1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  * RapidIO mport character device
4  *
5  * Copyright 2014-2015 Integrated Device Technology, Inc.
6  *    Alexandre Bounine <alexandre.bounine@idt.com>
7  * Copyright 2014-2015 Prodrive Technologies
8  *    Andre van Herk <andre.van.herk@prodrive-technologies.com>
9  *    Jerry Jacobs <jerry.jacobs@prodrive-technologies.com>
10  * Copyright (C) 2014 Texas Instruments Incorporated
11  *    Aurelien Jacquiot <a-jacquiot@ti.com>
12  */
13 #include <linux/module.h>
14 #include <linux/kernel.h>
15 #include <linux/cdev.h>
16 #include <linux/ioctl.h>
17 #include <linux/uaccess.h>
18 #include <linux/list.h>
19 #include <linux/fs.h>
20 #include <linux/err.h>
21 #include <linux/net.h>
22 #include <linux/poll.h>
23 #include <linux/spinlock.h>
24 #include <linux/sched.h>
25 #include <linux/kfifo.h>
26 
27 #include <linux/mm.h>
28 #include <linux/slab.h>
29 #include <linux/vmalloc.h>
30 #include <linux/mman.h>
31 
32 #include <linux/dma-mapping.h>
33 #ifdef CONFIG_RAPIDIO_DMA_ENGINE
34 #include <linux/dmaengine.h>
35 #endif
36 
37 #include <linux/rio.h>
38 #include <linux/rio_ids.h>
39 #include <linux/rio_drv.h>
40 #include <linux/rio_mport_cdev.h>
41 
42 #include "../rio.h"
43 
44 #define DRV_NAME	"rio_mport"
45 #define DRV_PREFIX	DRV_NAME ": "
46 #define DEV_NAME	"rio_mport"
47 #define DRV_VERSION     "1.0.0"
48 
49 /* Debug output filtering masks */
50 enum {
51 	DBG_NONE	= 0,
52 	DBG_INIT	= BIT(0), /* driver init */
53 	DBG_EXIT	= BIT(1), /* driver exit */
54 	DBG_MPORT	= BIT(2), /* mport add/remove */
55 	DBG_RDEV	= BIT(3), /* RapidIO device add/remove */
56 	DBG_DMA		= BIT(4), /* DMA transfer messages */
57 	DBG_MMAP	= BIT(5), /* mapping messages */
58 	DBG_IBW		= BIT(6), /* inbound window */
59 	DBG_EVENT	= BIT(7), /* event handling messages */
60 	DBG_OBW		= BIT(8), /* outbound window messages */
61 	DBG_DBELL	= BIT(9), /* doorbell messages */
62 	DBG_ALL		= ~0,
63 };
64 
65 #ifdef DEBUG
66 #define rmcd_debug(level, fmt, arg...)		\
67 	do {					\
68 		if (DBG_##level & dbg_level)	\
69 			pr_debug(DRV_PREFIX "%s: " fmt "\n", __func__, ##arg); \
70 	} while (0)
71 #else
72 #define rmcd_debug(level, fmt, arg...) \
73 		no_printk(KERN_DEBUG pr_fmt(DRV_PREFIX fmt "\n"), ##arg)
74 #endif
75 
76 #define rmcd_warn(fmt, arg...) \
77 	pr_warn(DRV_PREFIX "%s WARNING " fmt "\n", __func__, ##arg)
78 
79 #define rmcd_error(fmt, arg...) \
80 	pr_err(DRV_PREFIX "%s ERROR " fmt "\n", __func__, ##arg)
81 
82 MODULE_AUTHOR("Jerry Jacobs <jerry.jacobs@prodrive-technologies.com>");
83 MODULE_AUTHOR("Aurelien Jacquiot <a-jacquiot@ti.com>");
84 MODULE_AUTHOR("Alexandre Bounine <alexandre.bounine@idt.com>");
85 MODULE_AUTHOR("Andre van Herk <andre.van.herk@prodrive-technologies.com>");
86 MODULE_DESCRIPTION("RapidIO mport character device driver");
87 MODULE_LICENSE("GPL");
88 MODULE_VERSION(DRV_VERSION);
89 
90 static int dma_timeout = 3000; /* DMA transfer timeout in msec */
91 module_param(dma_timeout, int, S_IRUGO);
92 MODULE_PARM_DESC(dma_timeout, "DMA Transfer Timeout in msec (default: 3000)");
93 
94 #ifdef DEBUG
95 static u32 dbg_level = DBG_NONE;
96 module_param(dbg_level, uint, S_IWUSR | S_IWGRP | S_IRUGO);
97 MODULE_PARM_DESC(dbg_level, "Debugging output level (default 0 = none)");
98 #endif
99 
100 /*
101  * An internal DMA coherent buffer
102  */
103 struct mport_dma_buf {
104 	void		*ib_base;
105 	dma_addr_t	ib_phys;
106 	u32		ib_size;
107 	u64		ib_rio_base;
108 	bool		ib_map;
109 	struct file	*filp;
110 };
111 
112 /*
113  * Internal memory mapping structure
114  */
115 enum rio_mport_map_dir {
116 	MAP_INBOUND,
117 	MAP_OUTBOUND,
118 	MAP_DMA,
119 };
120 
121 struct rio_mport_mapping {
122 	struct list_head node;
123 	struct mport_dev *md;
124 	enum rio_mport_map_dir dir;
125 	u16 rioid;
126 	u64 rio_addr;
127 	dma_addr_t phys_addr; /* for mmap */
128 	void *virt_addr; /* kernel address, for dma_free_coherent */
129 	u64 size;
130 	struct kref ref; /* refcount of vmas sharing the mapping */
131 	struct file *filp;
132 };
133 
134 struct rio_mport_dma_map {
135 	int valid;
136 	u64 length;
137 	void *vaddr;
138 	dma_addr_t paddr;
139 };
140 
141 #define MPORT_MAX_DMA_BUFS	16
142 #define MPORT_EVENT_DEPTH	10
143 
144 /*
145  * mport_dev  driver-specific structure that represents mport device
146  * @active    mport device status flag
147  * @node      list node to maintain list of registered mports
148  * @cdev      character device
149  * @dev       associated device object
150  * @mport     associated subsystem's master port device object
151  * @buf_mutex lock for buffer handling
152  * @file_mutex - lock for open files list
153  * @file_list  - list of open files on given mport
154  * @properties properties of this mport
155  * @portwrites queue of inbound portwrites
156  * @pw_lock    lock for port write queue
157  * @mappings   queue for memory mappings
158  * @dma_chan   DMA channels associated with this device
159  * @dma_ref:
160  * @comp:
161  */
162 struct mport_dev {
163 	atomic_t		active;
164 	struct list_head	node;
165 	struct cdev		cdev;
166 	struct device		dev;
167 	struct rio_mport	*mport;
168 	struct mutex		buf_mutex;
169 	struct mutex		file_mutex;
170 	struct list_head	file_list;
171 	struct rio_mport_properties	properties;
172 	struct list_head		doorbells;
173 	spinlock_t			db_lock;
174 	struct list_head		portwrites;
175 	spinlock_t			pw_lock;
176 	struct list_head	mappings;
177 #ifdef CONFIG_RAPIDIO_DMA_ENGINE
178 	struct dma_chan *dma_chan;
179 	struct kref	dma_ref;
180 	struct completion comp;
181 #endif
182 };
183 
184 /*
185  * mport_cdev_priv - data structure specific to individual file object
186  *                   associated with an open device
187  * @md    master port character device object
188  * @async_queue - asynchronous notification queue
189  * @list - file objects tracking list
190  * @db_filters    inbound doorbell filters for this descriptor
191  * @pw_filters    portwrite filters for this descriptor
192  * @event_fifo    event fifo for this descriptor
193  * @event_rx_wait wait queue for this descriptor
194  * @fifo_lock     lock for event_fifo
195  * @event_mask    event mask for this descriptor
196  * @dmach DMA engine channel allocated for specific file object
197  */
198 struct mport_cdev_priv {
199 	struct mport_dev	*md;
200 	struct fasync_struct	*async_queue;
201 	struct list_head	list;
202 	struct list_head	db_filters;
203 	struct list_head        pw_filters;
204 	struct kfifo            event_fifo;
205 	wait_queue_head_t       event_rx_wait;
206 	spinlock_t              fifo_lock;
207 	u32			event_mask; /* RIO_DOORBELL, RIO_PORTWRITE */
208 #ifdef CONFIG_RAPIDIO_DMA_ENGINE
209 	struct dma_chan		*dmach;
210 	struct list_head	async_list;
211 	spinlock_t              req_lock;
212 	struct mutex		dma_lock;
213 	struct kref		dma_ref;
214 	struct completion	comp;
215 #endif
216 };
217 
218 /*
219  * rio_mport_pw_filter - structure to describe a portwrite filter
220  * md_node   node in mport device's list
221  * priv_node node in private file object's list
222  * priv      reference to private data
223  * filter    actual portwrite filter
224  */
225 struct rio_mport_pw_filter {
226 	struct list_head md_node;
227 	struct list_head priv_node;
228 	struct mport_cdev_priv *priv;
229 	struct rio_pw_filter filter;
230 };
231 
232 /*
233  * rio_mport_db_filter - structure to describe a doorbell filter
234  * @data_node reference to device node
235  * @priv_node node in private data
236  * @priv      reference to private data
237  * @filter    actual doorbell filter
238  */
239 struct rio_mport_db_filter {
240 	struct list_head data_node;
241 	struct list_head priv_node;
242 	struct mport_cdev_priv *priv;
243 	struct rio_doorbell_filter filter;
244 };
245 
246 static LIST_HEAD(mport_devs);
247 static DEFINE_MUTEX(mport_devs_lock);
248 
249 #if (0) /* used by commented out portion of poll function : FIXME */
250 static DECLARE_WAIT_QUEUE_HEAD(mport_cdev_wait);
251 #endif
252 
253 static struct class *dev_class;
254 static dev_t dev_number;
255 
256 static void mport_release_mapping(struct kref *ref);
257 
258 static int rio_mport_maint_rd(struct mport_cdev_priv *priv, void __user *arg,
259 			      int local)
260 {
261 	struct rio_mport *mport = priv->md->mport;
262 	struct rio_mport_maint_io maint_io;
263 	u32 *buffer;
264 	u32 offset;
265 	size_t length;
266 	int ret, i;
267 
268 	if (unlikely(copy_from_user(&maint_io, arg, sizeof(maint_io))))
269 		return -EFAULT;
270 
271 	if ((maint_io.offset % 4) ||
272 	    (maint_io.length == 0) || (maint_io.length % 4) ||
273 	    (maint_io.length + maint_io.offset) > RIO_MAINT_SPACE_SZ)
274 		return -EINVAL;
275 
276 	buffer = vmalloc(maint_io.length);
277 	if (buffer == NULL)
278 		return -ENOMEM;
279 	length = maint_io.length/sizeof(u32);
280 	offset = maint_io.offset;
281 
282 	for (i = 0; i < length; i++) {
283 		if (local)
284 			ret = __rio_local_read_config_32(mport,
285 				offset, &buffer[i]);
286 		else
287 			ret = rio_mport_read_config_32(mport, maint_io.rioid,
288 				maint_io.hopcount, offset, &buffer[i]);
289 		if (ret)
290 			goto out;
291 
292 		offset += 4;
293 	}
294 
295 	if (unlikely(copy_to_user((void __user *)(uintptr_t)maint_io.buffer,
296 				   buffer, maint_io.length)))
297 		ret = -EFAULT;
298 out:
299 	vfree(buffer);
300 	return ret;
301 }
302 
303 static int rio_mport_maint_wr(struct mport_cdev_priv *priv, void __user *arg,
304 			      int local)
305 {
306 	struct rio_mport *mport = priv->md->mport;
307 	struct rio_mport_maint_io maint_io;
308 	u32 *buffer;
309 	u32 offset;
