projects / linux-2.6-block.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
rapidio: fix the missed put_device() for rio_mport_add_riodev
[linux-2.6-block.git] / drivers / rapidio / devices / rio_mport_cdev.c
CommitLineData
2874c5fd 1// SPDX-License-Identifier: GPL-2.0-or-later
e8de3701
AB		 2/*
3 * RapidIO mport character device
4 *
5 * Copyright 2014-2015 Integrated Device Technology, Inc.
6 * Alexandre Bounine <alexandre.bounine@idt.com>
7 * Copyright 2014-2015 Prodrive Technologies
8 * Andre van Herk <andre.van.herk@prodrive-technologies.com>
9 * Jerry Jacobs <jerry.jacobs@prodrive-technologies.com>
10 * Copyright (C) 2014 Texas Instruments Incorporated
11 * Aurelien Jacquiot <a-jacquiot@ti.com>
e8de3701
AB		 12 */
13#include <linux/module.h>
14#include <linux/kernel.h>
15#include <linux/cdev.h>
16#include <linux/ioctl.h>
17#include <linux/uaccess.h>
18#include <linux/list.h>
19#include <linux/fs.h>
20#include <linux/err.h>
21#include <linux/net.h>
22#include <linux/poll.h>
23#include <linux/spinlock.h>
24#include <linux/sched.h>
25#include <linux/kfifo.h>
26
27#include <linux/mm.h>
28#include <linux/slab.h>
29#include <linux/vmalloc.h>
30#include <linux/mman.h>
31
32#include <linux/dma-mapping.h>
33#ifdef CONFIG_RAPIDIO_DMA_ENGINE
34#include <linux/dmaengine.h>
35#endif
36
37#include <linux/rio.h>
38#include <linux/rio_ids.h>
39#include <linux/rio_drv.h>
40#include <linux/rio_mport_cdev.h>
41
42#include "../rio.h"
43
44#define DRV_NAME "rio_mport"
45#define DRV_PREFIX DRV_NAME ": "
46#define DEV_NAME "rio_mport"
47#define DRV_VERSION "1.0.0"
48
49/* Debug output filtering masks */
50enum {
51 DBG_NONE = 0,
52 DBG_INIT = BIT(0), /* driver init */
53 DBG_EXIT = BIT(1), /* driver exit */
54 DBG_MPORT = BIT(2), /* mport add/remove */
55 DBG_RDEV = BIT(3), /* RapidIO device add/remove */
56 DBG_DMA = BIT(4), /* DMA transfer messages */
57 DBG_MMAP = BIT(5), /* mapping messages */
58 DBG_IBW = BIT(6), /* inbound window */
59 DBG_EVENT = BIT(7), /* event handling messages */
60 DBG_OBW = BIT(8), /* outbound window messages */
61 DBG_DBELL = BIT(9), /* doorbell messages */
62 DBG_ALL = ~0,
63};
64
65#ifdef DEBUG
66#define rmcd_debug(level, fmt, arg...) \
67 do { \
68 if (DBG_##level & dbg_level) \
69 pr_debug(DRV_PREFIX "%s: " fmt "\n", __func__, ##arg); \
70 } while (0)
71#else
72#define rmcd_debug(level, fmt, arg...) \
73 no_printk(KERN_DEBUG pr_fmt(DRV_PREFIX fmt "\n"), ##arg)
74#endif
75
76#define rmcd_warn(fmt, arg...) \
77 pr_warn(DRV_PREFIX "%s WARNING " fmt "\n", __func__, ##arg)
78
79#define rmcd_error(fmt, arg...) \
80 pr_err(DRV_PREFIX "%s ERROR " fmt "\n", __func__, ##arg)
81
82MODULE_AUTHOR("Jerry Jacobs <jerry.jacobs@prodrive-technologies.com>");
83MODULE_AUTHOR("Aurelien Jacquiot <a-jacquiot@ti.com>");
84MODULE_AUTHOR("Alexandre Bounine <alexandre.bounine@idt.com>");
85MODULE_AUTHOR("Andre van Herk <andre.van.herk@prodrive-technologies.com>");
86MODULE_DESCRIPTION("RapidIO mport character device driver");
87MODULE_LICENSE("GPL");
88MODULE_VERSION(DRV_VERSION);
89
90static int dma_timeout = 3000; /* DMA transfer timeout in msec */
91module_param(dma_timeout, int, S_IRUGO);
92MODULE_PARM_DESC(dma_timeout, "DMA Transfer Timeout in msec (default: 3000)");
93
94#ifdef DEBUG
95static u32 dbg_level = DBG_NONE;
96module_param(dbg_level, uint, S_IWUSR | S_IWGRP | S_IRUGO);
97MODULE_PARM_DESC(dbg_level, "Debugging output level (default 0 = none)");
98#endif
99
100/*
101 * An internal DMA coherent buffer
102 */
103struct mport_dma_buf {
104 void *ib_base;
105 dma_addr_t ib_phys;
106 u32 ib_size;
107 u64 ib_rio_base;
108 bool ib_map;
109 struct file *filp;
110};
111
112/*
113 * Internal memory mapping structure
114 */
115enum rio_mport_map_dir {
116 MAP_INBOUND,
117 MAP_OUTBOUND,
118 MAP_DMA,
119};
120
121struct rio_mport_mapping {
122 struct list_head node;
123 struct mport_dev *md;
124 enum rio_mport_map_dir dir;
4e1016da 125 u16 rioid;
e8de3701
AB		 126 u64 rio_addr;
127 dma_addr_t phys_addr; /* for mmap */
128 void *virt_addr; /* kernel address, for dma_free_coherent */
129 u64 size;
130 struct kref ref; /* refcount of vmas sharing the mapping */
131 struct file *filp;
132};
133
134struct rio_mport_dma_map {
135 int valid;
4e1016da 136 u64 length;
e8de3701
AB		 137 void *vaddr;
138 dma_addr_t paddr;
139};
140
141#define MPORT_MAX_DMA_BUFS 16
142#define MPORT_EVENT_DEPTH 10
143
144/*
145 * mport_dev driver-specific structure that represents mport device
146 * @active mport device status flag
147 * @node list node to maintain list of registered mports
148 * @cdev character device
149 * @dev associated device object
150 * @mport associated subsystem's master port device object
151 * @buf_mutex lock for buffer handling
152 * @file_mutex - lock for open files list
153 * @file_list - list of open files on given mport
154 * @properties properties of this mport
155 * @portwrites queue of inbound portwrites
156 * @pw_lock lock for port write queue
157 * @mappings queue for memory mappings
158 * @dma_chan DMA channels associated with this device
159 * @dma_ref:
160 * @comp:
161 */
162struct mport_dev {
163 atomic_t active;
164 struct list_head node;
165 struct cdev cdev;
166 struct device dev;
167 struct rio_mport *mport;
168 struct mutex buf_mutex;
169 struct mutex file_mutex;
170 struct list_head file_list;
171 struct rio_mport_properties properties;
172 struct list_head doorbells;
173 spinlock_t db_lock;
174 struct list_head portwrites;
175 spinlock_t pw_lock;
176 struct list_head mappings;
177#ifdef CONFIG_RAPIDIO_DMA_ENGINE
178 struct dma_chan *dma_chan;
179 struct kref dma_ref;
180 struct completion comp;
181#endif
182};
183
184/*
185 * mport_cdev_priv - data structure specific to individual file object
186 * associated with an open device
187 * @md master port character device object
188 * @async_queue - asynchronous notification queue
189 * @list - file objects tracking list
190 * @db_filters inbound doorbell filters for this descriptor
191 * @pw_filters portwrite filters for this descriptor
192 * @event_fifo event fifo for this descriptor
193 * @event_rx_wait wait queue for this descriptor
194 * @fifo_lock lock for event_fifo
195 * @event_mask event mask for this descriptor
196 * @dmach DMA engine channel allocated for specific file object
197 */
198struct mport_cdev_priv {
199 struct mport_dev *md;
200 struct fasync_struct *async_queue;
201 struct list_head list;
202 struct list_head db_filters;
203 struct list_head pw_filters;
204 struct kfifo event_fifo;
205 wait_queue_head_t event_rx_wait;
206 spinlock_t fifo_lock;
4e1016da 207 u32 event_mask; /* RIO_DOORBELL, RIO_PORTWRITE */
e8de3701
AB		 208#ifdef CONFIG_RAPIDIO_DMA_ENGINE
209 struct dma_chan *dmach;
210 struct list_head async_list;
e8de3701
AB		 211 spinlock_t req_lock;
212 struct mutex dma_lock;
213 struct kref dma_ref;
214 struct completion comp;
215#endif
216};
217
218/*
219 * rio_mport_pw_filter - structure to describe a portwrite filter
220 * md_node node in mport device's list
221 * priv_node node in private file object's list
222 * priv reference to private data
223 * filter actual portwrite filter
224 */
225struct rio_mport_pw_filter {
226 struct list_head md_node;
227 struct list_head priv_node;
228 struct mport_cdev_priv *priv;
229 struct rio_pw_filter filter;
230};
231
232/*
233 * rio_mport_db_filter - structure to describe a doorbell filter
234 * @data_node reference to device node
235 * @priv_node node in private data
236 * @priv reference to private data
237 * @filter actual doorbell filter
238 */
239struct rio_mport_db_filter {
240 struct list_head data_node;
241 struct list_head priv_node;
242 struct mport_cdev_priv *priv;
243 struct rio_doorbell_filter filter;
244};
245
246static LIST_HEAD(mport_devs);
247static DEFINE_MUTEX(mport_devs_lock);
248
249#if (0) /* used by commented out portion of poll function : FIXME */
250static DECLARE_WAIT_QUEUE_HEAD(mport_cdev_wait);
251#endif
252
253static struct class *dev_class;
254static dev_t dev_number;
255
e8de3701
AB		 256static void mport_release_mapping(struct kref *ref);
257
258static int rio_mport_maint_rd(struct mport_cdev_priv *priv, void __user *arg,
259 int local)
260{
261 struct rio_mport *mport = priv->md->mport;
262 struct rio_mport_maint_io maint_io;
263 u32 *buffer;
264 u32 offset;
265 size_t length;
266 int ret, i;
267
268 if (unlikely(copy_from_user(&maint_io, arg, sizeof(maint_io))))
269 return -EFAULT;
270
271 if ((maint_io.offset % 4) ||
4e1016da
AB		 272 (maint_io.length == 0) || (maint_io.length % 4) ||
273 (maint_io.length + maint_io.offset) > RIO_MAINT_SPACE_SZ)
e8de3701
AB		 274 return -EINVAL;
275
276 buffer = vmalloc(maint_io.length);
277 if (buffer == NULL)
278 return -ENOMEM;
279 length = maint_io.length/sizeof(u32);
280 offset = maint_io.offset;
281
282 for (i = 0; i < length; i++) {
283 if (local)
284 ret = __rio_local_read_config_32(mport,
285 offset, &buffer[i]);
286 else
287 ret = rio_mport_read_config_32(mport, maint_io.rioid,
288 maint_io.hopcount, offset, &buffer[i]);
289 if (ret)
290 goto out;
291
292 offset += 4;
293 }
294
4e1016da
AB		 295 if (unlikely(copy_to_user((void __user *)(uintptr_t)maint_io.buffer,
296 buffer, maint_io.length)))
e8de3701
AB		 297 ret = -EFAULT;
298out:
299 vfree(buffer);
300 return ret;
301}
302
303static int rio_mport_maint_wr(struct mport_cdev_priv *priv, void __user *arg,
304 int local)
305{
306 struct rio_mport *mport = priv->md->mport;
307 struct rio_mport_maint_io maint_io;
308 u32 *buffer;
