1 /*
2  * NXP TDA10071 + Conexant CX24118A DVB-S/S2 demodulator + tuner driver
3  *
4  * Copyright (C) 2011 Antti Palosaari <crope@iki.fi>
5  *
6  *    This program is free software; you can redistribute it and/or modify
7  *    it under the terms of the GNU General Public License as published by
8  *    the Free Software Foundation; either version 2 of the License, or
9  *    (at your option) any later version.
10  *
11  *    This program is distributed in the hope that it will be useful,
12  *    but WITHOUT ANY WARRANTY; without even the implied warranty of
13  *    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
14  *    GNU General Public License for more details.
15  *
16  *    You should have received a copy of the GNU General Public License along
17  *    with this program; if not, write to the Free Software Foundation, Inc.,
18  *    51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
19  */
20 
21 #include "tda10071_priv.h"
22 
23 /* Max transfer size done by I2C transfer functions */
24 #define MAX_XFER_SIZE  64
25 
26 static struct dvb_frontend_ops tda10071_ops;
27 
28 /* write multiple registers */
29 static int tda10071_wr_regs(struct tda10071_priv *priv, u8 reg, u8 *val,
30 	int len)
31 {
32 	int ret;
33 	u8 buf[MAX_XFER_SIZE];
34 	struct i2c_msg msg[1] = {
35 		{
36 			.addr = priv->cfg.demod_i2c_addr,
37 			.flags = 0,
38 			.len = 1 + len,
39 			.buf = buf,
40 		}
41 	};
42 
43 	if (1 + len > sizeof(buf)) {
44 		dev_warn(&priv->i2c->dev,
45 			 "%s: i2c wr reg=%04x: len=%d is too big!\n",
46 			 KBUILD_MODNAME, reg, len);
47 		return -EINVAL;
48 	}
49 
50 	buf[0] = reg;
51 	memcpy(&buf[1], val, len);
52 
53 	ret = i2c_transfer(priv->i2c, msg, 1);
54 	if (ret == 1) {
55 		ret = 0;
56 	} else {
57 		dev_warn(&priv->i2c->dev, "%s: i2c wr failed=%d reg=%02x " \
58 				"len=%d\n", KBUILD_MODNAME, ret, reg, len);
59 		ret = -EREMOTEIO;
60 	}
61 	return ret;
62 }
63 
64 /* read multiple registers */
65 static int tda10071_rd_regs(struct tda10071_priv *priv, u8 reg, u8 *val,
66 	int len)
67 {
68 	int ret;
69 	u8 buf[MAX_XFER_SIZE];
70 	struct i2c_msg msg[2] = {
71 		{
72 			.addr = priv->cfg.demod_i2c_addr,
73 			.flags = 0,
74 			.len = 1,
75 			.buf = &reg,
76 		}, {
77 			.addr = priv->cfg.demod_i2c_addr,
78 			.flags = I2C_M_RD,
79 			.len = len,
80 			.buf = buf,
81 		}
82 	};
83 
84 	if (len > sizeof(buf)) {
85 		dev_warn(&priv->i2c->dev,
86 			 "%s: i2c wr reg=%04x: len=%d is too big!\n",
87 			 KBUILD_MODNAME, reg, len);
88 		return -EINVAL;
89 	}
90 
91 	ret = i2c_transfer(priv->i2c, msg, 2);
92 	if (ret == 2) {
93 		memcpy(val, buf, len);
94 		ret = 0;
95 	} else {
96 		dev_warn(&priv->i2c->dev, "%s: i2c rd failed=%d reg=%02x " \
97 				"len=%d\n", KBUILD_MODNAME, ret, reg, len);
98 		ret = -EREMOTEIO;
99 	}
100 	return ret;
101 }
102 
103 /* write single register */
104 static int tda10071_wr_reg(struct tda10071_priv *priv, u8 reg, u8 val)
105 {
106 	return tda10071_wr_regs(priv, reg, &val, 1);
107 }
108 
109 /* read single register */
110 static int tda10071_rd_reg(struct tda10071_priv *priv, u8 reg, u8 *val)
111 {
112 	return tda10071_rd_regs(priv, reg, val, 1);
113 }
114 
115 /* write single register with mask */
116 static int tda10071_wr_reg_mask(struct tda10071_priv *priv,
117 				u8 reg, u8 val, u8 mask)
118 {
119 	int ret;
120 	u8 tmp;
121 
122 	/* no need for read if whole reg is written */
123 	if (mask != 0xff) {
124 		ret = tda10071_rd_regs(priv, reg, &tmp, 1);
125 		if (ret)
126 			return ret;
127 
128 		val &= mask;
129 		tmp &= ~mask;
130 		val |= tmp;
131 	}
132 
133 	return tda10071_wr_regs(priv, reg, &val, 1);
134 }
135 
136 /* read single register with mask */
137 static int tda10071_rd_reg_mask(struct tda10071_priv *priv,
138 				u8 reg, u8 *val, u8 mask)
139 {
140 	int ret, i;
141 	u8 tmp;
142 
143 	ret = tda10071_rd_regs(priv, reg, &tmp, 1);
144 	if (ret)
145 		return ret;
146 
147 	tmp &= mask;
148 
149 	/* find position of the first bit */
150 	for (i = 0; i < 8; i++) {
151 		if ((mask >> i) & 0x01)
152 			break;
153 	}
154 	*val = tmp >> i;
155 
156 	return 0;
157 }
158 
159 /* execute firmware command */
160 static int tda10071_cmd_execute(struct tda10071_priv *priv,
