2 * This file is part of the flashrom project.
4 * Copyright (C) 2000 Silicon Integrated System Corporation
5 * Copyright (C) 2005-2007 coresystems GmbH <stepan@coresystems.de>
6 * Copyright (C) 2006 Uwe Hermann <uwe@hermann-uwe.de>
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; version 2 of the License.
12 * This program is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 * GNU General Public License for more details.
17 * You should have received a copy of the GNU General Public License
18 * along with this program; if not, write to the Free Software
19 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
23 * Contains the chipset specific flash enables.
26 #define _LARGEFILE64_SOURCE
31 #include <sys/types.h>
38 static int enable_flash_ali_m1533(struct pci_dev *dev, const char *name)
43 * ROM Write enable, 0xFFFC0000-0xFFFDFFFF and
44 * 0xFFFE0000-0xFFFFFFFF ROM select enable.
46 tmp = pci_read_byte(dev, 0x47);
48 pci_write_byte(dev, 0x47, tmp);
53 static int enable_flash_sis630(struct pci_dev *dev, const char *name)
57 /* Enable 0xFFF8000~0xFFFF0000 decoding on SiS 540/630. */
58 b = pci_read_byte(dev, 0x40);
59 pci_write_byte(dev, 0x40, b | 0xb);
61 /* Flash write enable on SiS 540/630. */
62 b = pci_read_byte(dev, 0x45);
63 pci_write_byte(dev, 0x45, b | 0x40);
65 /* The same thing on SiS 950 Super I/O side... */
67 /* First probe for Super I/O on config port 0x2e. */
73 if (inb(0x2f) != 0x87) {
74 /* If that failed, try config port 0x4e. */
79 if (inb(0x4f) != 0x87) {
80 printf("Can not access SiS 950\n");
92 printf("2f is %#x\n", inb(0x2f));
104 * - Name: 82371AB PCI-TO-ISA / IDE XCELERATOR (PIIX4)
105 * - URL: http://www.intel.com/design/intarch/datashts/290562.htm
106 * - PDF: http://www.intel.com/design/intarch/datashts/29056201.pdf
107 * - Order Number: 290562-001
109 static int enable_flash_piix4(struct pci_dev *dev, const char *name)
112 uint16_t xbcs = 0x4e; /* X-Bus Chip Select register. */
114 old = pci_read_word(dev, xbcs);
116 /* Set bit 9: 1-Meg Extended BIOS Enable (PCI master accesses to
117 * FFF00000-FFF7FFFF are forwarded to ISA).
118 * Set bit 7: Extended BIOS Enable (PCI master accesses to
119 * FFF80000-FFFDFFFF are forwarded to ISA).
120 * Set bit 6: Lower BIOS Enable (PCI master, or ISA master accesses to
121 * the lower 64-Kbyte BIOS block (E0000-EFFFF) at the top
122 * of 1 Mbyte, or the aliases at the top of 4 Gbyte
123 * (FFFE0000-FFFEFFFF) result in the generation of BIOSCS#.
124 * Note: Accesses to FFFF0000-FFFFFFFF are always forwarded to ISA.
125 * Set bit 2: BIOSCS# Write Enable (1=enable, 0=disable).
132 pci_write_word(dev, xbcs, new);
134 if (pci_read_word(dev, xbcs) != new) {
135 printf("tried to set 0x%x to 0x%x on %s failed (WARNING ONLY)\n", xbcs, new, name);
143 * See ie. page 375 of "Intel I/O Controller Hub 7 (ICH7) Family Datasheet"
144 * http://download.intel.com/design/chipsets/datashts/30701303.pdf
146 static int enable_flash_ich(struct pci_dev *dev, const char *name,
152 * Note: the ICH0-ICH5 BIOS_CNTL register is actually 16 bit wide, but
153 * just treating it as 8 bit wide seems to work fine in practice.
