2 * Copyright (c) 2015-2016, IBM Corporation.
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU General Public License
6 * as published by the Free Software Foundation; either version
7 * 2 of the License, or (at your option) any later version.
10 #include <linux/atomic.h>
11 #include <linux/bt-bmc.h>
12 #include <linux/errno.h>
13 #include <linux/interrupt.h>
15 #include <linux/mfd/syscon.h>
16 #include <linux/miscdevice.h>
17 #include <linux/module.h>
19 #include <linux/platform_device.h>
20 #include <linux/poll.h>
21 #include <linux/regmap.h>
22 #include <linux/sched.h>
23 #include <linux/timer.h>
26 * This is a BMC device used to communicate to the host
28 #define DEVICE_NAME "ipmi-bt-host"
30 #define BT_IO_BASE 0xe4
34 #define BT_CR0_IO_BASE 16
36 #define BT_CR0_EN_CLR_SLV_RDP 0x8
37 #define BT_CR0_EN_CLR_SLV_WRP 0x4
38 #define BT_CR0_ENABLE_IBT 0x1
40 #define BT_CR1_IRQ_H2B 0x01
41 #define BT_CR1_IRQ_HBUSY 0x40
43 #define BT_CR2_IRQ_H2B 0x01
44 #define BT_CR2_IRQ_HBUSY 0x40
47 #define BT_CTRL_B_BUSY 0x80
48 #define BT_CTRL_H_BUSY 0x40
49 #define BT_CTRL_OEM0 0x20
50 #define BT_CTRL_SMS_ATN 0x10
51 #define BT_CTRL_B2H_ATN 0x08
52 #define BT_CTRL_H2B_ATN 0x04
53 #define BT_CTRL_CLR_RD_PTR 0x02
54 #define BT_CTRL_CLR_WR_PTR 0x01
55 #define BT_BMC2HOST 0x14
56 #define BT_INTMASK 0x18
57 #define BT_INTMASK_B2H_IRQEN 0x01
58 #define BT_INTMASK_B2H_IRQ 0x02
59 #define BT_INTMASK_BMC_HWRST 0x80
61 #define BT_BMC_BUFFER_SIZE 256
65 struct miscdevice miscdev
;
69 wait_queue_head_t queue
;
70 struct timer_list poll_timer
;
74 static atomic_t open_count
= ATOMIC_INIT(0);
76 static const struct regmap_config bt_regmap_cfg
= {
82 static u8
bt_inb(struct bt_bmc
*bt_bmc
, int reg
)
87 rc
= regmap_read(bt_bmc
->map
, bt_bmc
->offset
+ reg
, &val
);
88 WARN(rc
!= 0, "regmap_read() failed: %d\n", rc
);
90 return rc
== 0 ? (u8
) val
: 0;
93 static void bt_outb(struct bt_bmc
*bt_bmc
, u8 data
, int reg
)
97 rc
= regmap_write(bt_bmc
->map
, bt_bmc
->offset
+ reg
, data
);
98 WARN(rc
!= 0, "regmap_write() failed: %d\n", rc
);
101 static void clr_rd_ptr(struct bt_bmc
*bt_bmc
)
103 bt_outb(bt_bmc
, BT_CTRL_CLR_RD_PTR
, BT_CTRL
);
106 static void clr_wr_ptr(struct bt_bmc
*bt_bmc
)
108 bt_outb(bt_bmc
, BT_CTRL_CLR_WR_PTR
, BT_CTRL
);
111 static void clr_h2b_atn(struct bt_bmc
