From 8e13ebc67bcd67cfa2b4919347318787135647dd Mon Sep 17 00:00:00 2001 From: Sascha Silbe Date: Tue, 19 Nov 2024 15:17:54 +0100 Subject: [PATCH] puya: add support for PY32F002B The PY32F002B series uses different DBGMCU IDCODE values and there does not seem to be a register containing RAM and flash size. While the procedure for preparing flash access (copying parameters from factory-programmed EPPARAx registers to flash peripheral registers) is the same, the bit allocation inside the registers is slightly different. The structure and values of the DBGMCU IDCODE register are undocumented but the vendor SDK splits it into DEV_ID and REV_ID fields. We use the DEV_ID fields of the IDCODE values observed on PY32F002AW15U and PY32F002BF15P6 to distinguish between the two families. An internet search shows that at least the PY32F002BW15 uses the same value as the PY32F002BF15P6. The full IDCODE values are retained as comments to make it easier to fix the code later if it turns out the DEV_ID/REV_ID split is incorrect. For PY32F002A the EPPARA4 PRETPE mask value was kept the same as before (14 bits). The Reference Manual has conflicting information about it: EPPARA4 26:16 (which are 11 bits) is supposed to contain PRETPE 11:0 (which are 12 bits). FLASH_PRETPE, which is documented as having to be initialised from the EPPARA4 value, has 14 bits for PRETPE. The official Keil Device Family Pack v1.2.1 from Puya uses the full upper 16 bit of EPPARA4 so presumably the reserved bits are simply 0 and using the full 14 bit mask is probably fine. --- src/target/puya.c | 179 ++++++++++++++++++++++++++++++++++++++-------- 1 file changed, 150 insertions(+), 29 deletions(-) diff --git a/src/target/puya.c b/src/target/puya.c index 236bbe0ff6c..98848d5ce14 100644 --- a/src/target/puya.c +++ b/src/target/puya.c @@ -42,10 +42,53 @@ #define PUYA_FLASH_START 0x08000000U #define PUYA_FLASH_PAGE_SIZE 128 -/* Pile of timing parameters needed to make sure flash works, - * see section "4.4. Flash configuration bytes" of the RM. +/* + * Pile of timing parameters needed to make sure flash works, see section "4.5. Flash configuration bytes" of the RM. */ -#define PUYA_FLASH_TIMING_CAL_BASE 0x1fff0f1cU +#define PUYA_FLASH_TIMING_CAL_PY32F002A_BASE 0x1fff0f1cU +#define PY32F002A_EPPARA0_TS0_SHIFT 0U +#define PY32F002A_EPPARA0_TS0_MASK 0xffU +#define PY32F002A_EPPARA0_TS3_SHIFT 8U +#define PY32F002A_EPPARA0_TS3_MASK 0xffU +#define PY32F002A_EPPARA0_TS1_SHIFT 16U +#define PY32F002A_EPPARA0_TS1_MASK 0x1ffU +#define PY32F002A_EPPARA1_TS2P_SHIFT 0U +#define PY32F002A_EPPARA1_TS2P_MASK 0xffU +#define PY32F002A_EPPARA1_TPS3_SHIFT 16U +#define PY32F002A_EPPARA1_TPS3_MASK 0x7ffU +#define PY32F002A_EPPARA2_PERTPE_SHIFT 0U +#define PY32F002A_EPPARA2_PERTPE_MASK 0x1ffffU +#define PY32F002A_EPPARA3_SMERTPE_SHIFT 0U +#define PY32F002A_EPPARA3_SMERTPE_MASK 0x1ffffU +#define PY32F002A_EPPARA4_PRGTPE_SHIFT 0U +#define PY32F002A_EPPARA4_PRGTPE_MASK 0xffffU +#define PY32F002A_EPPARA4_PRETPE_SHIFT 16U +/* This one is a bit of a mess. The PY32F002A Reference Manual says