309 u32 offset;
310 size_t length;
311 int ret = -EINVAL, i;
312
313 if (unlikely(copy_from_user(&maint_io, arg, sizeof(maint_io))))
314 return -EFAULT;
315
316 if ((maint_io.offset % 4) ||
4e1016da
AB		 317 (maint_io.length == 0) || (maint_io.length % 4) ||
318 (maint_io.length + maint_io.offset) > RIO_MAINT_SPACE_SZ)
e8de3701
AB		 319 return -EINVAL;
320
321 buffer = vmalloc(maint_io.length);
322 if (buffer == NULL)
323 return -ENOMEM;
324 length = maint_io.length;
325
4e1016da
AB		 326 if (unlikely(copy_from_user(buffer,
327 (void __user *)(uintptr_t)maint_io.buffer, length))) {
e8de3701
AB		 328 ret = -EFAULT;
329 goto out;
330 }
331
332 offset = maint_io.offset;
333 length /= sizeof(u32);
334
335 for (i = 0; i < length; i++) {
336 if (local)
337 ret = __rio_local_write_config_32(mport,
338 offset, buffer[i]);
339 else
340 ret = rio_mport_write_config_32(mport, maint_io.rioid,
341 maint_io.hopcount,
342 offset, buffer[i]);
343 if (ret)
344 goto out;
345
346 offset += 4;
347 }
348
349out:
350 vfree(buffer);
351 return ret;
352}
353
354
355/*
356 * Inbound/outbound memory mapping functions
357 */
358static int
359rio_mport_create_outbound_mapping(struct mport_dev *md, struct file *filp,
4e1016da 360 u16 rioid, u64 raddr, u32 size,
e8de3701
AB		 361 dma_addr_t *paddr)
362{
363 struct rio_mport *mport = md->mport;
364 struct rio_mport_mapping *map;
365 int ret;
366
367 rmcd_debug(OBW, "did=%d ra=0x%llx sz=0x%x", rioid, raddr, size);
368
4e1016da 369 map = kzalloc(sizeof(*map), GFP_KERNEL);
e8de3701
AB		 370 if (map == NULL)
371 return -ENOMEM;
372
373 ret = rio_map_outb_region(mport, rioid, raddr, size, 0, paddr);
374 if (ret < 0)
375 goto err_map_outb;
376
377 map->dir = MAP_OUTBOUND;
378 map->rioid = rioid;
379 map->rio_addr = raddr;
380 map->size = size;
381 map->phys_addr = *paddr;
382 map->filp = filp;
383 map->md = md;
384 kref_init(&map->ref);
385 list_add_tail(&map->node, &md->mappings);
386 return 0;
387err_map_outb:
388 kfree(map);
389 return ret;
390}
391
392static int
393rio_mport_get_outbound_mapping(struct mport_dev *md, struct file *filp,
4e1016da 394 u16 rioid, u64 raddr, u32 size,
e8de3701
AB		 395 dma_addr_t *paddr)
396{
397 struct rio_mport_mapping *map;
398 int err = -ENOMEM;
399
400 mutex_lock(&md->buf_mutex);
401 list_for_each_entry(map, &md->mappings, node) {
402 if (map->dir != MAP_OUTBOUND)
403 continue;
404 if (rioid == map->rioid &&
405 raddr == map->rio_addr && size == map->size) {
406 *paddr = map->phys_addr;
407 err = 0;
408 break;
409 } else if (rioid == map->rioid &&
410 raddr < (map->rio_addr + map->size - 1) &&
411 (raddr + size) > map->rio_addr) {
412 err = -EBUSY;
413 break;
414 }
415 }
416
417 /* If not found, create new */
418 if (err == -ENOMEM)
419 err = rio_mport_create_outbound_mapping(md, filp, rioid, raddr,
420 size, paddr);
421 mutex_unlock(&md->buf_mutex);
422 return err;
423}
424
425static int rio_mport_obw_map(struct file *filp, void __user *arg)
426{
427 struct mport_cdev_priv *priv = filp->private_data;
428 struct mport_dev *data = priv->md;
429 struct rio_mmap map;
430 dma_addr_t paddr;
431 int ret;
432
4e1016da 433 if (unlikely(copy_from_user(&map, arg, sizeof(map))))
e8de3701
AB		 434 return -EFAULT;
435
436 rmcd_debug(OBW, "did=%d ra=0x%llx sz=0x%llx",
437 map.rioid, map.rio_addr, map.length);
438
439 ret = rio_mport_get_outbound_mapping(data, filp, map.rioid,
440 map.rio_addr, map.length, &paddr);
441 if (ret < 0) {
442 rmcd_error("Failed to set OBW err= %d", ret);
443 return ret;
444 }
445
446 map.handle = paddr;
447
4e1016da 448 if (unlikely(copy_to_user(arg, &map, sizeof(map))))
e8de3701
AB		 449 return -EFAULT;
450 return 0;
451}
452
453/*
454 * rio_mport_obw_free() - unmap an OutBound Window from RapidIO address space
455 *
456 * @priv: driver private data
457 * @arg: buffer handle returned by allocation routine
458 */
459static int rio_mport_obw_free(struct file *filp, void __user *arg)
460{
461 struct mport_cdev_priv *priv = filp->private_data;
462 struct mport_dev *md = priv->md;
463 u64 handle;
464 struct rio_mport_mapping *map, *_map;
465
466 if (!md->mport->ops->unmap_outb)
467 return -EPROTONOSUPPORT;
468
4e1016da 469 if (copy_from_user(&handle, arg, sizeof(handle)))
e8de3701
AB		 470 return -EFAULT;
471
472 rmcd_debug(OBW, "h=0x%llx", handle);
473
474 mutex_lock(&md->buf_mutex);
475 list_for_each_entry_safe(map, _map, &md->mappings, node) {
476 if (map->dir == MAP_OUTBOUND && map->phys_addr == handle) {
477 if (map->filp == filp) {
478 rmcd_debug(OBW, "kref_put h=0x%llx", handle);
479 map->filp = NULL;
480 kref_put(&map->ref, mport_release_mapping);
481 }
482 break;
483 }
484 }
485 mutex_unlock(&md->buf_mutex);
486
487 return 0;
488}
489
490/*
491 * maint_hdid_set() - Set the host Device ID
492 * @priv: driver private data
493 * @arg: Device Id
494 */
495static int maint_hdid_set(struct mport_cdev_priv *priv, void __user *arg)
496{
497 struct mport_dev *md = priv->md;
4e1016da 498 u16 hdid;
e8de3701 499
4e1016da 500 if (copy_from_user(&hdid, arg, sizeof(hdid)))
e8de3701
AB		 501 return -EFAULT;
502
503 md->mport->host_deviceid = hdid;
504 md->properties.hdid = hdid;
505 rio_local_set_device_id(md->mport, hdid);
506
507 rmcd_debug(MPORT, "Set host device Id to %d", hdid);
508
509 return 0;
510}
511
512/*
513 * maint_comptag_set() - Set the host Component Tag
514 * @priv: driver private data
515 * @arg: Component Tag
516 */
517static int maint_comptag_set(struct mport_cdev_priv *priv, void __user *arg)
518{
519 struct mport_dev *md = priv->md;
4e1016da 520 u32 comptag;
e8de3701 521
4e1016da 522 if (copy_from_user(&comptag, arg, sizeof(comptag)))
e8de3701
AB		 523 return -EFAULT;
524
525 rio_local_write_config_32(md->mport, RIO_COMPONENT_TAG_CSR, comptag);
526
527 rmcd_debug(MPORT, "Set host Component Tag to %d", comptag);
528
529 return 0;
530}
531
532#ifdef CONFIG_RAPIDIO_DMA_ENGINE
533
534struct mport_dma_req {
bbd876ad 535 struct kref refcount;
e8de3701
AB		 536 struct list_head node;
537 struct file *filp;
538 struct mport_cdev_priv *priv;
539 enum rio_transfer_sync sync;
540 struct sg_table sgt;
541 struct page **page_list;
542 unsigned int nr_pages;
543 struct rio_mport_mapping *map;
544 struct dma_chan *dmach;
545 enum dma_data_direction dir;
546 dma_cookie_t cookie;
547 enum dma_status status;
548 struct completion req_comp;
549};
550
e8de3701
AB		 551static void mport_release_def_dma(struct kref *dma_ref)
552{
553 struct mport_dev *md =
554 container_of(dma_ref, struct mport_dev, dma_ref);
555
556 rmcd_debug(EXIT, "DMA_%d", md->dma_chan->chan_id);
557 rio_release_dma(md->dma_chan);
558 md->dma_chan = NULL;
559}
560
561static void mport_release_dma(struct kref *dma_ref)
562{
563 struct mport_cdev_priv *priv =
564 container_of(dma_ref, struct mport_cdev_priv, dma_ref);
565
566 rmcd_debug(EXIT, "DMA_%d", priv->dmach->chan_id);
567 complete(&priv->comp);
568}
569
bbd876ad 570static void dma_req_free(struct kref *ref)
e8de3701 571{
bbd876ad
IN		 572 struct mport_dma_req *req = container_of(ref, struct mport_dma_req,
573 refcount);
e8de3701 574 struct mport_cdev_priv *priv = req->priv;
e8de3701
AB		 575
576 dma_unmap_sg(req->dmach->device->dev,
577 req->sgt.sgl, req->sgt.nents, req->dir);
578 sg_free_table(&req->sgt);
579 if (req->page_list) {
67446283 580 unpin_user_pages(req->page_list, req->nr_pages);
e8de3701
AB		 581 kfree(req->page_list);
582 }
583
584 if (req->map) {
585 mutex_lock(&req->map->md->buf_mutex);
586 kref_put(&req->map->ref, mport_release_mapping);
587 mutex_unlock(&req->map->md->buf_mutex);
588 }
589
590 kref_put(&priv->dma_ref, mport_release_dma);
591
592 kfree(req);
593}
594
595static void dma_xfer_callback(void *param)
596{
597 struct mport_dma_req *req = (struct mport_dma_req *)param;
598 struct mport_cdev_priv *priv = req->priv;
599
600 req->status = dma_async_is_tx_complete(priv->dmach, req->cookie,
601 NULL, NULL);
602 complete(&req->req_comp);
bbd876ad 603 kref_put(&req->refcount, dma_req_free);
e8de3701
AB		 604}
605
606/*
607 * prep_dma_xfer() - Configure and send request to DMAengine to prepare DMA
608 * transfer object.
609 * Returns pointer to DMA transaction descriptor allocated by DMA driver on
610 * success or ERR_PTR (and/or NULL) if failed. Caller must check returned
611 * non-NULL pointer using IS_ERR macro.
612 */
613static struct dma_async_tx_descriptor
614*prep_dma_xfer(struct dma_chan *chan, struct rio_transfer_io *transfer,
615 struct sg_table *sgt, int nents, enum dma_transfer_direction dir,
616 enum dma_ctrl_flags flags)
617{
618 struct rio_dma_data tx_data;
619
620 tx_data.sg = sgt->sgl;
621 tx_data.sg_len = nents;
622 tx_data.rio_addr_u = 0;
623 tx_data.rio_addr = transfer->rio_addr;
624 if (dir == DMA_MEM_TO_DEV) {
625 switch (transfer->method) {
626 case RIO_EXCHANGE_NWRITE:
627 tx_data.wr_type = RDW_ALL_NWRITE;
628 break;
629 case RIO_EXCHANGE_NWRITE_R_ALL:
630 tx_data.wr_type = RDW_ALL_NWRITE_R;
631 break;
632 case RIO_EXCHANGE_NWRITE_R:
633 tx_data.wr_type = RDW_LAST_NWRITE_R;
634 break;
635 case RIO_EXCHANGE_DEFAULT:
636 tx_data.wr_type = RDW_DEFAULT;
637 break;
638 default:
639 return ERR_PTR(-EINVAL);
640 }
641 }
642
643 return rio_dma_prep_xfer(chan, transfer->rioid, &tx_data, dir, flags);
644}
645
646/* Request DMA channel associated with this mport device.
647 * Try to request DMA channel for every new process that opened given
648 * mport. If a new DMA channel is not available use default channel
649 * which is the first DMA channel opened on mport device.