*bt_bmc
)
113 bt_outb(bt_bmc
, BT_CTRL_H2B_ATN
, BT_CTRL
);
116 static void set_b_busy(struct bt_bmc
*bt_bmc
)
118 if (!(bt_inb(bt_bmc
, BT_CTRL
) & BT_CTRL_B_BUSY
))
119 bt_outb(bt_bmc
, BT_CTRL_B_BUSY
, BT_CTRL
);
122 static void clr_b_busy(struct bt_bmc
*bt_bmc
)
124 if (bt_inb(bt_bmc
, BT_CTRL
) & BT_CTRL_B_BUSY
)
125 bt_outb(bt_bmc
, BT_CTRL_B_BUSY
, BT_CTRL
);
128 static void set_b2h_atn(struct bt_bmc
*bt_bmc
)
130 bt_outb(bt_bmc
, BT_CTRL_B2H_ATN
, BT_CTRL
);
133 static u8
bt_read(struct bt_bmc
*bt_bmc
)
135 return bt_inb(bt_bmc
, BT_BMC2HOST
);
138 static ssize_t
bt_readn(struct bt_bmc
*bt_bmc
, u8
*buf
, size_t n
)
142 for (i
= 0; i
< n
; i
++)
143 buf
[i
] = bt_read(bt_bmc
);
147 static void bt_write(struct bt_bmc
*bt_bmc
, u8 c
)
149 bt_outb(bt_bmc
, c
, BT_BMC2HOST
);
152 static ssize_t
bt_writen(struct bt_bmc
*bt_bmc
, u8
*buf
, size_t n
)
156 for (i
= 0; i
< n
; i
++)
157 bt_write(bt_bmc
, buf
[i
]);
161 static void set_sms_atn(struct bt_bmc
*bt_bmc
)
163 bt_outb(bt_bmc
, BT_CTRL_SMS_ATN
, BT_CTRL
);
166 static struct bt_bmc
*file_bt_bmc(struct file
*file
)
168 return container_of(file
->private_data
, struct bt_bmc
, miscdev
);
171 static int bt_bmc_open(struct inode
*inode
, struct file
*file
)
173 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
175 if (atomic_inc_return(&open_count
) == 1) {
180 atomic_dec(&open_count
);
185 * The BT (Block Transfer) interface means that entire messages are
186 * buffered by the host before a notification is sent to the BMC that
187 * there is data to be read. The first byte is the length and the
188 * message data follows. The read operation just tries to capture the
189 * whole before returning it to userspace.
191 * BT Message format :
193 * Byte 1 Byte 2 Byte 3 Byte 4 Byte 5:N
194 * Length NetFn/LUN Seq Cmd Data
197 static ssize_t
bt_bmc_read(struct file
*file
, char __user
*buf
,
198 size_t count
, loff_t
*ppos
)
200 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
203 u8 kbuffer
[BT_BMC_BUFFER_SIZE
];
209 if (wait_event_interruptible(bt_bmc
->queue
,
210 bt_inb(bt_bmc
, BT_CTRL
) & BT_CTRL_H2B_ATN
))
213 mutex_lock(&bt_bmc
->mutex
);
215 if (unlikely(!(bt_inb(bt_bmc
, BT_CTRL
) & BT_CTRL_H2B_ATN
))) {
225 * The BT frames start with the message length, which does not
226 * include the length byte.
