MC9S12C Family MC9S12GC Family Reference Manual: HCS12 Microcontrollers
MC9S12C Family MC9S12GC Family Reference Manual: HCS12 Microcontrollers
MC9S12C Family MC9S12GC Family Reference Manual: HCS12 Microcontrollers
HCS12 Microcontrollers
05/2007
freescale.com
To provide the most up-to-date information, the revision of our documents on the World Wide Web will be the most current. Your printed copy may be an earlier revision. To verify you have the latest information available, refer to: http://freescale.com/ A full list of family members and options is included in the appendices. The following revision history table summarizes changes contained in this document. This document contains information for all constituent modules, with the exception of the S12 CPU. For S12 CPU information please refer to the CPU S12 Reference Manual.
Revision History
Date June, 2005 July, 2005 Revision Level 01.14 01.15 New Book Removed 16MHz option for 128K, 96K and 64K versions Minor corrections following review Added outstanding ash module descriptions Added EPP package options Corrected and Enhanced recommended PCB layouts Added note to PIM block diagram gure Added PIM rerouting information to 80-pin package diagram Modied LVI levels in electrical parameter section Corrected TSCR2 typo in timer register listing Cleaned up Device Overview Section Added 0M66G to PartID table Added units to MSCAN timing parameter table Corrected missing overbars on pin names Corrected CRGFLG contents in register summary Removed non existing part number options Removed unintended symbol fonts from table A6 Updated ATD section Corrected typos Description
Oct, 2005 Dec, 2005 Dec, 2005 Jan, 2006 Mar, 2006 May, 2006
Dec, 2006
01.22
May, 2007
01.23
Chapter 1 Chapter 2 Chapter 3 Chapter 4 Chapter 5 Chapter 6 Chapter 7 Chapter 8 Chapter 9 Chapter 10 Chapter 11 Chapter 12 Chapter 13 Chapter 14 Chapter 15 Chapter 16 Chapter 17 Chapter 18 Chapter 19 Chapter 20 Chapter 21
MC9S12C and MC9S12GC Device Overview (MC9S12C128) . 17 Port Integration Module (PIM9C32) . . . . . . . . . . . . . . . . . . . . . 73 Module Mapping Control (MMCV4) . . . . . . . . . . . . . . . . . . . . 109 Multiplexed External Bus Interface (MEBIV3) . . . . . . . . . . . . 129 Interrupt (INTV1) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157 Background Debug Module (BDMV4) . . . . . . . . . . . . . . . . . . 165 Debug Module (DBGV1) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191 Analog-to-Digital Converter (ATD10B8C) . . . . . . . . . . . . . . . 223 Clocks and Reset Generator (CRGV4) . . . . . . . . . . . . . . . . . . 251 Scalable Controller Area Network (S12MSCANV2) . . . . . . . . 287 Oscillator (OSCV2) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 343 Pulse-Width Modulator (PWM8B6CV1) . . . . . . . . . . . . . . . . . 347 Serial Communications Interface (S12SCIV2) . . . . . . . . . . . . 383 Serial Peripheral Interface (SPIV3) . . . . . . . . . . . . . . . . . . . . 413 Timer Module (TIM16B8CV1) . . . . . . . . . . . . . . . . . . . . . . . . . 435 Dual Output Voltage Regulator (VREG3V3V2) . . . . . . . . . . . 461 16 Kbyte Flash Module (S12FTS16KV1) . . . . . . . . . . . . . . . . . 469 32 Kbyte Flash Module (S12FTS32KV1) . . . . . . . . . . . . . . . . . 507 64 Kbyte Flash Module (S12FTS64KV4) . . . . . . . . . . . . . . . . . 541 96 Kbyte Flash Module (S12FTS96KV1) . . . . . . . . . . . . . . . . . 579 128 Kbyte Flash Module (S12FTS128K1V1) . . . . . . . . . . . . . . 617
Appendix A Electrical Characteristics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 651 Appendix B Emulation Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 683 Appendix C Package Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 685 Appendix D Derivative Differences . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 689
Freescale Semiconductor
Freescale Semiconductor
1.2
1.3
1.4 1.5
1.6
1.7
1.8
Freescale Semiconductor
2.2 2.3
2.4
2.5 2.6
2.7
2.1.2 Block Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74 Signal Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76 Memory Map and Registers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 2.3.1 Module Memory Map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 2.3.2 Register Descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80 Functional Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104 2.4.1 Registers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104 2.4.2 Port Descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105 2.4.3 Port A, B, E and BKGD Pin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107 2.4.4 External Pin Descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107 2.4.5 Low Power Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107 Initialization Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107 2.5.1 Reset Initialization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107 Interrupts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108 2.6.1 Interrupt Sources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108 2.6.2 Recovery from STOP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108 Application Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
3.2 3.3
3.4
4.2 4.3
4.4
Freescale Semiconductor
4.4.3 Modes of Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151 4.4.4 Internal Visibility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156 4.4.5 Low-Power Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156
5.2 5.3
5.7
6.2
6.3
6.4
Freescale Semiconductor
Instruction Tracing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187 Instruction Tagging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188 Serial Communication Time-Out . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188 Operation in Wait Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189 Operation in Stop Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189
7.2 7.3
7.4
7.5 7.6
8.2
8.3
Freescale Semiconductor
8.4
8.5
8.6 8.7
Functional Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245 8.4.1 Analog Sub-block . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245 8.4.2 Digital Sub-block . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246 Initialization/Application Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247 8.5.1 Setting up and starting an A/D conversion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247 8.5.2 Aborting an A/D conversion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 248 Resets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 248 Interrupts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 249
9.2
9.3
9.4
9.5
9.6
Freescale Semiconductor
10
Freescale Semiconductor
12.2
12.3
12.4
12.5 12.6
12.1.1 Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 347 12.1.2 Modes of Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 347 12.1.3 Block Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348 External Signal Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348 12.2.1 PWM5 Pulse Width Modulator Channel 5 Pin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348 12.2.2 PWM4 Pulse Width Modulator Channel 4 Pin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348 12.2.3 PWM3 Pulse Width Modulator Channel 3 Pin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348 12.2.4 PWM2 Pulse Width Modulator Channel 2 Pin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 349 12.2.5 PWM1 Pulse Width Modulator Channel 1 Pin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 349 12.2.6 PWM0 Pulse Width Modulator Channel 0 Pin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 349 Memory Map and Register Denition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 349 12.3.1 Module Memory Map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 349 12.3.2 Register Descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 351 Functional Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 371 12.4.1 PWM Clock Select . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 371 12.4.2 PWM Channel Timers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 374 Resets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 381 Interrupts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 381
Freescale Semiconductor
11
12
Freescale Semiconductor
15.3
15.4
15.5 15.6
15.2.8 IOC0 Input Capture and Output Compare Channel 0 Pin . . . . . . . . . . . . . . . . . . . . 439 Memory Map and Register Denition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 439 15.3.1 Module Memory Map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 439 15.3.2 Register Descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 441 Functional Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 455 15.4.1 Prescaler . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 456 15.4.2 Input Capture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 457 15.4.3 Output Compare . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 457 15.4.4 Pulse Accumulator . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 457 15.4.5 Event Counter Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 458 15.4.6 Gated Time Accumulation Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 458 Resets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 458 Interrupts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 458 15.6.1 Channel [7:0] Interrupt (C[7:0]F) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 459 15.6.2 Pulse Accumulator Input Interrupt (PAOVI) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 459 15.6.3 Pulse Accumulator Overow Interrupt (PAOVF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 459 15.6.4 Timer Overow Interrupt (TOF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 459
Freescale Semiconductor
13
14
Freescale Semiconductor
19.1.3 Modes of Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 542 19.1.4 Block Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 542 19.2 External Signal Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 543 19.3 Memory Map and Registers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 543 19.3.1 Module Memory Map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 543 19.3.2 Register Descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 549 19.4 Functional Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 561 19.4.1 Flash Command Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 561 19.4.2 Operating Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 575 19.4.3 Flash Module Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 575 19.4.4 Flash Reset Sequence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 577 19.4.5 Interrupts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 577
Freescale Semiconductor
15
Operating Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 648 Flash Module Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 648 Flash Reset Sequence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 650 Interrupts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 650
16
Freescale Semiconductor
1.1.1
Features
16-bit HCS12 core: HCS12 CPU Upward compatible with M68HC11 instruction set Interrupt stacking and programmers model identical to M68HC11 Instruction queue Enhanced indexed addressing MMC (memory map and interface) INT (interrupt control) BDM (background debug mode) DBG12 (enhanced debug12 module, including breakpoints and change-of-ow trace buffer) MEBI (multiplexed expansion bus interface) available only in 80-pin package version Wake-up interrupt inputs: Up to 12 port bits available for wake up interrupt function with digital ltering
Freescale Semiconductor
17
Memory options: 16K or 32Kbyte Flash EEPROM (erasable in 512-byte sectors) 64K, 96K, or 128Kbyte Flash EEPROM (erasable in 1024-byte sectors) 1K, 2K or 4K Byte RAM Analog-to-digital converters: One 8-channel module with 10-bit resolution External conversion trigger capability Available on MC9S12C Family: One 1M bit per second, CAN 2.0 A, B software compatible module Five receive and three transmit buffers Flexible identier lter programmable as 2 x 32 bit, 4 x 16 bit, or 8 x 8 bit Four separate interrupt channels for Rx, Tx, error, and wake-up Low-pass lter wake-up function Loop-back for self test operation Timer module (TIM): 8-channel timer Each channel congurable as either input capture or output compare Simple PWM mode Modulo reset of timer counter 16-bit pulse accumulator External event counting Gated time accumulation PWM module: Programmable period and duty cycle 8-bit 6-channel or 16-bit 3-channel Separate control for each pulse width and duty cycle Center-aligned or left-aligned outputs Programmable clock select logic with a wide range of frequencies Fast emergency shutdown input Serial interfaces: One asynchronous serial communications interface (SCI) One synchronous serial peripheral interface (SPI) CRG (clock reset generator module) Windowed COP watchdog Real time interrupt Clock monitor Pierce or low current Colpitts oscillator Phase-locked loop clock frequency multiplier Limp home mode in absence of external clock Low power 0.5MHz to 16MHz crystal oscillator reference clock
18
Freescale Semiconductor
Operating frequency: 32MHz equivalent to 16MHz bus speed for single chip 32MHz equivalent to 16MHz bus speed in expanded bus modes Option of 9S12C Family: 50MHz equivalent to 25MHz bus speed All 9S12GC Family members allow a 50MHz operating frequency. Internal 2.5V regulator: Supports an input voltage range from 2.97V to 5.5V Low power mode capability Includes low voltage reset (LVR) circuitry Includes low voltage interrupt (LVI) circuitry 48-pin LQFP, 52-pin LQFP, or 80-pin QFP package: Up to 58 I/O lines with 5V input and drive capability (80-pin package) Up to 2 dedicated 5V input only lines (IRQ, XIRQ) 5V 8 A/D converter inputs and 5V I/O Development support: Single-wire background debug mode (BDM) On-chip hardware breakpoints Enhanced DBG12 debug features
1.1.2
Modes of Operation
User modes (expanded modes are only available in the 80-pin package version). Normal and emulation operating modes: Normal single-chip mode Normal expanded wide mode Normal expanded narrow mode Emulation expanded wide mode Emulation expanded narrow mode Special operating modes: Special single-chip mode with active background debug mode Special test mode (Freescale use only) Special peripheral mode (Freescale use only) Low power modes: Stop mode Pseudo stop mode Wait mode
Freescale Semiconductor
19
1.1.3
VSSR VDDR VDDX VSSX
Block Diagram
VDDA VSSA VRH VRL ATD VDD2 VSS2 VDD1 VSS1 BKGD XFC VDDPLL VSSPLL EXTAL XTAL RESET PE0 PE1 PE2 PE3 PE4 PE5 PE6 PE7 16K, 32K, 64K, 96K, 128K Byte Flash 1K, 2K, 4K Byte RAM MODC/TAGHI BDM HCS12 CPU Timer Module COP Watchdog Clock Monitor Periodic Interrupt IOC0 IOC1 IOC2 IOC3 IOC4 IOC5 IOC6 IOC7 PW0 PW1 PW2 PW3 PW4 PW5 AN0 AN1 AN2 AN3 AN4 AN5 AN6 AN7 VDDA VSSA VRH VRL PAD0 PAD1 PAD2 PAD3 PAD4 PAD5 PAD6 PAD7 PT0 PT1 PT2 PT3 PT4 PT5 PT6 PT7 PP0 PP1 PP2 PP3 PP4 PP5 PP6 PP7 PJ6 PJ7 PS0 PS1 PS2 PS3 PM0 PM1 PM2 PM3 PM4 PM5
Voltage Regulator
DDRAD DDRT Keypad Interrupt DDRP DDRJ DDRS DDRM Key Int
PLL
DDRE
PTE
PWM Module
SCI MSCAN is not available on the 9S12GC Family Members MSCAN SPI
RXD TXD
DDRA PTA PA7 PA6 PA5 PA4 PA3 PA2 PA1 PA0
DDRB PTB PB7 PB6 PB5 PB4 PB3 PB2 PB1 PB0
Signals shown in Bold are not available on the 52 or 48 Pin Package Signals shown in Bold Italic are available in the 52, but not the 48 Pin Package Voltage Regulator 5V & I/O VDDR VSSR
20
Freescale Semiconductor
PTAD
1.2
1.2.1
Table 1-1 shows the device register map after reset. Figure 1-4 through Figure 1-8 illustrate the full device memory map.
Table 1-1. Device Register Map Overview
Address 0x00000x0017 0x0018 0x0019 0x001A0x001B 0x001C0x001F 0x00200x002F 0x00300x0033 0x00340x003F 0x00400x006F 0x00700x007F 0x00800x009F 0x00A00x00C7 0x00D00x00D7 0x00E00x00FF 0x01000x010F 0x01100x013F 0x01400x017F 0x01800x023F 0x02400x027F Reserved Voltage regulator (VREG) Device ID register Core (MEMSIZ, IRQ, HPRIO) Core (DBG) Core (PPAGE(1)) Clock and reset generator (CRG) Standard timer module (TIM) Reserved Analog-to-digital converter (ATD) Reserved Reserved Pulse width modulator (PWM) Flash control register Reserved Scalable controller area network (MSCAN)(2) Reserved Port integration module (PIM) Module Core (ports A, B, E, modes, inits, test) Size 24 1 1 2 4 16 4 12 48 16 32 40 8 8 8 32 16 48 64 192 64
0x00C80x00CF Serial communications interface (SCI) 0x00D80x00DF Serial peripheral interface (SPI)
0x02800x03FF Reserved 384 1. External memory paging is not supported on this device (Section 1.7.1, PPAGE). 2. Not available on MC9S12GC Family devices
Freescale Semiconductor
21
1K Register Space PAGE MAP Mappable to any 2K Boundary 16K Fixed Flash EEPROM
0x3FFF 0x3000 0x3000 0x3FFF 0x4000 0x4000 4K Bytes RAM Mappable to any 4K Boundary
0x003D
0x003E
0x7FFF 0x8000 0x8000 16K Page Window 8 * 16K Flash EEPROM Pages
EXT
PPAGE
0xFFFF 0xFF00 0xFF00 0xFFFF VECTORS NORMAL SINGLE CHIP VECTORS EXPANDED VECTORS SPECIAL SINGLE CHIP 0xFFFF
The gure shows a useful map, which is not the map out of reset. After reset the map is: 0x00000x03FF: Register Space 0x00000x0FFF: 4K RAM (only 3K visible 0x04000x0FFF) Flash erase sector size is 1024 bytes
22
Freescale Semiconductor
1K Register Space PAGE MAP Mappable to any 2K Boundary 16K Fixed Flash EEPROM
0x3FFF 0x3000 0x3000 0x3FFF 0x4000 0x4000 4K Bytes RAM Mappable to any 4K Boundary
0x003D
0x003E
0x7FFF 0x8000 0x8000 16K Page Window 6 * 16K Flash EEPROM Pages
EXT
PPAGE
0xFFFF 0xFF00 0xFF00 0xFFFF VECTORS NORMAL SINGLE CHIP VECTORS EXPANDED VECTORS SPECIAL SINGLE CHIP 0xFFFF
The gure shows a useful map, which is not the map out of reset. After reset the map is: 0x00000x03FF: Register Space 0x00000x0FFF: 4K RAM (only 3K visible 0x04000x0FFF) Flash erase sector size is 1024 bytes
Freescale Semiconductor
23
1K Register Space PAGE MAP Mappable to any 2K Boundary 16K Fixed Flash EEPROM
0x3FFF 0x3000 0x3000 0x3FFF 0x4000 0x4000 4K Bytes RAM Mappable to any 4K Boundary
0x003D
0x003E
0x7FFF 0x8000 0x8000 16K Page Window 4 * 16K Flash EEPROM Pages
EXT
PPAGE
0xFFFF 0xFF00 0xFF00 0xFFFF VECTORS NORMAL SINGLE CHIP VECTORS EXPANDED VECTORS SPECIAL SINGLE CHIP 0xFFFF
The gure shows a useful map, which is not the map out of reset. After reset the map is: 0x00000x03FF: Register space 0x00000x0FFF: 4K RAM (only 3K visible 0x04000x0FFF) Flash erase sector size is 1024 Bytes
24
Freescale Semiconductor
0x3800
0x3800 0x3FFF
0x4000
0x003E
0x8000
EXT
PPAGE
0xFFFF 0xFF00 0xFF00 0xFFFF VECTORS NORMAL SINGLE CHIP VECTORS EXPANDED VECTORS SPECIAL SINGLE CHIP 0xFFFF
The gure shows a useful map, which is not the map out of reset. After reset the map is: 0x00000x03FF: Register space 0x08000x0FFF: 2K RAM Flash erase sector size is 512 bytes The flash page 0x003E is visible at 0x40000x7FFF in the memory map if ROMHM = 0. In the figure ROMHM = 1 removing page 0x003E from 0x40000x7FFF.
Freescale Semiconductor
25
0x3C00
0x3C00 0x3FFF
0x4000
EXT
0xFFFF 0xFF00 0xFF00 0xFFFF VECTORS NORMAL SINGLE CHIP VECTORS EXPANDED VECTORS SPECIAL SINGLE CHIP 0xFFFF
The gure shows a useful map, which is not the map out of reset. After reset the map is: 0x00000x03FF: Register Space 0x0C000x0FFF: 1K RAM The 16K ash array page 0x003F is also visible in the PPAGE window when PPAGE register contents are odd. Flash Erase Sector Size is 512 Bytes
26
Freescale Semiconductor
1.2.2
The detailed register map of the MC9S12C128 is listed in address order below. 0x00000x000F
Address 0x0000 0x0001 0x0002 0x0003 0x0004 0x0005 0x0006 0x0007 0x0008 0x0009 0x000A 0x000B 0x000C 0x000D 0x000E 0x000F Name PORTA PORTB DDRA DDRB Reserved Reserved Reserved Reserved PORTE DDRE PEAR MODE PUCR RDRIV EBICTL Reserved
6 6 0
5 5 PIPOE MODA 0 0 0 0
4 4 NECLK 0
3 3 LSTRE IVIS 0 0 0 0
2 Bit 2 RDWE 0 0 0 0 0
MODB 0 0 0 0
PUPEE RDPE 0 0
Freescale Semiconductor
27
0x00100x0014
Address 0x0010 0x0011 0x0012 0x0013 0x0014 Name INITRM INITRG INITEE MISC Reserved
EE15 0 0
EEON ROMON 0
EXSTR0 0
ROMHM 0
0x00150x0016
Address 0x0015 0x0016 Name ITCR ITEST
INTE
INTC
INTA
0x00170x0017
Address 0x0017 Name Reserved
0x00180x0018
Address 0x0018 Name Reserved
0x00190x0019
Address $0019 Name VREGCTRL
28
Freescale Semiconductor
0x001A0x001B
Address Name
0x001A 0x001B
PARTIDH PARTIDL
ID15 ID7
ID14 ID6
ID13 ID5
ID12 ID4
ID11 ID3
ID10 ID2
ID9 ID1
ID8 ID0
0x001C0x001D
Address 0x001C 0x001D Name MEMSIZ0 MEMSIZ1
reg_sw0
0 rom_sw0
eep_sw1 0
eep_sw0 0
0 0
ram_sw2 0
ram_sw1 pag_sw1
ram_sw0 pag_sw0
0x001E0x001E
Address 0x001E Name INTCR
IRQE
IRQEN
0x001F0x001F
Address 0x001F Name HPRIO
0x00200x002F
Address 0x0020 0x0021 0x0022 0x0023 0x0024 0x0025 Name DBGC1 DBGSC DBGTBH DBGTBL DBGCNT DBGCCX
EXTCMP
Freescale Semiconductor
29
0x00200x002F
Address 0x0026 0x0027 0x0028 0x0029 0x002A 0x002B 0x002C 0x002D 0x002E 0x002F Name DBGCCH DBGCCL DBGC2 BKPCT0 DBGC3 BKPCT1 DBGCAX BKP0X DBGCAH BKP0H DBGCAL BKP0L DBGCBX BKP1X DBGCBH BKP1H DBGCBL BKP1L
0x00300x0031
Address 0x0030 0x0031 Name PPAGE Reserved
0x00320x0033
Address 0x0032 0x0033 Name PORTK(1) DDRK1
Bit 7 0 0
Bit 6 0 0
Bit 5 0 0
Bit 4 0 0
Bit 3 0 0
Bit 2 0 0
Bit 1 0 0
Bit 0 0 0
1. Only applicable in special emulation-only bond outs, for emulation of extended memory map.
30
Freescale Semiconductor
0x00340x003F
Address 0x0034 0x0035 0x0036 0x0037 0x0038 0x0039 0x003A 0x003B 0x003C 0x003D 0x003E 0x003F Name SYNR REFDV CTFLG TEST ONLY CRGFLG CRGINT CLKSEL PLLCTL RTICTL COPCTL FORBYP TEST ONLY CTCTL TEST ONLY ARMCOP
PORF 0
LVRF 0
PLLWAI 0
RTR3 0 0 TCLT3 0 3
PLLBYP TCTL4 0 4
0x00400x006F
Address 0x0040 0x0041 0x0042 0x0043 0x0044 0x0045 0x0046 Name TIOS CFORC OC7M OC7D TCNT (hi) TCNT (lo) TSCR1
TIM (Sheet 1 of 3)
Bit 7 Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: IOS7 0 FOC7 OC7M7 OC7D7 Bit 15 Bit 7 Bit 6 IOS6 0 FOC6 OC7M6 OC7D6 14 6 Bit 5 IOS5 0 FOC5 OC7M5 OC7D5 13 5 Bit 4 IOS4 0 FOC4 OC7M4 OC7D4 12 4 Bit 3 IOS3 0 FOC3 OC7M3 OC7D3 11 3 0 Bit 2 IOS2 0 FOC2 OC7M2 OC7D2 10 2 0 Bit 1 IOS1 0 FOC1 OC7M1 OC7D1 9 1 0 Bit 0 IOS0 0 FOC0 OC7M0 OC7D0 Bit 8 Bit 0 0
TEN
TSWAI
TSFRZ
TFFCA
Freescale Semiconductor
31
0x00400x006F
Address 0x0047 0x0048 0x0049 0x004A 0x004B 0x004C 0x004D 0x004E 0x004F 0x0050 0x0051 0x0052 0x0053 0x0054 0x0055 0x0056 0x0057 0x0058 0x0059 0x005A 0x005B 0x005C 0x005D Name TTOV TCTL1 TCTL2 TCTL3 TCTL4 TIE TSCR2 TFLG1 TFLG2 TC0 (hi) TC0 (lo) TC1 (hi) TC1 (lo) TC2 (hi) TC2 (lo) TC3 (hi) TC3 (lo) TC4 (hi) TC4 (lo) TC5 (hi) TC5 (lo) TC6 (hi) TC6 (lo)
TIM (Sheet 2 of 3)
Bit 7 Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: TOV7 OM7 OM3 EDG7B EDG3B C7I TOI C7F TOF Bit 15 Bit 7 Bit 15 Bit 7 Bit 15 Bit 7 Bit 15 Bit 7 Bit 15 Bit 7 Bit 15 Bit 7 Bit 15 Bit 7 Bit 6 TOV6 OL7 OL3 EDG7A EDG3A C6I 0 Bit 5 TOV5 OM6 OM2 EDG6B EDG2B C5I 0 Bit 4 TOV4 OL6 OL2 EDG6A EDG2A C4I 0 Bit 3 TOV3 OM5 OM1 EDG5B EDG1B C3I TCRE C3F 0 Bit 2 TOV2 OL5 OL1 EDG5A EDG1A C2I PR2 C2F 0 Bit 1 TOV1 OM4 OM0 EDG4B EDG0B C1I PR1 C1F 0 Bit 0 TOV0 OL4 OL0 EDG4A EDG0A C0I PR0 C0F 0
C6F 0
C5F 0
C4F 0
14 6 14 6 14 6 14 6 14 6 14 6 14 6
13 5 13 5 13 5 13 5 13 5 13 5 13 5
12 4 12 4 12 4 12 4 12 4 12 4 12 4
11 3 11 3 11 3 11 3 11 3 11 3 11 3
10 2 10 2 10 2 10 2 10 2 10 2 10 2
9 1 9 1 9 1 9 1 9 1 9 1 9 1
Bit 8 Bit 0 Bit 8 Bit 0 Bit 8 Bit 0 Bit 8 Bit 0 Bit 8 Bit 0 Bit 8 Bit 0 Bit 8 Bit 0
32
Freescale Semiconductor
0x00400x006F
Address 0x005E 0x005F 0x0060 0x0061 0x0062 0x0063 0x0064 0x0065 0x0066 0x0067 0x0068 0x0069 0x006A 0x006B 0x006C 0x006D 0x006E 0x006F Name TC7 (hi) TC7 (lo) PACTL PAFLG PACNT (hi) PACNT (lo) Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved
TIM (Sheet 3 of 3)
Bit 7 Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Bit 15 Bit 7 0 0 Bit 6 14 6 PAEN 0 Bit 5 13 5 PAMOD 0 Bit 4 12 4 PEDGE 0 Bit 3 11 3 CLK1 0 Bit 2 10 2 CLK0 0 Bit 1 9 1 PAOVI PAOVF 9 1 0 0 0 0 0 0 0 0 0 0 0 0 Bit 0 Bit 8 Bit 0 PAI PAIF Bit 8 Bit 0 0 0 0 0 0 0 0 0 0 0 0 0
Bit 15 Bit 7 0 0 0 0 0 0 0 0 0 0 0 0
14 6 0 0 0 0 0 0 0 0 0 0 0 0
13 5 0 0 0 0 0 0 0 0 0 0 0 0
12 4 0 0 0 0 0 0 0 0 0 0 0 0
11 3 0 0 0 0 0 0 0 0 0 0 0 0
10 2 0 0 0 0 0 0 0 0 0 0 0 0
0x00700x007F
Address 0x0070 0x007F Name Reserved
Reserved
Bit 7 Read: Write: 0 Bit 6 0 Bit 5 0 Bit 4 0 Bit 3 0 Bit 2 0 Bit 1 0 Bit 0 0
Freescale Semiconductor
33
0x00800x009F
Address 0x0080 0x0081 0x0082 0x0083 0x0084 0x0085 0x0086 0x0087 0x0088 0x0089 0x008A 0x008B 0x008C 0x008D 0x008E 0x008F 0x0090 0x0091 0x0092 0x0093 0x0094 0x0095 Name ATDCTL0 ATDCTL1 ATDCTL2 ATDCTL3 ATDCTL4 ATDCTL5 ATDSTAT0 Reserved ATDTEST0 ATDTEST1 Reserved ATDSTAT1 Reserved ATDDIEN Reserved PORTAD ATDDR0H ATDDR0L ATDDR1H ATDDR1L ATDDR2H ATDDR2L
ADPU 0
SC 0 CCF0 0
5 0 5 13 0 13 0 13 0
4 0 4 12 0 12 0 12 0
3 0 3 11 0 11 0 11 0
2 0 2 10 0 10 0 10 0
1 0 1 9 0 9 0 9 0
34
Freescale Semiconductor
0x00800x009F
Address 0x0096 0x0097 0x0098 0x0099 0x009A 0x009B 0x009C 0x009D 0x009E 0x009F Name ATDDR3H ATDDR3L ATDDR4H ATDDR4L ATDDR5H ATDDR5L ATDDR6H ATDDR6L ATDDR7H ATDDR7L
0x00A00x00C7
Address Name
Reserved
Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
0x00A0 0x00C7
Reserved
Read: Write:
0x00C80x00CF
Address 0x00C8 0x00C9 0x00CA 0x00CB 0x00CC Name SCIBDH SCIBDL SCICR1 SCICR2 SCISR1
Freescale Semiconductor
35
0x00C80x00CF
Address 0x00CD 0x00CE 0x00CF Name SCISR2 SCIDRH SCIDRL
T8 R6 T6
0x00D00x00D7
Address 0x00D0 0x00D7 Name Reserved
Reserved
Bit 7 Read: Write: 0 Bit 6 0 Bit 5 0 Bit 4 0 Bit 3 0 Bit 2 0 Bit 1 0 Bit 0 0
0x00D80x00DF
Address 0x00D8 0x00D9 0x00DA 0x00DB 0x00DC 0x00DD 0x00DE 0x00DF Name SPICR1 SPICR2 SPIBR SPISR Reserved SPIDR Reserved Reserved
SPPR2 0 0
SPPR1 SPTEF 0
SPR2 0 0
Bit7 0 0
6 0 0
5 0 0
4 0 0
3 0 0
2 0 0
1 0 0
Bit0 0 0
36
Freescale Semiconductor
0x00E00x00FF
Address $00E0 $00E1 $00E2 $00E3 $00E4 $00E5 $00E6 $00E7 $00E8 $00E9 $00EA $00EB $00EC $00ED $00EE $00EF $00F0 $00F1 $00F2 $00F3 $00F4 $00F5 Name PWME PWMPOL PWMCLK PWMPRCLK PWMCAE PWMCTL PWMTST Test Only PWMPRSC PWMSCLA PWMSCLB PWMSCNTA PWMSCNTB PWMCNT0 PWMCNT1 PWMCNT2 PWMCNT3 PWMCNT4 PWMCNT5 PWMPER0 PWMPER1 PWMPER2 PWMPER3
PCKB2 0
CAE3 PSWAI 0 0
CON45 0 0
Bit 7 Bit 7 0 0 Bit 7 0 Bit 7 0 Bit 7 0 Bit 7 0 Bit 7 0 Bit 7 0 Bit 7 Bit 7 Bit 7 Bit 7
6 6 0 0 6 0 6 0 6 0 6 0 6 0 6 0 6 6 6 6
5 5 0 0 5 0 5 0 5 0 5 0 5 0 5 0 5 5 5 5
4 4 0 0 4 0 4 0 4 0 4 0 4 0 4 0 4 4 4 4
3 3 0 0 3 0 3 0 3 0 3 0 3 0 3 0 3 3 3 3
2 2 0 0 2 0 2 0 2 0 2 0 2 0 2 0 2 2 2 2
1 1 0 0 1 0 1 0 1 0 1 0 1 0 1 0 1 1 1 1
Bit 0 Bit 0 0 0 Bit 0 0 Bit 0 0 Bit 0 0 Bit 0 0 Bit 0 0 Bit 0 0 Bit 0 Bit 0 Bit 0 Bit 0
Freescale Semiconductor
37
0x00E00x00FF
Address $00F6 $00F7 $00F8 $00F9 $00FA $00FB $00FC $00FD $00FE $00FF Name PWMPER4 PWMPER5 PWMDTY0 PWMDTY1 PWMDTY2 PWMDTY3 PWMDTY4 PWMDTY5 Reserved Reserved
0 PWMLVL PWMRSTRT 0 0
PWM5INL PWM5ENA 0 0
0x01000x010F
Address 0x0100 0x0101 0x0102 0x0103 0x0104 0x0105 0x0106 0x0107 0x0108 0x0109 Name FCLKDIV FSEC FTSTMOD FCNFG FPROT FSTAT FCMD Reserved for Factory Test Reserved for Factory Test Reserved for Factory Test
WRALL 0
0 0
FPHS1 ACCERR 0 0 0 0
FPHS0 0 0 0 0 0
FPLS1 0 0 0 0 0
FPLS0 0
CMDB6 0 0 0
CMDB0 0 0 0
38
Freescale Semiconductor
0x01000x010F
Address 0x010A 0x010B 0x010C 0x010D 0x010E 0x010F Name Reserved for Factory Test Reserved for Factory Test Reserved Reserved Reserved Reserved
0x01100x013F
Address 0x0110 0x003F Name Reserved
Reserved
Bit 7 Read: Write: 0 Bit 6 0 Bit 5 0 Bit 4 0 Bit 3 0 Bit 2 0 Bit 1 0 Bit 0 0
0x01400x017F
Address 0x0140 0x0141 0x0142 0x0143 0x0144 0x0145 0x0146 0x0147 0x0148 0x0149 Name CANCTL0 CANCTL1 CANBTR0 CANBTR1 CANRFLG CANRIER CANTFLG CANTIER CANTARQ CANTAAK
Freescale Semiconductor
39
0x01400x017F
Address 0x014A Name CANTBSEL
Read: 0 0 0 0 0 TX2 TX1 TX0 Write: Read: 0 0 0 IDHIT2 IDHIT1 IDHIT0 0x014B CANIDAC IDAM1 IDAM0 Write: Read: 0 0 0 0 0 0 0 0 0x014C Reserved Write: Read: 0 0 0 0 0 0 0 0 0x014D Reserved Write: Read: RXERR7 RXERR6 RXERR5 RXERR4 RXERR3 RXERR2 RXERR1 RXERR0 0x014E CANRXERR Write: Read: TXERR7 TXERR6 TXERR5 TXERR4 TXERR3 TXERR2 TXERR1 TXERR0 0x014F CANTXERR Write: 0x0150 CANIDAR0 - Read: AC7 AC6 AC5 AC4 AC3 AC2 AC1 AC0 0x0153 CANIDAR3 Write: 0x0154 CANIDMR0 - Read: AM7 AM6 AM5 AM4 AM3 AM2 AM1 AM0 0x0157 CANIDMR3 Write: 0x0158 CANIDAR4 - Read: AC7 AC6 AC5 AC4 AC3 AC2 AC1 AC0 0x015B CANIDAR7 Write: 0x015C CANIDMR4 - Read: AM7 AM6 AM5 AM4 AM3 AM2 AM1 AM0 0x015F CANIDMR7 Write: Read: FOREGROUND RECEIVE BUFFER see Table 1-2 0x0160 CANRXFG 0x016F Write: Read: 0x0170 CANTXFG FOREGROUND TRANSMIT BUFFER see Table 1-2 0x017F Write: 1. Not available on the MC9S12GC Family members. Those memory locations should not be accessed.
Table 1-2. Detailed MSCAN Foreground Receive and Transmit Buffer Layout
Address Name Extended ID Standard ID CANxRIDR0 Extended ID Standard ID CANxRIDR1 Extended ID Standard ID CANxRIDR2 Extended ID Standard ID CANxRIDR3 Bit 7 ID28 ID10 ID20 ID2 ID14 Bit 6 ID27 ID9 ID19 ID1 ID13 Bit 5 ID26 ID8 ID18 ID0 ID12 Bit 4 ID25 ID7 SRR=1 RTR ID11 Bit 3 ID24 ID6 IDE=1 IDE=0 ID10 Bit 2 ID23 ID5 ID17 Bit 1 ID22 ID4 ID16 Bit 0 ID21 ID3 ID15
Read: 0xXXX0 Read: Write: Read: 0xXXX1 Read: Write: Read: 0xXXX2 Read: Write: Read: 0xXXX3 Read: Write: Read: 0xXXX4 CANxRDSR0 0xXXXB CANxRDSR7 Write: Read: 0xXXXC CANRxDLR Write:
ID9
ID8
ID7
ID6
ID5
ID4
ID3
ID2
ID1
ID0
RTR
DB7
DB6
DB5
DB4
DB3 DLC3
DB2 DLC2
DB1 DLC1
DB0 DLC0
40
Freescale Semiconductor
Table 1-2. Detailed MSCAN Foreground Receive and Transmit Buffer Layout (continued)
Address 0xXXXD 0xXXXE 0xXXXF Name Reserved CANxRTSRH CANxRTSRL Extended ID CANxTIDR0 Standard ID Extended ID CANxTIDR1 Standard ID Extended ID CANxTIDR2 Standard ID Extended ID CANxTIDR3 Standard ID 0xxx14 0xxx1B 0xxx1C 0xxx1D 0xxx1E 0xxx1F CANxTDSR0 CANxTDSR7 CANxTDLR CONxTTBPR CANxTTSRH CANxTTSRL Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Read: Write: Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
TSR15 TSR7
TSR14 TSR6
TSR13 TSR5
TSR12 TSR4
TSR11 TSR3
TSR10 TSR2
TSR9 TSR1
TSR8 TSR0
0xxx10
0xxx11
ID9
ID8
ID7
0xxx12
ID6
ID5
ID4
ID3
ID2
ID1
ID0
RTR
0xxx13
DB7
DB6
DB5
DB4
DB3 DLC3
0x01800x023F
Address 0x0180 0x023F Name Reserved
Reserved
Bit 7 Read: Write: 0 Bit 6 0 Bit 5 0 Bit 4 0 Bit 3 0 Bit 2 0 Bit 1 0 Bit 0 0
Freescale Semiconductor
41
0x02400x027F
Address 0x0240 0x0241 0x0242 0x0243 0x0244 0x0245 0x0246 0x0247 0x0248 0x0249 0x024A 0x024B 0x024C 0x024D 0x024E 0x024F 0x0250 0x0251 0x0252 0x0253 0x0254 0x0255 Name PTT PTIT DDRT RDRT PERT PPST Reserved MODRR PTS PTIS DDRS RDRS PERS PPSS WOMS Reserved PTM PTIM DDRM RDRM PERM PPSM
MODRR4 MODRR3 MODRR2 MODRR1 MODRR0 0 0 0 0 0 0 0 0 PTS3 PTIS3 PTS2 PTIS2 PTS1 PTIS1 PTS0 PTIS0
PTM5 PTIM5
PTM4 PTIM4
PTM3 PTIM3
PTM2 PTIM2
PTM1 PTIM1
PTM0 PTIM0
42
Freescale Semiconductor
0x02400x027F
Address 0x0256 0x0257 0x0258 0x0259 0x025A 0x025B 0x025C 0x025D 0x025E 0x025F 0x0260 0x0261 0x0262 0x0263 0x0264 0x0265 0x0266 0x0267 0x0268 0x0269 0x026A 0x026B 0x026C Name WOMM Reserved PTP PTIP DDRP RDRP PERP PPSP PIEP PIFP Reserved Reserved Reserved Reserved Reserved Reserved Reserved Reserved PTJ PTIJ DDRJ RDRJ PERJ
PTP7 PTIP7
PTP6 PTIP6
PTP5 PTIP5
PTP4 PTIP4
PTP3 PTIP3
PTP2 PTIP2
PTP1 PTIP1
PTP0 PTIP0
PTJ7 PTIJ7
PTJ6 PTIJ6
Freescale Semiconductor
43
0x02400x027F
Address 0x026D 0x026E 0x026F 0x0270 0x0271 0x0272 0x0273 0x0274 0x0275 0x02760x027F Name PPSJ PIEJ PIFJ PTAD PTIAD DDRAD RDRAD PERAD PPSAD Reserved
PTAD5 PTIAD5
PTAD4 PTIAD4
PTAD3 PTIAD3
PTAD2 PTIAD2
PTAD1 PTIAD1
PTAD0 PTIJ7
DDRAD7 DDRAD6 DDRAD5 DDRAD4 DDRAD3 DDRAD2 DDRAD1 DDRAD0 RDRAD7 RDRAD6 RDRAD5 RDRAD4 RDRAD3 RDRAD2 RDRAD1 RDRAD0 PERAD7 PPSAD7 0 PERAD6 PPSAD6 0 PERAD5 PPSAD5 0 PERAD4 PPSAD4 0 PERAD3 PPSAD3 0 PERAD2 PPSAD2 0 PERAD1 PPSAD1 0 PERAD0 PPSAD0 0
0x02800x03FF
Address 0x0280 0x2FF Name Reserved
Reserved Space
Bit 7 0 0 Bit 6 0 0 Bit 5 0 0 Bit 4 0 0 Bit 3 0 0 Bit 2 0 0 Bit 1 0 0 Bit 0 0 0
44
Freescale Semiconductor
1.2.3
Part ID Assignments
The part ID is located in two 8-bit registers PARTIDH and PARTIDL (addresses 0x001A and ox001B after reset). The read-only value is a unique part ID for each revision of the chip. Table 1-3 shows the assigned part ID numbers for production mask sets.
Table 1-3. Assigned Part ID Numbers
Device MC9S12C32 MC9S12C32 MC9S12C32 MC9S12GC16 MC9S12GC32 MC9S12GC32 MC9S12C64,MC9S12C96,MC9S12C128 MC9S12GC64,MC9S12GC96,MC9S12GC128 MC9S12C64,MC9S12C96,MC9S12C128 Mask Set Number 1L45J 2L45J 1M34C 2L45J 2L45J 1M34C 2L09S 2L09S 0M66G Part ID(1) $3300 $3302 $3311 $3302 $3302 $3311 $3102 $3102 $3103 $3103
MC9S12GC64,MC9S12GC96,MC9S12GC128 0M66G 1. The coding is as follows: Bit 1512: Major family identier Bit 118: Minor family identier Bit 74: Major mask set revision number including FAB transfers Bit 30: Minor non full mask set revision
The device memory sizes are located in two 8-bit registers MEMSIZ0 and MEMSIZ1 (addresses 0x001C and 0x001D after reset). Table 1-4 shows the read-only values of these registers. Refer to Module Mapping and Control (MMC) Block Guide for further details.
Table 1-4. Memory Size Registers
Device MC9S12GC16 MC9S12C32, MC9S12GC32 MC9S12C64, MC9S12GC64 MC9S12C96,MC9S12GC96 MC9S12C128, MC9S12GC128 Register Name MEMSIZ0 MEMSIZ1 MEMSIZ0 MEMSIZ1 MEMSIZ0 MEMSIZ1 MEMSIZ0 MEMSIZ1 MEMSIZ0 MEMSIZ1 Value $00 $80 $00 $80 $01 $C0 $01 $C0 $01 $C0
Freescale Semiconductor
45
1.3
1.3.1
Signal Description
Device Pinouts
PP4/KWP4/PW4 PP5/KWP5/PW5 PP7/KWP7 VDDX VSSX PM0/RXCAN PM1/TXCAN PM2/MISO PM3/SS PM4/MOSI PM5/SCK PJ6/KWJ6 PJ7/KWJ7 PP6/KWP6/ROMCTL PS3 PS2 PS1/TXD PS0/RXD VSSA VRL 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 PW3/KWP3/PP3 PW2/KWP2/PP2 PW1/KWP1/PP1 PW0/KWP0/PP0 PW0/IOC0/PT0 PW1/IOC1/PT1 PW2/IOC2/PT2 PW3/IOC3/PT3 VDD1 VSS1 PW4/IOC4/PT4 IOC5/PT5 IOC6/PT6 IOC7/PT7 MODC/TAGHI/BKGD ADDR0/DATA0/PB0 ADDR1/DATA1/PB1 ADDR2/DATA2/PB2 ADDR3/DATA3/PB3 ADDR4/DATA4/PB4 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41
MC9S12C-Family / MC9S12GC-Family
VRH VDDA PAD07/AN07 PAD06/AN06 PAD05/AN05 PAD04/AN04 PAD03/AN03 PAD02/AN02 PAD01/AN01 PAD00/AN00 VSS2 VDD2 PA7/ADDR15/DATA15 PA6/ADDR14/DATA14 PA5/ADDR13/DATA13 PA4/ADDR12/DATA12 PA3/ADDR11/DATA11 PA2/ADDR10/DATA10 PA1/ADDR9/DATA9 PA0/ADDR8/DATA8
Signals shown in Bold are not available on the 52- or 48-pin package Signals shown in Bold Italic are available in the 52-pin, but not the 48-pin package
The MODRR register within the PIM allows for mapping of PWM channels to Port T in the absence of Port P pins for the low pin count packages. For the 80QFP package option it is recommended not to use MODRR since this is intended to support PWM channel availability in low pin count packages. Note that when mapping PWM channels to Port T in an 80QFP option, the associated PWM channels are then mapped to both Port P and Port T
46
ADDR5/DATA5/PB5 ADDR6/DATA6/PB6 ADDR7/DATA7/PB7 XCLKS/NOACC/PE7 MODB/IPIPE1/PE6 MODA/IPIPE0/PE5 ECLK/PE4 VSSR VDDR RESET VDDPLL XFC VSSPLL EXTAL XTAL VPP/TEST LSTRB/TAGLO/PE3 R/W/PE2 IRQ/PE1 XIRQ/PE0
21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40
Freescale Semiconductor
PP4/KWP4/PW4
PP5/KWP5/PW5
PM0/RXCAN
PM1/TXCAN
PM4/MOSI
PM2/MISO
PM5/SCK 43
52
51
50
49
48
47
46
45
44
42
41
40
PS0/RXD VSSA
PS1/TXD
PM3/SS
VDDX
VSSX
PW3/KWP3/PP3 PW0/IOC0/PT0 PW1/IOC1/PT1 PW2/IOC2/PT2 PW3/IOC3/PT3 VDD1 VSS1 IOC4/PT4 IOC5/PT5 IOC6/PT6 IOC7/PT7 MODC/BKGD PB4
1 2 3 4 5 6 7 8 9 10 11 12 13
39 38 37 36 35 34 33 32 31 30 29 28 27
VRH VDDA PAD07/AN07 PAD06/AN06 PAD05/AN05 PAD04/AN04 PAD03/AN03 PAD02/AN02 PAD01/AN01 PAD00/AN00 PA2 PA1 PA0
MC9S12C-Family / MC9S12GC-Family
14
15
16
17
18
19
20
21
22
23
24
25
EXTAL
XCLKS/PE7
ECLK/PE4
RESET
XTAL
XFC
* Signals shown in Bold italic are not available on the 48-pin package Figure 1-8. Pin Assignments in 52-Pin LQFP
Freescale Semiconductor
VSSR
VDDR
VDDPLL
VSSPLL
26
47
PP5/KWP5/PW5
PM0/RXCAN
PM1/TXCAN
PM2/MISO
PM4/MOSI
PM5/SCK 40
48
47
46
45
44
43
42
41
39
38
PW0/IOC0/PT0 PW1/IOC1/PT1 PW2/IOC2/PT2 PW3/IOC3/PT3 VDD1 VSS1 IOC4/PT4 IOC5/PT5 IOC6/PT6 IOC7/PT7 MODC/BKGD PB4
37
PS0/RXD VSSA
PS1/TXD
VDDX
PM3/SS
VSSX
1 2 3 4 5 6 7 8 9 10 11 12
36 35 34 33 32
VRH VDDA PAD07/AN07 PAD06/AN06 PAD05/AN05 PAD04/AN04 PAD03/AN03 PAD02/AN02 PAD01/AN01 PAD00/AN00 PA0 XIRQ/PE0
MC9S12C-Family / MC9S12GC-Family
31 30 29 28 27 26 25
13
14
15
16
17
18
19
20
21
22 XTAL
23
XCLKS/PE7
ECLK/PE4
RESET
EXTAL
XFC
48
VPP/TEST IRQ/PE1
VSSR
VDDR
VDDPLL
VSSPLL
24
Freescale Semiconductor
1.3.2
Pin Name Function 1 EXTAL XTAL RESET XFC TEST BKGD PE7 PE6 PE5 PE4 PE3 PE2 PE1 PE0 PA[7:3] PA[2:1] PA[0] PB[7:5] PB[4] PB[3:0] PAD[7:0] PP[7] PP[6] PP[5] PP[4:3]
Pin Name Function 2 VPP MODC NOACC IPIPE1 IPIPE0 ECLK LSTRB R/W IRQ XIRQ ADDR[15:1/ DATA[15:1] ADDR[10:9/ DATA[10:9] ADDR[8]/ DATA[8] ADDR[7:5]/ DATA[7:5] ADDR[4]/ DATA[4] ADDR[3:0]/ DATA[3:0] AN[7:0] KWP[7] KWP[6] KWP[5] KWP[4:3]
Pin Name Function 3 TAGHI XCLKS MODB MODA TAGLO ROMCTL PW5 PW[4:3]
Power Domain VDDPLL VDDPLL VDDX VDDPLL VSSX VDDX VDDX VDDX VDDX VDDX VDDX VDDX VDDX VDDX VDDX VDDX VDDX VDDX VDDX VDDX VDDA VDDX VDDX VDDX VDDX
NA NA None NA NA Up PUCR
While RESET pin is low: Down While RESET pin is low: Down PUCR PUCR PUCR PUCR PUCR PUCR PUCR PUCR PUCR PUCR PUCR Mode Dep(1) Mode Dep1 Mode Dep1 Up Up Disabled Disabled Disabled Disabled Disabled Disabled
PERAD/P Port AD I/O pins and ATD inputs Disabled PSAD PERP/ PPSP PERP/ PPSP PERP/ PPSP PERP/ PPSP Disabled Disabled Disabled Disabled Port P I/O pins and keypad wake-up Port P I/O pins, keypad wake-up, and ROMON enable. Port P I/O pin, keypad wake-up, PW5 output Port P I/O pin, keypad wake-up, PWM output
Freescale Semiconductor
49
Power Domain
PERT/ Port T I/O pins shared with timer and PWM Disabled PPST 1. The Port E output buffer enable signal control at reset is determined by the PEAR register and is mode dependent. For example, in special test mode RDWE = LSTRE = 1 which enables the PE[3:2] output buffers and disables the pull-ups. Refer to S12_MEBI user guide for PEAR register details. 2. CAN functionality is not available on the MC9S12GC Family members.
1.3.3
Pin Initialization for 48- and 52-Pin LQFP Bond Out Versions
Not Bonded Pins: If the port pins are not bonded out in the chosen package the user should initialize the registers to be inputs with enabled pull resistance to avoid excess current consumption. This applies to the following pins: (48LQFP): Port A[7:1], Port B[7:5], Port B[3:0], PortE[6,5,3,2], Port P[7:6], PortP[4:0], Port J[7:6], PortS[3:2] (52LQFP): Port A[7:3], Port B[7:5], Port B[3:0], PortE[6,5,3,2], Port P[7:6], PortP[2:0], Port J[7:6], PortS[3:2]
50
Freescale Semiconductor
1.3.4
1.3.4.1
EXTAL and XTAL are the crystal driver and external clock pins. On reset all the device clocks are derived from the EXTAL input frequency. XTAL is the crystal output.
1.3.4.2
RESET is an active low bidirectional control signal that acts as an input to initialize the MCU to a known start-up state. It also acts as an open-drain output to indicate that an internal failure has been detected in either the clock monitor or COP watchdog circuit. External circuitry connected to the RESET pin should not include a large capacitance that would interfere with the ability of this signal to rise to a valid logic one within 32 ECLK cycles after the low drive is released. Upon detection of any reset, an internal circuit drives the RESET pin low and a clocked reset sequence controls when the MCU can begin normal processing.
1.3.4.3
This pin is reserved for test and must be tied to VSS in all applications.
1.3.4.4
Dedicated pin used to create the PLL loop lter. See CRG BUG for more detailed information.PLL loop lter. Please ask your Motorola representative for the interactive application note to compute PLL loop lter elements. Any current leakage on this pin must be avoided.
XFC
CP
1.3.4.5
BKGD / TAGHI / MODC Background Debug, Tag High, and Mode Pin
The BKGD / TAGHI / MODC pin is used as a pseudo-open-drain pin for the background debug communication. In MCU expanded modes of operation when instruction tagging is on, an input low on this pin during the falling edge of E-clock tags the high half of the instruction word being read into the instruction queue. It is also used as a MCU operating mode select pin at the rising edge during reset, when the state of this pin is latched to the MODC bit.
Freescale Semiconductor
51
1.3.4.6
PA7PA0 are general purpose input or output pins,. In MCU expanded modes of operation, these pins are used for the multiplexed external address and data bus. PA[7:1] pins are not available in the 48-pin package version. PA[7:3] are not available in the 52-pin package version.
1.3.4.7
PB7PB0 are general purpose input or output pins. In MCU expanded modes of operation, these pins are used for the multiplexed external address and data bus. PB[7:5] and PB[3:0] pins are not available in the 48-pin nor 52-pin package version.
1.3.4.8
PE7 is a general purpose input or output pin. During MCU expanded modes of operation, the NOACC signal, when enabled, is used to indicate that the current bus cycle is an unused or free cycle. This signal will assert when the CPU is not using the bus.The XCLKS is an input signal which controls whether a crystal in combination with the internal Colpitts (low power) oscillator is used or whether Pierce oscillator/external clock circuitry is used. The state of this pin is latched at the rising edge of RESET. If the input is a logic low the EXTAL pin is congured for an external clock drive or a Pierce oscillator. If input is a logic high a Colpitts oscillator circuit is congured on EXTAL and XTAL. Since this pin is an input with a pull-up device during reset, if the pin is left oating, the default conguration is a Colpitts oscillator circuit on EXTAL and XTAL.
EXTAL CDC1 MCU C1 Crystal or Ceramic Resonator
XTAL C2 VSSPLL 1. Due to the nature of a translated ground Colpitts oscillator a DC voltage bias is applied to the crystal. Please contact the crystal manufacturer for crystal DC.
EXTAL C1 MCU RS1 XTAL C2 VSSPLL 1. RS can be zero (shorted) when used with higher frequency crystals, refer to manufacturers data. RB Crystal or Ceramic Resonator
52
Freescale Semiconductor
EXTAL
MCU
XTAL
Not Connected
1.3.4.9
PE6 is a general purpose input or output pin. It is used as a MCU operating mode select pin during reset. The state of this pin is latched to the MODB bit at the rising edge of RESET. This pin is shared with the instruction queue tracking signal IPIPE1. This pin is an input with a pull-down device which is only active when RESET is low. PE[6] is not available in the 48- / 52-pin package versions.
1.3.4.10
PE5 is a general purpose input or output pin. It is used as a MCU operating mode select pin during reset. The state of this pin is latched to the MODA bit at the rising edge of RESET. This pin is shared with the instruction queue tracking signal IPIPE0. This pin is an input with a pull-down device which is only active when RESET is low. This pin is not available in the 48- / 52-pin package versions.
1.3.4.11
ECLK is the output connection for the internal bus clock. It is used to demultiplex the address and data in expanded modes and is used as a timing reference. ECLK frequency is equal to 1/2 the crystal frequency out of reset. The ECLK pin is initially congured as ECLK output with stretch in all expanded modes. The E clock output function depends upon the settings of the NECLK bit in the PEAR register, the IVIS bit in the MODE register and the ESTR bit in the EBICTL register. All clocks, including the E clock, are halted when the MCU is in stop mode. It is possible to congure the MCU to interface to slow external memory. ECLK can be stretched for such accesses. Reference the MISC register (EXSTR[1:0] bits) for more information. In normal expanded narrow mode, the E clock is available for use in external select decode logic or as a constant speed clock for use in the external application system. Alternatively PE4 can be used as a general purpose input or output pin.
1.3.4.12
In all modes this pin can be used as a general-purpose I/O and is an input with an active pull-up out of reset. If the strobe function is required, it should be enabled by setting the LSTRE bit in the PEAR register. This signal is used in write operations. Therefore external low byte writes will not be possible until this function is enabled. This pin is also used as TAGLO in special expanded modes and is multiplexed with the LSTRB function. This pin is not available in the 48- / 52-pin package versions.
Freescale Semiconductor
53
1.3.4.13
In all modes this pin can be used as a general-purpose I/O and is an input with an active pull-up out of reset. If the read/write function is required it should be enabled by setting the RDWE bit in the PEAR register. External writes will not be possible until enabled. This pin is not available in the 48- / 52-pin package versions.
1.3.4.14
The IRQ input provides a means of applying asynchronous interrupt requests to the MCU. Either falling edge-sensitive triggering or level-sensitive triggering is program selectable (INTCR register). IRQ is always enabled and congured to level-sensitive triggering out of reset. It can be disabled by clearing IRQEN bit (INTCR register). When the MCU is reset the IRQ function is masked in the condition code register. This pin is always an input and can always be read. There is an active pull-up on this pin while in reset and immediately out of reset. The pull-up can be turned off by clearing PUPEE in the PUCR register.
1.3.4.15
PE0 / XIRQ Port E input Pin [0] / Non Maskable Interrupt Pin
The XIRQ input provides a means of requesting a non-maskable interrupt after reset initialization. During reset, the X bit in the condition code register (CCR) is set and any interrupt is masked until MCU software enables it. Because the XIRQ input is level sensitive, it can be connected to a multiple-source wired-OR network. This pin is always an input and can always be read. There is an active pull-up on this pin while in reset and immediately out of reset. The pull-up can be turned off by clearing PUPEE in the PUCR register.
1.3.4.16
PAD7PAD0 are general purpose I/O pins and also analog inputs for the analog to digital converter. In order to use a PAD pin as a standard input, the corresponding ATDDIEN register bit must be set. These bits are cleared out of reset to congure the PAD pins for A/D operation. When the A/D converter is active in multi-channel mode, port inputs are scanned and converted irrespective of Port AD conguration. Thus Port AD pins that are congured as digital inputs or digital outputs are also converted in the A/D conversion sequence.
1.3.4.17
PP7 is a general purpose input or output pin, shared with the keypad interrupt function. When congured as an input, it can generate interrupts causing the MCU to exit stop or wait mode. This pin is not available in the 48- / 52-pin package versions.
1.3.4.18
PP6 is a general purpose input or output pin, shared with the keypad interrupt function. When congured as an input, it can generate interrupts causing the MCU to exit stop or wait mode. This pin is not available in the 48- / 52-pin package versions. During MCU expanded modes of operation, this pin is used to enable
54
Freescale Semiconductor
the Flash EEPROM memory in the memory map (ROMCTL). At the rising edge of RESET, the state of this pin is latched to the ROMON bit. PP6 = 1 in emulation modes equates to ROMON = 0 (ROM space externally mapped) PP6 = 0 in expanded modes equates to ROMON = 0 (ROM space externally mapped)
1.3.4.19
PP[5:0] are general purpose input or output pins, shared with the keypad interrupt function. When congured as inputs, they can generate interrupts causing the MCU to exit stop or wait mode. PP[5:0] are also shared with the PWM output signals, PW[5:0]. Pins PP[2:0] are only available in the 80pin package version. Pins PP[4:3] are not available in the 48-pin package version.
1.3.4.20
PJ[7:6] are general purpose input or output pins, shared with the keypad interrupt function. When congured as inputs, they can generate interrupts causing the MCU to exit stop or wait mode. These pins are not available in the 48-pin package version nor in the 52-pin package version.
1.3.4.21
PM5 is a general purpose input or output pin and also the serial clock pin SCK for the serial peripheral interface (SPI).
1.3.4.22
PM4 is a general purpose input or output pin and also the master output (during master mode) or slave input (during slave mode) pin for the serial peripheral interface (SPI).
1.3.4.23
PM3 is a general purpose input or output pin and also the slave select pin SS for the serial peripheral interface (SPI).
1.3.4.24
PM2 is a general purpose input or output pin and also the master input (during master mode) or slave output (during slave mode) pin for the serial peripheral interface (SPI).
1.3.4.25
PM1 is a general purpose input or output pin and the transmit pin, TXCAN, of the CAN module if available.
1.3.4.26
PM0 is a general purpose input or output pin and the receive pin, RXCAN, of the CAN module if available.
Freescale Semiconductor
55
1.3.4.27
PS3 and PS2 are general purpose input or output pins. These pins are not available in the 48- / 52-pin package versions.
1.3.4.28
PS1 is a general purpose input or output pin and the transmit pin, TXD, of serial communication interface (SCI).
1.3.4.29
PS0 is a general purpose input or output pin and the receive pin, RXD, of serial communication interface (SCI).
1.3.4.30
PT7PT5 are general purpose input or output pins. They can also be congured as the timer system input capture or output compare pins IOC7-IOC5.
1.3.4.31
PT4PT0 are general purpose input or output pins. They can also be congured as the timer system input capture or output compare pins IOC[n] or as the PWM outputs PW[n].
1.3.5
1.3.5.1
External power and ground for I/O drivers. Bypass requirements depend on how heavily the MCU pins are loaded.
1.3.5.2
VDDR, VSSR Power and Ground Pins for I/O Drivers and for Internal Voltage Regulator
External power and ground for the internal voltage regulator. Connecting VDDR to ground disables the internal voltage regulator.
1.3.5.3
Power is supplied to the MCU through VDD and VSS. This 2.5V supply is derived from the internal voltage regulator. There is no static load on those pins allowed. The internal voltage regulator is turned off, if VDDR is tied to ground.
56
Freescale Semiconductor
1.3.5.4
VDDA, VSSA are the power supply and ground input pins for the voltage regulator reference and the analog to digital converter.
1.3.5.5
VRH and VRL are the reference voltage input pins for the analog to digital converter.
1.3.5.6
Provides operating voltage and ground for the oscillator and the phased-locked loop. This allows the supply voltage to the oscillator and PLL to be bypassed independently. This 2.5V voltage is generated by the internal voltage regulator.
Table 1-6. Power and Ground Connection Summary
Mnemonic VDD1, VDD2 VSS1, VSS2 VDDR VSSR VDDX VSSX VDDA VSSA VRH VRL VDDPLL VSSPLL Nominal Voltage (V) 2.5 0 5.0 0 5.0 0 5.0 0 5.0 0 2.5 0 Operating voltage and ground for the analog-to-digital converters and the reference for the internal voltage regulator, allows the supply voltage to the A/D to be bypassed independently. Reference voltage low for the ATD converter. In the 48 and 52 LQFP packages VRL is bonded to VSSA. Provides operating voltage and ground for the phased-locked loop. This allows the supply voltage to the PLL to be bypassed independently. Internal power and ground generated by internal regulator. External power and ground, supply to pin drivers. Description Internal power and ground generated by internal regulator. These also allow an external source to supply the core VDD/VSS voltages and bypass the internal voltage regulator. In the 48 and 52 LQFP packages VDD2 and VSS2 are not available. External power and ground, supply to internal voltage regulator.
NOTE All VSS pins must be connected together in the application. Because fast signal transitions place high, short-duration current demands on the power supply, use bypass capacitors with high-frequency characteristics and place them as close to the MCU as possible. Bypass requirements depend on MCU pin load.
Freescale Semiconductor
57
1.4
The clock and reset generator provides the internal clock signals for the core and all peripheral modules. Figure 1-14 shows the clock connections from the CRG to all modules. Consult the CRG Block User Guide for details on clock generation.
Flash RAM TIM ATD EXTAL PIM SCI CRG Bus Clock Oscillator Clock XTAL VREG TPM SPI MSCAN Not on 9S12GC
1.5
Modes of Operation
Eight possible modes determine the device operating conguration. Each mode has an associated default memory map and external bus conguration controlled by a further pin. Three low power modes exist for the device.
1.5.1
The operating mode out of reset is determined by the states of the MODC, MODB, and MODA pins during reset. The MODC, MODB, and MODA bits in the MODE register show the current operating mode and provide limited mode switching during operation. The states of the MODC, MODB, and MODA pins are latched into these bits on the rising edge of the reset signal. The ROMCTL signal allows the setting of the ROMON bit in the MISC register thus controlling whether the internal Flash is visible in the memory map. ROMON = 1 mean the Flash is visible in the memory map. The state of the ROMCTL pin is latched into the ROMON bit in the MISC register on the rising edge of the reset signal.
58
Freescale Semiconductor
0 0 0 1 1 1 1
0 1 1 0 0 1 1
1 0 1 0 1 0 1
For further explanation on the modes refer to the S12_MEBI block guide.
Table 1-8. Clock Selection Based on PE7
PE7 = XCLKS 1 0 Description Colpitts Oscillator selected Pierce Oscillator/external clock selected
1.5.2
Security
The device will make available a security feature preventing the unauthorized read and write of the memory contents. This feature allows: Protection of the contents of FLASH, Operation in single-chip mode, Operation from external memory with internal FLASH disabled. The user must be reminded that part of the security must lie with the users code. An extreme example would be users code that dumps the contents of the internal program. This code would defeat the purpose of security. At the same time the user may also wish to put a back door in the users program. An example of this is the user downloads a key through the SCI which allows access to a programming routine that updates parameters.
1.5.2.1
Once the user has programmed the FLASH, the part can be secured by programming the security bits located in the FLASH module. These non-volatile bits will keep the part secured through resetting the part and through powering down the part.
Freescale Semiconductor
59
The security byte resides in a portion of the Flash array. Check the Flash Block User Guide for more details on the security conguration.
1.5.2.2
1.5.2.2.1
This will be the most common usage of the secured part. Everything will appear the same as if the part was not secured with the exception of BDM operation. The BDM operation will be blocked. 1.5.2.2.2 Executing from External Memory
The user may wish to execute from external space with a secured microcontroller. This is accomplished by resetting directly into expanded mode. The internal FLASH will be disabled. BDM operations will be blocked.
1.5.2.3
In order to unsecure the microcontroller, the internal FLASH must be erased. This can be done through an external program in expanded mode or via a sequence of BDM commands. Unsecuring is also possible via the Backdoor Key Access. Refer to Flash Block Guide for details. Once the user has erased the FLASH, the part can be reset into special single chip mode. This invokes a program that veries the erasure of the internal FLASH. Once this program completes, the user can erase and program the FLASH security bits to the unsecured state. This is generally done through the BDM, but the user could also change to expanded mode (by writing the mode bits through the BDM) and jumping to an external program (again through BDM commands). Note that if the part goes through a reset before the security bits are reprogrammed to the unsecure state, the part will be secured again.
1.5.3
Low-Power Modes
The microcontroller features three main low power modes. Consult the respective Block User Guide for information on the module behavior in stop, pseudo stop, and wait mode. An important source of information about the clock system is the Clock and Reset Generator User Guide (CRG).
1.5.3.1
Stop
Executing the CPU STOP instruction stops all clocks and the oscillator thus putting the chip in fully static mode. Wake up from this mode can be done via reset or external interrupts.
1.5.3.2
Pseudo Stop
This mode is entered by executing the CPU STOP instruction. In this mode the oscillator is still running and the real time interrupt (RTI) or watchdog (COP) sub module can stay active. Other peripherals are turned off. This mode consumes more current than the full stop mode, but the wake up time from this mode is signicantly shorter.
60
Freescale Semiconductor
1.5.3.3
Wait
This mode is entered by executing the CPU WAI instruction. In this mode the CPU will not execute instructions. The internal CPU signals (address and data bus) will be fully static. All peripherals stay active. For further power consumption reduction the peripherals can individually turn off their local clocks.
1.5.3.4
Run
Although this is not a low-power mode, unused peripheral modules should not be enabled in order to save power.
1.6
Consult the Exception Processing section of the CPU12 Reference Manual for information.
1.6.1
Vectors
Table 1-9. Interrupt Vector Locations
Table 1-9 lists interrupt sources and vectors in default order of priority.
Vector Address
Interrupt Source External reset, power on reset, or low voltage reset (see CRG ags register to determine reset source) Clock monitor fail reset COP failure reset Unimplemented instruction trap SWI XIRQ IRQ Real time Interrupt Standard timer channel 0 Standard timer channel 1
CCR Mask
Local Enable
0xFFFE, 0xFFFF
None
None
0xFFFC, 0xFFFD 0xFFFA, 0xFFFB 0xFFF8, 0xFFF9 0xFFF6, 0xFFF7 0xFFF4, 0xFFF5 0xFFF2, 0xFFF3 0xFFF0, 0xFFF1 0xFFEE, 0xFFEF 0xFFEC, 0xFFED $FFEE, $FFEF $FFEC, $FFED 0xFFEA, 0xFFEB 0xFFE8, 0xFFE9 0xFFE6, 0xFFE7 0xFFE4, 0xFFE5 0xFFE2, 0xFFE3 0xFFE0, 0xFFE1
None None None None X-Bit I bit I bit I bit I bit Reserved Reserved
COPCTL (CME, FCME) COP rate select None None None INTCR (IRQEN) CRGINT (RTIE) TIE (C0I) TIE (C1I)
Standard timer channel 2 Standard timer channel 3 Standard timer channel 4 Standard timer channel 5 Standard timer channel 6 Standard timer channel 7
TIE (C2I) TIE (C3I) TIE (C4I) TIE (C5I) TIE (C6I) TIE (C7I)
Freescale Semiconductor
61
62
Freescale Semiconductor
1.6.2
Resets
Resets are a subset of the interrupts featured in Table 1-9. The different sources capable of generating a system reset are summarized in Table 1-10. When a reset occurs, MCU registers and control bits are changed to known start-up states. Refer to the respective module Block User Guides for register reset states.
1.6.2.1
1.6.2.2
Effects of Reset
When a reset occurs, MCU registers and control bits are changed to known start-up states. Refer to the respective module Block User Guides for register reset states. Refer to the HCS12 Multiplexed External Bus Interface (MEBI) Block Guide for mode dependent pin conguration of port A, B and E out of reset. Refer to the PIM Block User Guide for reset congurations of all peripheral module ports. Refer to Figure 1-2 to Figure 1-6 footnotes for locations of the memories depending on the operating mode after reset. The RAM array is not automatically initialized out of reset. NOTE For devices assembled in 48-pin or 52-pin LQFP packages all non-bonded out pins should be congured as outputs after reset in order to avoid current drawn from oating inputs. Refer to Table 1-5 for affected pins.
1.7
1.7.1
External paging is not supported on these devices. In order to access the 16K ash blocks in the address range 0x80000xBFFF the PPAGE register must be loaded with the corresponding value for this range. Refer to Table 1-11 for device specic page mapping. For all devices Flash Page 3F is visible in the 0xC0000xFFFF range if ROMON is set. For all devices (except MC9S12GC16) Page 3E is also visible in the 0x40000x7FFF range if ROMHM is cleared and ROMON is set. For all devices apart from MC9S12C32 Flash Page 3D is visible in the 0x00000x3FFF range if ROMON is set...
Freescale Semiconductor
63
1.7.2
The BDM section reference to alternate clock is equivalent to the oscillator clock.
1.7.3
In order to emulate the MC9S12GC or MC9S12C-Family / MC9S12GC-Family devices, external addressing of a 128K memory map is required. This is provided in a 112 LQFP package version which includes the 3 necessary extra external address bus signals via PortK[2:0]. This package version is for emulation only and not provided as a general production package. The reset state of DDRK is 0x0000, conguring the pins as inputs. The reset state of PUPKE in the PUCR register is 1 enabling the internal Port K pullups. In this reset state the pull-ups provide a dened state and prevent a oating input, thereby preventing unnecessary current ow at the input stage. To prevent unnecessary current ow in production package options, the states of DDRK and PUPKE should not be changed by software.
64
Freescale Semiconductor
1.7.4
VREGEN
The VREGEN input mentioned in the VREG section is device internal, connected internally to VDDR.
1.7.5
In the 80-pin QFP package versions, both internal VDD and VSS of the 2.5V domain are bonded out on 2 sides of the device as two pin pairs (VDD1, VSS1 & VDD2, VSS2). VDD1 and VDD2 are connected together internally. VSS1 and VSS2 are connected together internally. The extra pin pair enables systems using the 80-pin package to employ better supply routing and further decoupling.
1.7.6
The low voltage reset feature uses the low voltage reset signal from the VREG module as an input to the CRG module. When the regulator output voltage supply to the internal chip logic falls below a specied threshold the LVR signal from the VREG module causes the CRG module to generate a reset. NOTE If the voltage regulator is shut down by connecting VDDR to ground then the LVRF ag in the CRG ags register (CRGFLG) is undened.
1.7.7
Analog-to-Digital Converter
In the 48- and 52-pin package versions, the VRL pad is bonded internally to the VSSA pin.
1.7.8
The MODRR register within the PIM allows for mapping of PWM channels to port T in the absence of port P pins for the low pin count packages. For the 80QFP package option it is recommended not to use MODRR since this is intended to support PWM channel availability in low pin count packages. Note that when mapping PWM channels to port T in an 80QFP option, the associated PWM channels are then mapped to both port P and port T. .
1.7.9
The port AD pins interface to the PIM module. However, the port pin digital state can be read from either the PORTAD register in the ATD register map or from the PTAD register in the PIM register map. In order to read a digital pin value from PORTAD the corresponding ATDDIEN bit must be set and the corresponding DDRDA bit cleared. If the corresponding ATDDIEN bit is cleared then the pin is congured as an analog input and the PORTAD bit reads back as "1". In order to read a digital pin value from PTAD, the corresponding DDRAD bit must be cleared, to congure the pin as an input. Furthermore in order to use a port AD pin as an analog input, the corresponding DDRAD bit must be cleared to congure the pin as an input
Freescale Semiconductor
65
1.8
The PCB must be carefully laid out to ensure proper operation of the voltage regulator as well as of the MCU itself. The following rules must be observed: Every supply pair must be decoupled by a ceramic capacitor connected as near as possible to the corresponding pins. Central point of the ground star should be the VSSR pin. Use low ohmic low inductance connections between VSS1, VSS2, and VSSR. VSSPLL must be directly connected to VSSR. Keep traces of VSSPLL, EXTAL, and XTAL as short as possible and occupied board area for C6, C7, C11, and Q1 as small as possible. Do not place other signals or supplies underneath area occupied by C6, C7, C5, and Q1 and the connection area to the MCU. Central power input should be fed in at the VDDA/VSSA pins.
Table 1-12. Recommended Component Values
Component C1 C2 C3 C4 C5 C6 C7 C8 C9 C10 C11 R1 R2 R3 / RB R4 / RS Purpose VDD1 lter capacitor VDDR lter capacitor VDDPLL lter capacitor PLL loop lter capacitor See PLL specication chapter PLL loop lter capacitor OSC load capacitor See PLL specication chapter OSC load capacitor VDD2 lter capacitor (80 QFP only) VDDA lter capacitor VDDX lter capacitor DC cutoff capacitor Pierce Mode Select Pullup PLL loop lter resistor PLL loop lter resistor Pierce mode only PLL loop lter resistor Ceramic X7R Ceramic X7R X7R/tantalum 220nF 100nF >=100nF Type Ceramic X7R X7R/tantalum Ceramic X7R Value 220nF, 470nF(1) >=100nF 100nF
Colpitts mode only, if recommended by quartz manufacturer Pierce Mode Only See PLL Specication chapter
Q1 Quartz 1. In 48LQFP and 52LQFP package versions, VDD2 is not available. Thus 470nF must be connected to VDD1.
66
Freescale Semiconductor
Freescale Semiconductor
67
68
Freescale Semiconductor
Freescale Semiconductor
69
70
Freescale Semiconductor
Freescale Semiconductor
71
72
Freescale Semiconductor
2.1.1
Features
A standard port has the following minimum features: Input/output selection 5-V output drive with two selectable drive strength 5-V digital and analog input Input with selectable pull-up or pull-down device Optional features: Open drain for wired-OR connections Interrupt inputs with glitch ltering
Freescale Semiconductor
73
2.1.2
Block Diagram
PJ6 PJ7
IRQ Logic
Port J
SCI
RXD TXD
CAN SPI
A/D
PB0 PB1 PB2 PB3 PB4 PB5 PB6 PB7 PA0 PA1 PA2 PA3 PA4 PA5 PA6 PA7
Port A
Note: The MODRR register within the PIM allows for mapping of PWM channels to Port T in the absence of Port P pins for the low pin count packages. For the 80QFP package option it is recommended not to use MODRR since this is intended to support PWM channel availability in low pin count packages. Note that
74
Freescale Semiconductor
Port E
Port B
Port M
Port S
Port P
PWM
Port T
TIM
when mapping PWM channels to Port T in an 80QFP option, the associated PWM channels are then mapped to both Port P and Port T.
Freescale Semiconductor
75
2.2
Signal Description
This section lists and describes the signals that do connect off-chip. Table 2-1 shows all pins and their functions that are controlled by the PIM module. If there is more than one function associated to a pin, the priority is indicated by the position in the table from top (highest priority) to down (lowest priority).
Table 2-1. Pin Functions and Priorities
Port Port T Pin Name PT[7:0] Pin Function PWM[4:0] IOC[7:0] GPIO Port S PS3 PS2 PS1 GPIO GPIO TXD GPIO PS0 RXD GPIO Port M PM5 PM4 PM3 PM2 PM1 PM0 Port P PP[7:0] SCK MOSI SS MISO TXCAN RXCAN PWM[5:0] GPIO[7:0] PP[6] Port J Port AD PJ[7:6] PAD[7:0] ROMON GPIO ATD[7:0] GPIO[7:0] Port A PA[7:0] ADDR[15:8]/ DATA[15:8]/ GPIO ADDR[7:0]/ DATA[7:0]/ GPIO Description PWM outputs (only available if enabled in MODRR register) Standard timer channels General-purpose I/O General-purpose I/O General purpose I/O Serial communication interface transmit pin General-purpose I/O Serial communication interface receive pin General-purpose I/O SPI clock SPI transmit pin SPI slave select line SPI receive pin MSCAN transmit pin MSCAN receive pin PWM outputs General purpose I/O with interrupt ROMON input signal General purpose I/O with interrupt ATD analog inputs General purpose I/O Refer to MEBI Block Guide. Pin Function after Reset GPIO
Port B
PB[7:0]
76
Freescale Semiconductor
PE7
PE6
2.3
2.3.1
Address
Figure 2-2 shows the register map of the Port Integration Module.
= Unimplemented or Reserved
Freescale Semiconductor
77
Address
Name
R 0x0006 Reserved W R 0x0007 MODRR W R 0x0008 PTS W SCI R 0x0009 PTIS W R 0x000A DDRS W R 0x000B RDRS W R 0x000C PERS W R 0x000D PPSS W R 0x000E WOMS W R 0x000F Reserved W R W 0x0010 PTM MSCAN / SPI R 0x0011 PTIM W R 0x0012 DDRM W R 0x0013 RDRM W R 0x0014 PERM W R 0x0015 PPSM W R 0x0016 WOMM W R 0x0017 Reserved W R 0x0018 PTP W PWM R 0x0019 PTIP W
Bit 7 0 0 0 0 0 0 0 0 0 0 0
6 0 0 0 0 0 0 0 0 0 0 0
5 0 0 0 0 0 0 0 0 0 0
4 0
3 0
2 0
1 0
Bit 0 0
MODRR4 MODRR3 MODRR2 MODRR1 MODRR0 0 0 0 0 0 0 0 0 PTS3 PTIS3 PTS2 PTIS2 PTS1 TXD PTIS1 PTS0 RXD PTIS0
PTM3 SS PTIM3
0 0 0 0 0 0 0
0 0 0 0 0 0 0
PTP7 PTIP7
PTP6 PTIP6
= Unimplemented or Reserved
78
Freescale Semiconductor
0x0020 Reserved 0x0027 0x0028 0x0029 0x002A 0x002B 0x002C 0x002D 0x002E 0x002F 0x0030 0x0031 0x0032 0x0033 0x0034 0x0035 PTJ PTIJ DDRJ RDRJ PERJ PPSJ PIEJ PIFJ PTAD PTIAD DDRAD RDRAD PERAD PPSAD
PTJ7 PTIJ7
PTJ6 PTIJ6
PTAD5 PTIAD5
PTAD4 PTIAD4
PTAD3 PTIAD3
PTAD2 PTIAD2
PTAD1 PTIAD1
PTAD0 PTIAD0
= Unimplemented or Reserved
Freescale Semiconductor
79
2.3.2
Register Descriptions
Table 2-2 summarizes the effect on the various configuration bits data direction (DDR), input/output level (I/O), reduced drive (RDR), pull enable (PE), pull select (PS), and interrupt enable (IE) for the ports. The configuration bit PS is used for two purposes: 1. Congure the sensitive interrupt edge (rising or falling), if interrupt is enabled. 2. Select either a pull-up or pull-down device if PE is active.
Table 2-2. Pin Conguration Summary
DDR 0 0 0 0 0 0 0 1 1 1 1 1 1 1 IO X X X X X X X 0 1 0 1 0 1 0 RDR X X X X X X X 0 0 1 1 0 0 1 PE 0 1 1 0 0 1 1 X X X X X X X PS X 0 1 0 1 0 1 X X X X 0 1 0 1 IE(1) 0 0 0 1 1 1 1 0 0 0 0 1 1 1 1 Function Input Input Input Input Input Input Input Output, full drive to 0 Output, full drive to 1 Output, reduced drive to 0 Output, reduced drive to 1 Output, full drive to 0 Output, full drive to 1 Output, reduced drive to 0 Output, reduced drive to 1 Pull Device Disabled Pull up Pull down Disabled Disabled Pull up Pull down Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Interrupt Disabled Disabled Disabled Falling edge Rising edge Falling edge rising edge Disabled Disabled Disabled Disabled Falling edge Rising edge Falling edge Rising edge
NOTE All bits of all registers in this module are completely synchronous to internal clocks during a register read.
80
Freescale Semiconductor
2.3.2.1
2.3.2.1.1
Port T Registers
Port T I/O Register (PTT)
R PTT7 W TIM PWM Reset 0 0 0 IOC7 IOC6 IOC5 IOC4 PWM4 0 IOC3 PWM3 0 IOC2 PWM2 0 IOC1 PWM1 0 IOC0 PWM0 0 PTT6 PTT5 PTT4 PTT3 PTT2 PTT1 PTT0
= Unimplemented or Reserved
Read: Anytime. Write: Anytime. If the data direction bits of the associated I/O pins are set to 1, a read returns the value of the port register, otherwise the value at the pins is read. If a TIM-channel is dened as output, the related port T is assigned to IOC function. In addition to the possible timer functionality of port T pins PWM channels can be routed to port T. For this the Module Routing Register (MODRR) needs to be congured.
Table 2-3. Port T[4:0] Pin Functionality Congurations(1)
MODRR[x] 0 0 0 0 1 1 1 PWME[x] 0 0 1 1 0 0 1 TIMEN[x]
(2)
Port T[x] Output General Purpose I/O Timer General Purpose I/O Timer General Purpose I/O Timer PWM
0 1 0 1 0 1 0
1 1 1 PWM 1. All elds in the that are not shaded are standard use cases. 2. TIMEN[x] means that the timer is enabled (TSCR1[7]), the related channel is congured for output compare function (TIOS[x] or special output on a timer overow event congurable in TTOV[x]) and the timer output is routed to the port pin (TCTL1/TCTL2).
Freescale Semiconductor
81
2.3.2.1.2
R W Reset
PTIT7
PTIT6
PTIT5
PTIT4
PTIT3
PTIT2
PTIT1
PTIT0
= Unimplemented or Reserved
2.3.2.1.3
82
Freescale Semiconductor
2.3.2.1.4
2.3.2.1.5
Freescale Semiconductor
83
2.3.2.1.6
2.3.2.1.7
R W Reset
= Unimplemented or Reserved
Read: Anytime. Write: Anytime. NOTE MODRR[4] must be kept clear on devices featuring a 4 channel PWM.
Table 2-9. MODRR Field Descriptions
Field Description
40 Module Routing Register Port T This register selects the module connected to port T. MODRR[4:0] 0 Associated pin is connected to TIM module 1 Associated pin is connected to PWM module
84
Freescale Semiconductor
2.3.2.2
2.3.2.2.1
Port S Registers
Port S I/O Register (PTS)
R W SCI Reset
= Unimplemented or Reserved
Read: Anytime. Write: Anytime. If the data direction bits of the associated I/O pins are set to 1, a read returns the value of the port register, otherwise the value at the pins is read. The SCI port associated with transmit pin 1 is configured as output if the transmitter is enabled and the SCI pin associated with receive pin 0 is configured as input if the receiver is enabled. Please refer to SCI Block User Guide for details. 2.3.2.2.2 Port S Input Register (PTIS)
R W Reset
PTIS3
PTIS2
PTIS1
PTIS0
= Unimplemented or Reserved
Freescale Semiconductor
85
2.3.2.2.3
R W Reset
= Unimplemented or Reserved
86
Freescale Semiconductor
2.3.2.2.4
R W Reset
= Unimplemented or Reserved
2.3.2.2.5
R W Reset
= Unimplemented or Reserved
Freescale Semiconductor
87
2.3.2.2.6
R W Reset
= Unimplemented or Reserved
2.3.2.2.7
R W Reset
= Unimplemented or Reserved
30 Wired-OR Mode Port S This register congures the output pins as wired-or. If enabled the output is driven WOMS[3:0] active low only (open-drain). A logic level of 1 is not driven. This bit has no inuence on pins used as inputs. 0 Output buffers operate as push-pull outputs. 1 Output buffers operate as open-drain outputs.
88
Freescale Semiconductor
2.3.2.3
2.3.2.3.1
Port M Registers
Port M I/O Register (PTM)
SCK 0
MOSI 0
SS 0
MISO 0
TXCAN 0
RXCAN 0
= Unimplemented or Reserved
Read: Anytime. Write: Anytime. If the data direction bits of the associated I/O pins are set to 1, a read returns the value of the port register, otherwise the value at the pins is read. The SPI pin configurations (PM[5:2]) is determined by several status bits in the SPI module. Please refer to the SPI Block User Guide for details. 2.3.2.3.2 Port M Input Register (PTIM)
R W Reset
PTIM5
PTIM4
PTIM3
PTIM2
PTIM1
PTIM0
= Unimplemented or Reserved
Freescale Semiconductor
89
2.3.2.3.3
R W Reset
= Unimplemented or Reserved
90
Freescale Semiconductor
2.3.2.3.4
R W Reset
= Unimplemented or Reserved
2.3.2.3.5
R W Reset
= Unimplemented or Reserved
Freescale Semiconductor
91
2.3.2.3.6
R W Reset
= Unimplemented or Reserved
2.3.2.3.7
R W Reset
= Unimplemented or Reserved
50 Wired-OR Mode Port M This register congures the output pins as wired-or. If enabled the output is driven WOMM[5:0] active low only (open-drain). A logic level of 1 is not driven. This bit has no inuence on pins used as inputs. 0 Output buffers operate as push-pull outputs. 1 Output buffers operate as open-drain outputs.
92
Freescale Semiconductor
2.3.2.4
2.3.2.4.1
Port P Registers
Port P I/O Register (PTP)
R PTP7 W PWM Reset 0 0 PWM5 0 PWM4 0 PWM3 0 PWM2 0 PWM1 0 PWM0 0 PTP6 PTP5 PTP4 PTP3 PTP2 PTP1 PTP0
Read: Anytime. Write: Anytime. If the data direction bits of the associated I/O pins are set to 1, a read returns the value of the port register, otherwise the value at the pins is read. 2.3.2.4.2 Port P Input Register (PTIP)
R W Reset
PTIP7
PTIP6
PTIP5
PTIP4
PTIP3
PTIP2
PTIP1
PTIP0
= Unimplemented or Reserved
Read: Anytime. Write: Never, writes to this register have no effect. This register always reads back the status of the associated pins. This can be also used to detect overload or short circuit conditions on output pins.
Freescale Semiconductor
93
2.3.2.4.3
2.3.2.4.4
94
Freescale Semiconductor
2.3.2.4.5
2.3.2.4.6
Freescale Semiconductor
95
2.3.2.4.7
2.3.2.4.8
96
Freescale Semiconductor
2.3.2.5
2.3.2.5.1
Port J Registers
Port J I/O Register (PTJ)
= Unimplemented or Reserved
Read: Anytime. Write: Anytime. If the data direction bits of the associated I/O pins are set to 1, a read returns the value of the port register, otherwise the value at the pins is read. 2.3.2.5.2 Port J Input Register (PTIJ)
R W Reset
PTIJ7
PTIJ6
= Unimplemented or Reserved
Read: Anytime. Write: Never, writes to this register have no effect. This register always reads back the status of the associated pins. This can be used to detect overload or short circuit conditions on output pins.
Freescale Semiconductor
97
2.3.2.5.3
= Unimplemented or Reserved
2.3.2.5.4
= Unimplemented or Reserved
98
Freescale Semiconductor
2.3.2.5.5
= Unimplemented or Reserved
2.3.2.5.6
= Unimplemented or Reserved
Freescale Semiconductor
99
2.3.2.5.7
= Unimplemented or Reserved
2.3.2.5.8
= Unimplemented or Reserved
100
Freescale Semiconductor
2.3.2.6
2.3.2.6.1
Port AD Registers
Port AD I/O Register (PTAD)
Read: Anytime. Write: Anytime. If the data direction bits of the associated I/O pins are set to 1, a read returns the value of the port register, otherwise the value at the pins is read. 2.3.2.6.2 Port AD Input Register (PTIAD)
R W Reset
PTIAD7
PTIAD6
PTIAD5
PTIAD4
PTIAD3
PTIAD2
PTIAD1
PTIAD0
= Unimplemented or Reserved
Read: Anytime. Write: Never, writes to this register have no effect. This register always reads back the status of the associated pins. This can be used to detect overload or short circuit conditions on output pins.
Freescale Semiconductor
101
2.3.2.6.3
70 Data Direction Port AD This register congures port pins AD[7:0] as either input or output. DDRAD[7:0] 0 Associated pin is congured as input. 1 Associated pin is congured as output. Note: Due to internal synchronization circuits, it can take up to 2 bus cycles until the correct value is read on PTAD or PTIAD registers, when changing the DDRAD register.
2.3.2.6.4
70 Reduced Drive Port AD This register congures the drive strength of each port AD output pin as either full RDRAD[7:0] or reduced. If the port is used as input this bit is ignored. 0 Full drive strength at output. 1 Associated pin drives at about 1/3 of the full drive strength.
102
Freescale Semiconductor
2.3.2.6.5
70 Pull Device Enable Port AD This register congures whether a pull-up or a pull-down device is activated, if PERAD[7:0] the port is used as input. This bit has no effect if the port is used as output. Out of reset no pull device is enabled. It is not possible to enable pull devices when a associated ATD channel is enabled simultaneously. 0 Pull-up or pull-down device is disabled. 1 Either a pull-up or pull-down device is enabled.
2.3.2.6.6
70 Pull Select Port AD This register selects whether a pull-down or a pull-up device is connected to the pin. PPSAD[7:0] 0 A pull-up device is connected to the associated port AD pin, if enabled by the associated bit in register PERAD and if the port is used as input. 1 A pull-down device is connected to the associated port AD pin, if enabled by the associated bit in register PERAD and if the port is used as input.
Freescale Semiconductor
103
2.4
Functional Description
Each pin can act as general purpose I/O. In addition the pin can act as an output from a peripheral module or an input to a peripheral module. A set of configuration registers is common to all ports. All registers can be written at any time, however a specific configuration might not become active. Example: Selecting a pull-up resistor. This resistor does not become active while the port is used as a pushpull output.
2.4.1
2.4.1.1
Registers
I/O Register
This register holds the value driven out to the pin if the port is used as a general purpose I/O. Writing to this register has only an effect on the pin if the port is used as general purpose output. When reading this address, the value of the pins are returned if the data direction register bits are set to 0. If the data direction register bits are set to 1, the contents of the I/O register is returned. This is independent of any other configuration (Figure 2-46).
PTI 0 1 PAD
PT
0 1 0 1 Data Out
DDR
Module
2.4.1.2
Input Register
This is a read-only register and always returns the value of the pin (Figure 2-46).
2.4.1.3
This register defines whether the pin is used as an input or an output. If a peripheral module controls the pin the contents of the data direction register is ignored (Figure 2-46).
104
Freescale Semiconductor
2.4.1.4
If the port is used as an output the register allows the configuration of the drive strength.
2.4.1.5
This register turns on a pull-up or pull-down device. It becomes only active if the pin is used as an input or as a wired-or output.
2.4.1.6
This register selects either a pull-up or pull-down device if enabled. It becomes only active if the pin is used as an input. A pull-up device can be activated if the pin is used as a wired-OR output.
2.4.2
2.4.2.1
Port Descriptions
Port T
This port is associated with the Standard Capture Timer. PWM output channels can be rerouted from port P to port pins T. In all modes, port T pins can be used for either general-purpose I/O, Standard Capture Timer I/O or as PWM channels module, if so configured by MODRR. During reset, port T pins are configured as high-impedance inputs.
2.4.2.2
Port S
This port is associated with the serial SCI module. Port S pins PS[3:0] can be used either for generalpurpose I/O, or with the SCI subsystem. During reset, port S pins are configured as inputs with pull-up.
