1 // SPDX-License-Identifier: GPL-2.0-or-later 2 /* 3 * RapidIO mport character device 4 * 5 * Copyright 2014-2015 Integrated Device Technology, Inc. 6 * Alexandre Bounine <alexandre.bounine@idt.com> 7 * Copyright 2014-2015 Prodrive Technologies 8 * Andre van Herk <andre.van.herk@prodrive-technologies.com> 9 * Jerry Jacobs <jerry.jacobs@prodrive-technologies.com> 10 * Copyright (C) 2014 Texas Instruments Incorporated 11 * Aurelien Jacquiot <a-jacquiot@ti.com> 12 */ 13 #include <linux/module.h> 14 #include <linux/kernel.h> 15 #include <linux/cdev.h> 16 #include <linux/ioctl.h> 17 #include <linux/uaccess.h> 18 #include <linux/list.h> 19 #include <linux/fs.h> 20 #include <linux/err.h> 21 #include <linux/net.h> 22 #include <linux/poll.h> 23 #include <linux/spinlock.h> 24 #include <linux/sched.h> 25 #include <linux/kfifo.h> 26 27 #include <linux/mm.h> 28 #include <linux/slab.h> 29 #include <linux/vmalloc.h> 30 #include <linux/mman.h> 31 32 #include <linux/dma-mapping.h> 33 #ifdef CONFIG_RAPIDIO_DMA_ENGINE 34 #include <linux/dmaengine.h> 35 #endif 36 37 #include <linux/rio.h> 38 #include <linux/rio_ids.h> 39 #include <linux/rio_drv.h> 40 #include <linux/rio_mport_cdev.h> 41 42 #include "../rio.h" 43 44 #define DRV_NAME "rio_mport" 45 #define DRV_PREFIX DRV_NAME ": " 46 #define DEV_NAME "rio_mport" 47 #define DRV_VERSION "1.0.0" 48 49 /* Debug output filtering masks */ 50 enum { 51 DBG_NONE = 0, 52 DBG_INIT = BIT(0), /* driver init */ 53 DBG_EXIT = BIT(1), /* driver exit */ 54 DBG_MPORT = BIT(2), /* mport add/remove */ 55 DBG_RDEV = BIT(3), /* RapidIO device add/remove */ 56 DBG_DMA = BIT(4), /* DMA transfer messages */ 57 DBG_MMAP = BIT(5), /* mapping messages */ 58 DBG_IBW = BIT(6), /* inbound window */ 59 DBG_EVENT = BIT(7), /* event handling messages */ 60 DBG_OBW = BIT(8), /* outbound window messages */ 61 DBG_DBELL = BIT(9), /* doorbell messages */ 62 DBG_ALL = ~0, 63 }; 64 65 #ifdef DEBUG 66 #define rmcd_debug(level, fmt, arg...) \ 67 do { \ 68 if (DBG_##level & dbg_level) \ 69 pr_debug(DRV_PREFIX "%s: " fmt "\n", __func__, ##arg); \ 70 } while (0) 71 #else 72 #define rmcd_debug(level, fmt, arg...) \ 73 no_printk(KERN_DEBUG pr_fmt(DRV_PREFIX fmt "\n"), ##arg) 74 #endif 75 76 #define rmcd_warn(fmt, arg...) \ 77 pr_warn(DRV_PREFIX "%s WARNING " fmt "\n", __func__, ##arg) 78 79 #define rmcd_error(fmt, arg...) \ 80 pr_err(DRV_PREFIX "%s ERROR " fmt "\n", __func__, ##arg) 81 82 MODULE_AUTHOR("Jerry Jacobs <jerry.jacobs@prodrive-technologies.com>"); 83 MODULE_AUTHOR("Aurelien Jacquiot <a-jacquiot@ti.com>"); 84 MODULE_AUTHOR("Alexandre Bounine <alexandre.bounine@idt.com>"); 85 MODULE_AUTHOR("Andre van Herk <andre.van.herk@prodrive-technologies.com>"); 86 MODULE_DESCRIPTION("RapidIO mport character device driver"); 87 MODULE_LICENSE("GPL"); 88 MODULE_VERSION(DRV_VERSION); 89 90 static int dma_timeout = 3000; /* DMA transfer timeout in msec */ 91 module_param(dma_timeout, int, S_IRUGO); 92 MODULE_PARM_DESC(dma_timeout, "DMA Transfer Timeout in msec (default: 3000)"); 93 94 #ifdef DEBUG 95 static u32 dbg_level = DBG_NONE; 96 module_param(dbg_level, uint, S_IWUSR | S_IWGRP | S_IRUGO); 97 MODULE_PARM_DESC(dbg_level, "Debugging output level (default 0 = none)"); 98 #endif 99 100 /* 101 * An internal DMA coherent buffer 102 */ 103 struct mport_dma_buf { 104 void *ib_base; 105 dma_addr_t ib_phys; 106 u32 ib_size; 107 u64 ib_rio_base; 108 bool ib_map; 109 struct file *filp; 110 }; 111 112 /* 113 * Internal memory mapping structure 114 */ 115 enum rio_mport_map_dir { 116 MAP_INBOUND, 117 MAP_OUTBOUND, 118 MAP_DMA, 119 }; 120 121 struct rio_mport_mapping { 122 struct list_head node; 123 struct mport_dev *md; 124 enum rio_mport_map_dir dir; 125 u16 rioid; 126 u64 rio_addr; 127 dma_addr_t phys_addr; /* for mmap */ 128 void *virt_addr; /* kernel address, for dma_free_coherent */ 129 u64 size; 130 struct kref ref; /* refcount of vmas sharing the mapping */ 131 struct file *filp; 132 }; 133 134 struct rio_mport_dma_map { 135 int valid; 136 u64 length; 137 void *vaddr; 138 dma_addr_t paddr; 139 }; 140 141 #define MPORT_MAX_DMA_BUFS 16 142 #define MPORT_EVENT_DEPTH 10 143 144 /* 145 * mport_dev driver-specific structure that represents mport device 146 * @active mport device status flag 147 * @node list node to maintain list of registered mports 148 * @cdev character device 149 * @dev associated device object 150 * @mport associated subsystem's master port device object 151 * @buf_mutex lock for buffer handling 152 * @file_mutex - lock for open files list 153 * @file_list - list of open files on given mport 154 * @properties properties of this mport 155 * @portwrites queue of inbound portwrites 156 * @pw_lock lock for port write queue 157 * @mappings queue for memory mappings 158 * @dma_chan DMA channels associated with this device 159 * @dma_ref: 160 * @comp: 161 */ 162 struct mport_dev { 163 atomic_t active; 164 struct list_head node; 165 struct cdev cdev; 166 struct device dev; 167 struct rio_mport *mport; 168 struct mutex buf_mutex; 169 struct mutex file_mutex; 170 struct list_head file_list; 171 struct rio_mport_properties properties; 172 struct list_head doorbells; 173 spinlock_t db_lock; 174 struct list_head portwrites; 175 spinlock_t pw_lock; 176 struct list_head mappings; 177 #ifdef CONFIG_RAPIDIO_DMA_ENGINE 178 struct dma_chan *dma_chan; 179 struct kref dma_ref; 180 struct completion comp; 181 #endif 182 }; 183 184 /* 185 * mport_cdev_priv - data structure specific to individual file object 186 * associated with an open device 187 * @md master port character device object 188 * @async_queue - asynchronous notification queue 189 * @list - file objects tracking list 190 * @db_filters inbound doorbell filters for this descriptor 191 * @pw_filters portwrite filters for this descriptor 192 * @event_fifo event fifo for this descriptor 193 * @event_rx_wait wait queue for this descriptor 194 * @fifo_lock lock for event_fifo 195 * @event_mask event mask for this descriptor 196 * @dmach DMA engine channel allocated for specific file object 197 */ 198 struct mport_cdev_priv { 199 struct mport_dev *md; 200 struct fasync_struct *async_queue; 201 struct list_head list; 202 struct list_head db_filters; 203 struct list_head pw_filters; 204 struct kfifo event_fifo; 205 wait_queue_head_t event_rx_wait; 206 spinlock_t fifo_lock; 207 u32 event_mask; /* RIO_DOORBELL, RIO_PORTWRITE */ 208 #ifdef CONFIG_RAPIDIO_DMA_ENGINE 209 struct dma_chan *dmach; 210 struct list_head async_list; 211 spinlock_t req_lock; 212 struct mutex dma_lock; 213 struct kref dma_ref; 214 struct completion comp; 215 #endif 216 }; 217 218 /* 219 * rio_mport_pw_filter - structure to describe a portwrite filter 220 * md_node node in mport device's list 221 * priv_node node in private file object's list 222 * priv reference to private data 223 * filter actual portwrite filter 224 */ 225 struct rio_mport_pw_filter { 226 struct list_head md_node; 227 struct list_head priv_node; 228 struct mport_cdev_priv *priv; 229 struct rio_pw_filter filter; 230 }; 231 232 /* 233 * rio_mport_db_filter - structure to describe a doorbell filter 234 * @data_node reference to device node 235 * @priv_node node in private data 236 * @priv reference to private data 237 * @filter actual doorbell filter 238 */ 239 struct rio_mport_db_filter { 240 struct list_head data_node; 241 struct list_head priv_node; 242 struct mport_cdev_priv *priv; 243 struct rio_doorbell_filter filter; 244 }; 245 246 static LIST_HEAD(mport_devs); 247 static DEFINE_MUTEX(mport_devs_lock); 248 249 #if (0) /* used by commented out portion of poll function : FIXME */ 250 static DECLARE_WAIT_QUEUE_HEAD(mport_cdev_wait); 251 #endif 252 253 static struct class *dev_class; 254 static dev_t dev_number; 255 256 static void mport_release_mapping(struct kref *ref); 257 258 static int rio_mport_maint_rd(struct mport_cdev_priv *priv, void __user *arg, 259 int local) 260 { 261 struct rio_mport *mport = priv->md->mport; 262 struct rio_mport_maint_io maint_io; 263 u32 *buffer; 264 u32 offset; 265 size_t length; 266 int ret, i; 267 268 if (unlikely(copy_from_user(&maint_io, arg, sizeof(maint_io)))) 269 return -EFAULT; 270 271 if ((maint_io.offset % 4) || 272 (maint_io.length == 0) || (maint_io.length % 4) || 273 (maint_io.length + maint_io.offset) > RIO_MAINT_SPACE_SZ) 274 return -EINVAL; 275 276 buffer = vmalloc(maint_io.length); 277 if (buffer == NULL) 278 return -ENOMEM; 279 length = maint_io.length/sizeof(u32); 280 offset = maint_io.offset; 281 282 for (i = 0; i < length; i++) { 283 if (local) 284 ret = __rio_local_read_config_32(mport, 285 offset, &buffer[i]); 286 else 287 ret = rio_mport_read_config_32(mport, maint_io.rioid, 288 maint_io.hopcount, offset, &buffer[i]); 289 if (ret) 290 goto out; 291 292 offset += 4; 293 } 294 295 if (unlikely(copy_to_user((void __user *)(uintptr_t)maint_io.buffer, 296 buffer, maint_io.length))) 297 ret = -EFAULT; 298 out: 299 vfree(buffer); 300 return ret; 301 } 302 303 static int rio_mport_maint_wr(struct mport_cdev_priv *priv, void __user *arg, 304 int local) 305 { 306 struct rio_mport *mport = priv->md->mport; 307 struct rio_mport_maint_io maint_io; 308 u32 *buffer; 309 u32 offset; 310 size_t length; 311 int ret = -EINVAL, i; 312 313 if (unlikely(copy_from_user(&maint_io, arg, sizeof(maint_io)))) 314 return -EFAULT; 315 316 