Bluetooth: hci_uart: Check if socket buffer is ERR_PTR in h4_recv_buf()
[linux-2.6-block.git] / drivers / bluetooth / btmrvl_sdio.c
CommitLineData
789221ec
BZ
1/**
2 * Marvell BT-over-SDIO driver: SDIO interface related functions.
3 *
4 * Copyright (C) 2009, Marvell International Ltd.
5 *
6 * This software file (the "File") is distributed by Marvell International
7 * Ltd. under the terms of the GNU General Public License Version 2, June 1991
8 * (the "License"). You may use, redistribute and/or modify this File in
9 * accordance with the terms and conditions of the License, a copy of which
10 * is available by writing to the Free Software Foundation, Inc.,
11 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12 * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
13 *
14 *
15 * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
16 * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
17 * ARE EXPRESSLY DISCLAIMED. The License provides additional details about
18 * this warranty disclaimer.
19 **/
20
433a9389 21#include <linux/firmware.h>
5a0e3ad6 22#include <linux/slab.h>
17e41ea6 23#include <linux/suspend.h>
789221ec
BZ
24
25#include <linux/mmc/sdio_ids.h>
26#include <linux/mmc/sdio_func.h>
a59b968e 27#include <linux/module.h>
dc759613 28#include <linux/devcoredump.h>
789221ec
BZ
29
30#include <net/bluetooth/bluetooth.h>
31#include <net/bluetooth/hci_core.h>
32
33#include "btmrvl_drv.h"
34#include "btmrvl_sdio.h"
35
36#define VERSION "1.0"
37
dc759613
XH
38static struct memory_type_mapping mem_type_mapping_tbl[] = {
39 {"ITCM", NULL, 0, 0xF0},
40 {"DTCM", NULL, 0, 0xF1},
41 {"SQRAM", NULL, 0, 0xF2},
42 {"APU", NULL, 0, 0xF3},
43 {"CIU", NULL, 0, 0xF4},
44 {"ICU", NULL, 0, 0xF5},
45 {"MAC", NULL, 0, 0xF6},
46 {"EXT7", NULL, 0, 0xF7},
47 {"EXT8", NULL, 0, 0xF8},
48 {"EXT9", NULL, 0, 0xF9},
49 {"EXT10", NULL, 0, 0xFA},
50 {"EXT11", NULL, 0, 0xFB},
51 {"EXT12", NULL, 0, 0xFC},
52 {"EXT13", NULL, 0, 0xFD},
53 {"EXTLAST", NULL, 0, 0xFE},
54};
55
bb7f4f0b
XH
56static const struct of_device_id btmrvl_sdio_of_match_table[] = {
57 { .compatible = "marvell,sd8897-bt" },
58 { .compatible = "marvell,sd8997-bt" },
59 { }
60};
61
62static irqreturn_t btmrvl_wake_irq_bt(int irq, void *priv)
63{
17e41ea6 64 struct btmrvl_sdio_card *card = priv;
10004f81 65 struct device *dev = &card->func->dev;
17e41ea6 66 struct btmrvl_plt_wake_cfg *cfg = card->plt_wake_cfg;
bb7f4f0b 67
10004f81 68 dev_info(dev, "wake by bt\n");
c8ba8044
XH
69 cfg->wake_by_bt = true;
70 disable_irq_nosync(irq);
bb7f4f0b 71
10004f81 72 pm_wakeup_event(dev, 0);
17e41ea6
JC
73 pm_system_wakeup();
74
bb7f4f0b
XH
75 return IRQ_HANDLED;
76}
77
78/* This function parses device tree node using mmc subnode devicetree API.
79 * The device node is saved in card->plt_of_node.
80 * If the device tree node exists and includes interrupts attributes, this
81 * function will request platform specific wakeup interrupt.
82 */
83static int btmrvl_sdio_probe_of(struct device *dev,
84 struct btmrvl_sdio_card *card)
85{
86 struct btmrvl_plt_wake_cfg *cfg;
87 int ret;
88
89 if (!dev->of_node ||
90 !of_match_node(btmrvl_sdio_of_match_table, dev->of_node)) {
37c589ec 91 dev_info(dev, "sdio device tree data not available\n");
bb7f4f0b
XH
92 return -1;
93 }
94
95 card->plt_of_node = dev->of_node;
96
97 card->plt_wake_cfg = devm_kzalloc(dev, sizeof(*card->plt_wake_cfg),
98 GFP_KERNEL);
99 cfg = card->plt_wake_cfg;
100 if (cfg && card->plt_of_node) {
101 cfg->irq_bt = irq_of_parse_and_map(card->plt_of_node, 0);
102 if (!cfg->irq_bt) {
24a3a32a 103 dev_err(dev, "fail to parse irq_bt from device tree\n");
fd1a88da 104 cfg->irq_bt = -1;
bb7f4f0b
XH
105 } else {
106 ret = devm_request_irq(dev, cfg->irq_bt,
107 btmrvl_wake_irq_bt,
17e41ea6 108 0, "bt_wake", card);
bb7f4f0b
XH
109 if (ret) {
110 dev_err(dev,
111 "Failed to request irq_bt %d (%d)\n",
112 cfg->irq_bt, ret);
113 }
114 disable_irq(cfg->irq_bt);
115 }
116 }
117
118 return 0;
119}
120
789221ec
BZ
121/* The btmrvl_sdio_remove() callback function is called
122 * when user removes this module from kernel space or ejects
123 * the card from the slot. The driver handles these 2 cases
124 * differently.
125 * If the user is removing the module, a MODULE_SHUTDOWN_REQ
126 * command is sent to firmware and interrupt will be disabled.
127 * If the card is removed, there is no need to send command
128 * or disable interrupt.
129 *
130 * The variable 'user_rmmod' is used to distinguish these two
131 * scenarios. This flag is initialized as FALSE in case the card
132 * is removed, and will be set to TRUE for module removal when
133 * module_exit function is called.
134 */
135static u8 user_rmmod;
d1d10d78 136static u8 sdio_ireg;
789221ec 137
9f72c1d9
KG
138static const struct btmrvl_sdio_card_reg btmrvl_reg_8688 = {
139 .cfg = 0x03,
140 .host_int_mask = 0x04,
141 .host_intstatus = 0x05,
142 .card_status = 0x20,
143 .sq_read_base_addr_a0 = 0x10,
144 .sq_read_base_addr_a1 = 0x11,
145 .card_fw_status0 = 0x40,
146 .card_fw_status1 = 0x41,
147 .card_rx_len = 0x42,
148 .card_rx_unit = 0x43,
149 .io_port_0 = 0x00,
150 .io_port_1 = 0x01,
151 .io_port_2 = 0x02,
0d367408 152 .int_read_to_clear = false,
9f72c1d9 153};
2ac654f7 154static const struct btmrvl_sdio_card_reg btmrvl_reg_87xx = {
9f72c1d9
KG
155 .cfg = 0x00,
156 .host_int_mask = 0x02,
157 .host_intstatus = 0x03,
158 .card_status = 0x30,
159 .sq_read_base_addr_a0 = 0x40,
160 .sq_read_base_addr_a1 = 0x41,
161 .card_revision = 0x5c,
162 .card_fw_status0 = 0x60,
163 .card_fw_status1 = 0x61,
164 .card_rx_len = 0x62,
165 .card_rx_unit = 0x63,
166 .io_port_0 = 0x78,
167 .io_port_1 = 0x79,
168 .io_port_2 = 0x7a,
0d367408 169 .int_read_to_clear = false,
9f72c1d9
KG
170};
171
3907d558
XH
172static const struct btmrvl_sdio_card_reg btmrvl_reg_8887 = {
173 .cfg = 0x00,
174 .host_int_mask = 0x08,
175 .host_intstatus = 0x0C,
176 .card_status = 0x5C,
177 .sq_read_base_addr_a0 = 0x6C,
178 .sq_read_base_addr_a1 = 0x6D,
179 .card_revision = 0xC8,
180 .card_fw_status0 = 0x88,
181 .card_fw_status1 = 0x89,
182 .card_rx_len = 0x8A,
183 .card_rx_unit = 0x8B,
184 .io_port_0 = 0xE4,
185 .io_port_1 = 0xE5,
186 .io_port_2 = 0xE6,
187 .int_read_to_clear = true,
188 .host_int_rsr = 0x04,
189 .card_misc_cfg = 0xD8,
190};
191
1e3e492c 192static const struct btmrvl_sdio_card_reg btmrvl_reg_8897 = {
