/*      $NetBSD: qe.c,v 1.81 2025/10/15 01:36:25 thorpej Exp $  */

/*-
 * Copyright (c) 1999 The NetBSD Foundation, Inc.
 * All rights reserved.
 *
 * This code is derived from software contributed to The NetBSD Foundation
 * by Paul Kranenburg.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 * POSSIBILITY OF SUCH DAMAGE.
 */

/*
 * Copyright (c) 1998 Jason L. Wright.
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. The name of the authors may not be used to endorse or promote products
 *    derived from this software without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE AUTHORS ``AS IS'' AND ANY EXPRESS OR
 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
 * IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY DIRECT, INDIRECT,
 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */

/*
 * Driver for the SBus qec+qe QuadEthernet board.
 *
 * This driver was written using the AMD MACE Am79C940 documentation, some
 * ideas gleaned from the S/Linux driver for this card, Solaris header files,
 * and a loan of a card from Paul Southworth of the Internet Engineering
 * Group (www.ieng.com).
 */

#include <sys/cdefs.h>
__KERNEL_RCSID(0, "$NetBSD: qe.c,v 1.81 2025/10/15 01:36:25 thorpej Exp $");

#define QEDEBUG

#include "opt_ddb.h"
#include "opt_inet.h"

#include <sys/param.h>
#include <sys/systm.h>
#include <sys/kernel.h>
#include <sys/errno.h>
#include <sys/ioctl.h>
#include <sys/mbuf.h>
#include <sys/socket.h>
#include <sys/syslog.h>
#include <sys/device.h>

#include <net/if.h>
#include <net/if_dl.h>
#include <net/if_types.h>
#include <net/if_media.h>
#include <net/if_ether.h>
#include <net/bpf.h>

#ifdef INET
#include <netinet/in.h>
#include <netinet/if_inarp.h>
#include <netinet/in_systm.h>
#include <netinet/in_var.h>
#include <netinet/ip.h>
#endif

#include <sys/bus.h>
#include <sys/intr.h>
#include <machine/autoconf.h>

#include <dev/sbus/sbusvar.h>
#include <dev/sbus/qecreg.h>
#include <dev/sbus/qecvar.h>
#include <dev/sbus/qereg.h>

struct qe_softc {
        device_t        sc_dev;
        bus_space_tag_t sc_bustag;      /* bus & DMA tags */
        bus_dma_tag_t   sc_dmatag;
        bus_dmamap_t    sc_dmamap;
        struct  ethercom sc_ethercom;
        struct  ifmedia sc_ifmedia;     /* interface media */

        struct  qec_softc *sc_qec;      /* QEC parent */

        bus_space_handle_t      sc_qr;  /* QEC registers */
        bus_space_handle_t      sc_mr;  /* MACE registers */
        bus_space_handle_t      sc_cr;  /* channel registers */

        int     sc_channel;             /* channel number */
        u_int   sc_rev;                 /* board revision */

        int     sc_burst;

        struct  qec_ring        sc_rb;  /* Packet Ring Buffer */

        /* MAC address */
        uint8_t sc_enaddr[6];

#ifdef QEDEBUG
        int     sc_debug;
#endif
};

int     qematch(device_t, cfdata_t, void *);
void    qeattach(device_t, device_t, void *);

void    qeinit(struct qe_softc *);
void    qestart(struct ifnet *);
void    qestop(struct qe_softc *);
void    qewatchdog(struct ifnet *);
int     qeioctl(struct ifnet *, u_long, void *);
void    qereset(struct qe_softc *);

int     qeintr(void *);
int     qe_eint(struct qe_softc *, uint32_t);
int     qe_rint(struct qe_softc *);
int     qe_tint(struct qe_softc *);
void    qe_mcreset(struct qe_softc *);

static int      qe_put(struct qe_softc *, int, struct mbuf *);
static void     qe_read(struct qe_softc *, int, int);
static struct mbuf      *qe_get(struct qe_softc *, int, int);

/* ifmedia callbacks */
void    qe_ifmedia_sts(struct ifnet *, struct ifmediareq *);
int     qe_ifmedia_upd(struct ifnet *);

CFATTACH_DECL_NEW(qe, sizeof(struct qe_softc),
    qematch, qeattach, NULL, NULL);

int
qematch(device_t parent, cfdata_t cf, void *aux)
{
        struct sbus_attach_args *sa = aux;

        return (strcmp(cf->cf_name, sa->sa_name) == 0);
}

void
qeattach(device_t parent, device_t self, void *aux)
{
        struct sbus_attach_args *sa = aux;
        struct qec_softc *qec = device_private(parent);
        struct qe_softc *sc = device_private(self);
        struct ifnet *ifp = &sc->sc_ethercom.ec_if;
        int node = sa->sa_node;
        bus_dma_tag_t dmatag = sa->sa_dmatag;
        bus_dma_segment_t seg;
        bus_size_t size;
        int rseg, error;

        sc->sc_dev = self;