2.4.2.3
Port M
This port is associated with the MSCAN and SPI module. Port M pins PM[5:0] can be used either for general-purpose I/O, with the MSCAN or SPI subsystems. During reset, port M pins are configured as inputs with pull-up.
2.4.2.4
Port AD
This port is associated with the ATD module. Port AD pins can be used either for general-purpose I/O, or for the ATD subsystem. There are 2 data port registers associated with the Port AD: PTAD[7:0], located in the PIM and PORTAD[7:0] located in the ATD. To use PTAD[n] as a standard input port, the corresponding DDRD[n] must be cleared. To use PTAD[n] as a standard output port, the corresponding DDRD[n] must be set NOTE: To use PORTAD[n], located in the ATD as an input port register, DDRD[n] must be cleared and ATDDIEN[n] must be set. Please refer to ATD Block Guide for details.
Freescale Semiconductor
105
2.4.2.5
Port P
The PWM module is connected to port P. Port P pins can be used as PWM outputs. Further the Keypad Wake-Up function is implemented on pins PP[7:0]. During reset, port P pins are configured as highimpedance inputs. Port P offers 8 general purpose I/O pins with edge triggered interrupt capability in wired-or fashion. The interrupt enable as well as the sensitivity to rising or falling edges can be individually configured on per pin basis. All 8 bits/pins share the same interrupt vector. Interrupts can be used with the pins configured as inputs or outputs. An interrupt is generated when a bit in the port interrupt flag register and its corresponding port interrupt enable bit are both set. This external interrupt feature is capable to wake up the CPU when it is in STOP or WAIT mode. A digital filter on each pin prevents pulses (Figure 2-48) shorter than a specified time from generating an interrupt. The minimum time varies over process conditions, temperature and voltage (Figure 2-47 and Table 2-38).
Glitch, ltered out, no interrupt ag set
tpign tpval Figure 2-47. Interrupt Glitch Filter on Port P and J (PPS = 0) Table 2-38. Pulse Detection Criteria
STOP Mode Pulse Value Unit Value Unit Bus clocks tpign <= 3.2 s Ignored tpign <= 3 Uncertain 3 < tpulse < 4 Bus clocks 3.2 < tpulse < 10 s Valid tpval >= 4 Bus clocks tpval >= 10 s 1. These values include the spread of the oscillator frequency over temperature, voltage and process. STOP(1) Mode
tpulse
106
Freescale Semiconductor
A valid edge on input is detected if 4 consecutive samples of a passive level are followed by 4 consecutive samples of an active level directly or indirectly. The filters are continuously clocked by the bus clock in RUN and WAIT mode. In STOP mode the clock is generated by a single RC oscillator in the Port Integration Module. To maximize current saving the RC oscillator runs only if the following condition is true on any pin: Sample count <= 4 and port interrupt enabled (PIE=1) and port interrupt flag not set (PIF=0).
2.4.2.6
Port J
In all modes, port J pins PJ[7:6] can be used for general purpose I/O or interrupt driven general purpose I/Os. During reset, port J pins are configured as inputs. Port J offers 2 I/O ports with the same interrupt features as on port P.
2.4.3
All port and pin logic is located in the core module. Please refer to S12_mebi Block User Guide for details.
2.4.4
2.4.5
2.4.5.1
2.4.5.2
Wait Mode
2.4.5.3
Stop Mode
All clocks are stopped. There are asynchronous paths to generate interrupts from STOP on port P and J.
2.5
Initialization Information
The reset values of all registers are given in Section 2.3.2, Register Descriptions.
2.5.1
Reset Initialization
All registers including the data registers get set/reset asynchronously. Table 2-39 summarizes the port properties after reset initialization.
Freescale Semiconductor
107
2.6
Interrupts
2.6.1
Interrupt Sources
Table 2-40. Port Integration Module Interrupt Sources
Interrupt Source Port P Port J Interrupt Flag PIFP[7:0] PIFJ[7:6] Local Enable PIEP[7:0] PIEJ[7:6] Global (CCR) Mask I Bit I Bit
NOTE Vector addresses and their relative interrupt priority are determined at the MCU level.
2.6.2
The PIM can generate wake-up interrupts from STOP on port P and J. For other sources of external interrupts please refer to the respective Block User Guide.
2.7
Application Information
It is not recommended to write PORTx and DDRx in a word access. When changing the register pins from inputs to outputs, the data may have extra transitions during the write access. Initialize the port data register before enabling the outputs. Power consumption will increase the more the voltages on general purpose input pins deviate from the supply voltages towards mid-range because the digital input buffers operate in the linear region.
108
Freescale Semiconductor
ADDRESS DECODE READ & WRITE ENABLES CLOCKS, RESET MODE INFORMATION INTERNAL MEMORY EXPANSION REGISTERS PORT K INTERFACE MEMORY SPACE SELECT(S) PERIPHERAL SELECT EBI ALTERNATE ADDRESS BUS EBI ALTERNATE WRITE DATA BUS EBI ALTERNATE READ DATA BUS ALTERNATE ADDRESS BUS (BDM) CPU ADDRESS BUS CPU READ DATA BUS CPU WRITE DATA BUS CPU CONTROL BUS CONTROL ALTERNATE WRITE DATA BUS (BDM) ALTERNATE READ DATA BUS (BDM) CORE SELECT (S)
The MMC is the sub-module which controls memory map assignment and selection of internal resources and external space. Internal buses between the core and memories and between the core and peripherals is controlled in this module. The memory expansion is generated in this module.
Freescale Semiconductor
109
3.1.1
Features
Registers for mapping of address space for on-chip RAM, EEPROM, and FLASH (or ROM) memory blocks and associated registers Memory mapping control and selection based upon address decode and system operating mode Core address bus control Core data bus control and multiplexing Core security state decoding Emulation chip select signal generation (ECS) External chip select signal generation (XCS) Internal memory expansion External stretch and ROM mapping control functions via the MISC register Reserved registers for test purposes Congurable system memory options dened at integration of core into the system-on-a-chip (SoC).
3.1.2
Modes of Operation
Some of the registers operate differently depending on the mode of operation (i.e., normal expanded wide, special single chip, etc.). This is best understood from the register descriptions.
3.2
All interfacing with the MMC sub-block is done within the core, it has no external signals.
3.3
A summary of the registers associated with the MMC sub-block is shown in Figure 3-2. Detailed descriptions of the registers and bits are given in the subsections that follow.
3.3.1
110
Freescale Semiconductor
Freescale Semiconductor
111
3.3.2
Name 0x0010 INITRM 0x0011 INITRG 0x0012 INITEE 0x0013 MISC 0x0014 MTSTO
Register Descriptions
Bit 7 R W R W R W R W R W R W R REG_SW0 W R ROM_SW1 ROM_SW0 W R W R W = Unimplemented 0 0 0 0 0 0 0 0 PAG_SW1 PAG_SW0 0 EEP_SW1 EEP_SW0 0 RAM_SW2 RAM_SW1 RAM_SW0 Bit 7 6 5 4 3 2 1 Bit 0 Bit 7 6 5 4 EE15 0 RAM15 0 6 RAM14 5 RAM13 4 RAM12 3 RAM11 2 0 1 0 Bit 0 RAMHAL 0
REG14
REG13
REG12
REG11
EE14 0
EE13 0
EE12 0
EE11
EEON
EXSTR1 3
EXSTR0 2
ROMHM 1
ROMON Bit 0
0x0017 MTST1
PIX5 0
PIX4 0
PIX3 0
PIX2 0
PIX1 0
PIX0 0
112
Freescale Semiconductor
3.3.2.1
Module Base + 0x0010 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
0 RAMHAL
= Unimplemented or Reserved
Read: Anytime Write: Once in normal and emulation modes, anytime in special modes NOTE Writes to this register take one cycle to go into effect. This register initializes the position of the internal RAM within the on-chip system memory map.
Table 3-2. INITRM Field Descriptions
Field Description
7:3 Internal RAM Map Position These bits determine the upper ve bits of the base address for the systems RAM[15:11] internal RAM array. 0 RAMHAL RAM High-Align RAMHAL species the alignment of the internal RAM array. 0 Aligns the RAM to the lowest address (0x0000) of the mappable space 1 Aligns the RAM to the higher address (0xFFFF) of the mappable space
Freescale Semiconductor
113
3.3.2.2
Module Base + 0x0011 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
Read: Anytime Write: Once in normal and emulation modes and anytime in special modes This register initializes the position of the internal registers within the on-chip system memory map. The registers occupy either a 1K byte or 2K byte space and can be mapped to any 2K byte space within the rst 32K bytes of the systems address space.
Table 3-3. INITRG Field Descriptions
Field Description
6:3 Internal Register Map Position These four bits in combination with the leading zero supplied by bit 7 of REG[14:11] INITRG determine the upper ve bits of the base address for the systems internal registers (i.e., the minimum base address is 0x0000 and the maximum is 0x7FFF).
114
Freescale Semiconductor
3.3.2.3
Module Base + 0x0012 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
0 EEON
1. The reset state of this register is controlled at chip integration. Please refer to the device overview section to determine the actual reset state of this register. = Unimplemented or Reserved
Read: Anytime Write: The EEON bit can be written to any time on all devices. Bits E[11:15] are write anytime in all modes on most devices. On some devices, bits E[11:15] are write once in normal and emulation modes and write anytime in special modes. See device overview chapter to determine the actual write access rights. NOTE Writes to this register take one cycle to go into effect. This register initializes the position of the internal EEPROM within the on-chip system memory map.
Table 3-4. INITEE Field Descriptions
Field 7:3 EE[15:11] 0 EEON Description Internal EEPROM Map Position These bits determine the upper ve bits of the base address for the systems internal EEPROM array. Enable EEPROM This bit is used to enable the EEPROM memory in the memory map. 0 Disables the EEPROM from the memory map. 1 Enables the EEPROM in the memory map at the address selected by EE[15:11].
Freescale Semiconductor
115
3.3.2.4
Module Base + 0x0013 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R W Reset: Expanded or Emulation Reset: Peripheral or Single Chip Reset: Special Test
0 0 0
0 0 0
0 0 0
0 0 0
1 1 1
1 1 1
0 0 0
1. The reset state of this bit is determined at the chip integration level. = Unimplemented or Reserved
Read: Anytime Write: As stated in each bit description NOTE Writes to this register take one cycle to go into effect. This register initializes miscellaneous control functions.
Table 3-5. INITEE Field Descriptions
Field Description
3:2 External Access Stretch Bits 1 and 0 EXSTR[1:0] Write: once in normal and emulation modes and anytime in special modes This two-bit eld determines the amount of clock stretch on accesses to the external address space as shown in Table 3-6. In single chip and peripheral modes these bits have no meaning or effect. 1 ROMHM FLASH EEPROM or ROM Only in Second Half of Memory Map Write: once in normal and emulation modes and anytime in special modes 0 The xed page(s) of FLASH EEPROM or ROM in the lower half of the memory map can be accessed. 1 Disables direct access to the FLASH EEPROM or ROM in the lower half of the memory map. These physical locations of the FLASH EEPROM or ROM remain accessible through the program page window. ROMON Enable FLASH EEPROM or ROM Write: once in normal and emulation modes and anytime in special modes This bit is used to enable the FLASH EEPROM or ROM memory in the memory map. 0 Disables the FLASH EEPROM or ROM from the memory map. 1 Enables the FLASH EEPROM or ROM in the memory map.
0 ROMON
116
Freescale Semiconductor
3.3.2.5
Module Base + 0x0014 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
Read: Anytime Write: No effect this register location is used for internal test purposes.
3.3.2.6
Module Base + 0x0017 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
Read: Anytime Write: No effect this register location is used for internal test purposes.
Freescale Semiconductor
117
3.3.2.7
Module Base + 0x001C Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R REG_SW0 W Reset
EEP_SW1
EEP_SW0
RAM_SW2
RAM_SW1
RAM_SW0
= Unimplemented or Reserved
Read: Anytime Write: Writes have no effect Reset: Dened at chip integration, see device overview section. The MEMSIZ0 register reects the state of the register, EEPROM and RAM memory space conguration switches at the core boundary which are congured at system integration. This register allows read visibility to the state of these switches.
Table 3-7. MEMSIZ0 Field Descriptions
Field 7 REG_SW0 Description Allocated System Register Space 0 Allocated system register space size is 1K byte 1 Allocated system register space size is 2K byte
5:4 Allocated System EEPROM Memory Space The allocated system EEPROM memory space size is as EEP_SW[1:0] given in Table 3-8. 2 Allocated System RAM Memory Space The allocated system RAM memory space size is as given in RAM_SW[2:0] Table 3-9.
118
Freescale Semiconductor
16K bytes 2
111 16K bytes 16K bytes RAM[15:14] 0x0000 1. The RAM Reset BASE Address is based on the reset value of the INITRM register, 0x0009. 2. Alignment of the Allocated RAM space within the RAM mappable region is dependent on the value of RAMHAL.
NOTE As stated, the bits in this register provide read visibility to the system physical memory space allocations dened at system integration. The actual array size for any given type of memory block may differ from the allocated size. Please refer to the device overview chapter for actual sizes.
3.3.2.8
Module Base + 0x001D Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R ROM_SW1 W Reset
ROM_SW0
PAG_SW1
PAG_SW0
= Unimplemented or Reserved
Read: Anytime Write: Writes have no effect Reset: Dened at chip integration, see device overview section. The MEMSIZ1 register reects the state of the FLASH or ROM physical memory space and paging switches at the core boundary which are congured at system integration. This register allows read visibility to the state of these switches.
Freescale Semiconductor
119
7:6 Allocated System FLASH or ROM Physical Memory Space The allocated system FLASH or ROM ROM_SW[1:0] physical memory space is as given in Table 3-11. 1:0 Allocated Off-Chip FLASH or ROM Memory Space The allocated off-chip FLASH or ROM memory space PAG_SW[1:0] size is as given in Table 3-12.
NOTES: 1. The ROMHM software bit in the MISC register determines the accessibility of the FLASH/ROM memory space. Please refer to Section 3.3.2.8, Memory Size Register 1 (MEMSIZ1), for a detailed functional description of the ROMHM bit.
NOTE As stated, the bits in this register provide read visibility to the system memory space and on-chip/off-chip partitioning allocations dened at system integration. The actual array size for any given type of memory block may differ from the allocated size. Please refer to the device overview chapter for actual sizes.
120
Freescale Semiconductor
3.3.2.9
Module Base + 0x0030 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R W Reset1
1. The reset state of this register is controlled at chip integration. Please refer to the device overview section to determine the actual reset state of this register. = Unimplemented or Reserved
Read: Anytime Write: Determined at chip integration. Generally its: write anytime in all modes; on some devices it will be: write only in special modes. Check specic device documentation to determine which applies. Reset: Dened at chip integration as either 0x00 (paired with write in any mode) or 0x3C (paired with write only in special modes), see device overview chapter. The HCS12 core architecture limits the physical address space available to 64K bytes. The program page index register allows for integrating up to 1M byte of FLASH or ROM into the system by using the six page index bits to page 16K byte blocks into the program page window located from 0x8000 to 0xBFFF as dened in Table 3-14. CALL and RTC instructions have special access to read and write this register without using the address bus. NOTE Normal writes to this register take one cycle to go into effect. Writes to this register using the special access of the CALL and RTC instructions will be complete before the end of the associated instruction.
Table 3-13. MEMSIZ0 Field Descriptions
Field 5:0 PIX[5:0] Description Program Page Index Bits 5:0 These page index bits are used to select which of the 64 FLASH or ROM array pages is to be accessed in the program page window as shown in Table 3-14.
Freescale Semiconductor
121
3.4
Functional Description
The MMC sub-block performs four basic functions of the core operation: bus control, address decoding and select signal generation, memory expansion, and security decoding for the system. Each aspect is described in the following subsections.
3.4.1
Bus Control
The MMC controls the address bus and data buses that interface the core with the rest of the system. This includes the multiplexing of the input data buses to the core onto the main CPU read data bus and control of data ow from the CPU to the output address and data buses of the core. In addition, the MMC manages all CPU read data bus swapping operations.
3.4.2
Address Decoding
As data ows on the core address bus, the MMC decodes the address information, determines whether the internal core register or rmware space, the peripheral space or a memory register or array space is being addressed and generates the correct select signal. This decoding operation also interprets the mode of operation of the system and the state of the mapping control registers in order to generate the proper select. The MMC also generates two external chip select signals, emulation chip select (ECS) and external chip select (XCS).
3.4.2.1
Although internal resources such as control registers and on-chip memory have default addresses, each can be relocated by changing the default values in control registers. Normally, I/O addresses, control registers,
122
Freescale Semiconductor
vector spaces, expansion windows, and on-chip memory are mapped so that their address ranges do not overlap. The MMC will make only one select signal active at any given time. This activation is based upon the priority outlined in Table 3-15. If two or more blocks share the same address space, only the select signal for the block with the highest priority will become active. An example of this is if the registers and the RAM are mapped to the same space, the registers will have priority over the RAM and the portion of RAM mapped in this shared space will not be accessible. The expansion windows have the lowest priority. This means that registers, vectors, and on-chip memory are always visible to a program regardless of the values in the page select registers.
Table 3-15. Select Signal Priority
Priority Highest ... ... ... ... Lowest Address Space BDM (internal to core) rmware or register space Internal register space RAM memory block EEPROM memory block On-chip FLASH or ROM Remaining external space
In expanded modes, all address space not used by internal resources is by default external memory space. The data registers and data direction registers for ports A and B are removed from the on-chip memory map and become external accesses. If the EME bit in the MODE register (see MEBI block description chapter) is set, the data and data direction registers for port E are also removed from the on-chip memory map and become external accesses. In special peripheral mode, the rst 16 registers associated with bus expansion are removed from the onchip memory map (PORTA, PORTB, DDRA, DDRB, PORTE, DDRE, PEAR, MODE, PUCR, RDRIV, and the EBI reserved registers). In emulation modes, if the EMK bit in the MODE register (see MEBI block description chapter) is set, the data and data direction registers for port K are removed from the on-chip memory map and become external accesses.
3.4.2.2
When the EMK bit in the MODE register (see MEBI block description chapter) is set, port K bit 7 is used as an active-low emulation chip select signal, ECS. This signal is active when the system is in emulation mode, the EMK bit is set and the FLASH or ROM space is being addressed subject to the conditions outlined in Section 3.4.3.2, Extended Address (XAB19:14) and ECS Signal Functionality. When the EMK bit is clear, this pin is used for general purpose I/O.
3.4.2.3
When the EMK bit in the MODE register (see MEBI block description chapter) is set, port K bit 6 is used as an active-low external chip select signal, XCS. This signal is active only when the ECS signal described above is not active and when the system is addressing the external address space. Accesses to
Freescale Semiconductor
123
unimplemented locations within the register space or to locations that are removed from the map (i.e., ports A and B in expanded modes) will not cause this signal to become active. When the EMK bit is clear, this pin is used for general purpose I/O.
3.4.3
Memory Expansion
The HCS12 core architecture limits the physical address space available to 64K bytes. The program page index register allows for integrating up to 1M byte of FLASH or ROM into the system by using the six page index bits to page 16K byte blocks into the program page window located from 0x8000 to 0xBFFF in the physical memory space. The paged memory space can consist of solely on-chip memory or a combination of on-chip and off-chip memory. This partitioning is congured at system integration through the use of the paging conguration switches (pag_sw1:pag_sw0) at the core boundary. The options available to the integrator are as given in Table 3-16 (this table matches Table 3-12 but is repeated here for easy reference).
Table 3-16. Allocated Off-Chip Memory Options
pag_sw1:pag_sw0 00 01 10 11 Off-Chip Space 876K bytes 768K bytes 512K bytes 0K byte On-Chip Space 128K bytes 256K bytes 512K bytes 1M byte
Based upon the system conguration, the program page window will consider its access to be either internal or external as dened in Table 3-17.
Table 3-17. External/Internal Page Window Access
pag_sw1:pag_sw0 00 Partitioning 876K off-Chip, 128K on-Chip 768K off-chip, 256K on-chip 512K off-chip, 512K on-chip 0K off-chip, 1M on-chip PIX5:0 Value 0x00000x0037 0x00380x003F 0x00000x002F 0x00300x003F 0x00000x001F 0x00200x003F N/A 0x00000x003F Page Window Access External Internal External Internal External Internal External Internal
01
10
11
NOTE The partitioning as dened in Table 3-17 applies only to the allocated memory space and the actual on-chip memory sizes implemented in the system may differ. Please refer to the device overview chapter for actual sizes.
124
Freescale Semiconductor
The PPAGE register holds the page select value for the program page window. The value of the PPAGE register can be manipulated by normal read and write (some devices dont allow writes in some modes) instructions as well as the CALL and RTC instructions. Control registers, vector spaces, and a portion of on-chip memory are located in unpaged portions of the 64K byte physical address space. The stack and I/O addresses should also be in unpaged memory to make them accessible from any page. The starting address of a service routine must be located in unpaged memory because the 16-bit exception vectors cannot point to addresses in paged memory. However, a service routine can call other routines that are in paged memory. The upper 16K byte block of memory space (0xC0000xFFFF) is unpaged. It is recommended that all reset and interrupt vectors point to locations in this area.
3.4.3.1
CALL and RTC are uninterruptable instructions that automate page switching in the program expansion window. CALL is similar to a JSR instruction, but the subroutine that is called can be located anywhere in the normal 64K byte address space or on any page of program expansion memory. CALL calculates and stacks a return address, stacks the current PPAGE value, and writes a new instruction-supplied value to PPAGE. The PPAGE value controls which of the 64 possible pages is visible through the 16K byte expansion window in the 64K byte memory map. Execution then begins at the address of the called subroutine. During the execution of a CALL instruction, the CPU: Writes the old PPAGE value into an internal temporary register and writes the new instructionsupplied PPAGE value into the PPAGE register. Calculates the address of the next instruction after the CALL instruction (the return address), and pushes this 16-bit value onto the stack. Pushes the old PPAGE value onto the stack. Calculates the effective address of the subroutine, rells the queue, and begins execution at the new address on the selected page of the expansion window. This sequence is uninterruptable; there is no need to inhibit interrupts during CALL execution. A CALL can be performed from any address in memory to any other address. The PPAGE value supplied by the instruction is part of the effective address. For all addressing mode variations except indexed-indirect modes, the new page value is provided by an immediate operand in the instruction. In indexed-indirect variations of CALL, a pointer species memory locations where the new page value and the address of the called subroutine are stored. Using indirect addressing for both the new page value and the address within the page allows values calculated at run time rather than immediate values that must be known at the time of assembly. The RTC instruction terminates subroutines invoked by a CALL instruction. RTC unstacks the PPAGE value and the return address and rells the queue. Execution resumes with the next instruction after the CALL.
Freescale Semiconductor
125
During the execution of an RTC instruction, the CPU: Pulls the old PPAGE value from the stack Pulls the 16-bit return address from the stack and loads it into the PC Writes the old PPAGE value into the PPAGE register Rells the queue and resumes execution at the return address This sequence is uninterruptable; an RTC can be executed from anywhere in memory, even from a different page of extended memory in the expansion window. The CALL and RTC instructions behave like JSR and RTS, except they use more execution cycles. Therefore, routinely substituting CALL/RTC for JSR/RTS is not recommended. JSR and RTS can be used to access subroutines that are on the same page in expanded memory. However, a subroutine in expanded memory that can be called from other pages must be terminated with an RTC. And the RTC unstacks a PPAGE value. So any access to the subroutine, even from the same page, must use a CALL instruction so that the correct PPAGE value is in the stack.
3.4.3.2
If the EMK bit in the MODE register is set (see MEBI block description chapter) the PIX5:0 values will be output on XAB19:14 respectively (port K bits 5:0) when the system is addressing within the physical program page window address space (0x80000xBFFF) and is in an expanded mode. When addressing anywhere else within the physical address space (outside of the paging space), the XAB19:14 signals will be assigned a constant value based upon the physical address space selected. In addition, the active-low emulation chip select signal, ECS, will likewise function based upon the assigned memory allocation. In the cases of 48K byte and 64K byte allocated physical FLASH/ROM space, the operation of the ECS signal will additionally depend upon the state of the ROMHM bit (see Section 3.3.2.4, Miscellaneous System Control Register (MISC)) in the MISC register. Table 3-18, Table 3-19, Table 3-20, and Table 321 summarize the functionality of these signals based upon the allocated memory conguration. Again, this signal information is only available externally when the EMK bit is set and the system is in an expanded mode.
Table 3-18. 0K Byte Physical FLASH/ROM Allocated
Address Space 0x00000x3FFF 0x40000x7FFF 0x80000xBFFF 0xC0000xFFFF Page Window Access N/A N/A N/A N/A ROMHM N/A N/A N/A N/A ECS 1 1 0 0 XAB19:14 0x3D 0x3E PIX[5:0] 0x3F
126
Freescale Semiconductor
Freescale Semiconductor
127
A graphical example of a memory paging for a system congured as 1M byte on-chip FLASH/ROM with 64K allocated physical space is given in Figure 3-12.
0x0000 61
0x4000
62
16K FLASH (UNPAGED) ONE 16K FLASH/ROM PAGE ACCESSIBLE AT A TIME (SELECTED BY PPAGE = 0 TO 63) 0x8000 0 1 2 3 59 60 61 62 63
0xC000 63 These 16K FLASH/ROM pages accessible from 0x0000 to 0x7FFF if selected by the ROMHM bit in the MISC register. 16K FLASH (UNPAGED)
Figure 3-12. Memory Paging Example: 1M Byte On-Chip FLASH/ROM, 64K Allocation
128
Freescale Semiconductor
4.1.1
Features
The block name includes these distinctive features: External bus controller with four 8-bit ports A,B, E, and K Data and data direction registers for ports A, B, E, and K when used as general-purpose I/O Control register to enable/disable alternate functions on ports E and K Mode control register Control register to enable/disable pull resistors on ports A, B, E, and K Control register to enable/disable reduced output drive on ports A, B, E, and K Control register to congure external clock behavior Control register to congure IRQ pin operation Logic to capture and synchronize external interrupt pin inputs
Freescale Semiconductor
129
REGS
Port K
ADDR
PK[7:0]/ECS/XCS/X[19:14]
Internal Bus
Data[15:0]
ADDR DATA
Port A
Addr[19:0]
PA[7:0]/A[15:8]/ D[15:8]/D[7:0]
(Control)
Port B
ADDR
PB[7:0]/A[7:0]/ D[7:0]
DATA
PE[7:2]/NOACC/ IPIPE1/MODB/CLKTO IPIPE0/MODA/ ECLK/ LSTRB/TAGLO R/W PE1/IRQ PE0/XIRQ
ECLK CTL
CPU pipe info IRQ interrupt XIRQ interrupt
Port E
BKGD
BKGD/MODC/TAGHI
Control signal(s) Data signal (unidirectional) Data signal (bidirectional) Data bus (unidirectional) Data bus (bidirectional)
130
Freescale Semiconductor
4.1.2
Modes of Operation
Normal expanded wide mode Ports A and B are congured as a 16-bit multiplexed address and data bus and port E provides bus control and status signals. This mode allows 16-bit external memory and peripheral devices to be interfaced to the system. Normal expanded narrow mode Ports A and B are congured as a 16-bit address bus and port A is multiplexed with 8-bit data. Port E provides bus control and status signals. This mode allows 8-bit external memory and peripheral devices to be interfaced to the system. Normal single-chip mode There is no external expansion bus in this mode. The processor program is executed from internal memory. Ports A, B, K, and most of E are available as general-purpose I/O. Special single-chip mode This mode is generally used for debugging single-chip operation, boot-strapping, or security related operations. The active background mode is in control of CPU execution and BDM rmware is waiting for additional serial commands through the BKGD pin. There is no external expansion bus after reset in this mode. Emulation expanded wide mode Developers use this mode for emulation systems in which the users target application is normal expanded wide mode. Emulation expanded narrow mode Developers use this mode for emulation systems in which the users target application is normal expanded narrow mode. Special test mode Ports A and B are congured as a 16-bit multiplexed address and data bus and port E provides bus control and status signals. In special test mode, the write protection of many control bits is lifted so that they can be thoroughly tested without needing to go through reset. Special peripheral mode This mode is intended for Freescale Semiconductor factory testing of the system. The CPU is inactive and an external (tester) bus master drives address, data, and bus control signals.
4.2
In typical implementations, the MEBI sub-block of the core interfaces directly with external system pins. Some pins may not be bonded out in all implementations. Table 4-1 outlines the pin names and functions and gives a brief description of their operation reset state of these pins and associated pull-ups or pull-downs is dependent on the mode of operation and on the integration of this block at the chip level (chip dependent).
Freescale Semiconductor
131
BKGD/MODC/ TAGHI
PE7/NOACC
PE7 NOACC
PE6/IPIPE1/ MODB/CLKTO
PE5/IPIPE0/MODA
132
Freescale Semiconductor
PE3/LSTRB/ TAGLO
PE2/R/W
PE2 R/W
PE1/IRQ
PE1 IRQ
PE0/XIRQ
PE0 XIRQ
PK7/ECS
PK7 ECS
PK6/XCS
PK6 XCS
PK5PK0 X19X14
Detailed descriptions of these pins can be found in the device overview chapter.
4.3
A summary of the registers associated with the MEBI sub-block is shown in Table 4-2. Detailed descriptions of the registers and bits are given in the subsections that follow. On most chips the registers are mappable. Therefore, the upper bits may not be all 0s as shown in the table and descriptions.
Freescale Semiconductor
133
4.3.1
4.3.2
4.3.2.1
Register Descriptions
Port A Data Register (PORTA)
Module Base + 0x0000 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R Bit 7 W Reset Single Chip 0 PA7 0 PA6 AB/DB14 0 PA5 AB/DB13 0 PA4 AB/DB12 0 PA3 AB/DB11 0 PA2 AB/DB10 0 PA1 AB/DB9 AB9 and DB9/DB1 0 PA0 AB/DB8 AB8 and DB8/DB0 6 5 4 3 2 1 Bit 0
Expanded Narrow AB15 and AB14 and AB13 and AB12 and AB11 and AB10 and DB15/DB7 DB14/DB6 DB13/DB5 DB12/DB4 DB11/DB3 DB10/DB2
134
Freescale Semiconductor
Read: Anytime when register is in the map Write: Anytime when register is in the map Port A bits 7 through 0 are associated with address lines A15 through A8 respectively and data lines D15/D7 through D8/D0 respectively. When this port is not used for external addresses such as in singlechip mode, these pins can be used as general-purpose I/O. Data direction register A (DDRA) determines the primary direction of each pin. DDRA also determines the source of data for a read of PORTA. This register is not in the on-chip memory map in expanded and special peripheral modes. Therefore, these accesses will be echoed externally. NOTE To ensure that you read the value present on the PORTA pins, always wait at least one cycle after writing to the DDRA register before reading from the PORTA register.
4.3.2.2
Module Base + 0x0001 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R Bit 7 W Reset Single Chip Expanded Wide, Emulation Narrow with IVIS, and Peripheral Expanded Narrow 0 PB7 AB/DB7 AB7 0 PB6 AB/DB6 AB6 0 PB5 AB/DB5 AB5 0 PB4 AB/DB4 AB4 0 PB3 AB/DB3 AB3 0 PB2 AB/DB2 AB2 0 PB1 AB/DB1 AB1 0 PB0 AB/DB0 AB0 6 5 4 3 2 1 Bit 0
Read: Anytime when register is in the map Write: Anytime when register is in the map Port B bits 7 through 0 are associated with address lines A7 through A0 respectively and data lines D7 through D0 respectively. When this port is not used for external addresses, such as in single-chip mode, these pins can be used as general-purpose I/O. Data direction register B (DDRB) determines the primary direction of each pin. DDRB also determines the source of data for a read of PORTB. This register is not in the on-chip memory map in expanded and special peripheral modes. Therefore, these accesses will be echoed externally. NOTE To ensure that you read the value present on the PORTB pins, always wait at least one cycle after writing to the DDRB register before reading from the PORTB register.
Freescale Semiconductor
135
4.3.2.3
Module Base + 0x0002 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
Read: Anytime when register is in the map Write: Anytime when register is in the map This register controls the data direction for port A. When port A is operating as a general-purpose I/O port, DDRA determines the primary direction for each port A pin. A 1 causes the associated port pin to be an output and a 0 causes the associated pin to be a high-impedance input. The value in a DDR bit also affects the source of data for reads of the corresponding PORTA register. If the DDR bit is 0 (input) the buffered pin input state is read. If the DDR bit is 1 (output) the associated port data register bit state is read. This register is not in the on-chip memory map in expanded and special peripheral modes. Therefore, these accesses will be echoed externally. It is reset to 0x00 so the DDR does not override the three-state control signals.
Table 4-3. DDRA Field Descriptions
Field 7:0 DDRA Description Data Direction Port A 0 Congure the corresponding I/O pin as an input 1 Congure the corresponding I/O pin as an output
136
Freescale Semiconductor
4.3.2.4
Module Base + 0x0003 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
Read: Anytime when register is in the map Write: Anytime when register is in the map This register controls the data direction for port B. When port B is operating as a general-purpose I/O port, DDRB determines the primary direction for each port B pin. A 1 causes the associated port pin to be an output and a 0 causes the associated pin to be a high-impedance input. The value in a DDR bit also affects the source of data for reads of the corresponding PORTB register. If the DDR bit is 0 (input) the buffered pin input state is read. If the DDR bit is 1 (output) the associated port data register bit state is read. This register is not in the on-chip memory map in expanded and special peripheral modes. Therefore, these accesses will be echoed externally. It is reset to 0x00 so the DDR does not override the three-state control signals.
Table 4-4. DDRB Field Descriptions
Field 7:0 DDRB Description Data Direction Port B 0 Congure the corresponding I/O pin as an input 1 Congure the corresponding I/O pin as an output
Freescale Semiconductor
137
4.3.2.5
Reserved Registers
Module Base + 0x0004 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
R W Reset
= Unimplemented or Reserved
R W Reset
= Unimplemented or Reserved
R W Reset
= Unimplemented or Reserved
138
Freescale Semiconductor
These register locations are not used (reserved). All unused registers and bits in this block return logic 0s when read. Writes to these registers have no effect. These registers are not in the on-chip map in special peripheral mode.
4.3.2.6
Module Base + 0x0008 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R Bit 7 W Reset Alternate Pin Function 0 NOACC 0 MODB or IPIPE1 or CLKTO 0 MODA or IPIPE0 0 ECLK 0 LSTRB or TAGLO 0 R/W 6 5 4 3 2
Bit 1
Bit 0
u IRQ
u XIRQ
= Unimplemented or Reserved
u = Unaffected by reset
Read: Anytime when register is in the map Write: Anytime when register is in the map Port E is associated with external bus control signals and interrupt inputs. These include mode select (MODB/IPIPE1, MODA/IPIPE0), E clock, size (LSTRB/TAGLO), read/write (R/W), IRQ, and XIRQ. When not used for one of these specic functions, port E pins 7:2 can be used as general-purpose I/O and pins 1:0 can be used as general-purpose input. The port E assignment register (PEAR) selects the function of each pin and DDRE determines whether each pin is an input or output when it is congured to be general-purpose I/O. DDRE also determines the source of data for a read of PORTE. Some of these pins have software selectable pull resistors. IRQ and XIRQ can only be pulled up whereas the polarity of the PE7, PE4, PE3, and PE2 pull resistors are determined by chip integration. Please refer to the device overview chapter (Signal Property Summary) to determine the polarity of these resistors. A single control bit enables the pull devices for all of these pins when they are congured as inputs. This register is not in the on-chip map in special peripheral mode or in expanded modes when the EME bit is set. Therefore, these accesses will be echoed externally. NOTE It is unwise to write PORTE and DDRE as a word access. If you are changing port E pins from being inputs to outputs, the data may have extra transitions during the write. It is best to initialize PORTE before enabling as outputs.
Freescale Semiconductor
139
NOTE To ensure that you read the value present on the PORTE pins, always wait at least one cycle after writing to the DDRE register before reading from the PORTE register.
4.3.2.7
Module Base + 0x0009 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
= Unimplemented or Reserved
Read: Anytime when register is in the map Write: Anytime when register is in the map Data direction register E is associated with port E. For bits in port E that are congured as general-purpose I/O lines, DDRE determines the primary direction of each of these pins. A 1 causes the associated bit to be an output and a 0 causes the associated bit to be an input. Port E bit 1 (associated with IRQ) and bit 0 (associated with XIRQ) cannot be congured as outputs. Port E, bits 1 and 0, can be read regardless of whether the alternate interrupt function is enabled. The value in a DDR bit also affects the source of data for reads of the corresponding PORTE register. If the DDR bit is 0 (input) the buffered pin input state is read. If the DDR bit is 1 (output) the associated port data register bit state is read. This register is not in the on-chip memory map in expanded and special peripheral modes. Therefore, these accesses will be echoed externally. Also, it is not in the map in expanded modes while the EME control bit is set.
Table 4-5. DDRE Field Descriptions
Field 7:2 DDRE Description Data Direction Port E 0 Congure the corresponding I/O pin as an input 1 Congure the corresponding I/O pin as an output Note: It is unwise to write PORTE and DDRE as a word access. If you are changing port E pins from inputs to outputs, the data may have extra transitions during the write. It is best to initialize PORTE before enabling as outputs.
140
Freescale Semiconductor
4.3.2.8
Module Base + 0x000A Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R NOACCE W Reset Special Single Chip Special Test Peripheral Emulation Expanded Narrow Emulation Expanded Wide Normal Single Chip Normal Expanded Narrow Normal Expanded Wide 0 0 0 1 1 0 0 0
0 0 0 0 0 0 0 0
0 1 0 1 1 0 0 0
0 0 0 0 0 1 0 0
0 1 0 1 1 0 0 0
0 1 0 1 1 0 0 0
0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0
= Unimplemented or Reserved
Read: Anytime (provided this register is in the map). Write: Each bit has specic write conditions. Please refer to the descriptions of each bit on the following pages. Port E serves as general-purpose I/O or as system and bus control signals. The PEAR register is used to choose between the general-purpose I/O function and the alternate control functions. When an alternate control function is selected, the associated DDRE bits are overridden. The reset condition of this register depends on the mode of operation because bus control signals are needed immediately after reset in some modes. In normal single-chip mode, no external bus control signals are needed so all of port E is congured for general-purpose I/O. In normal expanded modes, only the E clock is congured for its alternate bus control function and the other bits of port E are congured for general-purpose I/O. As the reset vector is located in external memory, the E clock is required for this access. R/W is only needed by the system when there are external writable resources. If the normal expanded system needs any other bus control signals, PEAR would need to be written before any access that needed the additional signals. In special test and emulation modes, IPIPE1, IPIPE0, E, LSTRB, and R/W are congured out of reset as bus control signals. This register is not in the on-chip memory map in expanded and special peripheral modes. Therefore, these accesses will be echoed externally.
Freescale Semiconductor
141
5 PIPOE
4 NECLK
3 LSTRE
2 RDWE
142
Freescale Semiconductor
4.3.2.9
Module Base + 0x000B Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R MODC W Reset Special Single Chip Emulation Expanded Narrow Special Test Emulation Expanded Wide Normal Single Chip Normal Expanded Narrow Peripheral Normal Expanded Wide 0 0 0 0 1 1 1 1 0 0 1 1 0 0 1 1 0 1 0 1 0 1 0 1 MODB MODA
0 IVIS
0 EMK EME
0 0 0 0 0 0 0 0
0 1 1 1 0 0 0 0
0 0 0 0 0 0 0 0
0 1 0 1 0 0 0 0
0 1 0 1 0 0 0 0
= Unimplemented or Reserved
Read: Anytime (provided this register is in the map). Write: Each bit has specific write conditions. Please refer to the descriptions of each bit on the following pages. The MODE register is used to establish the operating mode and other miscellaneous functions (i.e., internal visibility and emulation of port E and K). In special peripheral mode, this register is not accessible but it is reset as shown to system conguration features. Changes to bits in the MODE register are delayed one cycle after the write. This register is not in the on-chip memory map in expanded and special peripheral modes. Therefore, these accesses will be echoed externally.
Freescale Semiconductor
143
1 EMK
0 EME
144
Freescale Semiconductor
1 1 1
0 1 1
1 0 1
1. No writes to the MOD bits are allowed while operating in a secure mode. For more details, refer to the device overview chapter. 2. If you are in a special single-chip or special test mode and you write to this register, changing to normal single-chip mode, then one allowed write to this register remains. If you write to normal expanded or emulation mode, then no writes remain.
4.3.2.10
Module Base + 0x000C Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R PUPKE W Reset1 1
0 PUPEE
0 PUPBE PUPAE 0
NOTES: 1. The default value of this parameter is shown. Please refer to the device overview chapter to determine the actual reset state of this register.
= Unimplemented or Reserved
Read: Anytime (provided this register is in the map). Write: Anytime (provided this register is in the map). This register is used to select pull resistors for the pins associated with the core ports. Pull resistors are assigned on a per-port basis and apply to any pin in the corresponding port that is currently congured as an input. The polarity of these pull resistors is determined by chip integration. Please refer to the device overview chapter to determine the polarity of these resistors.
Freescale Semiconductor
145
This register is not in the on-chip memory map in expanded and special peripheral modes. Therefore, these accesses will be echoed externally. NOTE These bits have no effect when the associated pin(s) are outputs. (The pull resistors are inactive.)
Table 4-9. PUCR Field Descriptions
Field 7 PUPKE 4 PUPEE Pull resistors Port K Enable 0 Port K pull resistors are disabled. 1 Enable pull resistors for port K input pins. Pull resistors Port E Enable 0 Port E pull resistors on bits 7, 4:0 are disabled. 1 Enable pull resistors for port E input pins bits 7, 4:0. Note: Pins 5 and 6 of port E have pull resistors which are only enabled during reset. This bit has no effect on these pins. Pull resistors Port B Enable 0 Port B pull resistors are disabled. 1 Enable pull resistors for all port B input pins. Pull resistors Port A Enable 0 Port A pull resistors are disabled. 1 Enable pull resistors for all port A input pins. Description
1 PUPBE 0 PUPAE
4.3.2.11
Module Base + 0x000D Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R RDRK W Reset 0
0 RDPE
0 RDPB RDPA 0
= Unimplemented or Reserved
Read: Anytime (provided this register is in the map) Write: Anytime (provided this register is in the map) This register is used to select reduced drive for the pins associated with the core ports. This gives reduced power consumption and reduced RFI with a slight increase in transition time (depending on loading). This feature would be used on ports which have a light loading. The reduced drive function is independent of which function is being used on a particular port. This register is not in the on-chip memory map in expanded and special peripheral modes. Therefore, these accesses will be echoed externally.
146
Freescale Semiconductor
4.3.2.12
Module Base + 0x000E Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
0 ESTR
0 0
0 0
0 0
0 0
0 0
0 0
0 0
0 1
= Unimplemented or Reserved
Read: Anytime (provided this register is in the map) Write: Refer to individual bit descriptions below The EBICTL register is used to control miscellaneous functions (i.e., stretching of external E clock). This register is not in the on-chip memory map in expanded and special peripheral modes. Therefore, these accesses will be echoed externally.
Table 4-11. EBICTL Field Descriptions
Field 0 ESTR Description E Clock Stretches This control bit determines whether the E clock behaves as a simple free-running clock or as a bus control signal that is active only for external bus cycles. Normal and Emulation: write once Special: write anytime 0 E never stretches (always free running). 1 E stretches high during stretched external accesses and remains low during non-visible internal accesses. This bit has no effect in single-chip modes.
Freescale Semiconductor
147
4.3.2.13
Reserved Register
Module Base + 0x000F Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
This register location is not used (reserved). All bits in this register return logic 0s when read. Writes to this register have no effect. This register is not in the on-chip memory map in expanded and special peripheral modes. Therefore, these accesses will be echoed externally.
4.3.2.14
Module Base + 0x001E Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
= Unimplemented or Reserved
Read: See individual bit descriptions below Write: See individual bit descriptions below
Table 4-12. IRQCR Field Descriptions
Field 7 IRQE Description IRQ Select Edge Sensitive Only Special modes: read or write anytime Normal and Emulation modes: read anytime, write once 0 IRQ congured for low level recognition. 1 IRQ congured to respond only to falling edges. Falling edges on the IRQ pin will be detected anytime IRQE = 1 and will be cleared only upon a reset or the servicing of the IRQ interrupt. External IRQ Enable Normal, emulation, and special modes: read or write anytime 0 External IRQ pin is disconnected from interrupt logic. 1 External IRQ pin is connected to interrupt logic. Note: When IRQEN = 0, the edge detect latch is disabled.
6 IRQEN
148
Freescale Semiconductor
4.3.2.15
Module Base + 0x0032 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R Bit 7 W Reset Alternate Pin Function 0 ECS 0 XCS 0 XAB19 0 XAB18 0 XAB17 0 XAB16 0 XAB15 0 XAB14 6 5 4 3 2 1 Bit 0
Read: Anytime Write: Anytime This port is associated with the internal memory expansion emulation pins. When the port is not enabled to emulate the internal memory expansion, the port pins are used as general-purpose I/O. When port K is operating as a general-purpose I/O port, DDRK determines the primary direction for each port K pin. A 1 causes the associated port pin to be an output and a 0 causes the associated pin to be a high-impedance input. The value in a DDR bit also affects the source of data for reads of the corresponding PORTK register. If the DDR bit is 0 (input) the buffered pin input is read. If the DDR bit is 1 (output) the output of the port data register is read. This register is not in the map in peripheral or expanded modes while the EMK control bit in MODE register is set. Therefore, these accesses will be echoed externally. When inputs, these pins can be selected to be high impedance or pulled up, based upon the state of the PUPKE bit in the PUCR register.
Table 4-13. PORTK Field Descriptions
Field 7 Port K, Bit 7 Description Port K, Bit 7 This bit is used as an emulation chip select signal for the emulation of the internal memory expansion, or as general-purpose I/O, depending upon the state of the EMK bit in the MODE register. While this bit is used as a chip select, the external bit will return to its de-asserted state (VDD) for approximately 1/4 cycle just after the negative edge of ECLK, unless the external access is stretched and ECLK is free-running (ESTR bit in EBICTL = 0). See the MMC block description chapter for additional details on when this signal will be active. Port K, Bit 6 This bit is used as an external chip select signal for most external accesses that are not selected by ECS (see the MMC block description chapter for more details), depending upon the state the of the EMK bit in the MODE register. While this bit is used as a chip select, the external pin will return to its deasserted state (VDD) for approximately 1/4 cycle just after the negative edge of ECLK, unless the external access is stretched and ECLK is free-running (ESTR bit in EBICTL = 0).
6 Port K, Bit 6
5:0 Port K, Bits 5:0 These six bits are used to determine which FLASH/ROM or external memory array page Port K, Bits 5:0 is being accessed. They can be viewed as expanded addresses XAB19XAB14 of the 20-bit address used to access up to1M byte internal FLASH/ROM or external memory array. Alternatively, these bits can be used for general-purpose I/O depending upon the state of the EMK bit in the MODE register.
Freescale Semiconductor
149
4.3.2.16
Module Base + 0x0033 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
Read: Anytime Write: Anytime This register determines the primary direction for each port K pin congured as general-purpose I/O. This register is not in the map in peripheral or expanded modes while the EMK control bit in MODE register is set. Therefore, these accesses will be echoed externally.
Table 4-14. EBICTL Field Descriptions
Field 7:0 DDRK Description Data Direction Port K Bits 0 Associated pin is a high-impedance input 1 Associated pin is an output Note: It is unwise to write PORTK and DDRK as a word access. If you are changing port K pins from inputs to outputs, the data may have extra transitions during the write. It is best to initialize PORTK before enabling as outputs. Note: To ensure that you read the correct value from the PORTK pins, always wait at least one cycle after writing to the DDRK register before reading from the PORTK register.
4.4
4.4.1
Functional Description
Detecting Access Type from External Signals
The external signals LSTRB, R/W, and AB0 indicate the type of bus access that is taking place. Accesses to the internal RAM module are the only type of access that would produce LSTRB = AB0 = 1, because the internal RAM is specically designed to allow misaligned 16-bit accesses in a single cycle. In these cases the data for the address that was accessed is on the low half of the data bus and the data for address + 1 is on the high half of the data bus. This is summarized in Table 4-15.
Table 4-15. Access Type vs. Bus Control Pins
LSTRB 1 0 1 0 AB0 0 1 0 1 R/W 1 1 0 0 Type of Access 8-bit read of an even address 8-bit read of an odd address 8-bit write of an even address 8-bit write of an odd address
150
Freescale Semiconductor
4.4.2
In order to allow fast internal bus cycles to coexist in a system with slower external memory resources, the HCS12 supports the concept of stretched bus cycles (module timing reference clocks for timers and baud rate generators are not affected by this stretching). Control bits in the MISC register in the MMC sub-block of the core specify the amount of stretch (0, 1, 2, or 3 periods of the internal bus-rate clock). While stretching, the CPU state machines are all held in their current state. At this point in the CPU bus cycle, write data would already be driven onto the data bus so the length of time write data is valid is extended in the case of a stretched bus cycle. Read data would not be captured by the system until the E clock falling edge. In the case of a stretched bus cycle, read data is not required until the specied setup time before the falling edge of the stretched E clock. The chip selects, and R/W signals remain valid during the period of stretching (throughout the stretched E high time). NOTE The address portion of the bus cycle is not stretched.
4.4.3
Modes of Operation
The operating mode out of reset is determined by the states of the MODC, MODB, and MODA pins during reset (Table 4-16). The MODC, MODB, and MODA bits in the MODE register show the current operating mode and provide limited mode switching during operation. The states of the MODC, MODB, and MODA pins are latched into these bits on the rising edge of the reset signal.
Table 4-16. Mode Selection
MODC 0 0 0 0 1 1 1 1 MODB 0 0 1 1 0 0 1 1 MODA 0 1 0 1 0 1 0 1 Mode Description Special Single Chip, BDM allowed and ACTIVE. BDM is allowed in all other modes but a serial command is required to make BDM active. Emulation Expanded Narrow, BDM allowed Special Test (Expanded Wide), BDM allowed Emulation Expanded Wide, BDM allowed Normal Single Chip, BDM allowed Normal Expanded Narrow, BDM allowed Peripheral; BDM allowed but bus operations would cause bus conicts (must not be used) Normal Expanded Wide, BDM allowed
Freescale Semiconductor
151
There are two basic types of operating modes: 1. Normal modes: Some registers and bits are protected against accidental changes. 2. Special modes: Allow greater access to protected control registers and bits for special purposes such as testing. A system development and debug feature, background debug mode (BDM), is available in all modes. In special single-chip mode, BDM is active immediately after reset. Some aspects of Port E are not mode dependent. Bit 1 of Port E is a general purpose input or the IRQ interrupt input. IRQ can be enabled by bits in the CPUs condition codes register but it is inhibited at reset so this pin is initially congured as a simple input with a pull-up. Bit 0 of Port E is a general purpose input or the XIRQ interrupt input. XIRQ can be enabled by bits in the CPUs condition codes register but it is inhibited at reset so this pin is initially congured as a simple input with a pull-up. The ESTR bit in the EBICTL register is set to one by reset in any user mode. This assures that the reset vector can be fetched even if it is located in an external slow memory device. The PE6/MODB/IPIPE1 and PE5/MODA/IPIPE0 pins act as high-impedance mode select inputs during reset. The following paragraphs discuss the default bus setup and describe which aspects of the bus can be changed after reset on a per mode basis.
4.4.3.1
These modes provide three operating congurations. Background debug is available in all three modes, but must rst be enabled for some operations by means of a BDM background command, then activated. 4.4.3.1.1 Normal Single-Chip Mode
There is no external expansion bus in this mode. All pins of Ports A, B and E are congured as general purpose I/O pins Port E bits 1 and 0 are available as general purpose input only pins with internal pull resistors enabled. All other pins of Port E are bidirectional I/O pins that are initially congured as highimpedance inputs with internal pull resistors enabled. Ports A and B are congured as high-impedance inputs with their internal pull resistors disabled. The pins associated with Port E bits 6, 5, 3, and 2 cannot be congured for their alternate functions IPIPE1, IPIPE0, LSTRB, and R/W while the MCU is in single chip modes. In single chip modes, the associated control bits PIPOE, LSTRE, and RDWE are reset to zero. Writing the opposite state into them in single chip mode does not change the operation of the associated Port E pins. In normal single chip mode, the MODE register is writable one time. This allows a user program to change the bus mode to narrow or wide expanded mode and/or turn on visibility of internal accesses. Port E, bit 4 can be congured for a free-running E clock output by clearing NECLK=0. Typically the only use for an E clock output while the MCU is in single chip modes would be to get a constant speed clock for use in the external application system.
152
Freescale Semiconductor
4.4.3.1.2
In expanded wide modes, Ports A and B are congured as a 16-bit multiplexed address and data bus and Port E bit 4 is congured as the E clock output signal. These signals allow external memory and peripheral devices to be interfaced to the MCU. Port E pins other than PE4/ECLK are congured as general purpose I/O pins (initially high-impedance inputs with internal pull resistors enabled). Control bits PIPOE, NECLK, LSTRE, and RDWE in the PEAR register can be used to congure Port E pins to act as bus control outputs instead of general purpose I/O pins. It is possible to enable the pipe status signals on Port E bits 6 and 5 by setting the PIPOE bit in PEAR, but it would be unusual to do so in this mode. Development systems where pipe status signals are monitored would typically use the special variation of this mode. The Port E bit 2 pin can be recongured as the R/W bus control signal by writing 1 to the RDWE bit in PEAR. If the expanded system includes external devices that can be written, such as RAM, the RDWE bit would need to be set before any attempt to write to an external location. If there are no writable resources in the external system, PE2 can be left as a general purpose I/O pin. The Port E bit 3 pin can be recongured as the LSTRB bus control signal by writing 1 to the LSTRE bit in PEAR. The default condition of this pin is a general purpose input because the LSTRB function is not needed in all expanded wide applications. The Port E bit 4 pin is initially congured as ECLK output with stretch. The E clock output function depends upon the settings of the NECLK bit in the PEAR register, the IVIS bit in the MODE register and the ESTR bit in the EBICTL register. The E clock is available for use in external select decode logic or as a constant speed clock for use in the external application system. 4.4.3.1.3 Normal Expanded Narrow Mode
This mode is used for lower cost production systems that use 8-bit wide external EPROMs or RAMs. Such systems take extra bus cycles to access 16-bit locations but this may be preferred over the extra cost of additional external memory devices. Ports A and B are congured as a 16-bit address bus and Port A is multiplexed with data. Internal visibility is not available in this mode because the internal cycles would need to be split into two 8-bit cycles. Since the PEAR register can only be written one time in this mode, use care to set all bits to the desired states during the single allowed write. The PE3/LSTRB pin is always a general purpose I/O pin in normal expanded narrow mode. Although it is possible to write the LSTRE bit in PEAR to 1 in this mode, the state of LSTRE is overridden and Port E bit 3 cannot be recongured as the LSTRB output. It is possible to enable the pipe status signals on Port E bits 6 and 5 by setting the PIPOE bit in PEAR, but it would be unusual to do so in this mode. LSTRB would also be needed to fully understand system activity. Development systems where pipe status signals are monitored would typically use special expanded wide mode or occasionally special expanded narrow mode.
Freescale Semiconductor
153
The PE4/ECLK pin is initially congured as ECLK output with stretch. The E clock output function depends upon the settings of the NECLK bit in the PEAR register, the IVIS bit in the MODE register and the ESTR bit in the EBICTL register. In normal expanded narrow mode, the E clock is available for use in external select decode logic or as a constant speed clock for use in the external application system. The PE2/R/W pin is initially congured as a general purpose input with an internal pull resistor enabled but this pin can be recongured as the R/W bus control signal by writing 1 to the RDWE bit in PEAR. If the expanded narrow system includes external devices that can be written such as RAM, the RDWE bit would need to be set before any attempt to write to an external location. If there are no writable resources in the external system, PE2 can be left as a general purpose I/O pin. 4.4.3.1.4 Emulation Expanded Wide Mode
In expanded wide modes, Ports A and B are congured as a 16-bit multiplexed address and data bus and Port E provides bus control and status signals. These signals allow external memory and peripheral devices to be interfaced to the MCU. These signals can also be used by a logic analyzer to monitor the progress of application programs. The bus control related pins in Port E (PE7/NOACC, PE6/MODB/IPIPE1, PE5/MODA/IPIPE0, PE4/ECLK, PE3/LSTRB/TAGLO, and PE2/R/W) are all congured to serve their bus control output functions rather than general purpose I/O. Notice that writes to the bus control enable bits in the PEAR register in emulation mode are restricted. 4.4.3.1.5 Emulation Expanded Narrow Mode
Expanded narrow modes are intended to allow connection of single 8-bit external memory devices for lower cost systems that do not need the performance of a full 16-bit external data bus. Accesses to internal resources that have been mapped external (i.e. PORTA, PORTB, DDRA, DDRB, PORTE, DDRE, PEAR, PUCR, RDRIV) will be accessed with a 16-bit data bus on Ports A and B. Accesses of 16-bit external words to addresses which are normally mapped external will be broken into two separate 8-bit accesses using Port A as an 8-bit data bus. Internal operations continue to use full 16-bit data paths. They are only visible externally as 16-bit information if IVIS=1. Ports A and B are configured as multiplexed address and data output ports. During external accesses, address A15, data D15 and D7 are associated with PA7, address A0 is associated with PB0 and data D8 and D0 are associated with PA0. During internal visible accesses and accesses to internal resources that have been mapped external, address A15 and data D15 is associated with PA7 and address A0 and data D0 is associated with PB0. The bus control related pins in Port E (PE7/NOACC, PE6/MODB/IPIPE1, PE5/MODA/IPIPE0, PE4/ECLK, PE3/LSTRB/TAGLO, and PE2/R/W) are all configured to serve their bus control output functions rather than general purpose I/O. Notice that writes to the bus control enable bits in the PEAR register in emulation mode are restricted. The main difference between special modes and normal modes is that some of the bus control and system control signals cannot be written in emulation modes.
154
Freescale Semiconductor
4.4.3.2
There are two special operating modes that correspond to normal operating modes. These operating modes are commonly used in factory testing and system development. 4.4.3.2.1 Special Single-Chip Mode
When the MCU is reset in this mode, the background debug mode is enabled and active. The MCU does not fetch the reset vector and execute application code as it would in other modes. Instead the active background mode is in control of CPU execution and BDM firmware is waiting for additional serial commands through the BKGD pin. When a serial command instructs the MCU to return to normal execution, the system will be configured as described below unless the reset states of internal control registers have been changed through background commands after the MCU was reset. There is no external expansion bus after reset in this mode. Ports A and B are initially simple bidirectional I/O pins that are configured as high-impedance inputs with internal pull resistors disabled; however, writing to the mode select bits in the MODE register (which is allowed in special modes) can change this after reset. All of the Port E pins (except PE4/ECLK) are initially configured as general purpose highimpedance inputs with internal pull resistors enabled. PE4/ECLK is configured as the E clock output in this mode. The pins associated with Port E bits 6, 5, 3, and 2 cannot be configured for their alternate functions IPIPE1, IPIPE0, LSTRB, and R/W while the MCU is in single chip modes. In single chip modes, the associated control bits PIPOE, LSTRE and RDWE are reset to zero. Writing the opposite value into these bits in single chip mode does not change the operation of the associated Port E pins. Port E, bit 4 can be configured for a free-running E clock output by clearing NECLK=0. Typically the only use for an E clock output while the MCU is in single chip modes would be to get a constant speed clock for use in the external application system. 4.4.3.2.2 Special Test Mode
In expanded wide modes, Ports A and B are configured as a 16-bit multiplexed address and data bus and Port E provides bus control and status signals. In special test mode, the write protection of many control bits is lifted so that they can be thoroughly tested without needing to go through reset.
4.4.3.3
There is a test operating mode in which an external master, such as an I.C. tester, can control the on-chip peripherals. 4.4.3.3.1 Peripheral Mode
This mode is intended for factory testing of the MCU. In this mode, the CPU is inactive and an external (tester) bus master drives address, data and bus control signals in through Ports A, B and E. In effect, the whole MCU acts as if it was a peripheral under control of an external CPU. This allows faster testing of on-chip memory and peripherals than previous testing methods. Since the mode control register is not accessible in peripheral mode, the only way to change to another mode is to reset the MCU into a different
Freescale Semiconductor
155
mode. Background debugging should not be used while the MCU is in special peripheral mode as internal bus conflicts between BDM and the external master can cause improper operation of both functions.
4.4.4
Internal Visibility
Internal visibility is available when the MCU is operating in expanded wide modes or emulation narrow mode. It is not available in single-chip, peripheral or normal expanded narrow modes. Internal visibility is enabled by setting the IVIS bit in the MODE register. If an internal access is made while E, R/W, and LSTRB are congured as bus control outputs and internal visibility is off (IVIS=0), E will remain low for the cycle, R/W will remain high, and address, data and the LSTRB pins will remain at their previous state. When internal visibility is enabled (IVIS=1), certain internal cycles will be blocked from going external. During cycles when the BDM is selected, R/W will remain high, data will maintain its previous state, and address and LSTRB pins will be updated with the internal value. During CPU no access cycles when the BDM is not driving, R/W will remain high, and address, data and the LSTRB pins will remain at their previous state. NOTE When the system is operating in a secure mode, internal visibility is not available (i.e., IVIS = 1 has no effect). Also, the IPIPE signals will not be visible, regardless of operating mode. IPIPE1IPIPE0 will display 0es if they are enabled. In addition, the MOD bits in the MODE control register cannot be written.
4.4.5
Low-Power Options
The MEBI does not contain any user-controlled options for reducing power consumption. The operation of the MEBI in low-power modes is discussed in the following subsections.
4.4.5.1
The MEBI does not contain any options for reducing power in run mode; however, the external addresses are conditioned to reduce power in single-chip modes. Expanded bus modes will increase power consumption.
4.4.5.2
The MEBI does not contain any options for reducing power in wait mode.
4.4.5.3
The MEBI will cease to function after execution of a CPU STOP instruction.
156
Freescale Semiconductor
INT
HPRIO (OPTIONAL)
INTERRUPTS XMASK IMASK INTERRUPT INPUT REGISTERS AND CONTROL REGISTERS READ DATA BUS
QUALIFIED INTERRUPTS
INTERRUPT PENDING RESET FLAGS VECTOR REQUEST PRIORITY DECODER VECTOR ADDRESS
Freescale Semiconductor
157
The interrupt sub-block decodes the priority of all system exception requests and provides the applicable vector for processing the exception. The INT supports I-bit maskable and X-bit maskable interrupts, a nonmaskable unimplemented opcode trap, a non-maskable software interrupt (SWI) or background debug mode request, and three system reset vector requests. All interrupt related exception requests are managed by the interrupt sub-block (INT).
5.1.1
Features
The INT includes these features: Provides two to 122 I-bit maskable interrupt vectors (0xFF000xFFF2) Provides one X-bit maskable interrupt vector (0xFFF4) Provides a non-maskable software interrupt (SWI) or background debug mode request vector (0xFFF6) Provides a non-maskable unimplemented opcode trap (TRAP) vector (0xFFF8) Provides three system reset vectors (0xFFFA0xFFFE) (reset, CMR, and COP) Determines the appropriate vector and drives it onto the address bus at the appropriate time Signals the CPU that interrupts are pending Provides control registers which allow testing of interrupts Provides additional input signals which prevents requests for servicing I and X interrupts Wakes the system from stop or wait mode when an appropriate interrupt occurs or whenever XIRQ is active, even if XIRQ is masked Provides asynchronous path for all I and X interrupts, (0xFF000xFFF4) (Optional) selects and stores the highest priority I interrupt based on the value written into the HPRIO register
5.1.2
Modes of Operation
The functionality of the INT sub-block in various modes of operation is discussed in the subsections that follow. Normal operation The INT operates the same in all normal modes of operation. Special operation Interrupts may be tested in special modes through the use of the interrupt test registers. Emulation modes The INT operates the same in emulation modes as in normal modes. Low power modes See Section 5.4.1, Low-Power Modes, for details
158
Freescale Semiconductor
5.2
Most interfacing with the interrupt sub-block is done within the core. However, the interrupt does receive direct input from the multiplexed external bus interface (MEBI) sub-block of the core for the IRQ and XIRQ pin data.
5.3
Detailed descriptions of the registers and associated bits are given in the subsections that follow.
5.3.1
5.3.2
5.3.2.1
Register Descriptions
Interrupt Test Control Register
Module Base + 0x0015 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
Read: See individual bit descriptions Write: See individual bit descriptions
Freescale Semiconductor
159
3:0 ADR[3:0]
5.3.2.2
Module Base + 0x0016 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
= Unimplemented or Reserved
Read: Only in special modes. Reads will return either the state of the interrupt inputs of the interrupt subblock (WRTINT = 0) or the values written into the TEST registers (WRTINT = 1). Reads will always return 0s in normal modes. Write: Only in special modes and with WRTINT = 1 and CCR I mask = 1.
160
Freescale Semiconductor
5.3.2.3
Module Base + 0x001F Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
= Unimplemented or Reserved
5.4
Functional Description
The interrupt sub-block processes all exception requests made by the CPU. These exceptions include interrupt vector requests and reset vector requests. Each of these exception types and their overall priority level is discussed in the subsections below.
Freescale Semiconductor
161
5.4.1
Low-Power Modes
The INT does not contain any user-controlled options for reducing power consumption. The operation of the INT in low-power modes is discussed in the following subsections.
5.4.1.1
The INT does not contain any options for reducing power in run mode.
5.4.1.2
Clocks to the INT can be shut off during system wait mode and the asynchronous interrupt path will be used to generate the wake-up signal upon recognition of a valid interrupt or any XIRQ request.
5.4.1.3
Clocks to the INT can be shut off during system stop mode and the asynchronous interrupt path will be used to generate the wake-up signal upon recognition of a valid interrupt or any XIRQ request.
5.5
Resets
The INT supports three system reset exception request types: normal system reset or power-on-reset request, crystal monitor reset request, and COP watchdog reset request. The type of reset exception request must be decoded by the system and the proper request made to the core. The INT will then provide the service routine address for the type of reset requested.
5.6
Interrupts
As shown in the block diagram in Figure 5-1, the INT contains a register block to provide interrupt status and control, an optional highest priority I interrupt (HPRIO) block, and a priority decoder to evaluate whether pending interrupts are valid and assess their priority.
5.6.1
Interrupt Registers
The INT registers are accessible only in special modes of operation and function as described in Section 5.3.2.1, Interrupt Test Control Register, and Section 5.3.2.2, Interrupt Test Registers, previously.
5.6.2
When the optional HPRIO block is implemented, the user is allowed to promote a single I-bit maskable interrupt to be the highest priority I interrupt. The HPRIO evaluates all interrupt exception requests and passes the HPRIO vector to the priority decoder if the highest priority I interrupt is active. RTI replaces the promoted interrupt source.
162
Freescale Semiconductor
5.6.3
The priority decoder evaluates all interrupts pending and determines their validity and priority. When the CPU requests an interrupt vector, the decoder will provide the vector for the highest priority interrupt request. Because the vector is not supplied until the CPU requests it, it is possible that a higher priority interrupt request could override the original exception that caused the CPU to request the vector. In this case, the CPU will receive the highest priority vector and the system will process this exception instead of the original request. NOTE Care must be taken to ensure that all exception requests remain active until the system begins execution of the applicable service routine; otherwise, the exception request may not be processed. If for any reason the interrupt source is unknown (e.g., an interrupt request becomes inactive after the interrupt has been recognized but prior to the vector request), the vector address will default to that of the last valid interrupt that existed during the particular interrupt sequence. If the CPU requests an interrupt vector when there has never been a pending interrupt request, the INT will provide the software interrupt (SWI) vector address.
5.7
Exception Priority
The priority (from highest to lowest) and address of all exception vectors issued by the INT upon request by the CPU is shown in Table 5-5.
Table 5-5. Exception Vector Map and Priority
Vector Address 0xFFFE0xFFFF 0xFFFC0xFFFD 0xFFFA0xFFFB 0xFFF80xFFF9 0xFFF60xFFF7 0xFFF40xFFF5 0xFFF20xFFF3 0xFFF00xFF00 System reset Crystal monitor reset COP reset Unimplemented opcode trap Software interrupt instruction (SWI) or BDM vector request XIRQ signal IRQ signal Device-specic I-bit maskable interrupt sources (priority in descending order) Source
Freescale Semiconductor
163
164
Freescale Semiconductor
ADDRESS ENTAG BDMACT TRACE INSTRUCTION DECODE AND EXECUTION BUS INTERFACE AND CONTROL LOGIC DATA CLOCKS
SDV ENBDM
CLKSW
The background debug module (BDM) sub-block is a single-wire, background debug system implemented in on-chip hardware for minimal CPU intervention. All interfacing with the BDM is done via the BKGD pin. BDMV4 has enhanced capability for maintaining synchronization between the target and host while allowing more exibility in clock rates. This includes a sync signal to show the clock rate and a handshake signal to indicate when an operation is complete. The system is backwards compatible with older external interfaces.
6.1.1
Features
Single-wire communication with host development system BDMV4 (and BDM2): Enhanced capability for allowing more exibility in clock rates BDMV4: SYNC command to determine communication rate BDMV4: GO_UNTIL command BDMV4: Hardware handshake protocol to increase the performance of the serial communication Active out of reset in special single-chip mode
Freescale Semiconductor
165
Nine hardware commands using free cycles, if available, for minimal CPU intervention Hardware commands not requiring active BDM 15 rmware commands execute from the standard BDM rmware lookup table Instruction tagging capability Software control of BDM operation during wait mode Software selectable clocks When secured, hardware commands are allowed to access the register space in special single-chip mode, if the FLASH and EEPROM erase tests fail.
6.1.2
Modes of Operation
BDM is available in all operating modes but must be enabled before rmware commands are executed. Some system peripherals may have a control bit which allows suspending the peripheral function during background debug mode.
6.1.2.1
All of these operations refer to the part in run mode. The BDM does not provide controls to conserve power during run mode. Normal operation General operation of the BDM is available and operates the same in all normal modes. Special single-chip mode In special single-chip mode, background operation is enabled and active out of reset. This allows programming a system with blank memory. Special peripheral mode BDM is enabled and active immediately out of reset. BDM can be disabled by clearing the BDMACT bit in the BDM status (BDMSTS) register. The BDM serial system should not be used in special peripheral mode. NOTE The BDM serial system should not be used in special peripheral mode since the CPU, which in other modes interfaces with the BDM to relinquish control of the bus during a free cycle or a steal operation, is not operating in this mode. Emulation modes General operation of the BDM is available and operates the same as in normal modes.
6.1.2.2
If the part is in secure mode, the operation of the BDM is reduced to a small subset of its regular run mode operation. Secure operation prevents access to FLASH or EEPROM other than allowing erasure.
166
Freescale Semiconductor
6.2
A single-wire interface pin is used to communicate with the BDM system. Two additional pins are used for instruction tagging. These pins are part of the multiplexed external bus interface (MEBI) sub-block and all interfacing between the MEBI and BDM is done within the core interface boundary. Functional descriptions of the pins are provided below for completeness. BKGD Background interface pin TAGHI High byte instruction tagging pin TAGLO Low byte instruction tagging pin BKGD and TAGHI share the same pin. TAGLO and LSTRB share the same pin. NOTE Generally these pins are shared as described, but it is best to check the device overview chapter to make certain. All MCUs at the time of this writing have followed this pin sharing scheme.
6.2.1
Debugging control logic communicates with external devices serially via the single-wire background interface pin (BKGD). During reset, this pin is a mode select input which selects between normal and special modes of operation. After reset, this pin becomes the dedicated serial interface pin for the background debug mode.
6.2.2
This pin is used to tag the high byte of an instruction. When instruction tagging is on, a logic 0 at the falling edge of the external clock (ECLK) tags the high half of the instruction word being read into the instruction queue.
6.2.3
This pin is used to tag the low byte of an instruction. When instruction tagging is on and low strobe is enabled, a logic 0 at the falling edge of the external clock (ECLK) tags the low half of the instruction word being read into the instruction queue.
Freescale Semiconductor
167
6.3
A summary of the registers associated with the BDM is shown in Figure 6-2. Registers are accessed by host-driven communications to the BDM hardware using READ_BD and WRITE_BD commands. Detailed descriptions of the registers and associated bits are given in the subsections that follow.
6.3.1
168
Freescale Semiconductor
6.3.2
Register Name 0xFF00 Reserved 0xFF01 BDMSTS 0xFF02 Reserved 0xFF03 Reserved 0xFF04 Reserved 0xFF05 Reserved 0xFF06 BDMCCR 0xFF07 BDMINR 0xFF08 Reserved 0xFF09 Reserved 0xFF0A Reserved 0xFF0B Reserved
Register Descriptions
Bit 7 R W R W R W R W R W R W R W R W R W R W R W R W X 6 X 5 X 4 X 3 X 2 X 1 0 Bit 0 0
ENBDM X
BDMACT
ENTAG X
SDV
TRACE
CLKSW X
UNSEC
CCR7 0
CCR6 REG14
CCR5 REG13
CCR4 REG12
CCR3 REG11
CCR2 0
CCR1 0
CCR0 0
Freescale Semiconductor
169
6.3.2.1
0xFF01
R ENBDM W Reset: Special single-chip mode: Special peripheral mode: All other modes: 1(1) 0 0 0
BDMACT ENTAG
SDV
TRACE CLKSW
UNSEC
1 1 1 0
0 0 0 0
0 0 0 0
0 0 0 0
0 0 0 0
0(2) 0 0 0
0 0 0 0
= Unimplemented or Reserved
Read: All modes through BDM operation Write: All modes but subject to the following: BDMACT can only be set by BDM hardware upon entry into BDM. It can only be cleared by the standard BDM rmware lookup table upon exit from BDM active mode. CLKSW can only be written via BDM hardware or standard BDM rmware write commands. All other bits, while writable via BDM hardware or standard BDM rmware write commands, should only be altered by the BDM hardware or standard rmware lookup table as part of BDM command execution. ENBDM should only be set via a BDM hardware command if the BDM rmware commands are needed. (This does not apply in special single-chip mode).
170
Freescale Semiconductor
6 BDMACT
5 ENTAG
4 SDV
3 TRACE
Freescale Semiconductor
171
1 UNSEC
172
Freescale Semiconductor
6.3.2.2
0xFF06
Read: All modes Write: All modes NOTE When BDM is made active, the CPU stores the value of the CCR register in the BDMCCR register. However, out of special single-chip reset, the BDMCCR is set to 0xD8 and not 0xD0 which is the reset value of the CCR register. When entering background debug mode, the BDM CCR holding register is used to save the contents of the condition code register of the users program. It is also used for temporary storage in the standard BDM rmware mode. The BDM CCR holding register can be written to modify the CCR value.
6.3.2.3
0xFF07
R W Reset
REG14
REG13
REG12
REG11
= Unimplemented or Reserved
6:3 Internal Register Map Position These four bits show the state of the upper ve bits of the base address for REG[14:11] the systems relocatable register block. BDMINR is a shadow of the INITRG register which maps the register block to any 2K byte space within the rst 32K bytes of the 64K byte address space.
Freescale Semiconductor
173
6.4
Functional Description
The BDM receives and executes commands from a host via a single wire serial interface. There are two types of BDM commands, namely, hardware commands and rmware commands. Hardware commands are used to read and write target system memory locations and to enter active background debug mode, see Section 6.4.3, BDM Hardware Commands. Target system memory includes all memory that is accessible by the CPU. Firmware commands are used to read and write CPU resources and to exit from active background debug mode, see Section 6.4.4, Standard BDM Firmware Commands. The CPU resources referred to are the accumulator (D), X index register (X), Y index register (Y), stack pointer (SP), and program counter (PC). Hardware commands can be executed at any time and in any mode excluding a few exceptions as highlighted, see Section 6.4.3, BDM Hardware Commands. Firmware commands can only be executed when the system is in active background debug mode (BDM).
6.4.1
Security
If the user resets into special single-chip mode with the system secured, a secured mode BDM rmware lookup table is brought into the map overlapping a portion of the standard BDM rmware lookup table. The secure BDM rmware veries that the on-chip EEPROM and FLASH EEPROM are erased. This being the case, the UNSEC bit will get set. The BDM program jumps to the start of the standard BDM rmware and the secured mode BDM rmware is turned off and all BDM commands are allowed. If the EEPROM or FLASH do not verify as erased, the BDM rmware sets the ENBDM bit, without asserting UNSEC, and the rmware enters a loop. This causes the BDM hardware commands to become enabled, but does not enable the rmware commands. This allows the BDM hardware to be used to erase the EEPROM and FLASH. After execution of the secure rmware, regardless of the results of the erase tests, the CPU registers, INITEE and PPAGE, will no longer be in their reset state.
6.4.2
The system must be in active BDM to execute standard BDM rmware commands. BDM can be activated only after being enabled. BDM is enabled by setting the ENBDM bit in the BDM status (BDMSTS) register. The ENBDM bit is set by writing to the BDM status (BDMSTS) register, via the single-wire interface, using a hardware command such as WRITE_BD_BYTE. After being enabled, BDM is activated by one of the following1: Hardware BACKGROUND command BDM external instruction tagging mechanism CPU BGND instruction Breakpoint sub-blocks force or tag mechanism2 When BDM is activated, the CPU nishes executing the current instruction and then begins executing the rmware in the standard BDM rmware lookup table. When BDM is activated by the breakpoint sub1. BDM is enabled and active immediately out of special single-chip reset. 2. This method is only available on systems that have a a breakpoint or a debug sub-block.
174
Freescale Semiconductor
block, the type of breakpoint used determines if BDM becomes active before or after execution of the next instruction. NOTE If an attempt is made to activate BDM before being enabled, the CPU resumes normal instruction execution after a brief delay. If BDM is not enabled, any hardware BACKGROUND commands issued are ignored by the BDM and the CPU is not delayed. In active BDM, the BDM registers and standard BDM rmware lookup table are mapped to addresses 0xFF00 to 0xFFFF. BDM registers are mapped to addresses 0xFF00 to 0xFF07. The BDM uses these registers which are readable anytime by the BDM. However, these registers are not readable by user programs.
6.4.3
Hardware commands are used to read and write target system memory locations and to enter active background debug mode. Target system memory includes all memory that is accessible by the CPU such as on-chip RAM, EEPROM, FLASH EEPROM, I/O and control registers, and all external memory. Hardware commands are executed with minimal or no CPU intervention and do not require the system to be in active BDM for execution, although they can continue to be executed in this mode. When executing a hardware command, the BDM sub-block waits for a free CPU bus cycle so that the background access does not disturb the running application program. If a free cycle is not found within 128 clock cycles, the CPU is momentarily frozen so that the BDM can steal a cycle. When the BDM nds a free cycle, the operation does not intrude on normal CPU operation provided that it can be completed in a single cycle. However, if an operation requires multiple cycles the CPU is frozen until the operation is complete, even though the BDM found a free cycle.
Freescale Semiconductor
175
NOTE: If enabled, ACK will occur when data is ready for transmission for all BDM READ commands and will occur after the write is complete for all BDM WRITE commands.
The READ_BD and WRITE_BD commands allow access to the BDM register locations. These locations are not normally in the system memory map but share addresses with the application in memory. To distinguish between physical memory locations that share the same address, BDM memory resources are enabled just for the READ_BD and WRITE_BD access cycle. This allows the BDM to access BDM locations unobtrusively, even if the addresses conict with the application memory map.
6.4.4
Firmware commands are used to access and manipulate CPU resources. The system must be in active BDM to execute standard BDM rmware commands, see Section 6.4.2, Enabling and Activating BDM. Normal instruction execution is suspended while the CPU executes the rmware located in the standard BDM rmware lookup table. The hardware command BACKGROUND is the usual way to activate BDM. As the system enters active BDM, the standard BDM rmware lookup table and BDM registers become visible in the on-chip memory map at 0xFF000xFFFF, and the CPU begins executing the standard BDM
176
Freescale Semiconductor
rmware. The standard BDM rmware watches for serial commands and executes them as they are received. The rmware commands are shown in Table 6-6.
Table 6-6. Firmware Commands
Command(1) READ_NEXT READ_PC READ_D READ_X READ_Y READ_SP WRITE_NEXT WRITE_PC WRITE_D WRITE_X WRITE_Y WRITE_SP GO GO_UNTIL(2) TRACE1 TAGGO Opcode (hex) 62 63 64 65 66 67 42 43 44 45 46 47 08 0C 10 18 Data 16-bit data out 16-bit data out 16-bit data out 16-bit data out 16-bit data out 16-bit data out 16-bit data in 16-bit data in 16-bit data in 16-bit data in 16-bit data in 16-bit data in None None None None Description Increment X by 2 (X = X + 2), then read word X points to. Read program counter. Read D accumulator. Read X index register. Read Y index register. Read stack pointer. Increment X by 2 (X = X + 2), then write word to location pointed to by X. Write program counter. Write D accumulator. Write X index register. Write Y index register. Write stack pointer. Go to user program. If enabled, ACK will occur when leaving active background mode. Go to user program. If enabled, ACK will occur upon returning to active background mode. Execute one user instruction then return to active BDM. If enabled, ACK will occur upon returning to active background mode.
Enable tagging and go to user program. There is no ACK pulse related to this command. 1. If enabled, ACK will occur when data is ready for transmission for all BDM READ commands and will occur after the write is complete for all BDM WRITE commands. 2. Both WAIT (with clocks to the S12 CPU core disabled) and STOP disable the ACK function. The GO_UNTIL command will not get an Acknowledge if one of these two CPU instructions occurs before the UNTIL instruction. This can be a problem for any instruction that uses ACK, but GO_UNTIL is a lot more difcult for the development tool to time-out.
6.4.5
Hardware and rmware BDM commands start with an 8-bit opcode followed by a 16-bit address and/or a 16-bit data word depending on the command. All the read commands return 16 bits of data despite the byte or word implication in the command name. NOTE 8-bit reads return 16-bits of data, of which, only one byte will contain valid data. If reading an even address, the valid data will appear in the MSB. If reading an odd address, the valid data will appear in the LSB.
Freescale Semiconductor
177
NOTE 16-bit misaligned reads and writes are not allowed. If attempted, the BDM will ignore the least signicant bit of the address and will assume an even address from the remaining bits. For hardware data read commands, the external host must wait 150 bus clock cycles after sending the address before attempting to obtain the read data. This is to be certain that valid data is available in the BDM shift register, ready to be shifted out. For hardware write commands, the external host must wait 150 bus clock cycles after sending the data to be written before attempting to send a new command. This is to avoid disturbing the BDM shift register before the write has been completed. The 150 bus clock cycle delay in both cases includes the maximum 128 cycle delay that can be incurred as the BDM waits for a free cycle before stealing a cycle. For rmware read commands, the external host should wait 44 bus clock cycles after sending the command opcode and before attempting to obtain the read data. This includes the potential of an extra 7 cycles when the access is external with a narrow bus access (+1 cycle) and / or a stretch (+1, 2, or 3 cycles), (7 cycles could be needed if both occur). The 44 cycle wait allows enough time for the requested data to be made available in the BDM shift register, ready to be shifted out. NOTE This timing has increased from previous BDM modules due to the new capability in which the BDM serial interface can potentially run faster than the bus. On previous BDM modules this extra time could be hidden within the serial time. For rmware write commands, the external host must wait 32 bus clock cycles after sending the data to be written before attempting to send a new command. This is to avoid disturbing the BDM shift register before the write has been completed. The external host should wait 64 bus clock cycles after a TRACE1 or GO command before starting any new serial command. This is to allow the CPU to exit gracefully from the standard BDM rmware lookup table and resume execution of the user code. Disturbing the BDM shift register prematurely may adversely affect the exit from the standard BDM rmware lookup table. NOTE If the bus rate of the target processor is unknown or could be changing, it is recommended that the ACK (acknowledge function) be used to indicate when an operation is complete. When using ACK, the delay times are automated. Figure 6-6 represents the BDM command structure. The command blocks illustrate a series of eight bit times starting with a falling edge. The bar across the top of the blocks indicates that the BKGD line idles in the high state. The time for an 8-bit command is 8 16 target clock cycles.1
1. Target clock cycles are cycles measured using the target MCUs serial clock rate. See Section 6.4.6, BDM Serial Interface, and Section 6.3.2.1, BDM Status Register (BDMSTS), for information on how serial clock rate is selected.
178
Freescale Semiconductor
150-BC DELAY
HARDWARE WRITE
ADDRESS
DATA
NEXT COMMAND
FIRMWARE READ
COMMAND
NEXT COMMAND
FIRMWARE WRITE
DATA
NEXT COMMAND
GO, TRACE
COMMAND
NEXT COMMAND
6.4.6
The BDM communicates with external devices serially via the BKGD pin. During reset, this pin is a mode select input which selects between normal and special modes of operation. After reset, this pin becomes the dedicated serial interface pin for the BDM. The BDM serial interface is timed using the clock selected by the CLKSW bit in the status register see Section 6.3.2.1, BDM Status Register (BDMSTS). This clock will be referred to as the target clock in the following explanation. The BDM serial interface uses a clocking scheme in which the external host generates a falling edge on the BKGD pin to indicate the start of each bit time. This falling edge is sent for every bit whether data is transmitted or received. Data is transferred most signicant bit (MSB) rst at 16 target clock cycles per bit. The interface times out if 512 clock cycles occur between falling edges from the host. The BKGD pin is a pseudo open-drain pin and has an weak on-chip active pull-up that is enabled at all times. It is assumed that there is an external pull-up and that drivers connected to BKGD do not typically drive the high level. Because R-C rise time could be unacceptably long, the target system and host provide brief driven-high (speedup) pulses to drive BKGD to a logic 1. The source of this speedup pulse is the host for transmit cases and the target for receive cases. The timing for host-to-target is shown in Figure 6-7 and that of target-to-host in Figure 6-8 and Figure 69. All four cases begin when the host drives the BKGD pin low to generate a falling edge. Because the host and target are operating from separate clocks, it can take the target system up to one full clock cycle to recognize this edge. The target measures delays from this perceived start of the bit time while the host measures delays from the point it actually drove BKGD low to start the bit up to one target clock cycle
Freescale Semiconductor
179
earlier. Synchronization between the host and target is established in this manner at the start of every bit time. Figure 6-7 shows an external host transmitting a logic 1 and transmitting a logic 0 to the BKGD pin of a target system. The host is asynchronous to the target, so there is up to a one clock-cycle delay from the host-generated falling edge to where the target recognizes this edge as the beginning of the bit time. Ten target clock cycles later, the target senses the bit level on the BKGD pin. Internal glitch detect logic requires the pin be driven high no later that eight target clock cycles after the falling edge for a logic 1 transmission. Because the host drives the high speedup pulses in these two cases, the rising edges look like digitally driven signals.
CLOCK TARGET SYSTEM
HOST TRANSMIT 1
HOST TRANSMIT 0 PERCEIVED START OF BIT TIME 10 CYCLES SYNCHRONIZATION UNCERTAINTY TARGET SENSES BIT EARLIEST START OF NEXT BIT
The receive cases are more complicated. Figure 6-8 shows the host receiving a logic 1 from the target system. Because the host is asynchronous to the target, there is up to one clock-cycle delay from the hostgenerated falling edge on BKGD to the perceived start of the bit time in the target. The host holds the BKGD pin low long enough for the target to recognize it (at least two target clock cycles). The host must release the low drive before the target drives a brief high speedup pulse seven target clock cycles after the perceived start of the bit time. The host should sample the bit level about 10 target clock cycles after it started the bit time.
180
Freescale Semiconductor
HOST DRIVE TO BKGD PIN TARGET SYSTEM SPEEDUP PULSE PERCEIVED START OF BIT TIME R-C RISE BKGD PIN
HIGH-IMPEDANCE
HIGH-IMPEDANCE
HIGH-IMPEDANCE
Figure 6-9 shows the host receiving a logic 0 from the target. Because the host is asynchronous to the target, there is up to a one clock-cycle delay from the host-generated falling edge on BKGD to the start of the bit time as perceived by the target. The host initiates the bit time but the target nishes it. Because the target wants the host to receive a logic 0, it drives the BKGD pin low for 13 target clock cycles then briey drives it high to speed up the rising edge. The host samples the bit level about 10 target clock cycles after starting the bit time.
CLOCK TARGET SYS.
HOST DRIVE TO BKGD PIN TARGET SYS. DRIVE AND SPEEDUP PULSE PERCEIVED START OF BIT TIME BKGD PIN
Freescale Semiconductor
181
6.4.7
BDM commands that require CPU execution are ultimately treated at the MCU bus rate. Because the BDM clock source can be asynchronously related to the bus frequency, when CLKSW = 0, it is very helpful to provide a handshake protocol in which the host could determine when an issued command is executed by the CPU. The alternative is to always wait the amount of time equal to the appropriate number of cycles at the slowest possible rate the clock could be running. This sub-section will describe the hardware handshake protocol. The hardware handshake protocol signals to the host controller when an issued command was successfully executed by the target. This protocol is implemented by a 16 serial clock cycle low pulse followed by a brief speedup pulse in the BKGD pin. This pulse is generated by the target MCU when a command, issued by the host, has been successfully executed (see Figure 6-10). This pulse is referred to as the ACK pulse. After the ACK pulse has nished: the host can start the bit retrieval if the last issued command was a read command, or start a new command if the last command was a write command or a control command (BACKGROUND, GO, GO_UNTIL, or TRACE1). The ACK pulse is not issued earlier than 32 serial clock cycles after the BDM command was issued. The end of the BDM command is assumed to be the 16th tick of the last bit. This minimum delay assures enough time for the host to perceive the ACK pulse. Note also that, there is no upper limit for the delay between the command and the related ACK pulse, because the command execution depends upon the CPU bus frequency, which in some cases could be very slow compared to the serial communication rate. This protocol allows a great exibility for the POD designers, because it does not rely on any accurate time measurement or short response time to any event in the serial communication.
BDM CLOCK (TARGET MCU)
16 CYCLES TARGET TRANSMITS ACK PULSE HIGH-IMPEDANCE 32 CYCLES SPEEDUP PULSE MINIMUM DELAY FROM THE BDM COMMAND BKGD PIN EARLIEST START OF NEXT BIT HIGH-IMPEDANCE
NOTE If the ACK pulse was issued by the target, the host assumes the previous command was executed. If the CPU enters WAIT or STOP prior to executing a hardware command, the ACK pulse will not be issued meaning that the BDM command was not executed. After entering wait or stop mode, the BDM command is no longer pending.
182
Freescale Semiconductor
Figure 6-11 shows the ACK handshake protocol in a command level timing diagram. The READ_BYTE instruction is used as an example. First, the 8-bit instruction opcode is sent by the host, followed by the address of the memory location to be read. The target BDM decodes the instruction. A bus cycle is grabbed (free or stolen) by the BDM and it executes the READ_BYTE operation. Having retrieved the data, the BDM issues an ACK pulse to the host controller, indicating that the addressed byte is ready to be retrieved. After detecting the ACK pulse, the host initiates the byte retrieval process. Note that data is sent in the form of a word and the host needs to determine which is the appropriate byte based on whether the address was odd or even.
TARGET HOST NEW BDM COMMAND HOST BDM ISSUES THE ACK PULSE (OUT OF SCALE) BDM EXECUTES THE READ_BYTE COMMAND TARGET
BKGD PIN
READ_BYTE HOST
Differently from the normal bit transfer (where the host initiates the transmission), the serial interface ACK handshake pulse is initiated by the target MCU by issuing a falling edge in the BKGD pin. The hardware handshake protocol in Figure 6-10 species the timing when the BKGD pin is being driven, so the host should follow this timing constraint in order to avoid the risk of an electrical conict in the BKGD pin. NOTE The only place the BKGD pin can have an electrical conict is when one side is driving low and the other side is issuing a speedup pulse (high). Other highs are pulled rather than driven. However, at low rates the time of the speedup pulse can become lengthy and so the potential conict time becomes longer as well. The ACK handshake protocol does not support nested ACK pulses. If a BDM command is not acknowledge by an ACK pulse, the host needs to abort the pending command rst in order to be able to issue a new BDM command. When the CPU enters WAIT or STOP while the host issues a command that requires CPU execution (e.g., WRITE_BYTE), the target discards the incoming command due to the WAIT or STOP being detected. Therefore, the command is not acknowledged by the target, which means that the ACK pulse will not be issued in this case. After a certain time the host should decide to abort the ACK sequence in order to be free to issue a new command. Therefore, the protocol should provide a mechanism in which a command, and therefore a pending ACK, could be aborted. NOTE Differently from a regular BDM command, the ACK pulse does not provide a time out. This means that in the case of a WAIT or STOP instruction being executed, the ACK would be prevented from being issued. If not aborted, the ACK would remain pending indenitely. See the handshake abort procedure described in Section 6.4.8, Hardware Handshake Abort Procedure.