228 kbuffer
[0] = bt_read(bt_bmc
);
231 /* We pass the length back to userspace as well */
236 nread
= min_t(ssize_t
, len
, sizeof(kbuffer
) - len_byte
);
238 bt_readn(bt_bmc
, kbuffer
+ len_byte
, nread
);
240 if (copy_to_user(buf
, kbuffer
, nread
+ len_byte
)) {
245 buf
+= nread
+ len_byte
;
246 ret
+= nread
+ len_byte
;
253 mutex_unlock(&bt_bmc
->mutex
);
258 * BT Message response format :
260 * Byte 1 Byte 2 Byte 3 Byte 4 Byte 5 Byte 6:N
261 * Length NetFn/LUN Seq Cmd Code Data
263 static ssize_t
bt_bmc_write(struct file
*file
, const char __user
*buf
,
264 size_t count
, loff_t
*ppos
)
266 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
267 u8 kbuffer
[BT_BMC_BUFFER_SIZE
];
272 * send a minimum response size
280 * There's no interrupt for clearing bmc busy so we have to
283 if (wait_event_interruptible(bt_bmc
->queue
,
284 !(bt_inb(bt_bmc
, BT_CTRL
) &
285 (BT_CTRL_H_BUSY
| BT_CTRL_B2H_ATN
))))
288 mutex_lock(&bt_bmc
->mutex
);
290 if (unlikely(bt_inb(bt_bmc
, BT_CTRL
) &
291 (BT_CTRL_H_BUSY
| BT_CTRL_B2H_ATN
))) {
299 nwritten
= min_t(ssize_t
, count
, sizeof(kbuffer
));
300 if (copy_from_user(&kbuffer
, buf
, nwritten
)) {
305 bt_writen(bt_bmc
, kbuffer
, nwritten
);
315 mutex_unlock(&bt_bmc
->mutex
);
319 static long bt_bmc_ioctl(struct file
*file
, unsigned int cmd
,
322 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
325 case BT_BMC_IOCTL_SMS_ATN
:
332 static int bt_bmc_release(struct inode
*inode
, struct file
*file
)
334 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
336 atomic_dec(&open_count
);
341 static __poll_t
bt_bmc_poll(struct file
*file
, poll_table
*wait
)
343 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
347 poll_wait(file
, &bt_bmc
->queue
, wait
);
349 ctrl
= bt_inb(bt_bmc
, BT_CTRL
);
351 if (ctrl
& BT_CTRL_H2B_ATN
)
354 if (!(ctrl
& (BT_CTRL_H_BUSY
| BT_CTRL_B2H_ATN
)))
360 static const struct file_operations bt_bmc_fops
= {
361 .owner
= THIS_MODULE
,
364 .write
= bt_bmc_write
,
365 .release
= bt_bmc_release
,
367 .unlocked_ioctl
= bt_bmc_ioctl
,
370 static void poll_timer(struct timer_list
*t
)
372 struct bt_bmc
*bt_bmc
= from_timer(bt_bmc
, t
, poll_timer
);
374 bt_bmc
->poll_timer
.expires
+= msecs_to_jiffies(500);
375 wake_up(&bt_bmc
->queue
);
376 add_timer(&bt_bmc
->poll_timer
);
379 static irqreturn_t
bt_bmc_irq(int irq
, void *arg
)
381 struct bt_bmc
*bt_bmc
= arg
;
385 rc
= regmap_read(bt_bmc
->map
, bt_bmc
->offset
+ BT_CR2
, ®
);
389 reg
&= BT_CR2_IRQ_H2B
| BT_CR2_IRQ_HBUSY
;
393 /* ack pending IRQs */
394 regmap_write(bt_bmc
->map
, bt_bmc
->offset
+ BT_CR2
, reg
);
396 wake_up(&bt_bmc
->queue
);
400 static int bt_bmc_config_irq(struct bt_bmc
*bt_bmc
,
401 struct platform_device
*pdev
)
403 struct device
*dev
= &pdev
->dev
;
406 bt_bmc
->irq
= platform_get_irq(pdev
, 0);
410 rc
= devm_request_irq(dev
, bt_bmc
->irq
, bt_bmc_irq
, IRQF_SHARED
,
