2 * Copyright (c) 2015-2016, IBM Corporation.
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU General Public License
6 * as published by the Free Software Foundation; either version
7 * 2 of the License, or (at your option) any later version.
10 #include <linux/atomic.h>
11 #include <linux/bt-bmc.h>
12 #include <linux/errno.h>
13 #include <linux/interrupt.h>
15 #include <linux/mfd/syscon.h>
16 #include <linux/miscdevice.h>
17 #include <linux/module.h>
19 #include <linux/platform_device.h>
20 #include <linux/poll.h>
21 #include <linux/regmap.h>
22 #include <linux/sched.h>
23 #include <linux/timer.h>
26 * This is a BMC device used to communicate to the host
28 #define DEVICE_NAME "ipmi-bt-host"
30 #define BT_IO_BASE 0xe4
34 #define BT_CR0_IO_BASE 16
36 #define BT_CR0_EN_CLR_SLV_RDP 0x8
37 #define BT_CR0_EN_CLR_SLV_WRP 0x4
38 #define BT_CR0_ENABLE_IBT 0x1
40 #define BT_CR1_IRQ_H2B 0x01
41 #define BT_CR1_IRQ_HBUSY 0x40
43 #define BT_CR2_IRQ_H2B 0x01
44 #define BT_CR2_IRQ_HBUSY 0x40
47 #define BT_CTRL_B_BUSY 0x80
48 #define BT_CTRL_H_BUSY 0x40
49 #define BT_CTRL_OEM0 0x20
50 #define BT_CTRL_SMS_ATN 0x10
51 #define BT_CTRL_B2H_ATN 0x08
52 #define BT_CTRL_H2B_ATN 0x04
53 #define BT_CTRL_CLR_RD_PTR 0x02
54 #define BT_CTRL_CLR_WR_PTR 0x01
55 #define BT_BMC2HOST 0x14
56 #define BT_INTMASK 0x18
57 #define BT_INTMASK_B2H_IRQEN 0x01
58 #define BT_INTMASK_B2H_IRQ 0x02
59 #define BT_INTMASK_BMC_HWRST 0x80
61 #define BT_BMC_BUFFER_SIZE 256
65 struct miscdevice miscdev
;
69 wait_queue_head_t queue
;
70 struct timer_list poll_timer
;
74 static atomic_t open_count
= ATOMIC_INIT(0);
76 static const struct regmap_config bt_regmap_cfg
= {
82 static u8
bt_inb(struct bt_bmc
*bt_bmc
, int reg
)
87 rc
= regmap_read(bt_bmc
->map
, bt_bmc
->offset
+ reg
, &val
);
88 WARN(rc
!= 0, "regmap_read() failed: %d\n", rc
);
90 return rc
== 0 ? (u8
) val
: 0;
93 static void bt_outb(struct bt_bmc
*bt_bmc
, u8 data
, int reg
)
97 rc
= regmap_write(bt_bmc
->map
, bt_bmc
->offset
+ reg
, data
);
98 WARN(rc
!= 0, "regmap_write() failed: %d\n", rc
);
101 static void clr_rd_ptr(struct bt_bmc
*bt_bmc
)
103 bt_outb(bt_bmc
, BT_CTRL_CLR_RD_PTR
, BT_CTRL
);
106 static void clr_wr_ptr(struct bt_bmc
*bt_bmc
)
108 bt_outb(bt_bmc
, BT_CTRL_CLR_WR_PTR
, BT_CTRL
);
111 static void clr_h2b_atn(struct bt_bmc
*bt_bmc
)
113 bt_outb(bt_bmc