155 old = pci_read_byte(dev, bios_cntl);
157 printf_debug("BIOS Lock Enable: %sabled, ",
158 (old & (1 << 1)) ? "en" : "dis");
159 printf_debug("BIOS Write Enable: %sabled, ",
160 (old & (1 << 0)) ? "en" : "dis");
161 printf_debug("BIOS_CNTL is 0x%x\n", old);
168 pci_write_byte(dev, bios_cntl, new);
170 if (pci_read_byte(dev, bios_cntl) != new) {
171 printf("tried to set 0x%x to 0x%x on %s failed (WARNING ONLY)\n", bios_cntl, new, name);
178 static int enable_flash_ich_4e(struct pci_dev *dev, const char *name)
180 return enable_flash_ich(dev, name, 0x4e);
183 static int enable_flash_ich_dc(struct pci_dev *dev, const char *name)
185 return enable_flash_ich(dev, name, 0xdc);
188 static int enable_flash_ich_dc_spi(struct pci_dev *dev, const char *name)
190 uint8_t old, new, bbs;
194 /* Root Complex Base Address Register (RCBA) */
195 tmp = pci_read_long(dev, 0xf0);
197 printf_debug("Root Complex Base Address Register = 0x%x\n", tmp);
198 rcba = mmap(0, 0x3510, PROT_READ, MAP_SHARED, fd_mem, (off_t)tmp);
199 if (rcba == MAP_FAILED) {
200 perror("Can't mmap memory using " MEM_DEV);
203 printf_debug("GCS address = 0x%x\n", tmp + 0x3410);
204 gcs = *(volatile uint32_t *)(rcba + 0x3410);
205 printf_debug("GCS = 0x%x: ", gcs);
206 printf_debug("BIOS Interface Lock-Down: %sabled, ",
207 (gcs & 0x1) ? "en" : "dis");
208 bbs = (gcs >> 10) & 0x3;
209 printf_debug("BOOT BIOS Straps: 0x%x (%s)\n", bbs,
210 (bbs == 0x3) ? "LPC" : ((bbs == 0x2) ? "PCI" : "SPI"));
211 /* SPIBAR is at RCBA+0x3020 for ICH[78] and RCBA+0x3800 for ICH9. */
212 /* printf_debug("SPIBAR = 0x%x\n", tmp + 0x3020); */
213 /* TODO: Dump the SPI config regs */
214 munmap(rcba, 0x3510);
216 old = pci_read_byte(dev, 0xdc);
217 printf_debug("SPI Read Configuration: ");
218 new = (old >> 2) & 0x3;
223 printf_debug("prefetching %sabled, caching %sabled, ",
224 (new & 0x2) ? "en" : "dis", (new & 0x1) ? "dis" : "en");
227 printf_debug("invalid prefetching/caching settings, ");
230 return enable_flash_ich_dc(dev, name);
233 static int enable_flash_vt823x(struct pci_dev *dev, const char *name)
237 /* enable ROM decode range (1MB) FFC00000 - FFFFFFFF*/
238 pci_write_byte(dev, 0x41, 0x7f);
240 /* ROM write enable */
241 val = pci_read_byte(dev, 0x40);
243 pci_write_byte(dev, 0x40, val);
245 if (pci_read_byte(dev, 0x40) != val) {
246 printf("\nWARNING: Failed to enable ROM Write on \"%s\"\n",
254 static int enable_flash_cs5530(struct pci_dev *dev, const char *name)
258 #define DECODE_CONTROL_REG2 0x5b /* F0 index 0x5b */
259 #define ROM_AT_LOGIC_CONTROL_REG 0x52 /* F0 index 0x52 */
261 #define LOWER_ROM_ADDRESS_RANGE (1 << 0)
262 #define ROM_WRITE_ENABLE (1 << 1)
263 #define UPPER_ROM_ADDRESS_RANGE (1 << 2)
264 #define BIOS_ROM_POSITIVE_DECODE (1 << 5)
266 /* Decode 0x000E0000-0x000FFFFF (128 KB), not just 64 KB, and
267 * decode 0xFF000000-0xFFFFFFFF (16 MB), not just 256 KB.
268 * Make the configured ROM areas writable.
270 reg8 = pci_read_byte(dev, ROM_AT_LOGIC_CONTROL_REG);
271 reg8 |= LOWER_ROM_ADDRESS_RANGE;
272 reg8 |= UPPER_ROM_ADDRESS_RANGE;
273 reg8 |= ROM_WRITE_ENABLE;
274 pci_write_byte(dev, ROM_AT_LOGIC_CONTROL_REG, reg8);
276 /* Set positive decode on ROM. */
277 reg8 = pci_read_byte(dev, DECODE_CONTROL_REG2);
278 reg8 |= BIOS_ROM_POSITIVE_DECODE;
279 pci_write_byte(dev, DECODE_CONTROL_REG2, reg8);
285 * Geode systems write protect the BIOS via RCONFs (cache settings similar
286 * to MTRRs). To unlock, change MSR 0x1808 top byte to 0x22. Reading and
287 * writing to MSRs, however requires instructions rdmsr/wrmsr, which are
288 * ring0 privileged instructions so only the kernel can do the read/write.