310 	size_t length;
311 	int ret = -EINVAL, i;
312 
313 	if (unlikely(copy_from_user(&maint_io, arg, sizeof(maint_io))))
314 		return -EFAULT;
315 
316 	if ((maint_io.offset % 4) ||
317 	    (maint_io.length == 0) || (maint_io.length % 4) ||
318 	    (maint_io.length + maint_io.offset) > RIO_MAINT_SPACE_SZ)
319 		return -EINVAL;
320 
321 	buffer = vmalloc(maint_io.length);
322 	if (buffer == NULL)
323 		return -ENOMEM;
324 	length = maint_io.length;
325 
326 	if (unlikely(copy_from_user(buffer,
327 			(void __user *)(uintptr_t)maint_io.buffer, length))) {
328 		ret = -EFAULT;
329 		goto out;
330 	}
331 
332 	offset = maint_io.offset;
333 	length /= sizeof(u32);
334 
335 	for (i = 0; i < length; i++) {
336 		if (local)
337 			ret = __rio_local_write_config_32(mport,
338 							  offset, buffer[i]);
339 		else
340 			ret = rio_mport_write_config_32(mport, maint_io.rioid,
341 							maint_io.hopcount,
342 							offset, buffer[i]);
343 		if (ret)
344 			goto out;
345 
346 		offset += 4;
347 	}
348 
349 out:
350 	vfree(buffer);
351 	return ret;
352 }
353 
354 
355 /*
356  * Inbound/outbound memory mapping functions
357  */
358 static int
359 rio_mport_create_outbound_mapping(struct mport_dev *md, struct file *filp,
360 				  u16 rioid, u64 raddr, u32 size,
361 				  dma_addr_t *paddr)
362 {
363 	struct rio_mport *mport = md->mport;
364 	struct rio_mport_mapping *map;
365 	int ret;
366 
367 	rmcd_debug(OBW, "did=%d ra=0x%llx sz=0x%x", rioid, raddr, size);
368 
369 	map = kzalloc(sizeof(*map), GFP_KERNEL);
370 	if (map == NULL)
371 		return -ENOMEM;
372 
373 	ret = rio_map_outb_region(mport, rioid, raddr, size, 0, paddr);
374 	if (ret < 0)
375 		goto err_map_outb;
376 
377 	map->dir = MAP_OUTBOUND;
378 	map->rioid = rioid;
379 	map->rio_addr = raddr;
380 	map->size = size;
381 	map->phys_addr = *paddr;
382 	map->filp = filp;
383 	map->md = md;
384 	kref_init(&map->ref);
385 	list_add_tail(&map->node, &md->mappings);
386 	return 0;
387 err_map_outb:
388 	kfree(map);
389 	return ret;
390 }
391 
392 static int
393 rio_mport_get_outbound_mapping(struct mport_dev *md, struct file *filp,
394 			       u16 rioid, u64 raddr, u32 size,
395 			       dma_addr_t *paddr)
396 {
397 	struct rio_mport_mapping *map;
398 	int err = -ENOMEM;
399 
400 	mutex_lock(&md->buf_mutex);
401 	list_for_each_entry(map, &md->mappings, node) {
402 		if (map->dir != MAP_OUTBOUND)
403 			continue;
404 		if (rioid == map->rioid &&
405 		    raddr == map->rio_addr && size == map->size) {
406 			*paddr = map->phys_addr;
407 			err = 0;
408 			break;
409 		} else if (rioid == map->rioid &&
410 			   raddr < (map->rio_addr + map->size - 1) &&
411 			   (raddr + size) > map->rio_addr) {
412 			err = -EBUSY;
413 			break;
414 		}
415 	}
416 
417 	/* If not found, create new */
418 	if (err == -ENOMEM)
419 		err = rio_mport_create_outbound_mapping(md, filp, rioid, raddr,
420 						size, paddr);
421 	mutex_unlock(&md->buf_mutex);
422 	return err;
423 }
424 
425 static int rio_mport_obw_map(struct file *filp, void __user *arg)
426 {
427 	struct mport_cdev_priv *priv = filp->private_data;
428 	struct mport_dev *data = priv->md;
429 	struct rio_mmap map;
430 	dma_addr_t paddr;
431 	int ret;
432 
433 	if (unlikely(copy_from_user(&map, arg, sizeof(map))))
434 		return -EFAULT;
435 
436 	rmcd_debug(OBW, "did=%d ra=0x%llx sz=0x%llx",
437 		   map.rioid, map.rio_addr, map.length);
438 
439 	ret = rio_mport_get_outbound_mapping(data, filp, map.rioid,
440 					     map.rio_addr, map.length, &paddr);
441 	if (ret < 0) {
442 		rmcd_error("Failed to set OBW err= %d", ret);
443 		return ret;
444 	}
445 
446 	map.handle = paddr;
447 
448 	if (unlikely(copy_to_user(arg, &map, sizeof(map))))
449 		return -EFAULT;
450 	return 0;
451 }
452 
453 /*
454  * rio_mport_obw_free() - unmap an OutBound Window from RapidIO address space
455  *
456  * @priv: driver private data
457  * @arg:  buffer handle returned by allocation routine
458  */
459 static int rio_mport_obw_free(struct file *filp, void __user *arg)
460 {
461 	struct mport_cdev_priv *priv = filp->private_data;
462 	struct mport_dev *md = priv->md;
463 	u64 handle;
464 	struct rio_mport_mapping *map, *_map;
465 
466 	if (!md->mport->ops->unmap_outb)
467 		return -EPROTONOSUPPORT;
468 
469 	if (copy_from_user(&handle, arg, sizeof(handle)))
470 		return -EFAULT;
471 
472 	rmcd_debug(OBW, "h=0x%llx", handle);
473 
474 	mutex_lock(&md->buf_mutex);
475 	list_for_each_entry_safe(map, _map, &md->mappings, node) {
476 		if (map->dir == MAP_OUTBOUND && map->phys_addr == handle) {
477 			if (map->filp == filp) {
478 				rmcd_debug(OBW, "kref_put h=0x%llx", handle);
479 				map->filp = NULL;
480 				kref_put(&map->ref, mport_release_mapping);
481 			}
482 			break;
483 		}
484 	}
485 	mutex_unlock(&md->buf_mutex);
486 
487 	return 0;
488 }
489 
490 /*
491  * maint_hdid_set() - Set the host Device ID
492  * @priv: driver private data
493  * @arg:	Device Id
494  */
495 static int maint_hdid_set(struct mport_cdev_priv *priv, void __user *arg)
496 {
497 	struct mport_dev *md = priv->md;
498 	u16 hdid;
499 
500 	if (copy_from_user(&hdid, arg, sizeof(hdid)))
501 		return -EFAULT;
502 
503 	md->mport->host_deviceid = hdid;
504 	md->properties.hdid = hdid;
505 	rio_local_set_device_id(md->mport, hdid);
506 
507 	rmcd_debug(MPORT, "Set host device Id to %d", hdid);
508 
509 	return 0;
510 }
511 
512 /*
513  * maint_comptag_set() - Set the host Component Tag
514  * @priv: driver private data
515  * @arg:	Component Tag
516  */
517 static int maint_comptag_set(struct mport_cdev_priv *priv, void __user *arg)
518 {
519 	struct mport_dev *md = priv->md;
520 	u32 comptag;
521 
522 	if (copy_from_user(&comptag, arg, sizeof(comptag)))
523 		return -EFAULT;
524 
525 	rio_local_write_config_32(md->mport, RIO_COMPONENT_TAG_CSR, comptag);
526 
527 	rmcd_debug(MPORT, "Set host Component Tag to %d", comptag);
528 
529 	return 0;
530 }
531 
532 #ifdef CONFIG_RAPIDIO_DMA_ENGINE
533 
534 struct mport_dma_req {
535 	struct kref refcount;
536 	struct list_head node;
537 	struct file *filp;
538 	struct mport_cdev_priv *priv;
539 	enum rio_transfer_sync sync;
540 	struct sg_table sgt;
541 	struct page **page_list;
542 	unsigned int nr_pages;
543 	struct rio_mport_mapping *map;
544 	struct dma_chan *dmach;
545 	enum dma_data_direction dir;
546 	dma_cookie_t cookie;
547 	enum dma_status	status;
548 	struct completion req_comp;
549 };
550 
551 static void mport_release_def_dma(struct kref *dma_ref)
552 {
553 	struct mport_dev *md =
554 			container_of(dma_ref, struct mport_dev, dma_ref);
555 
556 	rmcd_debug(EXIT, "DMA_%d", md->dma_chan->chan_id);
557 	rio_release_dma(md->dma_chan);
558 	md->dma_chan = NULL;
559 }
560 
561 static void mport_release_dma(struct kref *dma_ref)
562 {
563 	struct mport_cdev_priv *priv =
564 			container_of(dma_ref, struct mport_cdev_priv, dma_ref);
565 
566 	rmcd_debug(EXIT, "DMA_%d", priv->dmach->chan_id);
567 	complete(&priv->comp);
568 }
569 
570 static void dma_req_free(struct kref *ref)
571 {
572 	struct mport_dma_req *req = container_of(ref, struct mport_dma_req,
573 			refcount);
574 	struct mport_cdev_priv *priv = req->priv;
575 
576 	dma_unmap_sg(req->dmach->device->dev,
577 		     req->sgt.sgl, req->sgt.nents, req->dir);
578 	sg_free_table(&req->sgt);
579 	if (req->page_list) {
580 		unpin_user_pages(req->page_list, req->nr_pages);
581 		kfree(req->page_list);
582 	}
583 
584 	if (req->map) {
585 		mutex_lock(&req->map->md->buf_mutex);
586 		kref_put(&req->map->ref, mport_release_mapping);
587 		mutex_unlock(&req->map->md->buf_mutex);
588 	}
589 
590 	kref_put(&priv->dma_ref, mport_release_dma);
591 
592 	kfree(req);
593 }
594 
595 static void dma_xfer_callback(void *param)
596 {
597 	struct mport_dma_req *req = (struct mport_dma_req *)param;
598 	struct mport_cdev_priv *priv = req->priv;
599 
600 	req->status = dma_async_is_tx_complete(priv->dmach, req->cookie,
601 					       NULL, NULL);
602 	complete(&req->req_comp);
603 	kref_put(&req->refcount, dma_req_free);
604 }
605 
606 /*
607  * prep_dma_xfer() - Configure and send request to DMAengine to prepare DMA
608  *                   transfer object.
609  * Returns pointer to DMA transaction descriptor allocated by DMA driver on
610  * success or ERR_PTR (and/or NULL) if failed. Caller must check returned
611  * non-NULL pointer using IS_ERR macro.
612  */
613 static struct dma_async_tx_descriptor
614 *prep_dma_xfer(struct dma_chan *chan, struct rio_transfer_io *transfer,
615 	struct sg_table *sgt, int nents, enum dma_transfer_direction dir,
616 	enum dma_ctrl_flags flags)
617 {
618 	struct rio_dma_data tx_data;
619 
620 	tx_data.sg = sgt->sgl;
621 	tx_data.sg_len = nents;
622 	tx_data.rio_addr_u = 0;
623 	tx_data.rio_addr = transfer->rio_addr;
624 	if (dir == DMA_MEM_TO_DEV) {
625 		switch (transfer->method) {
626 		case RIO_EXCHANGE_NWRITE:
627 			tx_data.wr_type = RDW_ALL_NWRITE;
628 			break;
629 		case RIO_EXCHANGE_NWRITE_R_ALL:
630 			tx_data.wr_type = RDW_ALL_NWRITE_R;
631 			break;
632 		case RIO_EXCHANGE_NWRITE_R:
633 			tx_data.wr_type = RDW_LAST_NWRITE_R;
634 			break;
635 		case RIO_EXCHANGE_DEFAULT:
636 			tx_data.wr_type = RDW_DEFAULT;
637 			break;
638 		default:
639 			return ERR_PTR(-EINVAL);
640 		}
641 	}
642 
643 	return rio_dma_prep_xfer(chan, transfer->rioid, &tx_data, dir, flags);
644 }
645 
646 /* Request DMA channel associated with this mport device.
647  * Try to request DMA channel for every new process that opened given
648  * mport. If a new DMA channel is not available use default channel
649  * which is the first DMA channel opened on mport device.
