Loading...
1/*
2 *
3 * Intel Management Engine Interface (Intel MEI) Linux driver
4 * Copyright (c) 2003-2012, Intel Corporation.
5 *
6 * This program is free software; you can redistribute it and/or modify it
7 * under the terms and conditions of the GNU General Public License,
8 * version 2, as published by the Free Software Foundation.
9 *
10 * This program is distributed in the hope it will be useful, but WITHOUT
11 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
12 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
13 * more details.
14 *
15 */
16
17#include <linux/sched.h>
18#include <linux/wait.h>
19#include <linux/delay.h>
20#include <linux/slab.h>
21#include <linux/pm_runtime.h>
22
23#include <linux/mei.h>
24
25#include "mei_dev.h"
26#include "hbm.h"
27#include "client.h"
28
29/**
30 * mei_me_cl_init - initialize me client
31 *
32 * @me_cl: me client
33 */
34void mei_me_cl_init(struct mei_me_client *me_cl)
35{
36 INIT_LIST_HEAD(&me_cl->list);
37 kref_init(&me_cl->refcnt);
38}
39
40/**
41 * mei_me_cl_get - increases me client refcount
42 *
43 * @me_cl: me client
44 *
45 * Locking: called under "dev->device_lock" lock
46 *
47 * Return: me client or NULL
48 */
49struct mei_me_client *mei_me_cl_get(struct mei_me_client *me_cl)
50{
51 if (me_cl && kref_get_unless_zero(&me_cl->refcnt))
52 return me_cl;
53
54 return NULL;
55}
56
57/**
58 * mei_me_cl_release - free me client
59 *
60 * Locking: called under "dev->device_lock" lock
61 *
62 * @ref: me_client refcount
63 */
64static void mei_me_cl_release(struct kref *ref)
65{
66 struct mei_me_client *me_cl =
67 container_of(ref, struct mei_me_client, refcnt);
68
69 kfree(me_cl);
70}
71
72/**
73 * mei_me_cl_put - decrease me client refcount and free client if necessary
74 *
75 * Locking: called under "dev->device_lock" lock
76 *
77 * @me_cl: me client
78 */
79void mei_me_cl_put(struct mei_me_client *me_cl)
80{
81 if (me_cl)
82 kref_put(&me_cl->refcnt, mei_me_cl_release);
83}
84
85/**
86 * __mei_me_cl_del - delete me client from the list and decrease
87 * reference counter
88 *
89 * @dev: mei device
90 * @me_cl: me client
91 *
92 * Locking: dev->me_clients_rwsem
93 */
94static void __mei_me_cl_del(struct mei_device *dev, struct mei_me_client *me_cl)
95{
96 if (!me_cl)
97 return;
98
99 list_del_init(&me_cl->list);
100 mei_me_cl_put(me_cl);
101}
102
103/**
104 * mei_me_cl_del - delete me client from the list and decrease
105 * reference counter
106 *
107 * @dev: mei device
108 * @me_cl: me client
109 */
110void mei_me_cl_del(struct mei_device *dev, struct mei_me_client *me_cl)
111{
112 down_write(&dev->me_clients_rwsem);
113 __mei_me_cl_del(dev, me_cl);
114 up_write(&dev->me_clients_rwsem);
115}
116
117/**
118 * mei_me_cl_add - add me client to the list
119 *
120 * @dev: mei device
121 * @me_cl: me client
122 */
123void mei_me_cl_add(struct mei_device *dev, struct mei_me_client *me_cl)
124{
125 down_write(&dev->me_clients_rwsem);
126 list_add(&me_cl->list, &dev->me_clients);
127 up_write(&dev->me_clients_rwsem);
128}
129
130/**
131 * __mei_me_cl_by_uuid - locate me client by uuid
132 * increases ref count
133 *
134 * @dev: mei device
135 * @uuid: me client uuid
136 *
137 * Return: me client or NULL if not found
138 *
139 * Locking: dev->me_clients_rwsem
140 */
141static struct mei_me_client *__mei_me_cl_by_uuid(struct mei_device *dev,
142 const uuid_le *uuid)
143{
144 struct mei_me_client *me_cl;
145 const uuid_le *pn;
146
147 WARN_ON(!rwsem_is_locked(&dev->me_clients_rwsem));
148
149 list_for_each_entry(me_cl, &dev->me_clients, list) {
150 pn = &me_cl->props.protocol_name;
151 if (uuid_le_cmp(*uuid, *pn) == 0)
152 return mei_me_cl_get(me_cl);
153 }
154
155 return NULL;
156}
157
158/**
159 * mei_me_cl_by_uuid - locate me client by uuid
160 * increases ref count
161 *
162 * @dev: mei device
163 * @uuid: me client uuid
164 *
165 * Return: me client or NULL if not found
166 *
167 * Locking: dev->me_clients_rwsem
168 */
169struct mei_me_client *mei_me_cl_by_uuid(struct mei_device *dev,
170 const uuid_le *uuid)
171{
172 struct mei_me_client *me_cl;
173
174 down_read(&dev->me_clients_rwsem);
175 me_cl = __mei_me_cl_by_uuid(dev, uuid);
176 up_read(&dev->me_clients_rwsem);
177
178 return me_cl;
179}
180
181/**
182 * mei_me_cl_by_id - locate me client by client id
183 * increases ref count
184 *
185 * @dev: the device structure
186 * @client_id: me client id
187 *
188 * Return: me client or NULL if not found
189 *
190 * Locking: dev->me_clients_rwsem
191 */
192struct mei_me_client *mei_me_cl_by_id(struct mei_device *dev, u8 client_id)
193{
194
195 struct mei_me_client *__me_cl, *me_cl = NULL;
196
197 down_read(&dev->me_clients_rwsem);
198 list_for_each_entry(__me_cl, &dev->me_clients, list) {
199 if (__me_cl->client_id == client_id) {
200 me_cl = mei_me_cl_get(__me_cl);
201 break;
202 }
203 }
204 up_read(&dev->me_clients_rwsem);
205
206 return me_cl;
207}
208
209/**
210 * __mei_me_cl_by_uuid_id - locate me client by client id and uuid
211 * increases ref count
212 *
213 * @dev: the device structure
214 * @uuid: me client uuid
215 * @client_id: me client id
216 *
217 * Return: me client or null if not found
218 *
219 * Locking: dev->me_clients_rwsem
220 */
221static struct mei_me_client *__mei_me_cl_by_uuid_id(struct mei_device *dev,
222 const uuid_le *uuid, u8 client_id)
223{
224 struct mei_me_client *me_cl;
225 const uuid_le *pn;
226
227 WARN_ON(!rwsem_is_locked(&dev->me_clients_rwsem));
228
229 list_for_each_entry(me_cl, &dev->me_clients, list) {
230 pn = &me_cl->props.protocol_name;
231 if (uuid_le_cmp(*uuid, *pn) == 0 &&
232 me_cl->client_id == client_id)
233 return mei_me_cl_get(me_cl);
234 }
235
236 return NULL;
237}
238
239
240/**
241 * mei_me_cl_by_uuid_id - locate me client by client id and uuid
242 * increases ref count
243 *
244 * @dev: the device structure
245 * @uuid: me client uuid
246 * @client_id: me client id
247 *
248 * Return: me client or null if not found
249 */
250struct mei_me_client *mei_me_cl_by_uuid_id(struct mei_device *dev,
251 const uuid_le *uuid, u8 client_id)
252{
253 struct mei_me_client *me_cl;
254
255 down_read(&dev->me_clients_rwsem);
256 me_cl = __mei_me_cl_by_uuid_id(dev, uuid, client_id);
257 up_read(&dev->me_clients_rwsem);
258
259 return me_cl;
260}
261
262/**
263 * mei_me_cl_rm_by_uuid - remove all me clients matching uuid
264 *
265 * @dev: the device structure
266 * @uuid: me client uuid
267 *
268 * Locking: called under "dev->device_lock" lock
269 */
270void mei_me_cl_rm_by_uuid(struct mei_device *dev, const uuid_le *uuid)
271{
272 struct mei_me_client *me_cl;
273
274 dev_dbg(dev->dev, "remove %pUl\n", uuid);
275
276 down_write(&dev->me_clients_rwsem);
277 me_cl = __mei_me_cl_by_uuid(dev, uuid);
278 __mei_me_cl_del(dev, me_cl);
279 up_write(&dev->me_clients_rwsem);
280}
281
282/**
283 * mei_me_cl_rm_by_uuid_id - remove all me clients matching client id
284 *
285 * @dev: the device structure
286 * @uuid: me client uuid
287 * @id: me client id
288 *
289 * Locking: called under "dev->device_lock" lock
290 */
291void mei_me_cl_rm_by_uuid_id(struct mei_device *dev, const uuid_le *uuid, u8 id)
292{
293 struct mei_me_client *me_cl;
294
295 dev_dbg(dev->dev, "remove %pUl %d\n", uuid, id);
296
297 down_write(&dev->me_clients_rwsem);
298 me_cl = __mei_me_cl_by_uuid_id(dev, uuid, id);
299 __mei_me_cl_del(dev, me_cl);
300 up_write(&dev->me_clients_rwsem);
301}
302
303/**
304 * mei_me_cl_rm_all - remove all me clients
305 *
306 * @dev: the device structure
307 *
308 * Locking: called under "dev->device_lock" lock
309 */
310void mei_me_cl_rm_all(struct mei_device *dev)
311{
312 struct mei_me_client *me_cl, *next;
313
314 down_write(&dev->me_clients_rwsem);
315 list_for_each_entry_safe(me_cl, next, &dev->me_clients, list)
316 __mei_me_cl_del(dev, me_cl);
317 up_write(&dev->me_clients_rwsem);
318}
319
320/**
321 * mei_cl_cmp_id - tells if the clients are the same
322 *
323 * @cl1: host client 1
324 * @cl2: host client 2
325 *
326 * Return: true - if the clients has same host and me ids
327 * false - otherwise
328 */
329static inline bool mei_cl_cmp_id(const struct mei_cl *cl1,
330 const struct mei_cl *cl2)
331{
332 return cl1 && cl2 &&
333 (cl1->host_client_id == cl2->host_client_id) &&
334 (mei_cl_me_id(cl1) == mei_cl_me_id(cl2));
335}
336
337/**
338 * mei_io_cb_free - free mei_cb_private related memory
339 *
340 * @cb: mei callback struct
341 */
342void mei_io_cb_free(struct mei_cl_cb *cb)
343{
344 if (cb == NULL)
345 return;
346
347 list_del(&cb->list);
348 kfree(cb->buf.data);
349 kfree(cb);
350}
351
352/**
353 * mei_io_cb_init - allocate and initialize io callback
354 *
355 * @cl: mei client
356 * @type: operation type
357 * @fp: pointer to file structure
358 *
359 * Return: mei_cl_cb pointer or NULL;
360 */
361struct mei_cl_cb *mei_io_cb_init(struct mei_cl *cl, enum mei_cb_file_ops type,
362 const struct file *fp)
363{
364 struct mei_cl_cb *cb;
365
366 cb = kzalloc(sizeof(struct mei_cl_cb), GFP_KERNEL);
367 if (!cb)
368 return NULL;
369
370 INIT_LIST_HEAD(&cb->list);
371 cb->fp = fp;
372 cb->cl = cl;
373 cb->buf_idx = 0;
374 cb->fop_type = type;
375 return cb;
376}
377
378/**
379 * __mei_io_list_flush - removes and frees cbs belonging to cl.
380 *
381 * @list: an instance of our list structure
382 * @cl: host client, can be NULL for flushing the whole list
383 * @free: whether to free the cbs
384 */
385static void __mei_io_list_flush(struct mei_cl_cb *list,
386 struct mei_cl *cl, bool free)
387{
388 struct mei_cl_cb *cb, *next;
389
390 /* enable removing everything if no cl is specified */
391 list_for_each_entry_safe(cb, next, &list->list, list) {
392 if (!cl || mei_cl_cmp_id(cl, cb->cl)) {
393 list_del_init(&cb->list);
394 if (free)
395 mei_io_cb_free(cb);
396 }
397 }
398}
399
400/**
401 * mei_io_list_flush - removes list entry belonging to cl.
402 *
403 * @list: An instance of our list structure
404 * @cl: host client
405 */
406void mei_io_list_flush(struct mei_cl_cb *list, struct mei_cl *cl)
407{
408 __mei_io_list_flush(list, cl, false);
409}
410
411/**
412 * mei_io_list_free - removes cb belonging to cl and free them
413 *
414 * @list: An instance of our list structure
415 * @cl: host client
416 */
417static inline void mei_io_list_free(struct mei_cl_cb *list, struct mei_cl *cl)
418{
419 __mei_io_list_flush(list, cl, true);
420}
421
422/**
423 * mei_io_cb_alloc_buf - allocate callback buffer
424 *
425 * @cb: io callback structure
426 * @length: size of the buffer
427 *
428 * Return: 0 on success
429 * -EINVAL if cb is NULL
430 * -ENOMEM if allocation failed
431 */
432int mei_io_cb_alloc_buf(struct mei_cl_cb *cb, size_t length)
433{
434 if (!cb)
435 return -EINVAL;
436
437 if (length == 0)
438 return 0;
439
440 cb->buf.data = kmalloc(length, GFP_KERNEL);
441 if (!cb->buf.data)
442 return -ENOMEM;
443 cb->buf.size = length;
444 return 0;
445}
446
447/**
448 * mei_cl_alloc_cb - a convenient wrapper for allocating read cb
449 *
450 * @cl: host client
451 * @length: size of the buffer
452 * @type: operation type
453 * @fp: associated file pointer (might be NULL)
454 *
455 * Return: cb on success and NULL on failure
456 */
457struct mei_cl_cb *mei_cl_alloc_cb(struct mei_cl *cl, size_t length,
458 enum mei_cb_file_ops type,
459 const struct file *fp)
460{
461 struct mei_cl_cb *cb;
462
463 cb = mei_io_cb_init(cl, type, fp);
464 if (!cb)
465 return NULL;
466
467 if (mei_io_cb_alloc_buf(cb, length)) {
468 mei_io_cb_free(cb);
469 return NULL;
470 }
471
472 return cb;
473}
474
475/**
476 * mei_cl_read_cb - find this cl's callback in the read list
477 * for a specific file
478 *
479 * @cl: host client
480 * @fp: file pointer (matching cb file object), may be NULL
481 *
482 * Return: cb on success, NULL if cb is not found
483 */
484struct mei_cl_cb *mei_cl_read_cb(const struct mei_cl *cl, const struct file *fp)
485{
486 struct mei_cl_cb *cb;
487
488 list_for_each_entry(cb, &cl->rd_completed, list)
489 if (!fp || fp == cb->fp)
490 return cb;
491
492 return NULL;
493}
494
495/**
496 * mei_cl_read_cb_flush - free client's read pending and completed cbs
497 * for a specific file
498 *
499 * @cl: host client
500 * @fp: file pointer (matching cb file object), may be NULL
501 */
502void mei_cl_read_cb_flush(const struct mei_cl *cl, const struct file *fp)
503{
504 struct mei_cl_cb *cb, *next;
505
506 list_for_each_entry_safe(cb, next, &cl->rd_completed, list)
507 if (!fp || fp == cb->fp)
508 mei_io_cb_free(cb);
509
510
511 list_for_each_entry_safe(cb, next, &cl->rd_pending, list)
512 if (!fp || fp == cb->fp)
513 mei_io_cb_free(cb);
514}
515
516/**
517 * mei_cl_flush_queues - flushes queue lists belonging to cl.
