1b3e4c0f3SLuca Coelho // SPDX-License-Identifier: GPL-2.0 OR BSD-3-Clause 2cdda18fbSLuca Coelho /* 3cdda18fbSLuca Coelho * Copyright(c) 2020-2021 Intel Corporation 4cdda18fbSLuca Coelho */ 5b3e4c0f3SLuca Coelho 6b3e4c0f3SLuca Coelho #include "iwl-drv.h" 7b3e4c0f3SLuca Coelho #include "pnvm.h" 8b3e4c0f3SLuca Coelho #include "iwl-prph.h" 9b3e4c0f3SLuca Coelho #include "iwl-io.h" 10b3e4c0f3SLuca Coelho #include "fw/api/commands.h" 11b3e4c0f3SLuca Coelho #include "fw/api/nvm-reg.h" 1269725928SLuca Coelho #include "fw/api/alive.h" 1384c3c995SLuca Coelho #include "fw/uefi.h" 1469725928SLuca Coelho 1569725928SLuca Coelho struct iwl_pnvm_section { 1669725928SLuca Coelho __le32 offset; 1769725928SLuca Coelho const u8 data[]; 1869725928SLuca Coelho } __packed; 19b3e4c0f3SLuca Coelho 20b3e4c0f3SLuca Coelho static bool iwl_pnvm_complete_fn(struct iwl_notif_wait_data *notif_wait, 21b3e4c0f3SLuca Coelho struct iwl_rx_packet *pkt, void *data) 22b3e4c0f3SLuca Coelho { 23b3e4c0f3SLuca Coelho struct iwl_trans *trans = (struct iwl_trans *)data; 24b3e4c0f3SLuca Coelho struct iwl_pnvm_init_complete_ntfy *pnvm_ntf = (void *)pkt->data; 25b3e4c0f3SLuca Coelho 26b3e4c0f3SLuca Coelho IWL_DEBUG_FW(trans, 27b3e4c0f3SLuca Coelho "PNVM complete notification received with status %d\n", 28b3e4c0f3SLuca Coelho le32_to_cpu(pnvm_ntf->status)); 29b3e4c0f3SLuca Coelho 30b3e4c0f3SLuca Coelho return true; 31b3e4c0f3SLuca Coelho } 32b3e4c0f3SLuca Coelho 3369725928SLuca Coelho static int iwl_pnvm_handle_section(struct iwl_trans *trans, const u8 *data, 3469725928SLuca Coelho size_t len) 3569725928SLuca Coelho { 3669725928SLuca Coelho struct iwl_ucode_tlv *tlv; 3769725928SLuca Coelho u32 sha1 = 0; 3869725928SLuca Coelho u16 mac_type = 0, rf_id = 0; 3969725928SLuca Coelho u8 *pnvm_data = NULL, *tmp; 4069725928SLuca Coelho u32 size = 0; 4169725928SLuca Coelho int ret; 4269725928SLuca Coelho 4369725928SLuca Coelho IWL_DEBUG_FW(trans, "Handling PNVM section\n"); 4469725928SLuca Coelho 4569725928SLuca Coelho while (len >= sizeof(*tlv)) { 4669725928SLuca Coelho u32 tlv_len, tlv_type; 4769725928SLuca Coelho 4869725928SLuca Coelho len -= sizeof(*tlv); 4969725928SLuca Coelho tlv = (void *)data; 5069725928SLuca Coelho 5169725928SLuca Coelho tlv_len = le32_to_cpu(tlv->length); 5269725928SLuca Coelho tlv_type = le32_to_cpu(tlv->type); 5369725928SLuca Coelho 5469725928SLuca Coelho if (len < tlv_len) { 5569725928SLuca Coelho IWL_ERR(trans, "invalid TLV len: %zd/%u\n", 5669725928SLuca Coelho len, tlv_len); 5769725928SLuca Coelho ret = -EINVAL; 5869725928SLuca Coelho goto out; 5969725928SLuca Coelho } 6069725928SLuca Coelho 6169725928SLuca Coelho data += sizeof(*tlv); 6269725928SLuca Coelho 6369725928SLuca Coelho switch (tlv_type) { 6469725928SLuca Coelho case IWL_UCODE_TLV_PNVM_VERSION: 6569725928SLuca Coelho if (tlv_len < sizeof(__le32)) { 6669725928SLuca Coelho IWL_DEBUG_FW(trans, 6769725928SLuca Coelho "Invalid size for IWL_UCODE_TLV_PNVM_VERSION (expected %zd, got %d)\n", 6869725928SLuca Coelho sizeof(__le32), tlv_len); 6969725928SLuca Coelho break; 7069725928SLuca Coelho } 7169725928SLuca Coelho 7269725928SLuca Coelho sha1 = le32_to_cpup((__le32 *)data); 7369725928SLuca Coelho 7469725928SLuca Coelho IWL_DEBUG_FW(trans, 7569725928SLuca Coelho "Got IWL_UCODE_TLV_PNVM_VERSION %0x\n", 7669725928SLuca Coelho sha1); 7769725928SLuca Coelho break; 7869725928SLuca Coelho case IWL_UCODE_TLV_HW_TYPE: 7969725928SLuca Coelho if (tlv_len < 2 * sizeof(__le16)) { 8069725928SLuca Coelho IWL_DEBUG_FW(trans, 8169725928SLuca Coelho "Invalid size for IWL_UCODE_TLV_HW_TYPE (expected %zd, got %d)\n", 8269725928SLuca Coelho 2 * sizeof(__le16), tlv_len); 8369725928SLuca Coelho break; 8469725928SLuca Coelho } 8569725928SLuca Coelho 8669725928SLuca Coelho mac_type = le16_to_cpup((__le16 *)data); 8769725928SLuca Coelho rf_id = le16_to_cpup((__le16 *)(data + sizeof(__le16))); 8869725928SLuca Coelho 8969725928SLuca Coelho IWL_DEBUG_FW(trans, 9069725928SLuca Coelho "Got IWL_UCODE_TLV_HW_TYPE mac_type 0x%0x rf_id 0x%0x\n", 9169725928SLuca Coelho mac_type, rf_id); 9269725928SLuca Coelho 9369725928SLuca Coelho if (mac_type != CSR_HW_REV_TYPE(trans->hw_rev) || 9469725928SLuca Coelho rf_id != CSR_HW_RFID_TYPE(trans->hw_rf_id)) { 9569725928SLuca Coelho IWL_DEBUG_FW(trans, 9669725928SLuca Coelho "HW mismatch, skipping PNVM section, mac_type 0x%0x, rf_id 0x%0x.\n", 9769725928SLuca Coelho CSR_HW_REV_TYPE(trans->hw_rev), trans->hw_rf_id); 9869725928SLuca Coelho ret = -ENOENT; 9969725928SLuca Coelho goto out; 10069725928SLuca Coelho } 10169725928SLuca Coelho 10269725928SLuca Coelho break; 10369725928SLuca Coelho case IWL_UCODE_TLV_SEC_RT: { 10469725928SLuca Coelho struct iwl_pnvm_section *section = (void *)data; 10569725928SLuca Coelho u32 data_len = tlv_len - sizeof(*section); 10669725928SLuca Coelho 10769725928SLuca Coelho IWL_DEBUG_FW(trans, 10869725928SLuca Coelho "Got IWL_UCODE_TLV_SEC_RT len %d\n", 10969725928SLuca Coelho tlv_len); 11069725928SLuca Coelho 11169725928SLuca Coelho /* TODO: remove, this is a deprecated separator */ 11269725928SLuca Coelho if (le32_to_cpup((__le32 *)data) == 0xddddeeee) { 11369725928SLuca Coelho IWL_DEBUG_FW(trans, "Ignoring separator.