1 // SPDX-License-Identifier: GPL-2.0+
3 * Copyright (c) 2015-2016, IBM Corporation.
6 #include <linux/atomic.h>
7 #include <linux/bt-bmc.h>
8 #include <linux/errno.h>
9 #include <linux/interrupt.h>
11 #include <linux/mfd/syscon.h>
12 #include <linux/miscdevice.h>
13 #include <linux/module.h>
15 #include <linux/platform_device.h>
16 #include <linux/poll.h>
17 #include <linux/regmap.h>
18 #include <linux/sched.h>
19 #include <linux/timer.h>
22 * This is a BMC device used to communicate to the host
24 #define DEVICE_NAME "ipmi-bt-host"
26 #define BT_IO_BASE 0xe4
30 #define BT_CR0_IO_BASE 16
32 #define BT_CR0_EN_CLR_SLV_RDP 0x8
33 #define BT_CR0_EN_CLR_SLV_WRP 0x4
34 #define BT_CR0_ENABLE_IBT 0x1
36 #define BT_CR1_IRQ_H2B 0x01
37 #define BT_CR1_IRQ_HBUSY 0x40
39 #define BT_CR2_IRQ_H2B 0x01
40 #define BT_CR2_IRQ_HBUSY 0x40
43 #define BT_CTRL_B_BUSY 0x80
44 #define BT_CTRL_H_BUSY 0x40
45 #define BT_CTRL_OEM0 0x20
46 #define BT_CTRL_SMS_ATN 0x10
47 #define BT_CTRL_B2H_ATN 0x08
48 #define BT_CTRL_H2B_ATN 0x04
49 #define BT_CTRL_CLR_RD_PTR 0x02
50 #define BT_CTRL_CLR_WR_PTR 0x01
51 #define BT_BMC2HOST 0x14
52 #define BT_INTMASK 0x18
53 #define BT_INTMASK_B2H_IRQEN 0x01
54 #define BT_INTMASK_B2H_IRQ 0x02
55 #define BT_INTMASK_BMC_HWRST 0x80
57 #define BT_BMC_BUFFER_SIZE 256
61 struct miscdevice miscdev
;
65 wait_queue_head_t queue
;
66 struct timer_list poll_timer
;
70 static atomic_t open_count
= ATOMIC_INIT(0);
72 static const struct regmap_config bt_regmap_cfg
= {
78 static u8
bt_inb(struct bt_bmc
*bt_bmc
, int reg
)
83 rc
= regmap_read(bt_bmc
->map
, bt_bmc
->offset
+ reg
, &val
);
84 WARN(rc
!= 0, "regmap_read() failed: %d\n", rc
);
86 return rc
== 0 ? (u8
) val
: 0;
89 static void bt_outb(struct bt_bmc
*bt_bmc
, u8 data
, int reg
)
93 rc
= regmap_write(bt_bmc
->map
, bt_bmc
->offset
+ reg
, data
);
94 WARN(rc
!= 0, "regmap_write() failed: %d\n", rc
);
97 static void clr_rd_ptr(struct bt_bmc
*bt_bmc
)
99 bt_outb(bt_bmc
, BT_CTRL_CLR_RD_PTR
, BT_CTRL
);
102 static void clr_wr_ptr(struct bt_bmc
*bt_bmc
)
104 bt_outb(bt_bmc
, BT_CTRL_CLR_WR_PTR
, BT_CTRL
);
107 static void clr_h2b_atn(struct bt_bmc
*bt_bmc
)
109 bt_outb(bt_bmc
, BT_CTRL_H2B_ATN
, BT_CTRL
);
112 static void set_b_busy(struct bt_bmc