, BT_CTRL_H2B_ATN
, BT_CTRL
);
116 static void set_b_busy(struct bt_bmc
*bt_bmc
)
118 if (!(bt_inb(bt_bmc
, BT_CTRL
) & BT_CTRL_B_BUSY
))
119 bt_outb(bt_bmc
, BT_CTRL_B_BUSY
, BT_CTRL
);
122 static void clr_b_busy(struct bt_bmc
*bt_bmc
)
124 if (bt_inb(bt_bmc
, BT_CTRL
) & BT_CTRL_B_BUSY
)
125 bt_outb(bt_bmc
, BT_CTRL_B_BUSY
, BT_CTRL
);
128 static void set_b2h_atn(struct bt_bmc
*bt_bmc
)
130 bt_outb(bt_bmc
, BT_CTRL_B2H_ATN
, BT_CTRL
);
133 static u8
bt_read(struct bt_bmc
*bt_bmc
)
135 return bt_inb(bt_bmc
, BT_BMC2HOST
);
138 static ssize_t
bt_readn(struct bt_bmc
*bt_bmc
, u8
*buf
, size_t n
)
142 for (i
= 0; i
< n
; i
++)
143 buf
[i
] = bt_read(bt_bmc
);
147 static void bt_write(struct bt_bmc
*bt_bmc
, u8 c
)
149 bt_outb(bt_bmc
, c
, BT_BMC2HOST
);
152 static ssize_t
bt_writen(struct bt_bmc
*bt_bmc
, u8
*buf
, size_t n
)
156 for (i
= 0; i
< n
; i
++)
157 bt_write(bt_bmc
, buf
[i
]);
161 static void set_sms_atn(struct bt_bmc
*bt_bmc
)
163 bt_outb(bt_bmc
, BT_CTRL_SMS_ATN
, BT_CTRL
);
166 static struct bt_bmc
*file_bt_bmc(struct file
*file
)
168 return container_of(file
->private_data
, struct bt_bmc
, miscdev
);
171 static int bt_bmc_open(struct inode
*inode
, struct file
*file
)
173 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
175 if (atomic_inc_return(&open_count
) == 1) {
180 atomic_dec(&open_count
);
185 * The BT (Block Transfer) interface means that entire messages are
186 * buffered by the host before a notification is sent to the BMC that
187 * there is data to be read. The first byte is the length and the
188 * message data follows. The read operation just tries to capture the
189 * whole before returning it to userspace.
191 * BT Message format :
193 * Byte 1 Byte 2 Byte 3 Byte 4 Byte 5:N
194 * Length NetFn/LUN Seq Cmd Data
197 static ssize_t
bt_bmc_read(struct file
*file
, char __user
*buf
,
198 size_t count
, loff_t
*ppos
)
200 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
203 u8 kbuffer
[BT_BMC_BUFFER_SIZE
];
207 if (!access_ok(VERIFY_WRITE
, buf
, count
))
212 if (wait_event_interruptible(bt_bmc
->queue
,
213 bt_inb(bt_bmc
, BT_CTRL
) & BT_CTRL_H2B_ATN
))
216 mutex_lock(&bt_bmc
->mutex
);
218 if (unlikely(!(bt_inb(bt_bmc
, BT_CTRL
) & BT_CTRL_H2B_ATN
))) {
228 * The BT frames start with the message length, which does not
229 * include the length byte.