if ((maint_io.offset % 4) || 317 (maint_io.length == 0) || (maint_io.length % 4) || 318 (maint_io.length + maint_io.offset) > RIO_MAINT_SPACE_SZ) 319 return -EINVAL; 320 321 buffer = vmalloc(maint_io.length); 322 if (buffer == NULL) 323 return -ENOMEM; 324 length = maint_io.length; 325 326 if (unlikely(copy_from_user(buffer, 327 (void __user *)(uintptr_t)maint_io.buffer, length))) { 328 ret = -EFAULT; 329 goto out; 330 } 331 332 offset = maint_io.offset; 333 length /= sizeof(u32); 334 335 for (i = 0; i < length; i++) { 336 if (local) 337 ret = __rio_local_write_config_32(mport, 338 offset, buffer[i]); 339 else 340 ret = rio_mport_write_config_32(mport, maint_io.rioid, 341 maint_io.hopcount, 342 offset, buffer[i]); 343 if (ret) 344 goto out; 345 346 offset += 4; 347 } 348 349 out: 350 vfree(buffer); 351 return ret; 352 } 353 354 355 /* 356 * Inbound/outbound memory mapping functions 357 */ 358 static int 359 rio_mport_create_outbound_mapping(struct mport_dev *md, struct file *filp, 360 u16 rioid, u64 raddr, u32 size, 361 dma_addr_t *paddr) 362 { 363 struct rio_mport *mport = md->mport; 364 struct rio_mport_mapping *map; 365 int ret; 366 367 rmcd_debug(OBW, "did=%d ra=0x%llx sz=0x%x", rioid, raddr, size); 368 369 map = kzalloc(sizeof(*map), GFP_KERNEL); 370 if (map == NULL) 371 return -ENOMEM; 372 373 ret = rio_map_outb_region(mport, rioid, raddr, size, 0, paddr); 374 if (ret < 0) 375 goto err_map_outb; 376 377 map->dir = MAP_OUTBOUND; 378 map->rioid = rioid; 379 map->rio_addr = raddr; 380 map->size = size; 381 map->phys_addr = *paddr; 382 map->filp = filp; 383 map->md = md; 384 kref_init(&map->ref); 385 list_add_tail(&map->node, &md->mappings); 386 return 0; 387 err_map_outb: 388 kfree(map); 389 return ret; 390 } 391 392 static int 393 rio_mport_get_outbound_mapping(struct mport_dev *md, struct file *filp, 394 u16 rioid, u64 raddr, u32 size, 395 dma_addr_t *paddr) 396 { 397 struct rio_mport_mapping *map; 398 int err = -ENOMEM; 399 400 mutex_lock(&md->buf_mutex); 401 list_for_each_entry(map, &md->mappings, node) { 402 if (map->dir != MAP_OUTBOUND) 403 continue; 404 if (rioid == map->rioid && 405 raddr == map->rio_addr && size == map->size) { 406 *paddr = map->phys_addr; 407 err = 0; 408 break; 409 } else if (rioid == map->rioid && 410 raddr < (map->rio_addr + map->size - 1) && 411 (raddr + size) > map->rio_addr) { 412 err = -EBUSY; 413 break; 414 } 415 } 416 417 /* If not found, create new */ 418 if (err == -ENOMEM) 419 err = rio_mport_create_outbound_mapping(md, filp, rioid, raddr, 420 size, paddr); 421 mutex_unlock(&md->buf_mutex); 422 return err; 423 } 424 425 static int rio_mport_obw_map(struct file *filp, void __user *arg) 426 { 427 struct mport_cdev_priv *priv = filp->private_data; 428 struct mport_dev *data = priv->md; 429 struct rio_mmap map; 430 dma_addr_t paddr; 431 int ret; 432 433 if (unlikely(copy_from_user(&map, arg, sizeof(map)))) 434 return -EFAULT; 435 436 rmcd_debug(OBW, "did=%d ra=0x%llx sz=0x%llx", 437 map.rioid, map.rio_addr, map.length); 438 439 ret = rio_mport_get_outbound_mapping(data, filp, map.rioid, 440 map.rio_addr, map.length, &paddr); 441 if (ret < 0) { 442 rmcd_error("Failed to set OBW err= %d", ret); 443 return ret; 444 } 445 446 map.handle = paddr; 447 448 if (unlikely(copy_to_user(arg, &map, sizeof(map)))) 449 return -EFAULT; 450 return 0; 451 } 452 453 /* 454 * rio_mport_obw_free() - unmap an OutBound Window from RapidIO address space 455 * 456 * @priv: driver private data 457 * @arg: buffer handle returned by allocation routine 458 */ 459 static int rio_mport_obw_free(struct file *filp, void __user *arg) 460 { 461 struct mport_cdev_priv *priv = filp->private_data; 462 struct mport_dev *md = priv->md; 463 u64 handle; 464 struct rio_mport_mapping *map, *_map; 465 466 if (!md->mport->ops->unmap_outb) 467 return -EPROTONOSUPPORT; 468 469 if (copy_from_user(&handle, arg, sizeof(handle))) 470 return -EFAULT; 471 472 rmcd_debug(OBW, "h=0x%llx", handle); 473 474 mutex_lock(&md->buf_mutex); 475 list_for_each_entry_safe(map, _map, &md->mappings, node) { 476 if (map->dir == MAP_OUTBOUND && map->phys_addr == handle) { 477 if (map->filp == filp) { 478 rmcd_debug(OBW, "kref_put h=0x%llx", handle); 479 map->filp = NULL; 480 kref_put(&map->ref, mport_release_mapping); 481 } 482 break; 483 } 484 } 485 mutex_unlock(&md->buf_mutex); 486 487 return 0; 488 } 489 490 /* 491 * maint_hdid_set() - Set the host Device ID 492 * @priv: driver private data 493 * @arg: Device Id 494 */ 495 static int maint_hdid_set(struct mport_cdev_priv *priv, void __user *arg) 496 { 497 struct mport_dev *md = priv->md; 498 u16 hdid; 499 500 if (copy_from_user(&hdid, arg, sizeof(hdid))) 501 return -EFAULT; 502 503 md->mport->host_deviceid = hdid; 504 md->properties.hdid = hdid; 505 rio_local_set_device_id(md->mport, hdid); 506 507 rmcd_debug(MPORT, "Set host device Id to %d", hdid); 508 509 return 0; 510 } 511 512 /* 513 * maint_comptag_set() - Set the host Component Tag 514 * @priv: driver private data 515 * @arg: Component Tag 516 */ 517 static int maint_comptag_set(struct mport_cdev_priv *priv, void __user *arg) 518 { 519 struct mport_dev *md = priv->md; 520 u32 comptag; 521 522 if (copy_from_user(&comptag, arg, sizeof(comptag))) 523 return -EFAULT; 524 525 rio_local_write_config_32(md->mport, RIO_COMPONENT_TAG_CSR, comptag); 526 527 rmcd_debug(MPORT, "Set host Component Tag to %d", comptag); 528 529 return 0; 530 } 531 532 #ifdef CONFIG_RAPIDIO_DMA_ENGINE 533 534 struct mport_dma_req { 535 struct kref refcount; 536 struct list_head node; 537 struct file *filp; 538 struct mport_cdev_priv *priv; 539 enum rio_transfer_sync sync; 540 struct sg_table sgt; 541 struct page **page_list; 542 unsigned int nr_pages; 543 struct rio_mport_mapping *map; 544 struct dma_chan *dmach; 545 enum dma_data_direction dir; 546 dma_cookie_t cookie; 547 enum dma_status status; 548 struct completion req_comp; 549 }; 550 551 static void mport_release_def_dma(struct kref *dma_ref) 552 { 553 struct mport_dev *md = 554 container_of(dma_ref, struct mport_dev, dma_ref); 555 556 rmcd_debug(EXIT, "DMA_%d", md->dma_chan->chan_id); 557 rio_release_dma(md->dma_chan); 558 md->dma_chan = NULL; 559 } 560 561 static void mport_release_dma(struct kref *dma_ref) 562 { 563 struct mport_cdev_priv *priv = 564 container_of(dma_ref, struct mport_cdev_priv, dma_ref); 565 566 rmcd_debug(EXIT, "DMA_%d", priv->dmach->chan_id); 567 complete(&priv->comp); 568 } 569 570 static void dma_req_free(struct kref *ref) 571 { 572 struct mport_dma_req *req = container_of(ref, struct mport_dma_req, 573 refcount); 574 struct mport_cdev_priv *priv = req->priv; 575 unsigned int i; 576 577 dma_unmap_sg(req->dmach->device->dev, 578 req->sgt.sgl, req->sgt.nents, req->dir); 579 sg_free_table(&req->sgt); 580 if (req->page_list) { 581 for (i = 0; i < req->nr_pages; i++) 582 put_page(req->page_list[i]); 583 kfree(req->page_list); 584 } 585 586 if (req->map) { 587 mutex_lock(&req->map->md->buf_mutex); 588 kref_put(&req->map->ref, mport_release_mapping); 589 mutex_unlock(&req->map->md->buf_mutex); 590 } 591 592 kref_put(&priv->dma_ref, mport_release_dma); 593 594 kfree(req); 595 } 596 597 static void dma_xfer_callback(void *param) 598 { 599 struct mport_dma_req *req = (struct mport_dma_req *)param; 600 struct mport_cdev_priv *priv = req->priv; 601 602 req->status = dma_async_is_tx_complete(priv->dmach, req->cookie, 603 NULL, NULL); 604 complete(&req->req_comp); 605 kref_put(&req->refcount, dma_req_free); 606 } 607 608 /* 609 * prep_dma_xfer() - Configure and send request to DMAengine to prepare DMA 610 * transfer object. 611 * Returns pointer to DMA transaction descriptor allocated by DMA driver on 612 * success or ERR_PTR (and/or NULL) if failed. Caller must check returned 613 * non-NULL pointer using IS_ERR macro. 614 */ 615 static struct dma_async_tx_descriptor 616 *prep_dma_xfer(struct dma_chan *chan, struct rio_transfer_io *transfer, 617 struct sg_table *sgt, int nents, enum dma_transfer_direction dir, 618 enum dma_ctrl_flags flags) 619 { 620 struct rio_dma_data tx_data; 621 622 tx_data.sg = sgt->sgl; 623 tx_data.sg_len = nents; 624 tx_data.rio_addr_u = 0; 625 tx_data.rio_addr = transfer->rio_addr; 626 if (dir == DMA_MEM_TO_DEV) { 627 switch (transfer->method) { 628 case RIO_EXCHANGE_NWRITE: 629 tx_data.wr_type = RDW_ALL_NWRITE; 630 break; 631 case RIO_EXCHANGE_NWRITE_R_ALL: 632 tx_data.wr_type = RDW_ALL_NWRITE_R; 633 break; 634 case RIO_EXCHANGE_NWRITE_R: 635 tx_data.wr_type = RDW_LAST_NWRITE_R; 636 break; 637 case RIO_EXCHANGE_DEFAULT: 638 tx_data.wr_type = RDW_DEFAULT; 639 break; 640 default: 641 return ERR_PTR(-EINVAL); 642 } 643 } 644 645 return rio_dma_prep_xfer(chan, transfer->rioid, &tx_data, dir, flags); 646 } 647 648 /* Request DMA channel associated with this mport device. 649 * Try to request DMA channel for every new process that opened given 650 * mport. If a new DMA channel is not available use default channel 651 * which is the first DMA channel opened on mport device. 