_info, u32 addr, u16 *data)\r
+{\r
+       u32 v;\r
+       u32 ctrl_reg;\r
+       int   retries = RETRY_ATTEMPTS;\r
+\r
+begin_ejtag_dma_read_h:\r
+\r
+       // Setup Address\r
+       v = addr;\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_ADDRESS, NULL);\r
+       mips_ejtag_drscan_32(ejtag_info, &v);\r
+\r
+       // Initiate DMA Read & set DSTRT\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_CONTROL, NULL);\r
+       ctrl_reg = EJTAG_CTRL_DMAACC | EJTAG_CTRL_DRWN | EJTAG_CTRL_DMA_HALFWORD | EJTAG_CTRL_DSTRT | EJTAG_CTRL_PROBEN | EJTAG_CTRL_PRACC;\r
+       mips_ejtag_drscan_32(ejtag_info, &ctrl_reg);\r
+\r
+       // Wait for DSTRT to Clear\r
+       do {\r
+               ctrl_reg = EJTAG_CTRL_DMAACC | EJTAG_CTRL_PROBEN | EJTAG_CTRL_PRACC;\r
+               mips_ejtag_drscan_32(ejtag_info, &ctrl_reg);\r
+       } while(ctrl_reg & EJTAG_CTRL_DSTRT);\r
+\r
+       // Read Data\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_DATA, NULL);\r
+       mips_ejtag_drscan_32(ejtag_info, &v);\r
+\r
+       // Clear DMA & Check DERR\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_CONTROL, NULL);\r
+       ctrl_reg = EJTAG_CTRL_PROBEN | EJTAG_CTRL_PRACC;\r
+       mips_ejtag_drscan_32(ejtag_info, &ctrl_reg);\r
+       if (ctrl_reg  & EJTAG_CTRL_DERR)\r
+       {\r
+               if (retries--) {\r
+                       printf("DMA Read Addr = %08x  Data = ERROR ON READ (retrying)\n", addr);\r
+                       goto begin_ejtag_dma_read_h;\r
+               } else  printf("DMA Read Addr = %08x  Data = ERROR ON READ\n", addr);\r
+               return ERROR_JTAG_DEVICE_ERROR;\r
+       }\r
+\r
+       // Handle the bigendian/littleendian\r
+       if ( addr & 0x2 )  *data = (v>>16)&0xffff ;\r
+       else               *data = (v&0x0000ffff) ;\r
+\r
+       return ERROR_OK;\r
+}\r
+\r
+static int ejtag_dma_read_b(mips_ejtag_t *ejtag_info, u32 addr, u8 *data)\r
+{\r
+       u32 v;\r
+       u32 ctrl_reg;\r
+       int   retries = RETRY_ATTEMPTS;\r
+\r
+begin_ejtag_dma_read_b:\r
+\r
+       // Setup Address\r
+       v = addr;\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_ADDRESS, NULL);\r
+       mips_ejtag_drscan_32(ejtag_info, &v);\r
+\r
+       // Initiate DMA Read & set DSTRT\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_CONTROL, NULL);\r
+       ctrl_reg = EJTAG_CTRL_DMAACC | EJTAG_CTRL_DRWN | EJTAG_CTRL_DMA_BYTE | EJTAG_CTRL_DSTRT | EJTAG_CTRL_PROBEN | EJTAG_CTRL_PRACC;\r
+       mips_ejtag_drscan_32(ejtag_info, &ctrl_reg);\r
+\r
+       // Wait for DSTRT to Clear\r
+       do {\r
+               ctrl_reg = EJTAG_CTRL_DMAACC | EJTAG_CTRL_PROBEN | EJTAG_CTRL_PRACC;\r
+               mips_ejtag_drscan_32(ejtag_info, &ctrl_reg);\r
+       } while(ctrl_reg & EJTAG_CTRL_DSTRT);\r
+\r
+       // Read Data\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_DATA, NULL);\r
+       mips_ejtag_drscan_32(ejtag_info, &v);\r
+\r
+       // Clear DMA & Check DERR\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_CONTROL, NULL);\r
+       ctrl_reg = EJTAG_CTRL_PROBEN | EJTAG_CTRL_PRACC;\r
+       mips_ejtag_drscan_32(ejtag_info, &ctrl_reg);\r