161 	struct tda10071_cmd *cmd)
162 {
163 	int ret, i;
164 	u8 tmp;
165 
166 	if (!priv->warm) {
167 		ret = -EFAULT;
168 		goto error;
169 	}
170 
171 	/* write cmd and args for firmware */
172 	ret = tda10071_wr_regs(priv, 0x00, cmd->args, cmd->len);
173 	if (ret)
174 		goto error;
175 
176 	/* start cmd execution */
177 	ret = tda10071_wr_reg(priv, 0x1f, 1);
178 	if (ret)
179 		goto error;
180 
181 	/* wait cmd execution terminate */
182 	for (i = 1000, tmp = 1; i && tmp; i--) {
183 		ret = tda10071_rd_reg(priv, 0x1f, &tmp);
184 		if (ret)
185 			goto error;
186 
187 		usleep_range(200, 5000);
188 	}
189 
190 	dev_dbg(&priv->i2c->dev, "%s: loop=%d\n", __func__, i);
191 
192 	if (i == 0) {
193 		ret = -ETIMEDOUT;
194 		goto error;
195 	}
196 
197 	return ret;
198 error:
199 	dev_dbg(&priv->i2c->dev, "%s: failed=%d\n", __func__, ret);
200 	return ret;
201 }
202 
203 static int tda10071_set_tone(struct dvb_frontend *fe,
204 	fe_sec_tone_mode_t fe_sec_tone_mode)
205 {
206 	struct tda10071_priv *priv = fe->demodulator_priv;
207 	struct tda10071_cmd cmd;
208 	int ret;
209 	u8 tone;
210 
211 	if (!priv->warm) {
212 		ret = -EFAULT;
213 		goto error;
214 	}
215 
216 	dev_dbg(&priv->i2c->dev, "%s: tone_mode=%d\n", __func__,
217 			fe_sec_tone_mode);
218 
219 	switch (fe_sec_tone_mode) {
220 	case SEC_TONE_ON:
221 		tone = 1;
222 		break;
223 	case SEC_TONE_OFF:
224 		tone = 0;
225 		break;
226 	default:
227 		dev_dbg(&priv->i2c->dev, "%s: invalid fe_sec_tone_mode\n",
228 				__func__);
229 		ret = -EINVAL;
230 		goto error;
231 	}
232 
233 	cmd.args[0] = CMD_LNB_PCB_CONFIG;
234 	cmd.args[1] = 0;
235 	cmd.args[2] = 0x00;
236 	cmd.args[3] = 0x00;
237 	cmd.args[4] = tone;
238 	cmd.len = 5;
239 	ret = tda10071_cmd_execute(priv, &cmd);
240 	if (ret)
241 		goto error;
242 
243 	return ret;
244 error:
245 	dev_dbg(&priv->i2c->dev, "%s: failed=%d\n", __func__, ret);
246 	return ret;
247 }
248 
249 static int tda10071_set_voltage(struct dvb_frontend *fe,
250 	fe_sec_voltage_t fe_sec_voltage)
251 {
252 	struct tda10071_priv *priv = fe->demodulator_priv;
253 	struct tda10071_cmd cmd;
254 	int ret;
255 	u8 voltage;
256 
257 	if (!priv->warm) {
258 		ret = -EFAULT;
259 		goto error;
260 	}
261 
262 	dev_dbg(&priv->i2c->dev, "%s: voltage=%d\n", __func__, fe_sec_voltage);
263 
264 	switch (fe_sec_voltage) {
265 	case SEC_VOLTAGE_13:
266 		voltage = 0;
267 		break;
268 	case SEC_VOLTAGE_18:
269 		voltage = 1;
270 		break;
271 	case SEC_VOLTAGE_OFF:
272 		voltage = 0;
273 		break;
274 	default:
275 		dev_dbg(&priv->i2c->dev, "%s: invalid fe_sec_voltage\n",
276 				__func__);
277 		ret = -EINVAL;
278 		goto error;
279 	}
280 
281 	cmd.args[0] = CMD_LNB_SET_DC_LEVEL;
282 	cmd.args[1] = 0;
283 	cmd.args[2] = voltage;
284 	cmd.len = 3;
285 	ret = tda10071_cmd_execute(priv, &cmd);
286 	if (ret)
287 		goto error;
288 
289 	return ret;
290 error:
291 	dev_dbg(&priv->i2c->dev, "%s: failed=%d\n", __func__, ret);
292 	return ret;
293 }
294 
295 static int tda10071_diseqc_send_master_cmd(struct dvb_frontend *fe,
296 	struct dvb_diseqc_master_cmd *diseqc_cmd)
297 {
298 	struct tda10071_priv *priv = fe->demodulator_priv;
299 	struct tda10071_cmd cmd;
300 	int ret, i;
301 	u8 tmp;
302 
303 	if (!priv->warm) {
304 		ret = -EFAULT;
305 		goto error;
306 	}
307 
308 	dev_dbg(&priv->i2c->dev, "%s: msg_len=%d\n", __func__,
309 			diseqc_cmd->msg_len);
310 
311 	if (diseqc_cmd->msg_len < 3 || diseqc_cmd->msg_len > 6) {
312 		ret = -EINVAL;
313 		goto error;
314 	}
315 
316 	/* wait LNB TX */
317 	for (i = 500, tmp = 0; i && !tmp; i--) {
318 		ret = tda10071_rd_reg_mask(priv, 0x47, &tmp, 0x01);
319 		if (ret)
320 			goto error;
321 
322 		usleep_range(10000, 20000);
323 	}
324 
325 	dev_dbg(&priv->i2c->dev, "%s: loop=%d\n", __func__, i);
326 
327 	if (i == 0) {
328 		ret = -ETIMEDOUT;
329 		goto error;
330 	}
331 
332 	ret = tda10071_wr_reg_mask(priv, 0x47, 0x00, 0x01);
333 	if (ret)
334 		goto error;
335 
336 	cmd.args[0] = CMD_LNB_SEND_DISEQC;
337 	cmd.args[1] = 0;
338 	cmd.args[2] = 0;
339 	cmd.args[3] = 0;
340 	cmd.args[4] = 2;
341 	cmd.args[5] = 0;
342 	cmd.args[6] = diseqc_cmd->msg_len;
343 	memcpy(&cmd.args[7], diseqc_cmd->msg, diseqc_cmd->msg_len);
344 	cmd.len = 7 + diseqc_cmd->msg_len;
