2 * Copyright (c) 2013 Andrew Duggan <aduggan@synaptics.com>
3 * Copyright (c) 2013 Synaptics Incorporated
4 * Copyright (c) 2014 Benjamin Tissoires <benjamin.tissoires@gmail.com>
5 * Copyright (c) 2014 Red Hat, Inc
7 * This program is free software; you can redistribute it and/or modify it
8 * under the terms of the GNU General Public License as published by the Free
9 * Software Foundation; either version 2 of the License, or (at your option)
13 #include <linux/kernel.h>
14 #include <linux/hid.h>
15 #include <linux/input.h>
16 #include <linux/input/mt.h>
17 #include <linux/module.h>
19 #include <linux/slab.h>
20 #include <linux/wait.h>
21 #include <linux/sched.h>
24 #define RMI_MOUSE_REPORT_ID 0x01 /* Mouse emulation Report */
25 #define RMI_WRITE_REPORT_ID 0x09 /* Output Report */
26 #define RMI_READ_ADDR_REPORT_ID 0x0a /* Output Report */
27 #define RMI_READ_DATA_REPORT_ID 0x0b /* Input Report */
28 #define RMI_ATTN_REPORT_ID 0x0c /* Input Report */
29 #define RMI_SET_RMI_MODE_REPORT_ID 0x0f /* Feature Report */
32 #define RMI_READ_REQUEST_PENDING 0
33 #define RMI_READ_DATA_PENDING 1
36 #define RMI_SLEEP_NORMAL 0x0
37 #define RMI_SLEEP_DEEP_SLEEP 0x1
40 #define RMI_DEVICE BIT(0)
41 #define RMI_DEVICE_HAS_PHYS_BUTTONS BIT(1)
44 * retrieve the ctrl registers
45 * the ctrl register has a size of 20 but a fw bug split it into 16 + 4,
46 * and there is no way to know if the first 20 bytes are here or not.
47 * We use only the first 12 bytes, so get only them.
49 #define RMI_F11_CTRL_REG_COUNT 12
53 RMI_MODE_ATTN_REPORTS
= 1,
54 RMI_MODE_NO_PACKED_ATTN_REPORTS
= 2,
58 unsigned page
; /* page of the function */
59 u16 query_base_addr
; /* base address for queries */
60 u16 command_base_addr
; /* base address for commands */
61 u16 control_base_addr
; /* base address for controls */
62 u16 data_base_addr
; /* base address for datas */
63 unsigned int interrupt_base
; /* cross-function interrupt number
64 * (uniq in the device)*/
65 unsigned int interrupt_count
; /* number of interrupts */
66 unsigned int report_size
; /* size of a report */
67 unsigned long irq_mask
; /* mask of the interrupts
68 * (to be applied against ATTN IRQ) */
72 * struct rmi_data - stores information for hid communication
74 * @page_mutex: Locks current page to avoid changing pages in unexpected ways.
75 * @page: Keeps track of the current virtual page
77 * @wait: Used for waiting for read data
79 * @writeReport: output buffer when writing RMI registers
80 * @readReport: input buffer when reading RMI registers
82 * @input_report_size: size of an input report (advertised by HID)
83 * @output_report_size: size of an output report (advertised by HID)
85 * @flags: flags for the current device (started, reading, etc...)
87 * @f11: placeholder of internal RMI function F11 description
88 * @f30: placeholder of internal RMI function F30 description
90 * @max_fingers: maximum finger count reported by the device
91 * @max_x: maximum x value reported by the device
92 * @max_y: maximum y value reported by the device
94 * @gpio_led_count: count of GPIOs + LEDs reported by F30
95 * @button_count: actual physical buttons count
96 * @button_mask: button mask used to decode GPIO ATTN reports
97 * @button_state_mask: pull state of the buttons
99 * @input: pointer to the kernel input device
101 * @reset_work: worker which will be called in case of a mouse report
102 * @hdev: pointer to the struct hid_device
105 struct mutex page_mutex
;
108 wait_queue_head_t wait
;
113 int input_report_size
;
114 int output_report_size
;
118 struct rmi_function f01
;
119 struct rmi_function f11
;
120 struct rmi_function f30
;
122 unsigned int max_fingers
;
125 unsigned int x_size_mm
;
126 unsigned int y_size_mm
;
127 bool read_f11_ctrl_regs
;
128 u8 f11_ctrl_regs
[RMI_F11_CTRL_REG_COUNT
];
130 unsigned int gpio_led_count
;
131 unsigned int button_count
;
132 unsigned long button_mask
;
133 unsigned long button_state_mask
;
135 struct input_dev
*input
;
137 struct work_struct reset_work
;
138 struct hid_device
*hdev
;
140 unsigned long device_flags
;
141 unsigned long firmware_id
;
144 u8 interrupt_enable_mask
;
145 bool restore_interrupt_mask
;
148 #define RMI_PAGE(addr) (((addr) >> 8) & 0xff)
150 static int rmi_write_report(struct hid_device
*hdev
, u8
*report
, int len
);
153 * rmi_set_page - Set RMI page
154 * @hdev: The pointer to the hid_device struct
155 * @page: The new page address.
157 * RMI devices have 16-bit addressing, but some of the physical
158 * implementations (like SMBus) only have 8-bit addressing. So RMI implements
159 * a page address at 0xff of every page so we can reliable page addresses
160 * every 256 registers.
162 * The page_mutex lock must be held when this function is entered.
164 * Returns zero on success, non-zero on failure.