650  */
651 static int get_dma_channel(struct mport_cdev_priv *priv)
652 {
653 	mutex_lock(&priv->dma_lock);
654 	if (!priv->dmach) {
655 		priv->dmach = rio_request_mport_dma(priv->md->mport);
656 		if (!priv->dmach) {
657 			/* Use default DMA channel if available */
658 			if (priv->md->dma_chan) {
659 				priv->dmach = priv->md->dma_chan;
660 				kref_get(&priv->md->dma_ref);
661 			} else {
662 				rmcd_error("Failed to get DMA channel");
663 				mutex_unlock(&priv->dma_lock);
664 				return -ENODEV;
665 			}
666 		} else if (!priv->md->dma_chan) {
667 			/* Register default DMA channel if we do not have one */
668 			priv->md->dma_chan = priv->dmach;
669 			kref_init(&priv->md->dma_ref);
670 			rmcd_debug(DMA, "Register DMA_chan %d as default",
671 				   priv->dmach->chan_id);
672 		}
673 
674 		kref_init(&priv->dma_ref);
675 		init_completion(&priv->comp);
676 	}
677 
678 	kref_get(&priv->dma_ref);
679 	mutex_unlock(&priv->dma_lock);
680 	return 0;
681 }
682 
683 static void put_dma_channel(struct mport_cdev_priv *priv)
684 {
685 	kref_put(&priv->dma_ref, mport_release_dma);
686 }
687 
688 /*
689  * DMA transfer functions
690  */
691 static int do_dma_request(struct mport_dma_req *req,
692 			  struct rio_transfer_io *xfer,
693 			  enum rio_transfer_sync sync, int nents)
694 {
695 	struct mport_cdev_priv *priv;
696 	struct sg_table *sgt;
697 	struct dma_chan *chan;
698 	struct dma_async_tx_descriptor *tx;
699 	dma_cookie_t cookie;
700 	unsigned long tmo = msecs_to_jiffies(dma_timeout);
701 	enum dma_transfer_direction dir;
702 	long wret;
703 	int ret = 0;
704 
705 	priv = req->priv;
706 	sgt = &req->sgt;
707 
708 	chan = priv->dmach;
709 	dir = (req->dir == DMA_FROM_DEVICE) ? DMA_DEV_TO_MEM : DMA_MEM_TO_DEV;
710 
711 	rmcd_debug(DMA, "%s(%d) uses %s for DMA_%s",
712 		   current->comm, task_pid_nr(current),
713 		   dev_name(&chan->dev->device),
714 		   (dir == DMA_DEV_TO_MEM)?"READ":"WRITE");
715 
716 	/* Initialize DMA transaction request */
717 	tx = prep_dma_xfer(chan, xfer, sgt, nents, dir,
718 			   DMA_CTRL_ACK | DMA_PREP_INTERRUPT);
719 
720 	if (!tx) {
721 		rmcd_debug(DMA, "prep error for %s A:0x%llx L:0x%llx",
722 			(dir == DMA_DEV_TO_MEM)?"READ":"WRITE",
723 			xfer->rio_addr, xfer->length);
724 		ret = -EIO;
725 		goto err_out;
726 	} else if (IS_ERR(tx)) {
727 		ret = PTR_ERR(tx);
728 		rmcd_debug(DMA, "prep error %d for %s A:0x%llx L:0x%llx", ret,
729 			(dir == DMA_DEV_TO_MEM)?"READ":"WRITE",
730 			xfer->rio_addr, xfer->length);
731 		goto err_out;
732 	}
733 
734 	tx->callback = dma_xfer_callback;
735 	tx->callback_param = req;
736 
737 	req->status = DMA_IN_PROGRESS;
738 	kref_get(&req->refcount);
739 
740 	cookie = dmaengine_submit(tx);
741 	req->cookie = cookie;
742 
743 	rmcd_debug(DMA, "pid=%d DMA_%s tx_cookie = %d", task_pid_nr(current),
744 		   (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", cookie);
745 
746 	if (dma_submit_error(cookie)) {
747 		rmcd_error("submit err=%d (addr:0x%llx len:0x%llx)",
748 			   cookie, xfer->rio_addr, xfer->length);
749 		kref_put(&req->refcount, dma_req_free);
750 		ret = -EIO;
751 		goto err_out;
752 	}
753 
754 	dma_async_issue_pending(chan);
755 
756 	if (sync == RIO_TRANSFER_ASYNC) {
757 		spin_lock(&priv->req_lock);
758 		list_add_tail(&req->node, &priv->async_list);
759 		spin_unlock(&priv->req_lock);
760 		return cookie;
761 	} else if (sync == RIO_TRANSFER_FAF)
762 		return 0;
763 
764 	wret = wait_for_completion_interruptible_timeout(&req->req_comp, tmo);
765 
766 	if (wret == 0) {
767 		/* Timeout on wait occurred */
768 		rmcd_error("%s(%d) timed out waiting for DMA_%s %d",
769 		       current->comm, task_pid_nr(current),
770 		       (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", cookie);
771 		return -ETIMEDOUT;
772 	} else if (wret == -ERESTARTSYS) {
773 		/* Wait_for_completion was interrupted by a signal but DMA may
774 		 * be in progress
775 		 */
776 		rmcd_error("%s(%d) wait for DMA_%s %d was interrupted",
777 			current->comm, task_pid_nr(current),
778 			(dir == DMA_DEV_TO_MEM)?"READ":"WRITE", cookie);
779 		return -EINTR;
780 	}
781 
782 	if (req->status != DMA_COMPLETE) {
783 		/* DMA transaction completion was signaled with error */
784 		rmcd_error("%s(%d) DMA_%s %d completed with status %d (ret=%d)",
785 			current->comm, task_pid_nr(current),
786 			(dir == DMA_DEV_TO_MEM)?"READ":"WRITE",
787 			cookie, req->status, ret);
788 		ret = -EIO;
789 	}
790 
791 err_out:
792 	return ret;
793 }
794 
795 /*
796  * rio_dma_transfer() - Perform RapidIO DMA data transfer to/from
797  *                      the remote RapidIO device
798  * @filp: file pointer associated with the call
799  * @transfer_mode: DMA transfer mode
800  * @sync: synchronization mode
801  * @dir: DMA transfer direction (DMA_MEM_TO_DEV = write OR
802  *                               DMA_DEV_TO_MEM = read)
803  * @xfer: data transfer descriptor structure
804  */
805 static int
806 rio_dma_transfer(struct file *filp, u32 transfer_mode,
807 		 enum rio_transfer_sync sync, enum dma_data_direction dir,
808 		 struct rio_transfer_io *xfer)
809 {
810 	struct mport_cdev_priv *priv = filp->private_data;
811 	unsigned long nr_pages = 0;
812 	struct page **page_list = NULL;
813 	struct mport_dma_req *req;
814 	struct mport_dev *md = priv->md;
815 	struct dma_chan *chan;
816 	int ret;
817 	int nents;
818 
819 	if (xfer->length == 0)
820 		return -EINVAL;
821 	req = kzalloc(sizeof(*req), GFP_KERNEL);
822 	if (!req)
823 		return -ENOMEM;
824 
825 	ret = get_dma_channel(priv);
826 	if (ret) {
827 		kfree(req);
828 		return ret;
829 	}
830 	chan = priv->dmach;
831 
832 	kref_init(&req->refcount);
833 	init_completion(&req->req_comp);
834 	req->dir = dir;
835 	req->filp = filp;
836 	req->priv = priv;
837 	req->dmach = chan;
838 	req->sync = sync;
839 
840 	/*
841 	 * If parameter loc_addr != NULL, we are transferring data from/to
842 	 * data buffer allocated in user-space: lock in memory user-space
843 	 * buffer pages and build an SG table for DMA transfer request
844 	 *
845 	 * Otherwise (loc_addr == NULL) contiguous kernel-space buffer is
846 	 * used for DMA data transfers: build single entry SG table using
847 	 * offset within the internal buffer specified by handle parameter.
848 	 */
849 	if (xfer->loc_addr) {
850 		unsigned int offset;
851 		long pinned;
852 
853 		offset = lower_32_bits(offset_in_page(xfer->loc_addr));
854 		nr_pages = PAGE_ALIGN(xfer->length + offset) >> PAGE_SHIFT;
855 
856 		page_list = kmalloc_array(nr_pages,
857 					  sizeof(*page_list), GFP_KERNEL);
858 		if (page_list == NULL) {
859 			ret = -ENOMEM;
860 			goto err_req;
861 		}
862 
863 		pinned = pin_user_pages_fast(
864 				(unsigned long)xfer->loc_addr & PAGE_MASK,
865 				nr_pages,
866 				dir == DMA_FROM_DEVICE ? FOLL_WRITE : 0,
867 				page_list);
868 
869 		if (pinned != nr_pages) {
870 			if (pinned < 0) {
871 				rmcd_error("pin_user_pages_fast err=%ld",
872 					   pinned);
873 				nr_pages = 0;
874 			} else {
875 				rmcd_error("pinned %ld out of %ld pages",
876 					   pinned, nr_pages);
877 				/*
878 				 * Set nr_pages up to mean "how many pages to unpin, in
879 				 * the error handler:
880 				 */
881 				nr_pages = pinned;
882 			}
883 			ret = -EFAULT;
884 			goto err_pg;
885 		}
886 
887 		ret = sg_alloc_table_from_pages(&req->sgt, page_list, nr_pages,
888 					offset, xfer->length, GFP_KERNEL);
889 		if (ret) {
890 			rmcd_error("sg_alloc_table failed with err=%d", ret);
891 			goto err_pg;
892 		}
893 
894 		req->page_list = page_list;
895 		req->nr_pages = nr_pages;
896 	} else {
897 		dma_addr_t baddr;
898 		struct rio_mport_mapping *map;
899 
900 		baddr = (dma_addr_t)xfer->handle;
901 
902 		mutex_lock(&md->buf_mutex);
903 		list_for_each_entry(map, &md->mappings, node) {
904 			if (baddr >= map->phys_addr &&
905 			    baddr < (map->phys_addr + map->size)) {
906 				kref_get(&map->ref);
907 				req->map = map;
908 				break;
909 			}
910 		}
911 		mutex_unlock(&md->buf_mutex);
912 
913 		if (req->map == NULL) {
914 			ret = -ENOMEM;
915 			goto err_req;
916 		}
917 
918 		if (xfer->length + xfer->offset > req->map->size) {
919 			ret = -EINVAL;
920 			goto err_req;
921 		}
922 
923 		ret = sg_alloc_table(&req->sgt, 1, GFP_KERNEL);
924 		if (unlikely(ret)) {
925 			rmcd_error("sg_alloc_table failed for internal buf");
926 			goto err_req;
927 		}
928 
929 		sg_set_buf(req->sgt.sgl,
930 			   req->map->virt_addr + (baddr - req->map->phys_addr) +
931 				xfer->offset, xfer->length);
932 	}
933 
934 	nents = dma_map_sg(chan->device->dev,
935 			   req->sgt.sgl, req->sgt.nents, dir);
936 	if (nents == 0) {
937 		rmcd_error("Failed to map SG list");
938 		ret = -EFAULT;
939 		goto err_pg;
940 	}
941 
942 	ret = do_dma_request(req, xfer, sync, nents);
943 
944 	if (ret >= 0) {
945 		if (sync == RIO_TRANSFER_ASYNC)
946 			return ret; /* return ASYNC cookie */
947 	} else {
948 		rmcd_debug(DMA, "do_dma_request failed with err=%d", ret);
949 	}
950 
951 err_pg:
952 	if (!req->page_list) {
953 		unpin_user_pages(page_list, nr_pages);
954 		kfree(page_list);
955 	}
956 err_req:
957 	kref_put(&req->refcount, dma_req_free);
958 	return ret;
959 }
960 
961 static int rio_mport_transfer_ioctl(struct file *filp, void __user *arg)
962 {
963 	struct mport_cdev_priv *priv = filp->private_data;
964 	struct rio_transaction transaction;
965 	struct rio_transfer_io *transfer;
966 	enum dma_data_direction dir;
967 	int i, ret = 0;
968 	size_t size;
969 
970 	if (unlikely(copy_from_user(&transaction, arg, sizeof(transaction))))
971 		return -EFAULT;
972 
973 	if (transaction.count != 1) /* only single transfer for now */
974 		return -EINVAL;
975 
976 	if ((transaction.transfer_mode &
977 	     priv->md->properties.transfer_mode) == 0)
978 		return -ENODEV;
979 
980 	size = array_size(sizeof(*transfer), transaction.count);
981 	transfer = vmalloc(size);
982 	if (!transfer)
983 		return -ENOMEM;
984 
985 	if (unlikely(copy_from_user(transfer,
986 				    (void __user *)(uintptr_t)transaction.block,
987 				    size))) {
988 		ret = -EFAULT;
989 		goto out_free;
990 	}
991 
992 	dir = (transaction.dir == RIO_TRANSFER_DIR_READ) ?
