BCM2835 datasheet errata
Back to RPi_Hardware#Components
- 1 BCM 2835 datasheet errata
- 1.1 the BCM2835 on the RPI
- 1.2 PDF Generation
- 1.3 p7 footnote typo
- 1.4 p8
- 1.5 p10
- 1.6 p12
- 1.7 p13
- 1.8 p14
- 1.9 p15
- 1.10 p17
- 1.11 p18
- 1.12 p19
- 1.13 p24 table
- 1.14 p25 table
- 1.15 p26
- 1.16 p34 off-by-one?
- 1.17 p35 I2C clock stretching
- 1.18 p38 typo
- 1.19 p52 error
- 1.20 p56
- 1.21 p92 to 95 & 102 to 103
- 1.22 p90
- 1.23 p95
- 1.24 p96
- 1.25 p98
- 1.26 p100 typo
- 1.27 p101 typo
- 1.28 p102 typos
- 1.29 p103 typo
- 1.30 p104 table
- 1.31 p105 table
- 1.32 p107-108 table 6-35
- 1.33 p111 spelling
- 1.34 p113
- 1.35 p113-115 register name duplication
- 1.36 p119 I2S clock
- 1.37 p125
- 1.38 p126
- 1.39 p139
- 1.40 p141
- 1.41 p142/143 register table
- 1.42 p145 and 147
- 1.43 p147
- 1.44 p153
- 1.45 p155
- 1.46 p156
- 1.47 p158
- 1.48 p160
- 1.49 p161, p162, p166
- 1.50 p175
- 1.51 p177
- 1.52 p196
- 1.53 p197
- 1.54 p198
- 1.55 p202
- 1.56 p203
- 1.57 p204
BCM 2835 datasheet errata
It has a couple of typos. Some more serious than others.
Let's gather those datasheet typos and errors here.
The quality of the datasheet is high. It looks like it contains the information that programmers need. Some of the tables from the datasheet have been reproduced here.
It also "does the right thing" with reserved bits. Many datasheets specify "write: don't care, read as zeroes". Broadcom specifies the reserved bits the other way around: "Write zeroes, read: don't care".
This is the correct way to do it. If you expand the hardware the hardware may be enhanced and do "different things" if you write ones to the previously "reserved" bits. If you follow the datasheet, and write zeroes as specified to the reserved bits, the hardware guys can make sure you're not going to run into surprises. And by specifying "read: don't care" you can allow future hardware to provide status bits there.
the BCM2835 on the RPI
Not really an erratum, but not worth it to make a whole page for this. The Raspberry Pi runs the BCM2835 with a core clock of 250MHz. This is relevant for the peripheral modules like I2C, SPI and Timer ( ARM side ) for calculating the desired clock rate. The I2C section on page 34 mentions 150MHz as a "nominal core clock".
Switch on option for linking, so cross-references and table of contents can be jumped through. (RPi_BCM2835_GPIOs contains some useful cross-references)
p7 footnote typo
precuations should be precautions.
The register names are AUX_SPI0_.... and AUX_SPI1_.... . The "description" is then SPI 1 ... and SPI 2 ....
These modules are in fact SPI1 and SPI2, and NOT SPI0 and SPI1. This is confusing as indeed there is a different module called SPI0 (documented on page 148 and onwards).
Some of the register addresses in the table are incorrect or missing. The values on pages 26 and 27 are correct:
- AUXSPI0_PEEK is at 0x7E21 508C
- AUXSPI0_IO is at 0x7E21 50A0-0x7E21 50AC
- AUXSPI0_TXHOLD is at 0x7E21 50B0-0x7E21 50BC
- AUXSPI1_PEEK is at 0x7E21 50CC
- AUXSPI1_IO is at 0x7E21 50E0-0x7E21 50EC
- AUXSPI1_TXHOLD is at 0x7E21 50F0-0x7E21 50FC
It says "Al 16550 register bits" when it should say "All 16550 register bits"
The title should be AUX_MU_IER_REG. The name in the Synopsis is correct
These are R/W bits not read only
Bits 3:2 are marked as don't care, but are actually required in order to receive interrupts.