22f2efed
BZ
193 .cfg = 0x00,
194 .host_int_mask = 0x02,
195 .host_intstatus = 0x03,
196 .card_status = 0x50,
197 .sq_read_base_addr_a0 = 0x60,
198 .sq_read_base_addr_a1 = 0x61,
199 .card_revision = 0xbc,
200 .card_fw_status0 = 0xc0,
201 .card_fw_status1 = 0xc1,
202 .card_rx_len = 0xc2,
203 .card_rx_unit = 0xc3,
204 .io_port_0 = 0xd8,
205 .io_port_1 = 0xd9,
206 .io_port_2 = 0xda,
0d367408
BZ
207 .int_read_to_clear = true,
208 .host_int_rsr = 0x01,
209 .card_misc_cfg = 0xcc,
dc759613
XH
210 .fw_dump_ctrl = 0xe2,
211 .fw_dump_start = 0xe3,
212 .fw_dump_end = 0xea,
22f2efed
BZ
213};
214
f0ef6748
AK
215static const struct btmrvl_sdio_card_reg btmrvl_reg_8997 = {
216 .cfg = 0x00,
217 .host_int_mask = 0x08,
218 .host_intstatus = 0x0c,
219 .card_status = 0x5c,
220 .sq_read_base_addr_a0 = 0xf8,
221 .sq_read_base_addr_a1 = 0xf9,
222 .card_revision = 0xc8,
223 .card_fw_status0 = 0xe8,
224 .card_fw_status1 = 0xe9,
225 .card_rx_len = 0xea,
226 .card_rx_unit = 0xeb,
227 .io_port_0 = 0xe4,
228 .io_port_1 = 0xe5,
229 .io_port_2 = 0xe6,
230 .int_read_to_clear = true,
231 .host_int_rsr = 0x04,
232 .card_misc_cfg = 0xD8,
233 .fw_dump_ctrl = 0xf0,
234 .fw_dump_start = 0xf1,
235 .fw_dump_end = 0xf8,
236};
237
c675786a 238static const struct btmrvl_sdio_device btmrvl_sdio_sd8688 = {
77189df4
LR
239 .helper = "mrvl/sd8688_helper.bin",
240 .firmware = "mrvl/sd8688.bin",
9f72c1d9 241 .reg = &btmrvl_reg_8688,
4df82b59 242 .support_pscan_win_report = false,
9f72c1d9 243 .sd_blksz_fw_dl = 64,
dc759613 244 .supports_fw_dump = false,
9f72c1d9
KG
245};
246
247static const struct btmrvl_sdio_device btmrvl_sdio_sd8787 = {
248 .helper = NULL,
249 .firmware = "mrvl/sd8787_uapsta.bin",
2ac654f7 250 .reg = &btmrvl_reg_87xx,
4df82b59 251 .support_pscan_win_report = false,
2ac654f7 252 .sd_blksz_fw_dl = 256,
dc759613 253 .supports_fw_dump = false,
2ac654f7
BZ
254};
255
256static const struct btmrvl_sdio_device btmrvl_sdio_sd8797 = {
257 .helper = NULL,
258 .firmware = "mrvl/sd8797_uapsta.bin",
259 .reg = &btmrvl_reg_87xx,
4df82b59 260 .support_pscan_win_report = false,
9f72c1d9 261 .sd_blksz_fw_dl = 256,
dc759613 262 .supports_fw_dump = false,
789221ec
BZ
263};
264
3907d558
XH
265static const struct btmrvl_sdio_device btmrvl_sdio_sd8887 = {
266 .helper = NULL,
267 .firmware = "mrvl/sd8887_uapsta.bin",
268 .reg = &btmrvl_reg_8887,
269 .support_pscan_win_report = true,
270 .sd_blksz_fw_dl = 256,
dc759613 271 .supports_fw_dump = false,
3907d558
XH
272};
273
22f2efed
BZ
274static const struct btmrvl_sdio_device btmrvl_sdio_sd8897 = {
275 .helper = NULL,
276 .firmware = "mrvl/sd8897_uapsta.bin",
1e3e492c 277 .reg = &btmrvl_reg_8897,
4df82b59 278 .support_pscan_win_report = true,
22f2efed 279 .sd_blksz_fw_dl = 256,
dc759613 280 .supports_fw_dump = true,
22f2efed
BZ
281};
282
f0ef6748
AK
283static const struct btmrvl_sdio_device btmrvl_sdio_sd8997 = {
284 .helper = NULL,
285 .firmware = "mrvl/sd8997_uapsta.bin",
286 .reg = &btmrvl_reg_8997,
287 .support_pscan_win_report = true,
288 .sd_blksz_fw_dl = 256,
289 .supports_fw_dump = true,
290};
291
dcf47f3b
MH
292static const struct sdio_device_id btmrvl_sdio_ids[] = {
293 /* Marvell SD8688 Bluetooth device */
294 { SDIO_DEVICE(SDIO_VENDOR_ID_MARVELL, 0x9105),
53d6cfa5 295 .driver_data = (unsigned long)&btmrvl_sdio_sd8688 },
9f72c1d9
KG
296 /* Marvell SD8787 Bluetooth device */
297 { SDIO_DEVICE(SDIO_VENDOR_ID_MARVELL, 0x911A),
53d6cfa5 298 .driver_data = (unsigned long)&btmrvl_sdio_sd8787 },
37ed561e
BZ
299 /* Marvell SD8787 Bluetooth AMP device */
300 { SDIO_DEVICE(SDIO_VENDOR_ID_MARVELL, 0x911B),
53d6cfa5 301 .driver_data = (unsigned long)&btmrvl_sdio_sd8787 },
2ac654f7
BZ
302 /* Marvell SD8797 Bluetooth device */
303 { SDIO_DEVICE(SDIO_VENDOR_ID_MARVELL, 0x912A),
53d6cfa5 304 .driver_data = (unsigned long)&btmrvl_sdio_sd8797 },
3907d558
XH
305 /* Marvell SD8887 Bluetooth device */
306 { SDIO_DEVICE(SDIO_VENDOR_ID_MARVELL, 0x9136),
307 .driver_data = (unsigned long)&btmrvl_sdio_sd8887 },
22f2efed
BZ
308 /* Marvell SD8897 Bluetooth device */
309 { SDIO_DEVICE(SDIO_VENDOR_ID_MARVELL, 0x912E),
53d6cfa5 310 .driver_data = (unsigned long)&btmrvl_sdio_sd8897 },
f0ef6748
AK
311 /* Marvell SD8997 Bluetooth device */
312 { SDIO_DEVICE(SDIO_VENDOR_ID_MARVELL, 0x9142),
313 .driver_data = (unsigned long)&btmrvl_sdio_sd8997 },
789221ec 314
dcf47f3b 315 { } /* Terminating entry */
789221ec
BZ
316};
317
dcf47f3b
MH
318MODULE_DEVICE_TABLE(sdio, btmrvl_sdio_ids);
319
789221ec
BZ
320static int btmrvl_sdio_get_rx_unit(struct btmrvl_sdio_card *card)
321{
322 u8 reg;
323 int ret;
324
9f72c1d9 325 reg = sdio_readb(card->func, card->reg->card_rx_unit, &ret);
789221ec
BZ
326 if (!ret)
327 card->rx_unit = reg;
328
789221ec
BZ
329 return ret;
330}
331
332static int btmrvl_sdio_read_fw_status(struct btmrvl_sdio_card *card, u16 *dat)
333{
789221ec 334 u8 fws0, fws1;
9374253f 335 int ret;
789221ec
BZ
336
337 *dat = 0;
338
9f72c1d9 339 fws0 = sdio_readb(card->func, card->reg->card_fw_status0, &ret);
278be27f
KV
340 if (ret)
341 return -EIO;
789221ec 342
9f72c1d9 343 fws1 = sdio_readb(card->func, card->reg->card_fw_status1, &ret);
9374253f 344 if (ret)
789221ec 345 return -EIO;
789221ec
BZ
346
347 *dat = (((u16) fws1) << 8) | fws0;
348
789221ec
BZ
349 return 0;
350}
351
352static int btmrvl_sdio_read_rx_len(struct btmrvl_sdio_card *card, u16 *dat)
353{
789221ec 354 u8 reg;
9374253f 355 int ret;
789221ec 356
9f72c1d9 357 reg = sdio_readb(card->func, card->reg->card_rx_len, &ret);
789221ec
BZ
358 if (!ret)
359 *dat = (u16) reg << card->rx_unit;
360
789221ec
BZ
361 return ret;
362}
363
364static int btmrvl_sdio_enable_host_int_mask(struct btmrvl_sdio_card *card,
dcf47f3b 365 u8 mask)
789221ec
BZ
366{
367 int ret;
368
9f72c1d9 369 sdio_writeb(card->func, mask, card->reg->host_int_mask, &ret);
789221ec
BZ
370 if (ret) {
371 BT_ERR("Unable to enable the host interrupt!");
372 ret = -EIO;
373 }
374
789221ec
BZ
375 return ret;
376}
377
378static int btmrvl_sdio_disable_host_int_mask(struct btmrvl_sdio_card *card,
dcf47f3b 379 u8 mask)
789221ec 380{
789221ec 381 u8 host_int_mask;
9374253f 382 int ret;
789221ec 383
9f72c1d9 384 host_int_mask = sdio_readb(card->func, card->reg->host_int_mask, &ret);
9374253f
MH
385 if (ret)
386 return -EIO;
789221ec
BZ
387
388 host_int_mask &= ~mask;
389
