1 // SPDX-License-Identifier: GPL-2.0+
3 * Copyright (c) 2015-2016, IBM Corporation.
6 #include <linux/atomic.h>
7 #include <linux/bt-bmc.h>
8 #include <linux/errno.h>
9 #include <linux/interrupt.h>
11 #include <linux/miscdevice.h>
12 #include <linux/module.h>
14 #include <linux/platform_device.h>
15 #include <linux/poll.h>
16 #include <linux/sched.h>
17 #include <linux/timer.h>
20 * This is a BMC device used to communicate to the host
22 #define DEVICE_NAME "ipmi-bt-host"
24 #define BT_IO_BASE 0xe4
28 #define BT_CR0_IO_BASE 16
30 #define BT_CR0_EN_CLR_SLV_RDP 0x8
31 #define BT_CR0_EN_CLR_SLV_WRP 0x4
32 #define BT_CR0_ENABLE_IBT 0x1
34 #define BT_CR1_IRQ_H2B 0x01
35 #define BT_CR1_IRQ_HBUSY 0x40
37 #define BT_CR2_IRQ_H2B 0x01
38 #define BT_CR2_IRQ_HBUSY 0x40
41 #define BT_CTRL_B_BUSY 0x80
42 #define BT_CTRL_H_BUSY 0x40
43 #define BT_CTRL_OEM0 0x20
44 #define BT_CTRL_SMS_ATN 0x10
45 #define BT_CTRL_B2H_ATN 0x08
46 #define BT_CTRL_H2B_ATN 0x04
47 #define BT_CTRL_CLR_RD_PTR 0x02
48 #define BT_CTRL_CLR_WR_PTR 0x01
49 #define BT_BMC2HOST 0x14
50 #define BT_INTMASK 0x18
51 #define BT_INTMASK_B2H_IRQEN 0x01
52 #define BT_INTMASK_B2H_IRQ 0x02
53 #define BT_INTMASK_BMC_HWRST 0x80
55 #define BT_BMC_BUFFER_SIZE 256
59 struct miscdevice miscdev
;
62 wait_queue_head_t queue
;
63 struct timer_list poll_timer
;
67 static atomic_t open_count
= ATOMIC_INIT(0);
69 static u8
bt_inb(struct bt_bmc
*bt_bmc
, int reg
)
71 return readb(bt_bmc
->base
+ reg
);
74 static void bt_outb(struct bt_bmc
*bt_bmc
, u8 data
, int reg
)
76 writeb(data
, bt_bmc
->base
+ reg
);
79 static void clr_rd_ptr(struct bt_bmc
*bt_bmc
)
81 bt_outb(bt_bmc
, BT_CTRL_CLR_RD_PTR
, BT_CTRL
);
84 static void clr_wr_ptr(struct bt_bmc
*bt_bmc
)
86 bt_outb(bt_bmc
, BT_CTRL_CLR_WR_PTR
, BT_CTRL
);
89 static void clr_h2b_atn(struct bt_bmc
*bt_bmc
)
91 bt_outb(bt_bmc
, BT_CTRL_H2B_ATN
, BT_CTRL
);
94 static void set_b_busy(struct bt_bmc
*bt_bmc
)
96 if (!(bt_inb(bt_bmc
, BT_CTRL
) & BT_CTRL_B_BUSY
))
97 bt_outb(bt_bmc
, BT_CTRL_B_BUSY
, BT_CTRL
);
100 static void clr_b_busy(struct bt_bmc
*bt_bmc
)
102 if (bt_inb(bt_bmc
, BT_CTRL
) & BT_CTRL_B_BUSY
)
103 bt_outb(bt_bmc
, BT_CTRL_B_BUSY
, BT_CTRL
);
106 static void set_b2h_atn(struct bt_bmc
*bt_bmc
)
108 bt_outb(bt_bmc
, BT_CTRL_B2H_ATN
, BT_CTRL
);
111 static u8
bt_read(struct bt_bmc
*bt_bmc
)
113 return bt_inb(bt_bmc
, BT_BMC2HOST
);
116 static ssize_t
bt_readn(struct bt_bmc
*bt_bmc
, u8
*buf
, size_t n
)
120 for (i
= 0; i
< n
; i
++)
121 buf
[i
] = bt_read(bt_bmc
);
125 static void bt_write(struct bt_bmc
*bt_bmc
, u8 c
)
127 bt_outb(bt_bmc
, c
, BT_BMC2HOST
);
130 static ssize_t
bt_writen(struct bt_bmc
*bt_bmc
, u8
*buf
, size_t n
)
134 for (i
= 0; i
< n
; i
++)
135 bt_write(bt_bmc
, buf
[i
]);
139 static void set_sms_atn(struct bt_bmc
*bt_bmc
)
141 bt_outb(bt_bmc
, BT_CTRL_SMS_ATN
, BT_CTRL
);
144 static struct bt_bmc
*file_bt_bmc(struct file
*file
)
146 return container_of(file
->private_data
, struct bt_bmc
, miscdev
);
149 static int bt_bmc_open(struct inode
*inode
, struct file
*file
)
151 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
153 if (atomic_inc_return(&open_count
) == 1) {
158 atomic_dec(&open_count
);
163 * The BT (Block Transfer) interface means that entire messages are
164 * buffered by the host before a notification is sent to the BMC that
165 * there is data to be read. The first byte is the length and the
166 * message data follows. The read operation just tries to capture the
167 * whole before returning it to userspace.
