Loading...
1// SPDX-License-Identifier: GPL-2.0 OR BSD-3-Clause
2/*
3 * Copyright (C) 2012-2014, 2018-2019, 2021-2024 Intel Corporation
4 * Copyright (C) 2013-2015 Intel Mobile Communications GmbH
5 * Copyright (C) 2016-2017 Intel Deutschland GmbH
6 */
7#include <linux/firmware.h>
8#include <linux/rtnetlink.h>
9#include "iwl-trans.h"
10#include "iwl-csr.h"
11#include "mvm.h"
12#include "iwl-nvm-utils.h"
13#include "iwl-nvm-parse.h"
14#include "iwl-prph.h"
15#include "fw/acpi.h"
16
17/* Default NVM size to read */
18#define IWL_NVM_DEFAULT_CHUNK_SIZE (2 * 1024)
19
20#define NVM_WRITE_OPCODE 1
21#define NVM_READ_OPCODE 0
22
23/* load nvm chunk response */
24enum {
25 READ_NVM_CHUNK_SUCCEED = 0,
26 READ_NVM_CHUNK_NOT_VALID_ADDRESS = 1
27};
28
29/*
30 * prepare the NVM host command w/ the pointers to the nvm buffer
31 * and send it to fw
32 */
33static int iwl_nvm_write_chunk(struct iwl_mvm *mvm, u16 section,
34 u16 offset, u16 length, const u8 *data)
35{
36 struct iwl_nvm_access_cmd nvm_access_cmd = {
37 .offset = cpu_to_le16(offset),
38 .length = cpu_to_le16(length),
39 .type = cpu_to_le16(section),
40 .op_code = NVM_WRITE_OPCODE,
41 };
42 struct iwl_host_cmd cmd = {
43 .id = NVM_ACCESS_CMD,
44 .len = { sizeof(struct iwl_nvm_access_cmd), length },
45 .flags = CMD_WANT_SKB | CMD_SEND_IN_RFKILL,
46 .data = { &nvm_access_cmd, data },
47 /* data may come from vmalloc, so use _DUP */
48 .dataflags = { 0, IWL_HCMD_DFL_DUP },
49 };
50 struct iwl_rx_packet *pkt;
51 struct iwl_nvm_access_resp *nvm_resp;
52 int ret;
53
54 ret = iwl_mvm_send_cmd(mvm, &cmd);
55 if (ret)
56 return ret;
57
58 pkt = cmd.resp_pkt;
59 /* Extract & check NVM write response */
60 nvm_resp = (void *)pkt->data;
61 if (le16_to_cpu(nvm_resp->status) != READ_NVM_CHUNK_SUCCEED) {
62 IWL_ERR(mvm,
63 "NVM access write command failed for section %u (status = 0x%x)\n",
64 section, le16_to_cpu(nvm_resp->status));
65 ret = -EIO;
66 }
67
68 iwl_free_resp(&cmd);
69 return ret;
70}
71
72static int iwl_nvm_read_chunk(struct iwl_mvm *mvm, u16 section,
73 u16 offset, u16 length, u8 *data)
74{
75 struct iwl_nvm_access_cmd nvm_access_cmd = {
76 .offset = cpu_to_le16(offset),
77 .length = cpu_to_le16(length),
78 .type = cpu_to_le16(section),
79 .op_code = NVM_READ_OPCODE,
80 };
81 struct iwl_nvm_access_resp *nvm_resp;
82 struct iwl_rx_packet *pkt;
83 struct iwl_host_cmd cmd = {
84 .id = NVM_ACCESS_CMD,
85 .flags = CMD_WANT_SKB | CMD_SEND_IN_RFKILL,
86 .data = { &nvm_access_cmd, },
87 };
88 int ret, bytes_read, offset_read;
89 u8 *resp_data;
90
91 cmd.len[0] = sizeof(struct iwl_nvm_access_cmd);
92
93 ret = iwl_mvm_send_cmd(mvm, &cmd);
94 if (ret)
95 return ret;
96
97 pkt = cmd.resp_pkt;
98
99 /* Extract NVM response */
100 nvm_resp = (void *)pkt->data;
101 ret = le16_to_cpu(nvm_resp->status);
102 bytes_read = le16_to_cpu(nvm_resp->length);
103 offset_read = le16_to_cpu(nvm_resp->offset);
104 resp_data = nvm_resp->data;
105 if (ret) {
106 if ((offset != 0) &&
107 (ret == READ_NVM_CHUNK_NOT_VALID_ADDRESS)) {
108 /*
109 * meaning of NOT_VALID_ADDRESS:
110 * driver try to read chunk from address that is
111 * multiple of 2K and got an error since addr is empty.
112 * meaning of (offset != 0): driver already
113 * read valid data from another chunk so this case
114 * is not an error.
115 */
116 IWL_DEBUG_EEPROM(mvm->trans->dev,
117 "NVM access command failed on offset 0x%x since that section size is multiple 2K\n",
118 offset);
119 ret = 0;
120 } else {
121 IWL_DEBUG_EEPROM(mvm->trans->dev,
122 "NVM access command failed with status %d (device: %s)\n",
123 ret, mvm->trans->name);
124 ret = -ENODATA;
125 }
126 goto exit;
127 }
128
129 if (offset_read != offset) {
130 IWL_ERR(mvm, "NVM ACCESS response with invalid offset %d\n",
131 offset_read);
132 ret = -EINVAL;
133 goto exit;
134 }
135
136 /* Write data to NVM */
137 memcpy(data + offset, resp_data, bytes_read);
138 ret = bytes_read;
139
140exit:
141 iwl_free_resp(&cmd);
142 return ret;
143}
144
145static int iwl_nvm_write_section(struct iwl_mvm *mvm, u16 section,
146 const u8 *data, u16 length)
147{
148 int offset = 0;
149
150 /* copy data in chunks of 2k (and remainder if any) */
151
152 while (offset < length) {
153 int chunk_size, ret;
154
155 chunk_size = min(IWL_NVM_DEFAULT_CHUNK_SIZE,
156 length - offset);
157
158 ret = iwl_nvm_write_chunk(mvm, section, offset,
159 chunk_size, data + offset);
160 if (ret < 0)
161 return ret;
162
163 offset += chunk_size;
164 }
165
166 return 0;
167}
168
169/*
170 * Reads an NVM section completely.
171 * NICs prior to 7000 family doesn't have a real NVM, but just read
172 * section 0 which is the EEPROM. Because the EEPROM reading is unlimited
173 * by uCode, we need to manually check in this case that we don't
174 * overflow and try to read more than the EEPROM size.
175 * For 7000 family NICs, we supply the maximal size we can read, and
176 * the uCode fills the response with as much data as we can,
177 * without overflowing, so no check is needed.
