Loading...
1// SPDX-License-Identifier: GPL-2.0+
2/*
3 * Copyright 2008-2009 Freescale Semiconductor, Inc. All Rights Reserved.
4 * Copyright 2010 Orex Computed Radiography
5 */
6
7/*
8 * This driver uses the 47-bit 32 kHz counter in the Freescale DryIce block
9 * to implement a Linux RTC. Times and alarms are truncated to seconds.
10 * Since the RTC framework performs API locking via rtc->ops_lock the
11 * only simultaneous accesses we need to deal with is updating DryIce
12 * registers while servicing an alarm.
13 *
14 * Note that reading the DSR (DryIce Status Register) automatically clears
15 * the WCF (Write Complete Flag). All DryIce writes are synchronized to the
16 * LP (Low Power) domain and set the WCF upon completion. Writes to the
17 * DIER (DryIce Interrupt Enable Register) are the only exception. These
18 * occur at normal bus speeds and do not set WCF. Periodic interrupts are
19 * not supported by the hardware.
20 */
21
22#include <linux/io.h>
23#include <linux/clk.h>
24#include <linux/delay.h>
25#include <linux/module.h>
26#include <linux/platform_device.h>
27#include <linux/pm_wakeirq.h>
28#include <linux/rtc.h>
29#include <linux/sched.h>
30#include <linux/spinlock.h>
31#include <linux/workqueue.h>
32#include <linux/of.h>
33
34/* DryIce Register Definitions */
35
36#define DTCMR 0x00 /* Time Counter MSB Reg */
37#define DTCLR 0x04 /* Time Counter LSB Reg */
38
39#define DCAMR 0x08 /* Clock Alarm MSB Reg */
40#define DCALR 0x0c /* Clock Alarm LSB Reg */
41#define DCAMR_UNSET 0xFFFFFFFF /* doomsday - 1 sec */
42
43#define DCR 0x10 /* Control Reg */
44#define DCR_TDCHL (1 << 30) /* Tamper-detect configuration hard lock */
45#define DCR_TDCSL (1 << 29) /* Tamper-detect configuration soft lock */
46#define DCR_KSSL (1 << 27) /* Key-select soft lock */
47#define DCR_MCHL (1 << 20) /* Monotonic-counter hard lock */
48#define DCR_MCSL (1 << 19) /* Monotonic-counter soft lock */
49#define DCR_TCHL (1 << 18) /* Timer-counter hard lock */
50#define DCR_TCSL (1 << 17) /* Timer-counter soft lock */
51#define DCR_FSHL (1 << 16) /* Failure state hard lock */
52#define DCR_TCE (1 << 3) /* Time Counter Enable */
53#define DCR_MCE (1 << 2) /* Monotonic Counter Enable */
54
55#define DSR 0x14 /* Status Reg */
56#define DSR_WTD (1 << 23) /* Wire-mesh tamper detected */
57#define DSR_ETBD (1 << 22) /* External tamper B detected */
58#define DSR_ETAD (1 << 21) /* External tamper A detected */
59#define DSR_EBD (1 << 20) /* External boot detected */
60#define DSR_SAD (1 << 19) /* SCC alarm detected */
61#define DSR_TTD (1 << 18) /* Temperature tamper detected */
62#define DSR_CTD (1 << 17) /* Clock tamper detected */
63#define DSR_VTD (1 << 16) /* Voltage tamper detected */
64#define DSR_WBF (1 << 10) /* Write Busy Flag (synchronous) */
65#define DSR_WNF (1 << 9) /* Write Next Flag (synchronous) */
66#define DSR_WCF (1 << 8) /* Write Complete Flag (synchronous)*/
67#define DSR_WEF (1 << 7) /* Write Error Flag */
68#define DSR_CAF (1 << 4) /* Clock Alarm Flag */
69#define DSR_MCO (1 << 3) /* monotonic counter overflow */
70#define DSR_TCO (1 << 2) /* time counter overflow */
71#define DSR_NVF (1 << 1) /* Non-Valid Flag */
72#define DSR_SVF (1 << 0) /* Security Violation Flag */
73
74#define DIER 0x18 /* Interrupt Enable Reg (synchronous) */
75#define DIER_WNIE (1 << 9) /* Write Next Interrupt Enable */
76#define DIER_WCIE (1 << 8) /* Write Complete Interrupt Enable */
77#define DIER_WEIE (1 << 7) /* Write Error Interrupt Enable */
78#define DIER_CAIE (1 << 4) /* Clock Alarm Interrupt Enable */
79#define DIER_SVIE (1 << 0) /* Security-violation Interrupt Enable */
80
81#define DMCR 0x1c /* DryIce Monotonic Counter Reg */
82
83#define DTCR 0x28 /* DryIce Tamper Configuration Reg */
84#define DTCR_MOE (1 << 9) /* monotonic overflow enabled */
85#define DTCR_TOE (1 << 8) /* time overflow enabled */
86#define DTCR_WTE (1 << 7) /* wire-mesh tamper enabled */
87#define DTCR_ETBE (1 << 6) /* external B tamper enabled */
88#define DTCR_ETAE (1 << 5) /* external A tamper enabled */
89#define DTCR_EBE (1 << 4) /* external boot tamper enabled */
90#define DTCR_SAIE (1 << 3) /* SCC enabled */
91#define DTCR_TTE (1 << 2) /* temperature tamper enabled */
92#define DTCR_CTE (1 << 1) /* clock tamper enabled */
93#define DTCR_VTE (1 << 0) /* voltage tamper enabled */
94
95#define DGPR 0x3c /* DryIce General Purpose Reg */
96
97/**
98 * struct imxdi_dev - private imxdi rtc data
99 * @pdev: pointer to platform dev
100 * @rtc: pointer to rtc struct
101 * @ioaddr: IO registers pointer
102 * @clk: input reference clock
103 * @dsr: copy of the DSR register
104 * @irq_lock: interrupt enable register (DIER) lock
105 * @write_wait: registers write complete queue
106 * @write_mutex: serialize registers write
107 * @work: schedule alarm work
108 */
109struct imxdi_dev {
110 struct platform_device *pdev;
111 struct rtc_device *rtc;
112 void __iomem *ioaddr;
113 struct clk *clk;
114 u32 dsr;
115 spinlock_t irq_lock;
116 wait_queue_head_t write_wait;
117 struct mutex write_mutex;
118 struct work_struct work;
119};
120
121/* Some background:
122 *
123 * The DryIce unit is a complex security/tamper monitor device. To be able do
124 * its job in a useful manner it runs a bigger statemachine to bring it into
125 * security/tamper failure state and once again to bring it out of this state.
126 *
127 * This unit can be in one of three states:
128 *
129 * - "NON-VALID STATE"
130 * always after the battery power was removed
131 * - "FAILURE STATE"
132 * if one of the enabled security events has happened
133 * - "VALID STATE"
134 * if the unit works as expected
135 *
136 * Everything stops when the unit enters the failure state including the RTC
137 * counter (to be able to detect the time the security event happened).
138 *
139 * The following events (when enabled) let the DryIce unit enter the failure
140 * state:
141 *
142 * - wire-mesh-tamper detect
143 * - external tamper B detect
144 * - external tamper A detect
145 * - temperature tamper detect
146 * - clock tamper detect
147 * - voltage tamper detect
148 * - RTC counter overflow
149 * - monotonic counter overflow
150 * - external boot
151 *
152 * If we find the DryIce unit in "FAILURE STATE" and the TDCHL cleared, we
153 * can only detect this state. In this case the unit is completely locked and
154 * must force a second "SYSTEM POR" to bring the DryIce into the
155 * "NON-VALID STATE" + "FAILURE STATE" where a recovery is possible.
156 * If the TDCHL is set in the "FAILURE STATE" we are out of luck. In this case
157 * a battery power cycle is required.
158 *
159 * In the "NON-VALID STATE" + "FAILURE STATE" we can clear the "FAILURE STATE"
160 * and recover the DryIce unit. By clearing the "NON-VALID STATE" as the last
161 * task, we bring back this unit into life.
162 */
163
164/*
165 * Do a write into the unit without interrupt support.
166 * We do not need to check the WEF here, because the only reason this kind of
167 * write error can happen is if we write to the unit twice within the 122 us
168 * interval. This cannot happen, since we are using this function only while
169 * setting up the unit.