9f72c1d9 390 sdio_writeb(card->func, host_int_mask, card->reg->host_int_mask, &ret);
789221ec
BZ
391 if (ret < 0) {
392 BT_ERR("Unable to disable the host interrupt!");
9374253f 393 return -EIO;
789221ec
BZ
394 }
395
9374253f 396 return 0;
789221ec
BZ
397}
398
399static int btmrvl_sdio_poll_card_status(struct btmrvl_sdio_card *card, u8 bits)
400{
401 unsigned int tries;
789221ec 402 u8 status;
9374253f 403 int ret;
789221ec
BZ
404
405 for (tries = 0; tries < MAX_POLL_TRIES * 1000; tries++) {
9f72c1d9 406 status = sdio_readb(card->func, card->reg->card_status, &ret);
789221ec
BZ
407 if (ret)
408 goto failed;
409 if ((status & bits) == bits)
9374253f 410 return ret;
789221ec
BZ
411
412 udelay(1);
413 }
414
415 ret = -ETIMEDOUT;
416
417failed:
418 BT_ERR("FAILED! ret=%d", ret);
419
789221ec
BZ
420 return ret;
421}
422
423static int btmrvl_sdio_verify_fw_download(struct btmrvl_sdio_card *card,
dcf47f3b 424 int pollnum)
789221ec 425{
789221ec 426 u16 firmwarestat;
69676b1c 427 int tries, ret;
789221ec 428
789221ec
BZ
429 /* Wait for firmware to become ready */
430 for (tries = 0; tries < pollnum; tries++) {
c1c999e2
AF
431 sdio_claim_host(card->func);
432 ret = btmrvl_sdio_read_fw_status(card, &firmwarestat);
433 sdio_release_host(card->func);
434 if (ret < 0)
789221ec
BZ
435 continue;
436
69676b1c
AF
437 if (firmwarestat == FIRMWARE_READY)
438 return 0;
439
9a01242d 440 msleep(100);
789221ec
BZ
441 }
442
69676b1c 443 return -ETIMEDOUT;
789221ec
BZ
444}
445
446static int btmrvl_sdio_download_helper(struct btmrvl_sdio_card *card)
447{
448 const struct firmware *fw_helper = NULL;
449 const u8 *helper = NULL;
450 int ret;
451 void *tmphlprbuf = NULL;
452 int tmphlprbufsz, hlprblknow, helperlen;
453 u8 *helperbuf;
454 u32 tx_len;
455
789221ec 456 ret = request_firmware(&fw_helper, card->helper,
dcf47f3b 457 &card->func->dev);
789221ec
BZ
458 if ((ret < 0) || !fw_helper) {
459 BT_ERR("request_firmware(helper) failed, error code = %d",
dcf47f3b 460 ret);
789221ec
BZ
461 ret = -ENOENT;
462 goto done;
463 }
464
465 helper = fw_helper->data;
466 helperlen = fw_helper->size;
467
468 BT_DBG("Downloading helper image (%d bytes), block size %d bytes",
dcf47f3b 469 helperlen, SDIO_BLOCK_SIZE);
789221ec
BZ
470
471 tmphlprbufsz = ALIGN_SZ(BTM_UPLD_SIZE, BTSDIO_DMA_ALIGN);
472
f8df39f1 473 tmphlprbuf = kzalloc(tmphlprbufsz, GFP_KERNEL);
789221ec
BZ
474 if (!tmphlprbuf) {
475 BT_ERR("Unable to allocate buffer for helper."
476 " Terminating download");
477 ret = -ENOMEM;
478 goto done;
479 }
480
789221ec
BZ
481 helperbuf = (u8 *) ALIGN_ADDR(tmphlprbuf, BTSDIO_DMA_ALIGN);
482
483 /* Perform helper data transfer */
484 tx_len = (FIRMWARE_TRANSFER_NBLOCK * SDIO_BLOCK_SIZE)
485 - SDIO_HEADER_LEN;
486 hlprblknow = 0;
487
488 do {
489 ret = btmrvl_sdio_poll_card_status(card,
490 CARD_IO_READY | DN_LD_CARD_RDY);
491 if (ret < 0) {
492 BT_ERR("Helper download poll status timeout @ %d",
493 hlprblknow);
494 goto done;
495 }
496
497 /* Check if there is more data? */
498 if (hlprblknow >= helperlen)
499 break;
500
501 if (helperlen - hlprblknow < tx_len)
502 tx_len = helperlen - hlprblknow;
503
504 /* Little-endian */
505 helperbuf[0] = ((tx_len & 0x000000ff) >> 0);
506 helperbuf[1] = ((tx_len & 0x0000ff00) >> 8);
507 helperbuf[2] = ((tx_len & 0x00ff0000) >> 16);
508 helperbuf[3] = ((tx_len & 0xff000000) >> 24);
509
510 memcpy(&helperbuf[SDIO_HEADER_LEN], &helper[hlprblknow],
511 tx_len);
512
513 /* Now send the data */
dcf47f3b
MH
514 ret = sdio_writesb(card->func, card->ioport, helperbuf,
515 FIRMWARE_TRANSFER_NBLOCK * SDIO_BLOCK_SIZE);
789221ec
BZ
516 if (ret < 0) {
517 BT_ERR("IO error during helper download @ %d",
518 hlprblknow);
519 goto done;
520 }
521
522 hlprblknow += tx_len;
523 } while (true);
524
525 BT_DBG("Transferring helper image EOF block");
526
527 memset(helperbuf, 0x0, SDIO_BLOCK_SIZE);
528
529 ret = sdio_writesb(card->func, card->ioport, helperbuf,
dcf47f3b 530 SDIO_BLOCK_SIZE);
789221ec
BZ
531 if (ret < 0) {
532 BT_ERR("IO error in writing helper image EOF block");
533 goto done;
534 }
535
536 ret = 0;
537
538done:
539 kfree(tmphlprbuf);
59f34fb3 540 release_firmware(fw_helper);
789221ec
BZ
541 return ret;
542}
543
544static int btmrvl_sdio_download_fw_w_helper(struct btmrvl_sdio_card *card)
545{
546 const struct firmware *fw_firmware = NULL;
547 const u8 *firmware = NULL;
548 int firmwarelen, tmpfwbufsz, ret;
549 unsigned int tries, offset;
550 u8 base0, base1;
551 void *tmpfwbuf = NULL;
552 u8 *fwbuf;
9f72c1d9 553 u16 len, blksz_dl = card->sd_blksz_fw_dl;
789221ec
BZ
554 int txlen = 0, tx_blocks = 0, count = 0;
555
789221ec 556 ret = request_firmware(&fw_firmware, card->firmware,
dcf47f3b 557 &card->func->dev);
789221ec
BZ
558 if ((ret < 0) || !fw_firmware) {
559 BT_ERR("request_firmware(firmware) failed, error code = %d",
dcf47f3b 560 ret);
789221ec
BZ
561 ret = -ENOENT;
562 goto done;
563 }
564
565 firmware = fw_firmware->data;
566 firmwarelen = fw_firmware->size;
567
568 BT_DBG("Downloading FW image (%d bytes)", firmwarelen);
569
570 tmpfwbufsz = ALIGN_SZ(BTM_UPLD_SIZE, BTSDIO_DMA_ALIGN);
f8df39f1 571 tmpfwbuf = kzalloc(tmpfwbufsz, GFP_KERNEL);
789221ec
BZ
572 if (!tmpfwbuf) {
573 BT_ERR("Unable to allocate buffer for firmware."
574 " Terminating download");
575 ret = -ENOMEM;
576 goto done;
577 }
578
789221ec
BZ
579 /* Ensure aligned firmware buffer */
580 fwbuf = (u8 *) ALIGN_ADDR(tmpfwbuf, BTSDIO_DMA_ALIGN);
581
582 /* Perform firmware data transfer */
583 offset = 0;
584 do {
585 ret = btmrvl_sdio_poll_card_status(card,
dcf47f3b 586 CARD_IO_READY | DN_LD_CARD_RDY);
789221ec
BZ
587 if (ret < 0) {
588 BT_ERR("FW download with helper poll status"
dcf47f3b 589 " timeout @ %d", offset);
789221ec
BZ
590 goto done;
591 }
592
593 /* Check if there is more data ? */
594 if (offset >= firmwarelen)
595 break;
596
597 for (tries = 0; tries < MAX_POLL_TRIES; tries++) {
598 base0 = sdio_readb(card->func,
9f72c1d9 599 card->reg->sq_read_base_addr_a0, &ret);
789221ec
BZ
600 if (ret) {
601 BT_ERR("BASE0 register read failed:"
602 " base0 = 0x%04X(%d)."
603 " Terminating download",
604 base0, base0);
605 ret = -EIO;
606 goto done;
607 }
608 base1 = sdio_readb(card->func,
9f72c1d9 609 card->reg->sq_read_base_addr_a1, &ret);
789221ec
BZ
610 if (ret) {
611 BT_ERR("BASE1 register read failed:"
612 " base1 = 0x%04X(%d)."