345 	ret = tda10071_cmd_execute(priv, &cmd);
346 	if (ret)
347 		goto error;
348 
349 	return ret;
350 error:
351 	dev_dbg(&priv->i2c->dev, "%s: failed=%d\n", __func__, ret);
352 	return ret;
353 }
354 
355 static int tda10071_diseqc_recv_slave_reply(struct dvb_frontend *fe,
356 	struct dvb_diseqc_slave_reply *reply)
357 {
358 	struct tda10071_priv *priv = fe->demodulator_priv;
359 	struct tda10071_cmd cmd;
360 	int ret, i;
361 	u8 tmp;
362 
363 	if (!priv->warm) {
364 		ret = -EFAULT;
365 		goto error;
366 	}
367 
368 	dev_dbg(&priv->i2c->dev, "%s:\n", __func__);
369 
370 	/* wait LNB RX */
371 	for (i = 500, tmp = 0; i && !tmp; i--) {
372 		ret = tda10071_rd_reg_mask(priv, 0x47, &tmp, 0x02);
373 		if (ret)
374 			goto error;
375 
376 		usleep_range(10000, 20000);
377 	}
378 
379 	dev_dbg(&priv->i2c->dev, "%s: loop=%d\n", __func__, i);
380 
381 	if (i == 0) {
382 		ret = -ETIMEDOUT;
383 		goto error;
384 	}
385 
386 	/* reply len */
387 	ret = tda10071_rd_reg(priv, 0x46, &tmp);
388 	if (ret)
389 		goto error;
390 
391 	reply->msg_len = tmp & 0x1f; /* [4:0] */
392 	if (reply->msg_len > sizeof(reply->msg))
393 		reply->msg_len = sizeof(reply->msg); /* truncate API max */
394 
395 	/* read reply */
396 	cmd.args[0] = CMD_LNB_UPDATE_REPLY;
397 	cmd.args[1] = 0;
398 	cmd.len = 2;
399 	ret = tda10071_cmd_execute(priv, &cmd);
400 	if (ret)
401 		goto error;
402 
403 	ret = tda10071_rd_regs(priv, cmd.len, reply->msg, reply->msg_len);
404 	if (ret)
405 		goto error;
406 
407 	return ret;
408 error:
409 	dev_dbg(&priv->i2c->dev, "%s: failed=%d\n", __func__, ret);
410 	return ret;
411 }
412 
413 static int tda10071_diseqc_send_burst(struct dvb_frontend *fe,
414 	fe_sec_mini_cmd_t fe_sec_mini_cmd)
415 {
416 	struct tda10071_priv *priv = fe->demodulator_priv;
417 	struct tda10071_cmd cmd;
418 	int ret, i;
419 	u8 tmp, burst;
420 
421 	if (!priv->warm) {
422 		ret = -EFAULT;
423 		goto error;
424 	}
425 
426 	dev_dbg(&priv->i2c->dev, "%s: fe_sec_mini_cmd=%d\n", __func__,
427 			fe_sec_mini_cmd);
428 
429 	switch (fe_sec_mini_cmd) {
430 	case SEC_MINI_A:
431 		burst = 0;
432 		break;
433 	case SEC_MINI_B:
434 		burst = 1;
435 		break;
436 	default:
437 		dev_dbg(&priv->i2c->dev, "%s: invalid fe_sec_mini_cmd\n",
438 				__func__);
439 		ret = -EINVAL;
440 		goto error;
441 	}
442 
443 	/* wait LNB TX */
444 	for (i = 500, tmp = 0; i && !tmp; i--) {
445 		ret = tda10071_rd_reg_mask(priv, 0x47, &tmp, 0x01);
446 		if (ret)
447 			goto error;
448 
449 		usleep_range(10000, 20000);
450 	}
451 
452 	dev_dbg(&priv->i2c->dev, "%s: loop=%d\n", __func__, i);
453 
454 	if (i == 0) {
455 		ret = -ETIMEDOUT;
456 		goto error;
457 	}
458 
459 	ret = tda10071_wr_reg_mask(priv, 0x47, 0x00, 0x01);
460 	if (ret)
461 		goto error;
462 
463 	cmd.args[0] = CMD_LNB_SEND_TONEBURST;
464 	cmd.args[1] = 0;
465 	cmd.args[2] = burst;
466 	cmd.len = 3;
467 	ret = tda10071_cmd_execute(priv, &cmd);
468 	if (ret)
469 		goto error;
470 
471 	return ret;
472 error:
473 	dev_dbg(&priv->i2c->dev, "%s: failed=%d\n", __func__, ret);
474 	return ret;
475 }
476 
477 static int tda10071_read_status(struct dvb_frontend *fe, fe_status_t *status)
478 {
479 	struct tda10071_priv *priv = fe->demodulator_priv;
480 	int ret;
481 	u8 tmp;
482 
483 	*status = 0;
484 
485 	if (!priv->warm) {
486 		ret = 0;
487 		goto error;
488 	}
489 
490 	ret = tda10071_rd_reg(priv, 0x39, &tmp);
491 	if (ret)
492 		goto error;
493 
494 	if (tmp & 0x01) /* tuner PLL */
495 		*status |= FE_HAS_SIGNAL;
496 	if (tmp & 0x02) /* demod PLL */
497 		*status |= FE_HAS_CARRIER;
498 	if (tmp & 0x04) /* viterbi or LDPC*/
499 		*status |= FE_HAS_VITERBI;
500 	if (tmp & 0x08) /* RS or BCH */
501 		*status |= FE_HAS_SYNC | FE_HAS_LOCK;
502 
503 	priv->fe_status = *status;
504 
505 	return ret;
506 error:
507 	dev_dbg(&priv->i2c->dev, "%s: failed=%d\n", __func__, ret);
508 	return ret;
509 }
510 
511 static int tda10071_read_snr(struct dvb_frontend *fe, u16 *snr)
512 {
513 	struct tda10071_priv *priv = fe->demodulator_priv;
514 	int ret;
515 	u8 buf[2];
516 
517 	if (!priv->warm || !(priv->fe_status & FE_HAS_LOCK)) {
518 		*snr = 0;
519 		ret = 0;
520 		goto error;
521 	}
522 
523 	ret = tda10071_rd_regs(priv, 0x3a, buf, 2);