+       if (ctrl_reg  & EJTAG_CTRL_DERR)\r
+       {\r
+               if (retries--) {\r
+                       printf("DMA Read Addr = %08x  Data = ERROR ON READ (retrying)\n", addr);\r
+                       goto begin_ejtag_dma_read_b;\r
+               } else  printf("DMA Read Addr = %08x  Data = ERROR ON READ\n", addr);\r
+               return ERROR_JTAG_DEVICE_ERROR;\r
+       }\r
+\r
+       // Handle the bigendian/littleendian\r
+       switch(addr & 0x3) {\r
+       case 0:  *data =  v      & 0xff; break;\r
+       case 1:  *data = (v>>8)  & 0xff; break;\r
+       case 2:  *data = (v>>16) & 0xff; break;\r
+       case 3:  *data = (v>>24) & 0xff; break;\r
+       }\r
+\r
+       return ERROR_OK;\r
+}\r
+\r
+static int ejtag_dma_write(mips_ejtag_t *ejtag_info, u32 addr, u32 data)\r
+{\r
+       u32 v;\r
+       u32 ctrl_reg;\r
+       int   retries = RETRY_ATTEMPTS;\r
+\r
+begin_ejtag_dma_write:\r
+\r
+       // Setup Address\r
+       v = addr;\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_ADDRESS, NULL);\r
+       mips_ejtag_drscan_32(ejtag_info, &v);\r
+\r
+       // Setup Data\r
+       v = data;\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_DATA, NULL);\r
+       mips_ejtag_drscan_32(ejtag_info, &v);\r
+\r
+       // Initiate DMA Write & set DSTRT\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_CONTROL, NULL);\r
+       ctrl_reg = EJTAG_CTRL_DMAACC | EJTAG_CTRL_DMA_WORD | EJTAG_CTRL_DSTRT | EJTAG_CTRL_PROBEN | EJTAG_CTRL_PRACC;\r
+       mips_ejtag_drscan_32(ejtag_info, &ctrl_reg);\r
+\r
+       // Wait for DSTRT to Clear\r
+       do {\r
+               ctrl_reg = EJTAG_CTRL_DMAACC | EJTAG_CTRL_PROBEN | EJTAG_CTRL_PRACC;\r
+               mips_ejtag_drscan_32(ejtag_info, &ctrl_reg);\r
+       } while(ctrl_reg & EJTAG_CTRL_DSTRT);\r
+\r
+       // Clear DMA & Check DERR\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_CONTROL, NULL);\r
+       ctrl_reg = EJTAG_CTRL_PROBEN | EJTAG_CTRL_PRACC;\r
+       mips_ejtag_drscan_32(ejtag_info, &ctrl_reg);\r
+       if (ctrl_reg  & EJTAG_CTRL_DERR)\r
+       {\r
+               if (retries--) {\r
+                       printf("DMA Write Addr = %08x  Data = ERROR ON WRITE (retrying)\n", addr);\r
+                       goto begin_ejtag_dma_write;\r
+               } else  printf("DMA Write Addr = %08x  Data = ERROR ON WRITE\n", addr);\r
+               return ERROR_JTAG_DEVICE_ERROR;\r
+       }\r
+\r
+       return ERROR_OK;\r
+}\r
+\r
+static int ejtag_dma_write_h(mips_ejtag_t *ejtag_info, u32 addr, u32 data)\r
+{\r
+       u32 v;\r
+       u32 ctrl_reg;\r
+       int   retries = RETRY_ATTEMPTS;\r
+\r
+\r
+       // Handle the bigendian/littleendian\r
+       data &= 0xffff;\r
+       data |= data<<16;\r
+\r
+begin_ejtag_dma_write_h:\r
+\r
+       // Setup Address\r
+       v = addr;\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_ADDRESS, NULL);\r
+       mips_ejtag_drscan_32(ejtag_info, &v);\r
+\r
+       // Setup Data\r
+       v = data;\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_DATA, NULL);\r
+       mips_ejtag_drscan_32(ejtag_info, &v);\r
+\r
+       // Initiate DMA Write & set DSTRT\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_CONTROL, NULL);\r