613 " Terminating download",
614 base1, base1);
615 ret = -EIO;
616 goto done;
617 }
618
619 len = (((u16) base1) << 8) | base0;
620 if (len)
621 break;
622
623 udelay(10);
624 }
625
626 if (!len)
627 break;
628 else if (len > BTM_UPLD_SIZE) {
629 BT_ERR("FW download failure @%d, invalid length %d",
dcf47f3b 630 offset, len);
789221ec
BZ
631 ret = -EINVAL;
632 goto done;
633 }
634
635 txlen = len;
636
637 if (len & BIT(0)) {
638 count++;
639 if (count > MAX_WRITE_IOMEM_RETRY) {
640 BT_ERR("FW download failure @%d, "
641 "over max retry count", offset);
642 ret = -EIO;
643 goto done;
644 }
645 BT_ERR("FW CRC error indicated by the helper: "
646 "len = 0x%04X, txlen = %d", len, txlen);
647 len &= ~BIT(0);
648 /* Set txlen to 0 so as to resend from same offset */
649 txlen = 0;
650 } else {
651 count = 0;
652
653 /* Last block ? */
654 if (firmwarelen - offset < txlen)
655 txlen = firmwarelen - offset;
656
ba34dd3d 657 tx_blocks = DIV_ROUND_UP(txlen, blksz_dl);
789221ec
BZ
658
659 memcpy(fwbuf, &firmware[offset], txlen);
660 }
661
662 ret = sdio_writesb(card->func, card->ioport, fwbuf,
9f72c1d9 663 tx_blocks * blksz_dl);
789221ec
BZ
664
665 if (ret < 0) {
666 BT_ERR("FW download, writesb(%d) failed @%d",
dcf47f3b 667 count, offset);
9f72c1d9
KG
668 sdio_writeb(card->func, HOST_CMD53_FIN,
669 card->reg->cfg, &ret);
789221ec
BZ
670 if (ret)
671 BT_ERR("writeb failed (CFG)");
672 }
673
674 offset += txlen;
675 } while (true);
676
1c6098eb 677 BT_INFO("FW download over, size %d bytes", offset);
789221ec
BZ
678
679 ret = 0;
680
681done:
682 kfree(tmpfwbuf);
59f34fb3 683 release_firmware(fw_firmware);
789221ec
BZ
684 return ret;
685}
686
687static int btmrvl_sdio_card_to_host(struct btmrvl_private *priv)
688{
689 u16 buf_len = 0;
42632805 690 int ret, num_blocks, blksz;
789221ec
BZ
691 struct sk_buff *skb = NULL;
692 u32 type;
9376e4a5 693 u8 *payload;
789221ec
BZ
694 struct hci_dev *hdev = priv->btmrvl_dev.hcidev;
695 struct btmrvl_sdio_card *card = priv->btmrvl_dev.card;
696
789221ec
BZ
697 if (!card || !card->func) {
698 BT_ERR("card or function is NULL!");
699 ret = -EINVAL;
700 goto exit;
701 }
702
703 /* Read the length of data to be transferred */
704 ret = btmrvl_sdio_read_rx_len(card, &buf_len);
705 if (ret < 0) {
706 BT_ERR("read rx_len failed");
707 ret = -EIO;
708 goto exit;
709 }
710
711 blksz = SDIO_BLOCK_SIZE;
e678bad5 712 num_blocks = DIV_ROUND_UP(buf_len, blksz);
789221ec
BZ
713
714 if (buf_len <= SDIO_HEADER_LEN
42632805 715 || (num_blocks * blksz) > ALLOC_BUF_SIZE) {
789221ec
BZ
716 BT_ERR("invalid packet length: %d", buf_len);
717 ret = -EINVAL;
718 goto exit;
719 }
720
721 /* Allocate buffer */
436018ee 722 skb = bt_skb_alloc(num_blocks * blksz + BTSDIO_DMA_ALIGN, GFP_KERNEL);
1f438c61 723 if (!skb) {
789221ec 724 BT_ERR("No free skb");
6ea81c41 725 ret = -ENOMEM;
789221ec
BZ
726 goto exit;
727 }
728
3318b236
BZ
729 if ((unsigned long) skb->data & (BTSDIO_DMA_ALIGN - 1)) {
730 skb_put(skb, (unsigned long) skb->data &
731 (BTSDIO_DMA_ALIGN - 1));
732 skb_pull(skb, (unsigned long) skb->data &
733 (BTSDIO_DMA_ALIGN - 1));
789221ec
BZ
734 }
735
3318b236 736 payload = skb->data;
789221ec
BZ
737
738 ret = sdio_readsb(card->func, payload, card->ioport,
42632805 739 num_blocks * blksz);
789221ec
BZ
740 if (ret < 0) {
741 BT_ERR("readsb failed: %d", ret);
742 ret = -EIO;
743 goto exit;
744 }
745
746 /* This is SDIO specific header length: byte[2][1][0], type: byte[3]
747 * (HCI_COMMAND = 1, ACL_DATA = 2, SCO_DATA = 3, 0xFE = Vendor)
748 */
749
750 buf_len = payload[0];
9cb23dd4
AE
751 buf_len |= payload[1] << 8;
752 buf_len |= payload[2] << 16;
753
754 if (buf_len > blksz * num_blocks) {
755 BT_ERR("Skip incorrect packet: hdrlen %d buffer %d",
756 buf_len, blksz * num_blocks);
757 ret = -EIO;
758 goto exit;
759 }
760
789221ec
BZ
761 type = payload[3];
762
763 switch (type) {
764 case HCI_ACLDATA_PKT:
765 case HCI_SCODATA_PKT:
766 case HCI_EVENT_PKT:
618e8bc2 767 hci_skb_pkt_type(skb) = type;
789221ec
BZ
768 skb_put(skb, buf_len);
769 skb_pull(skb, SDIO_HEADER_LEN);
770
ea1e76a3
AE
771 if (type == HCI_EVENT_PKT) {
772 if (btmrvl_check_evtpkt(priv, skb))
e1a26170 773 hci_recv_frame(hdev, skb);
2c2453f3 774 } else {
e1a26170 775 hci_recv_frame(hdev, skb);
2c2453f3 776 }
789221ec 777
789221ec
BZ
778 hdev->stat.byte_rx += buf_len;
779 break;
780
781 case MRVL_VENDOR_PKT:
618e8bc2 782 hci_skb_pkt_type(skb) = HCI_VENDOR_PKT;
789221ec
BZ
783 skb_put(skb, buf_len);
784 skb_pull(skb, SDIO_HEADER_LEN);
785
786 if (btmrvl_process_event(priv, skb))
e1a26170 787 hci_recv_frame(hdev, skb);
789221ec
BZ
788
789 hdev->stat.byte_rx += buf_len;
790 break;
791
792 default:
af901ca1 793 BT_ERR("Unknown packet type:%d", type);
78c1b8e8 794 BT_ERR("hex: %*ph", blksz * num_blocks, payload);
789221ec
BZ
795
796 kfree_skb(skb);
797 skb = NULL;
798 break;
799 }
800
801exit:
802 if (ret) {
803 hdev->stat.err_rx++;
7923296f 804 kfree_skb(skb);
789221ec
BZ
805 }
806
789221ec
BZ
807 return ret;
808}
809
d1d10d78 810static int btmrvl_sdio_process_int_status(struct btmrvl_private *priv)
789221ec 811{
d1d10d78
AK
812 ulong flags;
813 u8 ireg;
789221ec
BZ
814 struct btmrvl_sdio_card *card = priv->btmrvl_dev.card;
815
d1d10d78
AK
816 spin_lock_irqsave(&priv->driver_lock, flags);
817 ireg = sdio_ireg;
818 sdio_ireg = 0;
819 spin_unlock_irqrestore(&priv->driver_lock, flags);
789221ec 820
d1d10d78
AK
821 sdio_claim_host(card->func);
822 if (ireg & DN_LD_HOST_INT_STATUS) {
789221ec
BZ
823 if (priv->btmrvl_dev.tx_dnld_rdy)
824 BT_DBG("tx_done already received: "
d1d10d78 825 " int_status=0x%x", ireg);
789221ec
BZ
826 else
827 priv->btmrvl_dev.tx_dnld_rdy = true;
828 }
829
d1d10d78 830 if (ireg & UP_LD_HOST_INT_STATUS)
789221ec
BZ
831 btmrvl_sdio_card_to_host(priv);
832
d1d10d78 833 sdio_release_host(card->func);
789221ec 834
d1d10d78 835 return 0;
789221ec
BZ
836}
837
0d367408
BZ
838static int btmrvl_sdio_read_to_clear(struct btmrvl_sdio_card *card, u8 *ireg)
839{
840 struct btmrvl_adapter *adapter = card->priv->adapter;
841 int ret;
842
843 ret = sdio_readsb(card->func, adapter->hw_regs, 0, SDIO_BLOCK_SIZE);
844 if (ret) {
845 BT_ERR("sdio_readsb: read int hw_regs failed: %d", ret);
846 return ret;
847 }
848
849 *ireg = adapter->hw_regs[card->reg->host_intstatus];
850 BT_DBG("hw_regs[%#x]=%#x", card->reg->host_intstatus, *ireg);
851
852 return 0;
853}
854
8af4840a
BZ
855static int btmrvl_sdio_write_to_clear(struct btmrvl_sdio_card *card, u8 *ireg)
856{
857 int ret;
858
859 *ireg = sdio_readb(card->func, card->reg->host_intstatus, &ret);
860 if (ret) {
861 BT_ERR("sdio_readb: read int status failed: %d", ret);
862 return ret;
863 }
864
865 if (*ireg) {
866 /*
867 * DN_LD_HOST_INT_STATUS and/or UP_LD_HOST_INT_STATUS
868 * Clear the interrupt status register and re-enable the
869 * interrupt.