993 					DMA_FROM_DEVICE : DMA_TO_DEVICE;
994 	for (i = 0; i < transaction.count && ret == 0; i++)
995 		ret = rio_dma_transfer(filp, transaction.transfer_mode,
996 			transaction.sync, dir, &transfer[i]);
997 
998 	if (unlikely(copy_to_user((void __user *)(uintptr_t)transaction.block,
999 				  transfer, size)))
1000 		ret = -EFAULT;
1001 
1002 out_free:
1003 	vfree(transfer);
1004 
1005 	return ret;
1006 }
1007 
1008 static int rio_mport_wait_for_async_dma(struct file *filp, void __user *arg)
1009 {
1010 	struct mport_cdev_priv *priv;
1011 	struct rio_async_tx_wait w_param;
1012 	struct mport_dma_req *req;
1013 	dma_cookie_t cookie;
1014 	unsigned long tmo;
1015 	long wret;
1016 	int found = 0;
1017 	int ret;
1018 
1019 	priv = (struct mport_cdev_priv *)filp->private_data;
1020 
1021 	if (unlikely(copy_from_user(&w_param, arg, sizeof(w_param))))
1022 		return -EFAULT;
1023 
1024 	cookie = w_param.token;
1025 	if (w_param.timeout)
1026 		tmo = msecs_to_jiffies(w_param.timeout);
1027 	else /* Use default DMA timeout */
1028 		tmo = msecs_to_jiffies(dma_timeout);
1029 
1030 	spin_lock(&priv->req_lock);
1031 	list_for_each_entry(req, &priv->async_list, node) {
1032 		if (req->cookie == cookie) {
1033 			list_del(&req->node);
1034 			found = 1;
1035 			break;
1036 		}
1037 	}
1038 	spin_unlock(&priv->req_lock);
1039 
1040 	if (!found)
1041 		return -EAGAIN;
1042 
1043 	wret = wait_for_completion_interruptible_timeout(&req->req_comp, tmo);
1044 
1045 	if (wret == 0) {
1046 		/* Timeout on wait occurred */
1047 		rmcd_error("%s(%d) timed out waiting for ASYNC DMA_%s",
1048 		       current->comm, task_pid_nr(current),
1049 		       (req->dir == DMA_FROM_DEVICE)?"READ":"WRITE");
1050 		ret = -ETIMEDOUT;
1051 		goto err_tmo;
1052 	} else if (wret == -ERESTARTSYS) {
1053 		/* Wait_for_completion was interrupted by a signal but DMA may
1054 		 * be still in progress
1055 		 */
1056 		rmcd_error("%s(%d) wait for ASYNC DMA_%s was interrupted",
1057 			current->comm, task_pid_nr(current),
1058 			(req->dir == DMA_FROM_DEVICE)?"READ":"WRITE");
1059 		ret = -EINTR;
1060 		goto err_tmo;
1061 	}
1062 
1063 	if (req->status != DMA_COMPLETE) {
1064 		/* DMA transaction completion signaled with transfer error */
1065 		rmcd_error("%s(%d) ASYNC DMA_%s completion with status %d",
1066 			current->comm, task_pid_nr(current),
1067 			(req->dir == DMA_FROM_DEVICE)?"READ":"WRITE",
1068 			req->status);
1069 		ret = -EIO;
1070 	} else
1071 		ret = 0;
1072 
1073 	if (req->status != DMA_IN_PROGRESS && req->status != DMA_PAUSED)
1074 		kref_put(&req->refcount, dma_req_free);
1075 
1076 	return ret;
1077 
1078 err_tmo:
1079 	/* Return request back into async queue */
1080 	spin_lock(&priv->req_lock);
1081 	list_add_tail(&req->node, &priv->async_list);
1082 	spin_unlock(&priv->req_lock);
1083 	return ret;
1084 }
1085 
1086 static int rio_mport_create_dma_mapping(struct mport_dev *md, struct file *filp,
1087 			u64 size, struct rio_mport_mapping **mapping)
1088 {
1089 	struct rio_mport_mapping *map;
1090 
1091 	map = kzalloc(sizeof(*map), GFP_KERNEL);
1092 	if (map == NULL)
1093 		return -ENOMEM;
1094 
1095 	map->virt_addr = dma_alloc_coherent(md->mport->dev.parent, size,
1096 					    &map->phys_addr, GFP_KERNEL);
1097 	if (map->virt_addr == NULL) {
1098 		kfree(map);
1099 		return -ENOMEM;
1100 	}
1101 
1102 	map->dir = MAP_DMA;
1103 	map->size = size;
1104 	map->filp = filp;
1105 	map->md = md;
1106 	kref_init(&map->ref);
1107 	mutex_lock(&md->buf_mutex);
1108 	list_add_tail(&map->node, &md->mappings);
1109 	mutex_unlock(&md->buf_mutex);
1110 	*mapping = map;
1111 
1112 	return 0;
1113 }
1114 
1115 static int rio_mport_alloc_dma(struct file *filp, void __user *arg)
1116 {
1117 	struct mport_cdev_priv *priv = filp->private_data;
1118 	struct mport_dev *md = priv->md;
1119 	struct rio_dma_mem map;
1120 	struct rio_mport_mapping *mapping = NULL;
1121 	int ret;
1122 
1123 	if (unlikely(copy_from_user(&map, arg, sizeof(map))))
1124 		return -EFAULT;
1125 
1126 	ret = rio_mport_create_dma_mapping(md, filp, map.length, &mapping);
1127 	if (ret)
1128 		return ret;
1129 
1130 	map.dma_handle = mapping->phys_addr;
1131 
1132 	if (unlikely(copy_to_user(arg, &map, sizeof(map)))) {
1133 		mutex_lock(&md->buf_mutex);
1134 		kref_put(&mapping->ref, mport_release_mapping);
1135 		mutex_unlock(&md->buf_mutex);
1136 		return -EFAULT;
1137 	}
1138 
1139 	return 0;
1140 }
1141 
1142 static int rio_mport_free_dma(struct file *filp, void __user *arg)
1143 {
1144 	struct mport_cdev_priv *priv = filp->private_data;
1145 	struct mport_dev *md = priv->md;
1146 	u64 handle;
1147 	int ret = -EFAULT;
1148 	struct rio_mport_mapping *map, *_map;
1149 
1150 	if (copy_from_user(&handle, arg, sizeof(handle)))
1151 		return -EFAULT;
1152 	rmcd_debug(EXIT, "filp=%p", filp);
1153 
1154 	mutex_lock(&md->buf_mutex);
1155 	list_for_each_entry_safe(map, _map, &md->mappings, node) {
1156 		if (map->dir == MAP_DMA && map->phys_addr == handle &&
1157 		    map->filp == filp) {
1158 			kref_put(&map->ref, mport_release_mapping);
1159 			ret = 0;
1160 			break;
1161 		}
1162 	}
1163 	mutex_unlock(&md->buf_mutex);
1164 
1165 	if (ret == -EFAULT) {
1166 		rmcd_debug(DMA, "ERR no matching mapping");
1167 		return ret;
1168 	}
1169 
1170 	return 0;
1171 }
1172 #else
1173 static int rio_mport_transfer_ioctl(struct file *filp, void *arg)
1174 {
1175 	return -ENODEV;
1176 }
1177 
1178 static int rio_mport_wait_for_async_dma(struct file *filp, void __user *arg)
1179 {
1180 	return -ENODEV;
1181 }
1182 
1183 static int rio_mport_alloc_dma(struct file *filp, void __user *arg)
1184 {
1185 	return -ENODEV;
1186 }
1187 
1188 static int rio_mport_free_dma(struct file *filp, void __user *arg)
1189 {
1190 	return -ENODEV;
1191 }
1192 #endif /* CONFIG_RAPIDIO_DMA_ENGINE */
1193 
1194 /*
1195  * Inbound/outbound memory mapping functions
1196  */
1197 
1198 static int
1199 rio_mport_create_inbound_mapping(struct mport_dev *md, struct file *filp,
1200 				u64 raddr, u64 size,
1201 				struct rio_mport_mapping **mapping)
1202 {
1203 	struct rio_mport *mport = md->mport;
1204 	struct rio_mport_mapping *map;
1205 	int ret;
1206 
1207 	/* rio_map_inb_region() accepts u32 size */
1208 	if (size > 0xffffffff)
1209 		return -EINVAL;
1210 
1211 	map = kzalloc(sizeof(*map), GFP_KERNEL);
1212 	if (map == NULL)
1213 		return -ENOMEM;
1214 
1215 	map->virt_addr = dma_alloc_coherent(mport->dev.parent, size,
1216 					    &map->phys_addr, GFP_KERNEL);
1217 	if (map->virt_addr == NULL) {
1218 		ret = -ENOMEM;
1219 		goto err_dma_alloc;
1220 	}
1221 
1222 	if (raddr == RIO_MAP_ANY_ADDR)
1223 		raddr = map->phys_addr;
1224 	ret = rio_map_inb_region(mport, map->phys_addr, raddr, (u32)size, 0);
1225 	if (ret < 0)
1226 		goto err_map_inb;
1227 
1228 	map->dir = MAP_INBOUND;
1229 	map->rio_addr = raddr;
1230 	map->size = size;
1231 	map->filp = filp;
1232 	map->md = md;
1233 	kref_init(&map->ref);
1234 	mutex_lock(&md->buf_mutex);
1235 	list_add_tail(&map->node, &md->mappings);
1236 	mutex_unlock(&md->buf_mutex);
1237 	*mapping = map;
1238 	return 0;
1239 
1240 err_map_inb:
1241 	dma_free_coherent(mport->dev.parent, size,
1242 			  map->virt_addr, map->phys_addr);
1243 err_dma_alloc:
1244 	kfree(map);
1245 	return ret;
1246 }
1247 
1248 static int
1249 rio_mport_get_inbound_mapping(struct mport_dev *md, struct file *filp,
1250 			      u64 raddr, u64 size,
1251 			      struct rio_mport_mapping **mapping)
1252 {
1253 	struct rio_mport_mapping *map;
1254 	int err = -ENOMEM;
1255 
1256 	if (raddr == RIO_MAP_ANY_ADDR)
1257 		goto get_new;
1258 
1259 	mutex_lock(&md->buf_mutex);
1260 	list_for_each_entry(map, &md->mappings, node) {
1261 		if (map->dir != MAP_INBOUND)
1262 			continue;
1263 		if (raddr == map->rio_addr && size == map->size) {
1264 			/* allow exact match only */
1265 			*mapping = map;
1266 			err = 0;
1267 			break;
1268 		} else if (raddr < (map->rio_addr + map->size - 1) &&
1269 			   (raddr + size) > map->rio_addr) {
1270 			err = -EBUSY;
1271 			break;
1272 		}
1273 	}
1274 	mutex_unlock(&md->buf_mutex);
1275 
1276 	if (err != -ENOMEM)
1277 		return err;
1278 get_new:
1279 	/* not found, create new */
1280 	return rio_mport_create_inbound_mapping(md, filp, raddr, size, mapping);
1281 }
1282 
1283 static int rio_mport_map_inbound(struct file *filp, void __user *arg)
1284 {
1285 	struct mport_cdev_priv *priv = filp->private_data;
1286 	struct mport_dev *md = priv->md;
1287 	struct rio_mmap map;
1288 	struct rio_mport_mapping *mapping = NULL;
1289 	int ret;
1290 
1291 	if (!md->mport->ops->map_inb)
1292 		return -EPROTONOSUPPORT;
1293 	if (unlikely(copy_from_user(&map, arg, sizeof(map))))
1294 		return -EFAULT;
1295 
1296 	rmcd_debug(IBW, "%s filp=%p", dev_name(&priv->md->dev), filp);
1297 
1298 	ret = rio_mport_get_inbound_mapping(md, filp, map.rio_addr,
1299 					    map.length, &mapping);
1300 	if (ret)
1301 		return ret;
1302 
1303 	map.handle = mapping->phys_addr;
1304 	map.rio_addr = mapping->rio_addr;
1305 
1306 	if (unlikely(copy_to_user(arg, &map, sizeof(map)))) {
1307 		/* Delete mapping if it was created by this request */
1308 		if (ret == 0 && mapping->filp == filp) {
1309 			mutex_lock(&md->buf_mutex);
1310 			kref_put(&mapping->ref, mport_release_mapping);
1311 			mutex_unlock(&md->buf_mutex);
1312 		}
1313 		return -EFAULT;
1314 	}
1315 
1316 	return 0;
1317 }
1318 
1319 /*
1320  * rio_mport_inbound_free() - unmap from RapidIO address space and free
1321  *                    previously allocated inbound DMA coherent buffer
1322  * @priv: driver private data
1323  * @arg:  buffer handle returned by allocation routine
1324  */
1325 static int rio_mport_inbound_free(struct file *filp, void __user *arg)
1326 {
1327 	struct mport_cdev_priv *priv = filp->private_data;
1328 	struct mport_dev *md = priv->md;
1329 	u64 handle;
1330 	struct rio_mport_mapping *map, *_map;
1331 
1332 	rmcd_debug(IBW, "%s filp=%p", dev_name(&priv->md->dev), filp);
1333 
1334 	if (!md->mport->ops->unmap_inb)