170 */
171static void di_write_busy_wait(const struct imxdi_dev *imxdi, u32 val,
172 unsigned reg)
173{
174 /* do the register write */
175 writel(val, imxdi->ioaddr + reg);
176
177 /*
178 * now it takes four 32,768 kHz clock cycles to take
179 * the change into effect = 122 us
180 */
181 usleep_range(130, 200);
182}
183
184static void di_report_tamper_info(struct imxdi_dev *imxdi, u32 dsr)
185{
186 u32 dtcr;
187
188 dtcr = readl(imxdi->ioaddr + DTCR);
189
190 dev_emerg(&imxdi->pdev->dev, "DryIce tamper event detected\n");
191 /* the following flags force a transition into the "FAILURE STATE" */
192 if (dsr & DSR_VTD)
193 dev_emerg(&imxdi->pdev->dev, "%sVoltage Tamper Event\n",
194 dtcr & DTCR_VTE ? "" : "Spurious ");
195
196 if (dsr & DSR_CTD)
197 dev_emerg(&imxdi->pdev->dev, "%s32768 Hz Clock Tamper Event\n",
198 dtcr & DTCR_CTE ? "" : "Spurious ");
199
200 if (dsr & DSR_TTD)
201 dev_emerg(&imxdi->pdev->dev, "%sTemperature Tamper Event\n",
202 dtcr & DTCR_TTE ? "" : "Spurious ");
203
204 if (dsr & DSR_SAD)
205 dev_emerg(&imxdi->pdev->dev,
206 "%sSecure Controller Alarm Event\n",
207 dtcr & DTCR_SAIE ? "" : "Spurious ");
208
209 if (dsr & DSR_EBD)
210 dev_emerg(&imxdi->pdev->dev, "%sExternal Boot Tamper Event\n",
211 dtcr & DTCR_EBE ? "" : "Spurious ");
212
213 if (dsr & DSR_ETAD)
214 dev_emerg(&imxdi->pdev->dev, "%sExternal Tamper A Event\n",
215 dtcr & DTCR_ETAE ? "" : "Spurious ");
216
217 if (dsr & DSR_ETBD)
218 dev_emerg(&imxdi->pdev->dev, "%sExternal Tamper B Event\n",
219 dtcr & DTCR_ETBE ? "" : "Spurious ");
220
221 if (dsr & DSR_WTD)
222 dev_emerg(&imxdi->pdev->dev, "%sWire-mesh Tamper Event\n",
223 dtcr & DTCR_WTE ? "" : "Spurious ");
224
225 if (dsr & DSR_MCO)
226 dev_emerg(&imxdi->pdev->dev,
227 "%sMonotonic-counter Overflow Event\n",
228 dtcr & DTCR_MOE ? "" : "Spurious ");
229
230 if (dsr & DSR_TCO)
231 dev_emerg(&imxdi->pdev->dev, "%sTimer-counter Overflow Event\n",
232 dtcr & DTCR_TOE ? "" : "Spurious ");
233}
234
235static void di_what_is_to_be_done(struct imxdi_dev *imxdi,
236 const char *power_supply)
237{
238 dev_emerg(&imxdi->pdev->dev, "Please cycle the %s power supply in order to get the DryIce/RTC unit working again\n",
239 power_supply);
240}
241
242static int di_handle_failure_state(struct imxdi_dev *imxdi, u32 dsr)
243{
244 u32 dcr;
245
246 dev_dbg(&imxdi->pdev->dev, "DSR register reports: %08X\n", dsr);
247
248 /* report the cause */
249 di_report_tamper_info(imxdi, dsr);
250
251 dcr = readl(imxdi->ioaddr + DCR);
252
253 if (dcr & DCR_FSHL) {
254 /* we are out of luck */
255 di_what_is_to_be_done(imxdi, "battery");
256 return -ENODEV;
257 }
258 /*
259 * with the next SYSTEM POR we will transit from the "FAILURE STATE"
260 * into the "NON-VALID STATE" + "FAILURE STATE"
261 */
262 di_what_is_to_be_done(imxdi, "main");
263
264 return -ENODEV;
265}
266
267static int di_handle_valid_state(struct imxdi_dev *imxdi, u32 dsr)
268{
269 /* initialize alarm */
270 di_write_busy_wait(imxdi, DCAMR_UNSET, DCAMR);
271 di_write_busy_wait(imxdi, 0, DCALR);
272
273 /* clear alarm flag */
274 if (dsr & DSR_CAF)
275 di_write_busy_wait(imxdi, DSR_CAF, DSR);
276
277 return 0;
278}
279
280static int di_handle_invalid_state(struct imxdi_dev *imxdi, u32 dsr)
281{
282 u32 dcr, sec;
283
284 /*
285 * lets disable all sources which can force the DryIce unit into
286 * the "FAILURE STATE" for now
287 */
288 di_write_busy_wait(imxdi, 0x00000000, DTCR);
289 /* and lets protect them at runtime from any change */
290 di_write_busy_wait(imxdi, DCR_TDCSL, DCR);
291
292 sec = readl(imxdi->ioaddr + DTCMR);
293 if (sec != 0)
294 dev_warn(&imxdi->pdev->dev,
295 "The security violation has happened at %u seconds\n",
296 sec);
297 /*
298 * the timer cannot be set/modified if
299 * - the TCHL or TCSL bit is set in DCR
300 */
301 dcr = readl(imxdi->ioaddr + DCR);
302 if (!(dcr & DCR_TCE)) {
303 if (dcr & DCR_TCHL) {
304 /* we are out of luck */
305 di_what_is_to_be_done(imxdi, "battery");
306 return -ENODEV;
307 }
308 if (dcr & DCR_TCSL) {
309 di_what_is_to_be_done(imxdi, "main");
310 return -ENODEV;
311 }
312 }
313 /*
314 * - the timer counter stops/is stopped if
315 * - its overflow flag is set (TCO in DSR)
316 * -> clear overflow bit to make it count again
317 * - NVF is set in DSR
318 * -> clear non-valid bit to make it count again
319 * - its TCE (DCR) is cleared
320 * -> set TCE to make it count
321 * - it was never set before
322 * -> write a time into it (required again if the NVF was set)
323 */
324 /* state handled */
325 di_write_busy_wait(imxdi, DSR_NVF, DSR);
326 /* clear overflow flag */
327 di_write_busy_wait(imxdi, DSR_TCO, DSR);
328 /* enable the counter */
329 di_write_busy_wait(imxdi, dcr | DCR_TCE, DCR);
330 /* set and trigger it to make it count */
331 di_write_busy_wait(imxdi, sec, DTCMR);
332
333 /* now prepare for the valid state */
334 return di_handle_valid_state(imxdi, __raw_readl(imxdi->ioaddr + DSR));
335}
336
337static int di_handle_invalid_and_failure_state(struct imxdi_dev *imxdi, u32 dsr)
338{
339 u32 dcr;
340
341 /*
342 * now we must first remove the tamper sources in order to get the
343 * device out of the "FAILURE STATE"
344 * To disable any of the following sources we need to modify the DTCR
345 */
346 if (dsr & (DSR_WTD | DSR_ETBD | DSR_ETAD | DSR_EBD | DSR_SAD |
347 DSR_TTD | DSR_CTD | DSR_VTD | DSR_MCO | DSR_TCO)) {
348 dcr = __raw_readl(imxdi->ioaddr + DCR);
349 if (dcr & DCR_TDCHL) {
350 /*
351 * the tamper register is locked. We cannot disable the
352 * tamper detection. The TDCHL can only be reset by a
353 * DRYICE POR, but we cannot force a DRYICE POR in
354 * software because we are still in "FAILURE STATE".
355 * We need a DRYICE POR via battery power cycling....
356 */
357 /*
358 * out of luck!