652 */ 653 static int get_dma_channel(struct mport_cdev_priv *priv) 654 { 655 mutex_lock(&priv->dma_lock); 656 if (!priv->dmach) { 657 priv->dmach = rio_request_mport_dma(priv->md->mport); 658 if (!priv->dmach) { 659 /* Use default DMA channel if available */ 660 if (priv->md->dma_chan) { 661 priv->dmach = priv->md->dma_chan; 662 kref_get(&priv->md->dma_ref); 663 } else { 664 rmcd_error("Failed to get DMA channel"); 665 mutex_unlock(&priv->dma_lock); 666 return -ENODEV; 667 } 668 } else if (!priv->md->dma_chan) { 669 /* Register default DMA channel if we do not have one */ 670 priv->md->dma_chan = priv->dmach; 671 kref_init(&priv->md->dma_ref); 672 rmcd_debug(DMA, "Register DMA_chan %d as default", 673 priv->dmach->chan_id); 674 } 675 676 kref_init(&priv->dma_ref); 677 init_completion(&priv->comp); 678 } 679 680 kref_get(&priv->dma_ref); 681 mutex_unlock(&priv->dma_lock); 682 return 0; 683 } 684 685 static void put_dma_channel(struct mport_cdev_priv *priv) 686 { 687 kref_put(&priv->dma_ref, mport_release_dma); 688 } 689 690 /* 691 * DMA transfer functions 692 */ 693 static int do_dma_request(struct mport_dma_req *req, 694 struct rio_transfer_io *xfer, 695 enum rio_transfer_sync sync, int nents) 696 { 697 struct mport_cdev_priv *priv; 698 struct sg_table *sgt; 699 struct dma_chan *chan; 700 struct dma_async_tx_descriptor *tx; 701 dma_cookie_t cookie; 702 unsigned long tmo = msecs_to_jiffies(dma_timeout); 703 enum dma_transfer_direction dir; 704 long wret; 705 int ret = 0; 706 707 priv = req->priv; 708 sgt = &req->sgt; 709 710 chan = priv->dmach; 711 dir = (req->dir == DMA_FROM_DEVICE) ? DMA_DEV_TO_MEM : DMA_MEM_TO_DEV; 712 713 rmcd_debug(DMA, "%s(%d) uses %s for DMA_%s", 714 current->comm, task_pid_nr(current), 715 dev_name(&chan->dev->device), 716 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE"); 717 718 /* Initialize DMA transaction request */ 719 tx = prep_dma_xfer(chan, xfer, sgt, nents, dir, 720 DMA_CTRL_ACK | DMA_PREP_INTERRUPT); 721 722 if (!tx) { 723 rmcd_debug(DMA, "prep error for %s A:0x%llx L:0x%llx", 724 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", 725 xfer->rio_addr, xfer->length); 726 ret = -EIO; 727 goto err_out; 728 } else if (IS_ERR(tx)) { 729 ret = PTR_ERR(tx); 730 rmcd_debug(DMA, "prep error %d for %s A:0x%llx L:0x%llx", ret, 731 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", 732 xfer->rio_addr, xfer->length); 733 goto err_out; 734 } 735 736 tx->callback = dma_xfer_callback; 737 tx->callback_param = req; 738 739 req->status = DMA_IN_PROGRESS; 740 kref_get(&req->refcount); 741 742 cookie = dmaengine_submit(tx); 743 req->cookie = cookie; 744 745 rmcd_debug(DMA, "pid=%d DMA_%s tx_cookie = %d", task_pid_nr(current), 746 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", cookie); 747 748 if (dma_submit_error(cookie)) { 749 rmcd_error("submit err=%d (addr:0x%llx len:0x%llx)", 750 cookie, xfer->rio_addr, xfer->length); 751 kref_put(&req->refcount, dma_req_free); 752 ret = -EIO; 753 goto err_out; 754 } 755 756 dma_async_issue_pending(chan); 757 758 if (sync == RIO_TRANSFER_ASYNC) { 759 spin_lock(&priv->req_lock); 760 list_add_tail(&req->node, &priv->async_list); 761 spin_unlock(&priv->req_lock); 762 return cookie; 763 } else if (sync == RIO_TRANSFER_FAF) 764 return 0; 765 766 wret = wait_for_completion_interruptible_timeout(&req->req_comp, tmo); 767 768 if (wret == 0) { 769 /* Timeout on wait occurred */ 770 rmcd_error("%s(%d) timed out waiting for DMA_%s %d", 771 current->comm, task_pid_nr(current), 772 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", cookie); 773 return -ETIMEDOUT; 774 } else if (wret == -ERESTARTSYS) { 775 /* Wait_for_completion was interrupted by a signal but DMA may 776 * be in progress 777 */ 778 rmcd_error("%s(%d) wait for DMA_%s %d was interrupted", 779 current->comm, task_pid_nr(current), 780 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", cookie); 781 return -EINTR; 782 } 783 784 if (req->status != DMA_COMPLETE) { 785 /* DMA transaction completion was signaled with error */ 786 rmcd_error("%s(%d) DMA_%s %d completed with status %d (ret=%d)", 787 current->comm, task_pid_nr(current), 788 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", 789 cookie, req->status, ret); 790 ret = -EIO; 791 } 792 793 err_out: 794 return ret; 795 } 796 797 /* 798 * rio_dma_transfer() - Perform RapidIO DMA data transfer to/from 799 * the remote RapidIO device 800 * @filp: file pointer associated with the call 801 * @transfer_mode: DMA transfer mode 802 * @sync: synchronization mode 803 * @dir: DMA transfer direction (DMA_MEM_TO_DEV = write OR 804 * DMA_DEV_TO_MEM = read) 805 * @xfer: data transfer descriptor structure 806 */ 807 static int 808 rio_dma_transfer(struct file *filp, u32 transfer_mode, 809 enum rio_transfer_sync sync, enum dma_data_direction dir, 810 struct rio_transfer_io *xfer) 811 { 812 struct mport_cdev_priv *priv = filp->private_data; 813 unsigned long nr_pages = 0; 814 struct page **page_list = NULL; 815 struct mport_dma_req *req; 816 struct mport_dev *md = priv->md; 817 struct dma_chan *chan; 818 int i, ret; 819 int nents; 820 821 if (xfer->length == 0) 822 return -EINVAL; 823 req = kzalloc(sizeof(*req), GFP_KERNEL); 824 if (!req) 825 return -ENOMEM; 826 827 ret = get_dma_channel(priv); 828 if (ret) { 829 kfree(req); 830 return ret; 831 } 832 chan = priv->dmach; 833 834 kref_init(&req->refcount); 835 init_completion(&req->req_comp); 836 req->dir = dir; 837 req->filp = filp; 838 req->priv = priv; 839 req->dmach = chan; 840 req->sync = sync; 841 842 /* 843 * If parameter loc_addr != NULL, we are transferring data from/to 844 * data buffer allocated in user-space: lock in memory user-space 845 * buffer pages and build an SG table for DMA transfer request 846 * 847 * Otherwise (loc_addr == NULL) contiguous kernel-space buffer is 848 * used for DMA data transfers: build single entry SG table using 849 * offset within the internal buffer specified by handle parameter. 850 */ 851 if (xfer->loc_addr) { 852 unsigned int offset; 853 long pinned; 854 855 offset = lower_32_bits(offset_in_page(xfer->loc_addr)); 856 nr_pages = PAGE_ALIGN(xfer->length + offset) >> PAGE_SHIFT; 857 858 page_list = kmalloc_array(nr_pages, 859 sizeof(*page_list), GFP_KERNEL); 860 if (page_list == NULL) { 861 ret = -ENOMEM; 862 goto err_req; 863 } 864 865 pinned = get_user_pages_fast( 866 (unsigned long)xfer->loc_addr & PAGE_MASK, 867 nr_pages, 868 dir == DMA_FROM_DEVICE ? FOLL_WRITE : 0, 869 page_list); 870 871 if (pinned != nr_pages) { 872 if (pinned < 0) { 873 rmcd_error("get_user_pages_unlocked err=%ld", 874 pinned); 875 nr_pages = 0; 876 } else 877 rmcd_error("pinned %ld out of %ld pages", 878 pinned, nr_pages); 879 ret = -EFAULT; 880 goto err_pg; 881 } 882 883 ret = sg_alloc_table_from_pages(&req->sgt, page_list, nr_pages, 884 offset, xfer->length, GFP_KERNEL); 885 if (ret) { 886 rmcd_error("sg_alloc_table failed with err=%d", ret); 887 goto err_pg; 888 } 889 890 req->page_list = page_list; 891 req->nr_pages = nr_pages; 892 } else { 893 dma_addr_t baddr; 894 struct rio_mport_mapping *map; 895 896 baddr = (dma_addr_t)xfer->handle; 897 898 mutex_lock(&md->buf_mutex); 899 list_for_each_entry(map, &md->mappings, node) { 900 if (baddr >= map->phys_addr && 901 baddr < (map->phys_addr + map->size)) { 902 kref_get(&map->ref); 903 req->map = map; 904 break; 905 } 906 } 907 mutex_unlock(&md->buf_mutex); 908 909 if (req->map == NULL) { 910 ret = -ENOMEM; 911 goto err_req; 912 } 913 914 if (xfer->length + xfer->offset > map->size) { 915 ret = -EINVAL; 916 goto err_req; 917 } 918 919 ret = sg_alloc_table(&req->sgt, 1, GFP_KERNEL); 920 if (unlikely(ret)) { 921 rmcd_error("sg_alloc_table failed for internal buf"); 922 goto err_req; 923 } 924 925 sg_set_buf(req->sgt.sgl, 926 map->virt_addr + (baddr - map->phys_addr) + 927 xfer->offset, xfer->length); 928 } 929 930 nents = dma_map_sg(chan->device->dev, 931 req->sgt.sgl, req->sgt.nents, dir); 932 if (nents == 0) { 933 rmcd_error("Failed to map SG list"); 934 ret = -EFAULT; 935 goto err_pg; 936 } 937 938 ret = do_dma_request(req, xfer, sync, nents); 939 940 if (ret >= 0) { 941 if (sync == RIO_TRANSFER_ASYNC) 942 return ret; /* return ASYNC cookie */ 943 } else { 944 rmcd_debug(DMA, "do_dma_request failed with err=%d", ret); 945 } 946 947 err_pg: 948 if (!req->page_list) { 949 for (i = 0; i < nr_pages; i++) 950 put_page(page_list[i]); 951 kfree(page_list); 952 } 953 err_req: 954 kref_put(&req->refcount, dma_req_free); 955 return ret; 956 } 957 958 static int rio_mport_transfer_ioctl(struct file *filp, void __user *arg) 959 { 960 struct mport_cdev_priv *priv = filp->private_data; 961 struct rio_transaction transaction; 962 struct rio_transfer_io *transfer; 963 enum dma_data_direction dir; 964 int i, ret = 0; 965 966 if (unlikely(copy_from_user(&transaction, arg, sizeof(transaction)))) 967 return -EFAULT; 968 969 if (transaction.count != 1) /* only single transfer for now */ 970 return -EINVAL; 971 972 if ((transaction.transfer_mode & 973 priv->md->properties.transfer_mode) == 0) 974 return -ENODEV; 975 976 transfer = vmalloc(array_size(sizeof(*transfer), transaction.count)); 977 if (!transfer) 978 return -ENOMEM; 979 980 if (unlikely(copy_from_user(transfer, 981 (void __user *)(uintptr_t)transaction.block, 982 transaction.count * sizeof(*transfer)))) { 983 ret = -EFAULT; 984 goto out_free; 985 } 986 987 dir = (transaction.dir == RIO_TRANSFER_DIR_READ) ? 