The maximum chunks used by the function is (SPI_AGGR_BUFFER_SIZE / WSPI_MAX_CHUNK_SIZE + 1). The original commands array had space for (SPI_AGGR_BUFFER_SIZE / WSPI_MAX_CHUNK_SIZE) commands. When the last chunk is used (len > 4 * WSPI_MAX_CHUNK_SIZE), the last command is stored outside the bounds of the commands array. Oops 5 (page fault) is generated during current wl1271 firmware load attempt: root@debian-armhf:~# ifconfig wlan0 up [ 294.312399] Unable to handle kernel paging request at virtual address 00203fc4 [ 294.320173] pgd = de528000 [ 294.323028] [00203fc4] *pgd=00000000 [ 294.326916] Internal error: Oops: 5 [#1] SMP ARM [ 294.331789] Modules linked in: bnep rfcomm bluetooth ipv6 arc4 wl12xx wlcore mac80211 musb_dsps cfg80211 musb_hdrc usbcore usb_common wlcore_spi omap_rng rng_core musb_am335x omap_wdt cpufreq_dt thermal_sys hwmon [ 294.351838] CPU: 0 PID: 1827 Comm: ifconfig Not tainted 4.2.0-00002-g3e9ad27-dirty #78 [ 294.360154] Hardware name: Generic AM33XX (Flattened Device Tree) [ 294.366557] task: dc9d6d40 ti: de550000 task.ti: de550000 [ 294.372236] PC is at __spi_validate+0xa8/0x2ac [ 294.376902] LR is at __spi_sync+0x78/0x210 [ 294.381200] pc : [<c049c760>] lr : [<c049ebe0>] psr: 60000013 [ 294.381200] sp : de551998 ip : de5519d8 fp : 00200000 [ 294.393242] r10: de551c8c r9 : de5519d8 r8 : de3a9000 [ 294.398730] r7 : de3a9258 r6 : de3a9400 r5 : de551a48 r4 : 00203fbc [ 294.405577] r3 : 00000000 r2 : 00000000 r1 : 00000000 r0 : de3a9000 [ 294.412420] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 294.419918] Control: 10c5387d Table: 9e528019 DAC: 00000015 [ 294.425954] Process ifconfig (pid: 1827, stack limit = 0xde550218) [ 294.432437] Stack: (0xde551998 to 0xde552000) ... [ 294.883613] [<c049c760>] (__spi_validate) from [<c049ebe0>] (__spi_sync+0x78/0x210) [ 294.891670] [<c049ebe0>] (__spi_sync) from [<bf036598>] (wl12xx_spi_raw_write+0xfc/0x148 [wlcore_spi]) [ 294.901661] [<bf036598>] (wl12xx_spi_raw_write [wlcore_spi]) from [<bf21c694>] (wlcore_boot_upload_firmware+0x1ec/0x458 [wlcore]) [ 294.914038] [<bf21c694>] (wlcore_boot_upload_firmware [wlcore]) from [<bf24532c>] (wl12xx_boot+0xc10/0xfac [wl12xx]) [ 294.925161] [<bf24532c>] (wl12xx_boot [wl12xx]) from [<bf20d5cc>] (wl1271_op_add_interface+0x5b0/0x910 [wlcore]) [ 294.936364] [<bf20d5cc>] (wl1271_op_add_interface [wlcore]) from [<bf15c4ac>] (ieee80211_do_open+0x44c/0xf7c [mac80211]) [ 294.947963] [<bf15c4ac>] (ieee80211_do_open [mac80211]) from [<c0537978>] (__dev_open+0xa8/0x110) [ 294.957307] [<c0537978>] (__dev_open) from [<c0537bf8>] (__dev_change_flags+0x88/0x148) [ 294.965713] [<c0537bf8>] (__dev_change_flags) from [<c0537cd0>] (dev_change_flags+0x18/0x48) [ 294.974576] [<c0537cd0>] (dev_change_flags) from [<c05a55a0>] (devinet_ioctl+0x6b4/0x7d0) [ 294.983191] [<c05a55a0>] (devinet_ioctl) from [<c0517040>] (sock_ioctl+0x1e4/0x2bc) [ 294.991244] [<c0517040>] (sock_ioctl) from [<c017d378>] (do_vfs_ioctl+0x420/0x6b0) [ 294.999208] [<c017d378>] (do_vfs_ioctl) from [<c017d674>] (SyS_ioctl+0x6c/0x7c) [ 295.006880] [<c017d674>] (SyS_ioctl) from [<c000f4c0>] (ret_fast_syscall+0x0/0x54) [ 295.014835] Code: e1550004 e2444034 0a00007d e5953018 (e5942008) [ 295.021544] ---[ end trace 66ed188198f4e24e ]--- Signed-off-by: Uri Mashiach <uri.mashiach@compulab.co.il> Acked-by: Igor Grinberg <grinberg@compulab.co.il> Cc: stable@vger.kernel.org Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
426 lines
9.9 KiB
C
426 lines
9.9 KiB
C
/*
|
|
* This file is part of wl1271
|
|
*
|
|
* Copyright (C) 2008-2009 Nokia Corporation
|
|
*
|
|
* Contact: Luciano Coelho <luciano.coelho@nokia.com>
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* version 2 as published by the Free Software Foundation.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
|
|
* 02110-1301 USA
|
|
*
|
|
*/
|
|
|
|
#include <linux/interrupt.h>
|
|
#include <linux/irq.h>
|
|
#include <linux/module.h>
|
|
#include <linux/slab.h>
|
|
#include <linux/swab.h>
|
|
#include <linux/crc7.h>
|
|
#include <linux/spi/spi.h>
|
|
#include <linux/wl12xx.h>
|
|
#include <linux/platform_device.h>
|
|
|
|
#include "wlcore.h"
|
|
#include "wl12xx_80211.h"
|
|
#include "io.h"
|
|
|
|
#define WSPI_CMD_READ 0x40000000
|
|
#define WSPI_CMD_WRITE 0x00000000
|
|
#define WSPI_CMD_FIXED 0x20000000
|
|
#define WSPI_CMD_BYTE_LENGTH 0x1FFE0000
|
|
#define WSPI_CMD_BYTE_LENGTH_OFFSET 17
|
|
#define WSPI_CMD_BYTE_ADDR 0x0001FFFF
|
|
|
|
#define WSPI_INIT_CMD_CRC_LEN 5
|
|
|
|
#define WSPI_INIT_CMD_START 0x00
|
|
#define WSPI_INIT_CMD_TX 0x40
|
|
/* the extra bypass bit is sampled by the TNET as '1' */
|
|
#define WSPI_INIT_CMD_BYPASS_BIT 0x80
|
|
#define WSPI_INIT_CMD_FIXEDBUSY_LEN 0x07
|
|
#define WSPI_INIT_CMD_EN_FIXEDBUSY 0x80
|
|
#define WSPI_INIT_CMD_DIS_FIXEDBUSY 0x00
|
|
#define WSPI_INIT_CMD_IOD 0x40
|
|
#define WSPI_INIT_CMD_IP 0x20
|
|
#define WSPI_INIT_CMD_CS 0x10
|
|
#define WSPI_INIT_CMD_WS 0x08
|
|
#define WSPI_INIT_CMD_WSPI 0x01
|
|
#define WSPI_INIT_CMD_END 0x01
|
|
|
|
#define WSPI_INIT_CMD_LEN 8
|
|
|
|
#define HW_ACCESS_WSPI_FIXED_BUSY_LEN \
|
|
((WL1271_BUSY_WORD_LEN - 4) / sizeof(u32))
|
|
#define HW_ACCESS_WSPI_INIT_CMD_MASK 0
|
|
|
|
/* HW limitation: maximum possible chunk size is 4095 bytes */
|
|
#define WSPI_MAX_CHUNK_SIZE 4092
|
|
|
|
/*
|
|
* only support SPI for 12xx - this code should be reworked when 18xx
|
|
* support is introduced
|
|
*/
|
|
#define SPI_AGGR_BUFFER_SIZE (4 * PAGE_SIZE)
|
|
|
|