        if (sa->sa_nreg < 2) {
                printf("%s: only %d register sets\n",
                        device_xname(self), sa->sa_nreg);
                return;
        }

        if (bus_space_map(sa->sa_bustag,
                          (bus_addr_t)BUS_ADDR(
                                sa->sa_reg[0].oa_space,
                                sa->sa_reg[0].oa_base),
                          (bus_size_t)sa->sa_reg[0].oa_size,
                          0, &sc->sc_cr) != 0) {
                aprint_error_dev(self, "cannot map registers\n");
                return;
        }

        if (bus_space_map(sa->sa_bustag,
                          (bus_addr_t)BUS_ADDR(
                                sa->sa_reg[1].oa_space,
                                sa->sa_reg[1].oa_base),
                          (bus_size_t)sa->sa_reg[1].oa_size,
                          0, &sc->sc_mr) != 0) {
                aprint_error_dev(self, "cannot map registers\n");
                return;
        }

        sc->sc_rev = prom_getpropint(node, "mace-version", -1);
        printf(" rev %x", sc->sc_rev);

        sc->sc_bustag = sa->sa_bustag;
        sc->sc_dmatag = sa->sa_dmatag;
        sc->sc_qec = qec;
        sc->sc_qr = qec->sc_regs;

        sc->sc_channel = prom_getpropint(node, "channel#", -1);
        sc->sc_burst = qec->sc_burst;

        qestop(sc);

        /* Note: no interrupt level passed */
        (void)bus_intr_establish(sa->sa_bustag, 0, IPL_NET, qeintr, sc);
        ether_getaddr(self, sc->sc_enaddr);

        /*
         * Allocate descriptor ring and buffers.
         */

        /* for now, allocate as many bufs as there are ring descriptors */
        sc->sc_rb.rb_ntbuf = QEC_XD_RING_MAXSIZE;
        sc->sc_rb.rb_nrbuf = QEC_XD_RING_MAXSIZE;

        size =  QEC_XD_RING_MAXSIZE * sizeof(struct qec_xd) +
                QEC_XD_RING_MAXSIZE * sizeof(struct qec_xd) +
                sc->sc_rb.rb_ntbuf * QE_PKT_BUF_SZ +
                sc->sc_rb.rb_nrbuf * QE_PKT_BUF_SZ;

        /* Get a DMA handle */
        if ((error = bus_dmamap_create(dmatag, size, 1, size, 0,
                                    BUS_DMA_NOWAIT, &sc->sc_dmamap)) != 0) {
                aprint_error_dev(self, "DMA map create error %d\n",
                        error);
                return;
        }

        /* Allocate DMA buffer */
        if ((error = bus_dmamem_alloc(dmatag, size, 0, 0,
                                      &seg, 1, &rseg, BUS_DMA_NOWAIT)) != 0) {
                aprint_error_dev(self, "DMA buffer alloc error %d\n",
                        error);
                return;
        }

        /* Map DMA buffer in CPU addressable space */
        if ((error = bus_dmamem_map(dmatag, &seg, rseg, size,
                                    &sc->sc_rb.rb_membase,
                                    BUS_DMA_NOWAIT | BUS_DMA_COHERENT)) != 0) {
                aprint_error_dev(self, "DMA buffer map error %d\n",
                        error);
                bus_dmamem_free(dmatag, &seg, rseg);
                return;
        }

        /* Load the buffer */
        if ((error = bus_dmamap_load(dmatag, sc->sc_dmamap,
                                     sc->sc_rb.rb_membase, size, NULL,
                                     BUS_DMA_NOWAIT)) != 0) {
                aprint_error_dev(self, "DMA buffer map load error %d\n",
                        error);
                bus_dmamem_unmap(dmatag, sc->sc_rb.rb_membase, size);
                bus_dmamem_free(dmatag, &seg, rseg);
                return;
        }
        sc->sc_rb.rb_dmabase = sc->sc_dmamap->dm_segs[0].ds_addr;

        /* Initialize media properties */
        sc->sc_ethercom.ec_ifmedia = &sc->sc_ifmedia;
        ifmedia_init(&sc->sc_ifmedia, 0, qe_ifmedia_upd, qe_ifmedia_sts);
        ifmedia_add(&sc->sc_ifmedia,
                    IFM_MAKEWORD(IFM_ETHER, IFM_10_T, 0, 0),
                    0, NULL);
        ifmedia_add(&sc->sc_ifmedia,
                    IFM_MAKEWORD(IFM_ETHER, IFM_10_5, 0, 0),
                    0, NULL);
        ifmedia_add(&sc->sc_ifmedia,
                    IFM_MAKEWORD(IFM_ETHER, IFM_AUTO, 0, 0),
                    0, NULL);
        ifmedia_set(&sc->sc_ifmedia, IFM_ETHER | IFM_AUTO);

        memcpy(ifp->if_xname, device_xname(self), IFNAMSIZ);
        ifp->if_softc = sc;
        ifp->if_start = qestart;
        ifp->if_ioctl = qeioctl;
        ifp->if_watchdog = qewatchdog;
        ifp->if_flags = IFF_BROADCAST | IFF_SIMPLEX | IFF_MULTICAST;
        IFQ_SET_READY(&ifp->if_snd);