518 *
519 * @cl: host client
520 * @fp: file pointer (matching cb file object), may be NULL
521 *
522 * Return: 0 on success, -EINVAL if cl or cl->dev is NULL.
523 */
524int mei_cl_flush_queues(struct mei_cl *cl, const struct file *fp)
525{
526 struct mei_device *dev;
527
528 if (WARN_ON(!cl || !cl->dev))
529 return -EINVAL;
530
531 dev = cl->dev;
532
533 cl_dbg(dev, cl, "remove list entry belonging to cl\n");
534 mei_io_list_free(&cl->dev->write_list, cl);
535 mei_io_list_free(&cl->dev->write_waiting_list, cl);
536 mei_io_list_flush(&cl->dev->ctrl_wr_list, cl);
537 mei_io_list_flush(&cl->dev->ctrl_rd_list, cl);
538 mei_io_list_flush(&cl->dev->amthif_cmd_list, cl);
539
540 mei_cl_read_cb_flush(cl, fp);
541
542 return 0;
543}
544
545
546/**
547 * mei_cl_init - initializes cl.
548 *
549 * @cl: host client to be initialized
550 * @dev: mei device
551 */
552void mei_cl_init(struct mei_cl *cl, struct mei_device *dev)
553{
554 memset(cl, 0, sizeof(struct mei_cl));
555 init_waitqueue_head(&cl->wait);
556 init_waitqueue_head(&cl->rx_wait);
557 init_waitqueue_head(&cl->tx_wait);
558 init_waitqueue_head(&cl->ev_wait);
559 INIT_LIST_HEAD(&cl->rd_completed);
560 INIT_LIST_HEAD(&cl->rd_pending);
561 INIT_LIST_HEAD(&cl->link);
562 cl->writing_state = MEI_IDLE;
563 cl->state = MEI_FILE_INITIALIZING;
564 cl->dev = dev;
565}
566
567/**
568 * mei_cl_allocate - allocates cl structure and sets it up.
569 *
570 * @dev: mei device
571 * Return: The allocated file or NULL on failure
572 */
573struct mei_cl *mei_cl_allocate(struct mei_device *dev)
574{
575 struct mei_cl *cl;
576
577 cl = kmalloc(sizeof(struct mei_cl), GFP_KERNEL);
578 if (!cl)
579 return NULL;
580
581 mei_cl_init(cl, dev);
582
583 return cl;
584}
585
586/**
587 * mei_cl_link - allocate host id in the host map
588 *
589 * @cl: host client
590 *
591 * Return: 0 on success
592 * -EINVAL on incorrect values
593 * -EMFILE if open count exceeded.
594 */
595int mei_cl_link(struct mei_cl *cl)
596{
597 struct mei_device *dev;
598 long open_handle_count;
599 int id;
600
601 if (WARN_ON(!cl || !cl->dev))
602 return -EINVAL;
603
604 dev = cl->dev;
605
606 id = find_first_zero_bit(dev->host_clients_map, MEI_CLIENTS_MAX);
607 if (id >= MEI_CLIENTS_MAX) {
608 dev_err(dev->dev, "id exceeded %d", MEI_CLIENTS_MAX);
609 return -EMFILE;
610 }
611
612 open_handle_count = dev->open_handle_count + dev->iamthif_open_count;
613 if (open_handle_count >= MEI_MAX_OPEN_HANDLE_COUNT) {
614 dev_err(dev->dev, "open_handle_count exceeded %d",
615 MEI_MAX_OPEN_HANDLE_COUNT);
616 return -EMFILE;
617 }
618
619 dev->open_handle_count++;
620
621 cl->host_client_id = id;
622 list_add_tail(&cl->link, &dev->file_list);
623
624 set_bit(id, dev->host_clients_map);
625
626 cl->state = MEI_FILE_INITIALIZING;
627
628 cl_dbg(dev, cl, "link cl\n");
629 return 0;
630}
631
632/**
633 * mei_cl_unlink - remove host client from the list
634 *
635 * @cl: host client
636 *
637 * Return: always 0
638 */
639int mei_cl_unlink(struct mei_cl *cl)
640{
641 struct mei_device *dev;
642
643 /* don't shout on error exit path */
644 if (!cl)
645 return 0;
646
647 /* amthif might not be initialized */
648 if (!cl->dev)
649 return 0;
650
651 dev = cl->dev;
652
653 cl_dbg(dev, cl, "unlink client");
654
655 if (dev->open_handle_count > 0)
656 dev->open_handle_count--;
657
658 /* never clear the 0 bit */
659 if (cl->host_client_id)
660 clear_bit(cl->host_client_id, dev->host_clients_map);
661
662 list_del_init(&cl->link);
663
664 cl->state = MEI_FILE_INITIALIZING;
665
666 return 0;
667}
668
669void mei_host_client_init(struct mei_device *dev)
670{
671 dev->dev_state = MEI_DEV_ENABLED;
672 dev->reset_count = 0;
673
674 schedule_work(&dev->bus_rescan_work);
675
676 pm_runtime_mark_last_busy(dev->dev);
677 dev_dbg(dev->dev, "rpm: autosuspend\n");
678 pm_runtime_autosuspend(dev->dev);
679}
680
681/**
682 * mei_hbuf_acquire - try to acquire host buffer
683 *
684 * @dev: the device structure
685 * Return: true if host buffer was acquired
686 */
687bool mei_hbuf_acquire(struct mei_device *dev)
688{
689 if (mei_pg_state(dev) == MEI_PG_ON ||
690 mei_pg_in_transition(dev)) {
691 dev_dbg(dev->dev, "device is in pg\n");
692 return false;
693 }
694
695 if (!dev->hbuf_is_ready) {
696 dev_dbg(dev->dev, "hbuf is not ready\n");
697 return false;
698 }
699
700 dev->hbuf_is_ready = false;
701
702 return true;
703}
704
705/**
706 * mei_cl_wake_all - wake up readers, writers and event waiters so
707 * they can be interrupted
708 *
709 * @cl: host client
710 */
711static void mei_cl_wake_all(struct mei_cl *cl)
712{
713 struct mei_device *dev = cl->dev;
714
715 /* synchronized under device mutex */
716 if (waitqueue_active(&cl->rx_wait)) {
717 cl_dbg(dev, cl, "Waking up reading client!\n");
718 wake_up_interruptible(&cl->rx_wait);
719 }
720 /* synchronized under device mutex */
721 if (waitqueue_active(&cl->tx_wait)) {
722 cl_dbg(dev, cl, "Waking up writing client!\n");
723 wake_up_interruptible(&cl->tx_wait);
724 }
725 /* synchronized under device mutex */
726 if (waitqueue_active(&cl->ev_wait)) {
727 cl_dbg(dev, cl, "Waking up waiting for event clients!\n");
728 wake_up_interruptible(&cl->ev_wait);
729 }
730}
731
732/**
733 * mei_cl_set_disconnected - set disconnected state and clear
734 * associated states and resources
735 *
736 * @cl: host client
737 */
738void mei_cl_set_disconnected(struct mei_cl *cl)
739{
740 struct mei_device *dev = cl->dev;
741
742 if (cl->state == MEI_FILE_DISCONNECTED ||
743 cl->state == MEI_FILE_INITIALIZING)
744 return;
745
746 cl->state = MEI_FILE_DISCONNECTED;
747 mei_io_list_free(&dev->write_list, cl);
748 mei_io_list_free(&dev->write_waiting_list, cl);
749 mei_io_list_flush(&dev->ctrl_rd_list, cl);
750 mei_io_list_flush(&dev->ctrl_wr_list, cl);
751 mei_cl_wake_all(cl);
752 cl->mei_flow_ctrl_creds = 0;
753 cl->timer_count = 0;
754
755 if (!cl->me_cl)
756 return;
757
758 if (!WARN_ON(cl->me_cl->connect_count == 0))
759 cl->me_cl->connect_count--;
760
761 if (cl->me_cl->connect_count == 0)
762 cl->me_cl->mei_flow_ctrl_creds = 0;
763
764 mei_me_cl_put(cl->me_cl);
765 cl->me_cl = NULL;
766}
767
768static int mei_cl_set_connecting(struct mei_cl *cl, struct mei_me_client *me_cl)
769{
770 if (!mei_me_cl_get(me_cl))
771 return -ENOENT;
772
773 /* only one connection is allowed for fixed address clients */
774 if (me_cl->props.fixed_address) {
775 if (me_cl->connect_count) {
776 mei_me_cl_put(me_cl);
777 return -EBUSY;
778 }
779 }
780
781 cl->me_cl = me_cl;
782 cl->state = MEI_FILE_CONNECTING;
783 cl->me_cl->connect_count++;
784
785 return 0;
786}
787
788/*
789 * mei_cl_send_disconnect - send disconnect request
790 *
791 * @cl: host client
792 * @cb: callback block
793 *
794 * Return: 0, OK; otherwise, error.
795 */
796static int mei_cl_send_disconnect(struct mei_cl *cl, struct mei_cl_cb *cb)
797{
798 struct mei_device *dev;
799 int ret;
800
801 dev = cl->dev;
802
803 ret = mei_hbm_cl_disconnect_req(dev, cl);
804 cl->status = ret;
805 if (ret) {
806 cl->state = MEI_FILE_DISCONNECT_REPLY;
807 return ret;
808 }
809
810 list_move_tail(&cb->list, &dev->ctrl_rd_list.list);
811 cl->timer_count = MEI_CONNECT_TIMEOUT;
812
813 return 0;
814}
815
816/**
817 * mei_cl_irq_disconnect - processes close related operation from
818 * interrupt thread context - send disconnect request
819 *
820 * @cl: client
821 * @cb: callback block.
822 * @cmpl_list: complete list.
823 *
824 * Return: 0, OK; otherwise, error.
825 */
826int mei_cl_irq_disconnect(struct mei_cl *cl, struct mei_cl_cb *cb,
827 struct mei_cl_cb *cmpl_list)
828{
829 struct mei_device *dev = cl->dev;
830 u32 msg_slots;
831 int slots;
832 int ret;
833
834 msg_slots = mei_data2slots(sizeof(struct hbm_client_connect_request));
835 slots = mei_hbuf_empty_slots(dev);
836
837 if (slots < msg_slots)
838 return -EMSGSIZE;
839
840 ret = mei_cl_send_disconnect(cl, cb);
841 if (ret)
842 list_move_tail(&cb->list, &cmpl_list->list);
843
844 return ret;
845}
846
847/**
848 * __mei_cl_disconnect - disconnect host client from the me one
849 * internal function runtime pm has to be already acquired
850 *
851 * @cl: host client
852 *
853 * Return: 0 on success, <0 on failure.
854 */
855static int __mei_cl_disconnect(struct mei_cl *cl)
856{
857 struct mei_device *dev;
858 struct mei_cl_cb *cb;
859 int rets;
860
861 dev = cl->dev;
862
863 cl->state = MEI_FILE_DISCONNECTING;
864
865 cb = mei_io_cb_init(cl, MEI_FOP_DISCONNECT, NULL);
866 rets = cb ? 0 : -ENOMEM;
867 if (rets)
868 goto out;
869
870 cl_dbg(dev, cl, "add disconnect cb to control write list\n");
871 list_add_tail(&cb->list, &dev->ctrl_wr_list.list);
872
873 if (mei_hbuf_acquire(dev)) {
874 rets = mei_cl_send_disconnect(cl, cb);
875 if (rets) {
876 cl_err(dev, cl, "failed to disconnect.\n");
877 goto out;
878 }
879 }
880
881 mutex_unlock(&dev->device_lock);
882 wait_event_timeout(cl->wait, cl->state == MEI_FILE_DISCONNECT_REPLY,
883 mei_secs_to_jiffies(MEI_CL_CONNECT_TIMEOUT));
884 mutex_lock(&dev->device_lock);
885
886 rets = cl->status;
887 if (cl->state != MEI_FILE_DISCONNECT_REPLY) {
888 cl_dbg(dev, cl, "timeout on disconnect from FW client.\n");
889 rets = -ETIME;
890 }
891
892out:
893 /* we disconnect also on error */
894 mei_cl_set_disconnected(cl);
895 if (!rets)
896 cl_dbg(dev, cl, "successfully disconnected from FW client.\n");
897
898 mei_io_cb_free(cb);
899 return rets;
900}
901
902/**
903 * mei_cl_disconnect - disconnect host client from the me one
904 *
905 * @cl: host client
906 *
907 * Locking: called under "dev->device_lock" lock
908 *
909 * Return: 0 on success, <0 on failure.
910 */
911int mei_cl_disconnect(struct mei_cl *cl)
912{
913 struct mei_device *dev;
914 int rets;
915
916 if (WARN_ON(!cl || !cl->dev))
917 return -ENODEV;
918
919 dev = cl->dev;
920
921 cl_dbg(dev, cl, "disconnecting");
922
923 if (!mei_cl_is_connected(cl))
924 return 0;
925
926 if (mei_cl_is_fixed_address(cl)) {
927 mei_cl_set_disconnected(cl);
928 return 0;
929 }
930
931 rets = pm_runtime_get(dev->dev);
932 if (rets < 0 && rets != -EINPROGRESS) {
933 pm_runtime_put_noidle(dev->dev);
934 cl_err(dev, cl, "rpm: get failed %d\n", rets);
935 return rets;
936 }
937
938 rets = __mei_cl_disconnect(cl);
939
940 cl_dbg(dev, cl, "rpm: autosuspend\n");
941 pm_runtime_mark_last_busy(dev->dev);
942 pm_runtime_put_autosuspend(dev->dev);
943
944 return rets;
945}
946
947
948/**
949 * mei_cl_is_other_connecting - checks if other
950 * client with the same me client id is connecting
951 *
952 * @cl: private data of the file object
953 *
954 * Return: true if other client is connected, false - otherwise.