289 * This function, therefore, requires that the msr kernel module be loaded
290 * to access these instructions from user space using device /dev/cpu/0/msr.
292 * This hard-coded location could have potential problems on SMP machines
293 * since it assumes cpu0, but it is safe on the Geode which is not SMP.
295 * Geode systems also write protect the NOR flash chip itself via MSR_NORF_CTL.
296 * To enable write to NOR Boot flash for the benefit of systems that have such
297 * a setup, raise MSR 0x51400018 WE_CS3 (write enable Boot Flash Chip Select).
299 * This is probably not portable beyond Linux.
301 static int enable_flash_cs5536(struct pci_dev *dev, const char *name)
303 #define MSR_RCONF_DEFAULT 0x1808
304 #define MSR_NORF_CTL 0x51400018
307 unsigned char buf[8];
309 fd_msr = open("/dev/cpu/0/msr", O_RDWR);
315 if (lseek64(fd_msr, (off64_t) MSR_RCONF_DEFAULT, SEEK_SET) == -1) {
317 printf("Cannot operate on MSR. Did you run 'modprobe msr'?\n");
322 if (read(fd_msr, buf, 8) != 8) {
328 if (buf[7] != 0x22) {
330 if (lseek64(fd_msr, (off64_t) MSR_RCONF_DEFAULT, SEEK_SET) == -1) {
336 if (write(fd_msr, buf, 8) < 0) {
343 if (lseek64(fd_msr, (off64_t) MSR_NORF_CTL, SEEK_SET) == -1) {
349 if (read(fd_msr, buf, 8) != 8) {
355 /* Raise WE_CS3 bit. */
358 if (lseek64(fd_msr, (off64_t) MSR_NORF_CTL, SEEK_SET) == -1) {
363 if (write(fd_msr, buf, 8) < 0) {
371 #undef MSR_RCONF_DEFAULT
376 static int enable_flash_sc1100(struct pci_dev *dev, const char *name)
380 pci_write_byte(dev, 0x52, 0xee);
382 new = pci_read_byte(dev, 0x52);
385 printf("tried to set register 0x%x to 0x%x on %s failed (WARNING ONLY)\n", 0x52, new, name);
392 static int enable_flash_sis5595(struct pci_dev *dev, const char *name)
396 new = pci_read_byte(dev, 0x45);
398 new &= (~0x20); /* Clear bit 5. */
399 new |= 0x4; /* Set bit 2. */
401 pci_write_byte(dev, 0x45, new);
403 newer = pci_read_byte(dev, 0x45);
405 printf("tried to set register 0x%x to 0x%x on %s failed (WARNING ONLY)\n", 0x45, new, name);
406 printf("Stuck at 0x%x\n", newer);
413 static int enable_flash_amd8111(struct pci_dev *dev, const char *name)
417 /* Enable decoding at 0xffb00000 to 0xffffffff. */
418 old = pci_read_byte(dev, 0x43);
421 pci_write_byte(dev, 0x43, new);
422 if (pci_read_byte(dev, 0x43) != new) {
423 printf("tried to set 0x%x to 0x%x on %s failed (WARNING ONLY)\n", 0x43, new, name);
427 old = pci_read_byte(dev, 0x40);
431 pci_write_byte(dev, 0x40, new);
433 if (pci_read_byte(dev, 0x40) != new) {
434 printf("tried to set 0x%x to 0x%x on %s failed (WARNING ONLY)\n", 0x40, new, name);
441 static int enable_flash_ck804(struct pci_dev *dev, const char *name)
445 old = pci_read_byte(dev, 0x88);
448 pci_write_byte(dev, 0x88, new);
449 if (pci_read_byte(dev, 0x88) != new) {
450 printf("tried to set 0x%x to 0x%x on %s failed (WARNING ONLY)\n", 0x88, new, name);
454 old = pci_read_byte(dev, 0x6d);
458 pci_write_byte(dev, 0x6d, new);
460 if (pci_read_byte(dev, 0x6d) != new) {