1335 		return -EPROTONOSUPPORT;
1336 
1337 	if (copy_from_user(&handle, arg, sizeof(handle)))
1338 		return -EFAULT;
1339 
1340 	mutex_lock(&md->buf_mutex);
1341 	list_for_each_entry_safe(map, _map, &md->mappings, node) {
1342 		if (map->dir == MAP_INBOUND && map->phys_addr == handle) {
1343 			if (map->filp == filp) {
1344 				map->filp = NULL;
1345 				kref_put(&map->ref, mport_release_mapping);
1346 			}
1347 			break;
1348 		}
1349 	}
1350 	mutex_unlock(&md->buf_mutex);
1351 
1352 	return 0;
1353 }
1354 
1355 /*
1356  * maint_port_idx_get() - Get the port index of the mport instance
1357  * @priv: driver private data
1358  * @arg:  port index
1359  */
1360 static int maint_port_idx_get(struct mport_cdev_priv *priv, void __user *arg)
1361 {
1362 	struct mport_dev *md = priv->md;
1363 	u32 port_idx = md->mport->index;
1364 
1365 	rmcd_debug(MPORT, "port_index=%d", port_idx);
1366 
1367 	if (copy_to_user(arg, &port_idx, sizeof(port_idx)))
1368 		return -EFAULT;
1369 
1370 	return 0;
1371 }
1372 
1373 static int rio_mport_add_event(struct mport_cdev_priv *priv,
1374 			       struct rio_event *event)
1375 {
1376 	int overflow;
1377 
1378 	if (!(priv->event_mask & event->header))
1379 		return -EACCES;
1380 
1381 	spin_lock(&priv->fifo_lock);
1382 	overflow = kfifo_avail(&priv->event_fifo) < sizeof(*event)
1383 		|| kfifo_in(&priv->event_fifo, (unsigned char *)event,
1384 			sizeof(*event)) != sizeof(*event);
1385 	spin_unlock(&priv->fifo_lock);
1386 
1387 	wake_up_interruptible(&priv->event_rx_wait);
1388 
1389 	if (overflow) {
1390 		dev_warn(&priv->md->dev, DRV_NAME ": event fifo overflow\n");
1391 		return -EBUSY;
1392 	}
1393 
1394 	return 0;
1395 }
1396 
1397 static void rio_mport_doorbell_handler(struct rio_mport *mport, void *dev_id,
1398 				       u16 src, u16 dst, u16 info)
1399 {
1400 	struct mport_dev *data = dev_id;
1401 	struct mport_cdev_priv *priv;
1402 	struct rio_mport_db_filter *db_filter;
1403 	struct rio_event event;
1404 	int handled;
1405 
1406 	event.header = RIO_DOORBELL;
1407 	event.u.doorbell.rioid = src;
1408 	event.u.doorbell.payload = info;
1409 
1410 	handled = 0;
1411 	spin_lock(&data->db_lock);
1412 	list_for_each_entry(db_filter, &data->doorbells, data_node) {
1413 		if (((db_filter->filter.rioid == RIO_INVALID_DESTID ||
1414 		      db_filter->filter.rioid == src)) &&
1415 		      info >= db_filter->filter.low &&
1416 		      info <= db_filter->filter.high) {
1417 			priv = db_filter->priv;
1418 			rio_mport_add_event(priv, &event);
1419 			handled = 1;
1420 		}
1421 	}
1422 	spin_unlock(&data->db_lock);
1423 
1424 	if (!handled)
1425 		dev_warn(&data->dev,
1426 			"%s: spurious DB received from 0x%x, info=0x%04x\n",
1427 			__func__, src, info);
1428 }
1429 
1430 static int rio_mport_add_db_filter(struct mport_cdev_priv *priv,
1431 				   void __user *arg)
1432 {
1433 	struct mport_dev *md = priv->md;
1434 	struct rio_mport_db_filter *db_filter;
1435 	struct rio_doorbell_filter filter;
1436 	unsigned long flags;
1437 	int ret;
1438 
1439 	if (copy_from_user(&filter, arg, sizeof(filter)))
1440 		return -EFAULT;
1441 
1442 	if (filter.low > filter.high)
1443 		return -EINVAL;
1444 
1445 	ret = rio_request_inb_dbell(md->mport, md, filter.low, filter.high,
1446 				    rio_mport_doorbell_handler);
1447 	if (ret) {
1448 		rmcd_error("%s failed to register IBDB, err=%d",
1449 			   dev_name(&md->dev), ret);
1450 		return ret;
1451 	}
1452 
1453 	db_filter = kzalloc(sizeof(*db_filter), GFP_KERNEL);
1454 	if (db_filter == NULL) {
1455 		rio_release_inb_dbell(md->mport, filter.low, filter.high);
1456 		return -ENOMEM;
1457 	}
1458 
1459 	db_filter->filter = filter;
1460 	db_filter->priv = priv;
1461 	spin_lock_irqsave(&md->db_lock, flags);
1462 	list_add_tail(&db_filter->priv_node, &priv->db_filters);
1463 	list_add_tail(&db_filter->data_node, &md->doorbells);
1464 	spin_unlock_irqrestore(&md->db_lock, flags);
1465 
1466 	return 0;
1467 }
1468 
1469 static void rio_mport_delete_db_filter(struct rio_mport_db_filter *db_filter)
1470 {
1471 	list_del(&db_filter->data_node);
1472 	list_del(&db_filter->priv_node);
1473 	kfree(db_filter);
1474 }
1475 
1476 static int rio_mport_remove_db_filter(struct mport_cdev_priv *priv,
1477 				      void __user *arg)
1478 {
1479 	struct rio_mport_db_filter *db_filter;
1480 	struct rio_doorbell_filter filter;
1481 	unsigned long flags;
1482 	int ret = -EINVAL;
1483 
1484 	if (copy_from_user(&filter, arg, sizeof(filter)))
1485 		return -EFAULT;
1486 
1487 	if (filter.low > filter.high)
1488 		return -EINVAL;
1489 
1490 	spin_lock_irqsave(&priv->md->db_lock, flags);
1491 	list_for_each_entry(db_filter, &priv->db_filters, priv_node) {
1492 		if (db_filter->filter.rioid == filter.rioid &&
1493 		    db_filter->filter.low == filter.low &&
1494 		    db_filter->filter.high == filter.high) {
1495 			rio_mport_delete_db_filter(db_filter);
1496 			ret = 0;
1497 			break;
1498 		}
1499 	}
1500 	spin_unlock_irqrestore(&priv->md->db_lock, flags);
1501 
1502 	if (!ret)
1503 		rio_release_inb_dbell(priv->md->mport, filter.low, filter.high);
1504 
1505 	return ret;
1506 }
1507 
1508 static int rio_mport_match_pw(union rio_pw_msg *msg,
1509 			      struct rio_pw_filter *filter)
1510 {
1511 	if ((msg->em.comptag & filter->mask) < filter->low ||
1512 		(msg->em.comptag & filter->mask) > filter->high)
1513 		return 0;
1514 	return 1;
1515 }
1516 
1517 static int rio_mport_pw_handler(struct rio_mport *mport, void *context,
1518 				union rio_pw_msg *msg, int step)
1519 {
1520 	struct mport_dev *md = context;
1521 	struct mport_cdev_priv *priv;
1522 	struct rio_mport_pw_filter *pw_filter;
1523 	struct rio_event event;
1524 	int handled;
1525 
1526 	event.header = RIO_PORTWRITE;
1527 	memcpy(event.u.portwrite.payload, msg->raw, RIO_PW_MSG_SIZE);
1528 
1529 	handled = 0;
1530 	spin_lock(&md->pw_lock);
1531 	list_for_each_entry(pw_filter, &md->portwrites, md_node) {
1532 		if (rio_mport_match_pw(msg, &pw_filter->filter)) {
1533 			priv = pw_filter->priv;
1534 			rio_mport_add_event(priv, &event);
1535 			handled = 1;
1536 		}
1537 	}
1538 	spin_unlock(&md->pw_lock);
1539 
1540 	if (!handled) {
1541 		printk_ratelimited(KERN_WARNING DRV_NAME
1542 			": mport%d received spurious PW from 0x%08x\n",
1543 			mport->id, msg->em.comptag);
1544 	}
1545 
1546 	return 0;
1547 }
1548 
1549 static int rio_mport_add_pw_filter(struct mport_cdev_priv *priv,
1550 				   void __user *arg)
1551 {
1552 	struct mport_dev *md = priv->md;
1553 	struct rio_mport_pw_filter *pw_filter;
1554 	struct rio_pw_filter filter;
1555 	unsigned long flags;
1556 	int hadd = 0;
1557 
1558 	if (copy_from_user(&filter, arg, sizeof(filter)))
1559 		return -EFAULT;
1560 
1561 	pw_filter = kzalloc(sizeof(*pw_filter), GFP_KERNEL);
1562 	if (pw_filter == NULL)
1563 		return -ENOMEM;
1564 
1565 	pw_filter->filter = filter;
1566 	pw_filter->priv = priv;
1567 	spin_lock_irqsave(&md->pw_lock, flags);
1568 	if (list_empty(&md->portwrites))
1569 		hadd = 1;
1570 	list_add_tail(&pw_filter->priv_node, &priv->pw_filters);
1571 	list_add_tail(&pw_filter->md_node, &md->portwrites);
1572 	spin_unlock_irqrestore(&md->pw_lock, flags);
1573 
1574 	if (hadd) {
1575 		int ret;
1576 
1577 		ret = rio_add_mport_pw_handler(md->mport, md,
1578 					       rio_mport_pw_handler);
1579 		if (ret) {
1580 			dev_err(&md->dev,
1581 				"%s: failed to add IB_PW handler, err=%d\n",
1582 				__func__, ret);
1583 			return ret;
1584 		}
1585 		rio_pw_enable(md->mport, 1);
1586 	}
1587 
1588 	return 0;
1589 }
1590 
1591 static void rio_mport_delete_pw_filter(struct rio_mport_pw_filter *pw_filter)
1592 {
1593 	list_del(&pw_filter->md_node);
1594 	list_del(&pw_filter->priv_node);
1595 	kfree(pw_filter);
1596 }
1597 
1598 static int rio_mport_match_pw_filter(struct rio_pw_filter *a,
1599 				     struct rio_pw_filter *b)
1600 {
1601 	if ((a->mask == b->mask) && (a->low == b->low) && (a->high == b->high))
1602 		return 1;
1603 	return 0;
1604 }
1605 
1606 static int rio_mport_remove_pw_filter(struct mport_cdev_priv *priv,
1607 				      void __user *arg)
1608 {
1609 	struct mport_dev *md = priv->md;
1610 	struct rio_mport_pw_filter *pw_filter;
1611 	struct rio_pw_filter filter;
1612 	unsigned long flags;
1613 	int ret = -EINVAL;
1614 	int hdel = 0;
1615 
1616 	if (copy_from_user(&filter, arg, sizeof(filter)))
1617 		return -EFAULT;
1618 
1619 	spin_lock_irqsave(&md->pw_lock, flags);
1620 	list_for_each_entry(pw_filter, &priv->pw_filters, priv_node) {
1621 		if (rio_mport_match_pw_filter(&pw_filter->filter, &filter)) {
1622 			rio_mport_delete_pw_filter(pw_filter);
1623 			ret = 0;
1624 			break;
1625 		}
1626 	}
1627 
1628 	if (list_empty(&md->portwrites))
1629 		hdel = 1;
1630 	spin_unlock_irqrestore(&md->pw_lock, flags);
1631 
1632 	if (hdel) {
1633 		rio_del_mport_pw_handler(md->mport, priv->md,
1634 					 rio_mport_pw_handler);
1635 		rio_pw_enable(md->mport, 0);
1636 	}
1637 
1638 	return ret;
1639 }
1640 
1641 /*
1642  * rio_release_dev - release routine for kernel RIO device object
1643  * @dev: kernel device object associated with a RIO device structure
1644  *
1645  * Frees a RIO device struct associated a RIO device struct.
1646  * The RIO device struct is freed.
1647  */
1648 static void rio_release_dev(struct device *dev)
1649 {
1650 	struct rio_dev *rdev;
1651 
1652 	rdev = to_rio_dev(dev);
1653 	pr_info(DRV_PREFIX "%s: %s\n", __func__, rio_name(rdev));
1654 	kfree(rdev);
1655 }
1656 
1657 
1658 static void rio_release_net(struct device *dev)
1659 {
1660 	struct rio_net *net;
1661 
1662 	net = to_rio_net(dev);
1663 	rmcd_debug(RDEV, "net_%d", net->id);
1664 	kfree(net);
1665 }
1666 
1667 
1668 /*
1669  * rio_mport_add_riodev - creates a kernel RIO device object
1670  *
1671  * Allocates a RIO device data structure and initializes required fields based
1672  * on device's configuration space contents.
1673  * If the device has switch capabilities, then a switch specific portion is
1674  * allocated and configured.