955 */
956static bool mei_cl_is_other_connecting(struct mei_cl *cl)
957{
958 struct mei_device *dev;
959 struct mei_cl_cb *cb;
960
961 dev = cl->dev;
962
963 list_for_each_entry(cb, &dev->ctrl_rd_list.list, list) {
964 if (cb->fop_type == MEI_FOP_CONNECT &&
965 mei_cl_me_id(cl) == mei_cl_me_id(cb->cl))
966 return true;
967 }
968
969 return false;
970}
971
972/**
973 * mei_cl_send_connect - send connect request
974 *
975 * @cl: host client
976 * @cb: callback block
977 *
978 * Return: 0, OK; otherwise, error.
979 */
980static int mei_cl_send_connect(struct mei_cl *cl, struct mei_cl_cb *cb)
981{
982 struct mei_device *dev;
983 int ret;
984
985 dev = cl->dev;
986
987 ret = mei_hbm_cl_connect_req(dev, cl);
988 cl->status = ret;
989 if (ret) {
990 cl->state = MEI_FILE_DISCONNECT_REPLY;
991 return ret;
992 }
993
994 list_move_tail(&cb->list, &dev->ctrl_rd_list.list);
995 cl->timer_count = MEI_CONNECT_TIMEOUT;
996 return 0;
997}
998
999/**
1000 * mei_cl_irq_connect - send connect request in irq_thread context
1001 *
1002 * @cl: host client
1003 * @cb: callback block
1004 * @cmpl_list: complete list
1005 *
1006 * Return: 0, OK; otherwise, error.
1007 */
1008int mei_cl_irq_connect(struct mei_cl *cl, struct mei_cl_cb *cb,
1009 struct mei_cl_cb *cmpl_list)
1010{
1011 struct mei_device *dev = cl->dev;
1012 u32 msg_slots;
1013 int slots;
1014 int rets;
1015
1016 msg_slots = mei_data2slots(sizeof(struct hbm_client_connect_request));
1017 slots = mei_hbuf_empty_slots(dev);
1018
1019 if (mei_cl_is_other_connecting(cl))
1020 return 0;
1021
1022 if (slots < msg_slots)
1023 return -EMSGSIZE;
1024
1025 rets = mei_cl_send_connect(cl, cb);
1026 if (rets)
1027 list_move_tail(&cb->list, &cmpl_list->list);
1028
1029 return rets;
1030}
1031
1032/**
1033 * mei_cl_connect - connect host client to the me one
1034 *
1035 * @cl: host client
1036 * @me_cl: me client
1037 * @file: pointer to file structure
1038 *
1039 * Locking: called under "dev->device_lock" lock
1040 *
1041 * Return: 0 on success, <0 on failure.
1042 */
1043int mei_cl_connect(struct mei_cl *cl, struct mei_me_client *me_cl,
1044 const struct file *file)
1045{
1046 struct mei_device *dev;
1047 struct mei_cl_cb *cb;
1048 int rets;
1049
1050 if (WARN_ON(!cl || !cl->dev || !me_cl))
1051 return -ENODEV;
1052
1053 dev = cl->dev;
1054
1055 rets = mei_cl_set_connecting(cl, me_cl);
1056 if (rets)
1057 return rets;
1058
1059 if (mei_cl_is_fixed_address(cl)) {
1060 cl->state = MEI_FILE_CONNECTED;
1061 return 0;
1062 }
1063
1064 rets = pm_runtime_get(dev->dev);
1065 if (rets < 0 && rets != -EINPROGRESS) {
1066 pm_runtime_put_noidle(dev->dev);
1067 cl_err(dev, cl, "rpm: get failed %d\n", rets);
1068 goto nortpm;
1069 }
1070
1071 cb = mei_io_cb_init(cl, MEI_FOP_CONNECT, file);
1072 rets = cb ? 0 : -ENOMEM;
1073 if (rets)
1074 goto out;
1075
1076 list_add_tail(&cb->list, &dev->ctrl_wr_list.list);
1077
1078 /* run hbuf acquire last so we don't have to undo */
1079 if (!mei_cl_is_other_connecting(cl) && mei_hbuf_acquire(dev)) {
1080 rets = mei_cl_send_connect(cl, cb);
1081 if (rets)
1082 goto out;
1083 }
1084
1085 mutex_unlock(&dev->device_lock);
1086 wait_event_timeout(cl->wait,
1087 (cl->state == MEI_FILE_CONNECTED ||
1088 cl->state == MEI_FILE_DISCONNECT_REQUIRED ||
1089 cl->state == MEI_FILE_DISCONNECT_REPLY),
1090 mei_secs_to_jiffies(MEI_CL_CONNECT_TIMEOUT));
1091 mutex_lock(&dev->device_lock);
1092
1093 if (!mei_cl_is_connected(cl)) {
1094 if (cl->state == MEI_FILE_DISCONNECT_REQUIRED) {
1095 mei_io_list_flush(&dev->ctrl_rd_list, cl);
1096 mei_io_list_flush(&dev->ctrl_wr_list, cl);
1097 /* ignore disconnect return valuue;
1098 * in case of failure reset will be invoked
1099 */
1100 __mei_cl_disconnect(cl);
1101 rets = -EFAULT;
1102 goto out;
1103 }
1104
1105 /* timeout or something went really wrong */
1106 if (!cl->status)
1107 cl->status = -EFAULT;
1108 }
1109
1110 rets = cl->status;
1111out:
1112 cl_dbg(dev, cl, "rpm: autosuspend\n");
1113 pm_runtime_mark_last_busy(dev->dev);
1114 pm_runtime_put_autosuspend(dev->dev);
1115
1116 mei_io_cb_free(cb);
1117
1118nortpm:
1119 if (!mei_cl_is_connected(cl))
1120 mei_cl_set_disconnected(cl);
1121
1122 return rets;
1123}
1124
1125/**
1126 * mei_cl_alloc_linked - allocate and link host client
1127 *
1128 * @dev: the device structure
1129 *
1130 * Return: cl on success ERR_PTR on failure
1131 */
1132struct mei_cl *mei_cl_alloc_linked(struct mei_device *dev)
1133{
1134 struct mei_cl *cl;
1135 int ret;
1136
1137 cl = mei_cl_allocate(dev);
1138 if (!cl) {
1139 ret = -ENOMEM;
1140 goto err;
1141 }
1142
1143 ret = mei_cl_link(cl);
1144 if (ret)
1145 goto err;
1146
1147 return cl;
1148err:
1149 kfree(cl);
1150 return ERR_PTR(ret);
1151}
1152
1153
1154
1155/**
1156 * mei_cl_flow_ctrl_creds - checks flow_control credits for cl.
1157 *
1158 * @cl: host client
1159 * @fp: the file pointer associated with the pointer
1160 *
1161 * Return: 1 if mei_flow_ctrl_creds >0, 0 - otherwise.
1162 */
1163static int mei_cl_flow_ctrl_creds(struct mei_cl *cl, const struct file *fp)
1164{
1165 int rets;
1166
1167 if (WARN_ON(!cl || !cl->me_cl))
1168 return -EINVAL;
1169
1170 if (cl->mei_flow_ctrl_creds > 0)
1171 return 1;
1172
1173 if (mei_cl_is_fixed_address(cl)) {
1174 rets = mei_cl_read_start(cl, mei_cl_mtu(cl), fp);
1175 if (rets && rets != -EBUSY)
1176 return rets;
1177 return 1;
1178 }
1179
1180 if (mei_cl_is_single_recv_buf(cl)) {
1181 if (cl->me_cl->mei_flow_ctrl_creds > 0)
1182 return 1;
1183 }
1184 return 0;
1185}
1186
1187/**
1188 * mei_cl_flow_ctrl_reduce - reduces flow_control.
1189 *
1190 * @cl: private data of the file object
1191 *
1192 * Return:
1193 * 0 on success
1194 * -EINVAL when ctrl credits are <= 0
1195 */
1196static int mei_cl_flow_ctrl_reduce(struct mei_cl *cl)
1197{
1198 if (WARN_ON(!cl || !cl->me_cl))
1199 return -EINVAL;
1200
1201 if (mei_cl_is_fixed_address(cl))
1202 return 0;
1203
1204 if (mei_cl_is_single_recv_buf(cl)) {
1205 if (WARN_ON(cl->me_cl->mei_flow_ctrl_creds <= 0))
1206 return -EINVAL;
1207 cl->me_cl->mei_flow_ctrl_creds--;
1208 } else {
1209 if (WARN_ON(cl->mei_flow_ctrl_creds <= 0))
1210 return -EINVAL;
1211 cl->mei_flow_ctrl_creds--;
1212 }
1213 return 0;
1214}
1215
1216/**
1217 * mei_cl_notify_fop2req - convert fop to proper request
1218 *
1219 * @fop: client notification start response command
1220 *
1221 * Return: MEI_HBM_NOTIFICATION_START/STOP
1222 */
1223u8 mei_cl_notify_fop2req(enum mei_cb_file_ops fop)
1224{
1225 if (fop == MEI_FOP_NOTIFY_START)
1226 return MEI_HBM_NOTIFICATION_START;
1227 else
1228 return MEI_HBM_NOTIFICATION_STOP;
1229}
1230
1231/**
1232 * mei_cl_notify_req2fop - convert notification request top file operation type
1233 *
1234 * @req: hbm notification request type
1235 *
1236 * Return: MEI_FOP_NOTIFY_START/STOP
1237 */
1238enum mei_cb_file_ops mei_cl_notify_req2fop(u8 req)
1239{
1240 if (req == MEI_HBM_NOTIFICATION_START)
1241 return MEI_FOP_NOTIFY_START;
1242 else
1243 return MEI_FOP_NOTIFY_STOP;
1244}
1245
1246/**
1247 * mei_cl_irq_notify - send notification request in irq_thread context
1248 *
1249 * @cl: client
1250 * @cb: callback block.
1251 * @cmpl_list: complete list.
1252 *
1253 * Return: 0 on such and error otherwise.
1254 */
1255int mei_cl_irq_notify(struct mei_cl *cl, struct mei_cl_cb *cb,
1256 struct mei_cl_cb *cmpl_list)
1257{
1258 struct mei_device *dev = cl->dev;
1259 u32 msg_slots;
1260 int slots;
1261 int ret;
1262 bool request;
1263
1264 msg_slots = mei_data2slots(sizeof(struct hbm_client_connect_request));
1265 slots = mei_hbuf_empty_slots(dev);
1266
1267 if (slots < msg_slots)
1268 return -EMSGSIZE;
1269
1270 request = mei_cl_notify_fop2req(cb->fop_type);
1271 ret = mei_hbm_cl_notify_req(dev, cl, request);
1272 if (ret) {
1273 cl->status = ret;
1274 list_move_tail(&cb->list, &cmpl_list->list);
1275 return ret;
1276 }
1277
1278 list_move_tail(&cb->list, &dev->ctrl_rd_list.list);
1279 return 0;
1280}
1281
1282/**
1283 * mei_cl_notify_request - send notification stop/start request
1284 *
1285 * @cl: host client
1286 * @file: associate request with file
1287 * @request: 1 for start or 0 for stop
1288 *
1289 * Locking: called under "dev->device_lock" lock
1290 *
1291 * Return: 0 on such and error otherwise.
1292 */
1293int mei_cl_notify_request(struct mei_cl *cl,
1294 const struct file *file, u8 request)
1295{
1296 struct mei_device *dev;
1297 struct mei_cl_cb *cb;
1298 enum mei_cb_file_ops fop_type;
1299 int rets;
1300
1301 if (WARN_ON(!cl || !cl->dev))
1302 return -ENODEV;
1303
1304 dev = cl->dev;
1305
1306 if (!dev->hbm_f_ev_supported) {
1307 cl_dbg(dev, cl, "notifications not supported\n");
1308 return -EOPNOTSUPP;
1309 }
1310
1311 rets = pm_runtime_get(dev->dev);
1312 if (rets < 0 && rets != -EINPROGRESS) {
1313 pm_runtime_put_noidle(dev->dev);
1314 cl_err(dev, cl, "rpm: get failed %d\n", rets);
1315 return rets;
1316 }
1317
1318 fop_type = mei_cl_notify_req2fop(request);
1319 cb = mei_io_cb_init(cl, fop_type, file);
1320 if (!cb) {
1321 rets = -ENOMEM;
1322 goto out;
1323 }
1324
1325 if (mei_hbuf_acquire(dev)) {
1326 if (mei_hbm_cl_notify_req(dev, cl, request)) {
1327 rets = -ENODEV;
1328 goto out;
1329 }
1330 list_add_tail(&cb->list, &dev->ctrl_rd_list.list);
1331 } else {
1332 list_add_tail(&cb->list, &dev->ctrl_wr_list.list);
1333 }
1334
1335 mutex_unlock(&dev->device_lock);
1336 wait_event_timeout(cl->wait, cl->notify_en == request,
1337 mei_secs_to_jiffies(MEI_CL_CONNECT_TIMEOUT));
1338 mutex_lock(&dev->device_lock);
1339
1340 if (cl->notify_en != request) {
1341 mei_io_list_flush(&dev->ctrl_rd_list, cl);
1342 mei_io_list_flush(&dev->ctrl_wr_list, cl);
1343 if (!cl->status)
1344 cl->status = -EFAULT;
1345 }
1346
1347 rets = cl->status;
1348
1349out:
1350 cl_dbg(dev, cl, "rpm: autosuspend\n");
1351 pm_runtime_mark_last_busy(dev->dev);
1352 pm_runtime_put_autosuspend(dev->dev);
1353
1354 mei_io_cb_free(cb);
1355 return rets;
1356}
1357
1358/**
1359 * mei_cl_notify - raise notification
1360 *
1361 * @cl: host client
1362 *
1363 * Locking: called under "dev->device_lock" lock
1364 */
1365void mei_cl_notify(struct mei_cl *cl)
1366{
1367 struct mei_device *dev;
1368
1369 if (!cl || !cl->dev)
1370 return;
1371
1372 dev = cl->dev;
1373
1374 if (!cl->notify_en)
1375 return;
1376
1377 cl_dbg(dev, cl, "notify event");
1378 cl->notify_ev = true;
1379 if (!mei_cl_bus_notify_event(cl))
1380 wake_up_interruptible(&cl->ev_wait);
1381
1382 if (cl->ev_async)
1383 kill_fasync(&cl->ev_async, SIGIO, POLL_PRI);
1384
1385}
1386
1387/**
1388 * mei_cl_notify_get - get or wait for notification event
1389 *
1390 * @cl: host client
1391 * @block: this request is blocking
1392 * @notify_ev: true if notification event was received
1393 *
1394 * Locking: called under "dev->device_lock" lock
1395 *
1396 * Return: 0 on such and error otherwise.