650 */
651static int get_dma_channel(struct mport_cdev_priv *priv)
652{
653 mutex_lock(&priv->dma_lock);
654 if (!priv->dmach) {
655 priv->dmach = rio_request_mport_dma(priv->md->mport);
656 if (!priv->dmach) {
657 /* Use default DMA channel if available */
658 if (priv->md->dma_chan) {
659 priv->dmach = priv->md->dma_chan;
660 kref_get(&priv->md->dma_ref);
661 } else {
662 rmcd_error("Failed to get DMA channel");
663 mutex_unlock(&priv->dma_lock);
664 return -ENODEV;
665 }
666 } else if (!priv->md->dma_chan) {
667 /* Register default DMA channel if we do not have one */
668 priv->md->dma_chan = priv->dmach;
669 kref_init(&priv->md->dma_ref);
670 rmcd_debug(DMA, "Register DMA_chan %d as default",
671 priv->dmach->chan_id);
672 }
673
674 kref_init(&priv->dma_ref);
675 init_completion(&priv->comp);
676 }
677
678 kref_get(&priv->dma_ref);
679 mutex_unlock(&priv->dma_lock);
680 return 0;
681}
682
683static void put_dma_channel(struct mport_cdev_priv *priv)
684{
685 kref_put(&priv->dma_ref, mport_release_dma);
686}
687
688/*
689 * DMA transfer functions
690 */
691static int do_dma_request(struct mport_dma_req *req,
692 struct rio_transfer_io *xfer,
693 enum rio_transfer_sync sync, int nents)
694{
695 struct mport_cdev_priv *priv;
696 struct sg_table *sgt;
697 struct dma_chan *chan;
698 struct dma_async_tx_descriptor *tx;
699 dma_cookie_t cookie;
700 unsigned long tmo = msecs_to_jiffies(dma_timeout);
701 enum dma_transfer_direction dir;
702 long wret;
703 int ret = 0;
704
705 priv = req->priv;
706 sgt = &req->sgt;
707
708 chan = priv->dmach;
709 dir = (req->dir == DMA_FROM_DEVICE) ? DMA_DEV_TO_MEM : DMA_MEM_TO_DEV;
710
711 rmcd_debug(DMA, "%s(%d) uses %s for DMA_%s",
712 current->comm, task_pid_nr(current),
713 dev_name(&chan->dev->device),
714 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE");
715
716 /* Initialize DMA transaction request */
717 tx = prep_dma_xfer(chan, xfer, sgt, nents, dir,
718 DMA_CTRL_ACK | DMA_PREP_INTERRUPT);
719
720 if (!tx) {
721 rmcd_debug(DMA, "prep error for %s A:0x%llx L:0x%llx",
722 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE",
723 xfer->rio_addr, xfer->length);
724 ret = -EIO;
725 goto err_out;
726 } else if (IS_ERR(tx)) {
727 ret = PTR_ERR(tx);
728 rmcd_debug(DMA, "prep error %d for %s A:0x%llx L:0x%llx", ret,
729 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE",
730 xfer->rio_addr, xfer->length);
731 goto err_out;
732 }
733
bbd876ad 734 tx->callback = dma_xfer_callback;
e8de3701
AB		 735 tx->callback_param = req;
736
e8de3701 737 req->status = DMA_IN_PROGRESS;
bbd876ad 738 kref_get(&req->refcount);
e8de3701
AB		 739
740 cookie = dmaengine_submit(tx);
741 req->cookie = cookie;
742
743 rmcd_debug(DMA, "pid=%d DMA_%s tx_cookie = %d", task_pid_nr(current),
744 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", cookie);
745
746 if (dma_submit_error(cookie)) {
747 rmcd_error("submit err=%d (addr:0x%llx len:0x%llx)",
748 cookie, xfer->rio_addr, xfer->length);
bbd876ad 749 kref_put(&req->refcount, dma_req_free);
e8de3701
AB		 750 ret = -EIO;
751 goto err_out;
752 }
753
754 dma_async_issue_pending(chan);
755
756 if (sync == RIO_TRANSFER_ASYNC) {
757 spin_lock(&priv->req_lock);
758 list_add_tail(&req->node, &priv->async_list);
759 spin_unlock(&priv->req_lock);
760 return cookie;
761 } else if (sync == RIO_TRANSFER_FAF)
762 return 0;
763
764 wret = wait_for_completion_interruptible_timeout(&req->req_comp, tmo);
765
766 if (wret == 0) {
767 /* Timeout on wait occurred */
768 rmcd_error("%s(%d) timed out waiting for DMA_%s %d",
769 current->comm, task_pid_nr(current),
770 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", cookie);
771 return -ETIMEDOUT;
772 } else if (wret == -ERESTARTSYS) {
773 /* Wait_for_completion was interrupted by a signal but DMA may
774 * be in progress
775 */
776 rmcd_error("%s(%d) wait for DMA_%s %d was interrupted",
777 current->comm, task_pid_nr(current),
778 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE", cookie);
779 return -EINTR;
780 }
781
782 if (req->status != DMA_COMPLETE) {
783 /* DMA transaction completion was signaled with error */
784 rmcd_error("%s(%d) DMA_%s %d completed with status %d (ret=%d)",
785 current->comm, task_pid_nr(current),
786 (dir == DMA_DEV_TO_MEM)?"READ":"WRITE",
787 cookie, req->status, ret);
788 ret = -EIO;
789 }
790
791err_out:
792 return ret;
793}
794
795/*
796 * rio_dma_transfer() - Perform RapidIO DMA data transfer to/from
797 * the remote RapidIO device
798 * @filp: file pointer associated with the call
799 * @transfer_mode: DMA transfer mode
800 * @sync: synchronization mode
801 * @dir: DMA transfer direction (DMA_MEM_TO_DEV = write OR
802 * DMA_DEV_TO_MEM = read)
803 * @xfer: data transfer descriptor structure
804 */
805static int
4e1016da 806rio_dma_transfer(struct file *filp, u32 transfer_mode,
e8de3701
AB		 807 enum rio_transfer_sync sync, enum dma_data_direction dir,
808 struct rio_transfer_io *xfer)
809{
810 struct mport_cdev_priv *priv = filp->private_data;
811 unsigned long nr_pages = 0;
812 struct page **page_list = NULL;
813 struct mport_dma_req *req;
814 struct mport_dev *md = priv->md;
815 struct dma_chan *chan;
67446283 816 int ret;
e8de3701
AB		 817 int nents;
818
819 if (xfer->length == 0)
820 return -EINVAL;
821 req = kzalloc(sizeof(*req), GFP_KERNEL);
822 if (!req)
823 return -ENOMEM;
824
825 ret = get_dma_channel(priv);
826 if (ret) {
827 kfree(req);
828 return ret;
829 }
c5157b76
IN		 830 chan = priv->dmach;
831
832 kref_init(&req->refcount);
833 init_completion(&req->req_comp);
834 req->dir = dir;
835 req->filp = filp;
836 req->priv = priv;
837 req->dmach = chan;
838 req->sync = sync;
e8de3701
AB		 839
840 /*
841 * If parameter loc_addr != NULL, we are transferring data from/to
842 * data buffer allocated in user-space: lock in memory user-space
843 * buffer pages and build an SG table for DMA transfer request
844 *
845 * Otherwise (loc_addr == NULL) contiguous kernel-space buffer is
846 * used for DMA data transfers: build single entry SG table using
847 * offset within the internal buffer specified by handle parameter.
848 */
849 if (xfer->loc_addr) {
c4860ad6 850 unsigned int offset;
e8de3701
AB		 851 long pinned;
852
c4860ad6 853 offset = lower_32_bits(offset_in_page(xfer->loc_addr));
e8de3701
AB		 854 nr_pages = PAGE_ALIGN(xfer->length + offset) >> PAGE_SHIFT;
855
856 page_list = kmalloc_array(nr_pages,
857 sizeof(*page_list), GFP_KERNEL);
858 if (page_list == NULL) {
859 ret = -ENOMEM;
860 goto err_req;
861 }
862
67446283 863 pinned = pin_user_pages_fast(
e8de3701 864 (unsigned long)xfer->loc_addr & PAGE_MASK,
73b0140b
IW		 865 nr_pages,
866 dir == DMA_FROM_DEVICE ? FOLL_WRITE : 0,
867 page_list);
e8de3701
AB		 868
869 if (pinned != nr_pages) {
870 if (pinned < 0) {
67446283 871 rmcd_error("pin_user_pages_fast err=%ld",
369f2679 872 pinned);
e8de3701 873 nr_pages = 0;
fa63f083 874 } else {
e8de3701
AB		 875 rmcd_error("pinned %ld out of %ld pages",
876 pinned, nr_pages);
fa63f083
SJ		 877 /*
878 * Set nr_pages up to mean "how many pages to unpin, in
879 * the error handler:
880 */
881 nr_pages = pinned;
882 }
e8de3701
AB		 883 ret = -EFAULT;
884 goto err_pg;
885 }
886
887 ret = sg_alloc_table_from_pages(&req->sgt, page_list, nr_pages,
888 offset, xfer->length, GFP_KERNEL);
889 if (ret) {
890 rmcd_error("sg_alloc_table failed with err=%d", ret);
891 goto err_pg;
892 }
893
894 req->page_list = page_list;
895 req->nr_pages = nr_pages;
896 } else {
897 dma_addr_t baddr;
898 struct rio_mport_mapping *map;
899
900 baddr = (dma_addr_t)xfer->handle;
901
902 mutex_lock(&md->buf_mutex);
903 list_for_each_entry(map, &md->mappings, node) {
904 if (baddr >= map->phys_addr &&
905 baddr < (map->phys_addr + map->size)) {
906 kref_get(&map->ref);
907 req->map = map;
908 break;
909 }
910 }
911 mutex_unlock(&md->buf_mutex);
912
913 if (req->map == NULL) {
914 ret = -ENOMEM;
915 goto err_req;
916 }
917
918 if (xfer->length + xfer->offset > map->size) {
919 ret = -EINVAL;
920 goto err_req;
921 }
922
923 ret = sg_alloc_table(&req->sgt, 1, GFP_KERNEL);
924 if (unlikely(ret)) {
925 rmcd_error("sg_alloc_table failed for internal buf");
926 goto err_req;
927 }
928
929 sg_set_buf(req->sgt.sgl,
930 map->virt_addr + (baddr - map->phys_addr) +
931 xfer->offset, xfer->length);
932 }
933
e8de3701
AB		 934 nents = dma_map_sg(chan->device->dev,
935 req->sgt.sgl, req->sgt.nents, dir);
c46d90cd 936 if (nents == 0) {
e8de3701 937 rmcd_error("Failed to map SG list");
b1402dcb
CJ		 938 ret = -EFAULT;
939 goto err_pg;
e8de3701
AB		 940 }
941
942 ret = do_dma_request(req, xfer, sync, nents);
943
944 if (ret >= 0) {
bbd876ad
IN		 945 if (sync == RIO_TRANSFER_ASYNC)
946 return ret; /* return ASYNC cookie */
947 } else {
948 rmcd_debug(DMA, "do_dma_request failed with err=%d", ret);
e8de3701
AB		 949 }
950
e8de3701 951err_pg:
bbd876ad 952 if (!req->page_list) {
67446283 953 unpin_user_pages(page_list, nr_pages);
e8de3701
AB		 954 kfree(page_list);
955 }
956err_req:
bbd876ad 957 kref_put(&req->refcount, dma_req_free);
e8de3701
AB		 958 return ret;
959}
960
961static int rio_mport_transfer_ioctl(struct file *filp, void __user *arg)
962{
963 struct mport_cdev_priv *priv = filp->private_data;
964 struct rio_transaction transaction;
965 struct rio_transfer_io *transfer;
966 enum dma_data_direction dir;
967 int i, ret = 0;
968
969 if (unlikely(copy_from_user(&transaction, arg, sizeof(transaction))))
970 return -EFAULT;
971
4e1016da 972 if (transaction.count != 1) /* only single transfer for now */
e8de3701
AB		 973 return -EINVAL;
974
975 if ((transaction.transfer_mode &
976 priv->md->properties.transfer_mode) == 0)
977 return -ENODEV;
978
42bc47b3 979 transfer = vmalloc(array_size(sizeof(*transfer), transaction.count));
e8de3701
AB		 980 if (!transfer)
981 return -ENOMEM;
982
4e1016da
AB		 983 if (unlikely(copy_from_user(transfer,
984 (void __user *)(uintptr_t)transaction.block,
d7137549 985 array_size(sizeof(*transfer), transaction.count)))) {
e8de3701
AB		 986 ret = -EFAULT;
987 goto out_free;
988 }
989
990 dir = (transaction.dir == RIO_TRANSFER_DIR_READ) ?