        /* Attach the interface. */
        if_attach(ifp);
        ether_ifattach(ifp, sc->sc_enaddr);

        printf(" address %s\n", ether_sprintf(sc->sc_enaddr));
}

/*
 * Pull data off an interface.
 * Len is the length of data, with local net header stripped.
 * We copy the data into mbufs.  When full cluster sized units are present,
 * we copy into clusters.
 */
static inline struct mbuf *
qe_get(struct qe_softc *sc, int idx, int totlen)
{
        struct ifnet *ifp = &sc->sc_ethercom.ec_if;
        struct mbuf *m;
        struct mbuf *top, **mp;
        int len, pad, boff = 0;
        uint8_t *bp;

        bp = sc->sc_rb.rb_rxbuf + (idx % sc->sc_rb.rb_nrbuf) * QE_PKT_BUF_SZ;

        MGETHDR(m, M_DONTWAIT, MT_DATA);
        if (m == NULL)
                return (NULL);
        m_set_rcvif(m, ifp);
        m->m_pkthdr.len = totlen;
        pad = ALIGN(sizeof(struct ether_header)) - sizeof(struct ether_header);
        m->m_data += pad;
        len = MHLEN - pad;
        top = NULL;
        mp = &top;

        while (totlen > 0) {
                if (top) {
                        MGET(m, M_DONTWAIT, MT_DATA);
                        if (m == NULL) {
                                m_freem(top);
                                return (NULL);
                        }
                        len = MLEN;
                }
                if (top && totlen >= MINCLSIZE) {
                        MCLGET(m, M_DONTWAIT);
                        if (m->m_flags & M_EXT)
                                len = MCLBYTES;
                }
                m->m_len = len = uimin(totlen, len);
                memcpy(mtod(m, void *), bp + boff, len);
                boff += len;
                totlen -= len;
                *mp = m;
                mp = &m->m_next;
        }

        return (top);
}

/*
 * Routine to copy from mbuf chain to transmit buffer in
 * network buffer memory.
 */
inline int
qe_put(struct qe_softc *sc, int idx, struct mbuf *m)
{
        struct mbuf *n;
        int len, tlen = 0, boff = 0;
        uint8_t *bp;

        bp = sc->sc_rb.rb_txbuf + (idx % sc->sc_rb.rb_ntbuf) * QE_PKT_BUF_SZ;

        for (; m; m = n) {
                len = m->m_len;
                if (len == 0) {
                        n = m_free(m);
                        continue;
                }
                memcpy(bp + boff, mtod(m, void *), len);
                boff += len;
                tlen += len;
                n = m_free(m);
        }
        return (tlen);
}

/*
 * Pass a packet to the higher levels.
 */
inline void
qe_read(struct qe_softc *sc, int idx, int len)
{
        struct ifnet *ifp = &sc->sc_ethercom.ec_if;
        struct mbuf *m;

        if (len <= sizeof(struct ether_header) ||
            len > ETHERMTU + sizeof(struct ether_header)) {

                printf("%s: invalid packet size %d; dropping\n",
                        ifp->if_xname, len);

                if_statinc(ifp, if_ierrors);
                return;
        }

        /*
         * Pull packet off interface.
         */
        m = qe_get(sc, idx, len);
        if (m == NULL) {
                if_statinc(ifp, if_ierrors);
                return;
        }

        /* Pass the packet up. */
        if_percpuq_enqueue(ifp->if_percpuq, m);
}

/*
 * Start output on interface.
 * We make an assumption here:
 *  1) that the current priority is set to splnet _before_ this code
 *     is called *and* is returned to the appropriate priority after
 *     return
 */
void
qestart(struct ifnet *ifp)
{
        struct qe_softc *sc = ifp->if_softc;
        struct qec_xd *txd = sc->sc_rb.rb_txd;
        struct mbuf *m;
        unsigned int bix, len;
        unsigned int ntbuf = sc->sc_rb.rb_ntbuf;

        if ((ifp->if_flags & IFF_RUNNING) != IFF_RUNNING)
                return;

        bix = sc->sc_rb.rb_tdhead;

        while (sc->sc_rb.rb_td_nbusy < ntbuf) {
                IFQ_DEQUEUE(&ifp->if_snd, m);
                if (m == 0)
                        break;

                /*
                 * If BPF is listening on this interface, let it see the
                 * packet before we commit it to the wire.
                 */
                bpf_mtap(ifp, m, BPF_D_OUT);

                /*
                 * Copy the mbuf chain into the transmit buffer.
                 */
                len = qe_put(sc, bix, m);