\n"); 11469725928SLuca Coelho break; 11569725928SLuca Coelho } 11669725928SLuca Coelho 11769725928SLuca Coelho IWL_DEBUG_FW(trans, "Adding data (size %d)\n", 11869725928SLuca Coelho data_len); 11969725928SLuca Coelho 12069725928SLuca Coelho tmp = krealloc(pnvm_data, size + data_len, GFP_KERNEL); 12169725928SLuca Coelho if (!tmp) { 12269725928SLuca Coelho IWL_DEBUG_FW(trans, 12369725928SLuca Coelho "Couldn't allocate (more) pnvm_data\n"); 12469725928SLuca Coelho 12569725928SLuca Coelho ret = -ENOMEM; 12669725928SLuca Coelho goto out; 12769725928SLuca Coelho } 12869725928SLuca Coelho 12969725928SLuca Coelho pnvm_data = tmp; 13069725928SLuca Coelho 13169725928SLuca Coelho memcpy(pnvm_data + size, section->data, data_len); 13269725928SLuca Coelho 13369725928SLuca Coelho size += data_len; 13469725928SLuca Coelho 13569725928SLuca Coelho break; 13669725928SLuca Coelho } 13769725928SLuca Coelho case IWL_UCODE_TLV_PNVM_SKU: 13869725928SLuca Coelho IWL_DEBUG_FW(trans, 13969725928SLuca Coelho "New PNVM section started, stop parsing.\n"); 14069725928SLuca Coelho goto done; 14169725928SLuca Coelho default: 14269725928SLuca Coelho IWL_DEBUG_FW(trans, "Found TLV 0x%0x, len %d\n", 14369725928SLuca Coelho tlv_type, tlv_len); 14469725928SLuca Coelho break; 14569725928SLuca Coelho } 14669725928SLuca Coelho 14769725928SLuca Coelho len -= ALIGN(tlv_len, 4); 14869725928SLuca Coelho data += ALIGN(tlv_len, 4); 14969725928SLuca Coelho } 15069725928SLuca Coelho 15169725928SLuca Coelho done: 15269725928SLuca Coelho if (!size) { 15369725928SLuca Coelho IWL_DEBUG_FW(trans, "Empty PNVM, skipping.\n"); 15469725928SLuca Coelho ret = -ENOENT; 15569725928SLuca Coelho goto out; 15669725928SLuca Coelho } 15769725928SLuca Coelho 15869725928SLuca Coelho IWL_INFO(trans, "loaded PNVM version 0x%0x\n", sha1); 15969725928SLuca Coelho 16069725928SLuca Coelho ret = iwl_trans_set_pnvm(trans, pnvm_data, size); 16169725928SLuca Coelho out: 16269725928SLuca Coelho kfree(pnvm_data); 16369725928SLuca Coelho return ret; 16469725928SLuca Coelho } 16569725928SLuca Coelho 16669725928SLuca Coelho static int iwl_pnvm_parse(struct iwl_trans *trans, const u8 *data, 16769725928SLuca Coelho size_t len) 16869725928SLuca Coelho { 16969725928SLuca Coelho struct iwl_ucode_tlv *tlv; 17069725928SLuca Coelho 17169725928SLuca Coelho IWL_DEBUG_FW(trans, "Parsing PNVM file\n"); 17269725928SLuca Coelho 17369725928SLuca Coelho while (len >= sizeof(*tlv)) { 17469725928SLuca Coelho u32 tlv_len, tlv_type; 17569725928SLuca Coelho 17669725928SLuca Coelho len -= sizeof(*tlv); 17769725928SLuca Coelho tlv = (void *)data; 17869725928SLuca Coelho 17969725928SLuca Coelho tlv_len = le32_to_cpu(tlv->length); 18069725928SLuca Coelho tlv_type = le32_to_cpu(tlv->type); 18169725928SLuca