+       ctrl_reg = EJTAG_CTRL_DMAACC | EJTAG_CTRL_DMA_HALFWORD | EJTAG_CTRL_DSTRT | EJTAG_CTRL_PROBEN | EJTAG_CTRL_PRACC;\r
+       mips_ejtag_drscan_32(ejtag_info, &ctrl_reg);\r
+\r
+       // Wait for DSTRT to Clear\r
+       do {\r
+               ctrl_reg = EJTAG_CTRL_DMAACC | EJTAG_CTRL_PROBEN | EJTAG_CTRL_PRACC;\r
+               mips_ejtag_drscan_32(ejtag_info, &ctrl_reg);\r
+       } while(ctrl_reg & EJTAG_CTRL_DSTRT);\r
+\r
+       // Clear DMA & Check DERR\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_CONTROL, NULL);\r
+       ctrl_reg = EJTAG_CTRL_PROBEN | EJTAG_CTRL_PRACC;\r
+       mips_ejtag_drscan_32(ejtag_info, &ctrl_reg);\r
+       if (ctrl_reg  & EJTAG_CTRL_DERR)\r
+       {\r
+               if (retries--) {\r
+                       printf("DMA Write Addr = %08x  Data = ERROR ON WRITE (retrying)\n", addr);\r
+                       goto begin_ejtag_dma_write_h;\r
+               } else  printf("DMA Write Addr = %08x  Data = ERROR ON WRITE\n", addr);\r
+               return ERROR_JTAG_DEVICE_ERROR;\r
+       }\r
+\r
+       return ERROR_OK;\r
+}\r
+\r
+static int ejtag_dma_write_b(mips_ejtag_t *ejtag_info, u32 addr, u32 data)\r
+{\r
+       u32 v;\r
+       u32 ctrl_reg;\r
+       int   retries = RETRY_ATTEMPTS;\r
+\r
+\r
+       // Handle the bigendian/littleendian\r
+       data &= 0xff;\r
+       data |= data<<8;\r
+       data |= data<<16;\r
+\r
+begin_ejtag_dma_write_b:\r
+\r
+       // Setup Address\r
+       v = addr;\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_ADDRESS, NULL);\r
+       mips_ejtag_drscan_32(ejtag_info, &v);\r
+\r
+       // Setup Data\r
+       v = data;\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_DATA, NULL);\r
+       mips_ejtag_drscan_32(ejtag_info, &v);\r
+\r
+       // Initiate DMA Write & set DSTRT\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_CONTROL, NULL);\r
+       ctrl_reg = EJTAG_CTRL_DMAACC | EJTAG_CTRL_DMA_BYTE | EJTAG_CTRL_DSTRT | EJTAG_CTRL_PROBEN | EJTAG_CTRL_PRACC;\r
+       mips_ejtag_drscan_32(ejtag_info, &ctrl_reg);\r
+\r
+       // Wait for DSTRT to Clear\r
+       do {\r
+               ctrl_reg = EJTAG_CTRL_DMAACC | EJTAG_CTRL_PROBEN | EJTAG_CTRL_PRACC;\r
+               mips_ejtag_drscan_32(ejtag_info, &ctrl_reg);\r
+       } while(ctrl_reg & EJTAG_CTRL_DSTRT);\r
+\r
+       // Clear DMA & Check DERR\r
+       mips_ejtag_set_instr(ejtag_info, EJTAG_INST_CONTROL, NULL);\r
+       ctrl_reg = EJTAG_CTRL_PROBEN | EJTAG_CTRL_PRACC;\r
+       mips_ejtag_drscan_32(ejtag_info, &ctrl_reg);\r
+       if (ctrl_reg  & EJTAG_CTRL_DERR)\r
+       {\r
+               if (retries--) {\r
+                       printf("DMA Write Addr = %08x  Data = ERROR ON WRITE (retrying)\n", addr);\r
+                       goto begin_ejtag_dma_write_b;\r
+               } else  printf("DMA Write Addr = %08x  Data = ERROR ON WRITE\n", addr);\r
+               return ERROR_JTAG_DEVICE_ERROR;\r
+       }\r
+\r
+       return ERROR_OK;\r
+}\r
+\r
+\r
+int mips32_dmaacc_read_mem(mips_ejtag_t *ejtag_info, u32 addr, int size, int count, void *buf)\r
+{\r
+       switch (size)\r
+       {\r