                /*
                 * Initialize transmit registers and start transmission
                 */
                txd[bix].xd_flags = QEC_XD_OWN | QEC_XD_SOP | QEC_XD_EOP |
                                    (len & QEC_XD_LENGTH);
                bus_space_write_4(sc->sc_bustag, sc->sc_cr, QE_CRI_CTRL,
                                  QE_CR_CTRL_TWAKEUP);

                if (++bix == QEC_XD_RING_MAXSIZE)
                        bix = 0;

                sc->sc_rb.rb_td_nbusy++;
        }

        sc->sc_rb.rb_tdhead = bix;
}

void
qestop(struct qe_softc *sc)
{
        bus_space_tag_t t = sc->sc_bustag;
        bus_space_handle_t mr = sc->sc_mr;
        bus_space_handle_t cr = sc->sc_cr;
        int n;

#if defined(SUN4U) || defined(__GNUC__)
        (void)&t;
#endif
        /* Stop the schwurst */
        bus_space_write_1(t, mr, QE_MRI_BIUCC, QE_MR_BIUCC_SWRST);
        for (n = 200; n > 0; n--) {
                if ((bus_space_read_1(t, mr, QE_MRI_BIUCC) &
                        QE_MR_BIUCC_SWRST) == 0)
                        break;
                DELAY(20);
        }

        /* then reset */
        bus_space_write_4(t, cr, QE_CRI_CTRL, QE_CR_CTRL_RESET);
        for (n = 200; n > 0; n--) {
                if ((bus_space_read_4(t, cr, QE_CRI_CTRL) &
                        QE_CR_CTRL_RESET) == 0)
                        break;
                DELAY(20);
        }
}

/*
 * Reset interface.
 */
void
qereset(struct qe_softc *sc)
{
        int s;

        s = splnet();
        qestop(sc);
        qeinit(sc);
        splx(s);
}

void
qewatchdog(struct ifnet *ifp)
{
        struct qe_softc *sc = ifp->if_softc;

        log(LOG_ERR, "%s: device timeout\n", device_xname(sc->sc_dev));
        if_statinc(ifp, if_oerrors);

        qereset(sc);
}

/*
 * Interrupt dispatch.
 */
int
qeintr(void *arg)
{
        struct qe_softc *sc = arg;
        bus_space_tag_t t = sc->sc_bustag;
        uint32_t qecstat, qestat;
        int r = 0;

#if defined(SUN4U) || defined(__GNUC__)
        (void)&t;
#endif
        /* Read QEC status and channel status */
        qecstat = bus_space_read_4(t, sc->sc_qr, QEC_QRI_STAT);
#ifdef QEDEBUG
        if (sc->sc_debug) {
                printf("qe%d: intr: qecstat=%x\n", sc->sc_channel, qecstat);
        }
#endif

        /* Filter out status for this channel */
        qecstat = qecstat >> (4 * sc->sc_channel);
        if ((qecstat & 0xf) == 0)
                return (r);

        qestat = bus_space_read_4(t, sc->sc_cr, QE_CRI_STAT);

#ifdef QEDEBUG
        if (sc->sc_debug) {
                char bits[64]; int i;
                bus_space_tag_t t1 = sc->sc_bustag;
                bus_space_handle_t mr = sc->sc_mr;

                snprintb(bits, sizeof(bits), QE_CR_STAT_BITS, qestat);
                printf("qe%d: intr: qestat=%s\n", sc->sc_channel, bits);

                printf("MACE registers:\n");
                for (i = 0 ; i < 32; i++) {
                        printf("  m[%d]=%x,", i, bus_space_read_1(t1, mr, i));
                        if (((i+1) & 7) == 0)
                                printf("\n");
                }
        }
#endif

        if (qestat & QE_CR_STAT_ALLERRORS) {
#ifdef QEDEBUG
                if (sc->sc_debug) {
                        char bits[64];
                        snprintb(bits, sizeof(bits), QE_CR_STAT_BITS, qestat);
                        printf("qe%d: eint: qestat=%s\n", sc->sc_channel, bits);
                }
#endif
                r |= qe_eint(sc, qestat);
                if (r == -1)
                        return (1);
        }

        if (qestat & QE_CR_STAT_TXIRQ)
                r |= qe_tint(sc);

        if (qestat & QE_CR_STAT_RXIRQ)
                r |= qe_rint(sc);

        return (r);
}

/*
 * Transmit interrupt.
 */
int
qe_tint(struct qe_softc *sc)
{
        struct ifnet *ifp = &sc->sc_ethercom.ec_if;
        unsigned int bix, txflags;

        bix = sc->sc_rb.rb_tdtail;

        for (;;) {
                if (sc->sc_rb.rb_td_nbusy <= 0)
                        break;

                txflags = sc->sc_rb.rb_txd[bix].xd_flags;

                if (txflags & QEC_XD_OWN)
                        break;

                if_statinc(ifp, if_opackets);

                if (++bix == QEC_XD_RING_MAXSIZE)
                        bix = 0;