166 static int rmi_set_page(struct hid_device
*hdev
, u8 page
)
168 struct rmi_data
*data
= hid_get_drvdata(hdev
);
171 data
->writeReport
[0] = RMI_WRITE_REPORT_ID
;
172 data
->writeReport
[1] = 1;
173 data
->writeReport
[2] = 0xFF;
174 data
->writeReport
[4] = page
;
176 retval
= rmi_write_report(hdev
, data
->writeReport
,
177 data
->output_report_size
);
178 if (retval
!= data
->output_report_size
) {
180 "%s: set page failed: %d.", __func__
, retval
);
188 static int rmi_set_mode(struct hid_device
*hdev
, u8 mode
)
191 const u8 txbuf
[2] = {RMI_SET_RMI_MODE_REPORT_ID
, mode
};
194 buf
= kmemdup(txbuf
, sizeof(txbuf
), GFP_KERNEL
);
198 ret
= hid_hw_raw_request(hdev
, RMI_SET_RMI_MODE_REPORT_ID
, buf
,
199 sizeof(txbuf
), HID_FEATURE_REPORT
, HID_REQ_SET_REPORT
);
202 dev_err(&hdev
->dev
, "unable to set rmi mode to %d (%d)\n", mode
,
210 static int rmi_write_report(struct hid_device
*hdev
, u8
*report
, int len
)
214 ret
= hid_hw_output_report(hdev
, (void *)report
, len
);
216 dev_err(&hdev
->dev
, "failed to write hid report (%d)\n", ret
);
223 static int rmi_read_block(struct hid_device
*hdev
, u16 addr
, void *buf
,
226 struct rmi_data
*data
= hid_get_drvdata(hdev
);
231 int read_input_count
;
233 mutex_lock(&data
->page_mutex
);
235 if (RMI_PAGE(addr
) != data
->page
) {
236 ret
= rmi_set_page(hdev
, RMI_PAGE(addr
));
241 for (retries
= 5; retries
> 0; retries
--) {
242 data
->writeReport
[0] = RMI_READ_ADDR_REPORT_ID
;
243 data
->writeReport
[1] = 0; /* old 1 byte read count */
244 data
->writeReport
[2] = addr
& 0xFF;
245 data
->writeReport
[3] = (addr
>> 8) & 0xFF;
246 data
->writeReport
[4] = len
& 0xFF;
247 data
->writeReport
[5] = (len
>> 8) & 0xFF;
249 set_bit(RMI_READ_REQUEST_PENDING
, &data
->flags
);
251 ret
= rmi_write_report(hdev
, data
->writeReport
,
252 data
->output_report_size
);
253 if (ret
!= data
->output_report_size
) {
254 clear_bit(RMI_READ_REQUEST_PENDING
, &data
->flags
);
256 "failed to write request output report (%d)\n",
263 while (bytes_read
< len
) {
264 if (!wait_event_timeout(data
->wait
,
265 test_bit(RMI_READ_DATA_PENDING
, &data
->flags
),
266 msecs_to_jiffies(1000))) {
267 hid_warn(hdev
, "%s: timeout elapsed\n",
273 read_input_count
= data
->readReport
[1];
274 memcpy(buf
+ bytes_read
, &data
->readReport
[2],
275 read_input_count
< bytes_needed
?
276 read_input_count
: bytes_needed
);
278 bytes_read
+= read_input_count
;
279 bytes_needed
-= read_input_count
;
280 clear_bit(RMI_READ_DATA_PENDING
, &data
->flags
);
290 clear_bit(RMI_READ_REQUEST_PENDING
, &data
->flags
);
291 mutex_unlock(&data
->page_mutex
);
295 static inline int rmi_read(struct hid_device
*hdev
, u16 addr
, void *buf
)
297 return rmi_read_block(hdev
, addr
, buf
, 1);
300 static int rmi_write_block(struct hid_device
*hdev
, u16 addr
, void *buf
,
303 struct rmi_data
*data
= hid_get_drvdata(hdev
);
306 mutex_lock(&data
->page_mutex
);
308 if (RMI_PAGE(addr
) != data
->page
) {
309 ret
= rmi_set_page(hdev
, RMI_PAGE(addr
));
314 data
->writeReport
[0] = RMI_WRITE_REPORT_ID
;
315 data
->writeReport
[1] = len
;
316 data
->writeReport
[2] = addr
& 0xFF;
317 data
->writeReport
[3] = (addr
>> 8) & 0xFF;
318 memcpy(&data
->writeReport
[4], buf
, len
);
320 ret
= rmi_write_report(hdev
, data
->writeReport
,
321 data
->output_report_size
);
324 "failed to write request output report (%d)\n",
331 mutex_unlock(&data
->page_mutex
);
335 static inline int rmi_write(struct hid_device
*hdev
, u16 addr
, void *buf
)
337 return rmi_write_block(hdev
, addr
, buf
, 1);
340 static void rmi_f11_process_touch(struct rmi_data
*hdata
, int slot
,
341 u8 finger_state
, u8
*touch_data
)
344 int wide
, major
, minor
;
347 input_mt_slot(hdata
->input
, slot
);
348 input_mt_report_slot_state(hdata
->input
, MT_TOOL_FINGER
,
349 finger_state
== 0x01);
350 if (finger_state
== 0x01) {
351 x
= (touch_data
[0] << 4) | (touch_data
[2] & 0x0F);
352 y
= (touch_data
[1] << 4) | (touch_data
[2] >> 4);
353 wx