Coelho 18269725928SLuca Coelho if (len < tlv_len) { 18369725928SLuca Coelho IWL_ERR(trans, "invalid TLV len: %zd/%u\n", 18469725928SLuca Coelho len, tlv_len); 18569725928SLuca Coelho return -EINVAL; 18669725928SLuca Coelho } 18769725928SLuca Coelho 18869725928SLuca Coelho if (tlv_type == IWL_UCODE_TLV_PNVM_SKU) { 18969725928SLuca Coelho struct iwl_sku_id *sku_id = 19069725928SLuca Coelho (void *)(data + sizeof(*tlv)); 19169725928SLuca Coelho 19269725928SLuca Coelho IWL_DEBUG_FW(trans, 19369725928SLuca Coelho "Got IWL_UCODE_TLV_PNVM_SKU len %d\n", 19469725928SLuca Coelho tlv_len); 19569725928SLuca Coelho IWL_DEBUG_FW(trans, "sku_id 0x%0x 0x%0x 0x%0x\n", 19669725928SLuca Coelho le32_to_cpu(sku_id->data[0]), 19769725928SLuca Coelho le32_to_cpu(sku_id->data[1]), 19869725928SLuca Coelho le32_to_cpu(sku_id->data[2])); 19969725928SLuca Coelho 200ff11a8eeSLuca Coelho data += sizeof(*tlv) + ALIGN(tlv_len, 4); 201ff11a8eeSLuca Coelho len -= ALIGN(tlv_len, 4); 202ff11a8eeSLuca Coelho 20369725928SLuca Coelho if (trans->sku_id[0] == le32_to_cpu(sku_id->data[0]) && 20469725928SLuca Coelho trans->sku_id[1] == le32_to_cpu(sku_id->data[1]) && 20569725928SLuca Coelho trans->sku_id[2] == le32_to_cpu(sku_id->data[2])) { 20669725928SLuca Coelho int ret; 20769725928SLuca Coelho 20869725928SLuca Coelho ret = iwl_pnvm_handle_section(trans, data, len); 20969725928SLuca Coelho if (!ret) 21069725928SLuca Coelho return 0; 21169725928SLuca Coelho } else { 21269725928SLuca Coelho IWL_DEBUG_FW(trans, "SKU ID didn't match!\n"); 21369725928SLuca Coelho } 21469725928SLuca Coelho } else { 21569725928SLuca Coelho data += sizeof(*tlv) + ALIGN(tlv_len, 4); 21669725928SLuca Coelho len -= ALIGN(tlv_len, 4); 21769725928SLuca Coelho } 21869725928SLuca Coelho } 21969725928SLuca Coelho 22069725928SLuca Coelho return -ENOENT; 22169725928SLuca Coelho } 22269725928SLuca Coelho 223cdda18fbSLuca Coelho static int iwl_pnvm_get_from_fs(struct iwl_trans *trans, u8 **data, size_t *len) 224b3e4c0f3SLuca Coelho { 2251c58bed4SJohannes Berg const struct firmware *pnvm; 2261c58bed4SJohannes Berg char pnvm_name[64]; 227cdda18fbSLuca Coelho int ret; 22869725928SLuca Coelho 229b3e4c0f3SLuca Coelho /* 23069725928SLuca Coelho * The prefix unfortunately includes a hyphen at the end, so 23169725928SLuca Coelho * don't add the dot here... 232b3e4c0f3SLuca Coelho */ 23369725928SLuca Coelho snprintf(pnvm_name, sizeof(pnvm_name), "%spnvm", 23469725928SLuca Coelho trans->cfg->fw_name_pre); 23569725928SLuca Coelho 23669725928SLuca Coelho /* ...but replace the hyphen with the dot here. */ 23769725928SLuca Coelho if (strlen(trans->cfg->fw_name_pre) < sizeof(pnvm_name)) 