991 DMA_FROM_DEVICE : DMA_TO_DEVICE;
992 for (i = 0; i < transaction.count && ret == 0; i++)
993 ret = rio_dma_transfer(filp, transaction.transfer_mode,
994 transaction.sync, dir, &transfer[i]);
995
4e1016da
AB		 996 if (unlikely(copy_to_user((void __user *)(uintptr_t)transaction.block,
997 transfer,
d7137549 998 array_size(sizeof(*transfer), transaction.count))))
e8de3701
AB		 999 ret = -EFAULT;
1000
1001out_free:
1002 vfree(transfer);
1003
1004 return ret;
1005}
1006
1007static int rio_mport_wait_for_async_dma(struct file *filp, void __user *arg)
1008{
1009 struct mport_cdev_priv *priv;
e8de3701
AB		 1010 struct rio_async_tx_wait w_param;
1011 struct mport_dma_req *req;
1012 dma_cookie_t cookie;
1013 unsigned long tmo;
1014 long wret;
1015 int found = 0;
1016 int ret;
1017
1018 priv = (struct mport_cdev_priv *)filp->private_data;
e8de3701
AB		 1019
1020 if (unlikely(copy_from_user(&w_param, arg, sizeof(w_param))))
1021 return -EFAULT;
1022
1023 cookie = w_param.token;
1024 if (w_param.timeout)
1025 tmo = msecs_to_jiffies(w_param.timeout);
1026 else /* Use default DMA timeout */
1027 tmo = msecs_to_jiffies(dma_timeout);
1028
1029 spin_lock(&priv->req_lock);
1030 list_for_each_entry(req, &priv->async_list, node) {
1031 if (req->cookie == cookie) {
1032 list_del(&req->node);
1033 found = 1;
1034 break;
1035 }
1036 }
1037 spin_unlock(&priv->req_lock);
1038
1039 if (!found)
1040 return -EAGAIN;
1041
1042 wret = wait_for_completion_interruptible_timeout(&req->req_comp, tmo);
1043
1044 if (wret == 0) {
1045 /* Timeout on wait occurred */
1046 rmcd_error("%s(%d) timed out waiting for ASYNC DMA_%s",
1047 current->comm, task_pid_nr(current),
1048 (req->dir == DMA_FROM_DEVICE)?"READ":"WRITE");
1049 ret = -ETIMEDOUT;
1050 goto err_tmo;
1051 } else if (wret == -ERESTARTSYS) {
1052 /* Wait_for_completion was interrupted by a signal but DMA may
1053 * be still in progress
1054 */
1055 rmcd_error("%s(%d) wait for ASYNC DMA_%s was interrupted",
1056 current->comm, task_pid_nr(current),
1057 (req->dir == DMA_FROM_DEVICE)?"READ":"WRITE");
1058 ret = -EINTR;
1059 goto err_tmo;
1060 }
1061
1062 if (req->status != DMA_COMPLETE) {
1063 /* DMA transaction completion signaled with transfer error */
1064 rmcd_error("%s(%d) ASYNC DMA_%s completion with status %d",
1065 current->comm, task_pid_nr(current),
1066 (req->dir == DMA_FROM_DEVICE)?"READ":"WRITE",
1067 req->status);
1068 ret = -EIO;
1069 } else
1070 ret = 0;
1071
1072 if (req->status != DMA_IN_PROGRESS && req->status != DMA_PAUSED)
bbd876ad 1073 kref_put(&req->refcount, dma_req_free);
e8de3701
AB		 1074
1075 return ret;
1076
1077err_tmo:
1078 /* Return request back into async queue */
1079 spin_lock(&priv->req_lock);
1080 list_add_tail(&req->node, &priv->async_list);
1081 spin_unlock(&priv->req_lock);
1082 return ret;
1083}
1084
1085static int rio_mport_create_dma_mapping(struct mport_dev *md, struct file *filp,
4e1016da 1086 u64 size, struct rio_mport_mapping **mapping)
e8de3701
AB		 1087{
1088 struct rio_mport_mapping *map;
1089
4e1016da 1090 map = kzalloc(sizeof(*map), GFP_KERNEL);
e8de3701
AB		 1091 if (map == NULL)
1092 return -ENOMEM;
1093
1094 map->virt_addr = dma_alloc_coherent(md->mport->dev.parent, size,
1095 &map->phys_addr, GFP_KERNEL);
1096 if (map->virt_addr == NULL) {
1097 kfree(map);
1098 return -ENOMEM;
1099 }
1100
1101 map->dir = MAP_DMA;
1102 map->size = size;
1103 map->filp = filp;
1104 map->md = md;
1105 kref_init(&map->ref);
1106 mutex_lock(&md->buf_mutex);
1107 list_add_tail(&map->node, &md->mappings);
1108 mutex_unlock(&md->buf_mutex);
1109 *mapping = map;
1110
1111 return 0;
1112}
1113
1114static int rio_mport_alloc_dma(struct file *filp, void __user *arg)
1115{
1116 struct mport_cdev_priv *priv = filp->private_data;
1117 struct mport_dev *md = priv->md;
1118 struct rio_dma_mem map;
1119 struct rio_mport_mapping *mapping = NULL;
1120 int ret;
1121
4e1016da 1122 if (unlikely(copy_from_user(&map, arg, sizeof(map))))
e8de3701
AB		 1123 return -EFAULT;
1124
1125 ret = rio_mport_create_dma_mapping(md, filp, map.length, &mapping);
1126 if (ret)
1127 return ret;
1128
1129 map.dma_handle = mapping->phys_addr;
1130
4e1016da 1131 if (unlikely(copy_to_user(arg, &map, sizeof(map)))) {
e8de3701
AB		 1132 mutex_lock(&md->buf_mutex);
1133 kref_put(&mapping->ref, mport_release_mapping);
1134 mutex_unlock(&md->buf_mutex);
1135 return -EFAULT;
1136 }
1137
1138 return 0;
1139}
1140
1141static int rio_mport_free_dma(struct file *filp, void __user *arg)
1142{
1143 struct mport_cdev_priv *priv = filp->private_data;
1144 struct mport_dev *md = priv->md;
1145 u64 handle;
1146 int ret = -EFAULT;
1147 struct rio_mport_mapping *map, *_map;
1148
4e1016da 1149 if (copy_from_user(&handle, arg, sizeof(handle)))
e8de3701
AB		 1150 return -EFAULT;
1151 rmcd_debug(EXIT, "filp=%p", filp);
1152
1153 mutex_lock(&md->buf_mutex);
1154 list_for_each_entry_safe(map, _map, &md->mappings, node) {
1155 if (map->dir == MAP_DMA && map->phys_addr == handle &&
1156 map->filp == filp) {
1157 kref_put(&map->ref, mport_release_mapping);
1158 ret = 0;
1159 break;
1160 }
1161 }
1162 mutex_unlock(&md->buf_mutex);
1163
1164 if (ret == -EFAULT) {
1165 rmcd_debug(DMA, "ERR no matching mapping");
1166 return ret;
1167 }
1168
1169 return 0;
1170}
1171#else
1172static int rio_mport_transfer_ioctl(struct file *filp, void *arg)
1173{
1174 return -ENODEV;
1175}
1176
1177static int rio_mport_wait_for_async_dma(struct file *filp, void __user *arg)
1178{
1179 return -ENODEV;
1180}
1181
1182static int rio_mport_alloc_dma(struct file *filp, void __user *arg)
1183{
1184 return -ENODEV;
1185}
1186
1187static int rio_mport_free_dma(struct file *filp, void __user *arg)
1188{
1189 return -ENODEV;
1190}
1191#endif /* CONFIG_RAPIDIO_DMA_ENGINE */
1192
1193/*
1194 * Inbound/outbound memory mapping functions
1195 */
1196
1197static int
1198rio_mport_create_inbound_mapping(struct mport_dev *md, struct file *filp,
4e1016da 1199 u64 raddr, u64 size,
e8de3701
AB		 1200 struct rio_mport_mapping **mapping)
1201{
1202 struct rio_mport *mport = md->mport;
1203 struct rio_mport_mapping *map;
1204 int ret;
1205
4e1016da
AB		 1206 /* rio_map_inb_region() accepts u32 size */
1207 if (size > 0xffffffff)
1208 return -EINVAL;
1209
1210 map = kzalloc(sizeof(*map), GFP_KERNEL);
e8de3701
AB		 1211 if (map == NULL)
1212 return -ENOMEM;
1213
1214 map->virt_addr = dma_alloc_coherent(mport->dev.parent, size,
1215 &map->phys_addr, GFP_KERNEL);
1216 if (map->virt_addr == NULL) {
1217 ret = -ENOMEM;
1218 goto err_dma_alloc;
1219 }
1220
1221 if (raddr == RIO_MAP_ANY_ADDR)
1222 raddr = map->phys_addr;
4e1016da 1223 ret = rio_map_inb_region(mport, map->phys_addr, raddr, (u32)size, 0);
e8de3701
AB		 1224 if (ret < 0)
1225 goto err_map_inb;
1226
1227 map->dir = MAP_INBOUND;
1228 map->rio_addr = raddr;
1229 map->size = size;
1230 map->filp = filp;
1231 map->md = md;
1232 kref_init(&map->ref);
1233 mutex_lock(&md->buf_mutex);
1234 list_add_tail(&map->node, &md->mappings);
1235 mutex_unlock(&md->buf_mutex);
1236 *mapping = map;
1237 return 0;
1238
1239err_map_inb:
1240 dma_free_coherent(mport->dev.parent, size,
1241 map->virt_addr, map->phys_addr);
1242err_dma_alloc:
1243 kfree(map);
1244 return ret;
1245}
1246
1247static int
1248rio_mport_get_inbound_mapping(struct mport_dev *md, struct file *filp,
4e1016da 1249 u64 raddr, u64 size,
e8de3701
AB		 1250 struct rio_mport_mapping **mapping)
1251{
1252 struct rio_mport_mapping *map;
1253 int err = -ENOMEM;
1254
1255 if (raddr == RIO_MAP_ANY_ADDR)
1256 goto get_new;
1257
1258 mutex_lock(&md->buf_mutex);
1259 list_for_each_entry(map, &md->mappings, node) {
1260 if (map->dir != MAP_INBOUND)
1261 continue;
1262 if (raddr == map->rio_addr && size == map->size) {
1263 /* allow exact match only */
1264 *mapping = map;
1265 err = 0;
1266 break;
1267 } else if (raddr < (map->rio_addr + map->size - 1) &&
1268 (raddr + size) > map->rio_addr) {
1269 err = -EBUSY;
1270 break;
1271 }
1272 }
1273 mutex_unlock(&md->buf_mutex);
1274
1275 if (err != -ENOMEM)
1276 return err;
1277get_new:
1278 /* not found, create new */
1279 return rio_mport_create_inbound_mapping(md, filp, raddr, size, mapping);
1280}
1281
1282static int rio_mport_map_inbound(struct file *filp, void __user *arg)
1283{
1284 struct mport_cdev_priv *priv = filp->private_data;
1285 struct mport_dev *md = priv->md;
1286 struct rio_mmap map;
1287 struct rio_mport_mapping *mapping = NULL;
1288 int ret;
1289
1290 if (!md->mport->ops->map_inb)
1291 return -EPROTONOSUPPORT;
4e1016da 1292 if (unlikely(copy_from_user(&map, arg, sizeof(map))))
e8de3701
AB		 1293 return -EFAULT;
1294
1295 rmcd_debug(IBW, "%s filp=%p", dev_name(&priv->md->dev), filp);
1296
1297 ret = rio_mport_get_inbound_mapping(md, filp, map.rio_addr,
1298 map.length, &mapping);
1299 if (ret)
1300 return ret;
1301
1302 map.handle = mapping->phys_addr;
1303 map.rio_addr = mapping->rio_addr;
1304
4e1016da 1305 if (unlikely(copy_to_user(arg, &map, sizeof(map)))) {
e8de3701
AB		 1306 /* Delete mapping if it was created by this request */
1307 if (ret == 0 && mapping->filp == filp) {
1308 mutex_lock(&md->buf_mutex);
1309 kref_put(&mapping->ref, mport_release_mapping);
1310 mutex_unlock(&md->buf_mutex);
1311 }
1312 return -EFAULT;
1313 }
1314
1315 return 0;
1316}
1317
1318/*
1319 * rio_mport_inbound_free() - unmap from RapidIO address space and free
1320 * previously allocated inbound DMA coherent buffer
1321 * @priv: driver private data
1322 * @arg: buffer handle returned by allocation routine
1323 */
1324static int rio_mport_inbound_free(struct file *filp, void __user *arg)
1325{
1326 struct mport_cdev_priv *priv = filp->private_data;
1327 struct mport_dev *md = priv->md;
1328 u64 handle;