Freescale Semiconductor
183
6.4.8
The abort procedure is based on the SYNC command. In order to abort a command, which had not issued the corresponding ACK pulse, the host controller should generate a low pulse in the BKGD pin by driving it low for at least 128 serial clock cycles and then driving it high for one serial clock cycle, providing a speedup pulse. By detecting this long low pulse in the BKGD pin, the target executes the SYNC protocol, see Section 6.4.9, SYNC Request Timed Reference Pulse, and assumes that the pending command and therefore the related ACK pulse, are being aborted. Therefore, after the SYNC protocol has been completed the host is free to issue new BDM commands. Although it is not recommended, the host could abort a pending BDM command by issuing a low pulse in the BKGD pin shorter than 128 serial clock cycles, which will not be interpreted as the SYNC command. The ACK is actually aborted when a falling edge is perceived by the target in the BKGD pin. The short abort pulse should have at least 4 clock cycles keeping the BKGD pin low, in order to allow the falling edge to be detected by the target. In this case, the target will not execute the SYNC protocol but the pending command will be aborted along with the ACK pulse. The potential problem with this abort procedure is when there is a conict between the ACK pulse and the short abort pulse. In this case, the target may not perceive the abort pulse. The worst case is when the pending command is a read command (i.e., READ_BYTE). If the abort pulse is not perceived by the target the host will attempt to send a new command after the abort pulse was issued, while the target expects the host to retrieve the accessed memory byte. In this case, host and target will run out of synchronism. However, if the command to be aborted is not a read command the short abort pulse could be used. After a command is aborted the target assumes the next falling edge, after the abort pulse, is the rst bit of a new BDM command. NOTE The details about the short abort pulse are being provided only as a reference for the reader to better understand the BDM internal behavior. It is not recommended that this procedure be used in a real application. Because the host knows the target serial clock frequency, the SYNC command (used to abort a command) does not need to consider the lower possible target frequency. In this case, the host could issue a SYNC very close to the 128 serial clock cycles length. Providing a small overhead on the pulse length in order to assure the SYNC pulse will not be misinterpreted by the target. See Section 6.4.9, SYNC Request Timed Reference Pulse. Figure 6-12 shows a SYNC command being issued after a READ_BYTE, which aborts the READ_BYTE command. Note that, after the command is aborted a new command could be issued by the host computer. NOTE Figure 6-12 does not represent the signals in a true timing scale
184
Freescale Semiconductor
BKGD PIN
READ_BYTE HOST
Figure 6-13 shows a conict between the ACK pulse and the SYNC request pulse. This conict could occur if a POD device is connected to the target BKGD pin and the target is already in debug active mode. Consider that the target CPU is executing a pending BDM command at the exact moment the POD is being connected to the BKGD pin. In this case, an ACK pulse is issued along with the SYNC command. In this case, there is an electrical conict between the ACK speedup pulse and the SYNC pulse. Because this is not a probable situation, the protocol does not prevent this conict from happening.
AT LEAST 128 CYCLES BDM CLOCK (TARGET MCU) ACK PULSE TARGET MCU DRIVES TO BKGD PIN HOST DRIVES SYNC TO BKGD PIN HOST AND TARGET DRIVE TO BKGD PIN HOST SYNC REQUEST PULSE BKGD PIN HIGH-IMPEDANCE ELECTRICAL CONFLICT
SPEEDUP PULSE
16 CYCLES
NOTE This information is being provided so that the MCU integrator will be aware that such a conict could eventually occur. The hardware handshake protocol is enabled by the ACK_ENABLE and disabled by the ACK_DISABLE BDM commands. This provides backwards compatibility with the existing POD devices which are not able to execute the hardware handshake protocol. It also allows for new POD devices, that support the hardware handshake protocol, to freely communicate with the target device. If desired, without the need for waiting for the ACK pulse.
Freescale Semiconductor
185
The commands are described as follows: ACK_ENABLE enables the hardware handshake protocol. The target will issue the ACK pulse when a CPU command is executed by the CPU. The ACK_ENABLE command itself also has the ACK pulse as a response. ACK_DISABLE disables the ACK pulse protocol. In this case, the host needs to use the worst case delay time at the appropriate places in the protocol. The default state of the BDM after reset is hardware handshake protocol disabled. All the read commands will ACK (if enabled) when the data bus cycle has completed and the data is then ready for reading out by the BKGD serial pin. All the write commands will ACK (if enabled) after the data has been received by the BDM through the BKGD serial pin and when the data bus cycle is complete. See Section 6.4.3, BDM Hardware Commands, and Section 6.4.4, Standard BDM Firmware Commands, for more information on the BDM commands. The ACK_ENABLE sends an ACK pulse when the command has been completed. This feature could be used by the host to evaluate if the target supports the hardware handshake protocol. If an ACK pulse is issued in response to this command, the host knows that the target supports the hardware handshake protocol. If the target does not support the hardware handshake protocol the ACK pulse is not issued. In this case, the ACK_ENABLE command is ignored by the target because it is not recognized as a valid command. The BACKGROUND command will issue an ACK pulse when the CPU changes from normal to background mode. The ACK pulse related to this command could be aborted using the SYNC command. The GO command will issue an ACK pulse when the CPU exits from background mode. The ACK pulse related to this command could be aborted using the SYNC command. The GO_UNTIL command is equivalent to a GO command with exception that the ACK pulse, in this case, is issued when the CPU enters into background mode. This command is an alternative to the GO command and should be used when the host wants to trace if a breakpoint match occurs and causes the CPU to enter active background mode. Note that the ACK is issued whenever the CPU enters BDM, which could be caused by a breakpoint match or by a BGND instruction being executed. The ACK pulse related to this command could be aborted using the SYNC command. The TRACE1 command has the related ACK pulse issued when the CPU enters background active mode after one instruction of the application program is executed. The ACK pulse related to this command could be aborted using the SYNC command. The TAGGO command will not issue an ACK pulse because this would interfere with the tagging function shared on the same pin.
186
Freescale Semiconductor
6.4.9
The SYNC command is unlike other BDM commands because the host does not necessarily know the correct communication speed to use for BDM communications until after it has analyzed the response to the SYNC command. To issue a SYNC command, the host should perform the following steps: 1. Drive the BKGD pin low for at least 128 cycles at the lowest possible BDM serial communication frequency (the lowest serial communication frequency is determined by the crystal oscillator or the clock chosen by CLKSW.) 2. Drive BKGD high for a brief speedup pulse to get a fast rise time (this speedup pulse is typically one cycle of the host clock.) 3. Remove all drive to the BKGD pin so it reverts to high impedance. 4. Listen to the BKGD pin for the sync response pulse. Upon detecting the SYNC request from the host, the target performs the following steps: 1. Discards any incomplete command received or bit retrieved. 2. Waits for BKGD to return to a logic 1. 3. Delays 16 cycles to allow the host to stop driving the high speedup pulse. 4. Drives BKGD low for 128 cycles at the current BDM serial communication frequency. 5. Drives a one-cycle high speedup pulse to force a fast rise time on BKGD. 6. Removes all drive to the BKGD pin so it reverts to high impedance. The host measures the low time of this 128 cycle SYNC response pulse and determines the correct speed for subsequent BDM communications. Typically, the host can determine the correct communication speed within a few percent of the actual target speed and the communication protocol can easily tolerate speed errors of several percent. As soon as the SYNC request is detected by the target, any partially received command or bit retrieved is discarded. This is referred to as a soft-reset, equivalent to a time-out in the serial communication. After the SYNC response, the target will consider the next falling edge (issued by the host) as the start of a new BDM command or the start of new SYNC request. Another use of the SYNC command pulse is to abort a pending ACK pulse. The behavior is exactly the same as in a regular SYNC command. Note that one of the possible causes for a command to not be acknowledged by the target is a host-target synchronization problem. In this case, the command may not have been understood by the target and so an ACK response pulse will not be issued.
6.4.10
Instruction Tracing
When a TRACE1 command is issued to the BDM in active BDM, the CPU exits the standard BDM rmware and executes a single instruction in the user code. As soon as this has occurred, the CPU is forced to return to the standard BDM rmware and the BDM is active and ready to receive a new command. If the TRACE1 command is issued again, the next user instruction will be executed. This facilitates stepping or tracing through the user code one instruction at a time.
Freescale Semiconductor
187
If an interrupt is pending when a TRACE1 command is issued, the interrupt stacking operation occurs but no user instruction is executed. Upon return to standard BDM rmware execution, the program counter points to the rst instruction in the interrupt service routine.
6.4.11
Instruction Tagging
The instruction queue and cycle-by-cycle CPU activity are reconstructible in real time or from trace history that is captured by a logic analyzer. However, the reconstructed queue cannot be used to stop the CPU at a specic instruction. This is because execution already has begun by the time an operation is visible outside the system. A separate instruction tagging mechanism is provided for this purpose. The tag follows program information as it advances through the instruction queue. When a tagged instruction reaches the head of the queue, the CPU enters active BDM rather than executing the instruction. NOTE Tagging is disabled when BDM becomes active and BDM serial commands are not processed while tagging is active. Executing the BDM TAGGO command congures two system pins for tagging. The TAGLO signal shares a pin with the LSTRB signal, and the TAGHI signal shares a pin with the BKGD signal. Table 6-7 shows the functions of the two tagging pins. The pins operate independently, that is the state of one pin does not affect the function of the other. The presence of logic level 0 on either pin at the fall of the external clock (ECLK) performs the indicated function. High tagging is allowed in all modes. Low tagging is allowed only when low strobe is enabled (LSTRB is allowed only in wide expanded modes and emulation expanded narrow mode).
Table 6-7. Tag Pin Function
TAGHI 1 1 0 0 TAGLO 1 0 1 0 Tag No tag Low byte High byte Both bytes
6.4.12
The host initiates a host-to-target serial transmission by generating a falling edge on the BKGD pin. If BKGD is kept low for more than 128 target clock cycles, the target understands that a SYNC command was issued. In this case, the target will keep waiting for a rising edge on BKGD in order to answer the SYNC request pulse. If the rising edge is not detected, the target will keep waiting forever without any time-out limit. Consider now the case where the host returns BKGD to logic one before 128 cycles. This is interpreted as a valid bit transmission, and not as a SYNC request. The target will keep waiting for another falling edge marking the start of a new bit. If, however, a new falling edge is not detected by the target within 512 clock cycles since the last falling edge, a time-out occurs and the current command is discarded without affecting memory or the operating mode of the MCU. This is referred to as a soft-reset.
188
Freescale Semiconductor
If a read command is issued but the data is not retrieved within 512 serial clock cycles, a soft-reset will occur causing the command to be disregarded. The data is not available for retrieval after the time-out has occurred. This is the expected behavior if the handshake protocol is not enabled. However, consider the behavior where the BDC is running in a frequency much greater than the CPU frequency. In this case, the command could time out before the data is ready to be retrieved. In order to allow the data to be retrieved even with a large clock frequency mismatch (between BDC and CPU) when the hardware handshake protocol is enabled, the time out between a read command and the data retrieval is disabled. Therefore, the host could wait for more then 512 serial clock cycles and continue to be able to retrieve the data from an issued read command. However, as soon as the handshake pulse (ACK pulse) is issued, the time-out feature is re-activated, meaning that the target will time out after 512 clock cycles. Therefore, the host needs to retrieve the data within a 512 serial clock cycles time frame after the ACK pulse had been issued. After that period, the read command is discarded and the data is no longer available for retrieval. Any falling edge of the BKGD pin after the time-out period is considered to be a new command or a SYNC request. Note that whenever a partially issued command, or partially retrieved data, has occurred the time out in the serial communication is active. This means that if a time frame higher than 512 serial clock cycles is observed between two consecutive negative edges and the command being issued or data being retrieved is not complete, a soft-reset will occur causing the partially received command or data retrieved to be disregarded. The next falling edge of the BKGD pin, after a soft-reset has occurred, is considered by the target as the start of a new BDM command, or the start of a SYNC request pulse.
6.4.13
The BDM cannot be used in wait mode if the system disables the clocks to the BDM. There is a clearing mechanism associated with the WAIT instruction when the clocks to the BDM (CPU core platform) are disabled. As the clocks restart from wait mode, the BDM receives a soft reset (clearing any command in progress) and the ACK function will be disabled. This is a change from previous BDM modules.
6.4.14
The BDM is completely shutdown in stop mode. There is a clearing mechanism associated with the STOP instruction. STOP must be enabled and the part must go into stop mode for this to occur. As the clocks restart from stop mode, the BDM receives a soft reset (clearing any command in progress) and the ACK function will be disabled. This is a change from previous BDM modules.
Freescale Semiconductor
189
190
Freescale Semiconductor
7.1.1
Features
The DBG module in BKP mode includes these distinctive features: Full or dual breakpoint mode Compare on address and data (full) Compare on either of two addresses (dual) BDM or SWI breakpoint Enter BDM on breakpoint (BDM) Execute SWI on breakpoint (SWI) Tagged or forced breakpoint Break just before a specic instruction will begin execution (TAG) Break on the rst instruction boundary after a match occurs (Force) Single, range, or page address compares Compare on address (single) Compare on address 256 byte (range) Compare on any 16K page (page) At forced breakpoints compare address on read or write High and/or low byte data compares Comparator C can provide an additional tag or force breakpoint (enhancement for BKP mode)
Freescale Semiconductor
191
The DBG in DBG mode includes these distinctive features: Three comparators (A, B, and C) Dual mode, comparators A and B used to compare addresses Full mode, comparator A compares address and comparator B compares data Can be used as trigger and/or breakpoint Comparator C used in LOOP1 capture mode or as additional breakpoint Four capture modes Normal mode, change-of-ow information is captured based on trigger specication Loop1 mode, comparator C is dynamically updated to prevent redundant change-of-ow storage. Detail mode, address and data for all cycles except program fetch (P) and free (f) cycles are stored in trace buffer Prole mode, last instruction address executed by CPU is returned when trace buffer address is read Two types of breakpoint or debug triggers Break just before a specic instruction will begin execution (tag) Break on the rst instruction boundary after a match occurs (force) BDM or SWI breakpoint Enter BDM on breakpoint (BDM) Execute SWI on breakpoint (SWI) Nine trigger modes for comparators A and B A A or B A then B A and B, where B is data (full mode) A and not B, where B is data (full mode) Event only B, store data A then event only B, store data Inside range, A address B Outside range, address < or address > B Comparator C provides an additional tag or force breakpoint when capture mode is not congured in LOOP1 mode. Sixty-four word (16 bits wide) trace buffer for storing change-of-ow information, event only data and other bus information. Source address of taken conditional branches (long, short, bit-conditional, and loop constructs) Destination address of indexed JMP, JSR, and CALL instruction. Destination address of RTI, RTS, and RTC instructions Vector address of interrupts, except for SWI and BDM vectors
192
Freescale Semiconductor
Data associated with event B trigger modes Detail report mode stores address and data for all cycles except program (P) and free (f) cycles Current instruction address when in proling mode BGND is not considered a change-of-ow (cof) by the debugger
7.1.2
Modes of Operation
There are two main modes of operation: breakpoint mode and debug mode. Each one is mutually exclusive of the other and selected via a software programmable control bit. In the breakpoint mode there are two sub-modes of operation: Dual address mode, where a match on either of two addresses will cause the system to enter background debug mode (BDM) or initiate a software interrupt (SWI). Full breakpoint mode, where a match on address and data will cause the system to enter background debug mode (BDM) or initiate a software interrupt (SWI). In debug mode, there are several sub-modes of operation. Trigger modes There are many ways to create a logical trigger. The trigger can be used to capture bus information either starting from the trigger or ending at the trigger. Types of triggers (A and B are registers): A only A or B A then B Event only B (data capture) A then event only B (data capture) A and B, full mode A and not B, full mode Inside range Outside range Capture modes There are several capture modes. These determine which bus information is saved and which is ignored. Normal: save change-of-ow program fetches Loop1: save change-of-ow program fetches, ignoring duplicates Detail: save all bus operations except program and free cycles Prole: poll target from external device
7.1.3
Block Diagram
Figure 7-1 is a block diagram of this module in breakpoint mode. Figure 7-2 is a block diagram of this module in debug mode.
Freescale Semiconductor
193
Chapter 7 Debug Module (DBGV1) Block Description CLOCKS AND CONTROL SIGNALS CONTROL BLOCK BREAKPOINT MODES AND GENERATION OF SWI, FORCE BDM, AND TAGS CONTROL SIGNALS RESULTS SIGNALS CONTROL BITS READ/WRITE CONTROL BKP CONTROL SIGNALS
......
......
BKPCT1 COMPARE BLOCK BKP READ DATA BUS WRITE DATA BUS BKP0X COMPARATOR EXPANSION ADDRESSES
BKP0H
COMPARATOR
ADDRESS HIGH
ADDRESS LOW BKP0L COMPARATOR EXPANSION ADDRESSES BKP1X COMPARATOR DATA HIGH BKP1H COMPARATOR DATA/ADDRESS HIGH MUX DATA/ADDRESS LOW MUX READ DATA HIGH COMPARATOR READ DATA LOW COMPARATOR ADDRESS HIGH DATA LOW ADDRESS LOW
BKP1L
COMPARATOR
194
Freescale Semiconductor
DBG READ DATA BUS ADDRESS BUS CONTROL WRITE DATA BUS READ DATA BUS READ/WRITE DBG MODE ENABLE CHANGE-OF-FLOW INDICATORS MCU IN BDM DETAIL EVENT ONLY CPU PROGRAM COUNTER STORE POINTER INSTRUCTION LAST CYCLE REGISTER BUS CLOCK M U X 64 x 16 BIT WORD TRACE BUFFER PROFILE CAPTURE MODE TRACE BUFFER OR PROFILING DATA ADDRESS/DATA/CONTROL REGISTERS COMPARATOR A COMPARATOR B COMPARATOR C CONTROL MATCH_A MATCH_B MATCH_C LOOP1 TRACER BUFFER CONTROL LOGIC
TAG FORCE
M U X
M U X
M U X
READ/WRITE
7.2
The DBG sub-module relies on the external bus interface (generally the MEBI) when the DBG is matching on the external bus. The tag pins in Table 7-1 (part of the MEBI) may also be a part of the breakpoint operation.
Table 7-1. External System Pins Associated with DBG and MEBI
Pin Name BKGD/MODC/ TAGHI PE3/LSTRB/ TAGLO Pin Functions TAGHI TAGLO Description When instruction tagging is on, a 0 at the falling edge of E tags the high half of the instruction word being read into the instruction queue. In expanded wide mode or emulation narrow modes, when instruction tagging is on and low strobe is enabled, a 0 at the falling edge of E tags the low half of the instruction word being read into the instruction queue.
Freescale Semiconductor
195
7.3
A summary of the registers associated with the DBG sub-block is shown in Figure 7-3. Detailed descriptions of the registers and bits are given in the subsections that follow.
7.3.1
7.3.2
Register Descriptions
This section consists of the DBG register descriptions in address order. Most of the register bits can be written to in either BKP or DBG mode, although they may not have any effect in one of the modes. However, the only bits in the DBG module that can be written while the debugger is armed (ARM = 1) are DBGEN and ARM
Name(1) 0x0020 DBGC1 0x0021 DBGSC R W R W = Unimplemented or Reserved Bit 7 DBGEN AF 6 ARM BF 5 TRGSEL CF 4 BEGIN 0 3 DBGBRK 2 0 1 Bit 0 CAPMOD
TRG
196
Freescale Semiconductor
Name(1) 0x0022 DBGTBH 0x0023 DBGTBL 0x0024 DBGCNT 0x0025 DBGCCX((2)) 0x0026 DBGCCH(2) 0x0027 DBGCCL(2) 0x0028 DBGC2 BKPCT0 0x0029 DBGC3 BKPCT1 0x002A DBGCAX BKP0X 0x002B DBGCAH BKP0H 0x002C DBGCAL BKP0L 0x002D DBGCBX BKP1X 0x002E DBGCBH BKP1H 0x002F DBGCBL BKP1L R W R W R W R W R W R W R W R W R W R W R W R W R W R W
Bit 7 Bit 15
6 Bit 14
5 Bit 13
4 Bit 12
3 Bit 11
2 Bit 10
1 Bit 9
Bit 0 Bit 8
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
TBF
CNT
PAGSEL
EXTCMP
Bit 15
14
13
12
11
10
Bit 8
Bit 7
Bit 0
BKABEN
FULL
BDM
TAGAB
BKCEN
TAGC
RWCEN
RWC
BKAMBH
BKAMBL
BKBMBH
BKBMBL
RWAEN
RWA
RWBEN
RWB
PAGSEL
EXTCMP
Bit 15
14
13
12
11
10
Bit 8
Bit 7
Bit 0
PAGSEL
EXTCMP
Bit 15
14
13
12
11
10
Bit 8
Bit 7
Bit 0
= Unimplemented or Reserved
Freescale Semiconductor
197
1. The DBG module is designed for backwards compatibility to existing BKP modules. Register and bit names have changed from the BKP module. This column shows the DBG register name, as well as the BKP register name for reference. 2. Comparator C can be used to enhance the BKP mode by providing a third breakpoint.
7.3.2.1
Module Base + 0x0020 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
0 CAPMOD 0 0 0
= Unimplemented or Reserved
NOTE This register cannot be written if BKP mode is enabled (BKABEN in DBGC2 is set).
Table 7-3. DBGC1 Field Descriptions
Field 7 DBGEN Description DBG Mode Enable Bit The DBGEN bit enables the DBG module for use in DBG mode. This bit cannot be set if the MCU is in secure mode. 0 DBG mode disabled 1 DBG mode enabled Arm Bit The ARM bit controls whether the debugger is comparing and storing data in the trace buffer. See Section 7.4.2.4, Arming the DBG Module, for more information. 0 Debugger unarmed 1 Debugger armed Note: This bit cannot be set if the DBGEN bit is not also being set at the same time. For example, a write of 01 to DBGEN[7:6] will be interpreted as a write of 00. Trigger Selection Bit The TRGSEL bit controls the triggering condition for comparators A and B in DBG mode. It serves essentially the same function as the TAGAB bit in the DBGC2 register does in BKP mode. See Section 7.4.2.1.2, Trigger Selection, for more information. TRGSEL may also determine the type of breakpoint based on comparator A and B if enabled in DBG mode (DBGBRK = 1). Please refer to Section 7.4.3.1, Breakpoint Based on Comparator A and B. 0 Trigger on any compare address match 1 Trigger before opcode at compare address gets executed (tagged-type) Begin/End Trigger Bit The BEGIN bit controls whether the trigger begins or ends storing of data in the trace buffer. See Section 7.4.2.8.1, Storing with Begin-Trigger, and Section 7.4.2.8.2, Storing with End-Trigger, for more details. 0 Trigger at end of stored data 1 Trigger before storing data
6 ARM
5 TRGSEL
4 BEGIN
198
Freescale Semiconductor
1:0 CAPMOD
Freescale Semiconductor
199
7.3.2.2
Module Base + 0x0021 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R W Reset
AF
BF
CF
0 TRG
= Unimplemented or Reserved
Figure 7-5. Debug Status and Control Register (DBGSC) Table 7-5. DBGSC Field Descriptions
Field 7 AF Description Trigger A Match Flag The AF bit indicates if trigger A match condition was met since arming. This bit is cleared when ARM in DBGC1 is written to a 1 or on any write to this register. 0 Trigger A did not match 1 Trigger A match Trigger B Match Flag The BF bit indicates if trigger B match condition was met since arming.This bit is cleared when ARM in DBGC1 is written to a 1 or on any write to this register. 0 Trigger B did not match 1 Trigger B match Comparator C Match Flag The CF bit indicates if comparator C match condition was met since arming.This bit is cleared when ARM in DBGC1 is written to a 1 or on any write to this register. 0 Comparator C did not match 1 Comparator C match Trigger Mode Bits The TRG bits select the trigger mode of the DBG module as shown Table 7-6. See Section 7.4.2.5, Trigger Modes, for more detail.
6 BF
5 CF
3:0 TRG
200
Freescale Semiconductor
7.3.2.3
Module Base + 0x0022 Starting address location affected by INITRG register setting.
15 14 13 12 11 10 9 8
R W Reset
Bit 15
Bit 14
Bit 13
Bit 12
Bit 11
Bit 10
Bit 9
Bit 8
= Unimplemented or Reserved
R W Reset
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
= Unimplemented or Reserved
Figure 7-7. Debug Trace Buffer Register Low (DBGTBL) Table 7-7. DBGTB Field Descriptions
Field 15:0 Description Trace Buffer Data Bits The trace buffer data bits contain the data of the trace buffer. This register can be read only as a word read. Any byte reads or misaligned access of these registers will return 0 and will not cause the trace buffer pointer to increment to the next trace buffer address. The same is true for word reads while the debugger is armed. In addition, this register may appear to contain incorrect data if it is not read with the same capture mode bit settings as when the trace buffer data was recorded (See Section 7.4.2.9, Reading Data from Trace Buffer). Because reads will reect the contents of the trace buffer RAM, the reset state is undened.
Freescale Semiconductor
201
7.3.2.4
Module Base + 0x0024 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R W Reset
TBF
CNT
= Unimplemented or Reserved
Figure 7-8. Debug Count Register (DBGCNT) Table 7-8. DBGCNT Field Descriptions
Field 7 TBF 5:0 CNT Description Trace Buffer Full The TBF bit indicates that the trace buffer has stored 64 or more words of data since it was last armed. If this bit is set, then all 64 words will be valid data, regardless of the value in CNT[5:0]. The TBF bit is cleared when ARM in DBGC1 is written to a 1. Count Value The CNT bits indicate the number of valid data words stored in the trace buffer. Table 7-9 shows the correlation between the CNT bits and the number of valid data words in the trace buffer. When the CNT rolls over to 0, the TBF bit will be set and incrementing of CNT will continue if DBG is in end-trigger mode. The DBGCNT register is cleared when ARM in DBGC1 is written to a 1.
0 1
000001 .. .. 111111
202
Freescale Semiconductor
7.3.2.5
Module Base + 0x0025 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
Figure 7-9. Debug Comparator C Extended Register (DBGCCX) Table 7-10. DBGCCX Field Descriptions
Field 7:6 PAGSEL 5:0 EXTCMP Description Page Selector Field In both BKP and DBG mode, PAGSEL selects the type of paging as shown in Table 7-11. DPAGE and EPAGE are not yet implemented so the value in bit 7 will be ignored (i.e., PAGSEL values of 10 and 11 will be interpreted as values of 00 and 01, respectively). Comparator C Extended Compare Bits The EXTCMP bits are used as comparison address bits as shown in Table 7-11 along with the appropriate PPAGE, DPAGE, or EPAGE signal from the core. Note: Comparator C can be used when the DBG module is congured for BKP mode. Extended addressing comparisons for comparator C use PAGSEL and will operate differently to the way that comparator A and B operate in BKP mode.
1. See Figure 7-10. 2. Current HCS12 implementations have PPAGE limited to 6 bits. Therefore, EXTCMP[5:4] should be set to 00. 3. Data page (DPAGE) and Extra page (EPAGE) are reserved for implementation on devices that support paged data and extra space.
Freescale Semiconductor
203
SEE NOTE 1 PORTK/XAB XAB21 XAB20 XAB19 XAB18 XAB17 XAB16 XAB15 XAB14
PPAGE
PIX7
PIX6
PIX5
PIX4
PIX3
PIX2
PIX1
PIX0
SEE NOTE 2 NOTES: 1. In BKP and DBG mode, PAGSEL selects the type of paging as shown in Table 7-11. 2. Current HCS12 implementations are limited to six PPAGE bits, PIX[5:0]. Therefore, EXTCMP[5:4] = 00.
7.3.2.6
Module Base + 0x0026 Starting address location affected by INITRG register setting.
15 14 13 12 11 10
R W Reset
Bit 15
Bit 14
Bit 13
Bit 12
Bit 11
Bit 10
Bit 9
Bit 8
= Unimplemented or Reserved
R W Reset
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
= Unimplemented or Reserved
204
Freescale Semiconductor
7.3.2.7
Module Base + 0x0028 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R W
BKABEN(1)
FULL
BDM
TAGAB
BKCEN(2)
TAGC2
RWCEN2
RWC2
Reset 0 0 0 0 0 0 0 0 1. When BKABEN is set (BKP mode), all bits in DBGC2 are available. When BKABEN is cleared and DBG is used in DBG mode, bits FULL and TAGAB have no meaning. 2. These bits can be used in BKP mode and DBG mode (when capture mode is not set in LOOP1) to provide a third breakpoint.
Figure 7-13. Debug Control Register 2 (DBGC2) Table 7-14. DBGC2 Field Descriptions
Field 7 BKABEN Description Breakpoint Using Comparator A and B Enable This bit enables the breakpoint capability using comparator A and B, when set (BKP mode) the DBGEN bit in DBGC1 cannot be set. 0 Breakpoint module off 1 Breakpoint module on Full Breakpoint Mode Enable This bit controls whether the breakpoint module is in dual mode or full mode. In full mode, comparator A is used to match address and comparator B is used to match data. See Section 7.4.1.2, Full Breakpoint Mode, for more details. 0 Dual address mode enabled 1 Full breakpoint mode enabled Background Debug Mode Enable This bit determines if the breakpoint causes the system to enter background debug mode (BDM) or initiate a software interrupt (SWI). 0 Go to software interrupt on a break request 1 Go to BDM on a break request
6 FULL
5 BDM
Freescale Semiconductor
205
3 BKCEN
2 TAGC
1 RWCEN
0 RWC
7.3.2.8
Module Base + 0x0029 Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
R W
BKAMBH(1)
BKAMBL1
BKBMBH(2)
BKBMBL2
RWAEN
RWA 0
RWBEN 0
RWB 0
Reset 0 0 0 0 0 1. In DBG mode, BKAMBH:BKAMBL has no meaning and are forced to 0s. 2. In DBG mode, BKBMBH:BKBMBL are used in full mode to qualify data.
206
Freescale Semiconductor
7:6 Breakpoint Mask High Byte for First Address In dual or full mode, these bits may be used to mask (disable) BKAMB[H:L] the comparison of the high and/or low bytes of the rst address breakpoint. The functionality is as given in Table 7-16. The x:0 case is for a full address compare. When a program page is selected, the full address compare will be based on bits for a 20-bit compare. The registers used for the compare are {DBGCAX[5:0], DBGCAH[5:0], DBGCAL[7:0]}, where DBGAX[5:0] corresponds to PPAGE[5:0] or extended address bits [19:14] and CPU address [13:0]. When a program page is not selected, the full address compare will be based on bits for a 16-bit compare. The registers used for the compare are {DBGCAH[7:0], DBGCAL[7:0]} which corresponds to CPU address [15:0]. Note: This extended address compare scheme causes an aliasing problem in BKP mode in which several physical addresses may match with a single logical address. This problem may be avoided by using DBG mode to generate breakpoints. The 1:0 case is not sensible because it would ignore the high order address and compare the low order and expansion addresses. Logic forces this case to compare all address lines (effectively ignoring the BKAMBH control bit). The 1:1 case is useful for triggering a breakpoint on any access to a particular expansion page. This only makes sense if a program page is being accessed so that the breakpoint trigger will occur only if DBGCAX compares. 5:4 Breakpoint Mask High Byte and Low Byte of Data (Second Address) In dual mode, these bits may be BKBMB[H:L] used to mask (disable) the comparison of the high and/or low bytes of the second address breakpoint. The functionality is as given in Table 7-17. The x:0 case is for a full address compare. When a program page is selected, the full address compare will be based on bits for a 20-bit compare. The registers used for the compare are {DBGCBX[5:0], DBGCBH[5:0], DBGCBL[7:0]} where DBGCBX[5:0] corresponds to PPAGE[5:0] or extended address bits [19:14] and CPU address [13:0]. When a program page is not selected, the full address compare will be based on bits for a 16-bit compare. The registers used for the compare are {DBGCBH[7:0], DBGCBL[7:0]} which corresponds to CPU address [15:0]. Note: This extended address compare scheme causes an aliasing problem in BKP mode in which several physical addresses may match with a single logical address. This problem may be avoided by using DBG mode to generate breakpoints. The 1:0 case is not sensible because it would ignore the high order address and compare the low order and expansion addresses. Logic forces this case to compare all address lines (effectively ignoring the BKBMBH control bit). The 1:1 case is useful for triggering a breakpoint on any access to a particular expansion page. This only makes sense if a program page is being accessed so that the breakpoint trigger will occur only if DBGCBX compares. In full mode, these bits may be used to mask (disable) the comparison of the high and/or low bytes of the data breakpoint. The functionality is as given in Table 7-18. 3 RWAEN Read/Write Comparator A Enable Bit The RWAEN bit controls whether read or write comparison is enabled for comparator A. See Section 7.4.2.1.1, Read or Write Comparison, for more information. This bit is not useful for tagged operations. 0 Read/Write is not used in comparison 1 Read/Write is used in comparison Read/Write Comparator A Value Bit The RWA bit controls whether read or write is used in compare for comparator A. The RWA bit is not used if RWAEN = 0. 0 Write cycle will be matched 1 Read cycle will be matched
2 RWA
Freescale Semiconductor
207
0 RWB
DBGCAL Yes No No
Yes1 Yes
1
Table 7-17. Breakpoint Mask Bits for Second Address (Dual Mode)
BKBMBH:BKBMBL x:0 0:1 1:1 1. If PPAGE is selected. Address Compare Full address compare 256 byte address range 16K byte address range DBGCBX Yes(1) Yes1 Yes
1
DBGCBL Yes No No
Table 7-18. Breakpoint Mask Bits for Data Breakpoints (Full Mode)
BKBMBH:BKBMBL 0:0 0:1 1:0 Data Compare High and low byte compare High byte Low byte DBGCBX No
(1) 1 1
No No
1:1 No compare No1 1. Expansion addresses for breakpoint B are not applicable in this mode.
208
Freescale Semiconductor
7.3.2.9
Module Base + 0x002A Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
Figure 7-15. Debug Comparator A Extended Register (DBGCAX) Table 7-19. DBGCAX Field Descriptions
Field 7:6 PAGSEL Description Page Selector Field If DBGEN is set in DBGC1, then PAGSEL selects the type of paging as shown in Table 720. DPAGE and EPAGE are not yet implemented so the value in bit 7 will be ignored (i.e., PAGSEL values of 10 and 11 will be interpreted as values of 00 and 01, respectively). In BKP mode, PAGSEL has no meaning and EXTCMP[5:0] are compared to address bits [19:14] if the address is in the FLASH/ROM memory space. 5:0 EXTCMP Comparator A Extended Compare Bits The EXTCMP bits are used as comparison address bits as shown in Table 7-20 along with the appropriate PPAGE, DPAGE, or EPAGE signal from the core.
DBG
(2)
PAGSEL = 01 EXTCMP[5:0] = XAB[21:16] DBGCxH[7:0] = XAB[15:14], AB[13:8] 1. See Figure 7-16. 2. See Figure 7-10 (note that while this gure provides extended comparisons for comparator C, the gure also pertains to comparators A and B in DBG mode only).
Freescale Semiconductor
209
PAGSEL DBGCXX 0 0 5 4
EXTCMP 3 2 1 BIT 0
PORTK/XAB
XAB21
XAB20
XAB19
XAB18
XAB17
XAB16
XAB15
XAB14
PPAGE
PIX7
PIX6
PIX5
PIX4
PIX3
PIX2
PIX1
PIX0
SEE NOTE 2 NOTES: 1. In BKP mode, PAGSEL has no functionality. Therefore, set PAGSEL to 00 (reset state). 2. Current HCS12 implementations are limited to six PPAGE bits, PIX[5:0].
7.3.2.10
Module Base + 0x002B Starting address location affected by INITRG register setting.
15 14 13 12 11 10 9 8
Figure 7-18. Debug Comparator A Register Low (DBGCAL) Table 7-21. DBGCA Field Descriptions
Field 15:0 15:0 Description Comparator A Compare Bits The comparator A compare bits control whether comparator A compares the address bus bits [15:0] to a logic 1 or logic 0. See Table 7-20. 0 Compare corresponding address bit to a logic 0 1 Compare corresponding address bit to a logic 1
210
Freescale Semiconductor
BKP MODE
SEE NOTE 1
7.3.2.11
Figure 7-19. Debug Comparator B Extended Register (DBGCBX) Table 7-22. DBGCBX Field Descriptions
Field 7:6 PAGSEL Description Page Selector Field If DBGEN is set in DBGC1, then PAGSEL selects the type of paging as shown in Table 711. DPAGE and EPAGE are not yet implemented so the value in bit 7 will be ignored (i.e., PAGSEL values of 10 and 11 will be interpreted as values of 00 and 01, respectively.) In BKP mode, PAGSEL has no meaning and EXTCMP[5:0] are compared to address bits [19:14] if the address is in the FLASH/ROM memory space. 5:0 EXTCMP Comparator B Extended Compare Bits The EXTCMP bits are used as comparison address bits as shown in Table 7-11 along with the appropriate PPAGE, DPAGE, or EPAGE signal from the core. Also see Table 7-20.
7.3.2.12
Module Base + 0x002E Starting address location affected by INITRG register setting.
15 14 13 12 11 10 9 8
Freescale Semiconductor
211
Module Base + 0x002F Starting address location affected by INITRG register setting.
7 6 5 4 3 2 1 0
Figure 7-21. Debug Comparator B Register Low (DBGCBL) Table 7-23. DBGCB Field Descriptions
Field 15:0 15:0 Description Comparator B Compare Bits The comparator B compare bits control whether comparator B compares the address bus bits [15:0] or data bus bits [15:0] to a logic 1 or logic 0. See Table 7-20. 0 Compare corresponding address bit to a logic 0, compares to data if in Full mode 1 Compare corresponding address bit to a logic 1, compares to data if in Full mode
7.4
Functional Description
This section provides a complete functional description of the DBG module. The DBG module can be congured to run in either of two modes, BKP or DBG. BKP mode is enabled by setting BKABEN in DBGC2. DBG mode is enabled by setting DBGEN in DBGC1. Setting BKABEN in DBGC2 overrides the DBGEN in DBGC1 and prevents DBG mode. If the part is in secure mode, DBG mode cannot be enabled.
7.4.1
In BKP mode, the DBG will be fully backwards compatible with the existing BKP_ST12_A module. The DBGC2 register has four additional bits that were not available on existing BKP_ST12_A modules. As long as these bits are written to either all 1s or all 0s, they should be transparent to the user. All 1s would enable comparator C to be used as a breakpoint, but tagging would be enabled. The match address register would be all 0s if not modied by the user. Therefore, code executing at address 0x0000 would have to occur before a breakpoint based on comparator C would happen. The DBG module in BKP mode supports two modes of operation: dual address mode and full breakpoint mode. Within each of these modes, forced or tagged breakpoint types can be used. Forced breakpoints occur at the next instruction boundary if a match occurs and tagged breakpoints allow for breaking just before the tagged instruction executes. The action taken upon a successful match can be to either place the CPU in background debug mode or to initiate a software interrupt. The breakpoint can operate in dual address mode or full breakpoint mode. Each of these modes is discussed in the subsections below.
7.4.1.1
When dual address mode is enabled, two address breakpoints can be set. Each breakpoint can cause the system to enter background debug mode or to initiate a software interrupt based upon the state of BDM in
212
Freescale Semiconductor
DBGC2 being logic 1 or logic 0, respectively. BDM requests have a higher priority than SWI requests. No data breakpoints are allowed in this mode. TAGAB in DBGC2 selects whether the breakpoint mode is forced or tagged. The BKxMBH:L bits in DBGC3 select whether or not the breakpoint is matched exactly or is a range breakpoint. They also select whether the address is matched on the high byte, low byte, both bytes, and/or memory expansion. The RWx and RWxEN bits in DBGC3 select whether the type of bus cycle to match is a read, write, or read/write when performing forced breakpoints.
7.4.1.2
Full breakpoint mode requires a match on address and data for a breakpoint to occur. Upon a successful match, the system will enter background debug mode or initiate a software interrupt based upon the state of BDM in DBGC2 being logic 1 or logic 0, respectively. BDM requests have a higher priority than SWI requests. R/W matches are also allowed in this mode. TAGAB in DBGC2 selects whether the breakpoint mode is forced or tagged. When TAGAB is set in DBGC2, only addresses are compared and data is ignored. The BKAMBH:L bits in DBGC3 select whether or not the breakpoint is matched exactly, is a range breakpoint, or is in page space. The BKBMBH:L bits in DBGC3 select whether the data is matched on the high byte, low byte, or both bytes. RWA and RWAEN bits in DBGC2 select whether the type of bus cycle to match is a read or a write when performing forced breakpoints. RWB and RWBEN bits in DBGC2 are not used in full breakpoint mode. NOTE The full trigger mode is designed to be used for either a word access or a byte access, but not both at the same time. Confusing trigger operation (seemingly false triggers or no trigger) can occur if the trigger address occurs in the user program as both byte and word accesses.
7.4.1.3
Breakpoint Priority
Breakpoint operation is rst determined by the state of the BDM module. If the BDM module is already active, meaning the CPU is executing out of BDM rmware, breakpoints are not allowed. In addition, while executing a BDM TRACE command, tagging into BDM is not allowed. If BDM is not active, the breakpoint will give priority to BDM requests over SWI requests. This condition applies to both forced and tagged breakpoints. In all cases, BDM related breakpoints will have priority over those generated by the Breakpoint sub-block. This priority includes breakpoints enabled by the TAGLO and TAGHI external pins of the system that interface with the BDM directly and whose signal information passes through and is used by the breakpoint sub-block.
Freescale Semiconductor
213
NOTE BDM should not be entered from a breakpoint unless the ENABLE bit is set in the BDM. Even if the ENABLE bit in the BDM is cleared, the CPU actually executes the BDM rmware code. It checks the ENABLE and returns if ENABLE is not set. If the BDM is not serviced by the monitor then the breakpoint would be re-asserted when the BDM returns to normal CPU ow. There is no hardware to enforce restriction of breakpoint operation if the BDM is not enabled. When program control returns from a tagged breakpoint through an RTI or a BDM GO command, it will return to the instruction whose tag generated the breakpoint. Unless breakpoints are disabled or modied in the service routine or active BDM session, the instruction will be tagged again and the breakpoint will be repeated. In the case of BDM breakpoints, this situation can also be avoided by executing a TRACE1 command before the GO to increment the program ow past the tagged instruction.
7.4.1.4
The original BKP_ST12_A module supports two breakpoints. The DBG_ST12_A module can be used in BKP mode and allow a third breakpoint using comparator C. Four additional bits, BKCEN, TAGC, RWCEN, and RWC in DBGC2 in conjunction with additional comparator C address registers, DBGCCX, DBGCCH, and DBGCCL allow the user to set up a third breakpoint. Using PAGSEL in DBGCCX for expanded memory will work differently than the way paged memory is done using comparator A and B in BKP mode. See Section 7.3.2.5, Debug Comparator C Extended Register (DBGCCX), for more information on using comparator C.
7.4.2
Enabling the DBG module in DBG mode, allows the arming, triggering, and storing of data in the trace buffer and can be used to cause CPU breakpoints. The DBG module is made up of three main blocks, the comparators, trace buffer control logic, and the trace buffer. NOTE In general, there is a latency between the triggering event appearing on the bus and being detected by the DBG circuitry. In general, tagged triggers will be more predictable than forced triggers.
7.4.2.1
Comparators
The DBG contains three comparators, A, B, and C. Comparator A compares the core address bus with the address stored in DBGCAH and DBGCAL. Comparator B compares the core address bus with the address stored in DBGCBH and DBGCBL except in full mode, where it compares the data buses to the data stored in DBGCBH and DBGCBL. Comparator C can be used as a breakpoint generator or as the address comparison unit in the loop1 mode. Matches on comparator A, B, and C are signaled to the trace buffer
214
Freescale Semiconductor
control (TBC) block. When PAGSEL = 01, registers DBGCAX, DBGCBX, and DBGCCX are used to match the upper addresses as shown in Table 7-11. NOTE If a tagged-type C breakpoint is set at the same address as an A/B taggedtype trigger (including the initial entry in an inside or outside range trigger), the C breakpoint will have priority and the trigger will not be recognized. 7.4.2.1.1 Read or Write Comparison
Read or write comparisons are useful only with TRGSEL = 0, because only opcodes should be tagged as they are read from memory. RWAEN and RWBEN are ignored when TRGSEL = 1. In full modes (A and B and A and not B) RWAEN and RWA are used to select read or write comparisons for both comparators A and B. Table 7-24 shows the effect for RWAEN, RWA, and RW on the DBGCB comparison conditions. The RWBEN and RWB bits are not used and are ignored in full modes.
Table 7-24. Read or Write Comparison Logic Table
RWAEN bit 0 0 1 1 1 1 RWA bit x x 0 0 1 1 RW signal 0 1 0 1 0 1 Comment Write data bus Read data bus Write data bus No data bus compare since RW=1 No data bus compare since RW=0 Read data bus
7.4.2.1.2
Trigger Selection
The TRGSEL bit in DBGC1 is used to determine the triggering condition in DBG mode. TRGSEL applies to both trigger A and B except in the event only trigger modes. By setting TRGSEL, the comparators A and B will qualify a match with the output of opcode tracking logic and a trigger occurs before the tagged instruction executes (tagged-type trigger). With the TRGSEL bit cleared, a comparator match forces a trigger when the matching condition occurs (force-type trigger). NOTE If the TRGSEL is set, the address stored in the comparator match address registers must be an opcode address for the trigger to occur.
7.4.2.2
The TBC is the main controller for the DBG module. Its function is to decide whether data should be stored in the trace buffer based on the trigger mode and the match signals from the comparator. The TBC also determines whether a request to break the CPU should occur.
Freescale Semiconductor
215
7.4.2.3
The denitions of begin- and end-trigger as used in the DBG module are as follows: Begin-trigger: Storage in trace buffer occurs after the trigger and continues until 64 locations are lled. End-trigger: Storage in trace buffer occurs until the trigger, with the least recent data falling out of the trace buffer if more than 64 words are collected.
7.4.2.4
In DBG mode, arming occurs by setting DBGEN and ARM in DBGC1. The ARM bit in DBGC1 is cleared when the trigger condition is met in end-trigger mode or when the Trace Buffer is lled in begin-trigger mode. The TBC logic determines whether a trigger condition has been met based on the trigger mode and the trigger selection.
7.4.2.5
Trigger Modes
The DBG module supports nine trigger modes. The trigger modes are encoded as shown in Table 7-6. The trigger mode is used as a qualier for either starting or ending the storing of data in the trace buffer. When the match condition is met, the appropriate ag A or B is set in DBGSC. Arming the DBG module clears the A, B, and C ags in DBGSC. In all trigger modes except for the event-only modes and DETAIL capture mode, change-of-ow addresses are stored in the trace buffer. In the event-only modes only the value on the data bus at the trigger event B will be stored. In DETAIL capture mode address and data for all cycles except program fetch (P) and free (f) cycles are stored in trace buffer. 7.4.2.5.1 A Only
In the A only trigger mode, if the match condition for A is met, the A ag in DBGSC is set and a trigger occurs. 7.4.2.5.2 A or B
In the A or B trigger mode, if the match condition for A or B is met, the corresponding ag in DBGSC is set and a trigger occurs. 7.4.2.5.3 A then B
In the A then B trigger mode, the match condition for A must be met before the match condition for B is compared. When the match condition for A or B is met, the corresponding ag in DBGSC is set. The trigger occurs only after A then B have matched. NOTE When tagging and using A then B, if addresses A and B are close together, then B may not complete the trigger sequence. This occurs when A and B are in the instruction queue at the same time. Basically the A trigger has not yet occurred, so the B instruction is not tagged. Generally, if address B is at
216
Freescale Semiconductor
least six addresses higher than address A (or B is lower than A) and there are not changes of ow to put these in the queue at the same time, then this operation should trigger properly. 7.4.2.5.4 Event-Only B (Store Data)
In the event-only B trigger mode, if the match condition for B is met, the B ag in DBGSC is set and a trigger occurs. The event-only B trigger mode is considered a begin-trigger type and the BEGIN bit in DBGC1 is ignored. Event-only B is incompatible with instruction tagging (TRGSEL = 1), and thus the value of TRGSEL is ignored. Please refer to Section 7.4.2.7, Storage Memory, for more information. This trigger mode is incompatible with the detail capture mode so the detail capture mode will have priority. TRGSEL and BEGIN will not be ignored and this trigger mode will behave as if it were B only. 7.4.2.5.5 A then Event-Only B (Store Data)
In the A then event-only B trigger mode, the match condition for A must be met before the match condition for B is compared, after the A match has occurred, a trigger occurs each time B matches. When the match condition for A or B is met, the corresponding ag in DBGSC is set. The A then event-only B trigger mode is considered a begin-trigger type and BEGIN in DBGC1 is ignored. TRGSEL in DBGC1 applies only to the match condition for A. Please refer to Section 7.4.2.7, Storage Memory, for more information. This trigger mode is incompatible with the detail capture mode so the detail capture mode will have priority. TRGSEL and BEGIN will not be ignored and this trigger mode will be the same as A then B. 7.4.2.5.6 A and B (Full Mode)
In the A and B trigger mode, comparator A compares to the address bus and comparator B compares to the data bus. In the A and B trigger mode, if the match condition for A and B happen on the same bus cycle, both the A and B ags in the DBGSC register are set and a trigger occurs. If TRGSEL = 1, only matches from comparator A are used to determine if the trigger condition is met and comparator B matches are ignored. If TRGSEL = 0, full-word data matches on an odd address boundary (misaligned access) do not work unless the access is to a RAM that manages misaligned accesses in a single clock cycle (which is typical of RAM modules used in HCS12 MCUs). 7.4.2.5.7 A and Not B (Full Mode)
In the A and not B trigger mode, comparator A compares to the address bus and comparator B compares to the data bus. In the A and not B trigger mode, if the match condition for A and not B happen on the same bus cycle, both the A and B ags in DBGSC are set and a trigger occurs. If TRGSEL = 1, only matches from comparator A are used to determine if the trigger condition is met and comparator B matches are ignored. As described in Section 7.4.2.5.6, A and B (Full Mode), full-word data compares on misaligned accesses will not match expected data (and thus will cause a trigger in this mode) unless the access is to a RAM that manages misaligned accesses in a single clock cycle.
Freescale Semiconductor
217
7.4.2.5.8
In the inside range trigger mode, if the match condition for A and B happen on the same bus cycle, both the A and B ags in DBGSC are set and a trigger occurs. If a match condition on only A or only B occurs no ags are set. If TRGSEL = 1, the inside range is accurate only to word boundaries. If TRGSEL = 0, an aligned word access which straddles the range boundary will cause a trigger only if the aligned address is within the range. 7.4.2.5.9 Outside Range (address < A or address > B)
In the outside range trigger mode, if the match condition for A or B is met, the corresponding ag in DBGSC is set and a trigger occurs. If TRGSEL = 1, the outside range is accurate only to word boundaries. If TRGSEL = 0, an aligned word access which straddles the range boundary will cause a trigger only if the aligned address is outside the range. 7.4.2.5.10 Control Bit Priorities
The denitions of some of the control bits are incompatible with each other. Table 7-25 and the notes associated with it summarize how these incompatibilities are managed: Read/write comparisons are not compatible with TRGSEL = 1. Therefore, RWAEN and RWBEN are ignored. Event-only trigger modes are always considered a begin-type trigger. See Section 7.4.2.8.1, Storing with Begin-Trigger, and Section 7.4.2.8.2, Storing with End-Trigger. Detail capture mode has priority over the event-only trigger/capture modes. Therefore, event-only modes have no meaning in detail mode and their functions default to similar trigger modes.
Table 7-25. Resolution of Mode Conicts
Normal / Loop1 Mode Tag A only A or B A then B Event-only B A then event-only B A and B (full mode) A and not B (full mode) Inside range Outside range 1 2 5 5 6 6 1, 3 4 5 5 6 6 3 4 Force Tag Force Detail
1 Ignored same as force 2 Ignored for comparator B 3 Reduces to effectively B only 4 Works same as A then B 5 Reduces to effectively A only B not compared 6 Only accurate to word boundaries
218
Freescale Semiconductor
7.4.2.6
Capture Modes
The DBG in DBG mode can operate in four capture modes. These modes are described in the following subsections. 7.4.2.6.1 Normal Mode
In normal mode, the DBG module uses comparator A and B as triggering devices. Change-of-ow information or data will be stored depending on TRG in DBGSC. 7.4.2.6.2 Loop1 Mode
The intent of loop1 mode is to prevent the trace buffer from being lled entirely with duplicate information from a looping construct such as delays using the DBNE instruction or polling loops using BRSET/BRCLR instructions. Immediately after address information is placed in the trace buffer, the DBG module writes this value into the C comparator and the C comparator is placed in ignore address mode. This will prevent duplicate address entries in the trace buffer resulting from repeated bit-conditional branches. Comparator C will be cleared when the ARM bit is set in loop1 mode to prevent the previous contents of the register from interfering with loop1 mode operation. Breakpoints based on comparator C are disabled. Loop1 mode only inhibits duplicate source address entries that would typically be stored in most tight looping constructs. It will not inhibit repeated entries of destination addresses or vector addresses, because repeated entries of these would most likely indicate a bug in the users code that the DBG module is designed to help nd. NOTE In certain very tight loops, the source address will have already been fetched again before the C comparator is updated. This results in the source address being stored twice before further duplicate entries are suppressed. This condition occurs with branch-on-bit instructions when the branch is fetched by the rst P-cycle of the branch or with loop-construct instructions in which the branch is fetched with the rst or second P cycle. See examples below:
LOOP INCX ; 1-byte instruction fetched by 1st P-cycle of BRCLR BRCLR CMPTMP,#$0c,LOOP ; the BRCLR instruction also will be fetched by 1st P-cycle of BRCLR * A,LOOP2 ; 2-byte instruction fetched by 1st P-cycle of DBNE ; 1-byte instruction fetched by 2nd P-cycle of DBNE ; this instruction also fetched by 2nd P-cycle of DBNE
NOTE Loop1 mode does not support paged memory, and inhibits duplicate entries in the trace buffer based solely on the CPU address. There is a remote possibility of an erroneous address match if program ow alternates between paged and unpaged memory space.
Freescale Semiconductor
219
7.4.2.6.3
Detail Mode
In the detail mode, address and data for all cycles except program fetch (P) and free (f) cycles are stored in trace buffer. This mode is intended to supply additional information on indexed, indirect addressing modes where storing only the destination address would not provide all information required for a user to determine where his code was in error. 7.4.2.6.4 Prole Mode
This mode is intended to allow a host computer to poll a running target and provide a histogram of program execution. Each read of the trace buffer address will return the address of the last instruction executed. The DBGCNT register is not incremented and the trace buffer does not get lled. The ARM bit is not used and all breakpoints and all other debug functions will be disabled.
7.4.2.7
Storage Memory
The storage memory is a 64 words deep by 16-bits wide dual port RAM array. The CPU accesses the RAM array through a single memory location window (DBGTBH:DBGTBL). The DBG module stores trace information in the RAM array in a circular buffer format. As data is read via the CPU, a pointer into the RAM will increment so that the next CPU read will receive fresh information. In all trigger modes except for event-only and detail capture mode, the data stored in the trace buffer will be change-of-ow addresses. change-of-ow addresses are dened as follows: Source address of conditional branches (long, short, BRSET, and loop constructs) taken Destination address of indexed JMP, JSR, and CALL instruction Destination address of RTI, RTS, and RTC instructions Vector address of interrupts except for SWI and BDM vectors In the event-only trigger modes only the 16-bit data bus value corresponding to the event is stored. In the detail capture mode, address and then data are stored for all cycles except program fetch (P) and free (f) cycles.
7.4.2.8
7.4.2.8.1
Storing with begin-trigger can be used in all trigger modes. When DBG mode is enabled and armed in the begin-trigger mode, data is not stored in the trace buffer until the trigger condition is met. As soon as the trigger condition is met, the DBG module will remain armed until 64 words are stored in the trace buffer. If the trigger is at the address of the change-of-ow instruction the change-of-ow associated with the trigger event will be stored in the trace buffer. 7.4.2.8.2 Storing with End-Trigger
Storing with end-trigger cannot be used in event-only trigger modes. When DBG mode is enabled and armed in the end-trigger mode, data is stored in the trace buffer until the trigger condition is met. When the trigger condition is met, the DBG module will become de-armed and no more data will be stored. If
220
Freescale Semiconductor
the trigger is at the address of a change-of-ow address the trigger event will not be stored in the trace buffer.
7.4.2.9
The data stored in the trace buffer can be read using either the background debug module (BDM) module or the CPU provided the DBG module is enabled and not armed. The trace buffer data is read out rst-in rst-out. By reading CNT in DBGCNT the number of valid words can be determined. CNT will not decrement as data is read from DBGTBH:DBGTBL. The trace buffer data is read by reading DBGTBH:DBGTBL with a 16-bit read. Each time DBGTBH:DBGTBL is read, a pointer in the DBG will be incremented to allow reading of the next word. Reading the trace buffer while the DBG module is armed will return invalid data and no shifting of the RAM pointer will occur. NOTE The trace buffer should be read with the DBG module enabled and in the same capture mode that the data was recorded. The contents of the trace buffer counter register (DBGCNT) are resolved differently in detail mode verses the other modes and may lead to incorrect interpretation of the trace buffer data.
7.4.3
Breakpoints
There are two ways of getting a breakpoint in DBG mode. One is based on the trigger condition of the trigger mode using comparator A and/or B, and the other is using comparator C. External breakpoints generated using the TAGHI and TAGLO external pins are disabled in DBG mode.
7.4.3.1
A breakpoint request to the CPU can be enabled by setting DBGBRK in DBGC1. The value of BEGIN in DBGC1 determines when the breakpoint request to the CPU will occur. When BEGIN in DBGC1 is set, begin-trigger is selected and the breakpoint request will not occur until the trace buffer is lled with 64 words. When BEGIN in DBGC1 is cleared, end-trigger is selected and the breakpoint request will occur immediately at the trigger cycle. There are two types of breakpoint requests supported by the DBG module, tagged and forced. Tagged breakpoints are associated with opcode addresses and allow breaking just before a specic instruction executes. Forced breakpoints are not associated with opcode addresses and allow breaking at the next instruction boundary. The type of breakpoint based on comparators A and B is determined by TRGSEL in the DBGC1 register (TRGSEL = 1 for tagged breakpoint, TRGSEL = 0 for forced breakpoint). Table 7-26 illustrates the type of breakpoint that will occur based on the debug run.
Freescale Semiconductor
221
7.4.3.2
A breakpoint request to the CPU can be created if BKCEN in DBGC2 is set. Breakpoints based on a successful comparator C match can be accomplished regardless of the mode of operation for comparator A or B, and do not affect the status of the ARM bit. TAGC in DBGC2 is used to select either tagged or forced breakpoint requests for comparator C. Breakpoints based on comparator C are disabled in LOOP1 mode. NOTE Because breakpoints cannot be disabled when the DBG is armed, one must be careful to avoid an innite breakpoint loop when using tagged-type C breakpoints while the DBG is armed. If BDM breakpoints are selected, executing a TRACE1 instruction before the GO instruction is the recommended way to avoid re-triggering a breakpoint if one does not wish to de-arm the DBG. If SWI breakpoints are selected, disarming the DBG in the SWI interrupt service routine is the recommended way to avoid retriggering a breakpoint.
7.5
Resets
The DBG module is disabled after reset. The DBG module cannot cause a MCU reset.
7.6
Interrupts
The DBG contains one interrupt source. If a breakpoint is requested and BDM in DBGC2 is cleared, an SWI interrupt will be generated.
222
Freescale Semiconductor
8.1.1
Features
8/10-bit resolution. 7 sec, 10-bit single conversion time. Sample buffer amplier. Programmable sample time. Left/right justied, signed/unsigned result data. External trigger control. Conversion completion interrupt generation. Analog input multiplexer for eight analog input channels. Analog/digital input pin multiplexing. 1-to-8 conversion sequence lengths. Continuous conversion mode. Multiple channel scans.
8.1.2
8.1.2.1
Modes of Operation
Conversion Modes
There is software programmable selection between performing single or continuous conversion on a single channel or multiple channels.
Freescale Semiconductor
223
8.1.2.2
Stop Mode Entering stop mode causes all clocks to halt and thus the system is placed in a minimum power standby mode. This aborts any conversion sequence in progress. During recovery from stop mode, there must be a minimum delay for the stop recovery time, tSR, before initiating a new ATD conversion sequence. Wait Mode Entering wait mode the ATD conversion either continues or aborts for low power depending on the logical value of the AWAIT bit. Freeze Mode In freeze mode the ATD10B8C will behave according to the logical values of the FRZ1 and FRZ0 bits. This is useful for debugging and emulation.
8.1.3
Block Diagram
MODE AND TIMING CONTROL RESULTS ATD 0 ATD 1 ATD 2 ATD 3 ATD 4 ATD 5 ATD 6 ATD 7
VRH VRL VDDA VSSA AN7 / PAD7 AN6 / PAD6 AN5 / PAD5 AN4 / PAD4 AN3 / PAD3 AN2 / PAD2 AN1 / PAD1 AN0 / PAD0 ANALOG MUX
+
SAMPLE & HOLD 1 1
COMPARATOR
224
Freescale Semiconductor
8.2
Signal Description
8.2.1
This pin serves as the analog input channel 7. It can be congured to provide an external trigger for the ATD conversion. It can be congured as general-purpose digital I/O.
8.2.2
AN6 / PAD6
This pin serves as the analog input channel 6. It can be congured as general-purpose digital I/O.
8.2.3
AN5 / PAD5
This pin serves as the analog input channel 5. It can be congured as general-purpose digital I/O.
8.2.4
AN4 / PAD4
This pin serves as the analog input channel 4. It can be congured as general-purpose digital I/O.
8.2.5
AN3 / PAD3
This pin serves as the analog input channel 3. It can be congured as general-purpose digital I/O.
8.2.6
AN2 / PAD2
This pin serves as the analog input channel 2. It can be congured as general-purpose digital I/O.
8.2.7
AN1 / PAD1
This pin serves as the analog input channel 1. It can be congured as general-purpose digital I/O.
8.2.8
AN0 / PAD0
This pin serves as the analog input channel 0. It can be congured as general-purpose digital I/O.
8.2.9
VRH, VRL
VRH is the high reference voltage and VRL is the low reference voltage for ATD conversion.
8.2.10
VDDA, VSSA
These pins are the power supplies for the analog circuitry of the ATD10B8C block.
Freescale Semiconductor
225
8.3
This section provides a detailed description of all registers accessible in the ATD10B8C.
8.3.1
Address 0x0000 0x0001 0x0002 0x0003 0x0004 0x0005 0x0006 0x0007 0x0008 0x0009 0x000A 0x000B 0x000C 0x000D 0x000E 0x000F
226
Freescale Semiconductor
Address
Name
6 BIT 8 BIT 6 BIT 0 u BIT 8 BIT 6 BIT 0 u BIT 8 BIT 6 BIT 0 u BIT 8 BIT 6 BIT 0 u BIT 8 BIT 6 BIT 0 u BIT 8 BIT 6 BIT 0 u BIT 8 BIT 6 BIT 0 u
5 BIT 7 BIT 5 0 0 BIT 7 BIT 5 0 0 BIT 7 BIT 5 0 0 BIT 7 BIT 5 0 0 BIT 7 BIT 5 0 0 BIT 7 BIT 5 0 0 BIT 7 BIT 5 0 0
4 BIT 6 BIT 4 0 0 BIT 6 BIT 4 0 0 BIT 6 BIT 4 0 0 BIT 6 BIT 4 0 0 BIT 6 BIT 4 0 0 BIT 6 BIT 4 0 0 BIT 6 BIT 4 0 0
3 BIT 5 BIT 3 0 0 BIT 5 BIT 3 0 0 BIT 5 BIT 3 0 0 BIT 5 BIT 3 0 0 BIT 5 BIT 3 0 0 BIT 5 BIT 3 0 0 BIT 5 BIT 3 0 0
2 BIT 4 BIT 2 0 0 BIT 4 BIT 2 0 0 BIT 4 BIT 2 0 0 BIT 4 BIT 2 0 0 BIT 4 BIT 2 0 0 BIT 4 BIT 2 0 0 BIT 4 BIT 2 0 0
1 BIT 3 BIT 1 0 0 BIT 3 BIT 1 0 0 BIT 3 BIT 1 0 0 BIT 3 BIT 1 0 0 BIT 3 BIT 1 0 0 BIT 3 BIT 1 0 0 BIT 3 BIT 1 0 0
Bit 0 BIT 2 BIT 0 0 0 BIT 2 BIT 0 0 0 BIT 2 BIT 0 0 0 BIT 2 BIT 0 0 0 BIT 2 BIT 0 0 0 BIT 2 BIT 0 0 0 BIT 2 BIT 0 0 0
0x0011
ATDDR0L W
0x0012
ATDDR1H
0x0013
ATDDR1L W
0x0014
ATDDR2H
0x0015
ATDDR2L W
0x0016
ATDDR3H
0x0017
ATDDR3L W
0x0018
ATDDR4H
0x0019
ATDDR4L W
0x001A
ATDDR5H
0x001B
ATDDR5L W
0x001C
ATDDR6H
0x001D
ATDDR6L W
= Unimplemented or Reserved
Freescale Semiconductor
227
Address 0x001E
Name ATDDR7H
5 BIT 7 BIT 5 0 0
4 BIT 6 BIT 4 0 0
3 BIT 5 BIT 3 0 0
2 BIT 4 BIT 2 0 0
1 BIT 3 BIT 1 0 0
0x001F
ATDDR7L W
Right Justied Result Data R 0x0010 ATDDR0H W R 0x0011 ATDDR0L W R 0x0012 ATDDR1H W R 0x0013 ATDDR1L W R 0x0014 ATDDR2H W R 0x0015 ATDDR2L W R 0x0016 ATDDR3H W R 0x0017 ATDDR3L W R 0x0018 ATDDR4H W R 0x0019 ATDDR4L W R 0x001A ATDDR5H W R 0x001B ATDDR5L W = Unimplemented or Reserved BIT 7 BIT 7 MSB BIT 6 BIT 6 BIT 5 BIT 5 BIT 4 BIT 4 BIT 3 BIT 3 BIT 2 BIT 2 BIT 1 BIT 1 BIT 0 BIT 0 0 0 0 0 0 0 0 0 0 0 0 0 BIT 9 MSB 0 BIT 8 0 BIT 7 BIT 7 MSB BIT 6 BIT 6 BIT 5 BIT 5 BIT 4 BIT 4 BIT 3 BIT 3 BIT 2 BIT 2 BIT 1 BIT 1 BIT 0 BIT 0 0 0 0 0 0 0 0 0 0 0 0 0 BIT 9 MSB 0 BIT 8 0 BIT 7 BIT 7 MSB BIT 6 BIT 6 BIT 5 BIT 5 BIT 4 BIT 4 BIT 3 BIT 3 BIT 2 BIT 2 BIT 1 BIT 1 BIT 0 BIT 0 0 0 0 0 0 0 0 0 0 0 0 0 BIT 9 MSB 0 BIT 8 0 BIT 7 BIT 7 MSB BIT 6 BIT 6 BIT 5 BIT 5 BIT 4 BIT 4 BIT 3 BIT 3 BIT 2 BIT 2 BIT 1 BIT 1 BIT 0 BIT 0 0 0 0 0 0 0 0 0 0 0 0 0 BIT 9 MSB 0 BIT 8 0 BIT 7 BIT 7 MSB BIT 6 BIT 6 BIT 5 BIT 5 BIT 4 BIT 4 BIT 3 BIT 3 BIT 2 BIT 2 BIT 1 BIT 1 BIT 0 BIT 0 0 0 0 0 0 0 0 0 0 0 0 0 BIT 9 MSB 0 BIT 8 0 BIT 7 BIT 7 MSB BIT 6 BIT 6 BIT 5 BIT 5 BIT 4 BIT 4 BIT 3 BIT 3 BIT 2 BIT 2 BIT 1 BIT 1 BIT 0 BIT 0 0 0 0 0 0 0 0 0 0 0 0 0 BIT 9 MSB 0 BIT 8 0
228
Freescale Semiconductor
Address 0x001C
Name R ATDDR6H W R
0x001D
ATDDR6L W R
0x001E
ATDDR7H W R
0x001F
ATDDR7L W
= Unimplemented or Reserved
NOTE Register Address = Module Base Address + Address Offset, where the Module Base Address is dened at the MCU level and the Address Offset is dened at the module level.
Freescale Semiconductor
229
8.3.2
Register Descriptions
This section describes in address order all the ATD10B8C registers and their individual bits.
8.3.2.1
R W Reset
= Unimplemented or Reserved
Read: Always read $00 in normal modes Write: Unimplemented in normal modes
8.3.2.2
R W Reset
= Unimplemented or Reserved
Read: Always read $00 in normal modes Write: Unimplemented in normal modes NOTE Writing to this registers when in special modes can alter functionality.
230
Freescale Semiconductor
8.3.2.3
This register controls power down, interrupt, and external trigger. Writes to this register will abort current conversion sequence but will not start a new sequence.
Module Base + 0x0002
7 6 5 4 3 2 1 0
ASCIF
= Unimplemented or Reserved
6 AFFC
5 AWAI
Freescale Semiconductor
231
8.3.2.4
This register controls the conversion sequence length, FIFO for results registers and behavior in Freeze Mode. Writes to this register will abort current conversion sequence but will not start a new sequence.
Module Base + 0x0003
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
232
Freescale Semiconductor
Freescale Semiconductor
233
8.3.2.5
This register selects the conversion clock frequency, the length of the second phase of the sample time and the resolution of the A/D conversion (i.e.: 8-bits or 10-bits). Writes to this register will abort current conversion sequence but will not start a new sequence.
Module Base + 0x0004
7 6 5 4 3 2 1 0
65 SMP[1:0]
40 PRS[4:0}
234
Freescale Semiconductor
1 MHz 4 MHz Divide by 2 00000 2 MHz 8 MHz Divide by 4 00001 3 MHz 12 MHz Divide by 6 00010 4 MHz 16 MHz Divide by 8 00011 5 MHz 20 MHz Divide by 10 00100 6 MHz 24 MHz Divide by 12 00101 7 MHz 28 MHz Divide by 14 00110 8 MHz 32 MHz Divide by 16 00111 9 MHz 36 MHz Divide by 18 01000 10 MHz 40 MHz Divide by 20 01001 11 MHz 44 MHz Divide by 22 01010 12 MHz 48 MHz Divide by 24 01011 13 MHz 52 MHz Divide by 26 01100 14 MHz 56 MHz Divide by 28 01101 15 MHz 60 MHz Divide by 30 01110 16 MHz 64 MHz Divide by 32 01111 17 MHz 68 MHz Divide by 34 10000 18 MHz 72 MHz Divide by 36 10001 19 MHz 76 MHz Divide by 38 10010 20 MHz 80 MHz Divide by 40 10011 21 MHz 84 MHz Divide by 42 10100 22 MHz 88 MHz Divide by 44 10101 23 MHz 92 MHz Divide by 46 10110 24 MHz 96 MHz Divide by 48 10111 25 MHz 100 MHz Divide by 50 11000 26 MHz 104 MHz Divide by 52 11001 27 MHz 108 MHz Divide by 54 11010 28 MHz 112 MHz Divide by 56 11011 29 MHz 116 MHz Divide by 58 11100 30 MHz 120 MHz Divide by 60 11101 31 MHz 124 MHz Divide by 62 11110 32 MHz 128 MHz Divide by 64 11111 1. Maximum ATD conversion clock frequency is 2 MHz. The maximum allowed bus clock frequency is shown in this column. 2. Minimum ATD conversion clock frequency is 500 kHz. The minimum allowed bus clock frequency is shown in this column.
Freescale Semiconductor
235
8.3.2.6
This register selects the type of conversion sequence and the analog input channels sampled. Writes to this register will abort current conversion sequence and start a new conversion sequence.
Module Base + 0x0005
7 6 5 4 3 2 1 0
0 CC 0 0 CB 0 CA 0
= Unimplemented or Reserved
6 DSGN
236
Freescale Semiconductor
Table 8-11. Left Justied, Signed, and Unsigned ATD Output Codes.
Input Signal VRL = 0 Volts VRH = 5.12 Volts 5.120 Volts 5.100 5.080 2.580 2.560 2.540 0.020 0.000 Signed 8-Bit Codes 7F 7F 7E 01 00 FF 81 80 Unsigned 8-Bit Codes FF FF FE 81 80 7F 01 00 Signed 10-Bit Codes 7FC0 7F00 7E00 0100 0000 FF00 8100 8000 Unsigned 10-Bit Codes FFC0 FF00 FE00 8100 8000 7F00 0100 0000
Freescale Semiconductor
237
8.3.2.7
This read-only register contains the sequence complete ag, overrun ags for external trigger and FIFO mode, and the conversion counter.
Module Base + 0x0006
7 6 5 4 3 2 1 0
R SCF W Reset 0
0 ETORF 0 0 FIFOR 0
CC2
CC1
CC0
= Unimplemented or Reserved
5 ETORF
238
Freescale Semiconductor
20 CC[2:0]
8.3.2.8
R W Reset
= Unimplemented or Reserved
Read: Anytime, returns unpredictable values Write: Anytime in special modes, unimplemented in normal modes NOTE Writing to this registers when in special modes can alter functionality.
Freescale Semiconductor
239
8.3.2.9
This register contains the SC bit used to enable special channel conversions.
Module Base + 0x0009
7 6 5 4 3 2 1 0
R W Reset
U SC
= Unimplemented or Reserved
Read: Anytime, returns unpredictable values for Bit 7 and Bit 6 Write: Anytime
Table 8-14. ATDTEST1 Field Descriptions
Field 0 SC Description Special Channel Conversion Bit If this bit is set, then special channel conversion can be selected using CC, CB, and CA of ATDCTL5. Table 8-15 lists the coding. 0 Special channel conversions disabled 1 Special channel conversions enabled Note: Always write remaining bits of ATDTEST1 (Bit7 to Bit1) zero when writing SC bit. Not doing so might result in unpredictable ATD behavior.
240
Freescale Semiconductor
8.3.2.10
R W Reset
CCF7
CCF6
CCF5
CCF4
CCF3
CCF2
CCF1
CCF0
= Unimplemented or Reserved
Freescale Semiconductor
241
8.3.2.11
242
Freescale Semiconductor
8.3.2.12
The data port associated with the ATD is general purpose I/O. The port pins are shared with the analog A/D inputs AN7AN0.
Module Base + 0x000F
7 6 5 4 3 2 1 0
PTAD7
PTAD6
PTAD5
PTAD4
PTAD3
PTAD2
PTAD1
PTAD0
1 AN7
1 AN6
1 AN5
1 AN4
1 AN3
1 AN2
1 AN1
1 AN0
= Unimplemented or Reserved
Read: Anytime Write: Anytime, no effect The A/D input channels may be used for general-purpose digital I/0.
Table 8-18. PORTAD Field Descriptions
Field 7 PTAD[7:0] Description A/D Channel x (ANx) Digital Input (x = 7, 6, 5, 4, 3, 2, 1, 0) If the digital input buffer on the ANx pin is enabled (IENx = 1) read returns the logic level on ANx pin (signal potentials not meeting VIL or VIH specications will have an indeterminate value)). If the digital input buffers are disabled (IENx = 0), read returns a 1. Reset sets all PORTAD bits to 1.
8.3.2.13
The A/D conversion results are stored in 8 read-only result registers ATDDRHx/ATDDRLx. The result data is formatted in the result registers based on two criteria. First there is left and right justication; this selection is made using the DJM control bit in ATDCTL5. Second there is signed and unsigned data; this selection is made using the DSGN control bit in ATDCTL5. Signed data is stored in 2s complement format and only exists in left justied format. Signed data selected for right justied format is ignored. Read: Anytime Write: Anytime, no effect in normal modes
Freescale Semiconductor
243
8.3.2.13.1
Module Base + 0x0010 = ATDDR0H, 0x0012 = ATDDR1H, 0x0014 = ATDDR2H, 0x0016 = ATDDR3H 0x0018 = ATDDR4H, 0x001A = ATDDR5H, 0x001C = ATDDR6H, 0x001E = ATDDR7H
7 6 5 4 3 2 1 0
BIT 8 BIT 6 0
BIT 7 BIT 5 0
BIT 6 BIT 4 0
BIT 5 BIT 3 0
BIT 4 BIT 2 0
BIT 3 BIT 1 0
BIT 2 BIT 0 0
Figure 8-15. Left Justied, ATD Conversion Result Register, High Byte (ATDDRxH)
Module Base + 0x0011 = ATDDR0L, 0x0013 = ATDDR1L, 0x0015 = ATDDR2L, 0x0017 = ATDDR3L 0x0019 = ATDDR4L, 0x001B = ATDDR5L, 0x001D = ATDDR6L, 0x001F = ATDDR7L
7 6 5 4 3 2 1 0
R W Reset
BIT 1 U 0
BIT 0 U 0
0 0 0
0 0 0
0 0 0
0 0 0
0 0 0
0 0 0
Figure 8-16. Left Justied, ATD Conversion Result Register, Low Byte (ATDDRxL)
8.3.2.13.2
Module Base + 0x0010 = ATDDR0H, 0x0012 = ATDDR1H, 0x0014 = ATDDR2H, 0x0016 = ATDDR3H 0x0018 = ATDDR4H, 0x001A = ATDDR5H, 0x001C = ATDDR6H, 0x001E = ATDDR7H
7 6 5 4 3 2 1 0
R W Reset
0 0 0
0 0 0
0 0 0
0 0 0
0 0 0
0 0 0
BIT 9 MSB 0 0
BIT 8 0 0
Figure 8-17. Right Justied, ATD Conversion Result Register, High Byte (ATDDRxH)
Module Base + 0x0011 = ATDDR0L, 0x0013 = ATDDR1L, 0x0015 = ATDDR2L, 0x0017 = ATDDR3L 0x0019 = ATDDR4L, 0x001B = ATDDR5L, 0x001D = ATDDR6L, 0x001F = ATDDR7L
7 6 5 4 3 2 1 0
BIT 6 BIT 6 0
BIT 5 BIT 5 0
BIT 4 BIT 4 0
BIT 3 BIT 3 0
BIT 2 BIT 2 0
BIT 1 BIT 1 0
BIT 0 BIT 0 0
Figure 8-18. Right Justied, ATD Conversion Result Register, Low Byte (ATDDRxL)
244
Freescale Semiconductor
8.4
Functional Description
8.4.1
Analog Sub-block
The analog sub-block contains all analog electronics required to perform a single conversion. Separate power supplies VDDA and VSSA allow to isolate noise of other MCU circuitry from the analog sub-block.
8.4.1.1
The sample and hold (S/H) machine accepts analog signals from the external surroundings and stores them as capacitor charge on a storage node. The sample process uses a two stage approach. During the rst stage, the sample amplier is used to quickly charge the storage node.The second stage connects the input directly to the storage node to complete the sample for high accuracy. When not sampling, the sample and hold machine disables its own clocks. The analog electronics still draw their quiescent current. The power down (ADPU) bit must be set to disable both the digital clocks and the analog power consumption. The input analog signals are unipolar and must fall within the potential range of VSSA to VDDA.
8.4.1.2
The analog input multiplexer connects one of the 8 external analog input channels to the sample and hold machine.
8.4.1.3
The sample amplier is used to buffer the input analog signal so that the storage node can be quickly charged to the sample potential.
8.4.1.4
The A/D machine performs analog-to-digital conversions. The resolution is program selectable at either 8 or 10 bits. The A/D machine uses a successive approximation architecture. It functions by comparing the stored analog sample potential with a series of digitally generated analog potentials. By following a binary search algorithm, the A/D machine locates the approximating potential that is nearest to the sampled potential. When not converting the A/D machine disables its own clocks. The analog electronics still draws quiescent current. The power down (ADPU) bit must be set to disable both the digital clocks and the analog power consumption. Only analog input signals within the potential range of VRL to VRH (A/D reference potentials) will result in a non-railed digital output codes.
Freescale Semiconductor
245
8.4.2
Digital Sub-block
This subsection explains some of the digital features in more detail. See 7 for all details.
8.4.2.1
The external trigger feature allows the user to synchronize ATD conversions to the external environment events rather than relying on software to signal the ATD module when ATD conversions are to take place. The input signal (ATD channel 7) is programmable to be edge or level sensitive with polarity control. Table 8-19 gives a brief description of the different combinations of control bits and their affect on the external trigger function
.
During a conversion, if additional active edges are detected the overrun error ag ETORF is set. In either level or edge triggered modes, the rst conversion begins when the trigger is received. In both cases, the maximum latency time is one Bus Clock cycle plus any skew or delay introduced by the trigger circuitry. NOTE The conversion results for the external trigger ATD channel 7 have no meaning while external trigger mode is enabled. Once ETRIGE is enabled, conversions cannot be started by a write to ATDCTL5, but rather must be triggered externally. If the level mode is active and the external trigger both de-asserts and re-asserts itself during a conversion sequence, this does not constitute an overrun; therefore, the ag is not set. If the trigger is left asserted in level mode while a sequence is completing, another sequence will be triggered immediately.
246
Freescale Semiconductor
8.4.2.2
The channel pins can be multiplexed between analog and digital data. As analog inputs, they are multiplexed and sampled to supply signals to the A/D converter. Alternatively they can be congured as digital I/O signals with the port I/O data being held in PORTAD. The analog/digital multiplex operation is performed in the pads. The pad is always connected to the analog inputs of the ATD10B8C. The pad signal is buffered to the digital port registers. This buffer can be turned on or off with the ATDDIEN register. This is important so that the buffer does not draw excess current when analog potentials are presented at its input.
8.4.2.3
Low-Power Modes
The ATD10B8C can be congured for lower MCU power consumption in three different ways: 1. Stop Mode: This halts A/D conversion. Exit from Stop mode will resume A/D conversion, But due to the recovery time the result of this conversion should be ignored. 2. Wait Mode with AWAI = 1: This halts A/D conversion. Exit from Wait mode will resume A/D conversion, but due to the recovery time the result of this conversion should be ignored. 3. Writing ADPU = 0 (Note that all ATD registers remain accessible.): This aborts any A/D conversion in progress. NOTE The reset value for the ADPU bit is zero. Therefore, when this module is reset, it is reset into the power down state.
8.5
8.5.1
Initialization/Application Information
Setting up and starting an A/D conversion
The following describes a typical setup procedure for starting A/D conversions. It is highly recommended to follow this procedure to avoid common mistakes. Each step of the procedure will have a general remark and a typical example
8.5.1.1
Step 1
Power up the ATD and concurrently dene other settings in ATDCTL2 Example: Write to ATDCTL2: ADPU=1 -> powers up the ATD, ASCIE=1 enable interrupt on nish of a conversion sequence.
8.5.1.2
Step 2
Wait for the ATD Recovery Time tREC before you proceed with Step 3. Example: Use the CPU in a branch loop to wait for a dened number of bus clocks.
Freescale Semiconductor
247
8.5.1.3
Step 3
Congure how many conversions you want to perform in one sequence and dene other settings in ATDCTL3. Example: Write S4C=1 to do 4 conversions per sequence.
8.5.1.4
Step 4
Congure resolution, sampling time and ATD clock speed in ATDCTL4. Example: Use default for resolution and sampling time by leaving SRES8, SMP1 and SMP0 clear. For a bus clock of 40MHz write 9 to PR4-0, this gives an ATD clock of 0.5*40MHz/(9+1) = 2MHz which is within the allowed range for fATDCLK.
8.5.1.5
Step 5
Congure starting channel, single/multiple channel, continuous or single sequence and result data format in ATDCTL5. Writing ATDCTL5 will start the conversion, so make sure your write ATDCTL5 in the last step. Example: Leave CC,CB,CA clear to start on channel AN0. Write MULT=1 to convert channel AN0 to AN3 in a sequence (4 conversion per sequence selected in ATDCTL3).
8.5.2
8.5.2.1
Disable the ATD Interrupt by writing ASCIE=0 in ATDCTL2. This will also abort any ongoing conversion sequence. It is important to clear the interrupt enable at this point, prior to step 3, as depending on the device clock gating it may not always be possible to clear it or the SCF ag once the module is disabled (ADPU=0).
8.5.2.2
Step 2
Clear the SCF ag by writing a 1 in ATDSTAT0. (Remaining ags will be cleared with the next start of a conversions, but SCF ag should be cleared to avoid SCF interrupt.)
8.5.2.3
Step 3
8.6
Resets
At reset the ATD10B8C is in a power down state. The reset state of each individual bit is listed within Section 8.3.2, Register Descriptions which details the registers and their bit-eld.
248
Freescale Semiconductor
8.7
Interrupts
The interrupt requested by the ATD10B8C is listed in Table 8-20. Refer to MCU specication for related vector address and priority.
Table 8-20. ATD10B8C Interrupt Vectors
Interrupt Source Sequence complete interrupt CCR Mask I bit Local Enable ASCIE in ATDCTL2
Freescale Semiconductor
249
250
Freescale Semiconductor
9.1.1
Features
The main features of this block are: Phase-locked loop (PLL) frequency multiplier Reference divider Automatic bandwidth control mode for low-jitter operation Automatic frequency lock detector CPU interrupt on entry or exit from locked condition Self-clock mode in absence of reference clock System clock generator Clock quality check Clock switch for either oscillator- or PLL-based system clocks User selectable disabling of clocks during wait mode for reduced power consumption Computer operating properly (COP) watchdog timer with time-out clear window System reset generation from the following possible sources: Power-on reset Low voltage reset Refer to the device overview section for availability of this feature. COP reset Loss of clock reset External pin reset Real-time interrupt (RTI)
Freescale Semiconductor
251
9.1.2
Modes of Operation
This subsection lists and briey describes all operating modes supported by the CRG. Run mode All functional parts of the CRG are running during normal run mode. If RTI or COP functionality is required the individual bits of the associated rate select registers (COPCTL, RTICTL) have to be set to a nonzero value. Wait mode This mode allows to disable the system and core clocks depending on the conguration of the individual bits in the CLKSEL register. Stop mode Depending on the setting of the PSTP bit, stop mode can be differentiated between full stop mode (PSTP = 0) and pseudo-stop mode (PSTP = 1). Full stop mode The oscillator is disabled and thus all system and core clocks are stopped. The COP and the RTI remain frozen. Pseudo-stop mode The oscillator continues to run and most of the system and core clocks are stopped. If the respective enable bits are set the COP and RTI will continue to run, else they remain frozen. Self-clock mode Self-clock mode will be entered if the clock monitor enable bit (CME) and the self-clock mode enable bit (SCME) are both asserted and the clock monitor in the oscillator block detects a loss of clock. As soon as self-clock mode is entered the CRGV4 starts to perform a clock quality check. Self-clock mode remains active until the clock quality check indicates that the required quality of the incoming clock signal is met (frequency and amplitude). Self-clock mode should be used for safety purposes only. It provides reduced functionality to the MCU in case a loss of clock is causing severe system conditions.
9.1.3
Block Diagram
252
Freescale Semiconductor
Voltage Regulator
CRG
RESET
COP Timeout
Clock Monitor
CM fail
System Reset
OSCCLK
Oscillator
Registers
XFC VDDPLL VSSPLL PLLCLK
PLL
Refer to the device overview section for availability of the low-voltage reset feature.
9.2
This section lists and describes the signals that connect off chip.
9.2.1
These pins provides operating voltage (VDDPLL) and ground (VSSPLL) for the PLL circuitry. This allows the supply voltage to the PLL to be independently bypassed. Even if PLL usage is not required VDDPLL and VSSPLL must be connected properly.
9.2.2
A passive external loop lter must be placed on the XFC pin. The lter is a second-order, low-pass lter to eliminate the VCO input ripple. The value of the external lter network and the reference frequency determines the speed of the corrections and the stability of the PLL. Refer to the device overview chapter for calculation of PLL loop lter (XFC) components. If PLL usage is not required the XFC pin must be tied to VDDPLL.
Freescale Semiconductor
253
VDDPLL
CS MCU RS
CP
XFC
9.2.3
RESET is an active low bidirectional reset pin. As an input it initializes the MCU asynchronously to a known start-up state. As an open-drain output it indicates that an system reset (internal to MCU) has been triggered.
9.3
This section provides a detailed description of all registers accessible in the CRGV4.
9.3.1
0x000B CRG COP Arm/Timer Reset (ARMCOP) 1. CTFLG is intended for factory test purposes only. 2. FORBYP is intended for factory test purposes only. 3. CTCTL is intended for factory test purposes only.
254
Freescale Semiconductor
NOTE Register address = base address + address offset, where the base address is dened at the MCU level and the address offset is dened at the module level.
9.3.2
Register Descriptions
This section describes in address order all the CRGV4 registers and their individual bits.
Register Name 0x0000 SYNR 0x0001 REFDV 0x0002 CTFLG 0x0003 CRGFLG 0x0004 CRGINT 0x0005 CLKSEL 0x0006 PLLCTL 0x0007 RTICTL 0x0008 COPCTL 0x0009 FORBYP 0x000A CTCTL R W R W R W R W R W R W R W R W R W R W R W = Unimplemented or Reserved 0 0 0 0 0 0 0 0 WCOP 0 RTIF PORF 0 LVRF 0 LOCKIF LOCK TRACK SCMIF SCM 0 0 0 0 0 0
Bit 7 0
6 0
5 SYN5 0
4 SYN4 0
3 SYN3
2 SYN2
1 SYN1
Bit 0 SYN0
REFDV3 0
REFDV2 0
REFDV1 0
REFDV0 0
RTIE
LOCKIE
SCMIE
PLLSEL
PSTP
SYSWAI
ROAWAI
PLLWAI 0
CWAI
RTIWAI
COPWAI
CME 0
PLLON
AUTO
ACQ
PRE
PCE
SCME
RTR6
RTR5 0
RTR4 0
RTR3 0
RTR2
RTR1
RTR0
RSBCK 0
CR2 0
CR1 0
CR0 0
Freescale Semiconductor
255
Bit 7 0 Bit 7
6 0 Bit 6
5 0 Bit 5
4 0 Bit 4
3 0 Bit 3
2 0 Bit 2
1 0 Bit 1
Bit 0 0 Bit 0
= Unimplemented or Reserved
9.3.2.1
The SYNR register controls the multiplication factor of the PLL. If the PLL is on, the count in the loop divider (SYNR) register effectively multiplies up the PLL clock (PLLCLK) from the reference frequency by 2 x (SYNR+1). PLLCLK will not be below the minimum VCO frequency (fSCM).
( SYNR + 1 ) PLLCLK = 2xOSCCLKx --------------------------------( REFDV + 1 )
NOTE If PLL is selected (PLLSEL=1), Bus Clock = PLLCLK / 2 Bus Clock must not exceed the maximum operating system frequency.
Module Base + 0x0000
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
Read: anytime Write: anytime except if PLLSEL = 1 NOTE Write to this register initializes the lock detector bit and the track detector bit.
256
Freescale Semiconductor
9.3.2.2
The REFDV register provides a ner granularity for the PLL multiplier steps. The count in the reference divider divides OSCCLK frequency by REFDV + 1.
Module Base + 0x0001
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
Read: anytime Write: anytime except when PLLSEL = 1 NOTE Write to this register initializes the lock detector bit and the track detector bit.
9.3.2.3
This register is reserved for factory testing of the CRGV4 module and is not available in normal modes.
Module Base + 0x0002
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
Read: always reads 0x0000 in normal modes Write: unimplemented in normal modes NOTE Writing to this register when in special mode can alter the CRGV4 functionality.