23869725928SLuca Coelho pnvm_name[strlen(trans->cfg->fw_name_pre) - 1] = '.'; 23969725928SLuca Coelho 24069725928SLuca Coelho ret = firmware_request_nowarn(&pnvm, pnvm_name, trans->dev); 24169725928SLuca Coelho if (ret) { 24269725928SLuca Coelho IWL_DEBUG_FW(trans, "PNVM file %s not found %d\n", 24369725928SLuca Coelho pnvm_name, ret); 244cdda18fbSLuca Coelho return ret; 245cdda18fbSLuca Coelho } 246cdda18fbSLuca Coelho 247cdda18fbSLuca Coelho *data = kmemdup(pnvm->data, pnvm->size, GFP_KERNEL); 248cdda18fbSLuca Coelho if (!*data) 249cdda18fbSLuca Coelho return -ENOMEM; 250cdda18fbSLuca Coelho 251cdda18fbSLuca Coelho *len = pnvm->size; 252cdda18fbSLuca Coelho 253cdda18fbSLuca Coelho return 0; 254cdda18fbSLuca Coelho } 255cdda18fbSLuca Coelho 256cdda18fbSLuca Coelho int iwl_pnvm_load(struct iwl_trans *trans, 257cdda18fbSLuca Coelho struct iwl_notif_wait_data *notif_wait) 258cdda18fbSLuca Coelho { 259cdda18fbSLuca Coelho u8 *data; 260cdda18fbSLuca Coelho size_t len; 26184c3c995SLuca Coelho struct pnvm_sku_package *package; 262cdda18fbSLuca Coelho struct iwl_notification_wait pnvm_wait; 263cdda18fbSLuca Coelho static const u16 ntf_cmds[] = { WIDE_ID(REGULATORY_AND_NVM_GROUP, 264cdda18fbSLuca Coelho PNVM_INIT_COMPLETE_NTFY) }; 265cdda18fbSLuca Coelho int ret; 266cdda18fbSLuca Coelho 267cdda18fbSLuca Coelho /* if the SKU_ID is empty, there's nothing to do */ 268cdda18fbSLuca Coelho if (!trans->sku_id[0] && !trans->sku_id[1] && !trans->sku_id[2]) 269cdda18fbSLuca Coelho return 0; 270cdda18fbSLuca Coelho 271cdda18fbSLuca Coelho /* 272cdda18fbSLuca Coelho * If we already loaded (or tried to load) it before, we just 273cdda18fbSLuca Coelho * need to set it again. 274cdda18fbSLuca Coelho */ 275cdda18fbSLuca Coelho if (trans->pnvm_loaded) { 276cdda18fbSLuca Coelho ret = iwl_trans_set_pnvm(trans, NULL, 0); 277cdda18fbSLuca Coelho if (ret) 278cdda18fbSLuca Coelho return ret; 279cdda18fbSLuca Coelho goto skip_parse; 280cdda18fbSLuca Coelho } 281cdda18fbSLuca Coelho 282a1a6a4cfSLuca Coelho /* First attempt to get the PNVM from BIOS */ 28384c3c995SLuca Coelho package = iwl_uefi_get_pnvm(trans, &len); 28484c3c995SLuca Coelho if (!IS_ERR_OR_NULL(package)) { 28584c3c995SLuca Coelho data = kmemdup(package->data, len, GFP_KERNEL); 28684c3c995SLuca Coelho 28784c3c995SLuca Coelho /* free package regardless of whether kmemdup succeeded */ 28884c3c995SLuca Coelho kfree(package); 28984c3c995SLuca Coelho 29084c3c995SLuca Coelho if (data) { 29184c3c995SLuca Coelho /* we need only the data size */ 29284c3c995SLuca Coelho len -= sizeof(*package); 293a1a6a4cfSLuca Coelho goto parse; 29484c3c995SLuca Coelho } 29584c3c995SLuca