178 */
179static int iwl_nvm_read_section(struct iwl_mvm *mvm, u16 section,
180 u8 *data, u32 size_read)
181{
182 u16 length, offset = 0;
183 int ret;
184
185 /* Set nvm section read length */
186 length = IWL_NVM_DEFAULT_CHUNK_SIZE;
187
188 ret = length;
189
190 /* Read the NVM until exhausted (reading less than requested) */
191 while (ret == length) {
192 /* Check no memory assumptions fail and cause an overflow */
193 if ((size_read + offset + length) >
194 mvm->trans->trans_cfg->base_params->eeprom_size) {
195 IWL_ERR(mvm, "EEPROM size is too small for NVM\n");
196 return -ENOBUFS;
197 }
198
199 ret = iwl_nvm_read_chunk(mvm, section, offset, length, data);
200 if (ret < 0) {
201 IWL_DEBUG_EEPROM(mvm->trans->dev,
202 "Cannot read NVM from section %d offset %d, length %d\n",
203 section, offset, length);
204 return ret;
205 }
206 offset += ret;
207 }
208
209 iwl_nvm_fixups(mvm->trans->hw_id, section, data, offset);
210
211 IWL_DEBUG_EEPROM(mvm->trans->dev,
212 "NVM section %d read completed\n", section);
213 return offset;
214}
215
216static struct iwl_nvm_data *
217iwl_parse_nvm_sections(struct iwl_mvm *mvm)
218{
219 struct iwl_nvm_section *sections = mvm->nvm_sections;
220 const __be16 *hw;
221 const __le16 *sw, *calib, *regulatory, *mac_override, *phy_sku;
222 u8 tx_ant = mvm->fw->valid_tx_ant;
223 u8 rx_ant = mvm->fw->valid_rx_ant;
224 int regulatory_type;
225
226 /* Checking for required sections */
227 if (mvm->trans->cfg->nvm_type == IWL_NVM) {
228 if (!mvm->nvm_sections[NVM_SECTION_TYPE_SW].data ||
229 !mvm->nvm_sections[mvm->cfg->nvm_hw_section_num].data) {
230 IWL_ERR(mvm, "Can't parse empty OTP/NVM sections\n");
231 return NULL;
232 }
233 } else {
234 if (mvm->trans->cfg->nvm_type == IWL_NVM_SDP)
235 regulatory_type = NVM_SECTION_TYPE_REGULATORY_SDP;
236 else
237 regulatory_type = NVM_SECTION_TYPE_REGULATORY;
238
239 /* SW and REGULATORY sections are mandatory */
240 if (!mvm->nvm_sections[NVM_SECTION_TYPE_SW].data ||
241 !mvm->nvm_sections[regulatory_type].data) {
242 IWL_ERR(mvm,
243 "Can't parse empty family 8000 OTP/NVM sections\n");
244 return NULL;
245 }
246 /* MAC_OVERRIDE or at least HW section must exist */
247 if (!mvm->nvm_sections[mvm->cfg->nvm_hw_section_num].data &&
248 !mvm->nvm_sections[NVM_SECTION_TYPE_MAC_OVERRIDE].data) {
249 IWL_ERR(mvm,
250 "Can't parse mac_address, empty sections\n");
251 return NULL;
252 }
253
254 /* PHY_SKU section is mandatory in B0 */
255 if (mvm->trans->cfg->nvm_type == IWL_NVM_EXT &&
256 !mvm->nvm_sections[NVM_SECTION_TYPE_PHY_SKU].data) {
257 IWL_ERR(mvm,
258 "Can't parse phy_sku in B0, empty sections\n");
259 return NULL;
260 }
261 }
262
263 hw = (const __be16 *)sections[mvm->cfg->nvm_hw_section_num].data;
264 sw = (const __le16 *)sections[NVM_SECTION_TYPE_SW].data;
265 calib = (const __le16 *)sections[NVM_SECTION_TYPE_CALIBRATION].data;
266 mac_override =
267 (const __le16 *)sections[NVM_SECTION_TYPE_MAC_OVERRIDE].data;
268 phy_sku = (const __le16 *)sections[NVM_SECTION_TYPE_PHY_SKU].data;
269
270 regulatory = mvm->trans->cfg->nvm_type == IWL_NVM_SDP ?
271 (const __le16 *)sections[NVM_SECTION_TYPE_REGULATORY_SDP].data :
272 (const __le16 *)sections[NVM_SECTION_TYPE_REGULATORY].data;
273
274 if (mvm->set_tx_ant)
275 tx_ant &= mvm->set_tx_ant;
276
277 if (mvm->set_rx_ant)
278 rx_ant &= mvm->set_rx_ant;
279
280 return iwl_parse_nvm_data(mvm->trans, mvm->cfg, mvm->fw, hw, sw, calib,
281 regulatory, mac_override, phy_sku,
282 tx_ant, rx_ant);
283}
284
285/* Loads the NVM data stored in mvm->nvm_sections into the NIC */
286int iwl_mvm_load_nvm_to_nic(struct iwl_mvm *mvm)
287{
288 int i, ret = 0;
289 struct iwl_nvm_section *sections = mvm->nvm_sections;
290
291 IWL_DEBUG_EEPROM(mvm->trans->dev, "'Write to NVM\n");
292
293 for (i = 0; i < ARRAY_SIZE(mvm->nvm_sections); i++) {
294 if (!mvm->nvm_sections[i].data || !mvm->nvm_sections[i].length)
295 continue;
296 ret = iwl_nvm_write_section(mvm, i, sections[i].data,
297 sections[i].length);
298 if (ret < 0) {
299 IWL_ERR(mvm, "iwl_mvm_send_cmd failed: %d\n", ret);
300 break;
301 }
302 }
303 return ret;
304}
305
306int iwl_nvm_init(struct iwl_mvm *mvm)
307{
308 int ret, section;
309 u32 size_read = 0;
310 u8 *nvm_buffer, *temp;
311 const char *nvm_file_C = mvm->cfg->default_nvm_file_C_step;
312
313 if (WARN_ON_ONCE(mvm->cfg->nvm_hw_section_num >= NVM_MAX_NUM_SECTIONS))
314 return -EINVAL;
315
316 /* load NVM values from nic */
317 /* Read From FW NVM */
318 IWL_DEBUG_EEPROM(mvm->trans->dev, "Read from NVM\n");
319
320 nvm_buffer = kmalloc(mvm->trans->trans_cfg->base_params->eeprom_size,
321 GFP_KERNEL);
322 if (!nvm_buffer)
323 return -ENOMEM;
324 for (section = 0; section < NVM_MAX_NUM_SECTIONS; section++) {
325 /* we override the constness for initial read */
326 ret = iwl_nvm_read_section(mvm, section, nvm_buffer,
327 size_read);
328 if (ret == -ENODATA) {
329 ret = 0;
330 continue;
331 }
332 if (ret < 0)
333 break;
334 size_read += ret;
335 temp = kmemdup(nvm_buffer, ret, GFP_KERNEL);
336 if (!temp) {
337 ret = -ENOMEM;
338 break;
339 }
340
341 iwl_nvm_fixups(mvm->trans->hw_id, section, temp, ret);
342
343 mvm->nvm_sections[section].data = temp;
344 mvm->nvm_sections[section].length = ret;
345
346#ifdef CONFIG_IWLWIFI_DEBUGFS
347 switch (section) {
348 case NVM_SECTION_TYPE_SW:
349 mvm->nvm_sw_blob.data = temp;
350 mvm->nvm_sw_blob.size = ret;
351 break;
352 case NVM_SECTION_TYPE_CALIBRATION:
353 mvm->nvm_calib_blob.data = temp;
354 mvm->nvm_calib_blob.size = ret;
355 break;
356 case NVM_SECTION_TYPE_PRODUCTION:
357 mvm->nvm_prod_blob.data = temp;
358 mvm->nvm_prod_blob.size = ret;
359 break;
360 case NVM_SECTION_TYPE_PHY_SKU:
361 mvm->nvm_phy_sku_blob.data = temp;
362 mvm->nvm_phy_sku_blob.size = ret;
363 break;
364 case NVM_SECTION_TYPE_REGULATORY_SDP:
365 case NVM_SECTION_TYPE_REGULATORY:
366 mvm->nvm_reg_blob.data = temp;
367 mvm->nvm_reg_blob.size = ret;
368 break;
369 default:
370 if (section == mvm->cfg->nvm_hw_section_num) {
371 mvm->nvm_hw_blob.data = temp;
372 mvm->nvm_hw_blob.size = ret;