359 * we cannot disable them without a DRYICE POR
360 */
361 di_what_is_to_be_done(imxdi, "battery");
362 return -ENODEV;
363 }
364 if (dcr & DCR_TDCSL) {
365 /* a soft lock can be removed by a SYSTEM POR */
366 di_what_is_to_be_done(imxdi, "main");
367 return -ENODEV;
368 }
369 }
370
371 /* disable all sources */
372 di_write_busy_wait(imxdi, 0x00000000, DTCR);
373
374 /* clear the status bits now */
375 di_write_busy_wait(imxdi, dsr & (DSR_WTD | DSR_ETBD | DSR_ETAD |
376 DSR_EBD | DSR_SAD | DSR_TTD | DSR_CTD | DSR_VTD |
377 DSR_MCO | DSR_TCO), DSR);
378
379 dsr = readl(imxdi->ioaddr + DSR);
380 if ((dsr & ~(DSR_NVF | DSR_SVF | DSR_WBF | DSR_WNF |
381 DSR_WCF | DSR_WEF)) != 0)
382 dev_warn(&imxdi->pdev->dev,
383 "There are still some sources of pain in DSR: %08x!\n",
384 dsr & ~(DSR_NVF | DSR_SVF | DSR_WBF | DSR_WNF |
385 DSR_WCF | DSR_WEF));
386
387 /*
388 * now we are trying to clear the "Security-violation flag" to
389 * get the DryIce out of this state
390 */
391 di_write_busy_wait(imxdi, DSR_SVF, DSR);
392
393 /* success? */
394 dsr = readl(imxdi->ioaddr + DSR);
395 if (dsr & DSR_SVF) {
396 dev_crit(&imxdi->pdev->dev,
397 "Cannot clear the security violation flag. We are ending up in an endless loop!\n");
398 /* last resort */
399 di_what_is_to_be_done(imxdi, "battery");
400 return -ENODEV;
401 }
402
403 /*
404 * now we have left the "FAILURE STATE" and ending up in the
405 * "NON-VALID STATE" time to recover everything
406 */
407 return di_handle_invalid_state(imxdi, dsr);
408}
409
410static int di_handle_state(struct imxdi_dev *imxdi)
411{
412 int rc;
413 u32 dsr;
414
415 dsr = readl(imxdi->ioaddr + DSR);
416
417 switch (dsr & (DSR_NVF | DSR_SVF)) {
418 case DSR_NVF:
419 dev_warn(&imxdi->pdev->dev, "Invalid stated unit detected\n");
420 rc = di_handle_invalid_state(imxdi, dsr);
421 break;
422 case DSR_SVF:
423 dev_warn(&imxdi->pdev->dev, "Failure stated unit detected\n");
424 rc = di_handle_failure_state(imxdi, dsr);
425 break;
426 case DSR_NVF | DSR_SVF:
427 dev_warn(&imxdi->pdev->dev,
428 "Failure+Invalid stated unit detected\n");
429 rc = di_handle_invalid_and_failure_state(imxdi, dsr);
430 break;
431 default:
432 dev_notice(&imxdi->pdev->dev, "Unlocked unit detected\n");
433 rc = di_handle_valid_state(imxdi, dsr);
434 }
435
436 return rc;
437}
438
439/*
440 * enable a dryice interrupt
441 */
442static void di_int_enable(struct imxdi_dev *imxdi, u32 intr)
443{
444 unsigned long flags;
445
446 spin_lock_irqsave(&imxdi->irq_lock, flags);
447 writel(readl(imxdi->ioaddr + DIER) | intr,
448 imxdi->ioaddr + DIER);
449 spin_unlock_irqrestore(&imxdi->irq_lock, flags);
450}
451
452/*
453 * disable a dryice interrupt
454 */
455static void di_int_disable(struct imxdi_dev *imxdi, u32 intr)
456{
457 unsigned long flags;
458
459 spin_lock_irqsave(&imxdi->irq_lock, flags);
460 writel(readl(imxdi->ioaddr + DIER) & ~intr,
461 imxdi->ioaddr + DIER);
462 spin_unlock_irqrestore(&imxdi->irq_lock, flags);
463}
464
465/*
466 * This function attempts to clear the dryice write-error flag.
467 *
468 * A dryice write error is similar to a bus fault and should not occur in
469 * normal operation. Clearing the flag requires another write, so the root
470 * cause of the problem may need to be fixed before the flag can be cleared.
471 */
472static void clear_write_error(struct imxdi_dev *imxdi)
473{
474 int cnt;
475
476 dev_warn(&imxdi->pdev->dev, "WARNING: Register write error!\n");
477
478 /* clear the write error flag */
479 writel(DSR_WEF, imxdi->ioaddr + DSR);
480
481 /* wait for it to take effect */
482 for (cnt = 0; cnt < 1000; cnt++) {
483 if ((readl(imxdi->ioaddr + DSR) & DSR_WEF) == 0)
484 return;
485 udelay(10);
486 }
487 dev_err(&imxdi->pdev->dev,
488 "ERROR: Cannot clear write-error flag!\n");
489}
490
491/*
492 * Write a dryice register and wait until it completes.
493 *
494 * This function uses interrupts to determine when the
495 * write has completed.
496 */
497static int di_write_wait(struct imxdi_dev *imxdi, u32 val, int reg)
498{
499 int ret;
500 int rc = 0;
501
502 /* serialize register writes */
503 mutex_lock(&imxdi->write_mutex);
504
505 /* enable the write-complete interrupt */
506 di_int_enable(imxdi, DIER_WCIE);
507
508 imxdi->dsr = 0;
509
510 /* do the register write */
511 writel(val, imxdi->ioaddr + reg);
512
513 /* wait for the write to finish */
514 ret = wait_event_interruptible_timeout(imxdi->write_wait,
515 imxdi->dsr & (DSR_WCF | DSR_WEF), msecs_to_jiffies(1));
516 if (ret < 0) {
517 rc = ret;
518 goto out;
519 } else if (ret == 0) {
520 dev_warn(&imxdi->pdev->dev,
521 "Write-wait timeout "
522 "val = 0x%08x reg = 0x%08x\n", val, reg);
523 }
524
525 /* check for write error */
526 if (imxdi->dsr & DSR_WEF) {
527 clear_write_error(imxdi);
528 rc = -EIO;
529 }
530
531out:
532 mutex_unlock(&imxdi->write_mutex);
533
534 return rc;
535}
536
537/*
538 * read the seconds portion of the current time from the dryice time counter
539 */
540static int dryice_rtc_read_time(struct device *dev, struct rtc_time *tm)
541{
542 struct imxdi_dev *imxdi = dev_get_drvdata(dev);
543 unsigned long now;
544
545 now = readl(imxdi->ioaddr + DTCMR);
546 rtc_time64_to_tm(now, tm);
547
548 return 0;
549}
550
551/*
552 * set the seconds portion of dryice time counter and clear the
553 * fractional part.
554 */
555static int dryice_rtc_set_time(struct device *dev, struct rtc_time *tm)
556{
557 struct imxdi_dev *imxdi = dev_get_drvdata(dev);
558 u32 dcr, dsr;
559 int rc;
560
561 dcr = readl(imxdi->ioaddr + DCR);
562 dsr = readl(imxdi->ioaddr + DSR);
563
564 if (!(dcr & DCR_TCE) || (dsr & DSR_SVF)) {
565 if (dcr & DCR_TCHL) {
566 /* we are even more out of luck */
567 di_what_is_to_be_done(imxdi, "battery");
568 return -EPERM;
569 }
570 if ((dcr & DCR_TCSL) || (dsr & DSR_SVF)) {
571 /* we are out of luck for now */
572 di_what_is_to_be_done(imxdi, "main");
573 return -EPERM;
574 }
575 }
576
577 /* zero the fractional part first */
578 rc = di_write_wait(imxdi, 0, DTCLR);
579 if (rc != 0)
580 return rc;
581
582 rc = di_write_wait(imxdi, rtc_tm_to_time64(tm), DTCMR);
583 if (rc != 0)
584 return rc;
585
586 return di_write_wait(imxdi, readl(imxdi->ioaddr + DCR) | DCR_TCE, DCR);
587}
588
589static int dryice_rtc_alarm_irq_enable(struct device *dev,
590 unsigned int enabled)
591{
592 struct imxdi_dev *imxdi = dev_get_drvdata(dev);
593
594 if (enabled)
595 di_int_enable(imxdi, DIER_CAIE);
596 else
597 di_int_disable(imxdi, DIER_CAIE);
598
599 return 0;
600}
601
602/*
603 * read the seconds portion of the alarm register.
604 * the fractional part of the alarm register is always zero.