                --sc->sc_rb.rb_td_nbusy;
        }

        sc->sc_rb.rb_tdtail = bix;

        qestart(ifp);

        if (sc->sc_rb.rb_td_nbusy == 0)
                ifp->if_timer = 0;

        return (1);
}

/*
 * Receive interrupt.
 */
int
qe_rint(struct qe_softc *sc)
{
        struct qec_xd *xd = sc->sc_rb.rb_rxd;
        unsigned int bix, len;
        unsigned int nrbuf = sc->sc_rb.rb_nrbuf;
#ifdef QEDEBUG
        int npackets = 0;
#endif

        bix = sc->sc_rb.rb_rdtail;

        /*
         * Process all buffers with valid data.
         */
        for (;;) {
                len = xd[bix].xd_flags;
                if (len & QEC_XD_OWN)
                        break;

#ifdef QEDEBUG
                npackets++;
#endif

                len &= QEC_XD_LENGTH;
                len -= 4;
                qe_read(sc, bix, len);

                /* ... */
                xd[(bix+nrbuf) % QEC_XD_RING_MAXSIZE].xd_flags =
                        QEC_XD_OWN | (QE_PKT_BUF_SZ & QEC_XD_LENGTH);

                if (++bix == QEC_XD_RING_MAXSIZE)
                        bix = 0;
        }
#ifdef QEDEBUG
        if (npackets == 0 && sc->sc_debug)
                printf("%s: rint: no packets; rb index %d; status 0x%x\n",
                        device_xname(sc->sc_dev), bix, len);
#endif

        sc->sc_rb.rb_rdtail = bix;

        return (1);
}

/*
 * Error interrupt.
 */
int
qe_eint(struct qe_softc *sc, uint32_t why)
{
        struct ifnet *ifp = &sc->sc_ethercom.ec_if;
        device_t self = sc->sc_dev;
        const char *xname = device_xname(self);
        int r = 0, rst = 0;

        net_stat_ref_t nsr = IF_STAT_GETREF(ifp);

        if (why & QE_CR_STAT_EDEFER) {
                printf("%s: excessive tx defers.\n", xname);
                r |= 1;
                if_statinc_ref(ifp, nsr, if_oerrors);
        }

        if (why & QE_CR_STAT_CLOSS) {
                printf("%s: no carrier, link down?\n", xname);
                if_statinc_ref(ifp, nsr, if_oerrors);
                r |= 1;
        }

        if (why & QE_CR_STAT_ERETRIES) {
                printf("%s: excessive tx retries\n", xname);
                if_statinc_ref(ifp, nsr, if_oerrors);
                r |= 1;
                rst = 1;
        }


        if (why & QE_CR_STAT_LCOLL) {
                printf("%s: late tx transmission\n", xname);
                if_statinc_ref(ifp, nsr, if_oerrors);
                r |= 1;
                rst = 1;
        }

        if (why & QE_CR_STAT_FUFLOW) {
                printf("%s: tx fifo underflow\n", xname);
                if_statinc_ref(ifp, nsr, if_oerrors);
                r |= 1;
                rst = 1;
        }

        if (why & QE_CR_STAT_JERROR) {
                printf("%s: jabber seen\n", xname);
                r |= 1;
        }

        if (why & QE_CR_STAT_BERROR) {
                printf("%s: babble seen\n", xname);
                r |= 1;
        }

        if (why & QE_CR_STAT_TCCOFLOW) {
                if_statadd_ref(ifp, nsr, if_collisions, 256);
                if_statadd_ref(ifp, nsr, if_oerrors, 256);
                r |= 1;
        }

        if (why & QE_CR_STAT_TXDERROR) {
                printf("%s: tx descriptor is bad\n", xname);
                rst = 1;
                r |= 1;
        }

        if (why & QE_CR_STAT_TXLERR) {
                printf("%s: tx late error\n", xname);
                if_statinc_ref(ifp, nsr, if_oerrors);
                rst = 1;
                r |= 1;
        }

        if (why & QE_CR_STAT_TXPERR) {
                printf("%s: tx DMA parity error\n", xname);
                if_statinc_ref(ifp, nsr, if_oerrors);
                rst = 1;
                r |= 1;
        }

        if (why & QE_CR_STAT_TXSERR) {
                printf("%s: tx DMA sbus error ack\n", xname);
                if_statinc_ref(ifp, nsr, if_oerrors);
                rst = 1;
                r |= 1;
        }

        if (why & QE_CR_STAT_RCCOFLOW) {
                if_statadd_ref(ifp, nsr, if_collisions, 256);
                if_statadd_ref(ifp, nsr, if_ierrors, 256);
                r |= 1;
        }

        if (why & QE_CR_STAT_RUOFLOW) {
                if_statadd_ref(ifp, nsr, if_ierrors, 256);
                r |= 1;
        }

        if (why & QE_CR_STAT_MCOFLOW) {
                if_statadd_ref(ifp, nsr, if_ierrors, 256);
                r |= 1;
        }