/* Maximum number of SPI write chunks */
|
|
#define WSPI_MAX_NUM_OF_CHUNKS \
|
|
((SPI_AGGR_BUFFER_SIZE / WSPI_MAX_CHUNK_SIZE) + 1)
|
|
|
|
|
|
struct wl12xx_spi_glue {
|
|
struct device *dev;
|
|
struct platform_device *core;
|
|
};
|
|
|
|
static void wl12xx_spi_reset(struct device *child)
|
|
{
|
|
struct wl12xx_spi_glue *glue = dev_get_drvdata(child->parent);
|
|
u8 *cmd;
|
|
struct spi_transfer t;
|
|
struct spi_message m;
|
|
|
|
cmd = kzalloc(WSPI_INIT_CMD_LEN, GFP_KERNEL);
|
|
if (!cmd) {
|
|
dev_err(child->parent,
|
|
"could not allocate cmd for spi reset\n");
|
|
return;
|
|
}
|
|
|
|
memset(&t, 0, sizeof(t));
|
|
spi_message_init(&m);
|
|
|
|
memset(cmd, 0xff, WSPI_INIT_CMD_LEN);
|
|
|
|
t.tx_buf = cmd;
|
|
t.len = WSPI_INIT_CMD_LEN;
|
|
spi_message_add_tail(&t, &m);
|
|
|
|
spi_sync(to_spi_device(glue->dev), &m);
|
|
|
|
kfree(cmd);
|
|
}
|
|
|
|
static void wl12xx_spi_init(struct device *child)
|
|
{
|
|
struct wl12xx_spi_glue *glue = dev_get_drvdata(child->parent);
|
|
struct spi_transfer t;
|
|
struct spi_message m;
|
|
u8 *cmd = kzalloc(WSPI_INIT_CMD_LEN, GFP_KERNEL);
|
|
|
|
if (!cmd) {
|
|
dev_err(child->parent,
|
|
"could not allocate cmd for spi init\n");
|
|
return;
|
|
}
|
|
|
|
memset(&t, 0, sizeof(t));
|
|
spi_message_init(&m);
|
|
|
|
/*
|
|
* Set WSPI_INIT_COMMAND
|
|
* the data is being send from the MSB to LSB
|
|
*/
|
|
cmd[0] = 0xff;
|
|
cmd[1] = 0xff;
|
|
cmd[2] = WSPI_INIT_CMD_START | WSPI_INIT_CMD_TX;
|
|
cmd[3] = 0;
|
|
cmd[4] = 0;
|
|
cmd[5] = HW_ACCESS_WSPI_INIT_CMD_MASK << 3;
|
|
cmd[5] |= HW_ACCESS_WSPI_FIXED_BUSY_LEN & WSPI_INIT_CMD_FIXEDBUSY_LEN;
|
|
|
|
cmd[6] = WSPI_INIT_CMD_IOD | WSPI_INIT_CMD_IP | WSPI_INIT_CMD_CS
|
|
| WSPI_INIT_CMD_WSPI | WSPI_INIT_CMD_WS;
|
|
|
|
if (HW_ACCESS_WSPI_FIXED_BUSY_LEN == 0)
|
|
cmd[6] |= WSPI_INIT_CMD_DIS_FIXEDBUSY;
|
|
else
|
|
cmd[6] |= WSPI_INIT_CMD_EN_FIXEDBUSY;
|
|
|
|
cmd[7] = crc7_be(0, cmd+2, WSPI_INIT_CMD_CRC_LEN) | WSPI_INIT_CMD_END;
|
|
/*
|
|
* The above is the logical order; it must actually be stored
|
|
* in the buffer byte-swapped.
|
|
*/
|
|
__swab32s((u32 *)cmd);
|
|
__swab32s((u32 *)cmd+1);
|
|
|
|
t.tx_buf = cmd;
|
|
t.len = WSPI_INIT_CMD_LEN;
|
|
spi_message_add_tail(&t, &m);
|
|
|
|
spi_sync(to_spi_device(glue->dev), &m);
|
|
kfree(cmd);
|
|
}
|
|
|
|
#define WL1271_BUSY_WORD_TIMEOUT 1000
|
|
|
|
static int wl12xx_spi_read_busy(struct device *child)
|
|
{
|
|
struct wl12xx_spi_glue *glue = dev_get_drvdata(child->parent);
|
|
struct wl1271 *wl = dev_get_drvdata(child);
|
|
struct spi_transfer t[1];
|
|
struct spi_message m;
|
|
u32 *busy_buf;
|
|
int num_busy_bytes = 0;
|
|
|
|
/*
|
|
* Read further busy words from SPI until a non-busy word is
|
|
* encountered, then read the data itself into the buffer.