461 printf("tried to set 0x%x to 0x%x on %s failed (WARNING ONLY)\n", 0x6d, new, name);
468 /* ATI Technologies Inc IXP SB400 PCI-ISA Bridge (rev 80) */
469 static int enable_flash_sb400(struct pci_dev *dev, const char *name)
473 struct pci_dev *smbusdev;
475 /* Look for the SMBus device. */
476 pci_filter_init((struct pci_access *)0, &f);
480 for (smbusdev = pacc->devices; smbusdev; smbusdev = smbusdev->next) {
481 if (pci_filter_match(&f, smbusdev)) {
487 fprintf(stderr, "ERROR: SMBus device not found. Aborting.\n");
491 /* Enable some SMBus stuff. */
492 tmp = pci_read_byte(smbusdev, 0x79);
494 pci_write_byte(smbusdev, 0x79, tmp);
496 /* Change southbridge. */
497 tmp = pci_read_byte(dev, 0x48);
499 pci_write_byte(dev, 0x48, tmp);
501 /* Now become a bit silly. */
513 static int enable_flash_mcp55(struct pci_dev *dev, const char *name)
515 uint8_t old, new, byte;
518 /* Set the 0-16 MB enable bits. */
519 byte = pci_read_byte(dev, 0x88);
520 byte |= 0xff; /* 256K */
521 pci_write_byte(dev, 0x88, byte);
522 byte = pci_read_byte(dev, 0x8c);
523 byte |= 0xff; /* 1M */
524 pci_write_byte(dev, 0x8c, byte);
525 word = pci_read_word(dev, 0x90);
526 word |= 0x7fff; /* 16M */
527 pci_write_word(dev, 0x90, word);
529 old = pci_read_byte(dev, 0x6d);
533 pci_write_byte(dev, 0x6d, new);
535 if (pci_read_byte(dev, 0x6d) != new) {
537 ("tried to set 0x%x to 0x%x on %s failed (WARNING ONLY)\n",
545 static int enable_flash_ht1000(struct pci_dev *dev, const char *name)
549 /* Set the 4MB enable bit. */
550 byte = pci_read_byte(dev, 0x41);
552 pci_write_byte(dev, 0x41, byte);
554 byte = pci_read_byte(dev, 0x43);
556 pci_write_byte(dev, 0x43, byte);
561 typedef struct penable {
562 uint16_t vendor, device;
564 int (*doit) (struct pci_dev *dev, const char *name);
567 static const FLASH_ENABLE enables[] = {
568 {0x1039, 0x0630, "SiS630", enable_flash_sis630},
569 {0x8086, 0x7110, "Intel PIIX4/4E/4M", enable_flash_piix4},
570 {0x8086, 0x7198, "Intel 440MX", enable_flash_piix4},
571 {0x8086, 0x2410, "Intel ICH", enable_flash_ich_4e},
572 {0x8086, 0x2420, "Intel ICH0", enable_flash_ich_4e},
573 {0x8086, 0x2440, "Intel ICH2", enable_flash_ich_4e},
574 {0x8086, 0x244c, "Intel ICH2-M", enable_flash_ich_4e},
575 {0x8086, 0x2480, "Intel ICH3-S", enable_flash_ich_4e},
576 {0x8086, 0x248c, "Intel ICH3-M", enable_flash_ich_4e},
577 {0x8086, 0x24c0, "Intel ICH4/ICH4-L", enable_flash_ich_4e},
578 {0x8086, 0x24cc, "Intel ICH4-M", enable_flash_ich_4e},
579 {0x8086, 0x24d0, "Intel ICH5/ICH5R", enable_flash_ich_4e},
580 {0x8086, 0x2640, "Intel ICH6/ICH6R", enable_flash_ich_dc},
581 {0x8086, 0x2641, "Intel ICH6-M", enable_flash_ich_dc},
582 {0x8086, 0x27b0, "Intel ICH7DH", enable_flash_ich_dc_spi},
583 {0x8086, 0x27b8, "Intel ICH7/ICH7R", enable_flash_ich_dc_spi},
584 {0x8086, 0x27b9, "Intel ICH7M", enable_flash_ich_dc_spi},
585 {0x8086, 0x27bd, "Intel ICH7MDH", enable_flash_ich_dc_spi},
586 {0x8086, 0x2810, "Intel ICH8/ICH8R", enable_flash_ich_dc_spi},