605 */
606static int dryice_rtc_read_alarm(struct device *dev, struct rtc_wkalrm *alarm)
607{
608 struct imxdi_dev *imxdi = dev_get_drvdata(dev);
609 u32 dcamr;
610
611 dcamr = readl(imxdi->ioaddr + DCAMR);
612 rtc_time64_to_tm(dcamr, &alarm->time);
613
614 /* alarm is enabled if the interrupt is enabled */
615 alarm->enabled = (readl(imxdi->ioaddr + DIER) & DIER_CAIE) != 0;
616
617 /* don't allow the DSR read to mess up DSR_WCF */
618 mutex_lock(&imxdi->write_mutex);
619
620 /* alarm is pending if the alarm flag is set */
621 alarm->pending = (readl(imxdi->ioaddr + DSR) & DSR_CAF) != 0;
622
623 mutex_unlock(&imxdi->write_mutex);
624
625 return 0;
626}
627
628/*
629 * set the seconds portion of dryice alarm register
630 */
631static int dryice_rtc_set_alarm(struct device *dev, struct rtc_wkalrm *alarm)
632{
633 struct imxdi_dev *imxdi = dev_get_drvdata(dev);
634 int rc;
635
636 /* write the new alarm time */
637 rc = di_write_wait(imxdi, rtc_tm_to_time64(&alarm->time), DCAMR);
638 if (rc)
639 return rc;
640
641 if (alarm->enabled)
642 di_int_enable(imxdi, DIER_CAIE); /* enable alarm intr */
643 else
644 di_int_disable(imxdi, DIER_CAIE); /* disable alarm intr */
645
646 return 0;
647}
648
649static const struct rtc_class_ops dryice_rtc_ops = {
650 .read_time = dryice_rtc_read_time,
651 .set_time = dryice_rtc_set_time,
652 .alarm_irq_enable = dryice_rtc_alarm_irq_enable,
653 .read_alarm = dryice_rtc_read_alarm,
654 .set_alarm = dryice_rtc_set_alarm,
655};
656
657/*
658 * interrupt handler for dryice "normal" and security violation interrupt
659 */
660static irqreturn_t dryice_irq(int irq, void *dev_id)
661{
662 struct imxdi_dev *imxdi = dev_id;
663 u32 dsr, dier;
664 irqreturn_t rc = IRQ_NONE;
665
666 dier = readl(imxdi->ioaddr + DIER);
667 dsr = readl(imxdi->ioaddr + DSR);
668
669 /* handle the security violation event */
670 if (dier & DIER_SVIE) {
671 if (dsr & DSR_SVF) {
672 /*
673 * Disable the interrupt when this kind of event has
674 * happened.
675 * There cannot be more than one event of this type,
676 * because it needs a complex state change
677 * including a main power cycle to get again out of
678 * this state.
679 */
680 di_int_disable(imxdi, DIER_SVIE);
681 /* report the violation */
682 di_report_tamper_info(imxdi, dsr);
683 rc = IRQ_HANDLED;
684 }
685 }
686
687 /* handle write complete and write error cases */
688 if (dier & DIER_WCIE) {
689 /*If the write wait queue is empty then there is no pending
690 operations. It means the interrupt is for DryIce -Security.
691 IRQ must be returned as none.*/
692 if (list_empty_careful(&imxdi->write_wait.head))
693 return rc;
694
695 /* DSR_WCF clears itself on DSR read */
696 if (dsr & (DSR_WCF | DSR_WEF)) {
697 /* mask the interrupt */
698 di_int_disable(imxdi, DIER_WCIE);
699
700 /* save the dsr value for the wait queue */
701 imxdi->dsr |= dsr;
702
703 wake_up_interruptible(&imxdi->write_wait);
704 rc = IRQ_HANDLED;
705 }
706 }
707
708 /* handle the alarm case */
709 if (dier & DIER_CAIE) {
710 /* DSR_WCF clears itself on DSR read */
711 if (dsr & DSR_CAF) {
712 /* mask the interrupt */
713 di_int_disable(imxdi, DIER_CAIE);
714
715 /* finish alarm in user context */
716 schedule_work(&imxdi->work);
717 rc = IRQ_HANDLED;
718 }
719 }
720 return rc;
721}
722
723/*
724 * post the alarm event from user context so it can sleep
725 * on the write completion.
726 */
727static void dryice_work(struct work_struct *work)
728{
729 struct imxdi_dev *imxdi = container_of(work,
730 struct imxdi_dev, work);
731
732 /* dismiss the interrupt (ignore error) */
733 di_write_wait(imxdi, DSR_CAF, DSR);
734
735 /* pass the alarm event to the rtc framework. */
736 rtc_update_irq(imxdi->rtc, 1, RTC_AF | RTC_IRQF);
737}
738
739/*
740 * probe for dryice rtc device
741 */
742static int __init dryice_rtc_probe(struct platform_device *pdev)
743{
744 struct imxdi_dev *imxdi;
745 int norm_irq, sec_irq;
746 int rc;
747
748 imxdi = devm_kzalloc(&pdev->dev, sizeof(*imxdi), GFP_KERNEL);
749 if (!imxdi)
750 return -ENOMEM;
751
752 imxdi->pdev = pdev;
753
754 imxdi->ioaddr = devm_platform_ioremap_resource(pdev, 0);
755 if (IS_ERR(imxdi->ioaddr))
756 return PTR_ERR(imxdi->ioaddr);
757
758 spin_lock_init(&imxdi->irq_lock);
759
760 norm_irq = platform_get_irq(pdev, 0);
761 if (norm_irq < 0)
762 return norm_irq;
763
764 /* the 2nd irq is the security violation irq
765 * make this optional, don't break the device tree ABI
766 */
767 sec_irq = platform_get_irq(pdev, 1);
768 if (sec_irq <= 0)
769 sec_irq = IRQ_NOTCONNECTED;
770
771 init_waitqueue_head(&imxdi->write_wait);
772
773 INIT_WORK(&imxdi->work, dryice_work);
774
775 mutex_init(&imxdi->write_mutex);
776
777 imxdi->rtc = devm_rtc_allocate_device(&pdev->dev);
778 if (IS_ERR(imxdi->rtc))
779 return PTR_ERR(imxdi->rtc);
780
781 imxdi->clk = devm_clk_get(&pdev->dev, NULL);
782 if (IS_ERR(imxdi->clk))
783 return PTR_ERR(imxdi->clk);
784 rc = clk_prepare_enable(imxdi->clk);
785 if (rc)
786 return rc;
787
788 /*
789 * Initialize dryice hardware
790 */
791
792 /* mask all interrupts */
793 writel(0, imxdi->ioaddr + DIER);
794
795 rc = di_handle_state(imxdi);
796 if (rc != 0)
797 goto err;
798
799 rc = devm_request_irq(&pdev->dev, norm_irq, dryice_irq,
800 IRQF_SHARED, pdev->name, imxdi);
801 if (rc) {
802 dev_warn(&pdev->dev, "interrupt not available.\n");
803 goto err;
804 }
805
806 rc = devm_request_irq(&pdev->dev, sec_irq, dryice_irq,
807 IRQF_SHARED, pdev->name, imxdi);
808 if (rc) {
809 dev_warn(&pdev->dev, "security violation interrupt not available.\n");
810 /* this is not an error, see above */
811 }
812
813 platform_set_drvdata(pdev, imxdi);
814
815 device_init_wakeup(&pdev->dev, true);
816 dev_pm_set_wake_irq(&pdev->dev, norm_irq);
817
818 imxdi->rtc->ops = &dryice_rtc_ops;
819 imxdi->rtc->range_max = U32_MAX;
820
821 rc = devm_rtc_register_device(imxdi->rtc);
822 if (rc)
823 goto err;
824
825 return 0;
826
827err:
828 clk_disable_unprepare(imxdi->clk);
829
830 return rc;
831}
832
833static void __exit dryice_rtc_remove(struct platform_device *pdev)
834{
835 struct imxdi_dev *imxdi = platform_get_drvdata(pdev);
836
837 flush_work(&imxdi->work);
838
839 /* mask all interrupts */
840 writel(0, imxdi->ioaddr + DIER);
841
842 clk_disable_unprepare(imxdi->clk);
843}
844
845static const struct of_device_id dryice_dt_ids[] = {
846 { .compatible = "fsl,imx25-rtc" },
847 { /* sentinel */ }
848};
849
850MODULE_DEVICE_TABLE(of, dryice_dt_ids);
851
852/*
853 * dryice_rtc_remove() lives in .exit.text. For drivers registered via
854 * module_platform_driver_probe() this is ok because they cannot get unbound at
855 * runtime. So mark the driver struct with __refdata to prevent modpost
856 * triggering a section mismatch warning.
857 */
858static struct platform_driver dryice_rtc_driver __refdata = {
859 .driver = {
860 .name = "imxdi_rtc",
861 .of_match_table = dryice_dt_ids,
862 },
863 .remove = __exit_p(dryice_rtc_remove),
864};
865
866module_platform_driver_probe(dryice_rtc_driver, dryice_rtc_probe);
867
868MODULE_AUTHOR("Freescale Semiconductor, Inc.");
869MODULE_AUTHOR("Baruch Siach <baruch@tkos.co.il>");
870MODULE_DESCRIPTION("IMX DryIce Realtime Clock Driver (RTC)");
871MODULE_LICENSE("GPL");
1/*
2 * Copyright 2008-2009 Freescale Semiconductor, Inc. All Rights Reserved.