Freescale Semiconductor
257
9.3.2.4
LOCK
TRACK SCMIF
SCM
1. PORF is set to 1 when a power-on reset occurs. Unaffected by system reset. 2. LVRF is set to 1 when a low-voltage reset occurs. Unaffected by system reset. = Unimplemented or Reserved
Read: anytime Write: refer to each bit for individual write conditions
Table 9-2. CRGFLG Field Descriptions
Field 7 RTIF Description Real-Time Interrupt Flag RTIF is set to 1 at the end of the RTI period. This ag can only be cleared by writing a 1. Writing a 0 has no effect. If enabled (RTIE = 1), RTIF causes an interrupt request. 0 RTI time-out has not yet occurred. 1 RTI time-out has occurred. Power-on Reset Flag PORF is set to 1 when a power-on reset occurs. This ag can only be cleared by writing a 1. Writing a 0 has no effect. 0 Power-on reset has not occurred. 1 Power-on reset has occurred. Low-Voltage Reset Flag If low voltage reset feature is not available (see the device overview chapter), LVRF always reads 0. LVRF is set to 1 when a low voltage reset occurs. This ag can only be cleared by writing a 1. Writing a 0 has no effect. 0 Low voltage reset has not occurred. 1 Low voltage reset has occurred. PLL Lock Interrupt Flag LOCKIF is set to 1 when LOCK status bit changes. This ag can only be cleared by writing a 1. Writing a 0 has no effect.If enabled (LOCKIE = 1), LOCKIF causes an interrupt request. 0 No change in LOCK bit. 1 LOCK bit has changed. Lock Status Bit LOCK reects the current state of PLL lock condition. This bit is cleared in self-clock mode. Writes have no effect. 0 PLL VCO is not within the desired tolerance of the target frequency. 1 PLL VCO is within the desired tolerance of the target frequency. Track Status Bit TRACK reects the current state of PLL track condition. This bit is cleared in self-clock mode. Writes have no effect. 0 Acquisition mode status. 1 Tracking mode status.
6 PORF
5 LVRF
4 LOCKIF
3 LOCK
2 TRACK
258
Freescale Semiconductor
0 SCM
9.3.2.5
R RTIE W Reset 0
0 LOCKIE
0 SCMIE
= Unimplemented or Reserved
Freescale Semiconductor
259
9.3.2.6
This register controls CRG clock selection. Refer to Figure 9-17 for details on the effect of each bit.
Module Base + 0x0005
7 6 5 4 3 2 1 0
Read: anytime Write: refer to each bit for individual write conditions
Table 9-4. CLKSEL Field Descriptions
Field 7 PLLSEL Description PLL Select Bit Write anytime. Writing a 1 when LOCK = 0 and AUTO = 1, or TRACK = 0 and AUTO = 0 has no effect. This prevents the selection of an unstable PLLCLK as SYSCLK. PLLSEL bit is cleared when the MCU enters self-clock mode, stop mode or wait mode with PLLWAI bit set. 0 System clocks are derived from OSCCLK (Bus Clock = OSCCLK / 2). 1 System clocks are derived from PLLCLK (Bus Clock = PLLCLK / 2). Pseudo-Stop Bit Write: anytime This bit controls the functionality of the oscillator during stop mode. 0 Oscillator is disabled in stop mode. 1 Oscillator continues to run in stop mode (pseudo-stop). The oscillator amplitude is reduced. Refer to oscillator block description for availability of a reduced oscillator amplitude. Note: Pseudo-stop allows for faster stop recovery and reduces the mechanical stress and aging of the resonator in case of frequent stop conditions at the expense of a slightly increased power consumption. Note: Lower oscillator amplitude exhibits lower power consumption but could have adverse effects during any electro-magnetic susceptibility (EMS) tests. System Clocks Stop in Wait Mode Bit Write: anytime 0 In wait mode, the system clocks continue to run. 1 In wait mode, the system clocks stop. Note: RTI and COP are not affected by SYSWAI bit. Reduced Oscillator Amplitude in Wait Mode Bit Write: anytime Refer to oscillator block description chapter for availability of a reduced oscillator amplitude. If no such feature exists in the oscillator block then setting this bit to 1 will not have any effect on power consumption. 0 Normal oscillator amplitude in wait mode. 1 Reduced oscillator amplitude in wait mode. Note: Lower oscillator amplitude exhibits lower power consumption but could have adverse effects during any electro-magnetic susceptibility (EMS) tests. PLL Stops in Wait Mode Bit Write: anytime If PLLWAI is set, the CRGV4 will clear the PLLSEL bit before entering wait mode. The PLLON bit remains set during wait mode but the PLL is powered down. Upon exiting wait mode, the PLLSEL bit has to be set manually if PLL clock is required. While the PLLWAI bit is set the AUTO bit is set to 1 in order to allow the PLL to automatically lock on the selected target frequency after exiting wait mode. 0 PLL keeps running in wait mode. 1 PLL stops in wait mode.
6 PSTP
5 SYSWAI
4 ROAWAI
3 PLLWAI
260
Freescale Semiconductor
9.3.2.7
= Unimplemented or Reserved
Read: anytime Write: refer to each bit for individual write conditions
Table 9-5. PLLCTL Field Descriptions
Field 7 CME Description Clock Monitor Enable Bit CME enables the clock monitor. Write anytime except when SCM = 1. 0 Clock monitor is disabled. 1 Clock monitor is enabled. Slow or stopped clocks will cause a clock monitor reset sequence or self-clock mode. Note: Operating with CME = 0 will not detect any loss of clock. In case of poor clock quality this could cause unpredictable operation of the MCU. Note: In Stop Mode (PSTP = 0) the clock monitor is disabled independently of the CME bit setting and any loss of clock will not be detected. Phase Lock Loop On Bit PLLON turns on the PLL circuitry. In self-clock mode, the PLL is turned on, but the PLLON bit reads the last latched value. Write anytime except when PLLSEL = 1. 0 PLL is turned off. 1 PLL is turned on. If AUTO bit is set, the PLL will lock automatically.
6 PLLON
Freescale Semiconductor
261
4 ACQ 2 PRE
1 PCE
0 SCME
9.3.2.8
This register selects the timeout period for the real-time interrupt.
Module Base + 0x0007
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
Read: anytime Write: anytime NOTE A write to this register initializes the RTI counter.
262
Freescale Semiconductor
0000 (1) 0001 (2) 0010 (3) 0011 (4) 0100 (5) 0101 (6) 0110 (7) 0111 (8) 1000 (9) 1001 (10) 1010 (11) 1011 (12) 1100 ( 13) 1101 (14) 1110 (15) 1111 ( 16)
* Denotes the default value out of reset.This value should be used to disable the RTI to ensure future backwards compatibility.
Freescale Semiconductor
263
9.3.2.9
= Unimplemented or Reserved
Read: anytime
Write: WCOP, CR2, CR1, CR0: once in user mode, anytime in special mode Write: RSBCK: once
Table 9-8. COPCTL Field Descriptions
Field 7 WCOP Description Window COP Mode Bit When set, a write to the ARMCOP register must occur in the last 25% of the selected period. A write during the rst 75% of the selected period will reset the part. As long as all writes occur during this window, 0x0055 can be written as often as desired. As soon as 0x00AA is written after the 0x0055, the timeout logic restarts and the user must wait until the next window before writing to ARMCOP. Table 9-9 shows the exact duration of this window for the seven available COP rates. 0 Normal COP operation 1 Window COP operation COP and RTI Stop in Active BDM Mode Bit 0 Allows the COP and RTI to keep running in active BDM mode. 1 Stops the COP and RTI counters whenever the part is in active BDM mode. COP Watchdog Timer Rate Select These bits select the COP time-out rate (see Table 9-9). The COP timeout period is OSCCLK period divided by CR[2:0] value. Writing a nonzero value to CR[2:0] enables the COP counter and starts the time-out period. A COP counter time-out causes a system reset. This can be avoided by periodically (before time-out) reinitializing the COP counter via the ARMCOP register.
0 0 0 COP disabled 0 0 1 214 0 1 0 216 0 1 1 218 1 0 0 220 1 0 1 222 1 1 0 223 1 1 1 224 1. OSCCLK cycles are referenced from the previous COP time-out reset (writing 0x0055/0x00AA to the ARMCOP register)
264
Freescale Semiconductor
9.3.2.10
R W Reset
= Unimplemented or Reserved
Read: always read 0x0000 except in special modes Write: only in special modes
9.3.2.11
R W Reset
= Unimplemented or Reserved
Read: always read 0x0080 except in special modes Write: only in special modes
Freescale Semiconductor
265
9.3.2.12
R W Reset
0 Bit 7 0
0 Bit 6 0
0 Bit 5 0
0 Bit 4 0
0 Bit 3 0
0 Bit 2 0
0 Bit 1 0
0 Bit 0 0
Read: always reads 0x0000 Write: anytime When the COP is disabled (CR[2:0] = 000) writing to this register has no effect. When the COP is enabled by setting CR[2:0] nonzero, the following applies: Writing any value other than 0x0055 or 0x00AA causes a COP reset. To restart the COP time-out period you must write 0x0055 followed by a write of 0x00AA. Other instructions may be executed between these writes but the sequence (0x0055, 0x00AA) must be completed prior to COP end of time-out period to avoid a COP reset. Sequences of 0x0055 writes or sequences of 0x00AA writes are allowed. When the WCOP bit is set, 0x0055 and 0x00AA writes must be done in the last 25% of the selected time-out period; writing any value in the rst 75% of the selected period will cause a COP reset.
9.4
Functional Description
This section gives detailed informations on the internal operation of the design.
9.4.1
The PLL is used to run the MCU from a different time base than the incoming OSCCLK. For increased exibility, OSCCLK can be divided in a range of 1 to 16 to generate the reference frequency. This offers a ner multiplication granularity. The PLL can multiply this reference clock by a multiple of 2, 4, 6,... 126,128 based on the SYNR register.
[ SYNR + 1 ] PLLCLK = 2 OSCCLK --------------------------------[ REFDV + 1 ]
CAUTION Although it is possible to set the two dividers to command a very high clock frequency, do not exceed the specied bus frequency limit for the MCU. If (PLLSEL = 1), Bus Clock = PLLCLK / 2
266
Freescale Semiconductor
The PLL is a frequency generator that operates in either acquisition mode or tracking mode, depending on the difference between the output frequency and the target frequency. The PLL can change between acquisition and tracking modes either automatically or manually. The VCO has a minimum operating frequency, which corresponds to the self-clock mode frequency fSCM.
REFERENCE EXTAL REDUCED CONSUMPTION OSCILLATOR XTAL OSCCLK REFDV <3:0> FEEDBACK LOCK DETECTOR LOCK
CRYSTAL MONITOR
supplied by:
VDDPLL/VSSPLL VDD/VSS
9.4.1.1
PLL Operation
The oscillator output clock signal (OSCCLK) is fed through the reference programmable divider and is divided in a range of 1 to 16 (REFDV+1) to output the reference clock. The VCO output clock, (PLLCLK) is fed back through the programmable loop divider and is divided in a range of 2 to 128 in increments of [2 x (SYNR +1)] to output the feedback clock. See Figure 9-16. The phase detector then compares the feedback clock, with the reference clock. Correction pulses are generated based on the phase difference between the two signals. The loop lter then slightly alters the DC voltage on the external lter capacitor connected to XFC pin, based on the width and direction of the correction pulse. The lter can make fast or slow corrections depending on its mode, as described in the next subsection. The values of the external lter network and the reference frequency determine the speed of the corrections and the stability of the PLL.
9.4.1.2
The lock detector compares the frequencies of the feedback clock, and the reference clock. Therefore, the speed of the lock detector is directly proportional to the nal reference frequency. The circuit determines the mode of the PLL and the lock condition based on this comparison.
Freescale Semiconductor
267
The PLL lter can be manually or automatically congured into one of two possible operating modes: Acquisition mode In acquisition mode, the lter can make large frequency corrections to the VCO. This mode is used at PLL start-up or when the PLL has suffered a severe noise hit and the VCO frequency is far off the desired frequency. When in acquisition mode, the TRACK status bit is cleared in the CRGFLG register. Tracking mode In tracking mode, the lter makes only small corrections to the frequency of the VCO. PLL jitter is much lower in tracking mode, but the response to noise is also slower. The PLL enters tracking mode when the VCO frequency is nearly correct and the TRACK bit is set in the CRGFLG register. The PLL can change the bandwidth or operational mode of the loop lter manually or automatically. In automatic bandwidth control mode (AUTO = 1), the lock detector automatically switches between acquisition and tracking modes. Automatic bandwidth control mode also is used to determine when the PLL clock (PLLCLK) is safe to use as the source for the system and core clocks. If PLL LOCK interrupt requests are enabled, the software can wait for an interrupt request and then check the LOCK bit. If CPU interrupts are disabled, software can poll the LOCK bit continuously (during PLL start-up, usually) or at periodic intervals. In either case, only when the LOCK bit is set, is the PLLCLK clock safe to use as the source for the system and core clocks. If the PLL is selected as the source for the system and core clocks and the LOCK bit is clear, the PLL has suffered a severe noise hit and the software must take appropriate action, depending on the application. The following conditions apply when the PLL is in automatic bandwidth control mode (AUTO = 1): The TRACK bit is a read-only indicator of the mode of the lter. The TRACK bit is set when the VCO frequency is within a certain tolerance, trk, and is clear when the VCO frequency is out of a certain tolerance, unt. The LOCK bit is a read-only indicator of the locked state of the PLL. The LOCK bit is set when the VCO frequency is within a certain tolerance, Lock, and is cleared when the VCO frequency is out of a certain tolerance, unl. CPU interrupts can occur if enabled (LOCKIE = 1) when the lock condition changes, toggling the LOCK bit. The PLL can also operate in manual mode (AUTO = 0). Manual mode is used by systems that do not require an indicator of the lock condition for proper operation. Such systems typically operate well below the maximum system frequency (fsys) and require fast start-up. The following conditions apply when in manual mode: ACQ is a writable control bit that controls the mode of the lter. Before turning on the PLL in manual mode, the ACQ bit should be asserted to congure the lter in acquisition mode. After turning on the PLL by setting the PLLON bit software must wait a given time (tacq) before entering tracking mode (ACQ = 0). After entering tracking mode software must wait a given time (tal) before selecting the PLLCLK as the source for system and core clocks (PLLSEL = 1).
268
Freescale Semiconductor
9.4.2
SYSCLK Core Clock WAIT(SYSWAI), STOP SCM WAIT(RTIWAI), STOP(PSTP,PRE), RTI enable 2 CLOCK PHASE GENERATOR Bus Clock
RTI
0
XTAL
WAIT(COPWAI), STOP(PSTP,PCE), COP enable Clock Monitor WAIT(SYSWAI), STOP Oscillator Clock COP
STOP(PSTP) Gating Condition = Clock Gate Oscillator Clock (running during Pseudo-Stop Mode
The clock generator creates the clocks used in the MCU (see Figure 9-17). The gating condition placed on top of the individual clock gates indicates the dependencies of different modes (stop, wait) and the setting of the respective conguration bits. The peripheral modules use the bus clock. Some peripheral modules also use the oscillator clock. The memory blocks use the bus clock. If the MCU enters self-clock mode (see Section 9.4.7.2, Self-Clock Mode), oscillator clock source is switched to PLLCLK running at its minimum frequency fSCM. The bus clock is used to generate the clock visible at the ECLK pin. The core clock signal is the clock for the CPU. The core clock is twice the bus clock as shown in Figure 9-18. But note that a CPU cycle corresponds to one bus clock. PLL clock mode is selected with PLLSEL bit in the CLKSEL register. When selected, the PLL output clock drives SYSCLK for the main system including the CPU and peripherals. The PLL cannot be turned off by clearing the PLLON bit, if the PLL clock is selected. When PLLSEL is changed, it takes a maximum
Freescale Semiconductor
269
of 4 OSCCLK plus 4 PLLCLK cycles to make the transition. During the transition, all clocks freeze and CPU activity ceases.
CORE CLOCK:
9.4.3
If no OSCCLK edges are detected within a certain time, the clock monitor within the oscillator block generates a clock monitor fail event. The CRGV4 then asserts self-clock mode or generates a system reset depending on the state of SCME bit. If the clock monitor is disabled or the presence of clocks is detected no failure is indicated by the oscillator block.The clock monitor function is enabled/disabled by the CME control bit.
9.4.4
The clock monitor performs a coarse check on the incoming clock signal. The clock quality checker provides a more accurate check in addition to the clock monitor. A clock quality check is triggered by any of the following events: Power-on reset (POR) Low voltage reset (LVR) Wake-up from full stop mode (exit full stop) Clock monitor fail indication (CM fail) A time window of 50000 VCO clock cycles1 is called check window. A number greater equal than 4096 rising OSCCLK edges within a check window is called osc ok. Note that osc ok immediately terminates the current check window. See Figure 9-19 as an example. check window 1 2 3 49999 50000
1 2 3 4 5
270
Freescale Semiconductor
check window
no
num<50 ?
yes
Switch to OSCCLK
Exit SCM
NOTE Remember that in parallel to additional actions caused by self-clock mode or clock monitor reset1 handling the clock quality checker continues to check the OSCCLK signal. NOTE The clock quality checker enables the PLL and the voltage regulator (VREG) anytime a clock check has to be performed. An ongoing clock quality check could also cause a running PLL (fSCM) and an active VREG during pseudo-stop mode or wait mode
1. A Clock Monitor Reset will always set the SCME bit to logical1
Freescale Semiconductor
271
9.4.5
16384 4
4 4 4 2 2 Figure 9-21. Clock Chain for COP
0:1:0
0:1:1
1:0:0
1:0:1
1:1:0
gating condition
= Clock Gate
1:1:1
COP TIMEOUT
The COP (free running watchdog timer) enables the user to check that a program is running and sequencing properly. The COP is disabled out of reset. When the COP is being used, software is responsible for keeping the COP from timing out. If the COP times out it is an indication that the software is no longer being executed in the intended sequence; thus a system reset is initiated (see Section 9.5.2, Computer Operating Properly Watchdog (COP) Reset). The COP runs with a gated OSCCLK (see Section Figure 9-21., Clock Chain for COP). Three control bits in the COPCTL register allow selection of seven COP time-out periods. When COP is enabled, the program must write 0x0055 and 0x00AA (in this order) to the ARMCOP register during the selected time-out period. As soon as this is done, the COP time-out period is restarted. If the program fails to do this and the COP times out, the part will reset. Also, if any value other than 0x0055 or 0x00AA is written, the part is immediately reset. Windowed COP operation is enabled by setting WCOP in the COPCTL register. In this mode, writes to the ARMCOP register to clear the COP timer must occur in the last 25% of the selected time-out period. A premature write will immediately reset the part. If PCE bit is set, the COP will continue to run in pseudo-stop mode.
9.4.6
The RTI can be used to generate a hardware interrupt at a xed periodic rate. If enabled (by setting RTIE=1), this interrupt will occur at the rate selected by the RTICTL register. The RTI runs with a gated OSCCLK (see Section Figure 9-22., Clock Chain for RTI). At the end of the RTI time-out period the RTIF ag is set to 1 and a new RTI time-out period starts immediately. A write to the RTICTL register restarts the RTI time-out period.
272
Freescale Semiconductor
If the PRE bit is set, the RTI will continue to run in pseudo-stop mode.
.
WAIT(RTIWAI), STOP(PSTP,PRE), RTI enable OSCCLK
1024
RTR[6:4] 0:0:0
0:0:1
2 2 2 2 2
gating condition
= Clock Gate
0:1:0
0:1:1
1:0:0
1:0:1
1:1:0
RTI TIMEOUT
9.4.7
9.4.7.1
Modes of Operation
Normal Mode
The CRGV4 block behaves as described within this specication in all normal modes.
9.4.7.2
Self-Clock Mode
The VCO has a minimum operating frequency, fSCM. If the external clock frequency is not available due to a failure or due to long crystal start-up time, the bus clock and the core clock are derived from the VCO running at minimum operating frequency; this mode of operation is called self-clock mode. This requires CME = 1 and SCME = 1. If the MCU was clocked by the PLL clock prior to entering self-clock mode, the PLLSEL bit will be cleared. If the external clock signal has stabilized again, the CRG will automatically select OSCCLK to be the system clock and return to normal mode. See Section 9.4.4, Clock Quality Checker for more information on entering and leaving self-clock mode.
Freescale Semiconductor
273
NOTE In order to detect a potential clock loss, the CME bit should be always enabled (CME=1). If CME bit is disabled and the MCU is congured to run on PLL clock (PLLCLK), a loss of external clock (OSCCLK) will not be detected and will cause the system clock to drift towards the VCOs minimum frequency fSCM. As soon as the external clock is available again the system clock ramps up to its PLL target frequency. If the MCU is running on external clock any loss of clock will cause the system to go static.
9.4.8
The RTI can be stopped by setting the associated rate select bits to 0. The COP can be stopped by setting the associated rate select bits to 0.
9.4.9
The WAI instruction puts the MCU in a low power consumption stand-by mode depending on setting of the individual bits in the CLKSEL register. All individual wait mode conguration bits can be superposed. This provides enhanced granularity in reducing the level of power consumption during wait mode. Table 910 lists the individual conguration bits and the parts of the MCU that are affected in wait mode.
Table 9-10. MCU Conguration During Wait Mode
PLLWAI PLL Core System RTI COP stopped CWAI stopped SYSWAI stopped stopped RTIWAI stopped COPWAI stopped ROAWAI
reduced(1) Oscillator 1. Refer to oscillator block description for availability of a reduced oscillator amplitude.
After executing the WAI instruction the core requests the CRG to switch MCU into wait mode. The CRG then checks whether the PLLWAI, CWAI and SYSWAI bits are asserted (see Figure 9-23). Depending on the conguration the CRG switches the system and core clocks to OSCCLK by clearing the PLLSEL bit, disables the PLL, disables the core clocks and nally disables the remaining system clocks. As soon as all clocks are switched off wait mode is active.
274
Freescale Semiconductor
PLLWAI=1 ?
no
yes
Clear PLLSEL, Disable PLL CWAI or SYSWAI=1 ?
no
yes
Disable
core clocks
SYSWAI=1 ?
no no
Enter Wait Mode Wait Mode left due to external reset
Exit Wait w. ext.RESET
yes
Disable system clocks CME=1 ?
no
INT ?
yes
CM fail ?
yes no
yes
Exit Wait w. CMRESET
no
SCME=1 ?
yes no
Exit Wait Mode
yes
Exit Wait Mode SCM=1 ?
no
yes
Enter SCM
Enter SCM
Continue w. normal OP
Freescale Semiconductor
275
There are ve different scenarios for the CRG to restart the MCU from wait mode: External reset Clock monitor reset COP reset Self-clock mode interrupt Real-time interrupt (RTI) If the MCU gets an external reset during wait mode active, the CRG asynchronously restores all conguration bits in the register space to its default settings and starts the reset generator. After completing the reset sequence processing begins by fetching the normal reset vector. Wait mode is exited and the MCU is in run mode again. If the clock monitor is enabled (CME=1) the MCU is able to leave wait mode when loss of oscillator/external clock is detected by a clock monitor fail. If the SCME bit is not asserted the CRG generates a clock monitor fail reset (CMRESET). The CRGs behavior for CMRESET is the same compared to external reset, but another reset vector is fetched after completion of the reset sequence. If the SCME bit is asserted the CRG generates a SCM interrupt if enabled (SCMIE=1). After generating the interrupt the CRG enters self-clock mode and starts the clock quality checker (see Section 9.4.4, Clock Quality Checker). Then the MCU continues with normal operation.If the SCM interrupt is blocked by SCMIE = 0, the SCMIF ag will be asserted and clock quality checks will be performed but the MCU will not wake-up from wait mode. If any other interrupt source (e.g. RTI) triggers exit from wait mode the MCU immediately continues with normal operation. If the PLL has been powered-down during wait mode the PLLSEL bit is cleared and the MCU runs on OSCCLK after leaving wait mode. The software must manually set the PLLSEL bit again, in order to switch system and core clocks to the PLLCLK. If wait mode is entered from self-clock mode, the CRG will continue to check the clock quality until clock check is successful. The PLL and voltage regulator (VREG) will remain enabled. Table 9-11 summarizes the outcome of a clock loss while in wait mode.
276
Freescale Semiconductor
Freescale Semiconductor
277
9.4.10
All clocks are stopped in STOP mode, dependent of the setting of the PCE, PRE and PSTP bit. The oscillator is disabled in STOP mode unless the PSTP bit is set. All counters and dividers remain frozen but do not initialize. If the PRE or PCE bits are set, the RTI or COP continues to run in pseudo-stop mode. In addition to disabling system and core clocks the CRG requests other functional units of the MCU (e.g. voltage-regulator) to enter their individual power-saving modes (if available). This is the main difference between pseudo-stop mode and wait mode. After executing the STOP instruction the core requests the CRG to switch the MCU into stop mode. If the PLLSEL bit remains set when entering stop mode, the CRG will switch the system and core clocks to OSCCLK by clearing the PLLSEL bit. Then the CRG disables the PLL, disables the core clock and nally disables the remaining system clocks. As soon as all clocks are switched off, stop mode is active. If pseudo-stop mode (PSTP = 1) is entered from self-clock mode the CRG will continue to check the clock quality until clock check is successful. The PLL and the voltage regulator (VREG) will remain enabled. If full stop mode (PSTP = 0) is entered from self-clock mode an ongoing clock quality check will be stopped. A complete timeout window check will be started when stop mode is exited again. Wake-up from stop mode also depends on the setting of the PSTP bit.
278
Freescale Semiconductor
Chapter 9 Clocks and Reset Generator (CRGV4) Block Description Core reqs Stop Mode. Clear PLLSEL, Disable PLL
Exit Stop w. ext.RESET
no
INT ?
no
PSTP=1 ?
yes
CME=1 ?
no
INT ?
no
yes
yes
CM fail ?
yes no
no
Clock OK ?
no
SCME=1 ?
yes yes
Exit Stop w. CMRESET
yes
no
SCME=1 ?
yes
SCMIE=1 ? Generate SCM Interrupt (Wakeup from Stop)
no
yes
Exit Stop Mode SCM=1 ?
no
yes
Enter SCM
Enter SCM
Enter SCM
Continue w. normal OP
9.4.10.1
Wake-up from pseudo-stop is the same as wake-up from wait mode. There are also three different scenarios for the CRG to restart the MCU from pseudo-stop mode: External reset Clock monitor fail Wake-up interrupt
Freescale Semiconductor
279
If the MCU gets an external reset during pseudo-stop mode active, the CRG asynchronously restores all conguration bits in the register space to its default settings and starts the reset generator. After completing the reset sequence processing begins by fetching the normal reset vector. Pseudo-stop mode is exited and the MCU is in run mode again. If the clock monitor is enabled (CME = 1) the MCU is able to leave pseudo-stop mode when loss of oscillator/external clock is detected by a clock monitor fail. If the SCME bit is not asserted the CRG generates a clock monitor fail reset (CMRESET). The CRGs behavior for CMRESET is the same compared to external reset, but another reset vector is fetched after completion of the reset sequence. If the SCME bit is asserted the CRG generates a SCM interrupt if enabled (SCMIE=1). After generating the interrupt the CRG enters self-clock mode and starts the clock quality checker (see Section 9.4.4, Clock Quality Checker). Then the MCU continues with normal operation. If the SCM interrupt is blocked by SCMIE = 0, the SCMIF ag will be asserted but the CRG will not wake-up from pseudo-stop mode. If any other interrupt source (e.g. RTI) triggers exit from pseudo-stop mode the MCU immediately continues with normal operation. Because the PLL has been powered-down during stop mode the PLLSEL bit is cleared and the MCU runs on OSCCLK after leaving stop mode. The software must set the PLLSEL bit again, in order to switch system and core clocks to the PLLCLK. Table 9-12 summarizes the outcome of a clock loss while in pseudo-stop mode.
280
Freescale Semiconductor
Freescale Semiconductor
281
9.4.10.2
The MCU requires an external interrupt or an external reset in order to wake-up from stop mode. If the MCU gets an external reset during full stop mode active, the CRG asynchronously restores all conguration bits in the register space to its default settings and will perform a maximum of 50 clock check_windows (see Section 9.4.4, Clock Quality Checker). After completing the clock quality check the CRG starts the reset generator. After completing the reset sequence processing begins by fetching the normal reset vector. Full stop mode is exited and the MCU is in run mode again. If the MCU is woken-up by an interrupt, the CRG will also perform a maximum of 50 clock check_windows (see Section 9.4.4, Clock Quality Checker). If the clock quality check is successful, the CRG will release all system and core clocks and will continue with normal operation. If all clock checks within the timeout-window are failing, the CRG will switch to self-clock mode or generate a clock monitor reset (CMRESET) depending on the setting of the SCME bit. Because the PLL has been powered-down during stop mode the PLLSEL bit is cleared and the MCU runs on OSCCLK after leaving stop mode. The software must manually set the PLLSEL bit again, in order to switch system and core clocks to the PLLCLK. NOTE In full stop mode, the clock monitor is disabled and any loss of clock will not be detected.
9.5
Resets
This section describes how to reset the CRGV4 and how the CRGV4 itself controls the reset of the MCU. It explains all special reset requirements. Because the reset generator for the MCU is part of the CRG, this section also describes all automatic actions that occur during or as a result of individual reset conditions. The reset values of registers and signals are provided in Section 9.3, Memory Map and Register
282
Freescale Semiconductor
Denition. All reset sources are listed in Table 9-13. Refer to the device overview chapter for related vector addresses and priorities.
Table 9-13. Reset Summary
Reset Source Power-on Reset Low Voltage Reset External Reset Clock Monitor Reset COP Watchdog Reset Local Enable None None None PLLCTL (CME=1, SCME=0) COPCTL (CR[2:0] nonzero)
The reset sequence is initiated by any of the following events: Low level is detected at the RESET pin (external reset). Power on is detected. Low voltage is detected. COP watchdog times out. Clock monitor failure is detected and self-clock mode was disabled (SCME = 0).
Upon detection of any reset event, an internal circuit drives the RESET pin low for 128 SYSCLK cycles (see Figure 9-25). Because entry into reset is asynchronous it does not require a running SYSCLK. However, the internal reset circuit of the CRGV4 cannot sequence out of current reset condition without a running SYSCLK. The number of 128 SYSCLK cycles might be increased by n = 3 to 6 additional SYSCLK cycles depending on the internal synchronization latency. After 128+n SYSCLK cycles the RESET pin is released. The reset generator of the CRGV4 waits for additional 64 SYSCLK cycles and then samples the RESET pin to determine the originating source. Table 9-14 shows which vector will be fetched.
Table 9-14. Reset Vector Selection
Sampled RESET Pin (64 Cycles After Release) 1 1 1 0 Clock Monitor Reset Pending 0 1 0 X COP Reset Pending 0 X 1 X Vector Fetch POR / LVR / External Reset Clock Monitor Reset COP Reset POR / LVR / External Reset with rise of RESET pin
NOTE External circuitry connected to the RESET pin should not include a large capacitance that would interfere with the ability of this signal to rise to a valid logic 1 within 64 SYSCLK cycles after the low drive is released.
Freescale Semiconductor
283
The internal reset of the MCU remains asserted while the reset generator completes the 192 SYSCLK long reset sequence. The reset generator circuitry always makes sure the internal reset is deasserted synchronously after completion of the 192 SYSCLK cycles. In case the RESET pin is externally driven low for more than these 192 SYSCLK cycles (external reset), the internal reset remains asserted too.
RESET )( )(
RESET pin released
SYSCLK
) ( 128+n cycles
possibly SYSCLK not running with n being min 3 / max 6 cycles depending on internal synchronization delay
) ( 64 cycles
) (
9.5.1
The CRGV4 generates a clock monitor reset in case all of the following conditions are true:
The reset event asynchronously forces the conguration registers to their default settings (see Section 9.3, Memory Map and Register Denition). In detail the CME and the SCME are reset to logical 1 (which doesnt change the state of the CME bit, because it has already been set). As a consequence, the CRG immediately enters self-clock mode and starts its internal reset sequence. In parallel the clock quality check starts. As soon as clock quality check indicates a valid oscillator clock the CRG switches to OSCCLK and leaves self-clock mode. Because the clock quality checker is running in parallel to the reset generator, the CRG may leave self-clock mode while completing the internal reset sequence. When the reset sequence is nished the CRG checks the internally latched state of the clock monitor fail circuit. If a clock monitor fail is indicated processing begins by fetching the clock monitor reset vector.
9.5.2
When COP is enabled, the CRG expects sequential write of 0x0055 and 0x00AA (in this order) to the ARMCOP register during the selected time-out period. As soon as this is done, the COP time-out period restarts. If the program fails to do this the CRG will generate a reset. Also, if any value other than 0x0055 or 0x00AA is written, the CRG immediately generates a reset. In case windowed COP operation is enabled
284
Freescale Semiconductor
writes (0x0055 or 0x00AA) to the ARMCOP register must occur in the last 25% of the selected time-out period. A premature write the CRG will immediately generate a reset. As soon as the reset sequence is completed the reset generator checks the reset condition. If no clock monitor failure is indicated and the latched state of the COP timeout is true, processing begins by fetching the COP vector.
9.5.3
The on-chip voltage regulator detects when VDD to the MCU has reached a certain level and asserts poweron reset or low voltage reset or both. As soon as a power-on reset or low voltage reset is triggered the CRG performs a quality check on the incoming clock signal. As soon as clock quality check indicates a valid oscillator clock signal the reset sequence starts using the oscillator clock. If after 50 check windows the clock quality check indicated a non-valid oscillator clock the reset sequence starts using self-clock mode. Figure 9-26 and Figure 9-27 show the power-up sequence for cases when the RESET pin is tied to VDD and when the RESET pin is held low.
RESET
RESET
Freescale Semiconductor
285
9.6
Interrupts
The interrupts/reset vectors requested by the CRG are listed in Table 9-15. Refer to the device overview chapter for related vector addresses and priorities.
Table 9-15. CRG Interrupt Vectors
Interrupt Source Real-time interrupt LOCK interrupt SCM interrupt CCR Mask I bit I bit I bit Local Enable CRGINT (RTIE) CRGINT (LOCKIE) CRGINT (SCMIE)
9.6.1
Real-Time Interrupt
The CRGV4 generates a real-time interrupt when the selected interrupt time period elapses. RTI interrupts are locally disabled by setting the RTIE bit to 0. The real-time interrupt ag (RTIF) is set to 1 when a timeout occurs, and is cleared to 0 by writing a 1 to the RTIF bit. The RTI continues to run during pseudo-stop mode if the PRE bit is set to 1. This feature can be used for periodic wakeup from pseudo-stop if the RTI interrupt is enabled.
9.6.2
The CRGV4 generates a PLL lock interrupt when the LOCK condition of the PLL has changed, either from a locked state to an unlocked state or vice versa. Lock interrupts are locally disabled by setting the LOCKIE bit to 0. The PLL Lock interrupt ag (LOCKIF) is set to1 when the LOCK condition has changed, and is cleared to 0 by writing a 1 to the LOCKIF bit.
9.6.3
The CRGV4 generates a self-clock mode interrupt when the SCM condition of the system has changed, either entered or exited self-clock mode. SCM conditions can only change if the self-clock mode enable bit (SCME) is set to 1. SCM conditions are caused by a failing clock quality check after power-on reset (POR) or low voltage reset (LVR) or recovery from full stop mode (PSTP = 0) or clock monitor failure. For details on the clock quality check refer to Section 9.4.4, Clock Quality Checker. If the clock monitor is enabled (CME = 1) a loss of external clock will also cause a SCM condition (SCME = 1). SCM interrupts are locally disabled by setting the SCMIE bit to 0. The SCM interrupt ag (SCMIF) is set to 1 when the SCM condition has changed, and is cleared to 0 by writing a 1 to the SCMIF bit.
286
Freescale Semiconductor
10.1.1
Glossary
ACK: Acknowledge of CAN message CAN: Controller Area Network CRC: Cyclic Redundancy Code EOF: End of Frame FIFO: First-In-First-Out Memory IFS: Inter-Frame Sequence SOF: Start of Frame CPU bus: CPU related read/write data bus CAN bus: CAN protocol related serial bus oscillator clock: Direct clock from external oscillator bus clock: CPU bus realated clock CAN clock: CAN protocol related clock
Freescale Semiconductor
287
10.1.2
MUX
Presc.
Tq Clk
RXCAN TXCAN
Transmit Interrupt Req. Receive Interrupt Req. Errors Interrupt Req. Wake-Up Interrupt Req.
Conguration Registers
Wake-Up
10.1.3
Features
The basic features of the MSCAN are as follows: Implementation of the CAN protocol Version 2.0A/B Standard and extended data frames Zero to eight bytes data length Programmable bit rate up to 1 Mbps1 Support for remote frames Five receive buffers with FIFO storage scheme Three transmit buffers with internal prioritization using a local priority concept Flexible maskable identier lter supports two full-size (32-bit) extended identier lters, or four 16-bit lters, or eight 8-bit lters Programmable wakeup functionality with integrated low-pass lter Programmable loopback mode supports self-test operation Programmable listen-only mode for monitoring of CAN bus Separate signalling and interrupt capabilities for all CAN receiver and transmitter error states (warning, error passive, bus-off) Programmable MSCAN clock source either bus clock or oscillator clock Internal timer for time-stamping of received and transmitted messages Three low-power modes: sleep, power down, and MSCAN enable Global initialization of conguration registers
1. Depending on the actual bit timing and the clock jitter of the PLL.
288
Freescale Semiconductor
10.1.4
Modes of Operation
The following modes of operation are specic to the MSCAN. See Section 10.4, Functional Description, for details. Listen-Only Mode MSCAN Sleep Mode MSCAN Initialization Mode MSCAN Power Down Mode
10.2
10.2.1
10.2.2
TXCAN is the MSCAN transmitter output pin. The TXCAN output pin represents the logic level on the CAN bus: 0 = Dominant state 1 = Recessive state
10.2.3
CAN System
A typical CAN system with MSCAN is shown in Figure 10-2. Each CAN station is connected physically to the CAN bus lines through a transceiver device. The transceiver is capable of driving the large current needed for the CAN bus and has current protection against defective CAN or defective stations.
CAN node 1 MCU CAN Controller (MSCAN) CAN node 2 CAN node n
TXCAN
RXCAN
Freescale Semiconductor
289
10.3
This section provides a detailed description of all registers accessible in the MSCAN.
10.3.1
Figure 10-3 gives an overview on all registers and their individual bits in the MSCAN memory map. The register address results from the addition of base address and address offset. The base address is determined at the MCU level and can be found in the MCU memory map description. The address offset is dened at the module level. The MSCAN occupies 64 bytes in the memory space. The base address of the MSCAN module is determined at the MCU level when the MCU is dened. The register decode map is xed and begins at the rst address of the module address offset. The detailed register descriptions follow in the order they appear in the register map.
290
Freescale Semiconductor
Register Name 0x0000 CANCTL0 0x0001 CANCTL1 0x0002 CANBTR0 0x0003 CANBTR1 0x0004 CANRFLG 0x0005 CANRIER 0x0006 CANTFLG 0x0007 CANTIER 0x0008 CANTARQ 0x0009 CANTAAK 0x000A CANTBSEL 0x000B CANIDAC 0x000C0x000D Reserved 0x000E CANRXERR 0x000F CANTXERR R W R W R W R W R W R W R W R W R W R W R W R W R W R W R W
Bit 7
6 RXACT
4 SYNCH
Bit 0
RXFRM
CSWAI
TIME
WUPE
SLPRQ SLPAK
INITRQ INITAK
CANE
CLKSRC
LOOPB
LISTEN
WUPM
SJW1
SJW0
BRP5
BRP4
BRP3
BRP2
BRP1
BRP0
SAMP
TSEG22
TSEG21 RSTAT1
TSEG20 RSTAT0
TSEG13 TSTAT1
TSEG12 TSTAT0
TSEG11
TSEG10
WUPIF
CSCIF
OVRIF
RXF
WUPIE 0
CSCIE 0
RSTATE1 0
RSTATE0 0
TSTATE1 0
TSTATE0
OVRIE
RXFIE
TXE2
TXE1
TXE0
TXEIE2
TXEIE1
TXEIE0
ABTRQ2 ABTAK2
ABTRQ1 ABTAK1
ABTRQ0 ABTAK0
TX2 IDHIT2
TX1 IDHIT1
TX0 IDHIT0
IDAM1 0
IDAM0 0
RXERR7
RXERR6
RXERR5
RXERR4
RXERR3
RXERR2
RXERR1
RXERR0
TXERR7
TXERR6
TXERR5
TXERR4
TXERR3
TXERR2
TXERR1
TXERR0
= Unimplemented or Reserved
u = Unaffected
Freescale Semiconductor
291
Register Name 0x00100x0013 CANIDAR03 0x00140x0017 CANIDMRx 0x00180x001B CANIDAR47 0x001C0x001F CANIDMR47 0x00200x002F CANRXFG 0x00300x003F CANTXFG R W R W R W R W R W R W
Bit 7
Bit 0
AC7
AC6
AC5
AC4
AC3
AC2
AC1
AC0
AM7
AM6
AM5
AM4
AM3
AM2
AM1
AM0
AC7
AC6
AC5
AC4
AC3
AC2
AC1
AC0
AM7
AM6
AM5
AM4
AM3
AM2
AM1
AM0
See Section 10.3.3, Programmers Model of Message Storage = Unimplemented or Reserved u = Unaffected
10.3.2
Register Descriptions
This section describes in detail all the registers and register bits in the MSCAN module. Each description includes a standard register diagram with an associated gure number. Details of register bit and eld function follow the register diagrams, in bit order. All bits of all registers in this module are completely synchronous to internal clocks during a register read.
10.3.2.1
The CANCTL0 register provides various control bits of the MSCAN module as described below.
Module Base + 0x0000
7 6 5 4 3 2 1 0
R RXFRM W Reset: 0
292
Freescale Semiconductor
NOTE The CANCTL0 register, except WUPE, INITRQ, and SLPRQ, is held in the reset state when the initialization mode is active (INITRQ = 1 and INITAK = 1). This register is writable again as soon as the initialization mode is exited (INITRQ = 0 and INITAK = 0). Read: Anytime Write: Anytime when out of initialization mode; exceptions are read-only RXACT and SYNCH, RXFRM (which is set by the module only), and INITRQ (which is also writable in initialization mode).
Table 10-1. CANCTL0 Register Field Descriptions
Field 7 RXFRM(1) Description Received Frame Flag This bit is read and clear only. It is set when a receiver has received a valid message correctly, independently of the lter conguration. After it is set, it remains set until cleared by software or reset. Clearing is done by writing a 1. Writing a 0 is ignored. This bit is not valid in loopback mode. 0 No valid message was received since last clearing this ag 1 A valid message was received since last clearing of this ag Receiver Active Status This read-only ag indicates the MSCAN is receiving a message. The ag is controlled by the receiver front end. This bit is not valid in loopback mode. 0 MSCAN is transmitting or idle2 1 MSCAN is receiving a message (including when arbitration is lost)(2) CAN Stops in Wait Mode Enabling this bit allows for lower power consumption in wait mode by disabling all the clocks at the CPU bus interface to the MSCAN module. 0 The module is not affected during wait mode 1 The module ceases to be clocked during wait mode Synchronized Status This read-only ag indicates whether the MSCAN is synchronized to the CAN bus and able to participate in the communication process. It is set and cleared by the MSCAN. 0 MSCAN is not synchronized to the CAN bus 1 MSCAN is synchronized to the CAN bus Timer Enable This bit activates an internal 16-bit wide free running timer which is clocked by the bit clock rate. If the timer is enabled, a 16-bit time stamp will be assigned to each transmitted/received message within the active TX/RX buffer. Right after the EOF of a valid message on the CAN bus, the time stamp is written to the highest bytes (0x000E, 0x000F) in the appropriate buffer (see Section 10.3.3, Programmers Model of Message Storage). The internal timer is reset (all bits set to 0) when disabled. This bit is held low in initialization mode. 0 Disable internal MSCAN timer 1 Enable internal MSCAN timer Wake-Up Enable This conguration bit allows the MSCAN to restart from sleep mode when trafc on CAN is detected (see Section 10.4.5.4, MSCAN Sleep Mode). 0 Wake-up disabled The MSCAN ignores trafc on CAN 1 Wake-up enabled The MSCAN is able to restart
6 RXACT
5 CSWAI(3)
4 SYNCH
3 TIME
2 WUPE(4)
Freescale Semiconductor
293
0 Initialization Mode Request When this bit is set by the CPU, the MSCAN skips to initialization mode (see INITRQ(6),(7) Section 10.4.5.5, MSCAN Initialization Mode). Any ongoing transmission or reception is aborted and synchronization to the CAN bus is lost. The module indicates entry to initialization mode by setting INITAK = 1 (Section 10.3.2.2, MSCAN Control Register 1 (CANCTL1)). The following registers enter their hard reset state and restore their default values: CANCTL0(8), CANRFLG(9), CANRIER(10), CANTFLG, CANTIER, CANTARQ, CANTAAK, and CANTBSEL. The registers CANCTL1, CANBTR0, CANBTR1, CANIDAC, CANIDAR0-7, and CANIDMR0-7 can only be written by the CPU when the MSCAN is in initialization mode (INITRQ = 1 and INITAK = 1). The values of the error counters are not affected by initialization mode. When this bit is cleared by the CPU, the MSCAN restarts and then tries to synchronize to the CAN bus. If the MSCAN is not in bus-off state, it synchronizes after 11 consecutive recessive bits on the CAN bus; if the MSCAN is in bus-off state, it continues to wait for 128 occurrences of 11 consecutive recessive bits. Writing to other bits in CANCTL0, CANRFLG, CANRIER, CANTFLG, or CANTIER must be done only after initialization mode is exited, which is INITRQ = 0 and INITAK = 0. 0 Normal operation 1 MSCAN in initialization mode 1. The MSCAN must be in normal mode for this bit to become set. 2. See the Bosch CAN 2.0A/B specication for a detailed denition of transmitter and receiver states. 3. In order to protect from accidentally violating the CAN protocol, the TXCAN pin is immediately forced to a recessive state when the CPU enters wait (CSWAI = 1) or stop mode (see Section 10.4.5.2, Operation in Wait Mode and Section 10.4.5.3, Operation in Stop Mode). 4. The CPU has to make sure that the WUPE register and the WUPIE wake-up interrupt enable register (see Section 10.3.2.6, MSCAN Receiver Interrupt Enable Register (CANRIER)) is enabled, if the recovery mechanism from stop or wait is required. 5. The CPU cannot clear SLPRQ before the MSCAN has entered sleep mode (SLPRQ = 1 and SLPAK = 1). 6. The CPU cannot clear INITRQ before the MSCAN has entered initialization mode (INITRQ = 1 and INITAK = 1). 7. In order to protect from accidentally violating the CAN protocol, the TXCAN pin is immediately forced to a recessive state when the initialization mode is requested by the CPU. Thus, the recommended procedure is to bring the MSCAN into sleep mode (SLPRQ = 1 and SLPAK = 1) before requesting initialization mode. 8. Not including WUPE, INITRQ, and SLPRQ. 9. TSTAT1 and TSTAT0 are not affected by initialization mode. 10. RSTAT1 and RSTAT0 are not affected by initialization mode.
10.3.2.2
The CANCTL1 register provides various control bits and handshake status information of the MSCAN module as described below.
294
Freescale Semiconductor
SLPAK
INITAK
= Unimplemented
Read: Anytime Write: Anytime when INITRQ = 1 and INITAK = 1, except CANE which is write once in normal and anytime in special system operation modes when the MSCAN is in initialization mode (INITRQ = 1 and INITAK = 1).
Table 10-2. CANCTL1 Register Field Descriptions
Field 7 CANE 6 CLKSRC MSCAN Enable 0 MSCAN module is disabled 1 MSCAN module is enabled MSCAN Clock Source This bit denes the clock source for the MSCAN module (only for systems with a clock generation module; Section 10.4.3.2, Clock System, and Section Figure 10-42., MSCAN Clocking Scheme,). 0 MSCAN clock source is the oscillator clock 1 MSCAN clock source is the bus clock Loopback Self Test Mode When this bit is set, the MSCAN performs an internal loopback which can be used for self test operation. The bit stream output of the transmitter is fed back to the receiver internally. The RXCAN input pin is ignored and the TXCAN output goes to the recessive state (logic 1). The MSCAN behaves as it does normally when transmitting and treats its own transmitted message as a message received from a remote node. In this state, the MSCAN ignores the bit sent during the ACK slot in the CAN frame acknowledge eld to ensure proper reception of its own message. Both transmit and receive interrupts are generated. 0 Loopback self test disabled 1 Loopback self test enabled Listen Only Mode This bit congures the MSCAN as a CAN bus monitor. When LISTEN is set, all valid CAN messages with matching ID are received, but no acknowledgement or error frames are sent out (see Section 10.4.4.4, Listen-Only Mode). In addition, the error counters are frozen. Listen only mode supports applications which require hot plugging or throughput analysis. The MSCAN is unable to transmit any messages when listen only mode is active. 0 Normal operation 1 Listen only mode activated Wake-Up Mode If WUPE in CANCTL0 is enabled, this bit denes whether the integrated low-pass lter is applied to protect the MSCAN from spurious wake-up (see Section 10.4.5.4, MSCAN Sleep Mode). 0 MSCAN wakes up on any dominant level on the CAN bus 1 MSCAN wakes up only in case of a dominant pulse on the CAN bus that has a length of Twup Description
5 LOOPB
4 LISTEN
2 WUPM
Freescale Semiconductor
295
0 INITAK
296
Freescale Semiconductor
10.3.2.3
The CANBTR0 register congures various CAN bus timing parameters of the MSCAN module.
Module Base + 0x0002
7 6 5 4 3 2 1 0
Freescale Semiconductor
297
10.3.2.4
The CANBTR1 register congures various CAN bus timing parameters of the MSCAN module.
Module Base + 0x0003
7 6 5 4 3 2 1 0
6:4 Time Segment 2 Time segments within the bit time x the number of clock cycles per bit time and the location TSEG2[2:0] of the sample point (see Figure 10-43). Time segment 2 (TSEG2) values are programmable as shown in Table 10-7. 3:0 Time Segment 1 Time segments within the bit time x the number of clock cycles per bit time and the location TSEG1[3:0] of the sample point (see Figure 10-43). Time segment 1 (TSEG1) values are programmable as shown in Table 10-8. 1. In this case, PHASE_SEG1 must be at least 2 time quanta (Tq).
1 1 1 8 Tq clock cycles 1. This setting is not valid. Please refer to Table 10-34 for valid settings.
298
Freescale Semiconductor
1 1 1 1 16 Tq clock cycles 1. This setting is not valid. Please refer to Table 10-34 for valid settings.
The bit time is determined by the oscillator frequency, the baud rate prescaler, and the number of time quanta (Tq) clock cycles per bit (as shown in Table 10-7 and Table 10-8).
Eqn. 10-1
10.3.2.5
A ag can be cleared only by software (writing a 1 to the corresponding bit position) when the condition which caused the setting is no longer valid. Every ag has an associated interrupt enable bit in the CANRIER register.
Module Base + 0x0004
7 6 5 4 3 2 1 0
RSTAT1
RSTAT0
TSTAT1
= Unimplemented
NOTE The CANRFLG register is held in the reset state1 when the initialization mode is active (INITRQ = 1 and INITAK = 1). This register is writable again as soon as the initialization mode is exited (INITRQ = 0 and INITAK = 0). Read: Anytime Write: Anytime when out of initialization mode, except RSTAT[1:0] and TSTAT[1:0] ags which are readonly; write of 1 clears ag; write of 0 is ignored.
1. The RSTAT[1:0], TSTAT[1:0] bits are not affected by initialization mode.
Freescale Semiconductor
299
6 CSCIF
5:4 Receiver Status Bits The values of the error counters control the actual CAN bus status of the MSCAN. As RSTAT[1:0] soon as the status change interrupt ag (CSCIF) is set, these bits indicate the appropriate receiver related CAN bus status of the MSCAN. The coding for the bits RSTAT1, RSTAT0 is: 00 RxOK: 0 receive error counter 96 01 RxWRN: 96 < receive error counter 127 10 RxERR: 127 < receive error counter 11 Bus-off(1): transmit error counter > 255 3:2 Transmitter Status Bits The values of the error counters control the actual CAN bus status of the MSCAN. TSTAT[1:0] As soon as the status change interrupt ag (CSCIF) is set, these bits indicate the appropriate transmitter related CAN bus status of the MSCAN. The coding for the bits TSTAT1, TSTAT0 is: 00 TxOK: 0 transmit error counter 96 01 TxWRN: 96 < transmit error counter 127 10 TxERR: 127 < transmit error counter 255 11 Bus-Off: transmit error counter > 255 1 OVRIF Overrun Interrupt Flag This ag is set when a data overrun condition occurs. If not masked, an error interrupt is pending while this ag is set. 0 No data overrun condition 1 A data overrun detected
Receive Buffer Full Flag RXF is set by the MSCAN when a new message is shifted in the receiver FIFO. This ag indicates whether the shifted buffer is loaded with a correctly received message (matching identier, matching cyclic redundancy code (CRC) and no other errors detected). After the CPU has read that message from the RxFG buffer in the receiver FIFO, the RXF ag must be cleared to release the buffer. A set RXF ag prohibits the shifting of the next FIFO entry into the foreground buffer (RxFG). If not masked, a receive interrupt is pending while this ag is set. 0 No new message available within the RxFG 1 The receiver FIFO is not empty. A new message is available in the RxFG 1. Redundant Information for the most critical CAN bus status which is bus-off. This only occurs if the Tx error counter exceeds a number of 255 errors. Bus-off affects the receiver state. As soon as the transmitter leaves its bus-off state the receiver state skips to RxOK too. Refer also to TSTAT[1:0] coding in this register. 2. To ensure data integrity, do not read the receive buffer registers while the RXF ag is cleared. For MCUs with dual CPUs, reading the receive buffer registers while the RXF ag is cleared may result in a CPU fault condition.
0 RXF(2)
300
Freescale Semiconductor
10.3.2.6
This register contains the interrupt enable bits for the interrupt ags described in the CANRFLG register.
Module Base + 0x0005
7 6 5 4 3 2 1 0
NOTE The CANRIER register is held in the reset state when the initialization mode is active (INITRQ=1 and INITAK=1). This register is writable when not in initialization mode (INITRQ=0 and INITAK=0). The RSTATE[1:0], TSTATE[1:0] bits are not affected by initialization mode. Read: Anytime Write: Anytime when not in initialization mode
Table 10-10. CANRIER Register Field Descriptions
Field 7 WUPIE(1) 6 CSCIE Description Wake-Up Interrupt Enable 0 No interrupt request is generated from this event. 1 A wake-up event causes a Wake-Up interrupt request. CAN Status Change Interrupt Enable 0 No interrupt request is generated from this event. 1 A CAN Status Change event causes an error interrupt request.
5:4 Receiver Status Change Enable These RSTAT enable bits control the sensitivity level in which receiver state RSTATE[1:0] changes are causing CSCIF interrupts. Independent of the chosen sensitivity level the RSTAT ags continue to indicate the actual receiver state and are only updated if no CSCIF interrupt is pending. 00 Do not generate any CSCIF interrupt caused by receiver state changes. 01 Generate CSCIF interrupt only if the receiver enters or leaves bus-off state. Discard other receiver state changes for generating CSCIF interrupt. 10 Generate CSCIF interrupt only if the receiver enters or leaves RxErr or bus-off(2) state. Discard other receiver state changes for generating CSCIF interrupt. 11 Generate CSCIF interrupt on all state changes. 3:2 Transmitter Status Change Enable These TSTAT enable bits control the sensitivity level in which transmitter TSTATE[1:0] state changes are causing CSCIF interrupts. Independent of the chosen sensitivity level, the TSTAT ags continue to indicate the actual transmitter state and are only updated if no CSCIF interrupt is pending. 00 Do not generate any CSCIF interrupt caused by transmitter state changes. 01 Generate CSCIF interrupt only if the transmitter enters or leaves bus-off state. Discard other transmitter state changes for generating CSCIF interrupt. 10 Generate CSCIF interrupt only if the transmitter enters or leaves TxErr or bus-off state. Discard other transmitter state changes for generating CSCIF interrupt. 11 Generate CSCIF interrupt on all state changes.
Freescale Semiconductor
301
Receiver Full Interrupt Enable 0 No interrupt request is generated from this event. 1 A receive buffer full (successful message reception) event causes a receiver interrupt request. 1. WUPIE and WUPE (see Section 10.3.2.1, MSCAN Control Register 0 (CANCTL0)) must both be enabled if the recovery mechanism from stop or wait is required. 2. Bus-off state is dened by the CAN standard (see Bosch CAN 2.0A/B protocol specication: for only transmitters. Because the only possible state change for the transmitter from bus-off to TxOK also forces the receiver to skip its current state to RxOK, the coding of the RXSTAT[1:0] ags dene an additional bus-off state for the receiver (see Section 10.3.2.5, MSCAN Receiver Flag Register (CANRFLG)).
10.3.2.7
The transmit buffer empty ags each have an associated interrupt enable bit in the CANTIER register.
Module Base + 0x0006
7 6 5 4 3 2 1 0
R W Reset:
= Unimplemented
NOTE The CANTFLG register is held in the reset state when the initialization mode is active (INITRQ = 1 and INITAK = 1). This register is writable when not in initialization mode (INITRQ = 0 and INITAK = 0). Read: Anytime Write: Anytime for TXEx ags when not in initialization mode; write of 1 clears ag, write of 0 is ignored
302
Freescale Semiconductor
10.3.2.8
This register contains the interrupt enable bits for the transmit buffer empty interrupt ags.
Module Base + 0x0007
7 6 5 4 3 2 1 0
R W Reset:
= Unimplemented
NOTE The CANTIER register is held in the reset state when the initialization mode is active (INITRQ = 1 and INITAK = 1). This register is writable when not in initialization mode (INITRQ = 0 and INITAK = 0). Read: Anytime Write: Anytime when not in initialization mode
Table 10-12. CANTIER Register Field Descriptions
Field 2:0 TXEIE[2:0] Description Transmitter Empty Interrupt Enable 0 No interrupt request is generated from this event. 1 A transmitter empty (transmit buffer available for transmission) event causes a transmitter empty interrupt request.
Freescale Semiconductor
303
10.3.2.9
The CANTARQ register allows abort request of queued messages as described below.
Module Base + 0x0008
7 6 5 4 3 2 1 0
R W Reset:
= Unimplemented
NOTE The CANTARQ register is held in the reset state when the initialization mode is active (INITRQ = 1 and INITAK = 1). This register is writable when not in initialization mode (INITRQ = 0 and INITAK = 0). Read: Anytime Write: Anytime when not in initialization mode
Table 10-13. CANTARQ Register Field Descriptions
Field Description
2:0 Abort Request The CPU sets the ABTRQx bit to request that a scheduled message buffer (TXEx = 0) be ABTRQ[2:0] aborted. The MSCAN grants the request if the message has not already started transmission, or if the transmission is not successful (lost arbitration or error). When a message is aborted, the associated TXE (see Section 10.3.2.7, MSCAN Transmitter Flag Register (CANTFLG)) and abort acknowledge ags (ABTAK, see Section 10.3.2.10, MSCAN Transmitter Message Abort Acknowledge Register (CANTAAK)) are set and a transmit interrupt occurs if enabled. The CPU cannot reset ABTRQx. ABTRQx is reset whenever the associated TXE ag is set. 0 No abort request 1 Abort request pending
304
Freescale Semiconductor
R W Reset:
ABTAK2
ABTAK1
ABTAK0
= Unimplemented
NOTE The CANTAAK register is held in the reset state when the initialization mode is active (INITRQ = 1 and INITAK = 1). Read: Anytime Write: Unimplemented for ABTAKx ags
Table 10-14. CANTAAK Register Field Descriptions
Field Description
2:0 Abort Acknowledge This ag acknowledges that a message was aborted due to a pending abort request ABTAK[2:0] from the CPU. After a particular message buffer is agged empty, this ag can be used by the application software to identify whether the message was aborted successfully or was sent anyway. The ABTAKx ag is cleared whenever the corresponding TXE ag is cleared. 0 The message was not aborted. 1 The message was aborted.
Freescale Semiconductor
305
R W Reset:
= Unimplemented
NOTE The CANTBSEL register is held in the reset state when the initialization mode is active (INITRQ = 1 and INITAK=1). This register is writable when not in initialization mode (INITRQ = 0 and INITAK = 0). Read: Find the lowest ordered bit set to 1, all other bits will be read as 0 Write: Anytime when not in initialization mode
Table 10-15. CANTBSEL Register Field Descriptions
Field 2:0 TX[2:0] Description Transmit Buffer Select The lowest numbered bit places the respective transmit buffer in the CANTXFG register space (e.g., TX1 = 1 and TX0 = 1 selects transmit buffer TX0; TX1 = 1 and TX0 = 0 selects transmit buffer TX1). Read and write accesses to the selected transmit buffer will be blocked, if the corresponding TXEx bit is cleared and the buffer is scheduled for transmission (see Section 10.3.2.7, MSCAN Transmitter Flag Register (CANTFLG)). 0 The associated message buffer is deselected 1 The associated message buffer is selected, if lowest numbered bit
The following gives a short programming example of the usage of the CANTBSEL register: To get the next available transmit buffer, application software must read the CANTFLG register and write this value back into the CANTBSEL register. In this example Tx buffers TX1 and TX2 are available. The value read from CANTFLG is therefore 0b0000_0110. When writing this value back to CANTBSEL, the Tx buffer TX1 is selected in the CANTXFG because the lowest numbered bit set to 1 is at bit position 1. Reading back this value out of CANTBSEL results in 0b0000_0010, because only the lowest numbered bit position set to 1 is presented. This mechanism eases the application software the selection of the next available Tx buffer. LDD CANTFLG; value read is 0b0000_0110 STD CANTBSEL; value written is 0b0000_0110 LDD CANTBSEL; value read is 0b0000_0010 If all transmit message buffers are deselected, no accesses are allowed to the CANTXFG registers.
306
Freescale Semiconductor
R W Reset:
0 IDAM1 IDAM0 0
IDHIT2
IDHIT1
IDHIT0
= Unimplemented
Read: Anytime Write: Anytime in initialization mode (INITRQ = 1 and INITAK = 1), except bits IDHITx, which are readonly
Table 10-16. CANIDAC Register Field Descriptions
Field 5:4 IDAM[1:0] 2:0 IDHIT[2:0] Description Identier Acceptance Mode The CPU sets these ags to dene the identier acceptance lter organization (see Section 10.4.3, Identier Acceptance Filter). Table 10-17 summarizes the different settings. In lter closed mode, no message is accepted such that the foreground buffer is never reloaded. Identier Acceptance Hit Indicator The MSCAN sets these ags to indicate an identier acceptance hit (see Section 10.4.3, Identier Acceptance Filter). Table 10-18 summarizes the different settings.
Freescale Semiconductor
307
The IDHITx indicators are always related to the message in the foreground buffer (RxFG). When a message gets shifted into the foreground buffer of the receiver FIFO the indicators are updated as well.
R W Reset:
= Unimplemented
Read: Always read 0x0000 in normal system operation modes Write: Unimplemented in normal system operation modes NOTE Writing to this register when in special modes can alter the MSCAN functionality.
R W Reset:
RXERR7
RXERR6
RXERR5
RXERR4
RXERR3
RXERR2
RXERR1
RXERR0
= Unimplemented
Read: Only when in sleep mode (SLPRQ = 1 and SLPAK = 1) or initialization mode (INITRQ = 1 and INITAK = 1) Write: Unimplemented
308
Freescale Semiconductor
NOTE Reading this register when in any other mode other than sleep or initialization mode may return an incorrect value. For MCUs with dual CPUs, this may result in a CPU fault condition. Writing to this register when in special modes can alter the MSCAN functionality.
R W Reset:
TXERR7
TXERR6
TXERR5
TXERR4
TXERR3
TXERR2
TXERR1
TXERR0
= Unimplemented
Read: Only when in sleep mode (SLPRQ = 1 and SLPAK = 1) or initialization mode (INITRQ = 1 and INITAK = 1) Write: Unimplemented NOTE Reading this register when in any other mode other than sleep or initialization mode, may return an incorrect value. For MCUs with dual CPUs, this may result in a CPU fault condition. Writing to this register when in special modes can alter the MSCAN functionality.
Freescale Semiconductor
309
R W Reset
AC7 0
7
AC6 0
6
AC5 0
5
AC4 0
4
AC3 0
3
AC2 0
2
AC1 0
1
AC0 0
0
R W Reset
AC7 0
7
AC6 0
6
AC5 0
5
AC4 0
4
AC3 0
3
AC2 0
2
AC1 0
1
AC0 0
0
R W Reset
AC7 0
7
AC6 0
6
AC5 0
5
AC4 0
4
AC3 0
3
AC2 0
2
AC1 0
1
AC0 0
0
R W Reset
AC7 0
AC6 0
AC5 0
AC4 0
AC3 0
AC2 0
AC1 0
AC0 0
310
Freescale Semiconductor
Module Base + 0x0018 (CANIDAR4) 0x0019 (CANIDAR5) 0x001A (CANIDAR6) 0x001B (CANIDAR7)
7 6 5 4 3 2 1 0
R W Reset
AC7 0
7
AC6 0
6
AC5 0
5
AC4 0
4
AC3 0
3
AC2 0
2
AC1 0
1
AC0 0
0
R W Reset
AC7 0
7
AC6 0
6
AC5 0
5
AC4 0
4
AC3 0
3
AC2 0
2
AC1 0
1
AC0 0
0
R W Reset
AC7 0
7
AC6 0
6
AC5 0
5
AC4 0
4
AC3 0
3
AC2 0
2
AC1 0
1
AC0 0
0
R W Reset
AC7 0
AC6 0
AC5 0
AC4 0
AC3 0
AC2 0
AC1 0
AC0 0
Freescale Semiconductor
311
R W Reset
AM7 0
7
AM6 0
6
AM5 0
5
AM4 0
4
AM3 0
3
AM2 0
2
AM1 0
1
AM0 0
0
R W Reset
AM7 0
7
AM6 0
6
AM5 0
5
AM4 0
4
AM3 0
3
AM2 0
2
AM1 0
1
AM0 0
0
R W Reset
AM7 0
7
AM6 0
6
AM5 0
5
AM4 0
4
AM3 0
3
AM2 0
2
AM1 0
1
AM0 0
0
R W Reset
AM7 0
AM6 0
AM5 0
AM4 0
AM3 0
AM2 0
AM1 0
AM0 0
312
Freescale Semiconductor
Module Base + 0x001C (CANIDMR4) 0x001D (CANIDMR5) 0x001E (CANIDMR6) 0x001F (CANIDMR7)
7 6 5 4 3 2 1 0
R W Reset
AM7 0
7
AM6 0
6
AM5 0
5
AM4 0
4
AM3 0
3
AM2 0
2
AM1 0
1
AM0 0
0
R W Reset
AM7 0
7
AM6 0
6
AM5 0
5
AM4 0
4
AM3 0
3
AM2 0
2
AM1 0
1
AM0 0
0
R W Reset
AM7 0
7
AM6 0
6
AM5 0
5
AM4 0
4
AM3 0
3
AM2 0
2
AM1 0
1
AM0 0
0
R W Reset
AM7 0
AM6 0
AM5 0
AM4 0
AM3 0
AM2 0
AM1 0
AM0 0
Freescale Semiconductor
313
10.3.3
The following section details the organization of the receive and transmit message buffers and the associated control registers. To simplify the programmer interface, the receive and transmit message buffers have the same outline. Each message buffer allocates 16 bytes in the memory map containing a 13 byte data structure. An additional transmit buffer priority register (TBPR) is dened for the transmit buffers. Within the last two bytes of this memory map, the MSCAN stores a special 16-bit time stamp, which is sampled from an internal timer after successful transmission or reception of a message. This feature is only available for transmit and receiver buffers, if the TIME bit is set (see Section 10.3.2.1, MSCAN Control Register 0 (CANCTL0)). The time stamp register is written by the MSCAN. The CPU can only read these registers.
Table 10-23. Message Buffer Organization
Offset Address 0x00X0 0x00X1 0x00X2 0x00X3 0x00X4 0x00X5 0x00X6 0x00X7 0x00X8 0x00X9 0x00XA 0x00XB 0x00XC 0x00XD 0x00XE Identier Register 0 Identier Register 1 Identier Register 2 Identier Register 3 Data Segment Register 0 Data Segment Register 1 Data Segment Register 2 Data Segment Register 3 Data Segment Register 4 Data Segment Register 5 Data Segment Register 6 Data Segment Register 7 Data Length Register Transmit Buffer Priority Register(1) Time Stamp Register (High Byte)(2) Register Access
0x00XF Time Stamp Register (Low Byte)(3) 1. Not applicable for receive buffers 2. Read-only for CPU 3. Read-only for CPU
Figure 10-23 shows the common 13-byte data structure of receive and transmit buffers for extended identiers. The mapping of standard identiers into the IDR registers is shown in Figure 10-24. All bits of the receive and transmit buffers are x out of reset because of RAM-based implementation1. All reserved or unused bits of the receive and transmit buffers always read x.
1. Exception: The transmit priority registers are 0 out of reset.
314
Freescale Semiconductor
Register Name 0x00X0 IDR0 0x00X1 IDR1 0x00X2 IDR2 0x00X3 IDR3 0x00X4 DSR0 0x00X5 DSR1 0x00X6 DSR2 0x00X7 DSR3 0x00X8 DSR4 0x00X9 DSR5 0x00XA DSR6 0x00XB DSR7 0x00XC DLR R W R W R W R W R W R W R W R W R W R W R W R W R W
Bit 7 ID28
6 ID27
5 ID26
4 ID25
3 ID24
2 ID23
1 ID22
Bit0 ID21
ID20
ID19
ID18
SRR (=1)
IDE (=1)
ID17
ID16
ID15
ID14
ID13
ID12
ID11
ID10
ID9
ID8
ID7
ID6
ID5
ID4
ID3
ID2
ID1
ID0
RTR
DB7
DB6
DB5
DB4
DB3
DB2
DB1
DB0
DB7
DB6
DB5
DB4
DB3
DB2
DB1
DB0
DB7
DB6
DB5
DB4
DB3
DB2
DB1
DB0
DB7
DB6
DB5
DB4
DB3
DB2
DB1
DB0
DB7
DB6
DB5
DB4
DB3
DB2
DB1
DB0
DB7
DB6
DB5
DB4
DB3
DB2
DB1
DB0
DB7
DB6
DB5
DB4
DB3
DB2
DB1
DB0
DB7
DB6
DB5
DB4
DB3
DB2
DB1
DB0
DLC3
DLC2
DLC1
DLC0
Read: For transmit buffers, anytime when TXEx ag is set (see Section 10.3.2.7, MSCAN Transmitter Flag Register (CANTFLG)) and the corresponding transmit buffer is selected in CANTBSEL (see Section 10.3.2.11, MSCAN Transmit Buffer Selection Register (CANTBSEL)). For receive buffers, only when RXF ag is set (see Section 10.3.2.5, MSCAN Receiver Flag Register (CANRFLG)).
Freescale Semiconductor
315
Write: For transmit buffers, anytime when TXEx ag is set (see Section 10.3.2.7, MSCAN Transmitter Flag Register (CANTFLG)) and the corresponding transmit buffer is selected in CANTBSEL (see Section 10.3.2.11, MSCAN Transmit Buffer Selection Register (CANTBSEL)). Unimplemented for receive buffers. Reset: Undened (0x00XX) because of RAM-based implementation
Register Name IDR0 0x00X0 IDR1 0x00X1 IDR2 0x00X2 IDR3 0x00X3 R W R W R W R W Bit 7 ID10 6 ID9 5 ID8 4 ID7 3 ID6 2 ID5 1 ID4 Bit 0 ID3
ID2
ID1
ID0
RTR
IDE (=0)
10.3.3.1
The identier registers for an extended format identier consist of a total of 32 bits; ID[28:0], SRR, IDE, and RTR bits. The identier registers for a standard format identier consist of a total of 13 bits; ID[10:0], RTR, and IDE bits. 10.3.3.1.1 IDR0IDR3 for Extended Identier Mapping
Figure 10-25. Identier Register 0 (IDR0) Extended Identier Mapping Table 10-24. IDR0 Register Field Descriptions Extended
Field 7:0 ID[28:21] Description Extended Format Identier The identiers consist of 29 bits (ID[28:0]) for the extended format. ID28 is the most signicant bit and is transmitted rst on the CAN bus during the arbitration procedure. The priority of an identier is dened to be highest for the smallest binary number.
316
Freescale Semiconductor
R ID20 W Reset: x x x x x x x x ID19 ID18 SRR (=1) IDE (=1) ID17 ID16 ID15
Figure 10-26. Identier Register 1 (IDR1) Extended Identier Mapping Table 10-25. IDR1 Register Field Descriptions Extended
Field 7:5 ID[20:18] 4 SRR 3 IDE Description Extended Format Identier The identiers consist of 29 bits (ID[28:0]) for the extended format. ID28 is the most signicant bit and is transmitted rst on the CAN bus during the arbitration procedure. The priority of an identier is dened to be highest for the smallest binary number. Substitute Remote Request This xed recessive bit is used only in extended format. It must be set to 1 by the user for transmission buffers and is stored as received on the CAN bus for receive buffers. ID Extended This ag indicates whether the extended or standard identier format is applied in this buffer. In the case of a receive buffer, the ag is set as received and indicates to the CPU how to process the buffer identier registers. In the case of a transmit buffer, the ag indicates to the MSCAN what type of identier to send. 0 Standard format (11 bit) 1 Extended format (29 bit) Extended Format Identier The identiers consist of 29 bits (ID[28:0]) for the extended format. ID28 is the most signicant bit and is transmitted rst on the CAN bus during the arbitration procedure. The priority of an identier is dened to be highest for the smallest binary number.
2:0 ID[17:15]
Figure 10-27. Identier Register 2 (IDR2) Extended Identier Mapping Table 10-26. IDR2 Register Field Descriptions Extended
Field 7:0 ID[14:7] Description Extended Format Identier The identiers consist of 29 bits (ID[28:0]) for the extended format. ID28 is the most signicant bit and is transmitted rst on the CAN bus during the arbitration procedure. The priority of an identier is dened to be highest for the smallest binary number.
Freescale Semiconductor
317
Figure 10-28. Identier Register 3 (IDR3) Extended Identier Mapping Table 10-27. IDR3 Register Field Descriptions Extended
Field 7:1 ID[6:0] 0 RTR Description Extended Format Identier The identiers consist of 29 bits (ID[28:0]) for the extended format. ID28 is the most signicant bit and is transmitted rst on the CAN bus during the arbitration procedure. The priority of an identier is dened to be highest for the smallest binary number. Remote Transmission Request This ag reects the status of the remote transmission request bit in the CAN frame. In the case of a receive buffer, it indicates the status of the received frame and supports the transmission of an answering frame in software. In the case of a transmit buffer, this ag denes the setting of the RTR bit to be sent. 0 Data frame 1 Remote frame
10.3.3.1.2
Figure 10-29. Identier Register 0 Standard Mapping Table 10-28. IDR0 Register Field Descriptions Standard
Field 7:0 ID[10:3] Description Standard Format Identier The identiers consist of 11 bits (ID[10:0]) for the standard format. ID10 is the most signicant bit and is transmitted rst on the CAN bus during the arbitration procedure. The priority of an identier is dened to be highest for the smallest binary number. See also ID bits in Table 10-29.
318
Freescale Semiconductor
Figure 10-30. Identier Register 1 Standard Mapping Table 10-29. IDR1 Register Field Descriptions
Field 7:5 ID[2:0] 4 RTR Description Standard Format Identier The identiers consist of 11 bits (ID[10:0]) for the standard format. ID10 is the most signicant bit and is transmitted rst on the CAN bus during the arbitration procedure. The priority of an identier is dened to be highest for the smallest binary number. See also ID bits in Table 10-28. Remote Transmission Request This ag reects the status of the Remote Transmission Request bit in the CAN frame. In the case of a receive buffer, it indicates the status of the received frame and supports the transmission of an answering frame in software. In the case of a transmit buffer, this ag denes the setting of the RTR bit to be sent. 0 Data frame 1 Remote frame ID Extended This ag indicates whether the extended or standard identier format is applied in this buffer. In the case of a receive buffer, the ag is set as received and indicates to the CPU how to process the buffer identier registers. In the case of a transmit buffer, the ag indicates to the MSCAN what type of identier to send. 0 Standard format (11 bit) 1 Extended format (29 bit)
3 IDE
R W Reset: x x x x x x x x
Freescale Semiconductor
319
R W Reset: x x x x x x x x
10.3.3.2
The eight data segment registers, each with bits DB[7:0], contain the data to be transmitted or received. The number of bytes to be transmitted or received is determined by the data length code in the corresponding DLR register.
Module Base + 0x0004 (DSR0) 0x0005 (DSR1) 0x0006 (DSR2) 0x0007 (DSR3) 0x0008 (DSR4) 0x0009 (DSR5) 0x000A (DSR6) 0x000B (DSR7)
7 6 5 4 3 2 1 0
320
Freescale Semiconductor
10.3.3.3
This register keeps the data length eld of the CAN frame.
Module Base + 0x00XB
7 6 5 4 3 2 1 0
10.3.3.4
This register denes the local priority of the associated message buffer. The local priority is used for the internal prioritization process of the MSCAN and is dened to be highest for the smallest binary number. The MSCAN implements the following internal prioritization mechanisms: All transmission buffers with a cleared TXEx ag participate in the prioritization immediately before the SOF (start of frame) is sent. The transmission buffer with the lowest local priority eld wins the prioritization.
Freescale Semiconductor
321
In cases of more than one buffer having the same lowest priority, the message buffer with the lower index number wins.
Module Base + 0xXXXD
7 6 5 4 3 2 1 0
Read: Anytime when TXEx ag is set (see Section 10.3.2.7, MSCAN Transmitter Flag Register (CANTFLG)) and the corresponding transmit buffer is selected in CANTBSEL (see Section 10.3.2.11, MSCAN Transmit Buffer Selection Register (CANTBSEL)). Write: Anytime when TXEx ag is set (see Section 10.3.2.7, MSCAN Transmitter Flag Register (CANTFLG)) and the corresponding transmit buffer is selected in CANTBSEL (see Section 10.3.2.11, MSCAN Transmit Buffer Selection Register (CANTBSEL)).
10.3.3.5
If the TIME bit is enabled, the MSCAN will write a time stamp to the respective registers in the active transmit or receive buffer right after the EOF of a valid message on the CAN bus (see Section 10.3.2.1, MSCAN Control Register 0 (CANCTL0)). In case of a transmission, the CPU can only read the time stamp after the respective transmit buffer has been agged empty. The timer value, which is used for stamping, is taken from a free running internal CAN bit clock. A timer overrun is not indicated by the MSCAN. The timer is reset (all bits set to 0) during initialization mode. The CPU can only read the time stamp registers.
Module Base + 0xXXXE
7 6 5 4 3 2 1 0
R W Reset:
TSR15
TSR14
TSR13
TSR12
TSR11
TSR10
TSR9
TSR8
R W Reset:
TSR7
TSR6
TSR5
TSR4
TSR3
TSR2
TSR1
TSR0
322
Freescale Semiconductor
Read: Anytime when TXEx ag is set (see Section 10.3.2.7, MSCAN Transmitter Flag Register (CANTFLG)) and the corresponding transmit buffer is selected in CANTBSEL (see Section 10.3.2.11, MSCAN Transmit Buffer Selection Register (CANTBSEL)). Write: Unimplemented
10.4
10.4.1
Functional Description
General
This section provides a complete functional description of the MSCAN. It describes each of the features and modes listed in the introduction.
Freescale Semiconductor
323
10.4.2
Message Storage
CAN Receive / Transmit Engine CPU12 Memory Mapped I/O
Rx0
Rx1 Rx2 Rx3 Rx4
RXF
RxBG
MSCAN
Receiver
Tx0
RxFG
CPU bus
TXE0
TxBG
Tx1
PRIO
TXE1
TxFG
MSCAN
CPU bus
PRIO
Tx2
TXE2
Transmitter
TxBG
PRIO
MSCAN facilitates a sophisticated message storage system which addresses the requirements of a broad range of network applications.
324
Freescale Semiconductor
10.4.2.1
Modern application layer software is built upon two fundamental assumptions: Any CAN node is able to send out a stream of scheduled messages without releasing the CAN bus between the two messages. Such nodes arbitrate for the CAN bus immediately after sending the previous message and only release the CAN bus in case of lost arbitration. The internal message queue within any CAN node is organized such that the highest priority message is sent out rst, if more than one message is ready to be sent. The behavior described in the bullets above cannot be achieved with a single transmit buffer. That buffer must be reloaded immediately after the previous message is sent. This loading process lasts a nite amount of time and must be completed within the inter-frame sequence (IFS) to be able to send an uninterrupted stream of messages. Even if this is feasible for limited CAN bus speeds, it requires that the CPU reacts with short latencies to the transmit interrupt. A double buffer scheme de-couples the reloading of the transmit buffer from the actual message sending and, therefore, reduces the reactiveness requirements of the CPU. Problems can arise if the sending of a message is nished while the CPU re-loads the second buffer. No buffer would then be ready for transmission, and the CAN bus would be released. At least three transmit buffers are required to meet the rst of the above requirements under all circumstances. The MSCAN has three transmit buffers. The second requirement calls for some sort of internal prioritization which the MSCAN implements with the local priority concept described in Section 10.4.2.2, Transmit Structures.
10.4.2.2
Transmit Structures
The MSCAN triple transmit buffer scheme optimizes real-time performance by allowing multiple messages to be set up in advance. The three buffers are arranged as shown in Figure 10-38. All three buffers have a 13-byte data structure similar to the outline of the receive buffers (see Section 10.3.3, Programmers Model of Message Storage). An additional Section 10.3.3.4, Transmit Buffer Priority Register (TBPR) contains an 8-bit local priority eld (PRIO) (see Section 10.3.3.4, Transmit Buffer Priority Register (TBPR)). The remaining two bytes are used for time stamping of a message, if required (see Section 10.3.3.5, Time Stamp Register (TSRHTSRL)). To transmit a message, the CPU must identify an available transmit buffer, which is indicated by a set transmitter buffer empty (TXEx) ag (see Section 10.3.2.7, MSCAN Transmitter Flag Register (CANTFLG)). If a transmit buffer is available, the CPU must set a pointer to this buffer by writing to the CANTBSEL register (see Section 10.3.2.11, MSCAN Transmit Buffer Selection Register (CANTBSEL)). This makes the respective buffer accessible within the CANTXFG address space (see Section 10.3.3, Programmers Model of Message Storage). The algorithmic feature associated with the CANTBSEL register simplies the transmit buffer selection. In addition, this scheme makes the handler software simpler because only one address area is applicable for the transmit process, and the required address space is minimized. The CPU then stores the identier, the control bits, and the data content into one of the transmit buffers. Finally, the buffer is agged as ready for transmission by clearing the associated TXE ag.
Freescale Semiconductor
325
The MSCAN then schedules the message for transmission and signals the successful transmission of the buffer by setting the associated TXE ag. A transmit interrupt (see Section 10.4.7.2, Transmit Interrupt) is generated1 when TXEx is set and can be used to drive the application software to re-load the buffer. If more than one buffer is scheduled for transmission when the CAN bus becomes available for arbitration, the MSCAN uses the local priority setting of the three buffers to determine the prioritization. For this purpose, every transmit buffer has an 8-bit local priority eld (PRIO). The application software programs this eld when the message is set up. The local priority reects the priority of this particular message relative to the set of messages being transmitted from this node. The lowest binary value of the PRIO eld is dened to be the highest priority. The internal scheduling process takes place whenever the MSCAN arbitrates for the CAN bus. This is also the case after the occurrence of a transmission error. When a high priority message is scheduled by the application software, it may become necessary to abort a lower priority message in one of the three transmit buffers. Because messages that are already in transmission cannot be aborted, the user must request the abort by setting the corresponding abort request bit (ABTRQ) (see Section 10.3.2.9, MSCAN Transmitter Message Abort Request Register (CANTARQ).) The MSCAN then grants the request, if possible, by: 1. Setting the corresponding abort acknowledge ag (ABTAK) in the CANTAAK register. 2. Setting the associated TXE ag to release the buffer. 3. Generating a transmit interrupt. The transmit interrupt handler software can determine from the setting of the ABTAK ag whether the message was aborted (ABTAK = 1) or sent (ABTAK = 0).
10.4.2.3
Receive Structures
The received messages are stored in a ve stage input FIFO. The ve message buffers are alternately mapped into a single memory area (see Figure 10-38). The background receive buffer (RxBG) is exclusively associated with the MSCAN, but the foreground receive buffer (RxFG) is addressable by the CPU (see Figure 10-38). This scheme simplies the handler software because only one address area is applicable for the receive process. All receive buffers have a size of 15 bytes to store the CAN control bits, the identier (standard or extended), the data contents, and a time stamp, if enabled (see Section 10.3.3, Programmers Model of Message Storage). The receiver full ag (RXF) (see Section 10.3.2.5, MSCAN Receiver Flag Register (CANRFLG)) signals the status of the foreground receive buffer. When the buffer contains a correctly received message with a matching identier, this ag is set. On reception, each message is checked to see whether it passes the lter (see Section 10.4.3, Identier Acceptance Filter) and simultaneously is written into the active RxBG. After successful reception of a valid message, the MSCAN shifts the content of RxBG into the receiver FIFO2, sets the RXF ag, and generates a receive interrupt (see Section 10.4.7.3, Receive Interrupt) to the CPU3. The users receive handler must read the received message from the RxFG and then reset the RXF ag to acknowledge the interrupt and to release the foreground buffer. A new message, which can follow immediately after the IFS eld of the CAN frame, is received into the next available RxBG. If the MSCAN receives an invalid
1. The transmit interrupt occurs only if not masked. A polling scheme can be applied on TXEx also. 2. Only if the RXF ag is not set. 3. The receive interrupt occurs only if not masked. A polling scheme can be applied on RXF also.
326
Freescale Semiconductor
message in its RxBG (wrong identier, transmission errors, etc.) the actual contents of the buffer will be over-written by the next message. The buffer will then not be shifted into the FIFO. When the MSCAN module is transmitting, the MSCAN receives its own transmitted messages into the background receive buffer, RxBG, but does not shift it into the receiver FIFO, generate a receive interrupt, or acknowledge its own messages on the CAN bus. The exception to this rule is in loopback mode (see Section 10.3.2.2, MSCAN Control Register 1 (CANCTL1)) where the MSCAN treats its own messages exactly like all other incoming messages. The MSCAN receives its own transmitted messages in the event that it loses arbitration. If arbitration is lost, the MSCAN must be prepared to become a receiver. An overrun condition occurs when all receive message buffers in the FIFO are lled with correctly received messages with accepted identiers and another message is correctly received from the CAN bus with an accepted identier. The latter message is discarded and an error interrupt with overrun indication is generated if enabled (see Section 10.4.7.5, Error Interrupt). The MSCAN remains able to transmit messages while the receiver FIFO being lled, but all incoming messages are discarded. As soon as a receive buffer in the FIFO is available again, new valid messages will be accepted.
10.4.3
The MSCAN identier acceptance registers (see Section 10.3.2.12, MSCAN Identier Acceptance Control Register (CANIDAC)) dene the acceptable patterns of the standard or extended identier (ID[10:0] or ID[28:0]). Any of these bits can be marked dont care in the MSCAN identier mask registers (see Section 10.3.2.17, MSCAN Identier Mask Registers (CANIDMR0CANIDMR7)). A lter hit is indicated to the application software by a set receive buffer full ag (RXF = 1) and three bits in the CANIDAC register (see Section 10.3.2.12, MSCAN Identier Acceptance Control Register (CANIDAC)). These identier hit ags (IDHIT[2:0]) clearly identify the lter section that caused the acceptance. They simplify the application softwares task to identify the cause of the receiver interrupt. If more than one hit occurs (two or more lters match), the lower hit has priority. A very exible programmable generic identier acceptance lter has been introduced to reduce the CPU interrupt loading. The lter is programmable to operate in four different modes (see Bosch CAN 2.0A/B protocol specication): Two identier acceptance lters, each to be applied to: The full 29 bits of the extended identier and to the following bits of the CAN 2.0B frame: Remote transmission request (RTR) Identier extension (IDE) Substitute remote request (SRR) The 11 bits of the standard identier plus the RTR and IDE bits of the CAN 2.0A/B messages1. This mode implements two lters for a full length CAN 2.0B compliant extended identier. Figure 10-39 shows how the rst 32-bit lter bank (CANIDAR0CANIDAR3, CANIDMR0CANIDMR3) produces a lter 0 hit. Similarly, the second lter bank (CANIDAR4CANIDAR7, CANIDMR4CANIDMR7) produces a lter 1 hit. Four identier acceptance lters, each to be applied to
1. Although this mode can be used for standard identifiers, it is recommended to use the four or eight identifier acceptance filters for standard identifiers
Freescale Semiconductor
327
a) the 14 most signicant bits of the extended identier plus the SRR and IDE bits of CAN 2.0B messages or b) the 11 bits of the standard identier, the RTR and IDE bits of CAN 2.0A/B messages. Figure 10-40 shows how the rst 32-bit lter bank (CANIDAR0CANIDA3, CANIDMR03CANIDMR) produces lter 0 and 1 hits. Similarly, the second lter bank (CANIDAR4CANIDAR7, CANIDMR4CANIDMR7) produces lter 2 and 3 hits. Eight identier acceptance lters, each to be applied to the rst 8 bits of the identier. This mode implements eight independent lters for the rst 8 bits of a CAN 2.0A/B compliant standard identier or a CAN 2.0B compliant extended identier. Figure 10-41 shows how the rst 32-bit lter bank (CANIDAR0CANIDAR3, CANIDMR0CANIDMR3) produces lter 0 to 3 hits. Similarly, the second lter bank (CANIDAR4CANIDAR7, CANIDMR4CANIDMR7) produces lter 4 to 7 hits. Closed lter. No CAN message is copied into the foreground buffer RxFG, and the RXF ag is never set.
IDR0 IDR0 ID21 ID3 ID20 ID2 IDR1 IDR1 ID15 IDE ID14 ID10 IDR2 IDR2 ID7 ID3 ID6 ID10 IDR3 IDR3 RTR ID3
CAN 2.0B Extended Identier ID28 CAN 2.0A/B Standard Identier ID10
AM7
CANIDMR0
AM0
AM7
CANIDMR1
AM0
AM7
CANIDMR2
AM0
AM7
CANIDMR3
AM0
AC7
CANIDAR0
AC0
AC7
CANIDAR1
AC0
AC7
CANIDAR2
AC0
AC7
CANIDAR3
AC0
328
Freescale Semiconductor
ID28 ID10
IDR0 IDR0
ID21 ID3
ID20 ID2
IDR1 IDR1
ID15 IDE
ID14 ID10
IDR2 IDR2
ID7 ID3
ID6 ID10
IDR3 IDR3
RTR ID3
AM7
CANIDMR0
AM0
AM7
CANIDMR1
AM0
AC7
CANIDAR0
AC0
AC7
CANIDAR1
AC0
AM7
CANIDMR2
AM0
AM7
CANIDMR3
AM0
AC7
CANIDAR2
AC0
AC7
CANIDAR3
AC0
Freescale Semiconductor
329
CAN 2.0B Extended Identier ID28 CAN 2.0A/B Standard Identier ID10
IDR0 IDR0
ID21 ID3
ID20 ID2
IDR1 IDR1
ID15 IDE
ID14 ID10
IDR2 IDR2
ID7 ID3
ID6 ID10
IDR3 IDR3
RTR ID3
AM7
CIDMR0
AM0
AC7
CIDAR0
AC0
AM7
CIDMR1
AM0
AC7
CIDAR1
AC0
AM7
CIDMR2
AM0
AC7
CIDAR2
AC0
AM7
CIDMR3
AM0
AC7
CIDAR3
AC0
330
Freescale Semiconductor
10.4.3.1
The MSCAN protects the user from accidentally violating the CAN protocol through programming errors. The protection logic implements the following features: The receive and transmit error counters cannot be written or otherwise manipulated. All registers which control the conguration of the MSCAN cannot be modied while the MSCAN is on-line. The MSCAN has to be in Initialization Mode. The corresponding INITRQ/INITAK handshake bits in the CANCTL0/CANCTL1 registers (see Section 10.3.2.1, MSCAN Control Register 0 (CANCTL0)) serve as a lock to protect the following registers: MSCAN control 1 register (CANCTL1) MSCAN bus timing registers 0 and 1 (CANBTR0, CANBTR1) MSCAN identier acceptance control register (CANIDAC) MSCAN identier acceptance registers (CANIDAR0CANIDAR7) MSCAN identier mask registers (CANIDMR0CANIDMR7) The TXCAN pin is immediately forced to a recessive state when the MSCAN goes into the power down mode or initialization mode (see Section 10.4.5.6, MSCAN Power Down Mode, and Section 10.4.5.5, MSCAN Initialization Mode). The MSCAN enable bit (CANE) is writable only once in normal system operation modes, which provides further protection against inadvertently disabling the MSCAN.