= touch_data
[3] & 0x0F;
354 wy
= touch_data
[3] >> 4;
361 y
= hdata
->max_y
- y
;
363 input_event(hdata
->input
, EV_ABS
, ABS_MT_POSITION_X
, x
);
364 input_event(hdata
->input
, EV_ABS
, ABS_MT_POSITION_Y
, y
);
365 input_event(hdata
->input
, EV_ABS
, ABS_MT_ORIENTATION
, wide
);
366 input_event(hdata
->input
, EV_ABS
, ABS_MT_PRESSURE
, z
);
367 input_event(hdata
->input
, EV_ABS
, ABS_MT_TOUCH_MAJOR
, major
);
368 input_event(hdata
->input
, EV_ABS
, ABS_MT_TOUCH_MINOR
, minor
);
372 static int rmi_reset_attn_mode(struct hid_device
*hdev
)
374 struct rmi_data
*data
= hid_get_drvdata(hdev
);
377 ret
= rmi_set_mode(hdev
, RMI_MODE_ATTN_REPORTS
);
381 if (data
->restore_interrupt_mask
) {
382 ret
= rmi_write(hdev
, data
->f01
.control_base_addr
+ 1,
383 &data
->interrupt_enable_mask
);
385 hid_err(hdev
, "can not write F01 control register\n");
393 static void rmi_reset_work(struct work_struct
*work
)
395 struct rmi_data
*hdata
= container_of(work
, struct rmi_data
,
398 /* switch the device to RMI if we receive a generic mouse report */
399 rmi_reset_attn_mode(hdata
->hdev
);
402 static inline int rmi_schedule_reset(struct hid_device
*hdev
)
404 struct rmi_data
*hdata
= hid_get_drvdata(hdev
);
405 return schedule_work(&hdata
->reset_work
);
408 static int rmi_f11_input_event(struct hid_device
*hdev
, u8 irq
, u8
*data
,
411 struct rmi_data
*hdata
= hid_get_drvdata(hdev
);
415 if (!(irq
& hdata
->f11
.irq_mask
) || size
<= 0)
418 offset
= (hdata
->max_fingers
>> 2) + 1;
419 for (i
= 0; i
< hdata
->max_fingers
; i
++) {
420 int fs_byte_position
= i
>> 2;
421 int fs_bit_position
= (i
& 0x3) << 1;
422 int finger_state
= (data
[fs_byte_position
] >> fs_bit_position
) &
424 int position
= offset
+ 5 * i
;
426 if (position
+ 5 > size
) {
427 /* partial report, go on with what we received */
428 printk_once(KERN_WARNING
429 "%s %s: Detected incomplete finger report. Finger reports may occasionally get dropped on this platform.\n",
430 dev_driver_string(&hdev
->dev
),
431 dev_name(&hdev
->dev
));
432 hid_dbg(hdev
, "Incomplete finger report\n");
436 rmi_f11_process_touch(hdata
, i
, finger_state
, &data
[position
]);
438 input_mt_sync_frame(hdata
->input
);
439 input_sync(hdata
->input
);
440 return hdata
->f11
.report_size
;
443 static int rmi_f30_input_event(struct hid_device
*hdev
, u8 irq
, u8
*data
,
446 struct rmi_data
*hdata
= hid_get_drvdata(hdev
);
451 if (!(irq
& hdata
->f30
.irq_mask
))
454 if (size
< (int)hdata
->f30
.report_size
) {
455 hid_warn(hdev
, "Click Button pressed, but the click data is missing\n");
459 for (i
= 0; i
< hdata
->gpio_led_count
; i
++) {
460 if (test_bit(i
, &hdata
->button_mask
)) {
461 value
= (data
[i
/ 8] >> (i
& 0x07)) & BIT(0);
462 if (test_bit(i
, &hdata
->button_state_mask
))
464 input_event(hdata
->input
, EV_KEY
, BTN_LEFT
+ button
++,
468 return hdata
->f30
.report_size
;
471 static int rmi_input_event(struct hid_device
*hdev
, u8
*data
, int size
)
473 struct rmi_data
*hdata
= hid_get_drvdata(hdev
);
474 unsigned long irq_mask
= 0;
477 if (!(test_bit(RMI_STARTED
, &hdata
->flags
)))
480 irq_mask
|= hdata
->f11
.irq_mask
;
481 irq_mask
|= hdata
->f30
.irq_mask
;
483 if (data
[1] & ~irq_mask
)
484 hid_dbg(hdev
, "unknown intr source:%02lx %s:%d\n",
485 data
[1] & ~irq_mask
, __FILE__
, __LINE__
);
487 if (hdata
->f11
.interrupt_base
< hdata
->f30
.interrupt_base
) {
488 index
+= rmi_f11_input_event(hdev
, data
[1], &data
[index
],
490 index
+= rmi_f30_input_event(hdev
, data
[1], &data
[index
],
493 index
+= rmi_f30_input_event(hdev
, data
[1], &data
[index
],
495 index
+= rmi_f11_input_event(hdev
, data
[1], &data
[index
],
502 static int rmi_read_data_event(struct hid_device
*hdev
, u8
*data
, int size
)
504 struct rmi_data
*hdata
= hid_get_drvdata(hdev
);
506 if (!test_bit(RMI_READ_REQUEST_PENDING
, &hdata
->flags
)) {
507 hid_dbg(hdev
, "no read request pending\n");
511 memcpy(hdata
->readReport
, data
, size
< hdata
->input_report_size
?