373 break;
374 }
375 }
376#endif
377 }
378 if (!size_read)
379 IWL_ERR(mvm, "OTP is blank\n");
380 kfree(nvm_buffer);
381
382 /* Only if PNVM selected in the mod param - load external NVM */
383 if (mvm->nvm_file_name) {
384 /* read External NVM file from the mod param */
385 ret = iwl_read_external_nvm(mvm->trans, mvm->nvm_file_name,
386 mvm->nvm_sections);
387 if (ret) {
388 mvm->nvm_file_name = nvm_file_C;
389
390 if ((ret == -EFAULT || ret == -ENOENT) &&
391 mvm->nvm_file_name) {
392 /* in case nvm file was failed try again */
393 ret = iwl_read_external_nvm(mvm->trans,
394 mvm->nvm_file_name,
395 mvm->nvm_sections);
396 if (ret)
397 return ret;
398 } else {
399 return ret;
400 }
401 }
402 }
403
404 /* parse the relevant nvm sections */
405 mvm->nvm_data = iwl_parse_nvm_sections(mvm);
406 if (!mvm->nvm_data)
407 return -ENODATA;
408 IWL_DEBUG_EEPROM(mvm->trans->dev, "nvm version = %x\n",
409 mvm->nvm_data->nvm_version);
410
411 return ret < 0 ? ret : 0;
412}
413
414struct iwl_mcc_update_resp_v8 *
415iwl_mvm_update_mcc(struct iwl_mvm *mvm, const char *alpha2,
416 enum iwl_mcc_source src_id)
417{
418 struct iwl_mcc_update_cmd mcc_update_cmd = {
419 .mcc = cpu_to_le16(alpha2[0] << 8 | alpha2[1]),
420 .source_id = (u8)src_id,
421 };
422 struct iwl_mcc_update_resp_v8 *resp_cp;
423 struct iwl_rx_packet *pkt;
424 struct iwl_host_cmd cmd = {
425 .id = MCC_UPDATE_CMD,
426 .flags = CMD_WANT_SKB | CMD_SEND_IN_RFKILL,
427 .data = { &mcc_update_cmd },
428 };
429
430 int ret, resp_ver;
431 u32 status;
432 int resp_len, n_channels;
433 u16 mcc;
434
435 if (WARN_ON_ONCE(!iwl_mvm_is_lar_supported(mvm)))
436 return ERR_PTR(-EOPNOTSUPP);
437
438 cmd.len[0] = sizeof(struct iwl_mcc_update_cmd);
439
440 IWL_DEBUG_LAR(mvm, "send MCC update to FW with '%c%c' src = %d\n",
441 alpha2[0], alpha2[1], src_id);
442
443 ret = iwl_mvm_send_cmd(mvm, &cmd);
444 if (ret)
445 return ERR_PTR(ret);
446
447 pkt = cmd.resp_pkt;
448
449 resp_ver = iwl_fw_lookup_notif_ver(mvm->fw, IWL_ALWAYS_LONG_GROUP,
450 MCC_UPDATE_CMD, 0);
451
452 /* Extract MCC response */
453 if (resp_ver >= 8) {
454 struct iwl_mcc_update_resp_v8 *mcc_resp_v8 = (void *)pkt->data;
455
456 n_channels = __le32_to_cpu(mcc_resp_v8->n_channels);
457 if (iwl_rx_packet_payload_len(pkt) !=
458 struct_size(mcc_resp_v8, channels, n_channels)) {
459 resp_cp = ERR_PTR(-EINVAL);
460 goto exit;
461 }
462 resp_len = struct_size(resp_cp, channels, n_channels);
463 resp_cp = kzalloc(resp_len, GFP_KERNEL);
464 if (!resp_cp) {
465 resp_cp = ERR_PTR(-ENOMEM);
466 goto exit;
467 }
468 resp_cp->status = mcc_resp_v8->status;
469 resp_cp->mcc = mcc_resp_v8->mcc;
470 resp_cp->cap = mcc_resp_v8->cap;
471 resp_cp->source_id = mcc_resp_v8->source_id;
472 resp_cp->time = mcc_resp_v8->time;
473 resp_cp->geo_info = mcc_resp_v8->geo_info;
474 resp_cp->n_channels = mcc_resp_v8->n_channels;
475 memcpy(resp_cp->channels, mcc_resp_v8->channels,
476 n_channels * sizeof(__le32));
477 } else if (fw_has_capa(&mvm->fw->ucode_capa,
478 IWL_UCODE_TLV_CAPA_MCC_UPDATE_11AX_SUPPORT)) {
479 struct iwl_mcc_update_resp_v4 *mcc_resp_v4 = (void *)pkt->data;
480
481 n_channels = __le32_to_cpu(mcc_resp_v4->n_channels);
482 if (iwl_rx_packet_payload_len(pkt) !=
483 struct_size(mcc_resp_v4, channels, n_channels)) {
484 resp_cp = ERR_PTR(-EINVAL);
485 goto exit;
486 }
487 resp_len = struct_size(resp_cp, channels, n_channels);
488 resp_cp = kzalloc(resp_len, GFP_KERNEL);
489 if (!resp_cp) {
490 resp_cp = ERR_PTR(-ENOMEM);
491 goto exit;
492 }
493
494 resp_cp->status = mcc_resp_v4->status;
495 resp_cp->mcc = mcc_resp_v4->mcc;
496 resp_cp->cap = cpu_to_le32(le16_to_cpu(mcc_resp_v4->cap));
497 resp_cp->source_id = mcc_resp_v4->source_id;
498 resp_cp->time = mcc_resp_v4->time;
499 resp_cp->geo_info = mcc_resp_v4->geo_info;
500 resp_cp->n_channels = mcc_resp_v4->n_channels;
501 memcpy(resp_cp->channels, mcc_resp_v4->channels,
502 n_channels * sizeof(__le32));
503 } else {
504 struct iwl_mcc_update_resp_v3 *mcc_resp_v3 = (void *)pkt->data;
505
506 n_channels = __le32_to_cpu(mcc_resp_v3->n_channels);
507 if (iwl_rx_packet_payload_len(pkt) !=
508 struct_size(mcc_resp_v3, channels, n_channels)) {
509 resp_cp = ERR_PTR(-EINVAL);
510 goto exit;
511 }
512 resp_len = struct_size(resp_cp, channels, n_channels);
513 resp_cp = kzalloc(resp_len, GFP_KERNEL);
514 if (!resp_cp) {
515 resp_cp = ERR_PTR(-ENOMEM);
516 goto exit;
517 }
518
519 resp_cp->status = mcc_resp_v3->status;
520 resp_cp->mcc = mcc_resp_v3->mcc;
521 resp_cp->cap = cpu_to_le32(mcc_resp_v3->cap);
522 resp_cp->source_id = mcc_resp_v3->source_id;
523 resp_cp->time = mcc_resp_v3->time;
524 resp_cp->geo_info = mcc_resp_v3->geo_info;
525 resp_cp->n_channels = mcc_resp_v3->n_channels;
526 memcpy(resp_cp->channels, mcc_resp_v3->channels,
527 n_channels * sizeof(__le32));
528 }
529
530 status = le32_to_cpu(resp_cp->status);
531
532 mcc = le16_to_cpu(resp_cp->mcc);
533
534 /* W/A for a FW/NVM issue - returns 0x00 for the world domain */
535 if (mcc == 0) {
536 mcc = 0x3030; /* "00" - world */
537 resp_cp->mcc = cpu_to_le16(mcc);
538 }
539
540 IWL_DEBUG_LAR(mvm,
541 "MCC response status: 0x%x. new MCC: 0x%x ('%c%c') n_chans: %d\n",
542 status, mcc, mcc >> 8, mcc & 0xff, n_channels);
543
544exit:
545 iwl_free_resp(&cmd);
546 return resp_cp;
547}
548
549int iwl_mvm_init_mcc(struct iwl_mvm *mvm)
550{
551 bool tlv_lar;
552 bool nvm_lar;
553 int retval;
554 struct ieee80211_regdomain *regd;
555 char mcc[3];
556
557 if (mvm->cfg->nvm_type == IWL_NVM_EXT) {
558 tlv_lar = fw_has_capa(&mvm->fw->ucode_capa,
559 IWL_UCODE_TLV_CAPA_LAR_SUPPORT);
560 nvm_lar = mvm->nvm_data->lar_enabled;
561 if (tlv_lar != nvm_lar)
562 IWL_INFO(mvm,
563 "Conflict between TLV & NVM regarding enabling LAR (TLV = %s NVM =%s)\n",
564 tlv_lar ? "enabled" : "disabled",
565 nvm_lar ? "enabled" : "disabled");
566 }
567
568 if (!iwl_mvm_is_lar_supported(mvm))
569 return 0;
570
571 /*
572 * try to replay the last set MCC to FW. If it doesn't exist,
573 * queue an update to cfg80211 to retrieve the default alpha2 from FW.