169 * BT Message format :
171 * Byte 1 Byte 2 Byte 3 Byte 4 Byte 5:N
172 * Length NetFn/LUN Seq Cmd Data
175 static ssize_t
bt_bmc_read(struct file
*file
, char __user
*buf
,
176 size_t count
, loff_t
*ppos
)
178 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
181 u8 kbuffer
[BT_BMC_BUFFER_SIZE
];
187 if (wait_event_interruptible(bt_bmc
->queue
,
188 bt_inb(bt_bmc
, BT_CTRL
) & BT_CTRL_H2B_ATN
))
191 mutex_lock(&bt_bmc
->mutex
);
193 if (unlikely(!(bt_inb(bt_bmc
, BT_CTRL
) & BT_CTRL_H2B_ATN
))) {
203 * The BT frames start with the message length, which does not
204 * include the length byte.
206 kbuffer
[0] = bt_read(bt_bmc
);
209 /* We pass the length back to userspace as well */
214 nread
= min_t(ssize_t
, len
, sizeof(kbuffer
) - len_byte
);
216 bt_readn(bt_bmc
, kbuffer
+ len_byte
, nread
);
218 if (copy_to_user(buf
, kbuffer
, nread
+ len_byte
)) {
223 buf
+= nread
+ len_byte
;
224 ret
+= nread
+ len_byte
;
231 mutex_unlock(&bt_bmc
->mutex
);
236 * BT Message response format :
238 * Byte 1 Byte 2 Byte 3 Byte 4 Byte 5 Byte 6:N
239 * Length NetFn/LUN Seq Cmd Code Data
241 static ssize_t
bt_bmc_write(struct file
*file
, const char __user
*buf
,
242 size_t count
, loff_t
*ppos
)
244 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
245 u8 kbuffer
[BT_BMC_BUFFER_SIZE
];
250 * send a minimum response size
258 * There's no interrupt for clearing bmc busy so we have to
261 if (wait_event_interruptible(bt_bmc
->queue
,
262 !(bt_inb(bt_bmc
, BT_CTRL
) &
263 (BT_CTRL_H_BUSY
| BT_CTRL_B2H_ATN
))))
266 mutex_lock(&bt_bmc
->mutex
);
268 if (unlikely(bt_inb(bt_bmc
, BT_CTRL
) &
269 (BT_CTRL_H_BUSY
| BT_CTRL_B2H_ATN
))) {
277 nwritten
= min_t(ssize_t
, count
, sizeof(kbuffer
));
278 if (copy_from_user(&kbuffer
, buf
, nwritten
)) {
283 bt_writen(bt_bmc
, kbuffer
, nwritten
);
293 mutex_unlock(&bt_bmc
->mutex
);
297 static long bt_bmc_ioctl(struct file
*file
, unsigned int cmd
,
300 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
303 case BT_BMC_IOCTL_SMS_ATN
:
310 static int bt_bmc_release(struct inode
*inode
, struct file
*file
)
312 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
314 atomic_dec(&open_count
);
319 static __poll_t
bt_bmc_poll(struct file
*file
, poll_table
*wait
)
321 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
325 poll_wait(file
, &bt_bmc
->queue
, wait
);
327 ctrl
= bt_inb(bt_bmc
, BT_CTRL
);
329 if (ctrl
& BT_CTRL_H2B_ATN
)
332 if (!(ctrl
& (BT_CTRL_H_BUSY
| BT_CTRL_B2H_ATN
)))
338 static const struct file_operations bt_bmc_fops
= {
339 .owner
= THIS_MODULE
,
342 .write
= bt_bmc_write
,
343 .release
= bt_bmc_release
,
345 .unlocked_ioctl
= bt_bmc_ioctl
,
348 static void poll_timer(struct timer_list
*t
)
350 struct bt_bmc
*bt_bmc
= from_timer(bt_bmc
, t
, poll_timer
);
352 bt_bmc
->poll_timer
.expires
+= msecs_to_jiffies(500);
353 wake_up(&bt_bmc
->queue
);
354 add_timer(&bt_bmc
->poll_timer
);
357 static irqreturn_t
bt_bmc_irq(int irq
, void *arg
)