512 size
: hdata
->input_report_size
);
513 set_bit(RMI_READ_DATA_PENDING
, &hdata
->flags
);
514 wake_up(&hdata
->wait
);
519 static int rmi_check_sanity(struct hid_device
*hdev
, u8
*data
, int size
)
521 int valid_size
= size
;
523 * On the Dell XPS 13 9333, the bus sometimes get confused and fills
524 * the report with a sentinel value "ff". Synaptics told us that such
525 * behavior does not comes from the touchpad itself, so we filter out
529 while ((data
[valid_size
- 1] == 0xff) && valid_size
> 0)
535 static int rmi_raw_event(struct hid_device
*hdev
,
536 struct hid_report
*report
, u8
*data
, int size
)
538 size
= rmi_check_sanity(hdev
, data
, size
);
543 case RMI_READ_DATA_REPORT_ID
:
544 return rmi_read_data_event(hdev
, data
, size
);
545 case RMI_ATTN_REPORT_ID
:
546 return rmi_input_event(hdev
, data
, size
);
554 static int rmi_event(struct hid_device
*hdev
, struct hid_field
*field
,
555 struct hid_usage
*usage
, __s32 value
)
557 struct rmi_data
*data
= hid_get_drvdata(hdev
);
559 if ((data
->device_flags
& RMI_DEVICE
) &&
560 (field
->application
== HID_GD_POINTER
||
561 field
->application
== HID_GD_MOUSE
)) {
562 if (data
->device_flags
& RMI_DEVICE_HAS_PHYS_BUTTONS
) {
563 if ((usage
->hid
& HID_USAGE_PAGE
) == HID_UP_BUTTON
)
566 if ((usage
->hid
== HID_GD_X
|| usage
->hid
== HID_GD_Y
)
571 rmi_schedule_reset(hdev
);
579 static int rmi_set_sleep_mode(struct hid_device
*hdev
, int sleep_mode
)
581 struct rmi_data
*data
= hid_get_drvdata(hdev
);
585 f01_ctrl0
= (data
->f01_ctrl0
& ~0x3) | sleep_mode
;
587 ret
= rmi_write(hdev
, data
->f01
.control_base_addr
,
590 hid_err(hdev
, "can not write sleep mode\n");
597 static int rmi_suspend(struct hid_device
*hdev
, pm_message_t message
)
599 struct rmi_data
*data
= hid_get_drvdata(hdev
);
601 u8 buf
[RMI_F11_CTRL_REG_COUNT
];
603 if (!(data
->device_flags
& RMI_DEVICE
))
606 ret
= rmi_read_block(hdev
, data
->f11
.control_base_addr
, buf
,
607 RMI_F11_CTRL_REG_COUNT
);
609 hid_warn(hdev
, "can not read F11 control registers\n");
611 memcpy(data
->f11_ctrl_regs
, buf
, RMI_F11_CTRL_REG_COUNT
);
614 if (!device_may_wakeup(hdev
->dev
.parent
))
615 return rmi_set_sleep_mode(hdev
, RMI_SLEEP_DEEP_SLEEP
);
620 static int rmi_post_reset(struct hid_device
*hdev
)
622 struct rmi_data
*data
= hid_get_drvdata(hdev
);
625 if (!(data
->device_flags
& RMI_DEVICE
))
628 ret
= rmi_reset_attn_mode(hdev
);
630 hid_err(hdev
, "can not set rmi mode\n");
634 if (data
->read_f11_ctrl_regs
) {
635 ret
= rmi_write_block(hdev
, data
->f11
.control_base_addr
,
636 data
->f11_ctrl_regs
, RMI_F11_CTRL_REG_COUNT
);
639 "can not write F11 control registers after reset\n");
642 if (!device_may_wakeup(hdev
->dev
.parent
)) {
643 ret
= rmi_set_sleep_mode(hdev
, RMI_SLEEP_NORMAL
);
645 hid_err(hdev
, "can not write sleep mode\n");
653 static int rmi_post_resume(struct hid_device
*hdev
)
655 struct rmi_data
*data
= hid_get_drvdata(hdev
);
657 if (!(data
->device_flags
& RMI_DEVICE
))
660 return rmi_reset_attn_mode(hdev
);
662 #endif /* CONFIG_PM */
664 #define RMI4_MAX_PAGE 0xff
665 #define RMI4_PAGE_SIZE 0x0100
667 #define PDT_START_SCAN_LOCATION 0x00e9
668 #define PDT_END_SCAN_LOCATION 0x0005
669 #define RMI4_END_OF_PDT(id) ((id) == 0x00 || (id) == 0xff)
672 u8 query_base_addr
:8;
673 u8 command_base_addr
:8;
674 u8 control_base_addr
:8;
676 u8 interrupt_source_count
:3;
678 u8 function_version
:2;
680 u8 function_number
:8;
681 } __attribute__((__packed__
));
683 static inline unsigned long rmi_gen_mask(unsigned irq_base
, unsigned irq_count
)
685 return GENMASK(irq_count
+ irq_base
- 1, irq_base
);
688 static void rmi_register_function(struct rmi_data
*data