574 */
575 retval = iwl_mvm_init_fw_regd(mvm, true);
576 if (retval != -ENOENT)
577 return retval;
578
579 /*
580 * Driver regulatory hint for initial update, this also informs the
581 * firmware we support wifi location updates.
582 * Disallow scans that might crash the FW while the LAR regdomain
583 * is not set.
584 */
585 mvm->lar_regdom_set = false;
586
587 regd = iwl_mvm_get_current_regdomain(mvm, NULL);
588 if (IS_ERR_OR_NULL(regd))
589 return -EIO;
590
591 if (iwl_mvm_is_wifi_mcc_supported(mvm) &&
592 !iwl_bios_get_mcc(&mvm->fwrt, mcc)) {
593 kfree(regd);
594 regd = iwl_mvm_get_regdomain(mvm->hw->wiphy, mcc,
595 MCC_SOURCE_BIOS, NULL);
596 if (IS_ERR_OR_NULL(regd))
597 return -EIO;
598 }
599
600 retval = regulatory_set_wiphy_regd_sync(mvm->hw->wiphy, regd);
601 kfree(regd);
602 return retval;
603}
604
605void iwl_mvm_rx_chub_update_mcc(struct iwl_mvm *mvm,
606 struct iwl_rx_cmd_buffer *rxb)
607{
608 struct iwl_rx_packet *pkt = rxb_addr(rxb);
609 struct iwl_mcc_chub_notif *notif = (void *)pkt->data;
610 enum iwl_mcc_source src;
611 char mcc[3];
612 struct ieee80211_regdomain *regd;
613 int wgds_tbl_idx;
614 bool changed = false;
615
616 lockdep_assert_held(&mvm->mutex);
617
618 if (iwl_mvm_is_vif_assoc(mvm) && notif->source_id == MCC_SOURCE_WIFI) {
619 IWL_DEBUG_LAR(mvm, "Ignore mcc update while associated\n");
620 return;
621 }
622
623 if (WARN_ON_ONCE(!iwl_mvm_is_lar_supported(mvm)))
624 return;
625
626 mcc[0] = le16_to_cpu(notif->mcc) >> 8;
627 mcc[1] = le16_to_cpu(notif->mcc) & 0xff;
628 mcc[2] = '\0';
629 src = notif->source_id;
630
631 IWL_DEBUG_LAR(mvm,
632 "RX: received chub update mcc cmd (mcc '%s' src %d)\n",
633 mcc, src);
634 regd = iwl_mvm_get_regdomain(mvm->hw->wiphy, mcc, src, &changed);
635 if (IS_ERR_OR_NULL(regd))
636 return;
637
638 if (!changed) {
639 IWL_DEBUG_LAR(mvm, "RX: No change in the regulatory data\n");
640 goto out;
641 }
642
643 wgds_tbl_idx = iwl_mvm_get_sar_geo_profile(mvm);
644 if (wgds_tbl_idx < 1)
645 IWL_DEBUG_INFO(mvm,
646 "SAR WGDS is disabled or error received (%d)\n",
647 wgds_tbl_idx);
648 else
649 IWL_DEBUG_INFO(mvm, "SAR WGDS: geo profile %d is configured\n",
650 wgds_tbl_idx);
651
652 regulatory_set_wiphy_regd(mvm->hw->wiphy, regd);
653
654out:
655 kfree(regd);
656}
1/******************************************************************************
2 *
3 * This file is provided under a dual BSD/GPLv2 license. When using or
4 * redistributing this file, you may do so under either license.
5 *
6 * GPL LICENSE SUMMARY
7 *
8 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
9 * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH
10 * Copyright(c) 2016 - 2017 Intel Deutschland GmbH
11 *
12 * This program is free software; you can redistribute it and/or modify
13 * it under the terms of version 2 of the GNU General Public License as
14 * published by the Free Software Foundation.
15 *
16 * This program is distributed in the hope that it will be useful, but
17 * WITHOUT ANY WARRANTY; without even the implied warranty of
18 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
19 * General Public License for more details.
20 *
21 * You should have received a copy of the GNU General Public License
22 * along with this program; if not, write to the Free Software
23 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110,
24 * USA
25 *
26 * The full GNU General Public License is included in this distribution
27 * in the file called COPYING.
28 *
29 * Contact Information:
30 * Intel Linux Wireless <linuxwifi@intel.com>
31 * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
32 *
33 * BSD LICENSE
34 *
35 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
36 * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH
37 * Copyright(c) 2016 - 2017 Intel Deutschland GmbH
38 * All rights reserved.
39 *
40 * Redistribution and use in source and binary forms, with or without
41 * modification, are permitted provided that the following conditions
42 * are met:
43 *
44 * * Redistributions of source code must retain the above copyright
45 * notice, this list of conditions and the following disclaimer.
46 * * Redistributions in binary form must reproduce the above copyright
47 * notice, this list of conditions and the following disclaimer in
48 * the documentation and/or other materials provided with the
49 * distribution.
50 * * Neither the name Intel Corporation nor the names of its
51 * contributors may be used to endorse or promote products derived
52 * from this software without specific prior written permission.