587 {0x8086, 0x2811, "Intel ICH8M-E", enable_flash_ich_dc_spi},
588 {0x8086, 0x2812, "Intel ICH8DH", enable_flash_ich_dc_spi},
589 {0x8086, 0x2814, "Intel ICH8DO", enable_flash_ich_dc_spi},
590 {0x8086, 0x2815, "Intel ICH8M", enable_flash_ich_dc_spi},
591 {0x8086, 0x2912, "Intel ICH9DH", enable_flash_ich_dc_spi},
592 {0x8086, 0x2914, "Intel ICH9DO", enable_flash_ich_dc_spi},
593 {0x8086, 0x2916, "Intel ICH9R", enable_flash_ich_dc_spi},
594 {0x8086, 0x2917, "Intel ICH9M-E", enable_flash_ich_dc_spi},
595 {0x8086, 0x2918, "Intel ICH9", enable_flash_ich_dc_spi},
596 {0x8086, 0x2919, "Intel ICH9M", enable_flash_ich_dc_spi},
597 {0x1106, 0x8231, "VIA VT8231", enable_flash_vt823x},
598 {0x1106, 0x3177, "VIA VT8235", enable_flash_vt823x},
599 {0x1106, 0x3227, "VIA VT8237", enable_flash_vt823x},
600 {0x1106, 0x8324, "VIA CX700", enable_flash_vt823x},
601 {0x1106, 0x0686, "VIA VT82C686", enable_flash_amd8111},
602 {0x1078, 0x0100, "AMD CS5530(A)", enable_flash_cs5530},
603 {0x100b, 0x0510, "AMD SC1100", enable_flash_sc1100},
604 {0x1039, 0x0008, "SiS5595", enable_flash_sis5595},
605 {0x1022, 0x2080, "AMD CS5536", enable_flash_cs5536},
606 {0x1022, 0x7468, "AMD8111", enable_flash_amd8111},
607 {0x10B9, 0x1533, "ALi M1533", enable_flash_ali_m1533},
608 {0x10de, 0x0050, "NVIDIA CK804", enable_flash_ck804}, /* LPC */
609 {0x10de, 0x0051, "NVIDIA CK804", enable_flash_ck804}, /* Pro */
610 /* Slave, should not be here, to fix known bug for A01. */
611 {0x10de, 0x00d3, "NVIDIA CK804", enable_flash_ck804},
612 {0x10de, 0x0260, "NVIDIA MCP51", enable_flash_ck804},
613 {0x10de, 0x0261, "NVIDIA MCP51", enable_flash_ck804},
614 {0x10de, 0x0262, "NVIDIA MCP51", enable_flash_ck804},
615 {0x10de, 0x0263, "NVIDIA MCP51", enable_flash_ck804},
616 {0x10de, 0x0360, "NVIDIA MCP55", enable_flash_mcp55}, /* M57SLI*/
617 {0x10de, 0x0361, "NVIDIA MCP55", enable_flash_mcp55}, /* LPC */
618 {0x10de, 0x0362, "NVIDIA MCP55", enable_flash_mcp55}, /* LPC */
619 {0x10de, 0x0363, "NVIDIA MCP55", enable_flash_mcp55}, /* LPC */
620 {0x10de, 0x0364, "NVIDIA MCP55", enable_flash_mcp55}, /* LPC */
621 {0x10de, 0x0365, "NVIDIA MCP55", enable_flash_mcp55}, /* LPC */
622 {0x10de, 0x0366, "NVIDIA MCP55", enable_flash_mcp55}, /* LPC */
623 {0x10de, 0x0367, "NVIDIA MCP55", enable_flash_mcp55}, /* Pro */
624 {0x1002, 0x4377, "ATI SB400", enable_flash_sb400},
625 {0x1166, 0x0205, "Broadcom HT-1000", enable_flash_ht1000},
628 void print_supported_chipsets(void)
632 printf("\nSupported chipsets:\n\n");
634 for (i = 0; i < ARRAY_SIZE(enables); i++)
635 printf("%s (%04x:%04x)\n", enables[i].name,
636 enables[i].vendor, enables[i].device);
639 int chipset_flash_enable(void)
641 struct pci_dev *dev = 0;
642 int ret = -2; /* Nothing! */
645 /* Now let's try to find the chipset we have... */
646 for (i = 0; i < ARRAY_SIZE(enables); i++) {
647 dev = pci_dev_find(enables[i].vendor, enables[i].device);
653 printf("Found chipset \"%s\", enabling flash write... ",
656 ret = enables[i].doit(dev, enables[i].name);