*bt_bmc
)
114 if (!(bt_inb(bt_bmc
, BT_CTRL
) & BT_CTRL_B_BUSY
))
115 bt_outb(bt_bmc
, BT_CTRL_B_BUSY
, BT_CTRL
);
118 static void clr_b_busy(struct bt_bmc
*bt_bmc
)
120 if (bt_inb(bt_bmc
, BT_CTRL
) & BT_CTRL_B_BUSY
)
121 bt_outb(bt_bmc
, BT_CTRL_B_BUSY
, BT_CTRL
);
124 static void set_b2h_atn(struct bt_bmc
*bt_bmc
)
126 bt_outb(bt_bmc
, BT_CTRL_B2H_ATN
, BT_CTRL
);
129 static u8
bt_read(struct bt_bmc
*bt_bmc
)
131 return bt_inb(bt_bmc
, BT_BMC2HOST
);
134 static ssize_t
bt_readn(struct bt_bmc
*bt_bmc
, u8
*buf
, size_t n
)
138 for (i
= 0; i
< n
; i
++)
139 buf
[i
] = bt_read(bt_bmc
);
143 static void bt_write(struct bt_bmc
*bt_bmc
, u8 c
)
145 bt_outb(bt_bmc
, c
, BT_BMC2HOST
);
148 static ssize_t
bt_writen(struct bt_bmc
*bt_bmc
, u8
*buf
, size_t n
)
152 for (i
= 0; i
< n
; i
++)
153 bt_write(bt_bmc
, buf
[i
]);
157 static void set_sms_atn(struct bt_bmc
*bt_bmc
)
159 bt_outb(bt_bmc
, BT_CTRL_SMS_ATN
, BT_CTRL
);
162 static struct bt_bmc
*file_bt_bmc(struct file
*file
)
164 return container_of(file
->private_data
, struct bt_bmc
, miscdev
);
167 static int bt_bmc_open(struct inode
*inode
, struct file
*file
)
169 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
171 if (atomic_inc_return(&open_count
) == 1) {
176 atomic_dec(&open_count
);
181 * The BT (Block Transfer) interface means that entire messages are
182 * buffered by the host before a notification is sent to the BMC that
183 * there is data to be read. The first byte is the length and the
184 * message data follows. The read operation just tries to capture the
185 * whole before returning it to userspace.
187 * BT Message format :
189 * Byte 1 Byte 2 Byte 3 Byte 4 Byte 5:N
190 * Length NetFn/LUN Seq Cmd Data
193 static ssize_t
bt_bmc_read(struct file
*file
, char __user
*buf
,
194 size_t count
, loff_t
*ppos
)
196 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
199 u8 kbuffer
[BT_BMC_BUFFER_SIZE
];
205 if (wait_event_interruptible(bt_bmc
->queue
,
206 bt_inb(bt_bmc
, BT_CTRL
) & BT_CTRL_H2B_ATN
))
209 mutex_lock(&bt_bmc
->mutex
);
211 if (unlikely(!(bt_inb(bt_bmc
, BT_CTRL
) & BT_CTRL_H2B_ATN
))) {
221 * The BT frames start with the message length, which does not
222 * include the length byte.