524 	if (ret)
525 		goto error;
526 
527 	/* Es/No dBx10 */
528 	*snr = buf[0] << 8 | buf[1];
529 
530 	return ret;
531 error:
532 	dev_dbg(&priv->i2c->dev, "%s: failed=%d\n", __func__, ret);
533 	return ret;
534 }
535 
536 static int tda10071_read_signal_strength(struct dvb_frontend *fe, u16 *strength)
537 {
538 	struct tda10071_priv *priv = fe->demodulator_priv;
539 	struct tda10071_cmd cmd;
540 	int ret;
541 	u8 tmp;
542 
543 	if (!priv->warm || !(priv->fe_status & FE_HAS_LOCK)) {
544 		*strength = 0;
545 		ret = 0;
546 		goto error;
547 	}
548 
549 	cmd.args[0] = CMD_GET_AGCACC;
550 	cmd.args[1] = 0;
551 	cmd.len = 2;
552 	ret = tda10071_cmd_execute(priv, &cmd);
553 	if (ret)
554 		goto error;
555 
556 	/* input power estimate dBm */
557 	ret = tda10071_rd_reg(priv, 0x50, &tmp);
558 	if (ret)
559 		goto error;
560 
561 	if (tmp < 181)
562 		tmp = 181; /* -75 dBm */
563 	else if (tmp > 236)
564 		tmp = 236; /* -20 dBm */
565 
566 	/* scale value to 0x0000-0xffff */
567 	*strength = (tmp-181) * 0xffff / (236-181);
568 
569 	return ret;
570 error:
571 	dev_dbg(&priv->i2c->dev, "%s: failed=%d\n", __func__, ret);
572 	return ret;
573 }
574 
575 static int tda10071_read_ber(struct dvb_frontend *fe, u32 *ber)
576 {
577 	struct tda10071_priv *priv = fe->demodulator_priv;
578 	struct tda10071_cmd cmd;
579 	int ret, i, len;
580 	u8 tmp, reg, buf[8];
581 
582 	if (!priv->warm || !(priv->fe_status & FE_HAS_LOCK)) {
583 		*ber = priv->ber = 0;
584 		ret = 0;
585 		goto error;
586 	}
587 
588 	switch (priv->delivery_system) {
589 	case SYS_DVBS:
590 		reg = 0x4c;
591 		len = 8;
592 		i = 1;
593 		break;
594 	case SYS_DVBS2:
595 		reg = 0x4d;
596 		len = 4;
597 		i = 0;
598 		break;
599 	default:
600 		*ber = priv->ber = 0;
601 		return 0;
602 	}
603 
604 	ret = tda10071_rd_reg(priv, reg, &tmp);
605 	if (ret)
606 		goto error;
607 
608 	if (priv->meas_count[i] == tmp) {
609 		dev_dbg(&priv->i2c->dev, "%s: meas not ready=%02x\n", __func__,
610 				tmp);
611 		*ber = priv->ber;
612 		return 0;
613 	} else {
614 		priv->meas_count[i] = tmp;
615 	}
616 
617 	cmd.args[0] = CMD_BER_UPDATE_COUNTERS;
618 	cmd.args[1] = 0;
619 	cmd.args[2] = i;
620 	cmd.len = 3;
621 	ret = tda10071_cmd_execute(priv, &cmd);
622 	if (ret)
623 		goto error;
624 
625 	ret = tda10071_rd_regs(priv, cmd.len, buf, len);
626 	if (ret)
627 		goto error;
628 
629 	if (priv->delivery_system == SYS_DVBS) {
630 		*ber = (buf[0] << 24) | (buf[1] << 16) | (buf[2] << 8) | buf[3];
631 		priv->ucb += (buf[4] << 8) | buf[5];
632 	} else {
633 		*ber = (buf[0] << 8) | buf[1];
634 	}
635 	priv->ber = *ber;
636 
637 	return ret;
638 error:
639 	dev_dbg(&priv->i2c->dev, "%s: failed=%d\n", __func__, ret);
640 	return ret;
641 }
642 
643 static int tda10071_read_ucblocks(struct dvb_frontend *fe, u32 *ucblocks)
644 {
645 	struct tda10071_priv *priv = fe->demodulator_priv;
646 	int ret = 0;
647 
648 	if (!priv->warm || !(priv->fe_status & FE_HAS_LOCK)) {
649 		*ucblocks = 0;
650 		goto error;
651 	}
652 
653 	/* UCB is updated when BER is read. Assume BER is read anyway. */
654 
655 	*ucblocks = priv->ucb;
656 
657 	return ret;
658 error:
659 	dev_dbg(&priv->i2c->dev, "%s: failed=%d\n", __func__, ret);
660 	return ret;
661 }
662 
663 static int tda10071_set_frontend(struct dvb_frontend *fe)
664 {
665 	struct tda10071_priv *priv = fe->demodulator_priv;
666 	struct tda10071_cmd cmd;
667 	struct dtv_frontend_properties *c = &fe->dtv_property_cache;
668 	int ret, i;
669 	u8 mode, rolloff, pilot, inversion, div;
670 
671 	dev_dbg(&priv->i2c->dev, "%s: delivery_system=%d modulation=%d " \
672 		"frequency=%d symbol_rate=%d inversion=%d pilot=%d " \
673 		"rolloff=%d\n", __func__, c->delivery_system, c->modulation,
674 		c->frequency, c->symbol_rate, c->inversion, c->pilot,
675 		c->rolloff);
676 
677 	priv->delivery_system = SYS_UNDEFINED;
678 
679 	if (!priv->warm) {
680 		ret = -EFAULT;
681 		goto error;
682 	}
683 
684 	switch (c->inversion) {
685 	case INVERSION_OFF:
686 		inversion = 1;
687 		break;
688 	case INVERSION_ON:
689 		inversion = 0;
690 		break;
691 	case INVERSION_AUTO:
692 		/* 2 = auto; try first on then off
693 		 * 3 = auto; try first off then on */
694 		inversion = 3;