3 * Copyright 2010 Orex Computed Radiography
4 */
5
6/*
7 * The code contained herein is licensed under the GNU General Public
8 * License. You may obtain a copy of the GNU General Public License
9 * Version 2 or later at the following locations:
10 *
11 * http://www.opensource.org/licenses/gpl-license.html
12 * http://www.gnu.org/copyleft/gpl.html
13 */
14
15/* based on rtc-mc13892.c */
16
17/*
18 * This driver uses the 47-bit 32 kHz counter in the Freescale DryIce block
19 * to implement a Linux RTC. Times and alarms are truncated to seconds.
20 * Since the RTC framework performs API locking via rtc->ops_lock the
21 * only simultaneous accesses we need to deal with is updating DryIce
22 * registers while servicing an alarm.
23 *
24 * Note that reading the DSR (DryIce Status Register) automatically clears
25 * the WCF (Write Complete Flag). All DryIce writes are synchronized to the
26 * LP (Low Power) domain and set the WCF upon completion. Writes to the
27 * DIER (DryIce Interrupt Enable Register) are the only exception. These
28 * occur at normal bus speeds and do not set WCF. Periodic interrupts are
29 * not supported by the hardware.
30 */
31
32#include <linux/io.h>
33#include <linux/clk.h>
34#include <linux/delay.h>
35#include <linux/module.h>
36#include <linux/platform_device.h>
37#include <linux/rtc.h>
38#include <linux/sched.h>
39#include <linux/spinlock.h>
40#include <linux/workqueue.h>
41#include <linux/of.h>
42
43/* DryIce Register Definitions */
44
45#define DTCMR 0x00 /* Time Counter MSB Reg */
46#define DTCLR 0x04 /* Time Counter LSB Reg */
47
48#define DCAMR 0x08 /* Clock Alarm MSB Reg */
49#define DCALR 0x0c /* Clock Alarm LSB Reg */
50#define DCAMR_UNSET 0xFFFFFFFF /* doomsday - 1 sec */
51
52#define DCR 0x10 /* Control Reg */
53#define DCR_TDCHL (1 << 30) /* Tamper-detect configuration hard lock */
54#define DCR_TDCSL (1 << 29) /* Tamper-detect configuration soft lock */
55#define DCR_KSSL (1 << 27) /* Key-select soft lock */
56#define DCR_MCHL (1 << 20) /* Monotonic-counter hard lock */
57#define DCR_MCSL (1 << 19) /* Monotonic-counter soft lock */
58#define DCR_TCHL (1 << 18) /* Timer-counter hard lock */
59#define DCR_TCSL (1 << 17) /* Timer-counter soft lock */
60#define DCR_FSHL (1 << 16) /* Failure state hard lock */
61#define DCR_TCE (1 << 3) /* Time Counter Enable */
62#define DCR_MCE (1 << 2) /* Monotonic Counter Enable */
63
64#define DSR 0x14 /* Status Reg */
65#define DSR_WTD (1 << 23) /* Wire-mesh tamper detected */
66#define DSR_ETBD (1 << 22) /* External tamper B detected */
67#define DSR_ETAD (1 << 21) /* External tamper A detected */
68#define DSR_EBD (1 << 20) /* External boot detected */
69#define DSR_SAD (1 << 19) /* SCC alarm detected */
70#define DSR_TTD (1 << 18) /* Temperature tamper detected */
71#define DSR_CTD (1 << 17) /* Clock tamper detected */
72#define DSR_VTD (1 << 16) /* Voltage tamper detected */
73#define DSR_WBF (1 << 10) /* Write Busy Flag (synchronous) */
74#define DSR_WNF (1 << 9) /* Write Next Flag (synchronous) */
75#define DSR_WCF (1 << 8) /* Write Complete Flag (synchronous)*/
76#define DSR_WEF (1 << 7) /* Write Error Flag */
77#define DSR_CAF (1 << 4) /* Clock Alarm Flag */
78#define DSR_MCO (1 << 3) /* monotonic counter overflow */
79#define DSR_TCO (1 << 2) /* time counter overflow */
80#define DSR_NVF (1 << 1) /* Non-Valid Flag */
81#define DSR_SVF (1 << 0) /* Security Violation Flag */
82
83#define DIER 0x18 /* Interrupt Enable Reg (synchronous) */
84#define DIER_WNIE (1 << 9) /* Write Next Interrupt Enable */
85#define DIER_WCIE (1 << 8) /* Write Complete Interrupt Enable */
86#define DIER_WEIE (1 << 7) /* Write Error Interrupt Enable */
87#define DIER_CAIE (1 << 4) /* Clock Alarm Interrupt Enable */
88#define DIER_SVIE (1 << 0) /* Security-violation Interrupt Enable */
89
90#define DMCR 0x1c /* DryIce Monotonic Counter Reg */
91
92#define DTCR 0x28 /* DryIce Tamper Configuration Reg */
93#define DTCR_MOE (1 << 9) /* monotonic overflow enabled */
94#define DTCR_TOE (1 << 8) /* time overflow enabled */
95#define DTCR_WTE (1 << 7) /* wire-mesh tamper enabled */
96#define DTCR_ETBE (1 << 6) /* external B tamper enabled */
97#define DTCR_ETAE (1 << 5) /* external A tamper enabled */
98#define DTCR_EBE (1 << 4) /* external boot tamper enabled */
99#define DTCR_SAIE (1 << 3) /* SCC enabled */
100#define DTCR_TTE (1 << 2) /* temperature tamper enabled */
101#define DTCR_CTE (1 << 1) /* clock tamper enabled */
102#define DTCR_VTE (1 << 0) /* voltage tamper enabled */
103
104#define DGPR 0x3c /* DryIce General Purpose Reg */
105
106/**
107 * struct imxdi_dev - private imxdi rtc data
108 * @pdev: pionter to platform dev
109 * @rtc: pointer to rtc struct
110 * @ioaddr: IO registers pointer
111 * @irq: dryice normal interrupt
112 * @clk: input reference clock
113 * @dsr: copy of the DSR register
114 * @irq_lock: interrupt enable register (DIER) lock
115 * @write_wait: registers write complete queue
116 * @write_mutex: serialize registers write
117 * @work: schedule alarm work
118 */
119struct imxdi_dev {
120 struct platform_device *pdev;
121 struct rtc_device *rtc;
122 void __iomem *ioaddr;
123 int irq;
124 struct clk *clk;
125 u32 dsr;
126 spinlock_t irq_lock;
127 wait_queue_head_t write_wait;
128 struct mutex write_mutex;
129 struct work_struct work;
130};
131
132/* Some background:
133 *
134 * The DryIce unit is a complex security/tamper monitor device. To be able do
135 * its job in a useful manner it runs a bigger statemachine to bring it into
136 * security/tamper failure state and once again to bring it out of this state.
137 *
138 * This unit can be in one of three states:
139 *
140 * - "NON-VALID STATE"
141 * always after the battery power was removed
142 * - "FAILURE STATE"
143 * if one of the enabled security events has happened
144 * - "VALID STATE"
145 * if the unit works as expected
146 *
147 * Everything stops when the unit enters the failure state including the RTC
148 * counter (to be able to detect the time the security event happened).
149 *
150 * The following events (when enabled) let the DryIce unit enter the failure
151 * state:
152 *
153 * - wire-mesh-tamper detect
154 * - external tamper B detect
155 * - external tamper A detect
156 * - temperature tamper detect
157 * - clock tamper detect
158 * - voltage tamper detect
159 * - RTC counter overflow
160 * - monotonic counter overflow
161 * - external boot
162 *
163 * If we find the DryIce unit in "FAILURE STATE" and the TDCHL cleared, we
164 * can only detect this state. In this case the unit is completely locked and
165 * must force a second "SYSTEM POR" to bring the DryIce into the
166 * "NON-VALID STATE" + "FAILURE STATE" where a recovery is possible.
167 * If the TDCHL is set in the "FAILURE STATE" we are out of luck. In this case
168 * a battery power cycle is required.
169 *
170 * In the "NON-VALID STATE" + "FAILURE STATE" we can clear the "FAILURE STATE"
171 * and recover the DryIce unit. By clearing the "NON-VALID STATE" as the last
172 * task, we bring back this unit into life.