Bits 1:0 are swaped. bit 0 is receive interrupt and bit 1 is transmit.
The title should be AUX_MU_IIR_REG. The name in the Synopsis is correct
LCR register, bit 1 must be set for 8 bit mode, like a 16550 write a 3 to get 8-bit mode
The CTS status in the AUX_MU_MSR_REG register should be bit 4
The receiver enable and transmitter enable sections don't match the description in the AUX_MU_CNTL_REG table. They should both read "If this bit cleared no new symbols will be..."
The "Transmitter is idle" row in the table should say "If this bit is clear the transmitter is busy."
It refers to "the LABD bit" which should be "the DLAB bit"
Either the reserved bits at the top are too few or a field is missing.
With the reserved bits fixed it looks like this:
|31:11||-||Reserved, write zero, read as don’t care|
|10:8||CS high time||Additional SPI clock cycles where the CS is high.||R/W||0|
|7||TX empty IRQ||If 1 the interrupt line is high when the transmit FIFO is empty||R/W||0|
|6||Done IRQ||If 1 the interrupt line is high when the interface is idle||R/W||0|
|5:2||-||Reserved, write zero, read as don’t care|
|1||Shift in MS bit first||If 1 the data is shifted in starting with the MS bit. (bit 15) If 0 the data is shifted in starting with the LS bit. (bit 0)||R/W||0|
|0||Keep input||If 1 the receiver shift register is NOT cleared. Thus new data is concatenated to old data. If 0 the receiver shift register is cleared before each transaction.||R/W||0|
"AUX is IDLE:" should read "SPI is idle". (and for consistency below the line "Interrupts", SPI is Idle should be spelled "SPI is idle".
The section on page 25 about Interrupts also duplicates information already seen on page 21.
The table on page 25 has the bit numbers wrong. Some bits are mentioned twice, some not at all.
It should be something like:
|27:24||TX FIFO level||The number of data units in the transmit data FIFO||R/W||0|
|19:16||RX FIFO level||The number of data units in the receive data FIFO.||R/W||0|
|15:11||-||Reserved, write zero, read as don’t care||R/W||0|
|10||TX Full||If 1 the transmit FIFO is full
If 0 the transmit FIFO can accept at least 1 data unit.
|9||TX Empty||If 1 the transmit FIFO is empty
If 0 the transmit FIFO holds at least 1 data unit.
|8||RX Full||If 1 the receiver FIFO is full
If 0 the receiver FIFO can accept at least 1 data unit.
|7||RX Empty||If 1 the receiver FIFO is empty
If 0 the receiver FIFO holds at least 1 data unit.
|6||Busy||Indicates the module is busy transferring data.||R/W||0|
|5:0||Bit count||The number of bits still to be processed. Starts with 'shift-length' and counts down.||R/W||0|
The register reads as 0x280 after reset. Two bits high would be consistent with TX empty and RX empty.
The Peek register is documented here as being at 0x7e21508c, whereas the table on page 8 shows 0x7e215094.
The IO register is documented as 0x7e2150a0 (with automatic deassert) and 0x7e2150b0, whereas the table on page 8 shows 0x7e215090.
The addresses on page 26 are correct, it's the table on page 8 which is wrong (see corrections above).
"Reading whilst the receive FIFO is empty will return the last data received."
I strongly suspect that the CDIV counter is only 14 bits wide. The bottom bit doesn't work as per specifications, and because the "0" results in 32768, the top bit doesn't either. An easy implementation would implement the 0 value as the maximum divisor. Not as "half the maximum".
Another option is that SCL = cor clock * 2 / CDIV and that the counter is 15 bits after all. (only the lowest bit missing).
The CDIV register appears to function as documented, see bcm2835_i2c_set_divider in https://github.com/raspberrypi/linux/blob/rpi-4.19.y/drivers/i2c/busses/i2c-bcm2835.c for details.
p35 I2C clock stretching
There is a bug in the I2C master that it does not support clock stretching at arbitrary points. It does support clock stretching in I2C-Reads directly after the ACK phase, if the stretching-delay is >= 0.5 clock period (i.e. the low-period is >= 1 clock period).