231 kbuffer
[0] = bt_read(bt_bmc
);
234 /* We pass the length back to userspace as well */
239 nread
= min_t(ssize_t
, len
, sizeof(kbuffer
) - len_byte
);
241 bt_readn(bt_bmc
, kbuffer
+ len_byte
, nread
);
243 if (copy_to_user(buf
, kbuffer
, nread
+ len_byte
)) {
248 buf
+= nread
+ len_byte
;
249 ret
+= nread
+ len_byte
;
256 mutex_unlock(&bt_bmc
->mutex
);
261 * BT Message response format :
263 * Byte 1 Byte 2 Byte 3 Byte 4 Byte 5 Byte 6:N
264 * Length NetFn/LUN Seq Cmd Code Data
266 static ssize_t
bt_bmc_write(struct file
*file
, const char __user
*buf
,
267 size_t count
, loff_t
*ppos
)
269 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
270 u8 kbuffer
[BT_BMC_BUFFER_SIZE
];
275 * send a minimum response size
280 if (!access_ok(VERIFY_READ
, buf
, count
))
286 * There's no interrupt for clearing bmc busy so we have to
289 if (wait_event_interruptible(bt_bmc
->queue
,
290 !(bt_inb(bt_bmc
, BT_CTRL
) &
291 (BT_CTRL_H_BUSY
| BT_CTRL_B2H_ATN
))))
294 mutex_lock(&bt_bmc
->mutex
);
296 if (unlikely(bt_inb(bt_bmc
, BT_CTRL
) &
297 (BT_CTRL_H_BUSY
| BT_CTRL_B2H_ATN
))) {
305 nwritten
= min_t(ssize_t
, count
, sizeof(kbuffer
));
306 if (copy_from_user(&kbuffer
, buf
, nwritten
)) {
311 bt_writen(bt_bmc
, kbuffer
, nwritten
);
321 mutex_unlock(&bt_bmc
->mutex
);
325 static long bt_bmc_ioctl(struct file
*file
, unsigned int cmd
,
328 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
331 case BT_BMC_IOCTL_SMS_ATN
:
338 static int bt_bmc_release(struct inode
*inode
, struct file
*file
)
340 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
342 atomic_dec(&open_count
);
347 static unsigned int bt_bmc_poll(struct file
*file
, poll_table
*wait
)
349 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
350 unsigned int mask
= 0;
353 poll_wait(file
, &bt_bmc
->queue
, wait
);
355 ctrl
= bt_inb(bt_bmc
, BT_CTRL
);
357 if (ctrl
& BT_CTRL_H2B_ATN
)
360 if (!(ctrl
& (BT_CTRL_H_BUSY
| BT_CTRL_B2H_ATN
)))
366 static const struct file_operations bt_bmc_fops
= {
367 .owner
= THIS_MODULE
,
370 .write
= bt_bmc_write
,
371 .release
= bt_bmc_release
,
373 .unlocked_ioctl
= bt_bmc_ioctl
,
376 static void poll_timer(unsigned long data
)
378 struct bt_bmc
*bt_bmc
= (void *)data
;
380 bt_bmc
->poll_timer
.expires
+= msecs_to_jiffies(500);
381 wake_up(&bt_bmc
->queue
);
382 add_timer(&bt_bmc
->poll_timer
);
385 static irqreturn_t
bt_bmc_irq(int irq
, void *arg
)
387 struct bt_bmc
*bt_bmc
= arg
;
391 rc
= regmap_read(bt_bmc
->map
, bt_bmc
->offset
+ BT_CR2
, ®
);
395 reg
&= BT_CR2_IRQ_H2B
| BT_CR2_IRQ_HBUSY
;
399 /* ack pending IRQs */
400 regmap_write(bt_bmc
->map
, bt_bmc
->offset
+ BT_CR2
, reg
);
402 wake_up(&bt_bmc
->queue
);
406 static int bt_bmc_config_irq(struct bt_bmc
*bt_bmc
,
407 struct platform_device
*pdev
)
409 struct device
*dev
= &pdev
->dev
;
412 bt_bmc
->irq
= platform_get_irq(pdev
, 0);
416 rc
= devm_request_irq(dev
, bt_bmc
->irq
, bt_bmc_irq