1397 */
1398int mei_cl_notify_get(struct mei_cl *cl, bool block, bool *notify_ev)
1399{
1400 struct mei_device *dev;
1401 int rets;
1402
1403 *notify_ev = false;
1404
1405 if (WARN_ON(!cl || !cl->dev))
1406 return -ENODEV;
1407
1408 dev = cl->dev;
1409
1410 if (!mei_cl_is_connected(cl))
1411 return -ENODEV;
1412
1413 if (cl->notify_ev)
1414 goto out;
1415
1416 if (!block)
1417 return -EAGAIN;
1418
1419 mutex_unlock(&dev->device_lock);
1420 rets = wait_event_interruptible(cl->ev_wait, cl->notify_ev);
1421 mutex_lock(&dev->device_lock);
1422
1423 if (rets < 0)
1424 return rets;
1425
1426out:
1427 *notify_ev = cl->notify_ev;
1428 cl->notify_ev = false;
1429 return 0;
1430}
1431
1432/**
1433 * mei_cl_is_read_fc_cb - check if read cb is waiting for flow control
1434 * for given host client
1435 *
1436 * @cl: host client
1437 *
1438 * Return: true, if found at least one cb.
1439 */
1440static bool mei_cl_is_read_fc_cb(struct mei_cl *cl)
1441{
1442 struct mei_device *dev = cl->dev;
1443 struct mei_cl_cb *cb;
1444
1445 list_for_each_entry(cb, &dev->ctrl_wr_list.list, list)
1446 if (cb->fop_type == MEI_FOP_READ && cb->cl == cl)
1447 return true;
1448 return false;
1449}
1450
1451/**
1452 * mei_cl_read_start - the start read client message function.
1453 *
1454 * @cl: host client
1455 * @length: number of bytes to read
1456 * @fp: pointer to file structure
1457 *
1458 * Return: 0 on success, <0 on failure.
1459 */
1460int mei_cl_read_start(struct mei_cl *cl, size_t length, const struct file *fp)
1461{
1462 struct mei_device *dev;
1463 struct mei_cl_cb *cb;
1464 int rets;
1465
1466 if (WARN_ON(!cl || !cl->dev))
1467 return -ENODEV;
1468
1469 dev = cl->dev;
1470
1471 if (!mei_cl_is_connected(cl))
1472 return -ENODEV;
1473
1474 /* HW currently supports only one pending read */
1475 if (!list_empty(&cl->rd_pending) || mei_cl_is_read_fc_cb(cl))
1476 return -EBUSY;
1477
1478 if (!mei_me_cl_is_active(cl->me_cl)) {
1479 cl_err(dev, cl, "no such me client\n");
1480 return -ENOTTY;
1481 }
1482
1483 /* always allocate at least client max message */
1484 length = max_t(size_t, length, mei_cl_mtu(cl));
1485 cb = mei_cl_alloc_cb(cl, length, MEI_FOP_READ, fp);
1486 if (!cb)
1487 return -ENOMEM;
1488
1489 if (mei_cl_is_fixed_address(cl)) {
1490 list_add_tail(&cb->list, &cl->rd_pending);
1491 return 0;
1492 }
1493
1494 rets = pm_runtime_get(dev->dev);
1495 if (rets < 0 && rets != -EINPROGRESS) {
1496 pm_runtime_put_noidle(dev->dev);
1497 cl_err(dev, cl, "rpm: get failed %d\n", rets);
1498 goto nortpm;
1499 }
1500
1501 if (mei_hbuf_acquire(dev)) {
1502 rets = mei_hbm_cl_flow_control_req(dev, cl);
1503 if (rets < 0)
1504 goto out;
1505
1506 list_add_tail(&cb->list, &cl->rd_pending);
1507 } else {
1508 rets = 0;
1509 list_add_tail(&cb->list, &dev->ctrl_wr_list.list);
1510 }
1511
1512out:
1513 cl_dbg(dev, cl, "rpm: autosuspend\n");
1514 pm_runtime_mark_last_busy(dev->dev);
1515 pm_runtime_put_autosuspend(dev->dev);
1516nortpm:
1517 if (rets)
1518 mei_io_cb_free(cb);
1519
1520 return rets;
1521}
1522
1523/**
1524 * mei_cl_irq_write - write a message to device
1525 * from the interrupt thread context
1526 *
1527 * @cl: client
1528 * @cb: callback block.
1529 * @cmpl_list: complete list.
1530 *
1531 * Return: 0, OK; otherwise error.
1532 */
1533int mei_cl_irq_write(struct mei_cl *cl, struct mei_cl_cb *cb,
1534 struct mei_cl_cb *cmpl_list)
1535{
1536 struct mei_device *dev;
1537 struct mei_msg_data *buf;
1538 struct mei_msg_hdr mei_hdr;
1539 size_t len;
1540 u32 msg_slots;
1541 int slots;
1542 int rets;
1543 bool first_chunk;
1544
1545 if (WARN_ON(!cl || !cl->dev))
1546 return -ENODEV;
1547
1548 dev = cl->dev;
1549
1550 buf = &cb->buf;
1551
1552 first_chunk = cb->buf_idx == 0;
1553
1554 rets = first_chunk ? mei_cl_flow_ctrl_creds(cl, cb->fp) : 1;
1555 if (rets < 0)
1556 return rets;
1557
1558 if (rets == 0) {
1559 cl_dbg(dev, cl, "No flow control credentials: not sending.\n");
1560 return 0;
1561 }
1562
1563 slots = mei_hbuf_empty_slots(dev);
1564 len = buf->size - cb->buf_idx;
1565 msg_slots = mei_data2slots(len);
1566
1567 mei_hdr.host_addr = mei_cl_host_addr(cl);
1568 mei_hdr.me_addr = mei_cl_me_id(cl);
1569 mei_hdr.reserved = 0;
1570 mei_hdr.internal = cb->internal;
1571
1572 if (slots >= msg_slots) {
1573 mei_hdr.length = len;
1574 mei_hdr.msg_complete = 1;
1575 /* Split the message only if we can write the whole host buffer */
1576 } else if (slots == dev->hbuf_depth) {
1577 msg_slots = slots;
1578 len = (slots * sizeof(u32)) - sizeof(struct mei_msg_hdr);
1579 mei_hdr.length = len;
1580 mei_hdr.msg_complete = 0;
1581 } else {
1582 /* wait for next time the host buffer is empty */
1583 return 0;
1584 }
1585
1586 cl_dbg(dev, cl, "buf: size = %zu idx = %zu\n",
1587 cb->buf.size, cb->buf_idx);
1588
1589 rets = mei_write_message(dev, &mei_hdr, buf->data + cb->buf_idx);
1590 if (rets) {
1591 cl->status = rets;
1592 list_move_tail(&cb->list, &cmpl_list->list);
1593 return rets;
1594 }
1595
1596 cl->status = 0;
1597 cl->writing_state = MEI_WRITING;
1598 cb->buf_idx += mei_hdr.length;
1599 cb->completed = mei_hdr.msg_complete == 1;
1600
1601 if (first_chunk) {
1602 if (mei_cl_flow_ctrl_reduce(cl))
1603 return -EIO;
1604 }
1605
1606 if (mei_hdr.msg_complete)
1607 list_move_tail(&cb->list, &dev->write_waiting_list.list);
1608
1609 return 0;
1610}
1611
1612/**
1613 * mei_cl_write - submit a write cb to mei device
1614 * assumes device_lock is locked
1615 *
1616 * @cl: host client
1617 * @cb: write callback with filled data
1618 * @blocking: block until completed
1619 *
1620 * Return: number of bytes sent on success, <0 on failure.
1621 */
1622int mei_cl_write(struct mei_cl *cl, struct mei_cl_cb *cb, bool blocking)
1623{
1624 struct mei_device *dev;
1625 struct mei_msg_data *buf;
1626 struct mei_msg_hdr mei_hdr;
1627 int size;
1628 int rets;
1629
1630
1631 if (WARN_ON(!cl || !cl->dev))
1632 return -ENODEV;
1633
1634 if (WARN_ON(!cb))
1635 return -EINVAL;
1636
1637 dev = cl->dev;
1638
1639 buf = &cb->buf;
1640 size = buf->size;
1641
1642 cl_dbg(dev, cl, "size=%d\n", size);
1643
1644 rets = pm_runtime_get(dev->dev);
1645 if (rets < 0 && rets != -EINPROGRESS) {
1646 pm_runtime_put_noidle(dev->dev);
1647 cl_err(dev, cl, "rpm: get failed %d\n", rets);
1648 goto free;
1649 }
1650
1651 cb->buf_idx = 0;
1652 cl->writing_state = MEI_IDLE;
1653
1654 mei_hdr.host_addr = mei_cl_host_addr(cl);
1655 mei_hdr.me_addr = mei_cl_me_id(cl);
1656 mei_hdr.reserved = 0;
1657 mei_hdr.msg_complete = 0;
1658 mei_hdr.internal = cb->internal;
1659
1660 rets = mei_cl_flow_ctrl_creds(cl, cb->fp);
1661 if (rets < 0)
1662 goto err;
1663
1664 if (rets == 0) {
1665 cl_dbg(dev, cl, "No flow control credentials: not sending.\n");
1666 rets = size;
1667 goto out;
1668 }
1669 if (!mei_hbuf_acquire(dev)) {
1670 cl_dbg(dev, cl, "Cannot acquire the host buffer: not sending.\n");
1671 rets = size;
1672 goto out;
1673 }
1674
1675 /* Check for a maximum length */
1676 if (size > mei_hbuf_max_len(dev)) {
1677 mei_hdr.length = mei_hbuf_max_len(dev);
1678 mei_hdr.msg_complete = 0;
1679 } else {
1680 mei_hdr.length = size;
1681 mei_hdr.msg_complete = 1;
1682 }
1683
1684 rets = mei_write_message(dev, &mei_hdr, buf->data);
1685 if (rets)
1686 goto err;
1687
1688 rets = mei_cl_flow_ctrl_reduce(cl);
1689 if (rets)
1690 goto err;
1691
1692 cl->writing_state = MEI_WRITING;
1693 cb->buf_idx = mei_hdr.length;
1694 cb->completed = mei_hdr.msg_complete == 1;
1695
1696out:
1697 if (mei_hdr.msg_complete)
1698 list_add_tail(&cb->list, &dev->write_waiting_list.list);
1699 else
1700 list_add_tail(&cb->list, &dev->write_list.list);
1701
1702 cb = NULL;
1703 if (blocking && cl->writing_state != MEI_WRITE_COMPLETE) {
1704
1705 mutex_unlock(&dev->device_lock);
1706 rets = wait_event_interruptible(cl->tx_wait,
1707 cl->writing_state == MEI_WRITE_COMPLETE ||
1708 (!mei_cl_is_connected(cl)));
1709 mutex_lock(&dev->device_lock);
1710 /* wait_event_interruptible returns -ERESTARTSYS */
1711 if (rets) {
1712 if (signal_pending(current))
1713 rets = -EINTR;
1714 goto err;
1715 }
1716 if (cl->writing_state != MEI_WRITE_COMPLETE) {
1717 rets = -EFAULT;
1718 goto err;
1719 }
1720 }
1721
1722 rets = size;
1723err:
1724 cl_dbg(dev, cl, "rpm: autosuspend\n");
1725 pm_runtime_mark_last_busy(dev->dev);
1726 pm_runtime_put_autosuspend(dev->dev);
1727free:
1728 mei_io_cb_free(cb);
1729
1730 return rets;
1731}
1732
1733
1734/**
1735 * mei_cl_complete - processes completed operation for a client
1736 *
1737 * @cl: private data of the file object.
1738 * @cb: callback block.
1739 */
1740void mei_cl_complete(struct mei_cl *cl, struct mei_cl_cb *cb)
1741{
1742 struct mei_device *dev = cl->dev;
1743
1744 switch (cb->fop_type) {
1745 case MEI_FOP_WRITE:
1746 mei_io_cb_free(cb);
1747 cl->writing_state = MEI_WRITE_COMPLETE;
1748 if (waitqueue_active(&cl->tx_wait)) {
1749 wake_up_interruptible(&cl->tx_wait);
1750 } else {
1751 pm_runtime_mark_last_busy(dev->dev);
1752 pm_request_autosuspend(dev->dev);
1753 }
1754 break;
1755
1756 case MEI_FOP_READ:
1757 list_add_tail(&cb->list, &cl->rd_completed);
1758 if (!mei_cl_bus_rx_event(cl))
1759 wake_up_interruptible(&cl->rx_wait);
1760 break;
1761
1762 case MEI_FOP_CONNECT:
1763 case MEI_FOP_DISCONNECT:
1764 case MEI_FOP_NOTIFY_STOP:
1765 case MEI_FOP_NOTIFY_START:
1766 if (waitqueue_active(&cl->wait))
1767 wake_up(&cl->wait);
1768
1769 break;
1770 default:
1771 BUG_ON(0);
1772 }
1773}
1774
1775
1776/**
1777 * mei_cl_all_disconnect - disconnect forcefully all connected clients
1778 *
1779 * @dev: mei device
1780 */
1781void mei_cl_all_disconnect(struct mei_device *dev)
1782{
1783 struct mei_cl *cl;
1784
1785 list_for_each_entry(cl, &dev->file_list, link)
1786 mei_cl_set_disconnected(cl);
1787}
1// SPDX-License-Identifier: GPL-2.0
2/*
3 * Copyright (c) 2003-2019, Intel Corporation. All rights reserved.