,
689 struct pdt_entry
*pdt_entry
, int page
, unsigned interrupt_count
)
691 struct rmi_function
*f
= NULL
;
692 u16 page_base
= page
<< 8;
694 switch (pdt_entry
->function_number
) {
708 f
->query_base_addr
= page_base
| pdt_entry
->query_base_addr
;
709 f
->command_base_addr
= page_base
| pdt_entry
->command_base_addr
;
710 f
->control_base_addr
= page_base
| pdt_entry
->control_base_addr
;
711 f
->data_base_addr
= page_base
| pdt_entry
->data_base_addr
;
712 f
->interrupt_base
= interrupt_count
;
713 f
->interrupt_count
= pdt_entry
->interrupt_source_count
;
714 f
->irq_mask
= rmi_gen_mask(f
->interrupt_base
,
716 data
->interrupt_enable_mask
|= f
->irq_mask
;
720 static int rmi_scan_pdt(struct hid_device
*hdev
)
722 struct rmi_data
*data
= hid_get_drvdata(hdev
);
723 struct pdt_entry entry
;
725 bool page_has_function
;
729 u16 page_start
, pdt_start
, pdt_end
;
731 hid_info(hdev
, "Scanning PDT...\n");
733 for (page
= 0; (page
<= RMI4_MAX_PAGE
); page
++) {
734 page_start
= RMI4_PAGE_SIZE
* page
;
735 pdt_start
= page_start
+ PDT_START_SCAN_LOCATION
;
736 pdt_end
= page_start
+ PDT_END_SCAN_LOCATION
;
738 page_has_function
= false;
739 for (i
= pdt_start
; i
>= pdt_end
; i
-= sizeof(entry
)) {
740 retval
= rmi_read_block(hdev
, i
, &entry
, sizeof(entry
));
743 "Read of PDT entry at %#06x failed.\n",
748 if (RMI4_END_OF_PDT(entry
.function_number
))
751 page_has_function
= true;
753 hid_info(hdev
, "Found F%02X on page %#04x\n",
754 entry
.function_number
, page
);
756 rmi_register_function(data
, &entry
, page
, interrupt
);
757 interrupt
+= entry
.interrupt_source_count
;
760 if (!page_has_function
)
764 hid_info(hdev
, "%s: Done with PDT scan.\n", __func__
);
771 #define RMI_DEVICE_F01_BASIC_QUERY_LEN 11
773 static int rmi_populate_f01(struct hid_device
*hdev
)
775 struct rmi_data
*data
= hid_get_drvdata(hdev
);
776 u8 basic_queries
[RMI_DEVICE_F01_BASIC_QUERY_LEN
];
782 bool has_ds4_queries
= false;
783 bool has_build_id_query
= false;
784 bool has_package_id_query
= false;
785 u16 query_offset
= data
->f01
.query_base_addr
;
789 ret
= rmi_read_block(hdev
, query_offset
, basic_queries
,
790 RMI_DEVICE_F01_BASIC_QUERY_LEN
);
792 hid_err(hdev
, "Can not read basic queries from Function 0x1.\n");
796 has_lts
= !!(basic_queries
[0] & BIT(2));
797 has_sensor_id
= !!(basic_queries
[1] & BIT(3));
798 has_query42
= !!(basic_queries
[1] & BIT(7));
801 prod_info_addr
= query_offset
+ 6;
811 ret
= rmi_read(hdev
, query_offset
, info
);
813 hid_err(hdev
, "Can not read query42.\n");
816 has_ds4_queries
= !!(info
[0] & BIT(0));
820 if (has_ds4_queries
) {
821 ret
= rmi_read(hdev
, query_offset
, &ds4_query_len
);
823 hid_err(hdev
, "Can not read DS4 Query length.\n");
828 if (ds4_query_len
> 0) {
829 ret
= rmi_read(hdev
, query_offset
, info
);
831 hid_err(hdev
, "Can not read DS4 query.\n");
835 has_package_id_query
= !!(info
[0] & BIT(0));
836 has_build_id_query
= !!(info
[0] & BIT(1));
840 if (has_package_id_query
)
843 if (has_build_id_query
) {
844 ret
= rmi_read_block(hdev
, prod_info_addr
, info
, 3);
846 hid_err(hdev
, "Can not read product info.\n");
850 data
->firmware_id
= info
[1] << 8 | info
[0];
851 data
->firmware_id
+= info
[2] * 65536;
854 ret
= rmi_read_block(hdev
, data
->f01
.control_base_addr
, info
,
858 hid_err(hdev
, "can not read f01 ctrl registers\n");
862 data
->f01_ctrl0
= info
[0];
866 * Do to a firmware bug in some touchpads the F01 interrupt
867 * enable control register will be cleared on reset.
868 * This will stop the touchpad from reporting data, so
869 * if F01 CTRL1 is 0 then we need to explicitly enable
870 * interrupts for the functions we want data for.
