1 // SPDX-License-Identifier: GPL-2.0-only
2 /* Copyright (c) 2010,2015,2019 The Linux Foundation. All rights reserved.
3 * Copyright (C) 2015 Linaro Ltd.
6 #include <linux/slab.h>
8 #include <linux/module.h>
9 #include <linux/mutex.h>
10 #include <linux/errno.h>
11 #include <linux/err.h>
12 #include <linux/firmware/qcom/qcom_scm.h>
13 #include <linux/arm-smccc.h>
14 #include <linux/dma-mapping.h>
18 static DEFINE_MUTEX(qcom_scm_lock
);
22 * struct arm_smccc_args
23 * @args: The array of values used in registers in smc instruction
25 struct arm_smccc_args
{
26 unsigned long args
[8];
31 * struct scm_legacy_command - one SCM command buffer
32 * @len: total available memory for command and response
33 * @buf_offset: start of command buffer
34 * @resp_hdr_offset: start of response buffer
35 * @id: command to be executed
36 * @buf: buffer returned from scm_legacy_get_command_buffer()
38 * An SCM command is laid out in memory as follows:
40 * ------------------- <--- struct scm_legacy_command
42 * ------------------- <--- scm_legacy_get_command_buffer()
44 * ------------------- <--- struct scm_legacy_response and
45 * | response header | scm_legacy_command_to_response()
46 * ------------------- <--- scm_legacy_get_response_buffer()
50 * There can be arbitrary padding between the headers and buffers so
51 * you should always use the appropriate scm_legacy_get_*_buffer() routines
52 * to access the buffers in a safe manner.
54 struct scm_legacy_command
{
57 __le32 resp_hdr_offset
;
63 * struct scm_legacy_response - one SCM response buffer
64 * @len: total available memory for response
65 * @buf_offset: start of response data relative to start of scm_legacy_response
66 * @is_complete: indicates if the command has finished processing
68 struct scm_legacy_response
{
75 * scm_legacy_command_to_response() - Get a pointer to a scm_legacy_response
78 * Returns a pointer to a response for a command.
80 static inline struct scm_legacy_response
*scm_legacy_command_to_response(
81 const struct scm_legacy_command
*cmd
)
83 return (void *)cmd
+ le32_to_cpu(cmd
->resp_hdr_offset
);
87 * scm_legacy_get_command_buffer() - Get a pointer to a command buffer
90 * Returns a pointer to the command buffer of a command.
92 static inline void *scm_legacy_get_command_buffer(
93 const struct scm_legacy_command
*cmd
)
95 return (void *)cmd
->buf
;
99 * scm_legacy_get_response_buffer() - Get a pointer to a response buffer
102 * Returns a pointer to a response buffer of a response.
104 static inline void *scm_legacy_get_response_buffer(
105 const struct scm_legacy_response
*rsp
)
107 return (void *)rsp
+ le32_to_cpu(rsp
->buf_offset
);
110 static void __scm_legacy_do(const struct arm_smccc_args
*smc
,
111 struct arm_smccc_res
*res
)
114 arm_smccc_smc(smc
->args
[0], smc
->args
[1], smc
->args
[2],
115 smc
->args
[3], smc
->args
[4], smc
->args
[5],
116 smc
->args
[6], smc
->args
[7], res
);
117 } while (res
->a0
== QCOM_SCM_INTERRUPTED
);
121 * scm_legacy_call() - Sends a command to the SCM and waits for the command to
124 * @desc: descriptor structure containing arguments and return values
125 * @res: results from SMC call
127 * A note on cache maintenance:
128 * Note that any buffers that are expected to be accessed by the secure world
129 * must be flushed before invoking qcom_scm_call and invalidated in the cache
130 * immediately after qcom_scm_call returns. Cache maintenance on the command
131 * and response buffers is taken care of by qcom_scm_call; however, callers are
132 * responsible for any other cached buffers passed over to the secure world.