4 * Intel Management Engine Interface (Intel MEI) Linux driver
5 */
6
7#include <linux/sched/signal.h>
8#include <linux/wait.h>
9#include <linux/delay.h>
10#include <linux/slab.h>
11#include <linux/pm_runtime.h>
12
13#include <linux/mei.h>
14
15#include "mei_dev.h"
16#include "hbm.h"
17#include "client.h"
18
19/**
20 * mei_me_cl_init - initialize me client
21 *
22 * @me_cl: me client
23 */
24void mei_me_cl_init(struct mei_me_client *me_cl)
25{
26 INIT_LIST_HEAD(&me_cl->list);
27 kref_init(&me_cl->refcnt);
28}
29
30/**
31 * mei_me_cl_get - increases me client refcount
32 *
33 * @me_cl: me client
34 *
35 * Locking: called under "dev->device_lock" lock
36 *
37 * Return: me client or NULL
38 */
39struct mei_me_client *mei_me_cl_get(struct mei_me_client *me_cl)
40{
41 if (me_cl && kref_get_unless_zero(&me_cl->refcnt))
42 return me_cl;
43
44 return NULL;
45}
46
47/**
48 * mei_me_cl_release - free me client
49 *
50 * Locking: called under "dev->device_lock" lock
51 *
52 * @ref: me_client refcount
53 */
54static void mei_me_cl_release(struct kref *ref)
55{
56 struct mei_me_client *me_cl =
57 container_of(ref, struct mei_me_client, refcnt);
58
59 kfree(me_cl);
60}
61
62/**
63 * mei_me_cl_put - decrease me client refcount and free client if necessary
64 *
65 * Locking: called under "dev->device_lock" lock
66 *
67 * @me_cl: me client
68 */
69void mei_me_cl_put(struct mei_me_client *me_cl)
70{
71 if (me_cl)
72 kref_put(&me_cl->refcnt, mei_me_cl_release);
73}
74
75/**
76 * __mei_me_cl_del - delete me client from the list and decrease
77 * reference counter
78 *
79 * @dev: mei device
80 * @me_cl: me client
81 *
82 * Locking: dev->me_clients_rwsem
83 */
84static void __mei_me_cl_del(struct mei_device *dev, struct mei_me_client *me_cl)
85{
86 if (!me_cl)
87 return;
88
89 list_del_init(&me_cl->list);
90 mei_me_cl_put(me_cl);
91}
92
93/**
94 * mei_me_cl_del - delete me client from the list and decrease
95 * reference counter
96 *
97 * @dev: mei device
98 * @me_cl: me client
99 */
100void mei_me_cl_del(struct mei_device *dev, struct mei_me_client *me_cl)
101{
102 down_write(&dev->me_clients_rwsem);
103 __mei_me_cl_del(dev, me_cl);
104 up_write(&dev->me_clients_rwsem);
105}
106
107/**
108 * mei_me_cl_add - add me client to the list
109 *
110 * @dev: mei device
111 * @me_cl: me client
112 */
113void mei_me_cl_add(struct mei_device *dev, struct mei_me_client *me_cl)
114{
115 down_write(&dev->me_clients_rwsem);
116 list_add(&me_cl->list, &dev->me_clients);
117 up_write(&dev->me_clients_rwsem);
118}
119
120/**
121 * __mei_me_cl_by_uuid - locate me client by uuid
122 * increases ref count
123 *
124 * @dev: mei device
125 * @uuid: me client uuid
126 *
127 * Return: me client or NULL if not found
128 *
129 * Locking: dev->me_clients_rwsem
130 */
131static struct mei_me_client *__mei_me_cl_by_uuid(struct mei_device *dev,
132 const uuid_le *uuid)
133{
134 struct mei_me_client *me_cl;
135 const uuid_le *pn;
136
137 WARN_ON(!rwsem_is_locked(&dev->me_clients_rwsem));
138
139 list_for_each_entry(me_cl, &dev->me_clients, list) {
140 pn = &me_cl->props.protocol_name;
141 if (uuid_le_cmp(*uuid, *pn) == 0)
142 return mei_me_cl_get(me_cl);
143 }
144
145 return NULL;
146}
147
148/**
149 * mei_me_cl_by_uuid - locate me client by uuid
150 * increases ref count
151 *
152 * @dev: mei device
153 * @uuid: me client uuid
154 *
155 * Return: me client or NULL if not found
156 *
157 * Locking: dev->me_clients_rwsem
158 */
159struct mei_me_client *mei_me_cl_by_uuid(struct mei_device *dev,
160 const uuid_le *uuid)
161{
162 struct mei_me_client *me_cl;
163
164 down_read(&dev->me_clients_rwsem);
165 me_cl = __mei_me_cl_by_uuid(dev, uuid);
166 up_read(&dev->me_clients_rwsem);
167
168 return me_cl;
169}
170
171/**
172 * mei_me_cl_by_id - locate me client by client id
173 * increases ref count
174 *
175 * @dev: the device structure
176 * @client_id: me client id
177 *
178 * Return: me client or NULL if not found
179 *
180 * Locking: dev->me_clients_rwsem
181 */
182struct mei_me_client *mei_me_cl_by_id(struct mei_device *dev, u8 client_id)
183{
184
185 struct mei_me_client *__me_cl, *me_cl = NULL;
186
187 down_read(&dev->me_clients_rwsem);
188 list_for_each_entry(__me_cl, &dev->me_clients, list) {
189 if (__me_cl->client_id == client_id) {
190 me_cl = mei_me_cl_get(__me_cl);
191 break;
192 }
193 }
194 up_read(&dev->me_clients_rwsem);
195
196 return me_cl;
197}
198
199/**
200 * __mei_me_cl_by_uuid_id - locate me client by client id and uuid
201 * increases ref count
202 *
203 * @dev: the device structure
204 * @uuid: me client uuid
205 * @client_id: me client id
206 *
207 * Return: me client or null if not found
208 *
209 * Locking: dev->me_clients_rwsem
210 */
211static struct mei_me_client *__mei_me_cl_by_uuid_id(struct mei_device *dev,
212 const uuid_le *uuid, u8 client_id)
213{
214 struct mei_me_client *me_cl;
215 const uuid_le *pn;
216
217 WARN_ON(!rwsem_is_locked(&dev->me_clients_rwsem));
218
219 list_for_each_entry(me_cl, &dev->me_clients, list) {
220 pn = &me_cl->props.protocol_name;
221 if (uuid_le_cmp(*uuid, *pn) == 0 &&
222 me_cl->client_id == client_id)
223 return mei_me_cl_get(me_cl);
224 }
225
226 return NULL;
227}
228
229
230/**
231 * mei_me_cl_by_uuid_id - locate me client by client id and uuid
232 * increases ref count
233 *
234 * @dev: the device structure
235 * @uuid: me client uuid
236 * @client_id: me client id
237 *
238 * Return: me client or null if not found
239 */
240struct mei_me_client *mei_me_cl_by_uuid_id(struct mei_device *dev,
241 const uuid_le *uuid, u8 client_id)
242{
243 struct mei_me_client *me_cl;
244
245 down_read(&dev->me_clients_rwsem);
246 me_cl = __mei_me_cl_by_uuid_id(dev, uuid, client_id);
247 up_read(&dev->me_clients_rwsem);
248
249 return me_cl;
250}
251
252/**
253 * mei_me_cl_rm_by_uuid - remove all me clients matching uuid
254 *
255 * @dev: the device structure
256 * @uuid: me client uuid
257 *
258 * Locking: called under "dev->device_lock" lock
259 */
260void mei_me_cl_rm_by_uuid(struct mei_device *dev, const uuid_le *uuid)
261{
262 struct mei_me_client *me_cl;
263
264 dev_dbg(dev->dev, "remove %pUl\n", uuid);
265
266 down_write(&dev->me_clients_rwsem);
267 me_cl = __mei_me_cl_by_uuid(dev, uuid);
268 __mei_me_cl_del(dev, me_cl);
269 up_write(&dev->me_clients_rwsem);
270}
271
272/**
273 * mei_me_cl_rm_by_uuid_id - remove all me clients matching client id
274 *
275 * @dev: the device structure
276 * @uuid: me client uuid
277 * @id: me client id
278 *
279 * Locking: called under "dev->device_lock" lock
280 */
281void mei_me_cl_rm_by_uuid_id(struct mei_device *dev, const uuid_le *uuid, u8 id)
282{
283 struct mei_me_client *me_cl;
284
285 dev_dbg(dev->dev, "remove %pUl %d\n", uuid, id);
286
287 down_write(&dev->me_clients_rwsem);
288 me_cl = __mei_me_cl_by_uuid_id(dev, uuid, id);
289 __mei_me_cl_del(dev, me_cl);
290 up_write(&dev->me_clients_rwsem);
291}
292
293/**
294 * mei_me_cl_rm_all - remove all me clients
295 *
296 * @dev: the device structure
297 *
298 * Locking: called under "dev->device_lock" lock
299 */
300void mei_me_cl_rm_all(struct mei_device *dev)
301{
302 struct mei_me_client *me_cl, *next;
303
304 down_write(&dev->me_clients_rwsem);
305 list_for_each_entry_safe(me_cl, next, &dev->me_clients, list)
306 __mei_me_cl_del(dev, me_cl);
307 up_write(&dev->me_clients_rwsem);
308}
309
310/**
311 * mei_io_cb_free - free mei_cb_private related memory
312 *
313 * @cb: mei callback struct
314 */
315void mei_io_cb_free(struct mei_cl_cb *cb)
316{
317 if (cb == NULL)
318 return;
319
320 list_del(&cb->list);
321 kfree(cb->buf.data);
322 kfree(cb);
323}
324
325/**
326 * mei_tx_cb_queue - queue tx callback
327 *
328 * Locking: called under "dev->device_lock" lock
329 *
330 * @cb: mei callback struct
331 * @head: an instance of list to queue on
332 */
333static inline void mei_tx_cb_enqueue(struct mei_cl_cb *cb,
334 struct list_head *head)
335{
336 list_add_tail(&cb->list, head);
337 cb->cl->tx_cb_queued++;
338}
339
340/**
341 * mei_tx_cb_dequeue - dequeue tx callback
342 *
343 * Locking: called under "dev->device_lock" lock
344 *
345 * @cb: mei callback struct to dequeue and free
346 */
347static inline void mei_tx_cb_dequeue(struct mei_cl_cb *cb)
348{
349 if (!WARN_ON(cb->cl->tx_cb_queued == 0))
350 cb->cl->tx_cb_queued--;
351
352 mei_io_cb_free(cb);
353}
354
355/**
356 * mei_io_cb_init - allocate and initialize io callback
357 *
358 * @cl: mei client
359 * @type: operation type
360 * @fp: pointer to file structure
361 *
362 * Return: mei_cl_cb pointer or NULL;
363 */
364static struct mei_cl_cb *mei_io_cb_init(struct mei_cl *cl,
365 enum mei_cb_file_ops type,
366 const struct file *fp)
367{
368 struct mei_cl_cb *cb;
369
370 cb = kzalloc(sizeof(struct mei_cl_cb), GFP_KERNEL);
371 if (!cb)
372 return NULL;
373
374 INIT_LIST_HEAD(&cb->list);
375 cb->fp = fp;
376 cb->cl = cl;
377 cb->buf_idx = 0;
378 cb->fop_type = type;
379 return cb;
380}
381
382/**
383 * mei_io_list_flush_cl - removes cbs belonging to the cl.
384 *
385 * @head: an instance of our list structure
386 * @cl: host client
387 */
388static void mei_io_list_flush_cl(struct list_head *head,
389 const struct mei_cl *cl)
390{
391 struct mei_cl_cb *cb, *next;
392
393 list_for_each_entry_safe(cb, next, head, list) {
394 if (cl == cb->cl) {
395 list_del_init(&cb->list);
396 if (cb->fop_type == MEI_FOP_READ)
397 mei_io_cb_free(cb);
398 }
399 }
400}
401
402/**
403 * mei_io_tx_list_free_cl - removes cb belonging to the cl and free them
404 *
405 * @head: An instance of our list structure
406 * @cl: host client
407 */
408static void mei_io_tx_list_free_cl(struct list_head *head,
409 const struct mei_cl *cl)
410{
411 struct mei_cl_cb *cb, *next;
412
413 list_for_each_entry_safe(cb, next, head, list) {
414 if (cl == cb->cl)
415 mei_tx_cb_dequeue(cb);
416 }
417}
418
419/**
420 * mei_io_list_free_fp - free cb from a list that matches file pointer
421 *
422 * @head: io list
423 * @fp: file pointer (matching cb file object), may be NULL
424 */
425static void mei_io_list_free_fp(struct list_head *head, const struct file *fp)
426{
427 struct mei_cl_cb *cb, *next;
428
429 list_for_each_entry_safe(cb, next, head, list)
430 if (!fp || fp == cb->fp)
431 mei_io_cb_free(cb);
432}
433
434/**
435 * mei_cl_alloc_cb - a convenient wrapper for allocating read cb
436 *
437 * @cl: host client
438 * @length: size of the buffer
439 * @fop_type: operation type
440 * @fp: associated file pointer (might be NULL)
441 *
442 * Return: cb on success and NULL on failure
443 */
444struct mei_cl_cb *mei_cl_alloc_cb(struct mei_cl *cl, size_t length,
445 enum mei_cb_file_ops fop_type,
446 const struct file *fp)
447{
448 struct mei_cl_cb *cb;
449
450 cb = mei_io_cb_init(cl, fop_type, fp);
451 if (!cb)
452 return NULL;
453
454 if (length == 0)
455 return cb;
456
457 cb->buf.data = kmalloc(roundup(length, MEI_SLOT_SIZE), GFP_KERNEL);
458 if (!cb->buf.data) {
459 mei_io_cb_free(cb);
460 return NULL;
461 }
462 cb->buf.size = length;
463
464 return cb;
465}
466
467/**
468 * mei_cl_enqueue_ctrl_wr_cb - a convenient wrapper for allocating
469 * and enqueuing of the control commands cb
470 *
471 * @cl: host client
472 * @length: size of the buffer
473 * @fop_type: operation type
474 * @fp: associated file pointer (might be NULL)
475 *
476 * Return: cb on success and NULL on failure
477 * Locking: called under "dev->device_lock" lock
478 */
479struct mei_cl_cb *mei_cl_enqueue_ctrl_wr_cb(struct mei_cl *cl, size_t length,
480 enum mei_cb_file_ops fop_type,
481 const struct file *fp)
482{
483 struct mei_cl_cb *cb;
484
485 /* for RX always allocate at least client's mtu */
486 if (length)
487 length = max_t(size_t, length, mei_cl_mtu(cl));
488
489 cb = mei_cl_alloc_cb(cl, length, fop_type, fp);
490 if (!cb)
491 return NULL;
492
493 list_add_tail(&cb->list, &cl->dev->ctrl_wr_list);
494 return cb;
495}
496
497/**
498 * mei_cl_read_cb - find this cl's callback in the read list
499 * for a specific file
500 *
501 * @cl: host client
502 * @fp: file pointer (matching cb file object), may be NULL
503 *
504 * Return: cb on success, NULL if cb is not found
505 */
506struct mei_cl_cb *mei_cl_read_cb(const struct mei_cl *cl, const struct file *fp)
507{
508 struct mei_cl_cb *cb;
509
510 list_for_each_entry(cb, &cl->rd_completed, list)
511 if (!fp || fp == cb->fp)
512 return cb;
513
514 return NULL;
515}
516
517/**
518 * mei_cl_flush_queues - flushes queue lists belonging to cl.
519 *
520 * @cl: host client
521 * @fp: file pointer (matching cb file object), may be NULL
522 *
523 * Return: 0 on success, -EINVAL if cl or cl->dev is NULL.