|
|
*/
|
|
|
|
num_busy_bytes = WL1271_BUSY_WORD_TIMEOUT;
|
|
busy_buf = wl->buffer_busyword;
|
|
while (num_busy_bytes) {
|
|
num_busy_bytes--;
|
|
spi_message_init(&m);
|
|
memset(t, 0, sizeof(t));
|
|
t[0].rx_buf = busy_buf;
|
|
t[0].len = sizeof(u32);
|
|
t[0].cs_change = true;
|
|
spi_message_add_tail(&t[0], &m);
|
|
spi_sync(to_spi_device(glue->dev), &m);
|
|
|
|
if (*busy_buf & 0x1)
|
|
return 0;
|
|
}
|
|
|
|
/* The SPI bus is unresponsive, the read failed. */
|
|
dev_err(child->parent, "SPI read busy-word timeout!\n");
|
|
return -ETIMEDOUT;
|
|
}
|
|
|
|
static int __must_check wl12xx_spi_raw_read(struct device *child, int addr,
|
|
void *buf, size_t len, bool fixed)
|
|
{
|
|
struct wl12xx_spi_glue *glue = dev_get_drvdata(child->parent);
|
|
struct wl1271 *wl = dev_get_drvdata(child);
|
|
struct spi_transfer t[2];
|
|
struct spi_message m;
|
|
u32 *busy_buf;
|
|
u32 *cmd;
|
|
u32 chunk_len;
|
|
|
|
while (len > 0) {
|
|
chunk_len = min_t(size_t, WSPI_MAX_CHUNK_SIZE, len);
|
|
|
|
cmd = &wl->buffer_cmd;
|
|
busy_buf = wl->buffer_busyword;
|
|
|
|
*cmd = 0;
|
|
*cmd |= WSPI_CMD_READ;
|
|
*cmd |= (chunk_len << WSPI_CMD_BYTE_LENGTH_OFFSET) &
|
|
WSPI_CMD_BYTE_LENGTH;
|
|
*cmd |= addr & WSPI_CMD_BYTE_ADDR;
|
|
|
|
if (fixed)
|
|
*cmd |= WSPI_CMD_FIXED;
|
|
|
|
spi_message_init(&m);
|
|
memset(t, 0, sizeof(t));
|
|
|
|
t[0].tx_buf = cmd;
|
|
t[0].len = 4;
|
|
t[0].cs_change = true;
|
|
spi_message_add_tail(&t[0], &m);
|
|
|
|
/* Busy and non busy words read */
|
|
t[1].rx_buf = busy_buf;
|
|
t[1].len = WL1271_BUSY_WORD_LEN;
|
|
t[1].cs_change = true;
|
|
spi_message_add_tail(&t[1], &m);
|
|
|
|
spi_sync(to_spi_device(glue->dev), &m);
|
|
|
|
if (!(busy_buf[WL1271_BUSY_WORD_CNT - 1] & 0x1) &&
|
|
wl12xx_spi_read_busy(child)) {
|
|
memset(buf, 0, chunk_len);
|
|
return 0;
|
|
}
|
|
|
|
spi_message_init(&m);
|
|
memset(t, 0, sizeof(t));
|
|
|
|
t[0].rx_buf = buf;
|
|
t[0].len = chunk_len;
|
|
t[0].cs_change = true;
|
|
spi_message_add_tail(&t[0], &m);
|
|
|
|
spi_sync(to_spi_device(glue->dev), &m);
|
|
|
|
if (!fixed)
|
|
addr += chunk_len;
|
|
buf += chunk_len;
|
|
len -= chunk_len;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int __must_check wl12xx_spi_raw_write(struct device *child, int addr,
|
|
void *buf, size_t len, bool fixed)
|
|
{
|
|
struct wl12xx_spi_glue *glue = dev_get_drvdata(child->parent);
|
|
/* SPI write buffers - 2 for each chunk */
|
|
struct spi_transfer t[2 * WSPI_MAX_NUM_OF_CHUNKS];
|
|
struct spi_message m;
|
|
u32 commands[WSPI_MAX_NUM_OF_CHUNKS]; /* 1 command per chunk */
|
|
u32 *cmd;
|
|
u32 chunk_len;
|
|
int i;
|
|
|
|
WARN_ON(len > SPI_AGGR_BUFFER_SIZE);
|
|
|
|
spi_message_init(&m);
|
|
memset(t, 0, sizeof(t));
|
|
|
|
cmd = &commands[0];
|
|
i = 0;
|
|
while (len > 0) {
|
|
chunk_len = min_t(size_t, WSPI_MAX_CHUNK_SIZE, len);
|
|
|
|
*cmd = 0;
|
|
*cmd |= WSPI_CMD_WRITE;
|
|
*cmd |= (chunk_len << WSPI_CMD_BYTE_LENGTH_OFFSET) &
|
|
WSPI_CMD_BYTE_LENGTH;
|
|
*cmd |= addr & WSPI_CMD_BYTE_ADDR;
|