173 */
174
175/*
176 * Do a write into the unit without interrupt support.
177 * We do not need to check the WEF here, because the only reason this kind of
178 * write error can happen is if we write to the unit twice within the 122 us
179 * interval. This cannot happen, since we are using this function only while
180 * setting up the unit.
181 */
182static void di_write_busy_wait(const struct imxdi_dev *imxdi, u32 val,
183 unsigned reg)
184{
185 /* do the register write */
186 writel(val, imxdi->ioaddr + reg);
187
188 /*
189 * now it takes four 32,768 kHz clock cycles to take
190 * the change into effect = 122 us
191 */
192 usleep_range(130, 200);
193}
194
195static void di_report_tamper_info(struct imxdi_dev *imxdi, u32 dsr)
196{
197 u32 dtcr;
198
199 dtcr = readl(imxdi->ioaddr + DTCR);
200
201 dev_emerg(&imxdi->pdev->dev, "DryIce tamper event detected\n");
202 /* the following flags force a transition into the "FAILURE STATE" */
203 if (dsr & DSR_VTD)
204 dev_emerg(&imxdi->pdev->dev, "%sVoltage Tamper Event\n",
205 dtcr & DTCR_VTE ? "" : "Spurious ");
206
207 if (dsr & DSR_CTD)
208 dev_emerg(&imxdi->pdev->dev, "%s32768 Hz Clock Tamper Event\n",
209 dtcr & DTCR_CTE ? "" : "Spurious ");
210
211 if (dsr & DSR_TTD)
212 dev_emerg(&imxdi->pdev->dev, "%sTemperature Tamper Event\n",
213 dtcr & DTCR_TTE ? "" : "Spurious ");
214
215 if (dsr & DSR_SAD)
216 dev_emerg(&imxdi->pdev->dev,
217 "%sSecure Controller Alarm Event\n",
218 dtcr & DTCR_SAIE ? "" : "Spurious ");
219
220 if (dsr & DSR_EBD)
221 dev_emerg(&imxdi->pdev->dev, "%sExternal Boot Tamper Event\n",
222 dtcr & DTCR_EBE ? "" : "Spurious ");
223
224 if (dsr & DSR_ETAD)
225 dev_emerg(&imxdi->pdev->dev, "%sExternal Tamper A Event\n",
226 dtcr & DTCR_ETAE ? "" : "Spurious ");
227
228 if (dsr & DSR_ETBD)
229 dev_emerg(&imxdi->pdev->dev, "%sExternal Tamper B Event\n",
230 dtcr & DTCR_ETBE ? "" : "Spurious ");
231
232 if (dsr & DSR_WTD)
233 dev_emerg(&imxdi->pdev->dev, "%sWire-mesh Tamper Event\n",
234 dtcr & DTCR_WTE ? "" : "Spurious ");
235
236 if (dsr & DSR_MCO)
237 dev_emerg(&imxdi->pdev->dev,
238 "%sMonotonic-counter Overflow Event\n",
239 dtcr & DTCR_MOE ? "" : "Spurious ");
240
241 if (dsr & DSR_TCO)
242 dev_emerg(&imxdi->pdev->dev, "%sTimer-counter Overflow Event\n",
243 dtcr & DTCR_TOE ? "" : "Spurious ");
244}
245
246static void di_what_is_to_be_done(struct imxdi_dev *imxdi,
247 const char *power_supply)
248{
249 dev_emerg(&imxdi->pdev->dev, "Please cycle the %s power supply in order to get the DryIce/RTC unit working again\n",
250 power_supply);
251}
252
253static int di_handle_failure_state(struct imxdi_dev *imxdi, u32 dsr)
254{
255 u32 dcr;
256
257 dev_dbg(&imxdi->pdev->dev, "DSR register reports: %08X\n", dsr);
258
259 /* report the cause */
260 di_report_tamper_info(imxdi, dsr);
261
262 dcr = readl(imxdi->ioaddr + DCR);
263
264 if (dcr & DCR_FSHL) {
265 /* we are out of luck */
266 di_what_is_to_be_done(imxdi, "battery");
267 return -ENODEV;
268 }
269 /*
270 * with the next SYSTEM POR we will transit from the "FAILURE STATE"
271 * into the "NON-VALID STATE" + "FAILURE STATE"
272 */
273 di_what_is_to_be_done(imxdi, "main");
274
275 return -ENODEV;
276}
277
278static int di_handle_valid_state(struct imxdi_dev *imxdi, u32 dsr)
279{
280 /* initialize alarm */
281 di_write_busy_wait(imxdi, DCAMR_UNSET, DCAMR);
282 di_write_busy_wait(imxdi, 0, DCALR);
283
284 /* clear alarm flag */
285 if (dsr & DSR_CAF)
286 di_write_busy_wait(imxdi, DSR_CAF, DSR);
287
288 return 0;
289}
290
291static int di_handle_invalid_state(struct imxdi_dev *imxdi, u32 dsr)
292{
293 u32 dcr, sec;
294
295 /*
296 * lets disable all sources which can force the DryIce unit into
297 * the "FAILURE STATE" for now
298 */
299 di_write_busy_wait(imxdi, 0x00000000, DTCR);
300 /* and lets protect them at runtime from any change */
301 di_write_busy_wait(imxdi, DCR_TDCSL, DCR);
302
303 sec = readl(imxdi->ioaddr + DTCMR);
304 if (sec != 0)
305 dev_warn(&imxdi->pdev->dev,
306 "The security violation has happened at %u seconds\n",
307 sec);
308 /*
309 * the timer cannot be set/modified if
310 * - the TCHL or TCSL bit is set in DCR
311 */
312 dcr = readl(imxdi->ioaddr + DCR);
313 if (!(dcr & DCR_TCE)) {
314 if (dcr & DCR_TCHL) {
315 /* we are out of luck */
316 di_what_is_to_be_done(imxdi, "battery");
317 return -ENODEV;
318 }
319 if (dcr & DCR_TCSL) {
320 di_what_is_to_be_done(imxdi, "main");
321 return -ENODEV;
322 }
323 }
324 /*
325 * - the timer counter stops/is stopped if
326 * - its overflow flag is set (TCO in DSR)
327 * -> clear overflow bit to make it count again
328 * - NVF is set in DSR
329 * -> clear non-valid bit to make it count again
330 * - its TCE (DCR) is cleared
331 * -> set TCE to make it count
332 * - it was never set before
333 * -> write a time into it (required again if the NVF was set)
334 */
335 /* state handled */
336 di_write_busy_wait(imxdi, DSR_NVF, DSR);
337 /* clear overflow flag */
338 di_write_busy_wait(imxdi, DSR_TCO, DSR);
339 /* enable the counter */
340 di_write_busy_wait(imxdi, dcr | DCR_TCE, DCR);
341 /* set and trigger it to make it count */
342 di_write_busy_wait(imxdi, sec, DTCMR);
343
344 /* now prepare for the valid state */
345 return di_handle_valid_state(imxdi, __raw_readl(imxdi->ioaddr + DSR));
346}
347
348static int di_handle_invalid_and_failure_state(struct imxdi_dev *imxdi, u32 dsr)
349{
350 u32 dcr;
351
352 /*
353 * now we must first remove the tamper sources in order to get the
354 * device out of the "FAILURE STATE"
355 * To disable any of the following sources we need to modify the DTCR
356 */
357 if (dsr & (DSR_WTD | DSR_ETBD | DSR_ETAD | DSR_EBD | DSR_SAD |
358 DSR_TTD | DSR_CTD | DSR_VTD | DSR_MCO | DSR_TCO)) {
359 dcr = __raw_readl(imxdi->ioaddr + DCR);
360 if (dcr & DCR_TDCHL) {
361 /*
362 * the tamper register is locked. We cannot disable the
363 * tamper detection. The TDCHL can only be reset by a
364 * DRYICE POR, but we cannot force a DRYICE POR in
365 * softwere because we are still in "FAILURE STATE".
366 * We need a DRYICE POR via battery power cycling....
367 */
368 /*
369 * out of luck!