695 		break;
696 	default:
697 		dev_dbg(&priv->i2c->dev, "%s: invalid inversion\n", __func__);
698 		ret = -EINVAL;
699 		goto error;
700 	}
701 
702 	switch (c->delivery_system) {
703 	case SYS_DVBS:
704 		rolloff = 0;
705 		pilot = 2;
706 		break;
707 	case SYS_DVBS2:
708 		switch (c->rolloff) {
709 		case ROLLOFF_20:
710 			rolloff = 2;
711 			break;
712 		case ROLLOFF_25:
713 			rolloff = 1;
714 			break;
715 		case ROLLOFF_35:
716 			rolloff = 0;
717 			break;
718 		case ROLLOFF_AUTO:
719 		default:
720 			dev_dbg(&priv->i2c->dev, "%s: invalid rolloff\n",
721 					__func__);
722 			ret = -EINVAL;
723 			goto error;
724 		}
725 
726 		switch (c->pilot) {
727 		case PILOT_OFF:
728 			pilot = 0;
729 			break;
730 		case PILOT_ON:
731 			pilot = 1;
732 			break;
733 		case PILOT_AUTO:
734 			pilot = 2;
735 			break;
736 		default:
737 			dev_dbg(&priv->i2c->dev, "%s: invalid pilot\n",
738 					__func__);
739 			ret = -EINVAL;
740 			goto error;
741 		}
742 		break;
743 	default:
744 		dev_dbg(&priv->i2c->dev, "%s: invalid delivery_system\n",
745 				__func__);
746 		ret = -EINVAL;
747 		goto error;
748 	}
749 
750 	for (i = 0, mode = 0xff; i < ARRAY_SIZE(TDA10071_MODCOD); i++) {
751 		if (c->delivery_system == TDA10071_MODCOD[i].delivery_system &&
752 			c->modulation == TDA10071_MODCOD[i].modulation &&
753 			c->fec_inner == TDA10071_MODCOD[i].fec) {
754 			mode = TDA10071_MODCOD[i].val;
755 			dev_dbg(&priv->i2c->dev, "%s: mode found=%02x\n",
756 					__func__, mode);
757 			break;
758 		}
759 	}
760 
761 	if (mode == 0xff) {
762 		dev_dbg(&priv->i2c->dev, "%s: invalid parameter combination\n",
763 				__func__);
764 		ret = -EINVAL;
765 		goto error;
766 	}
767 
768 	if (c->symbol_rate <= 5000000)
769 		div = 14;
770 	else
771 		div = 4;
772 
773 	ret = tda10071_wr_reg(priv, 0x81, div);
774 	if (ret)
775 		goto error;
776 
777 	ret = tda10071_wr_reg(priv, 0xe3, div);
778 	if (ret)
779 		goto error;
780 
781 	cmd.args[0] = CMD_CHANGE_CHANNEL;
782 	cmd.args[1] = 0;
783 	cmd.args[2] = mode;
784 	cmd.args[3] = (c->frequency >> 16) & 0xff;
785 	cmd.args[4] = (c->frequency >>  8) & 0xff;
786 	cmd.args[5] = (c->frequency >>  0) & 0xff;
787 	cmd.args[6] = ((c->symbol_rate / 1000) >> 8) & 0xff;
788 	cmd.args[7] = ((c->symbol_rate / 1000) >> 0) & 0xff;
789 	cmd.args[8] = (tda10071_ops.info.frequency_tolerance >> 8) & 0xff;
790 	cmd.args[9] = (tda10071_ops.info.frequency_tolerance >> 0) & 0xff;
791 	cmd.args[10] = rolloff;
792 	cmd.args[11] = inversion;
793 	cmd.args[12] = pilot;
794 	cmd.args[13] = 0x00;
795 	cmd.args[14] = 0x00;
796 	cmd.len = 15;
797 	ret = tda10071_cmd_execute(priv, &cmd);
798 	if (ret)
799 		goto error;
800 
801 	priv->delivery_system = c->delivery_system;
802 
803 	return ret;
804 error:
805 	dev_dbg(&priv->i2c->dev, "%s: failed=%d\n", __func__, ret);
806 	return ret;
807 }
808 
809 static int tda10071_get_frontend(struct dvb_frontend *fe)
810 {
811 	struct tda10071_priv *priv = fe->demodulator_priv;
812 	struct dtv_frontend_properties *c = &fe->dtv_property_cache;
813 	int ret, i;
814 	u8 buf[5], tmp;
815 
816 	if (!priv->warm || !(priv->fe_status & FE_HAS_LOCK)) {
817 		ret = -EFAULT;
818 		goto error;
819 	}
820 
821 	ret = tda10071_rd_regs(priv, 0x30, buf, 5);
822 	if (ret)
823 		goto error;
824 
825 	tmp = buf[0] & 0x3f;
826 	for (i = 0; i < ARRAY_SIZE(TDA10071_MODCOD); i++) {
827 		if (tmp == TDA10071_MODCOD[i].val) {
828 			c->modulation = TDA10071_MODCOD[i].modulation;
829 			c->fec_inner = TDA10071_MODCOD[i].fec;
830 			c->delivery_system = TDA10071_MODCOD[i].delivery_system;
831 		}
832 	}
833 
834 	switch ((buf[1] >> 0) & 0x01) {
835 	case 0:
836 		c->inversion = INVERSION_OFF;
837 		break;
838 	case 1:
839 		c->inversion = INVERSION_ON;
840 		break;
841 	}
842 
843 	switch ((buf[1] >> 7) & 0x01) {
844 	case 0:
845 		c->pilot = PILOT_OFF;
846 		break;
847 	case 1:
848 		c->pilot = PILOT_ON;
849 		break;
850 	}
851 
852 	c->frequency = (buf[2] << 16) | (buf[3] << 8) | (buf[4] << 0);
853 
854 	ret = tda10071_rd_regs(priv, 0x52, buf, 3);
855 	if (ret)
856 		goto error;
857 
858 	c->symbol_rate = (buf[0] << 16) | (buf[1] << 8) | (buf[2] << 0);
859 
860 	return ret;
861 error:
862 	dev_dbg(&priv->i2c->dev, "%s: failed=%d\n", __func__, ret);