A detailed analysis of this bug can be found at http://www.advamation.com/knowhow/raspberrypi/rpi-i2c-bug.html
harware instead of hardware (second paragraph)
INTEN: a DMA interrupts only get triggered when the control block requesting the interrupt is the last in the chain (so next is NULL).
Otherwise no interrupt gets triggered.
Workaround is to use a second DMA chain just for triggering the interrupt.
To do this one needs to create a control-block (possibly length=0) on the second DMA channel. Link to it via two control blocks on the primary chain. The first control block sets the control-block_address of the "second DMA". The second starts the "unused" DMA by writing 1 to CS of the "second DMA", which then starts the "second DMA" and subsequently the interrupt gets triggered. After this the "primary" DMA can continue its work with other transfers without further interaction by the CPU.
The DMA LITE engines don't have SRC_IGNORE and DEST_IGNORE modes, so bits 7 and 11 should be marked as Reserved.
p92 to 95 & 102 to 103
The GPIO Alternate function select Registers. This shows a bit pattern of 111 as alternative function 3. If you look at the values after boot up the Pi's SPI interface pins connected to the SD card have this value in them. This does not match the diagram on page 102 - 103 which shows this function is selected with alternative function 4. So either the bit pattern / function information is wrong or Table 6-31 is wrong.
The second column in the table is labelled "Field Name" whereas it's actually "Register Name"
address 0x7e20 0000 is listed twice as gpfsel0.
There is a spurious ) in "..clear registers) are used..."
Instead of "1 = Set GPIO pin n" for GPIO Output Clear Register 1, it should be "1 = Clear GPIO pin n"
The level registers have "0 = GPIO pin n is HIGH" which should be "1 = GPIO pin n is HIGH"
The level registers are listed as R/W but the table on page 90 states that they are only readable, which makes more sense.
The "GPIO Falling Edge Detect Enable Registers" header says "(GPRENn)" but it should say "(GPFENn)"
Instead of "when all register contents is lost." it should say "when all register contents are lost."
Table 6-28 says "Use in conjunction with GPPUDCLK0/1/2" but there is no GPPUDCLK2 register
Instead of "Up to 6 alternate function are" it should say "Up to 6 alternate functions are"
Instead of "a quick over view." it should say "a quick overview."
In the "BSCSL SDA / MOSI" row of the "Special function legend" table, it says "salve" instead of "slave"
Where it says "BSC ISP slave" it should actually say "BSC/SPI slave"
The table, legend for table 6-31, started on page 103 shows twice in red: TXD0, RXD0, CTS0, RTS0. The second block, with functions starting: UART 1 should be: TXD1, RXD1, CTS1, RTS1.
The table, legend for table 6-31, has no mention of any of the SD1_x functions included in the previous table
In table 6-32 the values in columns "min output freq" and "max output freq" should be in each others. That is the values in column "min output freq" are the maximum output frequency values and the values in column "max output freq" are the minimum output frequency values [check: source/(DIVI) > source/(DIVI+1) as dividing by a larger value yields a smaller result!].
The best source of clarification from overview to detailed operation is the i2s_test.c code written by Simon Hughes available here:
These comments are reproduces from the README file:
Introduction This test application is intended to present a simple to understand user space test application that can be used to control the output of the Raspberry PI I2S bus. See the i2s_test.c comments for detailed explanation.
There are a number of deficiencies with the main source of Raspberry Pi technical documentation (REF1) with regard to the I2S Bus:
- The PCM/I2S clock registers CM_PCM_CTRL and CM_PCM_DIV are not documented. - The Clock Manager (CM) clock source oscillator frequencies have not been documented (as they are selected by the board designer) - REF1 Sec 6.3 Table 6-32 equation for I2S_BCLK average output frequency (4th column) incorrectly documents 1024 as the divisor to DIVF rather than the correct value of 4096. Incorrect values of DIVI and DIVF to achieve a desired I2S_BCLK bit clock frequency are computed using the documented equation.