988 DMA_FROM_DEVICE : DMA_TO_DEVICE; 989 for (i = 0; i < transaction.count && ret == 0; i++) 990 ret = rio_dma_transfer(filp, transaction.transfer_mode, 991 transaction.sync, dir, &transfer[i]); 992 993 if (unlikely(copy_to_user((void __user *)(uintptr_t)transaction.block, 994 transfer, 995 transaction.count * sizeof(*transfer)))) 996 ret = -EFAULT; 997 998 out_free: 999 vfree(transfer); 1000 1001 return ret; 1002 } 1003 1004 static int rio_mport_wait_for_async_dma(struct file *filp, void __user *arg) 1005 { 1006 struct mport_cdev_priv *priv; 1007 struct rio_async_tx_wait w_param; 1008 struct mport_dma_req *req; 1009 dma_cookie_t cookie; 1010 unsigned long tmo; 1011 long wret; 1012 int found = 0; 1013 int ret; 1014 1015 priv = (struct mport_cdev_priv *)filp->private_data; 1016 1017 if (unlikely(copy_from_user(&w_param, arg, sizeof(w_param)))) 1018 return -EFAULT; 1019 1020 cookie = w_param.token; 1021 if (w_param.timeout) 1022 tmo = msecs_to_jiffies(w_param.timeout); 1023 else /* Use default DMA timeout */ 1024 tmo = msecs_to_jiffies(dma_timeout); 1025 1026 spin_lock(&priv->req_lock); 1027 list_for_each_entry(req, &priv->async_list, node) { 1028 if (req->cookie == cookie) { 1029 list_del(&req->node); 1030 found = 1; 1031 break; 1032 } 1033 } 1034 spin_unlock(&priv->req_lock); 1035 1036 if (!found) 1037 return -EAGAIN; 1038 1039 wret = wait_for_completion_interruptible_timeout(&req->req_comp, tmo); 1040 1041 if (wret == 0) { 1042 /* Timeout on wait occurred */ 1043 rmcd_error("%s(%d) timed out waiting for ASYNC DMA_%s", 1044 current->comm, task_pid_nr(current), 1045 (req->dir == DMA_FROM_DEVICE)?"READ":"WRITE"); 1046 ret = -ETIMEDOUT; 1047 goto err_tmo; 1048 } else if (wret == -ERESTARTSYS) { 1049 /* Wait_for_completion was interrupted by a signal but DMA may 1050 * be still in progress 1051 */ 1052 rmcd_error("%s(%d) wait for ASYNC DMA_%s was interrupted", 1053 current->comm, task_pid_nr(current), 1054 (req->dir == DMA_FROM_DEVICE)?"READ":"WRITE"); 1055 ret = -EINTR; 1056 goto err_tmo; 1057 } 1058 1059 if (req->status != DMA_COMPLETE) { 1060 /* DMA transaction completion signaled with transfer error */ 1061 rmcd_error("%s(%d) ASYNC DMA_%s completion with status %d", 1062 current->comm, task_pid_nr(current), 1063 (req->dir == DMA_FROM_DEVICE)?"READ":"WRITE", 1064 req->status); 1065 ret = -EIO; 1066 } else 1067 ret = 0; 1068 1069 if (req->status != DMA_IN_PROGRESS && req->status != DMA_PAUSED) 1070 kref_put(&req->refcount, dma_req_free); 1071 1072 return ret; 1073 1074 err_tmo: 1075 /* Return request back into async queue */ 1076 spin_lock(&priv->req_lock); 1077 list_add_tail(&req->node, &priv->async_list); 1078 spin_unlock(&priv->req_lock); 1079 return ret; 1080 } 1081 1082 static int rio_mport_create_dma_mapping(struct mport_dev *md, struct file *filp, 1083 u64 size, struct rio_mport_mapping **mapping) 1084 { 1085 struct rio_mport_mapping *map; 1086 1087 map = kzalloc(sizeof(*map), GFP_KERNEL); 1088 if (map == NULL) 1089 return -ENOMEM; 1090 1091 map->virt_addr = dma_alloc_coherent(md->mport->dev.parent, size, 1092 &map->phys_addr, GFP_KERNEL); 1093 if (map->virt_addr == NULL) { 1094 kfree(map); 1095 return -ENOMEM; 1096 } 1097 1098 map->dir = MAP_DMA; 1099 map->size = size; 1100 map->filp = filp; 1101 map->md = md; 1102 kref_init(&map->ref); 1103 mutex_lock(&md->buf_mutex); 1104 list_add_tail(&map->node, &md->mappings); 1105 mutex_unlock(&md->buf_mutex); 1106 *mapping = map; 1107 1108 return 0; 1109 } 1110 1111 static int rio_mport_alloc_dma(struct file *filp, void __user *arg) 1112 { 1113 struct mport_cdev_priv *priv = filp->private_data; 1114 struct mport_dev *md = priv->md; 1115 struct rio_dma_mem map; 1116 struct rio_mport_mapping *mapping = NULL; 1117 int ret; 1118 1119 if (unlikely(copy_from_user(&map, arg, sizeof(map)))) 1120 return -EFAULT; 1121 1122 ret = rio_mport_create_dma_mapping(md, filp, map.length, &mapping); 1123 if (ret) 1124 return ret; 1125 1126 map.dma_handle = mapping->phys_addr; 1127 1128 if (unlikely(copy_to_user(arg, &map, sizeof(map)))) { 1129 mutex_lock(&md->buf_mutex); 1130 kref_put(&mapping->ref, mport_release_mapping); 1131 mutex_unlock(&md->buf_mutex); 1132 return -EFAULT; 1133 } 1134 1135 return 0; 1136 } 1137 1138 static int rio_mport_free_dma(struct file *filp, void __user *arg) 1139 { 1140 struct mport_cdev_priv *priv = filp->private_data; 1141 struct mport_dev *md = priv->md; 1142 u64 handle; 1143 int ret = -EFAULT; 1144 struct rio_mport_mapping *map, *_map; 1145 1146 if (copy_from_user(&handle, arg, sizeof(handle))) 1147 return -EFAULT; 1148 rmcd_debug(EXIT, "filp=%p", filp); 1149 1150 mutex_lock(&md->buf_mutex); 1151 list_for_each_entry_safe(map, _map, &md->mappings, node) { 1152 if (map->dir == MAP_DMA && map->phys_addr == handle && 1153 map->filp == filp) { 1154 kref_put(&map->ref, mport_release_mapping); 1155 ret = 0; 1156 break; 1157 } 1158 } 1159 mutex_unlock(&md->buf_mutex); 1160 1161 if (ret == -EFAULT) { 1162 rmcd_debug(DMA, "ERR no matching mapping"); 1163 return ret; 1164 } 1165 1166 return 0; 1167 } 1168 #else 1169 static int rio_mport_transfer_ioctl(struct file *filp, void *arg) 1170 { 1171 return -ENODEV; 1172 } 1173 1174 static int rio_mport_wait_for_async_dma(struct file *filp, void __user *arg) 1175 { 1176 return -ENODEV; 1177 } 1178 1179 static int rio_mport_alloc_dma(struct file *filp, void __user *arg) 1180 { 1181 return -ENODEV; 1182 } 1183 1184 static int rio_mport_free_dma(struct file *filp, void __user *arg) 1185 { 1186 return -ENODEV; 1187 } 1188 #endif /* CONFIG_RAPIDIO_DMA_ENGINE */ 1189 1190 /* 1191 * Inbound/outbound memory mapping functions 1192 */ 1193 1194 static int 1195 rio_mport_create_inbound_mapping(struct mport_dev *md, struct file *filp, 1196 u64 raddr, u64 size, 1197 struct rio_mport_mapping **mapping) 1198 { 1199 struct rio_mport *mport = md->mport; 1200 struct rio_mport_mapping *map; 1201 int ret; 1202 1203 /* rio_map_inb_region() accepts u32 size */ 1204 if (size > 0xffffffff) 1205 return -EINVAL; 1206 1207 map = kzalloc(sizeof(*map), GFP_KERNEL); 1208 if (map == NULL) 1209 return -ENOMEM; 1210 1211 map->virt_addr = dma_alloc_coherent(mport->dev.parent, size, 1212 &map->phys_addr, GFP_KERNEL); 1213 if (map->virt_addr == NULL) { 1214 ret = -ENOMEM; 1215 goto err_dma_alloc; 1216 } 1217 1218 if (raddr == RIO_MAP_ANY_ADDR) 1219 raddr = map->phys_addr; 1220 ret = rio_map_inb_region(mport, map->phys_addr, raddr, (u32)size, 0); 1221 if (ret < 0) 1222 goto err_map_inb; 1223 1224 map->dir = MAP_INBOUND; 1225 map->rio_addr = raddr; 1226 map->size = size; 1227 map->filp = filp; 1228 map->md = md; 1229 kref_init(&map->ref); 1230 mutex_lock(&md->buf_mutex); 1231 list_add_tail(&map->node, &md->mappings); 1232 mutex_unlock(&md->buf_mutex); 1233 *mapping = map; 1234 return 0; 1235 1236 err_map_inb: 1237 dma_free_coherent(mport->dev.parent, size, 1238 map->virt_addr, map->phys_addr); 1239 err_dma_alloc: 1240 kfree(map); 1241 return ret; 1242 } 1243 1244 static int 1245 rio_mport_get_inbound_mapping(struct mport_dev *md, struct file *filp, 1246 u64 raddr, u64 size, 1247 struct rio_mport_mapping **mapping) 1248 { 1249 struct rio_mport_mapping *map; 1250 int err = -ENOMEM; 1251 1252 if (raddr == RIO_MAP_ANY_ADDR) 1253 goto get_new; 1254 1255 mutex_lock(&md->buf_mutex); 1256 list_for_each_entry(map, &md->mappings, node) { 1257 if (map->dir != MAP_INBOUND) 1258 continue; 1259 if (raddr == map->rio_addr && size == map->size) { 1260 /* allow exact match only */ 1261 *mapping = map; 1262 err = 0; 1263 break; 1264 } else if (raddr < (map->rio_addr + map->size - 1) && 1265 (raddr + size) > map->rio_addr) { 1266 err = -EBUSY; 1267 break; 1268 } 1269 } 1270 mutex_unlock(&md->buf_mutex); 1271 1272 if (err != -ENOMEM) 1273 return err; 1274 get_new: 1275 /* not found, create new */ 1276 return rio_mport_create_inbound_mapping(md, filp, raddr, size, mapping); 1277 } 1278 1279 static int rio_mport_map_inbound(struct file *filp, void __user *arg) 1280 { 1281 struct mport_cdev_priv *priv = filp->private_data; 1282 struct mport_dev *md = priv->md; 1283 struct rio_mmap map; 1284 struct rio_mport_mapping *mapping = NULL; 1285 int ret; 1286 1287 if (!md->mport->ops->map_inb) 1288 return -EPROTONOSUPPORT; 1289 if (unlikely(copy_from_user(&map, arg, sizeof(map)))) 1290 return -EFAULT; 1291 1292 rmcd_debug(IBW, "%s filp=%p", dev_name(&priv->md->dev), filp); 1293 1294 ret = rio_mport_get_inbound_mapping(md, filp, map.rio_addr, 1295 map.length, &mapping); 1296 if (ret) 1297 return ret; 1298 1299 map.handle = mapping->phys_addr; 1300 map.rio_addr = mapping->rio_addr; 1301 1302 if (unlikely(copy_to_user(arg, &map, sizeof(map)))) { 1303 /* Delete mapping if it was created by this request */ 1304 if (ret == 0 && mapping->filp == filp) { 1305 mutex_lock(&md->buf_mutex); 1306 kref_put(&mapping->ref, mport_release_mapping); 1307 mutex_unlock(&md->buf_mutex); 1308 } 1309 return -EFAULT; 1310 } 1311 1312 return 0; 1313 } 1314 1315 /* 1316 * rio_mport_inbound_free() - unmap from RapidIO address space and free 1317 * previously allocated inbound DMA coherent buffer 1318 * @priv: driver private data 1319 * @arg: buffer handle returned by allocation routine 1320 */ 1321 static int rio_mport_inbound_free(struct file *filp, void __user *arg) 1322 { 1323 struct mport_cdev_priv *priv = filp->private_data; 1324 struct mport_dev *md = priv->md; 1325 u64 handle; 1326 struct rio_mport_mapping *map, *_map; 1327 1328 rmcd_debug(IBW, "%s filp=%p", dev_name(&priv->md->dev), filp); 1329 1330 if (!md->mport->ops->unmap_inb) 1331 return -EPROTONOSUPPORT; 1332 1333 if (copy_from_user(&handle, arg, sizeof(handle))) 1334 return -EFAULT; 1335 1336 mutex_lock(&md->buf_mutex); 1337 list_for_each_entry_safe(map, _map, &md->mappings, node) { 1338 if (map->dir == MAP_INBOUND && map->phys_addr == handle) { 1339 if (map->filp == filp) { 1340 map->filp = NULL; 1341 kref_put(&map->ref, mport_release_mapping); 1342 } 1343 break; 1344 } 1345 } 1346 mutex_unlock(&md->buf_mutex); 1347 1348 return 0; 1349 } 1350 1351 /* 1352 * maint_port_idx_get() - Get the port index of the mport instance 1353 * @priv: driver private data 1354 * @arg: port index 1355 */ 1356 static int maint_port_idx_get(struct mport_cdev_priv *priv, void __user *arg) 1357 { 1358 struct mport_dev *md = priv->md; 1359 u32 port_idx = md->mport->index; 1360 1361 rmcd_debug(MPORT, "port_index=%d", port_idx); 1362 1363 if (copy_to_user(arg, &port_idx, sizeof(port_idx))) 1364 return -EFAULT; 1365 1366 return 0; 1367 } 1368 1369 static int rio_mport_add_event(struct mport_cdev_priv *priv, 1370 struct rio_event *event) 1371 { 1372 int overflow; 1373 1374 if (!