411 DEVICE_NAME
, bt_bmc
);
413 dev_warn(dev
, "Unable to request IRQ %d\n", bt_bmc
->irq
);
419 * Configure IRQs on the bmc clearing the H2B and HBUSY bits;
420 * H2B will be asserted when the bmc has data for us; HBUSY
421 * will be cleared (along with B2H) when we can write the next
422 * message to the BT buffer
424 rc
= regmap_update_bits(bt_bmc
->map
, bt_bmc
->offset
+ BT_CR1
,
425 (BT_CR1_IRQ_H2B
| BT_CR1_IRQ_HBUSY
),
426 (BT_CR1_IRQ_H2B
| BT_CR1_IRQ_HBUSY
));
431 static int bt_bmc_probe(struct platform_device
*pdev
)
433 struct bt_bmc
*bt_bmc
;
437 if (!pdev
|| !pdev
->dev
.of_node
)
441 dev_info(dev
, "Found bt bmc device\n");
443 bt_bmc
= devm_kzalloc(dev
, sizeof(*bt_bmc
), GFP_KERNEL
);
447 dev_set_drvdata(&pdev
->dev
, bt_bmc
);
449 bt_bmc
->map
= syscon_node_to_regmap(pdev
->dev
.parent
->of_node
);
450 if (IS_ERR(bt_bmc
->map
)) {
451 struct resource
*res
;
455 * Assume it's not the MFD-based devicetree description, in
456 * which case generate a regmap ourselves
458 res
= platform_get_resource(pdev
, IORESOURCE_MEM
, 0);
459 base
= devm_ioremap_resource(&pdev
->dev
, res
);
461 return PTR_ERR(base
);
463 bt_bmc
->map
= devm_regmap_init_mmio(dev
, base
, &bt_regmap_cfg
);
466 rc
= of_property_read_u32(dev
->of_node
, "reg", &bt_bmc
->offset
);
471 mutex_init(&bt_bmc
->mutex
);
472 init_waitqueue_head(&bt_bmc
->queue
);
474 bt_bmc
->miscdev
.minor
= MISC_DYNAMIC_MINOR
,
475 bt_bmc
->miscdev
.name
= DEVICE_NAME
,
476 bt_bmc
->miscdev
.fops
= &bt_bmc_fops
,
477 bt_bmc
->miscdev
.parent
= dev
;
478 rc
= misc_register(&bt_bmc
->miscdev
);
480 dev_err(dev
, "Unable to register misc device\n");
484 bt_bmc_config_irq(bt_bmc
, pdev
);
487 dev_info(dev
, "Using IRQ %d\n", bt_bmc
->irq
);
489 dev_info(dev
, "No IRQ; using timer\n");
490 timer_setup(&bt_bmc
->poll_timer
, poll_timer
, 0);
491 bt_bmc
->poll_timer
.expires
= jiffies
+ msecs_to_jiffies(10);
492 add_timer(&bt_bmc
->poll_timer
);
495 regmap_write(bt_bmc
->map
, bt_bmc
->offset
+ BT_CR0
,
496 (BT_IO_BASE
<< BT_CR0_IO_BASE
) |
497 (BT_IRQ
<< BT_CR0_IRQ
) |
498 BT_CR0_EN_CLR_SLV_RDP
|
499 BT_CR0_EN_CLR_SLV_WRP
|
507 static int bt_bmc_remove(struct platform_device
*pdev
)
509 struct bt_bmc
*bt_bmc
= dev_get_drvdata(&pdev
->dev
);
511 misc_deregister(&bt_bmc
->miscdev
);
513 del_timer_sync(&bt_bmc
->poll_timer
);
517 static const struct of_device_id bt_bmc_match
[] = {
518 { .compatible
= "aspeed,ast2400-ibt-bmc" },
519 { .compatible
= "aspeed,ast2500-ibt-bmc" },
523 static struct platform_driver bt_bmc_driver
= {
526 .of_match_table
= bt_bmc_match
,
528 .probe
= bt_bmc_probe
,
529 .remove
= bt_bmc_remove
,
532 module_platform_driver(bt_bmc_driver
);
534 MODULE_DEVICE_TABLE(of
, bt_bmc_match
);
535 MODULE_LICENSE("GPL");
536 MODULE_AUTHOR("Alistair Popple <alistair@popple.id.au>");
537 MODULE_DESCRIPTION("Linux device interface to the IPMI BT interface");