This had lead to a confusing picture. Therefore, the aim of this small test application project is to:
- provide a stand-alone, simple, working code sample that solves all the problems as a whole, so you can start using the Raspberry Pi I2S bus as quickly as possible. - provide references to documentation errata for the CM_PCM_CTRL and CM_PCM_DIV configuration registers. - provide a spreadsheet that shows you how to calculate the correct values of DIVI and DIVF to achieve the desired PCM_CLK/I2S_BLCK target frequency.
From the i2s_test.c header comments:
* REFERENCES * REF1 * BCM2835 ARM Peripherals 6 Feb 2012 Broadcom Europe * BCM2835-ARM-Peripherals.pdf * * REF2 * BCM2835_Audio_PWM_Clocks_errata_Geert_Van_Loo.doc which is images * captured from http://www.scribd.com/doc/127599939/BCM2835-Audio-clocks * * REF3 * http://raspberrypi.stackexchange.com/questions/1153/what-are-the-different- * clock-sources-for-the-general-purpose-clocks * * which reports the following: * 0 0 Hz Ground * 1 19.2 MHz oscillator * 2 0 Hz testdebug0 * 3 0 Hz testdebug1 * 4 0 Hz PLLA * 5 1000 MHz PLLC (changes with overclock settings) * 6 500 MHz PLLD * 7 216 MHz HDMI auxiliary * 8-15 0 Hz Ground * * The REF1 table 6-34 doesn't report the clock frequencies * * REF4 * i2s_test4_test_vector_vy.yy.xls computes values for test vectors * see docs dir for latest version
p107-108 table 6-35
Documentation relating to the PCM/I2S clock in missing. This is from Geert Van Loos at the page below:
There are two PCM/I2S clock control registers (Like with most peripherals)
CM_PCM_CTRL @ 0x7E101098 Enable bit = 4 Clock source is bits 3:0. I assume you want the cleanest clock source which is the XTAL (19.2MHz) crystal. (Clock source code = 0001b)
CM_PCM_DIV @ 0x7E10109C
The divider is split between an integer divider and a fractional (mashing) divider. The mashing dividers are build such that clock artifacts should be pushed out of the audio frequency domain. Bits 11:0 are the mashing divider Bits 23:12 are the integer divider. You must write the MS 8 bits as 0x5A.
See the errata under P105 and the following i2s_test.c code sample for detailed information:
top line: device should be devise.
Interrupt 62 is the interrupt from the Arasan EMMC controller. It's quite useful.
p113-115 register name duplication
The registers at offsets 0x200, 0x204 and 0x208 all have the identical name of "IRQ pend base"
p119 I2S clock
Allusions to the APB clock domain are made. However the exact speed of the APB clock is never explained.
http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.ddi0301h/Cbaifdib.html explains "APB" as the Advanced Peripheral Bus, but that doesn't help much either.
See the errata under P105 and the following i2s_test.c code sample for detailed information:
Perhaps "There is only PCM module in the BCM2835." is supposed to be "There is only one PCM module in the BCM2835." ?
There is amiguity on what register bits can be modified while the I2S system is active. p126 states that only the bottom three bits of CS_A can be modified. However p122 suggests to use the SYNC bit in CS_A for waiting. Does this mean, that the SYNC bit can also be changed at runtime as well?
The "good" algorithm in the box-out appears truncated:
1. Set context = 0 2. context = context + N 3. if (context >= M) context = context – M send 1 else
"the pwm algorithm explained in section 1.3." should probably be "the pwm algorithm explained in section 9.3."
There is no base address listed for this register block. Should be: 0x7E20C000
p142/143 register table
The CTL register controls both PWM channels 1 and 2, but in the description column, only channel 1 is mentioned. Bits 8 to 15, PWEN2 to MSEN2 should be described as controlling PWM channel 2, not 1. (I think- not confirmed)
p145 and 147
Instead of "... only the first PWM_RNGi bits are sent ..." it should say "... only the first PWM_DATi bits are sent ..." on both pages.
In the DAT2 Register synopsis "USEFi is 1" should be "USEFi is 0"
Typo: wrirng -> writing.
Near the bottom of the page RXR. This bit would be useful if it signified more than half full. There is a space in "( full)" that would hint at that the word "half" was taken away. Another hint is that it says that the bit clears when "sufficient" data is read from the FIFO. The word sufficient is redundant when this is the "full and active" bit.