1329 struct rio_mport_mapping *map, *_map;
1330
1331 rmcd_debug(IBW, "%s filp=%p", dev_name(&priv->md->dev), filp);
1332
1333 if (!md->mport->ops->unmap_inb)
1334 return -EPROTONOSUPPORT;
1335
4e1016da 1336 if (copy_from_user(&handle, arg, sizeof(handle)))
e8de3701
AB		 1337 return -EFAULT;
1338
1339 mutex_lock(&md->buf_mutex);
1340 list_for_each_entry_safe(map, _map, &md->mappings, node) {
1341 if (map->dir == MAP_INBOUND && map->phys_addr == handle) {
1342 if (map->filp == filp) {
1343 map->filp = NULL;
1344 kref_put(&map->ref, mport_release_mapping);
1345 }
1346 break;
1347 }
1348 }
1349 mutex_unlock(&md->buf_mutex);
1350
1351 return 0;
1352}
1353
1354/*
1355 * maint_port_idx_get() - Get the port index of the mport instance
1356 * @priv: driver private data
1357 * @arg: port index
1358 */
1359static int maint_port_idx_get(struct mport_cdev_priv *priv, void __user *arg)
1360{
1361 struct mport_dev *md = priv->md;
4e1016da 1362 u32 port_idx = md->mport->index;
e8de3701
AB		 1363
1364 rmcd_debug(MPORT, "port_index=%d", port_idx);
1365
1366 if (copy_to_user(arg, &port_idx, sizeof(port_idx)))
1367 return -EFAULT;
1368
1369 return 0;
1370}
1371
1372static int rio_mport_add_event(struct mport_cdev_priv *priv,
1373 struct rio_event *event)
1374{
1375 int overflow;
1376
1377 if (!(priv->event_mask & event->header))
1378 return -EACCES;
1379
1380 spin_lock(&priv->fifo_lock);
1381 overflow = kfifo_avail(&priv->event_fifo) < sizeof(*event)
1382 || kfifo_in(&priv->event_fifo, (unsigned char *)event,
1383 sizeof(*event)) != sizeof(*event);
1384 spin_unlock(&priv->fifo_lock);
1385
1386 wake_up_interruptible(&priv->event_rx_wait);
1387
1388 if (overflow) {
1389 dev_warn(&priv->md->dev, DRV_NAME ": event fifo overflow\n");
1390 return -EBUSY;
1391 }
1392
1393 return 0;
1394}
1395
1396static void rio_mport_doorbell_handler(struct rio_mport *mport, void *dev_id,
1397 u16 src, u16 dst, u16 info)
1398{
1399 struct mport_dev *data = dev_id;
1400 struct mport_cdev_priv *priv;
1401 struct rio_mport_db_filter *db_filter;
1402 struct rio_event event;
1403 int handled;
1404
1405 event.header = RIO_DOORBELL;
1406 event.u.doorbell.rioid = src;
1407 event.u.doorbell.payload = info;
1408
1409 handled = 0;
1410 spin_lock(&data->db_lock);
1411 list_for_each_entry(db_filter, &data->doorbells, data_node) {
4e1016da 1412 if (((db_filter->filter.rioid == RIO_INVALID_DESTID ||
e8de3701
AB		 1413 db_filter->filter.rioid == src)) &&
1414 info >= db_filter->filter.low &&
1415 info <= db_filter->filter.high) {
1416 priv = db_filter->priv;
1417 rio_mport_add_event(priv, &event);
1418 handled = 1;
1419 }
1420 }
1421 spin_unlock(&data->db_lock);
1422
1423 if (!handled)
1424 dev_warn(&data->dev,
1425 "%s: spurious DB received from 0x%x, info=0x%04x\n",
1426 __func__, src, info);
1427}
1428
1429static int rio_mport_add_db_filter(struct mport_cdev_priv *priv,
1430 void __user *arg)
1431{
1432 struct mport_dev *md = priv->md;
1433 struct rio_mport_db_filter *db_filter;
1434 struct rio_doorbell_filter filter;
1435 unsigned long flags;
1436 int ret;
1437
1438 if (copy_from_user(&filter, arg, sizeof(filter)))
1439 return -EFAULT;
1440
1441 if (filter.low > filter.high)
1442 return -EINVAL;
1443
1444 ret = rio_request_inb_dbell(md->mport, md, filter.low, filter.high,
1445 rio_mport_doorbell_handler);
1446 if (ret) {
1447 rmcd_error("%s failed to register IBDB, err=%d",
1448 dev_name(&md->dev), ret);
1449 return ret;
1450 }
1451
1452 db_filter = kzalloc(sizeof(*db_filter), GFP_KERNEL);
1453 if (db_filter == NULL) {
1454 rio_release_inb_dbell(md->mport, filter.low, filter.high);
1455 return -ENOMEM;
1456 }
1457
1458 db_filter->filter = filter;
1459 db_filter->priv = priv;
1460 spin_lock_irqsave(&md->db_lock, flags);
1461 list_add_tail(&db_filter->priv_node, &priv->db_filters);
1462 list_add_tail(&db_filter->data_node, &md->doorbells);
1463 spin_unlock_irqrestore(&md->db_lock, flags);
1464
1465 return 0;
1466}
1467
1468static void rio_mport_delete_db_filter(struct rio_mport_db_filter *db_filter)
1469{
1470 list_del(&db_filter->data_node);
1471 list_del(&db_filter->priv_node);
1472 kfree(db_filter);
1473}
1474
1475static int rio_mport_remove_db_filter(struct mport_cdev_priv *priv,
1476 void __user *arg)
1477{
1478 struct rio_mport_db_filter *db_filter;
1479 struct rio_doorbell_filter filter;
1480 unsigned long flags;
1481 int ret = -EINVAL;
1482
1483 if (copy_from_user(&filter, arg, sizeof(filter)))
1484 return -EFAULT;
1485
4e1016da
AB		 1486 if (filter.low > filter.high)
1487 return -EINVAL;
1488
e8de3701
AB		 1489 spin_lock_irqsave(&priv->md->db_lock, flags);
1490 list_for_each_entry(db_filter, &priv->db_filters, priv_node) {
1491 if (db_filter->filter.rioid == filter.rioid &&
1492 db_filter->filter.low == filter.low &&
1493 db_filter->filter.high == filter.high) {
1494 rio_mport_delete_db_filter(db_filter);
1495 ret = 0;
1496 break;
1497 }
1498 }
1499 spin_unlock_irqrestore(&priv->md->db_lock, flags);
1500
1501 if (!ret)
1502 rio_release_inb_dbell(priv->md->mport, filter.low, filter.high);
1503
1504 return ret;
1505}
1506
1507static int rio_mport_match_pw(union rio_pw_msg *msg,
1508 struct rio_pw_filter *filter)
1509{
1510 if ((msg->em.comptag & filter->mask) < filter->low ||
1511 (msg->em.comptag & filter->mask) > filter->high)
1512 return 0;
1513 return 1;
1514}
1515
1516static int rio_mport_pw_handler(struct rio_mport *mport, void *context,
1517 union rio_pw_msg *msg, int step)
1518{
1519 struct mport_dev *md = context;
1520 struct mport_cdev_priv *priv;
1521 struct rio_mport_pw_filter *pw_filter;
1522 struct rio_event event;
1523 int handled;
1524
1525 event.header = RIO_PORTWRITE;
1526 memcpy(event.u.portwrite.payload, msg->raw, RIO_PW_MSG_SIZE);
1527
1528 handled = 0;
1529 spin_lock(&md->pw_lock);
1530 list_for_each_entry(pw_filter, &md->portwrites, md_node) {
1531 if (rio_mport_match_pw(msg, &pw_filter->filter)) {
1532 priv = pw_filter->priv;
1533 rio_mport_add_event(priv, &event);
1534 handled = 1;
1535 }
1536 }
1537 spin_unlock(&md->pw_lock);
1538
1539 if (!handled) {
1540 printk_ratelimited(KERN_WARNING DRV_NAME
1541 ": mport%d received spurious PW from 0x%08x\n",
1542 mport->id, msg->em.comptag);
1543 }
1544
1545 return 0;
1546}
1547
1548static int rio_mport_add_pw_filter(struct mport_cdev_priv *priv,
1549 void __user *arg)
1550{
1551 struct mport_dev *md = priv->md;
1552 struct rio_mport_pw_filter *pw_filter;
1553 struct rio_pw_filter filter;
1554 unsigned long flags;
1555 int hadd = 0;
1556
1557 if (copy_from_user(&filter, arg, sizeof(filter)))
1558 return -EFAULT;
1559
1560 pw_filter = kzalloc(sizeof(*pw_filter), GFP_KERNEL);
1561 if (pw_filter == NULL)
1562 return -ENOMEM;
1563
1564 pw_filter->filter = filter;
1565 pw_filter->priv = priv;
1566 spin_lock_irqsave(&md->pw_lock, flags);
1567 if (list_empty(&md->portwrites))
1568 hadd = 1;
1569 list_add_tail(&pw_filter->priv_node, &priv->pw_filters);
1570 list_add_tail(&pw_filter->md_node, &md->portwrites);
1571 spin_unlock_irqrestore(&md->pw_lock, flags);
1572
1573 if (hadd) {
1574 int ret;
1575
1576 ret = rio_add_mport_pw_handler(md->mport, md,
1577 rio_mport_pw_handler);
1578 if (ret) {
1579 dev_err(&md->dev,
1580 "%s: failed to add IB_PW handler, err=%d\n",
1581 __func__, ret);
1582 return ret;
1583 }
1584 rio_pw_enable(md->mport, 1);
1585 }
1586
1587 return 0;
1588}
1589
1590static void rio_mport_delete_pw_filter(struct rio_mport_pw_filter *pw_filter)
1591{
1592 list_del(&pw_filter->md_node);
1593 list_del(&pw_filter->priv_node);
1594 kfree(pw_filter);
1595}
1596
1597static int rio_mport_match_pw_filter(struct rio_pw_filter *a,
1598 struct rio_pw_filter *b)
1599{
1600 if ((a->mask == b->mask) && (a->low == b->low) && (a->high == b->high))
1601 return 1;
1602 return 0;
1603}
1604
1605static int rio_mport_remove_pw_filter(struct mport_cdev_priv *priv,
1606 void __user *arg)
1607{
1608 struct mport_dev *md = priv->md;
1609 struct rio_mport_pw_filter *pw_filter;
1610 struct rio_pw_filter filter;
1611 unsigned long flags;
1612 int ret = -EINVAL;
1613 int hdel = 0;
1614
1615 if (copy_from_user(&filter, arg, sizeof(filter)))
1616 return -EFAULT;
1617
1618 spin_lock_irqsave(&md->pw_lock, flags);
1619 list_for_each_entry(pw_filter, &priv->pw_filters, priv_node) {
1620 if (rio_mport_match_pw_filter(&pw_filter->filter, &filter)) {
1621 rio_mport_delete_pw_filter(pw_filter);
1622 ret = 0;
1623 break;
1624 }
1625 }
1626
1627 if (list_empty(&md->portwrites))
1628 hdel = 1;
1629 spin_unlock_irqrestore(&md->pw_lock, flags);
1630
1631 if (hdel) {
1632 rio_del_mport_pw_handler(md->mport, priv->md,
1633 rio_mport_pw_handler);
1634 rio_pw_enable(md->mport, 0);
1635 }
1636
1637 return ret;
1638}
1639
1640/*
1641 * rio_release_dev - release routine for kernel RIO device object
1642 * @dev: kernel device object associated with a RIO device structure
1643 *
1644 * Frees a RIO device struct associated a RIO device struct.
1645 * The RIO device struct is freed.
1646 */
1647static void rio_release_dev(struct device *dev)
1648{
1649 struct rio_dev *rdev;
1650
1651 rdev = to_rio_dev(dev);
1652 pr_info(DRV_PREFIX "%s: %s\n", __func__, rio_name(rdev));
1653 kfree(rdev);
1654}
1655
1656
1657static void rio_release_net(struct device *dev)
1658{
1659 struct rio_net *net;
1660
1661 net = to_rio_net(dev);
1662 rmcd_debug(RDEV, "net_%d", net->id);
1663 kfree(net);
1664}
1665
1666
1667/*
1668 * rio_mport_add_riodev - creates a kernel RIO device object
1669 *
1670 * Allocates a RIO device data structure and initializes required fields based
1671 * on device's configuration space contents.
1672 * If the device has switch capabilities, then a switch specific portion is
1673 * allocated and configured.