1675  */
1676 static int rio_mport_add_riodev(struct mport_cdev_priv *priv,
1677 				   void __user *arg)
1678 {
1679 	struct mport_dev *md = priv->md;
1680 	struct rio_rdev_info dev_info;
1681 	struct rio_dev *rdev;
1682 	struct rio_switch *rswitch = NULL;
1683 	struct rio_mport *mport;
1684 	struct device *dev;
1685 	size_t size;
1686 	u32 rval;
1687 	u32 swpinfo = 0;
1688 	u16 destid;
1689 	u8 hopcount;
1690 	int err;
1691 
1692 	if (copy_from_user(&dev_info, arg, sizeof(dev_info)))
1693 		return -EFAULT;
1694 	dev_info.name[sizeof(dev_info.name) - 1] = '\0';
1695 
1696 	rmcd_debug(RDEV, "name:%s ct:0x%x did:0x%x hc:0x%x", dev_info.name,
1697 		   dev_info.comptag, dev_info.destid, dev_info.hopcount);
1698 
1699 	dev = bus_find_device_by_name(&rio_bus_type, NULL, dev_info.name);
1700 	if (dev) {
1701 		rmcd_debug(RDEV, "device %s already exists", dev_info.name);
1702 		put_device(dev);
1703 		return -EEXIST;
1704 	}
1705 
1706 	size = sizeof(*rdev);
1707 	mport = md->mport;
1708 	destid = dev_info.destid;
1709 	hopcount = dev_info.hopcount;
1710 
1711 	if (rio_mport_read_config_32(mport, destid, hopcount,
1712 				     RIO_PEF_CAR, &rval))
1713 		return -EIO;
1714 
1715 	if (rval & RIO_PEF_SWITCH) {
1716 		rio_mport_read_config_32(mport, destid, hopcount,
1717 					 RIO_SWP_INFO_CAR, &swpinfo);
1718 		size += struct_size(rswitch, nextdev, RIO_GET_TOTAL_PORTS(swpinfo));
1719 	}
1720 
1721 	rdev = kzalloc(size, GFP_KERNEL);
1722 	if (rdev == NULL)
1723 		return -ENOMEM;
1724 
1725 	if (mport->net == NULL) {
1726 		struct rio_net *net;
1727 
1728 		net = rio_alloc_net(mport);
1729 		if (!net) {
1730 			err = -ENOMEM;
1731 			rmcd_debug(RDEV, "failed to allocate net object");
1732 			goto cleanup;
1733 		}
1734 
1735 		net->id = mport->id;
1736 		net->hport = mport;
1737 		dev_set_name(&net->dev, "rnet_%d", net->id);
1738 		net->dev.parent = &mport->dev;
1739 		net->dev.release = rio_release_net;
1740 		err = rio_add_net(net);
1741 		if (err) {
1742 			rmcd_debug(RDEV, "failed to register net, err=%d", err);
1743 			kfree(net);
1744 			goto cleanup;
1745 		}
1746 	}
1747 
1748 	rdev->net = mport->net;
1749 	rdev->pef = rval;
1750 	rdev->swpinfo = swpinfo;
1751 	rio_mport_read_config_32(mport, destid, hopcount,
1752 				 RIO_DEV_ID_CAR, &rval);
1753 	rdev->did = rval >> 16;
1754 	rdev->vid = rval & 0xffff;
1755 	rio_mport_read_config_32(mport, destid, hopcount, RIO_DEV_INFO_CAR,
1756 				 &rdev->device_rev);
1757 	rio_mport_read_config_32(mport, destid, hopcount, RIO_ASM_ID_CAR,
1758 				 &rval);
1759 	rdev->asm_did = rval >> 16;
1760 	rdev->asm_vid = rval & 0xffff;
1761 	rio_mport_read_config_32(mport, destid, hopcount, RIO_ASM_INFO_CAR,
1762 				 &rval);
1763 	rdev->asm_rev = rval >> 16;
1764 
1765 	if (rdev->pef & RIO_PEF_EXT_FEATURES) {
1766 		rdev->efptr = rval & 0xffff;
1767 		rdev->phys_efptr = rio_mport_get_physefb(mport, 0, destid,
1768 						hopcount, &rdev->phys_rmap);
1769 
1770 		rdev->em_efptr = rio_mport_get_feature(mport, 0, destid,
1771 						hopcount, RIO_EFB_ERR_MGMNT);
1772 	}
1773 
1774 	rio_mport_read_config_32(mport, destid, hopcount, RIO_SRC_OPS_CAR,
1775 				 &rdev->src_ops);
1776 	rio_mport_read_config_32(mport, destid, hopcount, RIO_DST_OPS_CAR,
1777 				 &rdev->dst_ops);
1778 
1779 	rdev->comp_tag = dev_info.comptag;
1780 	rdev->destid = destid;
1781 	/* hopcount is stored as specified by a caller, regardles of EP or SW */
1782 	rdev->hopcount = hopcount;
1783 
1784 	if (rdev->pef & RIO_PEF_SWITCH) {
1785 		rswitch = rdev->rswitch;
1786 		rswitch->route_table = NULL;
1787 	}
1788 
1789 	if (strlen(dev_info.name))
1790 		dev_set_name(&rdev->dev, "%s", dev_info.name);
1791 	else if (rdev->pef & RIO_PEF_SWITCH)
1792 		dev_set_name(&rdev->dev, "%02x:s:%04x", mport->id,
1793 			     rdev->comp_tag & RIO_CTAG_UDEVID);
1794 	else
1795 		dev_set_name(&rdev->dev, "%02x:e:%04x", mport->id,
1796 			     rdev->comp_tag & RIO_CTAG_UDEVID);
1797 
1798 	INIT_LIST_HEAD(&rdev->net_list);
1799 	rdev->dev.parent = &mport->net->dev;
1800 	rio_attach_device(rdev);
1801 	rdev->dev.release = rio_release_dev;
1802 
1803 	if (rdev->dst_ops & RIO_DST_OPS_DOORBELL)
1804 		rio_init_dbell_res(&rdev->riores[RIO_DOORBELL_RESOURCE],
1805 				   0, 0xffff);
1806 	err = rio_add_device(rdev);
1807 	if (err) {
1808 		put_device(&rdev->dev);
1809 		return err;
1810 	}
1811 
1812 	rio_dev_get(rdev);
1813 
1814 	return 0;
1815 cleanup:
1816 	kfree(rdev);
1817 	return err;
1818 }
1819 
1820 static int rio_mport_del_riodev(struct mport_cdev_priv *priv, void __user *arg)
1821 {
1822 	struct rio_rdev_info dev_info;
1823 	struct rio_dev *rdev = NULL;
1824 	struct device  *dev;
1825 	struct rio_mport *mport;
1826 	struct rio_net *net;
1827 
1828 	if (copy_from_user(&dev_info, arg, sizeof(dev_info)))
1829 		return -EFAULT;
1830 	dev_info.name[sizeof(dev_info.name) - 1] = '\0';
1831 
1832 	mport = priv->md->mport;
1833 
1834 	/* If device name is specified, removal by name has priority */
1835 	if (strlen(dev_info.name)) {
1836 		dev = bus_find_device_by_name(&rio_bus_type, NULL,
1837 					      dev_info.name);
1838 		if (dev)
1839 			rdev = to_rio_dev(dev);
1840 	} else {
1841 		do {
1842 			rdev = rio_get_comptag(dev_info.comptag, rdev);
1843 			if (rdev && rdev->dev.parent == &mport->net->dev &&
1844 			    rdev->destid == dev_info.destid &&
1845 			    rdev->hopcount == dev_info.hopcount)
1846 				break;
1847 		} while (rdev);
1848 	}
1849 
1850 	if (!rdev) {
1851 		rmcd_debug(RDEV,
1852 			"device name:%s ct:0x%x did:0x%x hc:0x%x not found",
1853 			dev_info.name, dev_info.comptag, dev_info.destid,
1854 			dev_info.hopcount);
1855 		return -ENODEV;
1856 	}
1857 
1858 	net = rdev->net;
1859 	rio_dev_put(rdev);
1860 	rio_del_device(rdev, RIO_DEVICE_SHUTDOWN);
1861 
1862 	if (list_empty(&net->devices)) {
1863 		rio_free_net(net);
1864 		mport->net = NULL;
1865 	}
1866 
1867 	return 0;
1868 }
1869 
1870 /*
1871  * Mport cdev management
1872  */
1873 
1874 /*
1875  * mport_cdev_open() - Open character device (mport)
1876  */
1877 static int mport_cdev_open(struct inode *inode, struct file *filp)
1878 {
1879 	int ret;
1880 	int minor = iminor(inode);
1881 	struct mport_dev *chdev;
1882 	struct mport_cdev_priv *priv;
1883 
1884 	/* Test for valid device */
1885 	if (minor >= RIO_MAX_MPORTS) {
1886 		rmcd_error("Invalid minor device number");
1887 		return -EINVAL;
1888 	}
1889 
1890 	chdev = container_of(inode->i_cdev, struct mport_dev, cdev);
1891 
1892 	rmcd_debug(INIT, "%s filp=%p", dev_name(&chdev->dev), filp);
1893 
1894 	if (atomic_read(&chdev->active) == 0)
1895 		return -ENODEV;
1896 
1897 	get_device(&chdev->dev);
1898 
1899 	priv = kzalloc(sizeof(*priv), GFP_KERNEL);
1900 	if (!priv) {
1901 		put_device(&chdev->dev);
1902 		return -ENOMEM;
1903 	}
1904 
1905 	priv->md = chdev;
1906 
1907 	INIT_LIST_HEAD(&priv->db_filters);
1908 	INIT_LIST_HEAD(&priv->pw_filters);
1909 	spin_lock_init(&priv->fifo_lock);
1910 	init_waitqueue_head(&priv->event_rx_wait);
1911 	ret = kfifo_alloc(&priv->event_fifo,
1912 			  sizeof(struct rio_event) * MPORT_EVENT_DEPTH,
1913 			  GFP_KERNEL);
1914 	if (ret < 0) {
1915 		put_device(&chdev->dev);
1916 		dev_err(&chdev->dev, DRV_NAME ": kfifo_alloc failed\n");
1917 		ret = -ENOMEM;
1918 		goto err_fifo;
1919 	}
1920 
1921 #ifdef CONFIG_RAPIDIO_DMA_ENGINE
1922 	INIT_LIST_HEAD(&priv->async_list);
1923 	spin_lock_init(&priv->req_lock);
1924 	mutex_init(&priv->dma_lock);
1925 #endif
1926 	mutex_lock(&chdev->file_mutex);
1927 	list_add_tail(&priv->list, &chdev->file_list);
1928 	mutex_unlock(&chdev->file_mutex);
1929 
1930 	filp->private_data = priv;
1931 	goto out;
1932 err_fifo:
1933 	kfree(priv);
1934 out:
1935 	return ret;
1936 }
1937 
1938 static int mport_cdev_fasync(int fd, struct file *filp, int mode)
1939 {
1940 	struct mport_cdev_priv *priv = filp->private_data;
1941 
1942 	return fasync_helper(fd, filp, mode, &priv->async_queue);
1943 }
1944 
1945 #ifdef CONFIG_RAPIDIO_DMA_ENGINE
1946 static void mport_cdev_release_dma(struct file *filp)
1947 {
1948 	struct mport_cdev_priv *priv = filp->private_data;
1949 	struct mport_dev *md;
1950 	struct mport_dma_req *req, *req_next;
1951 	unsigned long tmo = msecs_to_jiffies(dma_timeout);
1952 	long wret;
1953 	LIST_HEAD(list);
1954 
1955 	rmcd_debug(EXIT, "from filp=%p %s(%d)",
1956 		   filp, current->comm, task_pid_nr(current));
1957 
1958 	if (!priv->dmach) {
1959 		rmcd_debug(EXIT, "No DMA channel for filp=%p", filp);
1960 		return;
1961 	}
1962 
1963 	md = priv->md;
1964 
1965 	spin_lock(&priv->req_lock);
1966 	if (!list_empty(&priv->async_list)) {
1967 		rmcd_debug(EXIT, "async list not empty filp=%p %s(%d)",
1968 			   filp, current->comm, task_pid_nr(current));
1969 		list_splice_init(&priv->async_list, &list);
1970 	}
1971 	spin_unlock(&priv->req_lock);
1972 
1973 	if (!list_empty(&list)) {
1974 		rmcd_debug(EXIT, "temp list not empty");
1975 		list_for_each_entry_safe(req, req_next, &list, node) {
1976 			rmcd_debug(EXIT, "free req->filp=%p cookie=%d compl=%s",
1977 				   req->filp, req->cookie,
1978 				   completion_done(&req->req_comp)?"yes":"no");
1979 			list_del(&req->node);
1980 			kref_put(&req->refcount, dma_req_free);
1981 		}
1982 	}
1983 
1984 	put_dma_channel(priv);
1985 	wret = wait_for_completion_interruptible_timeout(&priv->comp, tmo);
1986 
1987 	if (wret <= 0) {
1988 		rmcd_error("%s(%d) failed waiting for DMA release err=%ld",
1989 			current->comm, task_pid_nr(current), wret);
1990 	}
1991 
1992 	if (priv->dmach != priv->md->dma_chan) {
1993 		rmcd_debug(EXIT, "Release DMA channel for filp=%p %s(%d)",
1994 			   filp, current->comm, task_pid_nr(current));
1995 		rio_release_dma(priv->dmach);
1996 	} else {
1997 		rmcd_debug(EXIT, "Adjust default DMA channel refcount");