524 */
525int mei_cl_flush_queues(struct mei_cl *cl, const struct file *fp)
526{
527 struct mei_device *dev;
528
529 if (WARN_ON(!cl || !cl->dev))
530 return -EINVAL;
531
532 dev = cl->dev;
533
534 cl_dbg(dev, cl, "remove list entry belonging to cl\n");
535 mei_io_tx_list_free_cl(&cl->dev->write_list, cl);
536 mei_io_tx_list_free_cl(&cl->dev->write_waiting_list, cl);
537 mei_io_list_flush_cl(&cl->dev->ctrl_wr_list, cl);
538 mei_io_list_flush_cl(&cl->dev->ctrl_rd_list, cl);
539 mei_io_list_free_fp(&cl->rd_pending, fp);
540 mei_io_list_free_fp(&cl->rd_completed, fp);
541
542 return 0;
543}
544
545/**
546 * mei_cl_init - initializes cl.
547 *
548 * @cl: host client to be initialized
549 * @dev: mei device
550 */
551static void mei_cl_init(struct mei_cl *cl, struct mei_device *dev)
552{
553 memset(cl, 0, sizeof(struct mei_cl));
554 init_waitqueue_head(&cl->wait);
555 init_waitqueue_head(&cl->rx_wait);
556 init_waitqueue_head(&cl->tx_wait);
557 init_waitqueue_head(&cl->ev_wait);
558 INIT_LIST_HEAD(&cl->rd_completed);
559 INIT_LIST_HEAD(&cl->rd_pending);
560 INIT_LIST_HEAD(&cl->link);
561 cl->writing_state = MEI_IDLE;
562 cl->state = MEI_FILE_UNINITIALIZED;
563 cl->dev = dev;
564}
565
566/**
567 * mei_cl_allocate - allocates cl structure and sets it up.
568 *
569 * @dev: mei device
570 * Return: The allocated file or NULL on failure
571 */
572struct mei_cl *mei_cl_allocate(struct mei_device *dev)
573{
574 struct mei_cl *cl;
575
576 cl = kmalloc(sizeof(struct mei_cl), GFP_KERNEL);
577 if (!cl)
578 return NULL;
579
580 mei_cl_init(cl, dev);
581
582 return cl;
583}
584
585/**
586 * mei_cl_link - allocate host id in the host map
587 *
588 * @cl: host client
589 *
590 * Return: 0 on success
591 * -EINVAL on incorrect values
592 * -EMFILE if open count exceeded.
593 */
594int mei_cl_link(struct mei_cl *cl)
595{
596 struct mei_device *dev;
597 int id;
598
599 if (WARN_ON(!cl || !cl->dev))
600 return -EINVAL;
601
602 dev = cl->dev;
603
604 id = find_first_zero_bit(dev->host_clients_map, MEI_CLIENTS_MAX);
605 if (id >= MEI_CLIENTS_MAX) {
606 dev_err(dev->dev, "id exceeded %d", MEI_CLIENTS_MAX);
607 return -EMFILE;
608 }
609
610 if (dev->open_handle_count >= MEI_MAX_OPEN_HANDLE_COUNT) {
611 dev_err(dev->dev, "open_handle_count exceeded %d",
612 MEI_MAX_OPEN_HANDLE_COUNT);
613 return -EMFILE;
614 }
615
616 dev->open_handle_count++;
617
618 cl->host_client_id = id;
619 list_add_tail(&cl->link, &dev->file_list);
620
621 set_bit(id, dev->host_clients_map);
622
623 cl->state = MEI_FILE_INITIALIZING;
624
625 cl_dbg(dev, cl, "link cl\n");
626 return 0;
627}
628
629/**
630 * mei_cl_unlink - remove host client from the list
631 *
632 * @cl: host client
633 *
634 * Return: always 0
635 */
636int mei_cl_unlink(struct mei_cl *cl)
637{
638 struct mei_device *dev;
639
640 /* don't shout on error exit path */
641 if (!cl)
642 return 0;
643
644 if (WARN_ON(!cl->dev))
645 return 0;
646
647 dev = cl->dev;
648
649 cl_dbg(dev, cl, "unlink client");
650
651 if (dev->open_handle_count > 0)
652 dev->open_handle_count--;
653
654 /* never clear the 0 bit */
655 if (cl->host_client_id)
656 clear_bit(cl->host_client_id, dev->host_clients_map);
657
658 list_del_init(&cl->link);
659
660 cl->state = MEI_FILE_UNINITIALIZED;
661 cl->writing_state = MEI_IDLE;
662
663 WARN_ON(!list_empty(&cl->rd_completed) ||
664 !list_empty(&cl->rd_pending) ||
665 !list_empty(&cl->link));
666
667 return 0;
668}
669
670void mei_host_client_init(struct mei_device *dev)
671{
672 mei_set_devstate(dev, MEI_DEV_ENABLED);
673 dev->reset_count = 0;
674
675 schedule_work(&dev->bus_rescan_work);
676
677 pm_runtime_mark_last_busy(dev->dev);
678 dev_dbg(dev->dev, "rpm: autosuspend\n");
679 pm_request_autosuspend(dev->dev);
680}
681
682/**
683 * mei_hbuf_acquire - try to acquire host buffer
684 *
685 * @dev: the device structure
686 * Return: true if host buffer was acquired
687 */
688bool mei_hbuf_acquire(struct mei_device *dev)
689{
690 if (mei_pg_state(dev) == MEI_PG_ON ||
691 mei_pg_in_transition(dev)) {
692 dev_dbg(dev->dev, "device is in pg\n");
693 return false;
694 }
695
696 if (!dev->hbuf_is_ready) {
697 dev_dbg(dev->dev, "hbuf is not ready\n");
698 return false;
699 }
700
701 dev->hbuf_is_ready = false;
702
703 return true;
704}
705
706/**
707 * mei_cl_wake_all - wake up readers, writers and event waiters so
708 * they can be interrupted
709 *
710 * @cl: host client
711 */
712static void mei_cl_wake_all(struct mei_cl *cl)
713{
714 struct mei_device *dev = cl->dev;
715
716 /* synchronized under device mutex */
717 if (waitqueue_active(&cl->rx_wait)) {
718 cl_dbg(dev, cl, "Waking up reading client!\n");
719 wake_up_interruptible(&cl->rx_wait);
720 }
721 /* synchronized under device mutex */
722 if (waitqueue_active(&cl->tx_wait)) {
723 cl_dbg(dev, cl, "Waking up writing client!\n");
724 wake_up_interruptible(&cl->tx_wait);
725 }
726 /* synchronized under device mutex */
727 if (waitqueue_active(&cl->ev_wait)) {
728 cl_dbg(dev, cl, "Waking up waiting for event clients!\n");
729 wake_up_interruptible(&cl->ev_wait);
730 }
731 /* synchronized under device mutex */
732 if (waitqueue_active(&cl->wait)) {
733 cl_dbg(dev, cl, "Waking up ctrl write clients!\n");
734 wake_up(&cl->wait);
735 }
736}
737
738/**
739 * mei_cl_set_disconnected - set disconnected state and clear
740 * associated states and resources
741 *
742 * @cl: host client
743 */
744static void mei_cl_set_disconnected(struct mei_cl *cl)
745{
746 struct mei_device *dev = cl->dev;
747
748 if (cl->state == MEI_FILE_DISCONNECTED ||
749 cl->state <= MEI_FILE_INITIALIZING)
750 return;
751
752 cl->state = MEI_FILE_DISCONNECTED;
753 mei_io_tx_list_free_cl(&dev->write_list, cl);
754 mei_io_tx_list_free_cl(&dev->write_waiting_list, cl);
755 mei_io_list_flush_cl(&dev->ctrl_rd_list, cl);
756 mei_io_list_flush_cl(&dev->ctrl_wr_list, cl);
757 mei_cl_wake_all(cl);
758 cl->rx_flow_ctrl_creds = 0;
759 cl->tx_flow_ctrl_creds = 0;
760 cl->timer_count = 0;
761
762 if (!cl->me_cl)
763 return;
764
765 if (!WARN_ON(cl->me_cl->connect_count == 0))
766 cl->me_cl->connect_count--;
767
768 if (cl->me_cl->connect_count == 0)
769 cl->me_cl->tx_flow_ctrl_creds = 0;
770
771 mei_me_cl_put(cl->me_cl);
772 cl->me_cl = NULL;
773}
774
775static int mei_cl_set_connecting(struct mei_cl *cl, struct mei_me_client *me_cl)
776{
777 if (!mei_me_cl_get(me_cl))
778 return -ENOENT;
779
780 /* only one connection is allowed for fixed address clients */
781 if (me_cl->props.fixed_address) {
782 if (me_cl->connect_count) {
783 mei_me_cl_put(me_cl);
784 return -EBUSY;
785 }
786 }
787
788 cl->me_cl = me_cl;
789 cl->state = MEI_FILE_CONNECTING;
790 cl->me_cl->connect_count++;
791
792 return 0;
793}
794
795/*
796 * mei_cl_send_disconnect - send disconnect request
797 *
798 * @cl: host client
799 * @cb: callback block
800 *
801 * Return: 0, OK; otherwise, error.
802 */
803static int mei_cl_send_disconnect(struct mei_cl *cl, struct mei_cl_cb *cb)
804{
805 struct mei_device *dev;
806 int ret;
807
808 dev = cl->dev;
809
810 ret = mei_hbm_cl_disconnect_req(dev, cl);
811 cl->status = ret;
812 if (ret) {
813 cl->state = MEI_FILE_DISCONNECT_REPLY;
814 return ret;
815 }
816
817 list_move_tail(&cb->list, &dev->ctrl_rd_list);
818 cl->timer_count = MEI_CONNECT_TIMEOUT;
819 mei_schedule_stall_timer(dev);
820
821 return 0;
822}
823
824/**
825 * mei_cl_irq_disconnect - processes close related operation from
826 * interrupt thread context - send disconnect request
827 *
828 * @cl: client
829 * @cb: callback block.
830 * @cmpl_list: complete list.
831 *
832 * Return: 0, OK; otherwise, error.
833 */
834int mei_cl_irq_disconnect(struct mei_cl *cl, struct mei_cl_cb *cb,
835 struct list_head *cmpl_list)
836{
837 struct mei_device *dev = cl->dev;
838 u32 msg_slots;
839 int slots;
840 int ret;
841
842 msg_slots = mei_hbm2slots(sizeof(struct hbm_client_connect_request));
843 slots = mei_hbuf_empty_slots(dev);
844 if (slots < 0)
845 return -EOVERFLOW;
846
847 if ((u32)slots < msg_slots)
848 return -EMSGSIZE;
849
850 ret = mei_cl_send_disconnect(cl, cb);
851 if (ret)
852 list_move_tail(&cb->list, cmpl_list);
853
854 return ret;
855}
856
857/**
858 * __mei_cl_disconnect - disconnect host client from the me one
859 * internal function runtime pm has to be already acquired
860 *
861 * @cl: host client
862 *
863 * Return: 0 on success, <0 on failure.
864 */
865static int __mei_cl_disconnect(struct mei_cl *cl)
866{
867 struct mei_device *dev;
868 struct mei_cl_cb *cb;
869 int rets;
870
871 dev = cl->dev;
872
873 cl->state = MEI_FILE_DISCONNECTING;
874
875 cb = mei_cl_enqueue_ctrl_wr_cb(cl, 0, MEI_FOP_DISCONNECT, NULL);
876 if (!cb) {
877 rets = -ENOMEM;
878 goto out;
879 }
880
881 if (mei_hbuf_acquire(dev)) {
882 rets = mei_cl_send_disconnect(cl, cb);
883 if (rets) {
884 cl_err(dev, cl, "failed to disconnect.\n");
885 goto out;
886 }
887 }
888
889 mutex_unlock(&dev->device_lock);
890 wait_event_timeout(cl->wait,
891 cl->state == MEI_FILE_DISCONNECT_REPLY ||
892 cl->state == MEI_FILE_DISCONNECTED,
893 mei_secs_to_jiffies(MEI_CL_CONNECT_TIMEOUT));
894 mutex_lock(&dev->device_lock);
895
896 rets = cl->status;
897 if (cl->state != MEI_FILE_DISCONNECT_REPLY &&
898 cl->state != MEI_FILE_DISCONNECTED) {
899 cl_dbg(dev, cl, "timeout on disconnect from FW client.\n");
900 rets = -ETIME;
901 }
902
903out:
904 /* we disconnect also on error */
905 mei_cl_set_disconnected(cl);
906 if (!rets)
907 cl_dbg(dev, cl, "successfully disconnected from FW client.\n");
908
909 mei_io_cb_free(cb);
910 return rets;
911}
912
913/**
914 * mei_cl_disconnect - disconnect host client from the me one
915 *
916 * @cl: host client
917 *
918 * Locking: called under "dev->device_lock" lock
919 *
920 * Return: 0 on success, <0 on failure.
921 */
922int mei_cl_disconnect(struct mei_cl *cl)
923{
924 struct mei_device *dev;
925 int rets;
926
927 if (WARN_ON(!cl || !cl->dev))
928 return -ENODEV;
929
930 dev = cl->dev;
931
932 cl_dbg(dev, cl, "disconnecting");
933
934 if (!mei_cl_is_connected(cl))
935 return 0;
936
937 if (mei_cl_is_fixed_address(cl)) {
938 mei_cl_set_disconnected(cl);
939 return 0;
940 }
941
942 if (dev->dev_state == MEI_DEV_POWER_DOWN) {
943 cl_dbg(dev, cl, "Device is powering down, don't bother with disconnection\n");
944 mei_cl_set_disconnected(cl);
945 return 0;
946 }
947
948 rets = pm_runtime_get(dev->dev);
949 if (rets < 0 && rets != -EINPROGRESS) {
950 pm_runtime_put_noidle(dev->dev);
951 cl_err(dev, cl, "rpm: get failed %d\n", rets);
952 return rets;
953 }
954
955 rets = __mei_cl_disconnect(cl);
956
957 cl_dbg(dev, cl, "rpm: autosuspend\n");
958 pm_runtime_mark_last_busy(dev->dev);
959 pm_runtime_put_autosuspend(dev->dev);
960
961 return rets;
962}
963
964
965/**
966 * mei_cl_is_other_connecting - checks if other
967 * client with the same me client id is connecting
968 *
969 * @cl: private data of the file object
970 *
971 * Return: true if other client is connected, false - otherwise.
972 */
973static bool mei_cl_is_other_connecting(struct mei_cl *cl)
974{
975 struct mei_device *dev;
976 struct mei_cl_cb *cb;
977
978 dev = cl->dev;
979
980 list_for_each_entry(cb, &dev->ctrl_rd_list, list) {
981 if (cb->fop_type == MEI_FOP_CONNECT &&
982 mei_cl_me_id(cl) == mei_cl_me_id(cb->cl))
983 return true;
984 }
985
986 return false;
987}
988
989/**
990 * mei_cl_send_connect - send connect request
991 *
992 * @cl: host client
993 * @cb: callback block
994 *
995 * Return: 0, OK; otherwise, error.