EPPARA4 26:16 (11 bit) are PRETPE[11:0] (12 + * bit). FLASH_PRETPE is 14 bit wide (0:13) and must be initialised from the value in EPPARA4. The PY32F002A flash + * driver (PY32F0xx_20.FLM) contained in the Keil Device Family Pack v1.2.1 provided by Puya stores the full upper 16 + * bits of EPPARA4 into FLASH_PRETPE. Presumably the reserved bits are 0. We use the width of FLASH_PRETPE (14 bits) + * for now. */ +#define PY32F002A_EPPARA4_PRETPE_MASK 0x3fffU +#define PUYA_FLASH_TIMING_CAL_PY32F002B_BASE 0x1fff011cU +#define PY32F002B_EPPARA0_TS0_SHIFT 0U +#define PY32F002B_EPPARA0_TS0_MASK 0x1ffU +#define PY32F002B_EPPARA0_TS3_SHIFT 9U +#define PY32F002B_EPPARA0_TS3_MASK 0x1ffU +#define PY32F002B_EPPARA0_TS1_SHIFT 18U +#define PY32F002B_EPPARA0_TS1_MASK 0x3ffU +#define PY32F002B_EPPARA1_TS2P_SHIFT 0U +#define PY32F002B_EPPARA1_TS2P_MASK 0x1ffU +#define PY32F002B_EPPARA1_TPS3_SHIFT 16U +#define PY32F002B_EPPARA1_TPS3_MASK 0xfffU +#define PY32F002B_EPPARA2_PERTPE_SHIFT 0U +#define PY32F002B_EPPARA2_PERTPE_MASK 0x3ffffU +#define PY32F002B_EPPARA3_SMERTPE_SHIFT 0U +#define PY32F002B_EPPARA3_SMERTPE_MASK 0x3ffffU +#define PY32F002B_EPPARA4_PRGTPE_SHIFT 0U +#define PY32F002B_EPPARA4_PRGTPE_MASK 0xffffU +#define PY32F002B_EPPARA4_PRETPE_SHIFT 16U +#define PY32F002B_EPPARA4_PRETPE_MASK 0x3fffU + /* This config word is undocumented, but the Puya-ISP boot code * uses it to determine the valid flash/ram size. * (yes, this *does* include undocumented free extra flash/ram in the 002A) @@ -99,6 +142,22 @@ /* DBG */ #define PUYA_DBG_BASE 0x40015800U #define PUYA_DBG_IDCODE (PUYA_DBG_BASE + 0x00U) +/* + * The format and values of the IDCODE register are undocumented but the vendor SDK splits IDCODE into 11:0 DEV_ID and + * 31:16 REV_ID. + */ +#define PUYA_DBG_IDCODE_DEV_ID_SHIFT 0U +#define PUYA_DBG_IDCODE_DEV_ID_MASK 0xfffU +#define PUYA_DBG_IDCODE_REV_ID_SHIFT 16U +#define PUYA_DBG_IDCODE_REV_ID_MASK 0xffffU + +/* On PY32F002AW15U an IDCODE value of 0x60001000 was observed */ +#define PUYA_DEV_ID_PY32F002A 0x000U +/* + * On PY32F002BF15P an IDCODE value of 0x20220064 was observed. Internet search shows the same value is used on + * PY32F002BW15. + */ +#define PUYA_DEV_ID_PY32F002B 0x064U /* * Flash functions @@ -114,18 +173,32 @@ bool puya_probe(target_s *target) size_t flash_size = 0U; const uint32_t dbg_idcode = target_mem32_read32(target, PUYA_DBG_IDCODE); - if ((dbg_idcode & 0xfffU) == 0) { + const uint16_t dev_id = (dbg_idcode >> PUYA_DBG_IDCODE_DEV_ID_SHIFT) & PUYA_DBG_IDCODE_DEV_ID_MASK; + switch (dev_id) { + case PUYA_DEV_ID_PY32F002A: { const uint32_t flash_ram_sz = target_mem32_read32(target, PUYA_FLASH_RAM_SZ); flash_size = (((flash_ram_sz >> PUYA_FLASH_SZ_SHIFT) & PUYA_FLASH_SZ_MASK) + 1) << PUYA_FLASH_UNIT_SHIFT; ram_size = (((flash_ram_sz >> PUYA_RAM_SZ_SHIFT) & PUYA_RAM_SZ_MASK) + 1) << PUYA_RAM_UNIT_SHIFT; - // TODO: which part families does this actually correspond to? - // Tested with a PY32F002AW15U which returns 0x60001000 in IDCODE - target->driver = "PY32Fxxx"; - } else { + target->driver = "PY32F002A"; + break; + } + case