53 *
54 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
55 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
56 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
57 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
58 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
59 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
60 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
61 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
62 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
63 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
64 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
65 *
66 *****************************************************************************/
67#include <linux/firmware.h>
68#include <linux/rtnetlink.h>
69#include "iwl-trans.h"
70#include "iwl-csr.h"
71#include "mvm.h"
72#include "iwl-eeprom-parse.h"
73#include "iwl-eeprom-read.h"
74#include "iwl-nvm-parse.h"
75#include "iwl-prph.h"
76#include "fw/acpi.h"
77
78/* Default NVM size to read */
79#define IWL_NVM_DEFAULT_CHUNK_SIZE (2*1024)
80#define IWL_MAX_NVM_SECTION_SIZE 0x1b58
81#define IWL_MAX_EXT_NVM_SECTION_SIZE 0x1ffc
82
83#define NVM_WRITE_OPCODE 1
84#define NVM_READ_OPCODE 0
85
86/* load nvm chunk response */
87enum {
88 READ_NVM_CHUNK_SUCCEED = 0,
89 READ_NVM_CHUNK_NOT_VALID_ADDRESS = 1
90};
91
92/*
93 * prepare the NVM host command w/ the pointers to the nvm buffer
94 * and send it to fw
95 */
96static int iwl_nvm_write_chunk(struct iwl_mvm *mvm, u16 section,
97 u16 offset, u16 length, const u8 *data)
98{
99 struct iwl_nvm_access_cmd nvm_access_cmd = {
100 .offset = cpu_to_le16(offset),
101 .length = cpu_to_le16(length),
102 .type = cpu_to_le16(section),
103 .op_code = NVM_WRITE_OPCODE,
104 };
105 struct iwl_host_cmd cmd = {
106 .id = NVM_ACCESS_CMD,
107 .len = { sizeof(struct iwl_nvm_access_cmd), length },
108 .flags = CMD_WANT_SKB | CMD_SEND_IN_RFKILL,
109 .data = { &nvm_access_cmd, data },
110 /* data may come from vmalloc, so use _DUP */
111 .dataflags = { 0, IWL_HCMD_DFL_DUP },
112 };
113 struct iwl_rx_packet *pkt;
114 struct iwl_nvm_access_resp *nvm_resp;
115 int ret;
116
117 ret = iwl_mvm_send_cmd(mvm, &cmd);
118 if (ret)
119 return ret;
120
121 pkt = cmd.resp_pkt;
122 /* Extract & check NVM write response */
123 nvm_resp = (void *)pkt->data;
124 if (le16_to_cpu(nvm_resp->status) != READ_NVM_CHUNK_SUCCEED) {
125 IWL_ERR(mvm,
126 "NVM access write command failed for section %u (status = 0x%x)\n",
127 section, le16_to_cpu(nvm_resp->status));
128 ret = -EIO;
129 }
130
131 iwl_free_resp(&cmd);
132 return ret;
133}
134
135static int iwl_nvm_read_chunk(struct iwl_mvm *mvm, u16 section,
136 u16 offset, u16 length, u8 *data)
137{
138 struct iwl_nvm_access_cmd nvm_access_cmd = {
139 .offset = cpu_to_le16(offset),
140 .length = cpu_to_le16(length),
141 .type = cpu_to_le16(section),
142 .op_code = NVM_READ_OPCODE,
143 };
144 struct iwl_nvm_access_resp *nvm_resp;
145 struct iwl_rx_packet *pkt;
146 struct iwl_host_cmd cmd = {
147 .id = NVM_ACCESS_CMD,
148 .flags = CMD_WANT_SKB | CMD_SEND_IN_RFKILL,
149 .data = { &nvm_access_cmd, },
150 };
151 int ret, bytes_read, offset_read;
152 u8 *resp_data;
153
154 cmd.len[0] = sizeof(struct iwl_nvm_access_cmd);
155
156 ret = iwl_mvm_send_cmd(mvm, &cmd);
157 if (ret)
158 return ret;
159
160 pkt = cmd.resp_pkt;
161
162 /* Extract NVM response */
163 nvm_resp = (void *)pkt->data;
164 ret = le16_to_cpu(nvm_resp->status);
165 bytes_read = le16_to_cpu(nvm_resp->length);
166 offset_read = le16_to_cpu(nvm_resp->offset);
167 resp_data = nvm_resp->data;
168 if (ret) {
169 if ((offset != 0) &&
170 (ret == READ_NVM_CHUNK_NOT_VALID_ADDRESS)) {
171 /*
172 * meaning of NOT_VALID_ADDRESS:
173 * driver try to read chunk from address that is
174 * multiple of 2K and got an error since addr is empty.
175 * meaning of (offset != 0): driver already
176 * read valid data from another chunk so this case
177 * is not an error.
178 */
179 IWL_DEBUG_EEPROM(mvm->trans->dev,
180 "NVM access command failed on offset 0x%x since that section size is multiple 2K\n",
181 offset);
182 ret = 0;
183 } else {
184 IWL_DEBUG_EEPROM(mvm->trans->dev,
185 "NVM access command failed with status %d (device: %s)\n",
186 ret, mvm->cfg->name);
187 ret = -EIO;
188 }
189 goto exit;
190 }
191
192 if (offset_read != offset) {
193 IWL_ERR(mvm, "NVM ACCESS response with invalid offset %d\n",
194 offset_read);
195 ret = -EINVAL;
196 goto exit;
197 }
198
199 /* Write data to NVM */
200 memcpy(data + offset, resp_data, bytes_read);
201 ret = bytes_read;
202
203exit:
204 iwl_free_resp(&cmd);
205 return ret;
206}
207
208static int iwl_nvm_write_section(struct iwl_mvm *mvm, u16 section,
209 const u8 *data, u16 length)
210{
211 int offset = 0;
212
213 /* copy data in chunks of 2k (and remainder if any) */
214
215 while (offset < length) {
216 int chunk_size, ret;
217
218 chunk_size = min(IWL_NVM_DEFAULT_CHUNK_SIZE,
219 length - offset);
220
221 ret = iwl_nvm_write_chunk(mvm, section, offset,
222 chunk_size, data + offset);
223 if (ret < 0)
224 return ret;
225
226 offset += chunk_size;
227 }
228
229 return 0;
230}
231
232static void iwl_mvm_nvm_fixups(struct iwl_mvm *mvm, unsigned int section,
233 u8 *data, unsigned int len)
234{
235#define IWL_4165_DEVICE_ID 0x5501
236#define NVM_SKU_CAP_MIMO_DISABLE BIT(5)
237
238 if (section == NVM_SECTION_TYPE_PHY_SKU &&
239 mvm->trans->hw_id == IWL_4165_DEVICE_ID && data && len >= 5 &&
240 (data[4] & NVM_SKU_CAP_MIMO_DISABLE))
241 /* OTP 0x52 bug work around: it's a 1x1 device */
242 data[3] = ANT_B | (ANT_B << 4);
243}
244
245/*
246 * Reads an NVM section completely.
247 * NICs prior to 7000 family doesn't have a real NVM, but just read
248 * section 0 which is the EEPROM. Because the EEPROM reading is unlimited
249 * by uCode, we need to manually check in this case that we don't
250 * overflow and try to read more than the EEPROM size.
251 * For 7000 family NICs, we supply the maximal size we can read, and
252 * the uCode fills the response with as much data as we can,
253 * without overflowing, so no check is needed.