1674 */
1675static int rio_mport_add_riodev(struct mport_cdev_priv *priv,
1676 void __user *arg)
1677{
1678 struct mport_dev *md = priv->md;
1679 struct rio_rdev_info dev_info;
1680 struct rio_dev *rdev;
1681 struct rio_switch *rswitch = NULL;
1682 struct rio_mport *mport;
85094c05 1683 struct device *dev;
e8de3701
AB		 1684 size_t size;
1685 u32 rval;
1686 u32 swpinfo = 0;
1687 u16 destid;
1688 u8 hopcount;
1689 int err;
1690
1691 if (copy_from_user(&dev_info, arg, sizeof(dev_info)))
1692 return -EFAULT;
156e0b1a 1693 dev_info.name[sizeof(dev_info.name) - 1] = '\0';
e8de3701
AB		 1694
1695 rmcd_debug(RDEV, "name:%s ct:0x%x did:0x%x hc:0x%x", dev_info.name,
1696 dev_info.comptag, dev_info.destid, dev_info.hopcount);
1697
85094c05
JX		 1698 dev = bus_find_device_by_name(&rio_bus_type, NULL, dev_info.name);
1699 if (dev) {
e8de3701 1700 rmcd_debug(RDEV, "device %s already exists", dev_info.name);
85094c05 1701 put_device(dev);
e8de3701
AB		 1702 return -EEXIST;
1703 }
1704
4e1016da 1705 size = sizeof(*rdev);
e8de3701 1706 mport = md->mport;
4e1016da
AB		 1707 destid = dev_info.destid;
1708 hopcount = dev_info.hopcount;
e8de3701
AB		 1709
1710 if (rio_mport_read_config_32(mport, destid, hopcount,
1711 RIO_PEF_CAR, &rval))
1712 return -EIO;
1713
1714 if (rval & RIO_PEF_SWITCH) {
1715 rio_mport_read_config_32(mport, destid, hopcount,
1716 RIO_SWP_INFO_CAR, &swpinfo);
216ec27f 1717 size += struct_size(rswitch, nextdev, RIO_GET_TOTAL_PORTS(swpinfo));
e8de3701
AB		 1718 }
1719
1720 rdev = kzalloc(size, GFP_KERNEL);
1721 if (rdev == NULL)
1722 return -ENOMEM;
1723
1724 if (mport->net == NULL) {
1725 struct rio_net *net;
1726
1727 net = rio_alloc_net(mport);
1728 if (!net) {
1729 err = -ENOMEM;
1730 rmcd_debug(RDEV, "failed to allocate net object");
1731 goto cleanup;
1732 }
1733
1734 net->id = mport->id;
1735 net->hport = mport;
1736 dev_set_name(&net->dev, "rnet_%d", net->id);
1737 net->dev.parent = &mport->dev;
1738 net->dev.release = rio_release_net;
1739 err = rio_add_net(net);
1740 if (err) {
1741 rmcd_debug(RDEV, "failed to register net, err=%d", err);
1742 kfree(net);
1743 goto cleanup;
1744 }
1745 }
1746
1747 rdev->net = mport->net;
1748 rdev->pef = rval;
1749 rdev->swpinfo = swpinfo;
1750 rio_mport_read_config_32(mport, destid, hopcount,
1751 RIO_DEV_ID_CAR, &rval);
1752 rdev->did = rval >> 16;
1753 rdev->vid = rval & 0xffff;
1754 rio_mport_read_config_32(mport, destid, hopcount, RIO_DEV_INFO_CAR,
1755 &rdev->device_rev);
1756 rio_mport_read_config_32(mport, destid, hopcount, RIO_ASM_ID_CAR,
1757 &rval);
1758 rdev->asm_did = rval >> 16;
1759 rdev->asm_vid = rval & 0xffff;
1760 rio_mport_read_config_32(mport, destid, hopcount, RIO_ASM_INFO_CAR,
1761 &rval);
1762 rdev->asm_rev = rval >> 16;
1763
1764 if (rdev->pef & RIO_PEF_EXT_FEATURES) {
1765 rdev->efptr = rval & 0xffff;
1766 rdev->phys_efptr = rio_mport_get_physefb(mport, 0, destid,
1ae842de 1767 hopcount, &rdev->phys_rmap);
e8de3701
AB		 1768
1769 rdev->em_efptr = rio_mport_get_feature(mport, 0, destid,
1770 hopcount, RIO_EFB_ERR_MGMNT);
1771 }
1772
1773 rio_mport_read_config_32(mport, destid, hopcount, RIO_SRC_OPS_CAR,
1774 &rdev->src_ops);
1775 rio_mport_read_config_32(mport, destid, hopcount, RIO_DST_OPS_CAR,
1776 &rdev->dst_ops);
1777
1778 rdev->comp_tag = dev_info.comptag;
1779 rdev->destid = destid;
1780 /* hopcount is stored as specified by a caller, regardles of EP or SW */
1781 rdev->hopcount = hopcount;
1782
1783 if (rdev->pef & RIO_PEF_SWITCH) {
1784 rswitch = rdev->rswitch;
1785 rswitch->route_table = NULL;
1786 }
1787
1788 if (strlen(dev_info.name))
1789 dev_set_name(&rdev->dev, "%s", dev_info.name);
1790 else if (rdev->pef & RIO_PEF_SWITCH)
1791 dev_set_name(&rdev->dev, "%02x:s:%04x", mport->id,
1792 rdev->comp_tag & RIO_CTAG_UDEVID);
1793 else
1794 dev_set_name(&rdev->dev, "%02x:e:%04x", mport->id,
1795 rdev->comp_tag & RIO_CTAG_UDEVID);
1796
1797 INIT_LIST_HEAD(&rdev->net_list);
1798 rdev->dev.parent = &mport->net->dev;
1799 rio_attach_device(rdev);
1800 rdev->dev.release = rio_release_dev;
1801
1802 if (rdev->dst_ops & RIO_DST_OPS_DOORBELL)
1803 rio_init_dbell_res(&rdev->riores[RIO_DOORBELL_RESOURCE],
1804 0, 0xffff);
1805 err = rio_add_device(rdev);
1806 if (err)
1807 goto cleanup;
1808 rio_dev_get(rdev);
1809
1810 return 0;
1811cleanup:
1812 kfree(rdev);
1813 return err;
1814}
1815
1816static int rio_mport_del_riodev(struct mport_cdev_priv *priv, void __user *arg)
1817{
1818 struct rio_rdev_info dev_info;
1819 struct rio_dev *rdev = NULL;
1820 struct device *dev;
1821 struct rio_mport *mport;
1822 struct rio_net *net;
1823
1824 if (copy_from_user(&dev_info, arg, sizeof(dev_info)))
1825 return -EFAULT;
156e0b1a 1826 dev_info.name[sizeof(dev_info.name) - 1] = '\0';
e8de3701
AB		 1827
1828 mport = priv->md->mport;
1829
1830 /* If device name is specified, removal by name has priority */
1831 if (strlen(dev_info.name)) {
1832 dev = bus_find_device_by_name(&rio_bus_type, NULL,
1833 dev_info.name);
1834 if (dev)
1835 rdev = to_rio_dev(dev);
1836 } else {
1837 do {
1838 rdev = rio_get_comptag(dev_info.comptag, rdev);
1839 if (rdev && rdev->dev.parent == &mport->net->dev &&
4e1016da
AB		 1840 rdev->destid == dev_info.destid &&
1841 rdev->hopcount == dev_info.hopcount)
e8de3701
AB		 1842 break;
1843 } while (rdev);
1844 }
1845
1846 if (!rdev) {
1847 rmcd_debug(RDEV,
1848 "device name:%s ct:0x%x did:0x%x hc:0x%x not found",
1849 dev_info.name, dev_info.comptag, dev_info.destid,
1850 dev_info.hopcount);
1851 return -ENODEV;
1852 }
1853
1854 net = rdev->net;
1855 rio_dev_put(rdev);
1856 rio_del_device(rdev, RIO_DEVICE_SHUTDOWN);
1857
1858 if (list_empty(&net->devices)) {
1859 rio_free_net(net);
1860 mport->net = NULL;
1861 }
1862
1863 return 0;
1864}
1865
1866/*
1867 * Mport cdev management
1868 */
1869
1870/*
1871 * mport_cdev_open() - Open character device (mport)
1872 */
1873static int mport_cdev_open(struct inode *inode, struct file *filp)
1874{
1875 int ret;
1876 int minor = iminor(inode);
1877 struct mport_dev *chdev;
1878 struct mport_cdev_priv *priv;
1879
1880 /* Test for valid device */
1881 if (minor >= RIO_MAX_MPORTS) {
1882 rmcd_error("Invalid minor device number");
1883 return -EINVAL;
1884 }
1885
1886 chdev = container_of(inode->i_cdev, struct mport_dev, cdev);
1887
1888 rmcd_debug(INIT, "%s filp=%p", dev_name(&chdev->dev), filp);
1889
1890 if (atomic_read(&chdev->active) == 0)
1891 return -ENODEV;
1892
1893 get_device(&chdev->dev);
1894
1895 priv = kzalloc(sizeof(*priv), GFP_KERNEL);
1896 if (!priv) {
1897 put_device(&chdev->dev);
1898 return -ENOMEM;
1899 }
1900
1901 priv->md = chdev;
1902
1903 mutex_lock(&chdev->file_mutex);
1904 list_add_tail(&priv->list, &chdev->file_list);
1905 mutex_unlock(&chdev->file_mutex);
1906
1907 INIT_LIST_HEAD(&priv->db_filters);
1908 INIT_LIST_HEAD(&priv->pw_filters);
1909 spin_lock_init(&priv->fifo_lock);
1910 init_waitqueue_head(&priv->event_rx_wait);
1911 ret = kfifo_alloc(&priv->event_fifo,
1912 sizeof(struct rio_event) * MPORT_EVENT_DEPTH,
1913 GFP_KERNEL);
1914 if (ret < 0) {
1915 dev_err(&chdev->dev, DRV_NAME ": kfifo_alloc failed\n");
1916 ret = -ENOMEM;
1917 goto err_fifo;
1918 }
1919
1920#ifdef CONFIG_RAPIDIO_DMA_ENGINE
1921 INIT_LIST_HEAD(&priv->async_list);
e8de3701
AB		 1922 spin_lock_init(&priv->req_lock);
1923 mutex_init(&priv->dma_lock);
1924#endif
1925
1926 filp->private_data = priv;
1927 goto out;
1928err_fifo:
1929 kfree(priv);
1930out:
1931 return ret;
1932}
1933
1934static int mport_cdev_fasync(int fd, struct file *filp, int mode)
1935{
1936 struct mport_cdev_priv *priv = filp->private_data;
1937
1938 return fasync_helper(fd, filp, mode, &priv->async_queue);
1939}
1940
1941#ifdef CONFIG_RAPIDIO_DMA_ENGINE
1942static void mport_cdev_release_dma(struct file *filp)
1943{
1944 struct mport_cdev_priv *priv = filp->private_data;
1945 struct mport_dev *md;
1946 struct mport_dma_req *req, *req_next;
1947 unsigned long tmo = msecs_to_jiffies(dma_timeout);
1948 long wret;
1949 LIST_HEAD(list);
1950
1951 rmcd_debug(EXIT, "from filp=%p %s(%d)",
1952 filp, current->comm, task_pid_nr(current));
1953
1954 if (!priv->dmach) {
1955 rmcd_debug(EXIT, "No DMA channel for filp=%p", filp);
1956 return;
1957 }
1958
1959 md = priv->md;
1960
e8de3701
AB		 1961 spin_lock(&priv->req_lock);
1962 if (!list_empty(&priv->async_list)) {
1963 rmcd_debug(EXIT, "async list not empty filp=%p %s(%d)",
1964 filp, current->comm, task_pid_nr(current));
1965 list_splice_init(&priv->async_list, &list);
1966 }
1967 spin_unlock(&priv->req_lock);
1968
1969 if (!list_empty(&list)) {
1970 rmcd_debug(EXIT, "temp list not empty");
1971 list_for_each_entry_safe(req, req_next, &list, node) {
1972 rmcd_debug(EXIT, "free req->filp=%p cookie=%d compl=%s",
1973 req->filp, req->cookie,
1974 completion_done(&req->req_comp)?"yes":"no");
1975 list_del(&req->node);
bbd876ad 1976 kref_put(&req->refcount, dma_req_free);
e8de3701
AB		 1977 }
1978 }
1979
1980 put_dma_channel(priv);
1981 wret = wait_for_completion_interruptible_timeout(&priv->comp, tmo);
1982
1983 if (wret <= 0) {
1984 rmcd_error("%s(%d) failed waiting for DMA release err=%ld",
1985 current->comm, task_pid_nr(current), wret);
1986 }
1987
e8de3701
AB		 1988 if (priv->dmach != priv->md->dma_chan) {
1989 rmcd_debug(EXIT, "Release DMA channel for filp=%p %s(%d)",
1990 filp, current->comm, task_pid_nr(current));
1991 rio_release_dma(priv->dmach);
1992 } else {
1993 rmcd_debug(EXIT, "Adjust default DMA channel refcount");
1994 kref_put(&md->dma_ref, mport_release_def_dma);
1995 }
1996
1997 priv->dmach = NULL;