872 data
->restore_interrupt_mask
= true;
874 ret
= rmi_write(hdev
, data
->f01
.control_base_addr
+ 1,
875 &data
->interrupt_enable_mask
);
877 hid_err(hdev
, "can not write to control reg 1: %d.\n",
886 static int rmi_populate_f11(struct hid_device
*hdev
)
888 struct rmi_data
*data
= hid_get_drvdata(hdev
);
892 bool has_query10
= false;
897 bool has_query36
= false;
898 bool has_physical_props
;
901 bool has_data40
= false;
902 bool has_dribble
= false;
903 bool has_palm_detect
= false;
904 unsigned x_size
, y_size
;
907 if (!data
->f11
.query_base_addr
) {
908 hid_err(hdev
, "No 2D sensor found, giving up.\n");
912 /* query 0 contains some useful information */
913 ret
= rmi_read(hdev
, data
->f11
.query_base_addr
, buf
);
915 hid_err(hdev
, "can not get query 0: %d.\n", ret
);
918 has_query9
= !!(buf
[0] & BIT(3));
919 has_query11
= !!(buf
[0] & BIT(4));
920 has_query12
= !!(buf
[0] & BIT(5));
921 has_query27
= !!(buf
[0] & BIT(6));
922 has_query28
= !!(buf
[0] & BIT(7));
924 /* query 1 to get the max number of fingers */
925 ret
= rmi_read(hdev
, data
->f11
.query_base_addr
+ 1, buf
);
927 hid_err(hdev
, "can not get NumberOfFingers: %d.\n", ret
);
930 data
->max_fingers
= (buf
[0] & 0x07) + 1;
931 if (data
->max_fingers
> 5)
932 data
->max_fingers
= 10;
934 data
->f11
.report_size
= data
->max_fingers
* 5 +
935 DIV_ROUND_UP(data
->max_fingers
, 4);
937 if (!(buf
[0] & BIT(4))) {
938 hid_err(hdev
, "No absolute events, giving up.\n");
942 has_rel
= !!(buf
[0] & BIT(3));
943 has_gestures
= !!(buf
[0] & BIT(5));
945 ret
= rmi_read(hdev
, data
->f11
.query_base_addr
+ 5, buf
);
947 hid_err(hdev
, "can not get absolute data sources: %d.\n", ret
);
951 has_dribble
= !!(buf
[0] & BIT(4));
954 * At least 4 queries are guaranteed to be present in F11
955 * +1 for query 5 which is present since absolute events are
956 * reported and +1 for query 12.
961 ++query_offset
; /* query 6 is present */
964 /* query 8 to find out if query 10 exists */
966 data
->f11
.query_base_addr
+ query_offset
+ 1, buf
);
968 hid_err(hdev
, "can not read gesture information: %d.\n",
972 has_palm_detect
= !!(buf
[0] & BIT(0));
973 has_query10
= !!(buf
[0] & BIT(2));
975 query_offset
+= 2; /* query 7 and 8 are present */
987 /* query 12 to know if the physical properties are reported */
989 ret
= rmi_read(hdev
, data
->f11
.query_base_addr
990 + query_offset
, buf
);
992 hid_err(hdev
, "can not get query 12: %d.\n", ret
);
995 has_physical_props
= !!(buf
[0] & BIT(5));
997 if (has_physical_props
) {
999 ret
= rmi_read_block(hdev
,
1000 data
->f11
.query_base_addr
1001 + query_offset
, buf
, 4);
1003 hid_err(hdev
, "can not read query 15-18: %d.\n",
1008 x_size
= buf
[0] | (buf
[1] << 8);
1009 y_size
= buf
[2] | (buf
[3] << 8);
1011 data
->x_size_mm
= DIV_ROUND_CLOSEST(x_size
, 10);
1012 data
->y_size_mm
= DIV_ROUND_CLOSEST(y_size
, 10);
1014 hid_info(hdev
, "%s: size in mm: %d x %d\n",
1015 __func__
, data
->x_size_mm
, data
->y_size_mm
);
1018 * query 15 - 18 contain the size of the sensor
1019 * and query 19 - 26 contain bezel dimensions
1029 ret
= rmi_read(hdev
, data
->f11
.query_base_addr
1030 + query_offset
, buf
);
1032 hid_err(hdev
, "can not get query 28: %d.\n", ret
);
1036 has_query36
= !!(buf
[0] & BIT(6));
1041 ret
= rmi_read(hdev
, data
->f11
.query_base_addr
1042 + query_offset
, buf
);
1044 hid_err(hdev
, "can not get query 36: %d.\n", ret
);
1048 has_data40
= !!(buf
[0] & BIT(5));
1053 data
->f11
.report_size
+= data
->max_fingers
* 2;
1055 ret
= rmi_read_block(hdev
, data
->f11
.control_base_addr
,
1056 data
->f11_ctrl_regs
, RMI_F11_CTRL_REG_COUNT
);
1058 hid_err(hdev
, "can not read ctrl block of size 11: %d.\n", ret
);
1062 /* data->f11_ctrl_regs now contains valid register data */
1063 data
->read_f11_ctrl_regs
= true;
1065 data
->max_x
= data
->f11_ctrl_regs
[6] | (data
->f11_ctrl_regs
[7] << 8);
1066 data
->max_y
= data
->f11_ctrl_regs
[8] | (data
->f11_ctrl_regs
[9] << 8);
1069 data
->f11_ctrl_regs
[0] = data
->f11_ctrl_regs
[0] & ~BIT(6);
1070 ret
= rmi_write(hdev
, data
->f11
.control_base_addr
,
1071 data
->f11_ctrl_regs
);
1073 hid_err(hdev
, "can not write to control reg 0: %d.\n",
1079 if (has_palm_detect
) {
1080 data
->f11_ctrl_regs
[11] = data