370 * we cannot disable them without a DRYICE POR
371 */
372 di_what_is_to_be_done(imxdi, "battery");
373 return -ENODEV;
374 }
375 if (dcr & DCR_TDCSL) {
376 /* a soft lock can be removed by a SYSTEM POR */
377 di_what_is_to_be_done(imxdi, "main");
378 return -ENODEV;
379 }
380 }
381
382 /* disable all sources */
383 di_write_busy_wait(imxdi, 0x00000000, DTCR);
384
385 /* clear the status bits now */
386 di_write_busy_wait(imxdi, dsr & (DSR_WTD | DSR_ETBD | DSR_ETAD |
387 DSR_EBD | DSR_SAD | DSR_TTD | DSR_CTD | DSR_VTD |
388 DSR_MCO | DSR_TCO), DSR);
389
390 dsr = readl(imxdi->ioaddr + DSR);
391 if ((dsr & ~(DSR_NVF | DSR_SVF | DSR_WBF | DSR_WNF |
392 DSR_WCF | DSR_WEF)) != 0)
393 dev_warn(&imxdi->pdev->dev,
394 "There are still some sources of pain in DSR: %08x!\n",
395 dsr & ~(DSR_NVF | DSR_SVF | DSR_WBF | DSR_WNF |
396 DSR_WCF | DSR_WEF));
397
398 /*
399 * now we are trying to clear the "Security-violation flag" to
400 * get the DryIce out of this state
401 */
402 di_write_busy_wait(imxdi, DSR_SVF, DSR);
403
404 /* success? */
405 dsr = readl(imxdi->ioaddr + DSR);
406 if (dsr & DSR_SVF) {
407 dev_crit(&imxdi->pdev->dev,
408 "Cannot clear the security violation flag. We are ending up in an endless loop!\n");
409 /* last resort */
410 di_what_is_to_be_done(imxdi, "battery");
411 return -ENODEV;
412 }
413
414 /*
415 * now we have left the "FAILURE STATE" and ending up in the
416 * "NON-VALID STATE" time to recover everything
417 */
418 return di_handle_invalid_state(imxdi, dsr);
419}
420
421static int di_handle_state(struct imxdi_dev *imxdi)
422{
423 int rc;
424 u32 dsr;
425
426 dsr = readl(imxdi->ioaddr + DSR);
427
428 switch (dsr & (DSR_NVF | DSR_SVF)) {
429 case DSR_NVF:
430 dev_warn(&imxdi->pdev->dev, "Invalid stated unit detected\n");
431 rc = di_handle_invalid_state(imxdi, dsr);
432 break;
433 case DSR_SVF:
434 dev_warn(&imxdi->pdev->dev, "Failure stated unit detected\n");
435 rc = di_handle_failure_state(imxdi, dsr);
436 break;
437 case DSR_NVF | DSR_SVF:
438 dev_warn(&imxdi->pdev->dev,
439 "Failure+Invalid stated unit detected\n");
440 rc = di_handle_invalid_and_failure_state(imxdi, dsr);
441 break;
442 default:
443 dev_notice(&imxdi->pdev->dev, "Unlocked unit detected\n");
444 rc = di_handle_valid_state(imxdi, dsr);
445 }
446
447 return rc;
448}
449
450/*
451 * enable a dryice interrupt
452 */
453static void di_int_enable(struct imxdi_dev *imxdi, u32 intr)
454{
455 unsigned long flags;
456
457 spin_lock_irqsave(&imxdi->irq_lock, flags);
458 writel(readl(imxdi->ioaddr + DIER) | intr,
459 imxdi->ioaddr + DIER);
460 spin_unlock_irqrestore(&imxdi->irq_lock, flags);
461}
462
463/*
464 * disable a dryice interrupt
465 */
466static void di_int_disable(struct imxdi_dev *imxdi, u32 intr)
467{
468 unsigned long flags;
469
470 spin_lock_irqsave(&imxdi->irq_lock, flags);
471 writel(readl(imxdi->ioaddr + DIER) & ~intr,
472 imxdi->ioaddr + DIER);
473 spin_unlock_irqrestore(&imxdi->irq_lock, flags);
474}
475
476/*
477 * This function attempts to clear the dryice write-error flag.
478 *
479 * A dryice write error is similar to a bus fault and should not occur in
480 * normal operation. Clearing the flag requires another write, so the root
481 * cause of the problem may need to be fixed before the flag can be cleared.
482 */
483static void clear_write_error(struct imxdi_dev *imxdi)
484{
485 int cnt;
486
487 dev_warn(&imxdi->pdev->dev, "WARNING: Register write error!\n");
488
489 /* clear the write error flag */
490 writel(DSR_WEF, imxdi->ioaddr + DSR);
491
492 /* wait for it to take effect */
493 for (cnt = 0; cnt < 1000; cnt++) {
494 if ((readl(imxdi->ioaddr + DSR) & DSR_WEF) == 0)
495 return;
496 udelay(10);
497 }
498 dev_err(&imxdi->pdev->dev,
499 "ERROR: Cannot clear write-error flag!\n");
500}
501
502/*
503 * Write a dryice register and wait until it completes.
504 *
505 * This function uses interrupts to determine when the
506 * write has completed.
507 */
508static int di_write_wait(struct imxdi_dev *imxdi, u32 val, int reg)
509{
510 int ret;
511 int rc = 0;
512
513 /* serialize register writes */
514 mutex_lock(&imxdi->write_mutex);
515
516 /* enable the write-complete interrupt */
517 di_int_enable(imxdi, DIER_WCIE);
518
519 imxdi->dsr = 0;
520
521 /* do the register write */
522 writel(val, imxdi->ioaddr + reg);
523
524 /* wait for the write to finish */
525 ret = wait_event_interruptible_timeout(imxdi->write_wait,
526 imxdi->dsr & (DSR_WCF | DSR_WEF), msecs_to_jiffies(1));
527 if (ret < 0) {
528 rc = ret;
529 goto out;
530 } else if (ret == 0) {
531 dev_warn(&imxdi->pdev->dev,
532 "Write-wait timeout "
533 "val = 0x%08x reg = 0x%08x\n", val, reg);
534 }
535
536 /* check for write error */
537 if (imxdi->dsr & DSR_WEF) {
538 clear_write_error(imxdi);
539 rc = -EIO;
540 }
541
542out:
543 mutex_unlock(&imxdi->write_mutex);
544
545 return rc;
546}
547
548/*
549 * read the seconds portion of the current time from the dryice time counter
550 */
551static int dryice_rtc_read_time(struct device *dev, struct rtc_time *tm)
552{
553 struct imxdi_dev *imxdi = dev_get_drvdata(dev);
554 unsigned long now;
555
556 now = readl(imxdi->ioaddr + DTCMR);
557 rtc_time_to_tm(now, tm);
558
559 return 0;
560}
561
562/*
563 * set the seconds portion of dryice time counter and clear the
564 * fractional part.
565 */
566static int dryice_rtc_set_mmss(struct device *dev, unsigned long secs)
567{
568 struct imxdi_dev *imxdi = dev_get_drvdata(dev);
569 u32 dcr, dsr;
570 int rc;
571
572 dcr = readl(imxdi->ioaddr + DCR);
573 dsr = readl(imxdi->ioaddr + DSR);
574
575 if (!(dcr & DCR_TCE) || (dsr & DSR_SVF)) {
576 if (dcr & DCR_TCHL) {
577 /* we are even more out of luck */
578 di_what_is_to_be_done(imxdi, "battery");
579 return -EPERM;
580 }
581 if ((dcr & DCR_TCSL) || (dsr & DSR_SVF)) {
582 /* we are out of luck for now */
583 di_what_is_to_be_done(imxdi, "main");
584 return -EPERM;
585 }
586 }
587
588 /* zero the fractional part first */
589 rc = di_write_wait(imxdi, 0, DTCLR);
590 if (rc != 0)
591 return rc;
592
593 rc = di_write_wait(imxdi, secs, DTCMR);
594 if (rc != 0)
595 return rc;
596
597 return di_write_wait(imxdi, readl(imxdi->ioaddr + DCR) | DCR_TCE, DCR);
598}
599
600static int dryice_rtc_alarm_irq_enable(struct device *dev,
601 unsigned int enabled)
602{
603 struct imxdi_dev *imxdi = dev_get_drvdata(dev);
604
605 if (enabled)
606 di_int_enable(imxdi, DIER_CAIE);
607 else
608 di_int_disable(imxdi, DIER_CAIE);
609
610 return 0;
611}
612
613/*
614 * read the seconds portion of the alarm register.
615 * the fractional part of the alarm register is always zero.