        if (why & QE_CR_STAT_RXFOFLOW) {
                printf("%s: rx fifo overflow\n", xname);
                if_statinc_ref(ifp, nsr, if_ierrors);
                r |= 1;
        }

        if (why & QE_CR_STAT_RLCOLL) {
                printf("%s: rx late collision\n", xname);
                if_statinc_ref(ifp, nsr, if_ierrors);
                if_statinc_ref(ifp, nsr, if_collisions);
                r |= 1;
        }

        if (why & QE_CR_STAT_FCOFLOW) {
                if_statadd_ref(ifp, nsr, if_ierrors, 256);
                r |= 1;
        }

        if (why & QE_CR_STAT_CECOFLOW) {
                if_statadd_ref(ifp, nsr, if_ierrors, 256);
                r |= 1;
        }

        if (why & QE_CR_STAT_RXDROP) {
                printf("%s: rx packet dropped\n", xname);
                if_statinc_ref(ifp, nsr, if_ierrors);
                r |= 1;
        }

        if (why & QE_CR_STAT_RXSMALL) {
                printf("%s: rx buffer too small\n", xname);
                if_statinc_ref(ifp, nsr, if_ierrors);
                r |= 1;
                rst = 1;
        }

        if (why & QE_CR_STAT_RXLERR) {
                printf("%s: rx late error\n", xname);
                if_statinc_ref(ifp, nsr, if_ierrors);
                r |= 1;
                rst = 1;
        }

        if (why & QE_CR_STAT_RXPERR) {
                printf("%s: rx DMA parity error\n", xname);
                if_statinc_ref(ifp, nsr, if_ierrors);
                r |= 1;
                rst = 1;
        }

        if (why & QE_CR_STAT_RXSERR) {
                printf("%s: rx DMA sbus error ack\n", xname);
                if_statinc_ref(ifp, nsr, if_ierrors);
                r |= 1;
                rst = 1;
        }

        IF_STAT_PUTREF(ifp);

        if (r == 0)
                aprint_error_dev(self, "unexpected interrupt error: %08x\n",
                        why);

        if (rst) {
                printf("%s: resetting...\n", xname);
                qereset(sc);
                return (-1);
        }

        return (r);
}

int
qeioctl(struct ifnet *ifp, u_long cmd, void *data)
{
        struct qe_softc *sc = ifp->if_softc;
        struct ifaddr *ifa = data;
        int s, error = 0;

        s = splnet();

        switch (cmd) {
        case SIOCINITIFADDR:
                ifp->if_flags |= IFF_UP;
                qeinit(sc);
                switch (ifa->ifa_addr->sa_family) {
#ifdef INET
                case AF_INET:
                        arp_ifinit(ifp, ifa);
                        break;
#endif /* INET */
                default:
                        break;
                }
                break;

        case SIOCSIFFLAGS:
                if ((error = ifioctl_common(ifp, cmd, data)) != 0)
                        break;
                /* XXX re-use ether_ioctl() */
                switch (ifp->if_flags & (IFF_UP | IFF_RUNNING)) {
                case IFF_RUNNING:
                        /*
                         * If interface is marked down and it is running, then
                         * stop it.
                         */
                        qestop(sc);
                        ifp->if_flags &= ~IFF_RUNNING;
                        break;
                case IFF_UP:
                        /*
                         * If interface is marked up and it is stopped, then
                         * start it.
                         */
                        qeinit(sc);
                        break;
                default:
                        /*
                         * Reset the interface to pick up changes in any other
                         * flags that affect hardware registers.
                         */
                        qestop(sc);
                        qeinit(sc);
                        break;
                }
#ifdef QEDEBUG
                sc->sc_debug = (ifp->if_flags & IFF_DEBUG) != 0 ? 1 : 0;
#endif
                break;

        case SIOCADDMULTI:
        case SIOCDELMULTI:
                if ((error = ether_ioctl(ifp, cmd, data)) == ENETRESET) {
                        /*
                         * Multicast list has changed; set the hardware filter
                         * accordingly.
                         */
                        if (ifp->if_flags & IFF_RUNNING)
                                qe_mcreset(sc);
                        error = 0;
                }
                break;

        default:
                error = ether_ioctl(ifp, cmd, data);
                break;
        }

        splx(s);
        return (error);
}


void
qeinit(struct qe_softc *sc)
{
        struct ifnet *ifp = &sc->sc_ethercom.ec_if;
        bus_space_tag_t t = sc->sc_bustag;
        bus_space_handle_t cr = sc->sc_cr;
        bus_space_handle_t mr = sc->sc_mr;
        struct qec_softc *qec = sc->sc_qec;
        uint32_t qecaddr;
        uint8_t *ea;
        int s;

#if defined(SUN4U) || defined(__GNUC__)
        (void)&t;
#endif
        s = splnet();

        qestop(sc);

        /*
         * Allocate descriptor ring and buffers
         */
        qec_meminit(&sc->sc_rb, QE_PKT_BUF_SZ);