870 */
871 BT_DBG("int_status = 0x%x", *ireg);
872
873 sdio_writeb(card->func, ~(*ireg) & (DN_LD_HOST_INT_STATUS |
874 UP_LD_HOST_INT_STATUS),
875 card->reg->host_intstatus, &ret);
876 if (ret) {
877 BT_ERR("sdio_writeb: clear int status failed: %d", ret);
878 return ret;
879 }
880 }
881
882 return 0;
883}
884
789221ec
BZ
885static void btmrvl_sdio_interrupt(struct sdio_func *func)
886{
887 struct btmrvl_private *priv;
789221ec 888 struct btmrvl_sdio_card *card;
d1d10d78 889 ulong flags;
789221ec 890 u8 ireg = 0;
d1d10d78 891 int ret;
789221ec 892
789221ec 893 card = sdio_get_drvdata(func);
d1d10d78 894 if (!card || !card->priv) {
7365d475
AK
895 BT_ERR("sbi_interrupt(%p) card or priv is NULL, card=%p",
896 func, card);
d1d10d78
AK
897 return;
898 }
789221ec 899
d1d10d78 900 priv = card->priv;
789221ec 901
7b4b8740
AK
902 if (priv->surprise_removed)
903 return;
904
0d367408
BZ
905 if (card->reg->int_read_to_clear)
906 ret = btmrvl_sdio_read_to_clear(card, &ireg);
907 else
908 ret = btmrvl_sdio_write_to_clear(card, &ireg);
909
8af4840a 910 if (ret)
d1d10d78 911 return;
d1d10d78
AK
912
913 spin_lock_irqsave(&priv->driver_lock, flags);
914 sdio_ireg |= ireg;
915 spin_unlock_irqrestore(&priv->driver_lock, flags);
916
917 btmrvl_interrupt(priv);
789221ec
BZ
918}
919
920static int btmrvl_sdio_register_dev(struct btmrvl_sdio_card *card)
921{
789221ec 922 struct sdio_func *func;
dcf47f3b 923 u8 reg;
a5c2f4c1 924 int ret;
789221ec 925
789221ec
BZ
926 if (!card || !card->func) {
927 BT_ERR("Error: card or function is NULL!");
928 ret = -EINVAL;
929 goto failed;
930 }
931
932 func = card->func;
933
789221ec
BZ
934 sdio_claim_host(func);
935
936 ret = sdio_enable_func(func);
937 if (ret) {
938 BT_ERR("sdio_enable_func() failed: ret=%d", ret);
939 ret = -EIO;
940 goto release_host;
941 }
942
943 ret = sdio_claim_irq(func, btmrvl_sdio_interrupt);
944 if (ret) {
945 BT_ERR("sdio_claim_irq failed: ret=%d", ret);
946 ret = -EIO;
947 goto disable_func;
948 }
949
950 ret = sdio_set_block_size(card->func, SDIO_BLOCK_SIZE);
951 if (ret) {
952 BT_ERR("cannot set SDIO block size");
953 ret = -EIO;
954 goto release_irq;
955 }
956
9f72c1d9 957 reg = sdio_readb(func, card->reg->io_port_0, &ret);
789221ec
BZ
958 if (ret < 0) {
959 ret = -EIO;
960 goto release_irq;
961 }
962
963 card->ioport = reg;
964
9f72c1d9 965 reg = sdio_readb(func, card->reg->io_port_1, &ret);
789221ec
BZ
966 if (ret < 0) {
967 ret = -EIO;
968 goto release_irq;
969 }
970
971 card->ioport |= (reg << 8);
972
9f72c1d9 973 reg = sdio_readb(func, card->reg->io_port_2, &ret);
789221ec
BZ
974 if (ret < 0) {
975 ret = -EIO;
976 goto release_irq;
977 }
978
979 card->ioport |= (reg << 16);
980
981 BT_DBG("SDIO FUNC%d IO port: 0x%x", func->num, card->ioport);
982
0d367408
BZ
983 if (card->reg->int_read_to_clear) {
984 reg = sdio_readb(func, card->reg->host_int_rsr, &ret);
985 if (ret < 0) {
986 ret = -EIO;
987 goto release_irq;
988 }
989 sdio_writeb(func, reg | 0x3f, card->reg->host_int_rsr, &ret);
990 if (ret < 0) {
991 ret = -EIO;
992 goto release_irq;
993 }
994
995 reg = sdio_readb(func, card->reg->card_misc_cfg, &ret);
996 if (ret < 0) {
997 ret = -EIO;
998 goto release_irq;
999 }
1000 sdio_writeb(func, reg | 0x10, card->reg->card_misc_cfg, &ret);
1001 if (ret < 0) {
1002 ret = -EIO;
1003 goto release_irq;
1004 }
1005 }
1006
789221ec
BZ
1007 sdio_set_drvdata(func, card);
1008
1009 sdio_release_host(func);
1010
789221ec
BZ
1011 return 0;
1012
1013release_irq:
1014 sdio_release_irq(func);
1015
1016disable_func:
1017 sdio_disable_func(func);
1018
1019release_host:
1020 sdio_release_host(func);
1021
1022failed:
789221ec
BZ
1023 return ret;
1024}
1025
1026static int btmrvl_sdio_unregister_dev(struct btmrvl_sdio_card *card)
1027{
789221ec
BZ
1028 if (card && card->func) {
1029 sdio_claim_host(card->func);
1030 sdio_release_irq(card->func);
1031 sdio_disable_func(card->func);
1032 sdio_release_host(card->func);
1033 sdio_set_drvdata(card->func, NULL);
1034 }
1035
789221ec
BZ
1036 return 0;
1037}
1038
1039static int btmrvl_sdio_enable_host_int(struct btmrvl_sdio_card *card)
1040{
1041 int ret;
1042
9374253f 1043 if (!card || !card->func)
789221ec 1044 return -EINVAL;
789221ec
BZ
1045
1046 sdio_claim_host(card->func);
1047
1048 ret = btmrvl_sdio_enable_host_int_mask(card, HIM_ENABLE);
1049
1050 btmrvl_sdio_get_rx_unit(card);
1051
1052 sdio_release_host(card->func);
1053
789221ec
BZ
1054 return ret;
1055}
1056
1057static int btmrvl_sdio_disable_host_int(struct btmrvl_sdio_card *card)
1058{
1059 int ret;
1060
9374253f 1061 if (!card || !card->func)
789221ec 1062 return -EINVAL;
789221ec
BZ
1063
1064 sdio_claim_host(card->func);
1065
1066 ret = btmrvl_sdio_disable_host_int_mask(card, HIM_DISABLE);
1067
1068 sdio_release_host(card->func);
1069
789221ec
BZ
1070 return ret;
1071}
1072
1073static int btmrvl_sdio_host_to_card(struct btmrvl_private *priv,
1074 u8 *payload, u16 nb)
1075{
1076 struct btmrvl_sdio_card *card = priv->btmrvl_dev.card;
1077 int ret = 0;
789221ec
BZ
1078 int blksz;
1079 int i = 0;
1080 u8 *buf = NULL;
1081 void *tmpbuf = NULL;
1082 int tmpbufsz;
1083
789221ec
BZ
1084 if (!card || !card->func) {
1085 BT_ERR("card or function is NULL!");
789221ec
BZ
1086 return -EINVAL;
1087 }
1088
d2f30240
RL
1089 blksz = DIV_ROUND_UP(nb, SDIO_BLOCK_SIZE) * SDIO_BLOCK_SIZE;
1090
789221ec 1091 buf = payload;
d2f30240
RL
1092 if ((unsigned long) payload & (BTSDIO_DMA_ALIGN - 1) ||
1093 nb < blksz) {
1094 tmpbufsz = ALIGN_SZ(blksz, BTSDIO_DMA_ALIGN) +
1095 BTSDIO_DMA_ALIGN;
5959809d
JL
1096 tmpbuf = kzalloc(tmpbufsz, GFP_KERNEL);
1097 if (!tmpbuf)
1098 return -ENOMEM;
789221ec
BZ
1099 buf = (u8 *) ALIGN_ADDR(tmpbuf, BTSDIO_DMA_ALIGN);
1100 memcpy(buf, payload, nb);
1101 }
1102
789221ec
BZ
1103 sdio_claim_host(card->func);
1104
1105 do {
1106 /* Transfer data to card */
1107 ret = sdio_writesb(card->func, card->ioport, buf,
d2f30240 1108 blksz);
789221ec
BZ
1109 if (ret < 0) {
1110 i++;
1111 BT_ERR("i=%d writesb failed: %d", i, ret);
78c1b8e8 1112 BT_ERR("hex: %*ph", nb, payload);
789221ec
BZ
1113 ret = -EIO;
1114 if (i > MAX_WRITE_IOMEM_RETRY)
1115 goto exit;
1116 }
1117 } while (ret);
1118
1119 priv->btmrvl_dev.tx_dnld_rdy = false;
1120
1121exit:
1122 sdio_release_host(card->func);
88d1a0cf 1123 kfree(tmpbuf);
789221ec 1124
789221ec
BZ
1125 return ret;
1126}
1127
1128static int btmrvl_sdio_download_fw(struct btmrvl_sdio_card *card)
1129{
faff7f74 1130 int ret;