, IRQF_SHARED
,
417 DEVICE_NAME
, bt_bmc
);
419 dev_warn(dev
, "Unable to request IRQ %d\n", bt_bmc
->irq
);
425 * Configure IRQs on the bmc clearing the H2B and HBUSY bits;
426 * H2B will be asserted when the bmc has data for us; HBUSY
427 * will be cleared (along with B2H) when we can write the next
428 * message to the BT buffer
430 rc
= regmap_update_bits(bt_bmc
->map
, bt_bmc
->offset
+ BT_CR1
,
431 (BT_CR1_IRQ_H2B
| BT_CR1_IRQ_HBUSY
),
432 (BT_CR1_IRQ_H2B
| BT_CR1_IRQ_HBUSY
));
437 static int bt_bmc_probe(struct platform_device
*pdev
)
439 struct bt_bmc
*bt_bmc
;
443 if (!pdev
|| !pdev
->dev
.of_node
)
447 dev_info(dev
, "Found bt bmc device\n");
449 bt_bmc
= devm_kzalloc(dev
, sizeof(*bt_bmc
), GFP_KERNEL
);
453 dev_set_drvdata(&pdev
->dev
, bt_bmc
);
455 bt_bmc
->map
= syscon_node_to_regmap(pdev
->dev
.parent
->of_node
);
456 if (IS_ERR(bt_bmc
->map
)) {
457 struct resource
*res
;
461 * Assume it's not the MFD-based devicetree description, in
462 * which case generate a regmap ourselves
464 res
= platform_get_resource(pdev
, IORESOURCE_MEM
, 0);
465 base
= devm_ioremap_resource(&pdev
->dev
, res
);
467 return PTR_ERR(base
);
469 bt_bmc
->map
= devm_regmap_init_mmio(dev
, base
, &bt_regmap_cfg
);
472 rc
= of_property_read_u32(dev
->of_node
, "reg", &bt_bmc
->offset
);
477 mutex_init(&bt_bmc
->mutex
);
478 init_waitqueue_head(&bt_bmc
->queue
);
480 bt_bmc
->miscdev
.minor
= MISC_DYNAMIC_MINOR
,
481 bt_bmc
->miscdev
.name
= DEVICE_NAME
,
482 bt_bmc
->miscdev
.fops
= &bt_bmc_fops
,
483 bt_bmc
->miscdev
.parent
= dev
;
484 rc
= misc_register(&bt_bmc
->miscdev
);
486 dev_err(dev
, "Unable to register misc device\n");
490 bt_bmc_config_irq(bt_bmc
, pdev
);
493 dev_info(dev
, "Using IRQ %d\n", bt_bmc
->irq
);
495 dev_info(dev
, "No IRQ; using timer\n");
496 setup_timer(&bt_bmc
->poll_timer
, poll_timer
,
497 (unsigned long)bt_bmc
);
498 bt_bmc
->poll_timer
.expires
= jiffies
+ msecs_to_jiffies(10);
499 add_timer(&bt_bmc
->poll_timer
);
502 regmap_write(bt_bmc
->map
, bt_bmc
->offset
+ BT_CR0
,
503 (BT_IO_BASE
<< BT_CR0_IO_BASE
) |
504 (BT_IRQ
<< BT_CR0_IRQ
) |
505 BT_CR0_EN_CLR_SLV_RDP
|
506 BT_CR0_EN_CLR_SLV_WRP
|
514 static int bt_bmc_remove(struct platform_device
*pdev
)
516 struct bt_bmc
*bt_bmc
= dev_get_drvdata(&pdev
->dev
);
518 misc_deregister(&bt_bmc
->miscdev
);
520 del_timer_sync(&bt_bmc
->poll_timer
);
524 static const struct of_device_id bt_bmc_match
[] = {
525 { .compatible
= "aspeed,ast2400-ibt-bmc" },
526 { .compatible
= "aspeed,ast2500-ibt-bmc" },
530 static struct platform_driver bt_bmc_driver
= {
533 .of_match_table
= bt_bmc_match
,
535 .probe
= bt_bmc_probe
,
536 .remove
= bt_bmc_remove
,
539 module_platform_driver(bt_bmc_driver
);
541 MODULE_DEVICE_TABLE(of
, bt_bmc_match
);
542 MODULE_LICENSE("GPL");
543 MODULE_AUTHOR("Alistair Popple <alistair@popple.id.au>");
544 MODULE_DESCRIPTION("Linux device interface to the IPMI BT interface");