(priv->event_mask & event->header)) 1375 return -EACCES; 1376 1377 spin_lock(&priv->fifo_lock); 1378 overflow = kfifo_avail(&priv->event_fifo) < sizeof(*event) 1379 || kfifo_in(&priv->event_fifo, (unsigned char *)event, 1380 sizeof(*event)) != sizeof(*event); 1381 spin_unlock(&priv->fifo_lock); 1382 1383 wake_up_interruptible(&priv->event_rx_wait); 1384 1385 if (overflow) { 1386 dev_warn(&priv->md->dev, DRV_NAME ": event fifo overflow\n"); 1387 return -EBUSY; 1388 } 1389 1390 return 0; 1391 } 1392 1393 static void rio_mport_doorbell_handler(struct rio_mport *mport, void *dev_id, 1394 u16 src, u16 dst, u16 info) 1395 { 1396 struct mport_dev *data = dev_id; 1397 struct mport_cdev_priv *priv; 1398 struct rio_mport_db_filter *db_filter; 1399 struct rio_event event; 1400 int handled; 1401 1402 event.header = RIO_DOORBELL; 1403 event.u.doorbell.rioid = src; 1404 event.u.doorbell.payload = info; 1405 1406 handled = 0; 1407 spin_lock(&data->db_lock); 1408 list_for_each_entry(db_filter, &data->doorbells, data_node) { 1409 if (((db_filter->filter.rioid == RIO_INVALID_DESTID || 1410 db_filter->filter.rioid == src)) && 1411 info >= db_filter->filter.low && 1412 info <= db_filter->filter.high) { 1413 priv = db_filter->priv; 1414 rio_mport_add_event(priv, &event); 1415 handled = 1; 1416 } 1417 } 1418 spin_unlock(&data->db_lock); 1419 1420 if (!handled) 1421 dev_warn(&data->dev, 1422 "%s: spurious DB received from 0x%x, info=0x%04x\n", 1423 __func__, src, info); 1424 } 1425 1426 static int rio_mport_add_db_filter(struct mport_cdev_priv *priv, 1427 void __user *arg) 1428 { 1429 struct mport_dev *md = priv->md; 1430 struct rio_mport_db_filter *db_filter; 1431 struct rio_doorbell_filter filter; 1432 unsigned long flags; 1433 int ret; 1434 1435 if (copy_from_user(&filter, arg, sizeof(filter))) 1436 return -EFAULT; 1437 1438 if (filter.low > filter.high) 1439 return -EINVAL; 1440 1441 ret = rio_request_inb_dbell(md->mport, md, filter.low, filter.high, 1442 rio_mport_doorbell_handler); 1443 if (ret) { 1444 rmcd_error("%s failed to register IBDB, err=%d", 1445 dev_name(&md->dev), ret); 1446 return ret; 1447 } 1448 1449 db_filter = kzalloc(sizeof(*db_filter), GFP_KERNEL); 1450 if (db_filter == NULL) { 1451 rio_release_inb_dbell(md->mport, filter.low, filter.high); 1452 return -ENOMEM; 1453 } 1454 1455 db_filter->filter = filter; 1456 db_filter->priv = priv; 1457 spin_lock_irqsave(&md->db_lock, flags); 1458 list_add_tail(&db_filter->priv_node, &priv->db_filters); 1459 list_add_tail(&db_filter->data_node, &md->doorbells); 1460 spin_unlock_irqrestore(&md->db_lock, flags); 1461 1462 return 0; 1463 } 1464 1465 static void rio_mport_delete_db_filter(struct rio_mport_db_filter *db_filter) 1466 { 1467 list_del(&db_filter->data_node); 1468 list_del(&db_filter->priv_node); 1469 kfree(db_filter); 1470 } 1471 1472 static int rio_mport_remove_db_filter(struct mport_cdev_priv *priv, 1473 void __user *arg) 1474 { 1475 struct rio_mport_db_filter *db_filter; 1476 struct rio_doorbell_filter filter; 1477 unsigned long flags; 1478 int ret = -EINVAL; 1479 1480 if (copy_from_user(&filter, arg, sizeof(filter))) 1481 return -EFAULT; 1482 1483 if (filter.low > filter.high) 1484 return -EINVAL; 1485 1486 spin_lock_irqsave(&priv->md->db_lock, flags); 1487 list_for_each_entry(db_filter, &priv->db_filters, priv_node) { 1488 if (db_filter->filter.rioid == filter.rioid && 1489 db_filter->filter.low == filter.low && 1490 db_filter->filter.high == filter.high) { 1491 rio_mport_delete_db_filter(db_filter); 1492 ret = 0; 1493 break; 1494 } 1495 } 1496 spin_unlock_irqrestore(&priv->md->db_lock, flags); 1497 1498 if (!ret) 1499 rio_release_inb_dbell(priv->md->mport, filter.low, filter.high); 1500 1501 return ret; 1502 } 1503 1504 static int rio_mport_match_pw(union rio_pw_msg *msg, 1505 struct rio_pw_filter *filter) 1506 { 1507 if ((msg->em.comptag & filter->mask) < filter->low || 1508 (msg->em.comptag & filter->mask) > filter->high) 1509 return 0; 1510 return 1; 1511 } 1512 1513 static int rio_mport_pw_handler(struct rio_mport *mport, void *context, 1514 union rio_pw_msg *msg, int step) 1515 { 1516 struct mport_dev *md = context; 1517 struct mport_cdev_priv *priv; 1518 struct rio_mport_pw_filter *pw_filter; 1519 struct rio_event event; 1520 int handled; 1521 1522 event.header = RIO_PORTWRITE; 1523 memcpy(event.u.portwrite.payload, msg->raw, RIO_PW_MSG_SIZE); 1524 1525 handled = 0; 1526 spin_lock(&md->pw_lock); 1527 list_for_each_entry(pw_filter, &md->portwrites, md_node) { 1528 if (rio_mport_match_pw(msg, &pw_filter->filter)) { 1529 priv = pw_filter->priv; 1530 rio_mport_add_event(priv, &event); 1531 handled = 1; 1532 } 1533 } 1534 spin_unlock(&md->pw_lock); 1535 1536 if (!handled) { 1537 printk_ratelimited(KERN_WARNING DRV_NAME 1538 ": mport%d received spurious PW from 0x%08x\n", 1539 mport->id, msg->em.comptag); 1540 } 1541 1542 return 0; 1543 } 1544 1545 static int rio_mport_add_pw_filter(struct mport_cdev_priv *priv, 1546 void __user *arg) 1547 { 1548 struct mport_dev *md = priv->md; 1549 struct rio_mport_pw_filter *pw_filter; 1550 struct rio_pw_filter filter; 1551 unsigned long flags; 1552 int hadd = 0; 1553 1554 if (copy_from_user(&filter, arg, sizeof(filter))) 1555 return -EFAULT; 1556 1557 pw_filter = kzalloc(sizeof(*pw_filter), GFP_KERNEL); 1558 if (pw_filter == NULL) 1559 return -ENOMEM; 1560 1561 pw_filter->filter = filter; 1562 pw_filter->priv = priv; 1563 spin_lock_irqsave(&md->pw_lock, flags); 1564 if (list_empty(&md->portwrites)) 1565 hadd = 1; 1566 list_add_tail(&pw_filter->priv_node, &priv->pw_filters); 1567 list_add_tail(&pw_filter->md_node, &md->portwrites); 1568 spin_unlock_irqrestore(&md->pw_lock, flags); 1569 1570 if (hadd) { 1571 int ret; 1572 1573 ret = rio_add_mport_pw_handler(md->mport, md, 1574 rio_mport_pw_handler); 1575 if (ret) { 1576 dev_err(&md->dev, 1577 "%s: failed to add IB_PW handler, err=%d\n", 1578 __func__, ret); 1579 return ret; 1580 } 1581 rio_pw_enable(md->mport, 1); 1582 } 1583 1584 return 0; 1585 } 1586 1587 static void rio_mport_delete_pw_filter(struct rio_mport_pw_filter *pw_filter) 1588 { 1589 list_del(&pw_filter->md_node); 1590 list_del(&pw_filter->priv_node); 1591 kfree(pw_filter); 1592 } 1593 1594 static int rio_mport_match_pw_filter(struct rio_pw_filter *a, 1595 struct rio_pw_filter *b) 1596 { 1597 if ((a->mask == b->mask) && (a->low == b->low) && (a->high == b->high)) 1598 return 1; 1599 return 0; 1600 } 1601 1602 static int rio_mport_remove_pw_filter(struct mport_cdev_priv *priv, 1603 void __user *arg) 1604 { 1605 struct mport_dev *md = priv->md; 1606 struct rio_mport_pw_filter *pw_filter; 1607 struct rio_pw_filter filter; 1608 unsigned long flags; 1609 int ret = -EINVAL; 1610 int hdel = 0; 1611 1612 if (copy_from_user(&filter, arg, sizeof(filter))) 1613 return -EFAULT; 1614 1615 spin_lock_irqsave(&md->pw_lock, flags); 1616 list_for_each_entry(pw_filter, &priv->pw_filters, priv_node) { 1617 if (rio_mport_match_pw_filter(&pw_filter->filter, &filter)) { 1618 rio_mport_delete_pw_filter(pw_filter); 1619 ret = 0; 1620 break; 1621 } 1622 } 1623 1624 if (list_empty(&md->portwrites)) 1625 hdel = 1; 1626 spin_unlock_irqrestore(&md->pw_lock, flags); 1627 1628 if (hdel) { 1629 rio_del_mport_pw_handler(md->mport, priv->md, 1630 rio_mport_pw_handler); 1631 rio_pw_enable(md->mport, 0); 1632 } 1633 1634 return ret; 1635 } 1636 1637 /* 1638 * rio_release_dev - release routine for kernel RIO device object 1639 * @dev: kernel device object associated with a RIO device structure 1640 * 1641 * Frees a RIO device struct associated a RIO device struct. 1642 * The RIO device struct is freed. 1643 */ 1644 static void rio_release_dev(struct device *dev) 1645 { 1646 struct rio_dev *rdev; 1647 1648 rdev = to_rio_dev(dev); 1649 pr_info(DRV_PREFIX "%s: %s\n", __func__, rio_name(rdev)); 1650 kfree(rdev); 1651 } 1652 1653 1654 static void rio_release_net(struct device *dev) 1655 { 1656 struct rio_net *net; 1657 1658 net = to_rio_net(dev); 1659 rmcd_debug(RDEV, "net_%d", net->id); 1660 kfree(net); 1661 } 1662 1663 1664 /* 1665 * rio_mport_add_riodev - creates a kernel RIO device object 1666 * 1667 * Allocates a RIO device data structure and initializes required fields based 1668 * on device's configuration space contents. 