1998 		kref_put(&md->dma_ref, mport_release_def_dma);
1999 	}
2000 
2001 	priv->dmach = NULL;
2002 }
2003 #else
2004 #define mport_cdev_release_dma(priv) do {} while (0)
2005 #endif
2006 
2007 /*
2008  * mport_cdev_release() - Release character device
2009  */
2010 static int mport_cdev_release(struct inode *inode, struct file *filp)
2011 {
2012 	struct mport_cdev_priv *priv = filp->private_data;
2013 	struct mport_dev *chdev;
2014 	struct rio_mport_pw_filter *pw_filter, *pw_filter_next;
2015 	struct rio_mport_db_filter *db_filter, *db_filter_next;
2016 	struct rio_mport_mapping *map, *_map;
2017 	unsigned long flags;
2018 
2019 	rmcd_debug(EXIT, "%s filp=%p", dev_name(&priv->md->dev), filp);
2020 
2021 	chdev = priv->md;
2022 	mport_cdev_release_dma(filp);
2023 
2024 	priv->event_mask = 0;
2025 
2026 	spin_lock_irqsave(&chdev->pw_lock, flags);
2027 	if (!list_empty(&priv->pw_filters)) {
2028 		list_for_each_entry_safe(pw_filter, pw_filter_next,
2029 					 &priv->pw_filters, priv_node)
2030 			rio_mport_delete_pw_filter(pw_filter);
2031 	}
2032 	spin_unlock_irqrestore(&chdev->pw_lock, flags);
2033 
2034 	spin_lock_irqsave(&chdev->db_lock, flags);
2035 	list_for_each_entry_safe(db_filter, db_filter_next,
2036 				 &priv->db_filters, priv_node) {
2037 		rio_mport_delete_db_filter(db_filter);
2038 	}
2039 	spin_unlock_irqrestore(&chdev->db_lock, flags);
2040 
2041 	kfifo_free(&priv->event_fifo);
2042 
2043 	mutex_lock(&chdev->buf_mutex);
2044 	list_for_each_entry_safe(map, _map, &chdev->mappings, node) {
2045 		if (map->filp == filp) {
2046 			rmcd_debug(EXIT, "release mapping %p filp=%p",
2047 				   map->virt_addr, filp);
2048 			kref_put(&map->ref, mport_release_mapping);
2049 		}
2050 	}
2051 	mutex_unlock(&chdev->buf_mutex);
2052 
2053 	mport_cdev_fasync(-1, filp, 0);
2054 	filp->private_data = NULL;
2055 	mutex_lock(&chdev->file_mutex);
2056 	list_del(&priv->list);
2057 	mutex_unlock(&chdev->file_mutex);
2058 	put_device(&chdev->dev);
2059 	kfree(priv);
2060 	return 0;
2061 }
2062 
2063 /*
2064  * mport_cdev_ioctl() - IOCTLs for character device
2065  */
2066 static long mport_cdev_ioctl(struct file *filp,
2067 		unsigned int cmd, unsigned long arg)
2068 {
2069 	int err = -EINVAL;
2070 	struct mport_cdev_priv *data = filp->private_data;
2071 	struct mport_dev *md = data->md;
2072 
2073 	if (atomic_read(&md->active) == 0)
2074 		return -ENODEV;
2075 
2076 	switch (cmd) {
2077 	case RIO_MPORT_MAINT_READ_LOCAL:
2078 		return rio_mport_maint_rd(data, (void __user *)arg, 1);
2079 	case RIO_MPORT_MAINT_WRITE_LOCAL:
2080 		return rio_mport_maint_wr(data, (void __user *)arg, 1);
2081 	case RIO_MPORT_MAINT_READ_REMOTE:
2082 		return rio_mport_maint_rd(data, (void __user *)arg, 0);
2083 	case RIO_MPORT_MAINT_WRITE_REMOTE:
2084 		return rio_mport_maint_wr(data, (void __user *)arg, 0);
2085 	case RIO_MPORT_MAINT_HDID_SET:
2086 		return maint_hdid_set(data, (void __user *)arg);
2087 	case RIO_MPORT_MAINT_COMPTAG_SET:
2088 		return maint_comptag_set(data, (void __user *)arg);
2089 	case RIO_MPORT_MAINT_PORT_IDX_GET:
2090 		return maint_port_idx_get(data, (void __user *)arg);
2091 	case RIO_MPORT_GET_PROPERTIES:
2092 		md->properties.hdid = md->mport->host_deviceid;
2093 		if (copy_to_user((void __user *)arg, &(md->properties),
2094 				 sizeof(md->properties)))
2095 			return -EFAULT;
2096 		return 0;
2097 	case RIO_ENABLE_DOORBELL_RANGE:
2098 		return rio_mport_add_db_filter(data, (void __user *)arg);
2099 	case RIO_DISABLE_DOORBELL_RANGE:
2100 		return rio_mport_remove_db_filter(data, (void __user *)arg);
2101 	case RIO_ENABLE_PORTWRITE_RANGE:
2102 		return rio_mport_add_pw_filter(data, (void __user *)arg);
2103 	case RIO_DISABLE_PORTWRITE_RANGE:
2104 		return rio_mport_remove_pw_filter(data, (void __user *)arg);
2105 	case RIO_SET_EVENT_MASK:
2106 		data->event_mask = (u32)arg;
2107 		return 0;
2108 	case RIO_GET_EVENT_MASK:
2109 		if (copy_to_user((void __user *)arg, &data->event_mask,
2110 				    sizeof(u32)))
2111 			return -EFAULT;
2112 		return 0;
2113 	case RIO_MAP_OUTBOUND:
2114 		return rio_mport_obw_map(filp, (void __user *)arg);
2115 	case RIO_MAP_INBOUND:
2116 		return rio_mport_map_inbound(filp, (void __user *)arg);
2117 	case RIO_UNMAP_OUTBOUND:
2118 		return rio_mport_obw_free(filp, (void __user *)arg);
2119 	case RIO_UNMAP_INBOUND:
2120 		return rio_mport_inbound_free(filp, (void __user *)arg);
2121 	case RIO_ALLOC_DMA:
2122 		return rio_mport_alloc_dma(filp, (void __user *)arg);
2123 	case RIO_FREE_DMA:
2124 		return rio_mport_free_dma(filp, (void __user *)arg);
2125 	case RIO_WAIT_FOR_ASYNC:
2126 		return rio_mport_wait_for_async_dma(filp, (void __user *)arg);
2127 	case RIO_TRANSFER:
2128 		return rio_mport_transfer_ioctl(filp, (void __user *)arg);
2129 	case RIO_DEV_ADD:
2130 		return rio_mport_add_riodev(data, (void __user *)arg);
2131 	case RIO_DEV_DEL:
2132 		return rio_mport_del_riodev(data, (void __user *)arg);
2133 	default:
2134 		break;
2135 	}
2136 
2137 	return err;
2138 }
2139 
2140 /*
2141  * mport_release_mapping - free mapping resources and info structure
2142  * @ref: a pointer to the kref within struct rio_mport_mapping
2143  *
2144  * NOTE: Shall be called while holding buf_mutex.
2145  */
2146 static void mport_release_mapping(struct kref *ref)
2147 {
2148 	struct rio_mport_mapping *map =
2149 			container_of(ref, struct rio_mport_mapping, ref);
2150 	struct rio_mport *mport = map->md->mport;
2151 
2152 	rmcd_debug(MMAP, "type %d mapping @ %p (phys = %pad) for %s",
2153 		   map->dir, map->virt_addr,
2154 		   &map->phys_addr, mport->name);
2155 
2156 	list_del(&map->node);
2157 
2158 	switch (map->dir) {
2159 	case MAP_INBOUND:
2160 		rio_unmap_inb_region(mport, map->phys_addr);
2161 		fallthrough;
2162 	case MAP_DMA:
2163 		dma_free_coherent(mport->dev.parent, map->size,
2164 				  map->virt_addr, map->phys_addr);
2165 		break;
2166 	case MAP_OUTBOUND:
2167 		rio_unmap_outb_region(mport, map->rioid, map->rio_addr);
2168 		break;
2169 	}
2170 	kfree(map);
2171 }
2172 
2173 static void mport_mm_open(struct vm_area_struct *vma)
2174 {
2175 	struct rio_mport_mapping *map = vma->vm_private_data;
2176 
2177 	rmcd_debug(MMAP, "%pad", &map->phys_addr);
2178 	kref_get(&map->ref);
2179 }
2180 
2181 static void mport_mm_close(struct vm_area_struct *vma)
2182 {
2183 	struct rio_mport_mapping *map = vma->vm_private_data;
2184 
2185 	rmcd_debug(MMAP, "%pad", &map->phys_addr);
2186 	mutex_lock(&map->md->buf_mutex);
2187 	kref_put(&map->ref, mport_release_mapping);
2188 	mutex_unlock(&map->md->buf_mutex);
2189 }
2190 
2191 static const struct vm_operations_struct vm_ops = {
2192 	.open =	mport_mm_open,
2193 	.close = mport_mm_close,
2194 };
2195 
2196 static int mport_cdev_mmap(struct file *filp, struct vm_area_struct *vma)
2197 {
2198 	struct mport_cdev_priv *priv = filp->private_data;
2199 	struct mport_dev *md;
2200 	size_t size = vma->vm_end - vma->vm_start;
2201 	dma_addr_t baddr;
2202 	unsigned long offset;
2203 	int found = 0, ret;
2204 	struct rio_mport_mapping *map;
2205 
2206 	rmcd_debug(MMAP, "0x%x bytes at offset 0x%lx",
2207 		   (unsigned int)size, vma->vm_pgoff);
2208 
2209 	md = priv->md;
2210 	baddr = ((dma_addr_t)vma->vm_pgoff << PAGE_SHIFT);
2211 
2212 	mutex_lock(&md->buf_mutex);
2213 	list_for_each_entry(map, &md->mappings, node) {
2214 		if (baddr >= map->phys_addr &&
2215 		    baddr < (map->phys_addr + map->size)) {
2216 			found = 1;
2217 			break;
2218 		}
2219 	}
2220 	mutex_unlock(&md->buf_mutex);
2221 
2222 	if (!found)
2223 		return -ENOMEM;
2224 
2225 	offset = baddr - map->phys_addr;
2226 
2227 	if (size + offset > map->size)
2228 		return -EINVAL;
2229 
2230 	vma->vm_pgoff = offset >> PAGE_SHIFT;
2231 	rmcd_debug(MMAP, "MMAP adjusted offset = 0x%lx", vma->vm_pgoff);
2232 
2233 	if (map->dir == MAP_INBOUND || map->dir == MAP_DMA)
2234 		ret = dma_mmap_coherent(md->mport->dev.parent, vma,
2235 				map->virt_addr, map->phys_addr, map->size);
2236 	else if (map->dir == MAP_OUTBOUND) {
2237 		vma->vm_page_prot = pgprot_noncached(vma->vm_page_prot);
2238 		ret = vm_iomap_memory(vma, map->phys_addr, map->size);
2239 	} else {
2240 		rmcd_error("Attempt to mmap unsupported mapping type");
2241 		ret = -EIO;
2242 	}
2243 
2244 	if (!ret) {
2245 		vma->vm_private_data = map;
2246 		vma->vm_ops = &vm_ops;
2247 		mport_mm_open(vma);
2248 	} else {
2249 		rmcd_error("MMAP exit with err=%d", ret);
2250 	}
2251 
2252 	return ret;
2253 }
2254 
2255 static __poll_t mport_cdev_poll(struct file *filp, poll_table *wait)
2256 {
2257 	struct mport_cdev_priv *priv = filp->private_data;
2258 
2259 	poll_wait(filp, &priv->event_rx_wait, wait);
2260 	if (kfifo_len(&priv->event_fifo))
2261 		return EPOLLIN | EPOLLRDNORM;
2262 
2263 	return 0;
2264 }
2265 
2266 static ssize_t mport_read(struct file *filp, char __user *buf, size_t count,
2267 			loff_t *ppos)
2268 {
2269 	struct mport_cdev_priv *priv = filp->private_data;
2270 	int copied;
2271 	ssize_t ret;
2272 
2273 	if (!count)
2274 		return 0;
2275 
2276 	if (kfifo_is_empty(&priv->event_fifo) &&
2277 	    (filp->f_flags & O_NONBLOCK))
2278 		return -EAGAIN;
2279 
2280 	if (count % sizeof(struct rio_event))
2281 		return -EINVAL;
2282 
2283 	ret = wait_event_interruptible(priv->event_rx_wait,
2284 					kfifo_len(&priv->event_fifo) != 0);
2285 	if (ret)
2286 		return ret;
2287 
2288 	while (ret < count) {
2289 		if (kfifo_to_user(&priv->event_fifo, buf,
2290 		      sizeof(struct rio_event), &copied))
2291 			return -EFAULT;
2292 		ret += copied;
2293 		buf += copied;
2294 	}
2295 
2296 	return ret;
2297 }
2298 
2299 static ssize_t mport_write(struct file *filp, const char __user *buf,
2300 			 size_t count, loff_t *ppos)
2301 {
2302 	struct mport_cdev_priv *priv = filp->private_data;
2303 	struct rio_mport *mport = priv->md->mport;