863 	return ret;
864 }
865 
866 static int tda10071_init(struct dvb_frontend *fe)
867 {
868 	struct tda10071_priv *priv = fe->demodulator_priv;
869 	struct tda10071_cmd cmd;
870 	int ret, i, len, remaining, fw_size;
871 	const struct firmware *fw;
872 	u8 *fw_file = TDA10071_FIRMWARE;
873 	u8 tmp, buf[4];
874 	struct tda10071_reg_val_mask tab[] = {
875 		{ 0xcd, 0x00, 0x07 },
876 		{ 0x80, 0x00, 0x02 },
877 		{ 0xcd, 0x00, 0xc0 },
878 		{ 0xce, 0x00, 0x1b },
879 		{ 0x9d, 0x00, 0x01 },
880 		{ 0x9d, 0x00, 0x02 },
881 		{ 0x9e, 0x00, 0x01 },
882 		{ 0x87, 0x00, 0x80 },
883 		{ 0xce, 0x00, 0x08 },
884 		{ 0xce, 0x00, 0x10 },
885 	};
886 	struct tda10071_reg_val_mask tab2[] = {
887 		{ 0xf1, 0x70, 0xff },
888 		{ 0x88, priv->cfg.pll_multiplier, 0x3f },
889 		{ 0x89, 0x00, 0x10 },
890 		{ 0x89, 0x10, 0x10 },
891 		{ 0xc0, 0x01, 0x01 },
892 		{ 0xc0, 0x00, 0x01 },
893 		{ 0xe0, 0xff, 0xff },
894 		{ 0xe0, 0x00, 0xff },
895 		{ 0x96, 0x1e, 0x7e },
896 		{ 0x8b, 0x08, 0x08 },
897 		{ 0x8b, 0x00, 0x08 },
898 		{ 0x8f, 0x1a, 0x7e },
899 		{ 0x8c, 0x68, 0xff },
900 		{ 0x8d, 0x08, 0xff },
901 		{ 0x8e, 0x4c, 0xff },
902 		{ 0x8f, 0x01, 0x01 },
903 		{ 0x8b, 0x04, 0x04 },
904 		{ 0x8b, 0x00, 0x04 },
905 		{ 0x87, 0x05, 0x07 },
906 		{ 0x80, 0x00, 0x20 },
907 		{ 0xc8, 0x01, 0xff },
908 		{ 0xb4, 0x47, 0xff },
909 		{ 0xb5, 0x9c, 0xff },
910 		{ 0xb6, 0x7d, 0xff },
911 		{ 0xba, 0x00, 0x03 },
912 		{ 0xb7, 0x47, 0xff },
913 		{ 0xb8, 0x9c, 0xff },
914 		{ 0xb9, 0x7d, 0xff },
915 		{ 0xba, 0x00, 0x0c },
916 		{ 0xc8, 0x00, 0xff },
917 		{ 0xcd, 0x00, 0x04 },
918 		{ 0xcd, 0x00, 0x20 },
919 		{ 0xe8, 0x02, 0xff },
920 		{ 0xcf, 0x20, 0xff },
921 		{ 0x9b, 0xd7, 0xff },
922 		{ 0x9a, 0x01, 0x03 },
923 		{ 0xa8, 0x05, 0x0f },
924 		{ 0xa8, 0x65, 0xf0 },
925 		{ 0xa6, 0xa0, 0xf0 },
926 		{ 0x9d, 0x50, 0xfc },
927 		{ 0x9e, 0x20, 0xe0 },
928 		{ 0xa3, 0x1c, 0x7c },
929 		{ 0xd5, 0x03, 0x03 },
930 	};
931 
932 	if (priv->warm) {
933 		/* warm state - wake up device from sleep */
934 
935 		for (i = 0; i < ARRAY_SIZE(tab); i++) {
936 			ret = tda10071_wr_reg_mask(priv, tab[i].reg,
937 				tab[i].val, tab[i].mask);
938 			if (ret)
939 				goto error;
940 		}
941 
942 		cmd.args[0] = CMD_SET_SLEEP_MODE;
943 		cmd.args[1] = 0;
944 		cmd.args[2] = 0;
945 		cmd.len = 3;
946 		ret = tda10071_cmd_execute(priv, &cmd);
947 		if (ret)
948 			goto error;
949 	} else {
950 		/* cold state - try to download firmware */
951 
952 		/* request the firmware, this will block and timeout */
953 		ret = request_firmware(&fw, fw_file, priv->i2c->dev.parent);
954 		if (ret) {
955 			dev_err(&priv->i2c->dev, "%s: did not find the " \
956 					"firmware file. (%s) Please see " \
957 					"linux/Documentation/dvb/ for more " \
958 					"details on firmware-problems. (%d)\n",
959 					KBUILD_MODNAME, fw_file, ret);
960 			goto error;
961 		}
962 
963 		/* init */
964 		for (i = 0; i < ARRAY_SIZE(tab2); i++) {
965 			ret = tda10071_wr_reg_mask(priv, tab2[i].reg,
966 				tab2[i].val, tab2[i].mask);
967 			if (ret)
968 				goto error_release_firmware;
969 		}
970 
971 		/*  download firmware */
972 		ret = tda10071_wr_reg(priv, 0xe0, 0x7f);
973 		if (ret)
974 			goto error_release_firmware;
975 
976 		ret = tda10071_wr_reg(priv, 0xf7, 0x81);
977 		if (ret)
978 			goto error_release_firmware;
979 
980 		ret = tda10071_wr_reg(priv, 0xf8, 0x00);
981 		if (ret)
982 			goto error_release_firmware;
983 
984 		ret = tda10071_wr_reg(priv, 0xf9, 0x00);
985 		if (ret)
986 			goto error_release_firmware;
987 
988 		dev_info(&priv->i2c->dev, "%s: found a '%s' in cold state, " \
989 				"will try to load a firmware\n", KBUILD_MODNAME,
990 				tda10071_ops.info.name);
991 		dev_info(&priv->i2c->dev, "%s: downloading firmware from " \
992 				"file '%s'\n", KBUILD_MODNAME, fw_file);
993 
994 		/* do not download last byte */
995 		fw_size = fw->size - 1;
996 
997 		for (remaining = fw_size; remaining > 0;
998 			remaining -= (priv->cfg.i2c_wr_max - 1)) {
999 			len = remaining;
1000 			if (len > (priv->cfg.i2c_wr_max - 1))
1001 				len = (priv->cfg.i2c_wr_max - 1);
1002 
1003 			ret = tda10071_wr_regs(priv, 0xfa,
1004 				(u8 *) &fw->data[fw_size - remaining], len);