254 */
255static int iwl_nvm_read_section(struct iwl_mvm *mvm, u16 section,
256 u8 *data, u32 size_read)
257{
258 u16 length, offset = 0;
259 int ret;
260
261 /* Set nvm section read length */
262 length = IWL_NVM_DEFAULT_CHUNK_SIZE;
263
264 ret = length;
265
266 /* Read the NVM until exhausted (reading less than requested) */
267 while (ret == length) {
268 /* Check no memory assumptions fail and cause an overflow */
269 if ((size_read + offset + length) >
270 mvm->cfg->base_params->eeprom_size) {
271 IWL_ERR(mvm, "EEPROM size is too small for NVM\n");
272 return -ENOBUFS;
273 }
274
275 ret = iwl_nvm_read_chunk(mvm, section, offset, length, data);
276 if (ret < 0) {
277 IWL_DEBUG_EEPROM(mvm->trans->dev,
278 "Cannot read NVM from section %d offset %d, length %d\n",
279 section, offset, length);
280 return ret;
281 }
282 offset += ret;
283 }
284
285 iwl_mvm_nvm_fixups(mvm, section, data, offset);
286
287 IWL_DEBUG_EEPROM(mvm->trans->dev,
288 "NVM section %d read completed\n", section);
289 return offset;
290}
291
292static struct iwl_nvm_data *
293iwl_parse_nvm_sections(struct iwl_mvm *mvm)
294{
295 struct iwl_nvm_section *sections = mvm->nvm_sections;
296 const __be16 *hw;
297 const __le16 *sw, *calib, *regulatory, *mac_override, *phy_sku;
298 bool lar_enabled;
299 int regulatory_type;
300
301 /* Checking for required sections */
302 if (mvm->trans->cfg->nvm_type != IWL_NVM_EXT) {
303 if (!mvm->nvm_sections[NVM_SECTION_TYPE_SW].data ||
304 !mvm->nvm_sections[mvm->cfg->nvm_hw_section_num].data) {
305 IWL_ERR(mvm, "Can't parse empty OTP/NVM sections\n");
306 return NULL;
307 }
308 } else {
309 if (mvm->trans->cfg->nvm_type == IWL_NVM_SDP)
310 regulatory_type = NVM_SECTION_TYPE_REGULATORY_SDP;
311 else
312 regulatory_type = NVM_SECTION_TYPE_REGULATORY;
313
314 /* SW and REGULATORY sections are mandatory */
315 if (!mvm->nvm_sections[NVM_SECTION_TYPE_SW].data ||
316 !mvm->nvm_sections[regulatory_type].data) {
317 IWL_ERR(mvm,
318 "Can't parse empty family 8000 OTP/NVM sections\n");
319 return NULL;
320 }
321 /* MAC_OVERRIDE or at least HW section must exist */
322 if (!mvm->nvm_sections[mvm->cfg->nvm_hw_section_num].data &&
323 !mvm->nvm_sections[NVM_SECTION_TYPE_MAC_OVERRIDE].data) {
324 IWL_ERR(mvm,
325 "Can't parse mac_address, empty sections\n");
326 return NULL;
327 }
328
329 /* PHY_SKU section is mandatory in B0 */
330 if (!mvm->nvm_sections[NVM_SECTION_TYPE_PHY_SKU].data) {
331 IWL_ERR(mvm,
332 "Can't parse phy_sku in B0, empty sections\n");
333 return NULL;
334 }
335 }
336
337 hw = (const __be16 *)sections[mvm->cfg->nvm_hw_section_num].data;
338 sw = (const __le16 *)sections[NVM_SECTION_TYPE_SW].data;
339 calib = (const __le16 *)sections[NVM_SECTION_TYPE_CALIBRATION].data;
340 mac_override =
341 (const __le16 *)sections[NVM_SECTION_TYPE_MAC_OVERRIDE].data;
342 phy_sku = (const __le16 *)sections[NVM_SECTION_TYPE_PHY_SKU].data;
343
344 regulatory = mvm->trans->cfg->nvm_type == IWL_NVM_SDP ?
345 (const __le16 *)sections[NVM_SECTION_TYPE_REGULATORY_SDP].data :
346 (const __le16 *)sections[NVM_SECTION_TYPE_REGULATORY].data;
347
348 lar_enabled = !iwlwifi_mod_params.lar_disable &&
349 fw_has_capa(&mvm->fw->ucode_capa,
350 IWL_UCODE_TLV_CAPA_LAR_SUPPORT);
351
352 return iwl_parse_nvm_data(mvm->trans, mvm->cfg, hw, sw, calib,
353 regulatory, mac_override, phy_sku,
354 mvm->fw->valid_tx_ant, mvm->fw->valid_rx_ant,
355 lar_enabled);
356}
357
358#define MAX_NVM_FILE_LEN 16384
359
360/*
361 * Reads external NVM from a file into mvm->nvm_sections
362 *
363 * HOW TO CREATE THE NVM FILE FORMAT:
364 * ------------------------------
365 * 1. create hex file, format:
366 * 3800 -> header
367 * 0000 -> header
368 * 5a40 -> data
369 *
370 * rev - 6 bit (word1)
371 * len - 10 bit (word1)
372 * id - 4 bit (word2)
373 * rsv - 12 bit (word2)
374 *
375 * 2. flip 8bits with 8 bits per line to get the right NVM file format
376 *
377 * 3. create binary file from the hex file
378 *
379 * 4. save as "iNVM_xxx.bin" under /lib/firmware
380 */
381int iwl_mvm_read_external_nvm(struct iwl_mvm *mvm)
382{
383 int ret, section_size;
384 u16 section_id;
385 const struct firmware *fw_entry;
386 const struct {
387 __le16 word1;
388 __le16 word2;
389 u8 data[];
390 } *file_sec;
391 const u8 *eof;
392 u8 *temp;
393 int max_section_size;
394 const __le32 *dword_buff;
395
396#define NVM_WORD1_LEN(x) (8 * (x & 0x03FF))
397#define NVM_WORD2_ID(x) (x >> 12)
398#define EXT_NVM_WORD2_LEN(x) (2 * (((x) & 0xFF) << 8 | (x) >> 8))
399#define EXT_NVM_WORD1_ID(x) ((x) >> 4)
400#define NVM_HEADER_0 (0x2A504C54)
401#define NVM_HEADER_1 (0x4E564D2A)
402#define NVM_HEADER_SIZE (4 * sizeof(u32))
403
404 IWL_DEBUG_EEPROM(mvm->trans->dev, "Read from external NVM\n");
405
406 /* Maximal size depends on NVM version */
407 if (mvm->trans->cfg->nvm_type != IWL_NVM_EXT)
408 max_section_size = IWL_MAX_NVM_SECTION_SIZE;
409 else
410 max_section_size = IWL_MAX_EXT_NVM_SECTION_SIZE;
411
412 /*
413 * Obtain NVM image via request_firmware. Since we already used
414 * request_firmware_nowait() for the firmware binary load and only
415 * get here after that we assume the NVM request can be satisfied
416 * synchronously.
417 */
418 ret = request_firmware(&fw_entry, mvm->nvm_file_name,
419 mvm->trans->dev);
420 if (ret) {
421 IWL_ERR(mvm, "ERROR: %s isn't available %d\n",
422 mvm->nvm_file_name, ret);
423 return ret;
424 }
425
426 IWL_INFO(mvm, "Loaded NVM file %s (%zu bytes)\n",
427 mvm->nvm_file_name, fw_entry->size);
428
429 if (fw_entry->size > MAX_NVM_FILE_LEN) {
430 IWL_ERR(mvm, "NVM file too large\n");
431 ret = -EINVAL;
432 goto out;
433 }
434
435 eof = fw_entry->data + fw_entry->size;
436 dword_buff = (__le32 *)fw_entry->data;
437
438 /* some NVM file will contain a header.
439 * The header is identified by 2 dwords header as follow:
440 * dword[0] = 0x2A504C54
441 * dword[1] = 0x4E564D2A
442 *
443 * This header must be skipped when providing the NVM data to the FW.