->f11_ctrl_regs
[11] & ~BIT(0);
1081 ret
= rmi_write(hdev
, data
->f11
.control_base_addr
+ 11,
1082 &data
->f11_ctrl_regs
[11]);
1084 hid_err(hdev
, "can not write to control reg 11: %d.\n",
1093 static int rmi_populate_f30(struct hid_device
*hdev
)
1095 struct rmi_data
*data
= hid_get_drvdata(hdev
);
1098 bool has_gpio
, has_led
;
1099 unsigned bytes_per_ctrl
;
1104 /* function F30 is for physical buttons */
1105 if (!data
->f30
.query_base_addr
) {
1106 hid_err(hdev
, "No GPIO/LEDs found, giving up.\n");
1110 ret
= rmi_read_block(hdev
, data
->f30
.query_base_addr
, buf
, 2);
1112 hid_err(hdev
, "can not get F30 query registers: %d.\n", ret
);
1116 has_gpio
= !!(buf
[0] & BIT(3));
1117 has_led
= !!(buf
[0] & BIT(2));
1118 data
->gpio_led_count
= buf
[1] & 0x1f;
1120 /* retrieve ctrl 2 & 3 registers */
1121 bytes_per_ctrl
= (data
->gpio_led_count
+ 7) / 8;
1122 /* Ctrl0 is present only if both has_gpio and has_led are set*/
1123 ctrl2_addr
= (has_gpio
&& has_led
) ? bytes_per_ctrl
: 0;
1124 /* Ctrl1 is always be present */
1125 ctrl2_addr
+= bytes_per_ctrl
;
1126 ctrl2_3_length
= 2 * bytes_per_ctrl
;
1128 data
->f30
.report_size
= bytes_per_ctrl
;
1130 ret
= rmi_read_block(hdev
, data
->f30
.control_base_addr
+ ctrl2_addr
,
1131 buf
, ctrl2_3_length
);
1133 hid_err(hdev
, "can not read ctrl 2&3 block of size %d: %d.\n",
1134 ctrl2_3_length
, ret
);
1138 for (i
= 0; i
< data
->gpio_led_count
; i
++) {
1139 int byte_position
= i
>> 3;
1140 int bit_position
= i
& 0x07;
1141 u8 dir_byte
= buf
[byte_position
];
1142 u8 data_byte
= buf
[byte_position
+ bytes_per_ctrl
];
1143 bool dir
= (dir_byte
>> bit_position
) & BIT(0);
1144 bool dat
= (data_byte
>> bit_position
) & BIT(0);
1149 /* actual buttons have pull up resistor */
1150 data
->button_count
++;
1151 set_bit(i
, &data
->button_mask
);
1152 set_bit(i
, &data
->button_state_mask
);
1161 static int rmi_populate(struct hid_device
*hdev
)
1163 struct rmi_data
*data
= hid_get_drvdata(hdev
);
1166 ret
= rmi_scan_pdt(hdev
);
1168 hid_err(hdev
, "PDT scan failed with code %d.\n", ret
);
1172 ret
= rmi_populate_f01(hdev
);
1174 hid_err(hdev
, "Error while initializing F01 (%d).\n", ret
);
1178 ret
= rmi_populate_f11(hdev
);
1180 hid_err(hdev
, "Error while initializing F11 (%d).\n", ret
);
1184 if (!(data
->device_flags
& RMI_DEVICE_HAS_PHYS_BUTTONS
)) {
1185 ret
= rmi_populate_f30(hdev
);
1187 hid_warn(hdev
, "Error while initializing F30 (%d).\n", ret
);
1193 static int rmi_input_configured(struct hid_device
*hdev
, struct hid_input
*hi
)
1195 struct rmi_data
*data
= hid_get_drvdata(hdev
);
1196 struct input_dev
*input
= hi
->input
;
1198 int res_x
, res_y
, i
;
1200 data
->input
= input
;
1202 hid_dbg(hdev
, "Opening low level driver\n");
1203 ret
= hid_hw_open(hdev
);
1207 if (!(data
->device_flags
& RMI_DEVICE
))
1210 /* Allow incoming hid reports */
1211 hid_device_io_start(hdev
);
1213 ret
= rmi_set_mode(hdev
, RMI_MODE_ATTN_REPORTS
);
1215 dev_err(&hdev
->dev
, "failed to set rmi mode\n");
1219 ret
= rmi_set_page(hdev
, 0);
1221 dev_err(&hdev
->dev
, "failed to set page select to 0.\n");
1225 ret
= rmi_populate(hdev
);
1229 hid_info(hdev
, "firmware id: %ld\n", data
->firmware_id
);
1231 __set_bit(EV_ABS
, input
->evbit
);
1232 input_set_abs_params(input
, ABS_MT_POSITION_X
, 1, data
->max_x
, 0, 0);
1233 input_set_abs_params(input
, ABS_MT_POSITION_Y
, 1, data
->max_y
, 0, 0);
1235 if (data
->x_size_mm
&& data
->y_size_mm
) {
1236 res_x
= (data
->max_x
- 1) / data
->x_size_mm
;
1237 res_y
= (data
->max_y
- 1) / data
->y_size_mm
;
1239 input_abs_set_res(input
, ABS_MT_POSITION_X
, res_x
);
1240 input_abs_set_res(input
, ABS_MT_POSITION_Y
, res_y
);
1243 input_set_abs_params(input
, ABS_MT_ORIENTATION
, 0, 1, 0, 0);
1244 input_set_abs_params(input
, ABS_MT_PRESSURE
, 0, 0xff, 0, 0);
1245 input_set_abs_params(input
, ABS_MT_TOUCH_MAJOR
, 0, 0x0f, 0, 0);
1246 input_set_abs_params(input
, ABS_MT_TOUCH_MINOR
, 0, 0x0f, 0, 0);
1248 ret
= input_mt_init_slots(input
, data
->max_fingers
, INPUT_MT_POINTER
);
1252 if (data
->button_count
) {
1253 __set_bit(EV_KEY
, input
->evbit
);
1254 for (i
= 0; i
< data
->button_count
; i
++)
1255 __set_bit(BTN_LEFT
+ i
, input
->keybit
);
1257 if (data
->button_count