996 */
997static int mei_cl_send_connect(struct mei_cl *cl, struct mei_cl_cb *cb)
998{
999 struct mei_device *dev;
1000 int ret;
1001
1002 dev = cl->dev;
1003
1004 ret = mei_hbm_cl_connect_req(dev, cl);
1005 cl->status = ret;
1006 if (ret) {
1007 cl->state = MEI_FILE_DISCONNECT_REPLY;
1008 return ret;
1009 }
1010
1011 list_move_tail(&cb->list, &dev->ctrl_rd_list);
1012 cl->timer_count = MEI_CONNECT_TIMEOUT;
1013 mei_schedule_stall_timer(dev);
1014 return 0;
1015}
1016
1017/**
1018 * mei_cl_irq_connect - send connect request in irq_thread context
1019 *
1020 * @cl: host client
1021 * @cb: callback block
1022 * @cmpl_list: complete list
1023 *
1024 * Return: 0, OK; otherwise, error.
1025 */
1026int mei_cl_irq_connect(struct mei_cl *cl, struct mei_cl_cb *cb,
1027 struct list_head *cmpl_list)
1028{
1029 struct mei_device *dev = cl->dev;
1030 u32 msg_slots;
1031 int slots;
1032 int rets;
1033
1034 if (mei_cl_is_other_connecting(cl))
1035 return 0;
1036
1037 msg_slots = mei_hbm2slots(sizeof(struct hbm_client_connect_request));
1038 slots = mei_hbuf_empty_slots(dev);
1039 if (slots < 0)
1040 return -EOVERFLOW;
1041
1042 if ((u32)slots < msg_slots)
1043 return -EMSGSIZE;
1044
1045 rets = mei_cl_send_connect(cl, cb);
1046 if (rets)
1047 list_move_tail(&cb->list, cmpl_list);
1048
1049 return rets;
1050}
1051
1052/**
1053 * mei_cl_connect - connect host client to the me one
1054 *
1055 * @cl: host client
1056 * @me_cl: me client
1057 * @fp: pointer to file structure
1058 *
1059 * Locking: called under "dev->device_lock" lock
1060 *
1061 * Return: 0 on success, <0 on failure.
1062 */
1063int mei_cl_connect(struct mei_cl *cl, struct mei_me_client *me_cl,
1064 const struct file *fp)
1065{
1066 struct mei_device *dev;
1067 struct mei_cl_cb *cb;
1068 int rets;
1069
1070 if (WARN_ON(!cl || !cl->dev || !me_cl))
1071 return -ENODEV;
1072
1073 dev = cl->dev;
1074
1075 rets = mei_cl_set_connecting(cl, me_cl);
1076 if (rets)
1077 goto nortpm;
1078
1079 if (mei_cl_is_fixed_address(cl)) {
1080 cl->state = MEI_FILE_CONNECTED;
1081 rets = 0;
1082 goto nortpm;
1083 }
1084
1085 rets = pm_runtime_get(dev->dev);
1086 if (rets < 0 && rets != -EINPROGRESS) {
1087 pm_runtime_put_noidle(dev->dev);
1088 cl_err(dev, cl, "rpm: get failed %d\n", rets);
1089 goto nortpm;
1090 }
1091
1092 cb = mei_cl_enqueue_ctrl_wr_cb(cl, 0, MEI_FOP_CONNECT, fp);
1093 if (!cb) {
1094 rets = -ENOMEM;
1095 goto out;
1096 }
1097
1098 /* run hbuf acquire last so we don't have to undo */
1099 if (!mei_cl_is_other_connecting(cl) && mei_hbuf_acquire(dev)) {
1100 rets = mei_cl_send_connect(cl, cb);
1101 if (rets)
1102 goto out;
1103 }
1104
1105 mutex_unlock(&dev->device_lock);
1106 wait_event_timeout(cl->wait,
1107 (cl->state == MEI_FILE_CONNECTED ||
1108 cl->state == MEI_FILE_DISCONNECTED ||
1109 cl->state == MEI_FILE_DISCONNECT_REQUIRED ||
1110 cl->state == MEI_FILE_DISCONNECT_REPLY),
1111 mei_secs_to_jiffies(MEI_CL_CONNECT_TIMEOUT));
1112 mutex_lock(&dev->device_lock);
1113
1114 if (!mei_cl_is_connected(cl)) {
1115 if (cl->state == MEI_FILE_DISCONNECT_REQUIRED) {
1116 mei_io_list_flush_cl(&dev->ctrl_rd_list, cl);
1117 mei_io_list_flush_cl(&dev->ctrl_wr_list, cl);
1118 /* ignore disconnect return valuue;
1119 * in case of failure reset will be invoked
1120 */
1121 __mei_cl_disconnect(cl);
1122 rets = -EFAULT;
1123 goto out;
1124 }
1125
1126 /* timeout or something went really wrong */
1127 if (!cl->status)
1128 cl->status = -EFAULT;
1129 }
1130
1131 rets = cl->status;
1132out:
1133 cl_dbg(dev, cl, "rpm: autosuspend\n");
1134 pm_runtime_mark_last_busy(dev->dev);
1135 pm_runtime_put_autosuspend(dev->dev);
1136
1137 mei_io_cb_free(cb);
1138
1139nortpm:
1140 if (!mei_cl_is_connected(cl))
1141 mei_cl_set_disconnected(cl);
1142
1143 return rets;
1144}
1145
1146/**
1147 * mei_cl_alloc_linked - allocate and link host client
1148 *
1149 * @dev: the device structure
1150 *
1151 * Return: cl on success ERR_PTR on failure
1152 */
1153struct mei_cl *mei_cl_alloc_linked(struct mei_device *dev)
1154{
1155 struct mei_cl *cl;
1156 int ret;
1157
1158 cl = mei_cl_allocate(dev);
1159 if (!cl) {
1160 ret = -ENOMEM;
1161 goto err;
1162 }
1163
1164 ret = mei_cl_link(cl);
1165 if (ret)
1166 goto err;
1167
1168 return cl;
1169err:
1170 kfree(cl);
1171 return ERR_PTR(ret);
1172}
1173
1174/**
1175 * mei_cl_tx_flow_ctrl_creds - checks flow_control credits for cl.
1176 *
1177 * @cl: host client
1178 *
1179 * Return: 1 if tx_flow_ctrl_creds >0, 0 - otherwise.
1180 */
1181static int mei_cl_tx_flow_ctrl_creds(struct mei_cl *cl)
1182{
1183 if (WARN_ON(!cl || !cl->me_cl))
1184 return -EINVAL;
1185
1186 if (cl->tx_flow_ctrl_creds > 0)
1187 return 1;
1188
1189 if (mei_cl_is_fixed_address(cl))
1190 return 1;
1191
1192 if (mei_cl_is_single_recv_buf(cl)) {
1193 if (cl->me_cl->tx_flow_ctrl_creds > 0)
1194 return 1;
1195 }
1196 return 0;
1197}
1198
1199/**
1200 * mei_cl_tx_flow_ctrl_creds_reduce - reduces transmit flow control credits
1201 * for a client
1202 *
1203 * @cl: host client
1204 *
1205 * Return:
1206 * 0 on success
1207 * -EINVAL when ctrl credits are <= 0
1208 */
1209static int mei_cl_tx_flow_ctrl_creds_reduce(struct mei_cl *cl)
1210{
1211 if (WARN_ON(!cl || !cl->me_cl))
1212 return -EINVAL;
1213
1214 if (mei_cl_is_fixed_address(cl))
1215 return 0;
1216
1217 if (mei_cl_is_single_recv_buf(cl)) {
1218 if (WARN_ON(cl->me_cl->tx_flow_ctrl_creds <= 0))
1219 return -EINVAL;
1220 cl->me_cl->tx_flow_ctrl_creds--;
1221 } else {
1222 if (WARN_ON(cl->tx_flow_ctrl_creds <= 0))
1223 return -EINVAL;
1224 cl->tx_flow_ctrl_creds--;
1225 }
1226 return 0;
1227}
1228
1229/**
1230 * mei_cl_notify_fop2req - convert fop to proper request
1231 *
1232 * @fop: client notification start response command
1233 *
1234 * Return: MEI_HBM_NOTIFICATION_START/STOP
1235 */
1236u8 mei_cl_notify_fop2req(enum mei_cb_file_ops fop)
1237{
1238 if (fop == MEI_FOP_NOTIFY_START)
1239 return MEI_HBM_NOTIFICATION_START;
1240 else
1241 return MEI_HBM_NOTIFICATION_STOP;
1242}
1243
1244/**
1245 * mei_cl_notify_req2fop - convert notification request top file operation type
1246 *
1247 * @req: hbm notification request type
1248 *
1249 * Return: MEI_FOP_NOTIFY_START/STOP
1250 */
1251enum mei_cb_file_ops mei_cl_notify_req2fop(u8 req)
1252{
1253 if (req == MEI_HBM_NOTIFICATION_START)
1254 return MEI_FOP_NOTIFY_START;
1255 else
1256 return MEI_FOP_NOTIFY_STOP;
1257}
1258
1259/**
1260 * mei_cl_irq_notify - send notification request in irq_thread context
1261 *
1262 * @cl: client
1263 * @cb: callback block.
1264 * @cmpl_list: complete list.
1265 *
1266 * Return: 0 on such and error otherwise.
1267 */
1268int mei_cl_irq_notify(struct mei_cl *cl, struct mei_cl_cb *cb,
1269 struct list_head *cmpl_list)
1270{
1271 struct mei_device *dev = cl->dev;
1272 u32 msg_slots;
1273 int slots;
1274 int ret;
1275 bool request;
1276
1277 msg_slots = mei_hbm2slots(sizeof(struct hbm_client_connect_request));
1278 slots = mei_hbuf_empty_slots(dev);
1279 if (slots < 0)
1280 return -EOVERFLOW;
1281
1282 if ((u32)slots < msg_slots)
1283 return -EMSGSIZE;
1284
1285 request = mei_cl_notify_fop2req(cb->fop_type);
1286 ret = mei_hbm_cl_notify_req(dev, cl, request);
1287 if (ret) {
1288 cl->status = ret;
1289 list_move_tail(&cb->list, cmpl_list);
1290 return ret;
1291 }
1292
1293 list_move_tail(&cb->list, &dev->ctrl_rd_list);
1294 return 0;
1295}
1296
1297/**
1298 * mei_cl_notify_request - send notification stop/start request
1299 *
1300 * @cl: host client
1301 * @fp: associate request with file
1302 * @request: 1 for start or 0 for stop
1303 *
1304 * Locking: called under "dev->device_lock" lock
1305 *
1306 * Return: 0 on such and error otherwise.
1307 */
1308int mei_cl_notify_request(struct mei_cl *cl,
1309 const struct file *fp, u8 request)
1310{
1311 struct mei_device *dev;
1312 struct mei_cl_cb *cb;
1313 enum mei_cb_file_ops fop_type;
1314 int rets;
1315
1316 if (WARN_ON(!cl || !cl->dev))
1317 return -ENODEV;
1318
1319 dev = cl->dev;
1320
1321 if (!dev->hbm_f_ev_supported) {
1322 cl_dbg(dev, cl, "notifications not supported\n");
1323 return -EOPNOTSUPP;
1324 }
1325
1326 if (!mei_cl_is_connected(cl))
1327 return -ENODEV;
1328
1329 rets = pm_runtime_get(dev->dev);
1330 if (rets < 0 && rets != -EINPROGRESS) {
1331 pm_runtime_put_noidle(dev->dev);
1332 cl_err(dev, cl, "rpm: get failed %d\n", rets);
1333 return rets;
1334 }
1335
1336 fop_type = mei_cl_notify_req2fop(request);
1337 cb = mei_cl_enqueue_ctrl_wr_cb(cl, 0, fop_type, fp);
1338 if (!cb) {
1339 rets = -ENOMEM;
1340 goto out;
1341 }
1342
1343 if (mei_hbuf_acquire(dev)) {
1344 if (mei_hbm_cl_notify_req(dev, cl, request)) {
1345 rets = -ENODEV;
1346 goto out;
1347 }
1348 list_move_tail(&cb->list, &dev->ctrl_rd_list);
1349 }
1350
1351 mutex_unlock(&dev->device_lock);
1352 wait_event_timeout(cl->wait,
1353 cl->notify_en == request ||
1354 cl->status ||
1355 !mei_cl_is_connected(cl),
1356 mei_secs_to_jiffies(MEI_CL_CONNECT_TIMEOUT));
1357 mutex_lock(&dev->device_lock);
1358
1359 if (cl->notify_en != request && !cl->status)
1360 cl->status = -EFAULT;
1361
1362 rets = cl->status;
1363
1364out:
1365 cl_dbg(dev, cl, "rpm: autosuspend\n");
1366 pm_runtime_mark_last_busy(dev->dev);
1367 pm_runtime_put_autosuspend(dev->dev);
1368
1369 mei_io_cb_free(cb);
1370 return rets;
1371}
1372
1373/**
1374 * mei_cl_notify - raise notification
1375 *
1376 * @cl: host client
1377 *
1378 * Locking: called under "dev->device_lock" lock
1379 */
1380void mei_cl_notify(struct mei_cl *cl)
1381{
1382 struct mei_device *dev;
1383
1384 if (!cl || !cl->dev)
1385 return;
1386
1387 dev = cl->dev;
1388
1389 if (!cl->notify_en)
1390 return;
1391
1392 cl_dbg(dev, cl, "notify event");
1393 cl->notify_ev = true;
1394 if (!mei_cl_bus_notify_event(cl))
1395 wake_up_interruptible(&cl->ev_wait);
1396
1397 if (cl->ev_async)
1398 kill_fasync(&cl->ev_async, SIGIO, POLL_PRI);
1399
1400}
1401
1402/**
1403 * mei_cl_notify_get - get or wait for notification event
1404 *
1405 * @cl: host client
1406 * @block: this request is blocking
1407 * @notify_ev: true if notification event was received
1408 *
1409 * Locking: called under "dev->device_lock" lock
1410 *
1411 * Return: 0 on such and error otherwise.