444 */
445 if (fw_entry->size > NVM_HEADER_SIZE &&
446 dword_buff[0] == cpu_to_le32(NVM_HEADER_0) &&
447 dword_buff[1] == cpu_to_le32(NVM_HEADER_1)) {
448 file_sec = (void *)(fw_entry->data + NVM_HEADER_SIZE);
449 IWL_INFO(mvm, "NVM Version %08X\n", le32_to_cpu(dword_buff[2]));
450 IWL_INFO(mvm, "NVM Manufacturing date %08X\n",
451 le32_to_cpu(dword_buff[3]));
452
453 /* nvm file validation, dword_buff[2] holds the file version */
454 if (mvm->trans->cfg->device_family == IWL_DEVICE_FAMILY_8000 &&
455 CSR_HW_REV_STEP(mvm->trans->hw_rev) == SILICON_C_STEP &&
456 le32_to_cpu(dword_buff[2]) < 0xE4A) {
457 ret = -EFAULT;
458 goto out;
459 }
460 } else {
461 file_sec = (void *)fw_entry->data;
462 }
463
464 while (true) {
465 if (file_sec->data > eof) {
466 IWL_ERR(mvm,
467 "ERROR - NVM file too short for section header\n");
468 ret = -EINVAL;
469 break;
470 }
471
472 /* check for EOF marker */
473 if (!file_sec->word1 && !file_sec->word2) {
474 ret = 0;
475 break;
476 }
477
478 if (mvm->trans->cfg->nvm_type != IWL_NVM_EXT) {
479 section_size =
480 2 * NVM_WORD1_LEN(le16_to_cpu(file_sec->word1));
481 section_id = NVM_WORD2_ID(le16_to_cpu(file_sec->word2));
482 } else {
483 section_size = 2 * EXT_NVM_WORD2_LEN(
484 le16_to_cpu(file_sec->word2));
485 section_id = EXT_NVM_WORD1_ID(
486 le16_to_cpu(file_sec->word1));
487 }
488
489 if (section_size > max_section_size) {
490 IWL_ERR(mvm, "ERROR - section too large (%d)\n",
491 section_size);
492 ret = -EINVAL;
493 break;
494 }
495
496 if (!section_size) {
497 IWL_ERR(mvm, "ERROR - section empty\n");
498 ret = -EINVAL;
499 break;
500 }
501
502 if (file_sec->data + section_size > eof) {
503 IWL_ERR(mvm,
504 "ERROR - NVM file too short for section (%d bytes)\n",
505 section_size);
506 ret = -EINVAL;
507 break;
508 }
509
510 if (WARN(section_id >= NVM_MAX_NUM_SECTIONS,
511 "Invalid NVM section ID %d\n", section_id)) {
512 ret = -EINVAL;
513 break;
514 }
515
516 temp = kmemdup(file_sec->data, section_size, GFP_KERNEL);
517 if (!temp) {
518 ret = -ENOMEM;
519 break;
520 }
521
522 iwl_mvm_nvm_fixups(mvm, section_id, temp, section_size);
523
524 kfree(mvm->nvm_sections[section_id].data);
525 mvm->nvm_sections[section_id].data = temp;
526 mvm->nvm_sections[section_id].length = section_size;
527
528 /* advance to the next section */
529 file_sec = (void *)(file_sec->data + section_size);
530 }
531out:
532 release_firmware(fw_entry);
533 return ret;
534}
535
536/* Loads the NVM data stored in mvm->nvm_sections into the NIC */
537int iwl_mvm_load_nvm_to_nic(struct iwl_mvm *mvm)
538{
539 int i, ret = 0;
540 struct iwl_nvm_section *sections = mvm->nvm_sections;
541
542 IWL_DEBUG_EEPROM(mvm->trans->dev, "'Write to NVM\n");
543
544 for (i = 0; i < ARRAY_SIZE(mvm->nvm_sections); i++) {
545 if (!mvm->nvm_sections[i].data || !mvm->nvm_sections[i].length)
546 continue;
547 ret = iwl_nvm_write_section(mvm, i, sections[i].data,
548 sections[i].length);
549 if (ret < 0) {
550 IWL_ERR(mvm, "iwl_mvm_send_cmd failed: %d\n", ret);
551 break;
552 }
553 }
554 return ret;
555}
556
557int iwl_nvm_init(struct iwl_mvm *mvm)
558{
559 int ret, section;
560 u32 size_read = 0;
561 u8 *nvm_buffer, *temp;
562 const char *nvm_file_C = mvm->cfg->default_nvm_file_C_step;
563
564 if (WARN_ON_ONCE(mvm->cfg->nvm_hw_section_num >= NVM_MAX_NUM_SECTIONS))
565 return -EINVAL;
566
567 /* load NVM values from nic */
568 /* Read From FW NVM */
569 IWL_DEBUG_EEPROM(mvm->trans->dev, "Read from NVM\n");
570
571 nvm_buffer = kmalloc(mvm->cfg->base_params->eeprom_size,
572 GFP_KERNEL);
573 if (!nvm_buffer)
574 return -ENOMEM;
575 for (section = 0; section < NVM_MAX_NUM_SECTIONS; section++) {
576 /* we override the constness for initial read */
577 ret = iwl_nvm_read_section(mvm, section, nvm_buffer,
578 size_read);
579 if (ret < 0)
580 continue;
581 size_read += ret;
582 temp = kmemdup(nvm_buffer, ret, GFP_KERNEL);
583 if (!temp) {
584 ret = -ENOMEM;
585 break;
586 }
587
588 iwl_mvm_nvm_fixups(mvm, section, temp, ret);
589
590 mvm->nvm_sections[section].data = temp;
591 mvm->nvm_sections[section].length = ret;
592
593#ifdef CONFIG_IWLWIFI_DEBUGFS
594 switch (section) {
595 case NVM_SECTION_TYPE_SW:
596 mvm->nvm_sw_blob.data = temp;
597 mvm->nvm_sw_blob.size = ret;
598 break;
599 case NVM_SECTION_TYPE_CALIBRATION:
600 mvm->nvm_calib_blob.data = temp;
601 mvm->nvm_calib_blob.size = ret;
602 break;
603 case NVM_SECTION_TYPE_PRODUCTION:
604 mvm->nvm_prod_blob.data = temp;
605 mvm->nvm_prod_blob.size = ret;
606 break;
607 case NVM_SECTION_TYPE_PHY_SKU:
608 mvm->nvm_phy_sku_blob.data = temp;
609 mvm->nvm_phy_sku_blob.size = ret;
610 break;
611 default:
612 if (section == mvm->cfg->nvm_hw_section_num) {
613 mvm->nvm_hw_blob.data = temp;
614 mvm->nvm_hw_blob.size = ret;
615 break;
616 }
617 }
618#endif
619 }
620 if (!size_read)
621 IWL_ERR(mvm, "OTP is blank\n");
622 kfree(nvm_buffer);
623
624 /* Only if PNVM selected in the mod param - load external NVM */
625 if (mvm->nvm_file_name) {
626 /* read External NVM file from the mod param */
627 ret = iwl_mvm_read_external_nvm(mvm);
628 if (ret) {
629 mvm->nvm_file_name = nvm_file_C;
630
631 if ((ret == -EFAULT || ret == -ENOENT) &&
632 mvm->nvm_file_name) {
633 /* in case nvm file was failed try again */
634 ret = iwl_mvm_read_external_nvm(mvm);
635 if (ret)
636 return ret;
637 } else {
638 return ret;
639 }
640 }
641 }
642
643 /* parse the relevant nvm sections */