Coelho } 296a1a6a4cfSLuca Coelho 297a1a6a4cfSLuca Coelho /* If it's not available, try from the filesystem */ 298cdda18fbSLuca Coelho ret = iwl_pnvm_get_from_fs(trans, &data, &len); 299cdda18fbSLuca Coelho if (ret) { 30082a08d0cSJohannes Berg /* 30182a08d0cSJohannes Berg * Pretend we've loaded it - at least we've tried and 30282a08d0cSJohannes Berg * couldn't load it at all, so there's no point in 30382a08d0cSJohannes Berg * trying again over and over. 30482a08d0cSJohannes Berg */ 30582a08d0cSJohannes Berg trans->pnvm_loaded = true; 30669725928SLuca Coelho 307cdda18fbSLuca Coelho goto skip_parse; 3081c58bed4SJohannes Berg } 309b3e4c0f3SLuca Coelho 310a1a6a4cfSLuca Coelho parse: 311cdda18fbSLuca Coelho iwl_pnvm_parse(trans, data, len); 312cdda18fbSLuca Coelho 313cdda18fbSLuca Coelho kfree(data); 314cdda18fbSLuca Coelho 315cdda18fbSLuca Coelho skip_parse: 316*9dad325fSLuca Coelho data = NULL; 317*9dad325fSLuca Coelho /* now try to get the reduce power table, if not loaded yet */ 318*9dad325fSLuca Coelho if (!trans->reduce_power_loaded) { 319*9dad325fSLuca Coelho data = iwl_uefi_get_reduced_power(trans, &len); 320*9dad325fSLuca Coelho if (IS_ERR_OR_NULL(data)) { 321*9dad325fSLuca Coelho /* 322*9dad325fSLuca Coelho * Pretend we've loaded it - at least we've tried and 323*9dad325fSLuca Coelho * couldn't load it at all, so there's no point in 324*9dad325fSLuca Coelho * trying again over and over. 325*9dad325fSLuca Coelho */ 326*9dad325fSLuca Coelho trans->reduce_power_loaded = true; 327*9dad325fSLuca Coelho 328*9dad325fSLuca Coelho goto skip_reduce_power; 329*9dad325fSLuca Coelho } 330*9dad325fSLuca Coelho } 331*9dad325fSLuca Coelho 332*9dad325fSLuca Coelho ret = iwl_trans_set_reduce_power(trans, data, len); 333*9dad325fSLuca Coelho if (ret) 334*9dad325fSLuca Coelho IWL_DEBUG_FW(trans, 335*9dad325fSLuca Coelho "Failed to set reduce power table %d\n", 336*9dad325fSLuca Coelho ret); 337*9dad325fSLuca Coelho kfree(data); 338*9dad325fSLuca Coelho 339*9dad325fSLuca Coelho skip_reduce_power: 340b3e4c0f3SLuca Coelho iwl_init_notification_wait(notif_wait, &pnvm_wait, 341b3e4c0f3SLuca Coelho ntf_cmds, ARRAY_SIZE(ntf_cmds), 342b3e4c0f3SLuca Coelho iwl_pnvm_complete_fn, trans); 343b3e4c0f3SLuca Coelho 344b3e4c0f3SLuca Coelho /* kick the doorbell */ 345b3e4c0f3SLuca Coelho iwl_write_umac_prph(trans, UREG_DOORBELL_TO_ISR6, 346b3e4c0f3SLuca Coelho UREG_DOORBELL_TO_ISR6_PNVM); 347b3e4c0f3SLuca Coelho 348b3e4c0f3SLuca Coelho return iwl_wait_notification(notif_wait, &pnvm_wait, 349b3e4c0f3SLuca Coelho MVM_UCODE_PNVM_TIMEOUT); 350b3e4c0f3SLuca Coelho } 351b3e4c0f3SLuca Coelho IWL_EXPORT_SYMBOL(iwl_pnvm_load); 352