        /* Channel registers: */
        bus_space_write_4(t, cr, QE_CRI_RXDS, (uint32_t)sc->sc_rb.rb_rxddma);
        bus_space_write_4(t, cr, QE_CRI_TXDS, (uint32_t)sc->sc_rb.rb_txddma);

        bus_space_write_4(t, cr, QE_CRI_RIMASK, 0);
        bus_space_write_4(t, cr, QE_CRI_TIMASK, 0);
        bus_space_write_4(t, cr, QE_CRI_QMASK, 0);
        bus_space_write_4(t, cr, QE_CRI_MMASK, QE_CR_MMASK_RXCOLL);
        bus_space_write_4(t, cr, QE_CRI_CCNT, 0);
        bus_space_write_4(t, cr, QE_CRI_PIPG, 0);

        qecaddr = sc->sc_channel * qec->sc_msize;
        bus_space_write_4(t, cr, QE_CRI_RXWBUF, qecaddr);
        bus_space_write_4(t, cr, QE_CRI_RXRBUF, qecaddr);
        bus_space_write_4(t, cr, QE_CRI_TXWBUF, qecaddr + qec->sc_rsize);
        bus_space_write_4(t, cr, QE_CRI_TXRBUF, qecaddr + qec->sc_rsize);

        /* MACE registers: */
        bus_space_write_1(t, mr, QE_MRI_PHYCC, QE_MR_PHYCC_ASEL);
        bus_space_write_1(t, mr, QE_MRI_XMTFC, QE_MR_XMTFC_APADXMT);
        bus_space_write_1(t, mr, QE_MRI_RCVFC, 0);

        /*
         * Mask MACE's receive interrupt, since we're being notified
         * by the QEC after DMA completes.
         */
        bus_space_write_1(t, mr, QE_MRI_IMR,
                          QE_MR_IMR_CERRM | QE_MR_IMR_RCVINTM);

        bus_space_write_1(t, mr, QE_MRI_BIUCC,
                          QE_MR_BIUCC_BSWAP | QE_MR_BIUCC_64TS);

        bus_space_write_1(t, mr, QE_MRI_FIFOFC,
                          QE_MR_FIFOCC_TXF16 | QE_MR_FIFOCC_RXF32 |
                          QE_MR_FIFOCC_RFWU | QE_MR_FIFOCC_TFWU);

        bus_space_write_1(t, mr, QE_MRI_PLSCC, QE_MR_PLSCC_TP);

        /*
         * Station address
         */
        ea = sc->sc_enaddr;
        bus_space_write_1(t, mr, QE_MRI_IAC,
                          QE_MR_IAC_ADDRCHG | QE_MR_IAC_PHYADDR);
        bus_space_write_multi_1(t, mr, QE_MRI_PADR, ea, 6);

        /* Apply media settings */
        qe_ifmedia_upd(ifp);

        /*
         * Clear Logical address filter
         */
        bus_space_write_1(t, mr, QE_MRI_IAC,
                          QE_MR_IAC_ADDRCHG | QE_MR_IAC_LOGADDR);
        bus_space_set_multi_1(t, mr, QE_MRI_LADRF, 0, 8);
        bus_space_write_1(t, mr, QE_MRI_IAC, 0);

        /* Clear missed packet count (register cleared on read) */
        (void)bus_space_read_1(t, mr, QE_MRI_MPC);

#if 0
        /* test register: */
        bus_space_write_1(t, mr, QE_MRI_UTR, 0);
#endif

        /* Reset multicast filter */
        qe_mcreset(sc);

        ifp->if_flags |= IFF_RUNNING;
        splx(s);
}

/*
 * Reset multicast filter.
 */
void
qe_mcreset(struct qe_softc *sc)
{
        struct ethercom *ec = &sc->sc_ethercom;
        struct ifnet *ifp = &sc->sc_ethercom.ec_if;
        bus_space_tag_t t = sc->sc_bustag;
        bus_space_handle_t mr = sc->sc_mr;
        struct ether_multi *enm;
        struct ether_multistep step;
        uint32_t crc;
        uint16_t hash[4];
        uint8_t octet, maccc, *ladrp = (uint8_t *)&hash[0];
        int i;

#if defined(SUN4U) || defined(__GNUC__)
        (void)&t;
#endif

        /* We also enable transmitter & receiver here */
        maccc = QE_MR_MACCC_ENXMT | QE_MR_MACCC_ENRCV;

        if (ifp->if_flags & IFF_PROMISC) {
                maccc |= QE_MR_MACCC_PROM;
                bus_space_write_1(t, mr, QE_MRI_MACCC, maccc);
                return;
        }

        if (ifp->if_flags & IFF_ALLMULTI) {
                bus_space_write_1(t, mr, QE_MRI_IAC,
                                  QE_MR_IAC_ADDRCHG | QE_MR_IAC_LOGADDR);
                bus_space_set_multi_1(t, mr, QE_MRI_LADRF, 0xff, 8);
                bus_space_write_1(t, mr, QE_MRI_IAC, 0);
                bus_space_write_1(t, mr, QE_MRI_MACCC, maccc);
                return;
        }

        hash[3] = hash[2] = hash[1] = hash[0] = 0;