10.4.3.2
Clock System
Figure 10-42 shows the structure of the MSCAN clock generation circuitry.
MSCAN
Bus Clock
CANCLK CLKSRC
Prescaler (1 .. 64)
The clock source bit (CLKSRC) in the CANCTL1 register (10.3.2.2/10-294) denes whether the internal CANCLK is connected to the output of a crystal oscillator (oscillator clock) or to the bus clock. The clock source has to be chosen such that the tight oscillator tolerance requirements (up to 0.4%) of the CAN protocol are met. Additionally, for high CAN bus rates (1 Mbps), a 45% to 55% duty cycle of the clock is required.
Freescale Semiconductor
331
If the bus clock is generated from a PLL, it is recommended to select the oscillator clock rather than the bus clock due to jitter considerations, especially at the faster CAN bus rates. For microcontrollers without a clock and reset generator (CRG), CANCLK is driven from the crystal oscillator (oscillator clock). A programmable prescaler generates the time quanta (Tq) clock from CANCLK. A time quantum is the atomic unit of time handled by the MSCAN.
Eqn. 10-2
f CANCLK = ----------------------------------------------------Tq ( Prescaler value ) A bit time is subdivided into three segments as described in the Bosch CAN specication. (see Figure 1043): SYNC_SEG: This segment has a xed length of one time quantum. Signal edges are expected to happen within this section. Time Segment 1: This segment includes the PROP_SEG and the PHASE_SEG1 of the CAN standard. It can be programmed by setting the parameter TSEG1 to consist of 4 to 16 time quanta. Time Segment 2: This segment represents the PHASE_SEG2 of the CAN standard. It can be programmed by setting the TSEG2 parameter to be 2 to 8 time quanta long.
Eqn. 10-3
NRZ Signal
SYNC_SEG
Time Segment 1 (PROP_SEG + PHASE_SEG1) 4 ... 16 8 ... 25 Time Quanta = 1 Bit Time
Transmit Point
332
Freescale Semiconductor
Sample Point
The synchronization jump width (see the Bosch CAN specication for details) can be programmed in a range of 1 to 4 time quanta by setting the SJW parameter. The SYNC_SEG, TSEG1, TSEG2, and SJW parameters are set by programming the MSCAN bus timing registers (CANBTR0, CANBTR1) (see Section 10.3.2.3, MSCAN Bus Timing Register 0 (CANBTR0) and Section 10.3.2.4, MSCAN Bus Timing Register 1 (CANBTR1)). Table 10-34 gives an overview of the CAN compliant segment settings and the related parameter values. NOTE It is the users responsibility to ensure the bit time settings are in compliance with the CAN standard.
Table 10-34. CAN Standard Compliant Bit Time Segment Settings
Time Segment 1 5 .. 10 4 .. 11 5 .. 12 6 .. 13 7 .. 14 8 .. 15 9 .. 16 TSEG1 4 .. 9 3 .. 10 4 .. 11 5 .. 12 6 .. 13 7 .. 14 8 .. 15 Time Segment 2 2 3 4 5 6 7 8 TSEG2 1 2 3 4 5 6 7 Synchronization Jump Width 1 .. 2 1 .. 3 1 .. 4 1 .. 4 1 .. 4 1 .. 4 1 .. 4 SJW 0 .. 1 0 .. 2 0 .. 3 0 .. 3 0 .. 3 0 .. 3 0 .. 3
10.4.4
10.4.4.1
Modes of Operation
Normal Modes
The MSCAN module behaves as described within this specication in all normal system operation modes.
10.4.4.2
Special Modes
The MSCAN module behaves as described within this specication in all special system operation modes.
Freescale Semiconductor
333
10.4.4.3
Emulation Modes
In all emulation modes, the MSCAN module behaves just like normal system operation modes as described within this specication.
10.4.4.4
Listen-Only Mode
In an optional CAN bus monitoring mode (listen-only), the CAN node is able to receive valid data frames and valid remote frames, but it sends only recessive bits on the CAN bus. In addition, it cannot start a transmision. If the MAC sub-layer is required to send a dominant bit (ACK bit, overload ag, or active error ag), the bit is rerouted internally so that the MAC sub-layer monitors this dominant bit, although the CAN bus may remain in recessive state externally.
10.4.4.5
Security Modes
10.4.5
Low-Power Options
If the MSCAN is disabled (CANE = 0), the MSCAN clocks are stopped for power saving. If the MSCAN is enabled (CANE = 1), the MSCAN has two additional modes with reduced power consumption, compared to normal mode: sleep and power down mode. In sleep mode, power consumption is reduced by stopping all clocks except those to access the registers from the CPU side. In power down mode, all clocks are stopped and no power is consumed. Table 10-35 summarizes the combinations of MSCAN and CPU modes. A particular combination of modes is entered by the given settings on the CSWAI and SLPRQ/SLPAK bits. For all modes, an MSCAN wake-up interrupt can occur only if the MSCAN is in sleep mode (SLPRQ = 1 and SLPAK = 1), wake-up functionality is enabled (WUPE = 1), and the wake-up interrupt is enabled (WUPIE = 1).
334
Freescale Semiconductor
RUN
WAIT
10.4.5.1
As shown in Table 10-35, only MSCAN sleep mode is available as low power option when the CPU is in run mode.
10.4.5.2
The WAI instruction puts the MCU in a low power consumption stand-by mode. If the CSWAI bit is set, additional power can be saved in power down mode because the CPU clocks are stopped. After leaving this power down mode, the MSCAN restarts its internal controllers and enters normal mode again. While the CPU is in wait mode, the MSCAN can be operated in normal mode and generate interrupts (registers can be accessed via background debug mode). The MSCAN can also operate in any of the lowpower modes depending on the values of the SLPRQ/SLPAK and CSWAI bits as seen in Table 10-35.
10.4.5.3
The STOP instruction puts the MCU in a low power consumption stand-by mode. In stop mode, the MSCAN is set in power down mode regardless of the value of the SLPRQ/SLPAK and CSWAI bits Table 10-35.
10.4.5.4
The CPU can request the MSCAN to enter this low power mode by asserting the SLPRQ bit in the CANCTL0 register. The time when the MSCAN enters sleep mode depends on a xed synchronization delay and its current activity:
Freescale Semiconductor
335
If there are one or more message buffers scheduled for transmission (TXEx = 0), the MSCAN will continue to transmit until all transmit message buffers are empty (TXEx = 1, transmitted successfully or aborted) and then goes into sleep mode. If the MSCAN is receiving, it continues to receive and goes into sleep mode as soon as the CAN bus next becomes idle. If the MSCAN is neither transmitting nor receiving, it immediately goes into sleep mode.
SYNC
sync. SLPRQ
SLPAK Flag
sync.
SLPAK
SYNC
NOTE The application software must avoid setting up a transmission (by clearing one or more TXEx ag(s)) and immediately request sleep mode (by setting SLPRQ). Whether the MSCAN starts transmitting or goes into sleep mode directly depends on the exact sequence of operations. If sleep mode is active, the SLPRQ and SLPAK bits are set (Figure 10-44). The application software must use SLPAK as a handshake indication for the request (SLPRQ) to go into sleep mode. When in sleep mode (SLPRQ = 1 and SLPAK = 1), the MSCAN stops its internal clocks. However, clocks that allow register accesses from the CPU side continue to run. If the MSCAN is in bus-off state, it stops counting the 128 occurrences of 11 consecutive recessive bits due to the stopped clocks. The TXCAN pin remains in a recessive state. If RXF = 1, the message can be read and RXF can be cleared. Shifting a new message into the foreground buffer of the receiver FIFO (RxFG) does not take place while in sleep mode. It is possible to access the transmit buffers and to clear the associated TXE ags. No message abort takes place while in sleep mode. If the WUPE bit in CANCLT0 is not asserted, the MSCAN will mask any activity it detects on CAN. The RXCAN pin is therefore held internally in a recessive state. This locks the MSCAN in sleep mode (Figure 10-45). WUPE must be set before entering sleep mode to take effect.
336
Freescale Semiconductor
The MSCAN is able to leave sleep mode (wake up) only when: CAN bus activity occurs and WUPE = 1 or the CPU clears the SLPRQ bit NOTE The CPU cannot clear the SLPRQ bit before sleep mode (SLPRQ = 1 and SLPAK = 1) is active. After wake-up, the MSCAN waits for 11 consecutive recessive bits to synchronize to the CAN bus. As a consequence, if the MSCAN is woken-up by a CAN frame, this frame is not received. The receive message buffers (RxFG and RxBG) contain messages if they were received before sleep mode was entered. All pending actions will be executed upon wake-up; copying of RxBG into RxFG, message aborts and message transmissions. If the MSCAN remains in bus-off state after sleep mode was exited, it continues counting the 128 occurrences of 11 consecutive recessive bits.
CAN Activity
StartUp
Idle
Sleep
(CAN Activity & WUPE) |
CAN Activity
Freescale Semiconductor
337
10.4.5.5
In initialization mode, any on-going transmission or reception is immediately aborted and synchronization to the CAN bus is lost, potentially causing CAN protocol violations. To protect the CAN bus system from fatal consequences of violations, the MSCAN immediately drives the TXCAN pin into a recessive state. NOTE The user is responsible for ensuring that the MSCAN is not active when initialization mode is entered. The recommended procedure is to bring the MSCAN into sleep mode (SLPRQ = 1 and SLPAK = 1) before setting the INITRQ bit in the CANCTL0 register. Otherwise, the abort of an on-going message can cause an error condition and can impact other CAN bus devices. In initialization mode, the MSCAN is stopped. However, interface registers remain accessible. This mode is used to reset the CANCTL0, CANRFLG, CANRIER, CANTFLG, CANTIER, CANTARQ, CANTAAK, and CANTBSEL registers to their default values. In addition, the MSCAN enables the conguration of the CANBTR0, CANBTR1 bit timing registers; CANIDAC; and the CANIDAR, CANIDMR message lters. See Section 10.3.2.1, MSCAN Control Register 0 (CANCTL0), for a detailed description of the initialization mode.
SYNC
sync. INITRQ
INITAK Flag
sync.
INITAK
SYNC
INITAK
Due to independent clock domains within the MSCAN, INITRQ must be synchronized to all domains by using a special handshake mechanism. This handshake causes additional synchronization delay (see Section Figure 10-46., Initialization Request/Acknowledge Cycle). If there is no message transfer ongoing on the CAN bus, the minimum delay will be two additional bus clocks and three additional CAN clocks. When all parts of the MSCAN are in initialization mode, the INITAK ag is set. The application software must use INITAK as a handshake indication for the request (INITRQ) to go into initialization mode. NOTE The CPU cannot clear INITRQ before initialization mode (INITRQ = 1 and INITAK = 1) is active.
338
Freescale Semiconductor
10.4.5.6
The MSCAN is in power down mode (Table 10-35) when CPU is in stop mode or CPU is in wait mode and the CSWAI bit is set When entering the power down mode, the MSCAN immediately stops all ongoing transmissions and receptions, potentially causing CAN protocol violations. To protect the CAN bus system from fatal consequences of violations to the above rule, the MSCAN immediately drives the TXCAN pin into a recessive state. NOTE The user is responsible for ensuring that the MSCAN is not active when power down mode is entered. The recommended procedure is to bring the MSCAN into Sleep mode before the STOP or WAI instruction (if CSWAI is set) is executed. Otherwise, the abort of an ongoing message can cause an error condition and impact other CAN bus devices. In power down mode, all clocks are stopped and no registers can be accessed. If the MSCAN was not in sleep mode before power down mode became active, the module performs an internal recovery cycle after powering up. This causes some xed delay before the module enters normal mode again.
10.4.5.7
The MSCAN can be programmed to wake up the MSCAN as soon as CAN bus activity is detected (see control bit WUPE in Section 10.3.2.1, MSCAN Control Register 0 (CANCTL0)). The sensitivity to existing CAN bus action can be modied by applying a low-pass lter function to the RXCAN input line while in sleep mode (see control bit WUPM in Section 10.3.2.2, MSCAN Control Register 1 (CANCTL1)). This feature can be used to protect the MSCAN from wake-up due to short glitches on the CAN bus lines. Such glitches can result fromfor exampleelectromagnetic interference within noisy environments.
10.4.6
Reset Initialization
The reset state of each individual bit is listed in Section 10.3.2, Register Descriptions, which details all the registers and their bit-elds.
10.4.7
Interrupts
This section describes all interrupts originated by the MSCAN. It documents the enable bits and generated ags. Each interrupt is listed and described separately.
Freescale Semiconductor
339
10.4.7.1
The MSCAN supports four interrupt vectors (see Table 10-36), any of which can be individually masked (for details see sections from Section 10.3.2.6, MSCAN Receiver Interrupt Enable Register (CANRIER), to Section 10.3.2.8, MSCAN Transmitter Interrupt Enable Register (CANTIER)). NOTE The dedicated interrupt vector addresses are dened in the Resets and Interrupts chapter.
Table 10-36. Interrupt Vectors
Interrupt Source Wake-Up Interrupt (WUPIF) Error Interrupts Interrupt (CSCIF, OVRIF) Receive Interrupt (RXF) Transmit Interrupts (TXE[2:0]) CCR Mask I bit I bit I bit I bit Local Enable CANRIER (WUPIE) CANRIER (CSCIE, OVRIE) CANRIER (RXFIE) CANTIER (TXEIE[2:0])
10.4.7.2
Transmit Interrupt
At least one of the three transmit buffers is empty (not scheduled) and can be loaded to schedule a message for transmission. The TXEx ag of the empty message buffer is set.
10.4.7.3
Receive Interrupt
A message is successfully received and shifted into the foreground buffer (RxFG) of the receiver FIFO. This interrupt is generated immediately after receiving the EOF symbol. The RXF ag is set. If there are multiple messages in the receiver FIFO, the RXF ag is set as soon as the next message is shifted to the foreground buffer.
10.4.7.4
Wake-Up Interrupt
A wake-up interrupt is generated if activity on the CAN bus occurs during MSCN internal sleep mode. WUPE (see Section 10.3.2.1, MSCAN Control Register 0 (CANCTL0)) must be enabled.
10.4.7.5
Error Interrupt
An error interrupt is generated if an overrun of the receiver FIFO, error, warning, or bus-off condition occurrs. Section 10.3.2.5, MSCAN Receiver Flag Register (CANRFLG) indicates one of the following conditions: Overrun An overrun condition of the receiver FIFO as described in Section 10.4.2.3, Receive Structures, occurred. CAN Status Change The actual value of the transmit and receive error counters control the CAN bus state of the MSCAN. As soon as the error counters skip into a critical range (Tx/Rxwarning, Tx/Rx-error, bus-off) the MSCAN ags an error condition. The status change, which caused the error condition, is indicated by the TSTAT and RSTAT ags (see Section 10.3.2.5,
340
Freescale Semiconductor
MSCAN Receiver Flag Register (CANRFLG) and Section 10.3.2.6, MSCAN Receiver Interrupt Enable Register (CANRIER)).
10.4.7.6
Interrupt Acknowledge
Interrupts are directly associated with one or more status ags in either the Section 10.3.2.5, MSCAN Receiver Flag Register (CANRFLG) or the Section 10.3.2.7, MSCAN Transmitter Flag Register (CANTFLG). Interrupts are pending as long as one of the corresponding ags is set. The ags in CANRFLG and CANTFLG must be reset within the interrupt handler to handshake the interrupt. The ags are reset by writing a 1 to the corresponding bit position. A ag cannot be cleared if the respective condition prevails. NOTE It must be guaranteed that the CPU clears only the bit causing the current interrupt. For this reason, bit manipulation instructions (BSET) must not be used to clear interrupt ags. These instructions may cause accidental clearing of interrupt ags which are set after entering the current interrupt service routine.
10.4.7.7
The MSCAN can recover from stop or wait via the wake-up interrupt. This interrupt can only occur if the MSCAN was in sleep mode (SLPRQ = 1 and SLPAK = 1) before entering power down mode, the wakeup option is enabled (WUPE = 1), and the wake-up interrupt is enabled (WUPIE = 1).
10.5
10.5.1
Initialization/Application Information
MSCAN initialization
The procedure to initially start up the MSCAN module out of reset is as follows: 1. Assert CANE 2. Write to the conguration registers in initialization mode 3. Clear INITRQ to leave initialization mode and enter normal mode If the conguration of registers which are writable in initialization mode needs to be changed only when the MSCAN module is in normal mode: 1. Bring the module into sleep mode by setting SLPRQ and awaiting SLPAK to assert after the CAN bus becomes idle. 2. Enter initialization mode: assert INITRQ and await INITAK 3. Write to the conguration registers in initialization mode 4. Clear INITRQ to leave initialization mode and continue in normal mode
Freescale Semiconductor
341
342
Freescale Semiconductor
11.1.1
Features
The Colpitts OSCV2 option provides the following features: Amplitude limitation control (ALC) loop: Low power consumption and low current induced RF emission Sinusoidal waveform with low RF emission Low crystal stress (an external damping resistor is not required) Normal and low amplitude mode for further reduction of power and emission An external biasing resistor is not required The Pierce OSC option provides the following features: Wider high frequency operation range No DC voltage applied across the crystal Full rail-to-rail (2.5 V nominal) swing oscillation with low EM susceptibility Fast start up Common features: Clock monitor (CM) Operation from the VDDPLL 2.5 V (nominal) supply rail
11.1.2
Modes of Operation
Two modes of operation exist: Amplitude limitation controlled Colpitts oscillator mode suitable for power and emission critical applications Full swing Pierce oscillator mode that can also be used to feed in an externally generated square wave suitable for high frequency operation and harsh environments
Freescale Semiconductor
343
11.2
This section lists and describes the signals that connect off chip.
11.2.1
These pins provide the operating voltage (VDDPLL) and ground (VSSPLL) for the OSCV2 circuitry. This allows the supply voltage to the OSCV2 to be independently bypassed.
11.2.2
These pins provide the interface for either a crystal or a CMOS compatible clock to control the internal clock generator circuitry. EXTAL is the external clock input or the input to the crystal oscillator amplier. XTAL is the output of the crystal oscillator amplier. All the MCU internal system clocks are derived from the EXTAL input frequency. In full stop mode (PSTP = 0) the EXTAL pin is pulled down by an internal resistor of typical 200 k. NOTE Freescale Semiconductor recommends an evaluation of the application board and chosen resonator or crystal by the resonator or crystal supplier. The Crystal circuit is changed from standard. The Colpitts circuit is not suited for overtone resonators and crystals.
EXTAL CDC* MCU XTAL C2 VSSPLL * Due to the nature of a translated ground Colpitts oscillator a DC voltage bias is applied to the crystal. Please contact the crystal manufacturer for crystal DC bias conditions and recommended capacitor value CDC. C1 Crystal or Ceramic Resonator
NOTE The Pierce circuit is not suited for overtone resonators and crystals without a careful component selection.
344
Freescale Semiconductor
EXTAL MCU RS* XTAL C4 VSSPLL * Rs can be zero (shorted) when used with higher frequency crystals. Refer to manufacturers data. C3 Crystal or Ceramic Resonator
RB
Not Connected
11.2.3
The XCLKS is an input signal which controls whether a crystal in combination with the internal Colpitts (low power) oscillator is used or whether the Pierce oscillator/external clock circuitry is used. The XCLKS signal is sampled during reset with the rising edge of RESET. Table 11-1 lists the state coding of the sampled XCLKS signal. Refer to the device overview chapter for polarity of the XCLKS pin.
Table 11-1. Clock Selection Based on XCLKS XCLKS
0 1
Description
Colpitts oscillator selected Pierce oscillator/external clock selected
Freescale Semiconductor
345
11.3
The CRG contains the registers and associated bits for controlling and monitoring the OSCV2 module.
11.4
Functional Description
The OSCV2 block has two external pins, EXTAL and XTAL. The oscillator input pin, EXTAL, is intended to be connected to either a crystal or an external clock source. The selection of Colpitts oscillator or Pierce oscillator/external clock depends on the XCLKS signal which is sampled during reset. The XTAL pin is an output signal that provides crystal circuit feedback. A buffered EXTAL signal, OSCCLK, becomes the internal reference clock. To improve noise immunity, the oscillator is powered by the VDDPLL and VSSPLL power supply pins. The Pierce oscillator can be used for higher frequencies compared to the low power Colpitts oscillator.
11.4.1
The Colpitts oscillator is equipped with a feedback system which does not waste current by generating harmonics. Its conguration is Colpitts oscillator with translated ground. The transconductor used is driven by a current source under the control of a peak detector which will measure the amplitude of the AC signal appearing on EXTAL node in order to implement an amplitude limitation control (ALC) loop. The ALC loop is in charge of reducing the quiescent current in the transconductor as a result of an increase in the oscillation amplitude. The oscillation amplitude can be limited to two values. The normal amplitude which is intended for non power saving modes and a small amplitude which is intended for low power operation modes. Please refer to the CRG block description chapter for the control and assignment of the amplitude value to operation modes.
11.4.2
The clock monitor circuit is based on an internal resistor-capacitor (RC) time delay so that it can operate without any MCU clocks. If no OSCCLK edges are detected within this RC time delay, the clock monitor indicates a failure which asserts self clock mode or generates a system reset depending on the state of SCME bit. If the clock monitor is disabled or the presence of clocks is detected no failure is indicated.The clock monitor function is enabled/disabled by the CME control bit, described in the CRG block description chapter.
11.5
Interrupts
OSCV2 contains a clock monitor, which can trigger an interrupt or reset. The control bits and status bits for the clock monitor are described in the CRG block description chapter.
346
Freescale Semiconductor
12.1.1
Features
Six independent PWM channels with programmable period and duty cycle Dedicated counter for each PWM channel Programmable PWM enable/disable for each channel Software selection of PWM duty pulse polarity for each channel Period and duty cycle are double buffered. Change takes effect when the end of the effective period is reached (PWM counter reaches 0) or when the channel is disabled. Programmable center or left aligned outputs on individual channels Six 8-bit channel or three 16-bit channel PWM resolution Four clock sources (A, B, SA, and SB) provide for a wide range of frequencies. Programmable clock select logic Emergency shutdown
12.1.2
Modes of Operation
There is a software programmable option for low power consumption in wait mode that disables the input clock to the prescaler. In freeze mode there is a software programmable option to disable the input clock to the prescaler. This is useful for emulation.
Freescale Semiconductor
347
12.1.3
Block Diagram
PWM8B6C
PWM Channels Channel 5 Bus Clock Clock Select PWM Clock Period and Duty Counter PWM5
Channel 4 Period and Duty Control Channel 3 Period and Duty Counter Counter
PWM4
PWM3
PWM2
Polarity
PWM1
Alignment
PWM0
12.2
12.2.1
This pin serves as waveform output of PWM channel 5 and as an input for the emergency shutdown feature.
12.2.2
12.2.3
348
Freescale Semiconductor
12.2.4
12.2.5
12.2.6
12.3
This subsection describes in detail all the registers and register bits in the PWM8B6CV1 module. The special-purpose registers and register bit functions that would not normally be made available to device end users, such as factory test control registers and reserved registers are clearly identied by means of shading the appropriate portions of address maps and register diagrams. Notes explaining the reasons for restricting access to the registers and functions are also explained in the individual register descriptions.
12.3.1
The following paragraphs describe the content of the registers in the PWM8B6CV1 module. The base address of the PWM8B6CV1 module is determined at the MCU level when the MCU is dened. The register decode map is xed and begins at the rst address of the module address offset. Table 12-1 shows the registers associated with the PWM and their relative offset from the base address. The register detail description follows the order in which they appear in the register map. Reserved bits within a register will always read as 0 and the write will be unimplemented. Unimplemented functions are indicated by shading the bit. Table 12-1 shows the memory map for the PWM8B6CV1 module. NOTE Register address = base address + address offset, where the base address is dened at the MCU level and the address offset is dened at the module level.
Freescale Semiconductor
349
Register
Access R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W R/W
PWM Prescale Counter Register (PWMPRSC) PWM Scale A Register (PWMSCLA) PWM Scale B Register (PWMSCLB) PWM Scale A Counter Register PWM Scale B Counter Register
(PWMSCNTA)(3) (PWMSCNTB)(4)
PWM Channel 0 Counter Register (PWMCNT0) PWM Channel 1 Counter Register (PWMCNT1) PWM Channel 2 Counter Register (PWMCNT2) PWM Channel 3 Counter Register (PWMCNT3) PWM Channel 4 Counter Register (PWMCNT4) PWM Channel 5 Counter Register (PWMCNT5) PWM Channel 0 Period Register (PWMPER0) PWM Channel 1 Period Register (PWMPER1) PWM Channel 2 Period Register (PWMPER2) PWM Channel 3 Period Register (PWMPER3) PWM Channel 4 Period Register (PWMPER4) PWM Channel 5 Period Register (PWMPER5) PWM Channel 0 Duty Register (PWMDTY0) PWM Channel 1 Duty Register (PWMDTY1) PWM Channel 2 Duty Register (PWMDTY2) PWM Channel 3 Duty Register (PWMDTY3) PWM Channel 4 Duty Register (PWMDTY4) PWM Channel 5 Duty Register (PWMDTY5)
0x001E PWM Shutdown Register (PWMSDN) 1. PWMTST is intended for factory test purposes only. 2. PWMPRSC is intended for factory test purposes only. 3. PWMSCNTA is intended for factory test purposes only. 4. PWMSCNTB is intended for factory test purposes only.
350
Freescale Semiconductor
12.3.2
Register Descriptions
The following paragraphs describe in detail all the registers and register bits in the PWM8B6CV1 module.
Register Name 0x0000 PWME 0x0001 PWMPOL 0x0002 PWMCLK 0x0003 PWMPRCLK 0x0004 PWMCAE 0x0005 PWMCTL 0x0006 PWMTST 0x0007 PWMPRSC 0x0008 PWMSCLA 0x0009 PWMSCLB 0x000A PWMSCNTA 0x000B PWMSCNTB 0x000C PWMCNT0 0x000D PWMCNT1 0x000E PWMCNT2 R W R W R W R W R W R W R W R W R W R W R W R W R W R W R W Bit 7 0 6 0 5 PWME5 4 PWME4 3 PWME3 2 PWME2 1 PWME1 Bit 0 PWME0
PPOL5
PPOL4
PPOL3
PPOL2
PPOL1
PPOL0
PCLK5
PCLK4
PCLK3 0
PCLK2
PCLK1
PCLK0
PCKB2 0
PCKB1
PCKB0
PCKA2
PCKA1
PCKA0
CAE5
CAE4
CAE2
CAE2
CAE1 0
CAE0 0
CON45 0
CON23 0
CON01 0
PSWAI 0
PFRZ 0
Bit 7
Bit 0
Bit 7 0
6 0
5 0
4 0
3 0
2 0
1 0
Bit 0 0
6 0 6 0 6 0
5 0 5 0 5 0
4 0 4 0 4 0
3 0 3 0 3 0
2 0 2 0 2 0
1 0 1 0 1 0
= Unimplemented or Reserved
Freescale Semiconductor
351
Register Name 0x000F PWMCNT3 0x0010 PWMCNT4 0x0011 PWMCNT5 0x0012 PWMPER0 0x0013 PWMPER1 0x0014 PWMPER2 0x0015 PWMPER3 0x0016 PWMPER4 0x0017 PWMPER5 0x0018 PWMDTY0 0x0019 PWMPER1 0x001A PWMPER2 0x001B PWMPER3 0x001C PWMPER4 0x001D PWMPER5 0x001E PWMSDB R W R W R W R W R W R W R W R W R W R W R W R W R W R W R W R W
6 6 0 6 0 6 0 6
5 5 0 5 0 5 0 5
4 4 0 4 0 4 0 4
3 3 0 3 0 3 0 3
2 2 0 2 0 2 0 2
1 1 0 1 0 1 0 1
Bit 7
Bit 0
Bit 7
Bit 0
Bit 7
Bit 0
Bit 7
Bit 0
Bit 7
Bit 0
Bit 7
Bit 0
Bit 7
Bit 0
Bit 7
Bit 0
Bit 7
Bit 0
Bit 7
Bit 0
Bit 7
5 0 PWMRSTRT
3 0
2 PWM5IN
Bit 0
PWMIF
PWMIE
PWMLVL
PWM5INL PWM5ENA
= Unimplemented or Reserved
352
Freescale Semiconductor
12.3.2.1
Each PWM channel has an enable bit (PWMEx) to start its waveform output. When any of the PWMEx bits are set (PWMEx = 1), the associated PWM output is enabled immediately. However, the actual PWM waveform is not available on the associated PWM output until its clock source begins its next cycle due to the synchronization of PWMEx and the clock source. NOTE The rst PWM cycle after enabling the channel can be irregular. An exception to this is when channels are concatenated. After concatenated mode is enabled (CONxx bits set in PWMCTL register), enabling/disabling the corresponding 16-bit PWM channel is controlled by the low-order PWMEx bit. In this case, the high-order bytes PWMEx bits have no effect and their corresponding PWM output lines are disabled. While in run mode, if all six PWM channels are disabled (PWME5PWME0 = 0), the prescaler counter shuts off for power savings.
Module Base + 0x0000
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
4 PWME4
3 PWME3
2 PWME2
Freescale Semiconductor
353
0 PWME0
12.3.2.2
The starting polarity of each PWM channel waveform is determined by the associated PPOLx bit in the PWMPOL register. If the polarity bit is 1, the PWM channel output is high at the beginning of the cycle and then goes low when the duty count is reached. Conversely, if the polarity bit is 0 the output starts low and then goes high when the duty count is reached.
Module Base + 0x0001
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
Read: anytime Write: anytime NOTE PPOLx register bits can be written anytime. If the polarity is changed while a PWM signal is being generated, a truncated or stretched pulse can occur during the transition
Table 12-3. PWMPOL Field Descriptions
Field 5 PPOL5 4 PPOL4 Description Pulse Width Channel 5 Polarity 0 PWM channel 5 output is low at the beginning of the period, then goes high when the duty count is reached. 1 PWM channel 5 output is high at the beginning of the period, then goes low when the duty count is reached. Pulse Width Channel 4 Polarity 0 PWM channel 4 output is low at the beginning of the period, then goes high when the duty count is reached. 1 PWM channel 4 output is high at the beginning of the period, then goes low when the duty count is reached.
354
Freescale Semiconductor
12.3.2.3
Each PWM channel has a choice of two clocks to use as the clock source for that channel as described below.
Module Base + 0x0002
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
Read: anytime Write: anytime NOTE Register bits PCLK0 to PCLK5 can be written anytime. If a clock select is changed while a PWM signal is being generated, a truncated or stretched pulse can occur during the transition.
Freescale Semiconductor
355
12.3.2.4
This register selects the prescale clock source for clocks A and B independently.
Module Base + 0x0003
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
Read: anytime Write: anytime NOTE PCKB2PCKB0 and PCKA2PCKA0 register bits can be written anytime. If the clock prescale is changed while a PWM signal is being generated, a truncated or stretched pulse can occur during the transition.
356
Freescale Semiconductor
12.3.2.5
The PWMCAE register contains six control bits for the selection of center aligned outputs or left aligned outputs for each PWM channel. If the CAEx bit is set to a 1, the corresponding PWM output will be center aligned. If the CAEx bit is cleared, the corresponding PWM output will be left aligned. Reference Section 12.4.2.5, Left Aligned Outputs, and Section 12.4.2.6, Center Aligned Outputs, for a more detailed description of the PWM output modes.
Freescale Semiconductor
357
R W Reset
= Unimplemented or Reserved
Read: anytime Write: anytime NOTE Write these bits only when the corresponding channel is disabled.
Table 12-8. PWMCAE Field Descriptions
Field 5 CAE5 4 CAE4 3 CAE3 2 CAE2 1 CAE1 0 CAE0 Description Center Aligned Output Mode on Channel 5 0 Channel 5 operates in left aligned output mode. 1 Channel 5 operates in center aligned output mode. Center Aligned Output Mode on Channel 4 0 Channel 4 operates in left aligned output mode. 1 Channel 4 operates in center aligned output mode. Center Aligned Output Mode on Channel 3 1 Channel 3 operates in left aligned output mode. 1 Channel 3 operates in center aligned output mode. Center Aligned Output Mode on Channel 2 0 Channel 2 operates in left aligned output mode. 1 Channel 2 operates in center aligned output mode. Center Aligned Output Mode on Channel 1 0 Channel 1 operates in left aligned output mode. 1 Channel 1 operates in center aligned output mode. Center Aligned Output Mode on Channel 0 0 Channel 0 operates in left aligned output mode. 1 Channel 0 operates in center aligned output mode.
12.3.2.6
The PWMCTL register provides for various control of the PWM module.
358
Freescale Semiconductor
R W Reset
= Unimplemented or Reserved
Read: anytime Write: anytime There are three control bits for concatenation, each of which is used to concatenate a pair of PWM channels into one 16-bit channel. When channels 4 and 5 are concatenated, channel 4 registers become the high-order bytes of the double-byte channel. When channels 2 and 3 are concatenated, channel 2 registers become the high-order bytes of the double-byte channel. When channels 0 and 1 are concatenated, channel 0 registers become the high-order bytes of the double-byte channel. Reference Section 12.4.2.7, PWM 16-Bit Functions, for a more detailed description of the concatenation PWM function. NOTE Change these bits only when both corresponding channels are disabled.
Freescale Semiconductor
359
5 CON23
4 CON01
3 PSWAI
2 PFRZ
360
Freescale Semiconductor
12.3.2.7
This register is reserved for factory testing of the PWM module and is not available in normal modes.
Module Base + 0x0006
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
Read: always read 0x0000 in normal modes Write: unimplemented in normal modes NOTE Writing to this register when in special modes can alter the PWM functionality.
12.3.2.8
This register is reserved for factory testing of the PWM module and is not available in normal modes.
Module Base + 0x0007
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
Read: always read 0x0000 in normal modes Write: unimplemented in normal modes NOTE Writing to this register when in special modes can alter the PWM functionality.
Freescale Semiconductor
361
12.3.2.9
PWMSCLA is the programmable scale value used in scaling clock A to generate clock SA. Clock SA is generated by taking clock A, dividing it by the value in the PWMSCLA register and dividing that by two. Clock SA = Clock A / (2 * PWMSCLA) NOTE When PWMSCLA = 0x0000, PWMSCLA value is considered a full scale value of 256. Clock A is thus divided by 512. Any value written to this register will cause the scale counter to load the new scale value (PWMSCLA).
Module Base + 0x0008
7 6 5 4 3 2 1 0
Read: anytime Write: anytime (causes the scale counter to load the PWMSCLA value)
Read: anytime Write: anytime (causes the scale counter to load the PWMSCLB value).
362
Freescale Semiconductor
R W Reset
= Unimplemented or Reserved
R W Reset
= Unimplemented or Reserved
Read: always read 0x0000 in normal modes Write: unimplemented in normal modes NOTE Writing to these registers when in special modes can alter the PWM functionality.
Freescale Semiconductor
363
R W Reset
Bit 7 0 0
6 0 0
5 0 0
4 0 0
3 0 0
2 0 0
1 0 0
Bit 0 0 0
R W Reset
Bit 7 0 0
6 0 0
5 0 0
4 0 0
3 0 0
2 0 0
1 0 0
Bit 0 0 0
364
Freescale Semiconductor
R W Reset
Bit 7 0 0
6 0 0
5 0 0
4 0 0
3 0 0
2 0 0
1 0 0
Bit 0 0 0
R W Reset
Bit 7 0 0
6 0 0
5 0 0
4 0 0
3 0 0
2 0 0
1 0 0
Bit 0 0 0
R W Reset
Bit 7 0 0
6 0 0
5 0 0
4 0 0
3 0 0
2 0 0
1 0 0
Bit 0 0 0
R W Reset
Bit 7 0 0
6 0 0
5 0 0
4 0 0
3 0 0
2 0 0
1 0 0
Bit 0 0 0
Read: anytime Write: anytime (any value written causes PWM counter to be reset to 0x0000).
Freescale Semiconductor
365
In this way, the output of the PWM will always be either the old waveform or the new waveform, not some variation in between. If the channel is not enabled, then writes to the period register will go directly to the latches as well as the buffer. NOTE Reads of this register return the most recent value written. Reads do not necessarily return the value of the currently active period due to the double buffering scheme. Reference Section 12.4.2.3, PWM Period and Duty, for more information. To calculate the output period, take the selected clock source period for the channel of interest (A, B, SA, or SB) and multiply it by the value in the period register for that channel: Left aligned output (CAEx = 0) PWMx period = channel clock period * PWMPERx center aligned output (CAEx = 1) PWMx period = channel clock period * (2 * PWMPERx) For boundary case programming values, please refer to Section 12.4.2.8, PWM Boundary Cases.
Module Base + 0x0012
7 6 5 4 3 2 1 0
366
Freescale Semiconductor
Freescale Semiconductor
367
NOTE Reads of this register return the most recent value written. Reads do not necessarily return the value of the currently active duty due to the double buffering scheme. Reference Section 12.4.2.3, PWM Period and Duty, for more information. NOTE Depending on the polarity bit, the duty registers will contain the count of either the high time or the low time. If the polarity bit is 1, the output starts high and then goes low when the duty count is reached, so the duty registers contain a count of the high time. If the polarity bit is 0, the output starts low and then goes high when the duty count is reached, so the duty registers contain a count of the low time. To calculate the output duty cycle (high time as a % of period) for a particular channel: Polarity = 0 (PPOLx = 0) Duty cycle = [(PWMPERx PWMDTYx)/PWMPERx] * 100% Polarity = 1 (PPOLx = 1) Duty cycle = [PWMDTYx / PWMPERx] * 100% For boundary case programming values, please refer to Section 12.4.2.8, PWM Boundary Cases.
Module Base + 0x0018
7 6 5 4 3 2 1 0
368
Freescale Semiconductor
0 PWMLVL PWMRSTRT 0 0
= Unimplemented or Reserved
Freescale Semiconductor
369
6 PWMIE
5 PWM Restart The PWM can only be restarted if the PWM channel input 5 is deasserted. After writing a logic 1 PWMRSTRT to the PWMRSTRT bit (trigger event) the PWM channels start running after the corresponding counter passes next counter = 0 phase. Also, if the PWM5ENA bit is reset to 0, the PWM do not start before the counter passes 0x0000. The bit is always read as 0. 4 PWMLVL PWM Shutdown Output Level If active level as dened by the PWM5IN input, gets asserted all enabled PWM channels are immediately driven to the level dened by PWMLVL. 0 PWM outputs are forced to 0 1 PWM outputs are forced to 1. PWM Channel 5 Input Status This reects the current status of the PWM5 pin. PWM Shutdown Active Input Level for Channel 5 If the emergency shutdown feature is enabled (PWM5ENA = 1), this bit determines the active level of the PWM5 channel. 0 Active level is low 1 Active level is high
2 PWM5IN 1 PWM5INL
0 PWM Emergency Shutdown Enable If this bit is logic 1 the pin associated with channel 5 is forced to input PWM5ENA and the emergency shutdown feature is enabled. All the other bits in this register are meaningful only if PWM5ENA = 1. 0 PWM emergency feature disabled. 1 PWM emergency feature is enabled.
370
Freescale Semiconductor
12.4
12.4.1
Functional Description
PWM Clock Select
There are four available clocks called clock A, clock B, clock SA (scaled A), and clock SB (scaled B). These four clocks are based on the bus clock. Clock A and B can be software selected to be 1, 1/2, 1/4, 1/8,..., 1/64, 1/128 times the bus clock. Clock SA uses clock A as an input and divides it further with a reloadable counter. Similarly, clock SB uses clock B as an input and divides it further with a reloadable counter. The rates available for clock SA are software selectable to be clock A divided by 2, 4, 6, 8, ..., or 512 in increments of divide by 2. Similar rates are available for clock SB. Each PWM channel has the capability of selecting one of two clocks, either the pre-scaled clock (clock A or B) or the scaled clock (clock SA or SB). The block diagram in Figure 12-34 shows the four different clocks and how the scaled clocks are created.
12.4.1.1
Prescale
The input clock to the PWM prescaler is the bus clock. It can be disabled whenever the part is in freeze mode by setting the PFRZ bit in the PWMCTL register. If this bit is set, whenever the MCU is in freeze mode the input clock to the prescaler is disabled. This is useful for emulation in order to freeze the PWM. The input clock can also be disabled when all six PWM channels are disabled (PWME5PWME0 = 0) This is useful for reducing power by disabling the prescale counter. Clock A and clock B are scaled values of the input clock. The value is software selectable for both clock A and clock B and has options of 1, 1/2, 1/4, 1/8, 1/16, 1/32, 1/64, or 1/128 times the bus clock. The value selected for clock A is determined by the PCKA2, PCKA1, and PCKA0 bits in the PWMPRCLK register. The value selected for clock B is determined by the PCKB2, PCKB1, and PCKB0 bits also in the PWMPRCLK register.
Freescale Semiconductor
371
Clock A
M U X PCLK0
Clock to PWM Ch 0
Clock A/2, A/4, A/6,....A/512 PCKA2 PCKA1 PCKA0 Count = 1 Load PWMSCLA M U X PCLK2 M U X PCLK3 Clock B M U X PCLK4 8-Bit Down Counter Count = 1 Load PWMSCLB DIV 2 Clock SB M U X PCLK5 Clock to PWM Ch 5 Clock to PWM Ch 4 Clock to PWM Ch 3 DIV 2 Clock SA
M U X PCLK1 M U X
Clock to PWM Ch 1
Clock to PWM Ch 2
8 16 32 64 128
PWME5:0
PRESCALE
SCALE
CLOCK SELECT
372
Freescale Semiconductor
12.4.1.2
Clock Scale
The scaled A clock uses clock A as an input and divides it further with a user programmable value and then divides this by 2. The scaled B clock uses clock B as an input and divides it further with a user programmable value and then divides this by 2. The rates available for clock SA are software selectable to be clock A divided by 2, 4, 6, 8, ..., or 512 in increments of divide by 2. Similar rates are available for clock SB. Clock A is used as an input to an 8-bit down counter. This down counter loads a user programmable scale value from the scale register (PWMSCLA). When the down counter reaches 1, two things happen; a pulse is output and the 8-bit counter is re-loaded. The output signal from this circuit is further divided by two. This gives a greater range with only a slight reduction in granularity. Clock SA equals clock A divided by two times the value in the PWMSCLA register. NOTE Clock SA = Clock A / (2 * PWMSCLA) When PWMSCLA = 0x0000, PWMSCLA value is considered a full scale value of 256. Clock A is thus divided by 512. Similarly, clock B is used as an input to an 8-bit down counter followed by a divide by two producing clock SB. Thus, clock SB equals clock B divided by two times the value in the PWMSCLB register. NOTE Clock SB = Clock B / (2 * PWMSCLB) When PWMSCLB = 0x0000, PWMSCLB value is considered a full scale value of 256. Clock B is thus divided by 512. As an example, consider the case in which the user writes 0x00FF into the PWMSCLA register. Clock A for this case will be bus clock divided by 4. A pulse will occur at a rate of once every 255 x 4 bus cycles. Passing this through the divide by two circuit produces a clock signal at a bus clock divided by 2040 rate. Similarly, a value of 0x0001 in the PWMSCLA register when clock A is bus clock divided by 4 will produce a bus clock divided by 8 rate. Writing to PWMSCLA or PWMSCLB causes the associated 8-bit down counter to be re-loaded. Otherwise, when changing rates the counter would have to count down to 0x0001 before counting at the proper rate. Forcing the associated counter to re-load the scale register value every time PWMSCLA or PWMSCLB is written prevents this. NOTE Writing to the scale registers while channels are operating can cause irregularities in the PWM outputs.
Freescale Semiconductor
373
12.4.1.3
Clock Select
Each PWM channel has the capability of selecting one of two clocks. For channels 0, 1, 4, and 5 the clock choices are clock A or clock SA. For channels 2 and 3 the choices are clock B or clock SB. The clock selection is done with the PCLKx control bits in the PWMCLK register. NOTE Changing clock control bits while channels are operating can cause irregularities in the PWM outputs.
12.4.2
The main part of the PWM module are the actual timers. Each of the timer channels has a counter, a period register and a duty register (each are 8 bit). The waveform output period is controlled by a match between the period register and the value in the counter. The duty is controlled by a match between the duty register and the counter value and causes the state of the output to change during the period. The starting polarity of the output is also selectable on a per channel basis. Figure 12-35 shows a block diagram for PWM timer.
Clock Source 8-Bit Counter GATE (clock edge sync) 8-Bit Compare = T PWMDTYx R 8-Bit Compare = PWMPERx PPOLx Q Q PWMCNTx From Port PWMP Data Register
up/down reset
M U X
M U X
To Pin Driver
Q Q
T R
CAEx
PWMEx
374
Freescale Semiconductor
12.4.2.1
PWM Enable
Each PWM channel has an enable bit (PWMEx) to start its waveform output. When any of the PWMEx bits are set (PWMEx = 1), the associated PWM output signal is enabled immediately. However, the actual PWM waveform is not available on the associated PWM output until its clock source begins its next cycle due to the synchronization of PWMEx and the clock source. An exception to this is when channels are concatenated. Refer to Section 12.4.2.7, PWM 16-Bit Functions, for more detail. NOTE The rst PWM cycle after enabling the channel can be irregular. On the front end of the PWM timer, the clock is enabled to the PWM circuit by the PWMEx bit being high. There is an edge-synchronizing circuit to guarantee that the clock will only be enabled or disabled at an edge. When the channel is disabled (PWMEx = 0), the counter for the channel does not count.
12.4.2.2
PWM Polarity
Each channel has a polarity bit to allow starting a waveform cycle with a high or low signal. This is shown on the block diagram as a mux select of either the Q output or the Q output of the PWM output flip-flop. When one of the bits in the PWMPOL register is set, the associated PWM channel output is high at the beginning of the waveform, then goes low when the duty count is reached. Conversely, if the polarity bit is 0, the output starts low and then goes high when the duty count is reached.
12.4.2.3
Dedicated period and duty registers exist for each channel and are double buffered so that if they change while the channel is enabled, the change will NOT take effect until one of the following occurs: The effective period ends The counter is written (counter resets to 0x0000) The channel is disabled In this way, the output of the PWM will always be either the old waveform or the new waveform, not some variation in between. If the channel is not enabled, then writes to the period and duty registers will go directly to the latches as well as the buffer. A change in duty or period can be forced into effect immediately by writing the new value to the duty and/or period registers and then writing to the counter. This forces the counter to reset and the new duty and/or period values to be latched. In addition, because the counter is readable it is possible to know where the count is with respect to the duty value and software can be used to make adjustments. NOTE When forcing a new period or duty into effect immediately, an irregular PWM cycle can occur. Depending on the polarity bit, the duty registers will contain the count of either the high time or the low time.
Freescale Semiconductor
375
12.4.2.4
Each channel has a dedicated 8-bit up/down counter which runs at the rate of the selected clock source (reference Figure 12-34 for the available clock sources and rates). The counter compares to two registers, a duty register and a period register as shown in Figure 12-35. When the PWM counter matches the duty register the output flip-flop changes state causing the PWM waveform to also change state. A match between the PWM counter and the period register behaves differently depending on what output mode is selected as shown in Figure 12-35 and described in Section 12.4.2.5, Left Aligned Outputs, and Section 12.4.2.6, Center Aligned Outputs. Each channel counter can be read at anytime without affecting the count or the operation of the PWM channel. Any value written to the counter causes the counter to reset to 0x0000, the counter direction to be set to up, the immediate load of both duty and period registers with values from the buffers, and the output to change according to the polarity bit. When the channel is disabled (PWMEx = 0), the counter stops. When a channel becomes enabled (PWMEx = 1), the associated PWM counter continues from the count in the PWMCNTx register. This allows the waveform to resume when the channel is re-enabled. When the channel is disabled, writing 0 to the period register will cause the counter to reset on the next selected clock. NOTE If the user wants to start a new clean PWM waveform without any history from the old waveform, the user must write to channel counter (PWMCNTx) prior to enabling the PWM channel (PWMEx = 1). Generally, writes to the counter are done prior to enabling a channel to start from a known state. However, writing a counter can also be done while the PWM channel is enabled (counting). The effect is similar to writing the counter when the channel is disabled except that the new period is started immediately with the output set according to the polarity bit. NOTE Writing to the counter while the channel is enabled can cause an irregular PWM cycle to occur. The counter is cleared at the end of the effective period (see Section 12.4.2.5, Left Aligned Outputs, and Section 12.4.2.6, Center Aligned Outputs, for more details).
Table 12-11. PWM Timer Counter Conditions
Counter Clears (0x0000) When PWMCNTx register written to any value Effective period ends Counter Counts When PWM channel is enabled (PWMEx = 1). Counts from last value in PWMCNTx. Counter Stops When PWM channel is disabled (PWMEx = 0)
376
Freescale Semiconductor
12.4.2.5
The PWM timer provides the choice of two types of outputs, left aligned or center aligned outputs. They are selected with the CAEx bits in the PWMCAE register. If the CAEx bit is cleared (CAEx = 0), the corresponding PWM output will be left aligned. In left aligned output mode, the 8-bit counter is configured as an up counter only. It compares to two registers, a duty register and a period register as shown in the block diagram in Figure 12-35. When the PWM counter matches the duty register the output flip-flop changes state causing the PWM waveform to also change state. A match between the PWM counter and the period register resets the counter and the output flip-flop as shown in Figure 12-35 as well as performing a load from the double buffer period and duty register to the associated registers as described in Section 12.4.2.3, PWM Period and Duty. The counter counts from 0 to the value in the period register 1. NOTE Changing the PWM output mode from left aligned output to center aligned output (or vice versa) while channels are operating can cause irregularities in the PWM output. It is recommended to program the output mode before enabling the PWM channel.
PPOLx = 0
To calculate the output frequency in left aligned output mode for a particular channel, take the selected clock source frequency for the channel (A, B, SA, or SB) and divide it by the value in the period register for that channel. PWMx frequency = clock (A, B, SA, or SB) / PWMPERx PWMx duty cycle (high time as a% of period): Polarity = 0 (PPOLx = 0) Duty cycle = [(PWMPERx-PWMDTYx)/PWMPERx] * 100% Polarity = 1 (PPOLx = 1) Duty cycle = [PWMDTYx / PWMPERx] * 100% As an example of a left aligned output, consider the following case: Clock source = bus clock, where bus clock = 10 MHz (100 ns period) PPOLx = 0 PWMPERx = 4 PWMDTYx = 1 PWMx frequency = 10 MHz/4 = 2.5 MHz PWMx period = 400 ns PWMx duty cycle = 3/4 *100% = 75%
Freescale Semiconductor
377
12.4.2.6
For center aligned output mode selection, set the CAEx bit (CAEx = 1) in the PWMCAE register and the corresponding PWM output will be center aligned. The 8-bit counter operates as an up/down counter in this mode and is set to up whenever the counter is equal to 0x0000. The counter compares to two registers, a duty register and a period register as shown in the block diagram in Figure 12-35. When the PWM counter matches the duty register the output flip-flop changes state causing the PWM waveform to also change state. A match between the PWM counter and the period register changes the counter direction from an up-count to a down-count. When the PWM counter decrements and matches the duty register again, the output flip-flop changes state causing the PWM output to also change state. When the PWM counter decrements and reaches 0, the counter direction changes from a down-count back to an up-count and a load from the double buffer period and duty registers to the associated registers is performed as described in Section 12.4.2.3, PWM Period and Duty. The counter counts from 0 up to the value in the period register and then back down to 0. Thus the effective period is PWMPERx*2. NOTE Changing the PWM output mode from left aligned output to center aligned output (or vice versa) while channels are operating can cause irregularities in the PWM output. It is recommended to program the output mode before enabling the PWM channel.
PPOLx = 0
378
Freescale Semiconductor
To calculate the output frequency in center aligned output mode for a particular channel, take the selected clock source frequency for the channel (A, B, SA, or SB) and divide it by twice the value in the period register for that channel. PWMx frequency = clock (A, B, SA, or SB) / (2*PWMPERx) PWMx duty cycle (high time as a% of period): Polarity = 0 (PPOLx = 0) Duty cycle = [(PWMPERx-PWMDTYx)/PWMPERx] * 100% Polarity = 1 (PPOLx = 1) Duty cycle = [PWMDTYx / PWMPERx] * 100% As an example of a center aligned output, consider the following case: Clock source = bus clock, where bus clock = 10 MHz (100 ns period) PPOLx = 0 PWMPERx = 4 PWMDTYx = 1 PWMx frequency = 10 MHz/8 = 1.25 MHz PWMx period = 800 ns PWMx duty cycle = 3/4 *100% = 75% Shown below is the output waveform generated.
E = 100 ns E = 100 ns
12.4.2.7
The PWM timer also has the option of generating 6-channels of 8-bits or 3-channels of 16-bits for greater PWM resolution}. This 16-bit channel option is achieved through the concatenation of two 8-bit channels. The PWMCTL register contains three control bits, each of which is used to concatenate a pair of PWM channels into one 16-bit channel. Channels 4 and 5 are concatenated with the CON45 bit, channels 2 and 3 are concatenated with the CON23 bit, and channels 0 and 1 are concatenated with the CON01 bit. NOTE Change these bits only when both corresponding channels are disabled. When channels 4 and 5 are concatenated, channel 4 registers become the high-order bytes of the double byte channel as shown in Figure 12-40. Similarly, when channels 2 and 3 are concatenated, channel 2 registers become the high-order bytes of the double byte channel. When channels 0 and 1 are concatenated, channel 0 registers become the high-order bytes of the double byte channel.
Freescale Semiconductor
379
Period/Duty Compare
PWM5
Period/Duty Compare
PWM3
Period/Duty Compare
PWM1
When using the 16-bit concatenated mode, the clock source is determined by the low-order 8-bit channel clock select control bits. That is channel 5 when channels 4 and 5 are concatenated, channel 3 when channels 2 and 3 are concatenated, and channel 1 when channels 0 and 1 are concatenated. The resulting PWM is output to the pins of the corresponding low-order 8-bit channel as also shown in Figure 12-40. The polarity of the resulting PWM output is controlled by the PPOLx bit of the corresponding low-order 8-bit channel as well. After concatenated mode is enabled (CONxx bits set in PWMCTL register), enabling/disabling the corresponding 16-bit PWM channel is controlled by the low-order PWMEx bit. In this case, the high-order bytes PWMEx bits have no effect and their corresponding PWM output is disabled. In concatenated mode, writes to the 16-bit counter by using a 16-bit access or writes to either the low or high-order byte of the counter will reset the 16-bit counter. Reads of the 16-bit counter must be made by 16-bit access to maintain data coherency. Either left aligned or center aligned output mode can be used in concatenated mode and is controlled by the low-order CAEx bit. The high-order CAEx bit has no effect.
380
Freescale Semiconductor
Table 12-12 is used to summarize which channels are used to set the various control bits when in 16-bit mode.
Table 12-12. 16-bit Concatenation Mode Summary
CONxx CON45 CON23 CON01 PWMEx PWME5 PWME3 PWME1 PPOLx PPOL5 PPOL3 PPOL1 PCLKx PCLK5 PCLK3 PCLK1 CAEx CAE5 CAE3 CAE1 PWMx Output PWM5 PWM3 PWM1
12.4.2.8
Table 12-13 summarizes the boundary conditions for the PWM regardless of the output mode (left aligned or center aligned) and 8-bit (normal) or 16-bit (concatenation):
Table 12-13. PWM Boundary Cases
PWMDTYx 0x0000 (indicates no duty) 0x0000 (indicates no duty) XX XX >= PWMPERx >= PWMPERx PWMPERx >0x0000 >0x0000 0x0000(1) (indicates no period) 0x00001 (indicates no period) XX XX PPOLx 1 0 1 0 1 0 PWMx Output Always Low Always High Always High Always Low Always High Always Low
12.5
Resets
The reset state of each individual bit is listed within the register description section (see Section 12.3, Memory Map and Register Denition, which details the registers and their bit-elds. All special functions or modes which are initialized during or just following reset are described within this section. The 8-bit up/down counter is congured as an up counter out of reset. All the channels are disabled and all the counters dont count.
12.6
Interrupts
The PWM8B6CV1 module has only one interrupt which is generated at the time of emergency shutdown, if the corresponding enable bit (PWMIE) is set. This bit is the enable for the interrupt. The interrupt ag PWMIF is set whenever the input level of the PWM5 channel changes while PWM5ENA=1 or when PWMENA is being asserted while the level at PWM5 is active. A description of the registers involved and affected due to this interrupt is explained in Section 12.3.2.15, PWM Shutdown Register (PWMSDN).
Freescale Semiconductor
381
382
Freescale Semiconductor
13.1.1
Glossary
IRQ Interrupt Request LSB Least Signicant Bit MSB Most Signicant Bit NRZ Non-Return-to-Zero RZI Return-to-Zero-Inverted RXD Receive Pin SCI Serial Communication Interface TXD Transmit Pin
13.1.2
Features
The SCI includes these distinctive features: Full-duplex operation Standard mark/space non-return-to-zero (NRZ) format 13-bit baud rate selection Programmable 8-bit or 9-bit data format Separately enabled transmitter and receiver Programmable transmitter output parity Two receiver wake up methods: Idle line wake-up Address mark wake-up Interrupt-driven operation with eight ags: Transmitter empty
Freescale Semiconductor
383
Transmission complete Receiver full Idle receiver input Receiver overrun Noise error Framing error Parity error Receiver framing error detection Hardware parity checking 1/16 bit-time noise detection
13.1.3
Modes of Operation
The SCI operation is the same independent of device resource mapping and bus interface mode. Different power modes are available to facilitate power saving.
13.1.3.1
Run Mode
13.1.3.2
Wait Mode
SCI operation in wait mode depends on the state of the SCISWAI bit in the SCI control register 1 (SCICR1). If SCISWAI is clear, the SCI operates normally when the CPU is in wait mode. If SCISWAI is set, SCI clock generation ceases and the SCI module enters a power-conservation state when the CPU is in wait mode. Setting SCISWAI does not affect the state of the receiver enable bit, RE, or the transmitter enable bit, TE. If SCISWAI is set, any transmission or reception in progress stops at wait mode entry. The transmission or reception resumes when either an internal or external interrupt brings the CPU out of wait mode. Exiting wait mode by reset aborts any transmission or reception in progress and resets the SCI.
13.1.3.3
Stop Mode
The SCI is inactive during stop mode for reduced power consumption. The STOP instruction does not affect the SCI register states, but the SCI module clock will be disabled. The SCI operation resumes from where it left off after an external interrupt brings the CPU out of stop mode. Exiting stop mode by reset aborts any transmission or reception in progress and resets the SCI.
384
Freescale Semiconductor
13.1.4
Block Diagram
Figure 13-1 is a high level block diagram of the SCI module, showing the interaction of various functional blocks.
RX DATA IN
RDR/OR IRQ
BAUD GENERATOR
16
TDRE IRQ
TC IRQ
TXDATA OUT
13.2
13.2.1
13.2.2
Freescale Semiconductor
ORING
IRQ TO CPU
385
13.3
13.3.1
The memory map for the SCI module is given below in Figure 13-2. The Address listed for each register is the address offset. The total address for each register is the sum of the base address for the SCI module and the address offset for each register.
Address 0x0000 0x0001 0x0002 0x0003 0x0004 0x0005 0x0006 0x0007 Name SCIBDH SCIBDL SCICR1 SCICR2 SCISR1 SCISR2 SCIDRH SCIDRL R W R W R W R W R W R W R W R W Bit 7 0 6 0 5 0 4 SBR12 SBR4 M ILIE IDLE 0 0 R4 T4 3 SBR11 SBR3 WAKE TE OR 0 0 R3 T3 2 SBR10 SBR2 ILT RE NF 1 SBR9 SBR1 PE RWU FE Bit 0 SBR8 SBR0 PT SBK PF RAF 0 R0 T0
BRK13 0 R2 T2
TXDIR 0 R1 T1
T8 R6 T6
= Unimplemented or Reserved
13.3.2
Register Descriptions
This section consists of register descriptions in address order. Each description includes a standard register diagram with an associated gure number. Writes to a reserved register location do not have any effect and reads of these locations return a zero. Details of register bit and eld function follow the register diagrams, in bit order.
386
Freescale Semiconductor
13.3.2.1
R W Reset
= Unimplemented or Reserved
The SCI Baud Rate Register is used by the counter to determine the baud rate of the SCI. The formula for calculating the baud rate is: SCI baud rate = SCI module clock / (16 x BR) where: BR is the content of the SCI baud rate registers, bits SBR12 through SBR0. The baud rate registers can contain a value from 1 to 8191. Read: Anytime. If only SCIBDH is written to, a read will not return the correct data until SCIBDL is written to as well, following a write to SCIBDH. Write: Anytime
Table 13-1. SCIBDH AND SCIBDL Field Descriptions
Field 40 70 SBR[12:0] Description SCI Baud Rate Bits The baud rate for the SCI is determined by these 13 bits. Note: The baud rate generator is disabled until the TE bit or the RE bit is set for the rst time after reset. The baud rate generator is disabled when BR = 0. Writing to SCIBDH has no effect without writing to SCIBDL, since writing to SCIBDH puts the data in a temporary location until SCIBDL is written to.
Freescale Semiconductor
387
13.3.2.2
6 SCISWAI 5 RSRC
4 M 3 WAKE
2 ILT
1 PE
0 PT
388
Freescale Semiconductor
13.3.2.3
6 TCIE
5 RIE
4 ILIE 3 TE
2 RE
Freescale Semiconductor
389
0 SBK
13.3.2.4
The SCISR1 and SCISR2 registers provides inputs to the MCU for generation of SCI interrupts. Also, these registers can be polled by the MCU to check the status of these bits. The ag-clearing procedures require that the status register be read followed by a read or write to the SCI Data Register.It is permissible to execute other instructions between the two steps as long as it does not compromise the handling of I/O, but the order of operations is important for ag clearing.
Module Base + 0x_0004
7 6 5 4 3 2 1 0
R W Reset
TDRE
TC
RDRF
IDLE
OR
NF
FE
PF
= Unimplemented or Reserved
6 TC
390
Freescale Semiconductor
4 IDLE
3 OR
2 NF
1 FE
0 PF
Freescale Semiconductor
391
13.3.2.5
R W Reset
0 BK13 TXDIR 0
RAF
= Unimplemented or Reserved
Read: Anytime Write: Anytime; writing accesses SCI status register 2; writing to any bits except TXDIR and BRK13 (SCISR2[1] & [2]) has no effect
Table 13-6. SCISR2 Field Descriptions
Field 2 BK13 Description Break Transmit Character Length This bit determines whether the transmit break character is 10 or 11 bit respectively 13 or 14 bits long. The detection of a framing error is not affected by this bit. 0 Break Character is 10 or 11 bit long 1 Break character is 13 or 14 bit long Transmitter Pin Data Direction in Single-Wire Mode. This bit determines whether the TXD pin is going to be used as an input or output, in the Single-Wire mode of operation. This bit is only relevant in the Single-Wire mode of operation. 0 TXD pin to be used as an input in Single-Wire mode 1 TXD pin to be used as an output in Single-Wire mode Receiver Active Flag RAF is set when the receiver detects a logic 0 during the RT1 time period of the start bit search. RAF is cleared when the receiver detects an idle character. 0 No reception in progress 1 Reception in progress
1 TXDIR
0 RAF
392
Freescale Semiconductor
13.3.2.6
R W Reset
R8 T8 0 0
R W Reset
R7 T7 0
R6 T6 0
R5 T5 0
R4 T4 0
R3 T3 0
R2 T2 0
R1 T1 0
R0 T0 0
= Unimplemented or Reserved
Read: Anytime; reading accesses SCI receive data register Write: Anytime; writing accesses SCI transmit data register; writing to R8 has no effect
Table 13-7. SCIDRH AND SCIDRL Field Descriptions
Field 7 R8 6 T8 70 R[7:0] T[7:0] Description Received Bit 8 R8 is the ninth data bit received when the SCI is congured for 9-bit data format (M = 1). Transmit Bit 8 T8 is the ninth data bit transmitted when the SCI is congured for 9-bit data format (M = 1). Received Bits Received bits seven through zero for 9-bit or 8-bit data formats Transmit Bits Transmit bits seven through zero for 9-bit or 8-bit formats
NOTE If the value of T8 is the same as in the previous transmission, T8 does not have to be rewritten.The same value is transmitted until T8 is rewritten In 8-bit data format, only SCI data register low (SCIDRL) needs to be accessed. When transmitting in 9-bit data format and using 8-bit write instructions, write rst to SCI data register high (SCIDRH), then SCIDRL.
Freescale Semiconductor
393
13.4
Functional Description
This section provides a complete functional description of the SCI block, detailing the operation of the design from the end user perspective in a number of subsections. Figure 13-9 shows the structure of the SCI module. The SCI allows full duplex, asynchronous, NRZ serial communication between the CPU and remote devices, including other CPUs. The SCI transmitter and receiver operate independently, although they use the same baud rate generator. The CPU monitors the status of the SCI, writes the data to be transmitted, and processes received data.
SCI DATA REGISTER R8 RXD RECEIVE SHIFT REGISTER RE RECEIVE AND WAKEUP CONTROL RWU LOOPS RSRC M BUS CLOCK BAUD RATE GENERATOR WAKE DATA FORMAT CONTROL ILT PE PT TE 16 TRANSMIT CONTROL LOOPS SBK RSRC T8 TRANSMIT SHIFT REGISTER SCI DATA REGISTER TDRE TC TCIE TIE RIE NF FE PF RAF IDLE RDRF RDRF/OR IRQ IDLE IRQ OR ILIE
SBR12SBR0
IRQ TO CPU
394
Freescale Semiconductor
TC IRQ
13.4.1
Data Format
The SCI uses the standard NRZ mark/space data format illustrated in Figure 13-10 below.
8-BIT DATA FORMAT BIT M IN SCICR1 CLEAR START BIT BIT 0 BIT 1 BIT 2 BIT 3 BIT 4 BIT 5 BIT 6 PARITY OR DATA BIT BIT 7 STOP BIT PARITY OR DATA BIT BIT 7 BIT 8 STOP BIT
9-BIT DATA FORMAT BIT M IN SCICR1 SET START BIT BIT 0 BIT 1 BIT 2 BIT 3 BIT 4 BIT 5 BIT 6
Each data character is contained in a frame that includes a start bit, eight or nine data bits, and a stop bit. Clearing the M bit in SCI control register 1 congures the SCI for 8-bit data characters.A frame with eight data bits has a total of 10 bits. Setting the M bit congures the SCI for nine-bit data characters. A frame with nine data bits has a total of 11 bits
Table 13-8. Example of 8-Bit Data Formats
Start Bit 1 1 Data Bits 8 7 Address Bits 0 0 Parity Bits 0 1 Stop Bit 1 1
0 1 1 7 1(1) 1. The address bit identies the frame as an address character. See Section 13.4.4.6, Receiver Wakeup.
When the SCI is congured for 9-bit data characters, the ninth data bit is the T8 bit in SCI data register high (SCIDRH). It remains unchanged after transmission and can be used repeatedly without rewriting it. A frame with nine data bits has a total of 11 bits.
Table 13-9. Example of 9-Bit Data Formats
Start Bit 1 1 Data Bits 9 8 Address Bits 0 0
(1)
Parity Bits 0 1
Stop Bit 1 1
0 1 1 8 1 1. The address bit identies the frame as an address character. See Section 13.4.4.6, Receiver Wakeup.
Freescale Semiconductor
395
13.4.2
A 13-bit modulus counter in the baud rate generator derives the baud rate for both the receiver and the transmitter. The value from 0 to 8191 written to the SBR12SBR0 bits determines the module clock divisor. The SBR bits are in the SCI baud rate registers (SCIBDH and SCIBDL). The baud rate clock is synchronized with the bus clock and drives the receiver. The baud rate clock divided by 16 drives the transmitter. The receiver has an acquisition rate of 16 samples per bit time. Baud rate generation is subject to one source of error: Integer division of the module clock may not give the exact target frequency. Table 13-10 lists some examples of achieving target baud rates with a module clock frequency of 25 MHz SCI baud rate = SCI module clock / (16 * SCIBR[12:0])
Table 13-10. Baud Rates (Example: Module Clock = 25 MHz)
Bits SBR[12-0] 41 81 163 326 651 1302 2604 5208 Receiver Clock (Hz) 609,756.1 308,642.0 153,374.2 76,687.1 38,402.5 19,201.2 9600.6 4800.0 Transmitter Clock (Hz) 38,109.8 19,290.1 9585.9 4792.9 2400.2 1200.1 600.0 300.0 Target Baud Rate 38,400 19,200 9600 4800 2400 1200 600 300 Error (%) .76 .47 .16 .15 .01 .01 .00 .00
396
Freescale Semiconductor
13.4.3
Transmitter
INTERNAL BUS
BUS CLOCK
BAUD DIVIDER
16
START
SBR12SBR0 STOP
TXD
MSB
TO RXD
PT
PARITY GENERATION
SHIFT ENABLE
PE
LOOPS RSRC
TRANSMITTER CONTROL
TE
SBK
TC INTERRUPT REQUEST
13.4.3.1
The SCI transmitter can accommodate either 8-bit or 9-bit data characters. The state of the M bit in SCI control register 1 (SCICR1) determines the length of data characters. When transmitting 9-bit data, bit T8 in SCI data register high (SCIDRH) is the ninth bit (bit 8).
13.4.3.2
Character Transmission
To transmit data, the MCU writes the data bits to the SCI data registers (SCIDRH/SCIDRL), which in turn are transferred to the transmitter shift register. The transmit shift register then shifts a frame out through the Tx output signal, after it has prefaced them with a start bit and appended them with a stop bit. The SCI data registers (SCIDRH and SCIDRL) are the write-only buffers between the internal data bus and the transmit shift register. The SCI also sets a ag, the transmit data register empty ag (TDRE), every time it transfers data from the buffer (SCIDRH/L) to the transmitter shift register.The transmit driver routine may respond to this ag by
Freescale Semiconductor
397
writing another byte to the Transmitter buffer (SCIDRH/SCIDRL), while the shift register is still shifting out the rst byte. To initiate an SCI transmission: 1. Congure the SCI: a) Select a baud rate. Write this value to the SCI baud registers (SCIBDH/L) to begin the baud rate generator. Remember that the baud rate generator is disabled when the baud rate is zero. Writing to the SCIBDH has no effect without also writing to SCIBDL. b) Write to SCICR1 to congure word length, parity, and other conguration bits (LOOPS,RSRC,M,WAKE,ILT,PE,PT). c) Enable the transmitter, interrupts, receive, and wake up as required, by writing to the SCICR2 register bits (TIE,TCIE,RIE,ILIE,TE,RE,RWU,SBK). A preamble or idle character will now be shifted out of the transmitter shift register. 2. Transmit Procedure for Each Byte: a. Poll the TDRE flag by reading the SCISR1 or responding to the TDRE interrupt. Keep in mind that the TDRE bit resets to one. d) If the TDRE ag is set, write the data to be transmitted to SCIDRH/L, where the ninth bit is written to the T8 bit in SCIDRH if the SCI is in 9-bit data format. A new transmission will not result until the TDRE ag has been cleared. 3. Repeat step 2 for each subsequent transmission. NOTE The TDRE ag is set when the shift register is loaded with the next data to be transmitted from SCIDRH/L, which happens, generally speaking, a little over half-way through the stop bit of the previous frame. Specically, this transfer occurs 9/16ths of a bit time AFTER the start of the stop bit of the previous frame. Writing the TE bit from 0 to a 1 automatically loads the transmit shift register with a preamble of 10 logic 1s (if M = 0) or 11 logic 1s (if M = 1). After the preamble shifts out, control logic transfers the data from the SCI data register into the transmit shift register. A logic 0 start bit automatically goes into the least signicant bit position of the transmit shift register. A logic 1 stop bit goes into the most signicant bit position. Hardware supports odd or even parity. When parity is enabled, the most signicant bit (msb) of the data character is the parity bit. The transmit data register empty ag, TDRE, in SCI status register 1 (SCISR1) becomes set when the SCI data register transfers a byte to the transmit shift register. The TDRE ag indicates that the SCI data register can accept new data from the internal data bus. If the transmit interrupt enable bit, TIE, in SCI control register 2 (SCICR2) is also set, the TDRE ag generates a transmitter interrupt request. When the transmit shift register is not transmitting a frame, the Tx output signal goes to the idle condition, logic 1. If at any time software clears the TE bit in SCI control register 2 (SCICR2), the transmitter enable signal goes low and the transmit signal goes idle.
398
Freescale Semiconductor
If software clears TE while a transmission is in progress (TC = 0), the frame in the transmit shift register continues to shift out. To avoid accidentally cutting off the last frame in a message, always wait for TDRE to go high after the last frame before clearing TE. To separate messages with preambles with minimum idle line time, use this sequence between messages: 1. Write the last byte of the rst message to SCIDRH/L. 2. Wait for the TDRE ag to go high, indicating the transfer of the last frame to the transmit shift register. 3. Queue a preamble by clearing and then setting the TE bit. 4. Write the rst byte of the second message to SCIDRH/L.
13.4.3.3
Break Characters
Writing a logic 1 to the send break bit, SBK, in SCI control register 2 (SCICR2) loads the transmit shift register with a break character. A break character contains all logic 0s and has no start, stop, or parity bit. Break character length depends on the M bit in SCI control register 1 (SCICR1). As long as SBK is at logic 1, transmitter logic continuously loads break characters into the transmit shift register. After software clears the SBK bit, the shift register nishes transmitting the last break character and then transmits at least one logic 1. The automatic logic 1 at the end of a break character guarantees the recognition of the start bit of the next frame. The SCI recognizes a break character when a start bit is followed by eight or nine logic 0 data bits and a logic 0 where the stop bit should be. Receiving a break character has these effects on SCI registers: Sets the framing error ag, FE Sets the receive data register full ag, RDRF Clears the SCI data registers (SCIDRH/L) May set the overrun ag, OR, noise ag, NF, parity error ag, PE, or the receiver active ag, RAF (see Section 13.3.2.4, SCI Status Register 1 (SCISR1) and Section 13.3.2.5, SCI Status Register 2 (SCISR2)
13.4.3.4
Idle Characters
An idle character contains all logic 1s and has no start, stop, or parity bit. Idle character length depends on the M bit in SCI control register 1 (SCICR1). The preamble is a synchronizing idle character that begins the rst transmission initiated after writing the TE bit from 0 to 1. If the TE bit is cleared during a transmission, the Tx output signal becomes idle after completion of the transmission in progress. Clearing and then setting the TE bit during a transmission queues an idle character to be sent after the frame currently being transmitted.
Freescale Semiconductor
399
NOTE When queueing an idle character, return the TE bit to logic 1 before the stop bit of the current frame shifts out through the Tx output signal. Setting TE after the stop bit appears on Tx output signal causes data previously written to the SCI data register to be lost. Toggle the TE bit for a queued idle character while the TDRE ag is set and immediately before writing the next byte to the SCI data register. NOTE If the TE bit is clear and the transmission is complete, the SCI is not the master of the TXD pin
13.4.4
Receiver
INTERNAL BUS
SBR12SBR0
FROM TXD
MSB
R8
RIE
OR
13.4.4.1
The SCI receiver can accommodate either 8-bit or 9-bit data characters. The state of the M bit in SCI control register 1 (SCICR1) determines the length of data characters. When receiving 9-bit data, bit R8 in SCI data register high (SCIDRH) is the ninth bit (bit 8).
400
Freescale Semiconductor
START L
STOP
BUS CLOCK
BAUD DIVIDER
13.4.4.2
Character Reception
During an SCI reception, the receive shift register shifts a frame in from the Rx input signal. The SCI data register is the read-only buffer between the internal data bus and the receive shift register. After a complete frame shifts into the receive shift register, the data portion of the frame transfers to the SCI data register. The receive data register full ag, RDRF, in SCI status register 1 (SCISR1) becomes set, indicating that the received byte can be read. If the receive interrupt enable bit, RIE, in SCI control register 2 (SCICR2) is also set, the RDRF ag generates an RDRF interrupt request.
13.4.4.3
Data Sampling
The receiver samples the Rx input signal at the RT clock rate. The RT clock is an internal signal with a frequency 16 times the baud rate. To adjust for baud rate mismatch, the RT clock (see Figure 13-13) is resynchronized: After every start bit After the receiver detects a data bit change from logic 1 to logic 0 (after the majority of data bit samples at RT8, RT9, and RT10 returns a valid logic 1 and the majority of the next RT8, RT9, and RT10 samples returns a valid logic 0) To locate the start bit, data recovery logic does an asynchronous search for a logic 0 preceded by three logic 1s.When the falling edge of a possible start bit occurs, the RT clock begins to count to 16.
START BIT Rx Input Signal SAMPLES 1 1 1 1 1 1 1 1 0 0 0 0 0 0 0 LSB
DATA SAMPLING
RT CLOCK RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT2 RT3 RT4 RT5 RT6 RT7 RT8 RT9 RT1 RT2 RT3 RT10 RT11 RT12 RT13 RT14 RT15 RT CLOCK COUNT RESET RT CLOCK RT16 RT4
To verify the start bit and to detect noise, data recovery logic takes samples at RT3, RT5, and RT7. Table 13-11 summarizes the results of the start bit verication samples.
Table 13-11. Start Bit Verication
RT3, RT5, and RT7 Samples 000 001 010 011 Start Bit Verication Yes Yes Yes No Noise Flag 0 1 1 0
Freescale Semiconductor
401
If start bit verication is not successful, the RT clock is reset and a new search for a start bit begins. To determine the value of a data bit and to detect noise, recovery logic takes samples at RT8, RT9, and RT10. Table 13-12 summarizes the results of the data bit samples.
Table 13-12. Data Bit Recovery
RT8, RT9, and RT10 Samples 000 001 010 011 100 101 110 111 Data Bit Determination 0 0 0 1 0 1 1 1 Noise Flag 0 1 1 1 1 1 1 0
NOTE The RT8, RT9, and RT10 samples do not affect start bit verication. If any or all of the RT8, RT9, and RT10 start bit samples are logic 1s following a successful start bit verication, the noise ag (NF) is set and the receiver assumes that the bit is a start bit (logic 0). To verify a stop bit and to detect noise, recovery logic takes samples at RT8, RT9, and RT10. Table 13-13 summarizes the results of the stop bit samples.
Table 13-13. Stop Bit Recovery RT8, RT9, and RT10 Samples
000 001 010 011 100 101 110 111
Noise Flag
0 1 1 1 1 1 1 0
402
Freescale Semiconductor
In Figure 13-14 the verication samples RT3 and RT5 determine that the rst low detected was noise and not the beginning of a start bit. The RT clock is reset and the start bit search begins again. The noise ag is not set because the noise occurred before the start bit was found.
START BIT Rx Input Signal SAMPLES 1 1 1 0 1 1 1 0 0 0 0 0 0 0 LSB
RT CLOCK RT1 RT1 RT1 RT1 RT2 RT3 RT4 RT5 RT1 RT1 RT2 RT3 RT4 RT5 RT6 RT7 RT8 RT9 RT1 RT2 LSB RT6 RT10 RT11 RT12 RT13 RT14 RT15 RT CLOCK COUNT RESET RT CLOCK RT16 RT3 RT7
In Figure 13-15, verication sample at RT3 is high. The RT3 sample sets the noise ag. Although the perceived bit time is misaligned, the data samples RT8, RT9, and RT10 are within the bit time and data recovery is successful.
PERCEIVED START BIT ACTUAL START BIT Rx Input Signal SAMPLES 1 1 1 1 1 0 1 0 0 0 0 0
RT CLOCK RT1 RT1 RT1 RT1 RT1 RT1 RT2 RT3 RT4 RT5 RT6 RT7 RT8 RT9 RT1 RT2 RT3 RT4 RT10 RT11 RT12 RT13 RT14 RT15 RT CLOCK COUNT RESET RT CLOCK RT16 RT5
Freescale Semiconductor
403
In Figure 13-16, a large burst of noise is perceived as the beginning of a start bit, although the test sample at RT5 is high. The RT5 sample sets the noise ag. Although this is a worst-case misalignment of perceived bit time, the data samples RT8, RT9, and RT10 are within the bit time and data recovery is successful.
PERCEIVED START BIT ACTUAL START BIT Rx input Signal SAMPLES 1 1 1 0 0 1 0 0 0 0 LSB
RT CLOCK RT1 RT1 RT1 RT1 RT2 RT3 RT4 RT5 RT6 RT7 RT8 RT9 RT1 RT2 RT3 RT4 RT5 RT6 RT7 RT8 LSB RT2 RT10 RT11 RT12 RT13 RT14 RT15 RT CLOCK COUNT RESET RT CLOCK RT16 RT9 RT3
Figure 13-17 shows the effect of noise early in the start bit time. Although this noise does not affect proper synchronization with the start bit time, it does set the noise ag.
PERCEIVED AND ACTUAL START BIT Rx Input Signal SAMPLES 1 1 1 1 1 1 1 1 1 0 1 0
RT CLOCK RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT2 RT3 RT4 RT5 RT6 RT7 RT8 RT9 RT10 RT11 RT12 RT13 RT14 RT15 RT CLOCK COUNT RESET RT CLOCK RT16 RT1
404
Freescale Semiconductor
Figure 13-18 shows a burst of noise near the beginning of the start bit that resets the RT clock. The sample after the reset is low but is not preceded by three high samples that would qualify as a falling edge. Depending on the timing of the start bit search and on the data, the frame may be missed entirely or it may set the framing error ag.
START BIT NO START BIT FOUND 1 1 1 1 1 1 1 1 1 0 0 1 1 0 0 0 0 0 0 0 0 LSB
RT CLOCK RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT2 RT3 RT4 RT5 RT6 RT7 RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT1 LSB RT2 RT CLOCK COUNT RESET RT CLOCK RT1 RT3
In Figure 13-19, a noise burst makes the majority of data samples RT8, RT9, and RT10 high. This sets the noise ag but does not reset the RT clock. In start bits only, the RT8, RT9, and RT10 data samples are ignored.
START BIT Rx Input Signal SAMPLES 1 1 1 1 1 1 1 1 1 0 0 0 0 1 0 1
RT CLOCK RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT1 RT2 RT3 RT4 RT5 RT6 RT7 RT8 RT9 RT10 RT11 RT12 RT13 RT14 RT15 RT CLOCK COUNT RESET RT CLOCK RT16 RT1
Freescale Semiconductor
405
13.4.4.4
Framing Errors
If the data recovery logic does not detect a logic 1 where the stop bit should be in an incoming frame, it sets the framing error ag, FE, in SCI status register 1 (SCISR1). A break character also sets the FE ag because a break character has no stop bit. The FE ag is set at the same time that the RDRF ag is set.
13.4.4.5
A transmitting device may be operating at a baud rate below or above the receiver baud rate. Accumulated bit time misalignment can cause one of the three stop bit data samples (RT8, RT9, and RT10) to fall outside the actual stop bit.A noise error will occur if the RT8, RT9, and RT10 samples are not all the same logical values. A framing error will occur if the receiver clock is misaligned in such a way that the majority of the RT8, RT9, and RT10 stop bit samples are a logic zero. As the receiver samples an incoming frame, it re-synchronizes the RT clock on any valid falling edge within the frame. Re synchronization within frames will correct a misalignment between transmitter bit times and receiver bit times. 13.4.4.5.1 Slow Data Tolerance
Figure 13-20 shows how much a slow received frame can be misaligned without causing a noise error or a framing error. The slow stop bit begins at RT8 instead of RT1 but arrives in time for the stop bit data samples at RT8, RT9, and RT10.
MSB
STOP
RECEIVER RT CLOCK RT1 RT2 RT3 RT4 RT5 RT6 RT7 RT8 RT9 RT10 RT11 RT12 RT13 RT14 RT15 RT16
DATA SAMPLES
Lets take RTr as receiver RT clock and RTt as transmitter RT clock. For an 8-bit data character, it takes the receiver 9 bit times x 16 RTr cycles +7 RTr cycles =151 RTr cycles to start data sampling of the stop bit. With the misaligned character shown in Figure 13-20, the receiver counts 151 RTr cycles at the point when the count of the transmitting device is 9 bit times x 16 RTt cycles = 144 RTt cycles. The maximum percent difference between the receiver count and the transmitter count of a slow 8-bit data character with no errors is: ((151 144) / 151) x 100 = 4.63% For a 9-bit data character, it takes the receiver 10 bit times x 16 RTr cycles + 7 RTr cycles = 167 RTr cycles to start data sampling of the stop bit.
406
Freescale Semiconductor
With the misaligned character shown in Figure 13-20, the receiver counts 167 RTr cycles at the point when the count of the transmitting device is 10 bit times x 16 RTt cycles = 160 RTt cycles. The maximum percent difference between the receiver count and the transmitter count of a slow 9-bit character with no errors is: ((167 160) / 167) X 100 = 4.19% 13.4.4.5.2 Fast Data Tolerance
Figure 13-21 shows how much a fast received frame can be misaligned. The fast stop bit ends at RT10 instead of RT16 but is still sampled at RT8, RT9, and RT10.
STOP
RECEIVER RT CLOCK RT1 RT2 RT3 RT4 RT5 RT6 RT7 RT8 RT9 RT10 RT11 RT12 RT13 RT14 RT15 RT16
DATA SAMPLES
For an 8-bit data character, it takes the receiver 9 bit times x 16 RTr cycles + 10 RTr cycles = 154 RTr cycles to nish data sampling of the stop bit. With the misaligned character shown in Figure 13-21, the receiver counts 154 RTr cycles at the point when the count of the transmitting device is 10 bit times x 16 RTt cycles = 160 RTt cycles. The maximum percent difference between the receiver count and the transmitter count of a fast 8-bit character with no errors is: ((160 154) / 160) x 100 = 3.75% For a 9-bit data character, it takes the receiver 10 bit times x 16 RTr cycles + 10 RTr cycles = 170 RTr cycles to nish data sampling of the stop bit. With the misaligned character shown in Figure 13-21, the receiver counts 170 RTr cycles at the point when the count of the transmitting device is 11 bit times x 16 RTt cycles = 176 RTt cycles. The maximum percent difference between the receiver count and the transmitter count of a fast 9-bit character with no errors is: ((176 170) / 176) x 100 = 3.40%
13.4.4.6
Receiver Wakeup
To enable the SCI to ignore transmissions intended only for other receivers in multiple-receiver systems, the receiver can be put into a standby state. Setting the receiver wakeup bit, RWU, in SCI control register 2 (SCICR2) puts the receiver into standby state during which receiver interrupts are disabled.The SCI will still load the receive data into the SCIDRH/L registers, but it will not set the RDRF ag.
Freescale Semiconductor
407
The transmitting device can address messages to selected receivers by including addressing information in the initial frame or frames of each message. The WAKE bit in SCI control register 1 (SCICR1) determines how the SCI is brought out of the standby state to process an incoming message. The WAKE bit enables either idle line wakeup or address mark wakeup. 13.4.4.6.1 Idle Input Line Wakeup (WAKE = 0)
In this wakeup method, an idle condition on the Rx Input signal clears the RWU bit and wakes up the SCI. The initial frame or frames of every message contain addressing information. All receivers evaluate the addressing information, and receivers for which the message is addressed process the frames that follow. Any receiver for which a message is not addressed can set its RWU bit and return to the standby state. The RWU bit remains set and the receiver remains on standby until another idle character appears on the Rx Input signal. Idle line wakeup requires that messages be separated by at least one idle character and that no message contains idle characters. The idle character that wakes a receiver does not set the receiver idle bit, IDLE, or the receive data register full ag, RDRF. The idle line type bit, ILT, determines whether the receiver begins counting logic 1s as idle character bits after the start bit or after the stop bit. ILT is in SCI control register 1 (SCICR1). 13.4.4.6.2 Address Mark Wakeup (WAKE = 1)
In this wakeup method, a logic 1 in the most signicant bit (msb) position of a frame clears the RWU bit and wakes up the SCI. The logic 1 in the msb position marks a frame as an address frame that contains addressing information. All receivers evaluate the addressing information, and the receivers for which the message is addressed process the frames that follow.Any receiver for which a message is not addressed can set its RWU bit and return to the standby state. The RWU bit remains set and the receiver remains on standby until another address frame appears on the Rx Input signal. The logic 1 msb of an address frame clears the receivers RWU bit before the stop bit is received and sets the RDRF ag. Address mark wakeup allows messages to contain idle characters but requires that the msb be reserved for use in address frames.{sci_wake} NOTE With the WAKE bit clear, setting the RWU bit after the Rx Input signal has been idle can cause the receiver to wake up immediately.
408
Freescale Semiconductor
13.4.5
Single-Wire Operation
Normally, the SCI uses two pins for transmitting and receiving. In single-wire operation, the RXD pin is disconnected from the SCI. The SCI uses the TXD pin for both receiving and transmitting.
TRANSMITTER Tx OUTPUT SIGNAL Tx INPUT SIGNAL
RECEIVER
RXD
Enable single-wire operation by setting the LOOPS bit and the receiver source bit, RSRC, in SCI control register 1 (SCICR1). Setting the LOOPS bit disables the path from the Rx Input signal to the receiver. Setting the RSRC bit connects the receiver input to the output of the TXD pin driver. Both the transmitter and receiver must be enabled (TE = 1 and RE = 1).The TXDIR bit (SCISR2[1]) determines whether the TXD pin is going to be used as an input (TXDIR = 0) or an output (TXDIR = 1) in this mode of operation.
13.4.6
Loop Operation
In loop operation the transmitter output goes to the receiver input. The Rx Input signal is disconnected from the SCI
.
TRANSMITTER
Tx OUTPUT SIGNAL
RECEIVER
RXD
Enable loop operation by setting the LOOPS bit and clearing the RSRC bit in SCI control register 1 (SCICR1). Setting the LOOPS bit disables the path from the Rx Input signal to the receiver. Clearing the RSRC bit connects the transmitter output to the receiver input. Both the transmitter and receiver must be enabled (TE = 1 and RE = 1).
13.5
13.5.1
Initialization Information
Reset Initialization
The reset state of each individual bit is listed in Section 13.3, Memory Map and Registers which details the registers and their bit elds. All special functions or modes which are initialized during or just following reset are described within this section.
Freescale Semiconductor
409
13.5.2
13.5.2.1
Interrupt Operation
System Level Interrupt Sources
There are ve interrupt sources that can generate an SCI interrupt in to the CPU. They are listed in Table 13-14.
Table 13-14. SCI Interrupt Source
Interrupt Source Transmitter Transmitter Receiver Receiver Flag TDRE TC RDRF OR IDLE ILIE Local Enable TIE TCIE RIE
410
Freescale Semiconductor
13.5.2.2
Interrupt Descriptions
The SCI only originates interrupt requests. The following is a description of how the SCI makes a request and how the MCU should acknowledge that request. The interrupt vector offset and interrupt number are chip dependent. The SCI only has a single interrupt line (SCI Interrupt Signal, active high operation) and all the following interrupts, when generated, are ORed together and issued through that port. 13.5.2.2.1 TDRE Description
The TDRE interrupt is set high by the SCI when the transmit shift register receives a byte from the SCI data register. A TDRE interrupt indicates that the transmit data register (SCIDRH/L) is empty and that a new byte can be written to the SCIDRH/L for transmission.Clear TDRE by reading SCI status register 1 with TDRE set and then writing to SCI data register low (SCIDRL). 13.5.2.2.2 TC Description
The TC interrupt is set by the SCI when a transmission has been completed.A TC interrupt indicates that there is no transmission in progress. TC is set high when the TDRE ag is set and no data, preamble, or break character is being transmitted. When TC is set, the TXD pin becomes idle (logic 1). Clear TC by reading SCI status register 1 (SCISR1) with TC set and then writing to SCI data register low (SCIDRL).TC is cleared automatically when data, preamble, or break is queued and ready to be sent. 13.5.2.2.3 RDRF Description
The RDRF interrupt is set when the data in the receive shift register transfers to the SCI data register. A RDRF interrupt indicates that the received data has been transferred to the SCI data register and that the byte can now be read by the MCU. The RDRF interrupt is cleared by reading the SCI status register one (SCISR1) and then reading SCI data register low (SCIDRL). 13.5.2.2.4 OR Description
The OR interrupt is set when software fails to read the SCI data register before the receive shift register receives the next frame. The newly acquired data in the shift register will be lost in this case, but the data already in the SCI data registers is not affected. The OR interrupt is cleared by reading the SCI status register one (SCISR1) and then reading SCI data register low (SCIDRL).