1005 			if (ret) {
1006 				dev_err(&priv->i2c->dev, "%s: firmware " \
1007 						"download failed=%d\n",
1008 						KBUILD_MODNAME, ret);
1009 				if (ret)
1010 					goto error_release_firmware;
1011 			}
1012 		}
1013 		release_firmware(fw);
1014 
1015 		ret = tda10071_wr_reg(priv, 0xf7, 0x0c);
1016 		if (ret)
1017 			goto error;
1018 
1019 		ret = tda10071_wr_reg(priv, 0xe0, 0x00);
1020 		if (ret)
1021 			goto error;
1022 
1023 		/* wait firmware start */
1024 		msleep(250);
1025 
1026 		/* firmware status */
1027 		ret = tda10071_rd_reg(priv, 0x51, &tmp);
1028 		if (ret)
1029 			goto error;
1030 
1031 		if (tmp) {
1032 			dev_info(&priv->i2c->dev, "%s: firmware did not run\n",
1033 					KBUILD_MODNAME);
1034 			ret = -EFAULT;
1035 			goto error;
1036 		} else {
1037 			priv->warm = 1;
1038 		}
1039 
1040 		cmd.args[0] = CMD_GET_FW_VERSION;
1041 		cmd.len = 1;
1042 		ret = tda10071_cmd_execute(priv, &cmd);
1043 		if (ret)
1044 			goto error;
1045 
1046 		ret = tda10071_rd_regs(priv, cmd.len, buf, 4);
1047 		if (ret)
1048 			goto error;
1049 
1050 		dev_info(&priv->i2c->dev, "%s: firmware version %d.%d.%d.%d\n",
1051 				KBUILD_MODNAME, buf[0], buf[1], buf[2], buf[3]);
1052 		dev_info(&priv->i2c->dev, "%s: found a '%s' in warm state\n",
1053 				KBUILD_MODNAME, tda10071_ops.info.name);
1054 
1055 		ret = tda10071_rd_regs(priv, 0x81, buf, 2);
1056 		if (ret)
1057 			goto error;
1058 
1059 		cmd.args[0] = CMD_DEMOD_INIT;
1060 		cmd.args[1] = ((priv->cfg.xtal / 1000) >> 8) & 0xff;
1061 		cmd.args[2] = ((priv->cfg.xtal / 1000) >> 0) & 0xff;
1062 		cmd.args[3] = buf[0];
1063 		cmd.args[4] = buf[1];
1064 		cmd.args[5] = priv->cfg.pll_multiplier;
1065 		cmd.args[6] = priv->cfg.spec_inv;
1066 		cmd.args[7] = 0x00;
1067 		cmd.len = 8;
1068 		ret = tda10071_cmd_execute(priv, &cmd);
1069 		if (ret)
1070 			goto error;
1071 
1072 		cmd.args[0] = CMD_TUNER_INIT;
1073 		cmd.args[1] = 0x00;
1074 		cmd.args[2] = 0x00;
1075 		cmd.args[3] = 0x00;
1076 		cmd.args[4] = 0x00;
1077 		cmd.args[5] = (priv->cfg.tuner_i2c_addr) ? priv->cfg.tuner_i2c_addr : 0x14;
1078 		cmd.args[6] = 0x00;
1079 		cmd.args[7] = 0x03;
1080 		cmd.args[8] = 0x02;
1081 		cmd.args[9] = 0x02;
1082 		cmd.args[10] = 0x00;
1083 		cmd.args[11] = 0x00;
1084 		cmd.args[12] = 0x00;
1085 		cmd.args[13] = 0x00;
1086 		cmd.args[14] = 0x00;
1087 		cmd.len = 15;
1088 		ret = tda10071_cmd_execute(priv, &cmd);
1089 		if (ret)
1090 			goto error;
1091 
1092 		cmd.args[0] = CMD_MPEG_CONFIG;
1093 		cmd.args[1] = 0;
1094 		cmd.args[2] = priv->cfg.ts_mode;
1095 		cmd.args[3] = 0x00;
1096 		cmd.args[4] = 0x04;
1097 		cmd.args[5] = 0x00;
1098 		cmd.len = 6;
1099 		ret = tda10071_cmd_execute(priv, &cmd);
1100 		if (ret)
1101 			goto error;
1102 
1103 		ret = tda10071_wr_reg_mask(priv, 0xf0, 0x01, 0x01);
1104 		if (ret)
1105 			goto error;
1106 
1107 		cmd.args[0] = CMD_LNB_CONFIG;
1108 		cmd.args[1] = 0;
1109 		cmd.args[2] = 150;
1110 		cmd.args[3] = 3;
1111 		cmd.args[4] = 22;
1112 		cmd.args[5] = 1;
1113 		cmd.args[6] = 1;
1114 		cmd.args[7] = 30;
1115 		cmd.args[8] = 30;
1116 		cmd.args[9] = 30;
1117 		cmd.args[10] = 30;
1118 		cmd.len = 11;
1119 		ret = tda10071_cmd_execute(priv, &cmd);
1120 		if (ret)
1121 			goto error;
1122 
1123 		cmd.args[0] = CMD_BER_CONTROL;
1124 		cmd.args[1] = 0;
1125 		cmd.args[2] = 14;
1126 		cmd.args[3] = 14;
1127 		cmd.len = 4;
1128 		ret = tda10071_cmd_execute(priv, &cmd);
1129 		if (ret)
1130 			goto error;
1131 	}
1132 
1133 	return ret;
1134 error_release_firmware:
1135 	release_firmware(fw);
1136 error:
1137 	dev_dbg(&priv->i2c->dev, "%s: failed=%d\n", __func__, ret);
1138 	return ret;
1139 }
1140 
1141 static int tda10071_sleep(struct dvb_frontend *fe)
1142 {
1143 	struct tda10071_priv *priv = fe->demodulator_priv;
1144 	struct tda10071_cmd cmd;
1145 	int ret, i;
1146 	struct tda10071_reg_val_mask tab[] = {
1147 		{ 0xcd, 0x07, 0x07 },
1148 		{ 0x80, 0x02, 0x02 },
1149 		{ 0xcd, 0xc0, 0xc0 },
1150 		{ 0xce, 0x1b, 0x1b },
1151 		{ 0x9d, 0x01, 0x01 },
1152 		{ 0x9d, 0x02, 0x02 },
1153 		{ 0x9e, 0x01, 0x01 },
1154 		{ 0x87, 0x80, 0x80 },
1155 		{ 0xce, 0x08, 0x08 },
1156 		{ 0xce, 0x10, 0x10 },
1157 	};
1158 
1159 	if (!priv->warm) {
1160 		ret = -EFAULT;
1161 		goto error;