616 */
617static int dryice_rtc_read_alarm(struct device *dev, struct rtc_wkalrm *alarm)
618{
619 struct imxdi_dev *imxdi = dev_get_drvdata(dev);
620 u32 dcamr;
621
622 dcamr = readl(imxdi->ioaddr + DCAMR);
623 rtc_time_to_tm(dcamr, &alarm->time);
624
625 /* alarm is enabled if the interrupt is enabled */
626 alarm->enabled = (readl(imxdi->ioaddr + DIER) & DIER_CAIE) != 0;
627
628 /* don't allow the DSR read to mess up DSR_WCF */
629 mutex_lock(&imxdi->write_mutex);
630
631 /* alarm is pending if the alarm flag is set */
632 alarm->pending = (readl(imxdi->ioaddr + DSR) & DSR_CAF) != 0;
633
634 mutex_unlock(&imxdi->write_mutex);
635
636 return 0;
637}
638
639/*
640 * set the seconds portion of dryice alarm register
641 */
642static int dryice_rtc_set_alarm(struct device *dev, struct rtc_wkalrm *alarm)
643{
644 struct imxdi_dev *imxdi = dev_get_drvdata(dev);
645 unsigned long now;
646 unsigned long alarm_time;
647 int rc;
648
649 rc = rtc_tm_to_time(&alarm->time, &alarm_time);
650 if (rc)
651 return rc;
652
653 /* don't allow setting alarm in the past */
654 now = readl(imxdi->ioaddr + DTCMR);
655 if (alarm_time < now)
656 return -EINVAL;
657
658 /* write the new alarm time */
659 rc = di_write_wait(imxdi, (u32)alarm_time, DCAMR);
660 if (rc)
661 return rc;
662
663 if (alarm->enabled)
664 di_int_enable(imxdi, DIER_CAIE); /* enable alarm intr */
665 else
666 di_int_disable(imxdi, DIER_CAIE); /* disable alarm intr */
667
668 return 0;
669}
670
671static struct rtc_class_ops dryice_rtc_ops = {
672 .read_time = dryice_rtc_read_time,
673 .set_mmss = dryice_rtc_set_mmss,
674 .alarm_irq_enable = dryice_rtc_alarm_irq_enable,
675 .read_alarm = dryice_rtc_read_alarm,
676 .set_alarm = dryice_rtc_set_alarm,
677};
678
679/*
680 * dryice "normal" interrupt handler
681 */
682static irqreturn_t dryice_norm_irq(int irq, void *dev_id)
683{
684 struct imxdi_dev *imxdi = dev_id;
685 u32 dsr, dier;
686 irqreturn_t rc = IRQ_NONE;
687
688 dier = readl(imxdi->ioaddr + DIER);
689 dsr = readl(imxdi->ioaddr + DSR);
690
691 /* handle the security violation event */
692 if (dier & DIER_SVIE) {
693 if (dsr & DSR_SVF) {
694 /*
695 * Disable the interrupt when this kind of event has
696 * happened.
697 * There cannot be more than one event of this type,
698 * because it needs a complex state change
699 * including a main power cycle to get again out of
700 * this state.
701 */
702 di_int_disable(imxdi, DIER_SVIE);
703 /* report the violation */
704 di_report_tamper_info(imxdi, dsr);
705 rc = IRQ_HANDLED;
706 }
707 }
708
709 /* handle write complete and write error cases */
710 if (dier & DIER_WCIE) {
711 /*If the write wait queue is empty then there is no pending
712 operations. It means the interrupt is for DryIce -Security.
713 IRQ must be returned as none.*/
714 if (list_empty_careful(&imxdi->write_wait.task_list))
715 return rc;
716
717 /* DSR_WCF clears itself on DSR read */
718 if (dsr & (DSR_WCF | DSR_WEF)) {
719 /* mask the interrupt */
720 di_int_disable(imxdi, DIER_WCIE);
721
722 /* save the dsr value for the wait queue */
723 imxdi->dsr |= dsr;
724
725 wake_up_interruptible(&imxdi->write_wait);
726 rc = IRQ_HANDLED;
727 }
728 }
729
730 /* handle the alarm case */
731 if (dier & DIER_CAIE) {
732 /* DSR_WCF clears itself on DSR read */
733 if (dsr & DSR_CAF) {
734 /* mask the interrupt */
735 di_int_disable(imxdi, DIER_CAIE);
736
737 /* finish alarm in user context */
738 schedule_work(&imxdi->work);
739 rc = IRQ_HANDLED;
740 }
741 }
742 return rc;
743}
744
745/*
746 * post the alarm event from user context so it can sleep
747 * on the write completion.
748 */
749static void dryice_work(struct work_struct *work)
750{
751 struct imxdi_dev *imxdi = container_of(work,
752 struct imxdi_dev, work);
753
754 /* dismiss the interrupt (ignore error) */
755 di_write_wait(imxdi, DSR_CAF, DSR);
756
757 /* pass the alarm event to the rtc framework. */
758 rtc_update_irq(imxdi->rtc, 1, RTC_AF | RTC_IRQF);
759}
760
761/*
762 * probe for dryice rtc device
763 */
764static int __init dryice_rtc_probe(struct platform_device *pdev)
765{
766 struct resource *res;
767 struct imxdi_dev *imxdi;
768 int rc;
769
770 imxdi = devm_kzalloc(&pdev->dev, sizeof(*imxdi), GFP_KERNEL);
771 if (!imxdi)
772 return -ENOMEM;
773
774 imxdi->pdev = pdev;
775
776 res = platform_get_resource(pdev, IORESOURCE_MEM, 0);
777 imxdi->ioaddr = devm_ioremap_resource(&pdev->dev, res);
778 if (IS_ERR(imxdi->ioaddr))
779 return PTR_ERR(imxdi->ioaddr);
780
781 spin_lock_init(&imxdi->irq_lock);
782
783 imxdi->irq = platform_get_irq(pdev, 0);
784 if (imxdi->irq < 0)
785 return imxdi->irq;
786
787 init_waitqueue_head(&imxdi->write_wait);
788
789 INIT_WORK(&imxdi->work, dryice_work);
790
791 mutex_init(&imxdi->write_mutex);
792
793 imxdi->clk = devm_clk_get(&pdev->dev, NULL);
794 if (IS_ERR(imxdi->clk))
795 return PTR_ERR(imxdi->clk);
796 rc = clk_prepare_enable(imxdi->clk);
797 if (rc)
798 return rc;
799
800 /*
801 * Initialize dryice hardware
802 */
803
804 /* mask all interrupts */
805 writel(0, imxdi->ioaddr + DIER);
806
807 rc = di_handle_state(imxdi);
808 if (rc != 0)
809 goto err;
810
811 rc = devm_request_irq(&pdev->dev, imxdi->irq, dryice_norm_irq,
812 IRQF_SHARED, pdev->name, imxdi);
813 if (rc) {
814 dev_warn(&pdev->dev, "interrupt not available.\n");
815 goto err;
816 }
817
818 platform_set_drvdata(pdev, imxdi);
819 imxdi->rtc = devm_rtc_device_register(&pdev->dev, pdev->name,
820 &dryice_rtc_ops, THIS_MODULE);
821 if (IS_ERR(imxdi->rtc)) {
822 rc = PTR_ERR(imxdi->rtc);
823 goto err;
824 }
825
826 return 0;
827
828err:
829 clk_disable_unprepare(imxdi->clk);
830
831 return rc;
832}
833
834static int __exit dryice_rtc_remove(struct platform_device *pdev)
835{
836 struct imxdi_dev *imxdi = platform_get_drvdata(pdev);
837
838 flush_work(&imxdi->work);
839
840 /* mask all interrupts */
841 writel(0, imxdi->ioaddr + DIER);
842
843 clk_disable_unprepare(imxdi->clk);
844
845 return 0;
846}
847
848#ifdef CONFIG_OF
849static const struct of_device_id dryice_dt_ids[] = {
850 { .compatible = "fsl,imx25-rtc" },
851 { /* sentinel */ }
852};
853
854MODULE_DEVICE_TABLE(of, dryice_dt_ids);
855#endif
856
857static struct platform_driver dryice_rtc_driver = {
858 .driver = {
859 .name = "imxdi_rtc",
860 .of_match_table = of_match_ptr(dryice_dt_ids),
861 },
862 .remove = __exit_p(dryice_rtc_remove),
863};
864
865module_platform_driver_probe(dryice_rtc_driver, dryice_rtc_probe);
866
867MODULE_AUTHOR("Freescale Semiconductor, Inc.");
868MODULE_AUTHOR("Baruch Siach <baruch@tkos.co.il>");
869MODULE_DESCRIPTION("IMX DryIce Realtime Clock Driver (RTC)");
870MODULE_LICENSE("GPL");