== 1)
1258 __set_bit(INPUT_PROP_BUTTONPAD
, input
->propbit
);
1261 set_bit(RMI_STARTED
, &data
->flags
);
1264 hid_device_io_stop(hdev
);
1269 static int rmi_input_mapping(struct hid_device
*hdev
,
1270 struct hid_input
*hi
, struct hid_field
*field
,
1271 struct hid_usage
*usage
, unsigned long **bit
, int *max
)
1273 struct rmi_data
*data
= hid_get_drvdata(hdev
);
1276 * we want to make HID ignore the advertised HID collection
1279 if (data
->device_flags
& RMI_DEVICE
) {
1280 if ((data
->device_flags
& RMI_DEVICE_HAS_PHYS_BUTTONS
) &&
1281 ((usage
->hid
& HID_USAGE_PAGE
) == HID_UP_BUTTON
))
1290 static int rmi_check_valid_report_id(struct hid_device
*hdev
, unsigned type
,
1291 unsigned id
, struct hid_report
**report
)
1295 *report
= hdev
->report_enum
[type
].report_id_hash
[id
];
1297 for (i
= 0; i
< (*report
)->maxfield
; i
++) {
1298 unsigned app
= (*report
)->field
[i
]->application
;
1299 if ((app
& HID_USAGE_PAGE
) >= HID_UP_MSVENDOR
)
1307 static int rmi_probe(struct hid_device
*hdev
, const struct hid_device_id
*id
)
1309 struct rmi_data
*data
= NULL
;
1312 struct hid_report
*input_report
;
1313 struct hid_report
*output_report
;
1314 struct hid_report
*feature_report
;
1316 data
= devm_kzalloc(&hdev
->dev
, sizeof(struct rmi_data
), GFP_KERNEL
);
1320 INIT_WORK(&data
->reset_work
, rmi_reset_work
);
1323 hid_set_drvdata(hdev
, data
);
1325 hdev
->quirks
|= HID_QUIRK_NO_INIT_REPORTS
;
1327 ret
= hid_parse(hdev
);
1329 hid_err(hdev
, "parse failed\n");
1333 if (id
->driver_data
)
1334 data
->device_flags
= id
->driver_data
;
1337 * Check for the RMI specific report ids. If they are misisng
1338 * simply return and let the events be processed by hid-input
1340 if (!rmi_check_valid_report_id(hdev
, HID_FEATURE_REPORT
,
1341 RMI_SET_RMI_MODE_REPORT_ID
, &feature_report
)) {
1342 hid_dbg(hdev
, "device does not have set mode feature report\n");
1346 if (!rmi_check_valid_report_id(hdev
, HID_INPUT_REPORT
,
1347 RMI_ATTN_REPORT_ID
, &input_report
)) {
1348 hid_dbg(hdev
, "device does not have attention input report\n");
1352 data
->input_report_size
= hid_report_len(input_report
);
1354 if (!rmi_check_valid_report_id(hdev
, HID_OUTPUT_REPORT
,
1355 RMI_WRITE_REPORT_ID
, &output_report
)) {
1357 "device does not have rmi write output report\n");
1361 data
->output_report_size
= hid_report_len(output_report
);
1363 data
->device_flags
|= RMI_DEVICE
;
1364 alloc_size
= data
->output_report_size
+ data
->input_report_size
;
1366 data
->writeReport
= devm_kzalloc(&hdev
->dev
, alloc_size
, GFP_KERNEL
);
1367 if (!data
->writeReport
) {
1372 data
->readReport
= data
->writeReport
+ data
->output_report_size
;
1374 init_waitqueue_head(&data
->wait
);
1376 mutex_init(&data
->page_mutex
);
1379 ret
= hid_hw_start(hdev
, HID_CONNECT_DEFAULT
);
1381 hid_err(hdev
, "hw start failed\n");
1385 if ((data
->device_flags
& RMI_DEVICE
) &&
1386 !test_bit(RMI_STARTED
, &data
->flags
))
1388 * The device maybe in the bootloader if rmi_input_configured
1389 * failed to find F11 in the PDT. Print an error, but don't
1390 * return an error from rmi_probe so that hidraw will be
1391 * accessible from userspace. That way a userspace tool
1392 * can be used to reload working firmware on the touchpad.
1394 hid_err(hdev
, "Device failed to be properly configured\n");
1399 static void rmi_remove(struct hid_device
*hdev
)
1401 struct rmi_data
*hdata
= hid_get_drvdata(hdev
);
1403 clear_bit(RMI_STARTED
, &hdata
->flags
);
1408 static const struct hid_device_id rmi_id
[] = {
1409 { HID_USB_DEVICE(USB_VENDOR_ID_RAZER
, USB_DEVICE_ID_RAZER_BLADE_14
),
1410 .driver_data
= RMI_DEVICE_HAS_PHYS_BUTTONS
},
1411 { HID_DEVICE(HID_BUS_ANY
, HID_GROUP_RMI
, HID_ANY_ID
, HID_ANY_ID
) },
1414 MODULE_DEVICE_TABLE(hid
, rmi_id
);
1416 static struct hid_driver rmi_driver
= {
1420 .remove
= rmi_remove
,
1422 .raw_event
= rmi_raw_event
,
1423 .input_mapping
= rmi_input_mapping
,
1424 .input_configured
= rmi_input_configured
,
1426 .suspend
= rmi_suspend
,
1427 .resume
= rmi_post_resume
,
1428 .reset_resume
= rmi_post_reset
,
1432 module_hid_driver(rmi_driver
);
1434 MODULE_AUTHOR("Andrew Duggan <aduggan@synaptics.com>");
1435 MODULE_DESCRIPTION("RMI HID driver");
1436 MODULE_LICENSE("GPL");