224 kbuffer
[0] = bt_read(bt_bmc
);
227 /* We pass the length back to userspace as well */
232 nread
= min_t(ssize_t
, len
, sizeof(kbuffer
) - len_byte
);
234 bt_readn(bt_bmc
, kbuffer
+ len_byte
, nread
);
236 if (copy_to_user(buf
, kbuffer
, nread
+ len_byte
)) {
241 buf
+= nread
+ len_byte
;
242 ret
+= nread
+ len_byte
;
249 mutex_unlock(&bt_bmc
->mutex
);
254 * BT Message response format :
256 * Byte 1 Byte 2 Byte 3 Byte 4 Byte 5 Byte 6:N
257 * Length NetFn/LUN Seq Cmd Code Data
259 static ssize_t
bt_bmc_write(struct file
*file
, const char __user
*buf
,
260 size_t count
, loff_t
*ppos
)
262 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
263 u8 kbuffer
[BT_BMC_BUFFER_SIZE
];
268 * send a minimum response size
276 * There's no interrupt for clearing bmc busy so we have to
279 if (wait_event_interruptible(bt_bmc
->queue
,
280 !(bt_inb(bt_bmc
, BT_CTRL
) &
281 (BT_CTRL_H_BUSY
| BT_CTRL_B2H_ATN
))))
284 mutex_lock(&bt_bmc
->mutex
);
286 if (unlikely(bt_inb(bt_bmc
, BT_CTRL
) &
287 (BT_CTRL_H_BUSY
| BT_CTRL_B2H_ATN
))) {
295 nwritten
= min_t(ssize_t
, count
, sizeof(kbuffer
));
296 if (copy_from_user(&kbuffer
, buf
, nwritten
)) {
301 bt_writen(bt_bmc
, kbuffer
, nwritten
);
311 mutex_unlock(&bt_bmc
->mutex
);
315 static long bt_bmc_ioctl(struct file
*file
, unsigned int cmd
,
318 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
321 case BT_BMC_IOCTL_SMS_ATN
:
328 static int bt_bmc_release(struct inode
*inode
, struct file
*file
)
330 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
332 atomic_dec(&open_count
);
337 static __poll_t
bt_bmc_poll(struct file
*file
, poll_table
*wait
)
339 struct bt_bmc
*bt_bmc
= file_bt_bmc(file
);
343 poll_wait(file
, &bt_bmc
->queue
, wait
);
345 ctrl
= bt_inb(bt_bmc
, BT_CTRL
);
347 if (ctrl
& BT_CTRL_H2B_ATN
)
350 if (!(ctrl
& (BT_CTRL_H_BUSY
| BT_CTRL_B2H_ATN
)))
356 static const struct file_operations bt_bmc_fops
= {
357 .owner
= THIS_MODULE
,
360 .write
= bt_bmc_write
,
361 .release
= bt_bmc_release
,
363 .unlocked_ioctl
= bt_bmc_ioctl
,
366 static void poll_timer(struct timer_list
*t
)
368 struct bt_bmc
*bt_bmc
= from_timer(bt_bmc
, t
, poll_timer
);
370 bt_bmc
->poll_timer
.expires
+= msecs_to_jiffies(500);
371 wake_up(&bt_bmc
->queue
);
372 add_timer(&bt_bmc
->poll_timer
);
375 static irqreturn_t
bt_bmc_irq(int irq
, void *arg
)
377 struct bt_bmc
*bt_bmc
= arg
;
381 rc
= regmap_read(bt_bmc
->map
, bt_bmc
->offset
+ BT_CR2
, ®
);
385 reg
&= BT_CR2_IRQ_H2B
| BT_CR2_IRQ_HBUSY
;
389 /* ack pending IRQs */
390 regmap_write(bt_bmc
->map
, bt_bmc
->offset
+ BT_CR2
, reg
);
392 wake_up(&bt_bmc
->queue
);
396 static int bt_bmc_config_irq(struct bt_bmc
*bt_bmc
,
397 struct platform_device
*pdev
)
399 struct device
*dev
= &pdev
->dev
;
402 bt_bmc
->irq
= platform_get_irq(pdev
, 0);
406 rc
= devm_request_irq(dev
, bt_bmc
->irq
, bt_bmc_irq
, IRQF_SHARED
,