13.5.2.3
IDLE Description
The IDLE interrupt is set when 10 consecutive logic 1s (if M = 0) or 11 consecutive logic 1s (if M = 1) appear on the receiver input. Once the IDLE is cleared, a valid frame must again set the RDRF ag before an idle condition can set the IDLE ag. Clear IDLE by reading SCI status register 1 (SCISR1) with IDLE set and then reading SCI data register low (SCIDRL).
13.5.3
The SCI interrupt request can be used to bring the CPU out of wait mode.
Freescale Semiconductor
411
412
Freescale Semiconductor
14.1.1
Features
The SPIV3 includes these distinctive features: Master mode and slave mode Bidirectional mode Slave select output Mode fault error ag with CPU interrupt capability Double-buffered data register Serial clock with programmable polarity and phase Control of SPI operation during wait mode
14.1.2
Modes of Operation
The SPI functions in three modes, run, wait, and stop. Run Mode This is the basic mode of operation. Wait Mode SPI operation in wait mode is a congurable low power mode, controlled by the SPISWAI bit located in the SPICR2 register. In wait mode, if the SPISWAI bit is clear, the SPI operates like in Run Mode. If the SPISWAI bit is set, the SPI goes into a power conservative state, with the SPI clock generation turned off. If the SPI is congured as a master, any transmission in progress stops, but is resumed after CPU goes into Run Mode. If the SPI is congured as a slave, reception and transmission of a byte continues, so that the slave stays synchronized to the master. Stop Mode The SPI is inactive in stop mode for reduced power consumption. If the SPI is congured as a master, any transmission in progress stops, but is resumed after CPU goes into run mode. If the SPI is congured as a slave, reception and transmission of a byte continues, so that the slave stays synchronized to the master. This is a high level description only, detailed descriptions of operating modes are contained in Section 14.4, Functional Description.
Freescale Semiconductor
413
14.1.3
Block Diagram
Figure 14-1 gives an overview on the SPI architecture. The main parts of the SPI are status, control, and data registers, shifter logic, baud rate generator, master/slave control logic, and port control logic.
SPI 2 SPI Control Register 1 BIDIROE SPI Control Register 2 2 SPC0 SPI Status Register SPIF SPI Interrupt Request Baud Rate Generator Counter Bus Clock Prescaler Clock Select SPPR 3 SPR 3 Shifter SPI Baud Rate Register LSBFE=1 8 SPI Data Register 8 LSBFE=0 MSB LSBFE=0 LSBFE=1 LSBFE=0 LSBFE=1 LSB data out data in Baud Rate Shift Clock Sample Clock MODF SPTEF Slave Control
CPOL
CPHA
MOSI
Interrupt Control
Phase + SCK in Slave Baud Rate Polarity Control Master Baud Rate Phase + SCK out Polarity Control Master Control
SCK
SS
14.2
This section lists the name and description of all ports including inputs and outputs that do, or may, connect off chip. The SPIV3 module has a total of four external pins.
14.2.1
This pin is used to transmit data out of the SPI module when it is congured as a master and receive data when it is congured as slave.
414
Freescale Semiconductor
14.2.2
This pin is used to transmit data out of the SPI module when it is congured as a slave and receive data when it is congured as master.
14.2.3
This pin is used to output the select signal from the SPI module to another peripheral with which a data transfer is to take place when its congured as a master and its used as an input to receive the slave select signal when the SPI is congured as slave.
14.2.4
This pin is used to output the clock with respect to which the SPI transfers data or receive clock in case of slave.
14.3
This section provides a detailed description of address space and registers used by the SPI. The memory map for the SPIV3 is given below in Table 14-1. The address listed for each register is the sum of a base address and an address offset. The base address is dened at the SoC level and the address offset is dened at the module level. Reads from the reserved bits return zeros and writes to the reserved bits have no effect.
14.3.1
0x0000 SPI Control Register 1 (SPICR1) 0x0001 SPI Control Register 2 (SPICR2) 0x0002 SPI Baud Rate Register (SPIBR) 0x0003 SPI Status Register (SPISR) 0x0004 Reserved 0x0005 SPI Data Register (SPIDR) 0x0006 Reserved 0x0007 Reserved 1. Certain bits are non-writable. 2. Writes to this register are ignored. 3. Reading from this register returns all zeros.
Freescale Semiconductor
415
14.3.2
Register Descriptions
This section consists of register descriptions in address order. Each description includes a standard register diagram with an associated gure number. Details of register bit and eld function follow the register diagrams, in bit order.
Name 0x0000 SPICR1 0x0001 SPICR2 0x0002 SPIBR 0x0003 SPISR 0x0004 Reserved 0x0005 SPIDR 0x0006 Reserved 0x0007 Reserved R W R W R W R W R W R W R W R W = Unimplemented or Reserved Bit 7 6 5 4 3 2 2 Bit 0 SPIF 0 SPPR2 0 SPPR1 SPTEF 7 SPIE 0 6 SPE 0 5 SPTIE 0 4 MSTR 3 CPOL 2 CPHA 0 1 SSOE 0 LSBFE
MODFEN
BIDIROE 0
SPISWAI
SPC0
SPPR0 MODF
SPR2 0
SPR1 0
SPR0 0
14.3.2.1
416
Freescale Semiconductor
5 SPTIE 4 MSTR
3 CPOL
2 CPHA
1 SSOE 0 LSBFE
Freescale Semiconductor
417
14.3.2.2
R W Reset
0 MODFEN BIDIROE 0
0 SPISWAI 0 0 SPC0 0
= Unimplemented or Reserved
Read: anytime Write: anytime; writes to the reserved bits have no effect
Table 14-4. SPICR2 Field Descriptions
Field 4 MODFEN Description Mode Fault Enable Bit This bit allows the MODF failure being detected. If the SPI is in master mode and MODFEN is cleared, then the SS port pin is not used by the SPI. In slave mode, the SS is available only as an input regardless of the value of MODFEN. For an overview on the impact of the MODFEN bit on the SS port pin conguration refer to Table 14-3. In master mode, a change of this bit will abort a transmission in progress and force the SPI system into idle state. 0 SS port pin is not used by the SPI 1 SS port pin with MODF feature Output Enable in the Bidirectional Mode of Operation This bit controls the MOSI and MISO output buffer of the SPI, when in bidirectional mode of operation (SPC0 is set). In master mode this bit controls the output buffer of the MOSI port, in slave mode it controls the output buffer of the MISO port. In master mode, with SPC0 set, a change of this bit will abort a transmission in progress and force the SPI into idle state. 0 Output buffer disabled 1 Output buffer enabled SPI Stop in Wait Mode Bit This bit is used for power conservation while in wait mode. 0 SPI clock operates normally in wait mode 1 Stop SPI clock generation when in wait mode Serial Pin Control Bit 0 This bit enables bidirectional pin congurations as shown in Table 14-5. In master mode, a change of this bit will abort a transmission in progress and force the SPI system into idle state
3 BIDIROE
1 SPISWAI 0 SPC0
Master Mode of Operation Normal Bidirectional 0 1 X 0 1 Slave Mode of Operation Normal 0 X Slave Out Slave In Master In MISO not used by SPI Master Out Master In Master I/O
418
Freescale Semiconductor
14.3.2.3
R W Reset
= Unimplemented or Reserved
Read: anytime Write: anytime; writes to the reserved bits have no effect
Table 14-6. SPIBR Field Descriptions
Field 6:4 SPPR[2:0] 2:0 SPR[2:0} Description SPI Baud Rate Preselection Bits These bits specify the SPI baud rates as shown in Table 14-7. In master mode, a change of these bits will abort a transmission in progress and force the SPI system into idle state. SPI Baud Rate Selection Bits These bits specify the SPI baud rates as shown in Table 14-7. In master mode, a change of these bits will abort a transmission in progress and force the SPI system into idle state.
Freescale Semiconductor
419
Table 14-7. Example SPI Baud Rate Selection (25 MHz Bus Clock)
SPPR2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 SPPR1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 0 0 0 0 0 0 0 SPPR0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 0 0 0 0 0 0 0 SPR2 0 0 0 0 1 1 1 1 0 0 0 0 1 1 1 1 0 0 0 0 1 1 1 1 0 0 0 0 1 1 1 1 0 0 0 0 1 1 1 SPR1 0 0 1 1 0 0 1 1 0 0 1 1 0 0 1 1 0 0 1 1 0 0 1 1 0 0 1 1 0 0 1 1 0 0 1 1 0 0 1 SPR0 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 Baud Rate Divisor 2 4 8 16 32 64 128 256 4 8 16 32 64 128 256 512 6 12 24 48 96 192 384 768 8 16 32 64 128 256 512 1024 10 20 40 80 160 320 640 Baud Rate 12.5 MHz 6.25 MHz 3.125 MHz 1.5625 MHz 781.25 kHz 390.63 kHz 195.31 kHz 97.66 kHz 6.25 MHz 3.125 MHz 1.5625 MHz 781.25 kHz 390.63 kHz 195.31 kHz 97.66 kHz 48.83 kHz 4.16667 MHz 2.08333 MHz 1.04167 MHz 520.83 kHz 260.42 kHz 130.21 kHz 65.10 kHz 32.55 kHz 3.125 MHz 1.5625 MHz 781.25 kHz 390.63 kHz 195.31 kHz 97.66 kHz 48.83 kHz 24.41 kHz 2.5 MHz 1.25 MHz 625 kHz 312.5 kHz 156.25 kHz 78.13 kHz 39.06 kHz
420
Freescale Semiconductor
Table 14-7. Example SPI Baud Rate Selection (25 MHz Bus Clock) (continued)
SPPR2 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 SPPR1 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 SPPR0 0 1 1 1 1 1 1 1 1 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 SPR2 1 0 0 0 0 1 1 1 1 0 0 0 0 1 1 1 1 0 0 0 0 1 1 1 1 SPR1 1 0 0 1 1 0 0 1 1 0 0 1 1 0 0 1 1 0 0 1 1 0 0 1 1 SPR0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 Baud Rate Divisor 1280 12 24 48 96 192 384 768 1536 14 28 56 112 224 448 896 1792 16 32 64 128 256 512 1024 2048 Baud Rate 19.53 kHz 2.08333 MHz 1.04167 MHz 520.83 kHz 260.42 kHz 130.21 kHz 65.10 kHz 32.55 kHz 16.28 kHz 1.78571 MHz 892.86 kHz 446.43 kHz 223.21 kHz 111.61 kHz 55.80 kHz 27.90 kHz 13.95 kHz 1.5625 MHz 781.25 kHz 390.63 kHz 195.31 kHz 97.66 kHz 48.83 kHz 24.41 kHz 12.21 kHz
Freescale Semiconductor
421
14.3.2.4
R W Reset
SPIF
SPTEF
MODF
= Unimplemented or Reserved
5 SPTEF
4 MODF
14.3.2.5
= Unimplemented or Reserved
422
Freescale Semiconductor
Write: anytime The SPI Data Register is both the input and output register for SPI data. A write to this register allows a data byte to be queued and transmitted. For a SPI congured as a master, a queued data byte is transmitted immediately after the previous transmission has completed. The SPI Transmitter Empty Flag SPTEF in the SPISR register indicates when the SPI Data Register is ready to accept new data. Reading the data can occur anytime from after the SPIF is set to before the end of the next transfer. If the SPIF is not serviced by the end of the successive transfers, those data bytes are lost and the data within the SPIDR retains the rst byte until SPIF is serviced.
14.4
Functional Description
The SPI module allows a duplex, synchronous, serial communication between the MCU and peripheral devices. Software can poll the SPI status ags or SPI operation can be interrupt driven. The SPI system is enabled by setting the SPI enable (SPE) bit in SPI Control Register 1. While SPE bit is set, the four associated SPI port pins are dedicated to the SPI function as: Slave select (SS) Serial clock (SCK) Master out/slave in (MOSI) Master in/slave out (MISO) The main element of the SPI system is the SPI Data Register. The 8-bit data register in the master and the 8-bit data register in the slave are linked by the MOSI and MISO pins to form a distributed 16-bit register. When a data transfer operation is performed, this 16-bit register is serially shifted eight bit positions by the S-clock from the master, so data is exchanged between the master and the slave. Data written to the master SPI Data Register becomes the output data for the slave, and data read from the master SPI Data Register after a transfer operation is the input data from the slave. A read of SPISR with SPTEF = 1 followed by a write to SPIDR puts data into the transmit data register. When a transfer is complete, received data is moved into the receive data register. Data may be read from this double-buffered system any time before the next transfer has completed. This 8-bit data register acts as the SPI receive data register for reads and as the SPI transmit data register for writes. A single SPI register address is used for reading data from the read data buffer and for writing data to the transmit data register. The clock phase control bit (CPHA) and a clock polarity control bit (CPOL) in the SPI Control Register 1 (SPICR1) select one of four possible clock formats to be used by the SPI system. The CPOL bit simply selects a non-inverted or inverted clock. The CPHA bit is used to accommodate two fundamentally different protocols by sampling data on odd numbered SCK edges or on even numbered SCK edges (see Section 14.4.3, Transmission Formats). The SPI can be congured to operate as a master or as a slave. When the MSTR bit in SPI Control Register1 is set, master mode is selected, when the MSTR bit is clear, slave mode is selected.
Freescale Semiconductor
423
14.4.1
Master Mode
The SPI operates in master mode when the MSTR bit is set. Only a master SPI module can initiate transmissions. A transmission begins by writing to the master SPI Data Register. If the shift register is empty, the byte immediately transfers to the shift register. The byte begins shifting out on the MOSI pin under the control of the serial clock. S-clock The SPR2, SPR1, and SPR0 baud rate selection bits in conjunction with the SPPR2, SPPR1, and SPPR0 baud rate preselection bits in the SPI Baud Rate register control the baud rate generator and determine the speed of the transmission. The SCK pin is the SPI clock output. Through the SCK pin, the baud rate generator of the master controls the shift register of the slave peripheral. MOSI and MISO Pins In master mode, the function of the serial data output pin (MOSI) and the serial data input pin (MISO) is determined by the SPC0 and BIDIROE control bits. SS Pin If MODFEN and SSOE bit are set, the SS pin is congured as slave select output. The SS output becomes low during each transmission and is high when the SPI is in idle state. If MODFEN is set and SSOE is cleared, the SS pin is congured as input for detecting mode fault error. If the SS input becomes low this indicates a mode fault error where another master tries to drive the MOSI and SCK lines. In this case, the SPI immediately switches to slave mode, by clearing the MSTR bit and also disables the slave output buffer MISO (or SISO in bidirectional mode). So the result is that all outputs are disabled and SCK, MOSI and MISO are inputs. If a transmission is in progress when the mode fault occurs, the transmission is aborted and the SPI is forced into idle state. This mode fault error also sets the mode fault (MODF) ag in the SPI Status Register (SPISR). If the SPI interrupt enable bit (SPIE) is set when the MODF ag gets set, then an SPI interrupt sequence is also requested. When a write to the SPI Data Register in the master occurs, there is a half SCK-cycle delay. After the delay, SCK is started within the master. The rest of the transfer operation differs slightly, depending on the clock format specied by the SPI clock phase bit, CPHA, in SPI Control Register 1 (see Section 14.4.3, Transmission Formats). NOTE A change of the bits CPOL, CPHA, SSOE, LSBFE, MODFEN, SPC0, BIDIROE with SPC0 set, SPPR2SPPR0 and SPR2SPR0 in master mode will abort a transmission in progress and force the SPI into idle state. The remote slave cannot detect this, therefore the master has to ensure that the remote slave is set back to idle state.
424
Freescale Semiconductor
14.4.2
Slave Mode
The SPI operates in slave mode when the MSTR bit in SPI Control Register1 is clear. SCK Clock In slave mode, SCK is the SPI clock input from the master. MISO and MOSI Pins In slave mode, the function of the serial data output pin (MISO) and serial data input pin (MOSI) is determined by the SPC0 bit and BIDIROE bit in SPI Control Register 2. SS Pin The SS pin is the slave select input. Before a data transmission occurs, the SS pin of the slave SPI must be low. SS must remain low until the transmission is complete. If SS goes high, the SPI is forced into idle state. The SS input also controls the serial data output pin, if SS is high (not selected), the serial data output pin is high impedance, and, if SS is low the rst bit in the SPI Data Register is driven out of the serial data output pin. Also, if the slave is not selected (SS is high), then the SCK input is ignored and no internal shifting of the SPI shift register takes place. Although the SPI is capable of duplex operation, some SPI peripherals are capable of only receiving SPI data in a slave mode. For these simpler devices, there is no serial data out pin. NOTE When peripherals with duplex capability are used, take care not to simultaneously enable two receivers whose serial outputs drive the same system slaves serial data output line. As long as no more than one slave device drives the system slaves serial data output line, it is possible for several slaves to receive the same transmission from a master, although the master would not receive return information from all of the receiving slaves. If the CPHA bit in SPI Control Register 1 is clear, odd numbered edges on the SCK input cause the data at the serial data input pin to be latched. Even numbered edges cause the value previously latched from the serial data input pin to shift into the LSB or MSB of the SPI shift register, depending on the LSBFE bit. If the CPHA bit is set, even numbered edges on the SCK input cause the data at the serial data input pin to be latched. Odd numbered edges cause the value previously latched from the serial data input pin to shift into the LSB or MSB of the SPI shift register, depending on the LSBFE bit. When CPHA is set, the rst edge is used to get the rst data bit onto the serial data output pin. When CPHA is clear and the SS input is low (slave selected), the rst bit of the SPI data is driven out of the serial data output pin. After the eighth shift, the transfer is considered complete and the received data is transferred into the SPI Data Register. To indicate transfer is complete, the SPIF ag in the SPI Status Register is set. NOTE A change of the bits CPOL, CPHA, SSOE, LSBFE, MODFEN, SPC0 and BIDIROE with SPC0 set in slave mode will corrupt a transmission in progress and has to be avoided.
Freescale Semiconductor
425
14.4.3
Transmission Formats
During an SPI transmission, data is transmitted (shifted out serially) and received (shifted in serially) simultaneously. The serial clock (SCK) synchronizes shifting and sampling of the information on the two serial data lines. A slave select line allows selection of an individual slave SPI device, slave devices that are not selected do not interfere with SPI bus activities. Optionally, on a master SPI device, the slave select line can be used to indicate multiple-master bus contention.
MASTER SPI MISO MOSI SCK BAUD RATE GENERATOR SS MISO MOSI SCK SS SLAVE SPI
SHIFT REGISTER
SHIFT REGISTER
VDD
14.4.3.1
Using two bits in the SPI Control Register1, software selects one of four combinations of serial clock phase and polarity. The CPOL clock polarity control bit species an active high or low clock and has no signicant effect on the transmission format. The CPHA clock phase control bit selects one of two fundamentally different transmission formats. Clock phase and polarity should be identical for the master SPI device and the communicating slave device. In some cases, the phase and polarity are changed between transmissions to allow a master device to communicate with peripheral slaves having different requirements.
14.4.3.2
The rst edge on the SCK line is used to clock the rst data bit of the slave into the master and the rst data bit of the master into the slave. In some peripherals, the rst bit of the slaves data is available at the slaves data out pin as soon as the slave is selected. In this format, the rst SCK edge is issued a half cycle after SS has become low. A half SCK cycle later, the second edge appears on the SCK line. When this second edge occurs, the value previously latched from the serial data input pin is shifted into the LSB or MSB of the shift register, depending on LSBFE bit. After this second edge, the next bit of the SPI master data is transmitted out of the serial data output pin of the master to the serial input pin on the slave. This process continues for a total of 16 edges on the SCK line, with data being latched on odd numbered edges and shifted on even numbered edges.
426
Freescale Semiconductor
Data reception is double buffered. Data is shifted serially into the SPI shift register during the transfer and is transferred to the parallel SPI Data Register after the last bit is shifted in. After the 16th (last) SCK edge: Data that was previously in the master SPI Data Register should now be in the slave data register and the data that was in the slave data register should be in the master. The SPIF ag in the SPI Status Register is set indicating that the transfer is complete. Figure 14-9 is a timing diagram of an SPI transfer where CPHA = 0. SCK waveforms are shown for CPOL = 0 and CPOL = 1. The diagram may be interpreted as a master or slave timing diagram because the SCK, MISO, and MOSI pins are connected directly between the master and the slave. The MISO signal is the output from the slave and the MOSI signal is the output from the master. The SS pin of the master must be either high or recongured as a general-purpose output not affecting the SPI.
End of Idle State SCK Edge Nr. SCK (CPOL = 0) SCK (CPOL = 1) 1 2 Begin 3 4 5 6 Transfer 7 8 9 10 11 12 End 13 14 15 16 Begin of Idle State
CHANGE O MOSI pin CHANGE O MISO pin SEL SS (O) Master only SEL SS (I) tL MSB rst (LSBFE = 0): MSB Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 LSB rst (LSBFE = 1): LSB Bit 1 Bit 2 Bit 3 Bit 4 Bit 5 tL = Minimum leading time before the rst SCK edge tT = Minimum trailing time after the last SCK edge tI = Minimum idling time between transfers (minimum SS high time) tL, tT, and tI are guaranteed for the master mode and required for the slave mode. Bit 1 Bit 6 tT tI tL
In slave mode, if the SS line is not deasserted between the successive transmissions then the content of the SPI Data Register is not transmitted, instead the last received byte is transmitted. If the SS line is deasserted for at least minimum idle time (half SCK cycle) between successive transmissions then the content of the SPI Data Register is transmitted.
Freescale Semiconductor
SAMPLE I MOSI/MISO
427
In master mode, with slave select output enabled the SS line is always deasserted and reasserted between successive transfers for at least minimum idle time.
14.4.3.3
Some peripherals require the rst SCK edge before the rst data bit becomes available at the data out pin, the second edge clocks data into the system. In this format, the rst SCK edge is issued by setting the CPHA bit at the beginning of the 8-cycle transfer operation. The rst edge of SCK occurs immediately after the half SCK clock cycle synchronization delay. This rst edge commands the slave to transfer its rst data bit to the serial data input pin of the master. A half SCK cycle later, the second edge appears on the SCK pin. This is the latching edge for both the master and slave. When the third edge occurs, the value previously latched from the serial data input pin is shifted into the LSB or MSB of the SPI shift register, depending on LSBFE bit. After this edge, the next bit of the master data is coupled out of the serial data output pin of the master to the serial input pin on the slave. This process continues for a total of 16 edges on the SCK line with data being latched on even numbered edges and shifting taking place on odd numbered edges. Data reception is double buffered, data is serially shifted into the SPI shift register during the transfer and is transferred to the parallel SPI Data Register after the last bit is shifted in. After the 16th SCK edge: Data that was previously in the SPI Data Register of the master is now in the data register of the slave, and data that was in the data register of the slave is in the master. The SPIF ag bit in SPISR is set indicating that the transfer is complete. Figure 14-10 shows two clocking variations for CPHA = 1. The diagram may be interpreted as a master or slave timing diagram because the SCK, MISO, and MOSI pins are connected directly between the master and the slave. The MISO signal is the output from the slave, and the MOSI signal is the output from the master. The SS line is the slave select input to the slave. The SS pin of the master must be either high or recongured as a general-purpose output not affecting the SPI. The SS line can remain active low between successive transfers (can be tied low at all times). This format is sometimes preferred in systems having a single xed master and a single slave that drive the MISO data line. Back-to-back transfers in master mode In master mode, if a transmission has completed and a new data byte is available in the SPI Data Register, this byte is send out immediately without a trailing and minimum idle time. The SPI interrupt request ag (SPIF) is common to both the master and slave modes. SPIF gets set one half SCK cycle after the last SCK edge.
428
Freescale Semiconductor
End of Idle State SCK Edge Nr. SCK (CPOL = 0) SCK (CPOL = 1) 1 2 3
Begin 4 5 6 7
Transfer 8 9 10 11 12
End 13 14 15 16
CHANGE O MOSI pin CHANGE O MISO pin SEL SS (O) Master only SEL SS (I) tL MSB rst (LSBFE = 0): LSB rst (LSBFE = 1): tT tI tL
MSB Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 LSB Minimum 1/2 SCK for tT, tl, tL LSB Bit 1 Bit 2 Bit 3 Bit 4 Bit 5 Bit 6 MSB tL = Minimum leading time before the rst SCK edge, not required for back to back transfers tT = Minimum trailing time after the last SCK edge tI = Minimum idling time between transfers (minimum SS high time), not required for back to back transfers
14.4.4
Baud rate generation consists of a series of divider stages. Six bits in the SPI Baud Rate register (SPPR2, SPPR1, SPPR0, SPR2, SPR1, and SPR0) determine the divisor to the SPI module clock which results in the SPI baud rate. The SPI clock rate is determined by the product of the value in the baud rate preselection bits (SPPR2SPPR0) and the value in the baud rate selection bits (SPR2SPR0). The module clock divisor equation is shown in Figure 14-11 When all bits are clear (the default condition), the SPI module clock is divided by 2. When the selection bits (SPR2SPR0) are 001 and the preselection bits (SPPR2SPPR0) are 000, the module clock divisor becomes 4. When the selection bits are 010, the module clock divisor becomes 8 etc. When the preselection bits are 001, the divisor determined by the selection bits is multiplied by 2. When the preselection bits are 010, the divisor is multiplied by 3, etc. See Table 14-7 for baud rate calculations for all bit conditions, based on a 25-MHz bus clock. The two sets of selects allows the clock to be divided by a non-power of two to achieve other baud rates such as divide by 6, divide by 10, etc.
Freescale Semiconductor
SAMPLE I MOSI/MISO
429
The baud rate generator is activated only when the SPI is in the master mode and a serial transfer is taking place. In the other cases, the divider is disabled to decrease IDD current.
BaudRateDivisor = ( SPPR + 1 ) 2 ( SPR + 1 )
14.4.5
14.4.5.1
Special Features
SS Output
The SS output feature automatically drives the SS pin low during transmission to select external devices and drives it high during idle to deselect external devices. When SS output is selected, the SS output pin is connected to the SS input pin of the external device. The SS output is available only in master mode during normal SPI operation by asserting SSOE and MODFEN bit as shown in Table 14-3. The mode fault feature is disabled while SS output is enabled. NOTE Care must be taken when using the SS output feature in a multimaster system because the mode fault feature is not available for detecting system errors between masters.
14.4.5.2
The bidirectional mode is selected when the SPC0 bit is set in SPI Control Register 2 (see Table 14-9). In this mode, the SPI uses only one serial data pin for the interface with external device(s). The MSTR bit decides which pin to use. The MOSI pin becomes the serial data I/O (MOMI) pin for the master mode, and the MISO pin becomes serial data I/O (SISO) pin for the slave mode. The MISO pin in master mode and MOSI pin in slave mode are not used by the SPI.
Table 14-9. Normal Mode and Bidirectional Mode
When SPE = 1 Master Mode MSTR = 1
Serial Out MOSI
SPI Serial In
Serial Out
MOMI BIDIROE
SPI Serial In
430
Freescale Semiconductor
The direction of each serial I/O pin depends on the BIDIROE bit. If the pin is congured as an output, serial data from the shift register is driven out on the pin. The same pin is also the serial input to the shift register. The SCK is output for the master mode and input for the slave mode. The SS is the input or output for the master mode, and it is always the input for the slave mode. The bidirectional mode does not affect SCK and SS functions. NOTE In bidirectional master mode, with mode fault enabled, both data pins MISO and MOSI can be occupied by the SPI, though MOSI is normally used for transmissions in bidirectional mode and MISO is not used by the SPI. If a mode fault occurs, the SPI is automatically switched to slave mode, in this case MISO becomes occupied by the SPI and MOSI is not used. This has to be considered, if the MISO pin is used for other purpose.
14.4.6
Error Conditions
14.4.6.1
If the SS input becomes low while the SPI is congured as a master, it indicates a system error where more than one master may be trying to drive the MOSI and SCK lines simultaneously. This condition is not permitted in normal operation, the MODF bit in the SPI Status Register is set automatically provided the MODFEN bit is set. In the special case where the SPI is in master mode and MODFEN bit is cleared, the SS pin is not used by the SPI. In this special case, the mode fault error function is inhibited and MODF remains cleared. In case the SPI system is congured as a slave, the SS pin is a dedicated input pin. Mode fault error doesnt occur in slave mode. If a mode fault error occurs the SPI is switched to slave mode, with the exception that the slave output buffer is disabled. So SCK, MISO and MOSI pins are forced to be high impedance inputs to avoid any possibility of conict with another output driver. A transmission in progress is aborted and the SPI is forced into idle state. If the mode fault error occurs in the bidirectional mode for a SPI system congured in master mode, output enable of the MOMI (MOSI in bidirectional mode) is cleared if it was set. No mode fault error occurs in the bidirectional mode for SPI system congured in slave mode. The mode fault ag is cleared automatically by a read of the SPI Status Register (with MODF set) followed by a write to SPI Control Register 1. If the mode fault ag is cleared, the SPI becomes a normal master or slave again.
Freescale Semiconductor
431
14.4.7
In run mode with the SPI system enable (SPE) bit in the SPI control register clear, the SPI system is in a low-power, disabled state. SPI registers remain accessible, but clocks to the core of this module are disabled.
14.4.8
SPI operation in wait mode depends upon the state of the SPISWAI bit in SPI Control Register 2. If SPISWAI is clear, the SPI operates normally when the CPU is in wait mode If SPISWAI is set, SPI clock generation ceases and the SPI module enters a power conservation state when the CPU is in wait mode. If SPISWAI is set and the SPI is congured for master, any transmission and reception in progress stops at wait mode entry. The transmission and reception resumes when the SPI exits wait mode. If SPISWAI is set and the SPI is congured as a slave, any transmission and reception in progress continues if the SCK continues to be driven from the master. This keeps the slave synchronized to the master and the SCK. If the master transmits several bytes while the slave is in wait mode, the slave will continue to send out bytes consistent with the operation mode at the start of wait mode (i.e. If the slave is currently sending its SPIDR to the master, it will continue to send the same byte. Else if the slave is currently sending the last received byte from the master, it will continue to send each previous master byte). NOTE Care must be taken when expecting data from a master while the slave is in wait or stop mode. Even though the shift register will continue to operate, the rest of the SPI is shut down (i.e. a SPIF interrupt will not be generated until exiting stop or wait mode). Also, the byte from the shift register will not be copied into the SPIDR register until after the slave SPI has exited wait or stop mode. A SPIF ag and SPIDR copy is only generated if wait mode is entered or exited during a tranmission. If the slave enters wait mode in idle mode and exits wait mode in idle mode, neither a SPIF nor a SPIDR copy will occur.
14.4.9
Stop mode is dependent on the system. The SPI enters stop mode when the module clock is disabled (held high or low). If the SPI is in master mode and exchanging data when the CPU enters stop mode, the transmission is frozen until the CPU exits stop mode. After stop, data to and from the external SPI is exchanged correctly. In slave mode, the SPI will stay synchronized with the master. The stop mode is not dependent on the SPISWAI bit.
432
Freescale Semiconductor
14.5
Reset
The reset values of registers and signals are described in the Memory Map and Registers section (see Section 14.3, Memory Map and Register Denition) which details the registers and their bit-elds. If a data transmission occurs in slave mode after reset without a write to SPIDR, it will transmit garbage, or the byte last received from the master before the reset. Reading from the SPIDR after reset will always read a byte of zeros.
14.6
Interrupts
The SPIV3 only originates interrupt requests when SPI is enabled (SPE bit in SPICR1 set). The following is a description of how the SPIV3 makes a request and how the MCU should acknowledge that request. The interrupt vector offset and interrupt priority are chip dependent. The interrupt ags MODF, SPIF and SPTEF are logically ORed to generate an interrupt request.
14.6.1
MODF
MODF occurs when the master detects an error on the SS pin. The master SPI must be congured for the MODF feature (see Table 14-3). After MODF is set, the current transfer is aborted and the following bit is changed: MSTR = 0, The master bit in SPICR1 resets. The MODF interrupt is reected in the status register MODF ag. Clearing the ag will also clear the interrupt. This interrupt will stay active while the MODF ag is set. MODF has an automatic clearing process which is described in Section 14.3.2.4, SPI Status Register (SPISR).
14.6.2
SPIF
SPIF occurs when new data has been received and copied to the SPI Data Register. After SPIF is set, it does not clear until it is serviced. SPIF has an automatic clearing process which is described in Section 14.3.2.4, SPI Status Register (SPISR). In the event that the SPIF is not serviced before the end of the next transfer (i.e. SPIF remains active throughout another transfer), the latter transfers will be ignored and no new data will be copied into the SPIDR.
14.6.3
SPTEF
SPTEF occurs when the SPI Data Register is ready to accept new data. After SPTEF is set, it does not clear until it is serviced. SPTEF has an automatic clearing process which is described in Section 14.3.2.4, SPI Status Register (SPISR).
Freescale Semiconductor
433
434
Freescale Semiconductor
15.1.1
Features
The TIM16B8CV1 includes these distinctive features: Eight input capture/output compare channels. Clock prescaling. 16-bit counter. 16-bit pulse accumulator.
15.1.2
Stop: Freeze: Wait: Normal:
Modes of Operation
Timer is off because clocks are stopped. Timer counter keep on running, unless TSFRZ in TSCR (0x0006) is set to 1. Counters keep on running, unless TSWAI in TSCR (0x0006) is set to 1. Timer counter keep on running, unless TEN in TSCR (0x0006) is cleared to 0.
Freescale Semiconductor
435
15.1.3
Block Diagrams
Channel 0 Input capture Output compare Channel 1 Input capture Output compare Channel 2 Input capture Output compare Channel 3 Input capture Output compare Registers Channel 4 Input capture Output compare Channel 5 Input capture Output compare
Bus clock
Prescaler
IOC0
16-bit Counter
IOC1
IOC2
IOC3
IOC4
IOC5
Channel 6 Input capture Output compare 16-bit Pulse accumulator Channel 7 Input capture Output compare
IOC6
IOC7
436
Freescale Semiconductor
CLK1 CLK0
4:1 MUX
PACLK / 256
PACLK / 65536
Edge detector
PT7
Intermodule Bus
Interrupt
PACNT
MUX
Divide by 64
M clock
PTn
Edge detector
Set CnF Interrupt
TCn Input Capture Reg.
Freescale Semiconductor
437
PAD
NOTE For more information see the respective functional descriptions in Section 15.4, Functional Description, of this document.
15.2
15.2.1
This pin serves as input capture or output compare for channel 7. This can also be congured as pulse accumulator input.
15.2.2
15.2.3
15.2.4
This pin serves as input capture or output compare for channel 4. Pin
15.2.5
438
Freescale Semiconductor
15.2.6
15.2.7
15.2.8
15.3
15.3.1
The memory map for the TIM16B8CV1 module is given below in Table 15-1. The address listed for each register is the address offset. The total address for each register is the sum of the base address for the TIM16B8CV1 module and the address offset for each register.
Freescale Semiconductor
439
0x0024 0x002C Reserved 0x002E 0x002F Reserved 1. Always read 0x0000. 2. Only writable in special modes (test_mode = 1). 3. Write to these registers have no meaning or effect during input capture. 4. Write has no effect; return 0 on read
440
Freescale Semiconductor
15.3.2
Register Descriptions
This section consists of register descriptions in address order. Each description includes a standard register diagram with an associated gure number. Details of register bit and eld function follow the register diagrams, in bit order.
Register Name 0x0000 TIOS R W R W R W R W R W R W R W R W R W R W R W R W R W Bit 7 6 5 4 3 2 1 Bit 0
IOS7
IOS6
IOS5
IOS4
IOS3
IOS2
IOS1
IOS0
0x0001 CFORC 0x0002 OC7M 0x0003 OC7D 0x0004 TCNTH 0x0005 TCNTL 0x0006 TSCR1 0x0007 TTOV 0x0008 TCTL1 0x0009 TCTL2 0x000A TCTL3 0x000B TCTL4 0x000C TIE
0 FOC7 OC7M7
0 FOC6 OC7M6
0 FOC5 OC7M5
0 FOC4 OC7M4
0 FOC3 OC7M3
0 FOC2 OC7M2
0 FOC1 OC7M1
0 FOC0 OC7M0
OC7D7
OC7D6
OC7D5
OC7D4
OC7D3
OC7D2
OC7D1
OC7D0
TCNT15
TCNT14
TCNT13
TCNT12
TCNT11
TCNT10
TCNT9
TCNT8
TCNT7
TCNT6
TCNT5
TCNT4
TCNT3 0
TCNT2 0
TCNT1 0
TCNT0 0
TEN
TSWAI
TSFRZ
TFFCA
TOV7
TOV6
TOV5
TOV4
TOV3
TOV2
TOV1
TOV0
OM7
OL7
OM6
OL6
OM5
OL5
OM4
OL4
OM3
OL3
OM2
OL2
OM1
OL1
OM0
OL0
EDG7B
EDG7A
EDG6B
EDG6A
EDG5B
EDG5A
EDG4B
EDG4A
EDG3B
EDG3A
EDG2B
EDG2A
EDG1B
EDG1A
EDG0B
EDG0A
C7I
C6I
C5I
C4I
C3I
C2I
C1I
C0I
= Unimplemented or Reserved
Freescale Semiconductor
441
Register Name 0x000D TSCR2 0x000E TFLG1 0x000F TFLG2 R W R W R W R 0x00100x001F TCxHTCxL W R W 0x0020 PACTL 0x0021 PAFLG 0x0022 PACNTH 0x0023 PACNTL 0x00240x002F Reserved R W R W R W R W R W
Bit 7 TOI
6 0
5 0
4 0
3 TCRE
2 PR2
1 PR1
Bit 0 PR0
C7F
C6F 0
C5F 0
C4F 0
C3F 0
C2F 0
C1F 0
C0F 0
TOF
Bit 15
Bit 14
Bit 13
Bit 12
Bit 11
Bit 10
Bit 9
Bit 8
Bit 7 0
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
PAEN 0
PAMOD 0
PEDGE 0
CLK1 0
CLK0 0
PAOVI
PAI
PAOVF
PAIF
PACNT15
PACNT14
PACNT13
PACNT12
PACNT11
PACNT10
PACNT9
PACNT8
PACNT7
PACNT6
PACNT5
PACNT4
PACNT3
PACNT2
PACNT1
PACNT0
= Unimplemented or Reserved
15.3.2.1
Read: Anytime
442
Freescale Semiconductor
Write: Anytime
Table 15-2. TIOS Field Descriptions
Field 7:0 IOS[7:0] Description Input Capture or Output Compare Channel Conguration 0 The corresponding channel acts as an input capture. 1 The corresponding channel acts as an output compare.
15.3.2.2
R W Reset
0 FOC7 0
0 FOC6 0
0 FOC5 0
0 FOC4 0
0 FOC3 0
0 FOC2 0
0 FOC1 0
0 FOC0 0
Read: Anytime but will always return 0x0000 (1 state is transient) Write: Anytime
Table 15-3. CFORC Field Descriptions
Field 7:0 FOC[7:0] Description Force Output Compare Action for Channel 7:0 A write to this register with the corresponding data bit(s) set causes the action which is programmed for output compare x to occur immediately. The action taken is the same as if a successful comparison had just taken place with the TCx register except the interrupt ag does not get set. Note: A successful channel 7 output compare overrides any channel 6:0 compares. If forced output compare on any channel occurs at the same time as the successful output compare then forced output compare action will take precedence and interrupt ag wont get set.
15.3.2.3
Freescale Semiconductor
443
15.3.2.4
15.3.2.5
444
Freescale Semiconductor
The 16-bit main timer is an up counter. A full access for the counter register should take place in one clock cycle. A separate read/write for high byte and low byte will give a different result than accessing them as a word. Read: Anytime Write: Has no meaning or effect in the normal mode; only writable in special modes (test_mode = 1). The period of the rst count after a write to the TCNT registers may be a different size because the write is not synchronized with the prescaler clock.
15.3.2.6
= Unimplemented or Reserved
6 TSWAI
Freescale Semiconductor
445
4 TFFCA
15.3.2.7
15.3.2.8
446
Freescale Semiconductor
7:0 OLx
To operate the 16-bit pulse accumulator independently of input capture or output compare 7 and 0 respectively the user must set the corresponding bits IOSx = 1, OMx = 0 and OLx = 0. OC7M7 in the OC7M register must also be cleared.
Freescale Semiconductor
447
15.3.2.9
448
Freescale Semiconductor
R TOI W Reset 0
= Unimplemented or Reserved
Freescale Semiconductor
449
2 PR[2:0]
NOTE The newly selected prescale factor will not take effect until the next synchronized edge where all prescale counter stages equal zero.
Read: Anytime Write: Used in the clearing mechanism (set bits cause corresponding bits to be cleared). Writing a zero will not affect current status of the bit.
450
Freescale Semiconductor
R TOF W Reset 0
Unimplemented or Reserved
TFLG2 indicates when interrupt conditions have occurred. To clear a bit in the ag register, write the bit to one. Read: Anytime Write: Used in clearing mechanism (set bits cause corresponding bits to be cleared). Any access to TCNT will clear TFLG2 register if the TFFCA bit in TSCR register is set.
Table 15-16. TRLG2 Field Descriptions
Field 7 TOF Description Timer Overow Flag Set when 16-bit free-running timer overows from 0xFFFF to 0x0000. This bit is cleared automatically by a write to the TFLG2 register with bit 7 set. (See also TCRE control bit explanation.)
15.3.2.14 Timer Input Capture/Output Compare Registers High and Low 07 (TCxH and TCxL)
Module Base + 0x0010 = TC0H 0x0012 = TC1H 0x0014 = TC2H 0x0016 = TC3H
15 14
Freescale Semiconductor
451
Module Base + 0x0011 = TC0L 0x0013 = TC1L 0x0015 = TC2L 0x0017 = TC3L
7 6
Depending on the TIOS bit for the corresponding channel, these registers are used to latch the value of the free-running counter when a dened transition is sensed by the corresponding input capture edge detector or to trigger an output action for output compare. Read: Anytime Write: Anytime for output compare function.Writes to these registers have no meaning or effect during input capture. All timer input capture/output compare registers are reset to 0x0000. NOTE Read/Write access in byte mode for high byte should takes place before low byte otherwise it will give a different result.
R W Reset
Unimplemented or Reserved
When PAEN is set, the PACT is enabled.The PACT shares the input pin with IOC7. Read: Any time Write: Any time
452
Freescale Semiconductor
5 PAMOD
4 PEDGE
NOTE If the timer is not active (TEN = 0 in TSCR), there is no divide-by-64 because the 64 clock is generated by the timer prescaler.
Freescale Semiconductor
453
For the description of PACLK please refer Figure 15-24. If the pulse accumulator is disabled (PAEN = 0), the prescaler clock from the timer is always used as an input clock to the timer counter. The change from one selected clock to the other happens immediately after these bits are written.
R W Reset
0 PAOVF PAIF 0
Unimplemented or Reserved
Read: Anytime Write: Anytime When the TFFCA bit in the TSCR register is set, any access to the PACNT register will clear all the ags in the PAFLG register.
Table 15-20. PAFLG Field Descriptions
Field 1 PAOVF 0 PAIF Description Pulse Accumulator Overow Flag Set when the 16-bit pulse accumulator overows from 0xFFFF to 0x0000. This bit is cleared automatically by a write to the PAFLG register with bit 1 set. Pulse Accumulator Input edge Flag Set when the selected edge is detected at the IOC7 input pin.In event mode the event edge triggers PAIF and in gated time accumulation mode the trailing edge of the gate signal at the IOC7 input pin triggers PAIF. This bit is cleared by a write to the PAFLG register with bit 0 set. Any access to the PACNT register will clear all the ags in this register when TFFCA bit in register TSCR(0x0006) is set.
454
Freescale Semiconductor
Read: Anytime Write: Anytime These registers contain the number of active input edges on its input pin since the last reset. When PACNT overows from 0xFFFF to 0x0000, the Interrupt ag PAOVF in PAFLG (0x0021) is set. Full count register access should take place in one clock cycle. A separate read/write for high byte and low byte will give a different result than accessing them as a word. NOTE Reading the pulse accumulator counter registers immediately after an active edge on the pulse accumulator input pin may miss the last count because the input has to be synchronized with the bus clock rst.
15.4
Functional Description
This section provides a complete functional description of the timer TIM16B8CV1 block. Please refer to the detailed timer block diagram in Figure 15-28 as necessary.
Freescale Semiconductor
455
Bus Clock
CLK[1:0] PR[2:1:0] PACLK PACLK/256 PACLK/65536
PRESCALER
TCNT(hi):TCNT(lo) CLEAR COUNTER 16-BIT COUNTER TE CHANNEL 0 16-BIT COMPARATOR TC0 EDG0A EDG0B EDGE DETECT C0F OM:OL0 TOV0
TOF TOI
INTERRUPT LOGIC
TOF
C0F
CH. 0 CAPTURE
IOC0 PIN LOGIC CH. 0COMPARE
IOC0 PIN
IOC0 C1F
OM:OL1 TOV1 CH. 1 CAPTURE IOC1 PIN LOGIC CH. 1 COMPARE IOC1 PIN
CHANNEL2
IOC1
CHANNEL7 16-BIT COMPARATOR TC7 EDG7A EDG7B EDGE DETECT C7F OM:O73 TOV7
C7F
CH.7 CAPTURE IOC7 PIN PA INPUT LOGIC CH. 7 COMPARE IOC7 PIN
IOC7
PAOVF
PACNT(hi):PACNT(lo)
PEDGE PAE
EDGE DETECT
16-BIT COUNTER PACLK PAMOD INTERRUPT LOGIC DIVIDE-BY-64 PAI PAIF PAIF
Bus Clock
PAOVF PAOVI
15.4.1
Prescaler
The prescaler divides the bus clock by 1,2,4,8,16,32,64 or 128. The prescaler select bits, PR[2:0], select the prescaler divisor. PR[2:0] are in timer system control register 2 (TSCR2).
456
Freescale Semiconductor
15.4.2
Input Capture
Clearing the I/O (input/output) select bit, IOSx, congures channel x as an input capture channel. The input capture function captures the time at which an external event occurs. When an active edge occurs on the pin of an input capture channel, the timer transfers the value in the timer counter into the timer channel registers, TCx. The minimum pulse width for the input capture input is greater than two bus clocks. An input capture on channel x sets the CxF ag. The CxI bit enables the CxF ag to generate interrupt requests.
15.4.3
Output Compare
Setting the I/O select bit, IOSx, congures channel x as an output compare channel. The output compare function can generate a periodic pulse with a programmable polarity, duration, and frequency. When the timer counter reaches the value in the channel registers of an output compare channel, the timer can set, clear, or toggle the channel pin. An output compare on channel x sets the CxF ag. The CxI bit enables the CxF ag to generate interrupt requests. The output mode and level bits, OMx and OLx, select set, clear, toggle on output compare. Clearing both OMx and OLx disconnects the pin from the output logic. Setting a force output compare bit, FOCx, causes an output compare on channel x. A forced output compare does not set the channel ag. A successful output compare on channel 7 overrides output compares on all other output compare channels. The output compare 7 mask register masks the bits in the output compare 7 data register. The timer counter reset enable bit, TCRE, enables channel 7 output compares to reset the timer counter. A channel 7 output compare can reset the timer counter even if the IOC7 pin is being used as the pulse accumulator input. Writing to the timer port bit of an output compare pin does not affect the pin state. The value written is stored in an internal latch. When the pin becomes available for general-purpose output, the last value written to the bit appears at the pin.
15.4.4
Pulse Accumulator
The pulse accumulator (PACNT) is a 16-bit counter that can operate in two modes: Event counter mode Counting edges of selected polarity on the pulse accumulator input pin, PAI. Gated time accumulation mode Counting pulses from a divide-by-64 clock. The PAMOD bit selects the mode of operation. The minimum pulse width for the PAI input is greater than two bus clocks.
Freescale Semiconductor
457
15.4.5
Clearing the PAMOD bit congures the PACNT for event counter operation. An active edge on the IOC7 pin increments the pulse accumulator counter. The PEDGE bit selects falling edges or rising edges to increment the count. NOTE The PACNT input and timer channel 7 use the same pin IOC7. To use the IOC7, disconnect it from the output logic by clearing the channel 7 output mode and output level bits, OM7 and OL7. Also clear the channel 7 output compare 7 mask bit, OC7M7. The Pulse Accumulator counter register reect the number of active input edges on the PACNT input pin since the last reset. The PAOVF bit is set when the accumulator rolls over from 0xFFFF to 0x0000. The pulse accumulator overow interrupt enable bit, PAOVI, enables the PAOVF ag to generate interrupt requests. NOTE The pulse accumulator counter can operate in event counter mode even when the timer enable bit, TEN, is clear.
15.4.6
Setting the PAMOD bit congures the pulse accumulator for gated time accumulation operation. An active level on the PACNT input pin enables a divided-by-64 clock to drive the pulse accumulator. The PEDGE bit selects low levels or high levels to enable the divided-by-64 clock. The trailing edge of the active level at the IOC7 pin sets the PAIF. The PAI bit enables the PAIF ag to generate interrupt requests. The pulse accumulator counter register reect the number of pulses from the divided-by-64 clock since the last reset. NOTE The timer prescaler generates the divided-by-64 clock. If the timer is not active, there is no divided-by-64 clock.
15.5
Resets
The reset state of each individual bit is listed within Section 15.3, Memory Map and Register Denition which details the registers and their bit elds.
15.6
Interrupts
This section describes interrupts originated by the TIM16B8CV1 block. Table 15-21 lists the interrupts generated by the TIM16B8CV1 to communicate with the MCU.
458
Freescale Semiconductor
Vector1
Priority1
Source Timer Channel 70 Pulse Accumulator Input Pulse Accumulator Overow Timer Overow
Description Active high timer channel interrupts 70 Active high pulse accumulator input interrupt Pulse accumulator overow interrupt Timer Overow interrupt
The TIM16B8CV1 uses a total of 11 interrupt vectors. The interrupt vector offsets and interrupt numbers are chip dependent.
15.6.1
This active high outputs will be asserted by the module to request a timer channel 7 0 interrupt to be serviced by the system controller.
15.6.2
This active high output will be asserted by the module to request a timer pulse accumulator input interrupt to be serviced by the system controller.
15.6.3
This active high output will be asserted by the module to request a timer pulse accumulator overow interrupt to be serviced by the system controller.
15.6.4
This active high output will be asserted by the module to request a timer overow interrupt to be serviced by the system controller.
Freescale Semiconductor
459
460
Freescale Semiconductor
16.1.1
Features
The block VREG3V3V2 includes these distinctive features: Two parallel, linear voltage regulators Bandgap reference Low-voltage detect (LVD) with low-voltage interrupt (LVI) Power-on reset (POR) Low-voltage reset (LVR)
16.1.2
Modes of Operation
There are three modes VREG3V3V2 can operate in: Full-performance mode (FPM) (MCU is not in stop mode) The regulator is active, providing the nominal supply voltage of 2.5 V with full current sourcing capability at both outputs. Features LVD (low-voltage detect), LVR (low-voltage reset), and POR (power-on reset) are available. Reduced-power mode (RPM) (MCU is in stop mode) The purpose is to reduce power consumption of the device. The output voltage may degrade to a lower value than in full-performance mode, additionally the current sourcing capability is substantially reduced. Only the POR is available in this mode, LVD and LVR are disabled. Shutdown mode Controlled by VREGEN (see device overview chapter for connectivity of VREGEN). This mode is characterized by minimum power consumption. The regulator outputs are in a high impedance state, only the POR feature is available, LVD and LVR are disabled. This mode must be used to disable the chip internal regulator VREG3V3V2, i.e., to bypass the VREG3V3V2 to use external supplies.
Freescale Semiconductor
461
16.1.3
Block Diagram
Figure 16-1 shows the function principle of VREG3V3V2 by means of a block diagram. The regulator core REG consists of two parallel sub-blocks, REG1 and REG2, providing two independent output voltages.
VDDPLL VSSPLL
REG1
VDD
LVD
LVR
LVR
POR
POR
VSSA
VSS
VREGEN
CTRL LVI
REG: Regulator Core LVD: Low Voltage Detect CTRL: Regulator Control LVR: Low Voltage Reset POR: Power-on Reset PIN
462
Freescale Semiconductor
16.2
Due to the nature of VREG3V3V2 being a voltage regulator providing the chip internal power supply voltages most signals are power supply signals connected to pads. Table 16-1 shows all signals of VREG3V3V2 associated with pins.
Table 16-1. VREG3V3V2 Signal Properties
Name VDDR VDDA VSSA VDD VSS VDDPLL VSSPLL VREGEN (optional) Port Function VREG3V3V2 power input (positive supply) VREG3V3V2 quiet input (positive supply) VREG3V3V2 quiet input (ground) VREG3V3V2 primary output (positive supply) VREG3V3V2 primary output (ground) VREG3V3V2 secondary output (positive supply) VREG3V3V2 secondary output (ground) VREG3V3V2 (Optional) Regulator Enable Reset State Pull Up
16.2.1
Signal VDDR is the power input of VREG3V3V2. All currents sourced into the regulator loads flow through this pin. A chip external decoupling capacitor (100 nF...220 nF, X7R ceramic) between VDDR and VSSR can smoothen ripple on VDDR. For entering Shutdown Mode, pin VDDR should also be tied to ground on devices without a VREGEN pin.
16.2.2
Signals VDDA/VSSA which are supposed to be relatively quiet are used to supply the analog parts of the regulator. Internal precision reference circuits are supplied from these signals. A chip external decoupling capacitor (100 nF...220 nF, X7R ceramic) between VDDA and VSSA can further improve the quality of this supply.
Freescale Semiconductor
463
16.2.3
Signals VDD/VSS are the primary outputs of VREG3V3V2 that provide the power supply for the core logic. These signals are connected to device pins to allow external decoupling capacitors (100 nF...220 nF, X7R ceramic). In Shutdown Mode an external supply at VDD/VSS can replace the voltage regulator.
16.2.4
Signals VDDPLL/VSSPLL are the secondary outputs of VREG3V3V2 that provide the power supply for the PLL and oscillator. These signals are connected to device pins to allow external decoupling capacitors (100 nF...220 nF, X7R ceramic). In Shutdown Mode an external supply at VDDPLL/VSSPLL can replace the voltage regulator.
16.2.5
This optional signal is used to shutdown VREG3V3V2. In that case VDD/VSS and VDDPLL/VSSPLL must be provided externally. Shutdown Mode is entered with VREGEN being low. If VREGEN is high, the VREG3V3V2 is either in Full Performance Mode or in Reduced Power Mode. For the connectivity of VREGEN see device overview chapter. NOTE Switching from FPM or RPM to shutdown of VREG3V3V2 and vice versa is not supported while the MCU is powered.
16.3
16.3.1
464
Freescale Semiconductor
16.3.2
Register Descriptions
The following paragraphs describe, in address order, all the VREG3V3V2 registers and their individual bits.
16.3.2.1
R W Reset
= Unimplemented or Reserved
Figure 16-2. VREG3V3 Control Register (VREGCTRL) Table 16-3. MCCTL1 Field Descriptions
Field 2 LVDS 1 LVIE 0 LVIF Description Low-Voltage Detect Status Bit This read-only status bit reects the input voltage. Writes have no effect. 0 Input voltage VDDA is above level VLVID or RPM or shutdown mode. 1 Input voltage VDDA is below level VLVIA and FPM. Low-Voltage Interrupt Enable Bit 0 Interrupt request is disabled. 1 Interrupt will be requested whenever LVIF is set. Low-Voltage Interrupt Flag LVIF is set to 1 when LVDS status bit changes. This ag can only be cleared by writing a 1. Writing a 0 has no effect. If enabled (LVIE = 1), LVIF causes an interrupt request. 0 No change in LVDS bit. 1 LVDS bit has changed.
NOTE On entering the Reduced Power Mode the LVIF is not cleared by the VREG3V3V2.
16.4
Functional Description
Block VREG3V3V2 is a voltage regulator as depicted in Figure 16-1. The regulator functional elements are the regulator core (REG), a low-voltage detect module (LVD), a power-on reset module (POR) and a low-voltage reset module (LVR). There is also the regulator control block (CTRL) which represents the interface to the digital core logic but also manages the operating modes of VREG3V3V2.
Freescale Semiconductor
465
16.4.1
VREG3V3V2, respectively its regulator core has two parallel, independent regulation loops (REG1 and REG2) that differ only in the amount of current that can be sourced to the connected loads. Therefore, only REG1 providing the supply at VDD/VSS is explained. The principle is also valid for REG2. The regulator is a linear series regulator with a bandgap reference in its Full Performance Mode and a voltage clamp in Reduced Power Mode. All load currents flow from input VDDR to VSS or VSSPLL, the reference circuits are connected to VDDA and VSSA.
16.4.2
Full-Performance Mode
In Full Performance Mode, a fraction of the output voltage (VDD) and the bandgap reference voltage are fed to an operational amplifier. The amplified input voltage difference controls the gate of an output driver which basically is a large NMOS transistor connected to the output.
16.4.3
Reduced-Power Mode
In Reduced Power Mode, the driver gate is connected to a buffered fraction of the input voltage (VDDR). The operational amplifier and the bandgap are disabled to reduce power consumption.
16.4.4
sub-block LVD is responsible for generating the low-voltage interrupt (LVI). LVD monitors the input voltage (VDDAVSSA) and continuously updates the status flag LVDS. Interrupt flag LVIF is set whenever status flag LVDS changes its value. The LVD is available in FPM and is inactive in Reduced Power Mode and Shutdown Mode.
16.4.5
This functional block monitors output VDD. If VDD is below VPORD, signal POR is high, if it exceeds VPORD, the signal goes low. The transition to low forces the CPU in the power-on sequence. Due to its role during chip power-up this module must be active in all operating modes of VREG3V3V2.
16.4.6
Block LVR monitors the primary output voltage VDD. If it drops below the assertion level (VLVRA) signal LVR asserts and when rising above the deassertion level (VLVRD) signal LVR negates again. The LVR function is available only in Full Performance Mode.
16.4.7
This part contains the register block of VREG3V3V2 and further digital functionality needed to control the operating modes. CTRL also represents the interface to the digital core logic.
466
Freescale Semiconductor
16.5
Resets
This subsection describes how VREG3V3V2 controls the reset of the MCU.The reset values of registers and signals are provided in Section 16.3, Memory Map and Register Definition. Possible reset sources are listed in Table 16-4.
Table 16-4. VREG3V3V2 Reset Sources
Reset Source Power-on reset Low-voltage reset Always active Available only in Full Performance Mode Local Enable
16.5.1
Power-On Reset
During chip power-up the digital core may not work if its supply voltage VDD is below the POR deassertion level (VPORD). Therefore, signal POR which forces the other blocks of the device into reset is kept high until VDD exceeds VPORD. Then POR becomes low and the reset generator of the device continues the start-up sequence. The power-on reset is active in all operation modes of VREG3V3V2.
16.5.2
Low-Voltage Reset
For details on low-voltage reset see Section 16.4.6, LVR Low-Voltage Reset.
16.6
Interrupts
This subsection describes all interrupts originated by VREG3V3V2. The interrupt vectors requested by VREG3V3V2 are listed in Table 16-5. Vector addresses and interrupt priorities are defined at MCU level.
Table 16-5. VREG3V3V2 Interrupt Vectors
Interrupt Source Low Voltage Interrupt (LVI) Local Enable LVIE = 1; Available only in Full Performance Mode
16.6.1
In FPM VREG3V3V2 monitors the input voltage VDDA. Whenever VDDA drops below level VLVIA the status bit LVDS is set to 1. Vice versa, LVDS is reset to 0 when VDDA rises above level VLVID. An interrupt, indicated by flag LVIF = 1, is triggered by any change of the status bit LVDS if interrupt enable bit LVIE = 1. NOTE On entering the Reduced Power Mode, the LVIF is not cleared by the VREG3V3V2.
Freescale Semiconductor
467
468
Freescale Semiconductor
The FTS16K module implements a 16 Kbyte Flash (nonvolatile) memory. The Flash memory contains one array of 16 Kbytes organized as 256 rows of 64 bytes with an erase sector size of eight rows (512 bytes). The Flash array may be read as either bytes, aligned words, or misaligned words. Read access time is one bus cycle for byte and aligned word, and two bus cycles for misaligned words. The Flash array is ideal for program and data storage for single-supply applications allowing for eld reprogramming without requiring external voltage sources for program or erase. Program and erase functions are controlled by a command driven interface. The Flash module supports both mass erase and sector erase. An erased bit reads 1 and a programmed bit reads 0. The high voltage required to program and erase is generated internally. It is not possible to read from a Flash array while it is being erased or programmed. CAUTION A Flash word must be in the erased state before being programmed. Cumulative programming of bits within a Flash word is not allowed.
17.1.1
Glossary
Command Write Sequence A three-step MCU instruction sequence to program, erase, or erase verify the Flash array memory.
17.1.2
Features
16 Kbytes of Flash memory comprised of one 16 Kbyte array divided into 32 sectors of 512 bytes Automated program and erase algorithm Interrupts on Flash command completion and command buffer empty Fast sector erase and word program operation 2-stage command pipeline for faster multi-word program times Flexible protection scheme to prevent accidental program or erase Single power supply for Flash program and erase operations Security feature to prevent unauthorized access to the Flash array memory
Freescale Semiconductor
469
17.1.3
Modes of Operation
See Section 17.4.2, Operating Modes for a description of the Flash module operating modes. For program and erase operations, refer to Section 17.4.1, Flash Command Operations.
17.1.4
Block Diagram
FTS16K
Flash Interface
Command Pipeline
Flash Array
cmd2 addr2 data2 cmd1 addr1 data1
8K * 16 Bits
sector 0 sector 1
Registers
Oscillator Clock
17.2
470
Freescale Semiconductor
17.3
17.3.1
The FTS16K memory map is shown in Figure 17-2. The HCS12 architecture places the Flash array addresses between 0xC000 and 0xFFFF. The content of the HCS12 Core PPAGE register is used to map the logical page ranging from address 0x8000 to 0xBFFF to a physical 16K byte page in the Flash array memory.1 The FPROT register (see Section 17.3.2.5) can be set to globally protect the entire Flash array or one growing downward from the Flash array end address. The higher address area is mainly targeted to hold the boot loader code since it covers the vector space. Default protection settings as well as security information that allows the MCU to restrict access to the Flash module are stored in the Flash conguration eld described in Table 17-1.
Table 17-1. Flash Conguration Field
Flash Address 0xFF000xFF07 0xFF080xFF0C 0xFF0D 0xFF0E 0xFF0F Size (bytes) 8 5 1 1 1 Description Backdoor Key to unlock security Reserved Flash Protection byte Refer to Section 17.3.2.5, Flash Protection Register (FPROT) Reserved Flash Security/Options byte Refer to Section 17.3.2.2, Flash Security Register (FSEC)
1. By placing 0x3F in the HCS12 Core PPAGE register, the 16 Kbyte page can be seen twice in the MCU memory map.
Freescale Semiconductor
471
MODULE BASE + 0x0000 MODULE BASE + 0x000F 0x8000 Flash Registers 16 bytes
Flash Array
0x3F
FLASH_START = 0xC000
0xE000
0x3F
Figure 17-2. Flash Memory Map Table 17-2. Flash Array Memory Map Summary
MCU Address Range 0x80000xBFFF PPAGE 0x3F Protectable Address Range 0xB8000xBFFF 0xB0000xBFFF 0xA0000xBFFF 0x80000xBFFF 0xC0000xFFFF Unpaged (0x3F) 0xF8000xFFFF 0xF0000xFFFF 0xE0000xFFFF 0xC0000xFFFF
472
Freescale Semiconductor
17.3.2
Register Descriptions
The Flash module contains a set of 16 control and status registers located between module base + 0x0000 and 0x000F. A summary of the Flash module registers is given in Figure 17-3. Detailed descriptions of each register bit are provided.
Register Name R W R 0x0001 FSEC W 0x0002 R RESERVED1 W 0x0000 FCLKDIV
(1)
6 PRDIV8 KEYEN0 0
5 FDIV5 NV5 0
4 FDIV4 NV4 0
3 FDIV3 NV3 0
2 FDIV2 NV2 0
1 FDIV1 SEC1 0
0x0003 FCNFG 0x0004 FPROT 0x0005 FSTAT 0x0006 FCMD 0x0007 RESERVED21 0x0008 FADDRHI1 0x0009 FADDRLO1 0x000A FDATAHI1 0x000B FDATALO1 0x000C RESERVED31 0x000D RESERVED41 0x000E RESERVED51 0x000F RESERVED61
R W R W R W R W R W R W R W R W R W R W R W R W R W
FPHS1 ACCERR 0 0
FPHS0 0 0 0
NV2 BLANK
NV1 FAIL 0 0
NV0 DONE
CMDB6 0 0
CMDB2 0
CMDB0 0
0 0 0 0
0 0 0 0
0 0 0 0
0 0 0 0
0 0 0 0
0 0 0 0
0 0 0 0
0 0 0 0
= Unimplemented or Reserved
Freescale Semiconductor
473
17.3.2.1
The FCLKDIV register is used to control timed events in program and erase algorithms.
Module Base + 0x0000
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
All bits in the FCLKDIV register are readable, bits 60 are write once and bit 7 is not writable.
Table 17-3. FCLKDIV Field Descriptions
Field 7 FDIVLD 6 PRDIV8 50 FDIV[5:0] Description Clock Divider Loaded 0 FCLKDIV register has not been written 1 FCLKDIV register has been written to since the last reset Enable Prescalar by 8 0 The oscillator clock is directly fed into the Flash clock divider 1 The oscillator clock is divided by 8 before feeding into the Flash clock divider Clock Divider Bits The combination of PRDIV8 and FDIV[5:0] must divide the oscillator clock down to a frequency of 150 kHz 200 kHz. The maximum divide ratio is 512. Refer to Section 17.4.1.1, Writing the FCLKDIV Register for more information.
17.3.2.2
The FSEC register holds all bits associated with the security of the MCU and Flash module.
Module Base + 0x0001
7 6 5 4 3 2 1 0
R W Reset
KEYEN1
KEYEN0
NV5
NV4
NV3
NV2
SEC1
SEC0
= Unimplemented or Reserved
All bits in the FSEC register are readable but not writable. The FSEC register is loaded from the Flash conguration eld at 0xFF0F during the reset sequence, indicated by F in Figure 17-5.
474
Freescale Semiconductor
76 Backdoor Key Security Enable Bits The KEYEN[1:0] bits dene the enabling of the backdoor key access KEYEN[1:0] to the Flash module as shown in Table 17-5. 52 NV[5:2] 10 SEC[1:0] Nonvolatile Flag Bits The NV[5:2] bits are available to the user as nonvolatile ags. Flash Security Bits The SEC[1:0] bits dene the security state of the MCU as shown in Table 17-6. If the Flash module is unsecured using backdoor key access, the SEC[1:0] bits are forced to 1:0.
10
The security function in the Flash module is described in Section 17.4.3, Flash Module Security.
17.3.2.3
RESERVED1
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x0002
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
Freescale Semiconductor
475
17.3.2.4
The FCNFG register enables the Flash interrupts and gates the security backdoor key writes.
Module Base + 0x0003
7 6 5 4 3 2 1 0
= Unimplemented or Reserved
CBEIE, CCIE, and KEYACC are readable and writable while remaining bits read 0 and are not writable. KEYACC is only writable if the KEYEN bit in the FSEC register is set to the enabled state (see Section 17.3.2.2).
Table 17-7. FCNFG Field Descriptions
Field 7 CBEIE Description Command Buffer Empty Interrupt Enable The CBEIE bit enables the interrupts in case of an empty command buffer in the Flash module. 0 Command Buffer Empty interrupts disabled 1 An interrupt will be requested whenever the CBEIF ag is set (see Section 17.3.2.6) Command Complete Interrupt Enable The CCIE bit enables the interrupts in case of all commands being completed in the Flash module. 0 Command Complete interrupts disabled 1 An interrupt will be requested whenever the CCIF ag is set (see Section 17.3.2.6) Enable Security Key Writing. 0 Flash writes are interpreted as the start of a command write sequence 1 Writes to the Flash array are interpreted as a backdoor key while reads of the Flash array return invalid data
6 CCIE
5 KEYACC
17.3.2.5
The FPROT register denes which Flash sectors are protected against program or erase.
Module Base + 0x0004
7 6 5 4 3 2 1 0
The FPROT register is readable in normal and special modes. FPOPEN can only be written from a 1 to a 0. FPHS[1:0] can be written anytime until FPHDIS is cleared. The FPROT register is loaded from Flash address 0xFF0D during the reset sequence, indicated by F in Figure 17-8.
476
Freescale Semiconductor
To change the Flash protection that will be loaded on reset, the upper sector of the Flash array must be unprotected, then the Flash protection byte located at Flash address 0xFF0D must be written to. A protected Flash sector is disabled by FPHDIS while the size of the protected sector is dened by FPHS[1:0] in the FPROT register. Trying to alter any of the protected areas will result in a protect violation error and the PVIOL ag will be set in the FSTAT register (see Section 17.3.2.6). A mass erase of the whole Flash array is only possible when protection is fully disabled by setting the FPOPEN and FPHDIS bits. An attempt to mass erase a Flash array while protection is enabled will set the PVIOL ag in the FSTAT register.
Table 17-8. FPROT Field Descriptions
Field 7 FPOPEN Description Protection Function for Program or Erase The FPOPEN bit is used to either select an address range to be protected using the FPHDIS and FPHS[1:0] bits or to select the same address range to be unprotected as shown in Table 17-9. 0 The FPHDIS bit allows a Flash address range to be unprotected 1 The FPHDIS bit allows a Flash address range to be protected Nonvolatile Flag Bit The NV6 bit should remain in the erased state for future enhancements. Flash Protection Higher Address Range Disable The FPHDIS bit determines whether there is a protected/unprotected area in the higher space of the Flash address map. 0 Protection/unprotection enabled 1 Protection/unprotection disabled Flash Protection Higher Address Size The FPHS[1:0] bits determine the size of the protected/unprotected sector as shown in Table 17-10. The FPHS[1:0] bits can only be written to while the FPHDIS bit is set. Nonvolatile Flag Bits The NV[2:0] bits should remain in the erased state for future enhancements.
6 NV6 5 FPHDIS
43 FPHS[1:0] 20 NV[2:0]
Freescale Semiconductor
477
Figure 17-9 illustrates all possible protection scenarios. Although the protection scheme is loaded from the Flash array after reset, it is allowed to change in normal modes. This protection scheme can be used by applications requiring re-programming in single chip mode while providing as much protection as possible if no re-programming is required.
FPHDIS = 1 Scenario 3 FPHDIS = 0 2
FPOPEN = 1
0xFFFF
Scenario
FPOPEN = 0
17.3.2.5.1
The general guideline is that protection can only be added, not removed. All valid transitions between Flash protection scenarios are specied in Table 17-11. Any attempt to write an invalid scenario to the FPROT register will be ignored and the FPROT register will remain unchanged. The contents of the FPROT register reect the active protection scenario.
Table 17-11. Flash Protection Scenario Transitions
From Protection Scenario 0 1 2 To Protection Scenario(1) 0 X 1 X X X X 2 3
478
FPHS[1:0]
FPHS[1:0]
Freescale Semiconductor
17.3.2.6
The FSTAT register denes the status of the Flash command controller and the results of command execution.
Module Base + 0x0005
7 6 5 4 3 2 1 0
R CBEIF W Reset 1
BLANK FAIL
DONE
= Unimplemented or Reserved
In normal modes, bits CBEIF, PVIOL, and ACCERR are readable and writable, bits CCIF and BLANK are readable and not writable, remaining bits, including FAIL and DONE, read 0 and are not writable. In special modes, FAIL is readable and writable while DONE is readable but not writable. FAIL must be clear in special modes when starting a command write sequence.
Table 17-12. FSTAT Field Descriptions
Field 7 CBEIF Description Command Buffer Empty Interrupt Flag The CBEIF ag indicates that the address, data and command buffers are empty so that a new command write sequence can be started. The CBEIF ag is cleared by writing a 1 to CBEIF. Writing a 0 to the CBEIF ag has no effect on CBEIF. Writing a 0 to CBEIF after writing an aligned word to the Flash address space but before CBEIF is cleared will abort a command write sequence and cause the ACCERR ag in the FSTAT register to be set. Writing a 0 to CBEIF outside of a command write sequence will not set the ACCERR ag. The CBEIF ag is used together with the CBEIE bit in the FCNFG register to generate an interrupt request (see Figure 17-26). 0 Buffers are full 1 Buffers are ready to accept a new command Command Complete Interrupt Flag The CCIF ag indicates that there are no more commands pending. The CCIF ag is cleared when CBEIF is clear and sets automatically upon completion of all active and pending commands. The CCIF ag does not set when an active commands completes and a pending command is fetched from the command buffer. Writing to the CCIF ag has no effect. The CCIF ag is used together with the CCIE bit in the FCNFG register to generate an interrupt request (see Figure 17-26). 0 Command in progress 1 All commands are completed
6 CCIF
Freescale Semiconductor
479
4 ACCERR
2 BLANK
1 FAIL
0 DONE
17.3.2.7
R W Reset
0 CMDB6 0 0 CMDB5 0
0 CMDB2
0 CMDB0 0 0
= Unimplemented or Reserved
Bits CMDB6, CMDB5, CMDB2, and CMDB0 are readable and writable during a command write sequence while bits 7, 4, 3, and 1 read 0 and are not writable.
480
Freescale Semiconductor
17.3.2.8
RESERVED2
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x0007
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
17.3.2.9
\
R W Reset
0 FABHI
= Unimplemented or Reserved
Freescale Semiconductor
481
R FABLO W Reset 0 0 0 0 0 0 0 0
In normal modes, all FABHI and FABLO bits read 0 and are not writable. In special modes, the FABHI and FABLO bits are readable and writable. For sector erase, the MCU address bits [8:0] are ignored. For mass erase, any address within the Flash array is valid to start the command.
R FDHI W Reset 0 0 0 0 0 0 0 0
R FDLO W Reset 0 0 0 0 0 0 0 0
In normal modes, all FDATAHI and FDATALO bits read 0 and are not writable. In special modes, all FDATAHI and FDATALO bits are readable and writable when writing to an address within the Flash address range.
17.3.2.11 RESERVED3
This register is reserved for factory testing and is not accessible to the user.
482
Freescale Semiconductor
R W Reset
= Unimplemented or Reserved
17.3.2.12 RESERVED4
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x000D
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
17.3.2.13 RESERVED5
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x000E
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
17.3.2.14 RESERVED6
This register is reserved for factory testing and is not accessible to the user.
Freescale Semiconductor
483
R W Reset
= Unimplemented or Reserved
17.4
17.4.1
Functional Description
Flash Command Operations
Write operations are used for the program, erase, and erase verify algorithms described in this section. The program and erase algorithms are controlled by a state machine whose timebase FCLK is derived from the oscillator clock via a programmable divider. The FCMD register as well as the associated FADDR and FDATA registers operate as a buffer and a register (2-stage FIFO) so that a new command along with the necessary data and address can be stored to the buffer while the previous command is still in progress. This pipelined operation allows a time optimization when programming more than one word on a specic row, as the high voltage generation can be kept active in between two programming commands. The pipelined operation also allows a simplication of command launching. Buffer empty as well as command completion are signalled by ags in the FSTAT register with corresponding interrupts generated, if enabled. The next sections describe: How to write the FCLKDIV register Command write sequence used to program, erase or erase verify the Flash array Valid Flash commands Errors resulting from illegal Flash operations
17.4.1.1
Prior to issuing any Flash command after a reset, it is rst necessary to write the FCLKDIV register to divide the oscillator clock down to within the 150-kHz to 200-kHz range. Since the program and erase timings are also a function of the bus clock, the FCLKDIV determination must take this information into account. If we dene: FCLK as the clock of the Flash timing control block Tbus as the period of the bus clock INT(x) as taking the integer part of x (e.g., INT(4.323) = 4),
484
Freescale Semiconductor
then FCLKDIV register bits PRDIV8 and FDIV[5:0] are to be set as described in Figure 17-21. For example, if the oscillator clock frequency is 950 kHz and the bus clock is 10 MHz, FCLKDIV bits FDIV[5:0] should be set to 4 (000100) and bit PRDIV8 set to 0. The resulting FCLK is then 190 kHz. As a result, the Flash algorithm timings are increased over optimum target by:
( 200 190 ) 200 100 = 5%
Command execution time will increase proportionally with the period of FCLK. CAUTION Because of the impact of clock synchronization on the accuracy of the functional timings, programming or erasing the Flash array cannot be performed if the bus clock runs at less than 1 MHz. Programming or erasing the Flash array with an input clock < 150 kHz should be avoided. Setting FCLKDIV to a value such that FCLK < 150 kHz can destroy the Flash array due to overstress. Setting FCLKDIV to a value such that (1/FCLK + Tbus) < 5s can result in incomplete programming or erasure of the Flash array cells. If the FCLKDIV register is written, the bit FDIVLD is set automatically. If the FDIVLD bit is 0, the FCLKDIV register has not been written since the last reset. If the FCLKDIV register has not been written to, the Flash command loaded during a command write sequence will not execute and the ACCERR ag in the FSTAT register will set.
Freescale Semiconductor
485
START
no
PRDIV8=1 PRDCLK=oscillator_clock/8
PRDCLK=oscillator_clock
no
FDIV[5:0]=INT(PRDCLK[MHz]*(5+Tbus[s]))
FDIV[5:0]=PRDCLK[MHz]*(5+Tbus[s])-1
FCLK=(PRDCLK)/(1+FDIV[5:0])
yes END
yes
FDIV[5:0] > 4?
486
Freescale Semiconductor
17.4.1.2
The Flash command controller is used to supervise the command write sequence to execute program, erase, and erase verify algorithms. Before starting a command write sequence, the ACCERR and PVIOL ags in the FSTAT register must be clear and the CBEIF ag should be tested to determine the state of the address, data, and command buffers. If the CBEIF ag is set, indicating the buffers are empty, a new command write sequence can be started. If the CBEIF ag is clear, indicating the buffers are not available, a new command write sequence will overwrite the contents of the address, data, and command buffers. A command write sequence consists of three steps which must be strictly adhered to with writes to the Flash module not permitted between the steps. However, Flash register and array reads are allowed during a command write sequence. The basic command write sequence is as follows: 1. Write to a valid address in the Flash array memory. 2. Write a valid command to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the command. The address written in step 1 will be stored in the FADDR registers and the data will be stored in the FDATA registers. When the CBEIF ag is cleared in step 3, the CCIF ag is cleared by the Flash command controller indicating that the command was successfully launched. For all command write sequences, the CBEIF ag will set after the CCIF ag is cleared indicating that the address, data, and command buffers are ready for a new command write sequence to begin. A buffered command will wait for the active operation to be completed before being launched. Once a command is launched, the completion of the command operation is indicated by the setting of the CCIF ag in the FSTAT register. The CCIF ag will set upon completion of all active and buffered commands.
Freescale Semiconductor
487
17.4.1.3
Table 17-15 summarizes the valid Flash commands along with the effects of the commands on the Flash array.
Table 17-15. Valid Flash Commands
FCMD 0x05 0x20 0x40 0x41 Meaning Erase Verify Program Sector Erase Mass Erase Function on Flash Array Verify all bytes in the Flash array are erased. If the Flash array is erased, the BLANK bit will set in the FSTAT register upon command completion. Program a word (2 bytes) in the Flash array. Erase all 512 bytes in a sector of the Flash array. Erase all bytes in the Flash array. A mass erase of the full Flash array is only possible when FPHDIS and FPOPEN bits in the FPROT register are set prior to launching the command.
CAUTION A Flash word must be in the erased state before being programmed. Cumulative programming of bits within a Flash word is not allowed.
488
Freescale Semiconductor
17.4.1.3.1
The erase verify operation will verify that a Flash array is erased. An example ow to execute the erase verify operation is shown in Figure 17-22. The erase verify command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the erase verify command. The address and data written will be ignored. 2. Write the erase verify command, 0x05, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the erase verify command. After launching the erase verify command, the CCIF ag in the FSTAT register will set after the operation has completed unless a new command write sequence has been buffered. Upon completion of the erase verify operation, the BLANK ag in the FSTAT register will be set if all addresses in the Flash array are veried to be erased. If any address in the Flash array is not erased, the erase verify operation will terminate and the BLANK ag in the FSTAT register will remain clear.
Freescale Semiconductor
489
START
no
no
yes
1.
Write: Flash Array Address and Dummy Data Write: FCMD register Erase Verify Command 0x05 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
2.
3.
CCIF Set?
no
yes
Erase Verify Status BLANK Set? no
yes
EXIT Flash Array Erased EXIT Flash Array Not Erased
490
Freescale Semiconductor
17.4.1.3.2
Program Command
The program operation will program a previously erased word in the Flash array using an embedded algorithm. An example ow to execute the program operation is shown in Figure 17-23. The program command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the program command. The data written will be programmed to the Flash array address written. 2. Write the program command, 0x20, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the program command. If a word to be programmed is in a protected area of the Flash array, the PVIOL ag in the FSTAT register will set and the program command will not launch. Once the program command has successfully launched, the CCIF ag in the FSTAT register will set after the program operation has completed unless a new command write sequence has been buffered. By executing a new program command write sequence on sequential words after the CBEIF ag in the FSTAT register has been set, up to 55% faster programming time per word can be effectively achieved than by waiting for the CCIF ag to set after each program operation.
Freescale Semiconductor
491
START
no
no
yes
1.
2.
Write: FCMD register Program Command 0x20 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
3.
CBEIF Set?
no
yes
Sequential Programming Decision Next Word? no Read: FSTAT register yes
CCIF Set?
no
yes
EXIT
492
Freescale Semiconductor
17.4.1.3.3
The sector erase operation will erase all addresses in a 512 byte sector of the Flash array using an embedded algorithm. An example ow to execute the sector erase operation is shown in Figure 17-24. The sector erase command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the sector erase command. The Flash address written determines the sector to be erased while MCU address bits [8:0] and the data written are ignored. 2. Write the sector erase command, 0x40, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the sector erase command. If a Flash sector to be erased is in a protected area of the Flash array, the PVIOL ag in the FSTAT register will set and the sector erase command will not launch. Once the sector erase command has successfully launched, the CCIF ag in the FSTAT register will set after the sector erase operation has completed unless a new command write sequence has been buffered.
Freescale Semiconductor
493
START
no
no
yes
1.
Write: Flash Sector Address and Dummy Data Write: FCMD register Sector Erase Command 0x40 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
2.
3.
CCIF Set?
no
yes
EXIT
494
Freescale Semiconductor
17.4.1.3.4
The mass erase operation will erase all addresses in a Flash array using an embedded algorithm. An example ow to execute the mass erase operation is shown in Figure 17-25. The mass erase command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the mass erase command. The address and data written will be ignored. 2. Write the mass erase command, 0x41, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the mass erase command. If a Flash array to be erased contains any protected area, the PVIOL ag in the FSTAT register will set and the mass erase command will not launch. Once the mass erase command has successfully launched, the CCIF ag in the FSTAT register will set after the mass erase operation has completed unless a new command write sequence has been buffered.
Freescale Semiconductor
495
START
no
no
yes
1.
Write: Flash Block Address and Dummy Data Write: FCMD register Mass Erase Command 0x41 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
2.
3.
CCIF Set?
no
yes
EXIT
496
Freescale Semiconductor
17.4.1.4
17.4.1.4.1
The ACCERR ag in the FSTAT register will be set during the command write sequence if any of the following illegal Flash operations are performed causing the command write sequence to immediately abort: 1. Writing to the Flash address space before initializing the FCLKDIV register 2. Writing a misaligned word or a byte to the valid Flash address space 3. Writing to the Flash address space while CBEIF is not set 4. Writing a second word to the Flash address space before executing a program or erase command on the previously written word 5. Writing to any Flash register other than FCMD after writing a word to the Flash address space 6. Writing a second command to the FCMD register before executing the previously written command 7. Writing an invalid command to the FCMD register 8. Writing to any Flash register other than FSTAT (to clear CBEIF) after writing to the FCMD register 9. The part enters stop mode and a program or erase command is in progress. The command is aborted and any pending command is killed 10. When security is enabled, a command other than mass erase originating from a non-secure memory or from the background debug mode is written to the FCMD register 11. A 0 is written to the CBEIF bit in the FSTAT register to abort a command write sequence. The ACCERR ag will not be set if any Flash register is read during the command write sequence. If the Flash array is read during execution of an algorithm (CCIF=0), the Flash module will return invalid data and the ACCERR ag will not be set. If an ACCERR ag is set in the FSTAT register, the Flash command controller is locked. It is not possible to launch another command until the ACCERR ag is cleared. 17.4.1.4.2 Protection Violation
The PVIOL ag in the FSTAT register will be set during the command write sequence after the word write to the Flash address space if any of the following illegal Flash operations are performed, causing the command write sequence to immediately abort: 1. Writing a Flash address to program in a protected area of the Flash array (see Section 17.3.2.5). 2. Writing a Flash address to erase in a protected area of the Flash array. 3. Writing the mass erase command to the FCMD register while any protection is enabled. If the PVIOL ag is set, the Flash command controller is locked. It is not possible to launch another command until the PVIOL ag is cleared.
Freescale Semiconductor
497
17.4.2
17.4.2.1
Operating Modes
Wait Mode
If the MCU enters wait mode while a Flash command is active (CCIF = 0), that command and any buffered command will be completed. The Flash module can recover the MCU from wait mode if the interrupts are enabled (see Section 17.4.5).
17.4.2.2
Stop Mode
If the MCU enters stop mode while a Flash command is active (CCIF = 0), that command will be aborted and the data being programmed or erased is lost. The high voltage circuitry to the Flash array will be switched off when entering stop mode. CCIF and ACCERR ags will be set. Upon exit from stop mode, the CBEIF ag will be set and any buffered command will not be executed. The ACCERR ag must be cleared before returning to normal operation. NOTE As active Flash commands are immediately aborted when the MCU enters stop mode, it is strongly recommended that the user does not use the STOP instruction during program and erase execution.
17.4.2.3
In background debug mode (BDM), the FPROT register is writable. If the MCU is unsecured, then all Flash commands listed in Table 17-15 can be executed. If the MCU is secured and is in special single chip mode, the only possible command to execute is mass erase.
17.4.3
The Flash module provides the necessary security information to the MCU. After each reset, the Flash module determines the security state of the MCU as dened in Section 17.3.2.2, Flash Security Register (FSEC). The contents of the Flash security/options byte at address 0xFF0F in the Flash conguration eld must be changed directly by programming address 0xFF0F when the device is unsecured and the higher address sector is unprotected. If the Flash security/options byte is left in the secure state, any reset will cause the MCU to return to the secure operating mode.
17.4.3.1
The MCU may only be unsecured by using the backdoor key access feature which requires knowledge of the contents of the backdoor key (four 16-bit words programmed at addresses 0xFF000xFF07). If KEYEN[1:0] = 1:0 and the KEYACC bit is set, a write to a backdoor key address in the Flash array triggers a comparison between the written data and the backdoor key data stored in the Flash array. If all four words of data are written to the correct addresses in the correct order and the data matches the backdoor key stored in the Flash array, the MCU will be unsecured. The data must be written to the backdoor key
498
Freescale Semiconductor
addresses sequentially staring with 0xFF00-0xFF01 and ending with 0xFF060xFF07. The values 0x0000 and 0xFFFF are not permitted as keys. When the KEYACC bit is set, reads of the Flash array will return invalid data. The user code stored in the Flash array must have a method of receiving the backdoor key from an external stimulus. This external stimulus would typically be through one of the on-chip serial ports. If KEYEN[1:0] = 1:0 in the FSEC register, the MCU can be unsecured by the backdoor key access sequence described below: 1. Set the KEYACC bit in the FCNFG register 2. Write the correct four 16-bit words to Flash addresses 0xFF000xFF07 sequentially starting with 0xFF00 3. Clear the KEYACC bit in the FCNFG register 4. If all four 16-bit words match the backdoor key stored in Flash addresses 0xFF000xFF07, the MCU is unsecured and bits SEC[1:0] in the FSEC register are forced to the unsecure state of 1:0 The backdoor key access sequence is monitored by the internal security state machine. An illegal operation during the backdoor key access sequence will cause the security state machine to lock, leaving the MCU in the secured state. A reset of the MCU will cause the security state machine to exit the lock state and allow a new backdoor key access sequence to be attempted. The following illegal operations will lock the security state machine: 1. If any of the four 16-bit words does not match the backdoor key programmed in the Flash array 2. If the four 16-bit words are written in the wrong sequence 3. If more than four 16-bit words are written 4. If any of the four 16-bit words written are 0x0000 or 0xFFFF 5. If the KEYACC bit does not remain set while the four 16-bit words are written After the backdoor key access sequence has been correctly matched, the MCU will be unsecured. The Flash security byte can be programmed to the unsecure state, if desired. In the unsecure state, the user has full control of the contents of the four word backdoor key by programming bytes 0xFF000xFF07 of the Flash conguration eld. The security as dened in the Flash security/options byte at address 0xFF0F is not changed by using the backdoor key access sequence to unsecure. The backdoor key stored in addresses 0xFF000xFF07 is unaffected by the backdoor key access sequence. After the next reset sequence, the security state of the Flash module is determined by the Flash security/options byte at address 0xFF0F. The backdoor key access sequence has no effect on the program and erase protection dened in the FPROT register. It is not possible to unsecure the MCU in special single chip mode by executing the backdoor key access sequence in background debug mode.
Freescale Semiconductor
499
17.4.4
On each reset, the Flash module executes a reset sequence to hold CPU activity while loading the following registers from the Flash array memory according to Table 17-1: FPROT Flash Protection Register (see Section 17.3.2.5) FSEC Flash Security Register (see Section 17.3.2.2)
17.4.4.1
If a reset occurs while any Flash command is in progress, that command will be immediately aborted. The state of the word being programmed or the sector/array being erased is not guaranteed.
17.4.5
Interrupts
The Flash module can generate an interrupt when all Flash commands have completed execution or the Flash address, data, and command buffers are empty.
Table 17-16. Flash Interrupt Sources
Interrupt Source Flash Address, Data, and Command Buffers are empty All Flash commands have completed execution Interrupt Flag CBEIF (FSTAT register) CCIF (FSTAT register) Local Enable CBEIE CCIE Global (CCR) Mask I Bit I Bit
NOTE Vector addresses and their relative interrupt priority are determined at the MCU level.
17.4.5.1
Figure 17-26 shows the logic used for generating interrupts. The Flash module uses the CBEIF and CCIF ags in combination with the enable bits CBIE and CCIE to discriminate for the generation of interrupts.
CBEIF CBEIE
CCIF CCIE
For a detailed description of these register bits, refer to Section 17.3.2.4, Flash Conguration Register (FCNFG) and Section 17.3.2.6, Flash Status Register (FSTAT).
500
Freescale Semiconductor
The FTS32K module implements a 32 Kbyte Flash (nonvolatile) memory. The Flash memory contains one array of 32 Kbytes organized as 512 rows of 64 bytes with an erase sector size of eight rows (512 bytes). The Flash array may be read as either bytes, aligned words, or misaligned words. Read access time is one bus cycle for byte and aligned word, and two bus cycles for misaligned words. The Flash array is ideal for program and data storage for single-supply applications allowing for eld reprogramming without requiring external voltage sources for program or erase. Program and erase functions are controlled by a command driven interface. The Flash module supports both mass erase and sector erase. An erased bit reads 1 and a programmed bit reads 0. The high voltage required to program and erase is generated internally. It is not possible to read from a Flash array while it is being erased or programmed. CAUTION A Flash word must be in the erased state before being programmed. Cumulative programming of bits within a Flash word is not allowed.