9f72c1d9
KG
1131 u8 fws0;
1132 int pollnum = MAX_POLL_TRIES;
789221ec 1133
789221ec
BZ
1134 if (!card || !card->func) {
1135 BT_ERR("card or function is NULL!");
789221ec
BZ
1136 return -EINVAL;
1137 }
789221ec
BZ
1138
1139 if (!btmrvl_sdio_verify_fw_download(card, 1)) {
1140 BT_DBG("Firmware already downloaded!");
c1c999e2 1141 return 0;
789221ec
BZ
1142 }
1143
c1c999e2
AF
1144 sdio_claim_host(card->func);
1145
9f72c1d9
KG
1146 /* Check if other function driver is downloading the firmware */
1147 fws0 = sdio_readb(card->func, card->reg->card_fw_status0, &ret);
789221ec 1148 if (ret) {
9f72c1d9 1149 BT_ERR("Failed to read FW downloading status!");
789221ec
BZ
1150 ret = -EIO;
1151 goto done;
1152 }
9f72c1d9
KG
1153 if (fws0) {
1154 BT_DBG("BT not the winner (%#x). Skip FW downloading", fws0);
1155
1156 /* Give other function more time to download the firmware */
1157 pollnum *= 10;
1158 } else {
1159 if (card->helper) {
1160 ret = btmrvl_sdio_download_helper(card);
1161 if (ret) {
1162 BT_ERR("Failed to download helper!");
1163 ret = -EIO;
1164 goto done;
1165 }
1166 }
789221ec 1167
9f72c1d9
KG
1168 if (btmrvl_sdio_download_fw_w_helper(card)) {
1169 BT_ERR("Failed to download firmware!");
1170 ret = -EIO;
1171 goto done;
1172 }
789221ec
BZ
1173 }
1174
69676b1c
AF
1175 /*
1176 * winner or not, with this test the FW synchronizes when the
1177 * module can continue its initialization
1178 */
9f72c1d9 1179 if (btmrvl_sdio_verify_fw_download(card, pollnum)) {
789221ec 1180 BT_ERR("FW failed to be active in time!");
86f7ac77
CRL
1181 ret = -ETIMEDOUT;
1182 goto done;
789221ec
BZ
1183 }
1184
4863e4cc
AN
1185 sdio_release_host(card->func);
1186
c1c999e2
AF
1187 return 0;
1188
789221ec
BZ
1189done:
1190 sdio_release_host(card->func);
789221ec
BZ
1191 return ret;
1192}
1193
1194static int btmrvl_sdio_wakeup_fw(struct btmrvl_private *priv)
1195{
1196 struct btmrvl_sdio_card *card = priv->btmrvl_dev.card;
1197 int ret = 0;
1198
789221ec
BZ
1199 if (!card || !card->func) {
1200 BT_ERR("card or function is NULL!");
789221ec
BZ
1201 return -EINVAL;
1202 }
1203
1204 sdio_claim_host(card->func);
1205
9f72c1d9 1206 sdio_writeb(card->func, HOST_POWER_UP, card->reg->cfg, &ret);
789221ec
BZ
1207
1208 sdio_release_host(card->func);
1209
1210 BT_DBG("wake up firmware");
1211
789221ec
BZ
1212 return ret;
1213}
1214
dc759613
XH
1215static void btmrvl_sdio_dump_regs(struct btmrvl_private *priv)
1216{
1217 struct btmrvl_sdio_card *card = priv->btmrvl_dev.card;
1218 int ret = 0;
1219 unsigned int reg, reg_start, reg_end;
1220 char buf[256], *ptr;
1221 u8 loop, func, data;
1222 int MAX_LOOP = 2;
1223
1224 btmrvl_sdio_wakeup_fw(priv);
1225 sdio_claim_host(card->func);
1226
1227 for (loop = 0; loop < MAX_LOOP; loop++) {
1228 memset(buf, 0, sizeof(buf));
1229 ptr = buf;
1230
1231 if (loop == 0) {
1232 /* Read the registers of SDIO function0 */
1233 func = loop;
1234 reg_start = 0;
1235 reg_end = 9;
1236 } else {
1237 func = 2;
1238 reg_start = 0;
1239 reg_end = 0x09;
1240 }
1241
1242 ptr += sprintf(ptr, "SDIO Func%d (%#x-%#x): ",
1243 func, reg_start, reg_end);
1244 for (reg = reg_start; reg <= reg_end; reg++) {
1245 if (func == 0)
1246 data = sdio_f0_readb(card->func, reg, &ret);
1247 else
1248 data = sdio_readb(card->func, reg, &ret);
1249
1250 if (!ret) {
1251 ptr += sprintf(ptr, "%02x ", data);
1252 } else {
1253 ptr += sprintf(ptr, "ERR");
1254 break;
1255 }
1256 }
1257
1258 BT_INFO("%s", buf);
1259 }
1260
1261 sdio_release_host(card->func);
1262}
1263
1264/* This function read/write firmware */
1265static enum
1266rdwr_status btmrvl_sdio_rdwr_firmware(struct btmrvl_private *priv,
1267 u8 doneflag)
1268{
1269 struct btmrvl_sdio_card *card = priv->btmrvl_dev.card;
1270 int ret, tries;
1271 u8 ctrl_data = 0;
1272
1273 sdio_writeb(card->func, FW_DUMP_HOST_READY, card->reg->fw_dump_ctrl,
1274 &ret);
1275
1276 if (ret) {
1277 BT_ERR("SDIO write err");
1278 return RDWR_STATUS_FAILURE;
1279 }
1280
1281 for (tries = 0; tries < MAX_POLL_TRIES; tries++) {
1282 ctrl_data = sdio_readb(card->func, card->reg->fw_dump_ctrl,
1283 &ret);
1284
1285 if (ret) {
1286 BT_ERR("SDIO read err");
1287 return RDWR_STATUS_FAILURE;
1288 }
1289
1290 if (ctrl_data == FW_DUMP_DONE)
1291 break;
1292 if (doneflag && ctrl_data == doneflag)
1293 return RDWR_STATUS_DONE;
1294 if (ctrl_data != FW_DUMP_HOST_READY) {
1295 BT_INFO("The ctrl reg was changed, re-try again!");
1296 sdio_writeb(card->func, FW_DUMP_HOST_READY,
1297 card->reg->fw_dump_ctrl, &ret);
1298 if (ret) {
1299 BT_ERR("SDIO write err");
1300 return RDWR_STATUS_FAILURE;
1301 }
1302 }
1303 usleep_range(100, 200);
1304 }
1305
1306 if (ctrl_data == FW_DUMP_HOST_READY) {
1307 BT_ERR("Fail to pull ctrl_data");
1308 return RDWR_STATUS_FAILURE;
1309 }
1310
1311 return RDWR_STATUS_SUCCESS;
1312}
1313
1314/* This function dump sdio register and memory data */
45650499 1315static void btmrvl_sdio_coredump(struct device *dev)
dc759613 1316{
45650499
AS
1317 struct sdio_func *func = dev_to_sdio_func(dev);
1318 struct btmrvl_sdio_card *card;
1319 struct btmrvl_private *priv;
dc759613
XH
1320 int ret = 0;
1321 unsigned int reg, reg_start, reg_end;
1322 enum rdwr_status stat;
1323 u8 *dbg_ptr, *end_ptr, *fw_dump_data, *fw_dump_ptr;
a1e85f04 1324 u8 dump_num = 0, idx, i, read_reg, doneflag = 0;
dc759613
XH
1325 u32 memory_size, fw_dump_len = 0;
1326
45650499
AS
1327 card = sdio_get_drvdata(func);
1328 priv = card->priv;
1329
dc759613
XH
1330 /* dump sdio register first */
1331 btmrvl_sdio_dump_regs(priv);
1332
1333 if (!card->supports_fw_dump) {
1334 BT_ERR("Firmware dump not supported for this card!");
1335 return;
1336 }
1337
1338 for (idx = 0; idx < ARRAY_SIZE(mem_type_mapping_tbl); idx++) {
1339 struct memory_type_mapping *entry = &mem_type_mapping_tbl[idx];
1340
1341 if (entry->mem_ptr) {
1342 vfree(entry->mem_ptr);
1343 entry->mem_ptr = NULL;
1344 }
1345 entry->mem_size = 0;
1346 }
1347
1348 btmrvl_sdio_wakeup_fw(priv);
1349 sdio_claim_host(card->func);
1350
1351 BT_INFO("== btmrvl firmware dump start ==");
1352
1353 stat = btmrvl_sdio_rdwr_firmware(priv, doneflag);
1354 if (stat == RDWR_STATUS_FAILURE)
1355 goto done;
1356
1357 reg = card->reg->fw_dump_start;
1358 /* Read the number of the memories which will dump */
1359 dump_num = sdio_readb(card->func, reg, &ret);
1360
1361 if (ret) {
1362 BT_ERR("SDIO read memory length err");
1363 goto done;
1364 }
1365