407 DEVICE_NAME
, bt_bmc
);
409 dev_warn(dev
, "Unable to request IRQ %d\n", bt_bmc
->irq
);
415 * Configure IRQs on the bmc clearing the H2B and HBUSY bits;
416 * H2B will be asserted when the bmc has data for us; HBUSY
417 * will be cleared (along with B2H) when we can write the next
418 * message to the BT buffer
420 rc
= regmap_update_bits(bt_bmc
->map
, bt_bmc
->offset
+ BT_CR1
,
421 (BT_CR1_IRQ_H2B
| BT_CR1_IRQ_HBUSY
),
422 (BT_CR1_IRQ_H2B
| BT_CR1_IRQ_HBUSY
));
427 static int bt_bmc_probe(struct platform_device
*pdev
)
429 struct bt_bmc
*bt_bmc
;
433 if (!pdev
|| !pdev
->dev
.of_node
)
437 dev_info(dev
, "Found bt bmc device\n");
439 bt_bmc
= devm_kzalloc(dev
, sizeof(*bt_bmc
), GFP_KERNEL
);
443 dev_set_drvdata(&pdev
->dev
, bt_bmc
);
445 bt_bmc
->map
= syscon_node_to_regmap(pdev
->dev
.parent
->of_node
);
446 if (IS_ERR(bt_bmc
->map
)) {
447 struct resource
*res
;
451 * Assume it's not the MFD-based devicetree description, in
452 * which case generate a regmap ourselves
454 res
= platform_get_resource(pdev
, IORESOURCE_MEM
, 0);
455 base
= devm_ioremap_resource(&pdev
->dev
, res
);
457 return PTR_ERR(base
);
459 bt_bmc
->map
= devm_regmap_init_mmio(dev
, base
, &bt_regmap_cfg
);
462 rc
= of_property_read_u32(dev
->of_node
, "reg", &bt_bmc
->offset
);
467 mutex_init(&bt_bmc
->mutex
);
468 init_waitqueue_head(&bt_bmc
->queue
);
470 bt_bmc
->miscdev
.minor
= MISC_DYNAMIC_MINOR
,
471 bt_bmc
->miscdev
.name
= DEVICE_NAME
,
472 bt_bmc
->miscdev
.fops
= &bt_bmc_fops
,
473 bt_bmc
->miscdev
.parent
= dev
;
474 rc
= misc_register(&bt_bmc
->miscdev
);
476 dev_err(dev
, "Unable to register misc device\n");
480 bt_bmc_config_irq(bt_bmc
, pdev
);
483 dev_info(dev
, "Using IRQ %d\n", bt_bmc
->irq
);
485 dev_info(dev
, "No IRQ; using timer\n");
486 timer_setup(&bt_bmc
->poll_timer
, poll_timer
, 0);
487 bt_bmc
->poll_timer
.expires
= jiffies
+ msecs_to_jiffies(10);
488 add_timer(&bt_bmc
->poll_timer
);
491 regmap_write(bt_bmc
->map
, bt_bmc
->offset
+ BT_CR0
,
492 (BT_IO_BASE
<< BT_CR0_IO_BASE
) |
493 (BT_IRQ
<< BT_CR0_IRQ
) |
494 BT_CR0_EN_CLR_SLV_RDP
|
495 BT_CR0_EN_CLR_SLV_WRP
|
503 static int bt_bmc_remove(struct platform_device
*pdev
)
505 struct bt_bmc
*bt_bmc
= dev_get_drvdata(&pdev
->dev
);
507 misc_deregister(&bt_bmc
->miscdev
);
509 del_timer_sync(&bt_bmc
->poll_timer
);
513 static const struct of_device_id bt_bmc_match
[] = {
514 { .compatible
= "aspeed,ast2400-ibt-bmc" },
515 { .compatible
= "aspeed,ast2500-ibt-bmc" },
519 static struct platform_driver bt_bmc_driver
= {
522 .of_match_table
= bt_bmc_match
,
524 .probe
= bt_bmc_probe
,
525 .remove
= bt_bmc_remove
,
528 module_platform_driver(bt_bmc_driver
);
530 MODULE_DEVICE_TABLE(of
, bt_bmc_match
);
531 MODULE_LICENSE("GPL");
532 MODULE_AUTHOR("Alistair Popple <alistair@popple.id.au>");
533 MODULE_DESCRIPTION("Linux device interface to the IPMI BT interface");