1669 * If the device has switch capabilities, then a switch specific portion is 1670 * allocated and configured. 1671 */ 1672 static int rio_mport_add_riodev(struct mport_cdev_priv *priv, 1673 void __user *arg) 1674 { 1675 struct mport_dev *md = priv->md; 1676 struct rio_rdev_info dev_info; 1677 struct rio_dev *rdev; 1678 struct rio_switch *rswitch = NULL; 1679 struct rio_mport *mport; 1680 size_t size; 1681 u32 rval; 1682 u32 swpinfo = 0; 1683 u16 destid; 1684 u8 hopcount; 1685 int err; 1686 1687 if (copy_from_user(&dev_info, arg, sizeof(dev_info))) 1688 return -EFAULT; 1689 dev_info.name[sizeof(dev_info.name) - 1] = '\0'; 1690 1691 rmcd_debug(RDEV, "name:%s ct:0x%x did:0x%x hc:0x%x", dev_info.name, 1692 dev_info.comptag, dev_info.destid, dev_info.hopcount); 1693 1694 if (bus_find_device_by_name(&rio_bus_type, NULL, dev_info.name)) { 1695 rmcd_debug(RDEV, "device %s already exists", dev_info.name); 1696 return -EEXIST; 1697 } 1698 1699 size = sizeof(*rdev); 1700 mport = md->mport; 1701 destid = dev_info.destid; 1702 hopcount = dev_info.hopcount; 1703 1704 if (rio_mport_read_config_32(mport, destid, hopcount, 1705 RIO_PEF_CAR, &rval)) 1706 return -EIO; 1707 1708 if (rval & RIO_PEF_SWITCH) { 1709 rio_mport_read_config_32(mport, destid, hopcount, 1710 RIO_SWP_INFO_CAR, &swpinfo); 1711 size += (RIO_GET_TOTAL_PORTS(swpinfo) * 1712 sizeof(rswitch->nextdev[0])) + sizeof(*rswitch); 1713 } 1714 1715 rdev = kzalloc(size, GFP_KERNEL); 1716 if (rdev == NULL) 1717 return -ENOMEM; 1718 1719 if (mport->net == NULL) { 1720 struct rio_net *net; 1721 1722 net = rio_alloc_net(mport); 1723 if (!net) { 1724 err = -ENOMEM; 1725 rmcd_debug(RDEV, "failed to allocate net object"); 1726 goto cleanup; 1727 } 1728 1729 net->id = mport->id; 1730 net->hport = mport; 1731 dev_set_name(&net->dev, "rnet_%d", net->id); 1732 net->dev.parent = &mport->dev; 1733 net->dev.release = rio_release_net; 1734 err = rio_add_net(net); 1735 if (err) { 1736 rmcd_debug(RDEV, "failed to register net, err=%d", err); 1737 kfree(net); 1738 goto cleanup; 1739 } 1740 } 1741 1742 rdev->net = mport->net; 1743 rdev->pef = rval; 1744 rdev->swpinfo = swpinfo; 1745 rio_mport_read_config_32(mport, destid, hopcount, 1746 RIO_DEV_ID_CAR, &rval); 1747 rdev->did = rval >> 16; 1748 rdev->vid = rval & 0xffff; 1749 rio_mport_read_config_32(mport, destid, hopcount, RIO_DEV_INFO_CAR, 1750 &rdev->device_rev); 1751 rio_mport_read_config_32(mport, destid, hopcount, RIO_ASM_ID_CAR, 1752 &rval); 1753 rdev->asm_did = rval >> 16; 1754 rdev->asm_vid = rval & 0xffff; 1755 rio_mport_read_config_32(mport, destid, hopcount, RIO_ASM_INFO_CAR, 1756 &rval); 1757 rdev->asm_rev = rval >> 16; 1758 1759 if (rdev->pef & RIO_PEF_EXT_FEATURES) { 1760 rdev->efptr = rval & 0xffff; 1761 rdev->phys_efptr = rio_mport_get_physefb(mport, 0, destid, 1762 hopcount, &rdev->phys_rmap); 1763 1764 rdev->em_efptr = rio_mport_get_feature(mport, 0, destid, 1765 hopcount, RIO_EFB_ERR_MGMNT); 1766 } 1767 1768 rio_mport_read_config_32(mport, destid, hopcount, RIO_SRC_OPS_CAR, 1769 &rdev->src_ops); 1770 rio_mport_read_config_32(mport, destid, hopcount, RIO_DST_OPS_CAR, 1771 &rdev->dst_ops); 1772 1773 rdev->comp_tag = dev_info.comptag; 1774 rdev->destid = destid; 1775 /* hopcount is stored as specified by a caller, regardles of EP or SW */ 1776 rdev->hopcount = hopcount; 1777 1778 if (rdev->pef & RIO_PEF_SWITCH) { 1779 rswitch = rdev->rswitch; 1780 rswitch->route_table = NULL; 1781 } 1782 1783 if (strlen(dev_info.name)) 1784 dev_set_name(&rdev->dev, "%s", dev_info.name); 1785 else if (rdev->pef & RIO_PEF_SWITCH) 1786 dev_set_name(&rdev->dev, "%02x:s:%04x", mport->id, 1787 rdev->comp_tag & RIO_CTAG_UDEVID); 1788 else 1789 dev_set_name(&rdev->dev, "%02x:e:%04x", mport->id, 1790 rdev->comp_tag & RIO_CTAG_UDEVID); 1791 1792 INIT_LIST_HEAD(&rdev->net_list); 1793 rdev->dev.parent = &mport->net->dev; 1794 rio_attach_device(rdev); 1795 rdev->dev.release = rio_release_dev; 1796 1797 if (rdev->dst_ops & RIO_DST_OPS_DOORBELL) 1798 rio_init_dbell_res(&rdev->riores[RIO_DOORBELL_RESOURCE], 1799 0, 0xffff); 1800 err = rio_add_device(rdev); 1801 if (err) 1802 goto cleanup; 1803 rio_dev_get(rdev); 1804 1805 return 0; 1806 cleanup: 1807 kfree(rdev); 1808 return err; 1809 } 1810 1811 static int rio_mport_del_riodev(struct mport_cdev_priv *priv, void __user *arg) 1812 { 1813 struct rio_rdev_info dev_info; 1814 struct rio_dev *rdev = NULL; 1815 struct device *dev; 1816 struct rio_mport *mport; 1817 struct rio_net *net; 1818 1819 if (copy_from_user(&dev_info, arg, sizeof(dev_info))) 1820 return -EFAULT; 1821 dev_info.name[sizeof(dev_info.name) - 1] = '\0'; 1822 1823 mport = priv->md->mport; 1824 1825 /* If device name is specified, removal by name has priority */ 1826 if (strlen(dev_info.name)) { 1827 dev = bus_find_device_by_name(&rio_bus_type, NULL, 1828 dev_info.name); 1829 if (dev) 1830 rdev = to_rio_dev(dev); 1831 } else { 1832 do { 1833 rdev = rio_get_comptag(dev_info.comptag, rdev); 1834 if (rdev && rdev->dev.parent == &mport->net->dev && 1835 rdev->destid == dev_info.destid && 1836 rdev->hopcount == dev_info.hopcount) 1837 break; 1838 } while (rdev); 1839 } 1840 1841 if (!rdev) { 1842 rmcd_debug(RDEV, 1843 "device name:%s ct:0x%x did:0x%x hc:0x%x not found", 1844 dev_info.name, dev_info.comptag, dev_info.destid, 1845 dev_info.hopcount); 1846 return -ENODEV; 1847 } 1848 1849 net = rdev->net; 1850 rio_dev_put(rdev); 1851 rio_del_device(rdev, RIO_DEVICE_SHUTDOWN); 1852 1853 if (list_empty(&net->devices)) { 1854 rio_free_net(net); 1855 mport->net = NULL; 1856 } 1857 1858 return 0; 1859 } 1860 1861 /* 1862 * Mport cdev management 1863 */ 1864 1865 /* 1866 * mport_cdev_open() - Open character device (mport) 1867 */ 1868 static int mport_cdev_open(struct inode *inode, struct file *filp) 1869 { 1870 int ret; 1871 int minor = iminor(inode); 1872 struct mport_dev *chdev; 1873 struct mport_cdev_priv *priv; 1874 1875 /* Test for valid device */ 1876 if (minor >= RIO_MAX_MPORTS) { 1877 rmcd_error("Invalid minor device number"); 1878 return -EINVAL; 1879 } 1880 1881 chdev = container_of(inode->i_cdev, struct mport_dev, cdev); 1882 1883 rmcd_debug(INIT, "%s filp=%p", dev_name(&chdev->dev), filp); 1884 1885 if (atomic_read(&chdev->active) == 0) 1886 return -ENODEV; 1887 1888 get_device(&chdev->dev); 1889 1890 priv = kzalloc(sizeof(*priv), GFP_KERNEL); 1891 if (!priv) { 1892 put_device(&chdev->dev); 1893 return -ENOMEM; 1894 } 1895 1896 priv->md = chdev; 1897 1898 mutex_lock(&chdev->file_mutex); 1899 list_add_tail(&priv->list, &chdev->file_list); 1900 mutex_unlock(&chdev->file_mutex); 1901 1902 INIT_LIST_HEAD(&priv->db_filters); 1903 INIT_LIST_HEAD(&priv->pw_filters); 1904 spin_lock_init(&priv->fifo_lock); 1905 init_waitqueue_head(&priv->event_rx_wait); 1906 ret = kfifo_alloc(&priv->event_fifo, 1907 sizeof(struct rio_event) * MPORT_EVENT_DEPTH, 1908 GFP_KERNEL); 1909 if (ret < 0) { 1910 dev_err(&chdev->dev, DRV_NAME ": kfifo_alloc failed\n"); 1911 ret = -ENOMEM; 1912 goto err_fifo; 1913 } 1914 1915 #ifdef CONFIG_RAPIDIO_DMA_ENGINE 1916 INIT_LIST_HEAD(&priv->async_list); 1917 spin_lock_init(&priv->req_lock); 1918 mutex_init(&priv->dma_lock); 1919 #endif 1920 1921 filp->private_data = priv; 1922 goto out; 1923 err_fifo: 1924 kfree(priv); 1925 out: 1926 return ret; 1927 } 1928 1929 static int mport_cdev_fasync(int fd, struct file *filp, int mode) 1930 { 1931 struct mport_cdev_priv *priv = filp->private_data; 1932 1933 return fasync_helper(fd, filp, mode, &priv->async_queue); 1934 } 1935 1936 #ifdef CONFIG_RAPIDIO_DMA_ENGINE 1937 static void mport_cdev_release_dma(struct file *filp) 1938 { 1939 struct mport_cdev_priv *priv = filp->private_data; 1940 struct mport_dev *md; 1941 struct mport_dma_req *req, *req_next; 1942 unsigned long tmo = msecs_to_jiffies(dma_timeout); 1943 long wret; 1944 LIST_HEAD(list); 1945 1946 rmcd_debug(EXIT, "from filp=%p %s(%d)", 1947 filp, current->comm, task_pid_nr(current)); 1948 1949 if (!priv->dmach) { 1950 rmcd_debug(EXIT, "No DMA channel for filp=%p", filp); 1951 return; 1952 } 1953 1954 md = priv->md; 1955 1956 spin_lock(&priv->req_lock); 1957 if (!list_empty(&priv->async_list)) { 1958 rmcd_debug(EXIT, "async list not empty filp=%p %s(%d)", 1959 filp, current->comm, task_pid_nr(current)); 1960 list_splice_init(&priv->async_list, &list); 1961 } 1962 spin_unlock(&priv->req_lock); 1963 1964 if (!list_empty(&list)) { 1965 rmcd_debug(EXIT, "temp list not empty"); 1966 list_for_each_entry_safe(req, req_next, &list, node) { 1967 rmcd_debug(EXIT, "free req->filp=%p cookie=%d compl=%s", 1968 req->filp, req->cookie, 1969 completion_done(&req->req_comp)?"yes":"no"); 1970 list_del(&req->node); 1971 kref_put(&req->refcount, dma_req_free); 1972 } 1973 } 1974 1975 put_dma_channel(priv); 1976 wret = wait_for_completion_interruptible_timeout(&priv->comp, tmo); 1977 1978 if (wret <= 0) { 1979 rmcd_error("%s(%d) failed waiting for DMA release err=%ld", 1980 current->comm, task_pid_nr(current), wret); 1981 } 1982 1983 if (priv->dmach != priv->md->dma_chan) { 1984 rmcd_debug(EXIT, "Release DMA channel for filp=%p %s(%d)", 1985 filp, current->comm, task_pid_nr(current)); 1986 rio_release_dma(priv->dmach); 1987 } else { 1988 rmcd_debug(EXIT, "Adjust default DMA channel refcount"); 1989 kref_put(&md->dma_ref, mport_release_def_dma); 1990 } 1991 1992 priv->dmach = NULL; 1993 } 1994 #else 1995 #define mport_cdev_release_dma(priv) do {} while (0) 1996 #endif 1997 1998 /* 1999 * mport_cdev_release() - Release character device 2000 */ 2001 static int mport_cdev_release(struct inode *inode, struct file *filp) 2002 { 2003 struct mport_cdev_priv *priv = filp->private_data; 2004 struct mport_dev *chdev; 2005 struct rio_mport_pw_filter *pw_filter, *pw_filter_next; 2006 struct rio_mport_db_filter *db_filter, *db_filter_next; 2007 struct rio_mport_mapping *map, *_map; 2008 unsigned long flags; 2009 2010 rmcd_debug(EXIT, "%s filp=%p", dev_name(&priv->md->dev), filp); 2011 2012 chdev = priv->md; 2013 mport_cdev_release_dma(filp); 2014 2015 priv->event_mask = 0; 2016 2017 spin_lock_irqsave(&chdev->pw_lock, flags); 2018 if (!list_empty(&priv->pw_filters)) { 2019 list_for_each_entry_safe(pw_filter, pw_filter_next, 2020 &priv->pw_filters, priv_node) 2021 rio_mport_delete_pw_filter(pw_filter); 2022 } 2023 spin_unlock_irqrestore(&chdev->pw_lock, flags); 2024 2025 spin_lock_irqsave(&chdev->db_lock, flags); 2026 list_for_each_entry_safe(db_filter, db_filter_next, 2027 &priv->db_filters, priv_node) { 2028 rio_mport_delete_db_filter(db_filter); 2029 } 2030 spin_unlock_irqrestore(&chdev->db_lock, flags); 2031 2032 kfifo_free(&priv->event_fifo); 2033 2034 mutex_lock(&chdev->buf_mutex); 2035 list_for_each_entry_safe(map, _map, &chdev->mappings, node) { 2036 if (map->filp == filp) { 2037 rmcd_debug(EXIT, "release mapping %p filp=%p", 2038 map->virt_addr, filp); 2039 kref_put(&map->ref, mport_release_mapping); 2040 } 2041 } 2042 mutex_unlock(&chdev->buf_mutex); 2043 2044 mport_cdev_fasync(-1, filp, 0); 2045 filp->private_data = NULL; 2046 mutex_lock(&chdev->file_mutex); 2047 list_del(&priv->list); 2048 mutex_unlock(&chdev->file_mutex); 2049 put_device(&chdev->dev); 2050 kfree(priv); 2051 return 0; 2052 } 2053 2054 /* 2055 * mport_cdev_ioctl() - IOCTLs for character device 2056 */ 2057 static long mport_cdev_ioctl(struct file *filp, 2058 unsigned int cmd, unsigned long arg) 2059 { 2060 int err = -EINVAL; 2061 struct mport_cdev_priv *data = filp->private_data; 2062 struct mport_dev *md = data->md; 2063 2064 if (atomic_read(&md->active) == 0) 2065 return -ENODEV; 2066 2067 switch (cmd) { 2068 case RIO_MPORT_MAINT_READ_LOCAL: 2069 return rio_mport_maint_rd(data, (void __user *)arg, 1); 2070 case RIO_MPORT_MAINT_WRITE_LOCAL: 2071 return rio_mport_maint_wr(data, (void __user *)arg, 1); 2072 case RIO_MPORT_MAINT_READ_REMOTE: 2073 return rio_mport_maint_rd(data, (void __user *)arg, 0); 2074 case RIO_MPORT_MAINT_WRITE_REMOTE: 2075 return rio_mport_maint_wr(data, (void __user *)arg, 0); 2076 case RIO_MPORT_MAINT_HDID_SET: 2077 return maint_hdid_set(data, (void __user *)arg); 2078 case RIO_MPORT_MAINT_COMPTAG_SET: 2079 return maint_comptag_set(data, (void __user *)arg); 2080 case RIO_MPORT_MAINT_PORT_IDX_GET: 2081 return maint_port_idx_get(data, (void __user *)arg); 2082 case RIO_MPORT_GET_PROPERTIES: 2083 md->properties.hdid = md->mport->host_deviceid; 2084 if (copy_to_user((void __user *)arg, &(md->properties), 2085 sizeof(md->properties))) 2086 return -EFAULT; 2087 return 0; 2088 case RIO_ENABLE_DOORBELL_RANGE: 2089 return rio_mport_add_db_filter(data, (void __user *)arg); 2090 case RIO_DISABLE_DOORBELL_RANGE: 2091 return rio_mport_remove_db_filter(data, (void __user *)arg); 2092 case RIO_ENABLE_PORTWRITE_RANGE: 2093 return rio_mport_add_pw_filter(data, (void __user *)arg); 2094 case RIO_DISABLE_PORTWRITE_RANGE: 2095 return rio_mport_remove_pw_filter(data, (void __user *)arg); 2096 case RIO_SET_EVENT_MASK: 2097 data->event_mask = (u32)arg; 2098 return 0; 2099 case RIO_GET_EVENT_MASK: 2100 if (copy_to_user((void __user *)arg, &data->event_mask, 2101 sizeof(u32))) 2102 return -EFAULT; 2103 return 0; 2104 case RIO_MAP_OUTBOUND: 2105 return rio_mport_obw_map(filp, (void __user *)arg); 2106 case RIO_MAP_INBOUND: 2107 return rio_mport_map_inbound(filp, (void __user *)arg); 2108 case RIO_UNMAP_OUTBOUND: 2109 return rio_mport_obw_free(filp, (void __user *)arg); 2110 case RIO_UNMAP_INBOUND: 2111 return rio_mport_inbound_free(filp, (void __user *)arg); 2112 case RIO_ALLOC_DMA: 2113 return rio_mport_alloc_dma(filp, (void __user *)arg); 2114 case RIO_FREE_DMA: 2115 return rio_mport_free_dma(filp, (void __user *)arg); 2116 case RIO_WAIT_FOR_ASYNC: 2117 return rio_mport_wait_for_async_dma(filp, (void __user *)arg); 2118 case RIO_TRANSFER: 2119 return rio_mport_transfer_ioctl(filp, (void __user *)arg); 2120 case RIO_DEV_ADD: 2121 return rio_mport_add_riodev(data, (void __user *)arg); 2122 case RIO_DEV_DEL: 2123 return rio_mport_del_riodev(data, (void __user *)arg); 2124 default: 2125 break; 2126 } 2127 2128 return err; 2129 } 2130 2131 /* 2132 * mport_release_mapping - free mapping resources and info structure 2133 * @ref: a pointer to the kref within struct rio_mport_mapping 2134 * 2135 * NOTE: Shall be called while holding buf_mutex. 2136 */ 2137 static void mport_release_mapping(struct kref *ref) 2138 { 2139 struct rio_mport_mapping *map = 2140 container_of(ref, struct rio_mport_mapping, ref); 2141 struct rio_mport *mport = map->md->mport; 2142 2143 rmcd_debug(MMAP, "type %d mapping @ %p (phys = %pad) for %s", 2144 map->dir, map->virt_addr, 2145 &map->phys_addr, mport->name); 2146 2147 list_del(&map->node); 2148 2149 switch (map->dir) { 2150 case MAP_INBOUND: 2151 rio_unmap_inb_region(mport, map->phys_addr); 2152 /* fall through */ 2153 case MAP_DMA: 2154 dma_free_coherent(mport->dev.parent, map->size, 2155 map->virt_addr, map->phys_addr); 2156 break; 2157 case MAP_OUTBOUND: 2158 rio_unmap_outb_region(mport, map->rioid, map->rio_addr); 2159 break; 2160 } 2161 kfree(map); 2162 } 2163 2164 static void mport_mm_open(struct vm_area_struct *vma) 2165 { 2166 struct rio_mport_mapping *map = vma->vm_private_data; 2167 2168 rmcd_debug(MMAP, "%pad", &map->phys_addr); 2169 kref_get(&map->ref); 2170 } 2171 2172 static void mport_mm_close(struct vm_area_struct *vma) 2173 { 2174 struct rio_mport_mapping *map = vma->vm_private_data; 2175 2176 rmcd_debug(MMAP, "%pad", &map->phys_addr); 2177 mutex_lock(&map->md->buf_mutex); 2178 kref_put(&map->ref, mport_release_mapping); 2179 mutex_unlock(&map->md->buf_mutex); 2180 } 2181 2182 static const struct vm_operations_struct vm_ops = { 2183 .open = mport_mm_open, 2184 .close = mport_mm_close, 2185 }; 2186 2187 static int mport_cdev_mmap(struct file *filp, struct vm_area_struct *vma) 2188 { 2189 struct mport_cdev_priv *priv = filp->private_data; 2190 struct mport_dev *md; 2191 size_t size = vma->vm_end - vma->vm_start; 2192 dma_addr_t baddr; 2193 unsigned long offset; 2194 int found = 0, ret; 2195 struct rio_mport_mapping *map; 2196 2197 rmcd_debug(MMAP, "0x%x bytes at offset 0x%lx", 2198 (unsigned int)size, vma->vm_pgoff); 2199 2200 md = priv->md; 2201 baddr = ((dma_addr_t)vma->vm_pgoff << PAGE_SHIFT); 2202 2203 mutex_lock(&md->buf_mutex); 2204 list_for_each_entry(map, &md->mappings, node) { 2205 if (baddr >= map->phys_addr && 2206 baddr < (map->phys_addr + map->size)) { 2207 found = 1; 2208 break; 2209 } 2210 } 2211 mutex_unlock(&md->buf_mutex); 2212 2213 if (!found) 2214 return -ENOMEM; 2215 2216 offset = baddr - map->phys_addr; 2217 2218 if (size + offset > map->size) 2219 return -EINVAL; 2220 2221 vma->vm_pgoff = offset >> PAGE_SHIFT; 2222 rmcd_debug(MMAP, "MMAP adjusted offset = 0x%lx", vma->vm_pgoff); 2223 2224 if (map->dir == MAP_INBOUND || map->dir == MAP_DMA) 2225 ret = dma_mmap_coherent(md->mport->dev.parent, vma, 2226 map->virt_addr, map->phys_addr, map->size); 2227 else if (map->dir == MAP_OUTBOUND) { 2228 vma->vm_page_prot = pgprot_noncached(vma->vm_page_prot); 2229 ret = vm_iomap_memory(vma, map->phys_addr, map->size); 2230 } else { 2231 rmcd_error("Attempt to mmap unsupported mapping type"); 2232 ret = -EIO; 2233 } 2234 2235 if (!ret) { 2236 vma->vm_private_data = map; 2237 vma->vm_ops = &vm_ops; 2238 mport_mm_open(vma); 2239 } else { 2240 rmcd_error("MMAP exit with err=%d", ret); 2241 } 2242 2243 return ret; 2244 } 2245 2246 static __poll_t mport_cdev_poll(struct file *filp, poll_table *wait) 2247 { 2248 struct mport_cdev_priv *priv = filp->private_data; 2249 2250 poll_wait(filp, &priv->event_rx_wait, wait); 2251 if (kfifo_len(&priv->event_fifo)) 2252 return EPOLLIN | EPOLLRDNORM; 2253 2254 return 0; 2255 } 2256 2257 static ssize_t mport_read(struct file *filp, char __user *buf, size_t count, 2258 loff_t *ppos) 2259 { 2260 struct mport_cdev_priv *priv = filp->private_data; 2261 int copied; 2262 ssize_t ret; 2263 2264 if (!count) 2265 return 0; 2266 2267 if (kfifo_is_empty(&priv->event_fifo) && 2268 (filp->f_flags & O_NONBLOCK)) 2269 return -EAGAIN; 2270 2271 if (count % sizeof(struct rio_event)) 2272 return -EINVAL; 2273 2274 ret = wait_event_interruptible(priv->event_rx_wait, 2275 kfifo_len(&priv->event_fifo) != 0); 2276 if (ret) 2277 return ret; 2278 2279 while (ret < count) { 2280 if (kfifo_to_user(&priv->event_fifo, buf, 2281 sizeof(struct rio_event), &copied)) 2282 return -EFAULT; 2283 ret += copied; 2284 buf += copied; 2285 } 2286 2287 return ret; 2288 } 2289 2290 static ssize_t mport_write(struct file *filp, const char __user *buf, 2291 size_t count, loff_t *ppos) 2292 { 2293 struct mport_cdev_priv *priv = filp->private_data; 2294 struct rio_mport *mport = priv->md->mport; 2295 struct rio_event event; 2296 int len, ret; 2297 2298 if (!count) 2299 return 0; 2300 2301 if (count % sizeof(event)) 2302 return -EINVAL; 2303 2304 len = 0; 2305 while ((count - len) >= (int)sizeof(event)) { 2306 if (copy_from_user(&event, buf, sizeof(event))) 2307 return -EFAULT; 2308 2309 if (event.header != RIO_DOORBELL) 2310 return -EINVAL; 2311 2312 ret = rio_mport_send_doorbell(mport, 2313 event.u.doorbell.rioid, 2314 event.u.doorbell.payload); 2315 if (ret < 0) 2316 return ret; 2317 2318 len += sizeof(event); 2319 buf += sizeof(event); 2320 } 2321 2322 return len; 2323 } 2324 2325 static const struct file_operations mport_fops = { 2326 .owner = THIS_MODULE, 2327 .open = mport_cdev_open, 2328 .release = mport_cdev_release, 2329 .poll = mport_cdev_poll, 2330 .read = mport_read, 2331 .write = mport_write, 2332 .mmap = mport_cdev_mmap, 2333 .fasync = mport_cdev_fasync, 2334 .unlocked_ioctl = mport_cdev_ioctl 2335 }; 2336 2337 /* 2338 * Character device management 2339 */ 2340 2341 static void mport_device_release(struct device *dev) 2342 { 2343 struct mport_dev *md; 2344 2345 rmcd_debug(EXIT, "%s", dev_name(dev)); 2346 md = container_of(dev, struct mport_dev, dev); 2347 kfree(md); 2348 } 2349 2350 /* 2351 * mport_cdev_add() - Create mport_dev from rio_mport 2352 * @mport: RapidIO master port 2353 */ 2354 static struct mport_dev *mport_cdev_add(struct rio_mport *mport) 2355 { 2356 int ret = 0; 2357 struct mport_dev *md; 2358 struct rio_mport_attr attr; 2359 2360 md = kzalloc(sizeof(*md), GFP_KERNEL); 2361 if (!md) { 2362 rmcd_error("Unable allocate a device object"); 2363 return NULL; 2364 } 2365 2366 md->mport = mport; 2367 mutex_init(&md->buf_mutex); 2368 mutex_init(&md->file_mutex); 2369 INIT_LIST_HEAD(&md->file_list); 2370 2371 device_initialize(&md->dev); 2372 md->dev.devt = MKDEV(MAJOR(dev_number), mport->id); 2373 md->dev.class = dev_class; 2374 md->dev.parent = &mport->dev; 2375 md->dev.release = mport_device_release; 2376 dev_set_name(&md->dev, DEV_NAME "%d", mport->id); 2377 atomic_set(&md->active, 1); 2378 2379 cdev_init(&md->cdev, &mport_fops); 2380 md->cdev.owner = THIS_MODULE; 2381 2382 ret = cdev_device_add(&md->cdev, &md->dev); 2383 if (ret) { 2384 rmcd_error("Failed to register mport %d (err=%d)", 2385 mport->id, ret); 2386 goto err_cdev; 2387 } 2388 2389 INIT_LIST_HEAD(&md->doorbells); 2390 spin_lock_init(&md->db_lock); 2391 INIT_LIST_HEAD(&md->portwrites); 2392 spin_lock_init(&md->pw_lock); 2393 INIT_LIST_HEAD(&md->mappings); 2394 2395 md->properties.id = mport->id; 2396 md->properties.sys_size = mport->sys_size; 2397 md->properties.hdid = mport->host_deviceid; 2398 md->properties.index = mport->index; 2399 2400 /* The transfer_mode property will be returned through mport query 2401 * interface 2402 */ 2403 #ifdef CONFIG_FSL_RIO /* for now: only on Freescale's SoCs */ 2404 md->properties.transfer_mode |= RIO_TRANSFER_MODE_MAPPED; 2405 #else 2406 md->properties.transfer_mode |= RIO_TRANSFER_MODE_TRANSFER; 2407 #endif 2408 ret = rio_query_mport(mport, &attr); 2409 if (!ret) { 2410 md->properties.flags = attr.flags; 2411 md->properties.link_speed = attr.link_speed; 2412 md->properties.link_width = attr.link_width; 2413 md->properties.dma_max_sge = attr.dma_max_sge; 2414 md->properties.dma_max_size = attr.dma_max_size; 2415 md->properties.dma_align = attr.dma_align; 2416 md->properties.cap_sys_size = 0; 2417 md->properties.cap_transfer_mode = 0; 2418 md->properties.cap_addr_size = 0; 2419 } else 2420 pr_info(DRV_PREFIX "Failed to obtain info for %s cdev(%d:%d)\n", 2421 mport->name, MAJOR(dev_number), mport->id); 2422 2423 mutex_lock(&mport_devs_lock); 2424 list_add_tail(&md->node, &mport_devs); 2425 mutex_unlock(&mport_devs_lock); 2426 2427 pr_info(DRV_PREFIX "Added %s cdev(%d:%d)\n", 2428 mport->name, MAJOR(dev_number), mport->id); 2429 2430 return md; 2431 2432 err_cdev: 2433 put_device(&md->dev); 2434 return NULL; 2435 } 2436 2437 /* 2438 * mport_cdev_terminate_dma() - Stop all active DMA data transfers and release 2439 * associated DMA channels. 2440 */ 2441 static void mport_cdev_terminate_dma(struct mport_dev *md) 2442 { 2443 #ifdef CONFIG_RAPIDIO_DMA_ENGINE 2444 struct mport_cdev_priv *client; 2445 2446 rmcd_debug(DMA, "%s", dev_name(&md->dev)); 2447 2448 mutex_lock(&md->file_mutex); 2449 list_for_each_entry(client, &md->file_list, list) { 2450 if (client->dmach) { 2451 dmaengine_terminate_all(client->dmach); 2452 rio_release_dma(client->dmach); 2453 } 2454 } 2455 mutex_unlock(&md->file_mutex); 2456 2457 if (md->dma_chan) { 2458 dmaengine_terminate_all(md->dma_chan); 2459 rio_release_dma(md->dma_chan); 2460 md->dma_chan = NULL; 2461 } 2462 #endif 2463 } 2464 2465 2466 /* 2467 * mport_cdev_kill_fasync() - Send SIGIO signal to all processes with open 2468 * mport_cdev files. 2469 */ 2470 static int mport_cdev_kill_fasync(struct mport_dev *md) 2471 { 2472 unsigned int files = 0; 2473 struct mport_cdev_priv *client; 2474 2475 mutex_lock(&md->file_mutex); 2476 list_for_each_entry(client, &md->file_list, list) { 2477 if (client->async_queue) 2478 kill_fasync(&client->async_queue, SIGIO, POLL_HUP); 2479 files++; 2480 } 2481 mutex_unlock(&md->file_mutex); 2482 return files; 2483 } 2484 2485 /* 2486 * mport_cdev_remove() - Remove mport character device 2487 * @dev: Mport device to remove 2488 */ 2489 static void mport_cdev_remove(struct mport_dev *md) 2490 { 2491 struct rio_mport_mapping *map, *_map; 2492 2493 rmcd_debug(EXIT, "Remove %s cdev", md->mport->name); 2494 atomic_set(&md->active, 0); 2495 mport_cdev_terminate_dma(md); 2496 rio_del_mport_pw_handler(md->mport, md, rio_mport_pw_handler); 2497 cdev_device_del(&md->cdev, &md->dev); 2498 mport_cdev_kill_fasync(md); 2499 2500 /* TODO: do we need to give clients some time to close file 2501 * descriptors? Simple wait for XX, or kref? 2502 */ 2503 2504 /* 2505 * Release DMA buffers allocated for the mport device. 2506 * Disable associated inbound Rapidio requests mapping if applicable. 2507 */ 2508 mutex_lock(&md->buf_mutex); 2509 list_for_each_entry_safe(map, _map, &md->mappings, node) { 2510 kref_put(&map->ref, mport_release_mapping); 2511 } 2512 mutex_unlock(&md->buf_mutex); 2513 2514 if (!list_empty(&md->mappings)) 2515 rmcd_warn("WARNING: %s pending mappings on removal", 2516 md->mport->name); 2517 2518 rio_release_inb_dbell(md->mport, 0, 0x0fff); 2519 2520 put_device(&md->dev); 2521 } 2522 2523 /* 2524 * RIO rio_mport_interface driver 2525 */ 2526 2527 /* 2528 * mport_add_mport() - Add rio_mport from LDM device struct 2529 * @dev: Linux device model struct 2530 * @class_intf: Linux class_interface 2531 */ 2532 static int mport_add_mport(struct device *dev, 2533 struct class_interface *class_intf) 2534 { 2535 struct rio_mport *mport = NULL; 2536 struct mport_dev *chdev = NULL; 2537 2538 mport = to_rio_mport(dev); 2539 if (!mport) 2540 return -ENODEV; 2541 2542 chdev = mport_cdev_add(mport); 2543 if (!chdev) 2544 return -ENODEV; 2545 2546 return 0; 2547 } 2548 2549 /* 2550 * mport_remove_mport() - Remove rio_mport from global list 2551 * TODO remove device from global mport_dev list 2552 */ 2553 static void mport_remove_mport(struct device *dev, 2554 struct class_interface *class_intf) 2555 { 2556 struct rio_mport *mport = NULL; 2557 struct mport_dev *chdev; 2558 int found = 0; 2559 2560 mport = to_rio_mport(dev); 2561 rmcd_debug(EXIT, "Remove %s", mport->name); 2562 2563 mutex_lock(&mport_devs_lock); 2564 list_for_each_entry(chdev, &mport_devs, node) { 2565 if (chdev->mport->id == mport->id) { 2566 atomic_set(&chdev->active, 0); 2567 list_del(&chdev->node); 2568 found = 1; 2569 break; 2570 } 2571 } 2572 mutex_unlock(&mport_devs_lock); 2573 2574 if (found) 2575 mport_cdev_remove(chdev); 2576 } 2577 2578 /* the rio_mport_interface is used to handle local mport devices */ 2579 static struct class_interface rio_mport_interface __refdata = { 2580 .class = &rio_mport_class, 2581 .add_dev = mport_add_mport, 2582 .remove_dev = mport_remove_mport, 2583 }; 2584 2585 /* 2586 * Linux kernel module 2587 */ 2588 2589 /* 2590 * mport_init - Driver module loading 2591 */ 2592 static int __init mport_init(void) 2593 { 2594 int ret; 2595 2596 /* Create device class needed by udev */ 2597 dev_class = class_create(THIS_MODULE, DRV_NAME); 2598 if (IS_ERR(dev_class)) { 2599 rmcd_error("Unable to create " DRV_NAME " class"); 2600 return PTR_ERR(dev_class); 2601 } 2602 2603 ret = alloc_chrdev_region(&dev_number, 0, RIO_MAX_MPORTS, DRV_NAME); 2604 if (ret < 0) 2605 goto err_chr; 2606 2607 rmcd_debug(INIT, "Registered class with major=%d", MAJOR(dev_number)); 2608 2609 /* Register to rio_mport_interface */ 2610 ret = class_interface_register(&rio_mport_interface); 2611 if (ret) { 2612 rmcd_error("class_interface_register() failed, err=%d", ret); 2613 goto err_cli; 2614 } 2615 2616 return 0; 2617 2618 err_cli: 2619 unregister_chrdev_region(dev_number, RIO_MAX_MPORTS); 2620 err_chr: 2621 class_destroy(dev_class); 2622 return ret; 2623 } 2624 2625 /** 2626 * mport_exit - Driver module unloading 2627 */ 2628 static void __exit mport_exit(void) 2629 { 2630 class_interface_unregister(&rio_mport_interface); 2631 class_destroy(dev_class); 2632 unregister_chrdev_region(dev_number, RIO_MAX_MPORTS); 2633 } 2634 2635 module_init(mport_init); 2636 module_exit(mport_exit); 2637