1366 /* Read the length of every memory which will dump */
1367 for (idx = 0; idx < dump_num; idx++) {
1368 struct memory_type_mapping *entry = &mem_type_mapping_tbl[idx];
1369
1370 stat = btmrvl_sdio_rdwr_firmware(priv, doneflag);
1371 if (stat == RDWR_STATUS_FAILURE)
1372 goto done;
1373
1374 memory_size = 0;
1375 reg = card->reg->fw_dump_start;
1376 for (i = 0; i < 4; i++) {
1377 read_reg = sdio_readb(card->func, reg, &ret);
1378 if (ret) {
1379 BT_ERR("SDIO read err");
1380 goto done;
1381 }
1382 memory_size |= (read_reg << i*8);
1383 reg++;
1384 }
1385
1386 if (memory_size == 0) {
1387 BT_INFO("Firmware dump finished!");
475b9eac
NK
1388 sdio_writeb(card->func, FW_DUMP_READ_DONE,
1389 card->reg->fw_dump_ctrl, &ret);
1390 if (ret) {
1391 BT_ERR("SDIO Write MEMDUMP_FINISH ERR");
1392 goto done;
1393 }
dc759613
XH
1394 break;
1395 }
1396
1397 BT_INFO("%s_SIZE=0x%x", entry->mem_name, memory_size);
1398 entry->mem_ptr = vzalloc(memory_size + 1);
1399 entry->mem_size = memory_size;
1400 if (!entry->mem_ptr) {
1401 BT_ERR("Vzalloc %s failed", entry->mem_name);
1402 goto done;
1403 }
1404
1405 fw_dump_len += (strlen("========Start dump ") +
1406 strlen(entry->mem_name) +
1407 strlen("========\n") +
1408 (memory_size + 1) +
1409 strlen("\n========End dump========\n"));
1410
1411 dbg_ptr = entry->mem_ptr;
1412 end_ptr = dbg_ptr + memory_size;
1413
1414 doneflag = entry->done_flag;
1415 BT_INFO("Start %s output, please wait...",
1416 entry->mem_name);
1417
1418 do {
1419 stat = btmrvl_sdio_rdwr_firmware(priv, doneflag);
1420 if (stat == RDWR_STATUS_FAILURE)
1421 goto done;
1422
1423 reg_start = card->reg->fw_dump_start;
1424 reg_end = card->reg->fw_dump_end;
1425 for (reg = reg_start; reg <= reg_end; reg++) {
1426 *dbg_ptr = sdio_readb(card->func, reg, &ret);
1427 if (ret) {
1428 BT_ERR("SDIO read err");
1429 goto done;
1430 }
1431 if (dbg_ptr < end_ptr)
1432 dbg_ptr++;
1433 else
1434 BT_ERR("Allocated buffer not enough");
1435 }
1436
1437 if (stat != RDWR_STATUS_DONE) {
1438 continue;
1439 } else {
1440 BT_INFO("%s done: size=0x%tx",
1441 entry->mem_name,
1442 dbg_ptr - entry->mem_ptr);
1443 break;
1444 }
1445 } while (1);
1446 }
1447
1448 BT_INFO("== btmrvl firmware dump end ==");
1449
1450done:
1451 sdio_release_host(card->func);
1452
1453 if (fw_dump_len == 0)
1454 return;
1455
1456 fw_dump_data = vzalloc(fw_dump_len+1);
1457 if (!fw_dump_data) {
1458 BT_ERR("Vzalloc fw_dump_data fail!");
1459 return;
1460 }
1461 fw_dump_ptr = fw_dump_data;
1462
1463 /* Dump all the memory data into single file, a userspace script will
d98422cb
DR
1464 * be used to split all the memory data to multiple files
1465 */
dc759613
XH
1466 BT_INFO("== btmrvl firmware dump to /sys/class/devcoredump start");
1467 for (idx = 0; idx < dump_num; idx++) {
1468 struct memory_type_mapping *entry = &mem_type_mapping_tbl[idx];
1469
1470 if (entry->mem_ptr) {
1471 strcpy(fw_dump_ptr, "========Start dump ");
1472 fw_dump_ptr += strlen("========Start dump ");
1473
1474 strcpy(fw_dump_ptr, entry->mem_name);
1475 fw_dump_ptr += strlen(entry->mem_name);
1476
1477 strcpy(fw_dump_ptr, "========\n");
1478 fw_dump_ptr += strlen("========\n");
1479
1480 memcpy(fw_dump_ptr, entry->mem_ptr, entry->mem_size);
1481 fw_dump_ptr += entry->mem_size;
1482
1483 strcpy(fw_dump_ptr, "\n========End dump========\n");
1484 fw_dump_ptr += strlen("\n========End dump========\n");
1485
1486 vfree(mem_type_mapping_tbl[idx].mem_ptr);
1487 mem_type_mapping_tbl[idx].mem_ptr = NULL;
1488 }
1489 }
1490
1491 /* fw_dump_data will be free in device coredump release function
d98422cb
DR
1492 * after 5 min
1493 */
d4902632 1494 dev_coredumpv(&card->func->dev, fw_dump_data, fw_dump_len, GFP_KERNEL);
dc759613
XH
1495 BT_INFO("== btmrvl firmware dump to /sys/class/devcoredump end");
1496}
1497
789221ec 1498static int btmrvl_sdio_probe(struct sdio_func *func,
dcf47f3b 1499 const struct sdio_device_id *id)
789221ec
BZ
1500{
1501 int ret = 0;
1502 struct btmrvl_private *priv = NULL;
1503 struct btmrvl_sdio_card *card = NULL;
1504
789221ec
BZ
1505 BT_INFO("vendor=0x%x, device=0x%x, class=%d, fn=%d",
1506 id->vendor, id->device, id->class, func->num);
1507
eb17ea3b
SK
1508 card = devm_kzalloc(&func->dev, sizeof(*card), GFP_KERNEL);
1509 if (!card)
1510 return -ENOMEM;
789221ec
BZ
1511
1512 card->func = func;
1513
dcf47f3b
MH
1514 if (id->driver_data) {
1515 struct btmrvl_sdio_device *data = (void *) id->driver_data;
9f72c1d9 1516 card->helper = data->helper;
dcf47f3b 1517 card->firmware = data->firmware;
9f72c1d9
KG
1518 card->reg = data->reg;
1519 card->sd_blksz_fw_dl = data->sd_blksz_fw_dl;
4df82b59 1520 card->support_pscan_win_report = data->support_pscan_win_report;
dc759613 1521 card->supports_fw_dump = data->supports_fw_dump;
dcf47f3b
MH
1522 }
1523
789221ec
BZ
1524 if (btmrvl_sdio_register_dev(card) < 0) {
1525 BT_ERR("Failed to register BT device!");
eb17ea3b 1526 return -ENODEV;
789221ec
BZ
1527 }
1528
1529 /* Disable the interrupts on the card */
1530 btmrvl_sdio_disable_host_int(card);
1531
1532 if (btmrvl_sdio_download_fw(card)) {
1533 BT_ERR("Downloading firmware failed!");
1534 ret = -ENODEV;
1535 goto unreg_dev;
1536 }
1537
789221ec
BZ
1538 btmrvl_sdio_enable_host_int(card);
1539
bb7f4f0b
XH
1540 /* Device tree node parsing and platform specific configuration*/
1541 btmrvl_sdio_probe_of(&func->dev, card);
1542
789221ec
BZ
1543 priv = btmrvl_add_card(card);
1544 if (!priv) {
1545 BT_ERR("Initializing card failed!");
1546 ret = -ENODEV;
1547 goto disable_host_int;
1548 }
1549
1550 card->priv = priv;
1551
1552 /* Initialize the interface specific function pointers */
1553 priv->hw_host_to_card = btmrvl_sdio_host_to_card;
1554 priv->hw_wakeup_firmware = btmrvl_sdio_wakeup_fw;
d1d10d78 1555 priv->hw_process_int_status = btmrvl_sdio_process_int_status;
789221ec 1556
64061607
BZ
1557 if (btmrvl_register_hdev(priv)) {
1558 BT_ERR("Register hdev failed!");
1559 ret = -ENODEV;
1560 goto disable_host_int;
1561 }
1562
789221ec
BZ
1563 return 0;
1564
1565disable_host_int:
1566 btmrvl_sdio_disable_host_int(card);
1567unreg_dev:
1568 btmrvl_sdio_unregister_dev(card);
789221ec
BZ
1569 return ret;
1570}
1571
1572static void btmrvl_sdio_remove(struct sdio_func *func)
1573{
1574 struct btmrvl_sdio_card *card;
1575
789221ec
BZ
1576 if (func) {
1577 card = sdio_get_drvdata(func);
1578 if (card) {
1579 /* Send SHUTDOWN command & disable interrupt
1580 * if user removes the module.