644 mvm->nvm_data = iwl_parse_nvm_sections(mvm);
645 if (!mvm->nvm_data)
646 return -ENODATA;
647 IWL_DEBUG_EEPROM(mvm->trans->dev, "nvm version = %x\n",
648 mvm->nvm_data->nvm_version);
649
650 return 0;
651}
652
653struct iwl_mcc_update_resp *
654iwl_mvm_update_mcc(struct iwl_mvm *mvm, const char *alpha2,
655 enum iwl_mcc_source src_id)
656{
657 struct iwl_mcc_update_cmd mcc_update_cmd = {
658 .mcc = cpu_to_le16(alpha2[0] << 8 | alpha2[1]),
659 .source_id = (u8)src_id,
660 };
661 struct iwl_mcc_update_resp *resp_cp;
662 struct iwl_rx_packet *pkt;
663 struct iwl_host_cmd cmd = {
664 .id = MCC_UPDATE_CMD,
665 .flags = CMD_WANT_SKB,
666 .data = { &mcc_update_cmd },
667 };
668
669 int ret;
670 u32 status;
671 int resp_len, n_channels;
672 u16 mcc;
673 bool resp_v2 = fw_has_capa(&mvm->fw->ucode_capa,
674 IWL_UCODE_TLV_CAPA_LAR_SUPPORT_V2);
675
676 if (WARN_ON_ONCE(!iwl_mvm_is_lar_supported(mvm)))
677 return ERR_PTR(-EOPNOTSUPP);
678
679 cmd.len[0] = sizeof(struct iwl_mcc_update_cmd);
680 if (!resp_v2)
681 cmd.len[0] = sizeof(struct iwl_mcc_update_cmd_v1);
682
683 IWL_DEBUG_LAR(mvm, "send MCC update to FW with '%c%c' src = %d\n",
684 alpha2[0], alpha2[1], src_id);
685
686 ret = iwl_mvm_send_cmd(mvm, &cmd);
687 if (ret)
688 return ERR_PTR(ret);
689
690 pkt = cmd.resp_pkt;
691
692 /* Extract MCC response */
693 if (resp_v2) {
694 struct iwl_mcc_update_resp *mcc_resp = (void *)pkt->data;
695
696 n_channels = __le32_to_cpu(mcc_resp->n_channels);
697 resp_len = sizeof(struct iwl_mcc_update_resp) +
698 n_channels * sizeof(__le32);
699 resp_cp = kmemdup(mcc_resp, resp_len, GFP_KERNEL);
700 if (!resp_cp) {
701 resp_cp = ERR_PTR(-ENOMEM);
702 goto exit;
703 }
704 } else {
705 struct iwl_mcc_update_resp_v1 *mcc_resp_v1 = (void *)pkt->data;
706
707 n_channels = __le32_to_cpu(mcc_resp_v1->n_channels);
708 resp_len = sizeof(struct iwl_mcc_update_resp) +
709 n_channels * sizeof(__le32);
710 resp_cp = kzalloc(resp_len, GFP_KERNEL);
711 if (!resp_cp) {
712 resp_cp = ERR_PTR(-ENOMEM);
713 goto exit;
714 }
715
716 resp_cp->status = mcc_resp_v1->status;
717 resp_cp->mcc = mcc_resp_v1->mcc;
718 resp_cp->cap = mcc_resp_v1->cap;
719 resp_cp->source_id = mcc_resp_v1->source_id;
720 resp_cp->n_channels = mcc_resp_v1->n_channels;
721 memcpy(resp_cp->channels, mcc_resp_v1->channels,
722 n_channels * sizeof(__le32));
723 }
724
725 status = le32_to_cpu(resp_cp->status);
726
727 mcc = le16_to_cpu(resp_cp->mcc);
728
729 /* W/A for a FW/NVM issue - returns 0x00 for the world domain */
730 if (mcc == 0) {
731 mcc = 0x3030; /* "00" - world */
732 resp_cp->mcc = cpu_to_le16(mcc);
733 }
734
735 IWL_DEBUG_LAR(mvm,
736 "MCC response status: 0x%x. new MCC: 0x%x ('%c%c') change: %d n_chans: %d\n",
737 status, mcc, mcc >> 8, mcc & 0xff,
738 !!(status == MCC_RESP_NEW_CHAN_PROFILE), n_channels);
739
740exit:
741 iwl_free_resp(&cmd);
742 return resp_cp;
743}
744
745int iwl_mvm_init_mcc(struct iwl_mvm *mvm)
746{
747 bool tlv_lar;
748 bool nvm_lar;
749 int retval;
750 struct ieee80211_regdomain *regd;
751 char mcc[3];
752
753 if (mvm->cfg->nvm_type == IWL_NVM_EXT) {
754 tlv_lar = fw_has_capa(&mvm->fw->ucode_capa,
755 IWL_UCODE_TLV_CAPA_LAR_SUPPORT);
756 nvm_lar = mvm->nvm_data->lar_enabled;
757 if (tlv_lar != nvm_lar)
758 IWL_INFO(mvm,
759 "Conflict between TLV & NVM regarding enabling LAR (TLV = %s NVM =%s)\n",
760 tlv_lar ? "enabled" : "disabled",
761 nvm_lar ? "enabled" : "disabled");
762 }
763
764 if (!iwl_mvm_is_lar_supported(mvm))
765 return 0;
766
767 /*
768 * try to replay the last set MCC to FW. If it doesn't exist,
769 * queue an update to cfg80211 to retrieve the default alpha2 from FW.
770 */
771 retval = iwl_mvm_init_fw_regd(mvm);
772 if (retval != -ENOENT)
773 return retval;
774
775 /*
776 * Driver regulatory hint for initial update, this also informs the
777 * firmware we support wifi location updates.
778 * Disallow scans that might crash the FW while the LAR regdomain
779 * is not set.
780 */
781 mvm->lar_regdom_set = false;
782
783 regd = iwl_mvm_get_current_regdomain(mvm, NULL);
784 if (IS_ERR_OR_NULL(regd))
785 return -EIO;
786
787 if (iwl_mvm_is_wifi_mcc_supported(mvm) &&
788 !iwl_acpi_get_mcc(mvm->dev, mcc)) {
789 kfree(regd);
790 regd = iwl_mvm_get_regdomain(mvm->hw->wiphy, mcc,
791 MCC_SOURCE_BIOS, NULL);
792 if (IS_ERR_OR_NULL(regd))
793 return -EIO;
794 }
795
796 retval = regulatory_set_wiphy_regd_sync_rtnl(mvm->hw->wiphy, regd);
797 kfree(regd);
798 return retval;
799}
800
801void iwl_mvm_rx_chub_update_mcc(struct iwl_mvm *mvm,
802 struct iwl_rx_cmd_buffer *rxb)
803{
804 struct iwl_rx_packet *pkt = rxb_addr(rxb);
805 struct iwl_mcc_chub_notif *notif = (void *)pkt->data;
806 enum iwl_mcc_source src;
807 char mcc[3];
808 struct ieee80211_regdomain *regd;
809
810 lockdep_assert_held(&mvm->mutex);
811
812 if (iwl_mvm_is_vif_assoc(mvm) && notif->source_id == MCC_SOURCE_WIFI) {
813 IWL_DEBUG_LAR(mvm, "Ignore mcc update while associated\n");
814 return;
815 }
816
817 if (WARN_ON_ONCE(!iwl_mvm_is_lar_supported(mvm)))
818 return;
819
820 mcc[0] = le16_to_cpu(notif->mcc) >> 8;
821 mcc[1] = le16_to_cpu(notif->mcc) & 0xff;
822 mcc[2] = '\0';
823 src = notif->source_id;
824
825 IWL_DEBUG_LAR(mvm,
826 "RX: received chub update mcc cmd (mcc '%s' src %d)\n",
827 mcc, src);
828 regd = iwl_mvm_get_regdomain(mvm->hw->wiphy, mcc, src, NULL);
829 if (IS_ERR_OR_NULL(regd))
830 return;
831
832 regulatory_set_wiphy_regd(mvm->hw->wiphy, regd);
833 kfree(regd);
834}