1998}
1999#else
2000#define mport_cdev_release_dma(priv) do {} while (0)
2001#endif
2002
2003/*
2004 * mport_cdev_release() - Release character device
2005 */
2006static int mport_cdev_release(struct inode *inode, struct file *filp)
2007{
2008 struct mport_cdev_priv *priv = filp->private_data;
2009 struct mport_dev *chdev;
2010 struct rio_mport_pw_filter *pw_filter, *pw_filter_next;
2011 struct rio_mport_db_filter *db_filter, *db_filter_next;
2012 struct rio_mport_mapping *map, *_map;
2013 unsigned long flags;
2014
2015 rmcd_debug(EXIT, "%s filp=%p", dev_name(&priv->md->dev), filp);
2016
2017 chdev = priv->md;
2018 mport_cdev_release_dma(filp);
2019
2020 priv->event_mask = 0;
2021
2022 spin_lock_irqsave(&chdev->pw_lock, flags);
2023 if (!list_empty(&priv->pw_filters)) {
2024 list_for_each_entry_safe(pw_filter, pw_filter_next,
2025 &priv->pw_filters, priv_node)
2026 rio_mport_delete_pw_filter(pw_filter);
2027 }
2028 spin_unlock_irqrestore(&chdev->pw_lock, flags);
2029
2030 spin_lock_irqsave(&chdev->db_lock, flags);
2031 list_for_each_entry_safe(db_filter, db_filter_next,
2032 &priv->db_filters, priv_node) {
2033 rio_mport_delete_db_filter(db_filter);
2034 }
2035 spin_unlock_irqrestore(&chdev->db_lock, flags);
2036
2037 kfifo_free(&priv->event_fifo);
2038
2039 mutex_lock(&chdev->buf_mutex);
2040 list_for_each_entry_safe(map, _map, &chdev->mappings, node) {
2041 if (map->filp == filp) {
2042 rmcd_debug(EXIT, "release mapping %p filp=%p",
2043 map->virt_addr, filp);
2044 kref_put(&map->ref, mport_release_mapping);
2045 }
2046 }
2047 mutex_unlock(&chdev->buf_mutex);
2048
2049 mport_cdev_fasync(-1, filp, 0);
2050 filp->private_data = NULL;
2051 mutex_lock(&chdev->file_mutex);
2052 list_del(&priv->list);
2053 mutex_unlock(&chdev->file_mutex);
2054 put_device(&chdev->dev);
2055 kfree(priv);
2056 return 0;
2057}
2058
2059/*
2060 * mport_cdev_ioctl() - IOCTLs for character device
2061 */
2062static long mport_cdev_ioctl(struct file *filp,
2063 unsigned int cmd, unsigned long arg)
2064{
2065 int err = -EINVAL;
2066 struct mport_cdev_priv *data = filp->private_data;
2067 struct mport_dev *md = data->md;
2068
2069 if (atomic_read(&md->active) == 0)
2070 return -ENODEV;
2071
2072 switch (cmd) {
2073 case RIO_MPORT_MAINT_READ_LOCAL:
2074 return rio_mport_maint_rd(data, (void __user *)arg, 1);
2075 case RIO_MPORT_MAINT_WRITE_LOCAL:
2076 return rio_mport_maint_wr(data, (void __user *)arg, 1);
2077 case RIO_MPORT_MAINT_READ_REMOTE:
2078 return rio_mport_maint_rd(data, (void __user *)arg, 0);
2079 case RIO_MPORT_MAINT_WRITE_REMOTE:
2080 return rio_mport_maint_wr(data, (void __user *)arg, 0);
2081 case RIO_MPORT_MAINT_HDID_SET:
2082 return maint_hdid_set(data, (void __user *)arg);
2083 case RIO_MPORT_MAINT_COMPTAG_SET:
2084 return maint_comptag_set(data, (void __user *)arg);
2085 case RIO_MPORT_MAINT_PORT_IDX_GET:
2086 return maint_port_idx_get(data, (void __user *)arg);
2087 case RIO_MPORT_GET_PROPERTIES:
2088 md->properties.hdid = md->mport->host_deviceid;
4e1016da
AB		 2089 if (copy_to_user((void __user *)arg, &(md->properties),
2090 sizeof(md->properties)))
e8de3701
AB		 2091 return -EFAULT;
2092 return 0;
2093 case RIO_ENABLE_DOORBELL_RANGE:
2094 return rio_mport_add_db_filter(data, (void __user *)arg);
2095 case RIO_DISABLE_DOORBELL_RANGE:
2096 return rio_mport_remove_db_filter(data, (void __user *)arg);
2097 case RIO_ENABLE_PORTWRITE_RANGE:
2098 return rio_mport_add_pw_filter(data, (void __user *)arg);
2099 case RIO_DISABLE_PORTWRITE_RANGE:
2100 return rio_mport_remove_pw_filter(data, (void __user *)arg);
2101 case RIO_SET_EVENT_MASK:
4e1016da 2102 data->event_mask = (u32)arg;
e8de3701
AB		 2103 return 0;
2104 case RIO_GET_EVENT_MASK:
2105 if (copy_to_user((void __user *)arg, &data->event_mask,
4e1016da 2106 sizeof(u32)))
e8de3701
AB		 2107 return -EFAULT;
2108 return 0;
2109 case RIO_MAP_OUTBOUND:
2110 return rio_mport_obw_map(filp, (void __user *)arg);
2111 case RIO_MAP_INBOUND:
2112 return rio_mport_map_inbound(filp, (void __user *)arg);
2113 case RIO_UNMAP_OUTBOUND:
2114 return rio_mport_obw_free(filp, (void __user *)arg);
2115 case RIO_UNMAP_INBOUND:
2116 return rio_mport_inbound_free(filp, (void __user *)arg);
2117 case RIO_ALLOC_DMA:
2118 return rio_mport_alloc_dma(filp, (void __user *)arg);
2119 case RIO_FREE_DMA:
2120 return rio_mport_free_dma(filp, (void __user *)arg);
2121 case RIO_WAIT_FOR_ASYNC:
2122 return rio_mport_wait_for_async_dma(filp, (void __user *)arg);
2123 case RIO_TRANSFER:
2124 return rio_mport_transfer_ioctl(filp, (void __user *)arg);
2125 case RIO_DEV_ADD:
2126 return rio_mport_add_riodev(data, (void __user *)arg);
2127 case RIO_DEV_DEL:
2128 return rio_mport_del_riodev(data, (void __user *)arg);
2129 default:
2130 break;
2131 }
2132
2133 return err;
2134}
2135
2136/*
2137 * mport_release_mapping - free mapping resources and info structure
2138 * @ref: a pointer to the kref within struct rio_mport_mapping
2139 *
2140 * NOTE: Shall be called while holding buf_mutex.
2141 */
2142static void mport_release_mapping(struct kref *ref)
2143{
2144 struct rio_mport_mapping *map =
2145 container_of(ref, struct rio_mport_mapping, ref);
2146 struct rio_mport *mport = map->md->mport;
2147
2148 rmcd_debug(MMAP, "type %d mapping @ %p (phys = %pad) for %s",
2149 map->dir, map->virt_addr,
2150 &map->phys_addr, mport->name);
2151
2152 list_del(&map->node);
2153
2154 switch (map->dir) {
2155 case MAP_INBOUND:
2156 rio_unmap_inb_region(mport, map->phys_addr);
df561f66 2157 fallthrough;
e8de3701
AB		 2158 case MAP_DMA:
2159 dma_free_coherent(mport->dev.parent, map->size,
2160 map->virt_addr, map->phys_addr);
2161 break;
2162 case MAP_OUTBOUND:
2163 rio_unmap_outb_region(mport, map->rioid, map->rio_addr);
2164 break;
2165 }
2166 kfree(map);
2167}
2168
2169static void mport_mm_open(struct vm_area_struct *vma)
2170{
2171 struct rio_mport_mapping *map = vma->vm_private_data;
2172
ea87b8e1 2173 rmcd_debug(MMAP, "%pad", &map->phys_addr);
e8de3701
AB		 2174 kref_get(&map->ref);
2175}
2176
2177static void mport_mm_close(struct vm_area_struct *vma)
2178{
2179 struct rio_mport_mapping *map = vma->vm_private_data;
2180
ea87b8e1 2181 rmcd_debug(MMAP, "%pad", &map->phys_addr);
e8de3701
AB		 2182 mutex_lock(&map->md->buf_mutex);
2183 kref_put(&map->ref, mport_release_mapping);
2184 mutex_unlock(&map->md->buf_mutex);
2185}
2186
2187static const struct vm_operations_struct vm_ops = {
2188 .open = mport_mm_open,
2189 .close = mport_mm_close,
2190};
2191
2192static int mport_cdev_mmap(struct file *filp, struct vm_area_struct *vma)
2193{
2194 struct mport_cdev_priv *priv = filp->private_data;
2195 struct mport_dev *md;
2196 size_t size = vma->vm_end - vma->vm_start;
2197 dma_addr_t baddr;
2198 unsigned long offset;
2199 int found = 0, ret;
2200 struct rio_mport_mapping *map;
2201
2202 rmcd_debug(MMAP, "0x%x bytes at offset 0x%lx",
2203 (unsigned int)size, vma->vm_pgoff);
2204
2205 md = priv->md;
2206 baddr = ((dma_addr_t)vma->vm_pgoff << PAGE_SHIFT);
2207
2208 mutex_lock(&md->buf_mutex);
2209 list_for_each_entry(map, &md->mappings, node) {
2210 if (baddr >= map->phys_addr &&
2211 baddr < (map->phys_addr + map->size)) {
2212 found = 1;
2213 break;
2214 }
2215 }
2216 mutex_unlock(&md->buf_mutex);
2217
2218 if (!found)
2219 return -ENOMEM;
2220
2221 offset = baddr - map->phys_addr;
2222
2223 if (size + offset > map->size)
2224 return -EINVAL;
2225
2226 vma->vm_pgoff = offset >> PAGE_SHIFT;
2227 rmcd_debug(MMAP, "MMAP adjusted offset = 0x%lx", vma->vm_pgoff);
2228
2229 if (map->dir == MAP_INBOUND || map->dir == MAP_DMA)
2230 ret = dma_mmap_coherent(md->mport->dev.parent, vma,
2231 map->virt_addr, map->phys_addr, map->size);
2232 else if (map->dir == MAP_OUTBOUND) {
2233 vma->vm_page_prot = pgprot_noncached(vma->vm_page_prot);
2234 ret = vm_iomap_memory(vma, map->phys_addr, map->size);
2235 } else {
2236 rmcd_error("Attempt to mmap unsupported mapping type");
2237 ret = -EIO;
2238 }
2239
2240 if (!ret) {
2241 vma->vm_private_data = map;
2242 vma->vm_ops = &vm_ops;
2243 mport_mm_open(vma);
2244 } else {
2245 rmcd_error("MMAP exit with err=%d", ret);
2246 }
2247
2248 return ret;
2249}
2250
afc9a42b 2251static __poll_t mport_cdev_poll(struct file *filp, poll_table *wait)
e8de3701
AB		 2252{
2253 struct mport_cdev_priv *priv = filp->private_data;
2254
2255 poll_wait(filp, &priv->event_rx_wait, wait);
2256 if (kfifo_len(&priv->event_fifo))
a9a08845 2257 return EPOLLIN | EPOLLRDNORM;
e8de3701
AB		 2258
2259 return 0;
2260}
2261
2262static ssize_t mport_read(struct file *filp, char __user *buf, size_t count,
2263 loff_t *ppos)
2264{
2265 struct mport_cdev_priv *priv = filp->private_data;
2266 int copied;
2267 ssize_t ret;
2268
2269 if (!count)
2270 return 0;
2271
2272 if (kfifo_is_empty(&priv->event_fifo) &&
2273 (filp->f_flags & O_NONBLOCK))
2274 return -EAGAIN;
2275
2276 if (count % sizeof(struct rio_event))
2277 return -EINVAL;
2278
2279 ret = wait_event_interruptible(priv->event_rx_wait,
2280 kfifo_len(&priv->event_fifo) != 0);
2281 if (ret)
2282 return ret;
2283
2284 while (ret < count) {
2285 if (kfifo_to_user(&priv->event_fifo, buf,
2286 sizeof(struct rio_event), &copied))
2287 return -EFAULT;
2288 ret += copied;
2289 buf += copied;
2290 }
2291
2292 return ret;
2293}
2294
2295static ssize_t mport_write(struct file *filp, const char __user *buf,
2296 size_t count, loff_t *ppos)
2297{
2298 struct mport_cdev_priv *priv = filp->private_data;
2299 struct rio_mport *mport = priv->md->mport;
2300 struct rio_event event;
2301 int len, ret;
2302
2303 if (!count)
2304 return 0;