1162 	}
1163 
1164 	cmd.args[0] = CMD_SET_SLEEP_MODE;
1165 	cmd.args[1] = 0;
1166 	cmd.args[2] = 1;
1167 	cmd.len = 3;
1168 	ret = tda10071_cmd_execute(priv, &cmd);
1169 	if (ret)
1170 		goto error;
1171 
1172 	for (i = 0; i < ARRAY_SIZE(tab); i++) {
1173 		ret = tda10071_wr_reg_mask(priv, tab[i].reg, tab[i].val,
1174 			tab[i].mask);
1175 		if (ret)
1176 			goto error;
1177 	}
1178 
1179 	return ret;
1180 error:
1181 	dev_dbg(&priv->i2c->dev, "%s: failed=%d\n", __func__, ret);
1182 	return ret;
1183 }
1184 
1185 static int tda10071_get_tune_settings(struct dvb_frontend *fe,
1186 	struct dvb_frontend_tune_settings *s)
1187 {
1188 	s->min_delay_ms = 8000;
1189 	s->step_size = 0;
1190 	s->max_drift = 0;
1191 
1192 	return 0;
1193 }
1194 
1195 static void tda10071_release(struct dvb_frontend *fe)
1196 {
1197 	struct tda10071_priv *priv = fe->demodulator_priv;
1198 	kfree(priv);
1199 }
1200 
1201 struct dvb_frontend *tda10071_attach(const struct tda10071_config *config,
1202 	struct i2c_adapter *i2c)
1203 {
1204 	int ret;
1205 	struct tda10071_priv *priv = NULL;
1206 	u8 tmp;
1207 
1208 	/* allocate memory for the internal priv */
1209 	priv = kzalloc(sizeof(struct tda10071_priv), GFP_KERNEL);
1210 	if (priv == NULL) {
1211 		ret = -ENOMEM;
1212 		goto error;
1213 	}
1214 
1215 	/* make sure demod i2c address is specified */
1216 	if (!config->demod_i2c_addr) {
1217 		dev_dbg(&i2c->dev, "%s: invalid demod i2c address!\n", __func__);
1218 		ret = -EINVAL;
1219 		goto error;
1220 	}
1221 
1222 	/* make sure tuner i2c address is specified */
1223 	if (!config->tuner_i2c_addr) {
1224 		dev_dbg(&i2c->dev, "%s: invalid tuner i2c address!\n", __func__);
1225 		ret = -EINVAL;
1226 		goto error;
1227 	}
1228 
1229 	/* setup the priv */
1230 	priv->i2c = i2c;
1231 	memcpy(&priv->cfg, config, sizeof(struct tda10071_config));
1232 
1233 	/* chip ID */
1234 	ret = tda10071_rd_reg(priv, 0xff, &tmp);
1235 	if (ret || tmp != 0x0f)
1236 		goto error;
1237 
1238 	/* chip type */
1239 	ret = tda10071_rd_reg(priv, 0xdd, &tmp);
1240 	if (ret || tmp != 0x00)
1241 		goto error;
1242 
1243 	/* chip version */
1244 	ret = tda10071_rd_reg(priv, 0xfe, &tmp);
1245 	if (ret || tmp != 0x01)
1246 		goto error;
1247 
1248 	/* create dvb_frontend */
1249 	memcpy(&priv->fe.ops, &tda10071_ops, sizeof(struct dvb_frontend_ops));
1250 	priv->fe.demodulator_priv = priv;
1251 
1252 	return &priv->fe;
1253 error:
1254 	dev_dbg(&i2c->dev, "%s: failed=%d\n", __func__, ret);
1255 	kfree(priv);
1256 	return NULL;
1257 }
1258 EXPORT_SYMBOL(tda10071_attach);
1259 
1260 static struct dvb_frontend_ops tda10071_ops = {
1261 	.delsys = { SYS_DVBS, SYS_DVBS2 },
1262 	.info = {
1263 		.name = "NXP TDA10071",
1264 		.frequency_min = 950000,
1265 		.frequency_max = 2150000,
1266 		.frequency_tolerance = 5000,
1267 		.symbol_rate_min = 1000000,
1268 		.symbol_rate_max = 45000000,
1269 		.caps = FE_CAN_INVERSION_AUTO |
1270 			FE_CAN_FEC_1_2 |
1271 			FE_CAN_FEC_2_3 |
1272 			FE_CAN_FEC_3_4 |
1273 			FE_CAN_FEC_4_5 |
1274 			FE_CAN_FEC_5_6 |
1275 			FE_CAN_FEC_6_7 |
1276 			FE_CAN_FEC_7_8 |
1277 			FE_CAN_FEC_8_9 |
1278 			FE_CAN_FEC_AUTO |
1279 			FE_CAN_QPSK |
1280 			FE_CAN_RECOVER |
1281 			FE_CAN_2G_MODULATION
1282 	},
1283 
1284 	.release = tda10071_release,
1285 
1286 	.get_tune_settings = tda10071_get_tune_settings,
1287 
1288 	.init = tda10071_init,
1289 	.sleep = tda10071_sleep,
1290 
1291 	.set_frontend = tda10071_set_frontend,
1292 	.get_frontend = tda10071_get_frontend,
1293 
1294 	.read_status = tda10071_read_status,
1295 	.read_snr = tda10071_read_snr,
1296 	.read_signal_strength = tda10071_read_signal_strength,
1297 	.read_ber = tda10071_read_ber,
1298 	.read_ucblocks = tda10071_read_ucblocks,
1299 
1300 	.diseqc_send_master_cmd = tda10071_diseqc_send_master_cmd,
1301 	.diseqc_recv_slave_reply = tda10071_diseqc_recv_slave_reply,
1302 	.diseqc_send_burst = tda10071_diseqc_send_burst,
1303 
1304 	.set_tone = tda10071_set_tone,
1305 	.set_voltage = tda10071_set_voltage,
1306 };
1307 
1308 MODULE_AUTHOR("Antti Palosaari <crope@iki.fi>");
1309 MODULE_DESCRIPTION("NXP TDA10071 DVB-S/S2 demodulator driver");
1310 MODULE_LICENSE("GPL");
1311 MODULE_FIRMWARE(TDA10071_FIRMWARE);
1312