        ETHER_LOCK(ec);
        ETHER_FIRST_MULTI(step, ec, enm);
        while (enm != NULL) {
                if (memcmp(enm->enm_addrlo, enm->enm_addrhi,
                         ETHER_ADDR_LEN) != 0) {
                        /*
                         * We must listen to a range of multicast
                         * addresses. For now, just accept all
                         * multicasts, rather than trying to set only
                         * those filter bits needed to match the range.
                         * (At this time, the only use of address
                         * ranges is for IP multicast routing, for
                         * which the range is big enough to require
                         * all bits set.)
                         */
                        bus_space_write_1(t, mr, QE_MRI_IAC,
                                 QE_MR_IAC_ADDRCHG | QE_MR_IAC_LOGADDR);
                        bus_space_set_multi_1(t, mr, QE_MRI_LADRF, 0xff, 8);
                        bus_space_write_1(t, mr, QE_MRI_IAC, 0);
                        ifp->if_flags |= IFF_ALLMULTI;
                        break;
                }

                crc = ether_crc32_le(enm->enm_addrlo, ETHER_ADDR_LEN);
                crc >>= 26;
                hash[crc >> 4] |= 1 << (crc & 0xf);
                ETHER_NEXT_MULTI(step, enm);
        }
        ETHER_UNLOCK(ec);

        /* We need to byte-swap the hash before writing to the chip. */
        for (i = 0; i < 7; i += 2) {
                octet = ladrp[i];
                ladrp[i] = ladrp[i + 1];
                ladrp[i + 1] = octet;
        }
        bus_space_write_1(t, mr, QE_MRI_IAC,
                          QE_MR_IAC_ADDRCHG | QE_MR_IAC_LOGADDR);
        bus_space_write_multi_1(t, mr, QE_MRI_LADRF, ladrp, 8);
        bus_space_write_1(t, mr, QE_MRI_IAC, 0);
        bus_space_write_1(t, mr, QE_MRI_MACCC, maccc);
}

/*
 * Get current media settings.
 */
void
qe_ifmedia_sts(struct ifnet *ifp, struct ifmediareq *ifmr)
{
        struct qe_softc *sc = ifp->if_softc;
        bus_space_tag_t t = sc->sc_bustag;
        bus_space_handle_t mr = sc->sc_mr;
        uint8_t v;

#if defined(SUN4U) || defined(__GNUC__)
        (void)&t;
#endif
        v = bus_space_read_1(t, mr, QE_MRI_PLSCC);

        switch (bus_space_read_1(t, mr, QE_MRI_PLSCC) & QE_MR_PLSCC_PORTMASK) {
        case QE_MR_PLSCC_TP:
                ifmr->ifm_active = IFM_ETHER | IFM_10_T;
                break;
        case QE_MR_PLSCC_AUI:
                ifmr->ifm_active = IFM_ETHER | IFM_10_5;
                break;
        case QE_MR_PLSCC_GPSI:
        case QE_MR_PLSCC_DAI:
                /* ... */
                break;
        }

        v = bus_space_read_1(t, mr, QE_MRI_PHYCC);
        ifmr->ifm_status |=  IFM_AVALID;
        if ((v & QE_MR_PHYCC_LNKFL) != 0)
                ifmr->ifm_status &= ~IFM_ACTIVE;
        else
                ifmr->ifm_status |=  IFM_ACTIVE;

}

/*
 * Set media options.
 */
int
qe_ifmedia_upd(struct ifnet *ifp)
{
        struct qe_softc *sc = ifp->if_softc;
        struct ifmedia *ifm = &sc->sc_ifmedia;
        bus_space_tag_t t = sc->sc_bustag;
        bus_space_handle_t mr = sc->sc_mr;
        int newmedia = ifm->ifm_media;
        uint8_t plscc, phycc;

#if defined(SUN4U) || defined(__GNUC__)
        (void)&t;
#endif
        if (IFM_TYPE(newmedia) != IFM_ETHER)
                return (EINVAL);

        plscc = bus_space_read_1(t, mr, QE_MRI_PLSCC) & ~QE_MR_PLSCC_PORTMASK;
        phycc = bus_space_read_1(t, mr, QE_MRI_PHYCC) & ~QE_MR_PHYCC_ASEL;

        if (IFM_SUBTYPE(newmedia) == IFM_AUTO)
                phycc |= QE_MR_PHYCC_ASEL;
        else if (IFM_SUBTYPE(newmedia) == IFM_10_T)
                plscc |= QE_MR_PLSCC_TP;
        else if (IFM_SUBTYPE(newmedia) == IFM_10_5)
                plscc |= QE_MR_PLSCC_AUI;

        bus_space_write_1(t, mr, QE_MRI_PLSCC, plscc);
        bus_space_write_1(t, mr, QE_MRI_PHYCC, phycc);

        return (0);
}