134 int scm_legacy_call(struct device
*dev
, const struct qcom_scm_desc
*desc
,
135 struct qcom_scm_res
*res
)
137 u8 arglen
= desc
->arginfo
& 0xf;
138 int ret
= 0, context_id
;
140 struct scm_legacy_command
*cmd
;
141 struct scm_legacy_response
*rsp
;
142 struct arm_smccc_args smc
= {0};
143 struct arm_smccc_res smc_res
;
144 const size_t cmd_len
= arglen
* sizeof(__le32
);
145 const size_t resp_len
= MAX_QCOM_SCM_RETS
* sizeof(__le32
);
146 size_t alloc_len
= sizeof(*cmd
) + cmd_len
+ sizeof(*rsp
) + resp_len
;
149 const __le32
*res_buf
;
151 cmd
= kzalloc(PAGE_ALIGN(alloc_len
), GFP_KERNEL
);
155 cmd
->len
= cpu_to_le32(alloc_len
);
156 cmd
->buf_offset
= cpu_to_le32(sizeof(*cmd
));
157 cmd
->resp_hdr_offset
= cpu_to_le32(sizeof(*cmd
) + cmd_len
);
158 cmd
->id
= cpu_to_le32(SCM_LEGACY_FNID(desc
->svc
, desc
->cmd
));
160 arg_buf
= scm_legacy_get_command_buffer(cmd
);
161 for (i
= 0; i
< arglen
; i
++)
162 arg_buf
[i
] = cpu_to_le32(desc
->args
[i
]);
164 rsp
= scm_legacy_command_to_response(cmd
);
166 cmd_phys
= dma_map_single(dev
, cmd
, alloc_len
, DMA_TO_DEVICE
);
167 if (dma_mapping_error(dev
, cmd_phys
)) {
173 smc
.args
[1] = (unsigned long)&context_id
;
174 smc
.args
[2] = cmd_phys
;
176 mutex_lock(&qcom_scm_lock
);
177 __scm_legacy_do(&smc
, &smc_res
);
179 ret
= qcom_scm_remap_error(smc_res
.a0
);
180 mutex_unlock(&qcom_scm_lock
);
185 dma_sync_single_for_cpu(dev
, cmd_phys
+ sizeof(*cmd
) + cmd_len
,
186 sizeof(*rsp
), DMA_FROM_DEVICE
);
187 } while (!rsp
->is_complete
);
189 dma_sync_single_for_cpu(dev
, cmd_phys
+ sizeof(*cmd
) + cmd_len
+
190 le32_to_cpu(rsp
->buf_offset
),
191 resp_len
, DMA_FROM_DEVICE
);
194 res_buf
= scm_legacy_get_response_buffer(rsp
);
195 for (i
= 0; i
< MAX_QCOM_SCM_RETS
; i
++)
196 res
->result
[i
] = le32_to_cpu(res_buf
[i
]);
199 dma_unmap_single(dev
, cmd_phys
, alloc_len
, DMA_TO_DEVICE
);
204 #define SCM_LEGACY_ATOMIC_N_REG_ARGS 5
205 #define SCM_LEGACY_ATOMIC_FIRST_REG_IDX 2
206 #define SCM_LEGACY_CLASS_REGISTER (0x2 << 8)
207 #define SCM_LEGACY_MASK_IRQS BIT(5)
208 #define SCM_LEGACY_ATOMIC_ID(svc, cmd, n) \
209 ((SCM_LEGACY_FNID(svc, cmd) << 12) | \
210 SCM_LEGACY_CLASS_REGISTER | \
211 SCM_LEGACY_MASK_IRQS | \
215 * scm_legacy_call_atomic() - Send an atomic SCM command with up to 5 arguments
216 * and 3 return values
217 * @unused: device, legacy argument, not used, can be NULL
218 * @desc: SCM call descriptor containing arguments
219 * @res: SCM call return values
221 * This shall only be used with commands that are guaranteed to be
222 * uninterruptable, atomic and SMP safe.
224 int scm_legacy_call_atomic(struct device
*unused
,
225 const struct qcom_scm_desc
*desc
,
226 struct qcom_scm_res
*res
)
229 struct arm_smccc_res smc_res
;
230 size_t arglen
= desc
->arginfo
& 0xf;
232 BUG_ON(arglen
> SCM_LEGACY_ATOMIC_N_REG_ARGS
);
234 arm_smccc_smc(SCM_LEGACY_ATOMIC_ID(desc
->svc
, desc
->cmd
, arglen
),
235 (unsigned long)&context_id
,
236 desc
->args
[0], desc
->args
[1], desc
->args
[2],
237 desc
->args
[3], desc
->args
[4], 0, &smc_res
);
240 res
->result
[0] = smc_res
.a1
;
241 res
->result
[1] = smc_res
.a2
;
242 res
->result
[2] = smc_res
.a3
;