PUYA_DEV_ID_PY32F002B: + /* + * 0x1fff0ffc contains 0; did not find any other location that looks like it might contain the flash + * and RAM sizes. We'll hard-code the datasheet values for now. Both flash size and RAM size actually + * match the datasheet value, unlike PY32F002A which (sometimes?) has more RAM and flash than + * documented. + */ + flash_size = 24U * 1024U; + ram_size = 3U * 1024U; + target->driver = "PY32F002B"; + break; + default: DEBUG_TARGET("Unknown PY32 device %08" PRIx32 "\n", dbg_idcode); return false; } + target->part_id = dev_id; target_add_ram32(target, PUYA_RAM_START, ram_size); target_flash_s *flash = calloc(1, sizeof(*flash)); if (!flash) { /* calloc failed: heap exhaustion */ @@ -151,33 +224,81 @@ static bool puya_flash_prepare(target_flash_s *flash) target_mem32_write32(flash->t, PUYA_FLASH_KEYR, PUYA_FLASH_KEYR_KEY1); target_mem32_write32(flash->t, PUYA_FLASH_KEYR, PUYA_FLASH_KEYR_KEY2); - uint8_t hsi_fs = - (target_mem32_read32(flash->t, PUYA_RCC_ICSCR) >> PUYA_RCC_ICSCR_HSI_FS_SHIFT) & PUYA_RCC_ICSCR_HSI_FS_MASK; - if (hsi_fs > 4) - hsi_fs = 0; - DEBUG_TARGET("HSI frequency selection is %d\n", hsi_fs); - - const uint32_t eppara0 = target_mem32_read32(flash->t, PUYA_FLASH_TIMING_CAL_BASE + hsi_fs * 20 + 0); - const uint32_t eppara1 = target_mem32_read32(flash->t, PUYA_FLASH_TIMING_CAL_BASE + hsi_fs * 20 + 4); - const uint32_t eppara2 = target_mem32_read32(flash->t, PUYA_FLASH_TIMING_CAL_BASE + hsi_fs * 20 + 8); - const uint32_t eppara3 = target_mem32_read32(flash->t, PUYA_FLASH_TIMING_CAL_BASE + hsi_fs * 20 + 12); - const uint32_t eppara4 = target_mem32_read32(flash->t, PUYA_FLASH_TIMING_CAL_BASE + hsi_fs * 20 + 16); + target_s *target = flash->t; + uint32_t cal_base; + + switch (target->part_id) { + case PUYA_DEV_ID_PY32F002A: { + uint8_t hsi_fs = + (target_mem32_read32(flash->t, PUYA_RCC_ICSCR) >> PUYA_RCC_ICSCR_HSI_FS_SHIFT) & PUYA_RCC_ICSCR_HSI_FS_MASK; + if (hsi_fs > 4) + hsi_fs = 0; + DEBUG_TARGET("HSI frequency selection is %d\n", hsi_fs); + cal_base = PUYA_FLASH_TIMING_CAL_PY32F002A_BASE + hsi_fs * 20; + break; + } + case PUYA_DEV_ID_PY32F002B: + cal_base = PUYA_FLASH_TIMING_CAL_PY32F002B_BASE; + break; + default: + /* Should have never made it past probe */ + DEBUG_TARGET("Unknown PY32 device %08" PRIx32 "\n", target->part_id); + return false; + } + + const uint32_t eppara0 = target_mem32_read32(flash->t, cal_base + 0); + const uint32_t eppara1 = target_mem32_read32(flash->t, cal_base + 4); + const uint32_t eppara2 = target_mem32_read32(flash->t, cal_base + 8); + const uint32_t eppara3 = target_mem32_read32(flash->t, cal_base + 12); + const uint32_t eppara4 = target_mem32_read32(flash->t, cal_base + 16); DEBUG_TARGET("PY32 flash timing cal 0: %08" PRIx32 "\n", eppara0); DEBUG_TARGET("PY32 flash timing cal 1: %08" PRIx32 "\n", eppara1); DEBUG_TARGET("PY32 flash timing cal 2: %08" PRIx32 "\n", eppara2); DEBUG_TARGET("PY32 flash timing cal 3: %08" PRIx32 "\n", eppara3); DEBUG_TARGET("PY32 flash timing cal 4: %08" PRIx32 "\n", eppara4); - target_mem32_write32(flash->t, PUYA_FLASH_TS0, eppara0 & 0xffU); - target_mem32_write32(flash->t, PUYA_FLASH_TS1, (eppara0 >> 16U) & 0x1ffU); - target_mem32_write32(flash->t, PUYA_FLASH_TS3, (eppara0 >> 8U) & 0xffU); - target_mem32_write32(flash->t, PUYA_FLASH_TS2P, eppara1 & 0xffU); - target_mem32_write32(flash->t, PUYA_FLASH_TPS3, (eppara1 >> 16U) & 0x7ffU); - target_mem32_write32(flash->t, PUYA_FLASH_PERTPE, eppara2 & 0x1ffffU); - target_mem32_write32(flash->t, PUYA_FLASH_SMERTPE, eppara3 & 0x1ffffU); - target_mem32_write32(flash->t, PUYA_FLASH_PRGTPE, eppara4 & 0xffffU); - target_mem32_write32(flash->t, PUYA_FLASH_PRETPE, (eppara4 >> 16U) & 0x3fffU); - + switch (target->part_id) { + case PUYA_DEV_ID_PY32F002A: + target_mem32_write32(flash->t, PUYA_FLASH_TS0, + (eppara0 >> PY32F002A_EPPARA0_TS0_SHIFT) & PY32F002A_EPPARA0_TS0_MASK); + target_mem32_write32(flash->t, PUYA_FLASH_TS1, + (eppara0 >> PY32F002A_EPPARA0_TS1_SHIFT) & PY32F002A_EPPARA0_TS1_MASK); + target_mem32_write32(flash->t, PUYA_FLASH_TS3, + (eppara0 >> PY32F002A_EPPARA0_TS3_SHIFT) & PY32F002A_EPPARA0_TS3_MASK); + target_mem32_write32(flash->t, PUYA_FLASH_TS2P, + (eppara1 >> PY32F002A_EPPARA1_TS2P_SHIFT) & PY32F002A_EPPARA1_TS2P_MASK); + target_mem32_write32(flash->t, PUYA_FLASH_TPS3, + (eppara1 >> PY32F002A_EPPARA1_TPS3_SHIFT) & PY32F002A_EPPARA1_TPS3_MASK); + target_mem32_write32(flash->t, PUYA_FLASH_PERTPE, + (eppara2 >> PY32F002A_EPPARA2_PERTPE_SHIFT) & PY32F002A_EPPARA2_PERTPE_MASK); + target_mem32_write32(flash->t, PUYA_FLASH_SMERTPE, + (eppara3 >> PY32F002A_EPPARA3_SMERTPE_SHIFT) & PY32F002A_EPPARA3_SMERTPE_MASK); + target_mem32_write32(flash->t, PUYA_FLASH_PRGTPE, + (eppara4 >> PY32F002A_EPPARA4_PRGTPE_SHIFT) & PY32F002A_EPPARA4_PRGTPE_MASK); + target_mem32_write32(flash->t, PUYA_FLASH_PRETPE, + (eppara4 >> PY32F002A_EPPARA4_PRETPE_SHIFT) & PY32F002A_EPPARA4_PRETPE_MASK); + break; + case PUYA_DEV_ID_PY32F002B: + target_mem32_write32(flash->t, PUYA_FLASH_TS0, + (eppara0 >> PY32F002B_EPPARA0_TS0_SHIFT) & PY32F002B_EPPARA0_TS0_MASK); + target_mem32_write32(flash->t, PUYA_FLASH_TS1, + (eppara0 >> PY32F002B_EPPARA0_TS1_SHIFT) & PY32F002B_EPPARA0_TS1_MASK); + target_mem32_write32(flash->t, PUYA_FLASH_TS3, + (eppara0 >> PY32F002B_EPPARA0_TS3_SHIFT) & PY32F002B_EPPARA0_TS3_MASK); + target_mem32_write32(flash->t, PUYA_FLASH_TS2P, + (eppara1 >> PY32F002B_EPPARA1_TS2P_SHIFT) & PY32F002B_EPPARA1_TS2P_MASK); + target_mem32_write32(flash->t, PUYA_FLASH_TPS3, + (eppara1 >> PY32F002B_EPPARA1_TPS3_SHIFT) & PY32F002B_EPPARA1_TPS3_MASK); + target_mem32_write32(flash->t, PUYA_FLASH_PERTPE, + (eppara2 >> PY32F002B_EPPARA2_PERTPE_SHIFT) & PY32F002B_EPPARA2_PERTPE_MASK); + target_mem32_write32(flash->t, PUYA_FLASH_SMERTPE, + (eppara3 >> PY32F002B_EPPARA3_SMERTPE_SHIFT) & PY32F002B_EPPARA3_SMERTPE_MASK); + target_mem32_write32(flash->t, PUYA_FLASH_PRGTPE, + (eppara4 >> PY32F002B_EPPARA4_PRGTPE_SHIFT) & PY32F002B_EPPARA4_PRGTPE_MASK); + target_mem32_write32(flash->t, PUYA_FLASH_PRETPE, + (eppara4 >> PY32F002B_EPPARA4_PRETPE_SHIFT) & PY32F002B_EPPARA4_PRETPE_MASK); + break; + } return true; }