|
|
|
if (fixed)
|
|
*cmd |= WSPI_CMD_FIXED;
|
|
|
|
t[i].tx_buf = cmd;
|
|
t[i].len = sizeof(*cmd);
|
|
spi_message_add_tail(&t[i++], &m);
|
|
|
|
t[i].tx_buf = buf;
|
|
t[i].len = chunk_len;
|
|
spi_message_add_tail(&t[i++], &m);
|
|
|
|
if (!fixed)
|
|
addr += chunk_len;
|
|
buf += chunk_len;
|
|
len -= chunk_len;
|
|
cmd++;
|
|
}
|
|
|
|
spi_sync(to_spi_device(glue->dev), &m);
|
|
|
|
return 0;
|
|
}
|
|
|
|
static struct wl1271_if_operations spi_ops = {
|
|
.read = wl12xx_spi_raw_read,
|
|
.write = wl12xx_spi_raw_write,
|
|
.reset = wl12xx_spi_reset,
|
|
.init = wl12xx_spi_init,
|
|
.set_block_size = NULL,
|
|
};
|
|
|
|
static int wl1271_probe(struct spi_device *spi)
|
|
{
|
|
struct wl12xx_spi_glue *glue;
|
|
struct wlcore_platdev_data pdev_data;
|
|
struct resource res[1];
|
|
int ret;
|
|
|
|
memset(&pdev_data, 0x00, sizeof(pdev_data));
|
|
|
|
/* TODO: add DT parsing when needed */
|
|
|
|
pdev_data.if_ops = &spi_ops;
|
|
|
|
glue = devm_kzalloc(&spi->dev, sizeof(*glue), GFP_KERNEL);
|
|
if (!glue) {
|
|
dev_err(&spi->dev, "can't allocate glue\n");
|
|
return -ENOMEM;
|
|
}
|
|
|
|
glue->dev = &spi->dev;
|
|
|
|
spi_set_drvdata(spi, glue);
|
|
|
|
/* This is the only SPI value that we need to set here, the rest
|
|
* comes from the board-peripherals file */
|
|
spi->bits_per_word = 32;
|
|
|
|
ret = spi_setup(spi);
|
|
if (ret < 0) {
|
|
dev_err(glue->dev, "spi_setup failed\n");
|
|
return ret;
|
|
}
|
|
|
|
glue->core = platform_device_alloc("wl12xx", PLATFORM_DEVID_AUTO);
|
|
if (!glue->core) {
|
|
dev_err(glue->dev, "can't allocate platform_device\n");
|
|
return -ENOMEM;
|
|
}
|
|
|
|
glue->core->dev.parent = &spi->dev;
|
|
|
|
memset(res, 0x00, sizeof(res));
|
|
|
|
res[0].start = spi->irq;
|
|
res[0].flags = IORESOURCE_IRQ;
|
|
res[0].name = "irq";
|
|
|
|
ret = platform_device_add_resources(glue->core, res, ARRAY_SIZE(res));
|
|
if (ret) {
|
|
dev_err(glue->dev, "can't add resources\n");
|
|
goto out_dev_put;
|
|
}
|
|
|
|
ret = platform_device_add_data(glue->core, &pdev_data,
|
|
sizeof(pdev_data));
|
|
if (ret) {
|
|
dev_err(glue->dev, "can't add platform data\n");
|
|
goto out_dev_put;
|
|
}
|
|
|
|
ret = platform_device_add(glue->core);
|
|
if (ret) {
|
|
dev_err(glue->dev, "can't register platform device\n");
|
|
goto out_dev_put;
|
|
}
|
|
|
|
return 0;
|
|
|
|
out_dev_put:
|
|
platform_device_put(glue->core);
|
|
return ret;
|
|
}
|
|
|
|
static int wl1271_remove(struct spi_device *spi)
|
|
{
|
|
struct wl12xx_spi_glue *glue = spi_get_drvdata(spi);
|
|
|
|
platform_device_unregister(glue->core);
|
|
|
|
return 0;
|
|
}
|
|
|
|
|
|
static struct spi_driver wl1271_spi_driver = {
|
|
.driver = {
|
|
.name = "wl1271_spi",
|
|
},
|
|
|
|
.probe = wl1271_probe,
|
|
.remove = wl1271_remove,
|
|
};
|
|
|
|
module_spi_driver(wl1271_spi_driver);
|
|
MODULE_LICENSE("GPL");
|
|
MODULE_AUTHOR("Luciano Coelho <coelho@ti.com>");
|
|
MODULE_AUTHOR("Juuso Oikarinen <juuso.oikarinen@nokia.com>");
|
|
MODULE_ALIAS("spi:wl1271");
|