359 struct bt_bmc
*bt_bmc
= arg
;
362 reg
= readl(bt_bmc
->base
+ BT_CR2
);
364 reg
&= BT_CR2_IRQ_H2B
| BT_CR2_IRQ_HBUSY
;
368 /* ack pending IRQs */
369 writel(reg
, bt_bmc
->base
+ BT_CR2
);
371 wake_up(&bt_bmc
->queue
);
375 static int bt_bmc_config_irq(struct bt_bmc
*bt_bmc
,
376 struct platform_device
*pdev
)
378 struct device
*dev
= &pdev
->dev
;
382 bt_bmc
->irq
= platform_get_irq_optional(pdev
, 0);
386 rc
= devm_request_irq(dev
, bt_bmc
->irq
, bt_bmc_irq
, IRQF_SHARED
,
387 DEVICE_NAME
, bt_bmc
);
389 dev_warn(dev
, "Unable to request IRQ %d\n", bt_bmc
->irq
);
395 * Configure IRQs on the bmc clearing the H2B and HBUSY bits;
396 * H2B will be asserted when the bmc has data for us; HBUSY
397 * will be cleared (along with B2H) when we can write the next
398 * message to the BT buffer
400 reg
= readl(bt_bmc
->base
+ BT_CR1
);
401 reg
|= BT_CR1_IRQ_H2B
| BT_CR1_IRQ_HBUSY
;
402 writel(reg
, bt_bmc
->base
+ BT_CR1
);
407 static int bt_bmc_probe(struct platform_device
*pdev
)
409 struct bt_bmc
*bt_bmc
;
414 dev_info(dev
, "Found bt bmc device\n");
416 bt_bmc
= devm_kzalloc(dev
, sizeof(*bt_bmc
), GFP_KERNEL
);
420 dev_set_drvdata(&pdev
->dev
, bt_bmc
);
422 bt_bmc
->base
= devm_platform_ioremap_resource(pdev
, 0);
423 if (IS_ERR(bt_bmc
->base
))
424 return PTR_ERR(bt_bmc
->base
);
426 mutex_init(&bt_bmc
->mutex
);
427 init_waitqueue_head(&bt_bmc
->queue
);
429 bt_bmc
->miscdev
.minor
= MISC_DYNAMIC_MINOR
;
430 bt_bmc
->miscdev
.name
= DEVICE_NAME
;
431 bt_bmc
->miscdev
.fops
= &bt_bmc_fops
;
432 bt_bmc
->miscdev
.parent
= dev
;
433 rc
= misc_register(&bt_bmc
->miscdev
);
435 dev_err(dev
, "Unable to register misc device\n");
439 bt_bmc_config_irq(bt_bmc
, pdev
);
441 if (bt_bmc
->irq
>= 0) {
442 dev_info(dev
, "Using IRQ %d\n", bt_bmc
->irq
);
444 dev_info(dev
, "No IRQ; using timer\n");
445 timer_setup(&bt_bmc
->poll_timer
, poll_timer
, 0);
446 bt_bmc
->poll_timer
.expires
= jiffies
+ msecs_to_jiffies(10);
447 add_timer(&bt_bmc
->poll_timer
);
450 writel((BT_IO_BASE
<< BT_CR0_IO_BASE
) |
451 (BT_IRQ
<< BT_CR0_IRQ
) |
452 BT_CR0_EN_CLR_SLV_RDP
|
453 BT_CR0_EN_CLR_SLV_WRP
|
455 bt_bmc
->base
+ BT_CR0
);
462 static void bt_bmc_remove(struct platform_device
*pdev
)
464 struct bt_bmc
*bt_bmc
= dev_get_drvdata(&pdev
->dev
);
466 misc_deregister(&bt_bmc
->miscdev
);
468 del_timer_sync(&bt_bmc
->poll_timer
);
471 static const struct of_device_id bt_bmc_match
[] = {
472 { .compatible
= "aspeed,ast2400-ibt-bmc" },
473 { .compatible
= "aspeed,ast2500-ibt-bmc" },
474 { .compatible
= "aspeed,ast2600-ibt-bmc" },
478 static struct platform_driver bt_bmc_driver
= {
481 .of_match_table
= bt_bmc_match
,
483 .probe
= bt_bmc_probe
,
484 .remove
= bt_bmc_remove
,
487 module_platform_driver(bt_bmc_driver
);
489 MODULE_DEVICE_TABLE(of
, bt_bmc_match
);
490 MODULE_LICENSE("GPL");
491 MODULE_AUTHOR("Alistair Popple <alistair@popple.id.au>");
492 MODULE_DESCRIPTION("Linux device interface to the IPMI BT interface");