18.1.1
Glossary
Command Write Sequence A three-step MCU instruction sequence to program, erase, or erase verify the Flash array memory.
18.1.2
Features
32 Kbytes of Flash memory comprised of one 32 Kbyte array divided into 64 sectors of 512 bytes Automated program and erase algorithm Interrupts on Flash command completion and command buffer empty Fast sector erase and word program operation 2-stage command pipeline for faster multi-word program times Flexible protection scheme to prevent accidental program or erase Single power supply for Flash program and erase operations Security feature to prevent unauthorized access to the Flash array memory
Freescale Semiconductor
501
18.1.3
Modes of Operation
See Section 18.4.2, Operating Modes for a description of the Flash module operating modes. For program and erase operations, refer to Section 18.4.1, Flash Command Operations.
18.1.4
Block Diagram
FTS32K
Flash Interface
Command Pipeline
Flash Array
cmd2 addr2 data2 cmd1 addr1 data1
16K * 16 Bits
sector 0 sector 1
Registers
Oscillator Clock
18.2
502
Freescale Semiconductor
18.3
18.3.1
The FTS32K memory map is shown in Figure 18-2. The HCS12 architecture places the Flash array addresses between 0x4000 and 0xFFFF, which corresponds to three 16 Kbyte pages. The content of the HCS12 Core PPAGE register is used to map the logical middle page ranging from address 0x8000 to 0xBFFF to any physical 16K byte page in the Flash array memory.1 The FPROT register (see Section 18.3.2.5) can be set to globally protect the entire Flash array. Three separate areas, one starting from the Flash array starting address (called lower) towards higher addresses, one growing downward from the Flash array end address (called higher), and the remaining addresses, can be activated for protection. The Flash array addresses covered by these protectable regions are shown in Figure 18-2. The higher address area is mainly targeted to hold the boot loader code since it covers the vector space. The lower address area can be used for EEPROM emulation in an MCU without an EEPROM module since it can be left unprotected while the remaining addresses are protected from program or erase. Default protection settings as well as security information that allows the MCU to restrict access to the Flash module are stored in the Flash conguration eld described in Table 18-1.
Table 18-1. Flash Conguration Field
Flash Address 0xFF000xFF07 0xFF080xFF0C 0xFF0D 0xFF0E 0xFF0F Size (bytes) 8 5 1 1 1 Description Backdoor Key to unlock security Reserved Flash Protection byte Refer to Section 18.3.2.5, Flash Protection Register (FPROT) Reserved Flash Security/Options byte Refer to Section 18.3.2.2, Flash Security Register (FSEC)
1. By placing 0x3E/0x3F in the HCS12 Core PPAGE register, the bottom/top xed 16 Kbyte pages can be seen twice in the MCU memory map.
Freescale Semiconductor
503
MODULE BASE + 0x0000 MODULE BASE + 0x000F FLASH_START = 0x4000 0x4200 0x4400 0x4800 Flash Protected Low Sectors 512 bytes, 1, 2, 4 Kbytes Flash Registers 16 bytes
0x5000
0x3E
Flash Array
0x8000
003E
0x3F
0xC000
0xE000
0x3F
504
Freescale Semiconductor
Freescale Semiconductor
505
18.3.2
Register Descriptions
The Flash module contains a set of 16 control and status registers located between module base + 0x0000 and 0x000F. A summary of the Flash module registers is given in Figure 18-3. Detailed descriptions of each register bit are provided.
Register Name R W R 0x0001 FSEC W 0x0002 R RESERVED1 W 0x0000 FCLKDIV
(1)
6 PRDIV8 KEYEN0 0
5 FDIV5 NV5 0
4 FDIV4 NV4 0
3 FDIV3 NV3 0
2 FDIV2 NV2 0
1 FDIV1 SEC1 0
0x0003 FCNFG 0x0004 FPROT 0x0005 FSTAT 0x0006 FCMD 0x0007 RESERVED21 0x0008 FADDRHI1 0x0009 FADDRLO1 0x000A FDATAHI1 0x000B FDATALO1 0x000C RESERVED31 0x000D RESERVED41 0x000E RESERVED51 0x000F RESERVED61
R W R W R W R W R W R W R W R W R W R W R W R W R W
FPHS1 ACCERR 0 0
FPHS0 0 0 0
FPLDIS BLANK
FPLS1 FAIL 0 0
FPLS0 DONE
CMDB6 0 0
CMDB2 0
CMDB0 0
0 0 0 0
0 0 0 0
0 0 0 0
0 0 0 0
0 0 0 0
0 0 0 0
0 0 0 0
0 0 0 0
= Unimplemented or Reserved
506
Freescale Semiconductor
18.3.2.1
The FCLKDIV register is used to control timed events in program and erase algorithms.
Module Base + 0x0000
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
All bits in the FCLKDIV register are readable, bits 60 are write once and bit 7 is not writable.
Table 18-3. FCLKDIV Field Descriptions
Field 7 FDIVLD 6 PRDIV8 50 FDIV[5:0] Description Clock Divider Loaded 0 FCLKDIV register has not been written 1 FCLKDIV register has been written to since the last reset Enable Prescalar by 8 0 The oscillator clock is directly fed into the Flash clock divider 1 The oscillator clock is divided by 8 before feeding into the Flash clock divider Clock Divider Bits The combination of PRDIV8 and FDIV[5:0] must divide the oscillator clock down to a frequency of 150 kHz 200 kHz. The maximum divide ratio is 512. Refer to Section 18.4.1.1, Writing the FCLKDIV Register for more information.
18.3.2.2
The FSEC register holds all bits associated with the security of the MCU and Flash module.
Module Base + 0x0001
7 6 5 4 3 2 1 0
R W Reset
KEYEN1
KEYEN0
NV5
NV4
NV3
NV2
SEC1
SEC0
= Unimplemented or Reserved
All bits in the FSEC register are readable but not writable. The FSEC register is loaded from the Flash conguration eld at 0xFF0F during the reset sequence, indicated by F in Figure 18-5.
Freescale Semiconductor
507
76 Backdoor Key Security Enable Bits The KEYEN[1:0] bits dene the enabling of the backdoor key access KEYEN[1:0] to the Flash module as shown in Table 18-5. 52 NV[5:2] 10 SEC[1:0] Nonvolatile Flag Bits The NV[5:2] bits are available to the user as nonvolatile ags. Flash Security Bits The SEC[1:0] bits dene the security state of the MCU as shown in Table 18-6. If the Flash module is unsecured using backdoor key access, the SEC[1:0] bits are forced to 1:0.
10
The security function in the Flash module is described in Section 18.4.3, Flash Module Security.
18.3.2.3
RESERVED1
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x0002
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
508
Freescale Semiconductor
18.3.2.4
The FCNFG register enables the Flash interrupts and gates the security backdoor key writes.
Module Base + 0x0003
7 6 5 4 3 2 1 0
= Unimplemented or Reserved
CBEIE, CCIE, and KEYACC are readable and writable while remaining bits read 0 and are not writable. KEYACC is only writable if the KEYEN bit in the FSEC register is set to the enabled state (see Section 18.3.2.2).
Table 18-7. FCNFG Field Descriptions
Field 7 CBEIE Description Command Buffer Empty Interrupt Enable The CBEIE bit enables the interrupts in case of an empty command buffer in the Flash module. 0 Command Buffer Empty interrupts disabled 1 An interrupt will be requested whenever the CBEIF ag is set (see Section 18.3.2.6) Command Complete Interrupt Enable The CCIE bit enables the interrupts in case of all commands being completed in the Flash module. 0 Command Complete interrupts disabled 1 An interrupt will be requested whenever the CCIF ag is set (see Section 18.3.2.6) Enable Security Key Writing. 0 Flash writes are interpreted as the start of a command write sequence 1 Writes to the Flash array are interpreted as a backdoor key while reads of the Flash array return invalid data
6 CCIE
5 KEYACC
18.3.2.5
The FPROT register denes which Flash sectors are protected against program or erase.
Module Base + 0x0004
7 6 5 4 3 2 1 0
The FPROT register is readable in normal and special modes. FPOPEN can only be written from a 1 to a 0. FPLS[1:0] can be written anytime until FPLDIS is cleared. FPHS[1:0] can be written anytime until
Freescale Semiconductor
509
FPHDIS is cleared. The FPROT register is loaded from Flash address 0xFF0D during the reset sequence, indicated by F in Figure 18-8. To change the Flash protection that will be loaded on reset, the upper sector of the Flash array must be unprotected, then the Flash protection byte located at Flash address 0xFF0D must be written to. A protected Flash sector is disabled by FPHDIS and FPLDIS while the size of the protected sector is dened by FPHS[1:0] and FPLS[1:0] in the FPROT register. Trying to alter any of the protected areas will result in a protect violation error and the PVIOL ag will be set in the FSTAT register (see Section 18.3.2.6). A mass erase of the whole Flash array is only possible when protection is fully disabled by setting the FPOPEN, FPLDIS, and FPHDIS bits. An attempt to mass erase a Flash array while protection is enabled will set the PVIOL ag in the FSTAT register.
Table 18-8. FPROT Field Descriptions
Field 7 FPOPEN Description Protection Function for Program or Erase It is possible using the FPOPEN bit to either select address ranges to be protected using FPHDIS, FPLDIS, FPHS[1:0] and FPLS[1:0] or to select the same ranges to be unprotected. When FPOPEN is set, FPxDIS enables the ranges to be protected, whereby clearing FPxDIS enables protection for the range specied by the corresponding FPxS[1:0] bits. When FPOPEN is cleared, FPxDIS denes unprotected ranges as specied by the corresponding FPxS[1:0] bits. In this case, setting FPxDIS enables protection. Thus the effective polarity of the FPxDIS bits is swapped by the FPOPEN bit as shown in Table 18-9. This function allows the main part of the Flash array to be protected while a small range can remain unprotected for EEPROM emulation. 0 The FPHDIS and FPLDIS bits dene Flash address ranges to be unprotected 1 The FPHDIS and FPLDIS bits dene Flash address ranges to be protected Nonvolatile Flag Bit The NV6 bit should remain in the erased state for future enhancements. Flash Protection Higher Address Range Disable The FPHDIS bit determines whether there is a protected/unprotected area in the higher space of the Flash address map. 0 Protection/unprotection enabled 1 Protection/unprotection disabled Flash Protection Higher Address Size The FPHS[1:0] bits determine the size of the protected/unprotected sector as shown in Table 18-10. The FPHS[1:0] bits can only be written to while the FPHDIS bit is set. Flash Protection Lower Address Range Disable The FPLDIS bit determines whether there is a protected/unprotected sector in the lower space of the Flash address map. 0 Protection/unprotection enabled 1 Protection/unprotection disabled Flash Protection Lower Address Size The FPLS[1:0] bits determine the size of the protected/unprotected sector as shown in Table 18-11. The FPLS[1:0] bits can only be written to while the FPLDIS bit is set.
6 NV6 5 FPHDIS
43 FPHS[1:0] 2 FPLDIS
10 FPLS[1:0]
510
Freescale Semiconductor
Figure 18-9 illustrates all possible protection scenarios. Although the protection scheme is loaded from the Flash array after reset, it is allowed to change in normal modes. This protection scheme can be used by applications requiring re-programming in single chip mode while providing as much protection as possible if no re-programming is required.
Freescale Semiconductor
511
FPHDIS = 1 FPLDIS = 0 6
FPHDIS = 0 FPLDIS = 1 5
0xFFFF Scenario
FPOPEN = 1
FPOPEN = 0
18.3.2.5.1
The general guideline is that protection can only be added, not removed. All valid transitions between Flash protection scenarios are specied in Table 18-12. Any attempt to write an invalid scenario to the FPROT register will be ignored and the FPROT register will remain unchanged. The contents of the FPROT register reect the active protection scenario.
Table 18-12. Flash Protection Scenario Transitions
From Protection Scenario 0 1 2 3 4 5 X To Protection Scenario(1) 0 X 1 X X X 2 X 3 X X X X X X X X X 4 5 6
512
18.3.2.6
The FSTAT register denes the status of the Flash command controller and the results of command execution.
Module Base + 0x0005
7 6 5 4 3 2 1 0
R CBEIF W Reset 1
BLANK FAIL
DONE
= Unimplemented or Reserved
In normal modes, bits CBEIF, PVIOL, and ACCERR are readable and writable, bits CCIF and BLANK are readable and not writable, remaining bits, including FAIL and DONE, read 0 and are not writable. In special modes, FAIL is readable and writable while DONE is readable but not writable. FAIL must be clear in special modes when starting a command write sequence.
Table 18-13. FSTAT Field Descriptions
Field 7 CBEIF Description Command Buffer Empty Interrupt Flag The CBEIF ag indicates that the address, data and command buffers are empty so that a new command write sequence can be started. The CBEIF ag is cleared by writing a 1 to CBEIF. Writing a 0 to the CBEIF ag has no effect on CBEIF. Writing a 0 to CBEIF after writing an aligned word to the Flash address space but before CBEIF is cleared will abort a command write sequence and cause the ACCERR ag in the FSTAT register to be set. Writing a 0 to CBEIF outside of a command write sequence will not set the ACCERR ag. The CBEIF ag is used together with the CBEIE bit in the FCNFG register to generate an interrupt request (see Figure 18-26). 0 Buffers are full 1 Buffers are ready to accept a new command Command Complete Interrupt Flag The CCIF ag indicates that there are no more commands pending. The CCIF ag is cleared when CBEIF is clear and sets automatically upon completion of all active and pending commands. The CCIF ag does not set when an active commands completes and a pending command is fetched from the command buffer. Writing to the CCIF ag has no effect. The CCIF ag is used together with the CCIE bit in the FCNFG register to generate an interrupt request (see Figure 18-26). 0 Command in progress 1 All commands are completed
6 CCIF
Freescale Semiconductor
513
4 ACCERR
2 BLANK
1 FAIL
0 DONE
18.3.2.7
R W Reset
0 CMDB6 0 0 CMDB5 0
0 CMDB2
0 CMDB0 0 0
= Unimplemented or Reserved
Bits CMDB6, CMDB5, CMDB2, and CMDB0 are readable and writable during a command write sequence while bits 7, 4, 3, and 1 read 0 and are not writable.
514
Freescale Semiconductor
18.3.2.8
RESERVED2
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x0007
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
18.3.2.9
\
R W Reset
0 FABHI
= Unimplemented or Reserved
Freescale Semiconductor
515
R FABLO W Reset 0 0 0 0 0 0 0 0
In normal modes, all FABHI and FABLO bits read 0 and are not writable. In special modes, the FABHI and FABLO bits are readable and writable. For sector erase, the MCU address bits [8:0] are ignored. For mass erase, any address within the Flash array is valid to start the command.
R FDHI W Reset 0 0 0 0 0 0 0 0
R FDLO W Reset 0 0 0 0 0 0 0 0
In normal modes, all FDATAHI and FDATALO bits read 0 and are not writable. In special modes, all FDATAHI and FDATALO bits are readable and writable when writing to an address within the Flash address range.
18.3.2.11 RESERVED3
This register is reserved for factory testing and is not accessible to the user.
516
Freescale Semiconductor
R W Reset
= Unimplemented or Reserved
18.3.2.12 RESERVED4
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x000D
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
18.3.2.13 RESERVED5
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x000E
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
18.3.2.14 RESERVED6
This register is reserved for factory testing and is not accessible to the user.
Freescale Semiconductor
517
R W Reset
= Unimplemented or Reserved
18.4
18.4.1
Functional Description
Flash Command Operations
Write operations are used for the program, erase, and erase verify algorithms described in this section. The program and erase algorithms are controlled by a state machine whose timebase FCLK is derived from the oscillator clock via a programmable divider. The FCMD register as well as the associated FADDR and FDATA registers operate as a buffer and a register (2-stage FIFO) so that a new command along with the necessary data and address can be stored to the buffer while the previous command is still in progress. This pipelined operation allows a time optimization when programming more than one word on a specic row, as the high voltage generation can be kept active in between two programming commands. The pipelined operation also allows a simplication of command launching. Buffer empty as well as command completion are signalled by ags in the FSTAT register with corresponding interrupts generated, if enabled. The next sections describe: How to write the FCLKDIV register Command write sequence used to program, erase or erase verify the Flash array Valid Flash commands Errors resulting from illegal Flash operations
18.4.1.1
Prior to issuing any Flash command after a reset, it is rst necessary to write the FCLKDIV register to divide the oscillator clock down to within the 150-kHz to 200-kHz range. Since the program and erase timings are also a function of the bus clock, the FCLKDIV determination must take this information into account. If we dene: FCLK as the clock of the Flash timing control block Tbus as the period of the bus clock INT(x) as taking the integer part of x (e.g., INT(4.323) = 4),
518
Freescale Semiconductor
then FCLKDIV register bits PRDIV8 and FDIV[5:0] are to be set as described in Figure 18-21. For example, if the oscillator clock frequency is 950 kHz and the bus clock is 10 MHz, FCLKDIV bits FDIV[5:0] should be set to 4 (000100) and bit PRDIV8 set to 0. The resulting FCLK is then 190 kHz. As a result, the Flash algorithm timings are increased over optimum target by:
( 200 190 ) 200 100 = 5%
Command execution time will increase proportionally with the period of FCLK. CAUTION Because of the impact of clock synchronization on the accuracy of the functional timings, programming or erasing the Flash array cannot be performed if the bus clock runs at less than 1 MHz. Programming or erasing the Flash array with an input clock < 150 kHz should be avoided. Setting FCLKDIV to a value such that FCLK < 150 kHz can destroy the Flash array due to overstress. Setting FCLKDIV to a value such that (1/FCLK + Tbus) < 5s can result in incomplete programming or erasure of the Flash array cells. If the FCLKDIV register is written, the bit FDIVLD is set automatically. If the FDIVLD bit is 0, the FCLKDIV register has not been written since the last reset. If the FCLKDIV register has not been written to, the Flash command loaded during a command write sequence will not execute and the ACCERR ag in the FSTAT register will set.
Freescale Semiconductor
519
START
no
PRDIV8=1 PRDCLK=oscillator_clock/8
PRDCLK=oscillator_clock
no
FDIV[5:0]=INT(PRDCLK[MHz]*(5+Tbus[ms]))
FDIV[5:0]=PRDCLK[MHz]*(5+Tbus[ms])-1
FCLK=(PRDCLK)/(1+FDIV[5:0])
yes END
yes
FDIV[5:0] > 4?
520
Freescale Semiconductor
18.4.1.2
The Flash command controller is used to supervise the command write sequence to execute program, erase, and erase verify algorithms. Before starting a command write sequence, the ACCERR and PVIOL ags in the FSTAT register must be clear and the CBEIF ag should be tested to determine the state of the address, data, and command buffers. If the CBEIF ag is set, indicating the buffers are empty, a new command write sequence can be started. If the CBEIF ag is clear, indicating the buffers are not available, a new command write sequence will overwrite the contents of the address, data, and command buffers. A command write sequence consists of three steps which must be strictly adhered to with writes to the Flash module not permitted between the steps. However, Flash register and array reads are allowed during a command write sequence. The basic command write sequence is as follows: 1. Write to a valid address in the Flash array memory. 2. Write a valid command to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the command. The address written in step 1 will be stored in the FADDR registers and the data will be stored in the FDATA registers. When the CBEIF ag is cleared in step 3, the CCIF ag is cleared by the Flash command controller indicating that the command was successfully launched. For all command write sequences, the CBEIF ag will set after the CCIF ag is cleared indicating that the address, data, and command buffers are ready for a new command write sequence to begin. A buffered command will wait for the active operation to be completed before being launched. Once a command is launched, the completion of the command operation is indicated by the setting of the CCIF ag in the FSTAT register. The CCIF ag will set upon completion of all active and buffered commands.
Freescale Semiconductor
521
18.4.1.3
Table 18-16 summarizes the valid Flash commands along with the effects of the commands on the Flash array.
Table 18-16. Valid Flash Commands
FCMD 0x05 0x20 0x40 0x41 Meaning Erase Verify Program Sector Erase Mass Erase Function on Flash Array Verify all bytes in the Flash array are erased. If the Flash array is erased, the BLANK bit will set in the FSTAT register upon command completion. Program a word (2 bytes) in the Flash array. Erase all 512 bytes in a sector of the Flash array. Erase all bytes in the Flash array. A mass erase of the full Flash array is only possible when FPLDIS, FPHDIS, and FPOPEN bits in the FPROT register are set prior to launching the command.
CAUTION A Flash word must be in the erased state before being programmed. Cumulative programming of bits within a Flash word is not allowed.
522
Freescale Semiconductor
18.4.1.3.1
The erase verify operation will verify that a Flash array is erased. An example ow to execute the erase verify operation is shown in Figure 18-22. The erase verify command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the erase verify command. The address and data written will be ignored. 2. Write the erase verify command, 0x05, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the erase verify command. After launching the erase verify command, the CCIF ag in the FSTAT register will set after the operation has completed unless a new command write sequence has been buffered. Upon completion of the erase verify operation, the BLANK ag in the FSTAT register will be set if all addresses in the Flash array are veried to be erased. If any address in the Flash array is not erased, the erase verify operation will terminate and the BLANK ag in the FSTAT register will remain clear.
Freescale Semiconductor
523
START
no
no
yes
1.
Write: Flash Array Address and Dummy Data Write: FCMD register Erase Verify Command 0x05 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
2.
3.
CCIF Set?
no
yes
Erase Verify Status BLANK Set? no
yes
EXIT Flash Array Erased EXIT Flash Array Not Erased
524
Freescale Semiconductor
18.4.1.3.2
Program Command
The program operation will program a previously erased word in the Flash array using an embedded algorithm. An example ow to execute the program operation is shown in Figure 18-23. The program command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the program command. The data written will be programmed to the Flash array address written. 2. Write the program command, 0x20, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the program command. If a word to be programmed is in a protected area of the Flash array, the PVIOL ag in the FSTAT register will set and the program command will not launch. Once the program command has successfully launched, the CCIF ag in the FSTAT register will set after the program operation has completed unless a new command write sequence has been buffered. By executing a new program command write sequence on sequential words after the CBEIF ag in the FSTAT register has been set, up to 55% faster programming time per word can be effectively achieved than by waiting for the CCIF ag to set after each program operation.
Freescale Semiconductor
525
START
no
no
yes
1.
2.
Write: FCMD register Program Command 0x20 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
3.
CBEIF Set?
no
yes
Sequential Programming Decision Next Word? no Read: FSTAT register yes
CCIF Set?
no
yes
EXIT
526
Freescale Semiconductor
18.4.1.3.3
The sector erase operation will erase all addresses in a 512 byte sector of the Flash array using an embedded algorithm. An example ow to execute the sector erase operation is shown in Figure 18-24. The sector erase command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the sector erase command. The Flash address written determines the sector to be erased while MCU address bits [8:0] and the data written are ignored. 2. Write the sector erase command, 0x40, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the sector erase command. If a Flash sector to be erased is in a protected area of the Flash array, the PVIOL ag in the FSTAT register will set and the sector erase command will not launch. Once the sector erase command has successfully launched, the CCIF ag in the FSTAT register will set after the sector erase operation has completed unless a new command write sequence has been buffered.
Freescale Semiconductor
527
START
no
no
yes
1.
Write: Flash Sector Address and Dummy Data Write: FCMD register Sector Erase Command 0x40 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
2.
3.
CCIF Set?
no
yes
EXIT
528
Freescale Semiconductor
18.4.1.3.4
The mass erase operation will erase all addresses in a Flash array using an embedded algorithm. An example ow to execute the mass erase operation is shown in Figure 18-25. The mass erase command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the mass erase command. The address and data written will be ignored. 2. Write the mass erase command, 0x41, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the mass erase command. If a Flash array to be erased contains any protected area, the PVIOL ag in the FSTAT register will set and the mass erase command will not launch. Once the mass erase command has successfully launched, the CCIF ag in the FSTAT register will set after the mass erase operation has completed unless a new command write sequence has been buffered.
Freescale Semiconductor
529
START
no
no
yes
1.
Write: Flash Block Address and Dummy Data Write: FCMD register Mass Erase Command 0x41 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
2.
3.
CCIF Set?
no
yes
EXIT
530
Freescale Semiconductor
18.4.1.4
18.4.1.4.1
The ACCERR ag in the FSTAT register will be set during the command write sequence if any of the following illegal Flash operations are performed causing the command write sequence to immediately abort: 1. Writing to the Flash address space before initializing the FCLKDIV register 2. Writing a misaligned word or a byte to the valid Flash address space 3. Writing to the Flash address space while CBEIF is not set 4. Writing a second word to the Flash address space before executing a program or erase command on the previously written word 5. Writing to any Flash register other than FCMD after writing a word to the Flash address space 6. Writing a second command to the FCMD register before executing the previously written command 7. Writing an invalid command to the FCMD register 8. Writing to any Flash register other than FSTAT (to clear CBEIF) after writing to the FCMD register 9. The part enters stop mode and a program or erase command is in progress. The command is aborted and any pending command is killed 10. When security is enabled, a command other than mass erase originating from a non-secure memory or from the background debug mode is written to the FCMD register 11. A 0 is written to the CBEIF bit in the FSTAT register to abort a command write sequence. The ACCERR ag will not be set if any Flash register is read during the command write sequence. If the Flash array is read during execution of an algorithm (CCIF=0), the Flash module will return invalid data and the ACCERR ag will not be set. If an ACCERR ag is set in the FSTAT register, the Flash command controller is locked. It is not possible to launch another command until the ACCERR ag is cleared. 18.4.1.4.2 Protection Violation
The PVIOL ag in the FSTAT register will be set during the command write sequence after the word write to the Flash address space if any of the following illegal Flash operations are performed, causing the command write sequence to immediately abort: 1. Writing a Flash address to program in a protected area of the Flash array (see Section 18.3.2.5). 2. Writing a Flash address to erase in a protected area of the Flash array. 3. Writing the mass erase command to the FCMD register while any protection is enabled. If the PVIOL ag is set, the Flash command controller is locked. It is not possible to launch another command until the PVIOL ag is cleared.
Freescale Semiconductor
531
18.4.2
18.4.2.1
Operating Modes
Wait Mode
If the MCU enters wait mode while a Flash command is active (CCIF = 0), that command and any buffered command will be completed. The Flash module can recover the MCU from wait mode if the interrupts are enabled (see Section 18.4.5).
18.4.2.2
Stop Mode
If the MCU enters stop mode while a Flash command is active (CCIF = 0), that command will be aborted and the data being programmed or erased is lost. The high voltage circuitry to the Flash array will be switched off when entering stop mode. CCIF and ACCERR ags will be set. Upon exit from stop mode, the CBEIF ag will be set and any buffered command will not be executed. The ACCERR ag must be cleared before returning to normal operation. NOTE As active Flash commands are immediately aborted when the MCU enters stop mode, it is strongly recommended that the user does not use the STOP instruction during program and erase execution.
18.4.2.3
In background debug mode (BDM), the FPROT register is writable. If the MCU is unsecured, then all Flash commands listed in Table 18-16 can be executed. If the MCU is secured and is in special single chip mode, the only possible command to execute is mass erase.
18.4.3
The Flash module provides the necessary security information to the MCU. After each reset, the Flash module determines the security state of the MCU as dened in Section 18.3.2.2, Flash Security Register (FSEC). The contents of the Flash security/options byte at address 0xFF0F in the Flash conguration eld must be changed directly by programming address 0xFF0F when the device is unsecured and the higher address sector is unprotected. If the Flash security/options byte is left in the secure state, any reset will cause the MCU to return to the secure operating mode.
18.4.3.1
The MCU may only be unsecured by using the backdoor key access feature which requires knowledge of the contents of the backdoor key (four 16-bit words programmed at addresses 0xFF000xFF07). If KEYEN[1:0] = 1:0 and the KEYACC bit is set, a write to a backdoor key address in the Flash array triggers a comparison between the written data and the backdoor key data stored in the Flash array. If all four words of data are written to the correct addresses in the correct order and the data matches the backdoor key stored in the Flash array, the MCU will be unsecured. The data must be written to the backdoor key
532
Freescale Semiconductor
addresses sequentially staring with 0xFF00-0xFF01 and ending with 0xFF060xFF07. The values 0x0000 and 0xFFFF are not permitted as keys. When the KEYACC bit is set, reads of the Flash array will return invalid data. The user code stored in the Flash array must have a method of receiving the backdoor key from an external stimulus. This external stimulus would typically be through one of the on-chip serial ports. If KEYEN[1:0] = 1:0 in the FSEC register, the MCU can be unsecured by the backdoor key access sequence described below: 1. Set the KEYACC bit in the FCNFG register 2. Write the correct four 16-bit words to Flash addresses 0xFF000xFF07 sequentially starting with 0xFF00 3. Clear the KEYACC bit in the FCNFG register 4. If all four 16-bit words match the backdoor key stored in Flash addresses 0xFF000xFF07, the MCU is unsecured and bits SEC[1:0] in the FSEC register are forced to the unsecure state of 1:0 The backdoor key access sequence is monitored by the internal security state machine. An illegal operation during the backdoor key access sequence will cause the security state machine to lock, leaving the MCU in the secured state. A reset of the MCU will cause the security state machine to exit the lock state and allow a new backdoor key access sequence to be attempted. The following illegal operations will lock the security state machine: 1. If any of the four 16-bit words does not match the backdoor key programmed in the Flash array 2. If the four 16-bit words are written in the wrong sequence 3. If more than four 16-bit words are written 4. If any of the four 16-bit words written are 0x0000 or 0xFFFF 5. If the KEYACC bit does not remain set while the four 16-bit words are written After the backdoor key access sequence has been correctly matched, the MCU will be unsecured. The Flash security byte can be programmed to the unsecure state, if desired. In the unsecure state, the user has full control of the contents of the four word backdoor key by programming bytes 0xFF000xFF07 of the Flash conguration eld. The security as dened in the Flash security/options byte at address 0xFF0F is not changed by using the backdoor key access sequence to unsecure. The backdoor key stored in addresses 0xFF000xFF07 is unaffected by the backdoor key access sequence. After the next reset sequence, the security state of the Flash module is determined by the Flash security/options byte at address 0xFF0F. The backdoor key access sequence has no effect on the program and erase protection dened in the FPROT register. It is not possible to unsecure the MCU in special single chip mode by executing the backdoor key access sequence in background debug mode.
Freescale Semiconductor
533
18.4.4
On each reset, the Flash module executes a reset sequence to hold CPU activity while loading the following registers from the Flash array memory according to Table 18-1: FPROT Flash Protection Register (see Section 18.3.2.5) FSEC Flash Security Register (see Section 18.3.2.2)
18.4.4.1
If a reset occurs while any Flash command is in progress, that command will be immediately aborted. The state of the word being programmed or the sector/array being erased is not guaranteed.
18.4.5
Interrupts
The Flash module can generate an interrupt when all Flash commands have completed execution or the Flash address, data, and command buffers are empty.
Table 18-17. Flash Interrupt Sources
Interrupt Source Flash Address, Data, and Command Buffers are empty All Flash commands have completed execution Interrupt Flag CBEIF (FSTAT register) CCIF (FSTAT register) Local Enable CBEIE CCIE Global (CCR) Mask I Bit I Bit
NOTE Vector addresses and their relative interrupt priority are determined at the MCU level.
18.4.5.1
Figure 18-26 shows the logic used for generating interrupts. The Flash module uses the CBEIF and CCIF ags in combination with the enable bits CBIE and CCIE to discriminate for the generation of interrupts.
CBEIF CBEIE
CCIF CCIE
For a detailed description of these register bits, refer to Section 18.3.2.4, Flash Conguration Register (FCNFG) and Section 18.3.2.6, Flash Status Register (FSTAT).
534
Freescale Semiconductor
The FTS64K module implements a 64 Kbyte Flash (nonvolatile) memory. The Flash memory contains one array of 64 Kbytes organized as 512 rows of 128 bytes with an erase sector size of eight rows (1024 bytes). The Flash array may be read as either bytes, aligned words, or misaligned words. Read access time is one bus cycle for byte and aligned word, and two bus cycles for misaligned words. The Flash array is ideal for program and data storage for single-supply applications allowing for eld reprogramming without requiring external voltage sources for program or erase. Program and erase functions are controlled by a command driven interface. The Flash module supports both mass erase and sector erase. An erased bit reads 1 and a programmed bit reads 0. The high voltage required to program and erase is generated internally. It is not possible to read from a Flash array while it is being erased or programmed. CAUTION A Flash word must be in the erased state before being programmed. Cumulative programming of bits within a Flash word is not allowed.
19.1.1
Glossary
Command Write Sequence A three-step MCU instruction sequence to program, erase, or erase verify the Flash array memory.
19.1.2
Features
64 Kbytes of Flash memory comprised of one 64 Kbyte array divided into 64 sectors of 1024 bytes Automated program and erase algorithm Interrupts on Flash command completion and command buffer empty Fast sector erase and word program operation 2-stage command pipeline for faster multi-word program times Flexible protection scheme to prevent accidental program or erase Single power supply for Flash program and erase operations Security feature to prevent unauthorized access to the Flash array memory
Freescale Semiconductor
535
19.1.3
Modes of Operation
See Section 19.4.2, Operating Modes for a description of the Flash module operating modes. For program and erase operations, refer to Section 19.4.1, Flash Command Operations.
19.1.4
Block Diagram
FTS64K
Flash Interface
Command Pipeline
Flash Array
cmd2 addr2 data2 cmd1 addr1 data1
32K * 16 Bits
sector 0 sector 1
Registers
Oscillator Clock
19.2
536
Freescale Semiconductor
19.3
19.3.1
The FTS64K memory map is shown in Figure 19-2. The HCS12 architecture places the Flash array addresses between 0x4000 and 0xFFFF, which corresponds to three 16 Kbyte pages. The content of the HCS12 Core PPAGE register is used to map the logical middle page ranging from address 0x8000 to 0xBFFF to any physical 16K byte page in the Flash array memory.1 The FPROT register (see Section 19.3.2.5) can be set to globally protect the entire Flash array. Three separate areas, one starting from the Flash array starting address (called lower) towards higher addresses, one growing downward from the Flash array end address (called higher), and the remaining addresses, can be activated for protection. The Flash array addresses covered by these protectable regions are shown in Figure 19-2. The higher address area is mainly targeted to hold the boot loader code since it covers the vector space. The lower address area can be used for EEPROM emulation in an MCU without an EEPROM module since it can be left unprotected while the remaining addresses are protected from program or erase. Default protection settings as well as security information that allows the MCU to restrict access to the Flash module are stored in the Flash conguration eld described in Table 19-1.
Table 19-1. Flash Conguration Field
Flash Address 0xFF000xFF07 0xFF080xFF0C 0xFF0D 0xFF0E 0xFF0F Size (bytes) 8 5 1 1 1 Description Backdoor Key to unlock security Reserved Flash Protection byte Refer to Section 19.3.2.5, Flash Protection Register (FPROT) Reserved Flash Security/Options byte Refer to Section 19.3.2.2, Flash Security Register (FSEC)
1. By placing 0x3E/0x3F in the HCS12 Core PPAGE register, the bottom/top xed 16 Kbyte pages can be seen twice in the MCU memory map.
Freescale Semiconductor
537
MODULE BASE + 0x0000 MODULE BASE + 0x000F FLASH_START = 0x4000 0x4400 0x4800 0x5000 Flash Protected Low Sectors 1, 2, 4, 8 Kbytes Flash Registers 16 bytes
0x6000
0x3E
Flash Array
0x8000
0x3C
0x3D
003E
0x3F
0xC000
0xE000
0x3F
538
Freescale Semiconductor
Freescale Semiconductor
539
19.3.2
Register Descriptions
The Flash module contains a set of 16 control and status registers located between module base + 0x0000 and 0x000F. A summary of the Flash module registers is given in Figure 19-3. Detailed descriptions of each register bit are provided.
Register Name R W R 0x0001 FSEC W 0x0002 R RESERVED1 W 0x0000 FCLKDIV
(1)
6 PRDIV8 KEYEN0 0
5 FDIV5 NV5 0
4 FDIV4 NV4 0
3 FDIV3 NV3 0
2 FDIV2 NV2 0
1 FDIV1 SEC1 0
0x0003 FCNFG 0x0004 FPROT 0x0005 FSTAT 0x0006 FCMD 0x0007 RESERVED21 0x0008 FADDRHI1 0x0009 FADDRLO1 0x000A FDATAHI1 0x000B FDATALO1 0x000C RESERVED31 0x000D RESERVED41 0x000E RESERVED51 0x000F RESERVED61
R W R W R W R W R W R W R W R W R W R W R W R W R W
FPHS1 ACCERR 0 0
FPHS0 0 0 0
FPLDIS BLANK
FPLS1 FAIL 0 0
FPLS0 DONE
CMDB6 0
CMDB2 0
CMDB0 0
0 0 0 0
0 0 0 0
0 0 0 0
0 0 0 0
0 0 0 0
0 0 0 0
0 0 0 0
0 0 0 0
= Unimplemented or Reserved
540
Freescale Semiconductor
19.3.2.1
The FCLKDIV register is used to control timed events in program and erase algorithms.
Module Base + 0x0000
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
All bits in the FCLKDIV register are readable, bits 60 are write once and bit 7 is not writable.
Table 19-3. FCLKDIV Field Descriptions
Field 7 FDIVLD 6 PRDIV8 50 FDIV[5:0] Description Clock Divider Loaded 0 FCLKDIV register has not been written 1 FCLKDIV register has been written to since the last reset Enable Prescalar by 8 0 The oscillator clock is directly fed into the Flash clock divider 1 The oscillator clock is divided by 8 before feeding into the Flash clock divider Clock Divider Bits The combination of PRDIV8 and FDIV[5:0] must divide the oscillator clock down to a frequency of 150 kHz 200 kHz. The maximum divide ratio is 512. Refer to Section 19.4.1.1, Writing the FCLKDIV Register for more information.
19.3.2.2
The FSEC register holds all bits associated with the security of the MCU and Flash module.
Module Base + 0x0001
7 6 5 4 3 2 1 0
R W Reset
KEYEN1
KEYEN0
NV5
NV4
NV3
NV2
SEC1
SEC0
= Unimplemented or Reserved
All bits in the FSEC register are readable but not writable. The FSEC register is loaded from the Flash conguration eld at 0xFF0F during the reset sequence, indicated by F in Figure 19-5.
Freescale Semiconductor
541
76 Backdoor Key Security Enable Bits The KEYEN[1:0] bits dene the enabling of the backdoor key access KEYEN[1:0] to the Flash module as shown in Table 19-5. 52 NV[5:2] 10 SEC[1:0] Nonvolatile Flag Bits The NV[5:2] bits are available to the user as nonvolatile ags. Flash Security Bits The SEC[1:0] bits dene the security state of the MCU as shown in Table 19-6. If the Flash module is unsecured using backdoor key access, the SEC[1:0] bits are forced to 1:0.
10
The security function in the Flash module is described in Section 19.4.3, Flash Module Security.
19.3.2.3
RESERVED1
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x0002
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
542
Freescale Semiconductor
19.3.2.4
The FCNFG register enables the Flash interrupts and gates the security backdoor key writes.
Module Base + 0x0003
7 6 5 4 3 2 1 0
= Unimplemented or Reserved
CBEIE, CCIE, and KEYACC are readable and writable while remaining bits read 0 and are not writable. KEYACC is only writable if the KEYEN bit in the FSEC register is set to the enabled state (see Section 19.3.2.2).
Table 19-7. FCNFG Field Descriptions
Field 7 CBEIE Description Command Buffer Empty Interrupt Enable The CBEIE bit enables the interrupts in case of an empty command buffer in the Flash module. 0 Command Buffer Empty interrupts disabled 1 An interrupt will be requested whenever the CBEIF ag is set (see Section 19.3.2.6) Command Complete Interrupt Enable The CCIE bit enables the interrupts in case of all commands being completed in the Flash module. 0 Command Complete interrupts disabled 1 An interrupt will be requested whenever the CCIF ag is set (see Section 19.3.2.6) Enable Security Key Writing. 0 Flash writes are interpreted as the start of a command write sequence 1 Writes to the Flash array are interpreted as a backdoor key while reads of the Flash array return invalid data
6 CCIE
5 KEYACC
19.3.2.5
The FPROT register denes which Flash sectors are protected against program or erase.
Module Base + 0x0004
7 6 5 4 3 2 1 0
The FPROT register is readable in normal and special modes. FPOPEN can only be written from a 1 to a 0. FPLS[1:0] can be written anytime until FPLDIS is cleared. FPHS[1:0] can be written anytime until
Freescale Semiconductor
543
FPHDIS is cleared. The FPROT register is loaded from Flash address 0xFF0D during the reset sequence, indicated by F in Figure 19-8. To change the Flash protection that will be loaded on reset, the upper sector of the Flash array must be unprotected, then the Flash protection byte located at Flash address 0xFF0D must be written to. A protected Flash sector is disabled by FPHDIS and FPLDIS while the size of the protected sector is dened by FPHS[1:0] and FPLS[1:0] in the FPROT register. Trying to alter any of the protected areas will result in a protect violation error and the PVIOL ag will be set in the FSTAT register (see Section 19.3.2.6). A mass erase of the whole Flash array is only possible when protection is fully disabled by setting the FPOPEN, FPLDIS, and FPHDIS bits. An attempt to mass erase a Flash array while protection is enabled will set the PVIOL ag in the FSTAT register.
Table 19-8. FPROT Field Descriptions
Field 7 FPOPEN Description Protection Function for Program or Erase It is possible using the FPOPEN bit to either select address ranges to be protected using FPHDIS, FPLDIS, FPHS[1:0] and FPLS[1:0] or to select the same ranges to be unprotected. When FPOPEN is set, FPxDIS enables the ranges to be protected, whereby clearing FPxDIS enables protection for the range specied by the corresponding FPxS[1:0] bits. When FPOPEN is cleared, FPxDIS denes unprotected ranges as specied by the corresponding FPxS[1:0] bits. In this case, setting FPxDIS enables protection. Thus the effective polarity of the FPxDIS bits is swapped by the FPOPEN bit as shown in Table 19-9. This function allows the main part of the Flash array to be protected while a small range can remain unprotected for EEPROM emulation. 0 The FPHDIS and FPLDIS bits dene Flash address ranges to be unprotected 1 The FPHDIS and FPLDIS bits dene Flash address ranges to be protected Nonvolatile Flag Bit The NV6 bit should remain in the erased state for future enhancements. Flash Protection Higher Address Range Disable The FPHDIS bit determines whether there is a protected/unprotected area in the higher space of the Flash address map. 0 Protection/unprotection enabled 1 Protection/unprotection disabled Flash Protection Higher Address Size The FPHS[1:0] bits determine the size of the protected/unprotected sector as shown in Table 19-10. The FPHS[1:0] bits can only be written to while the FPHDIS bit is set. Flash Protection Lower Address Range Disable The FPLDIS bit determines whether there is a protected/unprotected sector in the lower space of the Flash address map. 0 Protection/unprotection enabled 1 Protection/unprotection disabled Flash Protection Lower Address Size The FPLS[1:0] bits determine the size of the protected/unprotected sector as shown in Table 19-11. The FPLS[1:0] bits can only be written to while the FPLDIS bit is set.
6 NV6 5 FPHDIS
43 FPHS[1:0] 2 FPLDIS
10 FPLS[1:0]
544
Freescale Semiconductor
Figure 19-9 illustrates all possible protection scenarios. Although the protection scheme is loaded from the Flash array after reset, it is allowed to change in normal modes. This protection scheme can be used by applications requiring re-programming in single chip mode while providing as much protection as possible if no re-programming is required.
Freescale Semiconductor
545
FPHDIS = 1 FPLDIS = 0 6
FPHDIS = 0 FPLDIS = 1 5
0xFFFF
Scenario
FPOPEN = 1
FPOPEN = 0
19.3.2.5.1
The general guideline is that protection can only be added, not removed. All valid transitions between Flash protection scenarios are specied in Table 19-12. Any attempt to write an invalid scenario to the FPROT register will be ignored and the FPROT register will remain unchanged. The contents of the FPROT register reect the active protection scenario.
Table 19-12. Flash Protection Scenario Transitions
From Protection Scenario 0 1 2 3 4 5 X To Protection Scenario(1) 0 X 1 X X X 2 X 3 X X X X X X X X X 4 5 6
546
19.3.2.6
The FSTAT register denes the status of the Flash command controller and the results of command execution.
Module Base + 0x0005
7 6 5 4 3 2 1 0
R CBEIF W Reset 1
BLANK FAIL
DONE
= Unimplemented or Reserved
In normal modes, bits CBEIF, PVIOL, and ACCERR are readable and writable, bits CCIF and BLANK are readable and not writable, remaining bits, including FAIL and DONE, read 0 and are not writable. In special modes, FAIL is readable and writable while DONE is readable but not writable. FAIL must be clear in special modes when starting a command write sequence.
Table 19-13. FSTAT Field Descriptions
Field 7 CBEIF Description Command Buffer Empty Interrupt Flag The CBEIF ag indicates that the address, data and command buffers are empty so that a new command write sequence can be started. The CBEIF ag is cleared by writing a 1 to CBEIF. Writing a 0 to the CBEIF ag has no effect on CBEIF. Writing a 0 to CBEIF after writing an aligned word to the Flash address space but before CBEIF is cleared will abort a command write sequence and cause the ACCERR ag in the FSTAT register to be set. Writing a 0 to CBEIF outside of a command write sequence will not set the ACCERR ag. The CBEIF ag is used together with the CBEIE bit in the FCNFG register to generate an interrupt request (see Figure 19-26). 0 Buffers are full 1 Buffers are ready to accept a new command Command Complete Interrupt Flag The CCIF ag indicates that there are no more commands pending. The CCIF ag is cleared when CBEIF is clear and sets automatically upon completion of all active and pending commands. The CCIF ag does not set when an active commands completes and a pending command is fetched from the command buffer. Writing to the CCIF ag has no effect. The CCIF ag is used together with the CCIE bit in the FCNFG register to generate an interrupt request (see Figure 19-26). 0 Command in progress 1 All commands are completed
6 CCIF
Freescale Semiconductor
547
4 ACCERR
2 BLANK
1 FAIL
0 DONE
19.3.2.7
R W Reset
0 CMDB6 0 0 CMDB5 0
0 CMDB2
0 CMDB0 0 0
= Unimplemented or Reserved
Bits CMDB6, CMDB5, CMDB2, and CMDB0 are readable and writable during a command write sequence while bits 7, 4, 3, and 1 read 0 and are not writable.
548
Freescale Semiconductor
19.3.2.8
RESERVED2
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x0007
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
19.3.2.9
\
R W Reset
0 FABHI 0 0 0 0 0 0 0 0
= Unimplemented or Reserved
Freescale Semiconductor
549
R FABLO W Reset 0 0 0 0 0 0 0 0
In normal modes, all FABHI and FABLO bits read 0 and are not writable. In special modes, the FABHI and FABLO bits are readable and writable. For sector erase, the MCU address bits [9:0] are ignored. For mass erase, any address within the Flash array is valid to start the command.
R FDHI W Reset 0 0 0 0 0 0 0 0
R FDLO W Reset 0 0 0 0 0 0 0 0
In normal modes, all FDATAHI and FDATALO bits read 0 and are not writable. In special modes, all FDATAHI and FDATALO bits are readable and writable when writing to an address within the Flash address range.
19.3.2.11 RESERVED3
This register is reserved for factory testing and is not accessible to the user.
550
Freescale Semiconductor
R W Reset
= Unimplemented or Reserved
19.3.2.12 RESERVED4
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x000D
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
19.3.2.13 RESERVED5
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x000E
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
19.3.2.14 RESERVED6
This register is reserved for factory testing and is not accessible to the user.
Freescale Semiconductor
551
R W Reset
= Unimplemented or Reserved
19.4
19.4.1
Functional Description
Flash Command Operations
Write operations are used for the program, erase, and erase verify algorithms described in this section. The program and erase algorithms are controlled by a state machine whose timebase FCLK is derived from the oscillator clock via a programmable divider. The FCMD register as well as the associated FADDR and FDATA registers operate as a buffer and a register (2-stage FIFO) so that a new command along with the necessary data and address can be stored to the buffer while the previous command is still in progress. This pipelined operation allows a time optimization when programming more than one word on a specic row, as the high voltage generation can be kept active in between two programming commands. The pipelined operation also allows a simplication of command launching. Buffer empty as well as command completion are signalled by ags in the FSTAT register with corresponding interrupts generated, if enabled. The next sections describe: How to write the FCLKDIV register Command write sequence used to program, erase or erase verify the Flash array Valid Flash commands Errors resulting from illegal Flash operations
19.4.1.1
Prior to issuing any Flash command after a reset, it is rst necessary to write the FCLKDIV register to divide the oscillator clock down to within the 150-kHz to 200-kHz range. Since the program and erase timings are also a function of the bus clock, the FCLKDIV determination must take this information into account. If we dene: FCLK as the clock of the Flash timing control block Tbus as the period of the bus clock INT(x) as taking the integer part of x (e.g., INT(4.323) = 4),
552
Freescale Semiconductor
then FCLKDIV register bits PRDIV8 and FDIV[5:0] are to be set as described in Figure 19-21. For example, if the oscillator clock frequency is 950 kHz and the bus clock is 10 MHz, FCLKDIV bits FDIV[5:0] should be set to 4 (000100) and bit PRDIV8 set to 0. The resulting FCLK is then 190 kHz. As a result, the Flash algorithm timings are increased over optimum target by:
( 200 190 ) 200 100 = 5%
Command execution time will increase proportionally with the period of FCLK. CAUTION Because of the impact of clock synchronization on the accuracy of the functional timings, programming or erasing the Flash array cannot be performed if the bus clock runs at less than 1 MHz. Programming or erasing the Flash array with an input clock < 150 kHz should be avoided. Setting FCLKDIV to a value such that FCLK < 150 kHz can destroy the Flash array due to overstress. Setting FCLKDIV to a value such that (1/FCLK + Tbus) < 5s can result in incomplete programming or erasure of the Flash array cells. If the FCLKDIV register is written, the bit FDIVLD is set automatically. If the FDIVLD bit is 0, the FCLKDIV register has not been written since the last reset. If the FCLKDIV register has not been written to, the Flash command loaded during a command write sequence will not execute and the ACCERR ag in the FSTAT register will set.
Freescale Semiconductor
553
START
no
PRDIV8=1 PRDCLK=oscillator_clock/8
PRDCLK=oscillator_clock
no
FDIV[5:0]=INT(PRDCLK[MHz]*(5+Tbus[s]))
FDIV[5:0]=PRDCLK[MHz]*(5+Tbus[s])-1
FCLK=(PRDCLK)/(1+FDIV[5:0])
yes END
yes
FDIV[5:0] > 4?
554
Freescale Semiconductor
19.4.1.2
The Flash command controller is used to supervise the command write sequence to execute program, erase, and erase verify algorithms. Before starting a command write sequence, the ACCERR and PVIOL ags in the FSTAT register must be clear and the CBEIF ag should be tested to determine the state of the address, data, and command buffers. If the CBEIF ag is set, indicating the buffers are empty, a new command write sequence can be started. If the CBEIF ag is clear, indicating the buffers are not available, a new command write sequence will overwrite the contents of the address, data, and command buffers. A command write sequence consists of three steps which must be strictly adhered to with writes to the Flash module not permitted between the steps. However, Flash register and array reads are allowed during a command write sequence. The basic command write sequence is as follows: 1. Write to a valid address in the Flash array memory. 2. Write a valid command to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the command. The address written in step 1 will be stored in the FADDR registers and the data will be stored in the FDATA registers. When the CBEIF ag is cleared in step 3, the CCIF ag is cleared by the Flash command controller indicating that the command was successfully launched. For all command write sequences, the CBEIF ag will set after the CCIF ag is cleared indicating that the address, data, and command buffers are ready for a new command write sequence to begin. A buffered command will wait for the active operation to be completed before being launched. Once a command is launched, the completion of the command operation is indicated by the setting of the CCIF ag in the FSTAT register. The CCIF ag will set upon completion of all active and buffered commands.
Freescale Semiconductor
555
19.4.1.3
Table 19-16 summarizes the valid Flash commands along with the effects of the commands on the Flash array.
Table 19-16. Valid Flash Commands
FCMD 0x05 0x20 0x40 0x41 Meaning Erase Verify Program Sector Erase Mass Erase Function on Flash Array Verify all bytes in the Flash array are erased. If the Flash array is erased, the BLANK bit will set in the FSTAT register upon command completion. Program a word (2 bytes) in the Flash array. Erase all 1024 bytes in a sector of the Flash array. Erase all bytes in the Flash array. A mass erase of the full Flash array is only possible when FPLDIS, FPHDIS, and FPOPEN bits in the FPROT register are set prior to launching the command.
CAUTION A Flash word must be in the erased state before being programmed. Cumulative programming of bits within a Flash word is not allowed.
556
Freescale Semiconductor
19.4.1.3.1
The erase verify operation will verify that a Flash array is erased. An example ow to execute the erase verify operation is shown in Figure 19-22. The erase verify command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the erase verify command. The address and data written will be ignored. 2. Write the erase verify command, 0x05, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the erase verify command. After launching the erase verify command, the CCIF ag in the FSTAT register will set after the operation has completed unless a new command write sequence has been buffered. Upon completion of the erase verify operation, the BLANK ag in the FSTAT register will be set if all addresses in the Flash array are veried to be erased. If any address in the Flash array is not erased, the erase verify operation will terminate and the BLANK ag in the FSTAT register will remain clear.
Freescale Semiconductor
557
START
no
no
yes
1.
Write: Flash Array Address and Dummy Data Write: FCMD register Erase Verify Command 0x05 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
2.
3.
CCIF Set?
no
yes
Erase Verify Status BLANK Set? no
yes
EXIT Flash Array Erased EXIT Flash Array Not Erased
558
Freescale Semiconductor
19.4.1.3.2
Program Command
The program operation will program a previously erased word in the Flash array using an embedded algorithm. An example ow to execute the program operation is shown in Figure 19-23. The program command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the program command. The data written will be programmed to the Flash array address written. 2. Write the program command, 0x20, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the program command. If a word to be programmed is in a protected area of the Flash array, the PVIOL ag in the FSTAT register will set and the program command will not launch. Once the program command has successfully launched, the CCIF ag in the FSTAT register will set after the program operation has completed unless a new command write sequence has been buffered. By executing a new program command write sequence on sequential words after the CBEIF ag in the FSTAT register has been set, up to 55% faster programming time per word can be effectively achieved than by waiting for the CCIF ag to set after each program operation.
Freescale Semiconductor
559
START
no
no
yes
1.
2.
Write: FCMD register Program Command 0x20 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
3.
CBEIF Set?
no
yes
Sequential Programming Decision Next Word? no Read: FSTAT register yes
CCIF Set?
no
yes
EXIT
560
Freescale Semiconductor
19.4.1.3.3
The sector erase operation will erase all addresses in a 1024 byte sector of the Flash array using an embedded algorithm. An example ow to execute the sector erase operation is shown in Figure 19-24. The sector erase command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the sector erase command. The Flash address written determines the sector to be erased while MCU address bits [9:0] and the data written are ignored. 2. Write the sector erase command, 0x40, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the sector erase command. If a Flash sector to be erased is in a protected area of the Flash array, the PVIOL ag in the FSTAT register will set and the sector erase command will not launch. Once the sector erase command has successfully launched, the CCIF ag in the FSTAT register will set after the sector erase operation has completed unless a new command write sequence has been buffered.
Freescale Semiconductor
561
START
no
no
yes
1.
Write: Flash Sector Address and Dummy Data Write: FCMD register Sector Erase Command 0x40 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
2.
3.
CCIF Set?
no
yes
EXIT
562
Freescale Semiconductor
19.4.1.3.4
The mass erase operation will erase all addresses in a Flash array using an embedded algorithm. An example ow to execute the mass erase operation is shown in Figure 19-25. The mass erase command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the mass erase command. The address and data written will be ignored. 2. Write the mass erase command, 0x41, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the mass erase command. If a Flash array to be erased contains any protected area, the PVIOL ag in the FSTAT register will set and the mass erase command will not launch. Once the mass erase command has successfully launched, the CCIF ag in the FSTAT register will set after the mass erase operation has completed unless a new command write sequence has been buffered.
Freescale Semiconductor
563
START
no
no
yes
1.
Write: Flash Block Address and Dummy Data Write: FCMD register Mass Erase Command 0x41 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
2.
3.
CCIF Set?
no
yes
EXIT
564
Freescale Semiconductor
19.4.1.4
19.4.1.4.1
The ACCERR ag in the FSTAT register will be set during the command write sequence if any of the following illegal Flash operations are performed causing the command write sequence to immediately abort: 1. Writing to the Flash address space before initializing the FCLKDIV register 2. Writing a misaligned word or a byte to the valid Flash address space 3. Writing to the Flash address space while CBEIF is not set 4. Writing a second word to the Flash address space before executing a program or erase command on the previously written word 5. Writing to any Flash register other than FCMD after writing a word to the Flash address space 6. Writing a second command to the FCMD register before executing the previously written command 7. Writing an invalid command to the FCMD register 8. Writing to any Flash register other than FSTAT (to clear CBEIF) after writing to the FCMD register 9. The part enters stop mode and a program or erase command is in progress. The command is aborted and any pending command is killed 10. When security is enabled, a command other than mass erase originating from a non-secure memory or from the background debug mode is written to the FCMD register 11. A 0 is written to the CBEIF bit in the FSTAT register to abort a command write sequence. The ACCERR ag will not be set if any Flash register is read during the command write sequence. If the Flash array is read during execution of an algorithm (CCIF=0), the Flash module will return invalid data and the ACCERR ag will not be set. If an ACCERR ag is set in the FSTAT register, the Flash command controller is locked. It is not possible to launch another command until the ACCERR ag is cleared. 19.4.1.4.2 Protection Violation
The PVIOL ag in the FSTAT register will be set during the command write sequence after the word write to the Flash address space if any of the following illegal Flash operations are performed, causing the command write sequence to immediately abort: 1. Writing a Flash address to program in a protected area of the Flash array (see Section 19.3.2.5). 2. Writing a Flash address to erase in a protected area of the Flash array. 3. Writing the mass erase command to the FCMD register while any protection is enabled. If the PVIOL ag is set, the Flash command controller is locked. It is not possible to launch another command until the PVIOL ag is cleared.
Freescale Semiconductor
565
19.4.2
19.4.2.1
Operating Modes
Wait Mode
If the MCU enters wait mode while a Flash command is active (CCIF = 0), that command and any buffered command will be completed. The Flash module can recover the MCU from wait mode if the interrupts are enabled (see Section 19.4.5).
19.4.2.2
Stop Mode
If the MCU enters stop mode while a Flash command is active (CCIF = 0), that command will be aborted and the data being programmed or erased is lost. The high voltage circuitry to the Flash array will be switched off when entering stop mode. CCIF and ACCERR ags will be set. Upon exit from stop mode, the CBEIF ag will be set and any buffered command will not be executed. The ACCERR ag must be cleared before returning to normal operation. NOTE As active Flash commands are immediately aborted when the MCU enters stop mode, it is strongly recommended that the user does not use the STOP instruction during program and erase execution.
19.4.2.3
In background debug mode (BDM), the FPROT register is writable. If the MCU is unsecured, then all Flash commands listed in Table 19-16 can be executed. If the MCU is secured and is in special single chip mode, the only possible command to execute is mass erase.
19.4.3
The Flash module provides the necessary security information to the MCU. After each reset, the Flash module determines the security state of the MCU as dened in Section 19.3.2.2, Flash Security Register (FSEC). The contents of the Flash security/options byte at address 0xFF0F in the Flash conguration eld must be changed directly by programming address 0xFF0F when the device is unsecured and the higher address sector is unprotected. If the Flash security/options byte is left in the secure state, any reset will cause the MCU to return to the secure operating mode.
19.4.3.1
The MCU may only be unsecured by using the backdoor key access feature which requires knowledge of the contents of the backdoor key (four 16-bit words programmed at addresses 0xFF000xFF07). If KEYEN[1:0] = 1:0 and the KEYACC bit is set, a write to a backdoor key address in the Flash array triggers a comparison between the written data and the backdoor key data stored in the Flash array. If all four words of data are written to the correct addresses in the correct order and the data matches the backdoor key stored in the Flash array, the MCU will be unsecured. The data must be written to the backdoor key
566
Freescale Semiconductor
addresses sequentially staring with 0xFF00-0xFF01 and ending with 0xFF060xFF07. The values 0x0000 and 0xFFFF are not permitted as keys. When the KEYACC bit is set, reads of the Flash array will return invalid data. The user code stored in the Flash array must have a method of receiving the backdoor key from an external stimulus. This external stimulus would typically be through one of the on-chip serial ports. If KEYEN[1:0] = 1:0 in the FSEC register, the MCU can be unsecured by the backdoor key access sequence described below: 1. Set the KEYACC bit in the FCNFG register 2. Write the correct four 16-bit words to Flash addresses 0xFF000xFF07 sequentially starting with 0xFF00 3. Clear the KEYACC bit in the FCNFG register 4. If all four 16-bit words match the backdoor key stored in Flash addresses 0xFF000xFF07, the MCU is unsecured and bits SEC[1:0] in the FSEC register are forced to the unsecure state of 1:0 The backdoor key access sequence is monitored by the internal security state machine. An illegal operation during the backdoor key access sequence will cause the security state machine to lock, leaving the MCU in the secured state. A reset of the MCU will cause the security state machine to exit the lock state and allow a new backdoor key access sequence to be attempted. The following illegal operations will lock the security state machine: 1. If any of the four 16-bit words does not match the backdoor key programmed in the Flash array 2. If the four 16-bit words are written in the wrong sequence 3. If more than four 16-bit words are written 4. If any of the four 16-bit words written are 0x0000 or 0xFFFF 5. If the KEYACC bit does not remain set while the four 16-bit words are written After the backdoor key access sequence has been correctly matched, the MCU will be unsecured. The Flash security byte can be programmed to the unsecure state, if desired. In the unsecure state, the user has full control of the contents of the four word backdoor key by programming bytes 0xFF000xFF07 of the Flash conguration eld. The security as dened in the Flash security/options byte at address 0xFF0F is not changed by using the backdoor key access sequence to unsecure. The backdoor key stored in addresses 0xFF000xFF07 is unaffected by the backdoor key access sequence. After the next reset sequence, the security state of the Flash module is determined by the Flash security/options byte at address 0xFF0F. The backdoor key access sequence has no effect on the program and erase protection dened in the FPROT register. It is not possible to unsecure the MCU in special single chip mode by executing the backdoor key access sequence in background debug mode.
Freescale Semiconductor
567
19.4.4
On each reset, the Flash module executes a reset sequence to hold CPU activity while loading the following registers from the Flash array memory according to Table 19-1: FPROT Flash Protection Register (see Section 19.3.2.5) FSEC Flash Security Register (see Section 19.3.2.2)
19.4.4.1
If a reset occurs while any Flash command is in progress, that command will be immediately aborted. The state of the word being programmed or the sector/array being erased is not guaranteed.
19.4.5
Interrupts
The Flash module can generate an interrupt when all Flash commands have completed execution or the Flash address, data, and command buffers are empty.
Table 19-17. Flash Interrupt Sources
Interrupt Source Flash Address, Data, and Command Buffers are empty All Flash commands have completed execution Interrupt Flag CBEIF (FSTAT register) CCIF (FSTAT register) Local Enable CBEIE CCIE Global (CCR) Mask I Bit I Bit
NOTE Vector addresses and their relative interrupt priority are determined at the MCU level.
19.4.5.1
Figure 19-26 shows the logic used for generating interrupts. The Flash module uses the CBEIF and CCIF ags in combination with the enable bits CBIE and CCIE to discriminate for the generation of interrupts.
CBEIF CBEIE
CCIF CCIE
For a detailed description of these register bits, refer to Section 19.3.2.4, Flash Conguration Register (FCNFG) and Section 19.3.2.6, Flash Status Register (FSTAT).
568
Freescale Semiconductor
The FTS96K module implements a 96 Kbyte Flash (nonvolatile) memory. The Flash memory contains one array of 96 Kbytes organized as 768 rows of 128 bytes with an erase sector size of eight rows (1024 bytes). The Flash array may be read as either bytes, aligned words, or misaligned words. Read access time is one bus cycle for byte and aligned word, and two bus cycles for misaligned words. The Flash array is ideal for program and data storage for single-supply applications allowing for eld reprogramming without requiring external voltage sources for program or erase. Program and erase functions are controlled by a command driven interface. The Flash module supports both mass erase and sector erase. An erased bit reads 1 and a programmed bit reads 0. The high voltage required to program and erase is generated internally. It is not possible to read from a Flash array while it is being erased or programmed. CAUTION A Flash word must be in the erased state before being programmed. Cumulative programming of bits within a Flash word is not allowed.
20.1.1
Glossary
Command Write Sequence A three-step MCU instruction sequence to program, erase, or erase verify the Flash array memory.
20.1.2
Features
96 Kbytes of Flash memory comprised of one 96 Kbyte array divided into 96 sectors of 1024 bytes Automated program and erase algorithm Interrupts on Flash command completion and command buffer empty Fast sector erase and word program operation 2-stage command pipeline for faster multi-word program times Flexible protection scheme to prevent accidental program or erase Single power supply for Flash program and erase operations Security feature to prevent unauthorized access to the Flash array memory
Freescale Semiconductor
569
20.1.3
Modes of Operation
See Section 20.4.2, Operating Modes for a description of the Flash module operating modes. For program and erase operations, refer to Section 20.4.1, Flash Command Operations.
20.1.4
Block Diagram
FTS96K
Flash Interface
Command Pipeline
Flash Array
cmd2 addr2 data2 cmd1 addr1 data1
48K * 16 Bits
sector 0 sector 1
Registers
Oscillator Clock
20.2
570
Freescale Semiconductor
20.3
20.3.1
The FTS96K memory map is shown in Figure 20-2. The HCS12 architecture places the Flash array addresses between 0x4000 and 0xFFFF, which corresponds to three 16 Kbyte pages. The content of the HCS12 Core PPAGE register is used to map the logical middle page ranging from address 0x8000 to 0xBFFF to any physical 16K byte page in the Flash array memory.1 The FPROT register (see Section 20.3.2.5) can be set to globally protect the entire Flash array. Three separate areas, one starting from the Flash array starting address (called lower) towards higher addresses, one growing downward from the Flash array end address (called higher), and the remaining addresses, can be activated for protection. The Flash array addresses covered by these protectable regions are shown in Figure 20-2. The higher address area is mainly targeted to hold the boot loader code since it covers the vector space. The lower address area can be used for EEPROM emulation in an MCU without an EEPROM module since it can be left unprotected while the remaining addresses are protected from program or erase. Default protection settings as well as security information that allows the MCU to restrict access to the Flash module are stored in the Flash conguration eld described in Table 20-1.
Table 20-1. Flash Conguration Field
Flash Address 0xFF000xFF07 0xFF080xFF0C 0xFF0D 0xFF0E 0xFF0F Size (bytes) 8 5 1 1 1 Description Backdoor Key to unlock security Reserved Flash Protection byte Refer to Section 20.3.2.5, Flash Protection Register (FPROT) Reserved Flash Security/Options byte Refer to Section 20.3.2.2, Flash Security Register (FSEC)
1. By placing 0x3E/0x3F in the HCS12 Core PPAGE register, the bottom/top xed 16 Kbyte pages can be seen twice in the MCU memory map.
Freescale Semiconductor
571
MODULE BASE + 0x0000 MODULE BASE + 0x000F FLASH_START = 0x4000 0x4400 0x4800 0x5000 Flash Protected Low Sectors 1, 2, 4, 8 Kbytes Flash Registers 16 bytes
0x6000
0x3E
Flash Array
0x8000
0x3A
0x3B 0x3C
0x3D
003E
0x3F
0xC000
0xE000
0x3F
572
Freescale Semiconductor
Freescale Semiconductor
573
20.3.2
Register Descriptions
The Flash module contains a set of 16 control and status registers located between module base + 0x0000 and 0x000F. A summary of the Flash module registers is given in Figure 20-3. Detailed descriptions of each register bit are provided.
Register Name R W R 0x0001 FSEC W 0x0002 R RESERVED1 W 0x0000 FCLKDIV
(1)
6 PRDIV8 KEYEN0 0
5 FDIV5 NV5 0
4 FDIV4 NV4 0
3 FDIV3 NV3 0
2 FDIV2 NV2 0
1 FDIV1 SEC1 0
0x0003 FCNFG 0x0004 FPROT 0x0005 FSTAT 0x0006 FCMD 0x0007 RESERVED21 0x0008 FADDRHI1 0x0009 FADDRLO1 0x000A FDATAHI1 0x000B FDATALO1 0x000C RESERVED31 0x000D RESERVED41 0x000E RESERVED51 0x000F RESERVED61
R W R W R W R W R W R W R W R W R W R W R W R W R W
FPHS1 ACCERR 0 0
FPHS0 0 0 0
FPLDIS BLANK
FPLS1 FAIL 0 0
FPLS0 DONE
CMDB6 0
CMDB2 0
CMDB0 0
= Unimplemented or Reserved
574
Freescale Semiconductor
20.3.2.1
The FCLKDIV register is used to control timed events in program and erase algorithms.
Module Base + 0x0000
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
All bits in the FCLKDIV register are readable, bits 60 are write once and bit 7 is not writable.
Table 20-3. FCLKDIV Field Descriptions
Field 7 FDIVLD 6 PRDIV8 50 FDIV[5:0] Description Clock Divider Loaded 0 FCLKDIV register has not been written 1 FCLKDIV register has been written to since the last reset Enable Prescalar by 8 0 The oscillator clock is directly fed into the Flash clock divider 1 The oscillator clock is divided by 8 before feeding into the Flash clock divider Clock Divider Bits The combination of PRDIV8 and FDIV[5:0] must divide the oscillator clock down to a frequency of 150 kHz 200 kHz. The maximum divide ratio is 512. Refer to Section 20.4.1.1, Writing the FCLKDIV Register for more information.
20.3.2.2
The FSEC register holds all bits associated with the security of the MCU and Flash module.
Module Base + 0x0001
7 6 5 4 3 2 1 0
R W Reset
KEYEN1
KEYEN0
NV5
NV4
NV3
NV2
SEC1
SEC0
= Unimplemented or Reserved
All bits in the FSEC register are readable but not writable. The FSEC register is loaded from the Flash conguration eld at 0xFF0F during the reset sequence, indicated by F in Figure 20-5.
Freescale Semiconductor
575
76 Backdoor Key Security Enable Bits The KEYEN[1:0] bits dene the enabling of the backdoor key access KEYEN[1:0] to the Flash module as shown in Table 20-5. 52 NV[5:2] 10 SEC[1:0] Nonvolatile Flag Bits The NV[5:2] bits are available to the user as nonvolatile ags. Flash Security Bits The SEC[1:0] bits dene the security state of the MCU as shown in Table 20-6. If the Flash module is unsecured using backdoor key access, the SEC[1:0] bits are forced to 1:0.
10
The security function in the Flash module is described in Section 20.4.3, Flash Module Security.
20.3.2.3
RESERVED1
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x0002
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
576
Freescale Semiconductor
20.3.2.4
The FCNFG register enables the Flash interrupts and gates the security backdoor key writes.
Module Base + 0x0003
7 6 5 4 3 2 1 0
= Unimplemented or Reserved
CBEIE, CCIE, and KEYACC are readable and writable while remaining bits read 0 and are not writable. KEYACC is only writable if the KEYEN bit in the FSEC register is set to the enabled state (see Section 20.3.2.2).
Table 20-7. FCNFG Field Descriptions
Field 7 CBEIE Description Command Buffer Empty Interrupt Enable The CBEIE bit enables the interrupts in case of an empty command buffer in the Flash module. 0 Command Buffer Empty interrupts disabled 1 An interrupt will be requested whenever the CBEIF ag is set (see Section 20.3.2.6) Command Complete Interrupt Enable The CCIE bit enables the interrupts in case of all commands being completed in the Flash module. 0 Command Complete interrupts disabled 1 An interrupt will be requested whenever the CCIF ag is set (see Section 20.3.2.6) Enable Security Key Writing. 0 Flash writes are interpreted as the start of a command write sequence 1 Writes to the Flash array are interpreted as a backdoor key while reads of the Flash array return invalid data
6 CCIE
5 KEYACC
20.3.2.5
The FPROT register denes which Flash sectors are protected against program or erase.
Module Base + 0x0004
7 6 5 4 3 2 1 0
The FPROT register is readable in normal and special modes. FPOPEN can only be written from a 1 to a 0. FPLS[1:0] can be written anytime until FPLDIS is cleared. FPHS[1:0] can be written anytime until
Freescale Semiconductor
577
FPHDIS is cleared. The FPROT register is loaded from Flash address 0xFF0D during the reset sequence, indicated by F in Figure 20-8. To change the Flash protection that will be loaded on reset, the upper sector of the Flash array must be unprotected, then the Flash protection byte located at Flash address 0xFF0D must be written to. A protected Flash sector is disabled by FPHDIS and FPLDIS while the size of the protected sector is dened by FPHS[1:0] and FPLS[1:0] in the FPROT register. Trying to alter any of the protected areas will result in a protect violation error and the PVIOL ag will be set in the FSTAT register (see Section 20.3.2.6). A mass erase of the whole Flash array is only possible when protection is fully disabled by setting the FPOPEN, FPLDIS, and FPHDIS bits. An attempt to mass erase a Flash array while protection is enabled will set the PVIOL ag in the FSTAT register.
Table 20-8. FPROT Field Descriptions
Field 7 FPOPEN Description Protection Function for Program or Erase It is possible using the FPOPEN bit to either select address ranges to be protected using FPHDIS, FPLDIS, FPHS[1:0] and FPLS[1:0] or to select the same ranges to be unprotected. When FPOPEN is set, FPxDIS enables the ranges to be protected, whereby clearing FPxDIS enables protection for the range specied by the corresponding FPxS[1:0] bits. When FPOPEN is cleared, FPxDIS denes unprotected ranges as specied by the corresponding FPxS[1:0] bits. In this case, setting FPxDIS enables protection. Thus the effective polarity of the FPxDIS bits is swapped by the FPOPEN bit as shown in Table 20-9. This function allows the main part of the Flash array to be protected while a small range can remain unprotected for EEPROM emulation. 0 The FPHDIS and FPLDIS bits dene Flash address ranges to be unprotected 1 The FPHDIS and FPLDIS bits dene Flash address ranges to be protected Nonvolatile Flag Bit The NV6 bit should remain in the erased state for future enhancements. Flash Protection Higher Address Range Disable The FPHDIS bit determines whether there is a protected/unprotected area in the higher space of the Flash address map. 0 Protection/unprotection enabled 1 Protection/unprotection disabled Flash Protection Higher Address Size The FPHS[1:0] bits determine the size of the protected/unprotected sector as shown in Table 20-10. The FPHS[1:0] bits can only be written to while the FPHDIS bit is set. Flash Protection Lower Address Range Disable The FPLDIS bit determines whether there is a protected/unprotected sector in the lower space of the Flash address map. 0 Protection/unprotection enabled 1 Protection/unprotection disabled Flash Protection Lower Address Size The FPLS[1:0] bits determine the size of the protected/unprotected sector as shown in Table 20-11. The FPLS[1:0] bits can only be written to while the FPLDIS bit is set.
6 NV6 5 FPHDIS
43 FPHS[1:0] 2 FPLDIS
10 FPLS[1:0]
578
Freescale Semiconductor
Figure 20-9 illustrates all possible protection scenarios. Although the protection scheme is loaded from the Flash array after reset, it is allowed to change in normal modes. This protection scheme can be used by applications requiring re-programming in single chip mode while providing as much protection as possible if no re-programming is required.
Freescale Semiconductor
579
FPHDIS = 1 FPLDIS = 0 6
FPHDIS = 0 FPLDIS = 1 5
0xFFFF
Scenario
FPOPEN = 1
FPOPEN = 0
20.3.2.5.1
The general guideline is that protection can only be added, not removed. All valid transitions between Flash protection scenarios are specied in Table 20-12. Any attempt to write an invalid scenario to the FPROT register will be ignored and the FPROT register will remain unchanged. The contents of the FPROT register reect the active protection scenario.
Table 20-12. Flash Protection Scenario Transitions
From Protection Scenario 0 1 2 3 4 5 X To Protection Scenario(1) 0 X 1 X X X 2 X 3 X X X X X X X X X 4 5 6
580
20.3.2.6
The FSTAT register denes the status of the Flash command controller and the results of command execution.
Module Base + 0x0005
7 6 5 4 3 2 1 0
R CBEIF W Reset 1
BLANK FAIL
DONE
= Unimplemented or Reserved
In normal modes, bits CBEIF, PVIOL, and ACCERR are readable and writable, bits CCIF and BLANK are readable and not writable, remaining bits, including FAIL and DONE, read 0 and are not writable. In special modes, FAIL is readable and writable while DONE is readable but not writable. FAIL must be clear in special modes when starting a command write sequence.
Table 20-13. FSTAT Field Descriptions
Field 7 CBEIF Description Command Buffer Empty Interrupt Flag The CBEIF ag indicates that the address, data and command buffers are empty so that a new command write sequence can be started. The CBEIF ag is cleared by writing a 1 to CBEIF. Writing a 0 to the CBEIF ag has no effect on CBEIF. Writing a 0 to CBEIF after writing an aligned word to the Flash address space but before CBEIF is cleared will abort a command write sequence and cause the ACCERR ag in the FSTAT register to be set. Writing a 0 to CBEIF outside of a command write sequence will not set the ACCERR ag. The CBEIF ag is used together with the CBEIE bit in the FCNFG register to generate an interrupt request (see Figure 20-26). 0 Buffers are full 1 Buffers are ready to accept a new command Command Complete Interrupt Flag The CCIF ag indicates that there are no more commands pending. The CCIF ag is cleared when CBEIF is clear and sets automatically upon completion of all active and pending commands. The CCIF ag does not set when an active commands completes and a pending command is fetched from the command buffer. Writing to the CCIF ag has no effect. The CCIF ag is used together with the CCIE bit in the FCNFG register to generate an interrupt request (see Figure 20-26). 0 Command in progress 1 All commands are completed
6 CCIF
Freescale Semiconductor
581
4 ACCERR
2 BLANK
1 FAIL
0 DONE
20.3.2.7
R W Reset
0 CMDB6 0 0 CMDB5 0
0 CMDB2
0 CMDB0 0 0
= Unimplemented or Reserved
Bits CMDB6, CMDB5, CMDB2, and CMDB0 are readable and writable during a command write sequence while bits 7, 4, 3, and 1 read 0 and are not writable.
582
Freescale Semiconductor
20.3.2.8
RESERVED2
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x0007
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
20.3.2.9
\
R FABHI W Reset 0 0 0 0 0 0 0 0
Freescale Semiconductor
583
R FABLO W Reset 0 0 0 0 0 0 0 0
In normal modes, all FABHI and FABLO bits read 0 and are not writable. In special modes, the FABHI and FABLO bits are readable and writable. For sector erase, the MCU address bits [9:0] are ignored. For mass erase, any address within the Flash array is valid to start the command.
R FDHI W Reset 0 0 0 0 0 0 0 0
R FDLO W Reset 0 0 0 0 0 0 0 0
In normal modes, all FDATAHI and FDATALO bits read 0 and are not writable. In special modes, all FDATAHI and FDATALO bits are readable and writable when writing to an address within the Flash address range.
20.3.2.11 RESERVED3
This register is reserved for factory testing and is not accessible to the user.
584
Freescale Semiconductor
R W Reset
= Unimplemented or Reserved
20.3.2.12 RESERVED4
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x000D
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
20.3.2.13 RESERVED5
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x000E
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
20.3.2.14 RESERVED6
This register is reserved for factory testing and is not accessible to the user.
Freescale Semiconductor
585
R W Reset
= Unimplemented or Reserved
20.4
20.4.1
Functional Description
Flash Command Operations
Write operations are used for the program, erase, and erase verify algorithms described in this section. The program and erase algorithms are controlled by a state machine whose timebase FCLK is derived from the oscillator clock via a programmable divider. The FCMD register as well as the associated FADDR and FDATA registers operate as a buffer and a register (2-stage FIFO) so that a new command along with the necessary data and address can be stored to the buffer while the previous command is still in progress. This pipelined operation allows a time optimization when programming more than one word on a specic row, as the high voltage generation can be kept active in between two programming commands. The pipelined operation also allows a simplication of command launching. Buffer empty as well as command completion are signalled by ags in the FSTAT register with corresponding interrupts generated, if enabled. The next sections describe: How to write the FCLKDIV register Command write sequence used to program, erase or erase verify the Flash array Valid Flash commands Errors resulting from illegal Flash operations
20.4.1.1
Prior to issuing any Flash command after a reset, it is rst necessary to write the FCLKDIV register to divide the oscillator clock down to within the 150-kHz to 200-kHz range. Since the program and erase timings are also a function of the bus clock, the FCLKDIV determination must take this information into account. If we dene: FCLK as the clock of the Flash timing control block Tbus as the period of the bus clock INT(x) as taking the integer part of x (e.g., INT(4.323) = 4),
586
Freescale Semiconductor
then FCLKDIV register bits PRDIV8 and FDIV[5:0] are to be set as described in Figure 20-21. For example, if the oscillator clock frequency is 950 kHz and the bus clock is 10 MHz, FCLKDIV bits FDIV[5:0] should be set to 4 (000100) and bit PRDIV8 set to 0. The resulting FCLK is then 190 kHz. As a result, the Flash algorithm timings are increased over optimum target by:
( 200 190 ) 200 100 = 5%
Command execution time will increase proportionally with the period of FCLK. CAUTION Because of the impact of clock synchronization on the accuracy of the functional timings, programming or erasing the Flash array cannot be performed if the bus clock runs at less than 1 MHz. Programming or erasing the Flash array with an input clock < 150 kHz should be avoided. Setting FCLKDIV to a value such that FCLK < 150 kHz can destroy the Flash array due to overstress. Setting FCLKDIV to a value such that (1/FCLK + Tbus) < 5s can result in incomplete programming or erasure of the Flash array cells. If the FCLKDIV register is written, the bit FDIVLD is set automatically. If the FDIVLD bit is 0, the FCLKDIV register has not been written since the last reset. If the FCLKDIV register has not been written to, the Flash command loaded during a command write sequence will not execute and the ACCERR ag in the FSTAT register will set.
Freescale Semiconductor
587
START
no
PRDIV8=1 PRDCLK=oscillator_clock/8
PRDCLK=oscillator_clock
no
FDIV[5:0]=INT(PRDCLK[MHz]*(5+Tbus[s]))
FDIV[5:0]=PRDCLK[MHz]*(5+Tbus[s])-1
FCLK=(PRDCLK)/(1+FDIV[5:0])
yes END
yes
FDIV[5:0] > 4?
588
Freescale Semiconductor
20.4.1.2
The Flash command controller is used to supervise the command write sequence to execute program, erase, and erase verify algorithms. Before starting a command write sequence, the ACCERR and PVIOL ags in the FSTAT register must be clear and the CBEIF ag should be tested to determine the state of the address, data, and command buffers. If the CBEIF ag is set, indicating the buffers are empty, a new command write sequence can be started. If the CBEIF ag is clear, indicating the buffers are not available, a new command write sequence will overwrite the contents of the address, data, and command buffers. A command write sequence consists of three steps which must be strictly adhered to with writes to the Flash module not permitted between the steps. However, Flash register and array reads are allowed during a command write sequence. The basic command write sequence is as follows: 1. Write to a valid address in the Flash array memory. 2. Write a valid command to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the command. The address written in step 1 will be stored in the FADDR registers and the data will be stored in the FDATA registers. When the CBEIF ag is cleared in step 3, the CCIF ag is cleared by the Flash command controller indicating that the command was successfully launched. For all command write sequences, the CBEIF ag will set after the CCIF ag is cleared indicating that the address, data, and command buffers are ready for a new command write sequence to begin. A buffered command will wait for the active operation to be completed before being launched. Once a command is launched, the completion of the command operation is indicated by the setting of the CCIF ag in the FSTAT register. The CCIF ag will set upon completion of all active and buffered commands.
Freescale Semiconductor
589
20.4.1.3
Table 20-16 summarizes the valid Flash commands along with the effects of the commands on the Flash array.
Table 20-16. Valid Flash Commands
FCMD 0x05 0x20 0x40 0x41 Meaning Erase Verify Program Sector Erase Mass Erase Function on Flash Array Verify all bytes in the Flash array are erased. If the Flash array is erased, the BLANK bit will set in the FSTAT register upon command completion. Program a word (2 bytes) in the Flash array. Erase all 1024 bytes in a sector of the Flash array. Erase all bytes in the Flash array. A mass erase of the full Flash array is only possible when FPLDIS, FPHDIS, and FPOPEN bits in the FPROT register are set prior to launching the command.
CAUTION A Flash word must be in the erased state before being programmed. Cumulative programming of bits within a Flash word is not allowed.
590
Freescale Semiconductor
20.4.1.3.1
The erase verify operation will verify that a Flash array is erased. An example ow to execute the erase verify operation is shown in Figure 20-22. The erase verify command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the erase verify command. The address and data written will be ignored. 2. Write the erase verify command, 0x05, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the erase verify command. After launching the erase verify command, the CCIF ag in the FSTAT register will set after the operation has completed unless a new command write sequence has been buffered. Upon completion of the erase verify operation, the BLANK ag in the FSTAT register will be set if all addresses in the Flash array are veried to be erased. If any address in the Flash array is not erased, the erase verify operation will terminate and the BLANK ag in the FSTAT register will remain clear.
Freescale Semiconductor
591
START
no
no
yes
1.
Write: Flash Array Address and Dummy Data Write: FCMD register Erase Verify Command 0x05 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
2.
3.
CCIF Set?
no
yes
Erase Verify Status BLANK Set? no
yes
EXIT Flash Array Erased EXIT Flash Array Not Erased
592
Freescale Semiconductor
20.4.1.3.2
Program Command
The program operation will program a previously erased word in the Flash array using an embedded algorithm. An example ow to execute the program operation is shown in Figure 20-23. The program command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the program command. The data written will be programmed to the Flash array address written. 2. Write the program command, 0x20, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the program command. If a word to be programmed is in a protected area of the Flash array, the PVIOL ag in the FSTAT register will set and the program command will not launch. Once the program command has successfully launched, the CCIF ag in the FSTAT register will set after the program operation has completed unless a new command write sequence has been buffered. By executing a new program command write sequence on sequential words after the CBEIF ag in the FSTAT register has been set, up to 55% faster programming time per word can be effectively achieved than by waiting for the CCIF ag to set after each program operation.
Freescale Semiconductor
593
START
no
no
yes
1.
2.
Write: FCMD register Program Command 0x20 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
3.
CBEIF Set?
no
yes
Sequential Programming Decision Next Word? no Read: FSTAT register yes
CCIF Set?
no
yes
EXIT
594
Freescale Semiconductor
20.4.1.3.3
The sector erase operation will erase all addresses in a 1024 byte sector of the Flash array using an embedded algorithm. An example ow to execute the sector erase operation is shown in Figure 20-24. The sector erase command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the sector erase command. The Flash address written determines the sector to be erased while MCU address bits [9:0] and the data written are ignored. 2. Write the sector erase command, 0x40, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the sector erase command. If a Flash sector to be erased is in a protected area of the Flash array, the PVIOL ag in the FSTAT register will set and the sector erase command will not launch. Once the sector erase command has successfully launched, the CCIF ag in the FSTAT register will set after the sector erase operation has completed unless a new command write sequence has been buffered.
Freescale Semiconductor
595
START
no
no
yes
1.
Write: Flash Sector Address and Dummy Data Write: FCMD register Sector Erase Command 0x40 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
2.
3.
CCIF Set?
no
yes
EXIT
596
Freescale Semiconductor
20.4.1.3.4
The mass erase operation will erase all addresses in a Flash array using an embedded algorithm. An example ow to execute the mass erase operation is shown in Figure 20-25. The mass erase command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the mass erase command. The address and data written will be ignored. 2. Write the mass erase command, 0x41, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the mass erase command. If a Flash array to be erased contains any protected area, the PVIOL ag in the FSTAT register will set and the mass erase command will not launch. Once the mass erase command has successfully launched, the CCIF ag in the FSTAT register will set after the mass erase operation has completed unless a new command write sequence has been buffered.
Freescale Semiconductor
597
START
no
no
yes
1.
Write: Flash Block Address and Dummy Data Write: FCMD register Mass Erase Command 0x41 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
2.
3.
CCIF Set?
no
yes
EXIT
598
Freescale Semiconductor
20.4.1.4
20.4.1.4.1
The ACCERR ag in the FSTAT register will be set during the command write sequence if any of the following illegal Flash operations are performed causing the command write sequence to immediately abort: 1. Writing to the Flash address space before initializing the FCLKDIV register 2. Writing a misaligned word or a byte to the valid Flash address space 3. Writing to the Flash address space while CBEIF is not set 4. Writing a second word to the Flash address space before executing a program or erase command on the previously written word 5. Writing to any Flash register other than FCMD after writing a word to the Flash address space 6. Writing a second command to the FCMD register before executing the previously written command 7. Writing an invalid command to the FCMD register 8. Writing to any Flash register other than FSTAT (to clear CBEIF) after writing to the FCMD register 9. The part enters stop mode and a program or erase command is in progress. The command is aborted and any pending command is killed 10. When security is enabled, a command other than mass erase originating from a non-secure memory or from the background debug mode is written to the FCMD register 11. A 0 is written to the CBEIF bit in the FSTAT register to abort a command write sequence. The ACCERR ag will not be set if any Flash register is read during the command write sequence. If the Flash array is read during execution of an algorithm (CCIF=0), the Flash module will return invalid data and the ACCERR ag will not be set. If an ACCERR ag is set in the FSTAT register, the Flash command controller is locked. It is not possible to launch another command until the ACCERR ag is cleared. 20.4.1.4.2 Protection Violation
The PVIOL ag in the FSTAT register will be set during the command write sequence after the word write to the Flash address space if any of the following illegal Flash operations are performed, causing the command write sequence to immediately abort: 1. Writing a Flash address to program in a protected area of the Flash array (see Section 20.3.2.5). 2. Writing a Flash address to erase in a protected area of the Flash array. 3. Writing the mass erase command to the FCMD register while any protection is enabled. If the PVIOL ag is set, the Flash command controller is locked. It is not possible to launch another command until the PVIOL ag is cleared.
Freescale Semiconductor
599
20.4.2
20.4.2.1
Operating Modes
Wait Mode
If the MCU enters wait mode while a Flash command is active (CCIF = 0), that command and any buffered command will be completed. The Flash module can recover the MCU from wait mode if the interrupts are enabled (see Section 20.4.5).
20.4.2.2
Stop Mode
If the MCU enters stop mode while a Flash command is active (CCIF = 0), that command will be aborted and the data being programmed or erased is lost. The high voltage circuitry to the Flash array will be switched off when entering stop mode. CCIF and ACCERR ags will be set. Upon exit from stop mode, the CBEIF ag will be set and any buffered command will not be executed. The ACCERR ag must be cleared before returning to normal operation. NOTE As active Flash commands are immediately aborted when the MCU enters stop mode, it is strongly recommended that the user does not use the STOP instruction during program and erase execution.
20.4.2.3
In background debug mode (BDM), the FPROT register is writable. If the MCU is unsecured, then all Flash commands listed in Table 20-16 can be executed. If the MCU is secured and is in special single chip mode, the only possible command to execute is mass erase.
20.4.3
The Flash module provides the necessary security information to the MCU. After each reset, the Flash module determines the security state of the MCU as dened in Section 20.3.2.2, Flash Security Register (FSEC). The contents of the Flash security/options byte at address 0xFF0F in the Flash conguration eld must be changed directly by programming address 0xFF0F when the device is unsecured and the higher address sector is unprotected. If the Flash security/options byte is left in the secure state, any reset will cause the MCU to return to the secure operating mode.