1412 */
1413int mei_cl_notify_get(struct mei_cl *cl, bool block, bool *notify_ev)
1414{
1415 struct mei_device *dev;
1416 int rets;
1417
1418 *notify_ev = false;
1419
1420 if (WARN_ON(!cl || !cl->dev))
1421 return -ENODEV;
1422
1423 dev = cl->dev;
1424
1425 if (!dev->hbm_f_ev_supported) {
1426 cl_dbg(dev, cl, "notifications not supported\n");
1427 return -EOPNOTSUPP;
1428 }
1429
1430 if (!mei_cl_is_connected(cl))
1431 return -ENODEV;
1432
1433 if (cl->notify_ev)
1434 goto out;
1435
1436 if (!block)
1437 return -EAGAIN;
1438
1439 mutex_unlock(&dev->device_lock);
1440 rets = wait_event_interruptible(cl->ev_wait, cl->notify_ev);
1441 mutex_lock(&dev->device_lock);
1442
1443 if (rets < 0)
1444 return rets;
1445
1446out:
1447 *notify_ev = cl->notify_ev;
1448 cl->notify_ev = false;
1449 return 0;
1450}
1451
1452/**
1453 * mei_cl_read_start - the start read client message function.
1454 *
1455 * @cl: host client
1456 * @length: number of bytes to read
1457 * @fp: pointer to file structure
1458 *
1459 * Return: 0 on success, <0 on failure.
1460 */
1461int mei_cl_read_start(struct mei_cl *cl, size_t length, const struct file *fp)
1462{
1463 struct mei_device *dev;
1464 struct mei_cl_cb *cb;
1465 int rets;
1466
1467 if (WARN_ON(!cl || !cl->dev))
1468 return -ENODEV;
1469
1470 dev = cl->dev;
1471
1472 if (!mei_cl_is_connected(cl))
1473 return -ENODEV;
1474
1475 if (!mei_me_cl_is_active(cl->me_cl)) {
1476 cl_err(dev, cl, "no such me client\n");
1477 return -ENOTTY;
1478 }
1479
1480 if (mei_cl_is_fixed_address(cl))
1481 return 0;
1482
1483 /* HW currently supports only one pending read */
1484 if (cl->rx_flow_ctrl_creds)
1485 return -EBUSY;
1486
1487 cb = mei_cl_enqueue_ctrl_wr_cb(cl, length, MEI_FOP_READ, fp);
1488 if (!cb)
1489 return -ENOMEM;
1490
1491 rets = pm_runtime_get(dev->dev);
1492 if (rets < 0 && rets != -EINPROGRESS) {
1493 pm_runtime_put_noidle(dev->dev);
1494 cl_err(dev, cl, "rpm: get failed %d\n", rets);
1495 goto nortpm;
1496 }
1497
1498 rets = 0;
1499 if (mei_hbuf_acquire(dev)) {
1500 rets = mei_hbm_cl_flow_control_req(dev, cl);
1501 if (rets < 0)
1502 goto out;
1503
1504 list_move_tail(&cb->list, &cl->rd_pending);
1505 }
1506 cl->rx_flow_ctrl_creds++;
1507
1508out:
1509 cl_dbg(dev, cl, "rpm: autosuspend\n");
1510 pm_runtime_mark_last_busy(dev->dev);
1511 pm_runtime_put_autosuspend(dev->dev);
1512nortpm:
1513 if (rets)
1514 mei_io_cb_free(cb);
1515
1516 return rets;
1517}
1518
1519/**
1520 * mei_msg_hdr_init - initialize mei message header
1521 *
1522 * @mei_hdr: mei message header
1523 * @cb: message callback structure
1524 */
1525static void mei_msg_hdr_init(struct mei_msg_hdr *mei_hdr, struct mei_cl_cb *cb)
1526{
1527 mei_hdr->host_addr = mei_cl_host_addr(cb->cl);
1528 mei_hdr->me_addr = mei_cl_me_id(cb->cl);
1529 mei_hdr->length = 0;
1530 mei_hdr->reserved = 0;
1531 mei_hdr->msg_complete = 0;
1532 mei_hdr->dma_ring = 0;
1533 mei_hdr->internal = cb->internal;
1534}
1535
1536/**
1537 * mei_cl_irq_write - write a message to device
1538 * from the interrupt thread context
1539 *
1540 * @cl: client
1541 * @cb: callback block.
1542 * @cmpl_list: complete list.
1543 *
1544 * Return: 0, OK; otherwise error.
1545 */
1546int mei_cl_irq_write(struct mei_cl *cl, struct mei_cl_cb *cb,
1547 struct list_head *cmpl_list)
1548{
1549 struct mei_device *dev;
1550 struct mei_msg_data *buf;
1551 struct mei_msg_hdr mei_hdr;
1552 size_t hdr_len = sizeof(mei_hdr);
1553 size_t len;
1554 size_t hbuf_len, dr_len;
1555 int hbuf_slots;
1556 u32 dr_slots;
1557 u32 dma_len;
1558 int rets;
1559 bool first_chunk;
1560 const void *data;
1561
1562 if (WARN_ON(!cl || !cl->dev))
1563 return -ENODEV;
1564
1565 dev = cl->dev;
1566
1567 buf = &cb->buf;
1568
1569 first_chunk = cb->buf_idx == 0;
1570
1571 rets = first_chunk ? mei_cl_tx_flow_ctrl_creds(cl) : 1;
1572 if (rets < 0)
1573 goto err;
1574
1575 if (rets == 0) {
1576 cl_dbg(dev, cl, "No flow control credentials: not sending.\n");
1577 return 0;
1578 }
1579
1580 len = buf->size - cb->buf_idx;
1581 data = buf->data + cb->buf_idx;
1582 hbuf_slots = mei_hbuf_empty_slots(dev);
1583 if (hbuf_slots < 0) {
1584 rets = -EOVERFLOW;
1585 goto err;
1586 }
1587
1588 hbuf_len = mei_slots2data(hbuf_slots);
1589 dr_slots = mei_dma_ring_empty_slots(dev);
1590 dr_len = mei_slots2data(dr_slots);
1591
1592 mei_msg_hdr_init(&mei_hdr, cb);
1593
1594 /**
1595 * Split the message only if we can write the whole host buffer
1596 * otherwise wait for next time the host buffer is empty.
1597 */
1598 if (len + hdr_len <= hbuf_len) {
1599 mei_hdr.length = len;
1600 mei_hdr.msg_complete = 1;
1601 } else if (dr_slots && hbuf_len >= hdr_len + sizeof(dma_len)) {
1602 mei_hdr.dma_ring = 1;
1603 if (len > dr_len)
1604 len = dr_len;
1605 else
1606 mei_hdr.msg_complete = 1;
1607
1608 mei_hdr.length = sizeof(dma_len);
1609 dma_len = len;
1610 data = &dma_len;
1611 } else if ((u32)hbuf_slots == mei_hbuf_depth(dev)) {
1612 len = hbuf_len - hdr_len;
1613 mei_hdr.length = len;
1614 } else {
1615 return 0;
1616 }
1617
1618 if (mei_hdr.dma_ring)
1619 mei_dma_ring_write(dev, buf->data + cb->buf_idx, len);
1620
1621 rets = mei_write_message(dev, &mei_hdr, hdr_len, data, mei_hdr.length);
1622 if (rets)
1623 goto err;
1624
1625 cl->status = 0;
1626 cl->writing_state = MEI_WRITING;
1627 cb->buf_idx += len;
1628
1629 if (first_chunk) {
1630 if (mei_cl_tx_flow_ctrl_creds_reduce(cl)) {
1631 rets = -EIO;
1632 goto err;
1633 }
1634 }
1635
1636 if (mei_hdr.msg_complete)
1637 list_move_tail(&cb->list, &dev->write_waiting_list);
1638
1639 return 0;
1640
1641err:
1642 cl->status = rets;
1643 list_move_tail(&cb->list, cmpl_list);
1644 return rets;
1645}
1646
1647/**
1648 * mei_cl_write - submit a write cb to mei device
1649 * assumes device_lock is locked
1650 *
1651 * @cl: host client
1652 * @cb: write callback with filled data
1653 *
1654 * Return: number of bytes sent on success, <0 on failure.
1655 */
1656ssize_t mei_cl_write(struct mei_cl *cl, struct mei_cl_cb *cb)
1657{
1658 struct mei_device *dev;
1659 struct mei_msg_data *buf;
1660 struct mei_msg_hdr mei_hdr;
1661 size_t hdr_len = sizeof(mei_hdr);
1662 size_t len, hbuf_len, dr_len;
1663 int hbuf_slots;
1664 u32 dr_slots;
1665 u32 dma_len;
1666 ssize_t rets;
1667 bool blocking;
1668 const void *data;
1669
1670 if (WARN_ON(!cl || !cl->dev))
1671 return -ENODEV;
1672
1673 if (WARN_ON(!cb))
1674 return -EINVAL;
1675
1676 dev = cl->dev;
1677
1678 buf = &cb->buf;
1679 len = buf->size;
1680
1681 cl_dbg(dev, cl, "len=%zd\n", len);
1682
1683 blocking = cb->blocking;
1684 data = buf->data;
1685
1686 rets = pm_runtime_get(dev->dev);
1687 if (rets < 0 && rets != -EINPROGRESS) {
1688 pm_runtime_put_noidle(dev->dev);
1689 cl_err(dev, cl, "rpm: get failed %zd\n", rets);
1690 goto free;
1691 }
1692
1693 cb->buf_idx = 0;
1694 cl->writing_state = MEI_IDLE;
1695
1696
1697 rets = mei_cl_tx_flow_ctrl_creds(cl);
1698 if (rets < 0)
1699 goto err;
1700
1701 mei_msg_hdr_init(&mei_hdr, cb);
1702
1703 if (rets == 0) {
1704 cl_dbg(dev, cl, "No flow control credentials: not sending.\n");
1705 rets = len;
1706 goto out;
1707 }
1708
1709 if (!mei_hbuf_acquire(dev)) {
1710 cl_dbg(dev, cl, "Cannot acquire the host buffer: not sending.\n");
1711 rets = len;
1712 goto out;
1713 }
1714
1715 hbuf_slots = mei_hbuf_empty_slots(dev);
1716 if (hbuf_slots < 0) {
1717 rets = -EOVERFLOW;
1718 goto out;
1719 }
1720
1721 hbuf_len = mei_slots2data(hbuf_slots);
1722 dr_slots = mei_dma_ring_empty_slots(dev);
1723 dr_len = mei_slots2data(dr_slots);
1724
1725 if (len + hdr_len <= hbuf_len) {
1726 mei_hdr.length = len;
1727 mei_hdr.msg_complete = 1;
1728 } else if (dr_slots && hbuf_len >= hdr_len + sizeof(dma_len)) {
1729 mei_hdr.dma_ring = 1;
1730 if (len > dr_len)
1731 len = dr_len;
1732 else
1733 mei_hdr.msg_complete = 1;
1734
1735 mei_hdr.length = sizeof(dma_len);
1736 dma_len = len;
1737 data = &dma_len;
1738 } else {
1739 len = hbuf_len - hdr_len;
1740 mei_hdr.length = len;
1741 }
1742
1743 if (mei_hdr.dma_ring)
1744 mei_dma_ring_write(dev, buf->data, len);
1745
1746 rets = mei_write_message(dev, &mei_hdr, hdr_len,
1747 data, mei_hdr.length);
1748 if (rets)
1749 goto err;
1750
1751 rets = mei_cl_tx_flow_ctrl_creds_reduce(cl);
1752 if (rets)
1753 goto err;
1754
1755 cl->writing_state = MEI_WRITING;
1756 cb->buf_idx = len;
1757 /* restore return value */
1758 len = buf->size;
1759
1760out:
1761 if (mei_hdr.msg_complete)
1762 mei_tx_cb_enqueue(cb, &dev->write_waiting_list);
1763 else
1764 mei_tx_cb_enqueue(cb, &dev->write_list);
1765
1766 cb = NULL;
1767 if (blocking && cl->writing_state != MEI_WRITE_COMPLETE) {
1768
1769 mutex_unlock(&dev->device_lock);
1770 rets = wait_event_interruptible(cl->tx_wait,
1771 cl->writing_state == MEI_WRITE_COMPLETE ||
1772 (!mei_cl_is_connected(cl)));
1773 mutex_lock(&dev->device_lock);
1774 /* wait_event_interruptible returns -ERESTARTSYS */
1775 if (rets) {
1776 if (signal_pending(current))
1777 rets = -EINTR;
1778 goto err;
1779 }
1780 if (cl->writing_state != MEI_WRITE_COMPLETE) {
1781 rets = -EFAULT;
1782 goto err;
1783 }
1784 }
1785
1786 rets = len;
1787err:
1788 cl_dbg(dev, cl, "rpm: autosuspend\n");
1789 pm_runtime_mark_last_busy(dev->dev);
1790 pm_runtime_put_autosuspend(dev->dev);
1791free:
1792 mei_io_cb_free(cb);
1793
1794 return rets;
1795}
1796
1797
1798/**
1799 * mei_cl_complete - processes completed operation for a client
1800 *
1801 * @cl: private data of the file object.
1802 * @cb: callback block.
1803 */
1804void mei_cl_complete(struct mei_cl *cl, struct mei_cl_cb *cb)
1805{
1806 struct mei_device *dev = cl->dev;
1807
1808 switch (cb->fop_type) {
1809 case MEI_FOP_WRITE:
1810 mei_tx_cb_dequeue(cb);
1811 cl->writing_state = MEI_WRITE_COMPLETE;
1812 if (waitqueue_active(&cl->tx_wait)) {
1813 wake_up_interruptible(&cl->tx_wait);
1814 } else {
1815 pm_runtime_mark_last_busy(dev->dev);
1816 pm_request_autosuspend(dev->dev);
1817 }
1818 break;
1819
1820 case MEI_FOP_READ:
1821 list_add_tail(&cb->list, &cl->rd_completed);
1822 if (!mei_cl_is_fixed_address(cl) &&
1823 !WARN_ON(!cl->rx_flow_ctrl_creds))
1824 cl->rx_flow_ctrl_creds--;
1825 if (!mei_cl_bus_rx_event(cl))
1826 wake_up_interruptible(&cl->rx_wait);
1827 break;
1828
1829 case MEI_FOP_CONNECT:
1830 case MEI_FOP_DISCONNECT:
1831 case MEI_FOP_NOTIFY_STOP:
1832 case MEI_FOP_NOTIFY_START:
1833 if (waitqueue_active(&cl->wait))
1834 wake_up(&cl->wait);
1835
1836 break;
1837 case MEI_FOP_DISCONNECT_RSP:
1838 mei_io_cb_free(cb);
1839 mei_cl_set_disconnected(cl);
1840 break;
1841 default:
1842 BUG_ON(0);
1843 }
1844}
1845
1846
1847/**
1848 * mei_cl_all_disconnect - disconnect forcefully all connected clients
1849 *
1850 * @dev: mei device
1851 */
1852void mei_cl_all_disconnect(struct mei_device *dev)
1853{
1854 struct mei_cl *cl;
1855
1856 list_for_each_entry(cl, &dev->file_list, link)
1857 mei_cl_set_disconnected(cl);
1858}