The way it is written now, this bit is just the same as bit RXF, except that the TA bit is anded into this one.
Two options. The hardware was changed (detecting "half full" was difficult?) and the documentation was changed accordingly. Or the hardware does what I expect: set this bit when more than half full.
There is a CSPOL bit described here, wereas there are also CSPOL[0,1,2] described on page 153. How do these combine??? ( I dunno the official answer to this, but the community-written SPI drivers here and here set them both at the same time )
If CLEAR_TX_FIFO is set there is at least a slight chance (~4%) that a selected CS will get de-asserted for a short period of time (<63ns). This may happen every time this bit is set, but it is not measurable every time when sampling at 16MHz (higher sampling speeds would be needed to confirm that). Testing shows that CLEAR_RX_FIFO set alone does not exhibit such behavior.
Potential workaround is to assign CS as the "reserved" chip_select 3 and toggling the corresponding CSPOL pin for the cs that is really in use.
# assume the cs you want to set is in cs cs^=(1<<(cs&0x03+21); cs|=0x03|CLEAR_FIFO_RX|CLEAR_FIFO_TX; writel(cs,0x7E204000);
It is not fully confirmed, if this does not introduce other glitches...
The CDIV value is documented as "must be a power of 2". This is not true. I can perfectly set the register to 833 (not a power of 2) and get 250MHz/833 = 300kHz.
Maybe "must be a multiple of 2" was meant???
SPI_FIFO is misspelled as SPIFIFO in the last line of 10.6.2.
10.6.3: The presented flow works in principle. But there are some limitations:
- ADCS is required to be set (not optional as per j )- otherwise no SPI-Clock shows on pins
- also the "described" first 4 byte of the transfer described in l-i) also impact the other bits of CS besides the 8 bit that can get set with this transfer - so the CSPolarity for all 3 chip selects get reset to 0.
- TX/RX fifos have to be reset if there was an earlier transfer of say 3 bytes in length via DMA.
In this example there is still 1 byte left which will get sent first.
The way around this is to configure CS, CDIV and DLAN via explicit DMA control blocks and only then do the RX/TX DMAs (always making use of the WAIT_RESPONSE flag in the DMA config register!). Note that using TDMODE for setting LEN and CS in one transfer may result in a reordering of the writes, which will start the SPI device before the lenght is set, so the original register value is used. Note also that it is NOT recommended resetting FIFO while starting SPI by setting TA Flag in SPI_CS. Under rare situations this may result in "lost" clocks while MOSI still shifts out the data! (so resetting FIFO needs another DMA control-block prior to setting DLEN and CS)
"The BCS controller" should be "The BSC controller"
"The registers base addresses is" -> "The registers' base addresses are" or "The base address of the registers is".
p161, p162, p166
Multiple references to "FX FIFO" which should be "RX FIFO"
top line. Two typos:
On mini UART and and PL011 UART
One mini UART and one PL011 UART
13.4 register view
The PL011 USRT is mapped on base adderss
The PL011 UART is mapped on base address
The base address is listed as 0x7e20100 . This should be 0x7e201000.
SP804 not AP804
Top Unused bits should be 31:24 (not 31:10)
bit 1, 32 bit counter not 23 bit counter
typo: "BC2835M" should be "BCM2835"
neither are register 0x40C raw is 0x410, masked is 0x414
The last entry of section 15.1.
The entries in the table should specify the choice that Broadcom made when instantiating the USB controller IP from Synopsys.
Possibly the "choice" hasn't been specified. Or maybe the "0=32, 1..5=512, 6,7=768" is the option that was chosen?
"Video core bus structure" should be "VideoCore bus structure"
The table entry that says USB_MDIO_GEN should be USB_MDIO_DATA, and the table entry that says USB_VBUS_DRV should be USB_VBUS
The "Drive VBUS" and "Discharge VBUS" cells in the Description column of the USB_VBUS table should be the other way around. The Field Name values are correct.
Table 15-3 is mislabelled as "USB MDIO data". It should be "USB Vbus"