2304 	struct rio_event event;
2305 	int len, ret;
2306 
2307 	if (!count)
2308 		return 0;
2309 
2310 	if (count % sizeof(event))
2311 		return -EINVAL;
2312 
2313 	len = 0;
2314 	while ((count - len) >= (int)sizeof(event)) {
2315 		if (copy_from_user(&event, buf, sizeof(event)))
2316 			return -EFAULT;
2317 
2318 		if (event.header != RIO_DOORBELL)
2319 			return -EINVAL;
2320 
2321 		ret = rio_mport_send_doorbell(mport,
2322 					      event.u.doorbell.rioid,
2323 					      event.u.doorbell.payload);
2324 		if (ret < 0)
2325 			return ret;
2326 
2327 		len += sizeof(event);
2328 		buf += sizeof(event);
2329 	}
2330 
2331 	return len;
2332 }
2333 
2334 static const struct file_operations mport_fops = {
2335 	.owner		= THIS_MODULE,
2336 	.open		= mport_cdev_open,
2337 	.release	= mport_cdev_release,
2338 	.poll		= mport_cdev_poll,
2339 	.read		= mport_read,
2340 	.write		= mport_write,
2341 	.mmap		= mport_cdev_mmap,
2342 	.fasync		= mport_cdev_fasync,
2343 	.unlocked_ioctl = mport_cdev_ioctl
2344 };
2345 
2346 /*
2347  * Character device management
2348  */
2349 
2350 static void mport_device_release(struct device *dev)
2351 {
2352 	struct mport_dev *md;
2353 
2354 	rmcd_debug(EXIT, "%s", dev_name(dev));
2355 	md = container_of(dev, struct mport_dev, dev);
2356 	kfree(md);
2357 }
2358 
2359 /*
2360  * mport_cdev_add() - Create mport_dev from rio_mport
2361  * @mport:	RapidIO master port
2362  */
2363 static struct mport_dev *mport_cdev_add(struct rio_mport *mport)
2364 {
2365 	int ret = 0;
2366 	struct mport_dev *md;
2367 	struct rio_mport_attr attr;
2368 
2369 	md = kzalloc(sizeof(*md), GFP_KERNEL);
2370 	if (!md) {
2371 		rmcd_error("Unable allocate a device object");
2372 		return NULL;
2373 	}
2374 
2375 	md->mport = mport;
2376 	mutex_init(&md->buf_mutex);
2377 	mutex_init(&md->file_mutex);
2378 	INIT_LIST_HEAD(&md->file_list);
2379 
2380 	device_initialize(&md->dev);
2381 	md->dev.devt = MKDEV(MAJOR(dev_number), mport->id);
2382 	md->dev.class = dev_class;
2383 	md->dev.parent = &mport->dev;
2384 	md->dev.release = mport_device_release;
2385 	dev_set_name(&md->dev, DEV_NAME "%d", mport->id);
2386 	atomic_set(&md->active, 1);
2387 
2388 	cdev_init(&md->cdev, &mport_fops);
2389 	md->cdev.owner = THIS_MODULE;
2390 
2391 	INIT_LIST_HEAD(&md->doorbells);
2392 	spin_lock_init(&md->db_lock);
2393 	INIT_LIST_HEAD(&md->portwrites);
2394 	spin_lock_init(&md->pw_lock);
2395 	INIT_LIST_HEAD(&md->mappings);
2396 
2397 	md->properties.id = mport->id;
2398 	md->properties.sys_size = mport->sys_size;
2399 	md->properties.hdid = mport->host_deviceid;
2400 	md->properties.index = mport->index;
2401 
2402 	/* The transfer_mode property will be returned through mport query
2403 	 * interface
2404 	 */
2405 #ifdef CONFIG_FSL_RIO /* for now: only on Freescale's SoCs */
2406 	md->properties.transfer_mode |= RIO_TRANSFER_MODE_MAPPED;
2407 #else
2408 	md->properties.transfer_mode |= RIO_TRANSFER_MODE_TRANSFER;
2409 #endif
2410 
2411 	ret = cdev_device_add(&md->cdev, &md->dev);
2412 	if (ret) {
2413 		rmcd_error("Failed to register mport %d (err=%d)",
2414 		       mport->id, ret);
2415 		goto err_cdev;
2416 	}
2417 	ret = rio_query_mport(mport, &attr);
2418 	if (!ret) {
2419 		md->properties.flags = attr.flags;
2420 		md->properties.link_speed = attr.link_speed;
2421 		md->properties.link_width = attr.link_width;
2422 		md->properties.dma_max_sge = attr.dma_max_sge;
2423 		md->properties.dma_max_size = attr.dma_max_size;
2424 		md->properties.dma_align = attr.dma_align;
2425 		md->properties.cap_sys_size = 0;
2426 		md->properties.cap_transfer_mode = 0;
2427 		md->properties.cap_addr_size = 0;
2428 	} else
2429 		pr_info(DRV_PREFIX "Failed to obtain info for %s cdev(%d:%d)\n",
2430 			mport->name, MAJOR(dev_number), mport->id);
2431 
2432 	mutex_lock(&mport_devs_lock);
2433 	list_add_tail(&md->node, &mport_devs);
2434 	mutex_unlock(&mport_devs_lock);
2435 
2436 	pr_info(DRV_PREFIX "Added %s cdev(%d:%d)\n",
2437 		mport->name, MAJOR(dev_number), mport->id);
2438 
2439 	return md;
2440 
2441 err_cdev:
2442 	put_device(&md->dev);
2443 	return NULL;
2444 }
2445 
2446 /*
2447  * mport_cdev_terminate_dma() - Stop all active DMA data transfers and release
2448  *                              associated DMA channels.
2449  */
2450 static void mport_cdev_terminate_dma(struct mport_dev *md)
2451 {
2452 #ifdef CONFIG_RAPIDIO_DMA_ENGINE
2453 	struct mport_cdev_priv *client;
2454 
2455 	rmcd_debug(DMA, "%s", dev_name(&md->dev));
2456 
2457 	mutex_lock(&md->file_mutex);
2458 	list_for_each_entry(client, &md->file_list, list) {
2459 		if (client->dmach) {
2460 			dmaengine_terminate_all(client->dmach);
2461 			rio_release_dma(client->dmach);
2462 		}
2463 	}
2464 	mutex_unlock(&md->file_mutex);
2465 
2466 	if (md->dma_chan) {
2467 		dmaengine_terminate_all(md->dma_chan);
2468 		rio_release_dma(md->dma_chan);
2469 		md->dma_chan = NULL;
2470 	}
2471 #endif
2472 }
2473 
2474 
2475 /*
2476  * mport_cdev_kill_fasync() - Send SIGIO signal to all processes with open
2477  *                            mport_cdev files.
2478  */
2479 static int mport_cdev_kill_fasync(struct mport_dev *md)
2480 {
2481 	unsigned int files = 0;
2482 	struct mport_cdev_priv *client;
2483 
2484 	mutex_lock(&md->file_mutex);
2485 	list_for_each_entry(client, &md->file_list, list) {
2486 		if (client->async_queue)
2487 			kill_fasync(&client->async_queue, SIGIO, POLL_HUP);
2488 		files++;
2489 	}
2490 	mutex_unlock(&md->file_mutex);
2491 	return files;
2492 }
2493 
2494 /*
2495  * mport_cdev_remove() - Remove mport character device
2496  * @dev:	Mport device to remove
2497  */
2498 static void mport_cdev_remove(struct mport_dev *md)
2499 {
2500 	struct rio_mport_mapping *map, *_map;
2501 
2502 	rmcd_debug(EXIT, "Remove %s cdev", md->mport->name);
2503 	atomic_set(&md->active, 0);
2504 	mport_cdev_terminate_dma(md);
2505 	rio_del_mport_pw_handler(md->mport, md, rio_mport_pw_handler);
2506 	cdev_device_del(&md->cdev, &md->dev);
2507 	mport_cdev_kill_fasync(md);
2508 
2509 	/* TODO: do we need to give clients some time to close file
2510 	 * descriptors? Simple wait for XX, or kref?
2511 	 */
2512 
2513 	/*
2514 	 * Release DMA buffers allocated for the mport device.
2515 	 * Disable associated inbound Rapidio requests mapping if applicable.
2516 	 */
2517 	mutex_lock(&md->buf_mutex);
2518 	list_for_each_entry_safe(map, _map, &md->mappings, node) {
2519 		kref_put(&map->ref, mport_release_mapping);
2520 	}
2521 	mutex_unlock(&md->buf_mutex);
2522 
2523 	if (!list_empty(&md->mappings))
2524 		rmcd_warn("WARNING: %s pending mappings on removal",
2525 			  md->mport->name);
2526 
2527 	rio_release_inb_dbell(md->mport, 0, 0x0fff);
2528 
2529 	put_device(&md->dev);
2530 }
2531 
2532 /*
2533  * RIO rio_mport_interface driver
2534  */
2535 
2536 /*
2537  * mport_add_mport() - Add rio_mport from LDM device struct
2538  * @dev:		Linux device model struct
2539  * @class_intf:	Linux class_interface
2540  */
2541 static int mport_add_mport(struct device *dev,
2542 		struct class_interface *class_intf)
2543 {
2544 	struct rio_mport *mport = NULL;
2545 	struct mport_dev *chdev = NULL;
2546 
2547 	mport = to_rio_mport(dev);
2548 	if (!mport)
2549 		return -ENODEV;
2550 
2551 	chdev = mport_cdev_add(mport);
2552 	if (!chdev)
2553 		return -ENODEV;
2554 
2555 	return 0;
2556 }
2557 
2558 /*
2559  * mport_remove_mport() - Remove rio_mport from global list
2560  * TODO remove device from global mport_dev list
2561  */
2562 static void mport_remove_mport(struct device *dev,
2563 		struct class_interface *class_intf)
2564 {
2565 	struct rio_mport *mport = NULL;
2566 	struct mport_dev *chdev;
2567 	int found = 0;
2568 
2569 	mport = to_rio_mport(dev);
2570 	rmcd_debug(EXIT, "Remove %s", mport->name);
2571 
2572 	mutex_lock(&mport_devs_lock);
2573 	list_for_each_entry(chdev, &mport_devs, node) {
2574 		if (chdev->mport->id == mport->id) {
2575 			atomic_set(&chdev->active, 0);
2576 			list_del(&chdev->node);
2577 			found = 1;
2578 			break;
2579 		}
2580 	}
2581 	mutex_unlock(&mport_devs_lock);
2582 
2583 	if (found)
2584 		mport_cdev_remove(chdev);
2585 }
2586 
2587 /* the rio_mport_interface is used to handle local mport devices */
2588 static struct class_interface rio_mport_interface __refdata = {
2589 	.class		= &rio_mport_class,
2590 	.add_dev	= mport_add_mport,
2591 	.remove_dev	= mport_remove_mport,
2592 };
2593 
2594 /*
2595  * Linux kernel module
2596  */
2597 
2598 /*
2599  * mport_init - Driver module loading
2600  */
2601 static int __init mport_init(void)
2602 {
2603 	int ret;
2604 
2605 	/* Create device class needed by udev */
2606 	dev_class = class_create(THIS_MODULE, DRV_NAME);
2607 	if (IS_ERR(dev_class)) {
2608 		rmcd_error("Unable to create " DRV_NAME " class");
2609 		return PTR_ERR(dev_class);
2610 	}
2611 
2612 	ret = alloc_chrdev_region(&dev_number, 0, RIO_MAX_MPORTS, DRV_NAME);
2613 	if (ret < 0)
2614 		goto err_chr;
2615 
2616 	rmcd_debug(INIT, "Registered class with major=%d", MAJOR(dev_number));
2617 
2618 	/* Register to rio_mport_interface */
2619 	ret = class_interface_register(&rio_mport_interface);
2620 	if (ret) {
2621 		rmcd_error("class_interface_register() failed, err=%d", ret);
2622 		goto err_cli;
2623 	}
2624 
2625 	return 0;
2626 
2627 err_cli:
2628 	unregister_chrdev_region(dev_number, RIO_MAX_MPORTS);
2629 err_chr:
2630 	class_destroy(dev_class);
2631 	return ret;
2632 }
2633 
2634 /**
2635  * mport_exit - Driver module unloading
2636  */
2637 static void __exit mport_exit(void)
2638 {
2639 	class_interface_unregister(&rio_mport_interface);
2640 	class_destroy(dev_class);
2641 	unregister_chrdev_region(dev_number, RIO_MAX_MPORTS);
2642 }
2643 
2644 module_init(mport_init);
2645 module_exit(mport_exit);
2646