+               case 1:\r
+                       return mips32_dmaacc_read_mem8(ejtag_info, addr, count, (u8*)buf);\r
+               case 2:\r
+                       return mips32_dmaacc_read_mem16(ejtag_info, addr, count, (u16*)buf);\r
+               case 4:\r
+                       return mips32_dmaacc_read_mem32(ejtag_info, addr, count, (u32*)buf);\r
+       }\r
+\r
+       return ERROR_OK;\r
+}\r
+\r
+int mips32_dmaacc_read_mem32(mips_ejtag_t *ejtag_info, u32 addr, int count, u32 *buf)\r
+{\r
+       int i;\r
+       int     retval;\r
+\r
+       for(i=0; i<count; i++) {\r
+               if((retval=ejtag_dma_read(ejtag_info, addr+i*sizeof(*buf), &buf[i])) != ERROR_OK)\r
+                       return retval;\r
+       }\r
+\r
+       return ERROR_OK;\r
+}\r
+\r
+int mips32_dmaacc_read_mem16(mips_ejtag_t *ejtag_info, u32 addr, int count, u16 *buf)\r
+{\r
+       int i;\r
+       int retval;\r
+\r
+       for(i=0; i<count; i++) {\r
+               if((retval=ejtag_dma_read_h(ejtag_info, addr+i*sizeof(*buf), &buf[i])) != ERROR_OK)\r
+                       return retval;\r
+       }\r
+\r
+       return ERROR_OK;\r
+}\r
+\r
+int mips32_dmaacc_read_mem8(mips_ejtag_t *ejtag_info, u32 addr, int count, u8 *buf)\r
+{\r
+       int i;\r
+       int retval;\r
+\r
+       for(i=0; i<count; i++) {\r
+               if((retval=ejtag_dma_read_b(ejtag_info, addr+i*sizeof(*buf), &buf[i])) != ERROR_OK)\r
+                       return retval;\r
+       }\r
+\r
+       return ERROR_OK;\r
+}\r
+\r
+int mips32_dmaacc_write_mem(mips_ejtag_t *ejtag_info, u32 addr, int size, int count, void *buf)\r
+{\r
+       switch (size)\r
+       {\r
+               case 1:\r
+                       return mips32_dmaacc_write_mem8(ejtag_info, addr, count, (u8*)buf);\r
+               case 2:\r
+                       return mips32_dmaacc_write_mem16(ejtag_info, addr, count,(u16*)buf);\r
+               case 4:\r
+                       return mips32_dmaacc_write_mem32(ejtag_info, addr, count, (u32*)buf);\r
+       }\r
+\r
+       return ERROR_OK;\r
+}\r
+\r
+int mips32_dmaacc_write_mem32(mips_ejtag_t *ejtag_info, u32 addr, int count, u32 *buf)\r
+{\r
+       int i;\r
+       int retval;\r
+\r
+       for(i=0; i<count; i++) {\r
+               if((retval=ejtag_dma_write(ejtag_info, addr+i*sizeof(*buf), buf[i])) != ERROR_OK)\r
+                       return retval;\r
+       }\r
+\r
+       return ERROR_OK;\r
+}\r
+\r
+int mips32_dmaacc_write_mem16(mips_ejtag_t *ejtag_info, u32 addr, int count, u16 *buf)\r
+{\r
+       int i;\r
+       int retval;\r
+\r
+       for(i=0; i<count; i++) {\r
+               if((retval=ejtag_dma_write_h(ejtag_info, addr+i*sizeof(*buf), buf[i])) != ERROR_OK)\r
+                       return retval;\r
+       }\r
+\r
+       return ERROR_OK;\r
+}\r
+\r
+int mips32_dmaacc_write_mem8(mips_ejtag_t *ejtag_info, u32 addr, int count, u8 *buf)\r
+{\r
+       int i;\r
+       int retval;\r
+\r
+       for(i=0; i<count; i++) {\r
+               if((retval=ejtag_dma_write_b(ejtag_info, addr+i*sizeof(*buf), buf[i])) != ERROR_OK)\r
+                       return retval;\r
+       }\r
+\r
+       return ERROR_OK;\r
+}\r