20.4.3.1
The MCU may only be unsecured by using the backdoor key access feature which requires knowledge of the contents of the backdoor key (four 16-bit words programmed at addresses 0xFF000xFF07). If KEYEN[1:0] = 1:0 and the KEYACC bit is set, a write to a backdoor key address in the Flash array triggers a comparison between the written data and the backdoor key data stored in the Flash array. If all four words of data are written to the correct addresses in the correct order and the data matches the backdoor key stored in the Flash array, the MCU will be unsecured. The data must be written to the backdoor key
600
Freescale Semiconductor
addresses sequentially staring with 0xFF00-0xFF01 and ending with 0xFF060xFF07. The values 0x0000 and 0xFFFF are not permitted as keys. When the KEYACC bit is set, reads of the Flash array will return invalid data. The user code stored in the Flash array must have a method of receiving the backdoor key from an external stimulus. This external stimulus would typically be through one of the on-chip serial ports. If KEYEN[1:0] = 1:0 in the FSEC register, the MCU can be unsecured by the backdoor key access sequence described below: 1. Set the KEYACC bit in the FCNFG register 2. Write the correct four 16-bit words to Flash addresses 0xFF000xFF07 sequentially starting with 0xFF00 3. Clear the KEYACC bit in the FCNFG register 4. If all four 16-bit words match the backdoor key stored in Flash addresses 0xFF000xFF07, the MCU is unsecured and bits SEC[1:0] in the FSEC register are forced to the unsecure state of 1:0 The backdoor key access sequence is monitored by the internal security state machine. An illegal operation during the backdoor key access sequence will cause the security state machine to lock, leaving the MCU in the secured state. A reset of the MCU will cause the security state machine to exit the lock state and allow a new backdoor key access sequence to be attempted. The following illegal operations will lock the security state machine: 1. If any of the four 16-bit words does not match the backdoor key programmed in the Flash array 2. If the four 16-bit words are written in the wrong sequence 3. If more than four 16-bit words are written 4. If any of the four 16-bit words written are 0x0000 or 0xFFFF 5. If the KEYACC bit does not remain set while the four 16-bit words are written After the backdoor key access sequence has been correctly matched, the MCU will be unsecured. The Flash security byte can be programmed to the unsecure state, if desired. In the unsecure state, the user has full control of the contents of the four word backdoor key by programming bytes 0xFF000xFF07 of the Flash conguration eld. The security as dened in the Flash security/options byte at address 0xFF0F is not changed by using the backdoor key access sequence to unsecure. The backdoor key stored in addresses 0xFF000xFF07 is unaffected by the backdoor key access sequence. After the next reset sequence, the security state of the Flash module is determined by the Flash security/options byte at address 0xFF0F. The backdoor key access sequence has no effect on the program and erase protection dened in the FPROT register. It is not possible to unsecure the MCU in special single chip mode by executing the backdoor key access sequence in background debug mode.
Freescale Semiconductor
601
20.4.4
On each reset, the Flash module executes a reset sequence to hold CPU activity while loading the following registers from the Flash array memory according to Table 20-1: FPROT Flash Protection Register (see Section 20.3.2.5) FSEC Flash Security Register (see Section 20.3.2.2)
20.4.4.1
If a reset occurs while any Flash command is in progress, that command will be immediately aborted. The state of the word being programmed or the sector/array being erased is not guaranteed.
20.4.5
Interrupts
The Flash module can generate an interrupt when all Flash commands have completed execution or the Flash address, data, and command buffers are empty.
Table 20-17. Flash Interrupt Sources
Interrupt Source Flash Address, Data, and Command Buffers are empty All Flash commands have completed execution Interrupt Flag CBEIF (FSTAT register) CCIF (FSTAT register) Local Enable CBEIE CCIE Global (CCR) Mask I Bit I Bit
NOTE Vector addresses and their relative interrupt priority are determined at the MCU level.
20.4.5.1
Figure 20-26 shows the logic used for generating interrupts. The Flash module uses the CBEIF and CCIF ags in combination with the enable bits CBIE and CCIE to discriminate for the generation of interrupts.
CBEIF CBEIE
CCIF CCIE
For a detailed description of these register bits, refer to Section 20.3.2.4, Flash Conguration Register (FCNFG) and Section 20.3.2.6, Flash Status Register (FSTAT).
602
Freescale Semiconductor
The FTS128K1 module implements a 128 Kbyte Flash (nonvolatile) memory. The Flash memory contains one array of 128 Kbytes organized as 1024 rows of 128 bytes with an erase sector size of eight rows (1024 bytes). The Flash array may be read as either bytes, aligned words, or misaligned words. Read access time is one bus cycle for byte and aligned word, and two bus cycles for misaligned words. The Flash array is ideal for program and data storage for single-supply applications allowing for eld reprogramming without requiring external voltage sources for program or erase. Program and erase functions are controlled by a command driven interface. The Flash module supports both mass erase and sector erase. An erased bit reads 1 and a programmed bit reads 0. The high voltage required to program and erase is generated internally. It is not possible to read from a Flash array while it is being erased or programmed. CAUTION A Flash word must be in the erased state before being programmed. Cumulative programming of bits within a Flash word is not allowed.
21.1.1
Glossary
Command Write Sequence A three-step MCU instruction sequence to program, erase, or erase verify the Flash array memory.
21.1.2
Features
128 Kbytes of Flash memory comprised of one 128 Kbyte array divided into 128 sectors of 1024 bytes Automated program and erase algorithm Interrupts on Flash command completion and command buffer empty Fast sector erase and word program operation 2-stage command pipeline for faster multi-word program times Flexible protection scheme to prevent accidental program or erase Single power supply for Flash program and erase operations Security feature to prevent unauthorized access to the Flash array memory
Freescale Semiconductor
603
21.1.3
Modes of Operation
See Section 21.4.2, Operating Modes for a description of the Flash module operating modes. For program and erase operations, refer to Section 21.4.1, Flash Command Operations.
21.1.4
Block Diagram
FTS128K1
Flash Interface
Command Pipeline
Flash Array
cmd2 addr2 data2 cmd1 addr1 data1
64K * 16 Bits
sector 0 sector 1
Registers
Oscillator Clock
21.2
604
Freescale Semiconductor
21.3
21.3.1
The FTS128K1 memory map is shown in Figure 21-2. The HCS12 architecture places the Flash array addresses between 0x4000 and 0xFFFF, which corresponds to three 16 Kbyte pages. The content of the HCS12 Core PPAGE register is used to map the logical middle page ranging from address 0x8000 to 0xBFFF to any physical 16K byte page in the Flash array memory.1 The FPROT register (see Section 21.3.2.5) can be set to globally protect the entire Flash array. Three separate areas, one starting from the Flash array starting address (called lower) towards higher addresses, one growing downward from the Flash array end address (called higher), and the remaining addresses, can be activated for protection. The Flash array addresses covered by these protectable regions are shown in Figure 21-2. The higher address area is mainly targeted to hold the boot loader code since it covers the vector space. The lower address area can be used for EEPROM emulation in an MCU without an EEPROM module since it can be left unprotected while the remaining addresses are protected from program or erase. Default protection settings as well as security information that allows the MCU to restrict access to the Flash module are stored in the Flash conguration eld described in Table 21-1.
Table 21-1. Flash Conguration Field
Flash Address 0xFF000xFF07 0xFF080xFF0C 0xFF0D 0xFF0E 0xFF0F Size (bytes) 8 5 1 1 1 Description Backdoor Key to unlock security Reserved Flash Protection byte Refer to Section 21.3.2.5, Flash Protection Register (FPROT) Reserved Flash Security/Options byte Refer to Section 21.3.2.2, Flash Security Register (FSEC)
1. By placing 0x3E/0x3F in the HCS12 Core PPAGE register, the bottom/top xed 16 Kbyte pages can be seen twice in the MCU memory map.
Freescale Semiconductor
605
MODULE BASE + 0x0000 MODULE BASE + 0x000F FLASH_START = 0x4000 0x4400 0x4800 0x5000 Flash Protected Low Sectors 1, 2, 4, 8 Kbytes Flash Registers 16 bytes
0x6000
0x3E
Flash Array
0x8000
0x38
0x39
0x3A
0x3B 0x3C
0x3D
003E
0x3F
0xC000
0xE000
0x3F
606
Freescale Semiconductor
Freescale Semiconductor
607
21.3.2
Register Descriptions
The Flash module contains a set of 16 control and status registers located between module base + 0x0000 and 0x000F. A summary of the Flash module registers is given in Figure 21-3. Detailed descriptions of each register bit are provided.
Register Name R W R 0x0001 FSEC W 0x0002 R RESERVED1 W 0x0000 FCLKDIV
(1)
6 PRDIV8 KEYEN0 0
5 FDIV5 NV5 0
4 FDIV4 NV4 0
3 FDIV3 NV3 0
2 FDIV2 NV2 0
1 FDIV1 SEC1 0
0x0003 FCNFG 0x0004 FPROT 0x0005 FSTAT 0x0006 FCMD 0x0007 RESERVED21 0x0008 FADDRHI1 0x0009 FADDRLO1 0x000A FDATAHI1 0x000B FDATALO1 0x000C RESERVED31 0x000D RESERVED41 0x000E RESERVED51 0x000F RESERVED61
R W R W R W R W R W R W R W R W R W R W R W R W R W
FPHS1 ACCERR 0 0
FPHS0 0 0 0
FPLDIS BLANK
FPLS1 FAIL 0 0
FPLS0 DONE
CMDB6 0
CMDB2 0
CMDB0 0
= Unimplemented or Reserved
608
Freescale Semiconductor
21.3.2.1
The FCLKDIV register is used to control timed events in program and erase algorithms.
Module Base + 0x0000
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
All bits in the FCLKDIV register are readable, bits 60 are write once and bit 7 is not writable.
Table 21-3. FCLKDIV Field Descriptions
Field 7 FDIVLD 6 PRDIV8 50 FDIV[5:0] Description Clock Divider Loaded 0 FCLKDIV register has not been written 1 FCLKDIV register has been written to since the last reset Enable Prescalar by 8 0 The oscillator clock is directly fed into the Flash clock divider 1 The oscillator clock is divided by 8 before feeding into the Flash clock divider Clock Divider Bits The combination of PRDIV8 and FDIV[5:0] must divide the oscillator clock down to a frequency of 150 kHz 200 kHz. The maximum divide ratio is 512. Refer to Section 21.4.1.1, Writing the FCLKDIV Register for more information.
21.3.2.2
The FSEC register holds all bits associated with the security of the MCU and Flash module.
Module Base + 0x0001
7 6 5 4 3 2 1 0
R W Reset
KEYEN1
KEYEN0
NV5
NV4
NV3
NV2
SEC1
SEC0
= Unimplemented or Reserved
All bits in the FSEC register are readable but not writable. The FSEC register is loaded from the Flash conguration eld at 0xFF0F during the reset sequence, indicated by F in Figure 21-5.
Freescale Semiconductor
609
76 Backdoor Key Security Enable Bits The KEYEN[1:0] bits dene the enabling of the backdoor key access KEYEN[1:0] to the Flash module as shown in Table 21-5. 52 NV[5:2] 10 SEC[1:0] Nonvolatile Flag Bits The NV[5:2] bits are available to the user as nonvolatile ags. Flash Security Bits The SEC[1:0] bits dene the security state of the MCU as shown in Table 21-6. If the Flash module is unsecured using backdoor key access, the SEC[1:0] bits are forced to 1:0.
10
The security function in the Flash module is described in Section 21.4.3, Flash Module Security.
21.3.2.3
RESERVED1
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x0002
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
610
Freescale Semiconductor
21.3.2.4
The FCNFG register enables the Flash interrupts and gates the security backdoor key writes.
Module Base + 0x0003
7 6 5 4 3 2 1 0
= Unimplemented or Reserved
CBEIE, CCIE, and KEYACC are readable and writable while remaining bits read 0 and are not writable. KEYACC is only writable if the KEYEN bit in the FSEC register is set to the enabled state (see Section 21.3.2.2).
Table 21-7. FCNFG Field Descriptions
Field 7 CBEIE Description Command Buffer Empty Interrupt Enable The CBEIE bit enables the interrupts in case of an empty command buffer in the Flash module. 0 Command Buffer Empty interrupts disabled 1 An interrupt will be requested whenever the CBEIF ag is set (see Section 21.3.2.6) Command Complete Interrupt Enable The CCIE bit enables the interrupts in case of all commands being completed in the Flash module. 0 Command Complete interrupts disabled 1 An interrupt will be requested whenever the CCIF ag is set (see Section 21.3.2.6) Enable Security Key Writing. 0 Flash writes are interpreted as the start of a command write sequence 1 Writes to the Flash array are interpreted as a backdoor key while reads of the Flash array return invalid data
6 CCIE
5 KEYACC
21.3.2.5
The FPROT register denes which Flash sectors are protected against program or erase.
Module Base + 0x0004
7 6 5 4 3 2 1 0
The FPROT register is readable in normal and special modes. FPOPEN can only be written from a 1 to a 0. FPLS[1:0] can be written anytime until FPLDIS is cleared. FPHS[1:0] can be written anytime until
Freescale Semiconductor
611
FPHDIS is cleared. The FPROT register is loaded from Flash address 0xFF0D during the reset sequence, indicated by F in Figure 21-8. To change the Flash protection that will be loaded on reset, the upper sector of the Flash array must be unprotected, then the Flash protection byte located at Flash address 0xFF0D must be written to. A protected Flash sector is disabled by FPHDIS and FPLDIS while the size of the protected sector is dened by FPHS[1:0] and FPLS[1:0] in the FPROT register. Trying to alter any of the protected areas will result in a protect violation error and the PVIOL ag will be set in the FSTAT register (see Section 21.3.2.6). A mass erase of the whole Flash array is only possible when protection is fully disabled by setting the FPOPEN, FPLDIS, and FPHDIS bits. An attempt to mass erase a Flash array while protection is enabled will set the PVIOL ag in the FSTAT register.
Table 21-8. FPROT Field Descriptions
Field 7 FPOPEN Description Protection Function for Program or Erase It is possible using the FPOPEN bit to either select address ranges to be protected using FPHDIS, FPLDIS, FPHS[1:0] and FPLS[1:0] or to select the same ranges to be unprotected. When FPOPEN is set, FPxDIS enables the ranges to be protected, whereby clearing FPxDIS enables protection for the range specied by the corresponding FPxS[1:0] bits. When FPOPEN is cleared, FPxDIS denes unprotected ranges as specied by the corresponding FPxS[1:0] bits. In this case, setting FPxDIS enables protection. Thus the effective polarity of the FPxDIS bits is swapped by the FPOPEN bit as shown in Table 21-9. This function allows the main part of the Flash array to be protected while a small range can remain unprotected for EEPROM emulation. 0 The FPHDIS and FPLDIS bits dene Flash address ranges to be unprotected 1 The FPHDIS and FPLDIS bits dene Flash address ranges to be protected Nonvolatile Flag Bit The NV6 bit should remain in the erased state for future enhancements. Flash Protection Higher Address Range Disable The FPHDIS bit determines whether there is a protected/unprotected area in the higher space of the Flash address map. 0 Protection/unprotection enabled 1 Protection/unprotection disabled Flash Protection Higher Address Size The FPHS[1:0] bits determine the size of the protected/unprotected sector as shown in Table 21-10. The FPHS[1:0] bits can only be written to while the FPHDIS bit is set. Flash Protection Lower Address Range Disable The FPLDIS bit determines whether there is a protected/unprotected sector in the lower space of the Flash address map. 0 Protection/unprotection enabled 1 Protection/unprotection disabled Flash Protection Lower Address Size The FPLS[1:0] bits determine the size of the protected/unprotected sector as shown in Table 21-11. The FPLS[1:0] bits can only be written to while the FPLDIS bit is set.
6 NV6 5 FPHDIS
43 FPHS[1:0] 2 FPLDIS
10 FPLS[1:0]
612
Freescale Semiconductor
Figure 21-9 illustrates all possible protection scenarios. Although the protection scheme is loaded from the Flash array after reset, it is allowed to change in normal modes. This protection scheme can be used by applications requiring re-programming in single chip mode while providing as much protection as possible if no re-programming is required.
Freescale Semiconductor
613
FPHDIS = 1 FPLDIS = 0 6
FPHDIS = 0 FPLDIS = 1 5
0xFFFF
Scenario
FPOPEN = 1
FPOPEN = 0
21.3.2.5.1
The general guideline is that protection can only be added, not removed. All valid transitions between Flash protection scenarios are specied in Table 21-12. Any attempt to write an invalid scenario to the FPROT register will be ignored and the FPROT register will remain unchanged. The contents of the FPROT register reect the active protection scenario.
Table 21-12. Flash Protection Scenario Transitions
From Protection Scenario 0 1 2 3 4 5 X To Protection Scenario(1) 0 X 1 X X X 2 X 3 X X X X X X X X X 4 5 6
614
21.3.2.6
The FSTAT register denes the status of the Flash command controller and the results of command execution.
Module Base + 0x0005
7 6 5 4 3 2 1 0
R CBEIF W Reset 1
BLANK FAIL
DONE
= Unimplemented or Reserved
In normal modes, bits CBEIF, PVIOL, and ACCERR are readable and writable, bits CCIF and BLANK are readable and not writable, remaining bits, including FAIL and DONE, read 0 and are not writable. In special modes, FAIL is readable and writable while DONE is readable but not writable. FAIL must be clear in special modes when starting a command write sequence.
Table 21-13. FSTAT Field Descriptions
Field 7 CBEIF Description Command Buffer Empty Interrupt Flag The CBEIF ag indicates that the address, data and command buffers are empty so that a new command write sequence can be started. The CBEIF ag is cleared by writing a 1 to CBEIF. Writing a 0 to the CBEIF ag has no effect on CBEIF. Writing a 0 to CBEIF after writing an aligned word to the Flash address space but before CBEIF is cleared will abort a command write sequence and cause the ACCERR ag in the FSTAT register to be set. Writing a 0 to CBEIF outside of a command write sequence will not set the ACCERR ag. The CBEIF ag is used together with the CBEIE bit in the FCNFG register to generate an interrupt request (see Figure 21-26). 0 Buffers are full 1 Buffers are ready to accept a new command Command Complete Interrupt Flag The CCIF ag indicates that there are no more commands pending. The CCIF ag is cleared when CBEIF is clear and sets automatically upon completion of all active and pending commands. The CCIF ag does not set when an active commands completes and a pending command is fetched from the command buffer. Writing to the CCIF ag has no effect. The CCIF ag is used together with the CCIE bit in the FCNFG register to generate an interrupt request (see Figure 21-26). 0 Command in progress 1 All commands are completed
6 CCIF
Freescale Semiconductor
615
4 ACCERR
2 BLANK
1 FAIL
0 DONE
21.3.2.7
R W Reset
0 CMDB6 0 0 CMDB5 0
0 CMDB2
0 CMDB0 0 0
= Unimplemented or Reserved
Bits CMDB6, CMDB5, CMDB2, and CMDB0 are readable and writable during a command write sequence while bits 7, 4, 3, and 1 read 0 and are not writable.
616
Freescale Semiconductor
21.3.2.8
RESERVED2
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x0007
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
21.3.2.9
\
R FABHI W Reset 0 0 0 0 0 0 0 0
Freescale Semiconductor
617
R FABLO W Reset 0 0 0 0 0 0 0 0
In normal modes, all FABHI and FABLO bits read 0 and are not writable. In special modes, the FABHI and FABLO bits are readable and writable. For sector erase, the MCU address bits [9:0] are ignored. For mass erase, any address within the Flash array is valid to start the command.
R FDHI W Reset 0 0 0 0 0 0 0 0
R FDLO W Reset 0 0 0 0 0 0 0 0
In normal modes, all FDATAHI and FDATALO bits read 0 and are not writable. In special modes, all FDATAHI and FDATALO bits are readable and writable when writing to an address within the Flash address range.
21.3.2.11 RESERVED3
This register is reserved for factory testing and is not accessible to the user.
618
Freescale Semiconductor
R W Reset
= Unimplemented or Reserved
21.3.2.12 RESERVED4
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x000D
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
21.3.2.13 RESERVED5
This register is reserved for factory testing and is not accessible to the user.
Module Base + 0x000E
7 6 5 4 3 2 1 0
R W Reset
= Unimplemented or Reserved
21.3.2.14 RESERVED6
This register is reserved for factory testing and is not accessible to the user.
Freescale Semiconductor
619
R W Reset
= Unimplemented or Reserved
21.4
21.4.1
Functional Description
Flash Command Operations
Write operations are used for the program, erase, and erase verify algorithms described in this section. The program and erase algorithms are controlled by a state machine whose timebase FCLK is derived from the oscillator clock via a programmable divider. The FCMD register as well as the associated FADDR and FDATA registers operate as a buffer and a register (2-stage FIFO) so that a new command along with the necessary data and address can be stored to the buffer while the previous command is still in progress. This pipelined operation allows a time optimization when programming more than one word on a specic row, as the high voltage generation can be kept active in between two programming commands. The pipelined operation also allows a simplication of command launching. Buffer empty as well as command completion are signalled by ags in the FSTAT register with corresponding interrupts generated, if enabled. The next sections describe: How to write the FCLKDIV register Command write sequence used to program, erase or erase verify the Flash array Valid Flash commands Errors resulting from illegal Flash operations
21.4.1.1
Prior to issuing any Flash command after a reset, it is rst necessary to write the FCLKDIV register to divide the oscillator clock down to within the 150-kHz to 200-kHz range. Since the program and erase timings are also a function of the bus clock, the FCLKDIV determination must take this information into account. If we dene: FCLK as the clock of the Flash timing control block Tbus as the period of the bus clock INT(x) as taking the integer part of x (e.g., INT(4.323) = 4),
620
Freescale Semiconductor
then FCLKDIV register bits PRDIV8 and FDIV[5:0] are to be set as described in Figure 21-21. For example, if the oscillator clock frequency is 950 kHz and the bus clock is 10 MHz, FCLKDIV bits FDIV[5:0] should be set to 4 (000100) and bit PRDIV8 set to 0. The resulting FCLK is then 190 kHz. As a result, the Flash algorithm timings are increased over optimum target by:
( 200 190 ) 200 100 = 5%
Command execution time will increase proportionally with the period of FCLK. CAUTION Because of the impact of clock synchronization on the accuracy of the functional timings, programming or erasing the Flash array cannot be performed if the bus clock runs at less than 1 MHz. Programming or erasing the Flash array with an input clock < 150 kHz should be avoided. Setting FCLKDIV to a value such that FCLK < 150 kHz can destroy the Flash array due to overstress. Setting FCLKDIV to a value such that (1/FCLK + Tbus) < 5s can result in incomplete programming or erasure of the Flash array cells. If the FCLKDIV register is written, the bit FDIVLD is set automatically. If the FDIVLD bit is 0, the FCLKDIV register has not been written since the last reset. If the FCLKDIV register has not been written to, the Flash command loaded during a command write sequence will not execute and the ACCERR ag in the FSTAT register will set.
Freescale Semiconductor
621
START
no
PRDIV8=1 PRDCLK=oscillator_clock/8
PRDCLK=oscillator_clock
no
FDIV[5:0]=INT(PRDCLK[MHz]*(5+Tbus[s]))
FDIV[5:0]=PRDCLK[MHz]*(5+Tbus[s])-1
FCLK=(PRDCLK)/(1+FDIV[5:0])
yes END
yes
FDIV[5:0] > 4?
622
Freescale Semiconductor
21.4.1.2
The Flash command controller is used to supervise the command write sequence to execute program, erase, and erase verify algorithms. Before starting a command write sequence, the ACCERR and PVIOL ags in the FSTAT register must be clear and the CBEIF ag should be tested to determine the state of the address, data, and command buffers. If the CBEIF ag is set, indicating the buffers are empty, a new command write sequence can be started. If the CBEIF ag is clear, indicating the buffers are not available, a new command write sequence will overwrite the contents of the address, data, and command buffers. A command write sequence consists of three steps which must be strictly adhered to with writes to the Flash module not permitted between the steps. However, Flash register and array reads are allowed during a command write sequence. The basic command write sequence is as follows: 1. Write to a valid address in the Flash array memory. 2. Write a valid command to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the command. The address written in step 1 will be stored in the FADDR registers and the data will be stored in the FDATA registers. When the CBEIF ag is cleared in step 3, the CCIF ag is cleared by the Flash command controller indicating that the command was successfully launched. For all command write sequences, the CBEIF ag will set after the CCIF ag is cleared indicating that the address, data, and command buffers are ready for a new command write sequence to begin. A buffered command will wait for the active operation to be completed before being launched. Once a command is launched, the completion of the command operation is indicated by the setting of the CCIF ag in the FSTAT register. The CCIF ag will set upon completion of all active and buffered commands.
Freescale Semiconductor
623
21.4.1.3
Table 21-16 summarizes the valid Flash commands along with the effects of the commands on the Flash array.
Table 21-16. Valid Flash Commands
FCMD 0x05 0x20 0x40 0x41 Meaning Erase Verify Program Sector Erase Mass Erase Function on Flash Array Verify all bytes in the Flash array are erased. If the Flash array is erased, the BLANK bit will set in the FSTAT register upon command completion. Program a word (2 bytes) in the Flash array. Erase all 1024 bytes in a sector of the Flash array. Erase all bytes in the Flash array. A mass erase of the full Flash array is only possible when FPLDIS, FPHDIS, and FPOPEN bits in the FPROT register are set prior to launching the command.
CAUTION A Flash word must be in the erased state before being programmed. Cumulative programming of bits within a Flash word is not allowed.
624
Freescale Semiconductor
21.4.1.3.1
The erase verify operation will verify that a Flash array is erased. An example ow to execute the erase verify operation is shown in Figure 21-22. The erase verify command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the erase verify command. The address and data written will be ignored. 2. Write the erase verify command, 0x05, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the erase verify command. After launching the erase verify command, the CCIF ag in the FSTAT register will set after the operation has completed unless a new command write sequence has been buffered. Upon completion of the erase verify operation, the BLANK ag in the FSTAT register will be set if all addresses in the Flash array are veried to be erased. If any address in the Flash array is not erased, the erase verify operation will terminate and the BLANK ag in the FSTAT register will remain clear.
Freescale Semiconductor
625
START
no
no
yes
1.
Write: Flash Array Address and Dummy Data Write: FCMD register Erase Verify Command 0x05 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
2.
3.
CCIF Set?
no
yes
Erase Verify Status BLANK Set? no
yes
EXIT Flash Array Erased EXIT Flash Array Not Erased
626
Freescale Semiconductor
21.4.1.3.2
Program Command
The program operation will program a previously erased word in the Flash array using an embedded algorithm. An example ow to execute the program operation is shown in Figure 21-23. The program command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the program command. The data written will be programmed to the Flash array address written. 2. Write the program command, 0x20, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the program command. If a word to be programmed is in a protected area of the Flash array, the PVIOL ag in the FSTAT register will set and the program command will not launch. Once the program command has successfully launched, the CCIF ag in the FSTAT register will set after the program operation has completed unless a new command write sequence has been buffered. By executing a new program command write sequence on sequential words after the CBEIF ag in the FSTAT register has been set, up to 55% faster programming time per word can be effectively achieved than by waiting for the CCIF ag to set after each program operation.
Freescale Semiconductor
627
START
no
no
yes
1.
2.
Write: FCMD register Program Command 0x20 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
3.
CBEIF Set?
no
yes
Sequential Programming Decision Next Word? no Read: FSTAT register yes
CCIF Set?
no
yes
EXIT
628
Freescale Semiconductor
21.4.1.3.3
The sector erase operation will erase all addresses in a 1024 byte sector of the Flash array using an embedded algorithm. An example ow to execute the sector erase operation is shown in Figure 21-24. The sector erase command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the sector erase command. The Flash address written determines the sector to be erased while MCU address bits [9:0] and the data written are ignored. 2. Write the sector erase command, 0x40, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the sector erase command. If a Flash sector to be erased is in a protected area of the Flash array, the PVIOL ag in the FSTAT register will set and the sector erase command will not launch. Once the sector erase command has successfully launched, the CCIF ag in the FSTAT register will set after the sector erase operation has completed unless a new command write sequence has been buffered.
Freescale Semiconductor
629
START
no
no
yes
1.
Write: Flash Sector Address and Dummy Data Write: FCMD register Sector Erase Command 0x40 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
2.
3.
CCIF Set?
no
yes
EXIT
630
Freescale Semiconductor
21.4.1.3.4
The mass erase operation will erase all addresses in a Flash array using an embedded algorithm. An example ow to execute the mass erase operation is shown in Figure 21-25. The mass erase command write sequence is as follows: 1. Write to a Flash array address to start the command write sequence for the mass erase command. The address and data written will be ignored. 2. Write the mass erase command, 0x41, to the FCMD register. 3. Clear the CBEIF ag in the FSTAT register by writing a 1 to CBEIF to launch the mass erase command. If a Flash array to be erased contains any protected area, the PVIOL ag in the FSTAT register will set and the mass erase command will not launch. Once the mass erase command has successfully launched, the CCIF ag in the FSTAT register will set after the mass erase operation has completed unless a new command write sequence has been buffered.
Freescale Semiconductor
631
START
no
no
yes
1.
Write: Flash Block Address and Dummy Data Write: FCMD register Mass Erase Command 0x41 Write: FSTAT register Clear CBEIF 0x80 Read: FSTAT register
2.
3.
CCIF Set?
no
yes
EXIT
632
Freescale Semiconductor
21.4.1.4
21.4.1.4.1
The ACCERR ag in the FSTAT register will be set during the command write sequence if any of the following illegal Flash operations are performed causing the command write sequence to immediately abort: 1. Writing to the Flash address space before initializing the FCLKDIV register 2. Writing a misaligned word or a byte to the valid Flash address space 3. Writing to the Flash address space while CBEIF is not set 4. Writing a second word to the Flash address space before executing a program or erase command on the previously written word 5. Writing to any Flash register other than FCMD after writing a word to the Flash address space 6. Writing a second command to the FCMD register before executing the previously written command 7. Writing an invalid command to the FCMD register 8. Writing to any Flash register other than FSTAT (to clear CBEIF) after writing to the FCMD register 9. The part enters stop mode and a program or erase command is in progress. The command is aborted and any pending command is killed 10. When security is enabled, a command other than mass erase originating from a non-secure memory or from the background debug mode is written to the FCMD register 11. A 0 is written to the CBEIF bit in the FSTAT register to abort a command write sequence. The ACCERR ag will not be set if any Flash register is read during the command write sequence. If the Flash array is read during execution of an algorithm (CCIF=0), the Flash module will return invalid data and the ACCERR ag will not be set. If an ACCERR ag is set in the FSTAT register, the Flash command controller is locked. It is not possible to launch another command until the ACCERR ag is cleared. 21.4.1.4.2 Protection Violation
The PVIOL ag in the FSTAT register will be set during the command write sequence after the word write to the Flash address space if any of the following illegal Flash operations are performed, causing the command write sequence to immediately abort: 1. Writing a Flash address to program in a protected area of the Flash array (see Section 21.3.2.5). 2. Writing a Flash address to erase in a protected area of the Flash array. 3. Writing the mass erase command to the FCMD register while any protection is enabled. If the PVIOL ag is set, the Flash command controller is locked. It is not possible to launch another command until the PVIOL ag is cleared.
Freescale Semiconductor
633
21.4.2
21.4.2.1
Operating Modes
Wait Mode
If the MCU enters wait mode while a Flash command is active (CCIF = 0), that command and any buffered command will be completed. The Flash module can recover the MCU from wait mode if the interrupts are enabled (see Section 21.4.5).
21.4.2.2
Stop Mode
If the MCU enters stop mode while a Flash command is active (CCIF = 0), that command will be aborted and the data being programmed or erased is lost. The high voltage circuitry to the Flash array will be switched off when entering stop mode. CCIF and ACCERR ags will be set. Upon exit from stop mode, the CBEIF ag will be set and any buffered command will not be executed. The ACCERR ag must be cleared before returning to normal operation. NOTE As active Flash commands are immediately aborted when the MCU enters stop mode, it is strongly recommended that the user does not use the STOP instruction during program and erase execution.
21.4.2.3
In background debug mode (BDM), the FPROT register is writable. If the MCU is unsecured, then all Flash commands listed in Table 21-16 can be executed. If the MCU is secured and is in special single chip mode, the only possible command to execute is mass erase.
21.4.3
The Flash module provides the necessary security information to the MCU. After each reset, the Flash module determines the security state of the MCU as dened in Section 21.3.2.2, Flash Security Register (FSEC). The contents of the Flash security/options byte at address 0xFF0F in the Flash conguration eld must be changed directly by programming address 0xFF0F when the device is unsecured and the higher address sector is unprotected. If the Flash security/options byte is left in the secure state, any reset will cause the MCU to return to the secure operating mode.
21.4.3.1
The MCU may only be unsecured by using the backdoor key access feature which requires knowledge of the contents of the backdoor key (four 16-bit words programmed at addresses 0xFF000xFF07). If KEYEN[1:0] = 1:0 and the KEYACC bit is set, a write to a backdoor key address in the Flash array triggers a comparison between the written data and the backdoor key data stored in the Flash array. If all four words of data are written to the correct addresses in the correct order and the data matches the backdoor key stored in the Flash array, the MCU will be unsecured. The data must be written to the backdoor key
634
Freescale Semiconductor
addresses sequentially staring with 0xFF00-0xFF01 and ending with 0xFF060xFF07. The values 0x0000 and 0xFFFF are not permitted as keys. When the KEYACC bit is set, reads of the Flash array will return invalid data. The user code stored in the Flash array must have a method of receiving the backdoor key from an external stimulus. This external stimulus would typically be through one of the on-chip serial ports. If KEYEN[1:0] = 1:0 in the FSEC register, the MCU can be unsecured by the backdoor key access sequence described below: 1. Set the KEYACC bit in the FCNFG register 2. Write the correct four 16-bit words to Flash addresses 0xFF000xFF07 sequentially starting with 0xFF00 3. Clear the KEYACC bit in the FCNFG register 4. If all four 16-bit words match the backdoor key stored in Flash addresses 0xFF000xFF07, the MCU is unsecured and bits SEC[1:0] in the FSEC register are forced to the unsecure state of 1:0 The backdoor key access sequence is monitored by the internal security state machine. An illegal operation during the backdoor key access sequence will cause the security state machine to lock, leaving the MCU in the secured state. A reset of the MCU will cause the security state machine to exit the lock state and allow a new backdoor key access sequence to be attempted. The following illegal operations will lock the security state machine: 1. If any of the four 16-bit words does not match the backdoor key programmed in the Flash array 2. If the four 16-bit words are written in the wrong sequence 3. If more than four 16-bit words are written 4. If any of the four 16-bit words written are 0x0000 or 0xFFFF 5. If the KEYACC bit does not remain set while the four 16-bit words are written After the backdoor key access sequence has been correctly matched, the MCU will be unsecured. The Flash security byte can be programmed to the unsecure state, if desired. In the unsecure state, the user has full control of the contents of the four word backdoor key by programming bytes 0xFF000xFF07 of the Flash conguration eld. The security as dened in the Flash security/options byte at address 0xFF0F is not changed by using the backdoor key access sequence to unsecure. The backdoor key stored in addresses 0xFF000xFF07 is unaffected by the backdoor key access sequence. After the next reset sequence, the security state of the Flash module is determined by the Flash security/options byte at address 0xFF0F. The backdoor key access sequence has no effect on the program and erase protection dened in the FPROT register. It is not possible to unsecure the MCU in special single chip mode by executing the backdoor key access sequence in background debug mode.
Freescale Semiconductor
635
21.4.4
On each reset, the Flash module executes a reset sequence to hold CPU activity while loading the following registers from the Flash array memory according to Table 21-1: FPROT Flash Protection Register (see Section 21.3.2.5) FSEC Flash Security Register (see Section 21.3.2.2)
21.4.4.1
If a reset occurs while any Flash command is in progress, that command will be immediately aborted. The state of the word being programmed or the sector/array being erased is not guaranteed.
21.4.5
Interrupts
The Flash module can generate an interrupt when all Flash commands have completed execution or the Flash address, data, and command buffers are empty.
Table 21-17. Flash Interrupt Sources
Interrupt Source Flash Address, Data, and Command Buffers are empty All Flash commands have completed execution Interrupt Flag CBEIF (FSTAT register) CCIF (FSTAT register) Local Enable CBEIE CCIE Global (CCR) Mask I Bit I Bit
NOTE Vector addresses and their relative interrupt priority are determined at the MCU level.
21.4.5.1
Figure 21-26 shows the logic used for generating interrupts. The Flash module uses the CBEIF and CCIF ags in combination with the enable bits CBIE and CCIE to discriminate for the generation of interrupts.
CBEIF CBEIE
CCIF CCIE
For a detailed description of these register bits, refer to Section 21.3.2.4, Flash Conguration Register (FCNFG) and Section 21.3.2.6, Flash Status Register (FSTAT).
636
Freescale Semiconductor
A.1.1
Parameter Classication
The electrical parameters shown in this supplement are guaranteed by various methods. To give the customer a better understanding the following classication is used and the parameters are tagged accordingly in the tables where appropriate. NOTE This classication will be added at a later release of the specication P: C: T: D: Those parameters are guaranteed during production testing on each individual device. Those parameters are achieved by the design characterization by measuring a statistically relevant sample size across process variations. They are regularly veried by production monitors. Those parameters are achieved by design characterization on a small sample size from typical devices. All values shown in the typical column are within this category. Those parameters are derived mainly from simulations.
A.1.2
Power Supply
The MC9S12C-Family / MC9S12GC-Family and MC9S12GC Family members utilize several pins to supply power to the I/O ports, A/D converter, oscillator and PLL as well as the internal logic. The VDDA, VSSA pair supplies the A/D converter. The VDDX, VSSX pair supplies the I/O pins The VDDR, VSSR pair supplies the internal voltage regulator.
Freescale Semiconductor
637
VDD1, VSS1, VDD2 and VSS2 are the supply pins for the digital logic. VDDPLL, VSSPLL supply the oscillator and the PLL. VSS1 and VSS2 are internally connected by metal. VDD1 and VDD2 are internally connected by metal. VDDA, VDDX, VDDR as well as VSSA, VSSX, VSSR are connected by anti-parallel diodes for ESD protection. NOTE In the following context VDD5 is used for either VDDA, VDDR, and VDDX; VSS5 is used for either VSSA, VSSR, and VSSX unless otherwise noted. IDD5 denotes the sum of the currents owing into the VDDA, VDDX, and VDDR pins. VDD is used for VDD1, VDD2, and VDDPLL, VSS is used for VSS1, VSS2, and VSSPLL. IDD is used for the sum of the currents owing into VDD1 and VDD2.
A.1.3
Pins
A.1.3.1
5V I/O Pins
Those I/O pins have a nominal level of 5V. This class of pins is comprised of all port I/O pins, the analog inputs, BKGD pin, and the RESET inputs.The internal structure of all those pins is identical; however some of the functionality may be disabled. For example, pull-up and pull-down resistors may be disabled permanently.
A.1.3.2
Analog Reference
This class is made up by the two VRH and VRL pins. In 48- and 52-pin package versions the VRL pad is bonded to the VSSA pin.
A.1.3.3
Oscillator
The pins XFC, EXTAL, XTAL dedicated to the oscillator have a nominal 2.5V level. They are supplied by VDDPLL.
A.1.3.4
TEST
A.1.4
Current Injection
Power supply must maintain regulation within operating VDD5 or VDD range during instantaneous and operating maximum current conditions. If positive injection current (Vin > VDD5) is greater than IDD5, the
638
Freescale Semiconductor
injection current may ow out of VDD5 and could result in external power supply going out of regulation. Insure external VDD5 load will shunt current greater than maximum injection current. This will be the greatest risk when the MCU is not consuming power; e.g. if no system clock is present, or if clock rate is very low which would reduce overall power consumption.
A.1.5
Absolute maximum ratings are stress ratings only. A functional operation under or outside those maxima is not guaranteed. Stress beyond those limits may affect the reliability or cause permanent damage of the device. This device contains circuitry protecting against damage due to high static voltage or electrical elds; however, it is advised that normal precautions be taken to avoid application of any voltages higher than maximum-rated voltages to this high-impedance circuit. Reliability of operation is enhanced if unused inputs are tied to an appropriate logic voltage level (e.g., either VSS5 or VDD5).
Table A-1. Absolute Maximum Ratings
Num 1 2 3 4 5 6 7 8 9 10 11 12 13 14 Rating I/O, Regulator and Analog Supply Voltage Digital Logic Supply Voltage PLL Supply Voltage
1 (1)
Symbol VDD5 VDD VDDPLL VDDX VSSX VIN VRH, VRL VILV VTEST ID IDL I
DT
Min 0.3 0.3 0.3 0.3 0.3 0.3 0.3 0.3 0.3 25 25 0.25 40 40
Max 6.5 3.0 3.0 0.3 0.3 6.5 6.5 3.0 10.0 +25 +25 0 125 140
Unit V V V V V V V V V mA mA mA C C
Voltage difference VDDX to VDDR and VDDA Voltage difference VSSX to VSSR and VSSA Digital I/O Input Voltage Analog Reference XFC, EXTAL, XTAL inputs TEST input Instantaneous Maximum Current Single pin limit for all digital I/O pins (2) Instantaneous Maximum Current Single pin limit for XFC, EXTAL, XTAL(3) Instantaneous Maximum Current Single pin limit for TEST(4) Operating Temperature Range (packaged) Operating Temperature Range (junction)
TA TJ
65 155 C 15 Storage Temperature Range Tstg 1. The device contains an internal voltage regulator to generate the logic and PLL supply out of the I/O supply. The absolute maximum ratings apply when the device is powered from an external source. 2. All digital I/O pins are internally clamped to VSSX and VDDX, VSSR and VDDR or VSSA and VDDA. 3. These pins are internally clamped to VSSPLL and VDDPLL 4. This pin is clamped low to VSSX, but not clamped high. This pin must be tied low in applications.
Freescale Semiconductor
639
A.1.6
All ESD testing is in conformity with CDF-AEC-Q100 Stress test qualication for Automotive Grade Integrated Circuits. During the device qualication ESD stresses were performed for the Human Body Model (HBM), the Machine Model (MM) and the Charge Device Model. A device will be dened as a failure if after exposure to ESD pulses the device no longer meets the device specication. Complete DC parametric and functional testing is performed per the applicable device specication at room temperature followed by hot temperature, unless specied otherwise in the device specication.
Table A-2. ESD and Latch-up Test Conditions
Model Human Body Series Resistance Storage Capacitance Number of Pulse per pin Positive Negative Machine Series Resistance Storage Capacitance Number of Pulse per pin Positive Negative Latch-up Minimum input voltage limit Maximum input voltage limit 3 3 2.5 7.5 V V R1 C 3 3 0 200 Ohm pF Description Symbol R1 C Value 1500 100 Unit Ohm pF
640
Freescale Semiconductor
A.1.7
Operating Conditions
This chapter describes the operating conditions of the devices. Unless otherwise noted those conditions apply to all the following data. NOTE Instead of specifying ambient temperature all parameters are specied for the more meaningful silicon junction temperature. For power dissipation calculations refer to Section A.1.8, Power Dissipation and Thermal Characteristics
.
I/O, Regulator and Analog Supply Voltage Digital Logic Supply Voltage (1) PLL Supply Voltage 1 Voltage Difference VDDX to VDDA Voltage Difference VSSX to VSSR and VSSA Bus Frequency Bus Frequency
Operating Junction Temperature Range T 40 140 C J 1. The device contains an internal voltage regulator to generate the logic and PLL supply out of the I/O supply. The operating conditions apply when this regulator is disabled and the device is powered from an external source. Using an external regulator, with the internal voltage regulator disabled, an external LVR must be provided. 2. Some blocks e.g. ATD (conversion) and NVMs (program/erase) require higher bus frequencies for proper operation. 3. Some blocks e.g. ATD (conversion) and NVMs (program/erase) require higher bus frequencies for proper operation.
Freescale Semiconductor
641
A.1.8
Power dissipation and thermal characteristics are closely related. The user must assure that the maximum operating junction temperature is not exceeded. The average chip-junction temperature (TJ) in C can be obtained from:
T T T J J A D = T + (P ) A D JA = Junction Temperature, [C ] = Ambient Temperature, [C ] = Total Chip Power Dissipation, [W] = Package Thermal Resistance, [C/W]
JA
INT
Two cases with internal voltage regulator enabled and disabled must be considered: 1. Internal Voltage Regulator disabled
P INT = = I DD V DD +I DDPLL V DDPLL +I DDA V DDA
IO
RDSON IIOi2 i
Which is the sum of all output currents on I/O ports associated with VDDX and VDDM. For RDSON is valid:
R V OL = ----------- ;for outputs driven low DSON I OL
respectively
R V V DD5 OH = ----------------------------------- ;for outputs driven high DSON I OH
IDDR is the current shown in Table A-8 and not the overall current owing into VDDR, which additionally contains the current owing into the external loads with output high.
P IO =
RDSON IIOi2 i
MC9S12C-Family / MC9S12GC-Family Rev 01.23 Freescale Semiconductor
Which is the sum of all output currents on I/O ports associated with VDDX and VDDR.
642
15 T Junction to Package Top QFP80 1. The values for thermal resistance are achieved by package simulations 2. PC Board according to EIA/JEDEC Standard 51-2 3. PC Board according to EIA/JEDEC Standard 51-7
Freescale Semiconductor
643
A.1.9
I/O Characteristics
This section describes the characteristics of all I/O pins. All parameters are not always applicable, e.g. not all pins feature pull up/down resistances.
Table A-6. 5V I/O Characteristics
Conditions are 4.5< VDDX <5.5V Temperature from 40C to +140C, unless otherwise noted Num C 1 P Input High Voltage T Input High Voltage 2 P Input Low Voltage T Input Low Voltage 3 4 5 6 7 8 9 10 11 12 13 14 15 C Input Hysteresis P C P C P P C P C Input Leakage Current (pins in high ohmic input mode) Vin = VDD5 or VSS5 Output High Voltage (pins in output mode) Partial Drive IOH = 2mA Output High Voltage (pins in output mode) Full Drive IOH = 10mA Output Low Voltage (pins in output mode) Partial Drive IOL = +2mA Output Low Voltage (pins in output mode) Full Drive IOL = +10mA Internal Pull Up Device Current, tested at V Max.
IL (1)
Rating
Symbol V
IH
Typ 250
Unit V V V V mV A V V V V A A A A pf m s
OH
VOH VOL V
OL
D Input Capacitance T Injection current(2) Single Pin limit Total Device Limit. Sum of all injected currents
tPVAL 10 s 16 P Port P, J Interrupt Input Pulse passed3 1. Maximum leakage current occurs at maximum operating temperature. Current decreases by approximately one-half for each 8 C to 12 C in the temper ature range from 50 C to 125 C . 2. Refer to Section A.1.4, Current Injection, for more details 3. Parameter only applies in STOP or Pseudo STOP mode.
644
Freescale Semiconductor
Rating
Symbol V
IH
Typ 250 7
Unit V V V V mV A V V V V A A A A s
OH
OH
OL
OL
P Internal Pull Up Device Current, tested at VIL Max. C Internal Pull Up Device Current, tested at VIH Min. P Internal Pull Down Device Current, tested at VIH Min. C Internal Pull Down Device Current, tested at VIL Max. D Input Capacitance T Injection current(2) Single Pin limit Total Device Limit. Sum of all injected currents
tPVAL 10 s 14 P Port P, J Interrupt Input Pulse passed3 1. Maximum leakage current occurs at maximum operating temperature. Current decreases by approximately one-half for each 8 C to 12 C in the temper ature range from 50 C to 125 C . 2. Refer to Section A.1.4, Current Injection, for more details 3. Parameter only applies in STOP or Pseudo STOP mode.
A.1.10
Supply Currents
This section describes the current consumption characteristics of the device as well as the conditions for the measurements.
A.1.10.1
Measurement Conditions
All measurements are without output loads. Unless otherwise noted the currents are measured in single chip mode, internal voltage regulator enabled and at 25MHz bus frequency using a 4MHz oscillator.
Freescale Semiconductor
645
A.1.10.2
Additional Remarks
In expanded modes the currents owing in the system are highly dependent on the load at the address, data and control signals as well as on the duty cycle of those signals. No generally applicable numbers can be given. A very good estimate is to take the single chip currents and add the currents due to the external loads.
Table A-8. Supply Current Characteristics for MC9S12CG16 MC9S12C32
Conditions are shown in Table A-4 with internal regulator enabled unless otherwise noted Num 1 C P P P C C P C P C P C P C C C C C Rating Run Supply Current Single Chip Wait Supply current 2 All modules enabled VDDR<4.9V, only RTI enabled2 VDDR>4.9V, only RTI enabled Pseudo Stop Current (RTI and COP disabled)2 3 40C 27C 85C "C" Temp Option 100C 105C "V" Temp Option 120C 125C "M" Temp Option 140C Pseudo Stop Current (RTI and COP enabled)(2) (3) 40C 27C 85C 105C 125C Stop Current 3 C 10 40C 80 P 20 27C C 100 85C A 1000 P 5 140 IDDS1 "C" Temp Option 100C C 170 105C 1400 P 300 "V" Temp Option 120C C 350 125C P 4000 520 "M" Temp Option 140C 1. STOP current measured in production test at increased junction temperature, hence for Temp Option "C" the test is carried out at 100C although the Temperature specication is 85C. Similarly for "v" and "M" options the temperature used in test lies 15C above the temperature option specication. 2. PLL off 3. At those low power dissipation levels TJ = TA can be assumed IDDW 3.5 2.5 340 360 500 550 590 720 780 1100 540 700 750 880 1300 30 8 mA Symbol IDD5 Min Typ Max 35 Unit mA
IDDPS(1)
IDDPS1
646
Freescale Semiconductor
IDDPS(1)
IDDPS1
Freescale Semiconductor
647
A.2
ATD Characteristics
This section describes the characteristics of the analog-to-digital converter. VRL is not available as a separate pin in the 48- and 52-pin versions. In this case the internal VRL pad is bonded to the VSSA pin. The ATD is specied and tested for both the 3.3V and 5V range. For ranges between 3.3V and 5V the ATD accuracy is generally the same as in the 3.3V range but is not tested in this range in production test.
A.2.1
The Table A-10 shows conditions under which the ATD operates. The following constraints exist to obtain full-scale, full range results: VSSA VRL VIN VRH VDDA. This constraint exists since the sample buffer amplier can not drive beyond the power supply levels that it ties to. If the input level goes outside of this range it will effectively be clipped.
Table A-10. ATD Operating Characteristics
Conditions are shown in Table A-4 unless otherwise noted. Supply Voltage 5V-10% <= VDDA <=5V+10% Num 1 2 3 4 C Reference Potential D C D D Differential Reference Voltage(1) ATD Clock Frequency ATD 10-Bit Conversion Period Clock Cycles(2) Conv, Time at 2.0MHz ATD Clock fATDCLK ATD 8-Bit Conversion Period 5 5 D D Clock Cycles2 Conv, Time at 2.0MHz ATD Clock fATDCLK Recovery Time (VDDA=5.0 Volts) NCONV10 TCONV10 tREC 12 6 26 13 20 Cycles s s NCONV10 TCONV10 14 7 28 14 Cycles s Low High VRL VRH VRH-VRL fATDCLK VSSA VDDA/2 4.75 0.5 5.0 VDDA/2 VDDA 5.25 2.0 V V V MHz Rating Symbol Min Typ Max Unit
0.375 mA 6 P Reference Supply current IREF 1. Full accuracy is not guaranteed when differential voltage is less than 4.75V 2. The minimum time assumes a nal sample period of 2 ATD clocks cycles while the maximum time assumes a nal sample period of 16 ATD clocks.
648
Freescale Semiconductor
A.2.2
The Table A-11 shows conditions under which the ATD operates. The following constraints exist to obtain full-scale, full range results: VSSA VRL VIN VRH VDDA. This constraint exists since the sample buffer amplier can not drive beyond the power supply levels that it ties to. If the input level goes outside of this range it will effectively be clipped
Table A-11. ATD Operating Characteristics
Conditions are shown in Table A-4 unless otherwise noted; Supply Voltage 3.3V-10% <= VDDA <= 3.3V+10% Num C Reference Potential 1 2 3 4 D C Differential Reference Voltage D ATD Clock Frequency ATD 10-Bit Conversion Period D Clock Cycles(1) Conv, Time at 2.0MHz ATD Clock fATDCLK ATD 8-Bit Conversion Period 5 6 D Clock Cycles1 Conv, Time at 2.0MHz ATD Clock fATDCLK NCONV8 TCONV8 tREC 12 6 26 13 20 Cycles s s NCONV10 TCONV10 14 7 28 14 Cycles s Low High VRL VRH VRH-VRL fATDCLK VSSA VDDA/2 3.0 0.5 3.3 VDDA/2 VDDA 3.6 2.0 V V V MHz Rating Symbol Min Typ Max Unit
0.250 mA 7 P Reference Supply current IREF 1. The minimum time assumes a nal sample period of 2 ATD clocks cycles while the maximum time assumes a nal sample period of 16 ATD clocks.
A.2.3
Three factors source resistance, source capacitance and current injection have an inuence on the accuracy of the ATD.
A.2.3.1
Source Resistance
Due to the input pin leakage current as specied in Table A-6 in conjunction with the source resistance there will be a voltage drop from the signal source to the ATD input. The maximum source resistance RS species results in an error of less than 1/2 LSB (2.5mV) at the maximum leakage current. If device or operating conditions are less than worst case or leakage-induced error is acceptable, larger values of source resistance is allowable.
A.2.3.2
Source Capacitance
When sampling an additional internal capacitor is switched to the input. This can cause a voltage drop due to charge sharing with the external and the pin capacitance. For a maximum sampling error of the input voltage 1LSB, then the external lter capacitor, Cf 1024 * (CINS CINN).
Freescale Semiconductor
649
A.2.3.3
Current Injection
There are two cases to consider. 1. A current is injected into the channel being converted. The channel being stressed has conversion values of $3FF ($FF in 8-bit mode) for analog inputs greater than VRH and $000 for values less than VRL unless the current is higher than specied as disruptive conditions. 2. Current is injected into pins in the neighborhood of the channel being converted. A portion of this current is picked up by the channel (coupling ratio K), This additional current impacts the accuracy of the conversion depending on the source resistance. The additional input voltage error on the converted channel can be calculated as VERR = K * RS * IINJ, with IINJ being the sum of the currents injected into the two pins adjacent to the converted channel.
Table 21-18. ATD Electrical Characteristics
Conditions are shown in Table A-4 unless otherwise noted Num 1 2 3 4 5 C C T C C C Disruptive Analog Input Current Coupling Ratio positive current injection Coupling Ratio negative current injection Rating Max input Source Resistance Total Input Capacitance Non Sampling Sampling CINN CINS INA Kp Kn 2.5 10 15 2.5 10-4 10-2 pF mA A/A A/A Symbol RS Min Typ Max 1 Unit K
A.2.4
Table A-12 species the ATD conversion performance excluding any errors due to current injection, input capacitance and source resistance
.
Conditions are shown in Table A-4 unless otherwise noted VREF = VRH VRL = 5.12V. Resulting to one 8 bit count = 20mV and one 10 bit count = 5mV fATDCLK = 2.0MHz Num 1 2 3 4 5 6 7 C P P P P P P P 10-Bit Resolution 10-Bit Differential Nonlinearity 10-Bit Integral Nonlinearity 10-Bit Absolute Error(1) 8-Bit Resolution 8-Bit Differential Nonlinearity 8-Bit Integral Nonlinearity Rating Symbol LSB DNL INL AE LSB DNL INL Min 1 2 -2.5 0.5 1.0 Typ 5 20 0.5 Max 1 2 2.5 0.5 1.0 1.5 Unit mV Counts Counts Counts mV Counts Counts Counts
AE -1.5 1 8 P 8-Bit Absolute Error1 1. These values include quantization error which is inherently 1/2 count for any A/D converter.
650
Freescale Semiconductor
A.2.5
Table A-13 species the ATD conversion performance excluding any errors due to current injection, input capacitance and source resistance.
Table A-13. ATD Conversion Performance
Conditions are shown in Table A-4 unless otherwise noted VREF = VRH - VRL = 3.328V. Resulting to one 8 bit count = 13mV and one 10 bit count = 3.25mV fATDCLK = 2.0MHz Num 1 2 3 4 5 6 7 C P P P P P P P 10-Bit Resolution 10-Bit Differential Nonlinearity 10-Bit Integral Nonlinearity 10-Bit Absolute Error(1) 8-Bit Resolution 8-Bit Differential Nonlinearity 8-Bit Integral Nonlinearity Rating Symbol LSB DNL INL AE LSB DNL INL Min 1.5 3.5 5 0.5 1.5 Typ 3.25 1.5 2.5 13 1 Max 1.5 3.5 5 0.5 1.5 2.0 Unit mV Counts Counts Counts mV Counts Counts Counts
AE 2.0 1.5 8 P 8-Bit Absolute Error1 1. These values include the quantization error which is inherently 1/2 count for any A/D converter.
For the following denitions see also Figure A-1. Differential Non-Linearity (DNL) is dened as the difference between two adjacent switching steps.
V V i i1 DNL ( i ) = -------------------------- 1 1LSB
i=1
Freescale Semiconductor
651
DNL
Vi-1
LSB
$3FF $3FE $3FD $3FC $3FB $3FA $3F9 $3F8 $3F7 $3F6 $3F5 $3F4 $3F3 10-Bit Resolution
$FF
$FE
9 8 7 6 5 4 3 2 1
0 3.25 6.5 9.75 13 16.25 19.5 22.75 26 29.25
3286 3289 3292 3295 3299 3302 3305 3309 3312 3315 3318 3321 3324 3328
NOTE Figure A-1 shows only denitions, for specication values refer to Table A12.
652
Freescale Semiconductor
A.3
MSCAN
Table A-14. MSCAN Wake-up Pulse Characteristics
Conditions are shown in Table A-4 unless otherwise noted Num 1 2 C Rating Symbol tWUP tWUP Min 5 Typ Max 2 Unit us us
P MSCAN Wake-up dominant pulse ltered P MSCAN Wake-up dominant pulse pass
A.4
This section summarizes the electrical characteristics of the various startup scenarios for Oscillator and Phase-Locked-Loop (PLL).
A.4.1
Startup
Table A-15 summarizes several startup characteristics explained in this section. Detailed description of the startup behavior can be found in the Clock and Reset Generator (CRG) Block User Guide.
Table A-15. Startup Characteristics
Conditions are shown in Table A-4 unless otherwise noted Num 1 2 3 4 5 6 C T T D D D D POR release level POR assert level Reset input pulse width, minimum input time Startup from Reset Interrupt pulse width, IRQ edge-sensitive mode Wait recovery startup time Rating Symbol VPORR VPORA PWRSTL nRST PWIRQ tWRS Min 0.97 2 192 20 Typ Max 2.07 196 14 Unit V V tosc nosc ns tcyc
A.4.1.1
POR
The release level VPORR and the assert level VPORA are derived from the VDD supply. They are also valid if the device is powered externally. After releasing the POR reset the oscillator and the clock quality check are started. If after a time tCQOUT no valid oscillation is detected, the MCU will start using the internal self clock. The fastest startup time possible is given by nuposc.
A.4.1.2
LVR
The release level VLVRR and the assert level VLVRA are derived from the VDD supply. They are also valid if the device is powered externally. After releasing the LVR reset the oscillator and the clock quality check are started. If after a time tCQOUT no valid oscillation is detected, the MCU will start using the internal self clock. The fastest startup time possible is given by nuposc.
Freescale Semiconductor
653
A.4.1.3
Provided an appropriate external reset signal is applied to the MCU, preventing the CPU from executing code when VDD5 is out of specication limits, the SRAM contents integrity is guaranteed if after the reset the PORF bit in the CRG Flags Register has not been set.
A.4.1.4
External Reset
When external reset is asserted for a time greater than PWRSTL the CRG module generates an internal reset, and the CPU starts fetching the reset vector without doing a clock quality check, if there was an oscillation before reset.
A.4.1.5
Stop Recovery
Out of STOP the controller can be woken up by an external interrupt. A clock quality check as after POR is performed before releasing the clocks to the system.
A.4.1.6
The recovery from Pseudo STOP and Wait are essentially the same since the oscillator was not stopped in both modes. In Pseudo Stop Mode the voltage regulator is switched to reduced performance mode to reduce power consumption. The returning out of pseudo stop to full performance takes tvup. The controller can be woken up by internal or external interrupts.After twrs in Wait or tvup + twrs in Pseudo Stop the CPU starts fetching the interrupt vector.
A.4.2
Oscillator
The device features an internal Colpitts and Pierce oscillator. The selection of Colpitts oscillator or Pierce oscillator/external clock depends on the XCLKS signal which is sampled during reset. Pierce oscillator/external clock mode allows the input of a square wave. Before asserting the oscillator to the internal system clocks the quality of the oscillation is checked for each start from either power-on, STOP or oscillator fail. tCQOUT species the maximum time before switching to the internal self clock mode after POR or STOP if a proper oscillation is not detected. The quality check also determines the minimum oscillator start-up time tUPOSC. The device also features a clock monitor. A Clock Monitor Failure is asserted if the frequency of the incoming clock signal is below the Assert Frequency fCMFA.
654
Freescale Semiconductor
Symbol fOSC fOSC iOSC tUPOSC tCQOUT fCMFA fEXT tEXTL tEXTH tEXTR tEXTF CIN VDCBIAS VIH,EXTAL VIH,EXTAL VIl,EXTAL VIl,EXTAL
Min 0.5 0.5 100 0.45 50 0.5 9.5 9.5 0.75* VDDPLL VSSPLL-0.3
VHYS,EXTAL 15 C EXTAL Pin Input Hysteresis4 1. Depending on the crystal a damping series resistor might be necessary 2. fosc = 4MHz, C = 22pF. 3. Maximum value is for extreme cases using high Q, low frequency crystals 4. Only valid if Pierce Oscillator/external clock selected (XCLKS = 0 during reset)
Freescale Semiconductor
655
A.4.3
The oscillator provides the reference clock for the PLL. The PLLs Voltage Controlled Oscillator (VCO) is also the system clock source in self clock mode.
A.4.3.1
This section describes the selection of the XFC components to achieve a good lter characteristics.
Cp
VDDPLL R Cs Phase fosc 1 refdv+1 fref D KF Detector XFC Pin VCO fvco KV
fcmp
The following procedure can be used to calculate the resistance and capacitance values using typical values for K1, f1 and ich from Table A-17. The grey boxes show the calculation for fVCO = 50MHz and fref = 1MHz. E.g., these frequencies are used for fOSC = 4MHz and a 25MHz bus clock. The VCO Gain at the desired VCO frequency is approximated by: ( f 1 f vco ) ---------------------K 1 1V ( 60 50 ) -------------------- 100
KV = K1 e
= 100 e
= -90.48MHz/V
K = i ch K V
ich is the current in tracking mode.
= 316.7Hz/
656
Freescale Semiconductor
The loop bandwidth fC should be chosen to fulll the Gardners stability criteria by at least a factor of 10, typical values are 50. = 0.9 ensures a good transient response.
f ref 2 f ref 1 f C < ------------------------------------------ ---- f C < ------------ ;( = 0.9 ) 4 10 10 2 + 1 + fC < 25kHz
And nally the frequency relationship is dened as
= 50
With the above values the resistance can be calculated. The example is shown for a loop bandwidth fC=10kHz:
2 n fC R = ---------------------------- = 2**50*10kHz/(316.7Hz/)=9.9k=~10k K
The capacitance Cs can now be calculated as: 2
C s 20 C p C s 10
A.4.3.2 Jitter Information
Cp = 470pF
The basic functionality of the PLL is shown in Figure A-3. With each transition of the clock fcmp, the deviation from the reference clock fref is measured and input voltage to the VCO is adjusted accordingly. The adjustment is done continuously with no abrupt changes in the clock output frequency. Noise, voltage, temperature and other factors cause slight variations in the control loop resulting in a clock jitter. This jitter affects the real minimum and maximum clock periods as illustrated in Figure A-4.
Freescale Semiconductor
657
N-1
The relative deviation of tnom is at its maximum for one clock period, and decreases towards zero for larger number of clock periods (N). Dening the jitter as:
j1 J ( N ) = ------- + j 2 N
J(N)
10
20
This is very important to notice with respect to timers, serial modules where a pre-scaler will eliminate the effect of the jitter to a large extent.
658
Freescale Semiconductor
P Self Clock Mode frequency D VCO locking range D Lock Detector transition from Acquisition to Tracking mode
D Lock Detection D Un-Lock Detection D Lock Detector transition from Tracking to Acquisition mode
C PLLON Total Stabilization delay (Auto Mode) (2) D PLLON Acquisition mode stabilization delay
2
D PLLON Tracking mode stabilization delay 2 D Fitting parameter VCO loop gain D Fitting parameter VCO loop frequency D Charge pump current acquisition mode D Charge pump current tracking mode C Jitter t parameter 12
2
j2 0.13 % 15 C Jitter t parameter 2 1. % deviation from target frequency 2. fOSC = 4MHz, fBUS = 25MHz equivalent fVCO = 50MHz: REFDV = #$03, SYNR = #$018, Cs = 4.7nF, Cp = 470pF, Rs = 10K.
A.5
A.5.1
The time base for all NVM program or erase operations is derived from the oscillator. A minimum oscillator frequency fNVMOSC is required for performing program or erase operations. The NVM modules do not have any means to monitor the frequency and will not prevent program or erase operation at frequencies above or below the specied minimum. Attempting to program or erase the NVM modules at a lower frequency a full program or erase transition is not assured. The Flash program and erase operations are timed using a clock derived from the oscillator using the FCLKDIV and ECLKDIV registers respectively. The frequency of this clock must be set within the limits specied as fNVMOP. The minimum program and erase times shown in Table A-18 are calculated for maximum fNVMOP and maximum fbus. The maximum times are calculated for minimum fNVMOP and a fbus of 2MHz.
Freescale Semiconductor
659
A.5.1.1
The programming time for single word programming is dependant on the bus frequency as a well as on the frequency fNVMOP and can be calculated according to the following formula.
A.5.1.3
Sector Erase
A.5.1.4
Mass Erase
660
Freescale Semiconductor
Typ
Max 50(1)
200 74.5(3) 31
3 3
kHz s s s s ms ms
(7)t cyc
678.4
1035.5
7t 65546(9) 11(8) 9 D Blank Check Time Flash per block t check cyc 1. Restrictions for oscillator in crystal mode apply! 2. Minimum Programming times are achieved under maximum NVM operating frequency f NVMOP and maximum bus frequency fbus. 3. Maximum Erase and Programming times are achieved under particular combinations of f NVMOP and bus frequency f bus. Refer to formulae in Sections A.3.1.1 - A.3.1.4 for guidance. 4. Minimum Erase times are achieved under maximum NVM operating frequency f NVMOP. 5. Minimum time, if rst word in the array is not blank (512 byte sector size). 6. Maximum time to complete check on an erased block (512 byte sector size) 7. Where tcyc is the system bus clock period. 8. Minimum time, if rst word in the array is not blank (1024 byte sector size) 9. Maximum time to complete check on an erased block (1024 byte sector size).
Freescale Semiconductor
661
A.5.2
NVM Reliability
The reliability of the NVM blocks is guaranteed by stress test during qualication, constant process monitors and burn-in to screen early life failures. The program/erase cycle count on the sector is incremented every time a sector or mass erase event is executed.
Table A-19. NVM Reliability Characteristics(1)
Conditions are shown in Table A-4. unless otherwise noted Num C Rating Symbol Flash Reliability Characteristics 1 2 3 4 C Data retention after 10,000 program/erase cycles at an average junction temperature of TJavg 85C C Data retention with <100 program/erase cycles at an average junction temperature TJavg 85C C Number of program/erase cycles (40C TJ 0C) nFL tFLRET 15 20 10,000 100(2) 1002 Cycles Years Min Typ Max Unit
C Number of program/erase cycles 10,000 100,000(3) (0C TJ 140C) 1. TJavg will not exeed 85C considering a typical temperature prole over the lifetime of a consumer, industrial or automotive application. 2. Typical data retention values are based on intrinsic capability of the technology measured at high temperature and de-rated to 25C using the Arrhenius equation. For additional information on how Freescale denes Typical Data Retention, please refer to Engineering Bulletin EB618. 3. Spec table quotes typical endurance evaluated at 25C for this product family, typical endurance at various temperature can be estimated using the graph below. For additional information on how Freescale denes Typical Endurance, please refer to Engineering Bulletin EB619.
662
Freescale Semiconductor
100
120
140
A.6
SPI
This section provides electrical parametrics and ratings for the SPI. In Table A-20 the measurement conditions are listed.
Table A-20. Measurement Conditions
Description Drive mode Load capacitance CLOAD, on all outputs Thresholds for delay measurement points Value Full drive mode 50 (20% / 80%) VDDX Unit pF V
A.6.1
Master Mode
In Figure A-6 the timing diagram for master mode with transmission format CPHA=0 is depicted.
Freescale Semiconductor
663
SS1 (OUTPUT) 2 SCK (CPOL = 0) (OUTPUT) SCK (CPOL = 1) (OUTPUT) 5 MISO (INPUT) 10 MOSI (OUTPUT) MSB OUT2 6 MSB IN2 BIT 6 . . . 1 9 BIT 6 . . . 1 LSB OUT LSB IN 11 1 4 4 12 13 12 13 3
1. If congured as an output. 2. LSBF = 0. For LSBF = 1, bit order is LSB, bit 1, ..., bit 6, MSB.
In Figure A-7 the timing diagram for master mode with transmission format CPHA=1 is depicted.
SS1 (OUTPUT) 1 2 SCK (CPOL = 0) (OUTPUT) 4 SCK (CPOL = 1) (OUTPUT) 5 MISO (INPUT) 9 MOSI (OUTPUT) PORT DATA MSB IN2 6 BIT 6 . . . 1 11 MASTER MSB OUT2 BIT 6 . . . 1 MASTER LSB OUT PORT DATA LSB IN 4 12 13 12 13 3
1. If congured as output 2. LSBF = 0. For LSBF = 1, bit order is LSB, bit 1, ..., bit 6, MSB.
664
Freescale Semiconductor
In Table A-21 the timing characteristics for master mode are listed.
Table A-21. SPI Master Mode Timing Characteristics
Num 1 1 2 3 4 5 6 9 10 11 12 13 C P P D D D D D D D D D D SCK Period Enable Lead Time Enable Lag Time Clock (SCK) High or Low Time Data Setup Time (Inputs) Data Hold Time (Inputs) Data Valid after SCK Edge Data Valid after SS fall (CPHA=0) Data Hold Time (Outputs) Rise and Fall Time Inputs Rise and Fall Time Outputs Characteristic SCK Frequency Symbol fsck tsck tlead tlag twsck tsu thi tvsck tvss tho tr trfo Min 1/2048 2 8 8 20 Typ 1/2 1/2 1/2 Max 1/2 2048 30 15 8 8 Unit fbus tbus tsck tsck tsck ns ns ns ns ns ns ns
A.6.2
Slave Mode
In Figure A-8 the timing diagram for slave mode with transmission format CPHA=0 is depicted.
SS (INPUT) 1 SCK (CPOL = 0) (INPUT) 2 SCK (CPOL = 1) (INPUT) 10 7 MISO (OUTPUT) see note 5 MOSI (INPUT)
NOTE: Not defined!
12
13
12
13 8
11
11 SEE NOTE
LSB IN
Freescale Semiconductor
665
In Figure A-9 the timing diagram for slave mode with transmission format CPHA=1 is depicted.
SS (INPUT) 1 2 SCK (CPOL = 0) (INPUT) 4 SCK (CPOL = 1) (INPUT) 9 MISO (OUTPUT) see note 7 MOSI (INPUT)
NOTE: Not defined!
3 12 13
12
13
SLAVE 5
MSB IN
BIT 6 . . . 1
LSB IN
In Table A-22 the timing characteristics for slave mode are listed.
Table A-22. SPI Slave Mode Timing Characteristics
Num 1 1 2 3 4 5 6 7 8 9 10 11 12 C D P D D D D D D D D D D D SCK Frequency SCK Period Enable Lead Time Enable Lag Time Clock (SCK) High or Low Time Data Setup Time (Inputs) Data Hold Time (Inputs) Slave Access Time (time to data active) Slave MISO Disable Time Data Valid after SCK Edge Data Valid after SS fall Data Hold Time (Outputs) Rise and Fall Time Inputs Characteristic Symbol fsck tsck tlead tlag twsck tsu thi ta tdis tvsck tvss tho tr trfo Min DC 4 4 4 4 8 8 20 Typ Max 1/4 20 22 30 + tbus
(1)
ns ns ns ns ns
30 + tbus1 8 8
13 D Rise and Fall Time Outputs 1. tbus added due to internal synchronization delay
666
Freescale Semiconductor
A.7
A.7.1
Num 1 3
Voltage Regulator
Voltage Regulator Operating Conditions
Table A-23. Voltage Regulator Electrical Parameters
C P P Characteristic Input Voltages Output Voltage Core Full Performance Mode Low Voltage Interrupt(1) Assert Level (xL45J mask set) Assert Level (other mask sets) Deassert Level (xL45J mask set) Deassert Level (other mask sets) Low Voltage Reset(2),(3) Assert Level (xL45J mask set) Assert Level (other mask sets) Symbol VVDDR, A VDD Min 2.97 2.35 Typ 2.5 Max 5.5 2.75 Unit V V
V V V V V
Power-on Reset(4) 7 C VPORA Assert Level 0.97 V Deassert Level 2.05 V VPORD 1. Monitors VDDA, active only in Full Performance Mode. Indicates I/O & ADC performance degradation due to low supply voltage. 2. Monitors VDD, active only in Full Performance Mode. MCU is monitored by the POR in RPM (see Figure A-10) 3. Digital functionality is guaranteed in the range between VDD(min) and VLVRA(min). 4. Monitors VDD. Active in all modes.
A.7.2
Voltage regulator sub modules LVI (low voltage interrupt), POR (power-on reset) and LVR (low voltage reset) handle chip power-up or drops of the supply voltage. Their function is described in Figure A-10.
Freescale Semiconductor
667
V
VLVID VLVIA
VDDA
VDD
t
LVI
LVI enabled
POR
LVR
Figure A-10. Voltage Regulator Chip Power-up and Voltage Drops (not scaled)
A.7.3
A.7.3.1
Output Loads
Resistive Loads
The on-chip voltage regulator is intended to supply the internal logic and oscillator circuits allows no external DC loads.
A.7.3.2
Capacitive Loads
Table A-24. Voltage Regulator Capacitive Loads
The capacitive loads are specied in Table A-24. Ceramic capacitors with X7R dielectricum are required.
Num 1 2
Min 400 90
Unit nF nF
668
Freescale Semiconductor
112 111 110 109 108 107 106 105 104 103 102 101 100 99 98 97 96 95 94 93 92 91 90 89 88 87 86 85
NC
MC9S12C128
Signals shown in Bold are available only in the 112 Pin Package. Pins marked "NC" are not connected
Freescale Semiconductor
ADDR5/DATA5/PB5 ADDR6/DATA6/PB6 ADDR7/DATA7/PB7 NC NC NC NC XCLKS/NOACC/PE7 MODB/IPIPE1/PE6 MODA/IPIPE0/PE5 ECLK/PE4 VSSR VDDR RESET VDDPLL XFC VSSPLL EXTAL XTAL TEST NC NC NC NC LSTRB/TAGLO/PE3 R/W/PE2 IRQ/PE1 XIRQ/PE0
29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56
VRH VDDA NC PAD07/AN07 NC PAD06/AN06 NC PAD05/AN05 NC PAD04/AN04 NC PAD03/AN03 NC PAD02/AN02 NC PAD01/AN01 NC PAD00/AN00 VSS2 VDD2 PA7/ADDR15/DATA15 PA6/ADDR14/DATA14 PA5/ADDR13/DATA13 PA4/ADDR12/DATA12 PA3/ADDR11/DATA11 PA2/ADDR10/DATA10 PA1/ADDR9/DATA9 PA0/ADDR8/DATA8
669
B.1.1
PK[2:0] / XADDR[16:14]
PK2-PK0 provide the expanded address XADDR[16:14] for the external bus. Refer to the S12 Core user guide for detailed information about external address page access.
Internal Pull Resistor Power Domain CTRL PK[2:0] XADDR[16:14] VDDX PUPKE Reset State Up Port K I/O Pins Description
The reset state of DDRK in the S12_CORE is $00, conguring the pins as inputs. The reset state of PUPKE in the PUCR register of the S12_CORE is "1" enabling the internal pullup resistors at PortK[2:0]. In this reset state the pull-up resistors provide a dened state and prevent a oating input, thereby preventing unnecessary current consumption at the input stage.
670
Freescale Semiconductor
Freescale Semiconductor
671
C.1.1
B B P
H A-B
V 0.05 D
C A-B
-A-
-B-
0.20
0.20
-A-,-B-,-DDETAIL A
DETAIL A
80 1 20
21
-D0.20
M
A H A-B S
0.05 A-B J
S
C A-B
M DETAIL C -HH G
DATUM PLANE
D 0.20
M
C A-B
SECTION B-B
VIEW ROTATED 90
0.10 M
U T
DATUM PLANE
-H-
K W X DETAIL C
NOTES: 1. DIMENSIONING AND TOLERANCING PER ANSI Y14.5M, 1982. 2. CONTROLLING DIMENSION: MILLIMETER. 3. DATUM PLANE -H- IS LOCATED AT BOTTOM OF LEAD AND IS COINCIDENT WITH THE LEAD WHERE THE LEAD EXITS THE PLASTIC BODY AT THE BOTTOM OF THE PARTING LINE. 4. DATUMS -A-, -B- AND -D- TO BE DETERMINED AT DATUM PLANE -H-. 5. DIMENSIONS S AND V TO BE DETERMINED AT SEATING PLANE -C-. 6. DIMENSIONS A AND B DO NOT INCLUDE MOLD PROTRUSION. ALLOWABLE PROTRUSION IS 0.25 PER SIDE. DIMENSIONS A AND B DO INCLUDE MOLD MISMATCH AND ARE DETERMINED AT DATUM PLANE -H-. 7. DIMENSION D DOES NOT INCLUDE DAMBAR PROTRUSION. ALLOWABLE DAMBAR PROTRUSION SHALL BE 0.08 TOTAL IN EXCESS OF THE D DIMENSION AT MAXIMUM MATERIAL CONDITION. DAMBAR CANNOT BE LOCATED ON THE LOWER RADIUS OR THE FOOT.
DIM A B C D E F G H J K L M N P Q R S T U V W X
MILLIMETERS MIN MAX 13.90 14.10 13.90 14.10 2.15 2.45 0.22 0.38 2.00 2.40 0.22 0.33 0.65 BSC --0.25 0.13 0.23 0.65 0.95 12.35 REF 5 10 0.13 0.17 0.325 BSC 0 7 0.13 0.30 16.95 17.45 0.13 --0 --16.95 17.45 0.35 0.45 1.6 REF
672
Freescale Semiconductor
C.1.2
52 1
40 39
C L AB G
3X
-L-
B1
13 14 26 27
V1
PLATING
J D T L-M
A1 S1 A S
-N0.13 (0.005)
M
ROTATED 90 CLOCKWISE NOTES: 1. DIMENSIONING AND TOLERANCING PER ANSI Y14.5M, 1982. CONTROLLING DIMENSION: MILLIMETER DATUM PLANE -H- IS LOCATED AT BOTTOM OF LEAD AND IS COINCIDENT WITH THE LEAD WHERE THE LEAD EXITS THE PLASTIC BODY AT THE BOTTOM OF THE PARTING LINE. 2. DATUMS -L-, -M- AND -N- TO BE DETERMINED AT DATUM PLANE -H-. DIMENSIONS S AND V TO BE DETERMINED AT SEATING PLANE -T-. DIMENSIONS A AND B DO NOT INCLUDE MOLD PROTRUSION. ALLOWABLE PROTRUSION IS 0.25 (0.010) PER SIDE. DIMENSIONS A AND B DO INCLUDE MOLD MISMATCH AND ARE DETERMINED AT DATUM PLANE -HDIMENSION D DOES NOT INCLUDE DAMBAR PROTRUSION. DAMBAR PROTRUSION SHALL NOT CAUSE THE LEAD WIDTH TO EXCEED 0.46 (0.018). MINIMUM SPACE BETWEEN PROTRUSION AND ADJACENT LEAD OR PROTRUSION 0.07 (0.003).
SECTION AB-AB
C -H-TSEATING PLANE
4X
2
0.10 (0.004) T
4X
3
VIEW AA
0.05 (0.002)
1
C2
2X R
R1
0.25 (0.010)
GAGE PLANE
K C1 E VIEW AA Z
DIM A A1 B B1 C C1 C2 D E F G J K R1 S S1 U V V1 W Z 1 2 3
MILLIMETERS MIN MAX 10.00 BSC 5.00 BSC 10.00 BSC 5.00 BSC --1.70 0.05 0.20 1.30 1.50 0.20 0.40 0.45 0.75 0.22 0.35 0.65 BSC 0.07 0.20 0.50 REF 0.08 0.20 12.00 BSC 6.00 BSC 0.09 0.16 12.00 BSC 6.00 BSC 0.20 REF 1.00 REF 0 7 --0 12 REF 12 REF
INCHES MIN MAX 0.394 BSC 0.197 BSC 0.394 BSC 0.197 BSC --0.067 0.002 0.008 0.051 0.059 0.008 0.016 0.018 0.030 0.009 0.014 0.026 BSC 0.003 0.008 0.020 REF 0.003 0.008 0.472 BSC 0.236 BSC 0.004 0.006 0.472 BSC 0.236 BSC 0.008 REF 0.039 REF 0 7 --0 12 REF 12 REF
Freescale Semiconductor
673
C.1.3
0.200 AB T-U Z 9 A1
48 37
DETAIL Y
36
T B B1
12 25
U V AE V1 AE
NOTES: 1. DIMENSIONING AND TOLERANCING PER ASME Y14.5M, 1994. 2. CONTROLLING DIMENSION: MILLIMETER. 3. DATUM PLANE AB IS LOCATED AT BOTTOM OF LEAD AND IS COINCIDENT WITH THE LEAD WHERE THE LEAD EXITS THE PLASTIC BODY AT THE BOTTOM OF THE PARTING LINE. 4. DATUMS T, U, AND Z TO BE DETERMINED AT DATUM PLANE AB. 5. DIMENSIONS S AND V TO BE DETERMINED AT SEATING PLANE AC. 6. DIMENSIONS A AND B DO NOT INCLUDE MOLD PROTRUSION. ALLOWABLE PROTRUSION IS 0.250 PER SIDE. DIMENSIONS A AND B DO INCLUDE MOLD MISMATCH AND ARE DETERMINED AT DATUM PLANE AB. 7. DIMENSION D DOES NOT INCLUDE DAMBAR PROTRUSION. DAMBAR PROTRUSION SHALL NOT CAUSE THE D DIMENSION TO EXCEED 0.350.
13
24
Z S1 S
4X
T, U, Z DETAIL Y
0.200 AC T-U Z
AB
0.080 AC
AD AC
BASE METAL
DIM A A1 B B1 C D E F G H J K L M N P R S S1 V V1 W AA
MILLIMETERS MIN MAX 7.000 BSC 3.500 BSC 7.000 BSC 3.500 BSC 1.400 1.600 0.170 0.270 1.350 1.450 0.170 0.230 0.500 BSC 0.050 0.150 0.090 0.200 0.500 0.700 0 7 12 REF 0.090 0.160 0.250 BSC 0.150 0.250 9.000 BSC 4.500 BSC 9.000 BSC 4.500 BSC 0.200 REF 1.000 REF
M
TOP & BOTTOM
R
GAUGE PLANE
C F D 0.080
M
AC T-U Z H W DETAIL AD AA K L
SECTION AE-AE
Figure C-3. 48-Pin LQFP Mechanical Dimensions (Case no. 932-03 issue F)
674
Freescale Semiconductor
0.250
16K 1K MC9S12GC16 1 1 8ch 6ch 8ch 1. All family memebers are available in 80QFP, 52LQFP and 48LQFP package options
Freescale Semiconductor
675
Table E-1. lists C-family part number coding based on package, speed and temperature and die options. Table E-2. lists CG-family part number coding based on package, speed and temperature and die options.
Table E-1. MC9S12C-Family / MC9S12GC-Family Part Number Coding Part Number
MC9S12C128CFA MC9S12C128CPB MC9S12C128CFU MC9S12C128VFA MC9S12C128VPB MC9S12C128VFU MC9S12C128MFA MC9S12C128MPB MC9S12C128MFU MC9S12C96CFA MC9S12C96CPB MC9S12C96CFU MC9S12C96VFA MC9S12C96VPB MC9S12C96VFU MC9S12C96MFA MC9S12C96MPB MC9S12C96MFU MC9S12C64CFA MC9S12C64CPB
Mask(1) set
XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G
Temp.
-40C, 85C -40C, 85C -40C, 85C -40C,105C -40C,105C -40C, 105C -40C,125C -40C,125C -40C, 125C -40C, 85C -40C, 85C -40C, 85C -40C,105C -40C,105C -40C, 105C -40C,125C -40C,125C -40C, 125C -40C, 85C -40C, 85C
Package
48LQFP 52LQFP 80QFP 48LQFP 52LQFP 80QFP 48LQFP 52LQFP 80QFP 48LQFP 52LQFP 80QFP 48LQFP 52LQFP 80QFP 48LQFP 52LQFP 80QFP 48LQFP 52LQFP
Speed
25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz
RAM
4K 4K 4K 4K 4K 4K 4K 4K 4K 4K 4K 4K 4K 4K 4K 4K 4K 4K 4K 4K
I/O(2),
(3)
31 35 60 31 35 60 31 35 60 31 35 60 31 35 60 31 35 60 31 35
676
Freescale Semiconductor
Part Number
MC9S12C64CFU MC9S12C64VFA MC9S12C64VPB MC9S12C64VFU MC9S12C64MFA MC9S12C64MPB MC9S12C64MFU
Mask(1) set
XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G XL09S/0M66G
Temp.
-40C, 85C -40C,105C -40C,105C -40C, 105C -40C,125C -40C,125C -40C, 125C -40C, 85C -40C, 85C -40C, 85C -40C,105C -40C,105C -40C,125C -40C,125C -40C, 85C -40C, 85C -40C, 85C -40C,105C -40C,105C -40C,125C -40C,125C
Package
80QFP 48LQFP 52LQFP 80QFP 48LQFP 52LQFP 80QFP 48LQFP 52LQFP 80QFP 48LQFP 52LQFP 80QFP 48LQFP 52LQFP 80QFP 48LQFP 52LQFP 80QFP 48LQFP 52LQFP 80QFP 48LQFP 52LQFP
Speed
25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 16MHz 16MHz 16MHz 16MHz 16MHz 16MHz 16MHz 16MHz 16MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz
RAM
4K 4K 4K 4K 4K 4K 4K 2K 2K 2K 2K 2K 2K 2K 2K 2K 2K 2K 2K 2K 2K 2K 2K 2K
I/O(2),
(3)
60 31 35 60 31 35 60 31 35 60 31 35 60 31 35 60 31 35 60 31 35 60 31 35
MC9S12C32CFA16 xL45J / xM34C MC9S12C32CPB16 xL45J / xM34C MC9S12C32CFU16 xL45J / xM34C MC9S12C32VFA16 xL45J / xM34C MC9S12C32VPB16 xL45J / xM34C MC9S12C32MFA16 xL45J / xM34C MC9S12C32MPB16 xL45J / xM34C MC9S12C32CFA25 xL45J / xM34C MC9S12C32CPB25 xL45J / xM34C MC9S12C32CFU25 xL45J / xM34C MC9S12C32VFA25 xL45J / xM34C MC9S12C32VPB25 xL45J / xM34C MC9S12C32MFA25 xL45J / xM34C MC9S12C32MPB25 xL45J / xM34C
MC9S12C32MFU25 xL45J / xM34C -40C, 125C 80QFP 25MHz C32 die 32K 2K 60 1. XL09S denotes all minor revisions of L09S maskset XL45J denotes all minor revisions of L45J maskset Maskset dependent errata can be accessed at http://e-www.motorola.com/wbapp/sps/site/prod_summary.jsp 2. All C-Family derivatives feature 1 CAN, 1 SCI, 1 SPI, an 8-channel A/D, a 6-channel PWM and an 8 channel timer. The GC-Family members do not have the CAN module 3. I/O is the sum of ports able to act as digital input or output.
Table E-2. MC9S12GC-Family Part Number Coding Part Number Mask(1) set Temp.
-40C, 85C -40C, 85C -40C, 85C -40C,105C -40C,105C -40C,125C -40C,125C
Package
48LQFP 52LQFP 80QFP 48LQFP 52LQFP 80QFP 48LQFP 52LQFP
Speed
25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz
RAM
2K 2K 2K 2K 2K 2K 2K 2K
I/O(2),
(3)
MC9S12GC32CFA xL45J / xM34C MC9S12GC32CPB xL45J / xM34C MC9S12GC32CFU xL45J / xM34C MC9S12GC32VFA xL45J / xM34C MC9S12GC32VPB xL45J / xM34C MC9S12GC32MFA xL45J / xM34C MC9S12GC32MPB xL45J / xM34C
31 35 60 31 35 60 31 35
Freescale Semiconductor
677
Part Number
Mask(1) set
Temp.
Package
80QFP 48LQFP 52LQFP 80QFP 48LQFP 52LQFP 80QFP 48LQFP 52LQFP
Speed
25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz 25MHz
RAM
2K 1K 1K 1K 1K 1K 1K 1K 1K
I/O(2),
(3)
MC9S12GC32MFU xL45J / xM34C -40C, 125C MC9S12GC16CFA xL45J / xM34C MC9S12GC16CPB xL45J / xM34C MC9S12GC16CFU xL45J / xM34C MC9S12GC16VFA xL45J / xM34C MC9S12GC16VPB xL45J / xM34C MC9S12GC16MFA xL45J / xM34C MC9S12GC16MPB xL45J / xM34C -40C, 85C -40C, 85C -40C, 85C -40C,105C -40C,105C -40C,125C -40C,125C
60 31 35 60 31 35 60 31 35
MC9S12GC16MFU xL45J / xM34C -40C, 125C 80QFP 25MHz C32 die 16K 1K 60 1. XL09S denotes all minor revisions of L09S maskset XL45J denotes all minor revisions of L45J maskset Maskset dependent errata can be accessed at http://e-www.motorola.com/wbapp/sps/site/prod_summary.jsp 2. All C-Family derivatives feature 1 CAN, 1 SCI, 1 SPI, an 8-channel A/D, a 6-channel PWM and an 8 channel timer. The GC-Family members do not have the CAN module 3. I/O is the sum of ports capable to act as digital input or output.
678
Freescale Semiconductor
Information in this document is provided solely to enable system and software implementers to use Freescale Semiconductor products. There are no express or implied copyright licenses granted hereunder to design or fabricate any integrated circuits or integrated circuits based on the information in this document. Freescale Semiconductor reserves the right to make changes without further notice to any products herein. Freescale Semiconductor makes no warranty, representation or guarantee regarding the suitability of its products for any particular purpose, nor does Freescale Semiconductor assume any liability arising out of the application or use of any product or circuit, and specically disclaims any and all liability, including without limitation consequential or incidental damages. Typical parameters that may be provided in Freescale Semiconductor data sheets and/or specications can and do vary in different applications and actual performance may vary over time. All operating parameters, including Typicals, must be validated for each customer application by customers technical experts. Freescale Semiconductor does not convey any license under its patent rights nor the rights of others. Freescale Semiconductor products are not designed, intended, or authorized for use as components in systems intended for surgical implant into the body, or other applications intended to support or sustain life, or for any other application in which the failure of the Freescale Semiconductor product could create a situation where personal injury or death may occur. Should Buyer purchase or use Freescale Semiconductor products for any such unintended or unauthorized application, Buyer shall indemnify and hold Freescale Semiconductor and its ofcers, employees, subsidiaries, afliates, and distributors harmless against all claims, costs, damages, and expenses, and reasonable attorney fees arising out of, directly or indirectly, any claim of personal injury or death associated with such unintended or unauthorized use, even if such claim alleges that Freescale Semiconductor was negligent regarding the design or manufacture of the part.
Freescale and the Freescale logo are trademarks of Freescale Semiconductor, Inc. All other product or service names are the property of their respective owners. . Freescale Semiconductor, Inc. 2006. All rights reserved. MC9S12C128 Rev 01.23 05/2007