1581 */
1582 if (user_rmmod) {
1583 btmrvl_send_module_cfg_cmd(card->priv,
1584 MODULE_SHUTDOWN_REQ);
1585 btmrvl_sdio_disable_host_int(card);
1586 }
92322599 1587 BT_DBG("unregister dev");
7b4b8740 1588 card->priv->surprise_removed = true;
789221ec
BZ
1589 btmrvl_sdio_unregister_dev(card);
1590 btmrvl_remove_card(card->priv);
789221ec
BZ
1591 }
1592 }
789221ec
BZ
1593}
1594
ba54a16f
AK
1595static int btmrvl_sdio_suspend(struct device *dev)
1596{
1597 struct sdio_func *func = dev_to_sdio_func(dev);
1598 struct btmrvl_sdio_card *card;
1599 struct btmrvl_private *priv;
1600 mmc_pm_flag_t pm_flags;
1601 struct hci_dev *hcidev;
1602
1603 if (func) {
1604 pm_flags = sdio_get_host_pm_caps(func);
1605 BT_DBG("%s: suspend: PM flags = 0x%x", sdio_func_id(func),
1606 pm_flags);
1607 if (!(pm_flags & MMC_PM_KEEP_POWER)) {
1608 BT_ERR("%s: cannot remain alive while suspended",
1609 sdio_func_id(func));
1610 return -ENOSYS;
1611 }
1612 card = sdio_get_drvdata(func);
1613 if (!card || !card->priv) {
1614 BT_ERR("card or priv structure is not valid");
1615 return 0;
1616 }
1617 } else {
1618 BT_ERR("sdio_func is not specified");
1619 return 0;
1620 }
1621
bb7f4f0b
XH
1622 /* Enable platform specific wakeup interrupt */
1623 if (card->plt_wake_cfg && card->plt_wake_cfg->irq_bt >= 0) {
1624 card->plt_wake_cfg->wake_by_bt = false;
1625 enable_irq(card->plt_wake_cfg->irq_bt);
1626 enable_irq_wake(card->plt_wake_cfg->irq_bt);
1627 }
1628
ba54a16f 1629 priv = card->priv;
8cf60cf2 1630 priv->adapter->is_suspending = true;
5bf8a748
CRL
1631 hcidev = priv->btmrvl_dev.hcidev;
1632 BT_DBG("%s: SDIO suspend", hcidev->name);
1633 hci_suspend_dev(hcidev);
ba54a16f
AK
1634
1635 if (priv->adapter->hs_state != HS_ACTIVATED) {
1636 if (btmrvl_enable_hs(priv)) {
8f91566f 1637 BT_ERR("HS not activated, suspend failed!");
6eb7bd66
XH
1638 /* Disable platform specific wakeup interrupt */
1639 if (card->plt_wake_cfg &&
1640 card->plt_wake_cfg->irq_bt >= 0) {
1641 disable_irq_wake(card->plt_wake_cfg->irq_bt);
1642 disable_irq(card->plt_wake_cfg->irq_bt);
1643 }
1644
e7acf430 1645 priv->adapter->is_suspending = false;
ba54a16f
AK
1646 return -EBUSY;
1647 }
1648 }
ba54a16f 1649
8cf60cf2 1650 priv->adapter->is_suspending = false;
ba54a16f
AK
1651 priv->adapter->is_suspended = true;
1652
1653 /* We will keep the power when hs enabled successfully */
1654 if (priv->adapter->hs_state == HS_ACTIVATED) {
1655 BT_DBG("suspend with MMC_PM_KEEP_POWER");
1656 return sdio_set_host_pm_flags(func, MMC_PM_KEEP_POWER);
ba54a16f 1657 }
f1554b7b 1658
1659 BT_DBG("suspend without MMC_PM_KEEP_POWER");
1660 return 0;
ba54a16f
AK
1661}
1662
1663static int btmrvl_sdio_resume(struct device *dev)
1664{
1665 struct sdio_func *func = dev_to_sdio_func(dev);
1666 struct btmrvl_sdio_card *card;
1667 struct btmrvl_private *priv;
1668 mmc_pm_flag_t pm_flags;
1669 struct hci_dev *hcidev;
1670
1671 if (func) {
1672 pm_flags = sdio_get_host_pm_caps(func);
1673 BT_DBG("%s: resume: PM flags = 0x%x", sdio_func_id(func),
1674 pm_flags);
1675 card = sdio_get_drvdata(func);
1676 if (!card || !card->priv) {
1677 BT_ERR("card or priv structure is not valid");
1678 return 0;
1679 }
1680 } else {
1681 BT_ERR("sdio_func is not specified");
1682 return 0;
1683 }
1684 priv = card->priv;
1685
1686 if (!priv->adapter->is_suspended) {
1687 BT_DBG("device already resumed");
1688 return 0;
1689 }
1690
ba54a16f
AK
1691 priv->hw_wakeup_firmware(priv);
1692 priv->adapter->hs_state = HS_DEACTIVATED;
5bf8a748 1693 hcidev = priv->btmrvl_dev.hcidev;
ba54a16f 1694 BT_DBG("%s: HS DEACTIVATED in resume!", hcidev->name);
5bf8a748
CRL
1695 priv->adapter->is_suspended = false;
1696 BT_DBG("%s: SDIO resume", hcidev->name);
1697 hci_resume_dev(hcidev);
ba54a16f 1698
bb7f4f0b
XH
1699 /* Disable platform specific wakeup interrupt */
1700 if (card->plt_wake_cfg && card->plt_wake_cfg->irq_bt >= 0) {
1701 disable_irq_wake(card->plt_wake_cfg->irq_bt);
9af02d86
JC
1702 disable_irq(card->plt_wake_cfg->irq_bt);
1703 if (card->plt_wake_cfg->wake_by_bt)
1704 /* Undo our disable, since interrupt handler already
1705 * did this.
1706 */
1707 enable_irq(card->plt_wake_cfg->irq_bt);
bb7f4f0b
XH
1708 }
1709
ba54a16f
AK
1710 return 0;
1711}
1712
1713static const struct dev_pm_ops btmrvl_sdio_pm_ops = {
1714 .suspend = btmrvl_sdio_suspend,
1715 .resume = btmrvl_sdio_resume,
1716};
1717
789221ec
BZ
1718static struct sdio_driver bt_mrvl_sdio = {
1719 .name = "btmrvl_sdio",
1720 .id_table = btmrvl_sdio_ids,
1721 .probe = btmrvl_sdio_probe,
1722 .remove = btmrvl_sdio_remove,
ba54a16f
AK
1723 .drv = {
1724 .owner = THIS_MODULE,
45650499 1725 .coredump = btmrvl_sdio_coredump,
ba54a16f
AK
1726 .pm = &btmrvl_sdio_pm_ops,
1727 }
789221ec
BZ
1728};
1729
8e5b2308 1730static int __init btmrvl_sdio_init_module(void)
789221ec 1731{
789221ec
BZ
1732 if (sdio_register_driver(&bt_mrvl_sdio) != 0) {
1733 BT_ERR("SDIO Driver Registration Failed");
789221ec
BZ
1734 return -ENODEV;
1735 }
1736
1737 /* Clear the flag in case user removes the card. */
1738 user_rmmod = 0;
1739
789221ec
BZ
1740 return 0;
1741}
1742
8e5b2308 1743static void __exit btmrvl_sdio_exit_module(void)
789221ec 1744{
789221ec
BZ
1745 /* Set the flag as user is removing this module. */
1746 user_rmmod = 1;
1747
1748 sdio_unregister_driver(&bt_mrvl_sdio);
789221ec
BZ
1749}
1750
1751module_init(btmrvl_sdio_init_module);
1752module_exit(btmrvl_sdio_exit_module);
1753
1754MODULE_AUTHOR("Marvell International Ltd.");
9666fb35 1755MODULE_DESCRIPTION("Marvell BT-over-SDIO driver ver " VERSION);
789221ec
BZ
1756MODULE_VERSION(VERSION);
1757MODULE_LICENSE("GPL v2");
77189df4
LR
1758MODULE_FIRMWARE("mrvl/sd8688_helper.bin");
1759MODULE_FIRMWARE("mrvl/sd8688.bin");
9f72c1d9 1760MODULE_FIRMWARE("mrvl/sd8787_uapsta.bin");
2ac654f7 1761MODULE_FIRMWARE("mrvl/sd8797_uapsta.bin");
3907d558 1762MODULE_FIRMWARE("mrvl/sd8887_uapsta.bin");
22f2efed 1763MODULE_FIRMWARE("mrvl/sd8897_uapsta.bin");
f0ef6748 1764MODULE_FIRMWARE("mrvl/sd8997_uapsta.bin");