2305
2306 if (count % sizeof(event))
2307 return -EINVAL;
2308
2309 len = 0;
2310 while ((count - len) >= (int)sizeof(event)) {
2311 if (copy_from_user(&event, buf, sizeof(event)))
2312 return -EFAULT;
2313
2314 if (event.header != RIO_DOORBELL)
2315 return -EINVAL;
2316
2317 ret = rio_mport_send_doorbell(mport,
4e1016da 2318 event.u.doorbell.rioid,
e8de3701
AB		 2319 event.u.doorbell.payload);
2320 if (ret < 0)
2321 return ret;
2322
2323 len += sizeof(event);
2324 buf += sizeof(event);
2325 }
2326
2327 return len;
2328}
2329
2330static const struct file_operations mport_fops = {
2331 .owner = THIS_MODULE,
2332 .open = mport_cdev_open,
2333 .release = mport_cdev_release,
2334 .poll = mport_cdev_poll,
2335 .read = mport_read,
2336 .write = mport_write,
2337 .mmap = mport_cdev_mmap,
2338 .fasync = mport_cdev_fasync,
2339 .unlocked_ioctl = mport_cdev_ioctl
2340};
2341
2342/*
2343 * Character device management
2344 */
2345
2346static void mport_device_release(struct device *dev)
2347{
2348 struct mport_dev *md;
2349
2350 rmcd_debug(EXIT, "%s", dev_name(dev));
2351 md = container_of(dev, struct mport_dev, dev);
2352 kfree(md);
2353}
2354
2355/*
2356 * mport_cdev_add() - Create mport_dev from rio_mport
2357 * @mport: RapidIO master port
2358 */
2359static struct mport_dev *mport_cdev_add(struct rio_mport *mport)
2360{
2361 int ret = 0;
2362 struct mport_dev *md;
2363 struct rio_mport_attr attr;
2364
4e1016da 2365 md = kzalloc(sizeof(*md), GFP_KERNEL);
e8de3701
AB		 2366 if (!md) {
2367 rmcd_error("Unable allocate a device object");
2368 return NULL;
2369 }
2370
2371 md->mport = mport;
2372 mutex_init(&md->buf_mutex);
2373 mutex_init(&md->file_mutex);
2374 INIT_LIST_HEAD(&md->file_list);
e8de3701 2375
dbef390d
LG		 2376 device_initialize(&md->dev);
2377 md->dev.devt = MKDEV(MAJOR(dev_number), mport->id);
e8de3701
AB		 2378 md->dev.class = dev_class;
2379 md->dev.parent = &mport->dev;
2380 md->dev.release = mport_device_release;
2381 dev_set_name(&md->dev, DEV_NAME "%d", mport->id);
2382 atomic_set(&md->active, 1);
2383
dbef390d
LG		 2384 cdev_init(&md->cdev, &mport_fops);
2385 md->cdev.owner = THIS_MODULE;
2386
e8de3701
AB		 2387 INIT_LIST_HEAD(&md->doorbells);
2388 spin_lock_init(&md->db_lock);
2389 INIT_LIST_HEAD(&md->portwrites);
2390 spin_lock_init(&md->pw_lock);
2391 INIT_LIST_HEAD(&md->mappings);
2392
2393 md->properties.id = mport->id;
2394 md->properties.sys_size = mport->sys_size;
2395 md->properties.hdid = mport->host_deviceid;
2396 md->properties.index = mport->index;
2397
2398 /* The transfer_mode property will be returned through mport query
2399 * interface
2400 */
4e1016da 2401#ifdef CONFIG_FSL_RIO /* for now: only on Freescale's SoCs */
e8de3701
AB		 2402 md->properties.transfer_mode |= RIO_TRANSFER_MODE_MAPPED;
2403#else
2404 md->properties.transfer_mode |= RIO_TRANSFER_MODE_TRANSFER;
2405#endif
e1c3cdb2
MB		 2406
2407 ret = cdev_device_add(&md->cdev, &md->dev);
2408 if (ret) {
2409 rmcd_error("Failed to register mport %d (err=%d)",
2410 mport->id, ret);
2411 goto err_cdev;
2412 }
e8de3701
AB		 2413 ret = rio_query_mport(mport, &attr);
2414 if (!ret) {
2415 md->properties.flags = attr.flags;
2416 md->properties.link_speed = attr.link_speed;
2417 md->properties.link_width = attr.link_width;
2418 md->properties.dma_max_sge = attr.dma_max_sge;
2419 md->properties.dma_max_size = attr.dma_max_size;
2420 md->properties.dma_align = attr.dma_align;
2421 md->properties.cap_sys_size = 0;
2422 md->properties.cap_transfer_mode = 0;
2423 md->properties.cap_addr_size = 0;
2424 } else
2425 pr_info(DRV_PREFIX "Failed to obtain info for %s cdev(%d:%d)\n",
2426 mport->name, MAJOR(dev_number), mport->id);
2427
2428 mutex_lock(&mport_devs_lock);
2429 list_add_tail(&md->node, &mport_devs);
2430 mutex_unlock(&mport_devs_lock);
2431
2432 pr_info(DRV_PREFIX "Added %s cdev(%d:%d)\n",
2433 mport->name, MAJOR(dev_number), mport->id);
2434
2435 return md;
2436
2437err_cdev:
dbef390d 2438 put_device(&md->dev);
e8de3701
AB		 2439 return NULL;
2440}
2441
2442/*
2443 * mport_cdev_terminate_dma() - Stop all active DMA data transfers and release
2444 * associated DMA channels.
2445 */
2446static void mport_cdev_terminate_dma(struct mport_dev *md)
2447{
2448#ifdef CONFIG_RAPIDIO_DMA_ENGINE
2449 struct mport_cdev_priv *client;
2450
2451 rmcd_debug(DMA, "%s", dev_name(&md->dev));
2452
2453 mutex_lock(&md->file_mutex);
2454 list_for_each_entry(client, &md->file_list, list) {
2455 if (client->dmach) {
2456 dmaengine_terminate_all(client->dmach);
2457 rio_release_dma(client->dmach);
2458 }
2459 }
2460 mutex_unlock(&md->file_mutex);
2461
2462 if (md->dma_chan) {
2463 dmaengine_terminate_all(md->dma_chan);
2464 rio_release_dma(md->dma_chan);
2465 md->dma_chan = NULL;
2466 }
2467#endif
2468}
2469
2470
2471/*
2472 * mport_cdev_kill_fasync() - Send SIGIO signal to all processes with open
2473 * mport_cdev files.
2474 */
2475static int mport_cdev_kill_fasync(struct mport_dev *md)
2476{
2477 unsigned int files = 0;
2478 struct mport_cdev_priv *client;
2479
2480 mutex_lock(&md->file_mutex);
2481 list_for_each_entry(client, &md->file_list, list) {
2482 if (client->async_queue)
2483 kill_fasync(&client->async_queue, SIGIO, POLL_HUP);
2484 files++;
2485 }
2486 mutex_unlock(&md->file_mutex);
2487 return files;
2488}
2489
2490/*
2491 * mport_cdev_remove() - Remove mport character device
2492 * @dev: Mport device to remove
2493 */
2494static void mport_cdev_remove(struct mport_dev *md)
2495{
2496 struct rio_mport_mapping *map, *_map;
2497
2498 rmcd_debug(EXIT, "Remove %s cdev", md->mport->name);
2499 atomic_set(&md->active, 0);
2500 mport_cdev_terminate_dma(md);
2501 rio_del_mport_pw_handler(md->mport, md, rio_mport_pw_handler);
dbef390d 2502 cdev_device_del(&md->cdev, &md->dev);
e8de3701
AB		 2503 mport_cdev_kill_fasync(md);
2504
e8de3701
AB		 2505 /* TODO: do we need to give clients some time to close file
2506 * descriptors? Simple wait for XX, or kref?
2507 */
2508
2509 /*
2510 * Release DMA buffers allocated for the mport device.
2511 * Disable associated inbound Rapidio requests mapping if applicable.
2512 */
2513 mutex_lock(&md->buf_mutex);
2514 list_for_each_entry_safe(map, _map, &md->mappings, node) {
2515 kref_put(&map->ref, mport_release_mapping);
2516 }
2517 mutex_unlock(&md->buf_mutex);
2518
2519 if (!list_empty(&md->mappings))
2520 rmcd_warn("WARNING: %s pending mappings on removal",
2521 md->mport->name);
2522
2523 rio_release_inb_dbell(md->mport, 0, 0x0fff);
2524
e8de3701
AB		 2525 put_device(&md->dev);
2526}
2527
2528/*
2529 * RIO rio_mport_interface driver
2530 */
2531
2532/*
2533 * mport_add_mport() - Add rio_mport from LDM device struct
2534 * @dev: Linux device model struct
2535 * @class_intf: Linux class_interface
2536 */
2537static int mport_add_mport(struct device *dev,
2538 struct class_interface *class_intf)
2539{
2540 struct rio_mport *mport = NULL;
2541 struct mport_dev *chdev = NULL;
2542
2543 mport = to_rio_mport(dev);
2544 if (!mport)
2545 return -ENODEV;
2546
2547 chdev = mport_cdev_add(mport);
2548 if (!chdev)
2549 return -ENODEV;
2550
2551 return 0;
2552}
2553
2554/*
2555 * mport_remove_mport() - Remove rio_mport from global list
2556 * TODO remove device from global mport_dev list
2557 */
2558static void mport_remove_mport(struct device *dev,
2559 struct class_interface *class_intf)
2560{
2561 struct rio_mport *mport = NULL;
2562 struct mport_dev *chdev;
2563 int found = 0;
2564
2565 mport = to_rio_mport(dev);
2566 rmcd_debug(EXIT, "Remove %s", mport->name);
2567
2568 mutex_lock(&mport_devs_lock);
2569 list_for_each_entry(chdev, &mport_devs, node) {
2570 if (chdev->mport->id == mport->id) {
2571 atomic_set(&chdev->active, 0);
2572 list_del(&chdev->node);
2573 found = 1;
2574 break;
2575 }
2576 }
2577 mutex_unlock(&mport_devs_lock);
2578
2579 if (found)
2580 mport_cdev_remove(chdev);
2581}
2582
2583/* the rio_mport_interface is used to handle local mport devices */
2584static struct class_interface rio_mport_interface __refdata = {
2585 .class = &rio_mport_class,
2586 .add_dev = mport_add_mport,
2587 .remove_dev = mport_remove_mport,
2588};
2589
2590/*
2591 * Linux kernel module
2592 */
2593
2594/*
2595 * mport_init - Driver module loading
2596 */
2597static int __init mport_init(void)
2598{
2599 int ret;
2600
2601 /* Create device class needed by udev */
2602 dev_class = class_create(THIS_MODULE, DRV_NAME);
99f23c2c 2603 if (IS_ERR(dev_class)) {
e8de3701 2604 rmcd_error("Unable to create " DRV_NAME " class");
99f23c2c 2605 return PTR_ERR(dev_class);
e8de3701
AB		 2606 }
2607
2608 ret = alloc_chrdev_region(&dev_number, 0, RIO_MAX_MPORTS, DRV_NAME);
2609 if (ret < 0)
2610 goto err_chr;
2611
2612 rmcd_debug(INIT, "Registered class with major=%d", MAJOR(dev_number));
2613
2614 /* Register to rio_mport_interface */
2615 ret = class_interface_register(&rio_mport_interface);
2616 if (ret) {
2617 rmcd_error("class_interface_register() failed, err=%d", ret);
2618 goto err_cli;
2619 }
2620
e8de3701
AB		 2621 return 0;
2622
e8de3701
AB		 2623err_cli:
2624 unregister_chrdev_region(dev_number, RIO_MAX_MPORTS);
2625err_chr:
2626 class_destroy(dev_class);
2627 return ret;
2628}
2629
2630/**
2631 * mport_exit - Driver module unloading
2632 */
2633static void __exit mport_exit(void)
2634{
2635 class_interface_unregister(&rio_mport_interface);
2636 class_destroy(dev_class);
2637 unregister_chrdev_region(dev_number, RIO_MAX_MPORTS);
e8de3701
AB		 2638}
2639
2640module_init(mport_init);
2641module_exit(mport_exit);
Linux 6.x block layer and io_uring tree(s)